From f8692c6be11c664e4345ceaaec5c6b35ba9b3feb Mon Sep 17 00:00:00 2001
From: Toni Uhlig <matzeton@googlemail.com>
Date: Thu, 19 Nov 2020 19:34:11 +0100
Subject: Let travis use pcap files from nDPI to produce some JSON output.
 (disabled, needs further testing..)

 * Added pcap diff script
 * Added \n to JSON string end (useful for debugging and readability)
 * Use first host/server name character for hash calculation as well
 * Removed error'ing EPOLLHUP handling in nDPIsrvd (connection closing will be detected via read())

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
---
 tests/README.md                                    |    6 +
 tests/do.sh                                        |   60 +
 tests/out/nDPId_1kxun.pcap.txt                     |    6 +
 tests/out/nDPId_443-chrome.pcap.txt                |    6 +
 tests/out/nDPId_443-curl.pcap.txt                  |    6 +
 tests/out/nDPId_443-firefox.pcap.txt               |    6 +
 tests/out/nDPId_443-git.pcap.txt                   |    6 +
 tests/out/nDPId_443-opvn.pcap.txt                  |    6 +
 tests/out/nDPId_443-safari.pcap.txt                |    6 +
 tests/out/nDPId_4in4tunnel.pcap.txt                |    6 +
 tests/out/nDPId_4in6tunnel.pcap.txt                |    6 +
 tests/out/nDPId_6in4tunnel.pcap.txt                |    6 +
 tests/out/nDPId_6in6tunnel.pcap.txt                |    6 +
 tests/out/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt      |    6 +
 tests/out/nDPId_BGP_redist.pcap.txt                |    6 +
 tests/out/nDPId_EAQ.pcap.txt                       |    6 +
 tests/out/nDPId_KakaoTalk_chat.pcap.txt            |    6 +
 tests/out/nDPId_KakaoTalk_talk.pcap.txt            |    6 +
 tests/out/nDPId_NTPv2.pcap.txt                     |    6 +
 tests/out/nDPId_NTPv3.pcap.txt                     |    6 +
 tests/out/nDPId_NTPv4.pcap.txt                     |    6 +
 tests/out/nDPId_Oscar.pcap.txt                     |    6 +
 tests/out/nDPId_WebattackRCE.pcap.txt              |    6 +
 tests/out/nDPId_WebattackSQLinj.pcap.txt           |    6 +
 tests/out/nDPId_WebattackXSS.pcap.txt              |    6 +
 tests/out/nDPId_ajp.pcap.txt                       |    6 +
 tests/out/nDPId_alexa-app.pcapng.txt               |    6 +
 tests/out/nDPId_among_us.pcap.txt                  |    6 +
 tests/out/nDPId_amqp.pcap.txt                      |    6 +
 tests/out/nDPId_android.pcap.txt                   |    6 +
 tests/out/nDPId_anyconnect-vpn.pcap.txt            |    6 +
 tests/out/nDPId_anydesk.pcap.txt                   |    6 +
 tests/out/nDPId_bad-dns-traffic.pcap.txt           |    6 +
 tests/out/nDPId_badpackets.pcap.txt                |    6 +
 tests/out/nDPId_bitcoin.pcap.txt                   |    6 +
 tests/out/nDPId_bittorrent.pcap.txt                |    6 +
 tests/out/nDPId_bittorrent_ip.pcap.txt             |    6 +
 tests/out/nDPId_bittorrent_utp.pcap.txt            |    6 +
 tests/out/nDPId_bt_search.pcap.txt                 |    6 +
 tests/out/nDPId_capwap.pcap.txt                    |    6 +
 tests/out/nDPId_check_mk_new.pcap.txt              |    6 +
 tests/out/nDPId_coap_mqtt.pcap.txt                 |    6 +
 tests/out/nDPId_cpha.pcap.txt                      |    6 +
 tests/out/nDPId_diameter.pcap.txt                  |    6 +
 tests/out/nDPId_dlt_ppp.pcap.txt                   |    6 +
 tests/out/nDPId_dnp3.pcap.txt                      |    6 +
 tests/out/nDPId_dns-tunnel-iodine.pcap.txt         |    6 +
 tests/out/nDPId_dns_doh.pcap.txt                   |    6 +
 tests/out/nDPId_dns_dot.pcap.txt                   |    6 +
 tests/out/nDPId_dns_exfiltration.pcap.txt          |    6 +
 tests/out/nDPId_dns_long_domainname.pcap.txt       |    6 +
 .../nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt  |    6 +
 tests/out/nDPId_dnscrypt-v2-doh.pcap.txt           |    6 +
 tests/out/nDPId_dos_win98_smb_netbeui.pcap.txt     |    6 +
 tests/out/nDPId_drda_db2.pcap.txt                  |    6 +
 tests/out/nDPId_dropbox.pcap.txt                   |    6 +
 tests/out/nDPId_dtls.pcap.txt                      |    6 +
 tests/out/nDPId_encrypted_sni.pcap.txt             |    6 +
 tests/out/nDPId_ethereum.pcap.txt                  |    6 +
 tests/out/nDPId_exe_download.pcap.txt              |    6 +
 tests/out/nDPId_exe_download_as_png.pcap.txt       |    6 +
 tests/out/nDPId_facebook.pcap.txt                  |    6 +
 .../out/nDPId_fbzero-missing-lengthcheck.pcap.txt  |    6 +
 tests/out/nDPId_fix.pcap.txt                       |    6 +
 tests/out/nDPId_ftp.pcap.txt                       |    6 +
 tests/out/nDPId_ftp_failed.pcap.txt                |    6 +
 tests/out/nDPId_fuzz-2006-06-26-2594.pcap.txt      |    6 +
 tests/out/nDPId_fuzz-2006-09-29-28586.pcap.txt     |    6 +
 tests/out/nDPId_fuzz-2020-02-16-11740.pcap.txt     |    6 +
 tests/out/nDPId_git.pcap.txt                       |    6 +
 tests/out/nDPId_google_ssl.pcap.txt                |    6 +
 tests/out/nDPId_googledns_android10.pcap.txt       |    6 +
 tests/out/nDPId_gquic.pcap.txt                     |    6 +
 tests/out/nDPId_h323-overflow.pcap.txt             |    6 +
 tests/out/nDPId_hangout.pcap.txt                   |    6 +
 .../nDPId_http-crash-content-disposition.pcap.txt  |    6 +
 tests/out/nDPId_http-lines-split.pcap.txt          |    6 +
 tests/out/nDPId_http_ipv6.pcap.txt                 |    6 +
 tests/out/nDPId_iec60780-5-104.pcap.txt            |    6 +
 tests/out/nDPId_imaps.pcap.txt                     |    6 +
 tests/out/nDPId_instagram.pcap.txt                 |    6 +
 tests/out/nDPId_iphone.pcap.txt                    |    6 +
 tests/out/nDPId_ipv6_in_gtp.pcap.txt               |    6 +
 tests/out/nDPId_ja3_lots_of_cipher_suites.pcap.txt |    6 +
 ...nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt |    6 +
 tests/out/nDPId_kerberos.pcap.txt                  |    6 +
 tests/out/nDPId_malformed_dns.pcap.txt             |    6 +
 tests/out/nDPId_malformed_icmp.pcap.txt            |    6 +
 tests/out/nDPId_malware.pcap.txt                   |    6 +
 tests/out/nDPId_modbus.pcap.txt                    |    6 +
 tests/out/nDPId_monero.pcap.txt                    |    6 +
 tests/out/nDPId_mongodb.pcap.txt                   |    6 +
 tests/out/nDPId_mpeg.pcap.txt                      |    6 +
 tests/out/nDPId_mpegts.pcap.txt                    |    6 +
 tests/out/nDPId_mssql_tds.pcap.txt                 |    6 +
 tests/out/nDPId_mysql-8.pcap.txt                   |    6 +
 tests/out/nDPId_nats.pcap.txt                      |    6 +
 tests/out/nDPId_nest_log_sink.pcap.txt             |    6 +
 tests/out/nDPId_netbios.pcap.txt                   |    6 +
 .../out/nDPId_netbios_wildcard_dns_query.pcap.txt  |    6 +
 tests/out/nDPId_netflix.pcap.txt                   |    6 +
 tests/out/nDPId_netflow-fritz.pcap.txt             |    6 +
 tests/out/nDPId_netflowv9.pcap.txt                 |    6 +
 tests/out/nDPId_nintendo.pcap.txt                  |    6 +
 tests/out/nDPId_no_sni.pcap.txt                    |    6 +
 tests/out/nDPId_ocs.pcap.txt                       |    6 +
 tests/out/nDPId_ookla.pcap.txt                     |    6 +
 tests/out/nDPId_openvpn.pcap.txt                   |    6 +
 tests/out/nDPId_pinterest.pcap.txt                 |    6 +
 tests/out/nDPId_pps.pcap.txt                       |    6 +
 tests/out/nDPId_ps_vue.pcap.txt                    |    6 +
 tests/out/nDPId_quic-23.pcap.txt                   |    6 +
 tests/out/nDPId_quic-24.pcap.txt                   |    6 +
 tests/out/nDPId_quic-27.pcap.txt                   |    6 +
 tests/out/nDPId_quic-28.pcap.txt                   |    6 +
 tests/out/nDPId_quic-29.pcap.txt                   |    6 +
 tests/out/nDPId_quic-mvfst-22.pcap.txt             |    6 +
 .../nDPId_quic-mvfst-22_decryption_error.pcap.txt  |    6 +
 tests/out/nDPId_quic-mvfst-27.pcap.txt             |    6 +
 tests/out/nDPId_quic-mvfst-exp.pcap.txt            |    6 +
 tests/out/nDPId_quic.pcap.txt                      |    6 +
 tests/out/nDPId_quic046.pcap.txt                   |    6 +
 tests/out/nDPId_quic_0RTT.pcap.txt                 |    6 +
 tests/out/nDPId_quic_q39.pcap.txt                  |    6 +
 tests/out/nDPId_quic_q43.pcap.txt                  |    6 +
 tests/out/nDPId_quic_q46.pcap.txt                  |    6 +
 tests/out/nDPId_quic_q46_b.pcap.txt                |    6 +
 tests/out/nDPId_quic_q50.pcap.txt                  |    6 +
 tests/out/nDPId_quic_t50.pcap.txt                  |    6 +
 tests/out/nDPId_quic_t51.pcap.txt                  |    6 +
 tests/out/nDPId_quickplay.pcap.txt                 |    6 +
 tests/out/nDPId_rdp.pcap.txt                       |    6 +
 tests/out/nDPId_reddit.pcap.txt                    |    6 +
 tests/out/nDPId_rx.pcap.txt                        |    6 +
 tests/out/nDPId_s7comm.pcap.txt                    |    6 +
 tests/out/nDPId_selfsigned.pcap.txt                |    6 +
 tests/out/nDPId_signal.pcap.txt                    |    6 +
 tests/out/nDPId_simple-dnscrypt.pcap.txt           |    6 +
 tests/out/nDPId_sip.pcap.txt                       |    6 +
 tests/out/nDPId_skype-conference-call.pcap.txt     |    6 +
 tests/out/nDPId_skype.pcap.txt                     |    6 +
 tests/out/nDPId_skype_no_unknown.pcap.txt          |    6 +
 tests/out/nDPId_skype_udp.pcap.txt                 |    6 +
 tests/out/nDPId_smb_deletefile.pcap.txt            |    6 +
 tests/out/nDPId_smbv1.pcap.txt                     |    6 +
 tests/out/nDPId_smpp_in_general.pcap.txt           |    6 +
 tests/out/nDPId_snapchat.pcap.txt                  |    6 +
 tests/out/nDPId_ssdp-m-search.pcap.txt             |    6 +
 tests/out/nDPId_ssh.pcap.txt                       |    6 +
 tests/out/nDPId_starcraft_battle.pcap.txt          |    6 +
 tests/out/nDPId_steam.pcap.txt                     |    6 +
 tests/out/nDPId_teams.pcap.txt                     |    6 +
 tests/out/nDPId_teamspeak3.pcap.txt                |    6 +
 tests/out/nDPId_telegram.pcap.txt                  |    6 +
 tests/out/nDPId_teredo.pcap.txt                    |    6 +
 tests/out/nDPId_tftp_rrq.pcap.txt                  |    6 +
 tests/out/nDPId_tinc.pcap.txt                      |    6 +
 tests/out/nDPId_tls-esni-fuzzed.pcap.txt           |    6 +
 tests/out/nDPId_tls-rdn-extract.pcap.txt           |    6 +
 tests/out/nDPId_tls_esni_sni_both.pcap.txt         |    6 +
 tests/out/nDPId_tls_long_cert.pcap.txt             |    6 +
 tests/out/nDPId_tls_verylong_certificate.pcap.txt  |    6 +
 tests/out/nDPId_tor.pcap.txt                       |    6 +
 tests/out/nDPId_tumblr.pcap.txt                    |    6 +
 tests/out/nDPId_ubntac2.pcap.txt                   |    6 +
 tests/out/nDPId_upnp.pcap.txt                      |    6 +
 tests/out/nDPId_viber.pcap.txt                     |    6 +
 tests/out/nDPId_vnc.pcap.txt                       |    6 +
 tests/out/nDPId_wa_video.pcap.txt                  |    6 +
 tests/out/nDPId_wa_voice.pcap.txt                  |    6 +
 tests/out/nDPId_waze.pcap.txt                      |    6 +
 tests/out/nDPId_webex.pcap.txt                     |    6 +
 tests/out/nDPId_websocket.pcap.txt                 |    6 +
 tests/out/nDPId_wechat.pcap.txt                    |    6 +
 tests/out/nDPId_weibo.pcap.txt                     |    6 +
 tests/out/nDPId_whatsapp_login_call.pcap.txt       |    6 +
 tests/out/nDPId_whatsapp_login_chat.pcap.txt       |    6 +
 .../out/nDPId_whatsapp_voice_and_message.pcap.txt  |    6 +
 tests/out/nDPId_whatsappfiles.pcap.txt             |    6 +
 tests/out/nDPId_wireguard.pcap.txt                 |    6 +
 tests/out/nDPId_youtube_quic.pcap.txt              |    6 +
 tests/out/nDPId_youtubeupload.pcap.txt             |    6 +
 tests/out/nDPId_zabbix.pcap.txt                    |    6 +
 tests/out/nDPId_zcash.pcap.txt                     |    6 +
 tests/out/nDPId_zoom.pcap.txt                      |    6 +
 tests/result/nDPId_1kxun.pcap.txt                  | 1108 ++++
 tests/result/nDPId_443-chrome.pcap.txt             |    6 +
 tests/result/nDPId_443-curl.pcap.txt               |   22 +
 tests/result/nDPId_443-firefox.pcap.txt            |   23 +
 tests/result/nDPId_443-git.pcap.txt                |   22 +
 tests/result/nDPId_443-opvn.pcap.txt               |   20 +
 tests/result/nDPId_443-safari.pcap.txt             |   22 +
 tests/result/nDPId_4in4tunnel.pcap.txt             |   12 +
 tests/result/nDPId_4in6tunnel.pcap.txt             |    9 +
 tests/result/nDPId_6in4tunnel.pcap.txt             |   20 +
 tests/result/nDPId_6in6tunnel.pcap.txt             |   10 +
 tests/result/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt   |   30 +
 tests/result/nDPId_BGP_redist.pcap.txt             |    6 +
 tests/result/nDPId_EAQ.pcap.txt                    |  292 +
 tests/result/nDPId_KakaoTalk_chat.pcap.txt         |  696 +++
 tests/result/nDPId_KakaoTalk_talk.pcap.txt         | 6408 ++++++++++++++++++++
 tests/result/nDPId_NTPv2.pcap.txt                  |    6 +
 tests/result/nDPId_NTPv3.pcap.txt                  |    6 +
 tests/result/nDPId_NTPv4.pcap.txt                  |    6 +
 tests/result/nDPId_Oscar.pcap.txt                  |   20 +
 tests/result/nDPId_WebattackRCE.pcap.txt           | 3190 ++++++++++
 tests/result/nDPId_WebattackSQLinj.pcap.txt        |  123 +
 tests/result/nDPId_WebattackXSS.pcap.txt           | 6148 +++++++++++++++++++
 tests/result/nDPId_ajp.pcap.txt                    |   78 +
 tests/result/nDPId_alexa-app.pcapng.txt            | 2367 ++++++++
 tests/result/nDPId_among_us.pcap.txt               |    6 +
 tests/result/nDPId_amqp.pcap.txt                   |   56 +
 tests/result/nDPId_android.pcap.txt                |  630 ++
 tests/result/nDPId_anyconnect-vpn.pcap.txt         |  609 ++
 tests/result/nDPId_anydesk.pcap.txt                |   41 +
 tests/result/nDPId_bad-dns-traffic.pcap.txt        |   71 +
 tests/result/nDPId_badpackets.pcap.txt             |  202 +
 tests/result/nDPId_bitcoin.pcap.txt                |  110 +
 tests/result/nDPId_bittorrent.pcap.txt             |  178 +
 tests/result/nDPId_bittorrent_ip.pcap.txt          |   39 +
 tests/result/nDPId_bittorrent_utp.pcap.txt         |   20 +
 tests/result/nDPId_bt_search.pcap.txt              |    7 +
 tests/result/nDPId_capwap.pcap.txt                 |   72 +
 tests/result/nDPId_check_mk_new.pcap.txt           |   20 +
 tests/result/nDPId_coap_mqtt.pcap.txt              |  189 +
 tests/result/nDPId_cpha.pcap.txt                   |    4 +
 tests/result/nDPId_diameter.pcap.txt               |   11 +
 tests/result/nDPId_dlt_ppp.pcap.txt                |    4 +
 tests/result/nDPId_dnp3.pcap.txt                   |  146 +
 tests/result/nDPId_dns-tunnel-iodine.pcap.txt      |   26 +
 tests/result/nDPId_dns_doh.pcap.txt                |   21 +
 tests/result/nDPId_dns_dot.pcap.txt                |   21 +
 tests/result/nDPId_dns_exfiltration.pcap.txt       |   26 +
 tests/result/nDPId_dns_long_domainname.pcap.txt    |    8 +
 .../nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt  | 1483 +++++
 tests/result/nDPId_dnscrypt-v2-doh.pcap.txt        |  622 ++
 tests/result/nDPId_dos_win98_smb_netbeui.pcap.txt  |  375 ++
 tests/result/nDPId_drda_db2.pcap.txt               |   20 +
 tests/result/nDPId_dropbox.pcap.txt                |  161 +
 tests/result/nDPId_dtls.pcap.txt                   |    7 +
 tests/result/nDPId_encrypted_sni.pcap.txt          |   14 +
 tests/result/nDPId_ethereum.pcap.txt               | 1029 ++++
 tests/result/nDPId_exe_download.pcap.txt           |   21 +
 tests/result/nDPId_exe_download_as_png.pcap.txt    |   21 +
 tests/result/nDPId_facebook.pcap.txt               |   41 +
 .../nDPId_fbzero-missing-lengthcheck.pcap.txt      |    6 +
 tests/result/nDPId_fix.pcap.txt                    |  186 +
 tests/result/nDPId_ftp.pcap.txt                    |   51 +
 tests/result/nDPId_ftp_failed.pcap.txt             |   20 +
 tests/result/nDPId_fuzz-2006-06-26-2594.pcap.txt   | 1433 +++++
 tests/result/nDPId_fuzz-2006-09-29-28586.pcap.txt  |  261 +
 tests/result/nDPId_fuzz-2020-02-16-11740.pcap.txt  |  472 ++
 tests/result/nDPId_git.pcap.txt                    |   20 +
 tests/result/nDPId_google_ssl.pcap.txt             |   20 +
 tests/result/nDPId_googledns_android10.pcap.txt    |  122 +
 tests/result/nDPId_gquic.pcap.txt                  |    6 +
 tests/result/nDPId_h323-overflow.pcap.txt          |    6 +
 tests/result/nDPId_hangout.pcap.txt                |   20 +
 .../nDPId_http-crash-content-disposition.pcap.txt  |   20 +
 tests/result/nDPId_http-lines-split.pcap.txt       |   19 +
 tests/result/nDPId_http_ipv6.pcap.txt              |  184 +
 tests/result/nDPId_iec60780-5-104.pcap.txt         |  108 +
 tests/result/nDPId_imaps.pcap.txt                  |   22 +
 tests/result/nDPId_instagram.pcap.txt              |  505 ++
 tests/result/nDPId_iphone.pcap.txt                 |  498 ++
 tests/result/nDPId_ipv6_in_gtp.pcap.txt            |    6 +
 .../nDPId_ja3_lots_of_cipher_suites.pcap.txt       |   24 +
 ...nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt |   46 +
 tests/result/nDPId_kerberos.pcap.txt               |  187 +
 tests/result/nDPId_malformed_dns.pcap.txt          |   14 +
 tests/result/nDPId_malformed_icmp.pcap.txt         |    6 +
 tests/result/nDPId_malware.pcap.txt                |   41 +
 tests/result/nDPId_modbus.pcap.txt                 |   20 +
 tests/result/nDPId_monero.pcap.txt                 |   38 +
 tests/result/nDPId_mongodb.pcap.txt                |   56 +
 tests/result/nDPId_mpeg.pcap.txt                   |   21 +
 tests/result/nDPId_mpegts.pcap.txt                 |    4 +
 tests/result/nDPId_mssql_tds.pcap.txt              |   74 +
 tests/result/nDPId_mysql-8.pcap.txt                |    9 +
 tests/result/nDPId_nats.pcap.txt                   |   56 +
 tests/result/nDPId_nest_log_sink.pcap.txt          |  273 +
 tests/result/nDPId_netbios.pcap.txt                |   97 +
 .../nDPId_netbios_wildcard_dns_query.pcap.txt      |    6 +
 tests/result/nDPId_netflix.pcap.txt                |  973 +++
 tests/result/nDPId_netflow-fritz.pcap.txt          |    6 +
 tests/result/nDPId_netflowv9.pcap.txt              |   15 +
 tests/result/nDPId_nintendo.pcap.txt               |  272 +
 tests/result/nDPId_no_sni.pcap.txt                 |  147 +
 tests/result/nDPId_ocs.pcap.txt                    | 1894 ++++++
 tests/result/nDPId_ookla.pcap.txt                  |   38 +
 tests/result/nDPId_openvpn.pcap.txt                |   56 +
 tests/result/nDPId_pinterest.pcap.txt              |  494 ++
 tests/result/nDPId_pps.pcap.txt                    |  736 +++
 tests/result/nDPId_ps_vue.pcap.txt                 |   58 +
 tests/result/nDPId_quic-23.pcap.txt                |   20 +
 tests/result/nDPId_quic-24.pcap.txt                |   20 +
 tests/result/nDPId_quic-27.pcap.txt                |   20 +
 tests/result/nDPId_quic-28.pcap.txt                |   20 +
 tests/result/nDPId_quic-29.pcap.txt                |   20 +
 tests/result/nDPId_quic-mvfst-22.pcap.txt          |   20 +
 .../nDPId_quic-mvfst-22_decryption_error.pcap.txt  |  708 +++
 tests/result/nDPId_quic-mvfst-27.pcap.txt          |   20 +
 tests/result/nDPId_quic-mvfst-exp.pcap.txt         |   20 +
 tests/result/nDPId_quic.pcap.txt                   |   98 +
 tests/result/nDPId_quic046.pcap.txt                |   20 +
 tests/result/nDPId_quic_0RTT.pcap.txt              |    7 +
 tests/result/nDPId_quic_interop_V.pcapng.txt       |  479 ++
 tests/result/nDPId_quic_q39.pcap.txt               |   20 +
 tests/result/nDPId_quic_q43.pcap.txt               |    7 +
 tests/result/nDPId_quic_q46.pcap.txt               |   20 +
 tests/result/nDPId_quic_q46_b.pcap.txt             |   20 +
 tests/result/nDPId_quic_q50.pcap.txt               |   20 +
 tests/result/nDPId_quic_t50.pcap.txt               |   17 +
 tests/result/nDPId_quic_t51.pcap.txt               |   20 +
 tests/result/nDPId_quickplay.pcap.txt              |  312 +
 tests/result/nDPId_rdp.pcap.txt                    | 4022 ++++++++++++
 tests/result/nDPId_reddit.pcap.txt                 | 1159 ++++
 tests/result/nDPId_rx.pcap.txt                     |   68 +
 tests/result/nDPId_s7comm.pcap.txt                 |   20 +
 tests/result/nDPId_selfsigned.pcap.txt             |   42 +
 tests/result/nDPId_signal.pcap.txt                 |  301 +
 tests/result/nDPId_simple-dnscrypt.pcap.txt        |   82 +
 tests/result/nDPId_sip.pcap.txt                    |   54 +
 tests/result/nDPId_skype-conference-call.pcap.txt  |   20 +
 tests/result/nDPId_skype.pcap.txt                  | 2699 +++++++++
 tests/result/nDPId_skype_no_unknown.pcap.txt       | 2166 +++++++
 tests/result/nDPId_skype_udp.pcap.txt              |   11 +
 tests/result/nDPId_smb_deletefile.pcap.txt         |   20 +
 tests/result/nDPId_smbv1.pcap.txt                  |   12 +
 tests/result/nDPId_smpp_in_general.pcap.txt        |   20 +
 tests/result/nDPId_snapchat.pcap.txt               |   59 +
 tests/result/nDPId_ssdp-m-search.pcap.txt          |   20 +
 tests/result/nDPId_ssh.pcap.txt                    |   23 +
 tests/result/nDPId_starcraft_battle.pcap.txt       |  524 ++
 tests/result/nDPId_steam.pcap.txt                  |  271 +
 tests/result/nDPId_teams.pcap.txt                  | 1114 ++++
 tests/result/nDPId_teamspeak3.pcap.txt             |   18 +
 tests/result/nDPId_telegram.pcap.txt               |  496 ++
 tests/result/nDPId_teredo.pcap.txt                 |   41 +
 tests/result/nDPId_tftp_rrq.pcap.txt               |   24 +
 tests/result/nDPId_tinc.pcap.txt                   |   74 +
 tests/result/nDPId_tls-esni-fuzzed.pcap.txt        |   14 +
 tests/result/nDPId_tls-rdn-extract.pcap.txt        |   13 +
 tests/result/nDPId_tls_esni_sni_both.pcap.txt      |   40 +
 tests/result/nDPId_tls_long_cert.pcap.txt          |   22 +
 .../result/nDPId_tls_verylong_certificate.pcap.txt |   22 +
 tests/result/nDPId_tor.pcap.txt                    |  449 ++
 tests/result/nDPId_tumblr.pcap.txt                 |  477 ++
 tests/result/nDPId_ubntac2.pcap.txt                |   34 +
 tests/result/nDPId_upnp.pcap.txt                   |   22 +
 tests/result/nDPId_viber.pcap.txt                  |  290 +
 tests/result/nDPId_vnc.pcap.txt                    |   38 +
 tests/result/nDPId_wa_video.pcap.txt               |  134 +
 tests/result/nDPId_wa_voice.pcap.txt               |  281 +
 tests/result/nDPId_waze.pcap.txt                   |  494 ++
 tests/result/nDPId_webex.pcap.txt                  |  920 +++
 tests/result/nDPId_websocket.pcap.txt              |   10 +
 tests/result/nDPId_wechat.pcap.txt                 | 1253 ++++
 tests/result/nDPId_weibo.pcap.txt                  |  345 ++
 tests/result/nDPId_whatsapp_login_call.pcap.txt    |  535 ++
 tests/result/nDPId_whatsapp_login_chat.pcap.txt    |   79 +
 .../nDPId_whatsapp_voice_and_message.pcap.txt      |  160 +
 tests/result/nDPId_whatsappfiles.pcap.txt          |   42 +
 tests/result/nDPId_wireguard.pcap.txt              |   20 +
 tests/result/nDPId_youtube_quic.pcap.txt           |   54 +
 tests/result/nDPId_youtubeupload.pcap.txt          |   56 +
 tests/result/nDPId_zabbix.pcap.txt                 |   15 +
 tests/result/nDPId_zcash.pcap.txt                  |   20 +
 tests/result/nDPId_zoom.pcap.txt                   |  364 ++
 369 files changed, 59242 insertions(+)
 create mode 100644 tests/README.md
 create mode 100755 tests/do.sh
 create mode 100644 tests/out/nDPId_1kxun.pcap.txt
 create mode 100644 tests/out/nDPId_443-chrome.pcap.txt
 create mode 100644 tests/out/nDPId_443-curl.pcap.txt
 create mode 100644 tests/out/nDPId_443-firefox.pcap.txt
 create mode 100644 tests/out/nDPId_443-git.pcap.txt
 create mode 100644 tests/out/nDPId_443-opvn.pcap.txt
 create mode 100644 tests/out/nDPId_443-safari.pcap.txt
 create mode 100644 tests/out/nDPId_4in4tunnel.pcap.txt
 create mode 100644 tests/out/nDPId_4in6tunnel.pcap.txt
 create mode 100644 tests/out/nDPId_6in4tunnel.pcap.txt
 create mode 100644 tests/out/nDPId_6in6tunnel.pcap.txt
 create mode 100644 tests/out/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt
 create mode 100644 tests/out/nDPId_BGP_redist.pcap.txt
 create mode 100644 tests/out/nDPId_EAQ.pcap.txt
 create mode 100644 tests/out/nDPId_KakaoTalk_chat.pcap.txt
 create mode 100644 tests/out/nDPId_KakaoTalk_talk.pcap.txt
 create mode 100644 tests/out/nDPId_NTPv2.pcap.txt
 create mode 100644 tests/out/nDPId_NTPv3.pcap.txt
 create mode 100644 tests/out/nDPId_NTPv4.pcap.txt
 create mode 100644 tests/out/nDPId_Oscar.pcap.txt
 create mode 100644 tests/out/nDPId_WebattackRCE.pcap.txt
 create mode 100644 tests/out/nDPId_WebattackSQLinj.pcap.txt
 create mode 100644 tests/out/nDPId_WebattackXSS.pcap.txt
 create mode 100644 tests/out/nDPId_ajp.pcap.txt
 create mode 100644 tests/out/nDPId_alexa-app.pcapng.txt
 create mode 100644 tests/out/nDPId_among_us.pcap.txt
 create mode 100644 tests/out/nDPId_amqp.pcap.txt
 create mode 100644 tests/out/nDPId_android.pcap.txt
 create mode 100644 tests/out/nDPId_anyconnect-vpn.pcap.txt
 create mode 100644 tests/out/nDPId_anydesk.pcap.txt
 create mode 100644 tests/out/nDPId_bad-dns-traffic.pcap.txt
 create mode 100644 tests/out/nDPId_badpackets.pcap.txt
 create mode 100644 tests/out/nDPId_bitcoin.pcap.txt
 create mode 100644 tests/out/nDPId_bittorrent.pcap.txt
 create mode 100644 tests/out/nDPId_bittorrent_ip.pcap.txt
 create mode 100644 tests/out/nDPId_bittorrent_utp.pcap.txt
 create mode 100644 tests/out/nDPId_bt_search.pcap.txt
 create mode 100644 tests/out/nDPId_capwap.pcap.txt
 create mode 100644 tests/out/nDPId_check_mk_new.pcap.txt
 create mode 100644 tests/out/nDPId_coap_mqtt.pcap.txt
 create mode 100644 tests/out/nDPId_cpha.pcap.txt
 create mode 100644 tests/out/nDPId_diameter.pcap.txt
 create mode 100644 tests/out/nDPId_dlt_ppp.pcap.txt
 create mode 100644 tests/out/nDPId_dnp3.pcap.txt
 create mode 100644 tests/out/nDPId_dns-tunnel-iodine.pcap.txt
 create mode 100644 tests/out/nDPId_dns_doh.pcap.txt
 create mode 100644 tests/out/nDPId_dns_dot.pcap.txt
 create mode 100644 tests/out/nDPId_dns_exfiltration.pcap.txt
 create mode 100644 tests/out/nDPId_dns_long_domainname.pcap.txt
 create mode 100644 tests/out/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt
 create mode 100644 tests/out/nDPId_dnscrypt-v2-doh.pcap.txt
 create mode 100644 tests/out/nDPId_dos_win98_smb_netbeui.pcap.txt
 create mode 100644 tests/out/nDPId_drda_db2.pcap.txt
 create mode 100644 tests/out/nDPId_dropbox.pcap.txt
 create mode 100644 tests/out/nDPId_dtls.pcap.txt
 create mode 100644 tests/out/nDPId_encrypted_sni.pcap.txt
 create mode 100644 tests/out/nDPId_ethereum.pcap.txt
 create mode 100644 tests/out/nDPId_exe_download.pcap.txt
 create mode 100644 tests/out/nDPId_exe_download_as_png.pcap.txt
 create mode 100644 tests/out/nDPId_facebook.pcap.txt
 create mode 100644 tests/out/nDPId_fbzero-missing-lengthcheck.pcap.txt
 create mode 100644 tests/out/nDPId_fix.pcap.txt
 create mode 100644 tests/out/nDPId_ftp.pcap.txt
 create mode 100644 tests/out/nDPId_ftp_failed.pcap.txt
 create mode 100644 tests/out/nDPId_fuzz-2006-06-26-2594.pcap.txt
 create mode 100644 tests/out/nDPId_fuzz-2006-09-29-28586.pcap.txt
 create mode 100644 tests/out/nDPId_fuzz-2020-02-16-11740.pcap.txt
 create mode 100644 tests/out/nDPId_git.pcap.txt
 create mode 100644 tests/out/nDPId_google_ssl.pcap.txt
 create mode 100644 tests/out/nDPId_googledns_android10.pcap.txt
 create mode 100644 tests/out/nDPId_gquic.pcap.txt
 create mode 100644 tests/out/nDPId_h323-overflow.pcap.txt
 create mode 100644 tests/out/nDPId_hangout.pcap.txt
 create mode 100644 tests/out/nDPId_http-crash-content-disposition.pcap.txt
 create mode 100644 tests/out/nDPId_http-lines-split.pcap.txt
 create mode 100644 tests/out/nDPId_http_ipv6.pcap.txt
 create mode 100644 tests/out/nDPId_iec60780-5-104.pcap.txt
 create mode 100644 tests/out/nDPId_imaps.pcap.txt
 create mode 100644 tests/out/nDPId_instagram.pcap.txt
 create mode 100644 tests/out/nDPId_iphone.pcap.txt
 create mode 100644 tests/out/nDPId_ipv6_in_gtp.pcap.txt
 create mode 100644 tests/out/nDPId_ja3_lots_of_cipher_suites.pcap.txt
 create mode 100644 tests/out/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt
 create mode 100644 tests/out/nDPId_kerberos.pcap.txt
 create mode 100644 tests/out/nDPId_malformed_dns.pcap.txt
 create mode 100644 tests/out/nDPId_malformed_icmp.pcap.txt
 create mode 100644 tests/out/nDPId_malware.pcap.txt
 create mode 100644 tests/out/nDPId_modbus.pcap.txt
 create mode 100644 tests/out/nDPId_monero.pcap.txt
 create mode 100644 tests/out/nDPId_mongodb.pcap.txt
 create mode 100644 tests/out/nDPId_mpeg.pcap.txt
 create mode 100644 tests/out/nDPId_mpegts.pcap.txt
 create mode 100644 tests/out/nDPId_mssql_tds.pcap.txt
 create mode 100644 tests/out/nDPId_mysql-8.pcap.txt
 create mode 100644 tests/out/nDPId_nats.pcap.txt
 create mode 100644 tests/out/nDPId_nest_log_sink.pcap.txt
 create mode 100644 tests/out/nDPId_netbios.pcap.txt
 create mode 100644 tests/out/nDPId_netbios_wildcard_dns_query.pcap.txt
 create mode 100644 tests/out/nDPId_netflix.pcap.txt
 create mode 100644 tests/out/nDPId_netflow-fritz.pcap.txt
 create mode 100644 tests/out/nDPId_netflowv9.pcap.txt
 create mode 100644 tests/out/nDPId_nintendo.pcap.txt
 create mode 100644 tests/out/nDPId_no_sni.pcap.txt
 create mode 100644 tests/out/nDPId_ocs.pcap.txt
 create mode 100644 tests/out/nDPId_ookla.pcap.txt
 create mode 100644 tests/out/nDPId_openvpn.pcap.txt
 create mode 100644 tests/out/nDPId_pinterest.pcap.txt
 create mode 100644 tests/out/nDPId_pps.pcap.txt
 create mode 100644 tests/out/nDPId_ps_vue.pcap.txt
 create mode 100644 tests/out/nDPId_quic-23.pcap.txt
 create mode 100644 tests/out/nDPId_quic-24.pcap.txt
 create mode 100644 tests/out/nDPId_quic-27.pcap.txt
 create mode 100644 tests/out/nDPId_quic-28.pcap.txt
 create mode 100644 tests/out/nDPId_quic-29.pcap.txt
 create mode 100644 tests/out/nDPId_quic-mvfst-22.pcap.txt
 create mode 100644 tests/out/nDPId_quic-mvfst-22_decryption_error.pcap.txt
 create mode 100644 tests/out/nDPId_quic-mvfst-27.pcap.txt
 create mode 100644 tests/out/nDPId_quic-mvfst-exp.pcap.txt
 create mode 100644 tests/out/nDPId_quic.pcap.txt
 create mode 100644 tests/out/nDPId_quic046.pcap.txt
 create mode 100644 tests/out/nDPId_quic_0RTT.pcap.txt
 create mode 100644 tests/out/nDPId_quic_q39.pcap.txt
 create mode 100644 tests/out/nDPId_quic_q43.pcap.txt
 create mode 100644 tests/out/nDPId_quic_q46.pcap.txt
 create mode 100644 tests/out/nDPId_quic_q46_b.pcap.txt
 create mode 100644 tests/out/nDPId_quic_q50.pcap.txt
 create mode 100644 tests/out/nDPId_quic_t50.pcap.txt
 create mode 100644 tests/out/nDPId_quic_t51.pcap.txt
 create mode 100644 tests/out/nDPId_quickplay.pcap.txt
 create mode 100644 tests/out/nDPId_rdp.pcap.txt
 create mode 100644 tests/out/nDPId_reddit.pcap.txt
 create mode 100644 tests/out/nDPId_rx.pcap.txt
 create mode 100644 tests/out/nDPId_s7comm.pcap.txt
 create mode 100644 tests/out/nDPId_selfsigned.pcap.txt
 create mode 100644 tests/out/nDPId_signal.pcap.txt
 create mode 100644 tests/out/nDPId_simple-dnscrypt.pcap.txt
 create mode 100644 tests/out/nDPId_sip.pcap.txt
 create mode 100644 tests/out/nDPId_skype-conference-call.pcap.txt
 create mode 100644 tests/out/nDPId_skype.pcap.txt
 create mode 100644 tests/out/nDPId_skype_no_unknown.pcap.txt
 create mode 100644 tests/out/nDPId_skype_udp.pcap.txt
 create mode 100644 tests/out/nDPId_smb_deletefile.pcap.txt
 create mode 100644 tests/out/nDPId_smbv1.pcap.txt
 create mode 100644 tests/out/nDPId_smpp_in_general.pcap.txt
 create mode 100644 tests/out/nDPId_snapchat.pcap.txt
 create mode 100644 tests/out/nDPId_ssdp-m-search.pcap.txt
 create mode 100644 tests/out/nDPId_ssh.pcap.txt
 create mode 100644 tests/out/nDPId_starcraft_battle.pcap.txt
 create mode 100644 tests/out/nDPId_steam.pcap.txt
 create mode 100644 tests/out/nDPId_teams.pcap.txt
 create mode 100644 tests/out/nDPId_teamspeak3.pcap.txt
 create mode 100644 tests/out/nDPId_telegram.pcap.txt
 create mode 100644 tests/out/nDPId_teredo.pcap.txt
 create mode 100644 tests/out/nDPId_tftp_rrq.pcap.txt
 create mode 100644 tests/out/nDPId_tinc.pcap.txt
 create mode 100644 tests/out/nDPId_tls-esni-fuzzed.pcap.txt
 create mode 100644 tests/out/nDPId_tls-rdn-extract.pcap.txt
 create mode 100644 tests/out/nDPId_tls_esni_sni_both.pcap.txt
 create mode 100644 tests/out/nDPId_tls_long_cert.pcap.txt
 create mode 100644 tests/out/nDPId_tls_verylong_certificate.pcap.txt
 create mode 100644 tests/out/nDPId_tor.pcap.txt
 create mode 100644 tests/out/nDPId_tumblr.pcap.txt
 create mode 100644 tests/out/nDPId_ubntac2.pcap.txt
 create mode 100644 tests/out/nDPId_upnp.pcap.txt
 create mode 100644 tests/out/nDPId_viber.pcap.txt
 create mode 100644 tests/out/nDPId_vnc.pcap.txt
 create mode 100644 tests/out/nDPId_wa_video.pcap.txt
 create mode 100644 tests/out/nDPId_wa_voice.pcap.txt
 create mode 100644 tests/out/nDPId_waze.pcap.txt
 create mode 100644 tests/out/nDPId_webex.pcap.txt
 create mode 100644 tests/out/nDPId_websocket.pcap.txt
 create mode 100644 tests/out/nDPId_wechat.pcap.txt
 create mode 100644 tests/out/nDPId_weibo.pcap.txt
 create mode 100644 tests/out/nDPId_whatsapp_login_call.pcap.txt
 create mode 100644 tests/out/nDPId_whatsapp_login_chat.pcap.txt
 create mode 100644 tests/out/nDPId_whatsapp_voice_and_message.pcap.txt
 create mode 100644 tests/out/nDPId_whatsappfiles.pcap.txt
 create mode 100644 tests/out/nDPId_wireguard.pcap.txt
 create mode 100644 tests/out/nDPId_youtube_quic.pcap.txt
 create mode 100644 tests/out/nDPId_youtubeupload.pcap.txt
 create mode 100644 tests/out/nDPId_zabbix.pcap.txt
 create mode 100644 tests/out/nDPId_zcash.pcap.txt
 create mode 100644 tests/out/nDPId_zoom.pcap.txt
 create mode 100644 tests/result/nDPId_1kxun.pcap.txt
 create mode 100644 tests/result/nDPId_443-chrome.pcap.txt
 create mode 100644 tests/result/nDPId_443-curl.pcap.txt
 create mode 100644 tests/result/nDPId_443-firefox.pcap.txt
 create mode 100644 tests/result/nDPId_443-git.pcap.txt
 create mode 100644 tests/result/nDPId_443-opvn.pcap.txt
 create mode 100644 tests/result/nDPId_443-safari.pcap.txt
 create mode 100644 tests/result/nDPId_4in4tunnel.pcap.txt
 create mode 100644 tests/result/nDPId_4in6tunnel.pcap.txt
 create mode 100644 tests/result/nDPId_6in4tunnel.pcap.txt
 create mode 100644 tests/result/nDPId_6in6tunnel.pcap.txt
 create mode 100644 tests/result/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt
 create mode 100644 tests/result/nDPId_BGP_redist.pcap.txt
 create mode 100644 tests/result/nDPId_EAQ.pcap.txt
 create mode 100644 tests/result/nDPId_KakaoTalk_chat.pcap.txt
 create mode 100644 tests/result/nDPId_KakaoTalk_talk.pcap.txt
 create mode 100644 tests/result/nDPId_NTPv2.pcap.txt
 create mode 100644 tests/result/nDPId_NTPv3.pcap.txt
 create mode 100644 tests/result/nDPId_NTPv4.pcap.txt
 create mode 100644 tests/result/nDPId_Oscar.pcap.txt
 create mode 100644 tests/result/nDPId_WebattackRCE.pcap.txt
 create mode 100644 tests/result/nDPId_WebattackSQLinj.pcap.txt
 create mode 100644 tests/result/nDPId_WebattackXSS.pcap.txt
 create mode 100644 tests/result/nDPId_ajp.pcap.txt
 create mode 100644 tests/result/nDPId_alexa-app.pcapng.txt
 create mode 100644 tests/result/nDPId_among_us.pcap.txt
 create mode 100644 tests/result/nDPId_amqp.pcap.txt
 create mode 100644 tests/result/nDPId_android.pcap.txt
 create mode 100644 tests/result/nDPId_anyconnect-vpn.pcap.txt
 create mode 100644 tests/result/nDPId_anydesk.pcap.txt
 create mode 100644 tests/result/nDPId_bad-dns-traffic.pcap.txt
 create mode 100644 tests/result/nDPId_badpackets.pcap.txt
 create mode 100644 tests/result/nDPId_bitcoin.pcap.txt
 create mode 100644 tests/result/nDPId_bittorrent.pcap.txt
 create mode 100644 tests/result/nDPId_bittorrent_ip.pcap.txt
 create mode 100644 tests/result/nDPId_bittorrent_utp.pcap.txt
 create mode 100644 tests/result/nDPId_bt_search.pcap.txt
 create mode 100644 tests/result/nDPId_capwap.pcap.txt
 create mode 100644 tests/result/nDPId_check_mk_new.pcap.txt
 create mode 100644 tests/result/nDPId_coap_mqtt.pcap.txt
 create mode 100644 tests/result/nDPId_cpha.pcap.txt
 create mode 100644 tests/result/nDPId_diameter.pcap.txt
 create mode 100644 tests/result/nDPId_dlt_ppp.pcap.txt
 create mode 100644 tests/result/nDPId_dnp3.pcap.txt
 create mode 100644 tests/result/nDPId_dns-tunnel-iodine.pcap.txt
 create mode 100644 tests/result/nDPId_dns_doh.pcap.txt
 create mode 100644 tests/result/nDPId_dns_dot.pcap.txt
 create mode 100644 tests/result/nDPId_dns_exfiltration.pcap.txt
 create mode 100644 tests/result/nDPId_dns_long_domainname.pcap.txt
 create mode 100644 tests/result/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt
 create mode 100644 tests/result/nDPId_dnscrypt-v2-doh.pcap.txt
 create mode 100644 tests/result/nDPId_dos_win98_smb_netbeui.pcap.txt
 create mode 100644 tests/result/nDPId_drda_db2.pcap.txt
 create mode 100644 tests/result/nDPId_dropbox.pcap.txt
 create mode 100644 tests/result/nDPId_dtls.pcap.txt
 create mode 100644 tests/result/nDPId_encrypted_sni.pcap.txt
 create mode 100644 tests/result/nDPId_ethereum.pcap.txt
 create mode 100644 tests/result/nDPId_exe_download.pcap.txt
 create mode 100644 tests/result/nDPId_exe_download_as_png.pcap.txt
 create mode 100644 tests/result/nDPId_facebook.pcap.txt
 create mode 100644 tests/result/nDPId_fbzero-missing-lengthcheck.pcap.txt
 create mode 100644 tests/result/nDPId_fix.pcap.txt
 create mode 100644 tests/result/nDPId_ftp.pcap.txt
 create mode 100644 tests/result/nDPId_ftp_failed.pcap.txt
 create mode 100644 tests/result/nDPId_fuzz-2006-06-26-2594.pcap.txt
 create mode 100644 tests/result/nDPId_fuzz-2006-09-29-28586.pcap.txt
 create mode 100644 tests/result/nDPId_fuzz-2020-02-16-11740.pcap.txt
 create mode 100644 tests/result/nDPId_git.pcap.txt
 create mode 100644 tests/result/nDPId_google_ssl.pcap.txt
 create mode 100644 tests/result/nDPId_googledns_android10.pcap.txt
 create mode 100644 tests/result/nDPId_gquic.pcap.txt
 create mode 100644 tests/result/nDPId_h323-overflow.pcap.txt
 create mode 100644 tests/result/nDPId_hangout.pcap.txt
 create mode 100644 tests/result/nDPId_http-crash-content-disposition.pcap.txt
 create mode 100644 tests/result/nDPId_http-lines-split.pcap.txt
 create mode 100644 tests/result/nDPId_http_ipv6.pcap.txt
 create mode 100644 tests/result/nDPId_iec60780-5-104.pcap.txt
 create mode 100644 tests/result/nDPId_imaps.pcap.txt
 create mode 100644 tests/result/nDPId_instagram.pcap.txt
 create mode 100644 tests/result/nDPId_iphone.pcap.txt
 create mode 100644 tests/result/nDPId_ipv6_in_gtp.pcap.txt
 create mode 100644 tests/result/nDPId_ja3_lots_of_cipher_suites.pcap.txt
 create mode 100644 tests/result/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt
 create mode 100644 tests/result/nDPId_kerberos.pcap.txt
 create mode 100644 tests/result/nDPId_malformed_dns.pcap.txt
 create mode 100644 tests/result/nDPId_malformed_icmp.pcap.txt
 create mode 100644 tests/result/nDPId_malware.pcap.txt
 create mode 100644 tests/result/nDPId_modbus.pcap.txt
 create mode 100644 tests/result/nDPId_monero.pcap.txt
 create mode 100644 tests/result/nDPId_mongodb.pcap.txt
 create mode 100644 tests/result/nDPId_mpeg.pcap.txt
 create mode 100644 tests/result/nDPId_mpegts.pcap.txt
 create mode 100644 tests/result/nDPId_mssql_tds.pcap.txt
 create mode 100644 tests/result/nDPId_mysql-8.pcap.txt
 create mode 100644 tests/result/nDPId_nats.pcap.txt
 create mode 100644 tests/result/nDPId_nest_log_sink.pcap.txt
 create mode 100644 tests/result/nDPId_netbios.pcap.txt
 create mode 100644 tests/result/nDPId_netbios_wildcard_dns_query.pcap.txt
 create mode 100644 tests/result/nDPId_netflix.pcap.txt
 create mode 100644 tests/result/nDPId_netflow-fritz.pcap.txt
 create mode 100644 tests/result/nDPId_netflowv9.pcap.txt
 create mode 100644 tests/result/nDPId_nintendo.pcap.txt
 create mode 100644 tests/result/nDPId_no_sni.pcap.txt
 create mode 100644 tests/result/nDPId_ocs.pcap.txt
 create mode 100644 tests/result/nDPId_ookla.pcap.txt
 create mode 100644 tests/result/nDPId_openvpn.pcap.txt
 create mode 100644 tests/result/nDPId_pinterest.pcap.txt
 create mode 100644 tests/result/nDPId_pps.pcap.txt
 create mode 100644 tests/result/nDPId_ps_vue.pcap.txt
 create mode 100644 tests/result/nDPId_quic-23.pcap.txt
 create mode 100644 tests/result/nDPId_quic-24.pcap.txt
 create mode 100644 tests/result/nDPId_quic-27.pcap.txt
 create mode 100644 tests/result/nDPId_quic-28.pcap.txt
 create mode 100644 tests/result/nDPId_quic-29.pcap.txt
 create mode 100644 tests/result/nDPId_quic-mvfst-22.pcap.txt
 create mode 100644 tests/result/nDPId_quic-mvfst-22_decryption_error.pcap.txt
 create mode 100644 tests/result/nDPId_quic-mvfst-27.pcap.txt
 create mode 100644 tests/result/nDPId_quic-mvfst-exp.pcap.txt
 create mode 100644 tests/result/nDPId_quic.pcap.txt
 create mode 100644 tests/result/nDPId_quic046.pcap.txt
 create mode 100644 tests/result/nDPId_quic_0RTT.pcap.txt
 create mode 100644 tests/result/nDPId_quic_interop_V.pcapng.txt
 create mode 100644 tests/result/nDPId_quic_q39.pcap.txt
 create mode 100644 tests/result/nDPId_quic_q43.pcap.txt
 create mode 100644 tests/result/nDPId_quic_q46.pcap.txt
 create mode 100644 tests/result/nDPId_quic_q46_b.pcap.txt
 create mode 100644 tests/result/nDPId_quic_q50.pcap.txt
 create mode 100644 tests/result/nDPId_quic_t50.pcap.txt
 create mode 100644 tests/result/nDPId_quic_t51.pcap.txt
 create mode 100644 tests/result/nDPId_quickplay.pcap.txt
 create mode 100644 tests/result/nDPId_rdp.pcap.txt
 create mode 100644 tests/result/nDPId_reddit.pcap.txt
 create mode 100644 tests/result/nDPId_rx.pcap.txt
 create mode 100644 tests/result/nDPId_s7comm.pcap.txt
 create mode 100644 tests/result/nDPId_selfsigned.pcap.txt
 create mode 100644 tests/result/nDPId_signal.pcap.txt
 create mode 100644 tests/result/nDPId_simple-dnscrypt.pcap.txt
 create mode 100644 tests/result/nDPId_sip.pcap.txt
 create mode 100644 tests/result/nDPId_skype-conference-call.pcap.txt
 create mode 100644 tests/result/nDPId_skype.pcap.txt
 create mode 100644 tests/result/nDPId_skype_no_unknown.pcap.txt
 create mode 100644 tests/result/nDPId_skype_udp.pcap.txt
 create mode 100644 tests/result/nDPId_smb_deletefile.pcap.txt
 create mode 100644 tests/result/nDPId_smbv1.pcap.txt
 create mode 100644 tests/result/nDPId_smpp_in_general.pcap.txt
 create mode 100644 tests/result/nDPId_snapchat.pcap.txt
 create mode 100644 tests/result/nDPId_ssdp-m-search.pcap.txt
 create mode 100644 tests/result/nDPId_ssh.pcap.txt
 create mode 100644 tests/result/nDPId_starcraft_battle.pcap.txt
 create mode 100644 tests/result/nDPId_steam.pcap.txt
 create mode 100644 tests/result/nDPId_teams.pcap.txt
 create mode 100644 tests/result/nDPId_teamspeak3.pcap.txt
 create mode 100644 tests/result/nDPId_telegram.pcap.txt
 create mode 100644 tests/result/nDPId_teredo.pcap.txt
 create mode 100644 tests/result/nDPId_tftp_rrq.pcap.txt
 create mode 100644 tests/result/nDPId_tinc.pcap.txt
 create mode 100644 tests/result/nDPId_tls-esni-fuzzed.pcap.txt
 create mode 100644 tests/result/nDPId_tls-rdn-extract.pcap.txt
 create mode 100644 tests/result/nDPId_tls_esni_sni_both.pcap.txt
 create mode 100644 tests/result/nDPId_tls_long_cert.pcap.txt
 create mode 100644 tests/result/nDPId_tls_verylong_certificate.pcap.txt
 create mode 100644 tests/result/nDPId_tor.pcap.txt
 create mode 100644 tests/result/nDPId_tumblr.pcap.txt
 create mode 100644 tests/result/nDPId_ubntac2.pcap.txt
 create mode 100644 tests/result/nDPId_upnp.pcap.txt
 create mode 100644 tests/result/nDPId_viber.pcap.txt
 create mode 100644 tests/result/nDPId_vnc.pcap.txt
 create mode 100644 tests/result/nDPId_wa_video.pcap.txt
 create mode 100644 tests/result/nDPId_wa_voice.pcap.txt
 create mode 100644 tests/result/nDPId_waze.pcap.txt
 create mode 100644 tests/result/nDPId_webex.pcap.txt
 create mode 100644 tests/result/nDPId_websocket.pcap.txt
 create mode 100644 tests/result/nDPId_wechat.pcap.txt
 create mode 100644 tests/result/nDPId_weibo.pcap.txt
 create mode 100644 tests/result/nDPId_whatsapp_login_call.pcap.txt
 create mode 100644 tests/result/nDPId_whatsapp_login_chat.pcap.txt
 create mode 100644 tests/result/nDPId_whatsapp_voice_and_message.pcap.txt
 create mode 100644 tests/result/nDPId_whatsappfiles.pcap.txt
 create mode 100644 tests/result/nDPId_wireguard.pcap.txt
 create mode 100644 tests/result/nDPId_youtube_quic.pcap.txt
 create mode 100644 tests/result/nDPId_youtubeupload.pcap.txt
 create mode 100644 tests/result/nDPId_zabbix.pcap.txt
 create mode 100644 tests/result/nDPId_zcash.pcap.txt
 create mode 100644 tests/result/nDPId_zoom.pcap.txt

(limited to 'tests')

diff --git a/tests/README.md b/tests/README.md
new file mode 100644
index 000000000..d4fb99749
--- /dev/null
+++ b/tests/README.md
@@ -0,0 +1,6 @@
+# tests
+
+nDPId tests are pretty similar to nDPI's test setup.
+It also uses PCAP files provided by libnDPI and generates a diff based on that information.
+
+That is the reason why `./do.sh` needs a nDPI directory as argument.
diff --git a/tests/do.sh b/tests/do.sh
new file mode 100755
index 000000000..2dd7dc1e8
--- /dev/null
+++ b/tests/do.sh
@@ -0,0 +1,60 @@
+#!/usr/bin/env sh
+
+set -e
+
+NDPI_REPO_PATH="${1}"
+MYDIR="$(dirname ${0})"
+NCBIN="/bin/nc"
+
+cd "${MYDIR}/.."
+
+if [ -z "${NDPI_REPO_PATH}" ]; then
+    printf '%s: %s\n' "${0}" 'NDPI_REPO_PATH (argument 1) missing!'
+    exit 1
+fi
+
+if [ ! -x "${NCBIN}" ]; then
+    printf '%s: %s\n' "${0}" "${NCBIN} not found or not executable. Please make sure to install 'netcat-openbsd'."
+    exit 1
+fi
+
+test -d "${NDPI_REPO_PATH}"
+
+EXIT_VALUE=0
+
+# Create new results.
+trap 'eval "set +e && kill $(cat /tmp/nDPId.pid) $(cat /tmp/nc.pid) && rm -f /tmp/nDPId.pid /tmp/nDPIsrvd.pid && exit 1"' INT QUIT TERM
+
+for pcap_file in `ls ${NDPI_REPO_PATH}/tests/pcap/*.pcap ${NDPI_REPO_PATH}/tests/pcap/*.pcapng`; do
+    printf '%s ' "${pcap_file}"
+    rm -f /tmp/ndpid-collector.sock
+    ${NCBIN} -k -l -U /tmp/ndpid-collector.sock >"./tests/result/nDPId_$(basename ${pcap_file}).txt.tmp" & printf "$!" >/tmp/nc.pid
+    ./nDPId -p /tmp/nDPId.pid -o max-reader-threads=1 -l -i "${pcap_file}" >"./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp" 2>/tmp/nDPId.stderr || { cat /tmp/nDPId.stderr; exit 1; }
+    cat "./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp" | grep 'Total' >"./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp2"
+
+    if [ $(diff "./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp2" "./tests/out/nDPId_$(basename ${pcap_file}).txt" | wc -l) -eq 0 ]; then
+        printf '%s ' '[OUT OK]'
+    else
+        printf '%s ' '[OUT DIFF EXISTS]'
+        EXIT_VALUE=1
+    fi
+
+    if [ $(diff "./tests/result/nDPId_$(basename ${pcap_file}).txt.tmp" "./tests/result/nDPId_$(basename ${pcap_file}).txt" | wc -l) -eq 0 ]; then
+        printf '%s\n' '[RESULT OK]'
+    else
+        printf '%s\n' '[RESULT DIFF EXISTS]'
+        EXIT_VALUE=1
+    fi
+
+    diff "./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp2" "./tests/out/nDPId_$(basename ${pcap_file}).txt" || true
+    mv "./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp2" "./tests/out/nDPId_$(basename ${pcap_file}).txt"
+    rm -f "./tests/out/nDPId_$(basename ${pcap_file}).txt.tmp"
+
+    diff "./tests/result/nDPId_$(basename ${pcap_file}).txt.tmp" "./tests/result/nDPId_$(basename ${pcap_file}).txt" || true
+    mv "./tests/result/nDPId_$(basename ${pcap_file}).txt.tmp" "./tests/result/nDPId_$(basename ${pcap_file}).txt"
+    rm -f "./tests/result/nDPId_$(basename ${pcap_file}).txt.tmp"
+
+    kill `cat /tmp/nc.pid`
+done
+
+exit ${EXIT_VALUE}
diff --git a/tests/out/nDPId_1kxun.pcap.txt b/tests/out/nDPId_1kxun.pcap.txt
new file mode 100644
index 000000000..41da4546e
--- /dev/null
+++ b/tests/out/nDPId_1kxun.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1439
+Total packets processed: 1439
+Total layer4 data size.: 579199
+Total flows captured...: 129
+Total flows timed out..: 129
+Total flows detected...: 107
diff --git a/tests/out/nDPId_443-chrome.pcap.txt b/tests/out/nDPId_443-chrome.pcap.txt
new file mode 100644
index 000000000..20748c9f7
--- /dev/null
+++ b/tests/out/nDPId_443-chrome.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 1472
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_443-curl.pcap.txt b/tests/out/nDPId_443-curl.pcap.txt
new file mode 100644
index 000000000..d11c39905
--- /dev/null
+++ b/tests/out/nDPId_443-curl.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 109
+Total packets processed: 109
+Total layer4 data size.: 70276
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_443-firefox.pcap.txt b/tests/out/nDPId_443-firefox.pcap.txt
new file mode 100644
index 000000000..473803ba1
--- /dev/null
+++ b/tests/out/nDPId_443-firefox.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 667
+Total packets processed: 667
+Total layer4 data size.: 435389
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_443-git.pcap.txt b/tests/out/nDPId_443-git.pcap.txt
new file mode 100644
index 000000000..6c0517f68
--- /dev/null
+++ b/tests/out/nDPId_443-git.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 70
+Total packets processed: 70
+Total layer4 data size.: 34809
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_443-opvn.pcap.txt b/tests/out/nDPId_443-opvn.pcap.txt
new file mode 100644
index 000000000..069e78528
--- /dev/null
+++ b/tests/out/nDPId_443-opvn.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 46
+Total packets processed: 46
+Total layer4 data size.: 10009
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_443-safari.pcap.txt b/tests/out/nDPId_443-safari.pcap.txt
new file mode 100644
index 000000000..17b31bdc5
--- /dev/null
+++ b/tests/out/nDPId_443-safari.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 41
+Total packets processed: 41
+Total layer4 data size.: 18535
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_4in4tunnel.pcap.txt b/tests/out/nDPId_4in4tunnel.pcap.txt
new file mode 100644
index 000000000..d67321ab6
--- /dev/null
+++ b/tests/out/nDPId_4in4tunnel.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 5
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_4in6tunnel.pcap.txt b/tests/out/nDPId_4in6tunnel.pcap.txt
new file mode 100644
index 000000000..021d0c51f
--- /dev/null
+++ b/tests/out/nDPId_4in6tunnel.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 4
+Total packets processed: 4
+Total layer4 data size.: 1780
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_6in4tunnel.pcap.txt b/tests/out/nDPId_6in4tunnel.pcap.txt
new file mode 100644
index 000000000..0de811faa
--- /dev/null
+++ b/tests/out/nDPId_6in4tunnel.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 127
+Total packets processed: 127
+Total layer4 data size.: 35975
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_6in6tunnel.pcap.txt b/tests/out/nDPId_6in6tunnel.pcap.txt
new file mode 100644
index 000000000..9389873ef
--- /dev/null
+++ b/tests/out/nDPId_6in6tunnel.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 2
+Total layer4 data size.: 104
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 0
diff --git a/tests/out/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt b/tests/out/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt
new file mode 100644
index 000000000..41c5b4f93
--- /dev/null
+++ b/tests/out/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 14
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_BGP_redist.pcap.txt b/tests/out/nDPId_BGP_redist.pcap.txt
new file mode 100644
index 000000000..42109659a
--- /dev/null
+++ b/tests/out/nDPId_BGP_redist.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_EAQ.pcap.txt b/tests/out/nDPId_EAQ.pcap.txt
new file mode 100644
index 000000000..6032109c0
--- /dev/null
+++ b/tests/out/nDPId_EAQ.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 197
+Total packets processed: 197
+Total layer4 data size.: 15137
+Total flows captured...: 31
+Total flows timed out..: 31
+Total flows detected...: 31
diff --git a/tests/out/nDPId_KakaoTalk_chat.pcap.txt b/tests/out/nDPId_KakaoTalk_chat.pcap.txt
new file mode 100644
index 000000000..95e320caf
--- /dev/null
+++ b/tests/out/nDPId_KakaoTalk_chat.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 347
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_KakaoTalk_talk.pcap.txt b/tests/out/nDPId_KakaoTalk_talk.pcap.txt
new file mode 100644
index 000000000..3509a5672
--- /dev/null
+++ b/tests/out/nDPId_KakaoTalk_talk.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3203
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_NTPv2.pcap.txt b/tests/out/nDPId_NTPv2.pcap.txt
new file mode 100644
index 000000000..6b04a3111
--- /dev/null
+++ b/tests/out/nDPId_NTPv2.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 376
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_NTPv3.pcap.txt b/tests/out/nDPId_NTPv3.pcap.txt
new file mode 100644
index 000000000..45ed2b7dc
--- /dev/null
+++ b/tests/out/nDPId_NTPv3.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 56
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_NTPv4.pcap.txt b/tests/out/nDPId_NTPv4.pcap.txt
new file mode 100644
index 000000000..45ed2b7dc
--- /dev/null
+++ b/tests/out/nDPId_NTPv4.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 56
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_Oscar.pcap.txt b/tests/out/nDPId_Oscar.pcap.txt
new file mode 100644
index 000000000..dd9777bce
--- /dev/null
+++ b/tests/out/nDPId_Oscar.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 71
+Total packets processed: 71
+Total layer4 data size.: 6898
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_WebattackRCE.pcap.txt b/tests/out/nDPId_WebattackRCE.pcap.txt
new file mode 100644
index 000000000..3ddbbeafe
--- /dev/null
+++ b/tests/out/nDPId_WebattackRCE.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 797
+Total packets processed: 797
+Total layer4 data size.: 163905
+Total flows captured...: 797
+Total flows timed out..: 797
+Total flows detected...: 777
diff --git a/tests/out/nDPId_WebattackSQLinj.pcap.txt b/tests/out/nDPId_WebattackSQLinj.pcap.txt
new file mode 100644
index 000000000..aaaf07854
--- /dev/null
+++ b/tests/out/nDPId_WebattackSQLinj.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 94
+Total packets processed: 94
+Total layer4 data size.: 26812
+Total flows captured...: 9
+Total flows timed out..: 9
+Total flows detected...: 9
diff --git a/tests/out/nDPId_WebattackXSS.pcap.txt b/tests/out/nDPId_WebattackXSS.pcap.txt
new file mode 100644
index 000000000..39ab452f3
--- /dev/null
+++ b/tests/out/nDPId_WebattackXSS.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 9374
+Total packets processed: 9374
+Total layer4 data size.: 4402432
+Total flows captured...: 661
+Total flows timed out..: 661
+Total flows detected...: 22
diff --git a/tests/out/nDPId_ajp.pcap.txt b/tests/out/nDPId_ajp.pcap.txt
new file mode 100644
index 000000000..0ab63e705
--- /dev/null
+++ b/tests/out/nDPId_ajp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 38
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_alexa-app.pcapng.txt b/tests/out/nDPId_alexa-app.pcapng.txt
new file mode 100644
index 000000000..6dc03f954
--- /dev/null
+++ b/tests/out/nDPId_alexa-app.pcapng.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3435
+Total packets processed: 3406
+Total layer4 data size.: 1313763
+Total flows captured...: 160
+Total flows timed out..: 160
+Total flows detected...: 146
diff --git a/tests/out/nDPId_among_us.pcap.txt b/tests/out/nDPId_among_us.pcap.txt
new file mode 100644
index 000000000..312956d54
--- /dev/null
+++ b/tests/out/nDPId_among_us.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 23
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_amqp.pcap.txt b/tests/out/nDPId_amqp.pcap.txt
new file mode 100644
index 000000000..c4ea5c1a6
--- /dev/null
+++ b/tests/out/nDPId_amqp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 160
+Total packets processed: 160
+Total layer4 data size.: 18074
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_android.pcap.txt b/tests/out/nDPId_android.pcap.txt
new file mode 100644
index 000000000..33817d99f
--- /dev/null
+++ b/tests/out/nDPId_android.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 500
+Total packets processed: 475
+Total layer4 data size.: 115592
+Total flows captured...: 63
+Total flows timed out..: 63
+Total flows detected...: 56
diff --git a/tests/out/nDPId_anyconnect-vpn.pcap.txt b/tests/out/nDPId_anyconnect-vpn.pcap.txt
new file mode 100644
index 000000000..02366c4d5
--- /dev/null
+++ b/tests/out/nDPId_anyconnect-vpn.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3001
+Total packets processed: 2997
+Total layer4 data size.: 914499
+Total flows captured...: 69
+Total flows timed out..: 69
+Total flows detected...: 57
diff --git a/tests/out/nDPId_anydesk.pcap.txt b/tests/out/nDPId_anydesk.pcap.txt
new file mode 100644
index 000000000..e0d2aeb32
--- /dev/null
+++ b/tests/out/nDPId_anydesk.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 6963
+Total packets processed: 6963
+Total layer4 data size.: 2557306
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 1
diff --git a/tests/out/nDPId_bad-dns-traffic.pcap.txt b/tests/out/nDPId_bad-dns-traffic.pcap.txt
new file mode 100644
index 000000000..c1be2ceea
--- /dev/null
+++ b/tests/out/nDPId_bad-dns-traffic.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 382
+Total packets processed: 382
+Total layer4 data size.: 86386
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_badpackets.pcap.txt b/tests/out/nDPId_badpackets.pcap.txt
new file mode 100644
index 000000000..46a7d3b71
--- /dev/null
+++ b/tests/out/nDPId_badpackets.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 93
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_bitcoin.pcap.txt b/tests/out/nDPId_bitcoin.pcap.txt
new file mode 100644
index 000000000..050b0e1c2
--- /dev/null
+++ b/tests/out/nDPId_bitcoin.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 637
+Total packets processed: 637
+Total layer4 data size.: 559416
+Total flows captured...: 6
+Total flows timed out..: 6
+Total flows detected...: 0
diff --git a/tests/out/nDPId_bittorrent.pcap.txt b/tests/out/nDPId_bittorrent.pcap.txt
new file mode 100644
index 000000000..0f34e75e9
--- /dev/null
+++ b/tests/out/nDPId_bittorrent.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 299
+Total packets processed: 299
+Total layer4 data size.: 295562
+Total flows captured...: 24
+Total flows timed out..: 24
+Total flows detected...: 24
diff --git a/tests/out/nDPId_bittorrent_ip.pcap.txt b/tests/out/nDPId_bittorrent_ip.pcap.txt
new file mode 100644
index 000000000..20ab20883
--- /dev/null
+++ b/tests/out/nDPId_bittorrent_ip.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 479
+Total packets processed: 479
+Total layer4 data size.: 491732
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 1
diff --git a/tests/out/nDPId_bittorrent_utp.pcap.txt b/tests/out/nDPId_bittorrent_utp.pcap.txt
new file mode 100644
index 000000000..bdcb74c76
--- /dev/null
+++ b/tests/out/nDPId_bittorrent_utp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 86
+Total packets processed: 86
+Total layer4 data size.: 38565
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_bt_search.pcap.txt b/tests/out/nDPId_bt_search.pcap.txt
new file mode 100644
index 000000000..25c06d315
--- /dev/null
+++ b/tests/out/nDPId_bt_search.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 2
+Total layer4 data size.: 254
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_capwap.pcap.txt b/tests/out/nDPId_capwap.pcap.txt
new file mode 100644
index 000000000..a3cef3a93
--- /dev/null
+++ b/tests/out/nDPId_capwap.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 422
+Total packets processed: 397
+Total layer4 data size.: 85011
+Total flows captured...: 5
+Total flows timed out..: 5
+Total flows detected...: 5
diff --git a/tests/out/nDPId_check_mk_new.pcap.txt b/tests/out/nDPId_check_mk_new.pcap.txt
new file mode 100644
index 000000000..32c5f2101
--- /dev/null
+++ b/tests/out/nDPId_check_mk_new.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 98
+Total packets processed: 98
+Total layer4 data size.: 16910
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_coap_mqtt.pcap.txt b/tests/out/nDPId_coap_mqtt.pcap.txt
new file mode 100644
index 000000000..4da2d3750
--- /dev/null
+++ b/tests/out/nDPId_coap_mqtt.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 8516
+Total packets processed: 8514
+Total layer4 data size.: 454667
+Total flows captured...: 16
+Total flows timed out..: 16
+Total flows detected...: 16
diff --git a/tests/out/nDPId_cpha.pcap.txt b/tests/out/nDPId_cpha.pcap.txt
new file mode 100644
index 000000000..0d9cc3813
--- /dev/null
+++ b/tests/out/nDPId_cpha.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_diameter.pcap.txt b/tests/out/nDPId_diameter.pcap.txt
new file mode 100644
index 000000000..d3dfb4208
--- /dev/null
+++ b/tests/out/nDPId_diameter.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 6
+Total packets processed: 6
+Total layer4 data size.: 1776
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_dlt_ppp.pcap.txt b/tests/out/nDPId_dlt_ppp.pcap.txt
new file mode 100644
index 000000000..0d9cc3813
--- /dev/null
+++ b/tests/out/nDPId_dlt_ppp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_dnp3.pcap.txt b/tests/out/nDPId_dnp3.pcap.txt
new file mode 100644
index 000000000..bfa39bd8c
--- /dev/null
+++ b/tests/out/nDPId_dnp3.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 543
+Total packets processed: 543
+Total layer4 data size.: 19032
+Total flows captured...: 8
+Total flows timed out..: 8
+Total flows detected...: 8
diff --git a/tests/out/nDPId_dns-tunnel-iodine.pcap.txt b/tests/out/nDPId_dns-tunnel-iodine.pcap.txt
new file mode 100644
index 000000000..6370ca72a
--- /dev/null
+++ b/tests/out/nDPId_dns-tunnel-iodine.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 438
+Total packets processed: 434
+Total layer4 data size.: 55496
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_dns_doh.pcap.txt b/tests/out/nDPId_dns_doh.pcap.txt
new file mode 100644
index 000000000..87412715d
--- /dev/null
+++ b/tests/out/nDPId_dns_doh.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 142
+Total packets processed: 142
+Total layer4 data size.: 15534
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_dns_dot.pcap.txt b/tests/out/nDPId_dns_dot.pcap.txt
new file mode 100644
index 000000000..6fdd7fad1
--- /dev/null
+++ b/tests/out/nDPId_dns_dot.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 24
+Total packets processed: 24
+Total layer4 data size.: 5053
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_dns_exfiltration.pcap.txt b/tests/out/nDPId_dns_exfiltration.pcap.txt
new file mode 100644
index 000000000..e55ae7138
--- /dev/null
+++ b/tests/out/nDPId_dns_exfiltration.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 300
+Total packets processed: 300
+Total layer4 data size.: 63345
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_dns_long_domainname.pcap.txt b/tests/out/nDPId_dns_long_domainname.pcap.txt
new file mode 100644
index 000000000..92d8adcc6
--- /dev/null
+++ b/tests/out/nDPId_dns_long_domainname.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 2
+Total layer4 data size.: 194
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt b/tests/out/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt
new file mode 100644
index 000000000..a4edd3a5c
--- /dev/null
+++ b/tests/out/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 608
+Total packets processed: 488
+Total layer4 data size.: 292970
+Total flows captured...: 251
+Total flows timed out..: 251
+Total flows detected...: 251
diff --git a/tests/out/nDPId_dnscrypt-v2-doh.pcap.txt b/tests/out/nDPId_dnscrypt-v2-doh.pcap.txt
new file mode 100644
index 000000000..259b8749a
--- /dev/null
+++ b/tests/out/nDPId_dnscrypt-v2-doh.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 577
+Total packets processed: 577
+Total layer4 data size.: 196960
+Total flows captured...: 34
+Total flows timed out..: 34
+Total flows detected...: 34
diff --git a/tests/out/nDPId_dos_win98_smb_netbeui.pcap.txt b/tests/out/nDPId_dos_win98_smb_netbeui.pcap.txt
new file mode 100644
index 000000000..5049fb9dc
--- /dev/null
+++ b/tests/out/nDPId_dos_win98_smb_netbeui.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 220
+Total packets processed: 62
+Total layer4 data size.: 6441
+Total flows captured...: 4
+Total flows timed out..: 4
+Total flows detected...: 4
diff --git a/tests/out/nDPId_drda_db2.pcap.txt b/tests/out/nDPId_drda_db2.pcap.txt
new file mode 100644
index 000000000..96b5e9c41
--- /dev/null
+++ b/tests/out/nDPId_drda_db2.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 38
+Total packets processed: 38
+Total layer4 data size.: 5399
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_dropbox.pcap.txt b/tests/out/nDPId_dropbox.pcap.txt
new file mode 100644
index 000000000..5e5c0e2c3
--- /dev/null
+++ b/tests/out/nDPId_dropbox.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 848
+Total packets processed: 848
+Total layer4 data size.: 61700
+Total flows captured...: 15
+Total flows timed out..: 15
+Total flows detected...: 15
diff --git a/tests/out/nDPId_dtls.pcap.txt b/tests/out/nDPId_dtls.pcap.txt
new file mode 100644
index 000000000..5dda4c7cc
--- /dev/null
+++ b/tests/out/nDPId_dtls.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 2
+Total layer4 data size.: 326
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_encrypted_sni.pcap.txt b/tests/out/nDPId_encrypted_sni.pcap.txt
new file mode 100644
index 000000000..3da57f0c0
--- /dev/null
+++ b/tests/out/nDPId_encrypted_sni.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3
+Total packets processed: 3
+Total layer4 data size.: 2208
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_ethereum.pcap.txt b/tests/out/nDPId_ethereum.pcap.txt
new file mode 100644
index 000000000..1b0e7a078
--- /dev/null
+++ b/tests/out/nDPId_ethereum.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2000
+Total packets processed: 2000
+Total layer4 data size.: 145756
+Total flows captured...: 74
+Total flows timed out..: 74
+Total flows detected...: 53
diff --git a/tests/out/nDPId_exe_download.pcap.txt b/tests/out/nDPId_exe_download.pcap.txt
new file mode 100644
index 000000000..a136bca7e
--- /dev/null
+++ b/tests/out/nDPId_exe_download.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 703
+Total packets processed: 703
+Total layer4 data size.: 693561
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_exe_download_as_png.pcap.txt b/tests/out/nDPId_exe_download_as_png.pcap.txt
new file mode 100644
index 000000000..4f549344c
--- /dev/null
+++ b/tests/out/nDPId_exe_download_as_png.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 534
+Total packets processed: 534
+Total layer4 data size.: 511293
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_facebook.pcap.txt b/tests/out/nDPId_facebook.pcap.txt
new file mode 100644
index 000000000..3b5f3c46e
--- /dev/null
+++ b/tests/out/nDPId_facebook.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 60
+Total packets processed: 60
+Total layer4 data size.: 28471
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_fbzero-missing-lengthcheck.pcap.txt b/tests/out/nDPId_fbzero-missing-lengthcheck.pcap.txt
new file mode 100644
index 000000000..ca31ae6ed
--- /dev/null
+++ b/tests/out/nDPId_fbzero-missing-lengthcheck.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 141
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_fix.pcap.txt b/tests/out/nDPId_fix.pcap.txt
new file mode 100644
index 000000000..fb1dc1606
--- /dev/null
+++ b/tests/out/nDPId_fix.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1261
+Total packets processed: 1261
+Total layer4 data size.: 71026
+Total flows captured...: 12
+Total flows timed out..: 12
+Total flows detected...: 12
diff --git a/tests/out/nDPId_ftp.pcap.txt b/tests/out/nDPId_ftp.pcap.txt
new file mode 100644
index 000000000..01b13e5f9
--- /dev/null
+++ b/tests/out/nDPId_ftp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1192
+Total packets processed: 1192
+Total layer4 data size.: 1089060
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 2
diff --git a/tests/out/nDPId_ftp_failed.pcap.txt b/tests/out/nDPId_ftp_failed.pcap.txt
new file mode 100644
index 000000000..9ce577bef
--- /dev/null
+++ b/tests/out/nDPId_ftp_failed.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 18
+Total packets processed: 18
+Total layer4 data size.: 728
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_fuzz-2006-06-26-2594.pcap.txt b/tests/out/nDPId_fuzz-2006-06-26-2594.pcap.txt
new file mode 100644
index 000000000..caaa5faba
--- /dev/null
+++ b/tests/out/nDPId_fuzz-2006-06-26-2594.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 691
+Total packets processed: 554
+Total layer4 data size.: 63645
+Total flows captured...: 245
+Total flows timed out..: 245
+Total flows detected...: 174
diff --git a/tests/out/nDPId_fuzz-2006-09-29-28586.pcap.txt b/tests/out/nDPId_fuzz-2006-09-29-28586.pcap.txt
new file mode 100644
index 000000000..a8656e79c
--- /dev/null
+++ b/tests/out/nDPId_fuzz-2006-09-29-28586.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 131
+Total packets processed: 117
+Total layer4 data size.: 24616
+Total flows captured...: 38
+Total flows timed out..: 38
+Total flows detected...: 13
diff --git a/tests/out/nDPId_fuzz-2020-02-16-11740.pcap.txt b/tests/out/nDPId_fuzz-2020-02-16-11740.pcap.txt
new file mode 100644
index 000000000..ee257ae73
--- /dev/null
+++ b/tests/out/nDPId_fuzz-2020-02-16-11740.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 366
+Total packets processed: 299
+Total layer4 data size.: 131139
+Total flows captured...: 75
+Total flows timed out..: 75
+Total flows detected...: 60
diff --git a/tests/out/nDPId_git.pcap.txt b/tests/out/nDPId_git.pcap.txt
new file mode 100644
index 000000000..fc7f7f6c9
--- /dev/null
+++ b/tests/out/nDPId_git.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 90
+Total packets processed: 90
+Total layer4 data size.: 70945
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_google_ssl.pcap.txt b/tests/out/nDPId_google_ssl.pcap.txt
new file mode 100644
index 000000000..3ced50733
--- /dev/null
+++ b/tests/out/nDPId_google_ssl.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 28
+Total packets processed: 28
+Total layer4 data size.: 8136
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_googledns_android10.pcap.txt b/tests/out/nDPId_googledns_android10.pcap.txt
new file mode 100644
index 000000000..9c2b3fe37
--- /dev/null
+++ b/tests/out/nDPId_googledns_android10.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 532
+Total packets processed: 532
+Total layer4 data size.: 114806
+Total flows captured...: 8
+Total flows timed out..: 8
+Total flows detected...: 6
diff --git a/tests/out/nDPId_gquic.pcap.txt b/tests/out/nDPId_gquic.pcap.txt
new file mode 100644
index 000000000..48fb550f2
--- /dev/null
+++ b/tests/out/nDPId_gquic.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 1358
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_h323-overflow.pcap.txt b/tests/out/nDPId_h323-overflow.pcap.txt
new file mode 100644
index 000000000..97a68a981
--- /dev/null
+++ b/tests/out/nDPId_h323-overflow.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 24
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 0
diff --git a/tests/out/nDPId_hangout.pcap.txt b/tests/out/nDPId_hangout.pcap.txt
new file mode 100644
index 000000000..7f799a068
--- /dev/null
+++ b/tests/out/nDPId_hangout.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 19
+Total packets processed: 19
+Total layer4 data size.: 2128
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_http-crash-content-disposition.pcap.txt b/tests/out/nDPId_http-crash-content-disposition.pcap.txt
new file mode 100644
index 000000000..949167db8
--- /dev/null
+++ b/tests/out/nDPId_http-crash-content-disposition.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 9
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_http-lines-split.pcap.txt b/tests/out/nDPId_http-lines-split.pcap.txt
new file mode 100644
index 000000000..82e6360a3
--- /dev/null
+++ b/tests/out/nDPId_http-lines-split.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 14
+Total packets processed: 14
+Total layer4 data size.: 2003
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_http_ipv6.pcap.txt b/tests/out/nDPId_http_ipv6.pcap.txt
new file mode 100644
index 000000000..b18d9be39
--- /dev/null
+++ b/tests/out/nDPId_http_ipv6.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 193
+Total packets processed: 193
+Total layer4 data size.: 55905
+Total flows captured...: 15
+Total flows timed out..: 15
+Total flows detected...: 7
diff --git a/tests/out/nDPId_iec60780-5-104.pcap.txt b/tests/out/nDPId_iec60780-5-104.pcap.txt
new file mode 100644
index 000000000..982c5e444
--- /dev/null
+++ b/tests/out/nDPId_iec60780-5-104.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 147
+Total packets processed: 147
+Total layer4 data size.: 3784
+Total flows captured...: 6
+Total flows timed out..: 6
+Total flows detected...: 6
diff --git a/tests/out/nDPId_imaps.pcap.txt b/tests/out/nDPId_imaps.pcap.txt
new file mode 100644
index 000000000..2091293ab
--- /dev/null
+++ b/tests/out/nDPId_imaps.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 4516
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_instagram.pcap.txt b/tests/out/nDPId_instagram.pcap.txt
new file mode 100644
index 000000000..19f445391
--- /dev/null
+++ b/tests/out/nDPId_instagram.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3443
+Total packets processed: 3442
+Total layer4 data size.: 2809611
+Total flows captured...: 38
+Total flows timed out..: 38
+Total flows detected...: 25
diff --git a/tests/out/nDPId_iphone.pcap.txt b/tests/out/nDPId_iphone.pcap.txt
new file mode 100644
index 000000000..e9fa95daf
--- /dev/null
+++ b/tests/out/nDPId_iphone.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 500
+Total packets processed: 486
+Total layer4 data size.: 204168
+Total flows captured...: 51
+Total flows timed out..: 51
+Total flows detected...: 50
diff --git a/tests/out/nDPId_ipv6_in_gtp.pcap.txt b/tests/out/nDPId_ipv6_in_gtp.pcap.txt
new file mode 100644
index 000000000..42109659a
--- /dev/null
+++ b/tests/out/nDPId_ipv6_in_gtp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_ja3_lots_of_cipher_suites.pcap.txt b/tests/out/nDPId_ja3_lots_of_cipher_suites.pcap.txt
new file mode 100644
index 000000000..02f59a1c7
--- /dev/null
+++ b/tests/out/nDPId_ja3_lots_of_cipher_suites.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 11
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt b/tests/out/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt
new file mode 100644
index 000000000..8a3ca1d9b
--- /dev/null
+++ b/tests/out/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 27
+Total packets processed: 27
+Total layer4 data size.: 6048
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_kerberos.pcap.txt b/tests/out/nDPId_kerberos.pcap.txt
new file mode 100644
index 000000000..459f69fed
--- /dev/null
+++ b/tests/out/nDPId_kerberos.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 77
+Total packets processed: 77
+Total layer4 data size.: 25673
+Total flows captured...: 36
+Total flows timed out..: 36
+Total flows detected...: 3
diff --git a/tests/out/nDPId_malformed_dns.pcap.txt b/tests/out/nDPId_malformed_dns.pcap.txt
new file mode 100644
index 000000000..7ca8f390c
--- /dev/null
+++ b/tests/out/nDPId_malformed_dns.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 6
+Total packets processed: 6
+Total layer4 data size.: 5656
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_malformed_icmp.pcap.txt b/tests/out/nDPId_malformed_icmp.pcap.txt
new file mode 100644
index 000000000..2bb875164
--- /dev/null
+++ b/tests/out/nDPId_malformed_icmp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 8
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_malware.pcap.txt b/tests/out/nDPId_malware.pcap.txt
new file mode 100644
index 000000000..89547ee8e
--- /dev/null
+++ b/tests/out/nDPId_malware.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 26
+Total packets processed: 26
+Total layer4 data size.: 7099
+Total flows captured...: 5
+Total flows timed out..: 5
+Total flows detected...: 4
diff --git a/tests/out/nDPId_modbus.pcap.txt b/tests/out/nDPId_modbus.pcap.txt
new file mode 100644
index 000000000..59087efed
--- /dev/null
+++ b/tests/out/nDPId_modbus.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 102
+Total packets processed: 102
+Total layer4 data size.: 3213
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_monero.pcap.txt b/tests/out/nDPId_monero.pcap.txt
new file mode 100644
index 000000000..98c57c749
--- /dev/null
+++ b/tests/out/nDPId_monero.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 319
+Total packets processed: 319
+Total layer4 data size.: 155806
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_mongodb.pcap.txt b/tests/out/nDPId_mongodb.pcap.txt
new file mode 100644
index 000000000..aad558781
--- /dev/null
+++ b/tests/out/nDPId_mongodb.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 27
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_mpeg.pcap.txt b/tests/out/nDPId_mpeg.pcap.txt
new file mode 100644
index 000000000..a0dd786cc
--- /dev/null
+++ b/tests/out/nDPId_mpeg.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 19
+Total packets processed: 19
+Total layer4 data size.: 9991
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_mpegts.pcap.txt b/tests/out/nDPId_mpegts.pcap.txt
new file mode 100644
index 000000000..0d9cc3813
--- /dev/null
+++ b/tests/out/nDPId_mpegts.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_mssql_tds.pcap.txt b/tests/out/nDPId_mssql_tds.pcap.txt
new file mode 100644
index 000000000..62f4ed72e
--- /dev/null
+++ b/tests/out/nDPId_mssql_tds.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 38
+Total packets processed: 38
+Total layer4 data size.: 14950
+Total flows captured...: 12
+Total flows timed out..: 12
+Total flows detected...: 11
diff --git a/tests/out/nDPId_mysql-8.pcap.txt b/tests/out/nDPId_mysql-8.pcap.txt
new file mode 100644
index 000000000..4a8c67d7b
--- /dev/null
+++ b/tests/out/nDPId_mysql-8.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 4
+Total packets processed: 4
+Total layer4 data size.: 231
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_nats.pcap.txt b/tests/out/nDPId_nats.pcap.txt
new file mode 100644
index 000000000..aad558781
--- /dev/null
+++ b/tests/out/nDPId_nats.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 27
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_nest_log_sink.pcap.txt b/tests/out/nDPId_nest_log_sink.pcap.txt
new file mode 100644
index 000000000..cb43621da
--- /dev/null
+++ b/tests/out/nDPId_nest_log_sink.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1000
+Total packets processed: 774
+Total layer4 data size.: 90776
+Total flows captured...: 17
+Total flows timed out..: 17
+Total flows detected...: 16
diff --git a/tests/out/nDPId_netbios.pcap.txt b/tests/out/nDPId_netbios.pcap.txt
new file mode 100644
index 000000000..7d2f871d8
--- /dev/null
+++ b/tests/out/nDPId_netbios.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 260
+Total packets processed: 260
+Total layer4 data size.: 15831
+Total flows captured...: 15
+Total flows timed out..: 15
+Total flows detected...: 14
diff --git a/tests/out/nDPId_netbios_wildcard_dns_query.pcap.txt b/tests/out/nDPId_netbios_wildcard_dns_query.pcap.txt
new file mode 100644
index 000000000..d5d1a2416
--- /dev/null
+++ b/tests/out/nDPId_netbios_wildcard_dns_query.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 58
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_netflix.pcap.txt b/tests/out/nDPId_netflix.pcap.txt
new file mode 100644
index 000000000..d9c3abe74
--- /dev/null
+++ b/tests/out/nDPId_netflix.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 6999
+Total packets processed: 6999
+Total layer4 data size.: 5916793
+Total flows captured...: 61
+Total flows timed out..: 61
+Total flows detected...: 60
diff --git a/tests/out/nDPId_netflow-fritz.pcap.txt b/tests/out/nDPId_netflow-fritz.pcap.txt
new file mode 100644
index 000000000..37916194d
--- /dev/null
+++ b/tests/out/nDPId_netflow-fritz.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1
+Total packets processed: 1
+Total layer4 data size.: 188
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_netflowv9.pcap.txt b/tests/out/nDPId_netflowv9.pcap.txt
new file mode 100644
index 000000000..df32d1889
--- /dev/null
+++ b/tests/out/nDPId_netflowv9.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 10
+Total packets processed: 10
+Total layer4 data size.: 13548
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_nintendo.pcap.txt b/tests/out/nDPId_nintendo.pcap.txt
new file mode 100644
index 000000000..bda7cc496
--- /dev/null
+++ b/tests/out/nDPId_nintendo.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1000
+Total packets processed: 996
+Total layer4 data size.: 299289
+Total flows captured...: 21
+Total flows timed out..: 21
+Total flows detected...: 14
diff --git a/tests/out/nDPId_no_sni.pcap.txt b/tests/out/nDPId_no_sni.pcap.txt
new file mode 100644
index 000000000..c730e10fa
--- /dev/null
+++ b/tests/out/nDPId_no_sni.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1185
+Total packets processed: 1185
+Total layer4 data size.: 553330
+Total flows captured...: 8
+Total flows timed out..: 8
+Total flows detected...: 7
diff --git a/tests/out/nDPId_ocs.pcap.txt b/tests/out/nDPId_ocs.pcap.txt
new file mode 100644
index 000000000..60cf2c720
--- /dev/null
+++ b/tests/out/nDPId_ocs.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 946
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_ookla.pcap.txt b/tests/out/nDPId_ookla.pcap.txt
new file mode 100644
index 000000000..ca0527ae6
--- /dev/null
+++ b/tests/out/nDPId_ookla.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 5086
+Total packets processed: 5086
+Total layer4 data size.: 4516821
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_openvpn.pcap.txt b/tests/out/nDPId_openvpn.pcap.txt
new file mode 100644
index 000000000..e5bd263da
--- /dev/null
+++ b/tests/out/nDPId_openvpn.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 298
+Total packets processed: 298
+Total layer4 data size.: 46979
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_pinterest.pcap.txt b/tests/out/nDPId_pinterest.pcap.txt
new file mode 100644
index 000000000..219b6b49a
--- /dev/null
+++ b/tests/out/nDPId_pinterest.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 17657
+Total packets processed: 17657
+Total layer4 data size.: 27055447
+Total flows captured...: 37
+Total flows timed out..: 37
+Total flows detected...: 20
diff --git a/tests/out/nDPId_pps.pcap.txt b/tests/out/nDPId_pps.pcap.txt
new file mode 100644
index 000000000..afeb49ab7
--- /dev/null
+++ b/tests/out/nDPId_pps.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2557
+Total packets processed: 2557
+Total layer4 data size.: 2159666
+Total flows captured...: 107
+Total flows timed out..: 107
+Total flows detected...: 71
diff --git a/tests/out/nDPId_ps_vue.pcap.txt b/tests/out/nDPId_ps_vue.pcap.txt
new file mode 100644
index 000000000..84bdcb031
--- /dev/null
+++ b/tests/out/nDPId_ps_vue.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1740
+Total packets processed: 1740
+Total layer4 data size.: 2141790
+Total flows captured...: 8
+Total flows timed out..: 8
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-23.pcap.txt b/tests/out/nDPId_quic-23.pcap.txt
new file mode 100644
index 000000000..64c19c8de
--- /dev/null
+++ b/tests/out/nDPId_quic-23.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 6111
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-24.pcap.txt b/tests/out/nDPId_quic-24.pcap.txt
new file mode 100644
index 000000000..4b4f8ede7
--- /dev/null
+++ b/tests/out/nDPId_quic-24.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 15
+Total packets processed: 15
+Total layer4 data size.: 7490
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-27.pcap.txt b/tests/out/nDPId_quic-27.pcap.txt
new file mode 100644
index 000000000..17e5bb07c
--- /dev/null
+++ b/tests/out/nDPId_quic-27.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 11807
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-28.pcap.txt b/tests/out/nDPId_quic-28.pcap.txt
new file mode 100644
index 000000000..eb6bd441e
--- /dev/null
+++ b/tests/out/nDPId_quic-28.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 253
+Total packets processed: 253
+Total layer4 data size.: 238191
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-29.pcap.txt b/tests/out/nDPId_quic-29.pcap.txt
new file mode 100644
index 000000000..ae6e31ff0
--- /dev/null
+++ b/tests/out/nDPId_quic-29.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 15
+Total packets processed: 15
+Total layer4 data size.: 8876
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-mvfst-22.pcap.txt b/tests/out/nDPId_quic-mvfst-22.pcap.txt
new file mode 100644
index 000000000..cc5008031
--- /dev/null
+++ b/tests/out/nDPId_quic-mvfst-22.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 490
+Total packets processed: 490
+Total layer4 data size.: 271643
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-mvfst-22_decryption_error.pcap.txt b/tests/out/nDPId_quic-mvfst-22_decryption_error.pcap.txt
new file mode 100644
index 000000000..20d542c69
--- /dev/null
+++ b/tests/out/nDPId_quic-mvfst-22_decryption_error.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 353
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_quic-mvfst-27.pcap.txt b/tests/out/nDPId_quic-mvfst-27.pcap.txt
new file mode 100644
index 000000000..17e5bb07c
--- /dev/null
+++ b/tests/out/nDPId_quic-mvfst-27.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 11807
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic-mvfst-exp.pcap.txt b/tests/out/nDPId_quic-mvfst-exp.pcap.txt
new file mode 100644
index 000000000..9a51e0b5f
--- /dev/null
+++ b/tests/out/nDPId_quic-mvfst-exp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 30
+Total packets processed: 30
+Total layer4 data size.: 24689
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic.pcap.txt b/tests/out/nDPId_quic.pcap.txt
new file mode 100644
index 000000000..0b23e2f35
--- /dev/null
+++ b/tests/out/nDPId_quic.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 518
+Total packets processed: 518
+Total layer4 data size.: 330954
+Total flows captured...: 10
+Total flows timed out..: 10
+Total flows detected...: 9
diff --git a/tests/out/nDPId_quic046.pcap.txt b/tests/out/nDPId_quic046.pcap.txt
new file mode 100644
index 000000000..1f0e28aba
--- /dev/null
+++ b/tests/out/nDPId_quic046.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 100
+Total packets processed: 100
+Total layer4 data size.: 87897
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_0RTT.pcap.txt b/tests/out/nDPId_quic_0RTT.pcap.txt
new file mode 100644
index 000000000..a542c8401
--- /dev/null
+++ b/tests/out/nDPId_quic_0RTT.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 2
+Total layer4 data size.: 2480
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_q39.pcap.txt b/tests/out/nDPId_quic_q39.pcap.txt
new file mode 100644
index 000000000..421bf9b7d
--- /dev/null
+++ b/tests/out/nDPId_quic_q39.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 60
+Total packets processed: 60
+Total layer4 data size.: 22131
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_q43.pcap.txt b/tests/out/nDPId_quic_q43.pcap.txt
new file mode 100644
index 000000000..54d6e144c
--- /dev/null
+++ b/tests/out/nDPId_quic_q43.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2
+Total packets processed: 2
+Total layer4 data size.: 1396
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_q46.pcap.txt b/tests/out/nDPId_quic_q46.pcap.txt
new file mode 100644
index 000000000..a1317576b
--- /dev/null
+++ b/tests/out/nDPId_quic_q46.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 20561
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_q46_b.pcap.txt b/tests/out/nDPId_quic_q46_b.pcap.txt
new file mode 100644
index 000000000..8bcc0dc83
--- /dev/null
+++ b/tests/out/nDPId_quic_q46_b.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 5380
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_q50.pcap.txt b/tests/out/nDPId_quic_q50.pcap.txt
new file mode 100644
index 000000000..16e8aebba
--- /dev/null
+++ b/tests/out/nDPId_quic_q50.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 20
+Total layer4 data size.: 19754
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_t50.pcap.txt b/tests/out/nDPId_quic_t50.pcap.txt
new file mode 100644
index 000000000..1d1def8f3
--- /dev/null
+++ b/tests/out/nDPId_quic_t50.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 12
+Total packets processed: 12
+Total layer4 data size.: 8012
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quic_t51.pcap.txt b/tests/out/nDPId_quic_t51.pcap.txt
new file mode 100644
index 000000000..bb19dc531
--- /dev/null
+++ b/tests/out/nDPId_quic_t51.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 642
+Total packets processed: 642
+Total layer4 data size.: 551890
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_quickplay.pcap.txt b/tests/out/nDPId_quickplay.pcap.txt
new file mode 100644
index 000000000..e13da12fa
--- /dev/null
+++ b/tests/out/nDPId_quickplay.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 155
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_rdp.pcap.txt b/tests/out/nDPId_rdp.pcap.txt
new file mode 100644
index 000000000..e41cc8a46
--- /dev/null
+++ b/tests/out/nDPId_rdp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2010
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_reddit.pcap.txt b/tests/out/nDPId_reddit.pcap.txt
new file mode 100644
index 000000000..5054d54cd
--- /dev/null
+++ b/tests/out/nDPId_reddit.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 11682
+Total packets processed: 11682
+Total layer4 data size.: 10947343
+Total flows captured...: 60
+Total flows timed out..: 60
+Total flows detected...: 59
diff --git a/tests/out/nDPId_rx.pcap.txt b/tests/out/nDPId_rx.pcap.txt
new file mode 100644
index 000000000..a2d82e366
--- /dev/null
+++ b/tests/out/nDPId_rx.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 132
+Total packets processed: 132
+Total layer4 data size.: 21987
+Total flows captured...: 5
+Total flows timed out..: 5
+Total flows detected...: 5
diff --git a/tests/out/nDPId_s7comm.pcap.txt b/tests/out/nDPId_s7comm.pcap.txt
new file mode 100644
index 000000000..ed6cad647
--- /dev/null
+++ b/tests/out/nDPId_s7comm.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 55
+Total packets processed: 55
+Total layer4 data size.: 3390
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_selfsigned.pcap.txt b/tests/out/nDPId_selfsigned.pcap.txt
new file mode 100644
index 000000000..1e1b5a1e5
--- /dev/null
+++ b/tests/out/nDPId_selfsigned.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 20
+Total packets processed: 0
+Total layer4 data size.: 0
+Total flows captured...: 0
+Total flows timed out..: 0
+Total flows detected...: 0
diff --git a/tests/out/nDPId_signal.pcap.txt b/tests/out/nDPId_signal.pcap.txt
new file mode 100644
index 000000000..219dc42fd
--- /dev/null
+++ b/tests/out/nDPId_signal.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 637
+Total packets processed: 637
+Total layer4 data size.: 294110
+Total flows captured...: 19
+Total flows timed out..: 19
+Total flows detected...: 16
diff --git a/tests/out/nDPId_simple-dnscrypt.pcap.txt b/tests/out/nDPId_simple-dnscrypt.pcap.txt
new file mode 100644
index 000000000..b5a3fd828
--- /dev/null
+++ b/tests/out/nDPId_simple-dnscrypt.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 111
+Total packets processed: 111
+Total layer4 data size.: 40902
+Total flows captured...: 4
+Total flows timed out..: 4
+Total flows detected...: 4
diff --git a/tests/out/nDPId_sip.pcap.txt b/tests/out/nDPId_sip.pcap.txt
new file mode 100644
index 000000000..4651230f7
--- /dev/null
+++ b/tests/out/nDPId_sip.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 112
+Total packets processed: 112
+Total layer4 data size.: 45351
+Total flows captured...: 4
+Total flows timed out..: 4
+Total flows detected...: 4
diff --git a/tests/out/nDPId_skype-conference-call.pcap.txt b/tests/out/nDPId_skype-conference-call.pcap.txt
new file mode 100644
index 000000000..3bec124dd
--- /dev/null
+++ b/tests/out/nDPId_skype-conference-call.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 200
+Total packets processed: 200
+Total layer4 data size.: 32887
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_skype.pcap.txt b/tests/out/nDPId_skype.pcap.txt
new file mode 100644
index 000000000..5c0b2c067
--- /dev/null
+++ b/tests/out/nDPId_skype.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3284
+Total packets processed: 3069
+Total layer4 data size.: 529727
+Total flows captured...: 293
+Total flows timed out..: 293
+Total flows detected...: 199
diff --git a/tests/out/nDPId_skype_no_unknown.pcap.txt b/tests/out/nDPId_skype_no_unknown.pcap.txt
new file mode 100644
index 000000000..925111cd4
--- /dev/null
+++ b/tests/out/nDPId_skype_no_unknown.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2146
+Total packets processed: 2079
+Total layer4 data size.: 416800
+Total flows captured...: 267
+Total flows timed out..: 267
+Total flows detected...: 194
diff --git a/tests/out/nDPId_skype_udp.pcap.txt b/tests/out/nDPId_skype_udp.pcap.txt
new file mode 100644
index 000000000..0fdf2f255
--- /dev/null
+++ b/tests/out/nDPId_skype_udp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 5
+Total packets processed: 5
+Total layer4 data size.: 169
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_smb_deletefile.pcap.txt b/tests/out/nDPId_smb_deletefile.pcap.txt
new file mode 100644
index 000000000..3de3001bc
--- /dev/null
+++ b/tests/out/nDPId_smb_deletefile.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 101
+Total packets processed: 101
+Total layer4 data size.: 27272
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_smbv1.pcap.txt b/tests/out/nDPId_smbv1.pcap.txt
new file mode 100644
index 000000000..2e983987a
--- /dev/null
+++ b/tests/out/nDPId_smbv1.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 7
+Total packets processed: 7
+Total layer4 data size.: 959
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_smpp_in_general.pcap.txt b/tests/out/nDPId_smpp_in_general.pcap.txt
new file mode 100644
index 000000000..3399fabcf
--- /dev/null
+++ b/tests/out/nDPId_smpp_in_general.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 17
+Total packets processed: 17
+Total layer4 data size.: 552
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_snapchat.pcap.txt b/tests/out/nDPId_snapchat.pcap.txt
new file mode 100644
index 000000000..1d5a1f8f6
--- /dev/null
+++ b/tests/out/nDPId_snapchat.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 56
+Total packets processed: 56
+Total layer4 data size.: 8295
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_ssdp-m-search.pcap.txt b/tests/out/nDPId_ssdp-m-search.pcap.txt
new file mode 100644
index 000000000..2cefe3e40
--- /dev/null
+++ b/tests/out/nDPId_ssdp-m-search.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 19
+Total packets processed: 19
+Total layer4 data size.: 551
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_ssh.pcap.txt b/tests/out/nDPId_ssh.pcap.txt
new file mode 100644
index 000000000..3cd2420a0
--- /dev/null
+++ b/tests/out/nDPId_ssh.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 258
+Total packets processed: 258
+Total layer4 data size.: 26774
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_starcraft_battle.pcap.txt b/tests/out/nDPId_starcraft_battle.pcap.txt
new file mode 100644
index 000000000..3a9302946
--- /dev/null
+++ b/tests/out/nDPId_starcraft_battle.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 800
+Total packets processed: 797
+Total layer4 data size.: 332408
+Total flows captured...: 52
+Total flows timed out..: 52
+Total flows detected...: 30
diff --git a/tests/out/nDPId_steam.pcap.txt b/tests/out/nDPId_steam.pcap.txt
new file mode 100644
index 000000000..078f37613
--- /dev/null
+++ b/tests/out/nDPId_steam.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 104
+Total packets processed: 104
+Total layer4 data size.: 5484
+Total flows captured...: 55
+Total flows timed out..: 55
+Total flows detected...: 55
diff --git a/tests/out/nDPId_teams.pcap.txt b/tests/out/nDPId_teams.pcap.txt
new file mode 100644
index 000000000..f79ba972f
--- /dev/null
+++ b/tests/out/nDPId_teams.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2817
+Total packets processed: 2775
+Total layer4 data size.: 1392023
+Total flows captured...: 83
+Total flows timed out..: 83
+Total flows detected...: 78
diff --git a/tests/out/nDPId_teamspeak3.pcap.txt b/tests/out/nDPId_teamspeak3.pcap.txt
new file mode 100644
index 000000000..b3b8b83bb
--- /dev/null
+++ b/tests/out/nDPId_teamspeak3.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 13
+Total packets processed: 13
+Total layer4 data size.: 1469
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_telegram.pcap.txt b/tests/out/nDPId_telegram.pcap.txt
new file mode 100644
index 000000000..e853658e1
--- /dev/null
+++ b/tests/out/nDPId_telegram.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1566
+Total packets processed: 1566
+Total layer4 data size.: 281061
+Total flows captured...: 48
+Total flows timed out..: 48
+Total flows detected...: 46
diff --git a/tests/out/nDPId_teredo.pcap.txt b/tests/out/nDPId_teredo.pcap.txt
new file mode 100644
index 000000000..34b6fc96d
--- /dev/null
+++ b/tests/out/nDPId_teredo.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 24
+Total packets processed: 24
+Total layer4 data size.: 1758
+Total flows captured...: 5
+Total flows timed out..: 5
+Total flows detected...: 5
diff --git a/tests/out/nDPId_tftp_rrq.pcap.txt b/tests/out/nDPId_tftp_rrq.pcap.txt
new file mode 100644
index 000000000..0561d5133
--- /dev/null
+++ b/tests/out/nDPId_tftp_rrq.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 99
+Total packets processed: 99
+Total layer4 data size.: 25803
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 1
diff --git a/tests/out/nDPId_tinc.pcap.txt b/tests/out/nDPId_tinc.pcap.txt
new file mode 100644
index 000000000..6ade356d7
--- /dev/null
+++ b/tests/out/nDPId_tinc.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 317
+Total packets processed: 317
+Total layer4 data size.: 341465
+Total flows captured...: 4
+Total flows timed out..: 4
+Total flows detected...: 4
diff --git a/tests/out/nDPId_tls-esni-fuzzed.pcap.txt b/tests/out/nDPId_tls-esni-fuzzed.pcap.txt
new file mode 100644
index 000000000..3da57f0c0
--- /dev/null
+++ b/tests/out/nDPId_tls-esni-fuzzed.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3
+Total packets processed: 3
+Total layer4 data size.: 2208
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_tls-rdn-extract.pcap.txt b/tests/out/nDPId_tls-rdn-extract.pcap.txt
new file mode 100644
index 000000000..6853403b1
--- /dev/null
+++ b/tests/out/nDPId_tls-rdn-extract.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 6
+Total packets processed: 6
+Total layer4 data size.: 7001
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_tls_esni_sni_both.pcap.txt b/tests/out/nDPId_tls_esni_sni_both.pcap.txt
new file mode 100644
index 000000000..6cfa7f038
--- /dev/null
+++ b/tests/out/nDPId_tls_esni_sni_both.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 38
+Total packets processed: 38
+Total layer4 data size.: 14607
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_tls_long_cert.pcap.txt b/tests/out/nDPId_tls_long_cert.pcap.txt
new file mode 100644
index 000000000..91bc6ca12
--- /dev/null
+++ b/tests/out/nDPId_tls_long_cert.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 182
+Total packets processed: 182
+Total layer4 data size.: 111413
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_tls_verylong_certificate.pcap.txt b/tests/out/nDPId_tls_verylong_certificate.pcap.txt
new file mode 100644
index 000000000..6c8ae03e1
--- /dev/null
+++ b/tests/out/nDPId_tls_verylong_certificate.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 48
+Total packets processed: 48
+Total layer4 data size.: 20597
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_tor.pcap.txt b/tests/out/nDPId_tor.pcap.txt
new file mode 100644
index 000000000..510a6aa4e
--- /dev/null
+++ b/tests/out/nDPId_tor.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 3859
+Total packets processed: 3694
+Total layer4 data size.: 2886102
+Total flows captured...: 11
+Total flows timed out..: 11
+Total flows detected...: 10
diff --git a/tests/out/nDPId_tumblr.pcap.txt b/tests/out/nDPId_tumblr.pcap.txt
new file mode 100644
index 000000000..ef50de867
--- /dev/null
+++ b/tests/out/nDPId_tumblr.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 24745
+Total packets processed: 24745
+Total layer4 data size.: 23003102
+Total flows captured...: 47
+Total flows timed out..: 47
+Total flows detected...: 13
diff --git a/tests/out/nDPId_ubntac2.pcap.txt b/tests/out/nDPId_ubntac2.pcap.txt
new file mode 100644
index 000000000..f74ea2655
--- /dev/null
+++ b/tests/out/nDPId_ubntac2.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 8
+Total packets processed: 8
+Total layer4 data size.: 1464
+Total flows captured...: 8
+Total flows timed out..: 8
+Total flows detected...: 8
diff --git a/tests/out/nDPId_upnp.pcap.txt b/tests/out/nDPId_upnp.pcap.txt
new file mode 100644
index 000000000..ee4f7bcb6
--- /dev/null
+++ b/tests/out/nDPId_upnp.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 14
+Total packets processed: 14
+Total layer4 data size.: 9296
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_viber.pcap.txt b/tests/out/nDPId_viber.pcap.txt
new file mode 100644
index 000000000..58cb4cb3d
--- /dev/null
+++ b/tests/out/nDPId_viber.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 424
+Total packets processed: 420
+Total layer4 data size.: 132911
+Total flows captured...: 26
+Total flows timed out..: 26
+Total flows detected...: 22
diff --git a/tests/out/nDPId_vnc.pcap.txt b/tests/out/nDPId_vnc.pcap.txt
new file mode 100644
index 000000000..8e5f8bf1b
--- /dev/null
+++ b/tests/out/nDPId_vnc.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 4551
+Total packets processed: 4551
+Total layer4 data size.: 173334
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_wa_video.pcap.txt b/tests/out/nDPId_wa_video.pcap.txt
new file mode 100644
index 000000000..d16825771
--- /dev/null
+++ b/tests/out/nDPId_wa_video.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1567
+Total packets processed: 1567
+Total layer4 data size.: 907707
+Total flows captured...: 14
+Total flows timed out..: 14
+Total flows detected...: 13
diff --git a/tests/out/nDPId_wa_voice.pcap.txt b/tests/out/nDPId_wa_voice.pcap.txt
new file mode 100644
index 000000000..1ae6182c4
--- /dev/null
+++ b/tests/out/nDPId_wa_voice.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 736
+Total packets processed: 734
+Total layer4 data size.: 145160
+Total flows captured...: 28
+Total flows timed out..: 28
+Total flows detected...: 26
diff --git a/tests/out/nDPId_waze.pcap.txt b/tests/out/nDPId_waze.pcap.txt
new file mode 100644
index 000000000..5b9938270
--- /dev/null
+++ b/tests/out/nDPId_waze.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 597
+Total packets processed: 597
+Total layer4 data size.: 338695
+Total flows captured...: 33
+Total flows timed out..: 33
+Total flows detected...: 22
diff --git a/tests/out/nDPId_webex.pcap.txt b/tests/out/nDPId_webex.pcap.txt
new file mode 100644
index 000000000..133f6bc08
--- /dev/null
+++ b/tests/out/nDPId_webex.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1580
+Total packets processed: 1580
+Total layer4 data size.: 811183
+Total flows captured...: 57
+Total flows timed out..: 57
+Total flows detected...: 52
diff --git a/tests/out/nDPId_websocket.pcap.txt b/tests/out/nDPId_websocket.pcap.txt
new file mode 100644
index 000000000..f396210a6
--- /dev/null
+++ b/tests/out/nDPId_websocket.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 5
+Total packets processed: 5
+Total layer4 data size.: 271
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_wechat.pcap.txt b/tests/out/nDPId_wechat.pcap.txt
new file mode 100644
index 000000000..b089fe280
--- /dev/null
+++ b/tests/out/nDPId_wechat.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1672
+Total packets processed: 1672
+Total layer4 data size.: 608968
+Total flows captured...: 118
+Total flows timed out..: 118
+Total flows detected...: 78
diff --git a/tests/out/nDPId_weibo.pcap.txt b/tests/out/nDPId_weibo.pcap.txt
new file mode 100644
index 000000000..c2e460c96
--- /dev/null
+++ b/tests/out/nDPId_weibo.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 498
+Total packets processed: 498
+Total layer4 data size.: 250623
+Total flows captured...: 44
+Total flows timed out..: 44
+Total flows detected...: 23
diff --git a/tests/out/nDPId_whatsapp_login_call.pcap.txt b/tests/out/nDPId_whatsapp_login_call.pcap.txt
new file mode 100644
index 000000000..5e4c1ab16
--- /dev/null
+++ b/tests/out/nDPId_whatsapp_login_call.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 1253
+Total packets processed: 1251
+Total layer4 data size.: 150492
+Total flows captured...: 57
+Total flows timed out..: 57
+Total flows detected...: 34
diff --git a/tests/out/nDPId_whatsapp_login_chat.pcap.txt b/tests/out/nDPId_whatsapp_login_chat.pcap.txt
new file mode 100644
index 000000000..58f1aecd6
--- /dev/null
+++ b/tests/out/nDPId_whatsapp_login_chat.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 93
+Total packets processed: 93
+Total layer4 data size.: 26955
+Total flows captured...: 9
+Total flows timed out..: 9
+Total flows detected...: 7
diff --git a/tests/out/nDPId_whatsapp_voice_and_message.pcap.txt b/tests/out/nDPId_whatsapp_voice_and_message.pcap.txt
new file mode 100644
index 000000000..010a77d23
--- /dev/null
+++ b/tests/out/nDPId_whatsapp_voice_and_message.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 261
+Total packets processed: 261
+Total layer4 data size.: 19181
+Total flows captured...: 13
+Total flows timed out..: 13
+Total flows detected...: 8
diff --git a/tests/out/nDPId_whatsappfiles.pcap.txt b/tests/out/nDPId_whatsappfiles.pcap.txt
new file mode 100644
index 000000000..5d3b8065d
--- /dev/null
+++ b/tests/out/nDPId_whatsappfiles.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 620
+Total packets processed: 620
+Total layer4 data size.: 431135
+Total flows captured...: 2
+Total flows timed out..: 2
+Total flows detected...: 2
diff --git a/tests/out/nDPId_wireguard.pcap.txt b/tests/out/nDPId_wireguard.pcap.txt
new file mode 100644
index 000000000..4a6f92f39
--- /dev/null
+++ b/tests/out/nDPId_wireguard.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 2399
+Total packets processed: 2399
+Total layer4 data size.: 652616
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_youtube_quic.pcap.txt b/tests/out/nDPId_youtube_quic.pcap.txt
new file mode 100644
index 000000000..4914e86a8
--- /dev/null
+++ b/tests/out/nDPId_youtube_quic.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 289
+Total packets processed: 289
+Total layer4 data size.: 181813
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_youtubeupload.pcap.txt b/tests/out/nDPId_youtubeupload.pcap.txt
new file mode 100644
index 000000000..4b5ed07c1
--- /dev/null
+++ b/tests/out/nDPId_youtubeupload.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 137
+Total packets processed: 137
+Total layer4 data size.: 122362
+Total flows captured...: 3
+Total flows timed out..: 3
+Total flows detected...: 3
diff --git a/tests/out/nDPId_zabbix.pcap.txt b/tests/out/nDPId_zabbix.pcap.txt
new file mode 100644
index 000000000..1e40a2706
--- /dev/null
+++ b/tests/out/nDPId_zabbix.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 10
+Total packets processed: 10
+Total layer4 data size.: 375
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_zcash.pcap.txt b/tests/out/nDPId_zcash.pcap.txt
new file mode 100644
index 000000000..7b2c899bf
--- /dev/null
+++ b/tests/out/nDPId_zcash.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 145
+Total packets processed: 145
+Total layer4 data size.: 15714
+Total flows captured...: 1
+Total flows timed out..: 1
+Total flows detected...: 1
diff --git a/tests/out/nDPId_zoom.pcap.txt b/tests/out/nDPId_zoom.pcap.txt
new file mode 100644
index 000000000..b8b413678
--- /dev/null
+++ b/tests/out/nDPId_zoom.pcap.txt
@@ -0,0 +1,6 @@
+Total packets captured.: 700
+Total packets processed: 697
+Total layer4 data size.: 345098
+Total flows captured...: 33
+Total flows timed out..: 33
+Total flows detected...: 26
diff --git a/tests/result/nDPId_1kxun.pcap.txt b/tests/result/nDPId_1kxun.pcap.txt
new file mode 100644
index 000000000..f97f65d00
--- /dev/null
+++ b/tests/result/nDPId_1kxun.pcap.txt
@@ -0,0 +1,1108 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1470104373025,"flow_last_seen":1470104373025,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp"}
+0399{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104373,"pkt_len":68,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OooAAAER2FzAqAUs4AAA\/OizFOsAIin75qEAAAABAAAAAAAACGphc29uLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1470104373025,"flow_last_seen":1470104373025,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0399{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104373,"pkt_len":68,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OosAAAER2FvAqAUs4AAA\/OizFOsAIin75qEAAAABAAAAAAAACGphc29uLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":1470104373232,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp"}
+0548{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104373,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMBcAAAER01nAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":1470104373232,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":1470104373232,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp"}
+0548{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104373,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOowAAAERyPHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1470104373232,"flow_last_seen":1470104373232,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1470104373741,"flow_last_seen":1470104373741,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0778{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104373,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNKS5AgEGAMCRIFIAAIAAwKgFJMCoBSTAqHcBAAAAAAAmWsJjVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1470104373741,"flow_last_seen":1470104373741,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1470104375419,"flow_last_seen":1470104375419,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp"}
+0393{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104375,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0ZDJAAEAGzmrAqAUQROn9hdFlAFAG4xw3xV6fSoAREAEocwAAAQEIChoPAavPGvHS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":1470104376017,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp"}
+0552{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104376,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRIAAAQRv2HAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":1470104376017,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":1470104376017,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp"}
+0548{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104376,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfhwAAAERhWTAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1470104376017,"flow_last_seen":1470104376017,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0548{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104376,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMIoAAAER0ubAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104376,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOpEAAAERyOzAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":1470104376301,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0777{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104376,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/cD6s8PAHCABFAAFIDscAAP8Rq94AAAAA\/\/\/\/\/wBEAEMBNJGnAQEGAAYPv1sAAAAAAAAAAAAAAAAAAAAAAAAAAHA+rPDwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAXA+rPDwBzIEwKgD7TMEAHanAAwEU2hlbv8AAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1470104376301,"flow_last_seen":1470104376301,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376816,"flow_last_seen":1470104376816,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0440{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104376,"pkt_len":98,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiWgLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAAA=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1470104376816,"flow_last_seen":1470104376816,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","category":"Network"}}
+0779{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNGjoAgEGAOGY7R0AAIAAwKgDVsCoA1bAqHcBAAAAAMjTo5OjcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":1470104377634,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp"}
+0425{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":86,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD8KMU6wAgDOCgAAAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":1470104377634,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":1470104377634,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp"}
+0397{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":66,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LRcAAAER5c7AqAUv4AAA\/PCjFOsAIMFmoAAAAAABAAAAAAAABlJPX1gxQwAA\/wAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":1470104377634,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":1470104377634,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp"}
+0554{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLQAAAQRv8LAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1470104377634,"flow_last_seen":1470104377634,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1470104377720,"flow_last_seen":1470104377720,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp"}
+0396{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":64,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUcEAAAERU03AqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1470104377720,"flow_last_seen":1470104377720,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0396{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":64,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUcEAAAERU03AqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1470104377734,"flow_last_seen":1470104377734,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp"}
+0416{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":80,"pkt":"TF4M6gNlABxCjnAxCABFAABCUcIAAIARpSjAqHMICAgICMdQADUALoWI\/SwBAAABAAAAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1470104377734,"flow_last_seen":1470104377734,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Streaming"},"dns": {"query":"jp.kankan.1kxun.mobi","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0416{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":80,"pkt":"TF4M6gNlABxCjnAxCABFAABCUcIAAIARpSjAqHMICAgICMdQADUALoWI\/SwBAAABAAAAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":112,"pkt":"ABxCjnAxTF4M6gNlCABFAABinjgAAC4RqpIICAgIwKhzCAA1x1AATmX5\/SyBgAABAAIAAAAAAmpwBmthbmthbgUxa3h1bgRtb2JpAAABAAHADAABAAEAAAErAARquSNuwAwAAQABAAABKwAEarkjcA==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":13,"flow_packet_id":3,"flow_first_seen":1470104377734,"flow_last_seen":1470104377753,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":46,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Streaming"},"dns": {"query":"jp.kankan.1kxun.mobi","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"106.185.35.110"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1470104377754,"flow_last_seen":1470104377754,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UcRAAIAG5yfAqHMIarkjbsG9AFA9WFFgAAAAAIACIAA9OgAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UcRAAIAG5yfAqHMIarkjbsG9AFA9WFFgAAAAAIACIAA9OgAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwb1z6xq8PVhRYYASchBbqgAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcVAAIAG5zLAqHMIarkjbsG9AFA9WFFhc+savVAQAQQNiQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcVAAIAG5zLAqHMIarkjbsG9AFA9WFFhc+savVAQAQQNiQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":468,"pkt":"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","pkt_caplen":468,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1470104377754,"flow_last_seen":1470104377818,"flow_tot_l4_data_len":570,"flow_min_l4_data_len":20,"flow_max_l4_data_len":434,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/videos\/10410.json?callback=jQuery18306855657112319022_1470103242123&_=1470104377698","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0934{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":468,"pkt":"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","pkt_caplen":468,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":64,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUccAAAERU0fAqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":64,"pkt":"AQBeAAD8ABxCjnAxCABFAAAyUccAAAERU0fAqHMI4AAA\/MkCFOsAHtPcYF4AAAABAAAAAAAABHdwYWQAAAEAAQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":98,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiQQLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAGQ=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0781{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNAJhAgEGADFjB6UAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoOwxAADYGR+xquSNuwKhzCABQwb1z6xq9PVhS\/1AQAO0MAgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2035{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":1272,"pkt":"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","pkt_caplen":1272,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1470104377901,"flow_last_seen":1470104377901,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":76,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcgAAIARpSbAqHMICAgICM3zADUAKlE0ceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1470104377901,"flow_last_seen":1470104377901,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104377,"pkt_len":76,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcgAAIARpSbAqHMICAgICM3zADUAKlE0ceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1470104378005,"flow_last_seen":1470104378005,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp"}
+0388{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAol0tAAEAGqdjAqAUQwKhzS9F2AbsV1ofmvikqE1ARIAA8\/AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoAABAAEAGQSTAqHNLwKgFEAG70Xa+KSoTFdaH51AQAEZctgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1470104378021,"flow_last_seen":1470104378021,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0441{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUckAAIAR9HzAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1470104378021,"flow_last_seen":1470104378021,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0441{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUckAAIAR9HzAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":86,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD8KMU6wAgDOCgAAAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0397{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":66,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LRgAAAER5c3AqAUv4AAA\/PCjFOsAIMFmoAAAAAABAAAAAAAABlJPX1gxQwAA\/wAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp"}
+0436{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":92,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD5ZsU6wAmcsn2BAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp"}
+0406{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":72,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxQAAAER6ZvAqANf4AAA\/OWbFOsAJvTF9gQAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp"}
+0551{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEEAAAER2QnAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1470104378045,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0381{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcpAAIAG5y3AqHMIarkjbsG9AFA9WFL\/c+sff1AQAQAHLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUcpAAIAG5y3AqHMIarkjbsG9AFA9WFL\/c+sff1AQAQAHLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":92,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD5ZsU6wAmcsn2BAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0406{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":72,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxYAAAER6ZnAqANf4AAA\/OWbFOsAJvTF9gQAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1470104378557,"flow_last_seen":1470104378557,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0809{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tHCABFAAFZOwBAAEARwM3AqH0e\/\/\/\/\/\/YA9gABRUjM\/\/+SXaAAwKC7c+tHwKh9HgAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tHQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI1AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqH0e\/\/8AAFBvcnQgMTAAIAGwMAIUAQDCoLv\/\/nPrR0A=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1470104378657,"flow_last_seen":1470104378657,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0844{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":391,"pkt":"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","pkt_caplen":391,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUcsAAIAR9HrAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUcsAAIAR9HrAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378901,"flow_last_seen":1470104378901,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":76,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcwAAIARC9LAqHMIqF8BAc3zADUAKrfjceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1470104378901,"flow_last_seen":1470104378901,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":76,"pkt":"TF4M6gNlABxCjnAxCABFAAA+UcwAAIARC9LAqHMIqF8BAc3zADUAKrfjceUBAAABAAAAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":108,"pkt":"ABxCjnAxTF4M6gNlCABFAABelWIAAPgRUBuoXwEBwKhzCAA1zfMASvjnceWBgAABAAIAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAjMABN5J\/qfADAABAAEAAAIzAATeSf5x","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":23,"flow_packet_id":3,"flow_first_seen":1470104378901,"flow_last_seen":1470104378905,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":42,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.254.167"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1470104378906,"flow_last_seen":1470104378906,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uc5AAIAGmFPAqHMI3kn+p8G+AFDrM0BvAAAAAIACIABRhAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uc5AAIAGmFPAqHMI3kn+p8G+AFDrM0BvAAAAAIACIABRhAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":108,"pkt":"ABxCjnAxTF4M6gNlCABFAABeST8AADAR\/Y8ICAgIwKhzCAA1zfMASpHwceWBgAABAAIAAAAABmthbmthbgUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAlcABN5J\/nHADAABAAEAAAJXAATeSf6n","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":15,"flow_packet_id":3,"flow_first_seen":1470104377901,"flow_last_seen":1470104378954,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":42,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Streaming"},"dns": {"query":"kankan.1kxun.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.254.113"}}
+0553{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRMAAAQRv2DAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfiAAAAERhWDAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADEGOSLeSf6nwKhzCABQwb6HB4x76zNAcIASFtBGWQAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdBAAIAGmF3AqHMI3kn+p8G+AFDrM0BwhweMfFAQAQSc9wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdBAAIAGmF3AqHMI3kn+p8G+AFDrM0BwhweMfFAQAQSc9wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":474,"pkt":"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","pkt_caplen":474,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1470104378906,"flow_last_seen":1470104378975,"flow_tot_l4_data_len":576,"flow_min_l4_data_len":20,"flow_max_l4_data_len":440,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"kankan.1kxun.com","url":"kankan.1kxun.com\/api\/videos\/alsolikes\/10410.json?callback=jQuery18306855657112319022_1470103242123&_=1470104377899","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0941{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104378,"pkt_len":474,"pkt":"TF4M6gNlABxCjnAxCABFAAHMUdFAAIAGlrjAqHMI3kn+p8G+AFDrM0BwhweMfFAYAQRjSwAAR0VUIC9hcGkvdmlkZW9zL2Fsc29saWtlcy8xMDQxMC5qc29uP2NhbGxiYWNrPWpRdWVyeTE4MzA2ODU1NjU3MTEyMzE5MDIyXzE0NzAxMDMyNDIxMjMmXz0xNDcwMTA0Mzc3ODk5IEhUVFAvMS4xDQpIb3N0OiBrYW5rYW4uMWt4dW4uY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQ6ICovKg0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xKSBBcHBsZVdlYktpdC81MzcuMjIgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMjUuMC4xMzY0LjE1MiBTYWZhcmkvNTM3LjIyDQpSZWZlcmVyOiBodHRwOi8vYWQuMWt4dW4uY29tL21hYw0KQWNjZXB0LUVuY29kaW5nOiBnemlwLGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMsZW4NCkFjY2VwdC1DaGFyc2V0OiBpc28tODg1OS0xLCosdXRmLTgNCg0K","pkt_caplen":474,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo4LJAADEGWHveSf6nwKhzCABQwb6HB4x86zNCFFAQADacIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1371{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":788,"pkt":"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","pkt_caplen":788,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1470104379066,"flow_last_seen":1470104379066,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":73,"pkt":"TF4M6gNlABxCjnAxCABFAAA7UdIAAIARpR\/AqHMICAgICO00ADUAJ9woKZABAAABAAAAAAAAA3BpYwUxa3h1bgNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1470104379066,"flow_last_seen":1470104379066,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Streaming"},"dns": {"query":"pic.1kxun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0408{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":73,"pkt":"TF4M6gNlABxCjnAxCABFAAA7UdIAAIARpR\/AqHMICAgICO00ADUAJ9woKZABAAABAAAAAAAAA3BpYwUxa3h1bgNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":137,"pkt":"ABxCjnAxTF4M6gNlCABFAAB7GLEAAC4RMAEICAgIwKhzCAA17TQAZ+zhKZCBgAABAAQAAAAAA3BpYwUxa3h1bgNjb20AAAEAAcAMAAEAAQAAAlcABGq7I\/bADAABAAEAAAJXAASAx7rowAwAAQABAAACVwAEgMdvqcAMAAEAAQAAAlcABGq6Ezo=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1470104379066,"flow_last_seen":1470104379115,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":39,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Streaming"},"dns": {"query":"pic.1kxun.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"106.187.35.246"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1470104379117,"flow_last_seen":1470104379117,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdRAAIAG5o3AqHMIarsj9sG\/AFBFF77fAAAAAIACIADHbwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdRAAIAG5o3AqHMIarsj9sG\/AFBFF77fAAAAAIACIADHbwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1470104379117,"flow_last_seen":1470104379117,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdVAAIAG5ozAqHMIarsj9sHAAFAm5\/RZAAAAAIACIACwJAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdVAAIAG5ozAqHMIarsj9sHAAFAm5\/RZAAAAAIACIACwJAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":1470104379118,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdZAAIAG5ovAqHMIarsj9sHBAFDavRsQAAAAAIACIADVlgAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdZAAIAG5ovAqHMIarsj9sHBAFDavRsQAAAAAIACIADVlgAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":1470104379118,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UddAAIAG5orAqHMIarsj9sHCAFAX8\/CKAAAAAIACIADC5QAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UddAAIAG5orAqHMIarsj9sHCAFAX8\/CKAAAAAIACIADC5QAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1470104379118,"flow_last_seen":1470104379118,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdhAAIAG5onAqHMIarsj9sHDAFDIiN5cAAAAAIACIAAkfQAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdhAAIAG5onAqHMIarsj9sHDAFDIiN5cAAAAAIACIAAkfQAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1470104379119,"flow_last_seen":1470104379119,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdlAAIAG5ojAqHMIarsj9sHEAFAS7Ia1AAAAAIACIAAxwAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UdlAAIAG5ojAqHMIarsj9sHEAFAS7Ia1AAAAAIACIAAxwAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":1470104379169,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp"}
+0436{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":92,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD1mgU6wAmi+DsIAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":1470104379169,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":1470104379169,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp"}
+0406{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":72,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxkAAAER6ZbAqANf4AAA\/NZoFOsAJg3d7CAAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1470104379169,"flow_last_seen":1470104379169,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0395{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcB6nEL4Juf0WoASchCfpwAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdpAAIAG5pPAqHMIarsj9sHAAFAm5\/RaepxC+VAQAQRRhgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdpAAIAG5pPAqHMIarsj9sHAAFAm5\/RaepxC+VAQAQRRhgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcSHsZvpEuyGtoASchC7PAAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdtAAIAG5pLAqHMIarsj9sHEAFAS7Ia2h7Gb6lAQAQRtGwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdtAAIAG5pLAqHMIarsj9sHEAFAS7Ia2h7Gb6lAQAQRtGwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcHaep2g2r0bEYASchAKkwAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdxAAIAG5pHAqHMIarsj9sHBAFDavRsR2nqdoVAQAQS8cQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUdxAAIAG5pHAqHMIarsj9sHBAFDavRsR2nqdoVAQAQS8cQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwb\/T2SVtRRe+4IASchB7QAAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd1AAIAG5pDAqHMIarsj9sG\/AFBFF77g09klblAQAQQtHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd1AAIAG5pDAqHMIarsj9sG\/AFBFF77g09klblAQAQQtHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcLBVjGFF\/Pwi4ASchB9IQAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd5AAIAG5o\/AqHMIarsj9sHCAFAX8\/CLwVYxhlAQAQQvAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd5AAIAG5o\/AqHMIarsj9sHCAFAX8\/CLwVYxhlAQAQQvAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGgmJquyP2wKhzCABQwcMVSXssyIjeXYASchBBHwAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd9AAIAG5o7AqHMIarsj9sHDAFDIiN5dFUl7LVAQAQTy\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUd9AAIAG5o7AqHMIarsj9sHDAFDIiN5dFUl7LVAQAQTy\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":416,"pkt":"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","pkt_caplen":416,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1470104379117,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":20,"flow_max_l4_data_len":382,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/18283-jfyj3.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0867{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":415,"pkt":"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","pkt_caplen":415,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1470104379117,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":20,"flow_max_l4_data_len":381,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/13480-alps.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0867{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":416,"pkt":"TF4M6gNlABxCjnAxCABFAAGSUeBAAIAG5SPAqHMIarsj9sHAAFAm5\/RaepxC+VAYAQT9+QAAR0VUIC92aWRlb19rYW5rYW4vaW1hZ2VzL3ZpZGVvcy8xODI4My1qZnlqMy5qcGcgSFRUUC8xLjENCkhvc3Q6IHBpYy4xa3h1bi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoV2luZG93cyBOVCA2LjEpIEFwcGxlV2ViS2l0LzUzNy4yMiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8yNS4wLjEzNjQuMTUyIFNhZmFyaS81MzcuMjINClJlZmVyZXI6IGh0dHA6Ly9hZC4xa3h1bi5jb20vbWFjDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cyxlbg0KQWNjZXB0LUNoYXJzZXQ6IGlzby04ODU5LTEsKix1dGYtOA0KDQo=","pkt_caplen":416,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":415,"pkt":"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","pkt_caplen":415,"pkt_type":2048,"pkt_ipoffset":14}
+0862{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":414,"pkt":"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","pkt_caplen":414,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":31,"flow_packet_id":6,"flow_first_seen":1470104379119,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":20,"flow_max_l4_data_len":380,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/4657-jfyj.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0862{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":414,"pkt":"TF4M6gNlABxCjnAxCABFAAGQUeNAAIAG5SLAqHMIarsj9sHBAFDavRsR2nqdoVAYAQSc9AAAR0VUIC92aWRlb19rYW5rYW4vaW1hZ2VzL3ZpZGVvcy8zNTc4LXl3emouanBnIEhUVFAvMS4xDQpIb3N0OiBwaWMuMWt4dW4uY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQ6ICovKg0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xKSBBcHBsZVdlYktpdC81MzcuMjIgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMjUuMC4xMzY0LjE1MiBTYWZhcmkvNTM3LjIyDQpSZWZlcmVyOiBodHRwOi8vYWQuMWt4dW4uY29tL21hYw0KQWNjZXB0LUVuY29kaW5nOiBnemlwLGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMsZW4NCkFjY2VwdC1DaGFyc2V0OiBpc28tODg1OS0xLCosdXRmLTgNCg0K","pkt_caplen":414,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379175,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":20,"flow_max_l4_data_len":380,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/3578-ywzj.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0862{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":414,"pkt":"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","pkt_caplen":414,"pkt_type":2048,"pkt_ipoffset":14}
+0862{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":414,"pkt":"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","pkt_caplen":414,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379177,"flow_tot_l4_data_len":515,"flow_min_l4_data_len":20,"flow_max_l4_data_len":379,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/3713-ydm.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0863{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":415,"pkt":"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","pkt_caplen":415,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1470104379118,"flow_last_seen":1470104379178,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":20,"flow_max_l4_data_len":381,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pic.1kxun.com","url":"pic.1kxun.com\/video_kankan\/images\/videos\/16649-ljdz.jpg","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 6.1) AppleWebKit\/537.22 (KHTML, like Gecko) Chrome\/25.0.1364.152 Safari\/537.22"}}
+0867{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":415,"pkt":"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","pkt_caplen":415,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoCBpAADYGelRquyP2wKhzCABQwcHaep2h2r0ceVAQAO27IAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":373,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnCBtAADYGeRRquyP2wKhzCABQwcHaep2h2r0ceVAYAO3V3gAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjkwMjcNCkxhc3QtTW9kaWZpZWQ6IEZyaSwgMjEgT2N0IDIwMTEgMDQ6MjY6NTkgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVhMGY0OTMtNzE2MyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo10NAADYGqypquyP2wKhzCABQwcB6nEL5Juf1xFAQAO1QMwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDlFAADYGdB1quyP2wKhzCABQwcSHsZvqEuyIHlAQAO1rygAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":373,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnDlJAADYGct1quyP2wKhzCABQwcSHsZvqEuyIHlAYAO1UdQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjM1NTgNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMjkgTm92IDIwMTEgMDE6NTM6NTQgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVkNDNiMzItNWMwNiINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+2089{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2086{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2093{"flow_id":31,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2088{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2095{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2093{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2094{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":373,"pkt":"ABxCjnAxTF4M6gNlCABFAAFn10RAADYGqepquyP2wKhzCABQwcB6nEL5Juf1xFAYAO04IgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogNTg2MDQNCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMjQgTWFyIDIwMTUgMTA6MTE6NTAgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTUxMTM4NjYtZTRlYyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2122{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2114{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2119{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2092{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":31,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":31,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2118{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU10lAADYGpjhquyP2wKhzCABQwcB6nFfoJuf1xFAQAO2IjwAA7dtddo9OQbRG0CHl1Xu+n++z9J7FWzc7Jua2my3dQ33V1VjbWT9B1mzT32fn2fTenryLmYz2ix2w6Fs+06y32Kk5wJdDQJ+cadv6yQiOIkhUpkQEQTqvI2wZaDqNOe3P7q1cTIqd0mytzROJduZyHubewjc7b7dtT6P\/AARZQjbqeePL+1+arnTXlmUGH9Gy9j63lwJ3ab2+mY3b3W1sanljSse4saBzwZGpIhrVsYjGOxHVSN4B3RywtHu3N\/kuWNS+svESIMtLufj\/AGVfxJAL2t2NALCeASfcP5Ltv5ybJUUOVj\/Sez6MHcB2UaC573Osj0qYNjOdzjpTT\/13\/C\/8F6n8hX6q7LWNrDS72uA5J50guja39xUMp7X5tfSsdvtsLKy4N2k5F21t7tpH80zf9kp\/4Gj1f+1OVXcRrv0USRt1em6B9UbOp1t6r1mRg2w+jHJ2vyA73+tc5kfZ8N7m\/o2t9O3J\/wAH9nx\/s60uvfWCjDYAxwoqoaK2CsbQGt\/m66qq4bs\/0VTVWzs\/KBsbQ6x9VTjVQzsWgNrYwf5jdn7iyOm\/Vm\/r3UcrI6pa6vpPTbTS4Vj322T+kqr+l9H\/ALU5H+D\/APPde\/cNyNRDOIDELrikdB\/a4reutvzL35mL9sxsppr+z7tlzf8ACU5WLe1tnpZLHf8AA20Pq\/Q212LPyA5l4ZZXZU0Hextw2uI\/M9m1jV7Z0mjp\/TqGs6RhfZamyz1GAkkAlxr+0WTdd73bv516F1KrI6tOJk9OGTQ10l+cWhjSPzqfULrnf9Yb\/bT\/AHojQRNMXBKRJkd97fFn2PeYnzJ8F2n1a+pnQ+odKrv6pZeMjLG6ptL2sFTD\/M6PZZ61tn87Z\/IeqH1r+ouR0puV1DEuqd01jgWY5scbmMfHO+trLWVWu9P2WPu9P9Ili9TyG4NPoWQyqtrR5FjQyI\/kwnZJnhBxnrr\/AATixiUiJ9Bo4X7IZ+3f2P8AaRt+1\/ZPtOzSPV+z+v6e76P+E270lY+0V\/tT1fUs9L1PV2zrMer\/AO3Hv9P6CSfxH\/m39Vntj\/ncL\/\/V82sssssdZa8vsdJc487ifcE41kjQ6z5z8VOgs9RoLd3DdjeSHez2\/nbv+\/qIsYxxEdyfbIIH7jpTGYeJZF36PaAZPKbH+wu1yrXsawGK6273OPO0Oe6qumt37\/6X\/i0soPbXV7PT3N3iHB24T7X7W\/zf9tHwOlMvdSMp1tPr7XVNrqNj7Kybmuvp3Orp2stp9N3qWV\/4b\/QoaAEk15KJ9QAAPm0327bHGkwzX0y4DeGgwyfzG2bf9Gj1t9GsZ9ljvV3E47WuHq+ow1vbbcwn1WYzqzZstb\/hmKxn09Jw6zj1CzIvDj6lrntayIds9Omr1vftsZ+ldd6Xs\/RqtiV05DbRl5IpLGGypr2l3qOa122r1B\/Ne1npMRBBFgaLZXdF1smmrGvrrZY3Ia5rCLQC0P8AVY2xljdA7Z+kV3HFW2t+QQCP0bWDWHT+dB\/PWXWbMjFxshxL2tZ9leXlxIdV\/MtE\/m+jZVtY1WDfbW0teYaxv50Ad9rtzimkLwXYoe1gc8tFRceSQ6I9gDf9J\/J3IGJQzO+sbbahvuwaXW3O0I9QxRi1naNjbGWWep\/6qWFmdduDDTQdkiHOHI\/eFX7v\/Gf9trS+o3VqcD7VRa0f","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2118{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAosNNAADYG0ZpquyP2wKhzCABQwb\/T2SVuRRfASVAQAO0rzQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":373,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnsNRAADYG0FpquyP2wKhzCABQwb\/T2SVuRRfASVAYAO1IKAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjc3NzINCkxhc3QtTW9kaWZpZWQ6IFNhdCwgMjggRGVjIDIwMTMgMDg6MTU6MzYgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTJiZTg4YTgtNmM3YyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+2089{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUsNVAADYGzKxquyP2wKhzCABQwb\/T2SatRRfASVAQAO1URgAA\/9j\/4AAQSkZJRgABAQAAAQABAAD\/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8SEhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7\/2wBDAQUFBQcGBw4ICA4eFBEUHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh7\/wAARCADwAMgDAREAAhEBAxEB\/8QAHAAAAgMAAwEAAAAAAAAAAAAABQYDBAcBAggA\/8QAQhAAAgEDBAEDAwIDBgQEBQUBAQIDBAURAAYSITEHE0EiUWEUcTKBkQgVI0KhsSRSYsEWctHhFzOCkrIlQ0RT8PH\/xAAcAQACAwEBAQEAAAAAAAAAAAADBAECBQAGBwj\/xAA5EQABBAECBAMHBAIBBAIDAAABAAIDEQQhMQUSQVETYXEigZGhscHwFDLR4QYj8RVCUmIkM0Nygv\/aAAwDAQACEQMRAD8A82hT84\/lptUUtO\/GQHGdcuTftWw7i3BHO9ms1ZXR04UzNCoxHyzxBJIGTxbH7HQyQFFWim7Nlbs2yHkv1mqaSCKcQSTZVow5BIUMpIyQD\/Q64OBXEUhdXZ62SwT3mCAvb6WoipppAw+mSRWZRjyQQjd+BjVrVWjqq+17LcdxXSns1qgM9bUyFIYyyplsFsZYgDoHzqSQBamtUxP6Z7spKCrr5LfC8VHTvUztHWQsUjQZZsBsnA+B3qviBQWFVds7Luu6ImktFPT1DRypE8X6uFJcuyop4MwbiWdRyxjJ89HVi4N0KqGkqO7bNu1sstNW1KW8ipaSOKSlrI6mL3Y+PJSY2OCA6+cedc14dsquaW7pgtvpjvKM0zyWhMywCoT2q+mP+Hz4cz\/idLy6z48d67xWhQ6Jx2XaGz3Ge9z2yKmikqqbmsifqokClTxbDs4Ruz8E5+NX5xulvCJJb1VXd+1942WCSqu1thpaZI45GIuFPIQj44nishY55DwD\/TvUCVpRfALdSlJJZAepG\/loioWgpns2zt83mxveLVti5V1vXAE0cORJliv+GPMmCCDxBxjvGqGRoNWpGOSLAQer2\/uSC+09irLVW0t0qWQQUlRH7LuXOE\/jwMEg9nrrVucEWF3h0apX49k7rqPbjhW2TzSsyLDFeqN5SR\/0CXP7fsdV8Vqt4BHRKyxs+CTkec6vvqo20UiRnOSn+muVSm2h2LuWpt4uMNHSfpjCs6vJc6VOSMeIIDSZ89d4wQR560MytCsIHkXSoU+37tWXo2SkpBUXHD8YYZo5OXGMyEKysVY8QcAEknod9annFWq+E7m5eqsT7K3HDt7+\/wCS3qKEU6VTD9RH76wu\/BZWh5e4qFuuRUD58ajxWk0FJhdy2o7Rsy\/3i0Nd7fQxTUqu8YzVRJIxUoH4xswdgPcjyQCByGpMjW6FVbC9wsKHcu071t14o7xSRwCZ5UjaOpimV2iYLIAY2YZUkAg41wka7ZQ+NzN0v1VMAMgDXKWlBqyIkHAOuRWrmWMrnrVAU2oSeLA+DnA1K5ax6EVlBU1Fxte5qa1zbZlkp6m4PWTxIYWh9wo6q0iM\/wBLSDigY5K9aFINVIRD1P3BBfrfW3bbsVkgst+ua19YqKI7ilWokxHUIZWJADuQ6LwYMPB61DRR1XO1RPaF","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2083{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUsNZAADYGzKtquyP2wKhzCABQwb\/T2SuZRRfASVAQAO1yrwAALum2elV1Sw7horVdbjcqKpg9m\/UsE0lMsUofOZQVGWTKtg\/jo64kEqACAl7YFzrKP1+srbvvsb1on5VdfPdo5FVPYfiTOrlehgY5fjHxqzq5dFw3Wu763NtaDae46Wnu1n95rGDBHTXSES1krx5kjUe4PpU9sCex0A5yNCANqxWbeim4KWo2fO9QZ6IUd5hqJ2hqKWJropemApOTukoK8WlBVlXo5OdXlGqq0Ujf9pLcVveOwSx1tPWVRhKFoKpG\/wD49NlfbWaQL9fPLHGTkZfjyPR2LVZBdJttl4t9vuNLU2u4WmgutTRx0FUrXSnMNJNFAkq0UYSIoEKuwDBcGSNhnJGRkFE0WV2qFKve266SjFnE1PT1L22G4xUn6aSUTRgJiYe0PpLkYweuj50Y\/tCCGjmKZvVaJ623Xetr22esNPYbclHJQC3tUyVi\/p0kiUx5lCqPd6XAAUAHj0as3FK79isahDHsDrxppKuC16Cit112Js8GzWe7zUlvnilafc6UDwMauZghjLqfDBuRH+bSx0cUYatA+66X426T1S2LDDJa6SKio7XBODWLWU1K6SszI8vLDgAjJ5eD51Zv7HKrj\/sani23CiN3DyStSI5kBmr66klpYgVYcnjWtJZRnoAE+OtBoo\/MFhW3a6itULpV7ctV59wJxNcZwYsD\/L7UiefnOfGm3NJrVJh4FirVy6V9BcqeOGl2xZrOyvyMtE1QXYYI4n3JXGO89DPQ71ABB1KrI8EUAti2fdKCWGxwVt3o7PZo7DRCtqKeoihUyRmTNO5WVZkOX5DgpAZ2Zw3ws4alOsdoEgUT1Nx9WpqrcK2ZZamqnkuHvzI9JFG0bciro4B4oRwKNyyFx3nRTXJQS7b8UkohcFhO1bXc7ZZ7ZWSz7YSCvuD30pULIVdZFeH3lLsqhcAqckDo4A1QdiiPOltCMelFXQUO16BaqtstHxrqyM1M9RGtXAZHoeAiRyQVbg3IlGA4Dsa6SyVEBHKLSr6rUFDR0FlFJWiWoFRcVNOtWk6xQmoEkb\/SSQXMjkliScfjGrRXqh5NCqWd1iFFBI6PWioLdUErVLAnBGutFau00fyR+2hp0hUph3q6qoS2CpIHXyfjXLlpKemtw\/8AANPvOO7xe3NQrUrE8AVQzMAsZkLgDsglsYA70PxNaU0l71Z2LLti40aS3e33GoqpGhAjwnQcqGUliGTrBbI4tlT4zqWPtQRSoenmyqXc9ZdKKqvH93S25PdkSOjNSPbD8XkJVgAi+S2ceDnBzqXP5apcBaLWj0zhuWwKfddNuKIR1FSkEUJoSFYtKIh9XP8Ai5lTxxy4ktjAzqplINUp5UbqvQmvhu1Hbp9xW8TVCVJOad8r7SlkGP8AqA+rOOB6Odd4vku5Ul+o+z5di7lSzSVkdZ7lJDUiRYvbP1jtSuSQQwYd\/bwNEY7mFqpFKrt+FKqtpqVVRWmkSEErkDkwH\/fOpOgtUrVbZePRi4W2stVAt6oZ2uEdRIpeAxrGsUXMsfqP0kkJk47z+MhEqnwvNKm8dpf+GNyz2ZquCsaGnWoMqqsY4sM4ALHJx3gEk5GBojX2LKG5lGkWp\/T+pPprNvhbnAsUZb\/g\/aLMVVuJYspPE\/OCAAB2Rqpkp1Up8O281otW+mclNuKyWeO\/0U7XV5OEi0+OCIpbmAX+","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUehAAIAG5oXAqHMIarsj9sG\/AFBFF8BJ09kwhVAQAQQgnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUehAAIAG5oXAqHMIarsj9sG\/AFBFF8BJ09kwhVAQAQQgnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2098{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopDtAADYG3jJquyP2wKhzCABQwcLBVjGGF\/Px8lAQAO0tsAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":373,"pkt":"ABxCjnAxTF4M6gNlCABFAAFnpDxAADYG3PJquyP2wKhzCABQwcLBVjGGF\/Px8lAYAO3lWQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjYwMjMNCkxhc3QtTW9kaWZpZWQ6IFN1biwgMjMgT2N0IDIwMTEgMTU6NTk6MzggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNGVhNDM5ZWEtNjVhNyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+2112{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo7pBAADYGk91quyP2wKhzCABQwcMVSXstyIjfxlAQAO3xqwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":373,"pkt":"ABxCjnAxTF4M6gNlCABFAAFn7pFAADYGkp1quyP2wKhzCABQwcMVSXstyIjfxlAYAO1EfwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogMjI2NDcNCkxhc3QtTW9kaWZpZWQ6IFdlZCwgMTcgU2VwIDIwMTQgMTQ6NTI6NTcgR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFVGFnOiAiNTQxOWEwNDktNTg3NyINCkV4cGlyZXM6IE1vbiwgMzEgT2N0IDIwMTYgMDI6MTk6NDAgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTc3NzYwMDANCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUU7pNAADYGju5quyP2wKhzCABQwcMVSYFYyIjfxlAQAO1F9wAAWNDz4PxEcnwrgd9Dovk8VmpyjGCpS2\/VXPzxwhJ970jTtKdp0Rr4pOWF\/FXsviAkty5Ujwjj6a6hf\/XZU15fP3+99vgX21X7Svt+ipk2bZ4pndx4jUsRdVWJWU\/d8wxXv0xqEhrSeLx1OVY1Guv+E\/8AcuE21NryUqUsm2rM9PHkJE1DEUXJJOAVwOrMf84+uuZsIo+47jtiy7lq422TaHlpCJUq0giEvimPxAR8GR1\/ez366lGLq\/GFp808bhaj3vvV9DtJuyeodI0srGdVlacLODy+GxVinT4gO57YB0RSoD\/q8pUlj55vn2dOuOa6v4GFduKeO00tzaii5qlgFjFQCApUtktjoehGNGUmo3RGTxOUNPHO4L1PhX8X1r9hrLuuSXBSg+KIqWRpcAcxUJ1x582fprt9KqAy8YlTahyvn3art3snIOIcEcBEVrKuI45Ahm7hlct5eRUD582lpLuw\/wDr8UuIc8Pr9\/j4LptqtqLnaYa6ogigaYcypHP4o5fL4gB1+XlqrNnS55ajEsklV+zslFBGoGkjnXEM5UHOuRVlTqLcTIvhp3PUn00ysgKUPYk6Siggj+zjVM9TgdzoUpuQWMEhcwq3Y6rbLbCJ3RZqm52t6amqKaFnOHFQnNG6YIKnzHkcjrkDU2I67Sz1GF44tK+t9H8Mg6TZNetrutv\/AGlRTLWquJzEfFDDk+8Qeq\/CenqdRZnQ8HyxxZcTmnurmubVdf7D6DZ4p92Ne5Kim5Wnlk5OXDlWjVQufkQT9dSpDGLwvZq\/xNrq3801VFfm4e1iR80FzpFYg5JjbkYt4gJOD35XAH9HXWZ0vAMiXpmr+33T\/Z\/sI1exKuMl4LjSSRRvzxq8TEsOZW+MA4I+Ej8Dq0bborPwLLF+mapcq0\/jr\/YfbbsskO4Eu8s8PjAzeKEQqrc4XGPTBB+h1ecK5HNJ4dLHqfxDfPquvnp\/YuT1PhqCxJU+Y7aptvobTlRWr7bKy63OoqKS5UUUM9CaPllRi6KxJYgg46nH0GocWjJ1ejzajJKUJJJx283avq0dbDtG42y7RVMF7iNO0n2q8mJHjEjOFyOnUsQ3T8NVsFpfCc2nzKccnHfjmruv17jg7Tle\/MKistL08t0Fx8Bovt5BgjkOT1Xr06d86iy0vC5vM5Nrbv3dOfsyPm4dVwkkkprpRJM7tJytG2GJaXqcHJwsmM\/5PpqbFpeB5E3KE1fP6231\/RkptjZIst9prkbhDKacSo45cFlZVC59CCG\/PXXwM6Pwh6bNHJuur\/eq\/wAF251cZVlYDvg51U20UDd2yzc71V3B7rSUZrMIniDDYERQr36\/FynHy1KfFGFrfB5anNLKpJX\/AMVX9xKTZF1eGCnlvFGp8eWokxCQUkctnwznOCCFIPkNTZX\/AEfM4xTmurb46N30+GnTs4u2y62balHbDUW0VNHIDzRxFUZAhHVc\/eyck6tF9ic3hWXJpIYW43F+3FVX9+5WXscuKiF5kcMYA+Vz0j6HP46deJSTp9a\/YWn4dJxlG+u3\/wDn\/kkqTY3j0MMkt3o4ZiQkZfIyvI6lep6n4lPT00nkW10cvAnOKe9X2+1NV+4Rdr0VVbLNBQVbUheEcg92iMaco7dCe\/mfUnQjf0WGWHDHHOrXHCpEprhu6OQM64o2dtSQMJkDLjXBGrEl","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2076{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2087{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUexAAIAGmEHAqHMI3kn+p8G+AFDrM0IUhwePWlAQAQGYeAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUexAAIAGmEHAqHMI3kn+p8G+AFDrM0IUhwePWlAQAQGYeAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMMsAAAER0qXAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOp0AAAERyODAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":92,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQAD1mgU6wAmi+DsIAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0407{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":72,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KxsAAAER6ZTAqANf4AAA\/NZoFOsAJg3d7CAAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUgMAAIAR9ELAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABxCjnAxCABFAABOUgMAAIAR9ELAqHMIwKj\/\/wCJAIkAOha6seYBEAABAAAAAAAAIEZIRkFFQkVFQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1470104379579,"flow_last_seen":1470104379579,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0705{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":286,"pkt":"\/\/\/\/\/\/\/\/jHNut5QdCABFAAEQAABAAEARs0nAqAVDwKj\/\/wCKAIoA\/P+KEQouQ8CoBUMAigDmAAAgRkRFQkVPRUtFSkNORU1FSkVHRUZFQ0VQRVBFTENOQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAATAAAAAAAAAAAAAAAAAAAAAAAAABMAFYAAwABAAEAAgBdAFxNQUlMU0xPVFxCUk9XU0UAD1DgkwQAU0FOSkktTElGRUJPT0stTAQJA5qEAA8BVapzYW5qaS1MSUZFQk9PSy1MSDUzMSBzZXJ2ZXIgKFNhbWJhLCBVYnVudHUpAA==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1470104379579,"flow_last_seen":1470104379579,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0672{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":263,"pkt":"\/\/\/\/\/\/\/\/jHNut5QdCABFAAD5AABAAEARs2DAqAVDwKj\/\/wCKAIoA5V88EQouRMCoBUMAigDPAAAgRkRFQkVPRUtFSkNORU1FSkVHRUZFQ0VQRVBFTENOQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAANQAAAAAAAAAAAAAAAAAAAAAAAAA1AFYAAwABAAEAAgBGAFxNQUlMU0xPVFxCUk9XU0UADFDgkwQAV09SS0dST1VQAAAAAAAAAAQJABAAgA8BVapTQU5KSS1MSUZFQk9PSy1MSDUzMQA=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":98,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsiDQLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACATQ=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1470104379903,"flow_last_seen":1470104379903,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgZAAIAG5uXAqHMIarkjbsHFAFDej0WbAAAAAIACIACnvwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgZAAIAG5uXAqHMIarkjbsHFAFDej0WbAAAAAIACIACnvwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1470104379916,"flow_last_seen":1470104379916,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgdAAIAG5uTAqHMIarkjbsHGAFDBDvagAAAAAIACIAAUOgAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UgdAAIAG5uTAqHMIarkjbsHGAFDBDvagAAAAAIACIAAUOgAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwcUqRAQo3o9FnIASchAmawAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUghAAIAG5u\/AqHMIarkjbsHFAFDej0WcKkQEKVAQAQTYSQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUghAAIAG5u\/AqHMIarkjbsHFAFDej0WcKkQEKVAQAQTYSQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1470104379903,"flow_last_seen":1470104379941,"flow_tot_l4_data_len":492,"flow_min_l4_data_len":20,"flow_max_l4_data_len":356,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/videos\/10410.json","code":0,"content_type":"","user_agent":""}}
+0830{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADYGguxquSNuwKhzCABQwcaIrnkOwQ72oYASchC\/lAAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgpAAIAG5u3AqHMIarkjbsHGAFDBDvahiK55D1AQAQRxcwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgpAAIAG5u3AqHMIarkjbsHGAFDBDvahiK55D1AQAQRxcwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":411,"pkt":"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","pkt_caplen":411,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1470104379916,"flow_last_seen":1470104379956,"flow_tot_l4_data_len":513,"flow_min_l4_data_len":20,"flow_max_l4_data_len":377,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"jp.kankan.1kxun.mobi","url":"jp.kankan.1kxun.mobi\/api\/movies\/mp4script\/10410?definition=true","code":0,"content_type":"","user_agent":""}}
+0858{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":411,"pkt":"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","pkt_caplen":411,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoIBhAADYGYuBquSNuwKhzCABQwcUqRAQp3o9G7FAQAO3XEAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1356{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":782,"pkt":"ABxCjnAxTF4M6gNlCABFAAMAIBpAADYGYAZquSNuwKhzCABQwcUqRAkV3o9G7FAYAO33sQAALCJuYW1lIjoi6Lev5piT5pavwrfojrHnibnph4zlsJQifV0sInRhZ3MiOlt7ImlkIjo2LCJuYW1lIjoi54qv572qIn0seyJpZCI6NywibmFtZSI6IuaDiuaCmiJ9XSwibG9zdF9lcGlzb2RlcyI6W10sInBsYXlfYWRkcmVzc2VzIjpbeyJ0eXBlIjoicXFsaXZlIiwibmFtZSI6IuiFvuiur+inhumikemrmOa4hSIsInVybCI6Imh0dHA6Ly9rYW5rYW4uMWt4dW4uY29tL3ZpZGVvX2thbmthbi9sb2dvcy9xcWxpdmUucG5nIn0seyJ0eXBlIjoibGV0diIsIm5hbWUiOiLkuZDop4bmma7muIUiLCJ1cmwiOiJodHRwOi8va2Fua2FuLjFreHVuLmNvbS92aWRlb19rYW5rYW4vbG9nb3MvbGV0di5wbmcifSx7InR5cGUiOiJ0dWRvdSIsIm5hbWUiOiLlnJ\/osYbpq5jmuIUiLCJ1cmwiOiJodHRwOi8va2Fua2FuLjFreHVuLmNvbS92aWRlb19rYW5rYW4vbG9nb3MvdHVkb3UucG5nIn0seyJ0eXBlIjoieW91a3UiLCJuYW1lIjoi5LyY6YW36auY5riFIiwidXJsIjoiaHR0cDovL2thbmthbi4xa3h1bi5jb20vdmlkZW9fa2Fua2FuL2xvZ29zL3lvdWt1LnBuZyJ9LHsidHlwZSI6ImJlc3R2IiwibmFtZSI6IueZvuS6i+mAmiIsInVybCI6Imh0dHA6Ly9rYW5rYW4uMWt4dW4uY29tL3ZpZGVvX2thbmthbi9sb2dvcy9iZXN0di5wbmcifSx7InR5cGUiOiJpbWdvIiwibmFtZSI6ImltZ28iLCJ1cmwiOiJodHRwOi8va2Fua2FuLjFreHVuLmNvbS92aWRlb19rYW5rYW4vbG9nb3MvaW1nby5wbmcifV19DQo=","pkt_caplen":782,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtIBtAADYGYthquSNuwKhzCABQwcUqRAvt3o9G7FAYAO2LJQAAMA0KDQoA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgxAAIAG5uvAqHMIarkjbsHFAFDej0bsKkQL8lAQAQTPMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUgxAAIAG5uvAqHMIarkjbsHFAFDej0bsKkQL8lAQAQTPMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104379,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoXTpAADYGJb5quSNuwKhzCABQwcaIrnkPwQ74BlAQAO1wJQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2066{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUXTtAADYGINFquSNuwKhzCABQwcaIrnkPwQ74BlAQAO0sVAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuNy4xDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjIwOjA3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDMyMTIyDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCjxyb290PjxtcDQgdHlwZT0ncXFsaXZlJyBuYW1lPSfohb7orq\/op4bpopEnIGxvZ289J2h0dHA6Ly9rYW5rYW4uMWt4dW4uY29tL3ZpZGVvX2thbmthbi9sb2dvcy9xcWxpdmUucG5nJyB3ZWJfYWRkcmVzcz0naHR0cDovL3YucXEuY29tL2NvdmVyLzYvNnQ1NjlvcGt3dHhwNnowLmh0bWw\/dmlkPXkwMDEzeGFlZXlvJyBkb3dubG9hZGFibGU9JzEnIHNpdGU9J3YucXEuY29tJyBwdD0nMScgd3N0PScxMDAwJz48c2NyaXB0PjwhW0NEQVRBW0NvLVFXZl8tIFI8d288ZFc2X3xXZl8tZEcgV2ZNPF9vVysKICAnX1FLJyBQXzJ9RyBSPGR8Xy1kPCAuICxLYnpKV1d8elI8d288ZFc2X3xXZl8tZCsKICBmQyBQXzJ9IEstMiBQXzJ9fi4zMyBXSjwtCiAgICAnX1FLJyBmRyB4IC4gZFdSZi12ekNmLTI2UF8yfUcgM2Z8IGZkIC1fVyBLb1dKX1JmRjwyMysKICAgIGZDIGYgV0o8LSBQXzJ9IC4gLWYnIDwtMgogIDwtMgogIGZDIFBfMn0gSy0yIFBfMn1+LjMzIFdKPC0KICAgICdfUUsnIGZHIHggLiBkV1JmLXZ6Q2YtMjZQXzJ9RyAzUSdmPC1XIFU8UmRmXy0gS1FRPGRkIGZkIC1fVyBLb1dKMysKICAgIGZDIGYgV0o8LSBQXzJ9IC4gLWYnIDwtMgogIDwtMgogIGZDIFBfMn0gSy0yIFBfMn1+LjMzIFdKPC0KICAgICdfUUsnIGZHIHggLiBkV1JmLXZ6Q2YtMjZQXzJ9RyAzc0UgJ2ZNZlczKwogICAgZkMgZiBXSjwtIFBfMn0gLiAtZicgPC0yCiAgPC0yCiAgZkMgUF8yfSBXSjwtIFI8V29SLSBQXzJ9RyBSPGR8Xy1kPCA8LTIKICAnX1FLJyBvUicgLiBffFdmXy1kWzpdCiAgJ19RSycgb1InbTwtUV8yPDIgLiBvUicKICBvUidtPC1RXzI8MiAuIGRXUmYtdnp2ZG9QNm9SJ208LVFfMjwyRyAzJSUzRyAzJSU9TjMrCiAgb1InbTwtUV8yPDIgLiBkV1JmLXZ6dmRvUDZvUidtPC1RXzI8MkcgM2kzRyAzJSVYQjMrCiAgb1InbTwtUV8yPDIgLiBkV1JmLXZ6dmRvUDZvUidtPC1RXzI8MkcgMyVuM0cgMyUlPTgzKwogIG9SJ208LVFfMjwyIC4gZFdSZi12enZkb1A2b1InbTwtUV8yPDJHIDMlcjNHIDMlJVg4MysKICBvUidtPC1RXzI8MiAuIGRXUmYtdnp2ZG9QNm9SJ208LVFfMjwyRyAzLjNHIDMlJVh7MysKICBvUidtPC1RXzI8MiAuIGRXUmYtdnp2","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2065{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUg1AAIAG5urAqHMIarkjbsHGAFDBDvgGiK6C51AQAQRmNgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUg1AAIAG5urAqHMIarkjbsHGAFDBDvgGiK6C51AQAQRmNgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2065{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2066{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUXT5AADYGIM5quSNuwKhzCABQwcaIrofTwQ74BlAQAO3MkwAAIC4gLWYnCkNVWjx9bWRXUmYtdi4tZicKQ19STUtXIC4gLWYnCnwnS1dDX1JNIC4gMzpEKUQ9MwonLVogLiAtZicKVWYyIC4gM31ERDpYYks8PH1fMwp2b2YyIC4gMzhOZTFEOlNTRDpCcGVEcFN7cFhnWERwPXB7ZTpBUz0xRD06Zz04e3AzCjk5dm9mMiAuIDNTPXBwQWU6Qlh7QSlIezFIZTpIQnA6ZTExQTg6Z3tBQkhncCllOmV7MwoKQ28tUVdmXy0gdjxXU1o8fTZVZjIrCiAgJ19RSycgUF8yfUcgUjxkfF8tZDwKICA5OSAnX1FLJyBvUicgLiAiSldXfGlubj09PXpBWHo9Tkh6KUFpKUQpKW5LfGZud3cnZlU8bVFaPH1udjxXclVmMi4iIHp6IFVmMiB6eiAiJnwnS1dDX1JNLiIgenogfCdLV0NfUk1WCiAgOTkgJ19RSycgUF8yfUcgUjxkfF8tZDwgLiAsS2J6SldXfHpSPHdvPGRXT29SJ0cgV2ZNPF9vVy5YKAogIGZDIC1fVyBQXzJ9IF9SIFBfMn0gLi4gMzMgV0o8LQogICAgb1InIC4gIkpXV3xpbm49OnB6PUhIejpYTno6QURpKUQpKW5LfGZud3cnZlU8bVFaPH1udjxXclVmMi4iIHp6IFVmMiB6eiAiJnwnS1dDX1JNLiIgenogfCdLV0NfUk1WCiAgICBQXzJ9RyBSPGR8Xy1kPCAuICxLYnpKV1d8elI8d288ZFdPb1InRyBXZk08X29XLk4oCiAgPC0yCiAgZkMgUF8yfSBXSjwtCiAgICAnX1FLJyBkPHZNPC1XZCAuIE8oCiAgICBDX1IgZlc8TSBmLSBQXzJ9aXZNS1dRSjYiW15qXVQiKyAyXwogICAgICBXS1AnPHpmLWQ8Ulc2ZDx2TTwtV2RHIGZXPE0rCiAgICA8LTIKICAgIGZDICNkPHZNPC1XZHQ9IFdKPC0KICAgICAgS3x8VTxSIC4gZDx2TTwtV2RbOl0KICAgICAgPC1RUn18Vzc8UiAuIGQ8dk08LVdkWz1dCiAgICAgIFFaPH0gLiBkPHZNPC1XZFtYXQogICAgPC0yCiAgPC0yCiAgZkMgLV9XIFFaPH0gV0o8LQogICAgPFJSX1JrPGRkS3Y8IC4gIkNLZic8MiBXXyB2PFcgUVo8fSIKICA8LTIKPC0yCgoKOTkKQ28tUVdmXy0gdjxXQjIyUjxkZDhSX00vPCw\/PHZNPC1XZDYyPENLbydXQ01XKwogIGZDIC1fVyA8LVFSfXxXNzxSIF9SIC1fVyBLfHxVPFIgX1IgLV9XIFFaPH0gV0o8LQogICAgUjxXb1ItCiAgPC0yCiAgJ19RSycgb1InIC4gIkpXV3xpbm5VVXpVZjI8X3p3d3pRX01udjxXVWYtQ18iCiAgJ19RSycgfF9kV3tLV0sgLiBPKAogIHxfZFd7S1dLWzM8LVFSfXxXNzxSM10gLiA8LVFSfXxXNzxSCiAgfF9kV3tLV0tbM19XfXw8M10gLiAzYk0nMwogIHxfZFd7S1dLWzNLfHxVPFIzXSAuIEt8fFU8UgogIHxfZFd7S1dLWzN8J0tXQ19STTNdIC4gfCdLV0NfUk0KICB8X2RXe0tXS1szVWYyM10gLiBVZjIKICB8X2RXe0tX","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2066{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1470104380188,"flow_last_seen":1470104380188,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp"}
+0396{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhRAAIAGEmDAqHMI2vSHqsHHI4t8ty1+AAAAAIACIAAqAAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhRAAIAGEmDAqHMI2vSHqsHHI4t8ty1+AAAAAIACIAAqAAAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0c30AAHAGQPfa9IeqwKhzCCOLwccogsRifLctf4ASQAAcSgAAAgQFtAEDAwABAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhVAAIAGEmvAqHMI2vSHqsHHI4t8ty1\/KILEY1AQAQScEQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhVAAIAGEmvAqHMI2vSHqsHHI4t8ty1\/KILEY1AQAQScEQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0595{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":212,"pkt":"TF4M6gNlABxCjnAxCABFAADGUhZAAIAGEczAqHMI2vSHqsHHI4t8ty1\/KILEY1AYAQTPigAAR0VUIC9hcGkvcXFsaXZlX2NrZXkvZ2V0P3ZpZD15MDAxM3hhZWV5byZwbGF0Zm9ybT0xMDkwMiBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wDQpIb3N0OiAyMTguMjQ0LjEzNS4xNzA6OTA5OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1470104380188,"flow_last_seen":1470104380302,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"218.244.135.170","url":"218.244.135.170:9099\/api\/qqlive_ckey\/get?vid=y0013xaeeyo&platform=10902","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}}
+0595{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":212,"pkt":"TF4M6gNlABxCjnAxCABFAADGUhZAAIAGEczAqHMI2vSHqsHHI4t8ty1\/KILEY1AYAQTPigAAR0VUIC9hcGkvcXFsaXZlX2NrZXkvZ2V0P3ZpZD15MDAxM3hhZWV5byZwbGF0Zm9ybT0xMDkwMiBIVFRQLzEuMQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wDQpIb3N0OiAyMTguMjQ0LjEzNS4xNzA6OTA5OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0908{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":446,"pkt":"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","pkt_caplen":446,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLUAAAQRv8HAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhhAAIAGEmjAqHMI2vSHqsHHI4t8ty4dKILF61AQAQOZ7AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhhAAIAGEmjAqHMI2vSHqsHHI4t8ty4dKILF61AQAQOZ7AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtc91AAHAGAJ7a9IeqwKhzCCOLwccogsXrfLcuHVAY\/2FXZgAAMA0KDQoA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1470104380737,"flow_last_seen":1470104380737,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":75,"pkt":"TF4M6gNlABxCjnAxCABFAAA9UhkAAIARpNbAqHMICAgICNSUADUAKZhJpTgBAAABAAAAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1470104380737,"flow_last_seen":1470104380737,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","category":"Chat"},"dns": {"query":"vv.video.qq.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0408{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":75,"pkt":"TF4M6gNlABxCjnAxCABFAAA9UhkAAIARpNbAqHMICAgICNSUADUAKZhJpTgBAAABAAAAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":116,"pkt":"ABxCjnAxTF4M6gNlCABFAABmlL4AAC4RtAgICAgIwKhzCAA11JQAUqbTpTiBgAABAAIAAAAAAnZ2BXZpZGVvAnFxA2NvbQAAAQABwAwABQABAAABKwANCnByb3h5LXNldDHAD8AtAAEAAQAAASsABMvNl+o=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":38,"flow_packet_id":3,"flow_first_seen":1470104380737,"flow_last_seen":1470104380772,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":41,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","category":"Chat"},"dns": {"query":"vv.video.qq.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.151.234"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1470104380773,"flow_last_seen":1470104380773,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhtAAIAGEUDAqHMIy82X6sHIAFAfZnbXAAAAAIACIABgGQAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UhtAAIAGEUDAqHMIy82X6sHIAFAfZnbXAAAAAIACIABgGQAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0AABAADMGsFvLzZfqwKhzCABQwcglYwNrH2Z22IASFoBABAAAAgQFoAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhxAAIAGEUvAqHMIy82X6sHIAFAfZnbYJWMDbFAQAQSWQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUhxAAIAGEUvAqHMIy82X6sHIAFAfZnbYJWMDbFAQAQSWQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":258,"pkt":"TF4M6gNlABxCjnAxCABFAAD0Uh1AAIAGEH7AqHMIy82X6sHIAFAfZnbYJWMDbFAYAQQt1AAAUE9TVCAvZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IHZ2LnZpZGVvLnFxLmNvbQ0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":39,"flow_packet_id":6,"flow_first_seen":1470104380773,"flow_last_seen":1470104380807,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":20,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.QQ","category":"Chat"},"http": {"hostname":"vv.video.qq.com","url":"vv.video.qq.com\/getvinfo","code":0,"content_type":"","user_agent":"Mozilla\/5.0"}}
+0654{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":258,"pkt":"TF4M6gNlABxCjnAxCABFAAD0Uh1AAIAGEH7AqHMIy82X6sHIAFAfZnbYJWMDbFAYAQQt1AAAUE9TVCAvZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IHZ2LnZpZGVvLnFxLmNvbQ0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoJKFAADMGi8bLzZfqwKhzCABQwcglYwNsH2Z3pFAQAAeWcgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":79,"pkt":"ABxCjnAxTF4M6gNlCABFAABBJKJAADMGi6zLzZfqwKhzCABQwcglYwNsH2Z3pFAYAAdgPgAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQoNCg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0979{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":499,"pkt":"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","pkt_caplen":499,"pkt_type":2048,"pkt_ipoffset":14}
+0979{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":499,"pkt":"TF4M6gNlABxCjnAxCABFAAHlUh5AAIAGD4zAqHMIy82X6sHIAFAfZnekJWMDhVAYAQS5hgAAZW5jcnlwdFZlcj01LjQmb3R5cGU9eG1sJmFwcHZlcj0zLjIuMTkuMzU4JnBsYXRmb3JtPTEwOTAyJm5ld3BsYXRmb3JtPTEwOTAyJnZpZD15MDAxM3hhZWV5byZ2aWRzPXkwMDEzeGFlZXlvJmRlZmF1bHRmbXQ9c2QmZGVmbj1zZCZjS2V5PUFteVJ4VVhyUFc4Wkt4TEFDSGlmNHZka3FSNkxpUmJFMjlYbnA2VzNsUVdjSXEwYmdjSWJlQWhnVDRPMlg5NG5zRkZNazdaZlBSQURZQ0k5QXZrZXB3ZFdSM0FOQ1c4SWl6d202ZDZjVGVyYW9nQkM1SWhUX1JvdGQydDNrWkNCcmk1RU9zT3IzVG13bDFvcUhkQzYtS2dqVEF6MzRrSUhVZEJDRHZMS2FvVnhpLXpUcmRGQ01HamRBZTNXWGVOclZBNFlTclJDYWwwSFR1QlZ0c1ltYVdzRC1tNEJzbHJ4Mk1lRjg1eEtPZHRsUVBBayZndWlkPUY1RUIwMUNDMDFBOEUwOENEODM2MzA4MjhERTE3QzJCMDIxNjJGRDgmbGlua3Zlcj0yJmRlZm5wYXl2ZXI9MQ==","pkt_caplen":499,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":372,"pkt":"ABxCjnAxTF4M6gNlCABFAAFmJKNAADMGiobLzZfqwKhzCABQwcglYwOFH2Z5YVAYAAixSgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDE2Mw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCIgIHN0YW5kYWxvbmU9Im5vIiA\/Pgo8cm9vdD48ZW0+ODA8L2VtPjxleGVtPjE8L2V4ZW0+PGV4aW5mbz7kuK3lm70t5Y+w5rm+55yBLS3mnKrnn6U8L2V4aW5mbz48bXNnPklQIGxpbWl0PC9tc2c+PHM+Zjwvcz48L3Jvb3Q+","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1470104380890,"flow_last_seen":1470104380890,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp"}
+0396{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uh9AAIAGFuTAqHMIKngzmMHJH5CKzmkHAAAAAIACIADo5wAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Uh9AAIAGFuTAqHMIKngzmMHJH5CKzmkHAAAAAIACIADo5wAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1470104380909,"flow_last_seen":1470104380909,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp"}
+0807{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiBAAIAGEmDAqHMI2vSHqsHHI4t8ty4dKILF8FAQAQOZ5wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiBAAIAGEmDAqHMI2vSHqsHHI4t8ty4dKILF8FAQAQOZ5wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":62,"pkt":"ABxCjnAxTF4M6gNlCABFAAAwAABAADAGuQcqeDOYwKhzCB+QwcnDIL+ais5pCHASFtCCkgAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiFAAIAGFu7AqHMIKngzmMHJH5CKzmkIwyC\/m1AQ\/\/DGNQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiFAAIAGFu7AqHMIKngzmMHJH5CKzmkIwyC\/m1AQ\/\/DGNQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":306,"pkt":"TF4M6gNlABxCjnAxCABFAAEkUiJAAIAGFfHAqHMIKngzmMHJH5CKzmkIwyC\/m1AY\/\/C4+gAAUE9TVCAvYXBpL3Byb3h5P3VybD1odHRwJTNBJTJGJTJGdnYudmlkZW8ucXEuY29tJTJGZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDQyLjEyMC41MS4xNTI6ODA4MA0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":40,"flow_packet_id":6,"flow_first_seen":1470104380890,"flow_last_seen":1470104380968,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":20,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"42.120.51.152","url":"42.120.51.152:8080\/api\/proxy?url=http%3A%2F%2Fvv.video.qq.com%2Fgetvinfo","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.0"}}
+0721{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104380,"pkt_len":306,"pkt":"TF4M6gNlABxCjnAxCABFAAEkUiJAAIAGFfHAqHMIKngzmMHJH5CKzmkIwyC\/m1AY\/\/C4+gAAUE9TVCAvYXBpL3Byb3h5P3VybD1odHRwJTNBJTJGJTJGdnYudmlkZW8ucXEuY29tJTJGZ2V0dmluZm8gSFRUUC8xLjENCkFjY2VwdDogKi8qDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDQyLjEyMC41MS4xNTI6ODA4MA0KQ29udGVudC1MZW5ndGg6IDQ0NQ0KRXhwZWN0OiAxMDAtY29udGludWUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopEdAADAGFMgqeDOYwKhzCB+QwcnDIL+bis5qBFAQGSCsCgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":79,"pkt":"ABxCjnAxTF4M6gNlCABFAABBpEhAADAGFK4qeDOYwKhzCB+QwcnDIL+bis5qBFAYGSB11gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQoNCg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0982{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":499,"pkt":"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","pkt_caplen":499,"pkt_type":2048,"pkt_ipoffset":14}
+0982{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":499,"pkt":"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","pkt_caplen":499,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiRAAIAGEUPAqHMIy82X6sHIAFAfZnlhJWMEw1AQAQOSYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUiRAAIAGEUPAqHMIy82X6sHIAFAfZnlhJWMEw1AQAQOSYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":372,"pkt":"ABxCjnAxTF4M6gNlCABFAAFmJKRAADMGioXLzZfqwKhzCABQwcglYwOFH2Z5YVAYAAixSgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3htbDsgY2hhcnNldD11dGYtOA0KQ29udGVudC1MZW5ndGg6IDE2Mw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCIgIHN0YW5kYWxvbmU9Im5vIiA\/Pgo8cm9vdD48ZW0+ODA8L2VtPjxleGVtPjE8L2V4ZW0+PGV4aW5mbz7kuK3lm70t5Y+w5rm+55yBLS3mnKrnn6U8L2V4aW5mbz48bXNnPklQIGxpbWl0PC9tc2c+PHM+Zjwvcz48L3Jvb3Q+","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEIAAAER2QjAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":1470104381217,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":68,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U68AAAERvz7AqAUl4AAA\/NwuFOsAIuU8ydMAAAABAAAAAAAACG5vdGVib29rAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":1470104381217,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":1470104381217,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp"}
+0552{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFE8AAAER7zXAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1470104381217,"flow_last_seen":1470104381217,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1470104381237,"flow_last_seen":1470104381237,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":78,"pkt":"ABAj4ACgYMVHBbyMCABFAABAk\/BAAEAGrRvAqAUQwKhzS9F3AbseAeEVAAAAALAC\/\/84nQAAAgQFtAEDAwUBAQgKGg8YWwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":66,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XdE8SFWHgHhFoASFtAl8wAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo9WxAAEAGS7fAqAUQwKhzS9F3AbseAeEWRPEhV1AQIABdlQAAcnZlcjBd","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":271,"pkt":"ABAj4ACgYMVHBbyMCABFAAEB7MpAAEAGU4DAqAUQwKhzS9F3AbseAeEWRPEhV1AYIAC0MQAAFgMBANQBAADQAwNXoAM+DApFIVBtoVkm1YD4xHsvSlpaV1sKMPaqmp\/EYiBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA9AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1470104381237,"flow_last_seen":1470104381239,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0388{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoVq1AAEAG6nbAqHNLwKgFEAG70XdE8SFXHgHh71AQADZ8hgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":215,"pkt":"ABxCjnAxABAj4ACgCABFAADJVq5AAEAG6dTAqHNLwKgFEAG70XdE8SFXHgHh71AYADbIkgAAFgMDAFECAABNAwPHJnh2qX3nfDBpSu7Df5fT0X\/Q3\/d8yCgGwlqQxOSx+CBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQDki+Ej0RYqOg\/jDOhnO\/H7Bsu3crM8n3x+xrz81y3D6sPGZ2cIhuklKpkdgW0hBRebLLt2Gh0GfYMgr\/JhRkDE=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1470104381237,"flow_last_seen":1470104381243,"flow_tot_l4_data_len":534,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0389{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoK05AAEAGFdbAqAUQwKhzS9F3AbseAeHvRPEh+FAQH\/pcIQAAVFRQLzEu","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuirpAAEAGtmPAqAUQwKhzS9F3AbseAeHvRPEh+FAYIABECQAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":123,"pkt":"ABAj4ACgYMVHBbyMCABFAABtN7hAAEAGCSfAqAUQwKhzS9F3AbseAeH1RPEh+FAYIACL6AAAFgMDAEDGjk2WcpUh8OQ6FhASO1J68hFkVl7+33QoB\/0Tq9jEFedfIp4l4tEdJkeQk2fgJrOHJo\/QlfzdZ+FWP1+XBCJk","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoVq9AAEAG6nTAqHNLwKgFEAG70XdE8SH4HgHiOlAQADZ7mgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1755{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":1067,"pkt":"ABAj4ACgYMVHBbyMCABFAAQdUzlAAEAG6fXAqAUQwKhzS9F3AbseAeI6RPEh+FAYIAATTwAAFwMDA\/DA38Z0CriJXWvtW7RFw9LDOm1hI3Jn0WdodZxDb8Wpsa8K9Knv6nk+qeeuq2QHiTAwY+uBbhRIIo7cCiFWCXc083F4+c\/f7SN2nlkuDJezjpBiZ8XwVU60Ylz9eadMrrtDovGjM6M\/PArOXH1ZNlJ9cP+JbstwZLmdl0wcUec1FFpdCajI3WxYaYcKMcIXLjHeuW5xgbM2n5ys7sQjtDLUshFvULX2GX\/O0m5iSYlYiP2mCWFzQTkU8\/WN84V\/pvNJd\/yfq7WNUR8lVlG4\/PBOV4qQW66CYShFtrDkJABMjKnwL+xlwB\/q7Kdlv+rjx8WfgMSceXt142jGotULQVzwusPzgUqJM+RumkVzhOyLtVNAZMkhU1M70cIVz5aPBPEg4YJ8DY3wTb145uH3QwhUEdGMHIHk7tebvHIpgLub7nQ\/5CLip7ab+Yn2TlKARGzpLtROH+NsG+5GXcxIVGUJ5iiExz0DYxMrhV1dxOCfEJ6D6J+huxiEb+lkUoIfcXfk6otyogFEiqD15mq8s6m0Uys7jkjOI94cH6kSTtyjZ7cCr4+t4wZQy076s6xLIOAx594LhWOnZhXqmu2X01vEiT87ce32GHRI4JPbJ7np3hdBv61A9VQoMh7Kr6I6pEsM4q5EaSstF0fGi43hX7QKBVR3N0Y8lzU9vTSaZPSPMbg3xHntuzTm+gSnOlhZ09Bx0sOQUHLyVm+SSafJ9fHPUOk0G4orO2oglLHBKtPkEUNn2mpASGv1aImmq7lbP9rtIzly2d5zsLkPm3oOWfpQSGm9qmqDK2m1B2z0FOYgF7\/Eh9xrhzFUyOrhU0wyXggc52EXgEvxoaIMloJpIp7CfTrSpIs5dunx0P1Q1tuARJvv9Z2NkRfi5PVYiTLjhK1x5SCSzcTfP8JfPRyASvWHpV0gqp34X8iQkUgtlQBYqGK6IrbERGckJOmGdXOe2zJpKq5jnWu2+k5b\/aVQUSMGmfn0wlPzV4qvz6\/hGIjJsZ4ZMlYz\/jW25YQJMcY6buAeF14tfogTyGtAVctGdxshb5UUg1nsnIKnTcOAVVyCDXfR5A\/cedkFMx9ywMW+sUS\/5gcFSkfOeuHGco1V1iNWAfmnzo0zcy9rfryjfakJbkloJ1rsrbN4wLLDTi5UBL7qoRJ2y6sgifjmrzTbq0K+FK3I36raqY9VjResO49aq6jkowzZDWszBJmdQjOcIujc\/oFZwW6IVqHOSmJAzvC104Edg\/54wrjZkBRY8OUyWNR8P4xuZpns6Be0uhnkmpfMN4RFSm5TR+J9DhCQdDNNv68RsXrA0ktkrQYF7INzyxpjWEtM5LiJ0F9DUGvLaoc=","pkt_caplen":1067,"pkt_type":2048,"pkt_ipoffset":14}
+1744{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":1055,"pkt":"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","pkt_caplen":1055,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoIQZAAEAGIB7AqAUQwKhzS9F3AbseAeYvRPEl4VAQH+BUEgAAC2NoYXJt","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0981{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":499,"pkt":"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","pkt_caplen":499,"pkt_type":2048,"pkt_ipoffset":14}
+0981{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":499,"pkt":"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","pkt_caplen":499,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAopElAADAGFMYqeDOYwKhzCB+QwcnDIL+0is5rwVAQHVCmBAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2066{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUpEpAADAGD9kqeDOYwKhzCB+QwcnDIL+0is5rwVAQHVDJegAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eS8xLjkuMy4yDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQyIEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCjE0ZGMNCjw\/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9InV0Zi04IiAgc3RhbmRhbG9uZT0ibm8iID8+Cjxyb290PjxkbHR5cGU+MTwvZGx0eXBlPjxleGVtPjI8L2V4ZW0+PGZsPjxjbnQ+NTwvY250PjxmaT48YnI+MjM1PC9icj48Y25hbWU+6auY5riFOyg0ODBQKTwvY25hbWU+PGlkPjExMjEyPC9pZD48bG10PjA8L2xtdD48bmFtZT5oZDwvbmFtZT48c2I+MTwvc2I+PHNsPjA8L3NsPjwvZmk+PGZpPjxicj42NDwvYnI+PGNuYW1lPuagh+a4hTsoMjcwUCk8L2NuYW1lPjxpZD4xMTIwMzwvaWQ+PGxtdD4wPC9sbXQ+PG5hbWU+c2Q8L25hbWU+PHNiPjE8L3NiPjxzbD4xPC9zbD48L2ZpPjxmaT48YnI+NjQ8L2JyPjxjbmFtZT7pq5jmuIU7KDM2MFApPC9jbmFtZT48aWQ+MjwvaWQ+PGxtdD4wPC9sbXQ+PG5hbWU+bXA0PC9uYW1lPjxzYj4xPC9zYj48c2w+MDwvc2w+PC9maT48Zmk+PGJyPjY1MDwvYnI+PGNuYW1lPui2hea4hTsoNzIwUCk8L2NuYW1lPjxpZD4xMTIwMTwvaWQ+PGxtdD4wPC9sbXQ+PG5hbWU+c2hkPC9uYW1lPjxzYj4xPC9zYj48c2w+MDwvc2w+PC9maT48Zmk+PGJyPjEyMDA8L2JyPjxjbmFtZT7ok53lhYk7KDEwODBQKTwvY25hbWU+PGlkPjExMjA5PC9pZD48bG10PjE8L2xtdD48bmFtZT5maGQ8L25hbWU+PHNiPjE8L3NiPjxzbD4wPC9zbD48L2ZpPjwvZmw+PGhzPjA8L2hzPjxscz4wPC9scz48cHJldmlldz4zMDA8L3ByZXZpZXc+PHM+bzwvcz48c2ZsPjxjbnQ+MDwvY250Pjwvc2ZsPjx0bT4xNDcwMTA0MzgyPC90bT48dmw+PGNudD4xPC9jbnQ+PHZpPjxicj4zNDwvYnI+PGNoPjA8L2NoPjxjbD48Y2k+PGNkPjI5OS45NjwvY2Q+PGNtZDU+Y2Y5MjMzMzBhNzIyOTQ4NjY4ZmQ1OGVjNDE1ODEzZDQ8L2NtZDU+PGNzPjk0MTg2NTU8L2NzPjxpZHg+MTwvaWR4PjxrZXlpZD51MDAyMG1rcm5kcy4xMTIwMy4xPC9rZXlpZD48L2NpPjxjaT48Y2Q+MzAwLjA0PC9jZD48Y21kNT43NGI4NjVlMWZhYjM0MWU2MzAyNzFlZWFmOTU5NTJkMjwvY21kNT48Y3M+MTM4NzQ1NDE8L2NzPjxpZHg+MjwvaWR4PjxrZXlpZD51MDAyMG1rcm5kcy4xMTIwMy4yPC9rZXlpZD48L2NpPjxjaT48Y2Q+MzAwPC9j","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":68,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7AAAAERvz3AqAUl4AAA\/NwuFOsAIuU8ydMAAAABAAAAAAAACG5vdGVib29rAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNAJhAgEGADFjB6UAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1470104381895,"flow_last_seen":1470104381895,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Ui5AAIAGjNDAqHMIt4MwkcHMAFBbXvEQAAAAAIACIAAlhwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0Ui5AAIAGjNDAqHMIt4MwkcHMAFBbXvEQAAAAAIACIAAlhwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":1470104381935,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":69,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J0MAAAERi63AqGUh4AAA\/ORYFOsAI152CJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":1470104381935,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":1470104381935,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":69,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3fUIAAAERlcbAqAUJ4AAA\/ORYFOsAI76OCJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1470104381935,"flow_last_seen":1470104381935,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0555{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRQAAAQRv1\/AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfiEAAAERhV\/AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAsAABAADEGLge3gzCRwKhzCABQwcyPbNg5W17xEWASOQjNFQAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUi9AAIAGjNvAqHMIt4MwkcHMAFBbXvERj2zYOlAQ\/\/Ad6gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUi9AAIAGjNvAqHMIt4MwkcHMAFBbXvERj2zYOlAQ\/\/Ad6gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0960{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":486,"pkt":"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","pkt_caplen":486,"pkt_type":2048,"pkt_ipoffset":14}
+1004{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1470104381895,"flow_last_seen":1470104381978,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":20,"flow_max_l4_data_len":452,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"183.131.48.145","url":"183.131.48.145\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8","code":0,"content_type":"","user_agent":""}}
+0960{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104381,"pkt_len":486,"pkt":"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","pkt_caplen":486,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":69,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J0UAAAERi6vAqGUh4AAA\/ORYFOsAI152CJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":69,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3fUUAAAERlcPAqAUJ4AAA\/ORYFOsAI76OCJsAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo2exAADEGVB63gzCRwKhzCABQwcyPbNg6W17ywVAQK\/jwMgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1228{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":687,"pkt":"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","pkt_caplen":687,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjFAAIAGjNnAqHMIt4MwkcHMAFBbXvLBj2zas1AR\/XccOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjFAAIAGjNnAqHMIt4MwkcHMAFBbXvLBj2zas1AR\/XccOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1470104382053,"flow_last_seen":1470104382053,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UjJAAIAGjM3AqHMIt4MwkMHNAFBSJ8A7AAAAAIACIABfkwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0UjJAAIAGjM3AqHMIt4MwkMHNAFBSJ8A7AAAAAIACIABfkwAAAgQE7AEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAsAABAADEGLgi3gzCQwKhzCABQwc0rYeLSUifAPGASOQhglAAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjRAAIAGjNfAqHMIt4MwkMHNAFBSJ8A8K2Hi01AQ\/\/CxaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjRAAIAGjNfAqHMIt4MwkMHNAFBSJ8A8K2Hi01AQ\/\/CxaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo2e5AADEGVBy3gzCRwKhzCABQwcyPbNqzW17ywlARK\/jttwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1057{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":557,"pkt":"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","pkt_caplen":557,"pkt_type":2048,"pkt_ipoffset":14}
+1076{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1470104382053,"flow_last_seen":1470104382125,"flow_tot_l4_data_len":651,"flow_min_l4_data_len":20,"flow_max_l4_data_len":523,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"183.131.48.144","url":"183.131.48.144\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8&locid=a06f98fd-fa26-44e5-acc5-0d83f9df03af&size=9418655&ocid=253564332","code":0,"content_type":"","user_agent":""}}
+1057{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":557,"pkt":"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","pkt_caplen":557,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjZAAIAGjNTAqHMIt4MwkcHMAFBbXvLCj2zatFAQ\/XccOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjZAAIAGjNTAqHMIt4MwkcHMAFBbXvLCj2zatFAQ\/XccOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAostlAADEGezK3gzCQwKhzCABQwc0rYeLTUifCM1AQK\/iDagAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":335,"pkt":"ABxCjnAxTF4M6gNlCABFAAFBstpAADEGehi3gzCQwKhzCABQwc0rYeLTUifCM1AYK\/jSYgAASFRUUC8xLjEgMjA2IFBhcnRpYWwgQ29udGVudA0KQ29udGVudC1SYW5nZTogYnl0ZXMgMC05NDE4NjU0Lzk0MTg2NTUNCkFjY2Vzcy1Db250cm9sLUFsbG93LU9yaWdpbjogKg0KQ29udGVudC1MZW5ndGg6IDk0MTg2NTUNCkFjY2VwdC1SYW5nZXM6IGJ5dGVzDQpEYXRlOiBUdWUsIDAyIEF1ZyAyMDE2IDAyOjE5OjQ1IEdNVA0KQ29udGVudC1UeXBlOiB2aWRlby9tcDQNClgtU2VydmVySXA6IDE4My4xMzEuNDguMTQ0DQpYLVJlc3BUaW1lOiAwMi9BdWcvMjAxNjoxMDoxOTo0NSArMDgwMA0KDQo=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+1099{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":48,"flow_packet_id":9,"flow_first_seen":1470104382053,"flow_last_seen":1470104382192,"flow_tot_l4_data_len":1495,"flow_min_l4_data_len":20,"flow_max_l4_data_len":523,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Media"},"http": {"hostname":"183.131.48.144","url":"183.131.48.144\/vlive.qqvideo.tc.qq.com\/u0020mkrnds.p1203.1.mp4?vkey=7AB139BF6B32F53747E8FF192E6FE557B3A3D644C034E34BF6EAEB4E0774F2A92EF3AC5C007520BB925E5C8A18E6D302C2DAE0A295B26AA8FD1DC8069D47CE1B4A16A56870BD1ACA3E86ABE4C079659DB2182FC71217AB68CCD344CE65694457E3F53549CD617D5C9F671A26C70DC68F93F1D7BCD017762F&guid=F5EB01CC01A8E08CD83630828DE17C2B02162FD8&locid=a06f98fd-fa26-44e5-acc5-0d83f9df03af&size=9418655&ocid=253564332","code":206,"content_type":"video\/mp4","user_agent":""}}
+1763{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":1078,"pkt":"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","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+1754{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":1078,"pkt":"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","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjdAAIAGjNTAqHMIt4MwkMHNAFBSJ8IzK2Hr7FAQ\/\/CmWAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjdAAIAGjNTAqHMIt4MwkMHNAFBSJ8IzK2Hr7FAQ\/\/CmWAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":1470104382241,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp"}
+0551{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0YAAAERfELAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1470104382241,"flow_last_seen":1470104382241,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":1470104382242,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp"}
+0551{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfYYAAAERhhrAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1470104382242,"flow_last_seen":1470104382242,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0551{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMNEAAAER0p\/AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNN4pAgEGAP54u0wAAAAAwKgFMcCoBTHAqHcBAAAAAOix\/Kv7sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOq0AAAERyNDAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":1470104382448,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp"}
+0442{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":95,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD8GwU6wApG1\/NkQAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE=","pkt_caplen":95,"pkt_type":34525,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":1470104382448,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":1470104382448,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp"}
+0411{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":75,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9ed0AAAERmP3AqAUx4AAA\/PBsFOsAKYTXzZEAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":1470104382448,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":1470104382448,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp"}
+0556{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCesAAAQR9onAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1470104382448,"flow_last_seen":1470104382448,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0442{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":95,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD8GwU6wApG1\/NkQAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE=","pkt_caplen":95,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":75,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9ed8AAAERmPvAqAUx4AAA\/PBsFOsAKYTXzZEAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+1754{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104382,"pkt_len":1078,"pkt":"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","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104383,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAoUjhAAIAGjNPAqHMIt4MwkMHNAFBSJ8IzK2Hv7FAQ+\/CmWAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104383,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLYAAAQRv8DAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104383810,"flow_last_seen":1470104383810,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0768{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104383,"pkt_len":342,"pkt":"TF4M6gNlYMVHBbyMCABFAAFI+0MAAEARgP\/AqAUQwKh3AQBEAEMBNFvxAQEGABeXwMwAAAAAwKgFEAAAAAAAAAAAAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwkBAwYPd1\/8LC45AgXcPQcBYMVHBbyMMwQAdqcADAtNYWNCb29rLUFpcv8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1470104383810,"flow_last_seen":1470104383810,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}}
+0769{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104383,"pkt_len":342,"pkt":"ABxCjnAxTF4M6gNlCABFAAFIAAAAABARrEPAqHcBwKgFEABDAEQBNHbOAgEGABeXwMwAAAAAwKgFEMCoBRDAqHcBAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104384,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEMAAAER2QfAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104384,"pkt_len":98,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAshosLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACAt0=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0552{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104384,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFAAAAER7zTAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104384,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEsMAgEGAENEXMgAAAAAwKgFLcCoBS3AqHcBAAAAAOCsy3Hh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRUAAAQRv17AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0oAAAERfD7AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfwAAAAERhKDAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMOQAAAER0ozAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOr0AAAERyMDAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCewAAAQR9ojAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1470104385827,"flow_last_seen":1470104385827,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp"}
+0433{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104385,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/rCILUFkxCABFAABEAABAAEARLlc7eNDa\/\/\/\/\/8PnB5sAMKByU3Uyb1ZTdDRBQUJIWlc1MGNtbGpaVjlCVUVOZlozVmxjM1FBYldVQQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104386,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLcAAAQRv7\/AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104386,"pkt_len":107,"pkt":"ABxCjnAxABAj4ACgCABFAABdVrFAAEAG6j3AqHNLwKgFEAG70XdE8SXhHgHmL1AYAEa9yAAAFQMDADAL2rIa718l782i9dkDIcqQtKzDEyHxDKXTvidj58VEqE5kb1BH\/HnLnTzyrYBe4U4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104386,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAor95AAEAGkUXAqAUQwKhzS9F3AbseAeYvRPEmFlAQH\/5TvwAAC1ZFUzE2","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104387,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEQAAAER2QbAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104387,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFEAAAER7zPAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1470104388033,"flow_last_seen":1470104388033,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp"}
+0384{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUkZAAIAG8z3AqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUkZAAIAG8z3AqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0ZvMAAD0GYYbLQrZXwKhzCAG7wbw0Yee8K8BBp4AQAO2bugAAAQEFCivAQaYrwEGn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ0wAAAERfDzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChfzUAAAERhGvAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMOoAAAER0obAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104388,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOtwAAAERyKHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1470104389597,"flow_last_seen":1470104389597,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104389,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0ErtAAEAGH+LAqAUQROn9hdFtAFBAFGHVDj7nf4AREAH2GQAAAQEIChoPOPTPHNz0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104389,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLgAAAQRv77AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEUAAAER2QXAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFIAAAER7zLAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1470104390443,"flow_last_seen":1470104390443,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp"}
+0414{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":78,"pkt":"TF4M6gNlYMVHBbyMCABFAABAN95AAEAG+rLAqAUQROn9hdF4AFAesUW4AAAAALAC\/\/+iVAAAAgQFtAEDAwUBAQgKGg88QAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADUGPZVE6f2FwKgFEABQ0Xh2OO96HrFFuaASFqBImwAAAgQFtAQCCArPHh84Gg88QAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0PI1AAEAG9g\/AqAUQROn9hdF4AFAesUW5djjve4AQEBV9LwAAAQEIChoPPQTPHh84","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":331,"pkt":"TF4M6gNlYMVHBbyMCABFAAE9+GJAAEAGOTHAqAUQROn9hdF4AFAesUW5djjve4AYEBVNJgAAAQEIChoPPQXPHh84R0VUIC9jb21NYWdpY2FuQXBpL2NvbXBvc2l0ZS9hcHAucGhwL0dsb2JhbC9JbmRleC9pcCBIVFRQLzEuMQ0KSG9zdDogYXBpLm1hZ2ljYW5zb2Z0LmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogemgtdHcNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogTWFnaWNhbiAodW5rbm93biB2ZXJzaW9uKSBDRk5ldHdvcmsvNzIwLjUuNyBEYXJ3aW4vMTQuNS4wICh4ODZfNjQpDQoNCg==","pkt_caplen":331,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":58,"flow_packet_id":4,"flow_first_seen":1470104390443,"flow_last_seen":1470104390642,"flow_tot_l4_data_len":413,"flow_min_l4_data_len":32,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/composite\/app.php\/Global\/Index\/ip","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":1470104390741,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp"}
+0564{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":185,"pkt":"MzMAAAABTF4MmuxUht1gAAAAAIMRAf6AAAAAAAAATl4M\/\/6a7FT\/AgAAAAAAAAAAAAAAAAABFi4WLgCDan0ABGg\/AAEABkxeDJrsVAAFAAAABwAPNi4zNS4xIChzdGFibGUpAAgACE1pa3JvVGlrAAoABHzzfwAACwAJM0RYWS1LSEdEAAwADUNSUzEyNS0yNEctMVMADgABAQAPABD+gAAAAAAAAE5eDP\/+muxUABAAB2JyaWRnZTE=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0397{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA08IZAADUGTRZE6f2FwKgFEABQ0Xh2OO97HrFGwoAQABuLWQAAAQEICs8eH\/4aDz0F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":58,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0TlJAAEAG5ErAqAUQROn9hdF4AFAesUbCdjjwv4AQEAt5WQAAAQEIChoPPdDPHh\/\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104390,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1470104391199,"flow_last_seen":1470104391199,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp"}
+0384{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUk5AAIAGdmbAqHMIQOm9gMGtAFD1eICMR0KJzlAQAXpzKwAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUk5AAIAGdmbAqHMIQOm9gMGtAFD1eICMR0KJzlAQAXpzKwAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0a70AAC4G7uxA6b2AwKhzCABQwa1HQonO9XiAjYAQAVdRKwAAAQEFCvV4gIz1eICN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChARUAAAERAozAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ1IAAAERfDbAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":1470104391254,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp"}
+0426{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":86,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD+KsU6wAgEMLGawAAAAEAAAAAAAAGaXNhdGFwAAABAAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":1470104391254,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":1470104391254,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp"}
+0397{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":66,"pkt":"AQBeAAD8PKn0WgOECABFAAA0HuAAAAER9UjAqAPs4AAA\/MoCFOsAIFaUxmsAAAABAAAAAAAABmlzYXRhcAAAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1470104391254,"flow_last_seen":1470104391254,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0550{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMO8AAAER0oHAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":86,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD+KsU6wAgEMLGawAAAAEAAAAAAAAGaXNhdGFwAAABAAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0397{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":66,"pkt":"AQBeAAD8PKn0WgOECABFAAA0HuEAAAER9UfAqAPs4AAA\/MoCFOsAIFaUxmsAAAABAAAAAAAABmlzYXRhcAAAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCe4AAAQR9obAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":1470104391564,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0442{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104391,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHugAAIARlnrAqAPswKj\/\/wCJAIkAOqdmilEBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1470104391564,"flow_last_seen":1470104391564,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":1470104392072,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0812{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104392,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tXCABFAAFZOwBAAEARsV\/AqIyM\/\/\/\/\/\/YA9gABRQTx\/\/\/Z1aAAwKC7c+tXwKiMjAAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tXQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI2AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqIyM\/\/8AAFBvcnQgOAAAIAGwIAAGAADCoLv\/\/nPrV0A=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":1470104392072,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0845{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104392,"pkt_len":391,"pkt":"MzMAAAABwKC7c+tXht1gAAAAAVERgCABsCAABgAAwqC7\/\/5z61f\/AgAAAAAAAAAAAAAAAAAB9gD2AAFRMAf\/D9nVoADAoLtz61cgAbAgAAYAAMKgu\/\/+c+tXAAACACcBREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFN3aXRjaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMy4xMC4wMTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoLtz61dCMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFFQMFIxRDkwMDAwMjYAAAAAAAAAAAAAAAAAAAAAAAAAREdTLTEyMTAtMTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCojIz\/\/wAAUG9ydCA4AAAgAbAgAAYAAMKgu\/\/+c+tXQA==","pkt_caplen":391,"pkt_type":34525,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":1470104392380,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp"}
+0442{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104392,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOckUAAEARgdzAqAUtwKj\/\/+mNAIkAOs9OABUBEAABAAAAAAAAIEZERUJFT0VLRUpDTkVNRUpFR0VGRUNFUEVQRUxDTkNBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":1470104392380,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0441{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104392,"pkt_len":98,"pkt":"MzMAAQACcD6s8PAHht1gBWEEACwRAf6AAAAAAAAABAZVqGRTJd3\/AgAAAAAAAAAAAAAAAQACAiICIwAsg0sLJ3MdAAEADgABAAEduOb7cD6s8PAHAAYABAAXABgACAACBh0=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104392,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLkAAAQRv73AqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxQAAIARlk7AqAPswKj\/\/wCJAIkAOqdmilEBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEYAAAER2QTAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFMAAAER7zHAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp"}
+0442{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOGrEAAEAR2XDAqAUtwKj\/\/+hFAIkAOjOmABcBEAABAAAAAAAAIEVIRUdFSkVNRUZDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0442{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOnJgAAEARV4nAqAUtwKj\/\/wCJAIkAOr16RfsBEAABAAAAAAAAIEVPRUJGREVHRUpFTUVGQ0FDQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0608{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADKO0kAAEARuFzAqAUtwKj\/\/wCKAIoAtoWlEQJF7sCoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAO1FEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTsRQAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0608{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADK5DUAAEARD3DAqAUtwKj\/\/wCKAIoAtoasEQJF8cCoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEVORkRFSUVQRU5FRkNBQ0FDQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAPBFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTvRQAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0608{"flow_id":69,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAADKOS4AAEARunfAqAUtwKj\/\/wCKAIoAtoChEQJF98CoBS0AAACgAAAgRU5FQkVERUNFUEVQRUxFQkVKRkNDTkVGREJFRURBQUEAIEVORkpFSEZDRVBGRkZBQ0FDQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAA1TQAAPZFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQT1RQAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104393,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxcAAIARlkvAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104394,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChAc0AAAERAdTAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104394,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMQIAAAER0m7AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104394,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHxoAAIARlkjAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":68,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104394,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/4KzLceHQCABFAABOipYAAEARaYvAqAUtwKj\/\/wCJAIkAOr16RfsBEAABAAAAAAAAIEVPRUJGREVHRUpFTUVGQ0FDQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104395,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOHysAAIARljfAqAPswKj\/\/wCJAIkAOqdiilUBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1470104395656,"flow_last_seen":1470104395656,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0808{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104395,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/wKC7c+snCABFAAFZOwBAAEARM+XAqAoH\/\/\/\/\/\/YA9gABRUQe\/\/+eLaAAwKC7c+snwKgKBwAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+snQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDIzAAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAoH\/\/8AAFBvcnQgOAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104395,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARqaYAAAAA\/\/\/\/\/wBEAEMBNLOUAQEGALkL8pMAEIAAAAAAAAAAAAAAAAAAAAAAAExeDOoDZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBPQcBTF4M6gNlNwYBAwYPLCH\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104396888,"flow_last_seen":1470104396888,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp"}
+0430{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104396,"pkt_len":88,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQADxBIU6wAiAfRVcwAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1470104396888,"flow_last_seen":1470104396888,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104396889,"flow_last_seen":1470104396889,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104396,"pkt_len":68,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fi0AAAERlLzAqAUp4AAA\/NTGFOsAItEVVXMAAAABAAAAAAAACGtldmluLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1470104396889,"flow_last_seen":1470104396889,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0430{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104396,"pkt_len":88,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQADxBIU6wAiAfRVcwAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0402{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104396,"pkt_len":68,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fi4AAAERlLvAqAUp4AAA\/NTGFOsAItEVVXMAAAABAAAAAAAACGtldmluLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfi8AAAERhVHAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":1470104397091,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0781{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/cPGh+Cr9CABFAAFIAzMAAIARcMHAqAUJ\/\/\/\/\/wBEAEMBND1aAQEGAPwPedgAAIAAwKgFCQAAAAAAAAAAAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEIPQcBcPGh+Cr9DAlKb2FubmEtUEM8CE1TRlQgNS4wNw0BDwMGLC4vHyF5+Sv8\/wAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":1470104397091,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,121,249,43,252"}}
+0782{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEtlAgEGAPwPedgAAIAAwKgFCQAAAADAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBAQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ1QAAAERfDTAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChAzcAAAERAGrAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCfAAAAQR9oTAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104397807,"flow_last_seen":1470104397807,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp"}
+0555{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104397,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClrzIAAAERVEPAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1470104397807,"flow_last_seen":1470104397807,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0387{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104398,"pkt_len":60,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoA95AAEAGLsvAqAUQROn9hdFlAFAG4xw4xV6fSlAUEAE+LgAA8Q52cgJF","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":1470104398832,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0421{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104398,"pkt_len":82,"pkt":"AQBeAAD7ZMwunDzJCABFAABEo69AAP8RMRXAqAVA4AAA+xTpFOkAMOS\/AAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":1470104398832,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1470104398932,"flow_last_seen":1470104398932,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp"}
+0433{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104398,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/AAK2Qbs6CABFAABEAABAAEARd0fAqAK6\/\/\/\/\/4AAB5sAMBr8aWNSVlNvVTlBQUJYWldKRFlXeHNBSFZ0Ukc5c2IzSlRhWFJCYldVQQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104399652,"flow_last_seen":1470104399652,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp"}
+0405{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104399,"pkt_len":70,"pkt":"AQBeAAD8bEAIlAI6CABFAAA4QZsAAAER0UXAqAUw4AAA\/OmVFOsAJO3eTL0AAAABAAAAAAAACkthc3Blci1tYWMAAP8AAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1470104399652,"flow_last_seen":1470104399652,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":1470104399854,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp"}
+0515{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104399,"pkt_len":142,"pkt":"\/\/\/\/\/\/\/\/TF4M6gOICABFAACAAABAAEAReWHAqABk\/\/\/\/\/8btFi4AbOgXAACpHQABAAZMXgzqA4gABQAFNE1OQVQABwAPNi4zNS4xIChzdGFibGUpAAgACE1pa3JvVGlrAAoABIOWJAAACwAJTjUzOC1HMDRVAAwABlJCNDUwRwAOAAEAABAABmV0aGVyMg==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1470104399958,"flow_last_seen":1470104399958,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104399,"pkt_len":68,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MRAAAAER4cnAqAU54AAA\/P5+FOsAIr4lNLsAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1470104399958,"flow_last_seen":1470104399958,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":1470104399959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp"}
+0434{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104399,"pkt_len":91,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQAD9SQU6wAlorgrvQAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ==","pkt_caplen":91,"pkt_type":34525,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":1470104399959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":1470104399959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp"}
+0406{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104399,"pkt_len":71,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S7YAAAERxyfAqAUy4AAA\/PUkFOsAJRvtK70AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":1470104399959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0554{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104399,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRYAAAQRv13AqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":68,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MRIAAAER4cfAqAU54AAA\/P5+FOsAIr4lNLsAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":70,"pkt":"AQBeAAD8bEAIlAI6CABFAAA4rMMAAAERZh3AqAUw4AAA\/OmVFOsAJO3eTL0AAAABAAAAAAAACkthc3Blci1tYWMAAP8AAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfjEAAAERhU\/AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":1470104400162,"flow_tot_l4_data_len":528,"flow_min_l4_data_len":528,"flow_max_l4_data_len":528,"flow_avg_l4_data_len":528,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp"}
+1068{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":562,"pkt":"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","pkt_caplen":562,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":1470104400162,"flow_tot_l4_data_len":528,"flow_min_l4_data_len":528,"flow_max_l4_data_len":528,"flow_avg_l4_data_len":528,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":1470104400162,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":536,"flow_max_l4_data_len":536,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp"}
+1103{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1470104400162,"flow_last_seen":1470104400162,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":536,"flow_max_l4_data_len":536,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0550{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMRMAAAER0l3AqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":81,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":71,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S7cAAAERxybAqAUy4AAA\/PUkFOsAJRvtK70AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+1048{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":548,"pkt":"AQBef\/\/66LH8q\/uyCABFAAIWCfIAAAQR9RHAqAUx7\/\/\/+gdsB2wCAmnTTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb25uZWN0aW9uTWFuYWdlcjoxDQpOVFM6IHNzZHA6YWxpdmUNCkxvY2F0aW9uOiBodHRwOi8vMTkyLjE2OC41LjQ5OjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTI6OnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6Q29ubmVjdGlvbk1hbmFnZXI6MQ0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT05MDANClNlcnZlcjogTWljcm9zb2Z0LVdpbmRvd3MvMTAuMCBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOiBkMDdiNDM1ZDI5OWI0MTc4NGNhM2QyYWUyYjk1OTk0OA0KDQo=","pkt_caplen":548,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":576,"pkt":"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","pkt_caplen":576,"pkt_type":34525,"pkt_ipoffset":14}
+1045{"flow_id":82,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":546,"pkt":"AQBef\/\/66LH8q\/uyCABFAAIUCfMAAAQR9RLAqAUx7\/\/\/+gdsB2wCAPPDTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb250ZW50RGlyZWN0b3J5OjENCk5UUzogc3NkcDphbGl2ZQ0KTG9jYXRpb246IGh0dHA6Ly8xOTIuMTY4LjUuNDk6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KVVNOOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMjo6dXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb250ZW50RGlyZWN0b3J5OjENCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K","pkt_caplen":546,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":83,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":574,"pkt":"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","pkt_caplen":574,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAACl66AAAAERF9XAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104400,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":1470104401187,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp"}
+0406{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104401,"pkt_len":71,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S70AAAERxyDAqAUy4AAA\/MNuFOsAJYAi+T0AAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":1470104401187,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+1029{"flow_id":82,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104401,"pkt_len":534,"pkt":"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","pkt_caplen":534,"pkt_type":2048,"pkt_ipoffset":14}
+1066{"flow_id":83,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104401,"pkt_len":562,"pkt":"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","pkt_caplen":562,"pkt_type":34525,"pkt_ipoffset":14}
+0779{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104401,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/vO57DLPeCABFAAFIg+0AAEAR9bgAAAAA\/\/\/\/\/wBEAEMBNDMlAQEGANPiBnoAAAAAAAAAAAAAAAAAAAAAAAAAALzuewyz3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLWY3Y2EwZjU3MTI3MGM1MmQ3CQEhAwYPHDM6O\/8A","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":1470104401904,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp"}
+0433{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104401,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/ABNyFooyCABFAABEAABAAEARLl07eNDU\/\/\/\/\/4AAB5sAMADiZERZY1RjNFBBQUJQY0dWdVluUnpBSFZ0Ukc5c2IzSlRhWFJCYldVQQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0744{"flow_id":58,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":323,"pkt":"TF4M6gNlYMVHBbyMCABFAAE1hLZAAEAGrOXAqAUQROn9hdF4AFAesUbCdjjwv4AYEAu4KQAAAQEIChoPahbPHh\/\/R0VUIC9jb21NYWdpY2FuQXBpL2luZGV4LnBocC9Ub29sQm94L3ZlcnNpb24gSFRUUC8xLjENCkhvc3Q6IGFwaS5tYWdpY2Fuc29mdC5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLXR3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1hZ2ljYW4gKHVua25vd24gdmVyc2lvbikgQ0ZOZXR3b3JrLzcyMC41LjcgRGFyd2luLzE0LjUuMCAoeDg2XzY0KQ0KDQo=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1470104402238,"flow_last_seen":1470104402238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":78,"pkt":"ABAj4ACgYMVHBbyMCABFAABAGihAAEAGJuTAqAUQwKhzS9F5AbtwBJ91AAAAALAC\/\/\/WVQAAAgQFtAEDAwUBAQgKGg9qPQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":66,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XnKmfzXcASfdoASFtC0YwAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAosclAAEAGj1rAqAUQwKhzS9F5AbtwBJ92ypn82FAQIADsBQAAyQ4pxaWW","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":267,"pkt":"ABAj4ACgYMVHBbyMCABFAAD9ruNAAEAGkWvAqAUQwKhzS9F5AbtwBJ92ypn82FAYIADtEAAAFgMBANABAADMAwNXoANTJYxftKgXimtNLVWTzYxskkMb8dtmAzVqLh4pryBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA5AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwID","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":86,"flow_packet_id":4,"flow_first_seen":1470104402238,"flow_last_seen":1470104402240,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0388{"flow_id":86,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAofPZAAEAGxC3AqHNLwKgFEAG70XnKmfzYcASgS1AQADYK+wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0602{"flow_id":86,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":215,"pkt":"ABxCjnAxABAj4ACgCABFAADJfPdAAEAGw4vAqHNLwKgFEAG70XnKmfzYcASgS1AYADbicAAAFgMDAFECAABNAwN7H4yPHjLYw\/e9aBqw+\/vV2u50xsHUyfu8US38EyE+VyBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQJPGwpXm49Wpwm5+RRNIxmh0PMa1TfmfP4GkpjQdMkON0UW5xEoBecyOhOQdSe0vc5PC\/LsmCtxUJlkP4zkaysY=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":86,"flow_packet_id":6,"flow_first_seen":1470104402238,"flow_last_seen":1470104402243,"flow_tot_l4_data_len":530,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0389{"flow_id":86,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoHZZAAEAGI47AqAUQwKhzS9F5AbtwBKBLypn9eVAQH\/rqlQAAWvP2rXCB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":86,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuBZhAAEAGO4bAqAUQwKhzS9F5AbtwBKBLypn9eVAYIADSfQAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":86,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":123,"pkt":"ABAj4ACgYMVHBbyMCABFAABtWB1AAEAG6MHAqAUQwKhzS9F5AbtwBKBRypn9eVAYIACxqgAAFgMDAED8EEpWqJk4r6WtGIr5vsgJsNnUnmvrFtYoejYQeOu8kyDFXZMIixibwwXGCt9sigWwD0DjmEGXkF2UN2M7Ecgb","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":86,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAofPhAAEAGxCvAqHNLwKgFEAG70XnKmf15cASgllAQADYKDwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1761{"flow_id":86,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":1067,"pkt":"ABAj4ACgYMVHBbyMCABFAAQdpDtAAEAGmPPAqAUQwKhzS9F5AbtwBKCWypn9eVAYIACVpwAAFwMDA\/B6BgcjP2PVKZQtz8MJhne7YIP24L3UojYgYZS42z7GWQaO4tllBR9ED168aNnSy435kT+WUEY53rq0MCIT8ePGss1ZcevnOMUI8gYtDpEPHZ1hL\/1\/mlTYvtxf8SQyDvnDre1HirzJJdNgjbfiNk8E9FAZtRrooy7f3k7grJFdGbmPA8X1Nvl\/M6vpnJ\/HdRjRsHdDQGMJJ7M31UTQat9KFMbgGgyh5SGmtzojqNVtCP4xeFhr\/qJqGf7zFm2Gtil69B5Sgi8jk6qRHJNQ5VvvYUB+g\/T\/jlD1dBguoBBmnhl8Bwi72cpdKhS8dTKadpwmoBi1vcICDt0NoSGNO\/0jX+UaM4VDCppq8j6Ad\/IVwh9ozmpyLJej6Mp3nGP+mCoudJhCSFS+2Pid7BejnI3r\/HP1KKv\/67NNexhfhx80zBvNH38Ni+QMOsVeqNaSNF1EHBkCqB2zYcDSDlXYKgDV\/Bdut9kKelbFIDQTR+jT7NkEWnxAb2OsMQitHdhIY7oir0akgd6rbQee8HvkUiJ7Cpepnju638XyIn1amDptSbDccuL7jojyQyYucwup8LcBzZGAzVPw26NU1e1WsdzohtzeGNz648GjvKrJrpQXQ05LcHDbMSr5NbmicGRAOsGrfgs3IMZ8nGMKwLqMJ4bFCJK1OHZzasrkR9UkqVUb395LzsjoZsTmK2JGZiSYKMYwHPzSJO+lvpAEdSkOVDw1cADDNhOTFCrSLgbB6fW5\/\/VFaVpCclafI9LgU4lqSswaVJvg9CmwE6h1b7BD7IhdS7HloDHvDC0ZqFG7i20FzwNdaTj3xz+aARRceSpArtfGgJnNNXubN\/SiT0HolGNwODw6HCX0DGo3RoJ0DjxpffZNUNgvu9a7wOwIg0TpUWNNHGDec60JLnwIDl9DkQmaEdLm6+z7FvGezvZTfhvOnaT6vATzB3IzJ6s6RIgPLPkK6vdK\/yFtpZ4qyYhM2i+TSB9BGoQQk1pqSr6E55BE+ILdIoqNj4v6SV+TByr3XyEXpdDsiHFpG3eFKaEOkxiq2lz4D1xN4bVRFQZkA0\/ondE0RRpdohNDR4rLQFFHQsab6Gns5vjb2yFn0JR8SFr8ttWiWTqFrucIH6fqB0QiNH\/vr3itLW2NJmiRrCDpgc6PUDNoAprvNwjuD+jxa7dgYQv5dhXN\/BdOerhCT0E60hoaeexCAfo89vHQnN0YQzVzHkjckzb9WMCr3N9+O8iBOWav\/uXxq2v7U9DyA5QzrXCZ4RfuIgrviGbwW64haBRon7m\/X3CYzGoorOYBG8EcFfTrG\/tKAEfspgbEX\/+0+HpD9J0xDr3dkBpuHfUSW48=","pkt_caplen":1067,"pkt_type":2048,"pkt_ipoffset":14}
+1742{"flow_id":86,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":1055,"pkt":"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","pkt_caplen":1055,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":86,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo7r1AAEAGUmbAqAUQwKhzS9F5AbtwBKSLypoBYlAQH+DihgAAtolxFcMt","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":58,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":58,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA015FAAEAGWwvAqAUQROn9hdF4AFAesUfDdjjyA4AQEAEc7wAAAQEIChoPatnPHk0l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":1470104402518,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp"}
+0560{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":177,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAACjAABAAEARAqHAqHcB\/\/\/\/\/94dFi4Aj\/bjAAFSEAABAAZMXgzqA2UABQAHMzAwTU5BVAAHAA82LjM1LjEgKHN0YWJsZSkACAAITWlrcm9UaWsACgAEf5YkAAALAAlBWFJKLVg2U0cADAAGUkI0NTBHAA4AAQEADwAQIAGwMAIUAQAAAAAAAAAAAQAQABNldGhlcjItbWFzdGVyLWxvY2Fs","pkt_caplen":177,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":1470104402518,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp"}
+0579{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":197,"pkt":"MzMAAAABTF4M6gNlht1gAAAAAI8RAf6AAAAAAAAATl4M\/\/7qA2X\/AgAAAAAAAAAAAAAAAAABFi4WLgCPm0oAAVIRAAEABkxeDOoDZQAFAAczMDBNTkFUAAcADzYuMzUuMSAoc3RhYmxlKQAIAAhNaWtyb1RpawAKAAR\/liQAAAsACUFYUkotWDZTRwAMAAZSQjQ1MEcADgABAQAPABAgAbAwAhQBAAAAAAAAAAABABAAE2V0aGVyMi1tYXN0ZXItbG9jYWw=","pkt_caplen":197,"pkt_type":34525,"pkt_ipoffset":14}
+0973{"flow_id":82,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":491,"pkt":"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","pkt_caplen":491,"pkt_type":2048,"pkt_ipoffset":14}
+1006{"flow_id":83,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":519,"pkt":"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","pkt_caplen":519,"pkt_type":34525,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":1470104402624,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp"}
+0431{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":89,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQADwkcU6wAjpJ6zfgAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":1470104402624,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":1470104402624,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":69,"pkt":"AQBeAAD8PKn0WgOECABFAAA3H1kAAAER9MzAqAPs4AAA\/PJ1FOsAI4uZs34AAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1470104402624,"flow_last_seen":1470104402624,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0555{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAACl1ocAAAERLO7AqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":89,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":89,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQADwkcU6wAjpJ6zfgAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0402{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104402,"pkt_len":69,"pkt":"AQBeAAD8PKn0WgOECABFAAA3H1wAAAER9MnAqAPs4AAA\/PJ1FOsAI4uZs34AAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRcAAAQRv1zAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0961{"flow_id":82,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":482,"pkt":"AQBef\/\/66LH8q\/uyCABFAAHUCfYAAAQR9U\/AqAUx7\/\/\/+gdsB2wBwMqTTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXBucDpyb290ZGV2aWNlDQpOVFM6IHNzZHA6YWxpdmUNCkxvY2F0aW9uOiBodHRwOi8vMTkyLjE2OC41LjQ5OjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTI6OnVwbnA6cm9vdGRldmljZQ0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT05MDANClNlcnZlcjogTWljcm9zb2Z0LVdpbmRvd3MvMTAuMCBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOiBkMDdiNDM1ZDI5OWI0MTc4NGNhM2QyYWUyYjk1OTk0OA0KDQo=","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0994{"flow_id":83,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":510,"pkt":"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","pkt_caplen":510,"pkt_type":34525,"pkt_ipoffset":14}
+0781{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNH4fAgEGAEL4Gb0AAAAAwKgFLMCoBSzAqHcBAAAAAEjSJGMxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfjIAAAERhU7AqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1470104403134,"flow_last_seen":1470104403134,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp"}
+0402{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":68,"pkt":"AQBeAAD8SNIkYzEACABFAAA2Ow0AAAER19nAqAUs4AAA\/OVOFOsAIo78hQUAAAABAAAAAAAACGphc29uLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1470104403134,"flow_last_seen":1470104403134,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+1068{"flow_id":82,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":562,"pkt":"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","pkt_caplen":562,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":83,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0402{"flow_id":91,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":68,"pkt":"AQBeAAD8SNIkYzEACABFAAA2Ow8AAAER19fAqAUs4AAA\/OVOFOsAIo78hQUAAAABAAAAAAAACGphc29uLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMRUAAAER0lvAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxIAAAERyGvAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+1048{"flow_id":82,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":548,"pkt":"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","pkt_caplen":548,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":83,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":576,"pkt":"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","pkt_caplen":576,"pkt_type":34525,"pkt_ipoffset":14}
+1045{"flow_id":82,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":546,"pkt":"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","pkt_caplen":546,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":83,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":574,"pkt":"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","pkt_caplen":574,"pkt_type":34525,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNJZXAgEGAHs0dBEAAIAAwKgFJMCoBSTAqHcBAAAAAAAmWsJjVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQEKgioX8MMe8wtdP8AAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104403,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClDVwAAAER9hnAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1470104404055,"flow_last_seen":1470104404055,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0444{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104404,"pkt_len":98,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsfbcLBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgAAAAYABAAXABg=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1470104404055,"flow_last_seen":1470104404055,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","category":"Network"}}
+1030{"flow_id":82,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104404,"pkt_len":534,"pkt":"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","pkt_caplen":534,"pkt_type":2048,"pkt_ipoffset":14}
+1067{"flow_id":83,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104404,"pkt_len":562,"pkt":"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","pkt_caplen":562,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104404,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH3kAAIARlenAqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH30AAIARleXAqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0974{"flow_id":82,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":491,"pkt":"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","pkt_caplen":491,"pkt_type":2048,"pkt_ipoffset":14}
+1007{"flow_id":83,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":519,"pkt":"MzMAAAAM6LH8q\/uyht1gAAAAAdERBP6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAAAMB2wHbAHR82ROT1RJRlkgKiBIVFRQLzEuMQ0KSG9zdDogW0ZGMDI6OkNdOjE5MDANCk5UOiB1dWlkOjkzMTkzOTVhLTRkMDMtNDc1MC1iYjFiLTQ2NjM5MzNhYjgxMg0KTlRTOiBzc2RwOmFsaXZlDQpMb2NhdGlvbjogaHR0cDovL1tmZTgwOjo5YmQ6ODFkZDoyZmRjOjU3NTBdOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINCkNhY2hlLUNvbnRyb2w6IG1heC1hZ2U9OTAwDQpTZXJ2ZXI6IE1pY3Jvc29mdC1XaW5kb3dzLzEwLjAgVVBuUC8xLjAgVVBuUC1EZXZpY2UtSG9zdC8xLjANCk9QVDoiaHR0cDovL3NjaGVtYXMudXBucC5vcmcvdXBucC8xLzAvIjsgbnM9MDENCjAxLU5MUzogZDA3YjQzNWQyOTliNDE3ODRjYTNkMmFlMmI5NTk5NDgNCg0K","pkt_caplen":519,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":74,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClUIAAAAERsvXAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":1470104405794,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp"}
+0543{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":163,"pkt":"\/\/\/\/\/\/\/\/TF4MVkdPCABFAACVAABAAEARAq7AqHcC\/\/\/\/\/6sKFi4AgSnvAAHqAgABAAZMXgxWR08ABQAJSVB2NlJvdXRlAAcADzYuMzUuNCAoc3RhYmxlKQAIAAhNaWtyb1RpawAKAAQGBzYAAAsACVZTMUwtUTE4UgAMAAZSQjQ1MEcADgABAQAPABAgAbAwAhQBAAAAAAAAAAABABAAA0xBTg==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":63,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH4UAAIARld3AqAPswKj\/\/wCJAIkAOkhKiloBEAABAAAAAAAAIEZERVBFT0ZGRkRFT0VGRkVGSEVQRkNFTEZEQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRgAAAQRv1vAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0961{"flow_id":82,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":482,"pkt":"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","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0995{"flow_id":83,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104405,"pkt_len":510,"pkt":"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","pkt_caplen":510,"pkt_type":34525,"pkt_ipoffset":14}
+1069{"flow_id":82,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":562,"pkt":"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","pkt_caplen":562,"pkt_type":2048,"pkt_ipoffset":14}
+1104{"flow_id":83,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0551{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMTgAAAER0jjAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxkAAAERyGTAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":82,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":548,"pkt":"AQBef\/\/66LH8q\/uyCABFAAIWCf4AAAQR9QXAqAUx7\/\/\/+gdsB2wCAmnTTk9USUZZICogSFRUUC8xLjENCkhvc3Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpOVDogdXJuOnNjaGVtYXMtdXBucC1vcmc6c2VydmljZTpDb25uZWN0aW9uTWFuYWdlcjoxDQpOVFM6IHNzZHA6YWxpdmUNCkxvY2F0aW9uOiBodHRwOi8vMTkyLjE2OC41LjQ5OjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTINClVTTjogdXVpZDo5MzE5Mzk1YS00ZDAzLTQ3NTAtYmIxYi00NjYzOTMzYWI4MTI6OnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6Q29ubmVjdGlvbk1hbmFnZXI6MQ0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT05MDANClNlcnZlcjogTWljcm9zb2Z0LVdpbmRvd3MvMTAuMCBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOiBkMDdiNDM1ZDI5OWI0MTc4NGNhM2QyYWUyYjk1OTk0OA0KDQo=","pkt_caplen":548,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":83,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":576,"pkt":"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","pkt_caplen":576,"pkt_type":34525,"pkt_ipoffset":14}
+1046{"flow_id":82,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":546,"pkt":"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","pkt_caplen":546,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":83,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":574,"pkt":"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","pkt_caplen":574,"pkt_type":34525,"pkt_ipoffset":14}
+0783{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNOV2AgEGAF9T9vkAAAAAwKgFL8CoBS\/AqHcBAAAAAMw9gh7u4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":1470104406717,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp"}
+0427{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":86,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD0soU6wAgjSs9jgAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":1470104406717,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":1470104406717,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp"}
+0398{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":66,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LR4AAAER5cfAqAUv4AAA\/NLKFOsAIEGyPY4AAAABAAAAAAAABlJPX1gxQwAA\/wAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1470104406717,"flow_last_seen":1470104406717,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0444{"flow_id":92,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104406,"pkt_len":98,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsfJ0LBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgEaAAYABAAXABg=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":94,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104407,"pkt_len":86,"pkt":"MzMAAQADzD2CHu7jht1gAAAAACARAf6AAAAAAAAA7fUkCsjAgxL\/AgAAAAAAAAAAAAAAAQAD0soU6wAgjSs9jgAAAAEAAAAAAAAGUk9fWDFDAAD\/AAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0398{"flow_id":95,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104407,"pkt_len":66,"pkt":"AQBeAAD8zD2CHu7jCABFAAA0LSAAAAER5cXAqAUv4AAA\/NLKFOsAIEGyPY4AAAABAAAAAAAABlJPX1gxQwAA\/wAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104407,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0WZNAAEAG2QnAqAUQROn9hdFtAFBAFGHVDj7nf4AREAGvkQAAAQEIChoPf3zPHNz0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":1470104408049,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp"}
+0437{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":92,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQADyPsU6wAmMfpTdAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":1470104408049,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":1470104408049,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp"}
+0408{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":72,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KyAAAAER6Y\/AqANf4AAA\/Mj7FOsAJrP2U3QAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1470104408049,"flow_last_seen":1470104408049,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0552{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEcAAAER2QPAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":86,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":107,"pkt":"ABxCjnAxABAj4ACgCABFAABdfPpAAEAGw\/TAqHNLwKgFEAG70XnKmgFicASki1AYAEaDwAAAFQMDADD9UAWmHPzDcyWHTMkbr+aws3s9GbGe3pjlFHCdq+YYY0\/jfjLm4gDbsSHRJ8BdNNs=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":86,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo31dAAEAGYczAqAUQwKhzS9F5AbtwBKSLypoBl1AQH\/7iMwAAwKgFEAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":92,"pkt":"MzMAAQAD\/PiuMpcsht1gAAAAACYRAf6AAAAAAAAA6Y+64hn3aw\/\/AgAAAAAAAAAAAAAAAQADyPsU6wAmMfpTdAAAAAEAAAAAAAAM5bCP5L2b5bCI5qmfAAD\/AAE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0407{"flow_id":97,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":72,"pkt":"AQBeAAD8\/PiuMpcsCABFAAA6KyIAAAER6Y3AqANf4AAA\/Mj7FOsAJrP2U3QAAAABAAAAAAAADOWwj+S9m+WwiOapnwAA\/wAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":74,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClIwIAAAER4HPAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/wKC7c+tHCABFAAFZOwBAAEARwM3AqH0e\/\/\/\/\/\/YA9gABRUfM\/\/+TXaAAwKC7c+tHwKh9HgAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+tHQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDI1AAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqH0e\/\/8AAFBvcnQgMTAAIAGwMAIUAQDCoLv\/\/nPrR0A=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104408,"pkt_len":391,"pkt":"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","pkt_caplen":391,"pkt_type":34525,"pkt_ipoffset":14}
+0552{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMT8AAAER0jHAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxoAAAERyGPAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":1470104409586,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp"}
+0427{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":86,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD0rIU6wAgVxmmDQAAAAEAAAAAAAAGaXNhdGFwAAABAAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":1470104409586,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":1470104409586,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp"}
+0398{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":66,"pkt":"AQBeAAD8PKn0WgOECABFAAA0H6gAAAER9IDAqAPs4AAA\/NrrFOsAIGYJpg0AAAABAAAAAAAABmlzYXRhcAAAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1470104409586,"flow_last_seen":1470104409586,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0427{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":86,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACARAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD0rIU6wAgVxmmDQAAAAEAAAAAAAAGaXNhdGFwAAABAAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0399{"flow_id":99,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":66,"pkt":"AQBeAAD8PKn0WgOECABFAAA0H6kAAAER9H\/AqAPs4AAA\/NrrFOsAIGYJpg0AAAABAAAAAAAABmlzYXRhcAAAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQLsAAAQRv7vAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":63,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104409,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH6wAAIARlbbAqAPswKj\/\/wCJAIkAOqdcilsBEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1470104410885,"flow_last_seen":1470104410885,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp"}
+2368{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":100,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":329,"pkt":"ABxCjnAxTF4M6gNlCABFAAE7DK9AADMGERZ36+tUwKgFEAG70J5BKvxL5fLLP1AYABuy+gAAjZPukZZc5XVgQ9kkDb42wAG2R4wZPZK09D+mhXOPeysHqbaxc2ukLB7O\/ZQd+BiMnHFH7zgcREAoK8LsJtF9H0HTuFW4zAQpKNlDl6pGtEpiOY1HdxQ1Bv0HkLtvfY7Kkq4QCv1lSYlKLAPMR+Oc9r2t96JVS9ceghm\/Wm9DKfghBx740ADnGdTcU2OF\/8x6UPEOuW6wwYjs3Pb+yZn6sRfXdwloMkU3kuWbA\/HnEcEyg9N63JYWRugH0gCb7wJDNCrha78dJpq+nOGbkegYKzSRi8MebnxJxxwLRQs3jpRKSRVmH0ihWT6Ua9H97Rj8GCDKcrs8+ASvsIB+r3MFWznlQzQS834owopgMgpZRwgoXAU=","pkt_caplen":329,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":100,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":60,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoSVVAAEAGyILAqAUQd+vrVNCeAbvl8ss\/QSr9XlAQHmimXgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":100,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":100,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":248,"pkt":"ABxCjnAxTF4M6gNlCABFAADqDLFAADMGEWV36+tUwKgFEAG70J5BKwMS5fLLP1AYABuHLgAA07hVuMwEKSjZQ5eqRrRKYjmNR3cUNQb9B5C7b32OypKuEAr9ZUmJSiwDzEfjnPa9rfeiVUvXHoIZv1pvQyn4IQce+NAA5xnU3FNjhf\/MelDxDrlusMGI7Nz2\/smZ+rEX13cJaDJFN5LlmwPx5xHBMoPTetyWFkboB9IAm+8CQzQq4Wu\/HSaavpzhm5HoGCs0kYvDHm58ScccC0ULN46USkkVZh9IoVk+lGvR\/e0YuitBUMasD0pyfvgp\/ePSgdJ+YGc=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":100,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":60,"pkt":"TF4M6gNlYMVHBbyMCABFAAAoi+RAAEAGhfPAqAUQd+vrVNCeAbvl8ss\/QSsD1FAQHjSgHAAAVFRQLzEu","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":100,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":100,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":245,"pkt":"ABxCjnAxTF4M6gNlCABFAADnDLNAADMGEWZ36+tUwKgFEAG70J5BKwmI5fLLP1AYABtxrAAAuMwEKSjZQ5eqRrRKYjmNR3cUNQb9B5C7b32OypKuEAr9ZUmJSiwDzEfjnPa9rfeiVUvXHoIZv1pvQyn4IQce+NAA5xnU3FNjhf\/MelDxDrlusMGI7Nz2\/smZ+rEX13cJaDJFN5LlmwPx5xHBMoPTetyWFkboB9IAm+8CQzQq4Wu\/HSaavpzhm5HoGCs0kYvDHm58ScccC0ULN46USkkVZh9IoVk+lGvR\/e0YuitBUMasD0pyfvgp\/ePSgdJ+YGc=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":100,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":60,"pkt":"TF4M6gNlYMVHBbyMCABFAAAovM9AAEAGVQjAqAUQd+vrVNCeAbvl8ss\/QSsKR1AQHgGZ3AAAAAPoAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":92,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":98,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAsew8LBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgKoAAYABAAXABg=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0422{"flow_id":100,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104410,"pkt_len":81,"pkt":"TF4M6gNlYMVHBbyMCABFAABDVa9AAEAGvA3AqAUQd+vrVNCeAbvl8ss\/QSsKR1AYHgHwqQAAgAIAAQAAABMAAAAhAAAAAIAAGtSOAwAAAP\/\/","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":100,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLRAADMGEiR36+tUwKgFEAG70J5BKwpH5fLLWlAQABu3pwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":100,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":114,"pkt":"TF4M6gNlYMVHBbyMCABFAABkkeNAAEAGf7jAqAUQd+vrVNCeAbvl8staQSsKR1AYHgFx8gAAAAAAIQEAADSSwYwkgMY9zM2PtcAtvoZJ2QGUh+Rew7DZ+k4l058gYoy1DfnXM2lKDG4gHxzchk60DoC2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":100,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLVAADMGEiN36+tUwKgFEAG70J5BKwpH5fLLllAQABu3awAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEgAAAER2QLAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1470104411327,"flow_last_seen":1470104411327,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp"}
+0404{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":68,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7YAAAERvzfAqAUl4AAA\/NTqFOsAIqEiFTIAAAABAAAAAAAACG5vdGVib29rAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1470104411327,"flow_last_seen":1470104411327,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0554{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFUAAAER7y\/AqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104411,"pkt_len":68,"pkt":"AQBeAAD8CJ4BzeuNCABFAAA2U7cAAAERvzbAqAUl4AAA\/NTqFOsAIqEiFTIAAAABAAAAAAAACG5vdGVib29rAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMUAAAAER0jDAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNP8ZAgEGAFHQRwUAAAAAwKgFMcCoBTHAqHcBAAAAAOix\/Kv7sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOxwAAAERyGHAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgMAAAQR9nHAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":1470104412556,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp"}
+0444{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":95,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD\/DgU6wAp0RQMEAAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE=","pkt_caplen":95,"pkt_type":34525,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":1470104412556,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":1470104412556,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp"}
+0413{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":75,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9eeQAAAERmPbAqAUx4AAA\/Pw4FOsAKTqNDBAAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1470104412556,"flow_last_seen":1470104412556,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0445{"flow_id":63,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH8MAAIARlZ\/AqAPswKj\/\/wCJAIkAOqdYil8BEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":95,"pkt":"MzMAAQAD6LH8q\/uyht1gAAAAACkRAf6AAAAAAAAACb2B3S\/cV1D\/AgAAAAAAAAAAAAAAAQAD\/DgU6wAp0RQMEAAAAAEAAAAAAAAPY2Flc2FyLXRoaW5rcGFkAAD\/AAE=","pkt_caplen":95,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104412,"pkt_len":75,"pkt":"AQBeAAD86LH8q\/uyCABFAAA9eeYAAAERmPTAqAUx4AAA\/Pw4FOsAKTqNDBAAAAABAAAAAAAAD2NhZXNhci10aGlua3BhZAAA\/wAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":63,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104413,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH8cAAIARlZvAqAPswKj\/\/wCJAIkAOqdYil8BEAABAAAAAAAAIEVKRkRFQkZFRUJGQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":1470104413679,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0783{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104413,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/SNIkYwreCABFAAFIfjcAAEARNZ3AqAUp\/\/\/\/\/wBEAEMBNOoXAQEGAAJEmkEAAIAAwKgFKQAAAAAAAAAAAAAAAEjSJGMK3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEIPQcBSNIkYwreDAhrZXZpbi1QQzwITVNGVCA1LjA3DQEPAwYsLi8fIXn5K\/z\/AAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0582{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":1470104413679,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,121,249,43,252"}}
+0783{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104413,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNOp7AgEGAAJEmkEAAIAAwKgFKQAAAADAqHcBAAAAAEjSJGMK3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBAQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104413,"pkt_len":342,"pkt":"TF4M6gNlYMVHBbyMCABFAAFIqYMAAEAR0r\/AqAUQwKh3AQBEAEMBNFvwAQEGABeXwM0AAAAAwKgFEAAAAAAAAAAAAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwkBAwYPd1\/8LC45AgXcPQcBYMVHBbyMMwQAdqcADAtNYWNCb29rLUFpcv8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104413,"pkt_len":342,"pkt":"ABxCjnAxTF4M6gNlCABFAAFIAAAAABARrEPAqHcBwKgFEABDAEQBNHbNAgEGABeXwM0AAAAAwKgFEMCoBRDAqHcBAAAAAGDFRwW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEkAAAER2QHAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1470104414296,"flow_last_seen":1470104414296,"flow_tot_l4_data_len":1125,"flow_min_l4_data_len":1125,"flow_max_l4_data_len":1125,"flow_avg_l4_data_len":1125,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp"}
+1876{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1159,"pkt":"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","pkt_caplen":1159,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1470104414296,"flow_last_seen":1470104414296,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":78,"pkt":"ABAj4ACgYMVHBbyMCABFAABAzwZAAEAGcgXAqAUQwKhzS9F6Abs0INrqAAAAALAC\/\/+nvgAAAgQFtAEDAwUBAQgKGg+ZQgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1334{"flow_id":105,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":759,"pkt":"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","pkt_caplen":759,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":106,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70XokV4DmNCDa64ASFtDXBQAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":105,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0wvZAAFgGI+QfDVckwKgFEAG70UwEnaIw\/FJxM4AQAQMsTQAAAQEICl\/vEucaD5lC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":105,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":135,"pkt":"ABxCjnAxTF4M6gNlCABFAAB5wvdAAFgGI54fDVckwKgFEAG70UwEnaIw\/FJxM4AYAQNa5QAAAQEICl\/vEucaD5lCFwMDAEDUAFWdFI6vKI3lWfiJsnqtDPHN1dSTIJS61LiuouCW4a1RtVfjlIDetpOkFbYtb3PaKj\/ddLgQEpMmdmbPawF9","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":106,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAohwxAAEAGuhfAqAUQwKhzS9F6Abs0INrrJFeA51AQIAAOqAAAIEVKRkRF","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":105,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0CgdAAEAG9NPAqAUQHw1XJNFMAbv8UnPoBJ2idYAQD\/0aVAAAAQEIChoPmUdf7xLn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":106,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":271,"pkt":"ABAj4ACgYMVHBbyMCABFAAEBACxAAEAGQB\/AqAUQwKhzS9F6Abs0INrrJFeA51AYIAB90wAAFgMBANQBAADQAwNXoANfjIqHDy9QXUEag4gt5xMipN2TtjnqDApBJHZnuSBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA9AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":106,"flow_packet_id":4,"flow_first_seen":1470104414296,"flow_last_seen":1470104414302,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0390{"flow_id":106,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBANAAEAGPSHAqHNLwKgFEAG70XokV4DnNCDbxFAQADYtmQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0605{"flow_id":106,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":215,"pkt":"ABxCjnAxABAj4ACgCABFAADJBARAAEAGPH\/AqHNLwKgFEAG70XokV4DnNCDbxFAYADaQHAAAFgMDAFECAABNAwP\/SkCYRaSQV0S20m\/rHGnUOyjdt0oR0LdUuhsR9UivBCBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQLfH4HL\/jK5VPe6tMGNhzqQ2T7h4g2WtI6lJyHpPbfwvnM0Bz8GDvaRpOikykLL9aarYlnM2DgJkMroupoJDVZo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":106,"flow_packet_id":6,"flow_first_seen":1470104414296,"flow_last_seen":1470104414305,"flow_tot_l4_data_len":534,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"799135475da362592a4be9199d258726","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0391{"flow_id":106,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAonnxAAEAGoqfAqAUQwKhzS9F6Abs0INvEJFeBiFAQH\/oNNAAAVFRQLzEu","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":106,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAukWVAAEAGr7jAqAUQwKhzS9F6Abs0INvEJFeBiFAYIAD1GwAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":106,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":123,"pkt":"ABAj4ACgYMVHBbyMCABFAABtTURAAEAG85rAqAUQwKhzS9F6Abs0INvKJFeBiFAYIAA2uAAAFgMDAECbKkLC7CRaXPZNslPbrgwXbyswQI3WFobPWFZwufy3sn\/6rVOKJKb8qWZlEZF9KXP0GhMAIWWDzfqvPxgRanAO","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":106,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBAVAAEAGPR\/AqHNLwKgFEAG70XokV4GINCDcD1AQADYsrQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":100,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":218,"pkt":"TF4M6gNlYMVHBbyMCABFAADMNWBAAEAG29PAqAUQd+vrVNCeAbvl8suWQSsKR1AYHgELKgAAgAIAAQAAAJwAAAAjAAAAAIAAojjr5ukXJ+snFmTqlxnpFySmp2bmpeXrp6eW6IGyoD1QhS1IbbGqsaOqkRsQlZeXqxq5piUmpybl52cDmcn5uUDh9KL8UqAqI7fUquTE3ILUIiBTrTi\/tCg5NaSyINU2xNPX1cfTz5XU8sHYyARaPkgglw\/5ySWpJbrFJUWpwGAbLRgGe8HA7O5KVrkAAAAA\/\/8=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":105,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0wvhAAFgGI+IfDVckwKgFEAG70UwEnaJ1\/FJz6IAQAQwpHAAAAQEICl\/vExUaD5lC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1736{"flow_id":106,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1051,"pkt":"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","pkt_caplen":1051,"pkt_type":2048,"pkt_ipoffset":14}
+1177{"flow_id":106,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":639,"pkt":"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","pkt_caplen":639,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":106,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo1GZAAEAGbL3AqAUQwKhzS9F6Abs0IN\/0JFeD0VAQH+0GyAAAAAfQAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1470104414395,"flow_last_seen":1470104414395,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":89,"pkt":"TF4M6gNlYMVHBbyMCABFAABL64oAAP8RYP7AqAUQqF8BAfeMADUAN6RcbYwBAAABAAAAAAAABmRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwAAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1470104414395,"flow_last_seen":1470104414395,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"dl-obs.official.line.naver.jp","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0701{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":289,"pkt":"ABxCjnAxTF4M6gNlCABFAAET0UQAAPgRgXyoXwEBwKgFEAA194wA\/yfZbYyBgAABAAYAAAAABmRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwAAABAAHADAAFAAEAAUxDAC0GZGwtb2JzCG9mZmljaWFsBGxpbmUFbmF2ZXICanAJZWRnZXN1aXRlA25ldADAOwAFAAEAAACwADUKY2FjLWRsLW9icwhvZmZpY2lhbARsaW5lBW5hdmVyAmpwCWxpbmUtemVybwZha2FkbnPAY8B0AAUAAQAAAQAAEgVhMTg2NwJnMgZha2FtYWnAY8C1AAEAAQAAAAUABMtFUUnAtQABAAEAAAAFAATLRVFCwLUAAQABAAAABQAEPdw+2g==","pkt_caplen":289,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":1470104414395,"flow_last_seen":1470104414402,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":55,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"dl-obs.official.line.naver.jp","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.69.81.73"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1470104414404,"flow_last_seen":1470104414404,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":78,"pkt":"TF4M6gNlYMVHBbyMCABFAABA+kNAAEAGXi3AqAUQy0VRSdF7AFCoMQrOAAAAALAC\/\/8cMAAAAgQFtAEDAwUBAQgKGg+ZqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":100,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAoDLZAADMGEiJ36+tUwKgFEAG70J5BKwpH5fLMOlAQAB62xAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1470104414404,"flow_last_seen":1470104414404,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":78,"pkt":"TF4M6gNlYMVHBbyMCABFAABAQJ1AAEAGF9TAqAUQy0VRSdF8AFD2CJDQAAAAALAC\/\/9IVAAAAgQFtAEDAwUBAQgKGg+ZrAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":108,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADsGXXXLRVFJwKgFEABQ0Xu\/8FK8qDEKz6AScSAwjAAAAgQFtAQCCAobhF1GGg+ZqwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":108,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0pGZAAEAGtBbAqAUQy0VRSdF7AFCoMQrPv\/BSvYAQEBXAXgAAAQEIChoPma4bhF1G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":109,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":74,"pkt":"ABxCjnAxTF4M6gNlCABFAAA8AABAADsGXXXLRVFJwKgFEABQ0Xzxz9ee9giQ0aAScSCl7QAAAgQFtAQCCAobhF1HGg+ZrAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":109,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0fmZAAEAG2hbAqAUQy0VRSdF8AFD2CJDR8c\/Xn4AQEBU1wQAAAQEIChoPma4bhF1H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_id":109,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":334,"pkt":"TF4M6gNlYMVHBbyMCABFAAFAl1xAAEAGwBTAqAUQy0VRSdF8AFD2CJDR8c\/Xn4AYEBWl1AAAAQEIChoPma8bhF1HR0VUIC9yL3RhbGsvbS80Njk3NzE2OTcxNTAwL3ByZXZpZXcgSFRUUC8xLjENCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IGRsLW9icy5vZmZpY2lhbC5saW5lLm5hdmVyLmpwDQpVc2VyLUFnZW50OiBERVNLVE9QOk1BQzoxMC4xMC41LVlPU0VNSVRFKDQuNy4yKQ0KWC1MaW5lLUFwcGxpY2F0aW9uOiBERVNLVE9QTUFDCTQuNy4yCU1BQwkxMC4xMC41LVlPU0VNSVRFDQoNCg==","pkt_caplen":334,"pkt_type":2048,"pkt_ipoffset":14}
+0717{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":109,"flow_packet_id":4,"flow_first_seen":1470104414404,"flow_last_seen":1470104414408,"flow_tot_l4_data_len":416,"flow_min_l4_data_len":32,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"dl-obs.official.line.naver.jp","url":"dl-obs.official.line.naver.jp\/r\/talk\/m\/4697716971500\/preview","code":0,"content_type":"","user_agent":"DESKTOP:MAC:10.10.5-YOSEMITE(4.7.2)"}}
+0761{"flow_id":108,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":334,"pkt":"TF4M6gNlYMVHBbyMCABFAAFATvVAAEAGCHzAqAUQy0VRSdF7AFCoMQrPv\/BSvYAYEBUpZwAAAQEIChoPma8bhF1GR0VUIC9yL3RhbGsvbS80Njk3NzE2OTU0Njg4L3ByZXZpZXcgSFRUUC8xLjENCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDANCkhvc3Q6IGRsLW9icy5vZmZpY2lhbC5saW5lLm5hdmVyLmpwDQpVc2VyLUFnZW50OiBERVNLVE9QOk1BQzoxMC4xMC41LVlPU0VNSVRFKDQuNy4yKQ0KWC1MaW5lLUFwcGxpY2F0aW9uOiBERVNLVE9QTUFDCTQuNy4yCU1BQwkxMC4xMC41LVlPU0VNSVRFDQoNCg==","pkt_caplen":334,"pkt_type":2048,"pkt_ipoffset":14}
+0717{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":108,"flow_packet_id":4,"flow_first_seen":1470104414404,"flow_last_seen":1470104414408,"flow_tot_l4_data_len":416,"flow_min_l4_data_len":32,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"dl-obs.official.line.naver.jp","url":"dl-obs.official.line.naver.jp\/r\/talk\/m\/4697716954688\/preview","code":0,"content_type":"","user_agent":"DESKTOP:MAC:10.10.5-YOSEMITE(4.7.2)"}}
+0398{"flow_id":109,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0itRAADsG0qjLRVFJwKgFEABQ0Xzxz9ef9giR3YAQA6tBGgAAAQEIChuEXUsaD5mv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":108,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0D\/ZAADsGTYfLRVFJwKgFEABQ0Xu\/8FK9qDEL24AQA6vLtgAAAQEIChuEXUsaD5mv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":109,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":109,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":108,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":108,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":109,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":109,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":108,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":108,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcD\/pAADsGR9vLRVFJwKgFEABQ0Xu\/8GO1qDEL24AQA6so3gAAAQEIChuEXUsaD5mvltjPzpxcr2GaRFRUmvV0iIbABJ5UGa5jhIDZLMMgAcaPilJwTfQ7ZwDnaueal3I03XkpVQcMSUwpwwyT0oKXCySlIwWC8W5V66lkW4hWPgWy23KqhljunRMgSbnbgazwvNfz+6\/fz\/A5KNbByQG07\/KvbDcnAG5oE0c0lyPGyxgDh1qvaUhi7Pkxuzjux55\/pmunG56LnyQ0m6Rg3EneAufemZpceWdvlhqYS7vVs3VciAYjyigaeRwep+PHltQRA91dLBCuojwjIwMD97PT70SO4nMEXZ\/dnMbk4Xcu2Scemfw5VKN36NLsOQvauhBCo+FB5LjYUzOA9nKCcB4336ZFA7Mt3t7AhwVkkOcHiOQpi82tJtOx7pgPXG1aL8pjL82xSRBNCUY41Ab9DyPwNJJ4lBZQG4MOhGxHzp8cAOm3yrN7QuY7K4PeK5WUBwVA48COPkD8a5s0HKNrk6IOnQUADgK9We3bEY92Bz6sBVD2wf3bcD1fP5Vzdqfo2tGngdK9gdKyD2vPyihHqCfzqjdqXR4Mi+iD86fZkFm1pB4ikil00hZWAJbGkSAAdMZrPbtC7bjOfgoH4CqG7uW43EvprNawxOPIrfgfEM1xGWJ7wclZ+P5VowEieF2Tuy+UIJG2f6gfOuaLMRgsxHQmvRsYpEkTAdGDKfMVrp3TXgmScrvydn3LZKkqDxH6\/XGoMTFc4A6jNFEqzQx3Efusoceh\/X0qX2OQPUdRXSmcDQuKsKgcatirAutI9ppCWV2Qq67iTgD\/ANu+1OrVmRJUMciB0bipG1RJWikcvKvdvmGbWOJUoQRVRIsmlgHDk7aRnJNbtx2HaMAYdULeR1D5GkLjsuQXsVsZVk1ozKTkZ4bY36f1rBwZQNlMJLT97G5BKqQAQOpB\/pTnZd3czMsfeFVB5KG1c60LPsmCDS7qGkG+M5VfIZ3+dGjsbWKQuluisTnOOHp0+FCh6HQbFRU4qK1EJ9pzywQxdwjM7yquQcY35+XLiONIWPaF7JBO00fiGrSRgEHJz73ADbj9a2n06fHjSCDv15fWlWmtEQZXKuGOkJkHrkD1\/Ghuioxb4Ql2fe3DiQya58DYhdJyBwAI4\/E70Hs+8vZL1klmWYKSrAYABzxG2\/StYG3ixKBpLHJwu+TjjjnuKHGtkz95EEU4JLBcDAO+\/wAc\/Giw0urozLbtC8lmZWl05m0lCqnT4ScA\/DFF7XnP7FeGhTKfI8F+v41piCCQqwjTKZCkAbZ44x1rAvpe+vJkiBJ7wRrjntgD45qZPYcF8gvZzmy7OuL1I1LkiOJSduI5\/H\/21fsiylMqXTsQqZIbG8hPE+m5rTFhF7FFayjUIyGODxbOT9SaYpqInLmirbso88\/r44oV0CyxoAfFIN+mDq\/+OPjRQMuT0GPv+VVeJZmAkBZBkacnB9evoapkLkXWZCzKgaQhiD3alsHoTwHxNZn9olc20DvBJHpcqCxXByPInpXQImCVUAKAMAbAcR+VI9vW0tz2esUMZeQyrgD41FbGqfyOQq8MMs7aYYnkYcQik4rfsexbKGN5r6bve7UMwAIQAjI3\/e\/W1bC3VlBbho3jSHOkaF2BIzwHDalRo8no5mH+z3aEgyyRw\/8A3H4\/LNNJ\/ZhyPHeKp6LHn8xW5Le28dulw8hETnCkIxz8MZ5VLXEKzCIyL3jEAKNzvnH4GnSM3ORi\/wDhhAN70\/8A6v61Rv7MnHhvAT0MWPzraF1bPcNbrOpmU4Kc8\/nV5riC20d8+kucKMEk\/L1Hzp0ha5HMy\/2dv0GY+6m8lbB+uKzri2ntmCzxPGTw1DjXctcQpKImkGs7YG+OHHpxHzoa3FpcSSWxkjkJcoY2GckDcYPoflSpFrJLyZX9mLoSW72bHxReNPNSd\/kfxrYC4yv\/AE7fDlWQ3ZsIufauyH0zw4Y=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":109,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA00q1AAEAGhc\/AqAUQy0VRSdF8AFD2CJHd8c\/i74AQD7spsgAAAQEIChoPmbcbhF1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":108,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0qe5AAEAGro7AqAUQy0VRSdF7AFCoMQvbv\/BeDYAQD7u0TgAAAQEIChoPmbcbhF1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":109,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA02ZpAAEAGfuLAqAUQy0VRSdF8AFD2CJHd8c\/uP4AQD2AevQAAAQEIChoPmbcbhF1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":108,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0A2tAAEAGVRLAqAUQy0VRSdF7AFCoMQvbv\/BpXYAQD2CpWQAAAQEIChoPmbcbhF1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":109,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1354{"flow_id":109,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":772,"pkt":"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","pkt_caplen":772,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":109,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0REFAAEAGFDzAqAUQy0VRSdF8AFD2CJHd8c\/2qYAQDx0WlQAAAQEIChoPmbgbhF1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":108,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1514,"pkt":"ABxCjnAxTF4M6gNlCABFAAXcD\/tAADsGR9rLRVFJwKgFEABQ0Xu\/8GldqDEL24AQA6so6QAAAQEIChuEXUsaD5mvMLZCsDyBPDO4+2K1Y50njSZAQCdLKwwVPQjqDTRnNJ7oGRk1PKl2u4k99gvqwFeW9gb3XDf6SDWmpLlmQztVhS4u4uWo\/Cre1Rjir\/IfeoebGvI0hjlQnGe0bU54Ry\/\/AAqovIf+\/wCQ+9AuZFuJ0KsVQRSRscjUNWNwPhWbzY\/ZaRpQyxTKWikSQA4JVgcGqQXdvdM6wyh2TBIwRWV2dHHYxOGZy8nv6CuMb44+tT2cVsBKRHJNJKxLOWUbcudLuw9lG1jNQRSB7Tm\/dsyf\/wAn2FVbtaVeNpp9WP2o7sPYth50V10uMjIPxByKD7HBhF0nCAgb9eNJ\/wB8N\/lR\/wAxqP72kJ8MUfzNHdgwUmuGPtbxsoDBjjf3yOWOXlUC2hGrwe9nO53ycn54pA9qTDjHEPn96j+9J\/8AphHwP3o7sA1v2PSlLKzlkUnSikjUc4PKsTsKAy3aMw2jBkb1PAfX6UTtC9murbuMKQ7ANoB4edRYyTW0bFDoLnJyu+Bw40nkjyUn8W\/Zv4qApNY5vbg8Z2+GBQ2vZwD+2k\/np95eEZm2qnRkDdzsfz+VXEYVkGNgDXOm7lwP2h2GBmQ172h2ictKpwR1PWl3Poq0dGQBIudgQfy\/rVWZGcqXUALjiOJ\/X1rmjcLkePP+la97QuMESHPHlRrfodmolv2f3V7i6iKzKQ\/u+DGQTt+thUpa2Mts0Md2rLqO4I2ypXh8SawkSIRPHiRgyhePCjQyCMEAO2WJ3NNzFqNO4tbC6ghtFvIz3DEjVhm2z4dsbfaryxWF3OtwtyupCD4dxkZHDp9qxo0jQt+zcqQVIO2xz96vAO4B0xk5AHiwMYz96WsVmsvsS9pvKt0\/fk94UwSuMY6dPjVbj2G6iit1vAvdNkhVG4z0GMbisoBlujcCPc\/u8QPP1qIUaBvAcAjABGw3z+dHcCzZnmtjepKLkpLjCrjIxz2z7x6npw2qkUvZ0N27h3eQuzaSeBPHbhnBx6VkuC8wkJQ4ByCmc8PsKkR6HSZJG8YZjg7ZLH7Uaws1Ibm1s5WbvJT3wA0sBxHMb7cfrtjhV27RtluCQjiVwNS7DV058axplMjqTjwncMM5HT61Ux5m7zxDcEgeWMfgKXcYrNfs2+s7O1jZ00GUFi6pyDad\/pWrLd28UQleZAjcDnOfSuWiUTwWNsHCCeN1LEZwBIW\/KiS24E08ivpJOSqgjVnfHH9fCnbith20bE3acM0sdvGmtZGA1ngRnBxSUV7IkdvoKguNRJOATqI3+VUlhFp2naRl9YaUafAVCjUDtknrS8LLILBGAw64Pp3jZrOSbdibZup2vatEXJcEbEaTSntpubxYyB3U2ABnOAR+P50mwgCjQxxgMV1DgM5P4Y9avbOi9owImojVxP66Yz55ocpOkwthBMyQwhWlUFA7GMHnnc7egoiyvzluxvvnV5eVLmds2qBxGHhXJbgNzx+VEMsw39rh334jfBA\/KooVjAk1Ap3kz6tX+IDgYBIIJHHYVCTOscah2QMgbIONy2N\/hSyXMntZiMqyABzlcYzoJqC0sqwd2oP7Nc5YDcswFJpvdIdjhuWXbvXbjkhtuWKvqSY91JIZFbiDvyPPyxS099Kw70Q6QgZWIYEAkf0+teAmTtBGkAVWyANQO4Xyo0O9h6iwSNIF7p5I9bHLRsQxxjbJz1rz2zknHaF8NwN8\/aloZA0FuWcqoaQlhvjGmpM0sgP7WRmwDtHnfln5CnHUhagpjuEaEd\/JOsj6ZFlJ0lcgbZFZ720iyMgt8gEgHXyz609kF41E0jhJF0KY9O2Rnl60nLIRPJ4v325+dU5SSE2UFvNvmBSOQ1D714W8g426n\/1D71Petn3qatQklvM7qzaCuCuSV47kf9PpvUqU26BMWEDc4B\/P\/WrpA2h8xIM6efrTV53UVksqaFI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1814{"flow_id":108,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1112,"pkt":"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","pkt_caplen":1112,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":108,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0RVFAAEAGEyzAqAUQy0VRSdF7AFCoMQvbv\/BzG4AQDxKf6AAAAQEIChoPmbgbhF1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2297{"flow_id":105,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+1079{"flow_id":105,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":566,"pkt":"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","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":105,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0vQZAAEAGQdTAqAUQHw1XJNFMAbv8UnPoBJ2p34AQD8QRxwAAAQEIChoPmfFf7xOZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":74,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClU+oAAAERr4vAqAUw7\/\/\/+sIlB2wAkY1JTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104414,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNEsLAgEGAENEXMkAAAAAwKgFLcCoBS3AqHcBAAAAAOCsy3Hh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104415,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOx4AAAERyF\/AqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104415,"pkt_len":179,"pkt":"AQBef\/\/6zD2CHu7jCABFAAClQL0AAAQRv7nAqAUv7\/\/\/+utrB2wAkWQETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104416,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/TF4M6gNlCABFAAFIAAAAABARcfzAqHcB\/\/\/\/\/wBDAEQBNFupAgEGAI6VUSoAAAAAwKgFCcCoBQnAqHcBAAAAAHDxofgq\/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqHcBMwQAAAA8AQT\/\/wAAAwTAqHcBBhCoXwEBCAgICKhfwAEICAQE\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":1470104416855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp"}
+0405{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104416,"pkt_len":69,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J2UAAAERi4vAqGUh4AAA\/PVmFOsAI\/xOWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":1470104416855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":1470104416855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp"}
+0405{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104416,"pkt_len":69,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3CxAAAAERB\/nAqAUJ4AAA\/PVmFOsAI1xnWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1470104416855,"flow_last_seen":1470104416855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0405{"flow_id":110,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104416,"pkt_len":69,"pkt":"AQBeAAD8uKxvwfbSCABFAAA3J2cAAAERi4nAqGUh4AAA\/PVmFOsAI\/xOWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104416,"pkt_len":69,"pkt":"AQBeAAD8cPGh+Cr9CABFAAA3CxIAAAERB\/fAqAUJ4AAA\/PVmFOsAI1xnWbQAAAABAAAAAAAACUpvYW5uYS1QQwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104417,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ2gAAAERfCDAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104417,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChCxcAAAER+InAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104417,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEoAAAER2QDAqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104417,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFcAAAER7y3AqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104418,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOx8AAAERyF7AqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104418,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgUAAAQR9m\/AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":92,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104418,"pkt_len":98,"pkt":"MzMAAQACvO57DLPeht1gAAAAACwRAf6AAAAAAAAAvu57\/\/4Ms97\/AgAAAAAAAAAAAAAAAQACAiICIwAseAoLBzLAAAEADgABAAEa5zhrJpdxkWmjAAgAAgWtAAYABAAXABg=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1470104419061,"flow_last_seen":1470104419061,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp"}
+0538{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":167,"pkt":"ABxCjnAxTF4M6gNlCABFAACZI1ZAAFgGw0IfDVcBwKgFEAG70UpuASLeX6ylxYAYAJ4ivgAAAQEICp0wiHcaDujhFwMDAGCI1MTiGjgHtvACFdJlLWU4Nw2FMu4PdWcz\/2qZKGCdERXjWW+\/VFKnsNQj6agVS5OakWCEMlC4HzCUNHzoAeDAfMWTlTRJFP0wq7r0D4aYTL9j7QTQTC0wsTFBdRQvfIs=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0qwZAAEAGU\/fAqAUQHw1XAdFKAbtfrKXFbgEjQ4AQD\/zVtQAAAQEIChoPq9GdMIh3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1964{"flow_id":112,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":1223,"pkt":"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","pkt_caplen":1223,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":112,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0I1dAAFgGw6YfDVcBwKgFEAG70UpuASNDX6yqSoAQAKfgKwAAAQEICp0wiKcaD6v7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0949{"flow_id":112,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":471,"pkt":"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","pkt_caplen":471,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":112,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0sW5AAEAGTY\/AqAUQHw1XAdFKAbtfrKpKbgEk2IAQD\/PNsQAAAQEIChoPrM+dMIls","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":112,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":151,"pkt":"ABxCjnAxTF4M6gNlCABFAACJI1lAAFgGw08fDVcBwKgFEAG70UpuASTYX6yqSoAYAKdAMwAAAQEICp0wiWwaD6v7FwMDAFBDyuXvoyI2haLjKmC0633hxaDIQQGoYHTHPhTSuFKmC0Fl2+vFzFCYkxIEx6znxHK\/Mzr9bwCL6aBUwxgPNo3Y70t47Ll2MzPaVeWl72DZkQ==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":112,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA06XJAAEAGFYvAqAUQHw1XAdFKAbtfrKpKbgElLYAQD\/3NUgAAAQEIChoPrM+dMIls","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":112,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":151,"pkt":"ABxCjnAxTF4M6gNlCABFAACJI1pAAFgGw04fDVcBwKgFEAG70UpuASTYX6yqSoAYAKdAJwAAAQEICp0wiXgaD6v7FwMDAFBDyuXvoyI2haLjKmC0633hxaDIQQGoYHTHPhTSuFKmC0Fl2+vFzFCYkxIEx6znxHK\/Mzr9bwCL6aBUwxgPNo3Y70t47Ll2MzPaVeWl72DZkQ==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":112,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104419,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0r1VAAEAGT6jAqAUQHw1XAdFKAbtfrKpKbgElLYAQEADNQgAAAQEIChoPrNCdMIl4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ2wAAAERfBzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChDUEAAAER9l\/AqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEsAAAER2P\/AqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFgAAAER7yzAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":106,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":107,"pkt":"ABxCjnAxABAj4ACgCABFAABdBAdAAEAGPOjAqHNLwKgFEAG70XokV4PRNCDf9FAYAEYuHAAAFQMDADDWsSdp8D1F8v6K\/yiku3mSJ30Pt4LDalLjUpv0bNJQ9mOQU0lINWhpv4glMt2mNy4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":106,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoBAhAAEAGPRzAqHNLwKgFEAG70XokV4QGNCDf9FARAEYmOQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1470104420438,"flow_last_seen":1470104420438,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp"}
+0428{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":87,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACERAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD7vQU6wAh24kTvAAAAAEAAAAAAAAHc29udXNhdgAAAQAB","pkt_caplen":87,"pkt_type":34525,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1470104420438,"flow_last_seen":1470104420438,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0428{"flow_id":113,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":87,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACERAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD7vQU6wAh24kTvAAAAAEAAAAAAAAHc29udXNhdgAAAQAB","pkt_caplen":87,"pkt_type":34525,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":1470104420541,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp"}
+0405{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":67,"pkt":"AQBeAAD8PKn0WgOECABFAAA1H\/gAAAER9C\/AqAPs4AAA\/OlSFOsAIfhUE7wAAAABAAAAAAAAB3NvbnVzYXYAAAEAAQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":1470104420541,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0434{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/rCILUFkxCABFAABEAABAAEARLlc7eNDa\/\/\/\/\/8PnB5sAMKByU3Uyb1ZTdDRBQUJIWlc1MGNtbGpaVjlCVUVOZlozVmxjM1FBYldVQQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104420,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/XNmY3fXzCABFAAFZAABAAEARbn7AqApu\/\/\/\/\/+xA9gABRTgx\/\/8AAKAAXNmY3fXzwKgKbgAAAgAnAUROUy0xMTAwLTA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQVMAAAAAAAAAAAAAVVqvihgAAABVWsE9WwAAAFVasDEuMDJiMTAAEXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNmY3fXzM0ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRsaW5rLURERjVGMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqApu\/\/8AAExBTjEAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":63,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104421,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH\/0AAIARlWXAqAPswKj\/\/wCJAIkAOopRimMBEAABAAAAAAAAIEZERVBFT0ZGRkRFQkZHQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":53,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104421,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgYAAAQR9m7AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":391,"pkt":"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","pkt_caplen":391,"pkt_type":34525,"pkt_ipoffset":14}
+0445{"flow_id":63,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PKn0WgOECABFAABOH\/4AAIARlWTAqAPswKj\/\/wCJAIkAOopRimMBEAABAAAAAAAAIEZERVBFT0ZGRkRFQkZHQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":58,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA08IlAADUGTRNE6f2FwKgFEABQ0Xh2OPIDHrFHw4ARAB\/erwAAAQEICs8em0UaD2rZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":58,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA01A1AAEAGXo\/AqAUQROn9hdF4AFAesUfDdjjyBIAQEAGA1AAAAQEIChoPuNLPHptF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/4MqUa5ZECABFEAFIAAAAAIAROZYAAAAA\/\/\/\/\/wBEAEMBNJruAQEGAD3Z62IAAAAAAAAAAAAAAAAAAAAAAAAAAODKlGuWRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBMgTAqAVDDBRzYW5qaS1MSUZFQk9PSy1MSDUzMTcRARwCAw8GdwwsLxp5Knn5\/Cr\/AAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUpxAAIAG5lrAqHMIarkjbsG9AFA9WFL+c+sff1AQAQAHLQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUpxAAIAG5lrAqHMIarkjbsG9AFA9WFL+c+sff1AQAQAHLQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104422,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0Ow5AADYGR95quSNuwKhzCABQwb1z6x9\/PVhS\/4AQAO2wegAAAQEFCj1YUv49WFL\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChDVwAAAER9kTAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":175,"pkt":"AQBef\/\/6\/PiuMpcsCABFAAChLEwAAAER2P7AqANf7\/\/\/+uhMB2wAjbUvTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":1470104423202,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0449{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":98,"pkt":"MzMAAQAC9FyJieYHht1gD8\/5ACwRAf6AAAAAAAAA9lyJ\/\/6J5gf\/AgAAAAAAAAAAAAAAAQACAiICIwAsGIELuXYqAAEADgABAAEeo3uS9FyJieYHAAYABAAXABgACAAC\/\/8=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":1470104423202,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","category":"Network"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1470104423246,"flow_last_seen":1470104423246,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":78,"pkt":"ABAj4ACgYMVHBbyMCABFAABAVdFAAEAG6zrAqAUQwKhzS9F9AbtloPklAAAAALAC\/\/81IwAAAgQFtAEDAwUBAQgKGg+8HwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":116,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":66,"pkt":"ABxCjnAxABAj4ACgCABFAAA0AABAAEAGQRjAqHNLwKgFEAG70X2C0DtLZaD5JoASFtBuaQAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":116,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoVNRAAEAG7E\/AqAUQwKhzS9F9AbtloPkmgtA7TFAQIACmCwAAUC8xLjEN","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_id":116,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":267,"pkt":"ABAj4ACgYMVHBbyMCABFAAD9MJBAAEAGD7\/AqAUQwKhzS9F9AbtloPkmgtA7TFAYIADmPAAAFgMBANABAADMAwNXoANoBxB0UxaEmGMMRA4z3rCwUCfHq4lItmIHvO2HwSBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAA5AAAAEwARAAAOMTkyLjE2OC4xMTUuNzUACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwID","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":116,"flow_packet_id":4,"flow_first_seen":1470104423246,"flow_last_seen":1470104423248,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0390{"flow_id":116,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAosy5AAEAGjfXAqHNLwKgFEAG70X2C0DtMZaD5+1AQADbFAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_id":116,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":215,"pkt":"ABxCjnAxABAj4ACgCABFAADJsy9AAEAGjVPAqHNLwKgFEAG70X2C0DtMZaD5+1AYADZbuQAAFgMDAFECAABNAwNP+v5MrhPT7gCV6+7l8OEnW6u9CIMrhxz\/CnbSwmfX6yBj+Q0TSc5VhLmmiAAqPOtufQBM8Qziz0QZmZNFeVk8eAAvAAAF\/wEAAQAUAwMAAQEWAwMAQP7fioxuoIuCjn4HHOe6A8jxR2QStU3BBo0dV8n25rs7AjOsZc+II3taGzY\/k\/vNUSTTPW02U9hA0sRTvf0Kf6U=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":116,"flow_packet_id":6,"flow_first_seen":1470104423246,"flow_last_seen":1470104423251,"flow_tot_l4_data_len":530,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"192.168.115.75","ja3":"618ee2509ef52bf0b8216e1564eea909","ja3s":"573a9f3f80037fb40d481e2054def5bb","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0391{"flow_id":116,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAojapAAEAGs3nAqAUQwKhzS9F9AbtloPn7gtA77VAQH\/qkmwAAVFRQLzEu","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":116,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAuEO1AAEAGMDHAqAUQwKhzS9F9AbtloPn7gtA77VAYIACMgwAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":116,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":123,"pkt":"ABAj4ACgYMVHBbyMCABFAABteDRAAEAGyKrAqAUQwKhzS9F9AbtloPoBgtA77VAYIACEEwAAFgMDAEAMRT2\/rw1RVhtHYa6MIHkNyub7aRPCH9JZHXrMtUzyIcUA3wBPgDvlbAIfiMcwhF0YjOq7KE9AIjRBZ8QVLcaR","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":116,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":60,"pkt":"ABxCjnAxABAj4ACgCABFAAAoszBAAEAGjfPAqHNLwKgFEAG70X2C0DvtZaD6RlAQADbEFAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1762{"flow_id":116,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":1067,"pkt":"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","pkt_caplen":1067,"pkt_type":2048,"pkt_ipoffset":14}
+1746{"flow_id":116,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":1055,"pkt":"ABxCjnAxABAj4ACgCABFAAQRszFAAEAGignAqHNLwKgFEAG70X2C0DvtZaD+O1AYAEYirQAAFwMDAXBKoFLP2Xx2xOqlPE0\/KiccVrtPdSlvdZR\/i4oEGdHMijcu2OscQe2FwItlFid0LRJmABhjV7gWF9CUm+zizpL83asY4z7ur9zPfsGH8pDbRvXoR1qrLVhJpr8MvNtrvTunwzXHPwpSZ4jk6eioc6ifukPZvdBomQj7RwgaZAYqNnXyhHJWn\/i3HKfUfv+V+V13KExkue+QpevInCIANzKKRGu1rNxm4bUG0bCzc8FNUiLouWutphRFnvrHy\/zB7lPTKjnksk8iuiTC6bB4OLy8WhsawfxpT5jjd+W\/qxAQM6KqvZ1hTHELDVaFGjTiijw2UE\/Y538A4ZB2BSwci3C5q2v0YE\/e6IdpYhJQkffdFdZU2btMTARZ7Gk4KPmE7D1ycysoxrikE\/\/u2j+2G3m7gavgmiNfriTBjjYA+4S1sYTBg\/4cM7WLBT2\/jD\/pXL6l1k\/bzdvPWQpOv3vL9HvQ4gouxfq2nQ47f9owQZmYHxcDAwAwKB6+LjD1cJJgFUMDC94jmy\/CPl5yEo0yKvWuKRdR6kk2wqGmULLyU84yx1sog3c2FwMDAdA1LOWEmcINIcDl5tk2nzOExf25GaE5sWYHaCv\/0kJPrGrW6JkCf6bI3bE\/MVCD1apYYhvGtpgPeMwUgyK7r7fvAzx1ezMV\/RX1xL1MoYDqnZpyF7t3Xo3qKHNSPlTOUed2met5ly1nXm4NXp2KYqzJ9xmNnd68qL1bNXVU8yd4alUcxtyqv4zHjUe8M6tZe1qKY7iRcZociDRrdTIxjgpZNWOe+1oS33ZRpx2WJYaFokAhtxKLkcDjBp+pVUWrLC5kYCT20otqiDSWcWke27LGwG1PKtviepxVtVOriekx\/DGj43NxPlZW18Dh+S0tMI8uJW+EID+z60dqDrY+gqe+XGy8Yhlm42aid7XZkLEopQzTstcoMtpFuG14foGw2vG9abfpesCnuTmdRlptmTpDKaMiEffUHZKGy2Y3BNJfFQMhUq11ZRdvAcXe4FZ53jhs2qxK1rgpjvaIJWqzCJsg2pl+ttg1NrMJjnlItxf\/SCDoONW0kJ54EKYgwF3o9rZKikwwCOYB0zaq\/S3lvWnQfUV4s4DeVQ3m50fMOKXd8aGTZVQrvKftJ0fBaXGFlI0Gx3CkepdwagXleCCFqUdfckbkFQKe98MMwMqEBa+ElBcDAwAwHZ\/izpxbkt51w6MsUAZPlr\/tPjCusPFjgZ0NEsDIO285KyFY5qGHuCo15LDVcadaFwMDADBn4wPJ0pFQJkOjsKo+ocFv98aFyTXSMbwC5CX29qxcSeXiUlcl39yXoelMT2Jz2\/4=","pkt_caplen":1055,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":116,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104423,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAo1A5AAEAGbRXAqAUQwKhzS9F9AbtloP47gtA\/1lAQH+CcjAAAhgDQREBA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104424,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUqFAAIAGl4vAqHMI3kn+p8G+AFDrM0IThwePWlAQAQGYeAAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104424,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUqFAAIAGl4vAqHMI3kn+p8G+AFDrM0IThwePWlAQAQGYeAAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104424,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA04LRAADEGWG3eSf6nwKhzCABQwb6HB49a6zNCFIAQADYInQAAAQEFCuszQhPrM0IU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":53,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104424,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCgcAAAQR9m3AqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1470104424738,"flow_last_seen":1470104424738,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0445{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104424,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6MAAIARUUPAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1470104424738,"flow_last_seen":1470104424738,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0445{"flow_id":117,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104425,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6QAAIARUULAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104425,"pkt_len":359,"pkt":"\/\/\/\/\/\/\/\/wKC7c+snCABFAAFZOwBAAEARM+XAqAoH\/\/\/\/\/\/YA9gABRUMe\/\/+fLaAAwKC7c+snwKgKBwAAAgAnAURHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABTd2l0Y2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMuMTAuMDEzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKC7c+snQjEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRUDBSMUQ5MDAwMDIzAAAAAAAAAAAAAAAAAAAAAAAAAERHUy0xMjEwLTEwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAoH\/\/8AAFBvcnQgOAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104425,"pkt_len":66,"pkt":"TF4M6gNlYMVHBbyMCABFAAA0xkFAAEAGbFvAqAUQROn9hdFtAFBAFGHVDj7nf4AREAFpCQAAAQEIChoPxgTPHNz0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104426,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3kAAAERfA\/AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104426,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChD4sAAAER9BXAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":117,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104426,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AAwpjO\/4CABFAABOZ6UAAIARUUHAqABowKj\/\/wCJAIkAOgIy8PkBEAABAAAAAAAAIEZERURDT0VCRkNGQ0VCRU9FREVCRkNDT0VQRkNFSEFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104426,"pkt_len":175,"pkt":"AQBef\/\/6CJ4BzeuNCABFAAChFFoAAAER7yrAqAUl7\/\/\/+t\/tB2wAjbvITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":1470104426973,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp"}
+0431{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104426,"pkt_len":90,"pkt":"TF4M6gNlYMVHBbyMCABFwABMyLEAAEARvv3AqAUQEf0afQB7AHsAOHvnIwIG7AAAJiAAAPbJEf0afdtKfo89Puc520qBhKZDx2jbSoGEtCSHfttKgew\/d58s","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":1470104426973,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Apple","category":"System"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1470104426992,"flow_last_seen":1470104426992,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp"}
+0432{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104426,"pkt_len":88,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQAD3zwU6wAi91hE5AAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1470104426992,"flow_last_seen":1470104426992,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0432{"flow_id":119,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104427,"pkt_len":88,"pkt":"MzMAAQADSNIkYwreht1gAAAAACIRAf6AAAAAAAAARWjvvECxE0b\/AgAAAAAAAAAAAAAAAQAD3zwU6wAi91hE5AAAAAEAAAAAAAAIa2V2aW4tUEMAAP8AAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":1470104427094,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp"}
+0404{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104427,"pkt_len":68,"pkt":"AQBeAAD8SNIkYwreCABFAAA2fkcAAAERlKLAqAUp4AAA\/NkpFOsAIt1BROQAAAABAAAAAAAACGtldmluLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":1470104427094,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0557{"flow_id":53,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104427,"pkt_len":179,"pkt":"AQBef\/\/66LH8q\/uyCABFAAClCggAAAQR9mzAqAUx7\/\/\/+sn4B2wAkYV1TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104429,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3oAAAERfA7AqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104429,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChD5sAAAER9AXAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":116,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104429,"pkt_len":107,"pkt":"ABxCjnAxABAj4ACgCABFAABdszJAAEAGjbzAqHNLwKgFEAG70X2C0D\/WZaD+O1AYAEajgAAAFQMDADBcSAXugCoro2zCjOeXZ2EE3tT+o4OMg1\/gr3e4vsgBKrQQmbrjLiM53+dxUjTxjpc=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":116,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104429,"pkt_len":60,"pkt":"ABAj4ACgYMVHBbyMCABFAAAoqeFAAEAGl0LAqAUQwKhzS9F9AbtloP47gtBAC1AQH\/6cOQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1470104429964,"flow_last_seen":1470104429964,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp"}
+0404{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104429,"pkt_len":68,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MWEAAAER4XjAqAU54AAA\/PusFOsAIt9AFnIAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1470104429964,"flow_last_seen":1470104429964,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":1470104430064,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp"}
+0436{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":91,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQAD3zcU6wAl4fcCawAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ==","pkt_caplen":91,"pkt_type":34525,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":1470104430064,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0555{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQRwAAAQRv1fAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1470104430065,"flow_last_seen":1470104430065,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp"}
+0408{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":71,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8AAAAERxx3AqAUy4AAA\/N83FOsAJVssAmsAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1470104430065,"flow_last_seen":1470104430065,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0404{"flow_id":121,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":68,"pkt":"AQBeAAD8GF4PUugBCABFAAA2MWMAAAER4XbAqAU54AAA\/PusFOsAIt9AFnIAAAABAAAAAAAACFVzaGVyLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChMWQAAAER0gzAqAU57\/\/\/+toBB2wAjcGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChfk0AAAERhTPAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":123,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":71,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8EAAAERxxzAqAUy4AAA\/N83FOsAJVssAmsAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":1470104430884,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp"}
+0436{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":91,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQADwmYU6wAlV+upSAAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ==","pkt_caplen":91,"pkt_type":34525,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":1470104430884,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":1470104430884,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp"}
+0408{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104430,"pkt_len":71,"pkt":"AQBeAAD8uKxv2MGbCABFAAA5S8UAAAERxxjAqAUy4AAA\/MJmFOsAJdEfqUgAAAABAAAAAAAAC2NoYXJtaW5nLVBDAAD\/AAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":1470104430884,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0436{"flow_id":124,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104431,"pkt_len":91,"pkt":"MzMAAQADuKxv2MGbht1gAAAAACURAf6AAAAAAAAA4DQHvtj5YZf\/AgAAAAAAAAAAAAAAAQADwmYU6wAlV+upSAAAAAEAAAAAAAALY2hhcm1pbmctUEMAAP8AAQ==","pkt_caplen":91,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":175,"pkt":"AQBef\/\/6uKxvwfbSCABFAAChJ3wAAAERfAzAqGUh7\/\/\/+ti9B2wAjWL8TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":175,"pkt":"AQBef\/\/6cPGh+Cr9CABFAAChEcYAAAER8drAqAUJ7\/\/\/+ti8B2wAjcMVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":1470104432318,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp"}
+0404{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":68,"pkt":"AQBeAAD8SNIkYzEACABFAAA2OyoAAAER17zAqAUs4AAA\/Oa2FOsAIkMsz20AAAABAAAAAAAACGphc29uLVBDAAD\/AAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":1470104432318,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0552{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYzEACABFAAChOysAAAERyFLAqAUs7\/\/\/+si9B2wAjdLxTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":1470104432630,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp"}
+0433{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":89,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD5GQU6wAjSCvt1AAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":1470104432630,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":1470104432630,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp"}
+0406{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":69,"pkt":"AQBeAAD8PKn0WgOECABFAAA3IDQAAAER8\/HAqAPs4AAA\/P\/YFOsAI0Pg7dQAAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1470104432630,"flow_last_seen":1470104432630,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0433{"flow_id":127,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":89,"pkt":"MzMAAQADPKn0WgOEht1gAAAAACMRAf6AAAAAAAAAXZJiqOveExn\/AgAAAAAAAAAAAAAAAQAD5GQU6wAjSCvt1AAAAAEAAAAAAAAJV0FOR1MtTFRXAAD\/AAE=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0406{"flow_id":128,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104432,"pkt_len":69,"pkt":"AQBeAAD8PKn0WgOECABFAAA3IDUAAAER8\/DAqAPs4AAA\/P\/YFOsAI0Pg7dQAAAABAAAAAAAACVdBTkdTLUxUVwAA\/wAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104433,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUr5AAIAG8sXAqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104433,"pkt_len":55,"pkt":"TF4M6gNlABxCjnAxCABFAAApUr5AAIAG8sXAqHMIy0K2V8G8AbsrwEGmNGHnvFAQAQOsiQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104433,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClQR0AAAQRv1bAqAUy7\/\/\/+vyiB2wAkVLKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104433,"pkt_len":66,"pkt":"ABxCjnAxTF4M6gNlCABFAAA0yhkAAD0G\/l\/LQrZXwKhzCAG7wbw0Yee8K8BBp4AQAO2bugAAAQEFCivAQaYrwEGn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104433,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChflAAAAERhTDAqAUp7\/\/\/+tgQB2wAjcOhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","pkt_oversize":false,"pkt_ts":1470104433,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/AAK2Qbs6CABFAABEAABAAEARd0fAqAK6\/\/\/\/\/4AAB5sAMBr8aWNSVlNvVTlBQUJYWldKRFlXeHNBSFZ0Ukc5c2IzSlRhWFJCYldVQQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":43,"flow_packet_id":9,"flow_first_seen":1470104381217,"flow_last_seen":1470104426277,"flow_tot_l4_data_len":1269,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"239.255.255.250","src_port":57325,"dst_port":1900,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":77,"flow_packet_id":2,"flow_first_seen":1470104399652,"flow_last_seen":1470104400059,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"224.0.0.252","src_port":59797,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":1470104414395,"flow_last_seen":1470104414402,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":55,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"168.95.1.1","src_port":63372,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":6,"flow_packet_id":8,"flow_first_seen":1470104376017,"flow_last_seen":1470104433238,"flow_tot_l4_data_len":1128,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":55312,"dst_port":1900,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":124,"flow_packet_id":2,"flow_first_seen":1470104430884,"flow_last_seen":1470104431294,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":49766,"dst_port":5355,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":108,"flow_packet_id":14,"flow_first_seen":1470104414404,"flow_last_seen":1470104414420,"flow_tot_l4_data_len":9022,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":644,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53627,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":109,"flow_packet_id":14,"flow_first_seen":1470104414404,"flow_last_seen":1470104414419,"flow_tot_l4_data_len":8682,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":620,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"203.69.81.73","src_port":53628,"dst_port":80,"l4_proto":"tcp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":13,"flow_packet_id":3,"flow_first_seen":1470104377734,"flow_last_seen":1470104377753,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":46,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":51024,"dst_port":53,"l4_proto":"udp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":76,"flow_packet_id":2,"flow_first_seen":1470104398932,"flow_last_seen":1470104433649,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":76,"flow_packet_id":2,"flow_first_seen":1470104398932,"flow_last_seen":1470104433649,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.186","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":20,"flow_packet_id":12,"flow_first_seen":1470104378045,"flow_last_seen":1470104423102,"flow_tot_l4_data_len":1692,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"239.255.255.250","src_port":59468,"dst_port":1900,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":119,"flow_packet_id":2,"flow_first_seen":1470104426992,"flow_last_seen":1470104427094,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":57148,"dst_port":5355,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1470104376301,"flow_last_seen":1470104422690,"flow_tot_l4_data_len":1232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":62,"flow_packet_id":2,"flow_first_seen":1470104391254,"flow_last_seen":1470104391362,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":51714,"dst_port":5355,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":39,"flow_packet_id":25,"flow_first_seen":1470104380773,"flow_last_seen":1470104381859,"flow_tot_l4_data_len":4094,"flow_min_l4_data_len":20,"flow_max_l4_data_len":465,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.205.151.234","src_port":49608,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":50,"flow_packet_id":12,"flow_first_seen":1470104382242,"flow_last_seen":1470104432114,"flow_tot_l4_data_len":1692,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"239.255.255.250","src_port":55484,"dst_port":1900,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":49,"flow_packet_id":10,"flow_first_seen":1470104382241,"flow_last_seen":1470104432114,"flow_tot_l4_data_len":1410,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"239.255.255.250","src_port":55485,"dst_port":1900,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":2,"flow_packet_id":13,"flow_first_seen":1470104373232,"flow_last_seen":1470104432419,"flow_tot_l4_data_len":1833,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"239.255.255.250","src_port":51389,"dst_port":1900,"l4_proto":"udp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":112,"flow_packet_id":10,"flow_first_seen":1470104419061,"flow_last_seen":1470104419317,"flow_tot_l4_data_len":2153,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1189,"flow_avg_l4_data_len":215,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":112,"flow_packet_id":10,"flow_first_seen":1470104419061,"flow_last_seen":1470104419317,"flow_tot_l4_data_len":2153,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1189,"flow_avg_l4_data_len":215,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.87.1","dst_ip":"192.168.5.16","src_port":443,"dst_port":53578,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":105,"flow_packet_id":9,"flow_first_seen":1470104414296,"flow_last_seen":1470104414478,"flow_tot_l4_data_len":4041,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":449,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":105,"flow_packet_id":9,"flow_first_seen":1470104414296,"flow_last_seen":1470104414478,"flow_tot_l4_data_len":4041,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":449,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"31.13.87.36","src_port":53580,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1470104392072,"flow_last_seen":1470104422079,"flow_tot_l4_data_len":674,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1470104392072,"flow_last_seen":1470104422079,"flow_tot_l4_data_len":674,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b020:6::c2a0:bbff:fe73:eb57","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0525{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1470104378657,"flow_last_seen":1470104408662,"flow_tot_l4_data_len":674,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1470104378657,"flow_last_seen":1470104408662,"flow_tot_l4_data_len":674,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b030:214:100:c2a0:bbff:fe73:eb47","dst_ip":"ff02::1","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1470104430884,"flow_last_seen":1470104430884,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":49766,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":90,"flow_packet_id":2,"flow_first_seen":1470104402624,"flow_last_seen":1470104402724,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":62069,"dst_port":5355,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1470104413679,"flow_last_seen":1470104413679,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1470104397091,"flow_last_seen":1470104397091,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":3,"flow_packet_id":14,"flow_first_seen":1470104373741,"flow_last_seen":1470104416751,"flow_tot_l4_data_len":4312,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":95,"flow_packet_id":2,"flow_first_seen":1470104406717,"flow_last_seen":1470104407128,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":53962,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":99,"flow_packet_id":2,"flow_first_seen":1470104409586,"flow_last_seen":1470104409685,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":56043,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":94,"flow_packet_id":2,"flow_first_seen":1470104406717,"flow_last_seen":1470104407128,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":53962,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":1470104408049,"flow_last_seen":1470104408457,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":51451,"dst_port":5355,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":1470104405794,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1470104405794,"flow_last_seen":1470104405794,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.2","dst_ip":"255.255.255.255","src_port":43786,"dst_port":5678,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1470104401187,"flow_last_seen":1470104401187,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":50030,"dst_port":5355,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1470104383810,"flow_last_seen":1470104413817,"flow_tot_l4_data_len":1232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.119.1","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":53,"flow_packet_id":9,"flow_first_seen":1470104382448,"flow_last_seen":1470104427503,"flow_tot_l4_data_len":1305,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":51704,"dst_port":1900,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":1,"flow_packet_id":14,"flow_first_seen":1470104373232,"flow_last_seen":1470104430168,"flow_tot_l4_data_len":1974,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":55809,"dst_port":1900,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":102,"flow_packet_id":2,"flow_first_seen":1470104412556,"flow_last_seen":1470104412962,"flow_tot_l4_data_len":82,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":64568,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":121,"flow_packet_id":2,"flow_first_seen":1470104429964,"flow_last_seen":1470104430065,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":64428,"dst_port":5355,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":40,"flow_packet_id":33,"flow_first_seen":1470104380890,"flow_last_seen":1470104382084,"flow_tot_l4_data_len":10575,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":320,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"42.120.51.152","src_port":49609,"dst_port":8080,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":113,"flow_packet_id":2,"flow_first_seen":1470104420438,"flow_last_seen":1470104420540,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":61172,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":74,"flow_packet_id":7,"flow_first_seen":1470104397807,"flow_last_seen":1470104414604,"flow_tot_l4_data_len":1015,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":49701,"dst_port":1900,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1470104393610,"flow_last_seen":1470104393610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59461,"dst_port":137,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":117,"flow_packet_id":3,"flow_first_seen":1470104424738,"flow_last_seen":1470104426276,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.104","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":68,"flow_packet_id":2,"flow_first_seen":1470104393610,"flow_last_seen":1470104394635,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":63,"flow_packet_id":13,"flow_first_seen":1470104391564,"flow_last_seen":1470104422179,"flow_tot_l4_data_len":754,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1470104378021,"flow_last_seen":1470104379520,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"192.168.255.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":69,"flow_packet_id":3,"flow_first_seen":1470104393610,"flow_last_seen":1470104393611,"flow_tot_l4_data_len":546,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1470104379579,"flow_last_seen":1470104379579,"flow_tot_l4_data_len":481,"flow_min_l4_data_len":229,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.67","dst_ip":"192.168.255.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1470104381217,"flow_last_seen":1470104381626,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":56366,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":103,"flow_packet_id":2,"flow_first_seen":1470104412556,"flow_last_seen":1470104412962,"flow_tot_l4_data_len":82,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":64568,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":37,"flow_packet_id":13,"flow_first_seen":1470104380188,"flow_last_seen":1470104380928,"flow_tot_l4_data_len":1009,"flow_min_l4_data_len":20,"flow_max_l4_data_len":412,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.244.135.170","src_port":49607,"dst_port":9099,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1470104381935,"flow_last_seen":1470104382038,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1470104381935,"flow_last_seen":1470104382036,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":58456,"dst_port":5355,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1470104399959,"flow_last_seen":1470104399959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":62756,"dst_port":5355,"l4_proto":"udp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":41,"flow_packet_id":5,"flow_first_seen":1470104380909,"flow_last_seen":1470104420950,"flow_tot_l4_data_len":1625,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":41,"flow_packet_id":5,"flow_first_seen":1470104380909,"flow_last_seen":1470104420950,"flow_tot_l4_data_len":1625,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.110","dst_ip":"255.255.255.255","src_port":60480,"dst_port":62976,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":1470104396889,"flow_last_seen":1470104396987,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":54470,"dst_port":5355,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1470104398832,"flow_last_seen":1470104398832,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.64","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":101,"flow_packet_id":2,"flow_first_seen":1470104411327,"flow_last_seen":1470104411735,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.37","dst_ip":"224.0.0.252","src_port":54506,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":11,"flow_packet_id":8,"flow_first_seen":1470104377634,"flow_last_seen":1470104415729,"flow_tot_l4_data_len":1160,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"239.255.255.250","src_port":60267,"dst_port":1900,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1470104392380,"flow_last_seen":1470104392380,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.45","dst_ip":"192.168.255.255","src_port":59789,"dst_port":137,"l4_proto":"udp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1470104375419,"flow_last_seen":1470104398314,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1470104375419,"flow_last_seen":1470104398314,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53605,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":81,"flow_packet_id":2,"flow_first_seen":1470104399959,"flow_last_seen":1470104400366,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":62756,"dst_port":5355,"l4_proto":"udp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":57,"flow_packet_id":3,"flow_first_seen":1470104389597,"flow_last_seen":1470104425786,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":57,"flow_packet_id":3,"flow_first_seen":1470104389597,"flow_last_seen":1470104425786,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53613,"dst_port":80,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1470104385827,"flow_last_seen":1470104420541,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1470104385827,"flow_last_seen":1470104420541,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.218","dst_ip":"255.255.255.255","src_port":50151,"dst_port":1947,"l4_proto":"udp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":58,"flow_packet_id":12,"flow_first_seen":1470104390443,"flow_last_seen":1470104422398,"flow_tot_l4_data_len":1574,"flow_min_l4_data_len":32,"flow_max_l4_data_len":356,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"68.233.253.133","src_port":53624,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":91,"flow_packet_id":2,"flow_first_seen":1470104403134,"flow_last_seen":1470104403234,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":58702,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1470104391254,"flow_last_seen":1470104391361,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":63659,"dst_port":5355,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":111,"flow_packet_id":2,"flow_first_seen":1470104416855,"flow_last_seen":1470104416959,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.9","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":110,"flow_packet_id":2,"flow_first_seen":1470104416855,"flow_last_seen":1470104416958,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.101.33","dst_ip":"224.0.0.252","src_port":62822,"dst_port":5355,"l4_proto":"udp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":60,"flow_packet_id":3,"flow_first_seen":1470104391199,"flow_last_seen":1470104391208,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"Web"},"http": {}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":60,"flow_packet_id":3,"flow_first_seen":1470104391199,"flow_last_seen":1470104391208,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"64.233.189.128","src_port":49581,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1470104378045,"flow_last_seen":1470104378454,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":58779,"dst_port":5355,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":14,"flow_packet_id":14,"flow_first_seen":1470104377754,"flow_last_seen":1470104422913,"flow_tot_l4_data_len":2376,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1238,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49597,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":35,"flow_packet_id":13,"flow_first_seen":1470104379903,"flow_last_seen":1470104379989,"flow_tot_l4_data_len":2961,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":227,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49605,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":36,"flow_packet_id":50,"flow_first_seen":1470104379916,"flow_last_seen":1470104380338,"flow_tot_l4_data_len":34041,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":680,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.185.35.110","src_port":49606,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":24,"flow_packet_id":14,"flow_first_seen":1470104378906,"flow_last_seen":1470104424115,"flow_tot_l4_data_len":1904,"flow_min_l4_data_len":20,"flow_max_l4_data_len":754,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.73.254.167","src_port":49598,"dst_port":80,"l4_proto":"tcp"}
+0509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1470104378005,"flow_last_seen":1470104378007,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1470104378005,"flow_last_seen":1470104378007,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53622,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":44,"flow_packet_id":19,"flow_first_seen":1470104381237,"flow_last_seen":1470104402191,"flow_tot_l4_data_len":2936,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1033,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53623,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":86,"flow_packet_id":19,"flow_first_seen":1470104402238,"flow_last_seen":1470104408999,"flow_tot_l4_data_len":2932,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1033,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53625,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":106,"flow_packet_id":19,"flow_first_seen":1470104414296,"flow_last_seen":1470104423193,"flow_tot_l4_data_len":2504,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1017,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53626,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":116,"flow_packet_id":17,"flow_first_seen":1470104423246,"flow_last_seen":1470104429322,"flow_tot_l4_data_len":2892,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1033,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"192.168.115.75","src_port":53629,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":5,"flow_packet_id":9,"flow_first_seen":1470104376017,"flow_last_seen":1470104433033,"flow_tot_l4_data_len":1305,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":64674,"dst_port":1900,"l4_proto":"udp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":1470104392072,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1470104392072,"flow_last_seen":1470104392072,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.140.140","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":1470104395656,"flow_last_seen":1470104425762,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":1470104395656,"flow_last_seen":1470104425762,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.7","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1470104378557,"flow_last_seen":1470104408662,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1470104378557,"flow_last_seen":1470104408662,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.125.30","dst_ip":"255.255.255.255","src_port":62976,"dst_port":62976,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1470104379169,"flow_last_seen":1470104379271,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":54888,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1470104430064,"flow_last_seen":1470104430064,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e034:7be:d8f9:6197","dst_ip":"ff02::1:3","src_port":57143,"dst_port":5355,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":79,"flow_packet_id":2,"flow_first_seen":1470104399958,"flow_last_seen":1470104400059,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"224.0.0.252","src_port":65150,"dst_port":5355,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":1470104402518,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":1470104402518,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.119.1","dst_ip":"255.255.255.255","src_port":56861,"dst_port":5678,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1470104423202,"flow_last_seen":1470104423202,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::f65c:89ff:fe89:e607","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":71,"flow_packet_id":2,"flow_first_seen":1470104396888,"flow_last_seen":1470104396987,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4568:efbc:40b1:1346","dst_ip":"ff02::1:3","src_port":50194,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1470104432318,"flow_last_seen":1470104432318,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59062,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":89,"flow_packet_id":2,"flow_first_seen":1470104402624,"flow_last_seen":1470104402724,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":49735,"dst_port":5355,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":38,"flow_packet_id":3,"flow_first_seen":1470104380737,"flow_last_seen":1470104380772,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":41,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":54420,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":123,"flow_packet_id":2,"flow_first_seen":1470104430065,"flow_last_seen":1470104430476,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"224.0.0.252","src_port":57143,"dst_port":5355,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":1470104399854,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1470104399854,"flow_last_seen":1470104399854,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.100","dst_ip":"255.255.255.255","src_port":50925,"dst_port":5678,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":98,"flow_packet_id":2,"flow_first_seen":1470104409586,"flow_last_seen":1470104409685,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":53938,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":26,"flow_packet_id":43,"flow_first_seen":1470104379117,"flow_last_seen":1470104424357,"flow_tot_l4_data_len":29723,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49599,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":27,"flow_packet_id":69,"flow_first_seen":1470104379117,"flow_last_seen":1470104424488,"flow_tot_l4_data_len":61077,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":885,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49600,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":28,"flow_packet_id":61,"flow_first_seen":1470104379118,"flow_last_seen":1470104424418,"flow_tot_l4_data_len":49597,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":813,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49601,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":29,"flow_packet_id":65,"flow_first_seen":1470104379118,"flow_last_seen":1470104424446,"flow_tot_l4_data_len":46773,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":719,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49602,"dst_port":80,"l4_proto":"tcp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1470104379066,"flow_last_seen":1470104379115,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":39,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":60724,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":30,"flow_packet_id":34,"flow_first_seen":1470104379118,"flow_last_seen":1470104424360,"flow_tot_l4_data_len":24418,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":718,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49603,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":31,"flow_packet_id":58,"flow_first_seen":1470104379119,"flow_last_seen":1470104424435,"flow_tot_l4_data_len":43599,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":751,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.187.35.246","src_port":49604,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":8,"flow_packet_id":5,"flow_first_seen":1470104376816,"flow_last_seen":1470104392380,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::406:55a8:6453:25dd","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1470104382448,"flow_last_seen":1470104382857,"flow_tot_l4_data_len":82,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::1:3","src_port":61548,"dst_port":5355,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":128,"flow_packet_id":2,"flow_first_seen":1470104432630,"flow_last_seen":1470104432728,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":65496,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1470104378045,"flow_last_seen":1470104378454,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":58779,"dst_port":5355,"l4_proto":"udp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":100,"flow_packet_id":23,"flow_first_seen":1470104410885,"flow_last_seen":1470104428908,"flow_tot_l4_data_len":6592,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":100,"flow_packet_id":23,"flow_first_seen":1470104410885,"flow_last_seen":1470104428908,"flow_tot_l4_data_len":6592,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"119.235.235.84","dst_ip":"192.168.5.16","src_port":443,"dst_port":53406,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":45,"flow_packet_id":14,"flow_first_seen":1470104381895,"flow_last_seen":1470104382125,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":20,"flow_max_l4_data_len":653,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.145","src_port":49612,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":48,"flow_packet_id":419,"flow_first_seen":1470104382053,"flow_last_seen":1470104433789,"flow_tot_l4_data_len":169439,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1044,"flow_avg_l4_data_len":404,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.131.48.144","src_port":49613,"dst_port":80,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":23,"flow_packet_id":3,"flow_first_seen":1470104378901,"flow_last_seen":1470104378905,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":42,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"168.95.1.1","src_port":52723,"dst_port":53,"l4_proto":"udp"}
+0509{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":1470104402518,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1470104402518,"flow_last_seen":1470104402518,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":143,"flow_max_l4_data_len":143,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:feea:365","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp"}
+0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":1470104390741,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1470104390741,"flow_last_seen":1470104390741,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e5e:cff:fe9a:ec54","dst_ip":"ff02::1","src_port":5678,"dst_port":5678,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1470104426973,"flow_last_seen":1470104426973,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.16","dst_ip":"17.253.26.125","src_port":123,"dst_port":123,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":15,"flow_packet_id":3,"flow_first_seen":1470104377901,"flow_last_seen":1470104378954,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":42,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"8.8.8.8","src_port":52723,"dst_port":53,"l4_proto":"udp"}
+0510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1470104388033,"flow_last_seen":1470104433040,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1470104388033,"flow_last_seen":1470104433040,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.87","src_port":49596,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1470104382448,"flow_last_seen":1470104382858,"flow_tot_l4_data_len":82,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"224.0.0.252","src_port":61548,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":92,"flow_packet_id":4,"flow_first_seen":1470104404055,"flow_last_seen":1470104418595,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::beee:7bff:fe0c:b3de","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1470104377634,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.47","dst_ip":"224.0.0.252","src_port":61603,"dst_port":5355,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1470104379169,"flow_last_seen":1470104379271,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::e98f:bae2:19f7:6b0f","dst_ip":"ff02::1:3","src_port":54888,"dst_port":5355,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1470104373025,"flow_last_seen":1470104373127,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.44","dst_ip":"224.0.0.252","src_port":59571,"dst_port":5355,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1470104377634,"flow_last_seen":1470104378045,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::edf5:240a:c8c0:8312","dst_ip":"ff02::1:3","src_port":61603,"dst_port":5355,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":97,"flow_packet_id":2,"flow_first_seen":1470104408049,"flow_last_seen":1470104408458,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.95","dst_ip":"224.0.0.252","src_port":51451,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":82,"flow_packet_id":16,"flow_first_seen":1470104400162,"flow_last_seen":1470104408559,"flow_tot_l4_data_len":7929,"flow_min_l4_data_len":448,"flow_max_l4_data_len":528,"flow_avg_l4_data_len":495,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.49","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1470104377720,"flow_last_seen":1470104377820,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"224.0.0.252","src_port":51458,"dst_port":5355,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":127,"flow_packet_id":2,"flow_first_seen":1470104432630,"flow_last_seen":1470104432728,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::5d92:62a8:ebde:1319","dst_ip":"ff02::1:3","src_port":58468,"dst_port":5355,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1470104427094,"flow_last_seen":1470104427094,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"224.0.0.252","src_port":55593,"dst_port":5355,"l4_proto":"udp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":1470104401904,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1470104401904,"flow_last_seen":1470104401904,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"59.120.208.212","dst_ip":"255.255.255.255","src_port":32768,"dst_port":1947,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1470104420541,"flow_last_seen":1470104420541,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.3.236","dst_ip":"224.0.0.252","src_port":59730,"dst_port":5355,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap","flow_id":83,"flow_packet_id":16,"flow_first_seen":1470104400162,"flow_last_seen":1470104408559,"flow_tot_l4_data_len":8057,"flow_min_l4_data_len":456,"flow_max_l4_data_len":536,"flow_avg_l4_data_len":503,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::9bd:81dd:2fdc:5750","dst_ip":"ff02::c","src_port":1900,"dst_port":1900,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/1kxun.pcap"}
diff --git a/tests/result/nDPId_443-chrome.pcap.txt b/tests/result/nDPId_443-chrome.pcap.txt
new file mode 100644
index 000000000..395a147db
--- /dev/null
+++ b/tests/result/nDPId_443-chrome.pcap.txt
@@ -0,0 +1,6 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-chrome.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-chrome.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581109434258,"flow_last_seen":1581109434258,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"178.62.197.130","dst_ip":"192.168.1.13","src_port":443,"dst_port":53059,"l4_proto":"tcp"}
+2353{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-chrome.pcap","pkt_oversize":false,"pkt_ts":1581109434,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUL9xAADQG19GyPsWCwKgBDQG7z0OMwKr+Oj0RjoAQAfVXrQAAAQEICiUvy0seKwePAbBkhQkGDSwXAwMFJB7ULkZYT314CXk9r8PlYJygP344H6B+ItT1QydBOUTT\/6D31GPVzKtOQjSVxhbT8njy8fnLCF03csGz4\/Y1RkgUVmI84ERVBP7zbdzqFVMxHmkRU4146\/GYpGt09JudxRaBFBE6RH99GaIPOIBgIxL+lVzyEaqTle8b2ooKlmYXANwIghY6MzW7vfR0m2NAd4\/mImO8\/LyUCeGK0r\/puyNRW7lwQQMAmHKJdbXl9VyEWyHoVGg2V7UztPOOS9FaOf7PI0qXcHmQjpNhC3tUdKXBoA5lr9L4gV9TtzI0jsGqvB9N6GFz+qcMvQNu9oMflyIYBhNXeC+wMS3iHkbmb6YjZ1BITgZEep9Fizk45i3xCMymSmOsda0ujEX4jtgvxVvAdOobavQSODmvW7nF0r5t9e88tMuzTz7+vTqoOaJn4Q5qSGioRtcVHnLq2LNPOuGgbZaLvf8nOa3F\/fTzsfVgOnrof2PK7x6zJRR4iLtFUyiyV0abVTIHELfIYnSCf71pFYSlMWF1kbosbMAxw+8gDHb28maLs7wPXvpNMwUQmC5zWPLwG8e+Pf\/3nur0wrn5EOul2L1tr2PBCGM7nQJnzz+Ftab4qAnCKKMUrufRAVhXA6Ue6CMSRLYliOxzGRgmHVxorbbpx87m7XMCx1xGrv\/+sMpgjOYFPN80vjeb9Ar4xkocVQgWuuKpaWdNDznMzFzG0+H1ekKy8mE\/Y4uj8aty0rTxx\/RK0gYF2CUtsmGNskEzCWUbq5MAqcp05SHkAJHGGJeLVJYaWPvGXbFa5QHn9poomy6DBa+Zu\/J+olJwYCoT+frN77wk+XmgZEGX8LeovmjP4s1R+UbEFUsUMksh6m15XB\/oDSc43HBC0ZN2fBl+EVSpfPjbG\/eOyIfLCt5fbBfnhNgvommX5LE+2Hk1er+ly1V3Bk3SksoPHjYC3atFWwOW8i0ksy3cnSr3r7urFNldk3MU3+jnEXfTimw+aCW1vRMowhmfm8PlgjcufRfy+KbXvWvcglQ5SIZzkHbMTgRIVTH0rnzAvQa5V3qwPK10Uoz7qDIouhn\/mb\/ZISHF6mBR\/IXvmgdDxCQjDF0pzdpHGlijQnscX9IYmuALydf\/N95pDI1Ksot3SwlV+ToeoAcOu03ffeX9ZWtpGReoSSLBreVK2S9eOKb7ts0O5zIIo7KsqQiv\/vBgScz8WXOWpxQ\/yJVR5ay52w6EYcainLIU7Xbc\/tjzrhulig3U\/8LJroIUx7FTN+1M\/XXQgxU1xPwXfZVd2BCyLjPf3LnCxXwnRvsKpAN+jMhuodhLSF7CgHqc20YiiLhRoKoX9HTNFjjp4NCVuyybqoR14grCEsHZOU2qhA+8BZe5VlL7unSunUXcr1PeN9gM5Jq4MVqPdpyzDhvJpSxU3Hx+L1u56H6J0VrRo\/R6fO225uB9ZADFU\/E9+rLvS3XjVihQI4Xj3oV8Yz2DHOUB7myCSIfri88nrYevcoAQbwAgIH3ZuvMVV+F7spgWZOgjijLQs9AFYfhIg77XK7GhiJW4kT1GNIqN\/59u+gIdPmDuGurVucPbruilLRCDIsr+53Us+irmCwo\/E2YPbk4a0f3NX0k+rNo92g1D9wTfG3QFRXLoBVDcr2q9BeW0PVJsavNUQM+jFbQkjfp93AvyPnmEBcWXIT002jYiClr1Y1\/emkCZ90t5YN1lLX5fUvWWgwvQ8NqFZ2zWMZciPkbKDA3g3Y+AskVzW3FFBLqR77\/aXs+9FwMDBSQUQnjU3ptBoEOyx5s5g6C1C+gxkfWLgzLDV66R77tBk395nAfOwKbaxf02lWN9Kl7ER9qk1HP5doNJPo83hbomHGy3aIU4qtqfnGI\/DWje6wuZoh6zDMTlo3NI6IL\/slMBsWm6kBIHkYOp","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-chrome.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581109434258,"flow_last_seen":1581109434258,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"178.62.197.130","dst_ip":"192.168.1.13","src_port":443,"dst_port":53059,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-chrome.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581109434258,"flow_last_seen":1581109434258,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"178.62.197.130","dst_ip":"192.168.1.13","src_port":443,"dst_port":53059,"l4_proto":"tcp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-chrome.pcap"}
diff --git a/tests/result/nDPId_443-curl.pcap.txt b/tests/result/nDPId_443-curl.pcap.txt
new file mode 100644
index 000000000..c50009cf6
--- /dev/null
+++ b/tests/result/nDPId_443-curl.pcap.txt
@@ -0,0 +1,22 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581113120474,"flow_last_seen":1581113120474,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAULAqAENsj7FgtjjAbvMd3aVAAAAALAC\/\/97wQAAAgQFtAEDAwUBAQgKHmJFtwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDUayPsWCwKgBDQG72OOPktF9zHd2lqAS\/oj9JgAAAgQFrAQCCAolaAqTHmJFtwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3aWj5LRfoAQECwaIgAAAQEICh5iRd0laAqT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1581113120474,"flow_last_seen":1581113120522,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0396{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0W75AADQGsY+yPsWCwKgBDQG72OOPktF+zHd4m4AQAfomFwAAAQEICiVoCsIeYkXm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1581113120474,"flow_last_seen":1581113120563,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2340{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0979{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1581113120474,"flow_last_seen":1581113120564,"flow_tot_l4_data_len":3641,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,http\/1.1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}}
+0580{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":197,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC3W8FAADQGsQmyPsWCwKgBDQG72OOPkty+zHd4m4AYAfoN\/QAAAQEICiVoCsUeYkXm66hTzubMWB08s3PkhsL9JqVuuKtC6Q0mFf6B4oBc2\/U2+ighQD73s0KYSsAN2q7FfukeSK4MeIkwGkFip7nL2Anu6BP4tpM5odv8A\/wsfYjJUcVxbpTPS64h+NrbHwJhGR\/RS8rkqGW5ZFY\/2ZG4woWm+3h\/FLx5bRoWAwMABA4AAAA=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3ibj5LcvoAQD9MM0gAAAQEICh5iRg8laArF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3ibj5LdQYAQD\/UMLQAAAQEICh5iRg8laArF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGANDAqAENsj7FgtjjAbvMd3ibj5LdQYAYEACPEgAAAQEICh5iRhklaArFFgMDAEYQAABCQQT+KIc7MBKpZ7zIa+m1bbHmjqY\/q1Qfkj30dm23ddmaXNBG8gN+KVoxD+RuEZqrG9ogTyWCLwq3vxQ0zT\/Fs1vIFAMDAAEBFgMDACgAAAAAAAAAAJM7zl3sL1ILhaC2FA+qKASskkfK8Gvrjq8JWcoozRaM","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnW8JAADQGsViyPsWCwKgBDQG72OOPkt1BzHd5GYAYAfoYRwAAAQEICiVoCvkeYkYZFAMDAAEBFgMDACis\/COuKf6QzAgAtIeqLtjlOZbPjNzAuR7xUwUh0WW7WqxG5LnSiJHU","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":123,"pkt":"KDc3AG3IEBMx8Tl2CABFAABtW8NAADQGsVGyPsWCwKgBDQG72OOPkt10zHd5GYAYAfp7mQAAAQEICiVoCvkeYkYZFwMDADSs\/COuKf6QzbZuwm5bQ+t1xaNk5sTWeJideDy\/mEPzRPt1g1pEejHD9dWUd1PFn4IWabl7","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3kZj5LddIAQD\/4LDwAAAQEICh5iRj8laAr5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","pkt_oversize":false,"pkt_ts":1581113120,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7FgtjjAbvMd3kZj5LdrYAQD\/wK2AAAAQEICh5iRj8laAr5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap","flow_id":0,"flow_packet_id":109,"flow_first_seen":1581113120474,"flow_last_seen":1581113121570,"flow_tot_l4_data_len":70276,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":644,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":55523,"dst_port":443,"l4_proto":"tcp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-curl.pcap"}
diff --git a/tests/result/nDPId_443-firefox.pcap.txt b/tests/result/nDPId_443-firefox.pcap.txt
new file mode 100644
index 000000000..0442c0731
--- /dev/null
+++ b/tests/result/nDPId_443-firefox.pcap.txt
@@ -0,0 +1,23 @@
+0363{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581109488041,"flow_last_seen":1581109488041,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAULAqAENsj7Fgs9oAbstYO2oAAAAALAC\/\/8dyQAAAgQFtAEDAwUBAQgKHivVZQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDUayPsWCwKgBDQG7z2h4KhDzLWDtqaAS\/ojkXQAAAgQFrAQCCAolMJ2OHivVZQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYO2peCoQ9IAQECwBWgAAAQEICh4r1YolMJ2O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1102{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1581109488041,"flow_last_seen":1581109488081,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0399{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HdRAADQG73myPsWCwKgBDQG7z2h4KhD0LWDvroAQAfoNXQAAAQEICiUwnbceK9WL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUHdVAADQG6diyPsWCwKgBDQG7z2h4KhD0LWDvroAQAfqVUAAAAQEICiUwnboeK9WLFgMDAE4CAABKAwOvM8LrXKoo0unofgHocdvd\/Ny9B7iQj9XZFL3OXqjiSgDMqAAAIv8BAAEAAAAAAAALAAQDAAECACMAAAAQAAUAAwJoMgAXAAAWAwMJ+AsACfQACfEABVUwggVRMIIEOaADAgECAhIDxW9mNu2nL39MVmX6BV2TMlUwDQYJKoZIhvcNAQELBQAwSjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMTGkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMB4XDTE5MTIxNzAxMTcyOFoXDTIwMDMxNjAxMTcyOFowFzEVMBMGA1UEAxMMd3d3Lm50b3Aub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSHDQayg1hZirIX4Lqo3WG5KpMHniFi3Mrw70HcZqirZW5NUs9muyeR2daOyJjrsrcxe5XeHEXf5ru6+lYjXKiJUopGwLGWi1MuiA9gxWWZLWVeWEttxEmwTTqWlShR8ip32eF1LWpw+F0\/c7QNC2bLlmcSkK9oUS8lWxZizXhwgMReDaqPRYDEvhZYtdfWcfkpSDtRToDgE82uKrDur4Q1u38uBJsp\/Zuk427G+2bOLN0pIsECXklgqQWZhVqEqvoDVHDRIwlzyNKwbt7R+GffgX5sp5gUkbyOPc++GR+fOVL7\/MuzNWp2Ur2zThN4UF6enMUdFCrd\/aCFa8DDGwQIDAQABo4ICYjCCAl4wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRmdzmXZiclqr7hh6e7K5a4h\/CR1zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMBcGA1UdEQQQMA6CDHd3dy5udG9wLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AF6nc\/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbxGlYBAAAAQDAEgwRgIhAIRceob4hnAbM9rJbnEpY+A50PHaV61rmP\/FPogwHJlnAiEAiK3s5Ni+tJcif2KrozzCA+H4Z5wsGO\/rP7mWl\/8vPTAAdgAHt1wb5X1o\/\/Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW8RpWAtAAAEAwBHMEUCIDAoXUAacoihoRLZX4xqZwCvTg3tPgFpCX2S7ZjjFV7RAiEAqJN+En3T+\/ydrTEr5TNFIftUI+4vvVlbwZiJasTYVG4wDQYJKoZIhvcNAQELBQADggEBABf660IO1+locKETiuPkBudrM2Gg2CMTwawmZ8YWY0H7ZucmeZKLjBIr10rhc\/xXzyKNPlklujVS4QNzb64syqShdO9NKJYTs3waFZTL7ydLvW0D4fczI3O+vPDZhwZpLmn+nqS+eWOoIfOLT7ybQqmBmqXgIBoyBlCSHhlepcZ1ZAlhZDuOaxVjHsL7TTVJqXPX6Mzg7LSS4E55KIz9jb1FBPqySSarb6F20U4aoE8vYu+DsC17ZWHL2SZkzmRlaFwVC2przQWki8GfGb0+3wBv2KRVjbq6lkVyOTkZXPr2pwfJk+y1sTzG","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1581109488041,"flow_last_seen":1581109488123,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"3653a20186a5b490426131a611e01992","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2343{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1045{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1581109488041,"flow_last_seen":1581109488123,"flow_tot_l4_data_len":3641,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"3653a20186a5b490426131a611e01992","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}}
+0503{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB+HddAADQG7yyyPsWCwKgBDQG7z2h4Khw0LWDvroAYAfoO\/wAAAQEICiUwnboeK9WLZ4YR4bnOF6tPCTZOqJjVwYxlP4OP52PvwGPt\/kRoBqGRPIjpXSxMVNbmyTiiNTUSI6U1DvfsFNytQP+Yhft5jI0WAwMABA4AAAA=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYO+ueCocNIAQD9L0GQAAAQEICh4r1bMlMJ26","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYO+ueCocfoAQD8\/z0gAAAQEICh4r1bMlMJ26","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":151,"pkt":"EBMx8Tl2KDc3AG3ICABFAACJAABAAEAGAPnAqAENsj7Fgs9oAbstYO+ueCocfoAYEAB5hQAAAQEICh4r1bUlMJ26FgMDACUQAAAhICi1U+PJ2wKZLf5RVjA3DxZ5+y\/ZGqADjl8AV33hH3tEFAMDAAEBFgMDACBugGYQD4nWZ4HC7TfIW2R2Wajrymil6T8UEFXNRqJQwA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":332,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE+HdhAADQG7muyPsWCwKgBDQG7z2h4Khx+LWDwA4AYAfpxdAAAAQEICiUwneMeK9W1FgMDANoEAADWAAABLADQNrrsPtfbUKGSZw0BQWyxFkDq1\/VHw+TE1DI58ApVxrIM8tZMaO\/RwwR6jCk4cM1yOq+VoQnPvGq3uQOJSUvD9r2oD1QsyeEpp9zPhMVO1XcQ+EEoPSp1EN7Yg6dGqUCdcGCyFmT9Q8DenArIduyaByiPEhyTQhl+7NW+4HMwi5Kts7Isd8KqhrCzHPFYkhN5MaBNXJkBCOkA2DvUsAYBAMdPvP062IPLIhQVV8rM3fa8uye0H4fCtv6IRiQo2CjI5cyNTJkXni7Yk\/pCcFVsBxQDAwABARYDAwAglUhXmIVfoftdkGS5tKHfFDrB7ltAV+Wib7KKoylImGc=","pkt_caplen":332,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":115,"pkt":"KDc3AG3IEBMx8Tl2CABFAABlHdlAADQG70OyPsWCwKgBDQG7z2h4Kh2ILWDwA4AYAfqzkwAAAQEICiUwneMeK9W1FwMDACxffRqcy2j37wKerf7ZOK8PIq4YWRNxkgdTirhwIr1LXYymQjh\/dnRfmvIfcg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYPADeCodiIAQD\/fx+wAAAQEICh4r1dolMJ3j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","pkt_oversize":false,"pkt_ts":1581109488,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs9oAbstYPADeCoduYAQD\/bxywAAAQEICh4r1dolMJ3j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1043{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","flow_id":0,"flow_packet_id":255,"flow_first_seen":1581109488041,"flow_last_seen":1581109490437,"flow_tot_l4_data_len":176345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"3653a20186a5b490426131a611e01992","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap","flow_id":0,"flow_packet_id":667,"flow_first_seen":1581109488041,"flow_last_seen":1581109496480,"flow_tot_l4_data_len":435389,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53096,"dst_port":443,"l4_proto":"tcp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-firefox.pcap"}
diff --git a/tests/result/nDPId_443-git.pcap.txt b/tests/result/nDPId_443-git.pcap.txt
new file mode 100644
index 000000000..8350eb5f8
--- /dev/null
+++ b/tests/result/nDPId_443-git.pcap.txt
@@ -0,0 +1,22 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581113657633,"flow_last_seen":1581113657633,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGeqzAqAENjFJyBNnAAbv0\/p5\/AAAAALAC\/\/+NzAAAAgQFtAEDAwUBAQgKHmpbwAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGiLCMUnIEwKgBDQG72cCAzdDM9P6egKASb0C\/0wAAAgQFnAQCCAoOCxAaHmpbwAEDAwo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/p6AgM3QzYAQECpNNAAAAQEICh5qXC0OCxAa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1092{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":583,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI5AABAAEAGeLPAqAENjFJyBNnAAbv0\/p6AgM3QzYAYECpqTgAAAQEICh5qXDMOCxAaFgMBAgABAAH8AwNQWUIaokrsiL8XEswp8oDn8SQNNiEML8bEosBTihcRygAAhswUzBPMFcAwwCzAKMAkwBTACgCjAJ8AawBqADkAOP+FAMQAwwCIAIcAgcAywC7AKsAmwA\/ABQCdAD0ANQDAAITAL8ArwCfAI8ATwAkAogCeAGcAQAAzADIAvgC9AEUARMAxwC3AKcAlwA7ABACcADwALwC6AEHAEsAIABYAE8ANwAMACgD\/AQABTQAAAA8ADQAACmdpdGh1Yi5jb20ACwAEAwABAgAKADoAOAAOAA0AGQAcAAsADAAbABgACQAKABoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARAA0AJgAkBgEGAgYD7+8FAQUCBQMEAQQCBAPu7u3tAwEDAgMDAgECAgIDM3QAAAAQAAsACQhodHRwLzEuMQAVALMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1581113657633,"flow_last_seen":1581113657751,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"github.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+2307{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":1490,"pkt":"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","pkt_caplen":1490,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1581113657633,"flow_last_seen":1581113657863,"flow_tot_l4_data_len":2121,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1456,"flow_avg_l4_data_len":424,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"github.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2309{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":1490,"pkt":"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","pkt_caplen":1490,"pkt_type":2048,"pkt_ipoffset":14}
+1343{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":768,"pkt":"KDc3AG3IEBMx8Tl2CABFAALywPxAADIGxP2MUnIEwKgBDQG72cCAzdvt9P6ghYAYAB33cAAAAQEICg4LEDgealwzaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQ901Cl1qCt7vNKYApl0yHU+PjWDzAfBgNVHSMEGDAWgBSxPsNpA\/i\/RwHUmCYaCALvY2QrwzANBgkqhkiG9w0BAQsFAAOCAQEAnbbQkIbhhgLtxaDwNBx0wY12zIYKqPBKikLWP8ipTa18CK3mtlC4ohpNiAexKSHc59rGPCHg4xFJcKx6HQGkyhE6V6t9VypAdP3THYUYUN9XR3WhfVUgLkc3UHKMf4Ib0mKPLQNa2sPIoc4sUqIAY+tzunHISScjl2SFnjgOrWNoPLpSgVh5oywM395t6zHyuqB8bPEs1OG9d4Q3A84ytciagRpKkk47RpqF\/oOi+Z6Mo8wNXrM9zwR4jxQUezKcxwCmXMS1oVWNWlZopCJwqjyBcdmdqEU79OX2olHdx3ti6G8MdOu42vi\/hw15UJGQmxg7kVkn8TUoE6smftX3ehYDAwFNDAABSQMAF0EEviPCEhvi59\/6T9MgEZKwV0P2OvDb2lxoYjEG5vsi\/GBNZCvMQIi4iYKpdl7TR+23s\/ToYG3xlEUBwWaysxfvXQQBAQAuBk8cLaFssUGAuvswNmrq02lhqwkXi\/wU3UU\/AkCzSFmjQ7wtJWrU6hSUZ3hAmh91DpceCCVQ7Rxf8xfryCEZbPNuCh64PhEwWNMp019JpkISwyTNXz46vjxbrUxGhmOrmMzcmFRZ7q+hZZLhwxYyuxOKIY7fn5T8gFT89sb9ufiteD0BXA85KIh\/u76cpH0g38RNfBIRSXrsarDNoXdFIFX9ODLWnob+HV5b6AIqoQRFrLU3nkOyBjYjY2qp2BhwJZsxq5AIwHNywkgA9gqiVHOKjNlJl58wcfvlk2UlkCpulNjNTECyXO1XUcWtPSrkT12iLElSLvMrMg5St+uKFgMDAAQOAAAA","pkt_caplen":768,"pkt_type":2048,"pkt_ipoffset":14}
+1081{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1581113657633,"flow_last_seen":1581113657863,"flow_tot_l4_data_len":4311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1456,"flow_avg_l4_data_len":615,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"github.com","server_names":"github.com,www.github.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Extended Validation Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=GitHub, Inc., CN=github.com","alpn":"http\/1.1","fingerprint":"CA:06:F5:6B:25:8B:7A:0D:4F:2B:05:47:09:39:47:86:51:15:19:84"}}
+0397{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/qCFgM3b7YAQD9E\/1QAAAQEICh5qXKIOCxA4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/qCFgM3eq4AQD7s9LQAAAQEICh5qXKIOCxA4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGejrAqAENjFJyBNnAAbv0\/qCFgM3eq4AYEAAyjAAAAQEICh5qXKwOCxA4FgMDAEYQAABCQQR4DzL7VHI2p9Wsor\/3Vo+N5AnUsHpLTKA09EA6pNCLHfqzPZDgrXdy4uSgcbnJbZZgDjW0mC8atlmChwGPzYamFAMDAAEBFgMDACgAAAAAAAAAAHd9Rs8Pb0Y7rv\/z7IipdV0+VbYENXE30Jp+r4B5hI8\/","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnwP1AADIGx4eMUnIEwKgBDQG72cCAzd6r9P6hA4AYAB2mngAAAQEICg4LEFYealysFAMDAAEBFgMDACiJm0EBvvRKLB1Cn3ghSvpVRDlZi1fe4L68mfAevWJ7jPFkSHcNZZTo","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGerjAqAENjFJyBNnAAbv0\/qEDgM3e3oAQD\/47pQAAAQEICh5qXRgOCxBW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113657,"pkt_len":273,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEDAABAAEAGeenAqAENjFJyBNnAAbv0\/qEDgM3e3oAYEACF3gAAAQEICh5qXRgOCxBWFwMDAMoAAAAAAAAAAZteE2M50auMrOtfwzcbrjE5WSBBGbdFq8Wv4YIfG49Pd6pjfLi8bvfrvWBPpyLBoiAfBJfKXWUmVmlXSRH2FbhdbL6+RF4mftwCy7PUQCTF7z1+QJXZiylicLOVB6F+QgE78ERJTYJZ5fqeUMaOnSKsYbY3QkmS8On68oWh9PJWvTllzj24jo7NW0yhQmQ5nrxaN845D0504ebzIYNzgvXdV6rf08Iu+PMC6t\/37IhUjJDXatJxPaJ40aWY6+Eo3mch","pkt_caplen":273,"pkt_type":2048,"pkt_ipoffset":14}
+0900{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113658,"pkt_len":437,"pkt":"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","pkt_caplen":437,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","pkt_oversize":false,"pkt_ts":1581113658,"pkt_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB+wP9AADIGx26MUnIEwKgBDQG72cCAzeBR9P6h0oAYAB7pmQAAAQEICg4LEHoeal0YFwMDAEWJm0EBvvRKLmX7drjPshGyaEJWmqcp1RQ+pyLs4CGONTV6yT1TRVDipzhBBC2J7XfD1QzS\/vH7qDNCq0AYEKrGNVvpC2I=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap","flow_id":0,"flow_packet_id":70,"flow_first_seen":1581113657633,"flow_last_seen":1581113658456,"flow_tot_l4_data_len":34809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1456,"flow_avg_l4_data_len":497,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"140.82.114.4","src_port":55744,"dst_port":443,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-git.pcap"}
diff --git a/tests/result/nDPId_443-opvn.pcap.txt b/tests/result/nDPId_443-opvn.pcap.txt
new file mode 100644
index 000000000..4ab479dc8
--- /dev/null
+++ b/tests/result/nDPId_443-opvn.pcap.txt
@@ -0,0 +1,20 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581153175528,"flow_last_seen":1581153175528,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.84","dst_ip":"192.12.192.103","src_port":52973,"dst_port":1194,"l4_proto":"tcp"}
+0415{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153175,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+EfAqAFUwAzAZ87tBKpga1quAAAAALAC\/\/\/PlAAAAgQFtAEDAwUBAQgKFg2AOQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153175,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADYGAkzADMBnwKgBVASqzu1gWZU1YGtar6AScSBwigAAAgQFrAQCCAocQO0VFg2AOQEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153175,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+FPAqAFUwAzAZ87tBKpga1qvYFmVNoAQECwALgAAAQEIChYNgE0cQO0V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":110,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgAABAAEAG+CfAqAFUwAzAZ87tBKpga1qvYFmVNoAYECxEwAAAAQEIChYNhGMcQO0VACo41nvkW+XCAesBZDX8sdb2DhrIizKVRtw8er8LngAAAAFePnuYAAAAAAA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0eCxAADYGiifADMBnwKgBVASqzu1gWZU2YGta24AQAcUJRgAAAQEIChxA7iIWDYRj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":122,"pkt":"KDc3AG3IEBMx8Tl2CABFAABseC1AADYGie7ADMBnwKgBVASqzu1gWZU2YGta24AYAcVPwwAAAQEIChxA7iIWDYRjADZAGQgugPnKUoAhWk5EFW4WBnpU\/ornQ3WM1pHQ1gAAAAFePnuYAQAAAADWe+Rb5cIB6wAAAAA=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1581153175528,"flow_last_seen":1581153176626,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.84","dst_ip":"192.12.192.103","src_port":52973,"dst_port":1194,"l4_proto":"tcp","ndpi": {"proto":"OpenVPN","category":"VPN"}}
+0396{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+FPAqAFUwAzAZ87tBKpga1rbYFmVboAQECr6lAAAAQEIChYNhHccQO4i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":118,"pkt":"EBMx8Tl2KDc3AG3ICABFAABoAABAAEAG+B\/AqAFUwAzAZ87tBKpga1rbYFmVboAYEColyAAAAQEIChYNhHgcQO4iADIo1nvkW+XCAevrBy2vwZH\/+bWS\/9mZxBfmMUqaFQAAAAJePnuYAQAAAAAZCC6A+cpSgA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0eC5AADYGiiXADMBnwKgBVASqzu1gWZVuYGtbD4AQAcUItgAAAQEIChxA7jEWDYR4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":387,"pkt":"EBMx8Tl2KDc3AG3ICABFAAF1AABAAEAG9xLAqAFUwAzAZ87tBKpga1sPYFmVboAYECoBKwAAAQEIChYNhLAcQO4xAT8g1nvkW+XCAes3EAx\/GqEO3Ph51UACdeTFONHcDAAAAANePnuYAAAAAAEWAwEBEAEAAQwDA++NWhN5Tk\/ANmbagLd6yyKw8+TedT+\/D6LtzejhgoZXIB\/PR+3JuRDmhCwtpPhzz6xxLrKdnbOYqJLwJ67iAVQFADITAhMDEwHALMAwAJ\/MqcyozKrAK8AvAJ7AJMAoAGvAI8AnAGfACsAUADnACcATADMA\/wEAAJEACwAEAwABAgAKAAwACgAdABcAHgAZABgAFgAAABcAAAANADAALgQDBQMGAwgHCAgICQgKCAsIBAgFCAYEAQUBBgEDAwIDAwECAQMCAgIEAgUCBgIAKwAJCAMEAwMDAgMBAC0AAgEBADMAJgAkAB0AIAKZf59ylmrdrVsoBgXLb0\/7IIDGqcgzqcALpKhtp5VQ","pkt_caplen":387,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0eC9AADYGiiTADMBnwKgBVASqzu1gWZVuYGtcUIAQAdYHJwAAAQEIChxA7jYWDYSw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1970{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":1236,"pkt":"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","pkt_caplen":1236,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+FPAqAFUwAzAZ87tBKpga1xQYFmaAIAQEAX0RAAAAQEIChYNhM8cQO44","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","pkt_oversize":false,"pkt_ts":1581153176,"pkt_len":118,"pkt":"EBMx8Tl2KDc3AG3ICABFAABoAABAAEAG+B\/AqAFUwAzAZ87tBKpga1xQYFmfoIAYD9hfJAAAAQEIChYNhM8cQO44ADIo1nvkW+XCAesovRmAJlqMfsDgqoZ62+nwdLKzdgAAAARePnuYAQAAAAEZCC6A+cpSgA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap","flow_id":0,"flow_packet_id":46,"flow_first_seen":1581153175528,"flow_last_seen":1581153184491,"flow_tot_l4_data_len":10009,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":217,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.84","dst_ip":"192.12.192.103","src_port":52973,"dst_port":1194,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-opvn.pcap"}
diff --git a/tests/result/nDPId_443-safari.pcap.txt b/tests/result/nDPId_443-safari.pcap.txt
new file mode 100644
index 000000000..2e01e109d
--- /dev/null
+++ b/tests/result/nDPId_443-safari.pcap.txt
@@ -0,0 +1,22 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1581109359601,"flow_last_seen":1581109359601,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAULAqAENsj7Fgs8nAbvmgoUNAAAAALAC\/\/+6MQAAAgQFtAEDAwUBAQgKHinouAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDUayPsWCwKgBDQG7zyeqmyMX5oKFDqAS\/ogx6QAAAgQFrAQCCAolLqfYHinouAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoUOqpsjGIAQECxO5AAAAQEICh4p6N4lLqfY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":299,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEdAABAAEAGAGXAqAENsj7Fgs8nAbvmgoUOqpsjGIAYECyk0wAAAQEICh4p6N8lLqfYFgMBAOQBAADgAwO3U9SDw6dmF9tIkvK4s2zLvIzeuLe65SzRlAWXQjKSvgAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACP\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACgAIAB0AFwAYABk=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1581109359601,"flow_last_seen":1581109359641,"flow_tot_l4_data_len":381,"flow_min_l4_data_len":32,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0399{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Q1tAADQGyfKyPsWCwKgBDQG7zyeqmyMY5oKF94AQAfxcAwAAAQEICiUup\/8eKejf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1581109359601,"flow_last_seen":1581109359683,"flow_tot_l4_data_len":1885,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"f9fcb52580329fb6a9b61d7542087b90","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2341{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUQ11AADQGxFCyPsWCwKgBDQG7zyeqmyi45oKF94AQAfxqRgAAAQEICiUuqAMeKejfPt8Ab9ikVY26upZFcjk5GVz69qcHyZPstbE8xsWVy+8c2HkQT7CPitQARbkn3eJPvJT+AASWMIIEkjCCA3qgAwIBAgIQCgFBQgAAAVOFc2oLheynCDANBgkqhkiG9w0BAQsFADA\/MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMTDkRTVCBSb290IENBIFgzMB4XDTE2MDMxNzE2NDA0NloXDTIxMDMxNzE2NDA0NlowSjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUxldCdzIEVuY3J5cHQxIzAhBgNVBAMTGkxldCdzIEVuY3J5cHQgQXV0aG9yaXR5IFgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNMM8FrlLke3cl03g7NoYzDq1zUmGSXhvb418XCSL7e4S0EFq6meNQhY7LEqxGiHC6PjdeTm86dicbp5gWAf15Gan\/PQeGdxyGkOlZHP\/uaZ6WA8SMx+yk13EiSdRxta67nsHjcAHJyse6cF6s5K671B5TaYucv9bTyWaN8jKkKQDIZ0Z8h\/pZq4UmEUEz9l6YKHy9v6Dlb2honzhT+Xhq+w3Brvaw2VFn3EK6BlspkENnWAa6xK8xuQSXgvopZPKiAlKQTGdMDQMc2PMTiVFrqoM7hD8bEfwzB\/onkxEz0tNvjj\/PIzark5McWvxI0NHWQWM6r6hCm21AvA2H3DkwIDAQABo4IBfTCCAXkwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwfwYIKwYBBQUHAQEEczBxMDIGCCsGAQUFBzABhiZodHRwOi8vaXNyZy50cnVzdGlkLm9jc3AuaWRlbnRydXN0LmNvbTA7BggrBgEFBQcwAoYvaHR0cDovL2FwcHMuaWRlbnRydXN0LmNvbS9yb290cy9kc3Ryb290Y2F4My5wN2MwHwYDVR0jBBgwFoAUxKexpHsscfrb4UuQdf\/EFWCFiRAwVAYDVR0gBE0wSzAIBgZngQwBAgEwPwYLKwYBBAGC3xMBAQEwMDAuBggrBgEFBQcCARYiaHR0cDovL2Nwcy5yb290LXgxLmxldHNlbmNyeXB0Lm9yZzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLmlkZW50cnVzdC5jb20vRFNUUk9PVENBWDNDUkwuY3JsMB0GA1UdDgQWBBSoSmpjBH3duubRObemRWXv86jsoTANBgkqhkiG9w0BAQsFAAOCAQEA3TPXEfNjWDjdGBX7CVW+dla5cEilaUcne8IkCJLxWh9KEik3JHRRHGJouM2VcGfl96S8TihRzZvoroed6ti6WqEBmtzw3Wodatg+VyOeph4EYpr\/1wXKtx8\/wApIvJSwtmVi4MFU5aMqrSDE6ea73Mj2tcMyo5jMd6jmeWUHK8so\/joWUoHOUgwuX4Po1QYz+3dszkDqMp4fklxBwXRsW10KXzPMTZ+sOPAveyxindmjkW8lGy+QsRlGPfZ+G6Z6h7mjem0Y+iWlkYcV4PIWL1iwBi8saCbGS5jN2p8M+X+Q7UNKEkROb3N6KOqkqm57TH2H3eDJAkSnh6\/DNFu0QhYDAwEsDAABKAMAHSDNFhiWXs0qHQ8G5wseeubU3TMqxpEWpQ1nZZ1JMWOgDggEAQB4JLARF0gDufAS6PjMl+ZcNHBEMmHC5rEI60VQXue9HUGpA8dhR7\/ICwLrTYdp\/W4\/35H1BC1LLjBJjDSuMcNXD1cCam3980yesF6NCICWmLZ3GpmD7NFbRHQJuBQDPScWpjYAG4j\/p+d0iFEHJDGNZU3K1VDwv12wLyU1gAhbuwuVf2lyP10LAbU\/fROyYVTGQZrMVaNoUB7o+SLvlt\/yCy6N","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1023{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1581109359601,"flow_last_seen":1581109359683,"flow_tot_l4_data_len":3357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":479,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"www.ntop.org","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"f9fcb52580329fb6a9b61d7542087b90","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=www.ntop.org","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"DB:A7:E4:3E:6D:BB:21:AB:68:47:35:E8:0B:8F:15:DF:DB:C7:C9:6F"}}
+0538{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":168,"pkt":"KDc3AG3IEBMx8Tl2CABFAACaQ15AADQGyYmyPsWCwKgBDQG7zyeqmy5Y5oKF94AYAfz2WgAAAQEICiUuqAMeKejflBRBgMGZVdRZOR8f6IjhktBdhoE6\/DQgaS5VQe24xAg6UiVLi4vdkyT6xDPJHOiyUXMCwGj8UsvLwTibbAWapVLRMci9o6jUhBO+6V0kA0KpQQxXe\/PUsiKT3S7QFgMDAAQOAAAA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoX3qpsuWIAQD9JCvwAAAQEICh4p6QklLqgD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoX3qpsuvoAQD89CXAAAAQEICh4p6QklLqgD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":151,"pkt":"EBMx8Tl2KDc3AG3ICABFAACJAABAAEAGAPnAqAENsj7Fgs8nAbvmgoX3qpsuvoAYEABwFwAAAQEICh4p6eYlLqgDFgMDACUQAAAhIMGqhb3XkJGA\/wF9eUKXrfykVDj\/ThTT8RIYiOqeXTUnFAMDAAEBFgMDACAz7MdDvgVsnCUAT7S8N0RvYyr88eVA75jMkS1gHOhNlw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":109,"pkt":"KDc3AG3IEBMx8Tl2CABFAABfQ19AADQGycOyPsWCwKgBDQG7zyeqmy6+5oKGTIAYAfxBiQAAAQEICiUuqQweKenmFAMDAAEBFgMDACAMEp1KmtCUjr44sERCaOH9w8xAiWJ7YAJf3Vq4tOyOxQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":115,"pkt":"KDc3AG3IEBMx8Tl2CABFAABlQ2BAADQGybyyPsWCwKgBDQG7zyeqmy7p5oKGTIAYAfzx6QAAAQEICiUuqQweKenmFwMDACyPw1aJHd3EuqdSE\/LScQ19HUZ6b\/Hrxr1Ppm2Om5KPE2xvVddH2ITgh0Twfg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoZMqpsu6YAQD\/4\/oQAAAQEICh4p6gwlLqkM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","pkt_oversize":false,"pkt_ts":1581109359,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAU7AqAENsj7Fgs8nAbvmgoZMqpsvGoAQD\/0\/cQAAAQEICh4p6gwlLqkM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap","flow_id":0,"flow_packet_id":41,"flow_first_seen":1581109359601,"flow_last_seen":1581109360696,"flow_tot_l4_data_len":18535,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":452,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.13","dst_ip":"178.62.197.130","src_port":53031,"dst_port":443,"l4_proto":"tcp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/443-safari.pcap"}
diff --git a/tests/result/nDPId_4in4tunnel.pcap.txt b/tests/result/nDPId_4in4tunnel.pcap.txt
new file mode 100644
index 000000000..f3abfd743
--- /dev/null
+++ b/tests/result/nDPId_4in4tunnel.pcap.txt
@@ -0,0 +1,12 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1537044271,"pkt_len":170,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJToWAAA\/wQRSEVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGxLmgACAAAEc2wQAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80=","pkt_caplen":170,"pkt_type":33024,"pkt_ipoffset":14}
+0177{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","type":33024}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1537058551,"pkt_len":170,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRbZwAA\/wSeOUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzGjAACAAAAJvVqAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80=","pkt_caplen":170,"pkt_type":33024,"pkt_ipoffset":14}
+0177{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","type":33024}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1537082929,"pkt_len":170,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRsDwAA\/wSNkUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzKXAACAAABmvAmAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80=","pkt_caplen":170,"pkt_type":33024,"pkt_ipoffset":14}
+0177{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","type":33024}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1537138237,"pkt_len":170,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJRnMwAA\/wSSbUVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGzXzgACAAAE5t9oAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80=","pkt_caplen":170,"pkt_type":33024,"pkt_ipoffset":14}
+0177{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","type":33024}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1537165843,"pkt_len":170,"pkt":"AAAAAAAEpMZPO7OagQBmWIEAYfkIAEW4AJTPEAAA\/wQqkEVDI5Ipyi5uRbgAgAABAAD+Ed6ECgpkGQoKZQLzn0JoAGz7LQACAAABZb+KAAAAAAABAACrzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq82rzavNq80=","pkt_caplen":170,"pkt_type":33024,"pkt_ipoffset":14}
+0177{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap","type":33024}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in4tunnel.pcap"}
diff --git a/tests/result/nDPId_4in6tunnel.pcap.txt b/tests/result/nDPId_4in6tunnel.pcap.txt
new file mode 100644
index 000000000..893176066
--- /dev/null
+++ b/tests/result/nDPId_4in6tunnel.pcap.txt
@@ -0,0 +1,9 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1543235434019,"flow_last_seen":1543235434019,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8","dst_ip":"344a:ba94:152a:ac34::2a","l4_proto":4}
+0525{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","pkt_oversize":false,"pkt_ts":1543235434,"pkt_len":154,"pkt":"AAECunaOAAAASfSHht1gAAAAADQEPyLgFoXtpzjMWL3z8ao\/Itg0SrqUFSqsNAAAAAAAAAAqRQAANHvwQAB\/BqsfwKgAAQoKCgH7xwG73+E+ggAAAACAAv\/\/fqUAAAIEBYQBAwMIAQEEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":154,"pkt_type":34525,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1543235434019,"flow_last_seen":1543235434019,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8","dst_ip":"344a:ba94:152a:ac34::2a","l4_proto":4,"ndpi": {"proto":"IP_in_IP","category":"Network"}}
+0526{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","pkt_oversize":false,"pkt_ts":1543235434,"pkt_len":154,"pkt":"AAECunaOAAAASfSHht1gAAAAADQEPTRKupQVKqw0AAAAAAAAACoi4BaF7ac4zFi98\/GqPyLYRQAANEufQABhBvlwCgoKAcCoAAEBu\/vHAwzKjt\/hPoOAEv\/\/sQUAAAIEBXgBAwMIAQEEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":154,"pkt_type":34525,"pkt_ipoffset":14}
+0805{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","pkt_oversize":false,"pkt_ts":1543235434,"pkt_len":366,"pkt":"AAECunaOAAAASfSHht1gAAAAAQgEPyLgFoXtpzjMWL3z8ao\/Itg0SrqUFSqsNAAAAAAAAAAqRQABCHv3QAB\/BqpEwKgAAQoKCgH7xwG73+E+gwMMyo9QGAQA0icAABYDAwDbAQAA1wMDW5uXE0\/QFYUpkWO+HpgF5MI5wT9TQj14SroSH1Zl8oggjz8AALXLO9H2rxfCGsjqy7cU6\/NXDrPxEswgEUGVcfAAJsAswCvAMMAvwCTAI8AowCfACsAJwBTAEwCdAJwAPQA8ADUALwAKAQAAaAAAABEADwAADHd3dy5iaW5nLmNvbQAKAAgABgAdABcAGAALAAIBAAANABQAEgQBBQECAQQDBQMCAwICBgEGAwAjAAAAEAAOAAwCaDIIaHR0cC8xLjEAFwAAABgABgAKAwIBAP8BAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":366,"pkt_type":34525,"pkt_ipoffset":14}
+2343{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","pkt_oversize":false,"pkt_ts":1543235434,"pkt_len":1514,"pkt":"AAECunaOAAAASfSHht1gAAAABYQEPTRKupQVKqw0AAAAAAAAACoi4BaF7ac4zFi98\/GqPyLYRQAFhEuhQABhBvQeCgoKAcCoAAEBu\/vHAwzKj9\/hP2NQEAQEHmIAABYDAxNZAgAAWgMDW5uXESPnDY6GVdXogmmrS1WdR7CnjiCJLtiMMET4LR0g70cAAGowHs5bbipHOvpkse5qjMhnnSOXdm6lLVoWT1DALwAAEgAQAAUAAwJoMgAXAAD\/AQABAAsAEccAEcQADAYwggwCMIIJ6qADAgECAhMtAAAymdcHHbfRcIpCAAAAADKZMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTAeFw0xNzA3MjAxNzQ3MDhaFw0xOTA3MTAxNzQ3MDhaMBcxFTATBgNVBAMTDHd3dy5iaW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALqOyD7\/sOUit2AU5xoOUrdFD2wiCQmyCmP5nEBsh7fOLKKYjGNWUdfzumqBdw2Fpg1sIUPSI+b5pR9u\/gYNMtH4Aivx5J6CrFn4IFOhgzrs2GlVitrUoC9jheCrGis7gUH0hZglGqEjdJl5neUsrm31e5QyJwbyXnacl+k91de8FxrbBQKrwUcQ5sbzW8nMRIDSG0ss9ON1RYFCdc+JblurOUYfPO\/whJXqO0Ms01rklGWFKVeGj7qkJ52E0Xsw\/jJNpqe0+8AQstFZfXdWGOCgJxEIK7SzyvFbkO5VaXY9vaLDfkwWc1aVyhXCrQCMB8YD7ERtr9YuJ3qp+RBy1iMCAwEAAaOCB9AwggfMMB0GA1UdDgQWBBQJh+WFKXgwICWz3X7cbO2lKagDcDALBgNVHQ8EBAMCBLAwHwYDVR0jBBgwFoAUCP4ln3TqhwTCvLuOqDhfM8bRbGUwgawGA1UdHwSBpDCBoTCBnqCBm6CBmIZLaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3JshklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3JsMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA1LmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCARAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBME0GA1UdIARGMEQwQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMIIFbQYDVR0RBIIFZDCCBWCCDHd3dy5iaW5nLmNvbYIQZGljdC5iaW5nLmNvbS5jboITKi5wbGF0Zm9ybS5iaW5nLmNvbYIKKi5iaW5nLmNvbYIIYmluZy5jb22CFmllb25saW5lLm1pY3Jvc28AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1543235434019,"flow_last_seen":1543235434019,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1412,"flow_avg_l4_data_len":445,"midstream":0,"l3_proto":"ip6","src_ip":"22e0:1685:eda7:38cc:58bd:f3f1:aa3f:22d8","dst_ip":"344a:ba94:152a:ac34::2a","l4_proto":4}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/4in6tunnel.pcap"}
diff --git a/tests/result/nDPId_6in4tunnel.pcap.txt b/tests/result/nDPId_6in4tunnel.pcap.txt
new file mode 100644
index 000000000..9966d293c
--- /dev/null
+++ b/tests/result/nDPId_6in4tunnel.pcap.txt
@@ -0,0 +1,20 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0433{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1444236893450,"flow_last_seen":1444236893450,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"174.3.73.24","dst_ip":"184.105.255.26","l4_proto":41}
+0500{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236893,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8tYFAAP8pFzeuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAOC9XY8BWl1OFVYAAAAAqN0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236893,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlZAAPgpDWK4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAN+9XY8BWl1OFVYAAAAAqN0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0583{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236894,"pkt_len":200,"pkt":"ACKQ3jvZAAAkzoE0CABFAAC6tdFAAP8pFqmuA0kYuGn\/GmAAAAAAfjpAIAEEcB8WAT8AAAAAAAAAAiYEqIAAAQAgAAAAAAIksAEBA9KAAAAAAGAAAAAATgY2JgSogAABACAAAAAAAiSwASABBHAfFwE\/JaMykhb5LOAD4exLUvt9fRlwFpiAGABJEPkAAAEBCAq0MT0ACHX6xhcDAwApoxPniAjxmmXGKxqxVV6nOvla9FPS7Dtl2rRDlmVhpOKK9OFyB\/XihP8=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236894,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8te1AAP8pFsuuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAB64XY8BW15OFVYAAAAAaeIGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236894,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xldAAPgpDWG4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAB24XY8BW15OFVYAAAAAaeIGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236895,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8tjRAAP8pFoSuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAFWwXY8BXF9OFVYAAAAAMekGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236895,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlhAAPgpDWC4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAFSwXY8BXF9OFVYAAAAAMekGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236896,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8trRAAP8pFgSuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAJKoXY8BXWBOFVYAAAAA8+8GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236896,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xllAAPgpDV+4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAJGoXY8BXWBOFVYAAAAA8+8GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236897,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8t0NAAP8pFXWuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAJSjXY8BXmFOFVYAAAAA8PMGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236897,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlpAAPgpDV64af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAJOjXY8BXmFOFVYAAAAA8PMGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236898,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8t7hAAP8pFQCuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAG2eXY8BX2JOFVYAAAAAFvgGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236898,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xltAAPgpDV24af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAGyeXY8BX2JOFVYAAAAAFvgGAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236899,"pkt_len":138,"pkt":"ACKQ3jvZAAAkzoE0CABFAAB8uBRAAP8pFKSuA0kYuGn\/GmAAAAAAQDo\/IAEEcB8XAT8+lw7\/\/nNN7CYEqIAAAQAgAAAAAAIksAGAAO2XXY8BYGNOFVYAAAAAlf0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","pkt_oversize":false,"pkt_ts":1444236899,"pkt_len":138,"pkt":"AAAkzoE0ACKQ3jvZCABFAAB8xlxAAPgpDVy4af8argNJGGAAAAAAQDo3JgSogAABACAAAAAAAiSwASABBHAfFwE\/PpcO\/\/5zTeyBAOyXXY8BYGNOFVYAAAAAlf0GAAAAAAAQERITFBUWFxgZGhscHR4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","flow_id":0,"flow_packet_id":127,"flow_first_seen":1444236893450,"flow_last_seen":1444236915586,"flow_tot_l4_data_len":35975,"flow_min_l4_data_len":72,"flow_max_l4_data_len":1877,"flow_avg_l4_data_len":283,"midstream":0,"l3_proto":"ip4","src_ip":"174.3.73.24","dst_ip":"184.105.255.26","l4_proto":41,"ndpi": {"proto":"Unknown"}}
+0440{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap","flow_id":0,"flow_packet_id":127,"flow_first_seen":1444236893450,"flow_last_seen":1444236915586,"flow_tot_l4_data_len":35975,"flow_min_l4_data_len":72,"flow_max_l4_data_len":1877,"flow_avg_l4_data_len":283,"midstream":0,"l3_proto":"ip4","src_ip":"174.3.73.24","dst_ip":"184.105.255.26","l4_proto":41}
+0148{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in4tunnel.pcap"}
diff --git a/tests/result/nDPId_6in6tunnel.pcap.txt b/tests/result/nDPId_6in6tunnel.pcap.txt
new file mode 100644
index 000000000..9d5897eb5
--- /dev/null
+++ b/tests/result/nDPId_6in6tunnel.pcap.txt
@@ -0,0 +1,10 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1335197872162,"flow_last_seen":1335197872162,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4f8:4:7:2e0:81ff:fe52:ffff","dst_ip":"2001:4f8:4:7:2e0:81ff:fe52:9a6b","l4_proto":41}
+0470{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","pkt_oversize":false,"pkt_ts":1335197872,"pkt_len":106,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAAht1gAAAAADQpQCABBPgABAAHAuCB\/\/5S\/\/8gAQT4AAQABwLggf\/+UpprYAAAAAAMEUDerQAAAAAAAAAAAAAAAL7vyv4AAAAAAAAAAAAAAAC6vnUwMsgADIPSWFhYWA==","pkt_caplen":106,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1335197872164,"flow_last_seen":1335197872164,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"feed::beef","dst_ip":"feed::cafe","l4_proto":41}
+0466{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","pkt_oversize":false,"pkt_ts":1335197872,"pkt_len":106,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAAht1gAAAAADQpQP7tAAAAAAAAAAAAAAAAvu\/+7QAAAAAAAAAAAAAAAMr+YAAAAAAMEUDerQAAAAAAAAAAAAAAAL7vyv4AAAAAAAAAAAAAAAC6vnUwMsgADIHQWVlZWQ==","pkt_caplen":106,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1335197872162,"flow_last_seen":1335197872162,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4f8:4:7:2e0:81ff:fe52:ffff","dst_ip":"2001:4f8:4:7:2e0:81ff:fe52:9a6b","l4_proto":41,"ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1335197872162,"flow_last_seen":1335197872162,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4f8:4:7:2e0:81ff:fe52:ffff","dst_ip":"2001:4f8:4:7:2e0:81ff:fe52:9a6b","l4_proto":41}
+0461{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1335197872164,"flow_last_seen":1335197872164,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"feed::beef","dst_ip":"feed::cafe","l4_proto":41,"ndpi": {"proto":"Unknown"}}
+0425{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1335197872164,"flow_last_seen":1335197872164,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip6","src_ip":"feed::beef","dst_ip":"feed::cafe","l4_proto":41}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/6in6tunnel.pcap"}
diff --git a/tests/result/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt b/tests/result/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt
new file mode 100644
index 000000000..4607e2561
--- /dev/null
+++ b/tests/result/nDPId_BGP_Cisco_hdlc_slarp.pcap.txt
@@ -0,0 +1,30 @@
+0372{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0327{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":48,"pkt":"DwAIAEXAACz4kkAAAQa2VmQQAQJkEAEBR5QAs7zqddEAAAAAYAJAABMAAAACBAW0","pkt_caplen":48,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":48,"pkt":"DwAIAEXAACyvfwAAAQY\/amQQAQFkEAECALNHlBlZ03+86nXSYBJAACYWAAACBAW0","pkt_caplen":48,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0323{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":44,"pkt":"DwAIAEXAACj4k0AAAQa2WWQQAQJkEAEBR5QAs7zqddIZWdOAUBBAAD3TAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":101,"pkt":"DwAIAEXAAGH4lEAAAQa2H2QQAQJkEAEBR5QAs7zqddIZWdOAUBhAAOt1AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADkBBAABALQLCwsLHAIGAQQAAQABAgKAAAICAgACAkYAAgZBBAAAAAE=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":44,"pkt":"DwAIAEXAACivgAAAAQY\/bWQQAQFkEAECALNHlBlZ04C86nYLUBA\/xz3TAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":101,"pkt":"DwAIAEXAAGGvgUAAAQb\/MmQQAQFkEAECALNHlBlZ04C86nYLUBg\/xyizAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADkBBPwAALRubm5uHAIGAQQAAQABAgKAAAICAgACAkYAAgZBBAAA\/AA=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":63,"pkt":"DwAIAEXAADuvgkAAAQb\/V2QQAQFkEAECALNHlBlZ07m86nYLUBg\/xzlsAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABME","pkt_caplen":63,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0324{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":44,"pkt":"DwAIAEXAACj4lUAAAQa2V2QQAQJkEAEBR5QAs7zqdgsZWdPMUBA\/tD2aAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":63,"pkt":"DwAIAEXAADv4lkAAAQa2Q2QQAQJkEAEBR5QAs7zqdgsZWdPMUBg\/tDlsAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABME","pkt_caplen":63,"pkt_type":0,"pkt_ipoffset":0}
+0188{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":67,"pkt":"DwAIAEXAAD+vg0AAAQb\/UmQQAQFkEAECALNHlBlZ08y86nYeUBg\/tDZQAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABcFAAEBAQ==","pkt_caplen":67,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0612{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":195,"pkt":"DwAIAEXAAL+vhEAAAQb+0WQQAQFkEAECALNHlBlZ0+O86nYeUBg\/tOd1AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADkCAAAAGEABAQJAAgoCAgAA\/AAAAAABQAMEZBABAR5kEAEIHmQQAQz\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ADACAAAAGEABAQBAAgoCAgAA\/AAAAAABQAMEZBABAQD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABcFAAECAf\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8AFwIAAAAA","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156939,"pkt_len":44,"pkt":"DwAIAEXAACj4l0AAAQa2VWQQAQJkEAEBR5QAs7zqdh4ZWdR6UBA\/Bj2HAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156988,"pkt_len":63,"pkt":"DwAIAEXAADuvhUAAAQb\/VGQQAQFkEAECALNHlBlZ1Hq86nYeUBg\/tDirAAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ABME","pkt_caplen":63,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0324{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","pkt_oversize":false,"pkt_ts":1445156989,"pkt_len":44,"pkt":"DwAIAEXAACj4mEAAAQa2VGQQAQJkEAEBR5QAs7zqdh4ZWdSNUBA+8z2HAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap","datalink":9}
+0157{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_Cisco_hdlc_slarp.pcap"}
diff --git a/tests/result/nDPId_BGP_redist.pcap.txt b/tests/result/nDPId_BGP_redist.pcap.txt
new file mode 100644
index 000000000..1f26e8fad
--- /dev/null
+++ b/tests/result/nDPId_BGP_redist.pcap.txt
@@ -0,0 +1,6 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_redist.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_redist.pcap","pkt_oversize":false,"pkt_ts":1256636836,"pkt_len":163,"pkt":"DwCIRwABLf5FwACbk8xAAP8G2sQCAgICBAQEBACz+C\/VqGxJPJL2UFAYP7QOoQAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/wBzAgAAAFxAAQECQAIAgAQEAAAAVkAFBAAAAGTAECAAAgBkAAAEVwAFAAAAAQIAgAAAAAAAAwCAAawQAgEAAIAOIQABgAwAAAAAAAAAAAICAgIAeAABkQAAAGQAAABkqgAAAA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_redist.pcap","datalink":104}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_redist.pcap","pkt_oversize":false,"pkt_ts":1256636836,"pkt_len":159,"pkt":"DwAIAEXAAJv\/w0AA\/gZtywICAgIFBQUFALPBGWeqNFC\/WbBkUBg\/x6y+AAD\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/AHMCAAAAXEABAQJAAgCABAQAAABWQAUEAAAAZMAQIAACAGQAAARXAAUAAAABAgCAAAAAAAADAIABrBACAQAAgA4hAAGADAAAAAAAAAAAAgICAgB4AAGRAAAAZAAAAGSqAAAA","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_redist.pcap","datalink":104}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/BGP_redist.pcap"}
diff --git a/tests/result/nDPId_EAQ.pcap.txt b/tests/result/nDPId_EAQ.pcap.txt
new file mode 100644
index 000000000..4c0b3da88
--- /dev/null
+++ b/tests/result/nDPId_EAQ.pcap.txt
@@ -0,0 +1,292 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1432820948562,"flow_last_seen":1432820948562,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.48","src_port":53497,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8xb9AAEAGRgEKCAABrcJ3MND5AFA4ezYlAAAAAKACOQisdgAAAgQFtAQCCAoABPOaAAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAJAABAGO9OtwncwCggAAQBQ0PnHhMnaOHs2JlAS\/\/+vjAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0375{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoxcBAAEAGRhQKCAABrcJ3MND5AFA4ezYmx4TJ21AQOQh2hQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":154,"pkt":"ABoRAAACABoRAAABCABFAACMxcFAAEAGRa8KCAABrcJ3MND5AFA4ezYmx4TJ21AYOQihdAAAR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IHRlc3QNCkNvbm5lY3Rpb246IGNsb3NlDQpIb3N0OiB3d3cuZ29vZ2xlLmNvbQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1432820948562,"flow_last_seen":1432820948576,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":20,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.48","src_port":53497,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP.Google","category":"Web"},"http": {"hostname":"www.google.com","url":"www.google.com\/","code":0,"content_type":"","user_agent":"test"}}
+0377{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAANAABAGO9KtwncwCggAAQBQ0PnHhMnbOHs2ilAQ\/\/+vKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1113{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoxcJAAEAGRhIKCAABrcJ3MND5AFA4ezaKx4TL\/1AQO\/BxFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAVAABAGO9CtwncwCggAAQBQ0PnHhMv\/OHs2ilAR\/\/+tBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0376{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoxcNAAEAGRhEKCAABrcJ3MND5AFA4ezaKx4TMAFAUO\/BxEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432820948836,"flow_last_seen":1432820948836,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.24","src_port":40467,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8DwhAAEAG\/NAKCAABrcJ3GJ4TAFBXrfy9AAAAAKACOQj5jgAAAgQFtAQCCAoABPO1AAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAZAABAGO+etwncYCggAAQBQnhOoUgNCV638vlAS\/\/\/iigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDwlAAEAG\/OMKCAABrcJ3GJ4TAFBXrfy+qFIDQ1AQOQipgwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":193,"pkt":"ABoRAAACABoRAAABCABFAACzDwpAAEAG\/FcKCAABrcJ3GJ4TAFBXrfy+qFIDQ1AYOQjjRAAAR0VUIC8\/Z2ZlX3JkPWNyJmVpPTFCeG5WY1A5T0tLazh3ZTUwb0RBQWcgSFRUUC8xLjENClVzZXItQWdlbnQ6IHRlc3QNCkNvbm5lY3Rpb246IGNsb3NlDQpIb3N0OiB3d3cuZ29vZ2xlLmNvbS5icg0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg==","pkt_caplen":193,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1432820948836,"flow_last_seen":1432820948845,"flow_tot_l4_data_len":239,"flow_min_l4_data_len":20,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.24","src_port":40467,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP.Google","category":"Web"},"http": {"hostname":"www.google.com.br","url":"www.google.com.br\/?gfe_rd=cr&ei=1BxnVcP9OKKk8we50oDAAg","code":0,"content_type":"","user_agent":"test"}}
+0379{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820948,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAdAABAGO+atwncYCggAAQBQnhOoUgNDV639SVAQ\/\/\/iAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2226{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":1436,"pkt":"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","pkt_caplen":1436,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDwtAAEAG\/OEKCAABrcJ3GJ4TAFBXrf1JqFIIqVAQQMib0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4071{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":2818,"pkt":"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","pkt_caplen":2818,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDwxAAEAG\/OAKCAABrcJ3GJ4TAFBXrf1JqFITdVAQVmB7bgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4074{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":2818,"pkt":"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","pkt_caplen":2818,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDw1AAEAG\/N8KCAABrcJ3GJ4TAFBXrf1JqFIeQVAQa\/hbCgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4072{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":2818,"pkt":"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","pkt_caplen":2818,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDw5AAEAG\/N4KCAABrcJ3GJ4TAFBXrf1JqFIeQVAUa\/hbBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGC+0KCAABrcJ3GJ4TAFBXrf1JAAAAAFAEAACNogAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432820949586,"flow_last_seen":1432820949586,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.138.146","src_port":52257,"dst_port":6000,"l4_proto":"udp"}
+0384{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGNX0AAAAAAAADdoAAUsHAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAAxAABARDWHIuYqSCggAARdwzCEAGAX1AAAAAAAADdoAAUsHAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432820949685,"flow_last_seen":1432820949685,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.125.226","src_port":48890,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGKD\/AAAAAAAADdoAAZnTAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAA1AABARGhDIuX3iCggAARdwvvoAGND\/AAAAAAAADdoAAZnTAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432820949735,"flow_last_seen":1432820949735,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.67","src_port":51569,"dst_port":6000,"l4_proto":"udp"}
+0384{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGL5HAAAAAAAADdoAAlupAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAA5AABARA6XIwpRDCggAARdwyXEAGO5HAAAAAAAADdoAAlupAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432820949806,"flow_last_seen":1432820949806,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp"}
+0384{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820949,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGGTWAAAAAAAADdoAAuOuAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820950801,"flow_last_seen":1432820950801,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.66","src_port":42620,"dst_port":6000,"l4_proto":"udp"}
+0384{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820950,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGJCGAAAAAAAADdoABKxeAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820950,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAA9AABARA6XIwpRCCggAARdwpnwAGMCGAAAAAAAADdoABKxeAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432820950865,"flow_last_seen":1432820950865,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.68","src_port":43641,"dst_port":6000,"l4_proto":"udp"}
+0384{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820950,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGGvdAAAAAAAADdoABM0IAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820950,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABBAABARA6LIwpRECggAARdwqnkAGJvdAAAAAAAADdoABM0IAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432820950935,"flow_last_seen":1432820950935,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp"}
+0386{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820950,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLKfAAAAAAAADdoABbA\/AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820951932,"flow_last_seen":1432820951932,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp"}
+0384{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820951,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGJu8AAAAAAAADdoABbltAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432820952931,"flow_last_seen":1432820952931,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820952,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGDyZAAAAAAAADdoABeFcAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432820953931,"flow_last_seen":1432820953931,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820953,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGP9hAAAAAAAADdoABgTEAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432820954931,"flow_last_seen":1432820954931,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820954,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGAf9AAAAAAAADdoABloAAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432820955933,"flow_last_seen":1432820955933,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820955,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGNz1AAAAAAAADdoABltPAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1432820956931,"flow_last_seen":1432820956931,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820956,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGMFvAAAAAAAADdoABnqLAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432820957932,"flow_last_seen":1432820957932,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.66","src_port":43979,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820957,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGKK2AAAAAAAADdoABqTdAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820957,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABFAABARE6PIwoRCCggAARdwq8sAGNK2AAAAAAAADdoABqTdAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1432820957985,"flow_last_seen":1432820957985,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820957,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGIZAAAAAAAAADdoABqZqAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1432820958981,"flow_last_seen":1432820958981,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.67","src_port":39185,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820958,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGEQwAAAAAAAADdoABxYcAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820959,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABJAABARE6HIwoRDCggAARdwmREAGHQwAAAAAAAADdoABxYcAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1432820959035,"flow_last_seen":1432820959035,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.68","src_port":52726,"dst_port":6000,"l4_proto":"udp"}
+0386{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820959,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGHB\/AAAAAAAADdoAB7TmAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820959,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABNAABARE5\/IwoRECggAARdwzfYAGKB\/AAAAAAAADdoAB7TmAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1432820959095,"flow_last_seen":1432820959095,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820959,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGDoLAAAAAAAADdoAB90SAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1432820960101,"flow_last_seen":1432820960101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820960,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGBIjAAAAAAAADdoACAGNAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1432820961101,"flow_last_seen":1432820961101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820961,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGAmjAAAAAAAADdoACRl0AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432820962101,"flow_last_seen":1432820962101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820962,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGEXvAAAAAAAADdoACRqlAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432820963101,"flow_last_seen":1432820963101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820963,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGMqYAAAAAAAADdoADHkgAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432820964101,"flow_last_seen":1432820964101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820964,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGL1eAAAAAAAADdoADHsIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432820965101,"flow_last_seen":1432820965101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820965,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGI6AAAAAAAAADdoADHv8AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432820966101,"flow_last_seen":1432820966101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp"}
+0386{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820966,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGKGGAAAAAAAADdoADHzSAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432820967101,"flow_last_seen":1432820967101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820967,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGNXsAAAAAAAADdoADH2JAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432820968101,"flow_last_seen":1432820968101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820968,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGIaLAAAAAAAADdoADH5fAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432820969101,"flow_last_seen":1432820969101,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820969,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGKbHAAAAAAAADdoADrlDAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432820970111,"flow_last_seen":1432820970111,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp"}
+0385{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820970,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGJpnAAAAAAAADdoADrp0AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGNRlAAAAAQAADdsAAUyUAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABRAABARDVnIuYqSCggAARdwzCEAGARmAAAAAQAADdsAAUyUAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1432820949586,"flow_last_seen":1432820971175,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.138.146","src_port":52257,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0385{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGJ\/qAAAAAQAADdsAAZrmAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABVAABARGgjIuX3iCggAARdwvvoAGM\/qAAAAAQAADdsAAZrmAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1432820949685,"flow_last_seen":1432820971265,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.125.226","src_port":48890,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0384{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGL1RAAAAAQAADdsAAlydAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABZAABARA53IwpRDCggAARdwyXEAGO1RAAAAAQAADdsAAlydAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1432820949735,"flow_last_seen":1432820971335,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.67","src_port":51569,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0384{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGKzSAAAAAQAADdsABZAPAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABdAABARA53IwpRCCggAARdwpnwAGNzSAAAAAQAADdsABZAPAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1432820950801,"flow_last_seen":1432820971405,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.66","src_port":42620,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0384{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGJfzAAAAAQAADdsABqDuAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABhAABARA5rIwpRECggAARdwqnkAGMfzAAAAAQAADdsABqDuAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1432820950865,"flow_last_seen":1432820971475,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.68","src_port":43641,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0384{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820971,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIJFAAAAAQAADdwAAsY8AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820972,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLwmAAAAAQAADdwABaa1AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820973,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGK1eAAAAAQAADdwABafIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820974,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGE8vAAAAAQAADdwABc7DAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820975,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA+WAAAAAQAADdwABfSNAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820976,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB5FAAAAAQAADdwABkO1AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820977,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPN5AAAAAQAADdwABkTIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820978,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNEoAAAAAQAADdwABmrPAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820979,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLWJAAAAAQAADdwABpIHAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820979,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABlAABARE5vIwoRCCggAARdwq8sAGOWJAAAAAQAADdwABpIHAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1432820957932,"flow_last_seen":1432820979565,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.66","src_port":43979,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0385{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820979,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJmsAAAAAQAADdwABpL7AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820980,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFMTAAAAAQAADdwABwc2AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820980,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABpAABARE5nIwoRDCggAARdwmREAGIMTAAAAAQAADdwABwc2AABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1432820958981,"flow_last_seen":1432820980615,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.67","src_port":39185,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0385{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820980,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGHylAAAAAQAADdwAB6i9AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820980,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABtAABARE5fIwoRECggAARdwzfYAGKylAAAAAQAADdwAB6i9AABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1432820959035,"flow_last_seen":1432820980685,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.68","src_port":52726,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0385{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820980,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGE3SAAAAAQAADdwAB8lIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820981,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGCMsAAAAAQAADdwAB\/CBAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820982,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGCE7AAAAAQAADdwACQHZAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820983,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGF3iAAAAAQAADdwACQKvAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820984,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGOaZAAAAAQAADdwADF0cAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820985,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGNpxAAAAAQAADdwADF3yAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820986,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGKvQAAAAAQAADdwADF6pAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820987,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGL8TAAAAAQAADdwADF9CAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820988,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGPOYAAAAAQAADdwADF\/aAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820989,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGKSTAAAAAQAADdwADGBUAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820990,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGLjEAAAAAQAADdwADqdDAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820991,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGKy\/AAAAAQAADdwADqgZAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGOZEAAAAAgAADd0AATqyAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsABxAABARDVHIuYqSCggAARdwzCEAGBZFAAAAAgAADd0AATqyAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGK27AAAAAgAADd0AAY0SAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAB1AABARGgDIuX3iCggAARdwvvoAGN27AAAAAgAADd0AAY0SAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGMm0AAAAAgAADd0AAlA3AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAB5AABARA5XIwpRDCggAARdwyXEAGPm0AAAAAgAADd0AAlA3AABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820992,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGL1\/AAAAAgAADd0ABX9fAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820993,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAB9AABARA5XIwpRCCggAARdwpnwAGO1\/AAAAAgAADd0ABX9fAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820993,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGKgIAAAAAgAADd0ABpDWAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820993,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACBAABARA5LIwpRECggAARdwqnkAGNgIAAAAAgAADd0ABpDWAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820993,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIg4AAAAAgAADd4AAsBGAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820994,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLxBAAAAAgAADd4ABaaXAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820995,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGK16AAAAAgAADd4ABaepAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820996,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGFCaAAAAAgAADd4ABc1VAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820997,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA90AAAAAgAADd4ABfSsAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820998,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB3IAAAAAgAADd4ABkQvAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432820999,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPM5AAAAAgAADd4ABkUFAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821000,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNI4AAAAAgAADd4ABmm8AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821001,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLbWAAAAAgAADd4ABpC3AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821001,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACFAABARE5PIwoRCCggAARdwq8sAGObWAAAAAgAADd4ABpC3AABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821001,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJr5AAAAAgAADd4ABpGrAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821002,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFLyAAAAAgAADd4ABwdUAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821002,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACJAABARE5HIwoRDCggAARdwmREAGILyAAAAAgAADd4ABwdUAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821002,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGINPAAAAAgAADd4AB6IQAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821002,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACNAABARE4\/IwoRECggAARdwzfYAGLNPAAAAAgAADd4AB6IQAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821002,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGEydAAAAAgAADd4AB8p6AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821003,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGCJUAAAAAgAADd4AB\/FWAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821004,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGFyuAAAAAgAADd4ACQPgAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821005,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGCEZAAAAAgAADd4ACQH4AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821006,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGOVGAAAAAgAADd4ADF5sAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821007,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGNkAAAAAAgAADd4ADF9gAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821008,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGKp9AAAAAgAADd4ADF\/5AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821009,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGL3BAAAAAgAADd4ADGCRAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":1,"flow_packet_id":14,"flow_first_seen":1432820948836,"flow_last_seen":1432820949347,"flow_tot_l4_data_len":10113,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2784,"flow_avg_l4_data_len":722,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.24","src_port":40467,"dst_port":80,"l4_proto":"tcp"}
+0457{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":0,"flow_packet_id":9,"flow_first_seen":1432820948562,"flow_last_seen":1432820948767,"flow_tot_l4_data_len":848,"flow_min_l4_data_len":20,"flow_max_l4_data_len":568,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.119.48","src_port":53497,"dst_port":80,"l4_proto":"tcp"}
+0386{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821010,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGPInAAAAAgAADd4ADGFIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821011,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGKMiAAAAAgAADd4ADGHCAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821012,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGLfNAAAAAgAADd4ADqg3AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821013,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGKtOAAAAAgAADd4ADqmHAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGOYEAAAAAwAADd8AATrvAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACRAABARDUnIuYqSCggAARdwzCEAGBYFAAAAAwAADd8AATrvAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGLHkAAAAAwAADd8AAYjmAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACVAABARGfjIuX3iCggAARdwvvoAGOHkAAAAAwAADd8AAYjmAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGMzpAAAAAwAADd8AAkz\/AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACZAABARA43IwpRDCggAARdwyXEAGPzpAAAAAwAADd8AAkz\/AABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGLwtAAAAAwAADd8ABYCuAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACdAABARA43IwpRCCggAARdwpnwAGOwtAAAAAwAADd8ABYCuAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGKcRAAAAAwAADd8ABpHKAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAChAABARA4rIwpRECggAARdwqnkAGNcRAAAAAwAADd8ABpHKAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821014,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIdgAAAAAwAADeAAAsEbAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1432820949806,"flow_last_seen":1432821014655,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821015,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLvjAAAAAwAADeAABabyAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1432820950935,"flow_last_seen":1432821015651,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0385{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821016,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGK1YAAAAAwAADeAABafIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1432820951932,"flow_last_seen":1432821016651,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0387{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821017,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGE\/BAAAAAwAADeAABc4rAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1432820952931,"flow_last_seen":1432821017651,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821018,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA+uAAAAAwAADeAABfRvAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1432820953931,"flow_last_seen":1432821018651,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821019,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB7YAAAAAwAADeAABkMcAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1432820954931,"flow_last_seen":1432821019651,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821020,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPQqAAAAAwAADeAABkQRAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1432820955933,"flow_last_seen":1432821020651,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821021,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNJTAAAAAwAADeAABmmeAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1432820956931,"flow_last_seen":1432821021652,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821022,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLItAAAAAwAADeAABpVdAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821022,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAClAABARE4vIwoRCCggAARdwq8sAGOItAAAAAwAADeAABpVdAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821022,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJYxAAAAAwAADeAABpZwAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1432820957985,"flow_last_seen":1432821022695,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821023,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFQBAAAAAwAADeAABwZCAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821023,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACpAABARE4nIwoRDCggAARdwmREAGIQBAAAAAwAADeAABwZCAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821023,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGH4sAAAAAwAADeAAB6cwAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821023,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACtAABARE4fIwoRECggAARdwzfYAGK4sAAAAAwAADeAAB6cwAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821023,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGEzXAAAAAwAADeAAB8o9AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1432820959095,"flow_last_seen":1432821023795,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0387{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821024,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rIKCAAByMKFQ96sF3AAGCNFAAAAAwAADeAAB\/BiAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1432820960101,"flow_last_seen":1432821024791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821025,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37MKCAAByMKIQo7IF3AAGF2AAAAAAwAADeAACQMLAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1432820962101,"flow_last_seen":1432821025791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0387{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821026,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rEKCAAByMKFRM9DF3AAGB8PAAAAAwAADeAACQP\/AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1432820961101,"flow_last_seen":1432821026791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821027,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37EKCAAByMKIRKueF3AAGOUlAAAAAwAADeAADF6KAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1432820963101,"flow_last_seen":1432821027791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821028,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bMKCAAByMKGQrjyF3AAGNjAAAAAAwAADeAADF+dAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1432820964101,"flow_last_seen":1432821028791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821029,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bEKCAAByMKGRObaF3AAGKo9AAAAAwAADeAADGA2AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1432820965101,"flow_last_seen":1432821029791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0387{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821030,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rIKCAAByMKVQ8P\/F3AAGL2BAAAAAwAADeAADGDOAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1432820966101,"flow_last_seen":1432821030791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821031,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rEKCAAByMKVRI7hF3AAGPIFAAAAAwAADeAADGFnAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1432820967101,"flow_last_seen":1432821031791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0387{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821032,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR37IKCAAByMKIQ+ptF3AAGKLiAAAAAwAADeAADGH\/AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1432820968101,"flow_last_seen":1432821032791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821033,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR0rMKCAAByMKVQoJMF3AAGLfoAAAAAwAADeAADqgZAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1432820969101,"flow_last_seen":1432821033791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0386{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821034,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4bIKCAAByMKGQ5x6F3AAGKvFAAAAAwAADeAADqkNAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1432820970111,"flow_last_seen":1432821034791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp","ndpi": {"proto":"EAQ","category":"Network"}}
+0385{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821035,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3WwKCAAByLmKkswhF3AAGOYfAAAABAAADeEAATrRAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821035,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsACxAABARDUHIuYqSCggAARdwzCEAGBYgAAAABAAADeEAATrRAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821035,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR6hwKCAAByLl94r76F3AAGLJ6AAAABAAADeEAAYhNAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821035,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAC1AABARGfDIuX3iCggAARdwvvoAGOJ6AAAABAAADeEAAYhNAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821035,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07IKCAAByMKUQ8lxF3AAGM41AAAABAAADeEAAkuwAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821036,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAC5AABARA4XIwpRDCggAARdwyXEAGP41AAAABAAADeEAAkuwAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821036,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07MKCAAByMKUQqZ8F3AAGLxnAAAABAAADeEABYBxAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821036,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAC9AABARA4XIwpRCCggAARdwpnwAGOxnAAAABAAADeEABYBxAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821036,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR07EKCAAByMKURKp5F3AAGKdLAAAABAAADeEABpGNAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821036,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsADBAABARA4LIwpRECggAARdwqnkAGNdLAAAABAAADeEABpGNAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821036,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rMKCAAByMKNQqHeF3AAGIc+AAAABAAADeIAAsE6AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821037,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rEKCAAByMKNRId\/F3AAGLuEAAAABAAADeIABadOAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821038,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rIKCAAByMKJQ5k1F3AAGKz5AAAABAAADeIABagkAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821039,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rMKCAAByMKJQtBqF3AAGE9jAAAABAAADeIABc6GAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821040,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR3rEKCAAByMKJROo3F3AAGA63AAAABAAADeIABfVjAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821041,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rIKCAAByMKBQ5RhF3AAGB9PAAAABAAADeIABkKiAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821042,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rMKCAAByMKBQr4aF3AAGPSDAAAABAAADeIABkO1AACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821043,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR5rEKCAAByMKBRLpiF3AAGNE+AAAABAAADeIABmqwAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821044,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47MKCAAByMKEQqvLF3AAGLWfAAAABAAADeIABpHoAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821044,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsADFAABARE4PIwoRCCggAARdwq8sAGOWfAAAABAAADeIABpHoAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821044,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR2rIKCAAByMKNQ72zF3AAGJnBAAAABAAADeIABpLdAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821045,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47IKCAAByMKEQ5kRF3AAGFRaAAAABAAADeIABwXmAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821045,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsADJAABARE4HIwoRDCggAARdwmREAGIRaAAAABAAADeIABwXmAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821045,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR47EKCAAByMKERM32F3AAGHtMAAAABAAADeIAB6oNAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821045,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsADNAABARE3\/IwoRECggAARdwzfYAGKtMAAAABAAADeIAB6oNAABgAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","pkt_oversize":false,"pkt_ts":1432821045,"pkt_len":58,"pkt":"ABoRAAACABoRAAABCABFAAAsAABAAEAR4rMKCAAByMKFQttAF3AAGE3JAAAABAAADeIAB8lIAACQAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":16,"flow_packet_id":5,"flow_first_seen":1432820957985,"flow_last_seen":1432821044555,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.67","src_port":48563,"dst_port":6000,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":18,"flow_packet_id":10,"flow_first_seen":1432820959035,"flow_last_seen":1432821045664,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.68","src_port":52726,"dst_port":6000,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":3,"flow_packet_id":10,"flow_first_seen":1432820949685,"flow_last_seen":1432821035985,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.125.226","src_port":48890,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":13,"flow_packet_id":5,"flow_first_seen":1432820955933,"flow_last_seen":1432821042151,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.66","src_port":48666,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1432820950801,"flow_last_seen":1432821036105,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.66","src_port":42620,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1432820960101,"flow_last_seen":1432821024791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.67","src_port":57004,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1432820962101,"flow_last_seen":1432821025791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.66","src_port":36552,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1432820965101,"flow_last_seen":1432821029791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.68","src_port":59098,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1432820967101,"flow_last_seen":1432821031791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.68","src_port":36577,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1432820961101,"flow_last_seen":1432821026791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.68","src_port":53059,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":8,"flow_packet_id":5,"flow_first_seen":1432820950935,"flow_last_seen":1432821037152,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.68","src_port":34687,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":10,"flow_packet_id":5,"flow_first_seen":1432820952931,"flow_last_seen":1432821039151,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.66","src_port":53354,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1432820964101,"flow_last_seen":1432821028791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.66","src_port":47346,"dst_port":6000,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":17,"flow_packet_id":10,"flow_first_seen":1432820958981,"flow_last_seen":1432821045604,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.67","src_port":39185,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":9,"flow_packet_id":5,"flow_first_seen":1432820951932,"flow_last_seen":1432821038152,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.67","src_port":39221,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":4,"flow_packet_id":10,"flow_first_seen":1432820949735,"flow_last_seen":1432821036045,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.67","src_port":51569,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":5,"flow_packet_id":5,"flow_first_seen":1432820949806,"flow_last_seen":1432821036155,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.141.66","src_port":41438,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":11,"flow_packet_id":5,"flow_first_seen":1432820953931,"flow_last_seen":1432821040151,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.137.68","src_port":59959,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1432820969101,"flow_last_seen":1432821033791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.66","src_port":33356,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":14,"flow_packet_id":5,"flow_first_seen":1432820956931,"flow_last_seen":1432821043151,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.68","src_port":47714,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1432820968101,"flow_last_seen":1432821032791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.67","src_port":60013,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":7,"flow_packet_id":10,"flow_first_seen":1432820950865,"flow_last_seen":1432821036155,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.148.68","src_port":43641,"dst_port":6000,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":2,"flow_packet_id":10,"flow_first_seen":1432820949586,"flow_last_seen":1432821035895,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.185.138.146","src_port":52257,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":19,"flow_packet_id":5,"flow_first_seen":1432820959095,"flow_last_seen":1432821045664,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.133.66","src_port":56128,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1432820963101,"flow_last_seen":1432821027791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.136.68","src_port":43934,"dst_port":6000,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":15,"flow_packet_id":10,"flow_first_seen":1432820957932,"flow_last_seen":1432821044555,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.132.66","src_port":43979,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1432820966101,"flow_last_seen":1432821030791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.149.67","src_port":50175,"dst_port":6000,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":12,"flow_packet_id":5,"flow_first_seen":1432820954931,"flow_last_seen":1432821041151,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.129.67","src_port":37985,"dst_port":6000,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1432820970111,"flow_last_seen":1432821034791,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.194.134.67","src_port":40058,"dst_port":6000,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/EAQ.pcap"}
diff --git a/tests/result/nDPId_KakaoTalk_chat.pcap.txt b/tests/result/nDPId_KakaoTalk_chat.pcap.txt
new file mode 100644
index 000000000..2f1bdf1ec
--- /dev/null
+++ b/tests/result/nDPId_KakaoTalk_chat.pcap.txt
@@ -0,0 +1,696 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069021,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwAAEAAQBHSIAoYUrwKvAEBljAANQAogKaG7QEAAAEAAAAAAAAEYXV0aAVrYWthbwNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":79,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD8AAEAAQBHSHQoYUrwKvAEBixMANQArGNJpegEAAAEAAAAAAAAHYWMtdGFsawVrYWthbwNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":78,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD4AAEAAQBHSHgoYUrwKvAEB4dgANQAqGG9RAgEAAAEAAAAAAAAGa2F0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHgb0gAANREBEwq8AQEKGFK8ADWLEwBk4PlpeoGAAAEAAwAAAAAHYWMtdGFsawVrYWthbwNjb20AAAEAAcAMAAUAAQAABZUADQdhYy10YWxrAmdswBTALwABAAEAAACbAARuTI1wwC8AAQABAAAAmwAEAckAJw==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGIb0wAANREBKAq8AQEKGFK8ADWWMABOrZ2G7YGAAAEAAgAAAAAEYXV0aAVrYWthbwNjb20AAAEAAcAMAAUAAQAABccACgRhdXRoAmdswBHALAABAAEAAABWAATSZ\/AP","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":166,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAJbtdwAANREvTwq8AQEKGFK8ADXh2ACCeK5RAoGAAAEABQAAAAAGa2F0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAD9AAMBmthdGFsawJnbMATwC4AAQABAAAAegAEbkyOIsAuAAEAAQAAAHoABAHJAD3ALgABAAEAAAB6AAQByQA\/wC4AAQABAAAAegAEbkyNJQ==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":84,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEQAAEAAQBHSGAoYUrwKvAEBo7UANQAwrR37RAEAAAEAAAAAAAAHYm9va2luZwRsb2NvBWtha2FvA2NvbQAAAQAB","pkt_caplen":84,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBMmwANQAtbIX3UQEAAAEAAAAAAAAEdXAtbQR0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwAAEAAQBHSIAoYUrwKvAEB5boANQAoZpVNewEAAAEAAAAAAAAEaXRlbQVrYWthbwNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGIb1QAANREBJgq8AQEKGFK8ADXlugBOjwdNe4GAAAEAAgAAAAAEaXRlbQVrYWthbwNjb20AAAEAAcAMAAUAAQAABdUACgRpdGVtAmdswBHALAABAAEAAADUAATSZ\/AP","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGzteAAANREveAq8AQEKGFK8ADUybABYuHj3UYGAAAEAAgAAAAAEdXAtbQR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAD8wAPBHVwLW0EdGFsawJnbMAWwDEAAQABAAAAeAAE0mfwEA==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHLteQAANREvcQq8AQEKGFK8ADWjtQBeT7D7RIGAAAEAAgAAAAAHYm9va2luZwRsb2NvBWtha2FvA2NvbQAAAQABwAwABQABAAAD8wASB2Jvb2tpbmcEbG9jbwJnbMAZwDQAAQABAAAAeAAEbkyOfQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBFykANQAtVi4l7AEAAAEAAAAAAAAEdXAtcAR0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBI4YANQAt2SeQlQEAAAEAAAAAAAAEdXAtdgR0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEB3fQANQAtU9dudwEAAAEAAAAAAAAEdXAtYwR0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGwb1gAANREBGwq8AQEKGFK8ADUXKQBYAAol7IGAAAEAAgAAAAAEdXAtcAR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAFlQAPBHVwLXAEdGFsawJnbMAWwDEAAQABAAAAiwAE0mfwEA==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGwb1wAANREBGgq8AQEKGFK8ADUjhgBYgN2QlYGAAAEAAgAAAAAEdXAtdgR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAFlwAPBHVwLXYEdGFsawJnbMAWwDEAAQABAAAAqwAE0mfwEA==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGztegAANREvdgq8AQEKGFK8ADXd9ABYZqtud4GAAAEAAgAAAAAEdXAtYwR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAD8wAPBHVwLWMEdGFsawJnbMAWwDEAAQABAAAAeAAEbkyNVQ==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBcWUANQAtiQin1QEAAAEAAAAAAAAEdXAtYQR0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":82,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEIAAEAAQBHSGgoYUrwKvAEBYh0ANQAu\/udwlQEAAAEAAAAAAAAFdXAtZ3AEdGFsawVrYWthbwNjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEBqEUANQAtOYa3iAEAAAEAAAAAAAAEZG4tbAR0YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGwb2AAANREBGQq8AQEKGFK8ADVxZQBYBjqn1YGAAAEAAgAAAAAEdXAtYQR0YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAFwgAPBHVwLWEEdGFsawJnbMAWwDEAAQABAAAARAAE0mfwEA==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":97,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFHtewAANREvkAq8AQEKGFK8ADWoRQA9yiS3iIGAAAEAAQAAAAAEZG4tbAR0YWxrBWtha2FvA2NvbQAAAQABwAwAAQABAAAEOQAEbkyNVg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAG4b2QAANREBFgq8AQEKGFK8ADViHQBaJnpwlYGAAAEAAgAAAAAFdXAtZ3AEdGFsawVrYWthbwNjb20AAAEAAcAMAAUAAQAABasAEAV1cC1ncAR0YWxrAmdswBfAMgABAAEAAACsAARuTI0a","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzzVkAAPwZJoAoYUrxn9jn7x00fkMsN9JkAAAAAoAI5CGIPAAACBAV4BAIICgALB88AAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":76,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALQZO92f2OfsKGFK8H5DHTSs\/AzbLDfSaoBIWoGVTAAACBAV4BAIICpj2V6UACwfPAQMDCQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzV0AAPwZJpwoYUrxn9jn7x00fkMsN9JorPwM3gBAAc6oGAAABAQgKAAsH25j2V6U=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1150{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":657,"pkt":"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","pkt_caplen":657,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADRbH0AALgby32f2OfsKGFK8H5DHTSs\/AzfLDfbngBAADqdRAAABAQgKmPZYbQALB+A=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0634{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":274,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAQJbIEAALgbyEGf2OfsKGFK8H5DHTSs\/AzfLDfbngBgADsrbAAABAQgKmPZYlAALB+DKAAAAoFkC\/4gP8tCNfpuCjPQ03kX5ZT2hwz0SDRU07eJflBwtFPV5JKc4qwZt9JmLd5nDiTYuAz6hED52mR1p+zgppELWWzSgjEgOr0doFoIFR2TYBxPm5xdGUCIRoKCHpKsU3VWhb+nYsDx5Pf8LCQ5Oo8lRB6Gg9+zmhy4riv76TlqCUugtK45ol2sMT3a1TCBjfuA7G\/n4jpBG8I4WhofsXSCtmEkKDblHy\/21GbGey\/YH3wn8eRewb+YRKoHNU\/+oeWFRMCrCIIrlzQ==","pkt_caplen":274,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069022,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzWUAAPwZJpQoYUrxn9jn7x00fkMsN9ucrPwQFgBAAe6XcAAABAQgKAAsH85j2WJQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069026,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq7kAArAYRrNg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069026,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069026,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq70AArQYQq9g63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069026,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069026,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzmtkAAPwbpMgoYUryt\/GECiq8Bu\/wa79AAAAAAoAI5CCGaAAACBAV4BAIICgALCWYAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069026,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFPzWkAAPwZJhQoYUrxn9jn7x00fkMsN9ucrPwQFgBgAezf0AAABAQgKAAsJcpj2WJQbAAAAo1kC\/4gP7taEcNXOxadg3tEhq8tPTAcjxeAa","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFPzW0AAPwZJhAoYUrxn9jn7x00fkMsN9ucrPwQFgBgAezedAAABAQgKAAsJyZj2WJQbAAAAo1kC\/4gP7taEcNXOxadg3tEhq8tPTAcjxeAa","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzmt0AAPwbpMQoYUryt\/GECiq8Bu\/wa79AAAAAAoAI5CCE2AAACBAV4BAIICgALCcoAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq8UAArQYQqdg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACyOBEAA+AaI9K38YQIKGFK8AbuKr2Aiq0X8Gu\/RYBIRHJekAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmuEAAPwbpRAoYUryt\/GECiq8Bu\/wa79FgIqtGUBA5CIc5AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069027,"pkt_len":240,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAODmuUAAPwboiwoYUryt\/GECiq8Bu\/wa79FgIqtGUBg5CCTlAAAWAwEAswEAAK8DAVU9HySXfmPaSP66Sz+6k6Z\/7zxfemNbfoeAqoBY5ktfAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":240,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgUEEAA+AZ+3XgcGvIKGFK8AFCGx0Ds0yKXy0vyUBQAAEEKAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACynf0AA+AZvea38YQIKGFK8AbuKr2YOB1z8Gu\/RYBIRHDWiAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmukAAPwbpQgoYUryt\/GECiq8Bu\/wa8IlgIqtGUBA5CIaBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgaA+a38YQIKGFK8AbuKr2Aiq0b8Gu\/RYBClZAjXAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAF9bIUAALgbysmf2OfsKGFK8H5DHTSs\/BAXLDfcGgBgADgZ1AAABAQgKmPZuZQALCcknAAAAo1kC\/4gP7taEcNXOxadg3tEhv8tPTBMjxeAKcsC92PhHEHcZ7kW5","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzXEAAPwZJogoYUrxn9jn7x00fkMsN9wYrPwQwgBAAe42TAAABAQgKAAsKIZj2bmU=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069028,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq8kAArAYRqNg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069029,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBHSGwoYUrwKvAEB7lMANQAt50i5OgEAAAEAAAAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":81,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEEAAEAAQBEUGwoYUrwKvL8B7lMANQAtKUi5OgEAAAEAAAAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGccBgAANREA8Aq8AQEKGFK8ADXuUwBTwyO5OoGAAAEAAgAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAAHYwAKBHBsdXMCZ2zAFsAxAAEAAQAAAQkABNJn8A8=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGf90QAANRFhIwq8vwEKGFK8ADXuUwBTEye5OoGAAAEAAgAAAAAJcGx1cy10YWxrBWtha2FvA2NvbQAAAQABwAwABQABAAADlQAKBHBsdXMCZ2zAFsAxAAEAAQAAAMkABNJn8A8=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEXAAIMZuAAAQAE5cQoYUrwKvL8BAwMj8wAAAABFAABn\/dEAADURYSMKvL8BChhSvAA17lMAUxMnuTqBgAABAAIAAAAACXBsdXMtdGFsawVrYWthbwNjb20AAAEAAcAMAAUAAQAAA5UACgRwbHVzAmdswBbAMQABAAEAAADJAATSZ\/AP","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwrfUAAPwbw8woYUrzSZ\/APk70Bu6\/qIaMAAAAAoAI5CH35AAACBAV4BAIICgALCt4AAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwUQ0AA+AZPPdJn8A8KGFK8AbuTvWC6rQuv6iGkYBIRHPMdAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrfkAAPwbxBgoYUrzSZ\/APk70Bu6\/qIaRguq0MUBA5COKyAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0630{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":272,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAQArf0AAPwbwLQoYUrzSZ\/APk70Bu6\/qIaRguq0MUBg5CN2\/AAAWAwEA0wEAAM8DAVU9HyfJAvY\/iCLGWBYFY6M34NB+ZLfXCieB9l4jqbmhICKG\/HsNhwdjbCYE9375OW83ETGox9gGaZ9Lj69f7wR6AEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABE=","pkt_caplen":272,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgbNgNJn8A8KGFK8AbuTvWC6rQyv6iGkYBClZGRQAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcBkAAjwawftJn8A8KGFK8AbuTvWC6rQyv6iJ8UBCkjHZWAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2060{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":224,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANAcCEAAjwav1NJn8A8KGFK8AbuTvWC6sgyv6iJ8UBikjBF9AACCA1SgAwIBAgIQTV8sNAiyTCDNbVB+JE3J7DANBgkqhkiG9w0BAQUFADCBqTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIwMDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcmk=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrgEAAPwbxBAoYUrzSZ\/APk70Bu6\/qInxgurIMUBBBANTiAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrgUAAPwbxAwoYUrzSZ\/APk70Bu6\/qInxgurK0UBBLAMo6AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrgkAAPwbxAgoYUrzSZ\/APk70Bu6\/qInxgure0UBBVALs6AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":848,"pkt":"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","pkt_caplen":848,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrg0AAPwbxAQoYUrzSZ\/APk70Bu6\/qInxgurrMUBBfAK4iAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":240,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAODmu0AAPwboiQoYUryt\/GECiq8Bu\/wa79FgIqtGUBg5CCTlAAAWAwEAswEAAK8DAVU9HySXfmPaSP66Sz+6k6Z\/7zxfemNbfoeAqoBY5ktfAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":240,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0785{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":382,"pkt":"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","pkt_caplen":382,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACheakAAjwYhk638YQIKGFK8AbuKr2Aiq0b8GvCJUBCkrBrdAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADz6+UAAPwaAjQoYUrwfDURUkrEAUI6+8f0AAAAAoAI5CDAyAAACBAV4BAIICgALCwQAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcC0AAjwawedJn8A8KGFK8AbuTvWC6usyv6iPCUBCkjGdQAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy6BkAA+AYIkB8NRFQKGFK8AFCSsWQ58S+OvvH+YBIRHF3ZAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACj6+kAAPwaAoAoYUrwfDURUkrEAUI6+8f5kOfEwUBA5CE1uAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":83,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEMbkEAAjgYQ+x8NREkKGFK8Abu3n2dAc1oKhoE3UBigBOCLAAAVAwEAFgdiLTjhEFi+7He1g59CCs5hRzaz7rI=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgOyEAAQAZr3goYUrwfDURJt58BuwqGgTdnQHN1UBBuKMBEAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgbkUAAjgYRFR8NREkKGFK8Abu3n2dAc3UKhoE3UBGgBC\/XAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGMcDEAAjwawPdJn8A8KGFK8AbuTvWC6usyv6iPCUBikjKawAAAUAwEAAQEWAwEAMP2YqIRx81FP6vWf9xoF+Y44tOZ0pKvR4zB1Z+xg1hwMpHGHMU0e4rS5aw\/T1T6okA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgrhUAAPwbw\/woYUrzSZ\/APk70Bu6\/qI8JgursHUBBfAKyhAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgOyUAAQAZr3QoYUrwfDURJt58BuwqGgTdnQHN2UBBuKMBEAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0842{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":429,"pkt":"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","pkt_caplen":429,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":243,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOP6+0AAPwZ\/5AoYUrwfDURUkrEAUI6+8f5kOfEwUBg5CLGLAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMy4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K","pkt_caplen":243,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0340{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAArAYOlx8NRFQKGFK8AFCSsWQ58TCOvvH+YBD\/\/3RwAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcDUAAjwawd9Jn8A8KGFK8AbuTvWC6uwev6iU3UBCkjGWgAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACif30AArQZtnx8NRFQKGFK8AFCSsWQ58TCOvvK5UBD\/\/4W7AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":78,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD4AAEAAQBHSHgoYUrwKvAEBYBQANQAqICQnwAEAAAEAAAAAAAADYXBpCGZhY2Vib29rA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2051{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmvEAAPwbpQAoYUryt\/GECiq8Bu\/wa8IlgIrBGUBBBAHmJAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2057{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmvUAAPwbpPwoYUryt\/GECiq8Bu\/wa8IlgIrVGUBBLAGqJAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":1043,"pkt":"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","pkt_caplen":1043,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmvkAAPwbpPgoYUryt\/GECiq8Bu\/wa8IlgIrkhUBBVAFyuAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":118,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGbtpgAANREvUAq8AQEKGFK8ADVgFABSeRsnwIGAAAEAAgAAAAADYXBpCGZhY2Vib29rA2NvbQAAAQABwAwABQABAAAD6wAMBHN0YXIEYzEwcsAQwC4AAQABAAAACQAEHw1EVA==","pkt_caplen":118,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwzN0AAPwZIUAoYUrwfDURUsJkBu9qbOCoAAAAAoAI5CH68AAACBAV4BAIICgALCx0AAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0843{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":429,"pkt":"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","pkt_caplen":429,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":76,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAAjgYshx8NRFQKGFK8AbuwmcDC6aramzgroBKpsCsUAAACBAV4BAIICqKRlfAACwsdAQMDBg==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzOEAAPwZIVwoYUrwfDURUsJkBu9qbOCvAwumrgBAAcwLZAAABAQgKAAsLJaKRlfA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1111{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":631,"pkt":"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","pkt_caplen":631,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":178,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKLmv0AAPwbowwoYUryt\/GECiq8Bu\/wa8IlgIrkhUBhVAKBwAAAWAwEARhAAAEJBBM78NBVkmlFe38Dfh6ncFED6agiQz70L7JebybIcbivtqYgLE21ZPjl1FKuZKvkcvTP63OO1EgWcrskFJfHlUSgUAwEAAQEWAwEAJK1MANIyoofFiVug6n2FdBKRHcbugRV3r\/1BqMFM+QjhNjMuhQ==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0715{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":339,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUOf4EAArQZsgx8NRFQKGFK8AFCSsWQ58TCOvvK5UBj\/\/wX6AABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogM3o2a2UxVXU0SHNpbnZIcU5ha1JSUXdtUU5ZQUd1Z0NwV2Y5Yk5CNE9velJSYk1aa3FhSXh6Y2puazc5R3VzZTJQQXN4c0M0QTVRRmd5RlQ1ZStBV1E9PQ0KRGF0ZTogU3VuLCAyNiBBcHIgMjAxNSAxNzoyMzo1MCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":339,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACj6\/EAAPwaAngoYUrwfDURUkrEAUI6+8rlkOfJLUBA8uEfoAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgcD0AAjwawddJn8A8KGFK8AbuTvWC6vGyv6iasUBCjF2Q7AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSZL0AAjwaSXx8NRFQKGFK8AbuwmcDC6avamzpegBACnv4AAAABAQgKopGWaQALCyY=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":80,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEAAAEAAQBHSHAoYUrwKvAEBTH4ANQAsPIiqhwEAAAEAAAAAAAAFZ3JhcGgIZmFjZWJvb2sDY29tAAABAAE=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069030,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChebkAAjwYhj638YQIKGFK8AbuKr2AiuSH8GvEDUBCkrAyIAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2212{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzOkAAPwZIVQoYUrwfDURUsJkBu9qbOl7Awu8XgBAAiPp2AAABAQgKAAsLNqKRlo0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2218{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzO0AAPwZIVAoYUrwfDURUsJkBu9qbOl7AwvSDgBAAnvTzAAABAQgKAAsLN6KRlo0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":863,"pkt":"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","pkt_caplen":863,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzPEAAPwZIUwoYUrwfDURUsJkBu9qbOl7AwveegBAAtPHCAAABAQgKAAsLN6KRlo0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHocCwAANREA2Aq8AQEKGFK8ADVMfgBmmjSqh4GAAAEAAwAAAAAFZ3JhcGgIZmFjZWJvb2sDY29tAAABAAHADAAFAAEAAAVxAAYDYXBpwBLAMAAFAAEAAAV2AAwEc3RhcgRjMTBywBLAQgABAAEAAAARAAQfDURG","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2155{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1401,"pkt":"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","pkt_caplen":1401,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADx6qUAAPwYA7AoYUrwfDURGqj0Bu4p9cZMAAAAAoAI5CJu+AAACBAV4BAIICgALCzoAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0775{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":381,"pkt":"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","pkt_caplen":381,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwwtUAA+AaR7x8NREYKGFK8AbuqPWAZ05aKfXGUYBIRHOtUAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6qkAAPwYA\/woYUrwfDURGqj0Bu4p9cZRgGdOXUBA5CNrpAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1096{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":621,"pkt":"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","pkt_caplen":621,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgriEAAPwbw\/AoYUrzSZ\/APk70Bu6\/qJqxgur2xUBBzAJMNAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgYspR8NREYKGFK8AbuqPWAZ05eKfXGUYBClZFyHAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeLEAAjwZNfB8NREYKGFK8AbuqPWAZ05eKfXPJUBCjUm5qAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":85,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEUAAEAAQBHSFwoYUrwKvAEBD7EANQAxznCJ\/wEAAAEAAAAAAAAKZGV2ZWxvcGVycwhmYWNlYm9vawNjb20AAAEAAQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0706{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":326,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAATaZM0AAjwaRWR8NRFQKGFK8AbuwmcDC957amz+TgBgClXT0AAABAQgKopGXNgALCzoWAwMAygQAAMYAAU\/wAMBVHjamp1t+k3aO+5WCeTt+f0Mn4qniaX\/FZd\/VQ2Tp46vrWFw57jV912dRcSdO8HzZQNIm6laX4t1LURyW0VCf46c1zE9Vzp9xa\/X+dr2du3yuL7BfmnzfuI9r5LpQP+4s1t92fSkjv8w2xSWFQtxM+q88564Ji4ONs\/QHo+VjZKQsG403b14UPkQjBg2dtn0ClHdmFrCsiwuOFJh2y0YnLgOAZD7ae\/TYAuVLKJPntFrqj4LBqCnU0j21wE6LGu8UAwMAAQEWAwMAKJruu5VbafH3STS42RhL4saKJbcTH\/lsE1g5BxcgBJ8dk160d\/X\/VM0=","pkt_caplen":326,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAG2ZNEAAjwaSIR8NRFQKGFK8AbuwmcDC+KDamz+TgBgClWBVAAABAQgKopGXNgALCzoXAwMANJruu5VbafH4HCo2Lued2HtDNlUR3bKRAfTGJJefp5xx\/jRoAHPtVYTMzij7PRWD+9jgkws=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGGZNUAAjwaSLB8NRFQKGFK8AbuwmcDC+Nnamz+TgBgClQuqAAABAQgKopGXNwALCzoXAwMAKJruu5VbafH5sQRaWN1yXAIV2NGtD21PaTBD2ciGilS4h+QCr8Qyf28=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzPkAAPwZIUQoYUrwfDURUsJkBu9qbP5PAwvjZgBAAyeqEAAABAQgKAAsLR6KRlzY=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1336,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABSjeLUAAjwZIex8NREYKGFK8AbuqPWAZ05eKfXPJUBCjUo5yAAAWAwMAbgIAAGoDA6\/\/Ua4c\/Z49ONq5ISaENIdBubestbYRwJXDwjnGTSRlAMArAABCAAAAAP8BAAEAAAsABAMAAQIAIwAAM3QAKQ9zcGR5LzMuMS1mYi0wLjUIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xFgMDDNkLAAzVAAzSAAZwMIIGbDCCBVSgAwIBAgIQBnjbTdvaLb44isb+B0TcyDANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBDQS0zMB4XDTE0MDgyODAwMDAwMFoXDTE1MTAyODEyMDAwMFowYTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpNZW5sbyBQYXJrMRcwFQYDVQQKEw5GYWNlYm9vaywgSW5jLjEXMBUGA1UEAwwOKi5mYWNlYm9vay5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATY0d01veJZtvubH1QVjNu\/Tli9R764EPwi6dKemPhJKiX7lEbkQpmEUBxfAf0UJTFcTtlk\/cUMs0bSobxwtIeOo4ID5DCCA+AwHwYDVR0jBBgwFoAUUOpzidsp+xCPnuUBINTeeZlIg\/cwHQYDVR0OBBYEFEMJk0D6EUswM+zyh26NcRjPiryOMIICOwYDVR0RBIICMjCCAi6CDiouZmFjZWJvb2suY29tggxmYWNlYm9vay5jb22CCyouZmJzYnguY29tggsqLmZiY2RuLm5ldIIOKi54eC5mYmNkbi5uZXSCDioueHkuZmJjZG4ubmV0ggZmYi5jb22CCCouZmIuY29tghgqLmZhY2Vib29rY29yZXd3d2kub25pb26CFmZhY2Vib29rY29yZXd3d2kub25pb26CGCouZmJjZG4yM2Rzc3IzanFucS5vbmlvboIWZmJjZG4yM2Rzc3IzanFucS5vbmlvboIYKi5mYnNieDJxNG12Y2w2M3B3Lm9uaW9ughZmYnNieDJxNG12Y2w2M3B3Lm9uaW9ughAqLm0uZmFjZWJvb2suY29tgg8qLm1lc3Nlbmdlci5jb22CDW1lc3Nlbmdlci5jb22CGioubS5mYWNlYm9va2NvcmV3d3dpLm9uaW9ughsqLnh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGXh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGyoueHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIZeHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIOKi54ei5mYmNkbi5uZXSCDHh6LmZiY2RuLm5ldIIbKi54ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughl4ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughhtLmZhY2Vib29rY29yZXd3d2kub25pb24wDgYDVR0PAQH\/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyOS5jcmwwKqAooCaGJGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0Lg==","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAJ7eLkAAjwZNBB8NREYKGFK8AbuqPWAZ2JeKfXPJUBijUuZWAABjb20vY2EzLWcyOS5jcmwwQgYDVR0gBDswOTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6rEAAPwYA\/QoYUrwfDURGqj0Bu4p9c8lgGdiXUBBBAMu8AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6rUAAPwYA\/AoYUrwfDURGqj0Bu4p9c8lgGdkNUBBBAMtGAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzP0AAPwZIUAoYUrwfDURUsJkBu9qbP5PAwvkGgBAAyepSAAABAQgKAAsLS6KRlzc=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":949,"pkt":"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","pkt_caplen":949,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAIDtrgAANREvLgq8AQEKGFK8ADUPsQBsjjKJ\/4GAAAEAAwAAAAAKZGV2ZWxvcGVycwhmYWNlYm9vawNjb20AAAEAAcAMAAUAAQAAA+oABwRzdGFywBfANQAFAAEAAAPqAAwEc3RhcgRjMTBywBfASAABAAEAAAAIAAQfDURU","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFdeb0AAjwYhX638YQIKGFK8AbuKr2AiuSH8GvEDUBikrNC2AAAUAwEAAQEWAwEAJHrKu96WFqu8nKeQH8cqwfCGUlLzB2z5FQYDCWsQCxSAAj1UjQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6rkAAPwYA+woYUrwfDURGqj0Bu4p9c8lgGd4NUBBLALxGAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6r0AAPwYA+goYUrwfDURGqj0Bu4p9c8lgGeGKUBBVAK7JAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmwEAAPwbpPAoYUryt\/GECiq8Bu\/wa8QNgIrlQUBBVAFwFAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":87,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEcAAEAAQBHSFQoYUrwKvAEBOToANQAzWvOyogEAAAEAAAAAAAABMgI5NwMyNTIDMTczB2luLWFkZHIEYXJwYQAADAAB","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1684{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1053,"pkt":"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","pkt_caplen":1053,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADxjDkAAPwYYeQoYUrwfDURUsJsBu8tPaEMAAAAAoAI5CF29AAACBAV4BAIICgALC00AAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAHLtrwAANREvOwq8AQEKGFK8ADU5OgBeI2eyooGAAAEAAQAAAAABMgI5NwMyNTIDMTczB2luLWFkZHIEYXJwYQAADAABwAwADAABAAAEYQAfEG1xdHQtc2h2LTE0LWZyYzEIZmFjZWJvb2sDY29tAA==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACw2WEAA+AaMPh8NRFQKGFK8Abuwm2JwnlDLT2hEYBIRHOBVAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjD0AAPwYYjAoYUrwfDURUsJsBu8tPaERicJ5RUBA5CM\/qAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1104{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":626,"pkt":"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","pkt_caplen":626,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeMUAAjgZOdx8NREYKGFK8AbuqPWAZ4YqKfXeuUBCjUlySAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1222{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":710,"pkt":"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","pkt_caplen":710,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgYslx8NRFQKGFK8Abuwm2JwnlHLT2hEYBClZFGIAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0687{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":314,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAASreMkAAjgZNdB8NREYKGFK8AbuqPWAZ4YqKfXeuUBijUorpAAAWAwMAygQAAMYAAU\/wAMBVHjam70NsXKmFktX9OLRV3YW3KiUQuOqN1FzWPcBO2Et03yyINLQdz\/ndDVoWPD7U8NC3SmJyo5jUpwEoAJ5wOCBOOxuOf5V+3LtD+BB8hm1unEtAgc7cGUi7GUhLz2NLFgDn2+Z1lyRyjjjcwNVdiAVTn5\/EDwbsubmyUkRKAIA5a\/2kEtaZBGPYMQ253A7gaxVCvOGXElG4B\/gzVDtYtARPtVTYxmpNSN9FtwTopft1MGsZC3eYVVN8EWOh3YsUAwMAAQEWAwMAKD2B\/Wu8yi7agEyRP4bzs5+7xX0O7zbhuRmJUe+IgRLm6WQCzJkvkcQ=","pkt_caplen":314,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGHeM0AAjgZOPB8NREYKGFK8AbuqPWAZ4oyKfXeuUBijUordAAAXAwMAND2B\/Wu8yi7b5Ns5VXFaiPnXdgHuqTcZ5MIFcOqsqsqmIDEchRtinahnJiOw9fPrlgUNgXg=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFXeNEAAjgZORx8NREYKGFK8AbuqPWAZ4sWKfXeuUBijUjPHAAAXAwMAKD2B\/Wu8yi7czonnIENQMF41NeMVLDFol62z2PeO2U2xtJvF\/6az1l4=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjTSEAAjwZYUh8NRFQKGFK8Abuwm2JwnlHLT2p+UBCkxGH0AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6sUAAPwYA+AoYUrwfDURGqj0Bu4p9d65gGeLFUBBfAJ+pAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChecEAAjgYija38YQIKGFK8AbuKr2AiuVD8GvORUBCkrAnLAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6skAAPwYA9woYUrwfDURGqj0Bu4p9d65gGeLyUBBfAJ98AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2052{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1336,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABSjTSUAAjwZTUR8NRFQKGFK8Abuwm2JwnlHLT2p+UBCkxN7TAAAWAwMAbgIAAGoDA8C8sU+4sP7tT3CKYvhEo\/qSTcQI4WbvTwFIUXjcfkAWAMArAABCAAAAAP8BAAEAAAsABAMAAQIAIwAAM3QAKQ9zcGR5LzMuMS1mYi0wLjUIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xFgMDDNkLAAzVAAzSAAZwMIIGbDCCBVSgAwIBAgIQBnjbTdvaLb44isb+B0TcyDANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBDQS0zMB4XDTE0MDgyODAwMDAwMFoXDTE1MTAyODEyMDAwMFowYTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpNZW5sbyBQYXJrMRcwFQYDVQQKEw5GYWNlYm9vaywgSW5jLjEXMBUGA1UEAwwOKi5mYWNlYm9vay5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATY0d01veJZtvubH1QVjNu\/Tli9R764EPwi6dKemPhJKiX7lEbkQpmEUBxfAf0UJTFcTtlk\/cUMs0bSobxwtIeOo4ID5DCCA+AwHwYDVR0jBBgwFoAUUOpzidsp+xCPnuUBINTeeZlIg\/cwHQYDVR0OBBYEFEMJk0D6EUswM+zyh26NcRjPiryOMIICOwYDVR0RBIICMjCCAi6CDiouZmFjZWJvb2suY29tggxmYWNlYm9vay5jb22CCyouZmJzYnguY29tggsqLmZiY2RuLm5ldIIOKi54eC5mYmNkbi5uZXSCDioueHkuZmJjZG4ubmV0ggZmYi5jb22CCCouZmIuY29tghgqLmZhY2Vib29rY29yZXd3d2kub25pb26CFmZhY2Vib29rY29yZXd3d2kub25pb26CGCouZmJjZG4yM2Rzc3IzanFucS5vbmlvboIWZmJjZG4yM2Rzc3IzanFucS5vbmlvboIYKi5mYnNieDJxNG12Y2w2M3B3Lm9uaW9ughZmYnNieDJxNG12Y2w2M3B3Lm9uaW9ughAqLm0uZmFjZWJvb2suY29tgg8qLm1lc3Nlbmdlci5jb22CDW1lc3Nlbmdlci5jb22CGioubS5mYWNlYm9va2NvcmV3d3dpLm9uaW9ughsqLnh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGXh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGyoueHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIZeHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIOKi54ei5mYmNkbi5uZXSCDHh6LmZiY2RuLm5ldIIbKi54ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughl4ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughhtLmZhY2Vib29rY29yZXd3d2kub25pb24wDgYDVR0PAQH\/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyOS5jcmwwKqAooCaGJGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0Lg==","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjEUAAPwYYigoYUrwfDURUsJsBu8tPan5icKNRUBBBAMC4AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1703{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1067,"pkt":"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","pkt_caplen":1067,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjEkAAPwYYiQoYUrwfDURUsJsBu8tPan5icKhRUBBLALG4AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjE0AAPwYYiAoYUrwfDURUsJsBu8tPan5icKxEUBBVAKPFAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1955{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1257,"pkt":"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","pkt_caplen":1257,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF16s0AAPwYAwQoYUrwfDURGqj0Bu4p9d65gGeLyUBhfADMmAAAXAwMAMDgatczmcEzHmuU+VrAHitIOA+4DGdOlzrmsgsNaScyVOUhTbCUKH9IMdyRK0lDtUQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":846,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAz56tEAAPwb93goYUrwfDURGqj0Bu4p9d+NgGeLyUBhfAJUIAAAXAwMDETgatczmcEzIKtP\/8PWkIQLS43tWz1oMzqcXYsIhjuXvlF+ZHl\/xJrdm8YJ1DQSAN4SxNdmAh5umlE3djSqQRi7J6Z3WyDYOJebkef9D4+YUQJSfU+gCXEd\/1bb4oonIWSBYqYLwzkX\/2FmSDVXjc8iI6g2aftPj+xZIsnFfD8iB0QHNd6UMA+EHUUgOFlfudN58f+Ip5eS4CYHHSJFXei30kBRNZGj2jjBN8ykzoSOtMReGsiYpHP+UVRc+xA\/uaxRv3bAg2Mm5pBQv8iGgORsazX9qIp9hEYqLOgd1DiB\/cwNZkqXLWucD71Bk7WUgajQcmsrfU0m+p9RZXwYGYHqlUt5\/LKhh0jfTxvWkY5wU9U6Afs8TjW7VNlf6N77bEuUwQf3YcQijF05HEBBa40N\/3xPQhP7ODdRGRyPRl8fufDKCzzY7xgvJ\/nfJ2AQdZUIyh7lZA0kKZ5Q4Q6wze8OoOgW42JxpIVDg2JdQ4+ynv0GhhqBsH95klcBT0EGBAZktVsnAbmFSqQLOv71RMgLkpmp6UlXdwt8Xhskr289ggHTquimGCN1YxdfdTm9IjNsOr0aPIKJ2s87Grl3dEea42cBIV038tsajcVwaaibh2Uli848J8outWLGckVd3\/umtr2HmbVxPT1dPdDowlF\/WReSS\/xB8MNPYlYdgNz1\/BJmu\/JKY8Lel7PeSmKADm\/UHVDodMBry6ZMySyg4Zub5gE3JtruMgJmjYi4dQlZwKpdTIKr4OMy8dD7\/Y1dRAK7aT71d+stAl10NcTC39lIqGOpRM4kDS0CGXz6kjLannMnAeK5Nrs8HwT0kf3SUWreFjcgCNaBGmb53ZcLLQry0B1C43gzo2SRToIlaB+pVV58IdqqCtrE2TQJ7iNxxLS5wriFY7URXj5dsF41i0E+NrVKGkDfq0jl6VVDNVjKJQ1Jw6GGqYwZbXMl\/BqcKFBTRpwCa7oW35lqgjQEqwjTv\/lYsCdLsVvVBljC61i5pjochxYx\/U54MKpTT7eFs7fsgxpnA34SxaYaaAZUfOGlS","pkt_caplen":846,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFd6tUAAPwYAxQoYUrwfDURGqj0Bu4p9evlgGeLyUBhfALs6AAAXAwMAKjgatczmcEzJauANVDmJ9rpTS+PkMJz+kIb4ywAXor8+VwKJzTdZHlotSA==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":93,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAE16tkAAPwYAzgoYUrwfDURGqj0Bu4p9eyhgGeLyUBhfAMv4AAAXAwMAIDgatczmcEzKOovNrrZmlsb2m4KIkvJCa9h6BVwb9xq8","pkt_caplen":93,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjTTEAAjwZYTh8NRFQKGFK8Abuwm2JwrETLT28vUBCkxE9QAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0683{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":314,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAASrTTUAAjwZXSx8NRFQKGFK8Abuwm2JwrETLT28vUBikxOXaAAAWAwMAygQAAMYAAU\/wAMBVHjamON2Im1HS1Mx3WG+MHqQdzgVj909oJkB2\/cL96uQcX2PfrbyBj2+2oCYfHZ91Urggzu6eStTIoM9Tx0y+L5fn4iO7UemYhseBRZgQPMeOhtjrP7Ay2eCf3jw6sB7lBQ3ZcpiCWpWxN+zLU1AVf1JRJ2kh83AYgCsYOkJGnI0JglWBDAlI6RTp6SysSqxSLyEbEgg6TRJ5xWMmmo6sYo0KSmzNienpjIAH1B453woar3mtJnA1SQQQ9xtf72wUAwMAAQEWAwMAKBb8yUXEQnm1GVxYXWHBTfz7BtrCKB8SKDo3bRG3+B+IlvOJH6rcA04=","pkt_caplen":314,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGHTTkAAjwZYEx8NRFQKGFK8Abuwm2JwrUbLT28vUBikxBbAAAAXAwMANBb8yUXEQnm2g++XjKblkUJpWv9tmLeVBE1kuRiDlrf+n7hYqni8bdG9vQAiXYZKviSblcI=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFXTT0AAjwZYHh8NRFQKGFK8Abuwm2JwrX\/LT28vUBikxOsdAAAXAwMAKBb8yUXEQnm3y2xIdPlzqp5dWtYUgSV3ANJOPhyJBgJPfxNr6dpuXC8=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFXeNUAAjgZORh8NREYKGFK8AbuqPWAZ4vKKfXfjUBijUitYAAAXAwMAKD2B\/Wu8yi7dmC8oCrcVU7SDR399k4n3r4ZCDoBgqkuVc8zxgtQcauc=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjFUAAPwYYhgoYUrwfDURUsJsBu8tPby9icK1\/UBBfAJPZAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6t0AAPwYA8goYUrwfDURGqj0Bu4p9e01gGeMfUBBfAJuwAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1129{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQzQEAAPwZITwoYUrwfDURUsJkBu9qbP5PAwvtCgBAA3+aCAAABAQgKAAsLaqKRmJY=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0909{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":477,"pkt":"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","pkt_caplen":477,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6uEAAPwYA8QoYUrwfDURGqj0Bu4p9e01gGeTEUBBpAJALAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjFkAAPwYYhQoYUrwfDURUsJsBu8tPby9icK2sUBBfAJOsAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":85,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVecUAAjgYib638YQIKGFK8AbuKr2AiuVD8GvORUBikrBsZAAAXAwEAGNqj96ZLe+MBM\/+c2vYGvokHxAQvWyucbQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmwkAAPwbpOgoYUryt\/GECiq8Bu\/wa85FgIrltUBBVAFlaAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGHTnUAAQAbVXgoYUrw2\/\/3H5i8UZ+uf0VkGiXPCgBgCYxkQAAABAQgKAAKTKDTnT0kXAwEAKNOo\/lFrrxEtj1oyrBEybZXAvF7754xqLjvuYfV0gCpDpumAA3\/lW60=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0747{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":358,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAVbmw0AAPwboCwoYUryt\/GECiq8Bu\/wa85FgIrltUBhVAAgrAAAXAwEBKS3x8YdwxEGsE1rJOhaybt+u7hTdGbdVnrfu549XqMa2La2fThmjlX8NkCIYX+ZR94J1Ki8mV9STe3KW4sHOUISeMQJ6nuxgvEyy2rIR76h2J1xDYizhR22ohOiqQ9DCq7ITrXaB6K8uTY6qDgbughT0P\/ffTOA2VpN2sP2zpsq1YFJgUgcuSE0jyKxdtqNy6ZOMUF\/Mms+8S+JoGfsLff1pOOnOsfoOGZACG7D6ofhzSuOZw062+64yIyoFEt0gCpQ9cZOqbc8SEXx9FNB37+c6bpuIfR4hdN9EnkOfu8d1hZi55Hu19nE5HvXjDXOIY72brauTs5jLPUMmPVHeH4vL+JPWRsutbF4eAmL68HTEBCoeybGV6lc9E13KPRIb\/\/+tjqDSYVtXpQ==","pkt_caplen":358,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeN0AAjgZOcR8NREYKGFK8AbuqPWAZ5MSKfXr5UBCgPFkjAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeOEAAjgZOcB8NREYKGFK8AbuqPWAZ5MSKfXsoUBCgDVkjAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACjeOUAAjgZObx8NREYKGFK8AbuqPWAZ5MSKfXtNUBCf6FkjAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2072{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAKrTUUAAjwZXxx8NRFQKGFK8Abuwm2JwsqzLT28vUBikxAuCAABpVtG4Oz\/85ZXzvNR\/hBRtHbCI2iBOn371rULRfvejj7RXeBUWk91COof4AEnqSnFDFtmZPLGCelVhUaaGSsH9ldR54RnBCXCvj8VcvYxgTxVA\/U6Eat6+ORHW1xxJS3EYZ65QshojhC1eFtj9FX5Ey7zyfnFQ0VTe+EAW4CP+1mFf","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":81,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEHTUkAAjwZYLx8NRFQKGFK8Abuwm2Jwsy7LT28vUBikxHXdAABIT3SfmOzru5Sel\/Ml9emGzanSoL\/ZAp3y","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0664{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":297,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAARnTU0AAjwZXVh8NRFQKGFK8Abuwm2Jws0fLT28vUBikxLqaAAAXAwMA7Bb8yUXEQnm54rvikrzEoPgWHpEzq5VDJT11bKxrAZHgsnIyJa4LuNeLm0tuO19FccKAPrN1MvVL5pmoRNkqwC6kYvCnBnNOQah22R8aprlPy1qg2NJAu54YANGRujCJXA\/GtN40klS7i3Rwl6WAjBzwmuSa6IAJ2B5988Uk\/HYW0D3lZLwGIQ6Fy6F8wjT3hdWyUvuVJ4EH5gjIeuIWRbawcKk\/tXbVod\/uZxsDIBH6ZMhzh5gRqIHT+Ii\/U6Lyd\/FX8JfD77jTOg8ISO4e\/2OiZzI6dKKjwjxIZWxVQ2RzsTuPcVVuDAZruD6J","pkt_caplen":297,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjF0AAPwYYhAoYUrwfDURUsJsBu8tPby9icLKsUBBpAISsAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjGEAAPwYYgwoYUrwfDURUsJsBu8tPby9icLMuUBBzAHoqAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjGUAAPwYYggoYUrwfDURUsJsBu8tPby9icLNHUBBzAHoRAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjGkAAPwYYgQoYUrwfDURUsJsBu8tPby9icLQ4UBB9AG8gAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACheckAAjwYhi638YQIKGFK8AbuKr2AiuW38GvS\/UBCjfgmuAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFfTVEAAjwZYFx8NRFQKGFK8Abuwm2JwtDjLT28vUBikxNjHAAAXAwMAKhb8yUXEQnm6lOAo9W95PTGZR1Q0P9OI5bjMj1OnJ7BqjXTB4SBbH57sMw==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChjG0AAPwYYgAoYUrwfDURUsJsBu8tPby9icLRnUBB9AG7xAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069031,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFNec0AAjwYhX638YQIKGFK8AbuKr2AiuW38GvS\/UBijfmj0AAAXAwEAJt4Uads0O7RiEOr2+ZC2x+j6Fg6POvBHWujoSxjjL553u0B5Fn1g","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":893,"pkt":"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","pkt_caplen":893,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACh6uUAAPwYA8AoYUrwfDURGqj0Bu4p9e01gGegJUBBzAILGAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmxEAAPwbpOAoYUryt\/GECiq8Bu\/wa9L9gIrmYUBBVAFgBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq80AArAYRp9g63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALTmxUAAPwboqwoYUryt\/GECiq8Bu\/wa9L9gIrmYUBhVALZzAAAXAwEAh1oQ84h76hb2pDgAJUbGHWwTPVkBtuWndZN5nUv\/frgvBt\/y2Gsf8heTDQrPNSk2bUiMOoHSpqeVoeQ1WXMamaYlYaEobNSdrFrE7SfWL6MaIRHNM1xYo5HWmXMRwJ\/07TDkJo\/4MO7pnf8S+ombRMJZif2cAY7gD+dFk4UhTKkBH84eDoD1ng==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069032,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChedEAAjwYhia38YQIKGFK8AbuKr2AiuZj8GvVLUBCi8gmDAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChV8UAAQAbFkwoYUrzSZ\/APpVwBu+YrTKNirTiWUBFpAB9mAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgkaUAAjgapG9Jn8A8KGFK8AbulXGKtOJbmK0ykUBCkj3bOAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADytk0AAPwbN8woYUrwfDURUkrUAUM0qoIsAAAAAoAI5CEEgAAACBAV4BAIICgALDRgAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACxm7kAA+AZbqB8NRFQKGFK8AFCStWTibgPNKqCMYBIRHPNeAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACitlEAAPwbOBgoYUrwfDURUkrUAUM0qoIxk4m4EUBA5COLzAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAArAYOlx8NRFQKGFK8AFCStWTibgTNKqCMYBD\/\/wn2AAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":243,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOOtlUAAPwbNSgoYUrwfDURUkrUAUM0qoIxk4m4EUBg5CEcRAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMy4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K","pkt_caplen":243,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzw1UAAPwaKsQoYUrwfDURUsJ0Bu3W4\/fMAAAAAoAI5CBvJAAACBAV4BAIICgALDSYAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiiUEAArQZrLh8NRFQKGFK8AFCStWTibgTNKqFHUBD\/\/xtBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069035,"pkt_len":83,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEPmxkAAPwbpGwoYUryt\/GECiq8Bu\/wa9UtgIrmYUBhVAB1nAAAXAwEAFreOxK0dsXWS\/qwp8ZzqtOE3sN0XSVk=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACxGQkAA+AZ8VB8NRFQKGFK8AbuwnWIYU8F1uP30YBIRHOshAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw1kAAPwaKxAoYUrwfDURUsJ0Bu3W4\/fRiGFPCUBA5CNq2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":240,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAODw10AAPwaKCwoYUrwfDURUsJ0Bu3W4\/fRiGFPCUBg5CMwfAAAWAwEAswEAAK8DAVU9Hy2pPPfpWbhIjMHHKuGu\/26IDUvEFU2avrf56FfmAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":240,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHTmx0AAPwbo6QoYUryt\/GECiq8Bu\/wa9WZgIrmYUBhVAIi6AAAXAwEAR5\/Qk468uI7m\/+cWo4G37ScnsEbO++RIgXOs6PP8LjxdehYxOW2nmwu+YlPtXmrc+Gw5e7TTS0RywmGESvQ\/WmGGOzYrrd37","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChedUAAjwYhiK38YQIKGFK8AbuKr2AiuZj8GvVmUBCi1wmDAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgYslx8NRFQKGFK8AbuwnWIYU8J1uP30YBClZFxUAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrjUAAjwbADR8NRFQKGFK8AbuwnWIYU8J1uP6sUBCkrG5aAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChedkAAjwYhh638YQIKGFK8AbuKr2AiuZj8GvWyUBCiiwmDAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwqSkAAPwalnwoYUryt\/GECircBu1PEJ3oAAAAAoAI5CI51AAACBAV4BAIICgALDTAAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACzrl0AA+AYrYa38YQIKGFK8AbuKt2bo6WFTxCd7YBIRHMNnAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqS0AAPwalsgoYUryt\/GECircBu1PEJ3tm6OliUBA5CLL8AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":240,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOAqTEAAPwak+QoYUryt\/GECircBu1PEJ3tm6OliUBg5CCGEAAAWAwEAswEAAK8DAVU9Hy3lr9PhuC3NcwOeJGoglIkRSauG++7JURnxbEvJAABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":240,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2054{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAJ5rj0AAjwa\/lR8NRFQKGFK8AbuwnWIYWMJ1uP6sUBikrOyQAAAgBDswOTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBF","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw2EAAPwaKwgoYUrwfDURUsJ0Bu3W4\/qxiGFjCUBBBAM0GAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw2UAAPwaKwQoYUrwfDURUsJ0Bu3W4\/qxiGFk4UBBBAMyQAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":1336,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABShrkEAAjwa7Ch8NRFQKGFK8AbuwnWIYWTh1uP6sUBCkrLAOAAAGCCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5jcnQwDAYDVR0TAQH\/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEAf4TX3s1P66\/caXxbDQe2jnaKngcjwn0ZQ7fV9dU+wEYbO0+Zfe9lQD15+559ykP5zZBA0qyYS1oaVH4+rZibsq6wmVOQtkUvQcR4eU8yULsmSo\/cr\/4OSGnGOgMEc2Z4Wefjmy7XninHx7DzcSL3DSCQtRONEkd3DXfnLIB14XItylFUFoTE4JLmtQw3ZLEGNCUCqhp4w0dyqbrUH9NEGh03DZ\/YZXjlXfdkKOodBniivM67AoemiIEtxRtGh1OIUyl5p31y3Sb8ydj7isPIMP41385LjSnaQ3WZ\/KUmwXGWWD3yw5LQn4q4u5uMPUIkW4Gx6SkSJbJXYbAMHoYulAAGXDCCBlgwggVAoAMCAQICEApfEU0DWxeRF9Lv1AOMPzswDQYJKoZIhvcNAQEFBQAwbDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTErMCkGA1UEAxMiRGlnaUNlcnQgSGlnaCBBc3N1cmFuY2UgRVYgUm9vdCBDQTAeFw0wODA0MDIxMjAwMDBaFw0yMjA0MDMwMDAwMDBaMGYxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJTAjBgNVBAMTHERpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIENBLTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC\/YQopEB9e\/jQ3UQj4Hvsi7WG+Cw1wTFBjJnUVuUGIl7bwoBW7CGDgQugFKRCHNoooZajvMQd0bTaXLyhGZgTHKnkmepnVjsNtT6Berbw9kcJZe142bMBTzwAIMj4QZFgQE2nHDO6cQlEA+QVE7iTOeh\/tjBG9EqjzFfQcejFpARun5l3Ammx+CZ7nUkRKEDoj5Ju2A6+onLRbn9RLrZKMzrURKqo3GI20wrjYXAaM+P8jvTVe1Hw+foMOkZYFmMOyH+PIZeupe12gLMz8PNlt7cz6S0OMydS4pWEcskC2KBLfufhf\/tOyye89tB5LfBxMmTaePevsp2heHd9nbl77AgMBAAGjggL6MIIC9jAOBgNVHQ8BAf8EBAMCAYYwggHGBgNVHSAEggG9MIIBuTCCAbUGC2CGSAGG\/WwBAwACMIIBpDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABhAHIAdA==","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw2kAAPwaKwAoYUrwfDURUsJ0Bu3W4\/qxiGF44UBBLAL2QAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgaA+a38YQIKGFK8AbuKt2bo6WJTxCd7YBClZDSaAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRFkAAjwYu5638YQIKGFK8AbuKt2bo6WJTxCgzUBCkrEagAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":926,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAA45rkUAAjwa8ox8NRFQKGFK8AbuwnWIYXjh1uP6sUBikrNHEAAAAeQAgAEEAZwByAGUAZQBtAGUAbgB0ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0AHkAIABhAG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABoAGUAcgBlAGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wEgYDVR0TAQH\/BAgwBgEB\/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMB8GA1UdIwQYMBaAFLE+w2kD+L9HAdSYJhoIAu9jZCvDMB0GA1UdDgQWBBRQ6nOJ2yn7EI+e5QEg1N55mUiD9zANBgkqhkiG9w0BAQUFAAOCAQEAHuKlSJ5s21M4D++mGiqs4gND7Zq8Po51G\/D9LiJZrBPAYeLn+umZzYcJdVQov0Zg3L5RLJLzG5F8MQhw4je5wVuovaMLAPsaFf0DrVhqxcckmUhHRjEeku+0X040x5C\/McH4sYSG0JwBqt+KVgbOOukOrpd0XddxmkJ0X96NQ3ze6VXtaQDLBeB6YWEz0RlN+QjuoDnFJTW3K8QPst3xpbcOJMQmKI15d\/Uv8Fe6fAfU4fzNWjBXfoYQR90xH9f8osK\/MHxdJKro+a5fanTCzmuzRtghvinUjl4V1kJK5zJvpLFrUYNYvj9tx\/vaAyHLahYZTgrwrYTKXZSzWnb3YRYDAQCSDAAAjgMAF0EExrvVjJmskxsxl7za+fyJjy8jLZ01HW0zf5npTx\/6GWLGRG3SXO5Gg1gOG8smi\/NyV\/PxGGRbia0CMA7d76Yv2ABHMEUCIHzwDcwFMpxVP\/8am4nZhxz0QnCrvWisp422CWpoZBYUAiEA6zngcC34dn3Gt0qUcGhAjS8GTzhESSBXNqyC\/12rLOcWAwEABA4AAAA=","pkt_caplen":926,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw20AAPwaKvwoYUrwfDURUsJ0Bu3W4\/qxiGGGeUBBVALAqAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0715{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":339,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUOiUUAArQZqEh8NRFQKGFK8AFCStWTibgTNKqFHUBj\/\/1uiAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogbnRKRXA0ZXcwOHRBWkdWd2J0SHdUZzhPVFBDbGd3RHI1V1FlTXJkYitCazA1eEpaZkMxaXVjb1NpaWd3RG94NUZzcjJjQ2txSmN3MHBUN1FMS1dUY0E9PQ0KRGF0ZTogU3VuLCAyNiBBcHIgMjAxNSAxNzoyMzo1NiBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":339,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACitlkAAPwbOBAoYUrwfDURUkrUAUM0qoUdk4m8fUBA8uN1tAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":178,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKLw3EAAPwaKRAoYUrwfDURUsJ0Bu3W4\/qxiGGGeUBhVAPcpAAAWAwEARhAAAEJBBKEasiyUo2ANNASkr2uadAhqkbscFf9u1KOWllAbNFBDhtdLmgUrZUpTT7pczUwTMUMatVuEPWFyZE1dHeDqmuYUAwEAAQEWAwEAJGIfRucykgPyI9pqoL2jesB+lmMfcHzlLfb88ABcRl7sHSXOIg==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":83,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAENed0AAjwYha638YQIKGFK8AbuKr2AiuZj8GvWyUBiii9MKAAAXAwEAFp5b363nZbFPi1P4rTyfy5dJibUnsF8=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmyEAAPwbpNAoYUryt\/GECiq8Bu\/wa9bJgIrmzUBBVAFbzAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrkkAAjwbACB8NRFQKGFK8AbuwnWIYYZ51uP8mUBCkrGAEAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFdrk0AAjwa\/2B8NRFQKGFK8AbuwnWIYYZ51uP8mUBikrFbnAAAUAwEAAQEWAwEAJEz9\/SACjDCZ21TDmC3Ma+XTfd53Wv1wk6ilrW7MOivVEblLcQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw3UAAPwaKvQoYUrwfDURUsJ0Bu3W4\/yZiGGHNUBBVAK+BAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":899,"pkt":"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","pkt_caplen":899,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0881{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":458,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAbrw30AAPwaJKQoYUrwfDURUsJ0Bu3W5AnFiGGHNUBhVAKFOAAAXAwEBjUjtHX8Br9tJYJ++gIVGWmmQr1qyVtABVN5bznPcVxTLUdJrxi+sxbfZcYxf3mWfVWz+W5nboc06TzVBHtYqnGqwjrHMGkabm\/k4xssawjoxu\/CPjMBn2WUnvnPcZD7con5t4WhSORMs0\/H\/uQWgsmqea3bKLYKHUICWNC7Swqq+lB9toPK5VV+95p2jbCOJgggLPXLTskmZp5AxgATryIlW1qcX0CYxdILmnDGRul1RgObbKZtsCut\/RCEn07AC0bvZk0B+I2GEeIf1xdfFY3hhDFu9+ha5wryVf65Sz0vhs1yDJgh8sVvWWPhxrMVX4yhRzTN0VA6tXPFqsDToSjfs0zil9m2fzLqwge0aulfAVbW2oKbaV9XauySt6O2K4RrNVUeUeL1omH\/WRLRRfAaRMUEvU1zxCTc\/1B76Hmat9npeTiuxt2UEX95VOlA7o+lJpesfRUUwpaCl4P6pIQlg7jREQzZqgHN0fhk0JRs8Nv\/mj2NSUeZ6jD0vACj7kU1RJz41UwtAPijeYXQ=","pkt_caplen":458,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":83,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEPw4EAAPwaKnwoYUrwfDURUsJ0Bu3W5BANiGGHNUBhVAPTbAAAXAwEAFq4yNtaGEYI\/P8dUe0UG\/5OPPStZIbo=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":96,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFDw4UAAPwaKkQoYUrwfDURUsJ0Bu3W5BB5iGGHNUBhVACvLAAAXAwEAIzTC\/FMvc4jDGG+sM8mhMmS6yY2m9rHpqFfzWgaXSDQmvxl8","pkt_caplen":96,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":86,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEbw4kAAPwaKmgoYUrwfDURUsJ0Bu3W5BEZiGGHNUBhVAFA1AAAXAwEAGbQi63CFV5rHiLApDhT8sUNrMs7Hu8jts+g=","pkt_caplen":86,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrlEAAjwbABh8NRFQKGFK8AbuwnWIYYc11uQQDUBCkrFr4AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrlUAAjwbABR8NRFQKGFK8AbuwnWIYYc11uQRGUBCkrFq1AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChrlkAAjwbABB8NRFQKGFK8AbuwnWIYYc11uQRkUBCkrFqXAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2053{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":1336,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABShRF0AAjgYq5q38YQIKGFK8AbuKt2bo6WJTxCgzUBCkrMtIAAAWAwEAWQIAAFUDAbZyuIuZl37RA6xhj4YdGRy7e\/k0fSBIfmPHpvdYA0LwIGHGz3CMoqyAqySUoSyZbEmdkTnwkbEEIcyIOcde2TVPwAcAAA3\/AQABAAALAAQDAAECFgMBDNkLAAzVAAzSAAZwMIIGbDCCBVSgAwIBAgIQBnjbTdvaLb44isb+B0TcyDANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5jZSBDQS0zMB4XDTE0MDgyODAwMDAwMFoXDTE1MTAyODEyMDAwMFowYTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpNZW5sbyBQYXJrMRcwFQYDVQQKEw5GYWNlYm9vaywgSW5jLjEXMBUGA1UEAwwOKi5mYWNlYm9vay5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATY0d01veJZtvubH1QVjNu\/Tli9R764EPwi6dKemPhJKiX7lEbkQpmEUBxfAf0UJTFcTtlk\/cUMs0bSobxwtIeOo4ID5DCCA+AwHwYDVR0jBBgwFoAUUOpzidsp+xCPnuUBINTeeZlIg\/cwHQYDVR0OBBYEFEMJk0D6EUswM+zyh26NcRjPiryOMIICOwYDVR0RBIICMjCCAi6CDiouZmFjZWJvb2suY29tggxmYWNlYm9vay5jb22CCyouZmJzYnguY29tggsqLmZiY2RuLm5ldIIOKi54eC5mYmNkbi5uZXSCDioueHkuZmJjZG4ubmV0ggZmYi5jb22CCCouZmIuY29tghgqLmZhY2Vib29rY29yZXd3d2kub25pb26CFmZhY2Vib29rY29yZXd3d2kub25pb26CGCouZmJjZG4yM2Rzc3IzanFucS5vbmlvboIWZmJjZG4yM2Rzc3IzanFucS5vbmlvboIYKi5mYnNieDJxNG12Y2w2M3B3Lm9uaW9ughZmYnNieDJxNG12Y2w2M3B3Lm9uaW9ughAqLm0uZmFjZWJvb2suY29tgg8qLm1lc3Nlbmdlci5jb22CDW1lc3Nlbmdlci5jb22CGioubS5mYWNlYm9va2NvcmV3d3dpLm9uaW9ughsqLnh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGXh4LmZiY2RuMjNkc3NyM2pxbnEub25pb26CGyoueHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIZeHkuZmJjZG4yM2Rzc3IzanFucS5vbmlvboIOKi54ei5mYmNkbi5uZXSCDHh6LmZiY2RuLm5ldIIbKi54ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughl4ei5mYmNkbjIzZHNzcjNqcW5xLm9uaW9ughhtLmZhY2Vib29rY29yZXd3d2kub25pb24wDgYDVR0PAQH\/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyOS5jcmwwKqAooCaGJGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9jYTMtZzI5LmNybDBCBgNVHQ==","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2058{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":1336,"pkt":"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","pkt_caplen":1336,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1668{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":1043,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABANRGUAAjgYsCa38YQIKGFK8AbuKt2bo82JTxCgzUBikrEovAAAAdQB0AGUAcwAgAGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQAaQBnAGkAQwBlAHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkAaQBuAGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAgAGwAaQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAgAGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMAZQAuMBIGA1UdEwEB\/wQIMAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDAfBgNVHSMEGDAWgBSxPsNpA\/i\/RwHUmCYaCALvY2QrwzAdBgNVHQ4EFgQUUOpzidsp+xCPnuUBINTeeZlIg\/cwDQYJKoZIhvcNAQEFBQADggEBAB7ipUiebNtTOA\/vphoqrOIDQ+2avD6OdRvw\/S4iWawTwGHi5\/rpmc2HCXVUKL9GYNy+USyS8xuRfDEIcOI3ucFbqL2jCwD7GhX9A61YasXHJJlIR0YxHpLvtF9ONMeQvzHB+LGEhtCcAarfilYGzjrpDq6XdF3XcZpCdF\/ejUN83ulV7WkAywXgemFhM9EZTfkI7qA5xSU1tyvED7Ld8aW3DiTEJiiNeXf1L\/BXunwH1OH8zVowV36GEEfdMR\/X\/KLCvzB8XSSq6PmuX2p0ws5rs0bYIb4p1I5eFdZCSucyb6Sxa1GDWL4\/bcf72gMhy2oWGU4K8K2Eyl2Us1p292EWAwEAkQwAAI0DABdBBF6hk1Yewa00uIJUS1f8EGQdfuetE3UDgcfK1KuF8DJSBKJSEPoE6VPxncMmJsPNt5F\/a0hmJ8KTbudHBxzPJocARjBEAiANHy3l9Wg1jYhXx6qsp9jjZzbvcPiJcvxfW51qSwHb9gIgMOMuVzo3DjBChuJlhLhS4A5pSe4rOcJyYLqIsIe8xbAWAwEABA4AAAA=","pkt_caplen":1043,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqTUAAPwalsAoYUryt\/GECircBu1PEKDNm6O5iUBBBAKVMAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqTkAAPwalrwoYUryt\/GECircBu1PEKDNm6PNiUBBLAJZMAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqT0AAPwalrgoYUryt\/GECircBu1PEKDNm6Pc9UBBVAIhxAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":178,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIqUEAAPwalMwoYUryt\/GECircBu1PEKDNm6Pc9UBhVAIPUAAAWAwEARhAAAEJBBCZZ2wh0b7p+4q5eEO79DW58Pvc4nyT0xrNL3bCO2plbKHFGdyRmMh0ZcHNEB\/lKFQGaH\/L\/PtM0\/SAirYCEtroUAwEAAQEWAwEAJDsdVT0taM9UGHOwQMYlU0bNX7fcATICi5AHNvPXOMvzdoQzew==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRGkAAjgYv4638YQIKGFK8AbuKt2bo9z1TxCitUBCkrDhLAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":778,"pkt":"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","pkt_caplen":778,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjw40AAPwaKtwoYUrwfDURUsJ0Bu3W5BGRiGGSfUBBfAJ1xAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFdRG0AAjgYvs638YQIKGFK8AbuKt2bo9z1TxCitUBikrHPzAAAUAwEAAQEWAwEAJKwdKZ2NDt5ze7yUKw10pzowgyKHfU+iDmCTOpdSftiIYUx5uA==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqUUAAPwalrAoYUryt\/GECircBu1PEKK1m6PdsUBBVAIfIAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+1042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069036,"pkt_len":578,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAjIqUkAAPwajoQoYUryt\/GECircBu1PEKK1m6PdsUBhVAHTBAAAXAwECBTV71aZwuT\/95vLElA4\/W58DfGN4gW7C43fBXI7wxtxwtgiYgKmUiyv8GEq6OvGvnPapOKNHJsDJzymlXLctz3eSv53bhGQOCCuIhoMHXcQlTqusUmd4FfXXvCPbimpYJNsNJTarwOtjGg7smbBpods3TXwKxb92WmP904fFQOuTiqDNDIUyQOVxtsXgyAKg\/2MJdX+rFsSEzV4hj53zI9nmhPbqjECXly8ocgcc56yA4yJpHs35OtfJxCMo5zA1AB49MxGoDmQ73b6emXNCVLTfSHBvV2hfrddRmUoL+6fWcXbXy37RMFBUjaUvoKeuCiWIb2AwvRYRr6uODsr2XBfi5CBAkYLTJv2Rd6gjFFhLdicE3MQU8tIlj8JGxqMI2cBT8JgNi5W\/hOsRB+jpoWe9+H8bOYWH5rCA2Uyb8YpKiX\/6a8e8PY1nd3nrik5ltVDqnKd4NhiS7M4P+QhFmH5w\/9Ou8ZHQzlswTNxMMYcUbjGlTg3TBEHhsmuh0Ncx+yDtTFlm++CxrdM+nlQmj+m0CE0LgNLw8hz1m8ZBI8I\/gPFiOI1WiMBpVbWVz2q9GyiAw4Uhr9fC24KHlYkzAFGxyk4h\/iMEPuYRbJuH7ydkEpaSg8jCWFHJmPzS+TGCqkmByR0TBRffxuIl9Bqpcap4Ee7lUxf7lQ62GdLdkvXC7PLFW5Y=","pkt_caplen":578,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRHEAAjgYv4a38YQIKGFK8AbuKt2bo92xTxCq3UBCkrDYSAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":85,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVeeEAAjgYiaK38YQIKGFK8AbuKr2AiubP8GvWyUBiii10aAAAXAwEAGN9JXJy+BsySiG8O3BkolG+oOVYycfWptw==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjmyUAAPwbpMwoYUryt\/GECiq8Bu\/wa9bJgIrnQUBBVAFbWAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":85,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVRHUAAjgYvw638YQIKGFK8AbuKt2bo92xTxCq3UBikrLvRAAAXAwEAGCkUYQXzCSfJtGcPRUresj0dDH5fhkyQ3A==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqU0AAPwalqgoYUryt\/GECircBu1PEKrdm6PeJUBBVAIWhAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcqVEAAPwalCgoYUryt\/GECircBu1PEKrdm6PeJUBhVAEj8AAAXAwEAmmA9NhTXfVdGwDHpCkANz+TQTXcsp6XZT4WCY+EQ6i98YuX6\/TVtB4m5uh05TKvOl5C653qDAnHz\/9SSAwngrU56RzkdJPTTvKhmzRZPrjBNac92dEA+Qw\/rNccQGjaWA\/4\/b1mdBG5OCZPGUz9VQ0w1wGwy1Qk8cAPVqaAiuj6nZfsdNQp9KhipZ5lCWSbUpK0318yRdkxgxlg=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0708{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":328,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAATgqVUAAPwakmAoYUryt\/GECircBu1PEK1Zm6PeJUBhVACn2AAAXAwEBCyVH1Nxkw+7r7G5e0Ck4iQD5JT0v068Ng7bnaHmzRNS24osgZp1hn5jzZ+Wagz0AMa\/WcrVyuHJLZuApify1YTnialAACf40Hsenqr1EqF72VNdL7kYGHkYgi+knqXVJB1RWfWUsAtSTJ3PpbbOGC0QJIvgusOVsrDPJtn1zjCca8o3zpoDOljgQnBMiEyONYd0h+OfaLMZ\/LkP2X9vK+TDnp3m\/IoNE4uXdRIC2sPSfL3KDpx24z9PK3v3SnjGrIrNuUnt+k7ePkwBepE+lNe8hveksjZa8b\/97sIPBEFOo9V4C\/6gHyP1xhm1\/faYmnNMV11nw13UgmrfpUJwp2B68qKS9yh62yHuF4w==","pkt_caplen":328,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRHkAAjgYv3638YQIKGFK8AbuKt2bo94lTxCtWUBCkDTX1AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRH0AAjgYv3q38YQIKGFK8AbuKt2bo94lTxCxmUBCi\/TX1AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0388{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":94,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAE5RIEAAjgYvt638YQIKGFK8AbuKt2bo94lTxCxmUBii\/XPhAAAXAwEAIRp9zheDDunx8M1mUV6GTknqngAkb2ViybWLWV77oI6HMw==","pkt_caplen":94,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqVkAAPwalpwoYUryt\/GECircBu1PELGZm6PevUBBVAIPMAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":85,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVRIUAAjgYvv638YQIKGFK8AbuKt2bo969TxCxmUBii\/Z69AAAXAwEAGMiPh0EQruTpFXaid7SHWrSvPM5mVHgKuA==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069037,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqV0AAPwalpgoYUryt\/GECircBu1PELGZm6PfMUBBVAIOvAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069038,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq9EAArAYRptg63QoKGFK8AFCMUmKi4jFDN+TzUBH\/\/6QYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069038,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069040,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHLzXUAAPwZJYwoYUrxn9jn7x00fkMsN9wYrPwQwgBgAexO3AAABAQgKAAsPCpj2bmU6AAAAolkC\/4gP\/deLY5qAl+gvk1q6sKo+Dj8NmSA2rJYEww7CAFaSnbB0cHHjCEGbHgWAm+O6R5DcVbzucA==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069041,"pkt_len":93,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAE0cE0AAjgaxTNJn8A8KGFK8AbuTvWC6vbGv6iasUBmjFyZrAAAVAwEAIHCovM3ukEKm5XIbW7IH7Mt6YaRI9cl8ydlkDt\/RuRB8","pkt_caplen":93,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069041,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgriUAAPwbw+woYUrzSZ\/APk70Bu6\/qJqxgur3XUBBzAJLnAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0613{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069041,"pkt_len":258,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAPJbIkAALgbyHmf2OfsKGFK8H5DHTSs\/BDDLDfdEgBgADk6wAAABAQgKmPajHgALDwq6AAAAolkC\/4gP\/deLY5qAl+gvk1q6MKo+Dr8NmSA0vIoEwzL52Zrr6RjF9Bu994wavboL+YbRyGuQnqzGjRX38N1zyfNe61lkzc0IHKVWxcnKyjmNl6oQX9Lrf+xWf9zOhkCznR4qsQb0obZXCGNou9W\/BEdEWcdYd1s\/XQjToOKZQOS9aYSCHzCyUVerS7tvJBIcs5grGAgJ\/\/0j1kplCt6fp\/H15W5dVAQmBKJAFTBRqD7ubEPdwOIZpkw4","pkt_caplen":258,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069041,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzXkAAPwZJoAoYUrxn9jn7x00fkMsN90QrPwTugBAAg1J8AAABAQgKAAsPe5j2ox4=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":157,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3zX0AAPwZJRgoYUrxn9jn7x00fkMsN90QrPwTugBgAg\/lWAAABAQgKAAsQgJj2ox5VAAAApVkC\/4gP6c2DY5DOxadg3j3uOFk37WQtu31WeByENvnH+DX\/S7DVK6u8apgllsOoljhTv0Bpj3w8hcD\/X\/f\/nc5qUppaWqWFC3vtb1GieZeOb5kg9A==","pkt_caplen":157,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":227,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbI0AALgbyPGf2OfsKGFK8H5DHTSs\/BO7LDfedgBgADqeYAAABAQgKmPau5gALEICbAAAApVkC\/4gP6c2DY5DOxadg3j3uglk37d4tu31UaACENsUDY+LzOxjISSvDHlLj\/76+Mot90fr3IIVmcZzKrPUuIUunQYRnfbf2nwhOJWRaXLWTADCHo5USSgouqKOhF3NrykFuZgZj9O56lIYjyauIO5CNvDULgFhzQTozkvjnAUrGJZ4Xd2mZAm0F37zjomKPM4XbVO9G3LuV7VU=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0675{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":303,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KJUAAjgb4zIuWAH0KGFK8Abu3Y2Ij0KVRKAPiUBigLueuAADzAAAApDlIVrVdqRc+Gkt7POZ3i2OlkuY4MMfPTZY9G4U0YFfr\/Io7pOCQe3JDBNAmPdEpHGIlOOWztPzNgfmCZdfJbXa\/FjyLrCbe\/cKrmuhEYDyIPsoQcOHY3YFPdOkSmKChheXsyu06po9uQ1CWTJDZfqoByGUY9M3+\/torvsssHclmFyrgMhiQBPDR+\/p96Y\/\/sK6VRP8W+SfBO5i7Jg3brhWvS81m7IbytFR73ZERAlFn0QejuZzhem715ywfbXU8ySrwRBK2cs3ywClzqW\/s7h0teJNcn45XHRR+Z0ZTPA29+kHM57k5C1faf1I\/3jeLMDw\/","pkt_caplen":303,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzYEAAPwZJngoYUrxn9jn7x00fkMsN950rPwWNgBAAjESYAAABAQgKAAsQlpj2ruY=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTekAAQAZ+bgoYUryLlgB9t2MBu1EoA+JiI9GcUBCIgOkBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":98,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTe0AAQAZ+QwoYUryLlgB9t2MBu1EoA+JiI9GcUBiIgH9kAAAmAAAApDlIVrVdqRc+Gkt7POZ3i2OlX+Y4MArPTZYlBp4hfXC7UiHVW\/8=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069044,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKJkAAjwb4wouWAH0KGFK8Abu3Y2Ij0ZxRKAQMUBCgBOTVAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgkakAAjgapGtJn8A8KGFK8AbulXNdU3uvmK0ykUBSkj1vNAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAQAYbhQoYUrzSZ\/APpVwBu+YrTKRirTiWUBBpALJdAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoACgAAEAAjgbNXNJn8A8KGFK8AbulXGKtOJYAAAAAUAQAAE46AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":157,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3zYUAAPwZJRAoYUrxn9jn7x00fkMsN950rPwWNgBgAjPuuAAABAQgKAAsSJpj2ruZVAAAApFkC\/4gP6c2DY5DOxadg3iJoXaSJ+hWiEs8\/grPoSNWt\/YRHioQUCNg+vzJJVxYbFPJhFKfNnJWaHuwCOdSQYuNaCxvig+a3GFy4wMy6JpT4Duur\/Q==","pkt_caplen":157,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":227,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbJEAALgbyO2f2OfsKGFK8H5DHTSs\/BY3LDff2gBgADvAkAAABAQgKmPa\/MAALEiabAAAApFkC\/4gP6c2DY5DOxadg3iJo56SJ+q+iEs89kq\/oSOntFSZtde5ht7ICUN1XqI5RFjdxF7aKHHH1yXafBHEhxlzqQ4S4fJPCZRXeCFwsfKSGa3MT2ygLnn2L87WRGR4\/3cDKIJC5aLqINNDTD3FPSC8mD9yW2hHfkEAzia0zv6O7GXMBqhWuSmZfBedo82d\/d5g6qwLKo\/2GKug=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0669{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":303,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KJ0AAjwb3youWAH0KGFK8Abu3Y2Ij0ZxRKAQMUBigBA+QAADzAAAAFuBuaLVdqRc+Gkt7POZ3i9iwE0OUcIt6Wdo7FYv6P+oilGFY3dWOKarP+MAtPaIe7D4hJ6euSyPoLY02ayhtG6t6hjgo0J+3mmd2rWibbgn7vgALgNP+pPunSUEX0JXO1FBdWyEY1hTl2P1ityWpPqC+7EsELHBJIRlK+qytu2G1YDO1EC3LK85VDdZrB5iRO11q\/l+hBAqej\/BKXOYYSGrN9au2EIR2Ot+AlK\/Qjtu0OP1vjPCzsOrqf4xtuZg5q4ODFnVhg7n5wqCHN3shjUv0TKYl6uhcpZF5VHuJ0LQvT1qmfU8F0MfXxOK\/kWj6y7Wr","pkt_caplen":303,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTfEAAQAZ+bAoYUryLlgB9t2MBu1EoBAxiI9KTUBCRCOkBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069048,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzYkAAPwZJnAoYUrxn9jn7x00fkMsN9\/YrPwYsgBAAlDGuAAABAQgKAAsSNpj2vzA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069049,"pkt_len":98,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTfUAAQAZ+QQoYUryLlgB9t2MBu1EoBAxiI9KTUBiRCF0ZAAAmAAAAFuBuaLVdqRc+Gkt7POZ3i9iw3kOUcEZ6WdojCJDvIs0xtYwNzYg=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069049,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKKEAAjwb4wIuWAH0KGFK8Abu3Y2Ij0pNRKAQ2UBCf2uPeAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069049,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJSUZ0AAQAZSqgoYUrytwki8h34UbGWkOWcyCtXvgBgB12cmAAABAQgKAAKaQHWhBxYXAwEAW9BJTUK7bhQDJS6M4k2xveYn3KZ2THpi3b2p1WnyM44nZ0651+YzJehbLb+jV4nNEd4GZbKLQU+P8abQYninXFhPSKcNuFppnDwsImxNyj3HrOvurwOWRZpYp3o=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069051,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiq9UAArAYRpdg63QoKGFK8AFCMUtPmE5BDN+TzUBH\/\/wF2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069051,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgAAEAAPwYptwoYUrzYOt0KjFIAUEM35dFioucAUBA+dl\/2AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069052,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACif4UAArAZunR8NRFQKGFK8AFCSsWQ58kuOvvK5UBH\/\/4SfAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069052,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACj6\/UAAPwaAnQoYUrwfDURUkrEAUI6+8rlkOfJMUBA8uEfnAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069055,"pkt_len":157,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3zY0AAPwZJQgoYUrxn9jn7x00fkMsN9\/YrPwYsgBgAlLx0AAABAQgKAAsUo5j2vzBVAAAAp1kC\/4gP6c2DY5DOxadg3ndKHeUMqvmQu9iVGyn2GKIKAfJaTkQC\/XE6PKgyIHr47ArHpy951grZPcRFsiIWvn1732JOidQ8pkdILKDD6KQKO0aVhw==","pkt_caplen":157,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0674{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069055,"pkt_len":303,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KKUAAjgb4yIuWAH0KGFK8Abu3Y2Ij0pNRKAQ2UBif2g\/UAADzAAAADm0Ga7VdqRc+Gkt7POZ3i+5tzFY41M0fMnZ5G+m2Vfmrg\/zv7j0hw0EYHJWzK5vm\/yh4v2HJS83EDXIAXU2bjamkVNJvnppe0xZ5dVZ87ou5\/qGH6LaceT8u59MyUCQvylTi4YEzvDS9zVBR8mlLXoh1YM2wq9pcWvX2q\/mybRcS2fxHzLHJJpFYQpXKfnNGugL7Wx\/EBHURohcuMoPwedtdn3tHj0aCstecuAcqjgGrRkrqpBRh\/NLh33y+h1qkuo9\/WREg5Tpgd83vHtfKtQ78Z7vZ4TSawOTHx9k\/8rk1O3mx++HEjz58cnZa448oyarm","pkt_caplen":303,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069055,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTfkAAQAZ+agoYUryLlgB9t2MBu1EoBDZiI9OKUBCZkOkBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069055,"pkt_len":227,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbJUAALgbyOmf2OfsKGFK8H5DHTSs\/BizLDfhPgBgADpbjAAABAQgKmPbZRAALFKObAAAAp1kC\/4gP6c2DY5DOxadg3ndKp+UMqkOQu9iXCzX2GJ5\/Tv4obxXY1QH+AdqxhRnNT91Ae3AlkhgbmgPCZGbzy2HquatQXbsbBUmPQYzOxvfN2fLYJqWsvupAVKsk3ldlCMT0PEPGNEpujUBKAOCCfawToLlCRjIa\/Ie7ZjzyKNxpJTS3mRN12k6m0ILcO50y3N6aa+UpFqTx900=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069055,"pkt_len":98,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTf0AAQAZ+PwoYUryLlgB9t2MBu1EoBDZiI9OKUBiZkLHVAAAmAAAADm0Ga7VdqRc+Gkt7POZ3i+5tAVY41AAfMnZhBvKjSN7EqKqW+N8=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069055,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzZEAAPwZJmgoYUrxn9jn7x00fkMsN+E8rPwbLgBAAnBPbAAABAQgKAAsU9Zj22UQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0674{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069056,"pkt_len":303,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR8KKkAAjgb4x4uWAH0KGFK8Abu3Y2Ij0pNRKAQ2UBif2g\/UAADzAAAADm0Ga7VdqRc+Gkt7POZ3i+5tzFY41M0fMnZ5G+m2Vfmrg\/zv7j0hw0EYHJWzK5vm\/yh4v2HJS83EDXIAXU2bjamkVNJvnppe0xZ5dVZ87ou5\/qGH6LaceT8u59MyUCQvylTi4YEzvDS9zVBR8mlLXoh1YM2wq9pcWvX2q\/mybRcS2fxHzLHJJpFYQpXKfnNGugL7Wx\/EBHURohcuMoPwedtdn3tHj0aCstecuAcqjgGrRkrqpBRh\/NLh33y+h1qkuo9\/WREg5Tpgd83vHtfKtQ78Z7vZ4TSawOTHx9k\/8rk1O3mx++HEjz58cnZa448oyarm","pkt_caplen":303,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069056,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTgEAAQAZ+aAoYUryLlgB9t2MBu1EoBGBiI9OKUBCZkOkBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069056,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKK0AAjwb4vYuWAH0KGFK8Abu3Y2Ij04pRKARgUBCfsOLnAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069057,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiiUkAArAZsLB8NRFQKGFK8AFCStWTibx\/NKqFHUBH\/\/xolAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069057,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACiiU0AArAZsKx8NRFQKGFK8AFCStWTibx\/NKqFHUBH\/\/xolAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069057,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACitl0AAPwbOAwoYUrwfDURUkrUAUM0qoUdk4m8gUBA8uN1sAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069060,"pkt_len":83,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAENCkUAAQAbmZgoYUrzYOtyuwEEBuxTXAEVlWZivUBiMAAFrAAAVAwEAFnnuS9reX0mqADPiihp3NglZFsDnKQA=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069064,"pkt_len":83,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAEMqWEAAPwaligoYUryt\/GECircBu1PELGZm6PfMUBhVAL8zAAAXAwEAFmO+E91vMFpWx1cg9W58Usz2fKnGypo=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069064,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQqWUAAPwalWAoYUryt\/GECircBu1PELIFm6PfMUBhVAPPIAAAXAwEAR3gjfUBI088AwOEw3pblkr1ppBUIVetu1tAx2e7oHLCQ7eFc9Io9iRsmbKCRaXKbILUNZCJRZoEJH+C47lART4M\/wLWMVUft","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069064,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRIkAAjwYu2638YQIKGFK8AbuKt2bo98xTxCyBUBCi4jWyAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069064,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChRI0AAjwYu2q38YQIKGFK8AbuKt2bo98xTxCzNUBCiljWyAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069065,"pkt_len":83,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAENRJEAAjwYuvq38YQIKGFK8AbuKt2bo98xTxCzNUBiilugYAAAXAwEAFmtLdW5sPVo0CUmJI1zxK\/jVmwKT2G4=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069065,"pkt_len":85,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEVRJUAAjwYuu638YQIKGFK8AbuKt2bo9+dTxCzNUBiiljPAAAAXAwEAGHKplf3AN4KBeEFML9aBWvS8veLld0VWoQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069065,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqWkAAPwalowoYUryt\/GECircBu1PELM1m6PfnUBBVAIMtAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069065,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACgqW0AAPwalogoYUryt\/GECircBu1PELM1m6PgEUBBVAIMQAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069068,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIvzZUAAPwZJQgoYUrxn9jn7x00fkMsN+E8rPwbLgBgAnFLuAAABAQgKAAsZwJj22URTAAAAplkC\/4gP6c2DY5DOxadg3lUee4jdavCeURNFX7Z7sERsR9UxRDmYuAFqHa6FFgXzxIKxUgPoOOl0FbQjjQQrR\/XQpfDo2RTsIvLSGzAWUJSe920=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0671{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069068,"pkt_len":301,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR0KLEAAjgb4x4uWAH0KGFK8Abu3Y2Ij04pRKARgUBifsO6FAADxAAAA9OvkaLVdqRc+Gkt7POZ3i3B\/cSs8hz\/Y+A61mP+SPxO\/R3DGac2sjPnDCuKsrSfTbaTpC1QCK\/upe0ARxdejVurhNuCPA1SnywVLdu4Zw4wElJdvhX7T69mP5x8qI1Azfzl6NQhOIOdbeNjsORgh1vdsQSIm8PTjvEbCs2HlI1ijsi3aryyOYLECufcgZQh+GJ5ecJsfSD+F7fO9n1i5nft96BRdO1V4rNOFmTnrppJbI93qmZXgStBGfcB+qtk0Xvm+VYsDKwNq2vUgN+UkKJNvJyo8rCIYXzs\/GuzAG6FP1IczSONX8\/ceTFUNZIdxfw==","pkt_caplen":301,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069068,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTgUAAQAZ+ZwoYUryLlgB9t2MBu1EoBGBiI9R\/UBCiGOkBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0574{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069068,"pkt_len":227,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAANNbJkAALgbyOWf2OfsKGFK8H5DHTSs\/BsvLDfimgBgADgCzAAABAQgKmPcMmQALGcCbAAAAplkC\/4gP6c2DY5DOxadg3lUew4jdakieURNHT6p7sHhi+\/DXWbH9WSLCvTA\/1cQGC+1kHeP8G7VanUUjVw7CBVGNn9\/gJ6IT\/jG\/0zWA5WmJpq03SpO6CWRC+DEtsq\/dg7I5jV\/2UMc2Nwsi5s+L5HA1IMFylaJUOG0t9786ZqggnWw+rsTOF5aFJtB85A9RD2KV1UOsiTMCvSI=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069069,"pkt_len":98,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLTgkAAQAZ+PAoYUryLlgB9t2MBu1EoBGBiI9R\/UBiiGP+3AAAmAAAA9OvkaLVdqRc+Gkt7POZ3i3B\/uis8h\/TY+A6theSHIjTsUaV8qaQ=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069069,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzZkAAPwZJmAoYUrxn9jn7x00fkMsN+KYrPwdqgBAApdpnAAABAQgKAAsaFJj3DJk=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069069,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKLUAAjwb4u4uWAH0KGFK8Abu3Y2Ij1H9RKASKUBCfhuHyAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069072,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTTnkAAQAbVigoYUrw2\/\/3H5i8UZ+uf0YYGiXPCgBQCY5HBAAABAQgKAAKjTTTnT0k=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069072,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADwsMEAAQAZ88QoYUrw2\/\/3H5lQUZzqvj2AAAAAAoAI2sJHJAAACBAV4BAIICgACo1AAAAAAAQMDBQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069073,"pkt_len":76,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALQa8ITb\/\/ccKGFK8FGfmVG+Fj0U6r49hoBJF6jkFAAACBAV4BAIICjTom84AAqNQAQMDCA==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069073,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADQsMUAAQAZ8+AoYUrw2\/\/3H5lQUZzqvj2FvhY9GgBABtpHBAAABAQgKAAKjZTTom84=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069073,"pkt_len":146,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIsMkAAQAZ8qQoYUrw2\/\/3H5lQUZzqvj2FvhY9GgBgBtpi\/AAABAQgKAAKjZzTom84WAwEASQEAAEUDAVFRUVESVPKV5Ej6iE0e+b\/OK2fBD2XxGFd+RBJAtWh8AAAeAAQABQAvADMAMgAKABYAEwAJABUAEgADAAgAFAARAQA=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069073,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADQUukAALgambzb\/\/ccKGFK8FGfmVG+Fj0Y6r4+vgBAARqynAAABAQgKNOib\/AACo2c=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+2219{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","pkt_oversize":false,"pkt_ts":1430069073,"pkt_len":1456,"pkt":"AAACEgAAAAAAAAAAAAAIAEUABaAUu0AALgahAjb\/\/ccKGFK8FGfmVG+Fj0Y6r4+vgBAARqHKAAABAQgKNOib\/AACo2cWAwEGtQIAAEYDAVU9H1Gb\/qiDm98eXfIJxb4shEK1GhPjZeBEv8P67\/0aIFU9H1G382hmASwGnCuJDP0Mh2TynvUtxumEykegoF7eAAQACwAGYwAGYAADPjCCAzowggKjoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwgaQxCzAJBgNVBAYTAktSMRQwEgYDVQQIDAtHeWVvbmdnaSBkbzEOMAwGA1UEBwwFU3V3b24xJTAjBgNVBAoMHFNBTVNVTkcgRUxFQ1RST05JQ1MgQ08uLCBMVEQxHjAcBgNVBAMMFSoucHVzaC5zYW1zdW5nb3NwLmNvbTEoMCYGCSqGSIb3DQEJARYZYWRtaW5AcHVzaC5zYW1zdW5nb3NwLmNvbTAeFw05OTEyMzExNTA1MDRaFw00OTEyMTgxNTA1MDRaMIGUMQswCQYDVQQGEwJLUjEUMBIGA1UECAwLR3llb25nZ2kgZG8xJTAjBgNVBAoMHFNBTVNVTkcgRUxFQ1RST05JQ1MgQ08uLCBMVEQxHjAcBgNVBAMMFSoucHVzaC5zYW1zdW5nb3NwLmNvbTEoMCYGCSqGSIb3DQEJARYZYWRtaW5AcHVzaC5zYW1zdW5nb3NwLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAsyrNiMIXJ++fpsiI08sYxPZbKOY56a37f6J9ViQReAUe3UWF2fdOff49ukAjUISbhahOinbZux+ildb7qUyHJVHQXanBrQsLoODvfOiws0bRofk+EjA3+puR1KI8EgNDCJfkzYF40k16LBiMv6fKIGXOV6sbZciKSSDD+AX5+08CAwEAAaOBiTCBhjAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUHQ6IKqRzfLkHpPDYYWaWWRoHaGswHwYDVR0jBBgwFoAUWMjZPBPgzaBussvwASa64F2DMFEwCwYDVR0PBAQDAgXgMA0GCSqGSIb3DQEBBQUAA4GBALo4j8DvDTq0WR5v2UJovDtyilA1Zel1mK2n\/GtzjEjxAUkMxaGxxxnaEWdSVH0\/0pG7jG3ieJSWSLWW4HdJJ+ZytoamKq2k87O5sF5LkM+ZGg+UlFyFpcvLuYXtbZHa4CFAnYmBZ5nQNz06gzWDYU9\/yRhZSf2unf7zNha\/BodKAAMcMIIDGDCCAoGgAwIBAgIJAPMld7YDENSnMA0GCSqGSIb3DQEBBQUAMIGkMQswCQYDVQQGEwJLUjEUMBIGA1UECAwLR3llb25nZ2kgZG8xDjAMBgNVBAcMBVN1d29uMSUwIwYDVQQKDBxTQU1TVU5HIEVMRUNUUk9OSUNTIENPLiwgTFREMR4wHAYDVQQDDBUqLnB1c2guc2Ftc3VuZ29zcC5jb20xKDAmBgkqhkiG9w0BCQEWGWFkbWluQHB1c2guc2Ftc3VuZ29zcC5jb20wHhcNOTkxMjMxMTUwMjEwWhcNNDkxMjE4MTUwMjEwWjCBpDELMAkGA1UEBhMCS1IxFDASBgNVBAgMC0d5ZW9uZ2dpIGRvMQ4wDAYDVQQHDAVTdXdvbjElMCMGA1UECgwcU0FNU1VORyBFTEVDVFJPTklDUyBDTy4sIExURDEeMBwGA1UEAwwVKi5wdXNoLnNhbXN1bmdvc3AuY29tMSgwJgYJKoZIhvcNAQkBFhlhZG1pbkBwdXNoLnNhbXN1bmdvc3AuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDS\/wx087bX6AA7bz\/rPd\/AOtm8g1ebRfENevGCnMrnUw==","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap","datalink":113}
+0152{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_chat.pcap"}
diff --git a/tests/result/nDPId_KakaoTalk_talk.pcap.txt b/tests/result/nDPId_KakaoTalk_talk.pcap.txt
new file mode 100644
index 000000000..44d9d6767
--- /dev/null
+++ b/tests/result/nDPId_KakaoTalk_talk.pcap.txt
@@ -0,0 +1,6408 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069140,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHLza0AAPwZJVQoYUrxn9jn7x00fkMsN+RcrPwfugBgApZHwAAABAQgKAAs11Jj3Xso6AAAArVkC\/4gP\/deLY5qAl+gvk5f8xql5QXAwvM9bb5tQyHwtP1GibAaltsw94jGcvj4NNAB8Nc8SXCTCPg==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069140,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADRbKkAALgby1Gf2OfsKGFK8H5DHTSs\/B+7LDflVgBAADqYIAAABAQgKmPgkmwALNdQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069140,"pkt_len":194,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAALJbK0AALgbyVWf2OfsKGFK8H5DHTSs\/B+7LDflVgBgADj7dAAABAQgKmPgkrAALNdR6AAAArVkC\/4gP\/deLY5qAl+gvk5f8hql5QTAwvM9Zf4dQyEAJD7QL56t1BA6CZFNB9CDoZPBzNcfqISYY4Bqx6IvbToog47dFxVed4MxS159GEgFcWpzNI6MS\/uDRtBTN\/KgQO5PWR5hOlzi0NPjPSZ5ZvXYRnArc8Dv9Cys=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069140,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzbEAAPwZJkgoYUrxn9jn7x00fkMsN+VUrPwhsgBAApaS6AAABAQgKAAs1\/Jj4JKw=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069141,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgY+0AArAbF1ngcGvIKGFK8AFCG5WVqLr9xAeFBUBH\/\/1JPAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069141,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjM1kAAPwZ\/FwoYUrx4HBryhuUAUHEB4UFlai7AUBA5CBlHAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069141,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgY\/EAArAbF1XgcGvIKGFK8AFCG5WVqLr9xAeFBUBH\/\/1JPAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069141,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjM10AAPwZ\/FgoYUrx4HBryhuUAUHEB4UFlai7AUBA5CBlHAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069141,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoACgAAEAArAbexXgcGvIKGFK8AFCG5WVqLsAAAAAAUAQAAKSeAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0184{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069141,"pkt_len":157,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI3lSkAAPwYIYQoYUrw2\/7ns5iQUZtvqJ3tQl6xegBgAe+ktAAABAQgKAAs2irXIgpc8aXEgdG89J3hpYW9taS5jb20nIGlkPScwJyBjaGlkPScwJyB0eXBlPSdnZXQnPjxwaW5nIHhtbG5zPSd1cm46eG1wcDpwaW5nJz48L3Bpbmc+PC9pcT4NCg==","pkt_caplen":157,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069142,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTWOEAALQYpzDb\/uewKGFK8FGbmJFCXrF7b6ifUgBAAZ2sMAAABAQgKtcrV6gALNoo=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069142,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFfWOUAALQYpqDb\/uewKGFK8FGbmJFCXrF7b6ifUgBgAZ9bAAAABAQgKtcrV6gALNoo8aXEgY2hpZD0nMCcgaWQ9JzAnIHR5cGU9J3Jlc3VsdCcvPg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069142,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTlS0AAPwYIuQoYUrw2\/7ns5iQUZtvqJ9RQl6yBgBAAe2qnAAABAQgKAAs2uLXK1eo=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069146,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFPzbUAAPwZJcgoYUrxn9jn7x00fkMsN+VUrPwhsgBgApZeOAAABAQgKAAs4cpj4JKwbAAAArFkC\/4gP\/deLY5qIg6dg3inW8TLcnvrnkkwr","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069147,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAF9bLEAALgbyp2f2OfsKGFK8H5DHTSs\/CGzLDfl0gBgADrhfAAABAQgKmPg+0gALOHInAAAArFkC\/4gP\/deLY5qIg6dg3inW5TLcnu7nkkw7fFn03dyDxLGHftrV","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069147,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzbkAAPwZJkAoYUrxn9jn7x00fkMsN+XQrPwiXgBAApYerAAABAQgKAAs4m5j4PtI=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069159,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzUvUAAPwaqhQoYUrzLzZPXvWkAUI8S6Z4AAAAAoAI2sOF5AAACBAV4BAIICgALPSMAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069159,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzUvkAAPwaqhAoYUrzLzZPXvWkAUI8S6Z4AAAAAoAI2sOEVAAACBAV4BAIICgALPYcAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzUv0AAPwaqgwoYUrzLzZPXvWkAUI8S6Z4AAAAAoAI2sOBNAAACBAV4BAIICgALPk8AAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy2akAA+AYP6MvNk9cKGFK8AFC9aWNxqASPEumfYBIRHIjbAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy9PkAA+AYJFMvNk9cKGFK8AFC9aWRnCMaPEumfYBIRHCckAAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACioy0AAjgYyVNg63KEKGFK8Abvded6D6B\/TTMkUUBSjubgsAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUwEAAPwaqlgoYUrzLzZPXvWkAUI8S6Z9jcagFUBA2sHrIAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUwUAAPwaqlQoYUrzLzZPXvWkAUI8S6Z9jcagFUBA2sHrIAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1155{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069161,"pkt_len":665,"pkt":"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","pkt_caplen":665,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0340{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAArAYSU8vNk9cKGFK8AFC9aWNxqAWPEumfYBD\/\/59yAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgREkAArQYAKcvNk9cKGFK8AFC9aWNxqAWPEuwAUBD\/\/68XAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0617{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":262,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPYRE0AArQb\/WcvNk9cKGFK8AFC9aWNxqAWPEuwAUBj\/\/7nXAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ4DQoNCoJfAAAAAFUr0H1HAhACxkMAjgS6TxqE8QDMBQYGAIBAoTrtQhJTdPFrb40+\/1\/O2g==","pkt_caplen":262,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgRFEAArAYBJ8vNk9cKGFK8AFC9aWNxqNOPEuwAUBH\/\/65IAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUw0AAPwaqkwoYUrzLzZPXvWkAUI8S7ABjcajTUBA6oHOpAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjUxEAAPwaqkgoYUrzLzZPXvWkAUI8S7ABjcajUUBE6oHOnAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcACgRFUAArAYBJsvNk9cKGFK8AFC9aWNxqNSPEuwBUBD\/\/65HAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADzn5UAAPwb5gwoYUrxuTI8ygMgfkPcR2OkAAAAAoAI5CAV2AAACBAV4BAIICgALPwwAAAAAAQMDBw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":76,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALgbyaW5MjzIKGFK8H5CAyJJ42pD3EdjqoBI4kOpNAAACBAV4BAIICkTbaagACz8MAQMDCQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn5kAAPwb5igoYUrxuTI8ygMgfkPcR2OqSeNqRgBAAc1DtAAABAQgKAAs\/HETbaag=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069163,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMLn50AAPwb4+woYUrxuTI8ygMgfkPcR2OqSeNqRgBgAc+MXAAABAQgKAAs\/HUTbaagWAwEAiQEAAIUDAW\/AJ5x07YpI03eyTIApyp52T5fbgJrvB2vzSmAW7uAOAAAYwBTACsAPwAUANcATwAnADsAEAC8AlgD\/AQAARAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw2UAALwZAmG5MjzIKGFK8H5CAyJJ42pH3Edl4gBAAH0+uAAABAQgKRNtqrAALPx0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":920,"pkt":"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","pkt_caplen":920,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn6EAAPwb5iAoYUrxuTI8ygMgfkPcR2XiSeN3lgBAAgEvhAAABAQgKAAs\/NUTbaqw=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0796{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":394,"pkt":"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","pkt_caplen":394,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0671{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":302,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR6w20AALwY\/rG5MjzIKGFK8H5CAyJJ43eX3Edq+gBgAIYO0AAABAQgKRNtrvAALPzUWAwEAqgQAAKYAAAAAAKD3FZSkod9AGBhY\/5X2U\/i0ZlUT19StXS97iyKpOUa4IW\/fyXON8W7ON1PPWxIsbCFlSHKfXZzC9eGaF0YcZ5Vky\/m+ZkbJO7AxjCAJ7euFadRchQdVzPIZk2Ua8ouf0\/EszfOXqattY5O6GsHl+975F0cZKKkRi1W0P3N5xnbqZMkVk7o5HtDEVFhjV0OWYTBoGuJ3dvVMfhwnAHMV19wcFAMBAAEBFgMBADA5UfCcpaWCvMf6Zr8mRRWhn9ER98GyiCk9DWgwLjFlP9ZoGBTEoN6zfrpW\/0ayigQ=","pkt_caplen":302,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":814,"pkt":"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","pkt_caplen":814,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":574,"pkt":"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","pkt_caplen":574,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0944{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":504,"pkt":"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","pkt_caplen":504,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTzb0AAPwZJjwoYUrxn9jn7x00fkMsN+XQrPwpLgBAArTq3AAABAQgKAAs\/apj4gzs=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0933{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":498,"pkt":"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","pkt_caplen":498,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAACjTg0AAQAZ+ZQoYUryLlgB9t2MBu1EoBIpiI9Y5UBCiGOkBAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn60AAPwb5hQoYUrxuTI8ygMgfkPcR3aiSeODJgBAAmkJyAAABAQgKAAs\/bkTbbLQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF7zcEAAPwZJZAoYUrxn9jn7x00fkMsN+XQrPwpLgBgArfpVAAABAQgKAAs\/cpj4gzsmAAAAA6yR+4gP88yNN9XOxadg3oGk1EFJKl7++3vOx1oJEMk6hPTyHHo=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":98,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFLThEAAQAZ+OgoYUryLlgB9t2MBu1EoBIpiI9Y5UBiiGP3wAAAmAAAA7+nGaLVdqRc+Gkt7POZ3izYaHM4cfJ\/pKc5wznSY7XhZjDJkzsc=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADRbLkAALgby0Gf2OfsKGFK8H5DHTSs\/CkvLDfmegBAADjopAAABAQgKmPiENgALP3I=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKL0AAjwb4uYuWAH0KGFK8Abu3Y2Ij1jlRKAS0UBCfXOA4AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069164,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADxKlUAAQAaV1AoYUrxuTI8y5ekjKS1pjaoAAAAAoAI2sFqBAAACBAV4BAIICgACxz8AAAAAAQMDBQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":76,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADwAAEAALgbyaW5MjzIKGFK8Iynl6dfwna4taY2roBI4kADPAAACBAV4BAIICkTbbpQAAsc\/AQMDCQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKlkAAQAaV2woYUrxuTI8y5ekjKS1pjavX8J2vgBABtlp5AAABAQgKAALHTkTbbpQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMJKl0AAQAaVTAoYUrxuTI8y5ekjKS1pjavX8J2vgBgBtm0bAAABAQgKAALHT0TbbpQWAwEAiQEAAIUDAc0IMYnVVZMQnojSelEd1V0KoNgUEJ7I0Qu6wTcqDhwtAAAYwBTACsAPwAUANcATwAnADsAEAC8AlgD\/AQAARAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyhUAALwb+625MjzIKGFK8Iynl6dfwna8taY45gBAAH2ZiAAABAQgKRNtvZgACx08=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":920,"pkt":"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","pkt_caplen":920,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKmEAAQAaV2QoYUrxuTI8y5ekjKS1pjjnX8KEDgBAB61p5AAABAQgKAALHYkTbb2Y=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0794{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":394,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAXpKmUAAQAaUkgoYUrxuTI8y5ekjKS1pjjnX8KEDgBgB60dYAAABAQgKAALHZETbb2YWAwEBBhAAAQIBAG0K85NVFhEZ7hFhOhKGxgyRETHunT8FGQj+gdYeJNGhl2iTodXARNpfVdu2p053PylRQ5i17tdvDyWHd72xyqohbELbToOfcGXrnB1e7OX6cfVBE2zPFq0LzHRh4WqlvJXmbdFC2c4\/OpXZ2J+AGS8oH4hFdJk55dD0Rqcg8k1yD8PtOCz3JTFofSJ5kPB9RlClZrWGmobdIODyW\/2SxycPTbIi3MtCy\/FJ+NV\/9XPOkhUES1aafiJUriL+AMVrSMXheyGDPbeIKAuUk9lHZQ+IKt5wU9hANFmjVausdYO\/AuzpyLfh859Mv2bMtHxFPWKKtvvMTDOSS378pAbYlfUUAwEAAQEWAwEAMBFMJwdLm84p2UKtLmvOwh+jBKFAAqnH7y6vsO7dMR4yZ5w0K8GnLcpOy\/dsnWL+mg==","pkt_caplen":394,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0671{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":302,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAR7yh0AALwb9\/25MjzIKGFK8Iynl6dfwoQMtaY9\/gBgAIdQvAAABAQgKRNtwRAACx2QWAwEAqgQAAKYAAAAAAKD3FZSkod9AGBhY\/5X2U\/i0MpxTcOThL2vCJOwLIHctIhJhbVKqgMfsPsuGU5ppnVaNIPFHIucQJJetyUxYwc8IhWUYpft5eIUS37zm3nqwElJYuHYbM1VBVwEB2pGGvRa\/DZ9VlXyqfltmwRg2q1MNtPiUKvMPFjKqhG9\/ANXnhI08gMpLwXhXDj2NqXHPjC\/WZDwihyPmSLrv32HhPTuuFAMBAAEBFgMBADCrg01tB59jb9CJJs57uREHyiJPkvP6NWrj9Js4EKD9Il3eVHOg10A0ygs0IDyUSAc=","pkt_caplen":302,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1299{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":766,"pkt":"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","pkt_caplen":766,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1257{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":734,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAs7yiEAALwb8Tm5MjzIKGFK8Iynl6dfwoe0taZI5gBgAJCccAAABAQgKRNtxZQACx3oXAwEAIBbu9uAJg9KejXeOW2eVwXNlTw84ENpo\/M8t0yWdLIBRFwMBAnD8\/n5dmx5yFayof5AuEOzyfFGSsuX4moQaSelOPWiF+UZEJphobW5gu8v+ad8sW8rg\/d\/HDWCGMAyq5rRYLnItWPJ2Fh3gNQfzggt6JGTgZvzawxIC\/2pueXO2eu1Vw1obTExhQq9qiDQ\/5REti2wMh0pUYVwhRdkYVK8xP0lMu3mfP+Ygm3uqN6qLNghIx\/5cJuOcj7amWTjPQHy47UJlvwM998QUmOrYuRXbaroscu3pcsDnywoLTcLx9KO7lJFw\/gZFJqvwvTRQBDV7It3yueZCiBQ\/iRoeGmw4tDYkte\/ysW73Q3eyGF2HECKqFnBNA8jc+EL64ZU6u8u15HJsd1hfR8M+fUyL+edOruuDm0hP9JNBTkjhsB6bDH9U88dJM7aI7wM\/DjJOTjBw8MgrDTuMv3osumvLOCS5eUJVjEJ+ZD2aOxMDhU6l+6\/KW248cHgPPF7w3PnRme6fjjwwU8HZvpfkFFvJgHDpo3ESXLdNp6j3dxGO6pkIjiVDb4UB7CKO2pDuTfrE9wISLgUp2e\/gAC99o2imZ7DQf0nBfID8+\/UrAAEzNu2LSaRxklqLBSUWZy2W97bJFRREf0CgM4WRPv8WqXg4NRb\/MhCEvr4kOVoW9L00yXq+RYObQyPixWLrG48PBq68n2XfkE2rEI08iTyh8zd4iMWAI7tRLI9DRvYGRcFwSUGG1ZD5kQA0CS4Ym9MjTxGXJJGBUCEnSd\/oIqxw0C50KjHrCq9Q9T6+aU+u93h524S+E7uH\/53KMYbD+WPsi0WxXhRLnoJOXSOk0yAUarVyVDyMJs8TgaRu5aOUMl85JD2NBvQnYWc=","pkt_caplen":734,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069165,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKm0AAQAaV1goYUrxuTI8y5ekjKS1pkjnX8KSHgBACVlp5AAABAQgKAALHmkTbcWU=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJSUaEAAQAZSqQoYUrytwki8h34UbGWkOWcyCtXvgBgB1zgmAAABAQgKAALJQHWhBxYXAwEAW9BJTUK7bhQDJS6M4k2xveYn3KZ2THpi3b2p1WnyM44nZ0651+YzJehbLb+jV4nNEd4GZbKLQU+P8abQYninXFhPSKcNuFppnDwsImxNyj3HrOvurwOWRZpYp3o=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":862,"pkt":"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","pkt_caplen":862,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":782,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAv6w3UAALwY9ym5MjzIKGFK8H5CAyJJ44Mn3Ed2ogBgAJHYbAAABAQgKRNuEaAALP24XAwEAIKyRqSHyPEKNOHG7RbUjn3N9oOyPfWWQZ\/Z\/LgkxhP+lFwMBAqBa4zdJxnEZDfRNwZy\/hPBxqFpDvQ5hYHi+mhtg8aEvgmGttqPr9vNQNNBla7S12j7U4UU2Kxhqku9QG\/Gapbkn5p9eMlTKUjpoG4rm5ZMvzTwBRtHNEksYviVJewGN9zRqzro6AKklCdlULJ83Qa50rL0i7o4Cryf27OrhVtmosRHsmWWFquDQACUMe3C\/XBbk5th1bY2F09Fqvb7hZe\/51CB20BWC4pRNrAmFqGBKsWjVJGYP8DW0V7hTgSx96n6GbfXZG8C+kTfwq5enqhz0vKuuy0uZQXTMyNj6W1bdkNBjr\/LdeeBizb5p9AvbwMkoWh9rLpCdJ6mGMJcJhht903nvgcT6DtM9rn4OUQLwtnc8JW2QCYkZJng+BKHgVcUw6zbLMQyMsaZCkR3Ztb1VRE8gnGnxia3i18lF3q8W1E6+733azou0PfOVuhgUUccC\/s4wr0aIDe+pe6RoLxJbkCcYfqOtooUr\/R5f7Q3rtFL5jrQzWqlu7mTVvibdhrppK4H5OD\/5PcBoFXz3bevRM4W1XuHukXtP4Zad\/acGJykjLwcTtwtDw2\/rneRCLC3YmiChjTuPTwXbr26BQgLHieZWTK4J8J32arQRigQA2s5Y+BVT6RUVI+LrYUEIcjmsfpuzn0kwxisCDWerzdRJ\/A+g9svnfaqwJVj+JvV+SPan6vKNiHAxWibUZ1urTAtPP462YVDUUqnW\/wGEfHSsKUnY5mNBpt15FPgXybQylzjB+W3n3I+RbfKxMsWqMveLTxq+8Wwi5I4jEpw2zvtCHDpP+92cPcbCtcydfd+\/hT+kQs5VnzvXG78uuO6+1JhmeoCWOg40kWU8YzuwMRM47lFGa8z2ppWH+p6jh7v0PUEAux+WiTEvSWhXK7fXVR4=","pkt_caplen":782,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":846,"pkt":"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","pkt_caplen":846,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKnUAAQAaV1AoYUrxuTI8y5ekjKS1plVPX8KeRgBACi1p5AAABAQgKAALJfUTbhGk=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn7EAAPwb5hAoYUrxuTI8ygMgfkPcR3aiSeOOTgBAAqCWIAAABAQgKAAtBzETbhGg=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n7UAAPwb42QoYUrxuTI8ygMgfkPcR3aiSeOOTgBgAqPR6AAABAQgKAAtBzUTbhGgXAwEAIBnluoAxmGsbjSSghixkdaSDIjSYX25wkt+8RBvsg5f4FwMBAIDZso0VXLxlVyzWYQHqvAkL9HrkBJF4NmKHlCnTjVCzUJRJpAxG5W\/KDzDzzwLS6IV1PPKufK6HCwnJmz76dup3nSmMi2i9yCOs2txtFjOT6CfWMoT+FwneLbcSnxUNXWXeojiJ5zXCS\/BTDVFDhQbd\/RNtshJHz\/Qx\/3q1tFGtow==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0754{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV7yikAALwb9vG5MjzIKGFK8Iynl6dfwp5EtaZVTgBgAJ4ulAAABAQgKRNuFAAACyX0XAwEAIE0jrfkqN43a5LV84AgOgmi86zSfEgzYu5YCr8nlNntMFwMBAQBPPV\/1iy\/l4p1H9V0ccWwWTDpK8fKtGIEoM4+MyyApcNYt+Dc4vfLiFqDLNAbdfnkDTHKd3h1qRYGhPp0HUE+kKRtlsveWFQSR1LKX+utZvIFkU1nA1fzYGpzf7fE\/x0ZJlZhUlClNDwYmxQ89QybPWNor\/Zz4ZRCbaFa75a0zVvbrKiepFBGMAPGwy4IlSBJtJD+LA22Stz2ufkeyzWrM+TuPtdydRF52IWRki6fhEoxDxuA3SCKq9L21JWIkf3DVVjF5XCqhMBO+nZ00XKPT46ivpKBbk5plmP1ZE2g7T6LwFAyJGqdJpkCE\/n8cCKjodifSlkdbrl\/VZ5YRoL0n","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKnkAAQAaV0woYUrxuTI8y5ekjKS1plVPX8Ki7gBACwFp5AAABAQgKAALJjETbhQA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0753{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w3kAALwY\/aW5MjzIKGFK8H5CAyJJ445P3Ed2ogBgAJCgvAAABAQgKRNuFKAALQcwXAwEAIMfy3jwo\/J+rfo8FfVkoc6dMBcPicgemGlOYD5SBDa7hFwMBAQAw0cz9rghfv0CCBjBszaHLwT9yuRdjyDj2gPqU0nvWhm6WIPXwufHGIYYY+XbwPX\/wi2Q1iwSJ+7lIfyAKxZC4c7rnA33+cUN06\/oHAf+sZUiTyhmrsMWOJgmtARL79KJkbwB1XkL02inGke5DrnJR6kGV51HiSKvMnsuM60bndFQRRk1dP2XqQOo+AIPwpQDASrzHSBWy+9jHGHKqcCQH9hyLDoRemVRI3PR9U4Pa2GZWhVxP3dywkO\/IlSYBFFsh23mH2nTCPR5dIaGH+0h4Ip0b2wRgHF6n6Cr+20Y0qV4WrPdyvLwtT6sw4QwQUeffe7Spp2WzU5V72pejQiqo","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAPxHbOAoYUrwByQGuLDlaBQBWgNSByQAHC4ZVGZBlh61hMGy+mVz7szeLE04wAIGpUs16HTnaFQo\/DwShnbgrVUo6QPfO7hnIEQI6Zble8vC3moejgAAAAXwPCk3m1v5lftk=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn7kAAPwb5ggoYUrxuTI8ygMgfkPcR3lKSeOS9gBAAtSLUAAABAQgKAAtB30TbhSg=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw30AALwZAkm5MjzIKGFK8H5CAyJJ45L33Ed5SgBAAJyMkAAABAQgKRNuFeAALQc0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n70AAPwb41woYUrxuTI8ygMgfkPcR3lKSeOS9gBgAtSTKAAABAQgKAAtB4kTbhXgXAwEAIBJ9bNQpYwM7qC+el06NuR3c8uuz0ls6qu921wYzpPEIFwMBAIAfi5q02g\/Sisk3i5RYeZHWLWfaxzZ1oYBhs\/gVR2ghyel9ykoKPHFEHivRyf\/odbsZhgGtrNDBJxzbQkDns\/ltWoLwl9EwFZF7wSBve1IHiyM64DP1v\/yQXX8fTjsQO+lzZMdo5RU6VqqGQmQvr0vCAzXMhDMoULcgwigyph+gmQ==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKB1aBwBWSf6ByQAHVJql2hcYBvUW09\/cV2PnqW9IAC+tkcS3zbxHaXzNy97m1tMPsxdrmxKMjQTBocmvV+MtI4fyJpYC3zCcgAAAAaPWslm6g8tl\/I8=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069170,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5Kn0AAQAaVKAoYUrxuTI8y5ekjKS1plVPX8Ki7gBgCwAVtAAABAQgKAALJmETbhQAXAwEAIGpoIruv8BnkAeA5hdPZli\/BXGKaaQegFUFkmWV9TYBeFwMBAIDD3apmgMciP2Nh3eerxIrrhQkh\/CpZOU9Rj84ER4Txqb8\/btrUWccdOt4sz7qBUllTJq0269FRTpCvTtMw4WsbaIazpSE7NxJzPcDrFBTHyF6sM193bKLjZMmbVw1gj541XZZj\/lNMNUZvrMikEy4MJjnp2cp9CjhJCjWjrvZnJg==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw4EAALwZAkW5MjzIKGFK8H5CAyJJ45L33Ed78gBAAKiHNAAABAQgKRNuGDQALQeI=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABATCmA7E6yizmc2guGVRn+xfaQv+g9g3ccEnajV1GbM8MpJWVK2C77CAiJwDoJYkgGCqWuS2HWMkwGeQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/C92AbE6zizmgmguGVRkt\/rZnfXpGz0N2A\/IfJpewUyMSY166JO1xGXdEkGNQd31ADIw6ZS3SDh9Y","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/5SmAbE60izmkWguGVRmezvGSQL2r8\/lU9MEKvF6SC08uWokrFHcn2V7\/8UTxLNEjkf5mPRch1tsI","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAGxH\/EAHJAa4KGFK8WgUsOQBWReSByQAHVJql2hcYBvUW09\/cV2PnqW9IAC+tkcS3zbxHaXzNy97m1tMPsxdrmxKMjQTBocmvV+MtI4fyJpYC3zCcgAAAAaPWslm6g8tl\/I8=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyi0AALwb+5W5MjzIKGFK8Iynl6dfwqLstaZX9gBAAKjpHAAABAQgKRNuGXQACyZg=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jTmAbE61izmoGguGVRn1lqaVNU04\/0pxhmXG3LpjHLoEtStGBpgmAENokf++6bVHtFV\/dhtsB+qy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7uaAbE62izmr2guGVRn8RhAolyCXjh9CBCF49gOSkQpyC1NGr5hVj6UCX85c7EbzzNysGYkXDN7V","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3fiAbE63izmvmguGVRmGYc\/PxspsGATqnXfn\/lPOI8HaYGxhOfAK95CP\/Qe8aH4EXhyz4xuxnPQn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4amAbE64izmzWguGVRmsmUnG0GC8lkny6NAie4a5CSGZuJh+JZq1q9GcWniRPJDg6+UyOn2o7f17","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXWCuA7DE+fqkVA1Sapdp6cTmDebnhh8KUkQVLcfVIHO+KdE\/hh8TrsDi1pxsxiqViFSLVRYeZKeMWrEXQddUHKF8UZHmGznF9XlwFasBuVesU","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/8i6AbE65izm3GguGVRmdGcA+AQC9PW6Iu7D56EiFtVEV8BRmHczMxTAvU5GNKbDmUz3uXGfPQe61","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":192,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAQBHZ8goYUrwByQGuKBxaBgCccR6AbDE\/fqkYw1SapdpQtIGDUUcsKy8FZc8SkcXbnkaLnkk7o+K31\/Lp8iVo3SBPJc3DyoRUtaFntc3koP5JLgEppFZXqNkw36nmYntuZ329GNTJ06T0XeyZJfDm34fzEotPLv3zEaM1kQ76cuJR6IF9rGbKT3sQKWcYIsd5M3XbqcXgkS4bFd8efSkCV9pxMGaMM2HU","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPG\/OAbDFAfqkcg1SapdrEmBFpbnVmJMblF0rZoL8vvV92uiSDpJJT7NfUzojI6pP2kn9ZuUksJi0oXTyacMa3Otx9PZKNJxznlw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAGxH\/DwHJAa4KGFK8WgQsOABXVBGA7DE+fqkVA1Sapdp6cTmDebnhh8KUkQVLcfVIHO+KdE\/hh8TrsDi1pxsxiqViFSLVRYeZKeMWrEXQddUHKF8UZHmGznF9XlwFasBuVesU","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/hXCAbE66izm62guGVRkHgh4tICatZMccnb38kR+1m9O0Ul\/CTW3Uyj7snYjqx7kSDxqHyKCMOWLm","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/s0+AbE67izm+mguGVRkZwl1ctOZjRgsqNT5LY00DdmS8se5yNme0cqQ+NjZX0T6CTd9Pgy3o8WxK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGhEAKAHJAa4KGFK8WgYoHAA\/9kiAbE65izm3GguGVRmdGcA+AQC9PW6Iu7D56EiFtVEV8BRmHczMxTAvU5GNKbDmUz3uXGfPQe61","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":192,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAGxH+ygHJAa4KGFK8WgQsOACcbQSAbDE\/fqkYw1SapdpQtIGDUUcsKy8FZc8SkcXbnkaLnkk7o+K31\/Lp8iVo3SBPJc3DyoRUtaFntc3koP5JLgEppFZXqNkw36nmYntuZ329GNTJ06T0XeyZJfDm34fzEotPLv3zEaM1kQ76cuJR6IF9rGbKT3sQKWcYIsd5M3XbqcXgkS4bFd8efSkCV9pxMGaMM2HU","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0185{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KK6AbDFBfqkgQ1SapdqU2NQbnkxB3Xf0AOGlSFlAxEVDNvMv8YdF7fCM5vVAJXsQ3FrK2qCKRi6W","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgQsOABPF9mAbDFAfqkcg1SapdrEmBFpbnVmJMblF0rZoL8vvV92uiSDpJJT7NfUzojI6pP2kn9ZuUksJi0oXTyacMa3Otx9PZKNJxznlw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/sCAbDFCfqkkA1Sapdrms6k5bA8uk148IvsW\/o+4DQhL7O8s8YAqe0F8K8vb3RCqd61GApYofC3v","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/sKqAbE68iznCWguGVRkYcp+4QTd0FJM0UvSk8Wow3kEHswl4NSiZZWEoW1Y1z+DjiXTWeJ86pstR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/YxOAbE69iznGGguGVRk1dQA24IiZ2MbxVQk+rwzkcJLofNrnstwQsKQhF130TYC9rCI3oF29\/Y22","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGxH\/JwHJAa4KGFK8WgYoHAA\/iYqAbE66izm62guGVRkHgh4tICatZMccnb38kR+1m9O0Ul\/CTW3Uyj7snYjqx7kSDxqHyKCMOWLm","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/t2mAbE67izm+mguGVRkZwl1ctOZjRgsqNT5LY00DdmS8se5yNme0cqQ+NjZX0T6CTd9Pgy3o8WxK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rT2AbDFDfqknw1Sapdr2EpWFWTMYKjGVL24OatyncSh8grrXgVrSXzAVb\/8AyGQi4CE\/PCRAwU3O","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgQsOAA\/JJSAbDFBfqkgQ1SapdqU2NQbnkxB3Xf0AOGlSFlAxEVDNvMv8YdF7fCM5vVAJXsQ3FrK2qCKRi6W","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hViAbDFEfqkrg1Sapdqesox0IelIfRLF05fLbVagizmbJL9sv9aii20t0tVuvB2ROcdkpe1iMRHS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/J8CAbE6+iznJ2guGVRmASGnrNd9EE2Ml24sarXI31BLbPoa+rz5gYld7RFoC9AgrnUd7CxAw22RM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+qaAbDFCfqkkA1Sapdrms6k5bA8uk148IvsW\/o+4DQhL7O8s8YAqe0F8K8vb3RCqd61GApYofC3v","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/tMSAbE68iznCWguGVRkYcp+4QTd0FJM0UvSk8Wow3kEHswl4NSiZZWEoW1Y1z+DjiXTWeJ86pstR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Zy2AbE69iznGGguGVRk1dQA24IiZ2MbxVQk+rwzkcJLofNrnstwQsKQhF130TYC9rCI3oF29\/Y22","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qSOAbDFDfqknw1Sapdr2EpWFWTMYKjGVL24OatyncSh8grrXgVrSXzAVb\/8AyGQi4CE\/PCRAwU3O","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1nqAbDFFfqkvQ1Sapdr8fgXxjR12knwwlwuRt9e9sv03TPLyTqIw9GO0AomU5xAc8ZbVU\/scU4bs","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ZoOAbE6\/iznNmguGVRlDjQXzbF1rASmqvk5c6vimccEbJE3ALLUFwti4JppLcSkjDDPb6J4hNxqN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/k4uAbE7AiznRWguGVRkP4Ke7AZPZqnu1OtfxXQBgxBEgU2FJ8AM9UefBQQrIEn2e8xLyOKYd2u12","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/gT6AbDFEfqkrg1Sapdqesox0IelIfRLF05fLbVagizmbJL9sv9aii20t0tVuvB2ROcdkpe1iMRHS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/K9qAbE6+iznJ2guGVRmASGnrNd9EE2Ml24sarXI31BLbPoa+rz5gYld7RFoC9AgrnUd7CxAw22RM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EZ6AbDFGfqkzA1Sapdp7T+s\/\/ibpFuPEhuPOjuZYXOIWlcHVvwxLMz4CH6WtefW0MtYvteFFU\/5o","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zu6AbDFHfqk2w1SapdpNMlK5M6WdSITKqKNtegwC3g7s2ZIOTBhOpODWgwuFJbRgBtpgp4r0rief","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0mCAbDFFfqkvQ1Sapdr8fgXxjR12knwwlwuRt9e9sv03TPLyTqIw9GO0AomU5xAc8ZbVU\/scU4bs","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/KsOAbE7BiznVGguGVRlBOel113Bsf+hkRgUK1LGk0WoxhS2wu+VFmwjRvQ+Q0mmaxFc\/7XVjS2pN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JE2AbE7CiznY2guGVRkSqn1FShlKIeQ8mDiYz7w3guqPnrdk7F0jkbbViVQ9yTnkSlnz5NU3Gees","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/ap2AbE6\/iznNmguGVRlDjQXzbF1rASmqvk5c6vimccEbJE3ALLUFwti4JppLcSkjDDPb6J4hNxqN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/l6WAbE7AiznRWguGVRkP4Ke7AZPZqnu1OtfxXQBgxBEgU2FJ8AM9UefBQQrIEn2e8xLyOKYd2u12","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/O0aAbDFIfqk6g1SapdqrV8Q9BMU3Fcozst98xdpZC7cMR6ROZ2l1CmH1ZBaIn4vuySEjpP\/Ucs4q","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DYSAbDFGfqkzA1Sapdp7T+s\/\/ibpFuPEhuPOjuZYXOIWlcHVvwxLMz4CH6WtefW0MtYvteFFU\/5o","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ytSAbDFHfqk2w1SapdpNMlK5M6WdSITKqKNtegwC3g7s2ZIOTBhOpODWgwuFJbRgBtpgp4r0rief","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069171,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqX6qByAAMC4ZVGUMDyNdZMqzZvFL5masXDZVA6JQCTSwYzII6r0J+H6ebHDpiG6\/AGpupgF2zzgl2ppSiLVPnYiD98U8UjOQ2fRfyw\/ugiovyQFT+lfaAAAACkQQ8eHVaWMSL\/A==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ddaAbE7DizncmguGVRmV+gQ0PFapk2wvkfTJ4fJGExdU+HsfrQJm0oaqu1P4GBqGtrMPTRggUUdW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Lt2AbE7BiznVGguGVRlBOel113Bsf+hkRgUK1LGk0WoxhS2wu+VFmwjRvQ+Q0mmaxFc\/7XVjS2pN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KGeAbE7CiznY2guGVRkSqn1FShlKIeQ8mDiYz7w3guqPnrdk7F0jkbbViVQ9yTnkSlnz5NU3Gees","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqXmKByAAMVJql2trT+4JMtrXIu\/DNYLUyrcCH4nJIkwVlTlKbwLjRHdwKTf1t+cEG2dNtu5tj5fpNWxpJ1GyPSnYq1Tkhei6L7QH9KpD9dMR2BEbVSkSAAAACiCDm5WucO1eQLg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/dNuAbDFJfqk+Q1SapdqFgftCpd+vf9WEYGFXgQW90g+Mj2PFKsVx2lyZQj3jZABOqzIjb4etJ+p2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NyyAbDFIfqk6g1SapdqrV8Q9BMU3Fcozst98xdpZC7cMR6ROZ2l1CmH1ZBaIn4vuySEjpP\/Ucs4q","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/RGyAbDFKfqlCA1SapdoI32fsu1nJqpK7p\/Y1UPoTdFpRXVAlgycdJGWinlc0NnlPWFHLCkE8vJaD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/tumAbE7EizngWguGVRl03AKkYsugUhFVXaInAgxI83JIn4NEZ0dguzoJENdE5yzj7DtNzI561jLH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/1KuAbE7FiznkGguGVRkDxgO90ZqbS3sUjWqD+cTX\/ThT1FJ+odurb9LO1IV2JKqtqVPaSheiGh9x","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/efCAbE7DizncmguGVRmV+gQ0PFapk2wvkfTJ4fJGExdU+HsfrQJm0oaqu1P4GBqGtrMPTRggUUdW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGhH\/\/AHJAa4KGFK8WgcoHQBqY8SByAAMC4ZVGUMDyNdZMqzZvFL5masXDZVA6JQCTSwYzII6r0J+H6ebHDpiG6\/AGpupgF2zzgl2ppSiLVPnYiD98U8UjOQ2fRfyw\/ugiovyQFT+lfaAAAACkQQ8eHVaWMSL\/A==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9EKAbDFLfqlFw1Sapdov0LI5kRR+iN+YJ7RIVxAGqS0X88SD8X1l7WQ5ZuQSSYCz04o0wPiXzcdd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uh2AbDFMfqlJg1SapdqhbqgN4bcqwv5JswSwRJrDy3E4zNXts+hjyNgB83R7YYdWbfC9+2sDhUHA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqWkiByAAMVJql2trT+4JMtrXIu\/DNYLUyrcCH4nJIkwVlTlKbwLjRHdwKTf1t+cEG2dNtu5tj5fpNWxpJ1GyPSnYq1Tkhei6L7QH9KpD9dMR2BEbVSkSAAAACiCDm5WucO1eQLg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/cMGAbDFJfqk+Q1SapdqFgftCpd+vf9WEYGFXgQW90g+Mj2PFKsVx2lyZQj3jZABOqzIjb4etJ+p2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/QFKAbDFKfqlCA1SapdoI32fsu1nJqpK7p\/Y1UPoTdFpRXVAlgycdJGWinlc0NnlPWFHLCkE8vJaD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ebaAbE7Giznn2guGVRkil5l1Lj\/c1+W84UsgeQB2gdVKF2B+EnR4MCkzFR+byuU8GqNry6kISU9e","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/SoKAbE7HiznrmguGVRmc7q3Mb3Sem3+j2ALKFDcnkL0iL\/O2aflQIcHJ+FiGx5OSHRmqBBwFSbMU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/uwOAbE7EizngWguGVRl03AKkYsugUhFVXaInAgxI83JIn4NEZ0dguzoJENdE5yzj7DtNzI561jLH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/2MWAbE7FiznkGguGVRkDxgO90ZqbS3sUjWqD+cTX\/ThT1FJ+odurb9LO1IV2JKqtqVPaSheiGh9x","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/85uAbDFNfqlNQ1Sapdr2BvgIroapsMw9PzxInw4TQGyLd+vhKiiWW6J3Y4ROAlrgQbg5VZPBg+BP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8CiAbDFLfqlFw1Sapdov0LI5kRR+iN+YJ7RIVxAGqS0X88SD8X1l7WQ5ZuQSSYCz04o0wPiXzcdd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+ZqAbE7IiznvWguGVRlWNwcl5+fn9nY6gN2+FDmnpBNul5bvKxJUsa2BlcxEnJP6ZrpxmC2NLrLf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tgOAbDFMfqlJg1SapdqhbqgN4bcqwv5JswSwRJrDy3E4zNXts+hjyNgB83R7YYdWbfC9+2sDhUHA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":166,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCCg5yAbDFOfqlRA1Sapdo1jiBf77t0fnQ3YnWQZ6yroACrFUoDmiVkI9+6pPpArGSbnjx5A4q3Mqajy32YJj9dFu35b\/J5xsgaxqKsKxoK4lGYyehvfGpLO6Vl07MkrrHDwKiTbTsmEEewFBEGLVvh3V5e2luX3EKrlNlZDw==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":141,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBphJSAbDFPfqlUw1SapdoO2Bp9sjbP7MwdCb8eBYfkEyCWKQBItLTROd789CJkH06pFCpz4jYFndeAInE43l2JTnq+BZnR+gYHSTAtcSm6WL7aKMsf0RWp7yhx6D9d5l1okiK3","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fdCAbE7Giznn2guGVRkil5l1Lj\/c1+W84UsgeQB2gdVKF2B+EnR4MCkzFR+byuU8GqNry6kISU9e","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TpyAbE7HiznrmguGVRmc7q3Mb3Sem3+j2ALKFDcnkL0iL\/O2aflQIcHJ+FiGx5OSHRmqBBwFSbMU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Su+AbE7JiznzGguGVRmP0U1161EzFnS8kFlkBHO\/o\/jem4eJ2heaj67zQfyXeVdw+Z1zLWD3iuSQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/K+OAbE7Kizn22guGVRkFjjGsVdqEhkDdcpDpIZqNKMIDEzIrmQhW7ZNDG5zKiirUbSrayq+oT4+5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/74GAbDFNfqlNQ1Sapdr2BvgIroapsMw9PzxInw4TQGyLd+vhKiiWW6J3Y4ROAlrgQbg5VZPBg+BP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/bSAbE7IiznvWguGVRlWNwcl5+fn9nY6gN2+FDmnpBNul5bvKxJUsa2BlcxEnJP6ZrpxmC2NLrLf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":152,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIgAAEAAQBHaGgoYUrwByQGuKBxaBgB05piAbDFQfqlYg1SapdrPmz1p+6KD4AD4RAYAs45A22Q5qkL+Tta+EJc\/qWpd9hhyHcLDMwvsDJ3+jBlHg62zsnVL6I2MXQABu6mYQJfEINlGjD9xLujds\/YrBgPjBgbiM3TlVtL22H2LnnbEt1g=","pkt_caplen":152,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwhGqAbDFRfqlcQ1SapdpHTNHUZHUPPMc+bZpBBsy5XbALYvwuTZ8p+nmSh8VrK0pAaLj6A+DVYeumfJc8ECfrlgot1qyKHqp1q9mV7eI2Zym1o99wN80IhM\/pEaNVi4MglwykrT\/l1cZNfQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jp2AbE7Lizn6mguGVRngZMFAL\/8Kmk41DxPjNcJ3SDgkjIkPZOopA0pXb0qiuP6vzI4oALtad7Tv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/eXeAbE7Mizn+WguGVRkaMT3JuOYE7xsxAJ6Do9VQn2RiOFdFFyvqDRWlG2\/JmCa+NGBHzQkv042H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":166,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACCf4KAbDFOfqlRA1Sapdo1jiBf77t0fnQ3YnWQZ6yroACrFUoDmiVkI9+6pPpArGSbnjx5A4q3Mqajy32YJj9dFu35b\/J5xsgaxqKsKxoK4lGYyehvfGpLO6Vl07MkrrHDwKiTbTsmEEewFBEGLVvh3V5e2luX3EKrlNlZDw==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":141,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABpgHqAbDFPfqlUw1SapdoO2Bp9sjbP7MwdCb8eBYfkEyCWKQBItLTROd789CJkH06pFCpz4jYFndeAInE43l2JTnq+BZnR+gYHSTAtcSm6WL7aKMsf0RWp7yhx6D9d5l1okiK3","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkIn+AbDFSfqlgA1SapdoLIeqGfZbj2NOQagaf9xs19\/2ZuJqT37Ocz49f13cuXGmx\/\/w96HNhh93Rjvv2HWO9vNWZqsaZvN0hAXNEiODU35R7lefprniq1fo81OEMcQ==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TwmAbE7JiznzGguGVRmP0U1161EzFnS8kFlkBHO\/o\/jem4eJ2heaj67zQfyXeVdw+Z1zLWD3iuSQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/L\/2AbE7Kizn22guGVRkFjjGsVdqEhkDdcpDpIZqNKMIDEzIrmQhW7ZNDG5zKiirUbSrayq+oT4+5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":152,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIgAAEAAHRH88gHJAa4KGFK8WgQsOAB04n6AbDFQfqlYg1SapdrPmz1p+6KD4AD4RAYAs45A22Q5qkL+Tta+EJc\/qWpd9hhyHcLDMwvsDJ3+jBlHg62zsnVL6I2MXQABu6mYQJfEINlGjD9xLujds\/YrBgPjBgbiM3TlVtL22H2LnnbEt1g=","pkt_caplen":152,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4O2AbE7NizoCGguGVRnuf\/J4DqJEhQonjwwgA9ATxRJDInaIYps8euHUtRavG7\/SWY4TFEIruOcy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":149,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIUAAEAAQBHaHQoYUrwByQGuKBxaBgBxAHWAbDFTfqljw1SapdqDKVcWathUJo1qzfPtWyXx24owFFcpmkySbIwaYprxXCqwYBLsZu59xtuDncBt4y51Vzq8xek+R48DH\/ZnYSFGXK7FEJvxe5DJiT5BsScvTSY+N1IiOO8PNST76RU=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwgFCAbDFRfqlcQ1SapdpHTNHUZHUPPMc+bZpBBsy5XbALYvwuTZ8p+nmSh8VrK0pAaLj6A+DVYeumfJc8ECfrlgot1qyKHqp1q9mV7eI2Zym1o99wN80IhM\/pEaNVi4MglwykrT\/l1cZNfQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/kreAbE7Lizn6mguGVRngZMFAL\/8Kmk41DxPjNcJ3SDgkjIkPZOopA0pXb0qiuP6vzI4oALtad7Tv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":162,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+AoeAbDFUfqlng1SapdqpDQIuUIPeuZnZjgZYRaJ19JWqf6kVT5K7MtTw9t8iZHlu0InBSrb3TO\/fdnBQp\/ulB\/ixaMKs0oA6m7+o4ItFVmTBYYFwIfeP\/uIJCY+1jspvIQ07V6jpdn\/YBGjC2s1+1DK8G4PMeFdT","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fZGAbE7Mizn+WguGVRkaMT3JuOYE7xsxAJ6Do9VQn2RiOFdFFyvqDRWlG2\/JmCa+NGBHzQkv042H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkHmWAbDFSfqlgA1SapdoLIeqGfZbj2NOQagaf9xs19\/2ZuJqT37Ocz49f13cuXGmx\/\/w96HNhh93Rjvv2HWO9vNWZqsaZvN0hAXNEiODU35R7lefprniq1fo81OEMcQ==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/0wSAbE7OizoF2guGVRnK2+xhsnQCO0Hajeq5qAu6xKLGCUyqa6fSD8d2l1gEnagQWoVQew6XBb2k","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/GuiAbE7PizoJmguGVRnl9tMyiQsslTtw8gys8lE4FbPInZXgU4x0Alu9H7p6oXoVI4RPKDYmCh1A","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeLXOAbDFVfqlrQ1SapdpJ7QaXPcXea+vcVpVQIgIw\/fo+405zhSfHeJu\/zpw25NiFe+1VHyJsomhmItoU2BatyLtFbkxsmgIX4WQPlc67tBzPmmAZ7aOAlQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/5QeAbE7NizoCGguGVRnuf\/J4DqJEhQonjwwgA9ATxRJDInaIYps8euHUtRavG7\/SWY4TFEIruOcy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":149,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIUAAEAAHRH89QHJAa4KGFK8WgQsOABx\/FqAbDFTfqljw1SapdqDKVcWathUJo1qzfPtWyXx24owFFcpmkySbIwaYprxXCqwYBLsZu59xtuDncBt4y51Vzq8xek+R48DH\/ZnYSFGXK7FEJvxe5DJiT5BsScvTSY+N1IiOO8PNST76RU=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":145,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtz+CAbDFWfqlvA1Sapdqb3SzG8FpETOGDowtdZo4Hl6YGIAM+0MQn1R5Lg\/4cFXHSha0oGf1mQuehqcT+oJqVba+AjPUV3vrVNx+JBGnH7YmHcWmlKxmo\/HMEUyFJ8jEM3AD3\/P8Usw==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/kseAbE7QizoNWguGVRmqjgtzutx1\/GV9A8inDfN6l8bWMqe5J52WKNjKXLUIfg2Qm9NmuDPsu4fC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4++AbE7RizoRGguGVRlKotIIZr25xPEduBVsjWeppTJ8OypCnjO\/Vv4TKkg4ucKGYxKDfVWtohsD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":162,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+\/myAbDFUfqlng1SapdqpDQIuUIPeuZnZjgZYRaJ19JWqf6kVT5K7MtTw9t8iZHlu0InBSrb3TO\/fdnBQp\/ulB\/ixaMKs0oA6m7+o4ItFVmTBYYFwIfeP\/uIJCY+1jspvIQ07V6jpdn\/YBGjC2s1+1DK8G4PMeFdT","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/1x6AbE7OizoF2guGVRnK2+xhsnQCO0Hajeq5qAu6xKLGCUyqa6fSD8d2l1gEnagQWoVQew6XBb2k","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAQBHaEwoYUrwByQGuKBxaBgB76VmAbDFXfqlyw1SapdpU4hephpH0P42S9PIoF0w3r+h96chymAqBUTkNReOfPZ4Afe\/oyqB+76Nd1RzDk1CKliQEtgnMKFiUUASKeBCHTeiX+lGwJoYPbIuXaB4wDFEVkzLsdd7mzWdp\/W0L7xG+3xJb\/7TN","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/HwKAbE7PizoJmguGVRnl9tMyiQsslTtw8gys8lE4FbPInZXgU4x0Alu9H7p6oXoVI4RPKDYmCh1A","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/rkCAbE7SizoU2guGVRmrLY5sXYqbQzX\/DN3yne3uJkQul4ubFaPiuyYZHu\/o8GgGsIoR+bx\/Zgrx","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABeKVmAbDFVfqlrQ1SapdpJ7QaXPcXea+vcVpVQIgIw\/fo+405zhSfHeJu\/zpw25NiFe+1VHyJsomhmItoU2BatyLtFbkxsmgIX4WQPlc67tBzPmmAZ7aOAlQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAQBHaHwoYUrwByQGuKBxaBgBvAX6AbDFYfql2g1Sapdo\/M9LJCFVVaGaQY7Wk5xUxZWXWDRGqSuEfe7ccdj8XKe0mRh+jLmkKGgOpBupJ\/CA01XOzAEKsoWUf6gcybwJuJORlwWSX7+zwbx+x571ehaYsT6KL0qq+xFKh","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":141,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBpGQOAbDFZfql6Q1Sapdp+ZCV5s0i7N7yvsJP6k5ZwIlF1HRGVnNVrMD4pZWT+gdhwcMjRJDMXNAI15bhTAAZmM+fKuO0PshbGe8MwhMP7i4FAiHiAD8iNDyBoOxRKrrLhfPg2","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABty8aAbDFWfqlvA1Sapdqb3SzG8FpETOGDowtdZo4Hl6YGIAM+0MQn1R5Lg\/4cFXHSha0oGf1mQuehqcT+oJqVba+AjPUV3vrVNx+JBGnH7YmHcWmlKxmo\/HMEUyFJ8jEM3AD3\/P8Usw==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/luGAbE7QizoNWguGVRmqjgtzutx1\/GV9A8inDfN6l8bWMqe5J52WKNjKXLUIfg2Qm9NmuDPsu4fC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069172,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/6AmAbE7RizoRGguGVRlKotIIZr25xPEduBVsjWeppTJ8OypCnjO\/Vv4TKkg4ucKGYxKDfVWtohsD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/CvqAbE7TizoYmguGVRnUXVN1QI2hnqm0q\/HzZUYhAyeE2OMUbHEM2NiQsalb3aAH1uxyafZdwNw2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/tPOAbE7UizocWguGVRnd1\/0xeHrEekQdwYeHmMjLZEAvEe2ItpCPbAap1MaYSQJ6JlVhsOcy\/TN1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkQS2AbDFafql+A1SapdqE59KHkg0FHOgqCf8Pwb5m2yDkj9JrZyl5yIu013fzy9CkiZOzT3E7tbx2SBxzo0QddtOX5WZV6j2Zx4T+QVpFKgjjrDRgCd2RkkVOxnTb5A==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHRH86wHJAa4KGFK8WgQsOAB75T+AbDFXfqlyw1SapdpU4hephpH0P42S9PIoF0w3r+h96chymAqBUTkNReOfPZ4Afe\/oyqB+76Nd1RzDk1CKliQEtgnMKFiUUASKeBCHTeiX+lGwJoYPbIuXaB4wDFEVkzLsdd7mzWdp\/W0L7xG+3xJb\/7TN","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/slqAbE7SizoU2guGVRmrLY5sXYqbQzX\/DN3yne3uJkQul4ubFaPiuyYZHu\/o8GgGsIoR+bx\/Zgrx","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JimAbE7VizogGguGVRn44qzqcDO42PyerBVxnOfG4mEaV3V9FftevMmYhGcIpaLhLJ19TrsmYBCh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/xB+AbE7Wizoj2guGVRn5kTPDnzidE4wLcK2LKGA12McvSImzsINkPpFjeLChVC2kJoJCYlCD6h8B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":145,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtpCeAbDFbfqmBw1SapdpCv314XpZ6YxnKA\/mxdC0VjMh68AvknN\/iLfESakCGrklXuQj1fUTQiyJ0oO1kzFbP0mkLOdhxU9ZmBv5RVyj4XLs6IgPpvhvCDtlKvl4qVCU\/AbK2tGEqdA==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":147,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHRH89wHJAa4KGFK8WgQsOABv\/WOAbDFYfql2g1Sapdo\/M9LJCFVVaGaQY7Wk5xUxZWXWDRGqSuEfe7ccdj8XKe0mRh+jLmkKGgOpBupJ\/CA01XOzAEKsoWUf6gcybwJuJORlwWSX7+zwbx+x571ehaYsT6KL0qq+xFKh","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgE+qAbDFcfqmFg1SapdoGuNl4gba1fS573XQJXM7g5hv6s2FnN3TzamvL7\/uXq63V0VseckXYBcmxzubrLhGu7K96bgfLU5xdsmZEXq\/lnixkFwO2ha2xljQ3","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":141,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABpFOmAbDFZfql6Q1Sapdp+ZCV5s0i7N7yvsJP6k5ZwIlF1HRGVnNVrMD4pZWT+gdhwcMjRJDMXNAI15bhTAAZmM+fKuO0PshbGe8MwhMP7i4FAiHiAD8iNDyBoOxRKrrLhfPg2","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/DxSAbE7TizoYmguGVRnUXVN1QI2hnqm0q\/HzZUYhAyeE2OMUbHEM2NiQsalb3aAH1uxyafZdwNw2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/uQ2AbE7UizocWguGVRnd1\/0xeHrEekQdwYeHmMjLZEAvEe2ItpCPbAap1MaYSQJ6JlVhsOcy\/TN1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsPTuAbDFdfqmJQ1SapdoJ5lCXLM2A\/v3A4gDrAMryQU9QMxJXx77qQ3ao3GVuZrqCLnSQgF3nfi+1VV+RVAtR8sbj1nwtKN\/SZsQlZkIXtarGACVnE5JwQOAGK6WdDpqdE+m377jL","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+biAbE7XizonmguGVRmsXEP\/OITpcULQt7+8Wd3fQzQMgWV3BpHPaljwnVVfWE6BaRwjnAYpGTK6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkPROAbDFafql+A1SapdqE59KHkg0FHOgqCf8Pwb5m2yDkj9JrZyl5yIu013fzy9CkiZOzT3E7tbx2SBxzo0QddtOX5WZV6j2Zx4T+QVpFKgjjrDRgCd2RkkVOxnTb5A==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KkOAbE7VizogGguGVRn44qzqcDO42PyerBVxnOfG4mEaV3V9FftevMmYhGcIpaLhLJ19TrsmYBCh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsLV6AbDFefqmNA1SapdoY7KFlIAAmI9XsG5cD+SScBToU3ZdGjbhpDtcX9YNjUHXT23PVoJocKKByGnHuERNNOFgqFlJ7qunXRPAkWjaMY3197A5Ina4vEKD9u2KBiMIgujm079lM","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/yDmAbE7Wizoj2guGVRn5kTPDnzidE4wLcK2LKGA12McvSImzsINkPpFjeLChVC2kJoJCYlCD6h8B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABtoA2AbDFbfqmBw1SapdpCv314XpZ6YxnKA\/mxdC0VjMh68AvknN\/iLfESakCGrklXuQj1fUTQiyJ0oO1kzFbP0mkLOdhxU9ZmBv5RVyj4XLs6IgPpvhvCDtlKvl4qVCU\/AbK2tGEqdA==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JCWAbE7YizorWguGVRkmREMSKJlTdJarWJC+XzkFm4tXfwcCSZi5CHqJ0HvvUmnKksWQvNehtVDx","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7laAbE7ZizovGguGVRnmZXc\/uUcObDWXjEW8LYMqYW1tyRG1LmhhR0RjBIPYC1WAkFvmnPwOo7Qc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwJj+AbDFffqmQw1SapdrgjT6RBzmpZ2WdhHEeLzsDPdwvmdzx12wN+SaA9f33LVwPfuI62CZCulU8bhziy0gTLDpwq3K74IMEakOYrJ2c7Ol\/gKCfQHZj7u3Fr73J39PMxPmc8SIQqIDXog==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgD9CAbDFcfqmFg1SapdoGuNl4gba1fS573XQJXM7g5hv6s2FnN3TzamvL7\/uXq63V0VseckXYBcmxzubrLhGu7K96bgfLU5xdsmZEXq\/lnixkFwO2ha2xljQ3","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsOSGAbDFdfqmJQ1SapdoJ5lCXLM2A\/v3A4gDrAMryQU9QMxJXx77qQ3ao3GVuZrqCLnSQgF3nfi+1VV+RVAtR8sbj1nwtKN\/SZsQlZkIXtarGACVnE5JwQOAGK6WdDpqdE+m377jL","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/dKAbE7XizonmguGVRmsXEP\/OITpcULQt7+8Wd3fQzQMgWV3BpHPaljwnVVfWE6BaRwjnAYpGTK6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4d+AbE7aizoy2guGVRmpW7DZ84v+drTo4jtmQew7XgGGMRyLzoOa3Zy9pYtTwb\/ARo5rbu6LYcBR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/oFWAbE7bizo2mguGVRkL39YZxE46NPS3lde3HULzoOLq67YBc+heA+x5t1DYCQ3UtFlyf4K1VMeG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsKUSAbDFefqmNA1SapdoY7KFlIAAmI9XsG5cD+SScBToU3ZdGjbhpDtcX9YNjUHXT23PVoJocKKByGnHuERNNOFgqFlJ7qunXRPAkWjaMY3197A5Ina4vEKD9u2KBiMIgujm079lM","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":143,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBrUoCAbDFgfqmUg1SapdrGx+4z1sOGK7pAai37gQmvttOUsdHqUboPhjHPhN8A7O\/Q1MEwn2VcXxHHSoq7tJilpbAytwLdpIBuT2PTgK89YmEh91GSqAKBWCwC3\/ekjZUOtH0XPYs=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KD+AbE7YizorWguGVRkmREMSKJlTdJarWJC+XzkFm4tXfwcCSZi5CHqJ0HvvUmnKksWQvNehtVDx","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8nCAbE7ZizovGguGVRnmZXc\/uUcObDWXjEW8LYMqYW1tyRG1LmhhR0RjBIPYC1WAkFvmnPwOo7Qc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":156,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIwAAEAAQBHaFgoYUrwByQGuKBxaBgB4OdWAbDFhfqmYQ1Sapdp+72j\/KMyHszfEvaP+HuyGVeUAm9o0KAamfrFUuymoqda7aEAzNEG6g+4XlaDKGl5VHEwlUvRBUEYjDGHfGfDZUur\/WfG6UZWT7uow4JtO40x1jo90SsVMBeql6FXGS99TMDeg","pkt_caplen":156,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwIiWAbDFffqmQw1SapdrgjT6RBzmpZ2WdhHEeLzsDPdwvmdzx12wN+SaA9f33LVwPfuI62CZCulU8bhziy0gTLDpwq3K74IMEakOYrJ2c7Ol\/gKCfQHZj7u3Fr73J39PMxPmc8SIQqIDXog==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAQBHaGQoYUrwByQGuKBxaBgB1vQKAbDFifqmcA1SapdrkLtnX8XKSUNtY72tVReL5h\/GnLvlVvJacElD02k24dZpIPNqygKJcFIwjHQRFfEUenwIqeTH+aC241Q9kssBXZEWEjIzVZj77JsQQG6QJKTG\/f4zy\/cucowCHmCW6XG9u","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/uzGAbE7cizo6WguGVRkowgYDNKHf9CAaSvD5j37WUtLA\/3677Jf1Vzgu9klGqOfoAtgHGgahQlQd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/5fmAbE7aizoy2guGVRmpW7DZ84v+drTo4jtmQew7XgGGMRyLzoOa3Zy9pYtTwb\/ARo5rbu6LYcBR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/pG+AbE7bizo2mguGVRkL39YZxE46NPS3lde3HULzoOLq67YBc+heA+x5t1DYCQ3UtFlyf4K1VMeG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":143,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHRH8+wHJAa4KGFK8WgQsOABrTmaAbDFgfqmUg1SapdrGx+4z1sOGK7pAai37gQmvttOUsdHqUboPhjHPhN8A7O\/Q1MEwn2VcXxHHSoq7tJilpbAytwLdpIBuT2PTgK89YmEh91GSqAKBWCwC3\/ekjZUOtH0XPYs=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":156,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIwAAEAAHRH87gHJAa4KGFK8WgQsOAB4NbuAbDFhfqmYQ1Sapdp+72j\/KMyHszfEvaP+HuyGVeUAm9o0KAamfrFUuymoqda7aEAzNEG6g+4XlaDKGl5VHEwlUvRBUEYjDGHfGfDZUur\/WfG6UZWT7uow4JtO40x1jo90SsVMBeql6FXGS99TMDeg","pkt_caplen":156,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3NByAbDFjfqmfw1SapdqexA8S\/h5nxuL7gFhH7sbxSZZL7MW+kN\/QG3CVyL7ydUSDLXm5e1v1yybWQA6wr3YJnxKqkKrZzUn+bQt+mqoMoy+7rQpQ\/t2YlWYNQwUVih9CWFxqrydhTNiEpfCDHpgC2LY=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BLOAbE7dizo+GguGVRnLTOAmIOHWBARY93eME5dZi96HMduCVrqv3RSsAPNqkVbQEil8NLV7ZFvl","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/EuiAbE7eizpB2guGVRl7CskrZqT6RUPDgbbiVlwmi1FjeiTsloyiyRwrJixBIl6muUk\/ONO4WoEK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHRH88QHJAa4KGFK8WgQsOAB1uOiAbDFifqmcA1SapdrkLtnX8XKSUNtY72tVReL5h\/GnLvlVvJacElD02k24dZpIPNqygKJcFIwjHQRFfEUenwIqeTH+aC241Q9kssBXZEWEjIzVZj77JsQQG6QJKTG\/f4zy\/cucowCHmCW6XG9u","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkxUmAbDFkfqmjg1Sapdrr6u5YkznbZvFP2q76IecwGZXB+pWicrO+RSLX5zXKxfXpR7GcsAxyegpcHcx1LQ8itnhDzXzVM6RMOrtXKCoZD7Bi5RsvrfSULCkWkwY7Zw==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBo0H+AbDFlfqmnQ1SapdqP9r7eYFwtMxj2obAMOb2\/x7cjlF5\/aatZ35YA1COMYHkoOGQydI3cBKBSPaFtRxs7K7vVBJiPnt1U+YKGrrGOjwINDFxuQY+4ndU1H4Z8DdSMkY0=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/v0uAbE7cizo6WguGVRkowgYDNKHf9CAaSvD5j37WUtLA\/3677Jf1Vzgu9klGqOfoAtgHGgahQlQd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/DlqAbE7fizpFmguGVRlgJGbkyhyzcB8L1Fk+2tdCSTe8x0RIhfyy\/E9GIdRfsMqfarqqj1+hwB9o","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ESiAbE7gizpJWguGVRn27a6fre7MiT0yj4OA1trYzQCuTs41awJEKwEAYUbKBjcEhwq0sh1NpcVg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":155,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3MAKAbDFjfqmfw1SapdqexA8S\/h5nxuL7gFhH7sbxSZZL7MW+kN\/QG3CVyL7ydUSDLXm5e1v1yybWQA6wr3YJnxKqkKrZzUn+bQt+mqoMoy+7rQpQ\/t2YlWYNQwUVih9CWFxqrydhTNiEpfCDHpgC2LY=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/CM2AbE7dizo+GguGVRnLTOAmIOHWBARY93eME5dZi96HMduCVrqv3RSsAPNqkVbQEil8NLV7ZFvl","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/FwKAbE7eizpB2guGVRl7CskrZqT6RUPDgbbiVlwmi1FjeiTsloyiyRwrJixBIl6muUk\/ONO4WoEK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3BwOAbDFmfqmrA1SapdpRxttjK5EgSthOOAMR2IOt7HhLm4uJxcDAHityB0+FArDEBgQWwN4dER7b+2Fg\/jFpC+9maZgkxUJDIhxUpBGKlJcdfA\/xWSKnwcGqxOybSiOeuNpSTxVOFgfvPiwEs2u4NLA=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkwS+AbDFkfqmjg1Sapdrr6u5YkznbZvFP2q76IecwGZXB+pWicrO+RSLX5zXKxfXpR7GcsAxyegpcHcx1LQ8itnhDzXzVM6RMOrtXKCoZD7Bi5RsvrfSULCkWkwY7Zw==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/es6AbE7hizpNGguGVRn1WDJqSj0BbLwQpf4Nhl\/yEVbwn3Y95PiXddPh9XI7DDhedEso5fEr1SW+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBesh6AbDFnfqmuw1SapdqIN+I8DTNS1HWpi9StW6S4CL7bPlGEyOlaqy5gxk8z7Z0wlcTKhA+z3pBqS0L+Dje\/uLUDF\/4iSm0H5Cj1kCSME09Ii6+LrjN2BA==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABozGWAbDFlfqmnQ1SapdqP9r7eYFwtMxj2obAMOb2\/x7cjlF5\/aatZ35YA1COMYHkoOGQydI3cBKBSPaFtRxs7K7vVBJiPnt1U+YKGrrGOjwINDFxuQY+4ndU1H4Z8DdSMkY0=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/EnSAbE7fizpFmguGVRlgJGbkyhyzcB8L1Fk+2tdCSTe8x0RIhfyy\/E9GIdRfsMqfarqqj1+hwB9o","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/FUKAbE7gizpJWguGVRn27a6fre7MiT0yj4OA1trYzQCuTs41awJEKwEAYUbKBjcEhwq0sh1NpcVg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbRSyAbDFofqmyg1SapdpVqcYhovjFyWf5I1qaLQelJw2itsfEveV844mdmJJhY+681O86vAxxWf5AgOXt58vxKsJQ6wyYiiWLl2kOztpyQ7AMVqwsrA==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":155,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3AumAbDFmfqmrA1SapdpRxttjK5EgSthOOAMR2IOt7HhLm4uJxcDAHityB0+FArDEBgQWwN4dER7b+2Fg\/jFpC+9maZgkxUJDIhxUpBGKlJcdfA\/xWSKnwcGqxOybSiOeuNpSTxVOFgfvPiwEs2u4NLA=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/DcmAbE7iizpQ2guGVRmInxdUIm41eonSNziEqTMFqaU8bI6sXVqT1cVdslDSO\/vqIYEsRMKTFmq8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/HqyAbE7jizpUmguGVRkjZE1\/4VpBsUhvMoHcUSeVmcgpUAJJJflr93ZEMF60Xb6B2gqPlLIubg7d","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fuiAbE7hizpNGguGVRn1WDJqSj0BbLwQpf4Nhl\/yEVbwn3Y95PiXddPh9XI7DDhedEso5fEr1SW+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBD6QuAbDFpfqm2Q1SapdrSbb3jRrmndQyQMjy18xHK7ZEoBvj+ykU5xCdeJ9RrtBVTJNsGNB0ZJbyoDXnfWw==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABergSAbDFnfqmuw1SapdqIN+I8DTNS1HWpi9StW6S4CL7bPlGEyOlaqy5gxk8z7Z0wlcTKhA+z3pBqS0L+Dje\/uLUDF\/4iSm0H5Cj1kCSME09Ii6+LrjN2BA==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069173,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNMxeAbDFqfqm6A1SapdrTJrEFTV9cRaqh6QAYJ5vOIZU19BL5J0Nc8bMyybZxoUFyZhYAzXYQegF5w6N9ybAy3dRq4Ancf28=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3JKAbE7kizpYWguGVRkht\/BW8md+KNXQjXCE3B0ZOGM+T7Ai\/nApkB1b8OBj19bHuAUjO7wvHdlU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/PKyAbE7lizpcGguGVRnR6O8LTolEnLBD9lCff1BQeszQSXELFpkIt8LUYd0aA4fOFIcUcdzJLMAG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbQRKAbDFofqmyg1SapdpVqcYhovjFyWf5I1qaLQelJw2itsfEveV844mdmJJhY+681O86vAxxWf5AgOXt58vxKsJQ6wyYiiWLl2kOztpyQ7AMVqwsrA==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZX4WAbDFrfqm9w1SapdrewpywSi\/9b6dwE16+O2tN5ZvF9C+I+PTdUaj5CG7Om9xwKTPPOAqc\/0rDg3jmqLQOswVUQ+vf0gHS+Y5\/qAsmOLV7NMY=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/EeOAbE7iizpQ2guGVRmInxdUIm41eonSNziEqTMFqaU8bI6sXVqT1cVdslDSO\/vqIYEsRMKTFmq8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/IsaAbE7jizpUmguGVRkjZE1\/4VpBsUhvMoHcUSeVmcgpUAJJJflr93ZEMF60Xb6B2gqPlLIubg7d","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABD5PGAbDFpfqm2Q1SapdrSbb3jRrmndQyQMjy18xHK7ZEoBvj+ykU5xCdeJ9RrtBVTJNsGNB0ZJbyoDXnfWw==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/R0uAbE7mizpf2guGVRkEIDu\/bEjdYYfLkSQakILwWjv9B\/WclcTJOBA95onZvmD6atN0VCI9Ytk1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNLv2AbDFqfqm6A1SapdrTJrEFTV9cRaqh6QAYJ5vOIZU19BL5J0Nc8bMyybZxoUFyZhYAzXYQegF5w6N9ybAy3dRq4Ancf28=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":101,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAQBHaTQoYUrwByQGuKBxaBgBBIM2AbDFsfqnBg1SapdrYZvWeERviRKdwNhYAVh1c8eyeQfpSgbDP60X30Y05sSyT\/ZvXP2nPG4EEBJs=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/4KyAbE7kizpYWguGVRkht\/BW8md+KNXQjXCE3B0ZOGM+T7Ai\/nApkB1b8OBj19bHuAUjO7wvHdlU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/QMaAbE7lizpcGguGVRnR6O8LTolEnLBD9lCff1BQeszQSXELFpkIt8LUYd0aA4fOFIcUcdzJLMAG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFcROAbDFtfqnFQ1SapdrTZj\/EWFS7Gl8kYJsK+jqqn2LZoZxv0JzZQIOIhmYJGX7H3XrPQ3ETa5x7li\/+8oQX","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZW2uAbDFrfqm9w1SapdrewpywSi\/9b6dwE16+O2tN5ZvF9C+I+PTdUaj5CG7Om9xwKTPPOAqc\/0rDg3jmqLQOswVUQ+vf0gHS+Y5\/qAsmOLV7NMY=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/CuuAbE7nizpjmguGVRl3nhrP4Ttx+wZoVrraZTm5WsmamxtRQu1p5osQkPW3JUUD9trwbMKXNrbi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/0XGAbE7oizpnWguGVRkKUHvb5hEf9j0JjWSrMvzelEoQMIk0ugCuIAKbySowK\/RM2UrNosyxXYzP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGxH\/JwHJAa4KGFK8WgYoHAA\/S2WAbE7mizpf2guGVRkEIDu\/bEjdYYfLkSQakILwWjv9B\/WclcTJOBA95onZvmD6atN0VCI9Ytk1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/XcKAbDFufqnJA1SapdrMMHfMAevqrhrQEv+gORWj+haw4w5nlkR5DMAeLv0lmCUNtQvTd5KKX346","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHRH9JQHJAa4KGFK8WgQsOABBHLOAbDFsfqnBg1SapdrYZvWeERviRKdwNhYAVh1c8eyeQfpSgbDP60X30Y05sSyT\/ZvXP2nPG4EEBJs=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oVeAbDFvfqnMw1SapdqBWxtMeMXWHZp14tagwa+zb+6WRrXPArUjIzBca8V6CeZCNwOaOEuvxWoK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFbPmAbDFtfqnFQ1SapdrTZj\/EWFS7Gl8kYJsK+jqqn2LZoZxv0JzZQIOIhmYJGX7H3XrPQ3ETa5x7li\/+8oQX","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Q5CAbE7pizprGguGVRn+Rn\/+Zmfpy6kruF76UQWiCaDqT2YnjUcZdPDKhZ6l3+JIL9YBiqX2AVun","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/05iAbE7qizpu2guGVRkpHUCaqMX+nJjJwaTBjPeDUv2vG\/l6jJXmij4TJYJeNwhnyvGZU9s0uUjF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/IqCAbDFwfqnQg1SapdoQs3Y5iVn5hovBOYM+tGYfZxhc\/PB+73mEKhLPQaHOsrtssSPQ411C9uuu","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/DwWAbE7nizpjmguGVRl3nhrP4Ttx+wZoVrraZTm5WsmamxtRQu1p5osQkPW3JUUD9trwbMKXNrbi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/1YuAbE7oizpnWguGVRkKUHvb5hEf9j0JjWSrMvzelEoQMIk0ugCuIAKbySowK\/RM2UrNosyxXYzP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WaiAbDFufqnJA1SapdrMMHfMAevqrhrQEv+gORWj+haw4w5nlkR5DMAeLv0lmCUNtQvTd5KKX346","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/6R+AbE7rizpymguGVRnBoy5Nf9Oxk2c8DU8kbNgjqdXi0fE0ZDkgunUO9xEo+lixyG6vUU6DD6mp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nT2AbDFvfqnMw1SapdqBWxtMeMXWHZp14tagwa+zb+6WRrXPArUjIzBca8V6CeZCNwOaOEuvxWoK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/R6qAbE7pizprGguGVRn+Rn\/+Zmfpy6kruF76UQWiCaDqT2YnjUcZdPDKhZ6l3+JIL9YBiqX2AVun","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/0QuAbDFxfqnUQ1SapdquaRL\/Ka+qdXNipt70iJ7llwPdZTZ8mtu+UgEfL5RqqC2lHtV1kqVMqbBZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/17KAbE7qizpu2guGVRkpHUCaqMX+nJjJwaTBjPeDUv2vG\/l6jJXmij4TJYJeNwhnyvGZU9s0uUjF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/S7KAbDFyfqnYA1SapdqfByTNSoLQkZQkZMRyg2+gYHZiCQb5xL6qp+yXxsFJ1YdJ27+5npUlBX4n","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/K3GAbE7sizp2WguGVRlYgYGbsxPYhQ+2gyiFESMLOzqmbgcx4XinMPKSvFnY3eyMarcjAIEkK4H7","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/SwGAbE7tizp6GguGVRnSMqWffdYokOGLCjGrs\/LGUny6kv08kNw69cH5CWiCGA+UHFNkE+vYSb0H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zPGAbDFzfqnbw1SapdqgB5z1HBFQBxF85uI1KzGY3ybLEfW8nQQ\/1+1qxNXI4ynVVhWwQGA8Trlq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HoaAbDFwfqnQg1SapdoQs3Y5iVn5hovBOYM+tGYfZxhc\/PB+73mEKhLPQaHOsrtssSPQ411C9uuu","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/7TmAbE7rizpymguGVRnBoy5Nf9Oxk2c8DU8kbNgjqdXi0fE0ZDkgunUO9xEo+lixyG6vUU6DD6mp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/zPGAbDFxfqnUQ1SapdquaRL\/Ka+qdXNipt70iJ7llwPdZTZ8mtu+UgEfL5RqqC2lHtV1kqVMqbBZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oseAbDF0fqnfg1Sapdo+gAxUeKu2WQ0QNGMYSezZQcEK3ijngyus2nLfUp\/nTDCT4\/aD7qGtQMni","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/exeAbE7uizp92guGVRkZQTsNyRTLbsQKXBSeBKdW3aWSoKiFF42DStHMSnbs0JYOdH7ufgepggjX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/9OSAbE7vizqBmguGVRlBQK\/Lpmc9+7fpjMSRp4sCNujI0bC5JhmO7KRHxH\/TzaMVY9pa5g52CxGT","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/R5iAbDFyfqnYA1SapdqfByTNSoLQkZQkZMRyg2+gYHZiCQb5xL6qp+yXxsFJ1YdJ27+5npUlBX4n","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/L4uAbE7sizp2WguGVRlYgYGbsxPYhQ+2gyiFESMLOzqmbgcx4XinMPKSvFnY3eyMarcjAIEkK4H7","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zf+AbDF1fqnjQ1Sapdp7iMBPSRWxCbUID3olO\/wxIzepkfSF\/MGYFjt8YK7rd\/qhbF3N\/RS+YVKc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TxuAbE7tizp6GguGVRnSMqWffdYokOGLCjGrs\/LGUny6kv08kNw69cH5CWiCGA+UHFNkE+vYSb0H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yNeAbDFzfqnbw1SapdqgB5z1HBFQBxF85uI1KzGY3ybLEfW8nQQ\/1+1qxNXI4ynVVhWwQGA8Trlq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/vGAbE7wizqFWguGVRl6hlam0SyhGU5fEplJcm+KM6t03mpR1n5uPABumvn9P4KXqaWyWrgzE\/Ph","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nq2AbDF0fqnfg1Sapdo+gAxUeKu2WQ0QNGMYSezZQcEK3ijngyus2nLfUp\/nTDCT4\/aD7qGtQMni","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/fzGAbE7uizp92guGVRkZQTsNyRTLbsQKXBSeBKdW3aWSoKiFF42DStHMSnbs0JYOdH7ufgepggjX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/+P6AbE7vizqBmguGVRlBQK\/Lpmc9+7fpjMSRp4sCNujI0bC5JhmO7KRHxH\/TzaMVY9pa5g52CxGT","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJkquAbDF2fqnnA1SapdqSBznp5pRHd1zKdLXXJeXOQC17R2iw+Ll74rdHF2wHxFMvocGh7\/vVI474zKWbJf0wbMp8Cw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmclyAbDF3fqnqw1SapdqL7l8o67qEc1ey5wOuFsCc4PUBBG14S+z\/V2UN3ibKM\/VdoxM3HuWpDv4gx+7Dtba0bEAv3f+Tpkn4U3RIrj6+h+CDO0jogTJQKDbROiDM32v\/","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yeWAbDF1fqnjQ1Sapdp7iMBPSRWxCbUID3olO\/wxIzepkfSF\/MGYFjt8YK7rd\/qhbF3N\/RS+YVKc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jy+AbE7xizqJGguGVRn6a0Q9vTF0UA4hnvM8Gvoc3SXBzpyVqPVuQ5gIryXUZwrtDhHutOGkfj4c","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/62CAbE7yizqM2guGVRllqXieQNZVlI0O\/bC6WX9\/OopDdLqIK9aZ8VnawzHtv+XIL68F0gNWpG3g","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRlMuAbDF4fqnug1SapdpRuk86B76iAO0XfdJjqfeAoMJjqGv0MK72tCD8ghtRA0phyNlbb8tdYzeMDP7LdlSIsFcDBaXCiSzrUKwO","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/AwyAbE7wizqFWguGVRl6hlam0SyhGU5fEplJcm+KM6t03mpR1n5uPABumvn9P4KXqaWyWrgzE\/Ph","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJjpGAbDF2fqnnA1SapdqSBznp5pRHd1zKdLXXJeXOQC17R2iw+Ll74rdHF2wHxFMvocGh7\/vVI474zKWbJf0wbMp8Cw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/PeAbE7zizqQmguGVRlGoTYdzsaRpe3uHE6RH9VbnWOjW\/6Vmu7TCFwZ7QAEznd8IEzjYuxQwIdf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BJqAbE70izqUWguGVRnLbpeCXC7ViC2Ok1P830gKWShMuYF3KSZAUTnPnJMNasBVsywFu9hjHgZG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI6uKAbDF5fqnyQ1Sapdrwxt2HIzgb4MaqqHDrZhawU1aXCgh8LwNzepuRoYbF5f5NB5KUu3XTAsf5ch2pZb8xITyh","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmbkKAbDF3fqnqw1SapdqL7l8o67qEc1ey5wOuFsCc4PUBBG14S+z\/V2UN3ibKM\/VdoxM3HuWpDv4gx+7Dtba0bEAv3f+Tpkn4U3RIrj6+h+CDO0jogTJQKDbROiDM32v\/","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/k0mAbE7xizqJGguGVRn6a0Q9vTF0UA4hnvM8Gvoc3SXBzpyVqPVuQ5gIryXUZwrtDhHutOGkfj4c","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QsGAbDF6fqn2A1SapdoiSUrLhi1SIA6g8PTDTszv\/7bM88REyxutmNjNPsU1fPJ6hZFB+\/fT+XLi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/73qAbE7yizqM2guGVRllqXieQNZVlI0O\/bC6WX9\/OopDdLqIK9aZ8VnawzHtv+XIL68F0gNWpG3g","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069174,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRkLGAbDF4fqnug1SapdpRuk86B76iAO0XfdJjqfeAoMJjqGv0MK72tCD8ghtRA0phyNlbb8tdYzeMDP7LdlSIsFcDBaXCiSzrUKwO","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/TkaAbE71izqYGguGVRmFeo6Jacns\/\/20Nor1KhRaaylw4x9kDO76sf2ooiy7UewRYUpSCXCJj5LR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJZq2AbDF7fqn5w1SapdpVtEoVAFzKuwH\/\/CICCDIGiSe2pYz0GzPreqLbmeQmcuIIaM64165G2ixsk1qoYNPqw4DNng==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/ARKAbE7zizqQmguGVRlGoTYdzsaRpe3uHE6RH9VbnWOjW\/6Vmu7TCFwZ7QAEznd8IEzjYuxQwIdf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/CLSAbE70izqUWguGVRnLbpeCXC7ViC2Ok1P830gKWShMuYF3KSZAUTnPnJMNasBVsywFu9hjHgZG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI5siAbDF5fqnyQ1Sapdrwxt2HIzgb4MaqqHDrZhawU1aXCgh8LwNzepuRoYbF5f5NB5KUu3XTAsf5ch2pZb8xITyh","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLnXmAbDF8fqn9g1SapdriQtW0QFPAFXdERZ\/dv9K0\/v502HqHfTZqxZypzUsH\/UEpe06+Xi5WKHas+tjQS0AVx9pi2gZ8","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PqeAbDF6fqn2A1SapdoiSUrLhi1SIA6g8PTDTszv\/7bM88REyxutmNjNPsU1fPJ6hZFB+\/fT+XLi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/rLKAbE72izqb2guGVRmyuK3xOWihm2e3EA20z3Hc4jxS6nTHk\/xBq4GTPmZX6dAOg4hEmvmuxqVL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/zyyAbE73izqfmguGVRm4aEeeX\/ufohmrf9UJZXJNvGLwRrMIq+cDtJXqcKx70iHhsXaRlH1U9hJw","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/UmCAbE71izqYGguGVRmFeo6Jacns\/\/20Nor1KhRaaylw4x9kDO76sf2ooiy7UewRYUpSCXCJj5LR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lwyAbDF9fqoBQ1Sapdr6CyUlU+LPL6YIJrJN7CGlZk0XPqPQmkJL9YxluZnrRsg3naoomuDEMf8B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJYpOAbDF7fqn5w1SapdpVtEoVAFzKuwH\/\/CICCDIGiSe2pYz0GzPreqLbmeQmcuIIaM64165G2ixsk1qoYNPqw4DNng==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLmV+AbDF8fqn9g1SapdriQtW0QFPAFXdERZ\/dv9K0\/v502HqHfTZqxZypzUsH\/UEpe06+Xi5WKHas+tjQS0AVx9pi2gZ8","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/4A2AbE74izqjWguGVRk\/xy++RrAAxt5gS3JdNnvSYmVTBW5yUor29Qi\/fXzHjRV13Z7mo0dLyT97","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+MmAbE75izqnGguGVRlJ7Bm5WnD0Y6V+iDi9TsAg56nfdsuFzZbDe905QO7BMfmiNAc1hqn2numx","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJjpuAbDF+fqoFA1Sapdqill9DSqX\/QIfEt5NWQ7VknckGNlXXqyWoPyhVNFK50LcHeAZ8JMJ5J1QydTND2Y4h51GiHA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/sMyAbE72izqb2guGVRmyuK3xOWihm2e3EA20z3Hc4jxS6nTHk\/xBq4GTPmZX6dAOg4hEmvmuxqVL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":154,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIoAAEAAQBHaGAoYUrwByQGuKBxaBgB2+TGAbDF\/fqoIw1SapdpxXmK+IiLEkuP63uMrsf21yCeFQu0ikWBEcZIv5ZDme4mCC7JIK8oMC6O+PTpVLFxRksvStcE0oK0dBKK5GYX9roe+A21hAzGKNQHj1wRSGJC7Ng9lXIORsXgq5dVmEMMEsQ==","pkt_caplen":154,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/00aAbE73izqfmguGVRm4aEeeX\/ufohmrf9UJZXJNvGLwRrMIq+cDtJXqcKx70iHhsXaRlH1U9hJw","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsM2CAbDGAfqoMg1Sapdp1T58Dg4ZDPOXGCQHmBd2RdRE9tMKRqvFdHqi0UXdZDFnh+bm5ruiVcNY1GGWNihPO3tKKN6OkQdp8c\/987Yw0b3uyQHdC05N8\/UdToc9R7f+\/zOoV9+wF","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/XEGAbE76izqq2guGVRnlym7Ot1+ugoy9Ni4NtEAjqN77574\/73u2cvf4kjvFi8FCbuh6bBAW6OmP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kvKAbDF9fqoBQ1Sapdr6CyUlU+LPL6YIJrJN7CGlZk0XPqPQmkJL9YxluZnrRsg3naoomuDEMf8B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/5CeAbE74izqjWguGVRk\/xy++RrAAxt5gS3JdNnvSYmVTBW5yUor29Qi\/fXzHjRV13Z7mo0dLyT97","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKBxaBgBqRI6AbDGBfqoQQ1SapdpNTuOZFeYj5T9H13N4hsmj296iEOwBG9aQutxx8Uvx0sxE0fdy4zpRhgNBuIcyONaV1CeZ6l2SbtGJkkZsH2oc1NSWrBajAsXlTRQRJlPT5Ya5Rl52DQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Lf6AbE77izqumguGVRmCYAPTwOS8cP+ejH69TD9+GOhAk5CYGhMSaKmtDg8\/guAQORDiKz4rzVXg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Fo6AbE78izqyWguGVRndcT4t1wHhV1FtcCFe6e7naNRBV7nFtQgJGQWzTDLuy\/BpSUKYkYfyGG\/c","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":135,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBj4+qAbDGCfqoUA1SapdozCNaX0nlF8xBEzCnzl68HGP0KYQ\/bP6gahTzNid3hFq0vDy6e6GlOsD7SIpfI6VVbjLznhWOWGOj0Yq7ki66sF\/0GcloevMQKWMSgMVAT","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBe9OyAbDGDfqoXw1SapdoRMjsHK3oho3Ok1nv76o5QV4Efl+2Ra3OOW\/\/F3nhgWMFxnKDBVU1WabU2wSsgkorDxvE4pfIFrs5m5eEKBV0RDl5CqtYWaCIEIg==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BuSAbE79izq2GguGVRlA90+kz1jstC5q117L2j02z+Arg6weNLWFb1K9X8ztbf5GUCQkrXUD52d0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/mceAbE7+izq52guGVRn99aRVwscBjMzW0M\/4jQnrZoRSRy0UxBcz5DLVi7tTBzIId8YdtYmSWbhp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBiSAGAbDGEfqobg1Sapdqk6NPjlHL2j9iiWBR39MhtyKFaw9gwD2B88X+kwsAEP07rI4UArAc1B92EMQURo1p7tr5w4N8u77m5T3NfuepJ8YU+PepmCND5eVDukV8=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7x6AbE7\/izq9mguGVRkahgILk2aBgZqSjSqmGxBCHs4tPsNv5pCyNEc6YCTqJMODzIgvY6ydgYJ6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZ6TWAbDGFfqofQ1SapdoDhrYWq64TR5RzotekUd8OwOorgWpTa4PRR2d3kNzYYyJ9OgQhnt71ZA9Si\/jolzoIyo794hvONsSHoYrBnDn3TYv\/o7c=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/OOAbE75izqnGguGVRlJ7Bm5WnD0Y6V+iDi9TsAg56nfdsuFzZbDe905QO7BMfmiNAc1hqn2numx","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJioGAbDF+fqoFA1Sapdqill9DSqX\/QIfEt5NWQ7VknckGNlXXqyWoPyhVNFK50LcHeAZ8JMJ5J1QydTND2Y4h51GiHA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":154,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIoAAEAAHRH88AHJAa4KGFK8WgQsOAB29ReAbDF\/fqoIw1SapdpxXmK+IiLEkuP63uMrsf21yCeFQu0ikWBEcZIv5ZDme4mCC7JIK8oMC6O+PTpVLFxRksvStcE0oK0dBKK5GYX9roe+A21hAzGKNQHj1wRSGJC7Ng9lXIORsXgq5dVmEMMEsQ==","pkt_caplen":154,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsL0aAbDGAfqoMg1Sapdp1T58Dg4ZDPOXGCQHmBd2RdRE9tMKRqvFdHqi0UXdZDFnh+bm5ruiVcNY1GGWNihPO3tKKN6OkQdp8c\/987Yw0b3uyQHdC05N8\/UdToc9R7f+\/zOoV9+wF","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/YFuAbE76izqq2guGVRnlym7Ot1+ugoy9Ni4NtEAjqN77574\/73u2cvf4kjvFi8FCbuh6bBAW6OmP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgQsOABqQHSAbDGBfqoQQ1SapdpNTuOZFeYj5T9H13N4hsmj296iEOwBG9aQutxx8Uvx0sxE0fdy4zpRhgNBuIcyONaV1CeZ6l2SbtGJkkZsH2oc1NSWrBajAsXlTRQRJlPT5Ya5Rl52DQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBX4xqAbDGGfqojA1SapdpdAPM\/oZyckr8Odv6\/xcyB+APlPiRQrr+FgP8UIxwaRA7\/QQk2thirXztHwgtd39o+OpvnjLbx5vwL2JCgssnK8Bxv","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/GqiAbE78izqyWguGVRndcT4t1wHhV1FtcCFe6e7naNRBV7nFtQgJGQWzTDLuy\/BpSUKYkYfyGG\/c","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/MhiAbE77izqumguGVRmCYAPTwOS8cP+ejH69TD9+GOhAk5CYGhMSaKmtDg8\/guAQORDiKz4rzVXg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Y96AbE8AizrBWguGVRnPv49Z2+nQqOz2pPCGuPVDQn+dVcbu0nAbTpktWp9Y\/sY7xa79knikbGjP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/GlOAbE8BizrFGguGVRktReV\/1wrujCQDxy30B114kp8B8ffXW5Z1P1FIa7zFKUb7jboURZgMSLDA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdfc6AbDGHfqomw1Sapdo9UtyLplrVYani1tE\/ZSb\/YKpz5NAsBzV\/s\/X5h9MHxvTlDmiSKjdAHOgZnof+pIjwd1pdzhvBiXXyFmOGMByipSu21fm07Raj","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":135,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABj39CAbDGCfqoUA1SapdozCNaX0nlF8xBEzCnzl68HGP0KYQ\/bP6gahTzNid3hFq0vDy6e6GlOsD7SIpfI6VVbjLznhWOWGOj0Yq7ki66sF\/0GcloevMQKWMSgMVAT","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABe8NKAbDGDfqoXw1SapdoRMjsHK3oho3Ok1nv76o5QV4Efl+2Ra3OOW\/\/F3nhgWMFxnKDBVU1WabU2wSsgkorDxvE4pfIFrs5m5eEKBV0RDl5CqtYWaCIEIg==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Cv6AbE79izq2GguGVRlA90+kz1jstC5q117L2j02z+Arg6weNLWFb1K9X8ztbf5GUCQkrXUD52d0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBN0WaAbDGIfqoqg1SapdpQazfoauhC6LLb4HkXjqNBeAg6JPQ4H\/HPavprIVBIEnLn3UeJlP1HRJoVqTsXsQh4XRFyP1xRdEA=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/kqaAbE8CizrI2guGVRlFcYcQinxK8hOQ31feeZurRQXTEHm2q40PWAex8Ke+scujF25k4YVgBRAd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqFxKByAAMC4ZVGRvN6Z48FBPXUmifLFQsGuSjeOUcO85HTHtDHvXvyqkZp\/ZQTHwoc4rLMwW\/Mpy9OSUDQLloAM1pJAcB+M52Dd+1\/1jxID1F3PS\/ZYuAAAADsb6NtDdP2V5EjA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/fqiAbE8DizrMmguGVRkHME4+YqZgY1fTlNWPu5YnOPAoJDLegqoTxx6l+uN45QSMHe+2OwSr2SJ0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI3bCAbDGJfqouQ1SapdomTtN7CKdtbirPLDxtDG6CGEET2ZnidG38jUgAQY3688ACTVvNqpha3+GLrBkRR8UYDTAf","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/C8qAbE8EizrQWguGVRkqg4i105ISUZWTMiYrF046UpNoTI\/7fUyys\/AMSZLfSdNhDjCLsLmS9bb3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hhuAbDGKfqoyA1SapdqLiAv89SNQWK+gf4WEL+3iz67AuCxJSmq5kjVUHOxI0SaCp2+\/ES7UUP1T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/neGAbE7+izq52guGVRn99aRVwscBjMzW0M\/4jQnrZoRSRy0UxBcz5DLVi7tTBzIId8YdtYmSWbhp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/HNaAbDGLfqo1w1SapdpJATmyvRqWxD7q2p1VzJOQh+tuWglsWgpLpADK\/WXEHpmsAKS+DQvFWAei","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069175,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiQ+eAbDGEfqobg1Sapdqk6NPjlHL2j9iiWBR39MhtyKFaw9gwD2B88X+kwsAEP07rI4UArAc1B92EMQURo1p7tr5w4N8u77m5T3NfuepJ8YU+PepmCND5eVDukV8=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/tHiAbE8FizrUGguGVRneh1746pHZNV8yMRdDhqOL94rdLcFpSPS6xESHJSLo+C8seth7L+B3jTvd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/EbuAbE8GizrX2guGVRmQfIltHfYNFez06FRY4Jp\/KoJP3CfxLjCHi5XcwD5Pny98UJ10u1AeEK4T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8ziAbE7\/izq9mguGVRkahgILk2aBgZqSjSqmGxBCHs4tPsNv5pCyNEc6YCTqJMODzIgvY6ydgYJ6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZ5RuAbDGFfqofQ1SapdoDhrYWq64TR5RzotekUd8OwOorgWpTa4PRR2d3kNzYYyJ9OgQhnt71ZA9Si\/jolzoIyo794hvONsSHoYrBnDn3TYv\/o7c=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqZYeByAAMVJql2pfLuFsajzgI1GDl8NkFRGhOyQ6thpJYAOTYJlo9hdZVicoZQsCxkiH\/3fDmYyH9D6n5lvUWFQSCeoKxyM8tWJPmna38RJwk7wBqD5OAAAADKGmQ4Gj9SLx1sQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sY6AbDGMfqo5g1SapdqxSpuZHplY8D9\/GeSYqCpQD1GT5MbhFt+vf\/QWUlS2AMPWi2yovWSU9Jao","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABX3wCAbDGGfqojA1SapdpdAPM\/oZyckr8Odv6\/xcyB+APlPiRQrr+FgP8UIxwaRA7\/QQk2thirXztHwgtd39o+OpvnjLbx5vwL2JCgssnK8Bxv","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1suAbDGNfqo9Q1SapdpF5CLzc4rqZO8By50+FSszc1fr6Pa5tPWMJdlhQVlPNmm\/DRSNvVlJ80mh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Hm2AbE8BizrFGguGVRktReV\/1wrujCQDxy30B114kp8B8ffXW5Z1P1FIa7zFKUb7jboURZgMSLDA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Z\/iAbE8AizrBWguGVRnPv49Z2+nQqOz2pPCGuPVDQn+dVcbu0nAbTpktWp9Y\/sY7xa79knikbGjP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdebSAbDGHfqomw1Sapdo9UtyLplrVYani1tE\/ZSb\/YKpz5NAsBzV\/s\/X5h9MHxvTlDmiSKjdAHOgZnof+pIjwd1pdzhvBiXXyFmOGMByipSu21fm07Raj","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNzUyAbDGIfqoqg1SapdpQazfoauhC6LLb4HkXjqNBeAg6JPQ4H\/HPavprIVBIEnLn3UeJlP1HRJoVqTsXsQh4XRFyP1xRdEA=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/AmCAbE8HizrbmguGVRnMX1TtiBieOxwt17mNb40hTKCxHSwYgbT7q7wmOXg+qV+3Nw\/GITCwU29t","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/b4uAbE8IizrfWguGVRmWKc+NvAIWQkMtsDGCkXUu7lpIt0U2PFtL6Ymr7SCRWEkbO+U2iMKe3r6C","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/lsCAbE8CizrI2guGVRlFcYcQinxK8hOQ31feeZurRQXTEHm2q40PWAex8Ke+scujF25k4YVgBRAd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGhH\/\/AHJAa4KGFK8WgcoHQBqGyyByAAMC4ZVGRvN6Z48FBPXUmifLFQsGuSjeOUcO85HTHtDHvXvyqkZp\/ZQTHwoc4rLMwW\/Mpy9OSUDQLloAM1pJAcB+M52Dd+1\/1jxID1F3PS\/ZYuAAAADsb6NtDdP2V5EjA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI2ZaAbDGJfqouQ1SapdomTtN7CKdtbirPLDxtDG6CGEET2ZnidG38jUgAQY3688ACTVvNqpha3+GLrBkRR8UYDTAf","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/gsKAbE8DizrMmguGVRkHME4+YqZgY1fTlNWPu5YnOPAoJDLegqoTxx6l+uN45QSMHe+2OwSr2SJ0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/D+SAbE8EizrQWguGVRkqg4i105ISUZWTMiYrF046UpNoTI\/7fUyys\/AMSZLfSdNhDjCLsLmS9bb3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ggGAbDGKfqoyA1SapdqLiAv89SNQWK+gf4WEL+3iz67AuCxJSmq5kjVUHOxI0SaCp2+\/ES7UUP1T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yjeAbDGOfqpBA1Sapdo87ToHpoAWmaRpdJKr\/YUgJWs6u0tPa5LpyxZXb3NM5vS2PSGaAOawVHaO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/GLyAbDGLfqo1w1SapdpJATmyvRqWxD7q2p1VzJOQh+tuWglsWgpLpADK\/WXEHpmsAKS+DQvFWAei","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/uJKAbE8FizrUGguGVRneh1746pHZNV8yMRdDhqOL94rdLcFpSPS6xESHJSLo+C8seth7L+B3jTvd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/FdWAbE8GizrX2guGVRmQfIltHfYNFez06FRY4Jp\/KoJP3CfxLjCHi5XcwD5Pny98UJ10u1AeEK4T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rXSAbDGMfqo5g1SapdqxSpuZHplY8D9\/GeSYqCpQD1GT5MbhFt+vf\/QWUlS2AMPWi2yovWSU9Jao","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqYW2ByAAMVJql2pfLuFsajzgI1GDl8NkFRGhOyQ6thpJYAOTYJlo9hdZVicoZQsCxkiH\/3fDmYyH9D6n5lvUWFQSCeoKxyM8tWJPmna38RJwk7wBqD5OAAAADKGmQ4Gj9SLx1sQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/uQCAbE8JizrjGguGVRkXIVjwfFyfmDLdHPo7VCyIB\/4X0Obapusi90JJ813mxPV5zJfT6va0\/xkF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0rGAbDGNfqo9Q1SapdpF5CLzc4rqZO8By50+FSszc1fr6Pa5tPWMJdlhQVlPNmm\/DRSNvVlJ80mh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/a5qAbDGPfqpEw1SapdqHcBhdac4rQnB3ov1n9a1YMjN+Hn7tWjFeSSq69Fn3uq+NK4zOSjZd8Z0U","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/BnqAbE8HizrbmguGVRnMX1TtiBieOxwt17mNb40hTKCxHSwYgbT7q7wmOXg+qV+3Nw\/GITCwU29t","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/c6WAbE8IizrfWguGVRmWKc+NvAIWQkMtsDGCkXUu7lpIt0U2PFtL6Ymr7SCRWEkbO+U2iMKe3r6C","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WCGAbDGQfqpIg1SapdpxuTTwVVcXAxPEEadfT7uyNjQvPZtYy\/3p+A8ZW2ynOz9TwgBSFpVXqIyk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xh2AbDGOfqpBA1Sapdo87ToHpoAWmaRpdJKr\/YUgJWs6u0tPa5LpyxZXb3NM5vS2PSGaAOawVHaO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/b\/uAbE8Kizrm2guGVRlwfdW6tJrEHHLbzYrY9501UmURWLVTebUelh8rDtg77sgNX\/Pi+tRpcook","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/vz2AbE8LizrqmguGVRmzFNh0RZuH\/96WfuK7Kj2UOBEpGG5E9aSHo2xHM9qW8TCmsfgzDGaZoFNk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/vRqAbE8JizrjGguGVRkXIVjwfFyfmDLdHPo7VCyIB\/4X0Obapusi90JJ813mxPV5zJfT6va0\/xkF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Z4CAbDGPfqpEw1SapdqHcBhdac4rQnB3ov1n9a1YMjN+Hn7tWjFeSSq69Fn3uq+NK4zOSjZd8Z0U","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZkGAbDGRfqpMQ1Sapdrr179Hzl4VObJnm+2oTxKamjjeH6i3aLAKBuqcNbSdorHY0JDs2jzidYk0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VAeAbDGQfqpIg1SapdpxuTTwVVcXAxPEEadfT7uyNjQvPZtYy\/3p+A8ZW2ynOz9TwgBSFpVXqIyk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Xf2AbDGSfqpQA1SapdqtraBfAKPPfKRCZ35xT3nBLrqXq6ixBc1pyGF6ei1ZRdeL4zU\/FUSQfONg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3KyAbE8MizruWguGVRk14SZNEyInzobuPfSKb\/n5nFs5VAsEtJmqWKLw\/UnsDigQlM0XVSXhoR9L","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/S2OAbE8NizryGguGVRk7rWExECHYy7KZCr167wev34FGVw0E8XUa762GuFDnxv0RNRnkE4ZIPu3y","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/dBWAbE8Kizrm2guGVRlwfdW6tJrEHHLbzYrY9501UmURWLVTebUelh8rDtg77sgNX\/Pi+tRpcook","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/w1eAbE8LizrqmguGVRmzFNh0RZuH\/96WfuK7Kj2UOBEpGG5E9aSHo2xHM9qW8TCmsfgzDGaZoFNk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YieAbDGRfqpMQ1Sapdrr179Hzl4VObJnm+2oTxKamjjeH6i3aLAKBuqcNbSdorHY0JDs2jzidYk0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hUKAbDGTfqpTw1SapdqRvpCgUh3k2PgD8gxLXlUi6xJkxdiHiiLwlChNyUlb352YnAMLuWaJK4pt","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/jFKAbE8Oizr12guGVRn4+C\/QvDSkuArKz+3c0nI6tepKuliVrjQz5YIpqnP\/+Vip+lpwYCOfJPu0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WeOAbDGSfqpQA1SapdqtraBfAKPPfKRCZ35xT3nBLrqXq6ixBc1pyGF6ei1ZRdeL4zU\/FUSQfONg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5k6AbDGUfqpXg1SapdpmJn3\/AlZt1Y4fyurqwR307rmS+qO2xsZESkpcpMcc37Zjmj\/vbtLGq6YD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/4MaAbE8MizruWguGVRk14SZNEyInzobuPfSKb\/n5nFs5VAsEtJmqWKLw\/UnsDigQlM0XVSXhoR9L","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAGxH\/JwHJAa4KGFK8WgYoHAA\/T32AbE8NizryGguGVRk7rWExECHYy7KZCr167wev34FGVw0E8XUa762GuFDnxv0RNRnkE4ZIPu3y","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/S+yAbDGVfqpbQ1Sapdo0uclqX+oCr1FUb2tLH6KYilNqfDrSh3snzILuzQRFB7tRJ5tJLNTFZrlg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/gSiAbDGTfqpTw1SapdqRvpCgUh3k2PgD8gxLXlUi6xJkxdiHiiLwlChNyUlb352YnAMLuWaJK4pt","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/+m6AbE8Pizr5mguGVRkQwFgEe6Vk4MIyllu3k7CWDExESIomRtOAm5x\/k6q7TFIyPTgqKcl6vNaS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/7mAbE8Qizr9WguGVRmAOyVovnmIBsIDRDTo0m3ZFT2wzMj9YbzUxvwMmKBAqZrX9e6rXiWDd+qj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/kGyAbE8Oizr12guGVRn4+C\/QvDSkuArKz+3c0nI6tepKuliVrjQz5YIpqnP\/+Vip+lpwYCOfJPu0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4jSAbDGUfqpXg1SapdpmJn3\/AlZt1Y4fyurqwR307rmS+qO2xsZESkpcpMcc37Zjmj\/vbtLGq6YD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":146,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBulhSAbDGWfqpfA1SapdobPc3EtoQier+IK2ZdjNWnsZ84udmVSaO7yAtdmzYhuJSQA\/YxRmmeBDde7Mlk35v5rplGaml7GKWaTeEywrAkT6+Vk3vr9T79V2yFP94GyPWwbj+H+GynnLU=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/R9KAbDGVfqpbQ1Sapdo0uclqX+oCr1FUb2tLH6KYilNqfDrSh3snzILuzQRFB7tRJ5tJLNTFZrlg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":221,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM0AAEAAQBHZ1QoYUrwByQGuKBxaBgC5LLOAbDGXfqpiw1SapdqtG9hJ6O0GnzCSIKgAMiN7QOxKyKQ3vJ2\/9liLPg3EluHo8si7tNcdzrc6NM1Jy\/LvwbdEm5Q5RRorq9wMAiNfPj1Wa\/Fm\/UblJCYKZ4ukGXcy\/7B8WL4gow0rmv1ZUu7XIB1SyxzfA\/KmWpIpyLS0ry6QrrUfpB3WLSLgIa3XtzMfO4NTbL0o1dPiBc2SAWfD0fX3fGzqhzSj6yfQWaq5gE0EsO4=","pkt_caplen":221,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/2taAbE8RizsBGguGVRl9h\/h6b2KK8GR8DTelaPT5MmS9zpnhzY4JZJFJLtyCGMrlGYNIOCld7u8d","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/uXeAbE8SizsE2guGVRnwSiT40ZGCpAi9K8yHi7pCuEOc4kLegn7dGJHmftrSOnPrVzo58iwalaIe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/\/oiAbE8Pizr5mguGVRkQwFgEe6Vk4MIyllu3k7CWDExESIomRtOAm5x\/k6q7TFIyPTgqKcl6vNaS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/A9SAbE8Qizr9WguGVRmAOyVovnmIBsIDRDTo0m3ZFT2wzMj9YbzUxvwMmKBAqZrX9e6rXiWDd+qj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":219,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAQBHZ1woYUrwByQGuKBxaBgC3r1CAbDGYfqpmg1Sapdrv1qIGG4C29n8vATF9GzB7LO3sEdHFq7FDZE5OizI\/RmMu7l5Lrmi1mljcZdp4rFh0s1lfkBkOmbYZ\/H2d9UMrlRT8GS0yseodUJ4l2Yyud0tvN04mK1f8TKfZYXzhSbyZ1UzIu9I1ENEQuuay50VzUPnTnSAeIQM1gEPNs2PYuczq9HMq0lvaFk3Q18t0bqJMoqy3BeDrpiu65lPvQDK8WbII","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":146,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABukfqAbDGWfqpfA1SapdobPc3EtoQier+IK2ZdjNWnsZ84udmVSaO7yAtdmzYhuJSQA\/YxRmmeBDde7Mlk35v5rplGaml7GKWaTeEywrAkT6+Vk3vr9T79V2yFP94GyPWwbj+H+GynnLU=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/MR2AbE8TizsImguGVRmNyhjCTaABtMPLgoUG9fhbX4W1loS0XZF69altkGfcBdchYENlSiaYl9kF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":221,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM0AAEAAHRH8rQHJAa4KGFK8WgQsOAC5KJmAbDGXfqpiw1SapdqtG9hJ6O0GnzCSIKgAMiN7QOxKyKQ3vJ2\/9liLPg3EluHo8si7tNcdzrc6NM1Jy\/LvwbdEm5Q5RRorq9wMAiNfPj1Wa\/Fm\/UblJCYKZ4ukGXcy\/7B8WL4gow0rmv1ZUu7XIB1SyxzfA\/KmWpIpyLS0ry6QrrUfpB3WLSLgIa3XtzMfO4NTbL0o1dPiBc2SAWfD0fX3fGzqhzSj6yfQWaq5gE0EsO4=","pkt_caplen":221,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAQBHZ2AoYUrwByQGuKBxaBgC2qieAbDGZfqpqQ1Sapdr1Ly\/aiWDWNG4GmzxPMESt96LtG8KBcngQVuD0nQG7Z9ESokpdj3FekV+Shu6d4mk8bvVsbTmgBLQw+MnvDYZeT87RGYndcOvAIPJCtCGw54HWnU2QWriM7qmtNdOvRU44SxAQTXhxb3i2zQ1rwPBISdH5UywfkShaxDotrjzg\/qCcSNW42kAzv7+r3mPKL3q81noHUGez66LOQkusf3gHerY=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/3vCAbE8RizsBGguGVRl9h\/h6b2KK8GR8DTelaPT5MmS9zpnhzY4JZJFJLtyCGMrlGYNIOCld7u8d","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/vZGAbE8SizsE2guGVRnwSiT40ZGCpAi9K8yHi7pCuEOc4kLegn7dGJHmftrSOnPrVzo58iwalaIe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":187,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAQBHZ9woYUrwByQGuKBxaBgCXKVWAbDGafqpuA1SapdpgCCKYlITbl79bAt2BCqfNs8DhU6GPCgc\/A4EYxp9a5yLbk13Tv\/6qo7xgrR9mLJ2iGyWdDJy1ecAbivgfRIeAb3w\/upVAW+zIeqX15V2Q8\/rtDjho8WG4UxNtbqk0pXltVNPA03tArefrw9aI\/3zGlpAC4GCC3krT1SPDw1dPixVZng==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":219,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgQsOAC3qzaAbDGYfqpmg1Sapdrv1qIGG4C29n8vATF9GzB7LO3sEdHFq7FDZE5OizI\/RmMu7l5Lrmi1mljcZdp4rFh0s1lfkBkOmbYZ\/H2d9UMrlRT8GS0yseodUJ4l2Yyud0tvN04mK1f8TKfZYXzhSbyZ1UzIu9I1ENEQuuay50VzUPnTnSAeIQM1gEPNs2PYuczq9HMq0lvaFk3Q18t0bqJMoqy3BeDrpiu65lPvQDK8WbII","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7uyAbE8UizsMWguGVRkaYt5TTQnMw2+xIEwfheTmGcF909PBUmLIJ\/2ArVjzVbw7sLkbcV6DlF8c","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/nYuAbE8VizsQGguGVRnAzGprhL5FX\/YfrkuC2WuMlxOoz3iejl\/41RMJb9l4s0jWCi8np7XwydPy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/NTeAbE8TizsImguGVRmNyhjCTaABtMPLgoUG9fhbX4W1loS0XZF69altkGfcBdchYENlSiaYl9kF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQrNyAbDGbfqpxw1Sapdr2iSRnuNR9iNSVDYypf6BOpBNC88oFYup0PPY1mL2hizeGeixrEUmy2QQ37Y4dHNLgwZ2bl24l0PmHpBB7gU3Qw+dz30yHaO5Rd5u0YwVuz\/YF+xZFNzg9rnUweGIPe\/5ZaU\/rRhHO34dJTmIw\/mNePecbwcKkm7XXpEgJ","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGm3+AbDGcfqp1g1SapdoIVx2gEi5a44MJl0odfJRrMA2OGINc\/oVxScJG2gMHQeAAE+bWjbcBw264P4a6o0XFesvkh0XM0t0tNtp0GrSoYOVViOur1CYDCCEfEqiJW8qr2v9nkZiZwU+94emzI6cwE28qXqa49pUgqWqvjnNZYaM=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069176,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHRH8sAHJAa4KGFK8WgQsOAC2pg2AbDGZfqpqQ1Sapdr1Ly\/aiWDWNG4GmzxPMESt96LtG8KBcngQVuD0nQG7Z9ESokpdj3FekV+Shu6d4mk8bvVsbTmgBLQw+MnvDYZeT87RGYndcOvAIPJCtCGw54HWnU2QWriM7qmtNdOvRU44SxAQTXhxb3i2zQ1rwPBISdH5UywfkShaxDotrjzg\/qCcSNW42kAzv7+r3mPKL3q81noHUGez66LOQkusf3gHerY=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/8YSAbE8WizsT2guGVRmZDS+LxrkDsBT35q3d90uimW9RVMIf1ysMfxLb6f8Uu4TrRXDUcWT0hwNz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":187,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHRH8zwHJAa4KGFK8WgQsOACXJTuAbDGafqpuA1SapdpgCCKYlITbl79bAt2BCqfNs8DhU6GPCgc\/A4EYxp9a5yLbk13Tv\/6qo7xgrR9mLJ2iGyWdDJy1ecAbivgfRIeAb3w\/upVAW+zIeqX15V2Q8\/rtDjho8WG4UxNtbqk0pXltVNPA03tArefrw9aI\/3zGlpAC4GCC3krT1SPDw1dPixVZng==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/IeWAbE8XizsXmguGVRlojBCg98V9uX0x6HIFB4oaAb5MYPr2FpTqWfec8rfxGYVOeoNhjJS35BBB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8waAbE8UizsMWguGVRkaYt5TTQnMw2+xIEwfheTmGcF909PBUmLIJ\/2ArVjzVbw7sLkbcV6DlF8c","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/oaWAbE8VizsQGguGVRnAzGprhL5FX\/YfrkuC2WuMlxOoz3iejl\/41RMJb9l4s0jWCi8np7XwydPy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":166,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCCOBSAbDGdfqp5Q1SapdpsIilFssbm0nktySk7p0D38lUyyXxi\/R2jQ7g\/0q+Kexsh5HvMPKk+LxxQUC23du15ihu0qLZzu3ZcKMcGIqeBhAWgA54W2t3VqMz+\/riuMaMbMQ6HuhIYRVKnYQHchb8ICibV1ATU\/ymPaK0qGQ==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQqMKAbDGbfqpxw1Sapdr2iSRnuNR9iNSVDYypf6BOpBNC88oFYup0PPY1mL2hizeGeixrEUmy2QQ37Y4dHNLgwZ2bl24l0PmHpBB7gU3Qw+dz30yHaO5Rd5u0YwVuz\/YF+xZFNzg9rnUweGIPe\/5ZaU\/rRhHO34dJTmIw\/mNePecbwcKkm7XXpEgJ","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/BZKAbE8YizsbWguGVRl6D7Wdaeo\/x9uJf3Kyl3xHqNQ9eouC7iCBvJVRbRdCrwUGS\/uP3N4eTZ6m","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGl2WAbDGcfqp1g1SapdoIVx2gEi5a44MJl0odfJRrMA2OGINc\/oVxScJG2gMHQeAAE+bWjbcBw264P4a6o0XFesvkh0XM0t0tNtp0GrSoYOVViOur1CYDCCEfEqiJW8qr2v9nkZiZwU+94emzI6cwE28qXqa49pUgqWqvjnNZYaM=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/9Z6AbE8WizsT2guGVRmZDS+LxrkDsBT35q3d90uimW9RVMIf1ysMfxLb6f8Uu4TrRXDUcWT0hwNz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Jf+AbE8XizsXmguGVRlojBCg98V9uX0x6HIFB4oaAb5MYPr2FpTqWfec8rfxGYVOeoNhjJS35BBB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":168,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCE5cGAbDGefqp9A1SapdouOhggEa5GqbkzekQa8U14kERc8TemiBywvu\/Co62L7relFJ+dmTes1pyD9tlc5Nt6WcpWAh8a51V2sR5Yzb13p6SorPUJjfpp3fW0Yz6ZwQi5BbPqNaP3npXAO2Dcy3eIT0JoqG8tnMmxjtVHewWL","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":165,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAQBHaDQoYUrwByQGuKBxaBgCBU4GAbDGffqqAw1SapdpWo0jOzOyVlhyzGki0xYFQhenz\/HkO1QyHkKAvSXCAPcWuaBwBsAfRbdLGSNlqnmyfUmAnbUN3sNLU8BMJw8gdcEtNabS8AtZv06sXaAK+VG\/QCwSn371kSouYdnyg\/ylykFKE5H24B1vIZ1B+","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":166,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACCM\/qAbDGdfqp5Q1SapdpsIilFssbm0nktySk7p0D38lUyyXxi\/R2jQ7g\/0q+Kexsh5HvMPKk+LxxQUC23du15ihu0qLZzu3ZcKMcGIqeBhAWgA54W2t3VqMz+\/riuMaMbMQ6HuhIYRVKnYQHchb8ICibV1ATU\/ymPaK0qGQ==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/c+OAbE8ZizsfGguGVRmwfLVgDpxF9z1hbbWUeKyNd8562vSazV77T2pRJOmk1xG72d6T6LJofAyS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/TISAbE8aizsi2guGVRkHAP7YDnxb5lutKP+Uab4gzgWIeaykCd+2\/722pNzrPcj1AecdiJCC2vpB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAQBHaGQoYUrwByQGuKBxaBgB16OiAbDGgfqqEg1Sapdp1eOG\/J2kVP1961xAESkPq8g8Awzx3pftsUNb9\/nbUt4IS6\/my6bWPMeKqUi4tvKbYOhl0Gs0nziFxk6JW+hzP8d7YJIBaiiwHrg7bykWz6usGX0Fe7qseOd7SNIIitRWK","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/CayAbE8YizsbWguGVRl6D7Wdaeo\/x9uJf3Kyl3xHqNQ9eouC7iCBvJVRbRdCrwUGS\/uP3N4eTZ6m","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":168,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACE4aeAbDGefqp9A1SapdouOhggEa5GqbkzekQa8U14kERc8TemiBywvu\/Co62L7relFJ+dmTes1pyD9tlc5Nt6WcpWAh8a51V2sR5Yzb13p6SorPUJjfpp3fW0Yz6ZwQi5BbPqNaP3npXAO2Dcy3eIT0JoqG8tnMmxjtVHewWL","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/dVGAbE8bizsmmguGVRkGzHJ0TfRJIJizmRFBfu8BBbZXpAph70isTnITGYjp59po4+M8K2oa6ZaI","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ZXCAbE8cizsqWguGVRkGiCzRNEZs7w8FQPw6tA\/ZgVoc9dlsvQ6DcTKPXQClrrPJyDJuFNShH2+T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":165,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHRH85QHJAa4KGFK8WgQsOACBT2eAbDGffqqAw1SapdpWo0jOzOyVlhyzGki0xYFQhenz\/HkO1QyHkKAvSXCAPcWuaBwBsAfRbdLGSNlqnmyfUmAnbUN3sNLU8BMJw8gdcEtNabS8AtZv06sXaAK+VG\/QCwSn371kSouYdnyg\/ylykFKE5H24B1vIZ1B+","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":135,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjaHeAbDGhfqqIQ1Sapdol3c5KCvBQhQK2J6A9Td4PYqkdCluhRLCVlacpIGQaacAFQbWW0mJp5acJ4Y+ELVUCbfBvE\/sHKGwX0amWKDWMAklsXwre9c1KcY5h9fjX","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/d\/2AbE8ZizsfGguGVRmwfLVgDpxF9z1hbbWUeKyNd8562vSazV77T2pRJOmk1xG72d6T6LJofAyS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/UJ6AbE8aizsi2guGVRkHAP7YDnxb5lutKP+Uab4gzgWIeaykCd+2\/722pNzrPcj1AecdiJCC2vpB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHRH88QHJAa4KGFK8WgQsOAB15M6AbDGgfqqEg1Sapdp1eOG\/J2kVP1961xAESkPq8g8Awzx3pftsUNb9\/nbUt4IS6\/my6bWPMeKqUi4tvKbYOhl0Gs0nziFxk6JW+hzP8d7YJIBaiiwHrg7bykWz6usGX0Fe7qseOd7SNIIitRWK","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBml+WAbDGifqqMA1SapdpBGvKVkYC4diyYWO7Yzxz5w+1oVujCKuuKPHws1\/j8gx3VrPvKG+1VQTIjF1vt7JTZwnWFm9deMGUURn5ZRvwUw3VSoEcjkWT0i567\/GlkoV2R","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":165,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAPxHbDQoYUrwByQGuLDhaBACBnwSAbE8dizsuGguGVRku3m+wXEckTjCaHB130iAN8VqaMxsZeouZnH3jsY8wAaj2dUt8HC0DQoEbOz3azVgYmHDjNxJhAfVzWeWqnMW2raXoSkFwungU86NJ0kD6CAXKFZODRw3jEOVv6HJF2RFpDXIhZijsgzk1WTgR","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBl+KiAbDGjfqqPw1SapdrdcvqaiWE2AC5GXkQkS+Ek54F5RzTZDduFd06Dn359NWmv1a3MpSCqS1BvB+XI+u8GIuFYdFygnnskwfzI\/CYlJpllo42zl0vVk9wXg+fzPeE=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/eWuAbE8bizsmmguGVRkGzHJ0TfRJIJizmRFBfu8BBbZXpAph70isTnITGYjp59po4+M8K2oa6ZaI","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/aYqAbE8cizsqWguGVRkGiCzRNEZs7w8FQPw6tA\/ZgVoc9dlsvQ6DcTKPXQClrrPJyDJuFNShH2+T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnYCmAbDGkfqqTg1SapdrUriPaAoVhaq2ZQaTszzoYcuCB53zvE+NsCsUghlCzuyBXVK4jz3EKaZHxAJ6VMWG5hONPnVIm3vvhuYO4Q+xTKJZb8O+jZdz0iMNEJDujNoWzzA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":135,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjZF2AbDGhfqqIQ1Sapdol3c5KCvBQhQK2J6A9Td4PYqkdCluhRLCVlacpIGQaacAFQbWW0mJp5acJ4Y+ELVUCbfBvE\/sHKGwX0amWKDWMAklsXwre9c1KcY5h9fjX","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmk8uAbDGifqqMA1SapdpBGvKVkYC4diyYWO7Yzxz5w+1oVujCKuuKPHws1\/j8gx3VrPvKG+1VQTIjF1vt7JTZwnWFm9deMGUURn5ZRvwUw3VSoEcjkWT0i567\/GlkoV2R","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLVZiAbE8eizsx2guGVRk\/z+eHrFV0OMlhSLYORh8iiKpas1lbC6xd+OQmD5UJ2gGU0y+IcTGkpLUH7miV\/28XqYQFa1eEv5Em9xGZvOqISoW4Gt4HEOhGfzZFyntiRAG3FiZv2cBOYz5L\/sSOKAW3LW93TU1r0nn9TbaPUTAmoE9ZKxADfw==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":167,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAPxHbCwoYUrwByQGuLDhaBACDBOOAbE8fizs1mguGVRnnsQoYQiFoeHQ4A7O2XCnFYNwZ\/TFlw4daaF0rkfqPlwMmowRGk5Mc+Id5uM5CR7dKvnHI1irjcyZSFNDCA3QNItK6Zlgo\/8kTGcZ4lUeOR8QaBzQy4JuKpjMEI71GEOy+\/Mi2gOdOWmZHJ5HWU\/Y=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBiY+CAbDGlfqqXQ1SapdrukbD6G2BD\/o1\/jKslklnbjrsWZnaxHrPHA3VufGW9+ywZDgmtQyps4kpKVmkTb0+jEleF9Mz5ffwrO0UTX5rDrkNxIkIX2LmtI\/L77OY=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":165,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHBH95QHJAa4KGFK8WgYoHACBox6AbE8dizsuGguGVRku3m+wXEckTjCaHB130iAN8VqaMxsZeouZnH3jsY8wAaj2dUt8HC0DQoEbOz3azVgYmHDjNxJhAfVzWeWqnMW2raXoSkFwungU86NJ0kD6CAXKFZODRw3jEOVv6HJF2RFpDXIhZijsgzk1WTgR","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABl9I6AbDGjfqqPw1SapdrdcvqaiWE2AC5GXkQkS+Ek54F5RzTZDduFd06Dn359NWmv1a3MpSCqS1BvB+XI+u8GIuFYdFygnnskwfzI\/CYlJpllo42zl0vVk9wXg+fzPeE=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdUwyAbDGmfqqbA1SapdrDNj5lsbDh4Sd\/A2Zwfp0GZpsdI4qTYN+e8\/HdICQ7JDSB7ampH07G+9bfD+THCTBOrMp19ZC9M5wpP5dGvDJ05\/0uVePVPK+g","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":182,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAPxHa\/AoYUrwByQGuLDhaBACS28OAbE8gizs5WguGVRkBt0uUCat4nYPWPOaFYMs13jDRRkodJZgSJeoZZMrW1dBw5sxDJ\/+JBl1X74Bi3N7fU95ByjErZljP3DDFQtkvC8RELYx8ZRuCMazyijWmpmksjqaV0eKC0gbKS3IyVAMkbdILljMG3KJn5ei8qZfp5J0yys4UbagV2vNzkpM=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":182,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAPxHa\/AoYUrwByQGuLDhaBACS5mmAbE8hizs9GguGVRnkN3IUkLjvHWmz0E1aNAImsPfz8feyZfwmoSEAKx19HZrZsx8C4dz7x9vowdFwzuQ07u9cNB8o8KgPP36YfELcZ4EJ4HwIrj1nCYp2IOHChmXFuMe3TpkLGdS6faDDU6Ul49cB+qpACsU39j\/pK95CZp5iefEi2x+v7E59IOE=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnXA+AbDGkfqqTg1SapdrUriPaAoVhaq2ZQaTszzoYcuCB53zvE+NsCsUghlCzuyBXVK4jz3EKaZHxAJ6VMWG5hONPnVIm3vvhuYO4Q+xTKJZb8O+jZdz0iMNEJDujNoWzzA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmIDCAbDGnfqqew1Sapdr77mLmjJXsuszYxGWfPZBqp+XcMdrS2o9Jijm8M2CUzgB7zUTlSv9HERFLxzHiKxc+rgJ6UW7f+8R3I8O8FJjIYaUrsmgeJdn0+Y8XmWbwTc+t","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAGxH+2wHJAa4KGFK8WgYoHACLWbKAbE8eizsx2guGVRk\/z+eHrFV0OMlhSLYORh8iiKpas1lbC6xd+OQmD5UJ2gGU0y+IcTGkpLUH7miV\/28XqYQFa1eEv5Em9xGZvOqISoW4Gt4HEOhGfzZFyntiRAG3FiZv2cBOYz5L\/sSOKAW3LW93TU1r0nn9TbaPUTAmoE9ZKxADfw==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":167,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHBH94wHJAa4KGFK8WgYoHACDCP2AbE8fizs1mguGVRnnsQoYQiFoeHQ4A7O2XCnFYNwZ\/TFlw4daaF0rkfqPlwMmowRGk5Mc+Id5uM5CR7dKvnHI1irjcyZSFNDCA3QNItK6Zlgo\/8kTGcZ4lUeOR8QaBzQy4JuKpjMEI71GEOy+\/Mi2gOdOWmZHJ5HWU\/Y=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiX8aAbDGlfqqXQ1SapdrukbD6G2BD\/o1\/jKslklnbjrsWZnaxHrPHA3VufGW9+ywZDgmtQyps4kpKVmkTb0+jEleF9Mz5ffwrO0UTX5rDrkNxIkIX2LmtI\/L77OY=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZ1rqAbE8iiztA2guGVRnAmJ8S39dJpdy2\/A+hyqxVJGAm5VRYdAl2Su7BsAxkAGZghOTRnRP5QET9UAYdDA7XUIX6ap0YDbNlDd\/s6SvO8dgh5Rm4S5DMwBAqdy0mRk03GMNeWX909eYNfpaHrLkwWncqlB7o6xxYWFNMkRbv+\/jywug3J5ojMqYLlECmYeIpz6\/\/","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdTvKAbDGmfqqbA1SapdrDNj5lsbDh4Sd\/A2Zwfp0GZpsdI4qTYN+e8\/HdICQ7JDSB7ampH07G+9bfD+THCTBOrMp19ZC9M5wpP5dGvDJ05\/0uVePVPK+g","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBV7S+AbDGofqqig1Sapdonlyda6Pt0fOyImcvCgUoW71YjsP6spo4Fmx4vg62JkN+S6N8wF+sDXAK+X32kV8gYZqjx3lyXl\/5q1tYQYw0APA==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":182,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHBH91AHJAa4KGFK8WgYoHACS392AbE8gizs5WguGVRkBt0uUCat4nYPWPOaFYMs13jDRRkodJZgSJeoZZMrW1dBw5sxDJ\/+JBl1X74Bi3N7fU95ByjErZljP3DDFQtkvC8RELYx8ZRuCMazyijWmpmksjqaV0eKC0gbKS3IyVAMkbdILljMG3KJn5ei8qZfp5J0yys4UbagV2vNzkpM=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":182,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHBH91AHJAa4KGFK8WgYoHACS6oOAbE8hizs9GguGVRnkN3IUkLjvHWmz0E1aNAImsPfz8feyZfwmoSEAKx19HZrZsx8C4dz7x9vowdFwzuQ07u9cNB8o8KgPP36YfELcZ4EJ4HwIrj1nCYp2IOHChmXFuMe3TpkLGdS6faDDU6Ul49cB+qpACsU39j\/pK95CZp5iefEi2x+v7E59IOE=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmHBaAbDGnfqqew1Sapdr77mLmjJXsuszYxGWfPZBqp+XcMdrS2o9Jijm8M2CUzgB7zUTlSv9HERFLxzHiKxc+rgJ6UW7f+8R3I8O8FJjIYaUrsmgeJdn0+Y8XmWbwTc+t","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACTiz6AbE8jiztEmguGVRmEZ5a6HtbUEo154zU2eZ78uOkVAbKrg1ccepqxrMnjtXXSQb9+CEq4r0DwEOiVbnVdBR\/isPub\/LuTY\/X2U\/ki33rxS61HP8dnP+Qeqv5QkHWRKb9AGiuWLqut2Ka8RpIZB3i87CSIJaBRF+E+BQ7Jf64+Hl+4XPL1\/FUiA2fw","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":161,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJEAAEAAPxHbEQoYUrwByQGuLDhaBAB9D7OAbE8kiztIWguGVRn098FhDst8G5O7sX+2tqGswkPF+J\/97RvdKQPt8Fy1ZGyk+eG3ptYnVWNnK0Lo2S3nGDj1niqEuW1POvZbQ9un0gB3Y7juW5NIFwJg5Ibac\/0Q5VWYY6LNNUwzozk6RMZtdGXKbgnLoCI=","pkt_caplen":161,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoFBKAbDGpfqqmQ1SapdqaZwVU907godOk8KnHs3QODztGSmREsfKwcgZnHZkPsLXStjMm66vP8N6RVpr7Z9+H2f1dpLyulSiaR3A0kr3sdYmeXNK22JLe6FLoNw3xAPwtW2c=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgYECAbDGqfqqqA1SapdpevhNka\/99E\/1p\/iO93c6acqN8ZFm4RV7CNHe1zKbDz1PK3ptMCMRIaNgudGoc+TmrB4GxRzlxzYNCknzTthuGMl91Fin7vANrRoq6","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZ2tSAbE8iiztA2guGVRnAmJ8S39dJpdy2\/A+hyqxVJGAm5VRYdAl2Su7BsAxkAGZghOTRnRP5QET9UAYdDA7XUIX6ap0YDbNlDd\/s6SvO8dgh5Rm4S5DMwBAqdy0mRk03GMNeWX909eYNfpaHrLkwWncqlB7o6xxYWFNMkRbv+\/jywug3J5ojMqYLlECmYeIpz6\/\/","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABV6RWAbDGofqqig1Sapdonlyda6Pt0fOyImcvCgUoW71YjsP6spo4Fmx4vg62JkN+S6N8wF+sDXAK+X32kV8gYZqjx3lyXl\/5q1tYQYw0APA==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":150,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAPxHbHAoYUrwByQGuLDhaBAByLsWAbE8liztMGguGVRmU4bgYLzjK5ymwmwNK5qqJ6nLIpFBBMoeYLgZztGdb7yNTLuD1QjYwhntPLo\/tGAVxJaZV1wCiTBRCA6OZmxit11X5PnPcAE0GoV1B2eINCLtuAFSwiDk2GeYcnzpU","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":169,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAPxHbCQoYUrwByQGuLDhaBACFD0aAbE8miztP2guGVRm32E6BswbD6gmaZP0lJiTbs8ucvneilo4Nd2y7RmOVpx8wEhTYCE8BC\/fXPAW++T0RJSWAgeHhLeOaFJwNRg9fR7aYWtAmJgjs8zpQedaqupQHkmH1iTlbVRuLdyxbyN+z23Jz67\/krmTxuuzE9OggGQ==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":135,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjS8iAbDGrfqqtw1SapdrAS2PJNP0gVv0Xym2bVwHQhRVmE3+4wHofdE2nSHUKjMZ0P6MNnxp9o5F6GKI1x3s6bSdIou5wBgZjGACOkZd2v8aamWK4QnwCE5L6HiEN","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTj1iAbE8jiztEmguGVRmEZ5a6HtbUEo154zU2eZ78uOkVAbKrg1ccepqxrMnjtXXSQb9+CEq4r0DwEOiVbnVdBR\/isPub\/LuTY\/X2U\/ki33rxS61HP8dnP+Qeqv5QkHWRKb9AGiuWLqut2Ka8RpIZB3i87CSIJaBRF+E+BQ7Jf64+Hl+4XPL1\/FUiA2fw","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":161,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJEAAEAAHBH96QHJAa4KGFK8WgYoHAB9E82AbE8kiztIWguGVRn098FhDst8G5O7sX+2tqGswkPF+J\/97RvdKQPt8Fy1ZGyk+eG3ptYnVWNnK0Lo2S3nGDj1niqEuW1POvZbQ9un0gB3Y7juW5NIFwJg5Ibac\/0Q5VWYY6LNNUwzozk6RMZtdGXKbgnLoCI=","pkt_caplen":161,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfhNGAbDGsfqqxg1SapdodMj6LoeHsKJ9S\/RseJYoK7ymtLd8mn7KXAaV2nwUzBFWqePlgWoZ3UcjIR+w8ZUCYQ0KgyXV4qMzGhUlNAM7DFu5\/WJH24V5xpjw=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoD\/iAbDGpfqqmQ1SapdqaZwVU907godOk8KnHs3QODztGSmREsfKwcgZnHZkPsLXStjMm66vP8N6RVpr7Z9+H2f1dpLyulSiaR3A0kr3sdYmeXNK22JLe6FLoNw3xAPwtW2c=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069177,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgXCaAbDGqfqqqA1SapdpevhNka\/99E\/1p\/iO93c6acqN8ZFm4RV7CNHe1zKbDz1PK3ptMCMRIaNgudGoc+TmrB4GxRzlxzYNCknzTthuGMl91Fin7vANrRoq6","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBk9BmAbDGtfqq1Q1SapdqmuD+I+KQx1gUys6Lms+7SXX6+3Lpsh+WpT2n79GSDpUyyWJVfidI24uPcidmqlprrxDFXsJwqLjlH6XGNcFjv5Fz0o9Oh4qDlAmBAgYdhPg==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":151,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzb4+AbE8niztTmguGVRnn7yfP+nP4saCIip4ytuerqTMUqudgvqhMRrfl+lcX8zB3pzqIe5hu6QyBGihqJ4DeAlNtfW7HbRKJiAzi+2H6Vt+wbAGKG598gSHJHbo+blGzD1+pvaeWv3nmvjkOHg==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":150,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHBH99AHJAa4KGFK8WgYoHAByMt+AbE8liztMGguGVRmU4bgYLzjK5ymwmwNK5qqJ6nLIpFBBMoeYLgZztGdb7yNTLuD1QjYwhntPLo\/tGAVxJaZV1wCiTBRCA6OZmxit11X5PnPcAE0GoV1B2eINCLtuAFSwiDk2GeYcnzpU","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":135,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjR66AbDGrfqqtw1SapdrAS2PJNP0gVv0Xym2bVwHQhRVmE3+4wHofdE2nSHUKjMZ0P6MNnxp9o5F6GKI1x3s6bSdIou5wBgZjGACOkZd2v8aamWK4QnwCE5L6HiEN","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":169,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHBH94QHJAa4KGFK8WgYoHACFE2CAbE8miztP2guGVRm32E6BswbD6gmaZP0lJiTbs8ucvneilo4Nd2y7RmOVpx8wEhTYCE8BC\/fXPAW++T0RJSWAgeHhLeOaFJwNRg9fR7aYWtAmJgjs8zpQedaqupQHkmH1iTlbVRuLdyxbyN+z23Jz67\/krmTxuuzE9OggGQ==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZXkCAbDGufqq5A1SapdoDF2jTcUW8rpA6q+ygWyOEEp5ZyaIh54nEeCTA5rmIBBuRB80AJ4ucZj+GRJZbF8pje\/mBAwRAKPxIg3bC3blDWSOwZwM=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfgLeAbDGsfqqxg1SapdodMj6LoeHsKJ9S\/RseJYoK7ymtLd8mn7KXAaV2nwUzBFWqePlgWoZ3UcjIR+w8ZUCYQ0KgyXV4qMzGhUlNAM7DFu5\/WJH24V5xpjw=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":151,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzQ6mAbE8oiztXWguGVRnNM9HTBSlX5M1EBoCqSxCoo\/y4C0DNLyWHH72DFdIfX3bLtM20n1pKbjpMm9ncpZn1FruZozD6e1fiT2ngnvxRY5HbqaNsneMnIUXj\/z+H939ZoFELlN5n3tGQ6Y\/dLA==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAPxHbDgoYUrwByQGuLDhaBACAHwuAbE8piztbGguGVRm5xzS5mipLtxb40Fu91SoJNHfPL1NWj3h1F94VfuMMZVyeNJH1sV6fkpbkp26V1XQcsJIdOvuKK8rqbKW97MidYpxG+uNkk775Po1NswYDXSTQEatS\/Hm9RYQ4SIFQLVc421rCtlXiXvQ2+Zk=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABk7\/+AbDGtfqq1Q1SapdqmuD+I+KQx1gUys6Lms+7SXX6+3Lpsh+WpT2n79GSDpUyyWJVfidI24uPcidmqlprrxDFXsJwqLjlH6XGNcFjv5Fz0o9Oh4qDlAmBAgYdhPg==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":151,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzc6mAbE8niztTmguGVRnn7yfP+nP4saCIip4ytuerqTMUqudgvqhMRrfl+lcX8zB3pzqIe5hu6QyBGihqJ4DeAlNtfW7HbRKJiAzi+2H6Vt+wbAGKG598gSHJHbo+blGzD1+pvaeWv3nmvjkOHg==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMliCAbDGvfqq8w1SapdqL7Ov+vkornzI6\/j97jtmp1Gi3viA2gNyNxsmWwLA7ufJ9RsaxnfJqRMqgnKzX8+OdjNel\/+ddtg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGv2mAbDGwfqrAg1SapdobJhYVhBU5NSiK\/aM36CDeaS7RxdGGdFkpBhcWbgXl1r4gM9E+t4i8VqtL59srK1SNCw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7lnyAbE8qizte2guGVRmkVcGkv5qoP76rx6ZYfY7GiTIGFH3VyoFwOJwoxISj88mHRaYSwI4bpXhcyoEyAGViv2tiDLBVfILpcZ\/+A0Qiv1VBa8ICUMDRQrx5CDqmf55Z9q2TcM6DRtGf6jFYLpTtIAEvHvWq","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABwDPmAbE8riztimguGVRmG1ltXDNKfy76eT4wId+ArFyrzegdeZTbHlVMvCLs2c2+EA2soMsfpOe21jomDTNX7o61QW3JeThHyygaP47YW4GNZ+Sx1shfUeE+kMhoGKY9HGe7dqwJzl3ZTHA==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZWiaAbDGufqq5A1SapdoDF2jTcUW8rpA6q+ygWyOEEp5ZyaIh54nEeCTA5rmIBBuRB80AJ4ucZj+GRJZbF8pje\/mBAwRAKPxIg3bC3blDWSOwZwM=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":151,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzR8OAbE8oiztXWguGVRnNM9HTBSlX5M1EBoCqSxCoo\/y4C0DNLyWHH72DFdIfX3bLtM20n1pKbjpMm9ncpZn1FruZozD6e1fiT2ngnvxRY5HbqaNsneMnIUXj\/z+H939ZoFELlN5n3tGQ6Y\/dLA==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":164,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHBH95gHJAa4KGFK8WgYoHACAIyWAbE8piztbGguGVRm5xzS5mipLtxb40Fu91SoJNHfPL1NWj3h1F94VfuMMZVyeNJH1sV6fkpbkp26V1XQcsJIdOvuKK8rqbKW97MidYpxG+uNkk775Po1NswYDXSTQEatS\/Hm9RYQ4SIFQLVc421rCtlXiXvQ2+Zk=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAQBHaTgoYUrwByQGuKBxaBgBAOhyAbDGxfqrEQ1SapdqXOPxAf1HcW4NcEfpMIQJqPT2EMk+Iyf9AAqHTtNg\/3Sdo8+VQ+\/odyIY\/6Q==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMkgaAbDGvfqq8w1SapdqL7Ov+vkornzI6\/j97jtmp1Gi3viA2gNyNxsmWwLA7ufJ9RsaxnfJqRMqgnKzX8+OdjNel\/+ddtg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvpTeAbE8siztmWguGVRmxSmX3Ps7VgGx7fojWq1jUPRk\/jmBGheB+JJnoe0+kTNtzXlSFwI138RPDPgVgJYK4IIyHAZXzoU0F4HgYIvyuYiEsmQXGQltbampcAP8WxyJFeMF3w+ExGi4G","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uk6AbDGyfqrIA1SapdqeMZVSg2ahRGvJ+fV\/f6CYoL61vwZEWn62A8ICziEsorG0z7PZrXS56Y+u","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGu0+AbDGwfqrAg1SapdobJhYVhBU5NSiK\/aM36CDeaS7RxdGGdFkpBhcWbgXl1r4gM9E+t4i8VqtL59srK1SNCw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7mpaAbE8qizte2guGVRmkVcGkv5qoP76rx6ZYfY7GiTIGFH3VyoFwOJwoxISj88mHRaYSwI4bpXhcyoEyAGViv2tiDLBVfILpcZ\/+A0Qiv1VBa8ICUMDRQrx5CDqmf55Z9q2TcM6DRtGf6jFYLpTtIAEvHvWq","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yCCAbDGzfqrLw1SapdrgvC65LYHxIYZ+hmOeZ06egXqsHNROyh6Ktbd\/Fqo9RSC1bklbKZ8bvXCN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":143,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAPxHbIwoYUrwByQGuLDhaBABrdcSAbE8tiztqGguGVRnubRWKNusVuNN5RfwTOekASa21lb2y35xEGwhLPTxOsTOWehHDqisEksqB0MzR2RWN+Fsj\/d25A\/ce5uV4DKwNKKHKO5eJnxpjv9LyiWKnAdidgXwwY44=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbBwuAbE8uiztt2guGVRkATt7i69mQTiNc6GM2GnuP46eipflC11+yvunwJi+oW6usLn1\/GJ0Q4LfC\/MFk+n9QWgtP3BJwtOOPzYGctLn9GJcBvz7wrg==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwEROAbE8riztimguGVRmG1ltXDNKfy76eT4wId+ArFyrzegdeZTbHlVMvCLs2c2+EA2soMsfpOe21jomDTNX7o61QW3JeThHyygaP47YW4GNZ+Sx1shfUeE+kMhoGKY9HGe7dqwJzl3ZTHA==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZXyAbDG0fqrPg1SapdryqAoYDFApAtaosJgZZS6F\/ZnkTlTXTxjcjE\/7gmIjBym7WxxwZwZe3huK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1aCAbDG1fqrTQ1SapdpMeZDWOdCEYyVIp083eyrbrqAYV3MWaKLkzZ4dxnjJV5vCesh1mMngZvoM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHRH9JgHJAa4KGFK8WgQsOABANgKAbDGxfqrEQ1SapdqXOPxAf1HcW4NcEfpMIQJqPT2EMk+Iyf9AAqHTtNg\/3Sdo8+VQ+\/odyIY\/6Q==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":126,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaE\/OAbE8viztxmguGVRl9lqvtv5gnI3lHluCpiKr9OujNGi1Fg34DS2JUSrBRzBLhijIlycknzuH2k69MIycXZYGjSPTgrK7Ttce0MTv5sy7Tt+WY","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":126,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaveSAbE8wizt1WguGVRnfch28HPwk8+ZZhucOUJBYJ6OjqeC3uB6rL4Pr2pHS0gmqkIRV9E\/Gs6O\/hLKqws3PYg5hjLueeZtFNfnCKJPsiXbj7tgT","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":147,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvqVGAbE8siztmWguGVRmxSmX3Ps7VgGx7fojWq1jUPRk\/jmBGheB+JJnoe0+kTNtzXlSFwI138RPDPgVgJYK4IIyHAZXzoU0F4HgYIvyuYiEsmQXGQltbampcAP8WxyJFeMF3w+ExGi4G","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/svSAbDG2fqrXA1Sapdr4ENlJ5uhQkKkSt5NbZ2IM6yIemrnaThWJ6jI7vIS9H0bq8JayDMBieHHX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tjSAbDGyfqrIA1SapdqeMZVSg2ahRGvJ+fV\/f6CYoL61vwZEWn62A8ICziEsorG0z7PZrXS56Y+u","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh2KSAbE8xizt5GguGVRkKs8kqt8Q\/Zm6F020ByTczUMieN4i8FBqIibBAp3sfCQIpHj1QKbmQ25JnThfmwuQPpv4sQFk0NwdCP9lVGH6dgSgVXqctA2pOkZmeLA==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xAaAbDGzfqrLw1SapdrgvC65LYHxIYZ+hmOeZ06egXqsHNROyh6Ktbd\/Fqo9RSC1bklbKZ8bvXCN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yeWAbDG3fqraw1Sapdp9Y6CxoXNLjEl713HSwxQlnzfWciXsN9k\/wdO9Oh60ae8cp+Sn2Bmb9z4V","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/G9CAbDG4fqreg1SapdqJrvGDidhzPxwwno7pZSNW\/AGpeESgBC3gEOb9fE4cZuCdnLsCMaJUXrrp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":143,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHBH9+wHJAa4KGFK8WgYoHABred6AbE8tiztqGguGVRnubRWKNusVuNN5RfwTOekASa21lb2y35xEGwhLPTxOsTOWehHDqisEksqB0MzR2RWN+Fsj\/d25A\/ce5uV4DKwNKKHKO5eJnxpjv9LyiWKnAdidgXwwY44=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAPxHbOAoYUrwByQGuLDhaBABWrAWAbE8yizt82guGVRnSKFXbSOwz1kwzNVxWywndYOoWdPknZpKGPDEYyuHLv6jPcVOtRm97FPff4qrNXl54shZ7uKs0w5iRRMwMc2+efVw=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh+KGAbE8zizuAmguGVRna0Tn6lM4XzRXLi1icHOuq5aYaJJym66S9HBNBYh6Vx1h5Us9SeM9uwAk0JWEFNgewBEqxx3A+PzTm8XMenMKGUFZs8fWxhw4JVM6VNw==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbCyWAbE8uiztt2guGVRkATt7i69mQTiNc6GM2GnuP46eipflC11+yvunwJi+oW6usLn1\/GJ0Q4LfC\/MFk+n9QWgtP3BJwtOOPzYGctLn9GJcBvz7wrg==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YWKAbDG0fqrPg1SapdryqAoYDFApAtaosJgZZS6F\/ZnkTlTXTxjcjE\/7gmIjBym7WxxwZwZe3huK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/vTGAbDG5fqriQ1Sapdp3ZL9vBz4iVkFjJS0ba6azSkhsHwn2HV9AJeEBhmxww2bGYvWNph1j8FZu","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":126,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABavNqAbE80izuEWguGVRlEJzgkS55T5k3arLtsR3syPYx\/SMjQhUprb6L\/eW7a7i1wP4AxoOl6CpdD9sjO2nhb4iAA0zaMtBmTo\/dnJsCCVZFdusI3","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":126,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABa+9uAbE81izuIGguGVRk+jaCVClxulhSmEB82IFr7SZ14GmLDnQo1dcoVUYk+vx7zUXCn\/6nvOFI8Bd+HdPR+xzvMhVwJEQVOBeRIBykEaddFxHnv","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rbKAbDG6fqrmA1SapdrA\/\/xd08uplo6b5UrJlIHhU+DuF8mueA9nmUBjJTe9W79KuqX+q1uF6ICZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0YaAbDG1fqrTQ1SapdpMeZDWOdCEYyVIp083eyrbrqAYV3MWaKLkzZ4dxnjJV5vCesh1mMngZvoM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABaGA2AbE8viztxmguGVRl9lqvtv5gnI3lHluCpiKr9OujNGi1Fg34DS2JUSrBRzBLhijIlycknzuH2k69MIycXZYGjSPTgrK7Ttce0MTv5sy7Tt+WY","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/H+eAbDG7fqrpw1SapdqK4WKjnnWCW8ejYeik0lNTZSThcQOqbyAp2eHdWWNYGErXdDCHRNnqbT20","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABawf6AbE8wizt1WguGVRnfch28HPwk8+ZZhucOUJBYJ6OjqeC3uB6rL4Pr2pHS0gmqkIRV9E\/Gs6O\/hLKqws3PYg5hjLueeZtFNfnCKJPsiXbj7tgT","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rtqAbDG2fqrXA1Sapdr4ENlJ5uhQkKkSt5NbZ2IM6yIemrnaThWJ6jI7vIS9H0bq8JayDMBieHHX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aBuAbDG8fqrtg1SapdphzivGkCFXha9zpppSGwGzA\/3pCRikVqwxBHXZmktABnDPpSO5dEqtD2d2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbRwqAbE82izuL2guGVRnP\/CfwC0h\/IXNhyBObqfiZ7NAlGI6F29q0Ol9rWCJ1z592uaBjz1SSF+Y3NB9DTdziItdSKfBeofux5WTWxAw510FK9lJWkg==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh3L6AbE8xizt5GguGVRkKs8kqt8Q\/Zm6F020ByTczUMieN4i8FBqIibBAp3sfCQIpHj1QKbmQ25JnThfmwuQPpv4sQFk0NwdCP9lVGH6dgSgVXqctA2pOkZmeLA==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xcuAbDG3fqraw1Sapdp9Y6CxoXNLjEl713HSwxQlnzfWciXsN9k\/wdO9Oh60ae8cp+Sn2Bmb9z4V","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/F7aAbDG4fqreg1SapdqJrvGDidhzPxwwno7pZSNW\/AGpeESgBC3gEOb9fE4cZuCdnLsCMaJUXrrp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/g4KAbDG9fqrxQ1Sapdot7hrc8bKpl+5n7pCQAdM7sriI6j8LDzlACQtrwqJ\/1lWSQfSrjoGnGRZj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHBH+EAHJAa4KGFK8WgYoHABWsB+AbE8yizt82guGVRnSKFXbSOwz1kwzNVxWywndYOoWdPknZpKGPDEYyuHLv6jPcVOtRm97FPff4qrNXl54shZ7uKs0w5iRRMwMc2+efVw=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069178,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh\/LuAbE8zizuAmguGVRna0Tn6lM4XzRXLi1icHOuq5aYaJJym66S9HBNBYh6Vx1h5Us9SeM9uwAk0JWEFNgewBEqxx3A+PzTm8XMenMKGUFZs8fWxhw4JVM6VNw==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/uReAbDG5fqriQ1Sapdp3ZL9vBz4iVkFjJS0ba6azSkhsHwn2HV9AJeEBhmxww2bGYvWNph1j8FZu","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAPxHbNQoYUrwByQGuLDhaBABZK5aAbE83izuPmguGVRk3cbRrKuGsUGcbSruozYx0x7TDSPcK2QUfEh2Aex5DpiahSSBDwiMs4vkgpfqwaMudgDXVgdaODpPdv36RKeqaDwuPRhM=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAPxHbLgoYUrwByQGuLDhaBABgXE2AbE84izuTWguGVRlhJnAqChg3j67cO8Qo8ZSqIgTk39dvp98EGFrlccWjMij4EYK2wxpvUPApMavvy7azHdb4mmRrScYBTX0uZZJF1woDB5Tf8dou6ccI","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABawPSAbE80izuEWguGVRlEJzgkS55T5k3arLtsR3syPYx\/SMjQhUprb6L\/eW7a7i1wP4AxoOl6CpdD9sjO2nhb4iAA0zaMtBmTo\/dnJsCCVZFdusI3","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MjaAbDG+fqr1A1SapdpcXJxLCy4bR39VsS8XD5p7GO7ynlhNQnukPHGBOwjPrxHlVBt5EjTxjYFh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABa\/\/WAbE81izuIGguGVRk+jaCVClxulhSmEB82IFr7SZ14GmLDnQo1dcoVUYk+vx7zUXCn\/6nvOFI8Bd+HdPR+xzvMhVwJEQVOBeRIBykEaddFxHnv","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/eySAbDG\/fqr4w1SapdpReXzshmA7rnlHcpq\/ah2kt7qAGuuDefagMFrZy5xbyVqcdWk5J\/2gAdxc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbJemAbE85izuXGguGVRm9dl+sOz1PHxmzbd66PGYYVYEP8mKglImMa067M7nbTQ7U4ZeXCnOvhI1zdhovawsF45W2fBIstBbJq\/y1nrm38dKEy6969Q==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":119,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTwlGAbE86izua2guGVRkpg+i9GRnKyN5M2dBmT9OjLfFdtXUjFC8ZFDdA93XdJAw2imuUlYfSG7hvaL06hbewFsJuVhNluCBIFRGnL1I=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qZiAbDG6fqrmA1SapdrA\/\/xd08uplo6b5UrJlIHhU+DuF8mueA9nmUBjJTe9W79KuqX+q1uF6ICZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/G82AbDG7fqrpw1SapdqK4WKjnnWCW8ejYeik0lNTZSThcQOqbyAp2eHdWWNYGErXdDCHRNnqbT20","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Bm+AbDHAfqr8g1SapdqJML\/FpLp7Fg310\/w7hIt1QSrVhZ8xz7wJhe7zLMrCCrDJE0UHvi92SeEr","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZAGAbDG8fqrtg1SapdphzivGkCFXha9zpppSGwGzA\/3pCRikVqwxBHXZmktABnDPpSO5dEqtD2d2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDhaBABqzUuAbE87izuemguGVRnWK1t5SLutt84Wo\/rqPVkVaeOCx6VsjIQ1YCmKxjPc5vZ1OsOj5itWN4\/TokMfgpepSnkHI07qudUc8YKHrSvKr9qU0M1kd6iwOib1PuokO8v\/P7indQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbSySAbE82izuL2guGVRnP\/CfwC0h\/IXNhyBObqfiZ7NAlGI6F29q0Ol9rWCJ1z592uaBjz1SSF+Y3NB9DTdziItdSKfBeofux5WTWxAw510FK9lJWkg==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/A0iAbDHBfqsAQ1SapdrSXUXvjy6CGrY3L2SwL0yCIcObGfMfvgkJoJ8ossrRKd5uSqjp5Pn7L4oL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/f2iAbDG9fqrxQ1Sapdot7hrc8bKpl+5n7pCQAdM7sriI6j8LDzlACQtrwqJ\/1lWSQfSrjoGnGRZj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/d8GAbDHCfqsEA1Sapdr8Qr8VdrE7jewIVJEPXafYSkaqqr9Qi2BTTeb57UXflvbUCUoZKxtx3AW5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1zjeAbE88izuiWguGVRkRCoyyDmlBMT7iS0pCx3oXNS++aHmQfSrQ8QP4fx+yvY9b6kvjZqJ2zmMANGSxiSqD+ZfPlRxv73xIQCIxDIlSPKbFi99h+sHlc4A9qOxivHa0HjwdzMKQiU2IfYdMkE+78s7bejJuC2S5a9uSWcN4k9Xd8HKx+v+L8Xp91P\/TGK6fTxbviB3NN9NPEyCYBCI1wItc4XFeWYt30IZFfg3p+A==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACo0\/eAbE89izumGguGVRm83WptGsRz0NSnT9m76sTi1lWTLNxZPAR\/a5Yq2ARoe7hAK03NJHWxwhW8Q9n5haBi4y0j5AjcmCtowk7XGCq4dNltwlJQ7MlnP8qGdsp\/YuzYxjpICKOKfwtOgZnKqZfZD+H\/7L+4qMpm\/4j10WSSlVqvO9myxgVrNo\/MbxGQoLR\/aO+2JJeHLT7\/893yk5vMHjfI","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":254,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n8EAAPwb4xgoYUrxuTI8ygMgfkPcR3vySeOS9gBgAteanAAABAQgKAAtFJkTbhg0XAwEAIOnqWwm1hSRH1K4geGMtX5jb26JWTPDJIfBdsHxhllslFwMBAJA8ZDpiVbWn0vVGgaSwptsVZVbEfjqBHegRsTGQJ2ZaEVR1OgMTqAmC7c402HJ5Qx6+OQNM7YqtqiGP99+DlWgUf5g901nmsEcBUVR5S\/xq3QV531zL5\/m6pkADeZecnhu4WrtLkVdQyLvntja8qfDpJbrfuW4is8Ol78moGZJ4jlCfrOaCmg6KSJdcuwVNmH4=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHBH+DQHJAa4KGFK8WgYoHABZL7CAbE83izuPmguGVRk3cbRrKuGsUGcbSruozYx0x7TDSPcK2QUfEh2Aex5DpiahSSBDwiMs4vkgpfqwaMudgDXVgdaODpPdv36RKeqaDwuPRhM=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHBH+BgHJAa4KGFK8WgYoHABgYGeAbE84izuTWguGVRlhJnAqChg3j67cO8Qo8ZSqIgTk39dvp98EGFrlccWjMij4EYK2wxpvUPApMavvy7azHdb4mmRrScYBTX0uZZJF1woDB5Tf8dou6ccI","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/gJuAbDHDfqsHw1SapdrvzxUOetQQ8v9sOle9bMQyoJmz\/z7S7KOct6RdGjv6IUwBZ+W4qZ0jlBWq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PyyAbDHEfqsLg1SapdpZMbFJ51lRdLJ\/VZFjYku328AV7uEQ8Nz2CfD5AUCFq+0HiK0ZbpBstnGl","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LhyAbDG+fqr1A1SapdpcXJxLCy4bR39VsS8XD5p7GO7ynlhNQnukPHGBOwjPrxHlVBt5EjTxjYFh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACV6AGAbE8+izup2guGVRkASyewvcZSvmh6\/MVkYGE3FeXmJGMeMgnQFzdNX8uW\/ziuXcU6oBCPZ6JSBtMFm0+Za6QPLWk9URRG5c58J4GcmUpE9rg0uifsfOfc4aidWmeqb2RAyK\/BkzrBRXgSaXvE8N6W79YQgXvCsRV5zoFjDP2gAehg9BM\/ECfEMm5HL1c=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":167,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAPxHbCwoYUrwByQGuLDhaBACDJkWAbE8\/izutmguGVRkdc+eSekWIV4ucp+\/tKZ8TiBXK4h6Q5N2ToGzVXqGLVG01xs8dDs56kUpgJSVGT8FWGv3srgAIYHKyVlMJtk1soHXxqDcK7WucqmBIrfR0bzoY63XniXVpP7fE3E9L7LDCHzLYCJh5Fq7MQVvtWOM=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dwqAbDG\/fqr4w1SapdpReXzshmA7rnlHcpq\/ah2kt7qAGuuDefagMFrZy5xbyVqcdWk5J\/2gAdxc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbKgOAbE85izuXGguGVRm9dl+sOz1PHxmzbd66PGYYVYEP8mKglImMa067M7nbTQ7U4ZeXCnOvhI1zdhovawsF45W2fBIstBbJq\/y1nrm38dKEy6969Q==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/IOGAbDHFfqsPQ1Sapdo03BOUdNHhNG6Bu0RyZ\/2OAdQLUfkrbW0ipNMFCguUlmbeNRHjNNzMjF2Z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":150,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAPxHbHAoYUrwByQGuLDhaBABy\/MSAbE9AizuxWguGVRnwAKFNWkB3nSz1k8Ihp7a4qfPpqTMbGbmoMHljOjpZBwoi2F2LhZoWDTyd9peMdXVpPzJGmCFrUnblh82SMIPpWxrVEIJrXvZl3BMzOXiTWF+zDTyfI4GB18be\/g1x","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTxmuAbE86izua2guGVRkpg+i9GRnKyN5M2dBmT9OjLfFdtXUjFC8ZFDdA93XdJAw2imuUlYfSG7hvaL06hbewFsJuVhNluCBIFRGnL1I=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZEqAbDHGfqsTA1SapdpJiLDNoY2YGjlSgR7wmQLHT0BNhUmxJA+5wJYlJXwUMdRRQCncn8W4t6SW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9t2AbDHHfqsWw1SapdpXYk9WdhvCO1ZozwcbfNOLiNdQQxIfpcVf+0OmY\/hKQo4z3XvxiZ0iMU3i","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/AlWAbDHAfqr8g1SapdqJML\/FpLp7Fg310\/w7hIt1QSrVhZ8xz7wJhe7zLMrCCrDJE0UHvi92SeEr","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB1D3CAbE9Bizu1GguGVRl9gmwLg3mkL5Rm7yOOMCTWDl3lDgy3vfyTrcycD73lJcCe1f4CwZBvyfnrAjJ\/gCRT9FupPhRzkZDFcW0iZfjGMms38Rk5aoWp8rVucB7q4YO+x\/JVOTSHkR\/ppTMJOYXI","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACgbdiAbE9Cizu42guGVRlbwUwiYVa0o1z4BBkLM\/EITvfPun\/n4ZLZ4VlNEkPMH5gA+j5veqi85bIYmaoTmqTyCRLBhf7yMHv0C51U1AlcbZ6rlWVjQQxkZjw0S1hx3\/LMkvx6\/s4MCbAKApGcqt7k+MoQYHicQAOId1Y1I7\/aiQaVbzAkuhuT\/0RY\/uvPLgt1NGkcIOO50H0hUw==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgYoHABq0WWAbE87izuemguGVRnWK1t5SLutt84Wo\/rqPVkVaeOCx6VsjIQ1YCmKxjPc5vZ1OsOj5itWN4\/TokMfgpepSnkHI07qudUc8YKHrSvKr9qU0M1kd6iwOib1PuokO8v\/P7indQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EqyAbDHIfqsag1Sapdq1mhYAF91M9GjjyaKGfzUpcsHZLho8McAgb0L31kxvx1IlVyPpUH3hgADU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/y2AbDHBfqsAQ1SapdrSXUXvjy6CGrY3L2SwL0yCIcObGfMfvgkJoJ8ossrRKd5uSqjp5Pn7L4oL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/c6eAbDHCfqsEA1Sapdr8Qr8VdrE7jewIVJEPXafYSkaqqr9Qi2BTTeb57UXflvbUCUoZKxtx3AW5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":194,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACeaCaAbE9Dizu8mguGVRlcaoWhyPwxag16dbJKTkYSNBRlraJmvTLTMmKNJaVC4M1pnOgVSZgUjce8SVeDMcTseCiADSTHY0R2ap7rSMWEDvCPxLeao72qDo9QksKWvfiz9C3HPUwiK6f8iBTk+gzvTINuN+RjsfxkXo2ItOMVwoBLk+lSY3g4RsPyyzM0I9gbElH0oiA+vLc=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAPxHbKAoYUrwByQGuLDhaBABmj8iAbE9EizvAWguGVRl67W6zWA3g7GRIKWmm+UgB8J2FmD\/v3egi2f1kKYVlmCKOXsuD\/0E4w0vWSgzXW+mbWVlRv95s0wYDbJ2QO+pUJsRDfqhUAsXcc3T65YisV9oY","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC10lGAbE88izuiWguGVRkRCoyyDmlBMT7iS0pCx3oXNS++aHmQfSrQ8QP4fx+yvY9b6kvjZqJ2zmMANGSxiSqD+ZfPlRxv73xIQCIxDIlSPKbFi99h+sHlc4A9qOxivHa0HjwdzMKQiU2IfYdMkE+78s7bejJuC2S5a9uSWcN4k9Xd8HKx+v+L8Xp91P\/TGK6fTxbviB3NN9NPEyCYBCI1wItc4XFeWYt30IZFfg3p+A==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uJOAbDHJfqseQ1Sapdr4yXP2Pk+0FzXnL6lXPRNlGL+HhOT4aEpZhp+hh2S4oEaZARBtj+a44NVI","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACo2BGAbE89izumGguGVRm83WptGsRz0NSnT9m76sTi1lWTLNxZPAR\/a5Yq2ARoe7hAK03NJHWxwhW8Q9n5haBi4y0j5AjcmCtowk7XGCq4dNltwlJQ7MlnP8qGdsp\/YuzYxjpICKOKfwtOgZnKqZfZD+H\/7L+4qMpm\/4j10WSSlVqvO9myxgVrNo\/MbxGQoLR\/aO+2JJeHLT7\/893yk5vMHjfI","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oc2AbDHKfqsiA1Sapdp1ifcXlEEzUvV\/cSU7GapAqkV1Wbi8rzs8hVvy2IaCh0tqw6LfVvO1lG68","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw4UAALwZAkG5MjzIKGFK8H5CAyJJ45L33Ed+2gBAALfvtAAABAQgKRNun6wALRSY=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0755{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV7yjEAALwb9um5MjzIKGFK8Iynl6dfwqLstaZX9gBgAKjLBAAABAQgKRNun6wACyZgXAwEAIHIBGSvKuQoOVAb2f8OyrSTGXX5gcSVJhu1xBvKGn5tVFwMBAQDDfDKT6R5ESLcYNaJUvm6z4sZAxAibOekshkoPAteaMmKGLNBfFI0vsBhyoGA1l9W6QI9cMcWUnC+nkpg3fafwrUN6TbTHyyU9M7pzES\/AOHsaACoUVMuvo1OdJRQlQqW5p8ohDjLJ3TP5RMzLIJ3LzXSc9cghnL6wk72Ln5GoBgGUqAbzKubnS+ZGYmgf1ne6hBkPT8WjORpkPgDmLE2D4MCdfIhrde2AObtIq0Mm\/e0VDJr1kDVZLUAeHfvyDBTatqyGUeCfTgr6w2BpeiJ\/sLZymTr0iT7mBaA4lxrZNZT12zt6XR1E00OVe+bifDOBBC1\/wN7hF8fLr\/\/rlPaR","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKoEAAQAaV0QoYUrxuTI8y5ekjKS1plf3X8KnlgBAC9Vp5AAABAQgKAALNCUTbp+s=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":238,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAN6w4kAALwY\/5W5MjzIKGFK8H5CAyJJ45L33Ed+2gBgALen7AAABAQgKRNun6wALRSYXAwEAIPPiSITp8XC7CcKKzSGfrgIPnYWAF1M4zaXBcnSapImtFwMBAICmlEE7qP+BawOS9bLxyoVXctHZkanO0F0LNOMNpKXUXC\/Zf0F\/nDfPmisOw8GXVfCg\/9vJdclAzUcJwKpoELSAHNrntoFqKABj78hMKVH814Ai2OrPBiTbL3AA1utTngleikHiMc3Qz8mpXfn2fZa2Lug1EnH8c92mACO6KSH+6A==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgQsOAA\/fIGAbDHDfqsHw1SapdrvzxUOetQQ8v9sOle9bMQyoJmz\/z7S7KOct6RdGjv6IUwBZ+W4qZ0jlBWq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn8UAAPwb5fwoYUrxuTI8ygMgfkPcR37aSeOVngBAAwvp\/AAABAQgKAAtFVUTbp+s=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/OxKAbDHEfqsLg1SapdpZMbFJ51lRdLJ\/VZFjYku328AV7uEQ8Nz2CfD5AUCFq+0HiK0ZbpBstnGl","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAPxHbKgoYUrwByQGuLDhaBABk9XiAbE9FizvEGguGVRnwxz5Xmu78XtXGQ1Fz6DDb2XyEyVUWETVmafqljLBgIKjK6YrQbaNfHyWNhvvh5bfTdTzEAx3A3oMpxSEIFAbgQB\/becj4pySDXcTxT5wpRA==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACV7BuAbE8+izup2guGVRkASyewvcZSvmh6\/MVkYGE3FeXmJGMeMgnQFzdNX8uW\/ziuXcU6oBCPZ6JSBtMFm0+Za6QPLWk9URRG5c58J4GcmUpE9rg0uifsfOfc4aidWmeqb2RAyK\/BkzrBRXgSaXvE8N6W79YQgXvCsRV5zoFjDP2gAehg9BM\/ECfEMm5HL1c=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MLCAbDHLfqslw1SapdoiIt9\/SOSpCtKF+T3NMaj2lT\/UFCJSFJ1epUPMgJ8LyV\/OiNrbObmKlC6F","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":167,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHBH94wHJAa4KGFK8WgYoHACDKl+AbE8\/izutmguGVRkdc+eSekWIV4ucp+\/tKZ8TiBXK4h6Q5N2ToGzVXqGLVG01xs8dDs56kUpgJSVGT8FWGv3srgAIYHKyVlMJtk1soHXxqDcK7WucqmBIrfR0bzoY63XniXVpP7fE3E9L7LDCHzLYCJh5Fq7MQVvtWOM=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HMeAbDHFfqsPQ1Sapdo03BOUdNHhNG6Bu0RyZ\/2OAdQLUfkrbW0ipNMFCguUlmbeNRHjNNzMjF2Z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":150,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHBH99AHJAa4KGFK8WgYoHAByAN+AbE9AizuxWguGVRnwAKFNWkB3nSz1k8Ihp7a4qfPpqTMbGbmoMHljOjpZBwoi2F2LhZoWDTyd9peMdXVpPzJGmCFrUnblh82SMIPpWxrVEIJrXvZl3BMzOXiTWF+zDTyfI4GB18be\/g1x","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/kdCAbDHMfqspg1SapdryCVV0Q50Ox+P6j7rNUlcgeUJjYeIEExpvf3e+iWuh5PDH8eZkuTDLYsZF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5KoUAAQAaVJgoYUrxuTI8y5ekjKS1plf3X8KnlgBgC9Ri\/AAABAQgKAALNEUTbp+sXAwEAILbxhIDCKdhRCzH4oAhnmUNSVjPdu4+4LCJK82kd928BFwMBAIBM\/sANPHgAqgK8IamEo6DNFVo5TCEfb1odeKiYcyJXfKq+doHU13nOI7vPqxaLuUw+kBx4fJ7Wd3KjWW+7jGSl1NGLNCOEawZ5A4Y3hicJAXWKkwWIrs8QIz6mzbzW0D3GRAWQ8h9fbX1fSnNnjWdjZvUyqv3GuyXi+5Wcpg2KDQ==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YDCAbDHGfqsTA1SapdpJiLDNoY2YGjlSgR7wmQLHT0BNhUmxJA+5wJYlJXwUMdRRQCncn8W4t6SW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8sOAbDHHfqsWw1SapdpXYk9WdhvCO1ZozwcbfNOLiNdQQxIfpcVf+0OmY\/hKQo4z3XvxiZ0iMU3i","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB1E4qAbE9Bizu1GguGVRl9gmwLg3mkL5Rm7yOOMCTWDl3lDgy3vfyTrcycD73lJcCe1f4CwZBvyfnrAjJ\/gCRT9FupPhRzkZDFcW0iZfjGMms38Rk5aoWp8rVucB7q4YO+x\/JVOTSHkR\/ppTMJOYXI","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh9BqAbE9GizvH2guGVRl8q9qQB4iZec0J+v4v1i9EMXzfKZCW84c0o6mxnwc3bssfqqaHDAkDExabNW5fjuZtPBM5vvevEglYbpjOmqhwKp1mjdISkVIDIb2b9A==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAPxHbKgoYUrwByQGuLDhaBABkMdGAbE9HizvLmguGVRlooz7kOJTyNwU1euQqUWss\/ZjRzS+Nm8oENz+bqqC8cxiB3FKAJKt8JzwxYRxlh4UqAFR7Gb8tKiGnz9jodv9yzvgBH0+fo3oDHdlrfpZX9w==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":196,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACgcfKAbE9Cizu42guGVRlbwUwiYVa0o1z4BBkLM\/EITvfPun\/n4ZLZ4VlNEkPMH5gA+j5veqi85bIYmaoTmqTyCRLBhf7yMHv0C51U1AlcbZ6rlWVjQQxkZjw0S1hx3\/LMkvx6\/s4MCbAKApGcqt7k+MoQYHicQAOId1Y1I7\/aiQaVbzAkuhuT\/0RY\/uvPLgt1NGkcIOO50H0hUw==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lFaAbDHNfqstQ1Sapdq49n+4NgznfaPHTZvyERm1AP6JhU3KNKSYA1FCg7hqRU2VZK3LXpAdpbZF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0758{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w40AALwY\/ZG5MjzIKGFK8H5CAyJJ45Wf3Ed+2gBgALVjDAAABAQgKRNuoiwALRVUXAwEAIIBlC1wMHi+1TkuDu84ABASwXjnHfo\/wQbPLls8I\/a9eFwMBAQAtJXr05TvCQsqmpRiD9rN5\/5UqG4j3ZjOYmX\/9R3j1mk6Ccq13\/raHq1J4pwiuRWYELcEel2ljVu5etpDPx5Zq6IBX6psZGP0zlNngxgD8wgF6s9LC6UUYQV4ftfiw2fTVJZ1cXgKot0+jZS0bmXAy0ZJrrKOH+OBPHjxA8Tp54dh7cdhD25GVAV37lNCn1cSgUPKuqiOQOyKmoaxIaElD3qdWgqlPLs4yl7awzyp2q5HhugY5IQR2r\/1SmrylCqPd0Wpm\/5Lvf1JMT15BXsDvOSkNv0blnQO8lgUbxw8oMFDwtAoO4fOegRcn7CHn1FZfU9vTjLhAancvKc\/OmLex","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn8kAAPwb5fgoYUrxuTI8ygMgfkPcR37aSeOaRgBAA0PiYAAABAQgKAAtFZETbqIs=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n80AAPwb40woYUrxuTI8ygMgfkPcR37aSeOaRgBgA0E2aAAABAQgKAAtFZETbqIsXAwEAINWiqX52zUchfJWZ3iawQbVAmaEUWwAsbjgBg7R0svLxFwMBAIB\/fnSyda6o\/YAkz7pZyWmImbNglNsICFJqFPRvCUYshxLwnlh+IUuda7HDF9h2ydXoBiwFkb2Kteusu9HQsFTfDLUdyTy0qZbXQa8UNfUpoMZzKvjBJ3T9LsqvjqWt+f260I\/mFpq0TF4mUhrhFXV19lNWwil8SLeFHtAytpWo1Q==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069179,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DpKAbDHIfqsag1Sapdq1mhYAF91M9GjjyaKGfzUpcsHZLho8McAgb0L31kxvx1IlVyPpUH3hgADU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EP6AbDHOfqsxA1SapdqOjPc+ZMvKA+6DyLUUBGVVLs36vbmfyG\/pUtzWswOrjQf\/rR8ia+l6pB2V","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABUtDWAbE9IizvPWguGVRnv\/JV9Cu+4DU8pgpXodtXckkbMgyZ35e5ll\/oomn2v1ErMlI2gYVx0b9s6duUVmLlHvHQEGh7IlMSFoLDjRgCQ","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVktWAbE9JizvTGguGVRmI5vKhBood2qpg+sqGW6ZOQJNwy2TKbB7Do\/OSrEBp1mzWPO6c4HzBoT45R1Al+7HQgUJF44mbpvYSRChpyyAh9g==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QZeAbDHPfqs0w1Sapdp8aYNuberm4yiEG\/25wYv+7cW0HXwRJp8gU8jMg6nUhsWAKJ0GQOvd50NP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":124,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAPxHbNgoYUrwByQGuLDhaBABYOiyAbE9KizvW2guGVRldh6NKjz8fQJoHUSRdwNo0WC0qCVB0RxqwIikuHtvJa5BP1fX\/56u+Q21v4ovWwVP143wQ0UkpQyiwH1fiJseeRkznTQ==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZvqAbDHQfqs4g1SapdoTirYnQoiPFm7YuF5+OsorL7DoNXyCME2i+GWHHmnJgUn8djGtHJn7L9Nb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":194,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHBH9yAHJAa4KGFK8WgYoHACebECAbE9Dizu8mguGVRlcaoWhyPwxag16dbJKTkYSNBRlraJmvTLTMmKNJaVC4M1pnOgVSZgUjce8SVeDMcTseCiADSTHY0R2ap7rSMWEDvCPxLeao72qDo9QksKWvfiz9C3HPUwiK6f8iBTk+gzvTINuN+RjsfxkXo2ItOMVwoBLk+lSY3g4RsPyyzM0I9gbElH0oiA+vLc=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/C5KAbDHRfqs8Q1SapdrDFF6bMh2cGvVgl5Vx96LFN4GVGuEJk2mhvBww2uHLmeB86MQwUTsKvB6C","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":119,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTGLGAbE9LizvamguGVRndwCiOHgaBqTIyY8KihjIXwf8uixplGmRRdQTUyoiD05WqqASUhZSLpqfmPiI3Vznb+wPsdUz+zXf1R+gsX+I=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXwdqAbE9MizveWguGVRngFydX1M\/06cMsS999H86RqXDs3N6Y6mG+7y4f34H\/NL2CZ49Y\/yetLR7wQovD7ykuBrsNsG+QU1SY8bkrbA7TzoSv","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHBH+AAHJAa4KGFK8WgYoHABmk+KAbE9EizvAWguGVRl67W6zWA3g7GRIKWmm+UgB8J2FmD\/v3egi2f1kKYVlmCKOXsuD\/0E4w0vWSgzXW+mbWVlRv95s0wYDbJ2QO+pUJsRDfqhUAsXcc3T65YisV9oY","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5keAbDHSfqtAA1Sapdpn27RQXK+AobSAnGCoWZt2s+6QgofxbzTYsV5BMHFYbii9ypxskk4J2cm6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tHmAbDHJfqseQ1Sapdr4yXP2Pk+0FzXnL6lXPRNlGL+HhOT4aEpZhp+hh2S4oEaZARBtj+a44NVI","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nbOAbDHKfqsiA1Sapdp1ifcXlEEzUvV\/cSU7GapAqkV1Wbi8rzs8hVvy2IaCh0tqw6LfVvO1lG68","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/mfuAbDHTfqtDw1SapdqZclOiUBcmANaStnBTCncs4OgJJ4fLaobbNx+ZZzXD0a46FnAYmEIuFdIi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAPxHbMwoYUrwByQGuLDhaBABbM66AbE9NizviGguGVRkGt6qOymfUIiwh0xEq0tYFwx3Lt99B+e+gEBhr50wjbouSs50lr1\/bDX+mWvVRb7AdHsxlCi5vjNdUn5jclag0W2Ra9TZSow==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOpJqAbE9Oizvl2guGVRlmU87bK+VVGeFQCIxpmzH7f5Z4j\/QIkBIddWU2SCka0jBFbcGNoGqDVjsV4vsPHobkXKN6HpXRjaFd","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHBH+AgHJAa4KGFK8WgYoHABk+ZKAbE9FizvEGguGVRnwxz5Xmu78XtXGQ1Fz6DDb2XyEyVUWETVmafqljLBgIKjK6YrQbaNfHyWNhvvh5bfTdTzEAx3A3oMpxSEIFAbgQB\/becj4pySDXcTxT5wpRA==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":83,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAENCkkAAQAbmZQoYUrzYOtyuwEEBuxTXAEVlWZivUBiMAAFrAAAVAwEAFnnuS9reX0mqADPiihp3NglZFsDnKQA=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5P2AbDHUfqtHg1SapdqusXiD3yXwTCcYU\/Y5pzIsKilKeOwAjequMlOdRrUEaiLUvFft7nzoZBb+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LJaAbDHLfqslw1SapdoiIt9\/SOSpCtKF+T3NMaj2lT\/UFCJSFJ1epUPMgJ8LyV\/OiNrbObmKlC6F","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABRR4qAbE9PizvpmguGVRlQ8qbgy8H0OCJfT\/J5b\/xK2RaJvgPHEMKt8ntxVULVSCFPuJW+nwDSN+W2M0QsseRX7YFL2UsRagY9jTTs","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/jbaAbDHMfqspg1SapdryCVV0Q50Ox+P6j7rNUlcgeUJjYeIEExpvf3e+iWuh5PDH8eZkuTDLYsZF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0582{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5KokAAQAaVJQoYUrxuTI8y5ekjKS1plf3X8KnlgBgC9RiHAAABAQgKAALNSUTbp+sXAwEAILbxhIDCKdhRCzH4oAhnmUNSVjPdu4+4LCJK82kd928BFwMBAIBM\/sANPHgAqgK8IamEo6DNFVo5TCEfb1odeKiYcyJXfKq+doHU13nOI7vPqxaLuUw+kBx4fJ7Wd3KjWW+7jGSl1NGLNCOEawZ5A4Y3hicJAXWKkwWIrs8QIz6mzbzW0D3GRAWQ8h9fbX1fSnNnjWdjZvUyqv3GuyXi+5Wcpg2KDQ==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QtCAbDHVfqtLQ1Sapdq0tZIcjIGwhKYlII5ejkRFRA2lFOrXjw6P2GK590WiCCSnu2QKYGvzvOR0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/AOeAbDHWfqtPA1SapdpXkECFv25nB+OU3SfFWMQlJIRPGdMSLBFeMxtYkOfzPPIIU1JZ9KuotoQn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyjUAALwb+425MjzIKGFK8Iynl6dfwqeUtaZangBAALRCkAAABAQgKRNuqsAACzRE=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXpASAbE9QizvtWguGVRlB2sQIlkFU+UojhvoyTBRGvzScdzbhEvL90ZSdJfAsp0F+svvStw0hc1UE6oCbKSTJ7\/2OZdpQU7PNpBVulgynQU2w","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABL4gmAbE9RizvxGguGVRn6A9l\/PAS+R5EblphoXtixcii6pf6IY7QUCAFjjZcR4QWupww2qcIwmBUB0YXlAlp679UgK8TM","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh+DSAbE9GizvH2guGVRl8q9qQB4iZec0J+v4v1i9EMXzfKZCW84c0o6mxnwc3bssfqqaHDAkDExabNW5fjuZtPBM5vvevEglYbpjOmqhwKp1mjdISkVIDIb2b9A==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/0GKAbDHXfqtSw1SapdrGrVCs+pHHwoKkh1VlLnoGvDDZQPZgLo8fov5Txz4f7KGBEfsMU1+4qY+D","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHBH+AgHJAa4KGFK8WgYoHABkNeuAbE9HizvLmguGVRlooz7kOJTyNwU1euQqUWss\/ZjRzS+Nm8oENz+bqqC8cxiB3FKAJKt8JzwxYRxlh4UqAFR7Gb8tKiGnz9jodv9yzvgBH0+fo3oDHdlrfpZX9w==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kDyAbDHNfqstQ1Sapdq49n+4NgznfaPHTZvyERm1AP6JhU3KNKSYA1FCg7hqRU2VZK3LXpAdpbZF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOafWAbE9Sizv02guGVRmJCXtJtZMeVgmAHfdtfa6PA+11SvPEO2qbLPnU3GgOWAddkWbyOnyqkh7FVo7EBbPYa8bnf6IqYH2K","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLNlOAbE9Tizv4mguGVRkQIE1G0Qw3VJDcFnNFKNRn2IXIMZDKuoCiK2cAyJdomZAy4AW13c7rDsRY76BC8pN1uTeC9HhQ","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KMGAbDHYfqtWg1Sapdoe3v0zl9QDlg8t0fw86CSWvtiqbFP1+g+gKNKuPaEf+mgBrfPeu2lKS3tH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DOSAbDHOfqsxA1SapdqOjPc+ZMvKA+6DyLUUBGVVLs36vbmfyG\/pUtzWswOrjQf\/rR8ia+l6pB2V","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABUuE+AbE9IizvPWguGVRnv\/JV9Cu+4DU8pgpXodtXckkbMgyZ35e5ll\/oomn2v1ErMlI2gYVx0b9s6duUVmLlHvHQEGh7IlMSFoLDjRgCQ","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0584{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n9EAAPwb40goYUrxuTI8ygMgfkPcR37aSeOaRgBgA0E1UAAABAQgKAAtFqkTbqIsXAwEAINWiqX52zUchfJWZ3iawQbVAmaEUWwAsbjgBg7R0svLxFwMBAIB\/fnSyda6o\/YAkz7pZyWmImbNglNsICFJqFPRvCUYshxLwnlh+IUuda7HDF9h2ydXoBiwFkb2Kteusu9HQsFTfDLUdyTy0qZbXQa8UNfUpoMZzKvjBJ3T9LsqvjqWt+f260I\/mFpq0TF4mUhrhFXV19lNWwil8SLeFHtAytpWo1Q==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVlu+AbE9JizvTGguGVRmI5vKhBood2qpg+sqGW6ZOQJNwy2TKbB7Do\/OSrEBp1mzWPO6c4HzBoT45R1Al+7HQgUJF44mbpvYSRChpyyAh9g==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Ik6AbDHZfqtaQ1Sapdqw\/M\/j+9TkHNGDdVZHksoZvr9gWqIa16cFKxnNdlFrBCC6+haZY5A8Iha8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw5EAALwZAjW5MjzIKGFK8H5CAyJJ45pH3EeBggBAAMPXJAAABAQgKRNurUAALRWQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PX2AbDHPfqs0w1Sapdp8aYNuberm4yiEG\/25wYv+7cW0HXwRJp8gU8jMg6nUhsWAKJ0GQOvd50NP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHBH+DgHJAa4KGFK8WgYoHABYPkaAbE9KizvW2guGVRldh6NKjz8fQJoHUSRdwNo0WC0qCVB0RxqwIikuHtvJa5BP1fX\/56u+Q21v4ovWwVP143wQ0UkpQyiwH1fiJseeRkznTQ==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqyS6ByAAMVJql2nhUecfSj38IyetU7qmBuDDPjWXjWG6rSfmFeg4CNNxlBxif7M9KMVtpfq2RjbJmtK+rq2SSv32uc+V\/lvbg2LY9MFOYdQ6IXJKzlD6AAAAE+zNyuhY7D2DdMg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oBeAbDHafqteA1SapdpZ4qTihMSNLGab2vp4Rdr+uUa6dSYZ3cnGqpc2lEZ7vbWV\/yHmTOUJl1xR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqTFSByAAMC4ZVGQ21DhFtJ5pVSpHA29mSXWgupbBBO2VyAq\/04b9a0U3MpwQFQvWqFidhxeuTBSyks5kk9ZQJHxCKEShx1YUsKPxryHVVYZGtotYaqIGAAAAEQW6VLf5HEs5d\/Q==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIIrCAbE9Uizv8WguGVRkUJlgvJKK\/bL9As1dvXRMuziQW45LwEDcHPZcxqg1OONeDJFQYrxcTG1\/gKuoZILQe8Ijh","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YuCAbDHQfqs4g1SapdoTirYnQoiPFm7YuF5+OsorL7DoNXyCME2i+GWHHmnJgUn8djGtHJn7L9Nb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/B3iAbDHRfqs8Q1SapdrDFF6bMh2cGvVgl5Vx96LFN4GVGuEJk2mhvBww2uHLmeB86MQwUTsKvB6C","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZF6AbDHbfqthw1Sapdp6GAWDp6nc1sE4DIuVySPHZp5C4Mfq6A0BjG04kbfD\/WAiFWaXVwXgdVb6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEqbGAbE9VizwAGguGVRko009QMDzqMhKvIJYcu78ovTgSIvA2Ur+0XcO2swYvhLFXc2SuaKgb6OQooyfv8BE=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABAH1iAbE9WizwD2guGVRljjHsj23r8F2F7vR40vWm7WXtWpJPkA6QSPah\/n39\/uz7KUjsOhQdVLgnQNw==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yZOAbDHcfqtlg1SapdqMKmzUfjsGXE4qjcQQOq4o+sk1MiyHrX4hgRtuSu6hSLP4v4KkB8tS3Ju4","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTHMuAbE9LizvamguGVRndwCiOHgaBqTIyY8KihjIXwf8uixplGmRRdQTUyoiD05WqqASUhZSLpqfmPiI3Vznb+wPsdUz+zXf1R+gsX+I=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/8CGAbDHdfqtpQ1SapdqX3XVqSIV6SLoWg2PD0+uirFS0kM+cHX3KWnM\/gLNPCN0qGRXtvHByJ2gE","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABXxfSAbE9MizveWguGVRngFydX1M\/06cMsS999H86RqXDs3N6Y6mG+7y4f34H\/NL2CZ49Y\/yetLR7wQovD7ykuBrsNsG+QU1SY8bkrbA7TzoSv","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4i2AbDHSfqtAA1Sapdpn27RQXK+AobSAnGCoWZt2s+6QgofxbzTYsV5BMHFYbii9ypxskk4J2cm6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMp1aAbE9XizwHmguGVRmvOqoWcfriu5UOE49BL6lpXQxBLhvwSc4D5TpmsfbdPYMkRTSvgz1G5dogCa1UNRMT3ooOBpRZmA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGVkSAbE9YizwLWguGVRnaoUaITZymHReEZ1A+JcKRzadGcLdC+Fjx7ht0c\/Dz3kXzJWWQXnw2\/b1Qf3dXUhyepw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/leGAbDHTfqtDw1SapdqZclOiUBcmANaStnBTCncs4OgJJ4fLaobbNx+ZZzXD0a46FnAYmEIuFdIi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHBH+CwHJAa4KGFK8WgYoHABbN8iAbE9NizviGguGVRkGt6qOymfUIiwh0xEq0tYFwx3Lt99B+e+gEBhr50wjbouSs50lr1\/bDX+mWvVRb7AdHsxlCi5vjNdUn5jclag0W2Ra9TZSow==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fziAbDHefqttA1SapdpEOb68pk\/Zmc0ZL2ekZw0gbzXPelOM1Zpdz7ePZiMJjUO9CY+xpoip2O+H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOqLSAbE9Oizvl2guGVRlmU87bK+VVGeFQCIxpmzH7f5Z4j\/QIkBIddWU2SCka0jBFbcGNoGqDVjsV4vsPHobkXKN6HpXRjaFd","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069180,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4OOAbDHUfqtHg1SapdqusXiD3yXwTCcYU\/Y5pzIsKilKeOwAjequMlOdRrUEaiLUvFft7nzoZBb+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rJKAbDHffqtww1SapdqCoX8u1TLiPXJDa7S2\/gtWcWXWm1tPbYSj+CY7U5MMd\/iouiQeXdcirVHq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFSFmAbE9ZizwPGguGVRkXsm+X71xCtDCSaBrp16kpkHoeL4+iczud+k\/M\/vzyfKb7Nk4kK2ZcjgXVjqlolSeG","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHBH+FQHJAa4KGFK8WgYoHABRS6SAbE9PizvpmguGVRlQ8qbgy8H0OCJfT\/J5b\/xK2RaJvgPHEMKt8ntxVULVSCFPuJW+nwDSN+W2M0QsseRX7YFL2UsRagY9jTTs","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":80,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEDyjkAALwb+1m5MjzIKGFK8Iynl6dfwqeUtaZansBAALVC2AAABAQgKRNus1wACzUkBAQUKLWmV\/S1plqc=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PraAbDHVfqtLQ1Sapdq0tZIcjIGwhKYlII5ejkRFRA2lFOrXjw6P2GK590WiCCSnu2QKYGvzvOR0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/MyAbDHWfqtPA1SapdpXkECFv25nB+OU3SfFWMQlJIRPGdMSLBFeMxtYkOfzPPIIU1JZ9KuotoQn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAGxH\/DwHJAa4KGFK8WgYoHABXqB6AbE9QizvtWguGVRlB2sQIlkFU+UojhvoyTBRGvzScdzbhEvL90ZSdJfAsp0F+svvStw0hc1UE6oCbKSTJ7\/2OZdpQU7PNpBVulgynQU2w","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL5iOAbE9RizvxGguGVRn6A9l\/PAS+R5EblphoXtixcii6pf6IY7QUCAFjjZcR4QWupww2qcIwmBUB0YXlAlp679UgK8TM","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABObg+AbE9Sizv02guGVRmJCXtJtZMeVgmAHfdtfa6PA+11SvPEO2qbLPnU3GgOWAddkWbyOnyqkh7FVo7EBbPYa8bnf6IqYH2K","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/zEiAbDHXfqtSw1SapdrGrVCs+pHHwoKkh1VlLnoGvDDZQPZgLo8fov5Txz4f7KGBEfsMU1+4qY+D","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EKmAbDHgfqt0g1SapdrvKFPWz8g44MoQXQN1bDM8n9Dfwx88TOch7c8OLRmYNzS3DgrVsUt1cBbb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/436AbE9aizwS2guGVRmFzi617tqzDKLAWyAlMuOd6LnSjoi0vGuDRDNSNsKNWwwv\/lUi9GNY6eEU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLOm2AbE9Tizv4mguGVRkQIE1G0Qw3VJDcFnNFKNRn2IXIMZDKuoCiK2cAyJdomZAy4AW13c7rDsRY76BC8pN1uTeC9HhQ","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7LDaAbE9bizwWmguGVRmLqHIpSNQK0nFl2\/\/ZxqpRvol7jPNu2BZ5AOfO1IwHwQLXtstfoY4NZghLr9yt5Ho3Kjg1AHBUJHdy5Yj8JM3Dr8U6OgGBXAm64Oouns843qBoJc9fui4VHlfdscWCV0fO3dulPJ2X","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JKeAbDHYfqtWg1Sapdoe3v0zl9QDlg8t0fw86CSWvtiqbFP1+g+gKNKuPaEf+mgBrfPeu2lKS3tH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBniD6AbDHhfqt4Q1SapdqBpT1vMV\/cjMVNMC1rylBBQCdys9u9zWDrV3hV+FrsvVXkXWaHNh2dMSY0H+p0Sbry3H5tesqp8qOcCW7G4qaC9c+eVkkxgBXDFwfWrwGra9mnzw==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":80,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAECw5UAALwZAgG5MjzIKGFK8H5CAyJJ45pH3EeBgsBAAMA9FAAABAQgKRNutPAALRaoBAQUK9xHftvcR4GA=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HjSAbDHZfqtaQ1Sapdqw\/M\/j+9TkHNGDdVZHksoZvr9gWqIa16cFKxnNdlFrBCC6+haZY5A8Iha8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAQBHZ7woYUrwByQGuKBxaBgCfgrGAbDHifqt8A1Sapdpeju7peaembEhmWJmVdZ+c6voWzoU1Pou0\/mNGKidQAGug9fgI5IxCeWp+95EVinomY5C4pfs741yv1q4mc6O3ZPJprwyaAqQMp3zueMlBcP2KTpYQVLQYcAM4uPh\/rcNQ6kYw2Bxat7XTOTMBNC3fQE+\/DRIYdAz+8lWpdTvLYcTh0iUiOB4nluzD","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqxRSByAAMVJql2nhUecfSj38IyetU7qmBuDDPjWXjWG6rSfmFeg4CNNxlBxif7M9KMVtpfq2RjbJmtK+rq2SSv32uc+V\/lvbg2LY9MFOYdQ6IXJKzlD6AAAAE+zNyuhY7D2DdMg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/m\/2AbDHafqteA1SapdpZ4qTihMSNLGab2vp4Rdr+uUa6dSYZ3cnGqpc2lEZ7vbWV\/yHmTOUJl1xR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":224,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8D+6AbE9cizwaWguGVRkezALGVSHDw0qdZmYg\/Y1BwJQve1UBpr9A0XQxkwlqcg2XfsIqYLAUyLNiLD5ZWfVugvTKLvg0bHGB6b\/C4ZF50uTrx9+QAiz7DV77q2rrqhb5Eih0xBEHIWhmxT80fhHGNZNYzlMV\/Af3a8cTmZ8Y+nRCVGergVFkNR4K1H9ePNoM2+xnVoY5bTEmiQWX0fcoVFGP7lqKe2rIdH+58Hv4rLofCvPFvms=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":213,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxdrCAbE9dizweGguGVRkQRzLr\/b9p0OJyHbJuPg98OiO3z+nYp7J7SXvIWI5r01EjcxUqes9mCim1e5JvA0z5B1\/GF9uF82D2vh4Z8qyuhHe4KUai7OukpQmTkqrVC1ClVfzn0Ed+tY\/cL7G30HNHNy+803rvF4+yV\/xG8ESveqWBdlsMdak5zx+HTt7fzzrS+oMsLGPkqOmll6S8RN2N1YSIZZFTSsFZUXgj","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIJsqAbE9Uizv8WguGVRkUJlgvJKK\/bL9As1dvXRMuziQW45LwEDcHPZcxqg1OONeDJFQYrxcTG1\/gKuoZILQe8Ijh","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBqUG6ByAAMC4ZVGQ21DhFtJ5pVSpHA29mSXWgupbBBO2VyAq\/04b9a0U3MpwQFQvWqFidhxeuTBSyks5kk9ZQJHxCKEShx1YUsKPxryHVVYZGtotYaqIGAAAAEQW6VLf5HEs5d\/Q==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YESAbDHbfqthw1Sapdp6GAWDp6nc1sE4DIuVySPHZp5C4Mfq6A0BjG04kbfD\/WAiFWaXVwXgdVb6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABErcuAbE9VizwAGguGVRko009QMDzqMhKvIJYcu78ovTgSIvA2Ur+0XcO2swYvhLFXc2SuaKgb6OQooyfv8BE=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAI3KAbE9WizwD2guGVRljjHsj23r8F2F7vR40vWm7WXtWpJPkA6QSPah\/n39\/uz7KUjsOhQdVLgnQNw==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQT4mAbDHjfqt\/w1Sapdq1aX983sOjuENuDN6jzTk4ZdLLI5BIWwNNUTIoaylywOivXrdoDqIyxW4DUzcKuFz7nOxqUwXtWf7YQuYXUC1\/FREGodPi4LJPjR3hc1UeDVmYjOS6WUpNnbUwRwIMZWUFaBNAq\/gd13f6cbMKrYrIGY0V58Q+MbKjkPBG","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":174,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCKeb2AbDHkfquDg1SapdqHJHQRLm6b537B2S8IcauU6jTStWwNLMrqiUsH\/ur5xbcQdEqhPtpNBi5HRTuAa4CoANjCX6Dde6j7ujVeLJVwSi\/bl0+tTZJL\/4g0f6Qxq4TCErmCyl8C24txXM\/YZVFbQJuDfZoKz3lvuR5d1IaXIDwiJ9G5","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xXmAbDHcfqtlg1SapdqMKmzUfjsGXE4qjcQQOq4o+sk1MiyHrX4hgRtuSu6hSLP4v4KkB8tS3Ju4","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAPxHa2woYUrwByQGuLDhaBACzWK6AbE9eizwh2guGVRmcS41gKwi6MI9\/stUJZaS9uzPhgjkQIFmBhokxDFNb0Ybat0gtLb0IGXrVsngLSgzmdvkALN6b+DxPF784tB29I86ImelT5bBDH+Dk19tEHwmcZay0SClpGZBreZFVNLNV8yo34kT1ZaRNBlvKe5kvnLpc8dCWfWm3UwX1NKyTbdEyDcbyi+JWhELtgNi56GVwYVcCmb7Gy+YX3sJ0034=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/7AeAbDHdfqtpQ1SapdqX3XVqSIV6SLoWg2PD0+uirFS0kM+cHX3KWnM\/gLNPCN0qGRXtvHByJ2gE","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":172,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAQBHaBgoYUrwByQGuKBxaBgCIhjqAbDHlfquHQ1SapdrhfYA\/7VOgelKHEmARqd9mxP\/O9e4npcntO6L92b21OO4uDPV3\/TGzaGYumccOeRe8DDsYENYZ+yLcOMDYHq10sP+7IZxAh9n5sMhGmcQX5VPDdQjf2fJiVnn+j9GEmVMxtZQ0Hn2QNjhJFIR3Sd2GB45bNQ==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":208,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsjumAbE9fizwlmguGVRlSNc2\/wSmvzjjvGv4P4NSXMqYJ5jdvpL0XARjugckSCN4iMm1kO3uiC2+IjAUlk50fK+uFGZr7fXRiO9OIbKzErlg7iu1DU8X1rvwForNmF1pG8k4w3J4OOSk5yZhvMCPX9OA2XCRVXpI\/nxZh1M7Tlf4tgoAdnOLRiULDT5nEvK8MT8s84MX2yvpRAYYd\/c50VGnQGGD2Ww==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":203,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACn63KAbE9gizwpWguGVRkM17YN1IVsm5vE4mDzbPOtR1RSEdsKXFwnI4GJapVGD5RwLC9aLmhOvmzC3pYX4vHStmpLMsFgb2vKx8EZzU5n4s4xUTc5+PIEDXXR0sgdpJA7tyOtmW3ohzQ4q2+M8V1d9SFcGWLdr4c953r0adUiJR\/ZjaQcyfghFLNP5gOW8T50cMnamJmZVyvT1RbB2stl04Y=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAQBHZ2QoYUrwByQGuKBxaBgC12iiAbDHmfquLA1Sapdo+JsrzLm\/qhVVudWRMgeOzzMAA3LZH8QuYnq8RF0u7RLlvgrkYo\/SQw3HgqMIYVyZ7OXO8yOOYosgw60a2lKXbkWW7D8Hl3UGNlo32keZAwgWzjuiUp+EkGLrtMay5MK3ll8eaULOBHeW6dT3E7DaKYNmedQLRe1PWDsaUBMj\/87ef+Y+50zTpFecns3bdZRgkotdjziKl+wbD5QBWLE2vAw==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":227,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANMAAEAAQBHZzwoYUrwByQGuKBxaBgC\/lLqAbDHnfquOw1SapdrTboxIov5hXCX0+vnRRPmVQCssQ94RCafFq7wSBL8d6s9iOCuM+r8WDehqJWJ17vvPDij2q9RGBbi1b4AN0mBQ5offzCZPr+G7NND+xZO6A0XY\/12zS4RBwifhL2GPGWSqtfzxsZdpdQZM3CyXMTqMjb2dd7BYyQVbHffh4eAyjBKqkS98\/qxK8hC2X+OUoYdVYsAubjd9G3sACBLqcUPqBxr0P5IBP+JuxTg=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfVfeAbE9hizwtGguGVRkHJ\/lZnHffblXOiXNWVzqduUt2cY4UDDB8g71KwEXpMzC\/7Yo81J+vnrOvPK4NtTn7SnPKgWqWIboAOMlmQbd\/I39X0eJY5VpWYatLb2yeV\/kHWTR9uTjLCuYKrQq1e7QBGMRO1dDjikWa7vAL0qUvzFBkV8KBpfqux9r0r55qK3shX+pbHF4nxtYJ","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuWUGAbE9iizww2guGVRkW1ldKIq1v\/Ym2vbq9ilkm+LfC74O3H1TpffGA+9FxOcxiL8QHUhHP+FPNWwH1kKk2XBYaQI7iAMcgiyK7IMcifQ8ghPSKHgpWenx9Tuv\/ceEwC4YU9\/GZ2H9W2d82OkLt7vwSD1v2VNSnkI3KtRtmYPJaupYf8Ift\/AUiFOPGw79oW1basxIqQy9vJVbzUvMRbmXx6spcFJ+q","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":229,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANUAAEAAQBHZzQoYUrwByQGuKBxaBgDBUyCAbDHofquSg1SapdptKqtzjstNOE4JUVvbMmg13zp9c2+nL0U9LCgaUTXeMuxB9VqCMii8UKIOczTsOv1XSkRM\/j28PC5chiQGthD3TAiN538I1zpQwWZhLMLxGV7aEAvIgZ\/3avslhOs\/zVXhWiR73RKcsxh7FKzigoG3JRQkObrqf7RfvtiDoTx3J9jISnGPvDsLBamTxBZs9KA6KfabMhWlPeY+jjZCDYexxwlGIfOP5O2\/h1czRQ==","pkt_caplen":229,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":208,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsgiuAbE9jizw0mguGVRm\/DiFneEwoNDf5YivW6EHanHwdcu\/zzM9XgxNAx4R+Xu8ZxUIg6\/01VFy00hOAt2d6LYIFG2h6AAxjIorZtFylpsh3d1uSFITHmIZg\/yU4MZlr9oM+s0QkJNFm2rHC9Tc7N9Ag4bzCqV2l13QrQF+p9QdcARmewPfbUdFGX4AMDpKh77IeRV6STTiaEjthF3WvY64wT3S5+w==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMq3CAbE9XizwHmguGVRmvOqoWcfriu5UOE49BL6lpXQxBLhvwSc4D5TpmsfbdPYMkRTSvgz1G5dogCa1UNRMT3ooOBpRZmA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":236,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANwAAEAAQBHZxgoYUrwByQGuKBxaBgDI03+AbDHpfquWQ1SapdoAh5PMfRWqqY6ecLGk\/leBRZX3Il72ywTpwqGzZ7y9zF96BFaH5SaEeKeYkDkmRS+LJoeKCqpaDzODn0\/34zlMUi2NSaDzRvRtbq5mM7UIMhVxzqm0rjzekGLVjbKuUMrHq2WsE7KjxXZleTnmwHM5ZssQme0hw\/vw1VpH+BchhpvZne8Iis9y2pKK0eg6bwUpL\/rC5urq7i1XoGDpq2vcdXwbnUWuFpBLkyjk0ApKN5iig+4=","pkt_caplen":236,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGWl6AbE9YizwLWguGVRnaoUaITZymHReEZ1A+JcKRzadGcLdC+Fjx7ht0c\/Dz3kXzJWWQXnw2\/b1Qf3dXUhyepw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ex6AbDHefqttA1SapdpEOb68pk\/Zmc0ZL2ekZw0gbzXPelOM1Zpdz7ePZiMJjUO9CY+xpoip2O+H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qHiAbDHffqtww1SapdqCoX8u1TLiPXJDa7S2\/gtWcWXWm1tPbYSj+CY7U5MMd\/iouiQeXdcirVHq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAQBHZ2woYUrwByQGuKBxaBgCzueeAbDHqfquaA1Sapdqo5OHGEW6ox50JHqKF91JzaIHYj+ZSyrozk1ZnBuxGhCZkqt1KhCSJtD2EDE4eGqsqeKSzfHe+eG\/f+QlHmBmddTL7kBiqG51MDOhEmzi\/rLfxapXl708I2vascfhq6GenWci+OQW9DjzN14VdFlApGpLLG+D+5o\/NwkPQd00uZ6HtTNS4OLrxipl8+XHv2Ucy3cDcXoMNjkOpE0t14uM=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFTHOAbE9ZizwPGguGVRkXsm+X71xCtDCSaBrp16kpkHoeL4+iczud+k\/M\/vzyfKb7Nk4kK2ZcjgXVjqlolSeG","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DI+AbDHgfqt0g1SapdrvKFPWz8g44MoQXQN1bDM8n9Dfwx88TOch7c8OLRmYNzS3DgrVsUt1cBbb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/55iAbE9aizwS2guGVRmFzi617tqzDKLAWyAlMuOd6LnSjoi0vGuDRDNSNsKNWwwv\/lUi9GNY6eEU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":201,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClpAaAbE9kizw4WguGVRn26sEhB1i8+BfsozbyV4oXt9uYAAeOPZQokuYlM2fL0RxJJx2AP7uJzbeZogOPtzSdu+0SchFlO5Qe3YXYulr4DAH9bkSLdISvJxzvkFE2ta9hlkuWKIPQdWbY3FpXi+vxXKEPoVv3NF0fyIyhN5O0N6k8PT+YUh8omdaNs1IjeFeckT1Mx7V\/U1bBd+psCCRD","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":194,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACe++SAbE9lizw8GguGVRn2C0b4dzYVGIEKdx8iqu9rDcCDQzjxS4KrgTECGizIdr62l5mmmRwo0BKJK16MUlRhUbeYv9uD41BFGTchqg\/YeYls\/xwhIJjBBoEOwxgtbwbTPE4t1S5CyPrpT0uFjTYseiRUM7cxVWHuxAuGyQueYfOysF8J0lmN8TYby+wICRk3eY18U0CQRWc=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7MFCAbE9bizwWmguGVRmLqHIpSNQK0nFl2\/\/ZxqpRvol7jPNu2BZ5AOfO1IwHwQLXtstfoY4NZghLr9yt5Ho3Kjg1AHBUJHdy5Yj8JM3Dr8U6OgGBXAm64Oouns843qBoJc9fui4VHlfdscWCV0fO3dulPJ2X","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnhCSAbDHhfqt4Q1SapdqBpT1vMV\/cjMVNMC1rylBBQCdys9u9zWDrV3hV+FrsvVXkXWaHNh2dMSY0H+p0Sbry3H5tesqp8qOcCW7G4qaC9c+eVkkxgBXDFwfWrwGra9mnzw==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":205,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAQBHZ5QoYUrwByQGuKBxaBgCpl2WAbDHrfqudw1SapdpE1tDlk\/vTiiU+vqn6sI8If08KKAmjwtFr9j9\/PWStlcHb5jmqwwVDMWnnaF0+eZGDAUKCD41PRhoUL70IjhCJtP0nKK\/mVlom\/Q1IUn7QWkSbreSexa42gp5HN9o+Be0LDc4cL8DKLtXNcwTiGXd08NZIfgKPP5TVhUHivHwQpHsLCWrYdzgaXEnv57Qnc7cKEFuprg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHRH8xwHJAa4KGFK8WgQsOACffpeAbDHifqt8A1Sapdpeju7peaembEhmWJmVdZ+c6voWzoU1Pou0\/mNGKidQAGug9fgI5IxCeWp+95EVinomY5C4pfs741yv1q4mc6O3ZPJprwyaAqQMp3zueMlBcP2KTpYQVLQYcAM4uPh\/rcNQ6kYw2Bxat7XTOTMBNC3fQE+\/DRIYdAz+8lWpdTvLYcTh0iUiOB4nluzD","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAQBHZ2woYUrwByQGuKBxaBgCzXieAbDHsfquhg1Sapdrs063WS\/9Ep8Qi+rZB2\/7yhqss1r7a6pEGQY0OlH3TvwnxsPczx9O3DZd2Dz5vmkfa623QAaIl5uwnG7usQ1VRFroeQvttpLVHkHgGmn3ID\/t++Z27gu1IUdKHMsmgWTHnfVhM6D+n5A0jP5m3beN5Y4NIhtJNAijlY91ytbSkRVkeLSoJyGTMbDuBDnrGNlzh+T8RiSOu3r57niY9IGk=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":203,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACn6uiAbE9mizw\/2guGVRmWm5wFHy+vEBL38vkjYx3EjoxbkSMH9HJ\/LuWEki99PNFO9btKv2ufd2hVb5I95XqzHocmNChs4gDOsDMmTB86ZIW\/OMNRYr+wYfzyzv+jxd3ClxTmSpIF1wLO\/leTML1gyMEMWwQJhAOC+qf1P\/T9KZQtbr9ym9syrajZumLhRzuToh\/wfoYbmjmaDCM32CDIjXY=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfhTWAbE9nizxDmguGVRk57rvmAFzBDvzweoCj5AQ1O9O3iOjP9jpxtmtiC4UFpC9+4Ua4ilTFjchNKVsY1Fm+0bn9GFYb811Ryj3LIf\/3o5kjscJv6ZftZywubQj\/ciXhUDLM3+HaLrkQ\/Pbj1Yxdh7oxGjjVxg5OcquqRbbqqSLuheT5+J+YMY8+mYzT24H3nBi\/3t7O6edv","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":206,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAQBHZ5AoYUrwByQGuKBxaBgCqVzuAbDHtfqulQ1SapdqmFMNmANvl2hy+B6nQqtDqmBAqw4TdiU4QBe7wgfGrx9paRWb6jTeDjYiVp9i+0NKjoYej8K4rD4gkt31WbR+4m3SvVI4GYj5xxIaiQrny2CmiITFGf2WQWHf0DFVceJhK+1Xlk3XoDXuei4WhmEIiFAraIWyYWWoCE0Qw0L+vt8THdxoTlhFJjJCp6krKi4MMw5W+uFs=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":192,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAPxHa8goYUrwByQGuLDhaBACcqOCAbE9oizxHWguGVRnd6GvdqxkLbiibkaeYjV8ZqAdZCVhxcAlpNWT4\/mbpGxO35WuM7zasoYS0vrvaG8chbCB2dTzZmOp8yo3uiN2BYwiIPcHjxYt+6ifZzfKfU5VKwmUt\/\/LBKjKznQDrPWROxbXrOh039HWmKV\/\/OBEZlAQ2FNOirlti\/FnFbhQKOD4ymn2pLfnw","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":212,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAQBHZ3goYUrwByQGuKBxaBgCwOeyAbDHufqupA1SapdoDJJzlcfZlitn5HF04O\/jiUSmJdQNhxoli7iJGe5PZhd0y6IDCes5x6LTt\/SXewslrcyfaXsHzDHAgocPPKYUcF7vwJnB\/VMIDpXT1fx8I8te5B0Xs9w6h\/J6Uk5+Z3knKB0ZfBgN44i0yiaguXoNImq0SMSNvjoy9H+PBSqF7zvvKf1otCjHTjY79IUplBWdwhXewCYyRvxCs0Hg=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069181,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAQBHZ6goYUrwByQGuKBxaBgCk5qGAbDHvfqusw1SapdrlLTiObxSBxllxtTeInc2dXss85J2UoGBZ+Oyp12tIMnmm\/G+DG3svLZyoVISvHiw9+GgddjcSbrZDnJA5lb+aSZI+B0lF5ISUZmPi9Pqf8\/HP4FItbqLi8A\/hrMxbz2QueqWC697Bfsyu\/0ncYgkFrhtERsCozTvLmCuJWucxjCfrkY+prnG\/lr2QZaXvFuo=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":141,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAPxHbJQoYUrwByQGuLDhaBABpFfWAbE9pizxLGguGVRnwokQS7aQ3+K4eZKXTw1ZwTtamcXb+wOCuJhR0z6\/hIhonU7SdMErEjS+FhQjosxb5ewTwiRvJdEg5jfjyu0IrVi9FOMhldMiT+rAN+XRe1FgRVmIg","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":156,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIwAAEAAPxHbFgoYUrwByQGuLDhaBAB41bGAbE9qizxO2guGVRkH+vRoTgNcd45g+ikIVPChyrLQVLTlly16OWhIPjfnuuMgYLzZtaNArg0jlO5jnhwoSG0c3\/9bWGGsqHzI5zAJl\/foyjW5FphVoxYOa+laJg7KLmrbJqfxxO0F1v1O64GwmAov","pkt_caplen":156,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":190,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAQBHZ9AoYUrwByQGuKBxaBgCa2KWAbDHwfquwg1SapdraQNfIiekFFk6+Sk00hmpOfFr9WBgprS1ReVyMd\/y2eYsUzg2lgen5dFtV7CGdFf8ua0fskiH15Z24yAOTGteLvbrtMKubup9I5+Z3yUAR\/3u4eEiJuyiBFWkC3lf+XwzfAcpiI6xrOuctkHpLKSq3KgIJCtOd6wGgxaFeViv\/7Jhxj6Swyg==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":224,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8FAiAbE9cizwaWguGVRkezALGVSHDw0qdZmYg\/Y1BwJQve1UBpr9A0XQxkwlqcg2XfsIqYLAUyLNiLD5ZWfVugvTKLvg0bHGB6b\/C4ZF50uTrx9+QAiz7DV77q2rrqhb5Eih0xBEHIWhmxT80fhHGNZNYzlMV\/Af3a8cTmZ8Y+nRCVGergVFkNR4K1H9ePNoM2+xnVoY5bTEmiQWX0fcoVFGP7lqKe2rIdH+58Hv4rLofCvPFvms=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":213,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACxesqAbE9dizweGguGVRkQRzLr\/b9p0OJyHbJuPg98OiO3z+nYp7J7SXvIWI5r01EjcxUqes9mCim1e5JvA0z5B1\/GF9uF82D2vh4Z8qyuhHe4KUai7OukpQmTkqrVC1ClVfzn0Ed+tY\/cL7G30HNHNy+803rvF4+yV\/xG8ESveqWBdlsMdak5zx+HTt7fzzrS+oMsLGPkqOmll6S8RN2N1YSIZZFTSsFZUXgj","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQS2+AbDHjfqt\/w1Sapdq1aX983sOjuENuDN6jzTk4ZdLLI5BIWwNNUTIoaylywOivXrdoDqIyxW4DUzcKuFz7nOxqUwXtWf7YQuYXUC1\/FREGodPi4LJPjR3hc1UeDVmYjOS6WUpNnbUwRwIMZWUFaBNAq\/gd13f6cbMKrYrIGY0V58Q+MbKjkPBG","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHRH83AHJAa4KGFK8WgQsOACKdaOAbDHkfquDg1SapdqHJHQRLm6b537B2S8IcauU6jTStWwNLMrqiUsH\/ur5xbcQdEqhPtpNBi5HRTuAa4CoANjCX6Dde6j7ujVeLJVwSi\/bl0+tTZJL\/4g0f6Qxq4TCErmCyl8C24txXM\/YZVFbQJuDfZoKz3lvuR5d1IaXIDwiJ9G5","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":215,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHBH9swHJAa4KGFK8WgYoHACzXMiAbE9eizwh2guGVRmcS41gKwi6MI9\/stUJZaS9uzPhgjkQIFmBhokxDFNb0Ybat0gtLb0IGXrVsngLSgzmdvkALN6b+DxPF784tB29I86ImelT5bBDH+Dk19tEHwmcZay0SClpGZBreZFVNLNV8yo34kT1ZaRNBlvKe5kvnLpc8dCWfWm3UwX1NKyTbdEyDcbyi+JWhELtgNi56GVwYVcCmb7Gy+YX3sJ0034=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAQBHZ7woYUrwByQGuKBxaBgCfoEqAbDHxfqu0Q1SapdrVC+zb5zGyRE1Qbmcm1tEGavt1jMVI8fRHqfsgrHr7C7x1B8lF9MqeG41ORdc\/ZZ0pW2hSz3VNiboGnSmfXB65wjHmOTi3KnkJ49p3VkK0x2TREZwFqqhgkAuMRwOs\/Kk1vVAL+IgLwMcJpE4VzQq4kkZC64y3dpJFad3+AgLvugtTvkJd0elNe1EA","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":198,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACillKAbE9rizxSmguGVRku0Ov9\/nQYp+xf9Zj0Zg2\/1NLzWI8MRdVNo2XPtZSMCf0v9ILFp52GAV2EARaSwXg37U5jyDEEltmHMOnVBf3bWpDTl0o4LQx3lzNYHz0TYgOC1Qm+JH9pocAKF3m7a3n4JvO\/ufxSzJMDjFeBtyoZLQdXmYXV6Bo1i4GYv25XYbTD4MqfUmxOTOb5s1JY","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAPxHbJwoYUrwByQGuLDhaBABnV02AbE9sizxWWguGVRmMKuDYVa9RVr+XwKEZCOj5aUxooU9eg6dEsF4QaKj3wdhWOrpAC\/mhCoMcQU+rbv3BO+5oXqxFPXyRHIYDWaxqbH4D5u\/ORAK0O8+GPnZcrVMojA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQhumAbDHyfqu4A1Sapdr6I6GyURuV2EUBMGbLuuxpwlrkYaYSD4bpuAoydKX5ZwBqesoPm46V69y09WuZbKgdUBUZpENF9d8mFUVWdfUAtLTDjzauPsS\/c5OMQmtzeWKps3Vka2vXQVAvAISl4ebEu8+3e4n+FV4Ixmk3Awewcb+1QpFOyhLDZ+lz","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAPxHbKQoYUrwByQGuLDhaBABl6weAbE9tizxaGguGVRlzglReFfuv4RYHp\/wy9Jdy8Rd3spKZ7\/JmE1uj4reFIhnrPv+Die\/basxFGW86lQ1XhR\/Q9ZL8pFV6BDZ32Jn13WQP6RjPk4z3ks8Js5BYVCs=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":166,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCCG1iAbDHzfqu7w1SapdpQN+jthT9a4ukBkCSvQWV34X1fOvzEDTpAag3TiagPGg3Kjg+ZJqmy0RD9E5spSaOgorTNfm7nEqH69HyaQ1DKZKEtFv5nG+zEl92Z55HOrqSetn1yVUVsAH8KeNXKg1Swb68Y49CHlIANOqhx0Q==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":163,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAQBHaDwoYUrwByQGuKBxaBgB\/7PaAbDH0fqu\/g1Sapdo8saphohBolpOCDfOkNVTvi1t4BqJ1Zy3ZTQtO9WqK2MZmlGmaR8jClEnVBHq1uLSA\/NHwCD7\/0M+nEklNoj2Ej9g+LDXFnH5JkwIkvR+m6ZG8kh9GxzSR1iMUTmUN1qYKj93J4tFg3Iw7Vg==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAPxHbLQoYUrwByQGuLDhaBABh2qmAbE9uizxd2guGVRnXFHrSmtXcZirKqAKOjwdU+xQ7CCLU5lTow0m6ixNI7pf+i\/O6oqohPBquQPqmBdBqnv4ziCrHpqbWCsfxNTSRRKuUJM5mqWM4ShlaBw==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABU9ueAbE9vizxhmguGVRmXP99PNzrdSfbmiTmaX+5Xv\/3YaEFE6fC1O\/f\/x23d\/mR733eLkMtNQBlDU\/u5urOL4cLSEoRCoFEKyY1kv2J5","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":182,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAQBHZ\/AoYUrwByQGuKBxaBgCSLumAbDH1fqvDQ1SapdoCy5dMueenBdEXjLgrvR0c7XTeHb1RvbZFe0td6HQLgmW+i\/PF8tv4YX1\/1R\/EvqnTuHUZBfhTYP5T0yL14CMszw3mv3BA8FKvhXBzbBHC8ViXa0AArbX0tS32OjdNJCrUGBmEi2TrxwdTY2RaN\/s3sqJp4MabLWB6ceneMRE=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":172,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHRH83gHJAa4KGFK8WgQsOACIgiCAbDHlfquHQ1SapdrhfYA\/7VOgelKHEmARqd9mxP\/O9e4npcntO6L92b21OO4uDPV3\/TGzaGYumccOeRe8DDsYENYZ+yLcOMDYHq10sP+7IZxAh9n5sMhGmcQX5VPDdQjf2fJiVnn+j9GEmVMxtZQ0Hn2QNjhJFIR3Sd2GB45bNQ==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":208,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACskwOAbE9fizwlmguGVRlSNc2\/wSmvzjjvGv4P4NSXMqYJ5jdvpL0XARjugckSCN4iMm1kO3uiC2+IjAUlk50fK+uFGZr7fXRiO9OIbKzErlg7iu1DU8X1rvwForNmF1pG8k4w3J4OOSk5yZhvMCPX9OA2XCRVXpI\/nxZh1M7Tlf4tgoAdnOLRiULDT5nEvK8MT8s84MX2yvpRAYYd\/c50VGnQGGD2Ww==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":203,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACn74yAbE9gizwpWguGVRkM17YN1IVsm5vE4mDzbPOtR1RSEdsKXFwnI4GJapVGD5RwLC9aLmhOvmzC3pYX4vHStmpLMsFgb2vKx8EZzU5n4s4xUTc5+PIEDXXR0sgdpJA7tyOtmW3ohzQ4q2+M8V1d9SFcGWLdr4c953r0adUiJR\/ZjaQcyfghFLNP5gOW8T50cMnamJmZVyvT1RbB2stl04Y=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfWhGAbE9hizwtGguGVRkHJ\/lZnHffblXOiXNWVzqduUt2cY4UDDB8g71KwEXpMzC\/7Yo81J+vnrOvPK4NtTn7SnPKgWqWIboAOMlmQbd\/I39X0eJY5VpWYatLb2yeV\/kHWTR9uTjLCuYKrQq1e7QBGMRO1dDjikWa7vAL0qUvzFBkV8KBpfqux9r0r55qK3shX+pbHF4nxtYJ","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":227,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANMAAEAAHRH8pwHJAa4KGFK8WgQsOAC\/kKCAbDHnfquOw1SapdrTboxIov5hXCX0+vnRRPmVQCssQ94RCafFq7wSBL8d6s9iOCuM+r8WDehqJWJ17vvPDij2q9RGBbi1b4AN0mBQ5offzCZPr+G7NND+xZO6A0XY\/12zS4RBwifhL2GPGWSqtfzxsZdpdQZM3CyXMTqMjb2dd7BYyQVbHffh4eAyjBKqkS98\/qxK8hC2X+OUoYdVYsAubjd9G3sACBLqcUPqBxr0P5IBP+JuxTg=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHRH8sQHJAa4KGFK8WgQsOAC11g6AbDHmfquLA1Sapdo+JsrzLm\/qhVVudWRMgeOzzMAA3LZH8QuYnq8RF0u7RLlvgrkYo\/SQw3HgqMIYVyZ7OXO8yOOYosgw60a2lKXbkWW7D8Hl3UGNlo32keZAwgWzjuiUp+EkGLrtMay5MK3ll8eaULOBHeW6dT3E7DaKYNmedQLRe1PWDsaUBMj\/87ef+Y+50zTpFecns3bdZRgkotdjziKl+wbD5QBWLE2vAw==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":141,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBpiC2AbDH2fqvHA1Sapdr4tjAIlq\/Z98LAFlHL7adTjkqJ6DXadx\/Ne\/4GmeexatjSJP0IY\/Co3v\/gAcAb5bOemwYhDk89lwR9LeBfTH+wNsk71knMF2GK8JeTnViXLH61AwjW","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":210,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuXVuAbE9iizww2guGVRkW1ldKIq1v\/Ym2vbq9ilkm+LfC74O3H1TpffGA+9FxOcxiL8QHUhHP+FPNWwH1kKk2XBYaQI7iAMcgiyK7IMcifQ8ghPSKHgpWenx9Tuv\/ceEwC4YU9\/GZ2H9W2d82OkLt7vwSD1v2VNSnkI3KtRtmYPJaupYf8Ift\/AUiFOPGw79oW1basxIqQy9vJVbzUvMRbmXx6spcFJ+q","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABU0qOAbE9wizxlWguGVRnT4vALuqNyzOVOJ\/XTb7bB\/4akdiT4veKfo7Ta4SiT04x0nZHV+egvw2f+0eAnUo7RAUSlhUlFrP5npCMQ6dqu","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0573{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":229,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANUAAEAAHRH8pQHJAa4KGFK8WgQsOADBTwaAbDHofquSg1SapdptKqtzjstNOE4JUVvbMmg13zp9c2+nL0U9LCgaUTXeMuxB9VqCMii8UKIOczTsOv1XSkRM\/j28PC5chiQGthD3TAiN538I1zpQwWZhLMLxGV7aEAvIgZ\/3avslhOs\/zVXhWiR73RKcsxh7FKzigoG3JRQkObrqf7RfvtiDoTx3J9jISnGPvDsLBamTxBZs9KA6KfabMhWlPeY+jjZCDYexxwlGIfOP5O2\/h1czRQ==","pkt_caplen":229,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVZhaAbE9xizxpGguGVRm+hGcvXgYF0LRqfz68cnwNzygg1uKpaoatDZET0xz0Nl+x39HfCvl9mFPJGyC6ujzY\/\/9O4kP6sNOaC6zUktjpvw==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":208,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACshkWAbE9jizw0mguGVRm\/DiFneEwoNDf5YivW6EHanHwdcu\/zzM9XgxNAx4R+Xu8ZxUIg6\/01VFy00hOAt2d6LYIFG2h6AAxjIorZtFylpsh3d1uSFITHmIZg\/yU4MZlr9oM+s0QkJNFm2rHC9Tc7N9Ag4bzCqV2l13QrQF+p9QdcARmewPfbUdFGX4AMDpKh77IeRV6STTiaEjthF3WvY64wT3S5+w==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0581{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":236,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANwAAEAAHRH8ngHJAa4KGFK8WgQsOADIz2WAbDHpfquWQ1SapdoAh5PMfRWqqY6ecLGk\/leBRZX3Il72ywTpwqGzZ7y9zF96BFaH5SaEeKeYkDkmRS+LJoeKCqpaDzODn0\/34zlMUi2NSaDzRvRtbq5mM7UIMhVxzqm0rjzekGLVjbKuUMrHq2WsE7KjxXZleTnmwHM5ZssQme0hw\/vw1VpH+BchhpvZne8Iis9y2pKK0eg6bwUpL\/rC5urq7i1XoGDpq2vcdXwbnUWuFpBLkyjk0ApKN5iig+4=","pkt_caplen":236,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":215,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHRH8swHJAa4KGFK8WgQsOACztc2AbDHqfquaA1Sapdqo5OHGEW6ox50JHqKF91JzaIHYj+ZSyrozk1ZnBuxGhCZkqt1KhCSJtD2EDE4eGqsqeKSzfHe+eG\/f+QlHmBmddTL7kBiqG51MDOhEmzi\/rLfxapXl708I2vascfhq6GenWci+OQW9DjzN14VdFlApGpLLG+D+5o\/NwkPQd00uZ6HtTNS4OLrxipl8+XHv2Ucy3cDcXoMNjkOpE0t14uM=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":201,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClqCCAbE9kizw4WguGVRn26sEhB1i8+BfsozbyV4oXt9uYAAeOPZQokuYlM2fL0RxJJx2AP7uJzbeZogOPtzSdu+0SchFlO5Qe3YXYulr4DAH9bkSLdISvJxzvkFE2ta9hlkuWKIPQdWbY3FpXi+vxXKEPoVv3NF0fyIyhN5O0N6k8PT+YUh8omdaNs1IjeFeckT1Mx7V\/U1bBd+psCCRD","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":146,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBub2eAbDH3fqvKw1SapdpFGvgG6vE38EYQUk8CbHdbpwm98fsgn29Q1Lf\/puVUu6EDvLtzO6CoMfIri+Zg5XIzIFD4GU1pZz7TP+Oo5UjBe4n9yLTjLbFK\/hSE4baC3OoypvzPHMG\/7KE=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXO1iAbE9yizxs2guGVRmxcC+\/Ftdr0R7+X8AWjNmrHsO\/RBR6qygYdHLRE1Qg4O9S1vzyZ1clst8HReo72JSt8JuFgutdAHG9jfHfiZxNIB0z","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBm\/keAbDH4fqvOg1SapdoP\/WePxZkyFohDg1iLnX0aU9vYUbnNDUgnjxe9UWUh7jVy95+JzUMNaAHvOL\/Ep+UcT1qCQ2i4mp\/LyLh6nL1CHvhCSiHBZdvyPRJssJrcILSi","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":205,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHRH8vQHJAa4KGFK8WgQsOACpk0uAbDHrfqudw1SapdpE1tDlk\/vTiiU+vqn6sI8If08KKAmjwtFr9j9\/PWStlcHb5jmqwwVDMWnnaF0+eZGDAUKCD41PRhoUL70IjhCJtP0nKK\/mVlom\/Q1IUn7QWkSbreSexa42gp5HN9o+Be0LDc4cL8DKLtXNcwTiGXd08NZIfgKPP5TVhUHivHwQpHsLCWrYdzgaXEnv57Qnc7cKEFuprg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":215,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHRH8swHJAa4KGFK8WgQsOACzWg2AbDHsfquhg1Sapdrs063WS\/9Ep8Qi+rZB2\/7yhqss1r7a6pEGQY0OlH3TvwnxsPczx9O3DZd2Dz5vmkfa623QAaIl5uwnG7usQ1VRFroeQvttpLVHkHgGmn3ID\/t++Z27gu1IUdKHMsmgWTHnfVhM6D+n5A0jP5m3beN5Y4NIhtJNAijlY91ytbSkRVkeLSoJyGTMbDuBDnrGNlzh+T8RiSOu3r57niY9IGk=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":203,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACn7wKAbE9mizw\/2guGVRmWm5wFHy+vEBL38vkjYx3EjoxbkSMH9HJ\/LuWEki99PNFO9btKv2ufd2hVb5I95XqzHocmNChs4gDOsDMmTB86ZIW\/OMNRYr+wYfzyzv+jxd3ClxTmSpIF1wLO\/leTML1gyMEMWwQJhAOC+qf1P\/T9KZQtbr9ym9syrajZumLhRzuToh\/wfoYbmjmaDCM32CDIjXY=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":194,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHBH9yAHJAa4KGFK8WgYoHACe\/\/6AbE9lizw8GguGVRn2C0b4dzYVGIEKdx8iqu9rDcCDQzjxS4KrgTECGizIdr62l5mmmRwo0BKJK16MUlRhUbeYv9uD41BFGTchqg\/YeYls\/xwhIJjBBoEOwxgtbwbTPE4t1S5CyPrpT0uFjTYseiRUM7cxVWHuxAuGyQueYfOysF8J0lmN8TYby+wICRk3eY18U0CQRWc=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfiU+AbE9nizxDmguGVRk57rvmAFzBDvzweoCj5AQ1O9O3iOjP9jpxtmtiC4UFpC9+4Ua4ilTFjchNKVsY1Fm+0bn9GFYb811Ryj3LIf\/3o5kjscJv6ZftZywubQj\/ciXhUDLM3+HaLrkQ\/Pbj1Yxdh7oxGjjVxg5OcquqRbbqqSLuheT5+J+YMY8+mYzT24H3nBi\/3t7O6edv","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":192,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHBH9ygHJAa4KGFK8WgYoHACcrPqAbE9oizxHWguGVRnd6GvdqxkLbiibkaeYjV8ZqAdZCVhxcAlpNWT4\/mbpGxO35WuM7zasoYS0vrvaG8chbCB2dTzZmOp8yo3uiN2BYwiIPcHjxYt+6ifZzfKfU5VKwmUt\/\/LBKjKznQDrPWROxbXrOh039HWmKV\/\/OBEZlAQ2FNOirlti\/FnFbhQKOD4ymn2pLfnw","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHRH8vAHJAa4KGFK8WgQsOACqUyGAbDHtfqulQ1SapdqmFMNmANvl2hy+B6nQqtDqmBAqw4TdiU4QBe7wgfGrx9paRWb6jTeDjYiVp9i+0NKjoYej8K4rD4gkt31WbR+4m3SvVI4GYj5xxIaiQrny2CmiITFGf2WQWHf0DFVceJhK+1Xlk3XoDXuei4WhmEIiFAraIWyYWWoCE0Qw0L+vt8THdxoTlhFJjJCp6krKi4MMw5W+uFs=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":212,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHRH8tgHJAa4KGFK8WgQsOACwNdKAbDHufqupA1SapdoDJJzlcfZlitn5HF04O\/jiUSmJdQNhxoli7iJGe5PZhd0y6IDCes5x6LTt\/SXewslrcyfaXsHzDHAgocPPKYUcF7vwJnB\/VMIDpXT1fx8I8te5B0Xs9w6h\/J6Uk5+Z3knKB0ZfBgN44i0yiaguXoNImq0SMSNvjoy9H+PBSqF7zvvKf1otCjHTjY79IUplBWdwhXewCYyRvxCs0Hg=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHRH8wgHJAa4KGFK8WgQsOACk4oeAbDHvfqusw1SapdrlLTiObxSBxllxtTeInc2dXss85J2UoGBZ+Oyp12tIMnmm\/G+DG3svLZyoVISvHiw9+GgddjcSbrZDnJA5lb+aSZI+B0lF5ISUZmPi9Pqf8\/HP4FItbqLi8A\/hrMxbz2QueqWC697Bfsyu\/0ncYgkFrhtERsCozTvLmCuJWucxjCfrkY+prnG\/lr2QZaXvFuo=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkslmAbDH5fqvSQ1SapdqNXUvqD0syBEsZVNSs2pYUnrOTaC1KYOnE0CGSJ1lvH3AE3cNA6d3Z2DGCbucUpG4RCsl2t\/iOK633kRjgzqZSQQoV1wzFP79JxGceR1Bc1w==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":141,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHBH9\/QHJAa4KGFK8WgYoHABpGg+AbE9pizxLGguGVRnwokQS7aQ3+K4eZKXTw1ZwTtamcXb+wOCuJhR0z6\/hIhonU7SdMErEjS+FhQjosxb5ewTwiRvJdEg5jfjyu0IrVi9FOMhldMiT+rAN+XRe1FgRVmIg","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABUKHuAbE9zizxwmguGVRnexJO9lW1PaQztcQl+nb01rm95a4SCA9bxriD2B9OVWjwm4fS2C7wVflcnUvsERr2c1SOcou\/H1e5lzviSWmAr","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQ37iAbE90izx0WguGVRnoari1I8L3\/rd6gh\/TXO\/CT+vHa1k\/jdRgrjiw\/SN0DQ3nj9f0tnnvkY00mEgu+niE9a2uDuFcFoezC98=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0471{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":156,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIwAAEAAHBH97gHJAa4KGFK8WgYoHAB42cuAbE9qizxO2guGVRkH+vRoTgNcd45g+ikIVPChyrLQVLTlly16OWhIPjfnuuMgYLzZtaNArg0jlO5jnhwoSG0c3\/9bWGGsqHzI5zAJl\/foyjW5FphVoxYOa+laJg7KLmrbJqfxxO0F1v1O64GwmAov","pkt_caplen":156,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":190,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHRH8zAHJAa4KGFK8WgQsOACa1IuAbDHwfquwg1SapdraQNfIiekFFk6+Sk00hmpOfFr9WBgprS1ReVyMd\/y2eYsUzg2lgen5dFtV7CGdFf8ua0fskiH15Z24yAOTGteLvbrtMKubup9I5+Z3yUAR\/3u4eEiJuyiBFWkC3lf+XwzfAcpiI6xrOuctkHpLKSq3KgIJCtOd6wGgxaFeViv\/7Jhxj6Swyg==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHRH8xwHJAa4KGFK8WgQsOACfnDCAbDHxfqu0Q1SapdrVC+zb5zGyRE1Qbmcm1tEGavt1jMVI8fRHqfsgrHr7C7x1B8lF9MqeG41ORdc\/ZZ0pW2hSz3VNiboGnSmfXB65wjHmOTi3KnkJ49p3VkK0x2TREZwFqqhgkAuMRwOs\/Kk1vVAL+IgLwMcJpE4VzQq4kkZC64y3dpJFad3+AgLvugtTvkJd0elNe1EA","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":198,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACimmyAbE9rizxSmguGVRku0Ov9\/nQYp+xf9Zj0Zg2\/1NLzWI8MRdVNo2XPtZSMCf0v9ILFp52GAV2EARaSwXg37U5jyDEEltmHMOnVBf3bWpDTl0o4LQx3lzNYHz0TYgOC1Qm+JH9pocAKF3m7a3n4JvO\/ufxSzJMDjFeBtyoZLQdXmYXV6Bo1i4GYv25XYbTD4MqfUmxOTOb5s1JY","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoCCSAbDH6fqvWA1SapdqeKlS+peaRy\/LbCYrdhcIEROz7F3wyr3UT6t6reEXY7igrcaJlNeXNh+U7f0G23JX5C1hNnZ0vOwCffePqO\/hUCwmy+elmgGDh91tCq89x6HreWZ0=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHBH9\/wHJAa4KGFK8WgYoHABnW2eAbE9sizxWWguGVRmMKuDYVa9RVr+XwKEZCOj5aUxooU9eg6dEsF4QaKj3wdhWOrpAC\/mhCoMcQU+rbv3BO+5oXqxFPXyRHIYDWaxqbH4D5u\/ORAK0O8+GPnZcrVMojA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHBH+AQHJAa4KGFK8WgYoHABl7yGAbE9tizxaGguGVRlzglReFfuv4RYHp\/wy9Jdy8Rd3spKZ7\/JmE1uj4reFIhnrPv+Die\/basxFGW86lQ1XhR\/Q9ZL8pFV6BDZ32Jn13WQP6RjPk4z3ks8Js5BYVCs=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQgs+AbDHyfqu4A1Sapdr6I6GyURuV2EUBMGbLuuxpwlrkYaYSD4bpuAoydKX5ZwBqesoPm46V69y09WuZbKgdUBUZpENF9d8mFUVWdfUAtLTDjzauPsS\/c5OMQmtzeWKps3Vka2vXQVAvAISl4ebEu8+3e4n+FV4Ixmk3Awewcb+1QpFOyhLDZ+lz","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":166,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACCFz6AbDHzfqu7w1SapdpQN+jthT9a4ukBkCSvQWV34X1fOvzEDTpAag3TiagPGg3Kjg+ZJqmy0RD9E5spSaOgorTNfm7nEqH69HyaQ1DKZKEtFv5nG+zEl92Z55HOrqSetn1yVUVsAH8KeNXKg1Swb68Y49CHlIANOqhx0Q==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":163,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHRH85wHJAa4KGFK8WgQsOAB\/6NyAbDH0fqu\/g1Sapdo8saphohBolpOCDfOkNVTvi1t4BqJ1Zy3ZTQtO9WqK2MZmlGmaR8jClEnVBHq1uLSA\/NHwCD7\/0M+nEklNoj2Ej9g+LDXFnH5JkwIkvR+m6ZG8kh9GxzSR1iMUTmUN1qYKj93J4tFg3Iw7Vg==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHBH+BQHJAa4KGFK8WgYoHABh3sOAbE9uizxd2guGVRnXFHrSmtXcZirKqAKOjwdU+xQ7CCLU5lTow0m6ixNI7pf+i\/O6oqohPBquQPqmBdBqnv4ziCrHpqbWCsfxNTSRRKuUJM5mqWM4ShlaBw==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABU+wGAbE9vizxhmguGVRmXP99PNzrdSfbmiTmaX+5Xv\/3YaEFE6fC1O\/f\/x23d\/mR733eLkMtNQBlDU\/u5urOL4cLSEoRCoFEKyY1kv2J5","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":182,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHRH81AHJAa4KGFK8WgQsOACSKs+AbDH1fqvDQ1SapdoCy5dMueenBdEXjLgrvR0c7XTeHb1RvbZFe0td6HQLgmW+i\/PF8tv4YX1\/1R\/EvqnTuHUZBfhTYP5T0yL14CMszw3mv3BA8FKvhXBzbBHC8ViXa0AArbX0tS32OjdNJCrUGBmEi2TrxwdTY2RaN\/s3sqJp4MabLWB6ceneMRE=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABU1r2AbE9wizxlWguGVRnT4vALuqNyzOVOJ\/XTb7bB\/4akdiT4veKfo7Ta4SiT04x0nZHV+egvw2f+0eAnUo7RAUSlhUlFrP5npCMQ6dqu","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":141,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABphBOAbDH2fqvHA1Sapdr4tjAIlq\/Z98LAFlHL7adTjkqJ6DXadx\/Ne\/4GmeexatjSJP0IY\/Co3v\/gAcAb5bOemwYhDk89lwR9LeBfTH+wNsk71knMF2GK8JeTnViXLH61AwjW","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVajCAbE9xizxpGguGVRm+hGcvXgYF0LRqfz68cnwNzygg1uKpaoatDZET0xz0Nl+x39HfCvl9mFPJGyC6ujzY\/\/9O4kP6sNOaC6zUktjpvw==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":151,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzkaWAbE91izx4GguGVRkJVCtuYwJDwcr87bfK6xaZA0+AMZZdDZ+jj5YfBrpDMqHEhI26WZKqCvFEKQkrCe+yCDabraER04tQbtkKcBRF2e0owK164+7J9tPTFnx4YGNeLKLz6gkI9Ru\/K22uLA==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2IoyAbE92izx72guGVRms2R9xNKat4dmy42wtt2yGJicA8q7FHWYDYmPcJInZydS0reHKAKql5Sm18KJiCOOX3GZrVlcUkE60q8yjkeUx\/vDjDZKZjEE0mr1Efo86+fJ2lrivRA3GeorphpDButQ\/cbg\/CsUj1DxLWuc9IseQPHAFLAmrOreHvPqKHBvieMd4WVvaZTd1Mj7+kIEX9I\/n\/ZsqiYv7yk28vo6zoC6x+U4=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":146,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABua02AbDH3fqvKw1SapdpFGvgG6vE38EYQUk8CbHdbpwm98fsgn29Q1Lf\/puVUu6EDvLtzO6CoMfIri+Zg5XIzIFD4GU1pZz7TP+Oo5UjBe4n9yLTjLbFK\/hSE4baC3OoypvzPHMG\/7KE=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABXP3KAbE9yizxs2guGVRmxcC+\/Ftdr0R7+X8AWjNmrHsO\/RBR6qygYdHLRE1Qg4O9S1vzyZ1clst8HReo72JSt8JuFgutdAHG9jfHfiZxNIB0z","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBlDl6AbDH7fqvZw1SapdrFtZFM1NkzN8Fn5LZg8PaQF4U4fAAzXzm1rRMODSNbHBqK8hmEmqXd2R03ZPzhSxxndip2om+tPJulxyjitlFDQJ0b5r7XuWQOZ9zTzho33P4=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbD8CAbDH8fqvdg1SapdqZ3RBvkslek\/pyQ7HIMT6qGmDnOIk6fKUL7oma0tbesMxu9Xs1qxfdIRMcOYAQd1raOnf5CV0L0jDo\/4+A2fo3js34uXgrfg==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHBH+FgHJAa4KGFK8WgYoHABQ49KAbE90izx0WguGVRnoari1I8L3\/rd6gh\/TXO\/CT+vHa1k\/jdRgrjiw\/SN0DQ3nj9f0tnnvkY00mEgu+niE9a2uDuFcFoezC98=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABULJWAbE9zizxwmguGVRnexJO9lW1PaQztcQl+nb01rm95a4SCA9bxriD2B9OVWjwm4fS2C7wVflcnUvsERr2c1SOcou\/H1e5lzviSWmAr","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABm+i2AbDH4fqvOg1SapdoP\/WePxZkyFohDg1iLnX0aU9vYUbnNDUgnjxe9UWUh7jVy95+JzUMNaAHvOL\/Ep+UcT1qCQ2i4mp\/LyLh6nL1CHvhCSiHBZdvyPRJssJrcILSi","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkrj+AbDH5fqvSQ1SapdqNXUvqD0syBEsZVNSs2pYUnrOTaC1KYOnE0CGSJ1lvH3AE3cNA6d3Z2DGCbucUpG4RCsl2t\/iOK633kRjgzqZSQQoV1wzFP79JxGceR1Bc1w==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoBAqAbDH6fqvWA1SapdqeKlS+peaRy\/LbCYrdhcIEROz7F3wyr3UT6t6reEXY7igrcaJlNeXNh+U7f0G23JX5C1hNnZ0vOwCffePqO\/hUCwmy+elmgGDh91tCq89x6HreWZ0=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfBP2AbDH9fqvhQ1SapdpZE593cQDh+zsWT2xxAWI6BUUnFCQu92z7IT7uggr75jJsZ9XARi8ct9I9HqYo2ucH27vGan7ivKN92MH2CY4B4htf+YdBA0ssTFg=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":173,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ0AAEAAPxHbBQoYUrwByQGuLDhaBACJR\/GAbE93izx\/mguGVRkbf74z7MkEM\/69TLYyIvDONaiPRg+E8VtlZVr1C+bYlulvQX3KZVtG3Tso2TjwH9DBCflt6LNiBm8Hro7VCSCThCA5jpV6vFFiwPuCV6GX3qFp6HO9b254PXphYzNmU4VfVip8LM1oMQ7Fhzs7XsFjghgnAJY=","pkt_caplen":173,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":151,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzlb+AbE91izx4GguGVRkJVCtuYwJDwcr87bfK6xaZA0+AMZZdDZ+jj5YfBrpDMqHEhI26WZKqCvFEKQkrCe+yCDabraER04tQbtkKcBRF2e0owK164+7J9tPTFnx4YGNeLKLz6gkI9Ru\/K22uLA==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2JqaAbE92izx72guGVRms2R9xNKat4dmy42wtt2yGJicA8q7FHWYDYmPcJInZydS0reHKAKql5Sm18KJiCOOX3GZrVlcUkE60q8yjkeUx\/vDjDZKZjEE0mr1Efo86+fJ2lrivRA3GeorphpDButQ\/cbg\/CsUj1DxLWuc9IseQPHAFLAmrOreHvPqKHBvieMd4WVvaZTd1Mj7+kIEX9I\/n\/ZsqiYv7yk28vo6zoC6x+U4=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdDKKAbDH+fqvlA1SapdpJaUSe+mBJyPEjtKKa5f9vHo5IzV3hTvY3yvbZesq7wWKaTJRYgs9cBubG6e1RujpUZrv9ZxgCBlb3\/o1tX+4b5lQLxAizRSu9","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0445{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABlCkSAbDH7fqvZw1SapdrFtZFM1NkzN8Fn5LZg8PaQF4U4fAAzXzm1rRMODSNbHBqK8hmEmqXd2R03ZPzhSxxndip2om+tPJulxyjitlFDQJ0b5r7XuWQOZ9zTzho33P4=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQG4+AbE94izyDWguGVRl78\/Il7TZv5LQLz+2DICn7XzbWJKgchYE3O3ws5ESoBL9eCLLkulbpucIyL\/O5CRcnURGIf1cgljA6Ka8=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMpFmAbE95izyHGguGVRlmjSSBqnyH2FGIojdTBwGgrrDZvrF\/8ToU+rFCMUu+OQpw5boESbJsMvlMabOuaRQRGppxUPULWw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoWwOAbDH\/fqvow1SapdoIYzdcEPh4GUuzgdhISOzmIrBWPKDMM81mxUeOls6tdEbYvyfpzBDCOAfTp5lr6L86pvtZIVxwBrfgYWCnjUmCL4DigdRNGDh1YeuUJyrfLspKEXU=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbC6aAbDH8fqvdg1SapdqZ3RBvkslek\/pyQ7HIMT6qGmDnOIk6fKUL7oma0tbesMxu9Xs1qxfdIRMcOYAQd1raOnf5CV0L0jDo\/4+A2fo3js34uXgrfg==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfAOOAbDH9fqvhQ1SapdpZE593cQDh+zsWT2xxAWI6BUUnFCQu92z7IT7uggr75jJsZ9XARi8ct9I9HqYo2ucH27vGan7ivKN92MH2CY4B4htf+YdBA0ssTFg=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069182,"pkt_len":173,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ0AAEAAHBH93QHJAa4KGFK8WgYoHACJTAuAbE93izx\/mguGVRkbf74z7MkEM\/69TLYyIvDONaiPRg+E8VtlZVr1C+bYlulvQX3KZVtG3Tso2TjwH9DBCflt6LNiBm8Hro7VCSCThCA5jpV6vFFiwPuCV6GX3qFp6HO9b254PXphYzNmU4VfVip8LM1oMQ7Fhzs7XsFjghgnAJY=","pkt_caplen":173,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE2FiAbE96izyK2guGVRmKm1SXHNfeOr0snL8tp\/kHcotE\/6JcRcCqK+nE7PHYkc6ssOcOjoKEpP17gh66Vgs=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABA7laAbE97izyOmguGVRmr5isfQI2dPeVHyx77A1wUI2iQD7ZAzZs8GquNY3BG8o6iI2Dti3PT2ZZtig==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdCIiAbDH+fqvlA1SapdpJaUSe+mBJyPEjtKKa5f9vHo5IzV3hTvY3yvbZesq7wWKaTJRYgs9cBubG6e1RujpUZrv9ZxgCBlb3\/o1tX+4b5lQLxAizRSu9","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":128,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAQBHaMgoYUrwByQGuKBxaBgBcACOAbDIAfqvsg1SapdoIAQfeesv0jHlR3dmd3YhfkMKe2L7PU9+94E2r2bCQHodF5bPo7IcYoaYQuecht7T0FitStdNd2Uj41TvHAEGv3sQwlNuL3To=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHBH+FgHJAa4KGFK8WgYoHABQH6mAbE94izyDWguGVRl78\/Il7TZv5LQLz+2DICn7XzbWJKgchYE3O3ws5ESoBL9eCLLkulbpucIyL\/O5CRcnURGIf1cgljA6Ka8=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZqmmAbDIBfqvwQ1SapdpyZAmXjvIDm+J2toff\/r3HvocrG5LDbNArq9x2H81Buq4PZC7+0ecrLl4FPiyRUrlaqlZ3m\/K89OAzlJfjyrH3kNpU0Bk=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMqHOAbE95izyHGguGVRlmjSSBqnyH2FGIojdTBwGgrrDZvrF\/8ToU+rFCMUu+OQpw5boESbJsMvlMabOuaRQRGppxUPULWw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":135,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjkfWAbDICfqv0A1Sapdo9doPA4NOIHM3oJtnSuE\/6Zy7QQmBvULF2K2h9e6v\/lZWdz1xvzS5u+5tkWzROj5bqqRlr2aYJLDAJQoW46S7de38pMcj7vlTFCuHWZOdH","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/3uiAbE98izySWguGVRm2LgwbYphFIQoXWbS1y2zLc0u\/mstdo+J8pYGcnZxYeqX4rAtZFPxjPn5\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoVumAbDH\/fqvow1SapdoIYzdcEPh4GUuzgdhISOzmIrBWPKDMM81mxUeOls6tdEbYvyfpzBDCOAfTp5lr6L86pvtZIVxwBrfgYWCnjUmCL4DigdRNGDh1YeuUJyrfLspKEXU=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE3HKAbE96izyK2guGVRmKm1SXHNfeOr0snL8tp\/kHcotE\/6JcRcCqK+nE7PHYkc6ssOcOjoKEpP17gh66Vgs=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABA8nCAbE97izyOmguGVRmr5isfQI2dPeVHyx77A1wUI2iQD7ZAzZs8GquNY3BG8o6iI2Dti3PT2ZZtig==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBhgy+AbDIDfqv3w1SapdqpYuYG1A36TRBVticSqk+1eB+l9oVcFhkJKEgOjd\/cQUjXtSFo\/tI67UE1LIRJXZ7nKgVwiu\/mGNLOyvzzfvmLG6ZtnmgtqIGApPUbRQ==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHRH9CgHJAa4KGFK8WgQsOABc\/AiAbDIAfqvsg1SapdoIAQfeesv0jHlR3dmd3YhfkMKe2L7PU9+94E2r2bCQHodF5bPo7IcYoaYQuecht7T0FitStdNd2Uj41TvHAEGv3sQwlNuL3To=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/myuAbE99izyWGguGVRmgJX8YVf9IV53m1xtE3MC3YXHePhzlXSotM0buRKUB3u65Ef0aHdTGJ7Jo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/IquAbE9+izyZ2guGVRmPzZx+V4aTu4lkuMnBNOxfJWLSDcj1Jo2pzSzE1hD9rPO3pgVZiuxjSlze","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZpk+AbDIBfqvwQ1SapdpyZAmXjvIDm+J2toff\/r3HvocrG5LDbNArq9x2H81Buq4PZC7+0ecrLl4FPiyRUrlaqlZ3m\/K89OAzlJfjyrH3kNpU0Bk=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBh2Y2AbDIEfqv7g1SapdrQI6LERdH4+vIIsAGvuqN7fwPexpUk7EQKraz\/ltInaEhZlbxL7c9TYkdpngBKUebPEfbxMtSDKCQ8DEIABoDeFfg1iYSB\/LFro3jiKg==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnlzKAbDIFfqv\/Q1Sapdqx9lHk6o3fnFFSrC2SB1H83OwKKtl3iHNOVj4J42E7mt\/YNfmumC0stiUnGiwUv+OGtwSm2p+I997TtfolwdAqXGI4zeh\/K6t2Oep9070F\/551AA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":135,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjjduAbDICfqv0A1Sapdo9doPA4NOIHM3oJtnSuE\/6Zy7QQmBvULF2K2h9e6v\/lZWdz1xvzS5u+5tkWzROj5bqqRlr2aYJLDAJQoW46S7de38pMcj7vlTFCuHWZOdH","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/5g6AbE9\/izydmguGVRlLf6Y9IGu8W5JvtlHtnl2pIhdfUx\/MkcApCTyyrTFpIRvbilwt8ewfxZtC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Nj+AbE+AizyhWguGVRm3jeKNAAuBGa1f1IQ3CSkFfHbh\/A3qtBaYJlCjmJ3B7SU\/gy3prQPZCJaG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/4wKAbE98izySWguGVRm2LgwbYphFIQoXWbS1y2zLc0u\/mstdo+J8pYGcnZxYeqX4rAtZFPxjPn5\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABhfxWAbDIDfqv3w1SapdqpYuYG1A36TRBVticSqk+1eB+l9oVcFhkJKEgOjd\/cQUjXtSFo\/tI67UE1LIRJXZ7nKgVwiu\/mGNLOyvzzfvmLG6ZtnmgtqIGApPUbRQ==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/n0WAbE99izyWGguGVRmgJX8YVf9IV53m1xtE3MC3YXHePhzlXSotM0buRKUB3u65Ef0aHdTGJ7Jo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgpOWAbDIGfqwDA1SapdqiQVvzPFj0GxvGtV4Tg0q5nnb2D8\/7lEKvwd6ukXceklBV6sQmAchkv5uMX5Q7PzPbw2npXEMenU0CF3bnCf5ujakbDM4C0Vu+Vlom","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/JsWAbE9+izyZ2guGVRmPzZx+V4aTu4lkuMnBNOxfJWLSDcj1Jo2pzSzE1hD9rPO3pgVZiuxjSlze","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":101,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAPxHbTQoYUrwByQGuLDhaBABB6QuAbE+BizylGguGVRm9OvpUr0LbEZiZEAk2mkpJp5DmbGfNe7YeysXiRw5z2qY4bLvD3WA7Ubqbqy4=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABh1XOAbDIEfqv7g1SapdrQI6LERdH4+vIIsAGvuqN7fwPexpUk7EQKraz\/ltInaEhZlbxL7c9TYkdpngBKUebPEfbxMtSDKCQ8DEIABoDeFfg1iYSB\/LFro3jiKg==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBh\/l+AbDIHfqwGw1SapdofjmPyrZeYwbmF4lGjgiyKm4FX\/I7lV\/7EJN1y1BgfRmoblFBhQvO8FPGZ8WvYuQMgRHF7TKpz9cLMmb2T6fqiqkETyYqebkaEDDRTcw==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnkxiAbDIFfqv\/Q1Sapdqx9lHk6o3fnFFSrC2SB1H83OwKKtl3iHNOVj4J42E7mt\/YNfmumC0stiUnGiwUv+OGtwSm2p+I997TtfolwdAqXGI4zeh\/K6t2Oep9070F\/551AA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/6iiAbE9\/izydmguGVRlLf6Y9IGu8W5JvtlHtnl2pIhdfUx\/MkcApCTyyrTFpIRvbilwt8ewfxZtC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/OlmAbE+AizyhWguGVRm3jeKNAAuBGa1f1IQ3CSkFfHbh\/A3qtBaYJlCjmJ3B7SU\/gy3prQPZCJaG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":146,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBuWBSAbDIIfqwKg1SapdrJdkoHGsqmYXqZoLD+JW94O4KvHCX2muvlvsOh77U263wuCOQNLR6c97L\/GTWnqdXMjD8UKDRqPtgbnXxsd4wSndzzVGeEWP4+O6UpYE1k1hK+q6OCdSg8vrY=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKJraAbE+Cizyo2guGVRkiKbDkk0dr5Rw3QYR+w6vSAHQAZKUwgXe\/yBrHTgjC4G7YH0GqOc3MZo+NHAg2DTdTdZNkKd8=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKpaOAbE+DizysmguGVRmYHwEIH5Gu0CAeNMI7DAU9Eo6NpT7QPAbqcWBK1fCYiTSq8CCHyFovCgY1CCyCi9vzgkeVAI4=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgoMuAbDIGfqwDA1SapdqiQVvzPFj0GxvGtV4Tg0q5nnb2D8\/7lEKvwd6ukXceklBV6sQmAchkv5uMX5Q7PzPbw2npXEMenU0CF3bnCf5ujakbDM4C0Vu+Vlom","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfgJSAbDIJfqwOQ1SapdqI\/vYpKF+zOCrfvMduZ1X12YPdwP3jYJn97URg\/\/k00IrHl2tU6a0E9GOXCwOfDAWcT+TIZHMI3eg7IfsUNLf804K25lxvDjRBoxQ=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHBH+JQHJAa4KGFK8WgYoHABB7SWAbE+BizylGguGVRm9OvpUr0LbEZiZEAk2mkpJp5DmbGfNe7YeysXiRw5z2qY4bLvD3WA7Ubqbqy4=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeI6yAbDIKfqwSA1SapdqPz3w1a8q3Wn\/7+pq9TydP9y82vTnGjqJTX1d+l39jCvRQ5TNC2xjzGi0DP4ahNXsPXxeinGHokHashXUKLujFFczv2O\/jVJidWQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABh+kWAbDIHfqwGw1SapdofjmPyrZeYwbmF4lGjgiyKm4FX\/I7lV\/7EJN1y1BgfRmoblFBhQvO8FPGZ8WvYuQMgRHF7TKpz9cLMmb2T6fqiqkETyYqebkaEDDRTcw==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIWgWAbE+EizywWguGVRkfN5oqiBODmGFjT68g15qfMPxx3wjsP+7f65qMwitjmciYt8uZNnO8QtYNJdRBNbIbWJKA","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJRuGAbE+Fizy0GguGVRmSqPKPMqh1YheZS2bPWOB\/TSw9KsPkXkoyzwS2EqYwM3q+IY9VYgLdSICbDjKm24ZC3DnmmA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":146,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABuU\/qAbDIIfqwKg1SapdrJdkoHGsqmYXqZoLD+JW94O4KvHCX2muvlvsOh77U263wuCOQNLR6c97L\/GTWnqdXMjD8UKDRqPtgbnXxsd4wSndzzVGeEWP4+O6UpYE1k1hK+q6OCdSg8vrY=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKKtCAbE+Cizyo2guGVRkiKbDkk0dr5Rw3QYR+w6vSAHQAZKUwgXe\/yBrHTgjC4G7YH0GqOc3MZo+NHAg2DTdTdZNkKd8=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHUAAEAAQBHaLQoYUrwByQGuKBxaBgBhwTKAbDILfqwVw1SapdrOZ\/hNfPRFl7pjboQ9kxfaUNjRNhl5IDkq40Y0SGt7v+jBag1Lg9BFKwu40o90iFT73RYqs419FxQhwz1a4Xn3NH5W8Y6eU9LCG0N0tQ==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKqb2AbE+DizysmguGVRmYHwEIH5Gu0CAeNMI7DAU9Eo6NpT7QPAbqcWBK1fCYiTSq8CCHyFovCgY1CCyCi9vzgkeVAI4=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABffHqAbDIJfqwOQ1SapdqI\/vYpKF+zOCrfvMduZ1X12YPdwP3jYJn97URg\/\/k00IrHl2tU6a0E9GOXCwOfDAWcT+TIZHMI3eg7IfsUNLf804K25lxvDjRBoxQ=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFsH2AbE+Gizy32guGVRlb3c3s0gGReeTV7TBucUsXIef3lQe8\/1AMHFFsRU6QtK3hBRT0Sw+6LQY35YMFIN7I","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABeH5KAbDIKfqwSA1SapdqPz3w1a8q3Wn\/7+pq9TydP9y82vTnGjqJTX1d+l39jCvRQ5TNC2xjzGi0DP4ahNXsPXxeinGHokHashXUKLujFFczv2O\/jVJidWQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBd5EWAbDIMfqwZg1SapdqdJhSrjpycwIGyWMXh7KfrvOrAcoJkpdc7HWVXdrOC84lUhrjI7XA2pC3MdlX+1BIb64kfo\/Giu6XUmZx+x\/GIu+tcksKMp8Nw","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIXh+AbE+EizywWguGVRkfN5oqiBODmGFjT68g15qfMPxx3wjsP+7f65qMwitjmciYt8uZNnO8QtYNJdRBNbIbWJKA","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":128,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAQBHaMgoYUrwByQGuKBxaBgBca8GAbDINfqwdQ1SapdrAMg5utnhMZ9lihZsiGIjFJAgg89wKKl9eGaAOyHLIY675QLdttHF3KJ65ZExVaNYYieKdbWUSc2CIRAoBSEN5mJKy9HH7Koc=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJSvuAbE+Fizy0GguGVRmSqPKPMqh1YheZS2bPWOB\/TSw9KsPkXkoyzwS2EqYwM3q+IY9VYgLdSICbDjKm24ZC3DnmmA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH4lmAbE+Hizy7mguGVRlh7N+L4uwr+uq\/EfII2Omxf91eeB1qeO804+QPIn9qqb9Dx5QzrDKsVEl7z7YwVWs8yF8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCQS2AbE+Iizy\/WguGVRnUqnCYe7V7JOOqUvaVfUCHL3AV2qSLE6QiQ8\/x6OirggMqHU8wa6pR6wqyePby","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":133,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHUAAEAAHRH9BQHJAa4KGFK8WgQsOABhvRiAbDILfqwVw1SapdrOZ\/hNfPRFl7pjboQ9kxfaUNjRNhl5IDkq40Y0SGt7v+jBag1Lg9BFKwu40o90iFT73RYqs419FxQhwz1a4Xn3NH5W8Y6eU9LCG0N0tQ==","pkt_caplen":133,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBet4WAbDIOfqwhA1SapdrNI\/CRNo0b1o+JXYqUJRN+CWScpHyxU0rKzQ5hNOVRUfb9g8AZInh+s6vJGbLzqkOPIpuvqbv7nk7BNxBSGuo8yx6wYSrie8QDjQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFtJeAbE+Gizy32guGVRlb3c3s0gGReeTV7TBucUsXIef3lQe8\/1AMHFFsRU6QtK3hBRT0Sw+6LQY35YMFIN7I","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZJa+AbDIPfqwkw1SapdrcKXt8Z76DBwbJJn8cUvGeqOZdX8BLG\/C2j8dyUBl3vWb5sp8wkt6+83xO7jCCBwDsGaRUWi81ubsm2mOIKKv9sgtf02I=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFMneAbE+JizzDGguGVRn05W6SLgEws4iRxgAT6ZA7LN5Hfx8yKex6YknCF0qh9xwgnU2nZzpGC6L8AHIQ1+OL","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/YYqAbE+KizzG2guGVRmOEx8A7Jj06okUUTHzTqUF2+YDVhivOFcXPaU4tLgsewBM2rZST0wQdi92","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABd4CuAbDIMfqwZg1SapdqdJhSrjpycwIGyWMXh7KfrvOrAcoJkpdc7HWVXdrOC84lUhrjI7XA2pC3MdlX+1BIb64kfo\/Giu6XUmZx+x\/GIu+tcksKMp8Nw","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHRH9CgHJAa4KGFK8WgQsOABcZ6eAbDINfqwdQ1SapdrAMg5utnhMZ9lihZsiGIjFJAgg89wKKl9eGaAOyHLIY675QLdttHF3KJ65ZExVaNYYieKdbWUSc2CIRAoBSEN5mJKy9HH7Koc=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFhKSAbDIQfqwog1SapdpDRzEOEZ8SGxkRPHWgbjeynlul34y35hn31R4Ah+xIsBxwm4Cd+z1utgCbUj5hTOtx","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH5nOAbE+Hizy7mguGVRlh7N+L4uwr+uq\/EfII2Omxf91eeB1qeO804+QPIn9qqb9Dx5QzrDKsVEl7z7YwVWs8yF8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069183,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCRUeAbE+Iizy\/WguGVRnUqnCYe7V7JOOqUvaVfUCHL3AV2qSLE6QiQ8\/x6OirggMqHU8wa6pR6wqyePby","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/x6+AbE+LizzKmguGVRmcq4gIFf4gtqurzx5zamEzp1hEZBU+ASJIcYk6el\/wZuAwm0yBIvWdUSye","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aSiAbDIRfqwsQ1SapdqBrWeT5XfBEK9q\/p0y+5eEH170vJxjOybzNiSx8Sin67bQf7eGXR9QEc7J","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABes2uAbDIOfqwhA1SapdrNI\/CRNo0b1o+JXYqUJRN+CWScpHyxU0rKzQ5hNOVRUfb9g8AZInh+s6vJGbLzqkOPIpuvqbv7nk7BNxBSGuo8yx6wYSrie8QDjQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/u5+AbDISfqwwA1Sapdp8yWK\/5le6YUf4a4w1+rVxqDLeH1QCL1n0TZtrTfIGjl30TjBtO9C+BYYJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZIZWAbDIPfqwkw1SapdrcKXt8Z76DBwbJJn8cUvGeqOZdX8BLG\/C2j8dyUBl3vWb5sp8wkt6+83xO7jCCBwDsGaRUWi81ubsm2mOIKKv9sgtf02I=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFNpGAbE+JizzDGguGVRn05W6SLgEws4iRxgAT6ZA7LN5Hfx8yKex6YknCF0qh9xwgnU2nZzpGC6L8AHIQ1+OL","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/M3KAbE+MizzOWguGVRnEP2aOfkc4yDgGcDNoYy3ljhxvvAuK5BmtvPwxaxavC2vR7EtmqLGV2P1A","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/8wKAbE+NizzSGguGVRl2bclfZ0MBUX8Mwkygk+rV7yj4iMwczdJTVKJe7WALliNfdUHsdiGTBNsH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/ZaSAbE+KizzG2guGVRmOEx8A7Jj06okUUTHzTqUF2+YDVhivOFcXPaU4tLgsewBM2rZST0wQdi92","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFgIqAbDIQfqwog1SapdpDRzEOEZ8SGxkRPHWgbjeynlul34y35hn31R4Ah+xIsBxwm4Cd+z1utgCbUj5hTOtx","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uSGAbDITfqwzw1Sapdpk3IxLINwn8W3A2IkcwV0+JTA9AXCXDO7aYVSj7VTEVxGpMdeutvXerr6z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/y8mAbE+LizzKmguGVRmcq4gIFf4gtqurzx5zamEzp1hEZBU+ASJIcYk6el\/wZuAwm0yBIvWdUSye","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZQ6AbDIRfqwsQ1SapdqBrWeT5XfBEK9q\/p0y+5eEH170vJxjOybzNiSx8Sin67bQf7eGXR9QEc7J","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/TWGAbDIUfqw3g1SapdrQvL5+D2Uv3GlrW5rzqS1pTb92f99Nspk51XEcoH9zRmKkE4rdaAoFamvb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/t4WAbDISfqwwA1Sapdp8yWK\/5le6YUf4a4w1+rVxqDLeH1QCL1n0TZtrTfIGjl30TjBtO9C+BYYJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/f3aAbE+OizzV2guGVRlj1jO6DEBenGiMZgJtrl4AVaADz+MynY\/\/zOpSdwvDK6i945SQ5YxFqg8Z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/5M+AbE+PizzZmguGVRkzG9squL1OeXVvnwol4HhQADkz2MNuxZ9AYOZT6Jw+9WyCHbmad0Mj00GQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/VouAbDIVfqw7Q1SapdorSS25\/wYLMgq7ZN7NQvEgkE8xtEsrB4W5IRZcBj4OLrDnRihGLshG9zTZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/N4yAbE+MizzOWguGVRnEP2aOfkc4yDgGcDNoYy3ljhxvvAuK5BmtvPwxaxavC2vR7EtmqLGV2P1A","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/9xyAbE+NizzSGguGVRl2bclfZ0MBUX8Mwkygk+rV7yj4iMwczdJTVKJe7WALliNfdUHsdiGTBNsH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tQeAbDITfqwzw1Sapdpk3IxLINwn8W3A2IkcwV0+JTA9AXCXDO7aYVSj7VTEVxGpMdeutvXerr6z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/mduAbE+QizzdWguGVRkIuVZsz1OS5CqAdkDEKL+clwwpqQxKwiKFtEYnk8QmjkHWyiyEiVkpIe7f","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cSWAbDIWfqw\/A1SapdovoxS3axcYtFmUbIFvYrZwOxp1xykzu\/tkdXENk0dUT3KevPPCgKEhi8gb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/SUeAbDIUfqw3g1SapdrQvL5+D2Uv3GlrW5rzqS1pTb92f99Nspk51XEcoH9zRmKkE4rdaAoFamvb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/g5CAbE+OizzV2guGVRlj1jO6DEBenGiMZgJtrl4AVaADz+MynY\/\/zOpSdwvDK6i945SQ5YxFqg8Z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/6OmAbE+PizzZmguGVRkzG9squL1OeXVvnwol4HhQADkz2MNuxZ9AYOZT6Jw+9WyCHbmad0Mj00GQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/UnGAbDIVfqw7Q1SapdorSS25\/wYLMgq7ZN7NQvEgkE8xtEsrB4W5IRZcBj4OLrDnRihGLshG9zTZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/AKGAbDIXfqxCw1SapdoMRghYdSHoYEeDtI8M58c36y0Hk9Fm8x0DHK+Wig\/RKaCZqhbEfvL1AlCi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/fiyAbE+RizzhGguGVRm5kG8OJ2a+o3IugZp6wncrSvePA8t0LnrKXnLMW8WsI5Bs7ZuKqJ7YKuAe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/nb6AbE+Sizzk2guGVRnWdHNCgD00ToCxkMyB18+Vsm3yhGm8td5YDvdQ2lBO6MbDIvNwogXOs\/go","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/nfWAbE+QizzdWguGVRkIuVZsz1OS5CqAdkDEKL+clwwpqQxKwiKFtEYnk8QmjkHWyiyEiVkpIe7f","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bQuAbDIWfqw\/A1SapdovoxS3axcYtFmUbIFvYrZwOxp1xykzu\/tkdXENk0dUT3KevPPCgKEhi8gb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uk+AbDIYfqxGg1SapdpU2nkgfR+pXPRFF5mse6WLyxIcQQFn8C49QP\/\/h5nkDbMUCZC\/xHu3rTl3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/t0WAbDIZfqxKQ1Sapdq3KQZiBxk8BbkPkH6xHS\/i8GYm8rRxiZyTfufzSkVfbtc9RtnNXjvcg7qf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/HnqAbE+TizzomguGVRkGBPW9v1eZfTQVTXLgfDF1ct\/9pP0yNdtWwDs8r7ql1GTqZ\/2GiZgNFknh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/KR+AbE+UizzsWguGVRklLm6DjoKweJ8GPdkVqJ9SZ6ee5QIwtmKckUHZK0HvdiSfoBUiqpTr\/nyw","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/IaAbDIXfqxCw1SapdoMRghYdSHoYEeDtI8M58c36y0Hk9Fm8x0DHK+Wig\/RKaCZqhbEfvL1AlCi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xSyAbDIafqxOA1SapdrDFbUlAt2+1mxOOZsvHSD84ULIbt+FnwCXXIaAgWCVA+N8bVAMhOIYkVSB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/gkaAbE+RizzhGguGVRm5kG8OJ2a+o3IugZp6wncrSvePA8t0LnrKXnLMW8WsI5Bs7ZuKqJ7YKuAe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/odiAbE+Sizzk2guGVRnWdHNCgD00ToCxkMyB18+Vsm3yhGm8td5YDvdQ2lBO6MbDIvNwogXOs\/go","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tjWAbDIYfqxGg1SapdpU2nkgfR+pXPRFF5mse6WLyxIcQQFn8C49QP\/\/h5nkDbMUCZC\/xHu3rTl3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/U16AbE+VizzwGguGVRl4x5jDMoHHzifEEzqIY3yeTN3ECNoDDzScP23\/DDyiVjx096L2F7DpAa4+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MwGAbDIbfqxRw1Sapdq3Zx\/zjP\/FeuCzUN+Ho1itvzhyC9gV\/PnQMs5Zu+TFCOnBmbq07aBxcTHB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0186{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/syuAbDIZfqxKQ1Sapdq3KQZiBxk8BbkPkH6xHS\/i8GYm8rRxiZyTfufzSkVfbtc9RtnNXjvcg7qf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/IpSAbE+TizzomguGVRkGBPW9v1eZfTQVTXLgfDF1ct\/9pP0yNdtWwDs8r7ql1GTqZ\/2GiZgNFknh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/8piAbDIcfqxVg1Sapdoy5X162x8lA3vzZ79ro8ThqgGurT1II8yjf57o+c+Vn7rdUqPTZaY7LsOj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/LTmAbE+UizzsWguGVRklLm6DjoKweJ8GPdkVqJ9SZ6ee5QIwtmKckUHZK0HvdiSfoBUiqpTr\/nyw","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wRKAbDIafqxOA1SapdrDFbUlAt2+1mxOOZsvHSD84ULIbt+FnwCXXIaAgWCVA+N8bVAMhOIYkVSB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/pyiAbE+Wizzz2guGVRlUcHmkycHXLNnDIcKBzQNP2us4RaJELDReTnuCe6dk8hxLUh622c8sw9t+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ZzCAbE+Xizz3mguGVRmFPFC9vVkRroj8LcrneLDp7ZCV+AouaVttVvzfcv1ph9XBdvMGRSex3Zh0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/JQ+AbDIdfqxZQ1SapdplkdmxH8bpUj3XEiUHsuqS2G+oqfrOx7h\/Xlfg1BhX437cnJ+ExACr+Z8H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/V3iAbE+VizzwGguGVRl4x5jDMoHHzifEEzqIY3yeTN3ECNoDDzScP23\/DDyiVjx096L2F7DpAa4+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LueAbDIbfqxRw1Sapdq3Zx\/zjP\/FeuCzUN+Ho1itvzhyC9gV\/PnQMs5Zu+TFCOnBmbq07aBxcTHB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/6ZmAbE+Yizz7WguGVRm1JRO45J3QYm+4bTMVZVGYwTnTSOlQLrYI7tqfm0VnRGwVjxanKCobfTna","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHLXiAbE+Zizz\/GguGVRnOEMeJLp5Pmv4yWdhNangpgCcUxKwUoiiA9ckppZVWQTbn0DIue5YNMkyH8ZL3casUTzc=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/+dmAbDIefqxdA1SapdqWjEDvLDMrb1aBKQk9E2I8RkhT787BOgDjwPSWLBwJVR3nnKeX9+pKLu0w","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/7n6AbDIcfqxVg1Sapdoy5X162x8lA3vzZ79ro8ThqgGurT1II8yjf57o+c+Vn7rdUqPTZaY7LsOj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/q0KAbE+Wizzz2guGVRlUcHmkycHXLNnDIcKBzQNP2us4RaJELDReTnuCe6dk8hxLUh622c8sw9t+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWKW2AbDIffqxgw1SapdoFzyceLv5rJYb+1wZpTnfbmCKG1k1uL6whUbnb8miY2PPGURSWluIl\/sA\/kBrepQTfhNTUVlm7O8HgNXCglshMxqYPF5buCx8a+xJqAf8FYnpCrz3oJlkXjaIp0hGAn4n\/759kGqFXmRO54r5fCQcWPxopKMFCOQU1t8CBaneK0T\/F","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/a0qAbE+Xizz3mguGVRmFPFC9vVkRroj8LcrneLDp7ZCV+AouaVttVvzfcv1ph9XBdvMGRSex3Zh0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAQBHZ3AoYUrwByQGuKBxaBgCyPCWAbDIgfqxkg1SapdpoOcC+kEVVHGZQymdv59AWt3oWX0ULvulPMZfaKogKp8nUjYtpJhenPC40N6N\/LFVIM6karejSH1IFp74f3yhe1aOHgfoqK\/RGrOGD5nZ8CK07+o\/WZ8R7KyleNSd\/5wGMNS5r5\/SZYSw0htofXU3GLzjy4BRA9Aw\/N6YYlZJYoiyl+fXWXEbgf\/gTyuIpk13sCJdk5Rhz9PAqKa6Q3g==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/IPWAbDIdfqxZQ1SapdplkdmxH8bpUj3XEiUHsuqS2G+oqfrOx7h\/Xlfg1BhX437cnJ+ExACr+Z8H","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":212,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAPxHa3goYUrwByQGuLDhaBACw8lqAbE+aiz0C2guGVRnKpzqoTMr9r6CvKgkIK3ng6diWoezQc7X7nYrlVbN+mhQDGyd2ZDkWH+TsAkiRcDEUQtBjo+uTVohqFLGonmhWKcA4KfwOYIOAPJYscA80jrs+KoaQjEk\/Uz37RGoU+7i7Z3Q0TFyryOhsBck\/IEvDlVHdGAR2wbXOUGzzHoDfaG\/h8fTwnzQs5NdYzWYTdSdenamy9XQDkyGKXuA=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/7bOAbE+Yizz7WguGVRm1JRO45J3QYm+4bTMVZVGYwTnTSOlQLrYI7tqfm0VnRGwVjxanKCobfTna","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHMZKAbE+Zizz\/GguGVRnOEMeJLp5Pmv4yWdhNangpgCcUxKwUoiiA9ckppZVWQTbn0DIue5YNMkyH8ZL3casUTzc=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069184,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/9b+AbDIefqxdA1SapdqWjEDvLDMrb1aBKQk9E2I8RkhT787BOgDjwPSWLBwJVR3nnKeX9+pKLu0w","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":233,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANkAAEAAQBHZyQoYUrwByQGuKBxaBgDFlGSAbDIhfqxoQ1Sapdo3jTSzREIIXeGF9ClVu6G+fqOYerA6cWuD2qkwb6PUcjtQfBNyCsnDA4dIumK62QHOuKgU\/LDKuix+vxqI\/mgmnqZM3miQ\/JqyRUeqOgfIyz8AApQIVNjUkdLcRAx7BcZZ7QOSzSPpCehmbzDTwuajfm3JqTVyMC80pfqP8peg0d\/OOGxz289yFIC98X6iMUnBobL36Q+dlHIp\/uPTsWl8m7gw0LAVljf7aqwehJMnqrk=","pkt_caplen":233,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2CXiAbE+biz0GmguGVRmk8I3cBeh6d3Ni6Ji\/dp36+tFhllMJ+9CeQzQ4FtMm7elrRaIKgiQKYkVZr1vlrEJ2mj681xY9EzBD+3DD5+NQI4GFHkT+DcwBudloZU7lsusOV6CzbF7RyNqL0Wzy4eGJ6AhFAn7UFgqoL\/W9kacpnC95sMi0ymRX752jsxCctG1J2v117o6irgjdKkdYN7+Va0koG9i0Rhv34w9BpDjF1hg=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":220,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMwAAEAAPxHa1goYUrwByQGuLDhaBAC4+NaAbE+ciz0KWguGVRnoDuS\/Yr8PBbUoq\/BXxmqeR8cvjG0i4sY+A3sOXGK3GNqE3UNLWFMigYR90uPFovQddRWVM5q8TktXsYQBAXT1JTG3GhdXW9XBlba7KaaANGS5IatT\/pUWpe+uNsJ5MnZZv3yfAsGJtaXYWtNihCGIR+GLk6o871U9c\/1XoGpEnSC06gF0XX4oTzSx4e2ZlpMNWfUEk3zPLSXPihfvVh\/QJISHNA==","pkt_caplen":220,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACWJVOAbDIffqxgw1SapdoFzyceLv5rJYb+1wZpTnfbmCKG1k1uL6whUbnb8miY2PPGURSWluIl\/sA\/kBrepQTfhNTUVlm7O8HgNXCglshMxqYPF5buCx8a+xJqAf8FYnpCrz3oJlkXjaIp0hGAn4n\/759kGqFXmRO54r5fCQcWPxopKMFCOQU1t8CBaneK0T\/F","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":232,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANgAAEAAQBHZygoYUrwByQGuKBxaBgDE1CqAbDIifqxsA1Sapdozgah+8mzt53LgA4V2uqMn+ecPjUc4Bc384RJFrRbPYppCE+VSdL8wbA4QjLAENowEkxc3Ff90OyBE5GBrLAw8666L13ipvJZoUpwPA0h25JBNjNzJXx9Y70dyA3KX77llOErS+4XF1S8DxYr5g+B+lgsVU0lzeSUoWWywsXMHV379\/BqMiGM64eiPqG05Ryvjpn9GEyWpVi\/aBBUJSYR4tUIQjB0sP1glToiTnSFsgA==","pkt_caplen":232,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHRH8tAHJAa4KGFK8WgQsOACyOAuAbDIgfqxkg1SapdpoOcC+kEVVHGZQymdv59AWt3oWX0ULvulPMZfaKogKp8nUjYtpJhenPC40N6N\/LFVIM6karejSH1IFp74f3yhe1aOHgfoqK\/RGrOGD5nZ8CK07+o\/WZ8R7KyleNSd\/5wGMNS5r5\/SZYSw0htofXU3GLzjy4BRA9Aw\/N6YYlZJYoiyl+fXWXEbgf\/gTyuIpk13sCJdk5Rhz9PAqKa6Q3g==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAQBHZ3AoYUrwByQGuKBxaBgCykNKAbDIjfqxvw1SapdoVuyZgo0keVm2F4ewXtuEyGKLgD0r\/XemmcSRUb3ZXNuQq\/IksCx43b5ESdANj90eXoAQyOfxiLE9eYskLnqlPcQ+prDXof9sh956z7NMVn47QpXGsyKdmSd4RbYkqJOdkxPnwGymRWD9S+Zjb8U9lBflBvXAhf6pIljVrMSGoz3hYU2lNtJIqDWMLTFoi5DsMpSS1B4y4LB\/WD\/boEg==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":225,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANEAAEAAPxHa0QoYUrwByQGuLDhaBAC9iEqAbE+diz0OGguGVRmB6eVFB4+VQAAoQxCwzraZ7rJES2l9grSoJHkt\/DHDoqAXCa+HupiLUQ7g9Wf9iethW89vMfZbp6u9Th28rxOvnnx2KdWBFmCX5cQS9Cff\/cpTJKpAckMxbiZjE1qzB5pXKCfrhKgSjqn+d38ZoKLsfD1N54pXIrIExjEsHScTAHDjPZuv6fYRaQ+0D6fkbshOPwF50DTmpXOCeu89Ya5D41SNz2hxxhvv","pkt_caplen":225,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":213,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxFcmAbE+eiz0R2guGVRlF9XDdD+gErz1WLWUbpCuDbqlW3A5NtDwopRPIVnneq97g0hZmgxe83YYoCjHDf98xkm4hN8Z6TEez\/cd42b7vd9h2v4JsLS6dbORLn4JspGGhDytXLlfzTITZVA2zjzIHpZV33CUu2XXcUTlv0Bc\/3On76wu5T4pCA9D45V04qEBiLCiFrQaXJvKclu\/HjQZ8gMXF6NNsrj8QGvtz","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":212,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHBH9tgHJAa4KGFK8WgYoHACw9nSAbE+aiz0C2guGVRnKpzqoTMr9r6CvKgkIK3ng6diWoezQc7X7nYrlVbN+mhQDGyd2ZDkWH+TsAkiRcDEUQtBjo+uTVohqFLGonmhWKcA4KfwOYIOAPJYscA80jrs+KoaQjEk\/Uz37RGoU+7i7Z3Q0TFyryOhsBck\/IEvDlVHdGAR2wbXOUGzzHoDfaG\/h8fTwnzQs5NdYzWYTdSdenamy9XQDkyGKXuA=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAQBHZ9goYUrwByQGuKBxaBgCYbjyAbDIkfqxzg1SapdqA7TDJuBZNpQUyhMnO8vxfuotheEfRGNF79Orfm3x3jhxexYQWxnhgGEm5mtfQQ3BtM5Prv8NAluTi2YRfuzRcP9OOOYMWj4uEma757Wggw5lr8Bawfgc1U9Y4HM24MmTXySkZ2vJMqNUTmQhTlMhcJ+mH6+lt1vcKSPFXWokbP51zOBs=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":233,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANkAAEAAHRH8oQHJAa4KGFK8WgQsOADFkEqAbDIhfqxoQ1Sapdo3jTSzREIIXeGF9ClVu6G+fqOYerA6cWuD2qkwb6PUcjtQfBNyCsnDA4dIumK62QHOuKgU\/LDKuix+vxqI\/mgmnqZM3miQ\/JqyRUeqOgfIyz8AApQIVNjUkdLcRAx7BcZZ7QOSzSPpCehmbzDTwuajfm3JqTVyMC80pfqP8peg0d\/OOGxz289yFIC98X6iMUnBobL36Q+dlHIp\/uPTsWl8m7gw0LAVljf7aqwehJMnqrk=","pkt_caplen":233,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":193,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdsBKAbE+fiz0VmguGVRnMK9f8J\/IFR6jNJfWkUjGU7c8yOPw8ZS35\/3yOtohjU2vNceH77mrVbIHgHDjbwmqdaon9\/3WYtl6XIvXwAKc5DdbDI5Bo04SGYXxdSaTFSoG2ykm+pu13\/FxLbL2motIA+hHekT+35h18tUEPNyhC1nKmJ0EoDKmNw0TMLsYOZfGWkkfQ2Hfwtg==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2DZKAbE+biz0GmguGVRmk8I3cBeh6d3Ni6Ji\/dp36+tFhllMJ+9CeQzQ4FtMm7elrRaIKgiQKYkVZr1vlrEJ2mj681xY9EzBD+3DD5+NQI4GFHkT+DcwBudloZU7lsusOV6CzbF7RyNqL0Wzy4eGJ6AhFAn7UFgqoL\/W9kacpnC95sMi0ymRX752jsxCctG1J2v117o6irgjdKkdYN7+Va0koG9i0Rhv34w9BpDjF1hg=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAQBHZ+QoYUrwByQGuKBxaBgCVrbyAbDIlfqx3Q1SapdrvBQU\/jkmiebR3VnVnl\/6eFvUqHM\/1qEM\/S5LvLKGU9BRJUJTqYy8POmPsPsNKzTTSLeBxRSA+WoKLd6rhSfB3mjMRWNBvWJNHD0mxFhJH2O9+mdSBmmzqrWQDhGw\/CPhlpjza2FH4e7lEz2OHLcnMWWG6xzAYMdMuiy\/Ktnt7zvw=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":220,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMwAAEAAHBH9rgHJAa4KGFK8WgYoHAC4\/PCAbE+ciz0KWguGVRnoDuS\/Yr8PBbUoq\/BXxmqeR8cvjG0i4sY+A3sOXGK3GNqE3UNLWFMigYR90uPFovQddRWVM5q8TktXsYQBAXT1JTG3GhdXW9XBlba7KaaANGS5IatT\/pUWpe+uNsJ5MnZZv3yfAsGJtaXYWtNihCGIR+GLk6o871U9c\/1XoGpEnSC06gF0XX4oTzSx4e2ZlpMNWfUEk3zPLSXPihfvVh\/QJISHNA==","pkt_caplen":220,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":178,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIAAEAAQBHaAAoYUrwByQGuKBxaBgCOAcWAbDImfqx7A1Sapdof6FxH2gZsFJKP1RIhI8hhgWLTU0QmBdZdxYGqq9+YnCME4i4bKx4sdwJUzEX2mf3xS\/Oa68rBSseBWQ5+Nq+Hok6HB9E2mhuLPc4iR+G9BBm8p+uo0Ro684BZjjL3Wzj8z5Y7Zli74lCJdWYlo6nPsStP6irtvxZKmw==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":232,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANgAAEAAHRH8ogHJAa4KGFK8WgQsOADE0BCAbDIifqxsA1Sapdozgah+8mzt53LgA4V2uqMn+ecPjUc4Bc384RJFrRbPYppCE+VSdL8wbA4QjLAENowEkxc3Ff90OyBE5GBrLAw8666L13ipvJZoUpwPA0h25JBNjNzJXx9Y70dyA3KX77llOErS+4XF1S8DxYr5g+B+lgsVU0lzeSUoWWywsXMHV379\/BqMiGM64eiPqG05Ryvjpn9GEyWpVi\/aBBUJSYR4tUIQjB0sP1glToiTnSFsgA==","pkt_caplen":232,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACVjSSAbE+giz0ZWguGVRnsvJFYyIYZsnktZIa+FitK9v0GPgDBXNVFLEmYS8iJWIMTAwrmRMyCv1aKTb3GqiCfnYirWee1uMSCuG7UZ9DCRkQKlvGsHQD+bG1KB7OgENs0VYoQNCH1YQWysluuBHQ7YjGVB6Xg\/pz9vhII1gTT1QaPkAwTYjjdyR3JPXG\/Qbg=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACYplmAbE+hiz0dGguGVRl2gIDtHP\/l8+KGzCCiIo6Zl50qHVo0UUrN5M7VLsfLylv6zdwDuH09r3WSlB\/kx2fNP5fL8zWPfYYn7r6OLb+f6UiYKZFYxTofswb0ITaQ8csZT9Kq\/KjgNPaYd288QzPXBhoSE80P9EW\/gfmfCeZ82lydamwrjEeQW3S4CrpVq7PYsNY=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":167,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAQBHaCwoYUrwByQGuKBxaBgCDA+6AbDInfqx+w1SapdrgstEqMMvJ1jRfjIftyEkrVRZCnW0wilAnhIWnwGHAVCHKyqvUru77Z5IkAmhCIt67HqC33C5Y5G4bwb\/Y9KTUd5UzJ5Nema1CH+kIf79fq3TdkTaMpuqsonp8BaF8GtpuOoQCgTctjgotYsZ0rko=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHRH8tAHJAa4KGFK8WgQsOACyjLiAbDIjfqxvw1SapdoVuyZgo0keVm2F4ewXtuEyGKLgD0r\/XemmcSRUb3ZXNuQq\/IksCx43b5ESdANj90eXoAQyOfxiLE9eYskLnqlPcQ+prDXof9sh956z7NMVn47QpXGsyKdmSd4RbYkqJOdkxPnwGymRWD9S+Zjb8U9lBflBvXAhf6pIljVrMSGoz3hYU2lNtJIqDWMLTFoi5DsMpSS1B4y4LB\/WD\/boEg==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":225,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANEAAEAAHBH9qQHJAa4KGFK8WgYoHAC9jGSAbE+diz0OGguGVRmB6eVFB4+VQAAoQxCwzraZ7rJES2l9grSoJHkt\/DHDoqAXCa+HupiLUQ7g9Wf9iethW89vMfZbp6u9Th28rxOvnnx2KdWBFmCX5cQS9Cff\/cpTJKpAckMxbiZjE1qzB5pXKCfrhKgSjqn+d38ZoKLsfD1N54pXIrIExjEsHScTAHDjPZuv6fYRaQ+0D6fkbshOPwF50DTmpXOCeu89Ya5D41SNz2hxxhvv","pkt_caplen":225,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBq+euByAAMVJql2vzdEHtzVkuLwbh85caR8kjCcDaL3PS\/PCBmHKFhUSVDzj8AsEmUKMXA4RVxQRjLhRRrd\/\/nqFxlHC1t4TMWO5IABN8HcsyrvgJSoh6AAAAFwPG5g0w8m5sYNA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":181,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAQBHZ\/QoYUrwByQGuKBxaBgCRv7CAbDIofqyCg1SapdoDmzQukvOdzh9a4uGrvdwVTc\/PTnrfh1bYDTAf5zEALBg+RumQ+7JcOpFbi3uH3bBwo8xdlbMriNlLsSQV\/ccI91yIqTcxR8FKnJoAEdjr6wlG3mD83sGP562a3epD4lNVinIaouoAn+rRCwbuPSDU1rRrdM0qxl4vQ\/rQbw==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":158,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAPxHbFAoYUrwByQGuLDhaBAB6+\/OAbE+iiz0g2guGVRliImPXG\/bIdgMOzZSRTxVEmvrOVPutpL\/GoHCGy0e38tDyUdN3qYzCvyQjFSJHsExYo7h9Nxez+dct9bQMDKtv3zvqLC3I1Kexb\/m7XJaFa9\/Pvh51aYJngyvf+eyfUEEFExciUms=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":145,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAPxHbIQoYUrwByQGuLDhaBABtTl2AbE+jiz0kmguGVRmNstBwG7Gjfec9\/rmm\/eWJBgLxuVhdiXTQ9CrijPh4XAvHSmVuW7F+CPG33kVjX8tewq+WdfLlkIzmWw93AW1lWRcu7EhW55Zy88DPaGrD9m70DOqsqqVAhw==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":213,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACxGeOAbE+eiz0R2guGVRlF9XDdD+gErz1WLWUbpCuDbqlW3A5NtDwopRPIVnneq97g0hZmgxe83YYoCjHDf98xkm4hN8Z6TEez\/cd42b7vd9h2v4JsLS6dbORLn4JspGGhDytXLlfzTITZVA2zjzIHpZV33CUu2XXcUTlv0Bc\/3On76wu5T4pCA9D45V04qEBiLCiFrQaXJvKclu\/HjQZ8gMXF6NNsrj8QGvtz","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAQBHZ6woYUrwByQGuKBxaBgCjNo2AbDIpfqyGQ1SapdqBt6hq0ZH3ZxpY7Nl6Mjufe2Z5wCDsU6zedQGlcH3h7SYZEsSjOD7x4nrn0sPNbPhQ9GLQaqCsBGyIz7+kAQdJnl2oHxcgnrmPGvqN6JdZPunh1drPQRJRrBBBq74LDsAFJ\/hb4\/vRqzPXTAqJ\/IQWERqYuhauNmajJN+eDx4sdTR8RDBE5vpJiJvV2rfWNw==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHRH8zgHJAa4KGFK8WgQsOACYaiKAbDIkfqxzg1SapdqA7TDJuBZNpQUyhMnO8vxfuotheEfRGNF79Orfm3x3jhxexYQWxnhgGEm5mtfQQ3BtM5Prv8NAluTi2YRfuzRcP9OOOYMWj4uEma757Wggw5lr8Bawfgc1U9Y4HM24MmTXySkZ2vJMqNUTmQhTlMhcJ+mH6+lt1vcKSPFXWokbP51zOBs=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAPxHbIgoYUrwByQGuLDhaBABsTUSAbE+kiz0oWguGVRmGB29YbNIMk7LLC6JhgkJkWDt5XGcM4Z0vi4G+WrHMsqqSnw0qgR9nyethns6G4REKivqdtV7WAVUtYrcYSLqO96k5sKAS4iXU04jUronv67wmWJX1Gt+B","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":193,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdtCyAbE+fiz0VmguGVRnMK9f8J\/IFR6jNJfWkUjGU7c8yOPw8ZS35\/3yOtohjU2vNceH77mrVbIHgHDjbwmqdaon9\/3WYtl6XIvXwAKc5DdbDI5Bo04SGYXxdSaTFSoG2ykm+pu13\/FxLbL2motIA+hHekT+35h18tUEPNyhC1nKmJ0EoDKmNw0TMLsYOZfGWkkfQ2Hfwtg==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":224,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAQBHZ0goYUrwByQGuKBxaBgC8zcOAbDIqfqyKA1SapdpQtEc+hdglF3JQTTBBhwA0T0O9ABdgOWHVjc6tBStCBz3gBnQsFTkBlimx2x6izSQM1NRPiBV+9d5IKBGQmdCfZYonmVJpOETEvEMcjRcHvyhwNLTZfWziObh1T\/2pxiHzTlvvp8ScC1LAs9uCRnITgrmWIXC6qh95Uehwu94QGwB6wRA2aUwlteJhv\/uUprs2ZcDOEAGinw17DjTG0yrCJhs8Uh09798=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHRH80QHJAa4KGFK8WgQsOACVqaKAbDIlfqx3Q1SapdrvBQU\/jkmiebR3VnVnl\/6eFvUqHM\/1qEM\/S5LvLKGU9BRJUJTqYy8POmPsPsNKzTTSLeBxRSA+WoKLd6rhSfB3mjMRWNBvWJNHD0mxFhJH2O9+mdSBmmzqrWQDhGw\/CPhlpjza2FH4e7lEz2OHLcnMWWG6xzAYMdMuiy\/Ktnt7zvw=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":229,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANUAAEAAQBHZzQoYUrwByQGuKBxaBgDB8RKAbDIrfqyNw1SapdoXlPd6KrXNOAapJZF+WY+wkr+kd86ir6bh7Y9QU9wsPvAQ+LiUeGUTvhs2Xz4KHWMZNs6zwPSbJrevz3K6CEh7g+mYJUGWvzaPP+ylSO78MlFmJarYQh4KpsTpO5eS0KQOSAQEizwkqZbP9DtImB8j7vXqY21aN2y37EqZgGIS7lJlGgeGJh6pwybvjGhdfSD0lIgwNadjJSRO\/QlLIbzZbfTF+C+FlDVA0wQ0WA==","pkt_caplen":229,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":178,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKIAAEAAHRH82AHJAa4KGFK8WgQsOACO\/aqAbDImfqx7A1Sapdof6FxH2gZsFJKP1RIhI8hhgWLTU0QmBdZdxYGqq9+YnCME4i4bKx4sdwJUzEX2mf3xS\/Oa68rBSseBWQ5+Nq+Hok6HB9E2mhuLPc4iR+G9BBm8p+uo0Ro684BZjjL3Wzj8z5Y7Zli74lCJdWYlo6nPsStP6irtvxZKmw==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqPD2ByAAMC4ZVGcUjApy2sue2tvDaN2KXPaYSbTfXaSG+ITJBdxGS4Z7v96DyWGv1vboRBsIe1PTM7lRMYuB6d0wicOv2m8voT\/jI4qNuL+yAlVSZpvyAAAAFsvRi3qH3s9CHuQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAPxHbIgoYUrwByQGuLDhaBABsA4eAbE+liz0sGguGVRknvlAHd3LsnZl0OGErNWFIO3Tw4oBxwAZTuEwdzkNLaT\/pCaQ5XArw1Rxsdvca+NaaHLQ+EPfavF4Ax1XbpjwILYJkpLaYu8SPdtDSdcikhKblLe4ICDoa","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvp9qAbE+miz0v2guGVRkwUkAi8tSMQ4XUGmGF0qjEqlTmAE83Ua3dnIIaCmBjLiub8hCqC\/DmmcJ1vwRrhFlDGU7gV17lPHX7HX7fShgav6C4D8tLMLwfVQrwQy1cjsVU2351sb5ulAR3","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACVkT6AbE+giz0ZWguGVRnsvJFYyIYZsnktZIa+FitK9v0GPgDBXNVFLEmYS8iJWIMTAwrmRMyCv1aKTb3GqiCfnYirWee1uMSCuG7UZ9DCRkQKlvGsHQD+bG1KB7OgENs0VYoQNCH1YQWysluuBHQ7YjGVB6Xg\/pz9vhII1gTT1QaPkAwTYjjdyR3JPXG\/Qbg=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":169,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAQBHaCQoYUrwByQGuKBxaBgCF\/C+AbDIsfqyRg1Sapdp3HdP0PmaFqIchJ79K0WcHDnmA5UUJLHk+EuzsrOWHiJuk32Le\/XkT7IG17byfvM4PbHfrXO\/M3wHtxRG6YJjVV1sqVahu9eTRes2PJh5ISgXKKYkooliIyaCwa4H5THgklovfdxMMCTuctsCADDce1Q==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACYqnOAbE+hiz0dGguGVRl2gIDtHP\/l8+KGzCCiIo6Zl50qHVo0UUrN5M7VLsfLylv6zdwDuH09r3WSlB\/kx2fNP5fL8zWPfYYn7r6OLb+f6UiYKZFYxTofswb0ITaQ8csZT9Kq\/KjgNPaYd288QzPXBhoSE80P9EW\/gfmfCeZ82lydamwrjEeQW3S4CrpVq7PYsNY=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":167,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHRH84wHJAa4KGFK8WgQsOACD\/9OAbDInfqx+w1SapdrgstEqMMvJ1jRfjIftyEkrVRZCnW0wilAnhIWnwGHAVCHKyqvUru77Z5IkAmhCIt67HqC33C5Y5G4bwb\/Y9KTUd5UzJ5Nema1CH+kIf79fq3TdkTaMpuqsonp8BaF8GtpuOoQCgTctjgotYsZ0rko=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBq9dGByAAMVJql2vzdEHtzVkuLwbh85caR8kjCcDaL3PS\/PCBmHKFhUSVDzj8AsEmUKMXA4RVxQRjLhRRrd\/\/nqFxlHC1t4TMWO5IABN8HcsyrvgJSoh6AAAAFwPG5g0w8m5sYNA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":181,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHRH81QHJAa4KGFK8WgQsOACRu5aAbDIofqyCg1SapdoDmzQukvOdzh9a4uGrvdwVTc\/PTnrfh1bYDTAf5zEALBg+RumQ+7JcOpFbi3uH3bBwo8xdlbMriNlLsSQV\/ccI91yIqTcxR8FKnJoAEdjr6wlG3mD83sGP562a3epD4lNVinIaouoAn+rRCwbuPSDU1rRrdM0qxl4vQ\/rQbw==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":158,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHBH97AHJAa4KGFK8WgYoHAB6AA6AbE+iiz0g2guGVRliImPXG\/bIdgMOzZSRTxVEmvrOVPutpL\/GoHCGy0e38tDyUdN3qYzCvyQjFSJHsExYo7h9Nxez+dct9bQMDKtv3zvqLC3I1Kexb\/m7XJaFa9\/Pvh51aYJngyvf+eyfUEEFExciUms=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHBH9+QHJAa4KGFK8WgYoHABtUneAbE+jiz0kmguGVRmNstBwG7Gjfec9\/rmm\/eWJBgLxuVhdiXTQ9CrijPh4XAvHSmVuW7F+CPG33kVjX8tewq+WdfLlkIzmWw93AW1lWRcu7EhW55Zy88DPaGrD9m70DOqsqqVAhw==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHRH8wwHJAa4KGFK8WgQsOACjMnOAbDIpfqyGQ1SapdqBt6hq0ZH3ZxpY7Nl6Mjufe2Z5wCDsU6zedQGlcH3h7SYZEsSjOD7x4nrn0sPNbPhQ9GLQaqCsBGyIz7+kAQdJnl2oHxcgnrmPGvqN6JdZPunh1drPQRJRrBBBq74LDsAFJ\/hb4\/vRqzPXTAqJ\/IQWERqYuhauNmajJN+eDx4sdTR8RDBE5vpJiJvV2rfWNw==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":184,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAQBHZ+goYUrwByQGuKBxaBgCUJ4aAbDItfqyVQ1SapdpAZySb0uAL\/lSSxxeThz2TyVYHBilqNZyInuPM+3mw9rnlgAx0B0PobstYfJI14Rv2hbSzudsh76JDQ1WrSGmPZYFzcTG9uvlEl7EWRqkvZgzKLJKMau+vAhI7RfB9clq5uhSu03PtlVmdNDmxiaSQnN5+A0dB55SNA9DN8M16NQ==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":151,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABz41uAbE+niz0zmguGVRliY2qOrgt2uz2Eu\/s8vO9DP8qRZQSK8c7b8aL5ZCDgenFaaTh9Xv8pknolRwT5lLa8vzjeXDeDAAzSENluzdKRU\/9mTmmeqB+XU1nwilJN\/K5Yw6Gqk5gRZHwO0\/xWDQ==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":126,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaDDuAbE+oiz03WguGVRnw6O3wcxHICWJa1Z1394pFlC2FmtuYTf3W+BUnu2A6C6AI3pw0eoc9T19a+Q01qH2PTanZd2c2AP2SKdG7h+nJbOZloH\/j","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHBH9+gHJAa4KGFK8WgYoHABsUV6AbE+kiz0oWguGVRmGB29YbNIMk7LLC6JhgkJkWDt5XGcM4Z0vi4G+WrHMsqqSnw0qgR9nyethns6G4REKivqdtV7WAVUtYrcYSLqO96k5sKAS4iXU04jUronv67wmWJX1Gt+B","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":224,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHRH8qgHJAa4KGFK8WgQsOAC8yamAbDIqfqyKA1SapdpQtEc+hdglF3JQTTBBhwA0T0O9ABdgOWHVjc6tBStCBz3gBnQsFTkBlimx2x6izSQM1NRPiBV+9d5IKBGQmdCfZYonmVJpOETEvEMcjRcHvyhwNLTZfWziObh1T\/2pxiHzTlvvp8ScC1LAs9uCRnITgrmWIXC6qh95Uehwu94QGwB6wRA2aUwlteJhv\/uUprs2ZcDOEAGinw17DjTG0yrCJhs8Uh09798=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":187,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAQBHZ9woYUrwByQGuKBxaBgCX2DWAbDIufqyZA1SapdqgIHbZfdO9XYGA4mV6vtbatEvcskP80JKYTn7YvqS\/7+D1\/m+2XoPU7Wj9d10GAX+lgtM7JfW0OwxNHNLiSPdQ+GAxl6be\/g1CXuksDgu3dUvO24c5ucHGHngn8pNQHPZ6DNuyaNxJfcnrHtbY2oD9i46KmQSibjEmjdEY1s205gRATw==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":202,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAQBHZ6AoYUrwByQGuKBxaBgCmPIuAbDIvfqycw1SapdpQS\/nvOI+Lz+jntihVnVXpXj6ZOejl4spX+GOTvPKB+xwSbYuyrJ5a60sVL45FNE4t0NM7iuBdbxn\/S1gn0XhF9zmy1ZF1NdtV3+qsJLG9OJ2OQT06iSUhQFDpnfbpUxjDyMOMSd8pflGf6eu5pkbXjZeK8THQXxUHs8pqTk1dgEMPqnmHLR7zjq0iJF6Fsnp6CA==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":229,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANUAAEAAHRH8pQHJAa4KGFK8WgQsOADB7PiAbDIrfqyNw1SapdoXlPd6KrXNOAapJZF+WY+wkr+kd86ir6bh7Y9QU9wsPvAQ+LiUeGUTvhs2Xz4KHWMZNs6zwPSbJrevz3K6CEh7g+mYJUGWvzaPP+ylSO78MlFmJarYQh4KpsTpO5eS0KQOSAQEizwkqZbP9DtImB8j7vXqY21aN2y37EqZgGIS7lJlGgeGJh6pwybvjGhdfSD0lIgwNadjJSRO\/QlLIbzZbfTF+C+FlDVA0wQ0WA==","pkt_caplen":229,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABe6VyAbE+piz07GguGVRmkjpUOv7yrbYPKySP6OsmNoQa14h4e2YZJEk85BVcFgEWFCJTEyboo8FifcFCCFvj30hxSoZfEFpOWNE9sp+isCBDUsPbSHkBD4A==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBqQFeByAAMC4ZVGcUjApy2sue2tvDaN2KXPaYSbTfXaSG+ITJBdxGS4Z7v96DyWGv1vboRBsIe1PTM7lRMYuB6d0wicOv2m8voT\/jI4qNuL+yAlVSZpvyAAAAFsvRi3qH3s9CHuQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHBH9+gHJAa4KGFK8WgYoHABsB6GAbE+liz0sGguGVRknvlAHd3LsnZl0OGErNWFIO3Tw4oBxwAZTuEwdzkNLaT\/pCaQ5XArw1Rxsdvca+NaaHLQ+EPfavF4Ax1XbpjwILYJkpLaYu8SPdtDSdcikhKblLe4ICDoa","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":173,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ0AAEAAQBHaBQoYUrwByQGuKBxaBgCJjG6AbDIwfqygg1SapdovZVoZPSfyuxaGYo1plfVyNT0\/J6j71kTNRCCaDz5uF69gS0TC7UDwGLOmVKWHXaME4rXkoUZO1E3GIjCVJklsJ4lb0\/GGYLYi4DM6JXVORPQhW9qHjXFDg\/iy6qpBOapEVGsoqP2IG8BM4qEMo1xmZRrhk+M=","pkt_caplen":173,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAPxHbLAoYUrwByQGuLDhaBABi2AeAbE+qiz0+2guGVRkhMHXd+83nxGzphFEmJ2iCj8eJnZYjc3ClFriElpS57pq+1OoeBFcXKUaX6rS1i16Dl8KTQmcionYSFOes0b\/IidJ7ML\/lXm1cduoih24=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAPxHbOgoYUrwByQGuLDhaBABURhiAbE+riz1CmguGVRkbhfQ\/tA0EVh8US1vNdA0KZ7wqcF0nqADu70OI03iFBExKp6ZHF2IhQ2kzpll8\/Oud2fLXnkGa102WNniPKF0T","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmgqGAbDIxfqykQ1SapdolxvElye+bOUv+YktCPovN3JtjTgnrpsVyA63pReOLF1YDfcfiwGhMWrPIFLVm3fBrXKLEPhIAjkhiV7Gk97OPic2LgnGPIBWeqDI+2FSTKfJ0","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":147,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvq\/SAbE+miz0v2guGVRkwUkAi8tSMQ4XUGmGF0qjEqlTmAE83Ua3dnIIaCmBjLiub8hCqC\/DmmcJ1vwRrhFlDGU7gV17lPHX7HX7fShgav6C4D8tLMLwfVQrwQy1cjsVU2351sb5ulAR3","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069185,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZwvSAbDIyfqyoA1Sapdqdi98JxyD7KONCTCly0\/b9LWBxi3i+EWvURoYqsildD3AD5msVd\/CX8XWsUIp6DB1CThER\/eWxTxq4zPTSB+Zv6YZnHJc=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPkMSAbE+siz1GWguGVRnWn3XxLO9yWvNrlJYYcI5lrQ3kmrd9Q49SsITpAlBqJ9jXD8TyWdKzEc8ucGVlTxRDiaJFW3oi7iCgcw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIEy2AbE+tiz1KGguGVRnklM5X4A17NwhC0pteQVPFFQ9HNaeaf28vE4FUOjqn3o1VqlPjprxCWMUtE4f9fQ0xe7rB","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":163,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAQBHaDwoYUrwByQGuKBxaBgB\/9\/GAbDIzfqyrw1SapdrPayCd0AcstN8VdewjNQu2Pk7cPdYiLV4NFpCcaHsc3rRNpR6xrOFrzRuYucm+K2HMNchmgwMLmcsVozMMO3DJU5lVDQSgo0EwjkkThHMnGPJo8aULSHy0zZtWCsnoy1d\/Fvd5E77XMOAXaQ==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":169,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHRH84QHJAa4KGFK8WgQsOACF+BWAbDIsfqyRg1Sapdp3HdP0PmaFqIchJ79K0WcHDnmA5UUJLHk+EuzsrOWHiJuk32Le\/XkT7IG17byfvM4PbHfrXO\/M3wHtxRG6YJjVV1sqVahu9eTRes2PJh5ISgXKKYkooliIyaCwa4H5THgklovfdxMMCTuctsCADDce1Q==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmfLuAbDI0fqyvg1SapdoOPQ5ZVqy+04cn5eayouJwmsijt9FJzE90UJ162oNko9TZYRfOMZREdNWPXfOoIBxfyymTFYtYbh3+Qkd4kSqXnq5ChUdnlotzgvLg1MntHdDX","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJsBmAbE+uiz1N2guGVRkkyCd9hNvO9ldjkB0Y2Ytne6UE7WOcm5ZEsaElLqbFIQve5JXKz5m4aG2on+XvI2NLgy7L8A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":184,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHRH80gHJAa4KGFK8WgQsOACUI2yAbDItfqyVQ1SapdpAZySb0uAL\/lSSxxeThz2TyVYHBilqNZyInuPM+3mw9rnlgAx0B0PobstYfJI14Rv2hbSzudsh76JDQ1WrSGmPZYFzcTG9uvlEl7EWRqkvZgzKLJKMau+vAhI7RfB9clq5uhSu03PtlVmdNDmxiaSQnN5+A0dB55SNA9DN8M16NQ==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":151,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABz53WAbE+niz0zmguGVRliY2qOrgt2uz2Eu\/s8vO9DP8qRZQSK8c7b8aL5ZCDgenFaaTh9Xv8pknolRwT5lLa8vzjeXDeDAAzSENluzdKRU\/9mTmmeqB+XU1nwilJN\/K5Yw6Gqk5gRZHwO0\/xWDQ==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWNt2AbDI1fqyzQ1SapdoPt2BPUZPg0Q0FBLtyhnOd18djz\/s\/OHiFe2aP7pqtVgW8kP2v0iQg1DceXMpNbRxj\/S9f87jruA+c8RlsUi4o0qs=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABaEFWAbE+oiz03WguGVRnw6O3wcxHICWJa1Z1394pFlC2FmtuYTf3W+BUnu2A6C6AI3pw0eoc9T19a+Q01qH2PTanZd2c2AP2SKdG7h+nJbOZloH\/j","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPDfqAbE+viz1RmguGVRmey5dSUV\/9limRiA0J16leELRC8J8TS1iYSKPlxCEr\/Feql7HVRGD24b9b0eGNFifLftm0VzT\/iGQn7g==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAPxHbKQoYUrwByQGuLDhaBABlCouAbE+wiz1VWguGVRlYa9K8Bqe2QwroJZ5vkyMbPfj6yQ\/\/IgRxSlxBmKyrb\/qdmSIJrBoMLJIlZE6y07u0y2Hi1RFCReofiLfva\/\/8ocb516t4r5ZgyyVY8bMIYKI=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":187,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHRH8zwHJAa4KGFK8WgQsOACX1BuAbDIufqyZA1SapdqgIHbZfdO9XYGA4mV6vtbatEvcskP80JKYTn7YvqS\/7+D1\/m+2XoPU7Wj9d10GAX+lgtM7JfW0OwxNHNLiSPdQ+GAxl6be\/g1CXuksDgu3dUvO24c5ucHGHngn8pNQHPZ6DNuyaNxJfcnrHtbY2oD9i46KmQSibjEmjdEY1s205gRATw==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBOWIiAbDI2fqy3A1SapdqiCYm1\/AGDKEATZwXPIsxtlHVYjhFTqhrY9Y4BCbTsHnVnMJWY+g3nOMs+oIEUOID6pI99raK\/lnmL","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":202,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHRH8wAHJAa4KGFK8WgQsOACmOHGAbDIvfqycw1SapdpQS\/nvOI+Lz+jntihVnVXpXj6ZOejl4spX+GOTvPKB+xwSbYuyrJ5a60sVL45FNE4t0NM7iuBdbxn\/S1gn0XhF9zmy1ZF1NdtV3+qsJLG9OJ2OQT06iSUhQFDpnfbpUxjDyMOMSd8pflGf6eu5pkbXjZeK8THQXxUHs8pqTk1dgEMPqnmHLR7zjq0iJF6Fsnp6CA==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABe7XaAbE+piz07GguGVRmkjpUOv7yrbYPKySP6OsmNoQa14h4e2YZJEk85BVcFgEWFCJTEyboo8FifcFCCFvj30hxSoZfEFpOWNE9sp+isCBDUsPbSHkBD4A==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABO3+qAbE+xiz1ZGguGVRnGpnlpGndIygWQ1BotQIoyohnQPc4BEotm+R9TtmOFXIqDgqAwKzlQzqwHbAkA6z71iPZMlxYds\/jT","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPIsaAbE+yiz1c2guGVRlQhQ4qfzAiVni0ih\/+w4PJXodxTF4x5CXU5bgSlfarvq2uIa+xRhlweFv9e2k4sfCpt5+warfA8maUcA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWKFqAbDI3fqy6w1SapdqLClW9QJfTRBEcY9lRZpGyaYuCZs5iepzewg\/n8bnzHNpYoPLz8Cx6Pi98MnYCwSpYo7EGZDOeaGHefxIUk1Vw1E0=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":173,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ0AAEAAHRH83QHJAa4KGFK8WgQsOACJiFSAbDIwfqygg1SapdovZVoZPSfyuxaGYo1plfVyNT0\/J6j71kTNRCCaDz5uF69gS0TC7UDwGLOmVKWHXaME4rXkoUZO1E3GIjCVJklsJ4lb0\/GGYLYi4DM6JXVORPQhW9qHjXFDg\/iy6qpBOapEVGsoqP2IG8BM4qEMo1xmZRrhk+M=","pkt_caplen":173,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHBH+BAHJAa4KGFK8WgYoHABi3CGAbE+qiz0+2guGVRkhMHXd+83nxGzphFEmJ2iCj8eJnZYjc3ClFriElpS57pq+1OoeBFcXKUaX6rS1i16Dl8KTQmcionYSFOes0b\/IidJ7ML\/lXm1cduoih24=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHBH+EgHJAa4KGFK8WgYoHABUSjKAbE+riz1CmguGVRkbhfQ\/tA0EVh8US1vNdA0KZ7wqcF0nqADu70OI03iFBExKp6ZHF2IhQ2kzpll8\/Oud2fLXnkGa102WNniPKF0T","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmfoeAbDIxfqykQ1SapdolxvElye+bOUv+YktCPovN3JtjTgnrpsVyA63pReOLF1YDfcfiwGhMWrPIFLVm3fBrXKLEPhIAjkhiV7Gk97OPic2LgnGPIBWeqDI+2FSTKfJ0","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdIMyAbDI4fqy+g1Sapdo1Vms9C5B6QBfdEk1HyNp6Gj+Ba0bGm1xJhlNOJpm3LjsjyDz8fSNqpDoS9V7+xsy8wliZiqxSeDEzwGfDFSermJmHzGyfak\/g","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPuqCAbE+ziz1gmguGVRkGTWkTMXoPDM3XTxGWviPKM1CGl8CFuZKd4bpEWwFcpP\/EH1iqAdCnJQ2hFP4H980aQk6ujvkNxfn+IQ==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBekaGAbDI5fqzCQ1SapdpaQLQ4ej9D6xe8KZKZopLPNMpa11CsNPyCTji6+sAD5qzKM0JDyyF0kK5o8HhD2iKDWrIBOULYuPeml0jQG3u0\/PO\/nP8DiBGcqw==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZvtqAbDIyfqyoA1Sapdqdi98JxyD7KONCTCly0\/b9LWBxi3i+EWvURoYqsildD3AD5msVd\/CX8XWsUIp6DB1CThER\/eWxTxq4zPTSB+Zv6YZnHJc=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPlN6AbE+siz1GWguGVRnWn3XxLO9yWvNrlJYYcI5lrQ3kmrd9Q49SsITpAlBqJ9jXD8TyWdKzEc8ucGVlTxRDiaJFW3oi7iCgcw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIF0eAbE+tiz1KGguGVRnklM5X4A17NwhC0pteQVPFFQ9HNaeaf28vE4FUOjqn3o1VqlPjprxCWMUtE4f9fQ0xe7rB","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZfTCAbDI6fqzGA1Sapdpij\/VOmo7kNJRtYnlnANmeQXxGkG7UIG4gUR80UK2LtNC3ybnjIUdz9gkoOoQeoS0vHopoqas2PvwKHfE8TKQ33zLguRA=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":163,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHRH85wHJAa4KGFK8WgQsOAB\/89eAbDIzfqyrw1SapdrPayCd0AcstN8VdewjNQu2Pk7cPdYiLV4NFpCcaHsc3rRNpR6xrOFrzRuYucm+K2HMNchmgwMLmcsVozMMO3DJU5lVDQSgo0EwjkkThHMnGPJo8aULSHy0zZtWCsnoy1d\/Fvd5E77XMOAXaQ==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABR27GAbE+0iz1kWguGVRlqTyyP6vQKMFBqiIi\/Xru8cHPcK3nmAX1kLL1LjyJZyq17CdWpByKl8by2zFwuBWM+xioKSiX+0vKkILsY","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABAh1mAbE+1iz1oGguGVRkFHPha3JMK2enpMWnuY2zogb7A4kHGjMgkbEAEsNHUS0s34YvInTUyb2R9Ow==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmeKGAbDI0fqyvg1SapdoOPQ5ZVqy+04cn5eayouJwmsijt9FJzE90UJ162oNko9TZYRfOMZREdNWPXfOoIBxfyymTFYtYbh3+Qkd4kSqXnq5ChUdnlotzgvLg1MntHdDX","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJtDOAbE+uiz1N2guGVRkkyCd9hNvO9ldjkB0Y2Ytne6UE7WOcm5ZEsaElLqbFIQve5JXKz5m4aG2on+XvI2NLgy7L8A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWMsOAbDI1fqyzQ1SapdoPt2BPUZPg0Q0FBLtyhnOd18djz\/s\/OHiFe2aP7pqtVgW8kP2v0iQg1DceXMpNbRxj\/S9f87jruA+c8RlsUi4o0qs=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXMpWAbDI7fqzJw1Sapdr8KyT8KUHpsoAl6HwbYn7i1CScfIK7K3JAWKWcMTrbw3pshFqQQhvorRAL\/YlpDOucBKeRrRvOzWal4b33F8yA8Br2","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPEhSAbE+viz1RmguGVRmey5dSUV\/9limRiA0J16leELRC8J8TS1iYSKPlxCEr\/Feql7HVRGD24b9b0eGNFifLftm0VzT\/iGQn7g==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHBH+AQHJAa4KGFK8WgYoHABlDqWAbE+wiz1VWguGVRlYa9K8Bqe2QwroJZ5vkyMbPfj6yQ\/\/IgRxSlxBmKyrb\/qdmSIJrBoMLJIlZE6y07u0y2Hi1RFCReofiLfva\/\/8ocb516t4r5ZgyyVY8bMIYKI=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":124,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBY0fGAbDI8fqzNg1SapdqbqljgXpF1PcxkxRbZ+WyHXJ\/UKiGAiFiZm5BYiADg5cXtZWFtkf8foFcVA1Rih4BAIr0QlFmOt6IkIwy1lTcRU1j1Cg==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDMpaAbE+2iz1r2guGVRkrUr\/jTaN4VmI9HNsS7niRdw3MNCEOMVm6ykh\/S4jA0YDnQGyJfglouiZAAzb22A==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/7rKAbE+3iz1vmguGVRns\/1ip+WfoJe8JobRsefMWdKPp7iDafl5bWE1Qd5oPs+ypbeH8sdcOrgbd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOVG6AbDI2fqy3A1SapdqiCYm1\/AGDKEATZwXPIsxtlHVYjhFTqhrY9Y4BCbTsHnVnMJWY+g3nOMs+oIEUOID6pI99raK\/lnmL","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABO5ASAbE+xiz1ZGguGVRnGpnlpGndIygWQ1BotQIoyohnQPc4BEotm+R9TtmOFXIqDgqAwKzlQzqwHbAkA6z71iPZMlxYds\/jT","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPJuCAbE+yiz1c2guGVRlQhQ4qfzAiVni0ih\/+w4PJXodxTF4x5CXU5bgSlfarvq2uIa+xRhlweFv9e2k4sfCpt5+warfA8maUcA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBU8YaAbDI9fqzRQ1SapdpManX9tkd5bhoPmioagojPLfyvFk7YnJ6HDSn7m9aazmW9gu8esOPrHz7H5NUA4nhHRl9oGNY1EdpTUhnYerD+","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWJECAbDI3fqy6w1SapdqLClW9QJfTRBEcY9lRZpGyaYuCZs5iepzewg\/n8bnzHNpYoPLz8Cx6Pi98MnYCwSpYo7EGZDOeaGHefxIUk1Vw1E0=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdHLKAbDI4fqy+g1Sapdo1Vms9C5B6QBfdEk1HyNp6Gj+Ba0bGm1xJhlNOJpm3LjsjyDz8fSNqpDoS9V7+xsy8wliZiqxSeDEzwGfDFSermJmHzGyfak\/g","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPvrqAbE+ziz1gmguGVRkGTWkTMXoPDM3XTxGWviPKM1CGl8CFuZKd4bpEWwFcpP\/EH1iqAdCnJQ2hFP4H980aQk6ujvkNxfn+IQ==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/vTyAbE+4iz1zWguGVRknjp8TOzjgbMgERhr\/\/V4UGmXA71lqC9KM\/7uvaTlxeCNw2sx3k++LpYhv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJLEiAbDI+fqzVA1SapdrniHbKSianfxQpaCv+rkWgPVs8xmhsYk2FtiGs0Zp1SZl1r2WSJahd\/QP\/XO3aa8U0r8MH2w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABejYeAbDI5fqzCQ1SapdpaQLQ4ej9D6xe8KZKZopLPNMpa11CsNPyCTji6+sAD5qzKM0JDyyF0kK5o8HhD2iKDWrIBOULYuPeml0jQG3u0\/PO\/nP8DiBGcqw==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLpKeAbDI\/fqzYw1SapdoXOQ7pnPBorOXIo5+k+Sgk0drc0QWGnlJ6LF\/vc8Zmr\/TtxE+\/NrMiw0JjmtReFHf1Rc+GMT65","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZeRaAbDI6fqzGA1Sapdpij\/VOmo7kNJRtYnlnANmeQXxGkG7UIG4gUR80UK2LtNC3ybnjIUdz9gkoOoQeoS0vHopoqas2PvwKHfE8TKQ33zLguRA=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/zWSAbE+5iz13GguGVRnCc3WpnJ9KOINqV\/peo4LmfYMq4W3LlAWY1nYY4vhJqVcmKmZYd7485nrY","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABApbiAbE+6iz162guGVRl+fdxorpl0aCKgPZAAVQbiEtPKFcgH5r5Gf9Kax3UXGddRufDbMP82d6vwUQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHBH+FQHJAa4KGFK8WgYoHABR38uAbE+0iz1kWguGVRlqTyyP6vQKMFBqiIi\/Xru8cHPcK3nmAX1kLL1LjyJZyq17CdWpByKl8by2zFwuBWM+xioKSiX+0vKkILsY","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAi3OAbE+1iz1oGguGVRkFHPha3JMK2enpMWnuY2zogb7A4kHGjMgkbEAEsNHUS0s34YvInTUyb2R9Ow==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPkwmAbDJAfqzcg1SapdoFBDGnKs\/\/6osS3XAjmOeO8vS8EV5KtdkFuu1kBju1jz\/adWxNMz6ERA0Zmm3Q37ZqIG7WgwwBnv+T8Q==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXLnuAbDI7fqzJw1Sapdr8KyT8KUHpsoAl6HwbYn7i1CScfIK7K3JAWKWcMTrbw3pshFqQQhvorRAL\/YlpDOucBKeRrRvOzWal4b33F8yA8Br2","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQ8UaAbDJBfqzgQ1SapdodovP6R5PvwlXYfTdo4Hy7JBhCRZabCBkqEHvajU1w0AAZisRgRnhK2vjzC7Hi7qYJPBmrIRfIMA2piPg=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/GFGAbE+7iz1+mguGVRn4umxj40aYpGJKjRh2puNTwBZAstl+wNzMJjGYS5nTHfsFfcwflaNKakQ+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/LmyAbE+8iz2CWguGVRn1n65y4S3BFuBMlNDZSZAOqRmvInAvaWpRhZoc17HkL5vWR7yej+rbyPZ4","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYzdeAbDI8fqzNg1SapdqbqljgXpF1PcxkxRbZ+WyHXJ\/UKiGAiFiZm5BYiADg5cXtZWFtkf8foFcVA1Rih4BAIr0QlFmOt6IkIwy1lTcRU1j1Cg==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDNrCAbE+2iz1r2guGVRkrUr\/jTaN4VmI9HNsS7niRdw3MNCEOMVm6ykh\/S4jA0YDnQGyJfglouiZAAzb22A==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":168,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCEpTOAbDJCfqzkA1SapdrWwYmyK+z5r0+1OxHteYUJxzYoeCz5dS0nvlYjIJqv8+HlrqLA7qlxCYh1EUo046vaPaU\/VRazupgpkE3jJah3byprmjNzBz7aayq8oma+iXEZSjpumaDDyrpdrfcfxAo3dGS0WTqSUKp+CI5n91OC","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/8syAbE+3iz1vmguGVRns\/1ip+WfoJe8JobRsefMWdKPp7iDafl5bWE1Qd5oPs+ypbeH8sdcOrgbd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU7WyAbDI9fqzRQ1SapdpManX9tkd5bhoPmioagojPLfyvFk7YnJ6HDSn7m9aazmW9gu8esOPrHz7H5NUA4nhHRl9oGNY1EdpTUhnYerD+","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/wVaAbE+4iz1zWguGVRknjp8TOzjgbMgERhr\/\/V4UGmXA71lqC9KM\/7uvaTlxeCNw2sx3k++LpYhv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069186,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJKC6AbDI+fqzVA1SapdrniHbKSianfxQpaCv+rkWgPVs8xmhsYk2FtiGs0Zp1SZl1r2WSJahd\/QP\/XO3aa8U0r8MH2w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLoI2AbDI\/fqzYw1SapdoXOQ7pnPBorOXIo5+k+Sgk0drc0QWGnlJ6LF\/vc8Zmr\/TtxE+\/NrMiw0JjmtReFHf1Rc+GMT65","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJZ9KAbE+9iz2GGguGVRlike403wipyXjIYwMWHLhOWl1VEJ1xwaItlYCE\/ZqBypBPUKSyAjqviwqSKSZU8HNuvbGwjQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/0X6AbE+5iz13GguGVRnCc3WpnJ9KOINqV\/peo4LmfYMq4W3LlAWY1nYY4vhJqVcmKmZYd7485nrY","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAQBHZ9goYUrwByQGuKBxaBgCYM+GAbDJDfqznw1Sapdpslmw+QKM8ZKjOlfrwPbXlzcVMSPS+TMac09yRfl\/YFNLV7w4uWuXuvI2ZG5+akZoIgh0VCSnf+OGFTIYsiVnx2bTJdKsZjPRAdH\/PkFBhPCgab+26U1aJX4RN3Ph7fQVZcy1UUWWN\/SESMSxpaZKTDSRzTLKUNf4E2MOjoEuGzcv+HIw=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAqdKAbE+6iz162guGVRl+fdxorpl0aCKgPZAAVQbiEtPKFcgH5r5Gf9Kax3UXGddRufDbMP82d6vwUQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPju+AbDJAfqzcg1SapdoFBDGnKs\/\/6osS3XAjmOeO8vS8EV5KtdkFuu1kBju1jz\/adWxNMz6ERA0Zmm3Q37ZqIG7WgwwBnv+T8Q==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQNpmAbDJEfqzrg1SapdqSq3iqCik+XdMpdN9Pz0AXTQfqirko19Zj3UP+hIDUOSXINgrzhmkIMLLWE04Do3Uw0K9CAu2II+GBPCbdnZgxTzHQYikKsmLaAwLnjvbIuA8VpxBA\/rLBlaA+xSmTKxiXEW6kCxW91c\/mhHOYyOM6fhkG\/A2Dke7dZ4bC","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQ7SyAbDJBfqzgQ1SapdodovP6R5PvwlXYfTdo4Hy7JBhCRZabCBkqEHvajU1w0AAZisRgRnhK2vjzC7Hi7qYJPBmrIRfIMA2piPg=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/HGuAbE+7iz1+mguGVRn4umxj40aYpGJKjRh2puNTwBZAstl+wNzMJjGYS5nTHfsFfcwflaNKakQ+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/MoaAbE+8iz2CWguGVRn1n65y4S3BFuBMlNDZSZAOqRmvInAvaWpRhZoc17HkL5vWR7yej+rbyPZ4","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCrJeAbE++iz2J2guGVRnRvpsqIXgLEeKVvEqG6BbTzuL8Ndo1wtm3W4y4QgVQKkoXNm5\/856+owxeiXEg","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/JDyAbE+\/iz2NmguGVRmy\/cN7WK2G+bXSeg5\/yRJmhUMc5\/dP3uGZeK0wtM8O2CS\/R0bYr+F3Yf2I","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3JS2AbDJFfqzvQ1Sapdr3AADaHbmFrnnHeW4kUCeEOGBIorZ4YscNgAlJhGCLxmHn3Cz4qBa0B55yJPog+WJuqADKoT2xMv3lyTdZL+mzIMN3l\/BbgMEnwapt8DhdYzpY\/dxsqMBg+bo26ZldxKhHB1Y=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":168,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACEoRmAbDJCfqzkA1SapdrWwYmyK+z5r0+1OxHteYUJxzYoeCz5dS0nvlYjIJqv8+HlrqLA7qlxCYh1EUo046vaPaU\/VRazupgpkE3jJah3byprmjNzBz7aayq8oma+iXEZSjpumaDDyrpdrfcfxAo3dGS0WTqSUKp+CI5n91OC","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJa+yAbE+9iz2GGguGVRlike403wipyXjIYwMWHLhOWl1VEJ1xwaItlYCE\/ZqBypBPUKSyAjqviwqSKSZU8HNuvbGwjQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfee2AbDJGfqzzA1SapdoFFWK6MhBK7JMHbL3WmSOlUn+fuXQlfuhPvFWbEV1Rt\/iquI3Mgty3nfej5cGef8ozsWGSZI0OZIQqZVXmjguO02UHR3q8Evy5iNQ=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":162,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAPxHbEAoYUrwByQGuLDhaBAB+\/9GAbE\/Biz2VGguGVRmE4kc\/5zoedzVrsK8H3lmq7SDj1muM0ODSrLqFmQJs6eFPfo69rxDzZ4A\/9a+d9azljWmPmUL6KuZV6A0JwOF0pl3\/VhYJwj5hwSbGWCuixYRej\/El6UJnAvbUdigwoXJy\/jD\/UbUSYc7a","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHRH8zgHJAa4KGFK8WgQsOACYL8eAbDJDfqznw1Sapdpslmw+QKM8ZKjOlfrwPbXlzcVMSPS+TMac09yRfl\/YFNLV7w4uWuXuvI2ZG5+akZoIgh0VCSnf+OGFTIYsiVnx2bTJdKsZjPRAdH\/PkFBhPCgab+26U1aJX4RN3Ph7fQVZcy1UUWWN\/SESMSxpaZKTDSRzTLKUNf4E2MOjoEuGzcv+HIw=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQMn+AbDJEfqzrg1SapdqSq3iqCik+XdMpdN9Pz0AXTQfqirko19Zj3UP+hIDUOSXINgrzhmkIMLLWE04Do3Uw0K9CAu2II+GBPCbdnZgxTzHQYikKsmLaAwLnjvbIuA8VpxBA\/rLBlaA+xSmTKxiXEW6kCxW91c\/mhHOYyOM6fhkG\/A2Dke7dZ4bC","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCsLGAbE++iz2J2guGVRnRvpsqIXgLEeKVvEqG6BbTzuL8Ndo1wtm3W4y4QgVQKkoXNm5\/856+owxeiXEg","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBUjg6AbDJHfqz2w1SapdrDX8X7of6A3gWvPRpN98MarlRhNXhB+zav9xC1qSq2Z7kvJmGJPSiKRWR9kCbo9UHEDSQO0XHmJuVsMTTp+LgV","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/KFaAbE+\/iz2NmguGVRmy\/cN7WK2G+bXSeg5\/yRJmhUMc5\/dP3uGZeK0wtM8O2CS\/R0bYr+F3Yf2I","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":203,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACnMwGAbE\/Ciz2Y2guGVRlUJc4rGhsqW9Zh\/Mk2SjXwfiuztCNJR24WLyBXMHDqAuvBTvjabkgv7INAr8pIIyL6Aim9bJvtIE5EWjJ+psyX\/QIYoUVYVMFRnd3FVvibzKfWqlyXBaVXpM7WtYiSmnwOqYCX\/XgkCRn+qIhVLgx24r9IBIKH6iz+tyQcFbwlixOxFr8qocgPuMDUvW5AEKhhNr8=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":155,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3IROAbDJFfqzvQ1Sapdr3AADaHbmFrnnHeW4kUCeEOGBIorZ4YscNgAlJhGCLxmHn3Cz4qBa0B55yJPog+WJuqADKoT2xMv3lyTdZL+mzIMN3l\/BbgMEnwapt8DhdYzpY\/dxsqMBg+bo26ZldxKhHB1Y=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLZ06AbDJIfqz6g1SapdrhQmb\/K2TuQ1fXFr2IWPESnMzOUcgl+ns7pjwpUYDppYIL99sDEQzm3s1Q9QfwWSN5hH6t1bp8","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfddOAbDJGfqzzA1SapdoFFWK6MhBK7JMHbL3WmSOlUn+fuXQlfuhPvFWbEV1Rt\/iquI3Mgty3nfej5cGef8ozsWGSZI0OZIQqZVXmjguO02UHR3q8Evy5iNQ=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbQyWAbDJJfqz+Q1Sapdogy3nerA2n2pLRH143WEbv3kATOxgc1qj7ut48Ohx7fNXiV171tKitDghjaqZDG9aMc2RyuGfSklf4AbVy3HExl0jGCjCQ2g==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":162,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHBH96AHJAa4KGFK8WgYoHAB+A+yAbE\/Biz2VGguGVRmE4kc\/5zoedzVrsK8H3lmq7SDj1muM0ODSrLqFmQJs6eFPfo69rxDzZ4A\/9a+d9azljWmPmUL6KuZV6A0JwOF0pl3\/VhYJwj5hwSbGWCuixYRej\/El6UJnAvbUdigwoXJy\/jD\/UbUSYc7a","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABUifSAbDJHfqz2w1SapdrDX8X7of6A3gWvPRpN98MarlRhNXhB+zav9xC1qSq2Z7kvJmGJPSiKRWR9kCbo9UHEDSQO0XHmJuVsMTTp+LgV","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZSYyAbE\/Diz2cmguGVRkyRhPSo2i0PISseWq7v6fYD1phvXFX6PV4DeHudxK8F2JnzbRPWFbPBrivBxnics69SRqBzdEXT5u46F72cntI+YhSiSJQN8YsmdkHGy5t9LphhLvwDeyRxVmBRfLskrRQJ94lpRylzu\/N1jKOuSacACMBrom5NUbMgXxgfR63TiOyKEq3","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAPxHbJgoYUrwByQGuLDhaBABoAsKAbE\/Eiz2gWguGVRlZHg3nhfymkBJPxU0Hk6+3htilKCsHwbU0+gZdMtwiMHzp87wJdCra7ihVlw0kZdqLhxKvIUCe7gdsZdJaz6D2acVSkZXIYmeOGnQP8lMFx5w7f6w=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":151,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAQBHaGwoYUrwByQGuKBxaBgBzZNaAbDJKfq0CA1SapdrIJZfAk3\/IJgH3he7CQNcBX+tI8ovh4ORyI73nlwq5u600d9niN3Nd+begySRAA5lsOLF1Sy5I\/Wivj81ChzieN4nx8JMgJZbn0jEPio6SxT52ph05Ab+Wc48+fRaj9g==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":203,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACnNxuAbE\/Ciz2Y2guGVRlUJc4rGhsqW9Zh\/Mk2SjXwfiuztCNJR24WLyBXMHDqAuvBTvjabkgv7INAr8pIIyL6Aim9bJvtIE5EWjJ+psyX\/QIYoUVYVMFRnd3FVvibzKfWqlyXBaVXpM7WtYiSmnwOqYCX\/XgkCRn+qIhVLgx24r9IBIKH6iz+tyQcFbwlixOxFr8qocgPuMDUvW5AEKhhNr8=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLYzSAbDJIfqz6g1SapdrhQmb\/K2TuQ1fXFr2IWPESnMzOUcgl+ns7pjwpUYDppYIL99sDEQzm3s1Q9QfwWSN5hH6t1bp8","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABdQmyAbE\/Fiz2kGguGVRk27fKuFssI5ZGIcW6shvbsRP7ZL28dF7f5SsFK4tV0HNxQJM3nNlR\/nqOo7iFNPYFeKaKNGMRj2\/TuTgC8Lj9ijbAtHSDyWAn9","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":209,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMEAAEAAPxHa4QoYUrwByQGuLDhaBACtjQeAbE\/Giz2n2guGVRkC7ZdZBoWHrzEwELmGE4XlftjfIryxvEr7B3IO+LAuhd22AqQl7wfY4Pnd0rgc6uHYNSCRPL7UhKePo6FBOQXBZXfYpU+LP++nkt+F7dcc1hIn6847J2315l5FGClOmyYbKMGlVWNTCQrbNi10A7zLaHAOnxqSkq\/zz6aQN8gHS\/qve4CsC3UcBv85YjVE6bbf4EswHef8dBI=","pkt_caplen":209,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbPwuAbDJJfqz+Q1Sapdogy3nerA2n2pLRH143WEbv3kATOxgc1qj7ut48Ohx7fNXiV171tKitDghjaqZDG9aMc2RyuGfSklf4AbVy3HExl0jGCjCQ2g==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNegKAbDJLfq0Fw1SapdpNqwYGA0r\/yvegjM2HU6PufVYqQdN4guEYXTgU1NFdr2qZ4CKnPXt5DjU3X8qYJrLKzzBsrDfBJN0=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":145,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtXoiAbDJMfq0Jg1Sapdo4rhGhmHHRsL33rqG3E8a2hyk\/XPaPzDCjRwE+PT7GD43xmZZkR7VbOWzbe9WZuP3PYHA29NiFvilLM0hGFTc8f5SHsnQeeM3oVUf75FZKR4L+bh\/RZsVqZQ==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZTaaAbE\/Diz2cmguGVRkyRhPSo2i0PISseWq7v6fYD1phvXFX6PV4DeHudxK8F2JnzbRPWFbPBrivBxnics69SRqBzdEXT5u46F72cntI+YhSiSJQN8YsmdkHGy5t9LphhLvwDeyRxVmBRfLskrRQJ94lpRylzu\/N1jKOuSacACMBrom5NUbMgXxgfR63TiOyKEq3","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHBH9\/gHJAa4KGFK8WgYoHABoBtyAbE\/Eiz2gWguGVRlZHg3nhfymkBJPxU0Hk6+3htilKCsHwbU0+gZdMtwiMHzp87wJdCra7ihVlw0kZdqLhxKvIUCe7gdsZdJaz6D2acVSkZXIYmeOGnQP8lMFx5w7f6w=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":151,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHRH88wHJAa4KGFK8WgQsOABzYLyAbDJKfq0CA1SapdrIJZfAk3\/IJgH3he7CQNcBX+tI8ovh4ORyI73nlwq5u600d9niN3Nd+begySRAA5lsOLF1Sy5I\/Wivj81ChzieN4nx8JMgJZbn0jEPio6SxT52ph05Ab+Wc48+fRaj9g==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":219,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAPxHa1woYUrwByQGuLDhaBAC3QmGAbE\/Hiz2rmguGVRmVv9TmxFPYKrM9T0FcLkaWME+KtD84JcBBJWR85V8vvAkgUL+hs\/gjokaDCnPLVPce\/Vxu9T1xveZmVw54ms0JizOKUaZi7d7mz+jQ3MNDbwGo+vVs4wjgR6+d02\/imY7qQqQdRCEqRoxXuxQDqenlFUvdkPMUgZlSY2ZN4alU2KBiVXN4vOBLkE4u5AaI4pToZtt8Xl5QKXoGoG10jd992fRq","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwrHyAbDJNfq0NQ1Sapdr0ppZAxkK9vjhZAyFRspGmx\/2hGiMr3OpSCijr0yEOBnkX+L3f2k8bgukZqN8lAcPrTYuyx5xWVHBYLluqTNXSsb8LZY35czeRMZKdUmiw2sKqVYB3tHNK3JWsyg==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":145,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAQBHaIQoYUrwByQGuKBxaBgBtv8mAbDJOfq0RA1SapdoURDdAwZf+GbSVDnxePLME0jX4fD\/2v729EAW7Z7zpXn8ToJDmmpY71RR7zZDJqWPQ6iUX\/cLQkiCuXZlDqI9\/Sc9YhgqvnjgLSsG1JVP2tebnfYkP10xGMA==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2De+AbE\/Iiz2vWguGVRm8b5KThZtA3SJUIS9nRclaUSrtFBR11npQbuxNRM+8Tu9z2lPCdQXOAz7rjjKyj8rKTC6gpaq8DTfOmmFxWp8kZp7N6OPcdOooyOlfNdiAr\/1SbyyzU4XSI6veV+Ofx6oZyPohkQpsOTSeHTwDuyfg3yWu1LreTUfjvv1RCjz\/Idhwc8YU+raCFXGPcsHzz61lFmxRIvBQk\/lJebaMpu3J9JI=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":219,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAPxHa1woYUrwByQGuLDhaBAC3U7uAbE\/Jiz2zGguGVRm0z4cJQwUvKkzQXfpaJ5KABq3BP4gkPhAAtHySoTUKgDGTHyyMkYHnKCkOLn80E7LcbVRIuNbFXTus0CzCrOqXZ6XFljDL5LqPbhM1HKU9eoOdhfwq\/flzYAb2vM+TIRR1txy9aA1Zg4WfLGO5guB1QRyQV0olxoYuQj83Lg3iqyrKyxxZXtOFEYVIoJQBH8Fw+fsSG\/J4p+Q1pa109iI4nz4h","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdRoaAbE\/Fiz2kGguGVRk27fKuFssI5ZGIcW6shvbsRP7ZL28dF7f5SsFK4tV0HNxQJM3nNlR\/nqOo7iFNPYFeKaKNGMRj2\/TuTgC8Lj9ijbAtHSDyWAn9","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":209,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMEAAEAAHBH9uQHJAa4KGFK8WgYoHACtkSGAbE\/Giz2n2guGVRkC7ZdZBoWHrzEwELmGE4XlftjfIryxvEr7B3IO+LAuhd22AqQl7wfY4Pnd0rgc6uHYNSCRPL7UhKePo6FBOQXBZXfYpU+LP++nkt+F7dcc1hIn6847J2315l5FGClOmyYbKMGlVWNTCQrbNi10A7zLaHAOnxqSkq\/zz6aQN8gHS\/qve4CsC3UcBv85YjVE6bbf4EswHef8dBI=","pkt_caplen":209,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNdeiAbDJLfq0Fw1SapdpNqwYGA0r\/yvegjM2HU6PufVYqQdN4guEYXTgU1NFdr2qZ4CKnPXt5DjU3X8qYJrLKzzBsrDfBJN0=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":124,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBY74uAbDJPfq0Uw1Sapdo4S6qqs+OxcwsQWEP4qnj\/2YtcA4uyP9Hl8klVjrupJnu03qM2mGoRKtyHp3dDNu36rQXWspFMyL0DuIUVRv5HfssDpA==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":224,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8NCuAbE\/Kiz222guGVRlceeNym\/BrMwIRqAt2JZCriUmKzJ0LMNdrlOp0hQ6zfvJBtp0cieajlzdFB\/DNMrrysH0ydqJnGwTC9ElNYe4ubhum2CzqO4LyjEIb5xeVwQ3RHOz0ovPW5y56jTzr\/ztVczYqVIwTdX\/3kEOOnHX\/VdmjIY0phvaXOdDx6DHIwXNL2HU8bth4FzrMtBxuI6HAr65+zbExfmIOUAJWefTIQJmDicG5VVU=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":201,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClBF6AbE\/Liz26mguGVRmG2YPbClppUR6wvIY6uop9EDbelA2R88wP35NKtqjmMqwfGkVCO+cPjD19EETJhgyMU+bJlBW4d96JliBKV4srO9RFrAFB1XmdUq1aTi4s+8bo7t13KvZLaKgu2lGPbe0DPsuyKSXxR77pi5fKsg6IZV7rgFTW5ezTsKLikCtoiH+XhxDyIgCy76XShu89hyuu","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBkV1mAbDJQfq0Yg1Sapdq2BZfPPQRW35bxqzQuMKRk7xkMBV7rlz95wZVJ54dGltLdbPgduMbNSpFTYvM+h\/\/lVTC9uJ0ZQkgkcACJ7JwNGZSWOljyTlbXjBNwVZ7Aww==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":124,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBYtbuAbDJRfq0cQ1Sapdr3hsT7snaruG1AdBDyJqHnAK5LaNVBaUWwg4GyQFG2aNj7EZio4DBZ1aTRg\/RLdOc6IruFzLIJJHsrQNimWJE0C+48Kw==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABtWm6AbDJMfq0Jg1Sapdo4rhGhmHHRsL33rqG3E8a2hyk\/XPaPzDCjRwE+PT7GD43xmZZkR7VbOWzbe9WZuP3PYHA29NiFvilLM0hGFTc8f5SHsnQeeM3oVUf75FZKR4L+bh\/RZsVqZQ==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRAqyAbDJSfq0gA1SapdoNX\/YBV+wNjMfKt1S7PNWJ3uHYd\/E+dZMDSWSPfUNV9qTU6hLurH2\/Ga\/S+B9RhFlotjxx5vygpsoVlMjl","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":193,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdk56AbE\/Miz2+WguGVRn5ZY2Z5qNNpqDs3822fgDVMi6VC\/WQ2w6s4BOZYkyuENV12PyJRkAmkSvK3cETXfOaCty7tA5h7zdcJVWBbAbqtj10o9kDv2vdeghV1QpWFtULXrlFwbRGcK46BPJtrTLYT82JlY9TUudM2Gfg5GH0XqimYoVKMHOMh03wOfVXIfVYeKLt3QZ84w==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069187,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMGViAbDJTfq0jw1Sapdqg9REBnOrExdlpeAZQE+uBrFNU0BQmY5elDnB8Y6D+yGe+ADt7xEbGLfipBNJts1mTFSjfYNV+Vg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":193,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdSZiAbE\/Niz3CGguGVRkqsuJemWbGGwwBf6nQL1wFf9kHnV1NSPIXV\/RI4Iwl5vWBre6MW7q079X73Fy9kKRmAvlvwqw8UIXoPsackG4U4juq2K3iJ9s6f2Iw8t14okmbiX6rrWc+ov+eXg0JMLBJ0W59wrkZ\/M2cDWjxAlyvRspRg5LTAEZZ09OsZNeh\/oEiJMUHjg2\/Ug==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":201,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClq9aAbE\/Oiz3F2guGVRm4JreS0PrFtpfwDfC2u5HL8uape+jXyal1\/Mj5xQUrftNcniS4IPozvmxqK21\/rkaKxE+4eAse9R5iVIxWztrk5vw159scCuKL6rssEnOusCRaE\/tXsSM\/dy8Gxd1f6JukzzbIgWiFH5Q5ofb\/UhzxzSSgHmJEtNYppWcunH37Wxo9TlVBV\/FfCbitD9p7ZU2D","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":219,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgYoHAC3RnuAbE\/Hiz2rmguGVRmVv9TmxFPYKrM9T0FcLkaWME+KtD84JcBBJWR85V8vvAkgUL+hs\/gjokaDCnPLVPce\/Vxu9T1xveZmVw54ms0JizOKUaZi7d7mz+jQ3MNDbwGo+vVs4wjgR6+d02\/imY7qQqQdRCEqRoxXuxQDqenlFUvdkPMUgZlSY2ZN4alU2KBiVXN4vOBLkE4u5AaI4pToZtt8Xl5QKXoGoG10jd992fRq","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBN8ESAbDJUfq0ng1Sapdpoz8vb1t7EA+Pk+CL5Ne3NyNhNNxlYaLExwMqnGvNpdiyQOOmk1h8MWCt\/wW6mrjfCfB\/ZT6nKkBM=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwqGKAbDJNfq0NQ1Sapdr0ppZAxkK9vjhZAyFRspGmx\/2hGiMr3OpSCijr0yEOBnkX+L3f2k8bgukZqN8lAcPrTYuyx5xWVHBYLluqTNXSsb8LZY35czeRMZKdUmiw2sKqVYB3tHNK3JWsyg==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHRH8+QHJAa4KGFK8WgQsOABtu6+AbDJOfq0RA1SapdoURDdAwZf+GbSVDnxePLME0jX4fD\/2v729EAW7Z7zpXn8ToJDmmpY71RR7zZDJqWPQ6iUX\/cLQkiCuXZlDqI9\/Sc9YhgqvnjgLSsG1JVP2tebnfYkP10xGMA==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2EgmAbE\/Iiz2vWguGVRm8b5KThZtA3SJUIS9nRclaUSrtFBR11npQbuxNRM+8Tu9z2lPCdQXOAz7rjjKyj8rKTC6gpaq8DTfOmmFxWp8kZp7N6OPcdOooyOlfNdiAr\/1SbyyzU4XSI6veV+Ofx6oZyPohkQpsOTSeHTwDuyfg3yWu1LreTUfjvv1RCjz\/Idhwc8YU+raCFXGPcsHzz61lFmxRIvBQk\/lJebaMpu3J9JI=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":219,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgYoHAC3V9WAbE\/Jiz2zGguGVRm0z4cJQwUvKkzQXfpaJ5KABq3BP4gkPhAAtHySoTUKgDGTHyyMkYHnKCkOLn80E7LcbVRIuNbFXTus0CzCrOqXZ6XFljDL5LqPbhM1HKU9eoOdhfwq\/flzYAb2vM+TIRR1txy9aA1Zg4WfLGO5guB1QRyQV0olxoYuQj83Lg3iqyrKyxxZXtOFEYVIoJQBH8Fw+fsSG\/J4p+Q1pa109iI4nz4h","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBG6pyAbDJVfq0rQ1SapdpQp\/AhDCX1T1UBzOuRtJdbDtGHSvd7misTrItHQ\/6ri6xtOhqiclep2MMxm9R6j1xI2g==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1Y8yAbE\/Piz3JmguGVRnDAEcgLr2GAZBsrBtJzx+WZrwowLea71CKE3r5ZQ1nHNtWluSxP70\/YnzCMSPuncZ\/GYyBSC7N5OBHkIEHyxfDMpzD7b\/LxvWFAhnkLP69JfAMpRrPJV6WYi7b9Or7V3F9cYMCR6hvVLZApO+Vah\/EqEydbETBYZpnsEGYPc6m2wBAXTO\/S218KDrRUH5I7xLxnVpnnmtS1uUyPZ9PWZC2jA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":202,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmvBqAbE\/Qiz3NWguGVRn70gttv3f0TRM64F6cKC34fIMQCgh5BymzICa+K1R5Kqu9G1uXc98pR46N8XC+u6NJRaujOyi1clT+0cqlC1ZA8Gyny5Zs55drvKm4lAvh1vY8t81C6gP4OU+P6aRm9tRqWFS7DfWfODcVFRWffsV9tCqO3TdO+4EzDQlbV9i7d9xJVxIWGnEvJkrw7hPhc5\/Avw==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABY63GAbDJPfq0Uw1Sapdo4S6qqs+OxcwsQWEP4qnj\/2YtcA4uyP9Hl8klVjrupJnu03qM2mGoRKtyHp3dDNu36rQXWspFMyL0DuIUVRv5HfssDpA==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":224,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8OEWAbE\/Kiz222guGVRlceeNym\/BrMwIRqAt2JZCriUmKzJ0LMNdrlOp0hQ6zfvJBtp0cieajlzdFB\/DNMrrysH0ydqJnGwTC9ElNYe4ubhum2CzqO4LyjEIb5xeVwQ3RHOz0ovPW5y56jTzr\/ztVczYqVIwTdX\/3kEOOnHX\/VdmjIY0phvaXOdDx6DHIwXNL2HU8bth4FzrMtBxuI6HAr65+zbExfmIOUAJWefTIQJmDicG5VVU=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":201,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClCHiAbE\/Liz26mguGVRmG2YPbClppUR6wvIY6uop9EDbelA2R88wP35NKtqjmMqwfGkVCO+cPjD19EETJhgyMU+bJlBW4d96JliBKV4srO9RFrAFB1XmdUq1aTi4s+8bo7t13KvZLaKgu2lGPbe0DPsuyKSXxR77pi5fKsg6IZV7rgFTW5ezTsKLikCtoiH+XhxDyIgCy76XShu89hyuu","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKdhaAbDJWfq0vA1SapdoRwDdehE\/\/DYyXjma3dHi7Z7RpkbFL5knFqOfjHPFpc+AdAqRgOSNxLdLKa8Gakd76X+YMBOc=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABkUz+AbDJQfq0Yg1Sapdq2BZfPPQRW35bxqzQuMKRk7xkMBV7rlz95wZVJ54dGltLdbPgduMbNSpFTYvM+h\/\/lVTC9uJ0ZQkgkcACJ7JwNGZSWOljyTlbXjBNwVZ7Aww==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":191,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAPxHa8woYUrwByQGuLDhaBACb94mAbE\/Riz3RGguGVRmrEphSxvHShg6nv+35kHNqaom7ObMFZ8L3QBy1VDayWSo6W7z3++GcjUHvDVSgCN7X8\/HSS+Te5nIyU4wALQSHgSDOvMxpAgaBNJFUyhiEz2cLz+zZSzv1h7vfMGoHJkDf\/CRnor1vt1FE8ENG3yAslvrwBhbUfJ1HuB2+bwwgwvf0bcNWhtk=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGfu+AbDJXfq0yw1SapdrVdkFK\/fjusDEmTyYkzXj4vVypgyo\/ngaTQ202AcuNGdNJnf\/Dw\/M+GXgdVQ9aJ6PJQw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBludiAbDJYfq02g1SapdopmW41PM5Ebi0ezXyrB53oW\/x6VIM4rXFCcf1ZZNG7H2kkV1gKNsjN7ShF1LH\/sXH3t+Dh5RafWp8xjNrumdIFAWBjuDITFrfohR37ZxhCA2w=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFwcqAbDJZfq06Q1SapdrbDMiRfjocufsD80uUgQ1nzXPxtmcsbdbndr97VZjXMWqHM\/WyjCnn\/vI0DWy48aGy","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLSeqAbDJafq0+A1Sapdq1Id+EGxGLINmre4d8OlHiD3QVomUlq4X\/VhIpeuOjJ2bahnPLU21rMN4LtY\/vrT2wE4CLNjKf","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACg0yWAbE\/Uiz3cWguGVRmZqFwAVM5Oj2s7QYODbo\/QmjSieKUZcFyzQXFaoZn5n0vbVXUbUJ75c48BgSmeCbnyNezBj+mqI32ZHYGODMmv0vdX+Y1AICMQ3DZwpjtsolXVoQ64UQbP0L5YKIQGFoRvMgiRQmgc8Iqf3U0fymhqBlBxbgfAQoLOr6KqEAlphk7hM6P\/OFxZ32FUFg==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":181,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAPxHa\/QoYUrwByQGuLDhaBACRibuAbE\/Viz3gGguGVRnYHjdSXiq4iv9nO6GzHtT8o9LELOnSmgdM30PayZJS1C5eFQLPj6EObkdWI5LtEvjdZNsiqPN\/HOt\/yFNSvurEuX3yJpRV0+3oT3yvmbrpBEApeqf3TRc4uupgAf9GCkcEFYO9N05zd+uEUqPlhLMtxPgSady+to38rsSDYQ==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYsaGAbDJRfq0cQ1Sapdr3hsT7snaruG1AdBDyJqHnAK5LaNVBaUWwg4GyQFG2aNj7EZio4DBZ1aTRg\/RLdOc6IruFzLIJJHsrQNimWJE0C+48Kw==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABR\/pGAbDJSfq0gA1SapdoNX\/YBV+wNjMfKt1S7PNWJ3uHYd\/E+dZMDSWSPfUNV9qTU6hLurH2\/Ga\/S+B9RhFlotjxx5vygpsoVlMjl","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBD4vqAbDJbfq1Bw1SapdpgesJfhEyC5dHZVn0YqEYLl9PwidBAx\/BIEAP994oFn8VkBjR3ETmlC0ULo3s9ow==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":193,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdl7iAbE\/Miz2+WguGVRn5ZY2Z5qNNpqDs3822fgDVMi6VC\/WQ2w6s4BOZYkyuENV12PyJRkAmkSvK3cETXfOaCty7tA5h7zdcJVWBbAbqtj10o9kDv2vdeghV1QpWFtULXrlFwbRGcK46BPJtrTLYT82JlY9TUudM2Gfg5GH0XqimYoVKMHOMh03wOfVXIfVYeKLt3QZ84w==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":193,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdTbKAbE\/Niz3CGguGVRkqsuJemWbGGwwBf6nQL1wFf9kHnV1NSPIXV\/RI4Iwl5vWBre6MW7q079X73Fy9kKRmAvlvwqw8UIXoPsackG4U4juq2K3iJ9s6f2Iw8t14okmbiX6rrWc+ov+eXg0JMLBJ0W59wrkZ\/M2cDWjxAlyvRspRg5LTAEZZ09OsZNeh\/oEiJMUHjg2\/Ug==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC1Z+aAbE\/Piz3JmguGVRnDAEcgLr2GAZBsrBtJzx+WZrwowLea71CKE3r5ZQ1nHNtWluSxP70\/YnzCMSPuncZ\/GYyBSC7N5OBHkIEHyxfDMpzD7b\/LxvWFAhnkLP69JfAMpRrPJV6WYi7b9Or7V3F9cYMCR6hvVLZApO+Vah\/EqEydbETBYZpnsEGYPc6m2wBAXTO\/S218KDrRUH5I7xLxnVpnnmtS1uUyPZ9PWZC2jA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":201,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClr\/CAbE\/Oiz3F2guGVRm4JreS0PrFtpfwDfC2u5HL8uape+jXyal1\/Mj5xQUrftNcniS4IPozvmxqK21\/rkaKxE+4eAse9R5iVIxWztrk5vw159scCuKL6rssEnOusCRaE\/tXsSM\/dy8Gxd1f6JukzzbIgWiFH5Q5ofb\/UhzxzSSgHmJEtNYppWcunH37Wxo9TlVBV\/FfCbitD9p7ZU2D","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABN7CqAbDJUfq0ng1Sapdpoz8vb1t7EA+Pk+CL5Ne3NyNhNNxlYaLExwMqnGvNpdiyQOOmk1h8MWCt\/wW6mrjfCfB\/ZT6nKkBM=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABG5oKAbDJVfq0rQ1SapdpQp\/AhDCX1T1UBzOuRtJdbDtGHSvd7misTrItHQ\/6ri6xtOhqiclep2MMxm9R6j1xI2g==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMFT6AbDJTfq0jw1Sapdqg9REBnOrExdlpeAZQE+uBrFNU0BQmY5elDnB8Y6D+yGe+ADt7xEbGLfipBNJts1mTFSjfYNV+Vg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":201,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClJTiAbE\/Wiz3j2guGVRlx\/n3shVKsKe6Bcr2Was5riOIuL3qeg9AVTSjpniO39x7iDFyWeczRxRYpcEKs69IPVywSBc40IV\/QgbLnssEA8DF0TP8m5wkFLoM13OpF4TVqUBmMDC8RuipfkR7mkccJqkwltGhH2FMpgBbSK3yvFQruTr+wXlUyhZfsXhi6kYQKEI6PRV0qrE8LCSYgz2nP","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/7Z2AbDJcfq1Fg1SapdpSXTAEINK47C16hvWmBf6mJ9+hezm2A\/6DWWs53rtV8BF3U+47+fkqgeHC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xrqAbDJdfq1JQ1Sapdqgcd7UwOc5orI7w1jnUpe6gsp08sSP79Rd2zCMk803quP+D3klMh+em1yZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACo4tuAbE\/Xiz3nmguGVRlcQ8j\/Fj23ZqPmZ\/Pit+HHzzMChY9uT+nPn8lxvR8+HmsK6wZeUfoLQg\/sdfFLMDeWc9ck7CKWBgOBNwvSe5+yyZ6tGyKwXZE4QdK80pat7\/7K5ICXBiOv2k3n9f1LZEB\/iZedhuWcvYXJLVcZrDiTHLaCoBLCc4pQmOexR9OAajW5qMCQOSBgioaijUwdFz3RzVHz","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfk4+AbE\/Yiz3rWguGVRmoussqm9dbBM35\/+hPGuhVT1GRqMC0QLEoBUTRZ4PEAMkgUnSyLECxgjWJutwaVgXvSFeNh3LwZWQ0dKFhARGgv35+sQ9nRHR2ITNNndDXfvQZxnaHoaDSgc0xggxmdpOqNHaH0Wfk4MBYyjhow8bRtaBdo6K3EAY9srKZ4drgq8neGEP1nG1gXG0m","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6C2AbDJefq1NA1SapdpnNY9AKsOJlZUVWC8JqaWyHRYkS8G5oyotSwmSJwMPAYxe8EQGVmX9qVbP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/T2AbDJffq1Qw1Sapdpf1weSmFqb2lsR5Y3D3waTeHbH+MkFFP6x5BJirw3tV4XOtx9tia\/94c1B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACP6hSAbE\/Ziz3vGguGVRlZvEJNWKBc0GA2txE1fCfCbOkbltV7PNF5nTMRfwXddf5OMGYmxmzlEetJx3EeZM3g1+aKQl5JX+I2c+DZ7N5DALLXJGYQbb7lLOuToJSVA7ZKgPtKGJAmppHoemA6RI3fe5bjsOINief\/zH880\/4FieEqV8IbCm6aWI0=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIJzCAbE\/aiz3y2guGVRmnd1z2m5lpgqzl9OrgEVIUFuWNEpZJawBdqqbOLUdj55CZR++\/5EhPB6nszmYafQzJj6hS","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBDlj+AbDJgfq1Ug1Sapdrh+0c2z9sekuW51\/MN+ogweW6j7m2n\/XDty1luWGEDa9oxdUSJ+rCfX8ZF67aRiQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJVaeAbE\/biz32mguGVRmiU5S0jTnPG0P6pDItq5k\/jdBorJDq6LFXhwC9wXg7BYUsf1y6wRBvvVLZdA\/+80PqVgkCrA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGOoWAbDJhfq1YQ1SapdoYQjo8uLcBuN3HLgsu2Ll9L48NiVj96RxRmuTRziGIbugjdcSw5wU+0kn8RxfLdNfhsw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI7XaAbDJifq1cA1SapdqVaB8wcX8OxruHx7VMCNTNZimmU62WFbCbQDPkWwyDoR7UW0E1HpfrVaHN84OvgM8nKrqf","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKpBeAbE\/ciz36WguGVRm0Kjh6vxu9i84xpuevO8Reml+7ISAEMrahTDASGcD6Zt0tJb8RXPW2BRqrTymvkMhl3n2ihhY=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGRqGAbE\/diz3+GguGVRnD1Hc4pGsorAHgSR4n7lI528+sZk8Kp5gCoqh0bLIP5geZs0h7c0BqtL4Pj4tjIpq7GQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069188,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFK9uAbDJjfq1fw1SapdqJstZNzV1MEaNpUhhu7cmHl8qdiCyI3JYbraQSpRU8LwnEUArwuoez38aG+K2q8eEG","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI1GOAbDJkfq1jg1SapdoesWOoBZvRSfsHbgK1qwAlEcrNQK+1GUNCl67m0DetaxCNE7WmfZQz73w6SvC108D4OORt","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGBBSAbE\/eiz4B2guGVRnICByUM+w0dgUPh4A1ZGpfFJ5SBxTaOgBVWRmuiYa4FSZ6CpeWCJED0sL6B9eIpW7Vbg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHd4GAbE\/fiz4FmguGVRkbZ0fzpzYu68Oo+H8yDveDPpjj3mMgMHy6de19NFG3Ryd+sq73IqUGhA+uLt+NOk1TTGE=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFdjCAbDJlfq1nQ1Sapdqs1S9tD1wgSbZEe6UaIIMxjrVpwE9AEAdMkOjmkFS+4G9Vf7giWe76NAiV5hAPSqE3","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJwxCAbE\/giz4JWguGVRnbQDBVQWZPPIpJflRo2IqLrqZ55Ean2nEe+lp+iOIZaWfr6p45AKvjU\/wupw9gQRlSAuIOVA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIy9SAbDJmfq1rA1SapdoaQ2f68pwcljCt7vEMe6jnSEebicGKhH7skLday4eE33oUdg973a+vnAivtEWzy7YeFJ6X","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRvLGAbDJnfq1uw1Sapdoja1l0L6+QxYcYhxZ0Kdzc+hyTRbUEAxYtXdRpUPEAobq82dyZwz5fbfGnSF5hRfjiSzcGFJ8PDlDW4Oz7","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIjr+AbE\/hiz4NGguGVRnNGxXfGJLN7caJcIJtiZgGoXRt+YRW4i4m1pom6jUWcKyaRg7B81tb7oWgEpFX43QFWWpu","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGdr2AbE\/iiz4Q2guGVRmAT1AtF65B0S+taBGB9Uw5wXNRkVQWUt0wlz0TS1BfBL+21dW0h3ElbuqOgT0gP5g91w==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBK3SOAbDJofq1yg1Sapdp9eIYnzCF8IV7iPq\/rLP+mg+8ZrKW7uYey9jGxgNw1SjuQRU0yxk3QZpZrM1ULOfmP7WFw4bc=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":167,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAPxHbCwoYUrwByQGuLDhaBACD9QuAbE\/jiz4UmguGVRlY04l2D+UOo8XgeJVf9FDQvV0IfInKRwAA9ZNLJgkkR7AjZjqVsdBnX7yRtrC6cHlbIJBZpO1UPH8OnTKAttX4hnqfIt3T6t+1MiZHtrB0ds8YLCZhe4kZD2lbsPWjgjk090QlXCQ5+7RLo90OddM=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAPxHbIgoYUrwByQGuLDhaBABsaAyAbE\/kiz4YWguGVRl5K6Ze7GPwVKEdmoe3jn1W3eak3yKa7eaKGZzL+JDSIkk63UyLZt9HVPaXM+KVqBONV9Hvg2LSyxc4eGHZB2+6O4TIi42dllMU28eyCk5XeBUXNZfjGMBU","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIOZOAbDJpfq12Q1SapdoEcNkrSNLrtD9z\/jW8Y8LOu7Sw0P1zKClaOTnXsmJLxljX1Du+8GQlyazv0fJCOUOJ4Y63","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBELziAbDJqfq16A1SapdqIOk6uC8fAHYX\/DeMwnrucS\/GK92i0glFi5sYI3m3k220QCDHyIkZeXVA7EnSyu9k=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGPUyAbE\/liz4cGguGVRlYxXlTtPRiUDEjUJoObRobqUVSX0YSxNKF9\/GJPuMj61FUmlT91n5eEm+u6ynjKgkRog==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHJNyAbDJrfq19w1Sapdrizn2lfFOvQkENygU44pE0TuLdrm3BKJ2aHOIJB3HfugeKghBJ+5nZDXtE4r0UNNrfJjY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJtBuAbDJsfq2Bg1Sapdor+cONv7HiiPOgtupJ4sg8CWQScPIJ8\/LoL2cheTICF2CyYgu0xLrRlYjvwoET+Shsl+EIIQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH0ASAbE\/miz4f2guGVRmeddZxdoRhkGbMIdAqTVh0HkmqCSqUvQqPiMxhEtZGCugG1E92pk\/frR4gK4YosU\/YE1A=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJGZiAbE\/niz4jmguGVRm5z0FHafiqQR24G1KFx0IXPLUj\/oYeVKZU+fYRCAGNds+DKuzXaEdQYh6lm0FG7bcc\/uJbpA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBP+r6AbDJtfq2FQ1SapdrGqKXP0DNzNnCJfTzyEJvOHQNy7JLDTHKTnkapd6E2lJM1m68svuyNhZdBCxNvGEgm8ji0wZth2GATMA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBH\/\/iAbDJufq2JA1SapdoYRfcuzgm+moA\/xphiKk67xdQQdYGEjHRn9i1lodeSbU8ltEdXM9SibXBELqfUYadG4PU=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJYUCAbE\/oiz4nWguGVRkiR77NGiChHz2aFG0GWao\/lGYMA6YNkB48thhabzgRow4VUaCBGgs4NloXYTN+pfzuWiz4Wg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG0q2AbE\/piz4rGguGVRlc5WUhgdtOgMw4j2iJ3Df5zYLo6Gf7yKpmLnrjTAlYqqfShaOvgPxag6ZTtcMoGy2zKg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEH2uAbDJvfq2Mw1SapdqMlbXCYBk45\/+v2OKYaVweUiKVyS9YvKoxByjw\/ox1lQeDCL\/Qkht2\/7OFeAYPcsk=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":165,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAPxHbDQoYUrwByQGuLDhaBACBMUqAbE\/qiz4u2guGVRkHFd27IpYNg37rSXR2rdAJxFs++QHVg9vJ1F9kvS3T9f7lefiHAbsYXEWvYXqiNVUZ6Dool3OxgouyTDh+sZKjFb3\/09B6DK59OBDk8yRFSTsz4vP\/ZFrVsPV68NDjDynG7fZdCffdsvf1r0UO","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGWwKAbDJwfq2Qg1Sapdo+XvXWjT5VLXhcp58uSMOZa7E1OWJqwUCumqVDZQu5Kd2b9KHFbYEWvyz49DmAbQAu4w==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGJOKAbDJxfq2UQ1SapdprWeOMQvkDHjCdHQOm8xaWJtk6m4shLgKoTfZinybrTNYKWSpIiR7NKj6DyrQFx5eTuQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":216,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0+v2AbE\/riz4ymguGVRmPVqABirWbkxC9AwaLBq9rg\/c+HfOf30GM1Ppzyta8A+2XYtUc5d1pocXMdrHVlduj2DLGSfN+iroBvWo+sZ1zX4xWHG3jxWTQHs1Cjh4kZj\/g0wvnOp6uUkAMeR87f2RhqKYSiZFkjoEei\/MvvMDkQVz75Rltgq39\/fL6SnHH1aposMUpGtsZJS6dnyhiyWtooFDF7XuqUW+RP8AzYgzT","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":223,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7rbWAbE\/siz42WguGVRnybEUY0XOKZcOAiGFjmTlRYs2aV2zUqHGAhOclSVc6seCtYY\/pM7uO10HDY1y8hjxM19ipWFN77\/7Kp7jjzd2PbnU06T3UoK6UlxyhvxucCLIW2V3gGDCMZhugZ79T6th3ehLtTljRGdrGP8CRiioihKnF\/wysvbVCLWVtCb6Swl+fgX9I9Ju2QejJSSClsO1RpLLXq1B+GgcgdZiH50uWGY+0Lzx2WA==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHI2mAbDJyfq2YA1SapdpBpuMiT\/mL0YjCE8an23NZ3\/0BX8y69TRi9f\/+\/FJ+1poj5x1HwCvMtEZxihO6OnY7+Vc=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJo9+AbDJzfq2bw1Sapdo0lHGPn6WFVs0Q7dwKpvO3GDpvtmRDrcG2BdMEWDBbhkBC\/2nzxDQqG8umrUM3qAON3vf4uw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":225,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANEAAEAAPxHa0QoYUrwByQGuLDhaBAC9QiSAbE\/tiz46GguGVRkyhjyJfmFcyXy\/aJKozy5IenXvr4dHSmP\/lhRu4bYwRkOCKFrGaUOj1r7gqkZryhQaPm8qapRnOGjwLHBCufi\/vF76c31hyP4VdtWazHUXHS62mDMVfZe6NfIDs4sSikTBzwMu2mwHiU6NbamjzcFEr44QZ4bWehqJpkM8HUMZNCeyvC\/V346Yxt9rt5EJfQ3Dhupyq5scfNhLoEJ7Oms9rMSCnTIEjySj","pkt_caplen":225,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":206,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqg\/WAbE\/uiz492guGVRmewpe5+N6Epf6KY3EmeTf9vtzD2v1gudewEK0MZCJTPRkLJHtSdQJ0PsCQBGDQ\/VAy7Xumbumg8mJMokQcQPHGqSxOO9+fzYvFS+b2rXFM87Yklp3x92LSmoVCJy41KyILna5tqZwlt3G\/jGLPhwdZtFu4p\/ERKQPU7JmRVEbyFcDPSRb\/ITBlfMhCOVOvDLOzCKht1WM=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069189,"pkt_len":160,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAQBHaEgoYUrwByQGuKBxaBgB82h2AbDJ0fq2fg1Sapdqsg2HBVe05NRC\/Kb4jo1Mq5HlC6gphp3KtW7zfp80F4o2pfCVgPT74RshhoeEUBWHj9fPDGnnYtcwnZSB39Nfn0s\/Zh\/2n1W2JMMgPI\/Oh+zyV1qipEYFluPWhbTsG9KifLpaESJ\/WZg==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":224,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8mXiAbE\/viz5BmguGVRl\/gbwKxmqhr0+E8kwGDGIVLOOfMCpnFcRU6wwu8hWHwvH+s51uEELqdr+Ny+sBnPVxjSzBqVzdn723C0Ub7ltWQOf\/DPmJIUAY093UDznyjTwCdfEKXIAvc9zHRfXJXTty7FOHnwRn1udOSGp56I+IC2mJFxfPJ2sQGanSKjxtaylo\/xHy5rla+AqWmL4zK6ra7F3oViX06fFmha+o24yWFVIQpnZXn5w=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBbW2CAbDJ1fq2jQ1Sapdown8FYNEI7e\/eYWpBi\/Z4vjDxPhO6FghsSCyI0ZKjNoFM6CyFgpT4IdZfc2xhwUmeBFvYL2kBUWfmez7PR1qGSbTl7CPYdDw==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqCSmByAAMVJql2gRWPG3l8w5hOwzoy9m2wROuAugBJqx5iNx7FJ02GyGvsIOD2bPTvUWQL0OmwzWT8TtbUF1kXKRhc5TuDE7J9Dm4r2uYi9gLbNEOgXWAAAAGz5aUe2fjPfiCzA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":124,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBYnKiAbDJ2fq2nA1SapdrWs4T3QNoWuQ2eP1YWBmf2ex5qpeeABF0NBJAEi9aSo+X+6symXoCfEniM\/VCmhszSIrrGzw0F3NG5FSm+h2NXY4FlAg==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2zCCAbE\/wiz5FWguGVRmsZO4PXZ2j9yFP4qEDQPXIuoWUtnEKEpiaKazpyJg8hYlFVbKIAWaN73f2ef+SGMlkExhl2x4PRFlwyRZncCkz8PbLF3CUZPRZI0ecQh5OZtjwYxzwl6wL9zxNGpa2vNao1\/jSMwb6LuSV3sJ0FWTyQ\/judsbl7JEjMH6DH5KZ\/3KMixdhYLXjnfVWf2Epf3YavUEgaCrciPY05r9mG5yxYik=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACTxMmAbE\/xiz5JGguGVRmUBIAOqvPkNjH+R1rE7pWpqJoAX3Qjcg9GbhvMx4dx98fG2ouesXHZ9f\/eWHq1oAm6Le0I1RNkLnH1i0P2rRV4497wu7\/r6DifH0+2JBIDzbtAtWhfkN5KHRT1XgifwpbW2hWgCrHF8CyfYoW8JJQiiHRLRnevjlZMKHBT9dbY","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWk9iAbDJ3fq2qw1SapdrlxATjMSWeUY53aSRiElKtcAieiKYxsTBFtn\/yWyQ3dkPH5Jt1chReO54gIKM4Zs8h3jmV6fNY436JTM2tc4Iv3EI=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":211,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMMAAEAAPxHa3woYUrwByQGuLDhaBACvLGGAbE\/yiz5M2guGVRm93SylDwF3ksO8izCp6axIx7Mn4iGwgIDjKSkDgUQ+Yupgkv7mP9o82vT\/xhPHS8eAbim2jNnPHqcQdhNOI2zdBpyZlWq9p1+28kOS847aUATlQWdctKPOrx9OdpyuPh7F9MgwOI6ShKVj7tgjq8FX\/okoIJH+wY\/44SGd8oQ1G4EYBaPoTuc2f+KFHIrzr\/WjyW4t8LUyjf0+Jw==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACTeWuAbE\/ziz5QmguGVRldY5SQCS8X2yVWZ3ChXemYDQEOMRUQpv\/66kl3X3z9rjqAOKoF7DUbTsFq+CSBnjGZiCYgkPv1BBaYlN13zD1vqtFy\/1CYzphFqTqjVKyBvD4uAEyILD5XGEK1CsUL6j0614iSMu9opWxZ\/CnKqh8BpdhSKkSoRDTSkZp+URAY","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGSRqAbDJ4fq2ug1Sapdog8L62E0Fqidr3oIpPQf2fOkTYH6N0vCZTsfoQ8cLuedJF07yIb0bF3psABrex9M4zIg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLnl+AbDJ5fq2yQ1SapdpqZVe1D1NcrHJJZ5EmLRZb5Dd5evE3zWxfVT32SoWcCGGnFG4dqvMx9bp+gjSH6BKvTq07fD3L","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKLSeAbDJ6fq22A1Sapdp\/DCTEPCf\/N1hgwCb3tQIThZSRzoh8DKyQL5ocmG3jR1MPhcTRcTHlKeE7sTenNRdSdirends=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":193,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdC\/SAbE\/0iz5UWguGVRmgmXijIdEOGWIVTJsedrrSqQ1xMlP1HJqWnDa\/ghkAOGtsGZ1DpopSBFJqbyh9mZRYOMQGpqc1EmSQN2uyVoFLBD0u\/eURVyE0dkqX2JYkLtxlTTY33Cq24TRRip5QOYZriFCylanlAFpiRoIuZjgFc2y+3\/OyjAeazR6WTWenZMvUE\/aEYCD6Xw==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIRAmAbDJ7fq25w1SapdosyfJA+VF+Z8VmQfJiE5WCvyP581JQbgoO5QVCko4mOBT5AQwdSpVcWhRjKAYaZvexEnL6","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":190,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAPxHa9AoYUrwByQGuLDhaBACaCHSAbE\/1iz5YGguGVRneUYu5ONiFGl86I3iDKkIS5X6\/uCnWX0\/KnSBtig4XdP95p1G+n6Oh07lf\/NHBfVwCC\/9nCgChN2\/BwCYBd2Wy02R7aeHiaM96r+ikleuIuEBEySv31LhxOnVaujnlQH1ToO+X35rLhtFOdG\/UqNyny7ufC+k72+eMAA70PpRNDrU1XGrOoQ==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqdx6ByAAMC4ZVGYPBykZo98GjW7rSje0MC\/FhIPRFNwClmIb9SGUZgNWOTNyayh3yccRe6e23Me\/3Lybtb9K3v7dyVC\/mDym9bajjfD19bHFV97QkQZaAAAAGt3WpIYgG7Bo8Eg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":213,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxgb2AbE\/2iz5b2guGVRkOWZvScrlI6nPlVXKT7aA3M8UM\/EbsHDuTkchG\/q6kPxmVH1INnEAuQKVowDDJJJnpNisX5fZ\/MEJS\/j7+WwkjR5sCSZKfjE2ZXSa6fOaLijaeN7fQZYu0qemkMtNGgIDXsRWUnP8n64AjoJa6yobfu4kTZaQCZoPtkgt6yn\/6Jhv3k5hOL2fmuI8k2uJbcabSdXvP6U9T47UMqC5o","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGMW2AbDJ8fq29g1SapdpWraRrbGW16m0sx3XUNzDyHY+o0bcWRq7WcVEUeNsxeajqkkpNk38YqLVHMokfonfxYg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEipyAbDJ9fq3BQ1Sapdp0U\/gjCLz6yE2GRRXXmYq76a6dPW6axwBN3BBo6SGS++swHA4qVeYffPd5BTQnZ10=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACVHGiAbE\/3iz5fmguGVRnkAFYL8q57TZfgAsET6IY8CF02OIIOntzQ37d4Y6X3vInE1Hg4pPsEGDSX9vJXgyUGe6bUuZG1lukb8oBR2s0DI848EGeil\/8vLlRxWcu3waq4W1D4\/plAvVqjQ2c8qCc0kUxPyO97gJLuIOsZfLHn\/tPJP4lZjqqLPW8Ok5CJ8bg=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":198,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACiVaCAbE\/4iz5jWguGVRlHPU07jfCRfwm9bN\/lmsmwOJ+HDgEcqPfblhdDGwAG86T0w93Cf0Eqtgiy07knU\/46IAMsPreiwl0n3YpeKmeoCT8xOgcA+\/stSBgLnhDRc5RsLGVFdBJMZOFtLaBeeG0NUZ0+\/YNonbX1Uu7wsCKbeD8cWSWgoaqF5hAG++TjVbrbFdoTVRMaElHdG26E","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGFkSAbDJ+fq3FA1SapdoAIsVi2hKQA9SE8jrqe7zIrpVS2NekprjjDWvw2MC1+I0z7GlEtBJs4LpAPZiZuo\/VnQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKq9SAbDJ\/fq3Iw1SapdpWAOYL2u5JMEFNRAQi0JoRT6gL\/xa3eEHgnksS\/XE6tgqou345vnEqFRucQkC03mqECjrjivQ=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBACh0kqAbE\/5iz5nGguGVRlSipNIGitoucF83uat8UHmD3fb5sOH2bAtWCBd2ClceE8TXQjqTQu8FaIsbOWJ6iREsdONWeKrlKdTsDUhf77o+YprTaQTlla+NpOxPtUmSeTuUe0fe+djrTMIhTdRZ0clmxhNDe63pgW0eondUBDZeAAza\/dRyagKn+WsZBcRHPKgkk1kMnW+HlRjvQg=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIeDqAbDKAfq3Mg1SapdqT3oPhXpCztJD0vjDvHjssuqgJZWQBD0PyMGluix95k6iMFWHzz9PW+33vIXGCBcv6bo8Y","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":208,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsl\/WAbE\/6iz5q2guGVRngFwDk+wG0BYke1feGeCe0gwrGzBNJ1IOmvwmMXNpGRbD22w8iHJzT8KIHK0SQkGv2yhw4OEUHkwL4oEIA12T12PHToZ0ZSTTiG3SxbVPqMv31orP82ExRuPmMxGn4md5c7LqBad5YKAaeTsy5NHRb2gHiYFYnxoGvb5hCjLRkKepkaAN\/I1HTpQAZoIbeUvDzVph8rnjqPA==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":172,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAPxHbBgoYUrwByQGuLDhaBACIsh6AbE\/7iz5umguGVRlny3gzm1sZdEhNguRsdtH15nzPfFLaFd403LMcWzSNC83QdkVBj1KpAgot+8uL78utD3yCaRDQ+l7glPcW8X2qTW1X1BoiswdrlrccGdtqk1kQy7TKb9\/x2VG9Og\/fPvK2SlFwaDSFwlWeD3isS3CxlUojIg==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHpn6AbDKBfq3QQ1SapdpqqKZm1n1AYSlOHrpYfL4Ni5g0JxXiSMPgmpo1lZjgyDXVHAk+cptrc1j5X6yAdOLkMEY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCZcaAbDKCfq3UA1Sapdo++EZQ0wcWiqB8IPwfSP\/SzUqXbTB8AYPN8lzfRoo2Vh0FLiLeIMF1NgHAp0fi","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":193,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACdpOaAbE\/8iz5yWguGVRnznZcmTgzEWZ9JSb+P34dZn0LWbvEf1dMe7NFm0AhDJvOtf1NWHgrKSshQlta7dRjiJ3E0W6Ls\/hmKJTMH6uT1mJm1QrKQH4tzsrAEEOZ4esPmAnuQVw3rXznCwcFNAsQ+E\/wD6XaQ3Kdjz83A8nMtUfXyq7Rz3bIQ8j+naiMDO7dpzowjY13C0Q==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":128,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAPxHbMgoYUrwByQGuLDhaBABcpQGAbE\/9iz52GguGVRkjC7W7oiGK6mbqIjkwpguQyF8xNIgVKiitjXZW6x5fXGlQs6QfnSAUTFs2Y9NiWFm\/EPYLdwczn20hd5jLjFEpPRwa3nyYGwY=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/goqAbDKDfq3Xw1Sapdo9p6TRX1Fw\/DfMXOn5yGafjUqrhLA+0iQB0qQfe3+mWvMN0DzEpcDkI+n\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABI3s+AbE\/+iz552guGVRk1KdClqP6u+dvEuDF3CgQBe+d9Tb6PmpOLl\/nJMEdkBoJWfxgVZiTilvnkutfqKmAj\/U1f","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aWWAbDKEfq3bg1SapdrCJOp2kU5g4mLQH8ukLOqpjFL1Qv4w8rxllfkac8NeCD7NXUDNTI9ifQrj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069190,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ucSAbDKFfq3fQ1Sapdp8iBtpSzcrgc3\/P9wgX7yLKoPr+m2+\/CL8L45CN4UQbQfkCf8YpCwYahFL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABI4A2AbE\/\/iz59mguGVRmKW\/Kz3+b\/9UiOC9PmlEyHWzZDnUV\/X9Vp+U7SA\/fa5TW\/mqAmrfaMDR07LCFn0roAJxR+","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJMj6AbFAAiz6BWguGVRl+xzndFNUQrbqe5dUpaEZqz0zbbhptwAiuFzjqBib15DqrMO8EWbw0sHpM5ywjc6yf9EL2pg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/tySAbDKGfq3jA1SapdqVOs\/uueyGy9gGnEZCIxe6fLar715J3ZuBOtOvzDfn1rVrJ6RzoFnyKJGi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MpuAbDKHfq3mw1SapdqzE3d+fUSoHhWghEVGwIc6idQfy+XnURz0Jx+KOcsb\/q1xB8NBrC6DHzSR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJY9uAbFABiz6FGguGVRlfkkmLalWWWwZ2KvtJPSH83xDYXUWk71vpQHFnU4oGQIP8ifVOaxZjcawnBsRvQvdTAjJb9A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLBeyAbFACiz6I2guGVRlHrrBrDJjD8G5+L5hyRXcEhDhwW1Ijc8y7OTXkD48J1YSYVnEs+SMNH2L3TpeFtvCGURLyWTk2","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/anyAbDKIfq3qg1Sapdos+Eg6vIMZoty6ZWTUGzv2NElqfvO1WJnhVjR+5AANektf3jSlgKV\/e2Yc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK2tqAbFADiz6MmguGVRmFbfQEv9\/UgiZdiKdJEfBXVnNG6+3cFQSWmm+IOebGYjnbaK+VlVF0zIgMTN6gZD5A4CGQUGg=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KsyAbDKJfq3uQ1Sapdq3gApGMi3eGl97P5n0oXIkUEX0slymo+5QLBcg\/LHFiunnnIOhhPcgpMjN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rV6AbDKKfq3yA1SapdrCRgavQ830uFz9KipKayztiz9ivNobVAB6M5LN4gVqFqGpjKGKm3wU2FnP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIpcGAbFAEiz6QWguGVRnOhCLkF8saKCosHf9xBrTVKyndNqwl6yIOPxpf2veNzS2Wa8a4DTnt67\/5gdIq9aDyrDjq","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEuzaAbFAFiz6UGguGVRns5JCIB5DxtrI1uTMxY5RuaM0bjWKS\/j6LWj1+dInxMXQUGrNxQjbA5pQf6fL1IVA=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/So+AbDKLfq31w1SapdrIcyE4BXv0ZrR0D+hReLhS9r11BTlJkupmQGMfsGUBIRoIy\/jjzbLRDmHB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":202,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmwDSAbE\/Qiz3NWguGVRn70gttv3f0TRM64F6cKC34fIMQCgh5BymzICa+K1R5Kqu9G1uXc98pR46N8XC+u6NJRaujOyi1clT+0cqlC1ZA8Gyny5Zs55drvKm4lAvh1vY8t81C6gP4OU+P6aRm9tRqWFS7DfWfODcVFRWffsV9tCqO3TdO+4EzDQlbV9i7d9xJVxIWGnEvJkrw7hPhc5\/Avw==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKcfyAbDJWfq0vA1SapdoRwDdehE\/\/DYyXjma3dHi7Z7RpkbFL5knFqOfjHPFpc+AdAqRgOSNxLdLKa8Gakd76X+YMBOc=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":191,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHBH9ywHJAa4KGFK8WgYoHACb+6OAbE\/Riz3RGguGVRmrEphSxvHShg6nv+35kHNqaom7ObMFZ8L3QBy1VDayWSo6W7z3++GcjUHvDVSgCN7X8\/HSS+Te5nIyU4wALQSHgSDOvMxpAgaBNJFUyhiEz2cLz+zZSzv1h7vfMGoHJkDf\/CRnor1vt1FE8ENG3yAslvrwBhbUfJ1HuB2+bwwgwvf0bcNWhtk=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGetWAbDJXfq0yw1SapdrVdkFK\/fjusDEmTyYkzXj4vVypgyo\/ngaTQ202AcuNGdNJnf\/Dw\/M+GXgdVQ9aJ6PJQw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABltb6AbDJYfq02g1SapdopmW41PM5Ebi0ezXyrB53oW\/x6VIM4rXFCcf1ZZNG7H2kkV1gKNsjN7ShF1LH\/sXH3t+Dh5RafWp8xjNrumdIFAWBjuDITFrfohR37ZxhCA2w=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFvbCAbDJZfq06Q1SapdrbDMiRfjocufsD80uUgQ1nzXPxtmcsbdbndr97VZjXMWqHM\/WyjCnn\/vI0DWy48aGy","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLRdCAbDJafq0+A1Sapdq1Id+EGxGLINmre4d8OlHiD3QVomUlq4X\/VhIpeuOjJ2bahnPLU21rMN4LtY\/vrT2wE4CLNjKf","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":196,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACg1z+AbE\/Uiz3cWguGVRmZqFwAVM5Oj2s7QYODbo\/QmjSieKUZcFyzQXFaoZn5n0vbVXUbUJ75c48BgSmeCbnyNezBj+mqI32ZHYGODMmv0vdX+Y1AICMQ3DZwpjtsolXVoQ64UQbP0L5YKIQGFoRvMgiRQmgc8Iqf3U0fymhqBlBxbgfAQoLOr6KqEAlphk7hM6P\/OFxZ32FUFg==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":181,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHBH91QHJAa4KGFK8WgYoHACRjdWAbE\/Viz3gGguGVRnYHjdSXiq4iv9nO6GzHtT8o9LELOnSmgdM30PayZJS1C5eFQLPj6EObkdWI5LtEvjdZNsiqPN\/HOt\/yFNSvurEuX3yJpRV0+3oT3yvmbrpBEApeqf3TRc4uupgAf9GCkcEFYO9N05zd+uEUqPlhLMtxPgSady+to38rsSDYQ==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABD3uCAbDJbfq1Bw1SapdpgesJfhEyC5dHZVn0YqEYLl9PwidBAx\/BIEAP994oFn8VkBjR3ETmlC0ULo3s9ow==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":201,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClKVKAbE\/Wiz3j2guGVRlx\/n3shVKsKe6Bcr2Was5riOIuL3qeg9AVTSjpniO39x7iDFyWeczRxRYpcEKs69IPVywSBc40IV\/QgbLnssEA8DF0TP8m5wkFLoM13OpF4TVqUBmMDC8RuipfkR7mkccJqkwltGhH2FMpgBbSK3yvFQruTr+wXlUyhZfsXhi6kYQKEI6PRV0qrE8LCSYgz2nP","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/6YOAbDJcfq1Fg1SapdpSXTAEINK47C16hvWmBf6mJ9+hezm2A\/6DWWs53rtV8BF3U+47+fkqgeHC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wqCAbDJdfq1JQ1Sapdqgcd7UwOc5orI7w1jnUpe6gsp08sSP79Rd2zCMk803quP+D3klMh+em1yZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9H2AbDKMfq35g1SapdqkrmZ22tjaBceDQssikEX6kTDnymBCUph6kwUVuGfI2F6X3Pe+zdtpbYJg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGbHuAbFAGiz6X2guGVRmbC67Y4vMWoucRDc8Vhei\/72tjIpNDv7Kup7mHtdqG1CM\/lOhx5l1Sl1ei\/steFtIzSQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":158,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAPxHbFAoYUrwByQGuLDhaBAB6cvSAbFAHiz6bmguGVRlfbjHXxO\/Cd6scgGwaUnE9TC9st+PXQnTDC0FoNkf209h4PFqFpGO44kZqEAFVKMawqBaExLZqLuI8xRvdLDeGxbU7In6RUxOmBYQcgppw4xcIVhQFVnMMaqtJjucaROaJv21gmVM=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZECAbDKNfq39Q1Sapdr7SCN9mllMDFmR3isEgMyL5HVcX0bNFAleKa\/EVWBzxfm0upt0dGI6U64w","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":220,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMwAAEAAPxHa1goYUrwByQGuLDhaBAC4y6+AbFAIiz6fWguGVRmP6IaZ\/xzh28CLk2FQhViSILxQbSJBbey8HzxdBkoCj8syq8i533hNfiHDXSqH6XxgHXgvPB1Mq1BHi8LPVe42v6yfsEGCSKOkqlCvxbkuSRZaeNsM6MmuwXua5lOLGU6Ukhg0FzMS63LH8rLwqugjQtP2W+d2wu38N+gbCsTdYmEAf4i3mNv2REK12jcX+974UvqFuwsvNbn\/p+qFn4WcfoLPAQ==","pkt_caplen":220,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/02WAbDKOfq4BA1SapdoKV05+cF2lnMvR+rCYldownXhsees10mEY8MTLf4K2Cp1r2mzEJApc8TZi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1+GAbDKPfq4Ew1SapdrHQPOLVpMt6pI1lG1rv9fDc6uTXo4STzXOKSOcPhq7Tdvs0kbYdowwjnL6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6OtWAbFAJiz6jGguGVRltD0xwkmh2y4gkgxIKpjQnVK\/giCtwzw4ZTwsq26ZZzivSdb1Lo0Wh0IA8mgXmdFhqfD4ewrlfgu3jXHMjjWgxG3Dd+rTuBKylDH8x\/7E+ZyRbudauw8ug7LoMuam9ibJrvAf4GX6KW53M0DAem01OznwWHmvrSYP1mZA1+QqrJBR13n3Jqv+cN\/qpwyQTA1o90ZdCBgmtHb6g2SFnFNZb6U6DZaxa","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":216,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0FlmAbFAKiz6m2guGVRmPe+n8PF7\/+gQDsTTwcdS3DtVl8jjjwDa2sH093hOBXpdofEL7xFPl84U6J2mTerMP7qfWO56dVqB511S2dauNEbQCKjB2Bgp1cHYFKb3xyJaGHpZoriyFiFdHSnm+uET+Yg12Y1SAYq11JBA95YPkTRuBvg9bUCg5kJ8k+DsguqifbyKOD9yjp4MkMYH55dFLBqRi3r589KIOurxpXIW7","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZgeAbDKQfq4Ig1Sapdr8e6QbvbguxvhbBh2mkcVur49crdPQqAR96Dt5HVIwFd5kt1Bj3sxtWOrd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/kwCAbDKRfq4MQ1SapdpLNPzv7flJ1yZ2Zy+wKNZfcrZKk24UrBrbexhIH0ZelkZDvboUamdRq6dJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACy8TSAbFALiz6qmguGVRmI7fpBJlCY7HdPICAm0sQ5L0avo\/uREPkvzATs77UQsDVo4Enn+YtlgPGuABxAu0uge6u3phe3tvwG9vZJyvmDejO5thxAUf46xtUluJP9MEGCkwKYR2LQU25IHUhnlA3mzpQAwiLrbnYwQ2hgH8r8D44pzUveBQriiZwdO\/UkZYFuLQk2Pm7\/7oxP1JZEWHonWNSqjWZGU+Qld0qYsA==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACygCaAbFAMiz6uWguGVRnThlUG4RMriwzSMQbNH0RN2bEZBbrkcsLZwjFJrZZ1Gznx+c\/GVWFfKFx3XWO6lEmjVHfGWjtEgR8A7MwSG346OjEd8JM6CV4Q\/+2e+\/wdEYIdU7ZmHZyD\/Itax2lYOADWNyGnBnYHaVALyYqu8IsOCI4GG1aoymeW803\/BwGyNolCe4zb5bTggwHQwMA7FYGQwpEfezLAUSevD0W5QQ==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/eLGAbDKSfq4QA1SapdoZ1BoXKnkIgXM9mcwaiz2HJelPFua60ZR5Y6UxXQUZI4OUzO7hML2eHsrM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0540{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACo5vWAbE\/Xiz3nmguGVRlcQ8j\/Fj23ZqPmZ\/Pit+HHzzMChY9uT+nPn8lxvR8+HmsK6wZeUfoLQg\/sdfFLMDeWc9ck7CKWBgOBNwvSe5+yyZ6tGyKwXZE4QdK80pat7\/7K5ICXBiOv2k3n9f1LZEB\/iZedhuWcvYXJLVcZrDiTHLaCoBLCc4pQmOexR9OAajW5qMCQOSBgioaijUwdFz3RzVHz","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZM4CAbFANiz6yGguGVRnr6NqnIDsW8DMTWwilZzTGyICynenjj1JoUAchwfGOqn+FXT4XFDBT6pfpUICQF9gLNoEhmlOxeY3TEEQl8nN9g\/SsT9130H9PXEjUtpLav3NX4WAL8ChsqBcZdBt3If4mIvmt3z4nH4JR+YDngVAJOG\/LNQwGR1IqUUfK0ePqdfILqNIy","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/BqAbDKTfq4Tw1SapdqVD82ugpSdPbS42nK7yZxR1CvAVaLLA1UwFisOgQXnt9T4R8br8Mo4Yb1E","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6ICAbDKUfq4Xg1SapdqP7sVgzncXTJ2LyoIdS2R1EO2ctegJXdp2\/y4b9FI8gQJYjd6oKCZSEtGR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfl6mAbE\/Yiz3rWguGVRmoussqm9dbBM35\/+hPGuhVT1GRqMC0QLEoBUTRZ4PEAMkgUnSyLECxgjWJutwaVgXvSFeNh3LwZWQ0dKFhARGgv35+sQ9nRHR2ITNNndDXfvQZxnaHoaDSgc0xggxmdpOqNHaH0Wfk4MBYyjhow8bRtaBdo6K3EAY9srKZ4drgq8neGEP1nG1gXG0m","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5BOAbDJefq1NA1SapdpnNY9AKsOJlZUVWC8JqaWyHRYkS8G5oyotSwmSJwMPAYxe8EQGVmX9qVbP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":190,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAPxHa9AoYUrwByQGuLDhaBACa+aSAbFAOiz612guGVRlWy+7RJx8ZvXwdFd1O6wcVNr+iGYJTj+QrjgNme9MnnRbBdvTB4AZLaW1iw\/lps4lyetuH1w2tHqRwK0av\/XBWkbkNGjRRWvULBpfJ8NfWC+09Tw020tfJul6GSJiIHAu+33diaiU8L5IB68fC\/gyRHIQ0rhjcFDZaZgCr3Sqdesm6IuWstQ==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7D2WAbFAPiz65mguGVRkvIx0En1weuXr4iGo5f1+1GAkqjwRAk+d2GmsI45mHDyh48Fmp0K7KAkTkjrtaChHQjSCkDPkuLlLsAcrUznNZXvEJr7wo3NpPgFqX4GWXfMYB3tRZq+c4b7OT3ttFWZneRDmMMjdT","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WayAbDKVfq4bQ1Sapdpqtr3lmeAiSP+Yk9RMuRlifmYBKO15IphLYkib1UJ5W2ncdN19zr5hzHlE","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+SOAbDJffq1Qw1Sapdpf1weSmFqb2lsR5Y3D3waTeHbH+MkFFP6x5BJirw3tV4XOtx9tia\/94c1B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069191,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI6VyAbDJifq1cA1SapdqVaB8wcX8OxruHx7VMCNTNZimmU62WFbCbQDPkWwyDoR7UW0E1HpfrVaHN84OvgM8nKrqf","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABDkiWAbDJgfq1Ug1Sapdrh+0c2z9sekuW51\/MN+ogweW6j7m2n\/XDty1luWGEDa9oxdUSJ+rCfX8ZF67aRiQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGNmuAbDJhfq1YQ1SapdoYQjo8uLcBuN3HLgsu2Ll9L48NiVj96RxRmuTRziGIbugjdcSw5wU+0kn8RxfLdNfhsw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIK0qAbE\/aiz3y2guGVRmnd1z2m5lpgqzl9OrgEVIUFuWNEpZJawBdqqbOLUdj55CZR++\/5EhPB6nszmYafQzJj6hS","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGJ7aAbFAQiz69WguGVRnKARKn3YB1GvnwRHFXiV7dllKbirVKqOjtFl4BnOk7CxuzXLvcFKnNuwECgznTNhR0hw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHMimAbFARiz7BGguGVRmv1pVkBPCiRsUHzWzox4HbZXkJWIlaX7rL43lRkovlWgsJH2u\/7cyALuFN+hmYPuu1ayk=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgYoHACP7i6AbE\/Ziz3vGguGVRlZvEJNWKBc0GA2txE1fCfCbOkbltV7PNF5nTMRfwXddf5OMGYmxmzlEetJx3EeZM3g1+aKQl5JX+I2c+DZ7N5DALLXJGYQbb7lLOuToJSVA7ZKgPtKGJAmppHoemA6RI3fe5bjsOINief\/zH880\/4FieEqV8IbCm6aWI0=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJWcGAbE\/biz32mguGVRmiU5S0jTnPG0P6pDItq5k\/jdBorJDq6LFXhwC9wXg7BYUsf1y6wRBvvVLZdA\/+80PqVgkCrA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zmGAbDKWfq4fA1SapdqiBH9YZDecttuN0gbo9TQI\/+iZ9pZ+C8\/28WQOl+GsSeV76p48ApE71OfJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKqDGAbE\/ciz36WguGVRm0Kjh6vxu9i84xpuevO8Reml+7ISAEMrahTDASGcD6Zt0tJb8RXPW2BRqrTymvkMhl3n2ihhY=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGSruAbE\/diz3+GguGVRnD1Hc4pGsorAHgSR4n7lI528+sZk8Kp5gCoqh0bLIP5geZs0h7c0BqtL4Pj4tjIpq7GQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFJ8GAbDJjfq1fw1SapdqJstZNzV1MEaNpUhhu7cmHl8qdiCyI3JYbraQSpRU8LwnEUArwuoez38aG+K2q8eEG","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGjZ2AbDKXfq4iw1SapdpRQkBbY7NvAhSxAFaj7y+ckGTdr9GjQ6XWPT\/RozInim0LsoC8kPF0aEs5hYdM5oyyIQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI0EmAbDJkfq1jg1SapdoesWOoBZvRSfsHbgK1qwAlEcrNQK+1GUNCl67m0DetaxCNE7WmfZQz73w6SvC108D4OORt","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMVQqAbFASiz7E2guGVRk761KzF8aRv0BVlDoipYkQWK\/qMidzNAfEVx\/ATrZFTEnRo++Qy+UuBEaD5BErZ\/NnblGwdpje8A==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGCC6AbE\/eiz4B2guGVRnICByUM+w0dgUPh4A1ZGpfFJ5SBxTaOgBVWRmuiYa4FSZ6CpeWCJED0sL6B9eIpW7Vbg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBI1f2AbDKYfq4mg1Sapdp3JqJcmpNV3kTqKArIiS7zB\/S8jR8NvbHKjQ0J7J4mu9N\/omoNWnZjzxKxJWhvxEPUTX7O","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHe5uAbE\/fiz4FmguGVRkbZ0fzpzYu68Oo+H8yDveDPpjj3mMgMHy6de19NFG3Ryd+sq73IqUGhA+uLt+NOk1TTGE=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFchaAbDJlfq1nQ1Sapdqs1S9tD1wgSbZEe6UaIIMxjrVpwE9AEAdMkOjmkFS+4G9Vf7giWe76NAiV5hAPSqE3","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJxyqAbE\/giz4JWguGVRnbQDBVQWZPPIpJflRo2IqLrqZ55Ean2nEe+lp+iOIZaWfr6p45AKvjU\/wupw9gQRlSAuIOVA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRuJeAbDJnfq1uw1Sapdoja1l0L6+QxYcYhxZ0Kdzc+hyTRbUEAxYtXdRpUPEAobq82dyZwz5fbfGnSF5hRfjiSzcGFJ8PDlDW4Oz7","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIx7qAbDJmfq1rA1SapdoaQ2f68pwcljCt7vEMe6jnSEebicGKhH7skLday4eE33oUdg973a+vnAivtEWzy7YeFJ6X","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIktmAbE\/hiz4NGguGVRnNGxXfGJLN7caJcIJtiZgGoXRt+YRW4i4m1pom6jUWcKyaRg7B81tb7oWgEpFX43QFWWpu","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCLi+AbDKZfq4qQ1SapdoDL4GybWHW2L7du0BBgnxcLTME3wMxUMw0C3ydMsJtva\/QkAAp0+6YX5zDz0Rn","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGeteAbE\/iiz4Q2guGVRmAT1AtF65B0S+taBGB9Uw5wXNRkVQWUt0wlz0TS1BfBL+21dW0h3ElbuqOgT0gP5g91w==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":160,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAPxHbEgoYUrwByQGuLDhaBAB8lV+AbFATiz7ImguGVRlKdXynPSB\/oJp31zuDTxpSrdpVfw1hTuem9YdsZtjlbzt+krndymO\/Bm4aKjo1SuvmF2Im0s8uYTIVNoZV5sNnahHfN1neFZmSzGlO6foTkmwB\/vzN5iAGJvBDiV9u\/1nWrQgf9cdmmQ==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFpzuAbDKafq4uA1Sapdovea\/BFJT6cJpCHtPDEVGWg\/v0myuL0RpfhF7t6xxtmvBkwYYmBw9DHUzPneJo16BF","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":208,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsJaqAbFAUiz7MWguGVRlkaHm7ta8aA23ParZEpFfiA1ubXjrBL1KnlPhi3ca2\/QiVGaL9Hd80LyhMHF7qOBvegOjLzaf6lA2ZZS7qAJXXindTobH0syuwdtWdP8BN2BXcZ3BZ0b9y0jWvWyTZk0+WjS+wWTJ9JnzAfrP0U9HQScdYvgJJ7ZHIiZ0oLZASBIfbUqsAqPhxlTAqr2cYKQrifZF9As8ezA==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABK2QmAbDJofq1yg1Sapdp9eIYnzCF8IV7iPq\/rLP+mg+8ZrKW7uYey9jGxgNw1SjuQRU0yxk3QZpZrM1ULOfmP7WFw4bc=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":167,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHBH94wHJAa4KGFK8WgYoHACD+SWAbE\/jiz4UmguGVRlY04l2D+UOo8XgeJVf9FDQvV0IfInKRwAA9ZNLJgkkR7AjZjqVsdBnX7yRtrC6cHlbIJBZpO1UPH8OnTKAttX4hnqfIt3T6t+1MiZHtrB0ds8YLCZhe4kZD2lbsPWjgjk090QlXCQ5+7RLo90OddM=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHBH9+gHJAa4KGFK8WgYoHABsbCaAbE\/kiz4YWguGVRl5K6Ze7GPwVKEdmoe3jn1W3eak3yKa7eaKGZzL+JDSIkk63UyLZt9HVPaXM+KVqBONV9Hvg2LSyxc4eGHZB2+6O4TIi42dllMU28eyCk5XeBUXNZfjGMBU","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABINXmAbDJpfq12Q1SapdoEcNkrSNLrtD9z\/jW8Y8LOu7Sw0P1zKClaOTnXsmJLxljX1Du+8GQlyazv0fJCOUOJ4Y63","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":201,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAPxHa6QoYUrwByQGuLDhaBAClnz6AbFAViz7QGguGVRn2VWE7oIIigE5+PjMBxQAlKZ1ggVF7RjKbtTeUWj6uDeZpplR\/DASJJsNY6BCnEWlUjFR6lifsmAljxzhOaHs3e1GebBlEb2FSGQAuScfBj+BJlsak06sE3OFLuMl+o++\/GwvGlFiu6GhNwVyNxvz0n0J0ZUWEXZBBc1k2udfD8uBs2ekzJTNfCIjQNR5GeDNP","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFkUmAbDKbfq4xw1Sapdp8AMvrxKIaGPEMETTE10VShDQWy4Qn5irF9qQW+o+LuOKbzcNmoPH7VhgmqgqjTqMm","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChCyWAbFAWiz7T2guGVRlMyxV4WbNXHMjdjlyFGHacTk6D8KOY8c5KHfwmpxLmY1l5xqAjf1SYgTaLsumjCVmIlD9jzS8w\/DWE4VnZbAvr\/gpsTyKnRsrG7oCpZavuRfxH9Qs\/Q7Z0ysS2TsS7Fm+mmtROLz8eLfEM4iUAJPuOz3Tz\/Wblx7jdp\/zLgIFiaDBV7VCXaqh3uDYx5kA=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEKx6AbDJqfq16A1SapdqIOk6uC8fAHYX\/DeMwnrucS\/GK92i0glFi5sYI3m3k220QCDHyIkZeXVA7EnSyu9k=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBDrZ2AbDKcfq41g1SapdqmeCHHC7W0hgVHYkrbuLA9JGTQqK7bcCZCsnDTcPbFK24R+9Ssh9FjD5iLc9sVNg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGQWaAbE\/liz4cGguGVRlYxXlTtPRiUDEjUJoObRobqUVSX0YSxNKF9\/GJPuMj61FUmlT91n5eEm+u6ynjKgkRog==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHIMKAbDJrfq19w1Sapdrizn2lfFOvQkENygU44pE0TuLdrm3BKJ2aHOIJB3HfugeKghBJ+5nZDXtE4r0UNNrfJjY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIZtyAbDKdfq45Q1SapdqE\/LK0H+JDTsWDldhKyBEX4Xyxj0wqY3\/JcFlckcDWBHe4DZSNUCuTrYWosCt5EGjebIKJ","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":143,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAPxHbIwoYUrwByQGuLDhaBABrgBSAbFAXiz7XmguGVRkKLiq\/xUzeLPcWE+Xy+VmGTGefVWY1KOIO+C5rBOnRv2gUwqhd9IFcTbuyrkNy5aaWzW6h4BstdOV7GmxdI9bhKYU21kRuMuIiFFKhhTBACUj22L5G7lE=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJsAGAbDJsfq2Bg1Sapdor+cONv7HiiPOgtupJ4sg8CWQScPIJ8\/LoL2cheTICF2CyYgu0xLrRlYjvwoET+Shsl+EIIQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH1B6AbE\/miz4f2guGVRmeddZxdoRhkGbMIdAqTVh0HkmqCSqUvQqPiMxhEtZGCugG1E92pk\/frR4gK4YosU\/YE1A=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJ+o6AbDKefq49A1SapdpU2gP0L22O2nqipzcxFMdYb408y+EBPOgnumKoF9VXwTIh3xT\/I4CvqqqDNov1QZWqIND+vA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLMHGAbFAYiz7bWguGVRmFeAa4\/3KJyTCtYFfH9JpmrGvbGqam98lWZp1cvtOjqGLeN1FEKT4ZUZpjreo9GLQyJm4Sprmw","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGcXaAbFAZiz7fGguGVRms9hk3St9dfnOazgwjkuocBVNy\/0tCFNb5KmvA2I4EfJENOAmnRCIuR\/Ijn87OomrETg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBG82SAbDKffq5Aw1Sapdr+I\/mJCIkY1kad9tOTxFw6sBuPDNVz6RVomSZJJ\/vCFQxG7JFduMWSVq+YyaDR6Dhq1A==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEBnSAbFAaiz7i2guGVRmXl4\/Kxa9KrkU7RrldcFWvtJaIZ+3Bzhz0LMUtOoXqu8bPxvbukwLbwSDFDvGvLck=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLKjiAbFAbiz7mmguGVRkr9Zx8ql94GY+LAdOnY+W1ZL55l81Df7OlSGwR039A007CjQ\/BgPebqL2GGeKmp6s53RGdyqeN","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBVpF2AbDKgfq5Eg1Sapdr8lsLxqhuuwCWPt6Odp21WKrLCX35Kx6+wx08QaSzTOZxmxTP78JsJeYVFkFh5JT5MXxU9xTHUqPY9ZnzbMWUfyg==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLKYSAbDKhfq5IQ1Sapdp0XZ7+I09ThodJ32KUqksv\/xdKMW6hwL3lYyc8WAp8KzyJ04b+tQqRiaM+1L0Het0JsVNMsQot","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEN\/mAbDKifq5MA1SapdrK0IAEqbD\/+bnCwMUwhcCGhIxeSwyoPkmMiz4YtuBoLzkaBC5vxD+H4Xgnk1FUrkQ=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFe2mAbFAciz7qWguGVRm9mpt90lycwzmclrEW3+bUUKwU3QfxYTQ5QVj8og56lk1C2uLI+ZK1xEs0YrxyHPCN","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFAhyAbFAdiz7uGguGVRlq\/DGCnmopYYr\/Ohfo7+iIFOWC+Fjk9hIM+ix9yNutyvzGByG9pKkqEvj9RJjNra8Z","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":151,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIcAAEAAPxHbGwoYUrwByQGuLDhaBABzCfOAbFAeiz7x2guGVRmvT2d682jBPz5CwcnlhqeAC2Yod1udVM7zhN1JQl9o24UHzuZ2zUJUYO2T4WpKXktfsys8Wd+OdZVwFYIYA\/mr3VUWoPAZwIeCEI8w6otYthp85HiOL84zide7NuOUMA==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCiWKAbDKjfq5Pw1SapdrFWnS2znAkaIQX2itkolc4SqMtYNKzoAJSP7dEQk0YSg78T4jI2probi4UpDys","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHm7iAbDKkfq5Tg1Sapdpocb2fQ7KORrgBKgYXvW7MESGAfyI8pw4ZaVksDdKgC5zqSAJYLoBJrLMK7HTvrsvCyMo=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNpxuAbDKlfq5XQ1Sapdo5PfRsSxuOLpYoiHgSfeeszbOtCXyaPlxw7AZlE6\/GW0FiWijcnNcD5uXpZ8sMV9Lye\/JHQSfUPw8=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":198,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACi6ziAbFAfiz71mguGVRncdih5WgargxwmnmevuO2AE9yLPmi5KVCXs2nf51+V82CDLVaOCuuGTq7WXNiohRZi\/1QH3uHMHH7eXF5g+PB0tD\/IpLWlukQ0ukJjSzQP1JGI6wKPScWELswXc6kjCkF2pazeSwKjoi2OaCjpScImTitakZRkSCL9LQNT2meOxFeGURc7jmk09HbwOFFw","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACokeGAbFAgiz75WguGVRkgP6MU6d99nYSEbs+FtjZmLpaMhZf1ScPeW1L5PAjmre1oNTe\/flkNk6v8\/uSjALMzEu\/MxCY0nRlmExW+bFCn7mouQiX9S5SxcrosBJH9t\/KlBAod2KaQLv0zq1qplBAV+6w+9fOQFfEAqpP3x+jcoFz6BlXgGnndrvVW1ljrMujswNb3nIzAc3FoK90eUArAEJmI","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJHbKAbE\/niz4jmguGVRm5z0FHafiqQR24G1KFx0IXPLUj\/oYeVKZU+fYRCAGNds+DKuzXaEdQYh6lm0FG7bcc\/uJbpA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABP9qSAbDJtfq2FQ1SapdrGqKXP0DNzNnCJfTzyEJvOHQNy7JLDTHKTnkapd6E2lJM1m68svuyNhZdBCxNvGEgm8ji0wZth2GATMA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABH+96AbDJufq2JA1SapdoYRfcuzgm+moA\/xphiKk67xdQQdYGEjHRn9i1lodeSbU8ltEdXM9SibXBELqfUYadG4PU=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJZVqAbE\/oiz4nWguGVRkiR77NGiChHz2aFG0GWao\/lGYMA6YNkB48thhabzgRow4VUaCBGgs4NloXYTN+pfzuWiz4Wg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG1seAbE\/piz4rGguGVRlc5WUhgdtOgMw4j2iJ3Df5zYLo6Gf7yKpmLnrjTAlYqqfShaOvgPxag6ZTtcMoGy2zKg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEG1GAbDJvfq2Mw1SapdqMlbXCYBk45\/+v2OKYaVweUiKVyS9YvKoxByjw\/ox1lQeDCL\/Qkht2\/7OFeAYPcsk=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCLjuWAbDKmfq5bA1Sapdpo\/\/5qL2zpUvne7SQ0h0+eGhMMYhqlqe4tpFqv67wAboQ6YGMzR0JlfY\/8kG7EEgsm9+HauOwYeuM9YEDFoNvNn5EDV\/qVbnLKrU5WI5yK\/b6akZhmYorKrF8f8frxXpHNSfD700ywvyQqHEJfiYUbGr98fVauFw==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":165,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHBH95QHJAa4KGFK8WgYoHACBNWSAbE\/qiz4u2guGVRkHFd27IpYNg37rSXR2rdAJxFs++QHVg9vJ1F9kvS3T9f7lefiHAbsYXEWvYXqiNVUZ6Dool3OxgouyTDh+sZKjFb3\/09B6DK59OBDk8yRFSTsz4vP\/ZFrVsPV68NDjDynG7fZdCffdsvf1r0UO","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGVuiAbDJwfq2Qg1Sapdo+XvXWjT5VLXhcp58uSMOZa7E1OWJqwUCumqVDZQu5Kd2b9KHFbYEWvyz49DmAbQAu4w==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGIMiAbDJxfq2UQ1SapdprWeOMQvkDHjCdHQOm8xaWJtk6m4shLgKoTfZinybrTNYKWSpIiR7NKj6DyrQFx5eTuQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069192,"pkt_len":216,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHBH9sgHJAa4KGFK8WgYoHAC0\/xeAbE\/riz4ymguGVRmPVqABirWbkxC9AwaLBq9rg\/c+HfOf30GM1Ppzyta8A+2XYtUc5d1pocXMdrHVlduj2DLGSfN+iroBvWo+sZ1zX4xWHG3jxWTQHs1Cjh4kZj\/g0wvnOp6uUkAMeR87f2RhqKYSiZFkjoEei\/MvvMDkQVz75Rltgq39\/fL6SnHH1aposMUpGtsZJS6dnyhiyWtooFDF7XuqUW+RP8AzYgzT","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGwmyAbDKnfq5ew1SapdqHghOmHPuH50Y8ubxgQpeZslrva8BZOo7CudOCWD9v3GdQrgqhpdvigDzT+7pQ6vmXFYWWG5Q7qG+1aU8dC81CTBeenxa0BInUrx7TgZmtbMnWxT0Cgx2broaAkR5Dm0RxGgCluA4a1AD+vV4mkAwZ4ow=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChAkuAbFAhiz79GguGVRmhEZlKZCr5iVX8ZFM+i1vvX5R3lMFCtFR4avR5y3HofsTREDqHPMUHxbQUhWoOUwAi6b\/5IT2\/2F6tPu2F+KY8M+NujnRALBRuwygNXYy3V5KM6QWMyn3JqIED2cz7TvtZNmG6SJ9mUOXUwKIFeemBaNyxxArxExW6cB5Ia8bgZMc6I2l47pxgBFLyais=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWE8yAbDKofq5ig1SapdrMwJ9MrQL6p+TaYegSnMh2MzA5TL\/gFOvOo4qSIvrZ4ivd0QuMRlTbiUf4GTU3pyhG8VmaJBGmodTYWDhhKELaO1LLjQA0KeIcvk6003pJ4u4NVtpFwI69P47x1RxfpVHworPle+40iLXqpbu3suV0i3NN6k+HHl1ebIvAMLNe1l++","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":169,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAPxHbCQoYUrwByQGuLDhaBACFhmCAbFAiiz8A2guGVRm9foArQPHOm6NV71qqO1BiVFsEdT5a4rrLQ3iBjapzTk7PMmc4YBfYAl1yI92b4g2OJaI\/0xGAdbCDwOi5ATeU5lmiTBbcP\/i8rgSwdL6dEuGRBhMfE6SGDmNFhr0wGkMtWVYz2381W9U5H0HaW1t+CA==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":203,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACnAhaAbFAjiz8EmguGVRmSkis5DI2PEdgc\/csLcET7hD4SKvX8fV1Vym0GT2ysnrbHO5Lz1kB4ILny4ZK9bUERPrc6yU3GGWCC4j7MX9RtSfbjx1GTYeE6754pyHTEvQjjAOSTzJ03muKZTArRwJE1gsl+D8eiiu+abWbB1+ctBgVBf\/mq\/otuBeprK8rAdR44+RfY4FVRQaQcOUXmnjnYyHk=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":176,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAQBHaAgoYUrwByQGuKBxaBgCMZfmAbDKpfq5mQ1Sapdo\/fwkZkmIZ3fbN+WbVi9d4oJjDTrfIELF9O8TIoeWewnCtsxcQ2Evxsli3WUmUw0PShMbDxqD7ZAKeqV+NMJA2\/9u2RwJaP9IIgH0b9cMuXBzbihAa3+B\/4oFg9kPrjcfNr8BGdFFZMcqt1GKKuq5C7sTlyBTPUKI=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":223,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7sc+AbE\/siz42WguGVRnybEUY0XOKZcOAiGFjmTlRYs2aV2zUqHGAhOclSVc6seCtYY\/pM7uO10HDY1y8hjxM19ipWFN77\/7Kp7jjzd2PbnU06T3UoK6UlxyhvxucCLIW2V3gGDCMZhugZ79T6th3ehLtTljRGdrGP8CRiioihKnF\/wysvbVCLWVtCb6Swl+fgX9I9Ju2QejJSSClsO1RpLLXq1B+GgcgdZiH50uWGY+0Lzx2WA==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCLrX+AbDKqfq5qA1SapdpEJWSJXP23K2goCWhJYs\/MXLgXHxbxUEXNNxY9uFHB0LQ+cZl6LjZshoRjZ0rDYbhI+Jq0jr68EDPDRGHCq7AhN5ma0+r6XyNtsGfE8qpSD7NdyENsCQmnBF69wQxGTTFZ4uLuIRXFOdX2Rb+TbxWwVWu4XqTE9A==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjECqAbFAkiz8IWguGVRkVeTJIfm7YwHj20sgGzLO81IM+rLWHsawHXArwJbWN8p17SdEx46bPEOLQBCaAuiyTBRZcl66mr2rJc9xQSNwOR069RTPTUixTVqd0fnt28GA8ZfmIMRyoDRf0cyca66TZWPTF598CqeC6KdWVQRWM0xALwF7lXS4BuZeDYpi0pybs77GXxUjNouHxym3jPA==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":207,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL8AAEAAPxHa4woYUrwByQGuLDhaBACrSRmAbFAliz8MGguGVRlpsMqQPJX7z7T4CHP2wSdtMyVR5z9yc1mtnq4JVFVayx6AANSMh8AtKB8JHkw4vZ+T6RkVy6J2ORXtsAaNP8rW84aiN66vuftDCAvqFr7tr6yOY9rE0F30Al33\/1W73Qpu5zQGCTCjpo4MJBOa\/Cej\/\/Srq77N3REBVdd+lSeNHE8dctKU\/RFoKF+Qrn9u2z+uDbwxe\/2s","pkt_caplen":207,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHH0+AbDJyfq2YA1SapdpBpuMiT\/mL0YjCE8an23NZ3\/0BX8y69TRi9f\/+\/FJ+1poj5x1HwCvMtEZxihO6OnY7+Vc=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJn8WAbDJzfq2bw1Sapdo0lHGPn6WFVs0Q7dwKpvO3GDpvtmRDrcG2BdMEWDBbhkBC\/2nzxDQqG8umrUM3qAON3vf4uw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCL5laAbDKrfq5tw1Sapdro98tpQVsCZfUuCPNH02m\/2sa9zPqQCktg4I7s+FzcWVojetyBRWmkNpbk7ezcdi0wgvma7lFpO0v\/6JuwIopAT\/Axnwv6u4K52TntnR19HlFFXwusSW3k44qO5Il\/oDXqRwtgU4YuQlcE+HUAbQqa1ZYXCQzl2g==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0567{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":225,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANEAAEAAHBH9qQHJAa4KGFK8WgYoHAC9Rj6AbE\/tiz46GguGVRkyhjyJfmFcyXy\/aJKozy5IenXvr4dHSmP\/lhRu4bYwRkOCKFrGaUOj1r7gqkZryhQaPm8qapRnOGjwLHBCufi\/vF76c31hyP4VdtWazHUXHS62mDMVfZe6NfIDs4sSikTBzwMu2mwHiU6NbamjzcFEr44QZ4bWehqJpkM8HUMZNCeyvC\/V346Yxt9rt5EJfQ3Dhupyq5scfNhLoEJ7Oms9rMSCnTIEjySj","pkt_caplen":225,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACg66EAAjgYtFq38egEKGFK8AbvLm\/Ii35zxwsMTUBSkcjKfAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":160,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHRH86gHJAa4KGFK8WgQsOAB81gOAbDJ0fq2fg1Sapdqsg2HBVe05NRC\/Kb4jo1Mq5HlC6gphp3KtW7zfp80F4o2pfCVgPT74RshhoeEUBWHj9fPDGnnYtcwnZSB39Nfn0s\/Zh\/2n1W2JMMgPI\/Oh+zyV1qipEYFluPWhbTsG9KifLpaESJ\/WZg==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqiA+AbE\/uiz492guGVRmewpe5+N6Epf6KY3EmeTf9vtzD2v1gudewEK0MZCJTPRkLJHtSdQJ0PsCQBGDQ\/VAy7Xumbumg8mJMokQcQPHGqSxOO9+fzYvFS+b2rXFM87Yklp3x92LSmoVCJy41KyILna5tqZwlt3G\/jGLPhwdZtFu4p\/ERKQPU7JmRVEbyFcDPSRb\/ITBlfMhCOVOvDLOzCKht1WM=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":184,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAPxHa+goYUrwByQGuLDhaBACU8qeAbFAmiz8P2guGVRl1QrQc79+J72+AG9OJcCZ39H1SQNrm5FzPyCJPvn220OuiYo4oe96Abv8QbFJ07JAW+CqnKYP8WFm72zUCvCtZ1CQl\/JsXHsWsS1vYnt5JDKcBv0sWZLGzpIiKB7tx7SElYgAmEZ58NWH1CaX5ws+v\/BS7S5IkQfCfP1bFBtMVDQ==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":150,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAQBHaHAoYUrwByQGuKBxaBgByZqWAbDKsfq5xg1SapdqsBsExUtd2AIAkTt2enAc0Z\/L7pOA9kCT8w4\/twQfkjl\/OoOBS9UlGTGSdr5z2iB8Nma0l5NNLP7nWrW7rRDT\/GpOg1jIFgMtoHm9LrGVJXxmWRRQRqXBIMQp94n2x","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":224,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8nZKAbE\/viz5BmguGVRl\/gbwKxmqhr0+E8kwGDGIVLOOfMCpnFcRU6wwu8hWHwvH+s51uEELqdr+Ny+sBnPVxjSzBqVzdn723C0Ub7ltWQOf\/DPmJIUAY093UDznyjTwCdfEKXIAvc9zHRfXJXTty7FOHnwRn1udOSGp56I+IC2mJFxfPJ2sQGanSKjxtaylo\/xHy5rla+AqWmL4zK6ra7F3oViX06fFmha+o24yWFVIQpnZXn5w=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABbV0aAbDJ1fq2jQ1Sapdown8FYNEI7e\/eYWpBi\/Z4vjDxPhO6FghsSCyI0ZKjNoFM6CyFgpT4IdZfc2xhwUmeBFvYL2kBUWfmez7PR1qGSbTl7CPYdDw==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgUsOQBqBQ+ByAAMVJql2gRWPG3l8w5hOwzoy9m2wROuAugBJqx5iNx7FJ02GyGvsIOD2bPTvUWQL0OmwzWT8TtbUF1kXKRhc5TuDE7J9Dm4r2uYi9gLbNEOgXWAAAAGz5aUe2fjPfiCzA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYmI6AbDJ2fq2nA1SapdrWs4T3QNoWuQ2eP1YWBmf2ex5qpeeABF0NBJAEi9aSo+X+6symXoCfEniM\/VCmhszSIrrGzw0F3NG5FSm+h2NXY4FlAg==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPUAKAbDKtfq51Q1SapdpiCDhx5Xi6EsVf56zcDKRqZJEqR79ksy62+YVry9ptBkx8rUYDDJ8toyOEPhxa1Io1AAjC1IIGcpUo6w==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLfn2AbFAniz8TmguGVRmAAhXXMVI0LfVJkhU1Fawv0zpsFGxQRx\/8GXw6xZwsFwRlTRQKCidnvbLeC1h\/E4PaA8Y1mjje4LvkcDGSecSHu1XUEX74AEWVn3nXsRpCj+nxGNPPIHehy5oDUiz10NWfuVnN1u7iVrbuqm1ygaIMlaFFnJvxGg==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7ZSeAbFAoiz8XWguGVRmSKu1Szj+o6jjVr\/RXbcCgZib76JJ8+eqzPWjfb+5SkXlDvPq2Wl\/IRK0csR4DaPIptJyFg+zMprYw48nsvmesjImJnAq\/2LxqVSxmI+iKoFxHqD1FvZEgksUnqCx+Y9zolGtLJQ4D","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0558{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC20DqAbE\/wiz5FWguGVRmsZO4PXZ2j9yFP4qEDQPXIuoWUtnEKEpiaKazpyJg8hYlFVbKIAWaN73f2ef+SGMlkExhl2x4PRFlwyRZncCkz8PbLF3CUZPRZI0ecQh5OZtjwYxzwl6wL9zxNGpa2vNao1\/jSMwb6LuSV3sJ0FWTyQ\/judsbl7JEjMH6DH5KZ\/3KMixdhYLXjnfVWf2Epf3YavUEgaCrciPY05r9mG5yxYik=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZP5GAbDKufq55A1SapdoyHnX\/v8j1R62CkCyG3OYNW\/vx\/ptn6pb8psSV7jtiXLUyAnOFhh52IhZlFWv5HJwLm\/JxDtSJlOdiIEW33ZZhgEmuW8Q=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBROyyAbDKvfq58w1SapdqQqhfDkATpK4udXORC3Td4R114NSoVuPAdmO8fr81hUza2IjEOhmKhKXeoEeN6LjTJtCWO\/5V2yhTuR\/CE","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTyOOAbE\/xiz5JGguGVRmUBIAOqvPkNjH+R1rE7pWpqJoAX3Qjcg9GbhvMx4dx98fG2ouesXHZ9f\/eWHq1oAm6Le0I1RNkLnH1i0P2rRV4497wu7\/r6DifH0+2JBIDzbtAtWhfkN5KHRT1XgifwpbW2hWgCrHF8CyfYoW8JJQiiHRLRnevjlZMKHBT9dbY","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVJ2KAbFApiz8bGguGVRkUjPTebOA7Mt3tkeCWxW76LvkXxMuEKju27dgoX14aYMna1KfB+DvYXeZnZSgwxNVziE6SBQjkeHB1qjRmepgHmg==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK9E2AbFAqiz8e2guGVRnqDfiVAWuH7szeMi6Nn6BAKPBaAHS5VbSgdlf7\/0VTNRCqWqXS39ZlHw2QRYLTH\/oEGMLo6kg=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWj76AbDJ3fq2qw1SapdrlxATjMSWeUY53aSRiElKtcAieiKYxsTBFtn\/yWyQ3dkPH5Jt1chReO54gIKM4Zs8h3jmV6fNY436JTM2tc4Iv3EI=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":211,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMMAAEAAHBH9twHJAa4KGFK8WgYoHACvMHuAbE\/yiz5M2guGVRm93SylDwF3ksO8izCp6axIx7Mn4iGwgIDjKSkDgUQ+Yupgkv7mP9o82vT\/xhPHS8eAbim2jNnPHqcQdhNOI2zdBpyZlWq9p1+28kOS847aUATlQWdctKPOrx9OdpyuPh7F9MgwOI6ShKVj7tgjq8FX\/okoIJH+wY\/44SGd8oQ1G4EYBaPoTuc2f+KFHIrzr\/WjyW4t8LUyjf0+Jw==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLy5+AbDKwfq6Ag1Sapdrjs1g24w8v1LM\/aCYg+R70NSNKVS4TyYL8DeOYS6msCZWmtIn3HzjTm9561VgXRCk6dFDo7ogF","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKrmSAbFAriz8imguGVRlX\/+3DCjnvW2zuhMa8AhXMYuO5mx11l6qe5w38j8T6uSTuPpTqQB4CKcclbhFSS4XWpQGTj3U=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXeOyAbDKxfq6EQ1Sapdppmikl+59aEWkaFFRmDZe29U9722ffBcuikLB1+IvLL2vREoYZ4uITyp7lvCkO3R0grbhS+UlLVtm\/ZGC+HiEEc227","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTfYWAbE\/ziz5QmguGVRldY5SQCS8X2yVWZ3ChXemYDQEOMRUQpv\/66kl3X3z9rjqAOKoF7DUbTsFq+CSBnjGZiCYgkPv1BBaYlN13zD1vqtFy\/1CYzphFqTqjVKyBvD4uAEyILD5XGEK1CsUL6j0614iSMu9opWxZ\/CnKqh8BpdhSKkSoRDTSkZp+URAY","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGeK2AbDKyfq6IA1SapdpFVjmqxLoohzeHMWWA0CP4BMgImpf5Iaq8+ElZe\/vxO1wCQU12ERUu+VEo26tXRV4ACQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGRQCAbDJ4fq2ug1Sapdog8L62E0Fqidr3oIpPQf2fOkTYH6N0vCZTsfoQ8cLuedJF07yIb0bF3psABrex9M4zIg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLmkWAbDJ5fq2yQ1SapdpqZVe1D1NcrHJJZ5EmLRZb5Dd5evE3zWxfVT32SoWcCGGnFG4dqvMx9bp+gjSH6BKvTq07fD3L","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJSrCAbFAsiz8mWguGVRkvy2vHUbz7SvnPamh\/jqdQ5U14jAFM+ZXp\/9JaTXZ6O+vo\/bO0XlZyUdkCyA8Gqhn8mj8OXQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJlaqAbFAtiz8qGguGVRk4qkeGjuSFq9\/xWwFKQGaL8JQMnsgmKbIKnALuzHUXmdODq+tXU+pNvBEsBR3gdVZSfkKWag==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLOCGAbDKzfq6Lw1SapdoQTgc1n2ANa85lgYM\/+6rxbkaYcf6tGsSUGuD2cCoL6dY8TaxZovM37xJdEvtGsCswwnX1sTtc","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKKQ2AbDJ6fq22A1Sapdp\/DCTEPCf\/N1hgwCb3tQIThZSRzoh8DKyQL5ocmG3jR1MPhcTRcTHlKeE7sTenNRdSdirends=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIkM6AbDK0fq6Pg1SapdpmKLFGlUV4GcJXkhFXpepo4U3td8qd0AOORR0XHV93fXENEIzzZDx0WqhKoffS88xUU9TE","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":193,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdEA6AbE\/0iz5UWguGVRmgmXijIdEOGWIVTJsedrrSqQ1xMlP1HJqWnDa\/ghkAOGtsGZ1DpopSBFJqbyh9mZRYOMQGpqc1EmSQN2uyVoFLBD0u\/eURVyE0dkqX2JYkLtxlTTY33Cq24TRRip5QOYZriFCylanlAFpiRoIuZjgFc2y+3\/OyjAeazR6WTWenZMvUE\/aEYCD6Xw==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG\/a+AbFAuiz8t2guGVRl6EHvfJoNYZjC\/pP8jXH4R\/JL6dJCVp6oOTqCPWNojn+WAipgxugdCfmGOTOb4pPOogQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMRdOAbFAviz8xmguGVRkkm3h4Ce0Leg45Duu8DiTR0nyZnhzwPszxczvA5R1ageNiw85tpStP661zv0XZu4k54N8xPtkG2w==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIP++AbDJ7fq25w1SapdosyfJA+VF+Z8VmQfJiE5WCvyP581JQbgoO5QVCko4mOBT5AQwdSpVcWhRjKAYaZvexEnL6","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLRAKAbDK1fq6TQ1SapdrGbO6v+BeE88JCwnu9v\/r5myMXg1QMBI25ncVSqKhbQPAT+NiiP+qNtWeTU91VbluPqf5L0Iiz","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":163,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/m0SAbFAwiz81WguGVRnnZyujB1X0irfLFTc7qGIoduNShF7gZdwzqr49quYsBtcfCDZBXSOg4IlkavIHTrhsGRPc3aoOgl4tvfYzkOWXU9\/ZbOM+pgIg1g6IqahrBHPYA4DvfWXRJPjXeOlhKfbxKAJqpSAmQ50fHA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":190,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHBH9zAHJAa4KGFK8WgYoHACaDI6AbE\/1iz5YGguGVRneUYu5ONiFGl86I3iDKkIS5X6\/uCnWX0\/KnSBtig4XdP95p1G+n6Oh07lf\/NHBfVwCC\/9nCgChN2\/BwCYBd2Wy02R7aeHiaM96r+ikleuIuEBEySv31LhxOnVaujnlQH1ToO+X35rLhtFOdG\/UqNyny7ufC+k72+eMAA70PpRNDrU1XGrOoQ==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCd9+AbDK2fq6XA1SapdqXynlTgmDiPDXmGD6mcA3sBc23HKs0aZ+WQVGQC+JJ1smSqSStx90+g0AT3sVy","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBqeziByAAMC4ZVGYPBykZo98GjW7rSje0MC\/FhIPRFNwClmIb9SGUZgNWOTNyayh3yccRe6e23Me\/3Lybtb9K3v7dyVC\/mDym9bajjfD19bHFV97QkQZaAAAAGt3WpIYgG7Bo8Eg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":213,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACxhdeAbE\/2iz5b2guGVRkOWZvScrlI6nPlVXKT7aA3M8UM\/EbsHDuTkchG\/q6kPxmVH1INnEAuQKVowDDJJJnpNisX5fZ\/MEJS\/j7+WwkjR5sCSZKfjE2ZXSa6fOaLijaeN7fQZYu0qemkMtNGgIDXsRWUnP8n64AjoJa6yobfu4kTZaQCZoPtkgt6yn\/6Jhv3k5hOL2fmuI8k2uJbcabSdXvP6U9T47UMqC5o","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/u8SAbDK3fq6aw1SapdoTIjHTIi\/tZoIqe73BieAZaGDbvnf6azxV8ioqyw1M0qbcxCHaGaY8oHRb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069193,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGLVOAbDJ8fq29g1SapdpWraRrbGW16m0sx3XUNzDyHY+o0bcWRq7WcVEUeNsxeajqkkpNk38YqLVHMokfonfxYg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKAkKAbFAxiz85GguGVRnWXoiOF6W4zmgxC0waZ\/ZydKW8rVpOVeKX3rie44fo2exJm\/XcNB4j2wevxV52lbXXUQxgiZs=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACNmy2AbFAyiz882guGVRn0wdHL2WofNKZck0hqpP2heiVEzBfKrOTi4UrZzOf+4v5bZjb2TeRn4Hz3eoi8VuxzQc+tsWcVt9y2MpFffxpdW5A6GEJF1Ks9nY+4K1GysYra8Mu9DFFHJhqiUDglXiOdkdKyAVLy8ClVTnvcKsP6tVJ7CTlXsptC","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEhoKAbDJ9fq3BQ1Sapdp0U\/gjCLz6yE2GRRXXmYq76a6dPW6axwBN3BBo6SGS++swHA4qVeYffPd5BTQnZ10=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACVIIKAbE\/3iz5fmguGVRnkAFYL8q57TZfgAsET6IY8CF02OIIOntzQ37d4Y6X3vInE1Hg4pPsEGDSX9vJXgyUGe6bUuZG1lukb8oBR2s0DI848EGeil\/8vLlRxWcu3waq4W1D4\/plAvVqjQ2c8qCc0kUxPyO97gJLuIOsZfLHn\/tPJP4lZjqqLPW8Ok5CJ8bg=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":198,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACiWbqAbE\/4iz5jWguGVRlHPU07jfCRfwm9bN\/lmsmwOJ+HDgEcqPfblhdDGwAG86T0w93Cf0Eqtgiy07knU\/46IAMsPreiwl0n3YpeKmeoCT8xOgcA+\/stSBgLnhDRc5RsLGVFdBJMZOFtLaBeeG0NUZ0+\/YNonbX1Uu7wsCKbeD8cWSWgoaqF5hAG++TjVbrbFdoTVRMaElHdG26E","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/wMqAbDK4fq6eg1SapdoouyzgqV4WTLaA3wRh6VC6hBLMRajal+qvpQXbKrGHZsTiDErzGwZ00Img","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGEiqAbDJ+fq3FA1SapdoAIsVi2hKQA9SE8jrqe7zIrpVS2NekprjjDWvw2MC1+I0z7GlEtBJs4LpAPZiZuo\/VnQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKp7qAbDJ\/fq3Iw1SapdpWAOYL2u5JMEFNRAQi0JoRT6gL\/xa3eEHgnksS\/XE6tgqou345vnEqFRucQkC03mqECjrjivQ=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":211,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMMAAEAAPxHa3woYUrwByQGuLDhaBACvaUmAbFAziz9AmguGVRlgC3S8plQmnkoIwlFdEcyzQWfX1RKU9OmwrrhmVLHY6VsZY25oBXLasT+ZhtPWYFcmkWYl0SnOSIbJqLBVVC06sLCCGlIVgQsyWoFIWjKJJsqhCJkyiSKK40sJG+z1IH+sRapD1dOVmhhq2tJ+ccPlF8c85GGhZWkupdlcy2ebBm8\/5ny+5yHaAoLJtATTGS2ZcwkxSZ25rappeg==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACY9jqAbFA0iz9EWguGVRn58EyH\/hlmoFiXaB4eO2YWxYJ2csPtwYt2cY6\/MqcyBWD0SCzIhR7vdH+P0ZM8E59OIvcauIrWQzNopcy40+NtemXbBzgypF7gYRjnpDKdQB1TZ7WrpD5k9ym\/osEuTQcuZvVtt00LxjhTQCIXnGRIpI\/YZKRwzegVyRBpUjtAWgznT0o=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ePuAbDK5fq6iQ1SapdqjVx5HDnr\/wlUajASwbtj3ZH6imRw0npxGqDRUJewstHmTn+2bSf1ixmWT","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHACh1mSAbE\/5iz5nGguGVRlSipNIGitoucF83uat8UHmD3fb5sOH2bAtWCBd2ClceE8TXQjqTQu8FaIsbOWJ6iREsdONWeKrlKdTsDUhf77o+YprTaQTlla+NpOxPtUmSeTuUe0fe+djrTMIhTdRZ0clmxhNDe63pgW0eondUBDZeAAza\/dRyagKn+WsZBcRHPKgkk1kMnW+HlRjvQg=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIdCCAbDKAfq3Mg1SapdqT3oPhXpCztJD0vjDvHjssuqgJZWQBD0PyMGluix95k6iMFWHzz9PW+33vIXGCBcv6bo8Y","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":208,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACsnA+AbE\/6iz5q2guGVRngFwDk+wG0BYke1feGeCe0gwrGzBNJ1IOmvwmMXNpGRbD22w8iHJzT8KIHK0SQkGv2yhw4OEUHkwL4oEIA12T12PHToZ0ZSTTiG3SxbVPqMv31orP82ExRuPmMxGn4md5c7LqBad5YKAaeTsy5NHRb2gHiYFYnxoGvb5hCjLRkKepkaAN\/I1HTpQAZoIbeUvDzVph8rnjqPA==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/wMyAbDK6fq6mA1SapdrYQ2POXR6F5NARaMsShIbEhst2EGZ6f6NvX2VgPhd6lZ7cBzWez1eRxNPH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":172,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgYoHACItjiAbE\/7iz5umguGVRlny3gzm1sZdEhNguRsdtH15nzPfFLaFd403LMcWzSNC83QdkVBj1KpAgot+8uL78utD3yCaRDQ+l7glPcW8X2qTW1X1BoiswdrlrccGdtqk1kQy7TKb9\/x2VG9Og\/fPvK2SlFwaDSFwlWeD3isS3CxlUojIg==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHomSAbDKBfq3QQ1SapdpqqKZm1n1AYSlOHrpYfL4Ni5g0JxXiSMPgmpo1lZjgyDXVHAk+cptrc1j5X6yAdOLkMEY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfAROAbFA1iz9IGguGVRnZbkKK2WQmqtoGnJxj3jeM0o4TWcl0mnXxUUDGY0jL+de4ulFXDNS5yFXecEY1RmPE252Yq86nrv9\/xCyf3r+DinZjhsZ43u1tGnXj1EtpEFTQvVbD7NaLJ8YtU4X5blhzHQNIA8EKS44KNshZ0xo6qXYFm5EqD14L3HZq+jpGakHZ85zW\/\/83ibhg","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCYayAbDKCfq3UA1Sapdo++EZQ0wcWiqB8IPwfSP\/SzUqXbTB8AYPN8lzfRoo2Vh0FLiLeIMF1NgHAp0fi","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAQBHaRgoYUrwByQGuKBxaBgBIBp6AbDK7fq6pw1SapdpPXusixWd1xZD9vU0wXspLtjI3IoOjKp0nUkLk22N43eQ65ripfeB51bWD0ZWnHDSRXjXm","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":193,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACdqQCAbE\/8iz5yWguGVRnznZcmTgzEWZ9JSb+P34dZn0LWbvEf1dMe7NFm0AhDJvOtf1NWHgrKSshQlta7dRjiJ3E0W6Ls\/hmKJTMH6uT1mJm1QrKQH4tzsrAEEOZ4esPmAnuQVw3rXznCwcFNAsQ+E\/wD6XaQ3Kdjz83A8nMtUfXyq7Rz3bIQ8j+naiMDO7dpzowjY13C0Q==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgYoHABcqRuAbE\/9iz52GguGVRkjC7W7oiGK6mbqIjkwpguQyF8xNIgVKiitjXZW6x5fXGlQs6QfnSAUTFs2Y9NiWFm\/EPYLdwczn20hd5jLjFEpPRwa3nyYGwY=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/fnCAbDKDfq3Xw1Sapdo9p6TRX1Fw\/DfMXOn5yGafjUqrhLA+0iQB0qQfe3+mWvMN0DzEpcDkI+n\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABI4umAbE\/+iz552guGVRk1KdClqP6u+dvEuDF3CgQBe+d9Tb6PmpOLl\/nJMEdkBoJWfxgVZiTilvnkutfqKmAj\/U1f","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZUuAbDKEfq3bg1SapdrCJOp2kU5g4mLQH8ukLOqpjFL1Qv4w8rxllfkac8NeCD7NXUDNTI9ifQrj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Ie+AbDK8fq6tg1SapdqqUK3+ckfQPySZ+qCNGyxdkT3wy95RDJ\/RcnqzMfNomS\/naoafCcvjLbIn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBAConkuAbFA2iz9L2guGVRntlVjiVR\/W0hWuAAxmni7\/wzEHbc7azun6YklTq+0dxkHIZ3o8KYCe2NZA88FYdLVIYkbGwJ07ha6gqUvvG0nce+1FRyTpAeRhEI4AmN432o1ejM9Xi+z9gqKWYmcMaFTD0OBuwn5HKmBs\/FRaBSguiYRvUVNWqnfadkY5qFL73Kh7DXhkcJbkBtGhW3jzAY1aiqYC","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":216,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0Hv6AbFA3iz9PmguGVRnddQ8sxWP4Cqj+kJdOMcNTifxhFfjhI8p2YIq8i\/jlTIPWKjmI07qP2FHED\/aJ1NFan9mbqtnKYtgWq7jA8VAtxhijeAQI7bin6c\/WLyTd39OHP6cl6ZnzgbvAUvoaTgUpxKYOTR9AkX+9tfZt5DGBw0UxyPfv3\/54InfalXRpnmiHzTgI0RJX8qji5Zi3rfgrUnaEFjOBhmls9Y+SyiGH","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/taqAbDKFfq3fQ1Sapdp8iBtpSzcrgc3\/P9wgX7yLKoPr+m2+\/CL8L45CN4UQbQfkCf8YpCwYahFL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YRuAbDK9fq6xQ1SapdrNuN3Ek4nyYFm4ZuLGmyg3raxm8if7bkpI2VxQqTt\/5hstIYmrfn770B9N","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAPxHbJwoYUrwByQGuLDhaBABnqu+AbFA4iz9TWguGVRnY\/4SLy+NBPGkTPybJrFYkKhTBGcu53zl0PPM35sxrulM1v7FGTM+GDF9aqM0iBa8TzhL9tKRbuTwGmepKVRna203llHT9LUfa5PLbtoXuARerGg==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ6nGAbFA5iz9XGguGVRnxevio67B4ITDPBWfAADTnBWxzx0tfGjdz3ULq0HWmkSehpeKJ+EgE07xlfTYUg2di78\/v0A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/pu+AbDK+fq61A1SapdotLrfmQAUxaLO1zLpqnfSx3qxm1IstmmIqg4ENh3w+KwtTUl+jf0\/OoTSQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/XsqAbDK\/fq64w1SapdpuQvRT8j2GFx1GBbKaOmEPZG\/4axLok7YQVfFdq0LsqRYIiPzFNOtCyWEq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EfWAbDLAfq68g1SapdrQln7bvV\/HRLWT5m\/Af0j4LxwjgPceV0po6P9NokGHky+52bdAKPoJofKQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKw2mAbFA6iz9a2guGVRnh0hUDXM19toaXi3AuqiSxlrhnM44Ith47NB5+d2DCCPdvXESAz2VeU5KsY5sonL5+Y6cYmuE=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/swqAbDKGfq3jA1SapdqVOs\/uueyGy9gGnEZCIxe6fLar715J3ZuBOtOvzDfn1rVrJ6RzoFnyKJGi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABI5CeAbE\/\/iz59mguGVRmKW\/Kz3+b\/9UiOC9PmlEyHWzZDnUV\/X9Vp+U7SA\/fa5TW\/mqAmrfaMDR07LCFn0roAJxR+","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLCgaAbFACiz6I2guGVRlHrrBrDJjD8G5+L5hyRXcEhDhwW1Ijc8y7OTXkD48J1YSYVnEs+SMNH2L3TpeFtvCGURLyWTk2","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK3vSAbFADiz6MmguGVRmFbfQEv9\/UgiZdiKdJEfBXVnNG6+3cFQSWmm+IOebGYjnbaK+VlVF0zIgMTN6gZD5A4CGQUGg=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZmKAbDKIfq3qg1Sapdos+Eg6vIMZoty6ZWTUGzv2NElqfvO1WJnhVjR+5AANektf3jSlgKV\/e2Yc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JrKAbDKJfq3uQ1Sapdq3gApGMi3eGl97P5n0oXIkUEX0slymo+5QLBcg\/LHFiunnnIOhhPcgpMjN","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qUSAbDKKfq3yA1SapdrCRgavQ830uFz9KipKayztiz9ivNobVAB6M5LN4gVqFqGpjKGKm3wU2FnP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/RnWAbDKLfq31w1SapdrIcyE4BXv0ZrR0D+hReLhS9r11BTlJkupmQGMfsGUBIRoIy\/jjzbLRDmHB","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8GOAbDKMfq35g1SapdqkrmZ22tjaBceDQssikEX6kTDnymBCUph6kwUVuGfI2F6X3Pe+zdtpbYJg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LoGAbDKHfq3mw1SapdqzE3d+fUSoHhWghEVGwIc6idQfy+XnURz0Jx+KOcsb\/q1xB8NBrC6DHzSR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YCaAbDKNfq39Q1Sapdr7SCN9mllMDFmR3isEgMyL5HVcX0bNFAleKa\/EVWBzxfm0upt0dGI6U64w","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIqduAbFAEiz6QWguGVRnOhCLkF8saKCosHf9xBrTVKyndNqwl6yIOPxpf2veNzS2Wa8a4DTnt67\/5gdIq9aDyrDjq","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEv1CAbFAFiz6UGguGVRns5JCIB5DxtrI1uTMxY5RuaM0bjWKS\/j6LWj1+dInxMXQUGrNxQjbA5pQf6fL1IVA=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJNliAbFAAiz6BWguGVRl+xzndFNUQrbqe5dUpaEZqz0zbbhptwAiuFzjqBib15DqrMO8EWbw0sHpM5ywjc6yf9EL2pg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJZ\/WAbFABiz6FGguGVRlfkkmLalWWWwZ2KvtJPSH83xDYXUWk71vpQHFnU4oGQIP8ifVOaxZjcawnBsRvQvdTAjJb9A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGcJWAbFAGiz6X2guGVRmbC67Y4vMWoucRDc8Vhei\/72tjIpNDv7Kup7mHtdqG1CM\/lOhx5l1Sl1ei\/steFtIzSQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":158,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHBH97AHJAa4KGFK8WgYoHAB6dw6AbFAHiz6bmguGVRlfbjHXxO\/Cd6scgGwaUnE9TC9st+PXQnTDC0FoNkf209h4PFqFpGO44kZqEAFVKMawqBaExLZqLuI8xRvdLDeGxbU7In6RUxOmBYQcgppw4xcIVhQFVnMMaqtJjucaROaJv21gmVM=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":220,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMwAAEAAHBH9rgHJAa4KGFK8WgYoHAC4z8mAbFAIiz6fWguGVRmP6IaZ\/xzh28CLk2FQhViSILxQbSJBbey8HzxdBkoCj8syq8i533hNfiHDXSqH6XxgHXgvPB1Mq1BHi8LPVe42v6yfsEGCSKOkqlCvxbkuSRZaeNsM6MmuwXua5lOLGU6Ukhg0FzMS63LH8rLwqugjQtP2W+d2wu38N+gbCsTdYmEAf4i3mNv2REK12jcX+974UvqFuwsvNbn\/p+qFn4WcfoLPAQ==","pkt_caplen":220,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/z0uAbDKOfq4BA1SapdoKV05+cF2lnMvR+rCYldownXhsees10mEY8MTLf4K2Cp1r2mzEJApc8TZi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/08eAbDKPfq4Ew1SapdrHQPOLVpMt6pI1lG1rv9fDc6uTXo4STzXOKSOcPhq7Tdvs0kbYdowwjnL6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/izuAbDLBfq7AQ1SapdqKQOgydc0mUgMm8yMK8+pABGxwsfctRS1hPMOns2EZe47Tpwbf7psyaevt","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":171,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHM2+AbFA7iz9emguGVRkgbE97Ohzdri9oOzp9eOLVp57bADM3RwV9J3rflISOdo47fFbIbiYTUqE4m7FECQGaUm8XXTJDRRTBEdlG\/ynjuBMyBlG+v+D1sdBtE4NrMshhQ9OeqQWW\/dtfK1FiuwTkXe8EYj44iLlySI4Pyxr0Cffg","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":187,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAPxHa9woYUrwByQGuLDhaBACX7CqAbFA8iz9iWguGVRn5Wbiy4tM4LIOF4HJkUZ1JkUz9WX7TkJOYJTK7PpQFOFO+o\/cwapTpI368FnDZWGQ0qmYvxvxOfVN7HgpoBqhMizDLllpE8JYWXyE3Ac78ZGYMMA0AEqB8CZlli3z+Imls9oW4Tv9+MZstp23PlqQVLGoguvrLsGAG0C5uNUwuUUHUMA==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/qCiAbDLCfq7EA1Sapdq+mnvSS7aAJHuWs5x8fmNVfk6UHRl7r6n4Xo\/Y01MJhLoY1kW3\/ElSmucC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6Pu+AbFAJiz6jGguGVRltD0xwkmh2y4gkgxIKpjQnVK\/giCtwzw4ZTwsq26ZZzivSdb1Lo0Wh0IA8mgXmdFhqfD4ewrlfgu3jXHMjjWgxG3Dd+rTuBKylDH8x\/7E+ZyRbudauw8ug7LoMuam9ibJrvAf4GX6KW53M0DAem01OznwWHmvrSYP1mZA1+QqrJBR13n3Jqv+cN\/qpwyQTA1o90ZdCBgmtHb6g2SFnFNZb6U6DZaxa","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":216,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHBH9sgHJAa4KGFK8WgYoHAC0GnOAbFAKiz6m2guGVRmPe+n8PF7\/+gQDsTTwcdS3DtVl8jjjwDa2sH093hOBXpdofEL7xFPl84U6J2mTerMP7qfWO56dVqB511S2dauNEbQCKjB2Bgp1cHYFKb3xyJaGHpZoriyFiFdHSnm+uET+Yg12Y1SAYq11JBA95YPkTRuBvg9bUCg5kJ8k+DsguqifbyKOD9yjp4MkMYH55dFLBqRi3r589KIOurxpXIW7","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Ye2AbDKQfq4Ig1Sapdr8e6QbvbguxvhbBh2mkcVur49crdPQqAR96Dt5HVIwFd5kt1Bj3sxtWOrd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/juaAbDKRfq4MQ1SapdpLNPzv7flJ1yZ2Zy+wKNZfcrZKk24UrBrbexhIH0ZelkZDvboUamdRq6dJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACy9U6AbFALiz6qmguGVRmI7fpBJlCY7HdPICAm0sQ5L0avo\/uREPkvzATs77UQsDVo4Enn+YtlgPGuABxAu0uge6u3phe3tvwG9vZJyvmDejO5thxAUf46xtUluJP9MEGCkwKYR2LQU25IHUhnlA3mzpQAwiLrbnYwQ2hgH8r8D44pzUveBQriiZwdO\/UkZYFuLQk2Pm7\/7oxP1JZEWHonWNSqjWZGU+Qld0qYsA==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rOGAbDLDfq7Hw1Sapdoqbpz+9yP+wzocxxekOC4Ticond4c9NkUOpuCELi4sFfvP336H6kdkVWUz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACyhECAbFAMiz6uWguGVRnThlUG4RMriwzSMQbNH0RN2bEZBbrkcsLZwjFJrZZ1Gznx+c\/GVWFfKFx3XWO6lEmjVHfGWjtEgR8A7MwSG346OjEd8JM6CV4Q\/+2e+\/wdEYIdU7ZmHZyD\/Itax2lYOADWNyGnBnYHaVALyYqu8IsOCI4GG1aoymeW803\/BwGyNolCe4zb5bTggwHQwMA7FYGQwpEfezLAUSevD0W5QQ==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABduzyAbFA9iz9mGguGVRkiCYfbfd8d3ehf4uWMkmVGznza0yJsb85GLvSjRyptelYWwxuZ6dgsJHRcqh+K2npQRs0OlWESBdFYt5+3B0SyrDe\/DXwId+Je","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABXLqSAbFA+iz9p2guGVRnOmANmPbRDguM6FPcUlF8PvG4YFKtnOzft4GIoUmZ4soShWb1XdvQGHWAlhrZ6\/1s94FkS7a2cFLliyPbH1icC1uCj","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dJeAbDKSfq4QA1SapdoZ1BoXKnkIgXM9mcwaiz2HJelPFua60ZR5Y6UxXQUZI4OUzO7hML2eHsrM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBq5PmByAAMVJql2qYHTBmisFcajp0EBzJIsXNCI++jKLyUklMRwfvVOkhq4VlS+ZS5LqHSTfw95iC5n4BT8q1ZYniPaEa8ctbh965scWdcRsJoQbPVG66AAAAH\/sDFLyAvKUy5Ug==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/uQiAbDLEfq7Lg1Sapdr34uem9MxC3nsCgy94Waf7cEsG7w6kfjQ9JUcNmEzai52Siu3dXC7+f2yH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZN5qAbFANiz6yGguGVRnr6NqnIDsW8DMTWwilZzTGyICynenjj1JoUAchwfGOqn+FXT4XFDBT6pfpUICQF9gLNoEhmlOxeY3TEEQl8nN9g\/SsT9130H9PXEjUtpLav3NX4WAL8ChsqBcZdBt3If4mIvmt3z4nH4JR+YDngVAJOG\/LNQwGR1IqUUfK0ePqdfILqNIy","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+ACAbDKTfq4Tw1SapdqVD82ugpSdPbS42nK7yZxR1CvAVaLLA1UwFisOgQXnt9T4R8br8Mo4Yb1E","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5GaAbDKUfq4Xg1SapdqP7sVgzncXTJ2LyoIdS2R1EO2ctegJXdp2\/y4b9FI8gQJYjd6oKCZSEtGR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":190,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHBH9zAHJAa4KGFK8WgYoHACa\/b6AbFAOiz612guGVRlWy+7RJx8ZvXwdFd1O6wcVNr+iGYJTj+QrjgNme9MnnRbBdvTB4AZLaW1iw\/lps4lyetuH1w2tHqRwK0av\/XBWkbkNGjRRWvULBpfJ8NfWC+09Tw020tfJul6GSJiIHAu+33diaiU8L5IB68fC\/gyRHIQ0rhjcFDZaZgCr3Sqdesm6IuWstQ==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0474{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7E3+AbFAPiz65mguGVRkvIx0En1weuXr4iGo5f1+1GAkqjwRAk+d2GmsI45mHDyh48Fmp0K7KAkTkjrtaChHQjSCkDPkuLlLsAcrUznNZXvEJr7wo3NpPgFqX4GWXfMYB3tRZq+c4b7OT3ttFWZneRDmMMjdT","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VZKAbDKVfq4bQ1Sapdpqtr3lmeAiSP+Yk9RMuRlifmYBKO15IphLYkib1UJ5W2ncdN19zr5hzHlE","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGK9CAbFAQiz69WguGVRnKARKn3YB1GvnwRHFXiV7dllKbirVKqOjtFl4BnOk7CxuzXLvcFKnNuwECgznTNhR0hw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":187,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAPxHa9woYUrwByQGuLDhaBACX4BuAbFA\/iz9tmguGVRlU+7x8tOph+GQvFevFb4vR\/6PozE9NBuTzVN\/CQ+NgkfF58wwMc9QRz9lhBWSJnfsNByHEVJ+518WmaUh3vc+ZAkCDhAe3CsVzYrP7c5qjllIceGEaBU0\/JQPWeH+mU+SZdUWA74hwOKKfLSlyihLlUOK5pdHa96Xax0cUhvQ\/sy4EYg==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ykeAbDKWfq4fA1SapdqiBH9YZDecttuN0gbo9TQI\/+iZ9pZ+C8\/28WQOl+GsSeV76p48ApE71OfJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHNkOAbFARiz7BGguGVRmv1pVkBPCiRsUHzWzox4HbZXkJWIlaX7rL43lRkovlWgsJH2u\/7cyALuFN+hmYPuu1ayk=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1VGAbDLFfq7PQ1SapdoJmUR35GuRyJ9pMJeFRCMGlPnUT6x8jn5GkHg4MEyQ1sm4ghVn1MmvlATa","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGiYOAbDKXfq4iw1SapdpRQkBbY7NvAhSxAFaj7y+ckGTdr9GjQ6XWPT\/RozInim0LsoC8kPF0aEs5hYdM5oyyIQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMWSSAbFASiz7E2guGVRk761KzF8aRv0BVlDoipYkQWK\/qMidzNAfEVx\/ATrZFTEnRo++Qy+UuBEaD5BErZ\/NnblGwdpje8A==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABI0eOAbDKYfq4mg1Sapdp3JqJcmpNV3kTqKArIiS7zB\/S8jR8NvbHKjQ0J7J4mu9N\/omoNWnZjzxKxJWhvxEPUTX7O","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCKhWAbDKZfq4qQ1SapdoDL4GybWHW2L7du0BBgnxcLTME3wMxUMw0C3ydMsJtva\/QkAAp0+6YX5zDz0Rn","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":160,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHBH96gHJAa4KGFK8WgYoHAB8mXmAbFATiz7ImguGVRlKdXynPSB\/oJp31zuDTxpSrdpVfw1hTuem9YdsZtjlbzt+krndymO\/Bm4aKjo1SuvmF2Im0s8uYTIVNoZV5sNnahHfN1neFZmSzGlO6foTkmwB\/vzN5iAGJvBDiV9u\/1nWrQgf9cdmmQ==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFoyGAbDKafq4uA1Sapdovea\/BFJT6cJpCHtPDEVGWg\/v0myuL0RpfhF7t6xxtmvBkwYYmBw9DHUzPneJo16BF","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/XbWAbDLGfq7TA1SapdrpIc70+fTUiPiAL+uWFcNVaCaKYsGxboIgX00NJMK7FJjdWpU92Uoe\/hvO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":208,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACsKcSAbFAUiz7MWguGVRlkaHm7ta8aA23ParZEpFfiA1ubXjrBL1KnlPhi3ca2\/QiVGaL9Hd80LyhMHF7qOBvegOjLzaf6lA2ZZS7qAJXXindTobH0syuwdtWdP8BN2BXcZ3BZ0b9y0jWvWyTZk0+WjS+wWTJ9JnzAfrP0U9HQScdYvgJJ7ZHIiZ0oLZASBIfbUqsAqPhxlTAqr2cYKQrifZF9As8ezA==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABM7JyAbFBAiz9xWguGVRkrRsvrZjAGdWwN3vQGbsB6qoVRFwK2CS4Uzvq0aAPb5iDg2fMjd9MuNg6YskOn9q5jh3VqrgOsFA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":171,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHtbOAbFBBiz91GguGVRnkXmagTFOyVPfwDT6jMacDq4EAVyLpn4aHI3ND9RK\/8madx01SfAhwpTipK2AURzaIeh9b0HcxX+GJFDNmXwIBcBa5t6U4dwyYE\/OX+tOZjhXagLQM26JvkWxeREnTcOtLWQa8tZjbeVwu9BkUXVQ5c3uO","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":201,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHBH9wQHJAa4KGFK8WgYoHAClo1iAbFAViz7QGguGVRn2VWE7oIIigE5+PjMBxQAlKZ1ggVF7RjKbtTeUWj6uDeZpplR\/DASJJsNY6BCnEWlUjFR6lifsmAljxzhOaHs3e1GebBlEb2FSGQAuScfBj+BJlsak06sE3OFLuMl+o++\/GwvGlFiu6GhNwVyNxvz0n0J0ZUWEXZBBc1k2udfD8uBs2ekzJTNfCIjQNR5GeDNP","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/+EqAbDLHfq7Ww1Sapdp2OKUBDYfEpXx+lGLAQ1KYHnuduY+Jr3mLAw9lQEKKWspO0haxp+4cvhC2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFjS+AbDKbfq4xw1Sapdp8AMvrxKIaGPEMETTE10VShDQWy4Qn5irF9qQW+o+LuOKbzcNmoPH7VhgmqgqjTqMm","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChDz+AbFAWiz7T2guGVRlMyxV4WbNXHMjdjlyFGHacTk6D8KOY8c5KHfwmpxLmY1l5xqAjf1SYgTaLsumjCVmIlD9jzS8w\/DWE4VnZbAvr\/gpsTyKnRsrG7oCpZavuRfxH9Qs\/Q7Z0ysS2TsS7Fm+mmtROLz8eLfEM4iUAJPuOz3Tz\/Wblx7jdp\/zLgIFiaDBV7VCXaqh3uDYx5kA=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABDqYOAbDKcfq41g1SapdqmeCHHC7W0hgVHYkrbuLA9JGTQqK7bcCZCsnDTcPbFK24R+9Ssh9FjD5iLc9sVNg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIYsKAbDKdfq45Q1SapdqE\/LK0H+JDTsWDldhKyBEX4Xyxj0wqY3\/JcFlckcDWBHe4DZSNUCuTrYWosCt5EGjebIKJ","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":143,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHBH9+wHJAa4KGFK8WgYoHABrhC6AbFAXiz7XmguGVRkKLiq\/xUzeLPcWE+Xy+VmGTGefVWY1KOIO+C5rBOnRv2gUwqhd9IFcTbuyrkNy5aaWzW6h4BstdOV7GmxdI9bhKYU21kRuMuIiFFKhhTBACUj22L5G7lE=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLNIuAbFAYiz7bWguGVRmFeAa4\/3KJyTCtYFfH9JpmrGvbGqam98lWZp1cvtOjqGLeN1FEKT4ZUZpjreo9GLQyJm4Sprmw","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJ9nSAbDKefq49A1SapdpU2gP0L22O2nqipzcxFMdYb408y+EBPOgnumKoF9VXwTIh3xT\/I4CvqqqDNov1QZWqIND+vA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069194,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABG70qAbDKffq5Aw1Sapdr+I\/mJCIkY1kad9tOTxFw6sBuPDNVz6RVomSZJJ\/vCFQxG7JFduMWSVq+YyaDR6Dhq1A==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGdZCAbFAZiz7fGguGVRms9hk3St9dfnOazgwjkuocBVNy\/0tCFNb5KmvA2I4EfJENOAmnRCIuR\/Ijn87OomrETg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeqzCAbDLIfq7ag1SapdrOvXPpMuHnYoFb1lG\/\/RkV2skHbhtuzVZE1SNYkcWyFAFtLrxzY0SEPUitM2\/RjQX+vfk14piX2Idx2YY9r+Wgpfvu70pChck6\/w==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":234,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANoAAEAAPxHayAoYUrwByQGuLDhaBADGgvWAbFBCiz942guGVRnItrwZ+lP1lxRQmtWqfFml7241fmbuLT1P9qU03rIgaN6hotYCoIElZ\/ScBObkXVfS\/HpZFhXzXZdqydLDBoofSC32bynoyKOzLjNL7zoTfNh4QraHTEYF0TjakRq4GG5gIPxLV7fx86QgbOJUIX0Qfg1qd8zJVNbjeFffCRoFe7wPbL2QVBwCEgMWggjRpjy5fc+Y7m9xycqSYKjFDYnt+Sra2S4hFBHxWUu4R6w0X5m9","pkt_caplen":234,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":230,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANYAAEAAPxHazAoYUrwByQGuLDhaBADCjG6AbFBDiz98mguGVRnh6IizODz3tO1uRaOCKL5BDZGJaes+mxzFfg6fWPM6XywBpSt9wAfrn6pH2DUE\/SQ1iLd67A9WlgEtu\/nD\/\/w0GTiYEYO8RQdyEDnzJ1z7+mE\/6jhw9rPJTWOZeICBqrKazk\/hnQtkkfkb6EA07eHMO8WUrtEBI30KiXqcAwY+63fTYQwELfp7Wm1lLt2c1UaHIsg41PrQT+WAbqLwfNSxEzE99GcwXAQCbErkrCg=","pkt_caplen":230,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABECo6AbFAaiz7i2guGVRmXl4\/Kxa9KrkU7RrldcFWvtJaIZ+3Bzhz0LMUtOoXqu8bPxvbukwLbwSDFDvGvLck=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLLlKAbFAbiz7mmguGVRkr9Zx8ql94GY+LAdOnY+W1ZL55l81Df7OlSGwR039A007CjQ\/BgPebqL2GGeKmp6s53RGdyqeN","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABVoEOAbDKgfq5Eg1Sapdr8lsLxqhuuwCWPt6Odp21WKrLCX35Kx6+wx08QaSzTOZxmxTP78JsJeYVFkFh5JT5MXxU9xTHUqPY9ZnzbMWUfyg==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLJWqAbDKhfq5IQ1Sapdp0XZ7+I09ThodJ32KUqksv\/xdKMW6hwL3lYyc8WAp8KzyJ04b+tQqRiaM+1L0Het0JsVNMsQot","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEM9+AbDKifq5MA1SapdrK0IAEqbD\/+bnCwMUwhcCGhIxeSwyoPkmMiz4YtuBoLzkaBC5vxD+H4Xgnk1FUrkQ=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFf4OAbFAciz7qWguGVRm9mpt90lycwzmclrEW3+bUUKwU3QfxYTQ5QVj8og56lk1C2uLI+ZK1xEs0YrxyHPCN","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFBjaAbFAdiz7uGguGVRlq\/DGCnmopYYr\/Ohfo7+iIFOWC+Fjk9hIM+ix9yNutyvzGByG9pKkqEvj9RJjNra8Z","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":168,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCE1SWAbDLJfq7eQ1SapdpGw0ELEly8k5HnxSG7oSfUJyFZjDPl8lvtimrdQlZjz+M8pmDLnthaPsOj1yNR5VcZykikUKwvQQmEXo8Bx\/0LZij7K4YbH+A+XrrGqQjMV9NDHAjQLVE3CCAiKsuqsT5vIc4P4hFVlbiM1IcutkWB","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":151,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIcAAEAAHBH98wHJAa4KGFK8WgYoHABzDg2AbFAeiz7x2guGVRmvT2d682jBPz5CwcnlhqeAC2Yod1udVM7zhN1JQl9o24UHzuZ2zUJUYO2T4WpKXktfsys8Wd+OdZVwFYIYA\/mr3VUWoPAZwIeCEI8w6otYthp85HiOL84zide7NuOUMA==","pkt_caplen":151,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACYUTSAbFBEiz+AWguGVRkg3fw4K+2nB8UF8ouf+1CU7\/v2PFTBRKaWrOzlvPSk7I7u\/Sf\/jXXyxVEW81DY\/aFD5AEop6TayXa2HHXgWCZg9DtyCs1I84heoP3ssj9zGd4dd4gP7jon6vCQhoe+C3LYOta9cDmoZ87wQ\/JRQZYRV2QQPyQdNWouSQJlPgM2TGfYF+8=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABChUiAbDKjfq5Pw1SapdrFWnS2znAkaIQX2itkolc4SqMtYNKzoAJSP7dEQk0YSg78T4jI2probi4UpDys","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHl56AbDKkfq5Tg1Sapdpocb2fQ7KORrgBKgYXvW7MESGAfyI8pw4ZaVksDdKgC5zqSAJYLoBJrLMK7HTvrsvCyMo=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":171,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAQBHaBwoYUrwByQGuKBxaBgCHz3OAbDLKfq7iA1SapdrPKzFtk\/M0AUVs0HsxN2lHzZAACjC6rnnKME2xKQERJFEtwPr\/KAt+Dit3urAkj+gngMnLRqEIhX0l+R31tzIJlj2wlUOTb8wtNu62sIkttH5nbQ3+bSso1\/PQ2eFFxTKEiNDbUDFfvbmN1980+LSMfKiw","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNowGAbDKlfq5XQ1Sapdo5PfRsSxuOLpYoiHgSfeeszbOtCXyaPlxw7AZlE6\/GW0FiWijcnNcD5uXpZ8sMV9Lye\/JHQSfUPw8=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":198,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACi71KAbFAfiz71mguGVRncdih5WgargxwmnmevuO2AE9yLPmi5KVCXs2nf51+V82CDLVaOCuuGTq7WXNiohRZi\/1QH3uHMHH7eXF5g+PB0tD\/IpLWlukQ0ukJjSzQP1JGI6wKPScWELswXc6kjCkF2pazeSwKjoi2OaCjpScImTitakZRkSCL9LQNT2meOxFeGURc7jmk09HbwOFFw","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPoUuAbDLLfq7lw1Sapdp65Gv\/VcAo247821fv4rqSNUhjoLt3hkGEL3B162RcuStoSRu2flVUR0B4IjXeLeuCj1TY48l7l71bOXAVBpq8\/O3uPuo8gQmQSR8tASBViAeAzJ3kYU06mAZFNHos81mvfCu9YjiHvhezaz3H1VowIeM1qGHNDREh0Fc=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHAColfuAbFAgiz75WguGVRkgP6MU6d99nYSEbs+FtjZmLpaMhZf1ScPeW1L5PAjmre1oNTe\/flkNk6v8\/uSjALMzEu\/MxCY0nRlmExW+bFCn7mouQiX9S5SxcrosBJH9t\/KlBAod2KaQLv0zq1qplBAV+6w+9fOQFfEAqpP3x+jcoFz6BlXgGnndrvVW1ljrMujswNb3nIzAc3FoK90eUArAEJmI","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChv3SAbFBFiz+EGguGVRlr4aAeUqx6wQoUJfmwqCPBuK6k9u4xCouuPGxCyofHDqMxfe1FxWPuXyIQ1\/L6scuHuthoOLQD1Jl8fkIvHwC0lt92gzu1GT8Of+Ziw19r7nowHvVgxMidxQJ8zKfCbRL6XNimXKafujVVbdPmm0ug+zVu6dyW0faagKzkH3LjBuydSIVVd1hburc0IPs=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":192,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAPxHa8goYUrwByQGuLDhaBACcOrKAbFBGiz+H2guGVRmChs0nwR16jYgXCgAWoscy556gYUyYrRFIBWFjmySlfPU5u7TSyv3VnO\/tCsoGmH5JytTizCdpKB6dK3DO+Tgg9\/4lnCylNQb4MGHR9dOsPQ7YhCFyBVmmsPHijIOCnbetkE4GInSEL1K4QQD+OPAEw60PGbjThVflvGTPr3+hOUwm33jwzaNT","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":176,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAQBHaAgoYUrwByQGuKBxaBgCMf2mAbDLMfq7pg1SapdqfswmsTRZQwZqEMvFVzKCQwYV7ZWWzpTYNE0FM8iQpJEJzDGUov\/xkfPPV9mdiYxjkJlAqunFBtAVRHkpAk6JYKz7ZwrzxSYCYiYoLfAXtxhDba46qLLDDXHdSCwxdkDq5RyQWpSrK+FDeeEm5p+Gqwa4bECsfjhU=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACLisuAbDKmfq5bA1Sapdpo\/\/5qL2zpUvne7SQ0h0+eGhMMYhqlqe4tpFqv67wAboQ6YGMzR0JlfY\/8kG7EEgsm9+HauOwYeuM9YEDFoNvNn5EDV\/qVbnLKrU5WI5yK\/b6akZhmYorKrF8f8frxXpHNSfD700ywvyQqHEJfiYUbGr98fVauFw==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGvlKAbDKnfq5ew1SapdqHghOmHPuH50Y8ubxgQpeZslrva8BZOo7CudOCWD9v3GdQrgqhpdvigDzT+7pQ6vmXFYWWG5Q7qG+1aU8dC81CTBeenxa0BInUrx7TgZmtbMnWxT0Cgx2broaAkR5Dm0RxGgCluA4a1AD+vV4mkAwZ4ow=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":174,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCK\/aOAbDLNfq7tQ1Sapdp66DphED2dfLV205jWenK2Am56DfXofQV1KJITVmvMq5aCSFV3gOurqQk4sk04gQ0Gl5ZQqiAPAcYcidWMEab4wT3ngPTN9j+4RXUDHzobwszkNBrSjenwhftgvIGJFefB6gD5uFMRYjuhGLbUb1qrcdUSQh8\/","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqk5OByAAMC4ZVGbItSd6\/mTyCIr4E3Y5lu3\/72m5jcJjbwC5KlnCFnzd0zuOtETGMhjqjiiAH+YRIre6dMeMVSoMFs0jEh5oqJoOmprnMRKGlbL9RDliAAAAHKgs0sfS9+zbuxw==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBACh3NeAbFBHiz+LmguGVRnQH\/rX0g2ufsbqwBbfokecIVb0RygfUXaRe8ZTHWH8+KaLGnbQLtiiFO7hhekIictlKwA24Oei5Ct6\/2FPT0uVzcqsDfwIfn9wVOtDjKqfEBTuKO1MxX9\/Qm1qO3gNEkyYqifBFyLbH9m2WwbT3x\/MxxTd17Elr5TvAMpP0cpp0uSJgROc9xhFmEzSSV4=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACg3rCAbFBIiz+PWguGVRlMQidvMz1Jo1XX1nea6kgLnrJRGwdhT9e1XBA4Gx66lvHFP5kGfBPyjKKreuAUjmji2VmW8eB92LXd7984VIvEdFzc\/uXo6e42Rcvsba3UVWIMTrl4yKTAoDnXGDYbWTkCjUDdZIqpmGURYsJRMmOenKy1QcSjyyUwvTzaMvyPkJQkj5x01qayTpJasA==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAQBHaAwoYUrwByQGuKBxaBgCLsbmAbDLOfq7xA1Sapdp8MWBNFDxZWPCECxsBx32JDKYgUVIzXg+4csbYFj7z5Wv0O02QmB6V3Auvjcli4+n15E2Q9\/haRP33YfGxlpI\/vYaEPz8Cxf1Cb0sT\/Vp7rbWfSWg1tkCcXQcEw1krsaUHjpjTw3uvFjSZ1Iu6BMx+FL0vFxMiMA==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChBmWAbFAhiz79GguGVRmhEZlKZCr5iVX8ZFM+i1vvX5R3lMFCtFR4avR5y3HofsTREDqHPMUHxbQUhWoOUwAi6b\/5IT2\/2F6tPu2F+KY8M+NujnRALBRuwygNXYy3V5KM6QWMyn3JqIED2cz7TvtZNmG6SJ9mUOXUwKIFeemBaNyxxArxExW6cB5Ia8bgZMc6I2l47pxgBFLyais=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":169,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAQBHaCQoYUrwByQGuKBxaBgCFXGSAbDLPfq70w1SapdocyImZc\/LWkKGgl3i2VeiJp\/YmJDzWUzdxpuNKt2x+FqxGBRUNhu+8BV19w3WzPfjOfQGxsflBF0UJ\/W4EsYKCC1uP9yQ8wVJ2NS0TogQFG0gR9CJlGpES3wJLYj8H0vP9yC7srpAW2ROcKgQyS6sINA==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":172,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAPxHbBgoYUrwByQGuLDhaBACI1TWAbFBJiz+TGguGVRkmHxwtxhFhIdOdSzpfT7\/SSG\/tyMm3tYLjEXz+TN+ia9\/ePGJHPLLZKZXF1mWzbTy4UcCP13oTcgZWnR+WudzYHg7M3RbW2pBV7dK2zM7a5KsQC8z0vT\/yiXh1jfJ2W8V0cSJR1XGHRpmwov2Ubw6nI7kXLg==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACWD7KAbDKofq5ig1SapdrMwJ9MrQL6p+TaYegSnMh2MzA5TL\/gFOvOo4qSIvrZ4ivd0QuMRlTbiUf4GTU3pyhG8VmaJBGmodTYWDhhKELaO1LLjQA0KeIcvk6003pJ4u4NVtpFwI69P47x1RxfpVHworPle+40iLXqpbu3suV0i3NN6k+HHl1ebIvAMLNe1l++","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":169,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHBH94QHJAa4KGFK8WgYoHACFinqAbFAiiz8A2guGVRm9foArQPHOm6NV71qqO1BiVFsEdT5a4rrLQ3iBjapzTk7PMmc4YBfYAl1yI92b4g2OJaI\/0xGAdbCDwOi5ATeU5lmiTBbcP\/i8rgSwdL6dEuGRBhMfE6SGDmNFhr0wGkMtWVYz2381W9U5H0HaW1t+CA==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":162,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+SBKAbDLQfq74g1Sapdpxe+PeWSivSqYkoo\/5jkVVHFqwGwJPZh1ESrp\/+TJsFhNQxyB6g3xaEwewxhQjzqcrbQWMmTIQrC7UumUMLGfBeXkiEGrlQeX0ncD+LfZE2mEbLMuYHlwJERHWFtc5PSjOVE5liQ6dNk\/z","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACL4YuAbFBKiz+W2guGVRlZWjoxV1pY\/oeMRzJqFh3pqH36Sl8Ljph9gowBVs914i5GnCP5k9Q302zHU8jta2MM7acXSWm8E4v1N5qXJcOyV65IK4gn8fhYRbPvAe4khhLBMozh6rykZM+zdBn49mx2jGHfv8T+Rw2MWIuwWXm+aXJ0qyXvHw==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLTq2AbFBLiz+amguGVRlObByztRnazObuoymZURoSu4e2umh5XRFnDErLNL4A0TxHOxhvFNPRA8+fF5h5ssleYjcf7Yk4WCmAaGMmFap9MsDmXRRqTf9SXb+8kZxdtW5\/sNOZp7PPNMfusgxLl37wxUtKIMNYau1lRTn5Dowc68OwvCTndQ==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWyz2AbDLRfq78Q1SapdobXbNqiUU8jEJ56SwYN1pGQwRBpLri0eYNLu+UGQMQDHGUQ1jsApw1fndoWZtkbTxQ\/bT2T9gYwgqkFO+eTT1tKH0=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":203,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACnBjCAbFAjiz8EmguGVRmSkis5DI2PEdgc\/csLcET7hD4SKvX8fV1Vym0GT2ysnrbHO5Lz1kB4ILny4ZK9bUERPrc6yU3GGWCC4j7MX9RtSfbjx1GTYeE6754pyHTEvQjjAOSTzJ03muKZTArRwJE1gsl+D8eiiu+abWbB1+ctBgVBf\/mq\/otuBeprK8rAdR44+RfY4FVRQaQcOUXmnjnYyHk=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRhkiAbDLSfq8AA1SapdqPfJa0ryrtEqdurJqIUDBX+jxuskO6ght9WEfXs5fb+uGMxj37kNUO5e0uqBpdWgQgV59S9rJkm1P8TDJb","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":176,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHRH82gHJAa4KGFK8WgQsOACMYd+AbDKpfq5mQ1Sapdo\/fwkZkmIZ3fbN+WbVi9d4oJjDTrfIELF9O8TIoeWewnCtsxcQ2Evxsli3WUmUw0PShMbDxqD7ZAKeqV+NMJA2\/9u2RwJaP9IIgH0b9cMuXBzbihAa3+B\/4oFg9kPrjcfNr8BGdFFZMcqt1GKKuq5C7sTlyBTPUKI=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":187,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKsAAEAAPxHa9woYUrwByQGuLDhaBACXeQCAbFBMiz+eWguGVRlHNlb\/RYDMClbIXKbqSgWko+L0+LYmNtVVH5wCm7sxIHD9SQdnh3a7RjRvKC+iiUuhbBbB6\/tuIyN1FB71vJoEgxM1Dnd33b3bj5Iu\/m3SMu8CRuHk0u0Pd\/5tMj0wtWccnC45FpEvNeNlB+VrZc0JXnTIA4VLqHjKDP9oHGL\/5ceH7A==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB15haAbFBNiz+iGguGVRkWjUZ3x14vTp5A5lZrHwoAwGYWjip504Jxb9u2+Gx1CgpJyTgII9lFvRhYLu1OBspNeVVfIszIVK8IRoFsW8BHvVjAFVzBUpn6yYDGQWNP7b2N0iFwWtNRwWBuxRjXAkcw","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAQBHaQQoYUrwByQGuKBxaBgBNmmCAbDLTfq8Dw1SapdoR3GIBOLgblq5cFUJtfodpEqqUEKTcuXKuJ012LbOXvDkku2WCtRw6bSP2vRACnNAW7hqdHtFNCso=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACLqWWAbDKqfq5qA1SapdpEJWSJXP23K2goCWhJYs\/MXLgXHxbxUEXNNxY9uFHB0LQ+cZl6LjZshoRjZ0rDYbhI+Jq0jr68EDPDRGHCq7AhN5ma0+r6XyNtsGfE8qpSD7NdyENsCQmnBF69wQxGTTFZ4uLuIRXFOdX2Rb+TbxWwVWu4XqTE9A==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPT9OAbDLUfq8Hg1SapdqiWrSATMh0FcrmqqU02YmXvSP7JHZhu7qnIftHeJ9K8xvvjyA9EHkTjERMJnQB8a7HZJKnDkrS\/nZrrA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMS6qAbFBOiz+l2guGVRlerR3e1EWio9A2FzZOkaRkAV8pJuvc5ovlUG5kBHbpnm0Vf9eisakwFfj5cgouMNTgRNu8C7UTLQ==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjFESAbFAkiz8IWguGVRkVeTJIfm7YwHj20sgGzLO81IM+rLWHsawHXArwJbWN8p17SdEx46bPEOLQBCaAuiyTBRZcl66mr2rJc9xQSNwOR069RTPTUixTVqd0fnt28GA8ZfmIMRyoDRf0cyca66TZWPTF598CqeC6KdWVQRWM0xALwF7lXS4BuZeDYpi0pybs77GXxUjNouHxym3jPA==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLn8+AbDLVfq8LQ1SapdrvWGhRxmwWEdYC4uHRH0\/geXmdo1omm\/7zmwWHe93OgXsDZaAGs1egucSyHpz69LMKYfl5DzyX","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":207,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL8AAEAAHBH9uwHJAa4KGFK8WgYoHACrTTOAbFAliz8MGguGVRlpsMqQPJX7z7T4CHP2wSdtMyVR5z9yc1mtnq4JVFVayx6AANSMh8AtKB8JHkw4vZ+T6RkVy6J2ORXtsAaNP8rW84aiN66vuftDCAvqFr7tr6yOY9rE0F30Al33\/1W73Qpu5zQGCTCjpo4MJBOa\/Cej\/\/Srq77N3REBVdd+lSeNHE8dctKU\/RFoKF+Qrn9u2z+uDbwxe\/2s","pkt_caplen":207,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHjYqAbFBPiz+pmguGVRnCrD6JNklzJZ0ZxTz5PRUdnAdvh5fH1W+Ft29WMsxGzuLF\/vu\/mkBl7dw9buz7ZdvXbus=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABI+EaAbFBQiz+tWguGVRnholDqELYSAVdv2snxLqw94O1W8WH0yRcI4eQaCEV8p63FKwMLoprsdtP69UDKL8vU3oZG","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXuiWAbDLWfq8PA1SapdrGhdNhY+zG1gI8cM\/qp1E+FVvmiAXDchwj4kojinB7VN2FbivY63w5atj5GEWv55qKb46MleQTyl3X6clFc+BmoN\/J","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACL4jyAbDKrfq5tw1Sapdro98tpQVsCZfUuCPNH02m\/2sa9zPqQCktg4I7s+FzcWVojetyBRWmkNpbk7ezcdi0wgvma7lFpO0v\/6JuwIopAT\/Axnwv6u4K52TntnR19HlFFXwusSW3k44qO5Il\/oDXqRwtgU4YuQlcE+HUAbQqa1ZYXCQzl2g==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDUIqAbFBRiz+xGguGVRnKU3K4vDzrBMpspP8\/CrfmVntQpag23871nmt27LHQWHHu7MvFE397lM8OEaWC1w==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":184,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHBH90gHJAa4KGFK8WgYoHACU9sGAbFAmiz8P2guGVRl1QrQc79+J72+AG9OJcCZ39H1SQNrm5FzPyCJPvn220OuiYo4oe96Abv8QbFJ07JAW+CqnKYP8WFm72zUCvCtZ1CQl\/JsXHsWsS1vYnt5JDKcBv0sWZLGzpIiKB7tx7SElYgAmEZ58NWH1CaX5ws+v\/BS7S5IkQfCfP1bFBtMVDQ==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABELeOAbFBSiz+02guGVRlKpZxpFNLNOUM9+3K5TYqxYSlgA6uBk1WoVG8AK29aqnSVTB8tJEEijjShT3VmvGA=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":124,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGwAAEAAQBHaNgoYUrwByQGuKBxaBgBYNuaAbDLXfq8Sw1Sapdo\/SmhgxUunHGfCvHKnP2rfIcMuYurZJiInaph4mEXI7VWBc6SUWERLZLzYJbY\/q+LXvZHNfjfBLOjLljd7j4RUFJ9c3A==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":150,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHRH89AHJAa4KGFK8WgQsOAByYouAbDKsfq5xg1SapdqsBsExUtd2AIAkTt2enAc0Z\/L7pOA9kCT8w4\/twQfkjl\/OoOBS9UlGTGSdr5z2iB8Nma0l5NNLP7nWrW7rRDT\/GpOg1jIFgMtoHm9LrGVJXxmWRRQRqXBIMQp94n2x","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069195,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXb1OAbDLYfq8Wg1SapdqkNPVedeziU0dHp2F+jNQvFdomJ2\/aiaxrXoS4OIBcEh04gYmwhw0ollB8o6m65GCWtq62wS2Mqn3cQ8J7cRsJFUh\/","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPS+iAbDKtfq51Q1SapdpiCDhx5Xi6EsVf56zcDKRqZJEqR79ksy62+YVry9ptBkx8rUYDDJ8toyOEPhxa1Io1AAjC1IIGcpUo6w==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ+Q6AbFBTiz+4mguGVRlXMONXUyhj4mHz+oNN3n4y6g6brumvoi567K2E7QqLsiSKMrbAYz1tcsNYcIpXKxZNwyAwmg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLYeWAbDLZfq8aQ1SapdoaD4XH3OY8g3rOVa+ZcoSKAFNNy4\/sPwb113M5DrO8+0pAbHmxo3h0xNNSs3suREZ+0R7WAFYl","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLHzuAbDLafq8eA1SapdoIZdrX1DQMJt\/tRqIDgAUvffgqPKZvlQut3hniagtYXZlKYVHYyhQ6uYDKm62zk0EmNkgqdX3C","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACLgpeAbFAniz8TmguGVRmAAhXXMVI0LfVJkhU1Fawv0zpsFGxQRx\/8GXw6xZwsFwRlTRQKCidnvbLeC1h\/E4PaA8Y1mjje4LvkcDGSecSHu1XUEX74AEWVn3nXsRpCj+nxGNPPIHehy5oDUiz10NWfuVnN1u7iVrbuqm1ygaIMlaFFnJvxGg==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHMJuAbFBUiz+8WguGVRkcBQ2w77nPgj9OzrzLYwVcIBksfj60e26SnPPw7n\/3K0YRXqz7M09Z38TYkwQj5Rw+r2U=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGyp6AbFBViz\/AGguGVRmkCbJs4bdLiV8ABwUXfolGqpiFFnxIbpW7dOCaLB9G+4IcSciRytbFHM68z0UQm0ou2g==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7aUGAbFAoiz8XWguGVRmSKu1Szj+o6jjVr\/RXbcCgZib76JJ8+eqzPWjfb+5SkXlDvPq2Wl\/IRK0csR4DaPIptJyFg+zMprYw48nsvmesjImJnAq\/2LxqVSxmI+iKoFxHqD1FvZEgksUnqCx+Y9zolGtLJQ4D","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/9WmAbDLbfq8hw1SapdrVt4Vd9FoIbkTRG15V5QbKXfnYisPeBzPI5PJI0E8EEvS+KiBPpeOey2MW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZO3eAbDKufq55A1SapdoyHnX\/v8j1R62CkCyG3OYNW\/vx\/ptn6pb8psSV7jtiXLUyAnOFhh52IhZlFWv5HJwLm\/JxDtSJlOdiIEW33ZZhgEmuW8Q=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MKSAbDLcfq8lg1Sapdq1u26hZxrS9oiJsFMYfgiG7TFTy+Q\/Panf2tjY8ggEJub1g5xbuL21\/lRO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRNxKAbDKvfq58w1SapdqQqhfDkATpK4udXORC3Td4R114NSoVuPAdmO8fr81hUza2IjEOhmKhKXeoEeN6LjTJtCWO\/5V2yhTuR\/CE","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHOFSAbFBWiz\/D2guGVRlpTV3ciXfJ4vBomLslbZXdpi\/xW6jlA3vSQkWL2IViVrEec+X3k8CRSB\/j\/7mzCN5Go1g=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB1d8WAbFBXiz\/HmguGVRkP5r59i+1T3SK8mCu57i1noVZqggbOVjMYUak2J9+PBCuAOvkpuKLjo6WNvtzQB5hpHMm6IXwvOhL\/hhtMF8zOuyThpa+2cmVv5kKRQ2GrOwyifHGklH9466d29RdnfTZo","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MTGAbDLdfq8pQ1SapdrxAVS2mXJUbjMPLITWCtqlMrdflWHGU4M5gxwrUsdF1vGUyPl4cUmNWdNG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKCmmAbFBYiz\/LWguGVRnJjzNfzZZSz1EmkY2d1zjbuhLf9kLvMDbpWQIbnrkFdm08KzF57iEsuTxByesjb18lBoL54co=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/JvCAbDLefq8tA1SapdqR3LwcvhdslAP0knR6Vb607CXVVFO94St6cMgbd6IrW\/x+yTIEh1RAxSCV","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5VaAbDLffq8ww1SapdrR+FXkOkYlI0tJsOBXo0ZRXI9y2JHx+o0oSqcj+i9Z8e6o\/7a95iXOHohJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLx4WAbDKwfq6Ag1Sapdrjs1g24w8v1LM\/aCYg+R70NSNKVS4TyYL8DeOYS6msCZWmtIn3HzjTm9561VgXRCk6dFDo7ogF","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVK3yAbFApiz8bGguGVRkUjPTebOA7Mt3tkeCWxW76LvkXxMuEKju27dgoX14aYMna1KfB+DvYXeZnZSgwxNVziE6SBQjkeHB1qjRmepgHmg==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMSe2AbFAviz8xmguGVRkkm3h4Ce0Leg45Duu8DiTR0nyZnhzwPszxczvA5R1ageNiw85tpStP661zv0XZu4k54N8xPtkG2w==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJTsqAbFAsiz8mWguGVRkvy2vHUbz7SvnPamh\/jqdQ5U14jAFM+ZXp\/9JaTXZ6O+vo\/bO0XlZyUdkCyA8Gqhn8mj8OXQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGAcqAbFAuiz8t2guGVRl6EHvfJoNYZjC\/pP8jXH4R\/JL6dJCVp6oOTqCPWNojn+WAipgxugdCfmGOTOb4pPOogQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFmqyAbFBZiz\/PGguGVRlUxcLK0lQqH50jt2fjBySiSPt7\/Touu1Swg\/Rnz9bbF7iDMAR0C+I3dTJ8wDg+9OQa","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXdNKAbDKxfq6EQ1Sapdppmikl+59aEWkaFFRmDZe29U9722ffBcuikLB1+IvLL2vREoYZ4uITyp7lvCkO3R0grbhS+UlLVtm\/ZGC+HiEEc227","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIjLSAbDK0fq6Pg1SapdpmKLFGlUV4GcJXkhFXpepo4U3td8qd0AOORR0XHV93fXENEIzzZDx0WqhKoffS88xUU9TE","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLNAeAbDKzfq6Lw1SapdoQTgc1n2ANa85lgYM\/+6rxbkaYcf6tGsSUGuD2cCoL6dY8TaxZovM37xJdEvtGsCswwnX1sTtc","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK+GeAbFAqiz8e2guGVRnqDfiVAWuH7szeMi6Nn6BAKPBaAHS5VbSgdlf7\/0VTNRCqWqXS39ZlHw2QRYLTH\/oEGMLo6kg=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKsn6AbFAriz8imguGVRlX\/+3DCjnvW2zuhMa8AhXMYuO5mx11l6qe5w38j8T6uSTuPpTqQB4CKcclbhFSS4XWpQGTj3U=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJmcSAbFAtiz8qGguGVRk4qkeGjuSFq9\/xWwFKQGaL8JQMnsgmKbIKnALuzHUXmdODq+tXU+pNvBEsBR3gdVZSfkKWag==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGdJOAbDKyfq6IA1SapdpFVjmqxLoohzeHMWWA0CP4BMgImpf5Iaq8+ElZe\/vxO1wCQU12ERUu+VEo26tXRV4ACQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEUkaAbFBaiz\/S2guGVRmXTXCEkNFMECbbjKl69TzvRGuIzdLq+l\/IneHxZr7zDoiJcsnazX2y36itl9kzjdI=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLP+iAbDK1fq6TQ1SapdrGbO6v+BeE88JCwnu9v\/r5myMXg1QMBI25ncVSqKhbQPAT+NiiP+qNtWeTU91VbluPqf5L0Iiz","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/dSWAbDLgfq80g1SapdqlsJKm+76gsYQrvVu9LbMGcF2BRrjK3HBTwDiUfqBhQT7zjZtRkqNSDdv+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":163,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHBH95wHJAa4KGFK8WgYoHAB\/n16AbFAwiz81WguGVRnnZyujB1X0irfLFTc7qGIoduNShF7gZdwzqr49quYsBtcfCDZBXSOg4IlkavIHTrhsGRPc3aoOgl4tvfYzkOWXU9\/ZbOM+pgIg1g6IqahrBHPYA4DvfWXRJPjXeOlhKfbxKAJqpSAmQ50fHA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCc8WAbDK2fq6XA1SapdqXynlTgmDiPDXmGD6mcA3sBc23HKs0aZ+WQVGQC+JJ1smSqSStx90+g0AT3sVy","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/t6qAbDK3fq6aw1SapdoTIjHTIi\/tZoIqe73BieAZaGDbvnf6azxV8ioqyw1M0qbcxCHaGaY8oHRb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKBlyAbFAxiz85GguGVRnWXoiOF6W4zmgxC0waZ\/ZydKW8rVpOVeKX3rie44fo2exJm\/XcNB4j2wevxV52lbXXUQxgiZs=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACNn0eAbFAyiz882guGVRn0wdHL2WofNKZck0hqpP2heiVEzBfKrOTi4UrZzOf+4v5bZjb2TeRn4Hz3eoi8VuxzQc+tsWcVt9y2MpFffxpdW5A6GEJF1Ks9nY+4K1GysYra8Mu9DFFHJhqiUDglXiOdkdKyAVLy8ClVTnvcKsP6tVJ7CTlXsptC","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/vLCAbDK4fq6eg1SapdoouyzgqV4WTLaA3wRh6VC6hBLMRajal+qvpQXbKrGHZsTiDErzGwZ00Img","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHVK2AbFBbiz\/WmguGVRn5YtWG7IzeS+SHJZ31iV1sdQIqlsVuApHy5M31CYMNF8ZGmeFDngnglCIg6T6WhpBbJXg=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLS2+AbFBciz\/aWguGVRndTwAQDUJwNow3ARK8UOScvv0TZXjukJOlWOquRGIgKWl5BdLWZHMI9KGO9JlsThQmnkG73q1y","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MZWAbDLhfq84Q1SapdoUCH5mCVbwO\/NCUAmEE5l7hoIFZhB4Bszmth1OCIJ\/bkd7SJvHM1Sw0b7t","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/A3mAbDLifq88A1SapdqcGHQVgkqMkEct1aUKnpWUIuuNDsZGfMtNcqsPzNrpU7qhKhq1TNjUn2oh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGbZeAbFBdiz\/eGguGVRnYENxCaQNpBYgRAetqLDCn5L1IizVmXhA0nrLgg99mxt0pFuiOPYMSyrAMd8CHbFrJAg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLymyAbDLjfq8\/w1SapdptHQLiuYHpyamMfqWRVmwq1R79mV0wCJAhgfDpRwRnw7cBrVOo25rgBDGPZxWM92uYMNjpZN+V","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRrA6AbDLkfq9Dg1SapdpkC5TfSAEouup47XtlihG9vlTicCLq\/dZ9oqQCW1XD7rCrVRiv1LWP0yGDHXXbgmzTUIZyIn1OcGWAX6P8","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEUr6AbFBeiz\/h2guGVRmH63ljADcmSoDcsYDgzl6HSX10D8CTgdlhAMLY6flZD2NJhV0ANDYoobJABH0NqXQ=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEy++AbFBfiz\/lmguGVRlch4s6FEa2PvZtVTtR9vgCFuFK6J7LbZVJKEZ9HbaYybAYa+WHEnbU+ZyXmxBd8vU=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dOGAbDK5fq6iQ1SapdqjVx5HDnr\/wlUajASwbtj3ZH6imRw0npxGqDRUJewstHmTn+2bSf1ixmWT","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHRH9HgHJAa4KGFK8WgQsOABIAoSAbDK7fq6pw1SapdpPXusixWd1xZD9vU0wXspLtjI3IoOjKp0nUkLk22N43eQ65ripfeB51bWD0ZWnHDSRXjXm","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/vLKAbDK6fq6mA1SapdrYQ2POXR6F5NARaMsShIbEhst2EGZ6f6NvX2VgPhd6lZ7cBzWez1eRxNPH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HdWAbDK8fq6tg1SapdqqUK3+ckfQPySZ+qCNGyxdkT3wy95RDJ\/RcnqzMfNomS\/naoafCcvjLbIn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":211,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMMAAEAAHBH9twHJAa4KGFK8WgYoHACvbWOAbFAziz9AmguGVRlgC3S8plQmnkoIwlFdEcyzQWfX1RKU9OmwrrhmVLHY6VsZY25oBXLasT+ZhtPWYFcmkWYl0SnOSIbJqLBVVC06sLCCGlIVgQsyWoFIWjKJJsqhCJkyiSKK40sJG+z1IH+sRapD1dOVmhhq2tJ+ccPlF8c85GGhZWkupdlcy2ebBm8\/5ny+5yHaAoLJtATTGS2ZcwkxSZ25rappeg==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACoomWAbFA2iz9L2guGVRntlVjiVR\/W0hWuAAxmni7\/wzEHbc7azun6YklTq+0dxkHIZ3o8KYCe2NZA88FYdLVIYkbGwJ07ha6gqUvvG0nce+1FRyTpAeRhEI4AmN432o1ejM9Xi+z9gqKWYmcMaFTD0OBuwn5HKmBs\/FRaBSguiYRvUVNWqnfadkY5qFL73Kh7DXhkcJbkBtGhW3jzAY1aiqYC","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACY+lSAbFA0iz9EWguGVRn58EyH\/hlmoFiXaB4eO2YWxYJ2csPtwYt2cY6\/MqcyBWD0SCzIhR7vdH+P0ZM8E59OIvcauIrWQzNopcy40+NtemXbBzgypF7gYRjnpDKdQB1TZ7WrpD5k9ym\/osEuTQcuZvVtt00LxjhTQCIXnGRIpI\/YZKRwzegVyRBpUjtAWgznT0o=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfBS2AbFA1iz9IGguGVRnZbkKK2WQmqtoGnJxj3jeM0o4TWcl0mnXxUUDGY0jL+de4ulFXDNS5yFXecEY1RmPE252Yq86nrv9\/xCyf3r+DinZjhsZ43u1tGnXj1EtpEFTQvVbD7NaLJ8YtU4X5blhzHQNIA8EKS44KNshZ0xo6qXYFm5EqD14L3HZq+jpGakHZ85zW\/\/83ibhg","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/7oWAbDLlfq9HQ1Sapdo1D4rNhMzFvR8YY+9h8lVOcCPLu0RIybA2RsXW3hroi8XWEO+B+9u\/t\/Z9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0554{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":216,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHBH9sgHJAa4KGFK8WgYoHAC0IxiAbFA3iz9PmguGVRnddQ8sxWP4Cqj+kJdOMcNTifxhFfjhI8p2YIq8i\/jlTIPWKjmI07qP2FHED\/aJ1NFan9mbqtnKYtgWq7jA8VAtxhijeAQI7bin6c\/WLyTd39OHP6cl6ZnzgbvAUvoaTgUpxKYOTR9AkX+9tfZt5DGBw0UxyPfv3\/54InfalXRpnmiHzTgI0RJX8qji5Zi3rfgrUnaEFjOBhmls9Y+SyiGH","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XQGAbDK9fq6xQ1SapdrNuN3Ek4nyYFm4ZuLGmyg3raxm8if7bkpI2VxQqTt\/5hstIYmrfn770B9N","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DoGAbDLmfq9LA1Sapdrgf2RKXYk0Rwv55xYAmFJNFL098HMgvN1YMFS06aB063D5fhuUkGW+EPby","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":101,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAPxHbTQoYUrwByQGuLDhaBABBWr6AbFBgiz\/pWguGVRkwTFWgFdruboRU2eMHUgXgkKrAwZ3YkFD2WynAg3Hv+TKLi+XYCsDFjb0AZCo=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJDsuAbFBhiz\/tGguGVRmy8bAhFLOCtFT8QpmAX7zuS12PdooLspNx3k4TxO+vs10UubS\/OhotH7qgtjUUq4CJoUoC4A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Oc+AbDLnfq9Ow1SapdoOD5mmujatMJpHXm76vsXntqwNHNiSMy0cIc4CA8zyhbpvMv20ZXNZ4VL5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABA8m+AbFBiiz\/w2guGVRn4DahNZ4P+u3QVAPL4rCMsz1I2OoT+opNI4Go5KXaqepVib8A9QRNfVsiAvQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/dsyAbDLofq9Sg1Sapdqzni1V76MIB+4++QD9ltS6lv5ku4LcErzUNNwRAmSaNo3ZYhzENyrqhL1T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/otWAbDK+fq61A1SapdotLrfmQAUxaLO1zLpqnfSx3qxm1IstmmIqg4ENh3w+KwtTUl+jf0\/OoTSQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WrCAbDK\/fq64w1SapdpuQvRT8j2GFx1GBbKaOmEPZG\/4axLok7YQVfFdq0LsqRYIiPzFNOtCyWEq","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DduAbDLAfq68g1SapdrQln7bvV\/HRLWT5m\/Af0j4LxwjgPceV0po6P9NokGHky+52bdAKPoJofKQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ7ouAbFA5iz9XGguGVRnxevio67B4ITDPBWfAADTnBWxzx0tfGjdz3ULq0HWmkSehpeKJ+EgE07xlfTYUg2di78\/v0A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/hyGAbDLBfq7AQ1SapdqKQOgydc0mUgMm8yMK8+pABGxwsfctRS1hPMOns2EZe47Tpwbf7psyaevt","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKx4OAbFA6iz9a2guGVRnh0hUDXM19toaXi3AuqiSxlrhnM44Ith47NB5+d2DCCPdvXESAz2VeU5KsY5sonL5+Y6cYmuE=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":171,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACHN4mAbFA7iz9emguGVRkgbE97Ohzdri9oOzp9eOLVp57bADM3RwV9J3rflISOdo47fFbIbiYTUqE4m7FECQGaUm8XXTJDRRTBEdlG\/ynjuBMyBlG+v+D1sdBtE4NrMshhQ9OeqQWW\/dtfK1FiuwTkXe8EYj44iLlySI4Pyxr0Cffg","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHBH9\/wHJAa4KGFK8WgYoHABnrwmAbFA4iz9TWguGVRnY\/4SLy+NBPGkTPybJrFYkKhTBGcu53zl0PPM35sxrulM1v7FGTM+GDF9aqM0iBa8TzhL9tKRbuTwGmepKVRna203llHT9LUfa5PLbtoXuARerGg==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":187,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHBH9zwHJAa4KGFK8WgYoHACX8ESAbFA8iz9iWguGVRn5Wbiy4tM4LIOF4HJkUZ1JkUz9WX7TkJOYJTK7PpQFOFO+o\/cwapTpI368FnDZWGQ0qmYvxvxOfVN7HgpoBqhMizDLllpE8JYWXyE3Ac78ZGYMMA0AEqB8CZlli3z+Imls9oW4Tv9+MZstp23PlqQVLGoguvrLsGAG0C5uNUwuUUHUMA==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdv1aAbFA9iz9mGguGVRkiCYfbfd8d3ehf4uWMkmVGznza0yJsb85GLvSjRyptelYWwxuZ6dgsJHRcqh+K2npQRs0OlWESBdFYt5+3B0SyrDe\/DXwId+Je","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABXMr6AbFA+iz9p2guGVRnOmANmPbRDguM6FPcUlF8PvG4YFKtnOzft4GIoUmZ4soShWb1XdvQGHWAlhrZ6\/1s94FkS7a2cFLliyPbH1icC1uCj","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":171,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACHuc2AbFBBiz91GguGVRnkXmagTFOyVPfwDT6jMacDq4EAVyLpn4aHI3ND9RK\/8madx01SfAhwpTipK2AURzaIeh9b0HcxX+GJFDNmXwIBcBa5t6U4dwyYE\/OX+tOZjhXagLQM26JvkWxeREnTcOtLWQa8tZjbeVwu9BkUXVQ5c3uO","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":187,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHBH9zwHJAa4KGFK8WgYoHACX5DWAbFA\/iz9tmguGVRlU+7x8tOph+GQvFevFb4vR\/6PozE9NBuTzVN\/CQ+NgkfF58wwMc9QRz9lhBWSJnfsNByHEVJ+518WmaUh3vc+ZAkCDhAe3CsVzYrP7c5qjllIceGEaBU0\/JQPWeH+mU+SZdUWA74hwOKKfLSlyihLlUOK5pdHa96Xax0cUhvQ\/sy4EYg==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABM8LaAbFBAiz9xWguGVRkrRsvrZjAGdWwN3vQGbsB6qoVRFwK2CS4Uzvq0aAPb5iDg2fMjd9MuNg6YskOn9q5jh3VqrgOsFA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBq4N+ByAAMVJql2qYHTBmisFcajp0EBzJIsXNCI++jKLyUklMRwfvVOkhq4VlS+ZS5LqHSTfw95iC5n4BT8q1ZYniPaEa8ctbh965scWdcRsJoQbPVG66AAAAH\/sDFLyAvKUy5Ug==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qMeAbDLDfq7Hw1Sapdoqbpz+9yP+wzocxxekOC4Ticond4c9NkUOpuCELi4sFfvP336H6kdkVWUz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0TeAbDLFfq7PQ1SapdoJmUR35GuRyJ9pMJeFRCMGlPnUT6x8jn5GkHg4MEyQ1sm4ghVn1MmvlATa","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/pA6AbDLCfq7EA1Sapdq+mnvSS7aAJHuWs5x8fmNVfk6UHRl7r6n4Xo\/Y01MJhLoY1kW3\/ElSmucC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/tO6AbDLEfq7Lg1Sapdr34uem9MxC3nsCgy94Waf7cEsG7w6kfjQ9JUcNmEzai52Siu3dXC7+f2yH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/9DCAbDLHfq7Ww1Sapdp2OKUBDYfEpXx+lGLAQ1KYHnuduY+Jr3mLAw9lQEKKWspO0haxp+4cvhC2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/WZuAbDLGfq7TA1SapdrpIc70+fTUiPiAL+uWFcNVaCaKYsGxboIgX00NJMK7FJjdWpU92Uoe\/hvO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABepxaAbDLIfq7ag1SapdrOvXPpMuHnYoFb1lG\/\/RkV2skHbhtuzVZE1SNYkcWyFAFtLrxzY0SEPUitM2\/RjQX+vfk14piX2Idx2YY9r+Wgpfvu70pChck6\/w==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":234,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANoAAEAAHBH9oAHJAa4KGFK8WgYoHADGhw+AbFBCiz942guGVRnItrwZ+lP1lxRQmtWqfFml7241fmbuLT1P9qU03rIgaN6hotYCoIElZ\/ScBObkXVfS\/HpZFhXzXZdqydLDBoofSC32bynoyKOzLjNL7zoTfNh4QraHTEYF0TjakRq4GG5gIPxLV7fx86QgbOJUIX0Qfg1qd8zJVNbjeFffCRoFe7wPbL2QVBwCEgMWggjRpjy5fc+Y7m9xycqSYKjFDYnt+Sra2S4hFBHxWUu4R6w0X5m9","pkt_caplen":234,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0576{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069196,"pkt_len":230,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANYAAEAAHBH9pAHJAa4KGFK8WgYoHADCkIiAbFBDiz98mguGVRnh6IizODz3tO1uRaOCKL5BDZGJaes+mxzFfg6fWPM6XywBpSt9wAfrn6pH2DUE\/SQ1iLd67A9WlgEtu\/nD\/\/w0GTiYEYO8RQdyEDnzJ1z7+mE\/6jhw9rPJTWOZeICBqrKazk\/hnQtkkfkb6EA07eHMO8WUrtEBI30KiXqcAwY+63fTYQwELfp7Wm1lLt2c1UaHIsg41PrQT+WAbqLwfNSxEzE99GcwXAQCbErkrCg=","pkt_caplen":230,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/NKqAbDLpfq9WQ1SapdqhgrTAEfu1w\/VWoK0568tyoNN8erYr5fGVaPDo6nWkKrn\/gKL7dBWBM0Bf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/fk6AbFBjiz\/0mguGVRnFN0ur29eQxb0Qzp959op0+mXIrkQKcYpcnMJHUPtUA\/Qwqw1IvW7SCFpA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":168,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACE0QuAbDLJfq7eQ1SapdpGw0ELEly8k5HnxSG7oSfUJyFZjDPl8lvtimrdQlZjz+M8pmDLnthaPsOj1yNR5VcZykikUKwvQQmEXo8Bx\/0LZij7K4YbH+A+XrrGqQjMV9NDHAjQLVE3CCAiKsuqsT5vIc4P4hFVlbiM1IcutkWB","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":128,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAPxHbMgoYUrwByQGuLDhaBABcv56AbFBkiz\/4WguGVRkhISJTAlDuKc3RDb9m0s8D1n+pqrb4StYHkbII3xO6cSstpwWEF8AtKjgzNaqQp+Sqd1ZxknG1qV5XS3EhNshM35cAt7j7TaI=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQ\/mqAbDLqfq9aA1SapdrEKnfRe\/BZNA9vX6VAZudwA8tyISS0mtWBbQzEb\/8x7DOr2wmalPvs4HloupYlutzGXeSW0Q1Mifu7hqI=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACYVU6AbFBEiz+AWguGVRkg3fw4K+2nB8UF8ouf+1CU7\/v2PFTBRKaWrOzlvPSk7I7u\/Sf\/jXXyxVEW81DY\/aFD5AEop6TayXa2HHXgWCZg9DtyCs1I84heoP3ssj9zGd4dd4gP7jon6vCQhoe+C3LYOta9cDmoZ87wQ\/JRQZYRV2QQPyQdNWouSQJlPgM2TGfYF+8=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":171,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHRH83wHJAa4KGFK8WgQsOACHy1mAbDLKfq7iA1SapdrPKzFtk\/M0AUVs0HsxN2lHzZAACjC6rnnKME2xKQERJFEtwPr\/KAt+Dit3urAkj+gngMnLRqEIhX0l+R31tzIJlj2wlUOTb8wtNu62sIkttH5nbQ3+bSso1\/PQ2eFFxTKEiNDbUDFfvbmN1980+LSMfKiw","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHRH81wHJAa4KGFK8WgQsOACPnTGAbDLLfq7lw1Sapdp65Gv\/VcAo247821fv4rqSNUhjoLt3hkGEL3B162RcuStoSRu2flVUR0B4IjXeLeuCj1TY48l7l71bOXAVBpq8\/O3uPuo8gQmQSR8tASBViAeAzJ3kYU06mAZFNHos81mvfCu9YjiHvhezaz3H1VowIeM1qGHNDREh0Fc=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChw46AbFBFiz+EGguGVRlr4aAeUqx6wQoUJfmwqCPBuK6k9u4xCouuPGxCyofHDqMxfe1FxWPuXyIQ1\/L6scuHuthoOLQD1Jl8fkIvHwC0lt92gzu1GT8Of+Ziw19r7nowHvVgxMidxQJ8zKfCbRL6XNimXKafujVVbdPmm0ug+zVu6dyW0faagKzkH3LjBuydSIVVd1hburc0IPs=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":192,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHBH9ygHJAa4KGFK8WgYoHACcPsyAbFBGiz+H2guGVRmChs0nwR16jYgXCgAWoscy556gYUyYrRFIBWFjmySlfPU5u7TSyv3VnO\/tCsoGmH5JytTizCdpKB6dK3DO+Tgg9\/4lnCylNQb4MGHR9dOsPQ7YhCFyBVmmsPHijIOCnbetkE4GInSEL1K4QQD+OPAEw60PGbjThVflvGTPr3+hOUwm33jwzaNT","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":176,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHRH82gHJAa4KGFK8WgQsOACMe0+AbDLMfq7pg1SapdqfswmsTRZQwZqEMvFVzKCQwYV7ZWWzpTYNE0FM8iQpJEJzDGUov\/xkfPPV9mdiYxjkJlAqunFBtAVRHkpAk6JYKz7ZwrzxSYCYiYoLfAXtxhDba46qLLDDXHdSCwxdkDq5RyQWpSrK+FDeeEm5p+Gqwa4bECsfjhU=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":166,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAQBHaDAoYUrwByQGuKBxaBgCC\/HWAbDLrfq9dw1SapdqYDJLMdrxGtF+gFUsCLwRNAHJ8l8CNffz6l3HBDSCJsWPTm25MMl+AN6vNMMH\/ahIfAEycE2l\/ePiscrN69ZIdj6Y21+lb5pwzW66Bq5oYQdlF6wl2luvznDBkEQiK1T6qBhhZBz2wXRlMwFGL1g==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuSoOAbFBliz\/8GguGVRlHNMNfDADOVBqQEh\/WV4iPKDr8toTV8HRwzSbPrMlLS3Pkc2IfZo5qqPvLmkx9t61FtsnmaLPh8+yypxtfgl93AxMhjgVMumUE1N0mg3UhGJx3Ej4K\/UWgSyqpA+8z8qJvnyv3IkvFQpmOUNKG94pLGY79ZW2Uu5HqvZxaLh5e3a1J82GShs\/k1dN9p8hiKX3N2lA0+ebFxYYR","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHRH83AHJAa4KGFK8WgQsOACK+YmAbDLNfq7tQ1Sapdp66DphED2dfLV205jWenK2Am56DfXofQV1KJITVmvMq5aCSFV3gOurqQk4sk04gQ0Gl5ZQqiAPAcYcidWMEab4wT3ngPTN9j+4RXUDHzobwszkNBrSjenwhftgvIGJFefB6gD5uFMRYjuhGLbUb1qrcdUSQh8\/","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":216,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAPxHa2goYUrwByQGuLDhaBAC0pGqAbFBmiz\/\/2guGVRkJ8+RZMUSVl1dXRDApe6qNvxhfg3EcSKYe1nkYIuo0KG78qGry1gefx4nZgPP1LEIaNszch2g2ejnLprA\/2tEc33F4Tyh3SOfvKG4HX2ah5bvvz2UHMHWkABluvZwNYnWTeFVEowBzHYAG5PMzRlC4Z0KxamPQkkhtBQIh2q065AL1UFrClJG+pK3n9PsGtzYn5xmqlUqPeZZpQGKIapzl","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBql62ByAAMC4ZVGbItSd6\/mTyCIr4E3Y5lu3\/72m5jcJjbwC5KlnCFnzd0zuOtETGMhjqjiiAH+YRIre6dMeMVSoMFs0jEh5oqJoOmprnMRKGlbL9RDliAAAAHKgs0sfS9+zbuxw==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHACh4PGAbFBHiz+LmguGVRnQH\/rX0g2ufsbqwBbfokecIVb0RygfUXaRe8ZTHWH8+KaLGnbQLtiiFO7hhekIictlKwA24Oei5Ct6\/2FPT0uVzcqsDfwIfn9wVOtDjKqfEBTuKO1MxX9\/Qm1qO3gNEkyYqifBFyLbH9m2WwbT3x\/MxxTd17Elr5TvAMpP0cpp0uSJgROc9xhFmEzSSV4=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAQBHaDgoYUrwByQGuKBxaBgCANvyAbDLsfq9hg1SapdqQdIGUYm+KSCpX04mWTTYR8WcwuJNe0LX4eJ98CZZr9HNmAdNlRF1VH9SCCFz5DWRtekGlfBmWOHGfq3\/vQKH+GRASSg5MwMApmmiSMJVRQl91T8OHQ9RN\/09xV72OcJswXAXSCgwN0NvoZPc=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":196,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACg4sqAbFBIiz+PWguGVRlMQidvMz1Jo1XX1nea6kgLnrJRGwdhT9e1XBA4Gx66lvHFP5kGfBPyjKKreuAUjmji2VmW8eB92LXd7984VIvEdFzc\/uXo6e42Rcvsba3UVWIMTrl4yKTAoDnXGDYbWTkCjUDdZIqpmGURYsJRMmOenKy1QcSjyyUwvTzaMvyPkJQkj5x01qayTpJasA==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHRH82wHJAa4KGFK8WgQsOACLrZ+AbDLOfq7xA1Sapdp8MWBNFDxZWPCECxsBx32JDKYgUVIzXg+4csbYFj7z5Wv0O02QmB6V3Auvjcli4+n15E2Q9\/haRP33YfGxlpI\/vYaEPz8Cxf1Cb0sT\/Vp7rbWfSWg1tkCcXQcEw1krsaUHjpjTw3uvFjSZ1Iu6BMx+FL0vFxMiMA==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":169,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHRH84QHJAa4KGFK8WgQsOACFWEqAbDLPfq70w1SapdocyImZc\/LWkKGgl3i2VeiJp\/YmJDzWUzdxpuNKt2x+FqxGBRUNhu+8BV19w3WzPfjOfQGxsflBF0UJ\/W4EsYKCC1uP9yQ8wVJ2NS0TogQFG0gR9CJlGpES3wJLYj8H0vP9yC7srpAW2ROcKgQyS6sINA==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":172,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgYoHACI2U+AbFBJiz+TGguGVRkmHxwtxhFhIdOdSzpfT7\/SSG\/tyMm3tYLjEXz+TN+ia9\/ePGJHPLLZKZXF1mWzbTy4UcCP13oTcgZWnR+WudzYHg7M3RbW2pBV7dK2zM7a5KsQC8z0vT\/yiXh1jfJ2W8V0cSJR1XGHRpmwov2Ubw6nI7kXLg==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACoox2AbFBni0ADmguGVRm2eoZ+8OvIQS8edotjXCwftciqC1xEHNtiScQds7CKLu8dbIIs9kgYJ9DORSuuLg+F7uUheUm\/SeyVMxa+t8Zjs+lpsWenCO0zdA1WXhArcLsL33xZwXKQVDdFzygOwEMqW1j4dfsctmKME9AO7M+UnMdFS8fQ05hbvnR9rr\/4yntxQRPtPrvbM5XEKx1gmZMpJQPs","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPTYSAbDLtfq9lQ1Sapdr+EV\/3RvRuhTcSA5LgrsPxDBYc59JXbU\/5mrHeB3pnHjFvUSGLs25xgYMC6Go\/8gcV0HY\/IaDx8d8zyxD5X4KY2BTTgpSiPtx7OoBmY0riqKuwY8Sx9EeON++H4V9pEguKBPyBcJgXjLOaAhJtpeEt3khY\/L+KWTY3Pg8=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":162,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+Q\/iAbDLQfq74g1Sapdpxe+PeWSivSqYkoo\/5jkVVHFqwGwJPZh1ESrp\/+TJsFhNQxyB6g3xaEwewxhQjzqcrbQWMmTIQrC7UumUMLGfBeXkiEGrlQeX0ncD+LfZE2mEbLMuYHlwJERHWFtc5PSjOVE5liQ6dNk\/z","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAQBHZ+QoYUrwByQGuKBxaBgCVz9SAbDLufq9pA1SapdpS9e5taihFGRsv0DUIo7+NX15eWolgKTqWx7WaxxdzdhONQqSdkl5LC0s\/ae\/TTrdfYhTU586B2ugOR005AllpPodyQ1H5xpp+W9T7DU6P6fIGjOIJykvrcNqg99ss1uoHQ4pf9Mu6aoFzNf8vcy3hrBWN2qxSGEr5XjKhzQ2I2Hg=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkP3SAbFBoi0AHWguGVRkUOgVB0xr6eK9rA3z\/xzT1LVDYOUNI+hTMQlAkRPIEdwfVBfgJFOpdt\/G+FC63jfFigUE3e9Kcd3WN50NNcyDmiFBQtPfOGUk9k409zeBHwRogA6oVxPSD1n8J0Gz6s1ftDsSNR28rHSPnYTv8zgkIhQK7Iu9CmUZEnyvvvecRuJiwC+bnw11oPJA5Lc8YCDg=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":202,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmueiAbFBpi0ALGguGVRnpjnOuKa9PpBFG8l\/swU+mshpLPINzZI4aIhOosqQaNRzpqhY4V+bugDAC1XVPbXWyLd6IuuavuWYaUV6uBHKvDUvGkBdwLAW3ATM8NQf2\/ma0CzqYXJMhXCbPOnQ6eWmG1K4Za1lLhjIwnWmlI+vMcQsDZAjAW5Zk4bh5M0MylLmAw3QazrGXsk\/fVxQxEivyew==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":174,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCKWsuAbDLvfq9sw1SapdpZ7FtTCFJ9QbHs1Kj4OHy4dHYAJaz0lbUh\/HZwDzEp6AiQSWpjGA3Xi4f8MDfsXEaODzL1jEoSmCeIGmRmRDrl89dP5Ke+zPlVvVR1C6dnAUa30RQLIOP19pUG9zaisMQo2+pCYD7JQ28TyjMH2YpPiIHGSC9m","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACL5aWAbFBKiz+W2guGVRlZWjoxV1pY\/oeMRzJqFh3pqH36Sl8Ljph9gowBVs914i5GnCP5k9Q302zHU8jta2MM7acXSWm8E4v1N5qXJcOyV65IK4gn8fhYRbPvAe4khhLBMozh6rykZM+zdBn49mx2jGHfv8T+Rw2MWIuwWXm+aXJ0qyXvHw==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAGxH+2wHJAa4KGFK8WgYoHACLUseAbFBLiz+amguGVRlObByztRnazObuoymZURoSu4e2umh5XRFnDErLNL4A0TxHOxhvFNPRA8+fF5h5ssleYjcf7Yk4WCmAaGMmFap9MsDmXRRqTf9SXb+8kZxdtW5\/sNOZp7PPNMfusgxLl37wxUtKIMNYau1lRTn5Dowc68OwvCTndQ==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAPxHa9goYUrwByQGuLDhaBACYopuAbFBqi0AO2guGVRntvoMv\/7d2qu4sMZcRV99mB35HfbEB0klikx8qpbEWkxJeu6c420Nif5f7A8fh16L3CA0ABxultcRlOzJw993RZsChoqsIt44aVyTCwg\/rbtCr8NK284qPJXvb1eWukqe2Fx4o4AsxXdNPsh60BDNc0EN1o\/Z4purA5\/mSyYNFIhEfWhE=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":192,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAPxHa8goYUrwByQGuLDhaBACccnmAbFBri0ASmguGVRm09h+gFTDpnCMabXGOTZC61SWLq1tHkAbvv3VMjUrB2L4BcN1A3rvjiaCD9LiOzuCjRT4LbNVT8QLIcylPEBhpVZxgjXCn5WTg1J2yVqrKf60aIGf+40XBWyjXCZWrDOk2pyHGDlIjMZYQMcyMq4QeB6SE4W0VTn4VUSWphw8VrHbxomTJMhsw","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":181,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAQBHZ\/QoYUrwByQGuKBxaBgCRRSWAbDLwfq9wg1SapdrhQNRzj1f9fZPdhY39Z+r9L6+nnNx\/QyXJ6W6y3FPCUzjCKStupNa5EGm5p4rmQQCCfOI4g9slKwnMrfY0\/qINecyha5s1L3vPGIKnCf1CyQmrn0A7Xr8vvf+cf109CVGrSxvM+QC3WQcVbDO3XHXmdQFGy1yEfTkaFLtC4g==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWxyOAbDLRfq78Q1SapdobXbNqiUU8jEJ56SwYN1pGQwRBpLri0eYNLu+UGQMQDHGUQ1jsApw1fndoWZtkbTxQ\/bT2T9gYwgqkFO+eTT1tKH0=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":176,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAQBHaAgoYUrwByQGuKBxaBgCMBzOAbDLxfq90Q1Sapdo\/8GQDBIRnEcbEJXcCzBVV1Kk7NGnV5IzHKYXWPyWCuYS+gLrHwak+9xzAx55E7Au56ECOp0Tw6VpeuC3i2YgkWNpOPDVAt0Wu3zXNIf2iJQMrE5MkxbHUziw\/Y9nWi8mXoRlsYX2m1eaOBEI0vLaivGUbHOlyPRI=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRgi6AbDLSfq8AA1SapdqPfJa0ryrtEqdurJqIUDBX+jxuskO6ght9WEfXs5fb+uGMxj37kNUO5e0uqBpdWgQgV59S9rJkm1P8TDJb","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGoUKAbDLyfq94A1SapdoaUE+a6GQSdl+sVb3d8kW3dwyM8LswMxLs9AiNWYAd5y3R1SORMHWhgw\/vBcitFBSIxlz3D6rheEKIYRjNPkFlrU1\/k5OfK7vXnTYxAOa01efZm8maCXLa82AKHdTJiVqn9hLGr6kklQF1xbItS96jWeI=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChofmAbFBsi0AWWguGVRmXoIuVtM43eIHqKyrqrhRgL8SdlTok11vMjuLrxdWqFJ4a1StMJViTQskzml80gWK79PP7PhPUVockSpJJL8vzwR53FSlI7hVwjUP3D8fwT+0H2c\/a5JUzF2NnhxngbJ+ubaf8d3JGtB4BgSV\/JhSKUQain9Vmw\/66TPNA7tal\/M9aNYUMwEPyQBTFBh8=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":187,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKsAAEAAHBH9zwHJAa4KGFK8WgYoHACXfRqAbFBMiz+eWguGVRlHNlb\/RYDMClbIXKbqSgWko+L0+LYmNtVVH5wCm7sxIHD9SQdnh3a7RjRvKC+iiUuhbBbB6\/tuIyN1FB71vJoEgxM1Dnd33b3bj5Iu\/m3SMu8CRuHk0u0Pd\/5tMj0wtWccnC45FpEvNeNlB+VrZc0JXnTIA4VLqHjKDP9oHGL\/5ceH7A==","pkt_caplen":187,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB16jCAbFBNiz+iGguGVRkWjUZ3x14vTp5A5lZrHwoAwGYWjip504Jxb9u2+Gx1CgpJyTgII9lFvRhYLu1OBspNeVVfIszIVK8IRoFsW8BHvVjAFVzBUpn6yYDGQWNP7b2N0iFwWtNRwWBuxRjXAkcw","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWSVuAbDLzfq97w1Sapdo1OAYIjGK1NhO3uJ\/BJAEPDf9uWVEFVzQOb\/oc7BBzaWSlol\/OdMebuThkwLAiGUUbjZ+CHuA1lhXRVPPIeORUk6DwzktlGfcdG3fw8Qn2QOI8JgjqCfMpe1Kj9pUwgihfiGTPxizrjaFgkx9pP8XfnbwsGXLGDuVWqsjEMgCscUHV","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHRH9GQHJAa4KGFK8WgQsOABNlkaAbDLTfq8Dw1SapdoR3GIBOLgblq5cFUJtfodpEqqUEKTcuXKuJ012LbOXvDkku2WCtRw6bSP2vRACnNAW7hqdHtFNCso=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPS7mAbDLUfq8Hg1SapdqiWrSATMh0FcrmqqU02YmXvSP7JHZhu7qnIftHeJ9K8xvvjyA9EHkTjERMJnQB8a7HZJKnDkrS\/nZrrA==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACoRtyAbFBti0AaGguGVRlRgrOz53bomywWQCwTifrkSdxdjT5ADYEc4mfaCgkwZfpCVoBJjpOZmG4SyxgO6chAQHJKDRN\/Z9EU\/B+E+B63tuoQduss9QRK9J3SifaOZddKqVRxDSkdf2qEUo\/Hnz0rAmoqhRWV3VKHHMOhtjSB4DUUychU3XwtItSbOApE\/MO1TXPnTKnUsEPARdM9w6+NkjBl","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":221,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM0AAEAAPxHa1QoYUrwByQGuLDhaBAC5MC+AbFBui0Ad2guGVRlubOa81TzXLJZuC5H36Fqn17HIHtknM\/ndX6P3Br5AqJfMqLO0TLxp2pDpUN6\/0rc+mHyY7JmhcFm5V7U0HZevZV0tVOweud4Ri80pT7Fn2YlHvi5kpG8HDjy18G2WoBEs1qaFThUMYGvuMWUIDr08Aydm4IO5+6PeF4JkqJ9gGlyMmRX9KzG8cMIQ4nAhWTIPURl5wlbeKVFso49BPLYeVuzGVdM=","pkt_caplen":221,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":128,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAQBHaMgoYUrwByQGuKBxaBgBcvXWAbDL0fq9\/g1Sapdp3PsZmouFQC4OSPj2qLhL6ukWPzjFQZeC7M7+34UfPEKknhikPvROHrQFyWLdGA47pGJ6SpJ5pbiVngLz8Kjmpt15e\/gKcP8k=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMT8SAbFBOiz+l2guGVRlerR3e1EWio9A2FzZOkaRkAV8pJuvc5ovlUG5kBHbpnm0Vf9eisakwFfj5cgouMNTgRNu8C7UTLQ==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBe7zyAbDL1fq+DQ1SapdqS1+UOnye1oVlg2aJ2GFwBhRrw0x8XCkLbwI91Ir1\/8\/MY8n2wfrZ1NndUcsV9AG1wjufSHKBrDXEoKhr\/h9ALa1ZfQK8hVBxIqQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLm7WAbDLVfq8LQ1SapdrvWGhRxmwWEdYC4uHRH0\/geXmdo1omm\/7zmwWHe93OgXsDZaAGs1egucSyHpz69LMKYfl5DzyX","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACoNSaAbFBvi0AhmguGVRnYOR+jJlPvtisjhokJhPiDCUgqcfIIpRbpfiz\/hpTukv1Ka4u5kkYPJGFRElEpjCaOzYH+k96daYERoEIhW0f4mqgNv\/qxdMzmnlDqwJpuPCxVOB5c\/\/CTC76htKTdqfjMazEv6BRGExPi8qfBMxfNAkrkOyN4q2HhMFZoh1\/dVQ1eDiqP92X2JIDgezk+tupfE3VI","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":163,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/CSmAbFBwi0AlWguGVRkoLDvKjNG0MO65\/l2i2w5KjajTwstx\/9q\/23YKENCSCEhS4Wg\/moWDRjlxe\/niWTBqb3wcJRneS\/vtCFiswaC1JJ8Yu\/ZQc9EA6jPfu57w659ug350rYXw7jTZ0xIvwwVRk\/xYrH+LozaDrw==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHkaSAbFBPiz+pmguGVRnCrD6JNklzJZ0ZxTz5PRUdnAdvh5fH1W+Ft29WMsxGzuLF\/vu\/mkBl7dw9buz7ZdvXbus=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/mIWAbDL2fq+HA1SapdrqHx8TrmE2qgUAu7RAxFzxmZgXSwZr1z4UxCkHDMHnoj6LSmiE3wctr4v\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABI\/GCAbFBQiz+tWguGVRnholDqELYSAVdv2snxLqw94O1W8WH0yRcI4eQaCEV8p63FKwMLoprsdtP69UDKL8vU3oZG","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXtguAbDLWfq8PA1SapdrGhdNhY+zG1gI8cM\/qp1E+FVvmiAXDchwj4kojinB7VN2FbivY63w5atj5GEWv55qKb46MleQTyl3X6clFc+BmoN\/J","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGcMKAbFBxi0ApGguGVRkF1J8sRjpW5nkp9NqM7QIWvdCXbsfED8xuDWmDWeJcWyi1OkibDDUASYGtu1\/Jfn7P7LcxB+JoM7VhrCFzCRtQDoi0OXhbbMCl5EgchHbgvu\/1VfDEgsqiDQoyUAvI\/FIC9H2EyHt1L79R8lLKGviGjlk=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/a+OAbDL3fq+Kw1SapdrCnha2h+FO2CjS6Bk++NcRhCegDJWA4flcFyU4B+xgLktd+mx0j2uZRMMz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDVKSAbFBRiz+xGguGVRnKU3K4vDzrBMpspP8\/CrfmVntQpag23871nmt27LHQWHHu7MvFE397lM8OEaWC1w==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEMf2AbFBSiz+02guGVRlKpZxpFNLNOUM9+3K5TYqxYSlgA6uBk1WoVG8AK29aqnSVTB8tJEEijjShT3VmvGA=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/2kmAbDL4fq+Og1SapdrAWqvuYDEDLO73IzjeuxumDKhxXwVLc4XqR9YnTiXED4kOy7FjxjwIWmeT","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":124,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGwAAEAAHRH9DgHJAa4KGFK8WgQsOABYMsyAbDLXfq8Sw1Sapdo\/SmhgxUunHGfCvHKnP2rfIcMuYurZJiInaph4mEXI7VWBc6SUWERLZLzYJbY\/q+LXvZHNfjfBLOjLljd7j4RUFJ9c3A==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACNcEKAbFByi0As2guGVRmjhTuh9\/IueAPAbaEIxjRAbg1ELXIb+3Y3NTT6ROMejM1tMFhzIN+cv+bmi1EQh+RtwdOiKUU0vjk18Hq5yrXSXX9mtQytUYlBnoCqTEaP4Yuq1IaXGxd5jipzWKI8XkFw1JrCoSvOk\/aCfBBpYeEBitkAkvv+BBF9","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAPxHa\/goYUrwByQGuLDhaBACQ07mAbFBzi0AwmguGVRlbJgZNoqDYI3Ak8+SEnZS9ZEy7RkszEDgs0ylsgN22BNcqPHd+VNsGGYCwBycmtUl2aqwmdqim9CJg9annaVyZWGtk06G3LtnMHMIRHJHBZZY\/0RIkrP00UX+4inMpnBM57NajJ5eTpel1zVPAf5EaYgh7CNx8Jn\/C7TKr","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sX2AbDL5fq+SQ1SapdpxNvok3e1ZwnQKwWf7gFW7GZA448xe3cOtKwfleO861He5XhAFwD8F5QMe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQIGyAbDL6fq+WA1SapdonG3NRhbTNiXqnVhPBe2woMqV2KfZeG4BKgWaRkCfMDR1dsMgEzqScNSxNvQH31tZQU4lACOjGPkPZxgo=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXazmAbDLYfq8Wg1SapdqkNPVedeziU0dHp2F+jNQvFdomJ2\/aiaxrXoS4OIBcEh04gYmwhw0ollB8o6m65GCWtq62wS2Mqn3cQ8J7cRsJFUh\/","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069197,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ\/SiAbFBTiz+4mguGVRlXMONXUyhj4mHz+oNN3n4y6g6brumvoi567K2E7QqLsiSKMrbAYz1tcsNYcIpXKxZNwyAwmg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":168,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAPxHbCgoYUrwByQGuLDhaBACEnaaAbFB0i0A0WguGVRmlRtL9GrcwkyGvTgvmD\/5uWUYXmTMoc0efUsW6DAZo8u45l7e+Ly8CSPgTU3OyuZhzq7Jq4bowX6oV0\/DXo65Y6NJ6Ypq37reRr2L5u8nzNMyC\/bvHHrzhUbVUIaiJmhHROHtP6qLvDxQTx32+KsCe","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKTZCAbFB1i0A4GguGVRk1DKZLAnXl3CNOtI4fg8MQcSkGeTd\/wJGDerAPnVbUZpUToAisBuhg4VScBVA1ao3uSrYlnT8=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLXcuAbDLZfq8aQ1SapdoaD4XH3OY8g3rOVa+ZcoSKAFNNy4\/sPwb113M5DrO8+0pAbHmxo3h0xNNSs3suREZ+0R7WAFYl","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLGyGAbDLafq8eA1SapdoIZdrX1DQMJt\/tRqIDgAUvffgqPKZvlQut3hniagtYXZlKYVHYyhQ6uYDKm62zk0EmNkgqdX3C","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKHdCAbDL7fq+Zw1Sapdq0RmuCaKef6jgLrs5Z6ghs5AVFeN1+ShZAwCAwKOv3maXlloq8fRetVHDjoX8ZcJCwxFohsXs=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHNLWAbFBUiz+8WguGVRkcBQ2w77nPgj9OzrzLYwVcIBksfj60e26SnPPw7n\/3K0YRXqz7M09Z38TYkwQj5Rw+r2U=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFgvyAbFB2i0A72guGVRnYdEEiHQs89LsV\/nN7kBqBuv3B\/5obHdIzhw\/rkjNxQ8tvUDFR9SMqw0duCcaEVaaA","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLpYmAbDL8fq+dg1SapdpRai7XOah\/g7TBc\/4fzrh3AXb3dOPAykaVlerNqk51ya8WTH1OXwqU8mDtC9pfh1u+E4w6zXB+","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/bmOAbDL9fq+hQ1SapdoZCioUg8\/TzfYQQNRp4JqDPJz2wbgwUIGkHlOurUCwf82n9I21MITKrfnP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/8U+AbDLbfq8hw1SapdrVt4Vd9FoIbkTRG15V5QbKXfnYisPeBzPI5PJI0E8EEvS+KiBPpeOey2MW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LIqAbDLcfq8lg1Sapdq1u26hZxrS9oiJsFMYfgiG7TFTy+Q\/Panf2tjY8ggEJub1g5xbuL21\/lRO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGzriAbFBViz\/AGguGVRmkCbJs4bdLiV8ABwUXfolGqpiFFnxIbpW7dOCaLB9G+4IcSciRytbFHM68z0UQm0ou2g==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHPG6AbFBWiz\/D2guGVRlpTV3ciXfJ4vBomLslbZXdpi\/xW6jlA3vSQkWL2IViVrEec+X3k8CRSB\/j\/7mzCN5Go1g=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABM5BGAbFB3i0A\/mguGVRlK+TYKKMpTFu3UXMEdJz1Uk48Uhx2i+Ikajq444lPXjm2nu1xZkpeQLoM606fCj1w9xQbDq1GrBg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHRU6AbFB4i0BDWguGVRkTEIbRkngmAIu5DpDIWaLT2La1PrqrPhyJHLNwRI322cx9+QfF6\/wsc38SjtIZiRp2B54=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Nl6AbDL+fq+lA1Sapdpk1LTECVKgzxVej2Ms5rkZF73P+TdDwPJg06\/umbgQ52zRemZJFhvU2SQG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB1e9+AbFBXiz\/HmguGVRkP5r59i+1T3SK8mCu57i1noVZqggbOVjMYUak2J9+PBCuAOvkpuKLjo6WNvtzQB5hpHMm6IXwvOhL\/hhtMF8zOuyThpa+2cmVv5kKRQ2GrOwyifHGklH9466d29RdnfTZo","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LReAbDLdfq8pQ1SapdrxAVS2mXJUbjMPLITWCtqlMrdflWHGU4M5gxwrUsdF1vGUyPl4cUmNWdNG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPG6CAbDL\/fq+ow1SapdqaYr5ML2PI7b88Uhh5W0hH293BPAqCijr4Fs7XIdHkMVN+NpV4QDIpClC+B6YrluoqGfJJ4TL4SOti7g==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ3MmAbFB5i0BHGguGVRnV6\/7m74MxZW83kE7ZyKY9QGbJ32eppyQPHR8UknK6AGbDDieOsEpf7M8fA0FxUS7co+0YeQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDDluAbFB6i0BK2guGVRmf74w1zMwLvfPr\/bNTYbDnbjS\/TLvLIXn25s46ZzaNZIvraMlRzKw1kLA1UDASWw==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKDoOAbFBYiz\/LWguGVRnJjzNfzZZSz1EmkY2d1zjbuhLf9kLvMDbpWQIbnrkFdm08KzF57iEsuTxByesjb18lBoL54co=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ItaAbDLefq8tA1SapdqR3LwcvhdslAP0knR6Vb607CXVVFO94St6cMgbd6IrW\/x+yTIEh1RAxSCV","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgQsOAA\/4TyAbDLffq8ww1SapdrR+FXkOkYlI0tJsOBXo0ZRXI9y2JHx+o0oSqcj+i9Z8e6o\/7a95iXOHohJ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEG4WAbDMAfq+sg1Sapdrj0j+obnrXxPlrdMxxFLgLgVLhd9OfieofEEA9Fki+F\/Via2KODLiwYUUi57\/+R5w=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFnsaAbFBZiz\/PGguGVRlUxcLK0lQqH50jt2fjBySiSPt7\/Touu1Swg\/Rnz9bbF7iDMAR0C+I3dTJ8wDg+9OQa","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABL+ECAbFB7i0BOmguGVRndud4OW502vNJ3dhRS5wkYBZKPM2XIVaMvPVZQCDqIiVXenSZISqd+K7PZQZsGxsM49MhQaCsJ","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/RSAbDMBfq+wQ1Sapdq4zUjrHgMPh3LDzb0lX\/Cpau3oTfvM07OE0E112CmjhuVXk1PUtr7taUfX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEVmCAbFBaiz\/S2guGVRmXTXCEkNFMECbbjKl69TzvRGuIzdLq+l\/IneHxZr7zDoiJcsnazX2y36itl9kzjdI=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ODCAbDMCfq+0A1SapdrK\/eisi7nhSdmL5Z6\/WasWD63YDEkasz57XORRZIVM7tFZg3LiqCnLZ3z8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/cQuAbDLgfq80g1SapdqlsJKm+76gsYQrvVu9LbMGcF2BRrjK3HBTwDiUfqBhQT7zjZtRkqNSDdv+","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHWMeAbFBbiz\/WmguGVRn5YtWG7IzeS+SHJZ31iV1sdQIqlsVuApHy5M31CYMNF8ZGmeFDngnglCIg6T6WhpBbJXg=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLFF+AbFB8i0BSWguGVRkQv7QpG5cCQ579ZnQnjI3ItozNmygqxUnvnpm2UNEnf6+UTMiTrPZ0xXa05Mn6Lf1tyTqCSGT7","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH5iOAbFB9i0BWGguGVRn\/dDuKvX67gqxrrlwYR2du9MUm+ONvjaK3s+k46m\/Pr4goajUxU3D0PNxCkEl5J2RZhcs=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLT4mAbFBciz\/aWguGVRndTwAQDUJwNow3ARK8UOScvv0TZXjukJOlWOquRGIgKWl5BdLWZHMI9KGO9JlsThQmnkG73q1y","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/1lWAbDMDfq+3w1Sapdp+FsIBqvEW0HW0R7eGsnepDCnJCzA80Y+06QxKOueOl9BOZkZlfEG5yjSb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/LXuAbDLhfq84Q1SapdoUCH5mCVbwO\/NCUAmEE5l7hoIFZhB4Bszmth1OCIJ\/bkd7SJvHM1Sw0b7t","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/572AbDMEfq+7g1Sapdrbh+ic1IIE1etHgh3rfXZt295zuEV9g6xlrZq86ktuc5c+YJfF5LvPEenj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHNDCAbFB+i0BZ2guGVRmADh6NV+Cmh5ovyCas6oso0w4fs74pVEXuE3ITIQbAxQc7Ls1B+YM\/ic\/ERtv24Vn9yUs=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHqomAbFB\/i0BdmguGVRn9Z4ZETALBA7OZVyVnurLmnBXhEVqON7x7JHyTRQABmkQQz9HhVea4sCgc2lrFT+dZcaM=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/F3aAbDMFfq+\/Q1SapdqskncUVJnA+UlJCcC5dneJAU6qX3ypnTmpV\/4qaksBzVZjxFnOWxJTmNbv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/16AbDLifq88A1SapdqcGHQVgkqMkEct1aUKnpWUIuuNDsZGfMtNcqsPzNrpU7qhKhq1TNjUn2oh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGcbGAbFBdiz\/eGguGVRnYENxCaQNpBYgRAetqLDCn5L1IizVmXhA0nrLgg99mxt0pFuiOPYMSyrAMd8CHbFrJAg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLxlKAbDLjfq8\/w1SapdptHQLiuYHpyamMfqWRVmwq1R79mV0wCJAhgfDpRwRnw7cBrVOo25rgBDGPZxWM92uYMNjpZN+V","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABO0i2AbFCAi0BhWguGVRn0c+LEjOBnGZ9FSfCm0HbHSrAgWMEBZLXAey0TifmvSnVRBVvdU6HS6irEvhYwL74IUC1zUysvzPd8","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fsOAbDMGfq\/DA1SapdqvHJ48HCwZQ10fOZ1Wh20Rsn1qYZ\/03eYWoxj5+cbNAEtdKEm+8gbyT9y3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRp\/SAbDLkfq9Dg1SapdpkC5TfSAEouup47XtlihG9vlTicCLq\/dZ9oqQCW1XD7rCrVRiv1LWP0yGDHXXbgmzTUIZyIn1OcGWAX6P8","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEVtiAbFBeiz\/h2guGVRmH63ljADcmSoDcsYDgzl6HSX10D8CTgdlhAMLY6flZD2NJhV0ANDYoobJABH0NqXQ=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cpmAbDMHfq\/Gw1SapdqpTSKpuGRKSgv87j9VuOL2eZN9TW1t\/fnFFP214z4hF\/M7Bhf+GHMz\/XMk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE0AmAbFBfiz\/lmguGVRlch4s6FEa2PvZtVTtR9vgCFuFK6J7LbZVJKEZ9HbaYybAYa+WHEnbU+ZyXmxBd8vU=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvn5CAbFCBi0BlGguGVRmCRNAVcoK1QubKAAF9\/GGN09YBlGJ2rbMLXDtHX9PebcaFAe\/iiwC3I1RWje+AXUspJ4OHNFQARh7ZY2IsXSLkyqEjz6HQpOaTMhX434s5AF8jiJv6Ar0vESXg","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABdDU6AbFCCi0Bo2guGVRmJeKKf0nWx5lVCJwBFSBQMK5lUYjxq84rQGeq41evpestjV+3sMfkiGaXnxVR3Nqc7fUO1cD28Jcrc32+N0zZNOxr6BLh6rbLr","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/6muAbDLlfq9HQ1Sapdo1D4rNhMzFvR8YY+9h8lVOcCPLu0RIybA2RsXW3hroi8XWEO+B+9u\/t\/Z9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QCKAbDMIfq\/Kg1SapdrclCU8\/\/bhd9HVLzKpRKsHt6J4WkaLj9yX\/m3JmkdOPPwi7zi9O3FrL3tv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CmeAbDLmfq9LA1Sapdrgf2RKXYk0Rwv55xYAmFJNFL098HMgvN1YMFS06aB063D5fhuUkGW+EPby","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/OfKAbDMJfq\/OQ1SapdpBLSKyTbARIub4lsb8xMk4dags7LFJ+AbRVxJPRQbXdvJsxf2vTFfqeBhe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHBH+JQHJAa4KGFK8WgYoHABBXtiAbFBgiz\/pWguGVRkwTFWgFdruboRU2eMHUgXgkKrAwZ3YkFD2WynAg3Hv+TKLi+XYCsDFjb0AZCo=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVdimAbFCDi0BsmguGVRntThpiLDTlnkhC6jksq4tpC0Mnb8sK\/msmDBdK+MDyJ2gdW5qOMzoEC76dMUfMZsKxKLoGuF3ddsJ0NpbyfruvxQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVqRiAbFCEi0BwWguGVRm9vGJ9EbgdnIDGo+Zqakhf8SjC4Hd8+wtvyFyaeGwtOA8VL99nnERQLeR2k4mH360QjJoTRfX5bHrYxG0DnqhltQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PA6AbDMKfq\/SA1SapdoKRg77brXtsP8xs50puUaqw6Hh3Iqb\/YgPHPDqi6NhlNjbdnDYV\/iUd1+X","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJEuWAbFBhiz\/tGguGVRmy8bAhFLOCtFT8QpmAX7zuS12PdooLspNx3k4TxO+vs10UubS\/OhotH7qgtjUUq4CJoUoC4A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NbWAbDLnfq9Ow1SapdoOD5mmujatMJpHXm76vsXntqwNHNiSMy0cIc4CA8zyhbpvMv20ZXNZ4VL5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069198,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABA9omAbFBiiz\/w2guGVRn4DahNZ4P+u3QVAPL4rCMsz1I2OoT+opNI4Go5KXaqepVib8A9QRNfVsiAvQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOGbmAbFCFi0B0GguGVRlr5Gw8fx+PjZxpB4Ce9hyDsslqoSvwqarkkT+EoTRGjJXyg3b\/jL1YtA1zHVea196z7DYcTZ9UwM+7","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/crKAbDLofq9Sg1Sapdqzni1V76MIB+4++QD9ltS6lv5ku4LcErzUNNwRAmSaNo3ZYhzENyrqhL1T","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/qOWAbDMLfq\/Vw1SapdpB6kYTJpoup1\/8usfcptY1\/CNrRXmy+9310mqmo1F6+f3MexbWvZPvxY3C","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/MJCAbDLpfq9WQ1SapdqhgrTAEfu1w\/VWoK0568tyoNN8erYr5fGVaPDo6nWkKrn\/gKL7dBWBM0Bf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/gmiAbFBjiz\/0mguGVRnFN0ur29eQxb0Qzp959op0+mXIrkQKcYpcnMJHUPtUA\/Qwqw1IvW7SCFpA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLzJWAbFCGi0B32guGVRkONHZ\/mfp4Env4iSfwarnadmJbUd9\/XV53fiL0NwtJMqPv7Vo6tJCU6PW9gi219Si73nSxqaqo","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABF+uSAbFCHi0B7mguGVRmjZUKo6Kbx9n3zn0hN1zATKmakH3CgP8kjjPH7M5mmRBAQ2Mzaa\/KFOl73U111CmvM","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgYoHABcw7iAbFBkiz\/4WguGVRkhISJTAlDuKc3RDb9m0s8D1n+pqrb4StYHkbII3xO6cSstpwWEF8AtKjgzNaqQp+Sqd1ZxknG1qV5XS3EhNshM35cAt7j7TaI=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZL2AbDMMfq\/Zg1SapdrAKJhV0ODe\/RmjWc5EMHxHxFyAivnqCcEcyIb4eTJwEzJIRKgUUDwQu\/Md","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/f8WAbDMNfq\/dQ1SapdpadjNLYnh0nO9if40\/lSLuBvgby9XVl\/1xl6FrJEm3kf5ZU+2CUf4hquFg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQ+lCAbDLqfq9aA1SapdrEKnfRe\/BZNA9vX6VAZudwA8tyISS0mtWBbQzEb\/8x7DOr2wmalPvs4HloupYlutzGXeSW0Q1Mifu7hqI=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ne2AbDMOfq\/hA1SapdrcyUpemZsPCeSLPhQlS\/ErvXK75VxdN1LHBw2xeEe7xCzsqOGX2GPFt1TK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH\/aeAbFCIi0B\/WguGVRmmcVlrBAmbIQmJ5WGoqE3ephTqaEz2w70WfvbpUX\/IHp9taMK+4G9C5i2XvIdk2pUbGGE=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJVfeAbFCJi0CDGguGVRl6ZVhdEfiFlm4j\/iYu8ScAakehZNN8RL6N4WrslBnnUGqc4xJHuy6aAuDlw80\/YkiD22kz9Q==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":166,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHRH85AHJAa4KGFK8WgQsOACC+FuAbDLrfq9dw1SapdqYDJLMdrxGtF+gFUsCLwRNAHJ8l8CNffz6l3HBDSCJsWPTm25MMl+AN6vNMMH\/ahIfAEycE2l\/ePiscrN69ZIdj6Y21+lb5pwzW66Bq5oYQdlF6wl2luvznDBkEQiK1T6qBhhZBz2wXRlMwFGL1g==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/eteAbDMPfq\/kw1SapdpB\/ThqhGRKDJgrvSm9+gPdmfZ+PoZ2OAmhMFVEL4UkD3+3PpNJvJ3bCCFi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":210,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAGxH+uAHJAa4KGFK8WgYoHACuTp2AbFBliz\/8GguGVRlHNMNfDADOVBqQEh\/WV4iPKDr8toTV8HRwzSbPrMlLS3Pkc2IfZo5qqPvLmkx9t61FtsnmaLPh8+yypxtfgl93AxMhjgVMumUE1N0mg3UhGJx3Ej4K\/UWgSyqpA+8z8qJvnyv3IkvFQpmOUNKG94pLGY79ZW2Uu5HqvZxaLh5e3a1J82GShs\/k1dN9p8hiKX3N2lA0+ebFxYYR","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH+A2AbFCKi0CG2guGVRmxLIeJXEHZQTmYqvNmyAu3HKKiaWsRDQUW2hUkcdqdz1yb1IHZvo2b4NHeBPX+OmIAWx0=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/\/VGAbDMQfq\/og1SapdqZG11BnEO35IF848bzdrc3HE2zAn22IbN8nrjwwLQHHfJZRWdBAa+UGaMC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":216,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAGxH+sgHJAa4KGFK8WgYoHAC0qISAbFBmiz\/\/2guGVRkJ8+RZMUSVl1dXRDApe6qNvxhfg3EcSKYe1nkYIuo0KG78qGry1gefx4nZgPP1LEIaNszch2g2ejnLprA\/2tEc33F4Tyh3SOfvKG4HX2ah5bvvz2UHMHWkABluvZwNYnWTeFVEowBzHYAG5PMzRlC4Z0KxamPQkkhtBQIh2q065AL1UFrClJG+pK3n9PsGtzYn5xmqlUqPeZZpQGKIapzl","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZB2AbDMRfq\/sQ1SapdrG0hfCYutPD9M1VYz7Afn1zFNuP1tovtkHbVTPX\/gjlp1KTjgijbLl7R8P","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":164,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHRH85gHJAa4KGFK8WgQsOACAMuKAbDLsfq9hg1SapdqQdIGUYm+KSCpX04mWTTYR8WcwuJNe0LX4eJ98CZZr9HNmAdNlRF1VH9SCCFz5DWRtekGlfBmWOHGfq3\/vQKH+GRASSg5MwMApmmiSMJVRQl91T8OHQ9RN\/09xV72OcJswXAXSCgwN0NvoZPc=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJuWuAbFCLi0CKmguGVRmG2KosWmodL1imK\/tTtZ0CO6J9ShtwR4z3YXjGW5pZ18tmEof+hMtEpd9NRCF6uD9tn7tGGw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABInd6AbFCMi0COWguGVRkL+g2Oh9Wkg9zpM5EAeqQ9dRRZ9JQrWR7zJt2r29UKg0tTTykubazfDbihc7D\/GOlrL2cl","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqiN+ByAAMVJql2usjul1bYt0wXtBGultF6ID8cTY8FKzSbZy09RI\/Nk\/Zog6jhkaTF88sGdIGxg0nTTITCbns5cdACSsU7aRlGhJYmiNLLu3NkWkKaSGAAAAIuSiehL8FPbSahw==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBVKNaAbDMSfq\/wA1SapdqGDdpOCLL57FzSayFgYFz\/8F3Df3Vd9NKMd4NUYmDJbi0xfETopmrZHTqZOnyplOp2QZcT10xP6qR2JV5ZOWPIFQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0536{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAGxH+vgHJAa4KGFK8WgYoHACopzeAbFBni0ADmguGVRm2eoZ+8OvIQS8edotjXCwftciqC1xEHNtiScQds7CKLu8dbIIs9kgYJ9DORSuuLg+F7uUheUm\/SeyVMxa+t8Zjs+lpsWenCO0zdA1WXhArcLsL33xZwXKQVDdFzygOwEMqW1j4dfsctmKME9AO7M+UnMdFS8fQ05hbvnR9rr\/4yntxQRPtPrvbM5XEKx1gmZMpJQPs","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWfKiAbDMTfq\/zw1Sapdp5AYPUHN+TUpLys7iMPJM0q1zvRM84o31QShiaGJKvq1TTeA50Ke5LQMnOVovyauPh5+jPoGlfc5wLQvNrwjmnqds=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHogWAbFCNi0CSGguGVRlu+cGuXZ+gdBpKicsYIsUT0RBJi4ByICrygy3+k3\/89ozlieMWTdtG1P3dPduDyYNYBVQ=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVmL6AbFCOi0CV2guGVRmltBqVR+QesUry7UCfmJ9P7bRcx7DqPS\/nFDJm3StCIMfZ1NLV59iyqGt2fr6I5HFoMwoggI8LPE48HWG5foOJag==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBU1qCAbDMUfq\/3g1SapdqgVXWz7a2gtpcCxzYkxkMebu2613LsT1J5DJZLKgbCXt5kqceQK89wgjfHdzkzW1eIGZnfnvxHJrxdMUREic94","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgQsOACPSWqAbDLtfq9lQ1Sapdr+EV\/3RvRuhTcSA5LgrsPxDBYc59JXbU\/5mrHeB3pnHjFvUSGLs25xgYMC6Go\/8gcV0HY\/IaDx8d8zyxD5X4KY2BTTgpSiPtx7OoBmY0riqKuwY8Sx9EeON++H4V9pEguKBPyBcJgXjLOaAhJtpeEt3khY\/L+KWTY3Pg8=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgQsOACVy7qAbDLufq9pA1SapdpS9e5taihFGRsv0DUIo7+NX15eWolgKTqWx7WaxxdzdhONQqSdkl5LC0s\/ae\/TTrdfYhTU586B2ugOR005AllpPodyQ1H5xpp+W9T7DU6P6fIGjOIJykvrcNqg99ss1uoHQ4pf9Mu6aoFzNf8vcy3hrBWN2qxSGEr5XjKhzQ2I2Hg=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGT4eAbFCPi0CZmguGVRkpsiLkNZoDMprHAvTI4XU2KqgSPziXGJKxMrV1hPNpWXHoANxdd1JxEVU8ISLPkokJJQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXQV6AbDMVfq\/7Q1SapdqSe8YY40hEbpGRC7dEYDm8Bca\/f3mFcJxyWVDExoiBeZJcCd\/b9xjW+elGQhi8R+uP6E\/861Ta4e0JHvpqsQ2HPRzE","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkQ46AbFBoi0AHWguGVRkUOgVB0xr6eK9rA3z\/xzT1LVDYOUNI+hTMQlAkRPIEdwfVBfgJFOpdt\/G+FC63jfFigUE3e9Kcd3WN50NNcyDmiFBQtPfOGUk9k409zeBHwRogA6oVxPSD1n8J0Gz6s1ftDsSNR28rHSPnYTv8zgkIhQK7Iu9CmUZEnyvvvecRuJiwC+bnw11oPJA5Lc8YCDg=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBi5XKAbDMWfq\/\/A1Sapdo\/i141mlkQnDPElxnrHtumx\/sVCYBVrKxgCLetGav1+ud0+EXbr5lOx+218zhHZ1D9XILzajsoVBaiv5l3xlBJ9TobwM\/\/TzdEeUaBIVc=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGClOAbFCQi0CdWguGVRnmIxELVLmQnkIZaJ4ReH5\/lXDK43Uu0nGqOWRPcWj\/WlZYuvIBqdo81D79883Rd31xJg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMX2WAbFCRi0ChGguGVRmDEk8MQn426YbKD7tUqGDrXa60hI5KUEVA92p+lTwaWX6hg4WD2iVqv\/mfGD\/40GoJ3ebrQkYqEw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":202,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmvgKAbFBpi0ALGguGVRnpjnOuKa9PpBFG8l\/swU+mshpLPINzZI4aIhOosqQaNRzpqhY4V+bugDAC1XVPbXWyLd6IuuavuWYaUV6uBHKvDUvGkBdwLAW3ATM8NQf2\/ma0CzqYXJMhXCbPOnQ6eWmG1K4Za1lLhjIwnWmlI+vMcQsDZAjAW5Zk4bh5M0MylLmAw3QazrGXsk\/fVxQxEivyew==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQPzOAbDMXfrACw1SapdrAYkWELsZhcv9pCHaUd64YEgcD29WX1Ntm8z0ghuWKmBFw+9q6edaBwuW+wjdY5MWKFkFVE+\/gCTskITQ=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHBH93AHJAa4KGFK8WgQsOACKVrGAbDLvfq9sw1SapdpZ7FtTCFJ9QbHs1Kj4OHy4dHYAJaz0lbUh\/HZwDzEp6AiQSWpjGA3Xi4f8MDfsXEaODzL1jEoSmCeIGmRmRDrl89dP5Ke+zPlVvVR1C6dnAUa30RQLIOP19pUG9zaisMQo2+pCYD7JQ28TyjMH2YpPiIHGSC9m","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":100,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFQAAEAAPxHbTgoYUrwByQGuLDhaBABAwveAbFCSi0Ck2guGVRkq+ORb\/H97ATiZ5Iex2WqpDpo+NBqxq829bVYnwQCi\/CGLFir1ChJXDgRbwQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHGQ+AbFCTi0ComguGVRl\/1ZS4zgR\/LueU2GDqcS7RMAEJsPZP1z9D\/QjJrzXbqE8Ir8Dr9KiW\/3XqWqS2zEkTSX8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPBeyAbDMYfrAGg1Sapdqg0k6DZOo4pltwV73mrj\/gxZuhAg6fYqQZSMrV4ggbC9vlLJ8aLGfGE85cgTRcCEJz0TjQGBeC96v8mQ==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/I8uAbDMZfrAKQ1Sapdr5aQaJhTJGfiDoRmbcmdagZbZvkG96g\/ZS76ZH\/67bT+nWBLdlmmcgreXW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHBH9zgHJAa4KGFK8WgYoHACYprWAbFBqi0AO2guGVRntvoMv\/7d2qu4sMZcRV99mB35HfbEB0klikx8qpbEWkxJeu6c420Nif5f7A8fh16L3CA0ABxultcRlOzJw993RZsChoqsIt44aVyTCwg\/rbtCr8NK284qPJXvb1eWukqe2Fx4o4AsxXdNPsh60BDNc0EN1o\/Z4purA5\/mSyYNFIhEfWhE=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBR8DOAbDMafrAOA1Sapdoc1lQNyMyYKKBgafKxjawqElEBwZRlZTvNNHucr0dYcSqssjv8DU5+eitKC+z2iVgVuPHfeS6wuxeQec01","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":192,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHBH9ygHJAa4KGFK8WgYoHACcdpOAbFBri0ASmguGVRm09h+gFTDpnCMabXGOTZC61SWLq1tHkAbvv3VMjUrB2L4BcN1A3rvjiaCD9LiOzuCjRT4LbNVT8QLIcylPEBhpVZxgjXCn5WTg1J2yVqrKf60aIGf+40XBWyjXCZWrDOk2pyHGDlIjMZYQMcyMq4QeB6SE4W0VTn4VUSWphw8VrHbxomTJMhsw","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVz3WAbFCUi0CsWguGVRmNi4rKb89h4MlRyjH1Vm8y1o7AWyzatJcfSnNsOOAjiZqSLS9IYH\/Y0cxnTso2h59CfMQ+1kvxk8A31Ig6MxkBxQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069199,"pkt_len":181,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHBH91QHJAa4KGFK8WgQsOACRQQuAbDLwfq9wg1SapdrhQNRzj1f9fZPdhY39Z+r9L6+nnNx\/QyXJ6W6y3FPCUzjCKStupNa5EGm5p4rmQQCCfOI4g9slKwnMrfY0\/qINecyha5s1L3vPGIKnCf1CyQmrn0A7Xr8vvf+cf109CVGrSxvM+QC3WQcVbDO3XHXmdQFGy1yEfTkaFLtC4g==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBeccqAbDMbfrARw1SapdrASQX7a7OQrLB98Gw9+fAYQbCwg42\/3T8a7TChbu9CeVOSGu2w1L22R198S3\/EqYYMHG8mIQxz12pl9hr39y6HXuMGBLaYwDxD2w==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZyaGAbFCVi0CwGguGVRmmg5kHX1FaJGXQwjTo\/QN+BwyVOTdHahfHQK5DpfQsOLN4iiYwbtuVVB7kBY32X8BV70E\/XPfF17rUEp\/U6TahrOR75zZV48DMgh0EV38wEByCRrweDUv7bNU\/JkxkLzG22lukClWijx6FUUe5S2q12UaBIH\/24JGLMmFEoBylXMl3Hep8","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACG33WAbFCWi0Cz2guGVRmZRJu2em99UwboNPv+dtbWeI8EazNgysgfWqwv7uF38hESkIEzsJKwRosvmegE1S8mdfKyqmXOHllbpJqGNC7JXDNElNJA\/0XXE+bzVguILEucLSIzpfYMKvpLAY31ox5US1zaKwZrLa+EymK4rXemsyU=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":176,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHBH92gHJAa4KGFK8WgQsOACMAxmAbDLxfq90Q1Sapdo\/8GQDBIRnEcbEJXcCzBVV1Kk7NGnV5IzHKYXWPyWCuYS+gLrHwak+9xzAx55E7Au56ECOp0Tw6VpeuC3i2YgkWNpOPDVAt0Wu3zXNIf2iJQMrE5MkxbHUziw\/Y9nWi8mXoRlsYX2m1eaOBEI0vLaivGUbHOlyPRI=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":162,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+mfmAbDMcfrAVg1SapdrCuiSCdgzEil6OJHOcmQYsIGkQEMM2TVHbKGnmTe7QTrT+mRQ5zPtV20XqgStiNZ4os5siUi3xbNHLsmqYg\/qom9LnmuJ691j70lqGc59tQMZnmI0ENTppUTMBlD8dTRexp8fPnrd28et1","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgQsOACGnSiAbDLyfq94A1SapdoaUE+a6GQSdl+sVb3d8kW3dwyM8LswMxLs9AiNWYAd5y3R1SORMHWhgw\/vBcitFBSIxlz3D6rheEKIYRjNPkFlrU1\/k5OfK7vXnTYxAOa01efZm8maCXLa82AKHdTJiVqn9hLGr6kklQF1xbItS96jWeI=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAQBHaDgoYUrwByQGuKBxaBgCABi6AbDMdfrAZQ1SapdpbU0J\/+HE2unYNRBv6UsB6w11SPl64S2FIYJd\/j3ssn0ZSz+\/rMxeAiXy\/7xaYKIzTM0ArC5wqFDg0voGTesPKrw2zrD7VyzcvZm3U4V9P+5OgkhSY1wUsPDE3GPQasn6y2UbClwjuLFXmDHk=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":171,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHeu+AbFCXi0C3mguGVRkrr+HndrRyjO0IOO6iyk\/3GdutwYxUfGxvJojH0U8XTjssZL0JFQn6od9TLxk7c1Z\/O+PAfnwfM\/lqrYnVCm+ho+IfHpgtVg0IMmRVeIqUHFhuCiKbjgvPV3VHSg8MYFc4RLNpMqgQ8hF5X0mmZhHe8b67","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBq5\/mByAAMC4ZVGaDpnSddKM5Xo0F7IzUlJ0K974tSl6CKC75qjJ7CzzdGPB\/jgt1yWqXNt5f8eE7my+DfJ1ibS2biQYoq0+IluHuPfo1V6AWC+zZ2seaAAAAIJChM86bO4q6g9Q==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":152,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIgAAEAAPxHbGgoYUrwByQGuLDhaBAB00x6AbFCYi0C7WguGVRkTfuKOijtuW3gyaR+i00LcieHtlMKRJrHqTvK7UtBj5Zkczo5R3j\/MH6dJZOQ7bmksN9eWJZtHMjElTEbg2PVchXMxU50cDPFIkJpARmghBS\/mo7HNUdYHqQW5yBRDEKg=","pkt_caplen":152,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChphOAbFBsi0AWWguGVRmXoIuVtM43eIHqKyrqrhRgL8SdlTok11vMjuLrxdWqFJ4a1StMJViTQskzml80gWK79PP7PhPUVockSpJJL8vzwR53FSlI7hVwjUP3D8fwT+0H2c\/a5JUzF2NnhxngbJ+ubaf8d3JGtB4BgSV\/JhSKUQain9Vmw\/66TPNA7tal\/M9aNYUMwEPyQBTFBh8=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnb9yAbDMefrAdA1Sapdo1YD9AOn6OjopJ3GwIj+bkUOdfhOHG6hY4DI7C1\/TwkaayHZDR5IceclpAroEpWbkt+iY+UgVJ8m6SHwmcpdQFUJp8uYmiEkutfsnZ8e+5Tbcr5w==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHBH90AHJAa4KGFK8WgQsOACWRUGAbDLzfq97w1Sapdo1OAYIjGK1NhO3uJ\/BJAEPDf9uWVEFVzQOb\/oc7BBzaWSlol\/OdMebuThkwLAiGUUbjZ+CHuA1lhXRVPPIeORUk6DwzktlGfcdG3fw8Qn2QOI8JgjqCfMpe1Kj9pUwgihfiGTPxizrjaFgkx9pP8XfnbwsGXLGDuVWqsjEMgCscUHV","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBig1WAbDMffrAgw1Sapdp8tXr6a5YJ5OlrakeVomlBte2SAkk7vi94nxNGiycakDbA94EMjanjN\/HhKXpP0Wb8rme+mZiZ7kXEb4OLvrGu5rbjVaflDug5iFeLJR0=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":163,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/S6mAbFCZi0C\/GguGVRmAon3+m1PYOiS\/XuzDTXs9NPU4gy9IXPlUgLFySQMWbX05i3V8KiOy++ENNcLQ1EbqG3iSlsBzMYMYBDHeb8\/Z7xTu3TucKj8clf6rWBoNAQAPOMpysHNimSOUu82LcSa7CJE9RNoPnm3mdA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACoSvaAbFBti0AaGguGVRlRgrOz53bomywWQCwTifrkSdxdjT5ADYEc4mfaCgkwZfpCVoBJjpOZmG4SyxgO6chAQHJKDRN\/Z9EU\/B+E+B63tuoQduss9QRK9J3SifaOZddKqVRxDSkdf2qEUo\/Hnz0rAmoqhRWV3VKHHMOhtjSB4DUUychU3XwtItSbOApE\/MO1TXPnTKnUsEPARdM9w6+NkjBl","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBllJaAbDMgfrAkg1SapdoHkmXge9nOiQ8Pkx9CRkB10Uv7pK\/QvV8fVXtLyIlZj5oDaPMSOCOIyktI9SP\/NlccXqg0OluAAos9DrZiYu8klMPdtQ2vUh6KEqqovZox+Vw=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACPK9uAbFCai0DC2guGVRmepdbBJGnbyY\/aPzFbpQA\/R0kSWgGWZHmWVVA2VaR1sRy+gUH6+\/5LEXsBon8jRL10eFZD\/Rka5BAg4PFhrMVeoRb+UEJS5yifiSY+0r2H5gvSOW4z+DLcyYKfcMgYoQl\/icJLcs8PZjvIahS9DCESPk\/hd76pQkarOXY=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAPxHbLAoYUrwByQGuLDhaBABi0W+AbFCbi0DGmguGVRkR2\/PPp0xJQwKMegyo96Vsh6GWrpkS33wNTr7RHMESK3MbLh2sp8XczmSuCKvAS1NMxuL5ANwYvtdfi7mlzGWglgJcrNdD5ZtxPqNlbTs=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":221,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM0AAEAAHBH9rQHJAa4KGFK8WgYoHAC5NEmAbFBui0Ad2guGVRlubOa81TzXLJZuC5H36Fqn17HIHtknM\/ndX6P3Br5AqJfMqLO0TLxp2pDpUN6\/0rc+mHyY7JmhcFm5V7U0HZevZV0tVOweud4Ri80pT7Fn2YlHvi5kpG8HDjy18G2WoBEs1qaFThUMYGvuMWUIDr08Aydm4IO5+6PeF4JkqJ9gGlyMmRX9KzG8cMIQ4nAhWTIPURl5wlbeKVFso49BPLYeVuzGVdM=","pkt_caplen":221,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":160,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAQBHaEgoYUrwByQGuKBxaBgB81meAbDMhfrAoQ1SapdoUgO+pkRLx+nVbtxFgEijaW\/qg8IhPBUKX\/ifFAAKapyZCXA4BCuPr4pgcUQ0i5FWPEMDkdyN9nVSFSJRMHCsENpJJvrJ6z7Uegzd6luTYOIF+MC\/h7kx9jQLR1Ysmz87dGa3eHm8ULA==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgQsOABcuVuAbDL0fq9\/g1Sapdp3PsZmouFQC4OSPj2qLhL6ukWPzjFQZeC7M7+34UfPEKknhikPvROHrQFyWLdGA47pGJ6SpJ5pbiVngLz8Kjmpt15e\/gKcP8k=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":168,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCEQd2AbDMifrAsA1SapdoqbCltnMxlTuK3Y4tPerLkyQ0kd5pqCjNCBE7RXnCW0Ucr6rbCaR6VT8fgXI0RwMZU8bRnezSRBdWbC7SAp6757fqszcHAYqXy5MDuu\/xxPedyPq2fcEWJ\/x3I8s1hfSilDbSNKE+dB+JTS19v0plI","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAPxHbJgoYUrwByQGuLDhaBABon\/+AbFCci0DKWguGVRkWmQbl106LiaK3jHzrB4AlMCYM6sVnXWzP9GotPx7f\/vaLddmefx8+brtIMFa3GZzQ2oxY+jNH0dKNAyfDeUecN1AQ8fuJjThqAgOoPiEcIEaCbKA=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHKxCAbFCdi0DOGguGVRme12SkOl7tf0EfDVDMVLcbzziO7NivSmQV4mAhk0DWqIFCm3kgqokyhyqki667+15\/+eg=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgQsOABe6yKAbDL1fq+DQ1SapdqS1+UOnye1oVlg2aJ2GFwBhRrw0x8XCkLbwI91Ir1\/8\/MY8n2wfrZ1NndUcsV9AG1wjufSHKBrDXEoKhr\/h9ALa1ZfQK8hVBxIqQ==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfTQSAbDMjfrAvw1SapdrxHGicmaOzsBa+TXHfVbfDsVyDxCECtJU2gxhNkQQUwmF8PWCa0LA\/XKiV+BqVFiuBHRhtJ08of9c\/lszG\/qvPJlJ2p6yvZNqBmco=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0539{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACoOUCAbFBvi0AhmguGVRnYOR+jJlPvtisjhokJhPiDCUgqcfIIpRbpfiz\/hpTukv1Ka4u5kkYPJGFRElEpjCaOzYH+k96daYERoEIhW0f4mqgNv\/qxdMzmnlDqwJpuPCxVOB5c\/\/CTC76htKTdqfjMazEv6BRGExPi8qfBMxfNAkrkOyN4q2HhMFZoh1\/dVQ1eDiqP92X2JIDgezk+tupfE3VI","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/RieAbDMkfrAzg1Sapdq8ySlYaYPDvNmBHtZNhatECamllkL2nDa8VCnzHYQI5f8ae1mSWRMziv8s","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAPxHbJgoYUrwByQGuLDhaBABogFOAbFCei0DR2guGVRnqHfItN4KGt7DilEWA\/R4yUltxeT2RRAtgHv9jWcolBmVpxCTR\/d7zlXRB7xvaZGe5Pe00ltPJyG+9JJiRAgdouKsY\/fvNl0X4IxQAGsGfhZqnOxk=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":163,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHBH95wHJAa4KGFK8WgYoHAB\/DUOAbFBwi0AlWguGVRkoLDvKjNG0MO65\/l2i2w5KjajTwstx\/9q\/23YKENCSCEhS4Wg\/moWDRjlxe\/niWTBqb3wcJRneS\/vtCFiswaC1JJ8Yu\/ZQc9EA6jPfu57w659ug350rYXw7jTZ0xIvwwVRk\/xYrH+LozaDrw==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/lGuAbDL2fq+HA1SapdrqHx8TrmE2qgUAu7RAxFzxmZgXSwZr1z4UxCkHDMHnoj6LSmiE3wctr4v\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/k4iAbDMlfrA3Q1SapdqS2T95r5\/Yk3EKT3i2Pyrtrfs\/Ax\/Nfl\/IhADlIvXuROVi3b+0mKo18Iix","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAPxHbKAoYUrwByQGuLDhaBABmCP6AbFCfi0DVmguGVRmgUzpi5V2rTPllHHpr\/ifFYP2U5iLJAEpbyad95J3kzNkFYoJiIydOpDMt289OAyMhj2GUpF7TzPl7bCmQ5xPdAaxfsMZGhY\/pH+ezLqlmdwAP","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":118,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGYAAEAAPxHbPAoYUrwByQGuLDhaBABSU3mAbFCgi0DZWguGVRm8ENJw+SgodsCbdOzdnG++a8NWLZHaApssbkQYYii5XJ3X7n3LBQyvBOXtu41AzNokzwg6SL\/uC7Y1xm6ITA==","pkt_caplen":118,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAQBHaTAoYUrwByQGuKBxaBgBCazOAbDMmfrA7A1SapdrGJp57+SjPZAah2hvTVowN+\/qmBkeh5CcqKUBWkZB1\/m77f\/q2\/N42Y0m+nPbT","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGdNyAbFBxi0ApGguGVRkF1J8sRjpW5nkp9NqM7QIWvdCXbsfED8xuDWmDWeJcWyi1OkibDDUASYGtu1\/Jfn7P7LcxB+JoM7VhrCFzCRtQDoi0OXhbbMCl5EgchHbgvu\/1VfDEgsqiDQoyUAvI\/FIC9H2EyHt1L79R8lLKGviGjlk=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Z8mAbDL3fq+Kw1SapdrCnha2h+FO2CjS6Bk++NcRhCegDJWA4flcFyU4B+xgLktd+mx0j2uZRMMz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/MBmAbDMnfrA+w1Sapdqt4\/lXlbWIK2lImBaVCdqF3gc7QbZV1UIsjOhN34Jxldx29pIlrVLaxfwv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/1i+AbDL4fq+Og1SapdrAWqvuYDEDLO73IzjeuxumDKhxXwVLc4XqR9YnTiXED4kOy7FjxjwIWmeT","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJsn+AbFChi0DdGguGVRlsSW9cd3Rywr4taHDG2Th14UJ94StqGEW0E9gxVE1Gpx2lwN3JAYjblS4ELJ1s5KbWIU+EpQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":119,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTOeWAbFCii0Dg2guGVRk4Z8GRh9XrawGDBeviWx8NElMS\/PTgbKkNYTnVkVEnpEdzepL92M71Onn1JqGlufyrBgJbAEn7V5G1dMSkZtY=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACNdFyAbFByi0As2guGVRmjhTuh9\/IueAPAbaEIxjRAbg1ELXIb+3Y3NTT6ROMejM1tMFhzIN+cv+bmi1EQh+RtwdOiKUU0vjk18Hq5yrXSXX9mtQytUYlBnoCqTEaP4Yuq1IaXGxd5jipzWKI8XkFw1JrCoSvOk\/aCfBBpYeEBitkAkvv+BBF9","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/D8eAbDMofrBCg1SapdoeE1Y7NGo0b+QivnLLLeVK+LJ3NSjTED571sINGSlIBgsvlOcxdiY14vhL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHBH91gHJAa4KGFK8WgYoHACQ19OAbFBzi0AwmguGVRlbJgZNoqDYI3Ak8+SEnZS9ZEy7RkszEDgs0ylsgN22BNcqPHd+VNsGGYCwBycmtUl2aqwmdqim9CJg9annaVyZWGtk06G3LtnMHMIRHJHBZZY\/0RIkrP00UX+4inMpnBM57NajJ5eTpel1zVPAf5EaYgh7CNx8Jn\/C7TKr","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGinqAbFCji0DkmguGVRmBLX\/KV7YZhBbpSs2fNQ0X2+1fLNIxTrzlQSSnE0dd\/uZ0vEQsWwerYuHOlBbIWhUcVg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ITWAbDMpfrBGQ1SapdqG67wRBIYvVhjBLTBQ4i\/a00b9jJ5Xynk69eQkFsDKmj71h28Ipkhw1bIk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rWOAbDL5fq+SQ1SapdpxNvok3e1ZwnQKwWf7gFW7GZA448xe3cOtKwfleO861He5XhAFwD8F5QMe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fKmAbDMqfrBKA1SapdqijVeuW326QCZVuVjQEtWlX3Jz5+A3B9Vy3ndEgfnHbfIVmccOCrJR0Q6I","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQHFKAbDL6fq+WA1SapdonG3NRhbTNiXqnVhPBe2woMqV2KfZeG4BKgWaRkCfMDR1dsMgEzqScNSxNvQH31tZQU4lACOjGPkPZxgo=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":254,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO5Ko0AAQAaVFAoYUrxuTI8y5ekjKS1plqfX8KnlgBgC9XbqAAABAQgKAALVSETbrNcXAwEAIFyJgKQfVKI0DPjVP7JDBDam8x620bdnCmfNXVPvlCXUFwMBAJAhybGn2pDX\/StL2EnI+PtcpfleL+33T15r6fwpnruN\/v5egrCCwfE4Wqk4YbWJt55x7\/+DqbMcXF2FqSvXlnyfvW1rMLnliV6At3Vucm7xUK2qQixXW18yd86v4TA26davkXj4nhj3pG8HLhjabyAZDdz\/25h+09xXiMCC1q+DkmW6JLB0MWclBiyZpQt3RPI=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABN38KAbFCki0DoWguGVRlnUEUUszqEiYiIPynxw9SpLEo+W+s2Ly4MWiu6UEI1yIezAdzzv76aNFusbXQBzPUGGxcJKqDi3VY=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJoSmAbFCli0DsGguGVRkmMMIxq0DmBwV+ZH+3r+GZ2yPxYnuw3kFQIJvFhLsPRTgYbJ1bxuHau9aNRGqeOdUOzXKaWg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsW1SAbDMrfrBNw1SapdqxdFQjjl+rikpZphTwtYzAZLwr8rNvdXIfhisehuYaf1jmyXcqPZmqPK2h5U75ioFV9fV1gvUBR4y4rr+PhqDGFzvYCUPz1pCcyJOHHIdroluYBnfAijU1","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":168,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHBH94gHJAa4KGFK8WgYoHACEocCAbFB0i0A0WguGVRmlRtL9GrcwkyGvTgvmD\/5uWUYXmTMoc0efUsW6DAZo8u45l7e+Ly8CSPgTU3OyuZhzq7Jq4bowX6oV0\/DXo65Y6NJ6Ypq37reRr2L5u8nzNMyC\/bvHHrzhUbVUIaiJmhHROHtP6qLvDxQTx32+KsCe","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKUaqAbFB1i0A4GguGVRk1DKZLAnXl3CNOtI4fg8MQcSkGeTd\/wJGDerAPnVbUZpUToAisBuhg4VScBVA1ao3uSrYlnT8=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKGbaAbDL7fq+Zw1Sapdq0RmuCaKef6jgLrs5Z6ghs5AVFeN1+ShZAwCAwKOv3maXlloq8fRetVHDjoX8ZcJCwxFohsXs=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":254,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n9UAAPwb4wQoYUrxuTI8ygMgfkPcR4GCSeOaRgBgA0M62AAABAQgKAAtNm0TbrTwXAwEAIF5AKgjyI0NGRhRrGkcf8O0njNQkLNHp3rENHPoN8ahCFwMBAJA+7JjvRcTaUpV1\/tSeusUiLLTH+Wnl56Le5QddHKvP0dkHuQXIcVgpEaREihEae7\/vPEWbfTUq4pljD0+KVVeSEBX1vM1TavIZIstNqiXaXM52CYI+b+FRzq1AS2BaHzwbY1slTArxDX1UUBNzwvJhATza+i7qRX8YM6HtDnPnCfS2UQXqjIXJb65r45TpEww=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":150,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAQBHaHAoYUrwByQGuKBxaBgBy58aAbDMsfrBRg1SapdqqGBEY0kCun1yhLMEhkvT\/YA7he5YeJgU5DAVj0RWlgUJafk9KekulbXt0LQPVcVMQ2SrU3uQgaTFYy74QbRexzwhGufrAGHXeAXllfkH1JVzWF31PuJ8f\/tKDyUCA","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFhxaAbFB2i0A72guGVRnYdEEiHQs89LsV\/nN7kBqBuv3B\/5obHdIzhw\/rkjNxQ8tvUDFR9SMqw0duCcaEVaaA","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069200,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLoW+AbDL8fq+dg1SapdpRai7XOah\/g7TBc\/4fzrh3AXb3dOPAykaVlerNqk51ya8WTH1OXwqU8mDtC9pfh1u+E4w6zXB+","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/akmAbDL9fq+hQ1SapdoZCioUg8\/TzfYQQNRp4JqDPJz2wbgwUIGkHlOurUCwf82n9I21MITKrfnP","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG2\/mAbFCmi0Dv2guGVRkleNc6objpZ+Qwl6QdQXBJ8I58UIpGm1XtkIuMrgvV51Ag12ZNqjGJ5055hfmaqbvEbQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMEOKAbFCni0DzmguGVRkxfm0enYinq7tk2\/mPMxQsnjLuV0KfZyec799H7i8z8uvC3VD\/BJIUBN6aaKIg5Gl4\/QZSPa0nKQ==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABM6CuAbFB3i0A\/mguGVRlK+TYKKMpTFu3UXMEdJz1Uk48Uhx2i+Ikajq444lPXjm2nu1xZkpeQLoM606fCj1w9xQbDq1GrBg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHSWiAbFB4i0BDWguGVRkTEIbRkngmAIu5DpDIWaLT2La1PrqrPhyJHLNwRI322cx9+QfF6\/wsc38SjtIZiRp2B54=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/MkSAbDL+fq+lA1Sapdpk1LTECVKgzxVej2Ms5rkZF73P+TdDwPJg06\/umbgQ52zRemZJFhvU2SQG","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":167,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJcAAEAAQBHaCwoYUrwByQGuKBxaBgCDqN2AbDMtfrBVQ1SapdpTN\/i63OppsLmhLzmttACno94VFmyJvfXLCFmssXtz\/tb02D6pENTkXR1yLV0ZujwuwrSGloAvb3hEtEtsDjlExlgJhk6PfNUXELUiGA\/Ecva7WBW7VmQVJt9IDpdR\/Xse6GssxRcSjglKnHlr3uI=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPF4aAbDL\/fq+ow1SapdqaYr5ML2PI7b88Uhh5W0hH293BPAqCijr4Fs7XIdHkMVN+NpV4QDIpClC+B6YrluoqGfJJ4TL4SOti7g==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ4OOAbFB5i0BHGguGVRnV6\/7m74MxZW83kE7ZyKY9QGbJ32eppyQPHR8UknK6AGbDDieOsEpf7M8fA0FxUS7co+0YeQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDEnWAbFB6i0BK2guGVRmf74w1zMwLvfPr\/bNTYbDnbjS\/TLvLIXn25s46ZzaNZIvraMlRzKw1kLA1UDASWw==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEF2uAbDMAfq+sg1Sapdrj0j+obnrXxPlrdMxxFLgLgVLhd9OfieofEEA9Fki+F\/Via2KODLiwYUUi57\/+R5w=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHO72AbFCoi0D3WguGVRkHNCBGgiiLct85Pmk5iIc1uVS6mGTLZlXi9WXnCalMkmZ6Tl1wMW0KXMbt9Z\/\/xUmgFVU=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":168,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJgAAEAAQBHaCgoYUrwByQGuKBxaBgCEkKuAbDMufrBZA1SapdomX3gPmJ5La4iNkOb\/\/tR5lm17jE\/iCE\/Lmue9F8skhIOXHakVrHqkbO5C+176wBMrwwXPcFsYs3uBx4GbenG9tzrxTq9G\/B8Dljvoj7ghCXxlGDS2Y\/xf1Dir0lsJl9QSQQPkPzUpaXfJtb\/2mY8O","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL\/FqAbFB7i0BOmguGVRndud4OW502vNJ3dhRS5wkYBZKPM2XIVaMvPVZQCDqIiVXenSZISqd+K7PZQZsGxsM49MhQaCsJ","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+PqAbDMBfq+wQ1Sapdq4zUjrHgMPh3LDzb0lX\/Cpau3oTfvM07OE0E112CmjhuVXk1PUtr7taUfX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NBaAbDMCfq+0A1SapdrK\/eisi7nhSdmL5Z6\/WasWD63YDEkasz57XORRZIVM7tFZg3LiqCnLZ3z8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3QoCAbDMvfrBcw1SapdqR+yjnm50Ro1hl3PsIXbsR73HuhQfcyyC2EMMPm3eCzcpFA81\/nIi9Ixop1+NLd9fTaZS\/0iGMTgRfyWya9UoZN9pPcqcVwMd6JXGk8ibiOzLlzqKD3OMtgplareIQM5s3bm0=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLGHmAbFB8i0BSWguGVRkQv7QpG5cCQ579ZnQnjI3ItozNmygqxUnvnpm2UNEnf6+UTMiTrPZ0xXa05Mn6Lf1tyTqCSGT7","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH6j2AbFB9i0BWGguGVRn\/dDuKvX67gqxrrlwYR2du9MUm+ONvjaK3s+k46m\/Pr4goajUxU3D0PNxCkEl5J2RZhcs=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/0juAbDMDfq+3w1Sapdp+FsIBqvEW0HW0R7eGsnepDCnJCzA80Y+06QxKOueOl9BOZkZlfEG5yjSb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/46OAbDMEfq+7g1Sapdrbh+ic1IIE1etHgh3rfXZt295zuEV9g6xlrZq86ktuc5c+YJfF5LvPEenj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABNECOAbFCpi0D7GguGVRm6m99ciA3C5KBMduOMDpn5WVp5JyIBncvdQV0hApg7zzRtT71uyqBJuxaGA89RTFoerdPnbjntiOU=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHOEqAbFB+i0BZ2guGVRmADh6NV+Cmh5ovyCas6oso0w4fs74pVEXuE3ITIQbAxQc7Ls1B+YM\/ic\/ERtv24Vn9yUs=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJpxGAbFCqi0D+2guGVRma1d5mMvxA9pAsmMosLVLMdhBABWEWYOewH6Z+iGIX0QzoGYfVMGOIzYZhqCJtrcU0pj+73w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHrqOAbFB\/i0BdmguGVRn9Z4ZETALBA7OZVyVnurLmnBXhEVqON7x7JHyTRQABmkQQz9HhVea4sCgc2lrFT+dZcaM=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/E1yAbDMFfq+\/Q1SapdqskncUVJnA+UlJCcC5dneJAU6qX3ypnTmpV\/4qaksBzVZjxFnOWxJTmNbv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABO1keAbFCAi0BhWguGVRn0c+LEjOBnGZ9FSfCm0HbHSrAgWMEBZLXAey0TifmvSnVRBVvdU6HS6irEvhYwL74IUC1zUysvzPd8","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":162,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAQBHaEAoYUrwByQGuKBxaBgB+dCqAbDMwfrBgg1SapdqIpPBYn\/P\/O0t\/OWbhxigMdcDGkP1bnd8Cq2qpOtxMUmXcet4P0LNqrVOGmGByMOPXuFCBIhfvzByUJ+OQv\/XqEWDKtRwA+8tKgxpaLd57hmcF4Bhnt2rHN4zOjQCDagJ7XzKvctgopGO8","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eqmAbDMGfq\/DA1SapdqvHJ48HCwZQ10fOZ1Wh20Rsn1qYZ\/03eYWoxj5+cbNAEtdKEm+8gbyT9y3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bn+AbDMHfq\/Gw1SapdqpTSKpuGRKSgv87j9VuOL2eZN9TW1t\/fnFFP214z4hF\/M7Bhf+GHMz\/XMk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":147,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvo6qAbFCBi0BlGguGVRmCRNAVcoK1QubKAAF9\/GGN09YBlGJ2rbMLXDtHX9PebcaFAe\/iiwC3I1RWje+AXUspJ4OHNFQARh7ZY2IsXSLkyqEjz6HQpOaTMhX434s5AF8jiJv6Ar0vESXg","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBgYqmAbDMxfrBkQ1SapdolwvnwzwMK5JZ7CpzmoiMlsGkTnmT2QL1Uo8XqOq07RjbnIk6ujU9PP5xbLXaozGofdsm3A7M5VnzkkZcM4kuhPilk4AMPFpHq\/CCN","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdEWiAbFCCi0Bo2guGVRmJeKKf0nWx5lVCJwBFSBQMK5lUYjxq84rQGeq41evpestjV+3sMfkiGaXnxVR3Nqc7fUO1cD28Jcrc32+N0zZNOxr6BLh6rbLr","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":174,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAPxHbBAoYUrwByQGuLDhaBACKsT+AbFCri0ECmguGVRnVztbuHeYsYCrkqRaCGtYfKpqm2c1nQabDwbhVEgUwoBq1IgzH82EhzTqzsx\/kICDlK79kWMbJ2ovnkYa7bQGuyWEhp1nIfYP\/J1k0P6Pd7WfUKejn6bWwRV51Sx3crXutGGiW7nwLM7xpL9PQ7J7LsrQdJPO7","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":166,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJYAAEAAPxHbDAoYUrwByQGuLDhaBACCrnaAbFCsi0EGWguGVRkVuhOBkhsRF46aA+LVY9KLVnxxDmv6a0betWgteHwWngROTY+4LuQtm3TbSAnd53\/CtoKgyb24pew0PA+j2S2F01AmXDe9UgJ9l2VCwGZePm6LGrRkNdeClC4guXAHEbaFD0ZugXm8mHlNZyGouw==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PAiAbDMIfq\/Kg1SapdrclCU8\/\/bhd9HVLzKpRKsHt6J4WkaLj9yX\/m3JmkdOPPwi7zi9O3FrL3tv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/NdiAbDMJfq\/OQ1SapdpBLSKyTbARIub4lsb8xMk4dags7LFJ+AbRVxJPRQbXdvJsxf2vTFfqeBhe","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":152,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIgAAEAAQBHaGgoYUrwByQGuKBxaBgB086CAbDMyfrBoA1Sapdq750tU8fVdnPBwNp6hl2BZUWgQc8c7NsIotJIpH1RzTavtvQ1vSXe7kkZgVq43lsUwCxW0SUpsuL7slGFdJvHRrbcDBfbaXTVdHr7e+sNQGEq8z4MhXixbEUmkTdJG5eg=","pkt_caplen":152,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVekOAbFCDi0BsmguGVRntThpiLDTlnkhC6jksq4tpC0Mnb8sK\/msmDBdK+MDyJ2gdW5qOMzoEC76dMUfMZsKxKLoGuF3ddsJ0NpbyfruvxQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVrTKAbFCEi0BwWguGVRm9vGJ9EbgdnIDGo+Zqakhf8SjC4Hd8+wtvyFyaeGwtOA8VL99nnERQLeR2k4mH360QjJoTRfX5bHrYxG0DnqhltQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/N\/SAbDMKfq\/SA1SapdoKRg77brXtsP8xs50puUaqw6Hh3Iqb\/YgPHPDqi6NhlNjbdnDYV\/iUd1+X","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOHdOAbFCFi0B0GguGVRlr5Gw8fx+PjZxpB4Ce9hyDsslqoSvwqarkkT+EoTRGjJXyg3b\/jL1YtA1zHVea196z7DYcTZ9UwM+7","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/pMuAbDMLfq\/Vw1SapdpB6kYTJpoup1\/8usfcptY1\/CNrRXmy+9310mqmo1F6+f3MexbWvZPvxY3C","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":190,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAPxHa9AoYUrwByQGuLDhaBACaTO2AbFCti0EKGguGVRk7Sqws4Z4s1UVQkzjznLn\/QJjtNMj8veNgktCFcOkYxx5o5wOsiTfw3jESuFWHtCYdO5x2CkJAmLSiYSgLdZ0tVJemOTysHtYaA\/waMpbucdzTRrD7Kv7jDYvv7dDj+emkBbNLbpJlwoB4IF0aHTWUguu07m1tdhi0NCeIYNmIIFcX1ZPU7w==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfNaiAbDMzfrBrw1SapdozKnwc1xfOtexrmnketxl9AEqN\/TmQIZnPuRBvdd8xvqBBw4vLaQvTxeB1r+n9H3vjp9FAI+evjyK1R3P3t2zLOmuAiobAoea3cFc=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL0K+AbFCGi0B32guGVRkONHZ\/mfp4Env4iSfwarnadmJbUd9\/XV53fiL0NwtJMqPv7Vo6tJCU6PW9gi219Si73nSxqaqo","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABF\/v6AbFCHi0B7mguGVRmjZUKo6Kbx9n3zn0hN1zATKmakH3CgP8kjjPH7M5mmRBAQ2Mzaa\/KFOl73U111CmvM","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YKOAbDMMfq\/Zg1SapdrAKJhV0ODe\/RmjWc5EMHxHxFyAivnqCcEcyIb4eTJwEzJIRKgUUDwQu\/Md","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":127,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG8AAEAAQBHaMwoYUrwByQGuKBxaBgBb+SyAbDM0frBvg1SapdqzqmpQvsjMEUDwXZ4H85eDOQYp1BLnQO9dLWrHxZf7la0dQSouLLwx+uzcgckJMtq9TwB7dsS7oVuzGRvZ5SO9ldYPxddu1Q==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/e6uAbDMNfq\/dQ1SapdpadjNLYnh0nO9if40\/lSLuBvgby9XVl\/1xl6FrJEm3kf5ZU+2CUf4hquFg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/mdOAbDMOfq\/hA1SapdrcyUpemZsPCeSLPhQlS\/ErvXK75VxdN1LHBw2xeEe7xCzsqOGX2GPFt1TK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHAcKAbFCIi0B\/WguGVRmmcVlrBAmbIQmJ5WGoqE3ephTqaEz2w70WfvbpUX\/IHp9taMK+4G9C5i2XvIdk2pUbGGE=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJWhGAbFCJi0CDGguGVRl6ZVhdEfiFlm4j\/iYu8ScAakehZNN8RL6N4WrslBnnUGqc4xJHuy6aAuDlw80\/YkiD22kz9Q==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLFFCAbFCui0EN2guGVRlqRIePj2o7S7zhIuIm5MPbjZ6yzj2x0oWfNpx38zXo3mqfNH2y1CRjVlE5EIucql9blgoLD4mky4LaCwckvTFos3iWDRuq\/0ZYtcDPuxgv8Y67bQ5mHsX7RF+ohtrrYeM459CkmBz3Ss4UtFQxGkDDMjAIvYM\/Cg==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAPxHbJwoYUrwByQGuLDhaBABnWUCAbFCvi0ERmguGVRmGe\/zJmZOnEB3MBsOWEc4ZCBOlBMyIn5QC8iMNNX9NJcYlsxiDwYFkZmUa8KlU5mF0sjJ5LpZdbbM+oSDcdNSrTsdTZE7wrIxcn3lUY6WCVfeMyQ==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dr2AbDMPfq\/kw1SapdpB\/ThqhGRKDJgrvSm9+gPdmfZ+PoZ2OAmhMFVEL4UkD3+3PpNJvJ3bCCFi","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH\/CeAbFCKi0CG2guGVRmxLIeJXEHZQTmYqvNmyAu3HKKiaWsRDQUW2hUkcdqdz1yb1IHZvo2b4NHeBPX+OmIAWx0=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/+TeAbDMQfq\/og1SapdqZG11BnEO35IF848bzdrc3HE2zAn22IbN8nrjwwLQHHfJZRWdBAa+UGaMC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBg8mWAbDM1frBzQ1Sapdrb8w9mpV7eVJzqkccQp+0qAZsMoX59u3FKetxj0hXKk+3kU7h0M888pXvGg\/soBKh7skoLVLi1ax59Io1JQQ7JFsnpMrCBGT2nshfK","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YAOAbDMRfq\/sQ1SapdrG0hfCYutPD9M1VYz7Afn1zFNuP1tovtkHbVTPX\/gjlp1KTjgijbLl7R8P","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJvYWAbFCLi0CKmguGVRmG2KosWmodL1imK\/tTtZ0CO6J9ShtwR4z3YXjGW5pZ18tmEof+hMtEpd9NRCF6uD9tn7tGGw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIofiAbFCMi0COWguGVRkL+g2Oh9Wkg9zpM5EAeqQ9dRRZ9JQrWR7zJt2r29UKg0tTTykubazfDbihc7D\/GOlrL2cl","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAQBHZ7goYUrwByQGuKBxaBgCgqSKAbDM2frB3A1SapdpyMgPInhxcAoWmVzESeYLM3087lMSB4kWY09K2p72xhrHh33FpzRMrgkCVnyPEXm\/yvRIJIL5FBsSIPfG92d0mrVU2FvgECObk71dqV6rffJyr\/TW2HE6l6FwvqnHei2xXh0tP8\/m4OaVmPbjFAtjpgGbgA3eZsxj7ARS02AGfR9ATf7iI+Dbi\/TK7YQ==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJm6mAbFCwi0EVWguGVRl+JrFxOvsP2PXqXn\/d7KnB\/sIcqF3e7sjrEvTPSXoCew\/0DHjucdf9Eq7UJJYNQW2cRMT1vg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBqhMWByAAMVJql2usjul1bYt0wXtBGultF6ID8cTY8FKzSbZy09RI\/Nk\/Zog6jhkaTF88sGdIGxg0nTTITCbns5cdACSsU7aRlGhJYmiNLLu3NkWkKaSGAAAAIuSiehL8FPbSahw==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":184,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAPxHa+goYUrwByQGuLDhaBACUDOGAbFCxi0EZGguGVRnxVjizIisbiTE+awzW8DlXExA\/noz8yw7rftFefkCBfzY4McwBOsLEio7zengaYMnHLh5MqbcG5fIj\/o0V97OFscwutiF2tI7OUGKlnwGVzNCt6nk4v8DVM6o3AQGe38IEIy4LM\/dZM7TsTWA5LCY8Jp4NEFg1LipNkjZWBPZlVg==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABVJLyAbDMSfq\/wA1SapdqGDdpOCLL57FzSayFgYFz\/8F3Df3Vd9NKMd4NUYmDJbi0xfETopmrZHTqZOnyplOp2QZcT10xP6qR2JV5ZOWPIFQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPwzKAbDM3frB6w1SapdrRYmy0Oola6ShjLZV2WCbD36whUXZ43Dlqspx7M1y\/qOKo8Lnwe4rpseouYMVh187SON9ue2WMNRjOKou5xAbqDm1V3XdqLKYKLaxPhRnYFsNNwFSExmhXkMgz24vOdFYPQIGOKe\/H9aHmBu\/+zGC2+3\/\/JgtXsJowXVA=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWeI6AbDMTfq\/zw1Sapdp5AYPUHN+TUpLys7iMPJM0q1zvRM84o31QShiaGJKvq1TTeA50Ke5LQMnOVovyauPh5+jPoGlfc5wLQvNrwjmnqds=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHph+AbFCNi0CSGguGVRlu+cGuXZ+gdBpKicsYIsUT0RBJi4ByICrygy3+k3\/89ozlieMWTdtG1P3dPduDyYNYBVQ=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVnNiAbFCOi0CV2guGVRmltBqVR+QesUry7UCfmJ9P7bRcx7DqPS\/nFDJm3StCIMfZ1NLV59iyqGt2fr6I5HFoMwoggI8LPE48HWG5foOJag==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU0oaAbDMUfq\/3g1SapdqgVXWz7a2gtpcCxzYkxkMebu2613LsT1J5DJZLKgbCXt5kqceQK89wgjfHdzkzW1eIGZnfnvxHJrxdMUREic94","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGU6GAbFCPi0CZmguGVRkpsiLkNZoDMprHAvTI4XU2KqgSPziXGJKxMrV1hPNpWXHoANxdd1JxEVU8ISLPkokJJQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC10zqAbFCyi0Ec2guGVRmaLZjjZv0SSS9bg26nBzAsROWsNipR8ZxhPxqlcaRWm+JX0NJCQUcry48ga9KwFGmgiOeKoNghAg\/FQrW1aVnvI9ApKAe\/2QQJQzNMS8p3n0\/gL4JnLV0Gzw3J9QFNVz4JY0seOyQu6nNkXawyHhWvU2Xw5NY4KmsTCjMIaqmrmWPVGwt+lsLlDpPxPCpaAZFs7NdMVlrsMFqUtXdwwbjAoA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAQBHZ+woYUrwByQGuKBxaBgCTDvmAbDM4frB+g1Sapdp5JmyMV7JEGbEjzha01FHIpsID0WACqqJalkgTRSqSXHAOUceko5CAsu1MzH\/1vG+N+FjaHIxQR\/g7zAJLuXuhboU6aDYKqaP+CY+FLtmq4eZ9\/Wdwaa7Jh5OkczzUB4K7GU5vFOUiyCNjw75nj\/086g4WCmjC43ktYDKpghv6","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXPUSAbDMVfq\/7Q1SapdqSe8YY40hEbpGRC7dEYDm8Bca\/f3mFcJxyWVDExoiBeZJcCd\/b9xjW+elGQhi8R+uP6E\/861Ta4e0JHvpqsQ2HPRzE","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABi4ViAbDMWfq\/\/A1Sapdo\/i141mlkQnDPElxnrHtumx\/sVCYBVrKxgCLetGav1+ud0+EXbr5lOx+218zhHZ1D9XILzajsoVBaiv5l3xlBJ9TobwM\/\/TzdEeUaBIVc=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGDm2AbFCQi0CdWguGVRnmIxELVLmQnkIZaJ4ReH5\/lXDK43Uu0nGqOWRPcWj\/WlZYuvIBqdo81D79883Rd31xJg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMY3+AbFCRi0ChGguGVRmDEk8MQn426YbKD7tUqGDrXa60hI5KUEVA92p+lTwaWX6hg4WD2iVqv\/mfGD\/40GoJ3ebrQkYqEw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":194,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAQBHZ8AoYUrwByQGuKBxaBgCe88SAbDM5frCCQ1SapdpxUcwaPs81LBk63ts0j17Sl9eSGdg9yfb8g+EuqnR9XBgaVWB1mo+bFCsIi1ZbaLkwy4RBRRLqlwqRXx8fVST06+XV6DFb\/VmDjs6ROQQL9+cEx4cY+8elPYY8IjCE6M\/dZux65Mkht8Umgbs3r\/v8ZIuj6qVFPJto4nTC5Lryvz2w2RGfKreZiAQ=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQOxmAbDMXfrACw1SapdrAYkWELsZhcv9pCHaUd64YEgcD29WX1Ntm8z0ghuWKmBFw+9q6edaBwuW+wjdY5MWKFkFVE+\/gCTskITQ=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":100,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFQAAEAAHBH+JgHJAa4KGFK8WgYoHABAxxGAbFCSi0Ck2guGVRkq+ORb\/H97ATiZ5Iex2WqpDpo+NBqxq829bVYnwQCi\/CGLFir1ChJXDgRbwQ==","pkt_caplen":100,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuA7aAbFCzi0EgmguGVRlplohP4PXdHKiulAWz\/X5g4dQGswk5XmitDbyS6IurzeiYrLZ6ppqozmvX6b55oUJP3ewerM5Sx3eVxkbupwUZ5vHRNwhJJ2Kly7d93ImOhD9RX0X3glSUkZCDBS+isUrNxYo2ALYq0zAPr3rnTg8NScrxlREWLJ8E\/Rd7LppdCd1tAON809AFzzx00bEXDdtRhWJRpBPS3Ee\/","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0606{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":254,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO5KpEAAQAaVEwoYUrxuTI8y5ekjKS1plqfX8KnlgBgC9XaOAAABAQgKAALVpETbrNcXAwEAIFyJgKQfVKI0DPjVP7JDBDam8x620bdnCmfNXVPvlCXUFwMBAJAhybGn2pDX\/StL2EnI+PtcpfleL+33T15r6fwpnruN\/v5egrCCwfE4Wqk4YbWJt55x7\/+DqbMcXF2FqSvXlnyfvW1rMLnliV6At3Vucm7xUK2qQixXW18yd86v4TA26davkXj4nhj3pG8HLhjabyAZDdz\/25h+09xXiMCC1q+DkmW6JLB0MWclBiyZpQt3RPI=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":205,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACpMSqAbFC0i0EkWguGVRmcGqMPotOb19I9YyWuFTj1EKiUsVlaucxjeuWGvM4L+G+XxDkR9y1\/afFNLKCcSXQ466XhRxfAZSZlcA22vH8xrYGjwuAFOu5GLt9lzwHqfcyE41cpbRoFOiAxLwFmn0FeyesMW3SvnUlHEBIRcXiCfB\/tuIJa5Z4SE2LxtaHb9q1oNonVItQYx\/v3kwZIoFyFA9lFLQ==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHHSmAbFCTi0ComguGVRl\/1ZS4zgR\/LueU2GDqcS7RMAEJsPZP1z9D\/QjJrzXbqE8Ir8Dr9KiW\/3XqWqS2zEkTSX8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCW5gaAbDM6frCGA1Sapdq6kkb5W1frha0IIlabPKoYYL1oH3RMR9qetPtYMuvad3c\/g+FLT\/d+Lj3a4To1FezfDgfC3JtXQkBbhqU3+IVTVsnUtTEFv0\/36ejhidNoFZCaBuNkvmZLOMwG3nR\/XM+SM0mcmteWwUTidIJix3rdjehEL\/Zo3isjgFz5LAiNH9z3","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":70,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOw0AAQAYrdAoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtk1IAAABAQgKAALVpswmIb5QFA==","pkt_caplen":70,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPAdKAbDMYfrAGg1Sapdqg0k6DZOo4pltwV73mrj\/gxZuhAg6fYqQZSMrV4ggbC9vlLJ8aLGfGE85cgTRcCEJz0TjQGBeC96v8mQ==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/H7GAbDMZfrAKQ1Sapdr5aQaJhTJGfiDoRmbcmdagZbZvkG96g\/ZS76ZH\/67bT+nWBLdlmmcgreXW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABR7BmAbDMafrAOA1Sapdoc1lQNyMyYKKBgafKxjawqElEBwZRlZTvNNHucr0dYcSqssjv8DU5+eitKC+z2iVgVuPHfeS6wuxeQec01","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABV04+AbFCUi0CsWguGVRmNi4rKb89h4MlRyjH1Vm8y1o7AWyzatJcfSnNsOOAjiZqSLS9IYH\/Y0cxnTso2h59CfMQ+1kvxk8A31Ig6MxkBxQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABebbCAbDMbfrARw1SapdrASQX7a7OQrLB98Gw9+fAYQbCwg42\/3T8a7TChbu9CeVOSGu2w1L22R198S3\/EqYYMHG8mIQxz12pl9hr39y6HXuMGBLaYwDxD2w==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfC\/GAbFC1i0EoGguGVRmS3m8VxTNrSeMxAGvyxCSYpHzYoXhr+z3LIJzs0Kuw8gqK3jGK7Zqi6gP3g+Yq1k4r6iNp2Fbm6ViZCrzMj4M2Bo9NUoEyu9rt5qhje2svUsc4\/KVcpdUXQ2doqIgU2pxwK25y1t4eSFBunud\/+ChW3zuSQ2iwHnNS5zEqSzRF9mwdcCi3WFRxXJId","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":175,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ8AAEAAPxHbAwoYUrwByQGuLDhaBACLt92AbFC2i0Er2guGVRltx91TkdqvBoe\/7\/mk+7H+30zK0IVKAO1qfLU9PsZlTL+yaajuSD38sJoIMlmbOBr+ItI1hz5wr9KaYHHW5o0rrBJsqrffXeAetoFx06qkK67Dsrb40E3Q\/6Duns55tl\/EBD2dg7xjDyAfQ0jF9fYfv+y+QjxwBQ==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAQBHZ9QoYUrwByQGuKBxaBgCZbQmAbDM7frCJw1SapdpN9xF+zHuPqsG4dPpxgMIQ5xaej8XWEVIZccyoZgLHAgx6loK\/SPHhb3xBKnbs3KRtXcbcp5T7EOtXAn5Y8i1gBSOqjjUxjHARODRpaAd8x3x9onWUoLVLMKgOIV8WPC76Pty90Fwo+ZTtS8X+PUexg7ywM68JU\/u7oetV5e5r35eztmls","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZzbuAbFCVi0CwGguGVRmmg5kHX1FaJGXQwjTo\/QN+BwyVOTdHahfHQK5DpfQsOLN4iiYwbtuVVB7kBY32X8BV70E\/XPfF17rUEp\/U6TahrOR75zZV48DMgh0EV38wEByCRrweDUv7bNU\/JkxkLzG22lukClWijx6FUUe5S2q12UaBIH\/24JGLMmFEoBylXMl3Hep8","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":184,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAQBHZ+goYUrwByQGuKBxaBgCUaG2AbDM8frCNg1SapdrHzQ9+ObYN\/xyD3lwp7sF80xlZt\/zflzkveJADRWy90oLyXFMvushACDMCPUkVddmHLSiglHu0Qj9ohE\/SfBZax8kGbfFACNqh403oASOFmlo5ziLQ1POZwIt37cl5kTlSkJkfQBgXh8iGH4JMC4uANZfC6v+3VAR0c9FMZsxwbA==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACG44+AbFCWi0Cz2guGVRmZRJu2em99UwboNPv+dtbWeI8EazNgysgfWqwv7uF38hESkIEzsJKwRosvmegE1S8mdfKyqmXOHllbpJqGNC7JXDNElNJA\/0XXE+bzVguILEucLSIzpfYMKvpLAY31ox5US1zaKwZrLa+EymK4rXemsyU=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":162,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+ld+AbDMcfrAVg1SapdrCuiSCdgzEil6OJHOcmQYsIGkQEMM2TVHbKGnmTe7QTrT+mRQ5zPtV20XqgStiNZ4os5siUi3xbNHLsmqYg\/qom9LnmuJ691j70lqGc59tQMZnmI0ENTppUTMBlD8dTRexp8fPnrd28et1","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAQBHZ+QoYUrwByQGuKBxaBgCVDmuAbDM9frCRQ1Sapdr0VAwFHGWvqEdy4GQXGpa64FipYk1cKxeFn2ukAaIWT938XcyC2s4c2F9oo5sKuG01yY9dkjtQZviEmmBZXpn5\/QPK2yxe7il6eyydgsstjcOJMsC8VtVmhzfSEXEUqD3ae4fLhvr+a5orDpYhf29Izg4+rFGgZInyXqH2fj5J8t4=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069201,"pkt_len":164,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHRH85gHJAa4KGFK8WgQsOACAAhSAbDMdfrAZQ1SapdpbU0J\/+HE2unYNRBv6UsB6w11SPl64S2FIYJd\/j3ssn0ZSz+\/rMxeAiXy\/7xaYKIzTM0ArC5wqFDg0voGTesPKrw2zrD7VyzcvZm3U4V9P+5OgkhSY1wUsPDE3GPQasn6y2UbClwjuLFXmDHk=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkx4CAbFC3i0EvmguGVRlhOL6BWS2BljmOn50q6SdczKxI54BhTRlCI6iQJ9lF1nFAl3ayWYok0+0fgTgc2VB1jlDAOTz379yEO6ol8rh0E3J1ezDE2+77UqgcM1E8Wa6DUSYKk3qPyqy2arqU5O8lhSLRIEeBXE3rlzf8t33kKdl7fbiRN+7kfen2aEUVMCG4TVB49CIXNG6hxcDhr7Q=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAQBHaHwoYUrwByQGuKBxaBgBvefaAbDM+frCVA1SapdolaqVThhLDkge5ljLZYdAkh\/dqWweVKUKSFOFAlOYIOXEB+OfE3o4nTIaOu9BFh9RGTr3JKO4IijkYopapSFV5HaRSwksIHOD8QyoRsbQE\/qr8Hsv4u7ZdFt8M","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACg3JqAbFC4i0EzWguGVRkuLpg5\/i61cLxMpQJPNXQR9FGI+gf7YWNGFGDbhz8EbgseAQWVGXCDWRhZhKxtivsdhCl5zCaeAvd7ysAUcXp165hO4udGme+3gvYxgWSWo8\/ZqaP33IpTFa17gNq6C+V81xTdym9ebj7bYUG7ynBeRi+9ybxqOPLjldaTPmraxi+yFX2kTVS7N13XLQ==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":254,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n9kAAPwb4wAoYUrxuTI8ygMgfkPcR4GCSeOaRgBgA0M5EAAABAQgKAAtODUTbrTwXAwEAIF5AKgjyI0NGRhRrGkcf8O0njNQkLNHp3rENHPoN8ahCFwMBAJA+7JjvRcTaUpV1\/tSeusUiLLTH+Wnl56Le5QddHKvP0dkHuQXIcVgpEaREihEae7\/vPEWbfTUq4pljD0+KVVeSEBX1vM1TavIZIstNqiXaXM52CYI+b+FRzq1AS2BaHzwbY1slTArxDX1UUBNzwvJhATza+i7qRX8YM6HtDnPnCfS2UQXqjIXJb65r45TpEww=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkxh2AbFC5i0E3GguGVRmKAjaZGuV7ZH8gOKoHhlmGtNMgUeM4nu83mDA5JBqKXA8LTdQJgkPZdkJPEURugcRPDo2cA4e+1bFyQQmYmF\/J+\/LKou1xAC+2ZjVOH2U6TdyIo4p+Dd+YF1gelZ4fH2o65jCJsRl7YK1oOiWju+fKy\/ycrzkH8R1A3ha96wM\/jhvTSY0Nec5vV+WbaKNG\/j0=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZX7mAbDM\/frCYw1Sapdrmu\/sNTr1k060srer8gHGlV86C6jZJhD6XIBbdmyDdsamywgrUzMpW8avxUbkMVLjHhBzPPQ\/HPBz3OOigPmowN4FJxBc=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGALaAbFC6i0E62guGVRmD8flTQh955vAs2ScfhybleEmKJp6t7AEVWuv\/j5cBsdOBeqJ6ky0wBvJ24cfwpqcYGe1qpCWR8GCeDKOKlQUHF5l6ANW6xNP1bYDT81CIY7bDGdfSx4r8qimqhVRzI5k7X4qKaFTMGQ5\/lX2RNsQpjzo=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAPxHbDgoYUrwByQGuLDhaBACAR4GAbFC7i0E+mguGVRnY2hR+hdBNwuR+Lf6N+ToVR8p+jrE749RghNXmuFAIcAJRKWQ99Bq5mMIfF2qMDsBp4ZSn\/9r0esxNP6kCvjnOXIzWiBBFAX1rDkfyTMQloXq2R\/eXcjHr+kZCg7OTQkeITvfgW8FC+XDQPaI=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":141,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAQBHaJQoYUrwByQGuKBxaBgBpEiGAbDNAfrCcg1SapdrjRU+2Vj9uOOFqGO9+FGgn60\/8iR8NdvexoO2SC7OEqCvM3Ikj6SLjev1ILv7STYpPa6D19\/myN\/93AV77hYzGAgt47yeIbzDhjjiFICQtHzlEIxFk","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":144,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIAAAEAAQBHaIgoYUrwByQGuKBxaBgBsyiKAbDNBfrCgQ1SapdoQa2gl0fNuQVpwLNZz5kSfZVbR1z29RAoVQTXQai9Xvntc0FsdiBgM\/5cqpmr8yTO+oT1qmSPWVJEjNlZctLVJlfN2oxZ1wFzna2ojOX67WuSDfg82HN+w","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABifzuAbDMffrAgw1Sapdp8tXr6a5YJ5OlrakeVomlBte2SAkk7vi94nxNGiycakDbA94EMjanjN\/HhKXpP0Wb8rme+mZiZ7kXEb4OLvrGu5rbjVaflDug5iFeLJR0=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABna8KAbDMefrAdA1Sapdo1YD9AOn6OjopJ3GwIj+bkUOdfhOHG6hY4DI7C1\/TwkaayHZDR5IceclpAroEpWbkt+iY+UgVJ8m6SHwmcpdQFUJp8uYmiEkutfsnZ8e+5Tbcr5w==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Qg2AbDMkfrAzg1Sapdq8ySlYaYPDvNmBHtZNhatECamllkL2nDa8VCnzHYQI5f8ae1mSWRMziv8s","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABlkHyAbDMgfrAkg1SapdoHkmXge9nOiQ8Pkx9CRkB10Uv7pK\/QvV8fVXtLyIlZj5oDaPMSOCOIyktI9SP\/NlccXqg0OluAAos9DrZiYu8klMPdtQ2vUh6KEqqovZox+Vw=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":160,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHRH86gHJAa4KGFK8WgQsOAB80k2AbDMhfrAoQ1SapdoUgO+pkRLx+nVbtxFgEijaW\/qg8IhPBUKX\/ifFAAKapyZCXA4BCuPr4pgcUQ0i5FWPEMDkdyN9nVSFSJRMHCsENpJJvrJ6z7Uegzd6luTYOIF+MC\/h7kx9jQLR1Ysmz87dGa3eHm8ULA==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":168,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACEPcOAbDMifrAsA1SapdoqbCltnMxlTuK3Y4tPerLkyQ0kd5pqCjNCBE7RXnCW0Ucr6rbCaR6VT8fgXI0RwMZU8bRnezSRBdWbC7SAp6757fqszcHAYqXy5MDuu\/xxPedyPq2fcEWJ\/x3I8s1hfSilDbSNKE+dB+JTS19v0plI","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfSOqAbDMjfrAvw1SapdrxHGicmaOzsBa+TXHfVbfDsVyDxCECtJU2gxhNkQQUwmF8PWCa0LA\/XKiV+BqVFiuBHRhtJ08of9c\/lszG\/qvPJlJ2p6yvZNqBmco=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/j26AbDMlfrA3Q1SapdqS2T95r5\/Yk3EKT3i2Pyrtrfs\/Ax\/Nfl\/IhADlIvXuROVi3b+0mKo18Iix","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHRH9JAHJAa4KGFK8WgQsOABCZxmAbDMmfrA7A1SapdrGJp57+SjPZAah2hvTVowN+\/qmBkeh5CcqKUBWkZB1\/m77f\/q2\/N42Y0m+nPbT","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":171,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAGxH+3wHJAa4KGFK8WgYoHACHfwmAbFCXi0C3mguGVRkrr+HndrRyjO0IOO6iyk\/3GdutwYxUfGxvJojH0U8XTjssZL0JFQn6od9TLxk7c1Z\/O+PAfnwfM\/lqrYnVCm+ho+IfHpgtVg0IMmRVeIqUHFhuCiKbjgvPV3VHSg8MYFc4RLNpMqgQ8hF5X0mmZhHe8b67","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":152,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIgAAEAAGxH+8gHJAa4KGFK8WgYoHAB01ziAbFCYi0C7WguGVRkTfuKOijtuW3gyaR+i00LcieHtlMKRJrHqTvK7UtBj5Zkczo5R3j\/MH6dJZOQ7bmksN9eWJZtHMjElTEbg2PVchXMxU50cDPFIkJpARmghBS\/mo7HNUdYHqQW5yBRDEKg=","pkt_caplen":152,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0486{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":163,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAGxH+5wHJAa4KGFK8WgYoHAB\/T8OAbFCZi0C\/GguGVRmAon3+m1PYOiS\/XuzDTXs9NPU4gy9IXPlUgLFySQMWbX05i3V8KiOy++ENNcLQ1EbqG3iSlsBzMYMYBDHeb8\/Z7xTu3TucKj8clf6rWBoNAQAPOMpysHNimSOUu82LcSa7CJE9RNoPnm3mdA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBq7BOByAAMC4ZVGaDpnSddKM5Xo0F7IzUlJ0K974tSl6CKC75qjJ7CzzdGPB\/jgt1yWqXNt5f8eE7my+DfJ1ibS2biQYoq0+IluHuPfo1V6AWC+zZ2seaAAAAIJChM86bO4q6g9Q==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAGxH+1wHJAa4KGFK8WgYoHACPL\/WAbFCai0DC2guGVRmepdbBJGnbyY\/aPzFbpQA\/R0kSWgGWZHmWVVA2VaR1sRy+gUH6+\/5LEXsBon8jRL10eFZD\/Rka5BAg4PFhrMVeoRb+UEJS5yifiSY+0r2H5gvSOW4z+DLcyYKfcMgYoQl\/icJLcs8PZjvIahS9DCESPk\/hd76pQkarOXY=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAGxH\/BAHJAa4KGFK8WgYoHABi1YmAbFCbi0DGmguGVRkR2\/PPp0xJQwKMegyo96Vsh6GWrpkS33wNTr7RHMESK3MbLh2sp8XczmSuCKvAS1NMxuL5ANwYvtdfi7mlzGWglgJcrNdD5ZtxPqNlbTs=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAGxH+\/gHJAa4KGFK8WgYoHABopBmAbFCci0DKWguGVRkWmQbl106LiaK3jHzrB4AlMCYM6sVnXWzP9GotPx7f\/vaLddmefx8+brtIMFa3GZzQ2oxY+jNH0dKNAyfDeUecN1AQ8fuJjThqAgOoPiEcIEaCbKA=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAGxH\/HwHJAa4KGFK8WgYoHABHLyqAbFCdi0DOGguGVRme12SkOl7tf0EfDVDMVLcbzziO7NivSmQV4mAhk0DWqIFCm3kgqokyhyqki667+15\/+eg=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAGxH\/AAHJAa4KGFK8WgYoHABmDRiAbFCfi0DVmguGVRmgUzpi5V2rTPllHHpr\/ifFYP2U5iLJAEpbyad95J3kzNkFYoJiIydOpDMt289OAyMhj2GUpF7TzPl7bCmQ5xPdAaxfsMZGhY\/pH+ezLqlmdwAP","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":118,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGYAAEAAGxH\/FAHJAa4KGFK8WgYoHABSV5OAbFCgi0DZWguGVRm8ENJw+SgodsCbdOzdnG++a8NWLZHaApssbkQYYii5XJ3X7n3LBQyvBOXtu41AzNokzwg6SL\/uC7Y1xm6ITA==","pkt_caplen":118,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAGxH\/HQHJAa4KGFK8WgYoHABJtpmAbFChi0DdGguGVRlsSW9cd3Rywr4taHDG2Th14UJ94StqGEW0E9gxVE1Gpx2lwN3JAYjblS4ELJ1s5KbWIU+EpQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAGxH+\/gHJAa4KGFK8WgYoHABohG2AbFCei0DR2guGVRnqHfItN4KGt7DilEWA\/R4yUltxeT2RRAtgHv9jWcolBmVpxCTR\/d7zlXRB7xvaZGe5Pe00ltPJyG+9JJiRAgdouKsY\/fvNl0X4IxQAGsGfhZqnOxk=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTPf+AbFCii0Dg2guGVRk4Z8GRh9XrawGDBeviWx8NElMS\/PTgbKkNYTnVkVEnpEdzepL92M71Onn1JqGlufyrBgJbAEn7V5G1dMSkZtY=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/K\/+AbDMnfrA+w1Sapdqt4\/lXlbWIK2lImBaVCdqF3gc7QbZV1UIsjOhN34Jxldx29pIlrVLaxfwv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/C62AbDMofrBCg1SapdoeE1Y7NGo0b+QivnLLLeVK+LJ3NSjTED571sINGSlIBgsvlOcxdiY14vhL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGjpSAbFCji0DkmguGVRmBLX\/KV7YZhBbpSs2fNQ0X2+1fLNIxTrzlQSSnE0dd\/uZ0vEQsWwerYuHOlBbIWhUcVg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/HRuAbDMpfrBGQ1SapdqG67wRBIYvVhjBLTBQ4i\/a00b9jJ5Xynk69eQkFsDKmj71h28Ipkhw1bIk","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmDoKAbDNCfrCkA1SapdqYwVTsDgJSBHO2ln\/bdhizHbmZphQRJb\/ve+jkmzm\/AmpklZPtV2IkKGaqcynug8OhKvKvg+pHzGJYoKZjuut2nt6Wez6nuk6ICfOx69GUXCF+","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAPxHbLgoYUrwByQGuLDhaBABgn0WAbFC8i0FCWguGVRkWhGnTgY0EN\/RiCcFLWNEWGoXQFqTzRKeVvBCgQNxzJFCVAoBlqcQLw\/drMYUZiMZk6bBQLHFQrGcA\/YHmY9tiE317kkAWmvFik+ua","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eI+AbDMqfrBKA1SapdqijVeuW326QCZVuVjQEtWlX3Jz5+A3B9Vy3ndEgfnHbfIVmccOCrJR0Q6I","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0846{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKpUAAQAaVzAoYUrxuTI8y5ekjKS1pl2HX8KtPgBADK1p5AAABAQgKAALV10Tb\/\/k=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyj0AALwb+4W5MjzIKGFK8Iynl6dfwqeUtaZdhgBAAMLJmAAABAQgKRNv\/+QAC1Ug=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKpkAAQAaVywoYUrxuTI8y5ekjKS1pl2HX8KtPgBADK1p5AAABAQgKAALV10Tb\/\/k=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABN49yAbFCki0DoWguGVRlnUEUUszqEiYiIPynxw9SpLEo+W+s2Ly4MWiu6UEI1yIezAdzzv76aNFusbXQBzPUGGxcJKqDi3VY=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJpUOAbFCli0DsGguGVRkmMMIxq0DmBwV+ZH+3r+GZ2yPxYnuw3kFQIJvFhLsPRTgYbJ1bxuHau9aNRGqeOdUOzXKaWg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsVzqAbDMrfrBNw1SapdqxdFQjjl+rikpZphTwtYzAZLwr8rNvdXIfhisehuYaf1jmyXcqPZmqPK2h5U75ioFV9fV1gvUBR4y4rr+PhqDGFzvYCUPz1pCcyJOHHIdroluYBnfAijU1","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw5kAALwZAi25MjzIKGFK8H5CAyJJ45pH3EeEagBAAMpf7AAABAQgKRNwAKwALTZs=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0845{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":150,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIYAAEAAHRH89AHJAa4KGFK8WgQsOABy46yAbDMsfrBRg1SapdqqGBEY0kCun1yhLMEhkvT\/YA7he5YeJgU5DAVj0RWlgUJafk9KekulbXt0LQPVcVMQ2SrU3uQgaTFYy74QbRexzwhGufrAGHXeAXllfkH1JVzWF31PuJ8f\/tKDyUCA","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG4BOAbFCmi0Dv2guGVRkleNc6objpZ+Qwl6QdQXBJ8I58UIpGm1XtkIuMrgvV51Ag12ZNqjGJ5055hfmaqbvEbQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmtGCAbDNDfrCnw1SapdpqIkJs+utGsmPnWVEKFQkpLAV+qhCgh+DAtIv325OVgw4VqF7EceWpuphL3tkvf1aK08fYHeXuIP1jPNZVj7h1nM+vK5yxnNVGA0bw4t7VfqLR","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPf\/+AbFC9i0FGGguGVRm5rCUjUH2RSeXwmtGFlNDbrNEEIXGuR\/JbV81pA2hF59bhTlVfAkSlyLtEln249Jm84V2bI4mXlEUYvg==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0417{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMFPyAbFCni0DzmguGVRkxfm0enYinq7tk2\/mPMxQsnjLuV0KfZyec799H7i8z8uvC3VD\/BJIUBN6aaKIg5Gl4\/QZSPa0nKQ==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAPxHbNwoYUrwByQGuLDhaBABX5KuAbFC+i0FJ2guGVRlzYPHVDCdlADTxU1dT40tVKBXlqeoNltl+Ubj\/p0crFMO4dIjpc0Wj3DbNJ0PG+GfROwNTsNWm72wUFXTDTD7P3xW7","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn90AAPwb5eQoYUrxuTI8ygMgfkPcR4RqSeOf7gBAA3ZVVAAABAQgKAAtOLETcACs=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZDnWAbDNEfrCrg1SapdphF6QMkh+j4uu2MiFu\/zbHDYw5m93uVopTmMMB67xZVJuJRR5l25FKOuGYLWBQpwUl09dW25tU0K132FYukEVMQfSchqg=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":167,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJcAAEAAHRH84wHJAa4KGFK8WgQsOACDpMOAbDMtfrBVQ1SapdpTN\/i63OppsLmhLzmttACno94VFmyJvfXLCFmssXtz\/tb02D6pENTkXR1yLV0ZujwuwrSGloAvb3hEtEtsDjlExlgJhk6PfNUXELUiGA\/Ecva7WBW7VmQVJt9IDpdR\/Xse6GssxRcSjglKnHlr3uI=","pkt_caplen":167,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHP9eAbFCoi0D3WguGVRkHNCBGgiiLct85Pmk5iIc1uVS6mGTLZlXi9WXnCalMkmZ6Tl1wMW0KXMbt9Z\/\/xUmgFVU=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":168,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJgAAEAAHRH84gHJAa4KGFK8WgQsOACEjJGAbDMufrBZA1SapdomX3gPmJ5La4iNkOb\/\/tR5lm17jE\/iCE\/Lmue9F8skhIOXHakVrHqkbO5C+176wBMrwwXPcFsYs3uBx4GbenG9tzrxTq9G\/B8Dljvoj7ghCXxlGDS2Y\/xf1Dir0lsJl9QSQQPkPzUpaXfJtb\/2mY8O","pkt_caplen":168,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABNFD2AbFCpi0D7GguGVRm6m99ciA3C5KBMduOMDpn5WVp5JyIBncvdQV0hApg7zzRtT71uyqBJuxaGA89RTFoerdPnbjntiOU=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":155,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3PmaAbDMvfrBcw1SapdqR+yjnm50Ro1hl3PsIXbsR73HuhQfcyyC2EMMPm3eCzcpFA81\/nIi9Ixop1+NLd9fTaZS\/0iGMTgRfyWya9UoZN9pPcqcVwMd6JXGk8ibiOzLlzqKD3OMtgplareIQM5s3bm0=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBk7M+AbDNFfrCvQ1SapdrLdUEetiXy9sm92Qm1tV3IISU2qE85VpvVeG26IMpp28FNKLYNeO4Yj\/plk17U\/ZcXmGsjz8pq9p4w4NxZSVljPn6NRBe9M1\/lVCNbgEhVvw==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJqyuAbFCqi0D+2guGVRma1d5mMvxA9pAsmMosLVLMdhBABWEWYOewH6Z+iGIX0QzoGYfVMGOIzYZhqCJtrcU0pj+73w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH\/FiAbFC\/i0FNmguGVRmOyxabpDYl4fdjsu3bzRuq2t8Cnk4DkGu+R6AnrRkaLpxTujrPnvAJsc\/T70OfKwJ5VJs=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABN9E6AbFDAi0FRWguGVRnGHr6FCcltI0W2X5I3xILfWIrZg4+S0908OvBW4vzAW\/34yX7fezZ0JhFkfkCeLvdp2ISRUjiTAKo=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":162,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHRH86AHJAa4KGFK8WgQsOAB+cBCAbDMwfrBgg1SapdqIpPBYn\/P\/O0t\/OWbhxigMdcDGkP1bnd8Cq2qpOtxMUmXcet4P0LNqrVOGmGByMOPXuFCBIhfvzByUJ+OQv\/XqEWDKtRwA+8tKgxpaLd57hmcF4Bhnt2rHN4zOjQCDagJ7XzKvctgopGO8","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgXo+AbDMxfrBkQ1SapdolwvnwzwMK5JZ7CpzmoiMlsGkTnmT2QL1Uo8XqOq07RjbnIk6ujU9PP5xbLXaozGofdsm3A7M5VnzkkZcM4kuhPilk4AMPFpHq\/CCN","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":135,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBjxKaAbDNGfrCzA1SapdqC0UaVM9Qwivs2v\/IITJbRrVqZTjtncW4cm9JjwRIqk95bnNkGYjAOT3po+SpQGrCzLSB6etMG6R0Cq4KvIHhh9bOQsbUc+8iClz9PU1Dh","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":70,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOxEAAQAYrcwoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtkz+AAABAQgKAALV8MwmIb5QFA==","pkt_caplen":70,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAGxH+3AHJAa4KGFK8WgYoHACKtVmAbFCri0ECmguGVRnVztbuHeYsYCrkqRaCGtYfKpqm2c1nQabDwbhVEgUwoBq1IgzH82EhzTqzsx\/kICDlK79kWMbJ2ovnkYa7bQGuyWEhp1nIfYP\/J1k0P6Pd7WfUKejn6bWwRV51Sx3crXutGGiW7nwLM7xpL9PQ7J7LsrQdJPO7","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":158,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAQBHaFAoYUrwByQGuKBxaBgB6llCAbDNHfrC2w1Sapdo7ns+VPY1OL++yPlKTj6if6\/dFMINQzgyvazNfjgQD1JNjA1z99Dl8kCiYbgUrs\/zd0b2E00TynRk1jTpY4HaMKWc1jGZcRjgqZFWWB97skji\/IhU+EQYnaaGmrGQE6aTYMRvHsls=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ7FCAbFDBi0FVGguGVRmOOvqnd0wYeGjSuzTui7htr9UfS1QeZE2hMr0qDrH\/5LqGl78BG8Gy0LXzA9lf99gx10FVJQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0487{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":166,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJYAAEAAHBH95AHJAa4KGFK8WgYoHACCspCAbFCsi0EGWguGVRkVuhOBkhsRF46aA+LVY9KLVnxxDmv6a0betWgteHwWngROTY+4LuQtm3TbSAnd53\/CtoKgyb24pew0PA+j2S2F01AmXDe9UgJ9l2VCwGZePm6LGrRkNdeClC4guXAHEbaFD0ZugXm8mHlNZyGouw==","pkt_caplen":166,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":160,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJAAAEAAQBHaEgoYUrwByQGuKBxaBgB8LSiAbDNIfrC6g1SapdpSLPJugCl1XPuDxdtM1aSpnqfXTQBCRGZhi6iLYE6PBK\/xhCwKg3nvY3pj4TLpWrPbt0D0fm8rlzmUkyI5BtmhxfJrmnITI32dmwzpkNFPMoKRaEtaRSHnbvXIL+UK0rwjkyVV4bbhJA==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":152,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIgAAEAAHRH88gHJAa4KGFK8WgQsOAB074aAbDMyfrBoA1Sapdq750tU8fVdnPBwNp6hl2BZUWgQc8c7NsIotJIpH1RzTavtvQ1vSXe7kkZgVq43lsUwCxW0SUpsuL7slGFdJvHRrbcDBfbaXTVdHr7e+sNQGEq8z4MhXixbEUmkTdJG5eg=","pkt_caplen":152,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGvgSAbFDCi0FY2guGVRkAjtDABhzv8DZgz4IycP7e9\/F+30LjZEG0cwSuKDgb38nI6MxXdyEcnt6Mnc3vmeNstg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHdDeAbFDDi0FcmguGVRnDfAktObxPEQCqH94dNrDTW353a+sr9Ka9+o1IB5J\/mGR0h4IISGu+WHNeIEXmeglNQZ4=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":190,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHBH9zAHJAa4KGFK8WgYoHACaUQeAbFCti0EKGguGVRk7Sqws4Z4s1UVQkzjznLn\/QJjtNMj8veNgktCFcOkYxx5o5wOsiTfw3jESuFWHtCYdO5x2CkJAmLSiYSgLdZ0tVJemOTysHtYaA\/waMpbucdzTRrD7Kv7jDYvv7dDj+emkBbNLbpJlwoB4IF0aHTWUguu07m1tdhi0NCeIYNmIIFcX1ZPU7w==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":165,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAQBHaDQoYUrwByQGuKBxaBgCBvceAbDNJfrC+Q1Sapdq0WfIhT172Vt+xfwnnk9yz6e3apMZOfD+gZaNqnKM33EXScBadu+Q7Cx4pJ8liLdU\/mLyx76y2wTDpCtdJOtPhdPO9Ax++9mHIZ1aNNQcWr7SHCbgGiFfO7kfecScGXSlcjqDjBx9R64Yywg8n","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfMY6AbDMzfrBrw1SapdozKnwc1xfOtexrmnketxl9AEqN\/TmQIZnPuRBvdd8xvqBBw4vLaQvTxeB1r+n9H3vjp9FAI+evjyK1R3P3t2zLOmuAiobAoea3cFc=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdYN6AbDNKfrDCA1Sapdq+9SQSRw0S41T5fsA2IIB3Y47f4DFgUpJGA\/leJFcYSXriEJrAX9tUMm2V44rqFLRSAqjgAaA\/h\/5N2wdvRyI1EdzzwGew2A9H","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":171,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACH6WyAbFDEi0FgWguGVRlJd1SH6P9p5U\/6aQvcxetxQg+ag4lLBFJmnjS19dRfRuxpvbe9J8i2jzJM2AloVApr8jRg4h+tf37M1UC\/4P0JvAz7mm+jKbnH1qZPzXV66lvx+7egygDwuM6phIoH7ZFrIxUrNLAR\/6UsWvrJNMbx\/i9q","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":204,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALwAAEAAPxHa5goYUrwByQGuLDhaBACo38uAbFDFi0FkGguGVRl+9n2Et9rDrYUnueI5Gb6JeTpTI\/jlPWv+SY4K04ihn+Lc65qNNzNk6D9\/nvugWh4cKOwikW9vf2QdMavkwMHPexUgmM0evvHLHn78J2EbxW5i0a6Lm2Ops5puUxwFvdf4w\/+HUfTo8XzNCD\/BdOw6MtW0K6sGne6ncMW9vusrSTAJV6dBsEEtQ1oSqWcJ5gnRaoWE","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":127,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG8AAEAAHRH9CwHJAa4KGFK8WgQsOABb9RKAbDM0frBvg1SapdqzqmpQvsjMEUDwXZ4H85eDOQYp1BLnQO9dLWrHxZf7la0dQSouLLwx+uzcgckJMtq9TwB7dsS7oVuzGRvZ5SO9ldYPxddu1Q==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACLGGqAbFCui0EN2guGVRlqRIePj2o7S7zhIuIm5MPbjZ6yzj2x0oWfNpx38zXo3mqfNH2y1CRjVlE5EIucql9blgoLD4mky4LaCwckvTFos3iWDRuq\/0ZYtcDPuxgv8Y67bQ5mHsX7RF+ohtrrYeM459CkmBz3Ss4UtFQxGkDDMjAIvYM\/Cg==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKBxaBgBq1FKAbDNLfrDFw1SapdpSpTZQa5BAFiwfDWrZDiI+wboyQ7iKdub1HgpfJrgosPdfsmktOt42FD3LwRGBjgWyvZZv5oM7xtLKedO8JzJe5ymM6Ns+hNn+J+2UzEXB6NBJrzbQ\/g==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHBH9\/wHJAa4KGFK8WgYoHABnXVqAbFCvi0ERmguGVRmGe\/zJmZOnEB3MBsOWEc4ZCBOlBMyIn5QC8iMNNX9NJcYlsxiDwYFkZmUa8KlU5mF0sjJ5LpZdbbM+oSDcdNSrTsdTZE7wrIxcn3lUY6WCVfeMyQ==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBiawOAbDNMfrDJg1Sapdqu72Hw\/puqCWl1nrZwxNxaGufBENqO+F4Jkhfwg5GdTBwJUxZwiNwtoFNOaPPJxAP4yIMch6shdEhJVWFurXcrHPMTO3ZI3vNiBe\/d2Qo=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":219,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMsAAEAAPxHa1woYUrwByQGuLDhaBAC3r+SAbFDGi0Fn2guGVRm8rWeVVxTdu1JPIXEaObFA0Jg5uYdtSfcVUrBblicVKoSd9RpF8N6Nhj03P33BlRAgwK6rJTwpMf42mP0XC5WtiCvCOYFFaDxQF4Bx+oB6M8vcVH5vJaGHkZy+19ak2VwJNGxBRl7zD3Biv+mpQE0ly+yB+4AnggQrk5p8IYZtF5mdsPFL27Kve0JItLK1QeaIl3IdQjWhCOcgoTW1kcMzjh\/6","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069202,"pkt_len":139,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHsAAEAAQBHaJwoYUrwByQGuKBxaBgBnvLqAbDNNfrDNQ1SapdpVeC6JK31KInBLd1F8N3zjKz3YsStHV9we5ibk0sGCmktt2qNjtJ0C0TWUmBmbe9Kb1FXQLbyxm4rNw9+\/5LGASnrnjs8AolDuYYE9rcimXqANrw==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":220,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMwAAEAAPxHa1goYUrwByQGuLDhaBAC4rAuAbFDHi0FrmguGVRn1Pf\/1AGQJwdmEsGYbRKCaCAKOyic\/leYniZZWM8bj8d\/oAHwyAwE6iYrgAG9VytrnePCSlI+NoKfeoKaJkH2asXZWsDYAVNepquMcHXJ+UwUHfi0gGaWhn4+TaNTastjIGudkNyNiF2OYptGxiG5xKH3zaLPOill9S4EkPkW+dsEMWBzgtWQ8VPKPx0nHv5W8DNhDYMmMVYp9q7RVyqdcKmggYg==","pkt_caplen":220,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACut7+AbFDIi0FvWguGVRnjHMAbeQYQ9zU6+IYshvkaEKQarEMaGHBOFG91zERP+XwPnje6BqSXPn3nUETTEtCmgf2lTToWLmveeaPUA+Nr4rTDDQk0P1yklq9lo4F\/fIRgveDFqhXhIHKflDSHjV991JmzI1bjNt8o4ezk5r8j7qFH6Aqqa8B3TzMA9OK\/JZVpStbibKpOftAzvZy1D8AJbNsn9F8zE0w3","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABg7kuAbDM1frBzQ1Sapdrb8w9mpV7eVJzqkccQp+0qAZsMoX59u3FKetxj0hXKk+3kU7h0M888pXvGg\/soBKh7skoLVLi1ax59Io1JQQ7JFsnpMrCBGT2nshfK","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":143,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBrlcSAbDNOfrDRA1SapdrLz7J8fOKoGRex\/xKK0uuMtJ4g8A0l8M242rCu38cI69ut5SOcay4eOl2XP3eK6R38hGuLiRps+Hcis+ADYTix69dJvmzorGwRs0wMXIPNuhI6\/JdTQ3c=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":196,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHRH8xgHJAa4KGFK8WgQsOACgpQiAbDM2frB3A1SapdpyMgPInhxcAoWmVzESeYLM3087lMSB4kWY09K2p72xhrHh33FpzRMrgkCVnyPEXm\/yvRIJIL5FBsSIPfG92d0mrVU2FvgECObk71dqV6rffJyr\/TW2HE6l6FwvqnHei2xXh0tP8\/m4OaVmPbjFAtjpgGbgA3eZsxj7ARS02AGfR9ATf7iI+Dbi\/TK7YQ==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1GdqAbFDJi0FzGguGVRm56mbE+9gQb3uo3Elcy3ajFau5oEkKF09casG0g\/px6gB7oWaayOe2eMsHo98ZHp5zHNQjUv5TKTgtrP42NEnNJqHfApUQvQBhOBY3cjMGdtnu+PFSA9BIirwDyGHEbSaWGQKJaPnXJEvZ3G+YTkMts9p+NS5fv2xzYwZp1EK2EggbDqb6CyEMGRCig38NRUGhZdtCKOcH91+75gmgVGyH8A==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":206,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACq4TaAbFDKi0F22guGVRkAS1bW2WfKe+JnawYtcMN1qPdeZqzeLDlGzt9Nh\/U+Fkg64QFBX9EsO8wjPJLH1HNbyNBkeROnfYDUCIFf1kjXFIpItmpjFBnE1hbHhnaNx2M9E8kmJ+MUi116ZJZcJM+YHGcXQ251RDVFzLfN61dLiMoZ\/\/UUsrcdk6xtZ1EFS9Bah658y+R0TmrsXtpLBiLnfdQxft0=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZTXOAbDNPfrDUw1SapdqtTfAqDsevweqHNUURnEXSo+lRly5zihUEEgqsAeMA1njykhdUpwXZaRJVairju4U2fYFMU2hNhPZR60rZwf5hNaJGb6I=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJn8OAbFCwi0EVWguGVRl+JrFxOvsP2PXqXn\/d7KnB\/sIcqF3e7sjrEvTPSXoCew\/0DHjucdf9Eq7UJJYNQW2cRMT1vg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfJqeAbDNQfrDYg1SapdrH49HX+oXJKXB18mnXhQpqOx\/UZlp9m\/UyfaUrUz12\/MueS6RkcMV92PAznlwnZeH3G8vhhZm3klaWFioMg\/c2LItnnrWq2KfBtUI=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":184,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHBH90gHJAa4KGFK8WgYoHACUEPuAbFCxi0EZGguGVRnxVjizIisbiTE+awzW8DlXExA\/noz8yw7rftFefkCBfzY4McwBOsLEio7zengaYMnHLh5MqbcG5fIj\/o0V97OFscwutiF2tI7OUGKlnwGVzNCt6nk4v8DVM6o3AQGe38IEIy4LM\/dZM7TsTWA5LCY8Jp4NEFg1LipNkjZWBPZlVg==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABw\/wmAbFDLi0F6mguGVRmgy7HRohhu2+TOHBMsotdWoE4A4IM297DcPMkGy6oBXn7G6wxtULXVtHDedhT+dTNMBhqSCh0r6KsjvcNrWp\/KnWqzLbXVeqGfqRwzZcxAM0SMsBQYVHf7oawmtQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBd4W6AbDNRfrDcQ1SapdpkV3Q43dPXz9btIKWL0Xsdh4HNCyUxUMfx3nF2CD3tl1nhoRVnPY9y80xQpwXsS8txDyCcyWaFh3tocjTBqhW7duO1fKTCI7lg","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHRH81wHJAa4KGFK8WgQsOACPvxiAbDM3frB6w1SapdrRYmy0Oola6ShjLZV2WCbD36whUXZ43Dlqspx7M1y\/qOKo8Lnwe4rpseouYMVh187SON9ue2WMNRjOKou5xAbqDm1V3XdqLKYKLaxPhRnYFsNNwFSExmhXkMgz24vOdFYPQIGOKe\/H9aHmBu\/+zGC2+3\/\/JgtXsJowXVA=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC111SAbFCyi0Ec2guGVRmaLZjjZv0SSS9bg26nBzAsROWsNipR8ZxhPxqlcaRWm+JX0NJCQUcry48ga9KwFGmgiOeKoNghAg\/FQrW1aVnvI9ApKAe\/2QQJQzNMS8p3n0\/gL4JnLV0Gzw3J9QFNVz4JY0seOyQu6nNkXawyHhWvU2Xw5NY4KmsTCjMIaqmrmWPVGwt+lsLlDpPxPCpaAZFs7NdMVlrsMFqUtXdwwbjAoA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAQBHaLgoYUrwByQGuKBxaBgBglGyAbDNSfrDgA1SapdrWFbpGSmfPNBdBtV1bnd\/nU0DqQ7bEwC3bQ8fW+92NJfVHuzUEFXIUpdRJORoom63zrjRP8c19yaNZp5OVKszfkLvYHqVIcqE3hCBa","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHRH80wHJAa4KGFK8WgQsOACTCt+AbDM4frB+g1Sapdp5JmyMV7JEGbEjzha01FHIpsID0WACqqJalkgTRSqSXHAOUceko5CAsu1MzH\/1vG+N+FjaHIxQR\/g7zAJLuXuhboU6aDYKqaP+CY+FLtmq4eZ9\/Wdwaa7Jh5OkczzUB4K7GU5vFOUiyCNjw75nj\/086g4WCmjC43ktYDKpghv6","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGNB2AbFDMi0F+WguGVRkGGWTvPLHaH7x0BSH+fNH89KudTaXlAEHh9u8k7Bm52tfIMfRldod\/pQBme8ihH7j7pg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIPkyAbFDNi0GCGguGVRlOuV5abANabMeEtdZJg6U0I+HAf\/M6DwyoPmy0+dx3Q7roI1+e7LLmh7eL8\/AJ201Cxf0f","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0525{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":194,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHRH8yAHJAa4KGFK8WgQsOACe76qAbDM5frCCQ1SapdpxUcwaPs81LBk63ts0j17Sl9eSGdg9yfb8g+EuqnR9XBgaVWB1mo+bFCsIi1ZbaLkwy4RBRRLqlwqRXx8fVST06+XV6DFb\/VmDjs6ROQQL9+cEx4cY+8elPYY8IjCE6M\/dZux65Mkht8Umgbs3r\/v8ZIuj6qVFPJto4nTC5Lryvz2w2RGfKreZiAQ=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":131,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHMAAEAAQBHaLwoYUrwByQGuKBxaBgBfts+AbDNTfrDjw1SapdpvVg0\/+y9cRmLA7Wx+I91UpdvtoBJ1JYcvsM9XN5e4g+K6UOXugClzltthkeXqWVJPlyynC+2mmve0pqBQF7PbISPKEOR4gV3gpJU=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":210,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuB9CAbFCzi0EgmguGVRlplohP4PXdHKiulAWz\/X5g4dQGswk5XmitDbyS6IurzeiYrLZ6ppqozmvX6b55oUJP3ewerM5Sx3eVxkbupwUZ5vHRNwhJJ2Kly7d93ImOhD9RX0X3glSUkZCDBS+isUrNxYo2ALYq0zAPr3rnTg8NScrxlREWLJ8E\/Rd7LppdCd1tAON809AFzzx00bEXDdtRhWJRpBPS3Ee\/","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZONaAbDNUfrDng1SapdpQTovQzg7MoVsRHhmCkBxP2WKodZzRauSeNSR3CT7YXxEui990I9vvQOXFJ\/G+u4i11p\/\/hPFmUpO+N1UnuRynY2O2dAg=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":80,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEDykUAALwb+025MjzIKGFK8Iynl6dfwq08taZdhsBAAMO1XAAABAQgKRNwEHAAC1dcBAQUKLWmWpy1pl2E=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEssmAbFDOi0GF2guGVRmURvDI1e8nqs+gDuLPjwfmyyGgofMI6SPx3mMpC1E8FDma9jwWB9F+lqF9m\/Y\/5EQ=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJKrqAbFDPi0GJmguGVRn5GiQFHhZlXflraczG8SfI4L41sdnFU50KZeNhpph\/U+pHy6YSoCi3GZviM6nmezDFkr6Xxw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":205,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACpNUSAbFC0i0EkWguGVRmcGqMPotOb19I9YyWuFTj1EKiUsVlaucxjeuWGvM4L+G+XxDkR9y1\/afFNLKCcSXQ466XhRxfAZSZlcA22vH8xrYGjwuAFOu5GLt9lzwHqfcyE41cpbRoFOiAxLwFmn0FeyesMW3SvnUlHEBIRcXiCfB\/tuIJa5Z4SE2LxtaHb9q1oNonVItQYx\/v3kwZIoFyFA9lFLQ==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACW4eyAbDM6frCGA1Sapdq6kkb5W1frha0IIlabPKoYYL1oH3RMR9qetPtYMuvad3c\/g+FLT\/d+Lj3a4To1FezfDgfC3JtXQkBbhqU3+IVTVsnUtTEFv0\/36ejhidNoFZCaBuNkvmZLOMwG3nR\/XM+SM0mcmteWwUTidIJix3rdjehEL\/Zo3isjgFz5LAiNH9z3","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ARKAbDNVfrDrQ1SapdqjSl2Mn30Vm6LZDJev8IuiFTkgtwNwFw04KF\/bW4CI0QmAavoKNHMWFEqQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACfEAuAbFC1i0EoGguGVRmS3m8VxTNrSeMxAGvyxCSYpHzYoXhr+z3LIJzs0Kuw8gqK3jGK7Zqi6gP3g+Yq1k4r6iNp2Fbm6ViZCrzMj4M2Bo9NUoEyu9rt5qhje2svUsc4\/KVcpdUXQ2doqIgU2pxwK25y1t4eSFBunud\/+ChW3zuSQ2iwHnNS5zEqSzRF9mwdcCi3WFRxXJId","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJCb6AbFDQi0GNWguGVRndWc99cMdFPHDMB0LaQ3UNvogH13HeO1jdbYFVVasgri4\/pcT3R6PzyjH8FMXwmxteK\/DxbA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oZaAbDNWfrDvA1SapdqM7bbQqpTINxg4fsnk1PVn6V\/lFGrlEKjdEbns023xDnSDTXgmA73zakaC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":175,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ8AAEAAHBH92wHJAa4KGFK8WgYoHACLu\/eAbFC2i0Er2guGVRltx91TkdqvBoe\/7\/mk+7H+30zK0IVKAO1qfLU9PsZlTL+yaajuSD38sJoIMlmbOBr+ItI1hz5wr9KaYHHW5o0rrBJsqrffXeAetoFx06qkK67Dsrb40E3Q\/6Duns55tl\/EBD2dg7xjDyAfQ0jF9fYfv+y+QjxwBQ==","pkt_caplen":175,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0516{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHRH8zQHJAa4KGFK8WgQsOACZaO+AbDM7frCJw1SapdpN9xF+zHuPqsG4dPpxgMIQ5xaej8XWEVIZccyoZgLHAgx6loK\/SPHhb3xBKnbs3KRtXcbcp5T7EOtXAn5Y8i1gBSOqjjUxjHARODRpaAd8x3x9onWUoLVLMKgOIV8WPC76Pty90Fwo+ZTtS8X+PUexg7ywM68JU\/u7oetV5e5r35eztmls","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":184,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHRH80gHJAa4KGFK8WgQsOACUZFOAbDM8frCNg1SapdrHzQ9+ObYN\/xyD3lwp7sF80xlZt\/zflzkveJADRWy90oLyXFMvushACDMCPUkVddmHLSiglHu0Qj9ohE\/SfBZax8kGbfFACNqh403oASOFmlo5ziLQ1POZwIt37cl5kTlSkJkfQBgXh8iGH4JMC4uANZfC6v+3VAR0c9FMZsxwbA==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHRH80QHJAa4KGFK8WgQsOACVClGAbDM9frCRQ1Sapdr0VAwFHGWvqEdy4GQXGpa64FipYk1cKxeFn2ukAaIWT938XcyC2s4c2F9oo5sKuG01yY9dkjtQZviEmmBZXpn5\/QPK2yxe7il6eyydgsstjcOJMsC8VtVmhzfSEXEUqD3ae4fLhvr+a5orDpYhf29Izg4+rFGgZInyXqH2fj5J8t4=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/FseAbDNXfrDyw1SapdqCML9vTW0ilPwgC543b1Hv3\/hKJQdzWxS5PEURMitrXgXRI0UmaPBwyGJz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABF5KmAbFDRi0GRGguGVRm9jgeDLwJvXh0j6B4GUa2yCEty0FdNLUrmKnIXBSfOjm+hq45CgYkQ4XsCYN+GhXFu","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGp3qAbFDSi0GU2guGVRnlN9gdhliZQwFXKRepmNZcLgLqHWnWLpkrR5raWnx3IBaM5+b7llVyFRri3xAk6vUNMg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAGxH+wgHJAa4KGFK8WgYoHACky5qAbFC3i0EvmguGVRlhOL6BWS2BljmOn50q6SdczKxI54BhTRlCI6iQJ9lF1nFAl3ayWYok0+0fgTgc2VB1jlDAOTz379yEO6ol8rh0E3J1ezDE2+77UqgcM1E8Wa6DUSYKk3qPyqy2arqU5O8lhSLRIEeBXE3rlzf8t33kKdl7fbiRN+7kfen2aEUVMCG4TVB49CIXNG6hxcDhr7Q=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0460{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":147,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHRH89wHJAa4KGFK8WgQsOABvddyAbDM+frCVA1SapdolaqVThhLDkge5ljLZYdAkh\/dqWweVKUKSFOFAlOYIOXEB+OfE3o4nTIaOu9BFh9RGTr3JKO4IijkYopapSFV5HaRSwksIHOD8QyoRsbQE\/qr8Hsv4u7ZdFt8M","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/P+WAbDNYfrD2g1SapdrRL4hlROO9+UHeqBnJCxxA7wgJV0s95wkF+uv8FWK3kLpaIfhg8rN1Oq15","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":196,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACg4LSAbFC4i0EzWguGVRkuLpg5\/i61cLxMpQJPNXQR9FGI+gf7YWNGFGDbhz8EbgseAQWVGXCDWRhZhKxtivsdhCl5zCaeAvd7ysAUcXp165hO4udGme+3gvYxgWSWo8\/ZqaP33IpTFa17gNq6C+V81xTdym9ebj7bYUG7ynBeRi+9ybxqOPLjldaTPmraxi+yFX2kTVS7N13XLQ==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/8QOAbDNZfrD6Q1Sapdqfp5pq80BU\/z5A0JK0tOEhI2go\/7SdYqER+ULessrxp850WzxpkkyFQhpf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKUpeAbFDTi0GYmguGVRkGC3m2JcEkSYvqxd8uGQqzdDZ5ATx0FAxfAsZNnIiMJT3gLUF+Q+IjFyCNuKdxf7B1oYl9+cQ=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDvMmAbFDUi0GcWguGVRlu6oawy8wog3W3XBdmqvC999BEQkSkyXlKhOSLtmN4uRTl\/pWQ7TT3h2y8NOUYRQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":80,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAECw6EAALwZAfW5MjzIKGFK8H5CAyJJ45\/v3EeEasBAAMqsOAAABAQgKRNwFZgALTiwBAQUK9xHgYPcR4Ro=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkyjeAbFC5i0E3GguGVRmKAjaZGuV7ZH8gOKoHhlmGtNMgUeM4nu83mDA5JBqKXA8LTdQJgkPZdkJPEURugcRPDo2cA4e+1bFyQQmYmF\/J+\/LKou1xAC+2ZjVOH2U6TdyIo4p+Dd+YF1gelZ4fH2o65jCJsRl7YK1oOiWju+fKy\/ycrzkH8R1A3ha96wM\/jhvTSY0Nec5vV+WbaKNG\/j0=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/v7aAbDNafrD+A1SapdqGZqWGAvrcsRwPHnKlZaZCk4o6vjKEaagQatuqqMg2dx3tOK1Y9Qw4sgb9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZW5+AbDM\/frCYw1Sapdrmu\/sNTr1k060srer8gHGlV86C6jZJhD6XIBbdmyDdsamywgrUzMpW8avxUbkMVLjHhBzPPQ\/HPBz3OOigPmowN4FJxBc=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGBNCAbFC6i0E62guGVRmD8flTQh955vAs2ScfhybleEmKJp6t7AEVWuv\/j5cBsdOBeqJ6ky0wBvJ24cfwpqcYGe1qpCWR8GCeDKOKlQUHF5l6ANW6xNP1bYDT81CIY7bDGdfSx4r8qimqhVRzI5k7X4qKaFTMGQ5\/lX2RNsQpjzo=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0484{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":164,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHBH95gHJAa4KGFK8WgYoHACAS5uAbFC7i0E+mguGVRnY2hR+hdBNwuR+Lf6N+ToVR8p+jrE749RghNXmuFAIcAJRKWQ99Bq5mMIfF2qMDsBp4ZSn\/9r0esxNP6kCvjnOXIzWiBBFAX1rDkfyTMQloXq2R\/eXcjHr+kZCg7OTQkeITvfgW8FC+XDQPaI=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFqIOAbFDVi0GgGguGVRmgyu176Qf37YheoYqc2uO8BSUgS\/F0RLCL4hPF+5ClX3xaYhs80u8BOJLmS\/sxLNcM","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":141,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHRH8\/QHJAa4KGFK8WgQsOABpDgeAbDNAfrCcg1SapdrjRU+2Vj9uOOFqGO9+FGgn60\/8iR8NdvexoO2SC7OEqCvM3Ikj6SLjev1ILv7STYpPa6D19\/myN\/93AV77hYzGAgt47yeIbzDhjjiFICQtHzlEIxFk","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lMCAbDNbfrEBw1SapdqvBDntR64Cef7IKWi9OfrZ9aTac+hwTehhwfrw\/YfmF9tFtGufYmdFCBVh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":144,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIAAAEAAHRH8+gHJAa4KGFK8WgQsOABsxgiAbDNBfrCgQ1SapdoQa2gl0fNuQVpwLNZz5kSfZVbR1z29RAoVQTXQai9Xvntc0FsdiBgM\/5cqpmr8yTO+oT1qmSPWVJEjNlZctLVJlfN2oxZ1wFzna2ojOX67WuSDfg82HN+w","pkt_caplen":144,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmCmiAbDNCfrCkA1SapdqYwVTsDgJSBHO2ln\/bdhizHbmZphQRJb\/ve+jkmzm\/AmpklZPtV2IkKGaqcynug8OhKvKvg+pHzGJYoKZjuut2nt6Wez6nuk6ICfOx69GUXCF+","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHBH+BgHJAa4KGFK8WgYoHABgo1+AbFC8i0FCWguGVRkWhGnTgY0EN\/RiCcFLWNEWGoXQFqTzRKeVvBCgQNxzJFCVAoBlqcQLw\/drMYUZiMZk6bBQLHFQrGcA\/YHmY9tiE317kkAWmvFik+ua","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Wz2AbDNcfrEFg1SapdoxsGX70KoUq4TJ7rC59MajzFlAlunTE5YjfSlV91XWdHaMr4K4lEzxkbI8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0446{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmsEaAbDNDfrCnw1SapdpqIkJs+utGsmPnWVEKFQkpLAV+qhCgh+DAtIv325OVgw4VqF7EceWpuphL3tkvf1aK08fYHeXuIP1jPNZVj7h1nM+vK5yxnNVGA0bw4t7VfqLR","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE1V6AbFDWi0Gj2guGVRlrF8KbobzvZCOmM9v94y1wW3xiGixNP0qxBSQPHuvEV75ADfa7GXBaAdDS9k4opLc=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABPhBmAbFC9i0FGGguGVRm5rCUjUH2RSeXwmtGFlNDbrNEEIXGuR\/JbV81pA2hF59bhTlVfAkSlyLtEln249Jm84V2bI4mXlEUYvg==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIQ1eAbFDXi0GnmguGVRlTPSubgo8cozKaYQwWpaU\/nS6PquJM9fkcwJg8S3YqtN\/0MBj\/9pNuPxddV7UUGofPyvOa","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/lxqAbDNdfrEJQ1Sapdp9K4RTCFA0zl7XFrz6oFMRu83Sm80XsXhjmSDpVFSiNV8Ko0pqNqsg4x7L","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHBH+DwHJAa4KGFK8WgYoHABX6MWAbFC+i0FJ2guGVRlzYPHVDCdlADTxU1dT40tVKBXlqeoNltl+Ubj\/p0crFMO4dIjpc0Wj3DbNJ0PG+GfROwNTsNWm72wUFXTDTD7P3xW7","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZCluAbDNEfrCrg1SapdphF6QMkh+j4uu2MiFu\/zbHDYw5m93uVopTmMMB67xZVJuJRR5l25FKOuGYLWBQpwUl09dW25tU0K132FYukEVMQfSchqg=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABk6LWAbDNFfrCvQ1SapdrLdUEetiXy9sm92Qm1tV3IISU2qE85VpvVeG26IMpp28FNKLYNeO4Yj\/plk17U\/ZcXmGsjz8pq9p4w4NxZSVljPn6NRBe9M1\/lVCNbgEhVvw==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHAHOAbFC\/i0FNmguGVRmOyxabpDYl4fdjsu3bzRuq2t8Cnk4DkGu+R6AnrRkaLpxTujrPnvAJsc\/T70OfKwJ5VJs=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABN+GiAbFDAi0FRWguGVRnGHr6FCcltI0W2X5I3xILfWIrZg4+S0908OvBW4vzAW\/34yX7fezZ0JhFkfkCeLvdp2ISRUjiTAKo=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069203,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fwmAbDNefrENA1Sapdp3hCFQUkLuNw8vfQOw9o8EBJ5cOHIBeEW\/7vwtikhJdG036yjsk\/xjsDjy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJh56AbFDYi0GrWguGVRkBkr20fTGINIsNcdEifhUodK\/AqfSCoI2Gnpydm5IGNRumLmLehDic4WGJ13IzbiANXFgDjg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":135,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABjwIyAbDNGfrCzA1SapdqC0UaVM9Qwivs2v\/IITJbRrVqZTjtncW4cm9JjwRIqk95bnNkGYjAOT3po+SpQGrCzLSB6etMG6R0Cq4KvIHhh9bOQsbUc+8iClz9PU1Dh","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQyfyAbFDZi0GvGguGVRllTwTg9Yq3YumRpTXknUohYPk4v3RSDmgEzaEM9m7hWdBa59Mbri\/HTobVRQbvwjdwanXSNWBh13TNkPY=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KzKAbDNffrEQw1SapdpMaurnExSxz6qNCPwlqPbbKtkWCI81DfNy6jXEqVPqlY4ha3kt0b5jB2Xg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":70,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOxUAAQAYrcgoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtkxqAAABAQgKAALWhMwmIb5QFA==","pkt_caplen":70,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGzluAbFDai0Gy2guGVRlb+FpbpmOvnz+h2YeEWWiE5jYkbHi14G\/+7zSBsyYVuFaa4WPc520R\/OabVtew7uWHOg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqH5mByAAMVJql2jtnI0S3EkPA5GzwOjlP+SaSAYa0BRrMJvukoi3Ky6lJY\/keEd3sGOeJyC2gRmmMv0NykD3PIG2hnSV8iOrz3uOhUqZKKWaa2U2o9U+AAAAJ9Ta537FcpWpYKA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/n7eAbDNgfrEUg1SapdrTlDMnFUw+TePrnqyScY26IWXn\/UolakEJaMZb8INOs0CcSF5lJpyUJ0DA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/M7qAbDNhfrEYQ1SapdqiVOBlpn11bH3Gy8YB1vmDRQxVE4O1H8metwoBHoxtfcyIgXb+c4vF6uuL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABID9KAbFDbi0G2mguGVRmlOxEKLYdg2rLd+9Q0aahAXk\/aKKpsrm+pDl\/0lqaQPb0UQ+CypmncKSnyK+dk0LT07R4t","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK46yAbFDci0G6WguGVRleqwWQpdMlJjGDrJxW7S4ZjxdR+VuY6rlRJlqXRLpFg6LH6SM9o2p9KZHzIXijd4qLKVzgpPA=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zLiAbDNifrEcA1Sapdps4FwlCKi6llxC71JNSgAKvnHIFCUcxQcI1doW74VlcwILWrTG\/Zp6pFvX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGwh6AbFDCi0FY2guGVRkAjtDABhzv8DZgz4IycP7e9\/F+30LjZEG0cwSuKDgb38nI6MxXdyEcnt6Mnc3vmeNstg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":204,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALwAAEAAHBH9vgHJAa4KGFK8WgYoHACo4+WAbFDFi0FkGguGVRl+9n2Et9rDrYUnueI5Gb6JeTpTI\/jlPWv+SY4K04ihn+Lc65qNNzNk6D9\/nvugWh4cKOwikW9vf2QdMavkwMHPexUgmM0evvHLHn78J2EbxW5i0a6Lm2Ops5puUxwFvdf4w\/+HUfTo8XzNCD\/BdOw6MtW0K6sGne6ncMW9vusrSTAJV6dBsEEtQ1oSqWcJ5gnRaoWE","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHeFGAbFDDi0FcmguGVRnDfAktObxPEQCqH94dNrDTW353a+sr9Ka9+o1IB5J\/mGR0h4IISGu+WHNeIEXmeglNQZ4=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":160,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJAAAEAAHRH86gHJAa4KGFK8WgQsOAB8KQ6AbDNIfrC6g1SapdpSLPJugCl1XPuDxdtM1aSpnqfXTQBCRGZhi6iLYE6PBK\/xhCwKg3nvY3pj4TLpWrPbt0D0fm8rlzmUkyI5BtmhxfJrmnITI32dmwzpkNFPMoKRaEtaRSHnbvXIL+UK0rwjkyVV4bbhJA==","pkt_caplen":160,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":165,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHRH85QHJAa4KGFK8WgQsOACBua2AbDNJfrC+Q1Sapdq0WfIhT172Vt+xfwnnk9yz6e3apMZOfD+gZaNqnKM33EXScBadu+Q7Cx4pJ8liLdU\/mLyx76y2wTDpCtdJOtPhdPO9Ax++9mHIZ1aNNQcWr7SHCbgGiFfO7kfecScGXSlcjqDjBx9R64Yywg8n","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdXMSAbDNKfrDCA1Sapdq+9SQSRw0S41T5fsA2IIB3Y47f4DFgUpJGA\/leJFcYSXriEJrAX9tUMm2V44rqFLRSAqjgAaA\/h\/5N2wdvRyI1EdzzwGew2A9H","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgQsOABq0DiAbDNLfrDFw1SapdpSpTZQa5BAFiwfDWrZDiI+wboyQ7iKdub1HgpfJrgosPdfsmktOt42FD3LwRGBjgWyvZZv5oM7xtLKedO8JzJe5ymM6Ns+hNn+J+2UzEXB6NBJrzbQ\/g==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":158,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHRH87AHJAa4KGFK8WgQsOAB6kjaAbDNHfrC2w1Sapdo7ns+VPY1OL++yPlKTj6if6\/dFMINQzgyvazNfjgQD1JNjA1z99Dl8kCiYbgUrs\/zd0b2E00TynRk1jTpY4HaMKWc1jGZcRjgqZFWWB97skji\/IhU+EQYnaaGmrGQE6aTYMRvHsls=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiZumAbDNMfrDJg1Sapdqu72Hw\/puqCWl1nrZwxNxaGufBENqO+F4Jkhfwg5GdTBwJUxZwiNwtoFNOaPPJxAP4yIMch6shdEhJVWFurXcrHPMTO3ZI3vNiBe\/d2Qo=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ8GqAbFDBi0FVGguGVRmOOvqnd0wYeGjSuzTui7htr9UfS1QeZE2hMr0qDrH\/5LqGl78BG8Gy0LXzA9lf99gx10FVJQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":171,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACH7YaAbFDEi0FgWguGVRlJd1SH6P9p5U\/6aQvcxetxQg+ag4lLBFJmnjS19dRfRuxpvbe9J8i2jzJM2AloVApr8jRg4h+tf37M1UC\/4P0JvAz7mm+jKbnH1qZPzXV66lvx+7egygDwuM6phIoH7ZFrIxUrNLAR\/6UsWvrJNMbx\/i9q","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":219,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMsAAEAAHBH9rwHJAa4KGFK8WgYoHAC3s\/6AbFDGi0Fn2guGVRm8rWeVVxTdu1JPIXEaObFA0Jg5uYdtSfcVUrBblicVKoSd9RpF8N6Nhj03P33BlRAgwK6rJTwpMf42mP0XC5WtiCvCOYFFaDxQF4Bx+oB6M8vcVH5vJaGHkZy+19ak2VwJNGxBRl7zD3Biv+mpQE0ly+yB+4AnggQrk5p8IYZtF5mdsPFL27Kve0JItLK1QeaIl3IdQjWhCOcgoTW1kcMzjh\/6","pkt_caplen":219,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":139,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHsAAEAAHRH8\/wHJAa4KGFK8WgQsOABnuKCAbDNNfrDNQ1SapdpVeC6JK31KInBLd1F8N3zjKz3YsStHV9we5ibk0sGCmktt2qNjtJ0C0TWUmBmbe9Kb1FXQLbyxm4rNw9+\/5LGASnrnjs8AolDuYYE9rcimXqANrw==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJIRWAbFDdi0G+GguGVRmg8pZs8hRZQFrxOIxrYca\/jud3GVrN1cuWifEGoOpQ5ereFGzofJDcR7GIoptmURQbgWc3zA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJIziAbFDei0HB2guGVRkHLiklZGmT7P1R\/vPZz+pHA5y7q1tDsPSv+4JQyppDFk6XL+HPMy5gmvyIR8OBM5EWe4UzUA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ak2AbDNjfrEfw1SapdoRXohCYiOg2WoTOPHjK02\/OHEBZKALrjSvZyiDVoA8+Mbedm6GItZlPSAr","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":220,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMwAAEAAHBH9rgHJAa4KGFK8WgYoHAC4sCWAbFDHi0FrmguGVRn1Pf\/1AGQJwdmEsGYbRKCaCAKOyic\/leYniZZWM8bj8d\/oAHwyAwE6iYrgAG9VytrnePCSlI+NoKfeoKaJkH2asXZWsDYAVNepquMcHXJ+UwUHfi0gGaWhn4+TaNTastjIGudkNyNiF2OYptGxiG5xKH3zaLPOill9S4EkPkW+dsEMWBzgtWQ8VPKPx0nHv5W8DNhDYMmMVYp9q7RVyqdcKmggYg==","pkt_caplen":220,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":210,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuu9mAbFDIi0FvWguGVRnjHMAbeQYQ9zU6+IYshvkaEKQarEMaGHBOFG91zERP+XwPnje6BqSXPn3nUETTEtCmgf2lTToWLmveeaPUA+Nr4rTDDQk0P1yklq9lo4F\/fIRgveDFqhXhIHKflDSHjV991JmzI1bjNt8o4ezk5r8j7qFH6Aqqa8B3TzMA9OK\/JZVpStbibKpOftAzvZy1D8AJbNsn9F8zE0w3","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/JLOAbDNkfrEjg1SapdqBtJxSNzubFVzv8TxC6C\/y4XES3vpgTTszV8CTjcGM3h6Ifj\/wbjAiwaYt","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":143,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHRH8+wHJAa4KGFK8WgQsOABrkaqAbDNOfrDRA1SapdrLz7J8fOKoGRex\/xKK0uuMtJ4g8A0l8M242rCu38cI69ut5SOcay4eOl2XP3eK6R38hGuLiRps+Hcis+ADYTix69dJvmzorGwRs0wMXIPNuhI6\/JdTQ3c=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC1HfSAbFDJi0FzGguGVRm56mbE+9gQb3uo3Elcy3ajFau5oEkKF09casG0g\/px6gB7oWaayOe2eMsHo98ZHp5zHNQjUv5TKTgtrP42NEnNJqHfApUQvQBhOBY3cjMGdtnu+PFSA9BIirwDyGHEbSaWGQKJaPnXJEvZ3G+YTkMts9p+NS5fv2xzYwZp1EK2EggbDqb6CyEMGRCig38NRUGhZdtCKOcH91+75gmgVGyH8A==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGu7mAbDNlfrEnQ1SapdqD0ZYdCbVu+\/l5dwS7FZCqcIM1UbgyRdUMwd1kn7RUp9gsH2DscogTGNMW6EhssG6nGQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABEE5iAbFDfi0HFmguGVRlnJjYXUzynwI+hX6ViijIkLmbKrLd7NrQk08bLpCRJh09oyaG6FiRcMvLtqge7hew=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACq5VCAbFDKi0F22guGVRkAS1bW2WfKe+JnawYtcMN1qPdeZqzeLDlGzt9Nh\/U+Fkg64QFBX9EsO8wjPJLH1HNbyNBkeROnfYDUCIFf1kjXFIpItmpjFBnE1hbHhnaNx2M9E8kmJ+MUi116ZJZcJM+YHGcXQ251RDVFzLfN61dLiMoZ\/\/UUsrcdk6xtZ1EFS9Bah658y+R0TmrsXtpLBiLnfdQxft0=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0430{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZSVmAbDNPfrDUw1SapdqtTfAqDsevweqHNUURnEXSo+lRly5zihUEEgqsAeMA1njykhdUpwXZaRJVairju4U2fYFMU2hNhPZR60rZwf5hNaJGb6I=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfIo2AbDNQfrDYg1SapdrH49HX+oXJKXB18mnXhQpqOx\/UZlp9m\/UyfaUrUz12\/MueS6RkcMV92PAznlwnZeH3G8vhhZm3klaWFioMg\/c2LItnnrWq2KfBtUI=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0607{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":254,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAO7n+EAAPwb4vgoYUrxuTI8ygMgfkPcR4RqSeOf7gBgA3cXIAAABAQgKAAtO+kTcBWYXAwEAIGdMIbdD5CiU7n+IrnS103KNJDD\/wEe4en3HJKDt9NTEFwMBAJCfy3j2sG5UWSuvx3U4EPUfOWGebWIjNfozzH8jKkMglZH\/\/TGXg4ANtICQ+uw3Ew5X+NmDx6K0KtLrGZzj8H\/31Wj\/wL+x1lJyWfKri1G23XihW709QvyRN6tITRpEOoDvFi+BoEc0eS4XhW1JNsgyGmOhVjQTaVHtWfZTQw7UgWXnpvDOiwGENWXudtKPSKo=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwAySAbFDLi0F6mguGVRmgy7HRohhu2+TOHBMsotdWoE4A4IM297DcPMkGy6oBXn7G6wxtULXVtHDedhT+dTNMBhqSCh0r6KsjvcNrWp\/KnWqzLbXVeqGfqRwzZcxAM0SMsBQYVHf7oawmtQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEZIqAbDNmfrErA1Sapdo0bVP7Qe9I7nh9lH+jaZpiRn30JcSoUTBa+ifI\/+zNLyumT0o8YDmEmaB0BhhjSyg=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDev2AbFDgi0HJWguGVRnxPczybYVkajLuQCt37tcXrq2Ecti8Kcmmg1VBi1kmZGpbO+xXD4fCenRIQ4IgGA==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABF3imAbFDhi0HNGguGVRm4wO9eeJ1E\/E4cA4vdoSpbGxK\/Wz7pGUviiGLMcRYEC1ffD82TJbtBAsZnB3tq3aaL","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABd3VSAbDNRfrDcQ1SapdpkV3Q43dPXz9btIKWL0Xsdh4HNCyUxUMfx3nF2CD3tl1nhoRVnPY9y80xQpwXsS8txDyCcyWaFh3tocjTBqhW7duO1fKTCI7lg","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHRH9BgHJAa4KGFK8WgQsOABgkFKAbDNSfrDgA1SapdrWFbpGSmfPNBdBtV1bnd\/nU0DqQ7bEwC3bQ8fW+92NJfVHuzUEFXIUpdRJORoom63zrjRP8c19yaNZp5OVKszfkLvYHqVIcqE3hCBa","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGODeAbFDMi0F+WguGVRkGGWTvPLHaH7x0BSH+fNH89KudTaXlAEHh9u8k7Bm52tfIMfRldod\/pQBme8ihH7j7pg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xSKAbDNnfrEuw1SapdqRgsEGPm92Bco3JAn6jd2iKU9XPiMoQA2ixwN5BnL9D76g+0NKIfTFe2Et","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIQmaAbFDNi0GCGguGVRlOuV5abANabMeEtdZJg6U0I+HAf\/M6DwyoPmy0+dx3Q7roI1+e7LLmh7eL8\/AJ201Cxf0f","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":131,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHMAAEAAHRH9BwHJAa4KGFK8WgQsOABfsrWAbDNTfrDjw1SapdpvVg0\/+y9cRmLA7Wx+I91UpdvtoBJ1JYcvsM9XN5e4g+K6UOXugClzltthkeXqWVJPlyynC+2mmve0pqBQF7PbISPKEOR4gV3gpJU=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0433{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZNLyAbDNUfrDng1SapdpQTovQzg7MoVsRHhmCkBxP2WKodZzRauSeNSR3CT7YXxEui990I9vvQOXFJ\/G+u4i11p\/\/hPFmUpO+N1UnuRynY2O2dAg=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEtuOAbFDOi0GF2guGVRmURvDI1e8nqs+gDuLPjwfmyyGgofMI6SPx3mMpC1E8FDma9jwWB9F+lqF9m\/Y\/5EQ=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":172,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAPxHbBgoYUrwByQGuLDhaBACIvmmAbFDii0HQ2guGVRkuv8+HQrXtrky6zwJE+VkZz9hpI3K3Ck37cwLlSDSGx0Joy4hn9OG0kr3la3pE4P9eGpuw9slrRDVGKwAvMJxcGhjiF6KF6cju3cDQ6WR7miJ1SWMHRtIo8FYDfHmqTJBIsFMhFojlRpF4rk3kPrP7jrESiQ==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":205,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACpYD+AbFDji0HUmguGVRnwh7SGV1id\/0oSsZAtkQzLkn\/CDsekcOHL3Zg2dGQD4FWbDptR+h5xGfmtAd5x9uYSlftQjlVCnb81HFXC19eHLXSx5BxzUMmGwGdwfy2gR168gsrgx4TZWWZV\/Ut3suRsgJspWTf71NZbPjidGntEbzkv5cYMXMTxqZ7EmtaNRK9S7uTp7Xi8PHUP1AdQLmkW851fnA==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJLtSAbFDPi0GJmguGVRn5GiQFHhZlXflraczG8SfI4L41sdnFU50KZeNhpph\/U+pHy6YSoCi3GZviM6nmezDFkr6Xxw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Z\/6AbDNofrEyg1SapdpHcCELR83\/gzk1Q9Jmn2QKchxxSgpR\/mQsCOj4UUSJXOBekBG64GeECXPm","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/PeAbDNVfrDrQ1SapdqjSl2Mn30Vm6LZDJev8IuiFTkgtwNwFw04KF\/bW4CI0QmAavoKNHMWFEqQ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJDdiAbFDQi0GNWguGVRndWc99cMdFPHDMB0LaQ3UNvogH13HeO1jdbYFVVasgri4\/pcT3R6PzyjH8FMXwmxteK\/DxbA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nXyAbDNWfrDvA1SapdqM7bbQqpTINxg4fsnk1PVn6V\/lFGrlEKjdEbns023xDnSDTXgmA73zakaC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/tKGAbDNpfrE2Q1SapdowcT0jJt6UH546zeBUOLLx3L2nM+bROL0XZjur7d8bL4APCkJQv2xbXTzF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Eq2AbDNXfrDyw1SapdqCML9vTW0ilPwgC543b1Hv3\/hKJQdzWxS5PEURMitrXgXRI0UmaPBwyGJz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABF6MOAbFDRi0GRGguGVRm9jgeDLwJvXh0j6B4GUa2yCEty0FdNLUrmKnIXBSfOjm+hq45CgYkQ4XsCYN+GhXFu","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGq5SAbFDSi0GU2guGVRnlN9gdhliZQwFXKRepmNZcLgLqHWnWLpkrR5raWnx3IBaM5+b7llVyFRri3xAk6vUNMg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/O8uAbDNYfrD2g1SapdrRL4hlROO9+UHeqBnJCxxA7wgJV0s95wkF+uv8FWK3kLpaIfhg8rN1Oq15","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":169,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAPxHbCQoYUrwByQGuLDhaBACFswaAbFDki0HYWguGVRm3AiUBvfi\/iz432midos6TS1FpPKsYDX7jZEQHt602oFz6u9uwgoqO+GxZkdCN2i3cwHrQXucuOSkXUwB5yTMvPo7iBgCgsT3oUIqLK0Y+b9\/TkBuYIvVJrvatESOPS5FzneyJ9q2U2cXOYl4IsJcS5Q==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DIOAbDNqfrE6A1SapdpJ8MbgczU\/T9fD1Ex9M165MNQGvYbBkQtrCtK9CFH0J+ikRMdb+dKGDKBs","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/7OmAbDNZfrD6Q1Sapdqfp5pq80BU\/z5A0JK0tOEhI2go\/7SdYqER+ULessrxp850WzxpkkyFQhpf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKVrGAbFDTi0GYmguGVRkGC3m2JcEkSYvqxd8uGQqzdDZ5ATx0FAxfAsZNnIiMJT3gLUF+Q+IjFyCNuKdxf7B1oYl9+cQ=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDwOOAbFDUi0GcWguGVRlu6oawy8wog3W3XBdmqvC999BEQkSkyXlKhOSLtmN4uRTl\/pWQ7TT3h2y8NOUYRQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/u5yAbDNafrD+A1SapdqGZqWGAvrcsRwPHnKlZaZCk4o6vjKEaagQatuqqMg2dx3tOK1Y9Qw4sgb9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFrJ2AbFDVi0GgGguGVRmgyu176Qf37YheoYqc2uO8BSUgS\/F0RLCL4hPF+5ClX3xaYhs80u8BOJLmS\/sxLNcM","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kKaAbDNbfrEBw1SapdqvBDntR64Cef7IKWi9OfrZ9aTac+hwTehhwfrw\/YfmF9tFtGufYmdFCBVh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/hYaAbDNrfrE9w1SapdqpfAubCHnJsgNeYVvUFmtuoeJ0niR0fZwYVH2NwCJqIDUNYTg\/T9JuN36p","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":128,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHAAAEAAPxHbMgoYUrwByQGuLDhaBABcomiAbFDli0HcGguGVRljb5UZju57DHIir9IdJS88YyDM5C6qtelMJ2j2o3Q1yui1cHGT5tgyiEfDQo63xlyDg+FGBKdp9aB8hqABCEC4rq\/bo376Hbc=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABevT2AbFDmi0Hf2guGVRm3pfJ1hdxxxgjTz1k95KrIFA1Sqc0jkS5W\/Gkt5v3WtwlimCBEu13iOnEQZCYCTB72GsQ2zoNjtPqybzgmlZPgO9Z7xadizu3Y8A==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VyOAbDNcfrEFg1SapdoxsGX70KoUq4TJ7rC59MajzFlAlunTE5YjfSlV91XWdHaMr4K4lEzxkbI8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE2XiAbFDWi0Gj2guGVRlrF8KbobzvZCOmM9v94y1wW3xiGixNP0qxBSQPHuvEV75ADfa7GXBaAdDS9k4opLc=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/v3qAbDNsfrFBg1SapdrXYZNciG7QDAEoKw8NyQTee2+JwoQ\/lzOfDATTedvt\/h1cS2HI3H6Vv15R","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIR3GAbFDXi0GnmguGVRlTPSubgo8cozKaYQwWpaU\/nS6PquJM9fkcwJg8S3YqtN\/0MBj\/9pNuPxddV7UUGofPyvOa","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/kwCAbDNdfrEJQ1Sapdp9K4RTCFA0zl7XFrz6oFMRu83Sm80XsXhjmSDpVFSiNV8Ko0pqNqsg4x7L","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eu+AbDNefrENA1Sapdp3hCFQUkLuNw8vfQOw9o8EBJ5cOHIBeEW\/7vwtikhJdG036yjsk\/xjsDjy","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJi7iAbFDYi0GrWguGVRkBkr20fTGINIsNcdEifhUodK\/AqfSCoI2Gnpydm5IGNRumLmLehDic4WGJ13IzbiANXFgDjg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WkSAbDNtfrFFQ1SapdpFmOzGGHyyz8BIjQ2rJDzhpbkL9BNPdBLcThQ9dk3MgK6fTlWCR\/j8i9Ct","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHBH+FgHJAa4KGFK8WgYoHABQzhaAbFDZi0GvGguGVRllTwTg9Yq3YumRpTXknUohYPk4v3RSDmgEzaEM9m7hWdBa59Mbri\/HTobVRQbvwjdwanXSNWBh13TNkPY=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JxiAbDNffrEQw1SapdpMaurnExSxz6qNCPwlqPbbKtkWCI81DfNy6jXEqVPqlY4ha3kt0b5jB2Xg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABwYxmAbFDni0HjmguGVRlyOS8Gi7118X1\/FjHOx6KSFBayFtO+hkg21swTOopD+IhFXHmNmqEiyti9S\/cpMMbAPMbsEkJxGGbPfy9VcWuFwytjNB0mnqP48w8qu8ldJTULZ2NV9Ev7cQyjVw==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIdkmAbFDoi0HnWguGVRlqS++6\/W5jQ\/tpy8AggAZmwVxvdYv3odf05qGvFGDTFZ\/ttC3g1MGErRLT67SYkImJKTLG","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG0nWAbFDai0Gy2guGVRlb+FpbpmOvnz+h2YeEWWiE5jYkbHi14G\/+7zSBsyYVuFaa4WPc520R\/OabVtew7uWHOg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgUsOQBqG3+ByAAMVJql2jtnI0S3EkPA5GzwOjlP+SaSAYa0BRrMJvukoi3Ky6lJY\/keEd3sGOeJyC2gRmmMv0NykD3PIG2hnSV8iOrz3uOhUqZKKWaa2U2o9U+AAAAJ9Ta537FcpWpYKA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/m52AbDNgfrEUg1SapdrTlDMnFUw+TePrnqyScY26IWXn\/UolakEJaMZb8INOs0CcSF5lJpyUJ0DA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/LViAbDNufrFJA1Sapdpz7QnbC0GBYBSD6aY9LXADkJbCemclTQuSTUi2Qa6VM15Wr+yezx7WJdEZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/L6CAbDNhfrEYQ1SapdqiVOBlpn11bH3Gy8YB1vmDRQxVE4O1H8metwoBHoxtfcyIgXb+c4vF6uuL","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAGxH\/HgHJAa4KGFK8WgYoHABIE+yAbFDbi0G2mguGVRmlOxEKLYdg2rLd+9Q0aahAXk\/aKKpsrm+pDl\/0lqaQPb0UQ+CypmncKSnyK+dk0LT07R4t","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069204,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK58aAbFDci0G6WguGVRleqwWQpdMlJjGDrJxW7S4ZjxdR+VuY6rlRJlqXRLpFg6LH6SM9o2p9KZHzIXijd4qLKVzgpPA=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yJ6AbDNifrEcA1Sapdps4FwlCKi6llxC71JNSgAKvnHIFCUcxQcI1doW74VlcwILWrTG\/Zp6pFvX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqiXqByAAMC4ZVGehx8cHjdW3vi+gkXBtePKq\/tLALngmWQ4CQoPOzlaWrGJJ8rYwDKi5ON2WGsKqglUf7d2Uo6S0ApsBhbVEpv1uqrwNEMi55PemI+d6AAAAJQPYoQCM4F5V6qA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLw76AbFDpi0HrGguGVRl2Gq\/tcVBY3TCRLjZKuLSv81fXLeLTl6v192z6l98LjlkAYQPVWF91dHElCLuhghshuih7MrfQ","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/czqAbDNvfrFMw1Sapdq+ilGhi6F9zNjOIS4oZLfW0GZ6RFqTdcFjEhUbhitBYEIBl9mEno9tYZCS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJJS+AbFDdi0G+GguGVRmg8pZs8hRZQFrxOIxrYca\/jud3GVrN1cuWifEGoOpQ5ereFGzofJDcR7GIoptmURQbgWc3zA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJJ1KAbFDei0HB2guGVRkHLiklZGmT7P1R\/vPZz+pHA5y7q1tDsPSv+4JQyppDFk6XL+HPMy5gmvyIR8OBM5EWe4UzUA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DGWAbDNwfrFQg1SapdrfZC8rIh\/OS1wb9PFF1EZCoV55mxNcbAXa6S1h1ukWRxHcoD3uXt+FfyIo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZjOAbDNjfrEfw1SapdoRXohCYiOg2WoTOPHjK02\/OHEBZKALrjSvZyiDVoA8+Mbedm6GItZlPSAr","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/IJmAbDNkfrEjg1SapdqBtJxSNzubFVzv8TxC6C\/y4XES3vpgTTszV8CTjcGM3h6Ifj\/wbjAiwaYt","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGt5+AbDNlfrEnQ1SapdqD0ZYdCbVu+\/l5dwS7FZCqcIM1UbgyRdUMwd1kn7RUp9gsH2DscogTGNMW6EhssG6nGQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABEF7KAbFDfi0HFmguGVRlnJjYXUzynwI+hX6ViijIkLmbKrLd7NrQk08bLpCRJh09oyaG6FiRcMvLtqge7hew=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":119,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABTt1GAbFDqi0Hu2guGVRmOxzaU+3V8WwiVfaq2b+kbL67GMLH8gtZWWORO5Y65T7fZqeRf\/irPtp3YE77RqYC8YIybo+OxC88QCtsCxPA=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":162,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJIAAEAAPxHbEAoYUrwByQGuLDhaBAB+WOCAbFDri0HymguGVRnGJPkc5BoGgaNqJaH6h8QusGamrXI3pzjfyA5+1Di8dIDZbG3opz3cIqxeMMugHej\/x9taNAwVXJh1eI2RbNbEkpNasi2CUz5PrriuWp\/9PAbCtl5sp5+mKT8SFzeOpXUiIzsSrTNvi6iw","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0755{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV7ykkAALgb+tG5MjzIKGFK8Iynl6dfwq08taZdhgBgAMPV1AAABAQgKRNwK\/QAC1dcXAwEAIGTKUbGsA24bQReNSZgMjw68RVgCjpNHkbLZBsRv8EvkFwMBAQDCegNdSwYyF\/Kg2E3Nk+WueJOFN08DAHsVzTnkQa9NNTh0MVLdk+W8XzoCUOWJrb1DFvA2X1LJI\/0HqbruV2aPjOAzw91QTK156nuFSa1iU1JCVMRFBLbLBpwxbb9r0r5RIhQiWXH8TCXfHs2zw1ruWOzompsCBWpeD\/2PxBnqJrRuVFZe5VbqqRyBPpmxxn35ROoDTXh87tklzI6Qhd+aLx4Oz2IZfHPdfbowQSFPVxDfx71o9wjvNBQdQicsRn84Az6g1t0EuTxqQxk1uXoXBVnYaTuaPAXORMhZBGO2UkUUGG\/BwxlQWtnoORNFpD6Gga3YHp+i0LFBq90lRfRl","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKp0AAQAaVygoYUrxuTI8y5ekjKS1pl2HX8Kx5gBADYFp5AAABAQgKAALW8UTcCv0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw6UAALwZAiG5MjzIKGFK8H5CAyJJ45\/v3EeHUgBAANYmjAAABAQgKRNwK\/QALTvo=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":238,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAN6w6kAALwY\/3W5MjzIKGFK8H5CAyJJ45\/v3EeHUgBgANXiDAAABAQgKRNwK\/QALTvoXAwEAIEpTR7wjsGeg5aEIKVbiQrOuFBH0moy5mlSwlcCpOsQBFwMBAICftBMqOyzVOiugAIydNPE+u8+ZcSpuI3MnMytAgOSje6bi0Rp\/a7+hlAcCBX8nlDKVsGcf5FYxAu97z+47AcmPF6ZUWM2+e6D+I6qCLu25lowfjOYlSJNlDpXrvaJfy6IbwpQQV8BEOqE4wa+ZGu6KDRw5fWkzmMTa1J9Q1fgYtA==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEYHCAbDNmfrErA1Sapdo0bVP7Qe9I7nh9lH+jaZpiRn30JcSoUTBa+ifI\/+zNLyumT0o8YDmEmaB0BhhjSyg=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn+UAAPwb5dwoYUrxuTI8ygMgfkPcR4dSSeOilgBAA6ogBAAABAQgKAAtPPUTcCv0=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDfxeAbFDgi0HJWguGVRnxPczybYVkajLuQCt37tcXrq2Ecti8Kcmmg1VBi1kmZGpbO+xXD4fCenRIQ4IgGA==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/+g2AbDNxfrFUQ1SapdpE1ZGK8L+bFEhJnP3AE+FpG109aTbRm9MnM1wPGpouNdby43wiFvb8BbTo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABF4kOAbFDhi0HNGguGVRm4wO9eeJ1E\/E4cA4vdoSpbGxK\/Wz7pGUviiGLMcRYEC1ffD82TJbtBAsZnB3tq3aaL","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wQiAbDNnfrEuw1SapdqRgsEGPm92Bco3JAn6jd2iKU9XPiMoQA2ixwN5BnL9D76g+0NKIfTFe2Et","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0585{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN5KqEAAQAaVHwoYUrxuTI8y5ekjKS1pl2HX8Kx5gBgDYGfuAAABAQgKAALW9UTcCv0XAwEAIGwpgkcs4jDntveV2SVRFq1R1hFhA2B4Qa6cVKxb67OnFwMBAIDxM5epQhUkoIueNxLQKuNADbsW0zQD2MqycVYEnmIjOa4LWq3l04ktVLkwIiSw+jP4a5FbHrBq7IVjvAG9NB5IMtHdTDULdKXtzCMQQ9h84bbxfZhrxYB4O5dvOJyY\/sLBpHl20oiwP\/3CeMoiPJK+7LxVUbEK7BjKnBSlNeW\/8w==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/W4qAbDNyfrFYA1SapdpcabQ+e6bqXRmCz6heWG7EMT2pzOU43LDs7Mxt03VIXmZpEnBOtz\/VdvMf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7bgSAbFDsi0H2WguGVRl5kSa7p52TMRQ8pkWA9J\/9cabhtMJkiuhzcStBbOt8az3\/j5sVVIhKPDV80WqT24a\/rj53m4Gk3wDsPrmPU3wnAc3TV1SF1GJAbKOPxkclwMAgkS9hIjTSP\/IwL3r71uWuBDpKrewW","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":172,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgYoHACIwoOAbFDii0HQ2guGVRkuv8+HQrXtrky6zwJE+VkZz9hpI3K3Ck37cwLlSDSGx0Joy4hn9OG0kr3la3pE4P9eGpuw9slrRDVGKwAvMJxcGhjiF6KF6cju3cDQ6WR7miJ1SWMHRtIo8FYDfHmqTJBIsFMhFojlRpF4rk3kPrP7jrESiQ==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":174,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAPxHbBAoYUrwByQGuLDhaBACKTjmAbFDti0H6GguGVRmWqmJK4Jrgsmvg56u6tS3ua9zAhNZfdYCVjQjgkUhELfVU4bpKMr3OmbTa+0j36DUiBVgmpKF3+2ZhsKLzTouH5x7rozmVxU0PnMvAXi4Q9UIX9fkoIAHX1BMcWieMkaluaB7gIfgKOEECl8lHWA\/rMdIpYRIN","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":205,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACpZFmAbFDji0HUmguGVRnwh7SGV1id\/0oSsZAtkQzLkn\/CDsekcOHL3Zg2dGQD4FWbDptR+h5xGfmtAd5x9uYSlftQjlVCnb81HFXC19eHLXSx5BxzUMmGwGdwfy2gR168gsrgx4TZWWZV\/Ut3suRsgJspWTf71NZbPjidGntEbzkv5cYMXMTxqZ7EmtaNRK9S7uTp7Xi8PHUP1AdQLmkW851fnA==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Y+SAbDNofrEyg1SapdpHcCELR83\/gzk1Q9Jmn2QKchxxSgpR\/mQsCOj4UUSJXOBekBG64GeECXPm","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/sIeAbDNpfrE2Q1SapdowcT0jJt6UH546zeBUOLLx3L2nM+bROL0XZjur7d8bL4APCkJQv2xbXTzF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0756{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w60AALwY\/XG5MjzIKGFK8H5CAyJJ46KX3EeHUgBgANSLxAAABAQgKRNwLfgALTz0XAwEAIJDVnRK9IO5VH3jsDJxc6GQDeM5Oa37f8J2WxCVNUdbrFwMBAQCgVfRpXtO4ydy5BQt9xzFlnVLBU1ZC6fjIQ+XGuwHrBRdCuLFDtZQrw1N0W\/SrTHNol0PDijS+sQcwCG9h5+atY+6Km+IFSgAhlklu0\/r6Wg2kyg3mc7uKAkfJDYYqhx6V8bTiA00KoQH+PzjD15+cy9ZKwXEUNQJ30qp+JKcCLHyfba+ZRAzi1KgF5zEyhwFVxkP3njfBr+f+eHdHaKC1\/CQLf\/3UEWWk7SdlTvzhNsg1vqme8ncVPYSUirIUqu0AHWEWl2umDHnFJ7oMVxTrqF0rHXd0dpLSGB9N\/xdQ05Vpoxe5OJxBN9dMpqfA3gBz8ajzJNW5Req8CS15DWHV","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADTn+kAAPwb5dgoYUrxuTI8ygMgfkPcR4dSSeOnPgBAA+IY8AAABAQgKAAtPSUTcC34=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/V2CAbDNzfrFbw1SapdpRhsOo6RT5S8L\/CwACP3Wfa+poSao2vy+vk\/+PeFowZ57YDBn+il3XY5b\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0586{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":238,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN7n+0AAPwb4ywoYUrxuTI8ygMgfkPcR4dSSeOnPgBgA+PYgAAABAQgKAAtPSkTcC34XAwEAILD8GvXdV\/myiIuDRQqKZe\/Pcdbwpyaqq9EdZHpep9RDFwMBAICAczvaQr6d1h\/sv7g1Uu0V9Aadu4P29bqPj6z7nWXDu01cuN1PtM+DIUIeXuq1ul1it0FaxppoXou6mD1E9H9U2ZULllnalP5Z1YJL4+ONHHw1DHZ1a9WS0hy0yIWv7CJWE8qN\/833AIXT3nAzCdd3kKZXluqAsAdKZnOerErl+A==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAPxHbNQoYUrwByQGuLDhaBABZ9zKAbFDui0H92guGVRn5OayKSc1F8abGXGXqrMFFY23LruAY4wbBYiolB9ouBfBLBA96Z6X2PyRpXDNtyftkPFHiOQLg\/AlU9rAtFq+dZAJCqmA=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/UweAbDN0frFfg1SapdrzZPNiFeYHf3Zpo2Zq4fGWkublIRyX+H6+RJfxUrmXRowT\/6pKwP+ji4OU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":169,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHBH94QHJAa4KGFK8WgYoHACFtyCAbFDki0HYWguGVRm3AiUBvfi\/iz432midos6TS1FpPKsYDX7jZEQHt602oFz6u9uwgoqO+GxZkdCN2i3cwHrQXucuOSkXUwB5yTMvPo7iBgCgsT3oUIqLK0Y+b9\/TkBuYIvVJrvatESOPS5FzneyJ9q2U2cXOYl4IsJcS5Q==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cDOAbDN1frFjQ1SapdohVPzRFm6ycgGyelYsqj\/ehEPRaJBQ10+6bge0TNt0aIYO7wmXkZlbDzNX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CGmAbDNqfrE6A1SapdpJ8MbgczU\/T9fD1Ex9M165MNQGvYbBkQtrCtK9CFH0J+ikRMdb+dKGDKBs","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/gWyAbDNrfrE9w1SapdqpfAubCHnJsgNeYVvUFmtuoeJ0niR0fZwYVH2NwCJqIDUNYTg\/T9JuN36p","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABRnKKAbFDvi0IBmguGVRnhasDTUxOEnocduGlgETmLYbMUlCt3Sc9nE3+PpaVWb+301hOwV0dlEOhX\/dqjjBOGXtvtxdKXH4Nuv+AO","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":226,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANIAAEAAPxHa0AoYUrwByQGuLDhaBAC+LPGAbFDwi0IFWguGVRmR5O4GhVMQCFZkaJzGlBoEmuL3lMWV81kfvyheEhs5OE6dCU67Z\/W5uKP9tdfUH0BBtjmDfNRdHG9dojLALjAcrwtri1dzBc2hdLMNoGWzgwsB2J+yQDiqWC+TefkJxWWq\/A6xil1EFrKrSzQJ4erWSIBv73pNw8HYeoWf490Rq7pLfC55+Cfqeqly1xoaZQ6b82bmVDW4ArqU25g531hMhTM97DsQo7ULDQ==","pkt_caplen":226,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHAAAEAAHBH+CgHJAa4KGFK8WgYoHABcpoKAbFDli0HcGguGVRljb5UZju57DHIir9IdJS88YyDM5C6qtelMJ2j2o3Q1yui1cHGT5tgyiEfDQo63xlyDg+FGBKdp9aB8hqABCEC4rq\/bo376Hbc=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/jaqAbDN2frFnA1SapdrUIvWpY2aGvr\/5KmFtsSCZbmn0YLLWGUrpM3HNR3inDQidBiPEEM4qAkaz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0439{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABewVeAbFDmi0Hf2guGVRm3pfJ1hdxxxgjTz1k95KrIFA1Sqc0jkS5W\/Gkt5v3WtwlimCBEu13iOnEQZCYCTB72GsQ2zoNjtPqybzgmlZPgO9Z7xadizu3Y8A==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/veeAbDN3frFqw1Sapdp4lzc9YuBzX8ZVDe\/6uNIJW+a+zmosgiEbsjmOwzKOrGKnyQmK23i9LMSW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC17JiAbFDxi0IJGguGVRmTn0pMXjBsuJvk3jrU0KOfzZ\/sKCunV1Qs2JdMFAautyJMz0FkmyzF5zzJvY8RUUi7gAtSuLjaX2PK8MhcCeIKjzUounDNKg0DZxya\/Kiwp9FVsB4Mep4AoqZXaR+QZJG3i4yyk2Aos1z8d2Sz7DP\/wH2B3B+M668vCy\/0A\/9OxUND+Y06OAuFvAMsx06Ff\/JWUfUNaABg2a8QoCI1QHx1MA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACycvOAbFDyi0IM2guGVRneTjk0jotQ1UF2hvXdTuES\/9EHc7KHgKWrtge6tZM+Uj8yM8uEVv\/NrnM+EoDgiDHGf7j8F9+Uo8cWzZZEfiUxgaTtWflkUyR6cQaKSnNlvMrHuumHx6hHYevYfZO9DlxvyeGSK7eSfhtIch1888GpAy2k2OthvEKG6lpkOduq2INUmWO0Uc1ZR7FLPFNb4jrD\/B11YtWeCOdzt3sMBQ==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/u2CAbDNsfrFBg1SapdrXYZNciG7QDAEoKw8NyQTee2+JwoQ\/lzOfDATTedvt\/h1cS2HI3H6Vv15R","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6DqAbDN4frFug1SapdrrJ7\/6FMNsCyOItmPBLp+gPA\/Ox2DeGj9emxQRDKRizctYo\/1CjodBWFQ5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ViqAbDNtfrFFQ1SapdpFmOzGGHyyz8BIjQ2rJDzhpbkL9BNPdBLcThQ9dk3MgK6fTlWCR\/j8i9Ct","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwZzOAbFDni0HjmguGVRlyOS8Gi7118X1\/FjHOx6KSFBayFtO+hkg21swTOopD+IhFXHmNmqEiyti9S\/cpMMbAPMbsEkJxGGbPfy9VcWuFwytjNB0mnqP48w8qu8ldJTULZ2NV9Ev7cQyjVw==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":229,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANUAAEAAPxHazQoYUrwByQGuLDhaBADB9RqAbFDzi0IQmguGVRnybYVnl4JMeNsE9M3xkvI75+\/GgtLx6Uh6NOlKZ3FjBfpyuGkAp25lXhXeQ2DO\/La4ZsdAGU8IXY3x8Z\/irueYrsYd+hMTzUCtqWFRGO+P4+Zecy539Qpt2Cb8fc3QGNKA0a+uEU94Gg67boLnDlIj\/dQe\/qHy4+y2Fdjh8JX\/TsAyVA0CCF1GiKZ82k6DiRxqmhaKGOcttuG\/SuThYhHrCtVq\/Wa6lUWAay1AIA==","pkt_caplen":229,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/QyaAbDN5frFyQ1SapdokbaePz+OD767igueNg7hcd0BUcU8+riZdl2IQJTeMu6mZDch2siCXR7XS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIemOAbFDoi0HnWguGVRlqS++6\/W5jQ\/tpy8AggAZmwVxvdYv3odf05qGvFGDTFZ\/ttC3g1MGErRLT67SYkImJKTLG","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/KT6AbDNufrFJA1Sapdpz7QnbC0GBYBSD6aY9LXADkJbCemclTQuSTUi2Qa6VM15Wr+yezx7WJdEZ","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/gCCAbDN6frF2A1SapdqZZBLZf\/uWYmjSqkmDLFzYhr9GKb03a6bxm4VSrJgMj2r0qfG+cob6SeR6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBqjZSByAAMC4ZVGehx8cHjdW3vi+gkXBtePKq\/tLALngmWQ4CQoPOzlaWrGJJ8rYwDKi5ON2WGsKqglUf7d2Uo6S0ApsBhbVEpv1uqrwNEMi55PemI+d6AAAAJQPYoQCM4F5V6qA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2og6AbFD0i0IUWguGVRldDjO4ur7dfDHoXddo6y8YYOgIkBoh1KbnbpsOk9RmY3ZgHFMwPSUuSUF5sXfWGPV1sgkPhj0grss7DB1E3H\/tYuP2lpeiAQ9NNxcJYOw7UgjYJmOPMDhICoRiW4LSBBLGUVUvm6p\/bT+GSgoWzaYqTdXPlC7QUs3MIrSQaEiEBtXmSl5vS7S8ogjYEnw1uA\/lYKoBaCNtpg3uWQG1Bz2jaSQ=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":203,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALsAAEAAPxHa5woYUrwByQGuLDhaBACn8PaAbFD1i0IYGguGVRmsMlbnxc\/qs7A1btEFT+Jc6G6P8ADg2ocrt4xIRkhEhsXXeWq9oxXBlejOpv4z5XgSKXtbJpj\/dGCsn\/jYTtNmFlPEKYbKZuiNagdJD2xm6sndN\/74xu0ePmfKYz4475UW1IVqx660oABTDiBC0mUxRBs+fkDqmvTuR9KDC2DhNMzHN1r9j+3Qy+ScJgX3MA04CLQ=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sViAbDN7frF5w1SapdpHdZS8WsAoqnZGieSQYGwyi66EovXUiL9HCKzzpnAFAY4JUpo4rPIFrNSC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLx9iAbFDpi0HrGguGVRl2Gq\/tcVBY3TCRLjZKuLSv81fXLeLTl6v192z6l98LjlkAYQPVWF91dHElCLuhghshuih7MrfQ","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/byCAbDNvfrFMw1Sapdq+ilGhi6F9zNjOIS4oZLfW0GZ6RFqTdcFjEhUbhitBYEIBl9mEno9tYZCS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/h36AbDN8frF9g1SapdoVUPtmgWBR4+UyTOoyshOvsz9UVccyJYhs2NHYFxAg8u6vORhFd0hDRvIn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CEuAbDNwfrFQg1SapdrfZC8rIh\/OS1wb9PFF1EZCoV55mxNcbAXa6S1h1ukWRxHcoD3uXt+FfyIo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":185,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKkAAEAAPxHa+QoYUrwByQGuLDhaBACV9reAbFD2i0Ib2guGVRmtVSHJhlYiKiydGcHjwYSpLvy3ekoF4yyvomolBkmYHwJMpACNiPwAyyknsWIA4wKiWE1qlEcJP+O2+nxgvVltz4PZatxi8lp9ioRhmr4rxMPFtlOZgsYHYVQ1uDZN0880zfzkC+\/trUfAFCdbIqXS4WBqBdR9G6OtjoSMllbIuLk=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":171,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJsAAEAAPxHbBwoYUrwByQGuLDhaBACHLlCAbFD3i0IfmguGVRlA17HU1Y5JkXQR2iEu8C4nhCf3Xt6Yu34sGKRYLpn7E97A9uMQM5zxKxSHE8gpZC5X3O5T76V6pIzftE+gpQ2yQGp9aEoZO64QQvqXiPJsdrjTpHLgDtK0+kG3UTqaMqg5tRonFtJalrAmrQmWpF6+inUq","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/xkyAbDN9frGBQ1Sapdq3g8\/BQ1bT65C4Oi\/YX\/LJMbjdbzwYfz1MugvKXPhYsuVPtw0m3qSaGEYb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTu2uAbFDqi0Hu2guGVRmOxzaU+3V8WwiVfaq2b+kbL67GMLH8gtZWWORO5Y65T7fZqeRf\/irPtp3YE77RqYC8YIybo+OxC88QCtsCxPA=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":162,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJIAAEAAHBH96AHJAa4KGFK8WgYoHAB+XPqAbFDri0HymguGVRnGJPkc5BoGgaNqJaH6h8QusGamrXI3pzjfyA5+1Di8dIDZbG3opz3cIqxeMMugHej\/x9taNAwVXJh1eI2RbNbEkpNasi2CUz5PrriuWp\/9PAbCtl5sp5+mKT8SFzeOpXUiIzsSrTNvi6iw","pkt_caplen":162,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/9fOAbDNxfrFUQ1SapdpE1ZGK8L+bFEhJnP3AE+FpG109aTbRm9MnM1wPGpouNdby43wiFvb8BbTo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABeTgSAbFD4i0IjWguGVRlZ\/DRhtkBkp\/0GZ4Bq\/zz+kUFnX5htEHNfK5WDJcAYZoXx7LtYgoK8i9qWHoBz7+Gg9t7w2t9dhs6m7LhrS6hagvLSR3lNx99h7g==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/7v2AbDN+frGFA1Sapdrv0yPgpcrHyN1ov90EZRcFWJ21o06aOOFcJCCAuE61iqtDFz6rlwl5RysD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069205,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/3bqAbDN\/frGIw1SapdqnfTvHtG6Jrgi36HxwPJpva1uHukuhClP1JUPIaZX\/vD90bjn9G8\/Nsk1U","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABw0huAbFD5i0InGguGVRl36TVCrYK4aRboIHQ1sMifLzjT3OMfzMWyB0kTD7NICPJApa+6+d49ypn7wqb+fA7OtM+jHUO1cuX05aVfFAgQJR2+VRl6upAjYjH7BULwaciysrrpz9K10g9Iig==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABP3V2AbFD6i0Iq2guGVRkJFmBBiW2jfP0mVrPWF4azgb3zxkja7OSG4i7ylxkF4OB3FR1j91AfCnbK7vXn8GdTETBcOx1wsmuxDg==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/TyKAbDOAfrGMg1SapdoflydwFyira80CdnEIMWobGjej3SSB+Qsgh2HakfawYkIfBhz56t2Vn9T1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTyk0AALwb+3W5MjzIKGFK8Iynl6dfwrHktaZgLgBAAM58PAAABAQgKRNwOYgAC1vU=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/V3CAbDNyfrFYA1SapdpcabQ+e6bqXRmCz6heWG7EMT2pzOU43LDs7Mxt03VIXmZpEnBOtz\/VdvMf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABD5EyAbFD7i0IumguGVRkaHFtr1P13QAd7vYqRvA11Vie7YzInB14ZBzqobAJg9vCv207uP+\/xiSWdNoJtZA==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOphOAbFD8i0IyWguGVRk2YrzKyGd7+VRWqMk9fKtFRYeCfyvZhEcKyCEk+mUgPHnTIv5cMESM4kKf85idL5Q7\/VASODUuTyxi","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7ch6AbFDsi0H2WguGVRl5kSa7p52TMRQ8pkWA9J\/9cabhtMJkiuhzcStBbOt8az3\/j5sVVIhKPDV80WqT24a\/rj53m4Gk3wDsPrmPU3wnAc3TV1SF1GJAbKOPxkclwMAgkS9hIjTSP\/IwL3r71uWuBDpKrewW","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKQuOAbDOBfrGQQ1Sapdok7V7BYo1BCAlt0\/DGAsAWo87cnpCUwo9HPHrNQNgpb4ubr1ljZBg2JxbJwxQC8fHgXlNhsPU=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGUzaAbDOCfrGUA1SapdoqeScOYbKEloGAvpzZqCHjSw9d001yF5YIeuwCcf4h+urC788AlHZo3PhLhx8yvnuRFxaETr9TWUyYzapDtL6XDI+iRufrwRgrFnu6B2NFhhSEH13DyNWHXxW0Ecf1\/YLhLtg6Ga9r+9HtWVSZIkINCV8=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0495{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHBH93AHJAa4KGFK8WgYoHACKUlOAbFDti0H6GguGVRmWqmJK4Jrgsmvg56u6tS3ua9zAhNZfdYCVjQjgkUhELfVU4bpKMr3OmbTa+0j36DUiBVgmpKF3+2ZhsKLzTouH5x7rozmVxU0PnMvAXi4Q9UIX9fkoIAHX1BMcWieMkaluaB7gIfgKOEECl8lHWA\/rMdIpYRIN","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":211,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMMAAEAAPxHa3woYUrwByQGuLDhaBACvz3mAbFD9i0I2GguGVRkUtlBFIU0SakFBSWYHbHeJycHWzOSwaxXeKQYXB5arTv7QGc2yVK4FG7Ho4c70kXYuF7UqY3OcAHIAk+8uyCGWiL7Hy1ymfLNUKvd2afYbdu72i\/hVQ9mwNjwN\/a2Lyf\/R9idTGso\/EKcfRDTS4CMkkH3xjzFVT5m2XYBU9pa7KuWAhUimxwxKKxw5VciJXli\/zH+3I5dLKKVplw==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":192,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALAAAEAAQBHZ8goYUrwByQGuKBxaBgCcdLGAbDODfrGXw1SapdpFLlER9f7h+Vw5gA7oLOZLGZNDDPQAgdcSBhg9SSOI2Ao0O6O8oHcp4Xjv75n1YjiEAYmUdEwo0Img2\/jK0E5PNbLN6owcTEajf65nAULUAZboziFp34P3REkWlPYZMB4CyNT0gqRNYh3QahOl\/VPo+oBlv560gb0J6cLK5xND3tlV6XkgDC6G","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/U0aAbDNzfrFbw1SapdpRhsOo6RT5S8L\/CwACP3Wfa+poSao2vy+vk\/+PeFowZ57YDBn+il3XY5b\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":191,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAQBHZ8woYUrwByQGuKBxaBgCbM02AbDOEfrGbg1SapdpLI1QEQ4B6geG1WctuBwLPJbnjvyRNhGF0K3Vpc2YLagZbwlUT4W0VyLF8LwjvKgfNboud4fF61CJNlD9JGRuoW85xZLV1V1U5pazH9HLxbeE91bj3w5Crzndry0\/zgITvazKhQuYMLm+oSf86Qy\/z9bAD6ITJGS6d\/XeDzR29VC+yVGo3p\/E=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHBH+DQHJAa4KGFK8WgYoHABZ+0yAbFDui0H92guGVRn5OayKSc1F8abGXGXqrMFFY23LruAY4wbBYiolB9ouBfBLBA96Z6X2PyRpXDNtyftkPFHiOQLg\/AlU9rAtFq+dZAJCqmA=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChDlCAbFD+i0I52guGVRnOg+2eLVjH9sUoAhN2RUXvS8DRhr\/9xTMy65fD+9p9vBUZZjmKVh5Bq2zmQRBu85aeFxgLeMGpyMm6xMTssEDmszKcprcf\/b+fApxEkJ4iwagTB5\/PpzOvPLoY3ALSuxyJDydq1+auJDghaI3UG51zKcpCojzwnZNrkXMt1mVTry\/if\/wPKUCUh0QcVLM=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":205,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACpRoKAbFD\/i0I9mguGVRnALERgB2IlOz+fgCpJoHn6xOdkQd55nmTK0PYYkES9TlIQSa\/Yexgly1wDmS\/ngQAePkd18e+OfLQ8G1\/3p8x8yntLa7qs243w692HTMbU77J0DcINi61\/vftK6mbGxjlht3yqa9dNiHjweqTRIR7vJg2vVc9M1N9QOPQNie6\/wvgEKbrLTB6Qab4h8T1HNh59FNlQtg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADSw7EAALwZAhW5MjzIKGFK8H5CAyJJ46c\/3EeJ+gBAAOIJAAAABAQgKRNwPjwALT0o=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/Tu2AbDN0frFfg1SapdrzZPNiFeYHf3Zpo2Zq4fGWkublIRyX+H6+RJfxUrmXRowT\/6pKwP+ji4OU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bBmAbDN1frFjQ1SapdohVPzRFm6ycgGyelYsqj\/ehEPRaJBQ10+6bge0TNt0aIYO7wmXkZlbDzNX","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":191,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAQBHZ8woYUrwByQGuKBxaBgCb+raAbDOFfrGfQ1Sapdrt+AFBX1m9ZqhrpFCOBf0lFfOsZpOEya\/D9SlKd1tuGHvcyM55QBQBJyalufFJCQmrtqRdt5NzO4oziYMzLli8RX4aATBIjvM3rY4CjaBosF\/PaNTaD235ooOij9BWwhLaC8lffDtGAnoNGHexcx8oMiRBTPFE55ZUxyl8JsNcU5k1rxxWx1M=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHBH+FQHJAa4KGFK8WgYoHABRoLyAbFDvi0IBmguGVRnhasDTUxOEnocduGlgETmLYbMUlCt3Sc9nE3+PpaVWb+301hOwV0dlEOhX\/dqjjBOGXtvtxdKXH4Nuv+AO","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0568{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":226,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANIAAEAAHBH9qAHJAa4KGFK8WgYoHAC+MQuAbFDwi0IFWguGVRmR5O4GhVMQCFZkaJzGlBoEmuL3lMWV81kfvyheEhs5OE6dCU67Z\/W5uKP9tdfUH0BBtjmDfNRdHG9dojLALjAcrwtri1dzBc2hdLMNoGWzgwsB2J+yQDiqWC+TefkJxWWq\/A6xil1EFrKrSzQJ4erWSIBv73pNw8HYeoWf490Rq7pLfC55+Cfqeqly1xoaZQ6b82bmVDW4ArqU25g531hMhTM97DsQo7ULDQ==","pkt_caplen":226,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/iZCAbDN2frFnA1SapdrUIvWpY2aGvr\/5KmFtsSCZbmn0YLLWGUrpM3HNR3inDQidBiPEEM4qAkaz","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/uc2AbDN3frFqw1Sapdp4lzc9YuBzX8ZVDe\/6uNIJW+a+zmosgiEbsjmOwzKOrGKnyQmK23i9LMSW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAQBHZ+woYUrwByQGuKBxaBgCThAuAbDOGfrGjA1SapdpkqC\/mvIxOuX5n\/lr882A4iSosbA3WI2o5nRjqhGc0VG69KhQQORQYrTfzfdev\/K9Gotk2E0q2Dj8StF6ltbjSA2xjsvLtZ8nLI6CuZUbwogTfN5kzMwqu9qIyIAOYZzK7B5rpu2ohsX7p5mho9HgiTc2OYsZ+FBPBmS79lKmo","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":194,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACenfOAbFEAi0JBWguGVRn8KXno7uu6a378Nd0pYK7Z4pbvhEohF5D7Rr5Bb5+uplBAbymd54yscyPqvqAhoSFR5DSJOHxORJD+1aPSGuyXrAqlUjp5BN1CGVdqFUDMVPfX9ATBgh3tu9okSd0Xa3Mw0JgTtmI\/gLfWdYJXU1PW1tBdAhmx3ELP9BzGByOZA60dUiyyO8sIPYU=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":191,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAPxHa8woYUrwByQGuLDhaBACbx3KAbFEBi0JFGguGVRnsSzyJuEc1N8joxjP3VYzegR6Kiyql59EmZXclUy6JkwqZeLw7zS502QTcbLZbL292Dm\/1MJxR5qH7GaV9JDSpNALf+7+qAobJZrTqETBXIX\/TsoLV8eitW49AiO06g4+10GBc1l0I2i9xSzdLsQ8hyI8bRrBiuMTBOjM52vubT9hmk2WaZeo=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":174,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJ4AAEAAQBHaBAoYUrwByQGuKBxaBgCK+bKAbDOHfrGmw1SapdqZ7DpDYAPJi71TrnZcWl4ZUTqrkRUEgptgtrpMOA\/dVFqXIh9HC0nCO\/xgsQg3E7C1K3rF37XQgPO7R0uZeSF2YKcZQ1h7EQIEv9H67o2Y06rRAv2di4zX0fLc96pjCh49ZLX5VypBLsq120YlQ6TNjxXyhc9T","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC18LKAbFDxi0IJGguGVRmTn0pMXjBsuJvk3jrU0KOfzZ\/sKCunV1Qs2JdMFAautyJMz0FkmyzF5zzJvY8RUUi7gAtSuLjaX2PK8MhcCeIKjzUounDNKg0DZxya\/Kiwp9FVsB4Mep4AoqZXaR+QZJG3i4yyk2Aos1z8d2Sz7DP\/wH2B3B+M668vCy\/0A\/9OxUND+Y06OAuFvAMsx06Ff\/JWUfUNaABg2a8QoCI1QHx1MA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACydw2AbFDyi0IM2guGVRneTjk0jotQ1UF2hvXdTuES\/9EHc7KHgKWrtge6tZM+Uj8yM8uEVv\/NrnM+EoDgiDHGf7j8F9+Uo8cWzZZEfiUxgaTtWflkUyR6cQaKSnNlvMrHuumHx6hHYevYfZO9DlxvyeGSK7eSfhtIch1888GpAy2k2OthvEKG6lpkOduq2INUmWO0Uc1ZR7FLPFNb4jrD\/B11YtWeCOdzt3sMBQ==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5CCAbDN4frFug1SapdrrJ7\/6FMNsCyOItmPBLp+gPA\/Ox2DeGj9emxQRDKRizctYo\/1CjodBWFQ5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAQBHaAQoYUrwByQGuKBxaBgCNZUSAbDOIfrGqg1SapdoiJqHTYTmQeeCBt3Qyykj88js0zhR6mQzdA2NQfuQZDFXMq8C4Ii2fnBmNq+J0z7y87zC7\/BrCoQpT9VJ9c1YD2W1mQbyOlhIPOtcWdkCEGrNy61GXpXVklkhARnoHj0EykAgWuzQt0r8J+ZNa452L99AoHZZp2cTD","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAPxHa\/goYUrwByQGuLDhaBACQ2BeAbFECi0JI2guGVRn2xP7JqlHuxy25mNEUlOvyjYhssIJxB7chfzfXUZ2i5xEDXV\/hBDdRZArziNtJUBCmTfn8j\/1S78yGX0GyoSkp858Sf+gfumTrLVeU24IXNzEymJZXAGPwQFZohaodFv1RUTscr9jQU2XuSn5oQtYd7cerIc3XF9Uy3APz","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0578{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":229,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANUAAEAAHBH9pQHJAa4KGFK8WgYoHADB+TSAbFDzi0IQmguGVRnybYVnl4JMeNsE9M3xkvI75+\/GgtLx6Uh6NOlKZ3FjBfpyuGkAp25lXhXeQ2DO\/La4ZsdAGU8IXY3x8Z\/irueYrsYd+hMTzUCtqWFRGO+P4+Zecy539Qpt2Cb8fc3QGNKA0a+uEU94Gg67boLnDlIj\/dQe\/qHy4+y2Fdjh8JX\/TsAyVA0CCF1GiKZ82k6DiRxqmhaKGOcttuG\/SuThYhHrCtVq\/Wa6lUWAay1AIA==","pkt_caplen":229,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjqAuAbFEDi0JMmguGVRm8OkZHQ+K8VE2MC2TQvKyF1X3nG\/8ML0EIHrgaplPEHXxKQWlGTQvWFKr6xMhgrUBTJXxsqHu2134kFKVl1xpnKAAHhwllC9Zxs22EnE7xAHCX1s\/UiSPbNUF8tYZCkYSEB+o8OdgZMRlzyTirYyQA9UX6D51bjqSBOG3dDNtYT2vAmOprAxu2DTjlaIEJBA==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/PwyAbDN5frFyQ1SapdokbaePz+OD767igueNg7hcd0BUcU8+riZdl2IQJTeMu6mZDch2siCXR7XS","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/fAaAbDN6frF2A1SapdqZZBLZf\/uWYmjSqkmDLFzYhr9GKb03a6bxm4VSrJgMj2r0qfG+cob6SeR6","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2piiAbFD0i0IUWguGVRldDjO4ur7dfDHoXddo6y8YYOgIkBoh1KbnbpsOk9RmY3ZgHFMwPSUuSUF5sXfWGPV1sgkPhj0grss7DB1E3H\/tYuP2lpeiAQ9NNxcJYOw7UgjYJmOPMDhICoRiW4LSBBLGUVUvm6p\/bT+GSgoWzaYqTdXPlC7QUs3MIrSQaEiEBtXmSl5vS7S8ogjYEnw1uA\/lYKoBaCNtpg3uWQG1Bz2jaSQ=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0538{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":203,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALsAAEAAHBH9vwHJAa4KGFK8WgYoHACn9RCAbFD1i0IYGguGVRmsMlbnxc\/qs7A1btEFT+Jc6G6P8ADg2ocrt4xIRkhEhsXXeWq9oxXBlejOpv4z5XgSKXtbJpj\/dGCsn\/jYTtNmFlPEKYbKZuiNagdJD2xm6sndN\/74xu0ePmfKYz4475UW1IVqx660oABTDiBC0mUxRBs+fkDqmvTuR9KDC2DhNMzHN1r9j+3Qy+ScJgX3MA04CLQ=","pkt_caplen":203,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":180,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKQAAEAAQBHZ\/goYUrwByQGuKBxaBgCQ1LOAbDOJfrGuQ1SapdrFVSNn5UH3ywm7uvR\/e6+9c20NFNs4Ab9TCBVICbSkBPILf49xAPderPb8cpvUqS2YfqMOELpQ2Qt6KbzAbh2qX5M\/dxPSWz9oNe6tPV2kqAzabQxafRHCfl3\/01UpUvsFm7M4PSPNjTqZ6rTXhhsWpEm4OM3wNtMQ8iUX","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rT6AbDN7frF5w1SapdpHdZS8WsAoqnZGieSQYGwyi66EovXUiL9HCKzzpnAFAY4JUpo4rPIFrNSC","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBAChpOeAbFEEi0JQWguGVRl3OJ20mhZJB\/bzWs6I8wbnxY4XhZCwKXPFMupAKpluO4y+rVBfv7588z9NAIzmW+43pDcZ+roQLwrLQfZSpFhEWlsep2oz5oaKN7BZCJ2e0sVD\/rTHjpauaEQKT1S3+4BkrbrNtlFx1IeS5YdNaiMiOLIPsUl5d9Z5x8bjzwDpLluMdpgZbkQBGX2xDwc=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAQBHZ6woYUrwByQGuKBxaBgCj8uCAbDOKfrGyA1Sapdp\/ee01sGDYlVTvqoOHjGqLB8r4UOrigoIYcorAw0oayzNEpUJAPtQ0WEtaVa4Ifp9\/MsYpweDZfmqvTLF1wec3XQ1z7tvJj0l5X75kLu1dhxkUN6Uf1WAf4IGnMGyW9\/vi1oOKMDAzyT7LP1NvHO9ZOtaOGq82ae2h+mIJSevFo1dhcB63fAkqNISsmanPRg==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/g2SAbDN8frF9g1SapdoVUPtmgWBR4+UyTOoyshOvsz9UVccyJYhs2NHYFxAg8u6vORhFd0hDRvIn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":185,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKkAAEAAHBH90QHJAa4KGFK8WgYoHACV+tGAbFD2i0Ib2guGVRmtVSHJhlYiKiydGcHjwYSpLvy3ekoF4yyvomolBkmYHwJMpACNiPwAyyknsWIA4wKiWE1qlEcJP+O2+nxgvVltz4PZatxi8lp9ioRhmr4rxMPFtlOZgsYHYVQ1uDZN0880zfzkC+\/trUfAFCdbIqXS4WBqBdR9G6OtjoSMllbIuLk=","pkt_caplen":185,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0490{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":171,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJsAAEAAHBH93wHJAa4KGFK8WgYoHACHMmqAbFD3i0IfmguGVRlA17HU1Y5JkXQR2iEu8C4nhCf3Xt6Yu34sGKRYLpn7E97A9uMQM5zxKxSHE8gpZC5X3O5T76V6pIzftE+gpQ2yQGp9aEoZO64QQvqXiPJsdrjTpHLgDtK0+kG3UTqaMqg5tRonFtJalrAmrQmWpF6+inUq","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/wjKAbDN9frGBQ1Sapdq3g8\/BQ1bT65C4Oi\/YX\/LJMbjdbzwYfz1MugvKXPhYsuVPtw0m3qSaGEYb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABeUh6AbFD4i0IjWguGVRlZ\/DRhtkBkp\/0GZ4Bq\/zz+kUFnX5htEHNfK5WDJcAYZoXx7LtYgoK8i9qWHoBz7+Gg9t7w2t9dhs6m7LhrS6hagvLSR3lNx99h7g==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAQBHaAQoYUrwByQGuKBxaBgCNVueAbDOLfrG1w1SapdrXnBoWl4o8j7nzHCptGEWRA6H+xAasbgF6KFmUPL9ubI+m2c6c5vLfxccHckeIacALvYeswQkIlIcY+hPHlKBqwyWIAHogEv0nhH+8y5wlVN0j0Okoaa83OIZA964vThQgwqEaCuW3pbGUaWnEcwahRNfVPlj4KK1u","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/6uOAbDN+frGFA1Sapdrv0yPgpcrHyN1ov90EZRcFWJ21o06aOOFcJCCAuE61iqtDFz6rlwl5RysD","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":206,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqrr+AbFEFi0JUGguGVRmw3Cb0lQUKR4CG3tnELJ3Z0Q6F8rzpVhD13GcwSEdlmCozi3Zd\/ox1vhowwHhTtHCVuOifdszRJO49PGV2KOeHvvoCcrmuxDzXuC7CnP+cOjMGhgnSpugSZyRjlMhX6h8\/HfKjBAnillYBuqTjXmz3+Og3zUFAf\/OeER5Bd+5PqIRlBCDwtd6y5UWHLjgHZMAwSkhMZyU=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/2aCAbDN\/frGIw1SapdqnfTvHtG6Jrgi36HxwPJpva1uHukuhClP1JUPIaZX\/vD90bjn9G8\/Nsk1U","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACN8vqAbFEGi0JX2guGVRlzglOVU\/d++BqaMLUnTgJrZyX3Vx0\/TgopYac3wtzmOGCxBcGlpWpsFrgn3MT0jBTlGR6+XcyQhw6FQ28HCeEbijf\/gC2htn8e910MewvmgcitfFO1ilb8Zh6YcCFnLRygxnzf792af3u\/ydgi9Oqz3GEC5ThAcWYd","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":190,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK4AAEAAQBHZ9AoYUrwByQGuKBxaBgCa+pyAbDOMfrG5g1Sapdp9UmwLvjWg9vHaBpOnFX8TGRdSaZqE6KbeVj8W8twKM6K69mYBwIU4No0k6PDUqad56H2Z3+WEm\/Vd6D8HT25oPY196rnU2vhqNm7J9jSo7awBWPQ9+IbL3yliCtBPCcKdmutOu4qunQLlSrqD+a7XOAOgzcTKwrfslt+P5JqU4xB8sbV8SQ==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABw1jWAbFD5i0InGguGVRl36TVCrYK4aRboIHQ1sMifLzjT3OMfzMWyB0kTD7NICPJApa+6+d49ypn7wqb+fA7OtM+jHUO1cuX05aVfFAgQJR2+VRl6upAjYjH7BULwaciysrrpz9K10g9Iig==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHBH+FwHJAa4KGFK8WgYoHABP4XeAbFD6i0Iq2guGVRkJFmBBiW2jfP0mVrPWF4azgb3zxkja7OSG4i7ylxkF4OB3FR1j91AfCnbK7vXn8GdTETBcOx1wsmuxDg==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/SwiAbDOAfrGMg1SapdoflydwFyira80CdnEIMWobGjej3SSB+Qsgh2HakfawYkIfBhz56t2Vn9T1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABD6GaAbFD7i0IumguGVRkaHFtr1P13QAd7vYqRvA11Vie7YzInB14ZBzqobAJg9vCv207uP+\/xiSWdNoJtZA==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOqi2AbFD8i0IyWguGVRk2YrzKyGd7+VRWqMk9fKtFRYeCfyvZhEcKyCEk+mUgPHnTIv5cMESM4kKf85idL5Q7\/VASODUuTyxi","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":178,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIAAEAAQBHaAAoYUrwByQGuKBxaBgCOjpuAbDONfrG9Q1SapdqirIw3z7DmcVm0LZAwWuTW3i+FWvsSpByzHPnBni0Rabln\/QVKopN+USp2AnhKp23drG9+8u1msElOrMmJUvRFtQHt8vto3jvzRudC5z8Pf2SpOF1jEaUIpTpQmsA7aaTHV1pWtkcbR7n+10n14761reRz+tIFS4KhjQ==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":198,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACignGAbFEHi0JbmguGVRlO1UlvL\/GFQKSUD12ayIVEIGFU73oU27vwDIAVBWVFofIUAmL1ITS+mkELZTIA5CHCGKonoFqzXoJcng5uwJmy1kad52Di\/Fw0VqRylQnQCWdLLpQvADNofFzLQ6CEc9viQJ99nMnvbgUZdzMLrsqHeAX4QTImob6XM4QbLTiWcp5FkFluIgJUJxHyanJH","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjrZqAbFEIi0JfWguGVRl+SCjYpvOcLa4O8MY9IeT1EVZF+OSsHy3Ty2gBr8GhW2yVOr5U8vwiuMoSOfZmJQulsTCe4a80sDxlp59vjdZawPGr07490VaRNNmOdNHWxPXwX0bGAEtkekjUuCWhHeOOupcjthRgDnyhi\/dfXB2kxeOptEdikBxxJL2KZl5bBQRwK6n7OKW3Ir4p\/Qu39w==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKPsmAbDOBfrGQQ1Sapdok7V7BYo1BCAlt0\/DGAsAWo87cnpCUwo9HPHrNQNgpb4ubr1ljZBg2JxbJwxQC8fHgXlNhsPU=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGTxyAbDOCfrGUA1SapdoqeScOYbKEloGAvpzZqCHjSw9d001yF5YIeuwCcf4h+urC788AlHZo3PhLhx8yvnuRFxaETr9TWUyYzapDtL6XDI+iRufrwRgrFnu6B2NFhhSEH13DyNWHXxW0Ecf1\/YLhLtg6Ga9r+9HtWVSZIkINCV8=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0551{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":211,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMMAAEAAHBH9twHJAa4KGFK8WgYoHACv05OAbFD9i0I2GguGVRkUtlBFIU0SakFBSWYHbHeJycHWzOSwaxXeKQYXB5arTv7QGc2yVK4FG7Ho4c70kXYuF7UqY3OcAHIAk+8uyCGWiL7Hy1ymfLNUKvd2afYbdu72i\/hVQ9mwNjwN\/a2Lyf\/R9idTGso\/EKcfRDTS4CMkkH3xjzFVT5m2XYBU9pa7KuWAhUimxwxKKxw5VciJXli\/zH+3I5dLKKVplw==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWFT6AbDOOfrHBA1SapdosNS2h+ky\/bgjOr76J4aXdKODoq3DusdCf0NeXKFbMkP2hpF\/uQcADRdOv9YRm4Nw3I7tN2JvF8R\/Z7rQ85IgSjOuhQ04SSND5y3fX84bcWDI55+EYO0mhG+Sm5s+EcNBgAYDZfupzMHVzEDSDd2PRVXEUoYZsjUisq3pM3QgQ6RRe","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":192,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALAAAEAAHRH8ygHJAa4KGFK8WgQsOACccJeAbDODfrGXw1SapdpFLlER9f7h+Vw5gA7oLOZLGZNDDPQAgdcSBhg9SSOI2Ao0O6O8oHcp4Xjv75n1YjiEAYmUdEwo0Img2\/jK0E5PNbLN6owcTEajf65nAULUAZboziFp34P3REkWlPYZMB4CyNT0gqRNYh3QahOl\/VPo+oBlv560gb0J6cLK5xND3tlV6XkgDC6G","pkt_caplen":192,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAQBHaAQoYUrwByQGuKBxaBgCNwqGAbDOPfrHEw1SapdrpeTS1KJWf8lr+I0zwr\/rBH3fK3HN9WnknfuYYsOrmnD0Q1y\/RnaWFHQJQq0xfB\/ZJslNX1DclWXF1d1GVNnqW6Tmwf9QpPWTFJA4WQN9QCD+hW\/oBaklCy2hNn2i\/WGgxDmF0vbardfE3VrbOUgtjh3zZmyyvwHCi","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":224,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANAAAEAAPxHa0goYUrwByQGuLDhaBAC8sRKAbFEJi0JjGguGVRmG2xMk5GmPe53BOPvwupzgQbDJOdRBDvwrFMNChhRT24POX6Xeya7RGHylA4Dsu0Dp2zyfW6RrIXl4wslJR\/o+udVfH\/mVtNKwm8pIGRS5R7iugLFJYF5gBArQd0DjoZh10MKHZlBevNEMXAyfdbsyw1k\/e1tAvHHCKLwappMhxDWVQzy3pHc1cDTXKwrlevdjlSyqNuDeG2fmsVQ2ZW0K7PhYfDylWgk=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":191,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHRH8ywHJAa4KGFK8WgQsOACbLzOAbDOEfrGbg1SapdpLI1QEQ4B6geG1WctuBwLPJbnjvyRNhGF0K3Vpc2YLagZbwlUT4W0VyLF8LwjvKgfNboud4fF61CJNlD9JGRuoW85xZLV1V1U5pazH9HLxbeE91bj3w5Crzndry0\/zgITvazKhQuYMLm+oSf86Qy\/z9bAD6ITJGS6d\/XeDzR29VC+yVGo3p\/E=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChEmqAbFD+i0I52guGVRnOg+2eLVjH9sUoAhN2RUXvS8DRhr\/9xTMy65fD+9p9vBUZZjmKVh5Bq2zmQRBu85aeFxgLeMGpyMm6xMTssEDmszKcprcf\/b+fApxEkJ4iwagTB5\/PpzOvPLoY3ALSuxyJDydq1+auJDghaI3UG51zKcpCojzwnZNrkXMt1mVTry\/if\/wPKUCUh0QcVLM=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069206,"pkt_len":205,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACpSpyAbFD\/i0I9mguGVRnALERgB2IlOz+fgCpJoHn6xOdkQd55nmTK0PYYkES9TlIQSa\/Yexgly1wDmS\/ngQAePkd18e+OfLQ8G1\/3p8x8yntLa7qs243w692HTMbU77J0DcINi61\/vftK6mbGxjlht3yqa9dNiHjweqTRIR7vJg2vVc9M1N9QOPQNie6\/wvgEKbrLTB6Qab4h8T1HNh59FNlQtg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":191,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHRH8ywHJAa4KGFK8WgQsOACb9pyAbDOFfrGfQ1Sapdrt+AFBX1m9ZqhrpFCOBf0lFfOsZpOEya\/D9SlKd1tuGHvcyM55QBQBJyalufFJCQmrtqRdt5NzO4oziYMzLli8RX4aATBIjvM3rY4CjaBosF\/PaNTaD235ooOij9BWwhLaC8lffDtGAnoNGHexcx8oMiRBTPFE55ZUxyl8JsNcU5k1rxxWx1M=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":70,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOxkAAQAYrcQoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtktBAAABAQgKAALXrcwmIb5QFA==","pkt_caplen":70,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":201,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALkAAEAAQBHZ6QoYUrwByQGuKBxaBgClKH+AbDOQfrHIg1SapdqTaIpJhHXK75Cjo5yZH2wSv9OXYoLMH74CLYyGRjRtNQ+eGmRpe9jrv3qSZ1BcQOCCLFK9fG6zkuzkZx1wfFOWBWncHbDIJWeMLgZEWVv6VKbikfjSNEg+NDthvGlMTtVZPCzGad5tBkKgLuwK2DHvZ3SqoI1VyUmAoYn8veNjg5MQ1+KXPIU0OT7ypn1h9j6p","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAPxHa+AoYUrwByQGuLDhaBACWFQiAbFEKi0Jm2guGVRmHzbXSXx0XwlR9rxVInWmMvcZOnkWREngHnTQ3RuGKO9wQun4r9xQG2fcScsbC2y99PaBlTBzo90jgt+57KlENHKrPJpEy781A8vjVtRh+XLJqvoEvnFelwSEbqPDZUnaJC80Ud+xtKDbIBdT\/9yNub8vqJDFyuBatFaGmWQ8D8gH3","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":212,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAPxHa3goYUrwByQGuLDhaBACw9lKAbFELi0JqmguGVRm+oMq\/9ZU3fAvoExSOz1KhRGn341B+AJF8eo8J0jaVgKUOjfBuLHuQrU6VGXarQ5inxj7WOpPP5UmzOIQ3hYdORnHW91x\/XiEKnLJIQ\/aR+JMhrP9wBjXoZtMNEotPCu91k7P1HT\/bCpWlHnYK9OyXLO4F2znEGVb3Kom95ezFZX7mmiP7igPyLbfLXTXmJ7uZgGMFwbLQ4UU72IA=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHRH80wHJAa4KGFK8WgQsOACTf\/GAbDOGfrGjA1SapdpkqC\/mvIxOuX5n\/lr882A4iSosbA3WI2o5nRjqhGc0VG69KhQQORQYrTfzfdev\/K9Gotk2E0q2Dj8StF6ltbjSA2xjsvLtZ8nLI6CuZUbwogTfN5kzMwqu9qIyIAOYZzK7B5rpu2ohsX7p5mho9HgiTc2OYsZ+FBPBmS79lKmo","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0523{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":194,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAGxH+yAHJAa4KGFK8WgYoHACeog2AbFEAi0JBWguGVRn8KXno7uu6a378Nd0pYK7Z4pbvhEohF5D7Rr5Bb5+uplBAbymd54yscyPqvqAhoSFR5DSJOHxORJD+1aPSGuyXrAqlUjp5BN1CGVdqFUDMVPfX9ATBgh3tu9okSd0Xa3Mw0JgTtmI\/gLfWdYJXU1PW1tBdAhmx3ELP9BzGByOZA60dUiyyO8sIPYU=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":188,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKwAAEAAQBHZ9goYUrwByQGuKBxaBgCYyDKAbDORfrHMQ1SapdpBdf5FAi\/lGM+HkD1RV+wOBoYN+cEEXqJiHfz\/aj+vKaR2GszSRmmc8et1GsO5ehrhezaBn+rNi+7n\/UHFgj8gfze6K4EjnV1tsitenIIbusmG0B8\/q9cNwZN1JUFlkw4OLlv1473D4UB\/uQq4ZeWAp3xHoG31leHb5TJs2XtbY+vjo54=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":172,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAQBHaBgoYUrwByQGuKBxaBgCIcOGAbDOSfrHQA1Sapdrx72Jw9dFeai\/oCQs7Y30t8IEvzm1I9PE0pBD7mQD9LnzkMjS6kEHA\/KzVqyrHWZ0hkHVoVkSC+bXW0UMed3bMxXNSQJmOKjPQx2QyEfA1fP8DSuyoMzU5PM43ZjthRH9rOMIodUC\/bHRWWhcmjlQZW9Ws6Q==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":191,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHBH9ywHJAa4KGFK8WgYoHACby4yAbFEBi0JFGguGVRnsSzyJuEc1N8joxjP3VYzegR6Kiyql59EmZXclUy6JkwqZeLw7zS502QTcbLZbL292Dm\/1MJxR5qH7GaV9JDSpNALf+7+qAobJZrTqETBXIX\/TsoLV8eitW49AiO06g4+10GBc1l0I2i9xSzdLsQ8hyI8bRrBiuMTBOjM52vubT9hmk2WaZeo=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":208,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMAAAEAAPxHa4goYUrwByQGuLDhaBACsRyCAbFEMi0JuWguGVRkKNfcZicImodKUCsPK+lqnuKycrjuMJaZuYbBvgNWi9k1+c1wG9f4FSZRBJNzmXYzTqAG701YxCvRKH3A2mVGNoJd9eDkmjq7+Qz90+YHsIHftdGMOXY9279x6y0Lfka79ZKyg3Rj3+Tu3lgaFLvUeZy\/stlewto6bxriOUfm6VZv0s++bq3nhmKig6S360\/MtIoHd\/zZHCQ==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZWKOAbFENi0JyGguGVRnHAsvmWNBOTC34Dufv1BeWnM4eRwYu4Uu1kX5PqF3AXGjfsx6m8FAMN2TKmPkKWQdhkKkrfPFxXrazGJK2m0JdyFJqtWKToWZNfHMQIDGG3tUlue0BqqkkjsEutrrw+BOhKPzFW8tT5cPE8OBujDYZqXnDAEuGOZhrllbxbKktgArYaD\/5","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":174,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJ4AAEAAHRH83AHJAa4KGFK8WgQsOACK9ZiAbDOHfrGmw1SapdqZ7DpDYAPJi71TrnZcWl4ZUTqrkRUEgptgtrpMOA\/dVFqXIh9HC0nCO\/xgsQg3E7C1K3rF37XQgPO7R0uZeSF2YKcZQ1h7EQIEv9H67o2Y06rRAv2di4zX0fLc96pjCh49ZLX5VypBLsq120YlQ6TNjxXyhc9T","pkt_caplen":174,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3npaAbDOTfrHTw1SapdpLnFm7nhgDWBKMSZFEEubFvUuYZ31EsL\/uLUsQlIuLuVbtxMh2MKVDXt9kzd6L8ZychPKpdk97NXYfYptBB\/VL2G3yHz3bclhfjLDGgASOTEYGTD0LRvEElKb0L2f3JwxHifA=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHRH82QHJAa4KGFK8WgQsOACNYSqAbDOIfrGqg1SapdoiJqHTYTmQeeCBt3Qyykj88js0zhR6mQzdA2NQfuQZDFXMq8C4Ii2fnBmNq+J0z7y87zC7\/BrCoQpT9VJ9c1YD2W1mQbyOlhIPOtcWdkCEGrNy61GXpXVklkhARnoHj0EykAgWuzQt0r8J+ZNa452L99AoHZZp2cTD","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHBH91gHJAa4KGFK8WgYoHACQ3DGAbFECi0JI2guGVRn2xP7JqlHuxy25mNEUlOvyjYhssIJxB7chfzfXUZ2i5xEDXV\/hBDdRZArziNtJUBCmTfn8j\/1S78yGX0GyoSkp858Sf+gfumTrLVeU24IXNzEymJZXAGPwQFZohaodFv1RUTscr9jQU2XuSn5oQtYd7cerIc3XF9Uy3APz","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjrCWAbFEDi0JMmguGVRm8OkZHQ+K8VE2MC2TQvKyF1X3nG\/8ML0EIHrgaplPEHXxKQWlGTQvWFKr6xMhgrUBTJXxsqHu2134kFKVl1xpnKAAHhwllC9Zxs22EnE7xAHCX1s\/UiSPbNUF8tYZCkYSEB+o8OdgZMRlzyTirYyQA9UX6D51bjqSBOG3dDNtYT2vAmOprAxu2DTjlaIEJBA==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":137,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHkAAEAAQBHaKQoYUrwByQGuKBxaBgBlJ1WAbDOUfrHXg1Sapdq\/+kHvxxrftZXWAFo3dyHYMshELR6dk1kmJhwjjV\/HtqlWQpTg78SI5AvIosrKMvH+QFUNLeBeVAqSuYky3IFV+5\/Lv6cbt5wvaKqDR\/wdkZ8=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":177,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKEAAEAAPxHbAQoYUrwByQGuLDhaBACN5BSAbFEOi0J12guGVRlptj6C47q42A0lEUxdJNhr+cGAiaIC\/AKAWqtPDZ9mT3pTYPUoGipPE2RyHgzMNsOVeRuGs+Fa8GSbgdLej3Wr8OxaoRZqfgq5k6JPhIvhAQJ7PjvwRyF2FEy6bhjOOliZiUlrMDUNE9MnwlFnvv6H3BrdgX3uCrlL","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":180,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKQAAEAAHRH81gHJAa4KGFK8WgQsOACQ0JmAbDOJfrGuQ1SapdrFVSNn5UH3ywm7uvR\/e6+9c20NFNs4Ab9TCBVICbSkBPILf49xAPderPb8cpvUqS2YfqMOELpQ2Qt6KbzAbh2qX5M\/dxPSWz9oNe6tPV2kqAzabQxafRHCfl3\/01UpUvsFm7M4PSPNjTqZ6rTXhhsWpEm4OM3wNtMQ8iUX","pkt_caplen":180,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHAChqQGAbFEEi0JQWguGVRl3OJ20mhZJB\/bzWs6I8wbnxY4XhZCwKXPFMupAKpluO4y+rVBfv7588z9NAIzmW+43pDcZ+roQLwrLQfZSpFhEWlsep2oz5oaKN7BZCJ2e0sVD\/rTHjpauaEQKT1S3+4BkrbrNtlFx1IeS5YdNaiMiOLIPsUl5d9Z5x8bjzwDpLluMdpgZbkQBGX2xDwc=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHRH8wwHJAa4KGFK8WgQsOACj7saAbDOKfrGyA1Sapdp\/ee01sGDYlVTvqoOHjGqLB8r4UOrigoIYcorAw0oayzNEpUJAPtQ0WEtaVa4Ifp9\/MsYpweDZfmqvTLF1wec3XQ1z7tvJj0l5X75kLu1dhxkUN6Uf1WAf4IGnMGyW9\/vi1oOKMDAzyT7LP1NvHO9ZOtaOGq82ae2h+mIJSevFo1dhcB63fAkqNISsmanPRg==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0498{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHRH82QHJAa4KGFK8WgQsOACNUs2AbDOLfrG1w1SapdrXnBoWl4o8j7nzHCptGEWRA6H+xAasbgF6KFmUPL9ubI+m2c6c5vLfxccHckeIacALvYeswQkIlIcY+hPHlKBqwyWIAHogEv0nhH+8y5wlVN0j0Okoaa83OIZA964vThQgwqEaCuW3pbGUaWnEcwahRNfVPlj4KK1u","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqstmAbFEFi0JUGguGVRmw3Cb0lQUKR4CG3tnELJ3Z0Q6F8rzpVhD13GcwSEdlmCozi3Zd\/ox1vhowwHhTtHCVuOifdszRJO49PGV2KOeHvvoCcrmuxDzXuC7CnP+cOjMGhgnSpugSZyRjlMhX6h8\/HfKjBAnillYBuqTjXmz3+Og3zUFAf\/OeER5Bd+5PqIRlBCDwtd6y5UWHLjgHZMAwSkhMZyU=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":165,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJUAAEAAQBHaDQoYUrwByQGuKBxaBgCBotSAbDOVfrHbQ1SapdrVjpnP0wKJ3KDpeq8lbPc92vZ+TWtGFQHWd1I+Ws4XejwhCOF5rVupzl8POfsc0cfIf1J0wXaPYsBTC+xkKYjKYt6Wcf9gMQ5QEXGxvPhzQ9YyN+5aBFNZi1L0cCEJcgbBHqjBOTqRH8J3GpkT","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACN9xSAbFEGi0JX2guGVRlzglOVU\/d++BqaMLUnTgJrZyX3Vx0\/TgopYac3wtzmOGCxBcGlpWpsFrgn3MT0jBTlGR6+XcyQhw6FQ28HCeEbijf\/gC2htn8e910MewvmgcitfFO1ilb8Zh6YcCFnLRygxnzf792af3u\/ydgi9Oqz3GEC5ThAcWYd","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":158,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI4AAEAAPxHbFAoYUrwByQGuLDhaBAB63fCAbFEPi0J5mguGVRmK+cOCCbH859vi4c9Di\/eY87gu6mpdlyeK2lJEEu9d\/Xujo7UzBGApQFzxINyEVLU9bMNjp05TXyJ5L+MaHL8HOPHCg\/Hlm8fD5XKgB8+toaOV0NfFENFq0sZnJHOCds3DP+IwvX8=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":223,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7eGOAbFEQi0J9WguGVRlMtv7kFuNJERUUHNHDMxspiFITKgHN8uV5vjiPqUJY\/DCUWttRlqzps9yQOCs8uxntI91Qbc8N0dr6WLQlWhwo8e56jZaM6nPdD0bhP3DjkzkzXTv41EMyr9BdCTn2pzaSfJzDSeZnRUL4IJ7Ude65YtxsGjDOHRSk\/OXcflbczk13kIquP9NkF222jW5TQHcLhfIh6DmxD16wSzG2HwZ5yDhy8eGp\/w==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":190,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK4AAEAAHRH8zAHJAa4KGFK8WgQsOACa9oKAbDOMfrG5g1Sapdp9UmwLvjWg9vHaBpOnFX8TGRdSaZqE6KbeVj8W8twKM6K69mYBwIU4No0k6PDUqad56H2Z3+WEm\/Vd6D8HT25oPY196rnU2vhqNm7J9jSo7awBWPQ9+IbL3yliCtBPCcKdmutOu4qunQLlSrqD+a7XOAOgzcTKwrfslt+P5JqU4xB8sbV8SQ==","pkt_caplen":190,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":178,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKIAAEAAHRH82AHJAa4KGFK8WgQsOACOioGAbDONfrG9Q1SapdqirIw3z7DmcVm0LZAwWuTW3i+FWvsSpByzHPnBni0Rabln\/QVKopN+USp2AnhKp23drG9+8u1msElOrMmJUvRFtQHt8vto3jvzRudC5z8Pf2SpOF1jEaUIpTpQmsA7aaTHV1pWtkcbR7n+10n14761reRz+tIFS4KhjQ==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":154,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIoAAEAAQBHaGAoYUrwByQGuKBxaBgB2QKmAbDOWfrHfA1Sapdp7opMnMlg6aKYNHfum5YuHt3Ms3VdsGvUFij4xEdIKXjQIxe9\/x8F4GSL9ToKrHIK8ZMSZC7DrSagEDAhKtvaHHfyj\/wlBJ5zNpAnT0o7jl728s2xKQ\/cysA3GXiQsUHAq5g==","pkt_caplen":154,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":198,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACihouAbFEHi0JbmguGVRlO1UlvL\/GFQKSUD12ayIVEIGFU73oU27vwDIAVBWVFofIUAmL1ITS+mkELZTIA5CHCGKonoFqzXoJcng5uwJmy1kad52Di\/Fw0VqRylQnQCWdLLpQvADNofFzLQ6CEc9viQJ99nMnvbgUZdzMLrsqHeAX4QTImob6XM4QbLTiWcp5FkFluIgJUJxHyanJH","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjsbSAbFEIi0JfWguGVRl+SCjYpvOcLa4O8MY9IeT1EVZF+OSsHy3Ty2gBr8GhW2yVOr5U8vwiuMoSOfZmJQulsTCe4a80sDxlp59vjdZawPGr07490VaRNNmOdNHWxPXwX0bGAEtkekjUuCWhHeOOupcjthRgDnyhi\/dfXB2kxeOptEdikBxxJL2KZl5bBQRwK6n7OKW3Ir4p\/Qu39w==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACWESSAbDOOfrHBA1SapdosNS2h+ky\/bgjOr76J4aXdKODoq3DusdCf0NeXKFbMkP2hpF\/uQcADRdOv9YRm4Nw3I7tN2JvF8R\/Z7rQ85IgSjOuhQ04SSND5y3fX84bcWDI55+EYO0mhG+Sm5s+EcNBgAYDZfupzMHVzEDSDd2PRVXEUoYZsjUisq3pM3QgQ6RRe","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHRH82QHJAa4KGFK8WgQsOACNvoeAbDOPfrHEw1SapdrpeTS1KJWf8lr+I0zwr\/rBH3fK3HN9WnknfuYYsOrmnD0Q1y\/RnaWFHQJQq0xfB\/ZJslNX1DclWXF1d1GVNnqW6Tmwf9QpPWTFJA4WQN9QCD+hW\/oBaklCy2hNn2i\/WGgxDmF0vbardfE3VrbOUgtjh3zZmyyvwHCi","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":230,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANYAAEAAPxHazAoYUrwByQGuLDhaBADCET+AbFERi0KBGguGVRlo5OJPBxs2VZLpofB4wWN0IlSxDsak7K7s+7XZwPeGuL3wx6eGUwx2RpZkQFRAMGYhHucQD7THtD7f7iIwIifhEvN6HnxnnmJAMqCrJwxhj2yjvO+ilhPjAhSznYoRxTdT2ckUjJDKvwnjYyRIwoOl8\/\/66\/5enTRze6\/\/JYRMPokjBTLglrXXuW7t2ibzXxhkfuYQ5itUiapX1lbdDqr5tWBmutIi5qMz2uL+gSQ=","pkt_caplen":230,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":212,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMQAAEAAPxHa3goYUrwByQGuLDhaBACwj0qAbFESi0KE2guGVRlyRRbinmyhITujoN9JakdKDiXRVm60pdEgSfP\/CJRR9P\/5c1HSwKOpIs3BNFeENpl8uETdrvinBQE09sv69VzWKeE1DbQlj2rqmq5zjhSPrF1X34bDoNIcVsakZ913vUyI7NxK+BEvCFGOeSIseqoMme828BVi1tXeyIY4PWMOEjfCW3GHZF6UYx+grGXV2Jdwlajhrfmvosd0k6g=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":224,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANAAAEAAHBH9qgHJAa4KGFK8WgYoHAC8tSyAbFEJi0JjGguGVRmG2xMk5GmPe53BOPvwupzgQbDJOdRBDvwrFMNChhRT24POX6Xeya7RGHylA4Dsu0Dp2zyfW6RrIXl4wslJR\/o+udVfH\/mVtNKwm8pIGRS5R7iugLFJYF5gBArQd0DjoZh10MKHZlBevNEMXAyfdbsyw1k\/e1tAvHHCKLwappMhxDWVQzy3pHc1cDTXKwrlevdjlSyqNuDeG2fmsVQ2ZW0K7PhYfDylWgk=","pkt_caplen":224,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAQBHaMAoYUrwByQGuKBxaBgBe+TWAbDOXfrHiw1Sapdr6cw3lMk667z7\/Vs4Ah84DZ3CtMSf5ZB++GRG79TWhH\/+9ZUqzWUHbdKFMMyji+ym3hJ49UrOyznptH6j4qTIAEyahQvZLDWObkg==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":201,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALkAAEAAHRH8wQHJAa4KGFK8WgQsOAClJGWAbDOQfrHIg1SapdqTaIpJhHXK75Cjo5yZH2wSv9OXYoLMH74CLYyGRjRtNQ+eGmRpe9jrv3qSZ1BcQOCCLFK9fG6zkuzkZx1wfFOWBWncHbDIJWeMLgZEWVv6VKbikfjSNEg+NDthvGlMTtVZPCzGad5tBkKgLuwK2DHvZ3SqoI1VyUmAoYn8veNjg5MQ1+KXPIU0OT7ypn1h9j6p","pkt_caplen":201,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHBH90AHJAa4KGFK8WgYoHACWGSKAbFEKi0Jm2guGVRmHzbXSXx0XwlR9rxVInWmMvcZOnkWREngHnTQ3RuGKO9wQun4r9xQG2fcScsbC2y99PaBlTBzo90jgt+57KlENHKrPJpEy781A8vjVtRh+XLJqvoEvnFelwSEbqPDZUnaJC80Ud+xtKDbIBdT\/9yNub8vqJDFyuBatFaGmWQ8D8gH3","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":212,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHBH9tgHJAa4KGFK8WgYoHACw+myAbFELi0JqmguGVRm+oMq\/9ZU3fAvoExSOz1KhRGn341B+AJF8eo8J0jaVgKUOjfBuLHuQrU6VGXarQ5inxj7WOpPP5UmzOIQ3hYdORnHW91x\/XiEKnLJIQ\/aR+JMhrP9wBjXoZtMNEotPCu91k7P1HT\/bCpWlHnYK9OyXLO4F2znEGVb3Kom95ezFZX7mmiP7igPyLbfLXTXmJ7uZgGMFwbLQ4UU72IA=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0519{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKwAAEAAHRH8zgHJAa4KGFK8WgQsOACYxBiAbDORfrHMQ1SapdpBdf5FAi\/lGM+HkD1RV+wOBoYN+cEEXqJiHfz\/aj+vKaR2GszSRmmc8et1GsO5ehrhezaBn+rNi+7n\/UHFgj8gfze6K4EjnV1tsitenIIbusmG0B8\/q9cNwZN1JUFlkw4OLlv1473D4UB\/uQq4ZeWAp3xHoG31leHb5TJs2XtbY+vjo54=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":143,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBrRuKAbDOYfrHmg1Sapdp3mPjHQXcMEa0TnooOdapQBkt7YklnXh\/yNb2zEtPRlkhuFwp17L8SIGB3C8FIY9\/j7u2RS4IdowohddPXifrN6sY\/eHZZGmCDia7b3Q81YvusHgSCxcg=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":172,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHRH83gHJAa4KGFK8WgQsOACIbMeAbDOSfrHQA1Sapdrx72Jw9dFeai\/oCQs7Y30t8IEvzm1I9PE0pBD7mQD9LnzkMjS6kEHA\/KzVqyrHWZ0hkHVoVkSC+bXW0UMed3bMxXNSQJmOKjPQx2QyEfA1fP8DSuyoMzU5PM43ZjthRH9rOMIodUC\/bHRWWhcmjlQZW9Ws6Q==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":205,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACp62SAbFETi0KImguGVRlQtZ\/843fYhK2HbZ1jmym1hCw5HXWVEvmm5T6YA0els3DZMS+fIzAaGoJu9Ye+FLbBl86dQZyK8eyuR5gnQ3qC8qyHSuqW7C7M5w\/13RxBDY7GKa6mr7zvbbiK8LeOcWrO9YblUzeMPDANhwts1PJ7uzPLfZzczJDJok14\/\/rbKvRaEVy5ifRiduUdfIn6pvwLallCXg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":208,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMAAAEAAHBH9ugHJAa4KGFK8WgYoHACsSzqAbFEMi0JuWguGVRkKNfcZicImodKUCsPK+lqnuKycrjuMJaZuYbBvgNWi9k1+c1wG9f4FSZRBJNzmXYzTqAG701YxCvRKH3A2mVGNoJd9eDkmjq7+Qz90+YHsIHftdGMOXY9279x6y0Lfka79ZKyg3Rj3+Tu3lgaFLvUeZy\/stlewto6bxriOUfm6VZv0s++bq3nhmKig6S360\/MtIoHd\/zZHCQ==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":143,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH8AAEAAQBHaIwoYUrwByQGuKBxaBgBr0quAbDOZfrHqQ1Sapdq0xHt5Ak2DEB7obGkXKeea9EdNjkgFmzhSEBJ02oGdcFva4JMzxaL7V2NZUT20M6lDUmE+lh106BKYBFMK\/WJTFwzd\/2sn0qHI4vFsW6lFu\/L9IR0dmsg=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0515{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZXL2AbFENi0JyGguGVRnHAsvmWNBOTC34Dufv1BeWnM4eRwYu4Uu1kX5PqF3AXGjfsx6m8FAMN2TKmPkKWQdhkKkrfPFxXrazGJK2m0JdyFJqtWKToWZNfHMQIDGG3tUlue0BqqkkjsEutrrw+BOhKPzFW8tT5cPE8OBujDYZqXnDAEuGOZhrllbxbKktgArYaD\/5","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":155,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3mnyAbDOTfrHTw1SapdpLnFm7nhgDWBKMSZFEEubFvUuYZ31EsL\/uLUsQlIuLuVbtxMh2MKVDXt9kzd6L8ZychPKpdk97NXYfYptBB\/VL2G3yHz3bclhfjLDGgASOTEYGTD0LRvEElKb0L2f3JwxHifA=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":135,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHcAAEAAQBHaKwoYUrwByQGuKBxaBgBj7oKAbDOafrHuA1SapdoQckiWCh9YDMkpQfGjfdw6At6F1O4CMyg\/QhGRE8oj9BVWNufBXGvPL4OlDKZcgU0Iuc3rVFoQtxL4JAK3RMLCarz7ji2uqrhju4oCeMST","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0450{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHkAAEAAHRH9AQHJAa4KGFK8WgQsOABlIzuAbDOUfrHXg1Sapdq\/+kHvxxrftZXWAFo3dyHYMshELR6dk1kmJhwjjV\/HtqlWQpTg78SI5AvIosrKMvH+QFUNLeBeVAqSuYky3IFV+5\/Lv6cbt5wvaKqDR\/wdkZ8=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":177,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKEAAEAAHBH92QHJAa4KGFK8WgYoHACN6C6AbFEOi0J12guGVRlptj6C47q42A0lEUxdJNhr+cGAiaIC\/AKAWqtPDZ9mT3pTYPUoGipPE2RyHgzMNsOVeRuGs+Fa8GSbgdLej3Wr8OxaoRZqfgq5k6JPhIvhAQJ7PjvwRyF2FEy6bhjOOliZiUlrMDUNE9MnwlFnvv6H3BrdgX3uCrlL","pkt_caplen":177,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":165,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJUAAEAAHRH85QHJAa4KGFK8WgQsOACBnrqAbDOVfrHbQ1SapdrVjpnP0wKJ3KDpeq8lbPc92vZ+TWtGFQHWd1I+Ws4XejwhCOF5rVupzl8POfsc0cfIf1J0wXaPYsBTC+xkKYjKYt6Wcf9gMQ5QEXGxvPhzQ9YyN+5aBFNZi1L0cCEJcgbBHqjBOTqRH8J3GpkT","pkt_caplen":165,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0477{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":158,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI4AAEAAHBH97AHJAa4KGFK8WgYoHAB64gqAbFEPi0J5mguGVRmK+cOCCbH859vi4c9Di\/eY87gu6mpdlyeK2lJEEu9d\/Xujo7UzBGApQFzxINyEVLU9bMNjp05TXyJ5L+MaHL8HOPHCg\/Hlm8fD5XKgB8+toaOV0NfFENFq0sZnJHOCds3DP+IwvX8=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":126,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG4AAEAAPxHbNAoYUrwByQGuLDhaBABaiUCAbFEUi0KMWguGVRlvDr6E4m8JihHGHjSLAIR3fHnS1fRoQ8a2zbszH\/tG2dJfUP0+SIOSeoxj7vQSRktQUcHf4UUGzqlN6PfVQCOGxdnyA1Eh","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJUx2AbFEVi0KQGguGVRkK3PYXSaOXyPp3zzMAdKlByOpbmx0YbqsYCtTOTZN4dtRs9Wqp4SkdhDkg5qlwAJUGMd4d7w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":223,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7fH2AbFEQi0J9WguGVRlMtv7kFuNJERUUHNHDMxspiFITKgHN8uV5vjiPqUJY\/DCUWttRlqzps9yQOCs8uxntI91Qbc8N0dr6WLQlWhwo8e56jZaM6nPdD0bhP3DjkzkzXTv41EMyr9BdCTn2pzaSfJzDSeZnRUL4IJ7Ude65YtxsGjDOHRSk\/OXcflbczk13kIquP9NkF222jW5TQHcLhfIh6DmxD16wSzG2HwZ5yDhy8eGp\/w==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":118,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGYAAEAAQBHaPAoYUrwByQGuKBxaBgBSU9mAbDObfrHxw1SapdrnEG0wHGhImckWVo+caYuPReB8fd2G4v8oG5twxcP4g4nL3cDaYluFtFiVRDI5vtHBHf5zIgTPZ80Nm6mypQ==","pkt_caplen":118,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0473{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":154,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIoAAEAAHRH88AHJAa4KGFK8WgQsOAB2PI+AbDOWfrHfA1Sapdp7opMnMlg6aKYNHfum5YuHt3Ms3VdsGvUFij4xEdIKXjQIxe9\/x8F4GSL9ToKrHIK8ZMSZC7DrSagEDAhKtvaHHfyj\/wlBJ5zNpAnT0o7jl728s2xKQ\/cysA3GXiQsUHAq5g==","pkt_caplen":154,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/KxyAbDOcfrH1g1SapdodUmZZ5tSz8rtDOoQjvB7p14B9F5lx2oOai5pHQaO4bnd5kFjKV2DbNdsY","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKuY2AbFEWi0KT2guGVRlfCWE+YAj\/ZMCrjeYHyIJB8wxrdszT5fNOoFBsd5PJVXSIiJGyvvMl0NQcRHCWD0vElOBVb5A=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":161,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJEAAEAAPxHbEQoYUrwByQGuLDhaBAB9Xe2AbFEXi0KXmguGVRkkH3IZS48+GZwdy+ApT0ziPGqJ+OpOER+Y0iG\/0\/ET9dXo8USC6+ILBEYSfrLeqyU7cgxF4z0AtvqkN0IqJr7CijKHZRst9TzUAPITZ6LRLgOOtbzHymy73jckeYcEHvcra9a2tBh7GzM=","pkt_caplen":161,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0575{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":230,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANYAAEAAHBH9pAHJAa4KGFK8WgYoHADCFVmAbFERi0KBGguGVRlo5OJPBxs2VZLpofB4wWN0IlSxDsak7K7s+7XZwPeGuL3wx6eGUwx2RpZkQFRAMGYhHucQD7THtD7f7iIwIifhEvN6HnxnnmJAMqCrJwxhj2yjvO+ilhPjAhSznYoRxTdT2ckUjJDKvwnjYyRIwoOl8\/\/66\/5enTRze6\/\/JYRMPokjBTLglrXXuW7t2ibzXxhkfuYQ5itUiapX1lbdDqr5tWBmutIi5qMz2uL+gSQ=","pkt_caplen":230,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":212,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMQAAEAAHBH9tgHJAa4KGFK8WgYoHACwk2SAbFESi0KE2guGVRlyRRbinmyhITujoN9JakdKDiXRVm60pdEgSfP\/CJRR9P\/5c1HSwKOpIs3BNFeENpl8uETdrvinBQE09sv69VzWKeE1DbQlj2rqmq5zjhSPrF1X34bDoNIcVsakZ913vUyI7NxK+BEvCFGOeSIseqoMme828BVi1tXeyIY4PWMOEjfCW3GHZF6UYx+grGXV2Jdwlajhrfmvosd0k6g=","pkt_caplen":212,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EJOAbDOdfrH5Q1SapdoQHzwW24RXleKbwZbzZ8x1K4k6AJUY3Z1EDfULjXYluGd9idykee71C0qu","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHRH9CAHJAa4KGFK8WgQsOABe9RuAbDOXfrHiw1Sapdr6cw3lMk667z7\/Vs4Ah84DZ3CtMSf5ZB++GRG79TWhH\/+9ZUqzWUHbdKFMMyji+ym3hJ49UrOyznptH6j4qTIAEyahQvZLDWObkg==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":143,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHRH8+wHJAa4KGFK8WgQsOABrQsiAbDOYfrHmg1Sapdp3mPjHQXcMEa0TnooOdapQBkt7YklnXh\/yNb2zEtPRlkhuFwp17L8SIGB3C8FIY9\/j7u2RS4IdowohddPXifrN6sY\/eHZZGmCDia7b3Q81YvusHgSCxcg=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2J2eAbFEYi0KbWguGVRlaw\/arl9QR6CoMghfQBFVVY8owgJ0hvu89aDxpNPMLHUEoVJJSKy+KIWI\/oDxVdDDB6zhDBV3wf8G4gPJ3\/5VBCjWhaFfr8hEEr6BLoQm+Q9niwpiXUUTTsSaM9W1P5emTsWHp8yVKwdsvhv06ihhPwhjpd6xGYn\/hpnmrSC5wHMqutYn9G3nfWaXVBtsow\/xutDHy\/znQBfWLWdyBs7vvO60=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":205,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACp736AbFETi0KImguGVRlQtZ\/843fYhK2HbZ1jmym1hCw5HXWVEvmm5T6YA0els3DZMS+fIzAaGoJu9Ye+FLbBl86dQZyK8eyuR5gnQ3qC8qyHSuqW7C7M5w\/13RxBDY7GKa6mr7zvbbiK8LeOcWrO9YblUzeMPDANhwts1PJ7uzPLfZzczJDJok14\/\/rbKvRaEVy5ifRiduUdfIn6pvwLallCXg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/K9CAbDOefrH9A1Sapdqg8n4T1KiBxicD3SORY9nI1awDhRjsNHBNYkDuC8iW6yh+LpC\/MRk81CWH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":143,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH8AAEAAHBH9+wHJAa4KGFK8WgQsOABrzpGAbDOZfrHqQ1Sapdq0xHt5Ak2DEB7obGkXKeea9EdNjkgFmzhSEBJ02oGdcFva4JMzxaL7V2NZUT20M6lDUmE+lh106BKYBFMK\/WJTFwzd\/2sn0qHI4vFsW6lFu\/L9IR0dmsg=","pkt_caplen":143,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":135,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHcAAEAAHRH9AwHJAa4KGFK8WgQsOABj6miAbDOafrHuA1SapdoQckiWCh9YDMkpQfGjfdw6At6F1O4CMyg\/QhGRE8oj9BVWNufBXGvPL4OlDKZcgU0Iuc3rVFoQtxL4JAK3RMLCarz7ji2uqrhju4oCeMST","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":126,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG4AAEAAHBH+DAHJAa4KGFK8WgYoHABajVqAbFEUi0KMWguGVRlvDr6E4m8JihHGHjSLAIR3fHnS1fRoQ8a2zbszH\/tG2dJfUP0+SIOSeoxj7vQSRktQUcHf4UUGzqlN6PfVQCOGxdnyA1Eh","pkt_caplen":126,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/3lOAbDOffrIAw1SapdoxyO3fX1j5qt6ONN2lKHV3iJBR0tsGRi7uNrovTY1CUFQ3\/CGG05A5i75D","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJVzeAbFEVi0KQGguGVRkK3PYXSaOXyPp3zzMAdKlByOpbmx0YbqsYCtTOTZN4dtRs9Wqp4SkdhDkg5qlwAJUGMd4d7w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":118,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGYAAEAAHRH9FAHJAa4KGFK8WgQsOABST7+AbDObfrHxw1SapdrnEG0wHGhImckWVo+caYuPReB8fd2G4v8oG5twxcP4g4nL3cDaYluFtFiVRDI5vtHBHf5zIgTPZ80Nm6mypQ==","pkt_caplen":118,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/JwKAbDOcfrH1g1SapdodUmZZ5tSz8rtDOoQjvB7p14B9F5lx2oOai5pHQaO4bnd5kFjKV2DbNdsY","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":213,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMUAAEAAPxHa3QoYUrwByQGuLDhaBACxzeGAbFEZi0KfGguGVRmA\/HFgAK++\/pZ\/UQPJ7ErH8ro8MHI+bLD30uaCfXtJ7\/QCHML0vywIEKPJ+iHGW7FJ\/JQSA1NZGc+TlHBYBDIa7ox8e1Pq\/a80uI8D5Eb7CSsVoVr0Sc4EsJvgvA68H8\/FWitOWmf6dkjo1V996feJX7t9hDrYYIK12\/3XSpGbl0vhAAbcYmh\/6QVmWJ0Q3+TiV9mXKHzltS5K\/e3s","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":225,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANEAAEAAPxHa0QoYUrwByQGuLDhaBAC9Iu2AbFEai0Ki2guGVRnNE2otm000E0TBGopGfgHrnPVu9x+fKxkYlT3X6btUr6F7xGy6czBi8SPFPu661f8c05XG1OjJUnMJEfsaEwPPPRF3zfN5HVbSLv+MkIkMKnhv83KRAkvaCaHKLFR0LT6ghOUHbCLQUMMjLCpMLBkhS499kzib7ZESQ9bgpzuBMzsi3frz96woGWfP\/IbCcF3Dgy2McR\/LOl5qU1ow92x0Not25qxE02IO","pkt_caplen":225,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKvaeAbFEWi0KT2guGVRlfCWE+YAj\/ZMCrjeYHyIJB8wxrdszT5fNOoFBsd5PJVXSIiJGyvvMl0NQcRHCWD0vElOBVb5A=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":161,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJEAAEAAHBH96QHJAa4KGFK8WgYoHAB9YgeAbFEXi0KXmguGVRkkH3IZS48+GZwdy+ApT0ziPGqJ+OpOER+Y0iG\/0\/ET9dXo8USC6+ILBEYSfrLeqyU7cgxF4z0AtvqkN0IqJr7CijKHZRst9TzUAPITZ6LRLgOOtbzHymy73jckeYcEHvcra9a2tBh7GzM=","pkt_caplen":161,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DHmAbDOdfrH5Q1SapdoQHzwW24RXleKbwZbzZ8x1K4k6AJUY3Z1EDfULjXYluGd9idykee71C0qu","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069207,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5kKAbDOgfrIEg1SapdqkJdMJcgBZxvJx6x0+zHeW0vFhE\/\/Swe9lsOWBbl\/FaeMAJB9GhQt\/aDf4","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2K4GAbFEYi0KbWguGVRlaw\/arl9QR6CoMghfQBFVVY8owgJ0hvu89aDxpNPMLHUEoVJJSKy+KIWI\/oDxVdDDB6zhDBV3wf8G4gPJ3\/5VBCjWhaFfr8hEEr6BLoQm+Q9niwpiXUUTTsSaM9W1P5emTsWHp8yVKwdsvhv06ihhPwhjpd6xGYn\/hpnmrSC5wHMqutYn9G3nfWaXVBtsow\/xutDHy\/znQBfWLWdyBs7vvO60=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/Yr6AbDOhfrIIQ1SapdrhW8OA+io7qLgntZBULvdBApHv3IIbjWuZdsiNZEkrJVDNxV09Djabt7a8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0546{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAPxHa4AoYUrwByQGuLDhaBACuu\/mAbFEbi0KmmguGVRnRHLKq0YRCKGygBV+fkGZlb88sS6fayoPRw4FvOirF\/ulbmvPm8lzVl0O\/sgK+3pZEhNdP1UANf7fOw\/4XMf3JNXJ5j9WM20DdoDoj2pXPR+OVm8nB9+z4Z8K6p6tycCRMRKgKFtULofG7Rk+exrn8upCHqFMsMU162ZOqhhViMP3Y1ksNonTnyxvvjok4EBB0B8JdhkycxwAg","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALQAAEAAPxHa7goYUrwByQGuLDhaBACgxj2AbFEci0KqWguGVRn0w5KHoaiel542zSCPNWGuAwD8UIXLbqTAtjeJWcero1Cr7kLqxkvHHJEIW\/tVv0VFMt7mjDxTbRnsUXXvO3xFfWwZQDMaxeweFwnYsPRRjO0MqZvjB5aYhj0fhjif4Co2g6ZnG20GO7mRoXimJhaqsoS2SDONE0oHE4zaQMzoD6zL+xRmHceb4XHiYw==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/J7aAbDOefrH9A1Sapdqg8n4T1KiBxicD3SORY9nI1awDhRjsNHBNYkDuC8iW6yh+LpC\/MRk81CWH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/2jmAbDOffrIAw1SapdoxyO3fX1j5qt6ONN2lKHV3iJBR0tsGRi7uNrovTY1CUFQ3\/CGG05A5i75D","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/55eAbDOifrIMA1SapdoxhpLEFRMbG8rcee5QZ5a6xNqqTFLa\/I5cfn7W7B4avlW9piejp\/v664C0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0556{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":213,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMUAAEAAHBH9tQHJAa4KGFK8WgYoHACx0fuAbFEZi0KfGguGVRmA\/HFgAK++\/pZ\/UQPJ7ErH8ro8MHI+bLD30uaCfXtJ7\/QCHML0vywIEKPJ+iHGW7FJ\/JQSA1NZGc+TlHBYBDIa7ox8e1Pq\/a80uI8D5Eb7CSsVoVr0Sc4EsJvgvA68H8\/FWitOWmf6dkjo1V996feJX7t9hDrYYIK12\/3XSpGbl0vhAAbcYmh\/6QVmWJ0Q3+TiV9mXKHzltS5K\/e3s","pkt_caplen":213,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0564{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":225,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANEAAEAAHBH9qQHJAa4KGFK8WgYoHAC9JweAbFEai0Ki2guGVRnNE2otm000E0TBGopGfgHrnPVu9x+fKxkYlT3X6btUr6F7xGy6czBi8SPFPu661f8c05XG1OjJUnMJEfsaEwPPPRF3zfN5HVbSLv+MkIkMKnhv83KRAkvaCaHKLFR0LT6ghOUHbCLQUMMjLCpMLBkhS499kzib7ZESQ9bgpzuBMzsi3frz96woGWfP\/IbCcF3Dgy2McR\/LOl5qU1ow92x0Not25qxE02IO","pkt_caplen":225,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4iiAbDOgfrIEg1SapdqkJdMJcgBZxvJx6x0+zHeW0vFhE\/\/Swe9lsOWBbl\/FaeMAJB9GhQt\/aDf4","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAPxHbHgoYUrwByQGuLDhaBABwj8uAbFEdi0KuGguGVRm4+ZwrLwImLbEMOpGqFTM6Ep0jE2BSSOnCrJbbYqcNxlpPvbau6dQVbgTh4M8XdDYkhDFJhHr4oLq+M2I92t0+lzkiZPF8gEs5WIS4cmnrms\/wo3pP4IlhQb8gzQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/fXGAbDOjfrIPw1Sapdp7XT2C1f+4XR3ntjkrRepcFm90D+z2OJ6WeMGitScy\/jx6oN2S4l4cnurU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XqSAbDOhfrIIQ1SapdrhW8OA+io7qLgntZBULvdBApHv3IIbjWuZdsiNZEkrJVDNxV09Djabt7a8","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0545{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":210,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHBH9uAHJAa4KGFK8WgYoHACuwBOAbFEbi0KmmguGVRnRHLKq0YRCKGygBV+fkGZlb88sS6fayoPRw4FvOirF\/ulbmvPm8lzVl0O\/sgK+3pZEhNdP1UANf7fOw\/4XMf3JNXJ5j9WM20DdoDoj2pXPR+OVm8nB9+z4Z8K6p6tycCRMRKgKFtULofG7Rk+exrn8upCHqFMsMU162ZOqhhViMP3Y1ksNonTnyxvvjok4EBB0B8JdhkycxwAg","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/oYGAbDOkfrITg1SapdqFpXYBdzSPjr4Ekz2ePEG9sIQcr8W7oUc7uA8fXIWkDL0GpK10ptDdY0Z9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":196,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALQAAEAAHBH9xgHJAa4KGFK8WgYoHACgyleAbFEci0KqWguGVRn0w5KHoaiel542zSCPNWGuAwD8UIXLbqTAtjeJWcero1Cr7kLqxkvHHJEIW\/tVv0VFMt7mjDxTbRnsUXXvO3xFfWwZQDMaxeweFwnYsPRRjO0MqZvjB5aYhj0fhjif4Co2g6ZnG20GO7mRoXimJhaqsoS2SDONE0oHE4zaQMzoD6zL+xRmHceb4XHiYw==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/432AbDOifrIMA1SapdoxhpLEFRMbG8rcee5QZ5a6xNqqTFLa\/I5cfn7W7B4avlW9piejp\/v664C0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKJ5CAbFEei0Kx2guGVRnslbjh9Wf6heUGC4eNJEBjOAByFVj+hmEwOEefzjtZsHirPu\/ktc5PusL1UbLu6xzenjKuOzk=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFAiSAbFEfi0K1mguGVRlLNrl58V1\/jSlUzaeC\/3ojpjq69H3Sz9Gsvd3PewsPoOMgupiSBLMipYOwNAD1FVsn","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/5lOAbDOlfrIXQ1SapdpEnFJQuIPxgj6AG7e\/Td\/CfsyzhycxWcJF\/1GybUZaQJBjSY5mtdywCx99","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHBH99gHJAa4KGFK8WgYoHABwk+WAbFEdi0KuGguGVRm4+ZwrLwImLbEMOpGqFTM6Ep0jE2BSSOnCrJbbYqcNxlpPvbau6dQVbgTh4M8XdDYkhDFJhHr4oLq+M2I92t0+lzkiZPF8gEs5WIS4cmnrms\/wo3pP4IlhQb8gzQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/eVeAbDOjfrIPw1Sapdp7XT2C1f+4XR3ntjkrRepcFm90D+z2OJ6WeMGitScy\/jx6oN2S4l4cnurU","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nWeAbDOkfrITg1SapdqFpXYBdzSPjr4Ekz2ePEG9sIQcr8W7oUc7uA8fXIWkDL0GpK10ptDdY0Z9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMAaWAbFEgi0K5WguGVRmEA3eN8gsw9eKj1MYBzlAhHKcIuSuTn9bwCeNPnyIF0JBFFHk+UDhdcOXCjOoqEviwM7rdQtgVcw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIqNyAbFEhi0K9GguGVRm1\/A3l0RvMoX4uBaiaHe\/V3soo2PUAGLPe8GG8PARJEcqGAMLdt5VDFFfgCg4gEHmDVdZX","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/2dKAbDOmfrIbA1SapdotVFPphZDTT71fvu9ZWfzNhLfk3GoBy5si7pwZdpHW+R6mA2xQKHsMSVJs","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKK6qAbFEei0Kx2guGVRnslbjh9Wf6heUGC4eNJEBjOAByFVj+hmEwOEefzjtZsHirPu\/ktc5PusL1UbLu6xzenjKuOzk=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFBj6AbFEfi0K1mguGVRlLNrl58V1\/jSlUzaeC\/3ojpjq69H3Sz9Gsvd3PewsPoOMgupiSBLMipYOwNAD1FVsn","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/4jmAbDOlfrIXQ1SapdpEnFJQuIPxgj6AG7e\/Td\/CfsyzhycxWcJF\/1GybUZaQJBjSY5mtdywCx99","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/cWyAbDOnfrIew1SapdrCiTCUlYiwEM2oin8tdcbd84eYzw9TojG8Is28aRLOZnfImiuOHyyvCG4G","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH2u2AbFEii0LA2guGVRlI5lof\/av2DhPfv2xLSiKO1d8psdhE2gRC6hR5sLcL4tiUkqZpCmM5fkPCacHgTiO0seU=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMBb+AbFEgi0K5WguGVRmEA3eN8gsw9eKj1MYBzlAhHKcIuSuTn9bwCeNPnyIF0JBFFHk+UDhdcOXCjOoqEviwM7rdQtgVcw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIrPaAbFEhi0K9GguGVRm1\/A3l0RvMoX4uBaiaHe\/V3soo2PUAGLPe8GG8PARJEcqGAMLdt5VDFFfgCg4gEHmDVdZX","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":125,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAG0AAEAAQBHaNQoYUrwByQGuKBxaBgBZp9+AbDOofrIig1SapdrEahyYKTVbx4tUq6CQ3nutPdiYZtOOjjfruOu1T77exAIJHTci2UsdJteJ5+\/aiZHi95ADL08hWyOaug3RuNZG0X5tif4=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/1biAbDOmfrIbA1SapdotVFPphZDTT71fvu9ZWfzNhLfk3GoBy5si7pwZdpHW+R6mA2xQKHsMSVJs","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/bVKAbDOnfrIew1SapdrCiTCUlYiwEM2oin8tdcbd84eYzw9TojG8Is28aRLOZnfImiuOHyyvCG4G","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YFSAbDOpfrImQ1SapdoMfCfNZQ+\/l8iO\/Uguo0RzJINgXmgBwUKVKoLRBMmuNFgGGdPWZKytJERF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCzCiAbFEji0LEmguGVRkFMrC4aljVMZoIF0P924b2d+OkLmM+Ps7APXoder88NM7IP5WRYAPls88O6IlR","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFN3eAbFEki0LIWguGVRkk1JKALCVOsCjXxXnhlKrdWTpVrtAqSRjHqiCweF7RuXd\/fagXVTkKr4Ve1s74dC8d","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/A7GAbDOqfrIqA1SapdpAHpNE7whQANFGNFrlHmn10MJFHTJkmzTbxbaUefjuipvg4H4fnYu9xd2P","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAGxH\/HwHJAa4KGFK8WgYoHABH3weAbFEii0LA2guGVRlI5lof\/av2DhPfv2xLSiKO1d8psdhE2gRC6hR5sLcL4tiUkqZpCmM5fkPCacHgTiO0seU=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0431{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":125,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAG0AAEAAHRH9DQHJAa4KGFK8WgQsOABZo8WAbDOofrIig1SapdrEahyYKTVbx4tUq6CQ3nutPdiYZtOOjjfruOu1T77exAIJHTci2UsdJteJ5+\/aiZHi95ADL08hWyOaug3RuNZG0X5tif4=","pkt_caplen":125,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDWU+AbFEli0LMGguGVRlTUyulB0TDvRjAmy4GyVKsk4GY2VzvfamDGqrGcqVgW3RJ6oqWOydC5wuMm4HUxQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE+beAbFEmi0LP2guGVRny3G+eBXaHarN6\/HsPLpFKZumTMkj7ewX2BXhiq38L+L97p+MctoQam8L\/hhW3tN4=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XDqAbDOpfrImQ1SapdoMfCfNZQ+\/l8iO\/Uguo0RzJINgXmgBwUKVKoLRBMmuNFgGGdPWZKytJERF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/adqAbDOrfrItw1SapdrEToh3cU\/L0Y3B2n3t3vzOBuwm2c8rr7R3UxhdsTUmqFWcaq1PrJxlGcGh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABC0EKAbFEji0LEmguGVRkFMrC4aljVMZoIF0P924b2d+OkLmM+Ps7APXoder88NM7IP5WRYAPls88O6IlR","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFO5GAbFEki0LIWguGVRkk1JKALCVOsCjXxXnhlKrdWTpVrtAqSRjHqiCweF7RuXd\/fagXVTkKr4Ve1s74dC8d","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/\/5aAbDOqfrIqA1SapdpAHpNE7whQANFGNFrlHmn10MJFHTJkmzTbxbaUefjuipvg4H4fnYu9xd2P","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoeC2AbDOsfrIxg1SapdrQ7AUG1unpGRVkuzCeSYVqgn3K118AO68ESA3T1uTGrjeSWdmw1zLA5vDVeyyzpw0Mxj\/7Us418Ddcqayq\/lrrPdxjfJod08DOElljR3YF3xdyxrQ=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBR2z6AbDOtfrI1Q1SapdoRa+iKLH3vOzjmhOzGEboWLl4VYEPh+loVOsPQgbvFG1Elv9DtVXLwuYrnJrlhG7VtYYLiTP4YSJ1ACsUF","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHiSyAbFEni0LTmguGVRnbD5vzoOL9Ie8XX57utKiLVLZEcGlu0uEqP80YclYfz+IJEkmIEoAs7S00oPkoTi8P8C8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDXWmAbFEli0LMGguGVRlTUyulB0TDvRjAmy4GyVKsk4GY2VzvfamDGqrGcqVgW3RJ6oqWOydC5wuMm4HUxQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE\/dGAbFEmi0LP2guGVRny3G+eBXaHarN6\/HsPLpFKZumTMkj7ewX2BXhiq38L+L97p+MctoQam8L\/hhW3tN4=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZcCAbDOrfrItw1SapdrEToh3cU\/L0Y3B2n3t3vzOBuwm2c8rr7R3UxhdsTUmqFWcaq1PrJxlGcGh","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0453{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABodBOAbDOsfrIxg1SapdrQ7AUG1unpGRVkuzCeSYVqgn3K118AO68ESA3T1uTGrjeSWdmw1zLA5vDVeyyzpw0Mxj\/7Us418Ddcqayq\/lrrPdxjfJod08DOElljR3YF3xdyxrQ=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBqIRuByAAMVJql2u2HUz7vAlbWvDrSakDvgYII\/OimMR54v+ZH+z3FqL\/f1pmB9rfSbln\/XVHsCbt1g0Atr\/Me+7IFC8gvYZ5AYmZSobDA2KBW4aaAswCAAAAKhqBe3nISnX1XSg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJ+aaAbDOufrI5A1SapdqyDbP0kX+XlDzCtD\/a5g7I+obnJ9Az3ZSbaB3D8n6Ziq6usH00tJqXpq5czvoYu7xsfkJE6A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFFmiAbFEoi0LXWguGVRkmhdqQoKTLOnWL536Nz2cwMcIZkNSWixzW7qW0J2wG3tBnvJvLKyMtD44ppcu6HmW6","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFyzOAbFEpi0LbGguGVRmfpe32yM8eiloOu5Uow0lLvdxNZOU82aIZ93ReR0whIydlM\/7kHzLVGNwK8gSWYsr6","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABR1ySAbDOtfrI1Q1SapdoRa+iKLH3vOzjmhOzGEboWLl4VYEPh+loVOsPQgbvFG1Elv9DtVXLwuYrnJrlhG7VtYYLiTP4YSJ1ACsUF","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHjUaAbFEni0LTmguGVRnbD5vzoOL9Ie8XX57utKiLVLZEcGlu0uEqP80YclYfz+IJEkmIEoAs7S00oPkoTi8P8C8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBL0HGAbDOvfrI8w1Sapdp3EqprYadXRvnO44T0rqN1QkfB2vS689pk0Z8gnU4QTO4R7iuopj6vt2zkTbMdXOTE8RNp7J3A","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":123,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGsAAEAAQBHaNwoYUrwByQGuKBxaBgBXV+eAbDOwfrJAg1SapdrvxCxzskvK+n60fKEke+6JgzbCTklwTAvPLDg+7S2Ap+wdvNpE0BlT4dw1Kv99I2ieAY23Op3q1WLBVxHM+2ECwwIi","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHa0GAbFEqi0Le2guGVRl34UYBWLCvpDCz4xgv51+kvmedbE90DrBoBAT5TnR0w5A1zNzc\/HaBweoa0Tr0zGry2jY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHTu2AbFEri0LimguGVRkj\/EjowgbVFQy5ygqqtFAFmS5GfBjifoQ\/+gZBnKn04fTRAmYh1AaI8MoksQRuMxHr760=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgUsOQBqHQGByAAMVJql2u2HUz7vAlbWvDrSakDvgYII\/OimMR54v+ZH+z3FqL\/f1pmB9rfSbln\/XVHsCbt1g0Atr\/Me+7IFC8gvYZ5AYmZSobDA2KBW4aaAswCAAAAKhqBe3nISnX1XSg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJ9YyAbDOufrI5A1SapdqyDbP0kX+XlDzCtD\/a5g7I+obnJ9Az3ZSbaB3D8n6Ziq6usH00tJqXpq5czvoYu7xsfkJE6A==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFGoKAbFEoi0LXWguGVRkmhdqQoKTLOnWL536Nz2cwMcIZkNSWixzW7qW0J2wG3tBnvJvLKyMtD44ppcu6HmW6","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFz02AbFEpi0LbGguGVRmfpe32yM8eiloOu5Uow0lLvdxNZOU82aIZ93ReR0whIydlM\/7kHzLVGNwK8gSWYsr6","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069208,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLzFeAbDOvfrI8w1Sapdp3EqprYadXRvnO44T0rqN1QkfB2vS689pk0Z8gnU4QTO4R7iuopj6vt2zkTbMdXOTE8RNp7J3A","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBizsKAbDOxfrJEQ1SapdosKssNTINrfDjdPxI4oKkbAv1s7vUFmh5LiHktTHZpFEKiqZHmnuowlF8ZCU1Jyj5KvJtppjkcHwDdTlR+tMkxkWpJMaWOdvkW5gXbhM4=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCta2AbFEsi0LmWguGVRkMXQq1WFtxPJJylT8QZvABp88QX+m3XecZKKaFIaJAGDXO7DXv0zbgUzwJku\/e","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQdDeAbDOyfrJIA1SapdoUTPa1rchaaCQe1NxvmqMlONS1CTln6vn+H0iVsn1WRFELw0uhDzdNkDA\/y4VA0OkXgD5tkblzgvJcUls=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0426{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":123,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGsAAEAAHRH9DwHJAa4KGFK8WgQsOABXU82AbDOwfrJAg1SapdrvxCxzskvK+n60fKEke+6JgzbCTklwTAvPLDg+7S2Ap+wdvNpE0BlT4dw1Kv99I2ieAY23Op3q1WLBVxHM+2ECwwIi","pkt_caplen":123,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHb1uAbFEqi0Le2guGVRl34UYBWLCvpDCz4xgv51+kvmedbE90DrBoBAT5TnR0w5A1zNzc\/HaBweoa0Tr0zGry2jY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHUweAbFEri0LimguGVRkj\/EjowgbVFQy5ygqqtFAFmS5GfBjifoQ\/+gZBnKn04fTRAmYh1AaI8MoksQRuMxHr760=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/TXeAbDOzfrJLw1SapdqCKRnkihoSP0KirsC0o0D\/G1GC7tmR6S7AltKjx98RxSCQdtpec\/J0S+E1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKLpuAbFEti0LqGguGVRnpHjOtMwjGtf3E5Ulr\/ejBFc9aQjdsIyXgQha4aS1VURoNW2G5DoRo1eRDZukayp8XUUxskIM=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFPEyAbFEui0Lt2guGVRmMRvGVY4domnW4xP4NuPsmkPkgQMExAmidDN\/Aagz3VWQK\/t0w2repUXeCyk\/OYiR\/","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiyqiAbDOxfrJEQ1SapdosKssNTINrfDjdPxI4oKkbAv1s7vUFmh5LiHktTHZpFEKiqZHmnuowlF8ZCU1Jyj5KvJtppjkcHwDdTlR+tMkxkWpJMaWOdvkW5gXbhM4=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCuceAbFEsi0LmWguGVRkMXQq1WFtxPJJylT8QZvABp88QX+m3XecZKKaFIaJAGDXO7DXv0zbgUzwJku\/e","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQcB2AbDOyfrJIA1SapdoUTPa1rchaaCQe1NxvmqMlONS1CTln6vn+H0iVsn1WRFELw0uhDzdNkDA\/y4VA0OkXgD5tkblzgvJcUls=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/P\/iAbDO0frJPg1SapdoZCvN+Kzg9a6ZwEXR0u0ddehbj\/jS9ewfkePG5cd96VBf287gdB0kspvGO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PAmAbDO1frJTQ1SapdpxDXeaFrpS6+csekBpS5zNkEJI\/Z5onC5exdzC\/BA3Zuj6cs4riH91vPtg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHbrqAbFEvi0LxmguGVRl1ODpbTCBF33mJ3wF3GTQxdqLHGMeQHTp8dHnZ0L0WD2v+lGxS9xXoz6iczTZlZmCZdKo=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGkc6AbFEwi0L1WguGVRmpTqNyQhGqlM1yUWWFxt6tWBxgKnB7zrmrGIa8rMWbUnNeLhfTLNJxADuLqMKDfWGTOA==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/SV2AbDOzfrJLw1SapdqCKRnkihoSP0KirsC0o0D\/G1GC7tmR6S7AltKjx98RxSCQdtpec\/J0S+E1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKMrWAbFEti0LqGguGVRnpHjOtMwjGtf3E5Ulr\/ejBFc9aQjdsIyXgQha4aS1VURoNW2G5DoRo1eRDZukayp8XUUxskIM=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFQGaAbFEui0Lt2guGVRmMRvGVY4domnW4xP4NuPsmkPkgQMExAmidDN\/Aagz3VWQK\/t0w2repUXeCyk\/OYiR\/","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/n5qAbDO2frJXA1SapdridB63tyqL\/2cIPBBQhtX3Gq7kDWzHzVGekRh8HZoAFfKxDteveOWqPe8J","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/O96AbDO0frJPg1SapdoZCvN+Kzg9a6ZwEXR0u0ddehbj\/jS9ewfkePG5cd96VBf287gdB0kspvGO","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCMNuAbFExi0L5GguGVRl91nP3Bi4UXVhBpSEsbAedhg0pMJ6n8oUCSv5KeLvx8CZ3rJ+6KFZWAKlDriAO","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/N++AbDO1frJTQ1SapdpxDXeaFrpS6+csekBpS5zNkEJI\/Z5onC5exdzC\/BA3Zuj6cs4riH91vPtg","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ZEyAbDO3frJaw1Sapdo9DipCx\/xCO6V+Ftrm4iRjabaQths59wyQ9\/khszbxuihtEErt4TV2yrKV","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHctSAbFEvi0LxmguGVRl1ODpbTCBF33mJ3wF3GTQxdqLHGMeQHTp8dHnZ0L0WD2v+lGxS9xXoz6iczTZlZmCZdKo=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGleiAbFEwi0L1WguGVRmpTqNyQhGqlM1yUWWFxt6tWBxgKnB7zrmrGIa8rMWbUnNeLhfTLNJxADuLqMKDfWGTOA==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/m4CAbDO2frJXA1SapdridB63tyqL\/2cIPBBQhtX3Gq7kDWzHzVGekRh8HZoAFfKxDteveOWqPe8J","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/rcKAbDO4frJeg1SapdpskeAuFioor0zwF2aMLGVPCZGzhVHfiu8kiAjPpyT3apIUl6JwzH+ZuBrK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGPXuAbFEyi0L82guGVRlhIGd8hSffcWfe\/zp0M1\/rzTVquQNza5PEPWRQAFvkASJ\/B2hM2k3Dz4TxCjvoBMIht4G3WaiPYPJpa00WqLo4TwTwt4pUcZFpH8eVjrwDPGG0MxvgKYq9Ix8b5EWtQhn3WQFyRENbIvRxmNZzTtSnUSU=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6D\/eAbFEzi0MAmguGVRlynDhxbVR1Iim\/krzb7Hym0\/wmSzVVEMyGq+lnHbbjZjM0r31HmiOCjmAw3WzcqX5dvv3VsfP5nzx5xn+lDSepABTG0m98UZweilNzfq51uE5suGwgoiYbBFiYouDbZOYu4lZZaKPO4IJObwAlpyrnr4RGMsTDQQOJIdGUuGLUikVivTxd5u+ers45u2fGeQYUc7HFH2LuHZAHGtUHs2c4c2rqapYr","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABCNPWAbFExi0L5GguGVRl91nP3Bi4UXVhBpSEsbAedhg0pMJ6n8oUCSv5KeLvx8CZ3rJ+6KFZWAKlDriAO","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMMs6AbDO5frJiQ1SapdrRt3Kehac0e0v+5M2C2J4\/n2EfboY29tr2iax0hQk0i3\/O1DN\/Kuiynd1WYjq7vMbdf0\/1gMAb4Q==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/YDKAbDO3frJaw1Sapdo9DipCx\/xCO6V+Ftrm4iRjabaQths59wyQ9\/khszbxuihtEErt4TV2yrKV","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":178,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKIAAEAAQBHaAAoYUrwByQGuKBxaBgCOJ\/2AbDO6frJmA1SapdqYdB65Hix1TqAq+MDd1FHVdA7rYuD4wSetZH67kli3jTwxUmd3y0AsCf03wqTkTHOUv2uTL6r1kS6x38Krz4cGgy2i0pPrZZ7C48yuYbPteBAMHMXt8Kk+D7W38COHeFSX9G4ATVdxiNQVCNXIn7bLHHG2aG7HfAfxHw==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAPxHa3AoYUrwByQGuLDhaBACyP7eAbFE0i0MEWguGVRl8bPHGWdQm9V8X7BffrXp05Aiwt+3AKnua2BXvQdzJA4LlojlkthuNlG+OHIHDWNVAblVyZZ7fnu2xkLkY86S60LoyW+h26w4fDAw1RKGTmn0u7HLD84lB91eSxNFTlvd0jSVVFGs3k1JKnJCohzkLnIkCsJo90Wygc\/\/SCgvIv6APvC1QXozN\/k5mUeK0i2vF0BZk62zKRrP9A4lShw==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":206,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqtieAbFE1i0MIGguGVRlGfDFIvi+F8B\/aKkG3GxjkXZP\/xrR6Hv97yBgrhs8j8Tlg85+9F2st+NU22ONCQClr6LbZmqG5FldY8jaW5u9tI9hbkXQeHG09NeEvVouS2BjjzGecjpr\/i2T+VAXmmSuf9k1tgeiWaXy6ZumrT46803VdYeYc0EZg24pOMNpg8YKURPE0UmKYtgtdttfTpFPHHNDs\/Kk=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/qaiAbDO4frJeg1SapdpskeAuFioor0zwF2aMLGVPCZGzhVHfiu8kiAjPpyT3apIUl6JwzH+ZuBrK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGQZWAbFEyi0L82guGVRlhIGd8hSffcWfe\/zp0M1\/rzTVquQNza5PEPWRQAFvkASJ\/B2hM2k3Dz4TxCjvoBMIht4G3WaiPYPJpa00WqLo4TwTwt4pUcZFpH8eVjrwDPGG0MxvgKYq9Ix8b5EWtQhn3WQFyRENbIvRxmNZzTtSnUSU=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0560{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6FBGAbFEzi0MAmguGVRlynDhxbVR1Iim\/krzb7Hym0\/wmSzVVEMyGq+lnHbbjZjM0r31HmiOCjmAw3WzcqX5dvv3VsfP5nzx5xn+lDSepABTG0m98UZweilNzfq51uE5suGwgoiYbBFiYouDbZOYu4lZZaKPO4IJObwAlpyrnr4RGMsTDQQOJIdGUuGLUikVivTxd5u+ers45u2fGeQYUc7HFH2LuHZAHGtUHs2c4c2rqapYr","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMLrSAbDO5frJiQ1SapdrRt3Kehac0e0v+5M2C2J4\/n2EfboY29tr2iax0hQk0i3\/O1DN\/Kuiynd1WYjq7vMbdf0\/1gMAb4Q==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGaF+AbDO7frJpw1Sapdrjz91gBF+Mkv\/6LJBf03Adfz7Cw\/Ky3zF\/hEcyhI03u0ecfHn5aNU3SvYc9DoxduG6eFK7PDWbwRUt27JlBVwWuDg2uQ0XTcTW4Se\/+RVEWt08OiRXZSolUfLgFCvGsP404cwa00TMQGPVnY+yeUP4LrU=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAPxHa+AoYUrwByQGuLDhaBACW\/RuAbFE2i0ML2guGVRlxE8L5gkDEl7g2MtHsMvqpvTiBVzlw1dDop8neb3j0EIu4K6bvx7nddX7sR3HIKg8LvYGVX7sJ4tl9bcUPxPimQG2hUgXaOxO1N1Oyi37\/3Ca+IOGPxm0NhxyTme11Df6p+he9s9e9peX7HRvGwSwipyYjHQU3UFzpzM3BbAjmPpdl","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":178,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKIAAEAAHRH82AHJAa4KGFK8WgQsOACOI+OAbDO6frJmA1SapdqYdB65Hix1TqAq+MDd1FHVdA7rYuD4wSetZH67kli3jTwxUmd3y0AsCf03wqTkTHOUv2uTL6r1kS6x38Krz4cGgy2i0pPrZZ7C48yuYbPteBAMHMXt8Kk+D7W38COHeFSX9G4ATVdxiNQVCNXIn7bLHHG2aG7HfAfxHw==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":155,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIsAAEAAQBHaFwoYUrwByQGuKBxaBgB3gMuAbDO8frJtg1SapdrUwweBtToPUirwOD2TYslT3C1i3YPeTo2vT8rTwHRbUbPL3UPudctotuMJRZQCXiuqKA6QaT38OmS220BxQQdHkZ9diCdrtfkyOYrlkUuJJ0DVRIvKk6Gx+RZW1bUEaWPvzjE=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHBH9tAHJAa4KGFK8WgYoHACyQ9GAbFE0i0MEWguGVRl8bPHGWdQm9V8X7BffrXp05Aiwt+3AKnua2BXvQdzJA4LlojlkthuNlG+OHIHDWNVAblVyZZ7fnu2xkLkY86S60LoyW+h26w4fDAw1RKGTmn0u7HLD84lB91eSxNFTlvd0jSVVFGs3k1JKnJCohzkLnIkCsJo90Wygc\/\/SCgvIv6APvC1QXozN\/k5mUeK0i2vF0BZk62zKRrP9A4lShw==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqukGAbFE1i0MIGguGVRlGfDFIvi+F8B\/aKkG3GxjkXZP\/xrR6Hv97yBgrhs8j8Tlg85+9F2st+NU22ONCQClr6LbZmqG5FldY8jaW5u9tI9hbkXQeHG09NeEvVouS2BjjzGecjpr\/i2T+VAXmmSuf9k1tgeiWaXy6ZumrT46803VdYeYc0EZg24pOMNpg8YKURPE0UmKYtgtdttfTpFPHHNDs\/Kk=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAQBHaCAoYUrwByQGuKBxaBgCGZiSAbDO9frJxQ1SapdqRp8dC06l0u4E2HMEiEDuuuw0FtbC+9vJA6wdqqhuLM2VbZg6TqH0dJxmHtSxb58PZzexH0PonmAvnZabco6YZvxW5m0BGqVAm\/\/gq31qj3qLH1KKS6rWCY9ZoOK7hQKux2bjng+fw6afgr7OVlAw36Xk=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":205,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL0AAEAAPxHa5QoYUrwByQGuLDhaBACp8DqAbFE3i0MPmguGVRng1\/Qn1E7Zx6jkOWsZzCfBNMcMoBkbjJryM4HoQOfABPMYmnUHcnqH+yclRUHk\/OU38FhzqhJ9YiJdKIWneeaiOm8bzXSCLDl0IuysxDCG9EP94z+VyDv\/zeN8X6tQZsTG6uaUlIMhSWHjWC+r0wM+al+fCi2dqPQ4olCGi6FMAI5xeq0Q9viwcgIm+BThjzjzbn0+kg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZXyyAbFE4i0MTWguGVRnh0tl1ShTFbIvZcwErsT7c81LRmEMK+rAw4W6UBoonmMevPxJfjO6eA525gHmXgOma+ZTNlfnwSW9iNgl9CjdWPrMlsNWWciQBGTF8sQxdFTT3UFApROiDQbY6kYGBtkSZspoL0cohK8F7AYHyVk3KY0G1OCD+E4tb7D9NN3MWDmCxJh2p","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0494{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGZEWAbDO7frJpw1Sapdrjz91gBF+Mkv\/6LJBf03Adfz7Cw\/Ky3zF\/hEcyhI03u0ecfHn5aNU3SvYc9DoxduG6eFK7PDWbwRUt27JlBVwWuDg2uQ0XTcTW4Se\/+RVEWt08OiRXZSolUfLgFCvGsP404cwa00TMQGPVnY+yeUP4LrU=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHBH90AHJAa4KGFK8WgYoHACWATaAbFE2i0ML2guGVRlxE8L5gkDEl7g2MtHsMvqpvTiBVzlw1dDop8neb3j0EIu4K6bvx7nddX7sR3HIKg8LvYGVX7sJ4tl9bcUPxPimQG2hUgXaOxO1N1Oyi37\/3Ca+IOGPxm0NhxyTme11Df6p+he9s9e9peX7HRvGwSwipyYjHQU3UFzpzM3BbAjmPpdl","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAQBHZ9QoYUrwByQGuKBxaBgCZhQSAbDO+frJ1A1SapdpmOsHhLHYyNhoDpHXgqZn6RN5Z0gAB9g1JKRoh28+fNcnB33C7VrN0p+kEUrViCzMNDkk2Hm1BwMxyjzqFk2jXmakEYnzQWYKrUu6bGD0ZGkoS+K+d6HnUsep2fJOP7bB+7Y0M8i5zmgileyhhssu+eksjZIZNf4fBOH+g5mHvqOBeyRBy","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0470{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":155,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIsAAEAAHRH87wHJAa4KGFK8WgQsOAB3fLGAbDO8frJtg1SapdrUwweBtToPUirwOD2TYslT3C1i3YPeTo2vT8rTwHRbUbPL3UPudctotuMJRZQCXiuqKA6QaT38OmS220BxQQdHkZ9diCdrtfkyOYrlkUuJJ0DVRIvKk6Gx+RZW1bUEaWPvzjE=","pkt_caplen":155,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":186,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKoAAEAAQBHZ+AoYUrwByQGuKBxaBgCWAISAbDO\/frJ4w1Sapdol03qmza1TRfQJXzokOWK+i6Y84hjKtTRU5f3GOqVz0YFeH7H6umfirrOuHgQ6S39T\/UY1GBvhUepjLnGx21sL\/Qntq1rkxnzFTDYt+gGgCyj6t9+MhMlAUez3DSIvvFlER0QsRtZAxsTUW6BcSyNEujGYXZp1x8uSpIsWQkRXYrzK","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHRH84AHJAa4KGFK8WgQsOACGYgqAbDO9frJxQ1SapdqRp8dC06l0u4E2HMEiEDuuuw0FtbC+9vJA6wdqqhuLM2VbZg6TqH0dJxmHtSxb58PZzexH0PonmAvnZabco6YZvxW5m0BGqVAm\/\/gq31qj3qLH1KKS6rWCY9ZoOK7hQKux2bjng+fw6afgr7OVlAw36Xk=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACThG+AbFE5i0MXGguGVRm39qCnpO1XI+TuIzThx9feXTqUiV0whLTwdn5AysW7z1zKBRaXmhulMl2C2WOQq6XL31RkVN\/ugSHfrvJdP7GBdYb+gOC+IF7aY3nU4FrTiWk8VPx\/2MmiZUg5vniHgobCciebts19MCA8er3bx39KYr6s48qewBjKGtbMf5bV","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqg\/+ByAAMC4ZVGcigw4tU0JAjc1N56SwUEi+6sCSAWuKm7enPTEJRJBSO1TZYlJRlF0lKp1Iij71GU+lCgsNJqTjdfz6FMdtB8EGMWK31dSiSZZOxHyqAAAAKG8fdtHJ1kEUc6Q==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":184,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKgAAEAAPxHa+goYUrwByQGuLDhaBACUYoWAbFE6i0Ma2guGVRlbeJd19o0XTidN\/6kzqnZxLK19hV33lYWMobmkU++7V1JyItlPRSe8u14lGM7MM8RoVO1awosujn+\/M4Dnid8DNJeQS9urGturyoi7BWAoQ99sdXxDFk9VkPjRaRVwH0l9d9KZ\/I09FYmYMTj4LxIvk0T6S8eAqgKfZmx2MdBgpw==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":205,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL0AAEAAHBH9vQHJAa4KGFK8WgYoHACp9FSAbFE3i0MPmguGVRng1\/Qn1E7Zx6jkOWsZzCfBNMcMoBkbjJryM4HoQOfABPMYmnUHcnqH+yclRUHk\/OU38FhzqhJ9YiJdKIWneeaiOm8bzXSCLDl0IuysxDCG9EP94z+VyDv\/zeN8X6tQZsTG6uaUlIMhSWHjWC+r0wM+al+fCi2dqPQ4olCGi6FMAI5xeq0Q9viwcgIm+BThjzjzbn0+kg==","pkt_caplen":205,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZY0aAbFE4i0MTWguGVRnh0tl1ShTFbIvZcwErsT7c81LRmEMK+rAw4W6UBoonmMevPxJfjO6eA525gHmXgOma+ZTNlfnwSW9iNgl9CjdWPrMlsNWWciQBGTF8sQxdFTT3UFApROiDQbY6kYGBtkSZspoL0cohK8F7AYHyVk3KY0G1OCD+E4tb7D9NN3MWDmCxJh2p","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAQBHaEwoYUrwByQGuKBxaBgB7pYuAbDPAfrJ8g1SapdqLH6crVEQ\/c7CCaWir10vSSQsV3CkhTpkDh\/KT6\/TEPhWyIULVjCu\/X00wQjztNerO79eQEvAk\/aSTsLbtnHgybBP3VCCfzz1fawDbv5Rx1bx6cryss38\/H4ON6\/Ua9qX62FOBgcX7","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHRH8zQHJAa4KGFK8WgQsOACZgOqAbDO+frJ1A1SapdpmOsHhLHYyNhoDpHXgqZn6RN5Z0gAB9g1JKRoh28+fNcnB33C7VrN0p+kEUrViCzMNDkk2Hm1BwMxyjzqFk2jXmakEYnzQWYKrUu6bGD0ZGkoS+K+d6HnUsep2fJOP7bB+7Y0M8i5zmgileyhhssu+eksjZIZNf4fBOH+g5mHvqOBeyRBy","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":164,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJQAAEAAPxHbDgoYUrwByQGuLDhaBACAC9OAbFE7i0MemguGVRknpiQnquIFOElOApSEcDi4jBqbD9dpRCSs0BV6ZDwppy5DsJSIMzF\/17zqHp4Ct2abA0DVJW\/F\/ZkwOnZW1rO3PLPDg+oJpYntp5WhOAIkm0vLCliycXsQ3VijctFV2fTZ2JTkc3glI1lRwzM=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":186,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKoAAEAAHRH80AHJAa4KGFK8WgQsOACW\/GmAbDO\/frJ4w1Sapdol03qmza1TRfQJXzokOWK+i6Y84hjKtTRU5f3GOqVz0YFeH7H6umfirrOuHgQ6S39T\/UY1GBvhUepjLnGx21sL\/Qntq1rkxnzFTDYt+gGgCyj6t9+MhMlAUez3DSIvvFlER0QsRtZAxsTUW6BcSyNEujGYXZp1x8uSpIsWQkRXYrzK","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACTiImAbFE5i0MXGguGVRm39qCnpO1XI+TuIzThx9feXTqUiV0whLTwdn5AysW7z1zKBRaXmhulMl2C2WOQq6XL31RkVN\/ugSHfrvJdP7GBdYb+gOC+IF7aY3nU4FrTiWk8VPx\/2MmiZUg5vniHgobCciebts19MCA8er3bx39KYr6s48qewBjKGtbMf5bV","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAQBHaOQoYUrwByQGuKBxaBgBVM0eAbDPBfrKAQ1Sapdr3zBlkzDgo\/vFznejQ1zqdb4I4bmRZ8mTU4KL6oCzyATm5PrMdSk1kauHmt6hwVEeEurK0tWt5NWFG\/xWvj0ybng==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAGxH+\/AHJAa4KGFK8WgcoHQBqiBmByAAMC4ZVGcigw4tU0JAjc1N56SwUEi+6sCSAWuKm7enPTEJRJBSO1TZYlJRlF0lKp1Iij71GU+lCgsNJqTjdfz6FMdtB8EGMWK31dSiSZZOxHyqAAAAKG8fdtHJ1kEUc6Q==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0513{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069209,"pkt_len":184,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKgAAEAAHBH90gHJAa4KGFK8WgYoHACUZp+AbFE6i0Ma2guGVRlbeJd19o0XTidN\/6kzqnZxLK19hV33lYWMobmkU++7V1JyItlPRSe8u14lGM7MM8RoVO1awosujn+\/M4Dnid8DNJeQS9urGturyoi7BWAoQ99sdXxDFk9VkPjRaRVwH0l9d9KZ\/I09FYmYMTj4LxIvk0T6S8eAqgKfZmx2MdBgpw==","pkt_caplen":184,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":140,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHwAAEAAQBHaJgoYUrwByQGuKBxaBgBoTPWAbDPCfrKEA1Sapdqb4mEuQjKuTjgLLr25fVveUyaFYFyeSALevlALpf16MPGuB702in3r4Fyoi4jDkzx8W7jA0dAhqKg7uWRXrMAi7RumRqB8Yjrb93jM\/ypDC1ehbwc=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":149,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIUAAEAAPxHbHQoYUrwByQGuLDhaBABxjWyAbFE8i0MiWguGVRlRg+3JRfuCq9r7CuwvIZNBE789mPnNQQmQikg+Z2xgIUBaw9ljJQpCOoFuivUZOKHpCvqoFkOoqpw2e1V0Ts4fHeJtrHfms2e08NbtY1BRPdz495ZsOTYI5Wvr6Uo=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":113,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGEAAEAAPxHbQQoYUrwByQGuLDhaBABNPxWAbFE9i0MmGguGVRn1\/QBAUqBaK4kncqhWISgO11l8+Oma1pxsUeRf1yneIjoBpT88Yg1noDlP\/4eNcP8LI5bis4neH3k=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwVwiAbDPDfrKHw1SapdrQ9SoO+QBnlFA\/8R4yi6FnYXDtoNrw6UgoL+zeb7Sa0UGwggiWvAF9nvavYSRJKGYN210A7gTUFI6jDjHyGaYYAnvmp1KRe\/4IQgRPt26kf8AmFvMMkQFtezqTOQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKBxaBgBqo26AbDPEfrKLg1SapdpPxLikkyluqVvaPFB8rSB5\/zJqb4i6llWSrtfTRh+YkXPX8a\/DaFuI62L5x+HLsyA7kDdUMKPCifqce9TftCu46f0Lj+Bc4JumGom6VflGDVh7KFrFOA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFZ5WAbFE+i0Mp2guGVRkoar0Pq5raBdlLYnTVlI4pcA27uB7B5IeRlhlVwhXWiUuUzmUIhtrptRwTx\/9Wyga9","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLvM2AbFE\/i0MtmguGVRlVtCUwFR\/Lu6GmqNJnQ\/\/8VuSx2vSCKlTdJnPTzm44egKGeFV3sBrVSybLHGvRN9mwippxPpyT","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBd9WiAbDPFfrKPQ1SapdocZC1YdRpFyGW4DrsaBq\/swiBNNjmEfWhMKdvYDv9dCUmj0Oci3LDQHUBd7+jf0rAVvzvMoMSUJ6uH42qSPME5pl2Wr+V86Ao1","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDFEOAbFFAi0MxWguGVRkumP15+aGqk51fohuJ+050rI3wWiM9ITSgCQNvENDJS2sxyYDhf1CCMCqDQkJxcg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAQBHaGQoYUrwByQGuKBxaBgB1oYuAbDPGfrKTA1SapdpZP77Y0HhB1O8P+K7B8N3pSSRrYx\/LWTjbg7ERgP2FIyO24LJxQ5zfBmOv1ETFQhjmipj+rtPKoxzVUM3i\/ZsFEeXC9ulhRKBoYpnsWe9+hqrRSrIsf8pCVZbZ0JuQ6EOX","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHRH9EQHJAa4KGFK8WgQsOABVLy2AbDPBfrKAQ1Sapdr3zBlkzDgo\/vFznejQ1zqdb4I4bmRZ8mTU4KL6oCzyATm5PrMdSk1kauHmt6hwVEeEurK0tWt5NWFG\/xWvj0ybng==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0481{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHRH86wHJAa4KGFK8WgQsOAB7oXGAbDPAfrJ8g1SapdqLH6crVEQ\/c7CCaWir10vSSQsV3CkhTpkDh\/KT6\/TEPhWyIULVjCu\/X00wQjztNerO79eQEvAk\/aSTsLbtnHgybBP3VCCfzz1fawDbv5Rx1bx6cryss38\/H4ON6\/Ua9qX62FOBgcX7","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":140,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHwAAEAAHRH8\/gHJAa4KGFK8WgQsOABoSNuAbDPCfrKEA1Sapdqb4mEuQjKuTjgLLr25fVveUyaFYFyeSALevlALpf16MPGuB702in3r4Fyoi4jDkzx8W7jA0dAhqKg7uWRXrMAi7RumRqB8Yjrb93jM\/ypDC1ehbwc=","pkt_caplen":140,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":164,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJQAAEAAHBH95gHJAa4KGFK8WgYoHACAD+2AbFE7i0MemguGVRknpiQnquIFOElOApSEcDi4jBqbD9dpRCSs0BV6ZDwppy5DsJSIMzF\/17zqHp4Ct2abA0DVJW\/F\/ZkwOnZW1rO3PLPDg+oJpYntp5WhOAIkm0vLCliycXsQ3VijctFV2fTZ2JTkc3glI1lRwzM=","pkt_caplen":164,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0462{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":149,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIUAAEAAHBH99QHJAa4KGFK8WgYoHABxkYaAbFE8i0MiWguGVRlRg+3JRfuCq9r7CuwvIZNBE789mPnNQQmQikg+Z2xgIUBaw9ljJQpCOoFuivUZOKHpCvqoFkOoqpw2e1V0Ts4fHeJtrHfms2e08NbtY1BRPdz495ZsOTYI5Wvr6Uo=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":113,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGEAAEAAHBH+GQHJAa4KGFK8WgYoHABNQy+AbFE9i0MmGguGVRn1\/QBAUqBaK4kncqhWISgO11l8+Oma1pxsUeRf1yneIjoBpT88Yg1noDlP\/4eNcP8LI5bis4neH3k=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0464{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwUu6AbDPDfrKHw1SapdrQ9SoO+QBnlFA\/8R4yi6FnYXDtoNrw6UgoL+zeb7Sa0UGwggiWvAF9nvavYSRJKGYN210A7gTUFI6jDjHyGaYYAnvmp1KRe\/4IQgRPt26kf8AmFvMMkQFtezqTOQ==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHRH8\/AHJAa4KGFK8WgQsOABqn1SAbDPEfrKLg1SapdpPxLikkyluqVvaPFB8rSB5\/zJqb4i6llWSrtfTRh+YkXPX8a\/DaFuI62L5x+HLsyA7kDdUMKPCifqce9TftCu46f0Lj+Bc4JumGom6VflGDVh7KFrFOA==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFa6+AbFE+i0Mp2guGVRkoar0Pq5raBdlLYnTVlI4pcA27uB7B5IeRlhlVwhXWiUuUzmUIhtrptRwTx\/9Wyga9","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLwOeAbFE\/i0MtmguGVRlVtCUwFR\/Lu6GmqNJnQ\/\/8VuSx2vSCKlTdJnPTzm44egKGeFV3sBrVSybLHGvRN9mwippxPpyT","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":149,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIUAAEAAQBHaHQoYUrwByQGuKBxaBgBxUhOAbDPHfrKWw1Sapdogt2uyXMXUCLGLSmGLdw8Mt2Ge5\/MLp1aDwLfP69\/WqkQ1EgwjyFnk3Y\/euH4HsD4YZAboUbrJrZo3LtztsYiTw7JUFbcELAPxwXz1oJVQlE\/a3hEl\/BJvZ6IpyDk=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABd8U6AbDPFfrKPQ1SapdocZC1YdRpFyGW4DrsaBq\/swiBNNjmEfWhMKdvYDv9dCUmj0Oci3LDQHUBd7+jf0rAVvzvMoMSUJ6uH42qSPME5pl2Wr+V86Ao1","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGE4aAbFFBi0M1GguGVRlUSS2Wwz1JsDh2go45i7xPWSYXc1USfV\/vvABOBYUY0Mlng6i7Nneo3JgD5QHUuP9mUA==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABD5wOAbFFCi0M42guGVRluv+KFY7P+LRoN8FzoTLoWbBJwnoVuxwK1Z0AhHS+zbVgDBnHDE0dU0Wfij8JgDQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":138,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHoAAEAAQBHaKAoYUrwByQGuKBxaBgBmv7uAbDPIfrKag1SapdpF6KyAEFapw3klz93oxYc+3XGa1CfScVppXe7vEb8p2JvTUJOHSBjaEAbXtaNZ8P\/BA\/WzXWvRHSlGAhkAHlyEo1UlAsppErnhcyDOGe6P1MLW","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDGF2AbFFAi0MxWguGVRkumP15+aGqk51fohuJ+050rI3wWiM9ITSgCQNvENDJS2sxyYDhf1CCMCqDQkJxcg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHRH88QHJAa4KGFK8WgQsOAB1nXGAbDPGfrKTA1SapdpZP77Y0HhB1O8P+K7B8N3pSSRrYx\/LWTjbg7ERgP2FIyO24LJxQ5zfBmOv1ETFQhjmipj+rtPKoxzVUM3i\/ZsFEeXC9ulhRKBoYpnsWe9+hqrRSrIsf8pCVZbZ0JuQ6EOX","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0467{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":149,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIUAAEAAHRH89QHJAa4KGFK8WgQsOABxTfmAbDPHfrKWw1Sapdogt2uyXMXUCLGLSmGLdw8Mt2Ge5\/MLp1aDwLfP69\/WqkQ1EgwjyFnk3Y\/euH4HsD4YZAboUbrJrZo3LtztsYiTw7JUFbcELAPxwXz1oJVQlE\/a3hEl\/BJvZ6IpyDk=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG9LyAbFFDi0M8mguGVRlbqlLvXM0MT1w4on8ch2XluXpytvhTziaNCBpMjkXH5nPj2YmULCiYFChmk3WAaB0+Xg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFgH+AbFFEi0NAWguGVRmSgehyx7OkPt2n8dHCtIQK14JFF1kmR2tOCmV7Rhf6K7XK9K7Za56VL8oNfjdOpkiv","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMTx+AbDPJfrKeQ1SapdoTUMqrH2t\/hGZn2rcEZsKqkQaCnHSd+8JNBAY8KPWiJ5iafzuo7cL2FZe6sxT3kO\/LyLBkKIg8Cw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGF6CAbFFBi0M1GguGVRlUSS2Wwz1JsDh2go45i7xPWSYXc1USfV\/vvABOBYUY0Mlng6i7Nneo3JgD5QHUuP9mUA==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABD6x2AbFFCi0M42guGVRluv+KFY7P+LRoN8FzoTLoWbBJwnoVuxwK1Z0AhHS+zbVgDBnHDE0dU0Wfij8JgDQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":101,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFUAAEAAQBHaTQoYUrwByQGuKBxaBgBBGsuAbDPKfrKiA1Sapdph5esWc+1DrJCYQgzcen0STQ0QdAhSiqLu8AADJtjio\/Ob3u0JkMX2eaUpbdQ=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":138,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHoAAEAAHRH9AAHJAa4KGFK8WgQsOABmu6GAbDPIfrKag1SapdpF6KyAEFapw3klz93oxYc+3XGa1CfScVppXe7vEb8p2JvTUJOHSBjaEAbXtaNZ8P\/BA\/WzXWvRHSlGAhkAHlyEo1UlAsppErnhcyDOGe6P1MLW","pkt_caplen":138,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGw8+AbFFFi0NEGguGVRn2AzkRRFZEu7mph+poHmJ9fpvSNxaRbfYMq3y14h4PZRkv8SzAL+H+GtMU+AB8xfGcAg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/6FSAbDPLfrKlw1Sapdo6p9HnE3EsRj1WT0WLkV2vXRsp+dWYDZCcAXY3AxQJw2BM60WixDK9QQa0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFhJmAbFFEi0NAWguGVRmSgehyx7OkPt2n8dHCtIQK14JFF1kmR2tOCmV7Rhf6K7XK9K7Za56VL8oNfjdOpkiv","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG+NaAbFFDi0M8mguGVRlbqlLvXM0MT1w4on8ch2XluXpytvhTziaNCBpMjkXH5nPj2YmULCiYFChmk3WAaB0+Xg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMSwWAbDPJfrKeQ1SapdoTUMqrH2t\/hGZn2rcEZsKqkQaCnHSd+8JNBAY8KPWiJ5iafzuo7cL2FZe6sxT3kO\/LyLBkKIg8Cw==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/DB2AbDPMfrKpg1SapdpCKMKCjAzXM+NJbM12KcLXSz5NKXgrEu1Bk58+JKZRcznhR\/BHhfdIV\/K2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":101,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFUAAEAAHRH9JQHJAa4KGFK8WgQsOABBFrGAbDPKfrKiA1Sapdph5esWc+1DrJCYQgzcen0STQ0QdAhSiqLu8AADJtjio\/Ob3u0JkMX2eaUpbdQ=","pkt_caplen":101,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJEMWAbFFGi0NH2guGVRleFQXWu7HgWRt6BB4zlpnWwey5dkKelQqjidIvmXpaOXb1vcRvfKgr8IDCxtPzu3XIAkcTuw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGPSGAbFFHi0NLmguGVRmAM+vdF6lnOKbveWXU1tG23l4kce8Vvom233dk5CUUjRKpZzphYrdBFWBs5nDkX\/1jnA==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGx+mAbFFFi0NEGguGVRn2AzkRRFZEu7mph+poHmJ9fpvSNxaRbfYMq3y14h4PZRkv8SzAL+H+GtMU+AB8xfGcAg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/5DqAbDPLfrKlw1Sapdo6p9HnE3EsRj1WT0WLkV2vXRsp+dWYDZCcAXY3AxQJw2BM60WixDK9QQa0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/4\/uAbDPNfrKtQ1Sapdr8rpjIgdrEIrUmpH1mm6Y5tLVPMExHJPf3TQYjyKQflrhKVwOxkdvT\/O8o","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/CAOAbDPMfrKpg1SapdpCKMKCjAzXM+NJbM12KcLXSz5NKXgrEu1Bk58+JKZRcznhR\/BHhfdIV\/K2","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/h+aAbDPOfrKxA1Sapdodo5p+1Int73EQRwtuqIQwR3g8U8w9pXKK1KwufD4dy39Ftxx6tBq+l8hn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKJHuAbFFIi0NPWguGVRlk0J0St\/j+Zx5wGpRu0e1oYeGaLiKqhHfldRh9aYKMsF068CndffqvYVtffw9of9a26PhA3bY=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOB+CAbFFJi0NTGguGVRmNiep9nP9w0X0I3y9JO5wglAis1AkAqWtLvhRsQD3De+IG3XgnD0MsNKtLuuaUHzdXn12LChTdSJUq","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJFN+AbFFGi0NH2guGVRleFQXWu7HgWRt6BB4zlpnWwey5dkKelQqjidIvmXpaOXb1vcRvfKgr8IDCxtPzu3XIAkcTuw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/VvuAbDPPfrK0w1SapdpkdOwNEcnX4GmKNeKI6h5IiJGpQYDQJ9h+zkJwzIzj\/npRMFfEp\/rvWI5U","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGQTuAbFFHi0NLmguGVRmAM+vdF6lnOKbveWXU1tG23l4kce8Vvom233dk5CUUjRKpZzphYrdBFWBs5nDkX\/1jnA==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/3+GAbDPNfrKtQ1Sapdr8rpjIgdrEIrUmpH1mm6Y5tLVPMExHJPf3TQYjyKQflrhKVwOxkdvT\/O8o","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFAuaAbFFKi0NW2guGVRkW4rnCIG7W\/Rrsacn1R9P8+zi5SikwnmG\/\/YKkgvqVDxdK50B3LuAUk4RGF9ffs2ta","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/41qAbDPQfrK4g1SapdpSQjl98fqfnOqA63wRWv8T5QDuq3T9vqevj3DSyNfzp+TKuB7SrsA3gPi7","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/g8yAbDPOfrKxA1Sapdodo5p+1Int73EQRwtuqIQwR3g8U8w9pXKK1KwufD4dy39Ftxx6tBq+l8hn","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKKJWAbFFIi0NPWguGVRlk0J0St\/j+Zx5wGpRu0e1oYeGaLiKqhHfldRh9aYKMsF068CndffqvYVtffw9of9a26PhA3bY=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACih+UAAjgbKWq3CdeUKGFK8AbuV7IoFQj5TpMuVUBSklweYAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOC\/qAbFFJi0NTGguGVRmNiep9nP9w0X0I3y9JO5wglAis1AkAqWtLvhRsQD3De+IG3XgnD0MsNKtLuuaUHzdXn12LChTdSJUq","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/UuGAbDPPfrK0w1SapdpkdOwNEcnX4GmKNeKI6h5IiJGpQYDQJ9h+zkJwzIzj\/npRMFfEp\/rvWI5U","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/UOeAbDPRfrK8Q1Sapdqc83iJb5l456DNS+hZ7VcDcfb98za7md8tY+4dMVHzq2YI64HnS9iXf1w1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABGjfWAbFFLi0NamguGVRngq0ZQcYvBY9e56OCVNgcccfsUDUg3RwlTT1QgciuWdUFA1+dY\/sBMUkOPXrHXaoXGCw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJS3WAbFFMi0NeWguGVRm2\/ZnmcFfB42XxZ7vCD0hfLDI665Tt\/OAnyhpOfYsrE\/iDH\/Aju08jgwJVlupwQFMmS3CQTQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/2p2AbDPSfrLAA1Sapdo2BlyBYQCjHwjFHYiZr18DElZ11WVPowRuu5vwOEM0o0x6RBfIwd7O4x58","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFBwCAbFFKi0NW2guGVRkW4rnCIG7W\/Rrsacn1R9P8+zi5SikwnmG\/\/YKkgvqVDxdK50B3LuAUk4RGF9ffs2ta","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069210,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/30CAbDPQfrK4g1SapdpSQjl98fqfnOqA63wRWv8T5QDuq3T9vqevj3DSyNfzp+TKuB7SrsA3gPi7","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/C\/+AbDPTfrLDw1SapdrqvJ9+wcGVW6yO4Joi8vl1NyDLTWxfFZEHIE3KBSgHzjWekIizTHoK9jDF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHibaAbFFNi0NiGguGVRkLqJFERUtuMlHG3SFmshDn1hTeTmBqKGyLWSXFUjwCDHfsBJyPQMjSvk6yFvT8\/RUoydY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK80mAbFFOi0Nl2guGVRl7eUVneFzEvL+jDSprnWRghpp+5yeY101o\/10JQqJqUPhZFW25iB5yv+lyKtRTLZn0bLudJho=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/TM2AbDPRfrK8Q1Sapdqc83iJb5l456DNS+hZ7VcDcfb98za7md8tY+4dMVHzq2YI64HnS9iXf1w1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABGkg+AbFFLi0NamguGVRngq0ZQcYvBY9e56OCVNgcccfsUDUg3RwlTT1QgciuWdUFA1+dY\/sBMUkOPXrHXaoXGCw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJT4+AbFFMi0NeWguGVRm2\/ZnmcFfB42XxZ7vCD0hfLDI665Tt\/OAnyhpOfYsrE\/iDH\/Aju08jgwJVlupwQFMmS3CQTQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/zFyAbDPUfrLHg1Sapdryt8qh504SLRMLzgVKu7kNQkXQh0v6OAAb9+dgXV7DP9PcOyAjtK6UBwcd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/1oOAbDPSfrLAA1Sapdo2BlyBYQCjHwjFHYiZr18DElZ11WVPowRuu5vwOEM0o0x6RBfIwd7O4x58","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG4OyAbFFPi0NpmguGVRkMy00dNZev+pwLiDKx21S0c68Cxz9wVyc7DxEV9C9Zel2SqpxKZrDryo+JKbMNq5FJtg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ibGAbDPVfrLLQ1SapdphAYxZz4H9q0a\/Y9l37Le2bajhguLMU46Z+PnDPLQq1gpXIWBx33kuokzM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/B+WAbDPTfrLDw1SapdrqvJ9+wcGVW6yO4Joi8vl1NyDLTWxfFZEHIE3KBSgHzjWekIizTHoK9jDF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHjdCAbFFNi0NiGguGVRkLqJFERUtuMlHG3SFmshDn1hTeTmBqKGyLWSXFUjwCDHfsBJyPQMjSvk6yFvT8\/RUoydY=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/qYSAbDPWfrLPA1SapdoBJvdsDMqNw6BY02P6WYrVymdYweuYtbYipcysFQbG2PW+l97GT7lNTx7\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK92OAbFFOi0Nl2guGVRl7eUVneFzEvL+jDSprnWRghpp+5yeY101o\/10JQqJqUPhZFW25iB5yv+lyKtRTLZn0bLudJho=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAPxHbSAoYUrwByQGuLDhaBABG21KAbFFQi0NtWguGVRnvp\/K5sS\/1rlir2AFPs5H3xL52M7n\/tls\/UPYVhxkvTi0xONe46PqVaye0ixho4B2uGQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKYM6AbFFRi0NxGguGVRlyI1XubtlR2Q4eWZQP5Bq+elwOL6jHGTAul+9LMFiASDd0YnI9zoWOAergy6XVQmDbngsGRlU=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/yEKAbDPUfrLHg1Sapdryt8qh504SLRMLzgVKu7kNQkXQh0v6OAAb9+dgXV7DP9PcOyAjtK6UBwcd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/UWeAbDPXfrLSw1SapdpNx+J+CDPYwUo+5QZPsYzd3ZGuUoXmqdZ82jnwEkJQQ7M2AoF5ciJqktb1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG5QaAbFFPi0NpmguGVRkMy00dNZev+pwLiDKx21S0c68Cxz9wVyc7DxEV9C9Zel2SqpxKZrDryo+JKbMNq5FJtg==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/hZeAbDPVfrLLQ1SapdphAYxZz4H9q0a\/Y9l37Le2bajhguLMU46Z+PnDPLQq1gpXIWBx33kuokzM","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAPxHbQAoYUrwByQGuLDhaBABOBlGAbFFSi0N02guGVRlW3PoL7Y2LE6eJYIuCPsSrUq0sZQzYo9+oO1d7iEFfuYG5CdN8bFmIZ89v9uTHrP9Tetz1QwhwpwDK","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJ4PqAbFFTi0N4mguGVRlYMfP8hkwJh4ZT2Ny8RvvCvgFp6a3lWiV90alwR+IKBcHC0HD3CFlOy+ApCemAtbbQjMgHVg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBH5h2AbDPYfrLWg1SapdoA1HchKIR7+shHeTAOqfVCBAuCQtHZXdjuRa0ItPbSUAJhFHSuM\/CUCvrOG432EVNLeX8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/pWqAbDPWfrLPA1SapdoBJvdsDMqNw6BY02P6WYrVymdYweuYtbYipcysFQbG2PW+l97GT7lNTx7\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":148,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIQAAEAAQBHaHgoYUrwByQGuKBxaBgBwzDOAbDPZfrLaQ1Sapdrs9sYhbftJ030hI5NGlP8V4driHeie\/Z\/z\/HLMr6WlaerNCLZzFV7LASsogzPPd0OYKSM+fhWylZJ7l9pICTxt7qJHEAu9yT6JBgk3lutHCR7nR3njJY7asE9Yzg==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHBH+IAHJAa4KGFK8WgYoHABG32yAbFFQi0NtWguGVRnvp\/K5sS\/1rlir2AFPs5H3xL52M7n\/tls\/UPYVhxkvTi0xONe46PqVaye0ixho4B2uGQ==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABKZOiAbFFRi0NxGguGVRlyI1XubtlR2Q4eWZQP5Bq+elwOL6jHGTAul+9LMFiASDd0YnI9zoWOAergy6XVQmDbngsGRlU=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKAiiAbDPafrLeA1SapdrG2q1NkxaQkXZpVJQ\/oeeW9qbinVrlDOf6hio6KOaAgdsh9Ad77\/ut\/gf0z9S7wRS+v2bngPs=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":121,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGkAAEAAPxHbOQoYUrwByQGuLDhaBABVReiAbFFUi0N8WguGVRnG3IQ1JSZtT7KAI8iMHpZR1OtVKx0dTHkX6f9rYZ9LFWB40F0dd9O9dVKBOeZ2DXb6MPI6rZtYzutlZPWbKSL\/XQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/TU2AbDPXfrLSw1SapdpNx+J+CDPYwUo+5QZPsYzd3ZGuUoXmqdZ82jnwEkJQQ7M2AoF5ciJqktb1","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHBH+GAHJAa4KGFK8WgYoHABOCmuAbFFSi0N02guGVRlW3PoL7Y2LE6eJYIuCPsSrUq0sZQzYo9+oO1d7iEFfuYG5CdN8bFmIZ89v9uTHrP9Tetz1QwhwpwDK","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAChd+0AA+AbBg638WIAKGFK8AbvqCPsyGz7Wm7gkUBQAALuKAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTK\/EAAjga+dq38WIAKGFK8AbvqCPsyGz7Wm7gkgBQClSKzAAABAQgKopRXsAACYuQ=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/npmAbDPbfrLhw1Sapdqfg61eWPVd8C5F8uX\/Ffdn\/84RmccQuTby2gNx8X2RVqJ1mvdPaCKDz5vK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAPxHa+woYUrwByQGuLDhaBACT4RWAbFFVi0OAGguGVRlPxWpuEko3CPBCw7G4S8DXGTM9GYQzDcJE6wBTHgOeax\/dnKq1clNqtx97qJrq8G0LxZtniV5gLiSPwUfdyy1jOSLXO1siTBvMoVhl3CoHX0Mlt2UW6vcb6tKbPiljPISG8QL3L5BPqzL8Bu2nErkRPU5w1HvGgCOB+kNX3lI0","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":145,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIEAAEAAPxHbIQoYUrwByQGuLDhaBABtDJ2AbFFWi0OD2guGVRnAms4ROvmtfbYZRcamHqlAAtH8izYRl2Um9x99Wqy3kAtgEzBbzJqJJeA+hsPPC8tbksAqT3NMmQNoV2kOO5DFEYnj2BSbGdIZjl8VfQmD4jz0NZmOz8dIgg==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJ5RSAbFFTi0N4mguGVRlYMfP8hkwJh4ZT2Ny8RvvCvgFp6a3lWiV90alwR+IKBcHC0HD3CFlOy+ApCemAtbbQjMgHVg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABH4gOAbDPYfrLWg1SapdoA1HchKIR7+shHeTAOqfVCBAuCQtHZXdjuRa0ItPbSUAJhFHSuM\/CUCvrOG432EVNLeX8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/wZOAbDPcfrLlg1SapdpwluhRG2IJusv6a+Xm3DVk8OhC9JMM5ZLEvqBOjs\/u6f+3RgGlou+7BPoH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0465{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":148,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIQAAEAAHRH89gHJAa4KGFK8WgQsOABwyBmAbDPZfrLaQ1Sapdrs9sYhbftJ030hI5NGlP8V4driHeie\/Z\/z\/HLMr6WlaerNCLZzFV7LASsogzPPd0OYKSM+fhWylZJ7l9pICTxt7qJHEAu9yT6JBgk3lutHCR7nR3njJY7asE9Yzg==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABK\/g2AbDPafrLeA1SapdrG2q1NkxaQkXZpVJQ\/oeeW9qbinVrlDOf6hio6KOaAgdsh9Ad77\/ut\/gf0z9S7wRS+v2bngPs=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/B3iAbDPdfrLpQ1SapdpH9cLNDvlDiKwDjui9a\/BalIBhKbpMXKeLfRZvrFsu\/5sHCgKlIj0fsKz3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAPxHa7woYUrwByQGuLDhaBACfekmAbFFXi0OHmguGVRlcArMyABPKxKXH4+XhSg5elqjEYg5cqRDqSR1HaHulgCYvHsfrNsAmVihdQlWOfQFvyuxCS4otnbsP1we8foJNCAHy1p1PlUeJ6Bf69gNUYvckbyQudxfoDc\/pTuHsy2YvbgZcAe6g7nJMIioA++CSt6eC7YK4hFQgEFQpi4fP\/VuKRD56JWhAzcCm","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":153,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIkAAEAAPxHbGQoYUrwByQGuLDhaBAB1L7SAbFFYi0OLWguGVRlUlzQuRBa5Zi2Ykg2qIgUWg8iAE\/zeJNXhPerKwjO7lQ6l42Zm4oFx+U\/fuv33Eb4evnJLJtDrC55i5UPQZDIqY5zW6ICeijyVyNriGBei50NsYoeTV6OMgzzawRW1e3ES","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":76,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADxoAkAAQAZvaQoYUryt\/FiA6jIBuzJ1sXgAAAAAoAI2sGN\/AAACBAV4BAIICgAC2XoAAAAAAQMDBQ==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":79,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAD\/Ze0AAQBH4oQoYUrwKvAEBYocANQAr1lVimAEAAAEAAAAAAAAEbXF0dAhmYWNlYm9vawNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":121,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGkAAEAAHBH+EQHJAa4KGFK8WgYoHABVSgKAbFFUi0N8WguGVRnG3IQ1JSZtT7KAI8iMHpZR1OtVKx0dTHkX6f9rYZ9LFWB40F0dd9O9dVKBOeZ2DXb6MPI6rZtYzutlZPWbKSL\/XQ==","pkt_caplen":121,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/mn+AbDPbfrLhw1Sapdqfg61eWPVd8C5F8uX\/Ffdn\/84RmccQuTby2gNx8X2RVqJ1mvdPaCKDz5vK","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/EgOAbDPefrLtA1SapdqtwLTTaf+NQoPAdZqXsMOc9Psk41J1BwH4FaWAL8cw5zu4+BhoR0fLT4yd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0340{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACy0dUAA+AZrBa38WIAKGFK8AbvqMmPPnoQydbF5YBIRHFG1AAACBAV4","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoA0AAQAZvfAoYUryt\/FiA6jIBuzJ1sXljz56FUBA2sGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":272,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAQBoBEAAQAZuowoYUryt\/FiA6jIBuzJ1sXljz56FUBg2sOucAAAWAwEA0wEAAM8DAVU9H9uNfuN6igTtfCsi5UGJAGu+tBUa6vvxV3L7s6crIN7mSkHwum5YAkPf9F1sC8Q73hXOE4o3oouZE9fRYbaoAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABE=","pkt_caplen":272,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/w6SAbDPffrLww1SapdohweKykFeOvgbtiwqo7iF+xlRHgiYjcfybLAY1+1Sku0\/2Nd9kerefkN+h","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAPxHa2woYUrwByQGuLDhaBACztImAbFFZi0OPGguGVRnkQUl+37ULimtJIAmWyGmjYzCeGYg5FsjEJSGHBvDEv7qKK8dJtLIP7w2pFZ3wAcx+\/1MFvlZZls3AflSgiM5FkUuXLfZoNaVLdmbcynVTHB2UYRSH1S6dYTVp+BgTYOhKJ\/qaXqOI5fED9zMeIGwY\/+3zTXYGahhzNhu4dzi2RnUJ3KoGa3SRl0pjySd6xEC4fjkGi2NS4pi3SZXgtE8=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHBH90wHJAa4KGFK8WgYoHACT5S+AbFFVi0OAGguGVRlPxWpuEko3CPBCw7G4S8DXGTM9GYQzDcJE6wBTHgOeax\/dnKq1clNqtx97qJrq8G0LxZtniV5gLiSPwUfdyy1jOSLXO1siTBvMoVhl3CoHX0Mlt2UW6vcb6tKbPiljPISG8QL3L5BPqzL8Bu2nErkRPU5w1HvGgCOB+kNX3lI0","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIEAAEAAHBH9+QHJAa4KGFK8WgYoHABtELeAbFFWi0OD2guGVRnAms4ROvmtfbYZRcamHqlAAtH8izYRl2Um9x99Wqy3kAtgEzBbzJqJJeA+hsPPC8tbksAqT3NMmQNoV2kOO5DFEYnj2BSbGdIZjl8VfQmD4jz0NZmOz8dIgg==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/vXmAbDPcfrLlg1SapdpwluhRG2IJusv6a+Xm3DVk8OhC9JMM5ZLEvqBOjs\/u6f+3RgGlou+7BPoH","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0340{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":60,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACwAAEAAjgaJe638WIAKGFK8AbvqMmPPnoUydbF5YBClZMLnAAABAQEB","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/A16AbDPdfrLpQ1SapdpH9cLNDvlDiKwDjui9a\/BalIBhKbpMXKeLfRZvrFsu\/5sHCgKlIj0fsKz3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ypqAbDPgfrL0g1SapdoYHm34j1qj1Kzdfl6xca489wC7JKcxmhFu+015sgmy70IlUpgmY8ur7Ztj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":223,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7BvqAbFFai0OS2guGVRk6wiyHoyDRGZOHE31nNvinOQGOtaowmSTBcjeWMvLqS\/etLKIkmpNXYsjclxlmNzuDaiWpUZdEJkiNY\/znR99fUsAAQtOZqK0UPDIFkn+V8j4LNvwCD7IRduN5JOMkH3eW6pGPO2rO1XUJPYOxqXH3v4RsTBZKE5lkyN2Qv\/lhWbb7ihTcdKi6zzwxrSJXHrTWwGnfYxR1cJbJexXrrfclP6ZJK5mBSg==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":209,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMEAAEAAPxHa4QoYUrwByQGuLDhaBACtGPaAbFFbi0OWmguGVRn38g58e8KGLg1D7gUwx5kaS1+pt9osVmYXvWKzjbr61zvy8vldkDaYsZ0MeyEv228II4r6gjSod0jFAaoo89s2LfeeEWdgtFJ3qlDXNwJcFEVcaL+i9jk5P96qQHucC8trvxLIuuWpGqRVSJw9eBFG35404tSH8ntxjyzqHAcGI5GEjNnq9pyoWnlm8bxBXwG\/q5dk18bnX5g=","pkt_caplen":209,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0422{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":118,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAGYfywAANRH9Kwq8AQEKGFK8ADVihwBSfKJimIGAAAEAAgAAAAAEbXF0dAhmYWNlYm9vawNjb20AAAEAAcAMAAUAAQAABNAACwRtcXR0A3Z2dsARwC8AAQABAAAAAQAErfxhAg==","pkt_caplen":118,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YZSAbDPhfrL4Q1SapdpfM9T5mWj7vBNaaiYXhBkI6oHStC3B1WWT\/icibDtd21Mmimdd+TKLx62j","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHBH9xwHJAa4KGFK8WgYoHACffmOAbFFXi0OHmguGVRlcArMyABPKxKXH4+XhSg5elqjEYg5cqRDqSR1HaHulgCYvHsfrNsAmVihdQlWOfQFvyuxCS4otnbsP1we8foJNCAHy1p1PlUeJ6Bf69gNUYvckbyQudxfoDc\/pTuHsy2YvbgZcAe6g7nJMIioA++CSt6eC7YK4hFQgEFQpi4fP\/VuKRD56JWhAzcCm","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/tI2AbDPifrL8A1SapdrQ7OmPW3Tz38+asUR9ohBT3ek42v19leJu0fGHmWKUh83UB2x77Tq5uQSp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":153,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIkAAEAAHBH98QHJAa4KGFK8WgYoHAB1M86AbFFYi0OLWguGVRlUlzQuRBa5Zi2Ykg2qIgUWg8iAE\/zeJNXhPerKwjO7lQ6l42Zm4oFx+U\/fuv33Eb4evnJLJtDrC55i5UPQZDIqY5zW6ICeijyVyNriGBei50NsYoeTV6OMgzzawRW1e3ES","pkt_caplen":153,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKNUAAjwZ+Sq38WIAKGFK8AbvqMmPPnoUydbJRUBCkjNTtAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":176,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKAAAEAAPxHbAgoYUrwByQGuLDhaBACMTxaAbFFci0OaWguGVRmVcWaHqAMiMyp9UfVgYoOYE72eEvmi0sCmpx+f3faJBJW8izY4z3k2xP31X2qq9xoztYHsAfzOypsJ8RJ\/n9tFSOVIYCZgJxrQeqBWdNBUteCNE7tmDHl2qRVaw67Aj4xUvpgLq7Cj2VdFzAeM32wDLgPT12kvUAE=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0508{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":181,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKUAAEAAPxHa\/QoYUrwByQGuLDhaBACR0qeAbFFdi0OeGguGVRl7mieiHb1BXsPXzsNEf\/doBRMe+9ELxVoJ+Ly1Tqec5xD8OMTHI6zfnXKY89QTzRsljALGcvyzUxCqzeFHUekKnyimLjGRJ6UE34ibi3Upb46+k8X5B9anpehSJsx1vE3ZNnFDq60Gyj8R9deMNxdiELwFl5snas+hQmBvcg==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069211,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/DemAbDPefrLtA1SapdqtwLTTaf+NQoPAdZqXsMOc9Psk41J1BwH4FaWAL8cw5zu4+BhoR0fLT4yd","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/PjGAbDPjfrL\/w1Sapdoqcx+gojqg8tA6NkEZfuiV07\/FVJoEXgvPi0i\/iQKhjzlGpqP54xDYHB5B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/v4qAbDPffrLww1SapdohweKykFeOvgbtiwqo7iF+xlRHgiYjcfybLAY1+1Sku0\/2Nd9kerefkN+h","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":147,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIMAAEAAPxHbHwoYUrwByQGuLDhaBABvxuaAbFFei0Oh2guGVRmlO\/4pWLFisVCEGjQk+AU6uV0zmaIo3Wgif0Q\/lUSvyZJtZrtvVVccSvT7QDCDVkTW68+n5k2QgXaQSFGD+8t2tIVkZKr+fHWkdr8xqI\/RdP+pvMiJ+OkJ8kHu","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/NjOAbDPkfrMDg1SapdrRj9OCK+PkfaJAyhziHB9HW31LYw6g0ItCe3NgIUcqC1Kg0oxfCp6A9Kr0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/SdOAbDPlfrMHQ1SapdrCUgUUmPrOlEVYcn8xbfHaGzhoB9MLMeWiGmT+Dna3ilbfSLvhoFMmTrAc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":215,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHBH9swHJAa4KGFK8WgYoHACzuKOAbFFZi0OPGguGVRnkQUl+37ULimtJIAmWyGmjYzCeGYg5FsjEJSGHBvDEv7qKK8dJtLIP7w2pFZ3wAcx+\/1MFvlZZls3AflSgiM5FkUuXLfZoNaVLdmbcynVTHB2UYRSH1S6dYTVp+BgTYOhKJ\/qaXqOI5fED9zMeIGwY\/+3zTXYGahhzNhu4dzi2RnUJ3KoGa3SRl0pjySd6xEC4fjkGi2NS4pi3SZXgtE8=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xoCAbDPgfrL0g1SapdoYHm34j1qj1Kzdfl6xca489wC7JKcxmhFu+015sgmy70IlUpgmY8ur7Ztj","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":119,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGcAAEAAPxHbOwoYUrwByQGuLDhaBABThE+AbFFfi0OlmguGVRmjV6DyKPFYokIxrbctM1aosR+PxZRCp5HgSqIqjUAF051X24P5jTF3vbtO4he6ldnBOX80XMvFIewI\/cXdBd4=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":130,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHIAAEAAPxHbMAoYUrwByQGuLDhaBABeFo+AbFFgi0OpWguGVRnvtiun2fmxautmkegFEKV2oKm0yKMK6UbpJyEMvfGhD7crhsKSnH73viNCAGnwFfilG0SVJbR+pvqWY9dVik9VPyz6HPOwpNBOzA==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":223,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7CxSAbFFai0OS2guGVRk6wiyHoyDRGZOHE31nNvinOQGOtaowmSTBcjeWMvLqS\/etLKIkmpNXYsjclxlmNzuDaiWpUZdEJkiNY\/znR99fUsAAQtOZqK0UPDIFkn+V8j4LNvwCD7IRduN5JOMkH3eW6pGPO2rO1XUJPYOxqXH3v4RsTBZKE5lkyN2Qv\/lhWbb7ihTcdKi6zzwxrSJXHrTWwGnfYxR1cJbJexXrrfclP6ZJK5mBSg==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":209,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMEAAEAAHBH9uQHJAa4KGFK8WgYoHACtHRCAbFFbi0OWmguGVRn38g58e8KGLg1D7gUwx5kaS1+pt9osVmYXvWKzjbr61zvy8vldkDaYsZ0MeyEv228II4r6gjSod0jFAaoo89s2LfeeEWdgtFJ3qlDXNwJcFEVcaL+i9jk5P96qQHucC8trvxLIuuWpGqRVSJw9eBFG35404tSH8ntxjyzqHAcGI5GEjNnq9pyoWnlm8bxBXwG\/q5dk18bnX5g=","pkt_caplen":209,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/sHOAbDPmfrMLA1SapdpqBW5EatWMK1g+rzk8YogHNPY1nr0oyJ96v+k6nOJ90FKeGtG\/sIJTC2Zv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XXqAbDPhfrL4Q1SapdpfM9T5mWj7vBNaaiYXhBkI6oHStC3B1WWT\/icibDtd21Mmimdd+TKLx62j","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/sHOAbDPifrL8A1SapdrQ7OmPW3Tz38+asUR9ohBT3ek42v19leJu0fGHmWKUh83UB2x77Tq5uQSp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":176,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKAAAEAAHBH92gHJAa4KGFK8WgYoHACMUzCAbFFci0OaWguGVRmVcWaHqAMiMyp9UfVgYoOYE72eEvmi0sCmpx+f3faJBJW8izY4z3k2xP31X2qq9xoztYHsAfzOypsJ8RJ\/n9tFSOVIYCZgJxrQeqBWdNBUteCNE7tmDHl2qRVaw67Aj4xUvpgLq7Cj2VdFzAeM32wDLgPT12kvUAE=","pkt_caplen":176,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0518{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAK0KNkAAjwZ9xK38WIAKGFK8AbvqMmPPnoUydbJRUBikjBBtAAAWAwEAUQIAAE0DAfA+D6DpcQ3Du4DZ7Y6rvcT6jYxmd6Ol\/g3w06+\/HU8sIN7mSkHwum5YAkPf9F1sC8Q73hXOE4o3oouZE9fRYbaowAcAAAX\/AQABABQDAQABARYDAQAk6N+FUIVKZLQccHEX6xyqO1qiHy\/f00KJnytKACn9V9mLgEoo","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoBUAAQAZvegoYUryt\/FiA6jIBuzJ1slFjz58KUBA6oGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFdoBkAAQAZvSgoYUryt\/FiA6jIBuzJ1slFjz58KUBg6oI0IAAAUAwEAAQEWAwEAJNNUjztPeLf147JYV5daEDvCo7lXC38bAOGD1f0x5+vFPP4MGg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/YXKAbDPnfrMOw1Sapdrlk1EdyZopBOIYF5dIDZ7cdWzQc24YRd2+yIHmVW4IwqUzzN1mdUvDB2ex","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIpJ6AbFFhi0OtGguGVRmXE6r0CoRRWJOcD6Fj1zWx\/jnk0qxPGkf5mJpxCsA+qvUYvuwESslQbCCPlMxGuwi9WeWq","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":181,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKUAAEAAHBH91QHJAa4KGFK8WgYoHACR1sGAbFFdi0OeGguGVRl7mieiHb1BXsPXzsNEf\/doBRMe+9ELxVoJ+Ly1Tqec5xD8OMTHI6zfnXKY89QTzRsljALGcvyzUxCqzeFHUekKnyimLjGRJ6UE34ibi3Upb46+k8X5B9anpehSJsx1vE3ZNnFDq60Gyj8R9deMNxdiELwFl5snas+hQmBvcg==","pkt_caplen":181,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABH6o6AbFFii0Ow2guGVRk\/+FoQmBwxZDGTFlVX568ICUicy7tlzfQjD+XOtF3pi5MuMc7XnepGXQ0+gChvPeJPZV8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/OheAbDPjfrL\/w1Sapdoqcx+gojqg8tA6NkEZfuiV07\/FVJoEXgvPi0i\/iQKhjzlGpqP54xDYHB5B","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/MhmAbDPkfrMDg1SapdrRj9OCK+PkfaJAyhziHB9HW31LYw6g0ItCe3NgIUcqC1Kg0oxfCp6A9Kr0","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0461{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":147,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIMAAEAAHBH99wHJAa4KGFK8WgYoHABvywCAbFFei0Oh2guGVRmlO\/4pWLFisVCEGjQk+AU6uV0zmaIo3Wgif0Q\/lUSvyZJtZrtvVVccSvT7QDCDVkTW68+n5k2QgXaQSFGD+8t2tIVkZKr+fHWkdr8xqI\/RdP+pvMiJ+OkJ8kHu","pkt_caplen":147,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/RbmAbDPlfrMHQ1SapdrCUgUUmPrOlEVYcn8xbfHaGzhoB9MLMeWiGmT+Dna3ilbfSLvhoFMmTrAc","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKN0AAjwZ+SK38WIAKGFK8AbvqMmPPnwoydbKAUBCkjNQ5AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1258{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":735,"pkt":"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","pkt_caplen":735,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":119,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGcAAEAAHBH+EwHJAa4KGFK8WgYoHABTiGmAbFFfi0OlmguGVRmjV6DyKPFYokIxrbctM1aosR+PxZRCp5HgSqIqjUAF051X24P5jTF3vbtO4he6ldnBOX80XMvFIewI\/cXdBd4=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":130,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHIAAEAAHBH+CAHJAa4KGFK8WgYoHABeGqmAbFFgi0OpWguGVRnvtiun2fmxautmkegFEKV2oKm0yKMK6UbpJyEMvfGhD7crhsKSnH73viNCAGnwFfilG0SVJbR+pvqWY9dVik9VPyz6HPOwpNBOzA==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/rFmAbDPmfrMLA1SapdpqBW5EatWMK1g+rzk8YogHNPY1nr0oyJ96v+k6nOJ90FKeGtG\/sIJTC2Zv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ncGAbDPofrMSg1Sapdqb9LPtPpJCjNcgoBJV3LsndG7PdPtKMeIeogVd4LPZhImKzCxOJbTIlRqp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDSLCAbFFji0O0mguGVRli2B0U0\/hqc5rw2gce3S0nBtHYHgmL5sUcUE\/i+WY2AG9QFKGMEtpniIqdeDlEKg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ea2AbDPpfrMWQ1Sapdpn9YGqo\/3GtgkD3\/MG9d\/hRHdqPMY7zYP8OyU442iuycHSKMh0D\/WCWyqW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/XViAbDPnfrMOw1Sapdrlk1EdyZopBOIYF5dIDZ7cdWzQc24YRd2+yIHmVW4IwqUzzN1mdUvDB2ex","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIqLiAbFFhi0OtGguGVRmXE6r0CoRRWJOcD6Fj1zWx\/jnk0qxPGkf5mJpxCsA+qvUYvuwESslQbCCPlMxGuwi9WeWq","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABH7qiAbFFii0Ow2guGVRk\/+FoQmBwxZDGTFlVX568ICUicy7tlzfQjD+XOtF3pi5MuMc7XnepGXQ0+gChvPeJPZV8=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/kwiAbDPqfrMaA1SapdrkfETKrSQiNzz1BMJjy57buNmErqD2hA3G\/rb3dGcz21FEXBHxP+i8CF7t","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJDNWAbFFki0O4WguGVRmzWK9q+Qxi3haO96wwars8tOTIQZagHQE3r1sh7jhtJC6+uRKZ13ny3\/MhNJEWi2Q+0qdZvw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHbSyAbFFli0O8GguGVRkviW3rntBCj23OugGT+r5w2jT6p5Agug0zM2+oHL2Ld5s1TpictO3qLrSmCCoiEwJaYu4=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/maeAbDPofrMSg1Sapdqb9LPtPpJCjNcgoBJV3LsndG7PdPtKMeIeogVd4LPZhImKzCxOJbTIlRqp","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDTMqAbFFji0O0mguGVRli2B0U0\/hqc5rw2gce3S0nBtHYHgmL5sUcUE\/i+WY2AG9QFKGMEtpniIqdeDlEKg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/dZOAbDPpfrMWQ1Sapdpn9YGqo\/3GtgkD3\/MG9d\/hRHdqPMY7zYP8OyU442iuycHSKMh0D\/WCWyqW","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WSmAbDPrfrMdw1SapdrJK1yBDBU7tx3Q9QJQe8F8ZcKIMZYvmEBRhE6yEeYLTUhMeS6Vvu2trJwb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ju6AbDPqfrMaA1SapdrkfETKrSQiNzz1BMJjy57buNmErqD2hA3G\/rb3dGcz21FEXBHxP+i8CF7t","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/0q+AbDPsfrMhg1SapdrYZxlVVhoaJ2dFOUG35ya1wDgkGEny4O0PsOS7QlMxYzHz2mDD4uTtmLRV","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFSleAbFFmi0O\/2guGVRl\/D8I8zP3DGM5xrWEQp06bSjKHf4cGFCpFhWFQbiDsJOOF3mqkolzrgWjhqQ8BWeyn","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":102,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFYAAEAAPxHbTAoYUrwByQGuLDhaBABCzX2AbFFni0PDmguGVRkX8VADQ7DrONa4xaHFqghCWh408oCF2q66VQ\/oBC1BKEIrO\/65vcvw5n9oFnyo","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJEO+AbFFki0O4WguGVRmzWK9q+Qxi3haO96wwars8tOTIQZagHQE3r1sh7jhtJC6+uRKZ13ny3\/MhNJEWi2Q+0qdZvw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHcUaAbFFli0O8GguGVRkviW3rntBCj23OugGT+r5w2jT6p5Agug0zM2+oHL2Ld5s1TpictO3qLrSmCCoiEwJaYu4=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/yTqAbDPtfrMlQ1SapdqEq1e0RVl9y7rFwvX9eat6b3aZ\/qyXKusv4u90lsHx+bjff+duud3xTVDf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1258{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":735,"pkt":"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","pkt_caplen":735,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VQ+AbDPrfrMdw1SapdrJK1yBDBU7tx3Q9QJQe8F8ZcKIMZYvmEBRhE6yEeYLTUhMeS6Vvu2trJwb","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJO+iAbFFoi0PHWguGVRlvCxmUeujCBlvNl4cWNnturtGHeEyCgbdFcen8BVUDhzoxerVopo478U2jQrPISNNJ0jW8FA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/zpWAbDPsfrMhg1SapdrYZxlVVhoaJ2dFOUG35ya1wDgkGEny4O0PsOS7QlMxYzHz2mDD4uTtmLRV","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFTnGAbFFmi0O\/2guGVRl\/D8I8zP3DGM5xrWEQp06bSjKHf4cGFCpFhWFQbiDsJOOF3mqkolzrgWjhqQ8BWeyn","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":102,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFYAAEAAHBH+JAHJAa4KGFK8WgYoHABC0ZeAbFFni0PDmguGVRkX8VADQ7DrONa4xaHFqghCWh408oCF2q66VQ\/oBC1BKEIrO\/65vcvw5n9oFnyo","pkt_caplen":102,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/B1uAbDPufrMpA1SapdqZ6Qpv699UZiNotf9SFNQEgIiuN1yAiJtBtZXrHKgjZpyDVP5IkK7izYD5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/xSCAbDPtfrMlQ1SapdqEq1e0RVl9y7rFwvX9eat6b3aZ\/qyXKusv4u90lsHx+bjff+duud3xTVDf","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/WFaAbDPvfrMsw1SapdoABlHs1zZTXF1sbQAsIGS0BGdvQH9ei0EQ5yZj2h5dq+a9niXvLXw7GvWa","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKOEAAjwZ+R638WIAKGFK8AbvqMmPPnwoydbUnUBCkjNGSAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJGQiAbFFpi0PLGguGVRniUmid\/peS38RggZ2D8cSBtIgcyUXCVdAqrEeD6pxGB19sVQr5y5V4gFdG1DpvGPZU3ko8\/w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAPxHbRQoYUrwByQGuLDhaBABJiRWAbFFqi0PO2guGVRnC6RfZNTgREwup\/qxs\/xlfBbtzVpB\/G1VbIBjSPx1VzkUO96SB6tvcMNcfLMRGDIG07CNxkA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/aUOAbDPwfrMwg1SapdpJ+Rdry5MtNC81kZm4K6nTJMZQSS0x9m1dc\/WkN\/5XBjXc\/I+C1r+rcgJ3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJQAKAbFFoi0PHWguGVRlvCxmUeujCBlvNl4cWNnturtGHeEyCgbdFcen8BVUDhzoxerVopo478U2jQrPISNNJ0jW8FA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/A0GAbDPufrMpA1SapdqZ6Qpv699UZiNotf9SFNQEgIiuN1yAiJtBtZXrHKgjZpyDVP5IkK7izYD5","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAPxHbSgoYUrwByQGuLDhaBABE4CSAbFFri0PSmguGVRkf3zPlqen0LVFDLdAA+UcWYSUfn0K\/UIfK\/D2M54I4ZXFEkKTwrf6J5W5OP3khFPk=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAPxHbSwoYUrwByQGuLDhaBABDdYGAbFFsi0PWWguGVRmi2puIQz17geWnhlwnvZMeeKk+y8sLgaWv5u+HnsHT8VnAtRAQgX4UlsxJI1aoAQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBG4SqAbDPxfrM0Q1SapdoCanLsjUZb\/qWNWNvYn5n9TzByjy9gk2sPB7TRbQdyOPYdjq5wKOStsoGaPEZw5oGPZw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/VDyAbDPvfrMsw1SapdoABlHs1zZTXF1sbQAsIGS0BGdvQH9ei0EQ5yZj2h5dq+a9niXvLXw7GvWa","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJHSKAbFFpi0PLGguGVRniUmid\/peS38RggZ2D8cSBtIgcyUXCVdAqrEeD6pxGB19sVQr5y5V4gFdG1DpvGPZU3ko8\/w==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":146,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIIAAEAAQBHaIAoYUrwByQGuKBxaBgBuaC6AbDPyfrM4A1SapdqhLiNqznO6F4ld4G3v1a0IruppBTdLHXc9dno58s8RrfCnRCHioJd5g5ryqqsioQAFD75mP1jJ6bPME3UDWfphNCpZ7MvRHUIcHlOjf3\/libYIav11fitqwVk=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHBH+HQHJAa4KGFK8WgYoHABJjS+AbFFqi0PO2guGVRnC6RfZNTgREwup\/qxs\/xlfBbtzVpB\/G1VbIBjSPx1VzkUO96SB6tvcMNcfLMRGDIG07CNxkA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/ZSmAbDPwfrMwg1SapdpJ+Rdry5MtNC81kZm4K6nTJMZQSS0x9m1dc\/WkN\/5XBjXc\/I+C1r+rcgJ3","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAPxHbRwoYUrwByQGuLDhaBABHeFuAbFFti0PaGguGVRk0YsAMc8p1wsBW5OjLwlm+Ota9HIbxQopz9KIEQK8IkMWOgEqYiFZyUsHcJQlDw441tNk=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":70,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADZOx0AAQAYrcAoYUrzLzZfp0tYfkMl8NsazTa2QgBgBtkjwAAABAQgKAALZ\/swmIb5QFA==","pkt_caplen":70,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":85,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEUKOUAAjwZ+Ka38WIAKGFK8AbvqMmPPnwoydbUnUBikjNy5AAAXAwEAGNqCFgbWv18wha9ZQIz07o\/4gF17BR3UvQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":136,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHgAAEAAQBHaKgoYUrwByQGuKBxaBgBk1tCAbDPzfrM7w1SapdqBqFldpKOE28y9nCSs5\/O\/vPfsP0HzkDWoTUhwhV8n3u6Pe+YFao+UcF\/2uOcIHsq3HuPCs7T7eFNpEaIt8FpJaoPSZIYVg0sDR+6xcoVmtQ==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069212,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoCUAAQAZvdgoYUryt\/FiA6jIBuzJ1tSdjz58nUBA6oGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBWjf6AbDP0frM\/g1SapdpBk7VZq5a4pvvbOcPn1VgvBCTxpSh7X+QY9enfo+\/duAmq+h0qddBK2lSbI\/aDlOggqrUiXJtrMbi+otgYLipXEzE=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABLmd6AbFFui0Pd2guGVRmnipbL8KmKJpK6f+o5iYD5Gw3UDYxMBVyPweoQ0sQl0NGwJLsgK6KCj\/kpSvApTgcOdegkG7en","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABK6CeAbFFvi0PhmguGVRnztgPduBqUHXqfqWKaPhDJjYevsEFjA\/0ppJ4RcF+Zmicnp7kmMHYfk3x8OBZz4bkb6RKmiJE=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":182,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKYAAEAAQBHZ\/AoYUrwByQGuKBxaBgCSkriAbDP1frNDQ1Sapdol+6sLGE3o4+yCPj\/pd5T69+gF+1GsJnCNC6HYbd1xA9qIIRBTW8DGHbu1rf05p++Z4yl2zqkiv0S6ZeIfFh4QUaMmz2ZL3f7u4Q\/B8NBr3xOCePQvY33Q\/Dtvkx4qBY3LJDvyboZlWzU7QXIwB56a60q27PBg64b7tQctckY=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0722{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":340,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAURoCkAAQAZuWQoYUryt\/FiA6jIBuzJ1tSdjz58nUBg6oIbtAAAXAwEBF9nxm+75lkrSWsy8mx0YAt37N9xyawKfY85FKDpVk4hoBh4tcxA2OULf9RiItPOI6kIaOQ6Ha0EdXmhnJuJYq1I2D5640fn0SuAMzeFmjqjDyPgvFsZONCjiVezMLBzzt0heusjL66SxZ4fm79VqLYyIbgH8hgB1B9NM7Plg+vrljZoLeIhqVgDa4DPmoMjrv0qkkQCLoJjOKRCFFpIoObbhGmCWgiBYg4XESQvuctfVGQZH0pSmdzlozGe2\/oe2aTMjxA68fPz76v+rfo3d3W51HXGwwryKg4lqXJ\/kUHKfzuJ5oH2vvlnb+8yMd1hOpr8IjgbQ+F0N4ciIsHZ4lQExz30+NE\/Vj2fEP2NtnInve7jNh4BrYA==","pkt_caplen":340,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":83,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAENoC0AAQAZvWQoYUryt\/FiA6jIBuzJ1tkNjz58nUBg6oIICAAAXAwEAFmNKDPulFOMv6maUxzuBFbXVtCb3V+8=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAPxHbQwoYUrwByQGuLDhaBABL91GAbFFwi0PlWguGVRngP8uUDZy+nXziIIKND8uRRqktut\/d5W3yUHo8NchullIPcktomLD+uQb5aIlClnR4JMv6T3yC","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABIkoqAbFFxi0PpGguGVRlhLa6OmzF72f3vmZA1F+Gc+MC8ABcxb2tu38ymDHztFNhtYNaFd8ej1\/UyJ48MkTbkvgSB","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAQBHZ1AoYUrwByQGuKBxaBgC6XG+AbDP2frNHA1SapdrXX6YYtYC+bMs2nXPiUKLoPZxY02XQC0+E6ohsIOTAWIwqXJ3oLVOj98feOhIMnQAuXT8docObk5Oh6\/e1Asudt91D6rpxGtYkEgO+fS9creGUtl9QfTqceMRaTK6Z0hewhIqZa2AhQ22FKXqo8kYWkQofX6ri\/bh46w+jSPDFjcYTglJ9t8MDOyLoT7OcoGVtLW7wvZMxVcfDpEuPQxGqR8sw\/0gg","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHBH+IgHJAa4KGFK8WgYoHABE5D6AbFFri0PSmguGVRkf3zPlqen0LVFDLdAA+UcWYSUfn0K\/UIfK\/D2M54I4ZXFEkKTwrf6J5W5OP3khFPk=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHBH+IwHJAa4KGFK8WgYoHABDeZuAbFFsi0PWWguGVRmi2puIQz17geWnhlwnvZMeeKk+y8sLgaWv5u+HnsHT8VnAtRAQgX4UlsxJI1aoAQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABG3RCAbDPxfrM0Q1SapdoCanLsjUZb\/qWNWNvYn5n9TzByjy9gk2sPB7TRbQdyOPYdjq5wKOStsoGaPEZw5oGPZw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":146,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIIAAEAAHRH8+AHJAa4KGFK8WgQsOABuZBSAbDPyfrM4A1SapdqhLiNqznO6F4ld4G3v1a0IruppBTdLHXc9dno58s8RrfCnRCHioJd5g5ryqqsioQAFD75mP1jJ6bPME3UDWfphNCpZ7MvRHUIcHlOjf3\/libYIav11fitqwVk=","pkt_caplen":146,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0449{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":136,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHgAAEAAHRH9AgHJAa4KGFK8WgQsOABk0raAbDPzfrM7w1SapdqBqFldpKOE28y9nCSs5\/O\/vPfsP0HzkDWoTUhwhV8n3u6Pe+YFao+UcF\/2uOcIHsq3HuPCs7T7eFNpEaIt8FpJaoPSZIYVg0sDR+6xcoVmtQ==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHBH+HwHJAa4KGFK8WgYoHABHfHWAbFFti0PaGguGVRk0YsAMc8p1wsBW5OjLwlm+Ota9HIbxQopz9KIEQK8IkMWOgEqYiFZyUsHcJQlDw441tNk=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABWieSAbDP0frM\/g1SapdpBk7VZq5a4pvvbOcPn1VgvBCTxpSh7X+QY9enfo+\/duAmq+h0qddBK2lSbI\/aDlOggqrUiXJtrMbi+otgYLipXEzE=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABLnfiAbFFui0Pd2guGVRmnipbL8KmKJpK6f+o5iYD5Gw3UDYxMBVyPweoQ0sQl0NGwJLsgK6KCj\/kpSvApTgcOdegkG7en","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHBH+HAHJAa4KGFK8WgYoHABK7EGAbFFvi0PhmguGVRnztgPduBqUHXqfqWKaPhDJjYevsEFjA\/0ppJ4RcF+Zmicnp7kmMHYfk3x8OBZz4bkb6RKmiJE=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKOkAAjwZ+Ra38WIAKGFK8AbvqMmPPnycydbZDUBCjcNF1AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0529{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":196,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALRoDEAAQAZu5woYUryt\/FiA6jIBuzJ1tl5jz58nUBg6oCh2AAAXAwEAhyI1RZSshsm\/ySnN9ivPcTOIgp\/DThGBVPERsr7GiuB6psEkY82IBdyeOw0TdHf621jnPtAGF15dXm0Ir1TbRtJW6f7H3dQpQZ15w36Cbm8sXhCYyu92hbvTLu2Iiphzzgzh22BF+52Yrus4eF4Drr8T4DjXXtMe9rqlNR163FX9BqcCHZc1Sw==","pkt_caplen":196,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKO0AAjwZ+RK38WIAKGFK8AbvqMmPPnycydbZeUBCjVdF1AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0509{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":182,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKYAAEAAHRH81AHJAa4KGFK8WgQsOACSjp6AbDP1frNDQ1Sapdol+6sLGE3o4+yCPj\/pd5T69+gF+1GsJnCNC6HYbd1xA9qIIRBTW8DGHbu1rf05p++Z4yl2zqkiv0S6ZeIfFh4QUaMmz2ZL3f7u4Q\/B8NBr3xOCePQvY33Q\/Dtvkx4qBY3LJDvyboZlWzU7QXIwB56a60q27PBg64b7tQctckY=","pkt_caplen":182,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":202,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAQBHZ6AoYUrwByQGuKBxaBgCmosuAbDP3frNKw1SapdpPAjFLD+Vyo3\/w3fZDzQNx9DMmHNmVDvIV33PZRcxntKcdcEjad2wu3sZMyjGSBZB9whbfDE+tii7QCBoIHm9PtXUG+Y6fVljGlLqMdzaGnHchfNXiMjK6Zzm2K2hBT1OOu58CHIAtvb1okUIztNqV6C5O60WsgePSuhekDfvZhs8Dr6KUe3XSvO698JxMhFmZSw==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":172,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJwAAEAAQBHaBgoYUrwByQGuKBxaBgCIXjKAbDP4frNOg1SapdqA2rEKMB1OTRI2A9bpZhZCg5xLSKwM\/QYf6m1BQ6t5pT5gve7XwwmXj76HHEZCHKBSpzwE0Tuz4IijU+Yw\/QwHwj7XWzlZmO5mCZcuTcjCZdhMbG+s29VrUXnyWyPxjz149YznA89VDYsDpnx44FR\/BDCb3Q==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":108,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFwAAEAAPxHbRgoYUrwByQGuLDhaBABICxOAbFFyi0Ps2guGVRmwSduflsOEBNvFWDceSQSrgUztHCxd9IA3SdKojbdhrbdCd+yKF\/6dGnhkHFQpM7FvXa80","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHBH+GwHJAa4KGFK8WgYoHABL+2uAbFFwi0PlWguGVRngP8uUDZy+nXziIIKND8uRRqktut\/d5W3yUHo8NchullIPcktomLD+uQb5aIlClnR4JMv6T3yC","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIlqSAbFFxi0PpGguGVRlhLa6OmzF72f3vmZA1F+Gc+MC8ABcxb2tu38ymDHztFNhtYNaFd8ej1\/UyJ48MkTbkvgSB","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHRH8rAHJAa4KGFK8WgQsOAC6WFWAbDP2frNHA1SapdrXX6YYtYC+bMs2nXPiUKLoPZxY02XQC0+E6ohsIOTAWIwqXJ3oLVOj98feOhIMnQAuXT8docObk5Oh6\/e1Asudt91D6rpxGtYkEgO+fS9creGUtl9QfTqceMRaTK6Z0hewhIqZa2AhQ22FKXqo8kYWkQofX6ri\/bh46w+jSPDFjcYTglJ9t8MDOyLoT7OcoGVtLW7wvZMxVcfDpEuPQxGqR8sw\/0gg","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAACgKPEAAjwZ+Q638WIAKGFK8AbvqMmPPnycydbbqUBCiydF1AAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBU8LWAbDP5frNSQ1SapdqPK16Gv8uN7HBPCdQD8Sn8v9cIeln4lJ80TgNeas2+gzAB0a7zI\/2aL1ckLEMXF\/91yr0krWpcYCkJv\/dPF5sU","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAPxHbQgoYUrwByQGuLDhaBABMgF2AbFFzi0PwmguGVRk8vld9HppDGl9\/R\/HfTIzt\/ai4BBRpSj\/UdvKM9kDWqp5zkqINdLg5AeUIiMhmBxSLopQFKaMePA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAPxHbSQoYUrwByQGuLDhaBABFd+GAbFF0i0P0WguGVRmXfplvn64rQGfO5WbNU3XtOg5yXVdQP8bEuGr6Ln\/HpGodY1maKeniYmY2yEr34IXj","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEPgeAbDP6frNWA1SapdoGpI9LVChpF3I5C9OnNmd6w3gv\/slxfrDSzJIXyWaR\/5sAjb61froJlJ8Zm+siTek=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":98,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFIKPUAAjwZ+GK38WIAKGFK8AbvqMmPPnycydbbqUBiiyaGSAAAXAwEAJey4EkCRtBJEDBSUmpwx40naJSdEZIBgpY0QyCaI7yH9yXOkrrY=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoDUAAQAZvcgoYUryt\/FiA6jIBuzJ1tupjz59RUBA6oGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBOlduAbDP7frNZw1Sapdo523A7i63ODnH+ZED0lhTHW4a6wNa1N4vP3mq9SJDiyAdAS+8dNm+298S6+Y8Bc7Qa+UEus5xut328","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/Sl2AbFF1i0P4GguGVRnw\/9TZlJ\/4U02ShR0I0nfjBteIp0fqhsGQRyRbPqnvmEs3yF542Wia419Z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/wPOAbFF2i0P72guGVRliWZShUOlfO5VGkaRtqjxgWZ\/qXjCtHye6RRU9g9Z4NWtTA7RrgVx1jN8D","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0458{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAQBHaJAoYUrwByQGuKB1aBwBq7tOByAAMVJql2krhbV89oUMcy\/H1yMRyxtzLvCuV+NKOpWlKABNpiuOYr7ETUv3rdzsNnsxA\/ZnLoRRbbOFaLNLF7\/fqnOEK7h4w8e0O7kWD7tpnQ+qAAAALtTDeeR\/VL0OxsQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAQBHaPgoYUrwByQGuKBxaBgBQ6fiAbDP8frNdg1Sapdq100xOQS\/9ugEzw3aGyjeqP7sk\/jnFicyEfDDUmd19FLRu0zKqBXG5wZ9qsIQDSA6zWMFxeWD\/siZYPyI=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":83,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEMKPkAAjwZ+Jq38WIAKGFK8AbvqMmPPn1EydbbqUBiiyaDuAAAXAwEAFvvMU6Wd8\/seoireeLlt0w24Shj3cBw=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoDkAAQAZvcQoYUryt\/FiA6jIBuzJ1tupjz59sUBA6oGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/mHOAbFF3i0P\/mguGVRmUbYnVILlL4yUK9I\/UZNAaEeq416\/ZMhTQo02c9NF9SENZ\/egXb4jCSpwR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":169,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJkAAEAAQBHaCQoYUrwByQGuKBxaBgCF7NWAbDP9frNhQ1SapdrXX1rTYv+4T3\/2XJHT84DxdQj11tIkb6lTn7x40Nr4YjZcfx9ozzj0l0qUWe\/Khg61kFbj0yEad4vf0Z+LpksnC+wnGr0O5B7pJ\/EuiYlJZvSy4xDsOymDVPg\/VITUkiPRIdnYbdMMTY0\/JDkJ7Fj\/IQ==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":202,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHRH8wAHJAa4KGFK8WgQsOACmnrGAbDP3frNKw1SapdpPAjFLD+Vyo3\/w3fZDzQNx9DMmHNmVDvIV33PZRcxntKcdcEjad2wu3sZMyjGSBZB9whbfDE+tii7QCBoIHm9PtXUG+Y6fVljGlLqMdzaGnHchfNXiMjK6Zzm2K2hBT1OOu58CHIAtvb1okUIztNqV6C5O60WsgePSuhekDfvZhs8Dr6KUe3XSvO698JxMhFmZSw==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":98,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAFIKP0AAjwZ+Fq38WIAKGFK8AbvqMmPPnycydbbqUBiiyaGSAAAXAwEAJey4EkCRtBJEDBSUmpwx40naJSdEZIBgpY0QyCaI7yH9yXOkrrY=","pkt_caplen":98,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoD0AAQAZvcAoYUryt\/FiA6jIBuzJ1tupjz59sUBA6oGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":83,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAEMKQEAAjwZ+JK38WIAKGFK8AbvqMmPPn1EydbbqUBiiyaDuAAAXAwEAFvvMU6Wd8\/seoireeLlt0w24Shj3cBw=","pkt_caplen":83,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":56,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAChoEEAAQAZvbwoYUryt\/FiA6jIBuzJ1tupjz59sUBA6oGNrAAA=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":210,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMIAAEAAQBHZ4AoYUrwByQGuKBxaBgCuSTWAbDP+frNlA1SapdpEIeDDwNIGuNygkd517MBQXgBits9sXbGSwja7z5btFvtlrMo3ktmPlMJYEo2OzGQ6Y035zf8fqSa21O+n6eXXAjKLHPAGfxvDb4qLwd5iK6nlr0C\/etTyCRs4IH3F5hglgeBITOHG0wLR3u1kRBDjZQpZLjj2m3bFYOptWozB8Ix\/Tyc6+tlbv9T3ka7eFlMhIPw64Si+TEHD","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/LHGAbFF4i0QDWguGVRk5AecA11Rmxp78cwkTC5u+Ck3VAjAH+fpcJjPREAD95XNmGQiOk2OLq6o7","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/ICeAbFF5i0QHGguGVRlYTdAXYQ3sQfa4FlY0KPVmqCYZLP4B217CyMsoaleqAb1\/KN72WPGpfCwA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAQBHZ7QoYUrwByQGuKBxaBgChD1+AbDP\/frNow1SapdorAisRCv5zKWcR99Cs34rt3KBzESZz31x9TOgzYE+yULmjQcCi8qpFkt0BOfqngkxUHeCauOQxJ+xEtGv0x4CzStv4GPGTO\/4ofrflXiSE3cuegJHqfd8hLA1LLAQXTlCG1JUoeOxe9XzKt6uNvReM2jHl0pGcBMGWwiTKW2DRxd8IUSwikmrY3Fk3WL4=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAQBHZ6goYUrwByQGuKBxaBgCkx2mAbDQAfrNsg1SapdrXhbPQQdKTuaXIj2dW98a5d8N3K08\/ylwXxQUk+vdFz8g3TszJeGjcZTI8QbWk5+2\/9bkahMPaM9ejFrtWOsWnDW96cY0yGzlRSAJQNGQuEdPU8bBzmJuowEpl9UgQkSqoIbpaz9vuJynyoPtBZHqyiTUBTfgS++m+KJWRkSvuzFq7uO\/EOQAJI3sU0cmVp+w=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/SiSAbFF6i0QK2guGVRmeGdoxhBTJ6BR5D5aCMEVOdrIG5jh+66ePISSiXqxMYxiV8HDGhb\/wpzod","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/w8mAbFF7i0QOmguGVRmCwnozuQH+1fWpSRBuHskwhHwaESGssh6FVzItaNymbgLMD\/LRFPdjmoKv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0497{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":172,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJwAAEAAHBH93gHJAa4KGFK8WgQsOACIWhiAbDP4frNOg1SapdqA2rEKMB1OTRI2A9bpZhZCg5xLSKwM\/QYf6m1BQ6t5pT5gve7XwwmXj76HHEZCHKBSpzwE0Tuz4IijU+Yw\/QwHwj7XWzlZmO5mCZcuTcjCZdhMbG+s29VrUXnyWyPxjz149YznA89VDYsDpnx44FR\/BDCb3Q==","pkt_caplen":172,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAQBHZ6woYUrwByQGuKBxaBgCjLLuAbDQBfrNwQ1SapdpxobyoWQHXgYiRcLQPfzH9dhyM+heGqebO4B1ZbCL613Jr8sb8f67Vw\/EZfFWDhlmuM4s+69DXLfgRjT\/OF5OD6vpdCaBSjPjw0ymgv7iycu1NB+Hg9IKmsd1ZutoPm4QsVNi9mYQNaT4W5T0SeUHHh\/y5K0Ofx+QGmxCOnkQBZuXa032SOZeqJ3FS+ZSL\/g==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":108,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFwAAEAAHBH+HgHJAa4KGFK8WgYoHABIDy2AbFFyi0Ps2guGVRmwSduflsOEBNvFWDceSQSrgUztHCxd9IA3SdKojbdhrbdCd+yKF\/6dGnhkHFQpM7FvXa80","pkt_caplen":108,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/\/bKAbFF8i0QSWguGVRk16K3rbZ2SCVjcoat\/FIWNGKspQmIvkBRckx8xqyCkDQNM9yPjkP3UEHB9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":195,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALMAAEAAQBHZ7woYUrwByQGuKBxaBgCfkliAbDQCfrN0A1SapdrVoekHqhJQwfddsQTLcf6NuBSfhd0l2zocORejVx\/mmHOAW8dL453V2HqpVfB9TvRjRu7ZCWTw6BH\/aUmrdjYCCy+Lww5vWQKnsI4KutQ8cITarkVUebxfAII72rPC756jC2+Rmv6pQt8vaELur3zxEhGrYJr6aCb0xHbs2MpIpQq8bbzQ7ckP4jV8","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU7JuAbDP5frNSQ1SapdqPK16Gv8uN7HBPCdQD8Sn8v9cIeln4lJ80TgNeas2+gzAB0a7zI\/2aL1ckLEMXF\/91yr0krWpcYCkJv\/dPF5sU","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":134,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHYAAEAAQBHaLAoYUrwByQGuKBxaBgBivgyAbDQDfrN3w1SapdocCh4JDf8avinnt4NMdnNWpSiJ4AGIjnwVn67Xc+taDKqlFepNpRR0m2inyFo1HCebD8qFcu8o1k7A8M60F0me8S4lKZ9mLqNSvkXuy+o=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAPxHbTwoYUrwByQGuLDhaBAA\/1VSAbFF9i0QWGguGVRnTTlWbuz7MrmrH3\/ioPBkBjOLUOjCiQ\/osqPbgtQg\/zLHRu79yDvgpp\/RF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAPxHbMQoYUrwByQGuLDhaBABdJWWAbFF+i0QZ2guGVRmTCQi7u1W\/d3ooNYgQekMAvBJFsZIRmVugJrEVKWnIvO3\/NjVdrLrk8cCcJE5EJc\/cQjvBHzoAGF7wGWP40W9xuzWJf7N5enLI","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069213,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKxmuAbDQEfrN7g1SapdpMg8DL0VVOwA4dwN1PAyNu\/XTLgrcZksIWzSiA6TKdDksjM0u\/d+pMkW7L\/yF0OgI4sTxsD\/s=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPcuOAbDQFfrN\/Q1Sapdpr5A+wJXodKG314NhRU0Y80kefxDChWMVJvK+PnU5M31jHVoP82QWZZF263gfz9u1cgFbz32YL\/Czu3g==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":163,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJMAAEAAPxHbDwoYUrwByQGuLDhaBAB\/sI2AbFF\/i0QdmguGVRlnnmdf7GZ8Lbg5Ap6EpFJVqO0L2XYiolGBa5b4FzNm9CiwylxPnP+orPe7C86ril1RjXcOPN2cBfpMrWFip6z+72xER42cqJe\/DP25EWp9iRTvqv66syllVtdBbTRN3+RbeFID+hb46wh2VA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":218,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMoAAEAAPxHa2AoYUrwByQGuLDhaBAC2g1KAbFGAi0QhWguGVRn+YngxocbxPL9Hchw+vrbzsrZy84q0HksZTDK6OmriJLjJTcdYFCbLL+3C4S2clSMr8LuSENXjmwvZB+uk2XttO2KGccoc2uV5jV6Qxg3CwceDwGOMAPDjAzT5IBRtWEvyGNv2tjNHj46QkFEB+n8HAPGteWPDm+g\/0OF0vvXCU52BifupwpXH9pY\/rIVTKzJSUXO5+igL\/rHhzVwWx+mQdwA=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBONHqAbDQGfrODA1SapdrV7vhggfkbDNATEMqNUxZuGQ7hvghHrA\/wZ7RPEMk0p6q5GqAdCRulZcw+HGBs\/vWtzKzdGc4xpwcZ","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBFWAqAbDQHfrOGw1SapdptKqOik3c6rYZHlcb8g+QekRH0SUbWVmHSmn+pL+XqWrnw\/\/zC9RpAUWpe+97Mb3wQ","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":207,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL8AAEAAPxHa4woYUrwByQGuLDhaBACrqaiAbFGBi0QlGguGVRlb8nhlLzbPkc8Wnwx9xadOus8aqY3McWVZVp3RNGNqBgVqPpQot29pRfSrnqaDtPTHLNB9Td89qmebzRH2caN4dv7tcX4c8l\/OKppp1q+aKeloVQdLtNq8FXei0MB3S7\/UN4cIsmO9XqJ9tjx1PBu\/\/lmtfoVpdXUKMygwBPph6FId4sc7JpwSE5NpyPo4XB0IFFwvLW5i","pkt_caplen":207,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHBH+GgHJAa4KGFK8WgYoHABMhHeAbFFzi0PwmguGVRk8vld9HppDGl9\/R\/HfTIzt\/ai4BBRpSj\/UdvKM9kDWqp5zkqINdLg5AeUIiMhmBxSLopQFKaMePA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHBH+IQHJAa4KGFK8WgYoHABFe\/uAbFF0i0P0WguGVRmXfplvn64rQGfO5WbNU3XtOg5yXVdQP8bEuGr6Ln\/HpGodY1maKeniYmY2yEr34IXj","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEOe2AbDP6frNWA1SapdoGpI9LVChpF3I5C9OnNmd6w3gv\/slxfrDSzJIXyWaR\/5sAjb61froJlJ8Zm+siTek=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLLt+AbDQIfrOKg1SapdrFqp8C6LHknbUfcAnfh0U28A9PWuiR6bZxZlqabWvs3e\/6QfoNBAxNTBLxWHWe1U8VfMhKIKKw","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":191,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK8AAEAAPxHa8woYUrwByQGuLDhaBACbKTuAbFGCi0Qo2guGVRmwyZlc+XuBluK28ySoCgRVsShq7gT1zHzizDv\/7mVWxjvDvOSkdSPAajdpzCF64\/GkuIPdkfMEe6wXrippzt\/roDIfa9mvsAX8\/VvO6652Upws3hedTC2yqSc32CpNNXTq5rrnp+f1elw9gslohOzvTaOpVQCYxbypSNhHc6IBiS6mbv3EhFo=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB79dKAbFGDi0QsmguGVRn6blRgIYPe4aItNtxGM8IV2QbeG6+X9YMx2Wf0fI\/w07KkBVGRSmRgmsHOJm0NMsxHnz10J8L\/AiXdIxe3XXmfhphqH026rAGUvVgcNybpWJIqsVx0J7Hi7UkHVTP9YDB+cvaqMcQ3","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOkcGAbDP7frNZw1Sapdo523A7i63ODnH+ZED0lhTHW4a6wNa1N4vP3mq9SJDiyAdAS+8dNm+298S6+Y8Bc7Qa+UEus5xut328","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMoXeAbDQJfrOOQ1SapdqrYvFmo2h7iUONq\/Mb2QIzKk1OE6pPy6AH0uVuIwwYr\/Qt10xp0vwY67GCVppH7idEz27Bl4psAA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/TneAbFF1i0P4GguGVRnw\/9TZlJ\/4U02ShR0I0nfjBteIp0fqhsGQRyRbPqnvmEs3yF542Wia419Z","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/xQ2AbFF2i0P72guGVRliWZShUOlfO5VGkaRtqjxgWZ\/qXjCtHye6RRU9g9Z4NWtTA7RrgVx1jN8D","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKsL6AbDQKfrOSA1SapdqUlwAL3BJB5inTrRc\/ipTNb7BI5s8BbUSVipN646tG96TE27m3nHBmkVu\/xRpjd3SaoBv3xBU=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0530{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkK+CAbFGEi0QwWguGVRk0cIkO9kD5S3VEI6wvl+VFlAKPuc+Dc8W4WKwSMsYxiTfgnvtqZKrN9WV8VwbqXMmMOQTqrdLfxbDqT1sX0dW7DTi1rzAGbMzKOP8l5TzoeosF0tkYpVbTanuCz0oUtXXFvZEXyoFgsOOl4EXhjYlM2RTRJqV8KYOO39amblAWXL641GEpxhIpnOLE2gCKrt0=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":209,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMEAAEAAPxHa4QoYUrwByQGuLDhaBACtPt2AbFGFi0Q0GguGVRkBil1d8mrAX0mToqjuUYJdBwdfotLO2jZhEmyFkztqMhFxvouh7JC9j57WInYeg1x9QPlIpO0ISw1kODuwAqSo3H+94MubopkU4X6N3+HM12XYO21oQPAgdRatQAemwDa\/H5IW26AlUuxLWZgn8xGuDtbKTWN8Bd7q79spwYaEfbUCk\/f2urFykd5syQq8XYGzW04rrmINIhg=","pkt_caplen":209,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgUsOQBq6rmByAAMVJql2krhbV89oUMcy\/H1yMRyxtzLvCuV+NKOpWlKABNpiuOYr7ETUv3rdzsNnsxA\/ZnLoRRbbOFaLNLF7\/fqnOEK7h4w8e0O7kWD7tpnQ+qAAAALtTDeeR\/VL0OxsQ==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0421{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":116,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGQAAEAAHRH9FgHJAa4KGFK8WgQsOABQ5d6AbDP8frNdg1Sapdq100xOQS\/9ugEzw3aGyjeqP7sk\/jnFicyEfDDUmd19FLRu0zKqBXG5wZ9qsIQDSA6zWMFxeWD\/siZYPyI=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/nI2AbFF3i0P\/mguGVRmUbYnVILlL4yUK9I\/UZNAaEeq416\/ZMhTQo02c9NF9SENZ\/egXb4jCSpwR","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":111,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF8AAEAAQBHaQwoYUrwByQGuKBxaBgBLlh2AbDQLfrOVw1Sapdq6rEJXebqQKFFjYEzV7OTD+TK9nRBUpU7A2NyNjr3qP\/fKUoP+MEcvCGHgOjb87g7L5nY\/js5f","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":169,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJkAAEAAHRH84QHJAa4KGFK8WgQsOACF6LuAbDP9frNhQ1SapdrXX1rTYv+4T3\/2XJHT84DxdQj11tIkb6lTn7x40Nr4YjZcfx9ozzj0l0qUWe\/Khg61kFbj0yEad4vf0Z+LpksnC+wnGr0O5B7pJ\/EuiYlJZvSy4xDsOymDVPg\/VITUkiPRIdnYbdMMTY0\/JDkJ7Fj\/IQ==","pkt_caplen":169,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":210,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMIAAEAAHRH8uAHJAa4KGFK8WgQsOACuRRuAbDP+frNlA1SapdpEIeDDwNIGuNygkd517MBQXgBits9sXbGSwja7z5btFvtlrMo3ktmPlMJYEo2OzGQ6Y035zf8fqSa21O+n6eXXAjKLHPAGfxvDb4qLwd5iK6nlr0C\/etTyCRs4IH3F5hglgeBITOHG0wLR3u1kRBDjZQpZLjj2m3bFYOptWozB8Ix\/Tyc6+tlbv9T3ka7eFlMhIPw64Si+TEHD","pkt_caplen":210,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":109,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF0AAEAAQBHaRQoYUrwByQGuKBxaBgBJER+AbDQMfrOZg1Sapdp9RBzjf0wMo8ibI7XIs+oRUib3vRmOfOAeGrauf8dIHCT0gxAvuUq3xDcDvVaduQt5KDVCWg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjgr2AbFGGi0Q32guGVRlQDGTFzas8seh28zV8C+niXDz9TvwXISjZUs4jj+g1QFYW1UDTB35IolT\/YyCYno6JfEfJYCWDXT+Uhys2XpRx8LnfRwSnV1MMJmZvS5AhtAjx4I0CHu1\/rKGjjVKI4Wz934UipVaMg3rFuWzv1\/EbGKk4+VUl9KAh8s83YriMzc5j1xQd4zEXnJ4yVhMEEg==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/MIuAbFF4i0QDWguGVRk5AecA11Rmxp78cwkTC5u+Ck3VAjAH+fpcJjPREAD95XNmGQiOk2OLq6o7","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/JEGAbFF5i0QHGguGVRlYTdAXYQ3sQfa4FlY0KPVmqCYZLP4B217CyMsoaleqAb1\/KN72WPGpfCwA","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0528{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHRH8xQHJAa4KGFK8WgQsOAChC0WAbDP\/frNow1SapdorAisRCv5zKWcR99Cs34rt3KBzESZz31x9TOgzYE+yULmjQcCi8qpFkt0BOfqngkxUHeCauOQxJ+xEtGv0x4CzStv4GPGTO\/4ofrflXiSE3cuegJHqfd8hLA1LLAQXTlCG1JUoeOxe9XzKt6uNvReM2jHl0pGcBMGWwiTKW2DRxd8IUSwikmrY3Fk3WL4=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPvPiAbDQNfrOdQ1SapdrQvBuSCjpP23nYJzBdHTxWMsPurEqN74dfzfgOt6jeCgmIFjjDoNDxr6LulYaprIZGy7e34kg9cSwV+w==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHRH8wgHJAa4KGFK8WgQsOACkw0+AbDQAfrNsg1SapdrXhbPQQdKTuaXIj2dW98a5d8N3K08\/ylwXxQUk+vdFz8g3TszJeGjcZTI8QbWk5+2\/9bkahMPaM9ejFrtWOsWnDW96cY0yGzlRSAJQNGQuEdPU8bBzmJuowEpl9UgQkSqoIbpaz9vuJynyoPtBZHqyiTUBTfgS++m+KJWRkSvuzFq7uO\/EOQAJI3sU0cmVp+w=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Tj6AbFF6i0QK2guGVRmeGdoxhBTJ6BR5D5aCMEVOdrIG5jh+66ePISSiXqxMYxiV8HDGhb\/wpzod","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":157,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI0AAEAAPxHbFQoYUrwByQGuLDhaBAB5MO2AbFGHi0Q7mguGVRklnpQ\/u2Nj6GuIbkw\/r6\/s8NPf4pDzgKr5qDyiD9oKXC8gYK0FVrz8I0\/Gmc+DspcHSAYwoS8yekOGS25f2132hprtlIXwc2PozpCri8O6tWsmCGEOrRKwwtE+baRuXSK6dGn3Qw==","pkt_caplen":157,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":170,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAJoAAEAAPxHbCAoYUrwByQGuLDhaBACGkCaAbFGIi0Q\/WguGVRmJ0HUcez22MFT5FlCjTC7mpu2bK1LTFDGQVqV3RWNOUYjEJ4DTJxMWfpHczR49sTRicIA48UThD\/syq1EjFScidB+uDxD7p4hUrEPiEVkjIm44RXuUC\/TkNr3LmEXYbM0mAhBv+rRpT9lHDbJY1T1+klw=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/x+OAbFF7i0QOmguGVRmCwnozuQH+1fWpSRBuHskwhHwaESGssh6FVzItaNymbgLMD\/LRFPdjmoKv","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPnHqAbDQOfrOhA1SapdrkaC5cymUlHKCNzsGDOVsrQsCVX3FlvSPz0Jrka7KBgdlBjUppAA8590ykJw4oF+O5hoiF1VUZH5Rseg==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHRH8wwHJAa4KGFK8WgQsOACjKKGAbDQBfrNwQ1SapdpxobyoWQHXgYiRcLQPfzH9dhyM+heGqebO4B1ZbCL613Jr8sb8f67Vw\/EZfFWDhlmuM4s+69DXLfgRjT\/OF5OD6vpdCaBSjPjw0ymgv7iycu1NB+Hg9IKmsd1ZutoPm4QsVNi9mYQNaT4W5T0SeUHHh\/y5K0Ofx+QGmxCOnkQBZuXa032SOZeqJ3FS+ZSL\/g==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/Ac2AbFF8i0QSWguGVRk16K3rbZ2SCVjcoat\/FIWNGKspQmIvkBRckx8xqyCkDQNM9yPjkP3UEHB9","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAQBHaPwoYUrwByQGuKBxaBgBPxm2AbDQPfrOkw1SapdrC8a06HFXoMJnknsOkXbuHdiiYplU0ARn\/YQDbCk33u9Mr9tS13yl4cAVZNvi4o87ljm2OcBqXy3pLKw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0524{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":195,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALMAAEAAHRH8xwHJAa4KGFK8WgQsOACfjj6AbDQCfrN0A1SapdrVoekHqhJQwfddsQTLcf6NuBSfhd0l2zocORejVx\/mmHOAW8dL453V2HqpVfB9TvRjRu7ZCWTw6BH\/aUmrdjYCCy+Lww5vWQKnsI4KutQ8cITarkVUebxfAII72rPC756jC2+Rmv6pQt8vaELur3zxEhGrYJr6aCb0xHbs2MpIpQq8bbzQ7ckP4jV8","pkt_caplen":195,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":132,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHQAAEAAPxHbLgoYUrwByQGuLDhaBABgNE2AbFGJi0RDGguGVRmySsinDsBDUrBNgF2SRKDdzFDmwjZeUYqJXA+K6x789En0PfzyJZI1OYNHZ\/3YiB85imLUQm4U3WouiTGqXCqYEMx0WkiqjKfN0\/8i","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0503{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACPt3OAbFGKi0RG2guGVRlXMamyMjO6YEGMchWgUncQHzeYmutO8mQqZAG9zJjM5+R7PnAbJFLM507JoKAFotBJhcPihjIEKyU+OdsCFg5KtCagY8gCD6fVjsgz2GmAMgEHf522NuV4DVAemxKuhlSDN2NM2ZChDo0FVXVpLPZWjHFMErsCz5tagVg=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":134,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHYAAEAAHRH9BAHJAa4KGFK8WgQsOABiufKAbDQDfrN3w1SapdocCh4JDf8avinnt4NMdnNWpSiJ4AGIjnwVn67Xc+taDKqlFepNpRR0m2inyFo1HCebD8qFcu8o1k7A8M60F0me8S4lKZ9mLqNSvkXuy+o=","pkt_caplen":134,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0397{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHBH+JwHJAa4KGFK8WgYoHAA\/2W6AbFF9i0QWGguGVRnTTlWbuz7MrmrH3\/ioPBkBjOLUOjCiQ\/osqPbgtQg\/zLHRu79yDvgpp\/RF","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHBH+CQHJAa4KGFK8WgYoHABdKX+AbFF+i0QZ2guGVRmTCQi7u1W\/d3ooNYgQekMAvBJFsZIRmVugJrEVKWnIvO3\/NjVdrLrk8cCcJE5EJc\/cQjvBHzoAGF7wGWP40W9xuzWJf7N5enLI","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKwlGAbDQEfrN7g1SapdpMg8DL0VVOwA4dwN1PAyNu\/XTLgrcZksIWzSiA6TKdDksjM0u\/d+pMkW7L\/yF0OgI4sTxsD\/s=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPbsmAbDQFfrN\/Q1Sapdpr5A+wJXodKG314NhRU0Y80kefxDChWMVJvK+PnU5M31jHVoP82QWZZF263gfz9u1cgFbz32YL\/Czu3g==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":120,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGgAAEAAQBHaOgoYUrwByQGuKBxaBgBUAF+AbDQQfrOog1SapdpZhhiJKIGOjNNQ87XreV1xUk2rKNC4n7OspJ8XMENiitHrPjEKH8aXRKHlXTF1eq2DPReZG\/5v6sajki1RpTiq","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":163,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJMAAEAAHBH95wHJAa4KGFK8WgYoHAB\/tKeAbFF\/i0QdmguGVRlnnmdf7GZ8Lbg5Ap6EpFJVqO0L2XYiolGBa5b4FzNm9CiwylxPnP+orPe7C86ril1RjXcOPN2cBfpMrWFip6z+72xER42cqJe\/DP25EWp9iRTvqv66syllVtdBbTRN3+RbeFID+hb46wh2VA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0455{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":142,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH4AAEAAPxHbJAoYUrwByQGuLDlaBQBqufmByAAMC4ZVGb0txf2fpar55VdEb7f4IC88wu1p9QLIjxRXBm3N9H1cSHejirb2FRXchdbFVC49nlJGchRkEMslkZr6BLx+s0NpZ1xfVSoNvSj\/hi2AAAALpowHfzIlmqKfwg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6WvuAbFGLi0RKmguGVRlyAw74s+6Wg8jdX1sPQlgc0oG9c9+6JXlg0JJmrIvQ5YQmVcQtIxCvHRe2ujGAFMiF0XcLhGEXHtq76\/5\/HCG0wZo73e\/aH4v8l7QXNDjw8Mdn8d\/Y94mHOo8D\/1qalkZDcDtQj1+tziIywXlbKp3RTZ0ICPiKSRk9DD0cUU5CqQMhz\/G7pbXOfAfYdMXPb3r\/BhbT1\/Z2anY8gAXMsKgYo78+SDZh","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMKUeAbDQRfrOsQ1Sapdrhy9n99g59rP6s\/cikH4NoI\/kS8UIrsUc5TwX6wnPIB9atX5ejeV39HT4CgwRDKFELuvQifJ3Rhg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOMGCAbDQGfrODA1SapdrV7vhggfkbDNATEMqNUxZuGQ7hvghHrA\/wZ7RPEMk0p6q5GqAdCRulZcw+HGBs\/vWtzKzdGc4xpwcZ","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABFU\/CAbDQHfrOGw1SapdptKqOik3c6rYZHlcb8g+QekRH0SUbWVmHSmn+pL+XqWrnw\/\/zC9RpAUWpe+97Mb3wQ","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0557{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":218,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMoAAEAAHBH9sAHJAa4KGFK8WgYoHAC2h2yAbFGAi0QhWguGVRn+YngxocbxPL9Hchw+vrbzsrZy84q0HksZTDK6OmriJLjJTcdYFCbLL+3C4S2clSMr8LuSENXjmwvZB+uk2XttO2KGccoc2uV5jV6Qxg3CwceDwGOMAPDjAzT5IBRtWEvyGNv2tjNHj46QkFEB+n8HAPGteWPDm+g\/0OF0vvXCU52BifupwpXH9pY\/rIVTKzJSUXO5+igL\/rHhzVwWx+mQdwA=","pkt_caplen":218,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":106,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFoAAEAAQBHaSAoYUrwByQGuKBxaBgBGWkSAbDQSfrOwA1Sapdo2J8m3SRhKubO5k9h4cLLqDfSann8N8GTJ4CaFK+XWxT6dOAle8Xg68hNpn1nWA+7MBw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLKsWAbDQIfrOKg1SapdrFqp8C6LHknbUfcAnfh0U28A9PWuiR6bZxZlqabWvs3e\/6QfoNBAxNTBLxWHWe1U8VfMhKIKKw","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0542{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":207,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL8AAEAAHBH9uwHJAa4KGFK8WgYoHACrrcKAbFGBi0QlGguGVRlb8nhlLzbPkc8Wnwx9xadOus8aqY3McWVZVp3RNGNqBgVqPpQot29pRfSrnqaDtPTHLNB9Td89qmebzRH2caN4dv7tcX4c8l\/OKppp1q+aKeloVQdLtNq8FXei0MB3S7\/UN4cIsmO9XqJ9tjx1PBu\/\/lmtfoVpdXUKMygwBPph6FId4sc7JpwSE5NpyPo4XB0IFFwvLW5i","pkt_caplen":207,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":206,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL4AAEAAPxHa5AoYUrwByQGuLDhaBACqB5eAbFGMi0ROWguGVRlCv7LaBEJm\/FXo0UloHxjCaC9FfxEappooFBGpLnbIkM+07z91bwuDUsxI2aeodHVd9KPvXKtD0noHXnHcYxWuwGy6SUGPfcS\/T2qR\/D3FTJExEV2gd0gfE0OXojiyI5KfLTpq1B4ptktO5IUmz2Vd3ACzoAdgS1qQBDpHCmkt329r7VPl9YalY66H7VyRN75V4fXdO3E=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6olWAbFGNi0RSGguGVRn1FN8wdA9Q8vtRCvACz\/aJu+sE0gJ4mAPCoIcydAV1LFIFY6JTaAwWN+Rqr8vENfPUDHWLu5qQLytEdIdacF+PGNTXbfj7\/ckvsDP2UtoMXFH8ose5TA8ZnsZ5l1XizTssmzC+W89bZ9\/cwc9sUS8CEEGcSv9QiNJm5pfoblmaIA7CCeTnKwTjyQWcRAspv57r1S9UZqcMl96YeAkrd4bw2WZefWGz","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAQBHaPQoYUrwByQGuKBxaBgBRNguAbDQTfrOzw1Sapdq3mTUu62xREGqmo79LboCtKcrcEWPmc9sQs\/6O1A4vzm+SrdkHSPV7lCbFPyl6daKcZQ7XQR7guR2m6HUr","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":191,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK8AAEAAHBH9ywHJAa4KGFK8WgYoHACbLVWAbFGCi0Qo2guGVRmwyZlc+XuBluK28ySoCgRVsShq7gT1zHzizDv\/7mVWxjvDvOSkdSPAajdpzCF64\/GkuIPdkfMEe6wXrippzt\/roDIfa9mvsAX8\/VvO6652Upws3hedTC2yqSc32CpNNXTq5rrnp+f1elw9gslohOzvTaOpVQCYxbypSNhHc6IBiS6mbv3EhFo=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkL\/qAbFGEi0QwWguGVRk0cIkO9kD5S3VEI6wvl+VFlAKPuc+Dc8W4WKwSMsYxiTfgnvtqZKrN9WV8VwbqXMmMOQTqrdLfxbDqT1sX0dW7DTi1rzAGbMzKOP8l5TzoeosF0tkYpVbTanuCz0oUtXXFvZEXyoFgsOOl4EXhjYlM2RTRJqV8KYOO39amblAWXL641GEpxhIpnOLE2gCKrt0=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0544{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":209,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMEAAEAAHBH9uQHJAa4KGFK8WgYoHACtQveAbFGFi0Q0GguGVRkBil1d8mrAX0mToqjuUYJdBwdfotLO2jZhEmyFkztqMhFxvouh7JC9j57WInYeg1x9QPlIpO0ISw1kODuwAqSo3H+94MubopkU4X6N3+HM12XYO21oQPAgdRatQAemwDa\/H5IW26AlUuxLWZgn8xGuDtbKTWN8Bd7q79spwYaEfbUCk\/f2urFykd5syQq8XYGzW04rrmINIhg=","pkt_caplen":209,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKrKSAbDQKfrOSA1SapdqUlwAL3BJB5inTrRc\/ipTNb7BI5s8BbUSVipN646tG96TE27m3nHBmkVu\/xRpjd3SaoBv3xBU=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMnV2AbDQJfrOOQ1SapdqrYvFmo2h7iUONq\/Mb2QIzKk1OE6pPy6AH0uVuIwwYr\/Qt10xp0vwY67GCVppH7idEz27Bl4psAA==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":111,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF8AAEAAHRH9GwHJAa4KGFK8WgQsOABLkgOAbDQLfrOVw1Sapdq6rEJXebqQKFFjYEzV7OTD+TK9nRBUpU7A2NyNjr3qP\/fKUoP+MEcvCGHgOjb87g7L5nY\/js5f","pkt_caplen":111,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF0AAEAAHRH9HQHJAa4KGFK8WgQsOABJDQWAbDQMfrOZg1Sapdp9RBzjf0wMo8ibI7XIs+oRUib3vRmOfOAeGrauf8dIHCT0gxAvuUq3xDcDvVaduQt5KDVCWg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7+eyAbFGDi0QsmguGVRn6blRgIYPe4aItNtxGM8IV2QbeG6+X9YMx2Wf0fI\/w07KkBVGRSmRgmsHOJm0NMsxHnz10J8L\/AiXdIxe3XXmfhphqH026rAGUvVgcNybpWJIqsVx0J7Hi7UkHVTP9YDB+cvaqMcQ3","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPuN6AbDQNfrOdQ1SapdrQvBuSCjpP23nYJzBdHTxWMsPurEqN74dfzfgOt6jeCgmIFjjDoNDxr6LulYaprIZGy7e34kg9cSwV+w==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":199,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALcAAEAAHBH9wwHJAa4KGFK8WgYoHACjhteAbFGGi0Q32guGVRlQDGTFzas8seh28zV8C+niXDz9TvwXISjZUs4jj+g1QFYW1UDTB35IolT\/YyCYno6JfEfJYCWDXT+Uhys2XpRx8LnfRwSnV1MMJmZvS5AhtAjx4I0CHu1\/rKGjjVKI4Wz934UipVaMg3rFuWzv1\/EbGKk4+VUl9KAh8s83YriMzc5j1xQd4zEXnJ4yVhMEEg==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":170,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAJoAAEAAHBH94AHJAa4KGFK8WgYoHACGlECAbFGIi0Q\/WguGVRmJ0HUcez22MFT5FlCjTC7mpu2bK1LTFDGQVqV3RWNOUYjEJ4DTJxMWfpHczR49sTRicIA48UThD\/syq1EjFScidB+uDxD7p4hUrEPiEVkjIm44RXuUC\/TkNr3LmEXYbM0mAhBv+rRpT9lHDbJY1T1+klw=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":157,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI0AAEAAHBH97QHJAa4KGFK8WgYoHAB5NQeAbFGHi0Q7mguGVRklnpQ\/u2Nj6GuIbkw\/r6\/s8NPf4pDzgKr5qDyiD9oKXC8gYK0FVrz8I0\/Gmc+DspcHSAYwoS8yekOGS25f2132hprtlIXwc2PozpCri8O6tWsmCGEOrRKwwtE+baRuXSK6dGn3Qw==","pkt_caplen":157,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":112,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGAAAEAAQBHaQgoYUrwByQGuKBxaBgBMxweAbDQUfrO3g1Sapdp3LKaHNcm191OPNWcTWtfkeODxCL3tPl6mzmmcwtSLoLe\/BdUDWIYm2r2vhZDjFVbzRovAziZpNQ==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":217,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMkAAEAAPxHa2QoYUrwByQGuLDhaBAC1FbCAbFGOi0RV2guGVRnvPYu2S3moDerqTSgjkdJuAiWuVojwqg5IzcU2S410nARa7polGw1ltnDhts+228dL45BI3g3zTJZW70zhTUB5ihATRhBwz+7dCuXQ1w3YLKeCt9FBGird5135lj5sp3kucMv6i+JEkwy1rayMSvhmTdZSAhuS6BJosJgLxtsVQ\/8Zf+xsQJdO4kY64WmrpAImlwXZhxvupKnHDOKc0yX3DQ==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":197,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALUAAEAAPxHa7QoYUrwByQGuLDhaBACh4kiAbFGPi0RZmguGVRn27olNP6bfenUBU+0WvO5qM5LTUwlwxen4xyC\/ku\/mhHAcIvF2S31S2qK3p3cNIhC9sNUfwpilxnf\/pgGADF4TMjHZzWygJahoXqczAEIHYqtcveLoqOulUqNr0M34KQFsZygIgQrakY\/yYqSWPFdyTzOTV01PO0YI9ddIQhNH\/\/plTa2BgR9DtIw5rXk=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069214,"pkt_len":107,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFsAAEAAQBHaRwoYUrwByQGuKBxaBgBHYbGAbDQVfrO7Q1SapdpLxPItycwkbxa0EQUWVL2L5YNVQa4t5Dl8FFfwsTbxMt1bXHBGb7+hSEyJ4BvaCMRHSOk=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAPxHa\/woYUrwByQGuLDhaBACPwwWAbFGQi0RdWguGVRk3Ea1\/lx5p6FxSjeYlUWKyi4dUJudCaU\/JBC8oK\/TURMCi1IcNP39mhkrRwZgNQRLLDVpF1hYX461CTkus0TtOw3ktucoBMzNnmHu8pCXVqpIXibI1JG2ZLIuKJNXVHAWApKIUpnr4trLXuIjkID0aIwkkHR79cuhbZDo=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKvJaAbDQWfrO\/A1SapdpmeM+ilwZ5\/zKi3IEnCjxDuEIMj5UzySPymEHL39APAc8gUkNa+y0L4zUj7DtjIjk4v3z4r9Q=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEdjaAbDQXfrPCw1Sapdqyc1LwaNFPYIy\/TKcn\/8TtEOP4XUDmavf\/6kWhoP4KmS0ltCEi9umR0oC8Oo6CgRk=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":202,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmlWSAbFGRi0RhGguGVRncMtFzzNZGBNk8lOvsmiylHvwBsMIRGuSuPmtvUvSynEbpOx7hRrjMRDJMzb44j+AhTvLd051dDD0JssyVxPbztctdRVuDKVuGlmqJlT9e3LBp2BmQE0F+z+2yozXPCWvzSyJoE96nasdPD1yGcEGyUflvtofQCMHfP43GIPM0+3A2FTX2zoVQMOInxKzlaNS0XA==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6jzGAbFGSi0Rk2guGVRmitL0NU+mJLtiEpQRZMEcQKWBIki\/GgZsVFBk1ouetNX8bpPxlu3jhQELUXLjgOY0ltW\/X3xvnL1zr4YYmFz+eCvFujSxmJowZA6je7EQZONnK1PLn9pZAmjDX+YYNt1hBtLlruHgJ1Sd\/DJeH3OV7Jraz3bN0328TEle7kTIzazg4Zz+sPicvfG++WWQVW71AAxjX4zpJVEVPyy+\/pt9a2rHTIKOP","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEtTCAbDQYfrPGg1SapdoGTF68AgjqW7pf0vmm\/B3u6gwx8yLk48z9Gfmk+yZA9yxt2r+p8ErOv+wwKmSKKcs=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":104,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFgAAEAAQBHaSgoYUrwByQGuKBxaBgBEaweAbDQZfrPKQ1SapdrW8eeieuUTKCD\/yU49LrPaR0r07UOmL9jXIQdynK5sUcWfqXsS4hnqw3NO1jc+FUw=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAPxHa2woYUrwByQGuLDhaBACz+5KAbFGTi0RomguGVRlLlEnjC3rrlcpDlf+GpQEkEyfs8BNN6y\/45uODDD0lOgpflTmnnEyq5OfFG60X6aUnfHAzG3tamZNFnNl6rZ9Mi4rP8l61VamViDku97dmjWjilNFu+aSS9XJx6IXVkB5GvyzR8yvG7gO62wfhByPJ8eBHCCdv+iFbREvdsptNmI6UQ0qqVIEK6B3+8Ais6\/YP93RVabYZoXDKlYWpC9o=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":200,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALgAAEAAPxHa6goYUrwByQGuLDhaBACkk0aAbFGUi0RsWguGVRnA1ZaipNavbc\/\/eam7huI82apsfNTfFY3W5DhPpFXgZ+4Wuwft5MEl2lmf\/JgaoOHlHTrWWzUG7KuA7OXw85wP\/aO0wq8+1i4a1EumKap+y5uj3cCub3YZw3OZ4irtaRqESxC1XrgQ0hTvWYAq\/ZDS65Fc451TQrJW8vbDtImjHLx6MJzAMOZhFnP1lXViaCc=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":103,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFcAAEAAQBHaSwoYUrwByQGuKBxaBgBDGX+AbDQafrPOA1Sapdp5tRcToREYX9yHp9wMdRI\/XsbecB3KVMhT88iSni0Y3FRDH3kpG5xTD3xYKCRN0g==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZPu6AbFGVi0RwGguGVRlDpeQ9MMrV9epW4s++67CfvovLqS6G+IdfHldBJzkpJeGdGwsgBH\/g3VtoZ4Z2WlVqcP8CpTDlEcYyFaJ\/k7rvjpwazmKWGVeZH36toORVV7bNgwG+RU\/SIf56L47j2X4bENO15M89qjcyLvhduqPXJ77NDJZretVGqkToU0kIUHVtFUpK","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":99,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFMAAEAAQBHaTwoYUrwByQGuKBxaBgA\/ot6AbDQbfrPRw1SapdoXACpOIHwE2LLCSjxHBd+xeeZ7y9KTy9Irrqen+BJr6slhDO3\/gajH51K\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":114,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGIAAEAAQBHaQAoYUrwByQGuKBxaBgBOHyuAbDQcfrPVg1Sapdon1HgxuTP2gJjxqa3TVSPcMFKmJZqsvc4QKBXC\/KyqkMfn9NMsra3UHAxgwCplyyp0D5VYrXsJh6rZ","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":159,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAI8AAEAAPxHbEwoYUrwByQGuLDhaBAB7Xc2AbFGWi0Rz2guGVRkbgN+gLQbrex4+9SL9Yp6DWV3HeQJgiCc7FXDjyaemuzAQD480GvBcQiReQZHYAAEyXmgPOOTnTt2\/q1h1+hLf4GmyWU\/8BKn2pxVR3lkxrfZ0S1xMyeahepau7s4Zy8gFZsxekIH9","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":198,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALYAAEAAPxHa7AoYUrwByQGuLDhaBACigv6AbFGXi0R3mguGVRmWGZT0x7CeO3hJqOKr2khlnM9s2kygBvPNvtQP7PXcYQEk1b2wO3xQWFc0jC2Wc9H9tJq8c6ZhD0GyBSlvo1FoEPCmHovxDYze5HbwS\/HR1fGYl9nEbcYN8hbVZa992h0TDfFvQk6n81HfbSkb09IcKdLdgqCs7uBg3xccZwThQjM2Ep6NT2YWBnCqeUPg","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":122,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGoAAEAAQBHaOAoYUrwByQGuKBxaBgBW+CuAbDQdfrPZQ1SapdoSRSAhq0X8B7ClhrhOw\/OH+nl98xqw710AYABIG1mcBXZCWvEn6IDpbszTabZpHh8kqGn3ZpYeayt7IexkwDAICT4=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPmGCAbDQOfrOhA1SapdrkaC5cymUlHKCNzsGDOVsrQsCVX3FlvSPz0Jrka7KBgdlBjUppAA8590ykJw4oF+O5hoiF1VUZH5Rseg==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":105,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAFkAAEAAQBHaSQoYUrwByQGuKBxaBgBF2VaAbDQefrPdA1SapdoD748WoMbtNblHw6gl7tSDjf9cl5ZKrKI4b+JDEt4rtYUHVbwbz0vxY9UToegNX7EY","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":194,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALIAAEAAPxHa8AoYUrwByQGuLDhaBACecDWAbFGYi0R7WguGVRlzCg5AP8xzklGJ4RZdomISuGo2Ye0BybeahdwJZSLTEq6O4QGM+Tb+t5dKpRI0MAhSd02IaF6lflu2IDTgbbDjL9hamXSJ4WRRQee1bcjR+vmH1x3tJb1WkmRdRbD1PLmCd6m+cd0MHcVvGOdB8RQzknPukNQlkgZXDp7o5sDkWB8okih8jwjiMQo=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":154,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIoAAEAAPxHbGAoYUrwByQGuLDhaBAB2v9KAbFGZi0R\/GguGVRn5zw\/KXLDMiSeu9k16sFNYkXhIGnDi47mIoBlHc1thBGnJJ47m3m3BJLPHmXbUEFdEzqwZZgzD4XuoM2ChBiV0Y4uJJyS+7Cjqm1n251C8PTq7xs0TFd5XvSNjMzn9715MJg==","pkt_caplen":154,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":115,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGMAAEAAHRH9FwHJAa4KGFK8WgQsOABPwlOAbDQPfrOkw1SapdrC8a06HFXoMJnknsOkXbuHdiiYplU0ARn\/YQDbCk33u9Mr9tS13yl4cAVZNvi4o87ljm2OcBqXy3pLKw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAQBHaRAoYUrwByQGuKBxaBgBKd0SAbDQffrPgw1SapdpsS\/IoV748wsk8KpqOiy1HVzLvV6\/tsByeMEckD8IqVfcqpN6j+JftjN\/YQKSEgElFyv3diQo=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":132,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHQAAEAAHBH+BgHJAa4KGFK8WgYoHABgOGeAbFGJi0RDGguGVRmySsinDsBDUrBNgF2SRKDdzFDmwjZeUYqJXA+K6x789En0PfzyJZI1OYNHZ\/3YiB85imLUQm4U3WouiTGqXCqYEMx0WkiqjKfN0\/8i","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgYoHACPu42AbFGKi0RG2guGVRlXMamyMjO6YEGMchWgUncQHzeYmutO8mQqZAG9zJjM5+R7PnAbJFLM507JoKAFotBJhcPihjIEKyU+OdsCFg5KtCagY8gCD6fVjsgz2GmAMgEHf522NuV4DVAemxKuhlSDN2NM2ZChDo0FVXVpLPZWjHFMErsCz5tagVg=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":120,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGgAAEAAHRH9EgHJAa4KGFK8WgQsOABU\/ESAbDQQfrOog1SapdpZhhiJKIGOjNNQ87XreV1xUk2rKNC4n7OspJ8XMENiitHrPjEKH8aXRKHlXTF1eq2DPReZG\/5v6sajki1RpTiq","pkt_caplen":120,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6XxWAbFGLi0RKmguGVRlyAw74s+6Wg8jdX1sPQlgc0oG9c9+6JXlg0JJmrIvQ5YQmVcQtIxCvHRe2ujGAFMiF0XcLhGEXHtq76\/5\/HCG0wZo73e\/aH4v8l7QXNDjw8Mdn8d\/Y94mHOo8D\/1qalkZDcDtQj1+tziIywXlbKp3RTZ0ICPiKSRk9DD0cUU5CqQMhz\/G7pbXOfAfYdMXPb3r\/BhbT1\/Z2anY8gAXMsKgYo78+SDZh","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":142,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH4AAEAAHBH9\/AHJAa4KGFK8WgcoHQBqvhOByAAMC4ZVGb0txf2fpar55VdEb7f4IC88wu1p9QLIjxRXBm3N9H1cSHejirb2FRXchdbFVC49nlJGchRkEMslkZr6BLx+s0NpZ1xfVSoNvSj\/hi2AAAALpowHfzIlmqKfwg==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMJS2AbDQRfrOsQ1Sapdrhy9n99g59rP6s\/cikH4NoI\/kS8UIrsUc5TwX6wnPIB9atX5ejeV39HT4CgwRDKFELuvQifJ3Rhg==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":106,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFoAAEAAHRH9IAHJAa4KGFK8WgQsOABGViqAbDQSfrOwA1Sapdo2J8m3SRhKubO5k9h4cLLqDfSann8N8GTJ4CaFK+XWxT6dOAle8Xg68hNpn1nWA+7MBw==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL4AAEAAHBH9vAHJAa4KGFK8WgYoHACqC7GAbFGMi0ROWguGVRlCv7LaBEJm\/FXo0UloHxjCaC9FfxEappooFBGpLnbIkM+07z91bwuDUsxI2aeodHVd9KPvXKtD0noHXnHcYxWuwGy6SUGPfcS\/T2qR\/D3FTJExEV2gd0gfE0OXojiyI5KfLTpq1B4ptktO5IUmz2Vd3ACzoAdgS1qQBDpHCmkt329r7VPl9YalY66H7VyRN75V4fXdO3E=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0451{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":141,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAH0AAEAAPxHbJQoYUrwByQGuLDhaBABpiLiAbFGai0SC2guGVRkUR1eNBEaJizY9N\/Elgl4ZoRkAfJ6JHu5MunJDVmttJnrK+u88Phl522Xu4phqHSeVB3VNArz0CM6EQNnBfgvqNHLpd1mivFd6j8h+QOrFJM0WZ8Sn","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6pm+AbFGNi0RSGguGVRn1FN8wdA9Q8vtRCvACz\/aJu+sE0gJ4mAPCoIcydAV1LFIFY6JTaAwWN+Rqr8vENfPUDHWLu5qQLytEdIdacF+PGNTXbfj7\/ckvsDP2UtoMXFH8ose5TA8ZnsZ5l1XizTssmzC+W89bZ9\/cwc9sUS8CEEGcSv9QiNJm5pfoblmaIA7CCeTnKwTjyQWcRAspv57r1S9UZqcMl96YeAkrd4bw2WZefWGz","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":117,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGUAAEAAHRH9FQHJAa4KGFK8WgQsOABRMfGAbDQTfrOzw1Sapdq3mTUu62xREGqmo79LboCtKcrcEWPmc9sQs\/6O1A4vzm+SrdkHSPV7lCbFPyl6daKcZQ7XQR7guR2m6HUr","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":112,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGAAAEAAHRH9GgHJAa4KGFK8WgQsOABMwu2AbDQUfrO3g1Sapdp3LKaHNcm191OPNWcTWtfkeODxCL3tPl6mzmmcwtSLoLe\/BdUDWIYm2r2vhZDjFVbzRovAziZpNQ==","pkt_caplen":112,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":129,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAHEAAEAAQBHaMQoYUrwByQGuKBxaBgBdLEyAbDQgfrPkg1SapdpDvJTmdQOfEXhiPwgIiWgM\/7+J34+UR0s2zHzC4eGEyYl2sv1ve8PslWQFmhnhRGuI\/rDFQH0adU6QjyABJ6qyIFGvUS3BPAOO","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0555{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":217,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMkAAEAAHBH9sQHJAa4KGFK8WgYoHAC1GcqAbFGOi0RV2guGVRnvPYu2S3moDerqTSgjkdJuAiWuVojwqg5IzcU2S410nARa7polGw1ltnDhts+228dL45BI3g3zTJZW70zhTUB5ihATRhBwz+7dCuXQ1w3YLKeCt9FBGird5135lj5sp3kucMv6i+JEkwy1rayMSvhmTdZSAhuS6BJosJgLxtsVQ\/8Zf+xsQJdO4kY64WmrpAImlwXZhxvupKnHDOKc0yX3DQ==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0532{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":197,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALUAAEAAHBH9xQHJAa4KGFK8WgYoHACh5mKAbFGPi0RZmguGVRn27olNP6bfenUBU+0WvO5qM5LTUwlwxen4xyC\/ku\/mhHAcIvF2S31S2qK3p3cNIhC9sNUfwpilxnf\/pgGADF4TMjHZzWygJahoXqczAEIHYqtcveLoqOulUqNr0M34KQFsZygIgQrakY\/yYqSWPFdyTzOTV01PO0YI9ddIQhNH\/\/plTa2BgR9DtIw5rXk=","pkt_caplen":197,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHBH91wHJAa4KGFK8WgYoHACPxx+AbFGQi0RdWguGVRk3Ea1\/lx5p6FxSjeYlUWKyi4dUJudCaU\/JBC8oK\/TURMCi1IcNP39mhkrRwZgNQRLLDVpF1hYX461CTkus0TtOw3ktucoBMzNnmHu8pCXVqpIXibI1JG2ZLIuKJNXVHAWApKIUpnr4trLXuIjkID0aIwkkHR79cuhbZDo=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":107,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFsAAEAAHRH9HwHJAa4KGFK8WgQsOABHXZeAbDQVfrO7Q1SapdpLxPItycwkbxa0EQUWVL2L5YNVQa4t5Dl8FFfwsTbxMt1bXHBGb7+hSEyJ4BvaCMRHSOk=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":179,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKMAAEAAQBHZ\/woYUrwByQGuKBxaBgCPg7+AbDQhfrPoQ1SapdpZSviJW1qG+fyovg661l98bE0\/yu52C3ngrXwWSIu\/RN7BTdsKbhXpAMz3B7b\/7H0jcURyo8FSdyh5rKNgvJZyTtmL2ubbA9Y1p3Vu5XLuhAGgOKu5niL4H8eVvKnSnMM5nYQ588R3BhMe1fvBJYjejeEesEZZ9lEzv4w=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":234,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANoAAEAAPxHayAoYUrwByQGuLDhaBADG3vSAbFGbi0SGmguGVRklunzYexA7kU3G5sAe6voc\/XNKmtCYKfH7xgGlpCLhtbmy4nT\/dMD9kKkE8CmKVgIlHaoUm+XT2G6l05RSMoPObLK1zrZy5Q33f5AL1R636QuyYmJ37iaO+YCnWwCgJlA72YY6HpLLNKiP2Yf2cLSo4q1Bgkmf+FJBEi3\/QJYO2ye100jkOBhaK2pOLnMMLvmzibmT8V492+N+bwqKMppm+GsMcQbit9InCOtm3hB3O8g5","pkt_caplen":234,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":227,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAANMAAEAAPxHazwoYUrwByQGuLDhaBAC\/2KqAbFGci0SKWguGVRl\/SkhVgTkQfI\/DEf2RKFyCGkrtflNfxP7fhLekEnmSqejjWvNSYlInsU1HVa\/ovkH6k60BJrojcoa+Wt7oHurk7+sdm2oZnVCznvBMnS9QaQshEii9r+GHlzkYKVRg\/EjuQKbuRXQJnwUT3NggS+KfWtdbSaQpK6gGWJmP+Zz4AW4UHzP9\/XWBMhZ1R2LTzjTbsipDsvup3jNm+BJXxpuONEncp9MLwwSKzuw=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKuHyAbDQWfrO\/A1SapdpmeM+ilwZ5\/zKi3IEnCjxDuEIMj5UzySPymEHL39APAc8gUkNa+y0L4zUj7DtjIjk4v3z4r9Q=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEchyAbDQXfrPCw1Sapdqyc1LwaNFPYIy\/TKcn\/8TtEOP4XUDmavf\/6kWhoP4KmS0ltCEi9umR0oC8Oo6CgRk=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0534{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":202,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmmX6AbFGRi0RhGguGVRncMtFzzNZGBNk8lOvsmiylHvwBsMIRGuSuPmtvUvSynEbpOx7hRrjMRDJMzb44j+AhTvLd051dDD0JssyVxPbztctdRVuDKVuGlmqJlT9e3LBp2BmQE0F+z+2yozXPCWvzSyJoE96nasdPD1yGcEGyUflvtofQCMHfP43GIPM0+3A2FTX2zoVQMOInxKzlaNS0XA==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0562{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6k0uAbFGSi0Rk2guGVRmitL0NU+mJLtiEpQRZMEcQKWBIki\/GgZsVFBk1ouetNX8bpPxlu3jhQELUXLjgOY0ltW\/X3xvnL1zr4YYmFz+eCvFujSxmJowZA6je7EQZONnK1PLn9pZAmjDX+YYNt1hBtLlruHgJ1Sd\/DJeH3OV7Jraz3bN0328TEle7kTIzazg4Zz+sPicvfG++WWQVW71AAxjX4zpJVEVPyy+\/pt9a2rHTIKOP","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":223,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAQBHZ0woYUrwByQGuKBxaBgC7hhCAbDQifrPsA1SapdoixsWTzlAmLooJ8jY6U78vNsJ4oFf9R7jwBLGLNXXz3YNDVIY6Le1kYQdX40I493+7zvAroe7pS1rgXtmBVlnU+51PD5W2edkgq29pP0Taz5OEHDLPGBrBXVnPQ0MTL6xu8IUVTN\/pydUKPaDLVOOeFM1\/jbTVYU\/sjc+MMeMRhBvLKKQCuU27iLpZN1VIqGv38etICC8U2JVr9cDlTyoprmHhUA\/Hzw==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEsRaAbDQYfrPGg1SapdoGTF68AgjqW7pf0vmm\/B3u6gwx8yLk48z9Gfmk+yZA9yxt2r+p8ErOv+wwKmSKKcs=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":104,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFgAAEAAHRH9IgHJAa4KGFK8WgQsOABEZu2AbDQZfrPKQ1SapdrW8eeieuUTKCD\/yU49LrPaR0r07UOmL9jXIQdynK5sUcWfqXsS4hnqw3NO1jc+FUw=","pkt_caplen":104,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":215,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHBH9swHJAa4KGFK8WgYoHACz\/6yAbFGTi0RomguGVRlLlEnjC3rrlcpDlf+GpQEkEyfs8BNN6y\/45uODDD0lOgpflTmnnEyq5OfFG60X6aUnfHAzG3tamZNFnNl6rZ9Mi4rP8l61VamViDku97dmjWjilNFu+aSS9XJx6IXVkB5GvyzR8yvG7gO62wfhByPJ8eBHCCdv+iFbREvdsptNmI6UQ0qqVIEK6B3+8Ais6\/YP93RVabYZoXDKlYWpC9o=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":222,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM4AAEAAPxHa1AoYUrwByQGuLDhaBAC6Jb+AbFGdi0SOGguGVRmOcOnLZl+ukDOLF6IMmpTyEm5ZkCGpjKHOrYhAF1G+qTk6qhsja42M3k9+7dhUyM1RW4gRhKOzhxj\/xmq6HDbqIGy\/rtXvIqJeEqEhMx9uK3P837MevL15JETIBdfgEI9Qy8GsIdkwf6\/v5ZT6COxrs8z8xRDlZ82gPhPoWjz4WMUzGddlSzPrw8nn5olF2h+3olSvgHedbRLO5r02xzkRPeUAb4h+","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":216,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMgAAEAAQBHZ2goYUrwByQGuKBxaBgC0tXmAbDQjfrPvw1SapdrH92TwJrSGJXrHpWc9oUvMPVF54WLmAsTqTJUbxo2dvQ8WKlJ4jcwUvwJ9h3lK6IQN5LrGAAr55Tco1rPnjmfhybupCMERNh6WQfRNk4JzkHhgyrnrw6cqZ+GIinnMPEbO\/JtawZfMi6z2zozh5lw7GpcNsUULwGjIKjOMlQiSF8Uz+UL\/VtJNkYF8S4BRk4UkiUYYaohU67RlN8PuhFeT","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":223,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAM8AAEAAPxHa0woYUrwByQGuLDhaBAC7FACAbFGei0SR2guGVRnokglrmz85Z31qz8YMjjYe8w0\/tGfPAf4ZYRniyQB\/E51Li45MY7YbmodKBVyJt6uidnCScxEdbCl\/G29DVhLHzF08dcMl0+OosuGuwB4wtx6rtyDX+09wJoWJ9LOgr51EfyXU45Y9QMD9kIJAAqMKpeAm1nx9UACo+mH3cXBkSlvrvIqF7qRINCPnmV36cl3Yke3zP0PCN7dZ1Ydh3ZfaLcoZkN+72Q==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":200,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALgAAEAAHBH9wgHJAa4KGFK8WgYoHACkl2CAbFGUi0RsWguGVRnA1ZaipNavbc\/\/eam7huI82apsfNTfFY3W5DhPpFXgZ+4Wuwft5MEl2lmf\/JgaoOHlHTrWWzUG7KuA7OXw85wP\/aO0wq8+1i4a1EumKap+y5uj3cCub3YZw3OZ4irtaRqESxC1XrgQ0hTvWYAq\/ZDS65Fc451TQrJW8vbDtImjHLx6MJzAMOZhFnP1lXViaCc=","pkt_caplen":200,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":103,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFcAAEAAHRH9IwHJAa4KGFK8WgQsOABDFWWAbDQafrPOA1Sapdp5tRcToREYX9yHp9wMdRI\/XsbecB3KVMhT88iSni0Y3FRDH3kpG5xTD3xYKCRN0g==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZQwiAbFGVi0RwGguGVRlDpeQ9MMrV9epW4s++67CfvovLqS6G+IdfHldBJzkpJeGdGwsgBH\/g3VtoZ4Z2WlVqcP8CpTDlEcYyFaJ\/k7rvjpwazmKWGVeZH36toORVV7bNgwG+RU\/SIf56L47j2X4bENO15M89qjcyLvhduqPXJ77NDJZretVGqkToU0kIUHVtFUpK","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":99,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFMAAEAAHRH9JwHJAa4KGFK8WgQsOAA\/nsSAbDQbfrPRw1SapdoXACpOIHwE2LLCSjxHBd+xeeZ7y9KTy9Irrqen+BJr6slhDO3\/gajH51K\/","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":114,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGIAAEAAHRH9GAHJAa4KGFK8WgQsOABOGxGAbDQcfrPVg1Sapdon1HgxuTP2gJjxqa3TVSPcMFKmJZqsvc4QKBXC\/KyqkMfn9NMsra3UHAxgwCplyyp0D5VYrXsJh6rZ","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0476{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":159,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAI8AAEAAHBH96wHJAa4KGFK8WgYoHAB7YeeAbFGWi0Rz2guGVRkbgN+gLQbrex4+9SL9Yp6DWV3HeQJgiCc7FXDjyaemuzAQD480GvBcQiReQZHYAAEyXmgPOOTnTt2\/q1h1+hLf4GmyWU\/8BKn2pxVR3lkxrfZ0S1xMyeahepau7s4Zy8gFZsxekIH9","pkt_caplen":159,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":214,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMYAAEAAQBHZ3AoYUrwByQGuKBxaBgCyX6yAbDQkfrPzg1Sapdp\/zqtmBFWXD20fUZPVdO5VYVZ1yncbOpyfUoEEa+OMJI9JFFI6jYHC5kldLzKMEXV+GF9CbE3gvfwn8VDGoEk012gkOJ\/fTtAzyYI++El+SoeK7Gse+udTMBhHX0UYQqbhW6nL35ZWSNAB80HNmtJgV8sVd7TcxlIjd1iMGBCo6Qji1lpcEoCQpD4ht2CP4Y+Ojoj+iEz\/zhyLUHz3CA==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0527{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":198,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALYAAEAAHBH9xAHJAa4KGFK8WgYoHACihxiAbFGXi0R3mguGVRmWGZT0x7CeO3hJqOKr2khlnM9s2kygBvPNvtQP7PXcYQEk1b2wO3xQWFc0jC2Wc9H9tJq8c6ZhD0GyBSlvo1FoEPCmHovxDYze5HbwS\/HR1fGYl9nEbcYN8hbVZa992h0TDfFvQk6n81HfbSkb09IcKdLdgqCs7uBg3xccZwThQjM2Ep6NT2YWBnCqeUPg","pkt_caplen":198,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":105,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAFkAAEAAHRH9IQHJAa4KGFK8WgQsOABF1TyAbDQefrPdA1SapdoD748WoMbtNblHw6gl7tSDjf9cl5ZKrKI4b+JDEt4rtYUHVbwbz0vxY9UToegNX7EY","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":122,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAGoAAEAAHRH9EAHJAa4KGFK8WgQsOABW9BGAbDQdfrPZQ1SapdoSRSAhq0X8B7ClhrhOw\/OH+nl98xqw710AYABIG1mcBXZCWvEn6IDpbszTabZpHh8kqGn3ZpYeayt7IexkwDAICT4=","pkt_caplen":122,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":215,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAMcAAEAAQBHZ2woYUrwByQGuKBxaBgCzizOAbDQlfrP3Q1Sapdq5OZrUyhQPorb5ERqp2BZyucUGPTOK9uGjpWolsY9KlZaeSdw3ApJPSCbwJOmAlj7QOI7VCi38JgY9gn5LH3YINqPSwccvIvDz+Uf70\/kKE8U7EJBNQtrX1pBlggHEbFF4d3wLrtbH\/MXH8vx2dftryYr4o\/vVGkt1oOb+AoEEkhEccaumvLDLgRlTbvGDl3FcaPDOM5xCGRLMlYc9p0g=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":202,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALoAAEAAPxHa6AoYUrwByQGuLDhaBACmRJeAbFGfi0SVmguGVRmbJoNun7YtIcgs4OaTm7dLNAJ2o4I+6JOS0bTNH0rqDbXdMSfAJku\/7dhlhkjJahvqHIgLpCEAOLvADe3Ht8KfrzDV9tMqAuar5wIFL4FmO2dlW5yu01D65YGQ1f0klBljqXIQ4KFZ7trstUnAt3LWFvMX4VM19srDuE6niYtotlADLwSKbeyIWcmPI5ZcCmub7A==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0472{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":154,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAIoAAEAAHBH98AHJAa4KGFK8WgYoHAB2w+yAbFGZi0R\/GguGVRn5zw\/KXLDMiSeu9k16sFNYkXhIGnDi47mIoBlHc1thBGnJJ47m3m3BJLPHmXbUEFdEzqwZZgzD4XuoM2ChBiV0Y4uJJyS+7Cjqm1n251C8PTq7xs0TFd5XvSNjMzn9715MJg==","pkt_caplen":154,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":194,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALIAAEAAHBH9yAHJAa4KGFK8WgYoHACedE+AbFGYi0R7WguGVRlzCg5AP8xzklGJ4RZdomISuGo2Ye0BybeahdwJZSLTEq6O4QGM+Tb+t5dKpRI0MAhSd02IaF6lflu2IDTgbbDjL9hamXSJ4WRRQee1bcjR+vmH1x3tJb1WkmRdRbD1PLmCd6m+cd0MHcVvGOdB8RQzknPukNQlkgZXDp7o5sDkWB8okih8jwjiMQo=","pkt_caplen":194,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":110,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAF4AAEAAHRH9HAHJAa4KGFK8WgQsOABKcyqAbDQffrPgw1SapdpsS\/IoV748wsk8KpqOiy1HVzLvV6\/tsByeMEckD8IqVfcqpN6j+JftjN\/YQKSEgElFyv3diQo=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":141,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAH0AAEAAHBH9\/QHJAa4KGFK8WgYoHABpjNKAbFGai0SC2guGVRkUR1eNBEaJizY9N\/Elgl4ZoRkAfJ6JHu5MunJDVmttJnrK+u88Phl522Xu4phqHSeVB3VNArz0CM6EQNnBfgvqNHLpd1mivFd6j8h+QOrFJM0WZ8Sn","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0436{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":129,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAHEAAEAAHRH9CQHJAa4KGFK8WgQsOABdKDKAbDQgfrPkg1SapdpDvJTmdQOfEXhiPwgIiWgM\/7+J34+UR0s2zHzC4eGEyYl2sv1ve8PslWQFmhnhRGuI\/rDFQH0adU6QjyABJ6qyIFGvUS3BPAOO","pkt_caplen":129,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0505{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":179,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKMAAEAAHRH81wHJAa4KGFK8WgQsOACPf6WAbDQhfrPoQ1SapdpZSviJW1qG+fyovg661l98bE0\/yu52C3ngrXwWSIu\/RN7BTdsKbhXpAMz3B7b\/7H0jcURyo8FSdyh5rKNgvJZyTtmL2ubbA9Y1p3Vu5XLuhAGgOKu5niL4H8eVvKnSnMM5nYQ588R3BhMe1fvBJYjejeEesEZZ9lEzv4w=","pkt_caplen":179,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0577{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069215,"pkt_len":234,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANoAAEAAHBH9oAHJAa4KGFK8WgYoHADG4w6AbFGbi0SGmguGVRklunzYexA7kU3G5sAe6voc\/XNKmtCYKfH7xgGlpCLhtbmy4nT\/dMD9kKkE8CmKVgIlHaoUm+XT2G6l05RSMoPObLK1zrZy5Q33f5AL1R636QuyYmJ37iaO+YCnWwCgJlA72YY6HpLLNKiP2Yf2cLSo4q1Bgkmf+FJBEi3\/QJYO2ye100jkOBhaK2pOLnMMLvmzibmT8V492+N+bwqKMppm+GsMcQbit9InCOtm3hB3O8g5","pkt_caplen":234,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":207,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAL8AAEAAQBHZ4woYUrwByQGuKBxaBgCrP+yAbDQmfrP7A1SapdqlXyIKRNNUMIU3QYqSyjGP7LxM1RU4SZG1U3zNDKKkoa7I46qx2nro+eouDQOvrfbWodk\/u53koHejAEomstBcWgmKnUmijf4MRw2+U\/J6rRONDlH+z9dzaIYp7u\/6nirFa8UvJ5XpN7DZxiElcB3SZETFLQ27roke\/HkxcQCbhYV3FMupmqh0OAfJjHyOi\/kImFsUwHA8","pkt_caplen":207,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0572{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":227,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoANMAAEAAHBH9pwHJAa4KGFK8WgYoHAC\/3MSAbFGci0SKWguGVRl\/SkhVgTkQfI\/DEf2RKFyCGkrtflNfxP7fhLekEnmSqejjWvNSYlInsU1HVa\/ovkH6k60BJrojcoa+Wt7oHurk7+sdm2oZnVCznvBMnS9QaQshEii9r+GHlzkYKVRg\/EjuQKbuRXQJnwUT3NggS+KfWtdbSaQpK6gGWJmP+Zz4AW4UHzP9\/XWBMhZ1R2LTzjTbsipDsvup3jNm+BJXxpuONEncp9MLwwSKzuw=","pkt_caplen":227,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":193,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALEAAEAAPxHa8QoYUrwByQGuLDhaBACd2mWAbFGgi0SZWguGVRn2QGdJZsfMK\/94cX0FOmBK5xCnut\/h8DlR9EyRNMWdzd\/on\/4IXlqff2cnAgyyo2CSqnqpBNK6gZ2S43YxonjFHmw9HD4xl68HwDJLMcjbsj5SbzvhAIUmM5gUN6Me4qLqc683u+WEymA73GsD8+yNQYfMwnUe2Iel6rhg7OV4tsLgKGzHZ3HC2A==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":189,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAK0AAEAAPxHa9QoYUrwByQGuLDhaBACZUQiAbFGhi0SdGguGVRklgBJRjPffvrahvK8s8\/euPA5\/Nt3vWPu0hosMc+I9tyDWGWV4by7Wa8Iyyx+cIVtkHyO4ibcx68u9eaTd3+uHIkmVN8v1sfVRp+LKxhb9DvIhctm\/YprtNjK67AHqbfoQNn7vajoUnUqkzGXPpf57MKNl93o+tOH1IMJ6IwkUfgfPj9Ss","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":223,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHRH8qwHJAa4KGFK8WgQsOAC7gfaAbDQifrPsA1SapdoixsWTzlAmLooJ8jY6U78vNsJ4oFf9R7jwBLGLNXXz3YNDVIY6Le1kYQdX40I493+7zvAroe7pS1rgXtmBVlnU+51PD5W2edkgq29pP0Taz5OEHDLPGBrBXVnPQ0MTL6xu8IUVTN\/pydUKPaDLVOOeFM1\/jbTVYU\/sjc+MMeMRhBvLKKQCuU27iLpZN1VIqGv38etICC8U2JVr9cDlTyoprmHhUA\/Hzw==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":183,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAKcAAEAAQBHZ+woYUrwByQGuKBxaBgCTZdiAbDQnfrP+w1SapdpgI8jDxmzsASL6aS\/jGI\/LeA80TR6ysGFLr3HZ3Qg0EazjnC166rELHupe8D6PC88JfjRHTQAH4qWG4NXTp6YcqY0wyDwD0JUf5sqooGSTskOP0yk\/2LvleFPINf\/LhcIXWSi1F9Ypmm2Uix4dTXxVpN3hhCWLEsvDhJPOhX4I","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+1448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":878,"pkt":"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","pkt_caplen":878,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":150,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAQBHaHAoYUrwByQGuKB1aBwBym7mByAAMVJql2rfI7vBFd0Of\/Q4E4YKoUcOHTclKlUe1NrBQVo7\/47XaPoPN3NC7HALjNjAqc9\/ndBP5WXHIC6l8\/4IaND2fFWO6T79RwG3PwRuqTlCeqWR4P2lZJYAAAAy1SBKY9VOLqhrQ","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0561{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":222,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM4AAEAAHBH9rAHJAa4KGFK8WgYoHAC6KdmAbFGdi0SOGguGVRmOcOnLZl+ukDOLF6IMmpTyEm5ZkCGpjKHOrYhAF1G+qTk6qhsja42M3k9+7dhUyM1RW4gRhKOzhxj\/xmq6HDbqIGy\/rtXvIqJeEqEhMx9uK3P837MevL15JETIBdfgEI9Qy8GsIdkwf6\/v5ZT6COxrs8z8xRDlZ82gPhPoWjz4WMUzGddlSzPrw8nn5olF2h+3olSvgHedbRLO5r02xzkRPeUAb4h+","pkt_caplen":222,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":216,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMgAAEAAHRH8sgHJAa4KGFK8WgQsOAC0sV+AbDQjfrPvw1SapdrH92TwJrSGJXrHpWc9oUvMPVF54WLmAsTqTJUbxo2dvQ8WKlJ4jcwUvwJ9h3lK6IQN5LrGAAr55Tco1rPnjmfhybupCMERNh6WQfRNk4JzkHhgyrnrw6cqZ+GIinnMPEbO\/JtawZfMi6z2zozh5lw7GpcNsUULwGjIKjOMlQiSF8Uz+UL\/VtJNkYF8S4BRk4UkiUYYaohU67RlN8PuhFeT","pkt_caplen":216,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":199,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAALcAAEAAPxHa6woYUrwByQGuLDhaBACjOSWAbFGii0Sg2guGVRkOLHCI1Ob1GrKJrr7rNPr8Qkxfvf4jXoeSvyAq8EQDP1U5A4NczY\/ykHF9qIip6reNC\/j7JnuVrK\/TdG8OzaUs7ReFzhOGVJP\/wQt3TJyfGbzRU\/vk5g7oxOuCm5QbKR64QutaIfnYr9vONgGK0kigD9o6\/DcGmGhFtcId+knIVrQ73qyMZxfCF\/sYfjpdhA==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0463{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":150,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAIYAAEAAPxHbHAoYUrwByQGuLDhaBAByJqaAbFGji0SkmguGVRkZzglmrYnphze77OawW+WO1gHzVfaXpc531c0Uv+X4jUQovthLPS51pRTw23oE+IUbJYSPoEaDBkNVaAVQpOMSuVn012X\/UIuvSd8sBGvEvJI2MMyaP1neTtiZejRP","pkt_caplen":150,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0565{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":223,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAM8AAEAAHBH9qwHJAa4KGFK8WgYoHAC7GBqAbFGei0SR2guGVRnokglrmz85Z31qz8YMjjYe8w0\/tGfPAf4ZYRniyQB\/E51Li45MY7YbmodKBVyJt6uidnCScxEdbCl\/G29DVhLHzF08dcMl0+OosuGuwB4wtx6rtyDX+09wJoWJ9LOgr51EfyXU45Y9QMD9kIJAAqMKpeAm1nx9UACo+mH3cXBkSlvrvIqF7qRINCPnmV36cl3Yke3zP0PCN7dZ1Ydh3ZfaLcoZkN+72Q==","pkt_caplen":223,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":116,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGQAAEAAPxHbPgoYUrwByQGuLDhaBABQHl2AbFGki0SoWguGVRnsdYCV\/EdSbwR+BQStWLBuJkCK9xLGVQ1byrS3VSK+qUdnfRbGE1OXyaDUiBlXnZuMSC1eRn6xyuLQa68=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":214,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMYAAEAAHRH8tAHJAa4KGFK8WgQsOACyW5KAbDQkfrPzg1Sapdp\/zqtmBFWXD20fUZPVdO5VYVZ1yncbOpyfUoEEa+OMJI9JFFI6jYHC5kldLzKMEXV+GF9CbE3gvfwn8VDGoEk012gkOJ\/fTtAzyYI++El+SoeK7Gse+udTMBhHX0UYQqbhW6nL35ZWSNAB80HNmtJgV8sVd7TcxlIjd1iMGBCo6Qji1lpcEoCQpD4ht2CP4Y+Ojoj+iEz\/zhyLUHz3CA==","pkt_caplen":214,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0553{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":215,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAMcAAEAAHRH8swHJAa4KGFK8WgQsOACzhxmAbDQlfrP3Q1Sapdq5OZrUyhQPorb5ERqp2BZyucUGPTOK9uGjpWolsY9KlZaeSdw3ApJPSCbwJOmAlj7QOI7VCi38JgY9gn5LH3YINqPSwccvIvDz+Uf70\/kKE8U7EJBNQtrX1pBlggHEbFF4d3wLrtbH\/MXH8vx2dftryYr4o\/vVGkt1oOb+AoEEkhEccaumvLDLgRlTbvGDl3FcaPDOM5xCGRLMlYc9p0g=","pkt_caplen":215,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0420{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPSASAbFGli0SsGguGVRkn7A4\/+OdcNGGyo+\/cmwfqvbsfNBi7SgDb84iw5RauAHiZ3bLRvVyDnvthDxLMkuLqtvpOJXvh3bc27A==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPlIeAbFGmi0Sv2guGVRlFBS5OV4daLSDCNSxFtAudMBVD7g+3vFFnz2NKRz8oLRDdqnUg1fUoW89CBEnilwJvnKcY33+MvzOXyQ==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":202,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALoAAEAAHBH9wAHJAa4KGFK8WgYoHACmSLGAbFGfi0SVmguGVRmbJoNun7YtIcgs4OaTm7dLNAJ2o4I+6JOS0bTNH0rqDbXdMSfAJku\/7dhlhkjJahvqHIgLpCEAOLvADe3Ht8KfrzDV9tMqAuar5wIFL4FmO2dlW5yu01D65YGQ1f0klBljqXIQ4KFZ7trstUnAt3LWFvMX4VM19srDuE6niYtotlADLwSKbeyIWcmPI5ZcCmub7A==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":207,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAL8AAEAAHRH8uwHJAa4KGFK8WgQsOACrO9KAbDQmfrP7A1SapdqlXyIKRNNUMIU3QYqSyjGP7LxM1RU4SZG1U3zNDKKkoa7I46qx2nro+eouDQOvrfbWodk\/u53koHejAEomstBcWgmKnUmijf4MRw2+U\/J6rRONDlH+z9dzaIYp7u\/6nirFa8UvJ5XpN7DZxiElcB3SZETFLQ27roke\/HkxcQCbhYV3FMupmqh0OAfJjHyOi\/kImFsUwHA8","pkt_caplen":207,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":193,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoALEAAEAAHBH9yQHJAa4KGFK8WgYoHACd3n+AbFGgi0SZWguGVRn2QGdJZsfMK\/94cX0FOmBK5xCnut\/h8DlR9EyRNMWdzd\/on\/4IXlqff2cnAgyyo2CSqnqpBNK6gZ2S43YxonjFHmw9HD4xl68HwDJLMcjbsj5SbzvhAIUmM5gUN6Me4qLqc683u+WEymA73GsD8+yNQYfMwnUe2Iel6rhg7OV4tsLgKGzHZ3HC2A==","pkt_caplen":193,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0517{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":189,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAK0AAEAAHBH9zQHJAa4KGFK8WgYoHACZVSKAbFGhi0SdGguGVRklgBJRjPffvrahvK8s8\/euPA5\/Nt3vWPu0hosMc+I9tyDWGWV4by7Wa8Iyyx+cIVtkHyO4ibcx68u9eaTd3+uHIkmVN8v1sfVRp+LKxhb9DvIhctm\/YprtNjK67AHqbfoQNn7vajoUnUqkzGXPpf57MKNl93o+tOH1IMJ6IwkUfgfPj9Ss","pkt_caplen":189,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":115,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGMAAEAAPxHbPwoYUrwByQGuLDhaBABPrYeAbFGni0SzmguGVRkANzTCw1+C18KYAkY9T4\/APLSHQGLekKMlNoEntYq2wXdfkoJnRw2K000HhJK+8DVDXt13Knlp7dO3vQ==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":117,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAGUAAEAAPxHbPQoYUrwByQGuLDhaBABRVqiAbFGoi0S3WguGVRnF6\/g9GTIlsGkTm2z9NvSL2WsQWfc6jahkJ+TSZ4j3EozQsi8Ls1UTCa2WFlsKL6li6zi+kPW6N5kwCfbv","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0510{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":183,"pkt":"AAACEgAAAAAAAAAAAAAIAEUoAKcAAEAAHRH80wHJAa4KGFK8WgQsOACTYb6AbDQnfrP+w1SapdpgI8jDxmzsASL6aS\/jGI\/LeA80TR6ysGFLr3HZ3Qg0EazjnC166rELHupe8D6PC88JfjRHTQAH4qWG4NXTp6YcqY0wyDwD0JUf5sqooGSTskOP0yk\/2LvleFPINf\/LhcIXWSi1F9Ypmm2Uix4dTXxVpN3hhCWLEsvDhJPOhX4I","pkt_caplen":183,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0410{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":110,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAF4AAEAAPxHbRAoYUrwByQGuLDhaBABKCx2AbFGpi0S7GguGVRk5sK78VJ24EmCRa3V3WS52DV4ZvWQIkCfEwPsRvdLb5pKRqekVg8fwnGDKPeuPG0tTz0vdkYE=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":68,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAADTylEAALwb+3G5MjzIKGFK8Iynl6dfwrHktaZs1gBAANm6fAAABAQgKRNw3ZQAC2zU=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0582{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":238,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAN7ylUAALwb+MW5MjzIKGFK8Iynl6dfwrHktaZs1gBgANqY3AAABAQgKRNw3ZQAC2zUXAwEAIBWczEYLZyEWghHq4URIQ6dapgTmoq+6WAZmL874g5cOFwMBAIBIQMk1lKipsPTrndaH4Chclcy4edAMVd+uNzFn2v+MztPPHmuQgG3SuMT8Vv+8RJ6s1tA9RxIVR4FX3cepBI+yYE7QfQUxowLpjyl8CbbFC5qWRzdTTOG60ilABgopGPNdF9GOEO7k6DamqXYUVKzCLjeAYmAD+ZgQdRJU2vVxSA==","pkt_caplen":238,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":68,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAADRKqkAAQAaVxwoYUrxuTI8y5ekjKS1pmzXX8K0jgBADlVp5AAABAQgKAALbZkTcN2U=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0752{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":366,"pkt":"AAACEgAAAAAAAAAAAAAIAEUAAV6w7UAALgZAWm5MjzIKGFK8H5CAyJJ46c\/3EeJ+gBgAOIrdAAABAQgKRNw3ZgALT0oXAwEAIPaXqQIFT1BIjjZ+eYh18RqukpBJ1KgCDnjR82aWN0N4FwMBAQAZ7O75SireYB+GioiXRwtiRhP12onIQgEwanTRvxfSAAFnoBVsCLnC6WlRRafeiKyBH1rzwGbIdYa4Z9Va0kYN5yeJArz82mabqIYYRnkzAu180ht44N6kd5F6nBRHAXaK8yOKj1IpoR3M8zHMlBdc2vQV24rCzVeS92WTJJP7cL855KVpFZi193GCxBUACHVhp9Ed8jHce4tqr1e\/0pVdOpQOZ5dDYEATi3xBwNnCy8h+mm1WRLunKOCiQtauGnGOZXuV5y8i9ScBQup3YJvArWJtbpHk6E81ohp1thZ7jngS+tjkFTnMI2azP8pk5Drc2U+m0vq9FSO68wQF51ak","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","pkt_oversize":false,"pkt_ts":1430069216,"pkt_len":490,"pkt":"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","pkt_caplen":490,"pkt_type":0,"pkt_ipoffset":0}
+0187{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap","datalink":113}
+0153{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/KakaoTalk_talk.pcap"}
diff --git a/tests/result/nDPId_NTPv2.pcap.txt b/tests/result/nDPId_NTPv2.pcap.txt
new file mode 100644
index 000000000..c536c5bfa
--- /dev/null
+++ b/tests/result/nDPId_NTPv2.pcap.txt
@@ -0,0 +1,6 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv2.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865383632,"flow_last_seen":1436865383632,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"208.104.95.10","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp"}
+0855{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv2.pcap","pkt_oversize":false,"pkt_ts":1436865383,"pkt_len":410,"pkt":"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","pkt_caplen":410,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865383632,"flow_last_seen":1436865383632,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"208.104.95.10","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp","ndpi": {"proto":"NTP","category":"System"}}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865383632,"flow_last_seen":1436865383632,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"208.104.95.10","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv2.pcap"}
diff --git a/tests/result/nDPId_NTPv3.pcap.txt b/tests/result/nDPId_NTPv3.pcap.txt
new file mode 100644
index 000000000..b78c2ccfe
--- /dev/null
+++ b/tests/result/nDPId_NTPv3.pcap.txt
@@ -0,0 +1,6 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv3.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv3.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865405371,"flow_last_seen":1436865405371,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"175.144.140.29","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp"}
+0425{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv3.pcap","pkt_oversize":false,"pkt_ts":1436865405,"pkt_len":90,"pkt":"RIpbLCrSACaIdf8bCABFAABMAABAADcRbcOvkIwdTi5MAgB7AFAAOLcYHAAE+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZT08RAAAAANlPTxEAAAAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv3.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865405371,"flow_last_seen":1436865405371,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"175.144.140.29","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp","ndpi": {"proto":"NTP","category":"System"}}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv3.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865405371,"flow_last_seen":1436865405371,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"175.144.140.29","dst_ip":"78.46.76.2","src_port":123,"dst_port":80,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv3.pcap"}
diff --git a/tests/result/nDPId_NTPv4.pcap.txt b/tests/result/nDPId_NTPv4.pcap.txt
new file mode 100644
index 000000000..b589c4ace
--- /dev/null
+++ b/tests/result/nDPId_NTPv4.pcap.txt
@@ -0,0 +1,6 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv4.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv4.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865396190,"flow_last_seen":1436865396190,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"85.22.62.120","dst_ip":"78.46.76.11","src_port":123,"dst_port":123,"l4_proto":"udp"}
+0425{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv4.pcap","pkt_oversize":false,"pkt_ts":1436865396,"pkt_len":90,"pkt":"RIpb2HMEACaIdf8bCABFAABMrX9AADcRaFpVFj54Ti5MCwB7AHsAOKmfIwIH6wAABFAAAAOrg7wD39lPUcMxZbhg2URXVTAzb9DZRFdVMbTpeNlPUfQtJuL0","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv4.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865396190,"flow_last_seen":1436865396190,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"85.22.62.120","dst_ip":"78.46.76.11","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP","category":"System"}}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv4.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436865396190,"flow_last_seen":1436865396190,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"85.22.62.120","dst_ip":"78.46.76.11","src_port":123,"dst_port":123,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/NTPv4.pcap"}
diff --git a/tests/result/nDPId_Oscar.pcap.txt b/tests/result/nDPId_Oscar.pcap.txt
new file mode 100644
index 000000000..23f410e78
--- /dev/null
+++ b/tests/result/nDPId_Oscar.pcap.txt
@@ -0,0 +1,20 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1434606464176,"flow_last_seen":1434606464176,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.30.29.3","dst_ip":"178.237.24.249","src_port":63357,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":78,"pkt":"AAxCW5ILDE3pmjdICABFAABAZ9pAAEAGAAAKHh0Dsu0Y+fd9Abu9oGylAAAAALAC\/\/\/zOQAAAgQFtAEDAwUBAQgKFdAS4wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":60,"pkt":"DE3pmjdIAAxCW5ILCABFAAAsd\/VAAG8GoM+y7Rj5Ch4dAwG7933\/L+hsvaBspmASQABaVgAAAgQFUAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":54,"pkt":"AAxCW5ILDE3pmjdICABFAAAo27ZAAEAGAAAKHh0Dsu0Y+fd9Abu9oGym\/y\/obVAQ\/\/\/zIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":369,"pkt":"AAxCW5ILDE3pmjdICABFAAFj5HlAAEAGAAAKHh0Dsu0Y+fd9Abu9oGym\/y\/obVAY\/\/\/0XAAAKgEAAQE1AAAAAQAGAQDAL2FMGcSooK2hg1pwKT53sKDoduPb+pVMVmF3auA4+lts9U9vjoLabxM5VNiUPY2roddLvW\/u4U3Enuyzf2H4CSSbQm8iBkapQTu8c2TzBLX2GBOxENE75GcVDApRTIZrsuhMIo+NtcdludDMRv\/Rk0pGDHpwd746jdCghhvdNc6tSyvMqZzjDMFAhWjDxFLH3NlgzgadRoRqZYGyIGf2CdzkBuhAgpIJ+e3+uFHKG8fX286u1t2I8fyfkICXpXqm39sHPirpBLDKZWQQ9qpfBgteizOZrfbiDcpDvQpPjUlEQ0HssoqjinyJB403pbIFWr6R\/2ab7HMDL+S\/wrdoAAMADEFkaXVtLzEuNS4xMAAXAAIAFAAYAAIANAAZAAIAAAAaAAIMGABKAAED","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":64,"pkt":"DE3pmjdIAAxCW5ILCABFAAAyd\/lAAG8GoMWy7Rj5Ch4dAwG7933\/L+htvaBsplAYQAAuDQAAKgEZigAEAAAAAQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":54,"pkt":"AAxCW5ILDE3pmjdICABFAAAotxNAAEAGAAAKHh0Dsu0Y+fd9Abu9oG3h\/y\/od1AQ\/\/\/zIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1138{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":619,"pkt":"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","pkt_caplen":619,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":54,"pkt":"AAxCW5ILDE3pmjdICABFAAAot\/tAAEAGAAAKHh0Dsu0Y+fd9Abu9oG3h\/y\/qrFAQ\/\/\/zIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":106,"pkt":"AAxCW5ILDE3pmjdICABFAABcJ8RAAEAGAAAKHh0Dsu0Y+fd9Abu9oG3h\/y\/qrFAY\/\/\/zVQAAKgIAAgAuAAEAFwAAAAAAAQAVAAEAEwAEAAsAAQAJAAEACAABAAQAAQADAAEAAgABAAEAAw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":144,"pkt":"DE3pmjdIAAxCW5ILCABFAACCeAdAAG8GoGey7Rj5Ch4dAwG7933\/L+qsvaBuFVAYQADl+gAAKgIZjQA2AAEAGAAAgC59EwABAAQAAgABAAMAAQAEAAEACAABAAkAAQALAAEAEwAGABUAAgAiAAEAJQABKgIZjgAYAAEAEwAAgC59FAAFAAIAAgAeAAMAAgSw","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":54,"pkt":"AAxCW5ILDE3pmjdICABFAAAoSbNAAEAGAAAKHh0Dsu0Y+fd9Abu9oG4V\/y\/rBlAQ\/\/\/zIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":70,"pkt":"AAxCW5ILDE3pmjdICABFAAA4CRlAAEAGAAAKHh0Dsu0Y+fd9Abu9oG4V\/y\/rBlAY\/\/\/zMQAAKgIAAwAKAAEABgAAAAAAAg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+2201{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":351,"pkt":"DE3pmjdIAAxCW5ILCABFAAFReA1AAG8Gn5Ky7Rj5Ch4dAwG7933\/L\/BWvaBuJVAYQACc7wAAqAATAKkAEwCqABMAqwATAKwAEwCtABMArgATAK8AEwCwABMAsQATALIAEwCzABMAtAATALUAEwC2ABMAtwATALgAEwC5ABMAugATALsAEwC8ABMAvQATAL4AEwC\/ABMAwAATAMEAEwDCABMAwwATAMQAEwDFABMAxgATAMcAEwDIABMAyQATAMoAEwDLABMAzAATAM0AEwDOABMAzwATANAAEwDRABMA0gATANMAFQABABUAAgAVAAMAIgABACIAAgAiAAMAJQABACUAAgAlAAMAJQAEACUABQAlAAYAJQAHACUACAAlAAkAAgAGAAMABAADAAUACQAFAAkABgAJAAcACQAIAAMABAABAB4AAgAFAAQABgATABoABAACAAIACQACAAsABQAA","pkt_caplen":351,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","pkt_oversize":false,"pkt_ts":1434606464,"pkt_len":54,"pkt":"AAxCW5ILDE3pmjdICABFAAAorgZAAEAGAAAKHh0Dsu0Y+fd9Abu9oG4l\/y\/xf1AQ\/\/\/zIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","flow_id":0,"flow_packet_id":71,"flow_first_seen":1434606464176,"flow_last_seen":1434606536630,"flow_tot_l4_data_len":6898,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"10.30.29.3","dst_ip":"178.237.24.249","src_port":63357,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap","flow_id":0,"flow_packet_id":71,"flow_first_seen":1434606464176,"flow_last_seen":1434606536630,"flow_tot_l4_data_len":6898,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"10.30.29.3","dst_ip":"178.237.24.249","src_port":63357,"dst_port":443,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/Oscar.pcap"}
diff --git a/tests/result/nDPId_WebattackRCE.pcap.txt b/tests/result/nDPId_WebattackRCE.pcap.txt
new file mode 100644
index 000000000..38b80c2a4
--- /dev/null
+++ b/tests/result/nDPId_WebattackRCE.pcap.txt
@@ -0,0 +1,3190 @@
+0364{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576420276577,"flow_last_seen":1576420276577,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49544,"dst_port":8080,"l4_proto":"tcp"}
+0583{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC5VktAAEAG5fF\/AAABfwAAAcGIH5Al+2Gy82DXQ4AYAED+rQAAAQEICp1m+omdZvqJR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpQb3J0IENoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576420276577,"flow_last_seen":1576420276577,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49544,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Port Check)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576420276660,"flow_last_seen":1576420276660,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49546,"dst_port":8080,"l4_proto":"tcp"}
+0579{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":196,"pkt":"AAAAAAAAAAAAAAAACABFAAC27PBAAEAGT09\/AAABfwAAAcGKH5BK6tTkZxKX74AYAED+qgAAAQEICp1m+tydZvrcR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpnZXRpbmZvKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576420276660,"flow_last_seen":1576420276660,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49546,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:getinfo)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576420276662,"flow_last_seen":1576420276662,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49548,"dst_port":8080,"l4_proto":"tcp"}
+0579{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":198,"pkt":"AAAAAAAAAAAAAAAACABFAAC4K79AAEAGEH9\/AAABfwAAAcGMH5CQBxOx8tDDVoAYAED+rAAAAQEICp1m+t6dZvreR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576420276662,"flow_last_seen":1576420276662,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49548,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576420276665,"flow_last_seen":1576420276665,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":204,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":204,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49550,"dst_port":8080,"l4_proto":"tcp"}
+0635{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":238,"pkt":"AAAAAAAAAAAAAAAACABFAADgK7lAAEAGEF1\/AAABfwAAAcGOH5AW+BO6KmQtsoAYAED+1AAAAQEICp1m+uGdZvrhR0VUIC8waFhDNlpVRS5yZGYrZGVzdHlwZT1jYWNoZStkZXNmb3JtYXQ9UERGIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576420276665,"flow_last_seen":1576420276665,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":204,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":204,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49550,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.rdf+destype=cache+desformat=PDF","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576420276666,"flow_last_seen":1576420276666,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49552,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBh\/hAAEAGtDx\/AAABfwAAAcGQH5AhqL\/5vbvzaYAYAED+tQAAAQEICp1m+uKdZvriR0VUIC8uMGhYQzZaVUUgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576420276666,"flow_last_seen":1576420276666,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49552,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/.0hXC6ZUE","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576420276667,"flow_last_seen":1576420276667,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49554,"dst_port":8080,"l4_proto":"tcp"}
+0591{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA3LVAAEAGX4B\/AAABfwAAAcGSH5CmzuS+LKoqroAYAED+tAAAAQEICp1m+uOdZvrjR0VUIC8waFhDNlpVRSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576420276667,"flow_last_seen":1576420276667,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49554,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576420276668,"flow_last_seen":1576420276668,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49556,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHxyBAAEAGdQ5\/AAABfwAAAcGUH5ATo\/8SaEXHToAYAED+uwAAAQEICp1m+uSdZvrkR0VUIC8waFhDNlpVRS5wbHxkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576420276668,"flow_last_seen":1576420276668,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49556,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.pl|dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576420276669,"flow_last_seen":1576420276669,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49558,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADE5o1AAEAGVaR\/AAABfwAAAcGWH5C1696FBSsDZ4AYAED+uAAAAQEICp1m+uWdZvrlR0VUIC8waFhDNlpVRS50eHQgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576420276669,"flow_last_seen":1576420276669,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49558,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1576420276672,"flow_last_seen":1576420276672,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49560,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEp8RAAEAGlG1\/AAABfwAAAcGYH5CQgZ\/Tf1wQGoAYAED+uAAAAQEICp1m+uidZvroR0VUIC8waFhDNlpVRS5pZGMgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1576420276672,"flow_last_seen":1576420276672,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49560,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.idc","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1576420276673,"flow_last_seen":1576420276673,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49562,"dst_port":8080,"l4_proto":"tcp"}
+0612{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADOZZhAAEAG1o9\/AAABfwAAAcGaH5DBdl2HfBCdbYAYAED+wgAAAQEICp1m+umdZvrpR0VUIC8waFhDNlpVRS5CQm9hcmRTZXJ2bGV0IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1576420276673,"flow_last_seen":1576420276673,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49562,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.BBoardServlet","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1576420276675,"flow_last_seen":1576420276675,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49564,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADE9v9AAEAGRTJ\/AAABfwAAAcGcH5BsDc7u0ozjzoAYAED+uAAAAQEICp1m+uqdZvrqR0VUIC8waFhDNlpVRS5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1576420276675,"flow_last_seen":1576420276675,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49564,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1576420276676,"flow_last_seen":1576420276676,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49566,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHEPBAAEAGKz9\/AAABfwAAAcGeH5DFGykA4SBK+YAYAED+uwAAAQEICp1m+uydZvrsR0VUIC8waFhDNlpVRS4xMDoxMDAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1576420276676,"flow_last_seen":1576420276676,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49566,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.10:100","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1576420276677,"flow_last_seen":1576420276677,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49568,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADECABAAEAGNDJ\/AAABfwAAAcGgH5BVFT\/w+l\/OFYAYAED+uAAAAQEICp1m+u2dZvrtR0VUIC8waFhDNlpVRS5leGUgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1576420276677,"flow_last_seen":1576420276677,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49568,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.exe","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1576420276678,"flow_last_seen":1576420276678,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49570,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFtjJAAEAGhf5\/AAABfwAAAcGiH5AIK44ii9cP6IAYAED+uQAAAQEICp1m+u6dZvruR0VUIC8waFhDNlpVRS5waHAzIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1576420276678,"flow_last_seen":1576420276678,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49570,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.php3","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1576420276679,"flow_last_seen":1576420276679,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49572,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEHFNAAEAGH99\/AAABfwAAAcGkH5DblSRB+hg5GYAYAED+uAAAAQEICp1m+u+dZvrvR0VUIC8waFhDNlpVRS5iYXQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1576420276679,"flow_last_seen":1576420276679,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49572,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.bat","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1576420276680,"flow_last_seen":1576420276680,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49574,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBM9JAAEAGCGN\/AAABfwAAAcGmH5Br4QvDZx90z4AYAED+tQAAAQEICp1m+vCdZvrwR0VUIC8waFhDNlpVRS8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1576420276680,"flow_last_seen":1576420276680,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49574,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1576420276681,"flow_last_seen":1576420276681,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49576,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEACBAAEAGPBJ\/AAABfwAAAcGoH5CXxDgNS2MhWYAYAED+uAAAAQEICp1m+vGdZvrxR0VUIC8waFhDNlpVRS5jZm0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1576420276681,"flow_last_seen":1576420276681,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49576,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1576420276683,"flow_last_seen":1576420276683,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49578,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDkEpAAEAGq+h\/AAABfwAAAcGqH5CEAqhbm4E5vYAYAED+twAAAQEICp1m+vKdZvryR0VUIC8waFhDNlpVRS5wbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1576420276683,"flow_last_seen":1576420276683,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49578,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1576420276685,"flow_last_seen":1576420276685,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49580,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADE6exAAEAGUkV\/AAABfwAAAcGsH5Ci99H6PnUDOIAYAED+uAAAAQEICp1m+vWdZvr1R0VUIC8waFhDNlpVRS5jbWQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1576420276685,"flow_last_seen":1576420276685,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49580,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.cmd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1576420276686,"flow_last_seen":1576420276686,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49582,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEl0RAAEAGpO1\/AAABfwAAAcGuH5BUwq9SBePOj4AYAED+uAAAAQEICp1m+vadZvr2R0VUIC8waFhDNlpVRS5odG0gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1576420276686,"flow_last_seen":1576420276686,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49582,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1576420276687,"flow_last_seen":1576420276687,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49584,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFbA5AAEAG0CJ\/AAABfwAAAcGwH5CxUlQZUrozMIAYAED+uQAAAQEICp1m+vedZvr3R0VUIC8waFhDNlpVRS5odG1sIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1576420276687,"flow_last_seen":1576420276687,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49584,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.html","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1576420276689,"flow_last_seen":1576420276689,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49586,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEYhpAAEAG2hd\/AAABfwAAAcGyH5BKOloN5Bjd7oAYAED+uAAAAQEICp1m+vmdZvr5R0VUIC8waFhDNlpVRS5kbGwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om1hcF9jb2RlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1576420276689,"flow_last_seen":1576420276689,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49586,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1576420276690,"flow_last_seen":1576420276690,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49588,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADErQxAAEAGjyV\/AAABfwAAAcG0H5DNO5UfftfaRYAYAED+uAAAAQEICp1m+vqdZvr6R0VUIC8waFhDNlpVRS5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1576420276690,"flow_last_seen":1576420276690,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49588,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1576420276692,"flow_last_seen":1576420276692,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49590,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEWZ5AAEAG4pN\/AAABfwAAAcG2H5D\/SmGKHR\/Uy4AYAED+uAAAAQEICp1m+vydZvr7R0VUIC8waFhDNlpVRS5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1576420276692,"flow_last_seen":1576420276692,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49590,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1576420276694,"flow_last_seen":1576420276694,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49592,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIBvJAAEAGNTx\/AAABfwAAAcG4H5DthT7meWwMh4AYAED+vAAAAQEICp1m+v6dZvr9R0VUIC8waFhDNlpVRS5leGV8ZGlyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bWFwX2NvZGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1576420276694,"flow_last_seen":1576420276694,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49592,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0hXC6ZUE.exe|dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1576420276695,"flow_last_seen":1576420276695,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49594,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCG\/NAAEAGIEF\/AAABfwAAAcG6H5DzUiPolNWjYoAYAED+tgAAAQEICp1m+v+dZvr\/R0VUIC9pbmRleC5waHA\/IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptYXBfY29kZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1576420276695,"flow_last_seen":1576420276695,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49594,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:map_codes)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1576420276697,"flow_last_seen":1576420276697,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49596,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEgRRAAEAGux1\/AAABfwAAAcG8H5ABRrkFDdcmsoAYAED+uAAAAQEICp1m+wGdZvsBR0VUIC9jZ2kuY2dpLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1576420276697,"flow_last_seen":1576420276697,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49596,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi.cgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1576420276699,"flow_last_seen":1576420276699,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49598,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDtolAAEAGhal\/AAABfwAAAcG+H5DlK46S3uw4X4AYAED+twAAAQEICp1m+wKdZvsCR0VUIC93ZWJjZ2kvIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1576420276699,"flow_last_seen":1576420276699,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49598,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/webcgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1576420276701,"flow_last_seen":1576420276701,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49600,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEOWhAAEAGAsp\/AAABfwAAAcHAH5CIUQFyvT1whIAYAED+uAAAAQEICp1m+wWdZvsFR0VUIC9jZ2ktOTE0LyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1576420276701,"flow_last_seen":1576420276701,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49600,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-914\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1576420276703,"flow_last_seen":1576420276703,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49602,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEOclAAEAGAml\/AAABfwAAAcHCH5AyFgHRa7MhPoAYAED+uAAAAQEICp1m+wadZvsGR0VUIC9jZ2ktOTE1LyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1576420276703,"flow_last_seen":1576420276703,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49602,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-915\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1576420276704,"flow_last_seen":1576420276704,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49604,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAObpAAEAGAnx\/AAABfwAAAcHEH5ArBQGh2qRxvoAYAED+tAAAAQEICp1m+widZvsIR0VUIC9iaW4vIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1576420276704,"flow_last_seen":1576420276704,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49604,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1576420276705,"flow_last_seen":1576420276705,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49606,"dst_port":8080,"l4_proto":"tcp"}
+0594{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADARJ1AAEAG95h\/AAABfwAAAcHGH5BoLnyEpCdA\/4AYAED+tAAAAQEICp1m+wmdZvsJR0VUIC9jZ2kvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1576420276705,"flow_last_seen":1576420276705,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49606,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1576420276707,"flow_last_seen":1576420276707,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49608,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCUelAAEAG6kp\/AAABfwAAAcHIH5DIZGoAvjYJ64AYAED+tgAAAQEICp1m+wudZvsLR0VUIC9tcGNnaS8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1576420276707,"flow_last_seen":1576420276707,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49608,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/mpcgi\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1576420276708,"flow_last_seen":1576420276708,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49610,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADE7opAAEAGTad\/AAABfwAAAcHKH5CIytaS2kjlzYAYAED+uAAAAQEICp1m+wydZvsMR0VUIC9jZ2ktYmluLyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1576420276708,"flow_last_seen":1576420276708,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49610,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1576420276710,"flow_last_seen":1576420276710,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49612,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEp+BAAEAGlFF\/AAABfwAAAcHMH5C4I5\/IUy7GWoAYAED+uAAAAQEICp1m+w6dZvsNR0VUIC9vd3MtYmluLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1576420276710,"flow_last_seen":1576420276710,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49612,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ows-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1576420276711,"flow_last_seen":1576420276711,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49614,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEXJRAAEAG351\/AAABfwAAAcHOH5AWt2SMpHJk2oAYAED+uAAAAQEICp1m+w+dZvsPR0VUIC9jZ2ktc3lzLyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1576420276711,"flow_last_seen":1576420276711,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49614,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-sys\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1576420276713,"flow_last_seen":1576420276713,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49616,"dst_port":8080,"l4_proto":"tcp"}
+0602{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADG5r1AAEAGVXJ\/AAABfwAAAcHQH5DCed6iQK2\/KYAYAED+ugAAAQEICp1m+xCdZvsQR0VUIC9jZ2ktbG9jYWwvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1576420276713,"flow_last_seen":1576420276713,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49616,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-local\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1576420276714,"flow_last_seen":1576420276714,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49618,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCR6dAAEAG9Ix\/AAABfwAAAcHSH5C\/OX\/AhojitYAYAED+tgAAAQEICp1m+xKdZvsSR0VUIC9odGJpbi8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1576420276714,"flow_last_seen":1576420276714,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49618,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/htbin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1576420276717,"flow_last_seen":1576420276717,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49620,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADD3hBAAEAGXiJ\/AAABfwAAAcHUH5AtGuYWzQuuvoAYAED+twAAAQEICp1m+xSdZvsUR0VUIC9jZ2liaW4vIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1576420276717,"flow_last_seen":1576420276717,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49620,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgibin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1576420276718,"flow_last_seen":1576420276718,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49622,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB4dFAAEAGWmN\/AAABfwAAAcHWH5B7V9nVmVXzCoAYAED+tQAAAQEICp1m+xadZvsWR0VUIC9jZ2lzLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1576420276718,"flow_last_seen":1576420276718,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49622,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgis\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1576420276719,"flow_last_seen":1576420276719,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49624,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEZD1AAEAG1\/R\/AAABfwAAAcHYH5Ba2lwhPKb01YAYAED+uAAAAQEICp1m+xedZvsXR0VUIC9zY3JpcHRzLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1576420276719,"flow_last_seen":1576420276719,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49624,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1576420276721,"flow_last_seen":1576420276721,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49626,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEcYRAAEAGyq1\/AAABfwAAAcHaH5DTlEmfv44DhoAYAED+uAAAAQEICp1m+xmdZvsZR0VUIC9jZ2ktd2luLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1576420276721,"flow_last_seen":1576420276721,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49626,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-win\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1576420276722,"flow_last_seen":1576420276722,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49628,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF6C5AAEAGVAJ\/AAABfwAAAcHcH5DviNAxcnIUCYAYAED+uQAAAQEICp1m+xqdZvsaR0VUIC9mY2dpLWJpbi8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1576420276722,"flow_last_seen":1576420276722,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49628,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/fcgi-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1576420276724,"flow_last_seen":1576420276724,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49630,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEjEdAAEAGr+p\/AAABfwAAAcHeH5D1xLRZpE\/AW4AYAED+uAAAAQEICp1m+xydZvscR0VUIC9jZ2ktZXhlLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6Y2dpIGRpciBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1576420276724,"flow_last_seen":1576420276724,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49630,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-exe\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1576420276725,"flow_last_seen":1576420276725,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49632,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFFmlAAEAGJch\/AAABfwAAAcHgH5D+Si57PKwG0oAYAED+uQAAAQEICp1m+x2dZvsdR0VUIC9jZ2ktaG9tZS8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1576420276725,"flow_last_seen":1576420276725,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49632,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-home\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1576420276727,"flow_last_seen":1576420276727,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49634,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFtaJAAEAGho5\/AAABfwAAAcHiH5DFGI2++SyH14AYAED+uQAAAQEICp1m+x+dZvsfR0VUIC9jZ2ktcGVybC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1576420276727,"flow_last_seen":1576420276727,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49634,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-perl\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1576420276728,"flow_last_seen":1576420276728,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49636,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFuPZAAEAGgzp\/AAABfwAAAcHkH5CSdoDrZ1cRi4AYAED+uQAAAQEICp1m+yCdZvsgR0VUIC9zY2dpLWJpbi8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1576420276728,"flow_last_seen":1576420276728,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49636,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scgi-bin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1576420276730,"flow_last_seen":1576420276730,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49638,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIS5pAAEAG8JN\/AAABfwAAAcHmH5DcbnOH9ynG7oAYAED+vAAAAQEICp1m+yKdZvsiR0VUIC9jZ2ktYmluLXNkYi8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjZ2kgZGlyIGNoZWNrKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1576420276730,"flow_last_seen":1576420276730,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49638,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin-sdb\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1576420276733,"flow_last_seen":1576420276733,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49640,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADE3RFAAEAGXyB\/AAABfwAAAcHoH5BtNeURIEAjc4AYAED+uAAAAQEICp1m+ySdZvskR0VUIC9jZ2ktbW9kLyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNnaSBkaXIgY2hlY2spDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1576420276733,"flow_last_seen":1576420276733,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49640,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-mod\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:cgi dir check)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1576420276734,"flow_last_seen":1576420276734,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":160,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":160,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49642,"dst_port":8080,"l4_proto":"tcp"}
+0577{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":194,"pkt":"AAAAAAAAAAAAAAAACABFAAC0+gVAAEAGQjx\/AAABfwAAAcHqH5Dwf8IdIiKU7IAYAED+qAAAAQEICp1m+yadZvsmR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnBhdGhzKQ0KDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1576420276734,"flow_last_seen":1576420276734,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":160,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":160,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49642,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:paths)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1576420276738,"flow_last_seen":1576420276738,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":195,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":195,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49644,"dst_port":8080,"l4_proto":"tcp"}
+0625{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":229,"pkt":"AAAAAAAAAAAAAAAACABFAADXryVAAEAGjPl\/AAABfwAAAcHsH5B635cEZT8z4YAYAED+ywAAAQEICp1m+yqdZvsqR0VUIC9jbGllbnRhY2Nlc3Nwb2xpY3kueG1sIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpjbGllbnRhY2Nlc3Nwb2xpY3kpDQoNCg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1576420276738,"flow_last_seen":1576420276738,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":195,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":195,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49644,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/clientaccesspolicy.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:clientaccesspolicy)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1576420276739,"flow_last_seen":1576420276739,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49646,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJlTdAAEAGpvV\/AAABfwAAAcHuH5Dvz60WkSjxAoAYAED+vQAAAQEICp1m+yudZvsrR0VUIC9jcm9zc2RvbWFpbi54bWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmNyb3NzZG9tYWluKQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1576420276739,"flow_last_seen":1576420276739,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49646,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/crossdomain.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:crossdomain)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1576420276741,"flow_last_seen":1576420276741,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49648,"dst_port":8080,"l4_proto":"tcp"}
+0594{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/JMVAAEAGF3J\/AAABfwAAAcHwH5DeWhzjQtAeBoAYAED+swAAAQEICp1m+yydZvssR0VUIC9yb2JvdHMudHh0IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpyb2JvdHMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1576420276741,"flow_last_seen":1576420276741,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49648,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/robots.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:robots)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1576420276742,"flow_last_seen":1576420276742,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49650,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJFcxAAEAGJmF\/AAABfwAAAcHyH5BqYy3sS9mo74AYAED+vQAAAQEICp1m+y6dZvsuR0VUIC9kb21jZmcubnNmIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6RG9taW5vIGRldGVjdGlvbikNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1576420276742,"flow_last_seen":1576420276742,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49650,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/domcfg.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1576420276743,"flow_last_seen":1576420276743,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49652,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIxjhAAEAGdfV\/AAABfwAAAcH0H5Bv5P4Yg+7934AYAED+vAAAAQEICp1m+y+dZvsvR0VUIC9hZG1pbi5uc2YgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OkRvbWlubyBkZXRlY3Rpb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1576420276743,"flow_last_seen":1576420276743,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49652,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1576420276744,"flow_last_seen":1576420276744,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49654,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJ7atAAEAGToF\/AAABfwAAAcH2H5DjmNWMPF0CB4AYAED+vQAAAQEICp1m+zCdZvswR0VUIC9hZG1pbjQubnNmIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1576420276744,"flow_last_seen":1576420276744,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49654,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin4.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1576420276745,"flow_last_seen":1576420276745,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49656,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJnTFAAEAGnvt\/AAABfwAAAcH4H5DLFKUODsXYX4AYAED+vQAAAQEICp1m+zGdZvsxR0VUIC9hZG1pbjUubnNmIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1576420276745,"flow_last_seen":1576420276745,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49656,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin5.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1576420276747,"flow_last_seen":1576420276747,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49658,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":217,"pkt":"AAAAAAAAAAAAAAAACABFAADL46dAAEAGWIN\/AAABfwAAAcH6H5C6Q9uIEYxnOoAYAED+vwAAAQEICp1m+zOdZvsyR0VUIC93ZWJhZG1pbi5uc2YgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1576420276747,"flow_last_seen":1576420276747,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49658,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/webadmin.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1576420276749,"flow_last_seen":1576420276749,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49660,"dst_port":8080,"l4_proto":"tcp"}
+0614{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADONl9AAEAGBcl\/AAABfwAAAcH8H5Dz0w5\/kxB3k4AYAED+wgAAAQEICp1m+zWdZvs1R0VUIC9ub25leGlzdGVudC5uc2YgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEb21pbm8gZGV0ZWN0aW9uKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1576420276749,"flow_last_seen":1576420276749,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49660,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/nonexistent.nsf","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Domino detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1576420276751,"flow_last_seen":1576420276751,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49662,"dst_port":8080,"l4_proto":"tcp"}
+0594{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/ubFAAEAGgoV\/AAABfwAAAcH+H5C5FIGNENlwioAYAED+swAAAQEICp1m+zedZvs2R0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpwYXJrZWQgZGV0ZWN0aW9uKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1576420276751,"flow_last_seen":1576420276751,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49662,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:parked detection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1576420276754,"flow_last_seen":1576420276754,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49664,"dst_port":8080,"l4_proto":"tcp"}
+0630{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":233,"pkt":"AAAAAAAAAAAAAAAACABFAADbnMVAAEAGn1V\/AAABfwAAAcIAH5C\/caTogsAMB4AYAED+zwAAAQEICp1m+zqdZvs5R0VUIC8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpvcmlnaW5fcmVmbGVjdGlvbikNCk9yaWdpbjogbmlrdG8uZXhhbXBsZS5jb20NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1576420276754,"flow_last_seen":1576420276754,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49664,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:origin_reflection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1576420276756,"flow_last_seen":1576420276756,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49666,"dst_port":8080,"l4_proto":"tcp"}
+0621{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":228,"pkt":"AAAAAAAAAAAAAAAACABFAADW2EVAAEAGY9p\/AAABfwAAAcICH5Ck9+BnopzEpIAYAED+ygAAAQEICp1m+zydZvs8R0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpvcmlnaW5fcmVmbGVjdGlvbikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KT3JpZ2luOiAuZXhhbXBsZS5jb20NCg0K","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1576420276756,"flow_last_seen":1576420276756,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49666,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:origin_reflection)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1576420276758,"flow_last_seen":1576420276758,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49668,"dst_port":8080,"l4_proto":"tcp"}
+0613{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":221,"pkt":"AAAAAAAAAAAAAAAACABFAADPoehAAEAGmj5\/AAABfwAAAcIEH5AAZJnEB3vRtYAYAED+wwAAAQEICp1m+z6dZvs+R0VUIC9pbmRleC5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBUcmFuc2xhdGUtZiAjMSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1576420276758,"flow_last_seen":1576420276758,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49668,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1576420276760,"flow_last_seen":1576420276760,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49670,"dst_port":8080,"l4_proto":"tcp"}
+0617{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":223,"pkt":"AAAAAAAAAAAAAAAACABFAADRGS1AAEAGIvh\/AAABfwAAAcIGH5CUqCEOlTzFf4AYAED+xQAAAQEICp1m+0CdZvtAR0VUIC9qdW5rOTk5LmFzcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IFRyYW5zbGF0ZS1mICMxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":223,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1576420276760,"flow_last_seen":1576420276760,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49670,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/junk999.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1576420276761,"flow_last_seen":1576420276761,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49672,"dst_port":8080,"l4_proto":"tcp"}
+0613{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":222,"pkt":"AAAAAAAAAAAAAAAACABFAADQx0dAAEAGdN5\/AAABfwAAAcIIH5Btvf9kj27E6oAYAED+xAAAAQEICp1m+0GdZvtBR0VUIC9pbmRleC5hc3B4IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogVHJhbnNsYXRlLWYgIzEpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1576420276761,"flow_last_seen":1576420276761,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49672,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1576420276763,"flow_last_seen":1576420276763,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49674,"dst_port":8080,"l4_proto":"tcp"}
+0617{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":224,"pkt":"AAAAAAAAAAAAAAAACABFAADSXUtAAEAG3th\/AAABfwAAAcIKH5BTRGVwA03HQYAYAED+xgAAAQEICp1m+0OdZvtCR0VUIC9qdW5rOTg4LmFzcHggSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBUcmFuc2xhdGUtZiAjMSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1576420276763,"flow_last_seen":1576420276763,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49674,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/junk988.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1576420276764,"flow_last_seen":1576420276764,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49676,"dst_port":8080,"l4_proto":"tcp"}
+0613{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":221,"pkt":"AAAAAAAAAAAAAAAACABFAADP8RNAAEAGSxN\/AAABfwAAAcIMH5D+v8k3Lccr2IAYAED+wwAAAQEICp1m+0SdZvtER0VUIC9sb2dpbi5hc3AgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IFRyYW5zbGF0ZS1mICMxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1576420276764,"flow_last_seen":1576420276764,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49676,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1576420276765,"flow_last_seen":1576420276765,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49678,"dst_port":8080,"l4_proto":"tcp"}
+0613{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":222,"pkt":"AAAAAAAAAAAAAAAACABFAADQIn9AAEAGGad\/AAABfwAAAcIOH5Dotxpb5DtnaoAYAED+xAAAAQEICp1m+0WdZvtFR0VUIC9sb2dpbi5hc3B4IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogVHJhbnNsYXRlLWYgIzEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1576420276765,"flow_last_seen":1576420276765,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49678,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: Translate-f #1)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1576420276768,"flow_last_seen":1576420276768,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49680,"dst_port":8080,"l4_proto":"tcp"}
+0581{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":196,"pkt":"AAAAAAAAAAAAAAAACABFAAC2dlNAAEAGxex\/AAABfwAAAcIQH5C4PE56dk2whIAYAED+qgAAAQEICp1m+0idZvtIR0VUIC8gSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1576420276770,"flow_last_seen":1576420276770,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49682,"dst_port":8080,"l4_proto":"tcp"}
+0589{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":202,"pkt":"AAAAAAAAAAAAAAAACABFAAC8XLtAAEAG335\/AAABfwAAAcISH5CeUGSSsmiGvoAYAED+sAAAAQEICp1m+0qdZvtKR0VUIC9pbWFnZXMgSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1576420276771,"flow_last_seen":1576420276771,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49684,"dst_port":8080,"l4_proto":"tcp"}
+0618{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":225,"pkt":"AAAAAAAAAAAAAAAACABFAADTCw5AAEAGMRV\/AAABfwAAAcIUH5CyKDMlKN\/VCYAYAED+xwAAAQEICp1m+0udZvtLR0VUIC9BdXRvZGlzY292ZXIvQXV0b2Rpc2NvdmVyLnhtbCBIVFRQLzEuMA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1576420276773,"flow_last_seen":1576420276773,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49686,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDAPJAAEAGO0F\/AAABfwAAAcIWH5B1lTjaOiDdGIAYAED+twAAAQEICp1m+02dZvtMR0VUIC9BdXRvZGlzY292ZXIvIEhUVFAvMS4wDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogSUlTIGludGVybmFsIElQKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1576420276774,"flow_last_seen":1576420276774,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49688,"dst_port":8080,"l4_proto":"tcp"}
+0618{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":223,"pkt":"AAAAAAAAAAAAAAAACABFAADRNpRAAEAGBZF\/AAABfwAAAcIYH5C\/CA68jFESSoAYAED+xQAAAQEICp1m+06dZvtOR0VUIC9NaWNyb3NvZnQtU2VydmVyLUFjdGl2ZVN5bmMgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":223,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1576420276776,"flow_last_seen":1576420276776,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49690,"dst_port":8080,"l4_proto":"tcp"}
+0634{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":235,"pkt":"AAAAAAAAAAAAAAAACABFAADdUNZAAEAG60J\/AAABfwAAAcIaH5Ae8Gj\/tlcbuIAYAED+0QAAAQEICp1m+1CdZvtPR0VUIC9NaWNyb3NvZnQtU2VydmVyLUFjdGl2ZVN5bmMvZGVmYXVsdC5jc3MgSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1576420276777,"flow_last_seen":1576420276777,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49692,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC51DJAAEAGaAp\/AAABfwAAAcIcH5BDaOwb++ns54AYAED+rQAAAQEICp1m+1GdZvtRR0VUIC9FQ1AgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1576420276779,"flow_last_seen":1576420276779,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49694,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC5SehAAEAG8lR\/AAABfwAAAcIeH5AlzXHNG7GlzoAYAED+rQAAAQEICp1m+1OdZvtTR0VUIC9FV1MgSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1576420276780,"flow_last_seen":1576420276780,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49696,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADH3u5AAEAGXUB\/AAABfwAAAcIgH5D8fubIriLokYAYAED+uwAAAQEICp1m+1SdZvtUR0VUIC9FV1MvRXhjaGFuZ2UuYXNteCBIVFRQLzEuMA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1576420276781,"flow_last_seen":1576420276781,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":170,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":170,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49698,"dst_port":8080,"l4_proto":"tcp"}
+0589{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":204,"pkt":"AAAAAAAAAAAAAAAACABFAAC+Y8xAAEAG2Gt\/AAABfwAAAcIiH5D+h1vitMrGVIAYAED+sgAAAQEICp1m+1WdZvtVR0VUIC9FeGNoYW5nZSBIVFRQLzEuMA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCg0K","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1576420276784,"flow_last_seen":1576420276784,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49700,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC5ylFAAEAGcet\/AAABfwAAAcIkH5CUkvJkMc1am4AYAED+rQAAAQEICp1m+1idZvtYR0VUIC9PV0EgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1576420276786,"flow_last_seen":1576420276786,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49702,"dst_port":8080,"l4_proto":"tcp"}
+0633{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":235,"pkt":"AAAAAAAAAAAAAAAACABFAADdBqpAAEAGNW9\/AAABfwAAAcImH5DUMj6FKAlSCYAYAED+0QAAAQEICp1m+1qdZvtaR0VUIC9NaWNyb3NvZnQtU2VydmVyLUFjdGl2ZVN5bmMvZGVmYXVsdC5lYXMgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1576420276787,"flow_last_seen":1576420276787,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49704,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC5+PtAAEAGQ0F\/AAABfwAAAcIoH5AY5sDVvq1OaYAYAED+rQAAAQEICp1m+1udZvtbR0VUIC9ScGMgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1576420276789,"flow_last_seen":1576420276789,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49706,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHn6dAAEAGnId\/AAABfwAAAcIqH5DNYaeJfxts9oAYAED+uwAAAQEICp1m+12dZvtdR0VUIC9FV1MvU2VydmljZXMud3NkbCBIVFRQLzEuMA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IElJUyBpbnRlcm5hbCBJUCkNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1576420276790,"flow_last_seen":1576420276790,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49708,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC5NBFAAEAGCCx\/AAABfwAAAcIsH5ClBgwj7e4RBIAYAED+rQAAAQEICp1m+16dZvteR0VUIC9lY3AgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1576420276792,"flow_last_seen":1576420276792,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49710,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":199,"pkt":"AAAAAAAAAAAAAAAACABFAAC5lANAAEAGqDl\/AAABfwAAAcIuH5BArawwwOPk6IAYAED+rQAAAQEICp1m+1+dZvtfR0VUIC9PQUIgSFRUUC8xLjANCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBJSVMgaW50ZXJuYWwgSVApDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1576420276793,"flow_last_seen":1576420276793,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49712,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADD2QRAAEAGYy5\/AAABfwAAAcIwH5DBGuEtmiy9f4AYAED+twAAAQEICp1m+2GdZvthR0VUIC9hc3BuZXRfY2xpZW50IEhUVFAvMS4wDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogSUlTIGludGVybmFsIElQKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1576420276794,"flow_last_seen":1576420276794,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49714,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAoqZAAEAGmY9\/AAABfwAAAcIyH5C3W5qL6yWPx4AYAED+tAAAAQEICp1m+2KdZvtiR0VUIC9Qb3dlclNoZWxsIEhUVFAvMS4wDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6aGVhZGVyczogSUlTIGludGVybmFsIElQKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1576420276796,"flow_last_seen":1576420276796,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49716,"dst_port":8080,"l4_proto":"tcp"}
+0585{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":201,"pkt":"AAAAAAAAAAAAAAAACABFAAC74FpAAEAGW+B\/AAABfwAAAcI0H5AdBth42VHy84AYAED+rwAAAQEICp1m+2SdZvtkR0VUIC4gSFRUUC8xLjANClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpoZWFkZXJzOiBXZWJMb2dpYyBpbnRlcm5hbCBJUCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":201,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1576420276797,"flow_last_seen":1576420276797,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49718,"dst_port":8080,"l4_proto":"tcp"}
+0641{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":241,"pkt":"AAAAAAAAAAAAAAAACABFAADj87RAAEAGSF5\/AAABfwAAAcI2H5ABU8uetZ1IA4AYAED+1wAAAQEICp1m+2WdZvtlR0VUIC8gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZGVmbGF0ZSwgZ3ppcA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmhlYWRlcnM6IEJSRUFDSCBUZXN0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1576420276797,"flow_last_seen":1576420276797,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49718,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:headers: BREACH Test)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1576420276801,"flow_last_seen":1576420276801,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":155,"flow_max_l4_data_len":155,"flow_avg_l4_data_len":155,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49720,"dst_port":8080,"l4_proto":"tcp"}
+0569{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":189,"pkt":"AAAAAAAAAAAAAAAACABFAACv4YVAAEAGWsF\/AAABfwAAAcI4H5Af9dm0Z318ZoAYAED+owAAAQEICp1m+2mdZvtpR0VUIC8gSFRUUC8xLjANCk5pa3RvOiAfDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6QFRFU1RJRCkNCg0K","pkt_caplen":189,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1576420276803,"flow_last_seen":1576420276803,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49722,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGlY9AAEAGpqB\/AAABfwAAAcI6H5C5Ma2+n2Qvb4AYAED+ugAAAQEICp1m+2udZvtrR0VUIC9pbmRleC5waHAgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1576420276803,"flow_last_seen":1576420276803,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49722,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1576420276804,"flow_last_seen":1576420276804,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49724,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHUClAAEAG7AV\/AAABfwAAAcI8H5AXCWgXkPGhe4AYAED+uwAAAQEICp1m+2ydZvtsR0VUIC9pbmRleC5waHAzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1576420276804,"flow_last_seen":1576420276804,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49724,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php3","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1576420276806,"flow_last_seen":1576420276806,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49726,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHuG9AAEAGg79\/AAABfwAAAcI+H5DOCYBdLPnSzYAYAED+uwAAAQEICp1m+26dZvtuR0VUIC9pbmRleC5waHA0IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1576420276806,"flow_last_seen":1576420276806,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49726,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php4","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1576420276807,"flow_last_seen":1576420276807,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49728,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHnVlAAEAGntV\/AAABfwAAAcJAH5BrmKVmTh6XdYAYAED+uwAAAQEICp1m+2+dZvtvR0VUIC9pbmRleC5waHA1IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1576420276807,"flow_last_seen":1576420276807,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49728,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php5","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1576420276809,"flow_last_seen":1576420276809,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49730,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHz9VAAEAGbFl\/AAABfwAAAcJCH5Dtpvfi4owoVYAYAED+uwAAAQEICp1m+3GdZvtwR0VUIC9pbmRleC5waHA3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1576420276809,"flow_last_seen":1576420276809,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49730,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php7","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1576420276810,"flow_last_seen":1576420276810,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49732,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADH5lRAAEAGVdp\/AAABfwAAAcJEH5B9+95hKQN6FIAYAED+uwAAAQEICp1m+3KdZvtyR0VUIC9pbmRleC5odG1sIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1576420276810,"flow_last_seen":1576420276810,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49732,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.html","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1576420276812,"flow_last_seen":1576420276812,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49734,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGlhlAAEAGphZ\/AAABfwAAAcJGH5DYta4lttm384AYAED+ugAAAQEICp1m+3OdZvtzR0VUIC9pbmRleC5odG0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1576420276812,"flow_last_seen":1576420276812,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49734,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1576420276813,"flow_last_seen":1576420276813,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49736,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI2h9AAEAGYg5\/AAABfwAAAcJIH5At6uIveFvtbIAYAED+vAAAAQEICp1m+3WdZvt1R0VUIC9pbmRleC5zaHRtbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1576420276813,"flow_last_seen":1576420276813,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49736,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.shtml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1576420276815,"flow_last_seen":1576420276815,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49738,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGtzZAAEAGhPl\/AAABfwAAAcJKH5BukY8IX6sJe4AYAED+ugAAAQEICp1m+3edZvt2R0VUIC9pbmRleC5jZm0gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1576420276815,"flow_last_seen":1576420276815,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49738,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1576420276817,"flow_last_seen":1576420276817,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49740,"dst_port":8080,"l4_proto":"tcp"}
+0602{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGzfJAAEAGbj1\/AAABfwAAAcJMH5CEyfXFi\/ZWqoAYAED+ugAAAQEICp1m+3mdZvt5R0VUIC9pbmRleC5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1576420276817,"flow_last_seen":1576420276817,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49740,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1576420276819,"flow_last_seen":1576420276819,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49742,"dst_port":8080,"l4_proto":"tcp"}
+0602{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFj3JAAEAGrL5\/AAABfwAAAcJOH5DAfLdF0MycV4AYAED+uQAAAQEICp1m+3udZvt7R0VUIC9pbmRleC5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1576420276819,"flow_last_seen":1576420276819,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49742,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1576420276820,"flow_last_seen":1576420276820,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49744,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADG77xAAEAGTHN\/AAABfwAAAcJQH5DIa9eQqgE4nYAYAED+ugAAAQEICp1m+3ydZvt8R0VUIC9pbmRleC5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1576420276820,"flow_last_seen":1576420276820,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49744,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1576420276821,"flow_last_seen":1576420276821,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49746,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHQ2dAAEAG+Md\/AAABfwAAAcJSH5BEZHtRsCeOn4AYAED+uwAAAQEICp1m+32dZvt9R0VUIC9pbmRleC5hc3B4IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDptdWx0aXBsZV9pbmRleCkNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1576420276821,"flow_last_seen":1576420276821,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49746,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1576420276823,"flow_last_seen":1576420276823,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49748,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI9WNAAEAGRsp\/AAABfwAAAcJUH5Atl81VKdEVGoAYAED+vAAAAQEICp1m+3+dZvt\/R0VUIC9kZWZhdWx0LmFzcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1576420276823,"flow_last_seen":1576420276823,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49748,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/default.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1576420276824,"flow_last_seen":1576420276824,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49750,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJPphAAEAG\/ZR\/AAABfwAAAcJWH5C0BwahLC3FVoAYAED+vQAAAQEICp1m+4CdZvuAR0VUIC9kZWZhdWx0LmFzcHggSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1576420276824,"flow_last_seen":1576420276824,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49750,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/default.aspx","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1576420276825,"flow_last_seen":1576420276825,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49752,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIFrxAAEAGJXJ\/AAABfwAAAcJYH5C2Ei6NIzroBYAYAED+vAAAAQEICp1m+4GdZvuBR0VUIC9kZWZhdWx0Lmh0bSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6bXVsdGlwbGVfaW5kZXgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1576420276825,"flow_last_seen":1576420276825,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49752,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/default.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1576420276827,"flow_last_seen":1576420276827,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49754,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFTUVAAEAG7ut\/AAABfwAAAcJaH5CLBXV23SQCI4AYAED+uQAAAQEICp1m+4OdZvuDR0VUIC9pbmRleC5kbyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1576420276827,"flow_last_seen":1576420276827,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49754,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.do","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1576420276828,"flow_last_seen":1576420276828,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49756,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADICi9AAEAGMf9\/AAABfwAAAcJcH5By6zIbQafp54AYAED+vAAAAQEICp1m+4SdZvuER0VUIC9pbmRleC5qaHRtbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1576420276828,"flow_last_seen":1576420276828,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49756,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.jhtml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1576420276829,"flow_last_seen":1576420276829,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49758,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADG08RAAEAGaGt\/AAABfwAAAcJeH5AOKuv2Y8ch84AYAED+ugAAAQEICp1m+4WdZvuFR0VUIC9pbmRleC5qc3AgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1576420276829,"flow_last_seen":1576420276829,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49758,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.jsp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1576420276832,"flow_last_seen":1576420276832,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49760,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGiDJAAEAGs\/1\/AAABfwAAAcJgH5Cj8LAJpHctpoAYAED+ugAAAQEICp1m+4edZvuHR0VUIC9pbmRleC54bWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om11bHRpcGxlX2luZGV4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1576420276832,"flow_last_seen":1576420276832,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49760,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:multiple_index)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1576420276834,"flow_last_seen":1576420276834,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49764,"dst_port":8080,"l4_proto":"tcp"}
+0639{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":240,"pkt":"AAAAAAAAAAAAAAAACABFAADiGX1AAEAGIpd\/AAABfwAAAcJkH5BjVCFE0UHCd4AYAED+1gAAAQEICp1m+4qdZvuKR0VUIC9pbmRleCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0Om5lZ290aWF0ZSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdDogYXBwbGljYXRpb24vd2hhdGV2ZXI7IHE9MS4wDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":240,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1576420276834,"flow_last_seen":1576420276834,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49764,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:negotiate)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1576420276835,"flow_last_seen":1576420276835,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49766,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKANNAAEAGO1l\/AAABfwAAAcJmH5BoODjpUSa4iYAYAED+vgAAAQEICp1m+4udZvuLR0VUIC9+YmluIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDphcGFjaGV1c2Vyczoga25vd24gdXNlcikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1576420276835,"flow_last_seen":1576420276835,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49766,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/~bin","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:apacheusers: known user)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1576420276837,"flow_last_seen":1576420276837,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49768,"dst_port":8080,"l4_proto":"tcp"}
+0643{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":243,"pkt":"AAAAAAAAAAAAAAAACABFAADlgjNAAEAGud1\/AAABfwAAAcJoH5AFkroJ2Lkky4AYAED+2QAAAQEICp1m+42dZvuNR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KRXhwZWN0OiA8c2NyaXB0PmFsZXJ0KHhzcyk8L3NjcmlwdD4NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDphcGFjaGVfZXhwZWN0X3hzcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1576420276837,"flow_last_seen":1576420276837,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49768,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:apache_expect_xss)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1576420276839,"flow_last_seen":1576420276839,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":258,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49770,"dst_port":8080,"l4_proto":"tcp"}
+0712{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":292,"pkt":"AAAAAAAAAAAAAAAACABFAAEW4vNAAEAGWOx\/AAABfwAAAcJqH5CF6NrJzvbnOoAYAED\/CgAAAQEICp1m+4+dZvuOR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvYm9vdC5pbmklMDAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OkRpcmVjdG9yeSB0cmF2ZXJzYWwgY2hlY2spDQoNCg==","pkt_caplen":292,"pkt_type":2048,"pkt_ipoffset":14}
+0861{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1576420276839,"flow_last_seen":1576420276839,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":258,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49770,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/boot.ini%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1576420276840,"flow_last_seen":1576420276840,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49772,"dst_port":8080,"l4_proto":"tcp"}
+0712{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":293,"pkt":"AAAAAAAAAAAAAAAACABFAAEXDe5AAEAGLfF\/AAABfwAAAcJsH5C64jXXMX558oAYAED\/CwAAAQEICp1m+5CdZvuQR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvZXRjL2hvc3RzJTAwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEaXJlY3RvcnkgdHJhdmVyc2FsIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1576420276840,"flow_last_seen":1576420276840,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49772,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/etc\/hosts%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1576420276841,"flow_last_seen":1576420276841,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":270,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":270,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49774,"dst_port":8080,"l4_proto":"tcp"}
+0728{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":304,"pkt":"AAAAAAAAAAAAAAAACABFAAEi9VxAAEAGRnd\/AAABfwAAAcJuH5BHUs1h0rvodIAYAED\/FgAAAQEICp1m+5GdZvuRR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvSEFTSCgweDU1NTllODRmYmM0MCklMDAgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEaXJlY3RvcnkgdHJhdmVyc2FsIGNoZWNrKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0873{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1576420276841,"flow_last_seen":1576420276841,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":270,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":270,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49774,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/HASH(0x5559e84fbc40)%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1576420276842,"flow_last_seen":1576420276842,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":263,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49776,"dst_port":8080,"l4_proto":"tcp"}
+0716{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":297,"pkt":"AAAAAAAAAAAAAAAACABFAAEbV1RAAEAG5IZ\/AAABfwAAAcJwH5AGYW9pnm57IYAYAED\/DwAAAQEICp1m+5KdZvuSR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvd2lubnQvd2luLmluaSUwMCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6RGlyZWN0b3J5IHRyYXZlcnNhbCBjaGVjaykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1576420276842,"flow_last_seen":1576420276842,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":263,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49776,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/winnt\/win.ini%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1576420276844,"flow_last_seen":1576420276844,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49778,"dst_port":8080,"l4_proto":"tcp"}
+0720{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":299,"pkt":"AAAAAAAAAAAAAAAACABFAAEdYctAAEAG2g1\/AAABfwAAAcJyH5D8wFnzKu6RnoAYAED\/EQAAAQEICp1m+5SdZvuUR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvd2luZG93cy93aW4uaW5pJTAwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpEaXJlY3RvcnkgdHJhdmVyc2FsIGNoZWNrKQ0KDQo=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0869{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1576420276844,"flow_last_seen":1576420276844,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49778,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/windows\/win.ini%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1576420276847,"flow_last_seen":1576420276847,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":260,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":260,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49780,"dst_port":8080,"l4_proto":"tcp"}
+0712{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":294,"pkt":"AAAAAAAAAAAAAAAACABFAAEYOOhAAEAGAvZ\/AAABfwAAAcJ0H5DjgwDevH40fYAYAED\/DAAAAQEICp1m+5adZvuWR0VUIC90eXBvMy9kZXYvdHJhbnNsYXRpb25zLnBocD9PTkxZPSUyZSUyZS8lMmUlMmUvJTJlJTJlLyUyZSUyZS8lMmUlMmUvZXRjL3Bhc3N3ZCUwMCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6RGlyZWN0b3J5IHRyYXZlcnNhbCBjaGVjaykNCg0K","pkt_caplen":294,"pkt_type":2048,"pkt_ipoffset":14}
+0864{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1576420276847,"flow_last_seen":1576420276847,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":260,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":260,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49780,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/typo3\/dev\/translations.php?ONLY=%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/%2e%2e\/etc\/passwd%00","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:Directory traversal check)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1576420276856,"flow_last_seen":1576420276856,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49782,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBvW9AAEAGfsV\/AAABfwAAAcJ2H5DTj4VUAEbtioAYAED+tQAAAQEICp1m+6CdZvugR0VUIC8xMjcwMC53YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1576420276856,"flow_last_seen":1576420276856,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49782,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1576420276858,"flow_last_seen":1576420276858,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49784,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB2xVAAEAGYR9\/AAABfwAAAcJ4H5D77OMujr7QhoAYAED+tQAAAQEICp1m+6KdZvuiR0VUIC8xMjcwMC53YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1576420276858,"flow_last_seen":1576420276858,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49784,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1576420276859,"flow_last_seen":1576420276859,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49786,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADApHlAAEAGl7x\/AAABfwAAAcJ6H5CcwpxJV58CXYAYAED+tAAAAQEICp1m+6OdZvujR0VUIC8xMjcwLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1576420276859,"flow_last_seen":1576420276859,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49786,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1576420276860,"flow_last_seen":1576420276860,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49788,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADALy9AAEAGDQd\/AAABfwAAAcJ8H5ChphcTD1c5UYAYAED+tAAAAQEICp1m+6SdZvukR0VUIC8xMjcwLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1576420276860,"flow_last_seen":1576420276860,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49788,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1576420276862,"flow_last_seen":1576420276862,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49790,"dst_port":8080,"l4_proto":"tcp"}
+0591{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9dyVAAEAGxRN\/AAABfwAAAcJ+H5ApDE8dFFMQVIAYAED+sQAAAQEICp1m+6WdZvulR0VUIC8xLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1576420276862,"flow_last_seen":1576420276862,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49790,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1576420276863,"flow_last_seen":1576420276863,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49792,"dst_port":8080,"l4_proto":"tcp"}
+0591{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9pJxAAEAGl5x\/AAABfwAAAcKAH5APfJymg2qZ5YAYAED+sQAAAQEICp1m+6edZvumR0VUIC8xLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1576420276863,"flow_last_seen":1576420276863,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49792,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1576420276864,"flow_last_seen":1576420276864,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49794,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBqoBAAEAGkbR\/AAABfwAAAcKCH5Cxx5I\/tyTjW4AYAED+tQAAAQEICp1m+6idZvuoR0VUIC8xMjcuMC5zcWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1576420276864,"flow_last_seen":1576420276864,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49794,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1576420276865,"flow_last_seen":1576420276865,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49796,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBsWVAAEAGis9\/AAABfwAAAcKEH5CGGYkkbARgroAYAED+tQAAAQEICp1m+6mdZvupR0VUIC8xMjcuMC5zcWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1576420276865,"flow_last_seen":1576420276865,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49796,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1576420276866,"flow_last_seen":1576420276866,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49798,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBsTlAAEAGivt\/AAABfwAAAcKGH5CzxIl4Ool\/aIAYAED+tQAAAQEICp1m+6qdZvuqR0VUIC8xMjcuMC5wZW0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1576420276866,"flow_last_seen":1576420276866,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49798,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1576420276869,"flow_last_seen":1576420276869,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49800,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBxdFAAEAGdmN\/AAABfwAAAcKIH5BDzv2PC6KyZoAYAED+tQAAAQEICp1m+6ydZvusR0VUIC8xMjcuMC5wZW0gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1576420276869,"flow_last_seen":1576420276869,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49800,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1576420276870,"flow_last_seen":1576420276870,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49802,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAIL1AAEAGG3l\/AAABfwAAAcKKH5D\/Dxj7MLgvIIAYAED+tAAAAQEICp1m+66dZvuuR0VUIC9zaXRlLnRhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1576420276870,"flow_last_seen":1576420276870,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49802,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1576420276871,"flow_last_seen":1576420276871,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49804,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAmdRAAEAGomF\/AAABfwAAAcKMH5DqwaGU3VMvd4AYAED+tAAAAQEICp1m+6+dZvuvR0VUIC9zaXRlLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1576420276871,"flow_last_seen":1576420276871,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49804,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1576420276872,"flow_last_seen":1576420276872,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49806,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFFSZAAEAGJwt\/AAABfwAAAcKOH5D96y1nB6jLDIAYAED+uQAAAQEICp1m+7CdZvuwR0VUIC8xMjcuMC4wLjEuY2VyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1576420276872,"flow_last_seen":1576420276872,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49806,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1576420276873,"flow_last_seen":1576420276873,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49808,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFhm9AAEAGtcF\/AAABfwAAAcKQH5BNzL4wefiP1IAYAED+uQAAAQEICp1m+7GdZvuxR0VUIC8xMjcuMC4wLjEuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1576420276873,"flow_last_seen":1576420276873,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49808,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1576420276874,"flow_last_seen":1576420276874,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49810,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCE1BAAEAGKOR\/AAABfwAAAcKSH5DnJisNBZiCk4AYAED+tgAAAQEICp1m+7KdZvuyR0VUIC8xMjcwMDEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1576420276874,"flow_last_seen":1576420276874,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49810,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1576420276876,"flow_last_seen":1576420276876,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49812,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCnWxAAEAGnsd\/AAABfwAAAcKUH5Co\/aUqs\/1iGoAYAED+tgAAAQEICp1m+7SdZvu0R0VUIC8xMjcwMDEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1576420276876,"flow_last_seen":1576420276876,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49812,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1576420276877,"flow_last_seen":1576420276877,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAt7lAAEAGhHx\/AAABfwAAAcKWH5CQPI\/1lm3rwoAYAED+tAAAAQEICp1m+7WdZvu1R0VUIC9zaXRlLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1576420276877,"flow_last_seen":1576420276877,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1576420276879,"flow_last_seen":1576420276879,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49816,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAhf9AAEAGtjZ\/AAABfwAAAcKYH5Cnmb2\/tsRlFIAYAED+tAAAAQEICp1m+7edZvu2R0VUIC9zaXRlLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1576420276879,"flow_last_seen":1576420276879,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49816,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1576420276881,"flow_last_seen":1576420276881,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49818,"dst_port":8080,"l4_proto":"tcp"}
+0595{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADADYtAAEAGLqt\/AAABfwAAAcKaH5CHzTXOE9kNb4AYAED+tAAAAQEICp1m+7mdZvu5R0VUIC8xMjcwLnRhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1576420276881,"flow_last_seen":1576420276881,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49818,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1576420276884,"flow_last_seen":1576420276884,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49820,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAT5pAAEAG7Jt\/AAABfwAAAcKcH5DBOXfeD5T\/lYAYAED+tAAAAQEICp1m+7udZvu7R0VUIC8xMjcwLnRhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1576420276884,"flow_last_seen":1576420276884,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49820,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1576420276885,"flow_last_seen":1576420276885,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49822,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFQQ5AAEAG+yJ\/AAABfwAAAcKeH5AdhXlKg0oevYAYAED+uQAAAQEICp1m+72dZvu9R0VUIC8xMjcuMC4wLjEuYWx6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1576420276885,"flow_last_seen":1576420276885,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49822,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1576420276886,"flow_last_seen":1576420276886,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49824,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFWJBAAEAG46B\/AAABfwAAAcKgH5CSJ2DMWYYFgIAYAED+uQAAAQEICp1m+76dZvu+R0VUIC8xMjcuMC4wLjEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1576420276886,"flow_last_seen":1576420276886,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49824,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1576420276888,"flow_last_seen":1576420276888,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49826,"dst_port":8080,"l4_proto":"tcp"}
+0591{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC95a1AAEAGVot\/AAABfwAAAcKiH5DfWN3u+DsBkYAYAED+sQAAAQEICp1m+8CdZvvAR0VUIC8wLnppcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1576420276888,"flow_last_seen":1576420276888,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49826,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1576420276890,"flow_last_seen":1576420276890,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49828,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9vy5AAEAGfQp\/AAABfwAAAcKkH5Dme4drk\/tL44AYAED+sQAAAQEICp1m+8KdZvvCR0VUIC8wLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1576420276890,"flow_last_seen":1576420276890,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49828,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1576420276891,"flow_last_seen":1576420276891,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49830,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF\/ZdAAEAGPpl\/AAABfwAAAcKmH5DYD8XTrc+7CoAYAED+uQAAAQEICp1m+8OdZvvDR0VUIC8xMjcuMC4wLjEudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1576420276891,"flow_last_seen":1576420276891,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49830,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1576420276893,"flow_last_seen":1576420276893,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49832,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFI6xAAEAGGIV\/AAABfwAAAcKoH5Ar0hvuzfCq7oAYAED+uQAAAQEICp1m+8WdZvvFR0VUIC8xMjcuMC4wLjEudGFyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1576420276893,"flow_last_seen":1576420276893,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49832,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1576420276894,"flow_last_seen":1576420276894,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49834,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDA5ZAAEAGOJ1\/AAABfwAAAcKqH5B\/mzvUPuYs44AYAED+twAAAQEICp1m+8adZvvGR0VUIC8xMjcudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1576420276894,"flow_last_seen":1576420276894,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49834,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1576420276896,"flow_last_seen":1576420276896,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49836,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADD\/SZAAEAGPwx\/AAABfwAAAcKsH5AB18VtW5jVeIAYAED+twAAAQEICp1m+8idZvvIR0VUIC8xMjcudGFyLmJ6MiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1576420276896,"flow_last_seen":1576420276896,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49836,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1576420276897,"flow_last_seen":1576420276897,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49838,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFBrJAAEAGNX9\/AAABfwAAAcKuH5Ayaz75EQ6Mk4AYAED+uQAAAQEICp1m+8mdZvvJR0VUIC8xMjcuMC50YXIuYnoyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1576420276897,"flow_last_seen":1576420276897,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49838,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1576420276900,"flow_last_seen":1576420276900,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49840,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFczBAAEAGyQB\/AAABfwAAAcKwH5A3G0tor3ywHoAYAED+uQAAAQEICp1m+8ydZvvMR0VUIC8xMjcuMC50YXIuYnoyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1576420276900,"flow_last_seen":1576420276900,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49840,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1576420276901,"flow_last_seen":1576420276901,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49842,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADD0l1AAEAGadV\/AAABfwAAAcKyH5CdU+oT47LjtYAYAED+twAAAQEICp1m+82dZvvNR0VUIC9zaXRlLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1576420276901,"flow_last_seen":1576420276901,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49842,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1576420276903,"flow_last_seen":1576420276903,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49844,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDR55AAEAG9JR\/AAABfwAAAcK0H5AcfX\/WOy6jEYAYAED+twAAAQEICp1m+8+dZvvOR0VUIC9zaXRlLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1576420276903,"flow_last_seen":1576420276903,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49844,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1576420276904,"flow_last_seen":1576420276904,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49846,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/WUtAAEAG4ut\/AAABfwAAAcK2H5D8ZmEEi9guOYAYAED+swAAAQEICp1m+9CdZvvQR0VUIC8xMjcucGVtIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1576420276904,"flow_last_seen":1576420276904,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49846,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1576420276905,"flow_last_seen":1576420276905,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49848,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/HslAAEAGHW5\/AAABfwAAAcK4H5CgfyaOuiPkq4AYAED+swAAAQEICp1m+9GdZvvRR0VUIC8xMjcucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1576420276905,"flow_last_seen":1576420276905,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49848,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1576420276907,"flow_last_seen":1576420276907,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49850,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9zZ5AAEAGbpp\/AAABfwAAAcK6H5CXJ\/XXeafd0YAYAED+sQAAAQEICp1m+9OdZvvSR0VUIC8wLnRhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1576420276907,"flow_last_seen":1576420276907,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49850,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1576420276908,"flow_last_seen":1576420276908,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49852,"dst_port":8080,"l4_proto":"tcp"}
+0591{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9umJAAEAGgdZ\/AAABfwAAAcK8H5Cw+YIsSeaYa4AYAED+sQAAAQEICp1m+9SdZvvUR0VUIC8wLnRhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1576420276908,"flow_last_seen":1576420276908,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49852,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1576420276910,"flow_last_seen":1576420276910,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49854,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDPvVAAEAG\/T1\/AAABfwAAAcK+H5Bg7Aa5zb6cN4AYAED+twAAAQEICp1m+9adZvvWR0VUIC8xMjcuMC4wLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1576420276910,"flow_last_seen":1576420276910,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49854,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1576420276912,"flow_last_seen":1576420276912,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49856,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDm5RAAEAGoJ5\/AAABfwAAAcLAH5Ba3KPftqtSlIAYAED+twAAAQEICp1m+9edZvvXR0VUIC8xMjcuMC4wLnBlbSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1576420276912,"flow_last_seen":1576420276912,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49856,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1576420276913,"flow_last_seen":1576420276913,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49858,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCN0tAAEAGBOl\/AAABfwAAAcLCH5DYOQ8GBjLTAIAYAED+tgAAAQEICp1m+9mdZvvZR0VUIC8xMjcwMDEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1576420276913,"flow_last_seen":1576420276913,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49858,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1576420276916,"flow_last_seen":1576420276916,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49860,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCczVAAEAGyP5\/AAABfwAAAcLEH5BP20t\/\/3FheoAYAED+tgAAAQEICp1m+9ydZvvcR0VUIC8xMjcwMDEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1576420276916,"flow_last_seen":1576420276916,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49860,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1576420276917,"flow_last_seen":1576420276917,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49862,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDZ9VAAEAG1F1\/AAABfwAAAcLGH5AZz1+f4E8iK4AYAED+twAAAQEICp1m+92dZvvdR0VUIC8xMjcwLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1576420276917,"flow_last_seen":1576420276917,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49862,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1576420276919,"flow_last_seen":1576420276919,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49864,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDxTFAAEAGdwF\/AAABfwAAAcLIH5D+g\/1jHP616oAYAED+twAAAQEICp1m+9+dZvveR0VUIC8xMjcwLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1576420276919,"flow_last_seen":1576420276919,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49864,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1576420276920,"flow_last_seen":1576420276920,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49866,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFpeFAAEAGlk9\/AAABfwAAAcLKH5AnGp2SsuR1gYAYAED+uQAAAQEICp1m++CdZvvgR0VUIC8xMjcwLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1576420276920,"flow_last_seen":1576420276920,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49866,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1576420276922,"flow_last_seen":1576420276922,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49868,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFIE9AAEAGG+J\/AAABfwAAAcLMH5CC7hgEsmCzLIAYAED+uQAAAQEICp1m++KdZvviR0VUIC8xMjcwLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1576420276922,"flow_last_seen":1576420276922,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49868,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1576420276924,"flow_last_seen":1576420276924,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49870,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFRxNAAEAG9R1\/AAABfwAAAcLOH5BdCH9f1fkuqIAYAED+uQAAAQEICp1m++SdZvvjR0VUIC8xMjdfMF8wXzEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1576420276924,"flow_last_seen":1576420276924,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49870,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1576420276925,"flow_last_seen":1576420276925,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49872,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFQzdAAEAG+Pl\/AAABfwAAAcLQH5BEXHt7s07ta4AYAED+uQAAAQEICp1m++WdZvvlR0VUIC8xMjdfMF8wXzEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1576420276925,"flow_last_seen":1576420276925,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49872,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1576420276926,"flow_last_seen":1576420276926,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49874,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIWd1AAEAG4lB\/AAABfwAAAcLSH5AL0mGV2bYy0oAYAED+vAAAAQEICp1m++adZvvmR0VUIC8xMjcuMC4wLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1576420276926,"flow_last_seen":1576420276926,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49874,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1576420276928,"flow_last_seen":1576420276928,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49876,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIwcZAAEAGemd\/AAABfwAAAcLUH5BvVfmVJOeoY4AYAED+vAAAAQEICp1m++idZvvoR0VUIC8xMjcuMC4wLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1576420276928,"flow_last_seen":1576420276928,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49876,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1576420276929,"flow_last_seen":1576420276929,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49878,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/L19AAEAGDNh\/AAABfwAAAcLWH5BVghcOcLaACoAYAED+swAAAQEICp1m++mdZvvpR0VUIC8xMjcudGd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1576420276929,"flow_last_seen":1576420276929,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49878,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1576420276932,"flow_last_seen":1576420276932,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49880,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/j\/RAAEAGrEJ\/AAABfwAAAcLYH5CKH7ek\/31EG4AYAED+swAAAQEICp1m++ydZvvsR0VUIC8xMjcudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1576420276932,"flow_last_seen":1576420276932,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49880,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1576420276933,"flow_last_seen":1576420276933,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49882,"dst_port":8080,"l4_proto":"tcp"}
+0603{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFT2BAAEAG7NB\/AAABfwAAAcLaH5CU9HcQhzdjIYAYAED+uQAAAQEICp1m++2dZvvtR0VUIC9zaXRlLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1576420276933,"flow_last_seen":1576420276933,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49882,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1576420276934,"flow_last_seen":1576420276934,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49884,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFqdVAAEAGklt\/AAABfwAAAcLcH5A055GDxax\/gIAYAED+uQAAAQEICp1m++6dZvvuR0VUIC9zaXRlLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1576420276934,"flow_last_seen":1576420276934,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49884,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1576420276936,"flow_last_seen":1576420276936,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49886,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKdTNAAEAGxvh\/AAABfwAAAcLeH5C4Uk1kAkvbMoAYAED+vgAAAQEICp1m+++dZvvvR0VUIC8xMjcuMC4wLjEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1576420276936,"flow_last_seen":1576420276936,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49886,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1576420276937,"flow_last_seen":1576420276937,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49888,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADK9XZAAEAGRrV\/AAABfwAAAcLgH5B7eM0nuPdDlYAYAED+vgAAAQEICp1m+\/GdZvvxR0VUIC8xMjcuMC4wLjEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1576420276937,"flow_last_seen":1576420276937,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49888,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1576420276938,"flow_last_seen":1576420276938,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49890,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFaYFAAEAG0q9\/AAABfwAAAcLiH5DjU1EuPo0KHoAYAED+uQAAAQEICp1m+\/KdZvvyR0VUIC8xMjcuMC4wLjEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1576420276938,"flow_last_seen":1576420276938,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49890,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1576420276939,"flow_last_seen":1576420276939,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49892,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFJ3BAAEAGFMF\/AAABfwAAAcLkH5B8NB8+Bh651YAYAED+uQAAAQEICp1m+\/OdZvvzR0VUIC8xMjcuMC4wLjEuemlwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1576420276939,"flow_last_seen":1576420276939,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49892,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1576420276941,"flow_last_seen":1576420276941,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49894,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCOKZAAEAGA45\/AAABfwAAAcLmH5ActAD4h3K22IAYAED+tgAAAQEICp1m+\/WdZvv1R0VUIC9iYWNrdXAucGVtIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1576420276941,"flow_last_seen":1576420276941,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49894,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1576420276943,"flow_last_seen":1576420276943,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49896,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCuRhAAEAGgxt\/AAABfwAAAcLoH5DBbYFGICWC9IAYAED+tgAAAQEICp1m+\/edZvv3R0VUIC9iYWNrdXAucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1576420276943,"flow_last_seen":1576420276943,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49896,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1576420276945,"flow_last_seen":1576420276945,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49898,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9GW5AAEAGIst\/AAABfwAAAcLqH5C0ISE5HkW76YAYAED+sQAAAQEICp1m+\/mdZvv5R0VUIC8xLmprcyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1576420276945,"flow_last_seen":1576420276945,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49898,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1576420276947,"flow_last_seen":1576420276947,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49900,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9hilAAEAGtg9\/AAABfwAAAcLsH5DmS75z\/EZQIIAYAED+sQAAAQEICp1m+\/udZvv7R0VUIC8xLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1576420276947,"flow_last_seen":1576420276947,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49900,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1576420276949,"flow_last_seen":1576420276949,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49902,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADG8sFAAEAGSW5\/AAABfwAAAcLuH5DZeMrrTWBmVIAYAED+ugAAAQEICp1m+\/2dZvv9R0VUIC8xMjcwMC50YXIubHptYSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1576420276949,"flow_last_seen":1576420276949,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49902,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1576420276950,"flow_last_seen":1576420276950,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49904,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGIHlAAEAGG7d\/AAABfwAAAcLwH5AJERgjseiOe4AYAED+ugAAAQEICp1m+\/6dZvv+R0VUIC8xMjcwMC50YXIubHptYSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1576420276950,"flow_last_seen":1576420276950,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49904,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1576420276953,"flow_last_seen":1576420276953,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49906,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB609AAEAGUOV\/AAABfwAAAcLyH5CMSNMc4cqoooAYAED+tQAAAQEICp1m\/AGdZvwBR0VUIC8xMjcwMC50Z3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1576420276953,"flow_last_seen":1576420276953,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49906,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1576420276955,"flow_last_seen":1576420276955,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49908,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBW5ZAAEAG4J5\/AAABfwAAAcL0H5DrXWPDXa4XUYAYAED+tQAAAQEICp1m\/AOdZvwDR0VUIC8xMjcwMC50Z3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1576420276955,"flow_last_seen":1576420276955,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49908,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1576420276956,"flow_last_seen":1576420276956,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49910,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/O0xAAEAGAOt\/AAABfwAAAcL2H5D9kwMeqK3jJ4AYAED+swAAAQEICp1m\/ASdZvwER0VUIC8xMjcudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1576420276956,"flow_last_seen":1576420276956,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49910,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1576420276957,"flow_last_seen":1576420276957,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49912,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/H8ZAAEAGHHF\/AAABfwAAAcL4H5BlEieUASYiL4AYAED+swAAAQEICp1m\/AWdZvwFR0VUIC8xMjcudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1576420276957,"flow_last_seen":1576420276957,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49912,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1576420276959,"flow_last_seen":1576420276959,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49914,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIMS5AAEAGCwB\/AAABfwAAAcL6H5D33Al8T9gIjoAYAED+vAAAAQEICp1m\/AedZvwHR0VUIC8xMjdfMF8wXzEudGFyLmd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1576420276959,"flow_last_seen":1576420276959,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49914,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1576420276960,"flow_last_seen":1576420276960,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49916,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI29RAAEAGYFl\/AAABfwAAAcL8H5B21OOLlrDXQ4AYAED+vAAAAQEICp1m\/AidZvwIR0VUIC8xMjdfMF8wXzEudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1576420276960,"flow_last_seen":1576420276960,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49916,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1576420276961,"flow_last_seen":1576420276961,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49918,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFGIxAAEAGI6V\/AAABfwAAAcL+H5DvJyDTt9IC\/IAYAED+uQAAAQEICp1m\/AmdZvwJR0VUIC8xMjcuMC4wLjEud2FyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1576420276961,"flow_last_seen":1576420276961,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49918,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1576420276964,"flow_last_seen":1576420276964,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49920,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFxd9AAEAGdlF\/AAABfwAAAcMAH5CFNv2FdhNdEIAYAED+uQAAAQEICp1m\/AudZvwLR0VUIC8xMjcuMC4wLjEud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1576420276964,"flow_last_seen":1576420276964,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49920,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1576420276965,"flow_last_seen":1576420276965,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49922,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC95pxAAEAGVZx\/AAABfwAAAcMCH5C3Cd7E92VLp4AYAED+sQAAAQEICp1m\/A2dZvwNR0VUIC8xLnRneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1576420276965,"flow_last_seen":1576420276965,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49922,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1576420276966,"flow_last_seen":1576420276966,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49924,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9ujdAAEAGggF\/AAABfwAAAcMEH5BKt4Jt+wc3pIAYAED+sQAAAQEICp1m\/A6dZvwOR0VUIC8xLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1576420276966,"flow_last_seen":1576420276966,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49924,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1576420276968,"flow_last_seen":1576420276968,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49926,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA8BJAAEAGTCN\/AAABfwAAAcMGH5DhJMhLysCuKoAYAED+tAAAAQEICp1m\/BCdZvwPR0VUIC8xMjcwLmprcyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1576420276968,"flow_last_seen":1576420276968,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49926,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1576420276969,"flow_last_seen":1576420276969,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49928,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA1ehAAEAGZk1\/AAABfwAAAcMIH5C08u29Z4prKYAYAED+tAAAAQEICp1m\/BGdZvwRR0VUIC8xMjcwLmprcyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1576420276969,"flow_last_seen":1576420276969,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49928,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1576420276970,"flow_last_seen":1576420276970,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49930,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCS3NAAEAG8MB\/AAABfwAAAcMKH5AxI3MswmM4CYAYAED+tgAAAQEICp1m\/BKdZvwSR0VUIC9iYWNrdXAuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1576420276970,"flow_last_seen":1576420276970,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49930,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1576420276972,"flow_last_seen":1576420276972,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49932,"dst_port":8080,"l4_proto":"tcp"}
+0602{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCyadAAEAGcox\/AAABfwAAAcMMH5BpA\/H\/vohuZIAYAED+tgAAAQEICp1m\/BSdZvwUR0VUIC9iYWNrdXAuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1576420276972,"flow_last_seen":1576420276972,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49932,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1576420276973,"flow_last_seen":1576420276973,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49934,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA+8hAAEAGQG1\/AAABfwAAAcMOH5CJ5sOeTDtcfYAYAED+tAAAAQEICp1m\/BWdZvwVR0VUIC9zaXRlLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1576420276973,"flow_last_seen":1576420276973,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49934,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1576420276976,"flow_last_seen":1576420276976,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49936,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADABYdAAEAGNq9\/AAABfwAAAcMQH5AThT3a7QA3zYAYAED+tAAAAQEICp1m\/BidZvwYR0VUIC9zaXRlLmprcyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1576420276976,"flow_last_seen":1576420276976,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49936,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1576420276977,"flow_last_seen":1576420276977,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49938,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBYiVAAEAG2g9\/AAABfwAAAcMSH5B68lqAEiH3Y4AYAED+tQAAAQEICp1m\/BmdZvwZR0VUIC8xMjcuMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1576420276977,"flow_last_seen":1576420276977,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49938,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1576420276980,"flow_last_seen":1576420276980,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49940,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBB+JAAEAGNFN\/AAABfwAAAcMUH5Dk6j++IkHQl4AYAED+tQAAAQEICp1m\/BydZvwcR0VUIC8xMjcuMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1576420276980,"flow_last_seen":1576420276980,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49940,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1576420276982,"flow_last_seen":1576420276982,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49942,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC98llAAEAGSd9\/AAABfwAAAcMWH5DjKcoLls+qsoAYAED+sQAAAQEICp1m\/B6dZvwdR0VUIC8xLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1576420276982,"flow_last_seen":1576420276982,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49942,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1576420276983,"flow_last_seen":1576420276983,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49944,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9nNlAAEAGn19\/AAABfwAAAcMYH5CM06SLK3vm\/IAYAED+sQAAAQEICp1m\/B+dZvwfR0VUIC8xLmFseiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1576420276983,"flow_last_seen":1576420276983,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49944,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1576420276985,"flow_last_seen":1576420276985,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49946,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCh5hAAEAGtJt\/AAABfwAAAcMaH5DK+b\/J7Nxpa4AYAED+tgAAAQEICp1m\/CGdZvwgR0VUIC9iYWNrdXAuemlwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1576420276985,"flow_last_seen":1576420276985,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49946,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1576420276986,"flow_last_seen":1576420276986,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49948,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC6rNAAEAGUYB\/AAABfwAAAcMcH5BJJNLw4gK1PYAYAED+tgAAAQEICp1m\/CKdZvwiR0VUIC9iYWNrdXAuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1576420276986,"flow_last_seen":1576420276986,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49948,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1576420276987,"flow_last_seen":1576420276987,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49950,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADABtBAAEAGNWZ\/AAABfwAAAcMeH5DVkj6SMBYRsYAYAED+tAAAAQEICp1m\/COdZvwjR0VUIC9zaXRlLnppcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1576420276987,"flow_last_seen":1576420276987,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49950,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1576420276989,"flow_last_seen":1576420276989,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49952,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAb4pAAEAGzKt\/AAABfwAAAcMgH5DktVfY9BOJ1YAYAED+tAAAAQEICp1m\/CWdZvwlR0VUIC9zaXRlLnppcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1576420276989,"flow_last_seen":1576420276989,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49952,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1576420276990,"flow_last_seen":1576420276990,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49954,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGkTtAAEAGqvR\/AAABfwAAAcMiH5BqAalni+2D0IAYAED+ugAAAQEICp1m\/CadZvwmR0VUIC8xMjcuMC4wLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1576420276990,"flow_last_seen":1576420276990,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49954,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1576420276992,"flow_last_seen":1576420276992,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49956,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGaPFAAEAG0z5\/AAABfwAAAcMkH5B8x1CQWvOvzIAYAED+ugAAAQEICp1m\/CidZvwoR0VUIC8xMjcuMC4wLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1576420276992,"flow_last_seen":1576420276992,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49956,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1576420276993,"flow_last_seen":1576420276993,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49958,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFOFRAAEAGA91\/AAABfwAAAcMmH5DTogAzSwYGfYAYAED+uQAAAQEICp1m\/CmdZvwpR0VUIC8xMjdfMF8wXzEudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1576420276993,"flow_last_seen":1576420276993,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49958,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1576420276995,"flow_last_seen":1576420276995,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49960,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFLPBAAEAGD0F\/AAABfwAAAcMoH5DgsBSPBaIHeIAYAED+uQAAAQEICp1m\/CudZvwrR0VUIC8xMjdfMF8wXzEudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1576420276995,"flow_last_seen":1576420276995,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49960,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1576420276996,"flow_last_seen":1576420276996,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49962,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADD0zFAAEAGaQF\/AAABfwAAAcMqH5Dy3etP7K3wrYAYAED+twAAAQEICp1m\/CydZvwsR0VUIC8xMjcuMC4wLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1576420276996,"flow_last_seen":1576420276996,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49962,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1576420276998,"flow_last_seen":1576420276998,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49964,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDYPVAAEAG2z1\/AAABfwAAAcMsH5ARV1iTIbZBJoAYAED+twAAAQEICp1m\/C2dZvwtR0VUIC8xMjcuMC4wLnNxbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1576420276998,"flow_last_seen":1576420276998,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49964,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1576420276999,"flow_last_seen":1576420276999,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49966,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420276,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADByvVAAEAGcT9\/AAABfwAAAcMuH5AHevKTkcnpoIAYAED+tQAAAQEICp1m\/C+dZvwvR0VUIC8xMjcwMC50YXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1576420276999,"flow_last_seen":1576420276999,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49966,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1576420277000,"flow_last_seen":1576420277000,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49968,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBBihAAEAGNg1\/AAABfwAAAcMwH5BEgD5FJ0MuU4AYAED+tQAAAQEICp1m\/DCdZvwwR0VUIC8xMjcwMC50YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1576420277000,"flow_last_seen":1576420277000,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49968,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1576420277001,"flow_last_seen":1576420277001,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49970,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAM9pAAEAGCFx\/AAABfwAAAcMyH5CilAu7EPfGmYAYAED+tAAAAQEICp1m\/DGdZvwxR0VUIC8xMjcwLnppcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1576420277001,"flow_last_seen":1576420277001,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49970,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1576420277002,"flow_last_seen":1576420277002,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49972,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAUGZAAEAG689\/AAABfwAAAcM0H5Crr2gHBF6lfIAYAED+tAAAAQEICp1m\/DKdZvwyR0VUIC8xMjcwLnppcCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1576420277002,"flow_last_seen":1576420277002,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49972,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1576420277004,"flow_last_seen":1576420277004,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49974,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBfrVAAEAGvX9\/AAABfwAAAcM2H5AiEUbRArZM2IAYAED+tQAAAQEICp1m\/DSdZvw0R0VUIC8xMjcuMC5hbHogSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1576420277004,"flow_last_seen":1576420277004,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49974,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1576420277006,"flow_last_seen":1576420277006,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49976,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBggJAAEAGujJ\/AAABfwAAAcM4H5AaCbpkhn3rTYAYAED+tQAAAQEICp1m\/DadZvw1R0VUIC8xMjcuMC5hbHogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1576420277006,"flow_last_seen":1576420277006,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49976,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1576420277007,"flow_last_seen":1576420277007,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49978,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC7TtAAEAGTvh\/AAABfwAAAcM6H5D6jdVeqyQPZoAYAED+tgAAAQEICp1m\/DedZvw3R0VUIC9iYWNrdXAuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1576420277007,"flow_last_seen":1576420277007,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49978,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1576420277010,"flow_last_seen":1576420277010,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49980,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADChG5AAEAGt8V\/AAABfwAAAcM8H5BcKrwJSZEDE4AYAED+tgAAAQEICp1m\/DqdZvw6R0VUIC9iYWNrdXAuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1576420277010,"flow_last_seen":1576420277010,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49980,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1576420277011,"flow_last_seen":1576420277011,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49982,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/sClAAEAGjA1\/AAABfwAAAcM+H5BuqIhDc4THFIAYAED+swAAAQEICp1m\/DudZvw7R0VUIC8xMjcuemlwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1576420277011,"flow_last_seen":1576420277011,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49982,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1576420277013,"flow_last_seen":1576420277013,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49984,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/xzVAAEAGdQF\/AAABfwAAAcNAH5BZGv9XO\/ACDYAYAED+swAAAQEICp1m\/D2dZvw9R0VUIC8xMjcuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1576420277013,"flow_last_seen":1576420277013,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49984,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1576420277014,"flow_last_seen":1576420277014,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49986,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAIeRAAEAGGlJ\/AAABfwAAAcNCH5DPShmIhuR59oAYAED+tAAAAQEICp1m\/D6dZvw+R0VUIC9zaXRlLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1576420277014,"flow_last_seen":1576420277014,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49986,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1576420277016,"flow_last_seen":1576420277016,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49988,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA415AAEAGWNd\/AAABfwAAAcNEH5AFlNs7Kigy04AYAED+tAAAAQEICp1m\/ECdZvxAR0VUIC9zaXRlLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1576420277016,"flow_last_seen":1576420277016,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49988,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1576420277017,"flow_last_seen":1576420277017,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49990,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADConZAAEAGmb1\/AAABfwAAAcNGH5DVgZoTcsiCOoAYAED+tgAAAQEICp1m\/EGdZvxBR0VUIC8xMjcwMDEud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1576420277017,"flow_last_seen":1576420277017,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49990,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1576420277019,"flow_last_seen":1576420277019,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49992,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCTHZAAEAG771\/AAABfwAAAcNIH5DfPnQTJOA0c4AYAED+tgAAAQEICp1m\/EKdZvxCR0VUIC8xMjcwMDEud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1576420277019,"flow_last_seen":1576420277019,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49992,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1576420277020,"flow_last_seen":1576420277020,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49994,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCeAVAAEAGxC5\/AAABfwAAAcNKH5DAxUBlVYOEbYAYAED+tgAAAQEICp1m\/ESdZvxER0VUIC8xMjcwMDEuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1576420277020,"flow_last_seen":1576420277020,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49994,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1576420277021,"flow_last_seen":1576420277021,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49996,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC3f5AAEAGXjV\/AAABfwAAAcNMH5AeDOWcmsl5CIAYAED+tgAAAQEICp1m\/EWdZvxFR0VUIC8xMjcwMDEuZWdnIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1576420277021,"flow_last_seen":1576420277021,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49996,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1576420277023,"flow_last_seen":1576420277023,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49998,"dst_port":8080,"l4_proto":"tcp"}
+0594{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9\/jtAAEAGPf1\/AAABfwAAAcNOH5DeVcZf0\/y26IAYAED+sQAAAQEICp1m\/EedZvxHR0VUIC8xLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1576420277023,"flow_last_seen":1576420277023,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49998,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1576420277025,"flow_last_seen":1576420277025,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50000,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9VlRAAEAG5eR\/AAABfwAAAcNQH5CjGG47rGEO3YAYAED+sQAAAQEICp1m\/EmdZvxJR0VUIC8xLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1576420277025,"flow_last_seen":1576420277025,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50000,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1576420277027,"flow_last_seen":1576420277027,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50002,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAghpAAEAGuht\/AAABfwAAAcNSH5AdH7pxZz3Y6IAYAED+tAAAAQEICp1m\/EudZvxLR0VUIC8wLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1576420277027,"flow_last_seen":1576420277027,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50002,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1576420277028,"flow_last_seen":1576420277028,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50004,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA6xtAAEAGURp\/AAABfwAAAcNUH5DAadNxZUvEiYAYAED+tAAAAQEICp1m\/EydZvxMR0VUIC8wLnRhci5neiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1576420277028,"flow_last_seen":1576420277028,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50004,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1576420277029,"flow_last_seen":1576420277029,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50006,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAF9FAAEAGJGV\/AAABfwAAAcNWH5ByeS+n3HjH64AYAED+tAAAAQEICp1m\/E2dZvxNR0VUIC8xMjcwLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1576420277029,"flow_last_seen":1576420277029,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50006,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1576420277031,"flow_last_seen":1576420277031,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50008,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADASFpAAEAG89t\/AAABfwAAAcNYH5CIKHAy4FE5l4AYAED+tAAAAQEICp1m\/E+dZvxPR0VUIC8xMjcwLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1576420277031,"flow_last_seen":1576420277031,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50008,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1576420277032,"flow_last_seen":1576420277032,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50010,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9MI5AAEAGC6t\/AAABfwAAAcNaH5DGiQjnE8I6SoAYAED+sQAAAQEICp1m\/FCdZvxQR0VUIC8wLmVnZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1576420277032,"flow_last_seen":1576420277032,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50010,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1576420277033,"flow_last_seen":1576420277033,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50012,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9R6NAAEAG9JV\/AAABfwAAAcNcH5BSP3\/MbAOkN4AYAED+sQAAAQEICp1m\/FGdZvxRR0VUIC8wLmVnZyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1576420277033,"flow_last_seen":1576420277033,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50012,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1576420277034,"flow_last_seen":1576420277034,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50014,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCi6hAAEAGsIt\/AAABfwAAAcNeH5CrCbPNtCCkdYAYAED+tgAAAQEICp1m\/FKdZvxSR0VUIC9iYWNrdXAuY2VyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1576420277034,"flow_last_seen":1576420277034,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50014,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1576420277036,"flow_last_seen":1576420277036,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50016,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCaYNAAEAG0rB\/AAABfwAAAcNgH5BETFHrIT\/7L4AYAED+tgAAAQEICp1m\/FSdZvxUR0VUIC9iYWNrdXAuY2VyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1576420277036,"flow_last_seen":1576420277036,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50016,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1576420277037,"flow_last_seen":1576420277037,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50018,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADByHVAAEAGc79\/AAABfwAAAcNiH5AsIfAZ9PZ+lIAYAED+tQAAAQEICp1m\/FWdZvxVR0VUIC8xMjcwMC5jZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1576420277037,"flow_last_seen":1576420277037,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50018,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1576420277040,"flow_last_seen":1576420277040,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50020,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBLYNAAEAGDrJ\/AAABfwAAAcNkH5B8OhXu0\/0OtIAYAED+tQAAAQEICp1m\/FidZvxXR0VUIC8xMjcwMC5jZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1576420277040,"flow_last_seen":1576420277040,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50020,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1576420277041,"flow_last_seen":1576420277041,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50022,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJ0PZAAEAGazZ\/AAABfwAAAcNmH5D3m+iZ0R8Y8oAYAED+vQAAAQEICp1m\/FmdZvxZR0VUIC8xMjdfMF8wXzEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1576420277041,"flow_last_seen":1576420277041,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50022,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1576420277042,"flow_last_seen":1576420277042,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50024,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJPvJAAEAG\/Tp\/AAABfwAAAcNoH5CMHAadHXRwyoAYAED+vQAAAQEICp1m\/FqdZvxaR0VUIC8xMjdfMF8wXzEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1576420277042,"flow_last_seen":1576420277042,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50024,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1576420277044,"flow_last_seen":1576420277044,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50026,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCjwZAAEAGrS1\/AAABfwAAAcNqH5Br7rdq4TxVq4AYAED+tgAAAQEICp1m\/FydZvxcR0VUIC8xMjcwMDEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1576420277044,"flow_last_seen":1576420277044,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50026,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1576420277045,"flow_last_seen":1576420277045,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50028,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCv9RAAEAGfF9\/AAABfwAAAcNsH5AFEofAoVDNroAYAED+tgAAAQEICp1m\/F2dZvxdR0VUIC8xMjcwMDEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1576420277045,"flow_last_seen":1576420277045,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50028,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1576420277046,"flow_last_seen":1576420277046,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50030,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBTDZAAEAG7\/5\/AAABfwAAAcNuH5C8OnRaQfn7gYAYAED+tQAAAQEICp1m\/F6dZvxeR0VUIC8wLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1576420277046,"flow_last_seen":1576420277046,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50030,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1576420277048,"flow_last_seen":1576420277048,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50032,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBa4BAAEAG0LR\/AAABfwAAAcNwH5C2s1MRi3VVO4AYAED+tQAAAQEICp1m\/GCdZvxfR0VUIC8wLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1576420277048,"flow_last_seen":1576420277048,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50032,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1576420277049,"flow_last_seen":1576420277049,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50034,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEjgBAAEAGrjF\/AAABfwAAAcNyH5D9QLWRKHRYjoAYAED+uAAAAQEICp1m\/GGdZvxhR0VUIC8xMjcuMC50YXIuZ3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1576420277049,"flow_last_seen":1576420277049,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50034,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":1576420277050,"flow_last_seen":1576420277050,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50036,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":245,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEqilAAEAGkgh\/AAABfwAAAcN0H5AfdZJKMNG2kYAYAED+uAAAAQEICp1m\/GKdZvxiR0VUIC8xMjcuMC50YXIuZ3ogSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":1576420277050,"flow_last_seen":1576420277050,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50036,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":1576420277051,"flow_last_seen":1576420277051,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50038,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":246,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFD2RAAEAGLM1\/AAABfwAAAcN2H5CQvDcOP8imdIAYAED+uQAAAQEICp1m\/GOdZvxjR0VUIC8xMjdfMF8wXzEuamtzIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":1576420277051,"flow_last_seen":1576420277051,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50038,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":1576420277054,"flow_last_seen":1576420277054,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50040,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":247,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFMyBAAEAGCRF\/AAABfwAAAcN4H5CwJQty\/UTYeoAYAED+uQAAAQEICp1m\/GadZvxmR0VUIC8xMjdfMF8wXzEuamtzIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":1576420277054,"flow_last_seen":1576420277054,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50040,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":1576420277055,"flow_last_seen":1576420277055,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50042,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":248,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBVOZAAEAG505\/AAABfwAAAcN6H5D0fGyVu01Ol4AYAED+tQAAAQEICp1m\/GedZvxnR0VUIC8xMjcuMC5lZ2cgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":1576420277055,"flow_last_seen":1576420277055,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50042,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":1576420277057,"flow_last_seen":1576420277057,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50044,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":249,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBgcdAAEAGum1\/AAABfwAAAcN8H5AHG7m2UJwwhYAYAED+tQAAAQEICp1m\/GmdZvxpR0VUIC8xMjcuMC5lZ2cgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":1576420277057,"flow_last_seen":1576420277057,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50044,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":1576420277058,"flow_last_seen":1576420277058,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50046,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":250,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB8E5AAEAGS+Z\/AAABfwAAAcN+H5BxG8g961ERj4AYAED+tQAAAQEICp1m\/GqdZvxqR0VUIC8xMjcuMC5qa3MgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":1576420277058,"flow_last_seen":1576420277058,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50046,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":251,"flow_packet_id":1,"flow_first_seen":1576420277060,"flow_last_seen":1576420277060,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50048,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":251,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB8w9AAEAGSSV\/AAABfwAAAcOAH5AJpMt9MSZkIYAYAED+tQAAAQEICp1m\/GydZvxsR0VUIC8xMjcuMC5qa3MgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":251,"flow_packet_id":1,"flow_first_seen":1576420277060,"flow_last_seen":1576420277060,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50048,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":252,"flow_packet_id":1,"flow_first_seen":1576420277061,"flow_last_seen":1576420277061,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50050,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":252,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDv8dAAEAGfGt\/AAABfwAAAcOCH5BIh4e15F5tqYAYAED+twAAAQEICp1m\/G2dZvxtR0VUIC8xMjcuMC4wLmprcyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":252,"flow_packet_id":1,"flow_first_seen":1576420277061,"flow_last_seen":1576420277061,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50050,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":253,"flow_packet_id":1,"flow_first_seen":1576420277063,"flow_last_seen":1576420277063,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50052,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":253,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDTFBAAEAG7+J\/AAABfwAAAcOEH5DLhXRAbe\/JloAYAED+twAAAQEICp1m\/G+dZvxvR0VUIC8xMjcuMC4wLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":253,"flow_packet_id":1,"flow_first_seen":1576420277063,"flow_last_seen":1576420277063,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50052,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1576420277064,"flow_last_seen":1576420277064,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50054,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":254,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCx41AAEAGdKZ\/AAABfwAAAcOGH5Ab+v\/67hwkoIAYAED+tgAAAQEICp1m\/HCdZvxwR0VUIC8xMjcwMDEuamtzIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1576420277064,"flow_last_seen":1576420277064,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50054,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":255,"flow_packet_id":1,"flow_first_seen":1576420277066,"flow_last_seen":1576420277066,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50056,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":255,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC4+FAAEAGWFJ\/AAABfwAAAcOIH5A1wtuuFoHVMYAYAED+tgAAAQEICp1m\/HGdZvxxR0VUIC8xMjcwMDEuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":255,"flow_packet_id":1,"flow_first_seen":1576420277066,"flow_last_seen":1576420277066,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50056,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":256,"flow_packet_id":1,"flow_first_seen":1576420277067,"flow_last_seen":1576420277067,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50058,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":256,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCfFhAAEAGv9t\/AAABfwAAAcOKH5CRgEQl8Paa6IAYAED+tgAAAQEICp1m\/HOdZvxzR0VUIC8wLnRhci5sem1hIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":256,"flow_packet_id":1,"flow_first_seen":1576420277067,"flow_last_seen":1576420277067,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50058,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":257,"flow_packet_id":1,"flow_first_seen":1576420277070,"flow_last_seen":1576420277070,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50060,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":257,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCXGdAAEAG38x\/AAABfwAAAcOMH5AiiWQXZDyqFoAYAED+tgAAAQEICp1m\/HadZvx1R0VUIC8wLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":257,"flow_packet_id":1,"flow_first_seen":1576420277070,"flow_last_seen":1576420277070,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50060,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1576420277072,"flow_last_seen":1576420277072,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50062,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":258,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDQNZAAEAG+1x\/AAABfwAAAcOOH5A+53ionbjt1YAYAED+twAAAQEICp1m\/HedZvx3R0VUIC8xMjcuMC4wLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1576420277072,"flow_last_seen":1576420277072,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50062,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":259,"flow_packet_id":1,"flow_first_seen":1576420277074,"flow_last_seen":1576420277074,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50064,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":259,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDdgpAAEAGxih\/AAABfwAAAcOQH5DZ8k59fiDl9oAYAED+twAAAQEICp1m\/HqdZvx6R0VUIC8xMjcuMC4wLmNlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":259,"flow_packet_id":1,"flow_first_seen":1576420277074,"flow_last_seen":1576420277074,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50064,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":260,"flow_packet_id":1,"flow_first_seen":1576420277075,"flow_last_seen":1576420277075,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50066,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":260,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9f6pAAEAGvI5\/AAABfwAAAcOSH5AexUfewusNb4AYAED+sQAAAQEICp1m\/HudZvx7R0VUIC8xLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":260,"flow_packet_id":1,"flow_first_seen":1576420277075,"flow_last_seen":1576420277075,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50066,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1576420277077,"flow_last_seen":1576420277077,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50068,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":261,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9i6BAAEAGsJh\/AAABfwAAAcOUH5B4uLPsGcILh4AYAED+sQAAAQEICp1m\/H2dZvx9R0VUIC8xLnNxbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1576420277077,"flow_last_seen":1576420277077,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50068,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1576420277078,"flow_last_seen":1576420277078,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50070,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":262,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9VOpAAEAG505\/AAABfwAAAcOWH5Crf2yePds4BoAYAED+sQAAAQEICp1m\/H6dZvx+R0VUIC8xLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1576420277078,"flow_last_seen":1576420277078,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50070,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1576420277079,"flow_last_seen":1576420277079,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50072,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":263,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9DWxAAEAGLs1\/AAABfwAAAcOYH5CSvzUdCWfTlYAYAED+sQAAAQEICp1m\/H+dZvx\/R0VUIC8xLnBlbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1576420277079,"flow_last_seen":1576420277079,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50072,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1576420277081,"flow_last_seen":1576420277081,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50074,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":264,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDZbZAAEAG1nx\/AAABfwAAAcOaH5Ap5V3Dc4s2n4AYAED+twAAAQEICp1m\/IGdZvyBR0VUIC8xMjcuMC4wLnRneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1576420277081,"flow_last_seen":1576420277081,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50074,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1576420277083,"flow_last_seen":1576420277083,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50076,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":265,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDEYFAAEAGKrJ\/AAABfwAAAcOcH5DxxikK7qXr+IAYAED+twAAAQEICp1m\/IOdZvyCR0VUIC8xMjcuMC4wLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1576420277083,"flow_last_seen":1576420277083,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50076,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1576420277084,"flow_last_seen":1576420277084,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50078,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":266,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFEhNAAEAGKh5\/AAABfwAAAcOeH5AvZipnVfZObIAYAED+uQAAAQEICp1m\/ISdZvyER0VUIC8xMjdfMF8wXzEucGVtIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1576420277084,"flow_last_seen":1576420277084,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50078,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":267,"flow_packet_id":1,"flow_first_seen":1576420277086,"flow_last_seen":1576420277086,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50080,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":267,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF4EhAAEAGW+h\/AAABfwAAAcOgH5AMu9gyVttcv4AYAED+uQAAAQEICp1m\/IadZvyGR0VUIC8xMjdfMF8wXzEucGVtIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":267,"flow_packet_id":1,"flow_first_seen":1576420277086,"flow_last_seen":1576420277086,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50080,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":268,"flow_packet_id":1,"flow_first_seen":1576420277087,"flow_last_seen":1576420277087,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50082,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":268,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFByZAAEAGNQt\/AAABfwAAAcOiH5Ca4D9dxFiRCIAYAED+uQAAAQEICp1m\/IedZvyHR0VUIC8xMjdfMF8wXzEuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":268,"flow_packet_id":1,"flow_first_seen":1576420277087,"flow_last_seen":1576420277087,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50082,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":269,"flow_packet_id":1,"flow_first_seen":1576420277089,"flow_last_seen":1576420277089,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50084,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":269,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFHRdAAEAGHxp\/AAABfwAAAcOkH5BFAiVuc2g7y4AYAED+uQAAAQEICp1m\/ImdZvyJR0VUIC8xMjdfMF8wXzEuZWdnIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":269,"flow_packet_id":1,"flow_first_seen":1576420277089,"flow_last_seen":1576420277089,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50084,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":270,"flow_packet_id":1,"flow_first_seen":1576420277090,"flow_last_seen":1576420277090,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50086,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":270,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCB4tAAEAGNKl\/AAABfwAAAcOmH5BcnD\/ywDswlIAYAED+tgAAAQEICp1m\/IqdZvyKR0VUIC9iYWNrdXAud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":270,"flow_packet_id":1,"flow_first_seen":1576420277090,"flow_last_seen":1576420277090,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50086,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":271,"flow_packet_id":1,"flow_first_seen":1576420277091,"flow_last_seen":1576420277091,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50088,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":271,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCHJtAAEAGH5l\/AAABfwAAAcOoH5BLfyTh3iqQcIAYAED+tgAAAQEICp1m\/IudZvyLR0VUIC9iYWNrdXAud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":271,"flow_packet_id":1,"flow_first_seen":1576420277091,"flow_last_seen":1576420277091,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50088,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1576420277093,"flow_last_seen":1576420277093,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50090,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":272,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCo9lAAEAGmFp\/AAABfwAAAcOqH5B0iJuvJFRwg4AYAED+tgAAAQEICp1m\/IydZvyMR0VUIC9iYWNrdXAuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1576420277093,"flow_last_seen":1576420277093,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50090,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":273,"flow_packet_id":1,"flow_first_seen":1576420277094,"flow_last_seen":1576420277094,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50092,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":273,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCBM1AAEAGN2d\/AAABfwAAAcOsH5CyHDyzBNbaOYAYAED+tgAAAQEICp1m\/I6dZvyOR0VUIC9iYWNrdXAuZWdnIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":273,"flow_packet_id":1,"flow_first_seen":1576420277094,"flow_last_seen":1576420277094,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50092,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":274,"flow_packet_id":1,"flow_first_seen":1576420277096,"flow_last_seen":1576420277096,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50094,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":274,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCcsRAAEAGyW9\/AAABfwAAAcOuH5Drmkq5YpvrhoAYAED+tgAAAQEICp1m\/JCdZvyQR0VUIC8xMjcwMDEuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":274,"flow_packet_id":1,"flow_first_seen":1576420277096,"flow_last_seen":1576420277096,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50094,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":275,"flow_packet_id":1,"flow_first_seen":1576420277098,"flow_last_seen":1576420277098,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50096,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":275,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCRRhAAEAG9xt\/AAABfwAAAcOwH5DRhn1t\/ojAOIAYAED+tgAAAQEICp1m\/JGdZvyRR0VUIC8xMjcwMDEuY2VyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":275,"flow_packet_id":1,"flow_first_seen":1576420277098,"flow_last_seen":1576420277098,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50096,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":276,"flow_packet_id":1,"flow_first_seen":1576420277100,"flow_last_seen":1576420277100,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50098,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":276,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC931JAAEAGXOZ\/AAABfwAAAcOyH5BYxOcsixzBAIAYAED+sQAAAQEICp1m\/JSdZvyUR0VUIC8wLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":276,"flow_packet_id":1,"flow_first_seen":1576420277100,"flow_last_seen":1576420277100,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50098,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1576420277106,"flow_last_seen":1576420277106,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50100,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":277,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9aFtAAEAG091\/AAABfwAAAcO0H5ATAFAmoohjQYAYAED+sQAAAQEICp1m\/JqdZvyaR0VUIC8wLmNlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1576420277106,"flow_last_seen":1576420277106,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50100,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":278,"flow_packet_id":1,"flow_first_seen":1576420277109,"flow_last_seen":1576420277109,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50102,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":278,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFvlhAAEAGfdh\/AAABfwAAAcO2H5BO24YshrKR94AYAED+uQAAAQEICp1m\/J2dZvydR0VUIC8xMjcuMC4wLjEuZWdnIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":278,"flow_packet_id":1,"flow_first_seen":1576420277109,"flow_last_seen":1576420277109,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50102,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":279,"flow_packet_id":1,"flow_first_seen":1576420277113,"flow_last_seen":1576420277113,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50104,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":279,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF+v9AAEAGQTF\/AAABfwAAAcO4H5AzScKEmziDBYAYAED+uQAAAQEICp1m\/KGdZvyhR0VUIC8xMjcuMC4wLjEuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":279,"flow_packet_id":1,"flow_first_seen":1576420277113,"flow_last_seen":1576420277113,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50104,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":280,"flow_packet_id":1,"flow_first_seen":1576420277115,"flow_last_seen":1576420277115,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50106,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":280,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAxXJAAEAGdsN\/AAABfwAAAcO6H5BPqv0Pb+YcGYAYAED+tAAAAQEICp1m\/KOdZvyjR0VUIC8xMjcwLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":280,"flow_packet_id":1,"flow_first_seen":1576420277115,"flow_last_seen":1576420277115,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50106,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":281,"flow_packet_id":1,"flow_first_seen":1576420277116,"flow_last_seen":1576420277116,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50108,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":281,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAsDlAAEAGi\/x\/AAABfwAAAcO8H5B5M4hJ8rxYu4AYAED+tAAAAQEICp1m\/KSdZvykR0VUIC8xMjcwLmVnZyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":281,"flow_packet_id":1,"flow_first_seen":1576420277116,"flow_last_seen":1576420277116,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50108,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":282,"flow_packet_id":1,"flow_first_seen":1576420277118,"flow_last_seen":1576420277118,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50110,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":282,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBWpRAAEAG4aB\/AAABfwAAAcO+H5A50mLuGW1voYAYAED+tQAAAQEICp1m\/KadZvymR0VUIC8xMjcwMC5wZW0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":282,"flow_packet_id":1,"flow_first_seen":1576420277118,"flow_last_seen":1576420277118,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50110,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":283,"flow_packet_id":1,"flow_first_seen":1576420277119,"flow_last_seen":1576420277119,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50112,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":283,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBojBAAEAGmgR\/AAABfwAAAcPAH5CoeZpSE7JOEoAYAED+tQAAAQEICp1m\/KedZvynR0VUIC8xMjcwMC5wZW0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":283,"flow_packet_id":1,"flow_first_seen":1576420277119,"flow_last_seen":1576420277119,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50112,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":284,"flow_packet_id":1,"flow_first_seen":1576420277121,"flow_last_seen":1576420277121,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50114,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":284,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB1+ZAAEAGZE5\/AAABfwAAAcPCH5Dv1e9lqA5LqYAYAED+tQAAAQEICp1m\/KidZvyoR0VUIC8xMjcwMC5zcWwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":284,"flow_packet_id":1,"flow_first_seen":1576420277121,"flow_last_seen":1576420277121,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50114,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":285,"flow_packet_id":1,"flow_first_seen":1576420277122,"flow_last_seen":1576420277122,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50116,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":285,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBr9xAAEAGjFh\/AAABfwAAAcPEH5A9f5dbU\/lctoAYAED+tQAAAQEICp1m\/KqdZvyqR0VUIC8xMjcwMC5zcWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":285,"flow_packet_id":1,"flow_first_seen":1576420277122,"flow_last_seen":1576420277122,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50116,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":286,"flow_packet_id":1,"flow_first_seen":1576420277123,"flow_last_seen":1576420277123,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50118,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":286,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAYAxAAEAG3Cl\/AAABfwAAAcPGH5DSd1iLatlmxYAYAED+tAAAAQEICp1m\/KudZvyrR0VUIC9zaXRlLmVnZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":286,"flow_packet_id":1,"flow_first_seen":1576420277123,"flow_last_seen":1576420277123,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50118,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":287,"flow_packet_id":1,"flow_first_seen":1576420277126,"flow_last_seen":1576420277126,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50120,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":287,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA98ZAAEAGRG9\/AAABfwAAAcPIH5D1l89GxMECdIAYAED+tAAAAQEICp1m\/K6dZvytR0VUIC9zaXRlLmVnZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":287,"flow_packet_id":1,"flow_first_seen":1576420277126,"flow_last_seen":1576420277126,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50120,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":288,"flow_packet_id":1,"flow_first_seen":1576420277127,"flow_last_seen":1576420277127,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50122,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":288,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBPaVAAEAG\/o9\/AAABfwAAAcPKH5CdTAUjrG8+WIAYAED+tQAAAQEICp1m\/K+dZvyvR0VUIC8xMjcuMC53YXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":288,"flow_packet_id":1,"flow_first_seen":1576420277127,"flow_last_seen":1576420277127,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50122,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1576420277128,"flow_last_seen":1576420277128,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50124,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":289,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBZB5AAEAG2BZ\/AAABfwAAAcPMH5CtKVyfkMJlVIAYAED+tQAAAQEICp1m\/LCdZvywR0VUIC8xMjcuMC53YXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1576420277128,"flow_last_seen":1576420277128,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50124,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":290,"flow_packet_id":1,"flow_first_seen":1576420277130,"flow_last_seen":1576420277130,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50126,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":290,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9JsdAAEAGFXJ\/AAABfwAAAcPOH5Ap0h5I7vzLNIAYAED+sQAAAQEICp1m\/LKdZvyyR0VUIC8xLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":290,"flow_packet_id":1,"flow_first_seen":1576420277130,"flow_last_seen":1576420277130,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50126,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":291,"flow_packet_id":1,"flow_first_seen":1576420277134,"flow_last_seen":1576420277134,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50128,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":291,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9UWBAAEAG6th\/AAABfwAAAcPQH5CgyWnegf\/5dIAYAED+sQAAAQEICp1m\/LWdZvy1R0VUIC8xLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":291,"flow_packet_id":1,"flow_first_seen":1576420277134,"flow_last_seen":1576420277134,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50128,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":292,"flow_packet_id":1,"flow_first_seen":1576420277136,"flow_last_seen":1576420277136,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50130,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":292,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFelpAAEAGwdZ\/AAABfwAAAcPSH5CODELdlJWwD4AYAED+uQAAAQEICp1m\/LedZvy3R0VUIC8xMjcuMC4wLjEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":292,"flow_packet_id":1,"flow_first_seen":1576420277136,"flow_last_seen":1576420277136,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50130,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":293,"flow_packet_id":1,"flow_first_seen":1576420277141,"flow_last_seen":1576420277141,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50132,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":293,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF+nFAAEAGQb9\/AAABfwAAAcPUH5Dn1sLrZe4ChoAYAED+uQAAAQEICp1m\/L2dZvy9R0VUIC8xMjcuMC4wLjEucGVtIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":293,"flow_packet_id":1,"flow_first_seen":1576420277141,"flow_last_seen":1576420277141,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50132,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":294,"flow_packet_id":1,"flow_first_seen":1576420277142,"flow_last_seen":1576420277142,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50134,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":294,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHb5RAAEAGzJp\/AAABfwAAAcPWH5B0BVcY3NxdJYAYAED+uwAAAQEICp1m\/L6dZvy+R0VUIC9iYWNrdXAudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":294,"flow_packet_id":1,"flow_first_seen":1576420277142,"flow_last_seen":1576420277142,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50134,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":295,"flow_packet_id":1,"flow_first_seen":1576420277144,"flow_last_seen":1576420277144,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50136,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":295,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHO5VAAEAGAJp\/AAABfwAAAcPYH5AuGgMWrL1WfYAYAED+uwAAAQEICp1m\/MCdZvzAR0VUIC9iYWNrdXAudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":295,"flow_packet_id":1,"flow_first_seen":1576420277144,"flow_last_seen":1576420277144,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50136,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":296,"flow_packet_id":1,"flow_first_seen":1576420277145,"flow_last_seen":1576420277145,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50138,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":296,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADD1QZAAEAGZyx\/AAABfwAAAcPaH5AWHu2DG+Oig4AYAED+twAAAQEICp1m\/MGdZvzBR0VUIC8xMjcuMC4wLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":296,"flow_packet_id":1,"flow_first_seen":1576420277145,"flow_last_seen":1576420277145,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50138,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":297,"flow_packet_id":1,"flow_first_seen":1576420277148,"flow_last_seen":1576420277148,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50140,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":297,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDYFdAAEAG29t\/AAABfwAAAcPcH5BE+VjTl6\/NvYAYAED+twAAAQEICp1m\/MSdZvzER0VUIC8xMjcuMC4wLnRhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":297,"flow_packet_id":1,"flow_first_seen":1576420277148,"flow_last_seen":1576420277148,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50140,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":298,"flow_packet_id":1,"flow_first_seen":1576420277153,"flow_last_seen":1576420277153,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50142,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":298,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCOn5AAEAGAbZ\/AAABfwAAAcPeH5C7hwL1asNzroAYAED+tgAAAQEICp1m\/MmdZvzJR0VUIC8xMjcwMDEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":298,"flow_packet_id":1,"flow_first_seen":1576420277153,"flow_last_seen":1576420277153,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50142,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":299,"flow_packet_id":1,"flow_first_seen":1576420277155,"flow_last_seen":1576420277155,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50144,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":299,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCDytAAEAGLQl\/AAABfwAAAcPgH5C7IzeiGEGCK4AYAED+tgAAAQEICp1m\/MudZvzLR0VUIC8xMjcwMDEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":299,"flow_packet_id":1,"flow_first_seen":1576420277155,"flow_last_seen":1576420277155,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50144,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":300,"flow_packet_id":1,"flow_first_seen":1576420277157,"flow_last_seen":1576420277157,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50146,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":300,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJ8y5AAEAGSP5\/AAABfwAAAcPiH5D9g8umqBgGFIAYAED+vQAAAQEICp1m\/M2dZvzNR0VUIC8xMjcuMC4wLjEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":300,"flow_packet_id":1,"flow_first_seen":1576420277157,"flow_last_seen":1576420277157,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50146,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":301,"flow_packet_id":1,"flow_first_seen":1576420277159,"flow_last_seen":1576420277159,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50148,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":301,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJ4mhAAEAGWcR\/AAABfwAAAcPkH5ACw9rweorXCIAYAED+vQAAAQEICp1m\/M+dZvzPR0VUIC8xMjcuMC4wLjEudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":301,"flow_packet_id":1,"flow_first_seen":1576420277159,"flow_last_seen":1576420277159,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50148,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":302,"flow_packet_id":1,"flow_first_seen":1576420277160,"flow_last_seen":1576420277160,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50150,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":302,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9m2BAAEAGoNh\/AAABfwAAAcPmH5DB5aPVANERlIAYAED+sQAAAQEICp1m\/NCdZvzQR0VUIC8xLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":302,"flow_packet_id":1,"flow_first_seen":1576420277160,"flow_last_seen":1576420277160,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50150,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":303,"flow_packet_id":1,"flow_first_seen":1576420277162,"flow_last_seen":1576420277162,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50152,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":303,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9DilAAEAGLhB\/AAABfwAAAcPoH5AB6DautSQRQ4AYAED+sQAAAQEICp1m\/NKdZvzRR0VUIC8xLnRhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":303,"flow_packet_id":1,"flow_first_seen":1576420277162,"flow_last_seen":1576420277162,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50152,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":304,"flow_packet_id":1,"flow_first_seen":1576420277164,"flow_last_seen":1576420277164,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50154,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":304,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFIABAAEAGHDF\/AAABfwAAAcPqH5Cuoid2XcqpP4AYAED+uQAAAQEICp1m\/NSdZvzTR0VUIC8xMjcwMC50YXIuYnoyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":304,"flow_packet_id":1,"flow_first_seen":1576420277164,"flow_last_seen":1576420277164,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50154,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":305,"flow_packet_id":1,"flow_first_seen":1576420277165,"flow_last_seen":1576420277165,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50156,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":305,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFxNJAAEAGd15\/AAABfwAAAcPsH5ANevxccArVDoAYAED+uQAAAQEICp1m\/NWdZvzVR0VUIC8xMjcwMC50YXIuYnoyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":305,"flow_packet_id":1,"flow_first_seen":1576420277165,"flow_last_seen":1576420277165,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50156,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":306,"flow_packet_id":1,"flow_first_seen":1576420277166,"flow_last_seen":1576420277166,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50158,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":306,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFbqBAAEAGzZB\/AAABfwAAAcPuH5Bs\/lYWJw4fzoAYAED+uQAAAQEICp1m\/NadZvzWR0VUIC8xMjcuMC4wLjEuamtzIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":306,"flow_packet_id":1,"flow_first_seen":1576420277166,"flow_last_seen":1576420277166,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50158,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":307,"flow_packet_id":1,"flow_first_seen":1576420277168,"flow_last_seen":1576420277168,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50160,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":307,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFNC9AAEAGCAJ\/AAABfwAAAcPwH5DG1AyisQj3YYAYAED+uQAAAQEICp1m\/NidZvzYR0VUIC8xMjcuMC4wLjEuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":307,"flow_packet_id":1,"flow_first_seen":1576420277168,"flow_last_seen":1576420277168,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50160,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":308,"flow_packet_id":1,"flow_first_seen":1576420277170,"flow_last_seen":1576420277170,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50162,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":308,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDKQdAAEAGEyx\/AAABfwAAAcPyH5DtUBGKsAbmZ4AYAED+twAAAQEICp1m\/NqdZvzZR0VUIC8xMjcuMC4wLndhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":308,"flow_packet_id":1,"flow_first_seen":1576420277170,"flow_last_seen":1576420277170,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50162,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":309,"flow_packet_id":1,"flow_first_seen":1576420277171,"flow_last_seen":1576420277171,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50164,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":309,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDFtRAAEAGJV9\/AAABfwAAAcP0H5DIKS5flUY6Y4AYAED+twAAAQEICp1m\/NudZvzbR0VUIC8xMjcuMC4wLndhciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":309,"flow_packet_id":1,"flow_first_seen":1576420277171,"flow_last_seen":1576420277171,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50164,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":310,"flow_packet_id":1,"flow_first_seen":1576420277172,"flow_last_seen":1576420277172,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50166,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":310,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBjc9AAEAGrmV\/AAABfwAAAcP2H5CR+bVBDfA+SoAYAED+tQAAAQEICp1m\/NydZvzcR0VUIC8xMjcuMC50Z3ogSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":310,"flow_packet_id":1,"flow_first_seen":1576420277172,"flow_last_seen":1576420277172,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50166,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":311,"flow_packet_id":1,"flow_first_seen":1576420277173,"flow_last_seen":1576420277173,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50168,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":311,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBJThAAEAGFv1\/AAABfwAAAcP4H5BkXx28+RQoaIAYAED+tQAAAQEICp1m\/N2dZvzdR0VUIC8xMjcuMC50Z3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":311,"flow_packet_id":1,"flow_first_seen":1576420277173,"flow_last_seen":1576420277173,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50168,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":312,"flow_packet_id":1,"flow_first_seen":1576420277175,"flow_last_seen":1576420277175,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50170,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":312,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/vR9AAEAGfxd\/AAABfwAAAcP6H5AAgoWRJHk9poAYAED+swAAAQEICp1m\/N+dZvzfR0VUIC8xMjcuamtzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":312,"flow_packet_id":1,"flow_first_seen":1576420277175,"flow_last_seen":1576420277175,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50170,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":313,"flow_packet_id":1,"flow_first_seen":1576420277176,"flow_last_seen":1576420277176,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50172,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":313,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/G85AAEAGIGl\/AAABfwAAAcP8H5A9SCNDeIAPvYAYAED+swAAAQEICp1m\/OCdZvzgR0VUIC8xMjcuamtzIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":313,"flow_packet_id":1,"flow_first_seen":1576420277176,"flow_last_seen":1576420277176,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50172,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":314,"flow_packet_id":1,"flow_first_seen":1576420277177,"flow_last_seen":1576420277177,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50174,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":314,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAz0lAAEAGbOx\/AAABfwAAAcP+H5CCs\/fKIUNf1IAYAED+tAAAAQEICp1m\/OGdZvzhR0VUIC9zaXRlLmFseiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":314,"flow_packet_id":1,"flow_first_seen":1576420277177,"flow_last_seen":1576420277177,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50174,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":315,"flow_packet_id":1,"flow_first_seen":1576420277179,"flow_last_seen":1576420277179,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50176,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":315,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAZxxAAEAG1Rl\/AAABfwAAAcQAH5BgPl+VSob0sYAYAED+tAAAAQEICp1m\/OOdZvzjR0VUIC9zaXRlLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":315,"flow_packet_id":1,"flow_first_seen":1576420277179,"flow_last_seen":1576420277179,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50176,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":316,"flow_packet_id":1,"flow_first_seen":1576420277180,"flow_last_seen":1576420277180,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50178,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":316,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGTHlAAEAG77Z\/AAABfwAAAcQCH5A4KXT5upP6C4AYAED+ugAAAQEICp1m\/OSdZvzkR0VUIC8xMjcuMC50YXIubHptYSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":316,"flow_packet_id":1,"flow_first_seen":1576420277180,"flow_last_seen":1576420277180,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50178,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":317,"flow_packet_id":1,"flow_first_seen":1576420277183,"flow_last_seen":1576420277183,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50180,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":317,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGDUpAAEAGLuZ\/AAABfwAAAcQEH5BEmzXIVOhE3IAYAED+ugAAAQEICp1m\/OadZvzmR0VUIC8xMjcuMC50YXIubHptYSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":317,"flow_packet_id":1,"flow_first_seen":1576420277183,"flow_last_seen":1576420277183,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50180,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":318,"flow_packet_id":1,"flow_first_seen":1576420277184,"flow_last_seen":1576420277184,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50182,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":318,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAdAhAAEAGyC1\/AAABfwAAAcQGH5BYeUyXBV+uwoAYAED+tAAAAQEICp1m\/OidZvzoR0VUIC9zaXRlLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":318,"flow_packet_id":1,"flow_first_seen":1576420277184,"flow_last_seen":1576420277184,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50182,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":319,"flow_packet_id":1,"flow_first_seen":1576420277185,"flow_last_seen":1576420277185,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50184,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":319,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADACsVAAEAGMXF\/AAABfwAAAcQIH5AHdTJUhgOj64AYAED+tAAAAQEICp1m\/OmdZvzpR0VUIC9zaXRlLnRneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":319,"flow_packet_id":1,"flow_first_seen":1576420277185,"flow_last_seen":1576420277185,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50184,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":320,"flow_packet_id":1,"flow_first_seen":1576420277186,"flow_last_seen":1576420277186,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50186,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":320,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEtSBAAEAGhxF\/AAABfwAAAcQKH5BCRY2PbjuWH4AYAED+uAAAAQEICp1m\/OqdZvzqR0VUIC8xMjcudGFyLmx6bWEgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":320,"flow_packet_id":1,"flow_first_seen":1576420277186,"flow_last_seen":1576420277186,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50186,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":321,"flow_packet_id":1,"flow_first_seen":1576420277187,"flow_last_seen":1576420277187,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50188,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":321,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEwZ1AAEAGepR\/AAABfwAAAcQMH5B2JfkLbDSLWoAYAED+uAAAAQEICp1m\/OudZvzrR0VUIC8xMjcudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":321,"flow_packet_id":1,"flow_first_seen":1576420277187,"flow_last_seen":1576420277187,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50188,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":322,"flow_packet_id":1,"flow_first_seen":1576420277189,"flow_last_seen":1576420277189,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50190,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":322,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAxaRAAEAGdpF\/AAABfwAAAcQOH5BgW\/00es\/TMYAYAED+tAAAAQEICp1m\/O2dZvztR0VUIC8xMjcwLmFseiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":322,"flow_packet_id":1,"flow_first_seen":1576420277189,"flow_last_seen":1576420277189,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50190,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":323,"flow_packet_id":1,"flow_first_seen":1576420277190,"flow_last_seen":1576420277190,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50192,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":323,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADACFhAAEAGM95\/AAABfwAAAcQQH5AQPjDI+venWYAYAED+tAAAAQEICp1m\/O6dZvzuR0VUIC8xMjcwLmFseiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":323,"flow_packet_id":1,"flow_first_seen":1576420277190,"flow_last_seen":1576420277190,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50192,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":324,"flow_packet_id":1,"flow_first_seen":1576420277193,"flow_last_seen":1576420277193,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50194,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":324,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9hYJAAEAGtrZ\/AAABfwAAAcQSH5Cznr0TB99xxoAYAED+sQAAAQEICp1m\/PGdZvzwR0VUIC8wLmprcyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":324,"flow_packet_id":1,"flow_first_seen":1576420277193,"flow_last_seen":1576420277193,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50194,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":325,"flow_packet_id":1,"flow_first_seen":1576420277194,"flow_last_seen":1576420277194,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50196,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":325,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9JiRAAEAGFhV\/AAABfwAAAcQUH5CXxR6x507sMoAYAED+sQAAAQEICp1m\/PKdZvzyR0VUIC8wLmprcyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":325,"flow_packet_id":1,"flow_first_seen":1576420277194,"flow_last_seen":1576420277194,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50196,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":326,"flow_packet_id":1,"flow_first_seen":1576420277196,"flow_last_seen":1576420277196,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50198,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":326,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADASbJAAEAG8oN\/AAABfwAAAcQWH5DgxXEkcLyXoIAYAED+tAAAAQEICp1m\/PSdZvz0R0VUIC8xMjcwLnRneiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":326,"flow_packet_id":1,"flow_first_seen":1576420277196,"flow_last_seen":1576420277196,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50198,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":327,"flow_packet_id":1,"flow_first_seen":1576420277198,"flow_last_seen":1576420277198,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50200,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":327,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAjLtAAEAGr3p\/AAABfwAAAcQYH5DOSLQrVcLjaIAYAED+tAAAAQEICp1m\/PadZvz2R0VUIC8xMjcwLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":327,"flow_packet_id":1,"flow_first_seen":1576420277198,"flow_last_seen":1576420277198,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50200,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":328,"flow_packet_id":1,"flow_first_seen":1576420277200,"flow_last_seen":1576420277200,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50202,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":328,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFaNRAAEAG01x\/AAABfwAAAcQaH5BzoVBHI7Wyn4AYAED+uQAAAQEICp1m\/PidZvz4R0VUIC8xMjcuMC4wLjEudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":328,"flow_packet_id":1,"flow_first_seen":1576420277200,"flow_last_seen":1576420277200,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50202,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":329,"flow_packet_id":1,"flow_first_seen":1576420277201,"flow_last_seen":1576420277201,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50204,"dst_port":8080,"l4_proto":"tcp"}
+0607{"flow_id":329,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFz59AAEAGbJF\/AAABfwAAAcQcH5D4h\/cKGx\/I\/4AYAED+uQAAAQEICp1m\/PmdZvz5R0VUIC8xMjcuMC4wLjEudGd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":329,"flow_packet_id":1,"flow_first_seen":1576420277201,"flow_last_seen":1576420277201,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50204,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":330,"flow_packet_id":1,"flow_first_seen":1576420277203,"flow_last_seen":1576420277203,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50206,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":330,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBfg5AAEAGviZ\/AAABfwAAAcQeH5A6WEaZ3wpBiYAYAED+tQAAAQEICp1m\/PudZvz7R0VUIC8xMjcwMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":330,"flow_packet_id":1,"flow_first_seen":1576420277203,"flow_last_seen":1576420277203,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50206,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":331,"flow_packet_id":1,"flow_first_seen":1576420277204,"flow_last_seen":1576420277204,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50208,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":331,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBsIBAAEAGi7R\/AAABfwAAAcQgH5BX0ojsod\/7v4AYAED+tQAAAQEICp1m\/PydZvz8R0VUIC8xMjcwMC56aXAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":331,"flow_packet_id":1,"flow_first_seen":1576420277204,"flow_last_seen":1576420277204,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50208,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":332,"flow_packet_id":1,"flow_first_seen":1576420277206,"flow_last_seen":1576420277206,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50210,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":332,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEp6FAAEAGlJB\/AAABfwAAAcQiH5DXnp8L7+WKyYAYAED+uAAAAQEICp1m\/P6dZvz+R0VUIC8xMjcwLnRhci5iejIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":332,"flow_packet_id":1,"flow_first_seen":1576420277206,"flow_last_seen":1576420277206,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50210,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":333,"flow_packet_id":1,"flow_first_seen":1576420277207,"flow_last_seen":1576420277207,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50212,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":333,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADELblAAEAGDnl\/AAABfwAAAcQkH5A1yBUjW63h5IAYAED+uAAAAQEICp1m\/P+dZvz\/R0VUIC8xMjcwLnRhci5iejIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":333,"flow_packet_id":1,"flow_first_seen":1576420277207,"flow_last_seen":1576420277207,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50212,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":334,"flow_packet_id":1,"flow_first_seen":1576420277209,"flow_last_seen":1576420277209,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50214,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":334,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDSgRAAEAG8i5\/AAABfwAAAcQmH5DZEXKVufuNq4AYAED+twAAAQEICp1m\/QCdZv0AR0VUIC8xMjcuMC4wLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":334,"flow_packet_id":1,"flow_first_seen":1576420277209,"flow_last_seen":1576420277209,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50214,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":335,"flow_packet_id":1,"flow_first_seen":1576420277210,"flow_last_seen":1576420277210,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50216,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":335,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDtt9AAEAGhVN\/AAABfwAAAcQoH5DVr45M6gY7v4AYAED+twAAAQEICp1m\/QKdZv0CR0VUIC8xMjcuMC4wLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":335,"flow_packet_id":1,"flow_first_seen":1576420277210,"flow_last_seen":1576420277210,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50216,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":336,"flow_packet_id":1,"flow_first_seen":1576420277211,"flow_last_seen":1576420277211,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50218,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":336,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9XspAAEAG3W5\/AAABfwAAAcQqH5Bdf2ZfE+bMgYAYAED+sQAAAQEICp1m\/QOdZv0DR0VUIC8wLnRneiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":336,"flow_packet_id":1,"flow_first_seen":1576420277211,"flow_last_seen":1576420277211,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50218,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":337,"flow_packet_id":1,"flow_first_seen":1576420277213,"flow_last_seen":1576420277213,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50220,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":337,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9v\/9AAEAGfDl\/AAABfwAAAcQsH5CYPYdrmayyCIAYAED+sQAAAQEICp1m\/QWdZv0FR0VUIC8wLnRneiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":337,"flow_packet_id":1,"flow_first_seen":1576420277213,"flow_last_seen":1576420277213,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50220,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":338,"flow_packet_id":1,"flow_first_seen":1576420277215,"flow_last_seen":1576420277215,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50222,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":338,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCrDVAAEAGj\/5\/AAABfwAAAcQuH5DnZJSlMCY5doAYAED+tgAAAQEICp1m\/QedZv0GR0VUIC9iYWNrdXAuYWx6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":338,"flow_packet_id":1,"flow_first_seen":1576420277215,"flow_last_seen":1576420277215,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50222,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":339,"flow_packet_id":1,"flow_first_seen":1576420277216,"flow_last_seen":1576420277216,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50224,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":339,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC6alAAEAGUop\/AAABfwAAAcQwH5AB5dFAi0ifwYAYAED+tgAAAQEICp1m\/QidZv0IR0VUIC9iYWNrdXAuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":339,"flow_packet_id":1,"flow_first_seen":1576420277216,"flow_last_seen":1576420277216,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50224,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":340,"flow_packet_id":1,"flow_first_seen":1576420277217,"flow_last_seen":1576420277217,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50226,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":340,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHXwtAAEAG3SN\/AAABfwAAAcQyH5CeyGeSqwnqXYAYAED+uwAAAQEICp1m\/QmdZv0JR0VUIC8xMjcwMDEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":340,"flow_packet_id":1,"flow_first_seen":1576420277217,"flow_last_seen":1576420277217,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50226,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":341,"flow_packet_id":1,"flow_first_seen":1576420277218,"flow_last_seen":1576420277218,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50228,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":341,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHKPlAAEAGEzZ\/AAABfwAAAcQ0H5BMBRBwjCFtgIAYAED+uwAAAQEICp1m\/QqdZv0KR0VUIC8xMjcwMDEudGFyLmx6bWEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":341,"flow_packet_id":1,"flow_first_seen":1576420277218,"flow_last_seen":1576420277218,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50228,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":342,"flow_packet_id":1,"flow_first_seen":1576420277219,"flow_last_seen":1576420277219,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50230,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":342,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADE4jtAAEAGWfZ\/AAABfwAAAcQ2H5DSrNqhX1PVN4AYAED+uAAAAQEICp1m\/QudZv0LR0VUIC9zaXRlLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":342,"flow_packet_id":1,"flow_first_seen":1576420277219,"flow_last_seen":1576420277219,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50230,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":343,"flow_packet_id":1,"flow_first_seen":1576420277221,"flow_last_seen":1576420277221,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50232,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":343,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEaVlAAEAG0th\/AAABfwAAAcQ4H5ChqlHP+pxqwIAYAED+uAAAAQEICp1m\/Q2dZv0NR0VUIC9zaXRlLnRhci5iejIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":343,"flow_packet_id":1,"flow_first_seen":1576420277221,"flow_last_seen":1576420277221,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50232,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":344,"flow_packet_id":1,"flow_first_seen":1576420277222,"flow_last_seen":1576420277222,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50234,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":344,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCu\/NAAEAGgEB\/AAABfwAAAcQ6H5D46YNpMAqH8IAYAED+tgAAAQEICp1m\/Q6dZv0OR0VUIC9iYWNrdXAudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":344,"flow_packet_id":1,"flow_first_seen":1576420277222,"flow_last_seen":1576420277222,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50234,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":345,"flow_packet_id":1,"flow_first_seen":1576420277224,"flow_last_seen":1576420277224,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50236,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":345,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCyzFAAEAGcQJ\/AAABfwAAAcQ8H5A0R\/O25IFzRIAYAED+tgAAAQEICp1m\/RCdZv0PR0VUIC9iYWNrdXAudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":345,"flow_packet_id":1,"flow_first_seen":1576420277224,"flow_last_seen":1576420277224,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50236,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":346,"flow_packet_id":1,"flow_first_seen":1576420277225,"flow_last_seen":1576420277225,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50238,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":346,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC90OxAAEAGa0x\/AAABfwAAAcQ+H5C1k+hxPtlM+IAYAED+sQAAAQEICp1m\/RGdZv0RR0VUIC8wLmFseiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":346,"flow_packet_id":1,"flow_first_seen":1576420277225,"flow_last_seen":1576420277225,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50238,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":347,"flow_packet_id":1,"flow_first_seen":1576420277228,"flow_last_seen":1576420277228,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50240,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":347,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9wfFAAEAGekd\/AAABfwAAAcRAH5ChSfl1EHb5\/IAYAED+sQAAAQEICp1m\/RSdZv0UR0VUIC8wLmFseiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":347,"flow_packet_id":1,"flow_first_seen":1576420277228,"flow_last_seen":1576420277228,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50240,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":348,"flow_packet_id":1,"flow_first_seen":1576420277229,"flow_last_seen":1576420277229,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50242,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":348,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB75lAAEAGTJt\/AAABfwAAAcRCH5BYYNcNJ8u6iIAYAED+tQAAAQEICp1m\/RWdZv0VR0VUIC8xMjcwMC5hbHogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":348,"flow_packet_id":1,"flow_first_seen":1576420277229,"flow_last_seen":1576420277229,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50242,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":349,"flow_packet_id":1,"flow_first_seen":1576420277231,"flow_last_seen":1576420277231,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50244,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":349,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB77xAAEAGTHh\/AAABfwAAAcREH5CTV9cik40gf4AYAED+tQAAAQEICp1m\/RedZv0WR0VUIC8xMjcwMC5hbHogSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":349,"flow_packet_id":1,"flow_first_seen":1576420277231,"flow_last_seen":1576420277231,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50244,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":350,"flow_packet_id":1,"flow_first_seen":1576420277232,"flow_last_seen":1576420277232,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50246,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":350,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB9\/xAAEAGRDh\/AAABfwAAAcRGH5CWhs9n6ph7xIAYAED+tQAAAQEICp1m\/RidZv0YR0VUIC8xMjcuMC50YXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":350,"flow_packet_id":1,"flow_first_seen":1576420277232,"flow_last_seen":1576420277232,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50246,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":351,"flow_packet_id":1,"flow_first_seen":1576420277233,"flow_last_seen":1576420277233,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50248,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":351,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB+aZAAEAGQo5\/AAABfwAAAcRIH5BuH8E5NSGMTIAYAED+tQAAAQEICp1m\/RmdZv0ZR0VUIC8xMjcuMC50YXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":351,"flow_packet_id":1,"flow_first_seen":1576420277233,"flow_last_seen":1576420277233,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50248,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":352,"flow_packet_id":1,"flow_first_seen":1576420277235,"flow_last_seen":1576420277235,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50250,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":352,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF6elAAEAGUkd\/AAABfwAAAcRKH5Ao6tF83Ul6FYAYAED+uQAAAQEICp1m\/RudZv0aR0VUIC9iYWNrdXAudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":352,"flow_packet_id":1,"flow_first_seen":1576420277235,"flow_last_seen":1576420277235,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50250,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":353,"flow_packet_id":1,"flow_first_seen":1576420277236,"flow_last_seen":1576420277236,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50252,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":353,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFYRdAAEAG2xl\/AAABfwAAAcRMH5CsR1mJC42rtYAYAED+uQAAAQEICp1m\/RydZv0cR0VUIC9iYWNrdXAudGFyLmd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":353,"flow_packet_id":1,"flow_first_seen":1576420277236,"flow_last_seen":1576420277236,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50252,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":354,"flow_packet_id":1,"flow_first_seen":1576420277237,"flow_last_seen":1576420277237,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50254,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":354,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/lsZAAEAGpXB\/AAABfwAAAcROH5CjIq5axoK2IoAYAED+swAAAQEICp1m\/R2dZv0dR0VUIC8xMjcuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":354,"flow_packet_id":1,"flow_first_seen":1576420277237,"flow_last_seen":1576420277237,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50254,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":355,"flow_packet_id":1,"flow_first_seen":1576420277239,"flow_last_seen":1576420277239,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50256,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":355,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/HMpAAEAGH21\/AAABfwAAAcRQH5BQEyRWh8Tqd4AYAED+swAAAQEICp1m\/R+dZv0eR0VUIC8xMjcuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":355,"flow_packet_id":1,"flow_first_seen":1576420277239,"flow_last_seen":1576420277239,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50256,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":356,"flow_packet_id":1,"flow_first_seen":1576420277240,"flow_last_seen":1576420277240,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50258,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":356,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGqKRAAEAGk4t\/AAABfwAAAcRSH5A2yZA9R5wqAoAYAED+ugAAAQEICp1m\/SCdZv0gR0VUIC9iYWNrdXAudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":356,"flow_packet_id":1,"flow_first_seen":1576420277240,"flow_last_seen":1576420277240,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50258,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":357,"flow_packet_id":1,"flow_first_seen":1576420277242,"flow_last_seen":1576420277242,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50260,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":357,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGoOxAAEAGm0N\/AAABfwAAAcRUH5C09Jh1W5zr34AYAED+ugAAAQEICp1m\/SKdZv0iR0VUIC9iYWNrdXAudGFyLmJ6MiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":357,"flow_packet_id":1,"flow_first_seen":1576420277242,"flow_last_seen":1576420277242,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50260,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":358,"flow_packet_id":1,"flow_first_seen":1576420277243,"flow_last_seen":1576420277243,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50262,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":358,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIi9VAAEAGsFh\/AAABfwAAAcRWH5DRYLNOcO51UIAYAED+vAAAAQEICp1m\/SOdZv0jR0VUIC8xMjcuMC4wLjEudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":358,"flow_packet_id":1,"flow_first_seen":1576420277243,"flow_last_seen":1576420277243,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50262,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":359,"flow_packet_id":1,"flow_first_seen":1576420277244,"flow_last_seen":1576420277244,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50264,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":359,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIKHJAAEAGE7x\/AAABfwAAAcRYH5BlBxDwgejT24AYAED+vAAAAQEICp1m\/SSdZv0kR0VUIC8xMjcuMC4wLjEudGFyLmd6IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":359,"flow_packet_id":1,"flow_first_seen":1576420277244,"flow_last_seen":1576420277244,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50264,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":360,"flow_packet_id":1,"flow_first_seen":1576420277246,"flow_last_seen":1576420277246,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50266,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":360,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF\/A9AAEAGQCF\/AAABfwAAAcRaH5B2IcSTgB9qe4AYAED+uQAAAQEICp1m\/SWdZv0lR0VUIC8xMjdfMF8wXzEud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":360,"flow_packet_id":1,"flow_first_seen":1576420277246,"flow_last_seen":1576420277246,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50266,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":361,"flow_packet_id":1,"flow_first_seen":1576420277247,"flow_last_seen":1576420277247,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50268,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":361,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFi69AAEAGsIF\/AAABfwAAAcRcH5D\/WbMzZ3h33IAYAED+uQAAAQEICp1m\/SedZv0nR0VUIC8xMjdfMF8wXzEud2FyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":361,"flow_packet_id":1,"flow_first_seen":1576420277247,"flow_last_seen":1576420277247,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50268,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":362,"flow_packet_id":1,"flow_first_seen":1576420277248,"flow_last_seen":1576420277248,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50270,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":362,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDpjtAAEAGlfd\/AAABfwAAAcReH5CBd56aTxXXOIAYAED+twAAAQEICp1m\/SidZv0oR0VUIC8xMjcuMC4wLnppcCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":362,"flow_packet_id":1,"flow_first_seen":1576420277248,"flow_last_seen":1576420277248,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50270,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":363,"flow_packet_id":1,"flow_first_seen":1576420277249,"flow_last_seen":1576420277249,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50272,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":363,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDeldAAEAGwdt\/AAABfwAAAcRgH5A4o0L2zMH\/yIAYAED+twAAAQEICp1m\/SmdZv0pR0VUIC8xMjcuMC4wLnppcCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":363,"flow_packet_id":1,"flow_first_seen":1576420277249,"flow_last_seen":1576420277249,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50272,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":364,"flow_packet_id":1,"flow_first_seen":1576420277252,"flow_last_seen":1576420277252,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50274,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":364,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCJxNAAEAGFSF\/AAABfwAAAcRiH5BR2x+x8C2V44AYAED+tgAAAQEICp1m\/SydZv0rR0VUIC8xMjcudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":364,"flow_packet_id":1,"flow_first_seen":1576420277252,"flow_last_seen":1576420277252,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50274,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":365,"flow_packet_id":1,"flow_first_seen":1576420277253,"flow_last_seen":1576420277253,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50276,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":365,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADClhFAAEAGpiJ\/AAABfwAAAcRkH5B3iK6vsi1CtIAYAED+tgAAAQEICp1m\/S2dZv0tR0VUIC8xMjcudGFyLmd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":365,"flow_packet_id":1,"flow_first_seen":1576420277253,"flow_last_seen":1576420277253,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50276,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":366,"flow_packet_id":1,"flow_first_seen":1576420277255,"flow_last_seen":1576420277255,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50278,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":366,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/zTlAAEAGbv1\/AAABfwAAAcRmH5BLoPWWHSfpPoAYAED+swAAAQEICp1m\/S+dZv0vR0VUIC8xMjcuZWdnIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":366,"flow_packet_id":1,"flow_first_seen":1576420277255,"flow_last_seen":1576420277255,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50278,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":367,"flow_packet_id":1,"flow_first_seen":1576420277258,"flow_last_seen":1576420277258,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50280,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":367,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/W9xAAEAG4Fp\/AAABfwAAAcRoH5D01mN5gVzP14AYAED+swAAAQEICp1m\/TKdZv0yR0VUIC8xMjcuZWdnIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":367,"flow_packet_id":1,"flow_first_seen":1576420277258,"flow_last_seen":1576420277258,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50280,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":368,"flow_packet_id":1,"flow_first_seen":1576420277260,"flow_last_seen":1576420277260,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50282,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":368,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF4tJAAEAGWV5\/AAABfwAAAcRqH5C3Btp0g+NrSIAYAED+uQAAAQEICp1m\/TSdZv00R0VUIC8xMjdfMF8wXzEuemlwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":368,"flow_packet_id":1,"flow_first_seen":1576420277260,"flow_last_seen":1576420277260,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50282,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":369,"flow_packet_id":1,"flow_first_seen":1576420277261,"flow_last_seen":1576420277261,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50284,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":369,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFGk1AAEAGIeR\/AAABfwAAAcRsH5AZ8SLp80IPEIAYAED+uQAAAQEICp1m\/TWdZv01R0VUIC8xMjdfMF8wXzEuemlwIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":369,"flow_packet_id":1,"flow_first_seen":1576420277261,"flow_last_seen":1576420277261,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50284,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.zip","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":370,"flow_packet_id":1,"flow_first_seen":1576420277263,"flow_last_seen":1576420277263,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50286,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":370,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/qndAAEAGkb9\/AAABfwAAAcRuH5AQK5LXaKY1oYAYAED+swAAAQEICp1m\/TadZv02R0VUIC8xMjcuc3FsIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":370,"flow_packet_id":1,"flow_first_seen":1576420277263,"flow_last_seen":1576420277263,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50286,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":371,"flow_packet_id":1,"flow_first_seen":1576420277264,"flow_last_seen":1576420277264,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50288,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":371,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/DxVAAEAGLSJ\/AAABfwAAAcRwH5D+vze4KlHK9oAYAED+swAAAQEICp1m\/TidZv04R0VUIC8xMjcuc3FsIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":371,"flow_packet_id":1,"flow_first_seen":1576420277264,"flow_last_seen":1576420277264,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50288,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":372,"flow_packet_id":1,"flow_first_seen":1576420277266,"flow_last_seen":1576420277266,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50290,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":372,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKoqhAAEAGmYN\/AAABfwAAAcRyH5D4dpoDoX2CwIAYAED+vgAAAQEICp1m\/TqdZv06R0VUIC8xMjdfMF8wXzEudGFyLmx6bWEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":372,"flow_packet_id":1,"flow_first_seen":1576420277266,"flow_last_seen":1576420277266,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50290,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":373,"flow_packet_id":1,"flow_first_seen":1576420277268,"flow_last_seen":1576420277268,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50292,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":373,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKWilAAEAG4gJ\/AAABfwAAAcR0H5DTe2KDABhOQYAYAED+vgAAAQEICp1m\/TydZv08R0VUIC8xMjdfMF8wXzEudGFyLmx6bWEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":373,"flow_packet_id":1,"flow_first_seen":1576420277268,"flow_last_seen":1576420277268,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50292,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":374,"flow_packet_id":1,"flow_first_seen":1576420277269,"flow_last_seen":1576420277269,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50294,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":374,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/XglAAEAG3i1\/AAABfwAAAcR2H5D4uGaj1sX5qYAYAED+swAAAQEICp1m\/T2dZv09R0VUIC8xMjcuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":374,"flow_packet_id":1,"flow_first_seen":1576420277269,"flow_last_seen":1576420277269,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50294,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":375,"flow_packet_id":1,"flow_first_seen":1576420277270,"flow_last_seen":1576420277270,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50296,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":375,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/A5hAAEAGOJ9\/AAABfwAAAcR4H5CBQjs0aZw5xIAYAED+swAAAQEICp1m\/T6dZv0+R0VUIC8xMjcuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":375,"flow_packet_id":1,"flow_first_seen":1576420277270,"flow_last_seen":1576420277270,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50296,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":376,"flow_packet_id":1,"flow_first_seen":1576420277272,"flow_last_seen":1576420277272,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50298,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":376,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA729AAEAGTMZ\/AAABfwAAAcR6H5Cm4tfMZrHSAYAYAED+tAAAAQEICp1m\/UCdZv1AR0VUIC8xLnRhci5neiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":376,"flow_packet_id":1,"flow_first_seen":1576420277272,"flow_last_seen":1576420277272,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50298,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":377,"flow_packet_id":1,"flow_first_seen":1576420277274,"flow_last_seen":1576420277274,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50300,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":377,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAlOZAAEAGp09\/AAABfwAAAcR8H5CKg6xDWKPSxIAYAED+tAAAAQEICp1m\/UKdZv1CR0VUIC8xLnRhci5neiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":377,"flow_packet_id":1,"flow_first_seen":1576420277274,"flow_last_seen":1576420277274,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50300,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":378,"flow_packet_id":1,"flow_first_seen":1576420277276,"flow_last_seen":1576420277276,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50302,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":378,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9in1AAEAGsbt\/AAABfwAAAcR+H5AyA7LdjyrNp4AYAED+sQAAAQEICp1m\/USdZv1DR0VUIC8wLndhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":378,"flow_packet_id":1,"flow_first_seen":1576420277276,"flow_last_seen":1576420277276,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50302,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":379,"flow_packet_id":1,"flow_first_seen":1576420277277,"flow_last_seen":1576420277277,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50304,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":379,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC906lAAEAGaI9\/AAABfwAAAcSAH5AxZOsBFr\/0GYAYAED+sQAAAQEICp1m\/UWdZv1FR0VUIC8wLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":379,"flow_packet_id":1,"flow_first_seen":1576420277277,"flow_last_seen":1576420277277,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50304,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":380,"flow_packet_id":1,"flow_first_seen":1576420277278,"flow_last_seen":1576420277278,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50306,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":380,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCR05AAEAG9OV\/AAABfwAAAcSCH5Cv93\/sjlpOBIAYAED+tgAAAQEICp1m\/UadZv1GR0VUIC9iYWNrdXAudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":380,"flow_packet_id":1,"flow_first_seen":1576420277278,"flow_last_seen":1576420277278,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50306,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":381,"flow_packet_id":1,"flow_first_seen":1576420277279,"flow_last_seen":1576420277279,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50308,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":381,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCyNdAAEAGc1x\/AAABfwAAAcSEH5CsG\/B+ct073oAYAED+tgAAAQEICp1m\/UedZv1HR0VUIC9iYWNrdXAudGFyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":381,"flow_packet_id":1,"flow_first_seen":1576420277279,"flow_last_seen":1576420277279,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50308,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/backup.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":382,"flow_packet_id":1,"flow_first_seen":1576420277281,"flow_last_seen":1576420277281,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50310,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":382,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFYHdAAEAG27l\/AAABfwAAAcSGH5C8uFjeIpIdX4AYAED+uQAAAQEICp1m\/UidZv1IR0VUIC8xMjcuMC4wLjEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":382,"flow_packet_id":1,"flow_first_seen":1576420277281,"flow_last_seen":1576420277281,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50310,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":383,"flow_packet_id":1,"flow_first_seen":1576420277282,"flow_last_seen":1576420277282,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50312,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":383,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFoI1AAEAGm6N\/AAABfwAAAcSIH5D0M5gk0yESEIAYAED+uQAAAQEICp1m\/UqdZv1KR0VUIC8xMjcuMC4wLjEuc3FsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":383,"flow_packet_id":1,"flow_first_seen":1576420277282,"flow_last_seen":1576420277282,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50312,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.1.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":384,"flow_packet_id":1,"flow_first_seen":1576420277283,"flow_last_seen":1576420277283,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50314,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":384,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDBOlAAEAGN0p\/AAABfwAAAcSKH5Dv6jxQN18efIAYAED+twAAAQEICp1m\/UudZv1LR0VUIC8xMjcuMC4wLmVnZyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":384,"flow_packet_id":1,"flow_first_seen":1576420277283,"flow_last_seen":1576420277283,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50314,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":385,"flow_packet_id":1,"flow_first_seen":1576420277284,"flow_last_seen":1576420277284,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50316,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":385,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDCzNAAEAGMQB\/AAABfwAAAcSMH5CEzzOZEWOd+IAYAED+twAAAQEICp1m\/UydZv1MR0VUIC8xMjcuMC4wLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":385,"flow_packet_id":1,"flow_first_seen":1576420277284,"flow_last_seen":1576420277284,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50316,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":386,"flow_packet_id":1,"flow_first_seen":1576420277286,"flow_last_seen":1576420277286,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50318,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":386,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9CzBAAEAGMQl\/AAABfwAAAcSOH5AKIDOIyoTTQIAYAED+sQAAAQEICp1m\/U2dZv1NR0VUIC8xLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":386,"flow_packet_id":1,"flow_first_seen":1576420277286,"flow_last_seen":1576420277286,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50318,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":387,"flow_packet_id":1,"flow_first_seen":1576420277288,"flow_last_seen":1576420277288,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50320,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":387,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9JlVAAEAGFeR\/AAABfwAAAcSQH5Clfx76D\/AiGIAYAED+sQAAAQEICp1m\/VCdZv1QR0VUIC8xLmVnZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":387,"flow_packet_id":1,"flow_first_seen":1576420277288,"flow_last_seen":1576420277288,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50320,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":388,"flow_packet_id":1,"flow_first_seen":1576420277291,"flow_last_seen":1576420277291,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50322,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":388,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCVkJAAEAG5fF\/AAABfwAAAcSSH5BxEW7rgO+zGYAYAED+tgAAAQEICp1m\/VOdZv1SR0VUIC8xMjcwMDEudGd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":388,"flow_packet_id":1,"flow_first_seen":1576420277291,"flow_last_seen":1576420277291,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50322,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":389,"flow_packet_id":1,"flow_first_seen":1576420277292,"flow_last_seen":1576420277292,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50324,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":389,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC9VNAAEAGRuB\/AAABfwAAAcSUH5A3Js37LMn8joAYAED+tgAAAQEICp1m\/VSdZv1UR0VUIC8xMjcwMDEudGd6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":389,"flow_packet_id":1,"flow_first_seen":1576420277292,"flow_last_seen":1576420277292,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50324,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tgz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":390,"flow_packet_id":1,"flow_first_seen":1576420277293,"flow_last_seen":1576420277293,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50326,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":390,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB0lRAAEAGaeB\/AAABfwAAAcSWH5D4eer6AmSqt4AYAED+tQAAAQEICp1m\/VWdZv1VR0VUIC8xLnRhci5iejIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":390,"flow_packet_id":1,"flow_first_seen":1576420277293,"flow_last_seen":1576420277293,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50326,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":391,"flow_packet_id":1,"flow_first_seen":1576420277295,"flow_last_seen":1576420277295,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50328,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":391,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBgrRAAEAGuYB\/AAABfwAAAcSYH5BqProaPd\/PWYAYAED+tQAAAQEICp1m\/VedZv1XR0VUIC8xLnRhci5iejIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":391,"flow_packet_id":1,"flow_first_seen":1576420277295,"flow_last_seen":1576420277295,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50328,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":392,"flow_packet_id":1,"flow_first_seen":1576420277296,"flow_last_seen":1576420277296,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50330,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":392,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFhERAAEAGt+x\/AAABfwAAAcSaH5DLx7zvpnN3coAYAED+uQAAAQEICp1m\/VidZv1YR0VUIC8xMjcwMDEudGFyLmd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":392,"flow_packet_id":1,"flow_first_seen":1576420277296,"flow_last_seen":1576420277296,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50330,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":393,"flow_packet_id":1,"flow_first_seen":1576420277298,"flow_last_seen":1576420277298,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50332,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":393,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFkbNAAEAGqn1\/AAABfwAAAcScH5DniakeYsnjE4AYAED+uQAAAQEICp1m\/VqdZv1aR0VUIC8xMjcwMDEudGFyLmd6IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":393,"flow_packet_id":1,"flow_first_seen":1576420277298,"flow_last_seen":1576420277298,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50332,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":394,"flow_packet_id":1,"flow_first_seen":1576420277299,"flow_last_seen":1576420277299,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50334,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":394,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADATXFAAEAG7sR\/AAABfwAAAcSeH5C5OnXDLQhZdIAYAED+tAAAAQEICp1m\/VudZv1bR0VUIC8xMjcwLnNxbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":394,"flow_packet_id":1,"flow_first_seen":1576420277299,"flow_last_seen":1576420277299,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50334,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":395,"flow_packet_id":1,"flow_first_seen":1576420277301,"flow_last_seen":1576420277301,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50336,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":395,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAvp1AAEAGfZh\/AAABfwAAAcSgH5BBBoY3\/wT40oAYAED+tAAAAQEICp1m\/V2dZv1dR0VUIC8xMjcwLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":395,"flow_packet_id":1,"flow_first_seen":1576420277301,"flow_last_seen":1576420277301,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50336,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":396,"flow_packet_id":1,"flow_first_seen":1576420277302,"flow_last_seen":1576420277302,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50338,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":396,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADG+c1AAEAGQmJ\/AAABfwAAAcSiH5Dkc8Fn99puBYAYAED+ugAAAQEICp1m\/V6dZv1eR0VUIC8xMjcwMDEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":396,"flow_packet_id":1,"flow_first_seen":1576420277302,"flow_last_seen":1576420277302,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50338,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":397,"flow_packet_id":1,"flow_first_seen":1576420277304,"flow_last_seen":1576420277304,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50340,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":397,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGn2FAAEAGnM5\/AAABfwAAAcSkH5ABoKfybJgPqoAYAED+ugAAAQEICp1m\/WCdZv1gR0VUIC8xMjcwMDEudGFyLmJ6MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":397,"flow_packet_id":1,"flow_first_seen":1576420277304,"flow_last_seen":1576420277304,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50340,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":398,"flow_packet_id":1,"flow_first_seen":1576420277306,"flow_last_seen":1576420277306,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50342,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":398,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBq8lAAEAGkGt\/AAABfwAAAcSmH5B085NqCLeHfoAYAED+tQAAAQEICp1m\/WGdZv1hR0VUIC8xMjcwMC5qa3MgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":398,"flow_packet_id":1,"flow_first_seen":1576420277306,"flow_last_seen":1576420277306,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50342,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":399,"flow_packet_id":1,"flow_first_seen":1576420277307,"flow_last_seen":1576420277307,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50344,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":399,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBE+BAAEAGKFV\/AAABfwAAAcSoH5A\/FCtx8eapa4AYAED+tQAAAQEICp1m\/WOdZv1jR0VUIC8xMjcwMC5qa3MgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":399,"flow_packet_id":1,"flow_first_seen":1576420277307,"flow_last_seen":1576420277307,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50344,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.jks","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":400,"flow_packet_id":1,"flow_first_seen":1576420277308,"flow_last_seen":1576420277308,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50346,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":400,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBd5tAAEAGxJl\/AAABfwAAAcSqH5Asxk83LE5RU4AYAED+tQAAAQEICp1m\/WSdZv1kR0VUIC8xMjcwMC5lZ2cgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":400,"flow_packet_id":1,"flow_first_seen":1576420277308,"flow_last_seen":1576420277308,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50346,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":401,"flow_packet_id":1,"flow_first_seen":1576420277309,"flow_last_seen":1576420277309,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50348,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":401,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB9HRAAEAGR8B\/AAABfwAAAcSsH5BlTMzeEpcpJ4AYAED+tQAAAQEICp1m\/WWdZv1lR0VUIC8xMjcwMC5lZ2cgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":401,"flow_packet_id":1,"flow_first_seen":1576420277309,"flow_last_seen":1576420277309,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50348,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.egg","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":402,"flow_packet_id":1,"flow_first_seen":1576420277310,"flow_last_seen":1576420277310,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50350,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":402,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFcQdAAEAGyyl\/AAABfwAAAcSuH5C\/jUmrZ8IhxYAYAED+uQAAAQEICp1m\/WadZv1mR0VUIC8xMjdfMF8wXzEudGFyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":402,"flow_packet_id":1,"flow_first_seen":1576420277310,"flow_last_seen":1576420277310,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50350,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":403,"flow_packet_id":1,"flow_first_seen":1576420277311,"flow_last_seen":1576420277311,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50352,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":403,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFdZ1AAEAGxpN\/AAABfwAAAcSwH5BGIE0sZXhTqYAYAED+uQAAAQEICp1m\/WedZv1nR0VUIC8xMjdfMF8wXzEudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":403,"flow_packet_id":1,"flow_first_seen":1576420277311,"flow_last_seen":1576420277311,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50352,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":404,"flow_packet_id":1,"flow_first_seen":1576420277313,"flow_last_seen":1576420277313,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50354,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":404,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADESF9AAEAG89J\/AAABfwAAAcSyH5CXAnDudCS+HoAYAED+uAAAAQEICp1m\/WmdZv1oR0VUIC8xMjcwMC50YXIuZ3ogSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":404,"flow_packet_id":1,"flow_first_seen":1576420277313,"flow_last_seen":1576420277313,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50354,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":405,"flow_packet_id":1,"flow_first_seen":1576420277314,"flow_last_seen":1576420277314,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50356,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":405,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEBf5AAEAGNjR\/AAABfwAAAcS0H5ApMj1NA0MOSIAYAED+uAAAAQEICp1m\/WqdZv1qR0VUIC8xMjcwMC50YXIuZ3ogSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":405,"flow_packet_id":1,"flow_first_seen":1576420277314,"flow_last_seen":1576420277314,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50356,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/12700.tar.gz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":406,"flow_packet_id":1,"flow_first_seen":1576420277315,"flow_last_seen":1576420277315,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50358,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":406,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADC35NAAEAGXKB\/AAABfwAAAcS2H5BI6+ciGxVy6IAYAED+tgAAAQEICp1m\/WudZv1rR0VUIC8xLnRhci5sem1hIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":406,"flow_packet_id":1,"flow_first_seen":1576420277315,"flow_last_seen":1576420277315,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50358,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":407,"flow_packet_id":1,"flow_first_seen":1576420277317,"flow_last_seen":1576420277317,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50360,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":407,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCBO9AAEAGN0V\/AAABfwAAAcS4H5BQkTxdjeN4aIAYAED+tgAAAQEICp1m\/W2dZv1tR0VUIC8xLnRhci5sem1hIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":407,"flow_packet_id":1,"flow_first_seen":1576420277317,"flow_last_seen":1576420277317,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50360,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1.tar.lzma","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":408,"flow_packet_id":1,"flow_first_seen":1576420277319,"flow_last_seen":1576420277319,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50362,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":408,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAyGZAAEAGc89\/AAABfwAAAcS6H5BukfDWpxxv14AYAED+tAAAAQEICp1m\/W+dZv1vR0VUIC9zaXRlLnNxbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":408,"flow_packet_id":1,"flow_first_seen":1576420277319,"flow_last_seen":1576420277319,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50362,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":409,"flow_packet_id":1,"flow_first_seen":1576420277321,"flow_last_seen":1576420277321,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50364,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":409,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAwiFAAEAGehR\/AAABfwAAAcS8H5DDVvqu6KD2KYAYAED+tAAAAQEICp1m\/XGdZv1xR0VUIC9zaXRlLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":409,"flow_packet_id":1,"flow_first_seen":1576420277321,"flow_last_seen":1576420277321,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50364,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":410,"flow_packet_id":1,"flow_first_seen":1576420277322,"flow_last_seen":1576420277322,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50366,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":410,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBuGlAAEAGg8t\/AAABfwAAAcS+H5BzjYDWLFz9IYAYAED+tQAAAQEICp1m\/XKdZv1yR0VUIC8xMjcuMC5jZXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":410,"flow_packet_id":1,"flow_first_seen":1576420277322,"flow_last_seen":1576420277322,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50366,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":411,"flow_packet_id":1,"flow_first_seen":1576420277324,"flow_last_seen":1576420277324,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50368,"dst_port":8080,"l4_proto":"tcp"}
+0599{"flow_id":411,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADB11JAAEAGZOJ\/AAABfwAAAcTAH5DtMO\/kM\/E\/tYAYAED+tQAAAQEICp1m\/XSdZv10R0VUIC8xMjcuMC5jZXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":411,"flow_packet_id":1,"flow_first_seen":1576420277324,"flow_last_seen":1576420277324,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50368,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":412,"flow_packet_id":1,"flow_first_seen":1576420277325,"flow_last_seen":1576420277325,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50370,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":412,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC96FRAAEAGU+R\/AAABfwAAAcTCH5AdeNDi26Tri4AYAED+sQAAAQEICp1m\/XWdZv11R0VUIC8wLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":412,"flow_packet_id":1,"flow_first_seen":1576420277325,"flow_last_seen":1576420277325,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50370,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":413,"flow_packet_id":1,"flow_first_seen":1576420277326,"flow_last_seen":1576420277326,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50372,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":413,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC95+5AAEAGVEp\/AAABfwAAAcTEH5Cz199gOp5CH4AYAED+sQAAAQEICp1m\/XadZv12R0VUIC8wLnBlbSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":413,"flow_packet_id":1,"flow_first_seen":1576420277326,"flow_last_seen":1576420277326,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50372,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.pem","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":414,"flow_packet_id":1,"flow_first_seen":1576420277328,"flow_last_seen":1576420277328,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50374,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":414,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAqSFAAEAGkxR\/AAABfwAAAcTGH5DtDpGsIyeJWoAYAED+tAAAAQEICp1m\/XidZv14R0VUIC8xMjcwLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":414,"flow_packet_id":1,"flow_first_seen":1576420277328,"flow_last_seen":1576420277328,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50374,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":415,"flow_packet_id":1,"flow_first_seen":1576420277329,"flow_last_seen":1576420277329,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50376,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":415,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA2JJAAEAGY6N\/AAABfwAAAcTIH5BNx+AlanMTuoAYAED+tAAAAQEICp1m\/XmdZv15R0VUIC8xMjcwLndhciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":415,"flow_packet_id":1,"flow_first_seen":1576420277329,"flow_last_seen":1576420277329,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50376,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/1270.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":416,"flow_packet_id":1,"flow_first_seen":1576420277331,"flow_last_seen":1576420277331,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50378,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":416,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHC9ZAAEAGMFl\/AAABfwAAAcTKH5CiFTNhL7Iog4AYAED+uwAAAQEICp1m\/XqdZv16R0VUIC8xMjcuMC4wLnRhci5iejIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":416,"flow_packet_id":1,"flow_first_seen":1576420277331,"flow_last_seen":1576420277331,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50378,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":417,"flow_packet_id":1,"flow_first_seen":1576420277333,"flow_last_seen":1576420277333,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50380,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":417,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHgXtAAEAGurN\/AAABfwAAAcTMH5Cx2rnNvwRWuoAYAED+uwAAAQEICp1m\/X2dZv19R0VUIC8xMjcuMC4wLnRhci5iejIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":417,"flow_packet_id":1,"flow_first_seen":1576420277333,"flow_last_seen":1576420277333,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50380,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.0.0.tar.bz2","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":418,"flow_packet_id":1,"flow_first_seen":1576420277334,"flow_last_seen":1576420277334,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50382,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":418,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFmcZAAEAGomp\/AAABfwAAAcTOH5DYYKFyIBNeYIAYAED+uQAAAQEICp1m\/X6dZv1+R0VUIC8xMjdfMF8wXzEuY2VyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":418,"flow_packet_id":1,"flow_first_seen":1576420277334,"flow_last_seen":1576420277334,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50382,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":419,"flow_packet_id":1,"flow_first_seen":1576420277336,"flow_last_seen":1576420277336,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50384,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":419,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFO7NAAEAGAH5\/AAABfwAAAcTQH5BUXAMIX4xO7oAYAED+uQAAAQEICp1m\/YCdZv2AR0VUIC8xMjdfMF8wXzEuY2VyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":419,"flow_packet_id":1,"flow_first_seen":1576420277336,"flow_last_seen":1576420277336,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50384,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.cer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":420,"flow_packet_id":1,"flow_first_seen":1576420277337,"flow_last_seen":1576420277337,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50386,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":420,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9OaFAAEAGAph\/AAABfwAAAcTSH5DijwEqjka6TYAYAED+sQAAAQEICp1m\/YGdZv2BR0VUIC8wLnNxbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":420,"flow_packet_id":1,"flow_first_seen":1576420277337,"flow_last_seen":1576420277337,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50386,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":421,"flow_packet_id":1,"flow_first_seen":1576420277339,"flow_last_seen":1576420277339,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50388,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":421,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9fmNAAEAGvdV\/AAABfwAAAcTUH5Bm6EbY23UeBoAYAED+sQAAAQEICp1m\/YOdZv2DR0VUIC8wLnNxbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnNpdGVmaWxlcykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":421,"flow_packet_id":1,"flow_first_seen":1576420277339,"flow_last_seen":1576420277339,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50388,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/0.sql","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":422,"flow_packet_id":1,"flow_first_seen":1576420277340,"flow_last_seen":1576420277340,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50390,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":422,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADF759AAEAGTJF\/AAABfwAAAcTWH5AedNcrGvcoYYAYAED+uQAAAQEICp1m\/YSdZv2ER0VUIC8xMjdfMF8wXzEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":422,"flow_packet_id":1,"flow_first_seen":1576420277340,"flow_last_seen":1576420277340,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50390,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":423,"flow_packet_id":1,"flow_first_seen":1576420277342,"flow_last_seen":1576420277342,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50392,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":423,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFUDJAAEAG6\/5\/AAABfwAAAcTYH5DWhmiIUA3tU4AYAED+uQAAAQEICp1m\/YadZv2GR0VUIC8xMjdfMF8wXzEuYWx6IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":423,"flow_packet_id":1,"flow_first_seen":1576420277342,"flow_last_seen":1576420277342,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50392,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127_0_0_1.alz","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":424,"flow_packet_id":1,"flow_first_seen":1576420277343,"flow_last_seen":1576420277343,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50394,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":424,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA2wlAAEAGYSx\/AAABfwAAAcTaH5BjP+Ox5vZroYAYAED+tAAAAQEICp1m\/YedZv2HR0VUIC9zaXRlLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":424,"flow_packet_id":1,"flow_first_seen":1576420277343,"flow_last_seen":1576420277343,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50394,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":425,"flow_packet_id":1,"flow_first_seen":1576420277344,"flow_last_seen":1576420277344,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50396,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":425,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAn6BAAEAGnJV\/AAABfwAAAcTcH5DwnKcnILktrYAYAED+tAAAAQEICp1m\/YidZv2IR0VUIC9zaXRlLndhciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":425,"flow_packet_id":1,"flow_first_seen":1576420277344,"flow_last_seen":1576420277344,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50396,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":426,"flow_packet_id":1,"flow_first_seen":1576420277345,"flow_last_seen":1576420277345,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50398,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":426,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/HTtAAEAGHvx\/AAABfwAAAcTeH5D3FiWCONN3YoAYAED+swAAAQEICp1m\/YmdZv2JR0VUIC8xMjcud2FyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":426,"flow_packet_id":1,"flow_first_seen":1576420277345,"flow_last_seen":1576420277345,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50398,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":427,"flow_packet_id":1,"flow_first_seen":1576420277347,"flow_last_seen":1576420277347,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50400,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":427,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/ZRVAAEAG1yF\/AAABfwAAAcTgH5Bb9F2rFITQsoAYAED+swAAAQEICp1m\/YudZv2LR0VUIC8xMjcud2FyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":427,"flow_packet_id":1,"flow_first_seen":1576420277347,"flow_last_seen":1576420277347,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50400,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127.war","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":428,"flow_packet_id":1,"flow_first_seen":1576420277349,"flow_last_seen":1576420277349,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50402,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":428,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCefJAAEAGwkF\/AAABfwAAAcTiH5DNN0FKl3iI04AYAED+tgAAAQEICp1m\/Y2dZv2MR0VUIC8xMjcwMDEudGFyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c2l0ZWZpbGVzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":428,"flow_packet_id":1,"flow_first_seen":1576420277349,"flow_last_seen":1576420277349,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50402,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":429,"flow_packet_id":1,"flow_first_seen":1576420277350,"flow_last_seen":1576420277350,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50404,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":429,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCI4FAAEAGGLN\/AAABfwAAAcTkH5CTwxvH1PwL8oAYAED+tgAAAQEICp1m\/Y6dZv2OR0VUIC8xMjcwMDEudGFyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzaXRlZmlsZXMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":429,"flow_packet_id":1,"flow_first_seen":1576420277350,"flow_last_seen":1576420277350,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50404,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/127001.tar","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:sitefiles)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":430,"flow_packet_id":1,"flow_first_seen":1576420277352,"flow_last_seen":1576420277352,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50406,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":430,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBrJpAAEAGj5p\/AAABfwAAAcTmH5B1JpQjd4rcfoAYAED+tQAAAQEICp1m\/ZCdZv2QR0VUIC9mYXZpY29uLmljbyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":430,"flow_packet_id":1,"flow_first_seen":1576420277352,"flow_last_seen":1576420277352,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50406,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicon.ico","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":431,"flow_packet_id":1,"flow_first_seen":1576420277354,"flow_last_seen":1576420277354,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50408,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":431,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKIPlAAEAGGzN\/AAABfwAAAcToH5DzJBhOnEiKeoAYAED+vgAAAQEICp1m\/ZKdZv2SR0VUIC9mYXZpY29ucy9mYXZpY29uLmljbyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6ZmF2aWNvbikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":431,"flow_packet_id":1,"flow_first_seen":1576420277354,"flow_last_seen":1576420277354,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50408,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicons\/favicon.ico","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":432,"flow_packet_id":1,"flow_first_seen":1576420277355,"flow_last_seen":1576420277355,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50410,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":432,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBHndAAEAGHb5\/AAABfwAAAcTqH5Ag4SbPDIJk5IAYAED+tQAAAQEICp1m\/ZOdZv2TR0VUIC9mYXZpY29uLmdpZiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":432,"flow_packet_id":1,"flow_first_seen":1576420277355,"flow_last_seen":1576420277355,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50410,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicon.gif","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":433,"flow_packet_id":1,"flow_first_seen":1576420277357,"flow_last_seen":1576420277357,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50412,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":433,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKgAdAAEAGvCR\/AAABfwAAAcTsH5DBK7i\/eaGnm4AYAED+vgAAAQEICp1m\/ZWdZv2UR0VUIC9mYXZpY29ucy9mYXZpY29uLmdpZiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":433,"flow_packet_id":1,"flow_first_seen":1576420277357,"flow_last_seen":1576420277357,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50412,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicons\/favicon.gif","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":434,"flow_packet_id":1,"flow_first_seen":1576420277358,"flow_last_seen":1576420277358,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50414,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":434,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADByl9AAEAGcdV\/AAABfwAAAcTuH5C2YPLn77QmvYAYAED+tQAAAQEICp1m\/ZadZv2WR0VUIC9mYXZpY29uLnBuZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":434,"flow_packet_id":1,"flow_first_seen":1576420277358,"flow_last_seen":1576420277358,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50414,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicon.png","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":435,"flow_packet_id":1,"flow_first_seen":1576420277359,"flow_last_seen":1576420277359,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50416,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":435,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADK7Z9AAEAGTox\/AAABfwAAAcTwH5DcrNUiTS0awIAYAED+vgAAAQEICp1m\/ZedZv2XR0VUIC9mYXZpY29ucy9mYXZpY29uLnBuZyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6ZmF2aWNvbikNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":435,"flow_packet_id":1,"flow_first_seen":1576420277359,"flow_last_seen":1576420277359,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50416,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/favicons\/favicon.png","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":436,"flow_packet_id":1,"flow_first_seen":1576420277361,"flow_last_seen":1576420277361,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50418,"dst_port":8080,"l4_proto":"tcp"}
+0584{"flow_id":436,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":196,"pkt":"AAAAAAAAAAAAAAAACABFAAC2klBAAEAGqe9\/AAABfwAAAcTyH5D2pKrzJKNAbIAYAED+qgAAAQEICp1m\/ZmdZv2ZR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OmZhdmljb24pDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":436,"flow_packet_id":1,"flow_first_seen":1576420277361,"flow_last_seen":1576420277361,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50418,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:favicon)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":437,"flow_packet_id":1,"flow_first_seen":1576420277375,"flow_last_seen":1576420277375,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50438,"dst_port":8080,"l4_proto":"tcp"}
+0684{"flow_id":437,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":271,"pkt":"AAAAAAAAAAAAAAAACABFAAEBYRtAAEAG2tl\/AAABfwAAAcUGH5Bwr1nakn6kY4AYAED+9QAAAQEICp1m\/aedZv2nR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":437,"flow_packet_id":1,"flow_first_seen":1576420277375,"flow_last_seen":1576420277375,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50438,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":438,"flow_packet_id":1,"flow_first_seen":1576420277378,"flow_last_seen":1576420277378,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50440,"dst_port":8080,"l4_proto":"tcp"}
+0684{"flow_id":438,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":271,"pkt":"AAAAAAAAAAAAAAAACABFAAEBjFVAAEAGr59\/AAABfwAAAcUIH5BgqrSU8g64oYAYAED+9QAAAQEICp1m\/aqdZv2qR0VUIC8gSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":438,"flow_packet_id":1,"flow_first_seen":1576420277378,"flow_last_seen":1576420277378,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50440,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":439,"flow_packet_id":1,"flow_first_seen":1576420277381,"flow_last_seen":1576420277381,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50442,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":439,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEKrtxAAEAGjQ9\/AAABfwAAAcUKH5Ddg5Yc5mMQaoAYAED+\/gAAAQEICp1m\/a2dZv2sR0VUIC9hZG1pbi5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":439,"flow_packet_id":1,"flow_first_seen":1576420277381,"flow_last_seen":1576420277381,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50442,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":440,"flow_packet_id":1,"flow_first_seen":1576420277383,"flow_last_seen":1576420277383,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50444,"dst_port":8080,"l4_proto":"tcp"}
+0705{"flow_id":440,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":288,"pkt":"AAAAAAAAAAAAAAAACABFAAES8w1AAEAGSNZ\/AAABfwAAAcUMH5A5v8vLlyOw2IAYAED\/BgAAAQEICp1m\/a+dZv2vR0VUIC9hZG1pbmlzdHJhdG9yLmNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":440,"flow_packet_id":1,"flow_first_seen":1576420277383,"flow_last_seen":1576420277383,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50444,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/administrator.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":441,"flow_packet_id":1,"flow_first_seen":1576420277386,"flow_last_seen":1576420277386,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50446,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":441,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":284,"pkt":"AAAAAAAAAAAAAAAACABFAAEO1qdAAEAGZUB\/AAABfwAAAcUOH5C5aO5oSApQ3oAYAED\/AgAAAQEICp1m\/bKdZv2yR0VUIC9hdXRoTG9naW4uY2dpIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":284,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":441,"flow_packet_id":1,"flow_first_seen":1576420277386,"flow_last_seen":1576420277386,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50446,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/authLogin.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":442,"flow_packet_id":1,"flow_first_seen":1576420277387,"flow_last_seen":1576420277387,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50448,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":442,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":281,"pkt":"AAAAAAAAAAAAAAAACABFAAEL0qJAAEAGaUh\/AAABfwAAAcUQH5BC7upk6xmcJIAYAED+\/wAAAQEICp1m\/bOdZv2zR0VUIC9iYi1oaXN0LnNoIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":442,"flow_packet_id":1,"flow_first_seen":1576420277387,"flow_last_seen":1576420277387,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50448,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/bb-hist.sh","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":443,"flow_packet_id":1,"flow_first_seen":1576420277389,"flow_last_seen":1576420277389,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50450,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":443,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":281,"pkt":"AAAAAAAAAAAAAAAACABFAAELgRJAAEAGuth\/AAABfwAAAcUSH5B08bnUX64J5YAYAED+\/wAAAQEICp1m\/bWdZv21R0VUIC9iYW5uZXIuY2dpIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KDQo=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":443,"flow_packet_id":1,"flow_first_seen":1576420277389,"flow_last_seen":1576420277389,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50450,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/banner.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":444,"flow_packet_id":1,"flow_first_seen":1576420277391,"flow_last_seen":1576420277391,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50452,"dst_port":8080,"l4_proto":"tcp"}
+0695{"flow_id":444,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJF\/tAAEAGI\/J\/AAABfwAAAcUUH5B+1S87jYTLUoAYAED+\/QAAAQEICp1m\/bedZv23R0VUIC9ib29rLmNnaSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":444,"flow_packet_id":1,"flow_first_seen":1576420277391,"flow_last_seen":1576420277391,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50452,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/book.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":445,"flow_packet_id":1,"flow_first_seen":1576420277392,"flow_last_seen":1576420277392,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50454,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":445,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEM+RhAAEAGQtF\/AAABfwAAAcUWH5DPIMHTViTvW4AYAED\/AAAAAQEICp1m\/bidZv24R0VUIC9jZ2lpbmZvLmNnaSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":445,"flow_packet_id":1,"flow_first_seen":1576420277392,"flow_last_seen":1576420277392,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50454,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgiinfo.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":446,"flow_packet_id":1,"flow_first_seen":1576420277394,"flow_last_seen":1576420277394,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50456,"dst_port":8080,"l4_proto":"tcp"}
+0698{"flow_id":446,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":281,"pkt":"AAAAAAAAAAAAAAAACABFAAELY9VAAEAG2BV\/AAABfwAAAcUYH5AazFsY4\/xNyIAYAED+\/wAAAQEICp1m\/bqdZv26R0VUIC9jZ2l0ZXN0LnB5IEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":446,"flow_packet_id":1,"flow_first_seen":1576420277394,"flow_last_seen":1576420277394,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50456,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgitest.py","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":447,"flow_packet_id":1,"flow_first_seen":1576420277395,"flow_last_seen":1576420277395,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50458,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":447,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEMSAFAAEAG8+h\/AAABfwAAAcUaH5B7UH87Bk0XQYAYAED\/AAAAAQEICp1m\/budZv27R0VUIC9jZ2lfd3JhcHBlciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":447,"flow_packet_id":1,"flow_first_seen":1576420277395,"flow_last_seen":1576420277395,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50458,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi_wrapper","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":448,"flow_packet_id":1,"flow_first_seen":1576420277398,"flow_last_seen":1576420277398,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50460,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":448,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEMKndAAEAGEXN\/AAABfwAAAcUcH5BMbxKxdmdFb4AYAED\/AAAAAQEICp1m\/b6dZv2+R0VUIC9jb250YWN0LmNnaSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":448,"flow_packet_id":1,"flow_first_seen":1576420277398,"flow_last_seen":1576420277398,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50460,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/contact.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":449,"flow_packet_id":1,"flow_first_seen":1576420277399,"flow_last_seen":1576420277399,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50462,"dst_port":8080,"l4_proto":"tcp"}
+0698{"flow_id":449,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEK9YVAAEAGRmZ\/AAABfwAAAcUeH5Br181GQEYmBIAYAED+\/gAAAQEICp1m\/b+dZv2\/R0VUIC9jb3VudC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":449,"flow_packet_id":1,"flow_first_seen":1576420277399,"flow_last_seen":1576420277399,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50462,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/count.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":450,"flow_packet_id":1,"flow_first_seen":1576420277401,"flow_last_seen":1576420277401,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50464,"dst_port":8080,"l4_proto":"tcp"}
+0709{"flow_id":450,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":289,"pkt":"AAAAAAAAAAAAAAAACABFAAETxAhAAEAGd9p\/AAABfwAAAcUgH5CMzvzBXE4TboAYAED\/BwAAAQEICp1m\/cGdZv3BR0VUIC9kZWZhdWx0d2VicGFnZS5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":289,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":450,"flow_packet_id":1,"flow_first_seen":1576420277401,"flow_last_seen":1576420277401,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50464,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/defaultwebpage.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":451,"flow_packet_id":1,"flow_first_seen":1576420277402,"flow_last_seen":1576420277402,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50466,"dst_port":8080,"l4_proto":"tcp"}
+0702{"flow_id":451,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENn\/9AAEAGm+l\/AAABfwAAAcUiH5Cfgqc8sQq4SIAYAED\/AQAAAQEICp1m\/cKdZv3CR0VUIC9kb3dubG9hZC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":451,"flow_packet_id":1,"flow_first_seen":1576420277402,"flow_last_seen":1576420277402,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50466,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/download.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":452,"flow_packet_id":1,"flow_first_seen":1576420277403,"flow_last_seen":1576420277403,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50468,"dst_port":8080,"l4_proto":"tcp"}
+0705{"flow_id":452,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":288,"pkt":"AAAAAAAAAAAAAAAACABFAAESp5VAAEAGlE5\/AAABfwAAAcUkH5At0J9VXKwRhYAYAED\/BgAAAQEICp1m\/cOdZv3DR0VUIC9lbnRyb3B5c2VhcmNoLmNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":452,"flow_packet_id":1,"flow_first_seen":1576420277403,"flow_last_seen":1576420277403,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50468,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/entropysearch.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":453,"flow_packet_id":1,"flow_first_seen":1576420277405,"flow_last_seen":1576420277405,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50470,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":453,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEI2lVAAEAGYZh\/AAABfwAAAcUmH5ARUOKViVHVaYAYAED+\/AAAAQEICp1m\/cSdZv3ER0VUIC9lbnYuY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":453,"flow_packet_id":1,"flow_first_seen":1576420277405,"flow_last_seen":1576420277405,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50470,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/env.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":454,"flow_packet_id":1,"flow_first_seen":1576420277406,"flow_last_seen":1576420277406,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50472,"dst_port":8080,"l4_proto":"tcp"}
+0705{"flow_id":454,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":286,"pkt":"AAAAAAAAAAAAAAAACABFAAEQ2p9AAEAGYUZ\/AAABfwAAAcUoH5D43eJbIwWC0IAYAED\/BAAAAQEICp1m\/cadZv3GR0VUIC9lbnZpcm9ubWVudC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":454,"flow_packet_id":1,"flow_first_seen":1576420277406,"flow_last_seen":1576420277406,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50472,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/environment.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":455,"flow_packet_id":1,"flow_first_seen":1576420277407,"flow_last_seen":1576420277407,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50474,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":455,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENbStAAEAGzr1\/AAABfwAAAcUqH5C5flXvg270eYAYAED\/AQAAAQEICp1m\/cedZv3HR0VUIC9lem1sbS1icm93c2UgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":455,"flow_packet_id":1,"flow_first_seen":1576420277407,"flow_last_seen":1576420277407,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50474,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ezmlm-browse","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":456,"flow_packet_id":1,"flow_first_seen":1576420277409,"flow_last_seen":1576420277409,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50476,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":456,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENkcFAAEAGqid\/AAABfwAAAcUsH5BKNKl4Ee+JJYAYAED\/AQAAAQEICp1m\/cmdZv3JR0VUIC9mb3JtbWFpbC5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":456,"flow_packet_id":1,"flow_first_seen":1576420277409,"flow_last_seen":1576420277409,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50476,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/formmail.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":457,"flow_packet_id":1,"flow_first_seen":1576420277410,"flow_last_seen":1576420277410,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50478,"dst_port":8080,"l4_proto":"tcp"}
+0709{"flow_id":457,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":289,"pkt":"AAAAAAAAAAAAAAAACABFAAEToPJAAEAGmvB\/AAABfwAAAcUuH5CLPJg5VfIqUIAYAED\/BwAAAQEICp1m\/cqdZv3KR0VUIC9Gb3JtTWFpbC1jbG9uZS5jZ2kgSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":289,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":457,"flow_packet_id":1,"flow_first_seen":1576420277410,"flow_last_seen":1576420277410,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50478,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/FormMail-clone.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":458,"flow_packet_id":1,"flow_first_seen":1576420277412,"flow_last_seen":1576420277412,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50480,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":458,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":284,"pkt":"AAAAAAAAAAAAAAAACABFAAEOAyBAAEAGOMh\/AAABfwAAAcUwH5BOyzvYEAppQYAYAED\/AgAAAQEICp1m\/cydZv3MR0VUIC9ndWVzdGJvb2suY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":284,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":458,"flow_packet_id":1,"flow_first_seen":1576420277412,"flow_last_seen":1576420277412,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50480,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/guestbook.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":459,"flow_packet_id":1,"flow_first_seen":1576420277414,"flow_last_seen":1576420277414,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50482,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":459,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENCPdAAEAGMvJ\/AAABfwAAAcUyH5A4wTA94El3uoAYAED\/AQAAAQEICp1m\/c6dZv3OR0VUIC9oZWxwZGVzay5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":459,"flow_packet_id":1,"flow_first_seen":1576420277414,"flow_last_seen":1576420277414,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50482,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/helpdesk.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":460,"flow_packet_id":1,"flow_first_seen":1576420277416,"flow_last_seen":1576420277416,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50484,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":460,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEKgptAAEAGuVB\/AAABfwAAAcU0H5CIJLpUcW+qJoAYAED+\/gAAAQEICp1m\/dCdZv3QR0VUIC9pbmRleC5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":460,"flow_packet_id":1,"flow_first_seen":1576420277416,"flow_last_seen":1576420277416,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50484,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":461,"flow_packet_id":1,"flow_first_seen":1576420277417,"flow_last_seen":1576420277417,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50486,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":461,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEKMxlAAEAGCNN\/AAABfwAAAcU2H5CRJgvewUykPIAYAED+\/gAAAQEICp1m\/dGdZv3RR0VUIC9pbmRleC5waHAgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":461,"flow_packet_id":1,"flow_first_seen":1576420277417,"flow_last_seen":1576420277417,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50486,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":462,"flow_packet_id":1,"flow_first_seen":1576420277419,"flow_last_seen":1576420277419,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50488,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":462,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJrmtAAEAGjYF\/AAABfwAAAcU4H5CXuZakZnwUBoAYAED+\/QAAAQEICp1m\/dOdZv3TR0VUIC9pbmRleC5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":462,"flow_packet_id":1,"flow_first_seen":1576420277419,"flow_last_seen":1576420277419,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50488,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":463,"flow_packet_id":1,"flow_first_seen":1576420277420,"flow_last_seen":1576420277420,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50490,"dst_port":8080,"l4_proto":"tcp"}
+0694{"flow_id":463,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJZRVAAEAG1td\/AAABfwAAAcU6H5C6AV3ZPf\/xToAYAED+\/QAAAQEICp1m\/dSdZv3UR0VUIC9pbmZvLmNnaSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":463,"flow_packet_id":1,"flow_first_seen":1576420277420,"flow_last_seen":1576420277420,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50490,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/info.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":464,"flow_packet_id":1,"flow_first_seen":1576420277422,"flow_last_seen":1576420277422,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50492,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":464,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEI0gtAAEAGaeJ\/AAABfwAAAcU8H5DcN+rDzEDc2oAYAED+\/AAAAQEICp1m\/dadZv3WR0VUIC9pbmZvLnNoIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":464,"flow_packet_id":1,"flow_first_seen":1576420277422,"flow_last_seen":1576420277422,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50492,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/info.sh","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":465,"flow_packet_id":1,"flow_first_seen":1576420277423,"flow_last_seen":1576420277423,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50494,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":465,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENVqhAAEAG5UB\/AAABfwAAAcU+H5CeOW5utt+cAoAYAED\/AQAAAQEICp1m\/dedZv3XR0VUIC9sb2FkcGFnZS5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":465,"flow_packet_id":1,"flow_first_seen":1576420277423,"flow_last_seen":1576420277423,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50494,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/loadpage.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":466,"flow_packet_id":1,"flow_first_seen":1576420277425,"flow_last_seen":1576420277425,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50496,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":466,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEKJkVAAEAGFad\/AAABfwAAAcVAH5DPeB6QOQhEGoAYAED+\/gAAAQEICp1m\/didZv3YR0VUIC9sb2dpbi5jZ2kgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":466,"flow_packet_id":1,"flow_first_seen":1576420277425,"flow_last_seen":1576420277425,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50496,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":467,"flow_packet_id":1,"flow_first_seen":1576420277426,"flow_last_seen":1576420277426,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50498,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":467,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEKG0lAAEAGIKN\/AAABfwAAAcVCH5Dr2SOM+8VpkIAYAED+\/gAAAQEICp1m\/dqdZv3aR0VUIC9sb2dpbi5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":467,"flow_packet_id":1,"flow_first_seen":1576420277426,"flow_last_seen":1576420277426,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50498,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":468,"flow_packet_id":1,"flow_first_seen":1576420277428,"flow_last_seen":1576420277428,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50500,"dst_port":8080,"l4_proto":"tcp"}
+0695{"flow_id":468,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJsHVAAEAGi3d\/AAABfwAAAcVEH5DgV4i\/xF\/y64AYAED+\/QAAAQEICp1m\/dydZv3cR0VUIC9sb2dpbi5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":468,"flow_packet_id":1,"flow_first_seen":1576420277428,"flow_last_seen":1576420277428,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50500,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":469,"flow_packet_id":1,"flow_first_seen":1576420277429,"flow_last_seen":1576420277429,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50502,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":469,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEMTIBAAEAG72l\/AAABfwAAAcVGH5AiwXS0u+SpZoAYAED\/AAAAAQEICp1m\/d2dZv3dR0VUIC9wYXRodGVzdC5wbCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":469,"flow_packet_id":1,"flow_first_seen":1576420277429,"flow_last_seen":1576420277429,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50502,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pathtest.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":470,"flow_packet_id":1,"flow_first_seen":1576420277431,"flow_last_seen":1576420277431,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50504,"dst_port":8080,"l4_proto":"tcp"}
+0688{"flow_id":470,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":274,"pkt":"AAAAAAAAAAAAAAAACABFAAEE5XFAAEAGVoB\/AAABfwAAAcVIH5CqQt2jzObFZYAYAED++AAAAQEICp1m\/d+dZv3eR0VUIC9waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":470,"flow_packet_id":1,"flow_first_seen":1576420277431,"flow_last_seen":1576420277431,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50504,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":471,"flow_packet_id":1,"flow_first_seen":1576420277432,"flow_last_seen":1576420277432,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50506,"dst_port":8080,"l4_proto":"tcp"}
+0688{"flow_id":471,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":275,"pkt":"AAAAAAAAAAAAAAAACABFAAEFeJtAAEAGw1V\/AAABfwAAAcVKH5AUwUBY1pIiyIAYAED++QAAAQEICp1m\/eCdZv3gR0VUIC9waHA0IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":471,"flow_packet_id":1,"flow_first_seen":1576420277432,"flow_last_seen":1576420277432,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50506,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php4","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":472,"flow_packet_id":1,"flow_first_seen":1576420277433,"flow_last_seen":1576420277433,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50508,"dst_port":8080,"l4_proto":"tcp"}
+0688{"flow_id":472,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":275,"pkt":"AAAAAAAAAAAAAAAACABFAAEFSMVAAEAG8yt\/AAABfwAAAcVMH5DeS3AOoHbKrYAYAED++QAAAQEICp1m\/eGdZv3hR0VUIC9waHA1IEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":472,"flow_packet_id":1,"flow_first_seen":1576420277433,"flow_last_seen":1576420277433,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50508,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php5","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":473,"flow_packet_id":1,"flow_first_seen":1576420277434,"flow_last_seen":1576420277434,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50510,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":473,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEI0WFAAEAGaox\/AAABfwAAAcVOH5BRy+mS7UbDZYAYAED+\/AAAAQEICp1m\/eKdZv3iR0VUIC9waHAtY2dpIEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":473,"flow_packet_id":1,"flow_first_seen":1576420277434,"flow_last_seen":1576420277434,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50510,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php-cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":474,"flow_packet_id":1,"flow_first_seen":1576420277436,"flow_last_seen":1576420277436,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50512,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":474,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEIqnVAAEAGkXh\/AAABfwAAAcVQH5Bll5K9uysWxoAYAED+\/AAAAQEICp1m\/eOdZv3jR0VUIC9waHAuY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":474,"flow_packet_id":1,"flow_first_seen":1576420277436,"flow_last_seen":1576420277436,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50512,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":475,"flow_packet_id":1,"flow_first_seen":1576420277437,"flow_last_seen":1576420277437,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50514,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":475,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJlAhAAEAGp+R\/AAABfwAAAcVSH5AUHqzKqBdRL4AYAED+\/QAAAQEICp1m\/eWdZv3lR0VUIC9waHAuZmNnaSBIVFRQLzEuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":475,"flow_packet_id":1,"flow_first_seen":1576420277437,"flow_last_seen":1576420277437,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50514,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/php.fcgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":476,"flow_packet_id":1,"flow_first_seen":1576420277438,"flow_last_seen":1576420277438,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50516,"dst_port":8080,"l4_proto":"tcp"}
+0694{"flow_id":476,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJhwhAAEAGtOR\/AAABfwAAAcVUH5Cc4b\/Kjk5kuIAYAED+\/QAAAQEICp1m\/eadZv3mR0VUIC9wcmludGVudiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":476,"flow_packet_id":1,"flow_first_seen":1576420277438,"flow_last_seen":1576420277438,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50516,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/printenv","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":477,"flow_packet_id":1,"flow_first_seen":1576420277439,"flow_last_seen":1576420277439,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50518,"dst_port":8080,"l4_proto":"tcp"}
+0709{"flow_id":477,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":289,"pkt":"AAAAAAAAAAAAAAAACABFAAETyIlAAEAGc1l\/AAABfwAAAcVWH5DyzvBYc36tz4AYAED\/BwAAAQEICp1m\/eedZv3nR0VUIC9yZXN0b3JlX2NvbmZpZy5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg==","pkt_caplen":289,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":477,"flow_packet_id":1,"flow_first_seen":1576420277439,"flow_last_seen":1576420277439,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50518,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/restore_config.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":478,"flow_packet_id":1,"flow_first_seen":1576420277442,"flow_last_seen":1576420277442,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50520,"dst_port":8080,"l4_proto":"tcp"}
+0695{"flow_id":478,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEICV1AAEAGMpF\/AAABfwAAAcVYH5Aa\/jGM\/2VZ0IAYAED+\/AAAAQEICp1m\/eqdZv3pR0VUIC9ydWJ5LnJiIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":478,"flow_packet_id":1,"flow_first_seen":1576420277442,"flow_last_seen":1576420277442,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50520,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ruby.rb","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":479,"flow_packet_id":1,"flow_first_seen":1576420277443,"flow_last_seen":1576420277443,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50522,"dst_port":8080,"l4_proto":"tcp"}
+0692{"flow_id":479,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":277,"pkt":"AAAAAAAAAAAAAAAACABFAAEH1YJAAEAGZmx\/AAABfwAAAcVaH5CqXO1RjdaXCYAYAED++wAAAQEICp1m\/eudZv3rR0VUIC9zZWFyY2ggSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg==","pkt_caplen":277,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":479,"flow_packet_id":1,"flow_first_seen":1576420277443,"flow_last_seen":1576420277443,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50522,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/search","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":480,"flow_packet_id":1,"flow_first_seen":1576420277444,"flow_last_seen":1576420277444,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50524,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":480,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":281,"pkt":"AAAAAAAAAAAAAAAACABFAAELsxNAAEAGiNd\/AAABfwAAAcVcH5B0n4vBZle5N4AYAED+\/wAAAQEICp1m\/eydZv3sR0VUIC9zZWFyY2guY2dpIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":480,"flow_packet_id":1,"flow_first_seen":1576420277444,"flow_last_seen":1576420277444,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50524,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/search.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":481,"flow_packet_id":1,"flow_first_seen":1576420277446,"flow_last_seen":1576420277446,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50526,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":481,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":281,"pkt":"AAAAAAAAAAAAAAAACABFAAELQstAAEAG+R9\/AAABfwAAAcVeH5AckXoZTNNhQ4AYAED+\/wAAAQEICp1m\/e6dZv3uR0VUIC9zZXJ2ZXIucGhwIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KDQo=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":481,"flow_packet_id":1,"flow_first_seen":1576420277446,"flow_last_seen":1576420277446,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50526,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/server.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":482,"flow_packet_id":1,"flow_first_seen":1576420277448,"flow_last_seen":1576420277448,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50528,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":482,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":277,"pkt":"AAAAAAAAAAAAAAAACABFAAEHr2pAAEAGjIR\/AAABfwAAAcVgH5ABL5e76\/gzuYAYAED++wAAAQEICp1m\/fCdZv3wR0VUIC9zdGF0dXMgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":277,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":482,"flow_packet_id":1,"flow_first_seen":1576420277448,"flow_last_seen":1576420277448,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50528,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/status","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":483,"flow_packet_id":1,"flow_first_seen":1576420277449,"flow_last_seen":1576420277449,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50530,"dst_port":8080,"l4_proto":"tcp"}
+0698{"flow_id":483,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":281,"pkt":"AAAAAAAAAAAAAAAACABFAAELeuBAAEAGwQp\/AAABfwAAAcViH5Bf0UINj\/XlzYAYAED+\/wAAAQEICp1m\/fGdZv3xR0VUIC9zeXNpbmZvLnBsIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":483,"flow_packet_id":1,"flow_first_seen":1576420277449,"flow_last_seen":1576420277449,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50530,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/sysinfo.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":484,"flow_packet_id":1,"flow_first_seen":1576420277451,"flow_last_seen":1576420277451,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50532,"dst_port":8080,"l4_proto":"tcp"}
+0689{"flow_id":484,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":275,"pkt":"AAAAAAAAAAAAAAAACABFAAEFPsFAAEAG\/S9\/AAABfwAAAcVkH5CmDwZuBlGlyYAYAED++QAAAQEICp1m\/fOdZv3zR0VUIC90ZXN0IEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":484,"flow_packet_id":1,"flow_first_seen":1576420277451,"flow_last_seen":1576420277451,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50532,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":485,"flow_packet_id":1,"flow_first_seen":1576420277452,"flow_last_seen":1576420277452,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50534,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":485,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJ+UlAAEAGQqN\/AAABfwAAAcVmH5C1jMGV60p+W4AYAED+\/QAAAQEICp1m\/fSdZv30R0VUIC90ZXN0LWNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":485,"flow_packet_id":1,"flow_first_seen":1576420277452,"flow_last_seen":1576420277452,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50534,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test-cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":486,"flow_packet_id":1,"flow_first_seen":1576420277454,"flow_last_seen":1576420277454,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50536,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":486,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":279,"pkt":"AAAAAAAAAAAAAAAACABFAAEJpZBAAEAGllx\/AAABfwAAAcVoH5CGpZ1eF0nj7YAYAED+\/QAAAQEICp1m\/fadZv32R0VUIC90ZXN0LmNnaSBIVFRQLzEuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":486,"flow_packet_id":1,"flow_first_seen":1576420277454,"flow_last_seen":1576420277454,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50536,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":487,"flow_packet_id":1,"flow_first_seen":1576420277455,"flow_last_seen":1576420277455,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50538,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":487,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENkNNAAEAGqxV\/AAABfwAAAcVqH5AR5agGdIx514AYAED\/AQAAAQEICp1m\/fedZv33R0VUIC90ZXN0X2NnaS5waHAgSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":487,"flow_packet_id":1,"flow_first_seen":1576420277455,"flow_last_seen":1576420277455,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50538,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test_cgi.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":488,"flow_packet_id":1,"flow_first_seen":1576420277458,"flow_last_seen":1576420277458,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50540,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":488,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":283,"pkt":"AAAAAAAAAAAAAAAACABFAAENOM9AAEAGAxp\/AAABfwAAAcVsH5CGwwAaI+XJXIAYAED\/AQAAAQEICp1m\/fqdZv36R0VUIC90ZXN0LmNnaS5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":488,"flow_packet_id":1,"flow_first_seen":1576420277458,"flow_last_seen":1576420277458,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50540,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.cgi.php","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":489,"flow_packet_id":1,"flow_first_seen":1576420277459,"flow_last_seen":1576420277459,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50542,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":489,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEMfPpAAEAGvu9\/AAABfwAAAcVuH5CbL0QudOlGT4AYAED\/AAAAAQEICp1m\/fudZv37R0VUIC90ZXN0X2NnaS5wbCBIVFRQLzEuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":489,"flow_packet_id":1,"flow_first_seen":1576420277459,"flow_last_seen":1576420277459,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50542,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test_cgi.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":490,"flow_packet_id":1,"flow_first_seen":1576420277460,"flow_last_seen":1576420277460,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50544,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":490,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEMyD1AAEAGc6x\/AAABfwAAAcVwH5BPvfDvcLTsqIAYAED\/AAAAAQEICp1m\/fydZv38R0VUIC90ZXN0LWNnaS5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":490,"flow_packet_id":1,"flow_first_seen":1576420277460,"flow_last_seen":1576420277460,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50544,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test-cgi.pl","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":491,"flow_packet_id":1,"flow_first_seen":1576420277462,"flow_last_seen":1576420277462,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50546,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":491,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEIoLlAAEAGmzR\/AAABfwAAAcVyH5A1vJhjWIrHxIAYAED+\/AAAAQEICp1m\/f2dZv39R0VUIC90ZXN0LnB5IEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":491,"flow_packet_id":1,"flow_first_seen":1576420277462,"flow_last_seen":1576420277462,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50546,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.py","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":492,"flow_packet_id":1,"flow_first_seen":1576420277463,"flow_last_seen":1576420277463,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50548,"dst_port":8080,"l4_proto":"tcp"}
+0693{"flow_id":492,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEILLBAAEAGDz5\/AAABfwAAAcV0H5AN6xR8l7l+o4AYAED+\/AAAAQEICp1m\/f+dZv3+R0VUIC90ZXN0LnNoIEhUVFAvMS4xDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":492,"flow_packet_id":1,"flow_first_seen":1576420277463,"flow_last_seen":1576420277463,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50548,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/test.sh","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":493,"flow_packet_id":1,"flow_first_seen":1576420277464,"flow_last_seen":1576420277464,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50550,"dst_port":8080,"l4_proto":"tcp"}
+0701{"flow_id":493,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":284,"pkt":"AAAAAAAAAAAAAAAACABFAAEOUvlAAEAG6O5\/AAABfwAAAcV2H5BXVWoitNrsWoAYAED\/AgAAAQEICp1m\/gCdZv4AR0VUIC90bVVuYmxvY2suY2dpIEhUVFAvMS4xDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":284,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":493,"flow_packet_id":1,"flow_first_seen":1576420277464,"flow_last_seen":1576420277464,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50550,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/tmUnblock.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":494,"flow_packet_id":1,"flow_first_seen":1576420277465,"flow_last_seen":1576420277465,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50552,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":494,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEKgUVAAEAGuqZ\/AAABfwAAAcV4H5AZ0bmWzQ36cYAYAED+\/gAAAQEICp1m\/gGdZv4BR0VUIC91bmFtZS5jZ2kgSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpSZWZlcmVyOiAoKSB7IF87IH0gPl9bJCgkKCkpXSB7IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzg6IHRydWU7IGVjaG87ZWNobzsgfQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":494,"flow_packet_id":1,"flow_first_seen":1576420277465,"flow_last_seen":1576420277465,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50552,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/uname.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":495,"flow_packet_id":1,"flow_first_seen":1576420277466,"flow_last_seen":1576420277466,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50554,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":495,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":282,"pkt":"AAAAAAAAAAAAAAAACABFAAEM2vpAAEAGYO9\/AAABfwAAAcV6H5AtBOIv4uMLlYAYAED\/AAAAAQEICp1m\/gKdZv4CR0VUIC92aWV3Y3ZzLmNnaSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogKCkgeyA6OyB9OyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02MjcxOiB0cnVlO2VjaG87ZWNobzsNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":495,"flow_packet_id":1,"flow_first_seen":1576420277466,"flow_last_seen":1576420277466,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50554,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewcvs.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":496,"flow_packet_id":1,"flow_first_seen":1576420277467,"flow_last_seen":1576420277467,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50556,"dst_port":8080,"l4_proto":"tcp"}
+0694{"flow_id":496,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEITytAAEAG7MJ\/AAABfwAAAcV8H5BFlnf\/97sS7IAYAED+\/AAAAQEICp1m\/gOdZv4DR0VUIC93ZWxjb21lIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiAoKSB7IDo7IH07IGVjaG8gOTNlNHIwLUNWRS0yMDE0LTYyNzE6IHRydWU7ZWNobztlY2hvOw0KUmVmZXJlcjogKCkgeyBfOyB9ID5fWyQoJCgpKV0geyBlY2hvIDkzZTRyMC1DVkUtMjAxNC02Mjc4OiB0cnVlOyBlY2hvO2VjaG87IH0NCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":496,"flow_packet_id":1,"flow_first_seen":1576420277467,"flow_last_seen":1576420277467,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50556,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/welcome","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":497,"flow_packet_id":1,"flow_first_seen":1576420277469,"flow_last_seen":1576420277469,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50558,"dst_port":8080,"l4_proto":"tcp"}
+0697{"flow_id":497,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":280,"pkt":"AAAAAAAAAAAAAAAACABFAAEK4AFAAEAGW+p\/AAABfwAAAcV+H5B29+cpQb7It4AYAED+\/gAAAQEICp1m\/gWdZv4FR0VUIC93aG9pcy5jZ2kgSFRUUC8xLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":497,"flow_packet_id":1,"flow_first_seen":1576420277469,"flow_last_seen":1576420277469,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50558,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/whois.cgi","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":498,"flow_packet_id":1,"flow_first_seen":1576420277471,"flow_last_seen":1576420277471,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50560,"dst_port":8080,"l4_proto":"tcp"}
+0685{"flow_id":498,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":271,"pkt":"AAAAAAAAAAAAAAAACABFAAEB0rpAAEAGaTp\/AAABfwAAAcWAH5AE8+pw+\/3ZB4AYAED+9QAAAQEICp1m\/gedZv4HR0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6ICgpIHsgOjsgfTsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3MTogdHJ1ZTtlY2hvO2VjaG87DQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENClJlZmVyZXI6ICgpIHsgXzsgfSA+X1skKCQoKSldIHsgZWNobyA5M2U0cjAtQ1ZFLTIwMTQtNjI3ODogdHJ1ZTsgZWNobztlY2hvOyB9DQoNCg==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":498,"flow_packet_id":1,"flow_first_seen":1576420277471,"flow_last_seen":1576420277471,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50560,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"","user_agent":"() { :; }; echo 93e4r0-CVE-2014-6271: true;echo;echo;"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":499,"flow_packet_id":1,"flow_first_seen":1576420277473,"flow_last_seen":1576420277473,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50562,"dst_port":8080,"l4_proto":"tcp"}
+0648{"flow_id":499,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAADnqaNAAEAGkmt\/AAABfwAAAcWCH5DlqJF6VmPeaYAYAED+2wAAAQEICp1m\/gmdZv4JR0VUIC8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9ldGMvc2hhZG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpkaXNod2FzaGVyKQ0KDQo=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":499,"flow_packet_id":1,"flow_first_seen":1576420277473,"flow_last_seen":1576420277473,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50562,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/etc\/shadow","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:dishwasher)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":500,"flow_packet_id":1,"flow_first_seen":1576420277474,"flow_last_seen":1576420277474,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50564,"dst_port":8080,"l4_proto":"tcp"}
+0785{"flow_id":500,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":347,"pkt":"AAAAAAAAAAAAAAAACABFAAFN5cZAAEAGVeJ\/AAABfwAAAcWEH5A2eN0dBhBSM4AYAED\/QQAAAQEICp1m\/gqdZv4KR0VUIC8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1UeXBlOiAleyNjb250ZXh0Wydjb20ub3BlbnN5bXBob255Lnh3b3JrMi5kaXNwYXRjaGVyLkh0dHBTZXJ2bGV0UmVzcG9uc2UnXS5hZGRIZWFkZXIoJ05pa3RvLUFkZGVkLUNWRS0yMDE3LTU2MzgnLDcqNil9Lm11bHRpcGFydC9mb3JtLWRhdGENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDpzdHJ1dHNob2NrKQ0KDQo=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0894{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":500,"flow_packet_id":1,"flow_first_seen":1576420277474,"flow_last_seen":1576420277474,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50564,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/","code":0,"content_type":"%{#context['com.opensymphony.xwork2.dispatcher.HttpServletResponse'].addHeader('Nikto-Added-CVE-2017-5638',7*6)}.multipart\/form-data","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:strutshock)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":501,"flow_packet_id":1,"flow_first_seen":1576420277477,"flow_last_seen":1576420277477,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50566,"dst_port":8080,"l4_proto":"tcp"}
+0801{"flow_id":501,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":359,"pkt":"AAAAAAAAAAAAAAAACABFAAFZtP1AAEAGhp9\/AAABfwAAAcWGH5CUg4wjlAViUYAYAED\/TQAAAQEICp1m\/g2dZv4NR0VUIC9pbmRleC5hY3Rpb24gSFRUUC8xLjENCkNvbnRlbnQtVHlwZTogJXsjY29udGV4dFsnY29tLm9wZW5zeW1waG9ueS54d29yazIuZGlzcGF0Y2hlci5IdHRwU2VydmxldFJlc3BvbnNlJ10uYWRkSGVhZGVyKCdOaWt0by1BZGRlZC1DVkUtMjAxNy01NjM4Jyw3KjYpfS5tdWx0aXBhcnQvZm9ybS1kYXRhDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6c3RydXRzaG9jaykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0906{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":501,"flow_packet_id":1,"flow_first_seen":1576420277477,"flow_last_seen":1576420277477,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50566,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.action","code":0,"content_type":"%{#context['com.opensymphony.xwork2.dispatcher.HttpServletResponse'].addHeader('Nikto-Added-CVE-2017-5638',7*6)}.multipart\/form-data","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:strutshock)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":502,"flow_packet_id":1,"flow_first_seen":1576420277478,"flow_last_seen":1576420277478,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50568,"dst_port":8080,"l4_proto":"tcp"}
+0801{"flow_id":502,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":359,"pkt":"AAAAAAAAAAAAAAAACABFAAFZjkpAAEAGrVJ\/AAABfwAAAcWIH5BLo7aS1iADwIAYAED\/TQAAAQEICp1m\/g6dZv4OR0VUIC9sb2dpbi5hY3Rpb24gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OnN0cnV0c2hvY2spDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6ICV7I2NvbnRleHRbJ2NvbS5vcGVuc3ltcGhvbnkueHdvcmsyLmRpc3BhdGNoZXIuSHR0cFNlcnZsZXRSZXNwb25zZSddLmFkZEhlYWRlcignTmlrdG8tQWRkZWQtQ1ZFLTIwMTctNTYzOCcsNyo2KX0ubXVsdGlwYXJ0L2Zvcm0tZGF0YQ0KDQo=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0906{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":502,"flow_packet_id":1,"flow_first_seen":1576420277478,"flow_last_seen":1576420277478,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50568,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.action","code":0,"content_type":"%{#context['com.opensymphony.xwork2.dispatcher.HttpServletResponse'].addHeader('Nikto-Added-CVE-2017-5638',7*6)}.multipart\/form-data","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:strutshock)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":503,"flow_packet_id":1,"flow_first_seen":1576420277480,"flow_last_seen":1576420277480,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50570,"dst_port":8080,"l4_proto":"tcp"}
+0588{"flow_id":503,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":200,"pkt":"AAAAAAAAAAAAAAAACABFAAC6N0ZAAEAGBPZ\/AAABfwAAAcWKH5D5Xg+fNMDiFYAYAED+rgAAAQEICp1m\/hCdZv4QR0VUIC92Mi9fY2F0YWxvZyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":503,"flow_packet_id":1,"flow_first_seen":1576420277480,"flow_last_seen":1576420277480,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50570,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/v2\/_catalog","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":504,"flow_packet_id":1,"flow_first_seen":1576420277488,"flow_last_seen":1576420277488,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50572,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":504,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHoFdAAEAGm9d\/AAABfwAAAcWMH5DDZpiKMo58\/IAYAED+uwAAAQEICp1m\/hidZv4YR0VUIC9jZmFwcG1hbi9pbmRleC5jZm0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxMykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":504,"flow_packet_id":1,"flow_first_seen":1576420277488,"flow_last_seen":1576420277488,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50572,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfappman\/index.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000013)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":505,"flow_packet_id":1,"flow_first_seen":1576420277490,"flow_last_seen":1576420277490,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50574,"dst_port":8080,"l4_proto":"tcp"}
+0628{"flow_id":505,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":231,"pkt":"AAAAAAAAAAAAAAAACABFAADZlJRAAEAGp4h\/AAABfwAAAcWOH5DTxKxPH2zSx4AYAED+zQAAAQEICp1m\/hqdZv4aR0VUIC9jZmRvY3MvZXhhbXBsZXMvY3ZiZWFucy9iZWFuaW5mby5jZm0gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxNCkNCg0K","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":505,"flow_packet_id":1,"flow_first_seen":1576420277490,"flow_last_seen":1576420277490,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50574,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfdocs\/examples\/cvbeans\/beaninfo.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000014)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":506,"flow_packet_id":1,"flow_first_seen":1576420277491,"flow_last_seen":1576420277491,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50576,"dst_port":8080,"l4_proto":"tcp"}
+0625{"flow_id":506,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":227,"pkt":"AAAAAAAAAAAAAAAACABFAADVNLZAAEAGB2t\/AAABfwAAAcWQH5BQIAxp\/aIKGoAYAED+yQAAAQEICp1m\/hudZv4bR0VUIC9jZmRvY3MvZXhhbXBsZXMvcGFya3MvZGV0YWlsLmNmbSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxNSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":506,"flow_packet_id":1,"flow_first_seen":1576420277491,"flow_last_seen":1576420277491,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50576,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfdocs\/examples\/parks\/detail.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000015)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":507,"flow_packet_id":1,"flow_first_seen":1576420277492,"flow_last_seen":1576420277492,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50578,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":507,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":202,"pkt":"AAAAAAAAAAAAAAAACABFAAC8BNZAAEAGN2R\/AAABfwAAAcWSH5DUDzwKrTgLpoAYAED+sAAAAQEICp1m\/hydZv4cR0VUIC9rYm9hcmQvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDE2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":507,"flow_packet_id":1,"flow_first_seen":1576420277492,"flow_last_seen":1576420277492,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50578,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/kboard\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000016)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":508,"flow_packet_id":1,"flow_first_seen":1576420277495,"flow_last_seen":1576420277495,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50580,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":508,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBe7BAAEAGwIR\/AAABfwAAAcWUH5BTWUN0U4buRIAYAED+tQAAAQEICp1m\/h6dZv4eR0VUIC9saXN0cy9hZG1pbi8gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxNykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":508,"flow_packet_id":1,"flow_first_seen":1576420277495,"flow_last_seen":1576420277495,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50580,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/lists\/admin\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000017)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":509,"flow_packet_id":1,"flow_first_seen":1576420277496,"flow_last_seen":1576420277496,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50582,"dst_port":8080,"l4_proto":"tcp"}
+0600{"flow_id":509,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEE4xAAEAGKKZ\/AAABfwAAAcWWH5AfSitVmmsDJoAYAED+uAAAAQEICp1m\/iCdZv4gR0VUIC9zcGxhc2hBZG1pbi5waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAxOCkNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":509,"flow_packet_id":1,"flow_first_seen":1576420277496,"flow_last_seen":1576420277496,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50582,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/splashAdmin.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000018)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":510,"flow_packet_id":1,"flow_first_seen":1576420277497,"flow_last_seen":1576420277497,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50584,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":510,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":202,"pkt":"AAAAAAAAAAAAAAAACABFAAC8mG1AAEAGo8x\/AAABfwAAAcWYH5Bl4KC2nOMxboAYAED+sAAAAQEICp1m\/iGdZv4hR0VUIC9zc2RlZnMvIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDE5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":510,"flow_packet_id":1,"flow_first_seen":1576420277497,"flow_last_seen":1576420277497,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50584,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ssdefs\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000019)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":511,"flow_packet_id":1,"flow_first_seen":1576420277498,"flow_last_seen":1576420277498,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50586,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":511,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":202,"pkt":"AAAAAAAAAAAAAAAACABFAAC88otAAEAGSa5\/AAABfwAAAcWaH5CxdspY+6ys9YAYAED+sAAAAQEICp1m\/iKdZv4iR0VUIC9zc2hvbWUvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDIwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":511,"flow_packet_id":1,"flow_first_seen":1576420277498,"flow_last_seen":1576420277498,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50586,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/sshome\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000020)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":512,"flow_packet_id":1,"flow_first_seen":1576420277499,"flow_last_seen":1576420277499,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50588,"dst_port":8080,"l4_proto":"tcp"}
+0588{"flow_id":512,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":200,"pkt":"AAAAAAAAAAAAAAAACABFAAC61XNAAEAGZsh\/AAABfwAAAcWcH5BK5u2wb4yQmIAYAED+rgAAAQEICp1m\/iOdZv4jR0VUIC90aWtpLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDIxKQ0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":512,"flow_packet_id":1,"flow_first_seen":1576420277499,"flow_last_seen":1576420277499,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50588,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/tiki\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000021)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":513,"flow_packet_id":1,"flow_first_seen":1576420277500,"flow_last_seen":1576420277500,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50590,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":513,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKj49AAEAGrJx\/AAABfwAAAcWeH5BxerdT3YbEDoAYAED+vgAAAQEICp1m\/iSdZv4kR0VUIC90aWtpL3Rpa2ktaW5zdGFsbC5waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDAyMikNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":513,"flow_packet_id":1,"flow_first_seen":1576420277500,"flow_last_seen":1576420277500,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50590,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/tiki\/tiki-install.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000022)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":514,"flow_packet_id":1,"flow_first_seen":1576420277501,"flow_last_seen":1576420277501,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50592,"dst_port":8080,"l4_proto":"tcp"}
+0616{"flow_id":514,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":222,"pkt":"AAAAAAAAAAAAAAAACABFAADQ2RZAAEAGYw9\/AAABfwAAAcWgH5BlMeHM00k6b4AYAED+xAAAAQEICp1m\/iWdZv4lR0VUIC9zY3JpcHRzL3NhbXBsZXMvZGV0YWlscy5pZGMgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAwMjMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":514,"flow_packet_id":1,"flow_first_seen":1576420277501,"flow_last_seen":1576420277501,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50592,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/samples\/details.idc","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000023)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":515,"flow_packet_id":1,"flow_first_seen":1576420277503,"flow_last_seen":1576420277503,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":223,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50594,"dst_port":8080,"l4_proto":"tcp"}
+0664{"flow_id":515,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":257,"pkt":"AAAAAAAAAAAAAAAACABFAADzlctAAEAGpjd\/AAABfwAAAcWiH5BEoK0q6pkm3YAYAED+5wAAAQEICp1m\/iedZv4nR0VUIC9mb3J1bWRpc3BsYXkucGhwP0dMT0JBTFNcW1xdPTEmZj0yJmNvbW1hPVwiLnN5c3RlbVwoJ2lkJ1wpXC5cIiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDA3MCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":515,"flow_packet_id":1,"flow_first_seen":1576420277503,"flow_last_seen":1576420277503,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":223,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50594,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forumdisplay.php?GLOBALS\\[\\]=1&f=2&comma=\\\".system\\('id'\\)\\.\\\"","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000070)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":516,"flow_packet_id":1,"flow_first_seen":1576420277505,"flow_last_seen":1576420277505,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50596,"dst_port":8080,"l4_proto":"tcp"}
+0613{"flow_id":516,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":219,"pkt":"AAAAAAAAAAAAAAAACABFAADNh+tAAEAGtD1\/AAABfwAAAcWkH5AZpL8K5\/crh4AYAED+wQAAAQEICp1m\/imdZv4oR0VUIC9ndWVzdGJvb2svZ3Vlc3Rib29rLmh0bWwgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAwNzEpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":516,"flow_packet_id":1,"flow_first_seen":1576420277505,"flow_last_seen":1576420277505,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50596,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/guestbook\/guestbook.html","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000071)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":517,"flow_packet_id":1,"flow_first_seen":1576420277506,"flow_last_seen":1576420277506,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50598,"dst_port":8080,"l4_proto":"tcp"}
+0620{"flow_id":517,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":224,"pkt":"AAAAAAAAAAAAAAAACABFAADSOPFAAEAGAzN\/AAABfwAAAcWmH5AZrAAQDbKHy4AYAED+xgAAAQEICp1m\/iqdZv4qR0VUIC9odG1sL2NnaS1iaW4vY2dpY3NvP3F1ZXJ5PUFBQSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMDcyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":517,"flow_packet_id":1,"flow_first_seen":1576420277506,"flow_last_seen":1576420277506,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50598,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/html\/cgi-bin\/cgicso?query=AAA","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000072)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":518,"flow_packet_id":1,"flow_first_seen":1576420277509,"flow_last_seen":1576420277509,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50600,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":518,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":212,"pkt":"AAAAAAAAAAAAAAAACABFAADGjRRAAEAGrxt\/AAABfwAAAcWoH5A27bX0CottMYAYAED+ugAAAQEICp1m\/i2dZv4sR0VUIC9iYi1kbmJkL2ZheHN1cnZleSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDE0MikNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":518,"flow_packet_id":1,"flow_first_seen":1576420277509,"flow_last_seen":1576420277509,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50600,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/bb-dnbd\/faxsurvey","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000142)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":519,"flow_packet_id":1,"flow_first_seen":1576420277510,"flow_last_seen":1576420277510,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50602,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":519,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBP59AAEAG\/JV\/AAABfwAAAcWqH5D7oQd9r6h8pYAYAED+tQAAAQEICp1m\/i6dZv4uR0VUIC9jYXJ0Y2FydC5jZ2kgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAxNDMpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":519,"flow_packet_id":1,"flow_first_seen":1576420277510,"flow_last_seen":1576420277510,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50602,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cartcart.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000143)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":520,"flow_packet_id":1,"flow_first_seen":1576420277512,"flow_last_seen":1576420277512,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50604,"dst_port":8080,"l4_proto":"tcp"}
+0616{"flow_id":520,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":222,"pkt":"AAAAAAAAAAAAAAAACABFAADQQ2ZAAEAG+L9\/AAABfwAAAcWsH5AIFXuH0ihJCIAYAED+xAAAAQEICp1m\/i+dZv4vR0VUIC9zY3JpcHRzL0NhcmVsbG8vQ2FyZWxsby5kbGwgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAxNDQpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":520,"flow_packet_id":1,"flow_first_seen":1576420277512,"flow_last_seen":1576420277512,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50604,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/Carello\/Carello.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000144)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":521,"flow_packet_id":1,"flow_first_seen":1576420277513,"flow_last_seen":1576420277513,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50606,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":521,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9L\/9AAEAGDDp\/AAABfwAAAcWuH5CdEhcgbNGBkoAYAED+sQAAAQEICp1m\/jGdZv4xR0VUIC93LWFnb3JhLyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDE4MykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":521,"flow_packet_id":1,"flow_first_seen":1576420277513,"flow_last_seen":1576420277513,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50606,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/w-agora\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000183)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":522,"flow_packet_id":1,"flow_first_seen":1576420277515,"flow_last_seen":1576420277515,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50608,"dst_port":8080,"l4_proto":"tcp"}
+0632{"flow_id":522,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":234,"pkt":"AAAAAAAAAAAAAAAACABFAADcMJVAAEAGC4V\/AAABfwAAAcWwH5AAUQhya1uvboAYAED+0AAAAQEICp1m\/jOdZv4zR0VUIC9jZ2ktbG9jYWwvY2dpZW1haWwtMS42L2NnaWNzbz9xdWVyeT1BQUEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAzNDQpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":522,"flow_packet_id":1,"flow_first_seen":1576420277515,"flow_last_seen":1576420277515,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50608,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-local\/cgiemail-1.6\/cgicso?query=AAA","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000344)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":523,"flow_packet_id":1,"flow_first_seen":1576420277516,"flow_last_seen":1576420277516,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50610,"dst_port":8080,"l4_proto":"tcp"}
+0616{"flow_id":523,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADO6rNAAEAGUXR\/AAABfwAAAcWyH5BduNJTZLl5JoAYAED+wgAAAQEICp1m\/jSdZv40R0VUIC9zZXJ2bGV0L1NjaGVkdWxlclRyYW5zZmVyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDAzNDUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":523,"flow_packet_id":1,"flow_first_seen":1576420277516,"flow_last_seen":1576420277516,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50610,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/servlet\/SchedulerTransfer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000345)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":524,"flow_packet_id":1,"flow_first_seen":1576420277518,"flow_last_seen":1576420277518,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50612,"dst_port":8080,"l4_proto":"tcp"}
+0624{"flow_id":524,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":228,"pkt":"AAAAAAAAAAAAAAAACABFAADWgsZAAEAGuVl\/AAABfwAAAcW0H5A6eLoo9CriDoAYAED+ygAAAQEICp1m\/jWdZv41R0VUIC9zZXJ2bGV0L3N1bmV4YW1wbGVzLkJCb2FyZFNlcnZsZXQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDM0NikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":524,"flow_packet_id":1,"flow_first_seen":1576420277518,"flow_last_seen":1576420277518,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50612,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/servlet\/sunexamples.BBoardServlet","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000346)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":525,"flow_packet_id":1,"flow_first_seen":1576420277519,"flow_last_seen":1576420277519,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50614,"dst_port":8080,"l4_proto":"tcp"}
+0617{"flow_id":525,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":221,"pkt":"AAAAAAAAAAAAAAAACABFAADPVxFAAEAG5RV\/AAABfwAAAcW2H5BSXG\/tRc4oyoAYAED+wwAAAQEICp1m\/jedZv43R0VUIC9zZXJ2bGV0cy9TY2hlZHVsZXJUcmFuc2ZlciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDM0NykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":525,"flow_packet_id":1,"flow_first_seen":1576420277519,"flow_last_seen":1576420277519,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50614,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/servlets\/SchedulerTransfer","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000347)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":526,"flow_packet_id":1,"flow_first_seen":1576420277520,"flow_last_seen":1576420277520,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":184,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":184,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50616,"dst_port":8080,"l4_proto":"tcp"}
+0612{"flow_id":526,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":218,"pkt":"AAAAAAAAAAAAAAAACABFAADMFYpAAEAGJqB\/AAABfwAAAcW4H5AzUC1t6XmH4oAYAED+wAAAAQEICp1m\/jidZv44R0VUIC9wZXJsLy1lJTIwcHJpbnQlMjBIZWxsbyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwMzUyKQ0KDQo=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":526,"flow_packet_id":1,"flow_first_seen":1576420277520,"flow_last_seen":1576420277520,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":184,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":184,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50616,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/perl\/-e%20print%20Hello","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000352)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":527,"flow_packet_id":1,"flow_first_seen":1576420277522,"flow_last_seen":1576420277522,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50618,"dst_port":8080,"l4_proto":"tcp"}
+0629{"flow_id":527,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":230,"pkt":"AAAAAAAAAAAAAAAACABFAADYfsdAAEAGvVZ\/AAABfwAAAcW6H5DDSkYijR1boIAYAED+zAAAAQEICp1m\/jqdZv46R0VUIC9jL3dpbm50L3N5c3RlbTMyL2NtZC5leGU\/L2MrZGlyKy9PRyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDQ5MSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":527,"flow_packet_id":1,"flow_first_seen":1576420277522,"flow_last_seen":1576420277522,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50618,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/c\/winnt\/system32\/cmd.exe?\/c+dir+\/OG","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000491)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":528,"flow_packet_id":1,"flow_first_seen":1576420277525,"flow_last_seen":1576420277525,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50620,"dst_port":8080,"l4_proto":"tcp"}
+0676{"flow_id":528,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":266,"pkt":"AAAAAAAAAAAAAAAACABFAAD8VQBAAEAG5vl\/AAABfwAAAcW8H5BNImwcgJPNrYAYAED+8AAAAQEICp1m\/j2dZv48R0VUIC9tc2FkYy8uLiUyNTVjLi4vLi4lMjU1Yy4uLy4uJTI1NWMuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpcitjOiU1YyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwNDk0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":528,"flow_packet_id":1,"flow_first_seen":1576420277525,"flow_last_seen":1576420277525,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50620,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%255c..\/..%255c..\/..%255c..\/winnt\/system32\/cmd.exe?\/c+dir+c:%5c","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000494)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":529,"flow_packet_id":1,"flow_first_seen":1576420277526,"flow_last_seen":1576420277526,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50622,"dst_port":8080,"l4_proto":"tcp"}
+0676{"flow_id":529,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":266,"pkt":"AAAAAAAAAAAAAAAACABFAAD8wPBAAEAGewl\/AAABfwAAAcW+H5C+lvgMjxfu9IAYAED+8AAAAQEICp1m\/j6dZv4+R0VUIC9tc2FkYy8uLiUyNTVjLi4vLi4lMjU1Yy4uLy4uJTI1NWMuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpcitjOiU1YyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMDQ5NSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":529,"flow_packet_id":1,"flow_first_seen":1576420277526,"flow_last_seen":1576420277526,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50622,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%255c..\/..%255c..\/..%255c..\/winnt\/system32\/cmd.exe?\/c+dir+c:%5c","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000495)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":530,"flow_packet_id":1,"flow_first_seen":1576420277527,"flow_last_seen":1576420277527,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50624,"dst_port":8080,"l4_proto":"tcp"}
+0617{"flow_id":530,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADOGxtAAEAGIQ1\/AAABfwAAAcXAH5ABqiP992RjDoAYAED+wgAAAQEICp1m\/j+dZv4\/R0VUIC9tc2FkYy9zYW1wbGVzL2FkY3Rlc3QuYXNwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAwNDk2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":530,"flow_packet_id":1,"flow_first_seen":1576420277527,"flow_last_seen":1576420277527,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50624,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/samples\/adctest.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000496)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":531,"flow_packet_id":1,"flow_first_seen":1576420277528,"flow_last_seen":1576420277528,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50626,"dst_port":8080,"l4_proto":"tcp"}
+0637{"flow_id":531,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":235,"pkt":"AAAAAAAAAAAAAAAACABFAADdW\/pAAEAG4B5\/AAABfwAAAcXCH5D1lWMf6eFgloAYAED+0QAAAQEICp1m\/kCdZv5AR0VUIC9hdGhlbmFyZWcucGhwP3Bhc3M9JTIwO2NhdCUyMC9ldGMvcGFzc3dkIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDA2NjcpDQoNCg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":531,"flow_packet_id":1,"flow_first_seen":1576420277528,"flow_last_seen":1576420277528,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50626,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/athenareg.php?pass=%20;cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:000667)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":532,"flow_packet_id":1,"flow_first_seen":1576420277534,"flow_last_seen":1576420277534,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50628,"dst_port":8080,"l4_proto":"tcp"}
+0616{"flow_id":532,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":220,"pkt":"AAAAAAAAAAAAAAAACABFAADO4OJAAEAGW0V\/AAABfwAAAcXEH5B2FdgIExVLAoAYAED+wgAAAQEICp1m\/kWdZv5FR0VUIC9jZC1jZ2kvc3NjZF9zdW5jb3VyaWVyLnBsIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDY3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":532,"flow_packet_id":1,"flow_first_seen":1576420277534,"flow_last_seen":1576420277534,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50628,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cd-cgi\/sscd_suncourier.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001067)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":533,"flow_packet_id":1,"flow_first_seen":1576420277535,"flow_last_seen":1576420277535,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50630,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":533,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":210,"pkt":"AAAAAAAAAAAAAAAACABFAADEalJAAEAG0d9\/AAABfwAAAcXGH5Ak\/VK4qoIqcIAYAED+uAAAAQEICp1m\/kedZv5HR0VUIC9jZ2ktYmluL2hhbmRsZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTA2OSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":533,"flow_packet_id":1,"flow_first_seen":1576420277535,"flow_last_seen":1576420277535,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50630,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/handler","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001069)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":534,"flow_packet_id":1,"flow_first_seen":1576420277536,"flow_last_seen":1576420277536,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50632,"dst_port":8080,"l4_proto":"tcp"}
+0656{"flow_id":534,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":250,"pkt":"AAAAAAAAAAAAAAAACABFAADsKwtAAEAGEP9\/AAABfwAAAcXIH5DuMhPiKIF7BYAYAED+4AAAAQEICp1m\/kidZv5IR0VUIC9jZ2ktYmluL2hhbmRsZXIvbmV0c29uYXI7Y2F0IC9ldGMvcGFzc3dkfD9kYXRhPURvd25sb2FkIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDcwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":534,"flow_packet_id":1,"flow_first_seen":1576420277536,"flow_last_seen":1576420277536,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50632,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/handler\/netsonar;cat \/etc\/passwd|?data=Download","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001070)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":535,"flow_packet_id":1,"flow_first_seen":1576420277537,"flow_last_seen":1576420277537,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50634,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":535,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIaaFAAEAG0ox\/AAABfwAAAcXKH5CUxlF4c7zrSYAYAED+vAAAAQEICp1m\/kmdZv5JR0VUIC9jZ2ktYmluL3dlYmRpc3QuY2dpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEwNzEpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":535,"flow_packet_id":1,"flow_first_seen":1576420277537,"flow_last_seen":1576420277537,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50634,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/webdist.cgi","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001071)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":536,"flow_packet_id":1,"flow_first_seen":1576420277538,"flow_last_seen":1576420277538,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50636,"dst_port":8080,"l4_proto":"tcp"}
+0612{"flow_id":536,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":217,"pkt":"AAAAAAAAAAAAAAAACABFAADL1l9AAEAGZct\/AAABfwAAAcXMH5AhiO62DmMqh4AYAED+vwAAAQEICp1m\/kqdZv5KR0VUIC9EQjRXZWIvMTAuMTAuMTAuMTA6MTAwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEwNzIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":536,"flow_packet_id":1,"flow_first_seen":1576420277538,"flow_last_seen":1576420277538,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50636,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/DB4Web\/10.10.10.10:100","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001072)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":537,"flow_packet_id":1,"flow_first_seen":1576420277540,"flow_last_seen":1576420277540,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50638,"dst_port":8080,"l4_proto":"tcp"}
+0617{"flow_id":537,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":221,"pkt":"AAAAAAAAAAAAAAAACABFAADPftlAAEAGvU1\/AAABfwAAAcXOH5DRSkY\/0jWbSIAYAED+wwAAAQEICp1m\/kydZv5MR0VUIC9ld3MvZXdzL2FyY2hpdGV4dF9xdWVyeS5wbCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDczKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":537,"flow_packet_id":1,"flow_first_seen":1576420277540,"flow_last_seen":1576420277540,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50638,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ews\/ews\/architext_query.pl","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001073)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":538,"flow_packet_id":1,"flow_first_seen":1576420277543,"flow_last_seen":1576420277543,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50640,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":538,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI031AAEAGaLB\/AAABfwAAAcXQH5AqpOuTqUte6oAYAED+vAAAAQEICp1m\/k+dZv5OR0VUIC9leGVjL3Nob3cvY29uZmlnL2NyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMDc0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":538,"flow_packet_id":1,"flow_first_seen":1576420277543,"flow_last_seen":1576420277543,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50640,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/exec\/show\/config\/cr","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001074)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":539,"flow_packet_id":1,"flow_first_seen":1576420277544,"flow_last_seen":1576420277544,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50642,"dst_port":8080,"l4_proto":"tcp"}
+0616{"flow_id":539,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":221,"pkt":"AAAAAAAAAAAAAAAACABFAADPHndAAEAGHbB\/AAABfwAAAcXSH5BxSyag9dSEBYAYAED+wwAAAQEICp1m\/lCdZv5QR0VUIC9pbnN0YW50d2VibWFpbC9tZXNzYWdlLnBocCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTA3NSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":539,"flow_packet_id":1,"flow_first_seen":1576420277544,"flow_last_seen":1576420277544,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50642,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/instantwebmail\/message.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001075)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":540,"flow_packet_id":1,"flow_first_seen":1576420277546,"flow_last_seen":1576420277546,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50644,"dst_port":8080,"l4_proto":"tcp"}
+0628{"flow_id":540,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":231,"pkt":"AAAAAAAAAAAAAAAACABFAADZI0FAAEAGGNx\/AAABfwAAAcXUH5D0qBvWdLImZ4AYAED+zQAAAQEICp1m\/lGdZv5RR0VUIC9jZmRvY3Mvc25pcHBldHMvZ2V0dGVtcGRpcmVjdG9yeS5jZm0gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEwNzYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":540,"flow_packet_id":1,"flow_first_seen":1576420277546,"flow_last_seen":1576420277546,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50644,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cfdocs\/snippets\/gettempdirectory.cfm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001076)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":541,"flow_packet_id":1,"flow_first_seen":1576420277547,"flow_last_seen":1576420277547,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50646,"dst_port":8080,"l4_proto":"tcp"}
+0620{"flow_id":541,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":225,"pkt":"AAAAAAAAAAAAAAAACABFAADT6e9AAEAGUjN\/AAABfwAAAcXWH5DaBdEHtMEbgIAYAED+xwAAAQEICp1m\/lOdZv5TR0VUIC9kb3N0dWZmLnBocD9hY3Rpb249bW9kaWZ5X3VzZXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTA5MSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":541,"flow_packet_id":1,"flow_first_seen":1576420277547,"flow_last_seen":1576420277547,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50646,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/dostuff.php?action=modify_user","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001091)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":542,"flow_packet_id":1,"flow_first_seen":1576420277549,"flow_last_seen":1576420277549,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":542,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIKVFAAEAGEt1\/AAABfwAAAcXYH5AE3RGlWDKVx4AYAED+vAAAAQEICp1m\/lWdZv5VR0VUIC9sb2dqYW0vc2hvd2hpdHMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTU3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":542,"flow_packet_id":1,"flow_first_seen":1576420277549,"flow_last_seen":1576420277549,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/logjam\/showhits.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001157)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":543,"flow_packet_id":1,"flow_first_seen":1576420277550,"flow_last_seen":1576420277550,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50650,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":543,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":205,"pkt":"AAAAAAAAAAAAAAAACABFAAC\/wwtAAEAGeSt\/AAABfwAAAcXaH5CLi\/vjqeJa6IAYAED+swAAAQEICp1m\/ladZv5WR0VUIC9tYW51YWwucGhwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNTgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":543,"flow_packet_id":1,"flow_first_seen":1576420277550,"flow_last_seen":1576420277550,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50650,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/manual.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001158)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":544,"flow_packet_id":1,"flow_first_seen":1576420277552,"flow_last_seen":1576420277552,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50652,"dst_port":8080,"l4_proto":"tcp"}
+0628{"flow_id":544,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":231,"pkt":"AAAAAAAAAAAAAAAACABFAADZ8pVAAEAGSYd\/AAABfwAAAcXcH5AUWcqAeMmTFYAYAED+zQAAAQEICp1m\/lidZv5YR0VUIC9tb2RzL2FwYWdlL2FwYWdlLmNnaT9mPWZpbGUuaHRtLnxpZHwgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNTkpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":544,"flow_packet_id":1,"flow_first_seen":1576420277552,"flow_last_seen":1576420277552,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50652,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/mods\/apage\/apage.cgi?f=file.htm.|id|","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001159)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":545,"flow_packet_id":1,"flow_first_seen":1576420277553,"flow_last_seen":1576420277553,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50654,"dst_port":8080,"l4_proto":"tcp"}
+0672{"flow_id":545,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":264,"pkt":"AAAAAAAAAAAAAAAACABFAAD6YiVAAEAG2dZ\/AAABfwAAAcXeH5DIEFrQ9+zWrIAYAED+7gAAAQEICp1m\/lmdZv5ZR0VUIC9tb2R1bGVzLnBocD9uYW1lPU5ldHdvcmtfVG9vbHMmZmlsZT1pbmRleCZmdW5jPXBpbmdfaG9zdCZoaW5wdXQ9JTNCaWQgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNjApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":545,"flow_packet_id":1,"flow_first_seen":1576420277553,"flow_last_seen":1576420277553,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50654,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001160)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":546,"flow_packet_id":1,"flow_first_seen":1576420277554,"flow_last_seen":1576420277554,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":235,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50656,"dst_port":8080,"l4_proto":"tcp"}
+0681{"flow_id":546,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":269,"pkt":"AAAAAAAAAAAAAAAACABFAAD\/xMZAAEAGdzB\/AAABfwAAAcXgH5A8ZfwprHRx4oAYAED+8wAAAQEICp1m\/lqdZv5aR0VUIC9udWtlL21vZHVsZXMucGhwP25hbWU9TmV0d29ya19Ub29scyZmaWxlPWluZGV4JmZ1bmM9cGluZ19ob3N0JmhpbnB1dD0lM0JpZCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTYxKQ0KDQo=","pkt_caplen":269,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":546,"flow_packet_id":1,"flow_first_seen":1576420277554,"flow_last_seen":1576420277554,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":235,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50656,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/nuke\/modules.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001161)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":547,"flow_packet_id":1,"flow_first_seen":1576420277556,"flow_last_seen":1576420277556,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50658,"dst_port":8080,"l4_proto":"tcp"}
+0640{"flow_id":547,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":240,"pkt":"AAAAAAAAAAAAAAAACABFAADi3pNAAEAGXYB\/AAABfwAAAcXiH5AliOZ9pOzTK4AYAED+1gAAAQEICp1m\/lydZv5cR0VUIC9wZXJsLy1lJTIwJTIyc3lzdGVtKCdjYXQlMjAvZXRjL3Bhc3N3ZCcpO1wlMjIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNjIpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":240,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":547,"flow_packet_id":1,"flow_first_seen":1576420277556,"flow_last_seen":1576420277556,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50658,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/perl\/-e%20%22system('cat%20\/etc\/passwd');\\%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001162)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":548,"flow_packet_id":1,"flow_first_seen":1576420277558,"flow_last_seen":1576420277558,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":236,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":236,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50660,"dst_port":8080,"l4_proto":"tcp"}
+0681{"flow_id":548,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":270,"pkt":"AAAAAAAAAAAAAAAACABFAAEAA3dAAEAGOH9\/AAABfwAAAcXkH5CI\/DuZGQJJI4AYAED+9AAAAQEICp1m\/l6dZv5eR0VUIC9waHBudWtlL2h0bWwvLnBocD9uYW1lPU5ldHdvcmtfVG9vbHMmZmlsZT1pbmRleCZmdW5jPXBpbmdfaG9zdCZoaW5wdXQ9JTNCaWQgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDExNjMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":548,"flow_packet_id":1,"flow_first_seen":1576420277558,"flow_last_seen":1576420277558,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":236,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":236,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50660,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpnuke\/html\/.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001163)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":549,"flow_packet_id":1,"flow_first_seen":1576420277560,"flow_last_seen":1576420277560,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50662,"dst_port":8080,"l4_proto":"tcp"}
+0684{"flow_id":549,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":272,"pkt":"AAAAAAAAAAAAAAAACABFAAECBD1AAEAGN7d\/AAABfwAAAcXmH5DeDzzWjlOxJoAYAED+9gAAAQEICp1m\/mCdZv5gR0VUIC9waHBudWtlL21vZHVsZXMucGhwP25hbWU9TmV0d29ya19Ub29scyZmaWxlPWluZGV4JmZ1bmM9cGluZ19ob3N0JmhpbnB1dD0lM0JpZCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":549,"flow_packet_id":1,"flow_first_seen":1576420277560,"flow_last_seen":1576420277560,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50662,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpnuke\/modules.php?name=Network_Tools&file=index&func=ping_host&hinput=%3Bid","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001164)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":550,"flow_packet_id":1,"flow_first_seen":1576420277561,"flow_last_seen":1576420277561,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50664,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":550,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFzD1AAEAGb\/N\/AAABfwAAAcXoH5BUiPTWm6mSyIAYAED+uQAAAQEICp1m\/mGdZv5hR0VUIC9Qcm9ncmFtJTIwRmlsZXMvIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":550,"flow_packet_id":1,"flow_first_seen":1576420277561,"flow_last_seen":1576420277561,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50664,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/Program%20Files\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001165)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":551,"flow_packet_id":1,"flow_first_seen":1576420277562,"flow_last_seen":1576420277562,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50666,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":551,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAFKZAAEAGJ5B\/AAABfwAAAcXqH5AjeyxLwwFcDYAYAED+tAAAAQEICp1m\/mKdZv5iR0VUIC9zbXNzZW5kLnBocCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY2KQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":551,"flow_packet_id":1,"flow_first_seen":1576420277562,"flow_last_seen":1576420277562,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50666,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/smssend.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001166)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":552,"flow_packet_id":1,"flow_first_seen":1576420277564,"flow_last_seen":1576420277564,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50668,"dst_port":8080,"l4_proto":"tcp"}
+0628{"flow_id":552,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":230,"pkt":"AAAAAAAAAAAAAAAACABFAADYoI5AAEAGm49\/AAABfwAAAcXsH5AgHJhkU1YzMYAYAED+zAAAAQEICp1m\/mOdZv5jR0VUIC9wbHMvc2ltcGxlZGFkL2FkbWluXy9kYWRlbnRyaWVzLmh0bSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMTY3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":552,"flow_packet_id":1,"flow_first_seen":1576420277564,"flow_last_seen":1576420277564,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50668,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pls\/simpledad\/admin_\/dadentries.htm","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001167)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":553,"flow_packet_id":1,"flow_first_seen":1576420277565,"flow_last_seen":1576420277565,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50670,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":553,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":216,"pkt":"AAAAAAAAAAAAAAAACABFAADKFqFAAEAGJYt\/AAABfwAAAcXuH5Ag7S5xgHE61oAYAED+vgAAAQEICp1m\/mWdZv5lR0VUIC9sZXZlbC8xNi9leGVjLy0vLy9wd2QgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI1MykNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":553,"flow_packet_id":1,"flow_first_seen":1576420277565,"flow_last_seen":1576420277565,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50670,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/-\/\/\/pwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001253)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":554,"flow_packet_id":1,"flow_first_seen":1576420277566,"flow_last_seen":1576420277566,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50672,"dst_port":8080,"l4_proto":"tcp"}
+0628{"flow_id":554,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":231,"pkt":"AAAAAAAAAAAAAAAACABFAADZY3pAAEAG2KJ\/AAABfwAAAcXwH5Bf2FuYp3IH4oAYAED+zQAAAQEICp1m\/madZv5mR0VUIC9sZXZlbC8xNi9leGVjLy0vLy9zaG93L2NvbmZpZ3VyYXRpb24gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNTQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":554,"flow_packet_id":1,"flow_first_seen":1576420277566,"flow_last_seen":1576420277566,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50672,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/-\/\/\/show\/configuration","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001254)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":555,"flow_packet_id":1,"flow_first_seen":1576420277567,"flow_last_seen":1576420277567,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50674,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":555,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9ybtAAEAGcn1\/AAABfwAAAcXyH5BbOPFKogxutoAYAED+sQAAAQEICp1m\/medZv5nR0VUIC9sZXZlbC8xNiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjU1KQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":555,"flow_packet_id":1,"flow_first_seen":1576420277567,"flow_last_seen":1576420277567,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50674,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001255)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":556,"flow_packet_id":1,"flow_first_seen":1576420277568,"flow_last_seen":1576420277568,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":556,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDBTJAAEAGNwF\/AAABfwAAAcX0H5Cobz3BWm\/3E4AYAED+twAAAQEICp1m\/midZv5oR0VUIC9sZXZlbC8xNi9leGVjLyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjU2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":556,"flow_packet_id":1,"flow_first_seen":1576420277568,"flow_last_seen":1576420277568,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001256)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":557,"flow_packet_id":1,"flow_first_seen":1576420277570,"flow_last_seen":1576420277570,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50678,"dst_port":8080,"l4_proto":"tcp"}
+0624{"flow_id":557,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":227,"pkt":"AAAAAAAAAAAAAAAACABFAADVrDFAAEAGj+9\/AAABfwAAAcX2H5DQ55TgYEZuMYAYAED+yQAAAQEICp1m\/mqdZv5qR0VUIC9sZXZlbC8xNi9leGVjLy9zaG93L2FjY2Vzcy1saXN0cyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI1NykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":557,"flow_packet_id":1,"flow_first_seen":1576420277570,"flow_last_seen":1576420277570,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50678,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/\/show\/access-lists","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001257)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":558,"flow_packet_id":1,"flow_first_seen":1576420277572,"flow_last_seen":1576420277572,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50680,"dst_port":8080,"l4_proto":"tcp"}
+0636{"flow_id":558,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":237,"pkt":"AAAAAAAAAAAAAAAACABFAADf3g5AAEAGXgh\/AAABfwAAAcX4H5Dm0Ob+nlg5uYAYAED+0wAAAQEICp1m\/mydZv5sR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L2NvbmZpZ3VyYXRpb24gSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI1OCkNCg0K","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":558,"flow_packet_id":1,"flow_first_seen":1576420277572,"flow_last_seen":1576420277572,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50680,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/configuration","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001258)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":559,"flow_packet_id":1,"flow_first_seen":1576420277574,"flow_last_seen":1576420277574,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50682,"dst_port":8080,"l4_proto":"tcp"}
+0632{"flow_id":559,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":234,"pkt":"AAAAAAAAAAAAAAAACABFAADcDd9AAEAGLjt\/AAABfwAAAcX6H5DZiDUt3Agrh4AYAED+0AAAAQEICp1m\/m6dZv5uR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L2ludGVyZmFjZXMgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":559,"flow_packet_id":1,"flow_first_seen":1576420277574,"flow_last_seen":1576420277574,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50682,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/interfaces","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001259)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":560,"flow_packet_id":1,"flow_first_seen":1576420277575,"flow_last_seen":1576420277575,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50684,"dst_port":8080,"l4_proto":"tcp"}
+0644{"flow_id":560,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":241,"pkt":"AAAAAAAAAAAAAAAACABFAADj4RhAAEAGWvp\/AAABfwAAAcX8H5B4Mdnl8T5RpIAYAED+1wAAAQEICp1m\/m+dZv5vR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L2ludGVyZmFjZXMvc3RhdHVzIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjApDQoNCg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":560,"flow_packet_id":1,"flow_first_seen":1576420277575,"flow_last_seen":1576420277575,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50684,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/interfaces\/status","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001260)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":561,"flow_packet_id":1,"flow_first_seen":1576420277577,"flow_last_seen":1576420277577,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50686,"dst_port":8080,"l4_proto":"tcp"}
+0628{"flow_id":561,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":231,"pkt":"AAAAAAAAAAAAAAAACABFAADZSeNAAEAG8jl\/AAABfwAAAcX+H5DfuHEUhorfS4AYAED+zQAAAQEICp1m\/nGdZv5xR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L3ZlcnNpb24gSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjEpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":561,"flow_packet_id":1,"flow_first_seen":1576420277577,"flow_last_seen":1576420277577,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50686,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/version","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001261)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":562,"flow_packet_id":1,"flow_first_seen":1576420277578,"flow_last_seen":1576420277578,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":227,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":227,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50688,"dst_port":8080,"l4_proto":"tcp"}
+0668{"flow_id":562,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":261,"pkt":"AAAAAAAAAAAAAAAACABFAAD3GI1AAEAGI3J\/AAABfwAAAcYAH5BPCyB6v01M8IAYAED+6wAAAQEICp1m\/nKdZv5yR0VUIC9sZXZlbC8xNi9sZXZlbC8xNi9leGVjLy9zaG93L3J1bm5pbmctY29uZmlnL2ludGVyZmFjZS9GYXN0RXRoZXJuZXQgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTI2MikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":562,"flow_packet_id":1,"flow_first_seen":1576420277578,"flow_last_seen":1576420277578,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":227,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":227,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50688,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/level\/16\/exec\/\/show\/running-config\/interface\/FastEthernet","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001262)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":563,"flow_packet_id":1,"flow_first_seen":1576420277580,"flow_last_seen":1576420277580,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50690,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":563,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIjaNAAEAGrop\/AAABfwAAAcYCH5DxgrVTaB5HZIAYAED+vAAAAQEICp1m\/nSdZv50R0VUIC9sZXZlbC8xNi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":563,"flow_packet_id":1,"flow_first_seen":1576420277580,"flow_last_seen":1576420277580,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50690,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/16\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001263)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":564,"flow_packet_id":1,"flow_first_seen":1576420277581,"flow_last_seen":1576420277581,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50692,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":564,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI2jFAAEAGYfx\/AAABfwAAAcYEH5BCjuLdnOtotYAYAED+vAAAAQEICp1m\/nWdZv51R0VUIC9sZXZlbC8xNy9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":564,"flow_packet_id":1,"flow_first_seen":1576420277581,"flow_last_seen":1576420277581,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50692,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/17\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001264)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":565,"flow_packet_id":1,"flow_first_seen":1576420277583,"flow_last_seen":1576420277583,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50694,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":565,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIW7pAAEAG4HN\/AAABfwAAAcYGH5CxzGNMmxSh6IAYAED+vAAAAQEICp1m\/nedZv53R0VUIC9sZXZlbC8xOC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjY1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":565,"flow_packet_id":1,"flow_first_seen":1576420277583,"flow_last_seen":1576420277583,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50694,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/18\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001265)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":566,"flow_packet_id":1,"flow_first_seen":1576420277584,"flow_last_seen":1576420277584,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50696,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":566,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIKRRAAEAGExp\/AAABfwAAAcYIH5CpMBHnxNoUUoAYAED+vAAAAQEICp1m\/nidZv54R0VUIC9sZXZlbC8xOS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjYpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":566,"flow_packet_id":1,"flow_first_seen":1576420277584,"flow_last_seen":1576420277584,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50696,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/19\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001266)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":567,"flow_packet_id":1,"flow_first_seen":1576420277586,"flow_last_seen":1576420277586,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50698,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":567,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIukpAAEAGgeN\/AAABfwAAAcYKH5AiT4K97CCbIYAYAED+vAAAAQEICp1m\/nqdZv56R0VUIC9sZXZlbC8yMC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjY3KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":567,"flow_packet_id":1,"flow_first_seen":1576420277586,"flow_last_seen":1576420277586,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50698,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/20\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001267)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":568,"flow_packet_id":1,"flow_first_seen":1576420277588,"flow_last_seen":1576420277588,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50700,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":568,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIUb5AAEAG6m9\/AAABfwAAAcYMH5BdL2lKom\/agYAYAED+vAAAAQEICp1m\/nydZv58R0VUIC9sZXZlbC8yMS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":568,"flow_packet_id":1,"flow_first_seen":1576420277588,"flow_last_seen":1576420277588,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50700,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/21\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001268)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":569,"flow_packet_id":1,"flow_first_seen":1576420277590,"flow_last_seen":1576420277590,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50702,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":569,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIMkhAAEAGCeZ\/AAABfwAAAcYOH5Ck4gq0tTkM3YAYAED+vAAAAQEICp1m\/n6dZv5+R0VUIC9sZXZlbC8yMi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNjkpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":569,"flow_packet_id":1,"flow_first_seen":1576420277590,"flow_last_seen":1576420277590,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50702,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/22\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001269)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":570,"flow_packet_id":1,"flow_first_seen":1576420277592,"flow_last_seen":1576420277592,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50704,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":570,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIGgdAAEAGIid\/AAABfwAAAcYQH5AVMSL0hIVMXoAYAED+vAAAAQEICp1m\/oCdZv5\/R0VUIC9sZXZlbC8yMy9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjcwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":570,"flow_packet_id":1,"flow_first_seen":1576420277592,"flow_last_seen":1576420277592,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50704,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/23\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001270)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":571,"flow_packet_id":1,"flow_first_seen":1576420277593,"flow_last_seen":1576420277593,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50706,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":571,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI3vBAAEAGXT1\/AAABfwAAAcYSH5AD6eYZLZCITIAYAED+vAAAAQEICp1m\/oGdZv6BR0VUIC9sZXZlbC8yNC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":571,"flow_packet_id":1,"flow_first_seen":1576420277593,"flow_last_seen":1576420277593,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50706,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/24\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001271)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":572,"flow_packet_id":1,"flow_first_seen":1576420277595,"flow_last_seen":1576420277595,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50708,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":572,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIjYJAAEAGrqt\/AAABfwAAAcYUH5BJPLV3Xqa0Y4AYAED+vAAAAQEICp1m\/oOdZv6DR0VUIC9sZXZlbC8yNS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":572,"flow_packet_id":1,"flow_first_seen":1576420277595,"flow_last_seen":1576420277595,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50708,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/25\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001272)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":573,"flow_packet_id":1,"flow_first_seen":1576420277597,"flow_last_seen":1576420277597,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50710,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":573,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI4QFAAEAGWyx\/AAABfwAAAcYWH5APltgJOmv38YAYAED+vAAAAQEICp1m\/oSdZv6ER0VUIC9sZXZlbC8yNi9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjczKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":573,"flow_packet_id":1,"flow_first_seen":1576420277597,"flow_last_seen":1576420277597,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50710,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/26\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001273)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":574,"flow_packet_id":1,"flow_first_seen":1576420277598,"flow_last_seen":1576420277598,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50712,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":574,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIuK1AAEAGg4B\/AAABfwAAAcYYH5AkxYBd7ezrAoAYAED+vAAAAQEICp1m\/oadZv6GR0VUIC9sZXZlbC8yNy9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzQpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":574,"flow_packet_id":1,"flow_first_seen":1576420277598,"flow_last_seen":1576420277598,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50712,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/27\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001274)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":575,"flow_packet_id":1,"flow_first_seen":1576420277600,"flow_last_seen":1576420277600,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50714,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":575,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIQiNAAEAG+gp\/AAABfwAAAcYaH5DTCnrawy0BcYAYAED+vAAAAQEICp1m\/oidZv6IR0VUIC9sZXZlbC8yOC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjc1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":575,"flow_packet_id":1,"flow_first_seen":1576420277600,"flow_last_seen":1576420277600,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50714,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/28\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001275)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":576,"flow_packet_id":1,"flow_first_seen":1576420277602,"flow_last_seen":1576420277602,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50716,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":576,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIalZAAEAG0dd\/AAABfwAAAcYcH5BVA1KtKWKiFYAYAED+vAAAAQEICp1m\/oqdZv6JR0VUIC9sZXZlbC8yOS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjc2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":576,"flow_packet_id":1,"flow_first_seen":1576420277602,"flow_last_seen":1576420277602,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50716,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/29\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001276)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":577,"flow_packet_id":1,"flow_first_seen":1576420277604,"flow_last_seen":1576420277604,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50718,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":577,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIeUZAAEAGwud\/AAABfwAAAcYeH5Dj\/UG+lxmHS4AYAED+vAAAAQEICp1m\/oudZv6LR0VUIC9sZXZlbC8zMC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":577,"flow_packet_id":1,"flow_first_seen":1576420277604,"flow_last_seen":1576420277604,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50718,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/30\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001277)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":578,"flow_packet_id":1,"flow_first_seen":1576420277607,"flow_last_seen":1576420277607,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50720,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":578,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADISctAAEAG8mJ\/AAABfwAAAcYgH5D3W3ExGI1+2IAYAED+vAAAAQEICp1m\/o6dZv6OR0VUIC9sZXZlbC8zMS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyNzgpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":578,"flow_packet_id":1,"flow_first_seen":1576420277607,"flow_last_seen":1576420277607,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50720,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/31\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001278)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":579,"flow_packet_id":1,"flow_first_seen":1576420277608,"flow_last_seen":1576420277608,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50722,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":579,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIARxAAEAGOxJ\/AAABfwAAAcYiH5DcsTnhkT\/ypIAYAED+vAAAAQEICp1m\/pCdZv6QR0VUIC9sZXZlbC8zMi9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjc5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":579,"flow_packet_id":1,"flow_first_seen":1576420277608,"flow_last_seen":1576420277608,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50722,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/32\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001279)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":580,"flow_packet_id":1,"flow_first_seen":1576420277609,"flow_last_seen":1576420277609,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50724,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":580,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIVW1AAEAG5sB\/AAABfwAAAcYkH5Dpym2S0+8SfoAYAED+vAAAAQEICp1m\/pGdZv6RR0VUIC9sZXZlbC8zMy9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjgwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":580,"flow_packet_id":1,"flow_first_seen":1576420277609,"flow_last_seen":1576420277609,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50724,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/33\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001280)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":581,"flow_packet_id":1,"flow_first_seen":1576420277611,"flow_last_seen":1576420277611,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50726,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":581,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIEPFAAEAGKz1\/AAABfwAAAcYmH5CKoygWHO02yYAYAED+vAAAAQEICp1m\/pOdZv6TR0VUIC9sZXZlbC8zNC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":581,"flow_packet_id":1,"flow_first_seen":1576420277611,"flow_last_seen":1576420277611,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50726,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/34\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001281)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":582,"flow_packet_id":1,"flow_first_seen":1576420277612,"flow_last_seen":1576420277612,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50728,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":582,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADILGdAAEAGD8d\/AAABfwAAAcYoH5DpvhSfS8jZeYAYAED+vAAAAQEICp1m\/pSdZv6UR0VUIC9sZXZlbC8zNS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODIpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":582,"flow_packet_id":1,"flow_first_seen":1576420277612,"flow_last_seen":1576420277612,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50728,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/35\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001282)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":583,"flow_packet_id":1,"flow_first_seen":1576420277614,"flow_last_seen":1576420277614,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50730,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":583,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIgnNAAEAGubp\/AAABfwAAAcYqH5AJ3LqL6hJPloAYAED+vAAAAQEICp1m\/pWdZv6VR0VUIC9sZXZlbC8zNi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":583,"flow_packet_id":1,"flow_first_seen":1576420277614,"flow_last_seen":1576420277614,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50730,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/36\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001283)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":584,"flow_packet_id":1,"flow_first_seen":1576420277615,"flow_last_seen":1576420277615,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50732,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":584,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIj29AAEAGrL5\/AAABfwAAAcYsH5DrNbeX8ap25oAYAED+vAAAAQEICp1m\/pedZv6XR0VUIC9sZXZlbC8zNy9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjg0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":584,"flow_packet_id":1,"flow_first_seen":1576420277615,"flow_last_seen":1576420277615,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50732,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/37\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001284)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":585,"flow_packet_id":1,"flow_first_seen":1576420277616,"flow_last_seen":1576420277616,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50734,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":585,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADImrpAAEAGoXN\/AAABfwAAAcYuH5CDY6JF2zT1KYAYAED+vAAAAQEICp1m\/pidZv6YR0VUIC9sZXZlbC8zOC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":585,"flow_packet_id":1,"flow_first_seen":1576420277616,"flow_last_seen":1576420277616,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50734,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/38\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001285)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":586,"flow_packet_id":1,"flow_first_seen":1576420277618,"flow_last_seen":1576420277618,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50736,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":586,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIUbFAAEAG6nx\/AAABfwAAAcYwH5C3PmlUu95eg4AYAED+vAAAAQEICp1m\/pqdZv6aR0VUIC9sZXZlbC8zOS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":586,"flow_packet_id":1,"flow_first_seen":1576420277618,"flow_last_seen":1576420277618,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50736,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/39\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001286)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":587,"flow_packet_id":1,"flow_first_seen":1576420277619,"flow_last_seen":1576420277619,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50738,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":587,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI5L9AAEAGV25\/AAABfwAAAcYyH5D7t9xCdJSM64AYAED+vAAAAQEICp1m\/pudZv6bR0VUIC9sZXZlbC80MC9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjg3KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":587,"flow_packet_id":1,"flow_first_seen":1576420277619,"flow_last_seen":1576420277619,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50738,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/40\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001287)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":588,"flow_packet_id":1,"flow_first_seen":1576420277622,"flow_last_seen":1576420277622,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50740,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":588,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIjX9AAEAGrq5\/AAABfwAAAcY0H5DiALWBzWdeg4AYAED+vAAAAQEICp1m\/p6dZv6eR0VUIC9sZXZlbC80MS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODgpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":588,"flow_packet_id":1,"flow_first_seen":1576420277622,"flow_last_seen":1576420277622,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50740,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/41\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001288)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":589,"flow_packet_id":1,"flow_first_seen":1576420277624,"flow_last_seen":1576420277624,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50742,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":589,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIagJAAEAG0it\/AAABfwAAAcY2H5Bh+1L\/IgWJKIAYAED+vAAAAQEICp1m\/p+dZv6fR0VUIC9sZXZlbC80Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyODkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":589,"flow_packet_id":1,"flow_first_seen":1576420277624,"flow_last_seen":1576420277624,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50742,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/42\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001289)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":590,"flow_packet_id":1,"flow_first_seen":1576420277625,"flow_last_seen":1576420277625,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50744,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":590,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI3axAAEAGXoF\/AAABfwAAAcY4H5AuBeVV4Hsa\/oAYAED+vAAAAQEICp1m\/qGdZv6hR0VUIC9sZXZlbC80My9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTApDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":590,"flow_packet_id":1,"flow_first_seen":1576420277625,"flow_last_seen":1576420277625,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50744,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/43\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001290)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":591,"flow_packet_id":1,"flow_first_seen":1576420277627,"flow_last_seen":1576420277627,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50746,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":591,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIYLhAAEAG23V\/AAABfwAAAcY6H5DQG1hJOevWU4AYAED+vAAAAQEICp1m\/qOdZv6iR0VUIC9sZXZlbC80NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTEpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":591,"flow_packet_id":1,"flow_first_seen":1576420277627,"flow_last_seen":1576420277627,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50746,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/44\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001291)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":592,"flow_packet_id":1,"flow_first_seen":1576420277628,"flow_last_seen":1576420277628,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50748,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":592,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADID1ZAAEAGLNh\/AAABfwAAAcY8H5AV\/jesxRnzeoAYAED+vAAAAQEICp1m\/qSdZv6kR0VUIC9sZXZlbC80NS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjkyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":592,"flow_packet_id":1,"flow_first_seen":1576420277628,"flow_last_seen":1576420277628,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50748,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/45\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001292)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":593,"flow_packet_id":1,"flow_first_seen":1576420277630,"flow_last_seen":1576420277630,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50750,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":593,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI0WBAAEAGas1\/AAABfwAAAcY+H5DCTOmi+t3hCIAYAED+vAAAAQEICp1m\/qWdZv6lR0VUIC9sZXZlbC80Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjkzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":593,"flow_packet_id":1,"flow_first_seen":1576420277630,"flow_last_seen":1576420277630,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50750,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/46\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001293)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":594,"flow_packet_id":1,"flow_first_seen":1576420277631,"flow_last_seen":1576420277631,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50752,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":594,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIlpVAAEAGpZh\/AAABfwAAAcZAH5Cryq5teKvsJoAYAED+vAAAAQEICp1m\/qedZv6nR0VUIC9sZXZlbC80Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTQpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":594,"flow_packet_id":1,"flow_first_seen":1576420277631,"flow_last_seen":1576420277631,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50752,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/47\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001294)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":595,"flow_packet_id":1,"flow_first_seen":1576420277633,"flow_last_seen":1576420277633,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50754,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":595,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIENVAAEAGK1l\/AAABfwAAAcZCH5APvynUeLRgIoAYAED+vAAAAQEICp1m\/qmdZv6oR0VUIC9sZXZlbC80OC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjk1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":595,"flow_packet_id":1,"flow_first_seen":1576420277633,"flow_last_seen":1576420277633,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50754,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/48\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001295)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":596,"flow_packet_id":1,"flow_first_seen":1576420277637,"flow_last_seen":1576420277637,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50756,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":596,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIJlxAAEAGFdJ\/AAABfwAAAcZEH5CFHB9c3vOX2IAYAED+vAAAAQEICp1m\/q2dZv6tR0VUIC9sZXZlbC80OS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":596,"flow_packet_id":1,"flow_first_seen":1576420277637,"flow_last_seen":1576420277637,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50756,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/49\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001296)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":597,"flow_packet_id":1,"flow_first_seen":1576420277639,"flow_last_seen":1576420277639,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50758,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":597,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIZI9AAEAG155\/AAABfwAAAcZGH5DAl12NotXkTIAYAED+vAAAAQEICp1m\/q+dZv6vR0VUIC9sZXZlbC81MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEyOTcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":597,"flow_packet_id":1,"flow_first_seen":1576420277639,"flow_last_seen":1576420277639,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50758,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/50\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001297)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":598,"flow_packet_id":1,"flow_first_seen":1576420277642,"flow_last_seen":1576420277642,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50760,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":598,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIuMhAAEAGg2V\/AAABfwAAAcZIH5DuPYHFtiFXooAYAED+vAAAAQEICp1m\/rKdZv6yR0VUIC9sZXZlbC81MS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjk4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":598,"flow_packet_id":1,"flow_first_seen":1576420277642,"flow_last_seen":1576420277642,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50760,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/51\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001298)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":599,"flow_packet_id":1,"flow_first_seen":1576420277644,"flow_last_seen":1576420277644,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50762,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":599,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIp2FAAEAGlMx\/AAABfwAAAcZKH5BZVp5d6Tz88YAYAED+vAAAAQEICp1m\/rSdZv60R0VUIC9sZXZlbC81Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMjk5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":599,"flow_packet_id":1,"flow_first_seen":1576420277644,"flow_last_seen":1576420277644,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50762,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/52\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001299)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":600,"flow_packet_id":1,"flow_first_seen":1576420277646,"flow_last_seen":1576420277646,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50764,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":600,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIRMlAAEAG92R\/AAABfwAAAcZMH5Ck2n3FkPG1\/IAYAED+vAAAAQEICp1m\/radZv62R0VUIC9sZXZlbC81My9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":600,"flow_packet_id":1,"flow_first_seen":1576420277646,"flow_last_seen":1576420277646,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50764,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/53\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001300)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":601,"flow_packet_id":1,"flow_first_seen":1576420277648,"flow_last_seen":1576420277648,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50766,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":601,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIfG5AAEAGv79\/AAABfwAAAcZOH5Bk90VplsnARIAYAED+vAAAAQEICp1m\/ridZv64R0VUIC9sZXZlbC81NC9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":601,"flow_packet_id":1,"flow_first_seen":1576420277648,"flow_last_seen":1576420277648,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50766,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/54\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001301)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":602,"flow_packet_id":1,"flow_first_seen":1576420277650,"flow_last_seen":1576420277650,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50768,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":602,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIGk5AAEAGIeB\/AAABfwAAAcZQH5A3JSNJK84\/noAYAED+vAAAAQEICp1m\/rmdZv65R0VUIC9sZXZlbC81NS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":602,"flow_packet_id":1,"flow_first_seen":1576420277650,"flow_last_seen":1576420277650,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50768,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/55\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001302)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":603,"flow_packet_id":1,"flow_first_seen":1576420277657,"flow_last_seen":1576420277657,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50770,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":603,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIqGlAAEAGk8R\/AAABfwAAAcZSH5BRNZFiv2NJXIAYAED+vAAAAQEICp1m\/sGdZv7AR0VUIC9sZXZlbC81Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzAzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":603,"flow_packet_id":1,"flow_first_seen":1576420277657,"flow_last_seen":1576420277657,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50770,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/56\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001303)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":604,"flow_packet_id":1,"flow_first_seen":1576420277658,"flow_last_seen":1576420277658,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50772,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":604,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIKidAAEAGEgd\/AAABfwAAAcZUH5DRhBMk1ziDVIAYAED+vAAAAQEICp1m\/sKdZv7CR0VUIC9sZXZlbC81Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMDQpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":604,"flow_packet_id":1,"flow_first_seen":1576420277658,"flow_last_seen":1576420277658,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50772,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/57\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001304)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":605,"flow_packet_id":1,"flow_first_seen":1576420277660,"flow_last_seen":1576420277660,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50774,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":605,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI7vpAAEAGTTN\/AAABfwAAAcZWH5Ba4NgASBBLBYAYAED+vAAAAQEICp1m\/sSdZv7ER0VUIC9sZXZlbC81OC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzA1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":605,"flow_packet_id":1,"flow_first_seen":1576420277660,"flow_last_seen":1576420277660,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50774,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/58\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001305)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":606,"flow_packet_id":1,"flow_first_seen":1576420277662,"flow_last_seen":1576420277662,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50776,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":606,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIlWJAAEAGpst\/AAABfwAAAcZYH5ApQaxoF8oWWYAYAED+vAAAAQEICp1m\/sadZv7GR0VUIC9sZXZlbC81OS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzA2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":606,"flow_packet_id":1,"flow_first_seen":1576420277662,"flow_last_seen":1576420277662,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50776,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/59\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001306)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":607,"flow_packet_id":1,"flow_first_seen":1576420277663,"flow_last_seen":1576420277663,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50778,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":607,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIGkpAAEAGIeR\/AAABfwAAAcZaH5C0PSNBlakojYAYAED+vAAAAQEICp1m\/sedZv7HR0VUIC9sZXZlbC82MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMDcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":607,"flow_packet_id":1,"flow_first_seen":1576420277663,"flow_last_seen":1576420277663,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50778,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/60\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001307)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":608,"flow_packet_id":1,"flow_first_seen":1576420277667,"flow_last_seen":1576420277667,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50780,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":608,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIoR1AAEAGmxB\/AAABfwAAAcZcH5BUypgTdH6XP4AYAED+vAAAAQEICp1m\/sudZv7LR0VUIC9sZXZlbC82MS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzA4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":608,"flow_packet_id":1,"flow_first_seen":1576420277667,"flow_last_seen":1576420277667,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50780,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/61\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001308)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":609,"flow_packet_id":1,"flow_first_seen":1576420277669,"flow_last_seen":1576420277669,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50782,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":609,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI7qNAAEAGTYp\/AAABfwAAAcZeH5CzGNepEFgF6YAYAED+vAAAAQEICp1m\/s2dZv7NR0VUIC9sZXZlbC82Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMDkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":609,"flow_packet_id":1,"flow_first_seen":1576420277669,"flow_last_seen":1576420277669,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50782,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/62\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001309)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":610,"flow_packet_id":1,"flow_first_seen":1576420277670,"flow_last_seen":1576420277670,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50784,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":610,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI1RxAAEAGZxF\/AAABfwAAAcZgH5DKr+wUPhtD5IAYAED+vAAAAQEICp1m\/s6dZv7OR0VUIC9sZXZlbC82My9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzEwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":610,"flow_packet_id":1,"flow_first_seen":1576420277670,"flow_last_seen":1576420277670,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50784,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/63\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001310)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":611,"flow_packet_id":1,"flow_first_seen":1576420277675,"flow_last_seen":1576420277675,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50786,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":611,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI4N9AAEAGW05\/AAABfwAAAcZiH5DpddnYHCFGp4AYAED+vAAAAQEICp1m\/tOdZv7SR0VUIC9sZXZlbC82NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTEpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":611,"flow_packet_id":1,"flow_first_seen":1576420277675,"flow_last_seen":1576420277675,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50786,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/64\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001311)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":612,"flow_packet_id":1,"flow_first_seen":1576420277677,"flow_last_seen":1576420277677,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50788,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":612,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIG8lAAEAGIGV\/AAABfwAAAcZkH5CYBSLNt2luhoAYAED+vAAAAQEICp1m\/tWdZv7VR0VUIC9sZXZlbC82NS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzEyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":612,"flow_packet_id":1,"flow_first_seen":1576420277677,"flow_last_seen":1576420277677,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50788,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/65\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001312)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":613,"flow_packet_id":1,"flow_first_seen":1576420277678,"flow_last_seen":1576420277678,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50790,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":613,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIttNAAEAGhVp\/AAABfwAAAcZmH5DUdY\/bkd0KuYAYAED+vAAAAQEICp1m\/tadZv7WR0VUIC9sZXZlbC82Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzEzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":613,"flow_packet_id":1,"flow_first_seen":1576420277678,"flow_last_seen":1576420277678,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50790,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/66\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001313)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":614,"flow_packet_id":1,"flow_first_seen":1576420277680,"flow_last_seen":1576420277680,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50792,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":614,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI\/OVAAEAGP0h\/AAABfwAAAcZoH5ACKMXwYFGAmIAYAED+vAAAAQEICp1m\/tidZv7YR0VUIC9sZXZlbC82Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzE0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":614,"flow_packet_id":1,"flow_first_seen":1576420277680,"flow_last_seen":1576420277680,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50792,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/67\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001314)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":615,"flow_packet_id":1,"flow_first_seen":1576420277681,"flow_last_seen":1576420277681,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50794,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":615,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIw2NAAEAGeMp\/AAABfwAAAcZqH5BLUvpuf7sPloAYAED+vAAAAQEICp1m\/tmdZv7ZR0VUIC9sZXZlbC82OC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTUpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":615,"flow_packet_id":1,"flow_first_seen":1576420277681,"flow_last_seen":1576420277681,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50794,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/68\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001315)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":616,"flow_packet_id":1,"flow_first_seen":1576420277683,"flow_last_seen":1576420277683,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50796,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":616,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIBQVAAEAGNyl\/AAABfwAAAcZsH5CyYjwQgGi0OYAYAED+vAAAAQEICp1m\/tudZv7bR0VUIC9sZXZlbC82OS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzE2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":616,"flow_packet_id":1,"flow_first_seen":1576420277683,"flow_last_seen":1576420277683,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50796,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/69\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001316)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":617,"flow_packet_id":1,"flow_first_seen":1576420277685,"flow_last_seen":1576420277685,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50798,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":617,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI1dZAAEAGZld\/AAABfwAAAcZuH5B\/K+zaVaEXFIAYAED+vAAAAQEICp1m\/tydZv7cR0VUIC9sZXZlbC83MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTcpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":617,"flow_packet_id":1,"flow_first_seen":1576420277685,"flow_last_seen":1576420277685,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50798,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/70\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001317)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":618,"flow_packet_id":1,"flow_first_seen":1576420277687,"flow_last_seen":1576420277687,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50800,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":618,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIUq1AAEAG6YB\/AAABfwAAAcZwH5AONGunkxG0mYAYAED+vAAAAQEICp1m\/t+dZv7fR0VUIC9sZXZlbC83MS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzE4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":618,"flow_packet_id":1,"flow_first_seen":1576420277687,"flow_last_seen":1576420277687,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50800,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/71\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001318)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":619,"flow_packet_id":1,"flow_first_seen":1576420277689,"flow_last_seen":1576420277689,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50802,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":619,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIo8lAAEAGmGR\/AAABfwAAAcZyH5BwuZrK24oufIAYAED+vAAAAQEICp1m\/uGdZv7hR0VUIC9sZXZlbC83Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":619,"flow_packet_id":1,"flow_first_seen":1576420277689,"flow_last_seen":1576420277689,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50802,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/72\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001319)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":620,"flow_packet_id":1,"flow_first_seen":1576420277691,"flow_last_seen":1576420277691,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50804,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":620,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIVsBAAEAG5W1\/AAABfwAAAcZ0H5BhJ2+x3S4KSIAYAED+vAAAAQEICp1m\/uOdZv7jR0VUIC9sZXZlbC83My9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzIwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":620,"flow_packet_id":1,"flow_first_seen":1576420277691,"flow_last_seen":1576420277691,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50804,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/73\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001320)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":621,"flow_packet_id":1,"flow_first_seen":1576420277693,"flow_last_seen":1576420277693,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50806,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":621,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIebZAAEAGwnd\/AAABfwAAAcZ2H5BNR0C8mP2KqIAYAED+vAAAAQEICp1m\/uWdZv7lR0VUIC9sZXZlbC83NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":621,"flow_packet_id":1,"flow_first_seen":1576420277693,"flow_last_seen":1576420277693,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50806,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/74\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001321)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":622,"flow_packet_id":1,"flow_first_seen":1576420277695,"flow_last_seen":1576420277695,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50808,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":622,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIMBZAAEAGDBh\/AAABfwAAAcZ4H5ACzwkce7l1k4AYAED+vAAAAQEICp1m\/uadZv7mR0VUIC9sZXZlbC83NS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzIyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":622,"flow_packet_id":1,"flow_first_seen":1576420277695,"flow_last_seen":1576420277695,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50808,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/75\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001322)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":623,"flow_packet_id":1,"flow_first_seen":1576420277699,"flow_last_seen":1576420277699,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50810,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":623,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIwYhAAEAGeqV\/AAABfwAAAcZ6H5CkKPiYt3JQbIAYAED+vAAAAQEICp1m\/uudZv7rR0VUIC9sZXZlbC83Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjMpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":623,"flow_packet_id":1,"flow_first_seen":1576420277699,"flow_last_seen":1576420277699,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50810,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/76\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001323)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":624,"flow_packet_id":1,"flow_first_seen":1576420277701,"flow_last_seen":1576420277701,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50812,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":624,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI\/s1AAEAGPWB\/AAABfwAAAcZ8H5AcB8fbr66aJ4AYAED+vAAAAQEICp1m\/u2dZv7tR0VUIC9sZXZlbC83Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzI0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":624,"flow_packet_id":1,"flow_first_seen":1576420277701,"flow_last_seen":1576420277701,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50812,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/77\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001324)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":625,"flow_packet_id":1,"flow_first_seen":1576420277702,"flow_last_seen":1576420277702,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50814,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":625,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIfWpAAEAGvsN\/AAABfwAAAcZ+H5A9kER6aVFtF4AYAED+vAAAAQEICp1m\/u6dZv7uR0VUIC9sZXZlbC83OC9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzI1KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":625,"flow_packet_id":1,"flow_first_seen":1576420277702,"flow_last_seen":1576420277702,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50814,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/78\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001325)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":626,"flow_packet_id":1,"flow_first_seen":1576420277703,"flow_last_seen":1576420277703,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50816,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":626,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIZuhAAEAG1UV\/AAABfwAAAcaAH5DHm1\/1JwgzKoAYAED+vAAAAQEICp1m\/u+dZv7vR0VUIC9sZXZlbC83OS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":626,"flow_packet_id":1,"flow_first_seen":1576420277703,"flow_last_seen":1576420277703,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50816,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/79\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001326)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":627,"flow_packet_id":1,"flow_first_seen":1576420277705,"flow_last_seen":1576420277705,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50818,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":627,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIi\/NAAEAGsDp\/AAABfwAAAcaCH5DTprLkQgBQzIAYAED+vAAAAQEICp1m\/vGdZv7xR0VUIC9sZXZlbC84MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":627,"flow_packet_id":1,"flow_first_seen":1576420277705,"flow_last_seen":1576420277705,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50818,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/80\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001327)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":628,"flow_packet_id":1,"flow_first_seen":1576420277708,"flow_last_seen":1576420277708,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50820,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":628,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI5e9AAEAGVj5\/AAABfwAAAcaEH5Dy8dz\/j320kYAYAED+vAAAAQEICp1m\/vOdZv7zR0VUIC9sZXZlbC84MS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMjgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":628,"flow_packet_id":1,"flow_first_seen":1576420277708,"flow_last_seen":1576420277708,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50820,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/81\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001328)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":629,"flow_packet_id":1,"flow_first_seen":1576420277709,"flow_last_seen":1576420277709,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50822,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":629,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIleJAAEAGpkt\/AAABfwAAAcaGH5A96Kz0htu5TYAYAED+vAAAAQEICp1m\/vWdZv71R0VUIC9sZXZlbC84Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzI5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":629,"flow_packet_id":1,"flow_first_seen":1576420277709,"flow_last_seen":1576420277709,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50822,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/82\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001329)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":630,"flow_packet_id":1,"flow_first_seen":1576420277711,"flow_last_seen":1576420277711,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50824,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":630,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIwilAAEAGegR\/AAABfwAAAcaIH5AoWfs0DfPUMYAYAED+vAAAAQEICp1m\/vedZv73R0VUIC9sZXZlbC84My9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":630,"flow_packet_id":1,"flow_first_seen":1576420277711,"flow_last_seen":1576420277711,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50824,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/83\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001330)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":631,"flow_packet_id":1,"flow_first_seen":1576420277713,"flow_last_seen":1576420277713,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50826,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":631,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIsuZAAEAGiUd\/AAABfwAAAcaKH5B+eYvxDWxq9oAYAED+vAAAAQEICp1m\/vmdZv75R0VUIC9sZXZlbC84NC9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzMxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":631,"flow_packet_id":1,"flow_first_seen":1576420277713,"flow_last_seen":1576420277713,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50826,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/84\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001331)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":632,"flow_packet_id":1,"flow_first_seen":1576420277715,"flow_last_seen":1576420277715,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50828,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":632,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIFWJAAEAGJsx\/AAABfwAAAcaMH5B2cix1DMITXYAYAED+vAAAAQEICp1m\/vudZv77R0VUIC9sZXZlbC84NS9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":632,"flow_packet_id":1,"flow_first_seen":1576420277715,"flow_last_seen":1576420277715,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50828,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/85\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001332)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":633,"flow_packet_id":1,"flow_first_seen":1576420277716,"flow_last_seen":1576420277716,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50830,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":633,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIj0FAAEAGrOx\/AAABfwAAAcaOH5BnL7Yrjj53uYAYAED+vAAAAQEICp1m\/vydZv78R0VUIC9sZXZlbC84Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":633,"flow_packet_id":1,"flow_first_seen":1576420277716,"flow_last_seen":1576420277716,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50830,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/86\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001333)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":634,"flow_packet_id":1,"flow_first_seen":1576420277718,"flow_last_seen":1576420277718,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50832,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":634,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI9rtAAEAGRXJ\/AAABfwAAAcaQH5Cd5s+tew18QIAYAED+vAAAAQEICp1m\/v6dZv7+R0VUIC9sZXZlbC84Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzM0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":634,"flow_packet_id":1,"flow_first_seen":1576420277718,"flow_last_seen":1576420277718,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50832,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/87\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001334)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":635,"flow_packet_id":1,"flow_first_seen":1576420277719,"flow_last_seen":1576420277719,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50834,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":635,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIwR1AAEAGexB\/AAABfwAAAcaSH5DFAfgO5Rn4M4AYAED+vAAAAQEICp1m\/v+dZv7\/R0VUIC9sZXZlbC84OC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzUpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":635,"flow_packet_id":1,"flow_first_seen":1576420277719,"flow_last_seen":1576420277719,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50834,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/88\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001335)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":636,"flow_packet_id":1,"flow_first_seen":1576420277721,"flow_last_seen":1576420277721,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50836,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":636,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIEWBAAEAGKs5\/AAABfwAAAcaUH5BnvihJZne+zoAYAED+vAAAAQEICp1m\/wGdZv8BR0VUIC9sZXZlbC84OS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzM2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":636,"flow_packet_id":1,"flow_first_seen":1576420277721,"flow_last_seen":1576420277721,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50836,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/89\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001336)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":637,"flow_packet_id":1,"flow_first_seen":1576420277723,"flow_last_seen":1576420277723,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50838,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":637,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIo9hAAEAGmFV\/AAABfwAAAcaWH5BWPprB7Bx1PYAYAED+vAAAAQEICp1m\/wKdZv8CR0VUIC9sZXZlbC85MC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":637,"flow_packet_id":1,"flow_first_seen":1576420277723,"flow_last_seen":1576420277723,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50838,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/90\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001337)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":638,"flow_packet_id":1,"flow_first_seen":1576420277725,"flow_last_seen":1576420277725,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50840,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":638,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI7YBAAEAGTq1\/AAABfwAAAcaYH5AUj9RqmT7XtIAYAED+vAAAAQEICp1m\/wWdZv8FR0VUIC9sZXZlbC85MS9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzM4KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":638,"flow_packet_id":1,"flow_first_seen":1576420277725,"flow_last_seen":1576420277725,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50840,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/91\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001338)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":639,"flow_packet_id":1,"flow_first_seen":1576420277727,"flow_last_seen":1576420277727,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50842,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":639,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIYyZAAEAG2Qd\/AAABfwAAAcaaH5DSD1o0DsX43oAYAED+vAAAAQEICp1m\/wadZv8GR0VUIC9sZXZlbC85Mi9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzMzkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":639,"flow_packet_id":1,"flow_first_seen":1576420277727,"flow_last_seen":1576420277727,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50842,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/92\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001339)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":640,"flow_packet_id":1,"flow_first_seen":1576420277729,"flow_last_seen":1576420277729,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50844,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":640,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIxzpAAEAGdPN\/AAABfwAAAcacH5ALNv4hgWKnmoAYAED+vAAAAQEICp1m\/widZv8IR0VUIC9sZXZlbC85My9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":640,"flow_packet_id":1,"flow_first_seen":1576420277729,"flow_last_seen":1576420277729,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50844,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/93\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001340)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":641,"flow_packet_id":1,"flow_first_seen":1576420277730,"flow_last_seen":1576420277730,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50846,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":641,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIHv9AAEAGHS9\/AAABfwAAAcaeH5AL7Sfmt4JqA4AYAED+vAAAAQEICp1m\/wqdZv8KR0VUIC9sZXZlbC85NC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzNDEpDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":641,"flow_packet_id":1,"flow_first_seen":1576420277730,"flow_last_seen":1576420277730,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50846,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/94\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001341)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":642,"flow_packet_id":1,"flow_first_seen":1576420277732,"flow_last_seen":1576420277732,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50848,"dst_port":8080,"l4_proto":"tcp"}
+0609{"flow_id":642,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIPWZAAEAG\/sd\/AAABfwAAAcagH5BD6AR+QNLU5oAYAED+vAAAAQEICp1m\/wydZv8MR0VUIC9sZXZlbC85NS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":642,"flow_packet_id":1,"flow_first_seen":1576420277732,"flow_last_seen":1576420277732,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50848,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/95\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001342)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":643,"flow_packet_id":1,"flow_first_seen":1576420277734,"flow_last_seen":1576420277734,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50850,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":643,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADISBNAAEAG9Bp\/AAABfwAAAcaiH5A0bnEJpPWxcYAYAED+vAAAAQEICp1m\/w6dZv8OR0VUIC9sZXZlbC85Ni9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQzKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":643,"flow_packet_id":1,"flow_first_seen":1576420277734,"flow_last_seen":1576420277734,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50850,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/96\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001343)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":644,"flow_packet_id":1,"flow_first_seen":1576420277736,"flow_last_seen":1576420277736,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50852,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":644,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIC2JAAEAGMMx\/AAABfwAAAcakH5C2tzJ7p90VYYAYAED+vAAAAQEICp1m\/xCdZv8PR0VUIC9sZXZlbC85Ny9leGVjLy9zaG93IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQ0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":644,"flow_packet_id":1,"flow_first_seen":1576420277736,"flow_last_seen":1576420277736,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50852,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/97\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001344)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":645,"flow_packet_id":1,"flow_first_seen":1576420277737,"flow_last_seen":1576420277737,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50854,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":645,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADIqydAAEAGkQZ\/AAABfwAAAcamH5BRA5JApfKSEYAYAED+vAAAAQEICp1m\/xGdZv8RR0VUIC9sZXZlbC85OC9leGVjLy9zaG93IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzNDUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":645,"flow_packet_id":1,"flow_first_seen":1576420277737,"flow_last_seen":1576420277737,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50854,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/98\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001345)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":646,"flow_packet_id":1,"flow_first_seen":1576420277739,"flow_last_seen":1576420277739,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50856,"dst_port":8080,"l4_proto":"tcp"}
+0610{"flow_id":646,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":214,"pkt":"AAAAAAAAAAAAAAAACABFAADI+OxAAEAGQ0F\/AAABfwAAAcaoH5BlRMHxT\/ad\/4AYAED+vAAAAQEICp1m\/xOdZv8SR0VUIC9sZXZlbC85OS9leGVjLy9zaG93IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzQ2KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":646,"flow_packet_id":1,"flow_first_seen":1576420277739,"flow_last_seen":1576420277739,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50856,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/level\/99\/exec\/\/show","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001346)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":647,"flow_packet_id":1,"flow_first_seen":1576420277741,"flow_last_seen":1576420277741,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50858,"dst_port":8080,"l4_proto":"tcp"}
+0806{"flow_id":647,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":363,"pkt":"AAAAAAAAAAAAAAAACABFAAFdQfFAAEAG+ad\/AAABfwAAAcaqH5DRIHj1tdpDy4AYAED\/UQAAAQEICp1m\/xWdZv8VR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM4OCkNCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":647,"flow_packet_id":1,"flow_first_seen":1576420277741,"flow_last_seen":1576420277741,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50858,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001388)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":648,"flow_packet_id":1,"flow_first_seen":1576420277743,"flow_last_seen":1576420277743,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50860,"dst_port":8080,"l4_proto":"tcp"}
+0777{"flow_id":648,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":340,"pkt":"AAAAAAAAAAAAAAAACABFAAFGAG5AAEAGO0J\/AAABfwAAAcasH5AOKDl4jiUqhYAYAED\/OgAAAQEICp1m\/xedZv8XR0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzg5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":340,"pkt_type":2048,"pkt_ipoffset":14}
+0902{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":648,"flow_packet_id":1,"flow_first_seen":1576420277743,"flow_last_seen":1576420277743,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50860,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001389)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":649,"flow_packet_id":1,"flow_first_seen":1576420277745,"flow_last_seen":1576420277745,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50862,"dst_port":8080,"l4_proto":"tcp"}
+0807{"flow_id":649,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":363,"pkt":"AAAAAAAAAAAAAAAACABFAAFddiRAAEAGxXR\/AAABfwAAAcauH5DeiE8\/TEH5WoAYAED\/UQAAAQEICp1m\/xmdZv8ZR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":649,"flow_packet_id":1,"flow_first_seen":1576420277745,"flow_last_seen":1576420277745,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50862,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":650,"flow_packet_id":1,"flow_first_seen":1576420277746,"flow_last_seen":1576420277746,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50864,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":650,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFmjyxAAEAGrGN\/AAABfwAAAcawH5C1dLY3dpi6dIAYAED\/WgAAAQEICp1m\/xqdZv8aR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":650,"flow_packet_id":1,"flow_first_seen":1576420277746,"flow_last_seen":1576420277746,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50864,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":651,"flow_packet_id":1,"flow_first_seen":1576420277747,"flow_last_seen":1576420277747,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50866,"dst_port":8080,"l4_proto":"tcp"}
+0825{"flow_id":651,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":377,"pkt":"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","pkt_caplen":377,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":651,"flow_packet_id":1,"flow_first_seen":1576420277747,"flow_last_seen":1576420277747,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50866,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":652,"flow_packet_id":1,"flow_first_seen":1576420277749,"flow_last_seen":1576420277749,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50868,"dst_port":8080,"l4_proto":"tcp"}
+0817{"flow_id":652,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":371,"pkt":"AAAAAAAAAAAAAAAACABFAAFlinpAAEAGsRZ\/AAABfwAAAca0H5BJbLNma4SLi4AYAED\/WQAAAQEICp1m\/x2dZv8dR0VUIC9tb2R1bGVzL2luZGV4LnBocD9uYW1lPUZvcnVtcyZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":652,"flow_packet_id":1,"flow_first_seen":1576420277749,"flow_last_seen":1576420277749,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50868,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":653,"flow_packet_id":1,"flow_first_seen":1576420277750,"flow_last_seen":1576420277750,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50870,"dst_port":8080,"l4_proto":"tcp"}
+0814{"flow_id":653,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":369,"pkt":"AAAAAAAAAAAAAAAACABFAAFjJWNAAEAGFjB\/AAABfwAAAca2H5CBThx9EGPplIAYAED\/VwAAAQEICp1m\/x6dZv8eR0VUIC9waHBCQi9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0932{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":653,"flow_packet_id":1,"flow_first_seen":1576420277750,"flow_last_seen":1576420277750,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50870,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":654,"flow_packet_id":1,"flow_first_seen":1576420277752,"flow_last_seen":1576420277752,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50872,"dst_port":8080,"l4_proto":"tcp"}
+0814{"flow_id":654,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":369,"pkt":"AAAAAAAAAAAAAAAACABFAAFjNwZAAEAGBI1\/AAABfwAAAca4H5DKtQ4b91nN3YAYAED\/VwAAAQEICp1m\/yCdZv8gR0VUIC9mb3J1bS9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0932{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":654,"flow_packet_id":1,"flow_first_seen":1576420277752,"flow_last_seen":1576420277752,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50872,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":655,"flow_packet_id":1,"flow_first_seen":1576420277753,"flow_last_seen":1576420277753,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50874,"dst_port":8080,"l4_proto":"tcp"}
+0810{"flow_id":655,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":364,"pkt":"AAAAAAAAAAAAAAAACABFAAFeFwdAAEAGJJF\/AAABfwAAAca6H5C+9y4cicj8j4AYAED\/UgAAAQEICp1m\/yGdZv8hR0VUIC9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkwKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":364,"pkt_type":2048,"pkt_ipoffset":14}
+0926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":655,"flow_packet_id":1,"flow_first_seen":1576420277753,"flow_last_seen":1576420277753,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50874,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":656,"flow_packet_id":1,"flow_first_seen":1576420277754,"flow_last_seen":1576420277754,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50876,"dst_port":8080,"l4_proto":"tcp"}
+0822{"flow_id":656,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFnn4NAAEAGnAt\/AAABfwAAAca8H5BO76agHBQLN4AYAED\/WwAAAQEICp1m\/yKdZv8iR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":656,"flow_packet_id":1,"flow_first_seen":1576420277754,"flow_last_seen":1576420277754,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50876,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":657,"flow_packet_id":1,"flow_first_seen":1576420277756,"flow_last_seen":1576420277756,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50878,"dst_port":8080,"l4_proto":"tcp"}
+0825{"flow_id":657,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":378,"pkt":"AAAAAAAAAAAAAAAACABFAAFsUT9AAEAG6kp\/AAABfwAAAca+H5B2qmgj3lZSb4AYAED\/YAAAAQEICp1m\/ySdZv8kR0VUIC9wb3N0bnVrZS9odG1sL2luZGV4LnBocD9OaWt0bz1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":657,"flow_packet_id":1,"flow_first_seen":1576420277756,"flow_last_seen":1576420277756,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50878,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":658,"flow_packet_id":1,"flow_first_seen":1576420277758,"flow_last_seen":1576420277758,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50880,"dst_port":8080,"l4_proto":"tcp"}
+0817{"flow_id":658,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFmwkJAAEAGeU1\/AAABfwAAAcbAH5DScvtgYIpbaYAYAED\/WgAAAQEICp1m\/yadZv8mR0VUIC9tb2R1bGVzL2luZGV4LnBocD9OaWt0bz1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MCkNCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":658,"flow_packet_id":1,"flow_first_seen":1576420277758,"flow_last_seen":1576420277758,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50880,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":659,"flow_packet_id":1,"flow_first_seen":1576420277760,"flow_last_seen":1576420277760,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50882,"dst_port":8080,"l4_proto":"tcp"}
+0819{"flow_id":659,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":370,"pkt":"AAAAAAAAAAAAAAAACABFAAFkSaBAAEAG8fF\/AAABfwAAAcbCH5CzknC\/qWQ1toAYAED\/WAAAAQEICp1m\/yidZv8oR0VUIC9waHBCQi9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQoNCg==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":659,"flow_packet_id":1,"flow_first_seen":1576420277760,"flow_last_seen":1576420277760,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50882,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":660,"flow_packet_id":1,"flow_first_seen":1576420277762,"flow_last_seen":1576420277762,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50884,"dst_port":8080,"l4_proto":"tcp"}
+0819{"flow_id":660,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":370,"pkt":"AAAAAAAAAAAAAAAACABFAAFkl59AAEAGo\/J\/AAABfwAAAcbEH5DhFa6+6BKXhoAYAED\/WAAAAQEICp1m\/yqdZv8qR0VUIC9mb3J1bS9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTApDQoNCg==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":660,"flow_packet_id":1,"flow_first_seen":1576420277762,"flow_last_seen":1576420277762,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50884,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001390)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":661,"flow_packet_id":1,"flow_first_seen":1576420277764,"flow_last_seen":1576420277764,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50886,"dst_port":8080,"l4_proto":"tcp"}
+0806{"flow_id":661,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":363,"pkt":"AAAAAAAAAAAAAAAACABFAAFdzxpAAEAGbH5\/AAABfwAAAcbGH5DgufY6a2RlI4AYAED\/UQAAAQEICp1m\/yydZv8sR0VUIC9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MSkNCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0925{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":661,"flow_packet_id":1,"flow_first_seen":1576420277764,"flow_last_seen":1576420277764,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50886,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":662,"flow_packet_id":1,"flow_first_seen":1576420277766,"flow_last_seen":1576420277766,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50888,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":662,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFm3WVAAEAGXip\/AAABfwAAAcbIH5DcNuRDgHH2c4AYAED\/WgAAAQEICp1m\/y2dZv8tR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":662,"flow_packet_id":1,"flow_first_seen":1576420277766,"flow_last_seen":1576420277766,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50888,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":663,"flow_packet_id":1,"flow_first_seen":1576420277767,"flow_last_seen":1576420277767,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50890,"dst_port":8080,"l4_proto":"tcp"}
+0825{"flow_id":663,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":377,"pkt":"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","pkt_caplen":377,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":663,"flow_packet_id":1,"flow_first_seen":1576420277767,"flow_last_seen":1576420277767,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50890,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":664,"flow_packet_id":1,"flow_first_seen":1576420277769,"flow_last_seen":1576420277769,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50892,"dst_port":8080,"l4_proto":"tcp"}
+0817{"flow_id":664,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":371,"pkt":"AAAAAAAAAAAAAAAACABFAAFl4jZAAEAGWVp\/AAABfwAAAcbMH5Dub9sXJ7s4LIAYAED\/WQAAAQEICp1m\/zGdZv8wR0VUIC9tb2R1bGVzL2luZGV4LnBocD9uYW1lPWZvcnVtcyZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkxKQ0KDQo=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":664,"flow_packet_id":1,"flow_first_seen":1576420277769,"flow_last_seen":1576420277769,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50892,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":665,"flow_packet_id":1,"flow_first_seen":1576420277770,"flow_last_seen":1576420277770,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50894,"dst_port":8080,"l4_proto":"tcp"}
+0814{"flow_id":665,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":369,"pkt":"AAAAAAAAAAAAAAAACABFAAFjvxlAAEAGfHl\/AAABfwAAAcbOH5BOc4Y2FZ1LBYAYAED\/VwAAAQEICp1m\/zKdZv8yR0VUIC9waHBCQi9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0932{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":665,"flow_packet_id":1,"flow_first_seen":1576420277770,"flow_last_seen":1576420277770,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50894,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":666,"flow_packet_id":1,"flow_first_seen":1576420277772,"flow_last_seen":1576420277772,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50896,"dst_port":8080,"l4_proto":"tcp"}
+0814{"flow_id":666,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":369,"pkt":"AAAAAAAAAAAAAAAACABFAAFjEuZAAEAGKK1\/AAABfwAAAcbQH5A1ISvIAGoQJ4AYAED\/VwAAAQEICp1m\/zSdZv8zR0VUIC9mb3J1bS9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0932{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":666,"flow_packet_id":1,"flow_first_seen":1576420277772,"flow_last_seen":1576420277772,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50896,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":667,"flow_packet_id":1,"flow_first_seen":1576420277773,"flow_last_seen":1576420277773,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50898,"dst_port":8080,"l4_proto":"tcp"}
+0810{"flow_id":667,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":364,"pkt":"AAAAAAAAAAAAAAAACABFAAFe9U5AAEAGRkl\/AAABfwAAAcbSH5CRq8xwNBHz4IAYAED\/UgAAAQEICp1m\/zWdZv81R0VUIC9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":364,"pkt_type":2048,"pkt_ipoffset":14}
+0926{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":667,"flow_packet_id":1,"flow_first_seen":1576420277773,"flow_last_seen":1576420277773,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50898,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":668,"flow_packet_id":1,"flow_first_seen":1576420277776,"flow_last_seen":1576420277776,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50900,"dst_port":8080,"l4_proto":"tcp"}
+0822{"flow_id":668,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFnAwdAAEAGOIh\/AAABfwAAAcbUH5DtkDois29dAoAYAED\/WwAAAQEICp1m\/zidZv83R0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":668,"flow_packet_id":1,"flow_first_seen":1576420277776,"flow_last_seen":1576420277776,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50900,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":669,"flow_packet_id":1,"flow_first_seen":1576420277777,"flow_last_seen":1576420277777,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50902,"dst_port":8080,"l4_proto":"tcp"}
+0826{"flow_id":669,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":378,"pkt":"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","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":669,"flow_packet_id":1,"flow_first_seen":1576420277777,"flow_last_seen":1576420277777,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50902,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":670,"flow_packet_id":1,"flow_first_seen":1576420277778,"flow_last_seen":1576420277778,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50904,"dst_port":8080,"l4_proto":"tcp"}
+0817{"flow_id":670,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFmIsJAAEAGGM5\/AAABfwAAAcbYH5ANfxvlV0uU+oAYAED\/WgAAAQEICp1m\/zqdZv86R0VUIC9tb2R1bGVzL2luZGV4LnBocD9OaWt0bz1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":670,"flow_packet_id":1,"flow_first_seen":1576420277778,"flow_last_seen":1576420277778,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50904,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":671,"flow_packet_id":1,"flow_first_seen":1576420277780,"flow_last_seen":1576420277780,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50906,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":671,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":370,"pkt":"AAAAAAAAAAAAAAAACABFAAFkWxFAAEAG4IB\/AAABfwAAAcbaH5C23mIrVyENVIAYAED\/WAAAAQEICp1m\/zudZv87R0VUIC9waHBCQi9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQoNCg==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":671,"flow_packet_id":1,"flow_first_seen":1576420277780,"flow_last_seen":1576420277780,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50906,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":672,"flow_packet_id":1,"flow_first_seen":1576420277781,"flow_last_seen":1576420277781,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50908,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":672,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":370,"pkt":"AAAAAAAAAAAAAAAACABFAAFkNVNAAEAGBj9\/AAABfwAAAcbcH5ACfAx1v1NrvIAYAED\/WAAAAQEICp1m\/z2dZv89R0VUIC9mb3J1bS9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0933{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":672,"flow_packet_id":1,"flow_first_seen":1576420277781,"flow_last_seen":1576420277781,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50908,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001391)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":673,"flow_packet_id":1,"flow_first_seen":1576420277782,"flow_last_seen":1576420277782,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50910,"dst_port":8080,"l4_proto":"tcp"}
+0777{"flow_id":673,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":340,"pkt":"AAAAAAAAAAAAAAAACABFAAFGytRAAEAGcNt\/AAABfwAAAcbeH5B57PP4Y5pS64AYAED\/OgAAAQEICp1m\/z6dZv8+R0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkyKQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":340,"pkt_type":2048,"pkt_ipoffset":14}
+0902{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":673,"flow_packet_id":1,"flow_first_seen":1576420277782,"flow_last_seen":1576420277782,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50910,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":674,"flow_packet_id":1,"flow_first_seen":1576420277784,"flow_last_seen":1576420277784,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50912,"dst_port":8080,"l4_proto":"tcp"}
+0790{"flow_id":674,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":349,"pkt":"AAAAAAAAAAAAAAAACABFAAFPyZ9AAEAGcgd\/AAABfwAAAcbgH5CxOPC81O+RlYAYAED\/QwAAAQEICp1m\/0CdZv8\/R0VUIC9wb3N0bnVrZS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":349,"pkt_type":2048,"pkt_ipoffset":14}
+0912{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":674,"flow_packet_id":1,"flow_first_seen":1576420277784,"flow_last_seen":1576420277784,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50912,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":675,"flow_packet_id":1,"flow_first_seen":1576420277785,"flow_last_seen":1576420277785,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50914,"dst_port":8080,"l4_proto":"tcp"}
+0795{"flow_id":675,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":354,"pkt":"AAAAAAAAAAAAAAAACABFAAFUq9tAAEAGj8Z\/AAABfwAAAcbiH5CAV5MAtOr6\/IAYAED\/SAAAAQEICp1m\/0GdZv9BR0VUIC9wb3N0bnVrZS9odG1sL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTIpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":354,"pkt_type":2048,"pkt_ipoffset":14}
+0918{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":675,"flow_packet_id":1,"flow_first_seen":1576420277785,"flow_last_seen":1576420277785,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50914,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":676,"flow_packet_id":1,"flow_first_seen":1576420277786,"flow_last_seen":1576420277786,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50916,"dst_port":8080,"l4_proto":"tcp"}
+0786{"flow_id":676,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":348,"pkt":"AAAAAAAAAAAAAAAACABFAAFOulhAAEAGgU9\/AAABfwAAAcbkH5AY64NxSFA9PIAYAED\/QgAAAQEICp1m\/0KdZv9CR0VUIC9tb2R1bGVzL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTY0JTY5JTcyJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTIpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":348,"pkt_type":2048,"pkt_ipoffset":14}
+0911{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":676,"flow_packet_id":1,"flow_first_seen":1576420277786,"flow_last_seen":1576420277786,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50916,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":677,"flow_packet_id":1,"flow_first_seen":1576420277788,"flow_last_seen":1576420277788,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50918,"dst_port":8080,"l4_proto":"tcp"}
+0785{"flow_id":677,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":346,"pkt":"AAAAAAAAAAAAAAAACABFAAFMGchAAEAGIeJ\/AAABfwAAAcbmH5Ae1yDiPfgPVIAYAED\/QAAAAQEICp1m\/0OdZv9DR0VUIC9waHBCQi92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTIpDQoNCg==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0909{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":677,"flow_packet_id":1,"flow_first_seen":1576420277788,"flow_last_seen":1576420277788,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50918,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":678,"flow_packet_id":1,"flow_first_seen":1576420277790,"flow_last_seen":1576420277790,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50920,"dst_port":8080,"l4_proto":"tcp"}
+0786{"flow_id":678,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":346,"pkt":"AAAAAAAAAAAAAAAACABFAAFMIAVAAEAGG6V\/AAABfwAAAcboH5Bd5RklMuM7\/YAYAED\/QAAAAQEICp1m\/0adZv9GR0VUIC9mb3J1bS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2NCU2OSU3MiZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzkyKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0909{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":678,"flow_packet_id":1,"flow_first_seen":1576420277790,"flow_last_seen":1576420277790,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50920,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/viewtopic.php?t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001392)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":679,"flow_packet_id":1,"flow_first_seen":1576420277792,"flow_last_seen":1576420277792,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50922,"dst_port":8080,"l4_proto":"tcp"}
+0810{"flow_id":679,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":365,"pkt":"AAAAAAAAAAAAAAAACABFAAFfB5NAAEAGNAR\/AAABfwAAAcbqH5CefT66jrIPCIAYAED\/UwAAAQEICp1m\/0idZv9HR0VUIC9pbmRleC5waHA\/bmFtZT1QTnBocEJCMiZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNjQlNjklNzImaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5MykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":365,"pkt_type":2048,"pkt_ipoffset":14}
+0927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":679,"flow_packet_id":1,"flow_first_seen":1576420277792,"flow_last_seen":1576420277792,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50922,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=PNphpBB2&file=viewtopic&t=2&rush=%64%69%72&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001393)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":680,"flow_packet_id":1,"flow_first_seen":1576420277794,"flow_last_seen":1576420277794,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50924,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":680,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFmgStAAEAGumR\/AAABfwAAAcbsH5DtZbgCN0MtSoAYAED\/WgAAAQEICp1m\/0qdZv9KR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":680,"flow_packet_id":1,"flow_first_seen":1576420277794,"flow_last_seen":1576420277794,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50924,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001394)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":681,"flow_packet_id":1,"flow_first_seen":1576420277795,"flow_last_seen":1576420277795,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50926,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":681,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFmgfFAAEAGuZ5\/AAABfwAAAcbuH5ChILjHXT7L3YAYAED\/WgAAAQEICp1m\/0udZv9LR0VUIC9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5NSkNCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":681,"flow_packet_id":1,"flow_first_seen":1576420277795,"flow_last_seen":1576420277795,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50926,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001395)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":682,"flow_packet_id":1,"flow_first_seen":1576420277797,"flow_last_seen":1576420277797,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50928,"dst_port":8080,"l4_proto":"tcp"}
+0789{"flow_id":682,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":349,"pkt":"AAAAAAAAAAAAAAAACABFAAFPlMhAAEAGpt5\/AAABfwAAAcbwH5AHpq3wv20OaIAYAED\/QwAAAQEICp1m\/02dZv9NR0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTYpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":349,"pkt_type":2048,"pkt_ipoffset":14}
+0911{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":682,"flow_packet_id":1,"flow_first_seen":1576420277797,"flow_last_seen":1576420277797,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50928,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001396)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":683,"flow_packet_id":1,"flow_first_seen":1576420277799,"flow_last_seen":1576420277799,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50930,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":683,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFm4IpAAEAGWwV\/AAABfwAAAcbyH5CWqtmi9bUd64AYAED\/WgAAAQEICp1m\/0+dZv9PR0VUIC9pbmRleC5waHA\/bmFtZT1Gb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5NykNCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":683,"flow_packet_id":1,"flow_first_seen":1576420277799,"flow_last_seen":1576420277799,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50930,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":684,"flow_packet_id":1,"flow_first_seen":1576420277800,"flow_last_seen":1576420277800,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50932,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":684,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":381,"pkt":"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","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":684,"flow_packet_id":1,"flow_first_seen":1576420277800,"flow_last_seen":1576420277800,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50932,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":685,"flow_packet_id":1,"flow_first_seen":1576420277802,"flow_last_seen":1576420277802,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50934,"dst_port":8080,"l4_proto":"tcp"}
+0837{"flow_id":685,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":386,"pkt":"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","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0950{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":685,"flow_packet_id":1,"flow_first_seen":1576420277802,"flow_last_seen":1576420277802,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50934,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":686,"flow_packet_id":1,"flow_first_seen":1576420277803,"flow_last_seen":1576420277803,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50936,"dst_port":8080,"l4_proto":"tcp"}
+0829{"flow_id":686,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0943{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":686,"flow_packet_id":1,"flow_first_seen":1576420277803,"flow_last_seen":1576420277803,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50936,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":687,"flow_packet_id":1,"flow_first_seen":1576420277804,"flow_last_seen":1576420277804,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50938,"dst_port":8080,"l4_proto":"tcp"}
+0826{"flow_id":687,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":378,"pkt":"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","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":687,"flow_packet_id":1,"flow_first_seen":1576420277804,"flow_last_seen":1576420277804,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50938,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":688,"flow_packet_id":1,"flow_first_seen":1576420277807,"flow_last_seen":1576420277807,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50940,"dst_port":8080,"l4_proto":"tcp"}
+0826{"flow_id":688,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":378,"pkt":"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","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":688,"flow_packet_id":1,"flow_first_seen":1576420277807,"flow_last_seen":1576420277807,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50940,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":689,"flow_packet_id":1,"flow_first_seen":1576420277808,"flow_last_seen":1576420277808,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50942,"dst_port":8080,"l4_proto":"tcp"}
+0823{"flow_id":689,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFnxERAAEAGd0p\/AAABfwAAAcb+H5AIB\/1vYBeRA4AYAED\/WwAAAQEICp1m\/1idZv9YR0VUIC9pbmRleC5waHA\/TmlrdG89Rm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk3KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":689,"flow_packet_id":1,"flow_first_seen":1576420277808,"flow_last_seen":1576420277808,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50942,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":690,"flow_packet_id":1,"flow_first_seen":1576420277810,"flow_last_seen":1576420277810,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50944,"dst_port":8080,"l4_proto":"tcp"}
+0835{"flow_id":690,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":382,"pkt":"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","pkt_caplen":382,"pkt_type":2048,"pkt_ipoffset":14}
+0945{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":690,"flow_packet_id":1,"flow_first_seen":1576420277810,"flow_last_seen":1576420277810,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50944,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":691,"flow_packet_id":1,"flow_first_seen":1576420277811,"flow_last_seen":1576420277811,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50946,"dst_port":8080,"l4_proto":"tcp"}
+0838{"flow_id":691,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":387,"pkt":"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","pkt_caplen":387,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":691,"flow_packet_id":1,"flow_first_seen":1576420277811,"flow_last_seen":1576420277811,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50946,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":692,"flow_packet_id":1,"flow_first_seen":1576420277812,"flow_last_seen":1576420277812,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50948,"dst_port":8080,"l4_proto":"tcp"}
+0829{"flow_id":692,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":381,"pkt":"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","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":692,"flow_packet_id":1,"flow_first_seen":1576420277812,"flow_last_seen":1576420277812,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50948,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":693,"flow_packet_id":1,"flow_first_seen":1576420277813,"flow_last_seen":1576420277813,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50950,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":693,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":379,"pkt":"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","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":693,"flow_packet_id":1,"flow_first_seen":1576420277813,"flow_last_seen":1576420277813,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50950,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":694,"flow_packet_id":1,"flow_first_seen":1576420277814,"flow_last_seen":1576420277814,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50952,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":694,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":379,"pkt":"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","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":694,"flow_packet_id":1,"flow_first_seen":1576420277814,"flow_last_seen":1576420277814,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50952,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=Forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001397)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":695,"flow_packet_id":1,"flow_first_seen":1576420277816,"flow_last_seen":1576420277816,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50954,"dst_port":8080,"l4_proto":"tcp"}
+0818{"flow_id":695,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":372,"pkt":"AAAAAAAAAAAAAAAACABFAAFmyD5AAEAGc1F\/AAABfwAAAccKH5CvpPET10Ucz4AYAED\/WgAAAQEICp1m\/2CdZv9gR0VUIC9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTgpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":695,"flow_packet_id":1,"flow_first_seen":1576420277816,"flow_last_seen":1576420277816,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50954,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":696,"flow_packet_id":1,"flow_first_seen":1576420277817,"flow_last_seen":1576420277817,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50956,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":696,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":381,"pkt":"AAAAAAAAAAAAAAAACABFAAFvTQNAAEAG7oN\/AAABfwAAAccMH5C7inQwMMPyYoAYAED\/YwAAAQEICp1m\/2GdZv9hR0VUIC9wb3N0bnVrZS9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5OCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":696,"flow_packet_id":1,"flow_first_seen":1576420277817,"flow_last_seen":1576420277817,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50956,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":697,"flow_packet_id":1,"flow_first_seen":1576420277819,"flow_last_seen":1576420277819,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50958,"dst_port":8080,"l4_proto":"tcp"}
+0837{"flow_id":697,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":386,"pkt":"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","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0950{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":697,"flow_packet_id":1,"flow_first_seen":1576420277819,"flow_last_seen":1576420277819,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50958,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":698,"flow_packet_id":1,"flow_first_seen":1576420277821,"flow_last_seen":1576420277821,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50960,"dst_port":8080,"l4_proto":"tcp"}
+0829{"flow_id":698,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0943{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":698,"flow_packet_id":1,"flow_first_seen":1576420277821,"flow_last_seen":1576420277821,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50960,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":699,"flow_packet_id":1,"flow_first_seen":1576420277822,"flow_last_seen":1576420277822,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50962,"dst_port":8080,"l4_proto":"tcp"}
+0826{"flow_id":699,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":378,"pkt":"AAAAAAAAAAAAAAAACABFAAFs7qZAAEAGTON\/AAABfwAAAccSH5AvkdeM6hywhIAYAED\/YAAAAQEICp1m\/2adZv9mR0VUIC9waHBCQi9pbmRleC5waHA\/bmFtZT1mb3J1bXMmZmlsZT12aWV3dG9waWMmdD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMTM5OCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":699,"flow_packet_id":1,"flow_first_seen":1576420277822,"flow_last_seen":1576420277822,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50962,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":700,"flow_packet_id":1,"flow_first_seen":1576420277824,"flow_last_seen":1576420277824,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50964,"dst_port":8080,"l4_proto":"tcp"}
+0826{"flow_id":700,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":378,"pkt":"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","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":700,"flow_packet_id":1,"flow_first_seen":1576420277824,"flow_last_seen":1576420277824,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50964,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?name=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":701,"flow_packet_id":1,"flow_first_seen":1576420277827,"flow_last_seen":1576420277827,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50966,"dst_port":8080,"l4_proto":"tcp"}
+0822{"flow_id":701,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFnzSRAAEAGbmp\/AAABfwAAAccWH5CSlfQTmmOJAIAYAED\/WwAAAQEICp1m\/2qdZv9qR0VUIC9pbmRleC5waHA\/TmlrdG89Zm9ydW1zJmZpbGU9dmlld3RvcGljJnQ9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTgpDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":701,"flow_packet_id":1,"flow_first_seen":1576420277827,"flow_last_seen":1576420277827,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50966,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":702,"flow_packet_id":1,"flow_first_seen":1576420277828,"flow_last_seen":1576420277828,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50968,"dst_port":8080,"l4_proto":"tcp"}
+0834{"flow_id":702,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":382,"pkt":"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","pkt_caplen":382,"pkt_type":2048,"pkt_ipoffset":14}
+0945{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":702,"flow_packet_id":1,"flow_first_seen":1576420277828,"flow_last_seen":1576420277828,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50968,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":703,"flow_packet_id":1,"flow_first_seen":1576420277829,"flow_last_seen":1576420277829,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50970,"dst_port":8080,"l4_proto":"tcp"}
+0838{"flow_id":703,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":387,"pkt":"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","pkt_caplen":387,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":703,"flow_packet_id":1,"flow_first_seen":1576420277829,"flow_last_seen":1576420277829,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50970,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":704,"flow_packet_id":1,"flow_first_seen":1576420277831,"flow_last_seen":1576420277831,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50972,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":704,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":381,"pkt":"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","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":704,"flow_packet_id":1,"flow_first_seen":1576420277831,"flow_last_seen":1576420277831,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50972,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":705,"flow_packet_id":1,"flow_first_seen":1576420277832,"flow_last_seen":1576420277832,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50974,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":705,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":379,"pkt":"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","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":705,"flow_packet_id":1,"flow_first_seen":1576420277832,"flow_last_seen":1576420277832,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50974,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":706,"flow_packet_id":1,"flow_first_seen":1576420277834,"flow_last_seen":1576420277834,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50976,"dst_port":8080,"l4_proto":"tcp"}
+0830{"flow_id":706,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":379,"pkt":"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","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":706,"flow_packet_id":1,"flow_first_seen":1576420277834,"flow_last_seen":1576420277834,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50976,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/index.php?Nikto=forums&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001398)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":707,"flow_packet_id":1,"flow_first_seen":1576420277836,"flow_last_seen":1576420277836,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50978,"dst_port":8080,"l4_proto":"tcp"}
+0790{"flow_id":707,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":349,"pkt":"AAAAAAAAAAAAAAAACABFAAFPP1dAAEAG\/E9\/AAABfwAAAcciH5AaoQZne4dTBYAYAED\/QwAAAQEICp1m\/3OdZv9zR0VUIC92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":349,"pkt_type":2048,"pkt_ipoffset":14}
+0911{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":707,"flow_packet_id":1,"flow_first_seen":1576420277836,"flow_last_seen":1576420277836,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50978,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":708,"flow_packet_id":1,"flow_first_seen":1576420277838,"flow_last_seen":1576420277838,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":324,"flow_max_l4_data_len":324,"flow_avg_l4_data_len":324,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50980,"dst_port":8080,"l4_proto":"tcp"}
+0801{"flow_id":708,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":358,"pkt":"AAAAAAAAAAAAAAAACABFAAFY3j1AAEAGXWB\/AAABfwAAAcckH5DNwecJcN6f0YAYAED\/TAAAAQEICp1m\/3adZv92R0VUIC9wb3N0bnVrZS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0921{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":708,"flow_packet_id":1,"flow_first_seen":1576420277838,"flow_last_seen":1576420277838,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":324,"flow_max_l4_data_len":324,"flow_avg_l4_data_len":324,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50980,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":709,"flow_packet_id":1,"flow_first_seen":1576420277840,"flow_last_seen":1576420277840,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50982,"dst_port":8080,"l4_proto":"tcp"}
+0806{"flow_id":709,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":363,"pkt":"AAAAAAAAAAAAAAAACABFAAFdmNpAAEAGor5\/AAABfwAAAccmH5CDpKHt6Uk16IAYAED\/UQAAAQEICp1m\/3idZv93R0VUIC9wb3N0bnVrZS9odG1sL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0927{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":709,"flow_packet_id":1,"flow_first_seen":1576420277840,"flow_last_seen":1576420277840,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50982,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/postnuke\/html\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":710,"flow_packet_id":1,"flow_first_seen":1576420277841,"flow_last_seen":1576420277841,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50984,"dst_port":8080,"l4_proto":"tcp"}
+0798{"flow_id":710,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":357,"pkt":"AAAAAAAAAAAAAAAACABFAAFXf1lAAEAGvEV\/AAABfwAAAccoH5A3NUZkeJaOS4AYAED\/SwAAAQEICp1m\/3mdZv95R0VUIC9tb2R1bGVzL3ZpZXd0b3BpYy5waHA\/dD0yJnJ1c2g9JTZjJTczJTIwJTJkJTYxJTZjJmhpZ2hsaWdodD0lMjUyNy4lNzAlNjElNzMlNzMlNzQlNjglNzIlNzUlMjglMjQlNDglNTQlNTQlNTAlNWYlNDclNDUlNTQlNWYlNTYlNDElNTIlNTMlNWIlNzIlNzUlNzMlNjglNWQlMjkuJTI1MjcgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTkpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":357,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":710,"flow_packet_id":1,"flow_first_seen":1576420277841,"flow_last_seen":1576420277841,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50984,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/modules\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":711,"flow_packet_id":1,"flow_first_seen":1576420277843,"flow_last_seen":1576420277843,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50986,"dst_port":8080,"l4_proto":"tcp"}
+0797{"flow_id":711,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":355,"pkt":"AAAAAAAAAAAAAAAACABFAAFV4EBAAEAGW2B\/AAABfwAAAccqH5AAS9kLhsuzOIAYAED\/SQAAAQEICp1m\/3udZv96R0VUIC9waHBCQi92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDEzOTkpDQoNCg==","pkt_caplen":355,"pkt_type":2048,"pkt_ipoffset":14}
+0918{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":711,"flow_packet_id":1,"flow_first_seen":1576420277843,"flow_last_seen":1576420277843,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50986,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpBB\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":712,"flow_packet_id":1,"flow_first_seen":1576420277844,"flow_last_seen":1576420277844,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50988,"dst_port":8080,"l4_proto":"tcp"}
+0798{"flow_id":712,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":355,"pkt":"AAAAAAAAAAAAAAAACABFAAFVVuFAAEAG5L9\/AAABfwAAAccsH5DRJG\/rOSfatoAYAED\/SQAAAQEICp1m\/3ydZv98R0VUIC9mb3J1bS92aWV3dG9waWMucGhwP3Q9MiZydXNoPSU2YyU3MyUyMCUyZCU2MSU2YyZoaWdobGlnaHQ9JTI1MjcuJTcwJTYxJTczJTczJTc0JTY4JTcyJTc1JTI4JTI0JTQ4JTU0JTU0JTUwJTVmJTQ3JTQ1JTU0JTVmJTU2JTQxJTUyJTUzJTViJTcyJTc1JTczJTY4JTVkJTI5LiUyNTI3IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxMzk5KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":355,"pkt_type":2048,"pkt_ipoffset":14}
+0918{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":712,"flow_packet_id":1,"flow_first_seen":1576420277844,"flow_last_seen":1576420277844,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50988,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/viewtopic.php?t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001399)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":713,"flow_packet_id":1,"flow_first_seen":1576420277845,"flow_last_seen":1576420277845,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50990,"dst_port":8080,"l4_proto":"tcp"}
+0822{"flow_id":713,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":374,"pkt":"AAAAAAAAAAAAAAAACABFAAFouhJAAEAGgXt\/AAABfwAAAccuH5A6xYMmaghNdoAYAED\/XAAAAQEICp1m\/32dZv99R0VUIC9pbmRleC5waHA\/bmFtZT1QTnBocEJCMiZmaWxlPXZpZXd0b3BpYyZ0PTImcnVzaD0lNmMlNzMlMjAlMmQlNjElNmMmaGlnaGxpZ2h0PSUyNTI3LiU3MCU2MSU3MyU3MyU3NCU2OCU3MiU3NSUyOCUyNCU0OCU1NCU1NCU1MCU1ZiU0NyU0NSU1NCU1ZiU1NiU0MSU1MiU1MyU1YiU3MiU3NSU3MyU2OCU1ZCUyOS4lMjUyNyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAxNDAwKQ0KDQo=","pkt_caplen":374,"pkt_type":2048,"pkt_ipoffset":14}
+0936{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":713,"flow_packet_id":1,"flow_first_seen":1576420277845,"flow_last_seen":1576420277845,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50990,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/index.php?name=PNphpBB2&file=viewtopic&t=2&rush=%6c%73%20%2d%61%6c&highlight=%2527.%70%61%73%73%74%68%72%75%28%24%48%54%54%50%5f%47%45%54%5f%56%41%52%53%5b%72%75%73%68%5d%29.%2527","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001400)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":714,"flow_packet_id":1,"flow_first_seen":1576420277847,"flow_last_seen":1576420277847,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50992,"dst_port":8080,"l4_proto":"tcp"}
+0605{"flow_id":714,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":211,"pkt":"AAAAAAAAAAAAAAAACABFAADFXW9AAEAG3sF\/AAABfwAAAccwH5A6PWRZjzFeOIAYAED+uQAAAQEICp1m\/3+dZv9\/R0VUIC9tc2FkYy9tc2FkY3MuZGxsIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDE0NzQpDQoNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":714,"flow_packet_id":1,"flow_first_seen":1576420277847,"flow_last_seen":1576420277847,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50992,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/msadcs.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:001474)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":715,"flow_packet_id":1,"flow_first_seen":1576420277849,"flow_last_seen":1576420277849,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50994,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":715,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBYllAAEAG2dt\/AAABfwAAAccyH5AM9ltiiZJuH4AYAED+tQAAAQEICp1m\/4GdZv+AR0VUIC91cGxvYWRlci5waHAgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAxOCkNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":715,"flow_packet_id":1,"flow_first_seen":1576420277849,"flow_last_seen":1576420277849,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50994,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/uploader.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003018)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":716,"flow_packet_id":1,"flow_first_seen":1576420277850,"flow_last_seen":1576420277850,"flow_tot_l4_data_len":272,"flow_min_l4_data_len":272,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":272,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50996,"dst_port":8080,"l4_proto":"tcp"}
+0730{"flow_id":716,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":306,"pkt":"AAAAAAAAAAAAAAAACABFAAEkktVAAEAGqPx\/AAABfwAAAcc0H5D516vm6SxeZoAYAED\/GAAAAQEICp1m\/4KdZv+CR0VUIC9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAzOSkNCg0K","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0868{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":716,"flow_packet_id":1,"flow_first_seen":1576420277850,"flow_last_seen":1576420277850,"flow_tot_l4_data_len":272,"flow_min_l4_data_len":272,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":272,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50996,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":717,"flow_packet_id":1,"flow_first_seen":1576420277851,"flow_last_seen":1576420277851,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50998,"dst_port":8080,"l4_proto":"tcp"}
+0739{"flow_id":717,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":312,"pkt":"AAAAAAAAAAAAAAAACABFAAEqh81AAEAGs\/5\/AAABfwAAAcc2H5Bgvr79vMi8roAYAED\/HgAAAQEICp1m\/4OdZv+DR0VUIC9mb3J1bS9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAzOSkNCg0K","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0875{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":717,"flow_packet_id":1,"flow_first_seen":1576420277851,"flow_last_seen":1576420277851,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50998,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forum\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":718,"flow_packet_id":1,"flow_first_seen":1576420277854,"flow_last_seen":1576420277854,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51000,"dst_port":8080,"l4_proto":"tcp"}
+0741{"flow_id":718,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":313,"pkt":"AAAAAAAAAAAAAAAACABFAAErhnRAAEAGtVZ\/AAABfwAAAcc4H5AJP79Gqf4KlIAYAED\/HwAAAQEICp1m\/4adZv+GR0VUIC9mb3J1bXMvY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwMzkpDQoNCg==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0876{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":718,"flow_packet_id":1,"flow_first_seen":1576420277854,"flow_last_seen":1576420277854,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51000,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forums\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":719,"flow_packet_id":1,"flow_first_seen":1576420277855,"flow_last_seen":1576420277855,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51002,"dst_port":8080,"l4_proto":"tcp"}
+0742{"flow_id":719,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":313,"pkt":"AAAAAAAAAAAAAAAACABFAAErbT9AAEAGzot\/AAABfwAAAcc6H5Be6VQGyl7\/vYAYAED\/HwAAAQEICp1m\/4edZv+HR0VUIC9mb3J1bXovY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwMzkpDQoNCg==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0876{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":719,"flow_packet_id":1,"flow_first_seen":1576420277855,"flow_last_seen":1576420277855,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51002,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/forumz\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":720,"flow_packet_id":1,"flow_first_seen":1576420277857,"flow_last_seen":1576420277857,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":280,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":280,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51004,"dst_port":8080,"l4_proto":"tcp"}
+0741{"flow_id":720,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":314,"pkt":"AAAAAAAAAAAAAAAACABFAAEsZgtAAEAG1b5\/AAABfwAAAcc8H5AWK18ypPoEwIAYAED\/IAAAAQEICp1m\/4mdZv+JR0VUIC9odGZvcnVtL2NhbGVuZGFyLnBocD9jYWxiaXJ0aGRheXM9MSZhY3Rpb249Z2V0ZGF5JmRheT0yMDAxLTgtMTUmY29tbWE9JTIyO2VjaG8lMjAnJzslMjBlY2hvJTIwJTYwaWQlMjAlNjA7ZGllKCk7ZWNobyUyMiBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMDM5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0877{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":720,"flow_packet_id":1,"flow_first_seen":1576420277857,"flow_last_seen":1576420277857,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":280,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":280,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51004,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/htforum\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":721,"flow_packet_id":1,"flow_first_seen":1576420277858,"flow_last_seen":1576420277858,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51006,"dst_port":8080,"l4_proto":"tcp"}
+0738{"flow_id":721,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":312,"pkt":"AAAAAAAAAAAAAAAACABFAAEqtcxAAEAGhf9\/AAABfwAAAcc+H5DIWozz4BLqQYAYAED\/HgAAAQEICp1m\/4qdZv+KR0VUIC9ib2FyZC9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzAzOSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0875{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":721,"flow_packet_id":1,"flow_first_seen":1576420277858,"flow_last_seen":1576420277858,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51006,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/board\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":722,"flow_packet_id":1,"flow_first_seen":1576420277860,"flow_last_seen":1576420277860,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51008,"dst_port":8080,"l4_proto":"tcp"}
+0745{"flow_id":722,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":316,"pkt":"AAAAAAAAAAAAAAAACABFAAEumzdAAEAGoJB\/AAABfwAAAcdAH5B97qINvJ0VaoAYAED\/IgAAAQEICp1m\/4ydZv+MR0VUIC9jb21tdW5pdHkvY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMDM5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":316,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":722,"flow_packet_id":1,"flow_first_seen":1576420277860,"flow_last_seen":1576420277860,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51008,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/community\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003039)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":723,"flow_packet_id":1,"flow_first_seen":1576420277861,"flow_last_seen":1576420277861,"flow_tot_l4_data_len":275,"flow_min_l4_data_len":275,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51010,"dst_port":8080,"l4_proto":"tcp"}
+0734{"flow_id":723,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":309,"pkt":"AAAAAAAAAAAAAAAACABFAAEntyFAAEAGhK1\/AAABfwAAAcdCH5DLAI4n0VAE+IAYAED\/GwAAAQEICp1m\/42dZv+NR0VUIC92Yi9jYWxlbmRhci5waHA\/Y2FsYmlydGhkYXlzPTEmYWN0aW9uPWdldGRheSZkYXk9MjAwMS04LTE1JmNvbW1hPSUyMjtlY2hvJTIwJyc7JTIwZWNobyUyMCU2MGlkJTIwJTYwO2RpZSgpO2VjaG8lMjIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwNDApDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":309,"pkt_type":2048,"pkt_ipoffset":14}
+0872{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":723,"flow_packet_id":1,"flow_first_seen":1576420277861,"flow_last_seen":1576420277861,"flow_tot_l4_data_len":275,"flow_min_l4_data_len":275,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51010,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vb\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003040)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":724,"flow_packet_id":1,"flow_first_seen":1576420277863,"flow_last_seen":1576420277863,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51012,"dst_port":8080,"l4_proto":"tcp"}
+0745{"flow_id":724,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":316,"pkt":"AAAAAAAAAAAAAAAACABFAAEuCCBAAEAGM6h\/AAABfwAAAcdEH5ADaDEo9nQ1BIAYAED\/IgAAAQEICp1m\/4+dZv+PR0VUIC92YnVsbGV0aW4vY2FsZW5kYXIucGhwP2NhbGJpcnRoZGF5cz0xJmFjdGlvbj1nZXRkYXkmZGF5PTIwMDEtOC0xNSZjb21tYT0lMjI7ZWNobyUyMCcnOyUyMGVjaG8lMjAlNjBpZCUyMCU2MDtkaWUoKTtlY2hvJTIyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMwNDApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":316,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":724,"flow_packet_id":1,"flow_first_seen":1576420277863,"flow_last_seen":1576420277863,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51012,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vbulletin\/calendar.php?calbirthdays=1&action=getday&day=2001-8-15&comma=%22;echo%20'';%20echo%20%60id%20%60;die();echo%22","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003040)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":725,"flow_packet_id":1,"flow_first_seen":1576420277864,"flow_last_seen":1576420277864,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51014,"dst_port":8080,"l4_proto":"tcp"}
+0608{"flow_id":725,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":215,"pkt":"AAAAAAAAAAAAAAAACABFAADJt5hAAEAGhJR\/AAABfwAAAcdGH5CwLY6th0R7wIAYAED+vQAAAQEICp1m\/5CdZv+QR0VUIC9fdnRpX2Jpbi9mcGNvdW50LmV4ZSBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMDg5KQ0KDQo=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":725,"flow_packet_id":1,"flow_first_seen":1576420277864,"flow_last_seen":1576420277864,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51014,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/_vti_bin\/fpcount.exe","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003089)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":726,"flow_packet_id":1,"flow_first_seen":1576420277866,"flow_last_seen":1576420277866,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51016,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":726,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHtYVAAEAGhql\/AAABfwAAAcdIH5CyuYy6IN3YVoAYAED+uwAAAQEICp1m\/5KdZv+SR0VUIC9zaXRlL2VnL3NvdXJjZS5hc3AgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxMjYpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":726,"flow_packet_id":1,"flow_first_seen":1576420277866,"flow_last_seen":1576420277866,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51016,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/site\/eg\/source.asp","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003126)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":727,"flow_packet_id":1,"flow_first_seen":1576420277867,"flow_last_seen":1576420277867,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51018,"dst_port":8080,"l4_proto":"tcp"}
+0644{"flow_id":727,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":243,"pkt":"AAAAAAAAAAAAAAAACABFAADlWiBAAEAG4fB\/AAABfwAAAcdKH5CvgWMmQVkzqIAYAED+2QAAAQEICp1m\/5OdZv+TR0VUIC9jZXJ0c3J2Ly4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":727,"flow_packet_id":1,"flow_first_seen":1576420277867,"flow_last_seen":1576420277867,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51018,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/certsrv\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003190)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":728,"flow_packet_id":1,"flow_first_seen":1576420277870,"flow_last_seen":1576420277870,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51020,"dst_port":8080,"l4_proto":"tcp"}
+0660{"flow_id":728,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":254,"pkt":"AAAAAAAAAAAAAAAACABFAADwKqRAAEAGEWJ\/AAABfwAAAcdMH5CrChOaUJIGgIAYAED+5AAAAQEICp1m\/5adZv+WR0VUIC9jZ2ktYmluLy4uJWMwJWFmLi4vLi4lYzAlYWYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5MSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":728,"flow_packet_id":1,"flow_first_seen":1576420277870,"flow_last_seen":1576420277870,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51020,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003191)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":729,"flow_packet_id":1,"flow_first_seen":1576420277871,"flow_last_seen":1576420277871,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51022,"dst_port":8080,"l4_proto":"tcp"}
+0648{"flow_id":729,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":245,"pkt":"AAAAAAAAAAAAAAAACABFAADnEqJAAEAGKW1\/AAABfwAAAcdOH5CE7yudGG3JzIAYAED+2wAAAQEICp1m\/5edZv+XR0VUIC9paXNhZG1wd2QvLi4lYzAlYWYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMTkyKQ0KDQo=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":729,"flow_packet_id":1,"flow_first_seen":1576420277871,"flow_last_seen":1576420277871,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51022,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/iisadmpwd\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003192)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":730,"flow_packet_id":1,"flow_first_seen":1576420277873,"flow_last_seen":1576420277873,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51024,"dst_port":8080,"l4_proto":"tcp"}
+0656{"flow_id":730,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":252,"pkt":"AAAAAAAAAAAAAAAACABFAADuNNpAAEAGBy5\/AAABfwAAAcdQH5AuMg3l88MKY4AYAED+4gAAAQEICp1m\/5mdZv+ZR0VUIC9tc2FkYy8uLiVjMCVhZi4uLy4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5MykNCg0K","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":730,"flow_packet_id":1,"flow_first_seen":1576420277873,"flow_last_seen":1576420277873,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51024,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003193)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":731,"flow_packet_id":1,"flow_first_seen":1576420277874,"flow_last_seen":1576420277874,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51026,"dst_port":8080,"l4_proto":"tcp"}
+0660{"flow_id":731,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":255,"pkt":"AAAAAAAAAAAAAAAACABFAADxWrBAAEAG4VR\/AAABfwAAAcdSH5DZZWOTGgkmxYAYAED+5QAAAQEICp1m\/5qdZv+aR0VUIC9wYnNlcnZlci8uLiVjMCVhZi4uLy4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":255,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":731,"flow_packet_id":1,"flow_first_seen":1576420277874,"flow_last_seen":1576420277874,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51026,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pbserver\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003194)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":732,"flow_packet_id":1,"flow_first_seen":1576420277875,"flow_last_seen":1576420277875,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51028,"dst_port":8080,"l4_proto":"tcp"}
+0657{"flow_id":732,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":250,"pkt":"AAAAAAAAAAAAAAAACABFAADs1jZAAEAGZdN\/AAABfwAAAcdUH5CUA+8Kq3ejjIAYAED+4AAAAQEICp1m\/5udZv+bR0VUIC9ycGMvLi4lYzAlYWYuLi8uLiVjMCVhZi4uL3dpbm50L3N5c3RlbTMyL2NtZC5leGU\/L2MrZGlyIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTUpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":732,"flow_packet_id":1,"flow_first_seen":1576420277875,"flow_last_seen":1576420277875,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51028,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/rpc\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003195)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":733,"flow_packet_id":1,"flow_first_seen":1576420277877,"flow_last_seen":1576420277877,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51030,"dst_port":8080,"l4_proto":"tcp"}
+0644{"flow_id":733,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":243,"pkt":"AAAAAAAAAAAAAAAACABFAADl6fRAAEAGUhx\/AAABfwAAAcdWH5B7VdDQBDmQE4AYAED+2QAAAQEICp1m\/52dZv+dR0VUIC9zY3JpcHRzLy4uJWMwJWFmLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTYpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":733,"flow_packet_id":1,"flow_first_seen":1576420277877,"flow_last_seen":1576420277877,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51030,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003196)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":734,"flow_packet_id":1,"flow_first_seen":1576420277878,"flow_last_seen":1576420277878,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51032,"dst_port":8080,"l4_proto":"tcp"}
+0645{"flow_id":734,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":243,"pkt":"AAAAAAAAAAAAAAAACABFAADltn1AAEAGhZN\/AAABfwAAAcdYH5Dqro9H\/GjzZIAYAED+2QAAAQEICp1m\/56dZv+eR0VUIC9zY3JpcHRzLy4uJWMxJTFjLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMxOTcpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":734,"flow_packet_id":1,"flow_first_seen":1576420277878,"flow_last_seen":1576420277878,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51032,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%c1%1c..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003197)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":735,"flow_packet_id":1,"flow_first_seen":1576420277880,"flow_last_seen":1576420277880,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51034,"dst_port":8080,"l4_proto":"tcp"}
+0652{"flow_id":735,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAADqdQ5AAEAGxv1\/AAABfwAAAcdaH5DlNEwz0kNZnYAYAED+3gAAAQEICp1m\/6CdZv+gR0VUIC9zY3JpcHRzLy4uJWMxJTFjLi4vd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIrYzpcIiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5OCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":735,"flow_packet_id":1,"flow_first_seen":1576420277880,"flow_last_seen":1576420277880,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51034,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%c1%1c..\/winnt\/system32\/cmd.exe?\/c+dir+c:\\\"","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003198)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":736,"flow_packet_id":1,"flow_first_seen":1576420277882,"flow_last_seen":1576420277882,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51036,"dst_port":8080,"l4_proto":"tcp"}
+0676{"flow_id":736,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":266,"pkt":"AAAAAAAAAAAAAAAACABFAAD8MthAAEAGCSJ\/AAABfwAAAcdcH5B7UwvpG4XAvoAYAED+8AAAAQEICp1m\/6GdZv+hR0VUIC9fdnRpX2Jpbi8uLiVjMCVhZi4uLy4uJWMwJWFmLi4vLi4lYzAlYWYuLi93aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzE5OSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":736,"flow_packet_id":1,"flow_first_seen":1576420277882,"flow_last_seen":1576420277882,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51036,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/_vti_bin\/..%c0%af..\/..%c0%af..\/..%c0%af..\/winnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003199)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":737,"flow_packet_id":1,"flow_first_seen":1576420277883,"flow_last_seen":1576420277883,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51038,"dst_port":8080,"l4_proto":"tcp"}
+0632{"flow_id":737,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":234,"pkt":"AAAAAAAAAAAAAAAACABFAADcUThAAEAG6uF\/AAABfwAAAcdeH5DOhWgJaQI1xYAYAED+0AAAAQEICp1m\/6OdZv+jR0VUIC9hZG1pbi9zeXN0ZW0ucGhwMz9jbWQ9Y2F0JTIwL2V0Yy9wYXNzd2QgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMyMTYpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":737,"flow_packet_id":1,"flow_first_seen":1576420277883,"flow_last_seen":1576420277883,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51038,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/system.php3?cmd=cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003216)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":738,"flow_packet_id":1,"flow_first_seen":1576420277885,"flow_last_seen":1576420277885,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51040,"dst_port":8080,"l4_proto":"tcp"}
+0625{"flow_id":738,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":227,"pkt":"AAAAAAAAAAAAAAAACABFAADVkAVAAEAGrBt\/AAABfwAAAcdgH5ANV6k94mK\/lYAYAED+yQAAAQEICp1m\/6WdZv+lR0VUIC9hZG1pbi9zeXN0ZW0ucGhwMz9jbWQ9ZGlyJTIwYzpcXCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzIxNykNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":738,"flow_packet_id":1,"flow_first_seen":1576420277885,"flow_last_seen":1576420277885,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51040,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/system.php3?cmd=dir%20c:\\\\","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003217)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":739,"flow_packet_id":1,"flow_first_seen":1576420277887,"flow_last_seen":1576420277887,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":198,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":198,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51042,"dst_port":8080,"l4_proto":"tcp"}
+0633{"flow_id":739,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":232,"pkt":"AAAAAAAAAAAAAAAACABFAADawa5AAEAGem1\/AAABfwAAAcdiH5DPxPiU5alglIAYAED+zgAAAQEICp1m\/6edZv+nR0VUIC9hZG1pbi9leGVjLnBocDM\/Y21kPWNhdCUyMC9ldGMvcGFzc3dkIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMjE4KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":232,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":739,"flow_packet_id":1,"flow_first_seen":1576420277887,"flow_last_seen":1576420277887,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":198,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":198,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51042,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/exec.php3?cmd=cat%20\/etc\/passwd","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003218)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":740,"flow_packet_id":1,"flow_first_seen":1576420277889,"flow_last_seen":1576420277889,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51044,"dst_port":8080,"l4_proto":"tcp"}
+0621{"flow_id":740,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":225,"pkt":"AAAAAAAAAAAAAAAACABFAADTtGFAAEAGh8F\/AAABfwAAAcdkH5BoGo0gUvgPHYAYAED+xwAAAQEICp1m\/6mdZv+pR0VUIC9hZG1pbi9leGVjLnBocDM\/Y21kPWRpciUyMGM6XFwgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMyMTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":740,"flow_packet_id":1,"flow_first_seen":1576420277889,"flow_last_seen":1576420277889,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51044,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/admin\/exec.php3?cmd=dir%20c:\\\\","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003219)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":741,"flow_packet_id":1,"flow_first_seen":1576420277890,"flow_last_seen":1576420277890,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51046,"dst_port":8080,"l4_proto":"tcp"}
+0604{"flow_id":741,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":213,"pkt":"AAAAAAAAAAAAAAAACABFAADHrzRAAEAGjPp\/AAABfwAAAcdmH5C4mZZz5s98MYAYAED+uwAAAQEICp1m\/6qdZv+qR0VUIC9pc2FwaS90c3Rpc2FwaS5kbGwgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI2MykNCg0K","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":741,"flow_packet_id":1,"flow_first_seen":1576420277890,"flow_last_seen":1576420277890,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51046,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/isapi\/tstisapi.dll","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003263)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":742,"flow_packet_id":1,"flow_first_seen":1576420277892,"flow_last_seen":1576420277892,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51048,"dst_port":8080,"l4_proto":"tcp"}
+0640{"flow_id":742,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":239,"pkt":"AAAAAAAAAAAAAAAACABFAADhOMJAAEAGA1N\/AAABfwAAAcdoH5DDTQGCjXG7iYAYAED+1QAAAQEICp1m\/6ydZv+sR0VUIC9jZXJ0c3J2Ly4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI5NCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0805{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":742,"flow_packet_id":1,"flow_first_seen":1576420277892,"flow_last_seen":1576420277892,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51048,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/certsrv\/..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003294)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":743,"flow_packet_id":1,"flow_first_seen":1576420277893,"flow_last_seen":1576420277893,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51050,"dst_port":8080,"l4_proto":"tcp"}
+0662{"flow_id":743,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":253,"pkt":"AAAAAAAAAAAAAAAACABFAADvSZpAAEAG8mx\/AAABfwAAAcdqH5B\/BnDaXNCp24AYAED+4wAAAQEICp1m\/62dZv+tR0VUIC9jZ2ktYmluLy4uJTI1NWMuLiUyNTVjLi4lMjU1Y3dpbm50L3N5c3RlbTMyL2NtZC5leGU\/L2MrZGlyIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMjk1KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":253,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":743,"flow_packet_id":1,"flow_first_seen":1576420277893,"flow_last_seen":1576420277893,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51050,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/cgi-bin\/..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003295)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":744,"flow_packet_id":1,"flow_first_seen":1576420277895,"flow_last_seen":1576420277895,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51052,"dst_port":8080,"l4_proto":"tcp"}
+0653{"flow_id":744,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":248,"pkt":"AAAAAAAAAAAAAAAACABFAADqfTRAAEAGvtd\/AAABfwAAAcdsH5BhnER0\/MAlIYAYAED+3gAAAQEICp1m\/6+dZv+vR0VUIC9paXNhZG1wd2QvLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMjk2KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0814{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":744,"flow_packet_id":1,"flow_first_seen":1576420277895,"flow_last_seen":1576420277895,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51052,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/iisadmpwd\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003296)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":745,"flow_packet_id":1,"flow_first_seen":1576420277896,"flow_last_seen":1576420277896,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":224,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":224,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51054,"dst_port":8080,"l4_proto":"tcp"}
+0665{"flow_id":745,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":258,"pkt":"AAAAAAAAAAAAAAAACABFAAD0gMpAAEAGuzd\/AAABfwAAAcduH5Bs5rmLXk\/vk4AYAED+6AAAAQEICp1m\/7CdZv+wR0VUIC9tc2FkYy8uLiUyNTVjLi4lMjU1Yy4uJTI1NWMuLiUyNTVjd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMyOTcpDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":745,"flow_packet_id":1,"flow_first_seen":1576420277896,"flow_last_seen":1576420277896,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":224,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":224,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51054,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/msadc\/..%255c..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003297)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":746,"flow_packet_id":1,"flow_first_seen":1576420277898,"flow_last_seen":1576420277898,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51056,"dst_port":8080,"l4_proto":"tcp"}
+0660{"flow_id":746,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":254,"pkt":"AAAAAAAAAAAAAAAACABFAADwDYtAAEAGLnt\/AAABfwAAAcdwH5DXOjTMIaH3HYAYAED+5AAAAQEICp1m\/7GdZv+xR0VUIC9wYnNlcnZlci8uLiUyNTVjLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI5OCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":746,"flow_packet_id":1,"flow_first_seen":1576420277898,"flow_last_seen":1576420277898,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51056,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pbserver\/..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003298)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":747,"flow_packet_id":1,"flow_first_seen":1576420277899,"flow_last_seen":1576420277899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51058,"dst_port":8080,"l4_proto":"tcp"}
+0644{"flow_id":747,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":242,"pkt":"AAAAAAAAAAAAAAAACABFAADkYvBAAEAG2SF\/AAABfwAAAcdyH5AooFut2XrcJYAYAED+2AAAAQEICp1m\/7OdZv+zR0VUIC9ycGMvLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzI5OSkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":747,"flow_packet_id":1,"flow_first_seen":1576420277899,"flow_last_seen":1576420277899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51058,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/rpc\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003299)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":748,"flow_packet_id":1,"flow_first_seen":1576420277901,"flow_last_seen":1576420277901,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51060,"dst_port":8080,"l4_proto":"tcp"}
+0648{"flow_id":748,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAADogDVAAEAGu9h\/AAABfwAAAcd0H5COI7lxOfsaCoAYAED+3AAAAQEICp1m\/7WdZv+1R0VUIC9zY3JpcHRzLy4uJTI1NWMuLiUyNTVjd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYytkaXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMzMDApDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":748,"flow_packet_id":1,"flow_first_seen":1576420277901,"flow_last_seen":1576420277901,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51060,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003300)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":749,"flow_packet_id":1,"flow_first_seen":1576420277902,"flow_last_seen":1576420277902,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51062,"dst_port":8080,"l4_proto":"tcp"}
+0648{"flow_id":749,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":246,"pkt":"AAAAAAAAAAAAAAAACABFAADos7FAAEAGiFx\/AAABfwAAAcd2H5DBqortDeq7IYAYAED+3AAAAQEICp1m\/7adZv+2R0VUIC9zY3JpcHRzLy4uJTI1NWMuLiUyNTVjd2lubnQvc3lzdGVtMzIvY21kLmV4ZT8vYyt2ZXIgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDMzMDEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":749,"flow_packet_id":1,"flow_first_seen":1576420277902,"flow_last_seen":1576420277902,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51062,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/scripts\/..%255c..%255cwinnt\/system32\/cmd.exe?\/c+ver","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003301)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":750,"flow_packet_id":1,"flow_first_seen":1576420277903,"flow_last_seen":1576420277903,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51064,"dst_port":8080,"l4_proto":"tcp"}
+0689{"flow_id":750,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":275,"pkt":"AAAAAAAAAAAAAAAACABFAAEFC5dAAEAGMFp\/AAABfwAAAcd4H5DWdjLSA\/QqXoAYAED++QAAAQEICp1m\/7edZv+3R0VUIC9fdnRpX2Jpbi8uLiUyNTVjLi4lMjU1Yy4uJTI1NWMuLiUyNTVjLi4lMjU1Yy4uJTI1NWN3aW5udC9zeXN0ZW0zMi9jbWQuZXhlPy9jK2RpciBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzMwMikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":750,"flow_packet_id":1,"flow_first_seen":1576420277903,"flow_last_seen":1576420277903,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51064,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/_vti_bin\/..%255c..%255c..%255c..%255c..%255c..%255cwinnt\/system32\/cmd.exe?\/c+dir","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003302)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":751,"flow_packet_id":1,"flow_first_seen":1576420277905,"flow_last_seen":1576420277905,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51066,"dst_port":8080,"l4_proto":"tcp"}
+0637{"flow_id":751,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":235,"pkt":"AAAAAAAAAAAAAAAACABFAADdGS5AAEAGIut\/AAABfwAAAcd6H5B05SBpiRPNwoAYAED+0QAAAQEICp1m\/7mdZv+5R0VUIC9hbnMucGw\/cD0uLi8uLi8uLi8uLi8uLi91c3IvYmluL2lkfCZibGFoIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMzcwKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":751,"flow_packet_id":1,"flow_first_seen":1576420277905,"flow_last_seen":1576420277905,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51066,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ans.pl?p=..\/..\/..\/..\/..\/usr\/bin\/id|&blah","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003370)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":752,"flow_packet_id":1,"flow_first_seen":1576420277907,"flow_last_seen":1576420277907,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51068,"dst_port":8080,"l4_proto":"tcp"}
+0640{"flow_id":752,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":239,"pkt":"AAAAAAAAAAAAAAAACABFAADhaxBAAEAG0QR\/AAABfwAAAcd8H5CT4lJLpEBlJ4AYAED+1QAAAQEICp1m\/7udZv+7R0VUIC9hbnMvYW5zLnBsP3A9Li4vLi4vLi4vLi4vLi4vdXNyL2Jpbi9pZHwmYmxhaCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDAzMzcxKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":752,"flow_packet_id":1,"flow_first_seen":1576420277907,"flow_last_seen":1576420277907,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51068,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/ans\/ans.pl?p=..\/..\/..\/..\/..\/usr\/bin\/id|&blah","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003371)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":753,"flow_packet_id":1,"flow_first_seen":1576420277908,"flow_last_seen":1576420277908,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51070,"dst_port":8080,"l4_proto":"tcp"}
+0694{"flow_id":753,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":278,"pkt":"AAAAAAAAAAAAAAAACABFAAEIG05AAEAGIKB\/AAABfwAAAcd+H5BZWCIKm5\/s0oAYAED+\/AAAAQEICp1m\/7ydZv+8R0VUIC9yZXBvcnRzL3J3c2VydmxldD9zZXJ2ZXI9cmVwc2VydityZXBvcnQ9L3RtcC9oYWNrZXIucmRmK2Rlc3R5cGU9Y2FjaGUrZGVzZm9ybWF0PVBERiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwMzQzNykNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":753,"flow_packet_id":1,"flow_first_seen":1576420277908,"flow_last_seen":1576420277908,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51070,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/reports\/rwservlet?server=repserv+report=\/tmp\/hacker.rdf+destype=cache+desformat=PDF","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:003437)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":754,"flow_packet_id":1,"flow_first_seen":1576420277909,"flow_last_seen":1576420277909,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51072,"dst_port":8080,"l4_proto":"tcp"}
+0592{"flow_id":754,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":203,"pkt":"AAAAAAAAAAAAAAAACABFAAC9phtAAEAGlh1\/AAABfwAAAceAH5B1J59d+HsAr4AYAED+sQAAAQEICp1m\/72dZv+9R0VUIC9vcGVuLnR4dCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2NDQ4KQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":754,"flow_packet_id":1,"flow_first_seen":1576420277909,"flow_last_seen":1576420277909,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51072,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/open.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006448)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":755,"flow_packet_id":1,"flow_first_seen":1576420277910,"flow_last_seen":1576420277910,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51074,"dst_port":8080,"l4_proto":"tcp"}
+0596{"flow_id":755,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADA+2VAAEAGQNB\/AAABfwAAAceCH5AHKcInz6YgT4AYAED+tAAAAQEICp1m\/76dZv++R0VUIC9meDI5aWQxLnR4dCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2NDQ5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":755,"flow_packet_id":1,"flow_first_seen":1576420277910,"flow_last_seen":1576420277910,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51074,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/fx29id1.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006449)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":756,"flow_packet_id":1,"flow_first_seen":1576420277912,"flow_last_seen":1576420277912,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51076,"dst_port":8080,"l4_proto":"tcp"}
+0597{"flow_id":756,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAC6pAAEAGMIx\/AAABfwAAAceEH5BX8jLvG2MI1oAYAED+tAAAAQEICp1m\/8CdZv\/AR0VUIC9meDI5aWQyLnR4dCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjQ1MCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":756,"flow_packet_id":1,"flow_first_seen":1576420277912,"flow_last_seen":1576420277912,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51076,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/fx29id2.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006450)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":757,"flow_packet_id":1,"flow_first_seen":1576420277913,"flow_last_seen":1576420277913,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51078,"dst_port":8080,"l4_proto":"tcp"}
+0586{"flow_id":757,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":198,"pkt":"AAAAAAAAAAAAAAAACABFAAC4Ym1AAEAG2dB\/AAABfwAAAceGH5BoAlsuZzuA64AYAED+rAAAAQEICp1m\/8GdZv\/BR0VUIC8\/LXMgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY1MjMpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":757,"flow_packet_id":1,"flow_first_seen":1576420277913,"flow_last_seen":1576420277913,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51078,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/?-s","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006523)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":758,"flow_packet_id":1,"flow_first_seen":1576420277917,"flow_last_seen":1576420277917,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51080,"dst_port":8080,"l4_proto":"tcp"}
+0598{"flow_id":758,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":207,"pkt":"AAAAAAAAAAAAAAAACABFAADBkMVAAEAGq29\/AAABfwAAAceIH5D4rqmFil0FBYAYAED+tQAAAQEICp1m\/8WdZv\/ER0VUIC9sb2dpbi5waHA\/LXMgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjUyNCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":758,"flow_packet_id":1,"flow_first_seen":1576420277917,"flow_last_seen":1576420277917,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51080,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.php?-s","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006524)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":759,"flow_packet_id":1,"flow_first_seen":1576420277919,"flow_last_seen":1576420277919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51082,"dst_port":8080,"l4_proto":"tcp"}
+0646{"flow_id":759,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":242,"pkt":"AAAAAAAAAAAAAAAACABFAADk1ppAAEAGZXd\/AAABfwAAAceKH5AeVe\/gFGxiPoAYAED+2AAAAQEICp1m\/8adZv\/GR0VUIC8zcmRwYXJ0eS9waHBNeUFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":759,"flow_packet_id":1,"flow_first_seen":1576420277919,"flow_last_seen":1576420277919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51082,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/3rdparty\/phpMyAdmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":760,"flow_packet_id":1,"flow_first_seen":1576420277920,"flow_last_seen":1576420277920,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51084,"dst_port":8080,"l4_proto":"tcp"}
+0633{"flow_id":760,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":233,"pkt":"AAAAAAAAAAAAAAAACABFAADbRbxAAEAG9l5\/AAABfwAAAceMH5CzBHzzJnp1p4AYAED+zwAAAQEICp1m\/8idZv\/IR0VUIC9waHBNeUFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":760,"flow_packet_id":1,"flow_first_seen":1576420277920,"flow_last_seen":1576420277920,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51084,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpMyAdmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":761,"flow_packet_id":1,"flow_first_seen":1576420277922,"flow_last_seen":1576420277922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51086,"dst_port":8080,"l4_proto":"tcp"}
+0645{"flow_id":761,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":242,"pkt":"AAAAAAAAAAAAAAAACABFAADkm4xAAEAGoIV\/AAABfwAAAceOH5AOOaLD4MTa7oAYAED+2AAAAQEICp1m\/8qdZv\/KR0VUIC8zcmRwYXJ0eS9waHBteWFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":761,"flow_packet_id":1,"flow_first_seen":1576420277922,"flow_last_seen":1576420277922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51086,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/3rdparty\/phpmyadmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":762,"flow_packet_id":1,"flow_first_seen":1576420277923,"flow_last_seen":1576420277923,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51088,"dst_port":8080,"l4_proto":"tcp"}
+0633{"flow_id":762,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":233,"pkt":"AAAAAAAAAAAAAAAACABFAADb3d5AAEAGXjx\/AAABfwAAAceQH5AJweSWVSMF84AYAED+zwAAAQEICp1m\/8udZv\/LR0VUIC9waHBteWFkbWluL3NlcnZlcl9zeW5jLnBocD9jPXBocGluZm8oKSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNjYwOCkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkhvc3Q6IDEyNy4wLjAuMQ0KDQo=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":762,"flow_packet_id":1,"flow_first_seen":1576420277923,"flow_last_seen":1576420277923,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51088,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmyadmin\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":763,"flow_packet_id":1,"flow_first_seen":1576420277925,"flow_last_seen":1576420277925,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51090,"dst_port":8080,"l4_proto":"tcp"}
+0625{"flow_id":763,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":226,"pkt":"AAAAAAAAAAAAAAAACABFAADU+B5AAEAGRAN\/AAABfwAAAceSH5DHT8FWYmCfAYAYAED+yAAAAQEICp1m\/82dZv\/NR0VUIC9wbWEvc2VydmVyX3N5bmMucGhwP2M9cGhwaW5mbygpIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY2MDgpDQoNCg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":763,"flow_packet_id":1,"flow_first_seen":1576420277925,"flow_last_seen":1576420277925,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51090,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/pma\/server_sync.php?c=phpinfo()","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006608)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":764,"flow_packet_id":1,"flow_first_seen":1576420277926,"flow_last_seen":1576420277926,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51092,"dst_port":8080,"l4_proto":"tcp"}
+0593{"flow_id":764,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":202,"pkt":"AAAAAAAAAAAAAAAACABFAAC8cdVAAEAGymR\/AAABfwAAAceUH5AbWUib+wxcy4AYAED+sAAAAQEICp1m\/86dZv\/OR0VUIC9jOTkucGhwIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY3MzkpDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":764,"flow_packet_id":1,"flow_first_seen":1576420277926,"flow_last_seen":1576420277926,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51092,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/c99.php","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006739)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":765,"flow_packet_id":1,"flow_first_seen":1576420277928,"flow_last_seen":1576420277928,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51094,"dst_port":8080,"l4_proto":"tcp"}
+0677{"flow_id":765,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":265,"pkt":"AAAAAAAAAAAAAAAACABFAAD73s9AAEAGXSt\/AAABfwAAAceWH5B+NOeIVrpz2oAYAED+7wAAAQEICp1m\/9CdZv\/PR0VUIC9hd2N1c2VyL2NnaS1iaW4vdmNzP3hzbD0vdmNzL3Zjc19ob21lLnhzbCUyNmNhdCUyMCUyMi9ldGMvcGFzc3dkJTIyJTI2IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2OTk0KQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":765,"flow_packet_id":1,"flow_first_seen":1576420277928,"flow_last_seen":1576420277928,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51094,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/awcuser\/cgi-bin\/vcs?xsl=\/vcs\/vcs_home.xsl%26cat%20%22\/etc\/passwd%22%26","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006994)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":766,"flow_packet_id":1,"flow_first_seen":1576420277929,"flow_last_seen":1576420277929,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51096,"dst_port":8080,"l4_proto":"tcp"}
+0589{"flow_id":766,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":201,"pkt":"AAAAAAAAAAAAAAAACABFAAC7MdtAAEAGCmB\/AAABfwAAAceYH5BhLQiUIFdU+oAYAED+rwAAAQEICp1m\/9GdZv\/RR0VUIC9zY3JpcHQgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDY5OTkpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0K","pkt_caplen":201,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":766,"flow_packet_id":1,"flow_first_seen":1576420277929,"flow_last_seen":1576420277929,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51096,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/script","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006999)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":767,"flow_packet_id":1,"flow_first_seen":1576420277931,"flow_last_seen":1576420277931,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51098,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":767,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":209,"pkt":"AAAAAAAAAAAAAAAACABFAADDfttAAEAGvVd\/AAABfwAAAceaH5AHCUeUa2pQhIAYAED+twAAAQEICp1m\/9OdZv\/SR0VUIC9qZW5raW5zL3NjcmlwdCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2OTk5KQ0KDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":767,"flow_packet_id":1,"flow_first_seen":1576420277931,"flow_last_seen":1576420277931,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51098,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/jenkins\/script","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006999)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":768,"flow_packet_id":1,"flow_first_seen":1576420277933,"flow_last_seen":1576420277933,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51100,"dst_port":8080,"l4_proto":"tcp"}
+0601{"flow_id":768,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":208,"pkt":"AAAAAAAAAAAAAAAACABFAADCrgRAAEAGji9\/AAABfwAAAcecH5DcgpdKIx+4uoAYAED+tgAAAQEICp1m\/9WdZv\/VR0VUIC9odWRzb24vc2NyaXB0IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA2OTk5KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":768,"flow_packet_id":1,"flow_first_seen":1576420277933,"flow_last_seen":1576420277933,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51100,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/hudson\/script","code":0,"content_type":"","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:006999)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":769,"flow_packet_id":1,"flow_first_seen":1576420277971,"flow_last_seen":1576420277971,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51148,"dst_port":8080,"l4_proto":"tcp"}
+0807{"flow_id":769,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":362,"pkt":"AAAAAAAAAAAAAAAACABFAAFctdFAAEAGhch\/AAABfwAAAcfMH5DMiIyc+KcBsoAYAED\/UAAAAQEICp1m\/\/udZv\/7R0VUIC9tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb250ZW50LUxlbmd0aDogMjINCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs=","pkt_caplen":362,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":769,"flow_packet_id":1,"flow_first_seen":1576420277971,"flow_last_seen":1576420277971,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51148,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":770,"flow_packet_id":1,"flow_first_seen":1576420277972,"flow_last_seen":1576420277972,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51150,"dst_port":8080,"l4_proto":"tcp"}
+0823{"flow_id":770,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFnwDVAAEAGe1l\/AAABfwAAAcfOH5AQvflnbGoufoAYAED\/WwAAAQEICp1m\/\/ydZv\/8R0VUIC9waHBtb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":770,"flow_packet_id":1,"flow_first_seen":1576420277972,"flow_last_seen":1576420277972,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51150,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":771,"flow_packet_id":1,"flow_first_seen":1576420277974,"flow_last_seen":1576420277974,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51152,"dst_port":8080,"l4_proto":"tcp"}
+0823{"flow_id":771,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFncRdAAEAGynd\/AAABfwAAAcfQH5DeNEhBp6LH9oAYAED\/WwAAAQEICp1m\/\/2dZv\/9R0VUIC93dS1tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LUxlbmd0aDogMjINCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpIb3N0OiAxMjcuMC4wLjENCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":771,"flow_packet_id":1,"flow_first_seen":1576420277974,"flow_last_seen":1576420277974,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51152,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":772,"flow_packet_id":1,"flow_first_seen":1576420277975,"flow_last_seen":1576420277975,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51154,"dst_port":8080,"l4_proto":"tcp"}
+0820{"flow_id":772,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":370,"pkt":"AAAAAAAAAAAAAAAACABFAAFkoPRAAEAGmp1\/AAABfwAAAcfSH5BFc5mo+BaB54AYAED\/WAAAAQEICp1m\/\/+dZv\/\/R0VUIC9tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0876{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":772,"flow_packet_id":1,"flow_first_seen":1576420277975,"flow_last_seen":1576420277975,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51154,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":773,"flow_packet_id":1,"flow_first_seen":1576420277976,"flow_last_seen":1576420277976,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51156,"dst_port":8080,"l4_proto":"tcp"}
+0808{"flow_id":773,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":365,"pkt":"AAAAAAAAAAAAAAAACABFAAFfD0hAAEAGLE9\/AAABfwAAAcfUH5ChoTYRo2DY7oAYAED\/UwAAAQEICp1nAACdZwAAR0VUIC93dS1tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDExKQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs=","pkt_caplen":365,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":773,"flow_packet_id":1,"flow_first_seen":1576420277976,"flow_last_seen":1576420277976,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51156,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":774,"flow_packet_id":1,"flow_first_seen":1576420277977,"flow_last_seen":1576420277977,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51158,"dst_port":8080,"l4_proto":"tcp"}
+0824{"flow_id":774,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":376,"pkt":"AAAAAAAAAAAAAAAACABFAAFqZD5AAEAG101\/AAABfwAAAcfWH5DMOF1rGOgpBIAYAED\/XgAAAQEICp1nAAGdZwABR0VUIC9waHBtb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LUxlbmd0aDogMjINCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpIb3N0OiAxMjcuMC4wLjENCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":376,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":774,"flow_packet_id":1,"flow_first_seen":1576420277977,"flow_last_seen":1576420277977,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51158,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":775,"flow_packet_id":1,"flow_first_seen":1576420277980,"flow_last_seen":1576420277980,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51160,"dst_port":8080,"l4_proto":"tcp"}
+0824{"flow_id":775,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":376,"pkt":"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","pkt_caplen":376,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":775,"flow_packet_id":1,"flow_first_seen":1576420277980,"flow_last_seen":1576420277980,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51160,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":776,"flow_packet_id":1,"flow_first_seen":1576420277981,"flow_last_seen":1576420277981,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51162,"dst_port":8080,"l4_proto":"tcp"}
+0820{"flow_id":776,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFn7phAAEAGTPZ\/AAABfwAAAcfaH5CzPtfCPnznp4AYAED\/WwAAAQEICp1nAAWdZwAFR0VUIC9tb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb250ZW50LUxlbmd0aDogMjINCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":776,"flow_packet_id":1,"flow_first_seen":1576420277981,"flow_last_seen":1576420277981,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51162,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":777,"flow_packet_id":1,"flow_first_seen":1576420277983,"flow_last_seen":1576420277983,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51164,"dst_port":8080,"l4_proto":"tcp"}
+0804{"flow_id":777,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":362,"pkt":"AAAAAAAAAAAAAAAACABFAAFcKzdAAEAGEGN\/AAABfwAAAcfcH5CIchJjnARiwIAYAED\/UAAAAQEICp1nAAedZwAHR0VUIC9tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDExKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs=","pkt_caplen":362,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":777,"flow_packet_id":1,"flow_first_seen":1576420277983,"flow_last_seen":1576420277983,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51164,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":778,"flow_packet_id":1,"flow_first_seen":1576420277984,"flow_last_seen":1576420277984,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51166,"dst_port":8080,"l4_proto":"tcp"}
+0808{"flow_id":778,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":365,"pkt":"AAAAAAAAAAAAAAAACABFAAFfNJZAAEAGBwF\/AAABfwAAAcfeH5DptA3NjIJEK4AYAED\/UwAAAQEICp1nAAidZwAIR0VUIC93dS1tb2FkbWluLnBocD9jb2xsZWN0aW9uPXNlY3B1bHNlJmFjdGlvbj1saXN0Um93cyZmaW5kPWFycmF5KCk7cGhwaW5mbygpO2V4aXQ7IEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDExKQ0KQ29udGVudC1MZW5ndGg6IDIyDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCm9iamVjdD0xO3N5c3RlbSgnaWQnKTs=","pkt_caplen":365,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":778,"flow_packet_id":1,"flow_first_seen":1576420277984,"flow_last_seen":1576420277984,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51166,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":779,"flow_packet_id":1,"flow_first_seen":1576420277986,"flow_last_seen":1576420277986,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51168,"dst_port":8080,"l4_proto":"tcp"}
+0820{"flow_id":779,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFn4zdAAEAGWFd\/AAABfwAAAcfgH5C+u9puvhX1U4AYAED\/WwAAAQEICp1nAAqdZwAKR0VUIC9waHBtb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcwMTEpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpIb3N0OiAxMjcuMC4wLjENCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":779,"flow_packet_id":1,"flow_first_seen":1576420277986,"flow_last_seen":1576420277986,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51168,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":780,"flow_packet_id":1,"flow_first_seen":1576420277988,"flow_last_seen":1576420277988,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51170,"dst_port":8080,"l4_proto":"tcp"}
+0824{"flow_id":780,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":376,"pkt":"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","pkt_caplen":376,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":780,"flow_packet_id":1,"flow_first_seen":1576420277988,"flow_last_seen":1576420277988,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51170,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/phpmoadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":781,"flow_packet_id":1,"flow_first_seen":1576420277989,"flow_last_seen":1576420277989,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51172,"dst_port":8080,"l4_proto":"tcp"}
+0820{"flow_id":781,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFn5zlAAEAGVFV\/AAABfwAAAcfkH5BgZN5vdwnWyoAYAED\/WwAAAQEICp1nAA2dZwANR0VUIC93dS1tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb250ZW50LUxlbmd0aDogMjINCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":781,"flow_packet_id":1,"flow_first_seen":1576420277989,"flow_last_seen":1576420277989,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51172,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":782,"flow_packet_id":1,"flow_first_seen":1576420277991,"flow_last_seen":1576420277991,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51174,"dst_port":8080,"l4_proto":"tcp"}
+0824{"flow_id":782,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":376,"pkt":"AAAAAAAAAAAAAAAACABFAAFq2t9AAEAGYKx\/AAABfwAAAcfmH5C2ZOOFxq2Ns4AYAED\/XgAAAQEICp1nAA6dZwAOR0VUIC93dS1tb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":376,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":782,"flow_packet_id":1,"flow_first_seen":1576420277991,"flow_last_seen":1576420277991,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51174,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wu-moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":783,"flow_packet_id":1,"flow_first_seen":1576420277992,"flow_last_seen":1576420277992,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51176,"dst_port":8080,"l4_proto":"tcp"}
+0816{"flow_id":783,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":370,"pkt":"AAAAAAAAAAAAAAAACABFAAFk9ANAAEAGR45\/AAABfwAAAcfoH5AH9M1coGd5OYAYAED\/WAAAAQEICp1nABCdZwAQR0VUIC9tb2FkbWluL21vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0876{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":783,"flow_packet_id":1,"flow_first_seen":1576420277992,"flow_last_seen":1576420277992,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51176,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":784,"flow_packet_id":1,"flow_first_seen":1576420277993,"flow_last_seen":1576420277993,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51178,"dst_port":8080,"l4_proto":"tcp"}
+0820{"flow_id":784,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":373,"pkt":"AAAAAAAAAAAAAAAACABFAAFnZv1AAEAG1JF\/AAABfwAAAcfqH5D+xV+iBWcClIAYAED\/WwAAAQEICp1nABGdZwARR0VUIC9tb2FkbWluL3d1LW1vYWRtaW4ucGhwP2NvbGxlY3Rpb249c2VjcHVsc2UmYWN0aW9uPWxpc3RSb3dzJmZpbmQ9YXJyYXkoKTtwaHBpbmZvKCk7ZXhpdDsgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzAxMSkNCkNvbnRlbnQtTGVuZ3RoOiAyMg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCg0Kb2JqZWN0PTE7c3lzdGVtKCdpZCcpOw==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":784,"flow_packet_id":1,"flow_first_seen":1576420277993,"flow_last_seen":1576420277993,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51178,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/moadmin\/wu-moadmin.php?collection=secpulse&action=listRows&find=array();phpinfo();exit;","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007011)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":785,"flow_packet_id":1,"flow_first_seen":1576420277997,"flow_last_seen":1576420277997,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":610,"flow_max_l4_data_len":610,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51182,"dst_port":8080,"l4_proto":"tcp"}
+1179{"flow_id":785,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":644,"pkt":"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","pkt_caplen":644,"pkt_type":2048,"pkt_ipoffset":14}
+1136{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":785,"flow_packet_id":1,"flow_first_seen":1576420277997,"flow_last_seen":1576420277997,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":610,"flow_max_l4_data_len":610,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51182,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vb\/ajax\/api\/hook\/decodeArguments?arguments=O%3A12%3A%22vB_dB_Result%22%3A2%3A%7Bs%3A5%3A%22%00%2A%00db%22%3BO%3A17%3A%22vB_Database_MySQL%22%3A1%3A%7Bs%3A9%3A%22functions%22%3Ba%3A1%3A%7Bs%3A11%3A%22free_result%22%3Bs%3A6%3A%22assert%22%3B%7D%7Ds%3A12%3A%22%00%2A%00recordset%22%3Bs%3A25%3A%22system%28%27cat%20%2Fetc%2Fpasswd%27%29%22%3B%7D","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007058)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":786,"flow_packet_id":1,"flow_first_seen":1576420277998,"flow_last_seen":1576420277998,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":617,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":617,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51184,"dst_port":8080,"l4_proto":"tcp"}
+1188{"flow_id":786,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420277,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+1143{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":786,"flow_packet_id":1,"flow_first_seen":1576420277998,"flow_last_seen":1576420277998,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":617,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":617,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51184,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/vbulletin\/ajax\/api\/hook\/decodeArguments?arguments=O%3A12%3A%22vB_dB_Result%22%3A2%3A%7Bs%3A5%3A%22%00%2A%00db%22%3BO%3A17%3A%22vB_Database_MySQL%22%3A1%3A%7Bs%3A9%3A%22functions%22%3Ba%3A1%3A%7Bs%3A11%3A%22free_result%22%3Bs%3A6%3A%22assert%22%3B%7D%7Ds%3A12%3A%22%00%2A%00recordset%22%3Bs%3A25%3A%22system%28%27cat%20%2Fetc%2Fpasswd%27%29%22%3B%7D","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007058)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":787,"flow_packet_id":1,"flow_first_seen":1576420278000,"flow_last_seen":1576420278000,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51186,"dst_port":8080,"l4_proto":"tcp"}
+0757{"flow_id":787,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":326,"pkt":"AAAAAAAAAAAAAAAACABFAAE4KORAAEAGEtp\/AAABfwAAAcfyH5Cd7RG\/LUrqEYAYAED\/LAAAAQEICp1nABidZwAYR0VUIC9zaGVsbD9jYXQlMjAvZXRjL3Bhc3N3ZCBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MDg0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":787,"flow_packet_id":1,"flow_first_seen":1576420278000,"flow_last_seen":1576420278000,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51186,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/shell?cat%20\/etc\/passwd","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007084)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":788,"flow_packet_id":1,"flow_first_seen":1576420278001,"flow_last_seen":1576420278001,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":8080,"l4_proto":"tcp"}
+0764{"flow_id":788,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":331,"pkt":"AAAAAAAAAAAAAAAACABFAAE9gkdAAEAGuXF\/AAABfwAAAcf0H5CX+bsaLFgA+4AYAED\/MQAAAQEICp1nABmdZwAZR0VUIC93bHMtd3NhdC9Db29yZGluYXRvclBvcnRUeXBlIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MTgyKQ0KQ29udGVudC1MZW5ndGg6IDM5DQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KSG9zdDogMTI3LjAuMC4xDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw==","pkt_caplen":331,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":788,"flow_packet_id":1,"flow_first_seen":1576420278001,"flow_last_seen":1576420278001,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/CoordinatorPortType","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007182)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":789,"flow_packet_id":1,"flow_first_seen":1576420278002,"flow_last_seen":1576420278002,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51190,"dst_port":8080,"l4_proto":"tcp"}
+0768{"flow_id":789,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":335,"pkt":"AAAAAAAAAAAAAAAACABFAAFBkptAAEAGqRl\/AAABfwAAAcf2H5CPbqvGHGavS4AYAED\/NQAAAQEICp1nABqdZwAaR0VUIC93bHMtd3NhdC9SZWdpc3RyYXRpb25Qb3J0VHlwZVJQQyBIVFRQLzEuMQ0KSG9zdDogMTI3LjAuMC4xDQpDb250ZW50LUxlbmd0aDogMzkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MTgzKQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":789,"flow_packet_id":1,"flow_first_seen":1576420278002,"flow_last_seen":1576420278002,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51190,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/RegistrationPortTypeRPC","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007183)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":790,"flow_packet_id":1,"flow_first_seen":1576420278004,"flow_last_seen":1576420278004,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51192,"dst_port":8080,"l4_proto":"tcp"}
+0765{"flow_id":790,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":331,"pkt":"AAAAAAAAAAAAAAAACABFAAE99rJAAEAGRQZ\/AAABfwAAAcf4H5DOUc\/uMPSpHIAYAED\/MQAAAQEICp1nABudZwAbR0VUIC93bHMtd3NhdC9QYXJ0aWNpcGFudFBvcnRUeXBlIEhUVFAvMS4xDQpIb3N0OiAxMjcuMC4wLjENCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcxODQpDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw==","pkt_caplen":331,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":790,"flow_packet_id":1,"flow_first_seen":1576420278004,"flow_last_seen":1576420278004,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51192,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/ParticipantPortType","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007184)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":791,"flow_packet_id":1,"flow_first_seen":1576420278005,"flow_last_seen":1576420278005,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51194,"dst_port":8080,"l4_proto":"tcp"}
+0776{"flow_id":791,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":341,"pkt":"AAAAAAAAAAAAAAAACABFAAFH9c9AAEAGRd9\/AAABfwAAAcf6H5CvysyRaoy75oAYAED\/OwAAAQEICp1nAB2dZwAdR0VUIC93bHMtd3NhdC9SZWdpc3RyYXRpb25SZXF1ZXN0ZXJQb3J0VHlwZSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzE4NSkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDEyNy4wLjAuMQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc=","pkt_caplen":341,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":791,"flow_packet_id":1,"flow_first_seen":1576420278005,"flow_last_seen":1576420278005,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51194,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/RegistrationRequesterPortType","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007185)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":792,"flow_packet_id":1,"flow_first_seen":1576420278006,"flow_last_seen":1576420278006,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51196,"dst_port":8080,"l4_proto":"tcp"}
+0765{"flow_id":792,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":333,"pkt":"AAAAAAAAAAAAAAAACABFAAE\/YadAAEAG2g9\/AAABfwAAAcf8H5A46lj5CJ27noAYAED\/MwAAAQEICp1nAB6dZwAeR0VUIC93bHMtd3NhdC9Db29yZGluYXRvclBvcnRUeXBlMTEgSFRUUC8xLjENCkhvc3Q6IDEyNy4wLjAuMQ0KQ29udGVudC1MZW5ndGg6IDM5DQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzE4NikNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0KdHJhbnNhY3Rpb25faWQ9MSZvYXV0aF90b2tlbj0nJTNiZWNobyAn","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":792,"flow_packet_id":1,"flow_first_seen":1576420278006,"flow_last_seen":1576420278006,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51196,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/CoordinatorPortType11","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007186)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":793,"flow_packet_id":1,"flow_first_seen":1576420278008,"flow_last_seen":1576420278008,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51198,"dst_port":8080,"l4_proto":"tcp"}
+0772{"flow_id":793,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":337,"pkt":"AAAAAAAAAAAAAAAACABFAAFD5CdAAEAGV4t\/AAABfwAAAcf+H5BRed18Cunwm4AYAED\/NwAAAQEICp1nACCdZwAfR0VUIC93bHMtd3NhdC9SZWdpc3RyYXRpb25Qb3J0VHlwZVJQQzExIEhUVFAvMS4xDQpDb250ZW50LUxlbmd0aDogMzkNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MTg3KQ0KSG9zdDogMTI3LjAuMC4xDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":793,"flow_packet_id":1,"flow_first_seen":1576420278008,"flow_last_seen":1576420278008,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51198,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/RegistrationPortTypeRPC11","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007187)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":794,"flow_packet_id":1,"flow_first_seen":1576420278010,"flow_last_seen":1576420278010,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51200,"dst_port":8080,"l4_proto":"tcp"}
+0765{"flow_id":794,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":333,"pkt":"AAAAAAAAAAAAAAAACABFAAE\/OK1AAEAGAwp\/AAABfwAAAcgAH5D7EgH2VMq6xIAYAED\/MwAAAQEICp1nACKdZwAiR0VUIC93bHMtd3NhdC9QYXJ0aWNpcGFudFBvcnRUeXBlMTEgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wMCAoTmlrdG8vMi4xLjYpIChFdmFzaW9uczpOb25lKSAoVGVzdDowMDcxODgpDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KQ29udGVudC1MZW5ndGg6IDM5DQpIb3N0OiAxMjcuMC4wLjENCg0KdHJhbnNhY3Rpb25faWQ9MSZvYXV0aF90b2tlbj0nJTNiZWNobyAn","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":794,"flow_packet_id":1,"flow_first_seen":1576420278010,"flow_last_seen":1576420278010,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51200,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/wls-wsat\/ParticipantPortType11","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007188)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":795,"flow_packet_id":1,"flow_first_seen":1576420278012,"flow_last_seen":1576420278012,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51202,"dst_port":8080,"l4_proto":"tcp"}
+0781{"flow_id":795,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":343,"pkt":"AAAAAAAAAAAAAAAACABFAAFJWQ5AAEAG4p5\/AAABfwAAAcgCH5Cjm2BUk9d3uYAYAED\/PQAAAQEICp1nACSdZwAkR0VUIC9sb2dpbi5jZ2k\/Y2xpPWFhJTIwYWElMjdjYXQlMjAvZXRjL2hvc3RzIEhUVFAvMS4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KQ29udGVudC1MZW5ndGg6IDM5DQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMDAgKE5pa3RvLzIuMS42KSAoRXZhc2lvbnM6Tm9uZSkgKFRlc3Q6MDA3MjM0KQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KSG9zdDogMTI3LjAuMC4xDQoNCnRyYW5zYWN0aW9uX2lkPTEmb2F1dGhfdG9rZW49JyUzYmVjaG8gJw==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":795,"flow_packet_id":1,"flow_first_seen":1576420278012,"flow_last_seen":1576420278012,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51202,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/login.cgi?cli=aa%20aa%27cat%20\/etc\/hosts","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007234)"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":796,"flow_packet_id":1,"flow_first_seen":1576420278014,"flow_last_seen":1576420278014,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51204,"dst_port":8080,"l4_proto":"tcp"}
+0752{"flow_id":796,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","pkt_oversize":false,"pkt_ts":1576420278,"pkt_len":323,"pkt":"AAAAAAAAAAAAAAAACABFAAE1Ck9AAEAGMXJ\/AAABfwAAAcgEH5AitzMTI6HHCIAYAED\/KQAAAQEICp1nACadZwAmR0VUIC9zaGVsbD9jYXQrL2V0Yy9ob3N0cyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAwIChOaWt0by8yLjEuNikgKEV2YXNpb25zOk5vbmUpIChUZXN0OjAwNzIzNSkNCkNvbnRlbnQtTGVuZ3RoOiAzOQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQNCkhvc3Q6IDEyNy4wLjAuMQ0KDQp0cmFuc2FjdGlvbl9pZD0xJm9hdXRoX3Rva2VuPSclM2JlY2hvICc=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0813{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":796,"flow_packet_id":1,"flow_first_seen":1576420278014,"flow_last_seen":1576420278014,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51204,"dst_port":8080,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"127.0.0.1","url":"127.0.0.1\/shell?cat+\/etc\/hosts","code":0,"content_type":"application\/x-www-form-urlencoded","user_agent":"Mozilla\/5.00 (Nikto\/2.1.6) (Evasions:None) (Test:007235)"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":744,"flow_packet_id":1,"flow_first_seen":1576420277895,"flow_last_seen":1576420277895,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51052,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":745,"flow_packet_id":1,"flow_first_seen":1576420277896,"flow_last_seen":1576420277896,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":224,"flow_max_l4_data_len":224,"flow_avg_l4_data_len":224,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51054,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":746,"flow_packet_id":1,"flow_first_seen":1576420277898,"flow_last_seen":1576420277898,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51056,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":747,"flow_packet_id":1,"flow_first_seen":1576420277899,"flow_last_seen":1576420277899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51058,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":748,"flow_packet_id":1,"flow_first_seen":1576420277901,"flow_last_seen":1576420277901,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51060,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":749,"flow_packet_id":1,"flow_first_seen":1576420277902,"flow_last_seen":1576420277902,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":212,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51062,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":750,"flow_packet_id":1,"flow_first_seen":1576420277903,"flow_last_seen":1576420277903,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51064,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":751,"flow_packet_id":1,"flow_first_seen":1576420277905,"flow_last_seen":1576420277905,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51066,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":752,"flow_packet_id":1,"flow_first_seen":1576420277907,"flow_last_seen":1576420277907,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51068,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":753,"flow_packet_id":1,"flow_first_seen":1576420277908,"flow_last_seen":1576420277908,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51070,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":754,"flow_packet_id":1,"flow_first_seen":1576420277909,"flow_last_seen":1576420277909,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51072,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":755,"flow_packet_id":1,"flow_first_seen":1576420277910,"flow_last_seen":1576420277910,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51074,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":756,"flow_packet_id":1,"flow_first_seen":1576420277912,"flow_last_seen":1576420277912,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51076,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":757,"flow_packet_id":1,"flow_first_seen":1576420277913,"flow_last_seen":1576420277913,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51078,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":758,"flow_packet_id":1,"flow_first_seen":1576420277917,"flow_last_seen":1576420277917,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51080,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":759,"flow_packet_id":1,"flow_first_seen":1576420277919,"flow_last_seen":1576420277919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51082,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":760,"flow_packet_id":1,"flow_first_seen":1576420277920,"flow_last_seen":1576420277920,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51084,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":761,"flow_packet_id":1,"flow_first_seen":1576420277922,"flow_last_seen":1576420277922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":208,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51086,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":762,"flow_packet_id":1,"flow_first_seen":1576420277923,"flow_last_seen":1576420277923,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51088,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":763,"flow_packet_id":1,"flow_first_seen":1576420277925,"flow_last_seen":1576420277925,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51090,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":764,"flow_packet_id":1,"flow_first_seen":1576420277926,"flow_last_seen":1576420277926,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51092,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":765,"flow_packet_id":1,"flow_first_seen":1576420277928,"flow_last_seen":1576420277928,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51094,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":766,"flow_packet_id":1,"flow_first_seen":1576420277929,"flow_last_seen":1576420277929,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51096,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":767,"flow_packet_id":1,"flow_first_seen":1576420277931,"flow_last_seen":1576420277931,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51098,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":768,"flow_packet_id":1,"flow_first_seen":1576420277933,"flow_last_seen":1576420277933,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51100,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":769,"flow_packet_id":1,"flow_first_seen":1576420277971,"flow_last_seen":1576420277971,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51148,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":770,"flow_packet_id":1,"flow_first_seen":1576420277972,"flow_last_seen":1576420277972,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51150,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":771,"flow_packet_id":1,"flow_first_seen":1576420277974,"flow_last_seen":1576420277974,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51152,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":772,"flow_packet_id":1,"flow_first_seen":1576420277975,"flow_last_seen":1576420277975,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51154,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":773,"flow_packet_id":1,"flow_first_seen":1576420277976,"flow_last_seen":1576420277976,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51156,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":774,"flow_packet_id":1,"flow_first_seen":1576420277977,"flow_last_seen":1576420277977,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51158,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":775,"flow_packet_id":1,"flow_first_seen":1576420277980,"flow_last_seen":1576420277980,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51160,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":776,"flow_packet_id":1,"flow_first_seen":1576420277981,"flow_last_seen":1576420277981,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51162,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":777,"flow_packet_id":1,"flow_first_seen":1576420277983,"flow_last_seen":1576420277983,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":328,"flow_max_l4_data_len":328,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51164,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":778,"flow_packet_id":1,"flow_first_seen":1576420277984,"flow_last_seen":1576420277984,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51166,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":779,"flow_packet_id":1,"flow_first_seen":1576420277986,"flow_last_seen":1576420277986,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51168,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":780,"flow_packet_id":1,"flow_first_seen":1576420277988,"flow_last_seen":1576420277988,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51170,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":781,"flow_packet_id":1,"flow_first_seen":1576420277989,"flow_last_seen":1576420277989,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51172,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":782,"flow_packet_id":1,"flow_first_seen":1576420277991,"flow_last_seen":1576420277991,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":342,"flow_max_l4_data_len":342,"flow_avg_l4_data_len":342,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51174,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":783,"flow_packet_id":1,"flow_first_seen":1576420277992,"flow_last_seen":1576420277992,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51176,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":784,"flow_packet_id":1,"flow_first_seen":1576420277993,"flow_last_seen":1576420277993,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51178,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":785,"flow_packet_id":1,"flow_first_seen":1576420277997,"flow_last_seen":1576420277997,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":610,"flow_max_l4_data_len":610,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51182,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":786,"flow_packet_id":1,"flow_first_seen":1576420277998,"flow_last_seen":1576420277998,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":617,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":617,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51184,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":787,"flow_packet_id":1,"flow_first_seen":1576420278000,"flow_last_seen":1576420278000,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51186,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":788,"flow_packet_id":1,"flow_first_seen":1576420278001,"flow_last_seen":1576420278001,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51188,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":789,"flow_packet_id":1,"flow_first_seen":1576420278002,"flow_last_seen":1576420278002,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51190,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":790,"flow_packet_id":1,"flow_first_seen":1576420278004,"flow_last_seen":1576420278004,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51192,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":791,"flow_packet_id":1,"flow_first_seen":1576420278005,"flow_last_seen":1576420278005,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51194,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":792,"flow_packet_id":1,"flow_first_seen":1576420278006,"flow_last_seen":1576420278006,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51196,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":793,"flow_packet_id":1,"flow_first_seen":1576420278008,"flow_last_seen":1576420278008,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51198,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":794,"flow_packet_id":1,"flow_first_seen":1576420278010,"flow_last_seen":1576420278010,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51200,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":795,"flow_packet_id":1,"flow_first_seen":1576420278012,"flow_last_seen":1576420278012,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51202,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":796,"flow_packet_id":1,"flow_first_seen":1576420278014,"flow_last_seen":1576420278014,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51204,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576420276577,"flow_last_seen":1576420276577,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49544,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576420276660,"flow_last_seen":1576420276660,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49546,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576420276662,"flow_last_seen":1576420276662,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49548,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576420276665,"flow_last_seen":1576420276665,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":204,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":204,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49550,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1576420276666,"flow_last_seen":1576420276666,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49552,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1576420276667,"flow_last_seen":1576420276667,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49554,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1576420276668,"flow_last_seen":1576420276668,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49556,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1576420276669,"flow_last_seen":1576420276669,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49558,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1576420276672,"flow_last_seen":1576420276672,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49560,"dst_port":8080,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1576420276673,"flow_last_seen":1576420276673,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49562,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1576420276675,"flow_last_seen":1576420276675,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49564,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1576420276676,"flow_last_seen":1576420276676,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49566,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1576420276677,"flow_last_seen":1576420276677,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49568,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1576420276678,"flow_last_seen":1576420276678,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49570,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1576420276679,"flow_last_seen":1576420276679,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49572,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1576420276680,"flow_last_seen":1576420276680,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49574,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1576420276681,"flow_last_seen":1576420276681,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49576,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1576420276683,"flow_last_seen":1576420276683,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49578,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1576420276685,"flow_last_seen":1576420276685,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49580,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1576420276686,"flow_last_seen":1576420276686,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49582,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1576420276687,"flow_last_seen":1576420276687,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49584,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1576420276689,"flow_last_seen":1576420276689,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49586,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1576420276690,"flow_last_seen":1576420276690,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49588,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1576420276692,"flow_last_seen":1576420276692,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49590,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1576420276694,"flow_last_seen":1576420276694,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49592,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1576420276695,"flow_last_seen":1576420276695,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49594,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1576420276697,"flow_last_seen":1576420276697,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49596,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1576420276699,"flow_last_seen":1576420276699,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49598,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1576420276701,"flow_last_seen":1576420276701,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49600,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1576420276703,"flow_last_seen":1576420276703,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49602,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1576420276704,"flow_last_seen":1576420276704,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49604,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1576420276705,"flow_last_seen":1576420276705,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49606,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1576420276707,"flow_last_seen":1576420276707,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49608,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1576420276708,"flow_last_seen":1576420276708,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49610,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1576420276710,"flow_last_seen":1576420276710,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49612,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1576420276711,"flow_last_seen":1576420276711,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49614,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1576420276713,"flow_last_seen":1576420276713,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49616,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1576420276714,"flow_last_seen":1576420276714,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49618,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1576420276717,"flow_last_seen":1576420276717,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49620,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1576420276718,"flow_last_seen":1576420276718,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49622,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1576420276719,"flow_last_seen":1576420276719,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49624,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1576420276721,"flow_last_seen":1576420276721,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49626,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1576420276722,"flow_last_seen":1576420276722,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49628,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1576420276724,"flow_last_seen":1576420276724,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49630,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1576420276725,"flow_last_seen":1576420276725,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49632,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1576420276727,"flow_last_seen":1576420276727,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49634,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1576420276728,"flow_last_seen":1576420276728,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49636,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1576420276730,"flow_last_seen":1576420276730,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49638,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1576420276733,"flow_last_seen":1576420276733,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49640,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1576420276734,"flow_last_seen":1576420276734,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":160,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":160,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49642,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1576420276738,"flow_last_seen":1576420276738,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":195,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":195,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49644,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1576420276739,"flow_last_seen":1576420276739,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49646,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1576420276741,"flow_last_seen":1576420276741,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49648,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1576420276742,"flow_last_seen":1576420276742,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49650,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1576420276743,"flow_last_seen":1576420276743,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49652,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1576420276744,"flow_last_seen":1576420276744,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49654,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1576420276745,"flow_last_seen":1576420276745,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49656,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1576420276747,"flow_last_seen":1576420276747,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49658,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1576420276749,"flow_last_seen":1576420276749,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49660,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1576420276751,"flow_last_seen":1576420276751,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49662,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1576420276754,"flow_last_seen":1576420276754,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":199,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":199,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49664,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1576420276756,"flow_last_seen":1576420276756,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49666,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1576420276758,"flow_last_seen":1576420276758,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49668,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1576420276760,"flow_last_seen":1576420276760,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49670,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1576420276761,"flow_last_seen":1576420276761,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49672,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1576420276763,"flow_last_seen":1576420276763,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49674,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1576420276764,"flow_last_seen":1576420276764,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49676,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1576420276765,"flow_last_seen":1576420276765,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49678,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1576420276768,"flow_last_seen":1576420276768,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49680,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1576420276768,"flow_last_seen":1576420276768,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49680,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1576420276770,"flow_last_seen":1576420276770,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49682,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1576420276770,"flow_last_seen":1576420276770,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49682,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1576420276771,"flow_last_seen":1576420276771,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49684,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1576420276771,"flow_last_seen":1576420276771,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49684,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1576420276773,"flow_last_seen":1576420276773,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49686,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1576420276773,"flow_last_seen":1576420276773,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49686,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1576420276774,"flow_last_seen":1576420276774,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49688,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1576420276774,"flow_last_seen":1576420276774,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":189,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":189,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49688,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1576420276776,"flow_last_seen":1576420276776,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49690,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1576420276776,"flow_last_seen":1576420276776,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49690,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1576420276777,"flow_last_seen":1576420276777,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49692,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1576420276777,"flow_last_seen":1576420276777,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49692,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1576420276779,"flow_last_seen":1576420276779,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49694,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1576420276779,"flow_last_seen":1576420276779,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49694,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1576420276780,"flow_last_seen":1576420276780,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49696,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1576420276780,"flow_last_seen":1576420276780,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49696,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1576420276781,"flow_last_seen":1576420276781,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":170,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":170,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49698,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1576420276781,"flow_last_seen":1576420276781,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":170,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":170,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49698,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1576420276784,"flow_last_seen":1576420276784,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49700,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1576420276784,"flow_last_seen":1576420276784,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49700,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1576420276786,"flow_last_seen":1576420276786,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49702,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1576420276786,"flow_last_seen":1576420276786,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49702,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1576420276787,"flow_last_seen":1576420276787,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49704,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1576420276787,"flow_last_seen":1576420276787,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49704,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1576420276789,"flow_last_seen":1576420276789,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49706,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1576420276789,"flow_last_seen":1576420276789,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49706,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1576420276790,"flow_last_seen":1576420276790,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49708,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1576420276790,"flow_last_seen":1576420276790,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49708,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1576420276792,"flow_last_seen":1576420276792,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49710,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1576420276792,"flow_last_seen":1576420276792,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49710,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1576420276793,"flow_last_seen":1576420276793,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49712,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1576420276793,"flow_last_seen":1576420276793,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49712,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1576420276794,"flow_last_seen":1576420276794,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49714,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1576420276794,"flow_last_seen":1576420276794,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49714,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1576420276796,"flow_last_seen":1576420276796,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49716,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1576420276796,"flow_last_seen":1576420276796,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":167,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":167,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49716,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1576420276797,"flow_last_seen":1576420276797,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49718,"dst_port":8080,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1576420276801,"flow_last_seen":1576420276801,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":155,"flow_max_l4_data_len":155,"flow_avg_l4_data_len":155,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49720,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1576420276801,"flow_last_seen":1576420276801,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":155,"flow_max_l4_data_len":155,"flow_avg_l4_data_len":155,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49720,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1576420276803,"flow_last_seen":1576420276803,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49722,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1576420276804,"flow_last_seen":1576420276804,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49724,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1576420276806,"flow_last_seen":1576420276806,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49726,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1576420276807,"flow_last_seen":1576420276807,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49728,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1576420276809,"flow_last_seen":1576420276809,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49730,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1576420276810,"flow_last_seen":1576420276810,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49732,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1576420276812,"flow_last_seen":1576420276812,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49734,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1576420276813,"flow_last_seen":1576420276813,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49736,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1576420276815,"flow_last_seen":1576420276815,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49738,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1576420276817,"flow_last_seen":1576420276817,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49740,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1576420276819,"flow_last_seen":1576420276819,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49742,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1576420276820,"flow_last_seen":1576420276820,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49744,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1576420276821,"flow_last_seen":1576420276821,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49746,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1576420276823,"flow_last_seen":1576420276823,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49748,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1576420276824,"flow_last_seen":1576420276824,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49750,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1576420276825,"flow_last_seen":1576420276825,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49752,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1576420276827,"flow_last_seen":1576420276827,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49754,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1576420276828,"flow_last_seen":1576420276828,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49756,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1576420276829,"flow_last_seen":1576420276829,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49758,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1576420276832,"flow_last_seen":1576420276832,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49760,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1576420276834,"flow_last_seen":1576420276834,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49764,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1576420276835,"flow_last_seen":1576420276835,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49766,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1576420276837,"flow_last_seen":1576420276837,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49768,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1576420276839,"flow_last_seen":1576420276839,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":258,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49770,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1576420276840,"flow_last_seen":1576420276840,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49772,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1576420276841,"flow_last_seen":1576420276841,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":270,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":270,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49774,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1576420276842,"flow_last_seen":1576420276842,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":263,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49776,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1576420276844,"flow_last_seen":1576420276844,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49778,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1576420276847,"flow_last_seen":1576420276847,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":260,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":260,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49780,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1576420276856,"flow_last_seen":1576420276856,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49782,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1576420276858,"flow_last_seen":1576420276858,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49784,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1576420276859,"flow_last_seen":1576420276859,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49786,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1576420276860,"flow_last_seen":1576420276860,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49788,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1576420276862,"flow_last_seen":1576420276862,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49790,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1576420276863,"flow_last_seen":1576420276863,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49792,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1576420276864,"flow_last_seen":1576420276864,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49794,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1576420276865,"flow_last_seen":1576420276865,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49796,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1576420276866,"flow_last_seen":1576420276866,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49798,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1576420276869,"flow_last_seen":1576420276869,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49800,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1576420276870,"flow_last_seen":1576420276870,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49802,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1576420276871,"flow_last_seen":1576420276871,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49804,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1576420276872,"flow_last_seen":1576420276872,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49806,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1576420276873,"flow_last_seen":1576420276873,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49808,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1576420276874,"flow_last_seen":1576420276874,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49810,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1576420276876,"flow_last_seen":1576420276876,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49812,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1576420276877,"flow_last_seen":1576420276877,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49814,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1576420276879,"flow_last_seen":1576420276879,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49816,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1576420276881,"flow_last_seen":1576420276881,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49818,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1576420276884,"flow_last_seen":1576420276884,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49820,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1576420276885,"flow_last_seen":1576420276885,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49822,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1576420276886,"flow_last_seen":1576420276886,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49824,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1576420276888,"flow_last_seen":1576420276888,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49826,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1576420276890,"flow_last_seen":1576420276890,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49828,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1576420276891,"flow_last_seen":1576420276891,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49830,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1576420276893,"flow_last_seen":1576420276893,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49832,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1576420276894,"flow_last_seen":1576420276894,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49834,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1576420276896,"flow_last_seen":1576420276896,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49836,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1576420276897,"flow_last_seen":1576420276897,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49838,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1576420276900,"flow_last_seen":1576420276900,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49840,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1576420276901,"flow_last_seen":1576420276901,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49842,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1576420276903,"flow_last_seen":1576420276903,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49844,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1576420276904,"flow_last_seen":1576420276904,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49846,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1576420276905,"flow_last_seen":1576420276905,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49848,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1576420276907,"flow_last_seen":1576420276907,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49850,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1576420276908,"flow_last_seen":1576420276908,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49852,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1576420276910,"flow_last_seen":1576420276910,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49854,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1576420276912,"flow_last_seen":1576420276912,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49856,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1576420276913,"flow_last_seen":1576420276913,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49858,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1576420276916,"flow_last_seen":1576420276916,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49860,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1576420276917,"flow_last_seen":1576420276917,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49862,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1576420276919,"flow_last_seen":1576420276919,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49864,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1576420276920,"flow_last_seen":1576420276920,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49866,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1576420276922,"flow_last_seen":1576420276922,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49868,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1576420276924,"flow_last_seen":1576420276924,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49870,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1576420276925,"flow_last_seen":1576420276925,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49872,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1576420276926,"flow_last_seen":1576420276926,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49874,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1576420276928,"flow_last_seen":1576420276928,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49876,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1576420276929,"flow_last_seen":1576420276929,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49878,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1576420276932,"flow_last_seen":1576420276932,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49880,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1576420276933,"flow_last_seen":1576420276933,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49882,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1576420276934,"flow_last_seen":1576420276934,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49884,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1576420276936,"flow_last_seen":1576420276936,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49886,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1576420276937,"flow_last_seen":1576420276937,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49888,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1576420276938,"flow_last_seen":1576420276938,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49890,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1576420276939,"flow_last_seen":1576420276939,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49892,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1576420276941,"flow_last_seen":1576420276941,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49894,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1576420276943,"flow_last_seen":1576420276943,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49896,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1576420276945,"flow_last_seen":1576420276945,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49898,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1576420276947,"flow_last_seen":1576420276947,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49900,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1576420276949,"flow_last_seen":1576420276949,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49902,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1576420276950,"flow_last_seen":1576420276950,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49904,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1576420276953,"flow_last_seen":1576420276953,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49906,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1576420276955,"flow_last_seen":1576420276955,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49908,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1576420276956,"flow_last_seen":1576420276956,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49910,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1576420276957,"flow_last_seen":1576420276957,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49912,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1576420276959,"flow_last_seen":1576420276959,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49914,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1576420276960,"flow_last_seen":1576420276960,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49916,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1576420276961,"flow_last_seen":1576420276961,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49918,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1576420276964,"flow_last_seen":1576420276964,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49920,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1576420276965,"flow_last_seen":1576420276965,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49922,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1576420276966,"flow_last_seen":1576420276966,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49924,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1576420276968,"flow_last_seen":1576420276968,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49926,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1576420276969,"flow_last_seen":1576420276969,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49928,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1576420276970,"flow_last_seen":1576420276970,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49930,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1576420276972,"flow_last_seen":1576420276972,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49932,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1576420276973,"flow_last_seen":1576420276973,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49934,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1576420276976,"flow_last_seen":1576420276976,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49936,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1576420276977,"flow_last_seen":1576420276977,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49938,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1576420276980,"flow_last_seen":1576420276980,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49940,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1576420276982,"flow_last_seen":1576420276982,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49942,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1576420276983,"flow_last_seen":1576420276983,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49944,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1576420276985,"flow_last_seen":1576420276985,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49946,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1576420276986,"flow_last_seen":1576420276986,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49948,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1576420276987,"flow_last_seen":1576420276987,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49950,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1576420276989,"flow_last_seen":1576420276989,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49952,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1576420276990,"flow_last_seen":1576420276990,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49954,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1576420276992,"flow_last_seen":1576420276992,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49956,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1576420276993,"flow_last_seen":1576420276993,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49958,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1576420276995,"flow_last_seen":1576420276995,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49960,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1576420276996,"flow_last_seen":1576420276996,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49962,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1576420276998,"flow_last_seen":1576420276998,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49964,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1576420276999,"flow_last_seen":1576420276999,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49966,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1576420277000,"flow_last_seen":1576420277000,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49968,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1576420277001,"flow_last_seen":1576420277001,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49970,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1576420277002,"flow_last_seen":1576420277002,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49972,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1576420277004,"flow_last_seen":1576420277004,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49974,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1576420277006,"flow_last_seen":1576420277006,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49976,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1576420277007,"flow_last_seen":1576420277007,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49978,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1576420277010,"flow_last_seen":1576420277010,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49980,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1576420277011,"flow_last_seen":1576420277011,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49982,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1576420277013,"flow_last_seen":1576420277013,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49984,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1576420277014,"flow_last_seen":1576420277014,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49986,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1576420277016,"flow_last_seen":1576420277016,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49988,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1576420277017,"flow_last_seen":1576420277017,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49990,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1576420277019,"flow_last_seen":1576420277019,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49992,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1576420277020,"flow_last_seen":1576420277020,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49994,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1576420277021,"flow_last_seen":1576420277021,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49996,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1576420277023,"flow_last_seen":1576420277023,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":49998,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1576420277025,"flow_last_seen":1576420277025,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50000,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1576420277027,"flow_last_seen":1576420277027,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50002,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1576420277028,"flow_last_seen":1576420277028,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50004,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1576420277029,"flow_last_seen":1576420277029,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50006,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1576420277031,"flow_last_seen":1576420277031,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50008,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1576420277032,"flow_last_seen":1576420277032,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50010,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1576420277033,"flow_last_seen":1576420277033,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50012,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1576420277034,"flow_last_seen":1576420277034,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50014,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1576420277036,"flow_last_seen":1576420277036,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50016,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1576420277037,"flow_last_seen":1576420277037,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50018,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1576420277040,"flow_last_seen":1576420277040,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50020,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1576420277041,"flow_last_seen":1576420277041,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50022,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1576420277042,"flow_last_seen":1576420277042,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50024,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1576420277044,"flow_last_seen":1576420277044,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50026,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1576420277045,"flow_last_seen":1576420277045,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50028,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1576420277046,"flow_last_seen":1576420277046,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50030,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1576420277048,"flow_last_seen":1576420277048,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50032,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1576420277049,"flow_last_seen":1576420277049,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50034,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":1576420277050,"flow_last_seen":1576420277050,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50036,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":1576420277051,"flow_last_seen":1576420277051,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50038,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":1576420277054,"flow_last_seen":1576420277054,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50040,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":1576420277055,"flow_last_seen":1576420277055,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50042,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":1576420277057,"flow_last_seen":1576420277057,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50044,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":1576420277058,"flow_last_seen":1576420277058,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50046,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":251,"flow_packet_id":1,"flow_first_seen":1576420277060,"flow_last_seen":1576420277060,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50048,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":252,"flow_packet_id":1,"flow_first_seen":1576420277061,"flow_last_seen":1576420277061,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50050,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":253,"flow_packet_id":1,"flow_first_seen":1576420277063,"flow_last_seen":1576420277063,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50052,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1576420277064,"flow_last_seen":1576420277064,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50054,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":255,"flow_packet_id":1,"flow_first_seen":1576420277066,"flow_last_seen":1576420277066,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50056,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":256,"flow_packet_id":1,"flow_first_seen":1576420277067,"flow_last_seen":1576420277067,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50058,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":257,"flow_packet_id":1,"flow_first_seen":1576420277070,"flow_last_seen":1576420277070,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50060,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1576420277072,"flow_last_seen":1576420277072,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50062,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":259,"flow_packet_id":1,"flow_first_seen":1576420277074,"flow_last_seen":1576420277074,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50064,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":260,"flow_packet_id":1,"flow_first_seen":1576420277075,"flow_last_seen":1576420277075,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50066,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1576420277077,"flow_last_seen":1576420277077,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50068,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1576420277078,"flow_last_seen":1576420277078,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50070,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1576420277079,"flow_last_seen":1576420277079,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50072,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1576420277081,"flow_last_seen":1576420277081,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50074,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1576420277083,"flow_last_seen":1576420277083,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50076,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1576420277084,"flow_last_seen":1576420277084,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50078,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":267,"flow_packet_id":1,"flow_first_seen":1576420277086,"flow_last_seen":1576420277086,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50080,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":268,"flow_packet_id":1,"flow_first_seen":1576420277087,"flow_last_seen":1576420277087,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50082,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":269,"flow_packet_id":1,"flow_first_seen":1576420277089,"flow_last_seen":1576420277089,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50084,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":270,"flow_packet_id":1,"flow_first_seen":1576420277090,"flow_last_seen":1576420277090,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50086,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":271,"flow_packet_id":1,"flow_first_seen":1576420277091,"flow_last_seen":1576420277091,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50088,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1576420277093,"flow_last_seen":1576420277093,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50090,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":273,"flow_packet_id":1,"flow_first_seen":1576420277094,"flow_last_seen":1576420277094,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50092,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":274,"flow_packet_id":1,"flow_first_seen":1576420277096,"flow_last_seen":1576420277096,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50094,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":275,"flow_packet_id":1,"flow_first_seen":1576420277098,"flow_last_seen":1576420277098,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50096,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":276,"flow_packet_id":1,"flow_first_seen":1576420277100,"flow_last_seen":1576420277100,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50098,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1576420277106,"flow_last_seen":1576420277106,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50100,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":278,"flow_packet_id":1,"flow_first_seen":1576420277109,"flow_last_seen":1576420277109,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50102,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":279,"flow_packet_id":1,"flow_first_seen":1576420277113,"flow_last_seen":1576420277113,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50104,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":280,"flow_packet_id":1,"flow_first_seen":1576420277115,"flow_last_seen":1576420277115,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50106,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":281,"flow_packet_id":1,"flow_first_seen":1576420277116,"flow_last_seen":1576420277116,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50108,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":282,"flow_packet_id":1,"flow_first_seen":1576420277118,"flow_last_seen":1576420277118,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50110,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":283,"flow_packet_id":1,"flow_first_seen":1576420277119,"flow_last_seen":1576420277119,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50112,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":284,"flow_packet_id":1,"flow_first_seen":1576420277121,"flow_last_seen":1576420277121,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50114,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":285,"flow_packet_id":1,"flow_first_seen":1576420277122,"flow_last_seen":1576420277122,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50116,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":286,"flow_packet_id":1,"flow_first_seen":1576420277123,"flow_last_seen":1576420277123,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50118,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":287,"flow_packet_id":1,"flow_first_seen":1576420277126,"flow_last_seen":1576420277126,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50120,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":288,"flow_packet_id":1,"flow_first_seen":1576420277127,"flow_last_seen":1576420277127,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50122,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1576420277128,"flow_last_seen":1576420277128,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50124,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":290,"flow_packet_id":1,"flow_first_seen":1576420277130,"flow_last_seen":1576420277130,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50126,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":291,"flow_packet_id":1,"flow_first_seen":1576420277134,"flow_last_seen":1576420277134,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50128,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":292,"flow_packet_id":1,"flow_first_seen":1576420277136,"flow_last_seen":1576420277136,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50130,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":293,"flow_packet_id":1,"flow_first_seen":1576420277141,"flow_last_seen":1576420277141,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50132,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":294,"flow_packet_id":1,"flow_first_seen":1576420277142,"flow_last_seen":1576420277142,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50134,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":295,"flow_packet_id":1,"flow_first_seen":1576420277144,"flow_last_seen":1576420277144,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50136,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":296,"flow_packet_id":1,"flow_first_seen":1576420277145,"flow_last_seen":1576420277145,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50138,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":297,"flow_packet_id":1,"flow_first_seen":1576420277148,"flow_last_seen":1576420277148,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50140,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":298,"flow_packet_id":1,"flow_first_seen":1576420277153,"flow_last_seen":1576420277153,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50142,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":299,"flow_packet_id":1,"flow_first_seen":1576420277155,"flow_last_seen":1576420277155,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50144,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":300,"flow_packet_id":1,"flow_first_seen":1576420277157,"flow_last_seen":1576420277157,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50146,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":301,"flow_packet_id":1,"flow_first_seen":1576420277159,"flow_last_seen":1576420277159,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50148,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":302,"flow_packet_id":1,"flow_first_seen":1576420277160,"flow_last_seen":1576420277160,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50150,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":303,"flow_packet_id":1,"flow_first_seen":1576420277162,"flow_last_seen":1576420277162,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50152,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":304,"flow_packet_id":1,"flow_first_seen":1576420277164,"flow_last_seen":1576420277164,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50154,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":305,"flow_packet_id":1,"flow_first_seen":1576420277165,"flow_last_seen":1576420277165,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50156,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":306,"flow_packet_id":1,"flow_first_seen":1576420277166,"flow_last_seen":1576420277166,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50158,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":307,"flow_packet_id":1,"flow_first_seen":1576420277168,"flow_last_seen":1576420277168,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50160,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":308,"flow_packet_id":1,"flow_first_seen":1576420277170,"flow_last_seen":1576420277170,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50162,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":309,"flow_packet_id":1,"flow_first_seen":1576420277171,"flow_last_seen":1576420277171,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50164,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":310,"flow_packet_id":1,"flow_first_seen":1576420277172,"flow_last_seen":1576420277172,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50166,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":311,"flow_packet_id":1,"flow_first_seen":1576420277173,"flow_last_seen":1576420277173,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50168,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":312,"flow_packet_id":1,"flow_first_seen":1576420277175,"flow_last_seen":1576420277175,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50170,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":313,"flow_packet_id":1,"flow_first_seen":1576420277176,"flow_last_seen":1576420277176,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50172,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":314,"flow_packet_id":1,"flow_first_seen":1576420277177,"flow_last_seen":1576420277177,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50174,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":315,"flow_packet_id":1,"flow_first_seen":1576420277179,"flow_last_seen":1576420277179,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50176,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":316,"flow_packet_id":1,"flow_first_seen":1576420277180,"flow_last_seen":1576420277180,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50178,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":317,"flow_packet_id":1,"flow_first_seen":1576420277183,"flow_last_seen":1576420277183,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50180,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":318,"flow_packet_id":1,"flow_first_seen":1576420277184,"flow_last_seen":1576420277184,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50182,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":319,"flow_packet_id":1,"flow_first_seen":1576420277185,"flow_last_seen":1576420277185,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50184,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":320,"flow_packet_id":1,"flow_first_seen":1576420277186,"flow_last_seen":1576420277186,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50186,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":321,"flow_packet_id":1,"flow_first_seen":1576420277187,"flow_last_seen":1576420277187,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50188,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":322,"flow_packet_id":1,"flow_first_seen":1576420277189,"flow_last_seen":1576420277189,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50190,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":323,"flow_packet_id":1,"flow_first_seen":1576420277190,"flow_last_seen":1576420277190,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50192,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":324,"flow_packet_id":1,"flow_first_seen":1576420277193,"flow_last_seen":1576420277193,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50194,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":325,"flow_packet_id":1,"flow_first_seen":1576420277194,"flow_last_seen":1576420277194,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50196,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":326,"flow_packet_id":1,"flow_first_seen":1576420277196,"flow_last_seen":1576420277196,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50198,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":327,"flow_packet_id":1,"flow_first_seen":1576420277198,"flow_last_seen":1576420277198,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50200,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":328,"flow_packet_id":1,"flow_first_seen":1576420277200,"flow_last_seen":1576420277200,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50202,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":329,"flow_packet_id":1,"flow_first_seen":1576420277201,"flow_last_seen":1576420277201,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50204,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":330,"flow_packet_id":1,"flow_first_seen":1576420277203,"flow_last_seen":1576420277203,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50206,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":331,"flow_packet_id":1,"flow_first_seen":1576420277204,"flow_last_seen":1576420277204,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50208,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":332,"flow_packet_id":1,"flow_first_seen":1576420277206,"flow_last_seen":1576420277206,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50210,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":333,"flow_packet_id":1,"flow_first_seen":1576420277207,"flow_last_seen":1576420277207,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50212,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":334,"flow_packet_id":1,"flow_first_seen":1576420277209,"flow_last_seen":1576420277209,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50214,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":335,"flow_packet_id":1,"flow_first_seen":1576420277210,"flow_last_seen":1576420277210,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50216,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":336,"flow_packet_id":1,"flow_first_seen":1576420277211,"flow_last_seen":1576420277211,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50218,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":337,"flow_packet_id":1,"flow_first_seen":1576420277213,"flow_last_seen":1576420277213,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50220,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":338,"flow_packet_id":1,"flow_first_seen":1576420277215,"flow_last_seen":1576420277215,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50222,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":339,"flow_packet_id":1,"flow_first_seen":1576420277216,"flow_last_seen":1576420277216,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50224,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":340,"flow_packet_id":1,"flow_first_seen":1576420277217,"flow_last_seen":1576420277217,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50226,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":341,"flow_packet_id":1,"flow_first_seen":1576420277218,"flow_last_seen":1576420277218,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50228,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":342,"flow_packet_id":1,"flow_first_seen":1576420277219,"flow_last_seen":1576420277219,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50230,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":343,"flow_packet_id":1,"flow_first_seen":1576420277221,"flow_last_seen":1576420277221,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50232,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":344,"flow_packet_id":1,"flow_first_seen":1576420277222,"flow_last_seen":1576420277222,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50234,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":345,"flow_packet_id":1,"flow_first_seen":1576420277224,"flow_last_seen":1576420277224,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50236,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":346,"flow_packet_id":1,"flow_first_seen":1576420277225,"flow_last_seen":1576420277225,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50238,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":347,"flow_packet_id":1,"flow_first_seen":1576420277228,"flow_last_seen":1576420277228,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50240,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":348,"flow_packet_id":1,"flow_first_seen":1576420277229,"flow_last_seen":1576420277229,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50242,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":349,"flow_packet_id":1,"flow_first_seen":1576420277231,"flow_last_seen":1576420277231,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50244,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":350,"flow_packet_id":1,"flow_first_seen":1576420277232,"flow_last_seen":1576420277232,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50246,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":351,"flow_packet_id":1,"flow_first_seen":1576420277233,"flow_last_seen":1576420277233,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50248,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":352,"flow_packet_id":1,"flow_first_seen":1576420277235,"flow_last_seen":1576420277235,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50250,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":353,"flow_packet_id":1,"flow_first_seen":1576420277236,"flow_last_seen":1576420277236,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50252,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":354,"flow_packet_id":1,"flow_first_seen":1576420277237,"flow_last_seen":1576420277237,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50254,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":355,"flow_packet_id":1,"flow_first_seen":1576420277239,"flow_last_seen":1576420277239,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50256,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":356,"flow_packet_id":1,"flow_first_seen":1576420277240,"flow_last_seen":1576420277240,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50258,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":357,"flow_packet_id":1,"flow_first_seen":1576420277242,"flow_last_seen":1576420277242,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50260,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":358,"flow_packet_id":1,"flow_first_seen":1576420277243,"flow_last_seen":1576420277243,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50262,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":359,"flow_packet_id":1,"flow_first_seen":1576420277244,"flow_last_seen":1576420277244,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50264,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":360,"flow_packet_id":1,"flow_first_seen":1576420277246,"flow_last_seen":1576420277246,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50266,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":361,"flow_packet_id":1,"flow_first_seen":1576420277247,"flow_last_seen":1576420277247,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50268,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":362,"flow_packet_id":1,"flow_first_seen":1576420277248,"flow_last_seen":1576420277248,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50270,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":363,"flow_packet_id":1,"flow_first_seen":1576420277249,"flow_last_seen":1576420277249,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50272,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":364,"flow_packet_id":1,"flow_first_seen":1576420277252,"flow_last_seen":1576420277252,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50274,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":365,"flow_packet_id":1,"flow_first_seen":1576420277253,"flow_last_seen":1576420277253,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50276,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":366,"flow_packet_id":1,"flow_first_seen":1576420277255,"flow_last_seen":1576420277255,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50278,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":367,"flow_packet_id":1,"flow_first_seen":1576420277258,"flow_last_seen":1576420277258,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50280,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":368,"flow_packet_id":1,"flow_first_seen":1576420277260,"flow_last_seen":1576420277260,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50282,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":369,"flow_packet_id":1,"flow_first_seen":1576420277261,"flow_last_seen":1576420277261,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50284,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":370,"flow_packet_id":1,"flow_first_seen":1576420277263,"flow_last_seen":1576420277263,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50286,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":371,"flow_packet_id":1,"flow_first_seen":1576420277264,"flow_last_seen":1576420277264,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50288,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":372,"flow_packet_id":1,"flow_first_seen":1576420277266,"flow_last_seen":1576420277266,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50290,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":373,"flow_packet_id":1,"flow_first_seen":1576420277268,"flow_last_seen":1576420277268,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50292,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":374,"flow_packet_id":1,"flow_first_seen":1576420277269,"flow_last_seen":1576420277269,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50294,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":375,"flow_packet_id":1,"flow_first_seen":1576420277270,"flow_last_seen":1576420277270,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50296,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":376,"flow_packet_id":1,"flow_first_seen":1576420277272,"flow_last_seen":1576420277272,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50298,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":377,"flow_packet_id":1,"flow_first_seen":1576420277274,"flow_last_seen":1576420277274,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50300,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":378,"flow_packet_id":1,"flow_first_seen":1576420277276,"flow_last_seen":1576420277276,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50302,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":379,"flow_packet_id":1,"flow_first_seen":1576420277277,"flow_last_seen":1576420277277,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50304,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":380,"flow_packet_id":1,"flow_first_seen":1576420277278,"flow_last_seen":1576420277278,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50306,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":381,"flow_packet_id":1,"flow_first_seen":1576420277279,"flow_last_seen":1576420277279,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50308,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":382,"flow_packet_id":1,"flow_first_seen":1576420277281,"flow_last_seen":1576420277281,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50310,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":383,"flow_packet_id":1,"flow_first_seen":1576420277282,"flow_last_seen":1576420277282,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50312,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":384,"flow_packet_id":1,"flow_first_seen":1576420277283,"flow_last_seen":1576420277283,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50314,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":385,"flow_packet_id":1,"flow_first_seen":1576420277284,"flow_last_seen":1576420277284,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50316,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":386,"flow_packet_id":1,"flow_first_seen":1576420277286,"flow_last_seen":1576420277286,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50318,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":387,"flow_packet_id":1,"flow_first_seen":1576420277288,"flow_last_seen":1576420277288,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50320,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":388,"flow_packet_id":1,"flow_first_seen":1576420277291,"flow_last_seen":1576420277291,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50322,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":389,"flow_packet_id":1,"flow_first_seen":1576420277292,"flow_last_seen":1576420277292,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50324,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":390,"flow_packet_id":1,"flow_first_seen":1576420277293,"flow_last_seen":1576420277293,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50326,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":391,"flow_packet_id":1,"flow_first_seen":1576420277295,"flow_last_seen":1576420277295,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50328,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":392,"flow_packet_id":1,"flow_first_seen":1576420277296,"flow_last_seen":1576420277296,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50330,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":393,"flow_packet_id":1,"flow_first_seen":1576420277298,"flow_last_seen":1576420277298,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50332,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":394,"flow_packet_id":1,"flow_first_seen":1576420277299,"flow_last_seen":1576420277299,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50334,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":395,"flow_packet_id":1,"flow_first_seen":1576420277301,"flow_last_seen":1576420277301,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50336,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":396,"flow_packet_id":1,"flow_first_seen":1576420277302,"flow_last_seen":1576420277302,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50338,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":397,"flow_packet_id":1,"flow_first_seen":1576420277304,"flow_last_seen":1576420277304,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50340,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":398,"flow_packet_id":1,"flow_first_seen":1576420277306,"flow_last_seen":1576420277306,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50342,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":399,"flow_packet_id":1,"flow_first_seen":1576420277307,"flow_last_seen":1576420277307,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50344,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":400,"flow_packet_id":1,"flow_first_seen":1576420277308,"flow_last_seen":1576420277308,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50346,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":401,"flow_packet_id":1,"flow_first_seen":1576420277309,"flow_last_seen":1576420277309,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50348,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":402,"flow_packet_id":1,"flow_first_seen":1576420277310,"flow_last_seen":1576420277310,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50350,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":403,"flow_packet_id":1,"flow_first_seen":1576420277311,"flow_last_seen":1576420277311,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50352,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":404,"flow_packet_id":1,"flow_first_seen":1576420277313,"flow_last_seen":1576420277313,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50354,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":405,"flow_packet_id":1,"flow_first_seen":1576420277314,"flow_last_seen":1576420277314,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50356,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":406,"flow_packet_id":1,"flow_first_seen":1576420277315,"flow_last_seen":1576420277315,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50358,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":407,"flow_packet_id":1,"flow_first_seen":1576420277317,"flow_last_seen":1576420277317,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50360,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":408,"flow_packet_id":1,"flow_first_seen":1576420277319,"flow_last_seen":1576420277319,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50362,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":409,"flow_packet_id":1,"flow_first_seen":1576420277321,"flow_last_seen":1576420277321,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50364,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":410,"flow_packet_id":1,"flow_first_seen":1576420277322,"flow_last_seen":1576420277322,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50366,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":411,"flow_packet_id":1,"flow_first_seen":1576420277324,"flow_last_seen":1576420277324,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50368,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":412,"flow_packet_id":1,"flow_first_seen":1576420277325,"flow_last_seen":1576420277325,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50370,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":413,"flow_packet_id":1,"flow_first_seen":1576420277326,"flow_last_seen":1576420277326,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50372,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":414,"flow_packet_id":1,"flow_first_seen":1576420277328,"flow_last_seen":1576420277328,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50374,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":415,"flow_packet_id":1,"flow_first_seen":1576420277329,"flow_last_seen":1576420277329,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50376,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":416,"flow_packet_id":1,"flow_first_seen":1576420277331,"flow_last_seen":1576420277331,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50378,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":417,"flow_packet_id":1,"flow_first_seen":1576420277333,"flow_last_seen":1576420277333,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50380,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":418,"flow_packet_id":1,"flow_first_seen":1576420277334,"flow_last_seen":1576420277334,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50382,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":419,"flow_packet_id":1,"flow_first_seen":1576420277336,"flow_last_seen":1576420277336,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50384,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":420,"flow_packet_id":1,"flow_first_seen":1576420277337,"flow_last_seen":1576420277337,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50386,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":421,"flow_packet_id":1,"flow_first_seen":1576420277339,"flow_last_seen":1576420277339,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50388,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":422,"flow_packet_id":1,"flow_first_seen":1576420277340,"flow_last_seen":1576420277340,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50390,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":423,"flow_packet_id":1,"flow_first_seen":1576420277342,"flow_last_seen":1576420277342,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50392,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":424,"flow_packet_id":1,"flow_first_seen":1576420277343,"flow_last_seen":1576420277343,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50394,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":425,"flow_packet_id":1,"flow_first_seen":1576420277344,"flow_last_seen":1576420277344,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50396,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":426,"flow_packet_id":1,"flow_first_seen":1576420277345,"flow_last_seen":1576420277345,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50398,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":427,"flow_packet_id":1,"flow_first_seen":1576420277347,"flow_last_seen":1576420277347,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50400,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":428,"flow_packet_id":1,"flow_first_seen":1576420277349,"flow_last_seen":1576420277349,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50402,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":429,"flow_packet_id":1,"flow_first_seen":1576420277350,"flow_last_seen":1576420277350,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50404,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":430,"flow_packet_id":1,"flow_first_seen":1576420277352,"flow_last_seen":1576420277352,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50406,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":431,"flow_packet_id":1,"flow_first_seen":1576420277354,"flow_last_seen":1576420277354,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50408,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":432,"flow_packet_id":1,"flow_first_seen":1576420277355,"flow_last_seen":1576420277355,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50410,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":433,"flow_packet_id":1,"flow_first_seen":1576420277357,"flow_last_seen":1576420277357,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50412,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":434,"flow_packet_id":1,"flow_first_seen":1576420277358,"flow_last_seen":1576420277358,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50414,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":435,"flow_packet_id":1,"flow_first_seen":1576420277359,"flow_last_seen":1576420277359,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50416,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":436,"flow_packet_id":1,"flow_first_seen":1576420277361,"flow_last_seen":1576420277361,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":162,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":162,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50418,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":437,"flow_packet_id":1,"flow_first_seen":1576420277375,"flow_last_seen":1576420277375,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50438,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":438,"flow_packet_id":1,"flow_first_seen":1576420277378,"flow_last_seen":1576420277378,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50440,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":439,"flow_packet_id":1,"flow_first_seen":1576420277381,"flow_last_seen":1576420277381,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50442,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":440,"flow_packet_id":1,"flow_first_seen":1576420277383,"flow_last_seen":1576420277383,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50444,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":441,"flow_packet_id":1,"flow_first_seen":1576420277386,"flow_last_seen":1576420277386,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50446,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":442,"flow_packet_id":1,"flow_first_seen":1576420277387,"flow_last_seen":1576420277387,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50448,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":443,"flow_packet_id":1,"flow_first_seen":1576420277389,"flow_last_seen":1576420277389,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50450,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":444,"flow_packet_id":1,"flow_first_seen":1576420277391,"flow_last_seen":1576420277391,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50452,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":445,"flow_packet_id":1,"flow_first_seen":1576420277392,"flow_last_seen":1576420277392,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50454,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":446,"flow_packet_id":1,"flow_first_seen":1576420277394,"flow_last_seen":1576420277394,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50456,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":447,"flow_packet_id":1,"flow_first_seen":1576420277395,"flow_last_seen":1576420277395,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50458,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":448,"flow_packet_id":1,"flow_first_seen":1576420277398,"flow_last_seen":1576420277398,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50460,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":449,"flow_packet_id":1,"flow_first_seen":1576420277399,"flow_last_seen":1576420277399,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50462,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":450,"flow_packet_id":1,"flow_first_seen":1576420277401,"flow_last_seen":1576420277401,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50464,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":451,"flow_packet_id":1,"flow_first_seen":1576420277402,"flow_last_seen":1576420277402,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50466,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":452,"flow_packet_id":1,"flow_first_seen":1576420277403,"flow_last_seen":1576420277403,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":254,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":254,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50468,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":453,"flow_packet_id":1,"flow_first_seen":1576420277405,"flow_last_seen":1576420277405,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50470,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":454,"flow_packet_id":1,"flow_first_seen":1576420277406,"flow_last_seen":1576420277406,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":252,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":252,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50472,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":455,"flow_packet_id":1,"flow_first_seen":1576420277407,"flow_last_seen":1576420277407,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50474,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":456,"flow_packet_id":1,"flow_first_seen":1576420277409,"flow_last_seen":1576420277409,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50476,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":457,"flow_packet_id":1,"flow_first_seen":1576420277410,"flow_last_seen":1576420277410,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50478,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":458,"flow_packet_id":1,"flow_first_seen":1576420277412,"flow_last_seen":1576420277412,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50480,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":459,"flow_packet_id":1,"flow_first_seen":1576420277414,"flow_last_seen":1576420277414,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50482,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":460,"flow_packet_id":1,"flow_first_seen":1576420277416,"flow_last_seen":1576420277416,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50484,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":461,"flow_packet_id":1,"flow_first_seen":1576420277417,"flow_last_seen":1576420277417,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50486,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":462,"flow_packet_id":1,"flow_first_seen":1576420277419,"flow_last_seen":1576420277419,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50488,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":463,"flow_packet_id":1,"flow_first_seen":1576420277420,"flow_last_seen":1576420277420,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50490,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":464,"flow_packet_id":1,"flow_first_seen":1576420277422,"flow_last_seen":1576420277422,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50492,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":465,"flow_packet_id":1,"flow_first_seen":1576420277423,"flow_last_seen":1576420277423,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50494,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":466,"flow_packet_id":1,"flow_first_seen":1576420277425,"flow_last_seen":1576420277425,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50496,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":467,"flow_packet_id":1,"flow_first_seen":1576420277426,"flow_last_seen":1576420277426,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50498,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":468,"flow_packet_id":1,"flow_first_seen":1576420277428,"flow_last_seen":1576420277428,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50500,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":469,"flow_packet_id":1,"flow_first_seen":1576420277429,"flow_last_seen":1576420277429,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50502,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":470,"flow_packet_id":1,"flow_first_seen":1576420277431,"flow_last_seen":1576420277431,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50504,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":471,"flow_packet_id":1,"flow_first_seen":1576420277432,"flow_last_seen":1576420277432,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50506,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":472,"flow_packet_id":1,"flow_first_seen":1576420277433,"flow_last_seen":1576420277433,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50508,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":473,"flow_packet_id":1,"flow_first_seen":1576420277434,"flow_last_seen":1576420277434,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50510,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":474,"flow_packet_id":1,"flow_first_seen":1576420277436,"flow_last_seen":1576420277436,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50512,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":475,"flow_packet_id":1,"flow_first_seen":1576420277437,"flow_last_seen":1576420277437,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50514,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":476,"flow_packet_id":1,"flow_first_seen":1576420277438,"flow_last_seen":1576420277438,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50516,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":477,"flow_packet_id":1,"flow_first_seen":1576420277439,"flow_last_seen":1576420277439,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50518,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":478,"flow_packet_id":1,"flow_first_seen":1576420277442,"flow_last_seen":1576420277442,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50520,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":479,"flow_packet_id":1,"flow_first_seen":1576420277443,"flow_last_seen":1576420277443,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50522,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":480,"flow_packet_id":1,"flow_first_seen":1576420277444,"flow_last_seen":1576420277444,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50524,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":481,"flow_packet_id":1,"flow_first_seen":1576420277446,"flow_last_seen":1576420277446,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50526,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":482,"flow_packet_id":1,"flow_first_seen":1576420277448,"flow_last_seen":1576420277448,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":243,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":243,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50528,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":483,"flow_packet_id":1,"flow_first_seen":1576420277449,"flow_last_seen":1576420277449,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50530,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":484,"flow_packet_id":1,"flow_first_seen":1576420277451,"flow_last_seen":1576420277451,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":241,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50532,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":485,"flow_packet_id":1,"flow_first_seen":1576420277452,"flow_last_seen":1576420277452,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50534,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":486,"flow_packet_id":1,"flow_first_seen":1576420277454,"flow_last_seen":1576420277454,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50536,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":487,"flow_packet_id":1,"flow_first_seen":1576420277455,"flow_last_seen":1576420277455,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50538,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":488,"flow_packet_id":1,"flow_first_seen":1576420277458,"flow_last_seen":1576420277458,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":249,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":249,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50540,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":489,"flow_packet_id":1,"flow_first_seen":1576420277459,"flow_last_seen":1576420277459,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50542,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":490,"flow_packet_id":1,"flow_first_seen":1576420277460,"flow_last_seen":1576420277460,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50544,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":491,"flow_packet_id":1,"flow_first_seen":1576420277462,"flow_last_seen":1576420277462,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50546,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":492,"flow_packet_id":1,"flow_first_seen":1576420277463,"flow_last_seen":1576420277463,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50548,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":493,"flow_packet_id":1,"flow_first_seen":1576420277464,"flow_last_seen":1576420277464,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":250,"flow_max_l4_data_len":250,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50550,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":494,"flow_packet_id":1,"flow_first_seen":1576420277465,"flow_last_seen":1576420277465,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50552,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":495,"flow_packet_id":1,"flow_first_seen":1576420277466,"flow_last_seen":1576420277466,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":248,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":248,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50554,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":496,"flow_packet_id":1,"flow_first_seen":1576420277467,"flow_last_seen":1576420277467,"flow_tot_l4_data_len":244,"flow_min_l4_data_len":244,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":244,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50556,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":497,"flow_packet_id":1,"flow_first_seen":1576420277469,"flow_last_seen":1576420277469,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50558,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":498,"flow_packet_id":1,"flow_first_seen":1576420277471,"flow_last_seen":1576420277471,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50560,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":499,"flow_packet_id":1,"flow_first_seen":1576420277473,"flow_last_seen":1576420277473,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50562,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":500,"flow_packet_id":1,"flow_first_seen":1576420277474,"flow_last_seen":1576420277474,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50564,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":501,"flow_packet_id":1,"flow_first_seen":1576420277477,"flow_last_seen":1576420277477,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50566,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":502,"flow_packet_id":1,"flow_first_seen":1576420277478,"flow_last_seen":1576420277478,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":325,"flow_max_l4_data_len":325,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50568,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":503,"flow_packet_id":1,"flow_first_seen":1576420277480,"flow_last_seen":1576420277480,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50570,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":504,"flow_packet_id":1,"flow_first_seen":1576420277488,"flow_last_seen":1576420277488,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50572,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":505,"flow_packet_id":1,"flow_first_seen":1576420277490,"flow_last_seen":1576420277490,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50574,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":506,"flow_packet_id":1,"flow_first_seen":1576420277491,"flow_last_seen":1576420277491,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50576,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":507,"flow_packet_id":1,"flow_first_seen":1576420277492,"flow_last_seen":1576420277492,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50578,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":508,"flow_packet_id":1,"flow_first_seen":1576420277495,"flow_last_seen":1576420277495,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50580,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":509,"flow_packet_id":1,"flow_first_seen":1576420277496,"flow_last_seen":1576420277496,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50582,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":510,"flow_packet_id":1,"flow_first_seen":1576420277497,"flow_last_seen":1576420277497,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50584,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":511,"flow_packet_id":1,"flow_first_seen":1576420277498,"flow_last_seen":1576420277498,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":168,"flow_max_l4_data_len":168,"flow_avg_l4_data_len":168,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50586,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":512,"flow_packet_id":1,"flow_first_seen":1576420277499,"flow_last_seen":1576420277499,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":166,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50588,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":513,"flow_packet_id":1,"flow_first_seen":1576420277500,"flow_last_seen":1576420277500,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50590,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":514,"flow_packet_id":1,"flow_first_seen":1576420277501,"flow_last_seen":1576420277501,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50592,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":515,"flow_packet_id":1,"flow_first_seen":1576420277503,"flow_last_seen":1576420277503,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":223,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50594,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":516,"flow_packet_id":1,"flow_first_seen":1576420277505,"flow_last_seen":1576420277505,"flow_tot_l4_data_len":185,"flow_min_l4_data_len":185,"flow_max_l4_data_len":185,"flow_avg_l4_data_len":185,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50596,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":517,"flow_packet_id":1,"flow_first_seen":1576420277506,"flow_last_seen":1576420277506,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50598,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":518,"flow_packet_id":1,"flow_first_seen":1576420277509,"flow_last_seen":1576420277509,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50600,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":519,"flow_packet_id":1,"flow_first_seen":1576420277510,"flow_last_seen":1576420277510,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50602,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":520,"flow_packet_id":1,"flow_first_seen":1576420277512,"flow_last_seen":1576420277512,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50604,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":521,"flow_packet_id":1,"flow_first_seen":1576420277513,"flow_last_seen":1576420277513,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50606,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":522,"flow_packet_id":1,"flow_first_seen":1576420277515,"flow_last_seen":1576420277515,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50608,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":523,"flow_packet_id":1,"flow_first_seen":1576420277516,"flow_last_seen":1576420277516,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50610,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":524,"flow_packet_id":1,"flow_first_seen":1576420277518,"flow_last_seen":1576420277518,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":194,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50612,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":525,"flow_packet_id":1,"flow_first_seen":1576420277519,"flow_last_seen":1576420277519,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50614,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":526,"flow_packet_id":1,"flow_first_seen":1576420277520,"flow_last_seen":1576420277520,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":184,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":184,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50616,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":527,"flow_packet_id":1,"flow_first_seen":1576420277522,"flow_last_seen":1576420277522,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50618,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":528,"flow_packet_id":1,"flow_first_seen":1576420277525,"flow_last_seen":1576420277525,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50620,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":529,"flow_packet_id":1,"flow_first_seen":1576420277526,"flow_last_seen":1576420277526,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50622,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":530,"flow_packet_id":1,"flow_first_seen":1576420277527,"flow_last_seen":1576420277527,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50624,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":531,"flow_packet_id":1,"flow_first_seen":1576420277528,"flow_last_seen":1576420277528,"flow_tot_l4_data_len":201,"flow_min_l4_data_len":201,"flow_max_l4_data_len":201,"flow_avg_l4_data_len":201,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50626,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":532,"flow_packet_id":1,"flow_first_seen":1576420277534,"flow_last_seen":1576420277534,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":186,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":186,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50628,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":533,"flow_packet_id":1,"flow_first_seen":1576420277535,"flow_last_seen":1576420277535,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50630,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":534,"flow_packet_id":1,"flow_first_seen":1576420277536,"flow_last_seen":1576420277536,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50632,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":535,"flow_packet_id":1,"flow_first_seen":1576420277537,"flow_last_seen":1576420277537,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50634,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":536,"flow_packet_id":1,"flow_first_seen":1576420277538,"flow_last_seen":1576420277538,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50636,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":537,"flow_packet_id":1,"flow_first_seen":1576420277540,"flow_last_seen":1576420277540,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50638,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":538,"flow_packet_id":1,"flow_first_seen":1576420277543,"flow_last_seen":1576420277543,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50640,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":539,"flow_packet_id":1,"flow_first_seen":1576420277544,"flow_last_seen":1576420277544,"flow_tot_l4_data_len":187,"flow_min_l4_data_len":187,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50642,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":540,"flow_packet_id":1,"flow_first_seen":1576420277546,"flow_last_seen":1576420277546,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50644,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":541,"flow_packet_id":1,"flow_first_seen":1576420277547,"flow_last_seen":1576420277547,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50646,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":542,"flow_packet_id":1,"flow_first_seen":1576420277549,"flow_last_seen":1576420277549,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50648,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":543,"flow_packet_id":1,"flow_first_seen":1576420277550,"flow_last_seen":1576420277550,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50650,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":544,"flow_packet_id":1,"flow_first_seen":1576420277552,"flow_last_seen":1576420277552,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50652,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":545,"flow_packet_id":1,"flow_first_seen":1576420277553,"flow_last_seen":1576420277553,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50654,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":546,"flow_packet_id":1,"flow_first_seen":1576420277554,"flow_last_seen":1576420277554,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":235,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50656,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":547,"flow_packet_id":1,"flow_first_seen":1576420277556,"flow_last_seen":1576420277556,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50658,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":548,"flow_packet_id":1,"flow_first_seen":1576420277558,"flow_last_seen":1576420277558,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":236,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":236,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50660,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":549,"flow_packet_id":1,"flow_first_seen":1576420277560,"flow_last_seen":1576420277560,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50662,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":550,"flow_packet_id":1,"flow_first_seen":1576420277561,"flow_last_seen":1576420277561,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50664,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":551,"flow_packet_id":1,"flow_first_seen":1576420277562,"flow_last_seen":1576420277562,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50666,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":552,"flow_packet_id":1,"flow_first_seen":1576420277564,"flow_last_seen":1576420277564,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":196,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":196,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50668,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":553,"flow_packet_id":1,"flow_first_seen":1576420277565,"flow_last_seen":1576420277565,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50670,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":554,"flow_packet_id":1,"flow_first_seen":1576420277566,"flow_last_seen":1576420277566,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50672,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":555,"flow_packet_id":1,"flow_first_seen":1576420277567,"flow_last_seen":1576420277567,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":169,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50674,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":556,"flow_packet_id":1,"flow_first_seen":1576420277568,"flow_last_seen":1576420277568,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":175,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50676,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":557,"flow_packet_id":1,"flow_first_seen":1576420277570,"flow_last_seen":1576420277570,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50678,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":558,"flow_packet_id":1,"flow_first_seen":1576420277572,"flow_last_seen":1576420277572,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50680,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":559,"flow_packet_id":1,"flow_first_seen":1576420277574,"flow_last_seen":1576420277574,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50682,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":560,"flow_packet_id":1,"flow_first_seen":1576420277575,"flow_last_seen":1576420277575,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":207,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50684,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":561,"flow_packet_id":1,"flow_first_seen":1576420277577,"flow_last_seen":1576420277577,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50686,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":562,"flow_packet_id":1,"flow_first_seen":1576420277578,"flow_last_seen":1576420277578,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":227,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":227,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50688,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":563,"flow_packet_id":1,"flow_first_seen":1576420277580,"flow_last_seen":1576420277580,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50690,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":564,"flow_packet_id":1,"flow_first_seen":1576420277581,"flow_last_seen":1576420277581,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50692,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":565,"flow_packet_id":1,"flow_first_seen":1576420277583,"flow_last_seen":1576420277583,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50694,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":566,"flow_packet_id":1,"flow_first_seen":1576420277584,"flow_last_seen":1576420277584,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50696,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":567,"flow_packet_id":1,"flow_first_seen":1576420277586,"flow_last_seen":1576420277586,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50698,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":568,"flow_packet_id":1,"flow_first_seen":1576420277588,"flow_last_seen":1576420277588,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50700,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":569,"flow_packet_id":1,"flow_first_seen":1576420277590,"flow_last_seen":1576420277590,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50702,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":570,"flow_packet_id":1,"flow_first_seen":1576420277592,"flow_last_seen":1576420277592,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50704,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":571,"flow_packet_id":1,"flow_first_seen":1576420277593,"flow_last_seen":1576420277593,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50706,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":572,"flow_packet_id":1,"flow_first_seen":1576420277595,"flow_last_seen":1576420277595,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50708,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":573,"flow_packet_id":1,"flow_first_seen":1576420277597,"flow_last_seen":1576420277597,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50710,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":574,"flow_packet_id":1,"flow_first_seen":1576420277598,"flow_last_seen":1576420277598,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50712,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":575,"flow_packet_id":1,"flow_first_seen":1576420277600,"flow_last_seen":1576420277600,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50714,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":576,"flow_packet_id":1,"flow_first_seen":1576420277602,"flow_last_seen":1576420277602,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50716,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":577,"flow_packet_id":1,"flow_first_seen":1576420277604,"flow_last_seen":1576420277604,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50718,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":578,"flow_packet_id":1,"flow_first_seen":1576420277607,"flow_last_seen":1576420277607,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50720,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":579,"flow_packet_id":1,"flow_first_seen":1576420277608,"flow_last_seen":1576420277608,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50722,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":580,"flow_packet_id":1,"flow_first_seen":1576420277609,"flow_last_seen":1576420277609,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50724,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":581,"flow_packet_id":1,"flow_first_seen":1576420277611,"flow_last_seen":1576420277611,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50726,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":582,"flow_packet_id":1,"flow_first_seen":1576420277612,"flow_last_seen":1576420277612,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50728,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":583,"flow_packet_id":1,"flow_first_seen":1576420277614,"flow_last_seen":1576420277614,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50730,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":584,"flow_packet_id":1,"flow_first_seen":1576420277615,"flow_last_seen":1576420277615,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50732,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":585,"flow_packet_id":1,"flow_first_seen":1576420277616,"flow_last_seen":1576420277616,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50734,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":586,"flow_packet_id":1,"flow_first_seen":1576420277618,"flow_last_seen":1576420277618,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50736,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":587,"flow_packet_id":1,"flow_first_seen":1576420277619,"flow_last_seen":1576420277619,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50738,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":588,"flow_packet_id":1,"flow_first_seen":1576420277622,"flow_last_seen":1576420277622,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50740,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":589,"flow_packet_id":1,"flow_first_seen":1576420277624,"flow_last_seen":1576420277624,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50742,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":590,"flow_packet_id":1,"flow_first_seen":1576420277625,"flow_last_seen":1576420277625,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50744,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":591,"flow_packet_id":1,"flow_first_seen":1576420277627,"flow_last_seen":1576420277627,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50746,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":592,"flow_packet_id":1,"flow_first_seen":1576420277628,"flow_last_seen":1576420277628,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50748,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":593,"flow_packet_id":1,"flow_first_seen":1576420277630,"flow_last_seen":1576420277630,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50750,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":594,"flow_packet_id":1,"flow_first_seen":1576420277631,"flow_last_seen":1576420277631,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50752,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":595,"flow_packet_id":1,"flow_first_seen":1576420277633,"flow_last_seen":1576420277633,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50754,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":596,"flow_packet_id":1,"flow_first_seen":1576420277637,"flow_last_seen":1576420277637,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50756,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":597,"flow_packet_id":1,"flow_first_seen":1576420277639,"flow_last_seen":1576420277639,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50758,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":598,"flow_packet_id":1,"flow_first_seen":1576420277642,"flow_last_seen":1576420277642,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50760,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":599,"flow_packet_id":1,"flow_first_seen":1576420277644,"flow_last_seen":1576420277644,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50762,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":600,"flow_packet_id":1,"flow_first_seen":1576420277646,"flow_last_seen":1576420277646,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50764,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":601,"flow_packet_id":1,"flow_first_seen":1576420277648,"flow_last_seen":1576420277648,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50766,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":602,"flow_packet_id":1,"flow_first_seen":1576420277650,"flow_last_seen":1576420277650,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50768,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":603,"flow_packet_id":1,"flow_first_seen":1576420277657,"flow_last_seen":1576420277657,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50770,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":604,"flow_packet_id":1,"flow_first_seen":1576420277658,"flow_last_seen":1576420277658,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50772,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":605,"flow_packet_id":1,"flow_first_seen":1576420277660,"flow_last_seen":1576420277660,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50774,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":606,"flow_packet_id":1,"flow_first_seen":1576420277662,"flow_last_seen":1576420277662,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50776,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":607,"flow_packet_id":1,"flow_first_seen":1576420277663,"flow_last_seen":1576420277663,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50778,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":608,"flow_packet_id":1,"flow_first_seen":1576420277667,"flow_last_seen":1576420277667,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50780,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":609,"flow_packet_id":1,"flow_first_seen":1576420277669,"flow_last_seen":1576420277669,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50782,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":610,"flow_packet_id":1,"flow_first_seen":1576420277670,"flow_last_seen":1576420277670,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50784,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":611,"flow_packet_id":1,"flow_first_seen":1576420277675,"flow_last_seen":1576420277675,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50786,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":612,"flow_packet_id":1,"flow_first_seen":1576420277677,"flow_last_seen":1576420277677,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50788,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":613,"flow_packet_id":1,"flow_first_seen":1576420277678,"flow_last_seen":1576420277678,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50790,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":614,"flow_packet_id":1,"flow_first_seen":1576420277680,"flow_last_seen":1576420277680,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50792,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":615,"flow_packet_id":1,"flow_first_seen":1576420277681,"flow_last_seen":1576420277681,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50794,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":616,"flow_packet_id":1,"flow_first_seen":1576420277683,"flow_last_seen":1576420277683,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50796,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":617,"flow_packet_id":1,"flow_first_seen":1576420277685,"flow_last_seen":1576420277685,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50798,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":618,"flow_packet_id":1,"flow_first_seen":1576420277687,"flow_last_seen":1576420277687,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50800,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":619,"flow_packet_id":1,"flow_first_seen":1576420277689,"flow_last_seen":1576420277689,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50802,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":620,"flow_packet_id":1,"flow_first_seen":1576420277691,"flow_last_seen":1576420277691,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50804,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":621,"flow_packet_id":1,"flow_first_seen":1576420277693,"flow_last_seen":1576420277693,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50806,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":622,"flow_packet_id":1,"flow_first_seen":1576420277695,"flow_last_seen":1576420277695,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50808,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":623,"flow_packet_id":1,"flow_first_seen":1576420277699,"flow_last_seen":1576420277699,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50810,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":624,"flow_packet_id":1,"flow_first_seen":1576420277701,"flow_last_seen":1576420277701,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50812,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":625,"flow_packet_id":1,"flow_first_seen":1576420277702,"flow_last_seen":1576420277702,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50814,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":626,"flow_packet_id":1,"flow_first_seen":1576420277703,"flow_last_seen":1576420277703,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50816,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":627,"flow_packet_id":1,"flow_first_seen":1576420277705,"flow_last_seen":1576420277705,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50818,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":628,"flow_packet_id":1,"flow_first_seen":1576420277708,"flow_last_seen":1576420277708,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50820,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":629,"flow_packet_id":1,"flow_first_seen":1576420277709,"flow_last_seen":1576420277709,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50822,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":630,"flow_packet_id":1,"flow_first_seen":1576420277711,"flow_last_seen":1576420277711,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50824,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":631,"flow_packet_id":1,"flow_first_seen":1576420277713,"flow_last_seen":1576420277713,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50826,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":632,"flow_packet_id":1,"flow_first_seen":1576420277715,"flow_last_seen":1576420277715,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50828,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":633,"flow_packet_id":1,"flow_first_seen":1576420277716,"flow_last_seen":1576420277716,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50830,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":634,"flow_packet_id":1,"flow_first_seen":1576420277718,"flow_last_seen":1576420277718,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50832,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":635,"flow_packet_id":1,"flow_first_seen":1576420277719,"flow_last_seen":1576420277719,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50834,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":636,"flow_packet_id":1,"flow_first_seen":1576420277721,"flow_last_seen":1576420277721,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50836,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":637,"flow_packet_id":1,"flow_first_seen":1576420277723,"flow_last_seen":1576420277723,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50838,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":638,"flow_packet_id":1,"flow_first_seen":1576420277725,"flow_last_seen":1576420277725,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50840,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":639,"flow_packet_id":1,"flow_first_seen":1576420277727,"flow_last_seen":1576420277727,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50842,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":640,"flow_packet_id":1,"flow_first_seen":1576420277729,"flow_last_seen":1576420277729,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50844,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":641,"flow_packet_id":1,"flow_first_seen":1576420277730,"flow_last_seen":1576420277730,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50846,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":642,"flow_packet_id":1,"flow_first_seen":1576420277732,"flow_last_seen":1576420277732,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50848,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":643,"flow_packet_id":1,"flow_first_seen":1576420277734,"flow_last_seen":1576420277734,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50850,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":644,"flow_packet_id":1,"flow_first_seen":1576420277736,"flow_last_seen":1576420277736,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50852,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":645,"flow_packet_id":1,"flow_first_seen":1576420277737,"flow_last_seen":1576420277737,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50854,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":646,"flow_packet_id":1,"flow_first_seen":1576420277739,"flow_last_seen":1576420277739,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50856,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":647,"flow_packet_id":1,"flow_first_seen":1576420277741,"flow_last_seen":1576420277741,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50858,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":648,"flow_packet_id":1,"flow_first_seen":1576420277743,"flow_last_seen":1576420277743,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50860,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":649,"flow_packet_id":1,"flow_first_seen":1576420277745,"flow_last_seen":1576420277745,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50862,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":650,"flow_packet_id":1,"flow_first_seen":1576420277746,"flow_last_seen":1576420277746,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50864,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":651,"flow_packet_id":1,"flow_first_seen":1576420277747,"flow_last_seen":1576420277747,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50866,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":652,"flow_packet_id":1,"flow_first_seen":1576420277749,"flow_last_seen":1576420277749,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50868,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":653,"flow_packet_id":1,"flow_first_seen":1576420277750,"flow_last_seen":1576420277750,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50870,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":654,"flow_packet_id":1,"flow_first_seen":1576420277752,"flow_last_seen":1576420277752,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50872,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":655,"flow_packet_id":1,"flow_first_seen":1576420277753,"flow_last_seen":1576420277753,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50874,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":656,"flow_packet_id":1,"flow_first_seen":1576420277754,"flow_last_seen":1576420277754,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50876,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":657,"flow_packet_id":1,"flow_first_seen":1576420277756,"flow_last_seen":1576420277756,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50878,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":658,"flow_packet_id":1,"flow_first_seen":1576420277758,"flow_last_seen":1576420277758,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50880,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":659,"flow_packet_id":1,"flow_first_seen":1576420277760,"flow_last_seen":1576420277760,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50882,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":660,"flow_packet_id":1,"flow_first_seen":1576420277762,"flow_last_seen":1576420277762,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50884,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":661,"flow_packet_id":1,"flow_first_seen":1576420277764,"flow_last_seen":1576420277764,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50886,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":662,"flow_packet_id":1,"flow_first_seen":1576420277766,"flow_last_seen":1576420277766,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50888,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":663,"flow_packet_id":1,"flow_first_seen":1576420277767,"flow_last_seen":1576420277767,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":343,"flow_max_l4_data_len":343,"flow_avg_l4_data_len":343,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50890,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":664,"flow_packet_id":1,"flow_first_seen":1576420277769,"flow_last_seen":1576420277769,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":337,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":337,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50892,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":665,"flow_packet_id":1,"flow_first_seen":1576420277770,"flow_last_seen":1576420277770,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50894,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":666,"flow_packet_id":1,"flow_first_seen":1576420277772,"flow_last_seen":1576420277772,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50896,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":667,"flow_packet_id":1,"flow_first_seen":1576420277773,"flow_last_seen":1576420277773,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":330,"flow_max_l4_data_len":330,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50898,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":668,"flow_packet_id":1,"flow_first_seen":1576420277776,"flow_last_seen":1576420277776,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50900,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":669,"flow_packet_id":1,"flow_first_seen":1576420277777,"flow_last_seen":1576420277777,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50902,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":670,"flow_packet_id":1,"flow_first_seen":1576420277778,"flow_last_seen":1576420277778,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50904,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":671,"flow_packet_id":1,"flow_first_seen":1576420277780,"flow_last_seen":1576420277780,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50906,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":672,"flow_packet_id":1,"flow_first_seen":1576420277781,"flow_last_seen":1576420277781,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":336,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":336,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50908,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":673,"flow_packet_id":1,"flow_first_seen":1576420277782,"flow_last_seen":1576420277782,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50910,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":674,"flow_packet_id":1,"flow_first_seen":1576420277784,"flow_last_seen":1576420277784,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50912,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":675,"flow_packet_id":1,"flow_first_seen":1576420277785,"flow_last_seen":1576420277785,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":320,"flow_max_l4_data_len":320,"flow_avg_l4_data_len":320,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50914,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":676,"flow_packet_id":1,"flow_first_seen":1576420277786,"flow_last_seen":1576420277786,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50916,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":677,"flow_packet_id":1,"flow_first_seen":1576420277788,"flow_last_seen":1576420277788,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50918,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":678,"flow_packet_id":1,"flow_first_seen":1576420277790,"flow_last_seen":1576420277790,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50920,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":679,"flow_packet_id":1,"flow_first_seen":1576420277792,"flow_last_seen":1576420277792,"flow_tot_l4_data_len":331,"flow_min_l4_data_len":331,"flow_max_l4_data_len":331,"flow_avg_l4_data_len":331,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50922,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":680,"flow_packet_id":1,"flow_first_seen":1576420277794,"flow_last_seen":1576420277794,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50924,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":681,"flow_packet_id":1,"flow_first_seen":1576420277795,"flow_last_seen":1576420277795,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50926,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":682,"flow_packet_id":1,"flow_first_seen":1576420277797,"flow_last_seen":1576420277797,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50928,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":683,"flow_packet_id":1,"flow_first_seen":1576420277799,"flow_last_seen":1576420277799,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50930,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":684,"flow_packet_id":1,"flow_first_seen":1576420277800,"flow_last_seen":1576420277800,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50932,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":685,"flow_packet_id":1,"flow_first_seen":1576420277802,"flow_last_seen":1576420277802,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50934,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":686,"flow_packet_id":1,"flow_first_seen":1576420277803,"flow_last_seen":1576420277803,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50936,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":687,"flow_packet_id":1,"flow_first_seen":1576420277804,"flow_last_seen":1576420277804,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50938,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":688,"flow_packet_id":1,"flow_first_seen":1576420277807,"flow_last_seen":1576420277807,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50940,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":689,"flow_packet_id":1,"flow_first_seen":1576420277808,"flow_last_seen":1576420277808,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50942,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":690,"flow_packet_id":1,"flow_first_seen":1576420277810,"flow_last_seen":1576420277810,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50944,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":691,"flow_packet_id":1,"flow_first_seen":1576420277811,"flow_last_seen":1576420277811,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50946,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":692,"flow_packet_id":1,"flow_first_seen":1576420277812,"flow_last_seen":1576420277812,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50948,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":693,"flow_packet_id":1,"flow_first_seen":1576420277813,"flow_last_seen":1576420277813,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50950,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":694,"flow_packet_id":1,"flow_first_seen":1576420277814,"flow_last_seen":1576420277814,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50952,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":695,"flow_packet_id":1,"flow_first_seen":1576420277816,"flow_last_seen":1576420277816,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":338,"flow_max_l4_data_len":338,"flow_avg_l4_data_len":338,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50954,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":696,"flow_packet_id":1,"flow_first_seen":1576420277817,"flow_last_seen":1576420277817,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50956,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":697,"flow_packet_id":1,"flow_first_seen":1576420277819,"flow_last_seen":1576420277819,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":352,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50958,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":698,"flow_packet_id":1,"flow_first_seen":1576420277821,"flow_last_seen":1576420277821,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":346,"flow_max_l4_data_len":346,"flow_avg_l4_data_len":346,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50960,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":699,"flow_packet_id":1,"flow_first_seen":1576420277822,"flow_last_seen":1576420277822,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50962,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":700,"flow_packet_id":1,"flow_first_seen":1576420277824,"flow_last_seen":1576420277824,"flow_tot_l4_data_len":344,"flow_min_l4_data_len":344,"flow_max_l4_data_len":344,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50964,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":701,"flow_packet_id":1,"flow_first_seen":1576420277827,"flow_last_seen":1576420277827,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50966,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":702,"flow_packet_id":1,"flow_first_seen":1576420277828,"flow_last_seen":1576420277828,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":348,"flow_max_l4_data_len":348,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50968,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":703,"flow_packet_id":1,"flow_first_seen":1576420277829,"flow_last_seen":1576420277829,"flow_tot_l4_data_len":353,"flow_min_l4_data_len":353,"flow_max_l4_data_len":353,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50970,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":704,"flow_packet_id":1,"flow_first_seen":1576420277831,"flow_last_seen":1576420277831,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":347,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":347,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50972,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":705,"flow_packet_id":1,"flow_first_seen":1576420277832,"flow_last_seen":1576420277832,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50974,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":706,"flow_packet_id":1,"flow_first_seen":1576420277834,"flow_last_seen":1576420277834,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":345,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50976,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":707,"flow_packet_id":1,"flow_first_seen":1576420277836,"flow_last_seen":1576420277836,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":315,"flow_max_l4_data_len":315,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50978,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":708,"flow_packet_id":1,"flow_first_seen":1576420277838,"flow_last_seen":1576420277838,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":324,"flow_max_l4_data_len":324,"flow_avg_l4_data_len":324,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50980,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":709,"flow_packet_id":1,"flow_first_seen":1576420277840,"flow_last_seen":1576420277840,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":329,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50982,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":710,"flow_packet_id":1,"flow_first_seen":1576420277841,"flow_last_seen":1576420277841,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50984,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":711,"flow_packet_id":1,"flow_first_seen":1576420277843,"flow_last_seen":1576420277843,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50986,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":712,"flow_packet_id":1,"flow_first_seen":1576420277844,"flow_last_seen":1576420277844,"flow_tot_l4_data_len":321,"flow_min_l4_data_len":321,"flow_max_l4_data_len":321,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50988,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":713,"flow_packet_id":1,"flow_first_seen":1576420277845,"flow_last_seen":1576420277845,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50990,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":714,"flow_packet_id":1,"flow_first_seen":1576420277847,"flow_last_seen":1576420277847,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":177,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":177,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50992,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":715,"flow_packet_id":1,"flow_first_seen":1576420277849,"flow_last_seen":1576420277849,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50994,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":716,"flow_packet_id":1,"flow_first_seen":1576420277850,"flow_last_seen":1576420277850,"flow_tot_l4_data_len":272,"flow_min_l4_data_len":272,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":272,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50996,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":717,"flow_packet_id":1,"flow_first_seen":1576420277851,"flow_last_seen":1576420277851,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50998,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":718,"flow_packet_id":1,"flow_first_seen":1576420277854,"flow_last_seen":1576420277854,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51000,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":719,"flow_packet_id":1,"flow_first_seen":1576420277855,"flow_last_seen":1576420277855,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":279,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":279,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51002,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":720,"flow_packet_id":1,"flow_first_seen":1576420277857,"flow_last_seen":1576420277857,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":280,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":280,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51004,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":721,"flow_packet_id":1,"flow_first_seen":1576420277858,"flow_last_seen":1576420277858,"flow_tot_l4_data_len":278,"flow_min_l4_data_len":278,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51006,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":722,"flow_packet_id":1,"flow_first_seen":1576420277860,"flow_last_seen":1576420277860,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51008,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":723,"flow_packet_id":1,"flow_first_seen":1576420277861,"flow_last_seen":1576420277861,"flow_tot_l4_data_len":275,"flow_min_l4_data_len":275,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51010,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":724,"flow_packet_id":1,"flow_first_seen":1576420277863,"flow_last_seen":1576420277863,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":282,"flow_max_l4_data_len":282,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51012,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":725,"flow_packet_id":1,"flow_first_seen":1576420277864,"flow_last_seen":1576420277864,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51014,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":726,"flow_packet_id":1,"flow_first_seen":1576420277866,"flow_last_seen":1576420277866,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51016,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":727,"flow_packet_id":1,"flow_first_seen":1576420277867,"flow_last_seen":1576420277867,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51018,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":728,"flow_packet_id":1,"flow_first_seen":1576420277870,"flow_last_seen":1576420277870,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51020,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":729,"flow_packet_id":1,"flow_first_seen":1576420277871,"flow_last_seen":1576420277871,"flow_tot_l4_data_len":211,"flow_min_l4_data_len":211,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51022,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":730,"flow_packet_id":1,"flow_first_seen":1576420277873,"flow_last_seen":1576420277873,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51024,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":731,"flow_packet_id":1,"flow_first_seen":1576420277874,"flow_last_seen":1576420277874,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51026,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":732,"flow_packet_id":1,"flow_first_seen":1576420277875,"flow_last_seen":1576420277875,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":216,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":216,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51028,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":733,"flow_packet_id":1,"flow_first_seen":1576420277877,"flow_last_seen":1576420277877,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51030,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":734,"flow_packet_id":1,"flow_first_seen":1576420277878,"flow_last_seen":1576420277878,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51032,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":735,"flow_packet_id":1,"flow_first_seen":1576420277880,"flow_last_seen":1576420277880,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51034,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":736,"flow_packet_id":1,"flow_first_seen":1576420277882,"flow_last_seen":1576420277882,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":232,"flow_max_l4_data_len":232,"flow_avg_l4_data_len":232,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51036,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":737,"flow_packet_id":1,"flow_first_seen":1576420277883,"flow_last_seen":1576420277883,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":200,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":200,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51038,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":738,"flow_packet_id":1,"flow_first_seen":1576420277885,"flow_last_seen":1576420277885,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":193,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":193,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51040,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":739,"flow_packet_id":1,"flow_first_seen":1576420277887,"flow_last_seen":1576420277887,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":198,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":198,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51042,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":740,"flow_packet_id":1,"flow_first_seen":1576420277889,"flow_last_seen":1576420277889,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":191,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":191,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51044,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":741,"flow_packet_id":1,"flow_first_seen":1576420277890,"flow_last_seen":1576420277890,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51046,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":742,"flow_packet_id":1,"flow_first_seen":1576420277892,"flow_last_seen":1576420277892,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51048,"dst_port":8080,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap","flow_id":743,"flow_packet_id":1,"flow_first_seen":1576420277893,"flow_last_seen":1576420277893,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":51050,"dst_port":8080,"l4_proto":"tcp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackRCE.pcap"}
diff --git a/tests/result/nDPId_WebattackSQLinj.pcap.txt b/tests/result/nDPId_WebattackSQLinj.pcap.txt
new file mode 100644
index 000000000..06112fdea
--- /dev/null
+++ b/tests/result/nDPId_WebattackSQLinj.pcap.txt
@@ -0,0 +1,123 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1499348407419,"flow_last_seen":1499348407419,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84aRAAD4G5CusEAABwKgKMo1kAFAWk4RJAAAAAKACchDPRwAAAgQFtAQCCAoBPmXtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWS7EzBkFpOESqAScSCpZgAAAgQFtAQCCAoD6DdgAT5l7QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04aVAAD4G5DKsEAABwKgKMo1kAFAWk4RKuxMwZYAQAOVIbgAAAQEICgE+Ze0D6Ddg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1002{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":513,"pkt":"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","pkt_caplen":513,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1499348407419,"flow_last_seen":1499348407420,"flow_tot_l4_data_len":591,"flow_min_l4_data_len":32,"flow_max_l4_data_len":479,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0403{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwVAAEAGvNPAqAoyrBAAAQBQjWS7EzBlFpOGCYAQAOtGqQAAAQEICgPoN2ABPmXt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1115{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":596,"pkt":"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","pkt_caplen":596,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348407,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04adAAD4G5DCsEAABwKgKMo1kAFAWk4YJuxMyd4AQAO1EkwAAAQEICgE+Ze4D6Ddh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348412,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwdAAEAGvNHAqAoyrBAAAQBQjWS7EzJ3FpOGCYARAOs\/sgAAAQEICgPoPEMBPmXu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348412,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04ahAAD4G5C+sEAABwKgKMo1kAFAWk4YJuxMyd4ARAO0\/sAAAAQEICgE+atAD6Ddh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348412,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BwhAAEAGvNDAqAoyrBAAAQBQjWS7EzJ4FpOGCoAQAOs6zwAAAQEICgPoPEMBPmrQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348412,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04alAAD4G5C6sEAABwKgKMo1kAFAWk4YKuxMyeIAQAO06zAAAAQEICgE+atED6DxD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1499348413192,"flow_last_seen":1499348413192,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/kNAAD4Gx4ysEAABwKgKMo1mAFAV3ZXTAAAAAKACchC4zgAAAgQFtAQCCAoBPmuQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWbwopjJFd2V1KAScSDvVQAAAgQFtAQCCAoD6D0DAT5rkAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kRAAD4Gx5OsEAABwKgKMo1mAFAV3ZXU8KKYyoAQAOWOXQAAAQEICgE+a5AD6D0D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1024{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":526,"pkt":"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","pkt_caplen":526,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1499348413192,"flow_last_seen":1499348413193,"flow_tot_l4_data_len":604,"flow_min_l4_data_len":32,"flow_max_l4_data_len":492,"flow_avg_l4_data_len":151,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pclAAEAGHg\/AqAoyrBAAAQBQjWbwopjKFd2XoIAQAOuMiwAAAQEICgPoPQMBPmuQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2897{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":1906,"pkt":"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","pkt_caplen":1906,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348413,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kZAAD4Gx5GsEAABwKgKMo1mAFAV3Zeg8KKf+oAQAQGFIwAAAQEICgE+a6ED6D0U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348418,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pcxAAEAGHgzAqAoyrBAAAQBQjWbwop\/6Fd2XoIARAOuAVQAAAQEICgPoQfcBPmuh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348418,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/kdAAD4Gx5CsEAABwKgKMo1mAFAV3Zeg8KKf+4ARAQF7WwAAAQEICgE+cIQD6EH3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348418,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pc1AAEAGHgvAqAoyrBAAAQBQjWbwop\/7Fd2XoYAQAOt7cQAAAQEICgPoQfcBPnCE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1499348422024,"flow_last_seen":1499348422024,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8A7ZAAD4GwhqsEAABwKgKMo1oAFD9gXeGAAAAAKACchDm1AAAAgQFtAQCCAoBPnQwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWik93fQ\/YF3h6AScSCBYAAAAgQFtAQCCAoD6EWjAT50MAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7dAAD4GwiGsEAABwKgKMo1oAFD9gXeHpPd30YAQAOUgaAAAAQEICgE+dDAD6EWj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1499348422024,"flow_last_seen":1499348422025,"flow_tot_l4_data_len":681,"flow_min_l4_data_len":32,"flow_max_l4_data_len":569,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+database%28%29%2C+user%28%29%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnJAAEAGkWbAqAoyrBAAAQBQjWik93fR\/YF5oIAQAOseSQAAAQEICgPoRaMBPnQw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2940{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":1947,"pkt":"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","pkt_caplen":1947,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348422,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7lAAD4Gwh+sEAABwKgKMo1oAFD9gXmgpPd\/KoAQAQIWyAAAAQEICgE+dDkD6EWr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348427,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnVAAEAGkWPAqAoyrBAAAQBQjWik938q\/YF5oIARAOsR+gAAAQEICgPoSo8BPnQ5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348427,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A7pAAD4Gwh6sEAABwKgKMo1oAFD9gXmgpPd\/K4ARAQIM\/wAAAQEICgE+eRwD6EqP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348427,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnZAAEAGkWLAqAoyrBAAAQBQjWik938r\/YF5oYAQAOsNFgAAAQEICgPoSo8BPnkc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1499348433464,"flow_last_seen":1499348433464,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WwtAAD4GasWsEAABwKgKMo1qAFDC1CRXAAAAAKACchBpgwAAAgQFtAQCCAoBPn9cAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWqDJLV7wtQkWKAScSDdCgAAAgQFtAQCCAoD6FDPAT5\/XAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WwxAAD4GasysEAABwKgKMo1qAFDC1CRYgyS1fIAQAOV8EgAAAQEICgE+f1wD6FDP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1207{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":666,"pkt":"ABm5CmnxAMGxFOsxCABFAAKMWw1AAD4GaHOsEAABwKgKMo1qAFDC1CRYgyS1fIAYAOXSywAAAQEICgE+f1wD6FDPR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMvc3FsaS8\/aWQ9MSUyNythbmQrMSUzRDErdW5pb24rc2VsZWN0K251bGwlMkMrdGFibGVfbmFtZStmcm9tK2luZm9ybWF0aW9uX3NjaGVtYS50YWJsZXMlMjMmU3VibWl0PVN1Ym1pdCBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IHRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LCovKjtxPTAuOA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvdnVsbmVyYWJpbGl0aWVzL3NxbGkvP2lkPTElMjcrYW5kKzElM0QxK3VuaW9uK3NlbGVjdCtkYXRhYmFzZSUyOCUyOSUyQyt1c2VyJTI4JTI5JTIzJlN1Ym1pdD1TdWJtaXQNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9NWRmY3VoODVrZzB2dmlkZjhucnNqdGJvYjUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":666,"pkt_type":2048,"pkt_ipoffset":14}
+0865{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1499348433464,"flow_last_seen":1499348433465,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":32,"flow_max_l4_data_len":632,"flow_avg_l4_data_len":186,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+null%2C+table_name+from+information_schema.tables%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bNAAEAG3iTAqAoyrBAAAQBQjWqDJLV8wtQmsIAQAOx5swAAAQEICgPoUM8BPn9c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+6019{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":4215,"pkt":"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","pkt_caplen":4215,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ww5AAD4GasqsEAABwKgKMo1qAFDC1CawgyTAzIAQARJuFAAAAQEICgE+f3ED6FDj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348433,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ww9AAD4GasmsEAABwKgKMo1qAFDC1CawgyTFsYAQAShpGQAAAQEICgE+f3ED6FDj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348438,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bdAAEAG3iDAqAoyrBAAAQBQjWqDJMWxwtQmsIARAOxkcAAAAQEICgPoVccBPn9x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348438,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WxBAAD4GasisEAABwKgKMo1qAFDC1CawgyTFsoARAShfUAAAAQEICgE+hFQD6FXH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348438,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05bhAAEAG3h\/AqAoyrBAAAQBQjWqDJMWywtQmsYAQAOxfjAAAAQEICgPoVccBPoRU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1499348467295,"flow_last_seen":1499348467295,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NrBAAD4GjyCsEAABwKgKMo1sAFAXzJbWAAAAAKACchCBAAAAAgQFtAQCCAoBPqBmAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjWwuedQjF8yW16AScSAJgQAAAgQFtAQCCAoD6HHZAT6gZgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrFAAD4GjyesEAABwKgKMo1sAFAXzJbXLnnUJIAQAOWoiAAAAQEICgE+oGYD6HHZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1208{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":665,"pkt":"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","pkt_caplen":665,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1499348467295,"flow_last_seen":1499348467296,"flow_tot_l4_data_len":743,"flow_min_l4_data_len":32,"flow_max_l4_data_len":631,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+user%2C+password+from+users%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pf1AAEAGHdvAqAoyrBAAAQBQjWwuedQkF8yZLoAQAOymKgAAAQEICgPocdkBPqBm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+3143{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":2087,"pkt":"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","pkt_caplen":2087,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348467,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrNAAD4GjyWsEAABwKgKMo1sAFAXzJkuLnncCYAQAQSeKgAAAQEICgE+oGgD6HHa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348472,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pgBAAEAGHdjAqAoyrBAAAQBQjWwuedwJF8yZLoARAOyZXwAAAQEICgPodrwBPqBo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348472,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NrRAAD4GjySsEAABwKgKMo1sAFAXzJkuLnncCoARAQSUZAAAAQEICgE+pUoD6Ha8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348472,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pgFAAEAGHdfAqAoyrBAAAQBQjWwuedwKF8yZL4AQAOyUewAAAQEICgPodr0BPqVK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":0,"flow_packet_id":11,"flow_first_seen":1499348407419,"flow_last_seen":1499348412425,"flow_tot_l4_data_len":1345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36196,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":1,"flow_packet_id":10,"flow_first_seen":1499348413192,"flow_last_seen":1499348418262,"flow_tot_l4_data_len":2636,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1872,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36198,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1499348480992,"flow_last_seen":1499348480992,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IqhAAD4GoyisEAABwKgKMo1uAFBrxY9uAAAAAKACchAnDQAAAgQFtAQCCAoBPq3GAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjW5ct+zHa8WPb6AScSBbSwAAAgQFtAQCCAoD6H85AT6txgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqlAAD4Goy+sEAABwKgKMo1uAFBrxY9vXLfsyIAQAOX6UQAAAQEICgE+rccD6H85","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1109{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":589,"pkt":"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","pkt_caplen":589,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1499348480992,"flow_last_seen":1499348480993,"flow_tot_l4_data_len":667,"flow_min_l4_data_len":32,"flow_max_l4_data_len":555,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/FAAEAGL+fAqAoyrBAAAQBQjW5ct+zIa8WReoAQAOv4QAAAAQEICgPofzkBPq3H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1116{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":596,"pkt":"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","pkt_caplen":596,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348480,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqtAAD4Goy2sEAABwKgKMo1uAFBrxZF6XLfu2oAQAO32KwAAAQEICgE+rccD6H86","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348486,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/NAAEAGL+XAqAoyrBAAAQBQjW5ct+7aa8WReoARAOvxSQAAAQEICgPohB0BPq3H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348486,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IqxAAD4GoyysEAABwKgKMo1uAFBrxZF6XLfu24ARAO3sYgAAAQEICgE+sqsD6IQd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348486,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0k\/RAAEAGL+TAqAoyrBAAAQBQjW5ct+7ba8WRe4AQAOvsZAAAAQEICgPohB0BPrKr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":2,"flow_packet_id":10,"flow_first_seen":1499348422024,"flow_last_seen":1499348427063,"flow_tot_l4_data_len":2754,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1913,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36200,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1499348494345,"flow_last_seen":1499348494345,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SndAAD4Ge1msEAABwKgKMo1wAFAblvCmAAAAAKACchAI9wAAAgQFtAQCCAoBPrrRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXBGdqbdG5bwp6AScSCMVgAAAgQFtAQCCAoD6IxDAT660QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnhAAD4Ge2CsEAABwKgKMo1wAFAblvCnRnam3oAQAOUrXgAAAQEICgE+utED6IxD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1499348494345,"flow_last_seen":1499348494346,"flow_tot_l4_data_len":680,"flow_min_l4_data_len":32,"flow_max_l4_data_len":568,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KppAAEAGmT7AqAoyrBAAAQBQjXBGdqbeG5byv4AQAOspPwAAAQEICgPojEQBPrrR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2897{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":1906,"pkt":"AMGxFOsxABm5CmnxCABFAAdkKptAAEAGkg3AqAoyrBAAAQBQjXBGdqbeG5byv4AYAOt+QgAAAQEICgPojEQBPrrRSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjQxOjM0IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQ4OA0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1v2zYQ\/pwA\/Q8cCzRtAYt1i25rJqtI7GQxkLZe7DQdMMCgJTpmTIkqSdnxfv2OlGTLiRNHc4Ag5su9PLzjHe\/0Yt\/\/pfOtPfi7d4ImJhaod3l83m0j3CDk6kObkM6gg36cDb6co6b3DvWN4qEh5OQrRnhiTHpIyHw+9+YfPKmuyeCC3FopTctWDBva8XiRiXDwYv\/Fvu\/03MYi0a0NMpqfPn3KWXPyPX\/CaATDvT0\/ZoYiy9JgPzM+a+G2TAxLTGOwSBlGYT5rYcNuDbEi\/kDhhCrNTOtycNr4HSOSy9zzDTeCBd8zkTBFR1xwszhE\/b\/OUTe5YaHhMkGHh6hD4wSVRIKhKzZCR2kqeEgdyevO96ujN2jW9Jrv0NsOmzEh0xgwvPVJrqFQJ3gyRYqJFtZmIZieMGYwMgC7QBtqjdFEsXELex6Bv2g2p3aVxJQnntsm96VxOHMp5x8e02tGYGld0pjOLJnnNpYydKh4aqoQbuiM5qsYaRWuAbnR7rcHCrwbjQOf5JSFi0jhIzseyWiBQkG1da+MGc59F\/EZ4lELWyfBiZgq3FvZskIq63s+j6\/vIXGH1ETIa+mlyTVGVIDHtzhqdW7ACuruqbZGHoLjsor2e3vDlEYRi\/IDAUEmynPa3WMhw6k1jeBIJiGonrbwnCeRnHuw5XC0DvKTeAe4ZAUGuuYuDwdnYDafULCy4MH+UwTyBMIsc\/dWe+kkfUT+XVIcdCsr9dRCZGXpFn1LGhz07RARdMFgEXWOK8pIJoIdDDqrBDKH6zFSmWHkEVSbGXBwbH\/RqVRhTQ\/cFchuWVgHgKPHQVvGMU2iVRraDUWo1bgOCkcPKPoXp7spHnPifU4hVFscOLOIbbklT+LHwSmH4O7aFb2zbbJUSBrVsU7BUcC4dLMd\/UNTA09ULRcVLC5uWZgphtpHvUH77Gg3KPqn4BUcmgm4gDbbbcHj+CC2q2\/n7kiGI3jkajmnwnUHDXp9bJff7IZqzuh0yGtBKllwcAUj1Gfa3lrU7dRMs3fl3mo9rAUkZ8DBj34fapZvX3Y0hRWn6upXpf4LNs6v1jOg0HVR6BJF30i1DmHHJ8jFIpSRW5\/DFRkObP0I9yJfqmcO4OfJWG5RV6HCQe+sB1ExlvUU0ZHMzBY1SxocHNnh85nVFnpb1a+IcHDuxncAFBXbWu33cCFoS9hVIQgti90tdNu9aiHoT5qPthFQGzdzUXl5XBE1W9arw1BGbEgVo0W1PJYqRtQJaOGXGEHnM5EA78+TQVF++mlxqEvNFKSUw6JkTtKsWtVDKc\/\/hXHzI0YJjWHEAfd9Wp2NYm5Kmn4xm1GRraaFYpIGeQtBLMocb6pYABhQ8wDZ6qXZar70Rwqq7lOutHFSDxGNYp7ky\/1MVdeI5XeNxNIn\/uR98AVC1F1YFdPClu8dWeFRuD+rm1BpJYsYYzT2QhkvQ06xGWdzTT52eu++Nnu\/\/XriuT4TGaquoUfE8HzQZIqD\/y1qees2otMgkyXenE95yiJOXb9rZwRuzJCXN2YznicyP44AZIyZUtnEi6EpNFlC81P9FI2lhEYIfZhxHWpDTjPyoHlqS9qKLYXOmWkTy2TKFl7CoC22EhpOxLpsEi\/sfIO+Rtlcb0b9jDq2e9veIDmnOnXeggTHbm2Sci7rbvf3k9i3WnUkR6NFw9g8o52THrTNPcqq7CKP5iFa9sgumPP\/ZbJ8ILkWOS8UjKplJtmUgfVCGxYP7au17LSrmWqUGWONVuSm7xCH6IyJdPk6pDLN0mFJJpN2\/r6sPm8cAsVl+ho9UFfYyB5OQKK19WeAZCvLV2Xkt4ScH6A3OEBbUfVlBm3k8+LSTuY2ZNaWVPBreDwEG0Pm9lkc2IfCJV2fwKyaje1uWYSgc\/sVq6ABiSsKqB66nX6xE3Ftr0lU+vBBd46lNGsfddJgl69q6abnu\/psEPtA5x8a3SfA4D8qFDbP4xQAAA==","pkt_caplen":1906,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348494,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnpAAD4Ge16sEAABwKgKMo1wAFAblvK\/RnauDoAQAQEh+AAAAQEICgE+utID6IxE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348499,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Kp1AAEAGmTvAqAoyrBAAAQBQjXBGdq4OG5byv4ARAOsdKQAAAQEICgPokSgBPrrS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348499,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SntAAD4Ge12sEAABwKgKMo1wAFAblvK\/RnauD4ARAQEYLwAAAQEICgE+v7UD6JEo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348499,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Kp5AAEAGmTrAqAoyrBAAAQBQjXBGdq4PG5bywIAQAOsYRQAAAQEICgPokSgBPr+1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":3,"flow_packet_id":11,"flow_first_seen":1499348433464,"flow_last_seen":1499348438551,"flow_tot_l4_data_len":5117,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4181,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36202,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1499348506489,"flow_last_seen":1499348506489,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gghAAD4GQ8isEAABwKgKMo1yAFDHw0SlAAAAAKACchD87AAAAgQFtAQCCAoBPsatAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXIW0CP4x8NEpqAScSAm\/AAAAgQFtAQCCAoD6JgfAT7GrQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gglAAD4GQ8+sEAABwKgKMo1yAFDHw0SmFtAj+YAQAOXGAwAAAQEICgE+xq0D6Jgf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1499348506489,"flow_last_seen":1499348506490,"flow_tot_l4_data_len":681,"flow_min_l4_data_len":32,"flow_max_l4_data_len":569,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+database%28%29%2C+user%28%29%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u+ZAAEAGB\/LAqAoyrBAAAQBQjXIW0CP5x8NGv4AQAOvD5AAAAQEICgPomB8BPsat","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2939{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":1947,"pkt":"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","pkt_caplen":1947,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348506,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggtAAD4GQ82sEAABwKgKMo1yAFDHw0a\/FtArUoAQAQK8cQAAAQEICgE+xq4D6Jgh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348511,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggxAAD4GQ8ysEAABwKgKMo1yAFDHw0a\/FtArUoARAQK3jgAAAQEICgE+y5AD6Jgh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348511,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u+lAAEAGB+\/AqAoyrBAAAQBQjXIW0CtSx8NGwIARAOuywgAAAQEICgPonQMBPsuQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348511,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gg1AAD4GQ8usEAABwKgKMo1yAFDHw0bAFtArU4AQAQKyqgAAAQEICgE+y5ED6J0D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1499348514064,"flow_last_seen":1499348514064,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tHhAAD4GEVisEAABwKgKMo10AFC7kHpqAAAAAKACchDL8wAAAgQFtAQCCAoBPs4SAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjXSy4nMxu5B6a6AScSADUQAAAgQFtAQCCAoD6J+FAT7OEgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHlAAD4GEV+sEAABwKgKMo10AFC7kHprsuJzMoAQAOWiVwAAAQEICgE+zhMD6J+F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1207{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":666,"pkt":"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","pkt_caplen":666,"pkt_type":2048,"pkt_ipoffset":14}
+0865{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1499348514064,"flow_last_seen":1499348514065,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":32,"flow_max_l4_data_len":632,"flow_avg_l4_data_len":186,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/sqli\/?id=1%27+and+1%3D1+union+select+null%2C+table_name+from+information_schema.tables%23&Submit=Submit","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LdAAEAG1yDAqAoyrBAAAQBQjXSy4nMyu5B8w4AQAOyf+AAAAQEICgPon4UBPs4T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+4061{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":2767,"pkt":"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","pkt_caplen":2767,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHtAAD4GEV2sEAABwKgKMo10AFC7kHzDsuJ42oAQAPuaPAAAAQEICgE+zhUD6J+I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348514,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tHxAAD4GEVysEAABwKgKMo10AFC7kHzDsuKDZ4AQASWPhAAAAQEICgE+zhYD6J+I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348519,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tH1AAD4GEVusEAABwKgKMo10AFC7kHzDsuKDZ4ARASWKoQAAAQEICgE+0vgD6J+I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348519,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LtAAEAG1xzAqAoyrBAAAQBQjXSy4oNnu5B8xIARAOyF9wAAAQEICgPopGoBPtL4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","pkt_oversize":false,"pkt_ts":1499348519,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tH5AAD4GEVqsEAABwKgKMo10AFC7kHzEsuKDaIAQASWFvgAAAQEICgE+0vgD6KRq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":4,"flow_packet_id":10,"flow_first_seen":1499348467295,"flow_last_seen":1499348472302,"flow_tot_l4_data_len":2956,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2053,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36204,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":5,"flow_packet_id":10,"flow_first_seen":1499348480992,"flow_last_seen":1499348486002,"flow_tot_l4_data_len":1389,"flow_min_l4_data_len":32,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36206,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1499348494345,"flow_last_seen":1499348499355,"flow_tot_l4_data_len":2712,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1872,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36208,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":7,"flow_packet_id":10,"flow_first_seen":1499348506489,"flow_last_seen":1499348511497,"flow_tot_l4_data_len":2754,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1913,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36210,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap","flow_id":8,"flow_packet_id":12,"flow_first_seen":1499348514064,"flow_last_seen":1499348519077,"flow_tot_l4_data_len":5149,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2733,"flow_avg_l4_data_len":429,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":36212,"dst_port":80,"l4_proto":"tcp"}
+0152{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackSQLinj.pcap"}
diff --git a/tests/result/nDPId_WebattackXSS.pcap.txt b/tests/result/nDPId_WebattackXSS.pcap.txt
new file mode 100644
index 000000000..2c073c790
--- /dev/null
+++ b/tests/result/nDPId_WebattackXSS.pcap.txt
@@ -0,0 +1,6148 @@
+0364{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1499346935283,"flow_last_seen":1499346935283,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52098,"dst_port":80,"l4_proto":"tcp"}
+0412{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wadAAD4GBCmsEAABwKgKMsuCAFAodgngAAAAAKACchCXWwAAAgQFtAQCCAoBOMhHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy4I5j3VaKHYJ4aAScSBLsAAAAgQFtAQCCAoD4pm+ATjIRwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wahAAD4GBDCsEAABwKgKMsuCAFAodgnhOY91W4AQAOXqtwAAAQEICgE4yEcD4pm+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0814{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1499346935283,"flow_last_seen":1499346935285,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":32,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52098,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0400{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07OVAAEAG1vLAqAoyrBAAAQBQy4I5j3VbKHYLFoAQAOvpfAAAAQEICgPimb4BOMhH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1086{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":578,"pkt":"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","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wapAAD4GBC6sEAABwKgKMsuCAFAodgsWOY93W4AQAO3neAAAAQEICgE4yEgD4pm\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":408,"pkt":"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","pkt_caplen":408,"pkt_type":2048,"pkt_ipoffset":14}
+1931{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":1199,"pkt":"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","pkt_caplen":1199,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":431,"pkt":"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","pkt_caplen":431,"pkt_type":2048,"pkt_ipoffset":14}
+1399{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":807,"pkt":"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","pkt_caplen":807,"pkt_type":2048,"pkt_ipoffset":14}
+0924{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":454,"pkt":"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","pkt_caplen":454,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1499346935343,"flow_last_seen":1499346935343,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52100,"dst_port":80,"l4_proto":"tcp"}
+0413{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IaBAAD4GpDCsEAABwKgKMsuEAFAW1en2AAAAAKACchDI1AAAAgQFtAQCCAoBOMhWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy4Rgmy17FtXp96AScSCd7QAAAgQFtAQCCAoD4pnNATjIVgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0317{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":true,"pkt_ts":1499346935,"pkt_len":7306,"pkt":"","pkt_caplen":7306,"pkt_type":2048,"pkt_ipoffset":14}
+1325{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":752,"pkt":"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","pkt_caplen":752,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IaFAAD4GpDesEAABwKgKMsuEAFAW1en3YJstfIAQAOU89QAAAQEICgE4yFYD4pnN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1499346935650,"flow_last_seen":1499346935650,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52118,"dst_port":80,"l4_proto":"tcp"}
+0413{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZwtAAD4GXsWsEAABwKgKMsuWAFCoJa+oAAAAAKACchBxcwAAAgQFtAQCCAoBOMijAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1499346935650,"flow_last_seen":1499346935650,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52120,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/9xAAD4GxfOsEAABwKgKMsuYAFCG7Dd\/AAAAAKACchAK1AAAAgQFtAQCCAoBOMijAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy5YT3KepqCWvqaAScSAY0AAAAgQFtAQCCAoD4poaATjIowEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy5hHE6nghuw3gKAScSB8wgAAAgQFtAQCCAoD4poaATjIowEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZwxAAD4GXsysEAABwKgKMsuWAFCoJa+pE9ynqoAQAOW31wAAAQEICgE4yKMD4poa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/91AAD4GxfqsEAABwKgKMsuYAFCG7DeARxOp4YAQAOUbygAAAQEICgE4yKMD4poa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/95AAD4GxfmsEAABwKgKMsuYAFCG7DeARxOp4YARAOUWSAAAAQEICgE4ziQD4poa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zw1AAD4GXsusEAABwKgKMsuWAFCoJa+pE9ynqoARAOWyVQAAAQEICgE4ziQD4poa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IaJAAD4GpDasEAABwKgKMsuEAFAW1en3YJstfIARAOU3JgAAAQEICgE4ziQD4pnN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NnpAAEAGjV7AqAoyrBAAAQBQy5hHE6nhhuw3gYARAOMQyAAAAQEICgPin5sBOM4k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ODFAAEAGi6fAqAoyrBAAAQBQy5YT3KeqqCWvqoARAOOs1QAAAQEICgPin5sBOM4k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sudAAEAGEPHAqAoyrBAAAQBQy4Rgmy18FtXp+IARAOMxWQAAAQEICgPin5sBOM4k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/99AAD4GxfisEAABwKgKMsuYAFCG7DeBRxOp4oAQAOUQxgAAAQEICgE4ziQD4p+b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IaNAAD4GpDWsEAABwKgKMsuEAFAW1en4YJstfYAQAOUxVwAAAQEICgE4ziQD4p+b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zw5AAD4GXsqsEAABwKgKMsuWAFCoJa+qE9ynq4AQAOWs0wAAAQEICgE4ziQD4p+b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1499346956870,"flow_last_seen":1499346956870,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52200,"dst_port":80,"l4_proto":"tcp"}
+0413{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DqpAAD4GtyasEAABwKgKMsvoAFDxddP2AAAAAKACchDuyQAAAgQFtAQCCAoBON1cAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy+g57n8P8XXT96AScSCD9QAAAgQFtAQCCAoD4q7TATjdXAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DqtAAD4Gty2sEAABwKgKMsvoAFDxddP3Oe5\/EIAQAOUi\/QAAAQEICgE43VwD4q7T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1499346956870,"flow_last_seen":1499346956871,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":32,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52200,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0401{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00cNAAEAG8hTAqAoyrBAAAQBQy+g57n8Q8XXVLIAQAOshwgAAAQEICgPirtMBON1c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1087{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":578,"pkt":"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","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Dq1AAD4GtyusEAABwKgKMsvoAFDxddUsOe6BEIAQAO0fwAAAAQEICgE43VwD4q7T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":408,"pkt":"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","pkt_caplen":408,"pkt_type":2048,"pkt_ipoffset":14}
+1928{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":1198,"pkt":"AMGxFOsxABm5CmnxCABFAASg0cVAAEAG7abAqAoyrBAAAQBQy+g57oEQ8XXWgoAYAPOEygAAAQEICgPirtoBON1iSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE1OjU2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KU2V0LUNvb2tpZTogUEhQU0VTU0lEPThoc20yczM2ODQ2azdwcjhwM2hzNjNmNjM3OyBwYXRoPS8NClNldC1Db29raWU6IHNlY3VyaXR5PWxvdw0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogNjk4DQpLZWVwLUFsaXZlOiB0aW1lb3V0PTUsIG1heD05OQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7Y2hhcnNldD11dGYtOA0KDQofiwgAAAAAAAADpVTfT9swEH4Gif\/h8Es3pMQt3QRlSSTWdhpSGRWksD0hN3Ybq07sJW5T9tfPTtJfpA+T9mLd2b7v+3x3vrNT73zw0A9\/jYcQ60TAePJ1dNcH5GD80u1jPAgH8PN7eD+CjtuGJ53xSGM8\/IEAxVqrG4yLonCLriuzOQ4f8dqidGxYbTp5GeNSTVFwdnp26pU860SkuX8Eo9Pr9arQ6vqJFzNCK\/PES5gmYIMc9nvJVz7qy1SzVDvhm2IIosrzkWZrjS3IF4hikuVM+5Pwm3ONAG+gNNeCBSM55ync3MCAJCk8L0XKMjIVDF7YFG6VEjwimssUPgyeX24\/wqrjdtpwMWArJqRKDNmFhyuoGlfwdAEZEz7K9ZtgecyYRqCNvlpWlOcI4ozNfERXBbE+FlaGW57UAj28e7c3lfStNilfAac+KjKiFMvQu20btNudZls4FXg8mUOeRTUtT8ic1cyvZpWuSueW3sOqGY4NQQDeueM0qBznnYa6ChsRM5klQCKbRR9VD1WxQmBqGUtzXcl8d5czQU216mSabJIpE2AgfLTMLdvErClJmIfLI6OJp2qp9xJs2kCQPK+57uwpgpz\/MceXbQQ2uAKzFgp2r2wwKgODgrFZC5nR44yqPj3KejsJH\/oP9+PRMBz6SM5mTSHb+D0hVsaBozbg+XKacJOtAwn1JqyIWBq3bOkNfOXs1RQfpngfqBVzSlnaqkJbNkWvWi7sTgXdij51e5eUta87vRnrXbVJdH3Vo2xGOp9pl3ZZa9cvtuqNNjrw\/9OwpmlHON7WjySlMnnSRsWmr6Fs1KqV4V0vb1u20cwzKfXuQ5lfROq\/uze6LLEbSXe5wOank2xuxg16nQqSLlDwb4PFw2S\/SM3fttEBW4VHLm2Hwt6t7ezwyoEY\/AUNOWF78wUAAA==","pkt_caplen":1198,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":431,"pkt":"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","pkt_caplen":431,"pkt_type":2048,"pkt_ipoffset":14}
+1400{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":807,"pkt":"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","pkt_caplen":807,"pkt_type":2048,"pkt_ipoffset":14}
+0924{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":454,"pkt":"ABm5CmnxAMGxFOsxCABFAAG4DrBAAD4GtaSsEAABwKgKMsvoAFDxddfvOe6IYYAYARW5IgAAAQEICgE43WsD4q7iR0VUIC9kdi9kdndhL2ltYWdlcy9sb2dpbl9sb2dvLnBuZyBIVFRQLzEuMQ0KSG9zdDogMjA1LjE3NC4xNjUuNjgNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6NDUuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC80NS4wDQpBY2NlcHQ6IGltYWdlL3BuZyxpbWFnZS8qO3E9MC44LCovKjtxPTAuNQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpSZWZlcmVyOiBodHRwOi8vMjA1LjE3NC4xNjUuNjgvZHYvbG9naW4ucGhwDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgUEhQU0VTU0lEPThoc20yczM2ODQ2azdwcjhwM2hzNjNmNjM3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":454,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1499346956932,"flow_last_seen":1499346956932,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52202,"dst_port":80,"l4_proto":"tcp"}
+0413{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nj9AAD4GJ5GsEAABwKgKMsvqAFAHDkNUAAAAAKACchBpwwAAAgQFtAQCCAoBON1rAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy+qiErzRBw5DVaAScSBY+QAAAgQFtAQCCAoD4q7iATjdawEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0317{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":true,"pkt_ts":1499346956,"pkt_len":7992,"pkt":"","pkt_caplen":7992,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nkBAAD4GJ5isEAABwKgKMsvqAFAHDkNVohK80oAQAOX4AAAAAQEICgE43WsD4q7i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346956,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrFAAD4GtyesEAABwKgKMsvoAFDxddlzOe6TsYAQAUMIZAAAAQEICgE43WsD4q7i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1499346957283,"flow_last_seen":1499346957283,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52220,"dst_port":80,"l4_proto":"tcp"}
+0413{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346957,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8F6tAAD4GriWsEAABwKgKMsv8AFD6EcpoAAAAAKACchDvQAAAAgQFtAQCCAoBON3DAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1499346957283,"flow_last_seen":1499346957283,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52222,"dst_port":80,"l4_proto":"tcp"}
+0413{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346957,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iOxAAD4GPOSsEAABwKgKMsv+AFCTelUvAAAAAKACchDLDwAAAgQFtAQCCAoBON3DAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346957,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy\/xzRrv9+hHKaaAScSANvwAAAgQFtAQCCAoD4q86ATjdwwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346957,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQy\/7+F1DJk3pVMKAScSDJ8AAAAgQFtAQCCAoD4q86ATjdwwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346957,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F6xAAD4GriysEAABwKgKMsv8AFD6Ecppc0a7\/oAQAOWsxgAAAQEICgE43cMD4q86","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346957,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iO1AAD4GPOusEAABwKgKMsv+AFCTelUw\/hdQyoAQAOVo+AAAAQEICgE43cMD4q86","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iO5AAD4GPOqsEAABwKgKMsv+AFCTelUw\/hdQyoARAOVlcQAAAQEICgE44UkD4q86","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F61AAD4GriusEAABwKgKMsv8AFD6Ecppc0a7\/oARAOWpPwAAAQEICgE44UkD4q86","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nkFAAD4GJ5esEAABwKgKMsvqAFAHDkNVohK80oARAOX0IQAAAQEICgE44UkD4q7i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04gpAAEAG4c3AqAoyrBAAAQBQy\/7+F1DKk3pVMYARAONh7AAAAQEICgPissABOOFJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CT5AAEAGuprAqAoyrBAAAQBQy\/xzRrv++hHKaoARAOOlugAAAQEICgPissABOOFJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DhJAAEAGtcbAqAoyrBAAAQBQy+qiErzSBw5DVoARAOPwRAAAAQEICgPissABOOFJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iO9AAD4GPOmsEAABwKgKMsv+AFCTelUx\/hdQy4AQAOVh6gAAAQEICgE44UkD4rLA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F65AAD4GriqsEAABwKgKMsv8AFD6Ecpqc0a7\/4AQAOWluAAAAQEICgE44UkD4rLA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346960,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nkJAAD4GJ5asEAABwKgKMsvqAFAHDkNWohK804AQAOXwQgAAAQEICgE44UkD4rLA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1499346976603,"flow_last_seen":1499346976603,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52298,"dst_port":80,"l4_proto":"tcp"}
+0414{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Un9AAD4Gc1GsEAABwKgKMsxKAFAevqLeAAAAAKACchDe8gAAAgQFtAQCCAoBOPChAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzEoKnmxhHr6i36AScSCi1wAAAgQFtAQCCAoD4sIYATjwoQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoBAAD4Gc1isEAABwKgKMsxKAFAevqLfCp5sYoAQAOVB3wAAAQEICgE48KED4sIY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1499346976603,"flow_last_seen":1499346976604,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":32,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52298,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0402{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rnpAAEAGFV7AqAoyrBAAAQBQzEoKnmxiHr6kFIAQAOtApAAAAQEICgPiwhgBOPCh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1088{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":578,"pkt":"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","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoJAAD4Gc1asEAABwKgKMsxKAFAevqQUCp5uYoAQAO0+oQAAAQEICgE48KID4sIY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":408,"pkt":"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","pkt_caplen":408,"pkt_type":2048,"pkt_ipoffset":14}
+1932{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":1200,"pkt":"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","pkt_caplen":1200,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoRAAD4Gc1SsEAABwKgKMsxKAFAevqVqCp5y0IAQAQQ4rwAAAQEICgE48LID4sIf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0893{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":431,"pkt":"ABm5CmnxAMGxFOsxCABFAAGhUoVAAD4GceasEAABwKgKMsxKAFAevqVqCp5y0IAYAQTJ8QAAAQEICgE48LMD4sIfR0VUIC9kdi9kdndhL2Nzcy9sb2dpbi5jc3MgSFRUUC8xLjENCkhvc3Q6IDIwNS4xNzQuMTY1LjY4DQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQ7IHJ2OjQ1LjApIEdlY2tvLzIwMTAwMTAxIEZpcmVmb3gvNDUuMA0KQWNjZXB0OiB0ZXh0L2NzcywqLyo7cT0wLjENCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMsZW47cT0wLjUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KUmVmZXJlcjogaHR0cDovLzIwNS4xNzQuMTY1LjY4L2R2L2xvZ2luLnBocA0KQ29va2llOiBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":431,"pkt_type":2048,"pkt_ipoffset":14}
+1400{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":807,"pkt":"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","pkt_caplen":807,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UoZAAD4Gc1KsEAABwKgKMsxKAFAevqbXCp51tYAQARU0QAAAAQEICgE48LMD4sIq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0925{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":454,"pkt":"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","pkt_caplen":454,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1499346976677,"flow_last_seen":1499346976677,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52300,"dst_port":80,"l4_proto":"tcp"}
+0414{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8I8VAAD4GogusEAABwKgKMsxMAFCAL9N2AAAAAKACchBM1QAAAgQFtAQCCAoBOPCzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzEzfj2P1gC\/Td6AScSBEIgAAAgQFtAQCCAoD4sIqATjwswEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+6276{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":4410,"pkt":"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","pkt_caplen":4410,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8ZAAD4GohKsEAABwKgKMsxMAFCAL9N3349j9oAQAOXjKAAAAQEICgE48LQD4sIq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1499346976999,"flow_last_seen":1499346976999,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52318,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z5FAAD4GXj+sEAABwKgKMsxeAFDFSpaVAAAAAKACchBEOAAAAgQFtAQCCAoBOPEEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1499346976999,"flow_last_seen":1499346976999,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52320,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8v9RAAD4GBfysEAABwKgKMsxgAFByIk7QAAAAAKACchDfIwAAAgQFtAQCCAoBOPEEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzF63DJWlxUqWlqAScSAyBwAAAgQFtAQCCAoD4sJ7ATjxBAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346976,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzGAmGFC+ciJO0aAScSCizgAAAgQFtAQCCAoD4sJ7ATjxBAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z5JAAD4GXkasEAABwKgKMsxeAFDFSpaWtwyVpoAQAOXRDgAAAQEICgE48QQD4sJ7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0v9VAAD4GBgOsEAABwKgKMsxgAFByIk7RJhhQv4AQAOVB1gAAAQEICgE48QQD4sJ7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":430,"pkt":"ABm5CmnxAMGxFOsxCABFAAGgI8dAAD4GoKWsEAABwKgKMsxMAFCAL9N3349j9oAYAOVhqQAAAQEICgE48dwD4sIqR0VUIC9kdi9kdndhL2pzL2R2d2FQYWdlLmpzIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgUEhQU0VTU0lEPXY2b29rZjZlMjZuMWlkbzVzaXZlNnNhaTcxDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1499346976677,"flow_last_seen":1499346977863,"flow_tot_l4_data_len":508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":396,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52300,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/dvwa\/js\/dvwaPage.js","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0403{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oKVAAEAGIzPAqAoyrBAAAQBQzEzfj2P2gC\/U44AQAOvfZQAAAQEICgPiw1MBOPHc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0885{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1499346976999,"flow_last_seen":1499346977870,"flow_tot_l4_data_len":502,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52318,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/favicon.ico","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VvNAAEAGbOXAqAoyrBAAAQBQzF63DJWmxUqX\/IAQAOvN7gAAAQEICgPiw1UBOPHe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1433{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":829,"pkt":"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","pkt_caplen":829,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8hAAD4GohCsEAABwKgKMsxMAFCAL9Tj349m8YAQAPHcWQAAAQEICgE48eID4sNY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0933{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":461,"pkt":"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","pkt_caplen":461,"pkt_type":2048,"pkt_ipoffset":14}
+2720{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":1773,"pkt":"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","pkt_caplen":1773,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z5RAAD4GXkSsEAABwKgKMsxeAFDFSpf8twycUYAQAP\/HHwAAAQEICgE48eYD4sNd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+7637{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":5396,"pkt":"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","pkt_caplen":5396,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346977,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8pAAD4Gog6sEAABwKgKMsxMAFCAL9Zu3497w4AQAUTFnQAAAQEICgE48egD4sNe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0v9ZAAD4GBgKsEAABwKgKMsxgAFByIk7RJhhQv4ARAOU8WwAAAQEICgE49n4D4sJ7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0l0pAAEAGLI7AqAoyrBAAAQBQzGAmGFC\/ciJO0oARAOM24gAAAQEICgPix\/UBOPZ+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0v9dAAD4GBgGsEAABwKgKMsxgAFByIk7SJhhQwIAQAOU24AAAAQEICgE49n4D4sf1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VvZAAEAGbOLAqAoyrBAAAQBQzF63DJxRxUqX\/IARAOvCTwAAAQEICgPiyEABOPHm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z5VAAD4GXkOsEAABwKgKMsxeAFDFSpf8twycUoARAP+9VwAAAQEICgE49skD4shA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VvdAAEAGbOHAqAoyrBAAAQBQzF63DJxSxUqX\/YAQAOu9awAAAQEICgPiyEABOPbJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oKtAAEAGIy3AqAoyrBAAAQBQzEzfj3vDgC\/WboARAPPBCQAAAQEICgPiyEIBOPHo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0I8tAAD4Gog2sEAABwKgKMsxMAFCAL9Zu3497xIARAUS71AAAAQEICgE49ssD4shC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346982,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oKxAAEAGIyzAqAoyrBAAAQBQzEzfj3vEgC\/Wb4AQAPO8JQAAAQEICgPiyEIBOPbL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1499346983175,"flow_last_seen":1499346983175,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52386,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346983,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ikRAAD4GO4ysEAABwKgKMsyiAFBY531IAAAAAKACchDDnAAAAgQFtAQCCAoBOPcMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346983,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzKJurEWjWOd9SaAScSBDxgAAAgQFtAQCCAoD4siDATj3DAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346983,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ikVAAD4GO5OsEAABwKgKMsyiAFBY531JbqxFpIAQAOXizQAAAQEICgE49wwD4siD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1499346984469,"flow_last_seen":1499346984469,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52400,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346984,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8puFAAD4GHu+sEAABwKgKMsywAFBLrV6uAAAAAKACchDuHwAAAgQFtAQCCAoBOPhPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346984,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzLBWnxN3S61er6AScSC3PwAAAgQFtAQCCAoD4snGATj4TwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346984,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0puJAAD4GHvasEAABwKgKMsywAFBLrV6vVp8TeIAQAOVWRgAAAQEICgE4+FAD4snG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1499346985762,"flow_last_seen":1499346985762,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52414,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346985,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8k7hAAD4GMhisEAABwKgKMsy+AFBA2morAAAAAKACchDsIwAAAgQFtAQCCAoBOPmTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346985,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzL4AEHgfQNpqLKAScSCl5gAAAgQFtAQCCAoD4ssKATj5kwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346985,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0k7lAAD4GMh+sEAABwKgKMsy+AFBA2mosABB4IIAQAOVE7gAAAQEICgE4+ZMD4ssK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1499346988319,"flow_last_seen":1499346988319,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52440,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346988,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NptAAD4GjzWsEAABwKgKMszYAFB2NsqJAAAAAKACchBT0AAAAgQFtAQCCAoBOPwSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346988,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzNhVLB2odjbKiqAScSAQbwAAAgQFtAQCCAoD4s2JATj8EgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346988,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NpxAAD4GjzysEAABwKgKMszYAFB2NsqKVSwdqYAQAOWvdgAAAQEICgE4\/BID4s2J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346988,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ikZAAD4GO5KsEAABwKgKMsyiAFBY531JbqxFpIARAOXdfgAAAQEICgE4\/FoD4siD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346988,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iHVAAEAGO2PAqAoyrBAAAQBQzKJurEWkWOd9SoARAOPYMQAAAQEICgPizdEBOPxa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346988,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ikdAAD4GO5GsEAABwKgKMsyiAFBY531KbqxFpYAQAOXYLwAAAQEICgE4\/FoD4s3R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1499346989580,"flow_last_seen":1499346989580,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52454,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346989,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HPhAAD4GqNisEAABwKgKMszmAFB8FOG1AAAAAKACchA1fQAAAgQFtAQCCAoBOP1NAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346989,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzOZrnFEQfBThtqAScSCnCAAAAgQFtAQCCAoD4s7EATj9TQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346989,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HPlAAD4GqN+sEAABwKgKMszmAFB8FOG2a5xREYAQAOVGDwAAAQEICgE4\/U4D4s7E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346989,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0puNAAD4GHvWsEAABwKgKMsywAFBLrV6vVp8TeIARAOVRQQAAAQEICgE4\/VQD4snG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346989,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03bNAAEAG5iTAqAoyrBAAAQBQzLBWnxN4S61esIARAONMPQAAAQEICgPizssBOP1U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346989,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0puRAAD4GHvSsEAABwKgKMsywAFBLrV6wVp8TeYAQAOVMOwAAAQEICgE4\/VQD4s7L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346991,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0k7pAAD4GMh6sEAABwKgKMsy+AFBA2mosABB4IIARAOU\/OAAAAQEICgE4\/0gD4ssK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346991,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qJ9AAEAGGznAqAoyrBAAAQBQzL4AEHggQNpqLYAQAOM5hAAAAQEICgPi0MABOP9I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346991,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qKBAAEAGGzjAqAoyrBAAAQBQzL4AEHggQNpqLYARAOM5gwAAAQEICgPi0MABOP9I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346991,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ADdAAD4GxaGsEAABwKgKMsy+AFBA2motABB4IYAQAOU5gAAAAQEICgE4\/0kD4tDA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1499346992144,"flow_last_seen":1499346992144,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52480,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346992,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA855pAAD4G3jWsEAABwKgKMs0AAFBUEBhUAAAAAKACchAkSAAAAgQFtAQCCAoBOP\/OAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346992,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzQA256uwVBAYVaAScSBtZwAAAgQFtAQCCAoD4tFFATj\/zgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346992,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA055tAAD4G3jysEAABwKgKMs0AAFBUEBhVNuersYAQAOUMbgAAAQEICgE4\/88D4tFF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1499346993434,"flow_last_seen":1499346993434,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52494,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346993,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QspAAD4GgwasEAABwKgKMs0OAFBi7kPbAAAAAKACchDokQAAAgQFtAQCCAoBOQERAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346993,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzQ7bbxEWYu5D3KAScSAmgAAAAgQFtAQCCAoD4tKIATkBEQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346993,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QstAAD4Ggw2sEAABwKgKMs0OAFBi7kPc228RF4AQAOXFhwAAAQEICgE5ARED4tKI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346993,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Np1AAD4GjzusEAABwKgKMszYAFB2NsqKVSwdqYARAOWqSwAAAQEICgE5ATwD4s2J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346993,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zxpAAEAG9L3AqAoyrBAAAQBQzNhVLB2pdjbKi4ARAOOlIgAAAQEICgPi0rMBOQE8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346993,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Np5AAD4GjzqsEAABwKgKMszYAFB2NsqLVSwdqoAQAOWlHwAAAQEICgE5AT0D4tKz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346994,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HPpAAD4GqN6sEAABwKgKMszmAFB8FOG2a5xREYARAOVBJgAAAQEICgE5AjYD4s7E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346994,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0grxAAEAGQRzAqAoyrBAAAQBQzOZrnFERfBTht4ARAOM8PgAAAQEICgPi060BOQI2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346994,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HPtAAD4GqN2sEAABwKgKMszmAFB8FOG3a5xREoAQAOU8OwAAAQEICgE5AjcD4tOt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1499346994731,"flow_last_seen":1499346994731,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52508,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346994,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ErdAAD4GsxmsEAABwKgKMs0cAFAyGBDiAAAAAKACchBLDwAAAgQFtAQCCAoBOQJVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346994,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzRyBtZXkMhgQ46AScSBcpQAAAgQFtAQCCAoD4tPMATkCVQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346994,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ErhAAD4GsyCsEAABwKgKMs0cAFAyGBDjgbWV5YAQAOX7rAAAAQEICgE5AlUD4tPM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1499346997314,"flow_last_seen":1499346997314,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52534,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346997,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZWRAAD4GYGysEAABwKgKMs02AFBhbWG\/AAAAAKACchDIPAAAAgQFtAQCCAoBOQTbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346997,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzTaSy6RrYW1hwKAScSC3rwAAAgQFtAQCCAoD4tZSATkE2wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346997,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZWVAAD4GYHOsEAABwKgKMs02AFBhbWHAksukbIAQAOVWtwAAAQEICgE5BNsD4tZS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346997,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA055xAAD4G3jusEAABwKgKMs0AAFBUEBhVNuersYARAOUHFwAAAQEICgE5BSUD4tFF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346997,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fS1AAEAGRqvAqAoyrBAAAQBQzQA256uxVBAYVoARAOMBwQAAAQEICgPi1pwBOQUl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346997,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0551AAD4G3jqsEAABwKgKMs0AAFBUEBhWNuersoAQAOUBvwAAAQEICgE5BSUD4tac","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1499346998578,"flow_last_seen":1499346998578,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52548,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346998,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K3xAAD4GmlSsEAABwKgKMs1EAFB2Xi1rAAAAAKACchDmVQAAAgQFtAQCCAoBOQYXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346998,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzUQbBzt5dl4tbKAScSC1QwAAAgQFtAQCCAoD4teOATkGFwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346998,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K31AAD4GmlusEAABwKgKMs1EAFB2Xi1sGwc7eoAQAOVUSwAAAQEICgE5BhcD4teO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346998,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QsxAAD4GgwysEAABwKgKMs0OAFBi7kPc228RF4ARAOXAeAAAAQEICgE5Bh8D4tKI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346998,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xoFAAEAG\/VbAqAoyrBAAAQBQzQ7bbxEXYu5D3YARAOO7awAAAQEICgPi15YBOQYf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499346998,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qs1AAD4GgwusEAABwKgKMs0OAFBi7kPd228RGIAQAOW7aQAAAQEICgE5Bh8D4teW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347000,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ErlAAD4Gsx+sEAABwKgKMs0cAFAyGBDjgbWV5YARAOX17QAAAQEICgE5CBMD4tPM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347000,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TG9AAEAGd2nAqAoyrBAAAQBQzRyBtZXlMhgQ5IARAOPwMAAAAQEICgPi2YoBOQgT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347000,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ErpAAD4Gsx6sEAABwKgKMs0cAFAyGBDkgbWV5oAQAOXwLgAAAQEICgE5CBMD4tmK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1499347001111,"flow_last_seen":1499347001111,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52574,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347001,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kNhAAD4GNPisEAABwKgKMs1eAFDMzJhIAAAAAKACchAidwAAAgQFtAQCCAoBOQiQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347001,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzV4q6d3azMyYSaAScSA8qAAAAgQFtAQCCAoD4toHATkIkAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347001,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kNlAAD4GNP+sEAABwKgKMs1eAFDMzJhJKund24AQAOXbrwAAAQEICgE5CJAD4toH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1499347002399,"flow_last_seen":1499347002399,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52588,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347002,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d7tAAD4GThWsEAABwKgKMs1sAFBA8H5pAAAAAKACchDG4gAAAgQFtAQCCAoBOQnSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347002,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzWx3BXtPQPB+aqAScSD2QAAAAgQFtAQCCAoD4ttJATkJ0gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347002,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d7xAAD4GThysEAABwKgKMs1sAFBA8H5qdwV7UIAQAOWVSAAAAQEICgE5CdID4ttJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347002,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZWZAAD4GYHKsEAABwKgKMs02AFBhbWHAksukbIARAOVRigAAAQEICgE5CgcD4tZS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347002,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fxJAAEAGRMbAqAoyrBAAAQBQzTaSy6RsYW1hwYARAONMXwAAAQEICgPi234BOQoH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347002,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZWdAAD4GYHGsEAABwKgKMs02AFBhbWHBksukbYAQAOVMXQAAAQEICgE5CgcD4tt+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347003,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K35AAD4GmlqsEAABwKgKMs1EAFB2Xi1sGwc7eoARAOVPYAAAAQEICgE5CwED4teO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347003,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05wJAAEAG3NXAqAoyrBAAAQBQzUQbBzt6dl4tbYARAONKdwAAAQEICgPi3HgBOQsB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347003,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K39AAD4GmlmsEAABwKgKMs1EAFB2Xi1tGwc7e4AQAOVKdQAAAQEICgE5CwED4tx4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1499347003695,"flow_last_seen":1499347003695,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52602,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347003,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZUVAAD4GYIusEAABwKgKMs16AFBCXW5TAAAAAKACchDUOQAAAgQFtAQCCAoBOQsWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347003,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzXqmA8avQl1uVKAScSCH9QAAAgQFtAQCCAoD4tyNATkLFgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347003,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZUZAAD4GYJKsEAABwKgKMs16AFBCXW5UpgPGsIAQAOUm\/QAAAQEICgE5CxYD4tyN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1499347006233,"flow_last_seen":1499347006233,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52628,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347006,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WV1AAD4GbHOsEAABwKgKMs2UAFDN5FTMAAAAAKACchBfpAAAAgQFtAQCCAoBOQ2RAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347006,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzZSBD41szeRUzaAScSBvHQAAAgQFtAQCCAoD4t8HATkNkQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347006,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WV5AAD4GbHqsEAABwKgKMs2UAFDN5FTNgQ+NbYAQAOUOJQAAAQEICgE5DZED4t8H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347006,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kNpAAD4GNP6sEAABwKgKMs1eAFDMzJhJKund24ARAOXWTwAAAQEICgE5De8D4toH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347006,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Ar1AAEAGwRvAqAoyrBAAAQBQzV4q6d3bzMyYSoARAOPQ8QAAAQEICgPi32YBOQ3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347006,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kNtAAD4GNP2sEAABwKgKMs1eAFDMzJhKKund3IAQAOXQ7wAAAQEICgE5De8D4t9m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":0,"flow_packet_id":30,"flow_first_seen":1499346935283,"flow_last_seen":1499346941359,"flow_tot_l4_data_len":16724,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7272,"flow_avg_l4_data_len":557,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52098,"dst_port":80,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1499346935343,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52100,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1499346935343,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52100,"dst_port":80,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52118,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52118,"dst_port":80,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52120,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1499346935650,"flow_last_seen":1499346941289,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52120,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1499347007496,"flow_last_seen":1499347007496,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52642,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347007,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8xEhAAD4GAYisEAABwKgKMs2iAFDPCcqEAAAAAKACchDnfQAAAgQFtAQCCAoBOQ7MAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347007,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzaKR1tjLzwnKhaAScSCZlAAAAgQFtAQCCAoD4uBDATkOzAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347007,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xElAAD4GAY+sEAABwKgKMs2iAFDPCcqFkdbYzIAQAOU4nAAAAQEICgE5DswD4uBD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347007,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d71AAD4GThusEAABwKgKMs1sAFBA8H5qdwV7UIARAOWQMAAAAQEICgE5DukD4ttJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347007,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mzBAAEAGKKjAqAoyrBAAAQBQzWx3BXtQQPB+a4ARAOOLGgAAAQEICgPi4GABOQ7p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347007,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d75AAD4GThqsEAABwKgKMs1sAFBA8H5rdwV7UYAQAOWLGAAAAQEICgE5DukD4uBg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347009,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZUdAAD4GYJGsEAABwKgKMs16AFBCXW5UpgPGsIARAOUhNQAAAQEICgE5EN0D4tyN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347009,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JORAAEAGnvTAqAoyrBAAAQBQzXqmA8awQl1uVYARAOMbbwAAAQEICgPi4lQBORDd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347009,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZUhAAD4GYJCsEAABwKgKMs16AFBCXW5VpgPGsYAQAOUbbQAAAQEICgE5EN0D4uJU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1499347010080,"flow_last_seen":1499347010080,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52668,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347010,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aVxAAD4GXHSsEAABwKgKMs28AFAhFXgOAAAAAKACchDlSAAAAgQFtAQCCAoBORFSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347010,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzbww\/OHGIRV4D6AScSDsuAAAAgQFtAQCCAoD4uLJATkRUgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347010,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aV1AAD4GXHusEAABwKgKMs28AFAhFXgPMPzhx4AQAOWLvwAAAQEICgE5EVMD4uLJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1499347011349,"flow_last_seen":1499347011349,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52682,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347011,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8RzxAAD4GfpSsEAABwKgKMs3KAFCfKlWsAAAAAKACchCISQAAAgQFtAQCCAoBORKQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347011,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzcqa6hS4nypVraAScSDxmwAAAgQFtAQCCAoD4uQHATkSkAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347011,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rz1AAD4GfpusEAABwKgKMs3KAFCfKlWtmuoUuYAQAOWQowAAAQEICgE5EpAD4uQH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347011,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WV9AAD4GbHmsEAABwKgKMs2UAFDN5FTNgQ+NbYARAOUI5AAAAQEICgE5EtED4t8H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347011,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aSVAAEAGWrPAqAoyrBAAAQBQzZSBD41tzeRUzoARAOMDpAAAAQEICgPi5EgBORLR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347011,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WWBAAD4GbHisEAABwKgKMs2UAFDN5FTOgQ+NboAQAOUDogAAAQEICgE5EtED4uRI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347012,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xEpAAD4GAY6sEAABwKgKMs2iAFDPCcqFkdbYzIARAOUznAAAAQEICgE5E8sD4uBD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347012,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PY5AAEAGhkrAqAoyrBAAAQBQzaKR1tjMzwnKhoARAOMungAAAQEICgPi5UIBORPL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347012,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xEtAAD4GAY2sEAABwKgKMs2iAFDPCcqGkdbYzYAQAOUumwAAAQEICgE5E8wD4uVC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1499347012617,"flow_last_seen":1499347012617,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52696,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347012,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mKRAAD4GLSysEAABwKgKMs3YAFAU4YtpAAAAAKACchDbigAAAgQFtAQCCAoBORPNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347012,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzdgtNmaCFOGLaqAScSBfigAAAgQFtAQCCAoD4uVEATkTzQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347012,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mKVAAD4GLTOsEAABwKgKMs3YAFAU4YtqLTZmg4AQAOX+kQAAAQEICgE5E80D4uVE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1499347015165,"flow_last_seen":1499347015165,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52722,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347015,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wXxAAD4GBFSsEAABwKgKMs3yAFDEv9c2AAAAAKACchDdRwAAAgQFtAQCCAoBORZKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347015,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzfKguKOtxL\/XN6AScSCuHQAAAgQFtAQCCAoD4ufAATkWSgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347015,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wX1AAD4GBFusEAABwKgKMs3yAFDEv9c3oLijroAQAOVNJQAAAQEICgE5FkoD4ufA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347015,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aV5AAD4GXHqsEAABwKgKMs28AFAhFXgPMPzhx4ARAOWGWAAAAQEICgE5FrkD4uLJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347015,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CfdAAEAGueHAqAoyrBAAAQBQzbww\/OHHIRV4EIARAOOA8gAAAQEICgPi6DABORa5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347015,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aV9AAD4GXHmsEAABwKgKMs28AFAhFXgQMPzhyIAQAOWA7wAAAQEICgE5FroD4ugw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1499347016455,"flow_last_seen":1499347016455,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52736,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347016,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hwdAAD4GPsmsEAABwKgKMs4AAFB8BZCLAAAAAKACchBrXQAAAgQFtAQCCAoBOReMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347016,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzgBumELLfAWQjKAScSDN8gAAAgQFtAQCCAoD4ukDATkXjAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347016,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hwhAAD4GPtCsEAABwKgKMs4AAFB8BZCMbphCzIAQAOVs+gAAAQEICgE5F4wD4ukD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347016,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rz5AAD4GfpqsEAABwKgKMs3KAFCfKlWtmuoUuYARAOWLfwAAAQEICgE5F7MD4uQH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347016,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/ZNAAEAGxkTAqAoyrBAAAQBQzcqa6hS5nypVroARAOOGXQAAAQEICgPi6SoBORez","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347016,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rz9AAD4GfpmsEAABwKgKMs3KAFCfKlWumuoUuoAQAOWGWgAAAQEICgE5F7QD4ukq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1499347017745,"flow_last_seen":1499347017745,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52750,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347017,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8p+RAAD4GHeysEAABwKgKMs4OAFCFw78rAAAAAKACchAxrgAAAgQFtAQCCAoBORjPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347017,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzg5V15svhcO\/LKAScSBTXgAAAgQFtAQCCAoD4upFATkYzwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347017,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p+VAAD4GHfOsEAABwKgKMs4OAFCFw78sVdebMIAQAOXyZQAAAQEICgE5GM8D4upF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347018,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mKZAAD4GLTKsEAABwKgKMs3YAFAU4YtqLTZmg4ARAOX4tQAAAQEICgE5GagD4uVE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347018,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jZ1AAEAGNjvAqAoyrBAAAQBQzdgtNmaDFOGLa4ARAOPy3AAAAQEICgPi6x4BORmo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347018,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mKdAAD4GLTGsEAABwKgKMs3YAFAU4YtrLTZmhIAQAOXy2gAAAQEICgE5GagD4use","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1499347020329,"flow_last_seen":1499347020329,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52776,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347020,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8BsFAAD4Gvw+sEAABwKgKMs4oAFCq7R2UAAAAAKACchCrewAAAgQFtAQCCAoBORtVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347020,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzijgzD+Kqu0dlaAScSCbVAAAAgQFtAQCCAoD4uzMATkbVQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347020,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BsJAAD4GvxasEAABwKgKMs4oAFCq7R2V4Mw\/i4AQAOU6XAAAAQEICgE5G1UD4uzM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347020,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wX5AAD4GBFqsEAABwKgKMs3yAFDEv9c3oLijroARAOVH0gAAAQEICgE5G5wD4ufA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347020,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TrxAAEAGdRzAqAoyrBAAAQBQzfKguKOuxL\/XOIARAONCgQAAAQEICgPi7RIBORuc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347020,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wX9AAD4GBFmsEAABwKgKMs3yAFDEv9c4oLijr4AQAOVCfwAAAQEICgE5G5wD4u0S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347021,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hwlAAD4GPs+sEAABwKgKMs4AAFB8BZCMbphCzIARAOVn7wAAAQEICgE5HJYD4ukD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347021,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rMBAAEAGFxjAqAoyrBAAAQBQzgBumELMfAWQjYARAONi5wAAAQEICgPi7gwBORyW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347021,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hwpAAD4GPs6sEAABwKgKMs4AAFB8BZCNbphCzYAQAOVi5QAAAQEICgE5HJYD4u4M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1499347021621,"flow_last_seen":1499347021621,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52790,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347021,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA899BAAD4Gzf+sEAABwKgKMs42AFBUD+tIAAAAAKACchAzVAAAAgQFtAQCCAoBORyYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347021,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzjY7BBUuVA\/rSaAScSDyDwAAAgQFtAQCCAoD4u4OATkcmAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347021,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA099FAAD4GzgasEAABwKgKMs42AFBUD+tJOwQVL4AQAOWRFwAAAQEICgE5HJgD4u4O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347023,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p+ZAAD4GHfKsEAABwKgKMs4OAFCFw78sVdebMIARAOXsqQAAAQEICgE5HooD4upF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347023,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0azFAAEAGWKfAqAoyrBAAAQBQzg5V15swhcO\/LYARAOPm7gAAAQEICgPi8AEBOR6K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347023,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p+dAAD4GHfGsEAABwKgKMs4OAFCFw78tVdebMYAQAOXm7AAAAQEICgE5HooD4vAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1499347024196,"flow_last_seen":1499347024196,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52816,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347024,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zI9AAD4G+UCsEAABwKgKMs5QAFAU3NOUAAAAAKACchCHngAAAgQFtAQCCAoBOR8bAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347024,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzlADb\/iqFNzTlaAScSCX7gAAAgQFtAQCCAoD4vCSATkfGwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347024,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zJBAAD4G+UesEAABwKgKMs5QAFAU3NOVA2\/4q4AQAOU29QAAAQEICgE5HxwD4vCS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1499347025509,"flow_last_seen":1499347025509,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52830,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347025,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MX5AAD4GlFKsEAABwKgKMs5eAFDxhxEaAAAAAKACchBsFgAAAgQFtAQCCAoBOSBkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347025,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzl7gFzLu8YcRG6AScSBkMQAAAgQFtAQCCAoD4vHbATkgZAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347025,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MX9AAD4GlFmsEAABwKgKMs5eAFDxhxEb4Bcy74AQAOUDOQAAAQEICgE5IGQD4vHb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347025,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BsNAAD4GvxWsEAABwKgKMs4oAFCq7R2V4Mw\/i4ARAOU1MgAAAQEICgE5IH4D4uzM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347025,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zn5AAEAG9VnAqAoyrBAAAQBQzijgzD+Lqu0dloARAOMwCgAAAQEICgPi8fUBOSB+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347025,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BsRAAD4GvxSsEAABwKgKMs4oAFCq7R2W4Mw\/jIAQAOUwCAAAAQEICgE5IH4D4vH1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":4,"flow_packet_id":33,"flow_first_seen":1499346956870,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":17697,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7958,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52200,"dst_port":80,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1499346956932,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52202,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1499346956932,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52202,"dst_port":80,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52220,"dst_port":80,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52222,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1499346957283,"flow_last_seen":1499346960891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52222,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347027,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA099JAAD4GzgWsEAABwKgKMs42AFBUD+tJOwQVL4ARAOWLPAAAAQEICgE5InID4u4O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347027,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05sZAAEAG3RHAqAoyrBAAAQBQzjY7BBUvVA\/rSoARAOOFYgAAAQEICgPi8+kBOSJy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347027,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA099NAAD4GzgSsEAABwKgKMs42AFBUD+tKOwQVMIAQAOWFYAAAAQEICgE5InID4vPp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1499347028086,"flow_last_seen":1499347028086,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52856,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347028,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aaVAAD4GXCusEAABwKgKMs54AFBiKUtNAAAAAKACchC+owAAAgQFtAQCCAoBOSLoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347028,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQznggYwiEYilLTqAScSCeWQAAAgQFtAQCCAoD4vRfATki6AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347028,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aaZAAD4GXDKsEAABwKgKMs54AFBiKUtOIGMIhYAQAOU9YQAAAQEICgE5IugD4vRf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1499347029372,"flow_last_seen":1499347029372,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52870,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347029,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qGFAAD4GHW+sEAABwKgKMs6GAFAx0YxIAAAAAKACchCssQAAAgQFtAQCCAoBOSQpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347029,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzoZSq4KNMdGMSaAScSDe1AAAAgQFtAQCCAoD4vWgATkkKQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347029,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qGJAAD4GHXasEAABwKgKMs6GAFAx0YxJUquCjoAQAOV92wAAAQEICgE5JCoD4vWg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347029,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zJFAAD4G+UasEAABwKgKMs5QAFAU3NOVA2\/4q4ARAOUxqgAAAQEICgE5JGYD4vCS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347029,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DXZAAEAGtmLAqAoyrBAAAQBQzlADb\/irFNzTloARAOMsYAAAAQEICgPi9d0BOSRm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347029,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zJJAAD4G+UWsEAABwKgKMs5QAFAU3NOWA2\/4rIAQAOUsXgAAAQEICgE5JGYD4vXd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347030,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MYBAAD4GlFisEAABwKgKMs5eAFDxhxEb4Bcy74ARAOX+OwAAAQEICgE5JWAD4vHb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347030,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xDhAAEAG\/5\/AqAoyrBAAAQBQzl7gFzLv8YcRHIARAOP5QAAAAQEICgPi9tcBOSVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347030,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MYFAAD4GlFesEAABwKgKMs5eAFDxhxEc4Bcy8IAQAOX5PgAAAQEICgE5JWAD4vbX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1499347030639,"flow_last_seen":1499347030639,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52884,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347030,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jW9AAD4GOGGsEAABwKgKMs6UAFA36qgJAAAAAKACchCJjAAAAgQFtAQCCAoBOSVmAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347030,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzpQiO+l4N+qoCqAScSCD9wAAAgQFtAQCCAoD4vbdATklZgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347030,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXBAAD4GOGisEAABwKgKMs6UAFA36qgKIjvpeYAQAOUi\/wAAAQEICgE5JWYD4vbd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1499347033203,"flow_last_seen":1499347033203,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52910,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347033,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AN5AAD4GxPKsEAABwKgKMs6uAFDsGCc5AAAAAKACchBTkwAAAgQFtAQCCAoBOSfnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347033,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzq5aBdhx7BgnOqAScSAkugAAAgQFtAQCCAoD4vleATkn5wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347033,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AN9AAD4GxPmsEAABwKgKMs6uAFDsGCc6WgXYcoAQAOXDwQAAAQEICgE5J+cD4vle","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347033,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aadAAD4GXDGsEAABwKgKMs54AFBiKUtOIGMIhYARAOU3+gAAAQEICgE5KE4D4vRf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347033,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08UBAAEAG0pfAqAoyrBAAAQBQznggYwiFYilLT4ARAOMylQAAAQEICgPi+cUBOShO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347033,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aahAAD4GXDCsEAABwKgKMs54AFBiKUtPIGMIhoAQAOUykgAAAQEICgE5KE8D4vnF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1499347034467,"flow_last_seen":1499347034467,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52924,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347034,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rP1AAD4GGNOsEAABwKgKMs68AFB+VYXeAAAAAKACchBhZwAAAgQFtAQCCAoBOSkjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347034,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzrxiNhMTflWF36AScSDufwAAAgQFtAQCCAoD4vqaATkpIwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347034,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rP5AAD4GGNqsEAABwKgKMs68AFB+VYXfYjYTFIAQAOWNhwAAAQEICgE5KSMD4vqa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347034,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qGNAAD4GHXWsEAABwKgKMs6GAFAx0YxJUquCjoARAOV4vAAAAQEICgE5KUgD4vWg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347034,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eDFAAEAGS6fAqAoyrBAAAQBQzoZSq4KOMdGMSoARAONzngAAAQEICgPi+r8BOSlI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347034,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qGRAAD4GHXSsEAABwKgKMs6GAFAx0YxKUquCj4AQAOVznAAAAQEICgE5KUgD4vq\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1499347035750,"flow_last_seen":1499347035750,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52938,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347035,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OG5AAD4GjWKsEAABwKgKMs7KAFDI6hIKAAAAAKACchCJVwAAAgQFtAQCCAoBOSpkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347035,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzsrSHYegyOoSC6AScSAwugAAAgQFtAQCCAoD4vvbATkqZAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347035,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OG9AAD4GjWmsEAABwKgKMs7KAFDI6hIL0h2HoYAQAOXPwQAAAQEICgE5KmQD4vvb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347036,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXFAAD4GOGesEAABwKgKMs6UAFA36qgKIjvpeYARAOUdKAAAAQEICgE5KzwD4vbd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347036,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FcpAAEAGrg7AqAoyrBAAAQBQzpQiO+l5N+qoC4ARAOMXUwAAAQEICgPi\/LMBOSs8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347036,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXJAAD4GOGasEAABwKgKMs6UAFA36qgLIjvpeoAQAOUXUAAAAQEICgE5Kz0D4vyz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1185{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347037,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0911{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1499347033203,"flow_last_seen":1499347037012,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52910,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27AQ80NQUS4TAQLQVWHMAGXB11KUBK34NZA8RUUD143IFKQDS3P5%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347037,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JWRAAEAGnnTAqAoyrBAAAQBQzq5aBdhy7Bgpg4AQAOy6AQAAAQEICgPi\/RYBOSuf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2929{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347037,"pkt_len":1933,"pkt":"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","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347037,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AOFAAD4GxPesEAABwKgKMs6uAFDsGCmDWgXfvYAQAQKyngAAAQEICgE5K6AD4v0X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0917{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2790{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AONAAD4GxPWsEAABwKgKMs6uAFDsGCsCWgXmp4AQAR2oHgAAAQEICgE5LJ4D4v4V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1499347038276,"flow_last_seen":1499347038276,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52964,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83pNAAD4G5zysEAABwKgKMs7kAFBDY\/JIAAAAAKACchAsDwAAAgQFtAQCCAoBOSzbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzuS5pPWWQ2PySaAScSB7fQAAAgQFtAQCCAoD4v5SATks2wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pRAAD4G50OsEAABwKgKMs7kAFBDY\/JJuaT1l4AQAOUahAAAAQEICgE5LNwD4v5S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1186{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2930{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347038,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AOVAAD4GxPOsEAABwKgKMs6uAFDsGC1LWgXt84AQATud7gAAAQEICgE5LN0D4v5T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0918{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1499347039587,"flow_last_seen":1499347039587,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52978,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LfVAAD4Gl9usEAABwKgKMs7yAFDXyAPWAAAAAKACchCExgAAAgQFtAQCCAoBOS4jAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzvKH9tkB18gD16AScSAhMAAAAgQFtAQCCAoD4v+aATkuIwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LfZAAD4Gl+KsEAABwKgKMs7yAFDXyAPXh\/bZAoAQAOXANwAAAQEICgE5LiMD4v+a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rP9AAD4GGNmsEAABwKgKMs68AFB+VYXfYjYTFIARAOWIfgAAAQEICgE5LisD4vqa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07LVAAEAG1yLAqAoyrBAAAQBQzrxiNhMUflWF4IARAOODeAAAAQEICgPi\/6EBOS4r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347039,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rQBAAD4GGNisEAABwKgKMs68AFB+VYXgYjYTFYAQAOWDdgAAAQEICgE5LisD4v+h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347041,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OHBAAD4GjWisEAABwKgKMs7KAFDI6hIL0h2HoYARAOXKBQAAAQEICgE5MB8D4vvb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347041,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hjdAAEAGPaHAqAoyrBAAAQBQzsrSHYehyOoSDIARAOPESwAAAQEICgPjAZYBOTAf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347041,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OHFAAD4GjWesEAABwKgKMs7KAFDI6hIM0h2HooAQAOXESQAAAQEICgE5MB8D4wGW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1499347042150,"flow_last_seen":1499347042150,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53004,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347042,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8q1JAAD4GGn6sEAABwKgKMs8MAFB23Zv2AAAAAKACchBK9gAAAgQFtAQCCAoBOTCkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347042,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzwwb3aSHdt2b96AScSCFcgAAAgQFtAQCCAoD4wIbATkwpAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347042,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q1NAAD4GGoWsEAABwKgKMs8MAFB23Zv3G92kiIAQAOUkegAAAQEICgE5MKQD4wIb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1499347043416,"flow_last_seen":1499347043416,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53018,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347043,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8okxAAD4GI4SsEAABwKgKMs8aAFDJVZOtAAAAAKACchD\/ewAAAgQFtAQCCAoBOTHhAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347043,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzxosqk4zyVWTrqAScSB+QwAAAgQFtAQCCAoD4wNXATkx4QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347043,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ok1AAD4GI4usEAABwKgKMs8aAFDJVZOuLKpONIAQAOUdSwAAAQEICgE5MeED4wNX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347043,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pVAAD4G50KsEAABwKgKMs7kAFBDY\/JJuaT1l4ARAOUVTAAAAQEICgE5MhMD4v5S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347043,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09h1AAEAGzbrAqAoyrBAAAQBQzuS5pPWXQ2PySoARAOMQFQAAAQEICgPjA4oBOTIT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347043,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pZAAD4G50GsEAABwKgKMs7kAFBDY\/JKuaT1mIAQAOUQEwAAAQEICgE5MhMD4wOK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347044,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LfdAAD4Gl+GsEAABwKgKMs7yAFDXyAPXh\/bZAoARAOW7TAAAAQEICgE5Mw0D4v+a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347044,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03YZAAEAG5lHAqAoyrBAAAQBQzvKH9tkC18gD2IARAOO2YwAAAQEICgPjBIQBOTMN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347044,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LfhAAD4Gl+CsEAABwKgKMs7yAFDXyAPYh\/bZA4AQAOW2YQAAAQEICgE5Mw0D4wSE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1499347044676,"flow_last_seen":1499347044676,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53032,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347044,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QP5AAD4GhNKsEAABwKgKMs8oAFCcEnPlAAAAAKACchBLPwAAAgQFtAQCCAoBOTMbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347044,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQzyh2l2DwnBJz5qAScSBsIQAAAgQFtAQCCAoD4wSSATkzGwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347044,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QP9AAD4GhNmsEAABwKgKMs8oAFCcEnPmdpdg8YAQAOULKAAAAQEICgE5MxwD4wSS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1499347047249,"flow_last_seen":1499347047249,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53058,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347047,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rOxAAD4GGOSsEAABwKgKMs9CAFBNBJlzAAAAAKACchByIQAAAgQFtAQCCAoBOTWfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347047,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz0I8cGwCTQSZdKAScSC\/lQAAAgQFtAQCCAoD4wcVATk1nwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347047,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rO1AAD4GGOusEAABwKgKMs9CAFBNBJl0PHBsA4AQAOVenQAAAQEICgE5NZ8D4wcV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347047,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q1RAAD4GGoSsEAABwKgKMs8MAFB23Zv3G92kiIARAOUfIgAAAQEICgE5NfsD4wIb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347047,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0o\/pAAEAGH97AqAoyrBAAAQBQzwwb3aSIdt2b+IARAOMZzAAAAQEICgPjB3IBOTX7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347047,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q1VAAD4GGoOsEAABwKgKMs8MAFB23Zv4G92kiYAQAOUZygAAAQEICgE5NfsD4wdy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":9,"flow_packet_id":13,"flow_first_seen":1499346976677,"flow_last_seen":1499346982914,"flow_tot_l4_data_len":7284,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5362,"flow_avg_l4_data_len":560,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52300,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":10,"flow_packet_id":10,"flow_first_seen":1499346976999,"flow_last_seen":1499346982906,"flow_tot_l4_data_len":2401,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1739,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52318,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1499346976999,"flow_last_seen":1499346982607,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52320,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1499346976999,"flow_last_seen":1499346982607,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52320,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1499347048548,"flow_last_seen":1499347048548,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53072,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347048,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rW1AAD4GGGOsEAABwKgKMs9QAFDoOZuOAAAAAKACchDTfgAAAgQFtAQCCAoBOTbjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347048,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz1DxNtWr6Dmbj6AScSABPgAAAgQFtAQCCAoD4whaATk24wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347048,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rW5AAD4GGGqsEAABwKgKMs9QAFDoOZuP8TbVrIAQAOWgRAAAAQEICgE5NuQD4wha","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347048,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ok5AAD4GI4qsEAABwKgKMs8aAFDJVZOuLKpONIARAOUYNgAAAQEICgE5NvUD4wNX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347048,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RlhAAEAGfYDAqAoyrBAAAQBQzxosqk40yVWTr4ARAOMTIgAAAQEICgPjCGwBOTb1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347048,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ok9AAD4GI4msEAABwKgKMs8aAFDJVZOvLKpONYAQAOUTIAAAAQEICgE5NvUD4whs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347050,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QQBAAD4GhNisEAABwKgKMs8oAFCcEnPmdpdg8YARAOUFWQAAAQEICgE5OOoD4wSS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347050,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0apBAAEAGWUjAqAoyrBAAAQBQzyh2l2DxnBJz54ARAOP\/igAAAQEICgPjCmEBOTjq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347050,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QQFAAD4GhNesEAABwKgKMs8oAFCcEnPndpdg8oAQAOX\/iAAAAQEICgE5OOoD4wph","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1499347051144,"flow_last_seen":1499347051144,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53098,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347051,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82StAAD4G7KSsEAABwKgKMs9qAFDGDOBHAAAAAKACchCuTwAAAgQFtAQCCAoBOTlsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347051,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz2oBc4vXxgzgSKAScSATHgAAAgQFtAQCCAoD4wrjATk5bAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347051,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02SxAAD4G7KusEAABwKgKMs9qAFDGDOBIAXOL2IAQAOWyJAAAAQEICgE5OW0D4wrj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1499347052434,"flow_last_seen":1499347052434,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53112,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347052,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8athAAD4GWvisEAABwKgKMs94AFBfSFB3AAAAAKACchCjkwAAAgQFtAQCCAoBOTqvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347052,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz3hoydAQX0hQeKAScSBbjwAAAgQFtAQCCAoD4wwmATk6rwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347052,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0atlAAD4GWv+sEAABwKgKMs94AFBfSFB4aMnQEYAQAOX6lgAAAQEICgE5Oq8D4wwm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347052,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rO5AAD4GGOqsEAABwKgKMs9CAFBNBJl0PHBsA4ARAOVZXQAAAQEICgE5Ot4D4wcV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347052,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YFZAAEAGY4LAqAoyrBAAAQBQz0I8cGwDTQSZdYARAONUHgAAAQEICgPjDFUBOTre","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347052,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rO9AAD4GGOmsEAABwKgKMs9CAFBNBJl1PHBsBIAQAOVUHAAAAQEICgE5Ot4D4wxV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347053,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rW9AAD4GGGmsEAABwKgKMs9QAFDoOZuP8TbVrIARAOWbTwAAAQEICgE5O9gD4wha","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347053,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02ONAAEAG6vTAqAoyrBAAAQBQz1DxNtWs6DmbkIARAOOWWwAAAQEICgPjDU8BOTvY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347053,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rXBAAD4GGGisEAABwKgKMs9QAFDoOZuQ8TbVrYAQAOWWWQAAAQEICgE5O9gD4w1P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1499347053735,"flow_last_seen":1499347053735,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53126,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347053,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TcZAAD4GeAqsEAABwKgKMs+GAFAPQXYyAAAAAKACchDMjAAAAgQFtAQCCAoBOTv0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347053,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz4b8rqheD0F2M6AScSAXEAAAAgQFtAQCCAoD4w1rATk79AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347053,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TcdAAD4GeBGsEAABwKgKMs+GAFAPQXYz\/K6oX4AQAOW2FgAAAQEICgE5O\/UD4w1r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1499347056332,"flow_last_seen":1499347056332,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53152,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347056,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GMxAAD4GrQSsEAABwKgKMs+gAFAIRCayAAAAAKACchAgZgAAAgQFtAQCCAoBOT5+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347056,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz6DSyc0OCEQms6AScSBtlQAAAgQFtAQCCAoD4w\/0ATk+fgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347056,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GM1AAD4GrQusEAABwKgKMs+gAFAIRCaz0snND4AQAOUMnQAAAQEICgE5Pn4D4w\/0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347056,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02S1AAD4G7KqsEAABwKgKMs9qAFDGDOBIAXOL2IARAOWsygAAAQEICgE5PsYD4wrj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347056,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m+VAAEAGJ\/PAqAoyrBAAAQBQz2oBc4vYxgzgSYARAOOncQAAAQEICgPjED0BOT7G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347056,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02S5AAD4G7KmsEAABwKgKMs9qAFDGDOBJAXOL2YAQAOWnbgAAAQEICgE5PscD4xA9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347057,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0atpAAD4GWv6sEAABwKgKMs94AFBfSFB4aMnQEYARAOX1hAAAAQEICgE5P8AD4wwm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347057,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wSZAAEAGArLAqAoyrBAAAQBQz3hoydARX0hQeYARAOPwdAAAAQEICgPjETcBOT\/A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347057,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0attAAD4GWv2sEAABwKgKMs94AFBfSFB5aMnQEoAQAOXwcQAAAQEICgE5P8ED4xE3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1499347057628,"flow_last_seen":1499347057628,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53166,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347057,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yDFAAD4G\/Z6sEAABwKgKMs+uAFAuuffwAAAAAKACchAnYQAAAgQFtAQCCAoBOT\/BAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347057,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz662huYkLrn38aAScSB2eQAAAgQFtAQCCAoD4xE4ATk\/wQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347057,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yDJAAD4G\/aWsEAABwKgKMs+uAFAuuffxtobmJYAQAOUVgAAAAQEICgE5P8ID4xE4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1499346983175,"flow_last_seen":1499346988608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1499346983175,"flow_last_seen":1499346988608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52386,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1499346984469,"flow_last_seen":1499346989608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1499346984469,"flow_last_seen":1499346989608,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52400,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":14,"flow_packet_id":7,"flow_first_seen":1499346985762,"flow_last_seen":1499346991610,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52414,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":14,"flow_packet_id":7,"flow_first_seen":1499346985762,"flow_last_seen":1499346991610,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52414,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1499346988319,"flow_last_seen":1499346993610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1499346988319,"flow_last_seen":1499346993610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52440,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":16,"flow_packet_id":6,"flow_first_seen":1499346989580,"flow_last_seen":1499346994610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":16,"flow_packet_id":6,"flow_first_seen":1499346989580,"flow_last_seen":1499346994610,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52454,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1499346992144,"flow_last_seen":1499346997611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52480,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1499346992144,"flow_last_seen":1499346997611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52480,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1499346993434,"flow_last_seen":1499346998611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52494,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1499346993434,"flow_last_seen":1499346998611,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52494,"dst_port":80,"l4_proto":"tcp"}
+0404{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347059,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TchAAD4GeBCsEAABwKgKMs+GAFAPQXYz\/K6oX4ARAOWwVQAAAQEICgE5QbUD4w1r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347059,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u3RAAEAGCGTAqAoyrBAAAQBQz4b8rqhfD0F2NIARAOOqlgAAAQEICgPjEysBOUG1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347059,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TclAAD4GeA+sEAABwKgKMs+GAFAPQXY0\/K6oYIAQAOWqlAAAAQEICgE5QbUD4xMr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1499347060176,"flow_last_seen":1499347060176,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53192,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347060,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TeFAAD4Gd++sEAABwKgKMs\/IAFAgqg\/fAAAAAKACchAa6wAAAgQFtAQCCAoBOUI+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347060,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz8g7I8+hIKoP4KAScSD5bAAAAgQFtAQCCAoD4xO1ATlCPgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347060,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TeJAAD4Gd\/asEAABwKgKMs\/IAFAgqg\/gOyPPooAQAOWYcwAAAQEICgE5Qj8D4xO1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1499347061452,"flow_last_seen":1499347061452,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53206,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347061,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89\/VAAD4GzdqsEAABwKgKMs\/WAFCNxbSIAAAAAKACchAH2QAAAgQFtAQCCAoBOUN9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347061,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz9aoZTRrjcW0iaAScSATEAAAAgQFtAQCCAoD4xT0ATlDfQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347061,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/ZAAD4GzeGsEAABwKgKMs\/WAFCNxbSJqGU0bIAQAOWyFgAAAQEICgE5Q34D4xT0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347061,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GM5AAD4GrQqsEAABwKgKMs+gAFAIRCaz0snND4ARAOUHcQAAAQEICgE5Q6kD4w\/0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347061,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02BBAAEAG68fAqAoyrBAAAQBQz6DSyc0PCEQmtIARAOMCRwAAAQEICgPjFR8BOUOp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347061,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GM9AAD4GrQmsEAABwKgKMs+gAFAIRCa00snNEIAQAOUCRQAAAQEICgE5Q6kD4xUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1499347062740,"flow_last_seen":1499347062740,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53220,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347062,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/9NAAD4GxfysEAABwKgKMs\/kAFBs1rtsAAAAAKACchAglAAAAgQFtAQCCAoBOUS\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347062,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz+TKmKvobNa7baAScSCQ2AAAAgQFtAQCCAoD4xY2ATlEvwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347062,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/9RAAD4GxgOsEAABwKgKMs\/kAFBs1rttypir6YAQAOUv3wAAAQEICgE5RMAD4xY2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347063,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yDNAAD4G\/aSsEAABwKgKMs+uAFAuuffxtobmJYARAOUPpAAAAQEICgE5RZ0D4xE4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347063,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08TFAAEAG0qbAqAoyrBAAAQBQz662huYlLrn38oARAOMJyQAAAQEICgPjFxQBOUWd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347063,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yDRAAD4G\/aOsEAABwKgKMs+uAFAuuffytobmJoAQAOUJxwAAAQEICgE5RZ0D4xcU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1499347065288,"flow_last_seen":1499347065288,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53246,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347065,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8t0lAAD4GDoesEAABwKgKMs\/+AFBdePB1AAAAAKACchD4UQAAAgQFtAQCCAoBOUc8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347065,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQz\/602CZHXXjwdqAScSABewAAAgQFtAQCCAoD4xizATlHPAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347065,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t0pAAD4GDo6sEAABwKgKMs\/+AFBdePB2tNgmSIAQAOWggQAAAQEICgE5Rz0D4xiz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347065,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TeNAAD4Gd\/WsEAABwKgKMs\/IAFAgqg\/gOyPPooARAOWTIAAAAQEICgE5R5ED4xO1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347065,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01qpAAEAG7S3AqAoyrBAAAQBQz8g7I8+iIKoP4YARAOONzgAAAQEICgPjGQgBOUeR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347065,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TeRAAD4Gd\/SsEAABwKgKMs\/IAFAgqg\/hOyPPo4AQAOWNzAAAAQEICgE5R5ED4xkI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1499347066560,"flow_last_seen":1499347066560,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53260,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347066,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zkNAAD4G94ysEAABwKgKMtAMAFBP5YY5AAAAAKACchBu1QAAAgQFtAQCCAoBOUh6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347066,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Ax\/i5rPT+WGOqAScSA3hQAAAgQFtAQCCAoD4xnxATlIegEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347066,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zkRAAD4G95OsEAABwKgKMtAMAFBP5YY6f4ua0IAQAOXWiwAAAQEICgE5SHsD4xnx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347066,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/dAAD4GzeCsEAABwKgKMs\/WAFCNxbSJqGU0bIARAOWtCAAAAQEICgE5SIsD4xT0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347066,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Lm5AAEAGlWrAqAoyrBAAAQBQz9aoZTRsjcW0ioARAOOn+wAAAQEICgPjGgIBOUiL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347066,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/hAAD4Gzd+sEAABwKgKMs\/WAFCNxbSKqGU0bYAQAOWn+AAAAQEICgE5SIwD4xoC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347068,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/9VAAD4GxgKsEAABwKgKMs\/kAFBs1rttypir6YARAOUqHgAAAQEICgE5SoAD4xY2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347068,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sB9AAEAGE7nAqAoyrBAAAQBQz+TKmKvpbNa7boARAOMkXwAAAQEICgPjG\/YBOUqA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347068,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/9ZAAD4GxgGsEAABwKgKMs\/kAFBs1rtuypir6oAQAOUkXQAAAQEICgE5SoAD4xv2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1499346994731,"flow_last_seen":1499347000612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1499346994731,"flow_last_seen":1499347000612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52508,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1499346997314,"flow_last_seen":1499347002612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52534,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1499346997314,"flow_last_seen":1499347002612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52534,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1499346998578,"flow_last_seen":1499347003612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52548,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1499346998578,"flow_last_seen":1499347003612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52548,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1499347001111,"flow_last_seen":1499347006612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52574,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1499347001111,"flow_last_seen":1499347006612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52574,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":23,"flow_packet_id":6,"flow_first_seen":1499347002399,"flow_last_seen":1499347007612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52588,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":23,"flow_packet_id":6,"flow_first_seen":1499347002399,"flow_last_seen":1499347007612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52588,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1499347069146,"flow_last_seen":1499347069146,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53286,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347069,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8xkJAAD4G\/42sEAABwKgKMtAmAFBk4I1DAAAAAKACchBQLwAAAgQFtAQCCAoBOUsBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347069,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0CYp21tPZOCNRKAScSCriAAAAgQFtAQCCAoD4xx4ATlLAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347069,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xkNAAD4G\/5SsEAABwKgKMtAmAFBk4I1EKdtbUIAQAOVKkAAAAQEICgE5SwED4xx4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1499347070422,"flow_last_seen":1499347070422,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53300,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347070,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83flAAD4G59asEAABwKgKMtA0AFCnyZG5AAAAAKACchAHgwAAAgQFtAQCCAoBOUxAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347070,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0DQuPoKZp8mRuqAScSA18AAAAgQFtAQCCAoD4x23ATlMQAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":61,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347070,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03fpAAD4G592sEAABwKgKMtA0AFCnyZG6Lj6CmoAQAOXU9wAAAQEICgE5TEAD4x23","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347070,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t0tAAD4GDo2sEAABwKgKMs\/+AFBdePB2tNgmSIARAOWbSQAAAQEICgE5THQD4xiz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347070,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0O6NAAEAGiDXAqAoyrBAAAQBQz\/602CZIXXjwd4ARAOOWEgAAAQEICgPjHesBOUx0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347070,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t0xAAD4GDoysEAABwKgKMs\/+AFBdePB3tNgmSYAQAOWWEAAAAQEICgE5THQD4x3r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347071,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zkVAAD4G95KsEAABwKgKMtAMAFBP5YY6f4ua0IARAOXRlwAAAQEICgE5TW4D4xnx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347071,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hDVAAEAGP6PAqAoyrBAAAQBQ0Ax\/i5rQT+WGO4ARAOPMpAAAAQEICgPjHuUBOU1u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347071,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zkZAAD4G95GsEAABwKgKMtAMAFBP5YY7f4ua0YAQAOXMogAAAQEICgE5TW4D4x7l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1499347071685,"flow_last_seen":1499347071685,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53314,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347071,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gQZAAD4GRMqsEAABwKgKMtBCAFDUJMx6AAAAAKACchCfHAAAAgQFtAQCCAoBOU18AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347071,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0EJ9MmhQ1CTMe6AScSCXogAAAgQFtAQCCAoD4x7zATlNfAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347071,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gQdAAD4GRNGsEAABwKgKMtBCAFDUJMx7fTJoUYAQAOU2qgAAAQEICgE5TXwD4x7z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1499347074268,"flow_last_seen":1499347074268,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53340,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347074,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NBxAAD4GkbSsEAABwKgKMtBcAFD4fmQdAAAAAKACchDggAAAAgQFtAQCCAoBOVABAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347074,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Fw80cpV+H5kHqAScSC03QAAAgQFtAQCCAoD4yF4ATlQAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":63,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347074,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NB1AAD4GkbusEAABwKgKMtBcAFD4fmQePNHKVoAQAOVT5AAAAQEICgE5UAID4yF4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347074,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xkRAAD4G\/5OsEAABwKgKMtAmAFBk4I1EKdtbUIARAOVFNAAAAQEICgE5UFwD4xx4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347074,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eoNAAEAGSVXAqAoyrBAAAQBQ0CYp21tQZOCNRYARAOM\/2gAAAQEICgPjIdMBOVBc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347074,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0xkVAAD4G\/5KsEAABwKgKMtAmAFBk4I1FKdtbUYAQAOU\/2AAAAQEICgE5UFwD4yHT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1499347075596,"flow_last_seen":1499347075596,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53354,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347075,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KAdAAD4GncmsEAABwKgKMtBqAFA4KXlJAAAAAKACchCKTwAAAgQFtAQCCAoBOVFOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347075,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0GplJM47OCl5SqAScSAxJwAAAgQFtAQCCAoD4yLEATlRTgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":64,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347075,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KAhAAD4GndCsEAABwKgKMtBqAFA4KXlKZSTOPIAQAOXQLgAAAQEICgE5UU4D4yLE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":61,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347075,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03ftAAD4G59ysEAABwKgKMtA0AFCnyZG6Lj6CmoARAOXP4AAAAQEICgE5UVYD4x23","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":61,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347075,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oFdAAEAGI4HAqAoyrBAAAQBQ0DQuPoKap8mRu4ARAOPKywAAAQEICgPjIs0BOVFW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":61,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347075,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03fxAAD4G59usEAABwKgKMtA0AFCnyZG7Lj6Cm4AQAOXKyQAAAQEICgE5UVYD4yLN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347077,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gQhAAD4GRNCsEAABwKgKMtBCAFDUJMx7fTJoUYARAOUw2wAAAQEICgE5U0oD4x7z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347077,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TJBAAEAGd0jAqAoyrBAAAQBQ0EJ9MmhR1CTMfIARAOMrDgAAAQEICgPjJMEBOVNK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347077,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gQlAAD4GRM+sEAABwKgKMtBCAFDUJMx8fTJoUoAQAOUrDAAAAQEICgE5U0oD4yTB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1499347078168,"flow_last_seen":1499347078168,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53380,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347078,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VtlAAD4GbvesEAABwKgKMtCEAFCbYgUIAAAAAKACchCYugAAAgQFtAQCCAoBOVPRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347078,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0IRJPKyYm2IFCaAScSB6mgAAAgQFtAQCCAoD4yVHATlT0QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":65,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347078,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VtpAAD4Gbv6sEAABwKgKMtCEAFCbYgUJSTysmYAQAOUZogAAAQEICgE5U9ED4yVH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1499347003695,"flow_last_seen":1499347009612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1499347003695,"flow_last_seen":1499347009612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52602,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1499347006233,"flow_last_seen":1499347011612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52628,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1499347006233,"flow_last_seen":1499347011612,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52628,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1499347007496,"flow_last_seen":1499347012613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52642,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1499347007496,"flow_last_seen":1499347012613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52642,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1499347010080,"flow_last_seen":1499347015613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52668,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1499347010080,"flow_last_seen":1499347015613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52668,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1499347011349,"flow_last_seen":1499347016613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52682,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1499347011349,"flow_last_seen":1499347016613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52682,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1499347012617,"flow_last_seen":1499347018613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52696,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1499347012617,"flow_last_seen":1499347018613,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52696,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1499347079449,"flow_last_seen":1499347079449,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53394,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347079,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81tZAAD4G7vmsEAABwKgKMtCSAFDwQYPHAAAAAKACchDDzQAAAgQFtAQCCAoBOVURAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347079,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0JKY6hHr8EGDyKAScSDvawAAAgQFtAQCCAoD4yaIATlVEQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347079,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01tdAAD4G7wCsEAABwKgKMtCSAFDwQYPImOoR7IAQAOWOcwAAAQEICgE5VRED4yaI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":63,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347079,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NB5AAD4GkbqsEAABwKgKMtBcAFD4fmQePNHKVoARAOVOpwAAAQEICgE5VT4D4yF4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":63,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347079,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07ONAAEAG1vTAqAoyrBAAAQBQ0Fw80cpW+H5kH4ARAONJawAAAQEICgPjJrUBOVU+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":63,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347079,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NB9AAD4GkbmsEAABwKgKMtBcAFD4fmQfPNHKV4AQAOVJaAAAAQEICgE5VT8D4ya1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":64,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347080,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KAlAAD4Gnc+sEAABwKgKMtBqAFA4KXlKZSTOPIARAOXLQgAAAQEICgE5VjkD4yLE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":64,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347080,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA06ZNAAEAG2kTAqAoyrBAAAQBQ0GplJM48OCl5S4ARAOPGWAAAAQEICgPjJ68BOVY5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":64,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347080,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KApAAD4Gnc6sEAABwKgKMtBqAFA4KXlLZSTOPYAQAOXGVgAAAQEICgE5VjkD4yev","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1499347080793,"flow_last_seen":1499347080793,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53408,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347080,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8x4ZAAD4G\/kmsEAABwKgKMtCgAFDV9pHnAAAAAKACchDOmgAAAgQFtAQCCAoBOVZhAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347080,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0KAcF4FK1faR6KAScSAGXQAAAgQFtAQCCAoD4yfYATlWYQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":67,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347080,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x4dAAD4G\/lCsEAABwKgKMtCgAFDV9pHoHBeBS4AQAOWlZAAAAQEICgE5VmED4yfY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1499347082084,"flow_last_seen":1499347082084,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53422,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347082,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rj9AAD4GF5GsEAABwKgKMtCuAFC6z\/mcAAAAAKACchCAvAAAAgQFtAQCCAoBOVejAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":68,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347082,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0K6mztSPus\/5naAScSDZPwAAAgQFtAQCCAoD4ykaATlXowEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":68,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347082,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rkBAAD4GF5isEAABwKgKMtCuAFC6z\/mdps7UkIAQAOV4RgAAAQEICgE5V6QD4yka","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1499347083358,"flow_last_seen":1499347083358,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53436,"dst_port":80,"l4_proto":"tcp"}
+0415{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347083,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81M5AAD4G8QGsEAABwKgKMtC8AFCsV4wsAAAAAKACchD7VwAAAgQFtAQCCAoBOVjiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347083,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0LzW0\/50rFeMLaAScSD4sQAAAgQFtAQCCAoD4ypZATlY4gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":69,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347083,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01M9AAD4G8QisEAABwKgKMtC8AFCsV4wt1tP+dYAQAOWXuQAAAQEICgE5WOID4ypZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":65,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347083,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VttAAD4Gbv2sEAABwKgKMtCEAFCbYgUJSTysmYARAOUUSwAAAQEICgE5WScD4yVH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":65,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347083,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hgRAAEAGPdTAqAoyrBAAAQBQ0IRJPKyZm2IFCoARAOMO9gAAAQEICgPjKp0BOVkn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":65,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347083,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VtxAAD4GbvysEAABwKgKMtCEAFCbYgUKSTysmoAQAOUO9AAAAQEICgE5WScD4yqd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347084,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01thAAD4G7v+sEAABwKgKMtCSAFDwQYPImOoR7IARAOWJYgAAAQEICgE5WiED4yaI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":66,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347084,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OnRAAEAGiWTAqAoyrBAAAQBQ0JKY6hHs8EGDyYARAOOEUwAAAQEICgPjK5gBOVoh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":66,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347084,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01tlAAD4G7v6sEAABwKgKMtCSAFDwQYPJmOoR7YAQAOWEUQAAAQEICgE5WiED4yuY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1499347084644,"flow_last_seen":1499347084644,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53450,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347084,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8o6RAAD4GIiysEAABwKgKMtDKAFAgx\/mHAAAAAKACchAYPgAAAgQFtAQCCAoBOVojAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347084,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Mrcl6UQIMf5iKAScSBn9wAAAgQFtAQCCAoD4yuaATlaIwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347084,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0o6VAAD4GIjOsEAABwKgKMtDKAFAgx\/mI3JelEYAQAOUG\/gAAAQEICgE5WiQD4yua","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":67,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347086,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x4hAAD4G\/k+sEAABwKgKMtCgAFDV9pHoHBeBS4ARAOWfrwAAAQEICgE5XBUD4yfY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":67,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347086,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rMdAAEAGFxHAqAoyrBAAAQBQ0KAcF4FL1faR6YARAOOZ\/AAAAQEICgPjLYwBOVwV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":67,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347086,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x4lAAD4G\/k6sEAABwKgKMtCgAFDV9pHpHBeBTIAQAOWZ+gAAAQEICgE5XBUD4y2M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1499347087256,"flow_last_seen":1499347087256,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53476,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347087,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8beFAAD4GV++sEAABwKgKMtDkAFAnsDFRAAAAAKACchDW5AAAAgQFtAQCCAoBOVywAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347087,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0OTlcRoYJ7AxUqAScSCmLwAAAgQFtAQCCAoD4y4nATlcsAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":71,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347087,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0beJAAD4GV\/asEAABwKgKMtDkAFAnsDFS5XEaGYAQAOVFNgAAAQEICgE5XLED4y4n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":68,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347087,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rkFAAD4GF5esEAABwKgKMtCuAFC6z\/mdps7UkIARAOVy2gAAAQEICgE5XQ8D4yka","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":68,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347087,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+hZAAEAGycHAqAoyrBAAAQBQ0K6mztSQus\/5noARAONtbwAAAQEICgPjLoYBOV0P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":68,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347087,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rkJAAD4GF5asEAABwKgKMtCuAFC6z\/meps7UkYAQAOVtbAAAAQEICgE5XRAD4y6G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1499347088552,"flow_last_seen":1499347088552,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53490,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347088,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA892FAAD4Gzm6sEAABwKgKMtDyAFAECKqUAAAAAKACchB\/9gAAAgQFtAQCCAoBOV31AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347088,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0PJdbGlkBAiqlaAScSCGtgAAAgQFtAQCCAoD4y9rATld9QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":72,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347088,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA092JAAD4GznWsEAABwKgKMtDyAFAECKqVXWxpZYAQAOUlvgAAAQEICgE5XfUD4y9r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":69,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347088,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01NBAAD4G8QesEAABwKgKMtC8AFCsV4wt1tP+dYARAOWSkAAAAQEICgE5XgoD4ypZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":69,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347088,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00fVAAEAG8eLAqAoyrBAAAQBQ0LzW0\/51rFeMLoARAOONagAAAQEICgPjL4ABOV4K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":69,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347088,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01NFAAD4G8QasEAABwKgKMtC8AFCsV4wu1tP+doAQAOWNaAAAAQEICgE5XgoD4y+A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1499347015165,"flow_last_seen":1499347020614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52722,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1499347015165,"flow_last_seen":1499347020614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52722,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":31,"flow_packet_id":6,"flow_first_seen":1499347016455,"flow_last_seen":1499347021614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52736,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":31,"flow_packet_id":6,"flow_first_seen":1499347016455,"flow_last_seen":1499347021614,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52736,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":32,"flow_packet_id":6,"flow_first_seen":1499347017745,"flow_last_seen":1499347023616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52750,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":32,"flow_packet_id":6,"flow_first_seen":1499347017745,"flow_last_seen":1499347023616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52750,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":33,"flow_packet_id":6,"flow_first_seen":1499347020329,"flow_last_seen":1499347025616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52776,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":33,"flow_packet_id":6,"flow_first_seen":1499347020329,"flow_last_seen":1499347025616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52776,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":34,"flow_packet_id":6,"flow_first_seen":1499347021621,"flow_last_seen":1499347027616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52790,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":34,"flow_packet_id":6,"flow_first_seen":1499347021621,"flow_last_seen":1499347027616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52790,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347090,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0o6ZAAD4GIjKsEAABwKgKMtDKAFAgx\/mI3JelEYARAOUBIwAAAQEICgE5X\/4D4yua","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":70,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347090,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lGVAAEAGL3PAqAoyrBAAAQBQ0Mrcl6URIMf5iYAQAOP7SQAAAQEICgPjMXUBOV\/+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":70,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347090,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lGZAAEAGL3LAqAoyrBAAAQBQ0Mrcl6URIMf5iYARAOP7SAAAAQEICgPjMXUBOV\/+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":70,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347090,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XcZAAD4GaBKsEAABwKgKMtDKAFAgx\/mJ3JelEoAQAOX7RgAAAQEICgE5X\/4D4zF1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1499347091102,"flow_last_seen":1499347091102,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53516,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347091,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uhVAAD4GC7usEAABwKgKMtEMAFDkONpnAAAAAKACchBtWwAAAgQFtAQCCAoBOWByAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347091,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0QySpl9e5DjaaKAScSBGaQAAAgQFtAQCCAoD4zHpATlgcgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347091,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uhZAAD4GC8KsEAABwKgKMtEMAFDkONpokqZfX4AQAOXlcAAAAQEICgE5YHID4zHp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1499347092374,"flow_last_seen":1499347092374,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53530,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347092,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rL1AAD4GGROsEAABwKgKMtEaAFBpN80NAAAAAKACchD0agAAAgQFtAQCCAoBOWGwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347092,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0RpaHI+7aTfNDqAScSDUZwAAAgQFtAQCCAoD4zMnATlhsAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347092,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rL5AAD4GGRqsEAABwKgKMtEaAFBpN80OWhyPvIAQAOVzbwAAAQEICgE5YbAD4zMn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":71,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347092,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0beNAAD4GV\/WsEAABwKgKMtDkAFAnsDFS5XEaGYARAOU\/9AAAAQEICgE5YfID4y4n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":71,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347092,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KXBAAEAGmmjAqAoyrBAAAQBQ0OTlcRoZJ7AxU4ARAOM6swAAAQEICgPjM2kBOWHy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":71,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347092,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0beRAAD4GV\/SsEAABwKgKMtDkAFAnsDFT5XEaGoAQAOU6sQAAAQEICgE5YfID4zNp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":72,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347093,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA092NAAD4GznSsEAABwKgKMtDyAFAECKqVXWxpZYARAOUgxgAAAQEICgE5YuwD4y9r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":72,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347093,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XQZAAEAGZtLAqAoyrBAAAQBQ0PJdbGllBAiqloARAOMbzwAAAQEICgPjNGMBOWLs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":72,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347093,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA092RAAD4GznOsEAABwKgKMtDyAFAECKqWXWxpZoAQAOUbzQAAAQEICgE5YuwD4zRj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1499347093662,"flow_last_seen":1499347093662,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53544,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347093,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ku9AAD4GmuGsEAABwKgKMtEoAFAtsEgdAAAAAKACchCzkgAAAgQFtAQCCAoBOWLyAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347093,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0Shd8PQZLbBIHqAScSAqGwAAAgQFtAQCCAoD4zRpATli8gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":75,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347093,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvBAAD4GmuisEAABwKgKMtEoAFAtsEgeXfD0GoAQAOXJIgAAAQEICgE5YvID4zRp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1499347096201,"flow_last_seen":1499347096201,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53570,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347096,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZsxAAD4GXwSsEAABwKgKMtFCAFCngwOhAAAAAKACchB7pgAAAgQFtAQCCAoBOWVtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347096,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0UJnxk6+p4MDoqAScSCLOQAAAgQFtAQCCAoD4zbkATllbQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":76,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347096,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zs1AAD4GXwusEAABwKgKMtFCAFCngwOiZ8ZOv4AQAOUqQQAAAQEICgE5ZW0D4zbk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347096,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uhdAAD4GC8GsEAABwKgKMtEMAFDkONpokqZfX4ARAOXgBwAAAQEICgE5ZdoD4zHp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347096,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aA5AAEAGW8rAqAoyrBAAAQBQ0QySpl9f5DjaaYARAOPaoAAAAQEICgPjN1EBOWXa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":73,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347096,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uhhAAD4GC8CsEAABwKgKMtEMAFDkONppkqZfYIAQAOXangAAAQEICgE5ZdoD4zdR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1499347097460,"flow_last_seen":1499347097460,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53584,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347097,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83YdAAD4G6EisEAABwKgKMtFQAFAbC7sgAAAAAKACchBPVwAAAgQFtAQCCAoBOWanAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347097,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0VBz69jzGwu7IaAScSDHVQAAAgQFtAQCCAoD4zgeATlmpwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":77,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347097,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03YhAAD4G6E+sEAABwKgKMtFQAFAbC7shc+vY9IAQAOVmXAAAAQEICgE5ZqgD4zge","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347097,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rL9AAD4GGRmsEAABwKgKMtEaAFBpN80OWhyPvIARAOVuSgAAAQEICgE5ZtQD4zMn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":74,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347097,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0t\/dAAEAGC+HAqAoyrBAAAQBQ0RpaHI+8aTfND4ARAONpJwAAAQEICgPjOEsBOWbU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":74,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347097,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rMBAAD4GGRisEAABwKgKMtEaAFBpN80PWhyPvYAQAOVpJQAAAQEICgE5ZtQD4zhL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1499347098746,"flow_last_seen":1499347098746,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53598,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347098,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gixAAD4GQ6SsEAABwKgKMtFeAFA\/7+XFAAAAAKACchD+fQAAAgQFtAQCCAoBOWfpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":78,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347098,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0V6c5l18P+\/lxqAScSDHtgAAAgQFtAQCCAoD4zlgATln6QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":78,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347098,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gi1AAD4GQ6usEAABwKgKMtFeAFA\/7+XGnOZdfYAQAOVmvgAAAQEICgE5Z+kD4zlg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1499347024196,"flow_last_seen":1499347029616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1499347024196,"flow_last_seen":1499347029616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52816,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1499347025509,"flow_last_seen":1499347030616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52830,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1499347025509,"flow_last_seen":1499347030616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52830,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1499347028086,"flow_last_seen":1499347033617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52856,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1499347028086,"flow_last_seen":1499347033617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52856,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":38,"flow_packet_id":6,"flow_first_seen":1499347029372,"flow_last_seen":1499347034616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52870,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":38,"flow_packet_id":6,"flow_first_seen":1499347029372,"flow_last_seen":1499347034616,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52870,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":39,"flow_packet_id":6,"flow_first_seen":1499347030639,"flow_last_seen":1499347036617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52884,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":39,"flow_packet_id":6,"flow_first_seen":1499347030639,"flow_last_seen":1499347036617,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52884,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":41,"flow_packet_id":6,"flow_first_seen":1499347034467,"flow_last_seen":1499347039618,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52924,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":41,"flow_packet_id":6,"flow_first_seen":1499347034467,"flow_last_seen":1499347039618,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52924,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":8,"flow_packet_id":315,"flow_first_seen":1499346976603,"flow_last_seen":1499347036773,"flow_tot_l4_data_len":241656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4376,"flow_avg_l4_data_len":767,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52298,"dst_port":80,"l4_proto":"tcp"}
+0404{"flow_id":75,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347099,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvFAAD4GmuesEAABwKgKMtEoAFAtsEgeXfD0GoARAOXDSwAAAQEICgE5aMgD4zRp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":75,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347099,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ziVAAEAG9bLAqAoyrBAAAQBQ0Shd8PQaLbBIH4ARAOO9dgAAAQEICgPjOj8BOWjI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":75,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347099,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvJAAD4GmuasEAABwKgKMtEoAFAtsEgfXfD0G4AQAOW9cwAAAQEICgE5aMkD4zo\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1499347101314,"flow_last_seen":1499347101314,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53624,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347101,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HlBAAD4Gp4CsEAABwKgKMtF4AFDPTHQ7AAAAAKACchDeDgAAAgQFtAQCCAoBOWprAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347101,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0XjCGItuz0x0PKAScSBRoQAAAgQFtAQCCAoD4zviATlqawEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":79,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347101,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HlFAAD4Gp4esEAABwKgKMtF4AFDPTHQ8whiLb4AQAOXwqAAAAQEICgE5amsD4zvi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":76,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347101,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zs5AAD4GXwqsEAABwKgKMtFCAFCngwOiZ8ZOv4ARAOUk8QAAAQEICgE5arwD4zbk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":76,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347101,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0coxAAEAGUUzAqAoyrBAAAQBQ0UJnxk6\/p4MDo4ARAOMfowAAAQEICgPjPDMBOWq8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":76,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347101,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Zs9AAD4GXwmsEAABwKgKMtFCAFCngwOjZ8ZOwIAQAOUfoAAAAQEICgE5ar0D4zwz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0918{"flow_id":77,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":77,"flow_packet_id":4,"flow_first_seen":1499347097460,"flow_last_seen":1499347102358,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53584,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0404{"flow_id":77,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05BNAAEAG38TAqAoyrBAAAQBQ0VBz69j0Gwu8oIAQAOtbRgAAAQEICgPjPOcBOWtw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2799{"flow_id":77,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":1837,"pkt":"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","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":77,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03YpAAD4G6E2sEAABwKgKMtFQAFAbC7ygc+vf34AQAQBUQgAAAQEICgE5a3ID4zzp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1499347102609,"flow_last_seen":1499347102609,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53638,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ux5AAD4GCrKsEAABwKgKMtGGAFBKzdCxAAAAAKACchAExgAAAgQFtAQCCAoBOWuvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0YYGn50FSs3QsqAScSAg+AAAAgQFtAQCCAoD4z0lATlrrwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":80,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ux9AAD4GCrmsEAABwKgKMtGGAFBKzdCyBp+dBoAQAOW\/\/wAAAQEICgE5a68D4z0l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1186{"flow_id":77,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2938{"flow_id":77,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":1933,"pkt":"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","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":77,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347102,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03YxAAD4G6EusEAABwKgKMtFQAFAbC77pc+vnKoAQAR1KFQAAAQEICgE5a7AD4z0n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":77,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347103,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGz3Y1AAD4G5susEAABwKgKMtFQAFAbC77pc+vnKoAYAR34GAAAAQEICgE5bLQD4z0nR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":77,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347103,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":77,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347103,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03Y5AAD4G6EmsEAABwKgKMtFQAFAbC8Boc+vuFIAQATk\/hgAAAQEICgE5bLUD4z4s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":77,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347103,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2944{"flow_id":77,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347103,"pkt_len":1934,"pkt":"AMGxFOsxABm5CmnxCABFAAeA5BpAAEAG2HHAqAoyrBAAAQBQ0VBz6+4UGwvCsYAYAQd+XgAAAQEICgPjPmkBOWzySFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE4OjIzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNw0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Y\/0\/bOBT\/GaT9Dz6fdMBJxPR2Nw3WZoKWjk6wMVrGOJ0UuYnbGpw4s50W\/vt7dpI2fC1ZkVBx7Pfl8\/yen9\/zm\/Xmb52v7cHl6SGamFig0\/OD414b4W1CLt62CekMOujH0eDkGDW8HdQ3ioeGkMMvGOGJMekeIbPZzJu99aQak8EZubFSGpatGG5rx+NFJsL+m\/U3602n5yYWiW49IqOxu7ubs+bka80JoxEM19aaMTMUWZZt9jPj0xZuy8SwxGwPblOGUZh\/tbBhN4ZYER9QOKFKM9M6H3S332NEcplrTcONYP73TCRM0SEX3NzuoTM2Eiw0LEJtJbVGfW4Y6oeKp4YnY7T5o9\/fQnt7qEPjBJW8gqELNkT7aSp4SA2XCdrsfL\/Y30LThtfYQX922JQJmcYA7c8myRUXKARPrpFiooW1uRVMTxgzGBmwpjAi1BqjiWKjFvY8An\/RdEbtLIkpTzy3TB5K47AVpZz\/eEzHjMDUXUkjOrVknluYy9DO2iqEKzql+SxGWoV3gFxp9\/8UFHhXGvtNklMWniOF6+x4KKNbFAqqrddlzHDu0ohPEY9a2PoOLGKq8HplyQqpzK81eTx+gMQZqYmQY+mlyRgjKiAQljhqYTdgBXUPVNtNDsBxWUX7g7UgpVHEotwgIMhEaaddPRAyvLZbIziSSQiqr1t4xpNIzjxYcjhaG7kl3gYuWYGB3nGXh\/0j2LYmobDLgvvrLxHIEzh9WWintJdO0mfk3yfFfq8yU08tHLgsXaJvToP9vh0iAscPJlHnoKKMZMJfYUOnlfPNITyGKjOMPIPqcQbsH9j\/qCtVWNMD9wWyGxbWAeDosd+WcUyTCPWSK+Y8shqKUKtRHRSOHlD0z7qrKR5x4n1M4ai2OHBmEVsSJS\/ix36Xw+Hu2Rm98t5kqZA0qrM7BUcB49x9regfmhq4uWq5qGBx55aFmWKovX86aB\/trwZF\/xS8Dg5HD2f62\/FrBauVGAzhcqvllArXPTRo88BOb62GasbodcBrQSpZsH8BI9Rn2kYr6nVqptf7cm+0DmoByRmwD\/UM1CpfT1bcCitOVfRrlldRL8KhShzz4usV0Oi6u6FLFH0j1V0IK15B7ixCdbn0OlyQYd\/WjxAf+VS97QB+nozkEnUVKuyfHp3C6RjJeoroUGZmiZo5Dfb37fD1ttUWekvVL4iwf+zG9wAUFdud2u\/pQtCWsItCEDoZu1rotmvVQrA5afxKdwElc6MomCvCp\/MKNghlxAKqGC3q55FUMUpoDNU68EPZ61JcC\/+OEXRLEwnYPx0Oitq0mRYWX0yo2dDoVmbKMX8sK+skzarFPy5E2995fVsl0tkw5kA2pSKDz37+WWgjqZ83FcSizPGmivlHTAiJilbDh8pfS8HAw+PNjW8X3U+nO7udT2f9w3dn7we9wb\/\/dA\/O9086lyednS8Hl4O\/33Ua+z8+n5x\/\/nz59fJ9d2PrQ1VCJMPMdlpeKOU1Z1sf5i0JwFHMuWbh4ebkL\/8EDrwLfxXT\/LKCSbtWxAdE4yKubPOpi4ZVzqhOXc8KIcpubJgR59ltDZ4N5p4NnGehHaNqDJ0ohluJJtfY\/3VZ8yiujQ+4A6hSDFPBIbR1YG7Qhv7KBP2i9ayJ8Xl5y3GyxJvxa56yiFMn2n5VLdel5U9je7mM5\/EUZoZjPk\/GoYzt9bA9oj899yTxKIgXML5Ic46TCqZMw0l4Vt0D6qqOIrvloV52rkMF\/W7+W6awJ1JekXdCwaian+bH8qK+1YbFgb1LHs0Pw8wY22cX+eE7ZzMExz+d5+xUplkalGQyaedZf\/HosAcU5+kmeuK2n4LEYAISbTh+BEiupvijdERLyNkG2sI+WgqrD8kwZK8LTDuZS6HZ3aSCjyFvCzaC\/NlksX+umbJ5d69J4AvRKOZJ4UL4LosDdGxflwoakLiggFu91+kXKxHX9vqISi8+6dCRlObOY0vqr\/LalT52rVYTMLEXZ\/4u6F7s\/P8BEiLDw5IUAAA=","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":78,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347104,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gi5AAD4GQ6qsEAABwKgKMtFeAFA\/7+XGnOZdfYARAOVg+wAAAQEICgE5basD4zlg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":78,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347104,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YlxAAEAGYXzAqAoyrBAAAQBQ0V6c5l19P+\/lx4ARAONbOwAAAQEICgPjPyEBOW2r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":78,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347104,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gi9AAD4GQ6msEAABwKgKMtFeAFA\/7+XHnOZdfoAQAOVbOQAAAQEICgE5basD4z8h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1499347105154,"flow_last_seen":1499347105154,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53664,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347105,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eX9AAD4GTFGsEAABwKgKMtGgAFC6fhdUAAAAAKACchBL3AAAAgQFtAQCCAoBOW4rAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":81,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347105,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0aA4hAGdun4XVaAScSDPFAAAAgQFtAQCCAoD4z+iATluKwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":81,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347105,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eYBAAD4GTFisEAABwKgKMtGgAFC6fhdVOIQBnoAQAOVuHAAAAQEICgE5bisD4z+i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1499347106438,"flow_last_seen":1499347106438,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53678,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347106,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kWRAAD4GNGysEAABwKgKMtGuAFDha\/4IAAAAAKACchA86wAAAgQFtAQCCAoBOW9sAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347106,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0a4RPd924Wv+CaAScSAIUAAAAgQFtAQCCAoD40DjATlvbAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":82,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347106,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kWVAAD4GNHOsEAABwKgKMtGuAFDha\/4JET3fd4AQAOWnVwAAAQEICgE5b2wD40Dj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":79,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347106,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HlJAAD4Gp4asEAABwKgKMtF4AFDPTHQ8whiLb4ARAOXrcwAAAQEICgE5b58D4zvi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":79,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347106,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ynpAAEAG+V3AqAoyrBAAAQBQ0XjCGItvz0x0PYARAOPmQQAAAQEICgPjQRUBOW+f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":79,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347106,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HlNAAD4Gp4WsEAABwKgKMtF4AFDPTHQ9whiLcIAQAOXmPwAAAQEICgE5b58D40EV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":80,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347107,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uyBAAD4GCrisEAABwKgKMtGGAFBKzdCyBp+dBoARAOW7FAAAAQEICgE5cJkD4z0l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":80,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347107,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03wlAAEAG5M7AqAoyrBAAAQBQ0YYGn50GSs3Qs4ARAOO2KwAAAQEICgPjQg8BOXCZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":80,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347107,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uyFAAD4GCresEAABwKgKMtGGAFBKzdCzBp+dB4AQAOW2KQAAAQEICgE5cJkD40IP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1499347107719,"flow_last_seen":1499347107719,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53692,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347107,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GMdAAD4GrQmsEAABwKgKMtG8AFANSWhrAAAAAKACchClXQAAAgQFtAQCCAoBOXCsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347107,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0byrN2AMDUlobKAScSBU8gAAAgQFtAQCCAoD40IjATlwrAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":83,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347107,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GMhAAD4GrRCsEAABwKgKMtG8AFANSWhsqzdgDYAQAOXz+AAAAQEICgE5cK0D40Ij","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":42,"flow_packet_id":6,"flow_first_seen":1499347035750,"flow_last_seen":1499347041619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52938,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":42,"flow_packet_id":6,"flow_first_seen":1499347035750,"flow_last_seen":1499347041619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52938,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":43,"flow_packet_id":6,"flow_first_seen":1499347038276,"flow_last_seen":1499347043619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52964,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":43,"flow_packet_id":6,"flow_first_seen":1499347038276,"flow_last_seen":1499347043619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52964,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1499347039587,"flow_last_seen":1499347044619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52978,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1499347039587,"flow_last_seen":1499347044619,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52978,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1499347042150,"flow_last_seen":1499347047620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53004,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1499347042150,"flow_last_seen":1499347047620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53004,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":46,"flow_packet_id":6,"flow_first_seen":1499347043416,"flow_last_seen":1499347048620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53018,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":46,"flow_packet_id":6,"flow_first_seen":1499347043416,"flow_last_seen":1499347048620,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53018,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1499347110266,"flow_last_seen":1499347110266,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53718,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347110,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8u39AAD4GClGsEAABwKgKMtHWAFDeH8hWAAAAAKACchByBAAAAgQFtAQCCAoBOXMpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347110,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0dbJG1vv3h\/IV6AScSAFVQAAAgQFtAQCCAoD40SgATlzKQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":84,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347110,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u4BAAD4GClisEAABwKgKMtHWAFDeH8hXyRtb8IAQAOWkXAAAAQEICgE5cykD40Sg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":81,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347110,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eYFAAD4GTFesEAABwKgKMtGgAFC6fhdVOIQBnoARAOVovwAAAQEICgE5c4cD4z+i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":81,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347110,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RWNAAEAGfnXAqAoyrBAAAQBQ0aA4hAGeun4XVoARAONjZQAAAQEICgPjRP0BOXOH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":81,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347110,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eYJAAD4GTFasEAABwKgKMtGgAFC6fhdWOIQBn4AQAOVjYwAAAQEICgE5c4cD40T9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1499347111565,"flow_last_seen":1499347111565,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53732,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347111,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ioRAAD4GO0ysEAABwKgKMtHkAFDzev7qAAAAAKACchAkwgAAAgQFtAQCCAoBOXRuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":85,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347111,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0eR9BdLY83r+66AScSCL+wAAAgQFtAQCCAoD40XkATl0bgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":85,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347111,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ioVAAD4GO1OsEAABwKgKMtHkAFDzev7rfQXS2YAQAOUrAwAAAQEICgE5dG4D40Xk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":82,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347111,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kWZAAD4GNHKsEAABwKgKMtGuAFDha\/4JET3fd4ARAOWiQQAAAQEICgE5dIED40Dj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":82,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347111,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0moBAAEAGKVjAqAoyrBAAAQBQ0a4RPd934Wv+CoARAOOdLQAAAQEICgPjRfgBOXSB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":82,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347111,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kWdAAD4GNHGsEAABwKgKMtGuAFDha\/4KET3feIAQAOWdKwAAAQEICgE5dIED40X4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":83,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347113,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GMlAAD4GrQ+sEAABwKgKMtG8AFANSWhsqzdgDYARAOXuLwAAAQEICgE5dnUD40Ij","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":83,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347113,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J+FAAEAGm\/fAqAoyrBAAAQBQ0byrN2ANDUlobYARAOPoZwAAAQEICgPjR+wBOXZ1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":83,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347113,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GMpAAD4GrQ6sEAABwKgKMtG8AFANSWhtqzdgDoAQAOXoZQAAAQEICgE5dnUD40fs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1499347114111,"flow_last_seen":1499347114111,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53758,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347114,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8emxAAD4GS2SsEAABwKgKMtH+AFCQhwyGAAAAAKACchB3hAAAAgQFtAQCCAoBOXbqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347114,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0f6FLaNRkIcMh6AScSADoAAAAgQFtAQCCAoD40hhATl26gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347114,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0em1AAD4GS2usEAABwKgKMtH+AFCQhwyHhS2jUoAQAOWipgAAAQEICgE5dusD40hh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1499347115408,"flow_last_seen":1499347115408,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53772,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347115,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8N6NAAD4Gji2sEAABwKgKMtIMAFCkuE+MAAAAAKACchAe+gAAAgQFtAQCCAoBOXgvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":87,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347115,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0gwQkJx6pLhPjaAScSAlRgAAAgQFtAQCCAoD40mlATl4LwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":87,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347115,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N6RAAD4GjjSsEAABwKgKMtIMAFCkuE+NEJCce4AQAOXETQAAAQEICgE5eC8D40ml","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":84,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347115,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u4FAAD4GClesEAABwKgKMtHWAFDeH8hXyRtb8IARAOWfGwAAAQEICgE5eGkD40Sg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":84,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347115,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EhBAAEAGscjAqAoyrBAAAQBQ0dbJG1vw3h\/IWIARAOOZ3AAAAQEICgPjSeABOXhp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":84,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347115,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u4JAAD4GClasEAABwKgKMtHWAFDeH8hYyRtb8YAQAOWZ2gAAAQEICgE5eGkD40ng","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":85,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347116,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ioZAAD4GO1KsEAABwKgKMtHkAFDzev7rfQXS2YARAOUmDQAAAQEICgE5eWMD40Xk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":85,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347116,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mANAAEAGK9XAqAoyrBAAAQBQ0eR9BdLZ83r+7IARAOMhGAAAAQEICgPjStoBOXlj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":85,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347116,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iodAAD4GO1GsEAABwKgKMtHkAFDzev7sfQXS2oAQAOUhFgAAAQEICgE5eWMD40ra","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1499347116705,"flow_last_seen":1499347116705,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53786,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347116,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8FEVAAD4GsYusEAABwKgKMtIaAFCixG02AAAAAKACchAB8gAAAgQFtAQCCAoBOXlzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":88,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347116,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0hqTGb4kosRtN6AScSBixgAAAgQFtAQCCAoD40rpATl5cwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":88,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347116,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FEZAAD4GsZKsEAABwKgKMtIaAFCixG03kxm+JYAQAOUBzgAAAQEICgE5eXMD40rp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1499347119336,"flow_last_seen":1499347119336,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53812,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347119,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AVBAAD4GxICsEAABwKgKMtI0AFAiVX1VAAAAAKACchBvlgAAAgQFtAQCCAoBOXwFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":89,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347119,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0jRzeBsiIlV9VqAScSCQfAAAAgQFtAQCCAoD4017ATl8BQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":89,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347119,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AVFAAD4GxIesEAABwKgKMtI0AFAiVX1Wc3gbI4AQAOUvhAAAAQEICgE5fAUD4017","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347119,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0em5AAD4GS2qsEAABwKgKMtH+AFCQhwyHhS2jUoARAOWdPwAAAQEICgE5fFED40hh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":86,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347119,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07ppAAEAG1T3AqAoyrBAAAQBQ0f6FLaNSkIcMiIARAOOX2QAAAQEICgPjTcgBOXxR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":86,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347119,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0em9AAD4GS2msEAABwKgKMtH+AFCQhwyIhS2jU4AQAOWX1wAAAQEICgE5fFED403I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":47,"flow_packet_id":6,"flow_first_seen":1499347044676,"flow_last_seen":1499347050622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53032,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":47,"flow_packet_id":6,"flow_first_seen":1499347044676,"flow_last_seen":1499347050622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53032,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1499347047249,"flow_last_seen":1499347052623,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53058,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1499347047249,"flow_last_seen":1499347052623,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53058,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":49,"flow_packet_id":6,"flow_first_seen":1499347048548,"flow_last_seen":1499347053624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53072,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":49,"flow_packet_id":6,"flow_first_seen":1499347048548,"flow_last_seen":1499347053624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53072,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1499347051144,"flow_last_seen":1499347056624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53098,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1499347051144,"flow_last_seen":1499347056624,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53098,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":51,"flow_packet_id":6,"flow_first_seen":1499347052434,"flow_last_seen":1499347057625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53112,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":51,"flow_packet_id":6,"flow_first_seen":1499347052434,"flow_last_seen":1499347057625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53112,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":52,"flow_packet_id":6,"flow_first_seen":1499347053735,"flow_last_seen":1499347059625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53126,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":52,"flow_packet_id":6,"flow_first_seen":1499347053735,"flow_last_seen":1499347059625,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53126,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1499347120603,"flow_last_seen":1499347120603,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53826,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347120,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA815JAAD4G7j2sEAABwKgKMtJCAFDFAarTAAAAAKACchCeIQAAAgQFtAQCCAoBOX1BAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347120,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0kIa0KsLxQGq1KAScSCGiQAAAgQFtAQCCAoD4064ATl9QQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":90,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347120,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA015NAAD4G7kSsEAABwKgKMtJCAFDFAarUGtCrDIAQAOUlkQAAAQEICgE5fUED4064","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":87,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347120,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N6VAAD4GjjOsEAABwKgKMtIMAFCkuE+NEJCce4ARAOW\/MAAAAQEICgE5fUsD40ml","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":87,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347120,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00rlAAEAG8R7AqAoyrBAAAQBQ0gwQkJx7pLhPjoARAOO6FAAAAQEICgPjTsIBOX1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":87,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347120,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N6ZAAD4GjjKsEAABwKgKMtIMAFCkuE+OEJCcfIAQAOW6EQAAAQEICgE5fUwD407C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":88,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347122,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FEdAAD4GsZGsEAABwKgKMtIaAFCixG03kxm+JYARAOX8AAAAAQEICgE5fz8D40rp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":88,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347122,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07pNAAEAG1UTAqAoyrBAAAQBQ0hqTGb4losRtOIARAOP2NAAAAQEICgPjULYBOX8\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":88,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347122,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FEhAAD4GsZCsEAABwKgKMtIaAFCixG04kxm+JoAQAOX2MQAAAQEICgE5f0AD41C2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1499347123174,"flow_last_seen":1499347123174,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53852,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347123,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j6NAAD4GNi2sEAABwKgKMtJcAFBy9vBnAAAAAKACchCn+wAAAgQFtAQCCAoBOX\/EAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":91,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347123,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0lx1HkCocvbwaKAScSCd9QAAAgQFtAQCCAoD41E7ATl\/xAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":91,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347123,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j6RAAD4GNjSsEAABwKgKMtJcAFBy9vBodR5AqYAQAOU8\/QAAAQEICgE5f8QD41E7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1499347124454,"flow_last_seen":1499347124454,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53866,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347124,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NtZAAD4GjvqsEAABwKgKMtJqAFC8CbfSAAAAAKACchCWLwAAAgQFtAQCCAoBOYEEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":92,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347124,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0moH9pX9vAm306AScSCivAAAAgQFtAQCCAoD41J7ATmBBAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":92,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347124,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NtdAAD4GjwGsEAABwKgKMtJqAFC8CbfTB\/aV\/oAQAOVBxAAAAQEICgE5gQQD41J7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":89,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347124,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AVJAAD4GxIasEAABwKgKMtI0AFAiVX1Wc3gbI4ARAOUqVAAAAQEICgE5gTQD4017","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":89,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347124,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SYlAAEAGek\/AqAoyrBAAAQBQ0jRzeBsjIlV9V4ARAOMlJgAAAQEICgPjUqoBOYE0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":89,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347124,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AVNAAD4GxIWsEAABwKgKMtI0AFAiVX1Xc3gbJIAQAOUlJAAAAQEICgE5gTQD41Kq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":90,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347125,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA015RAAD4G7kOsEAABwKgKMtJCAFDFAarUGtCrDIARAOUgowAAAQEICgE5gi4D4064","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":90,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347125,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+KhAAEAGyy\/AqAoyrBAAAQBQ0kIa0KsMxQGq1YARAOMbuAAAAQEICgPjU6QBOYIu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":90,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347125,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA015VAAD4G7kKsEAABwKgKMtJCAFDFAarVGtCrDYAQAOUbtgAAAQEICgE5gi4D41Ok","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1499347125743,"flow_last_seen":1499347125743,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53880,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347125,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IcxAAD4GpASsEAABwKgKMtJ4AFAiLqOKAAAAAKACchBDAwAAAgQFtAQCCAoBOYJGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":93,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347125,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0niyGNhRIi6ji6AScSBh1wAAAgQFtAQCCAoD41O9ATmCRgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":93,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347125,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ic1AAD4GpAusEAABwKgKMtJ4AFAiLqOLshjYUoAQAOUA3gAAAQEICgE5gkcD41O9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1499347128311,"flow_last_seen":1499347128311,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53906,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347128,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83+lAAD4G5easEAABwKgKMtKSAFBV0VshAAAAAKACchBVLQAAAgQFtAQCCAoBOYTIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":94,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347128,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0pKrZqcYVdFbIqAScSCpagAAAgQFtAQCCAoD41Y\/ATmEyAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":94,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347128,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03+pAAD4G5e2sEAABwKgKMtKSAFBV0Vsiq2anGYAQAOVIcQAAAQEICgE5hMkD41Y\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":91,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347128,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j6VAAD4GNjOsEAABwKgKMtJcAFBy9vBodR5AqYARAOU3pAAAAQEICgE5hRwD41E7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":91,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347128,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FjtAAEAGrZ3AqAoyrBAAAQBQ0lx1HkCpcvbwaYARAOMyTgAAAQEICgPjVpIBOYUc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":91,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347128,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j6ZAAD4GNjKsEAABwKgKMtJcAFBy9vBpdR5AqoAQAOUyTAAAAQEICgE5hRwD41aS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1499347129584,"flow_last_seen":1499347129584,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53920,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347129,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rtVAAD4GFvusEAABwKgKMtKgAFDfKCjSAAAAAKACchD81wAAAgQFtAQCCAoBOYYHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":95,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347129,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0qA\/BA1B3ygo06AScSBWEQAAAgQFtAQCCAoD41d9ATmGBwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":95,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347129,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rtZAAD4GFwKsEAABwKgKMtKgAFDfKCjTPwQNQoAQAOX1GAAAAQEICgE5hgcD41d9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":92,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347129,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NthAAD4GjwCsEAABwKgKMtJqAFC8CbfTB\/aV\/oARAOU8sAAAAQEICgE5hhcD41J7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":92,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347129,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wnNAAEAGAWXAqAoyrBAAAQBQ0moH9pX+vAm31IARAOM3nwAAAQEICgPjV40BOYYX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":92,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347129,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NtlAAD4Gjv+sEAABwKgKMtJqAFC8CbfUB\/aV\/4AQAOU3nQAAAQEICgE5hhcD41eN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":53,"flow_packet_id":6,"flow_first_seen":1499347056332,"flow_last_seen":1499347061626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53152,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":53,"flow_packet_id":6,"flow_first_seen":1499347056332,"flow_last_seen":1499347061626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53152,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1499347057628,"flow_last_seen":1499347063626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53166,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1499347057628,"flow_last_seen":1499347063626,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53166,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":55,"flow_packet_id":6,"flow_first_seen":1499347060176,"flow_last_seen":1499347065627,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53192,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":55,"flow_packet_id":6,"flow_first_seen":1499347060176,"flow_last_seen":1499347065627,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53192,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1499347061452,"flow_last_seen":1499347066629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53206,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1499347061452,"flow_last_seen":1499347066629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53206,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":57,"flow_packet_id":6,"flow_first_seen":1499347062740,"flow_last_seen":1499347068629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":57,"flow_packet_id":6,"flow_first_seen":1499347062740,"flow_last_seen":1499347068629,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53220,"dst_port":80,"l4_proto":"tcp"}
+0404{"flow_id":93,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347131,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ic5AAD4GpAqsEAABwKgKMtJ4AFAiLqOLshjYUoARAOX7GAAAAQEICgE5iAsD41O9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":93,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347131,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gdNAAEAGQgXAqAoyrBAAAQBQ0niyGNhSIi6jjIARAOP1VQAAAQEICgPjWYEBOYgL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":93,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347131,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ic9AAD4GpAmsEAABwKgKMtJ4AFAiLqOMshjYU4AQAOX1UwAAAQEICgE5iAsD41mB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1499347132137,"flow_last_seen":1499347132137,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53946,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347132,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pedAAD4GH+msEAABwKgKMtK6AFAZEC1iAAAAAKACchC7yAAAAgQFtAQCCAoBOYiFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347132,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0rps\/2\/vGRAtY6AScSCB2QAAAgQFtAQCCAoD41n8ATmIhQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":96,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347132,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pehAAD4GH\/CsEAABwKgKMtK6AFAZEC1jbP9v8IAQAOUg4QAAAQEICgE5iIUD41n8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1499347133434,"flow_last_seen":1499347133434,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53960,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347133,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Et1AAD4GsvOsEAABwKgKMtLIAFBRGZsUAAAAAKACchAUuwAAAgQFtAQCCAoBOYnJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":97,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347133,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0sgnZz2uURmbFaAScSBRYQAAAgQFtAQCCAoD41tAATmJyQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":97,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347133,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Et5AAD4GsvqsEAABwKgKMtLIAFBRGZsVJ2c9r4AQAOXwaAAAAQEICgE5ickD41tA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":94,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347133,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03+tAAD4G5eysEAABwKgKMtKSAFBV0Vsiq2anGYARAOVDOgAAAQEICgE5if8D41Y\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":94,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347133,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/GxAAEAGx2vAqAoyrBAAAQBQ0pKrZqcZVdFbI4ARAOM+BQAAAQEICgPjW3UBOYn\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":94,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347133,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03+xAAD4G5eusEAABwKgKMtKSAFBV0Vsjq2anGoAQAOU+AwAAAQEICgE5if8D41t1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":95,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347134,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rtdAAD4GFwGsEAABwKgKMtKgAFDfKCjTPwQNQoARAOXwJQAAAQEICgE5ivkD41d9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":95,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347134,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0US1AAEAGcqvAqAoyrBAAAQBQ0qA\/BA1C3ygo1IARAOPrNAAAAQEICgPjXG8BOYr5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":95,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347134,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rthAAD4GFwCsEAABwKgKMtKgAFDfKCjUPwQNQ4AQAOXrMgAAAQEICgE5ivkD41xv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1499347134702,"flow_last_seen":1499347134702,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53974,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347134,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wYFAAD4GBE+sEAABwKgKMtLWAFCOukqHAAAAAKACchAmXAAAAgQFtAQCCAoBOYsGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347134,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0tYST2RqjrpKiKAScSBQIQAAAgQFtAQCCAoD41x9ATmLBgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":98,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347134,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wYJAAD4GBFasEAABwKgKMtLWAFCOukqIEk9ka4AQAOXvKAAAAQEICgE5iwYD41x9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1499347137239,"flow_last_seen":1499347137239,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54000,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347137,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iNFAAD4GPP+sEAABwKgKMtLwAFB7ggVRAAAAAKACchB8NgAAAgQFtAQCCAoBOY2AAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":99,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347137,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0vDqtMDQe4IFUqAScSButQAAAgQFtAQCCAoD4173ATmNgAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":99,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347137,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iNJAAD4GPQasEAABwKgKMtLwAFB7ggVS6rTA0YAQAOUNvAAAAQEICgE5jYED4173","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":96,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347137,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pelAAD4GH++sEAABwKgKMtK6AFAZEC1jbP9v8IARAOUbfgAAAQEICgE5jecD41n8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":96,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347137,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MK5AAEAGkyrAqAoyrBAAAQBQ0rps\/2\/wGRAtZIARAOMWHQAAAQEICgPjX14BOY3n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":96,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347137,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pepAAD4GH+6sEAABwKgKMtK6AFAZEC1kbP9v8YAQAOUWGwAAAQEICgE5jecD419e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1499347138552,"flow_last_seen":1499347138552,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54014,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347138,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8erdAAD4GSxmsEAABwKgKMtL+AFByz\/R+AAAAAKACchCUZAAAAgQFtAQCCAoBOY7JAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":100,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347138,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0v61vhLmcs\/0f6AScSBofAAAAgQFtAQCCAoD42A\/ATmOyQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":100,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347138,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0erhAAD4GSyCsEAABwKgKMtL+AFByz\/R\/tb4S54AQAOUHhAAAAQEICgE5jskD42A\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":97,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347138,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Et9AAD4GsvmsEAABwKgKMtLIAFBRGZsVJ2c9r4ARAOXrTwAAAQEICgE5juED41tA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":97,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347138,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XfdAAEAGZeHAqAoyrBAAAQBQ0sgnZz2vURmbFoARAOPmOAAAAQEICgPjYFgBOY7h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":97,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347138,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EuBAAD4GsvisEAABwKgKMtLIAFBRGZsWJ2c9sIAQAOXmNgAAAQEICgE5juED42BY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":58,"flow_packet_id":6,"flow_first_seen":1499347065288,"flow_last_seen":1499347070631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53246,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":58,"flow_packet_id":6,"flow_first_seen":1499347065288,"flow_last_seen":1499347070631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53246,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":59,"flow_packet_id":6,"flow_first_seen":1499347066560,"flow_last_seen":1499347071631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53260,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":59,"flow_packet_id":6,"flow_first_seen":1499347066560,"flow_last_seen":1499347071631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53260,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":60,"flow_packet_id":6,"flow_first_seen":1499347069146,"flow_last_seen":1499347074630,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53286,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":60,"flow_packet_id":6,"flow_first_seen":1499347069146,"flow_last_seen":1499347074630,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53286,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":61,"flow_packet_id":6,"flow_first_seen":1499347070422,"flow_last_seen":1499347075631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53300,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":61,"flow_packet_id":6,"flow_first_seen":1499347070422,"flow_last_seen":1499347075631,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53300,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":62,"flow_packet_id":6,"flow_first_seen":1499347071685,"flow_last_seen":1499347077632,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53314,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":62,"flow_packet_id":6,"flow_first_seen":1499347071685,"flow_last_seen":1499347077632,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53314,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":63,"flow_packet_id":6,"flow_first_seen":1499347074268,"flow_last_seen":1499347079633,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53340,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":63,"flow_packet_id":6,"flow_first_seen":1499347074268,"flow_last_seen":1499347079633,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53340,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":64,"flow_packet_id":6,"flow_first_seen":1499347075596,"flow_last_seen":1499347080634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53354,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":64,"flow_packet_id":6,"flow_first_seen":1499347075596,"flow_last_seen":1499347080634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53354,"dst_port":80,"l4_proto":"tcp"}
+0404{"flow_id":98,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347140,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wYNAAD4GBFWsEAABwKgKMtLWAFCOukqIEk9ka4ARAOXpWAAAAQEICgE5kNUD41x9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":98,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347140,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BidAAEAGvbHAqAoyrBAAAQBQ0tYST2RrjrpKiYARAOPjigAAAQEICgPjYkwBOZDV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":98,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347140,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wYRAAD4GBFSsEAABwKgKMtLWAFCOukqJEk9kbIAQAOXjhwAAAQEICgE5kNYD42JM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1499347141111,"flow_last_seen":1499347141111,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54040,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347141,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OEpAAD4GjYasEAABwKgKMtMYAFBIRqkCAAAAAKACchAH0QAAAgQFtAQCCAoBOZFIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347141,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0xgJZZF8SEapA6AScSAHLAAAAgQFtAQCCAoD42K\/ATmRSAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":101,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347141,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OEtAAD4GjY2sEAABwKgKMtMYAFBIRqkDCWWRfYAQAOWmMgAAAQEICgE5kUkD42K\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1499347142412,"flow_last_seen":1499347142412,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54054,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347142,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YBRAAD4GZbysEAABwKgKMtMmAFBNdfKaAAAAAKACchC3tQAAAgQFtAQCCAoBOZKOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347142,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0yYb67mHTXXym6AScSB7OgAAAgQFtAQCCAoD42QEATmSjgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":102,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347142,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YBVAAD4GZcOsEAABwKgKMtMmAFBNdfKbG+u5iIAQAOUaQgAAAQEICgE5ko4D42QE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":99,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347142,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iNNAAD4GPQWsEAABwKgKMtLwAFB7ggVS6rTA0YARAOUIcwAAAQEICgE5kskD4173","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":99,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347142,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pJFAAEAGH0fAqAoyrBAAAQBQ0vDqtMDRe4IFU4ARAOMDKwAAAQEICgPjZEABOZLJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":99,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347142,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iNRAAD4GPQSsEAABwKgKMtLwAFB7ggVT6rTA0oAQAOUDKAAAAQEICgE5ksoD42RA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":100,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347143,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0erlAAD4GSx+sEAABwKgKMtL+AFByz\/R\/tb4S54ARAOUCiAAAAQEICgE5k8QD42A\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":100,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347143,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0d91AAEAGS\/vAqAoyrBAAAQBQ0v61vhLncs\/0gIARAOP9jQAAAQEICgPjZToBOZPE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":100,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347143,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0erpAAD4GSx6sEAABwKgKMtL+AFByz\/SAtb4S6IAQAOX9iwAAAQEICgE5k8QD42U6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1499347143676,"flow_last_seen":1499347143676,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54068,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347143,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8BvpAAD4GvtasEAABwKgKMtM0AFB9ypUwAAAAAKACchDjgAAAAgQFtAQCCAoBOZPKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347143,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0zTpUSjmfcqVMaAScSBpBAAAAgQFtAQCCAoD42VAATmTygEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":103,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347143,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BvtAAD4Gvt2sEAABwKgKMtM0AFB9ypUx6VEo54AQAOUIDAAAAQEICgE5k8oD42VA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1499347146267,"flow_last_seen":1499347146267,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54094,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347146,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87ydAAD4G1qisEAABwKgKMtNOAFAXjXl1AAAAAKACchBi1wAAAgQFtAQCCAoBOZZSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":104,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347146,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ006ckw3VF415dqAScSBNogAAAgQFtAQCCAoD42fIATmWUgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":104,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347146,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07yhAAD4G1q+sEAABwKgKMtNOAFAXjXl2nJMN1oAQAOXsqQAAAQEICgE5llID42fI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":101,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347146,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OExAAD4GjYysEAABwKgKMtMYAFBIRqkDCWWRfYARAOWgyAAAAQEICgE5lrID42K\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":101,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347146,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+VVAAEAGyoLAqAoyrBAAAQBQ0xgJZZF9SEapBIARAOObYAAAAQEICgPjaCgBOZay","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":101,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347146,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OE1AAD4GjYusEAABwKgKMtMYAFBIRqkECWWRfoAQAOWbXgAAAQEICgE5lrID42go","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1499347147523,"flow_last_seen":1499347147523,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54108,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347147,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jHlAAD4GOVesEAABwKgKMtNcAFBPnRvyAAAAAKACchCHAwAAAgQFtAQCCAoBOZeLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":105,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347147,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ01w4IOWQT50b86AScSD9SwAAAgQFtAQCCAoD42kCATmXiwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":105,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347147,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jHpAAD4GOV6sEAABwKgKMtNcAFBPnRvzOCDlkYAQAOWcUgAAAQEICgE5l4wD42kC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":102,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347147,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YBZAAD4GZcKsEAABwKgKMtMmAFBNdfKbG+u5iIARAOUVIwAAAQEICgE5l6wD42QE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":102,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347147,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00KpAAEAG8y3AqAoyrBAAAQBQ0yYb67mITXXynIARAOMQBgAAAQEICgPjaSIBOZes","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":102,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347147,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YBdAAD4GZcGsEAABwKgKMtMmAFBNdfKcG+u5iYAQAOUQBAAAAQEICgE5l6wD42ki","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":103,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347149,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BvxAAD4GvtysEAABwKgKMtM0AFB9ypUx6VEo54ARAOUCNQAAAQEICgE5maAD42VA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":103,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347149,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q\/FAAEAGf+fAqAoyrBAAAQBQ0zTpUSjnfcqVMoARAOP8XwAAAQEICgPjaxYBOZmg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":103,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347149,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Bv1AAD4GvtusEAABwKgKMtM0AFB9ypUy6VEo6IAQAOX8XQAAAQEICgE5maAD42sW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1499347150236,"flow_last_seen":1499347150236,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54134,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347150,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ESlAAD4GtKesEAABwKgKMtN2AFB3vosbAAAAAKACchDs9wAAAgQFtAQCCAoBOZoyAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":106,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347150,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ03aiL1kKd76LHKAScSCDEQAAAgQFtAQCCAoD42uoATmaMgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":106,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347150,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ESpAAD4GtK6sEAABwKgKMtN2AFB3voscoi9ZC4AQAOUiGQAAAQEICgE5mjID42uo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":65,"flow_packet_id":6,"flow_first_seen":1499347078168,"flow_last_seen":1499347083634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53380,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":65,"flow_packet_id":6,"flow_first_seen":1499347078168,"flow_last_seen":1499347083634,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53380,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":66,"flow_packet_id":6,"flow_first_seen":1499347079449,"flow_last_seen":1499347084635,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53394,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":66,"flow_packet_id":6,"flow_first_seen":1499347079449,"flow_last_seen":1499347084635,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53394,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":67,"flow_packet_id":6,"flow_first_seen":1499347080793,"flow_last_seen":1499347086636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53408,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":67,"flow_packet_id":6,"flow_first_seen":1499347080793,"flow_last_seen":1499347086636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53408,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":68,"flow_packet_id":6,"flow_first_seen":1499347082084,"flow_last_seen":1499347087636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53422,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":68,"flow_packet_id":6,"flow_first_seen":1499347082084,"flow_last_seen":1499347087636,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53422,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":69,"flow_packet_id":6,"flow_first_seen":1499347083358,"flow_last_seen":1499347088637,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53436,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":69,"flow_packet_id":6,"flow_first_seen":1499347083358,"flow_last_seen":1499347088637,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53436,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":70,"flow_packet_id":7,"flow_first_seen":1499347084644,"flow_last_seen":1499347090638,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53450,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":70,"flow_packet_id":7,"flow_first_seen":1499347084644,"flow_last_seen":1499347090638,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53450,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1499347151520,"flow_last_seen":1499347151520,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54148,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347151,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82ilAAD4G66asEAABwKgKMtOEAFDVpkFaAAAAAKACchDXgQAAAgQFtAQCCAoBOZtzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347151,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ04RMTDZ61aZBW6AScSDkzQAAAgQFtAQCCAoD42zpATmbcwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":107,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347151,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02ipAAD4G662sEAABwKgKMtOEAFDVpkFbTEw2e4AQAOWD1QAAAQEICgE5m3MD42zp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":104,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347151,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07ylAAD4G1q6sEAABwKgKMtNOAFAXjXl2nJMN1oARAOXnZgAAAQEICgE5m5QD42fI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":104,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347151,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YNxAAEAGYvzAqAoyrBAAAQBQ006ckw3WF415d4ARAOPiJQAAAQEICgPjbQoBOZuU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":104,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347151,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07ypAAD4G1q2sEAABwKgKMtNOAFAXjXl3nJMN14AQAOXiIwAAAQEICgE5m5QD420K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":105,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347152,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jHtAAD4GOV2sEAABwKgKMtNcAFBPnRvzOCDlkYARAOWXTwAAAQEICgE5nI4D42kC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":105,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347152,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i5RAAEAGOETAqAoyrBAAAQBQ01w4IOWRT50b9IARAOOSTQAAAQEICgPjbgUBOZyO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":105,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347152,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jHxAAD4GOVysEAABwKgKMtNcAFBPnRv0OCDlkoAQAOWSSwAAAQEICgE5nI4D424F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1499347152786,"flow_last_seen":1499347152786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54162,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347152,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lJhAAD4GMTisEAABwKgKMtOSAFAXpgg3AAAAAKACchDNWwAAAgQFtAQCCAoBOZyvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":108,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347152,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ05Ji9R5fF6YIOKAScSDa3AAAAgQFtAQCCAoD424mATmcrwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":108,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347152,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lJlAAD4GMT+sEAABwKgKMtOSAFAXpgg4YvUeYIAQAOV55AAAAQEICgE5nK8D424m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1499347155346,"flow_last_seen":1499347155346,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54188,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347155,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8btxAAD4GVvSsEAABwKgKMtOsAFCnAfHzAAAAAKACchBRqQAAAgQFtAQCCAoBOZ8vAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":109,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347155,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ06xcmZfGpwHx9KAScSDpngAAAgQFtAQCCAoD43CmATmfLwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":109,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347155,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bt1AAD4GVvusEAABwKgKMtOsAFCnAfH0XJmXx4AQAOWIpgAAAQEICgE5ny8D43Cm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":106,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347155,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EStAAD4GtK2sEAABwKgKMtN2AFB3voscoi9ZC4ARAOUczgAAAQEICgE5n3wD42uo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":106,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347155,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KfhAAEAGmeDAqAoyrBAAAQBQ03aiL1kLd76LHYARAOMXhAAAAQEICgPjcPMBOZ98","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":106,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347155,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ESxAAD4GtKysEAABwKgKMtN2AFB3vosdoi9ZDIAQAOUXgQAAAQEICgE5n30D43Dz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1499347156630,"flow_last_seen":1499347156630,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54202,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347156,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OChAAD4GjaisEAABwKgKMtO6AFAdhZhYAAAAAKACchAzcgAAAgQFtAQCCAoBOaBwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":110,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347156,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ07o+DQO9HYWYWaAScSB8vAAAAgQFtAQCCAoD43HnATmgcAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":110,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347156,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OClAAD4Gja+sEAABwKgKMtO6AFAdhZhZPg0DvoAQAOUbxAAAAQEICgE5oHAD43Hn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":107,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347156,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02itAAD4G66ysEAABwKgKMtOEAFDVpkFbTEw2e4ARAOV+0QAAAQEICgE5oHYD42zp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":107,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347156,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0R5ZAAEAGfELAqAoyrBAAAQBQ04RMTDZ71aZBXIARAON5zgAAAQEICgPjce0BOaB2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":107,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347156,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02ixAAD4G66usEAABwKgKMtOEAFDVpkFcTEw2fIAQAOV5ywAAAQEICgE5oHcD43Ht","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":108,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347158,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lJpAAD4GMT6sEAABwKgKMtOSAFAXpgg4YvUeYIARAOV0JwAAAQEICgE5omsD424m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":108,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347158,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bYFAAEAGVlfAqAoyrBAAAQBQ05Ji9R5gF6YIOYARAONubQAAAQEICgPjc+EBOaJr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":108,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347158,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lJtAAD4GMT2sEAABwKgKMtOSAFAXpgg5YvUeYYAQAOVuawAAAQEICgE5omsD43Ph","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1499347159323,"flow_last_seen":1499347159323,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54228,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347159,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ly1AAD4GlqOsEAABwKgKMtPUAFBviYw8AAAAAKACchDqzgAAAgQFtAQCCAoBOaMRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347159,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ09Q7Unbob4mMPaAScSDBBwAAAgQFtAQCCAoD43SIATmjEQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":111,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347159,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ly5AAD4GlqqsEAABwKgKMtPUAFBviYw9O1J26YAQAOVgDgAAAQEICgE5oxID43SI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1499347160581,"flow_last_seen":1499347160581,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54242,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347160,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eT9AAD4GTJGsEAABwKgKMtPiAFBG+91zAAAAAKACchDA3AAAAgQFtAQCCAoBOaRMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347160,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0+J0ull0RvvddKAScSB55wAAAgQFtAQCCAoD43XCATmkTAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":112,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347160,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eUBAAD4GTJisEAABwKgKMtPiAFBG+910dLpZdYAQAOUY7wAAAQEICgE5pEwD43XC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":109,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347160,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bt5AAD4GVvqsEAABwKgKMtOsAFCnAfH0XJmXx4ARAOWDdQAAAQEICgE5pF8D43Cm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":109,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347160,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04hJAAEAG4cXAqAoyrBAAAQBQ06xcmZfHpwHx9YARAON+RwAAAQEICgPjddUBOaRf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":109,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347160,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bt9AAD4GVvmsEAABwKgKMtOsAFCnAfH1XJmXyIAQAOV+RQAAAQEICgE5pF8D43XV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":40,"flow_packet_id":310,"flow_first_seen":1499347033203,"flow_last_seen":1499347101320,"flow_tot_l4_data_len":242613,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":52910,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":71,"flow_packet_id":6,"flow_first_seen":1499347087256,"flow_last_seen":1499347092638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53476,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":71,"flow_packet_id":6,"flow_first_seen":1499347087256,"flow_last_seen":1499347092638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53476,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":72,"flow_packet_id":6,"flow_first_seen":1499347088552,"flow_last_seen":1499347093638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53490,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":72,"flow_packet_id":6,"flow_first_seen":1499347088552,"flow_last_seen":1499347093638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53490,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":73,"flow_packet_id":6,"flow_first_seen":1499347091102,"flow_last_seen":1499347096639,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53516,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":73,"flow_packet_id":6,"flow_first_seen":1499347091102,"flow_last_seen":1499347096639,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53516,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":74,"flow_packet_id":6,"flow_first_seen":1499347092374,"flow_last_seen":1499347097640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53530,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":74,"flow_packet_id":6,"flow_first_seen":1499347092374,"flow_last_seen":1499347097640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53530,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":75,"flow_packet_id":6,"flow_first_seen":1499347093662,"flow_last_seen":1499347099640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53544,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":75,"flow_packet_id":6,"flow_first_seen":1499347093662,"flow_last_seen":1499347099640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53544,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":110,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347161,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OCpAAD4Gja6sEAABwKgKMtO6AFAdhZhZPg0DvoARAOUW2gAAAQEICgE5pVkD43Hn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":110,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347161,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dW5AAEAGTmrAqAoyrBAAAQBQ07o+DQO+HYWYWoARAOMR8gAAAQEICgPjdtABOaVZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":110,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347161,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OCtAAD4Gja2sEAABwKgKMtO6AFAdhZhaPg0Dv4AQAOUR8AAAAQEICgE5pVkD43bQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1499347163177,"flow_last_seen":1499347163177,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54268,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347163,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YKVAAD4GZSusEAABwKgKMtP8AFCcucZwAAAAAKACchB\/fgAAAgQFtAQCCAoBOabVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":113,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347163,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ0\/zGVu0LnLnGcaAScSBQzAAAAgQFtAQCCAoD43hLATmm1QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":113,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347163,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKZAAD4GZTKsEAABwKgKMtP8AFCcucZxxlbtDIAQAOXv0wAAAQEICgE5ptUD43hL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1499347164459,"flow_last_seen":1499347164459,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54282,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347164,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yU1AAD4G\/IKsEAABwKgKMtQKAFBoaGFbAAAAAKACchAXlgAAAgQFtAQCCAoBOagWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":114,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347164,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1ArCPOEyaGhhXKAScSD3lQAAAgQFtAQCCAoD43mMATmoFgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":114,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347164,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yU5AAD4G\/ImsEAABwKgKMtQKAFBoaGFcwjzhM4AQAOWWnQAAAQEICgE5qBYD43mM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":111,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347164,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ly9AAD4GlqmsEAABwKgKMtPUAFBviYw9O1J26YARAOVa2AAAAQEICgE5qEcD43SI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":111,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347164,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0D1dAAEAGtIHAqAoyrBAAAQBQ09Q7Unbpb4mMPoARAONVowAAAQEICgPjeb4BOahH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":111,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347164,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LzBAAD4GlqisEAABwKgKMtPUAFBviYw+O1J26oAQAOVVoQAAAQEICgE5qEcD43m+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":112,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347165,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eUFAAD4GTJesEAABwKgKMtPiAFBG+910dLpZdYARAOUT+QAAAQEICgE5qUED43XC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":112,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347165,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0I81AAEAGoAvAqAoyrBAAAQBQ0+J0ull1RvvddYARAOMPBAAAAQEICgPjergBOalB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":112,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347165,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eUJAAD4GTJasEAABwKgKMtPiAFBG+911dLpZdoAQAOUPAgAAAQEICgE5qUED43q4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1499347165741,"flow_last_seen":1499347165741,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54296,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347165,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vRVAAD4GCLusEAABwKgKMtQYAFCo9hRDAAAAAKACchAi0gAAAgQFtAQCCAoBOalWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":115,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347165,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1BjYjd6VqPYURKAScSDt3QAAAgQFtAQCCAoD43rMATmpVgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":115,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347165,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vRZAAD4GCMKsEAABwKgKMtQYAFCo9hRE2I3eloAQAOWM5QAAAQEICgE5qVYD43rM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":113,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347167,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":113,"flow_packet_id":4,"flow_first_seen":1499347163177,"flow_last_seen":1499347167004,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54268,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%270XVM4C1CNSWY8VF443GGZ6W527WBY4H29E2XQNGG2QUPQEKW0U%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0406{"flow_id":113,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347167,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0kQRAAEAGMtTAqAoyrBAAAQBQ0\/zGVu0MnLnIuoAQAOzmCQAAAQEICgPjfAgBOaqS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2932{"flow_id":113,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347167,"pkt_len":1935,"pkt":"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","pkt_caplen":1935,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":113,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347167,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKhAAD4GZTCsEAABwKgKMtP8AFCcuci6xlb0WYAQAQLepAAAAQEICgE5qpMD43wJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":113,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzYKlAAD4GY7CsEAABwKgKMtP8AFCcuci6xlb0WYAYAQKMrAAAAQEICgE5q5MD43wJR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":113,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":113,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKpAAD4GZS6sEAABwKgKMtP8AFCcuco5xlb7Q4AQAR3UHgAAAQEICgE5q5QD430K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1499347168302,"flow_last_seen":1499347168302,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54322,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pdZAAD4GH\/qsEAABwKgKMtQyAFAP+Q4AAAAAAKACchC\/eAAAAgQFtAQCCAoBOavWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":116,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1DJusJVZD\/kOAaAScSA7HQAAAgQFtAQCCAoD431NATmr1gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":116,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pddAAD4GIAGsEAABwKgKMtQyAFAP+Q4BbrCVWoAQAOXaIwAAAQEICgE5q9cD431N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":113,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2926{"flow_id":113,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":113,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347168,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YKxAAD4GZSysEAABwKgKMtP8AFCcucyCxlcCj4AQATvJ4wAAAQEICgE5q9gD431O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":113,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzYK1AAD4GY6ysEAABwKgKMtP8AFCcucyCxlcCj4AYATt38AAAAQEICgE5rNMD431OR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2793{"flow_id":113,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":1836,"pkt":"AMGxFOsxABm5CmnxCABFAAcekQtAAEAGK+PAqAoyrBAAAQBQ0\/zGVwKPnLnOAYAYAQd9\/AAAAQEICgPjfkoBOazTSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjE5OjI5IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1499347169573,"flow_last_seen":1499347169573,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54336,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83TtAAD4G6JSsEAABwKgKMtRAAFDvZ3AvAAAAAKACchB8jgAAAgQFtAQCCAoBOa0UAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":117,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1EA8SVzP72dwMKAScSBh5gAAAgQFtAQCCAoD436LATmtFAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":117,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TxAAD4G6JusEAABwKgKMtRAAFDvZ3AwPElc0IAQAOUA7gAAAQEICgE5rRQD436L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":114,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yU9AAD4G\/IisEAABwKgKMtQKAFBoaGFcwjzhM4ARAOWRiQAAAQEICgE5rSkD43mM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":114,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n5NAAEAGJEXAqAoyrBAAAQBQ1ArCPOEzaGhhXYARAOOMdgAAAQEICgPjfqABOa0p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":114,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347169,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yVBAAD4G\/IesEAABwKgKMtQKAFBoaGFdwjzhNIAQAOWMcwAAAQEICgE5rSoD436g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":76,"flow_packet_id":6,"flow_first_seen":1499347096201,"flow_last_seen":1499347101640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53570,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":76,"flow_packet_id":6,"flow_first_seen":1499347096201,"flow_last_seen":1499347101640,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53570,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":78,"flow_packet_id":6,"flow_first_seen":1499347098746,"flow_last_seen":1499347104641,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":78,"flow_packet_id":6,"flow_first_seen":1499347098746,"flow_last_seen":1499347104641,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53598,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":79,"flow_packet_id":6,"flow_first_seen":1499347101314,"flow_last_seen":1499347106642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":79,"flow_packet_id":6,"flow_first_seen":1499347101314,"flow_last_seen":1499347106642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53624,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":80,"flow_packet_id":6,"flow_first_seen":1499347102609,"flow_last_seen":1499347107642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53638,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":80,"flow_packet_id":6,"flow_first_seen":1499347102609,"flow_last_seen":1499347107642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53638,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":81,"flow_packet_id":6,"flow_first_seen":1499347105154,"flow_last_seen":1499347110642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53664,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":81,"flow_packet_id":6,"flow_first_seen":1499347105154,"flow_last_seen":1499347110642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53664,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":82,"flow_packet_id":6,"flow_first_seen":1499347106438,"flow_last_seen":1499347111642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53678,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":82,"flow_packet_id":6,"flow_first_seen":1499347106438,"flow_last_seen":1499347111642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53678,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":115,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347171,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vRdAAD4GCMGsEAABwKgKMtQYAFCo9hRE2I3eloARAOWHHAAAAQEICgE5rx4D43rM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":115,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347171,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XgJAAEAGZdbAqAoyrBAAAQBQ1BjYjd6WqPYURYARAOOBVQAAAQEICgPjgJQBOa8e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":115,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347171,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vRhAAD4GCMCsEAABwKgKMtQYAFCo9hRF2I3el4AQAOWBUwAAAQEICgE5rx4D44CU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1499347172098,"flow_last_seen":1499347172098,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54362,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347172,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dk5AAD4GT4KsEAABwKgKMtRaAFDNItnFAAAAAKACchAyrAAAAgQFtAQCCAoBOa+LAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":118,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347172,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1FoQ75vBzSLZxqAScSAB9QAAAgQFtAQCCAoD44ECATmviwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":118,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347172,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dk9AAD4GT4msEAABwKgKMtRaAFDNItnGEO+bwoAQAOWg\/AAAAQEICgE5r4sD44EC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1499347173373,"flow_last_seen":1499347173373,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54376,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347173,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XK1AAD4GaSOsEAABwKgKMtRoAFDpcOxnAAAAAKACchACbwAAAgQFtAQCCAoBObDKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":119,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347173,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1GhwCsiK6XDsaKAScSBElAAAAgQFtAQCCAoD44JBATmwygEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":119,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347173,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XK5AAD4GaSqsEAABwKgKMtRoAFDpcOxocArIi4AQAOXjmwAAAQEICgE5sMoD44JB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":116,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347173,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pdhAAD4GIACsEAABwKgKMtQyAFAP+Q4BbrCVWoARAOXU5wAAAQEICgE5sRID431N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":116,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347173,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0F9JAAEAGrAbAqAoyrBAAAQBQ1DJusJVaD\/kOAoARAOPPrQAAAQEICgPjgogBObES","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":116,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347173,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pdlAAD4GH\/+sEAABwKgKMtQyAFAP+Q4CbrCVW4AQAOXPqwAAAQEICgE5sRID44KI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":117,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347174,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03T1AAD4G6JqsEAABwKgKMtRAAFDvZ3AwPElc0IARAOX79AAAAQEICgE5sgwD436L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":117,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347174,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA031JAAEAG5IXAqAoyrBAAAQBQ1EA8SVzQ72dwMYARAOP2\/gAAAQEICgPjg4IBObIM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":117,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347174,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03T5AAD4G6JmsEAABwKgKMtRAAFDvZ3AxPElc0YAQAOX2\/AAAAQEICgE5sgwD44OC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1499347174667,"flow_last_seen":1499347174667,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54390,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347174,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LxxAAD4GlrSsEAABwKgKMtR2AFATHZ0RAAAAAKACchAmyAAAAgQFtAQCCAoBObINAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347174,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1HZkheFBEx2dEqAScSBaeAAAAgQFtAQCCAoD44OEATmyDQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":120,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347174,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lx1AAD4GlrusEAABwKgKMtR2AFATHZ0SZIXhQoAQAOX5fgAAAQEICgE5sg4D44OE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1499347177248,"flow_last_seen":1499347177248,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54416,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347177,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XzZAAD4GZpqsEAABwKgKMtSQAFC5seulAAAAAKACchAu\/wAAAgQFtAQCCAoBObSTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":121,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347177,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1JDtsXHRubHrpqAScSBGbgAAAgQFtAQCCAoD44YJATm0kwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":121,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347177,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XzdAAD4GZqGsEAABwKgKMtSQAFC5seum7bFx0oAQAOXldQAAAQEICgE5tJMD44YJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":118,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347177,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dlBAAD4GT4isEAABwKgKMtRaAFDNItnGEO+bwoARAOWbjAAAAQEICgE5tPoD44EC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":118,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347177,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HbJAAEAGpibAqAoyrBAAAQBQ1FoQ75vCzSLZx4ARAOOWHwAAAQEICgPjhnABObT6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":118,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347177,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dlFAAD4GT4esEAABwKgKMtRaAFDNItnHEO+bw4AQAOWWHQAAAQEICgE5tPoD44Zw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1499347178540,"flow_last_seen":1499347178540,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54430,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347178,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rRdAAD4GGLmsEAABwKgKMtSeAFA54BjBAAAAAKACchCAZAAAAgQFtAQCCAoBObXWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":122,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347178,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1J7RuWV+OeAYwqAScSC+2wAAAgQFtAQCCAoD44dMATm11gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":122,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347178,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRhAAD4GGMCsEAABwKgKMtSeAFA54BjC0bllf4AQAOVd4wAAAQEICgE5tdYD44dM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":119,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347178,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XK9AAD4GaSmsEAABwKgKMtRoAFDpcOxocArIi4ARAOXecAAAAQEICgE5tfQD44JB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":119,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347178,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T+FAAEAGc\/fAqAoyrBAAAQBQ1GhwCsiL6XDsaYARAOPZSAAAAQEICgPjh2oBObX0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":119,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347178,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLBAAD4GaSisEAABwKgKMtRoAFDpcOxpcArIjIAQAOXZRgAAAQEICgE5tfQD44dq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":120,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347180,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lx5AAD4GlrqsEAABwKgKMtR2AFATHZ0SZIXhQoARAOXzowAAAQEICgE5t+gD44OE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":120,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347180,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aBxAAEAGW7zAqAoyrBAAAQBQ1HZkheFCEx2dE4ARAOPtygAAAQEICgPjiV4BObfo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":120,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347180,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lx9AAD4GlrmsEAABwKgKMtR2AFATHZ0TZIXhQ4AQAOXtyAAAAQEICgE5t+gD44le","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1499347181178,"flow_last_seen":1499347181178,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54456,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347181,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iI9AAD4GPUGsEAABwKgKMtS4AFBWujDmAAAAAKACchBIuAAAAgQFtAQCCAoBObhpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":123,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347181,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1LiEJRdhVrow56AScSAgTQAAAgQFtAQCCAoD44ngATm4aQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":123,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347181,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iJBAAD4GPUisEAABwKgKMtS4AFBWujDnhCUXYoAQAOW\/UwAAAQEICgE5uGoD44ng","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":83,"flow_packet_id":6,"flow_first_seen":1499347107719,"flow_last_seen":1499347113642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53692,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":83,"flow_packet_id":6,"flow_first_seen":1499347107719,"flow_last_seen":1499347113642,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53692,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":84,"flow_packet_id":6,"flow_first_seen":1499347110266,"flow_last_seen":1499347115643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53718,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":84,"flow_packet_id":6,"flow_first_seen":1499347110266,"flow_last_seen":1499347115643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53718,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":85,"flow_packet_id":6,"flow_first_seen":1499347111565,"flow_last_seen":1499347116643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53732,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":85,"flow_packet_id":6,"flow_first_seen":1499347111565,"flow_last_seen":1499347116643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53732,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":86,"flow_packet_id":6,"flow_first_seen":1499347114111,"flow_last_seen":1499347119643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53758,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":86,"flow_packet_id":6,"flow_first_seen":1499347114111,"flow_last_seen":1499347119643,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53758,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":87,"flow_packet_id":6,"flow_first_seen":1499347115408,"flow_last_seen":1499347120644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":87,"flow_packet_id":6,"flow_first_seen":1499347115408,"flow_last_seen":1499347120644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53772,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1499347182435,"flow_last_seen":1499347182435,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54470,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347182,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83IhAAD4G6UesEAABwKgKMtTGAFDgpGUsAAAAAKACchCJPgAAAgQFtAQCCAoBObmkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":124,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347182,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1MbnFi1c4KRlLaAScSDmrAAAAgQFtAQCCAoD44saATm5pAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":124,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347182,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03IlAAD4G6U6sEAABwKgKMtTGAFDgpGUt5xYtXYAQAOWFtAAAAQEICgE5uaQD44sa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":121,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347182,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XzhAAD4GZqCsEAABwKgKMtSQAFC5seum7bFx0oARAOXgKwAAAQEICgE5udwD44YJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":121,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347182,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+oFAAEAGyVbAqAoyrBAAAQBQ1JDtsXHSubHrp4ARAOPa4gAAAQEICgPji1MBObnc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":121,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347182,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XzlAAD4GZp+sEAABwKgKMtSQAFC5seun7bFx04AQAOXa3wAAAQEICgE5ud0D44tT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":122,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347183,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRlAAD4GGL+sEAABwKgKMtSeAFA54BjC0bllf4ARAOVY4gAAAQEICgE5utYD44dM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":122,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347183,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA06TJAAEAG2qXAqAoyrBAAAQBQ1J7RuWV\/OeAYw4ARAONT4gAAAQEICgPjjE0BObrW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":122,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347183,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRpAAD4GGL6sEAABwKgKMtSeAFA54BjD0bllgIAQAOVT3wAAAQEICgE5utcD44xN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1499347183714,"flow_last_seen":1499347183714,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54484,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347183,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/NBAAD4GyP+sEAABwKgKMtTUAFAdl0YzAAAAAKACchBp+AAAAgQFtAQCCAoBObrjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":125,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347183,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1NRZfFQSHZdGNKAScSAtCwAAAgQFtAQCCAoD44xaATm64wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":125,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347183,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/NFAAD4GyQasEAABwKgKMtTUAFAdl0Y0WXxUE4AQAOXMEQAAAQEICgE5uuQD44xa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1499347186286,"flow_last_seen":1499347186286,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54510,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347186,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8C2FAAD4Gum+sEAABwKgKMtTuAFDJ67YHAAAAAKACchBLMgAAAgQFtAQCCAoBOb1mAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":126,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347186,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1O6dKYTkyeu2CKAScSCXQgAAAgQFtAQCCAoD447dATm9ZgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":126,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347186,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C2JAAD4GunasEAABwKgKMtTuAFDJ67YInSmE5YAQAOU2SQAAAQEICgE5vWcD447d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":123,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347186,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iJFAAD4GPUesEAABwKgKMtS4AFBWujDnhCUXYoARAOW59wAAAQEICgE5vcUD44ng","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":123,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347186,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mFlAAEAGK3\/AqAoyrBAAAQBQ1LiEJRdiVrow6IARAOO0nQAAAQEICgPjjzsBOb3F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":123,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347186,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iJJAAD4GPUasEAABwKgKMtS4AFBWujDohCUXY4AQAOW0mwAAAQEICgE5vcUD4487","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1499347187548,"flow_last_seen":1499347187548,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54524,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347187,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aSdAAD4GXKmsEAABwKgKMtT8AFBu8NeFAAAAAKACchCDZQAAAgQFtAQCCAoBOb6iAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":127,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347187,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1PzTvrB4bvDXhqAScSBsEQAAAgQFtAQCCAoD45AYATm+ogEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":127,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347187,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aShAAD4GXLCsEAABwKgKMtT8AFBu8NeG076weYAQAOULGQAAAQEICgE5vqID45AY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":124,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347187,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03IpAAD4G6U2sEAABwKgKMtTGAFDgpGUt5xYtXYARAOWAmAAAAQEICgE5vr8D44sa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":124,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347187,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vWhAAEAGBnDAqAoyrBAAAQBQ1MbnFi1d4KRlLoARAON7fgAAAQEICgPjkDUBOb6\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":124,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347187,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03ItAAD4G6UysEAABwKgKMtTGAFDgpGUu5xYtXoAQAOV7fAAAAQEICgE5vr8D45A1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1499347188799,"flow_last_seen":1499347188799,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54538,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347188,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dE1AAD4GUYOsEAABwKgKMtUKAFDFBMuWAAAAAKACchA3+QAAAgQFtAQCCAoBOb\/bAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":128,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347188,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1Qqv+uT2xQTLl6AScSAOsgAAAgQFtAQCCAoD45FRATm\/2wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":128,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347188,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dE5AAD4GUYqsEAABwKgKMtUKAFDFBMuXr\/rk94AQAOWtuQAAAQEICgE5v9sD45FR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":125,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347189,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/NJAAD4GyQWsEAABwKgKMtTUAFAdl0Y0WXxUE4ARAOXGQQAAAQEICgE5wLMD44xa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":125,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347189,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xjpAAEAG\/Z3AqAoyrBAAAQBQ1NRZfFQTHZdGNYARAOPAcwAAAQEICgPjkikBOcCz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":125,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347189,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/NNAAD4GyQSsEAABwKgKMtTUAFAdl0Y1WXxUFIAQAOXAcQAAAQEICgE5wLMD45Ip","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1499347190051,"flow_last_seen":1499347190051,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54552,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347190,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88xNAAD4G0rysEAABwKgKMtUYAFBhEDIAAAAAAKACchA0PgAAAgQFtAQCCAoBOcETAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":129,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347190,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1RhSQOITYRAyAaAScSBqWwAAAgQFtAQCCAoD45KKATnBEwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":129,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347190,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08xRAAD4G0sOsEAABwKgKMtUYAFBhEDIBUkDiFIAQAOUJYgAAAQEICgE5wRQD45KK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1499347191299,"flow_last_seen":1499347191299,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54566,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347191,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8a9RAAD4GWfysEAABwKgKMtUmAFBoHamYAAAAAKACchC0UQAAAgQFtAQCCAoBOcJMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":130,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347191,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1Sai+IEWaB2pmaAScSD5ewAAAgQFtAQCCAoD45PCATnCTAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":130,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347191,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a9VAAD4GWgOsEAABwKgKMtUmAFBoHamZoviBF4AQAOWYgwAAAQEICgE5wkwD45PC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":126,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347191,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C2NAAD4GunWsEAABwKgKMtTuAFDJ67YInSmE5YARAOUxCAAAAQEICgE5wqcD447d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":126,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347191,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EPhAAEAGsuDAqAoyrBAAAQBQ1O6dKYTlyeu2CYARAOMryQAAAQEICgPjlB0BOcKn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":126,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347191,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C2RAAD4GunSsEAABwKgKMtTuAFDJ67YJnSmE5oAQAOUrxwAAAQEICgE5wqcD45Qd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":88,"flow_packet_id":6,"flow_first_seen":1499347116705,"flow_last_seen":1499347122644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53786,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":88,"flow_packet_id":6,"flow_first_seen":1499347116705,"flow_last_seen":1499347122644,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53786,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":89,"flow_packet_id":6,"flow_first_seen":1499347119336,"flow_last_seen":1499347124645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":89,"flow_packet_id":6,"flow_first_seen":1499347119336,"flow_last_seen":1499347124645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53812,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":90,"flow_packet_id":6,"flow_first_seen":1499347120603,"flow_last_seen":1499347125645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53826,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":90,"flow_packet_id":6,"flow_first_seen":1499347120603,"flow_last_seen":1499347125645,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53826,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":91,"flow_packet_id":6,"flow_first_seen":1499347123174,"flow_last_seen":1499347128646,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":91,"flow_packet_id":6,"flow_first_seen":1499347123174,"flow_last_seen":1499347128646,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53852,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":92,"flow_packet_id":6,"flow_first_seen":1499347124454,"flow_last_seen":1499347129648,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53866,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":92,"flow_packet_id":6,"flow_first_seen":1499347124454,"flow_last_seen":1499347129648,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53866,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":93,"flow_packet_id":6,"flow_first_seen":1499347125743,"flow_last_seen":1499347131649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53880,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":93,"flow_packet_id":6,"flow_first_seen":1499347125743,"flow_last_seen":1499347131649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53880,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1499347192547,"flow_last_seen":1499347192547,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54580,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347192,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NKNAAD4GkS2sEAABwKgKMtU0AFBlD\/cgAAAAAKACchBokgAAAgQFtAQCCAoBOcODAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":131,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347192,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1TRgTBA1ZQ\/3IaAScSBgEgAAAgQFtAQCCAoD45T6ATnDgwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":131,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347192,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NKRAAD4GkTSsEAABwKgKMtU0AFBlD\/chYEwQNoAQAOX\/GAAAAQEICgE5w4QD45T6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":127,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347192,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aSlAAD4GXK+sEAABwKgKMtT8AFBu8NeG076weYARAOUGGQAAAQEICgE5w6ED45AY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":127,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347192,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JWFAAEAGnnfAqAoyrBAAAQBQ1PzTvrB5bvDXh4ARAOMBGgAAAQEICgPjlRgBOcOh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":127,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347192,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aSpAAD4GXK6sEAABwKgKMtT8AFBu8NeH076weoAQAOUBGAAAAQEICgE5w6ED45UY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":128,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347194,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dE9AAD4GUYmsEAABwKgKMtUKAFDFBMuXr\/rk94ARAOWn\/gAAAQEICgE5xZUD45FR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":128,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347194,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0c\/tAAEAGT93AqAoyrBAAAQBQ1Qqv+uT3xQTLmIARAOOiRAAAAQEICgPjlwwBOcWV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":128,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347194,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dFBAAD4GUYisEAABwKgKMtUKAFDFBMuYr\/rk+IAQAOWiQQAAAQEICgE5xZYD45cM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1499347195099,"flow_last_seen":1499347195099,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54606,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347195,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oYJAAD4GJE6sEAABwKgKMtVOAFAI3GeAAAAAAKACchBRzQAAAgQFtAQCCAoBOcYCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":132,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347195,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1U4LxrqfCNxngaAScSDw6gAAAgQFtAQCCAoD45d4ATnGAgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":132,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347195,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oYNAAD4GJFWsEAABwKgKMtVOAFAI3GeBC8a6oIAQAOWP8gAAAQEICgE5xgID45d4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":129,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347195,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08xVAAD4G0sKsEAABwKgKMtUYAFBhEDIBUkDiFIARAOUD5gAAAQEICgE5xo8D45KK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":129,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347195,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ehJAAEAGScbAqAoyrBAAAQBQ1RhSQOIUYRAyAoARAOP+agAAAQEICgPjmAYBOcaP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":129,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347195,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08xZAAD4G0sGsEAABwKgKMtUYAFBhEDICUkDiFYAQAOX+ZwAAAQEICgE5xpAD45gG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1499347196341,"flow_last_seen":1499347196341,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54620,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347196,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LeJAAD4Gl+6sEAABwKgKMtVcAFCW1uraAAAAAKACchA\/NAAAAgQFtAQCCAoBOcc4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":133,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347196,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1Vx\/2Nugltbq26AScSBICAAAAgQFtAQCCAoD45iuATnHOAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":133,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347196,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LeNAAD4Gl\/WsEAABwKgKMtVcAFCW1urbf9jboYAQAOXnDwAAAQEICgE5xzgD45iu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":130,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347196,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a9ZAAD4GWgKsEAABwKgKMtUmAFBoHamZoviBF4ARAOWTRQAAAQEICgE5x4kD45PC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":130,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347196,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GBdAAEAGq8HAqAoyrBAAAQBQ1Sai+IEXaB2pmoARAOOOCAAAAQEICgPjmQABOceJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":130,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347196,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a9dAAD4GWgGsEAABwKgKMtUmAFBoHamaoviBGIAQAOWOBQAAAQEICgE5x4oD45kA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1499347197627,"flow_last_seen":1499347197627,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54634,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347197,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jKtAAD4GOSWsEAABwKgKMtVqAFDoUUTRAAAAAKACchCScgAAAgQFtAQCCAoBOch6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":134,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347197,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1WoUz7Ep6FFE0qAScSAvhQAAAgQFtAQCCAoD45nwATnIegEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":134,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347197,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jKxAAD4GOSysEAABwKgKMtVqAFDoUUTSFM+xKoAQAOXOjAAAAQEICgE5yHoD45nw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":131,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347197,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NKVAAD4GkTOsEAABwKgKMtU0AFBlD\/chYEwQNoARAOX6FwAAAQEICgE5yIQD45T6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":131,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347197,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0icxAAEAGOgzAqAoyrBAAAQBQ1TRgTBA2ZQ\/3IoARAOP1GAAAAQEICgPjmfoBOciE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":131,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347197,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NKZAAD4GkTKsEAABwKgKMtU0AFBlD\/ciYEwQN4AQAOX1FgAAAQEICgE5yIQD45n6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1499347200170,"flow_last_seen":1499347200170,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54660,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347200,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8egdAAD4GS8msEAABwKgKMtWEAFAb8rDyAAAAAKACchDwGwAAAgQFtAQCCAoBOcr1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":135,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347200,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1YQCBmJ3G\/Kw86AScSDsLQAAAgQFtAQCCAoD45xsATnK9QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":135,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347200,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eghAAD4GS9CsEAABwKgKMtWEAFAb8rDzAgZieIAQAOWLNAAAAQEICgE5yvYD45xs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":132,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347200,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oYRAAD4GJFSsEAABwKgKMtVOAFAI3GeBC8a6oIARAOWKgQAAAQEICgE5y3ID45d4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":132,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347200,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JkhAAEAGnZDAqAoyrBAAAQBQ1U4LxrqgCNxngoARAOOFEgAAAQEICgPjnOgBOcty","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":132,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347200,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oYVAAD4GJFOsEAABwKgKMtVOAFAI3GeCC8a6oYAQAOWFEAAAAQEICgE5y3ID45zo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1499347201471,"flow_last_seen":1499347201471,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54674,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JERAAD4GoYysEAABwKgKMtWSAFCOe+h\/AAAAAKACchBEsQAAAgQFtAQCCAoBOcw7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":136,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1ZJxUzmIjnvogKAScSD5HwAAAgQFtAQCCAoD452xATnMOwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":136,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JEVAAD4GoZOsEAABwKgKMtWSAFCOe+iAcVM5iYAQAOWYJwAAAQEICgE5zDsD452x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":133,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LeRAAD4Gl\/SsEAABwKgKMtVcAFCW1urbf9jboYARAOXh2gAAAQEICgE5zGwD45iu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":133,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RkNAAEAGfZXAqAoyrBAAAQBQ1Vx\/2Nuhltbq3IAQAOPcpwAAAQEICgPjneMBOcxs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":133,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RkRAAEAGfZTAqAoyrBAAAQBQ1Vx\/2Nuhltbq3IARAOPcpgAAAQEICgPjneMBOcxs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":133,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347201,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qMxAAD4GHQysEAABwKgKMtVcAFCW1urcf9jbooAQAOXcpAAAAQEICgE5zGwD453j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":94,"flow_packet_id":6,"flow_first_seen":1499347128311,"flow_last_seen":1499347133649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53906,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":94,"flow_packet_id":6,"flow_first_seen":1499347128311,"flow_last_seen":1499347133649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53906,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":95,"flow_packet_id":6,"flow_first_seen":1499347129584,"flow_last_seen":1499347134649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53920,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":95,"flow_packet_id":6,"flow_first_seen":1499347129584,"flow_last_seen":1499347134649,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53920,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":96,"flow_packet_id":6,"flow_first_seen":1499347132137,"flow_last_seen":1499347137650,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53946,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":96,"flow_packet_id":6,"flow_first_seen":1499347132137,"flow_last_seen":1499347137650,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53946,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":97,"flow_packet_id":6,"flow_first_seen":1499347133434,"flow_last_seen":1499347138651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":97,"flow_packet_id":6,"flow_first_seen":1499347133434,"flow_last_seen":1499347138651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53960,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":98,"flow_packet_id":6,"flow_first_seen":1499347134702,"flow_last_seen":1499347140651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":98,"flow_packet_id":6,"flow_first_seen":1499347134702,"flow_last_seen":1499347140651,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53974,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":134,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347202,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jK1AAD4GOSusEAABwKgKMtVqAFDoUUTSFM+xKoARAOXJnwAAAQEICgE5zWYD45nw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":134,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347202,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0L\/dAAEAGk+HAqAoyrBAAAQBQ1WoUz7Eq6FFE04ARAOPEswAAAQEICgPjnt0BOc1m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":134,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347202,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jK5AAD4GOSqsEAABwKgKMtVqAFDoUUTTFM+xK4AQAOXEsQAAAQEICgE5zWYD457d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1499347202722,"flow_last_seen":1499347202722,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54688,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347202,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83mxAAD4G52OsEAABwKgKMtWgAFD5fxMfAAAAAKACchCtxwAAAgQFtAQCCAoBOc1zAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":137,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347202,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1aA8zHVU+X8TIKAScSBZuAAAAgQFtAQCCAoD457qATnNcwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":137,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347202,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03m1AAD4G52qsEAABwKgKMtWgAFD5fxMgPMx1VYAQAOX4vwAAAQEICgE5zXMD457q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1499347205214,"flow_last_seen":1499347205214,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54714,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347205,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZeBAAD4GX\/CsEAABwKgKMtW6AFAegaoCAAAAAKACchDvWQAAAgQFtAQCCAoBOc\/iAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":138,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347205,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1bp74sNGHoGqA6AScSAL0wAAAgQFtAQCCAoD46FZATnP4gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":138,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347205,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZeFAAD4GX\/esEAABwKgKMtW6AFAegaoDe+LDR4AQAOWq2QAAAQEICgE5z+MD46FZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":135,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347205,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eglAAD4GS8+sEAABwKgKMtWEAFAb8rDzAgZieIARAOWF1AAAAQEICgE50FUD45xs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":135,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347205,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0w7NAAEAGACXAqAoyrBAAAQBQ1YQCBmJ4G\/Kw9IARAOOAdgAAAQEICgPjocsBOdBV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":135,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347205,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0egpAAD4GS86sEAABwKgKMtWEAFAb8rD0AgZieYAQAOWAdAAAAQEICgE50FUD46HL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1499347206497,"flow_last_seen":1499347206497,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54728,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347206,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA85d9AAD4G3\/CsEAABwKgKMtXIAFBJFTT8AAAAAKACchA4fQAAAgQFtAQCCAoBOdEjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":139,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347206,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1cindk\/NSRU0\/aAScSCbmwAAAgQFtAQCCAoD46KZATnRIwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":139,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347206,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05eBAAD4G3\/esEAABwKgKMtXIAFBJFTT9p3ZPzoAQAOU6owAAAQEICgE50SMD46KZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":136,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347206,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JEZAAD4GoZKsEAABwKgKMtWSAFCOe+iAcVM5iYARAOWTEgAAAQEICgE50U8D452x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":136,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347206,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m0xAAEAGKIzAqAoyrBAAAQBQ1ZJxUzmJjnvogYARAOON\/wAAAQEICgPjosUBOdFP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":136,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347206,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JEdAAD4GoZGsEAABwKgKMtWSAFCOe+iBcVM5ioAQAOWN\/QAAAQEICgE50U8D46LF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1499347207764,"flow_last_seen":1499347207764,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54742,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347207,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oEFAAD4GJY+sEAABwKgKMtXWAFBZgnIhAAAAAKACchDpnwAAAgQFtAQCCAoBOdJgAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":140,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347207,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1dboCFwKWYJyIqAScSD+sQAAAgQFtAQCCAoD46PWATnSYAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":140,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347207,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oEJAAD4GJZasEAABwKgKMtXWAFBZgnIi6AhcC4AQAOWduQAAAQEICgE50mAD46PW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":137,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347208,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03m5AAD4G52msEAABwKgKMtWgAFD5fxMgPMx1VYARAOXy7gAAAQEICgE500MD457q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":137,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347208,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00exAAEAG8evAqAoyrBAAAQBQ1aA8zHVV+X8TIYARAOPtIAAAAQEICgPjpLkBOdND","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":137,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347208,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03m9AAD4G52isEAABwKgKMtWgAFD5fxMhPMx1VoAQAOXtHgAAAQEICgE500MD46S5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1499347210270,"flow_last_seen":1499347210270,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54768,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347210,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8H3tAAD4GplWsEAABwKgKMtXwAFCR7supAAAAAKACchBVHwAAAgQFtAQCCAoBOdTSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":141,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347210,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1fCjgnLike7LqqAScSCVbAAAAgQFtAQCCAoD46ZJATnU0gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":141,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347210,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H3xAAD4GplysEAABwKgKMtXwAFCR7suqo4Jy44AQAOU0dAAAAQEICgE51NID46ZJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":138,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347210,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZeJAAD4GX\/asEAABwKgKMtW6AFAegaoDe+LDR4ARAOWlhAAAAQEICgE51TcD46FZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":138,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347210,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZepAAEAGXe7AqAoyrBAAAQBQ1bp74sNHHoGqBIARAOOgMQAAAQEICgPjpq0BOdU3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":138,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347210,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZeNAAD4GX\/WsEAABwKgKMtW6AFAegaoEe+LDSIAQAOWgLwAAAQEICgE51TcD46at","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1499347211522,"flow_last_seen":1499347211522,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54782,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347211,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86VZAAD4G3HmsEAABwKgKMtX+AFCmKj9dAAAAAKACchDL6AAAAgQFtAQCCAoBOdYLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":142,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347211,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1f624YVgpio\/XqAScSDlHwAAAgQFtAQCCAoD46eCATnWCwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":142,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347211,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06VdAAD4G3ICsEAABwKgKMtX+AFCmKj9etuGFYYAQAOWEJgAAAQEICgE51gwD46eC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":139,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347211,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05eFAAD4G3\/asEAABwKgKMtXIAFBJFTT9p3ZPzoARAOU1lAAAAQEICgE51jED46KZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":139,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347211,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA06GlAAEAG227AqAoyrBAAAQBQ1cindk\/OSRU0\/oARAOMwhwAAAQEICgPjp6cBOdYx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":139,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347211,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05eJAAD4G3\/WsEAABwKgKMtXIAFBJFTT+p3ZPz4AQAOUwhQAAAQEICgE51jED46en","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":99,"flow_packet_id":6,"flow_first_seen":1499347137239,"flow_last_seen":1499347142652,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":99,"flow_packet_id":6,"flow_first_seen":1499347137239,"flow_last_seen":1499347142652,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54000,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":100,"flow_packet_id":6,"flow_first_seen":1499347138552,"flow_last_seen":1499347143653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54014,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":100,"flow_packet_id":6,"flow_first_seen":1499347138552,"flow_last_seen":1499347143653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54014,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":101,"flow_packet_id":6,"flow_first_seen":1499347141111,"flow_last_seen":1499347146653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54040,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":101,"flow_packet_id":6,"flow_first_seen":1499347141111,"flow_last_seen":1499347146653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54040,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":102,"flow_packet_id":6,"flow_first_seen":1499347142412,"flow_last_seen":1499347147653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54054,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":102,"flow_packet_id":6,"flow_first_seen":1499347142412,"flow_last_seen":1499347147653,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54054,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":103,"flow_packet_id":6,"flow_first_seen":1499347143676,"flow_last_seen":1499347149654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54068,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":103,"flow_packet_id":6,"flow_first_seen":1499347143676,"flow_last_seen":1499347149654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54068,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":104,"flow_packet_id":6,"flow_first_seen":1499347146267,"flow_last_seen":1499347151654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54094,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":104,"flow_packet_id":6,"flow_first_seen":1499347146267,"flow_last_seen":1499347151654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54094,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":140,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347213,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oENAAD4GJZWsEAABwKgKMtXWAFBZgnIi6AhcC4ARAOWX8wAAAQEICgE52CUD46PW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":140,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347213,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09ZBAAEAGzkfAqAoyrBAAAQBQ1dboCFwLWYJyI4ARAOOSLgAAAQEICgPjqZwBOdgl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":140,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347213,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oERAAD4GJZSsEAABwKgKMtXWAFBZgnIj6AhcDIAQAOWSLAAAAQEICgE52CUD46mc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1499347214088,"flow_last_seen":1499347214088,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54808,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347214,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KIZAAD4GnUqsEAABwKgKMtYYAFAozfALAAAAAKACchCV+wAAAgQFtAQCCAoBOdiNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":143,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347214,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1hgNeWHdKM3wDKAScSB5nQAAAgQFtAQCCAoD46oDATnYjQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":143,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347214,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KIdAAD4GnVGsEAABwKgKMtYYAFAozfAMDXlh3oAQAOUYpQAAAQEICgE52I0D46oD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1499347215361,"flow_last_seen":1499347215361,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54822,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347215,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dFpAAD4GUXasEAABwKgKMtYmAFDVm62RAAAAAKACchAqWwAAAgQFtAQCCAoBOdnLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":144,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347215,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1iYsMlMv1ZutkqAScSD8swAAAgQFtAQCCAoD46tBATnZywEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":144,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347215,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dFtAAD4GUX2sEAABwKgKMtYmAFDVm62SLDJTMIAQAOWbuwAAAQEICgE52csD46tB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":141,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347215,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H31AAD4GplusEAABwKgKMtXwAFCR7suqo4Jy44ARAOUvLAAAAQEICgE52hkD46ZJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":141,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347215,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02XNAAEAG6mTAqAoyrBAAAQBQ1fCjgnLjke7Lq4ARAOMp5gAAAQEICgPjq5ABOdoZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":141,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347215,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H35AAD4GplqsEAABwKgKMtXwAFCR7suro4Jy5IAQAOUp4wAAAQEICgE52hoD46uQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1499347216659,"flow_last_seen":1499347216659,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54836,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347216,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zDVAAD4G+ZqsEAABwKgKMtY0AFD0uxclAAAAAKACchCgVAAAAgQFtAQCCAoBOdsQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":145,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347216,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1jQ3RTmT9LsXJqAScSB\/8QAAAgQFtAQCCAoD46yGATnbEAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":145,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347216,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zDZAAD4G+aGsEAABwKgKMtY0AFD0uxcmN0U5lIAQAOUe+QAAAQEICgE52xAD46yG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":142,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347216,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06VhAAD4G3H+sEAABwKgKMtX+AFCmKj9etuGFYYARAOV\/HQAAAQEICgE52xQD46eC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":142,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347216,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KetAAEAGme3AqAoyrBAAAQBQ1f624YVhpio\/X4ARAON6FgAAAQEICgPjrIoBOdsU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":142,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347216,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06VlAAD4G3H6sEAABwKgKMtX+AFCmKj9ftuGFYoAQAOV6FAAAAQEICgE52xQD46yK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1499347219208,"flow_last_seen":1499347219208,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54862,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347219,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UEtAAD4GdYWsEAABwKgKMtZOAFD4043GAAAAAKACchAjBAAAAgQFtAQCCAoBOd2NAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":146,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347219,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1k7LcrrD+NONx6AScSDqxQAAAgQFtAQCCAoD468DATndjQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":146,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347219,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UExAAD4GdYysEAABwKgKMtZOAFD4043Hy3K6xIAQAOWJzQAAAQEICgE53Y0D468D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":143,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347219,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KIhAAD4GnVCsEAABwKgKMtYYAFAozfAMDXlh3oARAOUTLwAAAQEICgE53gID46oD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":143,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347219,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zqZAAEAG9THAqAoyrBAAAQBQ1hgNeWHeKM3wDYARAOMNuwAAAQEICgPjr3gBOd4C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":143,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347219,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KIlAAD4GnU+sEAABwKgKMtYYAFAozfANDXlh34AQAOUNuQAAAQEICgE53gID4694","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1499347220447,"flow_last_seen":1499347220447,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54876,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347220,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86ABAAD4G3c+sEAABwKgKMtZcAFBnOTbDAAAAAKACchAKXgAAAgQFtAQCCAoBOd7DAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":147,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347220,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1lzT7Q76Zzk2xKAScSB0OAAAAgQFtAQCCAoD47A5ATnewwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":147,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347220,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06AFAAD4G3dasEAABwKgKMtZcAFBnOTbE0+0O+4AQAOUTQAAAAQEICgE53sMD47A5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":144,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347220,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dFxAAD4GUXysEAABwKgKMtYmAFDVm62SLDJTMIARAOWWiQAAAQEICgE53vwD46tB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":144,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347220,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA040JAAEAG4JXAqAoyrBAAAQBQ1iYsMlMw1Zutk4ARAOORWQAAAQEICgPjsHIBOd78","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":144,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347220,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dF1AAD4GUXusEAABwKgKMtYmAFDVm62TLDJTMYAQAOWRVwAAAQEICgE53vwD47By","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":145,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347221,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zDdAAD4G+aCsEAABwKgKMtY0AFD0uxcmN0U5lIARAOUaEgAAAQEICgE53\/YD46yG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":145,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347221,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iPhAAEAGOuDAqAoyrBAAAQBQ1jQ3RTmU9LsXJ4ARAOMVLQAAAQEICgPjsWwBOd\/2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":145,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347221,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zDhAAD4G+Z+sEAABwKgKMtY0AFD0uxcnN0U5lYAQAOUVKwAAAQEICgE53\/YD47Fs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1499347221694,"flow_last_seen":1499347221694,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54890,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347221,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89JJAAD4G0T2sEAABwKgKMtZqAFAcVCtpAAAAAKACchBfVwAAAgQFtAQCCAoBOd\/7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":148,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347221,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1mpdkOZGHFQraqAScSBnCgAAAgQFtAQCCAoD47FxATnf+wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":148,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347221,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JNAAD4G0USsEAABwKgKMtZqAFAcVCtqXZDmR4AQAOUGEgAAAQEICgE53\/sD47Fx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":105,"flow_packet_id":6,"flow_first_seen":1499347147523,"flow_last_seen":1499347152654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54108,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":105,"flow_packet_id":6,"flow_first_seen":1499347147523,"flow_last_seen":1499347152654,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54108,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":106,"flow_packet_id":6,"flow_first_seen":1499347150236,"flow_last_seen":1499347155656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54134,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":106,"flow_packet_id":6,"flow_first_seen":1499347150236,"flow_last_seen":1499347155656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54134,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":107,"flow_packet_id":6,"flow_first_seen":1499347151520,"flow_last_seen":1499347156656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54148,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":107,"flow_packet_id":6,"flow_first_seen":1499347151520,"flow_last_seen":1499347156656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54148,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":108,"flow_packet_id":6,"flow_first_seen":1499347152786,"flow_last_seen":1499347158656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54162,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":108,"flow_packet_id":6,"flow_first_seen":1499347152786,"flow_last_seen":1499347158656,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54162,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":109,"flow_packet_id":6,"flow_first_seen":1499347155346,"flow_last_seen":1499347160658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54188,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":109,"flow_packet_id":6,"flow_first_seen":1499347155346,"flow_last_seen":1499347160658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54188,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":110,"flow_packet_id":6,"flow_first_seen":1499347156630,"flow_last_seen":1499347161658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54202,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":110,"flow_packet_id":6,"flow_first_seen":1499347156630,"flow_last_seen":1499347161658,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54202,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1499347224338,"flow_last_seen":1499347224338,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54916,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347224,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K5xAAD4GmjSsEAABwKgKMtaEAFDFiskTAAAAAKACchAVyAAAAgQFtAQCCAoBOeKPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":149,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347224,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1oTh1R3txYrJFKAScSBe+gAAAgQFtAQCCAoD47QGATnijwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":149,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347224,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K51AAD4GmjusEAABwKgKMtaEAFDFiskU4dUd7oAQAOX+AAAAAQEICgE54pAD47QG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":146,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347224,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UE1AAD4GdYusEAABwKgKMtZOAFD4043Hy3K6xIARAOWEdQAAAQEICgE54uQD468D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":146,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347224,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Dp5AAEAGtTrAqAoyrBAAAQBQ1k7LcrrE+NONyIARAON\/HwAAAQEICgPjtFoBOeLk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":146,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347224,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UE5AAD4GdYqsEAABwKgKMtZOAFD4043Iy3K6xYAQAOV\/HQAAAQEICgE54uQD47Ra","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1499347225590,"flow_last_seen":1499347225590,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54930,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347225,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hTdAAD4GQJmsEAABwKgKMtaSAFC4kmb\/AAAAAKACchCDjQAAAgQFtAQCCAoBOePIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":150,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347225,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1pJbUfWYuJJnAKAScSB6XwAAAgQFtAQCCAoD47U\/ATnjyAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":150,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347225,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hThAAD4GQKCsEAABwKgKMtaSAFC4kmcAW1H1mYAQAOUZZgAAAQEICgE548kD47U\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":147,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347225,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06AJAAD4G3dWsEAABwKgKMtZcAFBnOTbE0+0O+4ARAOUOJAAAAQEICgE5494D47A5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":147,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347225,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0u69AAEAGCCnAqAoyrBAAAQBQ1lzT7Q77Zzk2xYARAOMJCgAAAQEICgPjtVQBOePe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":147,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347225,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ANAAD4G3dSsEAABwKgKMtZcAFBnOTbF0+0O\/IAQAOUJCAAAAQEICgE5494D47VU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":148,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347227,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JRAAD4G0UOsEAABwKgKMtZqAFAcVCtqXZDmR4ARAOUAOgAAAQEICgE55dID47Fx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":148,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347227,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0UQ9AAEAGcsnAqAoyrBAAAQBQ1mpdkOZHHFQra4ARAOP6YwAAAQEICgPjt0gBOeXS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":148,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347227,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JVAAD4G0UKsEAABwKgKMtZqAFAcVCtrXZDmSIAQAOX6YQAAAQEICgE55dID47dI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1499347228091,"flow_last_seen":1499347228091,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54956,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347228,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8p6lAAD4GHiesEAABwKgKMtasAFAs20GTAAAAAKACchAyJQAAAgQFtAQCCAoBOeY6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":151,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347228,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1qzT8idALNtBlKAScSB8PQAAAgQFtAQCCAoD47ewATnmOgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":151,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347228,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p6pAAD4GHi6sEAABwKgKMtasAFAs20GU0\/InQYAQAOUbRQAAAQEICgE55joD47ew","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1499347229416,"flow_last_seen":1499347229416,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54970,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347229,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aTtAAD4GXJWsEAABwKgKMta6AFA5aI6+AAAAAKACchDXEwAAAgQFtAQCCAoBOeeFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":152,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347229,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1rr5YE9wOWiOv6AScSDSQgAAAgQFtAQCCAoD47j7ATnnhQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":152,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347229,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aTxAAD4GXJysEAABwKgKMta6AFA5aI6\/+WBPcYAQAOVxSgAAAQEICgE554UD47j7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":149,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347229,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K55AAD4GmjqsEAABwKgKMtaEAFDFiskU4dUd7oARAOX4yQAAAQEICgE558YD47QG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":149,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347229,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pNNAAEAGHwXAqAoyrBAAAQBQ1oTh1R3uxYrJFYARAOPzkwAAAQEICgPjuT0BOefG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":149,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347229,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K59AAD4GmjmsEAABwKgKMtaEAFDFiskV4dUd74AQAOXzkAAAAQEICgE558cD47k9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":150,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347230,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hTlAAD4GQJ+sEAABwKgKMtaSAFC4kmcAW1H1mYARAOUUbQAAAQEICgE56MED47U\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":150,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347230,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T65AAEAGdCrAqAoyrBAAAQBQ1pJbUfWZuJJnAYARAOMPdgAAAQEICgPjujcBOejB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":150,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347230,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hTpAAD4GQJ6sEAABwKgKMtaSAFC4kmcBW1H1moAQAOUPdAAAAQEICgE56MED47o3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1499347230690,"flow_last_seen":1499347230690,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54984,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347230,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uy1AAD4GCqOsEAABwKgKMtbIAFCbKFPuAAAAAKACchCu1wAAAgQFtAQCCAoBOejDAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":153,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347230,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1shnmPeomyhT76AScSCSVwAAAgQFtAQCCAoD47o6ATnowwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":153,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347230,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uy5AAD4GCqqsEAABwKgKMtbIAFCbKFPvZ5j3qYAQAOUxXgAAAQEICgE56MQD47o6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":151,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":151,"flow_packet_id":4,"flow_first_seen":1499347228091,"flow_last_seen":1499347231733,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54956,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":151,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nH5AAEAGJ1rAqAoyrBAAAQBQ1qzT8idBLNtDE4AQAOsSowAAAQEICgPjuz8BOenI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2800{"flow_id":151,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":1837,"pkt":"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","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":151,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p6xAAD4GHiysEAABwKgKMtasAFAs20MT0\/IuLIAQAQALogAAAQEICgE56ckD47s\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":151,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2936{"flow_id":151,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":1933,"pkt":"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","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":151,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347231,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p65AAD4GHiqsEAABwKgKMtasAFAs20Vc0\/I1d4AQAR0BeQAAAQEICgE56gUD47t7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":77,"flow_packet_id":312,"flow_first_seen":1499347097460,"flow_last_seen":1499347166757,"flow_tot_l4_data_len":242375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":776,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":53584,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":111,"flow_packet_id":6,"flow_first_seen":1499347159323,"flow_last_seen":1499347164659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54228,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":111,"flow_packet_id":6,"flow_first_seen":1499347159323,"flow_last_seen":1499347164659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54228,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":112,"flow_packet_id":6,"flow_first_seen":1499347160581,"flow_last_seen":1499347165659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54242,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":112,"flow_packet_id":6,"flow_first_seen":1499347160581,"flow_last_seen":1499347165659,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54242,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":114,"flow_packet_id":6,"flow_first_seen":1499347164459,"flow_last_seen":1499347169660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54282,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":114,"flow_packet_id":6,"flow_first_seen":1499347164459,"flow_last_seen":1499347169660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54282,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":115,"flow_packet_id":6,"flow_first_seen":1499347165741,"flow_last_seen":1499347171660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54296,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":115,"flow_packet_id":6,"flow_first_seen":1499347165741,"flow_last_seen":1499347171660,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54296,"dst_port":80,"l4_proto":"tcp"}
+0921{"flow_id":151,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347232,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":151,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347232,"pkt_len":1836,"pkt":"AMGxFOsxABm5CmnxCABFAAcenINAAEAGIGvAqAoyrBAAAQBQ1qzT8jV3LNtG24AYAP19\/AAAAQEICgPjvHgBOesASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIwOjMyIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTgNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":151,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347232,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p7BAAD4GHiisEAABwKgKMtasAFAs20bb0\/I8YYAQATn2+QAAAQEICgE56wID47x4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1499347233219,"flow_last_seen":1499347233219,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55010,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347233,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Fw9AAD4GrsGsEAABwKgKMtbiAFBsKfwzAAAAAKACchAy\/gAAAgQFtAQCCAoBOes8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":154,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347233,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1uJkUL6IbCn8NKAScSBQbgAAAgQFtAQCCAoD47yyATnrPAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":154,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347233,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FxBAAD4GrsisEAABwKgKMtbiAFBsKfw0ZFC+iYAQAOXvdQAAAQEICgE56zwD47yy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":151,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347233,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2923{"flow_id":151,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347233,"pkt_len":1929,"pkt":"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","pkt_caplen":1929,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1499347234469,"flow_last_seen":1499347234469,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55024,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347234,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vaZAAD4GCCqsEAABwKgKMtbwAFD38VHSAAAAAKACchBQUQAAAgQFtAQCCAoBOex0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":155,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347234,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1vAPBPjT9\/FR06AScSCHigAAAgQFtAQCCAoD473qATnsdAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":155,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347234,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vadAAD4GCDGsEAABwKgKMtbwAFD38VHTDwT41IAQAOUmkgAAAQEICgE57HQD473q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":152,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347234,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aT1AAD4GXJusEAABwKgKMta6AFA5aI6\/+WBPcYARAOVsJQAAAQEICgE57KkD47j7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":152,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347234,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08W5AAEAG0mnAqAoyrBAAAQBQ1rr5YE9xOWiOwIARAONnAgAAAQEICgPjvh8BOeyp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":152,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347234,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aT5AAD4GXJqsEAABwKgKMta6AFA5aI7A+WBPcoAQAOVnAAAAAQEICgE57KkD474f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1499347235716,"flow_last_seen":1499347235716,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55038,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347235,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wLxAAD4GBRSsEAABwKgKMtb+AFAtaC0QAAAAAKACchA+VwAAAgQFtAQCCAoBOe2sAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347235,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1v760xqZLWgtEaAScSBmwwAAAgQFtAQCCAoD478iATntrAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":156,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347235,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wL1AAD4GBRusEAABwKgKMtb+AFAtaC0R+tMamoAQAOUFywAAAQEICgE57awD478i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":153,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347236,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uy9AAD4GCqmsEAABwKgKMtbIAFCbKFPvZ5j3qYARAOUrhAAAAQEICgE57p0D47o6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":153,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347236,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0N7pAAEAGjB7AqAoyrBAAAQBQ1shnmPepmyhT8IARAOMlrAAAAQEICgPjwBMBOe6d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":153,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347236,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uzBAAD4GCqisEAABwKgKMtbIAFCbKFPwZ5j3qoAQAOUlqgAAAQEICgE57p0D48AT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1499347238260,"flow_last_seen":1499347238260,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55064,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347238,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8N5lAAD4GjjesEAABwKgKMtcYAFCMG8exAAAAAKACchBCbAAAAgQFtAQCCAoBOfAoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":157,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347238,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1xiQuLeAjBvHsqAScSA1kAAAAgQFtAQCCAoD48GeATnwKAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":157,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347238,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N5pAAD4Gjj6sEAABwKgKMtcYAFCMG8eykLi3gYAQAOXUlwAAAQEICgE58CgD48Ge","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":154,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347238,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FxFAAD4GrsesEAABwKgKMtbiAFBsKfw0ZFC+iYARAOXqHwAAAQEICgE58JED47yy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":154,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347238,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fI5AAEAGR0rAqAoyrBAAAQBQ1uJkUL6JbCn8NYARAOPkywAAAQEICgPjwgcBOfCR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":154,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347238,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FxJAAD4GrsasEAABwKgKMtbiAFBsKfw1ZFC+ioAQAOXkyQAAAQEICgE58JED48IH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1499347239517,"flow_last_seen":1499347239517,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55078,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347239,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d9VAAD4GTfusEAABwKgKMtcmAFDWiYa3AAAAAKACchA3sAAAAgQFtAQCCAoBOfFiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":158,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347239,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1yYFUEfr1omGuKAScSAkmAAAAgQFtAQCCAoD48LYATnxYgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":158,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347239,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d9ZAAD4GTgKsEAABwKgKMtcmAFDWiYa4BVBH7IAQAOXDnwAAAQEICgE58WID48LY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":155,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347239,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vahAAD4GCDCsEAABwKgKMtbwAFD38VHTDwT41IARAOUhegAAAQEICgE58YsD473q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":155,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347239,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0O9VAAEAGiAPAqAoyrBAAAQBQ1vAPBPjU9\/FR1IARAOMcZAAAAQEICgPjwwEBOfGL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":155,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347239,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0valAAD4GCC+sEAABwKgKMtbwAFD38VHUDwT41YAQAOUcYgAAAQEICgE58YsD48MB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1499347240786,"flow_last_seen":1499347240786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55092,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347240,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LjpAAD4Gl5asEAABwKgKMtc0AFB5mNylAAAAAKACchA9aAAAAgQFtAQCCAoBOfKfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":159,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347240,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1zRt9KwCeZjcpqAScSBcVgAAAgQFtAQCCAoD48QWATnynwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":159,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347240,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LjtAAD4Gl52sEAABwKgKMtc0AFB5mNymbfSsA4AQAOX7XAAAAQEICgE58qAD48QW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":156,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347241,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wL5AAD4GBRqsEAABwKgKMtb+AFAtaC0R+tMamoARAOX\/9gAAAQEICgE5838D478i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":156,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347241,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03m9AAEAG5WjAqAoyrBAAAQBQ1v760xqaLWgtEoARAOP6IwAAAQEICgPjxPYBOfN\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":156,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347241,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wL9AAD4GBRmsEAABwKgKMtb+AFAtaC0S+tMam4AQAOX6IAAAAQEICgE584AD48T2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":116,"flow_packet_id":6,"flow_first_seen":1499347168302,"flow_last_seen":1499347173661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54322,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":116,"flow_packet_id":6,"flow_first_seen":1499347168302,"flow_last_seen":1499347173661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54322,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":117,"flow_packet_id":6,"flow_first_seen":1499347169573,"flow_last_seen":1499347174661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54336,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":117,"flow_packet_id":6,"flow_first_seen":1499347169573,"flow_last_seen":1499347174661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54336,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":118,"flow_packet_id":6,"flow_first_seen":1499347172098,"flow_last_seen":1499347177661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54362,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":118,"flow_packet_id":6,"flow_first_seen":1499347172098,"flow_last_seen":1499347177661,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54362,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":119,"flow_packet_id":6,"flow_first_seen":1499347173373,"flow_last_seen":1499347178662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54376,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":119,"flow_packet_id":6,"flow_first_seen":1499347173373,"flow_last_seen":1499347178662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54376,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":120,"flow_packet_id":6,"flow_first_seen":1499347174667,"flow_last_seen":1499347180662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54390,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":120,"flow_packet_id":6,"flow_first_seen":1499347174667,"flow_last_seen":1499347180662,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54390,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":121,"flow_packet_id":6,"flow_first_seen":1499347177248,"flow_last_seen":1499347182663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54416,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":121,"flow_packet_id":6,"flow_first_seen":1499347177248,"flow_last_seen":1499347182663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54416,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1499347243333,"flow_last_seen":1499347243333,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55118,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347243,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87MZAAD4G2QmsEAABwKgKMtdOAFA1pxnaAAAAAKACchBBjgAAAgQFtAQCCAoBOfUcAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":160,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347243,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ104lyvYYNacZ26AScSBcFAAAAgQFtAQCCAoD48aSATn1HAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":160,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347243,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07MdAAD4G2RCsEAABwKgKMtdOAFA1pxnbJcr2GYAQAOX7GwAAAQEICgE59RwD48aS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":157,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347243,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N5tAAD4Gjj2sEAABwKgKMtcYAFCMG8eykLi3gYARAOXPSwAAAQEICgE59XMD48Ge","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":157,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347243,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cWtAAEAGUm3AqAoyrBAAAQBQ1xiQuLeBjBvHs4ARAOPKAAAAAQEICgPjxuoBOfVz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":157,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347243,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0N5xAAD4GjjysEAABwKgKMtcYAFCMG8ezkLi3goAQAOXJ\/QAAAQEICgE59XQD48bq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1499347244580,"flow_last_seen":1499347244580,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55132,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347244,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UrJAAD4Gcx6sEAABwKgKMtdcAFCKtaTmAAAAAKACchBgLQAAAgQFtAQCCAoBOfZUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":161,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347244,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ11yGUuJUirWk56AScSAstwAAAgQFtAQCCAoD48fKATn2VAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":161,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347244,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UrNAAD4GcyWsEAABwKgKMtdcAFCKtaTnhlLiVYAQAOXLvgAAAQEICgE59lQD48fK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":158,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347244,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d9dAAD4GTgGsEAABwKgKMtcmAFDWiYa4BVBH7IARAOW+kgAAAQEICgE59m4D48LY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":158,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347244,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gAhAAEAGQ9DAqAoyrBAAAQBQ1yYFUEfs1omGuYARAOO5hwAAAQEICgPjx+QBOfZu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":158,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347244,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d9hAAD4GTgCsEAABwKgKMtcmAFDWiYa5BVBH7YAQAOW5hQAAAQEICgE59m4D48fk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":159,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347246,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LjxAAD4Gl5ysEAABwKgKMtc0AFB5mNymbfSsA4ARAOX1mQAAAQEICgE5+GID48QW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":159,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347246,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZdtAAEAGXf3AqAoyrBAAAQBQ1zRt9KwDeZjcp4ARAOPv2AAAAQEICgPjydgBOfhi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":159,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347246,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Lj1AAD4Gl5usEAABwKgKMtc0AFB5mNynbfSsBIAQAOXv1gAAAQEICgE5+GID48nY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1499347247114,"flow_last_seen":1499347247114,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55158,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347247,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GLNAAD4GrR2sEAABwKgKMtd2AFApn+B+AAAAAKACchCDGAAAAgQFtAQCCAoBOfjNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":162,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347247,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ13ZCBl2jKZ\/gf6AScSAWJgAAAgQFtAQCCAoD48pEATn4zQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":162,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347247,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GLRAAD4GrSSsEAABwKgKMtd2AFApn+B\/QgZdpIAQAOW1LAAAAQEICgE5+M4D48pE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1499347248373,"flow_last_seen":1499347248373,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55172,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347248,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JiRAAD4Gn6ysEAABwKgKMteEAFBjB9wsAAAAAKACchBMuQAAAgQFtAQCCAoBOfoIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":163,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347248,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ14RKuW9xYwfcLaAScSDECwAAAgQFtAQCCAoD48t+ATn6CAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":163,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347248,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JiVAAD4Gn7OsEAABwKgKMteEAFBjB9wtSrlvcoAQAOVjEgAAAQEICgE5+gkD48t+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":160,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347248,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07MhAAD4G2Q+sEAABwKgKMtdOAFA1pxnbJcr2GYARAOX14AAAAQEICgE5+lYD48aS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":160,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347248,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PdVAAEAGhgPAqAoyrBAAAQBQ104lyvYZNacZ3IARAOPwpwAAAQEICgPjy8wBOfpW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":160,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347248,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07MlAAD4G2Q6sEAABwKgKMtdOAFA1pxncJcr2GoAQAOXwpQAAAQEICgE5+lYD48vM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1499347249651,"flow_last_seen":1499347249651,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55186,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347249,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ostAAD4GIwWsEAABwKgKMteSAFAC31mDAAAAAKACchAuPQAAAgQFtAQCCAoBOftIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":164,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347249,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ15JGEK8pAt9ZhKAScSBpQAAAAgQFtAQCCAoD48y+ATn7SAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":164,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347249,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0osxAAD4GIwysEAABwKgKMteSAFAC31mERhCvKoAQAOUISAAAAQEICgE5+0gD48y+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":161,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347249,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UrRAAD4GcySsEAABwKgKMtdcAFCKtaTnhlLiVYARAOXGwQAAAQEICgE5+1AD48fK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":161,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347249,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0LpNAAEAGlUXAqAoyrBAAAQBQ11yGUuJVirWk6IARAOPBxgAAAQEICgPjzMYBOftQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":161,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347249,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UrVAAD4GcyOsEAABwKgKMtdcAFCKtaTohlLiVoAQAOXBxAAAAQEICgE5+1AD48zG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1499347252179,"flow_last_seen":1499347252179,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55212,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347252,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86Q5AAD4G3MGsEAABwKgKMtesAFDOJxTOAAAAAKACchClFwAAAgQFtAQCCAoBOf3AAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":165,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347252,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ16ypaMjNzicUz6AScSBgpgAAAgQFtAQCCAoD4882ATn9wAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":165,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347252,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06Q9AAD4G3MisEAABwKgKMtesAFDOJxTPqWjIzoAQAOX\/rQAAAQEICgE5\/cAD4882","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":162,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347252,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GLVAAD4GrSOsEAABwKgKMtd2AFApn+B\/QgZdpIARAOWvuwAAAQEICgE5\/j4D48pE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":162,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347252,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0khBAAEAGMcjAqAoyrBAAAQBQ13ZCBl2kKZ\/ggIARAOOqTAAAAQEICgPjz7QBOf4+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":162,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347252,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GLZAAD4GrSKsEAABwKgKMtd2AFApn+CAQgZdpYAQAOWqSgAAAQEICgE5\/j4D48+0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":122,"flow_packet_id":6,"flow_first_seen":1499347178540,"flow_last_seen":1499347183663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54430,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":122,"flow_packet_id":6,"flow_first_seen":1499347178540,"flow_last_seen":1499347183663,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54430,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":123,"flow_packet_id":6,"flow_first_seen":1499347181178,"flow_last_seen":1499347186665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54456,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":123,"flow_packet_id":6,"flow_first_seen":1499347181178,"flow_last_seen":1499347186665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54456,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":124,"flow_packet_id":6,"flow_first_seen":1499347182435,"flow_last_seen":1499347187664,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54470,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":124,"flow_packet_id":6,"flow_first_seen":1499347182435,"flow_last_seen":1499347187664,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54470,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":125,"flow_packet_id":6,"flow_first_seen":1499347183714,"flow_last_seen":1499347189665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54484,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":125,"flow_packet_id":6,"flow_first_seen":1499347183714,"flow_last_seen":1499347189665,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54484,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":126,"flow_packet_id":6,"flow_first_seen":1499347186286,"flow_last_seen":1499347191666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54510,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":126,"flow_packet_id":6,"flow_first_seen":1499347186286,"flow_last_seen":1499347191666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54510,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":127,"flow_packet_id":6,"flow_first_seen":1499347187548,"flow_last_seen":1499347192666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54524,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":127,"flow_packet_id":6,"flow_first_seen":1499347187548,"flow_last_seen":1499347192666,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54524,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1499347253445,"flow_last_seen":1499347253445,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55226,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347253,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uoZAAD4GC0qsEAABwKgKMte6AFBXtER6AAAAAKACchDqlAAAAgQFtAQCCAoBOf78AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":166,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347253,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ17p5Tes0V7REe6AScSCymwAAAgQFtAQCCAoD49ByATn+\/AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":166,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347253,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uodAAD4GC1GsEAABwKgKMte6AFBXtER7eU3rNYAQAOVRowAAAQEICgE5\/vwD49By","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":163,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347253,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JiZAAD4Gn7KsEAABwKgKMteEAFBjB9wtSrlvcoARAOVd4gAAAQEICgE5\/zgD48t+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":163,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347253,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0v91AAEAGA\/vAqAoyrBAAAQBQ14RKuW9yYwfcLoARAONYsgAAAQEICgPj0K8BOf84","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":163,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347253,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JidAAD4Gn7GsEAABwKgKMteEAFBjB9wuSrlvc4AQAOVYrwAAAQEICgE5\/zkD49Cv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":164,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347254,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0os1AAD4GIwusEAABwKgKMteSAFAC31mERhCvKoARAOUDXAAAAQEICgE6ADMD48y+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":164,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347254,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0foNAAEAGRVXAqAoyrBAAAQBQ15JGEK8qAt9ZhYARAOP+cQAAAQEICgPj0akBOgAz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":164,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347254,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0os5AAD4GIwqsEAABwKgKMteSAFAC31mFRhCvK4AQAOX+bwAAAQEICgE6ADMD49Gp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1499347254714,"flow_last_seen":1499347254714,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55240,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347254,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sPBAAD4GFOCsEAABwKgKMtfIAFAvObDJAAAAAKACchCldQAAAgQFtAQCCAoBOgA5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":167,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347254,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ18hpS4YpLzmwyqAScSDhSwAAAgQFtAQCCAoD49GwAToAOQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":167,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347254,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sPFAAD4GFOesEAABwKgKMtfIAFAvObDKaUuGKoAQAOWAUgAAAQEICgE6ADoD49Gw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1499347257224,"flow_last_seen":1499347257224,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55266,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347257,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MIRAAD4GlUysEAABwKgKMtfiAFCgDzIpAAAAAKACchCwsQAAAgQFtAQCCAoBOgKtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":168,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347257,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1+LmPUR7oA8yKqAScSCu0AAAAgQFtAQCCAoD49QjAToCrQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":168,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347257,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MIVAAD4GlVOsEAABwKgKMtfiAFCgDzIq5j1EfIAQAOVN2AAAAQEICgE6Aq0D49Qj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":165,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347257,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06RBAAD4G3MesEAABwKgKMtesAFDOJxTPqWjIzoARAOX6SwAAAQEICgE6AyED4882","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":165,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347257,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HFlAAEAGp3\/AqAoyrBAAAQBQ16ypaMjOzicU0IARAOP06wAAAQEICgPj1JcBOgMh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":165,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347257,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06RFAAD4G3MasEAABwKgKMtesAFDOJxTQqWjIz4AQAOX06QAAAQEICgE6AyED49SX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1499347258474,"flow_last_seen":1499347258474,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55280,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347258,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87xpAAD4G1rWsEAABwKgKMtfwAFBQ0ez\/AAAAAKACchBD0wAAAgQFtAQCCAoBOgPlAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":169,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347258,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1\/Cr4O+wUNHtAKAScSDP4AAAAgQFtAQCCAoD49VcAToD5QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":169,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347258,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07xtAAD4G1rysEAABwKgKMtfwAFBQ0e0Aq+DvsYAQAOVu5wAAAQEICgE6A+YD49Vc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":166,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347258,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uohAAD4GC1CsEAABwKgKMte6AFBXtER7eU3rNYARAOVMgwAAAQEICgE6BBsD49By","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":166,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347258,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PqRAAEAGhTTAqAoyrBAAAQBQ17p5Tes1V7REfIARAONHZQAAAQEICgPj1ZEBOgQb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":166,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347258,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uolAAD4GC0+sEAABwKgKMte6AFBXtER8eU3rNoAQAOVHYwAAAQEICgE6BBsD49WR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1499347259759,"flow_last_seen":1499347259759,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55294,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347259,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Xl9AAD4GZ3GsEAABwKgKMtf+AFDARlt4AAAAAKACchBklQAAAgQFtAQCCAoBOgUnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":170,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347259,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ1\/6Hgb3OwEZbeaAScSBFowAAAgQFtAQCCAoD49adAToFJwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":170,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347259,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XmBAAD4GZ3isEAABwKgKMtf+AFDARlt5h4G9z4AQAOXkqgAAAQEICgE6BScD49ad","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":167,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347260,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sPJAAD4GFOasEAABwKgKMtfIAFAvObDKaUuGKoARAOV6fAAAAQEICgE6Bg8D49Gw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":167,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347260,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Ua9AAEAGcinAqAoyrBAAAQBQ18hpS4YqLzmwy4ARAON0qAAAAQEICgPj14UBOgYP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":167,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347260,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sPNAAD4GFOWsEAABwKgKMtfIAFAvObDLaUuGK4AQAOV0pgAAAQEICgE6Bg8D49eF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1499347262289,"flow_last_seen":1499347262289,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55320,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347262,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ic9AAD4GPAGsEAABwKgKMtgYAFBS2I5QAAAAAKACchCcmQAAAgQFtAQCCAoBOgefAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":171,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347262,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2BhB\/tqnUtiOUaAScSCj2QAAAgQFtAQCCAoD49kVAToHnwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":171,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347262,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0idBAAD4GPAisEAABwKgKMtgYAFBS2I5RQf7aqIAQAOVC4QAAAQEICgE6B58D49kV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":168,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347262,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MIZAAD4GlVKsEAABwKgKMtfiAFCgDzIq5j1EfIARAOVIgQAAAQEICgE6CAMD49Qj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":168,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347262,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nQVAAEAGJtPAqAoyrBAAAQBQ1+LmPUR8oA8yK4ARAONDLAAAAQEICgPj2XkBOggD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":168,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347262,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MIdAAD4GlVGsEAABwKgKMtfiAFCgDzIr5j1EfYAQAOVDKgAAAQEICgE6CAMD49l5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":128,"flow_packet_id":6,"flow_first_seen":1499347188799,"flow_last_seen":1499347194667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54538,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":128,"flow_packet_id":6,"flow_first_seen":1499347188799,"flow_last_seen":1499347194667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54538,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":129,"flow_packet_id":6,"flow_first_seen":1499347190051,"flow_last_seen":1499347195667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54552,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":129,"flow_packet_id":6,"flow_first_seen":1499347190051,"flow_last_seen":1499347195667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54552,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":130,"flow_packet_id":6,"flow_first_seen":1499347191299,"flow_last_seen":1499347196667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54566,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":130,"flow_packet_id":6,"flow_first_seen":1499347191299,"flow_last_seen":1499347196667,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54566,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":131,"flow_packet_id":6,"flow_first_seen":1499347192547,"flow_last_seen":1499347197669,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54580,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":131,"flow_packet_id":6,"flow_first_seen":1499347192547,"flow_last_seen":1499347197669,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54580,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":132,"flow_packet_id":6,"flow_first_seen":1499347195099,"flow_last_seen":1499347200670,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":132,"flow_packet_id":6,"flow_first_seen":1499347195099,"flow_last_seen":1499347200670,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54606,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":133,"flow_packet_id":7,"flow_first_seen":1499347196341,"flow_last_seen":1499347201670,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54620,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":133,"flow_packet_id":7,"flow_first_seen":1499347196341,"flow_last_seen":1499347201670,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54620,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":134,"flow_packet_id":6,"flow_first_seen":1499347197627,"flow_last_seen":1499347202671,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54634,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":134,"flow_packet_id":6,"flow_first_seen":1499347197627,"flow_last_seen":1499347202671,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54634,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1499347263542,"flow_last_seen":1499347263542,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55334,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347263,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VDNAAD4GcZ2sEAABwKgKMtgmAFA8SlzqAAAAAKACchDjRQAAAgQFtAQCCAoBOgjZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":172,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347263,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2CaW4NetPEpc66AScSCXYwAAAgQFtAQCCAoD49pPAToI2QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":172,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347263,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDRAAD4GcaSsEAABwKgKMtgmAFA8SlzrluDXroAQAOU2awAAAQEICgE6CNkD49pP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":169,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347263,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07xxAAD4G1rusEAABwKgKMtfwAFBQ0e0Aq+DvsYARAOVpzwAAAQEICgE6CP0D49Vc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":169,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347263,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NcJAAEAGjhbAqAoyrBAAAQBQ1\/Cr4O+xUNHtAYARAONkuQAAAQEICgPj2nMBOgj9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":169,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347263,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07x1AAD4G1rqsEAABwKgKMtfwAFBQ0e0Bq+DvsoAQAOVktwAAAQEICgE6CP0D49pz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1499347264804,"flow_last_seen":1499347264804,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55348,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347264,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NPtAAD4GkNWsEAABwKgKMtg0AFDy7j7vAAAAAKACchBJUwAAAgQFtAQCCAoBOgoUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":173,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347264,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2DSLlcK98u4+8KAScSAccQAAAgQFtAQCCAoD49uKAToKFAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":173,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347264,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NPxAAD4GkNysEAABwKgKMtg0AFDy7j7wi5XCvoAQAOW7eAAAAQEICgE6ChQD49uK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":170,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347265,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XmFAAD4GZ3esEAABwKgKMtf+AFDARlt5h4G9z4ARAOXe3wAAAQEICgE6CvED49ad","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":170,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347265,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YadAAEAGYjHAqAoyrBAAAQBQ1\/6Hgb3PwEZbeoARAOPZFQAAAQEICgPj3GgBOgrx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":170,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347265,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XmJAAD4GZ3asEAABwKgKMtf+AFDARlt6h4G90IAQAOXZEgAAAQEICgE6CvID49xo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1499347266097,"flow_last_seen":1499347266097,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55362,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347266,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8FmFAAD4Gr2+sEAABwKgKMthCAFDvjR02AAAAAKACchBtHAAAAgQFtAQCCAoBOgtXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":174,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347266,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ELPgbsz740dN6AScSAClAAAAgQFtAQCCAoD49zOAToLVwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":174,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347266,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FmJAAD4Gr3asEAABwKgKMthCAFDvjR03z4G7NIAQAOWhmgAAAQEICgE6C1gD49zO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1499347267376,"flow_last_seen":1499347267376,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55376,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347267,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8e\/BAAD4GSeCsEAABwKgKMthQAFA8R3dnAAAAAKACchDE4wAAAgQFtAQCCAoBOgyXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":175,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347267,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2FDz+hz2PEd3aKAScSDS4AAAAgQFtAQCCAoD494NAToMlwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":175,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347267,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/FAAD4GSeesEAABwKgKMthQAFA8R3do8\/oc94AQAOVx6AAAAQEICgE6DJcD494N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":171,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347267,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0idFAAD4GPAesEAABwKgKMtgYAFBS2I5RQf7aqIARAOU9mQAAAQEICgE6DOYD49kV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":171,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347267,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BPRAAEAGvuTAqAoyrBAAAQBQ2BhB\/tqoUtiOUoARAOM4UwAAAQEICgPj3lwBOgzm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":171,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347267,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0idJAAD4GPAasEAABwKgKMtgYAFBS2I5SQf7aqYAQAOU4UQAAAQEICgE6DOYD495c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1499347268659,"flow_last_seen":1499347268659,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55390,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347268,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83S9AAD4G6KCsEAABwKgKMtheAFDSkdD3AAAAAKACchDTuQAAAgQFtAQCCAoBOg3YAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":176,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347268,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2F43lkso0pHQ+KAScSBuqAAAAgQFtAQCCAoD499OAToN2AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":176,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347268,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TBAAD4G6KesEAABwKgKMtheAFDSkdD4N5ZLKYAQAOUNsAAAAQEICgE6DdgD499O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":172,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347268,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDVAAD4GcaOsEAABwKgKMtgmAFA8SlzrluDXroARAOUxYwAAAQEICgE6DeAD49pP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":172,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347268,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CPhAAEAGuuDAqAoyrBAAAQBQ2CaW4NeuPEpc7IARAOMsXQAAAQEICgPj31YBOg3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":172,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347268,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDZAAD4GcaKsEAABwKgKMtgmAFA8SlzsluDXr4AQAOUsWwAAAQEICgE6DeAD499W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":173,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347270,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NP1AAD4GkNusEAABwKgKMtg0AFDy7j7wi5XCvoARAOW1twAAAQEICgE6D9QD49uK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":173,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347270,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0I\/RAAEAGn+TAqAoyrBAAAQBQ2DSLlcK+8u4+8YARAOOv+AAAAQEICgPj4UoBOg\/U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":173,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347270,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NP5AAD4GkNqsEAABwKgKMtg0AFDy7j7xi5XCv4AQAOWv9gAAAQEICgE6D9QD4+FK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1499347271162,"flow_last_seen":1499347271162,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55416,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347271,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86ilAAD4G26asEAABwKgKMth4AFDbDvpjAAAAAKACchCfRAAAAgQFtAQCCAoBOhBKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":177,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347271,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2HgbmHvT2w76ZKAScSAjFAAAAgQFtAQCCAoD4+HAAToQSgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":177,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347271,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ipAAD4G262sEAABwKgKMth4AFDbDvpkG5h71IAQAOXCGwAAAQEICgE6EEoD4+HA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":174,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347271,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FmNAAD4Gr3WsEAABwKgKMthCAFDvjR03z4G7NIARAOWcIwAAAQEICgE6EM4D49zO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":174,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347271,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WXBAAEAGamjAqAoyrBAAAQBQ2ELPgbs0740dOIARAOOWrgAAAQEICgPj4kQBOhDO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":174,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347271,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FmRAAD4Gr3SsEAABwKgKMthCAFDvjR04z4G7NYAQAOWWrAAAAQEICgE6EM4D4+JE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1499347272469,"flow_last_seen":1499347272469,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55430,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347272,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wnhAAD4GA1isEAABwKgKMtiGAFBxpNPoAAAAAKACchAt1gAAAgQFtAQCCAoBOhGQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":178,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347272,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2IbhJKqDcaTT6aAScSC8IQAAAgQFtAQCCAoD4+MHAToRkAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":178,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347272,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wnlAAD4GA1+sEAABwKgKMtiGAFBxpNPp4SSqhIAQAOVbKAAAAQEICgE6EZED4+MH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":175,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347272,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/JAAD4GSeasEAABwKgKMthQAFA8R3do8\/oc94ARAOVstgAAAQEICgE6EcgD494N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":175,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347272,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/8lAAEAGxA7AqAoyrBAAAQBQ2FDz+hz3PEd3aYARAONnhgAAAQEICgPj4z4BOhHI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":175,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347272,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/NAAD4GSeWsEAABwKgKMthQAFA8R3dp8\/oc+IAQAOVnhAAAAQEICgE6EcgD4+M+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":135,"flow_packet_id":6,"flow_first_seen":1499347200170,"flow_last_seen":1499347205672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54660,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":135,"flow_packet_id":6,"flow_first_seen":1499347200170,"flow_last_seen":1499347205672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54660,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":136,"flow_packet_id":6,"flow_first_seen":1499347201471,"flow_last_seen":1499347206672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54674,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":136,"flow_packet_id":6,"flow_first_seen":1499347201471,"flow_last_seen":1499347206672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54674,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":137,"flow_packet_id":6,"flow_first_seen":1499347202722,"flow_last_seen":1499347208672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54688,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":137,"flow_packet_id":6,"flow_first_seen":1499347202722,"flow_last_seen":1499347208672,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54688,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":138,"flow_packet_id":6,"flow_first_seen":1499347205214,"flow_last_seen":1499347210673,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54714,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":138,"flow_packet_id":6,"flow_first_seen":1499347205214,"flow_last_seen":1499347210673,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54714,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":139,"flow_packet_id":6,"flow_first_seen":1499347206497,"flow_last_seen":1499347211674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54728,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":139,"flow_packet_id":6,"flow_first_seen":1499347206497,"flow_last_seen":1499347211674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54728,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":176,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347273,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TFAAD4G6KasEAABwKgKMtheAFDSkdD4N5ZLKYARAOUIxQAAAQEICgE6EsID499O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":176,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347273,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rxFAAEAGFMfAqAoyrBAAAQBQ2F43lksp0pHQ+YARAOMD3AAAAQEICgPj5DgBOhLC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":176,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347273,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03TJAAD4G6KWsEAABwKgKMtheAFDSkdD5N5ZLKoAQAOUD2gAAAQEICgE6EsID4+Q4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1499347273742,"flow_last_seen":1499347273742,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55444,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347273,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8s+tAAD4GEeWsEAABwKgKMtiUAFBek6EkAAAAAKACchByXgAAAgQFtAQCCAoBOhLPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":179,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347273,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2JQ5PiSKXpOhJaAScSAtTAAAAgQFtAQCCAoD4+RFAToSzwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":179,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347273,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0s+xAAD4GEeysEAABwKgKMtiUAFBek6ElOT4ki4AQAOXMUwAAAQEICgE6Es8D4+RF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1499347276278,"flow_last_seen":1499347276278,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55470,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347276,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8RHhAAD4GgVisEAABwKgKMtiuAFAiVFExAAAAAKACchD7\/AAAAgQFtAQCCAoBOhVJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":180,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347276,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2K6190rBIlRRMqAScSARgAAAAgQFtAQCCAoD4+a\/AToVSQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":180,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347276,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RHlAAD4GgV+sEAABwKgKMtiuAFAiVFEytfdKwoAQAOWwhwAAAQEICgE6FUkD4+a\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":177,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347276,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06itAAD4G26ysEAABwKgKMth4AFDbDvpkG5h71IARAOW8tAAAAQEICgE6FbAD4+HA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":177,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347276,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nPJAAEAGJubAqAoyrBAAAQBQ2HgbmHvU2w76ZYARAOO3TwAAAQEICgPj5yYBOhWw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":177,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347276,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ixAAD4G26usEAABwKgKMth4AFDbDvplG5h71YAQAOW3TAAAAQEICgE6FbED4+cm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1499347277521,"flow_last_seen":1499347277521,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55484,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347277,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EvlAAD4GstesEAABwKgKMti8AFAjjgSGAAAAAKACchBGKgAAAgQFtAQCCAoBOhZ\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":181,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347277,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2LxShGbpI44Eh6AScSChwgAAAgQFtAQCCAoD4+f1AToWfwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":181,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347277,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvpAAD4Gst6sEAABwKgKMti8AFAjjgSHUoRm6oAQAOVAygAAAQEICgE6Fn8D4+f1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":178,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347277,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wnpAAD4GA16sEAABwKgKMtiGAFBxpNPp4SSqhIARAOVWDQAAAQEICgE6FqsD4+MH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":178,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347277,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QqVAAEAGgTPAqAoyrBAAAQBQ2IbhJKqEcaTT6oARAONQ9AAAAQEICgPj6CEBOhar","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":178,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347277,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wntAAD4GA12sEAABwKgKMtiGAFBxpNPq4SSqhYAQAOVQ8gAAAQEICgE6FqsD4+gh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":179,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347279,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0s+1AAD4GEeusEAABwKgKMtiUAFBek6ElOT4ki4ARAOXGggAAAQEICgE6GJ8D4+RF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":179,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347279,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zp5AAEAG9TnAqAoyrBAAAQBQ2JQ5PiSLXpOhJoARAOPAswAAAQEICgPj6hUBOhif","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":179,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347279,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0s+5AAD4GEeqsEAABwKgKMtiUAFBek6EmOT4kjIAQAOXAsQAAAQEICgE6GJ8D4+oV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1499347280049,"flow_last_seen":1499347280049,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55510,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347280,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qXBAAD4GHGCsEAABwKgKMtjWAFBVFLGHAAAAAKACchBlEAAAAgQFtAQCCAoBOhj3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":182,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347280,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2NbA11G6VRSxiKAScSBlDAAAAgQFtAQCCAoD4+ptAToY9wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":182,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347280,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qXFAAD4GHGesEAABwKgKMtjWAFBVFLGIwNdRu4AQAOUEEwAAAQEICgE6GPgD4+pt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1499347281325,"flow_last_seen":1499347281325,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55524,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347281,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8klhAAD4GM3isEAABwKgKMtjkAFB+h4huAAAAAKACchBjaQAAAgQFtAQCCAoBOho2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":183,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347281,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ORl6oVWfoeIb6AScSCJdwAAAgQFtAQCCAoD4+usAToaNgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":183,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347281,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kllAAD4GM3+sEAABwKgKMtjkAFB+h4hvZeqFV4AQAOUofwAAAQEICgE6GjYD4+us","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":180,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347281,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RHpAAD4GgV6sEAABwKgKMtiuAFAiVFEytfdKwoARAOWrPAAAAQEICgE6GpMD4+a\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":180,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347281,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pstAAEAGHQ3AqAoyrBAAAQBQ2K6190rCIlRRM4ARAOOl8wAAAQEICgPj7AkBOhqT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":180,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347281,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RHtAAD4GgV2sEAABwKgKMtiuAFAiVFEztfdKw4AQAOWl8QAAAQEICgE6GpMD4+wJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1499347282573,"flow_last_seen":1499347282573,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55538,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347282,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mj1AAD4GK5OsEAABwKgKMtjyAFDR4YFTAAAAAKACchAV5AAAAgQFtAQCCAoBOhtuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":184,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347282,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2PL\/kZOB0eGBVKAScSCS5gAAAgQFtAQCCAoD4+zlATobbgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":184,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347282,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mj5AAD4GK5qsEAABwKgKMtjyAFDR4YFU\/5GTgoAQAOUx7QAAAQEICgE6G28D4+zl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":181,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347282,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvtAAD4Gst2sEAABwKgKMti8AFAjjgSHUoRm6oARAOU7uwAAAQEICgE6G40D4+f1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":181,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347282,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i+lAAEAGN+\/AqAoyrBAAAQBQ2LxShGbqI44EiIARAOM2rgAAAQEICgPj7QMBOhuN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":181,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347282,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvxAAD4GstysEAABwKgKMti8AFAjjgSIUoRm64AQAOU2rAAAAQEICgE6G40D4+0D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":140,"flow_packet_id":6,"flow_first_seen":1499347207764,"flow_last_seen":1499347213674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54742,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":140,"flow_packet_id":6,"flow_first_seen":1499347207764,"flow_last_seen":1499347213674,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54742,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":141,"flow_packet_id":6,"flow_first_seen":1499347210270,"flow_last_seen":1499347215675,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54768,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":141,"flow_packet_id":6,"flow_first_seen":1499347210270,"flow_last_seen":1499347215675,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54768,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":142,"flow_packet_id":6,"flow_first_seen":1499347211522,"flow_last_seen":1499347216676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54782,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":142,"flow_packet_id":6,"flow_first_seen":1499347211522,"flow_last_seen":1499347216676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54782,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":143,"flow_packet_id":6,"flow_first_seen":1499347214088,"flow_last_seen":1499347219676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54808,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":143,"flow_packet_id":6,"flow_first_seen":1499347214088,"flow_last_seen":1499347219676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54808,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":144,"flow_packet_id":6,"flow_first_seen":1499347215361,"flow_last_seen":1499347220676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54822,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":144,"flow_packet_id":6,"flow_first_seen":1499347215361,"flow_last_seen":1499347220676,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54822,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":145,"flow_packet_id":6,"flow_first_seen":1499347216659,"flow_last_seen":1499347221677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54836,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":145,"flow_packet_id":6,"flow_first_seen":1499347216659,"flow_last_seen":1499347221677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54836,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1499347285114,"flow_last_seen":1499347285114,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55564,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347285,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AAxAAD4GxcSsEAABwKgKMtkMAFDF1B3mAAAAAKACchCCyAAAAgQFtAQCCAoBOh3qAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":185,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347285,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2Qzzh7fuxdQd56AScSDk7AAAAgQFtAQCCAoD4+9gATod6gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":185,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347285,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AA1AAD4GxcusEAABwKgKMtkMAFDF1B3n84e374AQAOWD9AAAAQEICgE6HeoD4+9g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":182,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347285,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qXJAAD4GHGasEAABwKgKMtjWAFBVFLGIwNdRu4ARAOX+jgAAAQEICgE6HnsD4+pt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":182,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347285,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vkpAAEAGBY7AqAoyrBAAAQBQ2NbA11G7VRSxiYARAOP5CwAAAQEICgPj7\/EBOh57","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":182,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347285,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qXNAAD4GHGWsEAABwKgKMtjWAFBVFLGJwNdRvIAQAOX5CQAAAQEICgE6HnsD4+\/x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1499347286403,"flow_last_seen":1499347286403,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55578,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347286,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8meVAAD4GK+usEAABwKgKMtkaAFAW6IbJAAAAAKACchDHgQAAAgQFtAQCCAoBOh8sAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":186,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347286,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2Rp9ePmhFuiGyqAScSBcwAAAAgQFtAQCCAoD4\/CiATofLAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":186,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347286,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0meZAAD4GK\/KsEAABwKgKMtkaAFAW6IbKfXj5ooAQAOX7xwAAAQEICgE6HywD4\/Ci","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":183,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347286,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0klpAAD4GM36sEAABwKgKMtjkAFB+h4hvZeqFV4ARAOUjPwAAAQEICgE6H3UD4+us","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":183,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347286,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dbxAAEAGThzAqAoyrBAAAQBQ2ORl6oVXfoeIcIARAOMeAQAAAQEICgPj8OsBOh91","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":183,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347286,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kltAAD4GM32sEAABwKgKMtjkAFB+h4hwZeqFWIAQAOUd\/wAAAQEICgE6H3UD4\/Dr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1499347287659,"flow_last_seen":1499347287659,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55592,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347287,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA814FAAD4G7k6sEAABwKgKMtkoAFDVWPfnAAAAAKACchCWqgAAAgQFtAQCCAoBOiBmAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":187,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347287,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2Sh6EWHG1Vj36KAScSDF8QAAAgQFtAQCCAoD4\/HcATogZgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":187,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347287,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA014JAAD4G7lWsEAABwKgKMtkoAFDVWPfoehFhx4AQAOVk+QAAAQEICgE6IGYD4\/Hc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":184,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347287,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mj9AAD4GK5msEAABwKgKMtjyAFDR4YFU\/5GTgoARAOUs7AAAAQEICgE6IG8D4+zl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":184,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347287,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YmdAAEAGYXHAqAoyrBAAAQBQ2PL\/kZOC0eGBVYARAOMn7QAAAQEICgPj8eUBOiBv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":184,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347287,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mkBAAD4GK5isEAABwKgKMtjyAFDR4YFV\/5GTg4AQAOUn6wAAAQEICgE6IG8D4\/Hl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1499347290163,"flow_last_seen":1499347290163,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55618,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347290,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D11AAD4GtnOsEAABwKgKMtlCAFDDfi2FAAAAAKACchBwWwAAAgQFtAQCCAoBOiLYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":188,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347290,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ULBAUn+w34thqAScSBuCAAAAgQFtAQCCAoD4\/ROAToi2AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":188,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347290,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D15AAD4GtnqsEAABwKgKMtlCAFDDfi2GwQFJ\/4AQAOUNEAAAAQEICgE6ItgD4\/RO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":185,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347290,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AA5AAD4GxcqsEAABwKgKMtkMAFDF1B3n84e374ARAOV+gAAAAQEICgE6I10D4+9g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":185,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347290,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QzxAAEAGgJzAqAoyrBAAAQBQ2Qzzh7fvxdQd6IARAON5DgAAAQEICgPj9NMBOiNd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":185,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347290,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AA9AAD4GxcmsEAABwKgKMtkMAFDF1B3o84e38IAQAOV5CwAAAQEICgE6I14D4\/TT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1499347291442,"flow_last_seen":1499347291442,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55632,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347291,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88hpAAD4G07WsEAABwKgKMtlQAFCuf9YCAAAAAKACchDbjgAAAgQFtAQCCAoBOiQYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":189,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347291,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2VCY8a8grn\/WA6AScSCa6QAAAgQFtAQCCAoD4\/WOATokGAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":189,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347291,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08htAAD4G07ysEAABwKgKMtlQAFCuf9YDmPGvIYAQAOU58QAAAQEICgE6JBgD4\/WO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":186,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347291,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0medAAD4GK\/GsEAABwKgKMtkaAFAW6IbKfXj5ooARAOX2mwAAAQEICgE6JFcD4\/Ci","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":186,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347291,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DG9AAEAGt2nAqAoyrBAAAQBQ2Rp9ePmiFuiGy4ARAOPxcQAAAQEICgPj9c0BOiRX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":186,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347291,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mehAAD4GK\/CsEAABwKgKMtkaAFAW6IbLfXj5o4AQAOXxbgAAAQEICgE6JFgD4\/XN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":187,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347292,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA014NAAD4G7lSsEAABwKgKMtkoAFDVWPfoehFhx4ARAOVgDQAAAQEICgE6JVED4\/Hc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":187,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347292,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lw9AAEAGLMnAqAoyrBAAAQBQ2Sh6EWHH1Vj36YARAONbIgAAAQEICgPj9sgBOiVR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":187,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347292,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA014RAAD4G7lOsEAABwKgKMtkoAFDVWPfpehFhyIAQAOVbHwAAAQEICgE6JVID4\/bI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1499347292725,"flow_last_seen":1499347292725,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55646,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347292,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Az5AAD4GwpKsEAABwKgKMtleAFDMWSZmAAAAAKACchBsAwAAAgQFtAQCCAoBOiVYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":190,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347292,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2V6LTEh8zFkmZ6AScSCeZwAAAgQFtAQCCAoD4\/bOATolWAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":190,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347292,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Az9AAD4GwpmsEAABwKgKMtleAFDMWSZni0xIfYAQAOU9bgAAAQEICgE6JVkD4\/bO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":146,"flow_packet_id":6,"flow_first_seen":1499347219208,"flow_last_seen":1499347224678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54862,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":146,"flow_packet_id":6,"flow_first_seen":1499347219208,"flow_last_seen":1499347224678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54862,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":147,"flow_packet_id":6,"flow_first_seen":1499347220447,"flow_last_seen":1499347225677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54876,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":147,"flow_packet_id":6,"flow_first_seen":1499347220447,"flow_last_seen":1499347225677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54876,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":148,"flow_packet_id":6,"flow_first_seen":1499347221694,"flow_last_seen":1499347227677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54890,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":148,"flow_packet_id":6,"flow_first_seen":1499347221694,"flow_last_seen":1499347227677,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54890,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":149,"flow_packet_id":6,"flow_first_seen":1499347224338,"flow_last_seen":1499347229678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54916,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":149,"flow_packet_id":6,"flow_first_seen":1499347224338,"flow_last_seen":1499347229678,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54916,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":150,"flow_packet_id":6,"flow_first_seen":1499347225590,"flow_last_seen":1499347230679,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54930,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":150,"flow_packet_id":6,"flow_first_seen":1499347225590,"flow_last_seen":1499347230679,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54930,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":113,"flow_packet_id":310,"flow_first_seen":1499347163177,"flow_last_seen":1499347230695,"flow_tot_l4_data_len":242594,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54268,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1499347295224,"flow_last_seen":1499347295224,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55672,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CihAAD4Gu6isEAABwKgKMtl4AFDbgS3hAAAAAKACchBS1QAAAgQFtAQCCAoBOifJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":191,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2XjDo5gx24Et4qAScSD6uwAAAgQFtAQCCAoD4\/k\/ATonyQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":191,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CilAAD4Gu6+sEAABwKgKMtl4AFDbgS3iw6OYMoAQAOWZwwAAAQEICgE6J8kD4\/k\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":189,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":651,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ98hxAAD4G0XKsEAABwKgKMtlQAFCuf9YDmPGvIYAYAOXWIAAAAQEICgE6J8oD4\/WOR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdKVUwyRDNXWEhFR1dSQUZKRTJQSTdPUzcxWjRaOFJGVUhYR05GTFVGWVZQNk0zT0w1NSUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":189,"flow_packet_id":4,"flow_first_seen":1499347291442,"flow_last_seen":1499347295227,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55632,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27JUL2D3WXHEGWRAFJE2PI7OS71Z4Z8RFUHXGNFLUFYVP6M3OL55%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0407{"flow_id":188,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D19AAD4GtnmsEAABwKgKMtlCAFDDfi2GwQFJ\/4ARAOUIHQAAAQEICgE6J8oD4\/RO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":189,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VmFAAEAGbXfAqAoyrBAAAQBQ2VCY8a8hrn\/YTIAQAOwwPQAAAQEICgPj+UABOifK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":188,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sL9AAEAGExnAqAoyrBAAAQBQ2ULBAUn\/w34th4ARAOMDLAAAAQEICgPj+UABOifK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":188,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D2BAAD4GtnisEAABwKgKMtlCAFDDfi2HwQFKAIAQAOUDKgAAAQEICgE6J8oD4\/lA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2934{"flow_id":189,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":1935,"pkt":"AMGxFOsxABm5CmnxCABFAAeBVmJAAEAGZinAqAoyrBAAAQBQ2VCY8a8hrn\/YTIAYAOx+XwAAAQEICgPj+UEBOifKSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIxOjM1IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNw0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWP9P2zgU\/xmk\/Q8+n3TAJOJ13G4bazNBSwdTGT3aAptOitzEbQ1OHGKnhf\/+np2kDV9LViRUHPt9+Ty\/5+f3\/Ga9\/kfrpNn\/2T1AEx0K1B3sd46aCG8Tcr7TJKTVb6GLw\/5xB9Wcd6inE+5rQg5+YIQnWse7hMxmM2e248hkTPqn5MZIqRm2fLitLI8T6AC7b9bfrNetnptQRKrxiIza58+fM9aMfK0+YTSA4dpaPWSaIsOyza5TPm3gpow0i\/R2\/zZmGPnZVwNrdqOJEfEF+ROaKKYbg357+xNGJJO5VtdcC+aepSJiCR1ywfXtLjplI8F8zQLUTKRSqMc1Qz0\/4bHm0RhtXvR6W2h3F7VoGKGCVzB0zoZoL44F96nmMkKbrbPzvS00rTm1d+hti02ZkHEI0N7WSaY4RyF4dIUSJhpY6VvB1IQxjZEGa3IjfKUwmiRs1MCOQ+AvmM6omSUh5ZFjl8lDaRy2opDzHw\/pmBGYuitpRKeGzLELcxnKWluGcEmnNJvFSCX+HSCXyv7vggLnUmG3TjLK3HMkd50ZD2Vwi3xBlfG6DBnOXBrwKeJBAxvfgUUsyb1eWjJCSvNrdR6OHyCxRioi5Fg6cTTGiAoIhCWOWtgNWEHdA9Vmkz1wXFrS\/mDNi2kQsCAzCAhSUdhpVveF9K\/M1giOZOSD6qsGnvEokDMHliyOxkZmibOBC1ZgoHfc5WD3ELatTijssuDu+ksE8ghOX+qbKeXEk\/gZ+fdJsXtUmqmmFg5cGi\/RN6fBbs8MEYHjB5OotV9SRlLhrrCh09L55hAewyTVjDyD6nEG7O6b\/6gtE7+iB+4LZDfMrwLA0mO3KcOQRgE6ii6Z9chqKHyVjKqgsPSAonfaXk3xiBPnawxHtcGBMw3Ykih5ET922xwO95GZUSvvTRoLSYMqu5Nz5DAG9mtF\/9BYw81VyUU5iz23zE8Thpp73X7zcG81KOpa8Co4LD2c6X87rxWsRqI3hMutklNKXPfQoM19M721GqoZo1cerwSpYMHuOYxQjykTreioVTG93pd7o5RXCUjGgF2oZ6BWOTlecSuMuKSkX7GsinoRjqTAMS++XgGNqrobqkDR0zK5C2HFK8ieRagul16HCzLsmvoR4iObqrYdwM+jkVyirkSF3e5hF07HSFZTRIcy1UvUzGmwu2eGr7etptBbqn5BhN2OHd8DkFdsd2q\/pwtBU8IuCkHoZMxqrtuslQvB+qT2O90FlMy1vGAuCZ\/OK1jPlwHzaMJoXj+PZBKiiIZQrQM\/lL02xTXwnxhBtzSRgP3bQT+vTetxbvH5hOoNhW5lmljmr0VlHcVpufjHuWjzO69vy0QqHYYcyKZUpPDZyz5zbSR2s6aCGJQZ3jhh7iETQqK81XCh8ldSMPDweHPj+6DzvrVzfnF48O38dK\/9\/eB99+jjSe9j7dffvz6dtgeHF99+tDuD9s+z7j\/HOyedDx82tr6UJQTST02n5fhSXnG29WXekgCchFnXLDxcn7x3j+HA2\/BPQppdVjBp1vL4gGhcxJVpPlXesMoZVbHtWSFE2Y0JM2I9u63As97cs571LLRjNBlDJ4rhVqLRFXZ\/X9Y8iivjA24PqhTNEu8A2jow12tCf6W9Xt56VsT4vLzlOFnkzPgVj1nAqRVtvsqWq8Lyp7G9XMbzeHIz\/TGfJ2NfhuZ62B7Ra8c+STwK4gWML9Kc4aSCJbpmJTyr7gF1WUee3bJQLzrXYQL9bvZbpLAnUl6ed3zBaDI\/zY\/lRXWrNAs9c5c8mh+Gqdamz87zwxlnMwTHP57n7FjGaewVZDJqZll\/8eiwCxSDeBM9cdtPQaI3AYkmHL8CJFtT\/FU4oiHkbANtYRcthdWDZOiz1wWmrMyl0MxuUsHHkLcFG0H+rLPQHSiWmLy7WyfwhWgQ8ih3IXwXxQHqmNelnAYkLijgVj9q9fKVgCtzfQSFF5906EhKfeexJXZXee2KH7tWywmYmIszexe0L3bu\/6vxR0WSFAAA","pkt_caplen":1935,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":189,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347295,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08h1AAD4G07qsEAABwKgKMtlQAFCuf9hMmPG2boAQAQIo2AAAAQEICgE6J8sD4\/lB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":189,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":189,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":189,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08h9AAD4G07isEAABwKgKMtlQAFCuf9nLmPG9WIAQAR0eXAAAAQEICgE6KMcD4\/o9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1499347296462,"flow_last_seen":1499347296462,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55686,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TjBAAD4Gd6CsEAABwKgKMtmGAFCTXWbOAAAAAKACchBgyQAAAgQFtAQCCAoBOij+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":192,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2YaJqN5wk11mz6AScSD7NQAAAgQFtAQCCAoD4\/p1AToo\/gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":192,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TjFAAD4Gd6esEAABwKgKMtmGAFCTXWbPiajecYAQAOWaPAAAAQEICgE6KP8D4\/p1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":189,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2947{"flow_id":189,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":189,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347296,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08iFAAD4G07asEAABwKgKMtlQAFCuf9wUmPHEpIAQATsUNwAAAQEICgE6KQAD4\/p2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0921{"flow_id":189,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347297,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2793{"flow_id":189,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347297,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1499347297732,"flow_last_seen":1499347297732,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55700,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347297,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LW1AAD4GmGOsEAABwKgKMtmUAFB7SgdRAAAAAKACchDXDQAAAgQFtAQCCAoBOio8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":193,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347297,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ZST\/kF5e0oHUqAScSAC3wAAAgQFtAQCCAoD4\/uyAToqPAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":193,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347297,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LW5AAD4GmGqsEAABwKgKMtmUAFB7SgdSk\/5BeoAQAOWh5gAAAQEICgE6KjwD4\/uy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":190,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347298,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A0BAAD4GwpisEAABwKgKMtleAFDMWSZni0xIfYARAOU3mAAAAQEICgE6Ky4D4\/bO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":190,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347298,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tNlAAEAGDv\/AqAoyrBAAAQBQ2V6LTEh9zFkmaIARAOMxwwAAAQEICgPj\/KQBOisu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":190,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347298,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A0FAAD4GwpesEAABwKgKMtleAFDMWSZoi0xIfoAQAOUxwQAAAQEICgE6Ky4D4\/yk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1499347300263,"flow_last_seen":1499347300263,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55726,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347300,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bohAAD4GV0isEAABwKgKMtmuAFBvk0I9AAAAAKACchClRQAAAgQFtAQCCAoBOiy1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":194,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347300,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2a7Gy0E5b5NCPqAScSCcEAAAAgQFtAQCCAoD4\/4rATostQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":194,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347300,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bolAAD4GV0+sEAABwKgKMtmuAFBvk0I+xstBOoAQAOU7GAAAAQEICgE6LLUD4\/4r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":191,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347300,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CipAAD4Gu66sEAABwKgKMtl4AFDbgS3iw6OYMoARAOWUaQAAAQEICgE6LSID4\/k\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":191,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347300,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZqpAAEAGXS7AqAoyrBAAAQBQ2XjDo5gy24Et44ARAOOPEQAAAQEICgPj\/pgBOi0i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":191,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347300,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CitAAD4Gu62sEAABwKgKMtl4AFDbgS3jw6OYM4AQAOWPDwAAAQEICgE6LSID4\/6Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1499347301520,"flow_last_seen":1499347301520,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55740,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347301,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80Q9AAD4G9MCsEAABwKgKMtm8AFCdpvzgAAAAAKACchC7RgAAAgQFtAQCCAoBOi3vAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":195,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347301,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2bw9W3Mnnab84aAScSAIWgAAAgQFtAQCCAoD4\/9lATot7wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":195,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347301,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00RBAAD4G9MesEAABwKgKMtm8AFCdpvzhPVtzKIAQAOWnYQAAAQEICgE6Le8D4\/9l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":192,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347301,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TjJAAD4Gd6asEAABwKgKMtmGAFCTXWbPiajecYARAOWVHgAAAQEICgE6LhwD4\/p1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":192,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347301,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IeNAAEAGofXAqAoyrBAAAQBQ2YaJqN5xk11m0IARAOOQAgAAAQEICgPj\/5IBOi4c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":192,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347301,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TjNAAD4Gd6WsEAABwKgKMtmGAFCTXWbQiajecoAQAOWQAAAAAQEICgE6LhwD4\/+S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":193,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347303,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LW9AAD4GmGmsEAABwKgKMtmUAFB7SgdSk\/5BeoARAOWcEQAAAQEICgE6MBAD4\/uy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":193,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347303,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QPxAAEAGgtzAqAoyrBAAAQBQ2ZST\/kF6e0oHU4ARAOOWPgAAAQEICgPkAYYBOjAQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":193,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347303,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LXBAAD4GmGisEAABwKgKMtmUAFB7SgdTk\/5Be4AQAOWWPAAAAQEICgE6MBAD5AGG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":152,"flow_packet_id":6,"flow_first_seen":1499347229416,"flow_last_seen":1499347234681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54970,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":152,"flow_packet_id":6,"flow_first_seen":1499347229416,"flow_last_seen":1499347234681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54970,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":153,"flow_packet_id":6,"flow_first_seen":1499347230690,"flow_last_seen":1499347236682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54984,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":153,"flow_packet_id":6,"flow_first_seen":1499347230690,"flow_last_seen":1499347236682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54984,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":154,"flow_packet_id":6,"flow_first_seen":1499347233219,"flow_last_seen":1499347238682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55010,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":154,"flow_packet_id":6,"flow_first_seen":1499347233219,"flow_last_seen":1499347238682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55010,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":155,"flow_packet_id":6,"flow_first_seen":1499347234469,"flow_last_seen":1499347239682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55024,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":155,"flow_packet_id":6,"flow_first_seen":1499347234469,"flow_last_seen":1499347239682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55024,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":156,"flow_packet_id":6,"flow_first_seen":1499347235716,"flow_last_seen":1499347241682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55038,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":156,"flow_packet_id":6,"flow_first_seen":1499347235716,"flow_last_seen":1499347241682,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55038,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":157,"flow_packet_id":6,"flow_first_seen":1499347238260,"flow_last_seen":1499347243683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55064,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":157,"flow_packet_id":6,"flow_first_seen":1499347238260,"flow_last_seen":1499347243683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55064,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1499347304125,"flow_last_seen":1499347304125,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55766,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347304,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hKxAAD4GQSSsEAABwKgKMtnWAFBzErTWAAAAAKACchArQAAAAgQFtAQCCAoBOjB6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":196,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347304,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2dawo5LBcxK016AScSDi5QAAAgQFtAQCCAoD5AHwATowegEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":196,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347304,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK1AAD4GQSusEAABwKgKMtnWAFBzErTXsKOSwoAQAOWB7AAAAQEICgE6MHsD5AHw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1499347305402,"flow_last_seen":1499347305402,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55780,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347305,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z+xAAD4GXeSsEAABwKgKMtnkAFD8k1ZWAAAAAKACchD+8AAAAgQFtAQCCAoBOjG6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":197,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347305,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2eSBOT6p\/JNWV6AScSA42QAAAgQFtAQCCAoD5AMwAToxugEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":197,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347305,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z+1AAD4GXeusEAABwKgKMtnkAFD8k1ZXgTk+qoAQAOXX4AAAAQEICgE6MboD5AMw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":194,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347305,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bopAAD4GV06sEAABwKgKMtmuAFBvk0I+xstBOoARAOU1yAAAAQEICgE6MgQD4\/4r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":194,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347305,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QkBAAEAGgZjAqAoyrBAAAQBQ2a7Gy0E6b5NCP4ARAOMwegAAAQEICgPkA3oBOjIE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":194,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347305,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0botAAD4GV02sEAABwKgKMtmuAFBvk0I\/xstBO4AQAOUweAAAAQEICgE6MgQD5AN6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1499347306680,"flow_last_seen":1499347306680,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55794,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347306,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8t61AAD4GDiOsEAABwKgKMtnyAFBPt4VUAAAAAKACchB7ggAAAgQFtAQCCAoBOjL5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":198,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347306,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2fJOMjqdT7eFVaAScSDrPgAAAgQFtAQCCAoD5ARvAToy+QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":198,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347306,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t65AAD4GDiqsEAABwKgKMtnyAFBPt4VVTjI6noAQAOWKRgAAAQEICgE6MvkD5ARv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":195,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347306,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00RFAAD4G9MasEAABwKgKMtm8AFCdpvzhPVtzKIARAOWiUQAAAQEICgE6Mv4D4\/9l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":195,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347306,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0d1xAAEAGTHzAqAoyrBAAAQBQ2bw9W3Monab84oARAOOdQwAAAQEICgPkBHQBOjL+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":195,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347306,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00RJAAD4G9MWsEAABwKgKMtm8AFCdpvziPVtzKYAQAOWdQAAAAQEICgE6Mv8D5AR0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1499347309314,"flow_last_seen":1499347309314,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55820,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347309,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8V4pAAD4GbkasEAABwKgKMtoMAFADiWIGAAAAAKACchDoUQAAAgQFtAQCCAoBOjWMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":199,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347309,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2gztcSluA4liB6AScSDHagAAAgQFtAQCCAoD5AcCATo1jAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":199,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347309,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4tAAD4Gbk2sEAABwKgKMtoMAFADiWIH7XEpb4AQAOVmcgAAAQEICgE6NYwD5AcC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":196,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347309,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK5AAD4GQSqsEAABwKgKMtnWAFBzErTXsKOSwoARAOV8eQAAAQEICgE6Ne0D5AHw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":196,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347309,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0laFAAEAGLjfAqAoyrBAAAQBQ2dawo5LCcxK02IARAON3BwAAAQEICgPkB2MBOjXt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":196,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347309,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK9AAD4GQSmsEAABwKgKMtnWAFBzErTYsKOSw4AQAOV3BQAAAQEICgE6Ne0D5Adj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1499347310567,"flow_last_seen":1499347310567,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55834,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347310,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8riNAAD4GF62sEAABwKgKMtoaAFDhF5jmAAAAAKACchDSmwAAAgQFtAQCCAoBOjbFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":200,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347310,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2hoggEnh4ReY56AScSBc+gAAAgQFtAQCCAoD5Ag7ATo2xQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":200,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347310,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0riRAAD4GF7SsEAABwKgKMtoaAFDhF5jnIIBJ4oAQAOX8AQAAAQEICgE6NsUD5Ag7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":197,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347310,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z+5AAD4GXeqsEAABwKgKMtnkAFD8k1ZXgTk+qoARAOXSsgAAAQEICgE6NucD5AMw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":197,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347310,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NvdAAEAGjOHAqAoyrBAAAQBQ2eSBOT6q\/JNWWIARAOPNhgAAAQEICgPkCF0BOjbn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":197,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347310,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z+9AAD4GXemsEAABwKgKMtnkAFD8k1ZYgTk+q4AQAOXNhAAAAQEICgE6NucD5Ahd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":198,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347311,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t69AAD4GDimsEAABwKgKMtnyAFBPt4VVTjI6noARAOWFXQAAAQEICgE6N+ED5ARv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":198,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347311,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0M8lAAEAGkA\/AqAoyrBAAAQBQ2fJOMjqeT7eFVoARAOOAdgAAAQEICgPkCVcBOjfh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":198,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347311,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t7BAAD4GDiisEAABwKgKMtnyAFBPt4VWTjI6n4AQAOWAdAAAAQEICgE6N+ED5AlX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1499347313106,"flow_last_seen":1499347313106,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55860,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347313,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80LNAAD4G9RysEAABwKgKMto0AFBr7OnzAAAAAKACchD0JAAAAgQFtAQCCAoBOjlAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":201,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347313,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2jRgNfxEa+zp9KAScSCJ7wAAAgQFtAQCCAoD5Aq2ATo5QAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":201,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347313,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00LRAAD4G9SOsEAABwKgKMto0AFBr7On0YDX8RYAQAOUo9wAAAQEICgE6OUAD5Aq2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":158,"flow_packet_id":6,"flow_first_seen":1499347239517,"flow_last_seen":1499347244683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55078,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":158,"flow_packet_id":6,"flow_first_seen":1499347239517,"flow_last_seen":1499347244683,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55078,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":159,"flow_packet_id":6,"flow_first_seen":1499347240786,"flow_last_seen":1499347246684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55092,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":159,"flow_packet_id":6,"flow_first_seen":1499347240786,"flow_last_seen":1499347246684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55092,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":160,"flow_packet_id":6,"flow_first_seen":1499347243333,"flow_last_seen":1499347248684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55118,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":160,"flow_packet_id":6,"flow_first_seen":1499347243333,"flow_last_seen":1499347248684,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55118,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":161,"flow_packet_id":6,"flow_first_seen":1499347244580,"flow_last_seen":1499347249685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55132,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":161,"flow_packet_id":6,"flow_first_seen":1499347244580,"flow_last_seen":1499347249685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55132,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":162,"flow_packet_id":6,"flow_first_seen":1499347247114,"flow_last_seen":1499347252685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":162,"flow_packet_id":6,"flow_first_seen":1499347247114,"flow_last_seen":1499347252685,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55158,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":163,"flow_packet_id":6,"flow_first_seen":1499347248373,"flow_last_seen":1499347253687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55172,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":163,"flow_packet_id":6,"flow_first_seen":1499347248373,"flow_last_seen":1499347253687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55172,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1499347314358,"flow_last_seen":1499347314358,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55874,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347314,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wpZAAD4GAzqsEAABwKgKMtpCAFAntfjvAAAAAKACchAoGQAAAgQFtAQCCAoBOjp5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":202,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347314,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2kLsSHY8J7X48KAScSC2nwAAAgQFtAQCCAoD5AvvATo6eQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":202,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347314,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wpdAAD4GA0GsEAABwKgKMtpCAFAntfjw7Eh2PYAQAOVVpwAAAQEICgE6OnkD5Avv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":199,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347314,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4xAAD4GbkysEAABwKgKMtoMAFADiWIH7XEpb4ARAOVhLgAAAQEICgE6Os8D5AcC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":199,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347314,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JSpAAEAGnq7AqAoyrBAAAQBQ2gztcSlvA4liCIARAONb7AAAAQEICgPkDEUBOjrP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":199,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347314,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V41AAD4GbkusEAABwKgKMtoMAFADiWII7XEpcIAQAOVb6gAAAQEICgE6Os8D5AxF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1499347315631,"flow_last_seen":1499347315631,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55888,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347315,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8y+VAAD4G+eqsEAABwKgKMtpQAFAKdfBSAAAAAKACchBMqgAAAgQFtAQCCAoBOju3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":203,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347315,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2lDsZegJCnXwU6AScSBoCAAAAgQFtAQCCAoD5A0tATo7twEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":203,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347315,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0y+ZAAD4G+fGsEAABwKgKMtpQAFAKdfBT7GXoCoAQAOUHEAAAAQEICgE6O7cD5A0t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":200,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347315,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0riVAAD4GF7OsEAABwKgKMtoaAFDhF5jnIIBJ4oARAOX2\/AAAAQEICgE6O8kD5Ag7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":200,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347315,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RN1AAEAGfvvAqAoyrBAAAQBQ2hoggEni4ReY6IARAOPx+QAAAQEICgPkDT8BOjvJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":200,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347315,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0riZAAD4GF7KsEAABwKgKMtoaAFDhF5joIIBJ44AQAOXx9wAAAQEICgE6O8kD5A0\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1499347318180,"flow_last_seen":1499347318180,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55914,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347318,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81llAAD4G73asEAABwKgKMtpqAFAYI+htAAAAAKACchBESgAAAgQFtAQCCAoBOj40AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":204,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347318,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2mqVHZfsGCPobqAScSAEkQAAAgQFtAQCCAoD5A+qATo+NAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":204,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347318,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01lpAAD4G732sEAABwKgKMtpqAFAYI+hulR2X7YAQAOWjmAAAAQEICgE6PjQD5A+q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":201,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347318,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00LVAAD4G9SKsEAABwKgKMto0AFBr7On0YDX8RYARAOUjfwAAAQEICgE6PrcD5Aq2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":201,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347318,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07GhAAEAG12\/AqAoyrBAAAQBQ2jRgNfxFa+zp9YARAOMeCQAAAQEICgPkEC0BOj63","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":201,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347318,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00LZAAD4G9SGsEAABwKgKMto0AFBr7On1YDX8RoAQAOUeBwAAAQEICgE6PrcD5BAt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1499347319466,"flow_last_seen":1499347319466,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55928,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347319,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vPhAAD4GCNisEAABwKgKMtp4AFBaBoOOAAAAAKACchBl9gAAAgQFtAQCCAoBOj92AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":205,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347319,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2ni9VjICWgaDj6AScSBirAAAAgQFtAQCCAoD5BDsATo\/dgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":205,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347319,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vPlAAD4GCN+sEAABwKgKMtp4AFBaBoOPvVYyA4AQAOUBtAAAAQEICgE6P3YD5BDs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":202,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347319,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wphAAD4GA0CsEAABwKgKMtpCAFAntfjw7Eh2PYARAOVQbgAAAQEICgE6P7ED5Avv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":202,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347319,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZxpAAEAGXL7AqAoyrBAAAQBQ2kLsSHY9J7X48YARAONLNwAAAQEICgPkEScBOj+x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":202,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347319,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wplAAD4GAz+sEAABwKgKMtpCAFAntfjx7Eh2PoAQAOVLNQAAAQEICgE6P7ED5BEn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":203,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347320,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0y+dAAD4G+fCsEAABwKgKMtpQAFAKdfBT7GXoCoARAOUCGwAAAQEICgE6QKsD5A0t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":203,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347320,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+itAAEAGyazAqAoyrBAAAQBQ2lDsZegKCnXwVIARAOP9JwAAAQEICgPkEiEBOkCr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":203,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347320,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0y+hAAD4G+e+sEAABwKgKMtpQAFAKdfBU7GXoC4AQAOX9JQAAAQEICgE6QKsD5BIh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1499347320712,"flow_last_seen":1499347320712,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55942,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347320,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tK5AAD4GESKsEAABwKgKMtqGAFAqvPQDAAAAAKACchAjhgAAAgQFtAQCCAoBOkCtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":206,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347320,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2oZaSFgWKrz0BKAScSBb\/wAAAgQFtAQCCAoD5BIjATpArQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":206,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347320,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tK9AAD4GESmsEAABwKgKMtqGAFAqvPQEWkhYF4AQAOX7BgAAAQEICgE6QK0D5BIj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1499347323234,"flow_last_seen":1499347323234,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55968,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347323,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CttAAD4GuvWsEAABwKgKMtqgAFDxkUn\/AAAAAKACchAEJAAAAgQFtAQCCAoBOkMkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":207,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347323,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2qDnEfYn8ZFKAKAScSAPSwAAAgQFtAQCCAoD5BSaATpDJAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":207,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347323,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CtxAAD4GuvysEAABwKgKMtqgAFDxkUoA5xH2KIAQAOWuUgAAAQEICgE6QyQD5BSa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":204,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347323,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01ltAAD4G73ysEAABwKgKMtpqAFAYI+hulR2X7YARAOWeMgAAAQEICgE6Q5kD5A+q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":204,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347323,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0guJAAEAGQPbAqAoyrBAAAQBQ2mqVHZftGCPob4ARAOOYzgAAAQEICgPkFQ8BOkOZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":204,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347323,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01lxAAD4G73usEAABwKgKMtpqAFAYI+hvlR2X7oAQAOWYzAAAAQEICgE6Q5kD5BUP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":164,"flow_packet_id":6,"flow_first_seen":1499347249651,"flow_last_seen":1499347254687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55186,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":164,"flow_packet_id":6,"flow_first_seen":1499347249651,"flow_last_seen":1499347254687,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55186,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":165,"flow_packet_id":6,"flow_first_seen":1499347252179,"flow_last_seen":1499347257688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55212,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":165,"flow_packet_id":6,"flow_first_seen":1499347252179,"flow_last_seen":1499347257688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55212,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":166,"flow_packet_id":6,"flow_first_seen":1499347253445,"flow_last_seen":1499347258688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55226,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":166,"flow_packet_id":6,"flow_first_seen":1499347253445,"flow_last_seen":1499347258688,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55226,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":167,"flow_packet_id":6,"flow_first_seen":1499347254714,"flow_last_seen":1499347260689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55240,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":167,"flow_packet_id":6,"flow_first_seen":1499347254714,"flow_last_seen":1499347260689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55240,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":168,"flow_packet_id":6,"flow_first_seen":1499347257224,"flow_last_seen":1499347262689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55266,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":168,"flow_packet_id":6,"flow_first_seen":1499347257224,"flow_last_seen":1499347262689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55266,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":169,"flow_packet_id":6,"flow_first_seen":1499347258474,"flow_last_seen":1499347263689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55280,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":169,"flow_packet_id":6,"flow_first_seen":1499347258474,"flow_last_seen":1499347263689,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55280,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1499347324538,"flow_last_seen":1499347324538,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55982,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347324,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uCpAAD4GDaasEAABwKgKMtquAFARp\/xAAAAAAKACchAweQAAAgQFtAQCCAoBOkRqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":208,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347324,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2q5SOt2REaf8QaAScSDnxwAAAgQFtAQCCAoD5BXgATpEagEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":208,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347324,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uCtAAD4GDa2sEAABwKgKMtquAFARp\/xBUjrdkoAQAOWGzwAAAQEICgE6RGoD5BXg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":205,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347324,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vPpAAD4GCN6sEAABwKgKMtp4AFBaBoOPvVYyA4ARAOX8lQAAAQEICgE6RJMD5BDs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":205,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347324,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JApAAEAGn87AqAoyrBAAAQBQ2ni9VjIDWgaDkIARAOP3eQAAAQEICgPkFgkBOkST","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":205,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347324,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vPtAAD4GCN2sEAABwKgKMtp4AFBaBoOQvVYyBIAQAOX3dgAAAQEICgE6RJQD5BYJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1499347325777,"flow_last_seen":1499347325777,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55996,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347325,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8C\/ZAAD4GudqsEAABwKgKMtq8AFA4wE5pAAAAAKACchC19AAAAgQFtAQCCAoBOkWfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":209,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347325,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2rxxlybyOMBOaqAScSADUQAAAgQFtAQCCAoD5BcVATpFnwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":209,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347325,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C\/dAAD4GueGsEAABwKgKMtq8AFA4wE5qcZcm84AQAOWiVwAAAQEICgE6RaAD5BcV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":206,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347326,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tLBAAD4GESisEAABwKgKMtqGAFAqvPQEWkhYF4ARAOX1KwAAAQEICgE6RocD5BIj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":206,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347326,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T+pAAEAGc+7AqAoyrBAAAQBQ2oZaSFgXKrz0BYARAOPvUgAAAQEICgPkF\/0BOkaH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":206,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347326,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tLFAAD4GESesEAABwKgKMtqGAFAqvPQFWkhYGIAQAOXvTwAAAQEICgE6RogD5Bf9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1499347328298,"flow_last_seen":1499347328298,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56022,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347328,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K4RAAD4GmkysEAABwKgKMtrWAFBZCmOSAAAAAKACchB98AAAAgQFtAQCCAoBOkgWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":210,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347328,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2tYFgFaJWQpjk6AScSAFVgAAAgQFtAQCCAoD5BmMATpIFgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":210,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347328,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K4VAAD4GmlOsEAABwKgKMtrWAFBZCmOTBYBWioAQAOWkXQAAAQEICgE6SBYD5BmM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":207,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347328,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ct1AAD4GuvusEAABwKgKMtqgAFDxkUoA5xH2KIARAOWo+gAAAQEICgE6SHsD5BSa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":207,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347328,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA079lAAEAG0\/7AqAoyrBAAAQBQ2qDnEfYo8ZFKAYARAOOjpAAAAQEICgPkGfEBOkh7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":207,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347328,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ct5AAD4GuvqsEAABwKgKMtqgAFDxkUoB5xH2KYAQAOWjoQAAAQEICgE6SHwD5Bnx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1499347329594,"flow_last_seen":1499347329594,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56036,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347329,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8olxAAD4GI3SsEAABwKgKMtrkAFD4u+sGAAAAAKACchBVeAAAAgQFtAQCCAoBOklaAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":211,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347329,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2uSvjPx7+LvrB6AScSCLmgAAAgQFtAQCCAoD5BrQATpJWgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":211,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347329,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ol1AAD4GI3usEAABwKgKMtrkAFD4u+sHr4z8fIAQAOUqogAAAQEICgE6SVoD5BrQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":208,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347329,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uCxAAD4GDaysEAABwKgKMtquAFARp\/xBUjrdkoARAOWBwwAAAQEICgE6SXUD5BXg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":208,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347329,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0x3lAAEAG\/F7AqAoyrBAAAQBQ2q5SOt2SEaf8QoARAON8uQAAAQEICgPkGusBOkl1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":208,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347329,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uC1AAD4GDausEAABwKgKMtquAFARp\/xCUjrdk4AQAOV8tgAAAQEICgE6SXYD5Brr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":209,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347331,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C\/hAAD4GueCsEAABwKgKMtq8AFA4wE5qcZcm84ARAOWcjAAAAQEICgE6S2oD5BcV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":209,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347331,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OhNAAEAGicXAqAoyrBAAAQBQ2rxxlybzOMBOa4ARAOOWwgAAAQEICgPkHOABOktq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":209,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347331,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C\/lAAD4Gud+sEAABwKgKMtq8AFA4wE5rcZcm9IAQAOWWwAAAAQEICgE6S2oD5Bzg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1499347332137,"flow_last_seen":1499347332137,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56062,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347332,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hpdAAD4GPzmsEAABwKgKMtr+AFAKS81CAAAAAKACchBfGAAAAgQFtAQCCAoBOkvVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":212,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347332,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2v58hG58CkvNQ6AScSBTxwAAAgQFtAQCCAoD5B1LATpL1QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":212,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347332,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hphAAD4GP0CsEAABwKgKMtr+AFAKS81DfIRufYAQAOXyzQAAAQEICgE6S9YD5B1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1499347333419,"flow_last_seen":1499347333419,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56076,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347333,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bENAAD4GWY2sEAABwKgKMtsMAFCNWiFVAAAAAKACchCGpwAAAgQFtAQCCAoBOk0WAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":213,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347333,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2wzHhupcjVohVqAScSCzMgAAAgQFtAQCCAoD5B6MATpNFgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":213,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347333,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bERAAD4GWZSsEAABwKgKMtsMAFCNWiFWx4bqXYAQAOVSOgAAAQEICgE6TRYD5B6M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":210,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347333,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K4ZAAD4GmlKsEAABwKgKMtrWAFBZCmOTBYBWioARAOWfFAAAAQEICgE6TV4D5BmM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":210,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347333,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SF5AAEAGe3rAqAoyrBAAAQBQ2tYFgFaKWQpjlIARAOOZzQAAAQEICgPkHtQBOk1e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":210,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347333,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K4dAAD4GmlGsEAABwKgKMtrWAFBZCmOUBYBWi4AQAOWZywAAAQEICgE6TV4D5B7U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":170,"flow_packet_id":6,"flow_first_seen":1499347259759,"flow_last_seen":1499347265691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55294,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":170,"flow_packet_id":6,"flow_first_seen":1499347259759,"flow_last_seen":1499347265691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55294,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":171,"flow_packet_id":6,"flow_first_seen":1499347262289,"flow_last_seen":1499347267691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55320,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":171,"flow_packet_id":6,"flow_first_seen":1499347262289,"flow_last_seen":1499347267691,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55320,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":172,"flow_packet_id":6,"flow_first_seen":1499347263542,"flow_last_seen":1499347268692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55334,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":172,"flow_packet_id":6,"flow_first_seen":1499347263542,"flow_last_seen":1499347268692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55334,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":173,"flow_packet_id":6,"flow_first_seen":1499347264804,"flow_last_seen":1499347270693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55348,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":173,"flow_packet_id":6,"flow_first_seen":1499347264804,"flow_last_seen":1499347270693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55348,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":174,"flow_packet_id":6,"flow_first_seen":1499347266097,"flow_last_seen":1499347271692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55362,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":174,"flow_packet_id":6,"flow_first_seen":1499347266097,"flow_last_seen":1499347271692,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55362,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":175,"flow_packet_id":6,"flow_first_seen":1499347267376,"flow_last_seen":1499347272693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55376,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":175,"flow_packet_id":6,"flow_first_seen":1499347267376,"flow_last_seen":1499347272693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55376,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":176,"flow_packet_id":6,"flow_first_seen":1499347268659,"flow_last_seen":1499347273693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55390,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":176,"flow_packet_id":6,"flow_first_seen":1499347268659,"flow_last_seen":1499347273693,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55390,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1499347334667,"flow_last_seen":1499347334667,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56090,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347334,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ruhAAD4GFuisEAABwKgKMtsaAFCxtOCmAAAAAKACchChtQAAAgQFtAQCCAoBOk5OAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":214,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347334,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2xqx52s8sbTgp6AScSBhyAAAAgQFtAQCCAoD5B\/EATpOTgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":214,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347334,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rulAAD4GFu+sEAABwKgKMtsaAFCxtOCnsedrPYAQAOUA0AAAAQEICgE6Tk4D5B\/E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":211,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347334,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ol5AAD4GI3qsEAABwKgKMtrkAFD4u+sHr4z8fIARAOUlowAAAQEICgE6TlgD5BrQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":211,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347334,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA047JAAEAG4CXAqAoyrBAAAQBQ2uSvjPx8+LvrCIARAOMgpgAAAQEICgPkH84BOk5Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":211,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347334,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ol9AAD4GI3msEAABwKgKMtrkAFD4u+sIr4z8fYAQAOUgowAAAQEICgE6TlkD5B\/O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1499347337226,"flow_last_seen":1499347337226,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56116,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347337,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TYVAAD4GeEusEAABwKgKMts0AFCRRx1LAAAAAKACchCC5AAAAgQFtAQCCAoBOlDOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":215,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347337,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2zQKH2urkUcdTKAScSDn0AAAAgQFtAQCCAoD5CJEATpQzgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":215,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347337,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TYZAAD4GeFKsEAABwKgKMts0AFCRRx1MCh9rrIAQAOWG2AAAAQEICgE6UM4D5CJE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":212,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347337,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hplAAD4GPz+sEAABwKgKMtr+AFAKS81DfIRufYARAOXtXAAAAQEICgE6UUYD5B1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":212,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347337,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TMFAAEAGdxfAqAoyrBAAAQBQ2v58hG59CkvNRIARAOPn7AAAAQEICgPkIrwBOlFG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":212,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347337,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hppAAD4GPz6sEAABwKgKMtr+AFAKS81EfIRufoAQAOXn6QAAAQEICgE6UUcD5CK8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1499347338485,"flow_last_seen":1499347338485,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56130,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347338,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA871JAAD4G1n2sEAABwKgKMttCAFArWL1bAAAAAKACchBHegAAAgQFtAQCCAoBOlIJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":216,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347338,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ20LSM68cK1i9XKAScSCfpgAAAgQFtAQCCAoD5CN+ATpSCQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":216,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347338,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071NAAD4G1oSsEAABwKgKMttCAFArWL1c0jOvHYAQAOU+rgAAAQEICgE6UgkD5CN+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":213,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347338,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bEVAAD4GWZOsEAABwKgKMtsMAFCNWiFWx4bqXYARAOVNDwAAAQEICgE6UkAD5B6M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":213,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347338,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yetAAEAG+ezAqAoyrBAAAQBQ2wzHhupdjVohV4ARAONH5gAAAQEICgPkI7YBOlJA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":213,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347338,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bEZAAD4GWZKsEAABwKgKMtsMAFCNWiFXx4bqXoAQAOVH4wAAAQEICgE6UkED5CO2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":214,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347339,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rupAAD4GFu6sEAABwKgKMtsaAFCxtOCnsedrPYARAOX74gAAAQEICgE6UzoD5B\/E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":214,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347339,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T41AAEAGdEvAqAoyrBAAAQBQ2xqx52s9sbTgqIARAOP29wAAAQEICgPkJLABOlM6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":214,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347339,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rutAAD4GFu2sEAABwKgKMtsaAFCxtOCosedrPoAQAOX29AAAAQEICgE6UzsD5CSw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1499347339782,"flow_last_seen":1499347339782,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56144,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347339,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8e9RAAD4GSfysEAABwKgKMttQAFCK9SiZAAAAAKACchB7TQAAAgQFtAQCCAoBOlNNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":217,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347339,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ21AZ1nzCivUomqAScSC87AAAAgQFtAQCCAoD5CTDATpTTQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":217,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347339,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e9VAAD4GSgOsEAABwKgKMttQAFCK9SiaGdZ8w4AQAOVb9AAAAQEICgE6U00D5CTD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1499347341106,"flow_last_seen":1499347341106,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56158,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347341,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aWRAAD4GXGysEAABwKgKMtteAFBkzD38AAAAAKACchCKugAAAgQFtAQCCAoBOlSYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":218,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347341,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ217gSFdsZMw9\/aAScSAp8gAAAgQFtAQCCAoD5CYOATpUmAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":218,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347341,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aWVAAD4GXHOsEAABwKgKMtteAFBkzD394EhXbYAQAOXI+QAAAQEICgE6VJgD5CYO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1499347342386,"flow_last_seen":1499347342386,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56172,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347342,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DyJAAD4Gtq6sEAABwKgKMttsAFDfC1r6AAAAAKACchDyLgAAAgQFtAQCCAoBOlXYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":219,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347342,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ22zAs3dz3wta+6AScSCPtAAAAgQFtAQCCAoD5CdOATpV2AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":219,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347342,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DyNAAD4GtrWsEAABwKgKMttsAFDfC1r7wLN3dIAQAOUuvAAAAQEICgE6VdgD5CdO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":215,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347342,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TYdAAD4GeFGsEAABwKgKMts0AFCRRx1MCh9rrIARAOWBfQAAAQEICgE6VigD5CJE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":215,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347342,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TDJAAEAGd6bAqAoyrBAAAQBQ2zQKH2uskUcdTYARAON8JAAAAQEICgPkJ54BOlYo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":215,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347342,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TYhAAD4GeFCsEAABwKgKMts0AFCRRx1NCh9rrYAQAOV8IQAAAQEICgE6VikD5Cee","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1499347343672,"flow_last_seen":1499347343672,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56186,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347343,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83PZAAD4G6NmsEAABwKgKMtt6AFBC4YvvAAAAAKACchBcFQAAAgQFtAQCCAoBOlcZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":220,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347343,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ23pctqnYQuGL8KAScSAp8gAAAgQFtAQCCAoD5CiPATpXGQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":220,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347343,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03PdAAD4G6OCsEAABwKgKMtt6AFBC4YvwXLap2YAQAOXI+AAAAQEICgE6VxoD5CiP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":216,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347343,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071RAAD4G1oOsEAABwKgKMttCAFArWL1c0jOvHYARAOU5kwAAAQEICgE6VyMD5CN+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":216,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347343,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0h4RAAEAGPFTAqAoyrBAAAQBQ20LSM68dK1i9XYARAOM0eQAAAQEICgPkKJkBOlcj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":216,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347343,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071VAAD4G1oKsEAABwKgKMttCAFArWL1d0jOvHoAQAOU0dwAAAQEICgE6VyMD5CiZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":177,"flow_packet_id":6,"flow_first_seen":1499347271162,"flow_last_seen":1499347276694,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55416,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":177,"flow_packet_id":6,"flow_first_seen":1499347271162,"flow_last_seen":1499347276694,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55416,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":178,"flow_packet_id":6,"flow_first_seen":1499347272469,"flow_last_seen":1499347277695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55430,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":178,"flow_packet_id":6,"flow_first_seen":1499347272469,"flow_last_seen":1499347277695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55430,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":179,"flow_packet_id":6,"flow_first_seen":1499347273742,"flow_last_seen":1499347279695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55444,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":179,"flow_packet_id":6,"flow_first_seen":1499347273742,"flow_last_seen":1499347279695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55444,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":180,"flow_packet_id":6,"flow_first_seen":1499347276278,"flow_last_seen":1499347281695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55470,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":180,"flow_packet_id":6,"flow_first_seen":1499347276278,"flow_last_seen":1499347281695,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55470,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":181,"flow_packet_id":6,"flow_first_seen":1499347277521,"flow_last_seen":1499347282696,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55484,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":181,"flow_packet_id":6,"flow_first_seen":1499347277521,"flow_last_seen":1499347282696,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55484,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":217,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347345,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e9ZAAD4GSgKsEAABwKgKMttQAFCK9SiaGdZ8w4ARAOVWKQAAAQEICgE6WRcD5CTD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":217,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347345,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Vk5AAEAGbYrAqAoyrBAAAQBQ21AZ1nzDivUom4ARAONQYAAAAQEICgPkKo0BOlkX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":217,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347345,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e9dAAD4GSgGsEAABwKgKMttQAFCK9SibGdZ8xIAQAOVQXgAAAQEICgE6WRcD5CqN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1499347346211,"flow_last_seen":1499347346211,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56212,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347346,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZYhAAD4GYEisEAABwKgKMtuUAFCjBDwcAAAAAKACchBJMAAAAgQFtAQCCAoBOlmUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":221,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347346,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ25SXkk2howQ8HaAScSA17QAAAgQFtAQCCAoD5CsKATpZlAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":221,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347346,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZYlAAD4GYE+sEAABwKgKMtuUAFCjBDwdl5JNooAQAOXU9AAAAQEICgE6WZQD5CsK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":218,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347346,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aWZAAD4GXHKsEAABwKgKMtteAFBkzD394EhXbYARAOXDfwAAAQEICgE6WhED5CYO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":218,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347346,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fOpAAEAGRu7AqAoyrBAAAQBQ217gSFdtZMw9\/oARAOO+BwAAAQEICgPkK4cBOloR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":218,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347346,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aWdAAD4GXHGsEAABwKgKMtteAFBkzD3+4EhXboAQAOW+BQAAAQEICgE6WhED5CuH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1499347347483,"flow_last_seen":1499347347483,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56226,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347347,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D8lAAD4GtgesEAABwKgKMtuiAFCZ3FUbAAAAAKACchA4DQAAAgQFtAQCCAoBOlrSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":222,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347347,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ26Ji05dMmdxVHKAScSAOoAAAAgQFtAQCCAoD5CxIATpa0gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":222,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347347,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D8pAAD4Gtg6sEAABwKgKMtuiAFCZ3FUcYtOXTYAQAOWtpwAAAQEICgE6WtID5CxI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":219,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347347,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DyRAAD4GtrSsEAABwKgKMttsAFDfC1r7wLN3dIARAOUpiAAAAQEICgE6WwsD5CdO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":219,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347347,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0W\/VAAEAGZ+PAqAoyrBAAAQBQ22zAs3d03wta\/IARAOMkVgAAAQEICgPkLIEBOlsL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":219,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347347,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DyVAAD4GtrOsEAABwKgKMttsAFDfC1r8wLN3dYAQAOUkUwAAAQEICgE6WwwD5CyB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":220,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347348,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03PhAAD4G6N+sEAABwKgKMtt6AFBC4YvwXLap2YARAOXEDAAAAQEICgE6XAUD5CiP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":220,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347348,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hKJAAEAGPzbAqAoyrBAAAQBQ23pctqnZQuGL8YARAOO\/IQAAAQEICgPkLXsBOlwF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":220,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347348,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03PlAAD4G6N6sEAABwKgKMtt6AFBC4YvxXLap2oAQAOW\/HgAAAQEICgE6XAYD5C17","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1499347348776,"flow_last_seen":1499347348776,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56240,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347348,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8P2lAAD4GhmesEAABwKgKMtuwAFBd3mN8AAAAAKACchBkWQAAAgQFtAQCCAoBOlwVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":223,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347348,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ27AjVjRJXd5jfaAScSDcKQAAAgQFtAQCCAoD5C2LATpcFQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":223,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347348,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P2pAAD4Ghm6sEAABwKgKMtuwAFBd3mN9I1Y0SoAQAOV7MAAAAQEICgE6XBYD5C2L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1499347351299,"flow_last_seen":1499347351299,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56266,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347351,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XeBAAD4GZ\/CsEAABwKgKMtvKAFA3cANsAAAAAKACchDoRgAAAgQFtAQCCAoBOl6MAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":224,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347351,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ28rLt8HDN3ADbaAScSAnxAAAAgQFtAQCCAoD5DACATpejAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":224,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347351,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XeFAAD4GZ\/esEAABwKgKMtvKAFA3cANty7fBxIAQAOXGywAAAQEICgE6XowD5DAC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":221,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347351,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZYpAAD4GYE6sEAABwKgKMtuUAFCjBDwdl5JNooARAOXPlAAAAQEICgE6XvMD5CsK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":221,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347351,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fctAAEAGRg3AqAoyrBAAAQBQ25SXkk2iowQ8HoARAOPKNgAAAQEICgPkMGkBOl7z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":221,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347351,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZYtAAD4GYE2sEAABwKgKMtuUAFCjBDwel5JNo4AQAOXKMwAAAQEICgE6XvQD5DBp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1499347352698,"flow_last_seen":1499347352698,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56280,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347352,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA894dAAD4GzkisEAABwKgKMtvYAFB9d6htAAAAAKACchD70QAAAgQFtAQCCAoBOl\/qAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":225,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347352,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ29gsQT\/ffXeobqAScSBbTAAAAgQFtAQCCAoD5DFgATpf6gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":225,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347352,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA094hAAD4Gzk+sEAABwKgKMtvYAFB9d6huLEE\/4IAQAOX6UwAAAQEICgE6X+oD5DFg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":222,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347352,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D8tAAD4Gtg2sEAABwKgKMtuiAFCZ3FUcYtOXTYARAOWoiwAAAQEICgE6X+0D5CxI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":222,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347352,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pi5AAEAGHarAqAoyrBAAAQBQ26Ji05dNmdxVHYARAOOjcQAAAQEICgPkMWMBOl\/t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":222,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347352,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D8xAAD4GtgysEAABwKgKMtuiAFCZ3FUdYtOXToAQAOWjbgAAAQEICgE6X+4D5DFj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":182,"flow_packet_id":6,"flow_first_seen":1499347280049,"flow_last_seen":1499347285697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55510,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":182,"flow_packet_id":6,"flow_first_seen":1499347280049,"flow_last_seen":1499347285697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55510,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":183,"flow_packet_id":6,"flow_first_seen":1499347281325,"flow_last_seen":1499347286697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55524,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":183,"flow_packet_id":6,"flow_first_seen":1499347281325,"flow_last_seen":1499347286697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55524,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":184,"flow_packet_id":6,"flow_first_seen":1499347282573,"flow_last_seen":1499347287697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55538,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":184,"flow_packet_id":6,"flow_first_seen":1499347282573,"flow_last_seen":1499347287697,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55538,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":185,"flow_packet_id":6,"flow_first_seen":1499347285114,"flow_last_seen":1499347290698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55564,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":185,"flow_packet_id":6,"flow_first_seen":1499347285114,"flow_last_seen":1499347290698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55564,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":186,"flow_packet_id":6,"flow_first_seen":1499347286403,"flow_last_seen":1499347291698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55578,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":186,"flow_packet_id":6,"flow_first_seen":1499347286403,"flow_last_seen":1499347291698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55578,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":187,"flow_packet_id":6,"flow_first_seen":1499347287659,"flow_last_seen":1499347292698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55592,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":187,"flow_packet_id":6,"flow_first_seen":1499347287659,"flow_last_seen":1499347292698,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55592,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":223,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347354,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P2tAAD4Ghm2sEAABwKgKMtuwAFBd3mN9I1Y0SoARAOV1YwAAAQEICgE6YeID5C2L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":223,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347354,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BxJAAEAGvMbAqAoyrBAAAQBQ27AjVjRKXd5jfoARAONvlwAAAQEICgPkM1gBOmHi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":223,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347354,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P2xAAD4GhmysEAABwKgKMtuwAFBd3mN+I1Y0S4AQAOVvlQAAAQEICgE6YeID5DNY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1499347355229,"flow_last_seen":1499347355229,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56306,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347355,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GHxAAD4GrVSsEAABwKgKMtvyAFB7gnofAAAAAKACchApggAAAgQFtAQCCAoBOmJjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":226,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347355,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ2\/L7jmGSe4J6IKAScSCVgwAAAgQFtAQCCAoD5DPYATpiYwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":226,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347355,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GH1AAD4GrVusEAABwKgKMtvyAFB7gnog+45hk4AQAOU0iwAAAQEICgE6YmMD5DPY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1499347356478,"flow_last_seen":1499347356478,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56320,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347356,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hsZAAD4GPwqsEAABwKgKMtwAAFAJPOVdAAAAAKACchAvRAAAAgQFtAQCCAoBOmObAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":227,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347356,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3AC\/\/WVQCTzlXqAScSDR3wAAAgQFtAQCCAoD5DURATpjmwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":227,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347356,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hsdAAD4GPxGsEAABwKgKMtwAAFAJPOVev\/1lUYAQAOVw5wAAAQEICgE6Y5sD5DUR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":224,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347356,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XeJAAD4GZ\/asEAABwKgKMtvKAFA3cANty7fBxIARAOXBgAAAAQEICgE6Y9YD5DAC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":224,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347356,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09IhAAEAGz0\/AqAoyrBAAAQBQ28rLt8HEN3ADboARAOO8NwAAAQEICgPkNUwBOmPW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":224,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347356,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XeNAAD4GZ\/WsEAABwKgKMtvKAFA3cANuy7fBxYAQAOW8NQAAAQEICgE6Y9YD5DVM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":225,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347357,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA094lAAD4Gzk6sEAABwKgKMtvYAFB9d6huLEE\/4IARAOX1bAAAAQEICgE6ZNAD5DFg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":225,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347357,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CaZAAEAGujLAqAoyrBAAAQBQ29gsQT\/gfXeob4ARAOPwhwAAAQEICgPkNkYBOmTQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":225,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347357,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA094pAAD4Gzk2sEAABwKgKMtvYAFB9d6hvLEE\/4YAQAOXwhQAAAQEICgE6ZNAD5DZG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1499347357727,"flow_last_seen":1499347357727,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56334,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347357,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8p9BAAD4GHgCsEAABwKgKMtwOAFCyy8MDAAAAAKACchCmyAAAAgQFtAQCCAoBOmTTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":228,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347357,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3A4qYd\/GssvDBKAScSBjUgAAAgQFtAQCCAoD5DZJATpk0wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":228,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347357,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p9FAAD4GHgesEAABwKgKMtwOAFCyy8MEKmHfx4AQAOUCWgAAAQEICgE6ZNMD5DZJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":226,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":226,"flow_packet_id":4,"flow_first_seen":1499347355229,"flow_last_seen":1499347360034,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56306,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0407{"flow_id":226,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WRlAAEAGar\/AqAoyrBAAAQBQ2\/L7jmGTe4J7n4AQAOspowAAAQEICgPkOIoBOmcU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2801{"flow_id":226,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":1837,"pkt":"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","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":226,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GH9AAD4GrVmsEAABwKgKMtvyAFB7gnuf+45ofoAQAQAioQAAAQEICgE6ZxUD5DiL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1499347360285,"flow_last_seen":1499347360285,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56360,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8h\/1AAD4GPdOsEAABwKgKMtwoAFB3hOCvAAAAAKACchDBygAAAgQFtAQCCAoBOmdSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":229,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Ci3TdMGd4TgsKAScSD7qAAAAgQFtAQCCAoD5DjIATpnUgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":229,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h\/5AAD4GPdqsEAABwKgKMtwoAFB3hOCwt03TB4AQAOWarwAAAQEICgE6Z1MD5DjI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":226,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2937{"flow_id":226,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":1934,"pkt":"AMGxFOsxABm5CmnxCABFAAeAWRxAAEAGY3DAqAoyrBAAAQBQ2\/L7jmh+e4J96IAYAPR+XgAAAQEICgPkOMoBOmdTSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIyOjQwIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNw0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Y\/0\/bOBT\/GaT9Dz6fdMBJxPSm3Q3WZoIWRjfYOtIODp0UuYnbGpw4i50W\/vt7dpI2fC1ZkVBx7Pfl8\/yen9\/zm\/Xmb51v7f6\/vUM00ZFAvcHBSbeN8DYh52\/bhHT6HXRx3D89QQ1nB3k65YEm5PArRniidbJHyGw2c2ZvHZmOSf+M3BgpDcNWDLeV5XFCHWL3zfqb9abVcxOJWLUekdHY3d3NWXPyteaE0RCGa2vNiGmKDMs2+5nxaQu3ZaxZrLf7twnDKMi\/WlizG02MiA8omNBUMd0a9I+232NEcplrTc21YO6PTMQspUMuuL7dQ2dsJFigWYjaqVQKeVwz5AUpTzSPx2jzwvO20N4e6tAoRiWvYOicDdF+kggeUM1ljDY7P873t9C04TR20J8dNmVCJhFA+7NJcsUFCsHja5Qy0cJK3wqmJoxpjDRYUxgRKIXRJGWjFnYcAn\/hdEbNLIkojx27TB5K47AVpZz\/eETHjMDUXUkjOjVkjl2Yy1DW2iqEKzql+SxGKg3uALlS9n8PFDhXCrtNklMWniOF68x4KMNbFAiqjNdlxHDu0pBPEQ9b2PgOLGJp4fXKkhFSmV9r8mj8AIk1UhEhx9JJ4jFGVEAgLHHUwm7ACuoeqDab7IPjsor2B2t+QsOQhblBQJCJ0k6zeiBkcG22RnAk4wBUX7fwjMehnDmwZHG0NnJLnA1csgIDveMuB7vHsG1NQmGXBXfXXyKQx3D6ssBMKSeZJM\/Iv0+K3W5lpp5aOHBZskTfnAa7nhkiAscPJlHnoKKMZMJdYUOnlfPNITyGaaYZeQbV4wzYPTD\/0ZFMg5oeuC+Q3bCgDgBLj922jCIah6gbXzHrkdVQBCod1UFh6QGFd3a0muIRJ87HBI5qiwNnFrIlUfIifuwecTjcXTOjVt6bLBGShnV2p+AoYAzs14r+oYmGm6uWiwoWe25ZkKUMtfd7\/fbx\/mpQ1E\/B6+Cw9HCmv5+8VrAaif4QLrdaTqlw3UODNg\/M9NZqqGaMXvu8FqSSBbvnMEIeUyZaUbdTM73el3ujlF8LSM6AXahnoFb5drriVhhxaUW\/YnkV9SIcaYljXny9AhpVdzdUicLTMr0LYcUryJ5FqC6XXocLMuya+hHiI5+qtx3Az+ORXKKuQoXd3nEPTsdI1lNEhzLTS9TMabC7b4avt62m0FuqfkGE3RM7vgegqNju1H5PF4KmhF0UgtDJmNVCt1mrFoLNSeNXugsomRtFwVwRPp1XsH4gQ+bTlNGifh7JNEIxjaBaB34oe22Ka+HfMYJuaSIB+6fDflGbNpPC4vMJ1RsK3costcwfy8o6TrJq8Y8L0eZ3Xt9WiVQ2jDiQTanI4NPLPwttJHHzpoIYlDneJGXuMRNCoqLVcKHyV1Iw8PB4c+P4n8bF5\/bR2fHl5ftd7\/Tg+8llp3vxpf2ucep9GVz83R987e587r\/v7Xw6\/PT14t1lZ2PrQ1VCKIPMdFpOIOU1Z1sf5i0JwEmZdc3Cw83JX+4pHHgb\/mlE88sKJs1aER8QjYu4Ms2nKhpWOaMqsT0rhCi7MWFGrGe3FXjWn3vWt56FdoymY+hEMdxKNL7G7q\/LmkdxbXzA7UOVolnqH0JbB+b6beivtO8VrWdNjM\/LW46Txc6MX\/OEhZxa0eararkqLX8a28tlPI+nMDMY83kyDmRkroftEf3p2CeJR0G8gPFFmnOcVLBUN6yEZ9U9oK7qKLJbHupl5zpMod\/Nf8sU9kTKK\/JOIBhN56f5sbyobpVmkW\/ukkfzwzDT2vTZRX74wdkMwfFP5jk7kUmW+CWZjNt51l88OuwBxSDZRE\/c9lOQ6E9AognHjwDJ1hR\/lI5oCTnbQFvYRUtheZAMA\/a6wJSVuRSa2U0q+BjytmAjyJ9NFrkDxVKTd\/eaBL4QDSMeFy6E77I4QCfmdamgAYkLCrjVux2vWAm5MtdHWHrxSYeOpNR3HlsSd5XXruSxa7WagIm5OPN3Qfti5\/4PNM0i6ZIUAAA=","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":226,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347360,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GIFAAD4GrVesEAABwKgKMtvyAFB7gn3o+45vyoAQAR0YcQAAAQEICgE6Z1QD5DjK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":226,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2795{"flow_id":226,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":226,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GINAAD4GrVWsEAABwKgKMtvyAFB7gn9n+452tIAQATkN6wAAAQEICgE6aFUD5DnK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1499347361540,"flow_last_seen":1499347361540,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56374,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8izFAAD4GOp+sEAABwKgKMtw2AFCL9eO9AAAAAKACchCpAwAAAgQFtAQCCAoBOmiMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":230,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Db87gPNi\/XjvqAScSBrQAAAAgQFtAQCCAoD5DoCATpojAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":230,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izJAAD4GOqasEAABwKgKMtw2AFCL9eO+\/O4DzoAQAOUKRwAAAQEICgE6aI0D5DoC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":226,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":226,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":227,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hshAAD4GPxCsEAABwKgKMtwAAFAJPOVev\/1lUYARAOVryQAAAQEICgE6aLgD5DUR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":227,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0X39AAEAGZFnAqAoyrBAAAQBQ3AC\/\/WVRCTzlX4ARAONmrQAAAQEICgPkOi4BOmi4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":227,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347361,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hslAAD4GPw+sEAABwKgKMtwAAFAJPOVfv\/1lUoAQAOVmqwAAAQEICgE6aLgD5Dou","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":228,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347363,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p9JAAD4GHgasEAABwKgKMtwOAFCyy8MEKmHfx4ARAOX8fwAAAQEICgE6aqwD5DZJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":228,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347363,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04+VAAEAG3\/LAqAoyrBAAAQBQ3A4qYd\/HssvDBYARAOP2pwAAAQEICgPkPCIBOmqs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":228,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347363,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0p9NAAD4GHgWsEAABwKgKMtwOAFCyy8MFKmHfyIAQAOX2pQAAAQEICgE6aqwD5Dwi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1499347364056,"flow_last_seen":1499347364056,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56400,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347364,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+jlAAD4Gy5asEAABwKgKMtxQAFCMb5E4AAAAAKACchD4fwAAAgQFtAQCCAoBOmsBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":231,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347364,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3FBchRpEjG+ROaAScSBCOgAAAgQFtAQCCAoD5Dx3ATprAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":231,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347364,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+jpAAD4Gy52sEAABwKgKMtxQAFCMb5E5XIUaRYAQAOXhQAAAAQEICgE6awID5Dx3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":151,"flow_packet_id":310,"flow_first_seen":1499347228091,"flow_last_seen":1499347294990,"flow_tot_l4_data_len":242306,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":781,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":54956,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":188,"flow_packet_id":6,"flow_first_seen":1499347290163,"flow_last_seen":1499347295228,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55618,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":188,"flow_packet_id":6,"flow_first_seen":1499347290163,"flow_last_seen":1499347295228,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55618,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":190,"flow_packet_id":6,"flow_first_seen":1499347292725,"flow_last_seen":1499347298700,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55646,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":190,"flow_packet_id":6,"flow_first_seen":1499347292725,"flow_last_seen":1499347298700,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55646,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":191,"flow_packet_id":6,"flow_first_seen":1499347295224,"flow_last_seen":1499347300701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55672,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":191,"flow_packet_id":6,"flow_first_seen":1499347295224,"flow_last_seen":1499347300701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55672,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":192,"flow_packet_id":6,"flow_first_seen":1499347296462,"flow_last_seen":1499347301701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55686,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":192,"flow_packet_id":6,"flow_first_seen":1499347296462,"flow_last_seen":1499347301701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55686,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":193,"flow_packet_id":6,"flow_first_seen":1499347297732,"flow_last_seen":1499347303701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55700,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":193,"flow_packet_id":6,"flow_first_seen":1499347297732,"flow_last_seen":1499347303701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55700,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1499347365320,"flow_last_seen":1499347365320,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56414,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347365,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CZFAAD4GvD+sEAABwKgKMtxeAFCYJmWsAAAAAKACchAXCwAAAgQFtAQCCAoBOmw9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":232,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347365,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3F6n4QiemCZlraAScSAl0wAAAgQFtAQCCAoD5D2zATpsPQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":232,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347365,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CZJAAD4GvEasEAABwKgKMtxeAFCYJmWtp+EIn4AQAOXE2QAAAQEICgE6bD4D5D2z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":229,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347365,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h\/9AAD4GPdmsEAABwKgKMtwoAFB3hOCwt03TB4ARAOWVYQAAAQEICgE6bKAD5DjI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":229,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347365,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07RFAAEAG1sbAqAoyrBAAAQBQ3Ci3TdMHd4TgsYARAOOQFAAAAQEICgPkPhYBOmyg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":229,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347365,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iABAAD4GPdisEAABwKgKMtwoAFB3hOCxt03TCIAQAOWQEQAAAQEICgE6bKED5D4W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1499347366586,"flow_last_seen":1499347366586,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56428,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347366,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8voxAAD4GB0SsEAABwKgKMtxsAFDi5tP2AAAAAKACchBctQAAAgQFtAQCCAoBOm16AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":233,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347366,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3GzFvqcC4ubT96AScSCt\/gAAAgQFtAQCCAoD5D7wATptegEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":233,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347366,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vo1AAD4GB0usEAABwKgKMtxsAFDi5tP3xb6nA4AQAOVNBgAAAQEICgE6bXoD5D7w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":230,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347366,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izNAAD4GOqWsEAABwKgKMtw2AFCL9eO+\/O4DzoARAOUFOQAAAQEICgE6bZoD5DoC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":230,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347366,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PN5AAEAGhvrAqAoyrBAAAQBQ3Db87gPOi\/Xjv4ARAOMALAAAAQEICgPkPxABOm2a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":230,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347366,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izRAAD4GOqSsEAABwKgKMtw2AFCL9eO\/\/O4Dz4AQAOUAKgAAAQEICgE6bZoD5D8Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1499347369077,"flow_last_seen":1499347369077,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56454,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347369,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NkNAAD4Gj42sEAABwKgKMtyGAFA0BFmqAAAAAKACchCDWwAAAgQFtAQCCAoBOm\/pAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":234,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347369,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Ib842EVNARZq6AScSDg\/gAAAgQFtAQCCAoD5EFeATpv6QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":234,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347369,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NkRAAD4Gj5SsEAABwKgKMtyGAFA0BFmr\/ONhFoAQAOWABgAAAQEICgE6b+kD5EFe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":231,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347369,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+jtAAD4Gy5ysEAABwKgKMtxQAFCMb5E5XIUaRYARAOXbuAAAAQEICgE6cIkD5Dx3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":231,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347369,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0W7tAAEAGaB3AqAoyrBAAAQBQ3FBchRpFjG+ROoARAOPWMgAAAQEICgPkQf4BOnCJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":231,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347369,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+jxAAD4Gy5usEAABwKgKMtxQAFCMb5E6XIUaRoAQAOXWMAAAAQEICgE6cIkD5EH+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1499347370339,"flow_last_seen":1499347370339,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56468,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347370,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iG5AAD4GPWKsEAABwKgKMtyUAFBZvPlKAAAAAKACchC8uQAAAgQFtAQCCAoBOnEkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":235,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347370,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3JQ4r3KfWbz5S6AScSDLywAAAgQFtAQCCAoD5EKaATpxJAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":235,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347370,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iG9AAD4GPWmsEAABwKgKMtyUAFBZvPlLOK9yoIAQAOVq0wAAAQEICgE6cSQD5EKa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":232,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347370,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CZNAAD4GvEWsEAABwKgKMtxeAFCYJmWtp+EIn4ARAOW\/kwAAAQEICgE6cYMD5D2z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":232,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347370,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SmdAAEAGeXHAqAoyrBAAAQBQ3F6n4QifmCZlroARAOO6TwAAAQEICgPkQvgBOnGD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":232,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347370,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CZRAAD4GvESsEAABwKgKMtxeAFCYJmWup+EIoIAQAOW6TQAAAQEICgE6cYMD5EL4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1499347371602,"flow_last_seen":1499347371602,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56482,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347371,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jiZAAD4GN6qsEAABwKgKMtyiAFAEW\/xGAAAAAKACchAN1QAAAgQFtAQCCAoBOnJgAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":236,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347371,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3KLBqaHpBFv8R6AScSBjZgAAAgQFtAQCCAoD5EPWATpyYAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":236,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347371,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jidAAD4GN7GsEAABwKgKMtyiAFAEW\/xHwamh6oAQAOUCbgAAAQEICgE6cmAD5EPW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":233,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347371,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vo5AAD4GB0qsEAABwKgKMtxsAFDi5tP3xb6nA4ARAOVIAgAAAQEICgE6cn0D5D7w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":233,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347371,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05PFAAEAG3ubAqAoyrBAAAQBQ3GzFvqcD4ubT+IARAONDAQAAAQEICgPkQ\/IBOnJ9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":233,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347371,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vo9AAD4GB0msEAABwKgKMtxsAFDi5tP4xb6nBIAQAOVC\/wAAAQEICgE6cn0D5EPy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1499347374136,"flow_last_seen":1499347374136,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56508,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347374,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DktAAD4Gt4WsEAABwKgKMty8AFAnfHqSAAAAAKACchBp1QAAAgQFtAQCCAoBOnTZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":237,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347374,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3LxHeFJ\/J3x6k6AScSCGiQAAAgQFtAQCCAoD5EZPATp02QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":237,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347374,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DkxAAD4Gt4ysEAABwKgKMty8AFAnfHqTR3hSgIAQAOUlkAAAAQEICgE6dNoD5EZP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":234,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347374,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NkVAAD4Gj5OsEAABwKgKMtyGAFA0BFmr\/ONhFoARAOV6gwAAAQEICgE6dWsD5EFe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":234,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347374,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J\/dAAEAGm+HAqAoyrBAAAQBQ3Ib842EWNARZrIARAON1AQAAAQEICgPkRuEBOnVr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":234,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347374,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NkZAAD4Gj5KsEAABwKgKMtyGAFA0BFms\/ONhF4AQAOV0\/wAAAQEICgE6dWsD5Ebh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":194,"flow_packet_id":6,"flow_first_seen":1499347300263,"flow_last_seen":1499347305701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55726,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":194,"flow_packet_id":6,"flow_first_seen":1499347300263,"flow_last_seen":1499347305701,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55726,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":195,"flow_packet_id":6,"flow_first_seen":1499347301520,"flow_last_seen":1499347306702,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55740,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":195,"flow_packet_id":6,"flow_first_seen":1499347301520,"flow_last_seen":1499347306702,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55740,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":196,"flow_packet_id":6,"flow_first_seen":1499347304125,"flow_last_seen":1499347309703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55766,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":196,"flow_packet_id":6,"flow_first_seen":1499347304125,"flow_last_seen":1499347309703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55766,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":197,"flow_packet_id":6,"flow_first_seen":1499347305402,"flow_last_seen":1499347310703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55780,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":197,"flow_packet_id":6,"flow_first_seen":1499347305402,"flow_last_seen":1499347310703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55780,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":198,"flow_packet_id":6,"flow_first_seen":1499347306680,"flow_last_seen":1499347311703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55794,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":198,"flow_packet_id":6,"flow_first_seen":1499347306680,"flow_last_seen":1499347311703,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55794,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":199,"flow_packet_id":6,"flow_first_seen":1499347309314,"flow_last_seen":1499347314704,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55820,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":199,"flow_packet_id":6,"flow_first_seen":1499347309314,"flow_last_seen":1499347314704,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55820,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1499347375388,"flow_last_seen":1499347375388,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56522,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347375,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VfhAAD4Gb9isEAABwKgKMtzKAFDNpCPqAAAAAKACchAZDgAAAgQFtAQCCAoBOnYSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":238,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347375,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3MqX5dxFzaQj66AScSBaVQAAAgQFtAQCCAoD5EeIATp2EgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":238,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347375,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VflAAD4Gb9+sEAABwKgKMtzKAFDNpCPrl+XcRoAQAOX5WwAAAQEICgE6dhMD5EeI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":235,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347375,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iHBAAD4GPWisEAABwKgKMtyUAFBZvPlLOK9yoIARAOVlkQAAAQEICgE6dmUD5EKa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":235,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347375,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NXtAAEAGjl3AqAoyrBAAAQBQ3JQ4r3KgWbz5TIARAONgUQAAAQEICgPkR9sBOnZl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":235,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347375,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iHFAAD4GPWesEAABwKgKMtyUAFBZvPlMOK9yoYAQAOVgTwAAAQEICgE6dmUD5Efb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1499347376638,"flow_last_seen":1499347376638,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56536,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347376,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EqdAAD4GsymsEAABwKgKMtzYAFCvXmXsAAAAAKACchD0CgAAAgQFtAQCCAoBOndLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":239,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347376,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3NhWyE7Mr15l7aAScSACsAAAAgQFtAQCCAoD5EjBATp3SwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":239,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347376,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EqhAAD4GszCsEAABwKgKMtzYAFCvXmXtVshOzYAQAOWhtwAAAQEICgE6d0sD5EjB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":236,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347376,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jihAAD4GN7CsEAABwKgKMtyiAFAEW\/xHwamh6oARAOX9bQAAAQEICgE6d18D5EPW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":236,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347376,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA06T9AAEAG2pjAqAoyrBAAAQBQ3KLBqaHqBFv8SIARAOP4bwAAAQEICgPkSNUBOndf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":236,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347376,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jilAAD4GN6+sEAABwKgKMtyiAFAEW\/xIwamh64AQAOX4bQAAAQEICgE6d18D5EjV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1499347379171,"flow_last_seen":1499347379171,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56562,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347379,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NzVAAD4GjpusEAABwKgKMtzyAFA14k7xAAAAAKACchCB7wAAAgQFtAQCCAoBOnnEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":240,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347379,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3PK2Txs5NeJO8qAScSBiJwAAAgQFtAQCCAoD5Es6ATp5xAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":240,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347379,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NzZAAD4GjqKsEAABwKgKMtzyAFA14k7ytk8bOoAQAOUBLwAAAQEICgE6ecQD5Es6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":237,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347379,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Dk1AAD4Gt4usEAABwKgKMty8AFAnfHqTR3hSgIARAOUgHAAAAQEICgE6ek0D5EZP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":237,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347379,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GUNAAEAGqpXAqAoyrBAAAQBQ3LxHeFKAJ3x6lIARAOMaqQAAAQEICgPkS8MBOnpN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":237,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347379,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Dk5AAD4Gt4qsEAABwKgKMty8AFAnfHqUR3hSgYAQAOUapwAAAQEICgE6ek0D5EvD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1499347380424,"flow_last_seen":1499347380424,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56576,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347380,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PTxAAD4GiJSsEAABwKgKMt0AAFCXo0fBAAAAAKACchAmFwAAAgQFtAQCCAoBOnr9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":241,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347380,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3QDrAYLNl6NHwqAScSBozwAAAgQFtAQCCAoD5ExzATp6\/QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":241,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347380,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PT1AAD4GiJusEAABwKgKMt0AAFCXo0fC6wGCzoAQAOUH1wAAAQEICgE6ev0D5Exz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":238,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347380,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VfpAAD4Gb96sEAABwKgKMtzKAFDNpCPrl+XcRoARAOX0JgAAAQEICgE6e0cD5EeI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":238,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347380,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0kPtAAEAGMt3AqAoyrBAAAQBQ3MqX5dxGzaQj7IARAOPu8gAAAQEICgPkTL0BOntH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":238,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347380,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VftAAD4Gb92sEAABwKgKMtzKAFDNpCPsl+XcR4AQAOXu8AAAAQEICgE6e0cD5Ey9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1499347381694,"flow_last_seen":1499347381694,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56590,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347381,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Vu9AAD4GbuGsEAABwKgKMt0OAFBD4SrUAAAAAKACchCVegAAAgQFtAQCCAoBOnw7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":242,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347381,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Q7aUZP1Q+Eq1aAScSDWfAAAAgQFtAQCCAoD5E2xATp8OwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":242,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347381,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VvBAAD4GbuisEAABwKgKMt0OAFBD4SrV2lGT9oAQAOV1hAAAAQEICgE6fDsD5E2x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":239,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347381,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EqlAAD4Gsy+sEAABwKgKMtzYAFCvXmXtVshOzYARAOWcwAAAAQEICgE6fEED5EjB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":239,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347381,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0A3pAAEAGwF7AqAoyrBAAAQBQ3NhWyE7Nr15l7oARAOOXywAAAQEICgPkTbcBOnxB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":239,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347381,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EqpAAD4Gsy6sEAABwKgKMtzYAFCvXmXuVshOzoAQAOWXyQAAAQEICgE6fEED5E23","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1499347384186,"flow_last_seen":1499347384186,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56616,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347384,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bHdAAD4GWVmsEAABwKgKMt0oAFALKxLdAAAAAKACchDjngAAAgQFtAQCCAoBOn6qAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":243,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347384,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Sg6aAAMCysS3qAScSBWBQAAAgQFtAQCCAoD5FAgATp+qgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":243,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347384,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bHhAAD4GWWCsEAABwKgKMt0oAFALKxLeOmgADYAQAOX1DAAAAQEICgE6fqoD5FAg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":240,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347384,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NzdAAD4GjqGsEAABwKgKMtzyAFA14k7ytk8bOoARAOX7wgAAAQEICgE6fy8D5Es6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":240,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347384,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S59AAEAGeDnAqAoyrBAAAQBQ3PK2Txs6NeJO84ARAOP2WAAAAQEICgPkUKUBOn8v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":240,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347384,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NzhAAD4GjqCsEAABwKgKMtzyAFA14k7ztk8bO4AQAOX2VQAAAQEICgE6fzAD5FCl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":200,"flow_packet_id":6,"flow_first_seen":1499347310567,"flow_last_seen":1499347315705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55834,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":200,"flow_packet_id":6,"flow_first_seen":1499347310567,"flow_last_seen":1499347315705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55834,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":201,"flow_packet_id":6,"flow_first_seen":1499347313106,"flow_last_seen":1499347318705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55860,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":201,"flow_packet_id":6,"flow_first_seen":1499347313106,"flow_last_seen":1499347318705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55860,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":202,"flow_packet_id":6,"flow_first_seen":1499347314358,"flow_last_seen":1499347319705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55874,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":202,"flow_packet_id":6,"flow_first_seen":1499347314358,"flow_last_seen":1499347319705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55874,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":203,"flow_packet_id":6,"flow_first_seen":1499347315631,"flow_last_seen":1499347320705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55888,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":203,"flow_packet_id":6,"flow_first_seen":1499347315631,"flow_last_seen":1499347320705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55888,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":204,"flow_packet_id":6,"flow_first_seen":1499347318180,"flow_last_seen":1499347323705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55914,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":204,"flow_packet_id":6,"flow_first_seen":1499347318180,"flow_last_seen":1499347323705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55914,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":205,"flow_packet_id":6,"flow_first_seen":1499347319466,"flow_last_seen":1499347324705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55928,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":205,"flow_packet_id":6,"flow_first_seen":1499347319466,"flow_last_seen":1499347324705,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55928,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1499347385481,"flow_last_seen":1499347385481,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56630,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347385,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VSxAAD4GcKSsEAABwKgKMt02AFBQ3SrBAAAAAKACchCEtwAAAgQFtAQCCAoBOn\/tAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":244,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347385,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3TZsZa1KUN0qwqAScSAWnwAAAgQFtAQCCAoD5FFjATp\/7QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":244,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347385,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VS1AAD4GcKusEAABwKgKMt02AFBQ3SrCbGWtS4AQAOW1pQAAAQEICgE6f+4D5FFj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":241,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347385,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PT5AAD4GiJqsEAABwKgKMt0AAFCXo0fC6wGCzoARAOUCqQAAAQEICgE6gCoD5Exz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":241,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347385,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA001FAAEAG8IbAqAoyrBAAAQBQ3QDrAYLOl6NHw4ARAOP9fQAAAQEICgPkUZ8BOoAq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":241,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347385,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PT9AAD4GiJmsEAABwKgKMt0AAFCXo0fD6wGCz4AQAOX9ewAAAQEICgE6gCoD5FGf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":242,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347386,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VvFAAD4GbuesEAABwKgKMt0OAFBD4SrV2lGT9oARAOVwmgAAAQEICgE6gSQD5E2x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":242,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347386,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wW9AAEAGAmnAqAoyrBAAAQBQ3Q7aUZP2Q+Eq1oARAONrswAAAQEICgPkUpkBOoEk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":242,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347386,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VvJAAD4GbuasEAABwKgKMt0OAFBD4SrW2lGT94AQAOVrsQAAAQEICgE6gSQD5FKZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":1499347386736,"flow_last_seen":1499347386736,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56644,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":245,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347386,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA85qBAAD4G3y+sEAABwKgKMt1EAFDnQGeHAAAAAKACchCwRQAAAgQFtAQCCAoBOoEnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":245,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347386,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3URBkoPY50BniKAScSCVOAAAAgQFtAQCCAoD5FKdATqBJwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":245,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347386,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05qFAAD4G3zasEAABwKgKMt1EAFDnQGeIQZKD2YAQAOU0PwAAAQEICgE6gSgD5FKd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":1499347389305,"flow_last_seen":1499347389305,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56670,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":246,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347389,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86AFAAD4G3c6sEAABwKgKMt1eAFBbbmurAAAAAKACchA1VwAAAgQFtAQCCAoBOoOqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":246,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347389,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3V4nyHcOW25rrKAScSA+XAAAAgQFtAQCCAoD5FUfATqDqgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":246,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347389,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06AJAAD4G3dWsEAABwKgKMt1eAFBbbmusJ8h3D4AQAOXdYwAAAQEICgE6g6oD5FUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":243,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347389,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bHlAAD4GWV+sEAABwKgKMt0oAFALKxLeOmgADYARAOXvowAAAQEICgE6hBID5FAg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":243,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347389,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VYVAAEAGblPAqAoyrBAAAQBQ3Sg6aAANCysS34ARAOPqPAAAAQEICgPkVYgBOoQS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":243,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347389,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bHpAAD4GWV6sEAABwKgKMt0oAFALKxLfOmgADoAQAOXqOgAAAQEICgE6hBID5FWI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":1499347390580,"flow_last_seen":1499347390580,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56684,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":247,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347390,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jW9AAD4GOGGsEAABwKgKMt1sAFC4TAmHAAAAAKACchA5UQAAAgQFtAQCCAoBOoToAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":247,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347390,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Wzc2WIguEwJiKAScSCg8wAAAgQFtAQCCAoD5FZeATqE6AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":247,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347390,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXBAAD4GOGisEAABwKgKMt1sAFC4TAmI3NliIYAQAOU\/+gAAAQEICgE6hOkD5FZe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":244,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347390,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VS5AAD4GcKqsEAABwKgKMt02AFBQ3SrCbGWtS4ARAOWwhgAAAQEICgE6hQwD5FFj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":244,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347390,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+8lAAEAGyA7AqAoyrBAAAQBQ3TZsZa1LUN0qw4ARAOOraAAAAQEICgPkVoIBOoUM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":244,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347390,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VS9AAD4GcKmsEAABwKgKMt02AFBQ3SrDbGWtTIAQAOWrZgAAAQEICgE6hQwD5FaC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":245,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347392,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05qJAAD4G3zWsEAABwKgKMt1EAFDnQGeIQZKD2YARAOUuZgAAAQEICgE6hwAD5FKd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":245,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347392,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0269AAEAG6CjAqAoyrBAAAQBQ3URBkoPZ50BniYARAOMojgAAAQEICgPkWHYBOocA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":245,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347392,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA05qNAAD4G3zSsEAABwKgKMt1EAFDnQGeJQZKD2oAQAOUojAAAAQEICgE6hwAD5Fh2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":1499347393135,"flow_last_seen":1499347393135,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56710,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":248,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347393,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89hRAAD4Gz7usEAABwKgKMt2GAFBIK3FzAAAAAKACchA+7QAAAgQFtAQCCAoBOodnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":248,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347393,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3Yb1ZkzcSCtxdKAScSCgxwAAAgQFtAQCCAoD5FjdATqHZwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":248,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347393,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09hVAAD4Gz8KsEAABwKgKMt2GAFBIK3F09WZM3YAQAOU\/zwAAAQEICgE6h2cD5Fjd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":1499347394398,"flow_last_seen":1499347394398,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56724,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":249,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347394,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eldAAD4GS3msEAABwKgKMt2UAFCjvfL0AAAAAKACchBgjwAAAgQFtAQCCAoBOoijAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":249,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347394,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ZQ04Dogo73y9aAScSCUcAAAAgQFtAQCCAoD5FoZATqIowEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":249,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347394,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0elhAAD4GS4CsEAABwKgKMt2UAFCjvfL1NOA6IYAQAOUzeAAAAQEICgE6iKMD5FoZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":246,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347394,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ANAAD4G3dSsEAABwKgKMt1eAFBbbmusJ8h3D4ARAOXYGAAAAQEICgE6iPQD5FUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":246,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347394,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0LWVAAEAGlnPAqAoyrBAAAQBQ3V4nyHcPW25rrYARAOPSzgAAAQEICgPkWmoBOoj0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":246,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347394,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ARAAD4G3dOsEAABwKgKMt1eAFBbbmutJ8h3EIAQAOXSzAAAAQEICgE6iPQD5Fpq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":206,"flow_packet_id":6,"flow_first_seen":1499347320712,"flow_last_seen":1499347326706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55942,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":206,"flow_packet_id":6,"flow_first_seen":1499347320712,"flow_last_seen":1499347326706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55942,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":207,"flow_packet_id":6,"flow_first_seen":1499347323234,"flow_last_seen":1499347328706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55968,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":207,"flow_packet_id":6,"flow_first_seen":1499347323234,"flow_last_seen":1499347328706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55968,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":208,"flow_packet_id":6,"flow_first_seen":1499347324538,"flow_last_seen":1499347329706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55982,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":208,"flow_packet_id":6,"flow_first_seen":1499347324538,"flow_last_seen":1499347329706,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55982,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":209,"flow_packet_id":6,"flow_first_seen":1499347325777,"flow_last_seen":1499347331707,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":209,"flow_packet_id":6,"flow_first_seen":1499347325777,"flow_last_seen":1499347331707,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55996,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":210,"flow_packet_id":6,"flow_first_seen":1499347328298,"flow_last_seen":1499347333709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56022,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":210,"flow_packet_id":6,"flow_first_seen":1499347328298,"flow_last_seen":1499347333709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56022,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":211,"flow_packet_id":6,"flow_first_seen":1499347329594,"flow_last_seen":1499347334709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56036,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":211,"flow_packet_id":6,"flow_first_seen":1499347329594,"flow_last_seen":1499347334709,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56036,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":247,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347395,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXFAAD4GOGesEAABwKgKMt1sAFC4TAmI3NliIYARAOU69AAAAQEICgE6ie4D5FZe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":247,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347395,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OUVAAEAGipPAqAoyrBAAAQBQ3Wzc2WIhuEwJiYARAOM17wAAAQEICgPkW2QBOonu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":247,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347395,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jXJAAD4GOGasEAABwKgKMt1sAFC4TAmJ3NliIoAQAOU17QAAAQEICgE6ie4D5Ftk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":1499347395736,"flow_last_seen":1499347395736,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56738,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":250,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347395,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86QJAAD4G3M2sEAABwKgKMt2iAFAP0mDzAAAAAKACchCFIAAAAgQFtAQCCAoBOonxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":250,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347395,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3aKdN8ZwD9Jg9KAScSDDCwAAAgQFtAQCCAoD5FtnATqJ8QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":250,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347395,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06QNAAD4G3NSsEAABwKgKMt2iAFAP0mD0nTfGcYAQAOViEgAAAQEICgE6ifID5Ftn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":251,"flow_packet_id":1,"flow_first_seen":1499347398258,"flow_last_seen":1499347398258,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56764,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":251,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347398,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8RfFAAD4Gf9+sEAABwKgKMt28AFBXE8mZAAAAAKACchDSpwAAAgQFtAQCCAoBOoxoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":251,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347398,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3byK2p7LVxPJmqAScSBIHgAAAgQFtAQCCAoD5F3eATqMaAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":251,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347398,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RfJAAD4Gf+asEAABwKgKMt28AFBXE8maitqezIAQAOXnJQAAAQEICgE6jGgD5F3e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":248,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347398,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09hZAAD4Gz8GsEAABwKgKMt2GAFBIK3F09WZM3YARAOU6WQAAAQEICgE6jNwD5Fjd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":248,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347398,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Eo9AAEAGsUnAqAoyrBAAAQBQ3Yb1ZkzdSCtxdYARAOM05QAAAQEICgPkXlIBOozc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":248,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347398,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09hdAAD4Gz8CsEAABwKgKMt2GAFBIK3F19WZM3oAQAOU04gAAAQEICgE6jN0D5F5S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":252,"flow_packet_id":1,"flow_first_seen":1499347399514,"flow_last_seen":1499347399514,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56778,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":252,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347399,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gr5AAD4GQxKsEAABwKgKMt3KAFDFpQ8cAAAAAKACchAdSwAAAgQFtAQCCAoBOo2iAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":252,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347399,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3cp+0BfYxaUPHaAScSAkhQAAAgQFtAQCCAoD5F8YATqNogEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":252,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347399,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gr9AAD4GQxmsEAABwKgKMt3KAFDFpQ8dftAX2YAQAOXDjAAAAQEICgE6jaID5F8Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":249,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347399,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ellAAD4GS3+sEAABwKgKMt2UAFCjvfL1NOA6IYARAOUuRAAAAQEICgE6jdYD5FoZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":249,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347399,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZW1AAEAGXmvAqAoyrBAAAQBQ3ZQ04Doho73y9oARAOMpEgAAAQEICgPkX0wBOo3W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":249,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347399,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0elpAAD4GS36sEAABwKgKMt2UAFCjvfL2NOA6IoAQAOUpDwAAAQEICgE6jdcD5F9M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":253,"flow_packet_id":1,"flow_first_seen":1499347400752,"flow_last_seen":1499347400752,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56792,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":253,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347400,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pCxAAD4GIaSsEAABwKgKMt3YAFC0oCr7AAAAAKACchARLgAAAgQFtAQCCAoBOo7XAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":253,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347400,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3diBtZGUtKAq\/KAScSCakQAAAgQFtAQCCAoD5GBNATqO1wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":253,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347400,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pC1AAD4GIausEAABwKgKMt3YAFC0oCr8gbWRlYAQAOU5mAAAAQEICgE6jtgD5GBN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":250,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347401,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06QRAAD4G3NOsEAABwKgKMt2iAFAP0mD0nTfGcYARAOVcOQAAAQEICgE6j8oD5Ftn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":250,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347401,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pzFAAEAGHKfAqAoyrBAAAQBQ3aKdN8ZxD9Jg9YARAONWYQAAAQEICgPkYUABOo\/K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":250,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347401,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06QVAAD4G3NKsEAABwKgKMt2iAFAP0mD1nTfGcoAQAOVWXgAAAQEICgE6j8sD5GFA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1499347403327,"flow_last_seen":1499347403327,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56818,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":254,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347403,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89cJAAD4G0A2sEAABwKgKMt3yAFCprWSZAAAAAKACchDf5AAAAgQFtAQCCAoBOpFbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":254,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347403,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3fKtl6seqa1kmqAScSAhWAAAAgQFtAQCCAoD5GLRATqRWwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":254,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347403,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09cNAAD4G0BSsEAABwKgKMt3yAFCprWSarZerH4AQAOXAXwAAAQEICgE6kVsD5GLR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":251,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347403,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RfNAAD4Gf+WsEAABwKgKMt28AFBXE8maitqezIARAOXhzQAAAQEICgE6kb8D5F3e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":251,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347403,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/fhAAEAGxd\/AqAoyrBAAAQBQ3byK2p7MVxPJm4ARAOPceAAAAQEICgPkYzQBOpG\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":251,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347403,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RfRAAD4Gf+SsEAABwKgKMt28AFBXE8mbitqezYAQAOXcdgAAAQEICgE6kb8D5GM0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":255,"flow_packet_id":1,"flow_first_seen":1499347404575,"flow_last_seen":1499347404575,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56832,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":255,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347404,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA871lAAD4G1nasEAABwKgKMt4AAFBz\/X3KAAAAAKACchD7HQAAAgQFtAQCCAoBOpKTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":255,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347404,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3gCf5c\/zc\/19y6AScSAkNgAAAgQFtAQCCAoD5GQJATqSkwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":255,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347404,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071pAAD4G1n2sEAABwKgKMt4AAFBz\/X3Ln+XP9IAQAOXDPQAAAQEICgE6kpMD5GQJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":252,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347404,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gsBAAD4GQxisEAABwKgKMt3KAFDFpQ8dftAX2YARAOW+dAAAAQEICgE6krkD5F8Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":252,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347404,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0c\/dAAEAGT+HAqAoyrBAAAQBQ3cp+0BfZxaUPHoARAOO5XwAAAQEICgPkZC4BOpK5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":252,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347404,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gsFAAD4GQxesEAABwKgKMt3KAFDFpQ8eftAX2oAQAOW5XQAAAQEICgE6krkD5GQu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":212,"flow_packet_id":6,"flow_first_seen":1499347332137,"flow_last_seen":1499347337710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56062,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":212,"flow_packet_id":6,"flow_first_seen":1499347332137,"flow_last_seen":1499347337710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56062,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":213,"flow_packet_id":6,"flow_first_seen":1499347333419,"flow_last_seen":1499347338710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56076,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":213,"flow_packet_id":6,"flow_first_seen":1499347333419,"flow_last_seen":1499347338710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56076,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":214,"flow_packet_id":6,"flow_first_seen":1499347334667,"flow_last_seen":1499347339710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56090,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":214,"flow_packet_id":6,"flow_first_seen":1499347334667,"flow_last_seen":1499347339710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56090,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":215,"flow_packet_id":6,"flow_first_seen":1499347337226,"flow_last_seen":1499347342710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56116,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":215,"flow_packet_id":6,"flow_first_seen":1499347337226,"flow_last_seen":1499347342710,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56116,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":216,"flow_packet_id":6,"flow_first_seen":1499347338485,"flow_last_seen":1499347343711,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56130,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":216,"flow_packet_id":6,"flow_first_seen":1499347338485,"flow_last_seen":1499347343711,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56130,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":253,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347406,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pC5AAD4GIaqsEAABwKgKMt3YAFC0oCr8gbWRlYARAOUzwgAAAQEICgE6lK0D5GBN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":253,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347406,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA097dAAEAGzCDAqAoyrBAAAQBQ3diBtZGVtKAq\/YARAOMt7gAAAQEICgPkZiIBOpSt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":253,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347406,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pC9AAD4GIamsEAABwKgKMt3YAFC0oCr9gbWRloAQAOUt7AAAAQEICgE6lK0D5GYi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":256,"flow_packet_id":1,"flow_first_seen":1499347407100,"flow_last_seen":1499347407100,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56858,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":256,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347407,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oV1AAD4GJHOsEAABwKgKMt4aAFCK7TRXAAAAAKACchArEAAAAgQFtAQCCAoBOpUKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":256,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347407,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3hoI+EKiiu00WKAScSB18AAAAgQFtAQCCAoD5GaAATqVCgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":256,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347407,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oV5AAD4GJHqsEAABwKgKMt4aAFCK7TRYCPhCo4AQAOUU9wAAAQEICgE6lQsD5GaA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":257,"flow_packet_id":1,"flow_first_seen":1499347408367,"flow_last_seen":1499347408367,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56872,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":257,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347408,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lz9AAD4GLpGsEAABwKgKMt4oAFBdawF4AAAAAKACchCKJgAAAgQFtAQCCAoBOpZHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":257,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347408,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3igaCcJ\/XWsBeaAScSBC2wAAAgQFtAQCCAoD5Ge9ATqWRwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":257,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347408,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0BAAD4GLpisEAABwKgKMt4oAFBdawF5GgnCgIAQAOXh4gAAAQEICgE6lkcD5Ge9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":254,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347408,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09cRAAD4G0BOsEAABwKgKMt3yAFCprWSarZerH4ARAOW7GAAAAQEICgE6lqED5GLR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":254,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347408,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wwlAAEAGAM\/AqAoyrBAAAQBQ3fKtl6sfqa1km4ARAOO10wAAAQEICgPkaBcBOpah","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":254,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347408,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09cVAAD4G0BKsEAABwKgKMt3yAFCprWSbrZerIIAQAOW10QAAAQEICgE6lqED5GgX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1499347409644,"flow_last_seen":1499347409644,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56886,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":258,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347409,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tAhAAD4GEcisEAABwKgKMt42AFAiiCOOAAAAAKACchChpgAAAgQFtAQCCAoBOpeGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":258,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347409,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ja0TSQNIogjj6AScSBdSgAAAgQFtAQCCAoD5Gj8ATqXhgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":258,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347409,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tAlAAD4GEc+sEAABwKgKMt42AFAiiCOPtE0kDoAQAOX8UAAAAQEICgE6l4cD5Gj8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":255,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347409,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071tAAD4G1nysEAABwKgKMt4AAFBz\/X3Ln+XP9IARAOW+NAAAAQEICgE6l5sD5GQJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":255,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347409,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0puVAAEAGHPPAqAoyrBAAAQBQ3gCf5c\/0c\/19zIARAOO5LQAAAQEICgPkaREBOpeb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":255,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347409,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA071xAAD4G1nusEAABwKgKMt4AAFBz\/X3Mn+XP9YAQAOW5KwAAAQEICgE6l5sD5GkR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":259,"flow_packet_id":1,"flow_first_seen":1499347412160,"flow_last_seen":1499347412160,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56912,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":259,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347412,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VIxAAD4GcUSsEAABwKgKMt5QAFAbQM13AAAAAKACchD8dQAAAgQFtAQCCAoBOpn7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":259,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347412,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3lBjDHLSG0DNeKAScSC4IAAAAgQFtAQCCAoD5GtxATqZ+wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":259,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347412,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VI1AAD4GcUusEAABwKgKMt5QAFAbQM14Ywxy04AQAOVXJwAAAQEICgE6mfwD5Gtx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":256,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347412,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oV9AAD4GJHmsEAABwKgKMt4aAFCK7TRYCPhCo4ARAOUPeAAAAQEICgE6mokD5GaA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":256,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347412,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KVxAAEAGmnzAqAoyrBAAAQBQ3hoI+EKjiu00WYARAOMJ+gAAAQEICgPka\/8BOpqJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":256,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347412,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oWBAAD4GJHisEAABwKgKMt4aAFCK7TRZCPhCpIAQAOUJ+AAAAQEICgE6mokD5Gv\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":260,"flow_packet_id":1,"flow_first_seen":1499347413405,"flow_last_seen":1499347413405,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56926,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":260,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347413,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8g\/NAAD4GQd2sEAABwKgKMt5eAFDJGhjAAAAAAKACchACDQAAAgQFtAQCCAoBOpszAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":260,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347413,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3l7I3\/YFyRoYwaAScSDTeQAAAgQFtAQCCAoD5GyoATqbMwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":260,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347413,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g\/RAAD4GQeSsEAABwKgKMt5eAFDJGhjByN\/2BoAQAOVygQAAAQEICgE6mzMD5Gyo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":257,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347413,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0FAAD4GLpesEAABwKgKMt4oAFBdawF5GgnCgIARAOXcpQAAAQEICgE6m4MD5Ge9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":257,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347413,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rnlAAEAGFV\/AqAoyrBAAAQBQ3igaCcKAXWsBeoARAOPXagAAAQEICgPkbPkBOpuD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":257,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347413,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0JAAD4GLpasEAABwKgKMt4oAFBdawF6GgnCgYAQAOXXaAAAAQEICgE6m4MD5Gz5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1499347414709,"flow_last_seen":1499347414709,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56940,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":261,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347414,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LQhAAD4GmMisEAABwKgKMt5sAFBxqrFxAAAAAKACchC\/dwAAAgQFtAQCCAoBOpx5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":261,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347414,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3mzO8Ll1caqxcqAScSDGHAAAAgQFtAQCCAoD5G3vATqceQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":261,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347414,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LQlAAD4GmM+sEAABwKgKMt5sAFBxqrFyzvC5doAQAOVlJAAAAQEICgE6nHkD5G3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":258,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347414,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tApAAD4GEc6sEAABwKgKMt42AFAiiCOPtE0kDoARAOX3WQAAAQEICgE6nH0D5Gj8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":258,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347414,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Sf1AAEAGedvAqAoyrBAAAQBQ3ja0TSQOIogjkIARAOPyYwAAAQEICgPkbfMBOpx9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":258,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347414,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tAtAAD4GEc2sEAABwKgKMt42AFAiiCOQtE0kD4AQAOXyYQAAAQEICgE6nH0D5G3z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":217,"flow_packet_id":6,"flow_first_seen":1499347339782,"flow_last_seen":1499347345712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":217,"flow_packet_id":6,"flow_first_seen":1499347339782,"flow_last_seen":1499347345712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56144,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":218,"flow_packet_id":6,"flow_first_seen":1499347341106,"flow_last_seen":1499347346712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":218,"flow_packet_id":6,"flow_first_seen":1499347341106,"flow_last_seen":1499347346712,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56158,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":219,"flow_packet_id":6,"flow_first_seen":1499347342386,"flow_last_seen":1499347347713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56172,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":219,"flow_packet_id":6,"flow_first_seen":1499347342386,"flow_last_seen":1499347347713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56172,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":220,"flow_packet_id":6,"flow_first_seen":1499347343672,"flow_last_seen":1499347348713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56186,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":220,"flow_packet_id":6,"flow_first_seen":1499347343672,"flow_last_seen":1499347348713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56186,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":221,"flow_packet_id":6,"flow_first_seen":1499347346211,"flow_last_seen":1499347351713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56212,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":221,"flow_packet_id":6,"flow_first_seen":1499347346211,"flow_last_seen":1499347351713,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56212,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":222,"flow_packet_id":6,"flow_first_seen":1499347347483,"flow_last_seen":1499347352714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56226,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":222,"flow_packet_id":6,"flow_first_seen":1499347347483,"flow_last_seen":1499347352714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56226,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":223,"flow_packet_id":6,"flow_first_seen":1499347348776,"flow_last_seen":1499347354714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56240,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":223,"flow_packet_id":6,"flow_first_seen":1499347348776,"flow_last_seen":1499347354714,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56240,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1499347417243,"flow_last_seen":1499347417243,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56966,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":262,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347417,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82KJAAD4G7S2sEAABwKgKMt6GAFDK0UZQAAAAAKACchDO3gAAAgQFtAQCCAoBOp7yAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":262,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347417,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3oZtyr1sytFGUaAScSAwOgAAAgQFtAQCCAoD5HBoATqe8gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":262,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347417,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02KNAAD4G7TSsEAABwKgKMt6GAFDK0UZRbcq9bYAQAOXPQAAAAQEICgE6nvMD5HBo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":259,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347417,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VI5AAD4GcUqsEAABwKgKMt5QAFAbQM14Ywxy04ARAOVRtwAAAQEICgE6n2sD5Gtx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":259,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347417,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0AjJAAEAGwabAqAoyrBAAAQBQ3lBjDHLTG0DNeYARAONMSAAAAQEICgPkcOEBOp9r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":259,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347417,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VI9AAD4GcUmsEAABwKgKMt5QAFAbQM15Ywxy1IAQAOVMRQAAAQEICgE6n2wD5HDh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1499347418519,"flow_last_seen":1499347418519,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56980,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":263,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347418,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8f6JAAD4GRi6sEAABwKgKMt6UAFCK5d+TAAAAAKACchB0OgAAAgQFtAQCCAoBOqAxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":263,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347418,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3pQDHUU3iuXflKAScSC3OQAAAgQFtAQCCAoD5HGnATqgMQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":263,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347418,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f6NAAD4GRjWsEAABwKgKMt6UAFCK5d+UAx1FOIAQAOVWQQAAAQEICgE6oDED5HGn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":260,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347418,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g\/VAAD4GQeOsEAABwKgKMt5eAFDJGhjByN\/2BoARAOVtTQAAAQEICgE6oGYD5Gyo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":260,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347418,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0h91AAEAGO\/vAqAoyrBAAAQBQ3l7I3\/YGyRoYwoARAONoGwAAAQEICgPkcdsBOqBm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":260,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347418,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g\/ZAAD4GQeKsEAABwKgKMt5eAFDJGhjCyN\/2B4AQAOVoGQAAAQEICgE6oGYD5HHb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":261,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347419,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LQpAAD4GmM6sEAABwKgKMt5sAFBxqrFyzvC5doARAOVgPAAAAQEICgE6oWAD5G3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":261,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347419,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0y6NAAEAG+DTAqAoyrBAAAQBQ3mzO8Ll2caqxc4ARAONbVwAAAQEICgPkctUBOqFg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":261,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347419,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LQtAAD4GmM2sEAABwKgKMt5sAFBxqrFzzvC5d4AQAOVbVQAAAQEICgE6oWAD5HLV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1499347419786,"flow_last_seen":1499347419786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56994,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":264,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347419,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QexAAD4Gg+SsEAABwKgKMt6iAFBxNOCCAAAAAKACchCLsQAAAgQFtAQCCAoBOqFuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":264,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347419,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3qLCWbCfcTTgg6AScSCizgAAAgQFtAQCCAoD5HLkATqhbgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":264,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347419,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qe1AAD4Gg+usEAABwKgKMt6iAFBxNOCDwlmwoIAQAOVB1gAAAQEICgE6oW4D5HLk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1499347421069,"flow_last_seen":1499347421069,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57008,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":265,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347421,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88e9AAD4G0+CsEAABwKgKMt6wAFBX5lNAAAAAAKACchAw8wAAAgQFtAQCCAoBOqKvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":265,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347421,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3rDPNYnSV+ZTQaAScSBgwQAAAgQFtAQCCAoD5HQkATqirwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":265,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347421,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08fBAAD4G0+esEAABwKgKMt6wAFBX5lNBzzWJ04AQAOX\/yAAAAQEICgE6oq8D5HQk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1499347422332,"flow_last_seen":1499347422332,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57022,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":266,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347422,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Nl1AAD4Gj3OsEAABwKgKMt6+AFBNkZW3AAAAAKACchD3hwAAAgQFtAQCCAoBOqPqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":266,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347422,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3r7LRREdTZGVuKAScSCivwAAAgQFtAQCCAoD5HVgATqj6gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":266,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347422,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nl5AAD4Gj3qsEAABwKgKMt6+AFBNkZW4y0URHoAQAOVBxgAAAQEICgE6o+sD5HVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":262,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347422,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02KRAAD4G7TOsEAABwKgKMt6GAFDK0UZRbcq9bYARAOXJ5AAAAQEICgE6pE4D5HBo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":262,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347422,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yKlAAEAG+y7AqAoyrBAAAQBQ3oZtyr1tytFGUoARAOPEiQAAAQEICgPkdcQBOqRO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":262,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347422,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02KVAAD4G7TKsEAABwKgKMt6GAFDK0UZSbcq9boAQAOXEhwAAAQEICgE6pE4D5HXE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":267,"flow_packet_id":1,"flow_first_seen":1499347423604,"flow_last_seen":1499347423604,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57036,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":267,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TspAAD4GdwasEAABwKgKMt7MAFD5I+viAAAAAKACchD0fQAAAgQFtAQCCAoBOqUoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":267,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3szh681K+SPr46AScSDLowAAAgQFtAQCCAoD5HaeATqlKAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":267,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TstAAD4Gdw2sEAABwKgKMt7MAFD5I+vj4evNS4AQAOVqqgAAAQEICgE6pSkD5Hae","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":263,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f6RAAD4GRjSsEAABwKgKMt6UAFCK5d+UAx1FOIARAOVRSAAAAQEICgE6pSkD5HGn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":264,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":651,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9Qe5AAD4GgaGsEAABwKgKMt6iAFBxNOCDwlmwoIAYAOXuFQAAAQEICgE6pSkD5HLkR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdBQTBVN1ZDSU8xOEFVS1BaTkIwWlhGQ0RGOVBWSE0wQlJHT1dNMjJFSUNORVBYSzVVQyUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":264,"flow_packet_id":4,"flow_first_seen":1499347419786,"flow_last_seen":1499347423605,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56994,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27AA0U7VCIO18AUKPZNB0ZXFCDF9PVHM0BRGOWM22EICNEPXK5UC%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0406{"flow_id":264,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xj5AAEAG\/ZnAqAoyrBAAAQBQ3qLCWbCgcTTizIAQAOw4EQAAAQEICgPkdp4BOqUp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":263,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0M6ZAAEAGkDLAqAoyrBAAAQBQ3pQDHUU4iuXflYARAONMUgAAAQEICgPkdp4BOqUp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":263,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f6VAAD4GRjOsEAABwKgKMt6UAFCK5d+VAx1FOYAQAOVMUAAAAQEICgE6pSkD5Hae","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2930{"flow_id":264,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":1933,"pkt":"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","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":264,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347423,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qe9AAD4Gg+msEAABwKgKMt6iAFBxNOLMwlm364AQAQIwrgAAAQEICgE6pSoD5Haf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":264,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347424,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":264,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347424,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":264,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347424,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QfFAAD4Gg+esEAABwKgKMt6iAFBxNORLwlm+1YAQAR0mJgAAAQEICgE6piwD5Heh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":264,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347424,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2934{"flow_id":264,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347424,"pkt_len":1933,"pkt":"AMGxFOsxABm5CmnxCABFAAd\/xkNAAEAG9knAqAoyrBAAAQBQ3qLCWb7VcTTmlIAYAP5+XQAAAQEICgPkd9wBOqZlSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjIzOjQ0IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTgNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Y\/0\/bOBT\/GaT9Dz6fdMAk4vWmuw3WZoIWDnZl60gL23RS5CZua+rEWey08N\/fs5O04WvJioSKY78vn+f3\/PyeX202f+t8afe\/947QREcC9QaH3dM2wruEXL5tE9Lpd9C3k\/5ZFzWcN8jTKQ80IUefMcITrZN9QubzuTN\/68h0TPrn5NpIaRi2YrirLI8T6hC7rzZfbTatnutIxKr1gIzG3t5ezpqTbzQnjIYw3NhoRkxTZFh22c+Mz1q4LWPNYr3bv0kYRkH+1cKaXWtiRHxAwYSmiunWoH+8+x4jksvcaGquBXMvMhGzlA654PpmH52zkWCBZiFqp1Ip5HHNkBekPNE8HqPtb563g\/b3UYdGMSp5BUOXbIgOkkTwgGouY7Tdubg82EGzhtN4g1532IwJmUQA7XWT5IoLFILHU5Qy0cJK3wimJoxpjDRYUxgRKIXRJGWjFnYcAn\/hbE7NLIkojx27TO5L47AVpZz\/eETHjMDUbUkjOjNkjl1YyFDW2iqEKzqj+SxGKg1uAblS9n8PFDhXCrtNklMWniOF68x4KMMbFAiqjNdlxHDu0pDPEA9b2PgOLGJp4fXKkhFSmd9o8mh8D4k1UhEhx9JJ4jFGVEAgrHDU0m7ACuruqTab7IPjsor2e2t+QsOQhblBQJCJ0k6zeihkMDVbIziScQCqpy0853Eo5w4sWRytrdwSZwuXrMBAb7nLwe4JbFuTUNhlwd3N5wjkMZy+LDBTykkmyRPy75Ji97QyU08tHLgsWaFvQYNdzwwRgeMHk6hzWFFGMuGusaGzyvnmEB7DNNOMPIHqYQbsHpr\/6FimQU0P3BXIrllQB4Clx25bRhGNQ3QaXzHrkfVQBCod1UFh6QGFd368nuIRJ87HBI5qiwNnFrIVUfIsfuweczjcp2ZGrb03WSIkDevsTsFRwBjYrzX9QxMNN1ctFxUs9tyyIEsZah\/0+u2Tg\/WgqJ+C18Fh6eFMf+2+VLAaif4QLrdaTqlw3UGDtg\/N9M56qOaMTn1eC1LJgt1LGCGPKROt6LRTM73elXutlF8LSM6AXahnoFb5crbmVhhxaUW\/YnkV9SwcaYljUXy9ABpVdzdUicLTMr0NYc0ryJ5FqC5XXodLMuya+hHiI5+qtx3Az+ORXKGuQoXd3kkPTsdI1lNEhzLTK9QsaLB7YIYvt62m0FupfkmE3a4d3wFQVGy3ar\/HC0FTwi4LQehkzGqh26xVC8HmpPEr3QWUzI2iYK4Iny0qWD+QIfNpymhRP49kGqGYRlCtAz+UvTbFtfDvGEG3NJGA\/Z+jflGbNpPC4ssJ1VsK3cgstcwfy8o6TrJq8Y8L0eZ3Ud9WiVQ2jDiQzajI4NPLPwttJHHzpoIYlDneJGXuCRNCoqLVcKHyV1Iw8PB4e+u0+6Xb8fbOTry3\/\/591Dk\/2+sPvh597g56g4uz7++9y3d\/NXqDT+3jwx+Dd42LT8c\/tnY+VCWEMshMp+UEUk452\/mwaEkATsqsa5Yebk7+dM\/gwNvwTyOaX1YwadaK+IBoXMaVaT5V0bDKOVWJ7VkhRNm1CTNiPburwLP+wrO+9Sy0YzQdQyeK4Vai8RS7vy5rEcW18QG3D1WKZql\/BG0dmOu3ob\/Svle0njUxPi1vNU4WO3M+5QkLObWizVfVclVa\/ji258t4Gk9hZjDmi2QcyMhcD7sj+tOxTxIPgngG47M05zipYKluWAlPqrtHXdVRZLc81MvOdZhCv5v\/linskZRX5J1AMJouTvNDeVHdKM0i39wlD+aHYaa16bOL\/HDB2RzB8U8WOTuRSZb4JZmM23nWXz467APFINlGj9z2M5DoT0CiCcePAMnWFH+UjmgJOd9CO9hFK2F5kAwD9rLAlJW5EprZTSr4GPK2YCPIn00WuQPFUpN395sEvhANIx4XLoTvsjhAXfO6VNCAxCUF3OqnHa9YCbky10dYevFRh46k1LceWxJ3ndeu5KFrtZqAibk483dB+2Ln\/g+0PlILkhQAAA==","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":264,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347424,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QfNAAD4Gg+WsEAABwKgKMt6iAFBxNOaUwlnGIIAQATsb\/wAAAQEICgE6pmYD5Hfc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":189,"flow_packet_id":310,"flow_first_seen":1499347291442,"flow_last_seen":1499347358996,"flow_tot_l4_data_len":242610,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":55632,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":224,"flow_packet_id":6,"flow_first_seen":1499347351299,"flow_last_seen":1499347356715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56266,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":224,"flow_packet_id":6,"flow_first_seen":1499347351299,"flow_last_seen":1499347356715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56266,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":225,"flow_packet_id":6,"flow_first_seen":1499347352698,"flow_last_seen":1499347357715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56280,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":225,"flow_packet_id":6,"flow_first_seen":1499347352698,"flow_last_seen":1499347357715,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56280,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":227,"flow_packet_id":6,"flow_first_seen":1499347356478,"flow_last_seen":1499347361716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56320,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":227,"flow_packet_id":6,"flow_first_seen":1499347356478,"flow_last_seen":1499347361716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56320,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":228,"flow_packet_id":6,"flow_first_seen":1499347357727,"flow_last_seen":1499347363716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56334,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":228,"flow_packet_id":6,"flow_first_seen":1499347357727,"flow_last_seen":1499347363716,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56334,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":229,"flow_packet_id":6,"flow_first_seen":1499347360285,"flow_last_seen":1499347365717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56360,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":229,"flow_packet_id":6,"flow_first_seen":1499347360285,"flow_last_seen":1499347365717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56360,"dst_port":80,"l4_proto":"tcp"}
+0920{"flow_id":264,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347425,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzQfRAAD4GgmWsEAABwKgKMt6iAFBxNOaUwlnGIIAYATvKCgAAAQEICgE6p2ID5HfcR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":264,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347425,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":268,"flow_packet_id":1,"flow_first_seen":1499347426122,"flow_last_seen":1499347426122,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57062,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":268,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347426,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vtlAAD4GBvesEAABwKgKMt7mAFDtahlHAAAAAKACchDQQgAAAgQFtAQCCAoBOqeeAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":268,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347426,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ub5Z5wJ7WoZSKAScSC+twAAAgQFtAQCCAoD5HkUATqnngEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":268,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347426,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vtpAAD4GBv6sEAABwKgKMt7mAFDtahlI+WecCoAQAOVdvwAAAQEICgE6p54D5HkU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":265,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347426,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08fFAAD4G0+asEAABwKgKMt6wAFBX5lNBzzWJ04ARAOX6QAAAAQEICgE6qDYD5HQk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":265,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347426,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08H9AAEAG01jAqAoyrBAAAQBQ3rDPNYnTV+ZTQoARAOP0uQAAAQEICgPkeawBOqg2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":265,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347426,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08fJAAD4G0+WsEAABwKgKMt6wAFBX5lNCzzWJ1IAQAOX0twAAAQEICgE6qDYD5Hms","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":269,"flow_packet_id":1,"flow_first_seen":1499347427366,"flow_last_seen":1499347427366,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57076,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":269,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347427,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UGVAAD4GdWusEAABwKgKMt70AFC9kfiwAAAAAKACchAfbQAAAgQFtAQCCAoBOqjVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":269,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347427,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3vS8sHHovZH4saAScSBzgwAAAgQFtAQCCAoD5HpLATqo1QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":269,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347427,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UGZAAD4GdXKsEAABwKgKMt70AFC9kfixvLBx6YAQAOUSiwAAAQEICgE6qNUD5HpL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":266,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347427,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nl9AAD4Gj3msEAABwKgKMt6+AFBNkZW4y0URHoARAOU8gAAAAQEICgE6qTAD5HVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":266,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347427,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0a7hAAEAGWCDAqAoyrBAAAQBQ3r7LRREeTZGVuYARAOM3OwAAAQEICgPkeqYBOqkw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":266,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347427,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NmBAAD4Gj3isEAABwKgKMt6+AFBNkZW5y0URH4AQAOU3OQAAAQEICgE6qTAD5Hqm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":270,"flow_packet_id":1,"flow_first_seen":1499347428671,"flow_last_seen":1499347428671,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57090,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":270,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347428,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vFFAAD4GCX+sEAABwKgKMt8CAFCqwBZKAAAAAKACchATUQAAAgQFtAQCCAoBOqobAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":270,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347428,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3wITPWXXqsAWS6AScSAbpgAAAgQFtAQCCAoD5HuRATqqGwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":270,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347428,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vFJAAD4GCYasEAABwKgKMt8CAFCqwBZLEz1l2IAQAOW6rQAAAQEICgE6qhsD5HuR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":267,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347428,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TsxAAD4GdwysEAABwKgKMt7MAFD5I+vj4evNS4ARAOVlqAAAAQEICgE6qioD5Hae","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":267,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347428,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tutAAEAGDO3AqAoyrBAAAQBQ3szh681L+SPr5IARAONgpwAAAQEICgPke6ABOqoq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":267,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347428,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ts1AAD4GdwusEAABwKgKMt7MAFD5I+vk4evNTIAQAOVgpAAAAQEICgE6qisD5Hug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":271,"flow_packet_id":1,"flow_first_seen":1499347431192,"flow_last_seen":1499347431192,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57116,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":271,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347431,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+sNAAD4GywysEAABwKgKMt8cAFA\/1VZRAAAAAKACchA7pAAAAgQFtAQCCAoBOqySAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":271,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347431,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3xwMzQFkP9VWUqAScSCsZgAAAgQFtAQCCAoD5H4HATqskgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":271,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347431,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+sRAAD4GyxOsEAABwKgKMt8cAFA\/1VZSDM0BZYAQAOVLbgAAAQEICgE6rJID5H4H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":268,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347431,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vttAAD4GBv2sEAABwKgKMt7mAFDtahlI+WecCoARAOVYRAAAAQEICgE6rRgD5HkU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":268,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347431,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04oRAAEAG4VPAqAoyrBAAAQBQ3ub5Z5wK7WoZSYARAONSywAAAQEICgPkfo4BOq0Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":268,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347431,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vtxAAD4GBvysEAABwKgKMt7mAFDtahlJ+WecC4AQAOVSyAAAAQEICgE6rRkD5H6O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1499347432482,"flow_last_seen":1499347432482,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57130,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":272,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347432,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rn5AAD4GF1KsEAABwKgKMt8qAFCuFwOqAAAAAKACchAeuQAAAgQFtAQCCAoBOq3UAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":272,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347432,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3ypOGaUvrhcDq6AScSCpIAAAAgQFtAQCCAoD5H9KATqt1AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":272,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347432,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rn9AAD4GF1msEAABwKgKMt8qAFCuFwOrThmlMIAQAOVIKAAAAQEICgE6rdQD5H9K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":269,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347432,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UGdAAD4GdXGsEAABwKgKMt70AFC9kfixvLBx6YARAOUNTQAAAQEICgE6rhID5HpL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":269,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347432,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DmFAAEAGtXfAqAoyrBAAAQBQ3vS8sHHpvZH4soARAOMIEQAAAQEICgPkf4gBOq4S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":269,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347432,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UGhAAD4GdXCsEAABwKgKMt70AFC9kfiyvLBx6oAQAOUIDgAAAQEICgE6rhMD5H+I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":270,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347433,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vFNAAD4GCYWsEAABwKgKMt8CAFCqwBZLEz1l2IARAOW1ugAAAQEICgE6rw0D5HuR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":270,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347433,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05VpAAEAG3n3AqAoyrBAAAQBQ3wITPWXYqsAWTIARAOOwygAAAQEICgPkgIIBOq8N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":270,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347433,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vFRAAD4GCYSsEAABwKgKMt8CAFCqwBZMEz1l2YAQAOWwyAAAAQEICgE6rw0D5ICC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":273,"flow_packet_id":1,"flow_first_seen":1499347433753,"flow_last_seen":1499347433753,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57144,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":273,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347433,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JW1AAD4GoGOsEAABwKgKMt84AFAetop\/AAAAAKACchAl+QAAAgQFtAQCCAoBOq8SAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":273,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347433,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3zgqPCDhHraKgKAScSBXTwAAAgQFtAQCCAoD5ICHATqvEgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":273,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347433,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JW5AAD4GoGqsEAABwKgKMt84AFAetoqAKjwg4oAQAOX2VgAAAQEICgE6rxID5ICH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":230,"flow_packet_id":6,"flow_first_seen":1499347361540,"flow_last_seen":1499347366717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56374,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":230,"flow_packet_id":6,"flow_first_seen":1499347361540,"flow_last_seen":1499347366717,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56374,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":231,"flow_packet_id":6,"flow_first_seen":1499347364056,"flow_last_seen":1499347369718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":231,"flow_packet_id":6,"flow_first_seen":1499347364056,"flow_last_seen":1499347369718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56400,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":232,"flow_packet_id":6,"flow_first_seen":1499347365320,"flow_last_seen":1499347370718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56414,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":232,"flow_packet_id":6,"flow_first_seen":1499347365320,"flow_last_seen":1499347370718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56414,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":233,"flow_packet_id":6,"flow_first_seen":1499347366586,"flow_last_seen":1499347371718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56428,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":233,"flow_packet_id":6,"flow_first_seen":1499347366586,"flow_last_seen":1499347371718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56428,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":234,"flow_packet_id":6,"flow_first_seen":1499347369077,"flow_last_seen":1499347374718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":234,"flow_packet_id":6,"flow_first_seen":1499347369077,"flow_last_seen":1499347374718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56454,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":235,"flow_packet_id":6,"flow_first_seen":1499347370339,"flow_last_seen":1499347375719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56468,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":235,"flow_packet_id":6,"flow_first_seen":1499347370339,"flow_last_seen":1499347375719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56468,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":274,"flow_packet_id":1,"flow_first_seen":1499347436274,"flow_last_seen":1499347436274,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57170,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":274,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347436,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W69AAD4GaiGsEAABwKgKMt9SAFA\/BeonAAAAAKACchCjcQAAAgQFtAQCCAoBOrGIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":274,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347436,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ31ICI0S7PwXqKKAScSDWjwAAAgQFtAQCCAoD5IL+ATqxiAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":274,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347436,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W7BAAD4GaiisEAABwKgKMt9SAFA\/BeooAiNEvIAQAOV1lwAAAQEICgE6sYgD5IL+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":271,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347436,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+sVAAD4GyxKsEAABwKgKMt8cAFA\/1VZSDM0BZYARAOVGBAAAAQEICgE6sfsD5H4H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":271,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347436,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ghVAAEAGQcPAqAoyrBAAAQBQ3xwMzQFlP9VWU4ARAONAnAAAAQEICgPkg3ABOrH7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":271,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347436,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+sZAAD4GyxGsEAABwKgKMt8cAFA\/1VZTDM0BZoAQAOVAmgAAAQEICgE6sfsD5INw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":275,"flow_packet_id":1,"flow_first_seen":1499347437541,"flow_last_seen":1499347437541,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57184,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":275,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347437,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80SpAAD4G9KWsEAABwKgKMt9gAFCd2mPvAAAAAKACchDJiQAAAgQFtAQCCAoBOrLFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":275,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347437,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ32BqH6Tbndpj8KAScSAzTwAAAgQFtAQCCAoD5IQ6ATqyxQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":275,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347437,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00StAAD4G9KysEAABwKgKMt9gAFCd2mPwah+k3IAQAOXSVgAAAQEICgE6ssUD5IQ6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":272,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347437,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0roBAAD4GF1isEAABwKgKMt8qAFCuFwOrThmlMIARAOVDBgAAAQEICgE6svUD5H9K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":272,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347437,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IVpAAEAGon7AqAoyrBAAAQBQ3ypOGaUwrhcDrIARAOM95wAAAQEICgPkhGoBOrL1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":272,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347437,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0roFAAD4GF1esEAABwKgKMt8qAFCuFwOsThmlMYAQAOU95QAAAQEICgE6svUD5IRq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":273,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347439,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JW9AAD4GoGmsEAABwKgKMt84AFAetoqAKjwg4oARAOXwfgAAAQEICgE6tOkD5ICH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":273,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347439,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0prxAAEAGHRzAqAoyrBAAAQBQ3zgqPCDiHraKgYARAOPqqAAAAQEICgPkhl4BOrTp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":273,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347439,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JXBAAD4GoGisEAABwKgKMt84AFAetoqBKjwg44AQAOXqpgAAAQEICgE6tOkD5IZe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":276,"flow_packet_id":1,"flow_first_seen":1499347440119,"flow_last_seen":1499347440119,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57210,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":276,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347440,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Op5AAD4GizKsEAABwKgKMt96AFDbdo\/XAAAAAKACchBdZwAAAgQFtAQCCAoBOrVJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":276,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347440,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ33qAsDTj23aP2KAScSAeDwAAAgQFtAQCCAoD5Ia\/ATq1SQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":276,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347440,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Op9AAD4GizmsEAABwKgKMt96AFDbdo\/YgLA05IAQAOW9FQAAAQEICgE6tUoD5Ia\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1499347441364,"flow_last_seen":1499347441364,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57224,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":277,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87qpAAD4G1yWsEAABwKgKMt+IAFCFjlgqAAAAAKACchDptwAAAgQFtAQCCAoBOraAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":277,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ34gRswTRhY5YK6AScSBIOAAAAgQFtAQCCAoD5If2ATq2gAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":277,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07qtAAD4G1yysEAABwKgKMt+IAFCFjlgrEbME0oAQAOXnPgAAAQEICgE6toED5If2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":274,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W7FAAD4GaiesEAABwKgKMt9SAFA\/BeooAiNEvIARAOVwQQAAAQEICgE6tt0D5IL+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":274,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zO5AAEAG9unAqAoyrBAAAQBQ31ICI0S8PwXqKYAQAONq7gAAAQEICgPkiFMBOrbd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":274,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zO9AAEAG9ujAqAoyrBAAAQBQ31ICI0S8PwXqKYARAONq7QAAAQEICgPkiFMBOrbd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":274,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347441,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BXZAAD4GwGKsEAABwKgKMt9SAFA\/BeopAiNEvYAQAOVq6wAAAQEICgE6tt0D5IhT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":278,"flow_packet_id":1,"flow_first_seen":1499347442626,"flow_last_seen":1499347442626,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57238,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":278,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347442,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WP9AAD4GbNGsEAABwKgKMt+WAFAR1u9DAAAAAKACchDFDAAAAgQFtAQCCAoBOre8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":278,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347442,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ35b747kmEdbvRKAScSCDygAAAgQFtAQCCAoD5IkyATq3vAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":278,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347442,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WQBAAD4GbNisEAABwKgKMt+WAFAR1u9E++O5J4AQAOUi0gAAAQEICgE6t7wD5Iky","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":275,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347442,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00SxAAD4G9KusEAABwKgKMt9gAFCd2mPwah+k3IARAOXNQwAAAQEICgE6t9cD5IQ6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":275,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347442,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0LZBAAEAGlkjAqAoyrBAAAQBQ32BqH6Tcndpj8YARAOPIMgAAAQEICgPkiUwBOrfX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":275,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347442,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00S1AAD4G9KqsEAABwKgKMt9gAFCd2mPxah+k3YAQAOXIMAAAAQEICgE6t9cD5IlM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":279,"flow_packet_id":1,"flow_first_seen":1499347445158,"flow_last_seen":1499347445158,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57264,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":279,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347445,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/otAAD4Gx0SsEAABwKgKMt+wAFCaOES+AAAAAKACchDknAAAAgQFtAQCCAoBOro1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":279,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347445,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ37CiJaNtmjhEv6AScSAQWQAAAgQFtAQCCAoD5IurATq6NQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":279,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347445,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/oxAAD4Gx0usEAABwKgKMt+wAFCaOES\/oiWjboAQAOWvYAAAAQEICgE6ujUD5Iur","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":276,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347445,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OqBAAD4GizisEAABwKgKMt96AFDbdo\/YgLA05IARAOW3mQAAAQEICgE6usUD5Ia\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":276,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347445,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uN5AAEAGCvrAqAoyrBAAAQBQ33qAsDTk23aP2YARAOOyHwAAAQEICgPkjDoBOrrF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":276,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347445,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OqFAAD4GizesEAABwKgKMt96AFDbdo\/ZgLA05YAQAOWyHQAAAQEICgE6usUD5Iw6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":236,"flow_packet_id":6,"flow_first_seen":1499347371602,"flow_last_seen":1499347376719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56482,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":236,"flow_packet_id":6,"flow_first_seen":1499347371602,"flow_last_seen":1499347376719,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56482,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":237,"flow_packet_id":6,"flow_first_seen":1499347374136,"flow_last_seen":1499347379720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":237,"flow_packet_id":6,"flow_first_seen":1499347374136,"flow_last_seen":1499347379720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56508,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":238,"flow_packet_id":6,"flow_first_seen":1499347375388,"flow_last_seen":1499347380720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56522,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":238,"flow_packet_id":6,"flow_first_seen":1499347375388,"flow_last_seen":1499347380720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56522,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":239,"flow_packet_id":6,"flow_first_seen":1499347376638,"flow_last_seen":1499347381720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":239,"flow_packet_id":6,"flow_first_seen":1499347376638,"flow_last_seen":1499347381720,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56536,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":240,"flow_packet_id":6,"flow_first_seen":1499347379171,"flow_last_seen":1499347384721,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56562,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":240,"flow_packet_id":6,"flow_first_seen":1499347379171,"flow_last_seen":1499347384721,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56562,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":241,"flow_packet_id":6,"flow_first_seen":1499347380424,"flow_last_seen":1499347385722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56576,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":241,"flow_packet_id":6,"flow_first_seen":1499347380424,"flow_last_seen":1499347385722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56576,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":280,"flow_packet_id":1,"flow_first_seen":1499347446419,"flow_last_seen":1499347446419,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57278,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":280,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347446,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oGtAAD4GJWWsEAABwKgKMt++AFBFYxsbAAAAAKACchBhzAAAAgQFtAQCCAoBOrtwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":280,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347446,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ376sLltvRWMbHKAScSDKQgAAAgQFtAQCCAoD5IzmATq7cAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":280,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347446,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oGxAAD4GJWysEAABwKgKMt++AFBFYxscrC5bcIAQAOVpSQAAAQEICgE6u3ED5Izm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":277,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347446,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07qxAAD4G1yusEAABwKgKMt+IAFCFjlgrEbME0oARAOXh\/wAAAQEICgE6u78D5If2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":277,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347446,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iedAAEAGOfHAqAoyrBAAAQBQ34gRswTShY5YLIARAOPcwQAAAQEICgPkjTUBOru\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":277,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347446,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07q1AAD4G1yqsEAABwKgKMt+IAFCFjlgsEbME04AQAOXcvwAAAQEICgE6u78D5I01","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":281,"flow_packet_id":1,"flow_first_seen":1499347447671,"flow_last_seen":1499347447671,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57292,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":281,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347447,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XZhAAD4GaDisEAABwKgKMt\/MAFDFCOExAAAAAKACchAayQAAAgQFtAQCCAoBOrypAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":281,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347447,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ38yhpTp2xQjhMqAScSCtiAAAAgQFtAQCCAoD5I4fATq8qQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":281,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347447,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XZlAAD4GaD+sEAABwKgKMt\/MAFDFCOEyoaU6d4AQAOVMkAAAAQEICgE6vKkD5I4f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":278,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347447,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WQFAAD4GbNesEAABwKgKMt+WAFAR1u9E++O5J4ARAOUd1AAAAQEICgE6vLkD5Iky","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":278,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347447,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NwhAAEAGjNDAqAoyrBAAAQBQ35b747knEdbvRYARAOMY2AAAAQEICgPkji8BOry5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":278,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347447,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WQJAAD4GbNasEAABwKgKMt+WAFAR1u9F++O5KIAQAOUY1gAAAQEICgE6vLkD5I4v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":282,"flow_packet_id":1,"flow_first_seen":1499347450180,"flow_last_seen":1499347450180,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57318,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":282,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347450,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82VFAAD4G7H6sEAABwKgKMt\/mAFCGVWZMAAAAAKACchDR0wAAAgQFtAQCCAoBOr8dAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":282,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347450,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3+bg3FPQhlVmTaAScSAJjwAAAgQFtAQCCAoD5JCSATq\/HQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":282,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347450,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02VJAAD4G7IWsEAABwKgKMt\/mAFCGVWZN4NxT0YAQAOWolgAAAQEICgE6vx0D5JCS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":279,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347450,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/o1AAD4Gx0qsEAABwKgKMt+wAFCaOES\/oiWjboARAOWp7QAAAQEICgE6v6cD5Iur","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":279,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347450,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MnNAAEAGkWXAqAoyrBAAAQBQ37CiJaNumjhEwIARAOOkfAAAAQEICgPkkR0BOr+n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":279,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347450,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/o5AAD4Gx0msEAABwKgKMt+wAFCaOETAoiWjb4AQAOWkegAAAQEICgE6v6cD5JEd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":283,"flow_packet_id":1,"flow_first_seen":1499347451427,"flow_last_seen":1499347451427,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57332,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":283,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347451,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gftAAD4GQ9WsEAABwKgKMt\/0AFCzvkGvAAAAAKACchDHwgAAAgQFtAQCCAoBOsBUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":283,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347451,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ3\/Qj19JNs75BsKAScSA8zgAAAgQFtAQCCAoD5JHKATrAVAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":283,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347451,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gfxAAD4GQ9ysEAABwKgKMt\/0AFCzvkGwI9fSToAQAOXb1QAAAQEICgE6wFQD5JHK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":280,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347451,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oG1AAD4GJWusEAABwKgKMt++AFBFYxscrC5bcIARAOVkGAAAAQEICgE6wKED5Izm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":280,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347451,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yWdAAEAG+nDAqAoyrBAAAQBQ376sLltwRWMbHYARAONe6AAAAQEICgPkkhcBOsCh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":280,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347451,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oG5AAD4GJWqsEAABwKgKMt++AFBFYxsdrC5bcYAQAOVe5gAAAQEICgE6wKED5JIX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":284,"flow_packet_id":1,"flow_first_seen":1499347452731,"flow_last_seen":1499347452731,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57346,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":284,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347452,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OxxAAD4GirSsEAABwKgKMuACAFCP5\/qGAAAAAKACchAxbgAAAgQFtAQCCAoBOsGaAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":284,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347452,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4AJ1f\/zHj+f6h6AScSApEQAAAgQFtAQCCAoD5JMQATrBmgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":284,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347452,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ox1AAD4GirusEAABwKgKMuACAFCP5\/qHdX\/8yIAQAOXIGAAAAQEICgE6wZoD5JMQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":281,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347452,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XZpAAD4GaD6sEAABwKgKMt\/MAFDFCOEyoaU6d4ARAOVHnQAAAQEICgE6wZsD5I4f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":281,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347452,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qWZAAEAGGnLAqAoyrBAAAQBQ38yhpTp3xQjhM4ARAONCrAAAAQEICgPkkxEBOsGb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":281,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347452,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XZtAAD4GaD2sEAABwKgKMt\/MAFDFCOEzoaU6eIAQAOVCqgAAAQEICgE6wZsD5JMR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":285,"flow_packet_id":1,"flow_first_seen":1499347455224,"flow_last_seen":1499347455224,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57372,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":285,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347455,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8z+5AAD4G9eGsEAABwKgKMuAcAFC7QQvkAAAAAKACchDyLAAAAgQFtAQCCAoBOsQKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":285,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347455,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4BwGoR45u0EL5aAScSA0zgAAAgQFtAQCCAoD5JV\/ATrECgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":285,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347455,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z+9AAD4G9eisEAABwKgKMuAcAFC7QQvlBqEeOoAQAOXT1QAAAQEICgE6xAoD5JV\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":282,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347455,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02VNAAD4G7ISsEAABwKgKMt\/mAFCGVWZN4NxT0YARAOWjKQAAAQEICgE6xIkD5JCS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":282,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347455,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xi5AAEAG\/anAqAoyrBAAAQBQ3+bg3FPRhlVmToARAOOdvQAAAQEICgPklf8BOsSJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":282,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347455,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02VRAAD4G7IOsEAABwKgKMt\/mAFCGVWZO4NxT0oAQAOWduwAAAQEICgE6xIkD5JX\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":242,"flow_packet_id":6,"flow_first_seen":1499347381694,"flow_last_seen":1499347386722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56590,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":242,"flow_packet_id":6,"flow_first_seen":1499347381694,"flow_last_seen":1499347386722,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56590,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":243,"flow_packet_id":6,"flow_first_seen":1499347384186,"flow_last_seen":1499347389723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56616,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":243,"flow_packet_id":6,"flow_first_seen":1499347384186,"flow_last_seen":1499347389723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56616,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":244,"flow_packet_id":6,"flow_first_seen":1499347385481,"flow_last_seen":1499347390723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":244,"flow_packet_id":6,"flow_first_seen":1499347385481,"flow_last_seen":1499347390723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56630,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":245,"flow_packet_id":6,"flow_first_seen":1499347386736,"flow_last_seen":1499347392723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56644,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":245,"flow_packet_id":6,"flow_first_seen":1499347386736,"flow_last_seen":1499347392723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56644,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":246,"flow_packet_id":6,"flow_first_seen":1499347389305,"flow_last_seen":1499347394723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56670,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":246,"flow_packet_id":6,"flow_first_seen":1499347389305,"flow_last_seen":1499347394723,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56670,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":247,"flow_packet_id":6,"flow_first_seen":1499347390580,"flow_last_seen":1499347395724,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56684,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":247,"flow_packet_id":6,"flow_first_seen":1499347390580,"flow_last_seen":1499347395724,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56684,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":286,"flow_packet_id":1,"flow_first_seen":1499347456462,"flow_last_seen":1499347456462,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57386,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":286,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347456,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YWdAAD4GZGmsEAABwKgKMuAqAFCeBqRYAAAAAKACchB1sAAAAgQFtAQCCAoBOsU\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":286,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347456,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4CoPzfb\/ngakWaAScSDVKAAAAgQFtAQCCAoD5Ja1ATrFPwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":286,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347456,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YWhAAD4GZHCsEAABwKgKMuAqAFCeBqRZD833AIAQAOV0MAAAAQEICgE6xT8D5Ja1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":283,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347456,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gf1AAD4GQ9usEAABwKgKMt\/0AFCzvkGwI9fSToARAOXWpQAAAQEICgE6xYMD5JHK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":283,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347456,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RLdAAEAGfyHAqAoyrBAAAQBQ3\/Qj19JOs75BsYARAOPRdwAAAQEICgPklvkBOsWD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":283,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347456,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gf5AAD4GQ9qsEAABwKgKMt\/0AFCzvkGxI9fST4AQAOXRdAAAAQEICgE6xYQD5Jb5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":287,"flow_packet_id":1,"flow_first_seen":1499347457705,"flow_last_seen":1499347457705,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57400,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":287,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347457,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA816NAAD4G7iysEAABwKgKMuA4AFCwfBHVAAAAAKACchD0eAAAAgQFtAQCCAoBOsZ2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":287,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347457,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4DiBhHFpsHwR1qAScSBmmgAAAgQFtAQCCAoD5JfrATrGdgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":287,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347457,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA016RAAD4G7jOsEAABwKgKMuA4AFCwfBHWgYRxaoAQAOUFogAAAQEICgE6xnYD5Jfr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":284,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347457,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ox5AAD4GirqsEAABwKgKMuACAFCP5\/qHdX\/8yIARAOXDNAAAAQEICgE6xn0D5JMQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":284,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347457,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aztAAEAGWJ3AqAoyrBAAAQBQ4AJ1f\/zIj+f6iIARAOO+UgAAAQEICgPkl\/MBOsZ9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":284,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347457,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ox9AAD4GirmsEAABwKgKMuACAFCP5\/qIdX\/8yYAQAOW+TwAAAQEICgE6xn4D5Jfz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":288,"flow_packet_id":1,"flow_first_seen":1499347460253,"flow_last_seen":1499347460253,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57426,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":288,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347460,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eW5AAD4GTGKsEAABwKgKMuBSAFDnp7GdAAAAAKACchAa7gAAAgQFtAQCCAoBOsjzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":288,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347460,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4FLH4MUu56exnqAScSDwcAAAAgQFtAQCCAoD5JpoATrI8wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":288,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347460,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eW9AAD4GTGmsEAABwKgKMuBSAFDnp7Gex+DFL4AQAOWPeAAAAQEICgE6yPMD5Jpo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":285,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347460,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z\/BAAD4G9eesEAABwKgKMuAcAFC7QQvlBqEeOoARAOXOcgAAAQEICgE6yWwD5JV\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":285,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347460,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hNtAAEAGPv3AqAoyrBAAAQBQ4BwGoR46u0EL5oARAOPJEQAAAQEICgPkmuEBOsls","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":285,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347460,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z\/FAAD4G9easEAABwKgKMuAcAFC7QQvmBqEeO4AQAOXJDwAAAQEICgE6yWwD5Jrh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1499347461508,"flow_last_seen":1499347461508,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57440,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":289,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347461,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80JNAAD4G9TysEAABwKgKMuBgAFDZtRq+AAAAAKACchC+dwAAAgQFtAQCCAoBOsotAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":289,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347461,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4GAaiodM2bUav6AScSB9+QAAAgQFtAQCCAoD5JuiATrKLQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":289,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347461,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00JRAAD4G9UOsEAABwKgKMuBgAFDZtRq\/GoqHTYAQAOUdAQAAAQEICgE6yi0D5Jui","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":286,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347461,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YWlAAD4GZG+sEAABwKgKMuAqAFCeBqRZD833AIARAOVvCAAAAQEICgE6ymYD5Ja1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":286,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347461,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bNtAAEAGVv3AqAoyrBAAAQBQ4CoPzfcAngakWoARAONp4wAAAQEICgPkm9sBOspm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":286,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347461,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YWpAAD4GZG6sEAABwKgKMuAqAFCeBqRaD833AYAQAOVp4QAAAQEICgE6ymYD5Jvb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":287,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347462,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA016VAAD4G7jKsEAABwKgKMuA4AFCwfBHWgYRxaoARAOUAtwAAAQEICgE6y2AD5Jfr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":287,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347462,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07b9AAEAG1hjAqAoyrBAAAQBQ4DiBhHFqsHwR14ARAOP7zQAAAQEICgPknNUBOstg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":287,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347462,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA016ZAAD4G7jGsEAABwKgKMuA4AFCwfBHXgYRxa4AQAOX7ywAAAQEICgE6y2AD5JzV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":290,"flow_packet_id":1,"flow_first_seen":1499347462759,"flow_last_seen":1499347462759,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57454,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":290,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347462,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8K55AAD4GmjKsEAABwKgKMuBuAFAjB+D7AAAAAKACchCtogAAAgQFtAQCCAoBOstlAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":290,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347462,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4G52KJeXIwfg\/KAScSAAAgAAAgQFtAQCCAoD5JzbATrLZQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":290,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347462,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K59AAD4GmjmsEAABwKgKMuBuAFAjB+D8diiXmIAQAOWfCAAAAQEICgE6y2YD5Jzb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":291,"flow_packet_id":1,"flow_first_seen":1499347465304,"flow_last_seen":1499347465304,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57480,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":291,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347465,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nSBAAD4GKLCsEAABwKgKMuCIAFBo61DCAAAAAKACchD1YAAAAgQFtAQCCAoBOs3iAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":291,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347465,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4Ijwu80MaOtQw6AScSCVOwAAAgQFtAQCCAoD5J9XATrN4gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":291,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347465,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nSFAAD4GKLesEAABwKgKMuCIAFBo61DD8LvNDYAQAOU0QwAAAQEICgE6zeID5J9X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":288,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347465,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXBAAD4GTGisEAABwKgKMuBSAFDnp7Gex+DFL4ARAOWKHAAAAQEICgE6zk4D5Jpo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":288,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347465,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WutAAEAGaO3AqAoyrBAAAQBQ4FLH4MUv56exn4ARAOOEwQAAAQEICgPkn8QBOs5O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":288,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347465,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXFAAD4GTGesEAABwKgKMuBSAFDnp7Gfx+DFMIAQAOWEvwAAAQEICgE6zk4D5J\/E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":248,"flow_packet_id":6,"flow_first_seen":1499347393135,"flow_last_seen":1499347398725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56710,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":248,"flow_packet_id":6,"flow_first_seen":1499347393135,"flow_last_seen":1499347398725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56710,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":249,"flow_packet_id":6,"flow_first_seen":1499347394398,"flow_last_seen":1499347399725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56724,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":249,"flow_packet_id":6,"flow_first_seen":1499347394398,"flow_last_seen":1499347399725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56724,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":250,"flow_packet_id":6,"flow_first_seen":1499347395736,"flow_last_seen":1499347401725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56738,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":250,"flow_packet_id":6,"flow_first_seen":1499347395736,"flow_last_seen":1499347401725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56738,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":251,"flow_packet_id":6,"flow_first_seen":1499347398258,"flow_last_seen":1499347403725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56764,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":251,"flow_packet_id":6,"flow_first_seen":1499347398258,"flow_last_seen":1499347403725,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56764,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":252,"flow_packet_id":6,"flow_first_seen":1499347399514,"flow_last_seen":1499347404726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56778,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":252,"flow_packet_id":6,"flow_first_seen":1499347399514,"flow_last_seen":1499347404726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56778,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":292,"flow_packet_id":1,"flow_first_seen":1499347466553,"flow_last_seen":1499347466553,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57494,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":292,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347466,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KvdAAD4GmtmsEAABwKgKMuCWAFD9ZuXtAAAAAKACchDKcwAAAgQFtAQCCAoBOs8aAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":292,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347466,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4JYOrdMQ\/Wbl7qAScSBFIQAAAgQFtAQCCAoD5KCPATrPGgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":292,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347466,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvhAAD4GmuCsEAABwKgKMuCWAFD9ZuXuDq3TEYAQAOXkKAAAAQEICgE6zxoD5KCP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":289,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347466,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00JVAAD4G9UKsEAABwKgKMuBgAFDZtRq\/GoqHTYARAOUX5QAAAQEICgE6z0gD5Jui","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":289,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347466,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J\/NAAEAGm+XAqAoyrBAAAQBQ4GAaiodN2bUawIARAOMSygAAAQEICgPkoL4BOs9I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":289,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347466,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00JZAAD4G9UGsEAABwKgKMuBgAFDZtRrAGoqHToAQAOUSyAAAAQEICgE6z0gD5KC+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":293,"flow_packet_id":1,"flow_first_seen":1499347467793,"flow_last_seen":1499347467793,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57508,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":293,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347467,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82olAAD4G60asEAABwKgKMuCkAFDARwrZAAAAAKACchDhYwAAAgQFtAQCCAoBOtBQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":293,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347467,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4KSQwyNLwEcK2qAScSCIigAAAgQFtAQCCAoD5KHFATrQUAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":293,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347467,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02opAAD4G602sEAABwKgKMuCkAFDARwrakMMjTIAQAOUnkgAAAQEICgE60FAD5KHF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":290,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347468,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K6BAAD4GmjisEAABwKgKMuBuAFAjB+D8diiXmIARAOWZMQAAAQEICgE60TwD5Jzb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":290,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347468,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NSpAAEAGjq7AqAoyrBAAAQBQ4G52KJeYIwfg\/YARAOOTWwAAAQEICgPkorIBOtE8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":290,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347468,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K6FAAD4GmjesEAABwKgKMuBuAFAjB+D9diiXmYAQAOWTWAAAAQEICgE60T0D5KKy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":294,"flow_packet_id":1,"flow_first_seen":1499347469060,"flow_last_seen":1499347469060,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57522,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":294,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347469,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8H0RAAD4GpoysEAABwKgKMuCyAFAQe87JAAAAAKACchDL9AAAAgQFtAQCCAoBOtGNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":294,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347469,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4LKyNukIEHvOyqAScSCKrQAAAgQFtAQCCAoD5KMCATrRjQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":294,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347469,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H0VAAD4GppOsEAABwKgKMuCyAFAQe87KsjbpCYAQAOUptQAAAQEICgE60Y0D5KMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":295,"flow_packet_id":1,"flow_first_seen":1499347470328,"flow_last_seen":1499347470328,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57536,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":295,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347470,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MvtAAD4GktWsEAABwKgKMuDAAFBLw+AxAAAAAKACchB9+QAAAgQFtAQCCAoBOtLKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":295,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347470,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4MBkpV8JS8PgMqAScSATBgAAAgQFtAQCCAoD5KQ\/ATrSygEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":295,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347470,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvxAAD4GktysEAABwKgKMuDAAFBLw+AyZKVfCoAQAOWyDQAAAQEICgE60soD5KQ\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":291,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347470,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nSJAAD4GKLasEAABwKgKMuCIAFBo61DD8LvNDYARAOUu9AAAAQEICgE60zAD5J9X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":291,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347470,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aatAAEAGWi3AqAoyrBAAAQBQ4Ijwu80NaOtQxIARAOMppgAAAQEICgPkpKYBOtMw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":291,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347470,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nSNAAD4GKLWsEAABwKgKMuCIAFBo61DE8LvNDoAQAOUpowAAAQEICgE60zED5KSm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":296,"flow_packet_id":1,"flow_first_seen":1499347471594,"flow_last_seen":1499347471594,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57550,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":296,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347471,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VndAAD4Gb1msEAABwKgKMuDOAFAlMIJxAAAAAKACchABAwAAAgQFtAQCCAoBOtQGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":296,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347471,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4M5lR7ajJTCCcqAScSA8lgAAAgQFtAQCCAoD5KV8ATrUBgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":296,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347471,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VnhAAD4Gb2CsEAABwKgKMuDOAFAlMIJyZUe2pIAQAOXbnQAAAQEICgE61AYD5KV8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":292,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347471,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvlAAD4Gmt+sEAABwKgKMuCWAFD9ZuXuDq3TEYARAOXfFgAAAQEICgE61CsD5KCP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":292,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347471,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0drFAAEAGTSfAqAoyrBAAAQBQ4JYOrdMR\/Wbl74ARAOPaBgAAAQEICgPkpaABOtQr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":292,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347471,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KvpAAD4Gmt6sEAABwKgKMuCWAFD9ZuXvDq3TEoAQAOXaBAAAAQEICgE61CsD5KWg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":293,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347473,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02otAAD4G60ysEAABwKgKMuCkAFDARwrakMMjTIARAOUhwgAAAQEICgE61h8D5KHF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":293,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347473,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hNhAAEAGPwDAqAoyrBAAAQBQ4KSQwyNMwEcK24ARAOMb9AAAAQEICgPkp5QBOtYf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":293,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347473,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02oxAAD4G60usEAABwKgKMuCkAFDARwrbkMMjTYAQAOUb8gAAAQEICgE61h8D5KeU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":297,"flow_packet_id":1,"flow_first_seen":1499347474100,"flow_last_seen":1499347474100,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57576,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":297,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347474,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IdhAAD4Go\/isEAABwKgKMuDoAFDgcfehAAAAAKACchDOAwAAAgQFtAQCCAoBOtZ5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":297,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347474,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4OgnZn4J4HH3oqAScSB9oAAAAgQFtAQCCAoD5KfuATrWeQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":297,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347474,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IdlAAD4Go\/+sEAABwKgKMuDoAFDgcfeiJ2Z+CoAQAOUcqAAAAQEICgE61nkD5Kfu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":294,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347474,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H0ZAAD4GppKsEAABwKgKMuCyAFAQe87KsjbpCYARAOUkKAAAAQEICgE61xkD5KMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":294,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347474,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QYdAAEAGglHAqAoyrBAAAQBQ4LKyNukJEHvOy4ARAOMenQAAAQEICgPkqI4BOtcZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":294,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347474,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H0dAAD4GppGsEAABwKgKMuCyAFAQe87LsjbpCoAQAOUemwAAAQEICgE61xkD5KiO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":298,"flow_packet_id":1,"flow_first_seen":1499347475384,"flow_last_seen":1499347475384,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57590,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":298,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yGtAAD4G\/WSsEAABwKgKMuD2AFCdWh\/RAAAAAKACchDnnAAAAgQFtAQCCAoBOte6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":298,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4PYsYAVjnVof0qAScSAJpQAAAgQFtAQCCAoD5KkvATrXugEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":298,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yGxAAD4G\/WusEAABwKgKMuD2AFCdWh\/SLGAFZIAQAOWorAAAAQEICgE617oD5Kkv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":295,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Mv1AAD4GktusEAABwKgKMuDAAFBLw+AyZKVfCoARAOWswwAAAQEICgE62BMD5KQ\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":295,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09oJAAEAGzVXAqAoyrBAAAQBQ4MBkpV8KS8PgM4AQAOOnewAAAQEICgPkqYkBOtgT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":295,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09oNAAEAGzVTAqAoyrBAAAQBQ4MBkpV8KS8PgM4ARAOOnegAAAQEICgPkqYkBOtgT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":295,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347475,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IBpAAD4Gpb6sEAABwKgKMuDAAFBLw+AzZKVfC4AQAOWneAAAAQEICgE62BMD5KmJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":253,"flow_packet_id":6,"flow_first_seen":1499347400752,"flow_last_seen":1499347406726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56792,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":253,"flow_packet_id":6,"flow_first_seen":1499347400752,"flow_last_seen":1499347406726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56792,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":254,"flow_packet_id":6,"flow_first_seen":1499347403327,"flow_last_seen":1499347408726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56818,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":254,"flow_packet_id":6,"flow_first_seen":1499347403327,"flow_last_seen":1499347408726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56818,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":255,"flow_packet_id":6,"flow_first_seen":1499347404575,"flow_last_seen":1499347409726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56832,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":255,"flow_packet_id":6,"flow_first_seen":1499347404575,"flow_last_seen":1499347409726,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56832,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":256,"flow_packet_id":6,"flow_first_seen":1499347407100,"flow_last_seen":1499347412728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56858,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":256,"flow_packet_id":6,"flow_first_seen":1499347407100,"flow_last_seen":1499347412728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56858,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":257,"flow_packet_id":6,"flow_first_seen":1499347408367,"flow_last_seen":1499347413728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56872,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":257,"flow_packet_id":6,"flow_first_seen":1499347408367,"flow_last_seen":1499347413728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56872,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":258,"flow_packet_id":6,"flow_first_seen":1499347409644,"flow_last_seen":1499347414728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56886,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":258,"flow_packet_id":6,"flow_first_seen":1499347409644,"flow_last_seen":1499347414728,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56886,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":299,"flow_packet_id":1,"flow_first_seen":1499347476667,"flow_last_seen":1499347476667,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57604,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":299,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347476,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86aJAAD4G3C2sEAABwKgKMuEEAFDYCDFYAAAAAKACchCaGQAAAgQFtAQCCAoBOtj6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":299,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347476,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4QTgdpFp2AgxWaAScSB6wwAAAgQFtAQCCAoD5KpwATrY+gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":299,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347476,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06aNAAD4G3DSsEAABwKgKMuEEAFDYCDFZ4HaRaoAQAOUZywAAAQEICgE62PoD5Kpw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":296,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347476,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VnlAAD4Gb1+sEAABwKgKMuDOAFAlMIJyZUe2pIARAOXWlQAAAQEICgE62Q0D5KV8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":296,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347476,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HCdAAEAGp7HAqAoyrBAAAQBQ4M5lR7akJTCCc4ARAOPRjwAAAQEICgPkqoMBOtkN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":296,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347476,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VnpAAD4Gb16sEAABwKgKMuDOAFAlMIJzZUe2pYAQAOXRjQAAAQEICgE62Q0D5KqD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":300,"flow_packet_id":1,"flow_first_seen":1499347479172,"flow_last_seen":1499347479172,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57630,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":300,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347479,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iKNAAD4GPS2sEAABwKgKMuEeAFCusFPOAAAAAKACchCebgAAAgQFtAQCCAoBOtttAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":300,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347479,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4R7s2gFNrrBTz6AScSAAXwAAAgQFtAQCCAoD5KziATrbbQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":300,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347479,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iKRAAD4GPTSsEAABwKgKMuEeAFCusFPP7NoBToAQAOWfZgAAAQEICgE6220D5Kzi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":297,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347479,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IdpAAD4Go\/6sEAABwKgKMuDoAFDgcfeiJ2Z+CoARAOUXJQAAAQEICgE62\/sD5Kfu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":297,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347479,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA003tAAEAG8FzAqAoyrBAAAQBQ4OgnZn4K4HH3o4ARAOMRowAAAQEICgPkrXEBOtv7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":297,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347479,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IdtAAD4Go\/2sEAABwKgKMuDoAFDgcfejJ2Z+C4AQAOURoAAAAQEICgE62\/wD5K1x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":301,"flow_packet_id":1,"flow_first_seen":1499347480438,"flow_last_seen":1499347480438,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57644,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":301,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347480,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UJlAAD4GdTesEAABwKgKMuEsAFBzZ4wwAAAAAKACchCgCwAAAgQFtAQCCAoBOtypAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":301,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347480,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4SwTIR0Qc2eMMaAScSC+tQAAAgQFtAQCCAoD5K4fATrcqQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":301,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347480,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UJpAAD4GdT6sEAABwKgKMuEsAFBzZ4wxEyEdEYAQAOVdvQAAAQEICgE63KkD5K4f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":298,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347480,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yG1AAD4G\/WqsEAABwKgKMuD2AFCdWh\/SLGAFZIARAOWjbwAAAQEICgE63PYD5Kkv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":298,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347480,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qw9AAEAGGMnAqAoyrBAAAQBQ4PYsYAVknVof04ARAOOeNAAAAQEICgPkrmsBOtz2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":298,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347480,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yG5AAD4G\/WmsEAABwKgKMuD2AFCdWh\/TLGAFZYAQAOWeMgAAAQEICgE63PYD5K5r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":302,"flow_packet_id":1,"flow_first_seen":1499347481724,"flow_last_seen":1499347481724,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57658,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":302,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347481,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8fSpAAD4GSKasEAABwKgKMuE6AFDTgqDBAAAAAKACchAqDwAAAgQFtAQCCAoBOt3rAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":302,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347481,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4TowvlKP04KgwqAScSD0WwAAAgQFtAQCCAoD5K9gATrd6wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":302,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347481,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fStAAD4GSK2sEAABwKgKMuE6AFDTgqDCML5SkIAQAOWTYwAAAQEICgE63esD5K9g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":299,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347481,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06aRAAD4G3DOsEAABwKgKMuEEAFDYCDFZ4HaRaoARAOUU1AAAAQEICgE63fAD5Kpw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":299,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347481,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Pg9AAEAGhcnAqAoyrBAAAQBQ4QTgdpFq2AgxWoARAOMP4AAAAQEICgPkr2UBOt3w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":299,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347481,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06aVAAD4G3DKsEAABwKgKMuEEAFDYCDFa4HaRa4AQAOUP3gAAAQEICgE63fAD5K9l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":303,"flow_packet_id":1,"flow_first_seen":1499347484263,"flow_last_seen":1499347484263,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57684,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":303,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347484,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UOVAAD4GdOusEAABwKgKMuFUAFABZrCAAAAAAKACchDp2AAAAgQFtAQCCAoBOuBlAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":303,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347484,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4VQEZrkRAWawgaAScSB3gAAAAgQFtAQCCAoD5LHbATrgZQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":303,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347484,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOZAAD4GdPKsEAABwKgKMuFUAFABZrCBBGa5EoAQAOUWhwAAAQEICgE64GYD5LHb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":300,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347484,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iKVAAD4GPTOsEAABwKgKMuEeAFCusFPP7NoBToARAOWZ9AAAAQEICgE64N4D5Kzi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":300,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347484,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sx1AAEAGELvAqAoyrBAAAQBQ4R7s2gFOrrBT0IARAOOUhAAAAQEICgPkslMBOuDe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":300,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347484,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iKZAAD4GPTKsEAABwKgKMuEeAFCusFPQ7NoBT4AQAOWUggAAAQEICgE64N4D5LJT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":304,"flow_packet_id":1,"flow_first_seen":1499347485533,"flow_last_seen":1499347485533,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57698,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":304,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347485,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jaZAAD4GOCqsEAABwKgKMuFiAFALNGwFAAAAAKACchAjOgAAAgQFtAQCCAoBOuGjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":304,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347485,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4WJ5n4cfCzRsBqAScSBsXQAAAgQFtAQCCAoD5LMYATrhowEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":304,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347485,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jadAAD4GODGsEAABwKgKMuFiAFALNGwGeZ+HIIAQAOULZQAAAQEICgE64aMD5LMY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":301,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347485,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UJtAAD4GdT2sEAABwKgKMuEsAFBzZ4wxEyEdEYARAOVYjQAAAQEICgE64dgD5K4f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":301,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347485,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rlxAAEAGFXzAqAoyrBAAAQBQ4SwTIR0Rc2eMMoARAONTYAAAAQEICgPks00BOuHY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":301,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347485,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UJxAAD4GdTysEAABwKgKMuEsAFBzZ4wyEyEdEoAQAOVTXgAAAQEICgE64dgD5LNN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":259,"flow_packet_id":6,"flow_first_seen":1499347412160,"flow_last_seen":1499347417729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56912,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":259,"flow_packet_id":6,"flow_first_seen":1499347412160,"flow_last_seen":1499347417729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56912,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":260,"flow_packet_id":6,"flow_first_seen":1499347413405,"flow_last_seen":1499347418729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56926,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":260,"flow_packet_id":6,"flow_first_seen":1499347413405,"flow_last_seen":1499347418729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56926,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":261,"flow_packet_id":6,"flow_first_seen":1499347414709,"flow_last_seen":1499347419729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56940,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":261,"flow_packet_id":6,"flow_first_seen":1499347414709,"flow_last_seen":1499347419729,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56940,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":262,"flow_packet_id":6,"flow_first_seen":1499347417243,"flow_last_seen":1499347422731,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56966,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":262,"flow_packet_id":6,"flow_first_seen":1499347417243,"flow_last_seen":1499347422731,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56966,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":263,"flow_packet_id":6,"flow_first_seen":1499347418519,"flow_last_seen":1499347423606,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56980,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":263,"flow_packet_id":6,"flow_first_seen":1499347418519,"flow_last_seen":1499347423606,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56980,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":226,"flow_packet_id":320,"flow_first_seen":1499347355229,"flow_last_seen":1499347423381,"flow_tot_l4_data_len":242645,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":758,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56306,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":302,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347486,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fSxAAD4GSKysEAABwKgKMuE6AFDTgqDCML5SkIARAOWOewAAAQEICgE64tID5K9g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":302,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347486,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05thAAEAG3P\/AqAoyrBAAAQBQ4TowvlKQ04Kgw4ARAOOJlAAAAQEICgPktEgBOuLS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":302,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347486,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fS1AAD4GSKusEAABwKgKMuE6AFDTgqDDML5SkYAQAOWJkgAAAQEICgE64tID5LRI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":305,"flow_packet_id":1,"flow_first_seen":1499347486787,"flow_last_seen":1499347486787,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57712,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":305,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347486,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D7tAAD4GthWsEAABwKgKMuFwAFB2mu1nAAAAAKACchA1KgAAAgQFtAQCCAoBOuLcAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":305,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347486,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4XA0h5CedprtaKAScSC4rAAAAgQFtAQCCAoD5LRSATri3AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":305,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347486,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D7xAAD4GthysEAABwKgKMuFwAFB2mu1oNIeQn4AQAOVXtAAAAQEICgE64twD5LRS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":303,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347487,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":303,"flow_packet_id":4,"flow_first_seen":1499347484263,"flow_last_seen":1499347487799,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57684,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":303,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347487,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DF1AAEAGt3vAqAoyrBAAAQBQ4VQEZrkSAWayAIAQAOsOGwAAAQEICgPktU8BOuPZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2801{"flow_id":303,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347487,"pkt_len":1837,"pkt":"AMGxFOsxABm5CmnxCABFAAcfDF5AAEAGsI\/AqAoyrBAAAQBQ4VQEZrkSAWayAIAYAOt9\/QAAAQEICgPktVABOuPZSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI0OjQ3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1P4zgQ\/gzS\/gefTzpgpcbb2y+3XJoVtHAgsbfctix70kmRm7itwYmD7bTw72\/sOG14LdkioeKXeXk84xnP5N12+Mvga3\/07\/kRmplMoPOLw7PTPsIdQi4\/9gkZjAbox8noyxnqBh\/Q0CieGEKO\/sYIz4wp9glZLBbB4mMg1ZSMvpFbK6Vr2fywox1PkJoUR++2322HTs9tJnLde0JG99OnTxVrRb4VzhhNYbi1FWbMUGRZOuym5PMe7svcsNx0RncFwyipZj1s2K0hVsSfKJlRpZnpXYyOO39gRCqZW6HhRrDoeylypuiYC27u9tE3NhEsMSxFfSW1RkNuGBomiheG51O0+2M43EP7+2hAsxzVvIKhSzZGB0UheEINlznaHXy\/PNhD827Q\/YDeD9icCVlkAO19SCrFHoXg+TVSTPSwNneC6RljBiMDp\/GHSLTGaKbYpIeDgMBfOl9Qu0oyyvPAbZPH0jiYopbzH8\/olBFYui9pQueWLHAbSxnanbYJ4YrOabWKkVbJPSBX2v0\/BwXBlcZRSCpK7zniXWfHY5neoURQbb0uM4Yrl6Z8jnjaw9Z3cCKmvNcbW1ZIY30r5Nn0ERJ3SE2EnMqgyKcYUQEXYY2jVucGrKDukWpr5BgcVza0P9qLC5qmLK0OBASlqM9pdw+FTK6taQRHMk9A9XUPL3ieykUAWw5Hb6c6SbCDa1ZgoPfcFeDoBMwWEgpWFjzafo1AnkP0lYld0kExK16Q\/5AUR6eNlXZqIeDKYo2+JQ2OhnaICIQfLKLBYUMZKUW0gUHnjfjmcD3GqjSMvIDqaQYcHdr\/6FiqpKUHHgpktyxpA8DR46gvs4zmKTrNr5jzyGYoEq0mbVA4ekAx\/Ha8meIJJ8HnAkK1x4GzTNmaW\/IqfhwdcwjuU7uiN7ZNWQhJ0zbW8RwexoWbbegfWhh4uVq5yLO4uGVJqRjqH5yP+icHm0HRN4K3weHoIab\/OXury2olxmN43Fo5pcH1AA3aPbTLe5uhWjB6HfNWkGoWHF3CCA2ZtrcVnQ5apteHcm+1jlsBqRhwBPUM1Cpfv2xoCitONfRrVlVRr8KhahzL4usN0Oi21tA1iqGR6j6EDZ8gF4tQXa59DldkOLL1I9yPaqmdOYCf5xO5Rl2DCkfnJ+cQHRPZThEdy9KsUbOkwdGBHb6dWW2ht1b9ighHZ278AICv2O7Vfs8XgraEXRWC0MnYXa\/b7jULwXDW\/ZnuAkrmri+YG8Lnywo2TmTKYqoY9fXzRKoM5TSDah34oex1Ka6Hf8UIuqWZBOx\/HY18bRoW\/sSXM2p2NLqTpXLMn+vKOi\/KZvGPvWj7u6xvm0S6HGccyOZUlDAdVlOvjRRR1VQQi9Ituq5gaeBw9nv0BeLN3T6V0eqtgEW7590Dl2HlVtv7ad8vygXVhWsZ4YawW+tl4gzb0WDYeGnY2BkWuiGqptAIYngUaH6No5+XtbxErfEBdwxFgmEqPoKuCo4b96G9MfHQd34tMb4sbz1OlgcLfs0LlnLqRNtZ8+S6Pvnz2F4v42U8\/pjJlC9zYSIzm507E3oTuC8CT4J4BeOrNFc4qWDKdJ2EF9U9om7q8Mmluup14zhW0G5Wv3UGeSbj+LBPBKNqGUxPpSV9pw3LYpvKnwzPcWmMbXN9eH7nbIFOmCiWKbOQRVnENZnM+1XSXfX8+0BxUeyiZx7bOUiMZyDRXsfPAMk96b\/VjugJudhBezhCa2ENIRcl7G2BaSdzLTRrTSr4FNKmYBNIXyHLogvNlE17+yGBGaJpxnPvQpjXbzM6sx93PA1IXFHAo3o6GPqdlGubvdPai886dCKlufeto4g2+dhUPPWqNRMwse9W9VnOfTCL\/geoshewERQAAA==","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":303,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347487,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOhAAD4GdPCsEAABwKgKMuFUAFABZrIABGa\/\/YAQAQAHGQAAAQEICgE649oD5LVQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":303,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347488,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2928{"flow_id":303,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347488,"pkt_len":1932,"pkt":"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","pkt_caplen":1932,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":303,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347488,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOpAAD4GdO6sEAABwKgKMuFUAFABZrRJBGbHR4AQAR38tQAAAQEICgE65DQD5LWp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":303,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzUOtAAD4Gc26sEAABwKgKMuFUAFABZrRJBGbHR4AYAR2qwQAAAQEICgE65TAD5LWpR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":303,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":303,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UOxAAD4GdOysEAABwKgKMuFUAFABZrXIBGbOMYAQATnyNgAAAQEICgE65TED5Lam","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":306,"flow_packet_id":1,"flow_first_seen":1499347489408,"flow_last_seen":1499347489408,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57738,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":306,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86N5AAD4G3PGsEAABwKgKMuGKAFByXg2yAAAAAKACchAWcgAAAgQFtAQCCAoBOuVsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":306,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4YpoWWpFcl4Ns6AScSCJ7AAAAgQFtAQCCAoD5LbhATrlbAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":306,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06N9AAD4G3PisEAABwKgKMuGKAFByXg2zaFlqRoAQAOUo9AAAAQEICgE65WwD5Lbh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":303,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":651,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9UO1AAD4GcqKsEAABwKgKMuFUAFABZrXIBGbOMYAYATka\/AAAAQEICgE65WwD5LamR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjcwQUYwUE1SOUdKVDFPVzQzUFhXWUtBTk9HVjYxODRZTFdYR1VQQTA0QzNYQjUxOUI1NiUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2943{"flow_id":303,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347489,"pkt_len":1933,"pkt":"AMGxFOsxABm5CmnxCABFAAd\/DGRAAEAGsCnAqAoyrBAAAQBQ4VQEZs4xAWa4EYAYAQd+XQAAAQEICgPktuIBOuVsSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI0OjQ5IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Ye0\/jOBD\/G6T9Dj6fdMBJxPTYXS1sm1UfvO5g6dFCWemkyE3c1uDE2dhp4dvf2Ena8CzZIqHi2PP4jWc8nvGH9fpvnfN2\/0f3AE10KFD3snV60kZ4m5DBbpuQTr+Dro\/7Z6eo5uygnk64rwk5+I4Rnmgd7xMym82c2a4jkzHpX5A7I6Vm2PLhtrI8TqAD7H5Y\/7Bet3ruQhGpxjMyant7exlrRr5WnzAawHBtrR4yTZFh2WY\/Uz5t4LaMNIv0dv8+Zhj52VcDa3aniRHxFfkTmiimG5f9w+0vGJFM5lpdcy2Ye5WKiCV0yAXX9\/vogo0E8zULUDuRSqEe1wz1\/ITHmkdjtHnd622h\/X3UoWGECl7B0IANUTOOBfep5jJCm52rQXMLTWtObQf92WFTJmQcArQ\/6yRTnKMQPLpFCRMNrPS9YGrCmMZIgzW5Eb5SGE0SNmpgxyHwF0xn1MySkPLIscvkqTQOW1HI+Y+HdMwITD2UNKJTQ+bYhbkMZa0tQ7ihU5rNYqQS\/wGQG2X\/d0GBc6OwWycZZe45krvOjIcyuEe+oMp4XYYMZy4N+BTxoIGN78AiluReLy0ZIaX5tToPx0+QWCMVEXIsnTgaY0QFBMISRy3sBqyg7olqs8keOC4taX+y5sU0CFiQGQQEqSjsNKstIf1bszWCIxn5oPq2gWc8CuTMgSWLo7GRWeJs4IIVGOgDdznYPYZtqxMKuyy4u\/4WgTyC05f6Zko58SR+Rf5jUuyelGaqqYUDl8ZL9M1psNszQ0Tg+MEk6rRKykgq3BU2dFo63xzCY5ikmpFXUD3PgN2W+Y8OZeJX9MBjgeyO+VUAWHrstmUY0ihAJ9ENsx5ZDYWvklEVFJYeUPQuDldTPOLE+RbDUW1w4EwDtiRK3sSP3UMOh\/vEzKiV9yaNhaRBld3JOXIYl\/ZrRf\/QWMPNVclFOYs9t8xPE4bazW6\/fdxcDYr6KXgVHJYezvS\/p+8VrEaiN4TLrZJTSlyP0KDNlpneWg3VjNFbj1eCVLBgdwAj1GPKRCs66VRMr4\/l3inlVQKSMWAX6hmoVc7PVtwKIy4p6Vcsq6LehCMpcMyLr3dAo6ruhipQ9LRMHkJY8QqyZxGqy6XX4YIMu6Z+hPjIpqptB\/DzaCSXqCtRYbd73IXTMZLVFNGhTPUSNXMa7DbN8P221RR6S9UviLB7asePAOQV24Pa7+VC0JSwi0IQOhmzmus2a+VCsD6p\/Up3ASVzLS+YS8Kn8wrW82XAPJowmtfPI5mEKKIhVOvAD2WvTXEN\/DtG0C1NJGA\/OujntWk9zi0eTKjeUOhepoll\/lZU1lGclot\/nIs2v\/P6tkyk0mHIgWxKRQqfvewz10ZiN2sqiEGZ4Y0T5h4zISTKWw0XKn8lBQMPjzc3dpqHO92zi72jv\/u188HH3e714Mc\/ze\/nR1efa18+\/jgdXB9ddps7H9u7161Ptb3Wp88bW1\/LEgLpp6bTcnwpbznb+jpvSQBOwqxrFh6uT\/5yz+DA2\/BPQppdVjBp1vL4gGhcxJVpPlXesMoZVbHtWSFE2Z0JM2I9u63As97cs571LLRjNBlDJ4rhVqLRLXZ\/XdY8iivjA24PqhTNEu8A2jow12tDf6W9Xt56VsT4urzlOFnkzPgtj1nAqRVtvsqWq8Lyl7G9XcbreHIz\/TGfJ2NfhuZ62B7Rn459kngWxBsY36Q5w0kFS3TNSnhV3RPqso48u2WhXnSuwwT63ey3SGEvpLw87\/iC0WR+mp\/Li+peaRZ65i55Nj8MU61Nn53nhyvOZgiOfzzP2bGM09gryGTUzrL+4tFhHygu4030wm0\/BYneBCSacPwGkGxN8UfhiIaQsw20hV20FFYPkqHP3heYsjKXQjO7SQUfQ94WbAT5s85C91KxxOTd\/TqBL0SDkEe5C+G7KA7QqXldymlA4oICbvWTTi9fCbgy10dQePFFh46k1A8eW2J3ldeu+LlrtZyAibk4s3dB+2Ln\/g+4BvoYkhQAAA==","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":307,"flow_packet_id":1,"flow_first_seen":1499347490659,"flow_last_seen":1499347490659,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57752,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":307,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347490,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8roVAAD4GF0usEAABwKgKMuGYAFBT40ghAAAAAKACchD5NwAAAgQFtAQCCAoBOuakAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":307,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347490,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4ZjtXjkmU+NIIqAScSAXkwAAAgQFtAQCCAoD5LgaATrmpAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":307,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347490,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0roZAAD4GF1KsEAABwKgKMuGYAFBT40gi7V45J4AQAOW2mQAAAQEICgE65qUD5Lga","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":304,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347490,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jahAAD4GODCsEAABwKgKMuFiAFALNGwGeZ+HIIARAOUGTQAAAQEICgE65roD5LMY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":304,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347490,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PxBAAEAGhMjAqAoyrBAAAQBQ4WJ5n4cgCzRsB4ARAOMBNgAAAQEICgPkuDABOua6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":304,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347490,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jalAAD4GOC+sEAABwKgKMuFiAFALNGwHeZ+HIYAQAOUBMwAAAQEICgE65rsD5Lgw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":305,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347492,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D71AAD4GthusEAABwKgKMuFwAFB2mu1oNIeQn4ARAOVR4QAAAQEICgE66K4D5LRS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":305,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347492,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KrtAAEAGmR3AqAoyrBAAAQBQ4XA0h5CfdprtaYARAONMEAAAAQEICgPkuiQBOuiu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":305,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347492,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D75AAD4GthqsEAABwKgKMuFwAFB2mu1pNIeQoIAQAOVMDQAAAQEICgE66K8D5Lok","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":308,"flow_packet_id":1,"flow_first_seen":1499347493167,"flow_last_seen":1499347493167,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57778,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":308,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347493,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VdJAAD4Gb\/6sEAABwKgKMuGyAFCUXbzFAAAAAKACchBBjAAAAgQFtAQCCAoBOukXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":308,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347493,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4bJdzKzTlF28xqAScSB5WQAAAgQFtAQCCAoD5LqNATrpFwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":308,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347493,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VdNAAD4GcAWsEAABwKgKMuGyAFCUXbzGXcys1IAQAOUYYAAAAQEICgE66RgD5LqN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":309,"flow_packet_id":1,"flow_first_seen":1499347494446,"flow_last_seen":1499347494446,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57792,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":309,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347494,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8G1FAAD4Gqn+sEAABwKgKMuHAAFAmKfEGAAAAAKACchB6MQAAAgQFtAQCCAoBOupXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":309,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347494,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4cATAV39JinxB6AScSBKYAAAAgQFtAQCCAoD5LvNATrqVwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":309,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347494,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G1JAAD4GqoasEAABwKgKMuHAAFAmKfEHEwFd\/oAQAOXpZwAAAQEICgE66lcD5LvN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":306,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347494,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06OBAAD4G3PesEAABwKgKMuGKAFByXg2zaFlqRoARAOUjvAAAAQEICgE66qMD5Lbh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":306,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347494,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01l5AAEAG7XnAqAoyrBAAAQBQ4YpoWWpGcl4NtIARAOMehgAAAQEICgPkvBgBOuqj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":306,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347494,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06OFAAD4G3PasEAABwKgKMuGKAFByXg20aFlqR4AQAOUehAAAAQEICgE66qMD5LwY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":310,"flow_packet_id":1,"flow_first_seen":1499347495714,"flow_last_seen":1499347495714,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57806,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":310,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347495,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ai5AAD4GW6KsEAABwKgKMuHOAFCuqYG6AAAAAKACchBfsgAAAgQFtAQCCAoBOuuUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":310,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347495,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4c4n\/DE+rqmBu6AScSBGaAAAAgQFtAQCCAoD5L0KATrrlAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":310,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347495,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ai9AAD4GW6msEAABwKgKMuHOAFCuqYG7J\/wxP4AQAOXlbwAAAQEICgE665QD5L0K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":307,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347495,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rodAAD4GF1GsEAABwKgKMuGYAFBT40gi7V45J4ARAOWxoAAAAQEICgE6650D5Lga","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":307,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347495,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hDVAAEAGP6PAqAoyrBAAAQBQ4ZjtXjknU+NII4ARAOOsqQAAAQEICgPkvRIBOuud","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":307,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347495,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rohAAD4GF1CsEAABwKgKMuGYAFBT40gj7V45KIAQAOWspwAAAQEICgE6650D5L0S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":265,"flow_packet_id":6,"flow_first_seen":1499347421069,"flow_last_seen":1499347426732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57008,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":265,"flow_packet_id":6,"flow_first_seen":1499347421069,"flow_last_seen":1499347426732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57008,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":266,"flow_packet_id":6,"flow_first_seen":1499347422332,"flow_last_seen":1499347427732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57022,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":266,"flow_packet_id":6,"flow_first_seen":1499347422332,"flow_last_seen":1499347427732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57022,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":267,"flow_packet_id":6,"flow_first_seen":1499347423604,"flow_last_seen":1499347428732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57036,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":267,"flow_packet_id":6,"flow_first_seen":1499347423604,"flow_last_seen":1499347428732,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57036,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":268,"flow_packet_id":6,"flow_first_seen":1499347426122,"flow_last_seen":1499347431733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57062,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":268,"flow_packet_id":6,"flow_first_seen":1499347426122,"flow_last_seen":1499347431733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57062,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":269,"flow_packet_id":6,"flow_first_seen":1499347427366,"flow_last_seen":1499347432733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57076,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":269,"flow_packet_id":6,"flow_first_seen":1499347427366,"flow_last_seen":1499347432733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57076,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":270,"flow_packet_id":6,"flow_first_seen":1499347428671,"flow_last_seen":1499347433734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57090,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":270,"flow_packet_id":6,"flow_first_seen":1499347428671,"flow_last_seen":1499347433734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57090,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":271,"flow_packet_id":6,"flow_first_seen":1499347431192,"flow_last_seen":1499347436733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57116,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":271,"flow_packet_id":6,"flow_first_seen":1499347431192,"flow_last_seen":1499347436733,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57116,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":311,"flow_packet_id":1,"flow_first_seen":1499347498249,"flow_last_seen":1499347498249,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57832,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":311,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347498,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LPFAAD4GmN+sEAABwKgKMuHoAFBfF8L\/AAAAAKACchBrawAAAgQFtAQCCAoBOu4OAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":311,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347498,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4ejKfeZhXxfDAKAScSD4AgAAAgQFtAQCCAoD5L+DATruDgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":311,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347498,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LPJAAD4GmOasEAABwKgKMuHoAFBfF8MAyn3mYoAQAOWXCgAAAQEICgE67g4D5L+D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":308,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347498,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VdRAAD4GcASsEAABwKgKMuGyAFCUXbzGXcys1IARAOUS7AAAAQEICgE67osD5LqN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":308,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347498,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bNRAAEAGVwTAqAoyrBAAAQBQ4bJdzKzUlF28x4ARAOMNegAAAQEICgPkwAABOu6L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":308,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347498,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VdVAAD4GcAOsEAABwKgKMuGyAFCUXbzHXcys1YAQAOUNeAAAAQEICgE67osD5MAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":312,"flow_packet_id":1,"flow_first_seen":1499347499500,"flow_last_seen":1499347499500,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57846,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":312,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347499,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82IhAAD4G7UesEAABwKgKMuH2AFAMLDfPAAAAAKACchBIQAAAAgQFtAQCCAoBOu9HAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":312,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347499,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4fa1N28pDCw30KAScSBgHQAAAgQFtAQCCAoD5MC8ATrvRwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":312,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347499,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02IlAAD4G7U6sEAABwKgKMuH2AFAMLDfQtTdvKoAQAOX\/JAAAAQEICgE670cD5MC8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":309,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347499,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G1NAAD4GqoWsEAABwKgKMuHAAFAmKfEHEwFd\/oARAOXkOAAAAQEICgE674UD5LvN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":309,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347499,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nQRAAEAGJtTAqAoyrBAAAQBQ4cATAV3+JinxCIARAOPfDAAAAQEICgPkwPoBOu+F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":309,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347499,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G1RAAD4GqoSsEAABwKgKMuHAAFAmKfEIEwFd\/4AQAOXfCgAAAQEICgE674UD5MD6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":310,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347500,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ajBAAD4GW6isEAABwKgKMuHOAFCuqYG7J\/wxP4ARAOXggwAAAQEICgE68H8D5L0K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":310,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347500,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08MtAAEAG0wzAqAoyrBAAAQBQ4c4n\/DE\/rqmBvIARAOPbmgAAAQEICgPkwfQBOvB\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":310,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347500,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ajFAAD4GW6esEAABwKgKMuHOAFCuqYG8J\/wxQIAQAOXbmAAAAQEICgE68H8D5MH0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":313,"flow_packet_id":1,"flow_first_seen":1499347500770,"flow_last_seen":1499347500770,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57860,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":313,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347500,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YZZAAD4GZDqsEAABwKgKMuIEAFAvvZESAAAAAKACchDKIAAAAgQFtAQCCAoBOvCEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":313,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347500,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4gSIcKZ3L72RE6AScSDWOAAAAgQFtAQCCAoD5MH6ATrwhAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":313,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347500,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YZdAAD4GZEGsEAABwKgKMuIEAFAvvZETiHCmeIAQAOV1QAAAAQEICgE68IQD5MH6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":314,"flow_packet_id":1,"flow_first_seen":1499347503273,"flow_last_seen":1499347503273,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57886,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":314,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347503,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JtZAAD4GnvqsEAABwKgKMuIeAFAcz9QgAAAAAKACchCXdAAAAgQFtAQCCAoBOvL2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":314,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347503,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4h43pRReHM\/UIaAScSCEAAAAAgQFtAQCCAoD5MRrATry9gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":314,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347503,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JtdAAD4GnwGsEAABwKgKMuIeAFAcz9QhN6UUX4AQAOUjCAAAAQEICgE68vYD5MRr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":311,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347503,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LPNAAD4GmOWsEAABwKgKMuHoAFBfF8MAyn3mYoARAOWRqgAAAQEICgE6820D5L+D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":311,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347503,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IoBAAEAGoVjAqAoyrBAAAQBQ4ejKfeZiXxfDAYARAOOMTAAAAQEICgPkxOIBOvNt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":311,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347503,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LPRAAD4GmOSsEAABwKgKMuHoAFBfF8MByn3mY4AQAOWMSgAAAQEICgE6820D5MTi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":315,"flow_packet_id":1,"flow_first_seen":1499347504529,"flow_last_seen":1499347504529,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57900,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":315,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347504,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MbJAAD4GlB6sEAABwKgKMuIsAFBuJcWCAAAAAKACchBTdAAAAgQFtAQCCAoBOvQwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":315,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347504,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4iwP0\/y\/biXFg6AScSB+NgAAAgQFtAQCCAoD5MWlATr0MAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":315,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347504,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbNAAD4GlCWsEAABwKgKMuIsAFBuJcWDD9P8wIAQAOUdPgAAAQEICgE69DAD5MWl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":312,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347504,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02IpAAD4G7U2sEAABwKgKMuH2AFAMLDfQtTdvKoARAOX6AwAAAQEICgE69GcD5MC8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":312,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347504,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qvZAAEAGGOLAqAoyrBAAAQBQ4fa1N28qDCw30YARAOP05AAAAQEICgPkxdwBOvRn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":312,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347504,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02ItAAD4G7UysEAABwKgKMuH2AFAMLDfRtTdvK4AQAOX04gAAAQEICgE69GcD5MXc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":316,"flow_packet_id":1,"flow_first_seen":1499347505774,"flow_last_seen":1499347505774,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57914,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":316,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347505,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8e\/VAAD4GSdusEAABwKgKMuI6AFCzho6SAAAAAKACchBDvgAAAgQFtAQCCAoBOvVnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":316,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347505,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4joOXGebs4aOk6AScSAD5AAAAgQFtAQCCAoD5MbdATr1ZwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":316,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347505,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/ZAAD4GSeKsEAABwKgKMuI6AFCzho6TDlxnnIAQAOWi6wAAAQEICgE69WcD5Mbd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":272,"flow_packet_id":6,"flow_first_seen":1499347432482,"flow_last_seen":1499347437734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57130,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":272,"flow_packet_id":6,"flow_first_seen":1499347432482,"flow_last_seen":1499347437734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57130,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":273,"flow_packet_id":6,"flow_first_seen":1499347433753,"flow_last_seen":1499347439734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":273,"flow_packet_id":6,"flow_first_seen":1499347433753,"flow_last_seen":1499347439734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57144,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":274,"flow_packet_id":7,"flow_first_seen":1499347436274,"flow_last_seen":1499347441734,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57170,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":274,"flow_packet_id":7,"flow_first_seen":1499347436274,"flow_last_seen":1499347441734,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57170,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":275,"flow_packet_id":6,"flow_first_seen":1499347437541,"flow_last_seen":1499347442734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57184,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":275,"flow_packet_id":6,"flow_first_seen":1499347437541,"flow_last_seen":1499347442734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57184,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":276,"flow_packet_id":6,"flow_first_seen":1499347440119,"flow_last_seen":1499347445734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57210,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":276,"flow_packet_id":6,"flow_first_seen":1499347440119,"flow_last_seen":1499347445734,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57210,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":277,"flow_packet_id":6,"flow_first_seen":1499347441364,"flow_last_seen":1499347446735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57224,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":277,"flow_packet_id":6,"flow_first_seen":1499347441364,"flow_last_seen":1499347446735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57224,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":313,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347506,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YZhAAD4GZECsEAABwKgKMuIEAFAvvZETiHCmeIARAOVvaAAAAQEICgE69lsD5MH6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":313,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347506,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YalAAEAGYi\/AqAoyrBAAAQBQ4gSIcKZ4L72RFIARAONpkgAAAQEICgPkx9EBOvZb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":313,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347506,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YZlAAD4GZD+sEAABwKgKMuIEAFAvvZEUiHCmeYAQAOVpkAAAAQEICgE69lsD5MfR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":317,"flow_packet_id":1,"flow_first_seen":1499347508344,"flow_last_seen":1499347508344,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57940,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":317,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347508,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QeJAAD4Gg+6sEAABwKgKMuJUAFDv7LYIAAAAAKACchDdRAAAAgQFtAQCCAoBOvfqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":317,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347508,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4lSsQaQu7+y2CaAScSDAbwAAAgQFtAQCCAoD5MlfATr36gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":317,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347508,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QeNAAD4Gg\/WsEAABwKgKMuJUAFDv7LYJrEGkL4AQAOVfdwAAAQEICgE69+oD5Mlf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":314,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347508,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JthAAD4GnwCsEAABwKgKMuIeAFAcz9QhN6UUX4ARAOUdrgAAAQEICgE6+E8D5MRr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":314,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347508,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03ZpAAEAG5j3AqAoyrBAAAQBQ4h43pRRfHM\/UIoARAOMYVQAAAQEICgPkycUBOvhP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":314,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347508,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JtlAAD4Gnv+sEAABwKgKMuIeAFAcz9QiN6UUYIAQAOUYUwAAAQEICgE6+E8D5MnF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":318,"flow_packet_id":1,"flow_first_seen":1499347509601,"flow_last_seen":1499347509601,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57954,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":318,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347509,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U2ZAAD4GcmqsEAABwKgKMuJiAFBgjKpCAAAAAKACchB3IwAAAgQFtAQCCAoBOvkkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":318,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347509,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4mJHoK+XYIyqQ6AScSCyTAAAAgQFtAQCCAoD5MqZATr5JAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":318,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347509,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2dAAD4GcnGsEAABwKgKMuJiAFBgjKpDR6CvmIAQAOVRVAAAAQEICgE6+SQD5MqZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":315,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347509,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbRAAD4GlCSsEAABwKgKMuIsAFBuJcWDD9P8wIARAOUYJAAAAQEICgE6+UkD5MWl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":315,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347509,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Nn9AAEAGjVnAqAoyrBAAAQBQ4iwP0\/zAbiXFhIARAOMTCwAAAQEICgPkyr8BOvlJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":315,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347509,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbVAAD4GlCOsEAABwKgKMuIsAFBuJcWED9P8wYAQAOUTCAAAAQEICgE6+UoD5Mq\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":316,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347511,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/dAAD4GSeGsEAABwKgKMuI6AFCzho6TDlxnnIARAOWdEwAAAQEICgE6+z4D5Mbd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":316,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347511,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qy9AAEAGGKnAqAoyrBAAAQBQ4joOXGecs4aOlIARAOOXPgAAAQEICgPkzLMBOvs+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":316,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347511,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0e\/hAAD4GSeCsEAABwKgKMuI6AFCzho6UDlxnnYAQAOWXPAAAAQEICgE6+z4D5Myz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":319,"flow_packet_id":1,"flow_first_seen":1499347512081,"flow_last_seen":1499347512081,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57980,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":319,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347512,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87jVAAD4G15qsEAABwKgKMuJ8AFAKmxWlAAAAAKACchBfLAAAAgQFtAQCCAoBOvuQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":319,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347512,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4nwCiqB4CpsVpqAScSDsHgAAAgQFtAQCCAoD5M0FATr7kAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":319,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347512,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07jZAAD4G16GsEAABwKgKMuJ8AFAKmxWmAoqgeYAQAOWLJgAAAQEICgE6+5AD5M0F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":320,"flow_packet_id":1,"flow_first_seen":1499347513353,"flow_last_seen":1499347513353,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57994,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":320,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347513,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ef1AAD4GS9OsEAABwKgKMuKKAFAHuIUzAAAAAKACchDxNAAAAgQFtAQCCAoBOvzOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":320,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347513,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4oqWR\/ViB7iFNKAScSCUQQAAAgQFtAQCCAoD5M5DATr8zgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":320,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347513,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ef5AAD4GS9qsEAABwKgKMuKKAFAHuIU0lkf1Y4AQAOUzSQAAAQEICgE6\/M4D5M5D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":317,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347513,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QeRAAD4Gg\/SsEAABwKgKMuJUAFDv7LYJrEGkL4ARAOVaLgAAAQEICgE6\/TID5Mlf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":317,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347513,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aohAAEAGWVDAqAoyrBAAAQBQ4lSsQaQv7+y2CoARAONU5wAAAQEICgPkzqcBOv0y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":317,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347513,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QeVAAD4Gg\/OsEAABwKgKMuJUAFDv7LYKrEGkMIAQAOVU5QAAAQEICgE6\/TID5M6n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":321,"flow_packet_id":1,"flow_first_seen":1499347514648,"flow_last_seen":1499347514648,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58008,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":321,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347514,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81oFAAD4G706sEAABwKgKMuKYAFBs5yiTAAAAAKACchDnUwAAAgQFtAQCCAoBOv4SAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":321,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347514,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4pgH3WT1bOcolKAScSCn9AAAAgQFtAQCCAoD5M+HATr+EgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":321,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347514,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01oJAAD4G71WsEAABwKgKMuKYAFBs5yiUB91k9oAQAOVG\/AAAAQEICgE6\/hID5M+H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":318,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347514,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2hAAD4GcnCsEAABwKgKMuJiAFBgjKpDR6CvmIARAOVMSwAAAQEICgE6\/iwD5MqZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":318,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347514,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YDlAAEAGY5\/AqAoyrBAAAQBQ4mJHoK+YYIyqRIARAONHRAAAAQEICgPkz6EBOv4s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":318,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347514,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2lAAD4Gcm+sEAABwKgKMuJiAFBgjKpER6CvmYAQAOVHQgAAAQEICgE6\/iwD5M+h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":278,"flow_packet_id":6,"flow_first_seen":1499347442626,"flow_last_seen":1499347447735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57238,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":278,"flow_packet_id":6,"flow_first_seen":1499347442626,"flow_last_seen":1499347447735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57238,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":279,"flow_packet_id":6,"flow_first_seen":1499347445158,"flow_last_seen":1499347450735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57264,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":279,"flow_packet_id":6,"flow_first_seen":1499347445158,"flow_last_seen":1499347450735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57264,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":280,"flow_packet_id":6,"flow_first_seen":1499347446419,"flow_last_seen":1499347451735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57278,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":280,"flow_packet_id":6,"flow_first_seen":1499347446419,"flow_last_seen":1499347451735,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57278,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":281,"flow_packet_id":6,"flow_first_seen":1499347447671,"flow_last_seen":1499347452736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57292,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":281,"flow_packet_id":6,"flow_first_seen":1499347447671,"flow_last_seen":1499347452736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57292,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":282,"flow_packet_id":6,"flow_first_seen":1499347450180,"flow_last_seen":1499347455736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57318,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":282,"flow_packet_id":6,"flow_first_seen":1499347450180,"flow_last_seen":1499347455736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57318,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":283,"flow_packet_id":6,"flow_first_seen":1499347451427,"flow_last_seen":1499347456736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57332,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":283,"flow_packet_id":6,"flow_first_seen":1499347451427,"flow_last_seen":1499347456736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57332,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":322,"flow_packet_id":1,"flow_first_seen":1499347517171,"flow_last_seen":1499347517171,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58034,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":322,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347517,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PfRAAD4Gh9ysEAABwKgKMuKyAFAJ1z18AAAAAKACchAy6wAAAgQFtAQCCAoBOwCIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":322,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347517,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4rJwyiE5Cdc9faAScSDL4wAAAgQFtAQCCAoD5NH+ATsAiAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":322,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347517,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PfVAAD4Gh+OsEAABwKgKMuKyAFAJ1z19cMohOoAQAOVq6gAAAQEICgE7AIkD5NH+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":319,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347517,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07jdAAD4G16CsEAABwKgKMuJ8AFAKmxWmAoqgeYARAOWFmwAAAQEICgE7ARoD5M0F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":319,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347517,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cvZAAEAGUOLAqAoyrBAAAQBQ4nwCiqB5CpsVp4ARAOOAEgAAAQEICgPk0o8BOwEa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":319,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347517,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07jhAAD4G15+sEAABwKgKMuJ8AFAKmxWnAoqgeoAQAOWAEAAAAQEICgE7ARoD5NKP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":323,"flow_packet_id":1,"flow_first_seen":1499347518410,"flow_last_seen":1499347518410,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58048,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":323,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347518,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8FGZAAD4GsWqsEAABwKgKMuLAAFAhaxXYAAAAAKACchBBtwAAAgQFtAQCCAoBOwG+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":323,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347518,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4sCWVenKIWsV2aAScSDrXAAAAgQFtAQCCAoD5NM0ATsBvgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":323,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347518,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FGdAAD4GsXGsEAABwKgKMuLAAFAhaxXZllXpy4AQAOWKZAAAAQEICgE7Ab4D5NM0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":320,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347518,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ef9AAD4GS9msEAABwKgKMuKKAFAHuIU0lkf1Y4ARAOUuAgAAAQEICgE7AhQD5M5D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":320,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347518,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JupAAEAGnO7AqAoyrBAAAQBQ4oqWR\/VjB7iFNYARAOMovQAAAQEICgPk04kBOwIU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":320,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347518,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0egBAAD4GS9isEAABwKgKMuKKAFAHuIU1lkf1ZIAQAOUouwAAAQEICgE7AhQD5NOJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":324,"flow_packet_id":1,"flow_first_seen":1499347519679,"flow_last_seen":1499347519679,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58062,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":324,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347519,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8A+RAAD4GweysEAABwKgKMuLOAFBZkgEfAAAAAKACchAc\/gAAAgQFtAQCCAoBOwL7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":324,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347519,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4s4k\/bw4WZIBIKAScSBkUQAAAgQFtAQCCAoD5NRxATsC+wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":324,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347519,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A+VAAD4GwfOsEAABwKgKMuLOAFBZkgEgJP28OYAQAOUDWAAAAQEICgE7AvwD5NRx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":321,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347519,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01oNAAD4G71SsEAABwKgKMuKYAFBs5yiUB91k9oARAOVB\/wAAAQEICgE7Aw4D5M+H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":321,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347519,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sHVAAEAGE2PAqAoyrBAAAQBQ4pgH3WT2bOcolYARAOM9BAAAAQEICgPk1IMBOwMO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":321,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347519,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01oRAAD4G71OsEAABwKgKMuKYAFBs5yiVB91k94AQAOU9AgAAAQEICgE7Aw4D5NSD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":325,"flow_packet_id":1,"flow_first_seen":1499347522204,"flow_last_seen":1499347522204,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58088,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":325,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347522,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8G91AAD4GqfOsEAABwKgKMuLoAFAaMR6uAAAAAKACchA8PgAAAgQFtAQCCAoBOwVzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":325,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347522,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4uhHWnn+GjEer6AScSCg9wAAAgQFtAQCCAoD5NboATsFcwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":325,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347522,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G95AAD4GqfqsEAABwKgKMuLoAFAaMR6vR1p5\/4AQAOU\/\/wAAAQEICgE7BXMD5Nbo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":322,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347522,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PfZAAD4Gh+KsEAABwKgKMuKyAFAJ1z19cMohOoARAOVldgAAAQEICgE7BfwD5NH+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":322,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347522,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09khAAEAGzY\/AqAoyrBAAAQBQ4rJwyiE6Cdc9foARAONgAwAAAQEICgPk13IBOwX8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":322,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347522,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PfdAAD4Gh+GsEAABwKgKMuKyAFAJ1z1+cMohO4AQAOVgAQAAAQEICgE7BfwD5Ndy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":326,"flow_packet_id":1,"flow_first_seen":1499347523488,"flow_last_seen":1499347523488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58102,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":326,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347523,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bP1AAD4GWNOsEAABwKgKMuL2AFCTdmpJAAAAAKACchB2DgAAAgQFtAQCCAoBOwa0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":326,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347523,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4vYacquOk3ZqSqAScSDU3gAAAgQFtAQCCAoD5NgpATsGtAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":326,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347523,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bP5AAD4GWNqsEAABwKgKMuL2AFCTdmpKGnKrj4AQAOVz5gAAAQEICgE7BrQD5Ngp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":323,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347523,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FGhAAD4GsXCsEAABwKgKMuLAAFAhaxXZllXpy4ARAOWFKwAAAQEICgE7BvYD5NM0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":323,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347523,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MadAAEAGkjHAqAoyrBAAAQBQ4sCWVenLIWsV2oARAON\/9AAAAQEICgPk2GwBOwb2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":323,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347523,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0FGlAAD4GsW+sEAABwKgKMuLAAFAhaxXallXpzIAQAOV\/8gAAAQEICgE7BvYD5Nhs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":324,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347524,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A+ZAAD4GwfKsEAABwKgKMuLOAFBZkgEgJP28OYARAOX+YgAAAQEICgE7B\/AD5NRx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":324,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347524,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZV9AAEAGXnnAqAoyrBAAAQBQ4s4k\/bw5WZIBIYARAOP5bgAAAQEICgPk2WYBOwfw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":324,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347524,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0A+dAAD4GwfGsEAABwKgKMuLOAFBZkgEhJP28OoAQAOX5awAAAQEICgE7B\/ED5Nlm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":327,"flow_packet_id":1,"flow_first_seen":1499347524782,"flow_last_seen":1499347524782,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58116,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":327,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347524,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uUBAAD4GDJCsEAABwKgKMuMEAFAFWr63AAAAAKACchCuawAAAgQFtAQCCAoBOwf3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":327,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347524,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4wR+L\/VQBVq+uKAScSBeeAAAAgQFtAQCCAoD5NltATsH9wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":327,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347524,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uUFAAD4GDJesEAABwKgKMuMEAFAFWr64fi\/1UYAQAOX9fwAAAQEICgE7B\/cD5Nlt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":328,"flow_packet_id":1,"flow_first_seen":1499347526155,"flow_last_seen":1499347526155,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58130,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":328,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347526,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vM5AAD4GCQKsEAABwKgKMuMSAFBd27WBAAAAAKACchBdugAAAgQFtAQCCAoBOwlPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":328,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347526,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4xLVlk4tXdu1gqAScSBcLAAAAgQFtAQCCAoD5NrEATsJTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":328,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347526,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vM9AAD4GCQmsEAABwKgKMuMSAFBd27WC1ZZOLoAQAOX7MwAAAQEICgE7CU8D5NrE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":284,"flow_packet_id":6,"flow_first_seen":1499347452731,"flow_last_seen":1499347457736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57346,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":284,"flow_packet_id":6,"flow_first_seen":1499347452731,"flow_last_seen":1499347457736,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57346,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":285,"flow_packet_id":6,"flow_first_seen":1499347455224,"flow_last_seen":1499347460737,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57372,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":285,"flow_packet_id":6,"flow_first_seen":1499347455224,"flow_last_seen":1499347460737,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57372,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":286,"flow_packet_id":6,"flow_first_seen":1499347456462,"flow_last_seen":1499347461738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":286,"flow_packet_id":6,"flow_first_seen":1499347456462,"flow_last_seen":1499347461738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57386,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":287,"flow_packet_id":6,"flow_first_seen":1499347457705,"flow_last_seen":1499347462738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":287,"flow_packet_id":6,"flow_first_seen":1499347457705,"flow_last_seen":1499347462738,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57400,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":288,"flow_packet_id":6,"flow_first_seen":1499347460253,"flow_last_seen":1499347465739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57426,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":288,"flow_packet_id":6,"flow_first_seen":1499347460253,"flow_last_seen":1499347465739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57426,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":289,"flow_packet_id":6,"flow_first_seen":1499347461508,"flow_last_seen":1499347466739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":289,"flow_packet_id":6,"flow_first_seen":1499347461508,"flow_last_seen":1499347466739,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57440,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":329,"flow_packet_id":1,"flow_first_seen":1499347527425,"flow_last_seen":1499347527425,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58144,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":329,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347527,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84vtAAD4G4tSsEAABwKgKMuMgAFAAyeh3AAAAAKACchCGiwAAAgQFtAQCCAoBOwqMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":329,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347527,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4yBtIXfPAMnoeKAScSDCkwAAAgQFtAQCCAoD5NwBATsKjAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":329,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347527,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04vxAAD4G4tusEAABwKgKMuMgAFAAyeh4bSF30IAQAOVhmwAAAQEICgE7CowD5NwB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":325,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347527,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G99AAD4GqfmsEAABwKgKMuLoAFAaMR6vR1p5\/4ARAOU6kgAAAQEICgE7Ct8D5Nbo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":325,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347527,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0patAAEAGHi3AqAoyrBAAAQBQ4uhHWnn\/GjEesIARAOM1JwAAAQEICgPk3FQBOwrf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":325,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347527,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0G+BAAD4GqfisEAABwKgKMuLoAFAaMR6wR1p6AIAQAOU1JQAAAQEICgE7Ct8D5NxU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":330,"flow_packet_id":1,"flow_first_seen":1499347528679,"flow_last_seen":1499347528679,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58158,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":330,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347528,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86w9AAD4G2sCsEAABwKgKMuMuAFDPaODJAAAAAKACchC+UQAAAgQFtAQCCAoBOwvGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":330,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347528,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4y4jZsPUz2jgyqAScSD21QAAAgQFtAQCCAoD5N07ATsLxgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":330,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347528,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06xBAAD4G2sesEAABwKgKMuMuAFDPaODKI2bD1YAQAOWV3QAAAQEICgE7C8YD5N07","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":326,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347528,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bP9AAD4GWNmsEAABwKgKMuL2AFCTdmpKGnKrj4ARAOVuwAAAAQEICgE7C9kD5Ngp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":326,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347528,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dsFAAEAGTRfAqAoyrBAAAQBQ4vYacquPk3ZqS4ARAONpnAAAAQEICgPk3U4BOwvZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":326,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347528,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bQBAAD4GWNisEAABwKgKMuL2AFCTdmpLGnKrkIAQAOVpmgAAAQEICgE7C9kD5N1O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":327,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347530,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uUJAAD4GDJasEAABwKgKMuMEAFAFWr64fi\/1UYARAOX3qAAAAQEICgE7Dc0D5Nlt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":327,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347530,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KhNAAEAGmcXAqAoyrBAAAQBQ4wR+L\/VRBVq+uYAQAOPx1AAAAQEICgPk30MBOw3N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":327,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347530,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KhRAAEAGmcTAqAoyrBAAAQBQ4wR+L\/VRBVq+uYARAOPx0wAAAQEICgPk30MBOw3N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":327,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347530,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0K+pAAD4Gme6sEAABwKgKMuMEAFAFWr65fi\/1UoAQAOXx0QAAAQEICgE7Dc0D5N9D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":331,"flow_packet_id":1,"flow_first_seen":1499347531303,"flow_last_seen":1499347531303,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58184,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":331,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347531,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MvhAAD4GktisEAABwKgKMuNIAFARgDytAAAAAKACchAdrgAAAgQFtAQCCAoBOw5VAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":331,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347531,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ40hb80TSEYA8rqAScSCaFwAAAgQFtAQCCAoD5N\/LATsOVQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":331,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347531,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvlAAD4Gkt+sEAABwKgKMuNIAFARgDyuW\/NE04AQAOU5HgAAAQEICgE7DlYD5N\/L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":328,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347531,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vNBAAD4GCQisEAABwKgKMuMSAFBd27WC1ZZOLoARAOX1ugAAAQEICgE7DscD5NrE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":328,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347531,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rhNAAEAGFcXAqAoyrBAAAQBQ4xLVlk4uXdu1g4ARAOPwQgAAAQEICgPk4D0BOw7H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":328,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347531,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vNFAAD4GCQesEAABwKgKMuMSAFBd27WD1ZZOL4AQAOXwQAAAAQEICgE7DscD5OA9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":332,"flow_packet_id":1,"flow_first_seen":1499347532560,"flow_last_seen":1499347532560,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58198,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":332,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347532,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ro1AAD4GF0OsEAABwKgKMuNWAFA1F6EdAAAAAKACchCUXQAAAgQFtAQCCAoBOw+QAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":332,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347532,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ41Zu3G2tNRehHqAScSDTyAAAAgQFtAQCCAoD5OEFATsPkAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":332,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347532,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ro5AAD4GF0qsEAABwKgKMuNWAFA1F6EebtxtroAQAOVy0AAAAQEICgE7D5AD5OEF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":329,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347532,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04v1AAD4G4tqsEAABwKgKMuMgAFAAyeh4bSF30IARAOVcZQAAAQEICgE7D8ED5NwB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":329,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347532,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ludAAEAGLPHAqAoyrBAAAQBQ4yBtIXfQAMnoeYARAONXMAAAAQEICgPk4TcBOw\/B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":329,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347532,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04v5AAD4G4tmsEAABwKgKMuMgAFAAyeh5bSF30YAQAOVXLgAAAQEICgE7D8ED5OE3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":330,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347533,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06xFAAD4G2sasEAABwKgKMuMuAFDPaODKI2bD1YARAOWQ5wAAAQEICgE7ELsD5N07","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":330,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347533,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IeRAAEAGofTAqAoyrBAAAQBQ4y4jZsPVz2jgy4ARAOOL8gAAAQEICgPk4jEBOxC7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":330,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347533,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06xJAAD4G2sWsEAABwKgKMuMuAFDPaODLI2bD1oAQAOWL8AAAAQEICgE7ELsD5OIx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":333,"flow_packet_id":1,"flow_first_seen":1499347535081,"flow_last_seen":1499347535081,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58224,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":333,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347535,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vMpAAD4GCQasEAABwKgKMuNwAFAre67MAAAAAKACchCNugAAAgQFtAQCCAoBOxIGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":333,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347535,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ43Bd+kT3K3uuzaAScSAESAAAAgQFtAQCCAoD5ON7ATsSBgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":333,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347535,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vMtAAD4GCQ2sEAABwKgKMuNwAFAre67NXfpE+IAQAOWjTwAAAQEICgE7EgYD5ON7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":334,"flow_packet_id":1,"flow_first_seen":1499347536332,"flow_last_seen":1499347536332,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58238,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":334,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347536,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iGJAAD4GPW6sEAABwKgKMuN+AFBSPZtdAAAAAKACchB5IAAAAgQFtAQCCAoBOxM\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":334,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347536,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ434l0Xf0Uj2bXqAScSDzoAAAAgQFtAQCCAoD5OS0ATsTPwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":334,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347536,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGNAAD4GPXWsEAABwKgKMuN+AFBSPZteJdF39YAQAOWSqAAAAQEICgE7Ez8D5OS0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":331,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347536,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvpAAD4Gkt6sEAABwKgKMuNIAFARgDyuW\/NE04ARAOUzygAAAQEICgE7E6kD5N\/L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":331,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347536,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ocxAAEAGIgzAqAoyrBAAAQBQ40hb80TTEYA8r4ARAOMudwAAAQEICgPk5R8BOxOp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":331,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347536,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MvtAAD4Gkt2sEAABwKgKMuNIAFARgDyvW\/NE1IAQAOUudAAAAQEICgE7E6oD5OUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":290,"flow_packet_id":6,"flow_first_seen":1499347462759,"flow_last_seen":1499347468740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":290,"flow_packet_id":6,"flow_first_seen":1499347462759,"flow_last_seen":1499347468740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57454,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":291,"flow_packet_id":6,"flow_first_seen":1499347465304,"flow_last_seen":1499347470740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57480,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":291,"flow_packet_id":6,"flow_first_seen":1499347465304,"flow_last_seen":1499347470740,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57480,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":292,"flow_packet_id":6,"flow_first_seen":1499347466553,"flow_last_seen":1499347471741,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57494,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":292,"flow_packet_id":6,"flow_first_seen":1499347466553,"flow_last_seen":1499347471741,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57494,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":293,"flow_packet_id":6,"flow_first_seen":1499347467793,"flow_last_seen":1499347473742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":293,"flow_packet_id":6,"flow_first_seen":1499347467793,"flow_last_seen":1499347473742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57508,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":294,"flow_packet_id":6,"flow_first_seen":1499347469060,"flow_last_seen":1499347474742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57522,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":294,"flow_packet_id":6,"flow_first_seen":1499347469060,"flow_last_seen":1499347474742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57522,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":295,"flow_packet_id":7,"flow_first_seen":1499347470328,"flow_last_seen":1499347475742,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":295,"flow_packet_id":7,"flow_first_seen":1499347470328,"flow_last_seen":1499347475742,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57536,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":296,"flow_packet_id":6,"flow_first_seen":1499347471594,"flow_last_seen":1499347476742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57550,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":296,"flow_packet_id":6,"flow_first_seen":1499347471594,"flow_last_seen":1499347476742,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57550,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":335,"flow_packet_id":1,"flow_first_seen":1499347537591,"flow_last_seen":1499347537591,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58252,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":335,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347537,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UmRAAD4Gc2ysEAABwKgKMuOMAFC1fUYeAAAAAKACchBp1gAAAgQFtAQCCAoBOxR6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":335,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347537,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ44xyZUlKtX1GH6AScSDFMQAAAgQFtAQCCAoD5OXvATsUegEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":335,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347537,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UmVAAD4Gc3OsEAABwKgKMuOMAFC1fUYfcmVJS4AQAOVkOQAAAQEICgE7FHoD5OXv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":332,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347537,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ro9AAD4GF0msEAABwKgKMuNWAFA1F6EebtxtroARAOVtuwAAAQEICgE7FKQD5OEF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":332,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347537,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i7dAAEAGOCHAqAoyrBAAAQBQ41Zu3G2uNRehH4ARAONoqAAAAQEICgPk5hkBOxSk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":332,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347537,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rpBAAD4GF0isEAABwKgKMuNWAFA1F6Efbtxtr4AQAOVopgAAAQEICgE7FKQD5OYZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":336,"flow_packet_id":1,"flow_first_seen":1499347540145,"flow_last_seen":1499347540145,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58278,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":336,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347540,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8BSZAAD4GwKqsEAABwKgKMuOmAFDsIBPeAAAAAKACchBi2wAAAgQFtAQCCAoBOxb4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":336,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347540,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ46adBfH37CAT36AScSDoagAAAgQFtAQCCAoD5OhtATsW+AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":336,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347540,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BSdAAD4GwLGsEAABwKgKMuOmAFDsIBPfnQXx+IAQAOWHcgAAAQEICgE7FvgD5Oht","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":333,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347540,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vMxAAD4GCQysEAABwKgKMuNwAFAre67NXfpE+IARAOWdwgAAAQEICgE7F5ID5ON7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":333,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347540,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rf9AAEAGFdnAqAoyrBAAAQBQ43Bd+kT4K3uuzoARAOOYNwAAAQEICgPk6QcBOxeS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":333,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347540,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vM1AAD4GCQusEAABwKgKMuNwAFAre67OXfpE+YAQAOWYNQAAAQEICgE7F5ID5OkH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":337,"flow_packet_id":1,"flow_first_seen":1499347541398,"flow_last_seen":1499347541398,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58292,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":337,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347541,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WJdAAD4GbTmsEAABwKgKMuO0AFCKGUCmAAAAAKACchCW0wAAAgQFtAQCCAoBOxgxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":337,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347541,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ47RdwzayihlAp6AScSAVsQAAAgQFtAQCCAoD5OmnATsYMQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":337,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347541,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WJhAAD4GbUCsEAABwKgKMuO0AFCKGUCnXcM2s4AQAOW0uAAAAQEICgE7GDED5Omn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":334,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347541,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGRAAD4GPXSsEAABwKgKMuN+AFBSPZteJdF39YARAOWNWgAAAQEICgE7GIwD5OS0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":334,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347541,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nfRAAEAGJeTAqAoyrBAAAQBQ434l0Xf1Uj2bX4ARAOOIDgAAAQEICgPk6gEBOxiM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":334,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347541,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGVAAD4GPXOsEAABwKgKMuN+AFBSPZtfJdF39oAQAOWIDAAAAQEICgE7GIwD5OoB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":338,"flow_packet_id":1,"flow_first_seen":1499347542648,"flow_last_seen":1499347542648,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58306,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":338,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347542,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80V9AAD4G9HCsEAABwKgKMuPCAFCPt8g1AAAAAKACchAIXwAAAgQFtAQCCAoBOxlqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":338,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347542,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ48Js\/FwIj7fINqAScSBRdQAAAgQFtAQCCAoD5OrfATsZagEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":338,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347542,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00WBAAD4G9HesEAABwKgKMuPCAFCPt8g2bPxcCYAQAOXwfAAAAQEICgE7GWoD5Orf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":335,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347542,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UmZAAD4Gc3KsEAABwKgKMuOMAFC1fUYfcmVJS4ARAOVfLAAAAQEICgE7GYYD5OXv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":335,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347542,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0o7BAAEAGICjAqAoyrBAAAQBQ44xyZUlLtX1GIIARAONaIQAAAQEICgPk6vsBOxmG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":335,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347542,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UmdAAD4Gc3GsEAABwKgKMuOMAFC1fUYgcmVJTIAQAOVaHwAAAQEICgE7GYYD5Or7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":339,"flow_packet_id":1,"flow_first_seen":1499347545176,"flow_last_seen":1499347545176,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58332,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":339,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347545,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HVZAAD4GqHqsEAABwKgKMuPcAFAahQa0AAAAAKACchA8gQAAAgQFtAQCCAoBOxviAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":339,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347545,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ49weXgmaGoUGtaAScSAkLAAAAgQFtAQCCAoD5O1XATsb4gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":339,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347545,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HVdAAD4GqIGsEAABwKgKMuPcAFAahQa1Hl4Jm4AQAOXDMwAAAQEICgE7G+ID5O1X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":336,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347545,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BShAAD4GwLCsEAABwKgKMuOmAFDsIBPfnQXx+IARAOWB9QAAAQEICgE7HHQD5Oht","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":336,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347545,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HBJAAEAGp8bAqAoyrBAAAQBQ46adBfH47CAT4IARAON8eQAAAQEICgPk7eoBOxx0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":336,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347545,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0BSlAAD4GwK+sEAABwKgKMuOmAFDsIBPgnQXx+YAQAOV8dgAAAQEICgE7HHUD5O3q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":340,"flow_packet_id":1,"flow_first_seen":1499347546427,"flow_last_seen":1499347546427,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58346,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":340,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347546,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Q6tAAD4GgiWsEAABwKgKMuPqAFBqhV6wAAAAAKACchCTPQAAAgQFtAQCCAoBOx0bAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":340,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347546,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4+qNxgXIaoVesaAScSAOGQAAAgQFtAQCCAoD5O6QATsdGwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":340,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347546,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q6xAAD4GgiysEAABwKgKMuPqAFBqhV6xjcYFyYAQAOWtIAAAAQEICgE7HRsD5O6Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":337,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347546,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WJlAAD4GbT+sEAABwKgKMuO0AFCKGUCnXcM2s4ARAOWvegAAAQEICgE7HW4D5Omn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":337,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347546,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02FdAAEAG64DAqAoyrBAAAQBQ47RdwzazihlAqIARAOOqPgAAAQEICgPk7uQBOx1u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":337,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347546,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WJpAAD4GbT6sEAABwKgKMuO0AFCKGUCoXcM2tIAQAOWqPAAAAQEICgE7HW4D5O7k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":264,"flow_packet_id":310,"flow_first_seen":1499347419786,"flow_last_seen":1499347486791,"flow_tot_l4_data_len":242617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":56994,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":297,"flow_packet_id":6,"flow_first_seen":1499347474100,"flow_last_seen":1499347479744,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57576,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":297,"flow_packet_id":6,"flow_first_seen":1499347474100,"flow_last_seen":1499347479744,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57576,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":298,"flow_packet_id":6,"flow_first_seen":1499347475384,"flow_last_seen":1499347480745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57590,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":298,"flow_packet_id":6,"flow_first_seen":1499347475384,"flow_last_seen":1499347480745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57590,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":299,"flow_packet_id":6,"flow_first_seen":1499347476667,"flow_last_seen":1499347481745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":299,"flow_packet_id":6,"flow_first_seen":1499347476667,"flow_last_seen":1499347481745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57604,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":300,"flow_packet_id":6,"flow_first_seen":1499347479172,"flow_last_seen":1499347484745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":300,"flow_packet_id":6,"flow_first_seen":1499347479172,"flow_last_seen":1499347484745,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57630,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":301,"flow_packet_id":6,"flow_first_seen":1499347480438,"flow_last_seen":1499347485746,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57644,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":301,"flow_packet_id":6,"flow_first_seen":1499347480438,"flow_last_seen":1499347485746,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57644,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":302,"flow_packet_id":6,"flow_first_seen":1499347481724,"flow_last_seen":1499347486747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57658,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":302,"flow_packet_id":6,"flow_first_seen":1499347481724,"flow_last_seen":1499347486747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57658,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":341,"flow_packet_id":1,"flow_first_seen":1499347547687,"flow_last_seen":1499347547687,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58360,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":341,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347547,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89IlAAD4G0UasEAABwKgKMuP4AFDYf+rfAAAAAKACchCXygAAAgQFtAQCCAoBOx5WAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":341,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347547,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ4\/gRtWE22H\/q4KAScSAyDgAAAgQFtAQCCAoD5O\/LATseVgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":341,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347547,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09IpAAD4G0U2sEAABwKgKMuP4AFDYf+rgEbVhN4AQAOXRFQAAAQEICgE7HlYD5O\/L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":338,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347547,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00WFAAD4G9HasEAABwKgKMuPCAFCPt8g2bPxcCYARAOXrfQAAAQEICgE7HmgD5Orf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":338,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347547,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0s9dAAEAGEAHAqAoyrBAAAQBQ48Js\/FwJj7fIN4ARAOPmfwAAAQEICgPk794BOx5o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":338,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347547,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00WJAAD4G9HWsEAABwKgKMuPCAFCPt8g3bPxcCoAQAOXmfAAAAQEICgE7HmkD5O\/e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":342,"flow_packet_id":1,"flow_first_seen":1499347550209,"flow_last_seen":1499347550209,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58386,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":342,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347550,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eyFAAD4GSq+sEAABwKgKMuQSAFDq3lvtAAAAAKACchARzgAAAgQFtAQCCAoBOyDMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":342,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347550,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5BLEGGHa6t5b7qAScSD2kwAAAgQFtAQCCAoD5PJBATsgzAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":342,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347550,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eyJAAD4GSrasEAABwKgKMuQSAFDq3lvuxBhh24AQAOWVmwAAAQEICgE7IMwD5PJB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":339,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347550,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HVhAAD4GqICsEAABwKgKMuPcAFAahQa1Hl4Jm4ARAOW9vgAAAQEICgE7IVYD5O1X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":339,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347550,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+1dAAEAGyIDAqAoyrBAAAQBQ49weXgmbGoUGtoARAOO4SgAAAQEICgPk8swBOyFW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":339,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347550,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HVlAAD4GqH+sEAABwKgKMuPcAFAahQa2Hl4JnIAQAOW4RwAAAQEICgE7IVcD5PLM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":343,"flow_packet_id":1,"flow_first_seen":1499347551495,"flow_last_seen":1499347551495,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58400,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":343,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8D\/NAAD4Gtd2sEAABwKgKMuQgAFDTqC39AAAAAKACchBVpAAAAgQFtAQCCAoBOyIOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":343,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5CCgVV5k06gt\/qAScSBgYQAAAgQFtAQCCAoD5PODATsiDgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":343,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D\/RAAD4GteSsEAABwKgKMuQgAFDTqC3+oFVeZYAQAOX\/aAAAAQEICgE7Ig4D5POD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":340,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q61AAD4GgiusEAABwKgKMuPqAFBqhV6xjcYFyYARAOWoLAAAAQEICgE7Ig4D5O6Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":341,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":341,"flow_packet_id":4,"flow_first_seen":1499347547687,"flow_last_seen":1499347551497,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58360,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27MRVS1VO9FLO4CFA5FLJ13I9GULOFH69WHOJQ0PH0OKE2FMG3MQ%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0407{"flow_id":341,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0krRAAEAGMSTAqAoyrBAAAQBQ4\/gRtWE32H\/tKYAQAOzHVQAAAQEICgPk84MBOyIO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":340,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09kpAAEAGzY3AqAoyrBAAAQBQ4+qNxgXJaoVesoARAOOjOgAAAQEICgPk84MBOyIO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":340,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q65AAD4GgiqsEAABwKgKMuPqAFBqhV6yjcYFyoAQAOWjOAAAAQEICgE7Ig4D5POD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2933{"flow_id":341,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":341,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347551,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09IxAAD4G0UusEAABwKgKMuP4AFDYf+0pEbVog4AQAQK\/8QAAAQEICgE7Ig8D5POE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":341,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2793{"flow_id":341,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":1836,"pkt":"AMGxFOsxABm5CmnxCABFAAcekrdAAEAGKjfAqAoyrBAAAQBQ4\/gRtWiD2H\/uqIAYAPV9\/AAAAQEICgPk9IEBOyMLSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI1OjUyIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":341,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09I5AAD4G0UmsEAABwKgKMuP4AFDYf+6oEbVvbYAQAR21cwAAAQEICgE7IwwD5PSB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":344,"flow_packet_id":1,"flow_first_seen":1499347552736,"flow_last_seen":1499347552736,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58414,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":344,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8B91AAD4GvfOsEAABwKgKMuQuAFCEqySZAAAAAKACchCswQAAAgQFtAQCCAoBOyNEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":344,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5C6xPoYyhKskmqAScSB9kQAAAgQFtAQCCAoD5PS5ATsjRAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":344,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0B95AAD4GvfqsEAABwKgKMuQuAFCEqySasT6GM4AQAOUcmQAAAQEICgE7I0QD5PS5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":341,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2939{"flow_id":341,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":341,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347552,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09JBAAD4G0UesEAABwKgKMuP4AFDYf\/DxEbV2uYAQATurTgAAAQEICgE7I0UD5PS6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0921{"flow_id":341,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347553,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2794{"flow_id":341,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347553,"pkt_len":1836,"pkt":"AMGxFOsxABm5CmnxCABFAAcekrtAAEAGKjPAqAoyrBAAAQBQ4\/gRtXa52H\/ycIAYAQd9\/AAAAQEICgPk9bsBOyRFSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI1OjUzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":345,"flow_packet_id":1,"flow_first_seen":1499347555255,"flow_last_seen":1499347555255,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58440,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":345,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347555,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81HxAAD4G8VOsEAABwKgKMuRIAFCgOPHGAAAAAKACchDBdgAAAgQFtAQCCAoBOyW6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":345,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347555,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5EiyOWdGoDjxx6AScSCtwQAAAgQFtAQCCAoD5PcvATslugEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":345,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347555,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01H1AAD4G8VqsEAABwKgKMuRIAFCgOPHHsjlnR4AQAOVMyQAAAQEICgE7JboD5Pcv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":342,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347555,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eyNAAD4GSrWsEAABwKgKMuQSAFDq3lvuxBhh24ARAOWQLQAAAQEICgE7JjkD5PJB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":342,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347555,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lnVAAEAGLWPAqAoyrBAAAQBQ5BLEGGHb6t5b74ARAOOKwQAAAQEICgPk964BOyY5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":342,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347555,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eyRAAD4GSrSsEAABwKgKMuQSAFDq3lvvxBhh3IAQAOWKvwAAAQEICgE7JjkD5Peu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":346,"flow_packet_id":1,"flow_first_seen":1499347556523,"flow_last_seen":1499347556523,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58454,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":346,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347556,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89uZAAD4GzumsEAABwKgKMuRWAFDF1NARAAAAAKACchC8RAAAAgQFtAQCCAoBOyb3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":346,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347556,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5FYT\/QypxdTQEqAScSCgLAAAAgQFtAQCCAoD5PhsATsm9wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":346,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347556,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09udAAD4GzvCsEAABwKgKMuRWAFDF1NASE\/0MqoAQAOU\/NAAAAQEICgE7JvcD5Phs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":343,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347556,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D\/VAAD4GteOsEAABwKgKMuQgAFDTqC3+oFVeZYARAOX6QgAAAQEICgE7JzMD5POD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":343,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347556,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ps1AAEAGHQvAqAoyrBAAAQBQ5CCgVV5l06gt\/4ARAOP1HgAAAQEICgPk+KgBOycz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":343,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347556,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0D\/ZAAD4GteKsEAABwKgKMuQgAFDTqC3\/oFVeZoAQAOX1HAAAAQEICgE7JzMD5Pio","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":304,"flow_packet_id":6,"flow_first_seen":1499347485533,"flow_last_seen":1499347490747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57698,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":304,"flow_packet_id":6,"flow_first_seen":1499347485533,"flow_last_seen":1499347490747,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57698,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":305,"flow_packet_id":6,"flow_first_seen":1499347486787,"flow_last_seen":1499347492748,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57712,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":305,"flow_packet_id":6,"flow_first_seen":1499347486787,"flow_last_seen":1499347492748,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57712,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":306,"flow_packet_id":6,"flow_first_seen":1499347489408,"flow_last_seen":1499347494749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57738,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":306,"flow_packet_id":6,"flow_first_seen":1499347489408,"flow_last_seen":1499347494749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57738,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":307,"flow_packet_id":6,"flow_first_seen":1499347490659,"flow_last_seen":1499347495749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57752,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":307,"flow_packet_id":6,"flow_first_seen":1499347490659,"flow_last_seen":1499347495749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57752,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":344,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347557,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0B99AAD4GvfmsEAABwKgKMuQuAFCEqySasT6GM4ARAOUXrwAAAQEICgE7KC0D5PS5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":344,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347557,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0f5FAAEAGREfAqAoyrBAAAQBQ5C6xPoYzhKskm4ARAOMSxwAAAQEICgPk+aIBOygt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":344,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347557,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0B+BAAD4GvfisEAABwKgKMuQuAFCEqySbsT6GNIAQAOUSxQAAAQEICgE7KC0D5Pmi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":347,"flow_packet_id":1,"flow_first_seen":1499347557789,"flow_last_seen":1499347557789,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58468,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":347,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347557,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82zBAAD4G6p+sEAABwKgKMuRkAFBn0PMDAAAAAKACchD2DAAAAgQFtAQCCAoBOygzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":347,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347557,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5GT+u1l1Z9DzBKAScSChLQAAAgQFtAQCCAoD5PmoATsoMwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":347,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347557,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02zFAAD4G6qasEAABwKgKMuRkAFBn0PME\/rtZdoAQAOVANQAAAQEICgE7KDMD5Pmo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":348,"flow_packet_id":1,"flow_first_seen":1499347559043,"flow_last_seen":1499347559043,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58482,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":348,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347559,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nvhAAD4GJtisEAABwKgKMuRyAFDmPbeUAAAAAKACchCxxwAAAgQFtAQCCAoBOylsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":348,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347559,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5HJJe\/AM5j23laAScSB6VwAAAgQFtAQCCAoD5PriATspbAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":348,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347559,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nvlAAD4GJt+sEAABwKgKMuRyAFDmPbeVSXvwDYAQAOUZXgAAAQEICgE7KW0D5Pri","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":349,"flow_packet_id":1,"flow_first_seen":1499347560327,"flow_last_seen":1499347560327,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58496,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":349,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347560,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rRJAAD4GGL6sEAABwKgKMuSAAFBDKIe8AAAAAKACchCDZQAAAgQFtAQCCAoBOyquAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":349,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347560,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5ICL+5A8QyiHvaAScSBoBAAAAgQFtAQCCAoD5PwjATsqrgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":349,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347560,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRNAAD4GGMWsEAABwKgKMuSAAFBDKIe9i\/uQPYAQAOUHDAAAAQEICgE7Kq4D5Pwj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":345,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347560,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01H5AAD4G8VmsEAABwKgKMuRIAFCgOPHHsjlnR4ARAOVHZwAAAQEICgE7KxsD5Pcv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":345,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347560,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m9ZAAEAGKALAqAoyrBAAAQBQ5EiyOWdHoDjxyIARAONCBgAAAQEICgPk\/JEBOysb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":345,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347560,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01H9AAD4G8VisEAABwKgKMuRIAFCgOPHIsjlnSIAQAOVCAwAAAQEICgE7KxwD5PyR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":350,"flow_packet_id":1,"flow_first_seen":1499347561622,"flow_last_seen":1499347561622,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58510,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":350,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347561,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JPRAAD4GoNysEAABwKgKMuSOAFBq0Q8FAAAAAKACchDTIgAAAgQFtAQCCAoBOyvxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":350,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347561,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5I6fc34\/atEPBqAScSC1AgAAAgQFtAQCCAoD5P1nATsr8QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":350,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347561,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JPVAAD4GoOOsEAABwKgKMuSOAFBq0Q8Gn3N+QIAQAOVUCgAAAQEICgE7K\/ED5P1n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":346,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347561,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09uhAAD4Gzu+sEAABwKgKMuRWAFDF1NASE\/0MqoARAOU6FQAAAQEICgE7LBUD5Phs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":346,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347561,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08SFAAEAG0rbAqAoyrBAAAQBQ5FYT\/QyqxdTQE4ARAOM09wAAAQEICgPk\/YsBOywV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":346,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347561,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09ulAAD4Gzu6sEAABwKgKMuRWAFDF1NATE\/0Mq4AQAOU09AAAAQEICgE7LBYD5P2L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":347,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347563,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02zJAAD4G6qWsEAABwKgKMuRkAFBn0PME\/rtZdoARAOU6XgAAAQEICgE7LgkD5Pmo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":347,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347563,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pglAAEAGHc\/AqAoyrBAAAQBQ5GT+u1l2Z9DzBYARAOM0iAAAAQEICgPk\/38BOy4J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":347,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347563,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02zNAAD4G6qSsEAABwKgKMuRkAFBn0PMF\/rtZd4AQAOU0hQAAAQEICgE7LgoD5P9\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":351,"flow_packet_id":1,"flow_first_seen":1499347564211,"flow_last_seen":1499347564211,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58536,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":351,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347564,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87W5AAD4G2GGsEAABwKgKMuSoAFCF1MMXAAAAAKACchABawAAAgQFtAQCCAoBOy55AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":351,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347564,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5KgQ0EVbhdTDGKAScSCoSwAAAgQFtAQCCAoD5P\/uATsueQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":351,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347564,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07W9AAD4G2GisEAABwKgKMuSoAFCF1MMYENBFXIAQAOVHUwAAAQEICgE7LnkD5P\/u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":348,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347564,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nvpAAD4GJt6sEAABwKgKMuRyAFDmPbeVSXvwDYARAOUTxgAAAQEICgE7LwQD5Pri","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":348,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347564,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08HRAAEAG02PAqAoyrBAAAQBQ5HJJe\/AN5j23loARAOMOMAAAAQEICgPlAHkBOy8E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":348,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347564,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nvtAAD4GJt2sEAABwKgKMuRyAFDmPbeWSXvwDoAQAOUOLgAAAQEICgE7LwQD5QB5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":352,"flow_packet_id":1,"flow_first_seen":1499347565457,"flow_last_seen":1499347565457,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58550,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":352,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347565,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CLtAAD4GvRWsEAABwKgKMuS2AFBcaycLAAAAAKACchDFmwAAAgQFtAQCCAoBOy+wAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":352,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347565,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5La+IYdMXGsnDKAScSB8AQAAAgQFtAQCCAoD5QEmATsvsAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":352,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347565,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CLxAAD4GvRysEAABwKgKMuS2AFBcaycMviGHTYAQAOUbCQAAAQEICgE7L7AD5QEm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":349,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347565,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRRAAD4GGMSsEAABwKgKMuSAAFBDKIe9i\/uQPYARAOUBuwAAAQEICgE7L\/4D5Pwj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":349,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347565,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0kU5AAEAGMorAqAoyrBAAAQBQ5ICL+5A9QyiHvoARAOP8awAAAQEICgPlAXMBOy\/+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":349,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347565,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rRVAAD4GGMOsEAABwKgKMuSAAFBDKIe+i\/uQPoAQAOX8aQAAAQEICgE7L\/4D5QFz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":353,"flow_packet_id":1,"flow_first_seen":1499347566719,"flow_last_seen":1499347566719,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58564,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":353,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347566,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bldAAD4GV3msEAABwKgKMuTEAFDBpl67AAAAAKACchAnZgAAAgQFtAQCCAoBOzDsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":353,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347566,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5MTiLAwhwaZevKAScSAzsQAAAgQFtAQCCAoD5QJhATsw7AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":353,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347566,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0blhAAD4GV4CsEAABwKgKMuTEAFDBpl684iwMIoAQAOXSuAAAAQEICgE7MOwD5QJh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":350,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347566,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JPZAAD4GoOKsEAABwKgKMuSOAFBq0Q8Gn3N+QIARAOVPAgAAAQEICgE7MPgD5P1n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":350,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347566,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fC1AAEAGR6vAqAoyrBAAAQBQ5I6fc35AatEPB4ARAONJ\/QAAAQEICgPlAm0BOzD4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":350,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347566,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JPdAAD4GoOGsEAABwKgKMuSOAFBq0Q8Hn3N+QYAQAOVJ+wAAAQEICgE7MPgD5QJt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":308,"flow_packet_id":6,"flow_first_seen":1499347493167,"flow_last_seen":1499347498750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57778,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":308,"flow_packet_id":6,"flow_first_seen":1499347493167,"flow_last_seen":1499347498750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57778,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":309,"flow_packet_id":6,"flow_first_seen":1499347494446,"flow_last_seen":1499347499749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57792,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":309,"flow_packet_id":6,"flow_first_seen":1499347494446,"flow_last_seen":1499347499749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57792,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":310,"flow_packet_id":6,"flow_first_seen":1499347495714,"flow_last_seen":1499347500750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":310,"flow_packet_id":6,"flow_first_seen":1499347495714,"flow_last_seen":1499347500750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57806,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":311,"flow_packet_id":6,"flow_first_seen":1499347498249,"flow_last_seen":1499347503750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57832,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":311,"flow_packet_id":6,"flow_first_seen":1499347498249,"flow_last_seen":1499347503750,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57832,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":312,"flow_packet_id":6,"flow_first_seen":1499347499500,"flow_last_seen":1499347504749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57846,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":312,"flow_packet_id":6,"flow_first_seen":1499347499500,"flow_last_seen":1499347504749,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57846,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":313,"flow_packet_id":6,"flow_first_seen":1499347500770,"flow_last_seen":1499347506751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57860,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":313,"flow_packet_id":6,"flow_first_seen":1499347500770,"flow_last_seen":1499347506751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57860,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":354,"flow_packet_id":1,"flow_first_seen":1499347569321,"flow_last_seen":1499347569321,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58590,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":354,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347569,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8g25AAD4GQmKsEAABwKgKMuTeAFCWQ7AYAAAAAKACchD+xwAAAgQFtAQCCAoBOzN2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":354,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347569,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5N7q6xnjlkOwGaAScSDyBwAAAgQFtAQCCAoD5QTrATszdgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":354,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347569,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g29AAD4GQmmsEAABwKgKMuTeAFCWQ7AZ6usZ5IAQAOWRDwAAAQEICgE7M3YD5QTr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":351,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347569,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07XBAAD4G2GesEAABwKgKMuSoAFCF1MMYENBFXIARAOVB5QAAAQEICgE7M+YD5P\/u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":351,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347569,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QAdAAEAGg9HAqAoyrBAAAQBQ5KgQ0EVchdTDGYARAOM8eQAAAQEICgPlBVsBOzPm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":351,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347569,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07XFAAD4G2GasEAABwKgKMuSoAFCF1MMZENBFXYAQAOU8dwAAAQEICgE7M+YD5QVb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":355,"flow_packet_id":1,"flow_first_seen":1499347570571,"flow_last_seen":1499347570571,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58604,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":355,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347570,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8l0FAAD4GLo+sEAABwKgKMuTsAFD4v6PuAAAAAKACchCnLgAAAgQFtAQCCAoBOzSvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":355,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347570,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5Ow6nDyd+L+j76AScSAmywAAAgQFtAQCCAoD5QYkATs0rwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":355,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347570,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0JAAD4GLpasEAABwKgKMuTsAFD4v6PvOpw8noAQAOXF0gAAAQEICgE7NK8D5QYk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":352,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347570,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CL1AAD4GvRusEAABwKgKMuS2AFBcaycMviGHTYARAOUV2AAAAQEICgE7NOAD5QEm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":352,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347570,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gRtAAEAGQr3AqAoyrBAAAQBQ5La+IYdNXGsnDYARAOMQqQAAAQEICgPlBlYBOzTg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":352,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347570,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CL5AAD4GvRqsEAABwKgKMuS2AFBcaycNviGHToAQAOUQpgAAAQEICgE7NOED5QZW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":353,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347571,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bllAAD4GV3+sEAABwKgKMuTEAFDBpl684iwMIoARAOXNyQAAAQEICgE7NdoD5QJh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":353,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347571,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0C3JAAEAGuGbAqAoyrBAAAQBQ5MTiLAwiwaZevYARAOPI2wAAAQEICgPlB1ABOzXa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":353,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347571,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0blpAAD4GV36sEAABwKgKMuTEAFDBpl694iwMI4AQAOXI2AAAAQEICgE7NdsD5QdQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":356,"flow_packet_id":1,"flow_first_seen":1499347573065,"flow_last_seen":1499347573065,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58630,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":356,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347573,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8STJAAD4GfJ6sEAABwKgKMuUGAFCilH4sAAAAAKACchAgkwAAAgQFtAQCCAoBOzceAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":356,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347573,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5Qbzm\/YPopR+LaAScSArTgAAAgQFtAQCCAoD5QiTATs3HgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":356,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347573,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0STNAAD4GfKWsEAABwKgKMuUGAFCilH4t85v2EIAQAOXKVQAAAQEICgE7Nx4D5QiT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":357,"flow_packet_id":1,"flow_first_seen":1499347574366,"flow_last_seen":1499347574366,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58650,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":357,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347574,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8umZAAD4GC2qsEAABwKgKMuUaAFCmeIIFAAAAAKACchAXfQAAAgQFtAQCCAoBOzhjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":357,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347574,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5RoJ5n+MpniCBqAScSCBKwAAAgQFtAQCCAoD5QnZATs4YwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":357,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347574,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0umdAAD4GC3GsEAABwKgKMuUaAFCmeIIGCeZ\/jYAQAOUgMgAAAQEICgE7OGQD5QnZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":354,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347574,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g3BAAD4GQmisEAABwKgKMuTeAFCWQ7AZ6usZ5IARAOWLuwAAAQEICgE7OMkD5QTr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":354,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347574,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0E9pAAEAGr\/7AqAoyrBAAAQBQ5N7q6xnklkOwGoARAOOGaQAAAQEICgPlCj4BOzjJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":354,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347574,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0g3FAAD4GQmesEAABwKgKMuTeAFCWQ7Aa6usZ5YAQAOWGZwAAAQEICgE7OMkD5Qo+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":358,"flow_packet_id":1,"flow_first_seen":1499347575652,"flow_last_seen":1499347575652,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58664,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":358,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347575,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XdZAAD4GZ\/qsEAABwKgKMuUoAFDuGWRzAAAAAKACchDsHQAAAgQFtAQCCAoBOzmlAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":358,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347575,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5Sh6374H7hlkdKAScSClFgAAAgQFtAQCCAoD5QsaATs5pQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":358,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347575,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XddAAD4GaAGsEAABwKgKMuUoAFDuGWR0et++CIAQAOVEHgAAAQEICgE7OaUD5Qsa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":355,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347575,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0NAAD4GLpWsEAABwKgKMuTsAFD4v6PvOpw8noARAOXAvQAAAQEICgE7OcMD5QYk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":355,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347575,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0N6ZAAEAGjDLAqAoyrBAAAQBQ5Ow6nDye+L+j8IARAOO7qgAAAQEICgPlCzgBOznD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":355,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347575,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l0RAAD4GLpSsEAABwKgKMuTsAFD4v6PwOpw8n4AQAOW7qAAAAQEICgE7OcMD5Qs4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":314,"flow_packet_id":6,"flow_first_seen":1499347503273,"flow_last_seen":1499347508751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57886,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":314,"flow_packet_id":6,"flow_first_seen":1499347503273,"flow_last_seen":1499347508751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57886,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":315,"flow_packet_id":6,"flow_first_seen":1499347504529,"flow_last_seen":1499347509751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57900,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":315,"flow_packet_id":6,"flow_first_seen":1499347504529,"flow_last_seen":1499347509751,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57900,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":316,"flow_packet_id":6,"flow_first_seen":1499347505774,"flow_last_seen":1499347511753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57914,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":316,"flow_packet_id":6,"flow_first_seen":1499347505774,"flow_last_seen":1499347511753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57914,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":317,"flow_packet_id":6,"flow_first_seen":1499347508344,"flow_last_seen":1499347513753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57940,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":317,"flow_packet_id":6,"flow_first_seen":1499347508344,"flow_last_seen":1499347513753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57940,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":318,"flow_packet_id":6,"flow_first_seen":1499347509601,"flow_last_seen":1499347514754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57954,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":318,"flow_packet_id":6,"flow_first_seen":1499347509601,"flow_last_seen":1499347514754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57954,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":319,"flow_packet_id":6,"flow_first_seen":1499347512081,"flow_last_seen":1499347517753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57980,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":319,"flow_packet_id":6,"flow_first_seen":1499347512081,"flow_last_seen":1499347517753,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57980,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":359,"flow_packet_id":1,"flow_first_seen":1499347578164,"flow_last_seen":1499347578164,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58690,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":359,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347578,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86A1AAD4G3cKsEAABwKgKMuVCAFCbVdQUAAAAAKACchDMsgAAAgQFtAQCCAoBOzwZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":359,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347578,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5UJIGXyrm1XUFaAScSD3WQAAAgQFtAQCCAoD5Q2OATs8GQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":359,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347578,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06A5AAD4G3cmsEAABwKgKMuVCAFCbVdQVSBl8rIAQAOWWYQAAAQEICgE7PBkD5Q2O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":356,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347578,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0STRAAD4GfKSsEAABwKgKMuUGAFCilH4t85v2EIARAOXEwQAAAQEICgE7PLED5QiT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":356,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347578,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+DZAAEAGy6HAqAoyrBAAAQBQ5Qbzm\/YQopR+LoARAOO\/LwAAAQEICgPlDiYBOzyx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":356,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347578,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0STVAAD4GfKOsEAABwKgKMuUGAFCilH4u85v2EYAQAOW\/LQAAAQEICgE7PLED5Q4m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":360,"flow_packet_id":1,"flow_first_seen":1499347579405,"flow_last_seen":1499347579405,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58704,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":360,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mitAAD4GK6WsEAABwKgKMuVQAFAuJKdkAAAAAKACchBlUAAAAgQFtAQCCAoBOz1PAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":360,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5VD8Ip+YLiSnZaAScSC3ygAAAgQFtAQCCAoD5Q7EATs9TwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":360,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mixAAD4GK6ysEAABwKgKMuVQAFAuJKdl\/CKfmYAQAOVW0gAAAQEICgE7PU8D5Q7E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":357,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0umhAAD4GC3CsEAABwKgKMuUaAFCmeIIGCeZ\/jYARAOUa6gAAAQEICgE7PasD5QnZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":357,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cK1AAEAGUyvAqAoyrBAAAQBQ5RoJ5n+NpniCB4AQAOMVpAAAAQEICgPlDyEBOz2r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":357,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cK5AAEAGUyrAqAoyrBAAAQBQ5RoJ5n+NpniCB4ARAOMVowAAAQEICgPlDyEBOz2r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":357,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347579,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TuJAAD4GdvasEAABwKgKMuUaAFCmeIIHCeZ\/joAQAOUVoQAAAQEICgE7PasD5Q8h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":361,"flow_packet_id":1,"flow_first_seen":1499347580693,"flow_last_seen":1499347580693,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58718,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":361,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ma5AAD4GlCKsEAABwKgKMuVeAFCEtA8\/AAAAAKACchCllQAAAgQFtAQCCAoBOz6RAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":361,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5V5F9x9ShLQPQKAScSAtQAAAAgQFtAQCCAoD5RAGATs+kQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":361,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ma9AAD4GlCmsEAABwKgKMuVeAFCEtA9ARfcfU4AQAOXMRwAAAQEICgE7PpED5RAG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":358,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XdhAAD4GaACsEAABwKgKMuUoAFDuGWR0et++CIARAOU\/HQAAAQEICgE7PqUD5Qsa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":358,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rhJAAEAGFcbAqAoyrBAAAQBQ5Sh6374I7hlkdYAQAOM6HgAAAQEICgPlEBsBOz6l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":358,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rhNAAEAGFcXAqAoyrBAAAQBQ5Sh6374I7hlkdYARAOM6HQAAAQEICgPlEBsBOz6l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":358,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347580,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T0RAAD4GdpSsEAABwKgKMuUoAFDuGWR1et++CYAQAOU6GgAAAQEICgE7PqYD5RAb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":362,"flow_packet_id":1,"flow_first_seen":1499347583209,"flow_last_seen":1499347583209,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58744,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":362,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8hK5AAD4GQSKsEAABwKgKMuV4AFAxSsWoAAAAAKACchBABwAAAgQFtAQCCAoBO0EGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":362,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5XgjIturMUrFqaAScSAruAAAAgQFtAQCCAoD5RJ7ATtBBgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":362,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hK9AAD4GQSmsEAABwKgKMuV4AFAxSsWpIyLbrIAQAOXKvgAAAQEICgE7QQcD5RJ7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":359,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06A9AAD4G3cisEAABwKgKMuVCAFCbVdQVSBl8rIARAOWQ5gAAAQEICgE7QZMD5Q2O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":359,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b6RAAEAGVDTAqAoyrBAAAQBQ5UJIGXysm1XUFoAQAOOLbQAAAQEICgPlEwkBO0GT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":359,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b6VAAEAGVDPAqAoyrBAAAQBQ5UJIGXysm1XUFoARAOOLbAAAAQEICgPlEwkBO0GT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":359,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347583,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UDxAAD4GdZysEAABwKgKMuVCAFCbVdQWSBl8rYAQAOWLaQAAAQEICgE7QZQD5RMJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":363,"flow_packet_id":1,"flow_first_seen":1499347584472,"flow_last_seen":1499347584472,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58758,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":363,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347584,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XXVAAD4GaFusEAABwKgKMuWGAFAsKR83AAAAAKACchDqTwAAAgQFtAQCCAoBO0JCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":363,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347584,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5YYTf0ohLCkfOKAScSB18gAAAgQFtAQCCAoD5RO3ATtCQgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":363,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347584,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XXZAAD4GaGKsEAABwKgKMuWGAFAsKR84E39KIoAQAOUU+gAAAQEICgE7QkID5RO3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":360,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347584,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mi1AAD4GK6usEAABwKgKMuVQAFAuJKdl\/CKfmYARAOVRkwAAAQEICgE7Qo0D5Q7E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":360,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347584,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i5pAAEAGOD7AqAoyrBAAAQBQ5VD8Ip+ZLiSnZoARAONMVQAAAQEICgPlFAMBO0KN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":360,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347584,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mi5AAD4GK6qsEAABwKgKMuVQAFAuJKdm\/CKfmoAQAOVMUgAAAQEICgE7Qo4D5RQD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":364,"flow_packet_id":1,"flow_first_seen":1499347585744,"flow_last_seen":1499347585744,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58772,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":364,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347585,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CJdAAD4GvTmsEAABwKgKMuWUAFD9vEsXAAAAAKACchDrjwAAAgQFtAQCCAoBO0OAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":364,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347585,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5ZQRxaCL\/bxLGKAScSAhRAAAAgQFtAQCCAoD5RT1ATtDgAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":364,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347585,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CJhAAD4GvUCsEAABwKgKMuWUAFD9vEsYEcWgjIAQAOXASwAAAQEICgE7Q4AD5RT1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":361,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347585,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbBAAD4GlCisEAABwKgKMuVeAFCEtA9ARfcfU4ARAOXHUAAAAQEICgE7Q4cD5RAG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":361,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347585,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0C65AAEAGuCrAqAoyrBAAAQBQ5V5F9x9ThLQPQYARAOPCWgAAAQEICgPlFP0BO0OH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":361,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347585,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbFAAD4GlCesEAABwKgKMuVeAFCEtA9BRfcfVIAQAOXCVwAAAQEICgE7Q4gD5RT9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":320,"flow_packet_id":6,"flow_first_seen":1499347513353,"flow_last_seen":1499347518754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57994,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":320,"flow_packet_id":6,"flow_first_seen":1499347513353,"flow_last_seen":1499347518754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57994,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":321,"flow_packet_id":6,"flow_first_seen":1499347514648,"flow_last_seen":1499347519754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58008,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":321,"flow_packet_id":6,"flow_first_seen":1499347514648,"flow_last_seen":1499347519754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58008,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":322,"flow_packet_id":6,"flow_first_seen":1499347517171,"flow_last_seen":1499347522754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58034,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":322,"flow_packet_id":6,"flow_first_seen":1499347517171,"flow_last_seen":1499347522754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58034,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":323,"flow_packet_id":6,"flow_first_seen":1499347518410,"flow_last_seen":1499347523754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58048,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":323,"flow_packet_id":6,"flow_first_seen":1499347518410,"flow_last_seen":1499347523754,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58048,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":324,"flow_packet_id":6,"flow_first_seen":1499347519679,"flow_last_seen":1499347524756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58062,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":324,"flow_packet_id":6,"flow_first_seen":1499347519679,"flow_last_seen":1499347524756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58062,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":325,"flow_packet_id":6,"flow_first_seen":1499347522204,"flow_last_seen":1499347527756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58088,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":325,"flow_packet_id":6,"flow_first_seen":1499347522204,"flow_last_seen":1499347527756,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58088,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":365,"flow_packet_id":1,"flow_first_seen":1499347588270,"flow_last_seen":1499347588270,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58798,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":365,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347588,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nX9AAD4GKFGsEAABwKgKMuWuAFBMCdiIAAAAAKACchANQQAAAgQFtAQCCAoBO0X3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":365,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347588,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5a7qCbUZTAnYiaAScSBTqgAAAgQFtAQCCAoD5RdtATtF9wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":365,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347588,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nYBAAD4GKFisEAABwKgKMuWuAFBMCdiJ6gm1GoAQAOXysAAAAQEICgE7RfgD5Rdt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":362,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347588,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hLBAAD4GQSisEAABwKgKMuV4AFAxSsWpIyLbrIARAOXFTwAAAQEICgE7RnUD5RJ7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":362,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347588,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zEdAAEAG95DAqAoyrBAAAQBQ5XgjItusMUrFqoARAOO\/4AAAAQEICgPlF+sBO0Z1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":362,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347588,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0hLFAAD4GQSesEAABwKgKMuV4AFAxSsWqIyLbrYAQAOW\/3QAAAQEICgE7RnYD5Rfr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":366,"flow_packet_id":1,"flow_first_seen":1499347589555,"flow_last_seen":1499347589555,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58812,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":366,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347589,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QWlAAD4GhGesEAABwKgKMuW8AFCYtAZQAAAAAKACchCRfgAAAgQFtAQCCAoBO0c5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":366,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347589,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5bxlqZ52mLQGUaAScSBxqgAAAgQFtAQCCAoD5RiuATtHOQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":366,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347589,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QWpAAD4GhG6sEAABwKgKMuW8AFCYtAZRZamed4AQAOUQsgAAAQEICgE7RzkD5Riu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":363,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347589,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XXdAAD4GaGGsEAABwKgKMuWGAFAsKR84E39KIoARAOUPywAAAQEICgE7R3AD5RO3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":363,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347589,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0UsdAAEAGcRHAqAoyrBAAAQBQ5YYTf0oiLCkfOYARAOMKngAAAQEICgPlGOUBO0dw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":363,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347589,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XXhAAD4GaGCsEAABwKgKMuWGAFAsKR85E39KI4AQAOUKnAAAAQEICgE7R3AD5Rjl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":364,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347590,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CJlAAD4GvT+sEAABwKgKMuWUAFD9vEsYEcWgjIARAOW7YAAAAQEICgE7SGoD5RT1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":364,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347590,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uVNAAEAGCoXAqAoyrBAAAQBQ5ZQRxaCM\/bxLGYARAOO2dwAAAQEICgPlGd8BO0hq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":364,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347590,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CJpAAD4GvT6sEAABwKgKMuWUAFD9vEsZEcWgjYAQAOW2dQAAAQEICgE7SGoD5Rnf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":367,"flow_packet_id":1,"flow_first_seen":1499347592060,"flow_last_seen":1499347592060,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58838,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":367,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347592,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gghAAD4GQ8isEAABwKgKMuXWAFA6JsujAAAAAKACchAoLQAAAgQFtAQCCAoBO0mrAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":367,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347592,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5dZ5GzqJOibLpKAScSBWYgAAAgQFtAQCCAoD5RsgATtJqwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":367,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347592,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gglAAD4GQ8+sEAABwKgKMuXWAFA6JsukeRs6ioAQAOX1aQAAAQEICgE7SasD5Rsg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":368,"flow_packet_id":1,"flow_first_seen":1499347593330,"flow_last_seen":1499347593330,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58852,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":368,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347593,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8X5xAAD4GZjSsEAABwKgKMuXkAFAOABV0AAAAAKACchAJOAAAAgQFtAQCCAoBO0roAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":368,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347593,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5eQdKIqzDgAVdaAScSBB+AAAAgQFtAQCCAoD5RxeATtK6AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":368,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347593,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0X51AAD4GZjusEAABwKgKMuXkAFAOABV1HSiKtIAQAOXg\/gAAAQEICgE7SukD5Rxe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":365,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347593,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nYFAAD4GKFesEAABwKgKMuWuAFBMCdiJ6gm1GoARAOXtTwAAAQEICgE7S1gD5Rdt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":365,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347593,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qddAAEAGGgHAqAoyrBAAAQBQ5a7qCbUaTAnYioARAOPn8AAAAQEICgPlHM0BO0tY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":365,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347593,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nYJAAD4GKFasEAABwKgKMuWuAFBMCdiK6gm1G4AQAOXn7gAAAQEICgE7S1gD5RzN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":369,"flow_packet_id":1,"flow_first_seen":1499347594595,"flow_last_seen":1499347594595,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58866,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":369,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347594,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80FRAAD4G9XusEAABwKgKMuXyAFCOVJxwAAAAAKACchAAnQAAAgQFtAQCCAoBO0wkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":369,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347594,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5fJ5A+8AjlSccaAScSB3+AAAAgQFtAQCCAoD5R2aATtMJAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":369,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347594,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00FVAAD4G9YKsEAABwKgKMuXyAFCOVJxxeQPvAYAQAOUW\/wAAAQEICgE7TCUD5R2a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":366,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347594,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QWtAAD4GhG2sEAABwKgKMuW8AFCYtAZRZamed4ARAOULmAAAAQEICgE7TFID5Riu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":366,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347594,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0g7BAAEAGQCjAqAoyrBAAAQBQ5bxlqZ53mLQGUoARAOMGgAAAAQEICgPlHccBO0xS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":366,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347594,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QWxAAD4GhGysEAABwKgKMuW8AFCYtAZSZameeIAQAOUGfQAAAQEICgE7TFMD5R3H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":370,"flow_packet_id":1,"flow_first_seen":1499347597121,"flow_last_seen":1499347597121,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58892,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":370,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347597,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Xm5AAD4GZ2KsEAABwKgKMuYMAFDbqxDyAAAAAKACchA8MgAAAgQFtAQCCAoBO06cAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":370,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347597,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5gw3EDJr26sQ86AScSCvnwAAAgQFtAQCCAoD5SARATtOnAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":370,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347597,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Xm9AAD4GZ2msEAABwKgKMuYMAFDbqxDzNxAybIAQAOVOpwAAAQEICgE7TpwD5SAR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":367,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347597,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggpAAD4GQ86sEAABwKgKMuXWAFA6JsukeRs6ioARAOXv0wAAAQEICgE7T0AD5Rsg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":367,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347597,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GjxAAEAGqZzAqAoyrBAAAQBQ5dZ5GzqKOibLpYARAOPqPgAAAQEICgPlILYBO09A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":367,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347597,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ggtAAD4GQ82sEAABwKgKMuXWAFA6JsuleRs6i4AQAOXqOwAAAQEICgE7T0ED5SC2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":326,"flow_packet_id":6,"flow_first_seen":1499347523488,"flow_last_seen":1499347528757,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58102,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":326,"flow_packet_id":6,"flow_first_seen":1499347523488,"flow_last_seen":1499347528757,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58102,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":327,"flow_packet_id":7,"flow_first_seen":1499347524782,"flow_last_seen":1499347530758,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58116,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":327,"flow_packet_id":7,"flow_first_seen":1499347524782,"flow_last_seen":1499347530758,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58116,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":328,"flow_packet_id":6,"flow_first_seen":1499347526155,"flow_last_seen":1499347531758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58130,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":328,"flow_packet_id":6,"flow_first_seen":1499347526155,"flow_last_seen":1499347531758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58130,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":329,"flow_packet_id":6,"flow_first_seen":1499347527425,"flow_last_seen":1499347532758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":329,"flow_packet_id":6,"flow_first_seen":1499347527425,"flow_last_seen":1499347532758,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58144,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":330,"flow_packet_id":6,"flow_first_seen":1499347528679,"flow_last_seen":1499347533759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":330,"flow_packet_id":6,"flow_first_seen":1499347528679,"flow_last_seen":1499347533759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58158,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":331,"flow_packet_id":6,"flow_first_seen":1499347531303,"flow_last_seen":1499347536759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58184,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":331,"flow_packet_id":6,"flow_first_seen":1499347531303,"flow_last_seen":1499347536759,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58184,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":332,"flow_packet_id":6,"flow_first_seen":1499347532560,"flow_last_seen":1499347537760,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58198,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":332,"flow_packet_id":6,"flow_first_seen":1499347532560,"flow_last_seen":1499347537760,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58198,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":371,"flow_packet_id":1,"flow_first_seen":1499347598383,"flow_last_seen":1499347598383,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58906,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":371,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347598,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jLdAAD4GORmsEAABwKgKMuYaAFCJpsNgAAAAAKACchDafwAAAgQFtAQCCAoBO0\/XAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":371,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347598,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5hrRW5D8iabDYaAScSBT1AAAAgQFtAQCCAoD5SFNATtP1wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":371,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347598,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jLhAAD4GOSCsEAABwKgKMuYaAFCJpsNh0VuQ\/YAQAOXy2gAAAQEICgE7T9gD5SFN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":368,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347598,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0X55AAD4GZjqsEAABwKgKMuXkAFAOABV1HSiKtIARAOXbrAAAAQEICgE7UDoD5Rxe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":368,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347598,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qwRAAEAGGNTAqAoyrBAAAQBQ5eQdKIq0DgAVdoARAOPWWwAAAQEICgPlIbABO1A6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":368,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347598,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0X59AAD4GZjmsEAABwKgKMuXkAFAOABV2HSiKtYAQAOXWWAAAAQEICgE7UDsD5SGw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":372,"flow_packet_id":1,"flow_first_seen":1499347599663,"flow_last_seen":1499347599663,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58920,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":372,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347599,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qjVAAD4GG5usEAABwKgKMuYoAFAgjfstAAAAAKACchAKfQAAAgQFtAQCCAoBO1EYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":372,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347599,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5igR\/+x3II37LqAScSDmcgAAAgQFtAQCCAoD5SKNATtRGAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":372,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347599,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjZAAD4GG6KsEAABwKgKMuYoAFAgjfsuEf\/seIAQAOWFegAAAQEICgE7URgD5SKN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":369,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347599,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00FZAAD4G9YGsEAABwKgKMuXyAFCOVJxxeQPvAYARAOUR7wAAAQEICgE7UTQD5R2a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":369,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347599,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zatAAEAG9izAqAoyrBAAAQBQ5fJ5A+8BjlSccoARAOMM4AAAAQEICgPlIqoBO1E0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":369,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347599,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00FdAAD4G9YCsEAABwKgKMuXyAFCOVJxyeQPvAoAQAOUM3QAAAQEICgE7UTUD5SKq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":373,"flow_packet_id":1,"flow_first_seen":1499347602223,"flow_last_seen":1499347602223,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58946,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":373,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347602,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZzNAAD4GXp2sEAABwKgKMuZCAFA0xTSkAAAAAKACchC6NQAAAgQFtAQCCAoBO1OXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":373,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347602,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5kLiWaZmNMU0paAScSAJYgAAAgQFtAQCCAoD5SUNATtTlwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":373,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347602,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZzRAAD4GXqSsEAABwKgKMuZCAFA0xTSl4lmmZ4AQAOWoaAAAAQEICgE7U5gD5SUN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":370,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347602,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XnBAAD4GZ2isEAABwKgKMuYMAFDbqxDzNxAybIARAOVJHwAAAQEICgE7VCMD5SAR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":370,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347602,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0F\/RAAEAGq+TAqAoyrBAAAQBQ5gw3EDJs26sQ9IARAONDmQAAAQEICgPlJZgBO1Qj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":370,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347602,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XnFAAD4GZ2esEAABwKgKMuYMAFDbqxD0NxAybYAQAOVDlwAAAQEICgE7VCMD5SWY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":374,"flow_packet_id":1,"flow_first_seen":1499347603507,"flow_last_seen":1499347603507,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58960,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":374,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347603,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rD1AAD4GGZOsEAABwKgKMuZQAFBpufjkAAAAAKACchC\/sAAAAgQFtAQCCAoBO1TZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":374,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347603,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5lDEx3+iabn45aAScSBR8gAAAgQFtAQCCAoD5SZOATtU2QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":374,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347603,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rD5AAD4GGZqsEAABwKgKMuZQAFBpufjlxMd\/o4AQAOXw+QAAAQEICgE7VNkD5SZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":371,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347603,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jLlAAD4GOR+sEAABwKgKMuYaAFCJpsNh0VuQ\/YARAOXtlAAAAQEICgE7VR0D5SFN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":371,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347603,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tm9AAEAGDWnAqAoyrBAAAQBQ5hrRW5D9iabDYoARAOPoUAAAAQEICgPlJpIBO1Ud","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":371,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347603,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jLpAAD4GOR6sEAABwKgKMuYaAFCJpsNi0VuQ\/oAQAOXoTgAAAQEICgE7VR0D5SaS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":375,"flow_packet_id":1,"flow_first_seen":1499347604752,"flow_last_seen":1499347604752,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58974,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":375,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347604,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ltJAAD4GLv6sEAABwKgKMuZeAFCga8DCAAAAAKACchC\/2wAAAgQFtAQCCAoBO1YQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":375,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347604,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5l5oMbaJoGvAw6AScSB2lQAAAgQFtAQCCAoD5SeFATtWEAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":375,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347604,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ltNAAD4GLwWsEAABwKgKMuZeAFCga8DDaDG2ioAQAOUVnQAAAQEICgE7VhAD5SeF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":372,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347604,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjdAAD4GG6GsEAABwKgKMuYoAFAgjfsuEf\/seIARAOWAegAAAQEICgE7VhcD5SKN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":372,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347604,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0y\/RAAEAG9+PAqAoyrBAAAQBQ5igR\/+x4II37L4ARAON7fAAAAQEICgPlJ4wBO1YX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":372,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347604,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjhAAD4GG6CsEAABwKgKMuYoAFAgjfsvEf\/seYAQAOV7eQAAAQEICgE7VhgD5SeM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":376,"flow_packet_id":1,"flow_first_seen":1499347606078,"flow_last_seen":1499347606078,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58988,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":376,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347606,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83l9AAD4G53CsEAABwKgKMuZsAFA9+okEAAAAAKACchBYsgAAAgQFtAQCCAoBO1dbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":376,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347606,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5mwyfi78PfqJBaAScSDLYAAAAgQFtAQCCAoD5SjRATtXWwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":376,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347606,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03mBAAD4G53esEAABwKgKMuZsAFA9+okFMn4u\/YAQAOVqZwAAAQEICgE7V1wD5SjR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":377,"flow_packet_id":1,"flow_first_seen":1499347607344,"flow_last_seen":1499347607344,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59002,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":377,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347607,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8neJAAD4GJ+6sEAABwKgKMuZ6AFBKtMV6AAAAAKACchAONwAAAgQFtAQCCAoBO1iYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":377,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347607,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5nrlgxvESrTFe6AScSDf2wAAAgQFtAQCCAoD5SoNATtYmAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":377,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347607,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0neNAAD4GJ\/WsEAABwKgKMuZ6AFBKtMV75YMbxYAQAOV+4wAAAQEICgE7WJgD5SoN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":373,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347607,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZzVAAD4GXqOsEAABwKgKMuZCAFA0xTSl4lmmZ4ARAOWi+gAAAQEICgE7WQUD5SUN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":373,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347607,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jBxAAEAGN7zAqAoyrBAAAQBQ5kLiWaZnNMU0poARAOOdjQAAAQEICgPlKnsBO1kF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":373,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347607,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZzZAAD4GXqKsEAABwKgKMuZCAFA0xTSm4lmmaIAQAOWdigAAAQEICgE7WQYD5Sp7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":333,"flow_packet_id":6,"flow_first_seen":1499347535081,"flow_last_seen":1499347540761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58224,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":333,"flow_packet_id":6,"flow_first_seen":1499347535081,"flow_last_seen":1499347540761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58224,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":334,"flow_packet_id":6,"flow_first_seen":1499347536332,"flow_last_seen":1499347541761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58238,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":334,"flow_packet_id":6,"flow_first_seen":1499347536332,"flow_last_seen":1499347541761,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58238,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":335,"flow_packet_id":6,"flow_first_seen":1499347537591,"flow_last_seen":1499347542762,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58252,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":335,"flow_packet_id":6,"flow_first_seen":1499347537591,"flow_last_seen":1499347542762,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58252,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":336,"flow_packet_id":6,"flow_first_seen":1499347540145,"flow_last_seen":1499347545763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58278,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":336,"flow_packet_id":6,"flow_first_seen":1499347540145,"flow_last_seen":1499347545763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58278,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":337,"flow_packet_id":6,"flow_first_seen":1499347541398,"flow_last_seen":1499347546763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58292,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":337,"flow_packet_id":6,"flow_first_seen":1499347541398,"flow_last_seen":1499347546763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58292,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":338,"flow_packet_id":6,"flow_first_seen":1499347542648,"flow_last_seen":1499347547763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58306,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":338,"flow_packet_id":6,"flow_first_seen":1499347542648,"flow_last_seen":1499347547763,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58306,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":378,"flow_packet_id":1,"flow_first_seen":1499347608596,"flow_last_seen":1499347608596,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59016,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":378,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347608,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UBJAAD4Gdb6sEAABwKgKMuaIAFDT6AnDAAAAAKACchA\/cwAAAgQFtAQCCAoBO1nRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":378,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347608,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5oh16C+h0+gJxKAScSBrnQAAAgQFtAQCCAoD5StGATtZ0QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":378,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347608,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UBNAAD4GdcWsEAABwKgKMuaIAFDT6AnEdegvooAQAOUKpQAAAQEICgE7WdED5StG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":374,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347608,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rD9AAD4GGZmsEAABwKgKMuZQAFBpufjlxMd\/o4ARAOXr0gAAAQEICgE7Wf8D5SZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":374,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347608,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VNZAAEAGbwLAqAoyrBAAAQBQ5lDEx3+jabn45oARAOPmrAAAAQEICgPlK3UBO1n\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":374,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347608,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rEBAAD4GGZisEAABwKgKMuZQAFBpufjmxMd\/pIAQAOXmqQAAAQEICgE7WgAD5St1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":375,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347609,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ltRAAD4GLwSsEAABwKgKMuZeAFCga8DDaDG2ioARAOUQsgAAAQEICgE7WvoD5SeF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":375,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347609,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0muVAAEAGKPPAqAoyrBAAAQBQ5l5oMbaKoGvAxIARAOMLyQAAAQEICgPlLG8BO1r6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":375,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347609,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ltVAAD4GLwOsEAABwKgKMuZeAFCga8DEaDG2i4AQAOULxwAAAQEICgE7WvoD5Sxv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":379,"flow_packet_id":1,"flow_first_seen":1499347611162,"flow_last_seen":1499347611162,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59042,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":379,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347611,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8at5AAD4GWvKsEAABwKgKMuaiAFBCbDaMAAAAAKACchChiwAAAgQFtAQCCAoBO1xSAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":379,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347611,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5qKcQtTMQmw2jaAScSD\/rQAAAgQFtAQCCAoD5S3IATtcUgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":379,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347611,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0at9AAD4GWvmsEAABwKgKMuaiAFBCbDaNnELUzYAQAOWetAAAAQEICgE7XFMD5S3I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":376,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347611,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03mFAAD4G53asEAABwKgKMuZsAFA9+okFMn4u\/YARAOVk1AAAAQEICgE7XO4D5SjR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":376,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347611,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0AJ5AAEAGwzrAqAoyrBAAAQBQ5mwyfi79PfqJBoARAONfQwAAAQEICgPlLmMBO1zu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":376,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347611,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03mJAAD4G53WsEAABwKgKMuZsAFA9+okGMn4u\/oAQAOVfQAAAAQEICgE7XO8D5S5j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":380,"flow_packet_id":1,"flow_first_seen":1499347612465,"flow_last_seen":1499347612465,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59056,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":380,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347612,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dipAAD4GT6asEAABwKgKMuawAFAlJSuyAAAAAKACchDIWAAAAgQFtAQCCAoBO12YAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":380,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347612,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5rAZOYT0JSUrs6AScSD4FwAAAgQFtAQCCAoD5S8NATtdmAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":380,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347612,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ditAAD4GT62sEAABwKgKMuawAFAlJSuzGTmE9YAQAOWXHgAAAQEICgE7XZkD5S8N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":377,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347612,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0neRAAD4GJ\/SsEAABwKgKMuZ6AFBKtMV75YMbxYARAOV5kgAAAQEICgE7XegD5SoN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":377,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347612,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NJhAAEAGj0DAqAoyrBAAAQBQ5nrlgxvFSrTFfIARAON0QwAAAQEICgPlL10BO13o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":377,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347612,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0neVAAD4GJ\/OsEAABwKgKMuZ6AFBKtMV85YMbxoAQAOV0QQAAAQEICgE7XegD5S9d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":381,"flow_packet_id":1,"flow_first_seen":1499347613718,"flow_last_seen":1499347613718,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59070,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":381,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347613,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VmlAAD4Gb2esEAABwKgKMua+AFCqCgi7AAAAAKACchBlIgAAAgQFtAQCCAoBO17SAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":381,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347613,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5r4KHPZlqgoIvKAScSAxUwAAAgQFtAQCCAoD5TBHATte0gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":381,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347613,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VmpAAD4Gb26sEAABwKgKMua+AFCqCgi8Chz2ZoAQAOXQWgAAAQEICgE7XtID5TBH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":378,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347613,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UBRAAD4GdcSsEAABwKgKMuaIAFDT6AnEdegvooARAOUFkwAAAQEICgE7XuID5StG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":378,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347613,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H\/VAAEAGo+PAqAoyrBAAAQBQ5oh16C+i0+gJxYARAOMAgwAAAQEICgPlMFcBO17i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":378,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347613,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UBVAAD4GdcOsEAABwKgKMuaIAFDT6AnFdegvo4AQAOUAgAAAAQEICgE7XuMD5TBX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":379,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347615,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":379,"flow_packet_id":4,"flow_first_seen":1499347611162,"flow_last_seen":1499347615984,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59042,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":379,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347615,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05rBAAEAG3SfAqAoyrBAAAQBQ5qKcQtTNQmw4DIAQAOuTxQAAAQEICgPlMn0BO2EI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2800{"flow_id":379,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347615,"pkt_len":1837,"pkt":"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","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":379,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347615,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auFAAD4GWvesEAABwKgKMuaiAFBCbDgMnELbuIAQAQCMwwAAAQEICgE7YQkD5TJ+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":382,"flow_packet_id":1,"flow_first_seen":1499347616210,"flow_last_seen":1499347616210,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59096,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":382,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YLdAAD4GZRmsEAABwKgKMubYAFBJnwH3AAAAAKACchDJyQAAAgQFtAQCCAoBO2FAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":382,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5thWFuJlSZ8B+KAScSBbkQAAAgQFtAQCCAoD5TK2ATthQAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":379,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":382,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YLhAAD4GZSCsEAABwKgKMubYAFBJnwH4VhbiZoAQAOX6lwAAAQEICgE7YUED5TK2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2938{"flow_id":379,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":1935,"pkt":"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","pkt_caplen":1935,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":379,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auNAAD4GWvWsEAABwKgKMuaiAFBCbDpVnELhYIAQAReESQAAAQEICgE7YUID5TK3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":379,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347616,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auRAAD4GWvSsEAABwKgKMuaiAFBCbDpVnELjBYAQAS6CjQAAAQEICgE7YUID5TK3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":379,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":379,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":379,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0auZAAD4GWvKsEAABwKgKMuaiAFBCbDvUnELp74AQAUl4DwAAAQEICgE7Yj8D5TO0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":383,"flow_packet_id":1,"flow_first_seen":1499347617491,"flow_last_seen":1499347617491,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59110,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":383,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8VDpAAD4GcZasEAABwKgKMubmAFD8gja7AAAAAKACchDg0gAAAgQFtAQCCAoBO2KBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":383,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5ubMDNHo\/II2vKAScSAL4QAAAgQFtAQCCAoD5TP2ATtigQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":383,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDtAAD4GcZ2sEAABwKgKMubmAFD8gja8zAzR6YAQAOWq6AAAAQEICgE7YoED5TP2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":379,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":380,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dixAAD4GT6ysEAABwKgKMuawAFAlJSuzGTmE9YARAOWR7AAAAQEICgE7YsoD5S8N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":380,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sMpAAEAGEw7AqAoyrBAAAQBQ5rAZOYT1JSUrtIARAOOMuwAAAQEICgPlND8BO2LK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":380,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347617,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0di1AAD4GT6usEAABwKgKMuawAFAlJSu0GTmE9oAQAOWMuQAAAQEICgE7YsoD5TQ\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":303,"flow_packet_id":311,"flow_first_seen":1499347484263,"flow_last_seen":1499347551239,"flow_tot_l4_data_len":242337,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":779,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":57684,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":339,"flow_packet_id":6,"flow_first_seen":1499347545176,"flow_last_seen":1499347550764,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58332,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":339,"flow_packet_id":6,"flow_first_seen":1499347545176,"flow_last_seen":1499347550764,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58332,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":340,"flow_packet_id":6,"flow_first_seen":1499347546427,"flow_last_seen":1499347551497,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58346,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":340,"flow_packet_id":6,"flow_first_seen":1499347546427,"flow_last_seen":1499347551497,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58346,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":342,"flow_packet_id":6,"flow_first_seen":1499347550209,"flow_last_seen":1499347555765,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":342,"flow_packet_id":6,"flow_first_seen":1499347550209,"flow_last_seen":1499347555765,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58386,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":343,"flow_packet_id":6,"flow_first_seen":1499347551495,"flow_last_seen":1499347556766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58400,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":343,"flow_packet_id":6,"flow_first_seen":1499347551495,"flow_last_seen":1499347556766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58400,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":344,"flow_packet_id":6,"flow_first_seen":1499347552736,"flow_last_seen":1499347557766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58414,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":344,"flow_packet_id":6,"flow_first_seen":1499347552736,"flow_last_seen":1499347557766,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58414,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":384,"flow_packet_id":1,"flow_first_seen":1499347618757,"flow_last_seen":1499347618757,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59124,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":384,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347618,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UcRAAD4GdAysEAABwKgKMub0AFCevDJ5AAAAAKACchBBkQAAAgQFtAQCCAoBO2O9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":384,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347618,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5vRXo2m0nrwyeqAScSBIAQAAAgQFtAQCCAoD5TUyATtjvQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":384,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347618,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UcVAAD4GdBOsEAABwKgKMub0AFCevDJ6V6NptYAQAOXnBwAAAQEICgE7Y74D5TUy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":381,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347618,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VmtAAD4Gb22sEAABwKgKMua+AFCqCgi8Chz2ZoARAOXLZwAAAQEICgE7Y8QD5TBH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":381,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347618,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0w19AAEAGAHnAqAoyrBAAAQBQ5r4KHPZmqgoIvYARAOPGdgAAAQEICgPlNTkBO2PE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":381,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347618,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VmxAAD4Gb2ysEAABwKgKMua+AFCqCgi9Chz2Z4AQAOXGcwAAAQEICgE7Y8UD5TU5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":385,"flow_packet_id":1,"flow_first_seen":1499347621256,"flow_last_seen":1499347621256,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59150,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":385,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347621,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Hc9AAD4GqAGsEAABwKgKMucOAFD+NnvhAAAAAKACchCWIwAAAgQFtAQCCAoBO2YuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":385,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347621,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5w6DP0I9\/jZ74qAScSCV\/QAAAgQFtAQCCAoD5TejATtmLgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":385,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347621,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HdBAAD4GqAisEAABwKgKMucOAFD+Nnvigz9CPoAQAOU1BQAAAQEICgE7Zi4D5Tej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":382,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347621,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YLlAAD4GZR+sEAABwKgKMubYAFBJnwH4VhbiZoARAOX1JQAAAQEICgE7ZrID5TK2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":382,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347621,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02k5AAEAG6YnAqAoyrBAAAQBQ5thWFuJmSZ8B+YARAOPvtAAAAQEICgPlOCgBO2ay","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":382,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347621,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YLpAAD4GZR6sEAABwKgKMubYAFBJnwH5VhbiZ4AQAOXvsQAAAQEICgE7ZrMD5Tgo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":386,"flow_packet_id":1,"flow_first_seen":1499347622524,"flow_last_seen":1499347622524,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59164,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":386,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347622,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QPZAAD4GhNqsEAABwKgKMuccAFAFlCedAAAAAKACchDhvwAAAgQFtAQCCAoBO2drAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":386,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347622,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5xwFxGkkBZQnnqAScSA28QAAAgQFtAQCCAoD5TjgATtnawEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":386,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347622,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QPdAAD4GhOGsEAABwKgKMuccAFAFlCeeBcRpJYAQAOXV+AAAAQEICgE7Z2sD5Tjg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":383,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347622,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VDxAAD4GcZysEAABwKgKMubmAFD8gja8zAzR6YARAOWlvAAAAQEICgE7Z6wD5TP2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":383,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347622,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA06MtAAEAG2wzAqAoyrBAAAQBQ5ubMDNHp\/II2vYARAOOgkQAAAQEICgPlOSIBO2es","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":383,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347622,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VD1AAD4GcZusEAABwKgKMubmAFD8gja9zAzR6oAQAOWgjgAAAQEICgE7Z60D5Tki","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":387,"flow_packet_id":1,"flow_first_seen":1499347623786,"flow_last_seen":1499347623786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59178,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":387,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347623,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EPlAAD4GtNesEAABwKgKMucqAFD89nheAAAAAKACchCYUQAAAgQFtAQCCAoBO2inAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":384,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347623,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UcZAAD4GdBKsEAABwKgKMub0AFCevDJ6V6NptYARAOXiHQAAAQEICgE7aKcD5TUy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":387,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347623,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5yptg31h\/PZ4X6AScSBwSgAAAgQFtAQCCAoD5TocATtopwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":384,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347623,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0U6lAAEAGcC\/AqAoyrBAAAQBQ5vRXo2m1nrwye4ARAOPdNAAAAQEICgPlOhwBO2in","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":387,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347623,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EPpAAD4GtN6sEAABwKgKMucqAFD89nhfbYN9YoAQAOUPUgAAAQEICgE7aKcD5Toc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":384,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347623,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UcdAAD4GdBGsEAABwKgKMub0AFCevDJ7V6NptoAQAOXdMgAAAQEICgE7aKcD5Toc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":388,"flow_packet_id":1,"flow_first_seen":1499347625094,"flow_last_seen":1499347625094,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59192,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":388,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347625,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QvlAAD4GgtesEAABwKgKMuc4AFBpNSsUAAAAAKACchB4CQAAAgQFtAQCCAoBO2ntAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":388,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347625,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5zhhGRuGaTUrFaAScSC9AAAAAgQFtAQCCAoD5TtjATtp7QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":388,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347625,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QvpAAD4Ggt6sEAABwKgKMuc4AFBpNSsVYRkbh4AQAOVcBwAAAQEICgE7ae4D5Ttj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":389,"flow_packet_id":1,"flow_first_seen":1499347626349,"flow_last_seen":1499347626349,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59206,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":389,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347626,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CphAAD4GuzisEAABwKgKMudGAFA4VWG\/AAAAAKACchBw9gAAAgQFtAQCCAoBO2snAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":389,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347626,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ50a6Rl2POFVhwKAScSAZfgAAAgQFtAQCCAoD5TycATtrJwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":389,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347626,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CplAAD4Guz+sEAABwKgKMudGAFA4VWHAukZdkIAQAOW4hAAAAQEICgE7aygD5Tyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":385,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347626,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HdFAAD4GqAesEAABwKgKMucOAFD+Nnvigz9CPoARAOUvnQAAAQEICgE7a5UD5Tej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":385,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347626,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fzRAAEAGRKTAqAoyrBAAAQBQ5w6DP0I+\/jZ744ARAOMqNwAAAQEICgPlPQoBO2uV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":385,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347626,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HdJAAD4GqAasEAABwKgKMucOAFD+Nnvjgz9CP4AQAOUqNQAAAQEICgE7a5UD5T0K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":390,"flow_packet_id":1,"flow_first_seen":1499347627616,"flow_last_seen":1499347627616,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59220,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":390,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347627,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GbxAAD4GrBSsEAABwKgKMudUAFBilXXYAAAAAKACchAxUgAAAgQFtAQCCAoBO2xkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":390,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347627,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ51QwQXQsYpV12aAScSBMBQAAAgQFtAQCCAoD5T3ZATtsZAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":390,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347627,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gb1AAD4GrBusEAABwKgKMudUAFBilXXZMEF0LYAQAOXrDAAAAQEICgE7bGQD5T3Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":386,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347627,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QPhAAD4GhOCsEAABwKgKMuccAFAFlCeeBcRpJYARAOXQ0wAAAQEICgE7bI8D5Tjg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":386,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347627,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VyFAAEAGbLfAqAoyrBAAAQBQ5xwFxGklBZQnn4ARAOPLsAAAAQEICgPlPgQBO2yP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":386,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347627,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QPlAAD4GhN+sEAABwKgKMuccAFAFlCefBcRpJoAQAOXLrgAAAQEICgE7bI8D5T4E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":345,"flow_packet_id":6,"flow_first_seen":1499347555255,"flow_last_seen":1499347560767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":345,"flow_packet_id":6,"flow_first_seen":1499347555255,"flow_last_seen":1499347560767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58440,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":346,"flow_packet_id":6,"flow_first_seen":1499347556523,"flow_last_seen":1499347561767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58454,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":346,"flow_packet_id":6,"flow_first_seen":1499347556523,"flow_last_seen":1499347561767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58454,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":347,"flow_packet_id":6,"flow_first_seen":1499347557789,"flow_last_seen":1499347563767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58468,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":347,"flow_packet_id":6,"flow_first_seen":1499347557789,"flow_last_seen":1499347563767,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58468,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":348,"flow_packet_id":6,"flow_first_seen":1499347559043,"flow_last_seen":1499347564768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58482,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":348,"flow_packet_id":6,"flow_first_seen":1499347559043,"flow_last_seen":1499347564768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58482,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":349,"flow_packet_id":6,"flow_first_seen":1499347560327,"flow_last_seen":1499347565768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58496,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":349,"flow_packet_id":6,"flow_first_seen":1499347560327,"flow_last_seen":1499347565768,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58496,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":350,"flow_packet_id":6,"flow_first_seen":1499347561622,"flow_last_seen":1499347566770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58510,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":350,"flow_packet_id":6,"flow_first_seen":1499347561622,"flow_last_seen":1499347566770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58510,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":387,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347628,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EPtAAD4GtN2sEAABwKgKMucqAFD89nhfbYN9YoARAOUKbwAAAQEICgE7bYkD5Toc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":387,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347628,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q5xAAEAGgDzAqAoyrBAAAQBQ5yptg31i\/PZ4YIARAOMFjgAAAQEICgPlPv4BO22J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":387,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347628,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EPxAAD4GtNysEAABwKgKMucqAFD89nhgbYN9Y4AQAOUFiwAAAQEICgE7bYoD5T7+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":391,"flow_packet_id":1,"flow_first_seen":1499347630130,"flow_last_seen":1499347630130,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59246,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":391,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347630,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rFRAAD4GGXysEAABwKgKMuduAFDOysKMAAAAAKACchB12gAAAgQFtAQCCAoBO27YAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":391,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347630,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5252igpmzsrCjaAScSCxlQAAAgQFtAQCCAoD5UBOATtu2AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":391,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347630,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rFVAAD4GGYOsEAABwKgKMuduAFDOysKNdooKZ4AQAOVQnAAAAQEICgE7btkD5UBO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":388,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347630,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QvtAAD4Ggt2sEAABwKgKMuc4AFBpNSsVYRkbh4ARAOVWdwAAAQEICgE7b30D5Ttj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":388,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347630,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0W3RAAEAGaGTAqAoyrBAAAQBQ5zhhGRuHaTUrFoARAONQ6AAAAQEICgPlQPMBO299","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":388,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347630,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QvxAAD4GgtysEAABwKgKMuc4AFBpNSsWYRkbiIAQAOVQ5QAAAQEICgE7b34D5UDz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":392,"flow_packet_id":1,"flow_first_seen":1499347631388,"flow_last_seen":1499347631388,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59260,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":392,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347631,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+pxAAD4GyzOsEAABwKgKMud8AFDgpIqPAAAAAKACchCatAAAAgQFtAQCCAoBO3ATAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":392,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347631,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ53x5W3jF4KSKkKAScSBkBQAAAgQFtAQCCAoD5UGIATtwEwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":392,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347631,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+p1AAD4GyzqsEAABwKgKMud8AFDgpIqQeVt4xoAQAOUDDQAAAQEICgE7cBMD5UGI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":389,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347631,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CppAAD4Guz6sEAABwKgKMudGAFA4VWHAukZdkIARAOWzNAAAAQEICgE7cHcD5Tyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":389,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347631,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HH1AAEAGp1vAqAoyrBAAAQBQ50a6Rl2QOFVhwYARAOOt5AAAAQEICgPlQe0BO3B3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":389,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347631,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CptAAD4Guz2sEAABwKgKMudGAFA4VWHBukZdkYAQAOWt4QAAAQEICgE7cHgD5UHt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":393,"flow_packet_id":1,"flow_first_seen":1499347632635,"flow_last_seen":1499347632635,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59274,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":393,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347632,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d6hAAD4GTiisEAABwKgKMueKAFDGJwbjAAAAAKACchA3mAAAAgQFtAQCCAoBO3FLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":393,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347632,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ54oMamRgxicG5KAScSCBBwAAAgQFtAQCCAoD5ULAATtxSwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":393,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347632,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d6lAAD4GTi+sEAABwKgKMueKAFDGJwbkDGpkYYAQAOUgDwAAAQEICgE7cUsD5ULA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":390,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347632,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gb5AAD4GrBqsEAABwKgKMudUAFBilXXZMEF0LYARAOXl\/gAAAQEICgE7cXED5T3Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":390,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347632,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NspAAEAGjQ7AqAoyrBAAAQBQ51QwQXQtYpV12oARAOPg8QAAAQEICgPlQucBO3Fx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":390,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347632,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gb9AAD4GrBmsEAABwKgKMudUAFBilXXaMEF0LoAQAOXg7gAAAQEICgE7cXID5ULn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":394,"flow_packet_id":1,"flow_first_seen":1499347635154,"flow_last_seen":1499347635154,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59300,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":394,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347635,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84sRAAD4G4wusEAABwKgKMuekAFB1fpEEAAAAAKACchD7kAAAAgQFtAQCCAoBO3PAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":394,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347635,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ56RhPiSidX6RBaAScSAtdAAAAgQFtAQCCAoD5UU2ATtzwAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":394,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347635,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04sVAAD4G4xKsEAABwKgKMuekAFB1fpEFYT4ko4AQAOXMegAAAQEICgE7c8ED5UU2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":391,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347635,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rFZAAD4GGYKsEAABwKgKMuduAFDOysKNdooKZ4ARAOVLFAAAAQEICgE7dGAD5UBO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":391,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347635,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0T7JAAEAGdCbAqAoyrBAAAQBQ5252igpnzsrCjoARAONFjgAAAQEICgPlRdUBO3Rg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":391,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347635,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rFdAAD4GGYGsEAABwKgKMuduAFDOysKOdooKaIAQAOVFjAAAAQEICgE7dGAD5UXV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":395,"flow_packet_id":1,"flow_first_seen":1499347636429,"flow_last_seen":1499347636429,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59314,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":395,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347636,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AchAAD4GxAisEAABwKgKMueyAFDHeXU3AAAAAKACchDEFQAAAgQFtAQCCAoBO3T\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":395,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347636,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ57LbsY4Yx3l1OKAScSAQ0QAAAgQFtAQCCAoD5UZ0ATt0\/wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":395,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347636,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AclAAD4GxA+sEAABwKgKMueyAFDHeXU427GOGYAQAOWv1wAAAQEICgE7dQAD5UZ0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":392,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347636,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+p5AAD4GyzmsEAABwKgKMud8AFDgpIqQeVt4xoARAOX9xAAAAQEICgE7dVoD5UGI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":392,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347636,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PglAAEAGhc\/AqAoyrBAAAQBQ53x5W3jG4KSKkYARAOP4fgAAAQEICgPlRs8BO3Va","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":392,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347636,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+p9AAD4GyzisEAABwKgKMud8AFDgpIqReVt4x4AQAOX4fAAAAQEICgE7dVoD5UbP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":396,"flow_packet_id":1,"flow_first_seen":1499347637687,"flow_last_seen":1499347637687,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59328,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":396,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347637,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W0xAAD4GaoSsEAABwKgKMufAAFAySC12AAAAAKACchCfvwAAAgQFtAQCCAoBO3Y6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":396,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347637,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ58BffWshMkgtd6AScSCKawAAAgQFtAQCCAoD5UevATt2OgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":396,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347637,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W01AAD4GaousEAABwKgKMufAAFAySC13X31rIoAQAOUpcwAAAQEICgE7djoD5Uev","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":393,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347637,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d6pAAD4GTi6sEAABwKgKMueKAFDGJwbkDGpkYYARAOUbBQAAAQEICgE7dlQD5ULA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":393,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347637,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0I6hAAEAGoDDAqAoyrBAAAQBQ54oMamRhxicG5YARAOMV\/QAAAQEICgPlR8kBO3ZU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":393,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347637,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d6tAAD4GTi2sEAABwKgKMueKAFDGJwblDGpkYoAQAOUV+wAAAQEICgE7dlQD5UfJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":351,"flow_packet_id":6,"flow_first_seen":1499347564211,"flow_last_seen":1499347569770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":351,"flow_packet_id":6,"flow_first_seen":1499347564211,"flow_last_seen":1499347569770,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58536,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":352,"flow_packet_id":6,"flow_first_seen":1499347565457,"flow_last_seen":1499347570771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58550,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":352,"flow_packet_id":6,"flow_first_seen":1499347565457,"flow_last_seen":1499347570771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58550,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":353,"flow_packet_id":6,"flow_first_seen":1499347566719,"flow_last_seen":1499347571771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58564,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":353,"flow_packet_id":6,"flow_first_seen":1499347566719,"flow_last_seen":1499347571771,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58564,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":354,"flow_packet_id":6,"flow_first_seen":1499347569321,"flow_last_seen":1499347574772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58590,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":354,"flow_packet_id":6,"flow_first_seen":1499347569321,"flow_last_seen":1499347574772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58590,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":355,"flow_packet_id":6,"flow_first_seen":1499347570571,"flow_last_seen":1499347575772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58604,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":355,"flow_packet_id":6,"flow_first_seen":1499347570571,"flow_last_seen":1499347575772,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58604,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":397,"flow_packet_id":1,"flow_first_seen":1499347640199,"flow_last_seen":1499347640199,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59354,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":397,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347640,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81CZAAD4G8amsEAABwKgKMufaAFCvK6yIAAAAAKACchChOwAAAgQFtAQCCAoBO3iuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":397,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347640,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ59rwV\/OuryusiaAScSBwCwAAAgQFtAQCCAoD5UojATt4rgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":397,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347640,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01CdAAD4G8bCsEAABwKgKMufaAFCvK6yJ8Ffzr4AQAOUPEwAAAQEICgE7eK4D5Uoj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":394,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347640,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04sZAAD4G4xGsEAABwKgKMuekAFB1fpEFYT4ko4ARAOXG+AAAAQEICgE7eUID5UU2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":394,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347640,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bhRAAEAGVcTAqAoyrBAAAQBQ56RhPiSjdX6RBoARAOPBeAAAAQEICgPlSrcBO3lC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":394,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347640,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04sdAAD4G4xCsEAABwKgKMuekAFB1fpEGYT4kpIAQAOXBdgAAAQEICgE7eUID5Uq3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":398,"flow_packet_id":1,"flow_first_seen":1499347641440,"flow_last_seen":1499347641440,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59368,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":398,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347641,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tE5AAD4GEYKsEAABwKgKMufoAFB3dM2qAAAAAKACchC2jAAAAgQFtAQCCAoBO3nkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":398,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347641,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5+hNQiold3TNq6AScSDwxQAAAgQFtAQCCAoD5UtZATt55AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":398,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347641,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tE9AAD4GEYmsEAABwKgKMufoAFB3dM2rTUIqJoAQAOWPzQAAAQEICgE7eeQD5UtZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":395,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347641,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AcpAAD4GxA6sEAABwKgKMueyAFDHeXU427GOGYARAOWqmgAAAQEICgE7ejwD5UZ0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":395,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347641,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0xahAAEAG\/i\/AqAoyrBAAAQBQ57LbsY4Zx3l1OYARAOOlXgAAAQEICgPlS7EBO3o8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":395,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347641,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ActAAD4GxA2sEAABwKgKMueyAFDHeXU527GOGoAQAOWlXAAAAQEICgE7ejwD5Uux","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":399,"flow_packet_id":1,"flow_first_seen":1499347642716,"flow_last_seen":1499347642716,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59382,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":399,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347642,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SnNAAD4Ge12sEAABwKgKMuf2AFDcdDFQAAAAAKACchDsmQAAAgQFtAQCCAoBO3sjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":399,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347642,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ5\/aPKcRJ3HQxUaAScSBJiAAAAgQFtAQCCAoD5UyYATt7IwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":399,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347642,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnRAAD4Ge2SsEAABwKgKMuf2AFDcdDFRjynESoAQAOXojwAAAQEICgE7eyMD5UyY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":396,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347642,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W05AAD4GaoqsEAABwKgKMufAAFAySC13X31rIoARAOUkdgAAAQEICgE7ezYD5Uev","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":396,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347642,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0J4lAAEAGnE\/AqAoyrBAAAQBQ58BffWsiMkgteIARAOMfewAAAQEICgPlTKsBO3s2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":396,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347642,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W09AAD4GaomsEAABwKgKMufAAFAySC14X31rI4AQAOUfeQAAAQEICgE7ezYD5Uyr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":400,"flow_packet_id":1,"flow_first_seen":1499347645232,"flow_last_seen":1499347645232,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59408,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":400,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347645,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rz5AAD4GFpKsEAABwKgKMugQAFBzf9KmAAAAAKACchCxqQAAAgQFtAQCCAoBO32YAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":400,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347645,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6BD8Et+tc3\/Sp6AScSCD1QAAAgQFtAQCCAoD5U8NATt9mAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":400,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347645,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rz9AAD4GFpmsEAABwKgKMugQAFBzf9Kn\/BLfroAQAOUi3QAAAQEICgE7fZgD5U8N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":397,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347645,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01ChAAD4G8a+sEAABwKgKMufaAFCvK6yJ8Ffzr4ARAOUJnAAAAQEICgE7fiQD5Uoj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":397,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347645,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vDZAAEAGB6LAqAoyrBAAAQBQ59rwV\/OvryusioARAOMEJwAAAQEICgPlT5kBO34k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":397,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347645,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01ClAAD4G8a6sEAABwKgKMufaAFCvK6yK8FfzsIAQAOUEJQAAAQEICgE7fiQD5U+Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":401,"flow_packet_id":1,"flow_first_seen":1499347646486,"flow_last_seen":1499347646486,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59422,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":401,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347646,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8uWhAAD4GDGisEAABwKgKMugeAFCoNce5AAAAAKACchCGmQAAAgQFtAQCCAoBO37RAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":401,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347646,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6B6AVzWvqDXHuqAScSB9RgAAAgQFtAQCCAoD5VBGATt+0QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":401,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347646,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uWlAAD4GDG+sEAABwKgKMugeAFCoNce6gFc1sIAQAOUcTQAAAQEICgE7ftID5VBG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":398,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347646,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tFBAAD4GEYisEAABwKgKMufoAFB3dM2rTUIqJoARAOWKkgAAAQEICgE7fx4D5UtZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":398,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347646,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0erVAAEAGSSPAqAoyrBAAAQBQ5+hNQiomd3TNrIARAOOFWQAAAQEICgPlUJMBO38e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":398,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347646,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tFFAAD4GEYesEAABwKgKMufoAFB3dM2sTUIqJ4AQAOWFVgAAAQEICgE7fx8D5VCT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":402,"flow_packet_id":1,"flow_first_seen":1499347647733,"flow_last_seen":1499347647733,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59436,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":402,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347647,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cdhAAD4GU\/isEAABwKgKMugsAFDFxvHRAAAAAKACchA9qgAAAgQFtAQCCAoBO4AJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":402,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347647,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6CyQ1\/Exxcbx0qAScSBnHAAAAgQFtAQCCAoD5VF+ATuACQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":402,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347647,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cdlAAD4GU\/+sEAABwKgKMugsAFDFxvHSkNfxMoAQAOUGJAAAAQEICgE7gAkD5VF+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":399,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347647,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnVAAD4Ge2OsEAABwKgKMuf2AFDcdDFRjynESoARAOXjmQAAAQEICgE7gBgD5UyY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":399,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347647,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lcdAAEAGLhHAqAoyrBAAAQBQ5\/aPKcRK3HQxUoARAOPepQAAAQEICgPlUY0BO4AY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":399,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347647,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SnZAAD4Ge2KsEAABwKgKMuf2AFDcdDFSjynES4AQAOXeogAAAQEICgE7gBkD5VGN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":356,"flow_packet_id":6,"flow_first_seen":1499347573065,"flow_last_seen":1499347578774,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":356,"flow_packet_id":6,"flow_first_seen":1499347573065,"flow_last_seen":1499347578774,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58630,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":357,"flow_packet_id":7,"flow_first_seen":1499347574366,"flow_last_seen":1499347579775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58650,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":357,"flow_packet_id":7,"flow_first_seen":1499347574366,"flow_last_seen":1499347579775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58650,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":358,"flow_packet_id":7,"flow_first_seen":1499347575652,"flow_last_seen":1499347580775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58664,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":358,"flow_packet_id":7,"flow_first_seen":1499347575652,"flow_last_seen":1499347580775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58664,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":359,"flow_packet_id":7,"flow_first_seen":1499347578164,"flow_last_seen":1499347583775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58690,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":359,"flow_packet_id":7,"flow_first_seen":1499347578164,"flow_last_seen":1499347583775,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58690,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":360,"flow_packet_id":6,"flow_first_seen":1499347579405,"flow_last_seen":1499347584775,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58704,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":360,"flow_packet_id":6,"flow_first_seen":1499347579405,"flow_last_seen":1499347584775,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58704,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":361,"flow_packet_id":6,"flow_first_seen":1499347580693,"flow_last_seen":1499347585776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58718,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":361,"flow_packet_id":6,"flow_first_seen":1499347580693,"flow_last_seen":1499347585776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58718,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":403,"flow_packet_id":1,"flow_first_seen":1499347650289,"flow_last_seen":1499347650289,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59462,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":403,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347650,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qjtAAD4GG5WsEAABwKgKMuhGAFAFSiizAAAAAKACchDErAAAAgQFtAQCCAoBO4KIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":403,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347650,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6EbKc6N+BUootKAScSD\/tgAAAgQFtAQCCAoD5VP9ATuCiAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":403,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347650,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qjxAAD4GG5ysEAABwKgKMuhGAFAFSii0ynOjf4AQAOWevQAAAQEICgE7gokD5VP9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":400,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347650,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0r0BAAD4GFpisEAABwKgKMugQAFBzf9Kn\/BLfroARAOUdbgAAAQEICgE7gwYD5U8N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":400,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347650,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i9JAAEAGOAbAqAoyrBAAAQBQ6BD8Et+uc3\/SqIARAOMYAAAAAQEICgPlVHwBO4MG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":400,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347650,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0r0FAAD4GFpesEAABwKgKMugQAFBzf9Ko\/BLfr4AQAOUX\/QAAAQEICgE7gwcD5VR8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":404,"flow_packet_id":1,"flow_first_seen":1499347651555,"flow_last_seen":1499347651555,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59476,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":404,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347651,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NDJAAD4GkZ6sEAABwKgKMuhUAFBjE7f2AAAAAKACchDWVQAAAgQFtAQCCAoBO4PEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":404,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347651,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6FRdfw4zYxO396AScSASYwAAAgQFtAQCCAoD5VU6ATuDxAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":404,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347651,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NDNAAD4GkaWsEAABwKgKMuhUAFBjE7f3XX8ONIAQAOWxaQAAAQEICgE7g8UD5VU6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":401,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347651,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uWpAAD4GDG6sEAABwKgKMugeAFCoNce6gFc1sIARAOUXHgAAAQEICgE7hAAD5VBG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":401,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347651,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YMdAAEAGYxHAqAoyrBAAAQBQ6B6AVzWwqDXHu4ARAOMR7gAAAQEICgPlVXcBO4QA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":401,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347651,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0uWtAAD4GDG2sEAABwKgKMugeAFCoNce7gFc1sYAQAOUR6gAAAQEICgE7hAID5VV3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":402,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347652,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cdpAAD4GU\/6sEAABwKgKMugsAFDFxvHSkNfxMoARAOUBMQAAAQEICgE7hPsD5VF+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":402,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347652,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0p0JAAEAGHJbAqAoyrBAAAQBQ6CyQ1\/Eyxcbx04ARAOP8PwAAAQEICgPlVnABO4T7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":402,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347652,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cdtAAD4GU\/2sEAABwKgKMugsAFDFxvHTkNfxM4AQAOX8PAAAAQEICgE7hPwD5VZw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":405,"flow_packet_id":1,"flow_first_seen":1499347654065,"flow_last_seen":1499347654065,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59502,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":405,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347654,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8q1xAAD4GGnSsEAABwKgKMuhuAFBOzi1kAAAAAKACchBynwAAAgQFtAQCCAoBO4Y4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":405,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347654,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6G55d2lhTs4tZaAScSA1EwAAAgQFtAQCCAoD5VetATuGOAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":405,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347654,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q11AAD4GGnusEAABwKgKMuhuAFBOzi1leXdpYoAQAOXUGQAAAQEICgE7hjkD5Vet","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":406,"flow_packet_id":1,"flow_first_seen":1499347655367,"flow_last_seen":1499347655367,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59516,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":406,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347655,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wQ9AAD4GBMGsEAABwKgKMuh8AFCmFkZxAAAAAKACchAA9gAAAgQFtAQCCAoBO4d+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":406,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347655,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6HyXTysMphZGcqAScSDioAAAAgQFtAQCCAoD5VjzATuHfgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":406,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347655,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wRBAAD4GBMisEAABwKgKMuh8AFCmFkZyl08rDYAQAOWBqAAAAQEICgE7h34D5Vjz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":403,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347655,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qj1AAD4GG5usEAABwKgKMuhGAFAFSii0ynOjf4ARAOWZXAAAAQEICgE7h+kD5VP9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":403,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347655,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+iFAAEAGybbAqAoyrBAAAQBQ6EbKc6N\/BUootYARAOOT\/AAAAQEICgPlWV4BO4fp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":403,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347655,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qj5AAD4GG5qsEAABwKgKMuhGAFAFSii1ynOjgIAQAOWT+QAAAQEICgE7h+oD5Vle","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":407,"flow_packet_id":1,"flow_first_seen":1499347656622,"flow_last_seen":1499347656622,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59530,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":407,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347656,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83x1AAD4G5rKsEAABwKgKMuiKAFBnH1eqAAAAAKACchAtbQAAAgQFtAQCCAoBO4i3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":407,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347656,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6Ios50nrZx9Xq6AScSBZZwAAAgQFtAQCCAoD5VotATuItwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":407,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347656,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03x5AAD4G5rmsEAABwKgKMuiKAFBnH1erLOdJ7IAQAOX4bQAAAQEICgE7iLgD5Vot","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":404,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347656,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NDRAAD4GkaSsEAABwKgKMuhUAFBjE7f3XX8ONIARAOWsSgAAAQEICgE7iOMD5VU6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":404,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347656,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VGxAAEAGb2zAqAoyrBAAAQBQ6FRdfw40YxO3+IARAOOnLQAAAQEICgPlWlgBO4jj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":404,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347656,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NDVAAD4GkaOsEAABwKgKMuhUAFBjE7f4XX8ONYAQAOWnKgAAAQEICgE7iOQD5VpY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":362,"flow_packet_id":6,"flow_first_seen":1499347583209,"flow_last_seen":1499347588776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58744,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":362,"flow_packet_id":6,"flow_first_seen":1499347583209,"flow_last_seen":1499347588776,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58744,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":363,"flow_packet_id":6,"flow_first_seen":1499347584472,"flow_last_seen":1499347589778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58758,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":363,"flow_packet_id":6,"flow_first_seen":1499347584472,"flow_last_seen":1499347589778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58758,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":364,"flow_packet_id":6,"flow_first_seen":1499347585744,"flow_last_seen":1499347590777,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":364,"flow_packet_id":6,"flow_first_seen":1499347585744,"flow_last_seen":1499347590777,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58772,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":365,"flow_packet_id":6,"flow_first_seen":1499347588270,"flow_last_seen":1499347593778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58798,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":365,"flow_packet_id":6,"flow_first_seen":1499347588270,"flow_last_seen":1499347593778,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58798,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":366,"flow_packet_id":6,"flow_first_seen":1499347589555,"flow_last_seen":1499347594779,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":366,"flow_packet_id":6,"flow_first_seen":1499347589555,"flow_last_seen":1499347594779,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58812,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":367,"flow_packet_id":6,"flow_first_seen":1499347592060,"flow_last_seen":1499347597780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58838,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":367,"flow_packet_id":6,"flow_first_seen":1499347592060,"flow_last_seen":1499347597780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58838,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":368,"flow_packet_id":6,"flow_first_seen":1499347593330,"flow_last_seen":1499347598782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":368,"flow_packet_id":6,"flow_first_seen":1499347593330,"flow_last_seen":1499347598782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58852,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":408,"flow_packet_id":1,"flow_first_seen":1499347659123,"flow_last_seen":1499347659123,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59556,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":408,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347659,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8x6pAAD4G\/iWsEAABwKgKMuikAFB+qkyDAAAAAKACchAefQAAAgQFtAQCCAoBO4spAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":408,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347659,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6KSKjQS\/fqpMhKAScSAvjAAAAgQFtAQCCAoD5VyeATuLKQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":408,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347659,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x6tAAD4G\/iysEAABwKgKMuikAFB+qkyEio0EwIAQAOXOkwAAAQEICgE7iykD5Vye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":405,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347659,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q15AAD4GGnqsEAABwKgKMuhuAFBOzi1leXdpYoARAOXOgAAAAQEICgE7i9ED5Vet","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":405,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347659,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NCVAAEAGj7PAqAoyrBAAAQBQ6G55d2liTs4tZoARAOPI5wAAAQEICgPlXUcBO4vR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":405,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347659,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0q19AAD4GGnmsEAABwKgKMuhuAFBOzi1meXdpY4AQAOXI5AAAAQEICgE7i9ID5V1H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":409,"flow_packet_id":1,"flow_first_seen":1499347660441,"flow_last_seen":1499347660441,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59570,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":409,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347660,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SJ9AAD4GfTGsEAABwKgKMuiyAFDQzcTuAAAAAKACchBSmAAAAgQFtAQCCAoBO4xxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":409,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347660,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6LJiYdyB0M3E76AScSCyxwAAAgQFtAQCCAoD5V3nATuMcQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":409,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347660,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SKBAAD4GfTisEAABwKgKMuiyAFDQzcTvYmHcgoAQAOVRzQAAAQEICgE7jHMD5V3n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":406,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347660,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wRFAAD4GBMesEAABwKgKMuh8AFCmFkZyl08rDYARAOV8WgAAAQEICgE7jMsD5Vjz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":406,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347660,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dU9AAEAGTonAqAoyrBAAAQBQ6HyXTysNphZGc4ARAON3DAAAAQEICgPlXkIBO4zL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":406,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347660,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wRJAAD4GBMasEAABwKgKMuh8AFCmFkZzl08rDoAQAOV3CAAAAQEICgE7jM0D5V5C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":410,"flow_packet_id":1,"flow_first_seen":1499347661705,"flow_last_seen":1499347661705,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59584,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":410,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347661,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iZ5AAD4GPDKsEAABwKgKMujAAFBNGwQwAAAAAKACchCVvgAAAgQFtAQCCAoBO42uAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":410,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347661,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6MCaW9JGTRsEMaAScSDG8gAAAgQFtAQCCAoD5V8jATuNrgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":410,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347661,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iZ9AAD4GPDmsEAABwKgKMujAAFBNGwQxmlvSR4AQAOVl+QAAAQEICgE7ja8D5V8j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":407,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347661,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03x9AAD4G5risEAABwKgKMuiKAFBnH1erLOdJ7IARAOXzXwAAAQEICgE7jcUD5Vot","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":407,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347661,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FtdAAEAGrQHAqAoyrBAAAQBQ6Ios50nsZx9XrIARAOPuUgAAAQEICgPlXzsBO43F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":407,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347661,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03yBAAD4G5resEAABwKgKMuiKAFBnH1esLOdJ7YAQAOXuTwAAAQEICgE7jcYD5V87","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":411,"flow_packet_id":1,"flow_first_seen":1499347664226,"flow_last_seen":1499347664226,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59610,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":411,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347664,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Ye5AAD4GY+KsEAABwKgKMujaAFDKDfHLAAAAAKACchAonwAAAgQFtAQCCAoBO5AlAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":411,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347664,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6NqT+P5Dyg3xzKAScSAxwgAAAgQFtAQCCAoD5WGaATuQJQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":411,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347664,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ye9AAD4GY+msEAABwKgKMujaAFDKDfHMk\/j+RIAQAOXQyQAAAQEICgE7kCUD5WGa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":408,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347664,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x6xAAD4G\/iusEAABwKgKMuikAFB+qkyEio0EwIARAOXJBwAAAQEICgE7kLQD5Vye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":408,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347664,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZulAAEAGXO\/AqAoyrBAAAQBQ6KSKjQTAfqpMhYARAOPDfQAAAQEICgPlYikBO5C0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":408,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347664,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x61AAD4G\/iqsEAABwKgKMuikAFB+qkyFio0EwYAQAOXDewAAAQEICgE7kLQD5WIp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":412,"flow_packet_id":1,"flow_first_seen":1499347665473,"flow_last_seen":1499347665473,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59624,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":412,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347665,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8f9VAAD4GRfusEAABwKgKMujoAFDrVO6JAAAAAKACchAJVQAAAgQFtAQCCAoBO5FcAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":412,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347665,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6OhBKwT561TuiqAScSBdWQAAAgQFtAQCCAoD5WLRATuRXAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":412,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347665,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f9ZAAD4GRgKsEAABwKgKMujoAFDrVO6KQSsE+oAQAOX8XwAAAQEICgE7kV0D5WLR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":409,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347665,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SKFAAD4GfTesEAABwKgKMuiyAFDQzcTvYmHcgoARAOVMkQAAAQEICgE7ka4D5V3n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":409,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347665,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0v6FAAEAGBDfAqAoyrBAAAQBQ6LJiYdyC0M3E8IARAONHVgAAAQEICgPlYyMBO5Gu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":409,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347665,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SKJAAD4GfTasEAABwKgKMuiyAFDQzcTwYmHcg4AQAOVHVAAAAQEICgE7ka4D5WMj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":410,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347666,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iaBAAD4GPDisEAABwKgKMujAAFBNGwQxmlvSR4ARAOVg\/wAAAQEICgE7kqgD5V8j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":410,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347666,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tlpAAEAGDX7AqAoyrBAAAQBQ6MCaW9JHTRsEMoARAONcBgAAAQEICgPlZB0BO5Ko","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":410,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347666,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iaFAAD4GPDesEAABwKgKMujAAFBNGwQymlvSSIAQAOVcAwAAAQEICgE7kqkD5WQd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":413,"flow_packet_id":1,"flow_first_seen":1499347668069,"flow_last_seen":1499347668069,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59650,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":413,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347668,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TE1AAD4GeYOsEAABwKgKMukCAFANB9+oAAAAAKACchDz4AAAAgQFtAQCCAoBO5PlAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":413,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347668,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6QI2lo7HDQffqaAScSDGIgAAAgQFtAQCCAoD5WVaATuT5QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":413,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347668,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TE5AAD4GeYqsEAABwKgKMukCAFANB9+pNpaOyIAQAOVlKQAAAQEICgE7k+YD5WVa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":373,"flow_packet_id":6,"flow_first_seen":1499347602223,"flow_last_seen":1499347607783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58946,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":373,"flow_packet_id":6,"flow_first_seen":1499347602223,"flow_last_seen":1499347607783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58946,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":374,"flow_packet_id":6,"flow_first_seen":1499347603507,"flow_last_seen":1499347608786,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":374,"flow_packet_id":6,"flow_first_seen":1499347603507,"flow_last_seen":1499347608786,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58960,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":369,"flow_packet_id":6,"flow_first_seen":1499347594595,"flow_last_seen":1499347599780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58866,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":369,"flow_packet_id":6,"flow_first_seen":1499347594595,"flow_last_seen":1499347599780,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58866,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":370,"flow_packet_id":6,"flow_first_seen":1499347597121,"flow_last_seen":1499347602781,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58892,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":370,"flow_packet_id":6,"flow_first_seen":1499347597121,"flow_last_seen":1499347602781,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58892,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":371,"flow_packet_id":6,"flow_first_seen":1499347598383,"flow_last_seen":1499347603782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58906,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":371,"flow_packet_id":6,"flow_first_seen":1499347598383,"flow_last_seen":1499347603782,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58906,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":372,"flow_packet_id":6,"flow_first_seen":1499347599663,"flow_last_seen":1499347604783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58920,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":372,"flow_packet_id":6,"flow_first_seen":1499347599663,"flow_last_seen":1499347604783,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58920,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":414,"flow_packet_id":1,"flow_first_seen":1499347669336,"flow_last_seen":1499347669336,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59664,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":414,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347669,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XbZAAD4GaBqsEAABwKgKMukQAFClPsiUAAAAAKACchBxcgAAAgQFtAQCCAoBO5UiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":414,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347669,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6RAzOJpLpT7IlaAScSA6UQAAAgQFtAQCCAoD5WaXATuVIgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":414,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347669,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbdAAD4GaCGsEAABwKgKMukQAFClPsiVMziaTIAQAOXZWAAAAQEICgE7lSID5WaX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":411,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347669,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YfBAAD4GY+isEAABwKgKMujaAFDKDfHMk\/j+RIARAOXLVgAAAQEICgE7lZcD5WGa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":411,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347669,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mUhAAEAGKpDAqAoyrBAAAQBQ6NqT+P5Eyg3xzYARAOPF5QAAAQEICgPlZwwBO5WX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":411,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347669,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0YfFAAD4GY+esEAABwKgKMujaAFDKDfHNk\/j+RYAQAOXF4wAAAQEICgE7lZcD5WcM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":415,"flow_packet_id":1,"flow_first_seen":1499347670582,"flow_last_seen":1499347670582,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59678,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":415,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347670,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Rc1AAD4GgAOsEAABwKgKMukeAFDr3NOXAAAAAKACchAeiwAAAgQFtAQCCAoBO5ZaAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":415,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347670,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6R5lF6M+69zTmKAScSCrXwAAAgQFtAQCCAoD5WfPATuWWgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":415,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347670,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rc5AAD4GgAqsEAABwKgKMukeAFDr3NOYZRejP4AQAOVKZwAAAQEICgE7lloD5WfP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":412,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347670,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f9dAAD4GRgGsEAABwKgKMujoAFDrVO6KQSsE+oARAOX3KgAAAQEICgE7lpED5WLR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":412,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347670,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bPxAAEAGVtzAqAoyrBAAAQBQ6OhBKwT661Tui4ARAOPx9gAAAQEICgPlaAYBO5aR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":412,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347670,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f9hAAD4GRgCsEAABwKgKMujoAFDrVO6LQSsE+4AQAOXx9AAAAQEICgE7lpED5WgG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":416,"flow_packet_id":1,"flow_first_seen":1499347673136,"flow_last_seen":1499347673136,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59704,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":416,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347673,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89tVAAD4GzvqsEAABwKgKMuk4AFAtrG4NAAAAAKACchA\/rgAAAgQFtAQCCAoBO5jYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":416,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347673,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6ThuKc6nLaxuDqAScSCViQAAAgQFtAQCCAoD5WpNATuY2AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":416,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347673,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09tZAAD4GzwGsEAABwKgKMuk4AFAtrG4ObinOqIAQAOU0kQAAAQEICgE7mNgD5WpN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":413,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347673,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TE9AAD4GeYmsEAABwKgKMukCAFANB9+pNpaOyIARAOVfjwAAAQEICgE7mX8D5WVa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":413,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347673,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05DxAAEAG35vAqAoyrBAAAQBQ6QI2lo7IDQffqoARAONZ9gAAAQEICgPlavQBO5l\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":413,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347673,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TFBAAD4GeYisEAABwKgKMukCAFANB9+qNpaOyYAQAOVZ9AAAAQEICgE7mX8D5Wr0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":417,"flow_packet_id":1,"flow_first_seen":1499347674433,"flow_last_seen":1499347674433,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59718,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":417,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347674,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DFZAAD4GuXqsEAABwKgKMulGAFBSGZZKAAAAAKACchDxsQAAAgQFtAQCCAoBO5ocAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":417,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347674,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6UarF0RiUhmWS6AScSCToAAAAgQFtAQCCAoD5WuRATuaHAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":417,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347674,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DFdAAD4GuYGsEAABwKgKMulGAFBSGZZLqxdEY4AQAOUypwAAAQEICgE7mh0D5WuR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":414,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347674,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbhAAD4GaCCsEAABwKgKMukQAFClPsiVMziaTIARAOXUAAAAAQEICgE7mnkD5WaX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":414,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347674,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08aJAAEAG0jXAqAoyrBAAAQBQ6RAzOJpMpT7IloARAOPOqgAAAQEICgPla+4BO5p5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":414,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347674,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XblAAD4GaB+sEAABwKgKMukQAFClPsiWMziaTYAQAOXOqAAAAQEICgE7mnkD5Wvu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":418,"flow_packet_id":1,"flow_first_seen":1499347675703,"flow_last_seen":1499347675703,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59732,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":418,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347675,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jIRAAD4GOUysEAABwKgKMulUAFDpsRfeAAAAAKACchDXOQAAAgQFtAQCCAoBO5taAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":418,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347675,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6VSdi3bc6bEX36AScSBS\/AAAAgQFtAQCCAoD5WzPATubWgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":418,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347675,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jIVAAD4GOVOsEAABwKgKMulUAFDpsRffnYt23YAQAOXyAwAAAQEICgE7m1oD5WzP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":415,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347675,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Rc9AAD4GgAmsEAABwKgKMukeAFDr3NOYZRejP4ARAOVFTQAAAQEICgE7m3MD5WfP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":415,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347675,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0z9dAAEAG9ADAqAoyrBAAAQBQ6R5lF6M\/69zTmYARAONANQAAAQEICgPlbOgBO5tz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":415,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347675,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0RdBAAD4GgAisEAABwKgKMukeAFDr3NOZZRejQIAQAOVAMwAAAQEICgE7m3MD5Wzo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":419,"flow_packet_id":1,"flow_first_seen":1499347678198,"flow_last_seen":1499347678198,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59758,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":419,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347678,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86nhAAD4G21esEAABwKgKMuluAFCn23eyAAAAAKACchC2sQAAAgQFtAQCCAoBO53KAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":419,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347678,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6W5MMi3pp9t3s6AScSDKUAAAAgQFtAQCCAoD5W8\/ATudygEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":419,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347678,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06nlAAD4G216sEAABwKgKMuluAFCn23ezTDIt6oAQAOVpWAAAAQEICgE7ncoD5W8\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":416,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347678,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09tdAAD4GzwCsEAABwKgKMuk4AFAtrG4ObinOqIARAOUvBwAAAQEICgE7nmED5WpN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":416,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347678,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oX5AAEAGIlrAqAoyrBAAAQBQ6ThuKc6oLaxuD4ARAOMpfwAAAQEICgPlb9YBO55h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":416,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347678,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09thAAD4Gzv+sEAABwKgKMuk4AFAtrG4PbinOqYAQAOUpfQAAAQEICgE7nmED5W\/W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":375,"flow_packet_id":6,"flow_first_seen":1499347604752,"flow_last_seen":1499347609784,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":375,"flow_packet_id":6,"flow_first_seen":1499347604752,"flow_last_seen":1499347609784,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58974,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":376,"flow_packet_id":6,"flow_first_seen":1499347606078,"flow_last_seen":1499347611787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":376,"flow_packet_id":6,"flow_first_seen":1499347606078,"flow_last_seen":1499347611787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58988,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":377,"flow_packet_id":6,"flow_first_seen":1499347607344,"flow_last_seen":1499347612785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59002,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":377,"flow_packet_id":6,"flow_first_seen":1499347607344,"flow_last_seen":1499347612785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59002,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":378,"flow_packet_id":6,"flow_first_seen":1499347608596,"flow_last_seen":1499347613787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59016,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":378,"flow_packet_id":6,"flow_first_seen":1499347608596,"flow_last_seen":1499347613787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59016,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":380,"flow_packet_id":6,"flow_first_seen":1499347612465,"flow_last_seen":1499347617785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59056,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":380,"flow_packet_id":6,"flow_first_seen":1499347612465,"flow_last_seen":1499347617785,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59056,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":381,"flow_packet_id":6,"flow_first_seen":1499347613718,"flow_last_seen":1499347618787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59070,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":381,"flow_packet_id":6,"flow_first_seen":1499347613718,"flow_last_seen":1499347618787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59070,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":341,"flow_packet_id":315,"flow_first_seen":1499347547687,"flow_last_seen":1499347614979,"flow_tot_l4_data_len":242778,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":770,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":58360,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":420,"flow_packet_id":1,"flow_first_seen":1499347679469,"flow_last_seen":1499347679469,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59772,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":420,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80KNAAD4G9SysEAABwKgKMul8AFCXJE+kAAAAAKACchDuKwAAAgQFtAQCCAoBO58HAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":420,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6XyRTq6MlyRPpaAScSA6zgAAAgQFtAQCCAoD5XB8ATufBwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":420,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00KRAAD4G9TOsEAABwKgKMul8AFCXJE+lkU6ujYAQAOXZ1AAAAQEICgE7nwgD5XB8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":418,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":418,"flow_packet_id":4,"flow_first_seen":1499347675703,"flow_last_seen":1499347679471,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59732,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27SZGGJRXX6DR9VWKN864H8LTBEZ6QC3GJPC8TUUNAED3BBL4L8P%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":417,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DFhAAD4GuYCsEAABwKgKMulGAFBSGZZLqxdEY4ARAOUtuwAAAQEICgE7nwgD5WuR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":418,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BqBAAEAGvTjAqAoyrBAAAQBQ6VSdi3bd6bEaKIAQAOzoVwAAAQEICgPlcH0BO58I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":417,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NB5AAEAGj7rAqAoyrBAAAQBQ6UarF0RjUhmWTIARAOMo0AAAAQEICgPlcH0BO58I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":417,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DFlAAD4GuX+sEAABwKgKMulGAFBSGZZMqxdEZIAQAOUozgAAAQEICgE7nwgD5XB9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2928{"flow_id":418,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":418,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347679,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jIdAAD4GOVGsEAABwKgKMulUAFDpsRoonYt+KYAQAQLg8wAAAQEICgE7nwkD5XB+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":418,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":418,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":418,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jIlAAD4GOU+sEAABwKgKMulUAFDpsRunnYuFE4AQAR3WZQAAAQEICgE7oA4D5XGD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":421,"flow_packet_id":1,"flow_first_seen":1499347680746,"flow_last_seen":1499347680746,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59786,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":421,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qSxAAD4GHKSsEAABwKgKMumKAFCMLAlrAAAAAKACchA+DwAAAgQFtAQCCAoBO6BHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":421,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6YpeBd3IjCwJbKAScSCNfgAAAgQFtAQCCAoD5XG8ATugRwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":421,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS1AAD4GHKusEAABwKgKMumKAFCMLAlsXgXdyYAQAOUshgAAAQEICgE7oEcD5XG8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":418,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2933{"flow_id":418,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":1932,"pkt":"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","pkt_caplen":1932,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":418,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347680,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jItAAD4GOU2sEAABwKgKMulUAFDpsR3wnYuMXYAQATvMQAAAAQEICgE7oEgD5XG9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":418,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347681,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":418,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347681,"pkt_len":1836,"pkt":"AMGxFOsxABm5CmnxCABFAAceBqdAAEAGtkfAqAoyrBAAAQBQ6VSdi4xd6bEfb4AYAQd9\/AAAAQEICgPlcsEBO6FLSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI4OjAxIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":422,"flow_packet_id":1,"flow_first_seen":1499347683313,"flow_last_seen":1499347683313,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59812,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":422,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347683,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8x61AAD4G\/iKsEAABwKgKMumkAFCTI2VlAAAAAKACchDYggAAAgQFtAQCCAoBO6LIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":422,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347683,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6aQ4uuFckyNlZqAScSBHKAAAAgQFtAQCCAoD5XQ9ATuiyAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":422,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347683,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x65AAD4G\/imsEAABwKgKMumkAFCTI2VmOLrhXYAQAOXmLgAAAQEICgE7oskD5XQ9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":419,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347683,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06npAAD4G212sEAABwKgKMuluAFCn23ezTDIt6oARAOVj3gAAAQEICgE7o0MD5W8\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":419,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347683,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WVJAAEAGaobAqAoyrBAAAQBQ6W5MMi3qp9t3tIARAONeZgAAAQEICgPldLgBO6ND","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":419,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347683,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06ntAAD4G21ysEAABwKgKMuluAFCn23e0TDIt64AQAOVeZAAAAQEICgE7o0MD5XS4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":423,"flow_packet_id":1,"flow_first_seen":1499347684563,"flow_last_seen":1499347684563,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59826,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":423,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347684,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82yNAAD4G6qysEAABwKgKMumyAFDf7X8iAAAAAKACchBwtAAAAgQFtAQCCAoBO6QBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":423,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347684,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6bLDIQ3O3+1\/I6AScSAnSAAAAgQFtAQCCAoD5XV2ATukAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":423,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347684,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02yRAAD4G6rOsEAABwKgKMumyAFDf7X8jwyENz4AQAOXGTwAAAQEICgE7pAED5XV2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":420,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347684,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00KVAAD4G9TKsEAABwKgKMul8AFCXJE+lkU6ujYARAOXUngAAAQEICgE7pD0D5XB8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":420,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347684,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02z9AAEAG6JjAqAoyrBAAAQBQ6XyRTq6NlyRPpoARAOPPaQAAAQEICgPldbIBO6Q9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":420,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347684,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00KZAAD4G9TGsEAABwKgKMul8AFCXJE+mkU6ujoAQAOXPZwAAAQEICgE7pD0D5XWy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":421,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347685,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS5AAD4GHKqsEAABwKgKMumKAFCMLAlsXgXdyYARAOUnlQAAAQEICgE7pTcD5XG8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":421,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347685,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0q2VAAEAGGHPAqAoyrBAAAQBQ6YpeBd3JjCwJbYARAOMipgAAAQEICgPldqwBO6U3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":421,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347685,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS9AAD4GHKmsEAABwKgKMumKAFCMLAltXgXdyoAQAOUipAAAAQEICgE7pTcD5Xas","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":424,"flow_packet_id":1,"flow_first_seen":1499347687089,"flow_last_seen":1499347687089,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59852,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":424,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347687,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UahAAD4GdCisEAABwKgKMunMAFBn2\/fQAAAAAKACchBthwAAAgQFtAQCCAoBO6Z4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":424,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347687,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6cx2j8kIZ9v30aAScSCy+wAAAgQFtAQCCAoD5XftATumeAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":424,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347687,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UalAAD4GdC+sEAABwKgKMunMAFBn2\/fRdo\/JCYAQAOVSAgAAAQEICgE7pnkD5Xft","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":425,"flow_packet_id":1,"flow_first_seen":1499347688364,"flow_last_seen":1499347688364,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59866,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":425,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347688,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8C45AAD4GukKsEAABwKgKMunaAFB\/Haw5AAAAAKACchCgjwAAAgQFtAQCCAoBO6e3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":425,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347688,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6dpm6d+Cfx2sOqAScSDd8AAAAgQFtAQCCAoD5XksATuntwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":425,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347688,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C49AAD4GukmsEAABwKgKMunaAFB\/Haw6Zunfg4AQAOV8+AAAAQEICgE7p7cD5Xks","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":422,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347688,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x69AAD4G\/iisEAABwKgKMumkAFCTI2VmOLrhXYARAOXg0QAAAQEICgE7qCUD5XQ9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":422,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347688,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mMdAAEAGKxHAqAoyrBAAAQBQ6aQ4uuFdkyNlZ4ARAOPbdQAAAQEICgPleZoBO6gl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":422,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347688,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0x7BAAD4G\/iesEAABwKgKMumkAFCTI2VnOLrhXoAQAOXbcgAAAQEICgE7qCYD5Xma","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":382,"flow_packet_id":6,"flow_first_seen":1499347616210,"flow_last_seen":1499347621787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59096,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":382,"flow_packet_id":6,"flow_first_seen":1499347616210,"flow_last_seen":1499347621787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59096,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":383,"flow_packet_id":6,"flow_first_seen":1499347617491,"flow_last_seen":1499347622787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59110,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":383,"flow_packet_id":6,"flow_first_seen":1499347617491,"flow_last_seen":1499347622787,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59110,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":384,"flow_packet_id":6,"flow_first_seen":1499347618757,"flow_last_seen":1499347623788,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59124,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":384,"flow_packet_id":6,"flow_first_seen":1499347618757,"flow_last_seen":1499347623788,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59124,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":385,"flow_packet_id":6,"flow_first_seen":1499347621256,"flow_last_seen":1499347626789,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59150,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":385,"flow_packet_id":6,"flow_first_seen":1499347621256,"flow_last_seen":1499347626789,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59150,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":386,"flow_packet_id":6,"flow_first_seen":1499347622524,"flow_last_seen":1499347627790,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59164,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":386,"flow_packet_id":6,"flow_first_seen":1499347622524,"flow_last_seen":1499347627790,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59164,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":387,"flow_packet_id":6,"flow_first_seen":1499347623786,"flow_last_seen":1499347628791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59178,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":387,"flow_packet_id":6,"flow_first_seen":1499347623786,"flow_last_seen":1499347628791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59178,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":426,"flow_packet_id":1,"flow_first_seen":1499347689613,"flow_last_seen":1499347689613,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59880,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":426,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347689,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80NlAAD4G9PasEAABwKgKMunoAFDCAng2AAAAAKACchCQZwAAAgQFtAQCCAoBO6jvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":426,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347689,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6egCgzyzwgJ4N6AScSDTxgAAAgQFtAQCCAoD5XpkATuo7wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":426,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347689,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00NpAAD4G9P2sEAABwKgKMunoAFDCAng3AoM8tIAQAOVyzQAAAQEICgE7qPAD5Xpk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":423,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347689,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02yVAAD4G6rKsEAABwKgKMumyAFDf7X8jwyENz4ARAOXBMAAAAQEICgE7qR8D5XV2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":423,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347689,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0d1tAAEAGTH3AqAoyrBAAAQBQ6bLDIQ3P3+1\/JIARAOO8EwAAAQEICgPlepQBO6kf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":423,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347689,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02yZAAD4G6rGsEAABwKgKMumyAFDf7X8kwyEN0IAQAOW8EAAAAQEICgE7qSAD5XqU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":427,"flow_packet_id":1,"flow_first_seen":1499347692128,"flow_last_seen":1499347692128,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59906,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":427,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347692,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8u5xAAD4GCjSsEAABwKgKMuoCAFDepxD4AAAAAKACchDYcQAAAgQFtAQCCAoBO6tkAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":427,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347692,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6gK6r2Hi3qcQ+aAScSA8AAAAAgQFtAQCCAoD5XzZATurZAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":427,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347692,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u51AAD4GCjusEAABwKgKMuoCAFDepxD5uq9h44AQAOXbBwAAAQEICgE7q2QD5XzZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":424,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347692,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UapAAD4GdC6sEAABwKgKMunMAFBn2\/fRdo\/JCYARAOVMbAAAAQEICgE7rA4D5Xft","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":424,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347692,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tIpAAEAGD07AqAoyrBAAAQBQ6cx2j8kJZ9v30oARAONG1wAAAQEICgPlfYMBO6wO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":424,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347692,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UatAAD4GdC2sEAABwKgKMunMAFBn2\/fSdo\/JCoAQAOVG1QAAAQEICgE7rA4D5X2D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":428,"flow_packet_id":1,"flow_first_seen":1499347693386,"flow_last_seen":1499347693386,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59920,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":428,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347693,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8yJFAAD4G\/T6sEAABwKgKMuoQAFBhE2QOAAAAAKACchABpwAAAgQFtAQCCAoBO6yfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":428,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347693,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6hDs1hgmYRNkD6AScSB7jwAAAgQFtAQCCAoD5X4UATusnwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":428,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347693,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yJJAAD4G\/UWsEAABwKgKMuoQAFBhE2QP7NYYJ4AQAOUalwAAAQEICgE7rJ8D5X4U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":425,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347693,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C5BAAD4GukisEAABwKgKMunaAFB\/Haw6Zunfg4ARAOV3pgAAAQEICgE7rQgD5Xks","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":425,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347693,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0of5AAEAGIdrAqAoyrBAAAQBQ6dpm6d+Dfx2sO4ARAONyVgAAAQEICgPlfn0BO60I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":425,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347693,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0C5FAAD4GukesEAABwKgKMunaAFB\/Haw7ZunfhIAQAOVyVAAAAQEICgE7rQgD5X59","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":429,"flow_packet_id":1,"flow_first_seen":1499347694661,"flow_last_seen":1499347694661,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59934,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":429,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347694,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8mmhAAD4GK2isEAABwKgKMuoeAFATaje1AAAAAKACchB6XQAAAgQFtAQCCAoBO63dAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":429,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347694,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6h4IeSXoE2o3tqAScSDJowAAAgQFtAQCCAoD5X9SATut3QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":429,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347694,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mmlAAD4GK2+sEAABwKgKMuoeAFATaje2CHkl6YAQAOVoqgAAAQEICgE7rd4D5X9S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":426,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347694,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00NtAAD4G9PysEAABwKgKMunoAFDCAng3AoM8tIARAOVtugAAAQEICgE7rgID5Xpk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":426,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347694,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q8NAAEAGgBXAqAoyrBAAAQBQ6egCgzy0wgJ4OIARAONoqAAAAQEICgPlf3cBO64C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":426,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347694,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00NxAAD4G9PusEAABwKgKMunoAFDCAng4AoM8tYAQAOVopgAAAQEICgE7rgID5X93","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":430,"flow_packet_id":1,"flow_first_seen":1499347697189,"flow_last_seen":1499347697189,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59960,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":430,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347697,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88ppAAD4G0zWsEAABwKgKMuo4AFBV\/kLMAAAAAKACchAqHwAAAgQFtAQCCAoBO7BWAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":430,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347697,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6jj3l3auVf5CzaAScSA3CAAAAgQFtAQCCAoD5YHKATuwVgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":430,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347697,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08ptAAD4G0zysEAABwKgKMuo4AFBV\/kLN95d2r4AQAOXWDwAAAQEICgE7sFYD5YHK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":427,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347697,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u55AAD4GCjqsEAABwKgKMuoCAFDepxD5uq9h44ARAOXVegAAAQEICgE7sPAD5XzZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":427,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347697,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA044ZAAEAG4FHAqAoyrBAAAQBQ6gK6r2Hj3qcQ+oARAOPP7wAAAQEICgPlgmUBO7Dw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":427,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347697,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u59AAD4GCjmsEAABwKgKMuoCAFDepxD6uq9h5IAQAOXP7QAAAQEICgE7sPAD5YJl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":431,"flow_packet_id":1,"flow_first_seen":1499347698449,"flow_last_seen":1499347698449,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59974,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":431,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347698,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iq9AAD4GOyGsEAABwKgKMupGAFDXwDs\/AAAAAKACchCuoQAAAgQFtAQCCAoBO7GQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":431,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347698,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6kYJky3T18A7QKAScSDxLwAAAgQFtAQCCAoD5YMFATuxkAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":431,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347698,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0irBAAD4GOyisEAABwKgKMupGAFDXwDtACZMt1IAQAOWQNgAAAQEICgE7sZED5YMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":428,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347698,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yJNAAD4G\/USsEAABwKgKMuoQAFBhE2QP7NYYJ4ARAOUVSwAAAQEICgE7seoD5X4U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":428,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347698,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0m3hAAEAGKGDAqAoyrBAAAQBQ6hDs1hgnYRNkEIARAOMQAQAAAQEICgPlg18BO7Hq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":428,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347698,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0yJRAAD4G\/UOsEAABwKgKMuoQAFBhE2QQ7NYYKIAQAOUP\/wAAAQEICgE7seoD5YNf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":388,"flow_packet_id":6,"flow_first_seen":1499347625094,"flow_last_seen":1499347630791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59192,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":388,"flow_packet_id":6,"flow_first_seen":1499347625094,"flow_last_seen":1499347630791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59192,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":389,"flow_packet_id":6,"flow_first_seen":1499347626349,"flow_last_seen":1499347631791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59206,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":389,"flow_packet_id":6,"flow_first_seen":1499347626349,"flow_last_seen":1499347631791,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59206,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":390,"flow_packet_id":6,"flow_first_seen":1499347627616,"flow_last_seen":1499347632792,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":390,"flow_packet_id":6,"flow_first_seen":1499347627616,"flow_last_seen":1499347632792,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59220,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":391,"flow_packet_id":6,"flow_first_seen":1499347630130,"flow_last_seen":1499347635793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59246,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":391,"flow_packet_id":6,"flow_first_seen":1499347630130,"flow_last_seen":1499347635793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59246,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":392,"flow_packet_id":6,"flow_first_seen":1499347631388,"flow_last_seen":1499347636793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59260,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":392,"flow_packet_id":6,"flow_first_seen":1499347631388,"flow_last_seen":1499347636793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59260,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":393,"flow_packet_id":6,"flow_first_seen":1499347632635,"flow_last_seen":1499347637795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59274,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":393,"flow_packet_id":6,"flow_first_seen":1499347632635,"flow_last_seen":1499347637795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59274,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":432,"flow_packet_id":1,"flow_first_seen":1499347699724,"flow_last_seen":1499347699724,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59988,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":432,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347699,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U2NAAD4Gcm2sEAABwKgKMupUAFDv6uGsAAAAAKACchDuvAAAAgQFtAQCCAoBO7LPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":432,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347699,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6lS1E1w77+rhraAScSBWIwAAAgQFtAQCCAoD5YREATuyzwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":432,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347699,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2RAAD4GcnSsEAABwKgKMupUAFDv6uGttRNcPIAQAOX1KgAAAQEICgE7ss8D5YRE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":429,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347699,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mmpAAD4GK26sEAABwKgKMuoeAFATaje2CHkl6YARAOVjowAAAQEICgE7suQD5X9S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":429,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347699,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0obBAAEAGIijAqAoyrBAAAQBQ6h4IeSXpE2o3t4ARAONenQAAAQEICgPlhFkBO7Lk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":429,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347699,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0mmtAAD4GK22sEAABwKgKMuoeAFATaje3CHkl6oAQAOVemwAAAQEICgE7suQD5YRZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":433,"flow_packet_id":1,"flow_first_seen":1499347702287,"flow_last_seen":1499347702287,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60014,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":433,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347702,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dHpAAD4GUVasEAABwKgKMupuAFBhicEqAAAAAKACchCbBQAAAgQFtAQCCAoBO7VQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":433,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347702,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6m4\/xiwDYYnBK6AScSClcAAAAgQFtAQCCAoD5YbFATu1UAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":433,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347702,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dHtAAD4GUV2sEAABwKgKMupuAFBhicErP8YsBIAQAOVEeAAAAQEICgE7tVAD5YbF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":430,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347702,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08pxAAD4G0zusEAABwKgKMuo4AFBV\/kLN95d2r4ARAOXQkgAAAQEICgE7tdID5YHK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":430,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347702,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08ehAAEAG0e\/AqAoyrBAAAQBQ6jj3l3avVf5CzoARAOPLFgAAAQEICgPlh0cBO7XS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":430,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347702,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08p1AAD4G0zqsEAABwKgKMuo4AFBV\/kLO95d2sIAQAOXLFAAAAQEICgE7tdID5YdH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":434,"flow_packet_id":1,"flow_first_seen":1499347703726,"flow_last_seen":1499347703726,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60028,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":434,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347703,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80EJAAD4G9Y2sEAABwKgKMup8AFAHaGb6AAAAAKACchBN4QAAAgQFtAQCCAoBO7a4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":434,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347703,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6nwCGRKtB2hm+6AScSCt5wAAAgQFtAQCCAoD5YgtATu2uAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":434,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347703,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00ENAAD4G9ZSsEAABwKgKMup8AFAHaGb7AhkSroAQAOVM7wAAAQEICgE7trgD5Ygt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":431,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347703,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0irFAAD4GOyesEAABwKgKMupGAFDXwDtACZMt1IARAOWK+gAAAQEICgE7tswD5YMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":431,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347703,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pZVAAEAGHkPAqAoyrBAAAQBQ6kYJky3U18A7QYARAOOFvwAAAQEICgPliEEBO7bM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":431,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347703,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0irJAAD4GOyasEAABwKgKMupGAFDXwDtBCZMt1YAQAOWFvQAAAQEICgE7tswD5YhB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":432,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347704,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2VAAD4GcnOsEAABwKgKMupUAFDv6uGttRNcPIARAOXwMgAAAQEICgE7t8YD5YRE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":432,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347704,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01QdAAEAG7tDAqAoyrBAAAQBQ6lS1E1w87+rhroARAOPrPAAAAQEICgPliTsBO7fG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":432,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347704,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U2ZAAD4GcnKsEAABwKgKMupUAFDv6uGutRNcPYAQAOXrOgAAAQEICgE7t8YD5Yk7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":435,"flow_packet_id":1,"flow_first_seen":1499347705116,"flow_last_seen":1499347705116,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60042,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":435,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347705,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oq5AAD4GIyKsEAABwKgKMuqKAFDjSRq9AAAAAKACchC80wAAAgQFtAQCCAoBO7gTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":435,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347705,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6oqWCrpo40kavqAScSDf0QAAAgQFtAQCCAoD5YmIATu4EwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":435,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347705,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oq9AAD4GIymsEAABwKgKMuqKAFDjSRq+lgq6aYAQAOV+2QAAAQEICgE7uBMD5YmI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":436,"flow_packet_id":1,"flow_first_seen":1499347706399,"flow_last_seen":1499347706399,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60056,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":436,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347706,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8F3NAAD4Grl2sEAABwKgKMuqYAFBMGa4nAAAAAKACchC\/SgAAAgQFtAQCCAoBO7lUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":436,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347706,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6pjZqykETBmuKKAScSAuywAAAgQFtAQCCAoD5YrJATu5VAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":436,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347706,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F3RAAD4GrmSsEAABwKgKMuqYAFBMGa4o2aspBYAQAOXN0gAAAQEICgE7uVQD5YrJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":433,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347707,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dHxAAD4GUVysEAABwKgKMupuAFBhicErP8YsBIARAOU\/EgAAAQEICgE7urUD5YbF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":433,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347707,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oC1AAEAGI6vAqAoyrBAAAQBQ6m4\/xiwEYYnBLIARAOM5rwAAAQEICgPljCkBO7q1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":433,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347707,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dH1AAD4GUVusEAABwKgKMupuAFBhicEsP8YsBYAQAOU5rQAAAQEICgE7urUD5Ywp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":434,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347708,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00ERAAD4G9ZOsEAABwKgKMup8AFAHaGb7AhkSroARAOVH9wAAAQEICgE7u68D5Ygt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":434,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347708,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n41AAEAGJEvAqAoyrBAAAQBQ6nwCGRKuB2hm\/IARAONDAgAAAQEICgPljSMBO7uv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":434,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347708,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00EVAAD4G9ZKsEAABwKgKMup8AFAHaGb8AhkSr4AQAOVDAAAAAQEICgE7u68D5Y0j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":437,"flow_packet_id":1,"flow_first_seen":1499347709252,"flow_last_seen":1499347709252,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60084,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":437,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347709,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8u61AAD4GCiOsEAABwKgKMuq0AFAeNwewAAAAAKACchCQvwAAAgQFtAQCCAoBO7wdAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":437,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347709,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6rSwITsWHjcHsaAScSAU7wAAAgQFtAQCCAoD5Y2SATu8HQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":437,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347709,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u65AAD4GCiqsEAABwKgKMuq0AFAeNwexsCE7F4AQAOWz9QAAAQEICgE7vB4D5Y2S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":394,"flow_packet_id":6,"flow_first_seen":1499347635154,"flow_last_seen":1499347640794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59300,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":394,"flow_packet_id":6,"flow_first_seen":1499347635154,"flow_last_seen":1499347640794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59300,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":395,"flow_packet_id":6,"flow_first_seen":1499347636429,"flow_last_seen":1499347641793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59314,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":395,"flow_packet_id":6,"flow_first_seen":1499347636429,"flow_last_seen":1499347641793,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59314,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":396,"flow_packet_id":6,"flow_first_seen":1499347637687,"flow_last_seen":1499347642795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59328,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":396,"flow_packet_id":6,"flow_first_seen":1499347637687,"flow_last_seen":1499347642795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59328,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":397,"flow_packet_id":6,"flow_first_seen":1499347640199,"flow_last_seen":1499347645794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59354,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":397,"flow_packet_id":6,"flow_first_seen":1499347640199,"flow_last_seen":1499347645794,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59354,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":398,"flow_packet_id":6,"flow_first_seen":1499347641440,"flow_last_seen":1499347646795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59368,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":398,"flow_packet_id":6,"flow_first_seen":1499347641440,"flow_last_seen":1499347646795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59368,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":399,"flow_packet_id":6,"flow_first_seen":1499347642716,"flow_last_seen":1499347647795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59382,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":399,"flow_packet_id":6,"flow_first_seen":1499347642716,"flow_last_seen":1499347647795,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59382,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":435,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347710,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0orBAAD4GIyisEAABwKgKMuqKAFDjSRq+lgq6aYARAOV5SAAAAQEICgE7vaMD5YmI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":435,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347710,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0NXFAAEAGjmfAqAoyrBAAAQBQ6oqWCrpp40kav4ARAONzuQAAAQEICgPljxgBO72j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":435,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347710,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0orFAAD4GIyesEAABwKgKMuqKAFDjSRq\/lgq6aoAQAOVztwAAAQEICgE7vaMD5Y8Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":436,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347711,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F3VAAD4GrmOsEAABwKgKMuqYAFBMGa4o2aspBYARAOXIiAAAAQEICgE7vp0D5YrJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":436,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347711,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uRdAAEAGCsHAqAoyrBAAAQBQ6pjZqykFTBmuKYARAOPDQAAAAQEICgPlkBIBO76d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":436,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347711,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0F3ZAAD4GrmKsEAABwKgKMuqYAFBMGa4p2aspBoAQAOXDPgAAAQEICgE7vp0D5ZAS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":438,"flow_packet_id":1,"flow_first_seen":1499347712277,"flow_last_seen":1499347712277,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60134,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":438,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347712,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nw9AAD4GJsGsEAABwKgKMurmAFCpjSAeAAAAAKACchDp1AAAAgQFtAQCCAoBO78RAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":439,"flow_packet_id":1,"flow_first_seen":1499347712277,"flow_last_seen":1499347712277,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60136,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":439,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347712,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81Z1AAD4G8DKsEAABwKgKMuroAFDnlWqMAAAAAKACchBhXAAAAgQFtAQCCAoBO78RAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":439,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347712,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6ui8Jpzg55VqjaAScSB0yAAAAgQFtAQCCAoD5ZCGATu\/EQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":438,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347712,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6uYE2QpnqY0gH6AScSBHCAAAAgQFtAQCCAoD5ZCGATu\/EQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":439,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347712,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01Z5AAD4G8DmsEAABwKgKMuroAFDnlWqNvCac4YAQAOUTzwAAAQEICgE7vxID5ZCG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":438,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347712,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nxBAAD4GJsisEAABwKgKMurmAFCpjSAfBNkKaIAQAOXmDgAAAQEICgE7vxID5ZCG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":440,"flow_packet_id":1,"flow_first_seen":1499347713588,"flow_last_seen":1499347713588,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60154,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":440,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347713,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8P+JAAD4Ghe6sEAABwKgKMur6AFB3+v+7AAAAAKACchA6bgAAAgQFtAQCCAoBO8BZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":440,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347713,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6vp4zY2Qd\/r\/vKAScSCfOwAAAgQFtAQCCAoD5ZHOATvAWQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":440,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347713,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P+NAAD4GhfWsEAABwKgKMur6AFB3+v+8eM2NkYAQAOU+QwAAAQEICgE7wFkD5ZHO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":437,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347714,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u69AAD4GCimsEAABwKgKMuq0AFAeNwexsCE7F4ARAOWuhwAAAQEICgE7wYsD5Y2S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":437,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347714,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qBdAAEAGG8HAqAoyrBAAAQBQ6rSwITsXHjcHsoARAOOpGgAAAQEICgPlkwABO8GL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":437,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347714,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0u7BAAD4GCiisEAABwKgKMuq0AFAeNweysCE7GIAQAOWpGAAAAQEICgE7wYsD5ZMA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":441,"flow_packet_id":1,"flow_first_seen":1499347716243,"flow_last_seen":1499347716243,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60180,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":441,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347716,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA821BAAD4G6n+sEAABwKgKMusUAFBsBhmhAAAAAKACchApywAAAgQFtAQCCAoBO8LxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":441,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347716,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6xT1wuHkbAYZoqAScSC6tgAAAgQFtAQCCAoD5ZRmATvC8QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":441,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347716,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA021FAAD4G6oasEAABwKgKMusUAFBsBhmi9cLh5YAQAOVZvgAAAQEICgE7wvED5ZRm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":442,"flow_packet_id":1,"flow_first_seen":1499347717533,"flow_last_seen":1499347717533,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60194,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":442,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GKhAAD4GrSisEAABwKgKMusiAFDZTNycAAAAAKACchD4NwAAAgQFtAQCCAoBO8Q0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":442,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6yL+myOL2UzcnaAScSA9YgAAAgQFtAQCCAoD5ZWoATvENAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":442,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GKlAAD4GrS+sEAABwKgKMusiAFDZTNyd\/psjjIAQAOXcaQAAAQEICgE7xDQD5ZWo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":439,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01Z9AAD4G8DisEAABwKgKMuroAFDnlWqNvCac4YARAOUOZwAAAQEICgE7xHkD5ZCG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":438,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nxFAAD4GJsesEAABwKgKMurmAFCpjSAfBNkKaIARAOXgpgAAAQEICgE7xHkD5ZCG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":439,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CQ9AAEAGusnAqAoyrBAAAQBQ6ui8Jpzh55VqjoARAOMJAAAAAQEICgPlle4BO8R5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":438,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n4ZAAEAGJFLAqAoyrBAAAQBQ6uYE2QpoqY0gIIARAOPbPwAAAQEICgPlle4BO8R5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":439,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01aBAAD4G8DesEAABwKgKMuroAFDnlWqOvCac4oAQAOUI\/QAAAQEICgE7xHoD5ZXu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":438,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347717,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nxJAAD4GJsasEAABwKgKMurmAFCpjSAgBNkKaYAQAOXbPAAAAQEICgE7xHoD5ZXu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":440,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347718,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P+RAAD4GhfSsEAABwKgKMur6AFB3+v+8eM2NkYARAOU5JwAAAQEICgE7xXQD5ZHO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":440,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347718,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0G3lAAEAGqF\/AqAoyrBAAAQBQ6vp4zY2Rd\/r\/vYARAOM0DgAAAQEICgPllugBO8V0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":440,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347718,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P+VAAD4GhfOsEAABwKgKMur6AFB3+v+9eM2NkoAQAOU0DAAAAQEICgE7xXQD5Zbo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":443,"flow_packet_id":1,"flow_first_seen":1499347720094,"flow_last_seen":1499347720094,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60220,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":443,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347720,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qt5AAD4GGvKsEAABwKgKMus8AFAqiGxqAAAAAKACchAUlQAAAgQFtAQCCAoBO8a0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":443,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347720,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6zwJv9VKKohsa6AScSCaWwAAAgQFtAQCCAoD5ZgpATvGtAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":443,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347720,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qt9AAD4GGvmsEAABwKgKMus8AFAqiGxrCb\/VS4AQAOU5YwAAAQEICgE7xrQD5Zgp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":400,"flow_packet_id":6,"flow_first_seen":1499347645232,"flow_last_seen":1499347650797,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59408,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":400,"flow_packet_id":6,"flow_first_seen":1499347645232,"flow_last_seen":1499347650797,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59408,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":401,"flow_packet_id":6,"flow_first_seen":1499347646486,"flow_last_seen":1499347651805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59422,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":401,"flow_packet_id":6,"flow_first_seen":1499347646486,"flow_last_seen":1499347651805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59422,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":402,"flow_packet_id":6,"flow_first_seen":1499347647733,"flow_last_seen":1499347652800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59436,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":402,"flow_packet_id":6,"flow_first_seen":1499347647733,"flow_last_seen":1499347652800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59436,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":403,"flow_packet_id":6,"flow_first_seen":1499347650289,"flow_last_seen":1499347655800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59462,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":403,"flow_packet_id":6,"flow_first_seen":1499347650289,"flow_last_seen":1499347655800,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59462,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":404,"flow_packet_id":6,"flow_first_seen":1499347651555,"flow_last_seen":1499347656799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59476,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":404,"flow_packet_id":6,"flow_first_seen":1499347651555,"flow_last_seen":1499347656799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59476,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":405,"flow_packet_id":6,"flow_first_seen":1499347654065,"flow_last_seen":1499347659803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59502,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":405,"flow_packet_id":6,"flow_first_seen":1499347654065,"flow_last_seen":1499347659803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59502,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":406,"flow_packet_id":6,"flow_first_seen":1499347655367,"flow_last_seen":1499347660809,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59516,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":406,"flow_packet_id":6,"flow_first_seen":1499347655367,"flow_last_seen":1499347660809,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59516,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":444,"flow_packet_id":1,"flow_first_seen":1499347721376,"flow_last_seen":1499347721376,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60234,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":444,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UaNAAD4GdC2sEAABwKgKMutKAFCqmpZXAAAAAKACchBpRwAAAgQFtAQCCAoBO8f0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":444,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ60r+f8PRqpqWWKAScSAKhgAAAgQFtAQCCAoD5ZlpATvH9AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":444,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UaRAAD4GdDSsEAABwKgKMutKAFCqmpZY\/n\/D0oAQAOWpjQAAAQEICgE7x\/QD5Zlp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":441,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA021JAAD4G6oWsEAABwKgKMusUAFBsBhmi9cLh5YARAOVUTAAAAQEICgE7yGID5ZRm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":441,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eDNAAEAGS6XAqAoyrBAAAQBQ6xT1wuHlbAYZo4AQAONO3QAAAQEICgPlmdcBO8hi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":441,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0eDRAAEAGS6TAqAoyrBAAAQBQ6xT1wuHlbAYZo4ARAONO3AAAAQEICgPlmdcBO8hi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":441,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347721,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UUFAAD4GdJesEAABwKgKMusUAFBsBhmj9cLh5oAQAOVO2gAAAQEICgE7yGID5ZnX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":442,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347722,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GKpAAD4GrS6sEAABwKgKMusiAFDZTNyd\/psjjIARAOXXQAAAAQEICgE7yVwD5ZWo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":442,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347722,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uVxAAEAGCnzAqAoyrBAAAQBQ6yL+myOM2UzcnoARAOPSGQAAAQEICgPlmtABO8lc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":442,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347722,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GKtAAD4GrS2sEAABwKgKMusiAFDZTNye\/psjjYAQAOXSFwAAAQEICgE7yVwD5ZrQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":445,"flow_packet_id":1,"flow_first_seen":1499347724082,"flow_last_seen":1499347724082,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60260,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":445,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347724,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Pn9AAD4Gh1GsEAABwKgKMutkAFAGCvTmAAAAAKACchCsiQAAAgQFtAQCCAoBO8qZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":445,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347724,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ62S3KtySBgr056AScSB5twAAAgQFtAQCCAoD5ZwOATvKmQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":445,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347724,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PoBAAD4Gh1isEAABwKgKMutkAFAGCvTntyrck4AQAOUYvwAAAQEICgE7ypkD5ZwO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":446,"flow_packet_id":1,"flow_first_seen":1499347725355,"flow_last_seen":1499347725355,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60274,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":446,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347725,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jaBAAD4GODCsEAABwKgKMutyAFBT4UZ3AAAAAKACchAL1gAAAgQFtAQCCAoBO8vXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":446,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347725,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ63J14+58U+FGeKAScSAHIwAAAgQFtAQCCAoD5Z1MATvL1wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":446,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347725,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jaFAAD4GODesEAABwKgKMutyAFBT4UZ4dePufYAQAOWmKgAAAQEICgE7y9cD5Z1M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":443,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347725,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0quBAAD4GGvisEAABwKgKMus8AFAqiGxrCb\/VS4ARAOUzzAAAAQEICgE7zEoD5Zgp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":443,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347725,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SPRAAEAGeuTAqAoyrBAAAQBQ6zwJv9VLKohsbIARAOMuNwAAAQEICgPlnb8BO8xK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":443,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347725,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0quFAAD4GGvesEAABwKgKMus8AFAqiGxsCb\/VTIAQAOUuNQAAAQEICgE7zEoD5Z2\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":447,"flow_packet_id":1,"flow_first_seen":1499347726623,"flow_last_seen":1499347726623,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60288,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":447,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347726,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cctAAD4GVAWsEAABwKgKMuuAAFD+ZrzfAAAAAKACchDpnAAAAgQFtAQCCAoBO80UAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":447,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347726,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ64DDQROl\/ma84KAScSBxJgAAAgQFtAQCCAoD5Z6JATvNFAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":447,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347726,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ccxAAD4GVAysEAABwKgKMuuAAFD+Zrzgw0ETpoAQAOUQLgAAAQEICgE7zRQD5Z6J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":444,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347726,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UaVAAD4GdDOsEAABwKgKMutKAFCqmpZY\/n\/D0oARAOWkPAAAAQEICgE7zUQD5Zlp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":444,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347726,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XWtAAEAGZm3AqAoyrBAAAQBQ60r+f8PSqpqWWYARAOOe7QAAAQEICgPlnrkBO81E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":444,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347726,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UaZAAD4GdDKsEAABwKgKMutKAFCqmpZZ\/n\/D04AQAOWe6wAAAQEICgE7zUQD5Z65","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":448,"flow_packet_id":1,"flow_first_seen":1499347729211,"flow_last_seen":1499347729211,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60314,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":448,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347729,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NhFAAD4Gj7+sEAABwKgKMuuaAFCuIPmKAAAAAKACchD6lgAAAgQFtAQCCAoBO8+bAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":448,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347729,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ65plKrngriD5i6AScSA3dQAAAgQFtAQCCAoD5aEQATvPmwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":448,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347729,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NhJAAD4Gj8asEAABwKgKMuuaAFCuIPmLZSq54YAQAOXWfAAAAQEICgE7z5sD5aEQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":445,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347729,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PoFAAD4Gh1esEAABwKgKMutkAFAGCvTntyrck4ARAOUTJQAAAQEICgE70DID5ZwO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":445,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347729,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fTRAAEAGRqTAqAoyrBAAAQBQ62S3KtyTBgr06IARAOMNjQAAAQEICgPloacBO9Ay","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":445,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347729,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PoJAAD4Gh1asEAABwKgKMutkAFAGCvTotyrclIAQAOUNigAAAQEICgE70DMD5aGn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":449,"flow_packet_id":1,"flow_first_seen":1499347730501,"flow_last_seen":1499347730501,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60328,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":449,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347730,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83upAAD4G5uWsEAABwKgKMuuoAFBoeQ40AAAAAKACchAqRAAAAgQFtAQCCAoBO9DeAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":449,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347730,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ66jFwizsaHkONaAScSCSPAAAAgQFtAQCCAoD5aJSATvQ3gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":449,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347730,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03utAAD4G5uysEAABwKgKMuuoAFBoeQ41xcIs7YAQAOUxRAAAAQEICgE70N4D5aJS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":446,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347730,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jaJAAD4GODasEAABwKgKMutyAFBT4UZ4dePufYARAOWg0wAAAQEICgE70S0D5Z1M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":446,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347730,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TNxAAEAGdvzAqAoyrBAAAQBQ63J14+59U+FGeYARAOObfwAAAQEICgPloqEBO9Et","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":446,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347730,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jaNAAD4GODWsEAABwKgKMutyAFBT4UZ5dePufoAQAOWbfQAAAQEICgE70S0D5aKh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":407,"flow_packet_id":6,"flow_first_seen":1499347656622,"flow_last_seen":1499347661802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59530,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":407,"flow_packet_id":6,"flow_first_seen":1499347656622,"flow_last_seen":1499347661802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59530,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":408,"flow_packet_id":6,"flow_first_seen":1499347659123,"flow_last_seen":1499347664799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59556,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":408,"flow_packet_id":6,"flow_first_seen":1499347659123,"flow_last_seen":1499347664799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59556,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":409,"flow_packet_id":6,"flow_first_seen":1499347660441,"flow_last_seen":1499347665799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59570,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":409,"flow_packet_id":6,"flow_first_seen":1499347660441,"flow_last_seen":1499347665799,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59570,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":410,"flow_packet_id":6,"flow_first_seen":1499347661705,"flow_last_seen":1499347666802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59584,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":410,"flow_packet_id":6,"flow_first_seen":1499347661705,"flow_last_seen":1499347666802,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59584,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":411,"flow_packet_id":6,"flow_first_seen":1499347664226,"flow_last_seen":1499347669803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59610,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":411,"flow_packet_id":6,"flow_first_seen":1499347664226,"flow_last_seen":1499347669803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59610,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":412,"flow_packet_id":6,"flow_first_seen":1499347665473,"flow_last_seen":1499347670803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59624,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":412,"flow_packet_id":6,"flow_first_seen":1499347665473,"flow_last_seen":1499347670803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59624,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":450,"flow_packet_id":1,"flow_first_seen":1499347731797,"flow_last_seen":1499347731797,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60342,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":450,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347731,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA84K9AAD4G5SCsEAABwKgKMuu2AFCGTjKNAAAAAKACchDmwwAAAgQFtAQCCAoBO9IiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":450,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347731,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ67ZFR3+Dhk4yjqAScSB7XAAAAgQFtAQCCAoD5aOWATvSIgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":450,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347731,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04LBAAD4G5SesEAABwKgKMuu2AFCGTjKORUd\/hIAQAOUaZAAAAQEICgE70iID5aOW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":447,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347731,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cc1AAD4GVAusEAABwKgKMuuAAFD+Zrzgw0ETpoARAOULGgAAAQEICgE70icD5Z6J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":447,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347731,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0sD1AAEAGE5vAqAoyrBAAAQBQ64DDQROm\/ma84YARAOMGCQAAAQEICgPlo5sBO9In","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":447,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347731,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cc5AAD4GVAqsEAABwKgKMuuAAFD+Zrzhw0ETp4AQAOUGBwAAAQEICgE70icD5aOb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":451,"flow_packet_id":1,"flow_first_seen":1499347733083,"flow_last_seen":1499347733083,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60356,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":451,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347733,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/vJAAD4Gxt2sEAABwKgKMuvEAFCmnS2RAAAAAKACchDKIQAAAgQFtAQCCAoBO9NjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":451,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347733,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ68TrnH4qpp0tkqAScSC4ewAAAgQFtAQCCAoD5aTYATvTYwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":451,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347733,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vNAAD4GxuSsEAABwKgKMuvEAFCmnS2S65x+K4AQAOVXgwAAAQEICgE702MD5aTY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":452,"flow_packet_id":1,"flow_first_seen":1499347734348,"flow_last_seen":1499347734348,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60370,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":452,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347734,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gzpAAD4GQpasEAABwKgKMuvSAFDIKlelAAAAAKACchB9NgAAAgQFtAQCCAoBO9SfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":452,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347734,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ69JCAHRCyCpXpqAScSAd2QAAAgQFtAQCCAoD5aYUATvUnwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":452,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347734,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gztAAD4GQp2sEAABwKgKMuvSAFDIKlemQgB0Q4AQAOW83wAAAQEICgE71KAD5aYU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":448,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347734,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NhNAAD4Gj8WsEAABwKgKMuuaAFCuIPmLZSq54YARAOXRAQAAAQEICgE71RUD5aEQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":448,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347734,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H2tAAEAGpG3AqAoyrBAAAQBQ65plKrnhriD5jIARAOPLiAAAAQEICgPlpooBO9UV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":448,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347734,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NhRAAD4Gj8SsEAABwKgKMuuaAFCuIPmMZSq54oAQAOXLhgAAAQEICgE71RUD5aaK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":453,"flow_packet_id":1,"flow_first_seen":1499347735664,"flow_last_seen":1499347735664,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60384,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":453,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347735,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QgpAAD4Gg8asEAABwKgKMuvgAFB2opfiAAAAAKACchCNKgAAAgQFtAQCCAoBO9XoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":453,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347735,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6+DN1JXXdqKX46AScSB\/GgAAAgQFtAQCCAoD5addATvV6AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":453,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347735,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QgtAAD4Gg82sEAABwKgKMuvgAFB2opfjzdSV2IAQAOUeIQAAAQEICgE71ekD5add","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":449,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347735,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03uxAAD4G5uusEAABwKgKMuuoAFBoeQ41xcIs7YARAOUsEgAAAQEICgE71g8D5aJS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":449,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347735,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0i2lAAEAGOG\/AqAoyrBAAAQBQ66jFwiztaHkONoARAOMm4QAAAQEICgPlp4QBO9YP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":449,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347735,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03u1AAD4G5uqsEAABwKgKMuuoAFBoeQ42xcIs7oAQAOUm3wAAAQEICgE71g8D5aeE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":450,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347736,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04LFAAD4G5SasEAABwKgKMuu2AFCGTjKORUd\/hIARAOUVfAAAAQEICgE71wkD5aOW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":450,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347736,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01\/pAAEAG693AqAoyrBAAAQBQ67ZFR3+Ehk4yj4ARAOMQlQAAAQEICgPlqH4BO9cJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":450,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347736,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA04LJAAD4G5SWsEAABwKgKMuu2AFCGTjKPRUd\/hYAQAOUQkwAAAQEICgE71wkD5ah+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":454,"flow_packet_id":1,"flow_first_seen":1499347738229,"flow_last_seen":1499347738229,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60410,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":454,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347738,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bexAAD4GV+SsEAABwKgKMuv6AFCQibWGAAAAAKACchBTAwAAAgQFtAQCCAoBO9hqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":454,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347738,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ6\/pIUQYXkIm1h6AScSBXtgAAAgQFtAQCCAoD5aneATvYagEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":454,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347738,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0be1AAD4GV+usEAABwKgKMuv6AFCQibWHSFEGGIAQAOX2vQAAAQEICgE72GoD5ane","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":451,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347738,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vRAAD4GxuOsEAABwKgKMuvEAFCmnS2S65x+K4ARAOVR6AAAAQEICgE72P0D5aTY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":451,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347738,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01FlAAEAG737AqAoyrBAAAQBQ68TrnH4rpp0tk4ARAONMTwAAAQEICgPlqnIBO9j9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":451,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347738,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vVAAD4GxuKsEAABwKgKMuvEAFCmnS2T65x+LIAQAOVMTQAAAQEICgE72P0D5apy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":455,"flow_packet_id":1,"flow_first_seen":1499347739497,"flow_last_seen":1499347739497,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60424,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":455,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347739,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XjZAAD4GZ5qsEAABwKgKMuwIAFCYkYeRAAAAAKACchB3pQAAAgQFtAQCCAoBO9mnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":455,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347739,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7AiW6z+EmJGHkqAScSDzEwAAAgQFtAQCCAoD5asbATvZpwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":455,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347739,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XjdAAD4GZ6GsEAABwKgKMuwIAFCYkYeSlus\/hYAQAOWSGwAAAQEICgE72acD5asb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":452,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347739,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gzxAAD4GQpysEAABwKgKMuvSAFDIKlemQgB0Q4ARAOW3hwAAAQEICgE72fcD5aYU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":452,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347739,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03y9AAEAG5KjAqAoyrBAAAQBQ69JCAHRDyCpXp4ARAOOyMAAAAQEICgPlq2wBO9n3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":452,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347739,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gz1AAD4GQpusEAABwKgKMuvSAFDIKlenQgB0RIAQAOWyLgAAAQEICgE72fcD5ats","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":456,"flow_packet_id":1,"flow_first_seen":1499347740751,"flow_last_seen":1499347740751,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60438,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":456,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347740,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8V35AAD4GblKsEAABwKgKMuwWAFBKCo2eAAAAAKACchC+2AAAAgQFtAQCCAoBO9rgAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":456,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347740,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Bb1vAeUSgqNn6AScSASLAAAAgQFtAQCCAoD5axVATva4AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":456,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347740,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V39AAD4GblmsEAABwKgKMuwWAFBKCo2f9bwHlYAQAOWxMwAAAQEICgE72uAD5axV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":453,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347740,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QgxAAD4Gg8ysEAABwKgKMuvgAFB2opfjzdSV2IARAOUZGAAAAQEICgE72vED5add","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":453,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347740,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Ob5AAEAGihrAqAoyrBAAAQBQ6+DN1JXYdqKX5IARAOMUEAAAAQEICgPlrGYBO9rx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":453,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347740,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Qg1AAD4Gg8usEAABwKgKMuvgAFB2opfkzdSV2YAQAOUUDQAAAQEICgE72vID5axm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":379,"flow_packet_id":321,"flow_first_seen":1499347611162,"flow_last_seen":1499347679227,"flow_tot_l4_data_len":242655,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":755,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59042,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":413,"flow_packet_id":6,"flow_first_seen":1499347668069,"flow_last_seen":1499347673803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59650,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":413,"flow_packet_id":6,"flow_first_seen":1499347668069,"flow_last_seen":1499347673803,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59650,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":414,"flow_packet_id":6,"flow_first_seen":1499347669336,"flow_last_seen":1499347674804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59664,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":414,"flow_packet_id":6,"flow_first_seen":1499347669336,"flow_last_seen":1499347674804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59664,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":415,"flow_packet_id":6,"flow_first_seen":1499347670582,"flow_last_seen":1499347675804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59678,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":415,"flow_packet_id":6,"flow_first_seen":1499347670582,"flow_last_seen":1499347675804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59678,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":416,"flow_packet_id":6,"flow_first_seen":1499347673136,"flow_last_seen":1499347678804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59704,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":416,"flow_packet_id":6,"flow_first_seen":1499347673136,"flow_last_seen":1499347678804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59704,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":417,"flow_packet_id":6,"flow_first_seen":1499347674433,"flow_last_seen":1499347679471,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59718,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":417,"flow_packet_id":6,"flow_first_seen":1499347674433,"flow_last_seen":1499347679471,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59718,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":457,"flow_packet_id":1,"flow_first_seen":1499347743331,"flow_last_seen":1499347743331,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60464,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":457,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347743,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iytAAD4GOqWsEAABwKgKMuwwAFCeqlZOAAAAAKACchCe6QAAAgQFtAQCCAoBO91lAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":457,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347743,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7DCbKjZEnqpWT6AScSAbmgAAAgQFtAQCCAoD5a7aATvdZQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":457,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347743,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iyxAAD4GOqysEAABwKgKMuwwAFCeqlZPmyo2RYAQAOW6oQAAAQEICgE73WUD5a7a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":454,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347743,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0be5AAD4GV+qsEAABwKgKMuv6AFCQibWHSFEGGIARAOXxRgAAAQEICgE73eAD5ane","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":454,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347743,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qUxAAEAGGozAqAoyrBAAAQBQ6\/pIUQYYkIm1iIARAOPr0QAAAQEICgPlr1QBO93g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":454,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347743,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0be9AAD4GV+msEAABwKgKMuv6AFCQibWISFEGGYAQAOXrzwAAAQEICgE73eAD5a9U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":458,"flow_packet_id":1,"flow_first_seen":1499347744595,"flow_last_seen":1499347744595,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60478,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":458,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347744,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iGtAAD4GPWWsEAABwKgKMuw+AFAw9lbKAAAAAKACchAK2AAAAgQFtAQCCAoBO96hAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":458,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347744,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7D5E+wDpMPZWy6AScSAR1wAAAgQFtAQCCAoD5bAWATveoQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":458,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347744,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iGxAAD4GPWysEAABwKgKMuw+AFAw9lbLRPsA6oAQAOWw3gAAAQEICgE73qED5bAW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":455,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347744,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XjhAAD4GZ6CsEAABwKgKMuwIAFCYkYeSlus\/hYARAOWM5wAAAQEICgE73toD5asb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":455,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347744,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0j8pAAEAGNA7AqAoyrBAAAQBQ7AiW6z+FmJGHk4ARAOOHtAAAAQEICgPlsE8BO97a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":455,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347744,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XjlAAD4GZ5+sEAABwKgKMuwIAFCYkYeTlus\/hoAQAOWHsgAAAQEICgE73toD5bBP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":456,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347745,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4BAAD4GblisEAABwKgKMuwWAFBKCo2f9bwHlYARAOWsPgAAAQEICgE739QD5axV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":456,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347745,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ttxAAEAGDPzAqAoyrBAAAQBQ7Bb1vAeVSgqNoIARAOOnSwAAAQEICgPlsUkBO9\/U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":456,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347745,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0V4FAAD4GblesEAABwKgKMuwWAFBKCo2g9bwHloAQAOWnSQAAAQEICgE739QD5bFJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":457,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347746,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":457,"flow_packet_id":4,"flow_first_seen":1499347743331,"flow_last_seen":1499347746913,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60464,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":457,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347746,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hBxAAEAGP7zAqAoyrBAAAQBQ7DCbKjZFnqpXzoAQAOuyHQAAAQEICgPlslkBO+Dl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2800{"flow_id":457,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347746,"pkt_len":1837,"pkt":"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","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":457,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347746,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iy5AAD4GOqqsEAABwKgKMuwwAFCeqlfOmyo9MIAQAQCrGwAAAQEICgE74OYD5bJa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":459,"flow_packet_id":1,"flow_first_seen":1499347747187,"flow_last_seen":1499347747187,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60504,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":459,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347747,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eZ5AAD4GTDKsEAABwKgKMuxYAFDkpJi3AAAAAKACchASmgAAAgQFtAQCCAoBO+EpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":459,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347747,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7FgZ9EBx5KSYuKAScSACkAAAAgQFtAQCCAoD5bKeATvhKQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":459,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347747,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eZ9AAD4GTDmsEAABwKgKMuxYAFDkpJi4GfRAcoAQAOWhlwAAAQEICgE74SkD5bKe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":457,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347747,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2941{"flow_id":457,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347747,"pkt_len":1933,"pkt":"AMGxFOsxABm5CmnxCABFAAd\/hB9AAEAGOG7AqAoyrBAAAQBQ7DCbKj0wnqpaF4AYAPR+XQAAAQEICgPlsp8BO+EpSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjI5OjA2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Y\/0\/bOBT\/GaT9Dz6fNGASMb1pJ2BtJmhhsMGtowW200mRm7itwYkz22nhv79nJ2nD15IVCRXHfl8+z+\/5+T2\/WW3+0fnW7v\/sHqCxiQXqnu+fHLcR3iTk8n2bkE6\/g34c9U9PUMPbQj2jeGgIOfgHIzw2Jt0lZDqdetP3nlQj0j8jN1ZKw7IVw03teLzIRNh\/s\/pmten03MQi0a1HZDR2dnZy1px8pTlmNILhykozZoYiy7LJfmV80sJtmRiWmM3+bcowCvOvFjbsxhAr4iMKx1RpZlrn\/cPNbYxILnOlabgRzL\/IRMIUHXDBze0uOmNDwULDItRWUmvU44ahXqh4angyQus\/er0NtLuLOjROUMkrGLpkA7SXpoKH1HCZoPXOxeXeBpo0vMYWetdhEyZkGgO0d02SKy5QCJ5cI8VEC2tzK5geM2YwMmBNYUSoNUZjxYYt7HkE\/qLJlNpZElOeeG6ZPJTGYStKOf\/xmI4Ygam7koZ0Ysk8tzCToZ21VQhXdELzWYy0Cu8AudLufxcUeFca+02SUxaeI4Xr7Hggo1sUCqqt12XMcO7SiE8Qj1rY+g4sYqrwemXJCqnMrzR5PHqAxBmpiZAj6aXJCCMqIBAWOGpuN2AFdQ9U200OwHFZRfuDtSClUcSi3CAgyERpp13dFzK8tlsjOJJJCKqvW3jKk0hOPVhyOFpruSXeGi5ZgYHecZeH\/SPYtiahsMuC+6svEcgTOH1ZaKe0l47TZ+TfJ8X+cWWmnlo4cFm6QN+MBvs9O0QEjh9Mos5+RRnJhL\/Ehk4q55tDeAxUZhh5BtXjDNjft\/\/RoVRhTQ\/cF8huWFgHgKPHflvGMU0idJxcMeeR5VCEWg3roHD0gKJ3dric4iEn3qcUjmqLA2cWsQVR8iJ+7B9yONzHdkYvvTdZKiSN6uxOwVHAOHdfS\/qHpgZurlouKljcuWVhphhq73X77aO95aDoX4LXweHo4Ux\/P3mtYLUSgwFcbrWcUuG6hwat79vpjeVQTRm9DngtSCUL9i9hhHpM22hFx52a6fW+3Butg1pAcgbsQz0Dtcq30yW3wopTFf2a5VXUi3CoEses+HoFNLrubugSRc9IdRfCkleQO4tQXS68Dudk2Lf1I8RHPlVvO4CfJ0O5QF2FCvvdoy6cjqGsp4gOZGYWqJnRYH\/PDl9vW22ht1D9nAj7J258D0BRsd2p\/Z4uBG0JOy8EoZOxq4Vuu1YtBJvjxu90F1AyN4qCuSJ8Mqtgg1BGLKCK0aJ+HkoVo4TGUK0DP5S9LsW18J8YQbc0loD980G\/qE2baWHx5ZiaNY1uZaYc86eysk7SrFr840K0\/Z3Vt1UinQ1iDmQTKjL47OWfhTaS+nlTQSzKHG+qmH\/EhJCoaDV8qPy1FAw8PFpfa3953+genp6dbJ0ffNjZ3vr728+T753Ovz\/Pvv44ON\/f+dD40v16ubV19Hnn+9bZ9kVve23jY1VCJMPMdlpeKOU1ZxsfZy0JwFHMuWbu4eb4L\/8UDrwLfxXT\/LKCSbtWxAdE4zyubPOpi4ZVTqlOXc8KIcpubJgR59lNDZ4NZp4NnGehHaNqBJ0ohluJJtfY\/31ZsyiujQ+4A6hSDFPBAbR1YG7Qhv7KBL2i9ayJ8Xl5i3GyxJvya56yiFMn2n5VLdel5U9je7mM5\/EUZoYjPkvGoYzt9bA5pL889yTxKIgXML5Ic46TCqZMw0l4Vt0D6qqOIrvloV52rgMF\/W7+W6awJ1JekXdCwaianebH8qK+1YbFgb1LHs0Pg8wY22cX+eGCsymC45\/OcnYq0ywNSjKZtPOsP3902AWK83QdPXHbT0BiMAaJNhw\/ASRXU7wtHdEScrqGNrCPFsLqQTIM2esC007mQmh2N6ngI8jbgg0hfzZZ7J9rpmze3W0S+EI0inlSuBC+y+IAndjXpYIGJM4p4FY\/7vSKlYhre31EpRefdOhQSnPnsSX1l3ntSh+7VqsJmNiLM38XdC92\/v\/\/r8wWkhQAAA==","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":457,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347747,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izBAAD4GOqisEAABwKgKMuwwAFCeqloXmypEe4AQAR2g4AAAAQEICgE74SsD5bKf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":457,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":457,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":457,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0izJAAD4GOqasEAABwKgKMuwwAFCeqluWmypLZYAQATmWYgAAAQEICgE74icD5bOc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":460,"flow_packet_id":1,"flow_first_seen":1499347748472,"flow_last_seen":1499347748472,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60518,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":460,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W1pAAD4GanasEAABwKgKMuxmAFDolLkwAAAAAKACchDs4QAAAgQFtAQCCAoBO+JqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":460,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Gb4tplB6JS5MaAScSCkAwAAAgQFtAQCCAoD5bPfATviagEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":460,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W1tAAD4Gan2sEAABwKgKMuxmAFDolLkx+LaZQoAQAOVDCgAAAQEICgE74msD5bPf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":457,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2932{"flow_id":457,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347748,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":461,"flow_packet_id":1,"flow_first_seen":1499347749751,"flow_last_seen":1499347749751,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60532,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":461,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347749,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IJFAAD4GpT+sEAABwKgKMux0AFD35MM7AAAAAKACchDSOAAAAgQFtAQCCAoBO+OqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":461,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347749,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7HSHR7QM9+TDPKAScSDevgAAAgQFtAQCCAoD5bUfATvjqgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":461,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347749,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IJJAAD4GpUasEAABwKgKMux0AFD35MM8h0e0DYAQAOV9xgAAAQEICgE746oD5bUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":458,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347749,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iG1AAD4GPWusEAABwKgKMuw+AFAw9lbLRPsA6oARAOWrwgAAAQEICgE747wD5bAW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":458,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347749,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0tdtAAEAGDf3AqAoyrBAAAQBQ7D5E+wDqMPZWzIARAOOmqAAAAQEICgPltTEBO+O8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":458,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347749,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iG5AAD4GPWqsEAABwKgKMuw+AFAw9lbMRPsA64AQAOWmpQAAAQEICgE7470D5bUx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":419,"flow_packet_id":6,"flow_first_seen":1499347678198,"flow_last_seen":1499347683805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59758,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":419,"flow_packet_id":6,"flow_first_seen":1499347678198,"flow_last_seen":1499347683805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59758,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":420,"flow_packet_id":6,"flow_first_seen":1499347679469,"flow_last_seen":1499347684805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":420,"flow_packet_id":6,"flow_first_seen":1499347679469,"flow_last_seen":1499347684805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59772,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":421,"flow_packet_id":6,"flow_first_seen":1499347680746,"flow_last_seen":1499347685805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59786,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":421,"flow_packet_id":6,"flow_first_seen":1499347680746,"flow_last_seen":1499347685805,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59786,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":422,"flow_packet_id":6,"flow_first_seen":1499347683313,"flow_last_seen":1499347688806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":422,"flow_packet_id":6,"flow_first_seen":1499347683313,"flow_last_seen":1499347688806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59812,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":423,"flow_packet_id":6,"flow_first_seen":1499347684563,"flow_last_seen":1499347689806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59826,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":423,"flow_packet_id":6,"flow_first_seen":1499347684563,"flow_last_seen":1499347689806,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59826,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":462,"flow_packet_id":1,"flow_first_seen":1499347752308,"flow_last_seen":1499347752308,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60558,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":462,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347752,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8qStAAD4GHKWsEAABwKgKMuyOAFBMoE8CAAAAAKACchDvHQAAAgQFtAQCCAoBO+YpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":462,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347752,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7I5f6lZGTKBPA6AScSB+SAAAAgQFtAQCCAoD5beeATvmKQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":462,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347752,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qSxAAD4GHKysEAABwKgKMuyOAFBMoE8DX+pWR4AQAOUdTwAAAQEICgE75ioD5bee","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":459,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347752,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eaBAAD4GTDisEAABwKgKMuxYAFDkpJi4GfRAcoARAOWcFAAAAQEICgE75qsD5bKe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":459,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347752,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+G1AAEAGy2rAqAoyrBAAAQBQ7FgZ9EBy5KSYuYARAOOWlAAAAQEICgPluB8BO+ar","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":459,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347752,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eaFAAD4GTDesEAABwKgKMuxYAFDkpJi5GfRAc4AQAOWWkgAAAQEICgE75qsD5bgf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":463,"flow_packet_id":1,"flow_first_seen":1499347753649,"flow_last_seen":1499347753649,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60572,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":463,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347753,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA825ZAAD4G6jmsEAABwKgKMuycAFCJVjzvAAAAAKACchDDHAAAAgQFtAQCCAoBO+d5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":463,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347753,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Jyb\/4pAiVY88KAScSDg6AAAAgQFtAQCCAoD5bjtATvneQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":463,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347753,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA025dAAD4G6kCsEAABwKgKMuycAFCJVjzwm\/+KQYAQAOV\/8AAAAQEICgE753kD5bjt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":460,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347753,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W1xAAD4GanysEAABwKgKMuxmAFDolLkx+LaZQoARAOU9zwAAAQEICgE756UD5bPf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":460,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347753,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IFhAAEAGo4DAqAoyrBAAAQBQ7Gb4tplC6JS5MoARAOM4lQAAAQEICgPluRoBO+el","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":460,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347753,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W11AAD4GanusEAABwKgKMuxmAFDolLky+LaZQ4AQAOU4kwAAAQEICgE756UD5bka","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":461,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347754,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IJNAAD4GpUWsEAABwKgKMux0AFD35MM8h0e0DYARAOV40AAAAQEICgE76J8D5bUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":461,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347754,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DhlAAEAGtb\/AqAoyrBAAAQBQ7HSHR7QN9+TDPYARAONz3AAAAQEICgPluhQBO+if","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":461,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347754,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IJRAAD4GpUSsEAABwKgKMux0AFD35MM9h0e0DoAQAOVz2gAAAQEICgE76J8D5boU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":464,"flow_packet_id":1,"flow_first_seen":1499347756244,"flow_last_seen":1499347756244,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60598,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":464,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347756,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sh5AAD4GE7KsEAABwKgKMuy2AFCIyFgfAAAAAKACchCl2AAAAgQFtAQCCAoBO+oBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":464,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347756,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Lb17AxJiMhYIKAScSDlJQAAAgQFtAQCCAoD5bt2ATvqAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":464,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347756,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sh9AAD4GE7msEAABwKgKMuy2AFCIyFgg9ewMSoAQAOWELAAAAQEICgE76gID5bt2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":465,"flow_packet_id":1,"flow_first_seen":1499347757502,"flow_last_seen":1499347757502,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60612,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":465,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347757,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UWhAAD4GdGisEAABwKgKMuzEAFA\/lLpUAAAAAKACchCLjgAAAgQFtAQCCAoBO+s8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":465,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347757,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7MQtkPNXP5S6VaAScSCq7wAAAgQFtAQCCAoD5bywATvrPAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":465,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347757,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UWlAAD4GdG+sEAABwKgKMuzEAFA\/lLpVLZDzWIAQAOVJ9wAAAQEICgE76zwD5byw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":462,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347757,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS1AAD4GHKusEAABwKgKMuyOAFBMoE8DX+pWR4ARAOUX6wAAAQEICgE7640D5bee","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":462,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347757,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA060VAAEAG2JLAqAoyrBAAAQBQ7I5f6lZHTKBPBIARAOMSiAAAAQEICgPlvQIBO+uN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":462,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347757,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0qS5AAD4GHKqsEAABwKgKMuyOAFBMoE8EX+pWSIAQAOUShgAAAQEICgE7640D5b0C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":466,"flow_packet_id":1,"flow_first_seen":1499347758774,"flow_last_seen":1499347758774,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60626,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":466,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347758,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83kZAAD4G54msEAABwKgKMuzSAFAZPzI8AAAAAKACchA4sAAAAgQFtAQCCAoBO+x6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":466,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347758,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7NL2+p6BGT8yPaAScSDiPQAAAgQFtAQCCAoD5b3vATvsegEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":466,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347758,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03kdAAD4G55CsEAABwKgKMuzSAFAZPzI99vqegoAQAOWBRQAAAQEICgE77HoD5b3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":463,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347758,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA025hAAD4G6j+sEAABwKgKMuycAFCJVjzwm\/+KQYARAOV64QAAAQEICgE77IcD5bjt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":463,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347758,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0N71AAEAGjBvAqAoyrBAAAQBQ7Jyb\/4pBiVY88YARAON10wAAAQEICgPlvfwBO+yH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":463,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347758,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA025lAAD4G6j6sEAABwKgKMuycAFCJVjzxm\/+KQoAQAOV10QAAAQEICgE77IcD5b38","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":467,"flow_packet_id":1,"flow_first_seen":1499347761418,"flow_last_seen":1499347761418,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60652,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":467,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347761,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8apdAAD4GWzmsEAABwKgKMuzsAFC\/aIWYAAAAAKACchA8ewAAAgQFtAQCCAoBO+8PAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":467,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347761,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7OwFUgVYv2iFmaAScSBuRgAAAgQFtAQCCAoD5cCEATvvDwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":467,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347761,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aphAAD4GW0CsEAABwKgKMuzsAFC\/aIWZBVIFWYAQAOUNTgAAAQEICgE77w8D5cCE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":464,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347761,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0siBAAD4GE7isEAABwKgKMuy2AFCIyFgg9ewMSoARAOV+uAAAAQEICgE773UD5bt2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":464,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347761,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zKBAAEAG9zfAqAoyrBAAAQBQ7Lb17AxKiMhYIYARAON5RQAAAQEICgPlwOoBO+91","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":464,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347761,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0siFAAD4GE7esEAABwKgKMuy2AFCIyFgh9ewMS4AQAOV5QgAAAQEICgE773YD5cDq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":424,"flow_packet_id":6,"flow_first_seen":1499347687089,"flow_last_seen":1499347692807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":424,"flow_packet_id":6,"flow_first_seen":1499347687089,"flow_last_seen":1499347692807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59852,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":425,"flow_packet_id":6,"flow_first_seen":1499347688364,"flow_last_seen":1499347693807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59866,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":425,"flow_packet_id":6,"flow_first_seen":1499347688364,"flow_last_seen":1499347693807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59866,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":426,"flow_packet_id":6,"flow_first_seen":1499347689613,"flow_last_seen":1499347694807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59880,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":426,"flow_packet_id":6,"flow_first_seen":1499347689613,"flow_last_seen":1499347694807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59880,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":427,"flow_packet_id":6,"flow_first_seen":1499347692128,"flow_last_seen":1499347697807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59906,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":427,"flow_packet_id":6,"flow_first_seen":1499347692128,"flow_last_seen":1499347697807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59906,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":428,"flow_packet_id":6,"flow_first_seen":1499347693386,"flow_last_seen":1499347698807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59920,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":428,"flow_packet_id":6,"flow_first_seen":1499347693386,"flow_last_seen":1499347698807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59920,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":429,"flow_packet_id":6,"flow_first_seen":1499347694661,"flow_last_seen":1499347699807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59934,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":429,"flow_packet_id":6,"flow_first_seen":1499347694661,"flow_last_seen":1499347699807,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59934,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":468,"flow_packet_id":1,"flow_first_seen":1499347762675,"flow_last_seen":1499347762675,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60666,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":468,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347762,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U3VAAD4GclusEAABwKgKMuz6AFDBm6M8AAAAAKACchAbXAAAAgQFtAQCCAoBO\/BJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":468,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347762,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7Proa5y3wZujPaAScSDRcwAAAgQFtAQCCAoD5cG+ATvwSQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":468,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347762,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U3ZAAD4GcmKsEAABwKgKMuz6AFDBm6M96GucuIAQAOVwewAAAQEICgE78EkD5cG+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":465,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347762,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UWpAAD4GdG6sEAABwKgKMuzEAFA\/lLpVLZDzWIARAOVEwgAAAQEICgE78HAD5byw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":465,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347762,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MrxAAEAGkRzAqAoyrBAAAQBQ7MQtkPNYP5S6VoARAOM\/jwAAAQEICgPlweQBO\/Bw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":465,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347762,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UWtAAD4GdG2sEAABwKgKMuzEAFA\/lLpWLZDzWYAQAOU\/jQAAAQEICgE78HAD5cHk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":466,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347763,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03khAAD4G54+sEAABwKgKMuzSAFAZPzI99vqegoARAOV8VAAAAQEICgE78WoD5b3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":466,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347763,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XFxAAEAGZ3zAqAoyrBAAAQBQ7NL2+p6CGT8yPoAQAON3ZgAAAQEICgPlwt8BO\/Fq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":466,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347763,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XF1AAEAGZ3vAqAoyrBAAAQBQ7NL2+p6CGT8yPoARAON3ZQAAAQEICgPlwt8BO\/Fq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":466,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347763,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0VHVAAD4GcWOsEAABwKgKMuzSAFAZPzI+9vqeg4AQAOV3YwAAAQEICgE78WoD5cLf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":469,"flow_packet_id":1,"flow_first_seen":1499347765229,"flow_last_seen":1499347765229,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60692,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":469,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347765,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oyZAAD4GIqqsEAABwKgKMu0UAFACp1HuAAAAAKACchApBgAAAgQFtAQCCAoBO\/LIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":469,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347765,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7RRH+ZWsAqdR76AScSCEHQAAAgQFtAQCCAoD5cQ8ATvyyAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":469,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347765,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oydAAD4GIrGsEAABwKgKMu0UAFACp1HvR\/mVrYAQAOUjJQAAAQEICgE78sgD5cQ8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":470,"flow_packet_id":1,"flow_first_seen":1499347766506,"flow_last_seen":1499347766506,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60706,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":470,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347766,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80XFAAD4G9F6sEAABwKgKMu0iAFC65SV2AAAAAKACchCb8gAAAgQFtAQCCAoBO\/QHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":470,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347766,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7SI0\/7eouuUld6AScSDmxwAAAgQFtAQCCAoD5cV8ATv0BwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":470,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347766,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XJAAD4G9GWsEAABwKgKMu0iAFC65SV3NP+3qYAQAOWFzwAAAQEICgE79AcD5cV8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":467,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347766,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aplAAD4GWz+sEAABwKgKMuzsAFC\/aIWZBVIFWYARAOUIBAAAAQEICgE79FgD5cCE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":467,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347766,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0wJVAAEAGA0PAqAoyrBAAAQBQ7OwFUgVZv2iFmoARAOMCvQAAAQEICgPlxcwBO\/RY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":467,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347766,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0appAAD4GWz6sEAABwKgKMuzsAFC\/aIWaBVIFWoAQAOUCuwAAAQEICgE79FgD5cXM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":471,"flow_packet_id":1,"flow_first_seen":1499347767793,"flow_last_seen":1499347767793,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60720,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":471,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347767,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sEFAAD4GFY+sEAABwKgKMu0wAFC7\/0UIAAAAAKACchB59gAAAgQFtAQCCAoBO\/VJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":471,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347767,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7TCCU6kzu\/9FCaAScSCEqwAAAgQFtAQCCAoD5ca9ATv1SQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":471,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347767,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sEJAAD4GFZasEAABwKgKMu0wAFC7\/0UJglOpNIAQAOUjswAAAQEICgE79UkD5ca9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":468,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347767,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U3dAAD4GcmGsEAABwKgKMuz6AFDBm6M96GucuIARAOVrcQAAAQEICgE79VID5cG+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":468,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347767,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Wn9AAEAGaVnAqAoyrBAAAQBQ7Proa5y4wZujPoARAONmaQAAAQEICgPlxscBO\/VS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":468,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347767,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U3hAAD4GcmCsEAABwKgKMuz6AFDBm6M+6GucuYAQAOVmZwAAAQEICgE79VID5cbH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":472,"flow_packet_id":1,"flow_first_seen":1499347769077,"flow_last_seen":1499347769077,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60734,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":472,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347769,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8n3VAAD4GJlusEAABwKgKMu0+AFAozWn\/AAAAAKACchDm4gAAAgQFtAQCCAoBO\/aKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":472,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347769,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7T59G4FkKM1qAKAScSAdXgAAAgQFtAQCCAoD5cf+ATv2igEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":472,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347769,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0n3ZAAD4GJmKsEAABwKgKMu0+AFAozWoAfRuBZYAQAOW8ZQAAAQEICgE79ooD5cf+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":473,"flow_packet_id":1,"flow_first_seen":1499347770345,"flow_last_seen":1499347770345,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60748,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":473,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347770,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8anZAAD4GW1qsEAABwKgKMu1MAFBCsJ2xAAAAAKACchCYAgAAAgQFtAQCCAoBO\/fHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":473,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347770,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7UyjrEwnQrCdsqAScSDb7AAAAgQFtAQCCAoD5ck7ATv3xwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":473,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347770,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0andAAD4GW2GsEAABwKgKMu1MAFBCsJ2yo6xMKIAQAOV69AAAAQEICgE798cD5ck7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":469,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347770,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oyhAAD4GIrCsEAABwKgKMu0UAFACp1HvR\/mVrYARAOUdrAAAAQEICgE7+EAD5cQ8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":469,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347770,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XBhAAEAGZ8DAqAoyrBAAAQBQ7RRH+ZWtAqdR8IARAOMYNAAAAQEICgPlybUBO\/hA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":469,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347770,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oylAAD4GIq+sEAABwKgKMu0UAFACp1HwR\/mVroAQAOUYMgAAAQEICgE7+EAD5cm1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":474,"flow_packet_id":1,"flow_first_seen":1499347771635,"flow_last_seen":1499347771635,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60762,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":474,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347771,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jzNAAD4GNp2sEAABwKgKMu1aAFBxsHY6AAAAAKACchCPKQAAAgQFtAQCCAoBO\/kJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":474,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347771,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7VoJ3i\/mcbB2O6AScSCH4AAAAgQFtAQCCAoD5cp+ATv5CQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":474,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347771,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jzRAAD4GNqSsEAABwKgKMu1aAFBxsHY7Cd4v54AQAOUm6AAAAQEICgE7+QkD5cp+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":470,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347771,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XNAAD4G9GSsEAABwKgKMu0iAFC65SV3NP+3qYARAOWAmwAAAQEICgE7+ToD5cV8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":470,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347771,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fQZAAEAGRtLAqAoyrBAAAQBQ7SI0\/7epuuUleIARAON7aQAAAQEICgPlyq8BO\/k6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":470,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347771,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XRAAD4G9GOsEAABwKgKMu0iAFC65SV4NP+3qoAQAOV7ZwAAAQEICgE7+ToD5cqv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":430,"flow_packet_id":6,"flow_first_seen":1499347697189,"flow_last_seen":1499347702808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":430,"flow_packet_id":6,"flow_first_seen":1499347697189,"flow_last_seen":1499347702808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59960,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":431,"flow_packet_id":6,"flow_first_seen":1499347698449,"flow_last_seen":1499347703808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":431,"flow_packet_id":6,"flow_first_seen":1499347698449,"flow_last_seen":1499347703808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59974,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":432,"flow_packet_id":6,"flow_first_seen":1499347699724,"flow_last_seen":1499347704808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":432,"flow_packet_id":6,"flow_first_seen":1499347699724,"flow_last_seen":1499347704808,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59988,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":433,"flow_packet_id":6,"flow_first_seen":1499347702287,"flow_last_seen":1499347707810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60014,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":433,"flow_packet_id":6,"flow_first_seen":1499347702287,"flow_last_seen":1499347707810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60014,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":434,"flow_packet_id":6,"flow_first_seen":1499347703726,"flow_last_seen":1499347708810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60028,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":434,"flow_packet_id":6,"flow_first_seen":1499347703726,"flow_last_seen":1499347708810,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60028,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":435,"flow_packet_id":6,"flow_first_seen":1499347705116,"flow_last_seen":1499347710811,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60042,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":435,"flow_packet_id":6,"flow_first_seen":1499347705116,"flow_last_seen":1499347710811,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60042,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":436,"flow_packet_id":6,"flow_first_seen":1499347706399,"flow_last_seen":1499347711812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60056,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":436,"flow_packet_id":6,"flow_first_seen":1499347706399,"flow_last_seen":1499347711812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60056,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":471,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347772,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sENAAD4GFZWsEAABwKgKMu0wAFC7\/0UJglOpNIARAOUexwAAAQEICgE7+jQD5ca9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":471,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347772,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Yp1AAEAGYTvAqAoyrBAAAQBQ7TCCU6k0u\/9FCoARAOMZ3AAAAQEICgPly6kBO\/o0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":471,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347772,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sERAAD4GFZSsEAABwKgKMu0wAFC7\/0UKglOpNYAQAOUZ2QAAAQEICgE7+jUD5cup","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":475,"flow_packet_id":1,"flow_first_seen":1499347774205,"flow_last_seen":1499347774205,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60788,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":475,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347774,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pr5AAD4GHxKsEAABwKgKMu10AFBYS10yAAAAAKACchC++QAAAgQFtAQCCAoBO\/uMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":475,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347774,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7XSGo4hpWEtdM6AScSDf5QAAAgQFtAQCCAoD5c0AATv7jAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":475,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347774,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pr9AAD4GHxmsEAABwKgKMu10AFBYS10zhqOIaoAQAOV+7QAAAQEICgE7+4wD5c0A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":472,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347774,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0n3dAAD4GJmGsEAABwKgKMu0+AFAozWoAfRuBZYARAOW2xgAAAQEICgE7\/CgD5cf+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":472,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347774,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TPhAAEAGduDAqAoyrBAAAQBQ7T59G4FlKM1qAYARAOOxKAAAAQEICgPlzZ0BO\/wo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":472,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347774,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0n3hAAD4GJmCsEAABwKgKMu0+AFAozWoBfRuBZoAQAOWxJQAAAQEICgE7\/CkD5c2d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":476,"flow_packet_id":1,"flow_first_seen":1499347775487,"flow_last_seen":1499347775487,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60802,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":476,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347775,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kr1AAD4GMxOsEAABwKgKMu2CAFDDYm5xAAAAAKACchBBVQAAAgQFtAQCCAoBO\/zMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":476,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347775,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7YJb\/j+gw2JucqAScSDUbgAAAgQFtAQCCAoD5c5BATv8zAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":476,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347775,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kr5AAD4GMxqsEAABwKgKMu2CAFDDYm5yW\/4\/oYAQAOVzdgAAAQEICgE7\/MwD5c5B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":473,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347775,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0anhAAD4GW2CsEAABwKgKMu1MAFBCsJ2yo6xMKIARAOV1lwAAAQEICgE7\/SMD5ck7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":473,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347775,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gr9AAEAGQRnAqAoyrBAAAQBQ7UyjrEwoQrCds4ARAONwPAAAAQEICgPlzpcBO\/0j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":473,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347775,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0anlAAD4GW1+sEAABwKgKMu1MAFBCsJ2zo6xMKYAQAOVwOgAAAQEICgE7\/SMD5c6X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":477,"flow_packet_id":1,"flow_first_seen":1499347776753,"flow_last_seen":1499347776753,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60816,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":477,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347776,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KqpAAD4GmyasEAABwKgKMu2QAFCtQdSjAAAAAKACchDv+AAAAgQFtAQCCAoBO\/4JAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":477,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347776,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7ZCBpSP4rUHUpKAScSB31wAAAgQFtAQCCAoD5c99ATv+CQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":477,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347776,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KqtAAD4Gmy2sEAABwKgKMu2QAFCtQdSkgaUj+YAQAOUW3wAAAQEICgE7\/gkD5c99","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":474,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347776,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jzVAAD4GNqOsEAABwKgKMu1aAFBxsHY7Cd4v54ARAOUh0wAAAQEICgE7\/h0D5cp+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":474,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347776,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04HZAAEAG42HAqAoyrBAAAQBQ7VoJ3i\/ncbB2PIARAOMcwQAAAQEICgPlz5EBO\/4d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":474,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347776,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jzZAAD4GNqKsEAABwKgKMu1aAFBxsHY8Cd4v6IAQAOUcvwAAAQEICgE7\/h0D5c+R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":478,"flow_packet_id":1,"flow_first_seen":1499347779333,"flow_last_seen":1499347779333,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60842,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":478,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347779,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eChAAD4GTaisEAABwKgKMu2qAFDZQnimAAAAAKACchAdVgAAAgQFtAQCCAoBPACOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":478,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347779,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7aoAKzpS2UJ4p6AScSAN0AAAAgQFtAQCCAoD5dICATwAjgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":478,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347779,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eClAAD4GTa+sEAABwKgKMu2qAFDZQninACs6U4AQAOWs1wAAAQEICgE8AI4D5dIC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":475,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347779,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0psBAAD4GHxisEAABwKgKMu10AFBYS10zhqOIaoARAOV5bQAAAQEICgE8AQsD5c0A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":475,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347779,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WupAAEAGaO7AqAoyrBAAAQBQ7XSGo4hqWEtdNIARAONz7gAAAQEICgPl0oABPAEL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":475,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347779,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0psFAAD4GHxesEAABwKgKMu10AFBYS100hqOIa4AQAOVz7AAAAQEICgE8AQsD5dKA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":479,"flow_packet_id":1,"flow_first_seen":1499347780605,"flow_last_seen":1499347780605,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60856,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":479,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347780,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Kg9AAD4Gm8GsEAABwKgKMu24AFBtBSvDAAAAAKACchDVKgAAAgQFtAQCCAoBPAHMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":479,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347780,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7bgVufFFbQUrxKAScSD35AAAAgQFtAQCCAoD5dNAATwBzAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":479,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347780,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KhBAAD4Gm8isEAABwKgKMu24AFBtBSvEFbnxRoAQAOWW7AAAAQEICgE8AcwD5dNA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":476,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347780,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kr9AAD4GMxmsEAABwKgKMu2CAFDDYm5yW\/4\/oYARAOVuPAAAAQEICgE8AgUD5c5B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":476,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347780,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07NtAAEAG1vzAqAoyrBAAAQBQ7YJb\/j+hw2Juc4ARAONpBAAAAQEICgPl03oBPAIF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":476,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347780,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ksBAAD4GMxisEAABwKgKMu2CAFDDYm5zW\/4\/ooAQAOVpAgAAAQEICgE8AgUD5dN6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":477,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347781,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KqxAAD4GmyysEAABwKgKMu2QAFCtQdSkgaUj+YARAOUR6AAAAQEICgE8Av8D5c99","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":477,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347781,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0941AAEAGzErAqAoyrBAAAQBQ7ZCBpSP5rUHUpYARAOMM8gAAAQEICgPl1HQBPAL\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":477,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347781,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Kq1AAD4GmyusEAABwKgKMu2QAFCtQdSlgaUj+oAQAOUM8AAAAQEICgE8Av8D5dR0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":437,"flow_packet_id":6,"flow_first_seen":1499347709252,"flow_last_seen":1499347714812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60084,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":437,"flow_packet_id":6,"flow_first_seen":1499347709252,"flow_last_seen":1499347714812,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60084,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":438,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60134,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":438,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60134,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":439,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":439,"flow_packet_id":6,"flow_first_seen":1499347712277,"flow_last_seen":1499347717814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60136,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":440,"flow_packet_id":6,"flow_first_seen":1499347713588,"flow_last_seen":1499347718814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60154,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":440,"flow_packet_id":6,"flow_first_seen":1499347713588,"flow_last_seen":1499347718814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60154,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":441,"flow_packet_id":7,"flow_first_seen":1499347716243,"flow_last_seen":1499347721814,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60180,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":441,"flow_packet_id":7,"flow_first_seen":1499347716243,"flow_last_seen":1499347721814,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60180,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":442,"flow_packet_id":6,"flow_first_seen":1499347717533,"flow_last_seen":1499347722814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60194,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":442,"flow_packet_id":6,"flow_first_seen":1499347717533,"flow_last_seen":1499347722814,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60194,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":480,"flow_packet_id":1,"flow_first_seen":1499347783176,"flow_last_seen":1499347783176,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60882,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":480,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347783,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8URhAAD4GdLisEAABwKgKMu3SAFAelFVWAAAAAKACchD3bAAAAgQFtAQCCAoBPAROAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":480,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347783,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7dLS\/qxUHpRVV6AScSCfTwAAAgQFtAQCCAoD5dXDATwETgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":480,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347783,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0URlAAD4GdL+sEAABwKgKMu3SAFAelFVX0v6sVYAQAOU+VgAAAQEICgE8BE8D5dXD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":481,"flow_packet_id":1,"flow_first_seen":1499347784519,"flow_last_seen":1499347784519,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60896,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":481,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347784,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CDdAAD4GvZmsEAABwKgKMu3gAFDyig2pAAAAAKACchBpxQAAAgQFtAQCCAoBPAWeAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":481,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347784,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7eBCNUBH8ooNqqAScSANLwAAAgQFtAQCCAoD5dcTATwFngEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":481,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347784,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CDhAAD4GvaCsEAABwKgKMu3gAFDyig2qQjVASIAQAOWsNQAAAQEICgE8BZ8D5dcT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":478,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347784,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eCpAAD4GTa6sEAABwKgKMu2qAFDZQninACs6U4ARAOWndwAAAQEICgE8Be0D5dIC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":478,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347784,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07TFAAEAG1qbAqAoyrBAAAQBQ7aoAKzpT2UJ4qIARAOOiGAAAAQEICgPl12IBPAXt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":478,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347784,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eCtAAD4GTa2sEAABwKgKMu2qAFDZQnioACs6VIAQAOWiFgAAAQEICgE8Be0D5ddi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":479,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347785,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KhFAAD4Gm8esEAABwKgKMu24AFBtBSvEFbnxRoARAOWR0AAAAQEICgE8BucD5dNA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":479,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347785,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0KRpAAEAGmr7AqAoyrBAAAQBQ7bgVufFGbQUrxYARAOOMtQAAAQEICgPl2FwBPAbn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":479,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347785,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KhJAAD4Gm8asEAABwKgKMu24AFBtBSvFFbnxR4AQAOWMswAAAQEICgE8BucD5dhc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":482,"flow_packet_id":1,"flow_first_seen":1499347787097,"flow_last_seen":1499347787097,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60922,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":482,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347787,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87ftAAD4G19SsEAABwKgKMu36AFCLoOXYAAAAAKACchD14AAAAgQFtAQCCAoBPAgjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":482,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347787,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7fr\/T2fti6Dl2aAScSCyBQAAAgQFtAQCCAoD5dmXATwIIwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":482,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347787,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07fxAAD4G19usEAABwKgKMu36AFCLoOXZ\/09n7oAQAOVRDQAAAQEICgE8CCMD5dmX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":483,"flow_packet_id":1,"flow_first_seen":1499347788375,"flow_last_seen":1499347788375,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60936,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":483,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347788,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8h61AAD4GPiOsEAABwKgKMu4IAFB6rY7PAAAAAKACchBckAAAAgQFtAQCCAoBPAliAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":483,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347788,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7gg8gqx8eq2O0KAScSCVswAAAgQFtAQCCAoD5drXATwJYgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":483,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347788,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h65AAD4GPiqsEAABwKgKMu4IAFB6rY7QPIKsfYAQAOU0uwAAAQEICgE8CWID5drX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":480,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347788,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0URpAAD4GdL6sEAABwKgKMu3SAFAelFVX0v6sVYARAOU4zwAAAQEICgE8CdUD5dXD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":480,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347788,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dx9AAEAGTLnAqAoyrBAAAQBQ7dLS\/qxVHpRVWIARAOMzSQAAAQEICgPl20oBPAnV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":480,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347788,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0URtAAD4GdL2sEAABwKgKMu3SAFAelFVY0v6sVoAQAOUzRwAAAQEICgE8CdUD5dtK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":484,"flow_packet_id":1,"flow_first_seen":1499347789640,"flow_last_seen":1499347789640,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60950,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":484,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347789,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83o1AAD4G50KsEAABwKgKMu4WAFDDudQTAAAAAKACchDM9QAAAgQFtAQCCAoBPAqeAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":484,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347789,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7hacXl08w7nUFKAScSD0QAAAAgQFtAQCCAoD5dwTATwKngEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":484,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347789,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03o5AAD4G50msEAABwKgKMu4WAFDDudQUnF5dPYAQAOWTRwAAAQEICgE8Cp8D5dwT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":481,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347789,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CDlAAD4GvZ+sEAABwKgKMu3gAFDyig2qQjVASIARAOWnBAAAAQEICgE8Cs8D5dcT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":481,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347789,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nAxAAEAGJ8zAqAoyrBAAAQBQ7eBCNUBI8ooNq4ARAOOh1AAAAQEICgPl3EQBPArP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":481,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347789,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CDpAAD4GvZ6sEAABwKgKMu3gAFDyig2rQjVASYAQAOWh0QAAAQEICgE8CtAD5dxE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":485,"flow_packet_id":1,"flow_first_seen":1499347792291,"flow_last_seen":1499347792291,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60976,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":485,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347792,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GCRAAD4GraysEAABwKgKMu4wAFDmKhURAAAAAKACchBm1gAAAgQFtAQCCAoBPA01AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":485,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347792,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7jDnRnKf5ioVEqAScSArPwAAAgQFtAQCCAoD5d6qATwNNQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":485,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347792,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GCVAAD4GrbOsEAABwKgKMu4wAFDmKhUS50ZyoIAQAOXKRgAAAQEICgE8DTUD5d6q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":482,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347792,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07f1AAD4G19qsEAABwKgKMu36AFCLoOXZ\/09n7oARAOVLcQAAAQEICgE8Db4D5dmX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":482,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347792,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uNxAAEAGCvzAqAoyrBAAAQBQ7fr\/T2fui6Dl2oARAONF1wAAAQEICgPl3zIBPA2+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":482,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347792,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07f5AAD4G19msEAABwKgKMu36AFCLoOXa\/09n74AQAOVF1QAAAQEICgE8Db4D5d8y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":443,"flow_packet_id":6,"flow_first_seen":1499347720094,"flow_last_seen":1499347725815,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60220,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":443,"flow_packet_id":6,"flow_first_seen":1499347720094,"flow_last_seen":1499347725815,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60220,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":444,"flow_packet_id":6,"flow_first_seen":1499347721376,"flow_last_seen":1499347726816,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60234,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":444,"flow_packet_id":6,"flow_first_seen":1499347721376,"flow_last_seen":1499347726816,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60234,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":445,"flow_packet_id":6,"flow_first_seen":1499347724082,"flow_last_seen":1499347729818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60260,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":445,"flow_packet_id":6,"flow_first_seen":1499347724082,"flow_last_seen":1499347729818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60260,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":446,"flow_packet_id":6,"flow_first_seen":1499347725355,"flow_last_seen":1499347730818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60274,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":446,"flow_packet_id":6,"flow_first_seen":1499347725355,"flow_last_seen":1499347730818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60274,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":447,"flow_packet_id":6,"flow_first_seen":1499347726623,"flow_last_seen":1499347731818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60288,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":447,"flow_packet_id":6,"flow_first_seen":1499347726623,"flow_last_seen":1499347731818,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60288,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":486,"flow_packet_id":1,"flow_first_seen":1499347793575,"flow_last_seen":1499347793575,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60990,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":486,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347793,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86x9AAD4G2rCsEAABwKgKMu4+AFCp1uVpAAAAAKACchDRggAAAgQFtAQCCAoBPA52AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":486,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347793,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQ7j6t+bU4qdblaqAScSCLXgAAAgQFtAQCCAoD5d\/rATwOdgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":486,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347793,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yBAAD4G2resEAABwKgKMu4+AFCp1uVqrfm1OYAQAOUqZgAAAQEICgE8DnYD5d\/r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":483,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347793,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h69AAD4GPimsEAABwKgKMu4IAFB6rY7QPIKsfYARAOUvZAAAAQEICgE8DrgD5drX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":483,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347793,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TFFAAEAGd4fAqAoyrBAAAQBQ7gg8gqx9eq2O0YARAOMqEAAAAQEICgPl4CwBPA64","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":483,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347793,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0h7BAAD4GPiisEAABwKgKMu4IAFB6rY7RPIKsfoAQAOUqDgAAAQEICgE8DrgD5eAs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":484,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347794,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03o9AAD4G50isEAABwKgKMu4WAFDDudQUnF5dPYARAOWOMwAAAQEICgE8D7ID5dwT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":484,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347794,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vBtAAEAGB73AqAoyrBAAAQBQ7hacXl09w7nUFYARAOOJIQAAAQEICgPl4SYBPA+y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":484,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347794,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03pBAAD4G50esEAABwKgKMu4WAFDDudQVnF5dPoAQAOWJHwAAAQEICgE8D7ID5eEm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":487,"flow_packet_id":1,"flow_first_seen":1499347796130,"flow_last_seen":1499347796130,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32784,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":487,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347796,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dkVAAD4GT4usEAABwKgKMoAQAFA7jGawAAAAAKACchAqNgAAAgQFtAQCCAoBPBD1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":487,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347796,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgBCKrPedO4xmsaAScSDCewAAAgQFtAQCCAoD5eJpATwQ9QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":487,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347796,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dkZAAD4GT5KsEAABwKgKMoAQAFA7jGaxiqz3noAQAOVhgwAAAQEICgE8EPUD5eJp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":488,"flow_packet_id":1,"flow_first_seen":1499347797419,"flow_last_seen":1499347797419,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32798,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":488,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347797,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tZJAAD4GED6sEAABwKgKMoAeAFBmW6elAAAAAKACchC9IQAAAgQFtAQCCAoBPBI3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":488,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347797,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgB7MdTcTZlunpqAScSDS5QAAAgQFtAQCCAoD5eOsATwSNwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":488,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347797,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tZNAAD4GEEWsEAABwKgKMoAeAFBmW6emzHU3FIAQAOVx7QAAAQEICgE8EjcD5eOs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":485,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347797,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GCZAAD4GrbKsEAABwKgKMu4wAFDmKhUS50ZyoIARAOXE2gAAAQEICgE8EqAD5d6q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":485,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347797,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lrRAAEAGLSTAqAoyrBAAAQBQ7jDnRnKg5ioVE4ARAOO\/cQAAAQEICgPl5BQBPBKg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":485,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347797,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GCdAAD4GrbGsEAABwKgKMu4wAFDmKhUT50ZyoYAQAOW\/bwAAAQEICgE8EqAD5eQU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":489,"flow_packet_id":1,"flow_first_seen":1499347798713,"flow_last_seen":1499347798713,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32812,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":489,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347798,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LWRAAD4GmGysEAABwKgKMoAsAFA\/CD4fAAAAAKACchBMqQAAAgQFtAQCCAoBPBN7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":489,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347798,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgCwp5bxCPwg+IKAScSB+iwAAAgQFtAQCCAoD5eTvATwTewEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":489,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347798,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LWVAAD4GmHOsEAABwKgKMoAsAFA\/CD4gKeW8Q4AQAOUdkwAAAQEICgE8E3sD5eTv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":486,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347798,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yFAAD4G2rasEAABwKgKMu4+AFCp1uVqrfm1OYARAOUlQQAAAQEICgE8E5oD5d\/r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":486,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347798,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0UDdAAEAGc6HAqAoyrBAAAQBQ7j6t+bU5qdbla4ARAOMgHwAAAQEICgPl5Q4BPBOa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":486,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347798,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yJAAD4G2rWsEAABwKgKMu4+AFCp1uVrrfm1OoAQAOUgHQAAAQEICgE8E5oD5eUO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":490,"flow_packet_id":1,"flow_first_seen":1499347801271,"flow_last_seen":1499347801271,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32838,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":490,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347801,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZRhAAD4GYLisEAABwKgKMoBGAFBeRnDiAAAAAKACchD4DgAAAgQFtAQCCAoBPBX6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":490,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347801,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgEYSjN1bXkZw46AScSAdsQAAAgQFtAQCCAoD5edvATwV+gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":490,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347801,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZRlAAD4GYL+sEAABwKgKMoBGAFBeRnDjEozdXIAQAOW8uAAAAQEICgE8FfoD5edv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":487,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347801,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dkdAAD4GT5GsEAABwKgKMoAQAFA7jGaxiqz3noARAOVb7wAAAQEICgE8FogD5eJp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":487,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347801,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EGNAAEAGs3XAqAoyrBAAAQBQgBCKrPeeO4xmsoARAONWXAAAAQEICgPl5\/0BPBaI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":487,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347801,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dkhAAD4GT5CsEAABwKgKMoAQAFA7jGayiqz3n4AQAOVWWgAAAQEICgE8FogD5ef9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":491,"flow_packet_id":1,"flow_first_seen":1499347802549,"flow_last_seen":1499347802549,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32852,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":491,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347802,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jF5AAD4GOXKsEAABwKgKMoBUAFDx5ZtkAAAAAKACchA4nwAAAgQFtAQCCAoBPBc6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":491,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347802,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgFQ6vzwG8eWbZaAScSDWJAAAAgQFtAQCCAoD5eiuATwXOgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":491,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347802,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jF9AAD4GOXmsEAABwKgKMoBUAFDx5ZtlOr88B4AQAOV1LAAAAQEICgE8FzoD5eiu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":488,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347802,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tZRAAD4GEESsEAABwKgKMoAeAFBmW6emzHU3FIARAOVsoQAAAQEICgE8F4ID5eOs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":488,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347802,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA03+NAAEAG4\/TAqAoyrBAAAQBQgB7MdTcUZlunp4ARAONnVwAAAQEICgPl6PcBPBeC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":488,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347802,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tZVAAD4GEEOsEAABwKgKMoAeAFBmW6enzHU3FYAQAOVnVQAAAQEICgE8F4ID5ej3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":448,"flow_packet_id":6,"flow_first_seen":1499347729211,"flow_last_seen":1499347734819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60314,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":448,"flow_packet_id":6,"flow_first_seen":1499347729211,"flow_last_seen":1499347734819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60314,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":449,"flow_packet_id":6,"flow_first_seen":1499347730501,"flow_last_seen":1499347735819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60328,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":449,"flow_packet_id":6,"flow_first_seen":1499347730501,"flow_last_seen":1499347735819,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60328,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":450,"flow_packet_id":6,"flow_first_seen":1499347731797,"flow_last_seen":1499347736820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60342,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":450,"flow_packet_id":6,"flow_first_seen":1499347731797,"flow_last_seen":1499347736820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60342,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":451,"flow_packet_id":6,"flow_first_seen":1499347733083,"flow_last_seen":1499347738820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60356,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":451,"flow_packet_id":6,"flow_first_seen":1499347733083,"flow_last_seen":1499347738820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60356,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":452,"flow_packet_id":6,"flow_first_seen":1499347734348,"flow_last_seen":1499347739820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60370,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":452,"flow_packet_id":6,"flow_first_seen":1499347734348,"flow_last_seen":1499347739820,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60370,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":453,"flow_packet_id":6,"flow_first_seen":1499347735664,"flow_last_seen":1499347740821,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60384,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":453,"flow_packet_id":6,"flow_first_seen":1499347735664,"flow_last_seen":1499347740821,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60384,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":489,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347803,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LWZAAD4GmHKsEAABwKgKMoAsAFA\/CD4gKeW8Q4ARAOUYkQAAAQEICgE8GHwD5eTv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":489,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347803,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VbJAAEAGbibAqAoyrBAAAQBQgCwp5bxDPwg+IYARAOMTkAAAAQEICgPl6fEBPBh8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":489,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347803,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LWdAAD4GmHGsEAABwKgKMoAsAFA\/CD4hKeW8RIAQAOUTjgAAAQEICgE8GHwD5enx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":492,"flow_packet_id":1,"flow_first_seen":1499347805119,"flow_last_seen":1499347805119,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32878,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":492,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347805,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ZmVAAD4GX2usEAABwKgKMoBuAFBq0H\/ZAAAAAKACchDYowAAAgQFtAQCCAoBPBm8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":492,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347805,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgG5Z9D1oatB\/2qAScSBTDwAAAgQFtAQCCAoD5esxATwZvAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":492,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347805,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZmZAAD4GX3KsEAABwKgKMoBuAFBq0H\/aWfQ9aYAQAOXyFgAAAQEICgE8GbwD5esx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":493,"flow_packet_id":1,"flow_first_seen":1499347806390,"flow_last_seen":1499347806390,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32892,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":493,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347806,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AxtAAD4GwrWsEAABwKgKMoB8AFC+iBnhAAAAAKACchDplwAAAgQFtAQCCAoBPBr6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":493,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347806,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgHy7zo2dvogZ4qAScSCwtQAAAgQFtAQCCAoD5exvATwa+gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":493,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347806,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AxxAAD4GwrysEAABwKgKMoB8AFC+iBniu86NnoAQAOVPvQAAAQEICgE8GvoD5exv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":490,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347806,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZRpAAD4GYL6sEAABwKgKMoBGAFBeRnDjEozdXIARAOW3RgAAAQEICgE8G2sD5edv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":490,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347806,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MYNAAEAGklXAqAoyrBAAAQBQgEYSjN1cXkZw5IARAOOx1wAAAQEICgPl7N8BPBtr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":490,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347806,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZRtAAD4GYL2sEAABwKgKMoBGAFBeRnDkEozdXYAQAOWx1QAAAQEICgE8G2sD5ezf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":494,"flow_packet_id":1,"flow_first_seen":1499347807664,"flow_last_seen":1499347807664,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32906,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":494,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347807,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PG1AAD4GiWOsEAABwKgKMoCKAFAzSiBUAAAAAKACchBtFgAAAgQFtAQCCAoBPBw5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":494,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347807,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgIqXGWCRM0ogVaAScSCEtwAAAgQFtAQCCAoD5e2tATwcOQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":494,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347807,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PG5AAD4GiWqsEAABwKgKMoCKAFAzSiBVlxlgkoAQAOUjvwAAAQEICgE8HDkD5e2t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":491,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347807,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jGBAAD4GOXisEAABwKgKMoBUAFDx5ZtlOr88B4ARAOVwAAAAAQEICgE8HGUD5eiu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":491,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347807,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00d5AAEAG8fnAqAoyrBAAAQBQgFQ6vzwH8eWbZoARAONq1gAAAQEICgPl7dkBPBxl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":491,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347807,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jGFAAD4GOXesEAABwKgKMoBUAFDx5ZtmOr88CIAQAOVq1AAAAQEICgE8HGUD5e3Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":495,"flow_packet_id":1,"flow_first_seen":1499347810243,"flow_last_seen":1499347810243,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32932,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":495,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347810,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+YpAAD4GzEWsEAABwKgKMoCkAFCAVuc3AAAAAKACchBWiAAAAgQFtAQCCAoBPB69AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":495,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347810,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgKT1xLjSgFbnOKAScSC0twAAAgQFtAQCCAoD5fAyATwevQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":495,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347810,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+YtAAD4GzEysEAABwKgKMoCkAFCAVuc49cS404AQAOVTvgAAAQEICgE8Hr4D5fAy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":492,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347810,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZmdAAD4GX3GsEAABwKgKMoBuAFBq0H\/aWfQ9aYARAOXsfgAAAQEICgE8H1MD5esx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":492,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347810,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0za5AAEAG9inAqAoyrBAAAQBQgG5Z9D1patB\/24ARAOPm6QAAAQEICgPl8McBPB9T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":492,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347810,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ZmhAAD4GX3CsEAABwKgKMoBuAFBq0H\/bWfQ9aoAQAOXm5wAAAQEICgE8H1MD5fDH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":496,"flow_packet_id":1,"flow_first_seen":1499347811525,"flow_last_seen":1499347811525,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32946,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":496,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/z1AAD4GxpKsEAABwKgKMoCyAFD5M+DDAAAAAKACchDizwAAAgQFtAQCCAoBPB\/+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":496,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgLJEEu3h+TPgxKAScSC8YgAAAgQFtAQCCAoD5fFyATwf\/gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":496,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/z5AAD4GxpmsEAABwKgKMoCyAFD5M+DERBLt4oAQAOVbagAAAQEICgE8H\/4D5fFy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":494,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":494,"flow_packet_id":4,"flow_first_seen":1499347807664,"flow_last_seen":1499347811526,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32906,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27UQE70NGV80W4ZBVWQELDMRMBY9BF6W552ZBHL3F4W4MIP7R7K6%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0406{"flow_id":493,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ax1AAD4GwrusEAABwKgKMoB8AFC+iBniu86NnoARAOVKuAAAAQEICgE8H\/4D5exv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":494,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0keFAAEAGMffAqAoyrBAAAQBQgIqXGWCSM0oinoAQAOwZ5AAAAQEICgPl8XMBPB\/+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":493,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fO1AAEAGRuvAqAoyrBAAAQBQgHy7zo2evogZ44ARAONFtQAAAQEICgPl8XMBPB\/+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":493,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ax5AAD4GwrqsEAABwKgKMoB8AFC+iBnju86Nn4AQAOVFsgAAAQEICgE8H\/8D5fFz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2942{"flow_id":494,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":1934,"pkt":"AMGxFOsxABm5CmnxCABFAAeAkeJAAEAGKqrAqAoyrBAAAQBQgIqXGWCSM0oinoAYAOx+XgAAAQEICgPl8XMBPB\/+SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMwOjExIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWHtPGzkQ\/xukfgefTzqgEmvSNzTZiiRQ0IU2JYG01UkrZ9dJDN71YnsT+PY33keyPMM2SCh47Xn8xjMez\/jVev2v9vdW\/1f3AE1MKFD3rNk5biG8TcjgbYuQdr+Nfh71Tzqo5uygnlHcN4QcfMMIT4yJ9wiZzWbO7K0j1Zj0T8m1lVKzbPlwW6c8TmAC7L5af7VeT\/VchyLSjQdk1HZ3dzPWjHytPmE0gOHaWj1khiLLss2uEj5t4JaMDIvMdv8mZhj52VcDG3ZtiBXxGfkTqjQzjbP+4fYnjEgmc61uuBHMPU9ExBQdcsHNzR46ZSPBfMMC1FJSa9TjhqGer3hseDRGmz97vS20t4faNIxQwSsYGrAh2o9jwX1quIzQZvt8sL+FpjWntoNet9mUCRmHAO11nWSKcxSCR5dIMdHA2twIpieMGYwMWJMb4WuN0USxUQM7DoG\/YDqjdpaElEdOukzuS+OwFYWc\/3hIx4zA1G1JIzq1ZE66MJehU2vLEC7olGazGGnl3wJyodP\/XVDgXGjs1klGmXuO5K6z46EMbpAvqLZelyHDmUsDPkU8aGDrO7CIqdzrpSUrpDS\/Vufh+B6S1EhNhBxLJ47GGFEBgbDEUQu7ASuou6fabrIHjktK2u+teTENAhZkBgFBIgo77WpTSP\/Sbo3gSEY+qL5s4BmPAjlzYCnF0djILHE2cMEKDPSWuxzsHsG21QmFXRbcXX+OQB7B6Ut8O6WdeBI\/If8uKXaPSzPV1MKBS+Il+uY02O3ZISJw\/GAStZslZSQR7gobOi2dbw7hMVSJYeQJVA8zYLdp\/6NDqfyKHrgrkF0zvwqAlB67LRmGNArQcXTBUo+shsLXalQFRUoPKHqnh6spHnHifInhqDY4cCYBWxIlz+LH7iGHw31sZ\/TKe5PEQtKgyu7kHDmMs\/RrRf\/Q2MDNVclFOUt6bpmfKIZa+91+62h\/NSj6SvAqOFJ6ONM\/Oi8VrFaiN4TLrZJTSlx30KDNpp3eWg3VjNFLj1eCVLBgdwAj1GPaRis6bldMr3flXmvtVQKSMWAX6hmoVb6frLgVVpwq6dcsq6KehUMVOObF1wug0VV3Qxcoekaq2xBWvILSswjV5dLrcEGGXVs\/QnxkU9W2A\/h5NJJL1JWosNs96sLpGMlqiuhQJmaJmjkNdvft8OW21RZ6S9UviLDbScd3AOQV263a7\/FC0Jawi0IQOhm7muu2a+VCsD6p\/Ul3ASVzLS+YS8Kn8wrW82XAPKoYzevnkVQhimgI1TrwQ9mbprgG\/hsj6JYmErB\/PejntWk9zi0eTKjZ0OhGJipl\/lJU1lGclIt\/nIu2v\/P6tkykk2HIgWxKRQKfvewz10ZiN2sqiEWZ4Y0Vc4+YEBLlrYYLlb+WgoGHx5sbZz8OPu58+3r+aWfw7nfzfPDjoNM+OT1p\/tptHn4YvH\/\/5nfzqPP28N3g3clx9+Ppx38\/bGx9LksIpJ\/YTsvxpbzkbOvzvCUBOIqlrll4uD55457AgU\/DX4U0u6xg0q7l8QHRuIgr23zqvGGVM6rjtGeFEGXXNsxI6tltDZ715p71Us9CO0bVGDpRDLcSjS6x++ey5lFcGR9we1ClGKa8A2jrwFyvBf2V8Xp561kR49PyluNkkTPjlzxmAaepaPtVtlwXlj+O7fkynsaTm+mP+TwZ+zK018P2iF456ZPEgyCewfgszRlOKpgytVTCk+ruUZd15NktC\/Wicx0q6Hez3yKFPZLy8rzjC0bV\/DQ\/lBf1jTYs9Oxd8mB+GCbG2D47zw\/nnM0QHP94nrNjGSexV5DJqJVl\/cWjwx5QnMWb6JHbfgoSvQlItOH4BSClNcU\/hSMaQs420BZ20VJYPUiGPntZYDqVuRSa3U0q+BjytmAjyJ91Frpnmimbd\/fqBL4QDUIe5S6E76I4QB37upTTgMQFBdzqx+1evhJwba+PoPDiow4dSWluPbbE7iqvXfFD12o5ARN7cWbvgumLnfs\/dO01qJIUAAA=","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":494,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347811,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PHBAAD4GiWisEAABwKgKMoCKAFAzSiKelxln3oAQAQISgQAAAQEICgE8H\/8D5fFz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":494,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":494,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":494,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PHJAAD4GiWasEAABwKgKMoCKAFAzSiQdlxluyIAQAR0IAwAAAQEICgE8IPwD5fJw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":497,"flow_packet_id":1,"flow_first_seen":1499347812797,"flow_last_seen":1499347812797,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32960,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":497,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8YtxAAD4GYvSsEAABwKgKMoDAAFAQTEPgAAAAAKACchBnTwAAAgQFtAQCCAoBPCE8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":497,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgMBbJW45EExD4aAScSCoOQAAAgQFtAQCCAoD5fKwATwhPAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":497,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Yt1AAD4GYvusEAABwKgKMoDAAFAQTEPhWyVuOoAQAOVHQQAAAQEICgE8ITwD5fKw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":494,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2937{"flow_id":494,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":494,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347812,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PHRAAD4GiWSsEAABwKgKMoCKAFAzSiZmlxl2FIAQATv9zQAAAQEICgE8IT0D5fKx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":418,"flow_packet_id":312,"flow_first_seen":1499347675703,"flow_last_seen":1499347745908,"flow_tot_l4_data_len":242186,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":776,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":59732,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":454,"flow_packet_id":6,"flow_first_seen":1499347738229,"flow_last_seen":1499347743822,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60410,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":454,"flow_packet_id":6,"flow_first_seen":1499347738229,"flow_last_seen":1499347743822,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60410,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":455,"flow_packet_id":6,"flow_first_seen":1499347739497,"flow_last_seen":1499347744823,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60424,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":455,"flow_packet_id":6,"flow_first_seen":1499347739497,"flow_last_seen":1499347744823,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60424,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":456,"flow_packet_id":6,"flow_first_seen":1499347740751,"flow_last_seen":1499347745824,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60438,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":456,"flow_packet_id":6,"flow_first_seen":1499347740751,"flow_last_seen":1499347745824,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60438,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":458,"flow_packet_id":6,"flow_first_seen":1499347744595,"flow_last_seen":1499347749825,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60478,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":458,"flow_packet_id":6,"flow_first_seen":1499347744595,"flow_last_seen":1499347749825,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60478,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":459,"flow_packet_id":6,"flow_first_seen":1499347747187,"flow_last_seen":1499347752826,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60504,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":459,"flow_packet_id":6,"flow_first_seen":1499347747187,"flow_last_seen":1499347752826,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60504,"dst_port":80,"l4_proto":"tcp"}
+0920{"flow_id":494,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347813,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":494,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347813,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":498,"flow_packet_id":1,"flow_first_seen":1499347814066,"flow_last_seen":1499347814066,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32974,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":498,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347814,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NuNAAD4Gju2sEAABwKgKMoDOAFApMBSaAAAAAKACchB8ZgAAAgQFtAQCCAoBPCJ5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":498,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347814,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgM6yTRTHKTAUm6AScSC+XAAAAgQFtAQCCAoD5fPuATwieQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":498,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347814,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NuRAAD4GjvSsEAABwKgKMoDOAFApMBSbsk0UyIAQAOVdZAAAAQEICgE8InkD5fPu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":499,"flow_packet_id":1,"flow_first_seen":1499347815351,"flow_last_seen":1499347815351,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32988,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":499,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347815,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aqNAAD4GWy2sEAABwKgKMoDcAFBV2UkZAAAAAKACchAZ7wAAAgQFtAQCCAoBPCO6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":499,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347815,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgNzeXu4gVdlJGqAScSBVOQAAAgQFtAQCCAoD5fUvATwjugEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":499,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347815,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aqRAAD4GWzSsEAABwKgKMoDcAFBV2Uka3l7uIYAQAOX0PwAAAQEICgE8I7sD5fUv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":495,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347815,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+YxAAD4GzEusEAABwKgKMoCkAFCAVuc49cS404ARAOVORgAAAQEICgE8JDUD5fAy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":495,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347815,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TXlAAEAGdl\/AqAoyrBAAAQBQgKT1xLjTgFbnOYARAONIzwAAAQEICgPl9aoBPCQ1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":495,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347815,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+Y1AAD4GzEqsEAABwKgKMoCkAFCAVuc59cS41IAQAOVIzQAAAQEICgE8JDUD5fWq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":500,"flow_packet_id":1,"flow_first_seen":1499347816657,"flow_last_seen":1499347816657,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33002,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":500,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347816,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lQ1AAD4GMMOsEAABwKgKMoDqAFAyzLAMAAAAAKACchDUswAAAgQFtAQCCAoBPCUBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":500,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347816,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgOp6zxHVMsywDaAScSBOkwAAAgQFtAQCCAoD5fZ1ATwlAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":500,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347816,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lQ5AAD4GMMqsEAABwKgKMoDqAFAyzLANes8R1oAQAOXtmgAAAQEICgE8JQED5fZ1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":496,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347816,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/z9AAD4GxpisEAABwKgKMoCyAFD5M+DERBLt4oARAOVWOAAAAQEICgE8JS8D5fFy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":496,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347816,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0G0ZAAEAGqJLAqAoyrBAAAQBQgLJEEu3i+TPgxYARAONRBwAAAQEICgPl9qQBPCUv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":496,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347816,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/0BAAD4GxpesEAABwKgKMoCyAFD5M+DFRBLt44AQAOVRBQAAAQEICgE8JS8D5fak","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":497,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347817,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Yt5AAD4GYvqsEAABwKgKMoDAAFAQTEPhWyVuOoARAOVCUwAAAQEICgE8JikD5fKw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":497,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347817,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0maRAAEAGKjTAqAoyrBAAAQBQgMBbJW46EExD4oARAOM9ZgAAAQEICgPl954BPCYp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":497,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347817,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Yt9AAD4GYvmsEAABwKgKMoDAAFAQTEPiWyVuO4AQAOU9YwAAAQEICgE8JioD5fee","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":501,"flow_packet_id":1,"flow_first_seen":1499347819250,"flow_last_seen":1499347819250,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33028,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":501,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347819,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LORAAD4GmOysEAABwKgKMoEEAFDtQwttAAAAAKACchC8OQAAAgQFtAQCCAoBPCeJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":501,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347819,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgQQkyBmr7UMLbqAScSCBwQAAAgQFtAQCCAoD5fj+ATwniQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":501,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347819,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LOVAAD4GmPOsEAABwKgKMoEEAFDtQwtuJMgZrIAQAOUgyQAAAQEICgE8J4kD5fj+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":498,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347819,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NuVAAD4GjvOsEAABwKgKMoDOAFApMBSbsk0UyIARAOVXvgAAAQEICgE8KB4D5fPu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":498,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347819,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07VpAAEAG1n3AqAoyrBAAAQBQgM6yTRTIKTAUnIARAONSGwAAAQEICgPl+ZIBPCge","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":498,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347819,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NuZAAD4GjvKsEAABwKgKMoDOAFApMBScsk0UyYAQAOVSGQAAAQEICgE8KB4D5fmS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":502,"flow_packet_id":1,"flow_first_seen":1499347820510,"flow_last_seen":1499347820510,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33042,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":502,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347820,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zKZAAD4G+SmsEAABwKgKMoESAFBNgeRiAAAAAKACchCBvQAAAgQFtAQCCAoBPCjEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":502,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347820,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgRIUqvVqTYHkY6AScSB6aAAAAgQFtAQCCAoD5fo5ATwoxAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":502,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347820,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zKdAAD4G+TCsEAABwKgKMoESAFBNgeRjFKr1a4AQAOUZcAAAAQEICgE8KMQD5fo5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":499,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347820,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aqVAAD4GWzOsEAABwKgKMoDcAFBV2Uka3l7uIYARAOXu4QAAAQEICgE8KRgD5fUv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":499,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347820,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FK1AAEAGryvAqAoyrBAAAQBQgNzeXu4hVdlJG4ARAOPphQAAAQEICgPl+owBPCkY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":499,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347820,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aqZAAD4GWzKsEAABwKgKMoDcAFBV2Ukb3l7uIoAQAOXpgwAAAQEICgE8KRgD5fqM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":500,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347821,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lQ9AAD4GMMmsEAABwKgKMoDqAFAyzLANes8R1oARAOXoiAAAAQEICgE8KhID5fZ1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":500,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347821,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA06lBAAEAG2YfAqAoyrBAAAQBQgOp6zxHWMsywDoARAOPjeAAAAQEICgPl+4YBPCoS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":500,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347821,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lRBAAD4GMMisEAABwKgKMoDqAFAyzLAOes8R14AQAOXjdgAAAQEICgE8KhID5fuG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":503,"flow_packet_id":1,"flow_first_seen":1499347823117,"flow_last_seen":1499347823117,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33068,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":503,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347823,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/vRAAD4GxtusEAABwKgKMoEsAFBFq9WkAAAAAKACchCVqwAAAgQFtAQCCAoBPCtQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":503,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347823,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgSyhFRrnRavVpaAScSDZ4wAAAgQFtAQCCAoD5fzEATwrUAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":503,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347823,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vVAAD4GxuKsEAABwKgKMoEsAFBFq9WloRUa6IAQAOV46wAAAQEICgE8K1AD5fzE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":460,"flow_packet_id":6,"flow_first_seen":1499347748472,"flow_last_seen":1499347753827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60518,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":460,"flow_packet_id":6,"flow_first_seen":1499347748472,"flow_last_seen":1499347753827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60518,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":461,"flow_packet_id":6,"flow_first_seen":1499347749751,"flow_last_seen":1499347754827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60532,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":461,"flow_packet_id":6,"flow_first_seen":1499347749751,"flow_last_seen":1499347754827,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60532,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":462,"flow_packet_id":6,"flow_first_seen":1499347752308,"flow_last_seen":1499347757828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60558,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":462,"flow_packet_id":6,"flow_first_seen":1499347752308,"flow_last_seen":1499347757828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60558,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":463,"flow_packet_id":6,"flow_first_seen":1499347753649,"flow_last_seen":1499347758828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60572,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":463,"flow_packet_id":6,"flow_first_seen":1499347753649,"flow_last_seen":1499347758828,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60572,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":464,"flow_packet_id":6,"flow_first_seen":1499347756244,"flow_last_seen":1499347761829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60598,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":464,"flow_packet_id":6,"flow_first_seen":1499347756244,"flow_last_seen":1499347761829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60598,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":465,"flow_packet_id":6,"flow_first_seen":1499347757502,"flow_last_seen":1499347762829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60612,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":465,"flow_packet_id":6,"flow_first_seen":1499347757502,"flow_last_seen":1499347762829,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60612,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":466,"flow_packet_id":7,"flow_first_seen":1499347758774,"flow_last_seen":1499347763831,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60626,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":466,"flow_packet_id":7,"flow_first_seen":1499347758774,"flow_last_seen":1499347763831,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60626,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":504,"flow_packet_id":1,"flow_first_seen":1499347824426,"flow_last_seen":1499347824426,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33082,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":504,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347824,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80mVAAD4G82qsEAABwKgKMoE6AFCPwv7yAAAAAKACchAg8QAAAgQFtAQCCAoBPCyXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":504,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347824,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgToZT9eBj8L+86AScSAvDQAAAgQFtAQCCAoD5f4MATwslwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":504,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347824,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00mZAAD4G83GsEAABwKgKMoE6AFCPwv7zGU\/XgoAQAOXOFAAAAQEICgE8LJcD5f4M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":501,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347824,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LOZAAD4GmPKsEAABwKgKMoEEAFDtQwtuJMgZrIARAOUbUQAAAQEICgE8LQAD5fj+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":501,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347824,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA059hAAEAG2\/\/AqAoyrBAAAQBQgQQkyBms7UMLb4ARAOMV3AAAAQEICgPl\/nQBPC0A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":501,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347824,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LOdAAD4GmPGsEAABwKgKMoEEAFDtQwtvJMgZrYAQAOUV2gAAAQEICgE8LQAD5f50","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":505,"flow_packet_id":1,"flow_first_seen":1499347825732,"flow_last_seen":1499347825732,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33096,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":505,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347825,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Tq1AAD4GdyOsEAABwKgKMoFIAFDgbWNwAAAAAKACchBqdAAAAgQFtAQCCAoBPC3dAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":505,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347825,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgUjyJE\/d4G1jcaAScSAmGQAAAgQFtAQCCAoD5f9SATwt3QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":505,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347825,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Tq5AAD4GdyqsEAABwKgKMoFIAFDgbWNx8iRP3oAQAOXFHwAAAQEICgE8Ld4D5f9S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":502,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347825,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zKhAAD4G+S+sEAABwKgKMoESAFBNgeRjFKr1a4ARAOUUOQAAAQEICgE8LfoD5fo5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":502,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347825,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CgRAAEAGudTAqAoyrBAAAQBQgRIUqvVrTYHkZIARAOMPBAAAAQEICgPl\/28BPC36","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":502,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347825,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zKlAAD4G+S6sEAABwKgKMoESAFBNgeRkFKr1bIAQAOUPAQAAAQEICgE8LfsD5f9v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":506,"flow_packet_id":1,"flow_first_seen":1499347828369,"flow_last_seen":1499347828369,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33122,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":506,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QFxAAD4GhXSsEAABwKgKMoFiAFAwDnAtAAAAAKACchALaQAAAgQFtAQCCAoBPDBxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":506,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgWKuqhlpMA5wLqAScSA+aQAAAgQFtAQCCAoD5gHlATwwcQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":506,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QF1AAD4GhXusEAABwKgKMoFiAFAwDnAurqoZaoAQAOXdcAAAAQEICgE8MHED5gHl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":503,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/vZAAD4GxuGsEAABwKgKMoEsAFBFq9WloRUa6IARAOVzUgAAAQEICgE8MOgD5fzE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":503,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GLRAAEAGqyTAqAoyrBAAAQBQgSyhFRroRavVpoAQAONtuwAAAQEICgPmAl0BPDDo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":503,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GLVAAEAGqyPAqAoyrBAAAQBQgSyhFRroRavVpoARAONtugAAAQEICgPmAl0BPDDo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":503,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347828,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cPJAAD4GVOasEAABwKgKMoEsAFBFq9WmoRUa6YAQAOVtuAAAAQEICgE8MOgD5gJd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":507,"flow_packet_id":1,"flow_first_seen":1499347829667,"flow_last_seen":1499347829667,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33136,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":507,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347829,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lVZAAD4GMHqsEAABwKgKMoFwAFBnlqTjAAAAAKACchCd2AAAAgQFtAQCCAoBPDG1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":507,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347829,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgXAvgGqdZ5ak5KAScSD9iQAAAgQFtAQCCAoD5gMqATwxtQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":507,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347829,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lVdAAD4GMIGsEAABwKgKMoFwAFBnlqTkL4BqnoAQAOWckAAAAQEICgE8MbYD5gMq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":504,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347829,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00mdAAD4G83CsEAABwKgKMoE6AFCPwv7zGU\/XgoARAOXIyAAAAQEICgE8MeID5f4M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":504,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347829,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01NVAAEAG7wLAqAoyrBAAAQBQgToZT9eCj8L+9IARAOPDfgAAAQEICgPmA1cBPDHi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":504,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347829,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00mhAAD4G82+sEAABwKgKMoE6AFCPwv70GU\/Xg4AQAOXDfAAAAQEICgE8MeID5gNX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":505,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347830,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Tq9AAD4GdymsEAABwKgKMoFIAFDgbWNx8iRP3oARAOXAIAAAAQEICgE8MtwD5f9S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":505,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347830,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S49AAEAGeEnAqAoyrBAAAQBQgUjyJE\/e4G1jcoARAOO7IgAAAQEICgPmBFEBPDLc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":505,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347830,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TrBAAD4GdyisEAABwKgKMoFIAFDgbWNy8iRP34AQAOW7IAAAAQEICgE8MtwD5gRR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":508,"flow_packet_id":1,"flow_first_seen":1499347832201,"flow_last_seen":1499347832201,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33162,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":508,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347832,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Dq9AAD4GtyGsEAABwKgKMoGKAFARZDqAAAAAAKACchBb2gAAAgQFtAQCCAoBPDQvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":508,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347832,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgYqpulj1EWQ6gaAScSBQgAAAAgQFtAQCCAoD5gWjATw0LwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":508,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347832,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrBAAD4GtyisEAABwKgKMoGKAFARZDqBqbpY9oAQAOXvhwAAAQEICgE8NC8D5gWj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":509,"flow_packet_id":1,"flow_first_seen":1499347833462,"flow_last_seen":1499347833462,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33176,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":509,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347833,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8H+JAAD4Gpe6sEAABwKgKMoGYAFAzOSqIAAAAAKACchBItAAAAgQFtAQCCAoBPDVqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":509,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347833,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgZimBogRMzkqiaAScSAQtwAAAgQFtAQCCAoD5gbeATw1agEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":509,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347833,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H+NAAD4GpfWsEAABwKgKMoGYAFAzOSqJpgaIEoAQAOWvvgAAAQEICgE8NWoD5gbe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":506,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347833,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QF5AAD4GhXqsEAABwKgKMoFiAFAwDnAurqoZaoARAOXYFgAAAQEICgE8NcoD5gHl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":506,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347833,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0HlVAAEAGpYPAqAoyrBAAAQBQgWKuqhlqMA5wL4ARAOPSvQAAAQEICgPmBz8BPDXK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":506,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347833,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QF9AAD4GhXmsEAABwKgKMoFiAFAwDnAvrqoZa4AQAOXSugAAAQEICgE8NcsD5gc\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":467,"flow_packet_id":6,"flow_first_seen":1499347761418,"flow_last_seen":1499347766830,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60652,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":467,"flow_packet_id":6,"flow_first_seen":1499347761418,"flow_last_seen":1499347766830,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60652,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":468,"flow_packet_id":6,"flow_first_seen":1499347762675,"flow_last_seen":1499347767831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60666,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":468,"flow_packet_id":6,"flow_first_seen":1499347762675,"flow_last_seen":1499347767831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60666,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":469,"flow_packet_id":6,"flow_first_seen":1499347765229,"flow_last_seen":1499347770831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60692,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":469,"flow_packet_id":6,"flow_first_seen":1499347765229,"flow_last_seen":1499347770831,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60692,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":470,"flow_packet_id":6,"flow_first_seen":1499347766506,"flow_last_seen":1499347771832,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60706,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":470,"flow_packet_id":6,"flow_first_seen":1499347766506,"flow_last_seen":1499347771832,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60706,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":471,"flow_packet_id":6,"flow_first_seen":1499347767793,"flow_last_seen":1499347772833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60720,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":471,"flow_packet_id":6,"flow_first_seen":1499347767793,"flow_last_seen":1499347772833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60720,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":507,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347834,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lVhAAD4GMICsEAABwKgKMoFwAFBnlqTkL4BqnoARAOWXgQAAAQEICgE8NsQD5gMq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":507,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347834,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0YqdAAEAGYTHAqAoyrBAAAQBQgXAvgGqeZ5ak5YARAOOScwAAAQEICgPmCDkBPDbE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":507,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347834,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lVlAAD4GMH+sEAABwKgKMoFwAFBnlqTlL4Bqn4AQAOWScAAAAQEICgE8NsUD5gg5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":510,"flow_packet_id":1,"flow_first_seen":1499347836095,"flow_last_seen":1499347836095,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33202,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":510,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347836,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z2FAAD4GXm+sEAABwKgKMoGyAFBvhFCdAAAAAKACchDjpwAAAgQFtAQCCAoBPDf8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":510,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347836,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgbKB84w4b4RQnqAScSDJAwAAAgQFtAQCCAoD5glxATw3\/AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":510,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347836,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z2JAAD4GXnasEAABwKgKMoGyAFBvhFCegfOMOYAQAOVoCgAAAQEICgE8N\/0D5glx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":511,"flow_packet_id":1,"flow_first_seen":1499347837373,"flow_last_seen":1499347837373,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33216,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":511,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347837,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zIRAAD4G+UusEAABwKgKMoHAAFDQoPW4AAAAAKACchDcIQAAAgQFtAQCCAoBPDk8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":511,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347837,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgcDH48pN0KD1uaAScSA8OQAAAgQFtAQCCAoD5gqwATw5PAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":511,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347837,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zIVAAD4G+VKsEAABwKgKMoHAAFDQoPW5x+PKToAQAOXbQAAAAQEICgE8OTwD5gqw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":508,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347837,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrFAAD4GtyesEAABwKgKMoGKAFARZDqBqbpY9oARAOXqAgAAAQEICgE8ObMD5gWj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":508,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347837,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0U9FAAEAGcAfAqAoyrBAAAQBQgYqpulj2EWQ6goARAOPkfwAAAQEICgPmCycBPDmz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":508,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347837,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DrJAAD4GtyasEAABwKgKMoGKAFARZDqCqbpY94AQAOXkfQAAAQEICgE8ObMD5gsn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":512,"flow_packet_id":1,"flow_first_seen":1499347838675,"flow_last_seen":1499347838675,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33230,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":512,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347838,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8apJAAD4GWz6sEAABwKgKMoHOAFDGglATAAAAAKACchCKkgAAAgQFtAQCCAoBPDqBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":512,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347838,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgc48YB01xoJQFKAScSAiAAAAAgQFtAQCCAoD5gv2ATw6gQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":512,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347838,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0apNAAD4GW0WsEAABwKgKMoHOAFDGglAUPGAdNoAQAOXBBgAAAQEICgE8OoID5gv2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":509,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347838,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H+RAAD4GpfSsEAABwKgKMoGYAFAzOSqJpgaIEoARAOWqegAAAQEICgE8Oq0D5gbe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":509,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347838,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hDNAAEAGP6XAqAoyrBAAAQBQgZimBogSMzkqioARAOOlOAAAAQEICgPmDCEBPDqt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":509,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347838,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H+VAAD4GpfOsEAABwKgKMoGYAFAzOSqKpgaIE4AQAOWlNgAAAQEICgE8Oq0D5gwh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":513,"flow_packet_id":1,"flow_first_seen":1499347841229,"flow_last_seen":1499347841229,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33256,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":513,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347841,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86g5AAD4G28GsEAABwKgKMoHoAFBN49cOAAAAAKACchB5nQAAAgQFtAQCCAoBPD0AAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":513,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347841,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgejkRPOpTePXD6AScSCQMwAAAgQFtAQCCAoD5g50ATw9AAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":513,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347841,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06g9AAD4G28isEAABwKgKMoHoAFBN49cP5ETzqoAQAOUvOwAAAQEICgE8PQAD5g50","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":510,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347841,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z2NAAD4GXnWsEAABwKgKMoGyAFBvhFCegfOMOYARAOViawAAAQEICgE8PZsD5glx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":510,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347841,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gzZAAEAGQKLAqAoyrBAAAQBQgbKB84w5b4RQn4ARAONczgAAAQEICgPmDw8BPD2b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":510,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347841,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z2RAAD4GXnSsEAABwKgKMoGyAFBvhFCfgfOMOoAQAOVczAAAAQEICgE8PZsD5g8P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":514,"flow_packet_id":1,"flow_first_seen":1499347842491,"flow_last_seen":1499347842491,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33270,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":514,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347842,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lUdAAD4GMImsEAABwKgKMoH2AFCtqqt8AAAAAKACchBEHwAAAgQFtAQCCAoBPD47AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":514,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347842,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgfYhjECLraqrfaAScSDPUAAAAgQFtAQCCAoD5g+wATw+OwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":514,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347842,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lUhAAD4GMJCsEAABwKgKMoH2AFCtqqt9IYxAjIAQAOVuVwAAAQEICgE8PjwD5g+w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":511,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347842,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zIZAAD4G+VGsEAABwKgKMoHAAFDQoPW5x+PKToARAOXV5gAAAQEICgE8PpUD5gqw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":511,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347842,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02kRAAEAG6ZPAqAoyrBAAAQBQgcDH48pO0KD1uoARAOPQjQAAAQEICgPmEAoBPD6V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":511,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347842,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zIdAAD4G+VCsEAABwKgKMoHAAFDQoPW6x+PKT4AQAOXQiwAAAQEICgE8PpUD5hAK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":512,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347843,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0apRAAD4GW0SsEAABwKgKMoHOAFDGglAUPGAdNoARAOW7+AAAAQEICgE8P48D5gv2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":512,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347843,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0DDJAAEAGt6bAqAoyrBAAAQBQgc48YB02xoJQFYARAOO26wAAAQEICgPmEQQBPD+P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":512,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347843,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0apVAAD4GW0OsEAABwKgKMoHOAFDGglAVPGAdN4AQAOW26QAAAQEICgE8P48D5hEE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":472,"flow_packet_id":6,"flow_first_seen":1499347769077,"flow_last_seen":1499347774833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60734,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":472,"flow_packet_id":6,"flow_first_seen":1499347769077,"flow_last_seen":1499347774833,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60734,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":473,"flow_packet_id":6,"flow_first_seen":1499347770345,"flow_last_seen":1499347775834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60748,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":473,"flow_packet_id":6,"flow_first_seen":1499347770345,"flow_last_seen":1499347775834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60748,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":474,"flow_packet_id":6,"flow_first_seen":1499347771635,"flow_last_seen":1499347776834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60762,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":474,"flow_packet_id":6,"flow_first_seen":1499347771635,"flow_last_seen":1499347776834,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60762,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":475,"flow_packet_id":6,"flow_first_seen":1499347774205,"flow_last_seen":1499347779835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60788,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":475,"flow_packet_id":6,"flow_first_seen":1499347774205,"flow_last_seen":1499347779835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60788,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":476,"flow_packet_id":6,"flow_first_seen":1499347775487,"flow_last_seen":1499347780836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60802,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":476,"flow_packet_id":6,"flow_first_seen":1499347775487,"flow_last_seen":1499347780836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60802,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":477,"flow_packet_id":6,"flow_first_seen":1499347776753,"flow_last_seen":1499347781835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":477,"flow_packet_id":6,"flow_first_seen":1499347776753,"flow_last_seen":1499347781835,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60816,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":515,"flow_packet_id":1,"flow_first_seen":1499347845077,"flow_last_seen":1499347845077,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33296,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":515,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347845,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA83IxAAD4G6UOsEAABwKgKMoIQAFCGLpxOAAAAAKACchB4KAAAAgQFtAQCCAoBPEDCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":515,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347845,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQghDt+J+Thi6cT6AScSDVXgAAAgQFtAQCCAoD5hI2ATxAwgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":515,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347845,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03I1AAD4G6UqsEAABwKgKMoIQAFCGLpxP7fiflIAQAOV0ZgAAAQEICgE8QMID5hI2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":516,"flow_packet_id":1,"flow_first_seen":1499347846345,"flow_last_seen":1499347846345,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33310,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":516,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347846,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NftAAD4Gj9WsEAABwKgKMoIeAFCnQ3QEAAAAAKACchB+EgAAAgQFtAQCCAoBPEH\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":516,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347846,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgh6m5yHpp0N0BaAScSCexwAAAgQFtAQCCAoD5hNzATxB\/wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":516,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347846,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NfxAAD4Gj9ysEAABwKgKMoIeAFCnQ3QFpuch6oAQAOU9zwAAAQEICgE8Qf8D5hNz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":513,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347846,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06hBAAD4G28esEAABwKgKMoHoAFBN49cP5ETzqoARAOUpuwAAAQEICgE8Qn8D5g50","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":513,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347846,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04FlAAEAG437AqAoyrBAAAQBQgejkRPOqTePXEIARAOMkPQAAAQEICgPmE\/MBPEJ\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":513,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347846,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06hFAAD4G28asEAABwKgKMoHoAFBN49cQ5ETzq4AQAOUkOwAAAQEICgE8Qn8D5hPz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":517,"flow_packet_id":1,"flow_first_seen":1499347847629,"flow_last_seen":1499347847629,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33324,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":517,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347847,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TMtAAD4GeQWsEAABwKgKMoIsAFDM8A+LAAAAAKACchC7jwAAAgQFtAQCCAoBPENAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":517,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347847,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgizINJmdzPAPjKAScSBCAgAAAgQFtAQCCAoD5hS0ATxDQAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":517,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347847,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TMxAAD4GeQysEAABwKgKMoIsAFDM8A+MyDSZnoAQAOXhCQAAAQEICgE8Q0AD5hS0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":514,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347847,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lUlAAD4GMI+sEAABwKgKMoH2AFCtqqt9IYxAjIARAOVpGQAAAQEICgE8Q3kD5g+w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":514,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347847,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VGFAAEAGb3fAqAoyrBAAAQBQgfYhjECMraqrfoARAONj3QAAAQEICgPmFO0BPEN5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":514,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347847,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lUpAAD4GMI6sEAABwKgKMoH2AFCtqqt+IYxAjYAQAOVj2wAAAQEICgE8Q3kD5hTt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":518,"flow_packet_id":1,"flow_first_seen":1499347850209,"flow_last_seen":1499347850209,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33350,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":518,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347850,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OS9AAD4GjKGsEAABwKgKMoJGAFCA5HzqAAAAAKACchCXnQAAAgQFtAQCCAoBPEXFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":518,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347850,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgkZb8bIlgOR866AScSBvRgAAAgQFtAQCCAoD5hc5ATxFxQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":518,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347850,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OTBAAD4GjKisEAABwKgKMoJGAFCA5HzrW\/GyJoAQAOUOTgAAAQEICgE8RcUD5hc5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":515,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347850,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03I5AAD4G6UmsEAABwKgKMoIQAFCGLpxP7fiflIARAOVuwAAAAQEICgE8RmcD5hI2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":515,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347850,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iE9AAEAGO4nAqAoyrBAAAQBQghDt+J+Uhi6cUIARAONpHAAAAQEICgPmF9sBPEZn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":515,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347850,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA03I9AAD4G6UisEAABwKgKMoIQAFCGLpxQ7fiflYAQAOVpGgAAAQEICgE8RmcD5hfb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":519,"flow_packet_id":1,"flow_first_seen":1499347851476,"flow_last_seen":1499347851476,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33364,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":519,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347851,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8d+RAAD4GTeysEAABwKgKMoJUAFCuljDmAAAAAKACchC0pAAAAgQFtAQCCAoBPEcCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":519,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347851,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQglT2+WNtrpYw56AScSA+wAAAAgQFtAQCCAoD5hh2ATxHAgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":519,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347851,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d+VAAD4GTfOsEAABwKgKMoJUAFCuljDn9vljboAQAOXdxwAAAQEICgE8RwID5hh2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":516,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347851,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nf1AAD4Gj9usEAABwKgKMoIeAFCnQ3QFpuch6oARAOU4bAAAAQEICgE8R2ED5hNz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":516,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347851,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OT9AAEAGipnAqAoyrBAAAQBQgh6m5yHqp0N0BoARAOMzCwAAAQEICgPmGNUBPEdh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":516,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347851,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nf5AAD4Gj9qsEAABwKgKMoIeAFCnQ3QGpuch64AQAOUzCQAAAQEICgE8R2ED5hjV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":520,"flow_packet_id":1,"flow_first_seen":1499347852742,"flow_last_seen":1499347852742,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33378,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":520,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347852,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87IFAAD4G2U6sEAABwKgKMoJiAFDnuKS\/AAAAAKACchAGXwAAAgQFtAQCCAoBPEg+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":520,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347852,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgmLb7idG57ikwKAScSDmbwAAAgQFtAQCCAoD5hmzATxIPgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":520,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347852,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07IJAAD4G2VWsEAABwKgKMoJiAFDnuKTA2+4nR4AQAOWFdwAAAQEICgE8SD4D5hmz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":517,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347852,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TM1AAD4GeQusEAABwKgKMoIsAFDM8A+MyDSZnoARAOXb7QAAAQEICgE8SFsD5hS0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":517,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347852,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gFFAAEAGQ4fAqAoyrBAAAQBQgizINJmezPAPjYARAOPW0wAAAQEICgPmGc8BPEhb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":517,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347852,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TM5AAD4GeQqsEAABwKgKMoIsAFDM8A+NyDSZn4AQAOXW0QAAAQEICgE8SFsD5hnP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":478,"flow_packet_id":6,"flow_first_seen":1499347779333,"flow_last_seen":1499347784836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60842,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":478,"flow_packet_id":6,"flow_first_seen":1499347779333,"flow_last_seen":1499347784836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60842,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":479,"flow_packet_id":6,"flow_first_seen":1499347780605,"flow_last_seen":1499347785836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60856,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":479,"flow_packet_id":6,"flow_first_seen":1499347780605,"flow_last_seen":1499347785836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60856,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":480,"flow_packet_id":6,"flow_first_seen":1499347783176,"flow_last_seen":1499347788836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60882,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":480,"flow_packet_id":6,"flow_first_seen":1499347783176,"flow_last_seen":1499347788836,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60882,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":481,"flow_packet_id":6,"flow_first_seen":1499347784519,"flow_last_seen":1499347789837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60896,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":481,"flow_packet_id":6,"flow_first_seen":1499347784519,"flow_last_seen":1499347789837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60896,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":482,"flow_packet_id":6,"flow_first_seen":1499347787097,"flow_last_seen":1499347792837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60922,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":482,"flow_packet_id":6,"flow_first_seen":1499347787097,"flow_last_seen":1499347792837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60922,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":483,"flow_packet_id":6,"flow_first_seen":1499347788375,"flow_last_seen":1499347793837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60936,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":483,"flow_packet_id":6,"flow_first_seen":1499347788375,"flow_last_seen":1499347793837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60936,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":484,"flow_packet_id":6,"flow_first_seen":1499347789640,"flow_last_seen":1499347794837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60950,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":484,"flow_packet_id":6,"flow_first_seen":1499347789640,"flow_last_seen":1499347794837,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60950,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":521,"flow_packet_id":1,"flow_first_seen":1499347855324,"flow_last_seen":1499347855324,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33404,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":521,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347855,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82qpAAD4G6yWsEAABwKgKMoJ8AFBnHpBuAAAAAKACchCYqgAAAgQFtAQCCAoBPErEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":521,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347855,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgnxQBHT\/Zx6Qb6AScSC0ZwAAAgQFtAQCCAoD5hw4ATxKxAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":521,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347855,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02qtAAD4G6yysEAABwKgKMoJ8AFBnHpBvUAR1AIAQAOVTbwAAAQEICgE8SsQD5hw4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":518,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347855,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OTFAAD4GjKesEAABwKgKMoJGAFCA5HzrW\/GyJoARAOUIyQAAAQEICgE8S0kD5hc5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":518,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347855,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0rphAAEAGFUDAqAoyrBAAAQBQgkZb8bImgOR87IARAOMDRQAAAQEICgPmHL4BPEtJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":518,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347855,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OTJAAD4GjKasEAABwKgKMoJGAFCA5HzsW\/GyJ4AQAOUDQwAAAQEICgE8S0kD5hy+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":522,"flow_packet_id":1,"flow_first_seen":1499347856593,"flow_last_seen":1499347856593,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33418,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":522,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347856,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8fnJAAD4GR16sEAABwKgKMoKKAFBRAjJzAAAAAKACchALdwAAAgQFtAQCCAoBPEwBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":522,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347856,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgooY0Yx1UQIydKAScSBFtAAAAgQFtAQCCAoD5h11ATxMAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":522,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347856,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fnNAAD4GR2WsEAABwKgKMoKKAFBRAjJ0GNGMdoAQAOXkuwAAAQEICgE8TAED5h11","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":519,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347856,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d+ZAAD4GTfKsEAABwKgKMoJUAFCuljDn9vljboARAOXYhQAAAQEICgE8TEMD5hh2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":519,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347856,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ftZAAEAGRQLAqAoyrBAAAQBQglT2+WNurpYw6IARAOPTRAAAAQEICgPmHbgBPExD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":519,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347856,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0d+dAAD4GTfGsEAABwKgKMoJUAFCuljDo9vljb4AQAOXTQgAAAQEICgE8TEMD5h24","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":520,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347857,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07INAAD4G2VSsEAABwKgKMoJiAFDnuKTA2+4nR4ARAOWAdwAAAQEICgE8TT0D5hmz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":520,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347857,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OfVAAEAGiePAqAoyrBAAAQBQgmLb7idH57ikwYARAON7eQAAAQEICgPmHrIBPE09","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":520,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347857,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07IRAAD4G2VOsEAABwKgKMoJiAFDnuKTB2+4nSIAQAOV7dgAAAQEICgE8TT4D5h6y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":523,"flow_packet_id":1,"flow_first_seen":1499347859192,"flow_last_seen":1499347859192,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33444,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":523,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347859,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PBpAAD4GibasEAABwKgKMoKkAFB0dnKRAAAAAKACchClQAAAAgQFtAQCCAoBPE6LAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":523,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347859,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgqTwonDidHZykqAScSAgtQAAAgQFtAQCCAoD5h\/\/ATxOiwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":523,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347859,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PBtAAD4Gib2sEAABwKgKMoKkAFB0dnKS8KJw44AQAOW\/vAAAAQEICgE8TosD5h\/\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":524,"flow_packet_id":1,"flow_first_seen":1499347860489,"flow_last_seen":1499347860489,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33458,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":524,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347860,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA842JAAD4G4m2sEAABwKgKMoKyAFDBtqytAAAAAKACchAckgAAAgQFtAQCCAoBPE\/PAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":524,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347860,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgrJy9x5\/wbasrqAScSBm0QAAAgQFtAQCCAoD5iFDATxPzwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":524,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347860,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA042NAAD4G4nSsEAABwKgKMoKyAFDBtqyucvcegIAQAOUF2QAAAQEICgE8T88D5iFD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":521,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347860,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02qxAAD4G6yusEAABwKgKMoJ8AFBnHpBvUAR1AIARAOVOBwAAAQEICgE8UCsD5hw4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":521,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347860,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VKBAAEAGbzjAqAoyrBAAAQBQgnxQBHUAZx6QcIARAONIoAAAAQEICgPmIaABPFAr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":521,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347860,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02q1AAD4G6yqsEAABwKgKMoJ8AFBnHpBwUAR1AYAQAOVInQAAAQEICgE8UCwD5iGg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":525,"flow_packet_id":1,"flow_first_seen":1499347861783,"flow_last_seen":1499347861783,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33472,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":525,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347861,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lM1AAD4GMQOsEAABwKgKMoLAAFBG1cXfAAAAAKACchB88AAAAgQFtAQCCAoBPFESAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":525,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347861,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgsCSqnQ8RtXF4KAScSBQewAAAgQFtAQCCAoD5iKHATxREgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":525,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347861,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lM5AAD4GMQqsEAABwKgKMoLAAFBG1cXgkqp0PYAQAOXvgQAAAQEICgE8URMD5iKH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":522,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347861,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fnRAAD4GR2SsEAABwKgKMoKKAFBRAjJ0GNGMdoARAOXflgAAAQEICgE8USUD5h11","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":522,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347861,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ruxAAEAGFOzAqAoyrBAAAQBQgooY0Yx2UQIydYARAOPacgAAAQEICgPmIpoBPFEl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":522,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347861,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0fnVAAD4GR2OsEAABwKgKMoKKAFBRAjJ1GNGMd4AQAOXabwAAAQEICgE8USYD5iKa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":526,"flow_packet_id":1,"flow_first_seen":1499347863072,"flow_last_seen":1499347863072,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33486,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":526,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347863,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NydAAD4GjqmsEAABwKgKMoLOAFBzZGVyAAAAAKACchCvfQAAAgQFtAQCCAoBPFJVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":526,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347863,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgs7A+ay+c2Rlc6AScSAa9QAAAgQFtAQCCAoD5iPJATxSVQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":526,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347863,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NyhAAD4GjrCsEAABwKgKMoLOAFBzZGVzwPmsv4AQAOW5\/AAAAQEICgE8UlUD5iPJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":527,"flow_packet_id":1,"flow_first_seen":1499347864367,"flow_last_seen":1499347864367,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33500,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":527,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347864,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SwNAAD4Ges2sEAABwKgKMoLcAFBKORibAAAAAKACchAkLwAAAgQFtAQCCAoBPFOYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":527,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347864,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgtztJOKwSjkYnKAScSAsRQAAAgQFtAQCCAoD5iUNATxTmAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":527,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347864,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SwRAAD4GetSsEAABwKgKMoLcAFBKORic7STisYAQAOXLSwAAAQEICgE8U5kD5iUN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":523,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347864,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PBxAAD4GibysEAABwKgKMoKkAFB0dnKS8KJw44ARAOW6MgAAAQEICgE8VBQD5h\/\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":523,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347864,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0VWtAAEAGbm3AqAoyrBAAAQBQgqTwonDjdHZyk4ARAOO0qgAAAQEICgPmJYgBPFQU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":523,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347864,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PB1AAD4GibusEAABwKgKMoKkAFB0dnKT8KJw5IAQAOW0qAAAAQEICgE8VBQD5iWI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":486,"flow_packet_id":6,"flow_first_seen":1499347793575,"flow_last_seen":1499347798838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60990,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":486,"flow_packet_id":6,"flow_first_seen":1499347793575,"flow_last_seen":1499347798838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60990,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":487,"flow_packet_id":6,"flow_first_seen":1499347796130,"flow_last_seen":1499347801839,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32784,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":487,"flow_packet_id":6,"flow_first_seen":1499347796130,"flow_last_seen":1499347801839,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32784,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":488,"flow_packet_id":6,"flow_first_seen":1499347797419,"flow_last_seen":1499347802840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32798,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":488,"flow_packet_id":6,"flow_first_seen":1499347797419,"flow_last_seen":1499347802840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32798,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":489,"flow_packet_id":6,"flow_first_seen":1499347798713,"flow_last_seen":1499347803840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32812,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":489,"flow_packet_id":6,"flow_first_seen":1499347798713,"flow_last_seen":1499347803840,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32812,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":485,"flow_packet_id":6,"flow_first_seen":1499347792291,"flow_last_seen":1499347797838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60976,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":485,"flow_packet_id":6,"flow_first_seen":1499347792291,"flow_last_seen":1499347797838,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60976,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":524,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347865,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA042RAAD4G4nOsEAABwKgKMoKyAFDBtqyucvcegIARAOUAmQAAAQEICgE8VQ4D5iFD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":524,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347865,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OAJAAEAGi9bAqAoyrBAAAQBQgrJy9x6Awbasr4ARAOP7WgAAAQEICgPmJoIBPFUO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":524,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347865,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA042VAAD4G4nKsEAABwKgKMoKyAFDBtqyvcvcegYAQAOX7WAAAAQEICgE8VQ4D5iaC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":525,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347866,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lM9AAD4GMQmsEAABwKgKMoLAAFBG1cXgkqp0PYARAOXqiwAAAQEICgE8VggD5iKH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":525,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347866,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0U0BAAEAGcJjAqAoyrBAAAQBQgsCSqnQ9RtXF4YARAOPllgAAAQEICgPmJ30BPFYI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":525,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347866,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lNBAAD4GMQisEAABwKgKMoLAAFBG1cXhkqp0PoAQAOXllAAAAQEICgE8VggD5id9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":528,"flow_packet_id":1,"flow_first_seen":1499347867086,"flow_last_seen":1499347867086,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33526,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":528,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347867,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sxZAAD4GErqsEAABwKgKMoL2AFBvHeVWAAAAAKACchAvzQAAAgQFtAQCCAoBPFZAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":528,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347867,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgvZcEWBbbx3lV6AScSBIpAAAAgQFtAQCCAoD5ie1ATxWQAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":528,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347867,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sxdAAD4GEsGsEAABwKgKMoL2AFBvHeVXXBFgXIAQAOXnqwAAAQEICgE8VkAD5ie1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":529,"flow_packet_id":1,"flow_first_seen":1499347868358,"flow_last_seen":1499347868358,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33540,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":529,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347868,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8189AAD4G7gCsEAABwKgKMoMEAFA06oCxAAAAAKACchDNWQAAAgQFtAQCCAoBPFd+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":529,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347868,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgwSCLK7WNOqAsqAScSBwXAAAAgQFtAQCCAoD5ijzATxXfgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":529,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347868,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA019BAAD4G7gesEAABwKgKMoMEAFA06oCygiyu14AQAOUPZAAAAQEICgE8V34D5ijz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":526,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347868,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NylAAD4Gjq+sEAABwKgKMoLOAFBzZGVzwPmsv4ARAOW0VAAAAQEICgE8V\/wD5iPJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":526,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347868,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0hc5AAEAGPgrAqAoyrBAAAQBQgs7A+ay\/c2RldIARAOOurQAAAQEICgPmKXEBPFf8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":526,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347868,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NypAAD4Gjq6sEAABwKgKMoLOAFBzZGV0wPmswIAQAOWuqgAAAQEICgE8V\/0D5ilx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":530,"flow_packet_id":1,"flow_first_seen":1499347869628,"flow_last_seen":1499347869628,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33554,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":530,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347869,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XbNAAD4GaB2sEAABwKgKMoMSAFAbjgUPAAAAAKACchBhDAAAAgQFtAQCCAoBPFi8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":530,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347869,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgxKd9DBxG44FEKAScSBlbwAAAgQFtAQCCAoD5iowATxYvAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":530,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347869,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbRAAD4GaCSsEAABwKgKMoMSAFAbjgUQnfQwcoAQAOUEdwAAAQEICgE8WLwD5iow","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":527,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347869,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SwVAAD4GetOsEAABwKgKMoLcAFBKORic7STisYARAOXF7AAAAQEICgE8WPcD5iUN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":527,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347869,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yNpAAEAG+v3AqAoyrBAAAQBQgtztJOKxSjkYnYARAOPAjwAAAQEICgPmKmsBPFj3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":527,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347869,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SwZAAD4GetKsEAABwKgKMoLcAFBKORid7STisoAQAOXAjQAAAQEICgE8WPcD5ipr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":531,"flow_packet_id":1,"flow_first_seen":1499347872187,"flow_last_seen":1499347872187,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33580,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":531,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347872,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ycVAAD4G\/AqsEAABwKgKMoMsAFDCtZL+AAAAAKACchApXAAAAgQFtAQCCAoBPFs7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":531,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347872,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgyztIpfbwrWS\/6AScSB0pgAAAgQFtAQCCAoD5iywATxbOwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":531,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347872,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ycZAAD4G\/BGsEAABwKgKMoMsAFDCtZL\/7SKX3IAQAOUTrQAAAQEICgE8WzwD5iyw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":528,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347872,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sxhAAD4GEsCsEAABwKgKMoL2AFBvHeVXXBFgXIARAOXiBQAAAQEICgE8W+UD5ie1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":528,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347872,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0TQVAAEAGdtPAqAoyrBAAAQBQgvZcEWBcbx3lWIARAOPcYgAAAQEICgPmLVkBPFvl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":528,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347872,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sxlAAD4GEr+sEAABwKgKMoL2AFBvHeVYXBFgXYAQAOXcYAAAAQEICgE8W+UD5i1Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":532,"flow_packet_id":1,"flow_first_seen":1499347873465,"flow_last_seen":1499347873465,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33594,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":532,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347873,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+eFAAD4Gy+6sEAABwKgKMoM6AFCd+qWaAAAAAKACchA6LQAAAgQFtAQCCAoBPFx7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":532,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347873,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQgzpjWOt2nfqlm6AScSC6ZwAAAgQFtAQCCAoD5i3vATxcewEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":532,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347873,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+eJAAD4Gy\/WsEAABwKgKMoM6AFCd+qWbY1jrd4AQAOVZbwAAAQEICgE8XHsD5i3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":529,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347873,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA019FAAD4G7gasEAABwKgKMoMEAFA06oCygiyu14ARAOUKAgAAAQEICgE8XN8D5ijz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":529,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347873,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gIRAAEAGQ1TAqAoyrBAAAQBQgwSCLK7XNOqAs4ARAOMEowAAAQEICgPmLlMBPFzf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":529,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347873,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA019JAAD4G7gWsEAABwKgKMoMEAFA06oCzgiyu2IAQAOUEoQAAAQEICgE8XN8D5i5T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":533,"flow_packet_id":1,"flow_first_seen":1499347874737,"flow_last_seen":1499347874737,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33608,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":533,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347874,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA88wxAAD4G0sOsEAABwKgKMoNIAFDgx661AAAAAKACchDs+AAAAgQFtAQCCAoBPF25AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":533,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347874,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg0iSQssc4MeutqAScSBdZQAAAgQFtAQCCAoD5i8tATxduQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":533,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347874,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08w1AAD4G0sqsEAABwKgKMoNIAFDgx662kkLLHYAQAOX8bAAAAQEICgE8XbkD5i8t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":530,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347874,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbVAAD4GaCOsEAABwKgKMoMSAFAbjgUQnfQwcoARAOX\/WAAAAQEICgE8XdkD5iow","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":530,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347874,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Hz9AAEAGpJnAqAoyrBAAAQBQgxKd9DByG44FEYARAOP6PAAAAQEICgPmL00BPF3Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":530,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347874,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XbZAAD4GaCKsEAABwKgKMoMSAFAbjgURnfQwc4AQAOX6OgAAAQEICgE8XdkD5i9N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":490,"flow_packet_id":6,"flow_first_seen":1499347801271,"flow_last_seen":1499347806841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32838,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":490,"flow_packet_id":6,"flow_first_seen":1499347801271,"flow_last_seen":1499347806841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32838,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":491,"flow_packet_id":6,"flow_first_seen":1499347802549,"flow_last_seen":1499347807841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32852,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":491,"flow_packet_id":6,"flow_first_seen":1499347802549,"flow_last_seen":1499347807841,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32852,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":492,"flow_packet_id":6,"flow_first_seen":1499347805119,"flow_last_seen":1499347810842,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32878,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":492,"flow_packet_id":6,"flow_first_seen":1499347805119,"flow_last_seen":1499347810842,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32878,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":493,"flow_packet_id":6,"flow_first_seen":1499347806390,"flow_last_seen":1499347811528,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32892,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":493,"flow_packet_id":6,"flow_first_seen":1499347806390,"flow_last_seen":1499347811528,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32892,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":457,"flow_packet_id":311,"flow_first_seen":1499347743331,"flow_last_seen":1499347811268,"flow_tot_l4_data_len":242343,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":779,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":60464,"dst_port":80,"l4_proto":"tcp"}
+0921{"flow_id":531,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":531,"flow_packet_id":4,"flow_first_seen":1499347872187,"flow_last_seen":1499347877028,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33580,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0406{"flow_id":531,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0prZAAEAGHSLAqAoyrBAAAQBQgyztIpfcwrWUfoAQAOsItAAAAQEICgPmMWoBPF\/2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2801{"flow_id":531,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":1837,"pkt":"AMGxFOsxABm5CmnxCABFAAcfprdAAEAGFjbAqAoyrBAAAQBQgyztIpfcwrWUfoAYAOt9\/QAAAQEICgPmMWsBPF\/2SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMxOjE2IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWG1P4zgQ\/gzS\/gefTzpgpcbb2y+3XJoVtHAgsbfctix70kmRm7itwYmD7bTw72\/sOG14LdkioeKXeXk84xnP5N12+Mvga3\/07\/kRmplMoPOLw7PTPsIdQi4\/9gkZjAbox8noyxnqBh\/Q0CieGEKO\/sYIz4wp9glZLBbB4mMg1ZSMvpFbK6Vr2fywox1PkJoUR++2322HTs9tJnLde0JG99OnTxVrRb4VzhhNYbi1FWbMUGRZOuym5PMe7svcsNx0RncFwyipZj1s2K0hVsSfKJlRpZnpXYyOO39gRCqZW6HhRrDoeylypuiYC27u9tE3NhEsMSxFfSW1RkNuGBomiheG51O0+2M43EP7+2hAsxzVvIKhSzZGB0UheEINlznaHXy\/PNhD827Q\/YDeD9icCVlkAO19SCrFHoXg+TVSTPSwNneC6RljBiMDp\/GHSLTGaKbYpIeDgMBfOl9Qu0oyyvPAbZPH0jiYopbzH8\/olBFYui9pQueWLHAbSxnanbYJ4YrOabWKkVbJPSBX2v0\/BwXBlcZRSCpK7zniXWfHY5neoURQbb0uM4Yrl6Z8jnjaw9Z3cCKmvNcbW1ZIY30r5Nn0ERJ3SE2EnMqgyKcYUQEXYY2jVucGrKDukWpr5BgcVza0P9qLC5qmLK0OBASlqM9pdw+FTK6taQRHMk9A9XUPL3ieykUAWw5Hb6c6SbCDa1ZgoPfcFeDoBMwWEgpWFjzafo1AnkP0lYld0kExK16Q\/5AUR6eNlXZqIeDKYo2+JQ2OhnaICIQfLKLBYUMZKUW0gUHnjfjmcD3GqjSMvIDqaQYcHdr\/6FiqpKUHHgpktyxpA8DR46gvs4zmKTrNr5jzyGYoEq0mbVA4ekAx\/Ha8meIJJ8HnAkK1x4GzTNmaW\/IqfhwdcwjuU7uiN7ZNWQhJ0zbW8RwexoWbbegfWhh4uVq5yLO4uGVJqRjqH5yP+icHm0HRN4K3weHoIab\/OXury2olxmN43Fo5pcH1AA3aPbTLe5uhWjB6HfNWkGoWHF3CCA2ZtrcVnQ5apteHcm+1jlsBqRhwBPUM1Cpfv2xoCitONfRrVlVRr8KhahzL4usN0Oi21tA1iqGR6j6EDZ8gF4tQXa59DldkOLL1I9yPaqmdOYCf5xO5Rl2DCkfnJ+cQHRPZThEdy9KsUbOkwdGBHb6dWW2ht1b9ighHZ278AICv2O7Vfs8XgraEXRWC0MnYXa\/b7jULwXDW\/ZnuAkrmri+YG8Lnywo2TmTKYqoY9fXzRKoM5TSDah34oex1Ka6Hf8UIuqWZBOx\/HY18bRoW\/sSXM2p2NLqTpXLMn+vKOi\/KZvGPvWj7u6xvm0S6HGccyOZUlDAdVlOvjRRR1VQQi9Ituq5gaeBw9nv0BeLN3T6V0eqtgEW7590Dl2HlVtv7ad8vygXVhWsZ4YawW+tl4gzb0WDYeGnY2BkWuiGqptAIYngUaH6No5+XtbxErfEBdwxFgmEqPoKuCo4b96G9MfHQd34tMb4sbz1OlgcLfs0LlnLqRNtZ8+S6Pvnz2F4v42U8\/pjJlC9zYSIzm507E3oTuC8CT4J4BeOrNFc4qWDKdJ2EF9U9om7q8Mmluup14zhW0G5Wv3UGeSbj+LBPBKNqGUxPpSV9pw3LYpvKnwzPcWmMbXN9eH7nbIFOmCiWKbOQRVnENZnM+1XSXfX8+0BxUeyiZx7bOUiMZyDRXsfPAMk96b\/VjugJudhBezhCa2ENIRcl7G2BaSdzLTRrTSr4FNKmYBNIXyHLogvNlE17+yGBGaJpxnPvQpjXbzM6sx93PA1IXFHAo3o6GPqdlGubvdPai886dCKlufeto4g2+dhUPPWqNRMwse9W9VnOfTCL\/geoshewERQAAA==","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":531,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ychAAD4G\/A+sEAABwKgKMoMsAFDCtZR+7SKex4AQAQABsgAAAQEICgE8X\/cD5jFr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":534,"flow_packet_id":1,"flow_first_seen":1499347877292,"flow_last_seen":1499347877292,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33634,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":534,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8t4hAAD4GDkisEAABwKgKMoNiAFCEB9ewAAAAAKACchAeJQAAAgQFtAQCCAoBPGA4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":534,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg2I\/o2nZhAfXsaAScSA\/9QAAAgQFtAQCCAoD5jGsATxgOAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":534,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t4lAAD4GDk+sEAABwKgKMoNiAFCEB9exP6Np2oAQAOXe\/AAAAQEICgE8YDgD5jGs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":531,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2946{"flow_id":531,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":1933,"pkt":"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","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":531,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347877,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ycpAAD4G\/A2sEAABwKgKMoMsAFDCtZbH7SKmEoAQAR33egAAAQEICgE8YDoD5jGu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":531,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":531,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":531,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ycxAAD4G\/AusEAABwKgKMoMsAFDCtZhG7SKs\/IAQATns\/QAAAQEICgE8YTYD5jKq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":535,"flow_packet_id":1,"flow_first_seen":1499347878568,"flow_last_seen":1499347878568,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33648,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":535,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UNxAAD4GdPSsEAABwKgKMoNwAFDv6DGrAAAAAKACchBW\/AAAAgQFtAQCCAoBPGF3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":535,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg3Dm1iqC7+gxrKAScSAPsQAAAgQFtAQCCAoD5jLrATxhdwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":535,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UN1AAD4GdPusEAABwKgKMoNwAFDv6DGs5tYqg4AQAOWuuAAAAQEICgE8YXcD5jLr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":531,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":651,"pkt":"ABm5CmnxAMGxFOsxCABFAAJ9yc1AAD4G+cGsEAABwKgKMoMsAFDCtZhG7SKs\/IAYATnRcAAAAQEICgE8YXcD5jKqR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvP25hbWU9JTNDc2NyaXB0JTNFY29uc29sZS5sb2clMjglMjdNTTBJRThOQU1INkFYSVZaQ1A0WEFSRUpYOFZRSk5EM0RGQzJZNzJKWjJSR083T0NWUyUyNyUyOSUzQmNvbnNvbGUubG9nJTI4ZG9jdW1lbnQuY29va2llJTI5JTNCJTNDJTJGc2NyaXB0JTNFIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClJlZmVyZXI6IGh0dHA6Ly8yMDUuMTc0LjE2NS42OC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvDQpDb29raWU6IHNlY3VyaXR5PWxvdzsgc2VjdXJpdHk9bG93OyBQSFBTRVNTSUQ9djZvb2tmNmUyNm4xaWRvNXNpdmU2c2FpNzENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2932{"flow_id":531,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":1935,"pkt":"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","pkt_caplen":1935,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":532,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+eNAAD4Gy\/SsEAABwKgKMoM6AFCd+qWbY1jrd4ARAOVUKAAAAQEICgE8YcED5i3v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":532,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02EFAAEAG65bAqAoyrBAAAQBQgzpjWOt3nfqlnIARAONO4gAAAQEICgPmMzYBPGHB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":532,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347878,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+eRAAD4Gy\/OsEAABwKgKMoM6AFCd+qWcY1jreIAQAOVO4AAAAQEICgE8YcED5jM2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":533,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347879,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08w5AAD4G0smsEAABwKgKMoNIAFDgx662kkLLHYARAOX3aQAAAQEICgE8YrsD5i8t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":533,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347879,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/y1AAEAGxKrAqAoyrBAAAQBQg0iSQssd4Meut4ARAOPyZwAAAQEICgPmNDABPGK7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":533,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347879,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA08w9AAD4G0sisEAABwKgKMoNIAFDgx663kkLLHoAQAOXyZAAAAQEICgE8YrwD5jQw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":536,"flow_packet_id":1,"flow_first_seen":1499347881141,"flow_last_seen":1499347881141,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33674,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":536,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347881,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80HhAAD4G9VesEAABwKgKMoOKAFDzHbOCAAAAAKACchDPUgAAAgQFtAQCCAoBPGP6AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":536,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347881,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg4pPHZMl8x2zg6AScSC0mgAAAgQFtAQCCAoD5jVuATxj+gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":536,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347881,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HlAAD4G9V6sEAABwKgKMoOKAFDzHbODTx2TJoAQAOVTogAAAQEICgE8Y\/oD5jVu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":537,"flow_packet_id":1,"flow_first_seen":1499347882404,"flow_last_seen":1499347882404,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33688,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":537,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347882,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eWdAAD4GTGmsEAABwKgKMoOYAFA4phxRAAAAAKACchAfsgAAAgQFtAQCCAoBPGU2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":537,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347882,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg5hCgWTIOKYcUqAScSA+twAAAgQFtAQCCAoD5jaqATxlNgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":537,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347882,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eWhAAD4GTHCsEAABwKgKMoOYAFA4phxSQoFkyYAQAOXdvgAAAQEICgE8ZTYD5jaq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":534,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347882,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t4pAAD4GDk6sEAABwKgKMoNiAFCEB9exP6Np2oARAOXZiQAAAQEICgE8ZaoD5jGs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":534,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347882,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XsRAAEAGZRTAqAoyrBAAAQBQg2I\/o2nahAfXsoARAOPUGAAAAQEICgPmNx4BPGWq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":534,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347882,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0t4tAAD4GDk2sEAABwKgKMoNiAFCEB9eyP6Np24AQAOXUFgAAAQEICgE8ZaoD5jce","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":538,"flow_packet_id":1,"flow_first_seen":1499347883693,"flow_last_seen":1499347883693,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33702,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":538,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347883,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WYNAAD4GbE2sEAABwKgKMoOmAFDBWz\/7AAAAAKACchByAgAAAgQFtAQCCAoBPGZ4AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":538,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347883,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg6YJ\/gJMwVs\/\/KAScSAqxQAAAgQFtAQCCAoD5jfsATxmeAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":538,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347883,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WYRAAD4GbFSsEAABwKgKMoOmAFDBWz\/8Cf4CTYAQAOXJzAAAAQEICgE8ZngD5jfs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":535,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347883,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UN5AAD4GdPqsEAABwKgKMoNwAFDv6DGs5tYqg4ARAOWpigAAAQEICgE8ZqQD5jLr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":535,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347883,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EptAAEAGsT3AqAoyrBAAAQBQg3Dm1iqD7+gxrYARAOOkXgAAAQEICgPmOBgBPGak","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":535,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347883,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UN9AAD4GdPmsEAABwKgKMoNwAFDv6DGt5tYqhIAQAOWkXAAAAQEICgE8ZqQD5jgY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":495,"flow_packet_id":6,"flow_first_seen":1499347810243,"flow_last_seen":1499347815843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32932,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":495,"flow_packet_id":6,"flow_first_seen":1499347810243,"flow_last_seen":1499347815843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32932,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":496,"flow_packet_id":6,"flow_first_seen":1499347811525,"flow_last_seen":1499347816843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32946,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":496,"flow_packet_id":6,"flow_first_seen":1499347811525,"flow_last_seen":1499347816843,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32946,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":497,"flow_packet_id":6,"flow_first_seen":1499347812797,"flow_last_seen":1499347817844,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32960,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":497,"flow_packet_id":6,"flow_first_seen":1499347812797,"flow_last_seen":1499347817844,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32960,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":498,"flow_packet_id":6,"flow_first_seen":1499347814066,"flow_last_seen":1499347819845,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32974,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":498,"flow_packet_id":6,"flow_first_seen":1499347814066,"flow_last_seen":1499347819845,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32974,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":499,"flow_packet_id":6,"flow_first_seen":1499347815351,"flow_last_seen":1499347820846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":499,"flow_packet_id":6,"flow_first_seen":1499347815351,"flow_last_seen":1499347820846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32988,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":500,"flow_packet_id":6,"flow_first_seen":1499347816657,"flow_last_seen":1499347821846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33002,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":500,"flow_packet_id":6,"flow_first_seen":1499347816657,"flow_last_seen":1499347821846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33002,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":501,"flow_packet_id":6,"flow_first_seen":1499347819250,"flow_last_seen":1499347824846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33028,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":501,"flow_packet_id":6,"flow_first_seen":1499347819250,"flow_last_seen":1499347824846,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33028,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":502,"flow_packet_id":6,"flow_first_seen":1499347820510,"flow_last_seen":1499347825848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33042,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":502,"flow_packet_id":6,"flow_first_seen":1499347820510,"flow_last_seen":1499347825848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33042,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":539,"flow_packet_id":1,"flow_first_seen":1499347886296,"flow_last_seen":1499347886296,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33728,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":539,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347886,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8J3NAAD4Gnl2sEAABwKgKMoPAAFDfgE5wAAAAAKACchBCwwAAAgQFtAQCCAoBPGkDAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":539,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347886,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg8DWbqB034BOcaAScSCOYQAAAgQFtAQCCAoD5jp3ATxpAwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":539,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347886,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0J3RAAD4GnmSsEAABwKgKMoPAAFDfgE5x1m6gdYAQAOUtaQAAAQEICgE8aQMD5jp3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":536,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347886,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HpAAD4G9V2sEAABwKgKMoOKAFDzHbODTx2TJoARAOVOCQAAAQEICgE8aZID5jVu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":536,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347886,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qCBAAEAGG7jAqAoyrBAAAQBQg4pPHZMm8x2zhIARAONIcgAAAQEICgPmOwYBPGmS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":536,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347886,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HtAAD4G9VysEAABwKgKMoOKAFDzHbOETx2TJ4AQAOVIcAAAAQEICgE8aZID5jsG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":540,"flow_packet_id":1,"flow_first_seen":1499347887572,"flow_last_seen":1499347887572,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33742,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":540,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347887,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vidAAD4GB6msEAABwKgKMoPOAFDy3tRlAAAAAKACchCoIgAAAgQFtAQCCAoBPGpCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":540,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347887,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg85IicNz8t7UZqAScSBdaAAAAgQFtAQCCAoD5ju2ATxqQgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":540,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347887,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vihAAD4GB7CsEAABwKgKMoPOAFDy3tRmSInDdIAQAOX8bwAAAQEICgE8akID5ju2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":537,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347887,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eWlAAD4GTG+sEAABwKgKMoOYAFA4phxSQoFkyYARAOXYZwAAAQEICgE8aowD5jaq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":537,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347887,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WMlAAEAGaw\/AqAoyrBAAAQBQg5hCgWTJOKYcU4ARAOPTEgAAAQEICgPmPAABPGqM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":537,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347887,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eWpAAD4GTG6sEAABwKgKMoOYAFA4phxTQoFkyoAQAOXTEAAAAQEICgE8aowD5jwA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":538,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347888,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WYVAAD4GbFOsEAABwKgKMoOmAFDBWz\/8Cf4CTYARAOXEvQAAAQEICgE8a4YD5jfs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":538,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347888,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0PrdAAEAGhSHAqAoyrBAAAQBQg6YJ\/gJNwVs\/\/YARAOO\/sAAAAQEICgPmPPoBPGuG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":538,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347888,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WYZAAD4GbFKsEAABwKgKMoOmAFDBWz\/9Cf4CToAQAOW\/rgAAAQEICgE8a4YD5jz6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":541,"flow_packet_id":1,"flow_first_seen":1499347890192,"flow_last_seen":1499347890192,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33768,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":541,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347890,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gVNAAD4GRH2sEAABwKgKMoPoAFBPU+2CAAAAAKACchAv6AAAAgQFtAQCCAoBPGzRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":541,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347890,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg+hXA92bT1Ptg6AScSC5\/AAAAgQFtAQCCAoD5j5FATxs0QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":541,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347890,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gVRAAD4GRISsEAABwKgKMoPoAFBPU+2DVwPdnIAQAOVZBAAAAQEICgE8bNED5j5F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":542,"flow_packet_id":1,"flow_first_seen":1499347891536,"flow_last_seen":1499347891536,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33782,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":542,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347891,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JsNAAD4Gnw2sEAABwKgKMoP2AFBiQUjiAAAAAKACchDAPAAAAgQFtAQCCAoBPG4hAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":542,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347891,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQg\/bwNNpHYkFI46AScSCzIwAAAgQFtAQCCAoD5j+VATxuIQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":542,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347891,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JsRAAD4GnxSsEAABwKgKMoP2AFBiQUjj8DTaSIAQAOVSKwAAAQEICgE8biED5j+V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":539,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347891,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0J3VAAD4GnmOsEAABwKgKMoPAAFDfgE5x1m6gdYARAOUn9wAAAQEICgE8bnQD5jp3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":539,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347891,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0n5xAAEAGJDzAqAoyrBAAAQBQg8DWbqB134BOcoARAOMihgAAAQEICgPmP+kBPG50","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":539,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347891,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0J3ZAAD4GnmKsEAABwKgKMoPAAFDfgE5y1m6gdoAQAOUigwAAAQEICgE8bnUD5j\/p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":540,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347892,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vilAAD4GB6+sEAABwKgKMoPOAFDy3tRmSInDdIARAOX3QQAAAQEICgE8b28D5ju2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":540,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347892,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0g5dAAEAGQEHAqAoyrBAAAQBQg85IicN08t7UZ4ARAOPyFQAAAQEICgPmQOMBPG9v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":540,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347892,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vipAAD4GB66sEAABwKgKMoPOAFDy3tRnSInDdYAQAOXyEwAAAQEICgE8b28D5kDj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":543,"flow_packet_id":1,"flow_first_seen":1499347894093,"flow_last_seen":1499347894093,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33808,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":543,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347894,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W6ZAAD4GaiqsEAABwKgKMoQQAFDdYCsGAAAAAKACchBgYAAAAgQFtAQCCAoBPHCgAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":543,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347894,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhBBGWrmb3WArB6AScSAbTwAAAgQFtAQCCAoD5kIUATxwoAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":543,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347894,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W6dAAD4GajGsEAABwKgKMoQQAFDdYCsHRlq5nIAQAOW6VgAAAQEICgE8cKAD5kIU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":544,"flow_packet_id":1,"flow_first_seen":1499347895396,"flow_last_seen":1499347895396,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33822,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":544,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347895,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+PRAAD4GzNusEAABwKgKMoQeAFBBmIkSAAAAAKACchCcyAAAAgQFtAQCCAoBPHHmAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":544,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347895,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhB6fI8DwQZiJE6AScSD2UgAAAgQFtAQCCAoD5kNaATxx5gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":544,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347895,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+PVAAD4GzOKsEAABwKgKMoQeAFBBmIkTnyPA8YAQAOWVWgAAAQEICgE8ceYD5kNa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":541,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347895,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gVVAAD4GRIOsEAABwKgKMoPoAFBPU+2DVwPdnIARAOVTdwAAAQEICgE8cl0D5j5F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":541,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347895,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nk1AAEAGJYvAqAoyrBAAAQBQg+hXA92cT1PthIARAONN7AAAAQEICgPmQ9EBPHJd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":541,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347895,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gVZAAD4GRIKsEAABwKgKMoPoAFBPU+2EVwPdnYAQAOVN6gAAAQEICgE8cl0D5kPR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":503,"flow_packet_id":7,"flow_first_seen":1499347823117,"flow_last_seen":1499347828846,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33068,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":503,"flow_packet_id":7,"flow_first_seen":1499347823117,"flow_last_seen":1499347828846,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33068,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":504,"flow_packet_id":6,"flow_first_seen":1499347824426,"flow_last_seen":1499347829847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33082,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":504,"flow_packet_id":6,"flow_first_seen":1499347824426,"flow_last_seen":1499347829847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33082,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":505,"flow_packet_id":6,"flow_first_seen":1499347825732,"flow_last_seen":1499347830847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33096,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":505,"flow_packet_id":6,"flow_first_seen":1499347825732,"flow_last_seen":1499347830847,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33096,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":506,"flow_packet_id":6,"flow_first_seen":1499347828369,"flow_last_seen":1499347833848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33122,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":506,"flow_packet_id":6,"flow_first_seen":1499347828369,"flow_last_seen":1499347833848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33122,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":507,"flow_packet_id":6,"flow_first_seen":1499347829667,"flow_last_seen":1499347834848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":507,"flow_packet_id":6,"flow_first_seen":1499347829667,"flow_last_seen":1499347834848,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33136,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":545,"flow_packet_id":1,"flow_first_seen":1499347896716,"flow_last_seen":1499347896716,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33836,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":545,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347896,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SsxAAD4GewSsEAABwKgKMoQsAFDW1Dn8AAAAAKACchBVSgAAAgQFtAQCCAoBPHMwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":545,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347896,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhCxEXQKe1tQ5\/aAScSDGowAAAgQFtAQCCAoD5kSkATxzMAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":545,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347896,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ss1AAD4GewusEAABwKgKMoQsAFDW1Dn9RF0Cn4AQAOVlqwAAAQEICgE8czAD5kSk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":542,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347896,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JsVAAD4GnxOsEAABwKgKMoP2AFBiQUjj8DTaSIARAOVM9AAAAQEICgE8c1cD5j+V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":542,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347896,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0noNAAEAGJVXAqAoyrBAAAQBQg\/bwNNpIYkFI5IARAONHvwAAAQEICgPmRMsBPHNX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":542,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347896,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JsZAAD4GnxKsEAABwKgKMoP2AFBiQUjk8DTaSYAQAOVHvQAAAQEICgE8c1cD5kTL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":546,"flow_packet_id":1,"flow_first_seen":1499347899275,"flow_last_seen":1499347899275,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33862,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":546,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347899,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8zuFAAD4G9u6sEAABwKgKMoRGAFBlPbtRAAAAAKACchBC8gAAAgQFtAQCCAoBPHWwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":546,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347899,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhEbZtc2dZT27UqAScSBRcwAAAgQFtAQCCAoD5kckATx1sAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":546,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347899,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zuJAAD4G9vWsEAABwKgKMoRGAFBlPbtS2bXNnoAQAOXwegAAAQEICgE8dbAD5kck","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":543,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347899,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W6hAAD4GajCsEAABwKgKMoQQAFDdYCsHRlq5nIARAOW0sAAAAQEICgE8dkUD5kIU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":543,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347899,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/iZAAEAGxbHAqAoyrBAAAQBQhBBGWrmc3WArCIARAOOvCwAAAQEICgPmR7oBPHZF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":543,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347899,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W6lAAD4Gai+sEAABwKgKMoQQAFDdYCsIRlq5nYAQAOWvCAAAAQEICgE8dkYD5ke6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":547,"flow_packet_id":1,"flow_first_seen":1499347900544,"flow_last_seen":1499347900544,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33876,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":547,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347900,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8T6pAAD4GdiasEAABwKgKMoRUAFAKnjlHAAAAAKACchAeUQAAAgQFtAQCCAoBPHbtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":547,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347900,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhFRwu76qCp45SKAScSCjggAAAgQFtAQCCAoD5khhATx27QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":547,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347900,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T6tAAD4Gdi2sEAABwKgKMoRUAFAKnjlIcLu+q4AQAOVCigAAAQEICgE8du0D5khh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":544,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347900,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+PZAAD4GzOGsEAABwKgKMoQeAFBBmIkTnyPA8YARAOWQAAAAAQEICgE8dz8D5kNa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":544,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347900,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0iEVAAEAGO5PAqAoyrBAAAQBQhB6fI8DxQZiJFIARAOOKpwAAAQEICgPmSLQBPHc\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":544,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347900,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+PdAAD4GzOCsEAABwKgKMoQeAFBBmIkUnyPA8oAQAOWKpAAAAQEICgE8d0AD5ki0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":545,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347901,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ss5AAD4GewqsEAABwKgKMoQsAFDW1Dn9RF0Cn4ARAOVgoQAAAQEICgE8eDkD5kSk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":545,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347901,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SzFAAEAGeKfAqAoyrBAAAQBQhCxEXQKf1tQ5\/oARAONbmAAAAQEICgPmSa4BPHg5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":545,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347901,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ss9AAD4GewmsEAABwKgKMoQsAFDW1Dn+RF0CoIAQAOVblQAAAQEICgE8eDoD5kmu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":548,"flow_packet_id":1,"flow_first_seen":1499347903125,"flow_last_seen":1499347903125,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33902,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":548,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347903,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Iy1AAD4GoqOsEAABwKgKMoRuAFDn\/lpfAAAAAKACchAdOQAAAgQFtAQCCAoBPHlyAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":548,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347903,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhG41OTml5\/5aYKAScSBgbQAAAgQFtAQCCAoD5krmATx5cgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":548,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347903,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Iy5AAD4GoqqsEAABwKgKMoRuAFDn\/lpgNTk5poAQAOX\/dAAAAQEICgE8eXID5krm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":549,"flow_packet_id":1,"flow_first_seen":1499347904387,"flow_last_seen":1499347904387,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33916,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":549,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347904,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wAJAAD4GBc6sEAABwKgKMoR8AFDhZ7qvAAAAAKACchDCNgAAAgQFtAQCCAoBPHqtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":549,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347904,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhHxZjS4N4We6sKAScSDrcgAAAgQFtAQCCAoD5kwiATx6rQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":549,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347904,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wANAAD4GBdWsEAABwKgKMoR8AFDhZ7qwWY0uDoAQAOWKeQAAAQEICgE8eq4D5kwi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":546,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347904,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zuNAAD4G9vSsEAABwKgKMoRGAFBlPbtS2bXNnoARAOXrAgAAAQEICgE8eycD5kck","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":546,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347904,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0gQJAAEAGQtbAqAoyrBAAAQBQhEbZtc2eZT27U4ARAOPliwAAAQEICgPmTJwBPHsn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":546,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347904,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0zuRAAD4G9vOsEAABwKgKMoRGAFBlPbtT2bXNn4AQAOXliAAAAQEICgE8eygD5kyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":550,"flow_packet_id":1,"flow_first_seen":1499347905694,"flow_last_seen":1499347905694,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33930,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":550,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347905,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8dZJAAD4GUD6sEAABwKgKMoSKAFAcIA5mAAAAAKACchAycwAAAgQFtAQCCAoBPHv0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":550,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347905,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhIr8f9XqHCAOZ6AScSAPmAAAAgQFtAQCCAoD5k1pATx79AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":550,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347905,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dZNAAD4GUEWsEAABwKgKMoSKAFAcIA5n\/H\/V64AQAOWunwAAAQEICgE8e\/QD5k1p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":547,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347905,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T6xAAD4GdiysEAABwKgKMoRUAFAKnjlIcLu+q4ARAOU9VQAAAQEICgE8fCED5khh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":547,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347905,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08z1AAEAG0JrAqAoyrBAAAQBQhFRwu76rCp45SYARAOM4IQAAAQEICgPmTZYBPHwh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":547,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347905,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T61AAD4GdiusEAABwKgKMoRUAFAKnjlJcLu+rIAQAOU4HgAAAQEICgE8fCID5k2W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":508,"flow_packet_id":6,"flow_first_seen":1499347832201,"flow_last_seen":1499347837849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33162,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":508,"flow_packet_id":6,"flow_first_seen":1499347832201,"flow_last_seen":1499347837849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33162,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":509,"flow_packet_id":6,"flow_first_seen":1499347833462,"flow_last_seen":1499347838849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33176,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":509,"flow_packet_id":6,"flow_first_seen":1499347833462,"flow_last_seen":1499347838849,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33176,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":510,"flow_packet_id":6,"flow_first_seen":1499347836095,"flow_last_seen":1499347841850,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33202,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":510,"flow_packet_id":6,"flow_first_seen":1499347836095,"flow_last_seen":1499347841850,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33202,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":511,"flow_packet_id":6,"flow_first_seen":1499347837373,"flow_last_seen":1499347842851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33216,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":511,"flow_packet_id":6,"flow_first_seen":1499347837373,"flow_last_seen":1499347842851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33216,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":512,"flow_packet_id":6,"flow_first_seen":1499347838675,"flow_last_seen":1499347843851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33230,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":512,"flow_packet_id":6,"flow_first_seen":1499347838675,"flow_last_seen":1499347843851,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33230,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":551,"flow_packet_id":1,"flow_first_seen":1499347908253,"flow_last_seen":1499347908253,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33956,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":551,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347908,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XLdAAD4GaRmsEAABwKgKMoSkAFDBACLDAAAAAKACchB2mwAAAgQFtAQCCAoBPH50AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":551,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347908,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhKRv9+kSwQAixKAScSDKoQAAAgQFtAQCCAoD5k\/oATx+dAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":551,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347908,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLhAAD4GaSCsEAABwKgKMoSkAFDBACLEb\/fpE4AQAOVpqQAAAQEICgE8fnQD5k\/o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":548,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347908,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Iy9AAD4GoqmsEAABwKgKMoRuAFDn\/lpgNTk5poARAOX51QAAAQEICgE8fxAD5krm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":548,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347908,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aSJAAEAGWrbAqAoyrBAAAQBQhG41OTmm5\/5aYYARAOP0OAAAAQEICgPmUIQBPH8Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":548,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347908,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IzBAAD4GoqisEAABwKgKMoRuAFDn\/lphNTk5p4AQAOX0NgAAAQEICgE8fxAD5lCE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":552,"flow_packet_id":1,"flow_first_seen":1499347909575,"flow_last_seen":1499347909575,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33970,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":552,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347909,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8\/H5AAD4GyVGsEAABwKgKMoSyAFC+M4PAAAAAAKACchAXEwAAAgQFtAQCCAoBPH++AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":552,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347909,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhLJ\/QSQIvjODwaAScSAfjwAAAgQFtAQCCAoD5lEzATx\/vgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":552,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347909,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/H9AAD4GyVisEAABwKgKMoSyAFC+M4PBf0EkCYAQAOW+lQAAAQEICgE8f78D5lEz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":549,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347909,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wARAAD4GBdSsEAABwKgKMoR8AFDhZ7qwWY0uDoARAOWFHAAAAQEICgE8gAoD5kwi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":549,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347909,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0f3BAAEAGRGjAqAoyrBAAAQBQhHxZjS4O4We6sYARAON\/wQAAAQEICgPmUX4BPIAK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":549,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347909,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wAVAAD4GBdOsEAABwKgKMoR8AFDhZ7qxWY0uD4AQAOV\/vwAAAQEICgE8gAoD5lF+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":550,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347910,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dZRAAD4GUESsEAABwKgKMoSKAFAcIA5n\/H\/V64ARAOWpjgAAAQEICgE8gQQD5k1p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":550,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347910,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0h5NAAEAGPEXAqAoyrBAAAQBQhIr8f9XrHCAOaIARAOOkgAAAAQEICgPmUngBPIEE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":550,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347910,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0dZVAAD4GUEOsEAABwKgKMoSKAFAcIA5o\/H\/V7IAQAOWkfgAAAQEICgE8gQQD5lJ4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":553,"flow_packet_id":1,"flow_first_seen":1499347912141,"flow_last_seen":1499347912141,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33996,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":553,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347912,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8AShAAD4GxKisEAABwKgKMoTMAFAccoNoAAAAAKACchC2kAAAAgQFtAQCCAoBPIJAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":553,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347912,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhMwGDz+bHHKDaaAScSAaKwAAAgQFtAQCCAoD5lO0ATyCQAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":553,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347912,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ASlAAD4GxK+sEAABwKgKMoTMAFAccoNpBg8\/nIAQAOW5MgAAAQEICgE8gkAD5lO0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":554,"flow_packet_id":1,"flow_first_seen":1499347913416,"flow_last_seen":1499347913416,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34010,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":554,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347913,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80\/hAAD4G8desEAABwKgKMoTaAFDALVCHAAAAAKACchBEaQAAAgQFtAQCCAoBPIN\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":554,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347913,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhNreW6gWwC1QiKAScSBl\/AAAAgQFtAQCCAoD5lTzATyDfwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":554,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347913,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00\/lAAD4G8d6sEAABwKgKMoTaAFDALVCI3luoF4AQAOUFBAAAAQEICgE8g38D5lTz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":551,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347913,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLlAAD4GaR+sEAABwKgKMoSkAFDBACLEb\/fpE4ARAOVkKgAAAQEICgE8g\/ID5k\/o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":551,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347913,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vHVAAEAGB2PAqAoyrBAAAQBQhKRv9+kTwQAixYARAONerQAAAQEICgPmVWYBPIPy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":551,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347913,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XLpAAD4GaR6sEAABwKgKMoSkAFDBACLFb\/fpFIAQAOVeqwAAAQEICgE8g\/ID5lVm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":555,"flow_packet_id":1,"flow_first_seen":1499347914710,"flow_last_seen":1499347914710,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34024,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":555,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347914,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8oQ5AAD4GJMKsEAABwKgKMoToAFDafCXMAAAAAKACchBThAAAAgQFtAQCCAoBPITCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":555,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347914,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhOgBH2BK2nwlzaAScSCY3AAAAgQFtAQCCAoD5lY3ATyEwgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":555,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347914,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oQ9AAD4GJMmsEAABwKgKMoToAFDafCXNAR9gS4AQAOU34wAAAQEICgE8hMMD5lY3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":552,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347914,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/IBAAD4GyVesEAABwKgKMoSyAFC+M4PBf0EkCYARAOW5ZwAAAQEICgE8hOwD5lEz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":552,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347914,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cmlAAEAGUW\/AqAoyrBAAAQBQhLJ\/QSQJvjODwoARAOO0OwAAAQEICgPmVmABPITs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":552,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347914,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/IFAAD4GyVasEAABwKgKMoSyAFC+M4PCf0EkCoAQAOW0OQAAAQEICgE8hOwD5lZg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":513,"flow_packet_id":6,"flow_first_seen":1499347841229,"flow_last_seen":1499347846856,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33256,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":513,"flow_packet_id":6,"flow_first_seen":1499347841229,"flow_last_seen":1499347846856,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33256,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":514,"flow_packet_id":6,"flow_first_seen":1499347842491,"flow_last_seen":1499347847857,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33270,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":514,"flow_packet_id":6,"flow_first_seen":1499347842491,"flow_last_seen":1499347847857,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33270,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":515,"flow_packet_id":6,"flow_first_seen":1499347845077,"flow_last_seen":1499347850858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33296,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":515,"flow_packet_id":6,"flow_first_seen":1499347845077,"flow_last_seen":1499347850858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33296,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":516,"flow_packet_id":6,"flow_first_seen":1499347846345,"flow_last_seen":1499347851858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33310,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":516,"flow_packet_id":6,"flow_first_seen":1499347846345,"flow_last_seen":1499347851858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33310,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":517,"flow_packet_id":6,"flow_first_seen":1499347847629,"flow_last_seen":1499347852858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33324,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":517,"flow_packet_id":6,"flow_first_seen":1499347847629,"flow_last_seen":1499347852858,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33324,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":518,"flow_packet_id":6,"flow_first_seen":1499347850209,"flow_last_seen":1499347855859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33350,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":518,"flow_packet_id":6,"flow_first_seen":1499347850209,"flow_last_seen":1499347855859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33350,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":519,"flow_packet_id":6,"flow_first_seen":1499347851476,"flow_last_seen":1499347856859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33364,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":519,"flow_packet_id":6,"flow_first_seen":1499347851476,"flow_last_seen":1499347856859,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33364,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":556,"flow_packet_id":1,"flow_first_seen":1499347917322,"flow_last_seen":1499347917322,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34050,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":556,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347917,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8CqdAAD4GuymsEAABwKgKMoUCAFC+4o3oAAAAAKACchAEWwAAAgQFtAQCCAoBPIdPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":556,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347917,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhQJ4jpXCvuKN6aAScSCaPgAAAgQFtAQCCAoD5ljEATyHTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":556,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347917,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CqhAAD4GuzCsEAABwKgKMoUCAFC+4o3peI6Vw4AQAOU5RQAAAQEICgE8h1AD5ljE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":553,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347917,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ASpAAD4GxK6sEAABwKgKMoTMAFAccoNpBg8\/nIARAOWzlwAAAQEICgE8h9oD5lO0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":553,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347917,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZtJAAEAGXQbAqAoyrBAAAQBQhMwGDz+cHHKDaoARAOOt\/gAAAQEICgPmWU4BPIfa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":553,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347917,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0AStAAD4GxK2sEAABwKgKMoTMAFAccoNqBg8\/nYAQAOWt\/AAAAQEICgE8h9oD5llO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":557,"flow_packet_id":1,"flow_first_seen":1499347918608,"flow_last_seen":1499347918608,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34064,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":557,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347918,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vWVAAD4GCGusEAABwKgKMoUQAFB11zX0AAAAAKACchCkCgAAAgQFtAQCCAoBPIiRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":557,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347918,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhRAjuy7Uddc19aAScSD0bgAAAgQFtAQCCAoD5loFATyIkQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":557,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347918,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vWZAAD4GCHKsEAABwKgKMoUQAFB11zX1I7su1YAQAOWTdgAAAQEICgE8iJED5loF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":554,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347918,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00\/pAAD4G8d2sEAABwKgKMoTaAFDALVCI3luoF4ARAOX\/rQAAAQEICgE8iNQD5lTz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":554,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347918,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08l9AAEAG0XjAqAoyrBAAAQBQhNreW6gXwC1QiYARAOP6WQAAAQEICgPmWkgBPIjU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":554,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347918,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00\/tAAD4G8dysEAABwKgKMoTaAFDALVCJ3luoGIAQAOX6VwAAAQEICgE8iNQD5lpI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":555,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347919,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oRBAAD4GJMisEAABwKgKMoToAFDafCXNAR9gS4ARAOUy1wAAAQEICgE8ic4D5lY3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":555,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347919,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OwlAAEAGiM\/AqAoyrBAAAQBQhOgBH2BL2nwlzoARAOMtzQAAAQEICgPmW0IBPInO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":555,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347919,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0oRFAAD4GJMesEAABwKgKMoToAFDafCXOAR9gTIAQAOUtywAAAQEICgE8ic4D5ltC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":558,"flow_packet_id":1,"flow_first_seen":1499347921170,"flow_last_seen":1499347921170,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34090,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":558,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347921,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rYJAAD4GGE6sEAABwKgKMoUqAFCWpCaTAAAAAKACchCQBAAAAgQFtAQCCAoBPIsRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":558,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347921,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhSrhgaXUlqQmlKAScSCpIAAAAgQFtAQCCAoD5lyGATyLEQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":558,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347921,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rYNAAD4GGFWsEAABwKgKMoUqAFCWpCaU4YGl1YAQAOVIJwAAAQEICgE8ixID5lyG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":559,"flow_packet_id":1,"flow_first_seen":1499347922471,"flow_last_seen":1499347922471,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34104,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":559,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347922,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+oRAAD4Gy0usEAABwKgKMoU4AFCzyHbTAAAAAKACchAhTAAAAgQFtAQCCAoBPIxXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":559,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347922,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhTjpB7A2s8h21KAScSAnOwAAAgQFtAQCCAoD5l3LATyMVwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":559,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347922,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+oVAAD4Gy1KsEAABwKgKMoU4AFCzyHbU6QewN4AQAOXGQgAAAQEICgE8jFcD5l3L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":556,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347922,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CqlAAD4Guy+sEAABwKgKMoUCAFC+4o3peI6Vw4ARAOUz2AAAAQEICgE8jLwD5ljE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":556,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347922,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0y\/JAAEAG9+XAqAoyrBAAAQBQhQJ4jpXDvuKN6oARAOMubAAAAQEICgPmXjEBPIy8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":556,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347922,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0CqpAAD4Guy6sEAABwKgKMoUCAFC+4o3qeI6VxIAQAOUuaQAAAQEICgE8jL0D5l4x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":560,"flow_packet_id":1,"flow_first_seen":1499347923737,"flow_last_seen":1499347923737,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34118,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":560,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347923,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ldBAAD4GMACsEAABwKgKMoVGAFBUeRhDAAAAAKACchDd4QAAAgQFtAQCCAoBPI2TAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":560,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347923,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhUa68naDVHkYRKAScSBKXQAAAgQFtAQCCAoD5l8HATyNkwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":560,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347923,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ldFAAD4GMAesEAABwKgKMoVGAFBUeRhEuvJ2hIAQAOXpZAAAAQEICgE8jZMD5l8H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":557,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347923,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vWdAAD4GCHGsEAABwKgKMoUQAFB11zX1I7su1YARAOWOUAAAAQEICgE8jbYD5loF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":557,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347923,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cf5AAEAGUdrAqAoyrBAAAQBQhRAjuy7Vddc19oARAOOJKwAAAQEICgPmXysBPI22","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":557,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347923,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vWhAAD4GCHCsEAABwKgKMoUQAFB11zX2I7su1oAQAOWJKAAAAQEICgE8jbcD5l8r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":561,"flow_packet_id":1,"flow_first_seen":1499347926328,"flow_last_seen":1499347926328,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34144,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":561,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347926,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Y4hAAD4GYkisEAABwKgKMoVgAFAOjvOTAAAAAKACchBF2gAAAgQFtAQCCAoBPJAbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":561,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347926,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhWB82qzsDo7zlKAScSC3fAAAAgQFtAQCCAoD5mGPATyQGwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":561,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347926,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y4lAAD4GYk+sEAABwKgKMoVgAFAOjvOUfNqs7YAQAOVWhAAAAQEICgE8kBsD5mGP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":558,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347926,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rYRAAD4GGFSsEAABwKgKMoUqAFCWpCaU4YGl1YARAOVClAAAAQEICgE8kKQD5lyG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":558,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347926,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0x8xAAEAG\/AvAqAoyrBAAAQBQhSrhgaXVlqQmlYARAOM9AgAAAQEICgPmYhkBPJCk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":558,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347926,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rYVAAD4GGFOsEAABwKgKMoUqAFCWpCaV4YGl1oAQAOU8\/wAAAQEICgE8kKUD5mIZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":520,"flow_packet_id":6,"flow_first_seen":1499347852742,"flow_last_seen":1499347857860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33378,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":520,"flow_packet_id":6,"flow_first_seen":1499347852742,"flow_last_seen":1499347857860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33378,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":521,"flow_packet_id":6,"flow_first_seen":1499347855324,"flow_last_seen":1499347860860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33404,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":521,"flow_packet_id":6,"flow_first_seen":1499347855324,"flow_last_seen":1499347860860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33404,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":522,"flow_packet_id":6,"flow_first_seen":1499347856593,"flow_last_seen":1499347861860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33418,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":522,"flow_packet_id":6,"flow_first_seen":1499347856593,"flow_last_seen":1499347861860,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33418,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":523,"flow_packet_id":6,"flow_first_seen":1499347859192,"flow_last_seen":1499347864861,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33444,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":523,"flow_packet_id":6,"flow_first_seen":1499347859192,"flow_last_seen":1499347864861,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33444,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":524,"flow_packet_id":6,"flow_first_seen":1499347860489,"flow_last_seen":1499347865862,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33458,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":524,"flow_packet_id":6,"flow_first_seen":1499347860489,"flow_last_seen":1499347865862,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33458,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":525,"flow_packet_id":6,"flow_first_seen":1499347861783,"flow_last_seen":1499347866863,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33472,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":7969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":525,"flow_packet_id":6,"flow_first_seen":1499347861783,"flow_last_seen":1499347866863,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33472,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":562,"flow_packet_id":1,"flow_first_seen":1499347927657,"flow_last_seen":1499347927657,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34158,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":562,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347927,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NcxAAD4GkASsEAABwKgKMoVuAFCXD6SrAAAAAKACchAK5wAAAgQFtAQCCAoBPJFnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":562,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347927,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhW4waOSnlw+krKAScSCP9AAAAgQFtAQCCAoD5mLbATyRZwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":562,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347927,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nc1AAD4GkAusEAABwKgKMoVuAFCXD6SsMGjkqIAQAOUu\/AAAAQEICgE8kWcD5mLb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":559,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347927,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+oZAAD4Gy1GsEAABwKgKMoU4AFCzyHbU6QewN4ARAOXA+QAAAQEICgE8kZ8D5l3L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":559,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347927,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA00yRAAEAG8LPAqAoyrBAAAQBQhTjpB7A3s8h21YARAOO7sgAAAQEICgPmYxMBPJGf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":559,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347927,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+odAAD4Gy1CsEAABwKgKMoU4AFCzyHbV6QewOIAQAOW7sAAAAQEICgE8kZ8D5mMT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":560,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347928,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ldJAAD4GMAasEAABwKgKMoVGAFBUeRhEuvJ2hIARAOXkXQAAAQEICgE8kpkD5l8H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":560,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347928,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EolAAEAGsU\/AqAoyrBAAAQBQhUa68naEVHkYRYARAOPfWAAAAQEICgPmZA0BPJKZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":560,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347928,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ldNAAD4GMAWsEAABwKgKMoVGAFBUeRhFuvJ2hYAQAOXfVgAAAQEICgE8kpkD5mQN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":563,"flow_packet_id":1,"flow_first_seen":1499347930265,"flow_last_seen":1499347930265,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34184,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":563,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347930,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OHxAAD4GjVSsEAABwKgKMoWIAFCpfquPAAAAAKACchDu7QAAAgQFtAQCCAoBPJPzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":563,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347930,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhYivvJwGqX6rkKAScSA6vAAAAgQFtAQCCAoD5mVnATyT8wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":563,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347930,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OH1AAD4GjVusEAABwKgKMoWIAFCpfquQr7ycB4AQAOXZwwAAAQEICgE8k\/MD5mVn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":564,"flow_packet_id":1,"flow_first_seen":1499347931529,"flow_last_seen":1499347931529,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34198,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":564,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347931,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j75AAD4GNhKsEAABwKgKMoWWAFDyyRqRAAAAAKACchA1VwAAAgQFtAQCCAoBPJUvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":564,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347931,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhZYdLW4k8skakqAScSBAWwAAAgQFtAQCCAoD5majATyVLwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":564,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347931,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j79AAD4GNhmsEAABwKgKMoWWAFDyyRqSHS1uJYAQAOXfYgAAAQEICgE8lS8D5maj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":561,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347931,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y4pAAD4GYk6sEAABwKgKMoVgAFAOjvOUfNqs7YARAOVRFwAAAQEICgE8lYcD5mGP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":561,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347931,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0yhZAAEAG+cHAqAoyrBAAAQBQhWB82qztDo7zlYARAONLrAAAAQEICgPmZvsBPJWH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":561,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347931,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y4tAAD4GYk2sEAABwKgKMoVgAFAOjvOVfNqs7oAQAOVLqgAAAQEICgE8lYcD5mb7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":562,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347932,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nc5AAD4GkAqsEAABwKgKMoVuAFCXD6SsMGjkqIARAOUp4QAAAQEICgE8loED5mLb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":562,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347932,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0g11AAEAGQHvAqAoyrBAAAQBQhW4waOSolw+krYARAOMkyAAAAQEICgPmZ\/UBPJaB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":562,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347932,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Nc9AAD4GkAmsEAABwKgKMoVuAFCXD6StMGjkqYAQAOUkxgAAAQEICgE8loED5mf1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":565,"flow_packet_id":1,"flow_first_seen":1499347934152,"flow_last_seen":1499347934152,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34224,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":565,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347934,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DbVAAD4GuBusEAABwKgKMoWwAFC\/7poKAAAAAKACchDmDgAAAgQFtAQCCAoBPJe\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":565,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347934,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhbAhVp9vv+6aC6AScSC5DgAAAgQFtAQCCAoD5mkzATyXvwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":565,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347934,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DbZAAD4GuCKsEAABwKgKMoWwAFC\/7poLIVafcIAQAOVYFgAAAQEICgE8l78D5mkz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":566,"flow_packet_id":1,"flow_first_seen":1499347935445,"flow_last_seen":1499347935445,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34238,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":566,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347935,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lcJAAD4GMA6sEAABwKgKMoW+AFC8fgzAAAAAAKACchB1eAAAAgQFtAQCCAoBPJkCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":566,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347935,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhb4dfTaTvH4MwaAScSCz6gAAAgQFtAQCCAoD5mp2ATyZAgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":566,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lcNAAD4GMBWsEAABwKgKMoW+AFC8fgzBHX02lIAQAOVS8gAAAQEICgE8mQID5mp2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":563,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OH5AAD4GjVqsEAABwKgKMoWIAFCpfquQr7ycB4ARAOXURgAAAQEICgE8mW8D5mVn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":563,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347935,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09uRAAEAGzPPAqAoyrBAAAQBQhYivvJwHqX6rkYARAOPOywAAAQEICgPmauMBPJlv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":563,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347935,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OH9AAD4GjVmsEAABwKgKMoWIAFCpfquRr7ycCIAQAOXOyQAAAQEICgE8mW8D5mrj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":567,"flow_packet_id":1,"flow_first_seen":1499347936727,"flow_last_seen":1499347936727,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34252,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":567,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347936,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8IMJAAD4GpQ6sEAABwKgKMoXMAFAQdrqBAAAAAKACchBycAAAAgQFtAQCCAoBPJpDAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":567,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347936,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhcyowg88EHa6gqAScSBLswAAAgQFtAQCCAoD5mu3ATyaQwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":567,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347936,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IMNAAD4GpRWsEAABwKgKMoXMAFAQdrqCqMIPPYAQAOXqugAAAQEICgE8mkMD5mu3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":564,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347936,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j8BAAD4GNhisEAABwKgKMoWWAFDyyRqSHS1uJYARAOXaJwAAAQEICgE8mmkD5maj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":564,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347936,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BfhAAEAGveDAqAoyrBAAAQBQhZYdLW4l8skak4ARAOPU7gAAAQEICgPma90BPJpp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":564,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347936,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j8FAAD4GNhesEAABwKgKMoWWAFDyyRqTHS1uJoAQAOXU7AAAAQEICgE8mmkD5mvd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":494,"flow_packet_id":310,"flow_first_seen":1499347807664,"flow_last_seen":1499347876003,"flow_tot_l4_data_len":242621,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":32906,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":526,"flow_packet_id":6,"flow_first_seen":1499347863072,"flow_last_seen":1499347868864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33486,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":526,"flow_packet_id":6,"flow_first_seen":1499347863072,"flow_last_seen":1499347868864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33486,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":527,"flow_packet_id":6,"flow_first_seen":1499347864367,"flow_last_seen":1499347869864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33500,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":527,"flow_packet_id":6,"flow_first_seen":1499347864367,"flow_last_seen":1499347869864,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33500,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":528,"flow_packet_id":6,"flow_first_seen":1499347867086,"flow_last_seen":1499347872866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33526,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":528,"flow_packet_id":6,"flow_first_seen":1499347867086,"flow_last_seen":1499347872866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33526,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":529,"flow_packet_id":6,"flow_first_seen":1499347868358,"flow_last_seen":1499347873865,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33540,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":529,"flow_packet_id":6,"flow_first_seen":1499347868358,"flow_last_seen":1499347873865,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33540,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":530,"flow_packet_id":6,"flow_first_seen":1499347869628,"flow_last_seen":1499347874866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33554,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":530,"flow_packet_id":6,"flow_first_seen":1499347869628,"flow_last_seen":1499347874866,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33554,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":568,"flow_packet_id":1,"flow_first_seen":1499347939286,"flow_last_seen":1499347939286,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34278,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":568,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347939,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86O9AAD4G3OCsEAABwKgKMoXmAFBSpnQtAAAAAKACchBz+wAAAgQFtAQCCAoBPJzCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":568,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347939,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQheYnhiyyUqZ0LqAScSCuhQAAAgQFtAQCCAoD5m42ATycwgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":568,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347939,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PBAAD4G3OesEAABwKgKMoXmAFBSpnQuJ4Yss4AQAOVNjQAAAQEICgE8nMID5m42","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":565,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347939,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DbdAAD4GuCGsEAABwKgKMoWwAFC\/7poLIVafcIARAOVSfQAAAQEICgE8nVcD5mkz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":565,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347939,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08btAAEAG0hzAqAoyrBAAAQBQhbAhVp9wv+6aDIARAONM5gAAAQEICgPmbssBPJ1X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":565,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347939,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DbhAAD4GuCCsEAABwKgKMoWwAFC\/7poMIVafcYAQAOVM5AAAAQEICgE8nVcD5m7L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":569,"flow_packet_id":1,"flow_first_seen":1499347940593,"flow_last_seen":1499347940593,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34292,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":569,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347940,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA87cVAAD4G2AqsEAABwKgKMoX0AFCR9XPMAAAAAKACchAzuAAAAgQFtAQCCAoBPJ4JAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":569,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347940,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhfTE5Ae8kfVzzaAScSD0kgAAAgQFtAQCCAoD5m99ATyeCQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":569,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347940,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07cZAAD4G2BGsEAABwKgKMoX0AFCR9XPNxOQHvYAQAOWTmgAAAQEICgE8ngkD5m99","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":566,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347940,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lcRAAD4GMBSsEAABwKgKMoW+AFC8fgzBHX02lIARAOVNogAAAQEICgE8nlED5mp2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":566,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347940,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WVJAAEAGaobAqAoyrBAAAQBQhb4dfTaUvH4MwoARAONIUwAAAQEICgPmb8YBPJ5R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":566,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347940,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lcVAAD4GMBOsEAABwKgKMoW+AFC8fgzCHX02lYAQAOVIUAAAAQEICgE8nlID5m\/G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":568,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":568,"flow_packet_id":4,"flow_first_seen":1499347939286,"flow_last_seen":1499347941874,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34278,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27TNRH0PFRPCFVXECFZU2OUYBTDZQVIWB8HBZ1VC7EXA9PGMGBWA%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":567,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IMRAAD4GpRSsEAABwKgKMoXMAFAQdrqCqMIPPYARAOXlswAAAQEICgE8n0kD5mu3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":568,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XA1AAEAGZ8vAqAoyrBAAAQBQheYnhiyzUqZ2d4AQAOxGLgAAAQEICgPmcL4BPJ9J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":567,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0f4NAAEAGRFXAqAoyrBAAAQBQhcyowg89EHa6g4ARAOPgrQAAAQEICgPmcL4BPJ9J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":567,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IMVAAD4GpROsEAABwKgKMoXMAFAQdrqDqMIPPoAQAOXgqgAAAQEICgE8n0oD5nC+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2932{"flow_id":568,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":1932,"pkt":"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","pkt_caplen":1932,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":568,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347941,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PJAAD4G3OWsEAABwKgKMoXmAFBSpnZ3J4Yz\/YAQAQI+zAAAAQEICgE8n0sD5nC+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":568,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347942,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":568,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347942,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":568,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347942,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PRAAD4G3OOsEAABwKgKMoXmAFBSpnf2J4Y654AQAR00RwAAAQEICgE8oEsD5nG\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":570,"flow_packet_id":1,"flow_first_seen":1499347943146,"flow_last_seen":1499347943146,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34318,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":570,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347943,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8TwNAAD4Gds2sEAABwKgKMoYOAFBjnu+EAAAAAKACchDjvgAAAgQFtAQCCAoBPKCHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":570,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347943,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhg4T7s6FY57vhaAScSCMRwAAAgQFtAQCCAoD5nH8ATyghwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":570,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347943,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TwRAAD4GdtSsEAABwKgKMoYOAFBjnu+FE+7OhoAQAOUrTgAAAQEICgE8oIgD5nH8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":568,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347943,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2929{"flow_id":568,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347943,"pkt_len":1932,"pkt":"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","pkt_caplen":1932,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":568,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347943,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06PZAAD4G3OGsEAABwKgKMoXmAFBSpno\/J4ZCMYAQATsqGgAAAQEICgE8oIkD5nH9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0921{"flow_id":568,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347944,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":568,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347944,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":571,"flow_packet_id":1,"flow_first_seen":1499347944440,"flow_last_seen":1499347944440,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34332,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":571,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347944,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SUNAAD4GfI2sEAABwKgKMoYcAFB5iuiIAAAAAKACchDTfAAAAgQFtAQCCAoBPKHLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":571,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347944,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhhyVeGrjeYroiaAScSBc2gAAAgQFtAQCCAoD5nM\/ATyhywEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":571,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347944,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SURAAD4GfJSsEAABwKgKMoYcAFB5iuiJlXhq5IAQAOX74QAAAQEICgE8ocsD5nM\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":572,"flow_packet_id":1,"flow_first_seen":1499347945720,"flow_last_seen":1499347945720,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34346,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":572,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347945,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8sjdAAD4GE5msEAABwKgKMoYqAFDdpBE8AAAAAKACchBFYQAAAgQFtAQCCAoBPKMLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":572,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347945,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhiqh1kGM3aQRPaAScSDqdwAAAgQFtAQCCAoD5nR\/ATyjCwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":572,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347945,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sjhAAD4GE6CsEAABwKgKMoYqAFDdpBE9odZBjYAQAOWJfwAAAQEICgE8owsD5nR\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":569,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347945,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07cdAAD4G2BCsEAABwKgKMoX0AFCR9XPNxOQHvYARAOWObgAAAQEICgE8ozQD5m99","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":569,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347945,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cxVAAEAGUMPAqAoyrBAAAQBQhfTE5Ae9kfVzzoARAOOJRAAAAQEICgPmdKgBPKM0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":569,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347945,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA07chAAD4G2A+sEAABwKgKMoX0AFCR9XPOxOQHvoAQAOWJQgAAAQEICgE8ozQD5nSo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":532,"flow_packet_id":6,"flow_first_seen":1499347873465,"flow_last_seen":1499347878867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33594,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":532,"flow_packet_id":6,"flow_first_seen":1499347873465,"flow_last_seen":1499347878867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33594,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":533,"flow_packet_id":6,"flow_first_seen":1499347874737,"flow_last_seen":1499347879867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33608,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":533,"flow_packet_id":6,"flow_first_seen":1499347874737,"flow_last_seen":1499347879867,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33608,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":534,"flow_packet_id":6,"flow_first_seen":1499347877292,"flow_last_seen":1499347882869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33634,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":534,"flow_packet_id":6,"flow_first_seen":1499347877292,"flow_last_seen":1499347882869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33634,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":535,"flow_packet_id":6,"flow_first_seen":1499347878568,"flow_last_seen":1499347883869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33648,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":535,"flow_packet_id":6,"flow_first_seen":1499347878568,"flow_last_seen":1499347883869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33648,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":536,"flow_packet_id":6,"flow_first_seen":1499347881141,"flow_last_seen":1499347886869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33674,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":536,"flow_packet_id":6,"flow_first_seen":1499347881141,"flow_last_seen":1499347886869,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33674,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":537,"flow_packet_id":6,"flow_first_seen":1499347882404,"flow_last_seen":1499347887870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33688,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":537,"flow_packet_id":6,"flow_first_seen":1499347882404,"flow_last_seen":1499347887870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33688,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":573,"flow_packet_id":1,"flow_first_seen":1499347948293,"flow_last_seen":1499347948293,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34372,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":573,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347948,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EvlAAD4GstesEAABwKgKMoZEAFDGn7d3AAAAAKACchCzjQAAAgQFtAQCCAoBPKWOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":573,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347948,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhkRGWOs1xp+3eKAScSAH9gAAAgQFtAQCCAoD5ncCATyljgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":573,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347948,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvpAAD4Gst6sEAABwKgKMoZEAFDGn7d4RljrNoAQAOWm\/QAAAQEICgE8pY4D5ncC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":570,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347948,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TwVAAD4GdtOsEAABwKgKMoYOAFBjnu+FE+7OhoARAOUlswAAAQEICgE8piID5nH8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":570,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347948,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0uRBAAEAGCsjAqAoyrBAAAQBQhg4T7s6GY57vhoARAOMgGgAAAQEICgPmd5YBPKYi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":570,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347948,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0TwZAAD4GdtKsEAABwKgKMoYOAFBjnu+GE+7Oh4AQAOUgGAAAAQEICgE8piID5neW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":574,"flow_packet_id":1,"flow_first_seen":1499347949587,"flow_last_seen":1499347949587,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34386,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":574,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347949,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8QMNAAD4GhQ2sEAABwKgKMoZSAFBj7eYSAAAAAKACchDmUwAAAgQFtAQCCAoBPKbRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":574,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347949,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhlIJuXRqY+3mE6AScSDs4gAAAgQFtAQCCAoD5nhGATym0QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":574,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347949,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QMRAAD4GhRSsEAABwKgKMoZSAFBj7eYTCbl0a4AQAOWL6QAAAQEICgE8ptID5nhG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":571,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347949,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SUVAAD4GfJOsEAABwKgKMoYcAFB5iuiJlXhq5IARAOX2jwAAAQEICgE8pxwD5nM\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":571,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347949,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EnRAAEAGsWTAqAoyrBAAAQBQhhyVeGrkeYroioARAOPxPwAAAQEICgPmeJABPKcc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":571,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347949,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SUZAAD4GfJKsEAABwKgKMoYcAFB5iuiKlXhq5YAQAOXxPQAAAQEICgE8pxwD5niQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":572,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347950,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sjlAAD4GE5+sEAABwKgKMoYqAFDdpBE9odZBjYARAOWEcwAAAQEICgE8qBYD5nR\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":572,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347950,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OAdAAEAGi9HAqAoyrBAAAQBQhiqh1kGN3aQRPoARAON\/aQAAAQEICgPmeYoBPKgW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":572,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347950,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0sjpAAD4GE56sEAABwKgKMoYqAFDdpBE+odZBjoAQAOV\/ZwAAAQEICgE8qBYD5nmK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":575,"flow_packet_id":1,"flow_first_seen":1499347952161,"flow_last_seen":1499347952161,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34412,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":575,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347952,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8St5AAD4GevKsEAABwKgKMoZsAFCk\/OOLAAAAAKACchClLQAAAgQFtAQCCAoBPKlVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":575,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347952,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhmwNHcNepPzjjKAScSBW4QAAAgQFtAQCCAoD5nrJATypVQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":575,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347952,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0St9AAD4GevmsEAABwKgKMoZsAFCk\/OOMDR3DX4AQAOX16AAAAQEICgE8qVUD5nrJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":576,"flow_packet_id":1,"flow_first_seen":1499347953439,"flow_last_seen":1499347953439,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34426,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":576,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347953,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+l9AAD4Gy3CsEAABwKgKMoZ6AFBhTFDKAAAAAKACchB6UQAAAgQFtAQCCAoBPKqVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":576,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347953,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhnpvVsdUYUxQy6AScSDElQAAAgQFtAQCCAoD5nwJATyqlQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":576,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347953,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+mBAAD4Gy3esEAABwKgKMoZ6AFBhTFDLb1bHVYAQAOVjnQAAAQEICgE8qpUD5nwJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":573,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347953,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvtAAD4Gst2sEAABwKgKMoZEAFDGn7d4RljrNoARAOWhhgAAAQEICgE8qwQD5ncC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":573,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347953,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0l05AAEAGLIrAqAoyrBAAAQBQhkRGWOs2xp+3eYARAOOcEQAAAQEICgPmfHgBPKsE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":573,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347953,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EvxAAD4GstysEAABwKgKMoZEAFDGn7d5RljrN4AQAOWcDwAAAQEICgE8qwQD5nx4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":577,"flow_packet_id":1,"flow_first_seen":1499347954738,"flow_last_seen":1499347954738,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34440,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":577,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347954,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8a+xAAD4GWeSsEAABwKgKMoaIAFCY\/8A1AAAAAKACchDR4AAAAgQFtAQCCAoBPKvZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":577,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347954,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhoh\/\/ieLmP\/ANqAScSCqAQAAAgQFtAQCCAoD5n1OATyr2QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":577,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347954,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a+1AAD4GWeusEAABwKgKMoaIAFCY\/8A2f\/4njIAQAOVJCAAAAQEICgE8q9oD5n1O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":574,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347954,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QMVAAD4GhROsEAABwKgKMoZSAFBj7eYTCbl0a4ARAOWGvAAAAQEICgE8q\/4D5nhG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":574,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347954,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CRlAAEAGur\/AqAoyrBAAAQBQhlIJuXRrY+3mFIARAOOBkQAAAQEICgPmfXIBPKv+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":574,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347954,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0QMZAAD4GhRKsEAABwKgKMoZSAFBj7eYUCbl0bIAQAOWBjwAAAQEICgE8q\/4D5n1y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":578,"flow_packet_id":1,"flow_first_seen":1499347957282,"flow_last_seen":1499347957282,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34466,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":578,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347957,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82nJAAD4G612sEAABwKgKMoaiAFCv93QkAAAAAKACchAEYwAAAgQFtAQCCAoBPK5WAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":578,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347957,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhqLwUjy4r\/d0JaAScSBUhgAAAgQFtAQCCAoD5n\/KATyuVgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":578,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347957,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02nNAAD4G62SsEAABwKgKMoaiAFCv93Ql8FI8uYAQAOXzjQAAAQEICgE8rlYD5n\/K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":575,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347957,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SuBAAD4GevisEAABwKgKMoZsAFCk\/OOMDR3DX4ARAOXwUAAAAQEICgE8ruwD5nrJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":575,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347957,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Qz9AAEAGgJnAqAoyrBAAAQBQhmwNHcNfpPzjjYARAOPqugAAAQEICgPmgGABPK7s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":575,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347957,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SuFAAD4GevesEAABwKgKMoZsAFCk\/OONDR3DYIAQAOXqtwAAAQEICgE8ru0D5oBg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":538,"flow_packet_id":6,"flow_first_seen":1499347883693,"flow_last_seen":1499347888870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33702,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":538,"flow_packet_id":6,"flow_first_seen":1499347883693,"flow_last_seen":1499347888870,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33702,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":539,"flow_packet_id":6,"flow_first_seen":1499347886296,"flow_last_seen":1499347891872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33728,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":539,"flow_packet_id":6,"flow_first_seen":1499347886296,"flow_last_seen":1499347891872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33728,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":540,"flow_packet_id":6,"flow_first_seen":1499347887572,"flow_last_seen":1499347892872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33742,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":540,"flow_packet_id":6,"flow_first_seen":1499347887572,"flow_last_seen":1499347892872,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33742,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":541,"flow_packet_id":6,"flow_first_seen":1499347890192,"flow_last_seen":1499347895873,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33768,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":541,"flow_packet_id":6,"flow_first_seen":1499347890192,"flow_last_seen":1499347895873,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33768,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":542,"flow_packet_id":6,"flow_first_seen":1499347891536,"flow_last_seen":1499347896874,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33782,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":542,"flow_packet_id":6,"flow_first_seen":1499347891536,"flow_last_seen":1499347896874,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33782,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":579,"flow_packet_id":1,"flow_first_seen":1499347958588,"flow_last_seen":1499347958588,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34480,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":579,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347958,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8iDdAAD4GPZmsEAABwKgKMoawAFCTxierAAAAAKACchBruQAAAgQFtAQCCAoBPK+cAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":579,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347958,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhrCsuJaMk8YnrKAScSCkXAAAAgQFtAQCCAoD5oEQATyvnAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":579,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347958,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iDhAAD4GPaCsEAABwKgKMoawAFCTxiesrLiWjYAQAOVDZAAAAQEICgE8r5wD5oEQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":576,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347958,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+mFAAD4Gy3asEAABwKgKMoZ6AFBhTFDLb1bHVYARAOVeSwAAAQEICgE8r+YD5nwJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":576,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347958,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Rg9AAEAGfcnAqAoyrBAAAQBQhnpvVsdVYUxQzIARAONY+wAAAQEICgPmgVoBPK\/m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":576,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347958,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+mJAAD4Gy3WsEAABwKgKMoZ6AFBhTFDMb1bHVoAQAOVY+AAAAQEICgE8r+cD5oFa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":577,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347959,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a+5AAD4GWeqsEAABwKgKMoaIAFCY\/8A2f\/4njIARAOVEAQAAAQEICgE8sOAD5n1O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":577,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347959,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pdlAAEAGHf\/AqAoyrBAAAQBQhoh\/\/ieMmP\/AN4ARAOM++wAAAQEICgPmglUBPLDg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":577,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347959,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0a+9AAD4GWemsEAABwKgKMoaIAFCY\/8A3f\/4njYAQAOU++AAAAQEICgE8sOED5oJV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":580,"flow_packet_id":1,"flow_first_seen":1499347961167,"flow_last_seen":1499347961167,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34506,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":580,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347961,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8lndAAD4GL1msEAABwKgKMobKAFDSZyRWAAAAAKACchAtzgAAAgQFtAQCCAoBPLIhAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":580,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347961,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhsp1SlCg0mckV6AScSDhRgAAAgQFtAQCCAoD5oOVATyyIQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":580,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347961,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lnhAAD4GL2CsEAABwKgKMobKAFDSZyRXdUpQoYAQAOWATgAAAQEICgE8siED5oOV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":581,"flow_packet_id":1,"flow_first_seen":1499347962480,"flow_last_seen":1499347962480,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34520,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":581,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347962,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OwpAAD4GisasEAABwKgKMobYAFAZTIhjAAAAAKACchCBhgAAAgQFtAQCCAoBPLNpAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":581,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347962,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhtjOuip1GUyIZKAScSAAcgAAAgQFtAQCCAoD5oTdATyzaQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":581,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347962,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OwtAAD4Gis2sEAABwKgKMobYAFAZTIhkzroqdoAQAOWfeQAAAQEICgE8s2kD5oTd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":578,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347962,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02nRAAD4G62OsEAABwKgKMoaiAFCv93Ql8FI8uYARAOXuEwAAAQEICgE8s88D5n\/K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":578,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347962,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ufpAAEAGCd7AqAoyrBAAAQBQhqLwUjy5r\/d0JoARAOPomwAAAQEICgPmhUMBPLPP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":578,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347962,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02nVAAD4G62KsEAABwKgKMoaiAFCv93Qm8FI8uoAQAOXomQAAAQEICgE8s88D5oVD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":582,"flow_packet_id":1,"flow_first_seen":1499347963774,"flow_last_seen":1499347963774,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34534,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":582,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347963,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82g5AAD4G68GsEAABwKgKMobmAFBdLG6iAAAAAKACchBWFgAAAgQFtAQCCAoBPLSsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":582,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347963,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhub+xS4sXSxuo6AScSCf\/AAAAgQFtAQCCAoD5oYgATy0rAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":582,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347963,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02g9AAD4G68isEAABwKgKMobmAFBdLG6j\/sUuLYAQAOU\/AwAAAQEICgE8tK0D5oYg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":579,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347963,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iDlAAD4GPZ+sEAABwKgKMoawAFCTxiesrLiWjYARAOU+NgAAAQEICgE8tMkD5oEQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":579,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347963,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ELBAAEAGsyjAqAoyrBAAAQBQhrCsuJaNk8YnrYARAOM5CgAAAQEICgPmhj0BPLTJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":579,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347963,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0iDpAAD4GPZ6sEAABwKgKMoawAFCTxietrLiWjoAQAOU5CAAAAQEICgE8tMkD5oY9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":583,"flow_packet_id":1,"flow_first_seen":1499347965133,"flow_last_seen":1499347965133,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34548,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":583,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347965,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8KcdAAD4GnAmsEAABwKgKMob0AFDtE5\/HAAAAAKACchCTpwAAAgQFtAQCCAoBPLYAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":583,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347965,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhvTIVjMH7ROfyKAScSANzgAAAgQFtAQCCAoD5od0ATy2AAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":583,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347965,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KchAAD4GnBCsEAABwKgKMob0AFDtE5\/IyFYzCIAQAOWs1QAAAQEICgE8tgAD5od0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":584,"flow_packet_id":1,"flow_first_seen":1499347966420,"flow_last_seen":1499347966420,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34562,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":584,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347966,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8U6hAAD4GciisEAABwKgKMocCAFDUQeTqAAAAAKACchBmBgAAAgQFtAQCCAoBPLdCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":584,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347966,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhwJV63ns1EHk66AScSAKcQAAAgQFtAQCCAoD5oi2ATy3QgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":584,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347966,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U6lAAD4Gci+sEAABwKgKMocCAFDUQeTrVet57YAQAOWpeAAAAQEICgE8t0ID5oi2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":580,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347966,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lnlAAD4GL1+sEAABwKgKMobKAFDSZyRXdUpQoYARAOV6twAAAQEICgE8t7cD5oOV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":580,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347966,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA02YpAAEAG6k3AqAoyrBAAAQBQhsp1SlCh0mckWIARAON1IgAAAQEICgPmiSsBPLe3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":580,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347966,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0lnpAAD4GL16sEAABwKgKMobKAFDSZyRYdUpQooAQAOV1IAAAAQEICgE8t7cD5okr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":585,"flow_packet_id":1,"flow_first_seen":1499347967724,"flow_last_seen":1499347967724,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34576,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":585,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347967,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8JnBAAD4Gn2CsEAABwKgKMocQAFDWSp74AAAAAKACchComwAAAgQFtAQCCAoBPLiIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":585,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347967,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhxDJR2HM1kqe+aAScSDwgwAAAgQFtAQCCAoD5on8ATy4iAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":585,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347967,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JnFAAD4Gn2esEAABwKgKMocQAFDWSp75yUdhzYAQAOWPiwAAAQEICgE8uIgD5on8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":581,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347967,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OwxAAD4GisysEAABwKgKMobYAFAZTIhkzroqdoARAOWaMAAAAQEICgE8uLED5oTd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":581,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347967,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oFNAAEAGI4XAqAoyrBAAAQBQhtjOuip2GUyIZYARAOOU6QAAAQEICgPmiiUBPLix","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":581,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347967,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Ow1AAD4GisusEAABwKgKMobYAFAZTIhlzroqd4AQAOWU5wAAAQEICgE8uLED5ool","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":543,"flow_packet_id":6,"flow_first_seen":1499347894093,"flow_last_seen":1499347899875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33808,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":543,"flow_packet_id":6,"flow_first_seen":1499347894093,"flow_last_seen":1499347899875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33808,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":544,"flow_packet_id":6,"flow_first_seen":1499347895396,"flow_last_seen":1499347900875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33822,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":544,"flow_packet_id":6,"flow_first_seen":1499347895396,"flow_last_seen":1499347900875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33822,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":545,"flow_packet_id":6,"flow_first_seen":1499347896716,"flow_last_seen":1499347901875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33836,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":545,"flow_packet_id":6,"flow_first_seen":1499347896716,"flow_last_seen":1499347901875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33836,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":546,"flow_packet_id":6,"flow_first_seen":1499347899275,"flow_last_seen":1499347904876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33862,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":546,"flow_packet_id":6,"flow_first_seen":1499347899275,"flow_last_seen":1499347904876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33862,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":547,"flow_packet_id":6,"flow_first_seen":1499347900544,"flow_last_seen":1499347905875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33876,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":547,"flow_packet_id":6,"flow_first_seen":1499347900544,"flow_last_seen":1499347905875,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33876,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":582,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347968,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02hBAAD4G68esEAABwKgKMobmAFBdLG6j\/sUuLYARAOU6BAAAAQEICgE8uasD5oYg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":582,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347968,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pTJAAEAGHqbAqAoyrBAAAQBQhub+xS4tXSxupIARAOM1BgAAAQEICgPmix8BPLmr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":582,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347968,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02hFAAD4G68asEAABwKgKMobmAFBdLG6k\/sUuLoAQAOU1BAAAAQEICgE8uasD5osf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":586,"flow_packet_id":1,"flow_first_seen":1499347970267,"flow_last_seen":1499347970267,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34602,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":586,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347970,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8vvZAAD4GBtqsEAABwKgKMocqAFAxLQXyAAAAAKACchDkKQAAAgQFtAQCCAoBPLsEAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":586,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347970,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhyoPJF9xMS0F86AScSDmFAAAAgQFtAQCCAoD5ox4ATy7BAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":586,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347970,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vvdAAD4GBuGsEAABwKgKMocqAFAxLQXzDyRfcoAQAOWFHAAAAQEICgE8uwQD5ox4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":583,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347970,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KclAAD4GnA+sEAABwKgKMob0AFDtE5\/IyFYzCIARAOWnNQAAAQEICgE8u58D5od0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":583,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347970,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0vhtAAEAGBb3AqAoyrBAAAQBQhvTIVjMI7ROfyYARAOOhlwAAAQEICgPmjRMBPLuf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":583,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347970,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0KcpAAD4GnA6sEAABwKgKMob0AFDtE5\/JyFYzCYAQAOWhlQAAAQEICgE8u58D5o0T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":587,"flow_packet_id":1,"flow_first_seen":1499347971560,"flow_last_seen":1499347971560,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34616,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":587,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347971,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XBJAAD4Gab6sEAABwKgKMoc4AFCpCuBVAAAAAKACchCQlwAAAgQFtAQCCAoBPLxHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":587,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347971,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQhzgyg4heqQrgVqAScSBE8wAAAgQFtAQCCAoD5o27ATy8RwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":587,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347971,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XBNAAD4GacWsEAABwKgKMoc4AFCpCuBWMoOIX4AQAOXj+gAAAQEICgE8vEcD5o27","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":584,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347971,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U6pAAD4Gci6sEAABwKgKMocCAFDUQeTrVet57YARAOWkIAAAAQEICgE8vJkD5oi2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":584,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347971,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09+BAAEAGy\/fAqAoyrBAAAQBQhwJV63nt1EHk7IARAOOeygAAAQEICgPmjg0BPLyZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":584,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347971,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0U6tAAD4Gci2sEAABwKgKMocCAFDUQeTsVet57oAQAOWeyAAAAQEICgE8vJkD5o4N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":585,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347972,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JnJAAD4Gn2asEAABwKgKMocQAFDWSp75yUdhzYARAOWKfwAAAQEICgE8vZMD5on8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":585,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347972,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07spAAEAG1Q3AqAoyrBAAAQBQhxDJR2HN1kqe+oARAOOFdQAAAQEICgPmjwcBPL2T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":585,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347972,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0JnNAAD4Gn2WsEAABwKgKMocQAFDWSp76yUdhzoAQAOWFcwAAAQEICgE8vZMD5o8H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":588,"flow_packet_id":1,"flow_first_seen":1499347974113,"flow_last_seen":1499347974113,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34642,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":588,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347974,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rk1AAD4GF4OsEAABwKgKModSAFAISxCIAAAAAKACchD+jAAAAgQFtAQCCAoBPL7FAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":588,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347974,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh1LQi4qtCEsQiaAScSAQEwAAAgQFtAQCCAoD5pA5ATy+xQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":588,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347974,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rk5AAD4GF4qsEAABwKgKModSAFAISxCJ0IuKroAQAOWvGgAAAQEICgE8vsUD5pA5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":589,"flow_packet_id":1,"flow_first_seen":1499347975371,"flow_last_seen":1499347975371,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34656,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":589,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347975,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8l4BAAD4GLlCsEAABwKgKModgAFCggleAAAAAAKACchAeFAAAAgQFtAQCCAoBPMAAAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":589,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347975,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh2BVDgzaoIJXgaAScSAnsAAAAgQFtAQCCAoD5pF0ATzAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":589,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347975,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l4FAAD4GLlesEAABwKgKModgAFCggleBVQ4M24AQAOXGtwAAAQEICgE8wAAD5pF0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":586,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347975,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vvhAAD4GBuCsEAABwKgKMocqAFAxLQXzDyRfcoARAOV\/ngAAAQEICgE8wIED5ox4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":586,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347975,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zodAAEAG9VDAqAoyrBAAAQBQhyoPJF9yMS0F9IARAON6IgAAAQEICgPmkfUBPMCB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":586,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347975,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0vvlAAD4GBt+sEAABwKgKMocqAFAxLQX0DyRfc4AQAOV6HwAAAQEICgE8wIID5pH1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":590,"flow_packet_id":1,"flow_first_seen":1499347976658,"flow_last_seen":1499347976658,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34670,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":590,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347976,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Z4xAAD4GXkSsEAABwKgKModuAFDMdKbNAAAAAKACchChhQAAAgQFtAQCCAoBPMFBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":590,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347976,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh26qPdKAzHSmzqAScSCPCQAAAgQFtAQCCAoD5pK2ATzBQQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":590,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z41AAD4GXkusEAABwKgKModuAFDMdKbOqj3SgYAQAOUuEAAAAQEICgE8wUID5pK2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":587,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XBRAAD4GacSsEAABwKgKMoc4AFCpCuBWMoOIX4ARAOXexQAAAQEICgE8wXsD5o27","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":587,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347976,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0GrBAAEAGqSjAqAoyrBAAAQBQhzgyg4hfqQrgV4ARAOPZkgAAAQEICgPmku8BPMF7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":587,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347976,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XBVAAD4GacOsEAABwKgKMoc4AFCpCuBXMoOIYIAQAOXZjwAAAQEICgE8wXwD5pLv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":548,"flow_packet_id":6,"flow_first_seen":1499347903125,"flow_last_seen":1499347908876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33902,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":548,"flow_packet_id":6,"flow_first_seen":1499347903125,"flow_last_seen":1499347908876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33902,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":549,"flow_packet_id":6,"flow_first_seen":1499347904387,"flow_last_seen":1499347909877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33916,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":549,"flow_packet_id":6,"flow_first_seen":1499347904387,"flow_last_seen":1499347909877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33916,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":550,"flow_packet_id":6,"flow_first_seen":1499347905694,"flow_last_seen":1499347910877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33930,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":550,"flow_packet_id":6,"flow_first_seen":1499347905694,"flow_last_seen":1499347910877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33930,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":551,"flow_packet_id":6,"flow_first_seen":1499347908253,"flow_last_seen":1499347913877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33956,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":551,"flow_packet_id":6,"flow_first_seen":1499347908253,"flow_last_seen":1499347913877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33956,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":552,"flow_packet_id":6,"flow_first_seen":1499347909575,"flow_last_seen":1499347914878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33970,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":552,"flow_packet_id":6,"flow_first_seen":1499347909575,"flow_last_seen":1499347914878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33970,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":553,"flow_packet_id":6,"flow_first_seen":1499347912141,"flow_last_seen":1499347917877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":553,"flow_packet_id":6,"flow_first_seen":1499347912141,"flow_last_seen":1499347917877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33996,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":554,"flow_packet_id":6,"flow_first_seen":1499347913416,"flow_last_seen":1499347918877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34010,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":554,"flow_packet_id":6,"flow_first_seen":1499347913416,"flow_last_seen":1499347918877,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34010,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":591,"flow_packet_id":1,"flow_first_seen":1499347979251,"flow_last_seen":1499347979251,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34696,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":591,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347979,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8naJAAD4GKC6sEAABwKgKMoeIAFCOM15oAAAAAKACchAliQAAAgQFtAQCCAoBPMPKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":591,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347979,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh4iSkzqsjjNeaaAScSDAAwAAAgQFtAQCCAoD5pU+ATzDygEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":591,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347979,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0naNAAD4GKDWsEAABwKgKMoeIAFCOM15pkpM6rYAQAOVfCwAAAQEICgE8w8oD5pU+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":588,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347979,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rk9AAD4GF4msEAABwKgKModSAFAISxCJ0IuKroARAOWpdAAAAQEICgE8xGoD5pA5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":588,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347979,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H3BAAEAGpGjAqAoyrBAAAQBQh1LQi4quCEsQioARAOOj0AAAAQEICgPmld4BPMRq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":588,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347979,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rlBAAD4GF4isEAABwKgKModSAFAISxCK0IuKr4AQAOWjzgAAAQEICgE8xGoD5pXe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":592,"flow_packet_id":1,"flow_first_seen":1499347980524,"flow_last_seen":1499347980524,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34710,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":592,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347980,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eP5AAD4GTNKsEAABwKgKMoeWAFDY8732AAAAAKACchB57gAAAgQFtAQCCAoBPMUIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":592,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347980,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh5YkRgUi2PO996AScSC3AgAAAgQFtAQCCAoD5pZ8ATzFCAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":592,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347980,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eP9AAD4GTNmsEAABwKgKMoeWAFDY8733JEYFI4AQAOVWCgAAAQEICgE8xQgD5pZ8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":589,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347980,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l4JAAD4GLlasEAABwKgKModgAFCggleBVQ4M24ARAOXBUgAAAQEICgE8xWQD5pF0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":589,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347980,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mgNAAEAGKdXAqAoyrBAAAQBQh2BVDgzboIJXgoARAOO77wAAAQEICgPmltgBPMVk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":589,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347980,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l4NAAD4GLlWsEAABwKgKModgAFCggleCVQ4M3IAQAOW77QAAAQEICgE8xWQD5pbY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":593,"flow_packet_id":1,"flow_first_seen":1499347981782,"flow_last_seen":1499347981782,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34724,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":593,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347981,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8XEpAAD4GaYasEAABwKgKMoekAFBFSZoIAAAAAKACchAwPwAAAgQFtAQCCAoBPMZCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":593,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347981,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh6RlAFMiRUmaCaAScSDdXQAAAgQFtAQCCAoD5pe3ATzGQgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":593,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347981,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XEtAAD4GaY2sEAABwKgKMoekAFBFSZoJZQBTI4AQAOV8ZAAAAQEICgE8xkMD5pe3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":590,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347981,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z45AAD4GXkqsEAABwKgKModuAFDMdKbOqj3SgYARAOUo8wAAAQEICgE8xl4D5pK2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":590,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347981,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RVNAAEAGfoXAqAoyrBAAAQBQh26qPdKBzHSmz4ARAOMj2AAAAQEICgPml9IBPMZe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":590,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347981,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Z49AAD4GXkmsEAABwKgKModuAFDMdKbPqj3SgoAQAOUj1gAAAQEICgE8xl4D5pfS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":594,"flow_packet_id":1,"flow_first_seen":1499347983061,"flow_last_seen":1499347983061,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34738,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":594,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347983,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8HjdAAD4Gp5msEAABwKgKMoeyAFDTp9m1AAAAAKACchBg5QAAAgQFtAQCCAoBPMeCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":594,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347983,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh7KKfm1X06fZtqAScSDNEQAAAgQFtAQCCAoD5pj2ATzHggEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":594,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347983,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HjhAAD4Gp6CsEAABwKgKMoeyAFDTp9m2in5tWIAQAOVsGQAAAQEICgE8x4ID5pj2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":595,"flow_packet_id":1,"flow_first_seen":1499347984370,"flow_last_seen":1499347984370,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34752,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":595,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347984,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81w5AAD4G7sGsEAABwKgKMofAAFB4CR\/HAAAAAKACchB1HQAAAgQFtAQCCAoBPMjJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":595,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347984,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh8AzI3sOeAkfyKAScSAppgAAAgQFtAQCCAoD5po+ATzIyQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":595,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347984,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01w9AAD4G7sisEAABwKgKMofAAFB4CR\/IMyN7D4AQAOXIrAAAAQEICgE8yMoD5po+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":591,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347984,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0naRAAD4GKDSsEAABwKgKMoeIAFCOM15pkpM6rYARAOVZiAAAAQEICgE8yUwD5pU+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":591,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347984,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oG1AAEAGI2vAqAoyrBAAAQBQh4iSkzqtjjNeaoARAONUBwAAAQEICgPmmsABPMlM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":591,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347984,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0naVAAD4GKDOsEAABwKgKMoeIAFCOM15qkpM6roAQAOVUBQAAAQEICgE8yUwD5prA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":596,"flow_packet_id":1,"flow_first_seen":1499347985686,"flow_last_seen":1499347985686,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34766,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":596,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347985,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8UVJAAD4GdH6sEAABwKgKMofOAFAxwJtBAAAAAKACchA+lAAAAgQFtAQCCAoBPMoTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":596,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347985,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh84CN1TUMcCbQqAScSBI+gAAAgQFtAQCCAoD5puHATzKEwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":596,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347985,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UVNAAD4GdIWsEAABwKgKMofOAFAxwJtCAjdU1YAQAOXoAQAAAQEICgE8yhMD5puH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":592,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347985,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eQBAAD4GTNisEAABwKgKMoeWAFDY8733JEYFI4ARAOVQywAAAQEICgE8ykYD5pZ8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":592,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347985,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nplAAEAGJT\/AqAoyrBAAAQBQh5YkRgUj2PO9+IARAONLjgAAAQEICgPmm7oBPMpG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":592,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347985,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eQFAAD4GTNesEAABwKgKMoeWAFDY8734JEYFJIAQAOVLjAAAAQEICgE8ykYD5pu6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":593,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347986,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XExAAD4GaYysEAABwKgKMoekAFBFSZoJZQBTI4ARAOV3ZgAAAQEICgE8y0AD5pe3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":593,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347986,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0z5dAAEAG9EDAqAoyrBAAAQBQh6RlAFMjRUmaCoARAONyagAAAQEICgPmnLQBPMtA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":593,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347986,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0XE1AAD4GaYusEAABwKgKMoekAFBFSZoKZQBTJIAQAOVyaAAAAQEICgE8y0AD5py0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":597,"flow_packet_id":1,"flow_first_seen":1499347988233,"flow_last_seen":1499347988233,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34792,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":597,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347988,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aCNAAD4GXa2sEAABwKgKMofoAFBt56SsAAAAAKACchD2awAAAgQFtAQCCAoBPMyPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":597,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347988,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh+gH+IEYbeekraAScSDMUAAAAgQFtAQCCAoD5p4DATzMjwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":597,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347988,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aCRAAD4GXbSsEAABwKgKMofoAFBt56StB\/iBGYAQAOVrWAAAAQEICgE8zI8D5p4D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":594,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347988,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HjlAAD4Gp5+sEAABwKgKMoeyAFDTp9m2in5tWIARAOVmZgAAAQEICgE8zTQD5pj2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":594,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347988,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA08\/BAAEAGz+fAqAoyrBAAAQBQh7KKfm1Y06fZt4ARAONgtQAAAQEICgPmnqgBPM00","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":594,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347988,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0HjpAAD4Gp56sEAABwKgKMoeyAFDTp9m3in5tWYAQAOVgsgAAAQEICgE8zTUD5p6o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":555,"flow_packet_id":6,"flow_first_seen":1499347914710,"flow_last_seen":1499347919878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34024,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":555,"flow_packet_id":6,"flow_first_seen":1499347914710,"flow_last_seen":1499347919878,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34024,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":556,"flow_packet_id":6,"flow_first_seen":1499347917322,"flow_last_seen":1499347922879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34050,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":556,"flow_packet_id":6,"flow_first_seen":1499347917322,"flow_last_seen":1499347922879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34050,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":557,"flow_packet_id":6,"flow_first_seen":1499347918608,"flow_last_seen":1499347923879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34064,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":557,"flow_packet_id":6,"flow_first_seen":1499347918608,"flow_last_seen":1499347923879,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34064,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":558,"flow_packet_id":6,"flow_first_seen":1499347921170,"flow_last_seen":1499347926880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34090,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":558,"flow_packet_id":6,"flow_first_seen":1499347921170,"flow_last_seen":1499347926880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34090,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":559,"flow_packet_id":6,"flow_first_seen":1499347922471,"flow_last_seen":1499347927880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34104,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":559,"flow_packet_id":6,"flow_first_seen":1499347922471,"flow_last_seen":1499347927880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34104,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":560,"flow_packet_id":6,"flow_first_seen":1499347923737,"flow_last_seen":1499347928880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34118,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":560,"flow_packet_id":6,"flow_first_seen":1499347923737,"flow_last_seen":1499347928880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34118,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":598,"flow_packet_id":1,"flow_first_seen":1499347989526,"flow_last_seen":1499347989526,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34806,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":598,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8S9BAAD4GegCsEAABwKgKMof2AFDafYYCAAAAAKACchCnLgAAAgQFtAQCCAoBPM3SAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":598,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQh\/a7HZT72n2GA6AScSC0xwAAAgQFtAQCCAoD5p9GATzN0gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":598,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0S9FAAD4GegesEAABwKgKMof2AFDafYYDux2U\/IAQAOVTzgAAAQEICgE8zdMD5p9G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":595,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01xBAAD4G7sesEAABwKgKMofAAFB4CR\/IMyN7D4ARAOXDRwAAAQEICgE8zi4D5po+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":595,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05K1AAEAG3yrAqAoyrBAAAQBQh8AzI3sPeAkfyYAQAOO95AAAAQEICgPmn6MBPM4u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":595,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05K5AAEAG3ynAqAoyrBAAAQBQh8AzI3sPeAkfyYARAOO94wAAAQEICgPmn6MBPM4u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":595,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347989,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0\/UpAAD4GyI2sEAABwKgKMofAAFB4CR\/JMyN7EIAQAOW94AAAAQEICgE8zi8D5p+j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":596,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347990,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UVRAAD4GdISsEAABwKgKMofOAFAxwJtCAjdU1YARAOXi6gAAAQEICgE8zykD5puH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":596,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347990,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA09EhAAEAGz4\/AqAoyrBAAAQBQh84CN1TVMcCbQ4ARAOPd1QAAAQEICgPmoJ0BPM8p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":596,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347990,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0UVVAAD4GdIOsEAABwKgKMofOAFAxwJtDAjdU1oAQAOXd0wAAAQEICgE8zykD5qCd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":599,"flow_packet_id":1,"flow_first_seen":1499347992139,"flow_last_seen":1499347992139,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34832,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":599,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347992,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA866dAAD4G2iisEAABwKgKMogQAFBfGDvHAAAAAKACchBqJwAAAgQFtAQCCAoBPNBgAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":599,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347992,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiBBHAQA0Xxg7yKAScSB+FgAAAgQFtAQCCAoD5qHUATzQYAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":599,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347992,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA066hAAD4G2i+sEAABwKgKMogQAFBfGDvIRwEANYAQAOUdHgAAAQEICgE80GAD5qHU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":600,"flow_packet_id":1,"flow_first_seen":1499347993411,"flow_last_seen":1499347993411,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34846,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":600,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347993,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8wWNAAD4GBG2sEAABwKgKMogeAFD5yRD9AAAAAKACchD48wAAAgQFtAQCCAoBPNGeAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":600,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347993,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiB6gRZIr+ckQ\/qAScSAgaQAAAgQFtAQCCAoD5qMSATzRngEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":600,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347993,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wWRAAD4GBHSsEAABwKgKMogeAFD5yRD+oEWSLIAQAOW\/cAAAAQEICgE80Z4D5qMS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":597,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347993,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aCVAAD4GXbOsEAABwKgKMofoAFBt56StB\/iBGYARAOVlzwAAAQEICgE80hcD5p4D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":597,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347993,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0IpJAAEAGoUbAqAoyrBAAAQBQh+gH+IEZbeekroARAONgSAAAAQEICgPmo4sBPNIX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":597,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347993,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aCZAAD4GXbKsEAABwKgKMofoAFBt56SuB\/iBGoAQAOVgRgAAAQEICgE80hcD5qOL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":601,"flow_packet_id":1,"flow_first_seen":1499347994680,"flow_last_seen":1499347994680,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34860,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":601,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347994,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8eXlAAD4GTFesEAABwKgKMogsAFCPtauiAAAAAKACchDHFwAAAgQFtAQCCAoBPNLbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":601,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347994,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiCwnn9QNj7Wro6AScSAkFAAAAgQFtAQCCAoD5qRPATzS2wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":601,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347994,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXpAAD4GTF6sEAABwKgKMogsAFCPtaujJ5\/UDoAQAOXDGwAAAQEICgE80tsD5qRP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":598,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347994,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0S9JAAD4GegasEAABwKgKMof2AFDafYYDux2U\/IARAOVOjwAAAQEICgE80xED5p9G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":598,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347994,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MHlAAEAGk1\/AqAoyrBAAAQBQh\/a7HZT82n2GBIARAONJUQAAAQEICgPmpIUBPNMR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":598,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347994,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0S9NAAD4GegWsEAABwKgKMof2AFDafYYEux2U\/YAQAOVJTwAAAQEICgE80xED5qSF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":602,"flow_packet_id":1,"flow_first_seen":1499347997344,"flow_last_seen":1499347997344,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34886,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":602,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347997,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nDhAAD4GKZisEAABwKgKMohGAFAyaklNAAAAAKACchCEBAAAAgQFtAQCCAoBPNV1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":602,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347997,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiEaQGXl+MmpJTqAScSDQewAAAgQFtAQCCAoD5qbpATzVdQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":602,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347997,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nDlAAD4GKZ+sEAABwKgKMohGAFAyaklOkBl5f4AQAOVvgwAAAQEICgE81XUD5qbp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":599,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347997,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA066lAAD4G2i6sEAABwKgKMogQAFBfGDvIRwEANYARAOUXfgAAAQEICgE81f8D5qHU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":599,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347997,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0p0ZAAEAGHJLAqAoyrBAAAQBQiBBHAQA1Xxg7yYARAOMR4AAAAQEICgPmp3MBPNX\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":599,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347997,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA066pAAD4G2i2sEAABwKgKMogQAFBfGDvJRwEANoAQAOUR3QAAAQEICgE81gAD5qdz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":603,"flow_packet_id":1,"flow_first_seen":1499347998605,"flow_last_seen":1499347998605,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34900,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":603,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347998,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MQxAAD4GlMSsEAABwKgKMohUAFBMT+e8AAAAAKACchDKZgAAAgQFtAQCCAoBPNawAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":603,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347998,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiFT+qOY2TE\/nvaAScSA6WwAAAgQFtAQCCAoD5qgkATzWsAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":603,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347998,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MQ1AAD4GlMusEAABwKgKMohUAFBMT+e9\/qjmN4AQAOXZYQAAAQEICgE81rED5qgk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":600,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347998,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wWVAAD4GBHOsEAABwKgKMogeAFD5yRD+oEWSLIARAOW6FAAAAQEICgE81vkD5qMS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":600,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347998,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0OkFAAEAGiZfAqAoyrBAAAQBQiB6gRZIs+ckQ\/4ARAOO0ugAAAQEICgPmqG0BPNb5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":600,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347998,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0wWZAAD4GBHKsEAABwKgKMogeAFD5yRD\/oEWSLYAQAOW0twAAAQEICgE81voD5qht","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":561,"flow_packet_id":6,"flow_first_seen":1499347926328,"flow_last_seen":1499347931880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34144,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":561,"flow_packet_id":6,"flow_first_seen":1499347926328,"flow_last_seen":1499347931880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34144,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":562,"flow_packet_id":6,"flow_first_seen":1499347927657,"flow_last_seen":1499347932881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34158,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":562,"flow_packet_id":6,"flow_first_seen":1499347927657,"flow_last_seen":1499347932881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34158,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":563,"flow_packet_id":6,"flow_first_seen":1499347930265,"flow_last_seen":1499347935880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34184,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":563,"flow_packet_id":6,"flow_first_seen":1499347930265,"flow_last_seen":1499347935880,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34184,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":564,"flow_packet_id":6,"flow_first_seen":1499347931529,"flow_last_seen":1499347936881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34198,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":564,"flow_packet_id":6,"flow_first_seen":1499347931529,"flow_last_seen":1499347936881,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34198,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":601,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347999,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXtAAD4GTF2sEAABwKgKMogsAFCPtaujJ5\/UDoARAOW+AgAAAQEICgE81\/MD5qRP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":601,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347999,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0fWlAAEAGRm\/AqAoyrBAAAQBQiCwnn9QOj7WrpIARAOO46wAAAQEICgPmqWcBPNfz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":601,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499347999,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0eXxAAD4GTFysEAABwKgKMogsAFCPtaukJ5\/UD4AQAOW46QAAAQEICgE81\/MD5qln","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":604,"flow_packet_id":1,"flow_first_seen":1499348001148,"flow_last_seen":1499348001148,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34926,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":604,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348001,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8pkpAAD4GH4asEAABwKgKMohuAFDUG39mAAAAAKACchCoWgAAAgQFtAQCCAoBPNksAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":604,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348001,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiG4I9+h41Bt\/Z6AScSAJQwAAAgQFtAQCCAoD5qqgATzZLAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":604,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348001,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pktAAD4GH42sEAABwKgKMohuAFDUG39nCPfoeYAQAOWoSgAAAQEICgE82SwD5qqg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":605,"flow_packet_id":1,"flow_first_seen":1499348002450,"flow_last_seen":1499348002450,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34940,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":605,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348002,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80ydAAD4G8qisEAABwKgKMoh8AFCQawlWAAAAAKACchBgyAAAAgQFtAQCCAoBPNpxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":605,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348002,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiHx5OBm2kGsJV6AScSAe7QAAAgQFtAQCCAoD5qvlATzacQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":605,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348002,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00yhAAD4G8q+sEAABwKgKMoh8AFCQawlXeTgZt4AQAOW98wAAAQEICgE82nID5qvl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":602,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348002,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nDpAAD4GKZ6sEAABwKgKMohGAFAyaklOkBl5f4ARAOVqFQAAAQEICgE82uID5qbp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":602,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348002,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA01SlAAEAG7q7AqAoyrBAAAQBQiEaQGXl\/MmpJT4ARAONkqQAAAQEICgPmrFYBPNri","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":602,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348002,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nDtAAD4GKZ2sEAABwKgKMohGAFAyaklPkBl5gIAQAOVkpwAAAQEICgE82uID5qxW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":606,"flow_packet_id":1,"flow_first_seen":1499348003742,"flow_last_seen":1499348003742,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34954,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":606,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348003,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Q\/NAAD4Ggd2sEAABwKgKMoiKAFCK7JhGAAAAAKACchDWBAAAAgQFtAQCCAoBPNu1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":606,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348003,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiIrxrFQGiuyYR6AScSDgIAAAAgQFtAQCCAoD5q0pATzbtQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":606,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348003,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q\/RAAD4GgeSsEAABwKgKMoiKAFCK7JhH8axUB4AQAOV\/KAAAAQEICgE827UD5q0p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":603,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348003,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MQ5AAD4GlMqsEAABwKgKMohUAFBMT+e9\/qjmN4ARAOXUNQAAAQEICgE829wD5qgk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":603,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348003,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S2dAAEAGeHHAqAoyrBAAAQBQiFT+qOY3TE\/nvoARAOPPCgAAAQEICgPmrVABPNvc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":603,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348003,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MQ9AAD4GlMmsEAABwKgKMohUAFBMT+e+\/qjmOIAQAOXPCAAAAQEICgE829wD5q1Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":607,"flow_packet_id":1,"flow_first_seen":1499348006334,"flow_last_seen":1499348006334,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34980,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":607,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348006,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8NJlAAD4GkTesEAABwKgKMoikAFAqsOqkAAAAAKACchDhQAAAAgQFtAQCCAoBPN49AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":607,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348006,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiKQqwf7AKrDqpaAScSAFBgAAAgQFtAQCCAoD5q+xATzePQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":607,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348006,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NJpAAD4GkT6sEAABwKgKMoikAFAqsOqlKsH+wYAQAOWkDQAAAQEICgE83j0D5q+x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":604,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348006,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pkxAAD4GH4ysEAABwKgKMohuAFDUG39nCPfoeYARAOWiqwAAAQEICgE83soD5qqg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":604,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348006,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0WEdAAEAGa5HAqAoyrBAAAQBQiG4I9+h51Bt\/aIARAOOdDgAAAQEICgPmsD4BPN7K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":604,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348006,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0pk1AAD4GH4usEAABwKgKMohuAFDUG39oCPfoeoAQAOWdDAAAAQEICgE83soD5rA+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":605,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":605,"flow_packet_id":4,"flow_first_seen":1499348002450,"flow_last_seen":1499348007347,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":415,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34940,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0406{"flow_id":605,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0qRlAAEAGGr\/AqAoyrBAAAQBQiHx5OBm3kGsK1oAQAOuy3QAAAQEICgPmsK4BPN86","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2800{"flow_id":605,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":1837,"pkt":"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","pkt_caplen":1837,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":605,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00ypAAD4G8q2sEAABwKgKMoh8AFCQawrWeTggooAQAQCr2wAAAQEICgE83zsD5rCv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":608,"flow_packet_id":1,"flow_first_seen":1499348007599,"flow_last_seen":1499348007599,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34994,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":608,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8+WFAAD4GzG6sEAABwKgKMoiyAFBEayYYAAAAAKACchCKyAAAAgQFtAQCCAoBPN95AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":608,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiLJr5HteRGsmGaAScSDvkAAAAgQFtAQCCAoD5rDtATzfeQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":608,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+WJAAD4GzHWsEAABwKgKMoiyAFBEayYZa+R7X4AQAOWOmAAAAQEICgE833kD5rDt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":605,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2932{"flow_id":605,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":1934,"pkt":"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","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":605,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348007,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00yxAAD4G8qusEAABwKgKMoh8AFCQaw0feTgn7oAQAR2hqwAAAQEICgE833oD5rDu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":605,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGz0y1AAD4G8SusEAABwKgKMoh8AFCQaw0feTgn7oAYAR1PtwAAAQEICgE84HYD5rDuR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2792{"flow_id":605,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":605,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00y5AAD4G8qmsEAABwKgKMoh8AFCQaw6eeTgu2IAQATmXLAAAAQEICgE84HcD5rHr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1189{"flow_id":605,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2935{"flow_id":605,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":1933,"pkt":"AMGxFOsxABm5CmnxCABFAAd\/qSBAAEAGE23AqAoyrBAAAQBQiHx5OC7YkGsQ54AYAQd+XQAAAQEICgPmsi8BPOC6SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjMzOjI4IEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTcNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61Ye0\/jOBD\/G6T9Dj6fdMBKxNvldnWwbValhaOncvRoS\/dWJ0Vu4rYGJ87aTgvf\/sZ5tOFZskVCxbHn8RvPeDzjd9v1X9oXrcG\/vRM0M6FAveFxt9NCeJ+Q0UGLkPagjb6dDc67qOZ8QH2juG8IOfkbIzwzJj4iZLFYOIsDR6opGVySWyulZtny4b5OeZzABNh9t\/1uu57quQ1FpBtPyKgdHh5mrBn5Vn3GaADDra16yAxFlmWf\/Uj4vIFbMjIsMvuDu5hh5GdfDWzYrSFWxBfkz6jSzDSGg9P9PzAimcytuuFGMPcqERFTdMwFN3dH6JJNBPMNC1BLSa1RnxuG+r7iseHRFO1+6\/f30NERatMwQgWvYGjExqgZx4L71HAZod321ai5h+Y1p\/YBvW+zORMyDgHa+zrJFOcoBI9ukGKigbW5E0zPGDMYGbAmN8LXGqOZYpMGdhwCf8F8Qe0sCSmPnHSZPJbGYSsKOf\/xkE4Zgan7kiZ0bsmcdGEpQ6fWliFc0znNZjHSyr8H5Fqn\/3ugwLnW2K2TjDL3HMldZ8djGdwhX1BtvS5DhjOXBnyOeNDA1ndgEVO510tLVkhpfqvOw+kjJKmRmgg5lU4cTTGiAgJhjaNWdgNWUPdItd1kDxyXlLQ\/WvNiGgQsyAwCgkQUdtrVYyH9G7s1giMZ+aD6poEXPArkwoGlFEdjJ7PE2cEFKzDQe+5ysHsG21YnFHZZcHf7NQJ5BKcv8e2UduJZ\/IL8h6TY7ZRmqqmFA5fEa\/QtabDbt0NE4PjBJGofl5SRRLgbbOi8dL45hMdYJYaRF1A9zYDdY\/sfnUrlV\/TAQ4HslvlVAKT02G3JMKRRgDrRNUs9shkKX6tJFRQpPaDoX55upnjCifM1hqPa4MCZBGxNlLyKH7unHA53x87ojfcmiYWkQZXdyTlyGMP0a0P\/0NjAzVXJRTlLem6ZnyiGWs3eoHXW3AyK\/iF4FRwpPZzpf7pvFaxWojeGy62SU0pcD9Cg3WM7vbcZqgWjNx6vBKlgwe4IRqjPtI1W1GlXTK8P5d5q7VUCkjFgF+oZqFUuzjfcCitOlfRrllVRr8KhChzL4usN0Oiqu6ELFH0j1X0IG15B6VmE6nLtdbgiw66tHyE+sqlq2wH8PJrINepKVNjtnfXgdExkNUV0LBOzRs2SBrtNO3y7bbWF3lr1KyLsdtPxAwB5xXav9nu+ELQl7KoQhE7Grua67Vq5EKzPaj\/TXUDJXMsL5pLw+bKC9XwZMI8qRvP6eSJViCIaQrUO\/FD2pimugX\/FCLqlmQTsf54M8tq0HucWj2bU7Gh0JxOVMn8tKusoTsrFP85F299lfVsm0sk45EA2pyKBz372mWsjsZs1FcSizPDGirlnTAiJ8lbDhcpfS8HAw9Pdnf739qfTZvPzweG3i9pfB8Pm2fdh6\/PH7sVF96r3+6jXOz+8OutcdC6bH5ufPh2Pep939r6UJQTST2yn5fhS3nC292XZkgAcxVLXrDxcn310z+HAp+GvQppdVjBp1\/L4gGhcxZVtPnXesMoF1XHas0KIslsbZiT17L4Gz3pLz3qpZ6Edo2oKnSiGW4lGN9j9eVnLKK6MD7g9qFIMU94JtHVgrteC\/sp4\/bz1rIjxZXnrcbLIWfAbHrOA01S0\/SpbrgvLn8f2ehkv48nN9Kd8mYx9GdrrYX9Cfzjpk8STIF7B+CrNGU4qmDK1VMKL6h5Rl3Xk2S0L9aJzHSvod7PfIoU9k\/LyvOMLRtXyND+VF\/WdNiz07F3yZH4YJ8bYPjvPD1ecLRAc\/3iZs2MZJ7FXkMmolWX91aPDEVAM4130zG0\/B4neDCTacPwKkNKa4rfCEQ0hFztoD7toLaw+JEOfvS0wncpcC83uJhV8CnlbsAnkzzoL3aFmyubdozqBL0SDkEe5C+G7KA5Q174u5TQgcUUBt3qn3c9XAq7t9REUXnzWoRMpzb3Hltjd5LUrfupaLSdgYi\/O7F0wfbFz\/wfasETjkhQAAA==","pkt_caplen":1933,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":606,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q\/VAAD4GgeOsEAABwKgKMoiKAFCK7JhH8axUB4ARAOV6HQAAAQEICgE84L8D5q0p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":606,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA05jRAAEAG3aPAqAoyrBAAAQBQiIrxrFQHiuyYSIARAON1FAAAAQEICgPmsjMBPOC\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":606,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348008,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Q\/ZAAD4GgeKsEAABwKgKMoiKAFCK7JhI8axUCIAQAOV1EgAAAQEICgE84L8D5rIz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":531,"flow_packet_id":316,"flow_first_seen":1499347872187,"flow_last_seen":1499347941610,"flow_tot_l4_data_len":242497,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":767,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":33580,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":565,"flow_packet_id":6,"flow_first_seen":1499347934152,"flow_last_seen":1499347939882,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34224,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":565,"flow_packet_id":6,"flow_first_seen":1499347934152,"flow_last_seen":1499347939882,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34224,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":566,"flow_packet_id":6,"flow_first_seen":1499347935445,"flow_last_seen":1499347940883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34238,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":566,"flow_packet_id":6,"flow_first_seen":1499347935445,"flow_last_seen":1499347940883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34238,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":567,"flow_packet_id":6,"flow_first_seen":1499347936727,"flow_last_seen":1499347941876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34252,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":567,"flow_packet_id":6,"flow_first_seen":1499347936727,"flow_last_seen":1499347941876,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34252,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":569,"flow_packet_id":6,"flow_first_seen":1499347940593,"flow_last_seen":1499347945883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34292,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":569,"flow_packet_id":6,"flow_first_seen":1499347940593,"flow_last_seen":1499347945883,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34292,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":570,"flow_packet_id":6,"flow_first_seen":1499347943146,"flow_last_seen":1499347948885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34318,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":570,"flow_packet_id":6,"flow_first_seen":1499347943146,"flow_last_seen":1499347948885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34318,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":571,"flow_packet_id":6,"flow_first_seen":1499347944440,"flow_last_seen":1499347949885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34332,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":571,"flow_packet_id":6,"flow_first_seen":1499347944440,"flow_last_seen":1499347949885,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34332,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":609,"flow_packet_id":1,"flow_first_seen":1499348010145,"flow_last_seen":1499348010145,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35020,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":609,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348010,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA81alAAD4G8CasEAABwKgKMojMAFACvDRcAAAAAKACchC7nQAAAgQFtAQCCAoBPOH1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":609,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348010,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiMxKQ6iIArw0XaAScSASYQAAAgQFtAQCCAoD5rNpATzh9QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":609,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348010,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01apAAD4G8C2sEAABwKgKMojMAFACvDRdSkOoiYAQAOWxZwAAAQEICgE84fYD5rNp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":610,"flow_packet_id":1,"flow_first_seen":1499348011433,"flow_last_seen":1499348011433,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35034,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":610,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348011,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA89\/VAAD4GzdqsEAABwKgKMojaAFB2oBTCAAAAAKACchBmAwAAAgQFtAQCCAoBPOM3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":610,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348011,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiNplHDbhdqAUw6AScSASUwAAAgQFtAQCCAoD5rSrATzjNwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":610,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348011,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/ZAAD4GzeGsEAABwKgKMojaAFB2oBTDZRw24oAQAOWxWgAAAQEICgE84zcD5rSr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":607,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348011,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NJtAAD4GkT2sEAABwKgKMoikAFAqsOqlKsH+wYARAOWenAAAAQEICgE8460D5q+x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":607,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348011,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0S+BAAEAGd\/jAqAoyrBAAAQBQiKQqwf7BKrDqpoARAOOZLQAAAQEICgPmtSEBPOOt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":607,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348011,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0NJxAAD4GkTysEAABwKgKMoikAFAqsOqmKsH+woAQAOWZKwAAAQEICgE8460D5rUh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":611,"flow_packet_id":1,"flow_first_seen":1499348012728,"flow_last_seen":1499348012728,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35048,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":611,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348012,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MbdAAD4GlBmsEAABwKgKMojoAFBoxNXMAAAAAKACchCxggAAAgQFtAQCCAoBPOR7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":611,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348012,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiOhwV55UaMTVzaAScSDp3wAAAgQFtAQCCAoD5rXvATzkewEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":611,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348012,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbhAAD4GlCCsEAABwKgKMojoAFBoxNXNcFeeVYAQAOWI5wAAAQEICgE85HsD5rXv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":608,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348012,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+WNAAD4GzHSsEAABwKgKMoiyAFBEayYZa+R7X4ARAOWJaQAAAQEICgE85KcD5rDt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":608,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348012,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0zURAAEAG9pPAqAoyrBAAAQBQiLJr5HtfRGsmGoARAOOEPAAAAQEICgPmthsBPOSn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":608,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348012,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0+WRAAD4GzHOsEAABwKgKMoiyAFBEayYaa+R7YIAQAOWEOgAAAQEICgE85KcD5rYb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":612,"flow_packet_id":1,"flow_first_seen":1499348015250,"flow_last_seen":1499348015250,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35074,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":612,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348015,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SaJAAD4GfC6sEAABwKgKMokCAFA1NK9QAAAAAKACchAI\/gAAAgQFtAQCCAoBPObyAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":612,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348015,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiQJJKiEWNTSvUaAScSDjTwAAAgQFtAQCCAoD5rhmATzm8gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":612,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348015,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SaNAAD4GfDWsEAABwKgKMokCAFA1NK9RSSohF4AQAOWCVwAAAQEICgE85vID5rhm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":609,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348015,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01atAAD4G8CysEAABwKgKMojMAFACvDRdSkOoiYARAOWrxwAAAQEICgE855UD5rNp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":609,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348015,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0EYBAAEAGsljAqAoyrBAAAQBQiMxKQ6iJArw0XoARAOOmKAAAAQEICgPmuQkBPOeV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":609,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348015,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA01axAAD4G8CusEAABwKgKMojMAFACvDReSkOoioAQAOWmJgAAAQEICgE855UD5rkJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":613,"flow_packet_id":1,"flow_first_seen":1499348016526,"flow_last_seen":1499348016526,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35088,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":613,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348016,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82X9AAD4G7FCsEAABwKgKMokQAFAj2zFPAAAAAKACchCXDAAAAgQFtAQCCAoBPOgwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":613,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348016,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiRBmO\/1xI9sxUKAScSB2swAAAgQFtAQCCAoD5rmkATzoMAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":613,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348016,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02YBAAD4G7FesEAABwKgKMokQAFAj2zFQZjv9coAQAOUVugAAAQEICgE86DED5rmk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":610,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348016,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/dAAD4GzeCsEAABwKgKMojaAFB2oBTDZRw24oARAOWsAQAAAQEICgE86I8D5rSr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":610,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348016,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jOFAAEAGNvfAqAoyrBAAAQBQiNplHDbidqAUxIARAOOmqgAAAQEICgPmugMBPOiP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":610,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348016,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA09\/hAAD4Gzd+sEAABwKgKMojaAFB2oBTEZRw244AQAOWmqAAAAQEICgE86I8D5roD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":611,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348017,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MblAAD4GlB+sEAABwKgKMojoAFBoxNXNcFeeVYARAOWD2AAAAQEICgE86YkD5rXv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":611,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348017,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0JKhAAEAGnzDAqAoyrBAAAQBQiOhwV55VaMTVzoARAON+ywAAAQEICgPmuv0BPOmJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":611,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348017,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MbpAAD4GlB6sEAABwKgKMojoAFBoxNXOcFeeVoAQAOV+yQAAAQEICgE86YkD5rr9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":614,"flow_packet_id":1,"flow_first_seen":1499348019059,"flow_last_seen":1499348019059,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35114,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":614,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348019,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bDdAAD4GWZmsEAABwKgKMokqAFBENIadAAAAAKACchAe0QAAAgQFtAQCCAoBPOqqAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":614,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348019,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiSoKVvNnRDSGnqAScSBh7QAAAgQFtAQCCAoD5rweATzqqgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":614,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348019,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bDhAAD4GWaCsEAABwKgKMokqAFBENIaeClbzaIAQAOUA9QAAAQEICgE86qoD5rwe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":573,"flow_packet_id":6,"flow_first_seen":1499347948293,"flow_last_seen":1499347953886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34372,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":573,"flow_packet_id":6,"flow_first_seen":1499347948293,"flow_last_seen":1499347953886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34372,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":574,"flow_packet_id":6,"flow_first_seen":1499347949587,"flow_last_seen":1499347954886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34386,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":574,"flow_packet_id":6,"flow_first_seen":1499347949587,"flow_last_seen":1499347954886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34386,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":575,"flow_packet_id":6,"flow_first_seen":1499347952161,"flow_last_seen":1499347957887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34412,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":575,"flow_packet_id":6,"flow_first_seen":1499347952161,"flow_last_seen":1499347957887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34412,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":576,"flow_packet_id":6,"flow_first_seen":1499347953439,"flow_last_seen":1499347958887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34426,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":576,"flow_packet_id":6,"flow_first_seen":1499347953439,"flow_last_seen":1499347958887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34426,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":577,"flow_packet_id":6,"flow_first_seen":1499347954738,"flow_last_seen":1499347959887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34440,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":577,"flow_packet_id":6,"flow_first_seen":1499347954738,"flow_last_seen":1499347959887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34440,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":572,"flow_packet_id":6,"flow_first_seen":1499347945720,"flow_last_seen":1499347950886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34346,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":572,"flow_packet_id":6,"flow_first_seen":1499347945720,"flow_last_seen":1499347950886,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34346,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":615,"flow_packet_id":1,"flow_first_seen":1499348020357,"flow_last_seen":1499348020357,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35128,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":615,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348020,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MF5AAD4GlXKsEAABwKgKMok4AFAr8NuwAAAAAKACchDgrwAAAgQFtAQCCAoBPOvuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":615,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348020,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiTgvWFvMK\/DbsaAScSCVIQAAAgQFtAQCCAoD5r1iATzr7gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":615,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348020,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MF9AAD4GlXmsEAABwKgKMok4AFAr8NuxL1hbzYAQAOU0KQAAAQEICgE86+4D5r1i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":612,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348020,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SaRAAD4GfDSsEAABwKgKMokCAFA1NK9RSSohF4ARAOV80QAAAQEICgE87HcD5rhm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":612,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348020,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0nPxAAEAGJtzAqAoyrBAAAQBQiQJJKiEXNTSvUoARAON3TQAAAQEICgPmvesBPOx3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":612,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348020,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SaVAAD4GfDOsEAABwKgKMokCAFA1NK9SSSohGIAQAOV3SwAAAQEICgE87HcD5r3r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":616,"flow_packet_id":1,"flow_first_seen":1499348021660,"flow_last_seen":1499348021660,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35142,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":616,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348021,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8T85AAD4GdgKsEAABwKgKMolGAFAJiKL6AAAAAKACchA6egAAAgQFtAQCCAoBPO00AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":616,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348021,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiUb24raMCYii+6AScSDLWgAAAgQFtAQCCAoD5r6oATztNAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":616,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348021,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T89AAD4GdgmsEAABwKgKMolGAFAJiKL79uK2jYAQAOVqYgAAAQEICgE87TQD5r6o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":613,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348021,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02YFAAD4G7FasEAABwKgKMokQAFAj2zFQZjv9coARAOUQeQAAAQEICgE87XED5rmk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":613,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348021,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Q5dAAEAGgEHAqAoyrBAAAQBQiRBmO\/1yI9sxUYARAOMLOQAAAQEICgPmvuUBPO1x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":613,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348021,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02YJAAD4G7FWsEAABwKgKMokQAFAj2zFRZjv9c4AQAOULNwAAAQEICgE87XED5r7l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":617,"flow_packet_id":1,"flow_first_seen":1499348024206,"flow_last_seen":1499348024206,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35168,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":617,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348024,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA82E1AAD4G7YKsEAABwKgKMolgAFCsqjf8AAAAAKACchD\/vgAAAgQFtAQCCAoBPO+xAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":617,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348024,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiWCF9T2qrKo3\/aAScSB38wAAAgQFtAQCCAoD5sEkATzvsQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":617,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348024,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02E5AAD4G7YmsEAABwKgKMolgAFCsqjf9hfU9q4AQAOUW+wAAAQEICgE877ED5sEk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":614,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348024,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bDlAAD4GWZ+sEAABwKgKMokqAFBENIaeClbzaIARAOX7PgAAAQEICgE88F8D5rwe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":614,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348024,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0MrtAAEAGkR3AqAoyrBAAAQBQiSoKVvNoRDSGn4ARAOP1igAAAQEICgPmwdMBPPBf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":614,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348024,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bDpAAD4GWZ6sEAABwKgKMokqAFBENIafClbzaYAQAOX1hwAAAQEICgE88GAD5sHT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":618,"flow_packet_id":1,"flow_first_seen":1499348025497,"flow_last_seen":1499348025497,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35182,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":618,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348025,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA856FAAD4G3i6sEAABwKgKMoluAFBIkhdSAAAAAKACchCDMQAAAgQFtAQCCAoBPPDzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":618,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348025,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiW4WAueQSJIXU6AScSDALwAAAgQFtAQCCAoD5sJnATzw8wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":618,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348025,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA056JAAD4G3jWsEAABwKgKMoluAFBIkhdTFgLnkYAQAOVfNwAAAQEICgE88PMD5sJn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":615,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348025,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MGBAAD4GlXisEAABwKgKMok4AFAr8NuxL1hbzYARAOUuvAAAAQEICgE88VoD5r1i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":615,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348025,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0mQNAAEAGKtXAqAoyrBAAAQBQiTgvWFvNK\/DbsoARAOMpUQAAAQEICgPmws4BPPFa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":615,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348025,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MGFAAD4GlXesEAABwKgKMok4AFAr8NuyL1hbzoAQAOUpTwAAAQEICgE88VoD5sLO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":616,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348026,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T9BAAD4GdgisEAABwKgKMolGAFAJiKL79uK2jYARAOVlQQAAAQEICgE88lQD5r6o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":616,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348026,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0dUVAAEAGTpPAqAoyrBAAAQBQiUb24raNCYii\/IARAONgIgAAAQEICgPmw8gBPPJU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":616,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348026,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0T9FAAD4GdgesEAABwKgKMolGAFAJiKL89uK2joAQAOVgIAAAAQEICgE88lQD5sPI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":619,"flow_packet_id":1,"flow_first_seen":1499348028117,"flow_last_seen":1499348028117,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35208,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":619,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348028,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80XFAAD4G9F6sEAABwKgKMomIAFDG6SLzAAAAAKACchD2jwAAAgQFtAQCCAoBPPOCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":619,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348028,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiYg5g7TNxuki9KAScSBAQQAAAgQFtAQCCAoD5sT2ATzzggEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":619,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348028,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XJAAD4G9GWsEAABwKgKMomIAFDG6SL0OYO0zoAQAOXfRwAAAQEICgE884MD5sT2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":620,"flow_packet_id":1,"flow_first_seen":1499348029395,"flow_last_seen":1499348029395,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35222,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":620,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348029,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DoBAAD4Gt1CsEAABwKgKMomWAFBGnvpCAAAAAKACchCePQAAAgQFtAQCCAoBPPTCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":620,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348029,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiZaKxK9BRp76Q6AScSCa+QAAAgQFtAQCCAoD5sY2ATz0wgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":620,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348029,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DoFAAD4Gt1esEAABwKgKMomWAFBGnvpDisSvQoAQAOU6AQAAAQEICgE89MID5sY2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":617,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348029,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02E9AAD4G7YisEAABwKgKMolgAFCsqjf9hfU9q4ARAOURaQAAAQEICgE89UID5sEk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":617,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348029,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0+x1AAEAGyLrAqAoyrBAAAQBQiWCF9T2rrKo3\/oARAOML2AAAAQEICgPmxrYBPPVC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":617,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348029,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA02FBAAD4G7YesEAABwKgKMolgAFCsqjf+hfU9rIAQAOUL1gAAAQEICgE89UID5sa2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":578,"flow_packet_id":6,"flow_first_seen":1499347957282,"flow_last_seen":1499347962887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34466,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":578,"flow_packet_id":6,"flow_first_seen":1499347957282,"flow_last_seen":1499347962887,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34466,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":579,"flow_packet_id":6,"flow_first_seen":1499347958588,"flow_last_seen":1499347963888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34480,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":579,"flow_packet_id":6,"flow_first_seen":1499347958588,"flow_last_seen":1499347963888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34480,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":580,"flow_packet_id":6,"flow_first_seen":1499347961167,"flow_last_seen":1499347966888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34506,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":580,"flow_packet_id":6,"flow_first_seen":1499347961167,"flow_last_seen":1499347966888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34506,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":581,"flow_packet_id":6,"flow_first_seen":1499347962480,"flow_last_seen":1499347967888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34520,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":581,"flow_packet_id":6,"flow_first_seen":1499347962480,"flow_last_seen":1499347967888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34520,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":582,"flow_packet_id":6,"flow_first_seen":1499347963774,"flow_last_seen":1499347968888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34534,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":582,"flow_packet_id":6,"flow_first_seen":1499347963774,"flow_last_seen":1499347968888,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34534,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":621,"flow_packet_id":1,"flow_first_seen":1499348030687,"flow_last_seen":1499348030687,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35236,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":621,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348030,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gAJAAD4GRc6sEAABwKgKMomkAFDF6nYHAAAAAKACchCh2wAAAgQFtAQCCAoBPPYFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":621,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348030,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiaQ\/ByIUxep2CKAScSB2PwAAAgQFtAQCCAoD5sd5ATz2BQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":621,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348030,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gANAAD4GRdWsEAABwKgKMomkAFDF6nYIPwciFYAQAOUVRwAAAQEICgE89gUD5sd5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":618,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348030,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA056NAAD4G3jSsEAABwKgKMoluAFBIkhdTFgLnkYARAOVZ7QAAAQEICgE89jwD5sJn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":618,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348030,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ICFAAEAGo7fAqAoyrBAAAQBQiW4WAueRSJIXVIARAONUpQAAAQEICgPmx7ABPPY8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":618,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348030,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA056RAAD4G3jOsEAABwKgKMoluAFBIkhdUFgLnkoAQAOVUowAAAQEICgE89jwD5sew","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":622,"flow_packet_id":1,"flow_first_seen":1499348033296,"flow_last_seen":1499348033296,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35262,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":622,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LtJAAD4Glv6sEAABwKgKMom+AFA+iNZDAAAAAKACchDGWwAAAgQFtAQCCAoBPPiRAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":622,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQib4da6BXPojWRKAScSA7jAAAAgQFtAQCCAoD5soFATz4kQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":622,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LtNAAD4GlwWsEAABwKgKMom+AFA+iNZEHWugWIAQAOXakwAAAQEICgE8+JED5soF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":619,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00XNAAD4G9GSsEAABwKgKMomIAFDG6SL0OYO0zoARAOXZnwAAAQEICgE8+SoD5sT2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":619,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0flBAAEAGRYjAqAoyrBAAAQBQiYg5g7TOxuki9YAQAOPT+AAAAQEICgPmyp8BPPkq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":619,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0flFAAEAGRYfAqAoyrBAAAQBQiYg5g7TOxuki9YARAOPT9wAAAQEICgPmyp8BPPkq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":619,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348033,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0H75AAD4GphqsEAABwKgKMomIAFDG6SL1OYO0z4AQAOXT9AAAAQEICgE8+SsD5sqf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":623,"flow_packet_id":1,"flow_first_seen":1499348034569,"flow_last_seen":1499348034569,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35276,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":623,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348034,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8z7RAAD4G9husEAABwKgKMonMAFCoJTZ7AAAAAKACchD7OgAAAgQFtAQCCAoBPPnPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":623,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348034,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiczTsUb+qCU2fKAScSASQAAAAgQFtAQCCAoD5stDATz5zwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":623,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348034,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z7VAAD4G9iKsEAABwKgKMonMAFCoJTZ807FG\/4AQAOWxRgAAAQEICgE8+dAD5stD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":620,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348034,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DoJAAD4Gt1asEAABwKgKMomWAFBGnvpDisSvQoARAOU0ngAAAQEICgE8+iQD5sY2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":620,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348034,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZNpAAEAGXv7AqAoyrBAAAQBQiZaKxK9CRp76RIARAOMvPQAAAQEICgPmy5gBPPok","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":620,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348034,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DoNAAD4Gt1WsEAABwKgKMomWAFBGnvpEisSvQ4AQAOUvOgAAAQEICgE8+iUD5suY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":621,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348035,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gARAAD4GRdSsEAABwKgKMomkAFDF6nYIPwciFYARAOUQLQAAAQEICgE8+x4D5sd5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":621,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348035,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA07odAAEAG1VDAqAoyrBAAAQBQiaQ\/ByIVxep2CYARAOMLFQAAAQEICgPmzJIBPPse","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":621,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348035,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gAVAAD4GRdOsEAABwKgKMomkAFDF6nYJPwciFoAQAOULEgAAAQEICgE8+x8D5syS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":624,"flow_packet_id":1,"flow_first_seen":1499348037175,"flow_last_seen":1499348037175,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35302,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":624,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348037,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8MahAAD4GlCisEAABwKgKMonmAFDKJM3zAAAAAKACchA\/HQAAAgQFtAQCCAoBPPxbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":624,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348037,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiebQGLVtyiTN9KAScSDovwAAAgQFtAQCCAoD5s3PATz8WwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":624,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348037,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MalAAD4GlC+sEAABwKgKMonmAFDKJM300Bi1boAQAOWHxwAAAQEICgE8\/FsD5s3P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":625,"flow_packet_id":1,"flow_first_seen":1499348038438,"flow_last_seen":1499348038438,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35316,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":625,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j\/dAAD4GNdmsEAABwKgKMon0AFAYNXJgAAAAAKACchBLVgAAAgQFtAQCCAoBPP2XAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":625,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQifSSwJxVGDVyYaAScSBKLgAAAgQFtAQCCAoD5s8KATz9lwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":625,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/hAAD4GNeCsEAABwKgKMon0AFAYNXJhksCcVoAQAOXpNQAAAQEICgE8\/ZcD5s8K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":622,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LtRAAD4GlwSsEAABwKgKMom+AFA+iNZEHWugWIARAOXVFgAAAQEICgE8\/g0D5soF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":622,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b9hAAEAGVADAqAoyrBAAAQBQib4da6BYPojWRYAQAOPPnAAAAQEICgPmz4EBPP4N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":622,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0b9lAAEAGU\/\/AqAoyrBAAAQBQib4da6BYPojWRYARAOPPmwAAAQEICgPmz4EBPP4N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":622,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348038,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0IRpAAD4GpL6sEAABwKgKMom+AFA+iNZFHWugWYAQAOXPmQAAAQEICgE8\/g0D5s+B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":623,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348039,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z7ZAAD4G9iGsEAABwKgKMonMAFCoJTZ807FG\/4ARAOWsDgAAAQEICgE8\/wcD5stD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":623,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348039,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0loRAAEAGLVTAqAoyrBAAAQBQiczTsUb\/qCU2fYARAOOm1wAAAQEICgPm0HsBPP8H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":623,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348039,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0z7dAAD4G9iCsEAABwKgKMonMAFCoJTZ907FHAIAQAOWm1QAAAQEICgE8\/wcD5tB7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":583,"flow_packet_id":6,"flow_first_seen":1499347965133,"flow_last_seen":1499347970889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34548,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":583,"flow_packet_id":6,"flow_first_seen":1499347965133,"flow_last_seen":1499347970889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34548,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":584,"flow_packet_id":6,"flow_first_seen":1499347966420,"flow_last_seen":1499347971889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34562,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":584,"flow_packet_id":6,"flow_first_seen":1499347966420,"flow_last_seen":1499347971889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34562,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":585,"flow_packet_id":6,"flow_first_seen":1499347967724,"flow_last_seen":1499347972889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34576,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":585,"flow_packet_id":6,"flow_first_seen":1499347967724,"flow_last_seen":1499347972889,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34576,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":586,"flow_packet_id":6,"flow_first_seen":1499347970267,"flow_last_seen":1499347975890,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":586,"flow_packet_id":6,"flow_first_seen":1499347970267,"flow_last_seen":1499347975890,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34602,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":587,"flow_packet_id":6,"flow_first_seen":1499347971560,"flow_last_seen":1499347976891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34616,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":587,"flow_packet_id":6,"flow_first_seen":1499347971560,"flow_last_seen":1499347976891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34616,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":588,"flow_packet_id":6,"flow_first_seen":1499347974113,"flow_last_seen":1499347979891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34642,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":588,"flow_packet_id":6,"flow_first_seen":1499347974113,"flow_last_seen":1499347979891,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34642,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":626,"flow_packet_id":1,"flow_first_seen":1499348041088,"flow_last_seen":1499348041088,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35342,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":626,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348041,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8l85AAD4GLgKsEAABwKgKMooOAFBaWpfjAAAAAKACchDg\/QAAAgQFtAQCCAoBPQAtAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":626,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348041,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQig7ecTfrWlqX5KAScSD19wAAAgQFtAQCCAoD5tGhAT0ALQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":626,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348041,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l89AAD4GLgmsEAABwKgKMooOAFBaWpfk3nE37IAQAOWU\/wAAAQEICgE9AC0D5tGh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":627,"flow_packet_id":1,"flow_first_seen":1499348042384,"flow_last_seen":1499348042384,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35356,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":627,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348042,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8rjZAAD4GF5qsEAABwKgKMoocAFClJq9HAAAAAKACchB9ewAAAgQFtAQCCAoBPQFxAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":627,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348042,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQihw9by\/zpSavSKAScSA6LAAAAgQFtAQCCAoD5tLlAT0BcQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":627,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348042,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rjdAAD4GF6GsEAABwKgKMoocAFClJq9IPW8v9IAQAOXZMwAAAQEICgE9AXED5tLl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":624,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348042,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MapAAD4GlC6sEAABwKgKMonmAFDKJM300Bi1boARAOWCLAAAAQEICgE9AfUD5s3P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":624,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348042,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ZgdAAEAGXdHAqAoyrBAAAQBQiebQGLVuyiTN9YARAON8kwAAAQEICgPm02kBPQH1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":624,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348042,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0MatAAD4GlC2sEAABwKgKMonmAFDKJM310Bi1b4AQAOV8kQAAAQEICgE9AfUD5tNp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":628,"flow_packet_id":1,"flow_first_seen":1499348043670,"flow_last_seen":1499348043670,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35370,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":628,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348043,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cMNAAD4GVQ2sEAABwKgKMooqAFAsTnJwAAAAAKACchAx2wAAAgQFtAQCCAoBPQKzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":628,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348043,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiirQJ1Z6LE5ycaAScSA0CwAAAgQFtAQCCAoD5tQmAT0CswEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":628,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348043,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cMRAAD4GVRSsEAABwKgKMooqAFAsTnJx0CdWe4AQAOXTEgAAAQEICgE9ArMD5tQm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":625,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348043,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/lAAD4GNd+sEAABwKgKMon0AFAYNXJhksCcVoARAOXj3AAAAQEICgE9Au8D5s8K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":625,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348043,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SDVAAEAGe6PAqAoyrBAAAQBQifSSwJxWGDVyYoARAOPehAAAAQEICgPm1GMBPQLv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":625,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348043,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/pAAD4GNd6sEAABwKgKMon0AFAYNXJiksCcV4AQAOXeggAAAQEICgE9Au8D5tRj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":629,"flow_packet_id":1,"flow_first_seen":1499348046262,"flow_last_seen":1499348046262,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35396,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":629,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348046,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8bZhAAD4GWDisEAABwKgKMopEAFAJXWijAAAAAKACchBb9wAAAgQFtAQCCAoBPQU7AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":629,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348046,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQikQJGz7wCV1opKAScSA6NQAAAgQFtAQCCAoD5tavAT0FOwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":629,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348046,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bZlAAD4GWD+sEAABwKgKMopEAFAJXWikCRs+8YAQAOXZPAAAAQEICgE9BTsD5tav","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":626,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348046,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l9BAAD4GLgisEAABwKgKMooOAFBaWpfk3nE37IARAOWPTgAAAQEICgE9Bd0D5tGh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":626,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348046,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04L1AAEAG4xrAqAoyrBAAAQBQig7ecTfsWlqX5YARAOOJnwAAAQEICgPm11EBPQXd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":626,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348046,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0l9FAAD4GLgesEAABwKgKMooOAFBaWpfl3nE37YAQAOWJnQAAAQEICgE9Bd0D5tdR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":630,"flow_packet_id":1,"flow_first_seen":1499348047547,"flow_last_seen":1499348047547,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35410,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":630,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348047,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8PrNAAD4Ghx2sEAABwKgKMopSAFC7TzjPAAAAAKACchDYiQAAAgQFtAQCCAoBPQZ8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":630,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348047,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQilKBYq9Yu0840KAScSDM1gAAAgQFtAQCCAoD5tfwAT0GfAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":630,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348047,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PrRAAD4GhySsEAABwKgKMopSAFC7TzjQgWKvWYAQAOVr3gAAAQEICgE9BnwD5tfw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":627,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348047,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rjhAAD4GF6CsEAABwKgKMoocAFClJq9IPW8v9IARAOXTzAAAAQEICgE9BtcD5tLl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":627,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348047,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0979AAEAGzBjAqAoyrBAAAQBQihw9by\/0pSavSYARAOPOZwAAAQEICgPm2EsBPQbX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":627,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348047,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0rjlAAD4GF5+sEAABwKgKMoocAFClJq9JPW8v9YAQAOXOZQAAAQEICgE9BtcD5thL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":628,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348048,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cMVAAD4GVROsEAABwKgKMooqAFAsTnJx0CdWe4ARAOXN8wAAAQEICgE9B9ED5tQm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":628,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348048,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jz5AAEAGNJrAqAoyrBAAAQBQiirQJ1Z7LE5ycoARAOPI1QAAAQEICgPm2UUBPQfR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":628,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348048,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cMZAAD4GVRKsEAABwKgKMooqAFAsTnJy0CdWfIAQAOXI0wAAAQEICgE9B9ED5tlF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":631,"flow_packet_id":1,"flow_first_seen":1499348050079,"flow_last_seen":1499348050079,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35436,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":631,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348050,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Gn1AAD4Gq1OsEAABwKgKMopsAFCVUBKIAAAAAKACchAiPQAAAgQFtAQCCAoBPQj1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":631,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348050,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQimww3+sulVASiaAScSAovgAAAgQFtAQCCAoD5tppAT0I9QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":631,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348050,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gn5AAD4Gq1qsEAABwKgKMopsAFCVUBKJMN\/rL4AQAOXHxQAAAQEICgE9CPUD5tpp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":589,"flow_packet_id":6,"flow_first_seen":1499347975371,"flow_last_seen":1499347980892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34656,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":589,"flow_packet_id":6,"flow_first_seen":1499347975371,"flow_last_seen":1499347980892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34656,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":590,"flow_packet_id":6,"flow_first_seen":1499347976658,"flow_last_seen":1499347981892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34670,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":590,"flow_packet_id":6,"flow_first_seen":1499347976658,"flow_last_seen":1499347981892,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34670,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":591,"flow_packet_id":6,"flow_first_seen":1499347979251,"flow_last_seen":1499347984894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34696,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":591,"flow_packet_id":6,"flow_first_seen":1499347979251,"flow_last_seen":1499347984894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34696,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":592,"flow_packet_id":6,"flow_first_seen":1499347980524,"flow_last_seen":1499347985894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34710,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":592,"flow_packet_id":6,"flow_first_seen":1499347980524,"flow_last_seen":1499347985894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34710,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":593,"flow_packet_id":6,"flow_first_seen":1499347981782,"flow_last_seen":1499347986894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34724,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":593,"flow_packet_id":6,"flow_first_seen":1499347981782,"flow_last_seen":1499347986894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34724,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":594,"flow_packet_id":6,"flow_first_seen":1499347983061,"flow_last_seen":1499347988894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34738,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":594,"flow_packet_id":6,"flow_first_seen":1499347983061,"flow_last_seen":1499347988894,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34738,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":595,"flow_packet_id":7,"flow_first_seen":1499347984370,"flow_last_seen":1499347989894,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34752,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":595,"flow_packet_id":7,"flow_first_seen":1499347984370,"flow_last_seen":1499347989894,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34752,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":596,"flow_packet_id":6,"flow_first_seen":1499347985686,"flow_last_seen":1499347990895,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34766,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":8972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":596,"flow_packet_id":6,"flow_first_seen":1499347985686,"flow_last_seen":1499347990895,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34766,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":632,"flow_packet_id":1,"flow_first_seen":1499348051362,"flow_last_seen":1499348051362,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35450,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":632,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348051,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8ntRAAD4GJvysEAABwKgKMop6AFCG4ZTiAAAAAKACchCtAgAAAgQFtAQCCAoBPQo2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":632,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348051,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQinqx2HVxhuGU46AScSCnBwAAAgQFtAQCCAoD5tupAT0KNgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":632,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348051,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ntVAAD4GJwOsEAABwKgKMop6AFCG4ZTjsdh1coAQAOVGDwAAAQEICgE9CjYD5tup","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":629,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348051,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bZpAAD4GWD6sEAABwKgKMopEAFAJXWikCRs+8YARAOXTtwAAAQEICgE9Cr8D5tav","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":629,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348051,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA04sJAAEAG4RXAqAoyrBAAAQBQikQJGz7xCV1opYARAOPONAAAAQEICgPm3DMBPQq\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":629,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348051,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0bZtAAD4GWD2sEAABwKgKMopEAFAJXWilCRs+8oAQAOXOMgAAAQEICgE9Cr8D5twz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":633,"flow_packet_id":1,"flow_first_seen":1499348052641,"flow_last_seen":1499348052641,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35464,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":633,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348052,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8j\/xAAD4GNdSsEAABwKgKMoqIAFBipISJAAAAAKACchDgSwAAAgQFtAQCCAoBPQt1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":633,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348052,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiogIs7XwYqSEiqAScSBBtwAAAgQFtAQCCAoD5tzpAT0LdQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":633,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348052,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/1AAD4GNdusEAABwKgKMoqIAFBipISKCLO18YAQAOXgvQAAAQEICgE9C3YD5tzp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":630,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348052,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PrVAAD4GhyOsEAABwKgKMopSAFC7TzjQgWKvWYARAOVmoAAAAQEICgE9C7kD5tfw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":630,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348052,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0cnRAAEAGUWTAqAoyrBAAAQBQilKBYq9Zu0840YARAONhZAAAAQEICgPm3S0BPQu5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":630,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348052,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PrZAAD4GhyKsEAABwKgKMopSAFC7TzjRgWKvWoAQAOVhYgAAAQEICgE9C7kD5t0t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":634,"flow_packet_id":1,"flow_first_seen":1499348055228,"flow_last_seen":1499348055228,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35490,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":634,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348055,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8W0hAAD4GaoisEAABwKgKMoqiAFBaIFa0AAAAAKACchAUBAAAAgQFtAQCCAoBPQ38AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":634,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348055,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiqK\/mxmbWiBWtaAScSBYVQAAAgQFtAQCCAoD5t9wAT0N\/AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":634,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348055,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W0lAAD4Gao+sEAABwKgKMoqiAFBaIFa1v5sZnIAQAOX3XAAAAQEICgE9DfwD5t9w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":631,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348055,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gn9AAD4Gq1msEAABwKgKMopsAFCVUBKJMN\/rL4ARAOXCEgAAAQEICgE9DqcD5tpp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":631,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348055,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CzRAAEAGuKTAqAoyrBAAAQBQimww3+svlVASioARAOO8YQAAAQEICgPm4BsBPQ6n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":631,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348055,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GoBAAD4Gq1isEAABwKgKMopsAFCVUBKKMN\/rMIAQAOW8XwAAAQEICgE9DqcD5uAb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":635,"flow_packet_id":1,"flow_first_seen":1499348056534,"flow_last_seen":1499348056534,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35504,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":635,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348056,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8LdZAAD4Gl\/qsEAABwKgKMoqwAFDDZCKVAAAAAKACchDdiQAAAgQFtAQCCAoBPQ9DAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":635,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348056,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQirDnT6dMw2QilqAScSBrLgAAAgQFtAQCCAoD5uC3AT0PQwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":635,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348056,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LddAAD4GmAGsEAABwKgKMoqwAFDDZCKW50+nTYAQAOUKNgAAAQEICgE9D0MD5uC3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":632,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348056,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ntZAAD4GJwKsEAABwKgKMop6AFCG4ZTjsdh1coARAOVAowAAAQEICgE9D6ED5tup","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":632,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348056,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0lGdAAEAGL3HAqAoyrBAAAQBQinqx2HVyhuGU5IARAOM7OAAAAQEICgPm4RUBPQ+h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":632,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348056,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ntdAAD4GJwGsEAABwKgKMop6AFCG4ZTksdh1c4AQAOU7NQAAAQEICgE9D6ID5uEV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":636,"flow_packet_id":1,"flow_first_seen":1499348057789,"flow_last_seen":1499348057789,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35518,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":636,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348057,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8cW1AAD4GVGOsEAABwKgKMoq+AFBo3mEQAAAAAKACchD4TAAAAgQFtAQCCAoBPRB9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":636,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348057,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQir7ZkVGbaN5hEaAScSDoJwAAAgQFtAQCCAoD5uHwAT0QfQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":636,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348057,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cW5AAD4GVGqsEAABwKgKMoq+AFBo3mER2ZFRnIAQAOWHLwAAAQEICgE9EH0D5uHw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":633,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348057,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/5AAD4GNdqsEAABwKgKMoqIAFBipISKCLO18YARAOXblwAAAQEICgE9EJsD5tzp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":633,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348057,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0V\/5AAEAGa9rAqAoyrBAAAQBQiogIs7XxYqSEi4ARAOPWcgAAAQEICgPm4g8BPRCb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":633,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348057,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0j\/9AAD4GNdmsEAABwKgKMoqIAFBipISLCLO18oAQAOXWbwAAAQEICgE9EJwD5uIP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":637,"flow_packet_id":1,"flow_first_seen":1499348059068,"flow_last_seen":1499348059068,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35532,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":637,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348059,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8SJlAAD4GfTesEAABwKgKMorMAFAzNVklAAAAAKACchA0lAAAAgQFtAQCCAoBPRG8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":637,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348059,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQisz9Lu2rMzVZJqAScSBjgQAAAgQFtAQCCAoD5uMwAT0RvAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":637,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348059,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SJpAAD4GfT6sEAABwKgKMorMAFAzNVkm\/S7trIAQAOUCiAAAAQEICgE9Eb0D5uMw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":638,"flow_packet_id":1,"flow_first_seen":1499348060393,"flow_last_seen":1499348060393,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35546,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":638,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348060,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80ItAAD4G9USsEAABwKgKMoraAFD\/pcOMAAAAAKACchD8YgAAAgQFtAQCCAoBPRMHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":638,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348060,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQitr3giqS\/6XDjaAScSDyygAAAgQFtAQCCAoD5uR7AT0TBwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":638,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348060,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00IxAAD4G9UusEAABwKgKMoraAFD\/pcON94Iqk4AQAOWR0QAAAQEICgE9EwgD5uR7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":634,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348060,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W0pAAD4Gao6sEAABwKgKMoqiAFBaIFa1v5sZnIARAOXxzgAAAQEICgE9E4kD5t9w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":634,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348060,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0\/WFAAEAGxnbAqAoyrBAAAQBQiqK\/mxmcWiBWtoARAOPsQgAAAQEICgPm5P0BPROJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":634,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348060,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0W0tAAD4Gao2sEAABwKgKMoqiAFBaIFa2v5sZnYAQAOXsPwAAAQEICgE9E4oD5uT9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":597,"flow_packet_id":6,"flow_first_seen":1499347988233,"flow_last_seen":1499347993896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34792,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":597,"flow_packet_id":6,"flow_first_seen":1499347988233,"flow_last_seen":1499347993896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34792,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":598,"flow_packet_id":6,"flow_first_seen":1499347989526,"flow_last_seen":1499347994896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":598,"flow_packet_id":6,"flow_first_seen":1499347989526,"flow_last_seen":1499347994896,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34806,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":599,"flow_packet_id":6,"flow_first_seen":1499347992139,"flow_last_seen":1499347997898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34832,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":599,"flow_packet_id":6,"flow_first_seen":1499347992139,"flow_last_seen":1499347997898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34832,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":600,"flow_packet_id":6,"flow_first_seen":1499347993411,"flow_last_seen":1499347998898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34846,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":600,"flow_packet_id":6,"flow_first_seen":1499347993411,"flow_last_seen":1499347998898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34846,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":601,"flow_packet_id":6,"flow_first_seen":1499347994680,"flow_last_seen":1499347999898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34860,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":601,"flow_packet_id":6,"flow_first_seen":1499347994680,"flow_last_seen":1499347999898,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34860,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":639,"flow_packet_id":1,"flow_first_seen":1499348061684,"flow_last_seen":1499348061684,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35560,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":639,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348061,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8R+ZAAD4GfeqsEAABwKgKMoroAFA+FlOsAAAAAKACchAsggAAAgQFtAQCCAoBPRRKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":639,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348061,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiuhWb4DgPhZTraAScSBsbAAAAgQFtAQCCAoD5uW+AT0USgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":639,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348061,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0R+dAAD4GffGsEAABwKgKMoroAFA+FlOtVm+A4YAQAOULdAAAAQEICgE9FEoD5uW+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":635,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348061,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LdhAAD4GmACsEAABwKgKMoqwAFDDZCKW50+nTYARAOUE9QAAAQEICgE9FIMD5uC3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":635,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348061,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0QrpAAEAGgR7AqAoyrBAAAQBQirDnT6dNw2Qil4ARAOP\/tQAAAQEICgPm5fcBPRSD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":635,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348061,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0LdlAAD4Gl\/+sEAABwKgKMoqwAFDDZCKX50+nToAQAOX\/sgAAAQEICgE9FIQD5uX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":636,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348062,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cW9AAD4GVGmsEAABwKgKMoq+AFBo3mER2ZFRnIARAOWCLgAAAQEICgE9FX0D5uHw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":636,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348062,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0t21AAEAGDGvAqAoyrBAAAQBQir7ZkVGcaN5hEoARAON9LgAAAQEICgPm5vEBPRV9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":636,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348062,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0cXBAAD4GVGisEAABwKgKMoq+AFBo3mES2ZFRnYAQAOV9KwAAAQEICgE9FX4D5ubx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":640,"flow_packet_id":1,"flow_first_seen":1499348064243,"flow_last_seen":1499348064243,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35586,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":640,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348064,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Y\/tAAD4GYdWsEAABwKgKMosCAFBtqHUxAAAAAKACchDY0AAAAgQFtAQCCAoBPRbKAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":640,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348064,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiwKN0\/hjbah1MqAScSBnUwAAAgQFtAQCCAoD5ug+AT0WygEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":640,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348064,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y\/xAAD4GYdysEAABwKgKMosCAFBtqHUyjdP4ZIAQAOUGWwAAAQEICgE9FsoD5ug+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":637,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348064,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SJtAAD4GfT2sEAABwKgKMorMAFAzNVkm\/S7trIARAOX80QAAAQEICgE9F3ID5uMw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":637,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348064,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0BUlAAEAGvo\/AqAoyrBAAAQBQisz9Lu2sMzVZJ4ARAOP3HQAAAQEICgPm6OUBPRdy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":637,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348064,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0SJxAAD4GfTysEAABwKgKMorMAFAzNVkn\/S7trYAQAOX3GwAAAQEICgE9F3ID5ujl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":641,"flow_packet_id":1,"flow_first_seen":1499348065546,"flow_last_seen":1499348065546,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35600,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":641,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348065,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA882RAAD4G0musEAABwKgKMosQAFA77ut0AAAAAKACchCS8wAAAgQFtAQCCAoBPRgQAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":641,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348065,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQixCTY4b2O+7rdaAScSCMDQAAAgQFtAQCCAoD5umEAT0YEAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":641,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348065,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA082VAAD4G0nKsEAABwKgKMosQAFA77ut1k2OG94AQAOUrFQAAAQEICgE9GBAD5umE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":638,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348065,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00I1AAD4G9UqsEAABwKgKMoraAFD\/pcON94Iqk4ARAOWMbAAAAQEICgE9GGwD5uR7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":638,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348065,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0w0xAAEAGAIzAqAoyrBAAAQBQitr3giqT\/6XDjoARAOOHCAAAAQEICgPm6eABPRhs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":638,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348065,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00I5AAD4G9UmsEAABwKgKMoraAFD\/pcOO94IqlIAQAOWHBgAAAQEICgE9GGwD5ung","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":639,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348066,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0R+hAAD4GffCsEAABwKgKMoroAFA+FlOtVm+A4YARAOUGVwAAAQEICgE9GWYD5uW+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":639,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348066,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0ajtAAEAGWZ3AqAoyrBAAAQBQiuhWb4DhPhZTroARAOMBPAAAAQEICgPm6toBPRlm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":639,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348066,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0R+lAAD4Gfe+sEAABwKgKMoroAFA+FlOuVm+A4oAQAOUBOgAAAQEICgE9GWYD5ura","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":642,"flow_packet_id":1,"flow_first_seen":1499348068136,"flow_last_seen":1499348068136,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35626,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":642,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348068,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8f2xAAD4GRmSsEAABwKgKMosqAFAaVGX7AAAAAKACchA3ZgAAAgQFtAQCCAoBPRqXAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":642,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348068,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiyoM4+ekGlRl\/KAScSBTywAAAgQFtAQCCAoD5uwLAT0alwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":642,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348068,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f21AAD4GRmusEAABwKgKMosqAFAaVGX8DOPnpYAQAOXy0gAAAQEICgE9GpcD5uwL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":643,"flow_packet_id":1,"flow_first_seen":1499348069426,"flow_last_seen":1499348069426,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35640,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":643,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348069,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86kVAAD4G24qsEAABwKgKMos4AFDyvfGfAAAAAKACchDSBgAAAgQFtAQCCAoBPRvaAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":643,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348069,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQiziWvrte8r3xoKAScSCPkwAAAgQFtAQCCAoD5u1OAT0b2gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":643,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348069,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06kZAAD4G25GsEAABwKgKMos4AFDyvfGglr67X4AQAOUumwAAAQEICgE9G9oD5u1O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":640,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348069,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y\/1AAD4GYdusEAABwKgKMosCAFBtqHUyjdP4ZIARAOUA0AAAAQEICgE9HFQD5ug+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":640,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348069,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0FaxAAEAGrizAqAoyrBAAAQBQiwKN0\/hkbah1M4ARAOP7RgAAAQEICgPm7cgBPRxU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":640,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348069,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Y\/5AAD4GYdqsEAABwKgKMosCAFBtqHUzjdP4ZYAQAOX7RAAAAQEICgE9HFQD5u3I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":644,"flow_packet_id":1,"flow_first_seen":1499348070791,"flow_last_seen":1499348070791,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35654,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":644,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348070,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8jQtAAD4GOMWsEAABwKgKMotGAFAklpAkAAAAAKACchAARwAAAgQFtAQCCAoBPR0vAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":644,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348070,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi0aOH7cfJJaQJaAScSDJXAAAAgQFtAQCCAoD5u6jAT0dLwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":644,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348070,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jQxAAD4GOMysEAABwKgKMotGAFAklpAljh+3IIAQAOVoZAAAAQEICgE9HS8D5u6j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":641,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348070,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA082ZAAD4G0nGsEAABwKgKMosQAFA77ut1k2OG94ARAOUl1gAAAQEICgE9HU4D5umE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":641,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348070,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0aDVAAEAGW6PAqAoyrBAAAQBQixCTY4b3O+7rdoARAOMgmQAAAQEICgPm7sIBPR1O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":641,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348070,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA082dAAD4G0nCsEAABwKgKMosQAFA77ut2k2OG+IAQAOUglwAAAQEICgE9HU4D5u7C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":602,"flow_packet_id":6,"flow_first_seen":1499347997344,"flow_last_seen":1499348002899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34886,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":602,"flow_packet_id":6,"flow_first_seen":1499347997344,"flow_last_seen":1499348002899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34886,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":603,"flow_packet_id":6,"flow_first_seen":1499347998605,"flow_last_seen":1499348003900,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34900,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":603,"flow_packet_id":6,"flow_first_seen":1499347998605,"flow_last_seen":1499348003900,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34900,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":604,"flow_packet_id":6,"flow_first_seen":1499348001148,"flow_last_seen":1499348006901,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34926,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":604,"flow_packet_id":6,"flow_first_seen":1499348001148,"flow_last_seen":1499348006901,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34926,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":606,"flow_packet_id":6,"flow_first_seen":1499348003742,"flow_last_seen":1499348008904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34954,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":606,"flow_packet_id":6,"flow_first_seen":1499348003742,"flow_last_seen":1499348008904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34954,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":568,"flow_packet_id":311,"flow_first_seen":1499347939286,"flow_last_seen":1499348006339,"flow_tot_l4_data_len":242640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1902,"flow_avg_l4_data_len":780,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34278,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":645,"flow_packet_id":1,"flow_first_seen":1499348072088,"flow_last_seen":1499348072088,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35668,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":645,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8DYZAAD4GuEqsEAABwKgKMotUAFAOsRP1AAAAAKACchCRCQAAAgQFtAQCCAoBPR5zAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":645,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi1Q00\/Q8DrET9qAScSB1CgAAAgQFtAQCCAoD5u\/nAT0ecwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":645,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DYdAAD4GuFGsEAABwKgKMotUAFAOsRP2NNP0PYAQAOUUEgAAAQEICgE9HnMD5u\/n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":642,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0913{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":642,"flow_packet_id":4,"flow_first_seen":1499348068136,"flow_last_seen":1499348072090,"flow_tot_l4_data_len":729,"flow_min_l4_data_len":32,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35626,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"205.174.165.68","url":"205.174.165.68\/dv\/vulnerabilities\/xss_r\/?name=%3Cscript%3Econsole.log%28%27KGE8ES9SCQ7FORY5VSPTYY4R4UHJNRQTPTAY6L9JR1OU40RPDA%27%29%3Bconsole.log%28document.cookie%29%3B%3C%2Fscript%3E","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64; rv:45.0) Gecko\/20100101 Firefox\/45.0"}}
+0405{"flow_id":642,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0CEJAAEAGu5bAqAoyrBAAAQBQiyoM4+elGlRoRYAQAOzoyQAAAQEICgPm7+cBPR50","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2933{"flow_id":642,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":1934,"pkt":"AMGxFOsxABm5CmnxCABFAAeACENAAEAGtEnAqAoyrBAAAQBQiyoM4+elGlRoRYAYAOx+XgAAAQEICgPm7+gBPR50SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjM0OjMxIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNg0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDtjaGFyc2V0PXV0Zi04DQoNCh+LCAAAAAAAAAOtWP9P2zgU\/xmk\/Q8+n3TAJGJ6290N1mYqLQx2bHRNgSGdFLmJ2xqcOIudFv77e3aSNnwtWZFQcez35fP8np\/f85v15m\/d087gsneAJjoSqHe2f3LcQXibkIt3HUK6gy76cTT4eoIazg7ydMoDTcjBN4zwROtkj5DZbObM3jkyHZNBn9wYKQ3DVgy3leVxQh1i9836m\/Wm1XMTiVi1HpHR2N3dzVlz8rXmhNEQhmtrzYhpigzLNvuZ8WkLd2SsWay3B7cJwyjIv1pYsxtNjIiPKJjQVDHdOhscbn\/AiOQy15qaa8Hc80zELKVDLri+3UN9NhIs0CxEnVQqhTyuGfKClCeax2O0+cPzttDeHurSKEYlr2Dogg1RO0kED6jmMkab3fOL9haaNpzGDnrbZVMmZBIBtLdNkisuUAgeX6OUiRZW+lYwNWFMY6TBmsKIQCmMJikbtbDjEPgLpzNqZklEeezYZfJQGoetKOX8xyM6ZgSm7koa0akhc+zCXIay1lYhXNEpzWcxUmlwB8iVsv97oMC5Uthtkpyy8BwpXGfGQxneokBQZbwuI4Zzl4Z8injYwsZ3YBFLC69XloyQyvxak0fjB0iskYoIOZZOEo8xogICYYmjFnYDVlD3QLXZZB8cl1W0P1jzExqGLMwNAoJMlHaa1X0hg2uzNYIjGQeg+rqFZzwO5cyBJYujtZFb4mzgkhUY6B13Odg9gm1rEgq7LLi7\/hKBPIbTlwVmSjnJJHlG\/n1S7B5XZuqphQOXJUv0zWmw65khInD8YBJ19yvKSCbcFTZ0WjnfHMJjmGaakWdQPc6A3X3zHx3KNKjpgfsC2Q0L6gCw9NjtyCiicYiO4ytmPbIaikClozooLD2g8PqHqykeceJ8SuCotjhwZiFbEiUv4sfuIYfDfWxm1Mp7kyVC0rDO7hQcBYwz+7Wif2ii4eaq5aKCxZ5bFmQpQ512b9A5aq8GRf0UvA4OSw9n+vvJawWrkegP4XKr5ZQK1z00aHPfTG+thmrG6LXPa0EqWbB7ASPkMWWiFR13a6bX+3JvlPJrAckZsAv1DNQqp19X3AojLq3oVyyvol6EIy1xzIuvV0Cj6u6GKlF4WqZ3Iax4BdmzCNXl0utwQYZdUz9CfORT9bYD+Hk8kkvUVaiw2zvqwekYyXqK6FBmeomaOQ1222b4ettqCr2l6hdE2D2x43sAiortTu33dCFoSthFIQidjFktdJu1aiHYnDR+pbuAkrlRFMwV4dN5BesHMmQ+TRkt6ueRTCMU0wiqdeCHstemuBb+HSPoliYSsH8+GBS1aTMpLL6YUL2h0K3MUsv8qays4ySrFv+4EG1+5\/VtlUhlw4gD2ZSKDD69\/LPQRhI3byqIQZnjTVLmHjEhJCpaDRcqfyUFAw+PNzf+\/Xzw4cDb9Trf\/zk87V\/+de71BpeX7\/vvz46+fOt\/H\/QG7cu\/T3a\/9BunZ+93+r1ue2PrY1VCKIPMdFpOIOU1Z1sf5y0JwEmZdc3Cw83Jn+5XOPA2\/NOI5pcVTJq1Ij4gGhdxZZpPVTSsckZVYntWCFF2Y8KMWM9uK\/CsP\/esbz0L7RhNx9CJYriVaHyN3V+XNY\/i2viA24cqRbPUP4C2Dsz1O9Bfad8rWs+aGJ+Xtxwni50Zv+YJCzm1os1X1XJVWv40tpfLeB5PYWYw5vNkHMjIXA\/bI\/rTsU8Sj4J4AeOLNOc4qWCpblgJz6p7QF3VUWS3PNTLznWYQr+b\/5Yp7ImUV+SdQDCazk\/zY3lR3SrNIt\/cJY\/mh2Gmtemzi\/xwztkMwfFP5jk7kUmW+CWZjDt51l88OuwBxVmyiZ647acg0Z+ARBOOnwCSrSn+KB3REnK2gbawi5bC8iAZBux1gSkrcyk0s5tU8DHkbcFGkD+bLHLPFEtN3t1rEvhCNIx4XLgQvsviAJ2Y16WCBiQuKOBWP+56xUrIlbk+wtKLTzp0JKW+89iSuKu8diWPXavVBEzMxZm\/C9oXO\/d\/Z+qScZIUAAA=","pkt_caplen":1934,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":642,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348072,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f29AAD4GRmmsEAABwKgKMosqAFAaVGhFDOPu8YAQAQLhZQAAAQEICgE9HnUD5u\/o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":642,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":449,"pkt":"ABm5CmnxAMGxFOsxCABFAAGzf3BAAD4GROmsEAABwKgKMosqAFAaVGhFDOPu8YAYAQKPbgAAAQEICgE9H3QD5u\/oR0VUIC9kdi92dWxuZXJhYmlsaXRpZXMveHNzX3IvIEhUVFAvMS4xDQpIb3N0OiAyMDUuMTc0LjE2NS42OA0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo0NS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzQ1LjANCkFjY2VwdDogdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44DQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvb2tpZTogc2VjdXJpdHk9bG93OyBzZWN1cml0eT1sb3c7IFBIUFNFU1NJRD12Nm9va2Y2ZTI2bjFpZG81c2l2ZTZzYWk3MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2791{"flow_id":642,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":1836,"pkt":"AMGxFOsxABm5CmnxCABFAAceCEVAAEAGtKnAqAoyrBAAAQBQiyoM4+7xGlRpxIAYAPV9\/AAAAQEICgPm8OgBPR90SFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjM0OjMyIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTQxOQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTkNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmClxtvbL7dcmhW0cCCxt9y2LHvSSZGbuK3BiYPttPDvb+w4bXgt2SKh4pd5eTzjGc\/k3Xb4y+Brf\/Tv+RGamUyg84vDs9M+wh1CLj\/2CRmMBujHyejLGeoGH9DQKJ4YQo7+xgjPjCn2CVksFsHiYyDVlIy+kVsrpWvZ\/LCjHU+QmhRH77bfbYdOz20mct17Qkb306dPFWtFvhXOGE1huLUVZsxQZFk67Kbk8x7uy9yw3HRGdwXDKKlmPWzYrSFWxJ8omVGlmeldjI47f2BEKplboeFGsOh7KXKm6JgLbu720Tc2ESwxLEV9JbVGQ24YGiaKF4bnU7T7YzjcQ\/v7aECzHNW8gqFLNkYHRSF4Qg2XOdodfL882EPzbtD9gN4P2JwJWWQA7X1IKsUeheD5NVJM9LA2d4LpGWMGIwOn8YdItMZoptikh4OAwF86X1C7SjLK88Btk8fSOJiilvMfz+iUEVi6L2lC55YscBtLGdqdtgnhis5ptYqRVsk9IFfa\/T8HBcGVxlFIKkrvOeJdZ8djmd6hRFBtvS4zhiuXpnyOeNrD1ndwIqa81xtbVkhjfSvk2fQREndITYScyqDIpxhRARdhjaNW5wasoO6RamvkGBxXNrQ\/2osLmqYsrQ4EBKWoz2l3D4VMrq1pBEcyT0D1dQ8veJ7KRQBbDkdvpzpJsINrVmCg99wV4OgEzBYSClYWPNp+jUCeQ\/SViV3SQTErXpD\/kBRHp42Vdmoh4Mpijb4lDY6GdogIhB8sosFhQxkpRbSBQeeN+OZwPcaqNIy8gOppBhwd2v\/oWKqkpQceCmS3LGkDwNHjqC+zjOYpOs2vmPPIZigSrSZtUDh6QDH8dryZ4gknwecCQrXHgbNM2Zpb8ip+HB1zCO5Tu6I3tk1ZCEnTNtbxHB7GhZtt6B9aGHi5WrnIs7i4ZUmpGOofnI\/6JwebQdE3grfB4eghpv85e6vLaiXGY3jcWjmlwfUADdo9tMt7m6FaMHod81aQahYcXcIIDZm2txWdDlqm14dyb7WOWwGpGHAE9QzUKl+\/bGgKK0419GtWVVGvwqFqHMvi6w3Q6LbW0DWKoZHqPoQNnyAXi1Bdrn0OV2Q4svUj3I9qqZ05gJ\/nE7lGXYMKR+cn5xAdE9lOER3L0qxRs6TB0YEdvp1ZbaG3Vv2KCEdnbvwAgK\/Y7tV+zxeCtoRdFYLQydhdr9vuNQvBcNb9me4CSuauL5gbwufLCjZOZMpiqhj19fNEqgzlNINqHfih7HUprod\/xQi6pZkE7H8djXxtGhb+xJczanY0upOlcsyf68o6L8pm8Y+9aPu7rG+bRLocZxzI5lSUMB1WU6+NFFHVVBCL0i26rmBp4HD2e\/QF4s3dPpXR6q2ARbvn3QOXYeVW2\/tp3y\/KBdWFaxnhhrBb62XiDNvRYNh4adjYGRa6Iaqm0AhieBRofo2jn5e1vESt8QF3DEWCYSo+gq4Kjhv3ob0x8dB3fi0xvixvPU6WBwt+zQuWcupE21nz5Lo++fPYXi\/jZTz+mMmUL3NhIjObnTsTehO4LwJPgngF46s0VzipYMp0nYQX1T2iburwyaW66nXjOFbQbla\/dQZ5JuP4sE8Eo2oZTE+lJX2nDctim8qfDM9xaYxtc314fudsgU6YKJYps5BFWcQ1mcz7VdJd9fz7QHFR7KJnHts5SIxnINFex88AyT3pv9WO6Am52EF7OEJrYQ0hFyXsbYFpJ3MtNGtNKvgU0qZgE0hfIcuiC82UTXv7IYEZomnGc+9CmNdvMzqzH3c8DUhcUcCjejoY+p2Ua5u909qLzzp0IqW5962jiDb52FQ89ao1EzCx71b1Wc59MIv+B6iyF7ARFAAA","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":642,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f3FAAD4GRmesEAABwKgKMosqAFAaVGnEDOP124AQAR3W4QAAAQEICgE9H3UD5vDo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":646,"flow_packet_id":1,"flow_first_seen":1499348073365,"flow_last_seen":1499348073365,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35682,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":646,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8Pg1AAD4Gh8OsEAABwKgKMotiAFCjeCG\/AAAAAKACchDtKgAAAgQFtAQCCAoBPR+yAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":646,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi2IT1M33o3ghwKAScSAXMQAAAgQFtAQCCAoD5vEmAT0fsgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":646,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Pg5AAD4Gh8qsEAABwKgKMotiAFCjeCHAE9TN+IAQAOW2NwAAAQEICgE9H7MD5vEm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":642,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+2918{"flow_id":642,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":1932,"pkt":"AMGxFOsxABm5CmnxCABFAAd+CEdAAEAGtEfAqAoyrBAAAQBQiyoM4\/XbGlRsDYAYAP5+XAAAAQEICgPm8ScBPR+zSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDA2IEp1bCAyMDE3IDEzOjM0OjMzIEdNVA0KU2VydmVyOiBBcGFjaGUvMi40LjE4IChVYnVudHUpDQpFeHBpcmVzOiBUdWUsIDIzIEp1biAyMDA5IDEyOjAwOjAwIEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBuby1jYWNoZQ0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMTUxNQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9OTgNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNCg0KH4sIAAAAAAAAA61YbU\/jOBD+DNL+B59POmAl4u3u6m7LtlmVlh6syi5HW8pJJ0Vu4rYGJw6x08K\/v7GTtOG1ZIuEimPPyzOe8XjG77Ybv3V+tgf\/nh2hmQ4FOhse9k7aCO8TMvrUJqQz6KDL48FpD9WcD6ivE+5rQo5+YIRnWscHhCwWC2fxyZHJlAzOya2RUjNs+XBfWR4n0AF2322\/225YPbehiFTzCRm1er2esWbkW40ZowEMt7YaIdMUGZZ9dpPyeRO3ZaRZpPcHdzHDyM++mlizW02MiK\/In9FEMd0cDrr7XzAimcythuZaMPciFRFL6JgLru8O0DmbCOZrFqB2IpVCfa4Z6vsJjzWPpmj3st\/fQwcHqEPDCBW8gqERG6NWHAvuU81lhHY7F6PWHprXnNoH9L7D5kzIOARo7xskU5yjEDy6RgkTTaz0nWBqxpjGSIM1uRG+UhjNEjZpYsch8BfMF9TMkpDyyLHL5LE0DltRyPmPh3TKCEzdlzShc0Pm2IWlDGWtLUO4onOazWKkEv8ekCtl\/5+BAudKYbdBMsrccyR3nRmPZXCHfEGV8boMGc5cGvA54kETG9+BRSzJvV5aMkJK81sNHk4fIbFGKiLkVDpxNMWICgiENY5a2Q1YQd0j1WaTPXBcWtL+aM2LaRCwIDMICFJR2GlWD4X0r83WCI5k5IPq6yZe8CiQCweWLI7mTmaJs4MLVmCg99zlYPcYtq1BKOyy4O72awTyCE5f6psp5cSz+AX5D0mxe1KaqaYWDlwar9G3pMFu3wwRgeMHk6hzWFJGUuFusKHz0vnmEB7jJNWMvIDqaQbsHpr\/qCsTv6IHHgpkt8yvAsDSY7ctw5BGATqJrpj1yGYofJVMqqCw9ICif97dTPGEE+dbDEe1yYEzDdiaKHkVP3a7HA73iZlRG+9NGgtJgyq7k3PkMIb2a0P\/0FjDzVXJRTmLPbfMTxOG2q2zQfu4tRkUdSN4FRyWHs70P723ClYj0RvD5VbJKSWuB2jQ7qGZ3tsM1YLRa49XglSwYHcEI9RnykQrOulUTK8P5d4q5VUCkjFgF+oZqFV+nm64FUZcUtKvWFZFvQpHUuBYFl9vgEZV3Q1VoOhrmdyHsOEVZM8iVJdrr8MVGXZN\/QjxkU1V2w7g59FErlFXosLu2fEZnI6JrKaIjmWq16hZ0mC3ZYZvt62m0FurfkWE3Z4dPwCQV2z3ar\/nC0FTwq4KQehkzGqu26yVC8HGrPYr3QWUzLW8YC4Jny8rWM+XAfNowmheP09kEqKIhlCtAz+UvTbFNfHvGEG3NJOA\/e+jQV6bNuLc4tGM6h2F7mSaWOZvRWUdxWm5+Me5aPO7rG\/LRCodhxzI5lSk8NnPPnNtJHazpoIYlBneOGHuMRNCorzVcKHyV1Iw8PB0d+e81aufH7d7349a7WHv82m3Vf90Pvx++aXbHh1dtOuDj0fd4Z\/nnzuHgx\/1Uf+v7uXO3teyhED6qem0HF\/Ka872vi5bEoCTMOualYcbs4\/uKRx4G\/5JSLPLCibNWh4fEI2ruDLNp8obVrmgKrY9K4QouzVhRqxn9xV41lt61rOehXaMJlPoRDHcSjS6xu6vy1pGcWV8wO1BlaJZ4h1BWwfmem3or7TXz1vPihhflrceJ4ucBb\/mMQs4taLNV9lyVVj+PLbXy3gZT26mP+XLZOzL0FwP+xN649gniSdBvILxVZoznFSwRNeshBfVPaIu68izWxbqRec6TqDfzX6LFPZMysvzji8YTZan+am8qO6UZqFn7pIn88M41dr02Xl+uOBsgeD4x8ucHcs4jb2CTEbtLOuvHh0OgGIY76Jnbvs5SPRmINGE4zeAZGuKPwpHNIVc7KA97KK1sPqQDH32tsCUlbkWmtlNKvgU8rZgE8ifDRa6Q8USk3cPGgS+EA1CHuUuhO+iOEA987qU04DEFQXc6iedfr4ScGWuj6Dw4rMOnUip7z22xO4mr13xU9dqOQETc3Fm74L2xc79H6s80P2SFAAA","pkt_caplen":1932,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":642,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348073,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0f3NAAD4GRmWsEAABwKgKMosqAFAaVGwNDOP9JYAQATvMsgAAAQEICgE9H7QD5vEn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":642,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+2793{"flow_id":642,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":1836,"pkt":"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","pkt_caplen":1836,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":647,"flow_packet_id":1,"flow_first_seen":1499348074670,"flow_last_seen":1499348074670,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35696,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":647,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8OC5AAD4GjaKsEAABwKgKMotwAFDSMxjXAAAAAKACchDGAgAAAgQFtAQCCAoBPSD5AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":647,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi3D0f4w30jMY2KAScSBP1gAAAgQFtAQCCAoD5vJtAT0g+QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":647,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0OC9AAD4GjamsEAABwKgKMotwAFDSMxjY9H+MOIAQAOXu3QAAAQEICgE9IPkD5vJt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":643,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06kdAAD4G25CsEAABwKgKMos4AFDyvfGglr67X4ARAOUpPgAAAQEICgE9ITYD5u1O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":643,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0SfVAAEAGeePAqAoyrBAAAQBQiziWvrtf8r3xoYARAOMj4wAAAQEICgPm8qoBPSE2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":643,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348074,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06khAAD4G24+sEAABwKgKMos4AFDyvfGhlr67YIAQAOUj4AAAAQEICgE9ITcD5vKq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":644,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348075,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jQ1AAD4GOMusEAABwKgKMotGAFAklpAljh+3IIARAOVjYgAAAQEICgE9IjAD5u6j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":644,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348075,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0RIRAAEAGf1TAqAoyrBAAAQBQi0aOH7cgJJaQJoARAONeYgAAAQEICgPm86QBPSIw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":644,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348075,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0jQ5AAD4GOMqsEAABwKgKMotGAFAklpAmjh+3IYAQAOVeXwAAAQEICgE9IjED5vOk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":648,"flow_packet_id":1,"flow_first_seen":1499348077218,"flow_last_seen":1499348077218,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35722,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":648,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348077,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA80HtAAD4G9VSsEAABwKgKMouKAFBc0\/MNAAAAAKACchBelQAAAgQFtAQCCAoBPSN2AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":648,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348077,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi4oOSV5eXNPzDqAScSD5+wAAAgQFtAQCCAoD5vTqAT0jdgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":648,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348077,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00HxAAD4G9VusEAABwKgKMouKAFBc0\/MODkleX4AQAOWZAwAAAQEICgE9I3YD5vTq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":645,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348077,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DYhAAD4GuFCsEAABwKgKMotUAFAOsRP2NNP0PYARAOUOXwAAAQEICgE9JCUD5u\/n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":645,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348077,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0AaRAAEAGwjTAqAoyrBAAAQBQi1Q00\/Q9DrET94ARAOMIrgAAAQEICgPm9ZkBPSQl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":645,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348077,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0DYlAAD4GuE+sEAABwKgKMotUAFAOsRP3NNP0PoAQAOUIrAAAAQEICgE9JCUD5vWZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":649,"flow_packet_id":1,"flow_first_seen":1499348078531,"flow_last_seen":1499348078531,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35736,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":649,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348078,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA86yNAAD4G2qysEAABwKgKMouYAFAizM+dAAAAAKACchC6tgAAAgQFtAQCCAoBPSS+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":649,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348078,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi5glYndPIszPnqAScSAkywAAAgQFtAQCCAoD5vYyAT0kvgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":649,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348078,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yRAAD4G2rOsEAABwKgKMouYAFAizM+eJWJ3UIAQAOXD0gAAAQEICgE9JL4D5vYy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":646,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348078,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Pg9AAD4Gh8msEAABwKgKMotiAFCjeCHAE9TN+IARAOWwygAAAQEICgE9JR8D5vEm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":646,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348078,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0O2tAAEAGiG3AqAoyrBAAAQBQi2IT1M34o3ghwYARAOOrXgAAAQEICgPm9pMBPSUf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":646,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348078,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0PhBAAD4Gh8isEAABwKgKMotiAFCjeCHBE9TN+YAQAOWrXAAAAQEICgE9JR8D5vaT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":647,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348079,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ODBAAD4GjaisEAABwKgKMotwAFDSMxjY9H+MOIARAOXpvAAAAQEICgE9JhkD5vJt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":647,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348079,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0e7VAAEAGSCPAqAoyrBAAAQBQi3D0f4w40jMY2YARAOPknQAAAQEICgPm940BPSYZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":647,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348079,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0ODFAAD4GjaesEAABwKgKMotwAFDSMxjZ9H+MOYAQAOXkmwAAAQEICgE9JhkD5veN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":650,"flow_packet_id":1,"flow_first_seen":1499348081113,"flow_last_seen":1499348081113,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35762,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":650,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348081,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8P1ZAAD4GhnqsEAABwKgKMouyAFAGWhgVAAAAAKACchCMEgAAAgQFtAQCCAoBPSdDAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":650,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348081,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi7IGSc2TBloYFqAScSC8dgAAAgQFtAQCCAoD5vi3AT0nQwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":650,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348081,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P1dAAD4GhoGsEAABwKgKMouyAFAGWhgWBknNlIAQAOVbfQAAAQEICgE9J0QD5vi3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":607,"flow_packet_id":6,"flow_first_seen":1499348006334,"flow_last_seen":1499348011904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34980,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":607,"flow_packet_id":6,"flow_first_seen":1499348006334,"flow_last_seen":1499348011904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34980,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":608,"flow_packet_id":6,"flow_first_seen":1499348007599,"flow_last_seen":1499348012904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34994,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":608,"flow_packet_id":6,"flow_first_seen":1499348007599,"flow_last_seen":1499348012904,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34994,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":609,"flow_packet_id":6,"flow_first_seen":1499348010145,"flow_last_seen":1499348015905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35020,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":609,"flow_packet_id":6,"flow_first_seen":1499348010145,"flow_last_seen":1499348015905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35020,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":610,"flow_packet_id":6,"flow_first_seen":1499348011433,"flow_last_seen":1499348016905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35034,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":610,"flow_packet_id":6,"flow_first_seen":1499348011433,"flow_last_seen":1499348016905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35034,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":611,"flow_packet_id":6,"flow_first_seen":1499348012728,"flow_last_seen":1499348017905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35048,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":611,"flow_packet_id":6,"flow_first_seen":1499348012728,"flow_last_seen":1499348017905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35048,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":612,"flow_packet_id":6,"flow_first_seen":1499348015250,"flow_last_seen":1499348020905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35074,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":612,"flow_packet_id":6,"flow_first_seen":1499348015250,"flow_last_seen":1499348020905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35074,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":613,"flow_packet_id":6,"flow_first_seen":1499348016526,"flow_last_seen":1499348021905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35088,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":613,"flow_packet_id":6,"flow_first_seen":1499348016526,"flow_last_seen":1499348021905,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35088,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":651,"flow_packet_id":1,"flow_first_seen":1499348082422,"flow_last_seen":1499348082422,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35776,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":651,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348082,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8EzVAAD4GspusEAABwKgKMovAAFDEhDu+AAAAAKACchCo6AAAAgQFtAQCCAoBPSiLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":651,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348082,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi8Dw+8kBxIQ7v6AScSDx4wAAAgQFtAQCCAoD5vn\/AT0oiwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":651,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348082,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EzZAAD4GsqKsEAABwKgKMovAAFDEhDu\/8PvJAoAQAOWQ6wAAAQEICgE9KIsD5vn\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":648,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348082,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00H1AAD4G9VqsEAABwKgKMouKAFBc0\/MODkleX4ARAOWTcQAAAQEICgE9KQcD5vTq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":648,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348082,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0pCRAAEAGH7TAqAoyrBAAAQBQi4oOSV5fXNPzD4ARAOON4QAAAQEICgPm+nsBPSkH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":648,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348082,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA00H5AAD4G9VmsEAABwKgKMouKAFBc0\/MPDkleYIAQAOWN3wAAAQEICgE9KQcD5vp7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":652,"flow_packet_id":1,"flow_first_seen":1499348083715,"flow_last_seen":1499348083715,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35790,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":652,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348083,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8aIdAAD4GXUmsEAABwKgKMovOAFCsxEFJAAAAAKACchC5zAAAAgQFtAQCCAoBPSnOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":652,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348083,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi847RWyhrMRBSqAScSATnAAAAgQFtAQCCAoD5vtCAT0pzgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":652,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348083,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aIhAAD4GXVCsEAABwKgKMovOAFCsxEFKO0VsooAQAOWyowAAAQEICgE9Kc4D5vtC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":649,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348083,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yVAAD4G2rKsEAABwKgKMouYAFAizM+eJWJ3UIARAOW+jgAAAQEICgE9KgED5vYy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":649,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348083,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0jCVAAEAGN7PAqAoyrBAAAQBQi5glYndQIszPn4ARAOO5TAAAAQEICgPm+3UBPSoB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":649,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348083,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA06yZAAD4G2rGsEAABwKgKMouYAFAizM+fJWJ3UYAQAOW5SgAAAQEICgE9KgED5vt1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":653,"flow_packet_id":1,"flow_first_seen":1499348086300,"flow_last_seen":1499348086300,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35816,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":653,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348086,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8GytAAD4GqqWsEAABwKgKMovoAFCxvjd\/AAAAAKACchC7\/AAAAgQFtAQCCAoBPSxUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":653,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348086,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi+jtWBzhsb43gKAScSCw8gAAAgQFtAQCCAoD5v3IAT0sVAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":653,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348086,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0GyxAAD4GqqysEAABwKgKMovoAFCxvjeA7Vgc4oAQAOVP+gAAAQEICgE9LFQD5v3I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":650,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348086,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P1hAAD4GhoCsEAABwKgKMouyAFAGWhgWBknNlIARAOVV0QAAAQEICgE9LO8D5vi3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":650,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348086,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0M\/dAAEAGj+HAqAoyrBAAAQBQi7IGSc2UBloYF4ARAONQJgAAAQEICgPm\/mMBPSzv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":650,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348086,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0P1lAAD4Ghn+sEAABwKgKMouyAFAGWhgXBknNlYAQAOVQIwAAAQEICgE9LPAD5v5j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":654,"flow_packet_id":1,"flow_first_seen":1499348087568,"flow_last_seen":1499348087568,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35830,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":654,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348087,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WltAAD4Ga3WsEAABwKgKMov2AFAj3nfKAAAAAKACchAIRwAAAgQFtAQCCAoBPS2RAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":654,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348087,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQi\/boFFliI953y6AScSDEwgAAAgQFtAQCCAoD5v8FAT0tkQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":654,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348087,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WlxAAD4Ga3ysEAABwKgKMov2AFAj3nfL6BRZY4AQAOVjygAAAQEICgE9LZED5v8F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":651,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348087,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EzdAAD4GsqGsEAABwKgKMovAAFDEhDu\/8PvJAoARAOWLjAAAAQEICgE9LekD5vn\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":651,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348087,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0Nl9AAEAGjXnAqAoyrBAAAQBQi8Dw+8kCxIQ7wIARAOOGLwAAAQEICgPm\/10BPS3p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":651,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348087,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0EzhAAD4GsqCsEAABwKgKMovAAFDEhDvA8PvJA4AQAOWGLAAAAQEICgE9LeoD5v9d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":652,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348088,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aIlAAD4GXU+sEAABwKgKMovOAFCsxEFKO0VsooARAOWtjAAAAQEICgE9LuQD5vtC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":652,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348088,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0bPVAAEAGVuPAqAoyrBAAAQBQi847RWyirMRBS4ARAOOoeAAAAQEICgPnAFcBPS7k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":652,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348088,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0aIpAAD4GXU6sEAABwKgKMovOAFCsxEFLO0Vso4AQAOWodgAAAQEICgE9LuQD5wBX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":655,"flow_packet_id":1,"flow_first_seen":1499348090129,"flow_last_seen":1499348090129,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35856,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":655,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348090,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nGpAAD4GKWasEAABwKgKMowQAFDWkax4AAAAAKACchAeSgAAAgQFtAQCCAoBPTASAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":655,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348090,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjBAuWbjG1pGseaAScSAynQAAAgQFtAQCCAoD5wGFAT0wEgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":655,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348090,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nGtAAD4GKW2sEAABwKgKMowQAFDWkax5Llm4x4AQAOXRpAAAAQEICgE9MBID5wGF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":656,"flow_packet_id":1,"flow_first_seen":1499348091413,"flow_last_seen":1499348091413,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35870,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":656,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348091,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8nrdAAD4GJxmsEAABwKgKMoweAFAj3q\/lAAAAAKACchDMQQAAAgQFtAQCCAoBPTFTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":656,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348091,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjB4dm6koI96v5qAScSD\/rwAAAgQFtAQCCAoD5wLGAT0xUwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":656,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348091,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nrhAAD4GJyCsEAABwKgKMoweAFAj3q\/mHZupKYAQAOWetwAAAQEICgE9MVMD5wLG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":653,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348091,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gy1AAD4GqqusEAABwKgKMovoAFCxvjeA7Vgc4oARAOVKewAAAQEICgE9MdID5v3I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":653,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348091,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0H6RAAEAGpDTAqAoyrBAAAQBQi+jtWBzisb43gYARAONE\/gAAAQEICgPnA0YBPTHS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":653,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348091,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Gy5AAD4GqqqsEAABwKgKMovoAFCxvjeB7Vgc44AQAOVE\/AAAAQEICgE9MdID5wNG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":614,"flow_packet_id":6,"flow_first_seen":1499348019059,"flow_last_seen":1499348024906,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35114,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":614,"flow_packet_id":6,"flow_first_seen":1499348019059,"flow_last_seen":1499348024906,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35114,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":615,"flow_packet_id":6,"flow_first_seen":1499348020357,"flow_last_seen":1499348025907,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35128,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":615,"flow_packet_id":6,"flow_first_seen":1499348020357,"flow_last_seen":1499348025907,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35128,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":616,"flow_packet_id":6,"flow_first_seen":1499348021660,"flow_last_seen":1499348026908,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35142,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":616,"flow_packet_id":6,"flow_first_seen":1499348021660,"flow_last_seen":1499348026908,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35142,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":617,"flow_packet_id":6,"flow_first_seen":1499348024206,"flow_last_seen":1499348029909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35168,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":617,"flow_packet_id":6,"flow_first_seen":1499348024206,"flow_last_seen":1499348029909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35168,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":618,"flow_packet_id":6,"flow_first_seen":1499348025497,"flow_last_seen":1499348030909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35182,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":618,"flow_packet_id":6,"flow_first_seen":1499348025497,"flow_last_seen":1499348030909,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35182,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":657,"flow_packet_id":1,"flow_first_seen":1499348092675,"flow_last_seen":1499348092675,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35884,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":657,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348092,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8WzpAAD4GapasEAABwKgKMowsAFACaGm0AAAAAKACchAyoAAAAgQFtAQCCAoBPTKOAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":657,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348092,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjCznHw5PAmhptaAScSA2JwAAAgQFtAQCCAoD5wQCAT0yjgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":657,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348092,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WztAAD4Gap2sEAABwKgKMowsAFACaGm15x8OUIAQAOXVLgAAAQEICgE9Mo4D5wQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":654,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348092,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Wl1AAD4Ga3usEAABwKgKMov2AFAj3nfL6BRZY4ARAOVejgAAAQEICgE9MswD5v8F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":654,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348092,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0XSNAAEAGZrXAqAoyrBAAAQBQi\/boFFljI953zIARAONZVAAAAQEICgPnBEABPTLM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":654,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348092,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Wl5AAD4Ga3qsEAABwKgKMov2AFAj3nfM6BRZZIAQAOVZUgAAAQEICgE9MswD5wRA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":658,"flow_packet_id":1,"flow_first_seen":1499348095258,"flow_last_seen":1499348095258,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35910,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":658,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348095,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8kglAAD4GM8esEAABwKgKMoxGAFCLy6cdAAAAAKACchBpMwAAAgQFtAQCCAoBPTUUAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":658,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348095,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjEYHlr2li8unHqAScSCaZwAAAgQFtAQCCAoD5waIAT01FAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":658,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348095,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0kgpAAD4GM86sEAABwKgKMoxGAFCLy6ceB5a9poAQAOU5bwAAAQEICgE9NRQD5waI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":655,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348095,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nGxAAD4GKWysEAABwKgKMowQAFDWkax5Llm4x4ARAOXL+wAAAQEICgE9NboD5wGF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":655,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348095,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0v+lAAEAGA+\/AqAoyrBAAAQBQjBAuWbjH1pGseoARAOPGUwAAAQEICgPnBy4BPTW6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":655,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348095,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nG1AAD4GKWusEAABwKgKMowQAFDWkax6Llm4yIAQAOXGUQAAAQEICgE9NboD5wcu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":659,"flow_packet_id":1,"flow_first_seen":1499348096595,"flow_last_seen":1499348096595,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35924,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":659,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348096,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8gtxAAD4GQvSsEAABwKgKMoxUAFDl8LS+AAAAAKACchAAEQAAAgQFtAQCCAoBPTZiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":659,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348096,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjFQs5xqq5fC0v6AScSCtoQAAAgQFtAQCCAoD5wfWAT02YgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":659,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348096,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0gt1AAD4GQvusEAABwKgKMoxUAFDl8LS\/LOcaq4AQAOVMqQAAAQEICgE9NmID5wfW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":656,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348096,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nrlAAD4GJx+sEAABwKgKMoweAFAj3q\/mHZupKYARAOWZVQAAAQEICgE9NrQD5wLG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":656,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348096,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0oQFAAEAGItfAqAoyrBAAAQBQjB4dm6kpI96v54ARAOOT9AAAAQEICgPnCCgBPTa0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":656,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348096,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0nrpAAD4GJx6sEAABwKgKMoweAFAj3q\/nHZupKoAQAOWT8gAAAQEICgE9NrQD5wgo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":657,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348097,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0WzxAAD4GapysEAABwKgKMowsAFACaGm15x8OUIARAOXQDQAAAQEICgE9N64D5wQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":657,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348097,"pkt_len":66,"pkt":"AMGxFOsxABm5CmnxCABFAAA0B3JAAEAGvGbAqAoyrBAAAQBQjCznHw5QAmhptoARAOPK7gAAAQEICgPnCSIBPTeu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":657,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348097,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0Wz1AAD4GapusEAABwKgKMowsAFACaGm25x8OUYAQAOXK6wAAAQEICgE9N68D5wki","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":660,"flow_packet_id":1,"flow_first_seen":1499348099359,"flow_last_seen":1499348099359,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35950,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":660,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348099,"pkt_len":74,"pkt":"ABm5CmnxAMGxFOsxCABFAAA8tSBAAD4GELCsEAABwKgKMoxuAFCNr4w1AAAAAKACchB+DgAAAgQFtAQCCAoBPTkVAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":660,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348099,"pkt_len":74,"pkt":"AMGxFOsxABm5CmnxCABFAAA8AABAAEAGw9DAqAoyrBAAAQBQjG7WE+F5ja+MNqAScSC47wAAAgQFtAQCCAoD5wqJAT05FQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":660,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","pkt_oversize":false,"pkt_ts":1499348099,"pkt_len":66,"pkt":"ABm5CmnxAMGxFOsxCABFAAA0tSFAAD4GELesEAABwKgKMoxuAFCNr4w21hPheoAQAOVX9wAAAQEICgE9ORUD5wqJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":605,"flow_packet_id":311,"flow_first_seen":1499348002450,"flow_last_seen":1499348071824,"flow_tot_l4_data_len":242323,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":779,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":34940,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":619,"flow_packet_id":7,"flow_first_seen":1499348028117,"flow_last_seen":1499348033910,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35208,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":619,"flow_packet_id":7,"flow_first_seen":1499348028117,"flow_last_seen":1499348033910,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35208,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":620,"flow_packet_id":6,"flow_first_seen":1499348029395,"flow_last_seen":1499348034910,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35222,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":620,"flow_packet_id":6,"flow_first_seen":1499348029395,"flow_last_seen":1499348034910,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35222,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":621,"flow_packet_id":6,"flow_first_seen":1499348030687,"flow_last_seen":1499348035910,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35236,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":621,"flow_packet_id":6,"flow_first_seen":1499348030687,"flow_last_seen":1499348035910,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35236,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":622,"flow_packet_id":7,"flow_first_seen":1499348033296,"flow_last_seen":1499348038910,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35262,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":622,"flow_packet_id":7,"flow_first_seen":1499348033296,"flow_last_seen":1499348038910,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35262,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":623,"flow_packet_id":6,"flow_first_seen":1499348034569,"flow_last_seen":1499348039911,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35276,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":623,"flow_packet_id":6,"flow_first_seen":1499348034569,"flow_last_seen":1499348039911,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35276,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":624,"flow_packet_id":6,"flow_first_seen":1499348037175,"flow_last_seen":1499348042911,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35302,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":624,"flow_packet_id":6,"flow_first_seen":1499348037175,"flow_last_seen":1499348042911,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35302,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":625,"flow_packet_id":6,"flow_first_seen":1499348038438,"flow_last_seen":1499348043911,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35316,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":625,"flow_packet_id":6,"flow_first_seen":1499348038438,"flow_last_seen":1499348043911,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35316,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":626,"flow_packet_id":6,"flow_first_seen":1499348041088,"flow_last_seen":1499348046912,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35342,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":626,"flow_packet_id":6,"flow_first_seen":1499348041088,"flow_last_seen":1499348046912,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35342,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":627,"flow_packet_id":6,"flow_first_seen":1499348042384,"flow_last_seen":1499348047912,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35356,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":627,"flow_packet_id":6,"flow_first_seen":1499348042384,"flow_last_seen":1499348047912,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35356,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":628,"flow_packet_id":6,"flow_first_seen":1499348043670,"flow_last_seen":1499348048912,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35370,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":628,"flow_packet_id":6,"flow_first_seen":1499348043670,"flow_last_seen":1499348048912,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35370,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":629,"flow_packet_id":6,"flow_first_seen":1499348046262,"flow_last_seen":1499348051913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35396,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":629,"flow_packet_id":6,"flow_first_seen":1499348046262,"flow_last_seen":1499348051913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35396,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":630,"flow_packet_id":6,"flow_first_seen":1499348047547,"flow_last_seen":1499348052913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35410,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":630,"flow_packet_id":6,"flow_first_seen":1499348047547,"flow_last_seen":1499348052913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35410,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":631,"flow_packet_id":6,"flow_first_seen":1499348050079,"flow_last_seen":1499348055913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35436,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":631,"flow_packet_id":6,"flow_first_seen":1499348050079,"flow_last_seen":1499348055913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35436,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":632,"flow_packet_id":6,"flow_first_seen":1499348051362,"flow_last_seen":1499348056913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35450,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":632,"flow_packet_id":6,"flow_first_seen":1499348051362,"flow_last_seen":1499348056913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35450,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":633,"flow_packet_id":6,"flow_first_seen":1499348052641,"flow_last_seen":1499348057914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35464,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":633,"flow_packet_id":6,"flow_first_seen":1499348052641,"flow_last_seen":1499348057914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35464,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":634,"flow_packet_id":6,"flow_first_seen":1499348055228,"flow_last_seen":1499348060913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35490,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":634,"flow_packet_id":6,"flow_first_seen":1499348055228,"flow_last_seen":1499348060913,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35490,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":635,"flow_packet_id":6,"flow_first_seen":1499348056534,"flow_last_seen":1499348061914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35504,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":635,"flow_packet_id":6,"flow_first_seen":1499348056534,"flow_last_seen":1499348061914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35504,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":636,"flow_packet_id":6,"flow_first_seen":1499348057789,"flow_last_seen":1499348062914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35518,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":636,"flow_packet_id":6,"flow_first_seen":1499348057789,"flow_last_seen":1499348062914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35518,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":637,"flow_packet_id":6,"flow_first_seen":1499348059068,"flow_last_seen":1499348064914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35532,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":637,"flow_packet_id":6,"flow_first_seen":1499348059068,"flow_last_seen":1499348064914,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35532,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":638,"flow_packet_id":6,"flow_first_seen":1499348060393,"flow_last_seen":1499348065915,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35546,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":638,"flow_packet_id":6,"flow_first_seen":1499348060393,"flow_last_seen":1499348065915,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35546,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":639,"flow_packet_id":6,"flow_first_seen":1499348061684,"flow_last_seen":1499348066915,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35560,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":639,"flow_packet_id":6,"flow_first_seen":1499348061684,"flow_last_seen":1499348066915,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35560,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":640,"flow_packet_id":6,"flow_first_seen":1499348064243,"flow_last_seen":1499348069916,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35586,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":640,"flow_packet_id":6,"flow_first_seen":1499348064243,"flow_last_seen":1499348069916,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35586,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":641,"flow_packet_id":6,"flow_first_seen":1499348065546,"flow_last_seen":1499348070917,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35600,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":641,"flow_packet_id":6,"flow_first_seen":1499348065546,"flow_last_seen":1499348070917,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35600,"dst_port":80,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":642,"flow_packet_id":133,"flow_first_seen":1499348068136,"flow_last_seen":1499348099366,"flow_tot_l4_data_len":103426,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1901,"flow_avg_l4_data_len":777,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35626,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":643,"flow_packet_id":6,"flow_first_seen":1499348069426,"flow_last_seen":1499348074917,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35640,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":643,"flow_packet_id":6,"flow_first_seen":1499348069426,"flow_last_seen":1499348074917,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35640,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":644,"flow_packet_id":6,"flow_first_seen":1499348070791,"flow_last_seen":1499348075918,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35654,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":644,"flow_packet_id":6,"flow_first_seen":1499348070791,"flow_last_seen":1499348075918,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35654,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":645,"flow_packet_id":6,"flow_first_seen":1499348072088,"flow_last_seen":1499348077919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35668,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":645,"flow_packet_id":6,"flow_first_seen":1499348072088,"flow_last_seen":1499348077919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35668,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":646,"flow_packet_id":6,"flow_first_seen":1499348073365,"flow_last_seen":1499348078919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35682,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":646,"flow_packet_id":6,"flow_first_seen":1499348073365,"flow_last_seen":1499348078919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35682,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":647,"flow_packet_id":6,"flow_first_seen":1499348074670,"flow_last_seen":1499348079919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35696,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":647,"flow_packet_id":6,"flow_first_seen":1499348074670,"flow_last_seen":1499348079919,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35696,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":648,"flow_packet_id":6,"flow_first_seen":1499348077218,"flow_last_seen":1499348082920,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35722,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":648,"flow_packet_id":6,"flow_first_seen":1499348077218,"flow_last_seen":1499348082920,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35722,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":649,"flow_packet_id":6,"flow_first_seen":1499348078531,"flow_last_seen":1499348083921,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35736,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":649,"flow_packet_id":6,"flow_first_seen":1499348078531,"flow_last_seen":1499348083921,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35736,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":650,"flow_packet_id":6,"flow_first_seen":1499348081113,"flow_last_seen":1499348086921,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35762,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":650,"flow_packet_id":6,"flow_first_seen":1499348081113,"flow_last_seen":1499348086921,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35762,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":651,"flow_packet_id":6,"flow_first_seen":1499348082422,"flow_last_seen":1499348087922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35776,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":651,"flow_packet_id":6,"flow_first_seen":1499348082422,"flow_last_seen":1499348087922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35776,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":652,"flow_packet_id":6,"flow_first_seen":1499348083715,"flow_last_seen":1499348088922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35790,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":652,"flow_packet_id":6,"flow_first_seen":1499348083715,"flow_last_seen":1499348088922,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35790,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":653,"flow_packet_id":6,"flow_first_seen":1499348086300,"flow_last_seen":1499348091923,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":653,"flow_packet_id":6,"flow_first_seen":1499348086300,"flow_last_seen":1499348091923,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35816,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":654,"flow_packet_id":6,"flow_first_seen":1499348087568,"flow_last_seen":1499348092924,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35830,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":654,"flow_packet_id":6,"flow_first_seen":1499348087568,"flow_last_seen":1499348092924,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35830,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":655,"flow_packet_id":6,"flow_first_seen":1499348090129,"flow_last_seen":1499348095924,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35856,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":655,"flow_packet_id":6,"flow_first_seen":1499348090129,"flow_last_seen":1499348095924,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35856,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":656,"flow_packet_id":6,"flow_first_seen":1499348091413,"flow_last_seen":1499348096924,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35870,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":656,"flow_packet_id":6,"flow_first_seen":1499348091413,"flow_last_seen":1499348096924,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35870,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":657,"flow_packet_id":6,"flow_first_seen":1499348092675,"flow_last_seen":1499348097925,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35884,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":657,"flow_packet_id":6,"flow_first_seen":1499348092675,"flow_last_seen":1499348097925,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35884,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":658,"flow_packet_id":3,"flow_first_seen":1499348095258,"flow_last_seen":1499348095259,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35910,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":658,"flow_packet_id":3,"flow_first_seen":1499348095258,"flow_last_seen":1499348095259,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35910,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":659,"flow_packet_id":3,"flow_first_seen":1499348096595,"flow_last_seen":1499348096595,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35924,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":659,"flow_packet_id":3,"flow_first_seen":1499348096595,"flow_last_seen":1499348096595,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35924,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":660,"flow_packet_id":3,"flow_first_seen":1499348099359,"flow_last_seen":1499348099360,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35950,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap","flow_id":660,"flow_packet_id":3,"flow_first_seen":1499348099359,"flow_last_seen":1499348099360,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.0.1","dst_ip":"192.168.10.50","src_port":35950,"dst_port":80,"l4_proto":"tcp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/WebattackXSS.pcap"}
diff --git a/tests/result/nDPId_ajp.pcap.txt b/tests/result/nDPId_ajp.pcap.txt
new file mode 100644
index 000000000..c27efb548
--- /dev/null
+++ b/tests/result/nDPId_ajp.pcap.txt
@@ -0,0 +1,78 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":78,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAPLLIQABABhyUrB0JkqwdCZOXyB9JcsXbLwAAAACgAjkI5g0AAAIEBbQEAggKTpxp5wAAAAABAwMH","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":78,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAPAAAQABABs9crB0Jk6wdCZIfSZfIk6AuuHLF2zCgEjiQFewAAAIEBbQEAggKHlfv2E6caecBAwMH","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":94,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADwAAEAAQAbPXKwdCZOsHQmSH0mXyJOgLrhyxdswoBI4kBXsAAACBAW0BAIICh5X79hOnGnnAQMDBw==","pkt_caplen":94,"pkt_type":35075,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLJQABABhybrB0JkqwdCZOXyB9JcsXbMJOgLrmAEABzfNQAAAEBCApOnGnoHlfv2A==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":75,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAObLKQABABhyVrB0JkqwdCZOXyB9JcsXbMJOgLrmAGABzYJIAAAEBCApOnGnoHlfv2BI0AAEK","pkt_caplen":75,"pkt_type":33024,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":94,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAADyyyEAAQAYclKwdCZKsHQmTl8gfSXLF2y8AAAAAoAI5COYNAAACBAW0BAIICk6caecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":35075,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFgQABABg4ErB0Jk6wdCZIfSZfIk6AuuXLF2zWAEAByfM8AAAEBCAoeV+\/ZTpxp6A==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":86,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYEAAQAYOBKwdCZOsHQmSH0mXyJOgLrlyxds1gBAAcnzPAAABAQgKHlfv2U6caeg=","pkt_caplen":86,"pkt_type":35075,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":75,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOcFhQABABg3+rB0Jk6wdCZIfSZfIk6AuuXLF2zWAGAByMn8AAAEBCAoeV+\/ZTpxp6EFCAAEJ","pkt_caplen":75,"pkt_type":33024,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":91,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADnBYUAAQAYN\/qwdCZOsHQmSH0mXyJOgLrlyxds1gBgAcjJ\/AAABAQgKHlfv2U6caehBQgABCQ==","pkt_caplen":91,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+1475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":912,"pkt":"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","pkt_caplen":912,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLLQABABhyZrB0JkqwdCZOXyB9JcsXbNZOgLr6AEABzfMkAAAEBCApOnGnoHlfv2Q==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+1452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":896,"pkt":"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","pkt_caplen":896,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0650{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":295,"pkt":"AFBWg47zAFBWg11YgQAABwgARQABFbLNQABABhu2rB0JkqwdCZOXyB9JcsXeb5OgLr6AGABzI4sAAAEBCApOnGnpHlfv2RI0AN0A23JlbGF0b3Jpb0Zvcm09cmVsYXRvcmlvRm9ybSZ0aXBvUmVsYXRvcmlvT1NEZWNvcmF0ZSUzQXRpcG9SZWxhdG9yaW9PU1NlbGVjdD1PUkRFTV9ERV9TRVJWSUNPX0dFUkFMJkFEZWNvcmF0ZSUzQUFDaGVjaz1vbiZCRGVjb3JhdGUlM0FCQ2hlY2s9b24mQ0RlY29yYXRlJTNBQ0NoZWNrPW9uJmpfaWQxNTYueD0xMDEmal9pZDE1Ni55PTgmamF2YXguZmFjZXMuVmlld1N0YXRlPWpfaWQxMw==","pkt_caplen":295,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFiQABABg4CrB0Jk6wdCZIfSZfIk6AuvnLF31CAEACLeJUAAAEBCAoeV+\/aTpxp6A==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":86,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYkAAQAYOAqwdCZOsHQmSH0mXyJOgLr5yxd9QgBAAi3iVAAABAQgKHlfv2k6caeg=","pkt_caplen":86,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0656{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":300,"pkt":"AFBWg11YAFBWg47zgQAABwgARQABGsFjQABABg0brB0Jk6wdCZIfSZfIk6AuvnLF31CAGACL2MAAAAEBCAoeV\/CDTpxp6EFCAOIEAS4AEU1vdmVkIFRlbXBvcmFyaWx5AAAEAAxYLVBvd2VyZWQtQnkAACNTZXJ2bGV0IDIuNTsgSkJvc3MtNS4wL0pCb3NzV2ViLTIuMQAADFgtUG93ZXJlZC1CeQAAB0pTRi8xLjIAoAYAcGh0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy92aXN1YWxpemFyUmVsYXRvcmlvL3Zpc3VhbGl6YXJSZWxhdG9yaW9Pc0dlcmFsLnNlYW0\/Y2lkPTY4MDgAoAMAATAA","pkt_caplen":300,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":76,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOsFkQABABg36rB0Jk6wdCZIfSZfIk6AvpHLF31CAGACLMLMAAAEBCAoeV\/CDTpxp6EFCAAIFAQ==","pkt_caplen":76,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLOQABABhyWrB0JkqwdCZOXyB9JcsXfUJOgL6qAEAB7dmYAAAEBCApOnGqSHlfwgw==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":78,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAPLLIQABABhyUrB0JkqwdCZOXyB9KcsXbLwAAAACgAjkI5gwAAAIEBbQEAggKTpxp5wAAAAABAwMH","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":78,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAPAAAQABABs9crB0Jk6wdCZIfSpfIk6AuuHLF2zCgEjiQFesAAAIEBbQEAggKHlfv2E6caecBAwMH","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":94,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADwAAEAAQAbPXKwdCZOsHQmSH0mXyJOgLrhyxdswoBI4kBXsAAACBAW0BAIICh5X79hOnGnnAQMDBw==","pkt_caplen":94,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLJQABABhybrB0JkqwdCZOXyB9KcsXbMJOgLrmAEABzfNMAAAEBCApOnGnoHlfv2A==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":75,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAAObLKQABABhyVrB0JkqwdCZOXyB9KcsXbMJOgLrmAGABzYJEAAAEBCApOnGnoHlfv2BI0AAEK","pkt_caplen":75,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":94,"pkt":"Agq8AAAAAgq9AAAAiQNAIABQVoOO8wBQVoNdWIEAAAcIAEUAADyyyEAAQAYclKwdCZKsHQmTl8gfSXLF2y8AAAAAoAI5COYNAAACBAW0BAIICk6caecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFgQABABg4ErB0Jk6wdCZIfSpfIk6AuuXLF2zWAEAByfM4AAAEBCAoeV+\/ZTpxp6A==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":86,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYEAAQAYOBKwdCZOsHQmSH0mXyJOgLrlyxds1gBAAcnzPAAABAQgKHlfv2U6caeg=","pkt_caplen":86,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":75,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOcFhQABABg3+rB0Jk6wdCZIfSpfIk6AuuXLF2zWAGAByMn4AAAEBCAoeV+\/ZTpxp6EFCAAEJ","pkt_caplen":75,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":91,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADnBYUAAQAYN\/qwdCZOsHQmSH0mXyJOgLrlyxds1gBgAcjJ\/AAABAQgKHlfv2U6caehBQgABCQ==","pkt_caplen":91,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+1475{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":912,"pkt":"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","pkt_caplen":912,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLLQABABhyZrB0JkqwdCZOXyB9KcsXbNZOgLr6AEABzfMgAAAEBCApOnGnoHlfv2Q==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+1452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":896,"pkt":"AFBWg47zAFBWg11YgQAABwgARQADbrLMQABABhlerB0JkqwdCZOXyB9KcsXbNZOgLr6AGABz+PYAAAEBCApOnGnoHlfv2RI0AzYCBAAISFRUUC8xLjEAADQvQ0NQL3BhZ2VzL3JlbGF0b3Jpb3MvcmVsYXRvcmlvRGVPcmRlbURlU2Vydmljby5zZWFtAAAMMTcyLjI5LjAuMTI5AP\/\/ABdzaXN0ZW1hc2NjcC5pbmVwLmdvdi5icgAAUAAADqAGAAprZWVwLWFsaXZlAAANQ2FjaGUtQ29udHJvbAAACW1heC1hZ2U9MAAABk9yaWdpbgAAHmh0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5icgAAGVVwZ3JhZGUtSW5zZWN1cmUtUmVxdWVzdHMAAAExAKAOAGlNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS82MC4wLjMxMTIuMTEzIFNhZmFyaS81MzcuMzYAoAcAIWFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZACgAQBVdGV4dC9odG1sLGFwcGxpY2F0aW9uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksaW1hZ2Uvd2VicCxpbWFnZS9hcG5nLCovKjtxPTAuOACgDQBbaHR0cDovL3Npc3RlbWFzY2NwLmluZXAuZ292LmJyL0NDUC9wYWdlcy9yZWxhdG9yaW9zL3JlbGF0b3Jpb0RlT3JkZW1EZVNlcnZpY28uc2VhbT9jaWQ9NjgwOAAAD0FjY2VwdC1FbmNvZGluZwAABGd6aXAAAA9BY2NlcHQtTGFuZ3VhZ2UAACNwdC1CUixwdDtxPTAuOCxlbi1VUztxPTAuNixlbjtxPTAuNACgCAADMjE5AKAJADJKU0VTU0lPTklEPTA4NTM5MDdEOEUzMjQ3NzZBNzRDMkE1MEEzMjY2NEUyLjAwOTE0NwCgCwAXc2lzdGVtYXNjY3AuaW5lcC5nb3YuYnIAAAxYLUlNRm9yd2FyZHMAAAIyMAAGAAYwMDkxNDcACgAPQUpQX1JFTU9URV9QT1JUAAAENTcwNQAKABBKS19MQl9BQ1RJVkFUSU9OAAADQUNUAP8=","pkt_caplen":896,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0650{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":295,"pkt":"AFBWg47zAFBWg11YgQAABwgARQABFbLNQABABhu2rB0JkqwdCZOXyB9KcsXeb5OgLr6AGABzI4oAAAEBCApOnGnpHlfv2RI0AN0A23JlbGF0b3Jpb0Zvcm09cmVsYXRvcmlvRm9ybSZ0aXBvUmVsYXRvcmlvT1NEZWNvcmF0ZSUzQXRpcG9SZWxhdG9yaW9PU1NlbGVjdD1PUkRFTV9ERV9TRVJWSUNPX0dFUkFMJkFEZWNvcmF0ZSUzQUFDaGVjaz1vbiZCRGVjb3JhdGUlM0FCQ2hlY2s9b24mQ0RlY29yYXRlJTNBQ0NoZWNrPW9uJmpfaWQxNTYueD0xMDEmal9pZDE1Ni55PTgmamF2YXguZmFjZXMuVmlld1N0YXRlPWpfaWQxMw==","pkt_caplen":295,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAANMFiQABABg4CrB0Jk6wdCZIfSpfIk6AuvnLF31CAEACLeJQAAAEBCAoeV+\/aTpxp6A==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":86,"pkt":"Agq9AAAAAgq8AAAAiQNAIABQVoNdWABQVoOO84EAAAcIAEUAADTBYkAAQAYOAqwdCZOsHQmSH0mXyJOgLr5yxd9QgBAAi3iVAAABAQgKHlfv2k6caeg=","pkt_caplen":86,"pkt_type":35075,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":35075}
+0656{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":300,"pkt":"AFBWg11YAFBWg47zgQAABwgARQABGsFjQABABg0brB0Jk6wdCZIfSpfIk6AuvnLF31CAGACL2L8AAAEBCAoeV\/CDTpxp6EFCAOIEAS4AEU1vdmVkIFRlbXBvcmFyaWx5AAAEAAxYLVBvd2VyZWQtQnkAACNTZXJ2bGV0IDIuNTsgSkJvc3MtNS4wL0pCb3NzV2ViLTIuMQAADFgtUG93ZXJlZC1CeQAAB0pTRi8xLjIAoAYAcGh0dHA6Ly9zaXN0ZW1hc2NjcC5pbmVwLmdvdi5ici9DQ1AvcGFnZXMvcmVsYXRvcmlvcy92aXN1YWxpemFyUmVsYXRvcmlvL3Zpc3VhbGl6YXJSZWxhdG9yaW9Pc0dlcmFsLnNlYW0\/Y2lkPTY4MDgAoAMAATAA","pkt_caplen":300,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":76,"pkt":"AFBWg11YAFBWg47zgQAABwgARQAAOsFkQABABg36rB0Jk6wdCZIfSpfIk6AvpHLF31CAGACLMLIAAAEBCAoeV\/CDTpxp6EFCAAIFAQ==","pkt_caplen":76,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","pkt_oversize":false,"pkt_ts":1505154584,"pkt_len":70,"pkt":"AFBWg47zAFBWg11YgQAABwgARQAANLLOQABABhyWrB0JkqwdCZOXyB9KcsXfUJOgL6qAEAB7dmUAAAEBCApOnGqSHlfwgw==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap","type":33024}
+0140{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ajp.pcap"}
diff --git a/tests/result/nDPId_alexa-app.pcapng.txt b/tests/result/nDPId_alexa-app.pcapng.txt
new file mode 100644
index 000000000..c70f24748
--- /dev/null
+++ b/tests/result/nDPId_alexa-app.pcapng.txt
@@ -0,0 +1,2367 @@
+0363{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0292{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976022,"pkt_len":20,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCAAYAAa+BAQA=","pkt_caplen":20,"pkt_type":6,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","type":6}
+0292{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976022,"pkt_len":20,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCAAYAAa+BAQA=","pkt_caplen":20,"pkt_type":6,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","type":6}
+0429{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":0,"flow_packet_id":1,"flow_first_seen":1490976022731,"flow_last_seen":1490976022731,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffd3:fbc2","l4_proto":"icmp6"}
+0425{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976022,"pkt_len":78,"pkt":"MzP\/0\/vCePiC0\/vCht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/0\/vChwCHAgAAAAD+gAAAAAAAAHr4gv\/+0\/vC","pkt_caplen":78,"pkt_type":34525,"pkt_ipoffset":14}
+0482{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":0,"flow_packet_id":1,"flow_first_seen":1490976022731,"flow_last_seen":1490976022731,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffd3:fbc2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0425{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976022,"pkt_len":78,"pkt":"MzP\/0\/vCePiC0\/vCht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/0\/vChwCHAgAAAAD+gAAAAAAAAHr4gv\/+0\/vC","pkt_caplen":78,"pkt_type":34525,"pkt_ipoffset":14}
+0420{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490976022741,"flow_last_seen":1490976022741,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0437{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976022,"pkt_len":90,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHL0AAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0473{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490976022741,"flow_last_seen":1490976022741,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0437{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976022,"pkt_len":90,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHL0AAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490976023264,"flow_last_seen":1490976023264,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0805{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976023,"pkt_len":357,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCCABFAAFX84EAAEARhhUAAAAA\/\/\/\/\/wBEAEMBQ5j9AQEGAHxtfzEAAAAAAAAAAAAAAAAAAAAAAAAAAHj4gtP7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDPQcBePiC0\/vCMgSsECrYOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLTFjMTMzNWVjOTVhMjczMTg3CgEhAwYPGhwzOjv\/","pkt_caplen":357,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490976023264,"flow_last_seen":1490976023264,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,33,3,6,15,26,28"}}
+0805{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976023,"pkt_len":357,"pkt":"\/\/\/\/\/\/\/\/ePiC0\/vCCABFAAFX84EAAEARhhUAAAAA\/\/\/\/\/wBEAEMBQ5j9AQEGAHxtfzEAAAAAAAAAAAAAAAAAAAAAAAAAAHj4gtP7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDPQcBePiC0\/vCMgSsECrYOQIF3DwMZGhjcGNkLTUuNS42DBhhbmRyb2lkLTFjMTMzNWVjOTVhMjczMTg3CgEhAwYPGhwzOjv\/","pkt_caplen":357,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490976023267,"flow_last_seen":1490976023267,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0776{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976023,"pkt_len":342,"pkt":"ePiC0\/vCAMDKkaPvCABFAAFIz1MAAEAR\/VesECoBrBAq2ABDAEQBNCIdAgEGAHxtfzEAAAAAAAAAAKwQKtisECoBAAAAAHj4gtP7wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgSsECoBMwQAAKjAOgQAAFRgOwQAAJOoAQT\/\/\/8AHASsECr\/AwSsECoBBgSsECoBDwNsYW7\/AAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490976023267,"flow_last_seen":1490976023267,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}}
+0443{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":4,"flow_packet_id":1,"flow_first_seen":1490976023731,"flow_last_seen":1490976023731,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0415{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976023,"pkt_len":70,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":4,"flow_packet_id":1,"flow_first_seen":1490976023731,"flow_last_seen":1490976023731,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0415{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976023,"pkt_len":70,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":5,"flow_packet_id":1,"flow_first_seen":1490976024793,"flow_last_seen":1490976024793,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":89,"pkt":"AMDKkaPvePiC0\/vCCABFAABLWklAAEARM1+sECrYrBAqAQ1wADUAN5pbXVABAAABAAAAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":5,"flow_packet_id":1,"flow_first_seen":1490976024793,"flow_last_seen":1490976024793,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":117,"pkt":"ePiC0\/vCAMDKkaPvCABFAABnz+xAAEARvZ+sECoBrBAq2AA1DXAAU9tZXVCBgAABAAEAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAAcAAHADAAcAAEAAAErABAmB\/iwQAAIEwAAAAAAACAO","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":5,"flow_packet_id":2,"flow_first_seen":1490976024793,"flow_last_seen":1490976024844,"flow_tot_l4_data_len":138,"flow_min_l4_data_len":55,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.7.248.176"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":6,"flow_packet_id":1,"flow_first_seen":1490976024847,"flow_last_seen":1490976024847,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":89,"pkt":"AMDKkaPvePiC0\/vCCABFAABLWkpAAEARM16sECrYrBAqAdlDADUAN19T54QBAAABAAAAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":6,"flow_packet_id":1,"flow_first_seen":1490976024847,"flow_last_seen":1490976024847,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0455{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":105,"pkt":"ePiC0\/vCAMDKkaPvCABFAABbz+1AAEARvaqsECoBrBAq2AA12UMAR0w654SBgAABAAEAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2FuZHJvaWQDY29tAAABAAHADAABAAEAAAEYAASs2QmO","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":6,"flow_packet_id":2,"flow_first_seen":1490976024847,"flow_last_seen":1490976024848,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.android.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.9.142"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":7,"flow_packet_id":1,"flow_first_seen":1490976024857,"flow_last_seen":1490976024857,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":60246,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8rxxAAEAG\/k+sECrYrNkJjutWAFC1gOcZAAAAAKAC\/\/\/pcgAAAgQFtAQCCAoA9kgFAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8rv4AADQGSm6s2QmOrBAq2ABQ61bhGRrktYDnGqASpajwtAAAAgQFZAQCCApVvgGZAPZIBQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0rx1AAEAG\/lasECrYrNkJjutWAFC1gOca4Rka5YAQAVfDfgAAAQEICgD2SAlVvgGZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":254,"pkt":"AMDKkaPvePiC0\/vCCABFAADwrx5AAEAG\/ZmsECrYrNkJjutWAFC1gOca4Rka5YAYAVdZcQAAAQEICgD2SAlVvgGZR0VUIC9nZW5lcmF0ZV8yMDQgSFRUUC8xLjENClVzZXItQWdlbnQ6IERhbHZpay8yLjEuMCAoTGludXg7IFU7IEFuZHJvaWQgNS4xLjE7IExHTFM3NTEgQnVpbGQvTE1ZNDdWKQ0KSG9zdDogY29ubmVjdGl2aXR5Y2hlY2suYW5kcm9pZC5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0746{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":7,"flow_packet_id":4,"flow_first_seen":1490976024857,"flow_last_seen":1490976024899,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":32,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":60246,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"ConnectivityCheck"},"http": {"hostname":"connectivitycheck.android.com","url":"connectivitycheck.android.com\/generate_204","code":0,"content_type":"","user_agent":"Dalvik\/2.1.0 (Linux; U; Android 5.1.1; LGLS751 Build\/LMY47V)"}}
+0401{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0rx8AADQGSlWs2QmOrBAq2ABQ61bhGRrltYDn1oAQAVTCjQAAAQEIClW+AdEA9kgJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":149,"pkt":"ePiC0\/vCAMDKkVoBCABFAACHryAAADQGSgGs2QmOrBAq2ABQ61bhGRrltYDn1oAYAVS1rwAAAQEIClW+AdIA9kgJSFRUUC8xLjEgMjA0IE5vIENvbnRlbnQNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBGcmksIDMxIE1hciAyMDE3IDE2OjAwOjI0IEdNVA0KDQo=","pkt_caplen":149,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976024,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0rx9AAEAG\/lSsECrYrNkJjutWAFC1gOfW4RkbOIAQAVfCLAAAAQEICgD2SBNVvgHS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":8,"flow_packet_id":1,"flow_first_seen":1490976027514,"flow_last_seen":1490976027514,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":76,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WktAAEARM2qsECrYrBAqAc\/EADUAKrjvz8MBAAABAAAAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":8,"flow_packet_id":1,"flow_first_seen":1490976027514,"flow_last_seen":1490976027514,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":9,"flow_packet_id":1,"flow_first_seen":1490976027522,"flow_last_seen":1490976027522,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp"}
+0413{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WkxAAEARM2usECrYrBAqAc17ADUAKKL+U00BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":9,"flow_packet_id":1,"flow_first_seen":1490976027522,"flow_last_seen":1490976027522,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0433{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":90,"pkt":"ePiC0\/vCAMDKkaPvCABFAABM0NFAAEARvNWsECoBrBAq2AA1zXsAOK5EU02BgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAAEGAATYOtrE","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":9,"flow_packet_id":2,"flow_first_seen":1490976027522,"flow_last_seen":1490976027523,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.218.196"}}
+0479{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":121,"pkt":"ePiC0\/vCAMDKkaPvCABFAABr0NVAAEARvLKsECoBrBAq2AA1z8QAV0oUz8OBgAABAAIAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAcAMAAUAAQABUX8AEQxtb2JpbGUtZ3RhbGsBbMASwC4AAQABAAABKwAErcLfvA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":8,"flow_packet_id":2,"flow_first_seen":1490976027514,"flow_last_seen":1490976027560,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":42,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"173.194.223.188"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":10,"flow_packet_id":1,"flow_first_seen":1490976027567,"flow_last_seen":1490976027567,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp"}
+0418{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA81nRAAEAG\/9+sECrYrcLfvKd+FGxeQZ9gAAAAAKAC\/\/\/gAAAAAgQFtAQCCAoA9kkUAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA86FEAACsGQwOtwt+8rBAq2BRsp36O4XTVXkGfYaASpajFDgAAAgQFZAQCCAor\/EXWAPZJFAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA01nVAAEAG\/+asECrYrcLfvKd+FGxeQZ9hjuF01oAQAVeX1wAAAQEICgD2SRkr\/EXW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":10,"flow_packet_id":4,"flow_first_seen":1490976027567,"flow_last_seen":1490976027625,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mtalk.google.com","ja3":"a5a59633017c3d696d2c69350e5fc004","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0402{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA06HIAACsGQuqtwt+8rBAq2BRsp36O4XTWXkGhZoAQAVSVmwAAAQEICiv8Rg8A9kka","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0596{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":205,"pkt":"ePiC0\/vCAMDKkVoBCABFAAC\/6HMAACsGQl6twt+8rBAq2BRsp36O4XTWXkGhZoAYAVTDZQAAAQEICiv8Rg8A9kkaFgMDAFsCAABXAwNY3n0bUCjb4zZ6G4o\/TWqWWSQ9p2ufUUcQGSbu2zc5aiBsZf8WSacPFJ5360Xf7gbKvq4VJrM6Sp5Mx957SU1grMypAAAP\/wEAAQAAFwAAAAsAAgEAFAMDAAEBFgMDACCIe6GZq9kBxo7r4HWprFg9\/LyCznTtsBrZNO9GTNpsww==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":10,"flow_packet_id":6,"flow_first_seen":1490976027567,"flow_last_seen":1490976027674,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mtalk.google.com","ja3":"a5a59633017c3d696d2c69350e5fc004","ja3s":"9b1466fd60cadccb848e09c86e284265","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"}}
+0404{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA01ndAAEAG\/+SsECrYrcLfvKd+FGxeQaFmjuF1YYAQAVuVBAAAAQEICgD2SR8r\/EYP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":109,"pkt":"AMDKkaPvePiC0\/vCCABFAABf1nhAAEAG\/7isECrYrcLfvKd+FGxeQaFmjuF1YYAYAVt+zAAAAQEICgD2SR8r\/EYPFAMDAAEBFgMDACC+XgFeI1a3FeBThI9cDRefvqyGssnmLngTl2GMEbbGdA==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":11,"flow_packet_id":1,"flow_first_seen":1490976027724,"flow_last_seen":1490976027724,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Wk1AAEARM2qsECrYrBAqASjeADUAKB2sfT0BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":11,"flow_packet_id":1,"flow_first_seen":1490976027724,"flow_last_seen":1490976027724,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0434{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":90,"pkt":"ePiC0\/vCAMDKkaPvCABFAABM0NhAAEARvM6sECoBrBAq2AA1KN4AOCjyfT2BgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAAEGAATYOtrE","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":11,"flow_packet_id":2,"flow_first_seen":1490976027724,"flow_last_seen":1490976027725,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.218.196"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":12,"flow_packet_id":1,"flow_first_seen":1490976027733,"flow_last_seen":1490976027733,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":35540,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8c0BAAEAGOiysECrYrNkJjorUAFAegTplAAAAAKAC\/\/+MiQAAAgQFtAQCCAoA9kklAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":70,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0415{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":70,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0414{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8g+MAADQGdYms2QmOrBAq2ABQitTVYWKuHoE6ZqASpahLiwAAAgQFZAQCCApVvw3GAPZJJQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0c0FAAEAGOjOsECrYrNkJjorUAFAegTpm1WFir4AQAVceVQAAAQEICgD2SSlVvw3G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":254,"pkt":"AMDKkaPvePiC0\/vCCABFAADwc0JAAEAGOXasECrYrNkJjorUAFAegTpm1WFir4AYAVe0RwAAAQEICgD2SSlVvw3GR0VUIC9nZW5lcmF0ZV8yMDQgSFRUUC8xLjENClVzZXItQWdlbnQ6IERhbHZpay8yLjEuMCAoTGludXg7IFU7IEFuZHJvaWQgNS4xLjE7IExHTFM3NTEgQnVpbGQvTE1ZNDdWKQ0KSG9zdDogY29ubmVjdGl2aXR5Y2hlY2suYW5kcm9pZC5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":12,"flow_packet_id":4,"flow_first_seen":1490976027733,"flow_last_seen":1490976027780,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":32,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":35540,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"ConnectivityCheck"},"http": {"hostname":"connectivitycheck.android.com","url":"connectivitycheck.android.com\/generate_204","code":0,"content_type":"","user_agent":"Dalvik\/2.1.0 (Linux; U; Android 5.1.1; LGLS751 Build\/LMY47V)"}}
+0402{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA06L8AACsGQp2twt+8rBAq2BRsp36O4XVhXkGhkYAQAVSUaQAAAQEICiv8RoYA9kkf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0922{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":442,"pkt":"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","pkt_caplen":442,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0hBMAADQGdWGs2QmOrBAq2ABQitTVYWKvHoE7IoAQAVQdbAAAAQEIClW\/DfYA9kkp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":149,"pkt":"ePiC0\/vCAMDKkVoBCABFAACHhBQAADQGdQ2s2QmOrBAq2ABQitTVYWKvHoE7IoAYAVQNjgAAAQEIClW\/DfcA9kkpSFRUUC8xLjEgMjA0IE5vIENvbnRlbnQNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBGcmksIDMxIE1hciAyMDE3IDE2OjAwOjI3IEdNVA0KDQo=","pkt_caplen":149,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0c0NAAEAGOjGsECrYrNkJjorUAFAegTsi1WFjAoAQAVcdEAAAAQEICgD2SS5Vvw33","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA06OsAACsGQnGtwt+8rBAq2BRsp36O4XVhXkGjCYAQAV2SqAAAAQEICiv8RroA9kkr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":88,"pkt":"ePiC0\/vCAMDKkVoBCABFAABK6O0AACsGQlmtwt+8rBAq2BRsp36O4XVhXkGjCYAYAV1QqwAAAQEICiv8RsQA9kkrFwMDABGThlM7ukVt4mfxeKbfsG\/jkw==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":172,"pkt":"ePiC0\/vCAMDKkVoBCABFAACe6O8AACsGQgOtwt+8rBAq2BRsp36O4XV3XkGjCYAYAV2X1gAAAQEICiv8Rt0A9kkrFwMDAGW4rSCJU6w1QBWCCb6icNhksEnegr0QmHa5CtWXaVWXyp\/EmS3xdVS\/COMw\/XBKLbVzATaXMKULZeFDGy5l4mra5MUb4wA\/owBQ3yNRRmNTrV5X4nsj64KrULtgpeeCdNYH2s8qKw==","pkt_caplen":172,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":183,"pkt":"ePiC0\/vCAMDKkVoBCABFAACp6PEAACsGQfatwt+8rBAq2BRsp36O4XXhXkGjCYAYAV02ogAAAQEICiv8RuAA9kkrFwMDAHCM78KlL1c7f7AIAO2lgDLD7At70yiIFp+zTbNqBB4JNPsUDbfB39wAcF8CisSbpSx1Qqab9mKLjZBIu+K4YTvmXPsJnz+k7qZ1g4nGzviZLHMVrZrWPOOuBTGer9YvwWsXsblpk9rKRluW\/ecJtHqe","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA01npAAEAG\/+GsECrYrcLfvKd+FGxeQaMJjuF2VoAQAVuRmwAAAQEICgD2STsr\/EbE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":13,"flow_packet_id":1,"flow_first_seen":1490976027958,"flow_last_seen":1490976027958,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","l4_proto":"icmp"}
+0444{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976027,"pkt_len":94,"pkt":"ePiC0\/vCAMDKkaPvCABFwABQaiwAAEABYsesECoBrBAq2AUBiVKsECoqRQAANNZ6QAA\/BgDirBAq2K3C37ynfhRsXkGjCY7hdlaAEAFbkZsAAAEBCAoA9kk7K\/xGxA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":13,"flow_packet_id":1,"flow_first_seen":1490976027958,"flow_last_seen":1490976027958,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":14,"flow_packet_id":1,"flow_first_seen":1490976029184,"flow_last_seen":1490976029184,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Wk5AAEARM2msECrYrBAqAbwbADUAKEUyqIoBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":14,"flow_packet_id":1,"flow_first_seen":1490976029184,"flow_last_seen":1490976029184,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0588{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":203,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC90PZAAEARvD+sECoBrBAq2AA1vBsAqWPAqIqBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAAToAAoDd3d3A2NkbsAQwCwABQABAAAABgAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAAAQABDRV0cXAQgABAAEAAAAEAAQ0VdGPwEIAAQABAAAABAAENFXR2MBCAAEAAQAAAAQABDRV0Xo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":14,"flow_packet_id":2,"flow_first_seen":1490976029184,"flow_last_seen":1490976029244,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.197"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":15,"flow_packet_id":1,"flow_first_seen":1490976029248,"flow_last_seen":1490976029248,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8xDtAAEAGmX2sECrYNFXRxdfKAbvTso2HAAAAAKAC\/\/\/liQAAAgQFtAQCCAoA9km8AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqrg0VdHFrBAq2AG718qLhBMS07KNiKAScSCB1QAAAgQFtAQCCAptCebiAPZJvAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xDxAAEAGmYSsECrYNFXRxdfKAbvTso2Ii4QTE4AQAVcgZAAAAQEICgD2ScRtCebi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":287,"pkt":"AMDKkaPvePiC0\/vCCABFAAERxD1AAEAGmKasECrYNFXRxdfKAbvTso2Ii4QTE4AYAVeNQAAAAQEICgD2ScZtCebiFgMBANgBAADUAwNT2KB0JrHY5dbwauLLHFhO0VZRwtPH9AKUlOkcVsOHnAAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAfwAAABMAEQAADnd3dy5hbWF6b24uY29tAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM=","pkt_caplen":287,"pkt_type":2048,"pkt_ipoffset":14}
+0760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":15,"flow_packet_id":4,"flow_first_seen":1490976029248,"flow_last_seen":1490976029341,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":32,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0402{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09fhAAPMGtMc0VdHFrBAq2AG718qLhBMT07KOZYAQAHYgXQAAAQEICm0J5usA9knG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc9flAAPMGrx40VdHFrBAq2AG718qLhBMT07KOZYAQAHZvywAAAQEICm0J5usA9knGFgMDAEECAAA9AwPuo9AAlhttAZnaq4FrlIhu3W20KiqECP2i3kzJGV6L3QDALwAAFQAAAAD\/AQABAAALAAQDAAECACMAABYDAwvoCwAL5AAL4QAGnzCCBpswggWDoAMCAQICEB1Kvap40Jr+eZ1BvOt6dmIwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNjEwMzEwMDAwMDBaFw0xNzEyMzEyMzU5NTlaMGgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApXYXNoaW5ndG9uMRAwDgYDVQQHDAdTZWF0dGxlMRkwFwYDVQQKDBBBbWF6b24uY29tLCBJbmMuMRcwFQYDVQQDDA53d3cuYW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJaKGd1n\/gfHNZ02Y\/9eMAjyI8oXDlecrRGUA27X7VosTsU6RtkpZNhiNac7REqaKQZm2P4WjOWDVg2Ax69NQEL8wKsLDcs+bF+K8rZCBFiPdg6Jim78UCq8tJtGbo\/TM2m2W9rx29HW1sFJdsl5+Z5XxyUn5g9E0t1BTWkM1xMRZ5SlP4u1aJixAfzvTrXydFdl2c28zsd0X708ucJp+AMQgu5xkZJTQSlWvp6UZdM4\/paMgmjPgBeWFfWW1ESLsWImTlt7tmuulc2MAkWthHbSGzwCzv3UqxTQLmgISqqRTdDgeNndeiFlDiojIhwyS+ddmACSQZn0DyO31ULVycCAwEAAaOCAykwggMlMIHUBgNVHREEgcwwgcmCCmFtYXpvbi5jb22CCGFtem4uY29tghF1ZWRhdGEuYW1hem9uLmNvbYINdXMuYW1hem9uLmNvbYIOd3d3LmFtYXpvbi5jb22CDHd3dy5hbXpuLmNvbYIUY29ycG9yYXRlLmFtYXpvbi5jb22CEWJ1eWJveC5hbWF6b24uY29tghFpcGhvbmUuYW1hem9uLmNvbYINeXAuYW1hem9uLmNvbYIPaG9tZS5hbWF6b24uY29tghVvcmlnaW4td3d3LmFtYXpvbi5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVgYn8nxAAAEAwBIMEYCIQDp8WWCCDpbtC9Z72N\/spPAMoGM7d0bKGQ9VnLOU5flvwIhAK49N7TMmKEmtSNuc66ro1w0KeRpzF6CNDBwFyDVnBFdAHcAaPaY+B9kgr46jO65KB1M\/HFRXWeT1ETRCmesu09P+8QAAAFYGJ\/KGgAABAMASDBGAiEA0ZUEPCgtkf27znk=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":15,"flow_packet_id":6,"flow_first_seen":1490976029248,"flow_last_seen":1490976029387,"flow_tot_l4_data_len":1877,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2352{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1185{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+1294{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":15,"flow_packet_id":8,"flow_first_seen":1490976029248,"flow_last_seen":1490976029387,"flow_tot_l4_data_len":3963,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":495,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}}
+0402{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xD5AAEAGmYKsECrYNFXRxdfKAbvTso5li4QYu4AQAWIZxQAAAQEICgD2ScptCebr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xD9AAEAGmYGsECrYNFXRxdfKAbvTso5li4QeY4AQAW0UEQAAAQEICgD2ScttCebr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xEBAAEAGmYCsECrYNFXRxdfKAbvTso5li4QgoYAQAXkRxwAAAQEICgD2ScttCebr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACyxEFAAEAGmQGsECrYNFXRxdfKAbvTso5li4QgoYAYAXnSPAAAAQEICgD2Sd1tCebrFgMDAEYQAABCQQSj2GeJRHQxFBZsnO4zTWRsXkdgYhWJ\/EFwvt0pPG4uTLv7gUeFuUDNQEW\/msOnHJtpqawiLAJYjOXvwxYZGu\/yFAMDAAEBFgMDAChTjGQvT9dDrB3JN9bwikL8mvqNT2\/r7J651YOtr+pbmQJohBcgkNdt","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":308,"pkt":"ePiC0\/vCAMDKkVoBCABFAAEm9fxAAPMGs9E0VdHFrBAq2AG718qLhCCh07KO44AYAHakNQAAAQEICm0J5wMA9kndFgMDALoEAAC2AAAqMACwVFa0PclIpB\/guv14R\/HQ9H\/jalGzV7EvNl8eRaM6rfwATbsnQL+mEOp3WJA8tt3iJeTbU1fTRm1ahkKIzXD1rM3HYrAFFJWxuro7R2RKPwcSKgZYp3xYQmCF3dsYONqPFd2VHbwiYGKafu1C4SPI8xENEtlFTIonqCRmOjB5RVBgqoIrBBC2oN+15Kr6pUOvh3cgfsprLFFQ3pLChfqTgbke\/FeZ+\/LMZnhtEzXXdeYUAwMAAQEWAwMAKNB2GQLBVKtI4KJEpORCeTQJYS3XXx29sXHBIMDdNL4yoP0FMgPaUhk=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xEJAAEAGmX6sECrYNFXRxdfKAbvTso7ji4Qhk4AQAYQQHgAAAQEICgD2SeFtCecD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2259{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":1430,"pkt":"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","pkt_caplen":1430,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":16,"flow_packet_id":1,"flow_first_seen":1490976029669,"flow_last_seen":1490976029669,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":84,"pkt":"AMDKkaPvePiC0\/vCCABFAABGWk9AAEARM16sECrYrBAqAU3\/ADUAMlRV5qsBAAABAAAAAAAABG1hZHMPYW1hem9uLWFkc3lzdGVtA2NvbQAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":16,"flow_packet_id":1,"flow_first_seen":1490976029669,"flow_last_seen":1490976029669,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mads.amazon-adsystem.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0484{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":126,"pkt":"ePiC0\/vCAMDKkaPvCABFAABw0QhAAEARvHqsECoBrBAq2AA1Tf8AXGjL5quBgAABAAIAAAAABG1hZHMPYW1hem9uLWFkc3lzdGVtA2NvbQAAAQABwAwABQABAAACoQAOBG1hZHMGYW1hem9uwCHANgABAAEAAAAGAAQ0XugA","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":16,"flow_packet_id":2,"flow_first_seen":1490976029669,"flow_last_seen":1490976029753,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":50,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mads.amazon-adsystem.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":17,"flow_packet_id":1,"flow_first_seen":1490976029756,"flow_last_seen":1490976029756,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8YepAAEAG5YqsECrYNF7oAIMUAbsV\/ygFAAAAAKAC\/\/9G\/wAAAgQFtAQCCAoA9knvAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw9PhAAOcGq4c0XugArBAq2AG7gxTPTpIKFf8oBnASH\/5MlgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYetAAEAG5Z2sECrYNF7oAIMUAbsV\/ygGz06SC1AQAVeXBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976029,"pkt_len":285,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPYexAAEAG5LWsECrYNF7oAIMUAbsV\/ygGz06SC1AYAVe0ugAAFgMBAOIBAADeAwPKXhDT4mBwzwJLaYeyeukYihakDqOb9JFzyzNNj0iN1AAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAiQAAAB0AGwAAGG1hZHMuYW1hem9uLWFkc3lzdGVtLmNvbQALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgID","pkt_caplen":285,"pkt_type":2048,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":17,"flow_packet_id":4,"flow_first_seen":1490976029756,"flow_last_seen":1490976029862,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":20,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mads.amazon-adsystem.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0395{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo+q5AAOcGpdk0XugArBAq2AG7gxTPTpILFf8o7VAQf\/wXewAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolwhAANQGHIA0XugArBAq2AG7gxTPTpILFf8o7VAQf\/wXewAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":17,"flow_packet_id":7,"flow_first_seen":1490976029756,"flow_last_seen":1490976030031,"flow_tot_l4_data_len":1859,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mads.amazon-adsystem.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2359{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXclwpAANQGFso0XugArBAq2AG7gxTPTpe\/Ff8o7VAQf\/zi0AAAi0hJpz9FnVuq8jc8kba9WvW7HI594Yds2wE7DuuChDCUrYD215w7Cl0Q7fB\/1o9RRmDHrx5yNPPaj5UftuhgUv+9XAIC2b3Y7DKK2L000Z9NLbIilkLU\/4PTX8ebPMJgYRpuOEIYYBLL3Sv8Pj\/gv9xFPP9hh0ntlj4aiVj8SeavnW6+\/\/CZNATNx6KmWx8HbZqoGSTf58g4MYoM\/b49g80oV3KZ4faDWRUnyyFH5FgpiUtNFgQABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM0MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zAfBgNVHSMEGDAWgBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzANBgkqhkiG9w0BAQsFAAOCAQEAXpRWSd2OLWX1wTZRtgPj2p5zGfIfWatYfmwmBSz6gddcIxciLDeT94bsheawo\/0f4jKoRW\/h2fu5r9JwoDJCZb+E\/hYqjz\/Fptajk31D6XQhkTUo9GPpLu339Vx\/S5q1IOkKveBFEAwUlJpdpeNLkegkm0ZAZfQics2Z+IgR9fN\/5jOC5qjFfv7QCOIlWAhxaObNouYU3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5E=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0949{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":466,"pkt":"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","pkt_caplen":466,"pkt_type":2048,"pkt_ipoffset":14}
+1155{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":17,"flow_packet_id":9,"flow_first_seen":1490976029756,"flow_last_seen":1490976030031,"flow_tot_l4_data_len":3771,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mads.amazon-adsystem.com","server_names":"mads.amazon-adsystem.com,mads.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=mads.amazon.com","fingerprint":"E0:2E:BD:D6:46:9B:05:03:93:CC:A7:28:7A:F4:57:9C:EB:40:8F:AB"}}
+0388{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYe1AAEAG5ZusECrYNF7oAIMUAbsV\/yjtz06Xv1AQAWKQYQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYe5AAEAG5ZqsECrYNF7oAIMUAbsV\/yjtz06dc1AQAW2KogAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYe9AAEAG5ZmsECrYNF7oAIMUAbsV\/yjtz06fD1AQAXmI+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACmYfBAAEAG5RqsECrYNF7oAIMUAbsV\/yjtz06fD1AYAXkEAgAAFgMDAEYQAABCQQSbYevDP9e67TJFZfQFIvfhrr5+fnPuxslRjL\/1Oqgzdy3UNL8+il6UNI2zO0CB77cstD\/gOobfFgR4zapVFY0\/FAMDAAEBFgMDACgXfnjwCUbJnVyWNqB++orasSpB\/oDoUxDtVQIuNuCCkMuKefrmWx8e","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAABblwxAANQGHEk0XugArBAq2AG7gxTPTp8PFf8pa1AYf\/rsKQAAFAMDAAEBFgMDACgkJ2tRC1us4Bb\/SF1C2Bg+OskETKZ4uLVGrQFlE1Cp+H5wONFplMgo","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYfFAAEAG5ZesECrYNF7oAIMUAbsV\/ylrz06fQlAQAXmISQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":18,"flow_packet_id":1,"flow_first_seen":1490976030681,"flow_last_seen":1490976030681,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":82,"pkt":"AMDKkaPvePiC0\/vCCABFAABEWlBAAEARM1+sECrYrBAqARy+ADUAMIK\/xAMBAAABAAAAAAAAC2ZpcnMtdGEtZzdnBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":18,"flow_packet_id":1,"flow_first_seen":1490976030681,"flow_last_seen":1490976030681,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"firs-ta-g7g.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0444{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":94,"pkt":"ePiC0\/vCAMDKkaPvCABFwABQalIAAEABYqGsECoBrBAq2AUBAe6sECoqRQAANMRJQAA\/Bpp3rBAq2DRV0cXXygG707KdlouELZKAEAGm9GwAAAEBCAoA9kpTbQnnbg==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":98,"pkt":"ePiC0\/vCAMDKkaPvCABFAABU0XFAAEARvC2sECoBrBAq2AA1HL4AQPRGxAOBgAABAAEAAAAAC2ZpcnMtdGEtZzdnBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAABwABDbvFrk=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":18,"flow_packet_id":2,"flow_first_seen":1490976030681,"flow_last_seen":1490976030890,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"firs-ta-g7g.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.22.185"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":19,"flow_packet_id":1,"flow_first_seen":1490976030894,"flow_last_seen":1490976030894,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976030,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8J69AAEAG7nysECrYNu8WudGyAbvyuG3OAAAAAKAC\/\/+kIgAAAgQFtAQCCAoA9kphAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwN3JAAOcGN8U27xa5rBAq2AG70bLD2Mra8rhtz3ASH\/580QAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7BAAEAG7o+sECrYNu8WudGyAbvyuG3Pw9jK21AQAVfHQgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":283,"pkt":"AMDKkaPvePiC0\/vCCABFAAENJ7FAAEAG7amsECrYNu8WudGyAbvyuG3Pw9jK21AYAVcWrwAAFgMBAOABAADcAwMXtWbEMzpaIh7LAfTS6lRlyq4lFkX3g5E1gYNEJ7C9NQAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAhwAAABsAGQAAFmZpcnMtdGEtZzdnLmFtYXpvbi5jb20ACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAw==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":19,"flow_packet_id":4,"flow_first_seen":1490976030894,"flow_last_seen":1490976031106,"flow_tot_l4_data_len":337,"flow_min_l4_data_len":20,"flow_max_l4_data_len":249,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"firs-ta-g7g.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0396{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTUpAANUGM\/U27xa5rBAq2AG70bLD2Mrb8rhtz1AQAOjHsQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTUtAANUGM\/Q27xa5rBAq2AG70bLD2Mrb8rhutFAQAPjGvAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":19,"flow_packet_id":7,"flow_first_seen":1490976030894,"flow_last_seen":1490976031185,"flow_tot_l4_data_len":1857,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"firs-ta-g7g.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2357{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0933{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":454,"pkt":"ePiC0\/vCAMDKkVoBCABFAAG4TU5AANUGMmE27xa5rBAq2AG70bLD2NZD8rhutFAYAPjwIAAAZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccWAwMBTQwAAUkDABdBBNfxDLu\/fO8UIpgoRlbpPueky6f3J8FL+1Gbd6ds6FyitXEjMdUbm9soSjhZWDGiQ04JzW2gKD\/tbF1A5TNBzJ0GAQEAu\/h6UKCFymy76TpuxDfYO4SUD74QnsciYZZZqntzMTf0joB1ij659ZhouJ5sL\/0k972\/0GI+IuVUeTChokGmO26SXTEutRq4WvaLIdBfAm+8uaCz+7zVpHWvO2vxlvh67usN7OFLdyM1Ay0CAeYyyc2ociKkQ8kI4+F\/+w2yVe9wJFrjZg8vfC3+F81WE7fYZB2DZnBfi6t930twTqSio23\/v9Fvr9KVyaMwpcGzTgpdiCtf1hEeGwLFZSJTPFcOLS1WDBmJM1HUFZBlPdfmZqkXLQ2nKH7iKO9Gtg6lMMs+FRtcONrIkIosHfro6GcX5vypq7smocc4UFzQbIFEMBYDAwAEDgAAAA==","pkt_caplen":454,"pkt_type":2048,"pkt_ipoffset":14}
+1145{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":19,"flow_packet_id":9,"flow_first_seen":1490976030894,"flow_last_seen":1490976031186,"flow_tot_l4_data_len":3757,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":417,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"firs-ta-g7g.amazon.com","server_names":"firs-ta-g7g.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=firs-ta-g7g.amazon.com","fingerprint":"A0:32:45:00:21:A0:00:56:62:BA:FE:E7:68:81:40:5F:68:7E:A6:86"}}
+0388{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7JAAEAG7o2sECrYNu8WudGyAbvyuG60w9jQj1AQAWLAngAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7NAAEAG7oysECrYNu8WudGyAbvyuG60w9jWQ1AQAW263wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJ7RAAEAG7ousECrYNu8WudGyAbvyuG60w9jX01AQAXm5QwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACmJ7VAAEAG7gysECrYNu8WudGyAbvyuG60w9jX01AYAXkfRgAAFgMDAEYQAABCQQSRfABpCNYhi1oKaf7pxyEpIZPVkuLnqt\/QeVmQIWSuHfjNV2404z5WTjqD2yZecbNRt64le+XDaTP+iJIUZ79aFAMDAAEBFgMDACg53qQ+en3zUZj3jGk4ylYy+SSYofUy8cmZiIXulh+xAYDZhLlVqdvg","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAABbTU9AANUGM7027xa5rBAq2AG70bLD2NfT8rhvMlAYAPhkRQAAFAMDAAEBFgMDACi0WEPKdF0Yw3PvRgOk2k0PM5HWwu08mgCfNlAksTVHXONpk5gHI5Y3","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":20,"flow_packet_id":1,"flow_first_seen":1490976031581,"flow_last_seen":1490976031581,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":76,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WlFAAEARM2SsECrYrBAqAaBGADUAKk94StwBAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":20,"flow_packet_id":1,"flow_first_seen":1490976031581,"flow_last_seen":1490976031581,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl0Y5AAEARu\/+sECoBrBAq2AA1oEYAUS8VStyBgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAA8ACwhwaXRhbmd1acASwC4AAQABAAAADwAENF7ohg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":20,"flow_packet_id":2,"flow_first_seen":1490976031581,"flow_last_seen":1490976031687,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":21,"flow_packet_id":1,"flow_first_seen":1490976031691,"flow_last_seen":1490976031691,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49572,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fGdAAEAGyoesECrYNF7ohsGkAFBD6jbWAAAAAKAC\/\/\/L1QAAAgQFtAQCCAoA9kqxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":70,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0416{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":70,"pkt":"MzMAAAACePiC0\/vCht1gAAAAABA6\/\/6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAChQCMEAAAAAABAXj4gtP7wg==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwMAtAAOcGb+80XuiGrBAq2ABQwaTMUP0xQ+o213ASH\/5qBQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGhAAEAGypqsECrYNF7ohsGkAFBD6jbXzFD9MlAQAVe0dgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1469{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":862,"pkt":"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","pkt_caplen":862,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":21,"flow_packet_id":4,"flow_first_seen":1490976031691,"flow_last_seen":1490976031776,"flow_tot_l4_data_len":916,"flow_min_l4_data_len":20,"flow_max_l4_data_len":828,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49572,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/manifest\/pitangui.appcache","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36"}}
+0397{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2EFAANsG08A0XuiGrBAq2ABQwaTMUP0yQ+o5\/1AQf\/MysgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2217{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":1400,"pkt":"ePiC0\/vCAMDKkVoBCABFAAVq2EJAANsGzn00XuiGrBAq2ABQwaTMUP0yQ+o5\/1AYf\/M8QwAASFRUUC8xLjEgMjAwIE9LDQp4LWFtem4tUmVxdWVzdElkOiAyYWY3NjM1Ny0xNjJiLTExZTctYmYyYy0zNTNhZjRiYWUwZjANCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpFeHBpcmVzOiBGcmksIDMxIE1hciAyMDE3IDE2OjAwOjMxIFVUQw0KQ29udGVudC1UeXBlOiB0ZXh0L2NhY2hlLW1hbmlmZXN0DQpDb250ZW50LUxlbmd0aDogMTA4OA0KRGF0ZTogRnJpLCAzMSBNYXIgMjAxNyAxNjowMDozMSBHTVQNCg0KH4sIAAAAAAAAAJWW3W+rNhTA3\/NXVNrbJAeDY8B96207rVrbW91m2sM0IX8SbgAj27lp99fPQBMoEF1NSqLY5+fz5eNj397c\/n5\/9XTz\/PDb\/et29csVREEE\/SdMrkJ4DaOrl6fV6ralrlcBtzbACZYRoE2zrop67Wf66TTdUAV+6LdhWunaBTcV\/VfX9xWTJnt0a+fUguBJXBB8yy8ItruR4IvWe2nK98fbu+zBXRCcVBVVHmAaIwVsI+m+qPPH+7sshvDNf9d58YGkscACKPqj4Lpe+59+2sfdTtgghCmKQNFQATqiqfMJkaANJp7Y6VoCI11R00so4TFUXpg9y+OTZkUp76Q3LNf2xxTlOKLxSesFdTJEKex9W7TLyoN0WrtdIOOQUdCOt+34hRbGJ2TrdQ+ZGNEpw\/FA3+q6ltxJMbBcH2pn3oOQEBy2AaG3TNbgz9fB+AmRqYBt7qZyqesAEZikINc6L2VW6lwPYlUW+c69OuoONojTGKFWRz87pGtHa2GBMlIGUYJJ0jJ8R5cJFKYJbolaH7OmpO8+BYtgwiLFWrCFsoYe7GiHysI6G2x4ghE47gonPVALOnG\/pxjHEvm9EYtMdbAFD2AcJwz4HKvCVNQVuv5C+T43Pn0iu5N273Tzv9ZsKSul+7ts4+G0kf\/MVqdsw0FjikoCS+1uKg8jFqKfaG+0cYYWbqY8lFGIwVelpBmt6ot9ym5CwsklQ8tL8CaKGKg1oMYdtdlP5QTBCM3MX0gjSekGg25\/+5Nzru9ezjHdRDNlP80vVywUl5ZdTJyI4oiDvvdlT+1U9vipXGrtClXwLk82QDxhEAh9rI\/UiBtj9HGoUa2ZDGAYYl\/FVZ4d\/bpM8p2eEGHCI9URlLdaM6HdFCEIww4RXadaUhMlUogxM1eDUgI3gy8LgBI8GrviaDNBMES+WZx1zIE0VmnvR9fx\/e1xbmlTMkWEjq0tRJWKNE7HUc0Nkg0nvdPtwfY\/fH+YMYpADF5ozb1HZ8eavgFnlRajEu8WMIVY8ikKenjjbfEMmu2+KEsbRFRhDLpWMyj5kLFYMgSsa\/uOEc+j2pmhKiZEgj7KGyGMtGN1pZSNdwojCrr\/WXXwPe\/zRWObwl8RxnuEIgJBN\/ThAW1onftLsf1f9ef5fMTOa5AkCQSlpsLH6ivDZmI\/CvWExUJFCnwMQW7kO9CNWwCJQlAt+xAtmGec+oY1Mj9WaXx\/twFkxN+H\/QgcJXU7acbB91SSEixPVLuVc4RhxvgY6R5SM0ww6G9rW\/keB3a6OimdOyb9Y0yAtvhOSv2DLg6jEA2s7zbKb33L+rtISNs+FNo6eGi38Ix9hBUonIhwEiuo5bH38rt3jiRMnd+F3\/37ryxYkJLQnxYhG\/tpmvnDZ70HTfd2PI+Gt6NtaFDUQr6td64qV6vn++1fX7\/9cb36dfUfPnBO\/LMKAAA=","pkt_caplen":1400,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976031,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGpAAEAGypisECrYNF7ohsGkAFBD6jn\/zFECdFAQAWGsAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976032,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGtAAEAGypesECrYNF7ohsGkAFBD6jn\/zFECdFARAWGsAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":22,"flow_packet_id":1,"flow_first_seen":1490976032763,"flow_last_seen":1490976032763,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0442{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976032,"pkt_len":90,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAf6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHvkAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":22,"flow_packet_id":1,"flow_first_seen":1490976032763,"flow_last_seen":1490976032763,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0442{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976032,"pkt_len":90,"pkt":"MzMAAAAWePiC0\/vCht1gAAAAACQAAf6AAAAAAAAAeviC\/\/7T+8L\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHvkAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/0\/vC","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0395{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976032,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoMplAAOcGbWk0XuiGrBAq2ABQwaTMUQJ0Q+o6AFARAH+s4gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976032,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofGxAAEAGypasECrYNF7ohsGkAFBD6joAzFECdVAQAWGsAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":23,"flow_packet_id":1,"flow_first_seen":1490976035502,"flow_last_seen":1490976035502,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp"}
+0453{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":100,"pkt":"AMDKkaPvePiC0\/vCCABFAABWWlJAAEARM0usECrYrBAqAVwHADUAQq4NgPsBAAABAAAAAAAAEGNvZ25pdG8taWRlbnRpdHkJdXMtZWFzdC0xCWFtYXpvbmF3cwNjb20AAAEAAQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":23,"flow_packet_id":1,"flow_first_seen":1490976035502,"flow_last_seen":1490976035502,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"cognito-identity.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0581{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":196,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC20jNAAEARuwmsECoBrBAq2AA1XAcAoid0gPuBgAABAAYAAAAAEGNvZ25pdG8taWRlbnRpdHkJdXMtZWFzdC0xCWFtYXpvbmF3cwNjb20AAAEAAcAMAAEAAQAAAAIABCLHNPDADAABAAEAAAACAAQ0AM87wAwAAQABAAAAAgAENBT4ysAMAAEAAQAAAAIABCLAPyvADAABAAEAAAACAAQ0ynf3wAwAAQABAAAAAgAENq23qQ==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0692{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":23,"flow_packet_id":2,"flow_first_seen":1490976035502,"flow_last_seen":1490976035549,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":66,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"cognito-identity.us-east-1.amazonaws.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"34.199.52.240"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":24,"flow_packet_id":1,"flow_first_seen":1490976035553,"flow_last_seen":1490976035553,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JIdAAEAG55WsECrYIsc08JXbAbv9XGi0AAAAAKAC\/\/\/OjgAAAgQFtAQCCAoA9kwzAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAOsGYRwixzTwrBAq2AG7ldsM0X8G\/VxotaASaN9A1wAAAgQFtAQCCApEF1TYAPZMMwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JIhAAEAG55ysECrYIsc08JXbAbv9XGi1DNF\/B4AQAVfXJgAAAQEICgD2TDlEF1TY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":294,"pkt":"AMDKkaPvePiC0\/vCCABFAAEYJIlAAEAG5resECrYIsc08JXbAbv9XGi1DNF\/B4AYAVcMvQAAAQEICgD2TDlEF1TYFgMBAN8BAADbAwP73M1sxI2HkRgH8V1BL3eSUwWF+lNvBxlDQftlXGYrfgAAIPr6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAksrKAAD\/AQABAAAAAC0AKwAAKGNvZ25pdG8taWRlbnRpdHkudXMtZWFzdC0xLmFtYXpvbmF3cy5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAja2gAdABcAGGpqAAEA","pkt_caplen":294,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":24,"flow_packet_id":4,"flow_first_seen":1490976035553,"flow_last_seen":1490976035616,"flow_tot_l4_data_len":372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0404{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0KgNAAOsGNyEixzTwrBAq2AG7ldsM0X8H\/VxpmYAQAHfW9AAAAQEICkQXVQYA9kw5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":24,"flow_packet_id":6,"flow_first_seen":1490976035553,"flow_last_seen":1490976035733,"flow_tot_l4_data_len":1884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2359{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1073{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":559,"pkt":"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","pkt_caplen":559,"pkt_type":2048,"pkt_ipoffset":14}
+1196{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":24,"flow_packet_id":8,"flow_first_seen":1490976035553,"flow_last_seen":1490976035733,"flow_tot_l4_data_len":3889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":486,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","server_names":"cognito-identity.amazonaws.com,cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=cognito-identity.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"56:17:8F:E9:45:10:32:78:FF:FD:E3:09:60:5A:B5:3B:8D:8C:F8:34"}}
+0403{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JIpAAEAG55qsECrYIsc08JXbAbv9XGmZDNGEr4AQAWLQVAAAAQEICgD2TEVEF1UH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JItAAEAG55msECrYIsc08JXbAbv9XGmZDNGKV4AQAW3KoQAAAQEICgD2TEVEF1UH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JIxAAEAG55isECrYIsc08JXbAbv9XGmZDNGMRIAQAXnIqAAAAQEICgD2TEVEF1UH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACyJI1AAEAG5xmsECrYIsc08JXbAbv9XGmZDNGMRIAYAXl0lgAAAQEICgD2TEZEF1UHFgMDAEYQAABCQQRN9za8B94HEa6ty8Pnz4h2v2eKq3x\/Wu0\/TSkFMWkPvAUaorLTTx+6KBWcA2N6vxGMcz8UEGVspLYXyp1\/0rJXFAMDAAEBFgMDACgAAAAAAAAAAOmMJU3zkvmhEGXZo2qof7WZNLZPun\/fbeZtgtF8\/cfy","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":117,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnKgdAAOsGNuoixzTwrBAq2AG7ldsM0YxE\/VxqF4AYAHeWcwAAAQEICkQXVScA9kxGFAMDAAEBFgMDACgFksZRRM3rwwhubGkXNUPrc959OkrTfBCZxirVPmCm\/4th2FbAogMZ","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0JI5AAEAG55asECrYIsc08JXbAbv9XGoXDNGMd4AQAXnHxwAAAQEICgD2TFVEF1Un","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1365{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976035,"pkt_len":773,"pkt":"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","pkt_caplen":773,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":25,"flow_packet_id":1,"flow_first_seen":1490976037754,"flow_last_seen":1490976037754,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8+KpAAEAGE3KsECrYIsc08JXcAbvRHbWkAAAAAKAC\/\/+tAQAAAgQFtAQCCAoA9k0OAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAOoGYhwixzTwrBAq2AG7ldw4CtRs0R21paASaN+cagAAAgQFtAQCCApEF1cYAPZNDgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+KtAAEAGE3msECrYIsc08JXcAbvRHbWlOArUbYAQAVcyugAAAQEICgD2TRREF1cY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":326,"pkt":"AMDKkaPvePiC0\/vCCABFAAE4+KxAAEAGEnSsECrYIsc08JXcAbvRHbWlOArUbYAYAVfzMQAAAQEICgD2TRREF1cYFgMBAP8BAAD7AwMVuDHoPIxY5YbdWtXfttgnszJ6dj3kr1us3m0FTwAhaSCuITFLxCcAmkxVA5xh9l9LJAIe6ginKsjl8g3o3EcTxQAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACSOjoAAP8BAAEAAAAALQArAAAoY29nbml0by1pZGVudGl0eS51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACLq6AB0AFwAY6uoAAQA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":25,"flow_packet_id":4,"flow_first_seen":1490976037754,"flow_last_seen":1490976037809,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0403{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0g1VAAOoG3s4ixzTwrBAq2AG7ldw4CtRt0R22qYAQAHcydQAAAQEICkQXVzkA9k0U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":211,"pkt":"ePiC0\/vCAMDKkVoBCABFAADFg1ZAAOoG3jwixzTwrBAq2AG7ldw4CtRt0R22qYAYAHciBwAAAQEICkQXVzkA9k0UFgMDAFkCAABVAwM1Z0I3hU8\/U5RQe3Z00c0obd2iFFa8QOesy4Iwo9B3hyCuITFLxCcAmkxVA5xh9l9LJAIe6ginKsjl8g3o3EcTxcAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoHdMKptQnk8A3bs848dNLbLMTjoBCy7OmsLLWnBReSU837AUN6aAoNg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":25,"flow_packet_id":6,"flow_first_seen":1490976037754,"flow_last_seen":1490976037920,"flow_tot_l4_data_len":613,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":102,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0404{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+K1AAEAGE3esECrYIsc08JXcAbvRHbapOArU\/oAQAVsw9AAAAQEICgD2TSBEF1c5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":117,"pkt":"AMDKkaPvePiC0\/vCCABFAABn+K5AAEAGE0OsECrYIsc08JXcAbvRHbapOArU\/oAYAVsZFwAAAQEICgD2TSBEF1c5FAMDAAEBFgMDACgAAAAAAAAAADqIrS+IxAYMd3f9R8MMx7aKyuOPjPbmgk1vO7jUBOWy","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1611{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976037,"pkt_len":950,"pkt":"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","pkt_caplen":950,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976038,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0g1dAAOoG3swixzTwrBAq2AG7ldw4CtT+0R26UIAQAH4uFgAAAQEICkQXV00A9k0g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976038,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1102{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976038,"pkt_len":582,"pkt":"ePiC0\/vCAMDKkVoBCABFAAI4g1lAAOoG3MYixzTwrBAq2AG7ldw4Ctqm0R26UIAYAH70UAAAAQEICkQXV1kA9k0gccx9r2ACg3Up0sx19Ck4Ty5UJP67\/vfpvGVCcHiOr8RwlVlfJM8T6YpWKaRU00yurVRjjCp4M5NNGc8XKTk8ZmNsAxvJp+d37naVPUwdktMDNzy68j3yOj2otTs6zSSrL6DeqxTW91SSWhXqOWOnQo3vMcEOhAFIz8+AO3EdxeouTvpz7CSNBYWzB5gH7oceADKTgQlrTtKW8E9VYsCI4YBPJHj7o6GxQKsQ+by7yP+UGWBlP6Bz6peBnanF5rIQWoJ7ig23OqChTdexeDSU9HE5lbl6ID6rDi8dQhnenUGZjMOEQ4G0RkxiGI1K2BhLaF\/nvfzCvscmyMaE4odOv1yTR2INpLvAUBK1Dx0AmYKHdF\/vUneBKy\/TXVhCzUT8sciFi3Fj+CpyLD7q4krOh57m2N6PuOe6JpMsP0drWP1K\/SOkj+PwMWaV8kUaadPXrqv2LZi9+pqbxESwJKesPstp8M2H+euAkR5fUMJe1rQjWPSQNtc\/7iI3xNZhDCNt7vFnwBUHSvgydL78m+Yn4lVYIXU\/5QrJrm1ukuH0jekf8Be5tPsj+CosnDhQE5pWtsY2PsgEw+fg\/gqhD547gOxY3DLLroSzCHZbH4lucuNvhzARKIWePfTfECFXgXm9HtJiuRnZXzRQqxRAkuLQxQsjamMK+Wbxwurv3h4DQsEfYfHQ","pkt_caplen":582,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976038,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+LBAAEAGE3SsECrYIsc08JXcAbvRHbpQOArcqoAQAXElXwAAAQEICgD2TSxEF1dZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":26,"flow_packet_id":1,"flow_first_seen":1490976041150,"flow_last_seen":1490976041150,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABBWlNAAEARM1+sECrYrBAqAdZmADUALY4\/ocgBAAABAAAAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":26,"flow_packet_id":1,"flow_first_seen":1490976041150,"flow_last_seen":1490976041150,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0443{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":95,"pkt":"ePiC0\/vCAMDKkaPvCABFAABR0jdAAEARu2qsECoBrBAq2AA11mYAPRDBociBgAABAAEAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAAAUABDRe6IY=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":26,"flow_packet_id":2,"flow_first_seen":1490976041150,"flow_last_seen":1490976041151,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":27,"flow_packet_id":1,"flow_first_seen":1490976041156,"flow_last_seen":1490976041156,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8TnBAAEAG+H6sECrYNF7ohrJdAbvhYQATAAAAAKAC\/\/9vSwAAAgQFtAQCCAoA9k5jAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwBzRAAOcGmMY0XuiGrBAq2AG7sl2f4NcN4WEAFHASH\/5jwQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnFAAEAG+JGsECrYNF7ohrJdAbvhYQAUn+DXDlAQAVeuMgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":261,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3TnJAAEAG98GsECrYNF7ohrJdAbvhYQAUn+DXDlAYAVcoRwAAFgMBAMoBAADGAwO\/f09SaeVtExBhd3Gv\/ERXGLhlRtygdI3ZdlzQ0IY6FAAAILq6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfUpKAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAh6egAdABcAGFpaAAEA","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":27,"flow_packet_id":4,"flow_first_seen":1490976041156,"flow_last_seen":1490976041217,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2351{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1456{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":27,"flow_packet_id":7,"flow_first_seen":1490976041156,"flow_last_seen":1490976041279,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+0387{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnNAAEAG+I+sECrYNF7ohrJdAbvhYQDjn+DcwlAQAWKnpAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnRAAEAG+I6sECrYNF7ohrJdAbvhYQDjn+DidlAQAW2h5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTnVAAEAG+I2sECrYNF7ohrJdAbvhYQDjn+Djz1AQAXmggAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":380,"pkt":"AMDKkaPvePiC0\/vCCABFAAFuTnZAAEAG90asECrYNF7ohrJdAbvhYQDjn+Djz1AYAXn5XAAAFgMBAQYQAAECAQAtzgORy\/g0g9vj2nHseW1WiPYwT4NhYLZDOMBm5MwopvvT6unfvXsWITHkcQBQ36M2UUO+dc\/0G2ILvmjO2zj78a3B8U9KL8ypPVL07jTTphRDvQ8Kf7ABFi4qL+Rv+iPgxKYp6YX5n1w36B6667LHkNCOOxvxG09MjDdzSdEnvNDtM87TdbjSkpGoS\/7R2LjC7Pb4759uDYBg7PUE3W5a6NS81NkWbHUmOaezy3fpfqOUvPgVsr3vOkgp940tmhXIobGeK0HN0jpk8i4xKJ6\/2E5cc+EYCUN\/9UvXrXCW7Yo+w1vHTmGyMYn2XLRcDsqSFZpeEcz8xHXI3W6M7zU4FAMBAAEBFgMBADDVDr1gu1wRttkhVNFJG5m0o0VRbOIw5nMFfmFU5flHVAYzqmYBp7fx\/y5SoL4pZTg=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoDFhAAOcGk6o0XuiGrBAq2AG7sl2f4OPP4WECKVAQf\/QgvwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjDHpAAOcGk000XuiGrBAq2AG7sl2f4OPP4WECKVAYf\/QnqQAAFAMBAAEBFgMBADBEgj5BQlmqnjck6gJV3g3MD77DFNz8x0Ta4FpV9OmMaRgBcq5cWGP4bkCGZehVgXQ=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":28,"flow_packet_id":1,"flow_first_seen":1490976041384,"flow_last_seen":1490976041384,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA807JAAEAGczysECrYNF7ohrJeAbv1uZ3IAAAAAKAC\/\/+9JQAAAgQFtAQCCAoA9k56AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTndAAEAG+IusECrYNF7ohrJdAbvhYQIpn+DkClAQAXme\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1864{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":1136,"pkt":"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","pkt_caplen":1136,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":29,"flow_packet_id":1,"flow_first_seen":1490976041400,"flow_last_seen":1490976041400,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ul5AAEAGjJCsECrYNF7ohrJfAburivQiAAAAAKAC\/\/+w9wAAAgQFtAQCCAoA9k58AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":30,"flow_packet_id":1,"flow_first_seen":1490976041428,"flow_last_seen":1490976041428,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40200,"dst_port":8080,"l4_proto":"tcp"}
+0418{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G65AAEAGvmusECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/V3gAAAgQFtAQCCAoA9k5+AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":31,"flow_packet_id":1,"flow_first_seen":1490976041434,"flow_last_seen":1490976041434,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38391,"dst_port":8080,"l4_proto":"tcp"}
+0418{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8hqRAAEAGEYasECrYwKgLAZX3H5Abo8jbAAAAAKAC\/\/+78QAAAgQFtAQCCAoA9k5\/AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFEAAoAABAAD0Gmy7AqAsBrBAq2B+QlfcAAAAAG6PI3FAUAABzNwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwm7lAAOcGBEE0XuiGrBAq2AG7sl5u82R89bmdyXASH\/5VMQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07NAAEAGc0+sECrYNF7ohrJeAbv1uZ3JbvNkfVAQAVefogAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX07RAAEAGcl+sECrYNF7ohrJeAbv1uZ3JbvNkfVAYAVcAGwAAFgMBAOoBAADmAwOSkZ7MV5tRrPXYmwy49debN2XXTGXQ0IImU9DOeZ6S4yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACJqaAB0AFwAYysoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":28,"flow_packet_id":4,"flow_first_seen":1490976041384,"flow_last_seen":1490976041444,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0400{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwNmhAAOcGaZI0XuiGrBAq2AG7sl88IzNAq4r0I3ASH\/6tEQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoul9AAEAGjKOsECrYNF7ohrJfAburivQjPCMzQVAQAVf3ggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXumBAAEAGi7OsECrYNF7ohrJfAburivQjPCMzQVAYAVegPwAAFgMBAOoBAADmAwPMxcZuQn9QgwOiuLXeL1fCgh6paRvCicrfIqGcHwVG8yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgysrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9ysoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAYamoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":29,"flow_packet_id":4,"flow_first_seen":1490976041400,"flow_last_seen":1490976041448,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0396{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoOWdAAOcGZps0XuiGrBAq2AG7sl88IzNBq4r1ElAQf\/h38gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9OWlAAOcGZkQ0XuiGrBAq2AG7sl88IzNBq4r1ElAYf\/hRjgAAFgMBAEoCAABGAwFY3n0pDLntLgGwykQIDtHcfl7EStFhzm1bm1QlaW9friCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":29,"flow_packet_id":6,"flow_first_seen":1490976041400,"flow_last_seen":1490976041498,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdOW5AAOcGZl80XuiGrBAq2AG7sl88IzOWq4r1ElAYf\/geWwAAFgMBADDsOjqesfDUuV579G+uPu83a\/hqraVpKsCM2bckzAXis8k6OSXRw1uoTW+upJFbDWk=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoumFAAEAGjKGsECrYNF7ohrJfAburivUSPCMzllAQAVf2PgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoumJAAEAGjKCsECrYNF7ohrJfAburivUSPCMzy1AQAVf2CQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjumNAAEAGjGSsECrYNF7ohrJfAburivUSPCMzy1AYAVf5oAAAFAMBAAEBFgMBADDA0tOeFpmMpXJArHJfzDEeAdxCbwhctWkDJ4\/AcSBVfFMlW9BPadbUTr5VYo5O1Bg=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAon6JAAOcGAGA0XuiGrBAq2AG7sl5u82R99bmeuFAQf\/ggEgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9n6RAAOcGAAk0XuiGrBAq2AG7sl5u82R99bmeuFAYf\/jNrQAAFgMBAEoCAABGAwFY3n0pbDqO6chsJ3SoiJ8G0aBxUtUUc4QIfjuGKH\/QpiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":28,"flow_packet_id":6,"flow_first_seen":1490976041384,"flow_last_seen":1490976041502,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdn6ZAAOcGACc0XuiGrBAq2AG7sl5u82TS9bmeuFAYf\/hLQgAAFgMBADCMDbwz1N2klcG9R\/iPv\/mjvmP9rWFYOVWX087nrtQOXmgu6MtSemVy1T2TGAoU778=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07VAAEAGc02sECrYNF7ohrJeAbv1uZ64bvNk0lAQAVeeXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07ZAAEAGc0ysECrYNF7ohrJeAbv1uZ64bvNlB1AQAVeeKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj07dAAEAGcxCsECrYNF7ohrJeAbv1uZ64bvNlB1AYAVeQEAAAFAMBAAEBFgMBADDCb6Qkv0GjdZPHr7ikujbmXp0OhlvSxQw+7CwptxHqDJguNDmtgwQoB68VOlpAVtA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1925{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":1184,"pkt":"AMDKkaPvePiC0\/vCCABFAASSumRAAEAGiDSsECrYNF7ohrJfAburivVNPCMzy1AYAVdTewAAFwMBACAxTfms4wB8vtPCqdftXHT6QU4iyUIwZwtEQ17Ple0jhhcDAQRAmSrSoK2P4rNNyPxLKPQ0W4Jm6E0zmyT82fbYhBwLNFhRuut2fxlzrYKDZf\/NFqg\/thE7+T3mgxG\/asnkOEyjqtwP132REMH6glkfVsvvPaHaBV27Rta849o6DRn45mRqI15KiJ9r\/YzBKkexkpX\/jDwaTHIH3tY8HkeFAMRaxU4g4Zt5xpX48jZ3VmCCi7364i4Wd25GNDC2Q+4A7dcQCDVO+s6sGCybwDoAgTsWWy0tEjA4yXj5sUvZKsewfOqcvJrV\/FCfV6q2l+AxIGt\/DSA7XRZCoiUn5dOb0J8Zict+wQkVNelfLFaqil4WdyyRSaElOrdV3q7c+rhYZFFJI\/wOvufvo1d3uf1rjS\/3dtRWVvn0FQDZ57PlirlH1mmQbPQ\/Bhm34+V79LHyM0sQ4tO6Ax0344zy87NKQM90JAxjkCQ7hRqUUthp7KD\/STeEaIXyujkJzdj7PY63CLYoqDs7n1gVLiqLYQJQoMQRZ3QGaVgCU45I754\/629IfBZEuLn\/AJuFrXf2zJ5YhgwnWWNCGhg6yQfCskvj\/bE80+bd6St2XwLB8RU08h9NTmsBv0mQihJpjfi2WPzW82jGVS3u4Rx6RX6RDd+MhrEcY0hVtj9XFn4zAxgkOztYrbVWSxTV7vPFpJSxhan+ju6fIbKgcjlUwr0wugaaQLMaYsakWu+FPO4+IB09CFk\/MuVzBVFYks4I0ny9U1h1rTCWq32u8sMFBd9malyGwzUU99lWFFUXPqu67yP7BdH\/uDnCiGE8x1NdPl2Yj07ugi3PAR33Q79lUrfaOtXjLg3+JLyK4WNDoNHgsrIZBNCTDO9sKY3XKRGOBQprwQ9LEns24t9zxwJzMSQGLTNBXLFjZmgNdN+O\/OKjpTuEEBMjwakm5mtma3+OfmM6798a83mD\/4\/oeCt4tMKVNbUkyK9czYdNQimwbSFS5yWuIeXSwdh3Rf2ZZ\/\/9GxST72rjA9vOLFJWpqjyz4KPZ0\/ITGrn8i7P+pXjYEWJwxMqqkm0JXYwzPEJfytiPkYu9Ybh3wWWY1OoQjPSNwCEO+92GaeQGdz1Y0Crtgk4ZllC\/Mz9NOpImcAGoMk4gmarh72YjdBPHIRy3LyQSlpifSXI5V3uCvjlJe8aLuYlz0m1OyE5RdxoY4boo9Md+0Nnz8PIsL5Ba2vvDUvCCFusrLVfA4j+\/dJpNWL7DfU2C82B8v7Y0xHeAhNKbi5+oekt2i2Vb5VQTS6lv+Jcm+FRo2w0MMGITxDiKaFpETEAgF1z6cduCh8tPGhbQqsdjESvZVuRIwSGg10mShDusW1jLRdUhMw5fWvGqhSh02pfd736dm2M35c3JcE+0O40ZuAr6iO4V+o4mhkrL88zia5hZrpAtydnyd07IwegspGXsKheywQE+gtlDT7Q4pu117BkVMTICcYGEcKLC6Tv20qBXJibH0tV\/M8=","pkt_caplen":1184,"pkt_type":2048,"pkt_ipoffset":14}
+1886{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":1152,"pkt":"AMDKkaPvePiC0\/vCCABFAARy07hAAEAGbwCsECrYNF7ohrJeAbv1uZ7zbvNlB1AYAVeX1gAAFwMBACD\/axf1V2xGWO2LEeHgsA0orIa6ceKGkns7zwYfCMwpqhcDAQQgqvjuHV3FuDKs0hj91Xc3KdauAQPJ1lry41HTa9WmQdod1QArztzawM9ERQGwI52sdTzhSA1mJQ3nxwop1rBb\/IVsATErzn1tQvCPaPkeW3Wq9rZznETH3YUQIGExc0pffBJA9QdLX+sdF5ZKL367Tdr8xFBsr0pEEquWpnq0vJkzOmfRilk8ALso756W9bx5dxuSxbm9poK0urq\/3hVLd5VHRJ+4+nxh61UNdBWlpt7+luRu55UQBRdXoiYhri3YeWiIC5X2uyps4zkinnHvH6W8+0idWgf4\/SGJ\/Syg\/vxsUCYf2LVkEA\/ET\/HLzJIRJJkFmq7JpWtGOxqangP64AjuZKP6CN7FrKMYdVHfnNo3MygSP2d0A23jz\/xZvdsMJCEEchXjwbpiWcRNsjufZu0CqXWj4rmy+pyit6Ve\/+uLLtvU66AxEzHsQixTRro6qakYFWsl2NdHwOzT35wO2eGz5mHVZ86jf32QAU3yRApZm4alQ5R9Ih9lnBxw+F3uA+JVpMa0b5KLv5mSXFFwPEabJxnDMfBaC3IhQt5dMrodlHTht8pnXTfecsmcNliHGylkMyQRMTjmb5iovMzG1T8+qTFoPmeUIKRsCbq1\/8AEwTFyzVqxJQzqYjLI4rorfg1r8vmxBfgk2tsJd8vrWt5rUiw7M0PXOp+dDcpMju9cM9B0Ei5ZIpLmD+xU9OcMMN6jlf8NwDm0ddALlN6KzqktoDnz0IwpFpMzzTDSjeBFRFdz4S8V4VL1Af3yTJ7CHFKl2UV2pt3d9hwAp4ENDP6ESw2S51r\/eXcAko8Q94mCdlOCw+lZAhy5FH4palQP5D9WQ2rdY\/d60bDY5dsdw1vYythF8NB8KsVS+o\/XhForzSQtzYa21ngv7ik3jNtrNB6wMhPuXit4ppzB5fNohFjM4i+U\/VTjezao1nFJIKeOk1X+dOGc81yPgMSppqqIJde6bepyucPoKDofPuc+bg\/7JGFaMkTAIZna6KpgZ+WmLEQd2bKR0CtsVRciI2HaSsMnTRDZVN0obHBCwqY\/rLuznMUj2bgHA1ZE\/QLilnyeMWnqlBrum6wbYRMKEQTkJddoJpxSXuNzQqN5q9UFm5cCQ\/x9\/T2X7XHetGr8f9Uu9YLTEzuPq88XMbvgE3PyVowE\/A\/CnqmFVWvTOyM9LSCvf1AjMQI1ypDj9MP2+neRFXvuIPw7Gm3J0xE\/yGZCppQh\/VLG\/ekJLsVeVAoWY2BrR0Bd+PRPYP9yxNSvmqNCxOm1L\/PJeKvnIpF+qc46U7WPTzu1RMF37w1S2lGIUUqgIx\/SZskRYMNCxxFu8C1U1\/wYx6O\/sh35MrEe+pSlfKygIZRMOv\/88KcRgpduVhgpmVSKhtu8ajRmhJD+F+GUlbEyxBuo6aACCNCcQ9fX","pkt_caplen":1152,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoPMBAAOcGY0I0XuiGrBAq2AG7sl88IzPLq4r1TVAQf\/d3LgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAojT9AAOcGEsM0XuiGrBAq2AG7sl5u82UH9bme81AQf\/cfTgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoPtJAAOcGYTA0XuiGrBAq2AG7sl88IzPLq4r5t1AQf+Vy1gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1528{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAojlhAAOcGEao0XuiGrBAq2AG7sl5u82UH9bmjPVAQf+YbFQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1522{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoumVAAEAGjJ2sECrYNF7ohrJfAburivm3PCM3EFAQAV3uGQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07lAAEAGc0msECrYNF7ohrJeAbv1uaM9bvNoTFAQAV2WWQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":32,"flow_packet_id":1,"flow_first_seen":1490976041680,"flow_last_seen":1490976041680,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp"}
+0417{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzJAAEAGfuesECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9j3AAAAgQFtAQCCAoA9k6YAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":33,"flow_packet_id":1,"flow_first_seen":1490976041770,"flow_last_seen":1490976041770,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp"}
+0447{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":99,"pkt":"AMDKkaPvePiC0\/vCCABFAABVWlRAAEARM0qsECrYrBAqAVOPADUAQZgzlqMBAAABAAAAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQAB","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":33,"flow_packet_id":1,"flow_first_seen":1490976041770,"flow_last_seen":1490976041770,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":34,"flow_packet_id":1,"flow_first_seen":1490976041806,"flow_last_seen":1490976041806,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WlVAAEARM2KsECrYrBAqActtADUAKHKAa+oBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":34,"flow_packet_id":1,"flow_first_seen":1490976041806,"flow_last_seen":1490976041806,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl0nZAAEARuxesECoBrBAq2AA1U48AUSKClqOBgAABAAEAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQABwAwAAQABAAAAOQAENu8Yug==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":33,"flow_packet_id":2,"flow_first_seen":1490976041770,"flow_last_seen":1490976041866,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.24.186"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":35,"flow_packet_id":1,"flow_first_seen":1490976041870,"flow_last_seen":1490976041870,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8YDpAAEAGs\/CsECrYNu8YuoTjAbvEzS6RAAAAAKAC\/\/9XzwAAAgQFtAQCCAoA9k6rAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":203,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC90nlAAEARurysECoBrBAq2AA1y20AqYS4a+qBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAABMAAoDd3d3A2NkbsAQwCwABQABAAAA+AAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAAAgABDRV0djAQgABAAEAAAAIAAQ0VdHFwEIAAQABAAAACAAENFXRj8BCAAEAAQAAAAgABDRV0Xo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":34,"flow_packet_id":2,"flow_first_seen":1490976041806,"flow_last_seen":1490976041938,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.216"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":36,"flow_packet_id":1,"flow_first_seen":1490976041942,"flow_last_seen":1490976041942,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8BJdAAEAGWQ+sECrYNFXR2NSLAbvD9kolAAAAAKAC\/\/823gAAAgQFtAQCCAoA9k6yAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwusBAAOcGsnU27xi6rBAq2AG7hOPN4I6FxM0uknASH\/5nFQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYDtAAEAGtAOsECrYNu8YuoTjAbvEzS6SzeCOhlAQAVexhgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":37,"flow_packet_id":1,"flow_first_seen":1490976041961,"flow_last_seen":1490976041961,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8261AAEAGgfisECrYNFXR2NSMAbsYT5UZAAAAAKAC\/\/+XjgAAAgQFtAQCCAoA9k60AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":281,"pkt":"AMDKkaPvePiC0\/vCCABFAAELYDxAAEAGsx+sECrYNu8YuoTjAbvEzS6SzeCOhlAYAVd4ugAAFgMBAN4BAADaAwPrd1S1ddQk7rUlC7xdTTn0up1nnk\/tmx0cHtuMmn3chgAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAkVpaAAD\/AQABAAAAACwAKgAAJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYuroAAQA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":35,"flow_packet_id":4,"flow_first_seen":1490976041870,"flow_last_seen":1490976041962,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0416{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71Iuwz0jww\/ZKJqAScSDA4QAAAgQFtAQCCAptm51vAPZOsgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJhAAEAGWRasECrYNFXR2NSLAbvD9komsM9I8YAQAVdfcwAAAQEICgD2Trdtm51v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976041,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+BJlAAEAGWEusECrYNFXR2NSLAbvD9komsM9I8YAYAVe71AAAAQEICgD2Trdtm51vFgMBAMUBAADBAwO5UA\/iZEVzwxa2fCwy81ITWHfzxsPCnxUHsdFTfcWAvgAAILq6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeAoKAAD\/AQABAAAAABMAEQAADnd3dy5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjq6gABAA==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":36,"flow_packet_id":4,"flow_first_seen":1490976041942,"flow_last_seen":1490976041995,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":38,"flow_packet_id":1,"flow_first_seen":1490976042054,"flow_last_seen":1490976042054,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54413,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8AfNAAEAGW7OsECrYNFXR2NSNAbumNE9OAAAAAKAC\/\/9PagAAAgQFtAQCCAoA9k69AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71Iw+cfkHGE+VGqAScSB8QwAAAgQFtAQCCAps\/wWhAPZOtAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0265AAEAGgf+sECrYNFXR2NSMAbsYT5UaPnH5CIAQAVca0QAAAQEICgD2Tr1s\/wWh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+269AAEAGgTSsECrYNFXR2NSMAbsYT5UaPnH5CIAYAVdplAAAAQEICgD2Tr1s\/wWhFgMBAMUBAADBAwOGZCJ5XClhLW3uSio8xzT8mg+rdruUVrO5OZF9oNZ61QAAIIqKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeCoqAAD\/AQABAAAAABMAEQAADnd3dy5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIamoAHQAXABh6egABAA==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":37,"flow_packet_id":4,"flow_first_seen":1490976041961,"flow_last_seen":1490976042058,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0404{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA01YZAAPMG1SY0VdHYrBAq2AG71Iuwz0jxw\/ZK8IAQAHZfggAAAQEICm2bnXcA9k63","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA01YdAAPMG1SU0VdHYrBAq2AG71Iuwz0jxw\/ZK8IAQAHZfggAAAQEICm2bnXcA9k63","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":36,"flow_packet_id":7,"flow_first_seen":1490976041942,"flow_last_seen":1490976042081,"flow_tot_l4_data_len":1890,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2353{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1261{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":36,"flow_packet_id":9,"flow_first_seen":1490976041942,"flow_last_seen":1490976042082,"flow_tot_l4_data_len":4850,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":538,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","alpn":"h2,http\/1.1","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}}
+1445{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":833,"pkt":"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","pkt_caplen":833,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJpAAEAGWRSsECrYNFXR2NSLAbvD9krwsM9OmYAQAWJY4wAAAQEICgD2TsBtm515","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJtAAEAGWROsECrYNFXR2NSLAbvD9krwsM9UQYAQAW1TMAAAAQEICgD2TsBtm515","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJxAAEAGWRKsECrYNFXR2NSLAbvD9krwsM9Z6YAQAXlNfAAAAQEICgD2TsBtm515","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0BJ1AAEAGWRGsECrYNFXR2NSLAbvD9krwsM9c6IAQAYRKcgAAAQEICgD2TsBtm515","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACyBJ5AAEAGWJKsECrYNFXR2NSLAbvD9krwsM9c6IAYAYQJNgAAAQEICgD2TsFtm515FgMDAEYQAABCQQT7d+0XtsreOeTMuXlOvg\/rKlFL2VsBDwHkngxHgE2ma9QdzkMq59zEHo8jSlx6UwRxQLsdtFJSeuG9FjVOA888FAMDAAEBFgMDACgAAAAAAAAAAD9dOW09+IkxwgBD4Mv+qwkCh5pOD3h9X3\/PaLRQa2A3","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71I2zekUSpjRPT6AScSDSoAAAAgQFtAQCCAptF6XzAPZOvQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0AfRAAEAGW7qsECrYNFXR2NSNAbumNE9Ps3pFE4AQAVdxMgAAAQEICgD2TsJtF6Xz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0\/KJAAPMGrgo0VdHYrBAq2AG71Iw+cfkIGE+V5IAQAHYa3wAAAQEICmz\/BaoA9k69","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":37,"flow_packet_id":6,"flow_first_seen":1490976041961,"flow_last_seen":1490976042149,"flow_tot_l4_data_len":1858,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2355{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc\/KRAAPMGqGA0VdHYrBAq2AG71Iw+cf6wGE+V5IAQAHYW\/gAAAQEICmz\/BasA9k69AwBIMEYCIQDRlQQ8KC2R\/bvOeWJr0FGedxbjE4OglejZEYKSCHekRQIhALbGyJPwAagwlRnFD5iqE1ZzSTO6uadnKEazPJcW2sRnMA0GCSqGSIb3DQEBCwUAA4IBAQA65KlsAxxtgfs05qV0ywTqM6qGzBkMIgJzJpCh9OR+X+STrfjphnLQlOwIuHxiF0oVphsf9oYW6TYQimBIKoFpP94WbG2ojsr39YJ6kiDhudt3ef24QnZ3AtnXM5OLVv46iwZst4TwdwO3\/Ialn7ql3sVX7+13yscEXfwfMT0JI1yzl+vZ8tR6bc5X9HqwjuADJelImPs\/TxshDt3JRhbUuKcFxjaEcEtRqoGemgZgEpRnifUSBvnl01IVzb71DGWuBpx0qrpruMAUU1lOJrg\/rwQMSXC2lSZDiDn1cjK0z+XLi7x86N\/7jW6zKh5RjSgrr6H7ZhiwtwpJzLsjT1CXAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1261{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":37,"flow_packet_id":8,"flow_first_seen":1490976041961,"flow_last_seen":1490976042150,"flow_tot_l4_data_len":4818,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":602,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","alpn":"h2,http\/1.1","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}}
+1454{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":833,"pkt":"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","pkt_caplen":833,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027BAAEAGgf2sECrYNFXR2NSMAbsYT5XkPnH+sIAQAWIUQAAAAQEICgD2Tsds\/wWr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027FAAEAGgfysECrYNFXR2NSMAbsYT5XkPnIEWIAQAW0OjQAAAQEICgD2Tsds\/wWr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027JAAEAGgfusECrYNFXR2NSMAbsYT5XkPnIKAIAQAXkI2QAAAQEICgD2Tsds\/wWr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA027NAAEAGgfqsECrYNFXR2NSMAbsYT5XkPnIM\/4AQAYQFzwAAAQEICgD2Tsds\/wWr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACy27RAAEAGgXusECrYNFXR2NSMAbsYT5XkPnIM\/4AYAYQ7RgAAAQEICgD2Tshs\/wWrFgMDAEYQAABCQQRluscjGQCdu2XvVDVVXa\/SQCWnUOCc1iZw0uA9uJZLqIe+d90h7hytR5HvddSVZ5aMYBSIw2WcPXrYxJumqCNDFAMDAAEBFgMDACgAAAAAAAAAAFrVvn4O38YlWpUudaUIg3u9Lu6NxcADdHy7FN31erMV","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":308,"pkt":"ePiC0\/vCAMDKkVoBCABFAAEm\/KdAAPMGrRM0VdHYrBAq2AG71Iw+cgz\/GE+WYoAYAHYYogAAAQEICmz\/BbAA9k7IFgMDALoEAAC2AAAqMACwVFa0PclIpB\/guv14R\/HQ9GteI7odZXPvkC3ltYcU5uq540M5poMRfqNgv\/QJ1kZl8GNPBJjVcrNYCXs12yqQpY72y7q6xeUT1bdntoSsbh\/5m9bcyW+LA9XB1HXChQyCRRxjkjZo+9UY5L+Vaqp6z9Gp1MnKdLhHwly5LFO27I5mZJJvujguzRxYIo233J4jEO8tGMiQlX4BVbUzzWLN\/Auy3tO8YKdwQZDUtrvpeDAUAwMAAQEWAwMAKArtHNlooDEGOoYdz+vQTrnCUo2Iy80xSbRwwrcl7vNB6MJiPH+aIlc=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":281,"pkt":"AMDKkaPvePiC0\/vCCABFAAELYD1AAEAGsx6sECrYNu8YuoTjAbvEzS6SzeCOhlAYAVd4ugAAFgMBAN4BAADaAwPrd1S1ddQk7rUlC7xdTTn0up1nnk\/tmx0cHtuMmn3chgAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAkVpaAAD\/AQABAAAAACwAKgAAJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYuroAAQA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAozthAAOcGnmU27xi6rBAq2AG7hOPN4I6GxM0vdVAQf\/wx\/gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoG\/5AANsGXUA27xi6rBAq2AG7hOPN4I6GxM0vdVAQf\/wx\/gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcG\/9AANsGV4s27xi6rBAq2AG7hOPN4I6GxM0vdVAQf\/wgmAAAFgMDAGwCAABoAwMmtKBZx\/u7oCUrDiVw9Sf\/yT7y2V5hEh17RXa5URvIlCAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAg\/wEAAQAACwAEAwABAgAFAAAAEAALAAkIaHR0cC8xLjEWAwMLXAsAC1gAC1UABhMwggYPMIIE96ADAgECAhA4NltvtzQZFjv8ve7WrL1kMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYwNTMxMDAwMDAwWhcNMTcwNjI2MjM1OTU5WjCBgTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxGTAXBgNVBAoMEEFtYXpvbi5jb20sIEluYy4xMDAuBgNVBAMMJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKXcGbXxOrpLbSVz1WkSGdOoQe5mOSrPSipk7JhfXK7xeLV9EIeNBuFrZZ2JZEF\/T4BDidLNCjBenxkICR9k1ltsHLlgk98tozeORSexEAFwZZZ9s8DgT4svJHN6DknTZB33LMrl0uZtYGMYTJtg2i7zDyXDxOLI1n18e+5F2KQpK5furnmaXxpwezrh7zkJJWH83xemhzKvGTf2P7xdwQctiL8MA0GTOV9GzToVw1xTG\/fau1xVatZmUQ6sGqK6xGKs+WZbRF9Mt4qMTd8kDtoCqmVTR+TyHHj2qCp1DarPl6Gd6QI\/kcrSDIB3BKPyHONFqOCqSOb229mecsrdElsCAwEAAaOCAoMwggJ\/MDIGA1UdEQQrMCmCJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABVQfvs54AAAQDAEYwRAIgCg5bNh62K\/b2zUGTsrOfXRQ2hEOpUa4\/UZNWRL0DuRUCIC9U2rEr7y4HeC90xoTunNK9D9jfY4DC\/G+LRXCIr\/RIAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFVB++ztQAABAMARzBFAiAvW0BkxINB35W5rlhLG8DJboczX1rvev\/2LK5J7Okw4wIhAPdIkpGjTs1LVBwcD6WVj8wFfprle65WhoKwU3rdR0bKMA0GCSqGSIb3DQEBCwUAA4IBAQAuMikuMxAokEDkZMhLHxehHQqRelzQgDZAxTHsf0TNYtQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":35,"flow_packet_id":8,"flow_first_seen":1490976041870,"flow_last_seen":1490976042302,"flow_tot_l4_data_len":2102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":262,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2357{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1163{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":35,"flow_packet_id":10,"flow_first_seen":1490976041870,"flow_last_seen":1490976042302,"flow_tot_l4_data_len":5062,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":506,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","server_names":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=mobileanalytics.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"87:AD:E9:2D:E8:42:F0:5C:3A:09:13:00:12:93:59:04:84:C3:E2:2D"}}
+1219{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":669,"pkt":"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","pkt_caplen":669,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYD5AAEAGtACsECrYNu8YuoTjAbvEzS91zeCUOlAQAWKq5AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYD9AAEAGs\/+sECrYNu8YuoTjAbvEzS91zeCZ7lAQAW2lJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYEBAAEAGs\/6sECrYNu8YuoTjAbvEzS91zeCfolAQAXmfZQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoYEFAAEAGs\/2sECrYNu8YuoTjAbvEzS91zeCiCVAQAYSc8wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0+LFAAEAGE3OsECrYIsc08JXcAbvRHbpQOArcqoARAXEjsQAAAQEICgD2TtlEF1dZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0AfVAAEAGW7msECrYNFXR2NSNAbumNE9Ps3pFE4ARAVdxGQAAAQEICgD2TtptF6Xz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA04wJAAPMGx6o0VdHYrBAq2AG71I2zekUTpjRPUIARAHJx3wAAAQEICm0XphEA9k7a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":97,"pkt":"ePiC0\/vCAMDKkVoBCABFAABTg1pAAOoG3qoixzTwrBAq2AG7ldw4Ctyq0R26UYAYAH5HlgAAAQEICkQXW5gA9k7ZFQMDABod0wqm1CeTwtRh\/BYnpdqNdoHINbL1W8\/0Gg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0AfZAAEAGW7isECrYNFXR2NSNAbumNE9Qs3pFFIAQAVdw9QAAAQEICgD2Tt9tF6YR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976042,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G69AAEAGvmqsECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/VegAAAgQFtAQCCAoA9k7iAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzNAAEAGfuasECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9jeAAAAgQFtAQCCAoA9k78AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":39,"flow_packet_id":1,"flow_first_seen":1490976043611,"flow_last_seen":1490976043611,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":77,"pkt":"AMDKkaPvePiC0\/vCCABFAAA\/WlZAAEARM16sECrYrBAqAalWADUAK0G7veEBAAABAAAAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":39,"flow_packet_id":1,"flow_first_seen":1490976043611,"flow_last_seen":1490976043611,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":60,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":35085,"pkt_ipoffset":14}
+0180{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","type":35085}
+0440{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":93,"pkt":"ePiC0\/vCAMDKkaPvCABFAABP0pFAAEARuxKsECoBrBAq2AA1qVYAO\/ZCveGBgAABAAEAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAHADAABAAEAAAAbAARIFc6H","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":39,"flow_packet_id":2,"flow_first_seen":1490976043611,"flow_last_seen":1490976043811,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":43,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"72.21.206.135"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":40,"flow_packet_id":1,"flow_first_seen":1490976043814,"flow_last_seen":1490976043814,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JoxAAEAGJqusECrYSBXOh6SRAbtDcGnhAAAAAKAC\/\/+2eAAAAgQFtAQCCAoA9k9tAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":41,"flow_packet_id":1,"flow_first_seen":1490976043814,"flow_last_seen":1490976043814,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8bx1AAEAG3hmsECrYSBXOh6SSAbsCViBwAAAAAKAC\/\/9BAwAAAgQFtAQCCAoA9k9tAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwnhhAAOcGCCpIFc6HrBAq2AG7pJISbmyuAlYgcXASH\/4uVQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobx5AAEAG3iysECrYSBXOh6SSAbsCViBxEm5sr1AQAVd4xgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1bx9AAEAG3V6sECrYSBXOh6SSAbsCViBxEm5sr1AYAVf8bgAAFgMBAMgBAADEAwOSNimGSrtikrr4BiDGBJaapUtZMMHJl95wUbRDfz5SFQAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeyoqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":41,"flow_packet_id":4,"flow_first_seen":1490976043814,"flow_last_seen":1490976043870,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0400{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwUbtAAOcGVIdIFc6HrBAq2AG7pJG1BAKQQ3Bp4nASH\/5rUgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJo1AAEAGJr6sECrYSBXOh6SRAbtDcGnitQQCkVAQAVe1wwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1Jo5AAEAGJfCsECrYSBXOh6SRAbtDcGnitQQCkVAYAVcxBAAAFgMBAMgBAADEAwMZJehCtkKewcHD+xJYxAVW6uEh3JFfPpUNQgyNLbS3VAAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAe+rqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIKioAHQAXABhKSgABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":40,"flow_packet_id":4,"flow_first_seen":1490976043814,"flow_last_seen":1490976043875,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0395{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2oZAANwG1sNIFc6HrBAq2AG7pJISbmyvAlYgcVAQARx5AQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQ5xAANwGba5IFc6HrBAq2AG7pJG1BAKRQ3Bp4lAQARy1\/gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQ51AANwGba1IFc6HrBAq2AG7pJG1BAKRQ3Bqr1AQASy1IQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcQ55AANwGZ\/hIFc6HrBAq2AG7pJG1BAKRQ3Bqr1AQASzvwQAAFgMDAGwCAABoAwMaDsHOOMTHKZEyHCAHrbDT1zuy09X6mni39uBP3yYUByDM6LjLs2o++Mqa2LMvaRbhCir4ejKLTMZpm5kQ06LxHcAvAAAg\/wEAAQAACwAEAwABAgAFAAAAEAALAAkIaHR0cC8xLjEWAwMLbwsAC2sAC2gABiYwggYiMIIFCqADAgECAhAjXKYxTs1ErLy+l509p0IQMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTcwMTA3MDAwMDAwWhcNMTgwMTMwMjM1OTU5WjBrMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEaMBgGA1UEAwwRZmxzLW5hLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiX1uuFeHp7s\/u9RJVeIg7pSJGX42DFxgePcypEXRXU1o3cArZybBO2C5Lpg6GM3f45K4KToO0khIXQJB7mXH4bbbQ3+YNFdt7793pBUrodbhy1vNPfwwdBaxsqZ6o5AMBkbpsaSUOdcoTvF9z7DiYKtABRBdPFplNooNjVCUNw9hfksqkbBfzmRXOVJUe6FB2TYGtc1mXHHxQSxvyBoGKYrbiWmhKRKN2oU7shNkGGr+2AY1qqKK5nRLcdy57snSkPzc1VrU7kChpo1TaC6Boi5W9qzCYG13onxMu6WbKte80fZF9+vPs9N9E66H+HyD7t7ZkEmtZMIt4ZpLRyDj9AgMBAAGjggKtMIICqTBaBgNVHREEUzBRghBmbHMtbmEuYW1hem9uLmNhghFmbHMtbmEuYW1hem9uLmNvbYIUZmxzLW5hLmFtYXpvbi5jb20uYnKCFGZscy1uYS5hbWF6b24uY29tLm14MAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFZeQ7n1QAABAMARzBFAiEAyqHpuySuZQoGcM+I+Z0wX00rBtbjPPh\/qzCzZAyUhAoCIAhBWQVD0U3G8MO5dyAwrlvYf2mmJVOHUcCx971NZg0sAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFZeQ7oJwAABAMASDBGAiEA\/RAOoLROyik62vKihf3Zx1TBs1KxISOTjmjnjZrbf64CIQDPCRXOcglmhnaH9koY+cdNR\/1ozx5g78hwrDg9pc0RtzANBgkqhkiG9w0BAQsFAAOCAQEAoKU0Dbk5SCaAT6\/D0vE=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":40,"flow_packet_id":7,"flow_first_seen":1490976043814,"flow_last_seen":1490976043941,"flow_tot_l4_data_len":1833,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2354{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcQ59AANwGZ\/dIFc6HrBAq2AG7pJG1BAhFQ3Bqr1AQASxQFwAAUSPF\/O4EUbS8iqtYW7XeLLFSQkwsNcW0blJi29ViWiroJecqf42koTiJbu21bzXz9NnWx3QZbP7HECKHS8zsIT3wSAg60lzeHBDW9OEnRzctCFd061UcVfmvjmUGgRaAHvZ7KX0Enz4wDCPEaugLfuNk0KjthMfnxC15ABSBgZ3qZBOnTbwhDWuR8lFaApR2cPTN2navpN7AHeLN5gXvpLuLlv7EGbuQwuxCa1AGr9yt4Oc1bKCLJ9usVuCIWzTdGAutoouvNMxOnvMTumCjH0ejhkZjzXQl8u+jtC5TbVZqImKVOkayTYaP10vdNEAbljkABTwwggU4MIIEIKADAgECAhBRP7l0OHC3NEBBjTCTBpn\/MA0GCSqGSIb3DQEBCwUAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM0MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zAfBgNVHSMEGDAWgBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzANBgkqhkiG9w0BAQsFAAOCAQEAXpRWSd2OLWX1wTZRtgPj2p5zGfIfWatYfmwmBSz6gddcIxciLDeT94bsheawo\/0f4jKoRW\/h2fu5r9JwoDJCZb+E\/hYqjz\/Fptajk31D6XQhkTUo9GPpLu339Vx\/S5q1IOkKveBFEAwUlJpdpeNLkegkm0ZAZfQics2Z+IgR9fN\/5jM=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcQ6BAANwGZ\/ZIFc6HrBAq2AG7pJG1BA35Q3Bqr1AQASz7nQAAguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccWAwMGURYABk0BAAZJMIIGRQoBAKCCBj4wggY6BgkrBgEFBQcwAQEEggYrMIIGJzCBnqIWBBRFIAKoi4pln3X69ekKGnjS8DcLnhgPMjAxNzAzMzExNDQ0NTVaMHMwcTBJMAkGBSsOAwIaBQAEFNGxZIuMnw3Ra6OKzStQF9X5z8BkBBRfYM9hkFXfhEMUimAqsvV69EMY7wIQI1ymMU7NRKy8vpedPadCEIAAGA8yMDE3MDMzMTE0NDQ1NVqgERgPMjAxNzA0MDcxNDQ0NTVaMA0GCSqGSIb3DQEBBQUAA4IBAQBF6EKFZ1knzWaKjpd1EHbBhF+vBD+Pb5jGJvQ7g3vJZu86FO4kCtZBxKZ0Otr7kXawtFLPQhcBgtM3WGLDS7\/6wvTJdN4fZ0QyzCzTp6q+8UwYOO7uy7R3q0Sob7e\/vf5C10NcDwAqtk4zy4mw2gjKcjCEchqehMvhhObJZfZiwBSeTqEt4ZSJ0gBT\/rv1ZbLkIKs6y\/yS3trFv2EXbi1dDhXd+s5gDJQ+Z4IuN0AmnUA9gLpR7559r6n42AR1MvfF9nRl2troBchZJCqslWOgwvx\/Ih\/1i9PisnYAZyVoek0PXB\/OG\/kMnOd0UZkuJLSgx4XYAXEX2FgTY+xHklRooIIEbjCCBGowggRmMIIDTqADAgECAhBEaJBjaUgF1sr2\/bnRxAUhMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTcwMjA0MDAwMDAwWhcNMTcwNTA1MjM1OTU5WjBAMT4wPAYDVQQDEzVTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNCBPQ1NQIFJlc3BvbmRlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKorQp99vkC6qr9FMqUYxael0Lsma2caI4BjC9k3ZiMwrp+dvSECA4wbWstHvoB86W8Zmld7Mq1ttWywY03MGfAl96ON0PiOVo1XeDZJuXTb9bQLUSxVXuzgnwObGDuWVTxpZR3qrFjJe8I2AyvTNPjgAGVwl7uVg3Gd5k91Vvn7w0bjxB5zGmYSAubCIfzzpr1LFn\/mgU8Ju+6LT2qsP1lkNl5NbHeONr1r1usqgi\/wvPaimgi5Yv\/cUTSSwwVIrnOXifiKGb\/Rt4Io5QAadG9Xwt\/ZOc2UhoGbgcKuh\/LD\/AYHFyYV6RFExgwbe1R77b2XjRqilbA04jsvcGE8xOsCAwEAAaOCARwwggEYMA8GCSsGAQUFBzABBQQCBQAwIgYDVR0RBBswGaQXMBUxEzARBgNVBAMTClRHVi1ELTM4NTcwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wHQYDVR0OBBYEFEUgAqiLimWfdfr16QoaeNLwNwueMAwGA1UdEwEB\/wQCMAAwbgYDVR0gBGcwZTBjBgtghkgBhvhFAQcXAzBUMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAqBggrBgEFBQcCAjAeGhwgIGh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMBMGA1UdJQQMMAoGCCsGAQUFBwMJMA4GA1U=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1155{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":40,"flow_packet_id":9,"flow_first_seen":1490976043814,"flow_last_seen":1490976043941,"flow_tot_l4_data_len":4793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":532,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}}
+1256{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":688,"pkt":"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","pkt_caplen":688,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJo9AAEAGJrysECrYSBXOh6SRAbtDcGqvtQQIRVAQAWKvNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJpBAAEAGJrusECrYSBXOh6SRAbtDcGqvtQQN+VAQAW2peAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJpFAAEAGJrqsECrYSBXOh6SRAbtDcGqvtQQTrVAQAXmjuAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJpJAAEAGJrmsECrYSBXOh6SRAbtDcGqvtQQWJ1AQAYShMwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976043,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACmJpNAAEAGJjqsECrYSBXOh6SRAbtDcGqvtQQWJ1AYAYRaIgAAFgMDAEYQAABCQQQ2yyWqrplCs8nLaVkdkOZCEd7U4GgWDa9faxzobzdjTI4\/PHgKHmlWUYeHBoQaCi0yLOIgQl18jcTwXDKIApxAFAMDAAEBFgMDACgAAAAAAAAAAPVEUa5Au9r71L4PDHj7x8ZMTILtApPQDLTOyxz1IEXS","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1byBAAEAG3V2sECrYSBXOh6SSAbsCViBxEm5sr1AYAVf8bgAAFgMBAMgBAADEAwOSNimGSrtikrr4BiDGBJaapUtZMMHJl95wUbRDfz5SFQAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeyoqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":42,"flow_packet_id":1,"flow_first_seen":1490976044189,"flow_last_seen":1490976044189,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8KphAAEAGHFesECrYNF7ohrJpAbvSj2UKAAAAAKAC\/\/8X6wAAAgQFtAQCCAoA9k+SAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":43,"flow_packet_id":1,"flow_first_seen":1490976044219,"flow_last_seen":1490976044219,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8UU1AAEAG9aGsECrYNF7ohrJqAbsS8h7YAAAAAKAC\/\/8dtwAAAgQFtAQCCAoA9k+VAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwK9ZAAOcGdCQ0XuiGrBAq2AG7smlcwjrL0o9lC3ASH\/7s8AAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKplAAEAGHGqsECrYNF7ohrJpAbvSj2ULXMI6zFAQAVc3YgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXKppAAEAGG3qsECrYNF7ohrJpAbvSj2ULXMI6zFAYAVcFOAAAFgMBAOoBAADmAwNdGKNvzWhzY9OhvyZ+keLLKk\/7AQzq3mwK9RBmTgVI5yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9qqoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAYamoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":42,"flow_packet_id":4,"flow_first_seen":1490976044189,"flow_last_seen":1490976044269,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0400{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwZ65AAOcGOEw0XuiGrBAq2AG7smoL+FEyEvIe2XASH\/4tIwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoUU5AAEAG9bSsECrYNF7ohrJqAbsS8h7ZC\/hRM1AQAVd3lAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXUU9AAEAG9MSsECrYNF7ohrJqAbsS8h7ZC\/hRM1AYAVcwFgAAFgMBAOoBAADmAwN0wOf7tRdLaTVmj8QP9secnQ3jNnC0CYFCDog2row9lyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB96uoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAY+voAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":43,"flow_packet_id":4,"flow_first_seen":1490976044219,"flow_last_seen":1490976044288,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0396{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGa5AAOcGhlQ0XuiGrBAq2AG7smlcwjrM0o9l+lAQf\/i30QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9GbBAAOcGhf00XuiGrBAq2AG7smlcwjrM0o9l+lAYf\/gsSgAAFgMBAEoCAABGAwFY3n0s+OFwAO8V\/5J6dyfR1C1CHVmCDi1eUwthRlD2rSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":42,"flow_packet_id":6,"flow_first_seen":1490976044189,"flow_last_seen":1490976044331,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0465{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdGbJAAOcGhhs0XuiGrBAq2AG7smlcwjsh0o9l+lAYf\/hUwAAAFgMBADAnovXOyV8I2l\/aGa4Z1HI7eesiC0mUpD5+e4a9mo+VIF8oB\/XZKt\/k1+6yk4TgmJU=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKptAAEAGHGisECrYNF7ohrJpAbvSj2X6XMI7IVAQAVc2HgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKpxAAEAGHGesECrYNF7ohrJpAbvSj2X6XMI7VlAQAVc16QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjKp1AAEAGHCusECrYNF7ohrJpAbvSj2X6XMI7VlAYAVeeJQAAFAMBAAEBFgMBADDD8g9Bb9kx5MvGwE9Ys5aeedceWCQb0ca+0pJaEL07GviC\/1hAQXHEmyDAX6V2svE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1925{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1184,"pkt":"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","pkt_caplen":1184,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAocTtAAOcGLsc0XuiGrBAq2AG7smoL+FEzEvIfyFAQf\/j4AwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9cVFAAOcGLlw0XuiGrBAq2AG7smoL+FEzEvIfyFAYf\/iwjAAAFgMBAEoCAABGAwFY3n0sVxO5X7DJN00ajdk\/JSDP+a79Z9DaYVUUTp6X6SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":43,"flow_packet_id":6,"flow_first_seen":1490976044219,"flow_last_seen":1490976044404,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdcWBAAOcGLm00XuiGrBAq2AG7smoL+FGIEvIfyFAYf\/gdhwAAFgMBADDVrr4si7BrFvG9TfhBXjNkgRRwAR0mp9ik9R+4xk\/I+FfdYAFc76qSetrnK94Ynuw=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoUVBAAEAG9bKsECrYNF7ohrJqAbsS8h\/IC\/hRiFAQAVd2UAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoUVFAAEAG9bGsECrYNF7ohrJqAbsS8h\/IC\/hRvVAQAVd2GwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjUVJAAEAG9XWsECrYNF7ohrJqAbsS8h\/IC\/hRvVAYAVdrywAAFAMBAAEBFgMBADCOHtGSOQoXwoM4ImwkMLq2MGZIqvh70AapoBXhSb7+5uKO+ttg\/KT\/xkU9o7Ij7XU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":42,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoHvlAAOcGgQk0XuiGrBAq2AG7smlcwjtW0o9mNVAQf\/e3DQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":42,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoHyxAAOcGgNY0XuiGrBAq2AG7smlcwjtW0o9qn1AQf+WytQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7BAAEAGvmmsECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/UsgAAAgQFtAQCCAoA9k+qAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1527{"flow_id":42,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+1948{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1200,"pkt":"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","pkt_caplen":1200,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":44,"flow_packet_id":1,"flow_first_seen":1490976044439,"flow_last_seen":1490976044439,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49589,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8t7dAAEAGjzesECrYNF7ohsG1AFD+AvgcAAAAAKAC\/\/9LawAAAgQFtAQCCAoA9k+rAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":42,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKp9AAEAGHGSsECrYNF7ohrJpAbvSj2qfXMI+m1AQAV0t+QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":45,"flow_packet_id":1,"flow_first_seen":1490976044488,"flow_last_seen":1490976044488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8GDVAAEAGLrqsECrYNF7ohrJsAbtUI1eFAAAAAKAC\/\/+juwAAAgQFtAQCCAoA9k+wAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZGJAAOcGO6A0XuiGrBAq2AG7smoL+FG9EvIgA1AQf\/f3PwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZ0xAAOcGOLY0XuiGrBAq2AG7smoL+FG9EvIkfVAQf+Xy1wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1522{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":46,"flow_packet_id":1,"flow_first_seen":1490976044502,"flow_last_seen":1490976044502,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA807lAAEAGczWsECrYNF7ohrJtAbvCg5wLAAAAAKAC\/\/\/w0QAAAgQFtAQCCAoA9k+yAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2010{"flow_id":43,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1248,"pkt":"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","pkt_caplen":1248,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":47,"flow_packet_id":1,"flow_first_seen":1490976044509,"flow_last_seen":1490976044509,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8dBBAAEAG0t6sECrYNF7ohrJuAbv0jjuiAAAAAKAC\/\/8fLwAAAgQFtAQCCAoA9k+yAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":48,"flow_packet_id":1,"flow_first_seen":1490976044521,"flow_last_seen":1490976044521,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8pBJAAEAGotysECrYNF7ohrJvAbuLWOumAAAAAKAC\/\/\/YXQAAAgQFtAQCCAoA9k+0AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwjz9AAOcGELs0XuiGrBAq2ABQwbWwdDtt\/gL4HXASH\/7MNQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot7hAAEAGj0qsECrYNF7ohsG1AFD+AvgdsHQ7blAQAVcWpwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1719{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1050,"pkt":"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","pkt_caplen":1050,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":44,"flow_packet_id":4,"flow_first_seen":1490976044439,"flow_last_seen":1490976044552,"flow_tot_l4_data_len":1104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49589,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/lib\/bootstrap\/img\/glyphicons-halflings.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0400{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw+cBAAOcGpjk0XuiGrBAq2AG7smyRBTVcVCNXhnASH\/5KCwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwOIdAAOcGZ3M0XuiGrBAq2AG7sm0P1nENwoOcDHASH\/7coQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw0BdAAOcGz+I0XuiGrBAq2AG7sm67yvGb9I47o3ASH\/7eewAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwIDxAAOcGf740XuiGrBAq2AG7sm+mtiDui1jrp3ASH\/59bgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDZAAEAGLs2sECrYNF7ohrJsAbtUI1eGkQU1XVAQAVeUfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXGDdAAEAGLd2sECrYNF7ohrJsAbtUI1eGkQU1XVAYAVdYfwAAFgMBAOoBAADmAwMHp\/uCPKzIqLpk\/u5Y5aYh1Wm9z8VlToWpRpTq02qhKCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAYiooAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":45,"flow_packet_id":4,"flow_first_seen":1490976044488,"flow_last_seen":1490976044587,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0387{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07pAAEAGc0isECrYNF7ohrJtAbvCg5wMD9ZxDlAQAVcnEwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBFAAEAG0vGsECrYNF7ohrJuAbv0jjuju8rxnFAQAVco7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBNAAEAGou+sECrYNF7ohrJvAbuLWOunprYg71AQAVfH3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX07tAAEAGclisECrYNF7ohrJtAbvCg5wMD9ZxDlAYAVcZ4AAAFgMBAOoBAADmAwMbir\/VgnkPVKkE\/Xu6XjUcyinI0jcCde8BTkIAsu8XPyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9uroAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAY2toAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":46,"flow_packet_id":4,"flow_first_seen":1490976044502,"flow_last_seen":1490976044595,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0711{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXdBJAAEAG0gGsECrYNF7ohrJuAbv0jjuju8rxnFAYAVf+XwAAFgMBAOoBAADmAwMrTrxt6fXaVT85w7y\/oBbFpkU1n1V7egWaCm1h86YfdiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9uroAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACEpKAB0AFwAYamoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":47,"flow_packet_id":4,"flow_first_seen":1490976044509,"flow_last_seen":1490976044595,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0710{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXpBRAAEAGof+sECrYNF7ohrJvAbuLWOunprYg71AYAVeiCQAAFgMBAOoBAADmAwPd1iOBKblgnVQxNgabPGiTNhU8S0+QlhDIurluRG6LLSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9KioAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACNraAB0AFwAYiooAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":48,"flow_packet_id":4,"flow_first_seen":1490976044521,"flow_last_seen":1490976044596,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0666{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1byFAAEAG3VysECrYSBXOh6SSAbsCViBxEm5sr1AYAVf8bgAAFgMBAMgBAADEAwOSNimGSrtikrr4BiDGBJaapUtZMMHJl95wUbRDfz5SFQAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeyoqAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzRAAEAGfuWsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9isAAAAgQFtAQCCAoA9k\/EAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9Mc5AAOcGbd80XuiGrBAq2AG7sm0P1nEOwoOc+1AYf\/iD+AAAFgMBAEoCAABGAwFY3n0svZffnx292YM8BnDkyDMEgFU6ZUM30vCin0OQyyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":46,"flow_packet_id":5,"flow_first_seen":1490976044502,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0462{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdMdhAAOcGbfU0XuiGrBAq2AG7sm0P1nFjwoOc+1AYf\/i8uQAAFgMBADAjXdzGD8p9YnQldHh9YxALXWAXwN1X3Cmt0G+oL1RCiXl9rY9v1aF9RuFZZWwMLZo=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo9upAAOcGqRc0XuiGrBAq2AG7smyRBTVdVCNYdVAQf\/gU7AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB99uxAAOcGqMA0XuiGrBAq2AG7smyRBTVdVCNYdVAYf\/iJZgAAFgMBAEoCAABGAwFY3n0sVJwAfa+qP+pSlcjK0QgKsfteydM32nitjujcFSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":45,"flow_packet_id":6,"flow_first_seen":1490976044488,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd9vNAAOcGqNk0XuiGrBAq2AG7smyRBTWyVCNYdVAYf\/gbZAAAFgMBADA31L1CpuSX9tvoBVAXj3uLQtt2VG0MIpbTs\/buU9YZgPAOSIfvD1zRD+pCLCOtz2U=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9LZ9AAOcGcg40XuiGrBAq2AG7sm+mtiDvi1jsllAYf\/i0FAAAFgMBAEoCAABGAwFY3n0sREHukAACBv+MMlmfhll64s8dZ38b+V21ucVGlyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":48,"flow_packet_id":5,"flow_first_seen":1490976044521,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0462{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdLaVAAOcGcig0XuiGrBAq2AG7sm+mtiFEi1jsllAYf\/i3vwAAFgMBADCHc5j7nnRvQUlwwt7OEPWVsuRdvVFekiQ9SdJ8bXwjg8Akhsvu1Z2MXY6j060G5Yc=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAov01AAOcG4LQ0XuiGrBAq2AG7sm67yvGc9I48klAQf\/ipXAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9v1RAAOcG4Fg0XuiGrBAq2AG7sm67yvGc9I48klAYf\/hhGwAAFgMBAEoCAABGAwFY3n0s7cPTzU4hNB9icb7jbExZLZvgvDr5J+5XL+M+HiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":47,"flow_packet_id":6,"flow_first_seen":1490976044509,"flow_last_seen":1490976044687,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0387{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo07xAAEAGc0asECrYNF7ohrJtAbvCg5z7D9ZxY1AQAVclzwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo071AAEAGc0WsECrYNF7ohrJtAbvCg5z7D9ZxmFAQAVclmgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj075AAEAGcwmsECrYNF7ohrJtAbvCg5z7D9ZxmFAYAVfKLQAAFAMBAAEBFgMBADDUJkMOPMfhB4anjuCQG2H2kK8Z2iKH2qchiPRHNBXVdsy\/2Or2nf4s8tk0u80fjyA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDhAAEAGLsusECrYNF7ohrJsAbtUI1h1kQU1slAQAVeTOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDlAAEAGLsqsECrYNF7ohrJsAbtUI1h1kQU151AQAVeTAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBVAAEAGou2sECrYNF7ohrJvAbuLWOyWprYhRFAQAVfGmwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBZAAEAGouysECrYNF7ohrJvAbuLWOyWprYheVAQAVfGZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBNAAEAG0u+sECrYNF7ohrJuAbv0jjySu8rx8VAQAVcnqQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdv3dAAOcG4FU0XuiGrBAq2AG7sm67yvHx9I48klAYf\/jWngAAFgMBADBTp7Jz9aMgr18NISt5SXxBTCekZTH4e8bPNl4lMMs7RvTI1v\/zaExyrU5p03BUy4U=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBRAAEAG0u6sECrYNF7ohrJuAbv0jjySu8ryJlAQAVcndAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjGDpAAEAGLo6sECrYNF7ohrJsAbtUI1h1kQU151AYAVfQegAAFAMBAAEBFgMBADCQgznHY7nFQX7otVB6kk0KE6rz1+zQEUjbuqheFQqEzEpu1sNkZv+vVGnOmjPkT40=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2odAANwG1sJIFc6HrBAq2AG7pJISbmyvAlYhPlAQASx4JAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":41,"flow_packet_id":9,"flow_first_seen":1490976043814,"flow_last_seen":1490976044708,"flow_tot_l4_data_len":2283,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":253,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2354{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1156{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":41,"flow_packet_id":11,"flow_first_seen":1490976043814,"flow_last_seen":1490976044708,"flow_tot_l4_data_len":5243,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":476,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}}
+1248{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":688,"pkt":"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","pkt_caplen":688,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyJAAEAG3iisECrYSBXOh6SSAbsCViE+Em5yY1AQAWJyOgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyNAAEAG3iesECrYSBXOh6SSAbsCViE+Em54F1AQAW1sewAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyRAAEAG3iasECrYSBXOh6SSAbsCViE+Em59y1AQAXlmuwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjpBdAAEAGorCsECrYNF7ohrJvAbuLWOyWprYheVAYAVfdlAAAFAMBAAEBFgMBADDj73lySYiOhfQ+c\/xsYQ9JIHYjruRN9aJAcfQKRsHzRcrGOP4kxgM84\/oxVmRNPDc=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjdBVAAEAG0rKsECrYNF7ohrJuAbv0jjySu8ryJlAYAVdF+gAAFAMBAAEBFgMBADBS6H4eziNDdHPyEkEo1A2hjfaPxUXWAYB4xBw3KDUS15F\/rcvtLPHtCkkDshdUF20=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1924{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1184,"pkt":"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","pkt_caplen":1184,"pkt_type":2048,"pkt_ipoffset":14}
+1936{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1200,"pkt":"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","pkt_caplen":1200,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoP9tAAOcGYCc0XuiGrBAq2AG7sm0P1nGYwoOdNlAQf\/emvgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo751AAOcGsGQ0XuiGrBAq2AG7smyRBTXnVCNYsFAQf\/cUKAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJ+JAAOcGeCA0XuiGrBAq2AG7sm+mtiF5i1js0VAQf\/dHiwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":47,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAox3NAAOcG2I40XuiGrBAq2AG7sm67yvIm9I48zVAQf\/eomAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1719{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":1050,"pkt":"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","pkt_caplen":1050,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQzZAAOcGXMw0XuiGrBAq2AG7sm0P1nGYwoOhoFAQf+WiZgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo8LtAAOcGr0Y0XuiGrBAq2AG7smyRBTXnVCNdKlAQf+UPwAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1534{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+1520{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoY3xAANsGSIY0XuiGrBAq2ABQwbWwdDtu\/gL8AVAQf\/CUKQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976044,"pkt_len":237,"pkt":"ePiC0\/vCAMDKkVoBCABFAADfY31AANsGR840XuiGrBAq2ABQwbWwdDtu\/gL8AVAYf\/DyJgAASFRUUC8xLjEgNDA0IE5vdCBGb3VuZA0KeC1hbXpuLVJlcXVlc3RJZDogMzJjYWRlMTgtMTYyYi0xMWU3LWE1ZmMtY2Y0YTg3NGQ5ZjYzDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMjANCkRhdGU6IEZyaSwgMzEgTWFyIDIwMTcgMTY6MDA6NDQgR01UDQoNCh+LCAAAAAAAAAADAAAAAAAAAAAA","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976045,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot7tAAEAGj0esECrYNF7ohsG1AFD+AvwBsHQ8JVAQAVsSCAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976045,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo08BAAEAGc0KsECrYNF7ohrJtAbvCg6GgD9Z03VAQAV0dqgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":45,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976045,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoGDxAAEAGLsesECrYNF7ohrJsAbtUI10qkQU5LFAQAV2LAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBhAAEAGouqsECrYNF7ohrJvAbuLWOzRprYheVARAVfGKgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":47,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBZAAEAG0uysECrYNF7ohrJuAbv0jjzNu8ryJlARAVcnOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo08FAAEAGc0GsECrYNF7ohrJtAbvCg6GgD9Z03VARAV0dqQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot7xAAEAGj0asECrYNF7ohsG1AFD+AvwBsHQ8JVARAVsSBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonKZAAOcGA1w0XuiGrBAq2ABQwbWwdDwl\/gL8AlARAH8S4gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJklAAOcGebk0XuiGrBAq2AG7sm+mtiF5i1js0lARf\/dHiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":47,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAowgFAAOcG3gA0XuiGrBAq2AG7sm67yvIm9I48zlARf\/eolgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAot71AAEAGj0WsECrYNF7ohsG1AFD+AvwCsHQ8JlAQAVsSBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopBlAAEAGoumsECrYNF7ohrJvAbuLWOzSprYhelAQAVfGKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":47,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodBdAAEAG0uusECrYNF7ohrJuAbv0jjzOu8ryJ1AQAVcnNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":49,"flow_packet_id":1,"flow_first_seen":1490976046418,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8dehAAEAG0QasECrYNF7ohrJwAbub2CWZAAAAAKAC\/\/+NLQAAAgQFtAQCCAoA9lBxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWCFAAOcGR9k0XuiGrBAq2AG7snCFN7lwm9glmnASH\/679wAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodelAAEAG0RmsECrYNF7ohrJwAbub2CWahTe5cVAQAVcGaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXdepAAEAG0CmsECrYNF7ohrJwAbub2CWahTe5cVAYAVeQeAAAFgMBAOoBAADmAwN6ZK5x9InIPwhDa7EIgt6sqwDEMRodN28AtgITxHZ1ayCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9qqoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYenoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":49,"flow_packet_id":4,"flow_first_seen":1490976046418,"flow_last_seen":1490976046478,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0710{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXdetAAEAG0CisECrYNF7ohrJwAbub2CWahTe5cVAYAVeQeAAAFgMBAOoBAADmAwN6ZK5x9InIPwhDa7EIgt6sqwDEMRodN28AtgITxHZ1ayCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9qqoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYenoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoR8pAAOcGWDg0XuiGrBAq2AG7snCFN7lxm9gmiVAQf\/iG2AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9R8xAAOcGV+E0XuiGrBAq2AG7snCFN7lxm9gmiVAYf\/i2zwAAFgMBAEoCAABGAwFY3n0uDRrjb7Rl5ESNrS8pG4ecfknI5kybUgs\/rB4e7SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":49,"flow_packet_id":7,"flow_first_seen":1490976046418,"flow_last_seen":1490976046847,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdR\/lAAOcGV9Q0XuiGrBAq2AG7snCFN7nGm9gmiVAYf\/gZFQAAFgMBADANfMyy4KIo6icdo8GNdDAB+esaUQk8GNHXpAT7M+S\/GBPSyuHnlnjn6sgfLR3UVTI=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAodexAAEAG0RasECrYNF7ohrJwAbub2CaJhTe5xlAQAVcFJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAode1AAEAG0RWsECrYNF7ohrJwAbub2CaJhTe5+1AQAVcE8AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjde5AAEAG0NmsECrYNF7ohrJwAbub2CaJhTe5+1AYAVf6agAAFAMBAAEBFgMBADCXENYZpOqpDfaidcix2Zkiw1agLVg3Oemr8fi+l7IOmZljaBmOJER+VpA5LnzMptY=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1928{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":1184,"pkt":"AMDKkaPvePiC0\/vCCABFAASSde9AAEAGzKmsECrYNF7ohrJwAbub2CbEhTe5+1AYAVf6CwAAFwMBACCi7Lh1BwFL8fPMp35fXP847uLu4Dk3P9ZazsRDfb\/kUBcDAQRAqYmwSidZkAlw\/OnwRpz5TnZinzUPwhVSwvIvZ4cy59uAWfK5Zc91VlNesvTXw3xf3+03YxdtX\/E8mgSWM+8qPpTrKQbtKIYIml+5FXxj6fjjLfqefXALU\/Qe2trmQFU4U2JQEYFe6pjl4sCsWtkAgRmUV1c8i0T8Cu1LWmmE6ICG2C6UZvz0Zt7L7hszCVkmQM5+3xTOwqN5YMNQGupOCV6PHf7h0DyK4Wds5xQ40iXDY7o1QB7HuPlNGLMXg0SdVNtaA+EbXCod9RjXdgP4xvqw1uKS6Mqw6Ci2mSYiCdJyCU1Xw5DY\/q4EisoWJlRlIjAdLnclTJaWvQthj6WFENH5ptQYJxWoJjaRULSzgE9I6IIEcsFFKmuTFdQHXpFLFLEAWwHqPIEwMNH5Qq2sE076m7zQf\/NVhDhe+u5fhUqTP8HfgiOiC\/wJ\/L\/gSI5Leam3rhvivOTBYKA+q3wBEyDr2WbxHIFUXAEy13Wu6807DhyizrRVcEcpSrJ7Og05FsN71C7gtElGEVmaCtsZ7NGD1v3mKCm9HJ1GsPJij6\/WYdR+ivgB\/8Iah\/4BgFyF5nQTtGe7JL+f0mTkfW4YCYPpoYOlUs3TDXsvd35PW9gIUrDp7k4BA13\/ykVURGG8TUqfPJMJ3qI982QlI6UsfIvW6\/JNnZz5Dh44kTz2AAgc10LMSEMGTAMKt\/nK7Pu49AvNKl\/\/hdCJrnVSLEL2OBmHZbtOlxCUmdi71RS79hmrFLkL2M2AGrCy7x\/4vti637QEvBS+xr51hDfJtNUoCb7LNrfsiEx2nxaKerAWagtmaxm6pjRnFI+z\/DO+FfoHEXEurBifLcRFZ0KTjCYiYUEA98zQwIS+iSaBf9eluG+7UQMYjLM\/iI0FLve226xYXObPPiDUinNTLhzc1b4d2oJZLgKbEGv+ENs8lCb\/hnhQsxPsS+gaPEhHjjojOPAgrgrnHNHzgxwQyha4OlYRxC96gQ6YacS+WAJf5bMiAKSHiy\/oty1ffIOzB1oTRDugiYvr6Slxcu\/fauU3SvMmgXcrbXlsngTu2W+4ESym\/kWPgCiPkCF4ruCDJbCOptIotAXQ2smjujyy6zNihMGBKeNXybbZd9VHWn7cOXzou5yYqYZtnd39mtWUKchoCSyMxyZe6r3ADUWjZlNZ5KbTy4E2fYF0Do1Xse1koWj9dTAsICjIWvM1wkc\/0k2fS6xiPTX01N5L3CltiP0oRb0fapfMtlR3ElGXkDGi5TRXD453A5SPScnTxqSKJqbCZ7tM7l8NkmcnWXILTgUWS\/tznzXXoFwn7eL1ksoea22clM5iSyxWklLq6jTSJM+e0Mbdk+H3D0sYcOO5XY5nFs9vyT\/WP8EtDljWlAg4SgOQVEyYLkFPSdy+RmQJxyheFMfJrcek9wCTLZJMpsLPPe\/iC8cG5kCE3Ruq0aqE4RWXfdw=","pkt_caplen":1184,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUZ9AAOcGTmM0XuiGrBAq2AG7snCFN7n7m9gmxFAQf\/eGFAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoVRlAAOcGSuk0XuiGrBAq2AG7snCFN7n7m9grLlAQf+WBvAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1519{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976046,"pkt_len":891,"pkt":"ePiC0\/vCAMDKkVoBCABFAANtVfhAAOcGRsU0XuiGrBAq2AG7snCFN7n7m9grLlAY\/bh4VAAAFwMBA0DpzrTTMnZ1U4O4z9z+AwzoNgEJXtoJOG\/lArGBgDwYOnEdGZc3\/al3mVvbCP0pr4bK+KvVCGCpTYQg8M1cbAYp8MHVyUntuYs5zS7aRXsvXgxvg0wVBp3jX3Cu1K5NdzWULAU9c0Pe6zgwuvT6mCW+Mw2AKHdSWdRFkkomvMPSJtDMWiaPfpH6Vx0cO0x9EIu3Rh2Nku5sdzAraKBfTXj8JNaTHJbr8pjxHUV6iNNwBXK2tjYhOL3OxJTwyv8gF0f9nGpID+n6zSluHNqBGJ7QU\/7uaJYFn38ymJ2RaBeZGc1YsKeEEbV\/EfWd5aXp\/Mw9okX5PVNsWmOIyFAb41ajhAqtGGmK05LBG9Gni3eFmUvCV\/\/cR5YUKAujLXmWUyQ4lVjKWEbuGJvvwxult+76dj2Mi6KnYWARY+aytVVQ4n2PuDFMPNpw0KXhVBI5XdEVPGDGfas2QjuR8Aj5vt+6fySO23iWJX1euTerQ48YfdikRQUmwZtNqpyTzJgbua+0pdvEVmjBQ0pXsZY9Thvf+YFfUZwM\/1nBrK6USfxGEZLrtkp3UKxp7sOO2U2a4XXhcDnUESojcX+E3oGqU6UP7gFjAskDdEt3x36r1uTJZtQrePSx3\/Y4LInigsHLAxUfZ7\/2iwy4Q0L\/HQ1gQQ0dvFmh2CD9dNBOJYymMNhb1Pd9MKeNv64ijqECUzlDcsLmNOqzoqeJUs3LDYg4fJXq2lHWcG31Rk6zfvWx\/2rIuxOevZvleQkPSdGXqBD8R56UelYHVW8Cy6gDL+A7Cxo3LEH4cbmVk7TTG2VoLLPvLmzXJFiAjED+I4kokb1VhXhxETbhT0qfUpsAOyE3nWR7av6UHzjNYWek8llsGakCeh65K+yzTXzqLI9O7A53GrVZo8lI+28n7KAQAVDo0979B7fvm0Pd1J0X0YsutB2HwlwrnF4O08CuvGAQo5PzltBKe9Mxthb90lsaOnMHQ+aKODsIB5bLrgncQgilgJxvCmkeynLp2lQ85x7B8UxuXkNN1p4TyadCWSWalib6rZOXrequp4SOVkD3jfIZ5314tYdZXYU8BzQP60xCX9fmhYwmr8IYB2yants4ZIIu2CXl","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":50,"flow_packet_id":1,"flow_first_seen":1490976047014,"flow_last_seen":1490976047014,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JC1AAEAG7\/2sECrYNu8YuoTxAbsotHSAAAAAAKAC\/\/+r6QAAAgQFtAQCCAoA9lCtAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":51,"flow_packet_id":1,"flow_first_seen":1490976047050,"flow_last_seen":1490976047050,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8zEVAAEAGR+WsECrYNu8YuoTyAbvILJz0AAAAAKAC\/\/\/j9wAAAgQFtAQCCAoA9lCxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwYANAAOcGDTM27xi6rBAq2AG7hPHQ2dGWKLR0gXASH\/53JwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJC5AAEAG8BCsECrYNu8YuoTxAbsotHSB0NnRl1AQAVfBmAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0739{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJC9AAEAG7wysECrYNu8YuoTxAbsotHSB0NnRl1AYAVfKZQAAFgMBAP4BAAD6AwPSe8wUiJXpNpYC5p1xsYpcgdnDHHsp6lbLCZ0qkdBUqSAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRysoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIenoAHQAXABgaGgABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":50,"flow_packet_id":4,"flow_first_seen":1490976047014,"flow_last_seen":1490976047075,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":52,"flow_packet_id":1,"flow_first_seen":1490976047096,"flow_last_seen":1490976047096,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Q4ZAAEAGA2msECrYNF7ohrJzAbuRhBMzAAAAAKAC\/\/+poAAAAgQFtAQCCAoA9lC1AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwYitAAOcGCws27xi6rBAq2AG7hPIGkxHQyCyc9XASH\/45RwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAozEZAAEAGR\/isECrYNu8YuoTyAbvILJz1BpMR0VAQAVeDuAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0739{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErzEdAAEAGRvSsECrYNu8YuoTyAbvILJz1BpMR0VAYAVc5bAAAFgMBAP4BAAD6AwOHjgfKXB+EyvQ1n9JLqidhikfJJ6RpsxoH8cEzQ3q86iAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRCgoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIiooAHQAXABjKygABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":51,"flow_packet_id":4,"flow_first_seen":1490976047050,"flow_last_seen":1490976047111,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0395{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwBAANsGcj427xi6rBAq2AG7hPHQ2dGXKLR0gVAQARzB0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwFAANsGcj027xi6rBAq2AG7hPHQ2dGXKLR1hFAQASzAwAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEBwJAANsGcaA27xi6rBAq2AG7hPHQ2dGXKLR1hFAYASzQLAAAFgMDAGQCAABgAwMyP\/fecoHYX\/cGoH7XipkW53idIn\/OYkaLBKM044m2vyAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjMLCDqUBTO\/rZ7qHn8QM08BfjkdQdeSIpRVejewnydMKBVtcQVCnii","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":50,"flow_packet_id":7,"flow_first_seen":1490976047014,"flow_last_seen":1490976047133,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0388{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJDBAAEAG8A6sECrYNu8YuoTxAbsotHWE0NnSM1AQAVu\/9QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABbJDFAAEAG79qsECrYNu8YuoTxAbsotHWE0NnSM1AYAVtp9gAAFAMDAAEBFgMDACgAAAAAAAAAAB5+QHcCy7hTVmLHlCrKIY891MuDynMTvulSegEzf7o6","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+1431{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":820,"pkt":"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","pkt_caplen":820,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwRp1AAOcGWV00XuiGrBAq2AG7snPq5wFokYQTNHASH\/4rBwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4dAAEAGA3ysECrYNF7ohrJzAbuRhBM06ucBaVAQAVd1eAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXQ4hAAEAGAoysECrYNF7ohrJzAbuRhBM06ucBaVAYAVetQwAAFgMBAOoBAADmAwPpgUoR+zK1io939odz8bqrlk+DvqS0v3DALb7a+kUiQCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9SkoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAYGhoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":52,"flow_packet_id":4,"flow_first_seen":1490976047096,"flow_last_seen":1490976047156,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0395{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxWZAANsGs9c27xi6rBAq2AG7hPIGkxHRyCyc9VAQARyD8wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxWdAANsGs9Y27xi6rBAq2AG7hPIGkxHRyCyd+FAQASyC4AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":51,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADExWhAANsGszk27xi6rBAq2AG7hPIGkxHRyCyd+FAYASwSIQAAFgMDAGQCAABgAwOn1fo+swPnLkOwNQbXuOFdWVy\/oC3rjvLrnjYIbdkRCSAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACgGf7sVUH2dueYdvgPH\/6ULIjQ6Sw3FzHOToH9tZ7ISQ8nQCtzL5ihH","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":51,"flow_packet_id":7,"flow_first_seen":1490976047050,"flow_last_seen":1490976047169,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0388{"flow_id":51,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAozEhAAEAGR\/asECrYNu8YuoTyAbvILJ34BpMSbVAQAVuCFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":51,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABbzElAAEAGR8KsECrYNu8YuoTyAbvILJ34BpMSbVAYAVvjlwAAFAMDAAEBFgMDACgAAAAAAAAAAKkrW6jYA92r8fgxBOnEadGYlxCo1\/QzhHlmwLBya6jy","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+1427{"flow_id":51,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":820,"pkt":"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","pkt_caplen":820,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9T+pAAOcGT8M0XuiGrBAq2AG7snPq5wFpkYQUI1AYf\/jAygAAFgMBAEoCAABGAwFY3n0vHwUTKh3kRQicQrFbwZi3ae4Tj1002+Y32pnlTCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":52,"flow_packet_id":5,"flow_first_seen":1490976047096,"flow_last_seen":1490976047217,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0462{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdUAVAAOcGT8g0XuiGrBAq2AG7snPq5wG+kYQUI1AYf\/hlPgAAFgMBADAFstU4O48FFKnsq96DRhn6BmvmDlkeJmD4BEWUoY6SO6YVcyL6Vtc8D2agPyfeZgM=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":192,"pkt":"ePiC0\/vCAMDKkVoBCABFAACyT+pAAOcGT440XuiGrBAq2AG7snPq5wFpkYQUI1AYf\/ipBQAAFgMBAEoCAABGAwFY3n0vHwUTKh3kRQicQrFbwZi3ae4Tj1002+Y32pnlTCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABARYDAQAwBbLVODuPBRSp7Kveg0YZ+gZr5g5ZHiZg+ARFlKGOkjumFXMi+lbXPA9moD8n3mYD","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4lAAEAGA3qsECrYNF7ohrJzAbuRhBQj6ucBvlAQAVd0NAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4pAAEAGA3msECrYNF7ohrJzAbuRhBQj6ucB81AQAVdz\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ4tAAEAGA3isECrYNF7ohrJzAbuRhBQj6ucB81AQAVdz\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjQ4xAAEAGAzysECrYNF7ohrJzAbuRhBQj6ucB81AYAVf\/kgAAFAMBAAEBFgMBADDqNAK1AXXZw2RQSQ0STi12yznXt61cj0tFw85nRFGgzbs\/joEjx\/G8OITcWH6coS8=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZ\/pAAOcGBUQ27xi6rBAq2AG7hPHQ2dIzKLR1hFAQASzAJAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":51,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxWlAANsGs9Q27xi6rBAq2AG7hPIGkxJtyCyhKVAQAUR++wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":51,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":51,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2268{"flow_id":51,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1439,"pkt":"AMDKkaPvePiC0\/vCCABFAAWRzExAAEAGQomsECrYNu8YuoTyAbvILKbdBpMUa1AYAV9Y7QAAokgU2JcsdP0EjVbXg6Y1G5R6KHq3ZqsO1GYNU+JoG1VVQ5KdTL\/nJfHQBwbL7gdKqzVMXzlZFGAxcbbkTF+QygyPJ\/8y94ZTLAH1yLt4d1BOFaVs\/lxyD6+uzdytKuKllq4aRMc2sje\/LZYp4eMRGpWpBSMhWV5Z64uiDjOf8qVaSyeaNexW7HHrAUt3VNotcvKdCgwWEXU4OdzcamyjJ3WVl\/VY7ARPH1m6xQbs+p8QudhMO4LMI3SLNJrATBWMUPD8n3m0CJCBqsqKWyFAwZlPAF1E3ssuuGijBEe00g+Ytxydqp4YxVG1qTnuntyRMlSo4suXZebGOkzBJYO\/jQvM+ad2zOmzlEmhh68Kqo+mOVC0jFdn6vM7P\/JjmAhhuxha0ZIsIbq2qQdYsApUo77D47eh1rB02EXLwMHgS2Gzic3wTaW+rlY4M3\/p6PCsiZs2i7gAxzOYWq5bjFrtqCwtLmlpnXDqLUH5E6rzzf5HGYogRrtaFWhPbQfcfA931G86+8Mr3cytWTazOfH3Xat+YD6u5Pg8xBE+NiW8IkLg891PIZVTzQiQprPNSXbvrcMS1fhVC8+4Y8k7KNlhZWVJXF5rF0TbxkLw6xK13OdPsW11xmR\/M1W4abuQmCoOaHv\/lI\/uce1uAh1aUoWMYaJ2CiVjsaXnwSZuIy4Gfsk5cnvqp7FU3C0AmmIQBNtJlAkbd6Itvj22CuNOIObOjAzMvXRjVoh7Fk0ijMm6b77Gj0R\/jSqXPcCq+JOmlJg525IXK3nPJqHNXNgemT5mRZh25HLVUkmqQgDEB7QwxoJOF3Q8ulsiTAC09qs3yMaEufU8NrDSbjaRpv7pMQwgoHYgI+CkZT3KKwEI714Hp5JpZnq3ppul12+DL5OcPXTp3j0B0ZsVnUacH+6gkJmhGKFsRjL0SrjaObZox7fOEefjDz4DFrh5xgRS9uwdlON4Ulze0izYrR6B4+sNayMaW1wJu2BgmiYWBFadWLlZszCdWrN41DjXHil4UWfAlqsfh1V\/VD\/Wayrg\/y1WuRm1\/QWQfhVnNr+dFonbKC60N7QlmgJgjuq\/1S7dvu\/mDVi4nJcW5rCMSgdFaEyrrWCD2HPtsfvwEeQnifMrjrxGZ7z61xejuwIfgPl5wv+KMPRqCu0Gll9pApR36Gjz1HhPwPpyS5ha63qH7yRRS1k1hSebBXnGNBGZNfh3UkhPaEvmUVvgazfRR1TO9ojq7Sr+\/jgHNxe8VnIGvsGGV6yxfkxiBnJv8hrlo6VLySEvISMXjBSwhqQTLxQSk\/Z3DiNSDMGrqIW8YtxRBSC1Dc37skQ5Dak0pYPPsBpIERYhf9WIYhjscnjiUKaqkWEOJUEDbBJ\/mIrpOBimzlj9BlahbpQycudhgWmVzCSQZbAjdfhGQPnoAexVEaDaeNJYM55XLbu\/zJahlPk06+pFrUIVo2cZu\/3Rs6Lt1Xkv191TVz13vIhQu5gS6rVl6lOuSirGgW+uuu2Aw3ApWTnlQAjEXTJfydabqnHp9sbqmP4+opQW\/PR6DMY38liRGMOM1usChQCsy3lxq+H4rrPlKB0q9\/ue\/dlYfogl1B0Idi4yoBaiUZmicbugzYFZ6U7BlEJFQrV5pELQifpXB++fKR9Ukca4lkF5C8PzS4ejYL+fWA+C2841wxQFQWj2RrCSPhseLBKsDf17R8svfDnlgmzwhKfImF5OgZDSQMwQnyH1fTPY9\/cCo4difJ+Nlb6fplxIo\/x4HX6cC454wfo2Rb9tzd191LeCeE1RvFglGYymOzw3aoweRLgfQdjRWkr+jpVdh4Mgcv0GJuIjjR5hRyLEV1HjE5+aIc+ZQF8=","pkt_caplen":1439,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":51,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWNdAAOcGRys0XuiGrBAq2AG7snPq5wHzkYQUXlAQf\/f1IwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1499{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":871,"pkt":"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","pkt_caplen":871,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwNAANsGcjs27xi6rBAq2AG7hPHQ2dIzKLR4tVAQAUS82wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBwRAANsGcjo27xi6rBAq2AG7hPHQ2dIzKLR4tVAQAUS82wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1081{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":53,"flow_packet_id":1,"flow_first_seen":1490976047560,"flow_last_seen":1490976047560,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8csJAAEAG6uOsECrYNFXR2NSbAbtgrSImAAAAAKAC\/\/+\/5AAAAgQFtAQCCAoA9lDkAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":54,"flow_packet_id":1,"flow_first_seen":1490976047563,"flow_last_seen":1490976047563,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8y+FAAEAGgVWsECrYSBXOh6SfAbuD+JsFAAAAAKAC\/\/9DRwAAAgQFtAQCCAoA9lDkAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71JuiSVznYK0iJ6AScSA47wAAAgQFtAQCCAptkKkCAPZQ5AEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0csNAAEAG6uqsECrYNFXR2NSbAbtgrSInoklc6IAQAVfXgQAAAQEICgD2UOhtkKkC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1102{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":583,"pkt":"AMDKkaPvePiC0\/vCCABFAAI5csRAAEAG6OSsECrYNFXR2NSbAbtgrSInoklc6IAYAVfMzwAAAQEICgD2UOhtkKkCFgMBAgABAAH8AwN2BwhjfJbg5Am9t4WVCSBsvbJjgWDho9rtAy+p\/VRu5SBHUQT65GzShmSQt43DXU\/iRpfvK3yVUZImuuA4WpXHawAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAGTCgoAAP8BAAEAAAAAEwARAAAOd3d3LmFtYXpvbi5jb20AFwAAACMAsFRWtD3JSKQf4Lr9eEfx0PQ01nHGkidDCG7s9KZESOymslO\/GqdkoVsdJK5ZoYugmQyWHOp1tqWh2bA4KlSTUx1xDcGhPBYTENeT+hnpzYJuHISGm+WAjLYZpeScMXdEj+cpOxx40tMWY+U2GkrsQW5AIinC1PY+tiQWPYlKDKD6UtQmLCxNZDzFu5nYZUvgPU\/iQ7PiXNcQfJ3byiPYuj5cRmbUB10pxz435spf4lY4AA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACAoKAB0AFwAYamoAAQAAFQBnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":53,"flow_packet_id":4,"flow_first_seen":1490976047560,"flow_last_seen":1490976047610,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0401{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwJsxAAOcGf3ZIFc6HrBAq2AG7pJ+6tUVgg\/ibBnASH\/6xFgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoy+JAAEAGgWisECrYSBXOh6SfAbuD+JsGurVFYVAQAVf7hwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0709{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":291,"pkt":"AMDKkaPvePiC0\/vCCABFAAEVy+NAAEAGgHqsECrYSBXOh6SfAbuD+JsGurVFYVAYAVcKJQAAFgMBAOgBAADkAwP\/\/gAuAk5v3TG7NhYWBuGwBvgFQjeXqnaZyi9wFBW4dCCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD90462wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB7CgoAAP8BAAEAAAAAFgAUAAARZmxzLW5hLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAj6+gAdABcAGCoqAAEA","pkt_caplen":291,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":54,"flow_packet_id":4,"flow_first_seen":1490976047563,"flow_last_seen":1490976047631,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0403{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09e9AAPMGtL00VdHYrBAq2AG71JuiSVzoYK0kLIAQAHbWWAAAAQEICm2QqQcA9lDo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0617{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":222,"pkt":"ePiC0\/vCAMDKkVoBCABFAADQ9fBAAPMGtCA0VdHYrBAq2AG71JuiSVzoYK0kLIAYAHbF0gAAAQEICm2QqQgA9lDoFgMDAGQCAABgAwPz\/rL0ydWN5C5NB8NrgWOFN9iaI2tPjg0HNAnksKY25SBHUQT65GzShmSQt43DXU\/iRpfvK3yVUZImuuA4WpXHa8AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjXnZEIwuYj8Sazmu3a+8RkCzOYfnum4J+cC0cC\/KHsJKFCmQcYLw3D","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":53,"flow_packet_id":6,"flow_first_seen":1490976047560,"flow_last_seen":1490976047664,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0403{"flow_id":53,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0csVAAEAG6uisECrYNFXR2NSbAbtgrSQsokldhIAQAVvU0AAAAQEICgD2UO5tkKkI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":53,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":117,"pkt":"AMDKkaPvePiC0\/vCCABFAABncsZAAEAG6rSsECrYNFXR2NSbAbtgrSQsokldhIAYAVuurQAAAQEICgD2UO5tkKkIFAMDAAEBFgMDACgAAAAAAAAAAGpyOypNCOuLYc1rrvLCseEJ8odMssHtaCeJIejNUkhO","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":53,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2276{"flow_id":53,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1445,"pkt":"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","pkt_caplen":1445,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoM15AAOcGcuxIFc6HrBAq2AG7pJ+6tUVhg\/ib81AQf\/x79QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoaaJAAN0GRqhIFc6HrBAq2AG7pJ+6tUVhg\/ib81AQf\/x79QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEaaNAAN0GRgtIFc6HrBAq2AG7pJ+6tUVhg\/ib81AYf\/yCgAAAFgMDAGQCAABgAwOS8\/bZwVfj9ZaYcThQkXYRujtLiD9w\/2gYQED02RFjLCCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDAChh7fC3fO7v+rOLu0MlGETE2X5WVPC+0YiyCPSFTnbp3RiifTKP1EJa","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":54,"flow_packet_id":7,"flow_first_seen":1490976047563,"flow_last_seen":1490976047695,"flow_tot_l4_data_len":561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0388{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoy+RAAEAGgWasECrYSBXOh6SfAbuD+JvzurVF\/VAQAVv5+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABby+VAAEAGgTKsECrYSBXOh6SfAbuD+JvzurVF\/VAYAVs0XwAAFAMDAAEBFgMDACgAAAAAAAAAACelpYCuQ1E8R6oZIRMM9OCYwa+Exg\/ZDZELOWS3o7qW","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1118{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":591,"pkt":"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","pkt_caplen":591,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":53,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09fFAAPMGtLs0VdHYrBAq2AG71JuiSV2EYK0kX4AQAHbVeQAAAQEICm2QqREA9lDu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoaaRAAN0GRqZIFc6HrBAq2AG7pJ+6tUX9g\/icJlAQf\/t7JwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRupAAOcGX2BIFc6HrBAq2AG7pJ+6tUX9g\/icJlAQf\/t7JwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":55,"flow_packet_id":1,"flow_first_seen":1490976047858,"flow_last_seen":1490976047858,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA84nJAAEAGasSsECrYSBXOh6SgAbtFc7NzAAAAAKAC\/\/9pQAAAAgQFtAQCCAoA9lEBAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2276{"flow_id":53,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1445,"pkt":"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","pkt_caplen":1445,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwsPFAAOcG9VBIFc6HrBAq2AG7pKCmhnFJRXOzdHASH\/6\/cgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo4nNAAEAGatesECrYSBXOh6SgAbtFc7N0poZxSlAQAVcJ5AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0708{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":291,"pkt":"AMDKkaPvePiC0\/vCCABFAAEV4nRAAEAGaemsECrYSBXOh6SgAbtFc7N0poZxSlAYAVeSewAAFgMBAOgBAADkAwNIPWEPEPoMeooP6quIPBRotR9ApG0zx\/9LIBRu+eswEiCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD90462wAgSkrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB7amoAAP8BAAEAAAAAFgAUAAARZmxzLW5hLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAg6OgAdABcAGAoKAAEA","pkt_caplen":291,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":55,"flow_packet_id":4,"flow_first_seen":1490976047858,"flow_last_seen":1490976047908,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0396{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolARAAOcGEkZIFc6HrBAq2AG7pKCmhnFKRXO0YVAQf\/yKUQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoielAAN0GJmFIFc6HrBAq2AG7pKCmhnFKRXO0YVAQf\/yKUQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":55,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEiepAAN0GJcRIFc6HrBAq2AG7pKCmhnFKRXO0YVAYf\/zA0wAAFgMDAGQCAABgAwPOP+RKGUd13t632G8l750hX4NYqs4LPnj1y1rN5CC1UiCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDAChkuYkN2nMSNEW7NhhzGo2zdq3klZCAvkolDsxENbT6RLnVEjL+Gawk","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":55,"flow_packet_id":7,"flow_first_seen":1490976047858,"flow_last_seen":1490976047956,"flow_tot_l4_data_len":561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0387{"flow_id":55,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo4nVAAEAGatWsECrYSBXOh6SgAbtFc7RhpoZx5lAQAVsIVwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":55,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABb4nZAAEAGaqGsECrYSBXOh6SgAbtFc7RhpoZx5lAYAVvplAAAFAMDAAEBFgMDACgAAAAAAAAAAE0YwN8nVnBVAj8eHHzhkbGEPc\/RlqvYLkGf2PMdPLB6","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":55,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_id":55,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":335,"pkt":"AMDKkaPvePiC0\/vCCABFAAFB4nhAAEAGabmsECrYSBXOh6SgAbtFc7pIpoZx5lAYAVsFlgAAavlyBl4xfXYnJ47cDbFgF+7pubqxjngkoKEJN8QLbHaUpJmogfMnuGql4wAod4E+0ixHWNuxjb4X1HcFhKlaK907D5MF1D9R0NowIxS2c7GZdbXi9qFGdsq97cMACUpQWUOVFmu1FhTJ+0FORCbFQF9vi0bSo1UdxFQZMyzXOE0KNLVnX+2AQKUSVw+nDDaMcUOIvsrxkbZmRHWa4UCUUnsXYr\/5zAyAZxQBwfo9XVd88vo+JRH+zTaIICvjU9VfOImNfrRGcxng+Zvyq0Jyd3fKb+m79gyn7suTvFwepd9+m0+lUUZ4\/cF1jv0r14W3Qn0vpkrbG8q6DZhBrXXCJ+FXzKqIBr3o5EgtSQ3f\/+kyMp+omqlNYF4=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+1060{"flow_id":55,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976047,"pkt_len":549,"pkt":"AMDKkaPvePiC0\/vCCABFAAIX4nlAAEAGaOKsECrYSBXOh6SgAbtFc7thpoZx5lAYAVso7QAAFwMDAeoAAAAAAAAAAmkZnGI7z5l+MduMPbzKhZSrzKBWmgHErEoE8pDZAnCyIvHahHmJIBSxyOh9gG1stBYbSRF\/LgkJ4NOaFoI\/Q6G8riqOw6kHpdqMQrrNYFKRJ\/VEccqzUyoB7MeV1feBKAbLrJ\/ZmZq7YR2ZFXqCfQr9AlaP\/cWwP0qlpCH85anCDhAQjrnYPh5qOlhU9nDGW9gsJ3CPV1+B1jumlxSuqqwK0gqtdMiX0tWT8QWahpM1yGcoTODBvUantlNbAm8ptL6qQs0iGmTZnUMaOCPtnqdFQLNJ5KHm+IHcjzD\/YnLf6IWpU2mfczZrHRixNIdS61cwQZ83n1Bh37F5dEwqAxYuFxaOyfmttp6+JqI6UhC4i9wtM2SSpbo6dsX8twb3anSS9eY5kOKA2YQs7o87MGt7Wf3HMI5QbTEF\/F2G6YmkoZwSPP\/9JtGGLJTrxWoIU7wt8cBONzLrfYdLl6e7waW+YrD9UOc3rTqLxW3NJQUmRQheWH3WXelPANB16UEFTlrz+0RPUBbde6FJIoHcBP19bhiBGtIXfM9tWj5bSOiW6qEbn2Pzcx57Nn4iY5IhOmgYbYUuS1wn\/cO\/3eH0ubrUTzcdxKQXHUzEWExEVCn2dMDoACGF2wzdbEVGASW2bfSX","pkt_caplen":549,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":55,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoietAAN0GJl9IFc6HrBAq2AG7pKCmhnHmRXO0lFAQf\/uJgwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":55,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAopQNAAOcGAUdIFc6HrBAq2AG7pKCmhnHmRXO0lFAQf\/uJgwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":55,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAopQRAAOcGAUZIFc6HrBAq2AG7pKCmhnHmRXO0lFAQf\/uJgwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":53,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":53,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA09fJAAPMGtLo0VdHYrBAq2AG71JuiSV2EYK0qB4AQAIHPZwAAAQEICm2QqT4A9lEg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2276{"flow_id":53,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":1445,"pkt":"AMDKkaPvePiC0\/vCCABFAAWXcstAAEAG5X+sECrYNFXR2NSbAbtgrSoHokldhIAYAVsQXQAAAQEICgD2USRtkKk+bfB\/yi0bv0M7mB4yOZSYtWdZMXUZWfKPnTIcrXW5Fq02Dhm9p9qOYjxbpmkRWUE+\/QotKLObRj+l2uexMDkTXqKGtLcVKgfqQIq0yK9FYo3k0\/wUGwSR0fsQgb0SSGkA4phxIfU4fOf1C2THRg11kJCquJFngebOVK9m79Jq0y47YJqxj3QlMpa+O6UO4tYIbTjdtFtpoloYWx0K3f\/ey0i949h3\/WaTNsTbLBQiktDpJtb2NBuiukMTf4GRsmci3kX29\/083wrYiYjjkL8m7JHIcQny3YhQ8ACnxmWLEuXI7dO4Z51SJaRW+aHKACQnr3bK7ZkoHrjpL4muNQGDH9MjNPx7zaZ9pUgqPRwyY335Y\/o+5LBY7CLOsgQbOXw6Rd8bC6IeXvxHLpWbJn6eU3Xy4C5bZ7m1kRkxe6NBKhJSneNUTwsXkLZbH2YU0XCyUISYAM3n9OFeryoZoQlI0b2iFWcOjRgCYIAUY\/hbvGXT57C\/HZPiniljjsJNufM1dWOFnGrSpfWSu7p6Gf9VYNGt2bNFZJzvRe1jooMED4+1HVlHaGFss7sn4x7KQTi1jEWb8LtUGV\/yeVy6ukFf3tBDi1fIHQXXB+d9+XW6c6VYKiQp2ILjdHsZfWTR5JccJSkr5p8i6o+EtIeroB47hPwXZ8srW94eb10\/OVcSrV1IFuvsuahmsPoKmsCeSl4Y4kBuweFeZg3hCMW+lRrt3oawzBYMjmVZFbjiaD8dGcBzJNYJMTDec2Xgf2VEYooIgiL\/XxJ\/eh7yuh5wECi6jUlk2w6fvgA+NZ3pZxzTia3fd7E5uamqRVRMBQiSW7dV0o+Gbn5BJKCIYeubCHkcrRJu5uw99aFk+3c96It0XGwTAAX1taH24CoBpFcwRgvOEP\/VeqxBvvaqSd+R8pg+Ks1tDvZc20vgzCFn2UfAtme24J9WXYTVlrc+NQ4K7kBxy+XAOcJPgiXUVaszYQaL0HsXG0z\/k15HzU1lopjyVRa1K5fQnp0KSVaQUvPNOKohzGppNL\/Wcdn1knSTB\/L9qKo03HB\/KjSbltr7nD26j6rXZI1bgLhzI5FcS5p0RGHoQQ0fcmK\/FkZ9+EJQO1sy\/Y4YrVTj0shS1ocsHjBFh5dPEwZdwM2mHkibajPfosoeK2ltMlqsescpdllZ0yDN5qdQRW1lPJM7+tKVH0n0p9lLpItEOTcuMK6Wkq3gvLDMkXrXfHW8LDM6H2NZ8YbYLPqOUi3WWaoYcZgM40vgEXTbcy8Oq\/8P+BXLw7swwkV5nrH6lB7vb\/gC0hz7f1\/8sQUYZc\/zFUDwH5J1LMc2UfoSzXy+ixpTkXVA69ypYa\/IEfo5mNM0oMjIzB8CG1CsQxPnePNZNndM5Nt5XgYgRCcSUa9X82wwJjzpoQaCwqEue6dIn0Dbzm6MI7mjVvKi4lzuuGITHs3PPdrnMVgahtEi7Uj6dSCDYOn9vDebYxAVeCCpyMy30TzArFnwortiuHFnzh58Zm3ehtMcO3u6TFkrocZE5+8lgYPZ3+LVrGPPBQhNOMyi52DpdVbn1JMtQ3JAu1QopheZB\/UKrOuAz0ssjz9CGDHyyZ6pEThrNjTy62u24sSHdXMP2V8yuOIys7Z6kWZfEqFiBRiej2xdz1\/J6vhnMjK5Kq\/CCXWjiHuySdWXIrHYNKIGxMVbe5pKkNgTGZWWD3ONG450XVgYMSb+C5TtUYOrQDUcHHroP7avxU5IMZh3wD0DNFkEJsX2Vva9jZ3A6Rl7571sdC1NbSwO8tUkbRI2PBt2AvFtwUVRzfgpaeh6VsKQHy8Fsa7Y3t6BUPT184b3mvDr2p0cHML6KKM=","pkt_caplen":1445,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7FAAEAGvmisECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/TIQAAAgQFtAQCCAoA9lE7AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":60,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":35085,"pkt_ipoffset":14}
+0180{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","type":35085}
+0417{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzVAAEAGfuSsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9hHwAAAgQFtAQCCAoA9lFVAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ41AAEAGA3asECrYNF7ohrJzAbuRhBRe6ucB81ARAVdzwwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWpFAAOcGRXE0XuiGrBAq2AG7snPq5wHzkYQUX1ARf\/f1IQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976048,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoQ45AAEAGA3WsECrYNF7ohrJzAbuRhBRf6ucB9FAQAVdzwgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":56,"flow_packet_id":1,"flow_first_seen":1490976054009,"flow_last_seen":1490976054009,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8L1JAAEAGF52sECrYNF7ohrJ3AbtDNXw1AAAAAKAC\/\/+MNwAAAgQFtAQCCAoA9lNnAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwt0ZAAOcG6LM0XuiGrBAq2AG7snc6VHcpQzV8NnASH\/5LIgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoL1NAAEAGF7CsECrYNF7ohrJ3AbtDNXw2OlR3KlAQAVeVkwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXL1RAAEAGFsCsECrYNF7ohrJ3AbtDNXw2OlR3KlAYAVd6FAAAFgMBAOoBAADmAwPBrmY0NdI\/E4D2qVtO38be10HD8gGTXfDLQBOZkXF05iCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgysrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9amoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAYOjoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":56,"flow_packet_id":4,"flow_first_seen":1490976054009,"flow_last_seen":1490976054072,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0396{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAopJ1AAOcG+2Q0XuiGrBAq2AG7snc6VHcqQzV9JVAQf\/gWAwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9pJ9AAOcG+w00XuiGrBAq2AG7snc6VHcqQzV9JVAYf\/iO8gAAFgMBAEoCAABGAwFY3n02pkfhRwxBuUracjcXGcG8ABcBgmQTmuIOOTaqxiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":56,"flow_packet_id":6,"flow_first_seen":1490976054009,"flow_last_seen":1490976054168,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdpKxAAOcG+yA0XuiGrBAq2AG7snc6VHd\/QzV9JVAYf\/gC9QAAFgMBADBYgJOSAG3KoN5t3OUr36PqwqfhVZjAlZL1ZW1YvCcO85\/UenkepVu7W6vQ7zsoOfE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoL1VAAEAGF66sECrYNF7ohrJ3AbtDNX0lOlR3f1AQAVeUTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoL1ZAAEAGF62sECrYNF7ohrJ3AbtDNX0lOlR3tFAQAVeUGgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjL1dAAEAGF3GsECrYNF7ohrJ3AbtDNX0lOlR3tFAYAVc3VQAAFAMBAAEBFgMBADCxr01zO2Fx9UJUQnT8DkKeVk5gH1Yrd8BiHPS7uh5uoGwkFWKgnuvFMo4PxN+b10U=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1943{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":1200,"pkt":"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","pkt_caplen":1200,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAorLhAAOcG80k0XuiGrBAq2AG7snc6VHe0QzV9YFAQf\/cVPwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1943{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":1200,"pkt":"AMDKkaPvePiC0\/vCCABFAASiL1lAAEAGEzCsECrYNF7ohrJ3AbtDNX1gOlR3tFAYAVdhDgAAFwMBACD3FLSKdQ\/+XX5awn7++AnVU6xJmoAF\/7g8XlgeCL3QrRcDAQRQ4UO96npQFzRFhjeiTHtHDG50Ual5ipWVuA+IzEiZemz9nQnbKIHcaxvuNl+N8Ze50eCsaR3cqgcXM27cfr9UJrrzm1NETgwhcRgv2\/UjTCEpYgeU+xJlCrXcw7C9FV65x8TptxLxxsONjQgmOaSxSzAq4DL\/I1ESDGqdmY1y3tQFGN5QD7eh0PxYbaiwj\/zF2EMlQtF4x5lbaYVz2YhU2PjkFQf6uPJSiNpaLTFcKjEQeCWFqsmO3rKpCxD+3qgoUooO3V59pNi1WFsQmYHJ5mzq7870TqX4pVuEprjImLe9Zs7\/i9WaVvVVvg\/NvRX7\/0SKAxx8HzHZzbFjt+6ewjLVcoet7wzxEj\/4CawU9wy2Q7KGD32FaV\/RrGNEpAB+FYIMTRNi7Ce1DkyRnYw6S1wMzAwjAuIxEMgcxlvla1VjCwqowcSkWY\/HD0NPOXcTN0mj7SZKN8YyHdIPLaYu10+b9QxFQZIt6G4W2j8PRSEFDu7RWhrrgvM5EcJcD43JLrV1W8EJnaCs9J9eE+vFpllKjTupJZLrk0NkFmafnQk73RWuSy6\/cxC1Cxf91V7fy2g8Dl90989+vW0PYx8iCYRRoN\/zF1b5+mPg6oibx0QQBpzh9IJhoWpLHZhG3gQaVamTEQT8fUWzczfRI8yHCNfLLzhmeRIu9suxsrgkIgbcqqAu3HdpvM73h4uFK0hWaxXJ9\/pINUFtClcbhyXNBXS28Hb+\/s39skTAGqz7MszK+4hYMkslwSWywcxC51+A1w+cvR8dqealfziZsqczNOLtD314ZCzx7RIkdQD52phBnh6AZB10f2c782KcVtDUgVG1CElr3jyRtkeozvPKJQ3dkqB2Q+vttdnWF22tWjop17\/\/Jh6p6o5yZTmfIQhzmeh3SgdA0KU7UmX8qYHISwQ8EcZ4DCmhxG748T0Ot5Fb7Sr5XnQnWOV0sUOn2stWl\/qLBGj2KXyN2s3by9rqJmfscu5viQvrKaZg34Eo5yM+IarO0iPYdW3GZEKB1ruNDsD49nEnML3Bp9huAvXTkM8XRkVnw2a4rt36a2PP6QXY5vHrAO1OboiY3ItQAcaotv62mhM3tSYLs8Wa6cf\/1XezPZUvMoEbAJy04t28PEmUekcD8ZCPsvSEJk8BjpexMhb1JuiZgRTpcpBRJlidwzvAdDzkpnWz4\/A+xZNq2xckJcB\/eQFZZKjodJe1GNEwj8oM28tFqhTPgPu2ZgaKNUGb2NGo\/MjWaEMwkaCPiOPN6qdwmFG8wNFHeiBMwEOB1UnO82mI8h3jQmABnvm4S\/grylNQ2cLCCpUA4RDj4VG5lTGXWeQK7klB+zUeIHUar4kZ4IIN85VdCdOFe27N+gLscUz9Z6SLnoR15oeHnAkmRXDAWS9RUomE87beC+rz54dLMjY7cYAo6ymUvv8bb05P6n5XuwgUlQ4BuKZZCPyXlvw3WAGtpkrhB4bZYG0e","pkt_caplen":1200,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAor35AAOcG8IM0XuiGrBAq2AG7snc6VHe0QzWB2lAQf+UQ1wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1521{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976054,"pkt_len":891,"pkt":"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","pkt_caplen":891,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":57,"flow_packet_id":1,"flow_first_seen":1490976055356,"flow_last_seen":1490976055356,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2}
+0378{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976055,"pkt_len":46,"pkt":"AQBeAAABAMDKkaPvCABGwAAgAABAAAECBBcAAAAA4AAAAZQEAAARZO6bAAAAAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":57,"flow_packet_id":1,"flow_first_seen":1490976055356,"flow_last_seen":1490976055356,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0418{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976056,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7JAAEAGvmesECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/QAAAAAgQFtAQCCAoA9lRcAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976056,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzZAAEAGfuOsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9d\/AAAAgQFtAQCCAoA9lR4AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":58,"flow_packet_id":1,"flow_first_seen":1490976057977,"flow_last_seen":1490976057977,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976057,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8quhAAEAGnAasECrYNF7ohrJ4AbvwDv4cAAAAAKAC\/\/9b6AAAAgQFtAQCCAoA9lT0AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw9qRAAOcGqVU0XuiGrBAq2AG7snh1d2z38A7+HXASH\/7rbgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqulAAEAGnBmsECrYNF7ohrJ4AbvwDv4ddXds+FAQAVc14AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXqupAAEAGmymsECrYNF7ohrJ4AbvwDv4ddXds+FAYAVeo8gAAFgMBAOoBAADmAwMoaRx1UdIM893OKMmXrcWPDPO7AujafDygNOivm9PC5iCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9GhoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYenoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":58,"flow_packet_id":4,"flow_first_seen":1490976057977,"flow_last_seen":1490976058032,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0507{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9+TBAAOcGpnw0XuiGrBAq2AG7snh1d2z48A7\/DFAYf\/grMQAAFgMBAEoCAABGAwFY3n06YnWpXQ3KkZkNmnBbnjScZILp4v2nCTgeJCnodCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":58,"flow_packet_id":5,"flow_first_seen":1490976057977,"flow_last_seen":1490976058082,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd+TNAAOcGppk0XuiGrBAq2AG7snh1d21N8A7\/DFAYf\/jnbAAAFgMBADB2ISI7ic+YHEik9OHUqENQACfM8Us2ZYbtF3T4R9O9hQhS2mrApgCURbQdUSxBJUI=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":58,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqutAAEAGnBesECrYNF7ohrJ4AbvwDv8MdXdtTVAQAVc0nAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":58,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoquxAAEAGnBasECrYNF7ohrJ4AbvwDv8MdXdtglAQAVc0ZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":58,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjqu1AAEAGm9qsECrYNF7ohrJ4AbvwDv8MdXdtglAYAVemOwAAFAMBAAEBFgMBADAGiYPTjtc9vV0eZCdoXLYDiIFDSB+hhP0S\/xH44I8pcXYammORqSdnhTA9NLhVxu8=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":59,"flow_packet_id":1,"flow_first_seen":1490976058103,"flow_last_seen":1490976058103,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA87D9AAEAGJ+usECrYNu8YuoT5Abs\/ELk9AAAAAKAC\/\/9McwAAAgQFtAQCCAoA9lUCAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":58,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1202{"flow_id":58,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":652,"pkt":"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","pkt_caplen":652,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":58,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo\/DlAAOcGo8g0XuiGrBAq2AG7snh1d22C8A7\/R1AQf\/e1iwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw5wBAAOcGhjU27xi6rBAq2AG7hPl2s2uGPxC5PnASH\/7cPAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7EBAAEAGJ\/6sECrYNu8YuoT5Abs\/ELk+drNrh1AQAVcmrgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAEr7EFAAEAGJvqsECrYNu8YuoT5Abs\/ELk+drNrh1AYAVfN+AAAFgMBAP4BAAD6AwMOUC6Wi9btijW5bAYVZWtISVWnuZZb\/u1xZk+ZAvvymiAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRKioAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABiamgABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":59,"flow_packet_id":4,"flow_first_seen":1490976058103,"flow_last_seen":1490976058166,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":58,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo6jNAAOcGtc40XuiGrBAq2AG7snh1d22C8A7\/R1AQf\/e1iwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":58,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcqvBAAEAGll6sECrYNF7ohrJ4AbvwDv9HdXdtglAQAVdhAgAAFwMBACDP+2912In+jSNGMDyrCl6xvO0krdSFnGE+8myRyRumrRcDAQfgjOms7zQQKC7i7kgWur4n1hKz4N57UV9qK9y4uZJBTIcr4HeD76X7UNU4uRU9oFrDDx99D+lL0oK7lFpAxdCwB2qdifpS+8NtZ6TV2PqF4AGls8Mm4s2CJeL1nxz+OAOaJalxJfk8cf2jA3AOn5cLsiczcZFfhlI0qNgkYCArgn3nPjZc6ZCTCevr5+0HZPc1NdRpP0WDnTyKloDbz3hgOCgSAHKJQxq9CWP3XDu\/OE0166LJ1Iz9DsuRJkDyjYjHklxyXz2wocQvM1D6znG3cGcbm9kIMhGQ8HaQspbnkP4GSPYRXjhuzjHV5dq1GHWf8Lyw57jWNDjKeT\/vkdJOTGfg76IW1zkVptcnZG7neJ8U27nDOGC+9YxqCNj5YytIqmXRO32ReN04W+eFl86W4s2o632NZUAgWQdGwjsEmrNswatr0cB10EbJkNngWCyCD8ZL2qgqZh6jqmZ38LqIPImrWgSkOF8C4rMQRyxdSigDiB+ctIsGCfBmElejvymGxH4iPBVKg2vn7GwrtP3zVGj5OUwVikMH1Kucz7IUu86wXXZvlF4F\/P6WZulUGKc8R85YHV9laXCwmVDFpZEAf\/qBl9lYEL01+PRMm1WVjk0MhVm\/AMxL7LQKTlPdPMgWgpX4NwdYxXQMisls16syAR1XC+\/J5YTS54G4POvyRyk\/obGFWymoO4rOY3KvC4Koeta7PYqaPDlLqatApLYJreUNFeP13C4Q+WMToiglA1OS4d\/CpDMcCiRtSk4v+zQxL0NopaTmFNOqVBJ344hHQtUnGErmWOCKcl94yz\/Z27ndvaigSi6J8b17jgJG5+b31RZTYu4rsHnLoChQy8tOTd2dWgdiioNaEvwO7fcn9m\/bmUQhJ61biPprXJc7UAEDfAZDzl\/ql6z22qifWYhv0ewbn83N1dys2uNq2eCW5DWPPNFkeimpaBK6KdhtJk93hxPHdAVai1UW+IPSQfo01yPHY8FVjl3DbKKGz0iwVmt7oZyz0Cz06JTkjAMdjZS0JVbGRNkcdX+KIhrMHy+Pej91LFZk3NfWC2ydeekgYEPoXSMuNQRp99kZKSmvpas19YFvZWBEP76w6LlAzTWBxVt5QjvTRewdLd5uX1CXDvuC5SuwnYy0u+Xs18Hko6wO9F1BJi9+aqEFt\/x++Iw9RbkaU0EGqH5RF82UBmKjEWeSsv3SjjCwdRYCx0Xha0nOXKIEGE+WyLMeyNORZ04Ju9bszoAnWSZ8vW3rnrlHjv3OztImeybcZjBWDaTHjEGPqcjy8569U2dcYPsnE6c97rbuvOwkiAINx3ildi9sz7TIKWO\/VUik51JzS2U02GcLK1eK54+43HeARgtT3BFil1kf8aQL1ZPZTag2mGCgIDPIOUA3GOJ6UwQiUnR34OgUcXPwKd+zPFamH1o3XUYwNYEdYbi+wKdl7t\/D\/CfrqRTS5Xnudlf\/tPYT2gPp2hTs3A8uU18HGeAnIq\/hCf\/0r1smN8AJJ3J9llrmQO2hO0fX9h4uJgRXFJiLJeKLtYED5oMO+4wPLAgk1LlaHW1Ez3Gl8YQzOCrSG7gqBRuha7d5+9ZqEIvSav++lmPfuqjQk70A5NyqiO5PZW0G8T0EyplG\/flXyrjOXj7E4av2TkayaLfMvIbPhidd3tYVH2Kzo57q7bt8ZG7KvfQUfhPavuKjvPsONe1NeUWmJhu1zmcjh1K0pUS3rKLjyXJu+EDTBGCjivB71J17QC6VtiAPbpyl5np4vYtgprHAsvLqZ0wdY98iEwyB70BoEOsLMxHiahduvg1VtcvYQNPRcMKlFMPhogcCoSkh1GCKy4ZQ5B7DXLWUUHJkZwu8JpKphR3DF9O77kBHUy63v2tPTNgp47kyoMm63Bi1UHo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRuVAANsGMlk27xi6rBAq2AG7hPl2s2uHPxC5PlAQARwm6QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRuZAANsGMlg27xi6rBAq2AG7hPl2s2uHPxC6QVAQASwl1gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADERudAANsGMbs27xi6rBAq2AG7hPl2s2uHPxC6QVAYASypigAAFgMDAGQCAABgAwMZs3HDWQcjLi\/oi9viGukGbi3DlY6+1KsrSoY3LJo\/AyAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACgujMIFuLizeNvWWphRrW50Jm1g6urxRCWPuUnyX4FJGO\/X3CWN\/A28","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":59,"flow_packet_id":7,"flow_first_seen":1490976058103,"flow_last_seen":1490976058222,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0389{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7EJAAEAGJ\/ysECrYNu8YuoT5Abs\/ELpBdrNsI1AQAVslCwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABb7ENAAEAGJ8isECrYNu8YuoT5Abs\/ELpBdrNsI1AYAVsbkQAAFAMDAAEBFgMDACgAAAAAAAAAAEjAJak8GHiloeNJZyA9qdTHhCajzppgOrp5CSsq+FOS","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2284{"flow_id":59,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":1438,"pkt":"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","pkt_caplen":1438,"pkt_type":2048,"pkt_ipoffset":14}
+1751{"flow_id":59,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":1058,"pkt":"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","pkt_caplen":1058,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":58,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo7d9AAOcGsiI0XuiGrBAq2AG7snh1d22C8A8HUVAQf9etoQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":59,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRuhAANsGMlY27xi6rBAq2AG7hPl2s2wjPxDAKFAQAVgfJwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":59,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRulAANsGMlU27xi6rBAq2AG7hPl2s2wjPxDJfFAQAbQVdwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0926{"flow_id":59,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976058,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":60,"flow_packet_id":1,"flow_first_seen":1490976064328,"flow_last_seen":1490976064328,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA88S5AAEAGXAisECrYSBXOh6SkAbuyb6ZBAAAAAKAC\/\/8DBAAAAgQFtAQCCAoA9ldvAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":61,"flow_packet_id":1,"flow_first_seen":1490976064333,"flow_last_seen":1490976064333,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WldAAEARM2CsECrYrBAqAa27ADUAKN4THgkBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":61,"flow_packet_id":1,"flow_first_seen":1490976064333,"flow_last_seen":1490976064333,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwkwRAAOcGEz5IFc6HrBAq2AG7pKSpsxlXsm+mQnASH\/60aQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8S9AAEAGXBusECrYSBXOh6SkAbuyb6ZCqbMZWFAQAVf+2gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0707{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":291,"pkt":"AMDKkaPvePiC0\/vCCABFAAEV8TBAAEAGWy2sECrYSBXOh6SkAbuyb6ZCqbMZWFAYAVfKsgAAFgMBAOgBAADkAwP+0zyDGxXotNTaK9PKSDUhNTk9mpydrcn7is4FWWWLVSCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD90462wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB7OjoAAP8BAAEAAAAAFgAUAAARZmxzLW5hLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAja2gAdABcAGIqKAAEA","pkt_caplen":291,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":60,"flow_packet_id":4,"flow_first_seen":1490976064328,"flow_last_seen":1490976064392,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0589{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":203,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC91iFAAEARtxSsECoBrBAq2AA1rbsAqQ1IHgmBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAABFAAoDd3d3A2NkbsAQwCwABQABAAAAAwAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAAAEABDRV0djAQgABAAEAAAABAAQ0VdHFwEIAAQABAAAAAQAENFXRj8BCAAEAAQAAAAEABDRV0Xo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":61,"flow_packet_id":2,"flow_first_seen":1490976064333,"flow_last_seen":1490976064448,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.216"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":62,"flow_packet_id":1,"flow_first_seen":1490976064452,"flow_last_seen":1490976064452,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8L2dAAEAGLj+sECrYNFXR2NSiAbtfxHgaAAAAAKAC\/\/9kOQAAAgQFtAQCCAoA9ld9AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolxlAAOcGDzFIFc6HrBAq2AG7pKSpsxlYsm+nL1AQf\/x\/SAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoLF5AAN0Gg+xIFc6HrBAq2AG7pKSpsxlYsm+nL1AQf\/x\/SAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":60,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADELF9AAN0Gg09IFc6HrBAq2AG7pKSpsxlYsm+nL1AYf\/yKfgAAFgMDAGQCAABgAwNZFVbZSvcTSV314tlSgSgSDpPxNEQHey5Fv+zjXifiHSCAoIhp+G+13yEt\/a9wFbgYbBGSpt6bYu8wE9XD904628AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjJS+BuJgZgFs99o+swdQt1fNrwpVdOGOEnGVQVhhE\/DUpgB386MGo1","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":60,"flow_packet_id":7,"flow_first_seen":1490976064328,"flow_last_seen":1490976064454,"flow_tot_l4_data_len":561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":257,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0387{"flow_id":60,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8TFAAEAGXBmsECrYSBXOh6SkAbuyb6cvqbMZ9FAQAVv9TQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":60,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABb8TJAAEAGW+WsECrYSBXOh6SkAbuyb6cvqbMZ9FAYAVtTEQAAFAMDAAEBFgMDACgAAAAAAAAAAB5+3oSCjbznaCKLIYQ+spc1nPoI9kpIfValJbNGrWJL","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":60,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_id":60,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":336,"pkt":"AMDKkaPvePiC0\/vCCABFAAFC8TRAAEAGWvysECrYSBXOh6SkAbuyb60WqbMZ9FAYAVvffwAAF5oR5t++zJmQqEmUCRT605MKb4aBGJsaV+IdpXmaRofHksX7aqi1GkDOerc+Iqp0b7vgQaHKcLy+7wSw+0VuAeIQCbF7yIKrVNCvP4QXQsfnqfQxhHvYV5jo7dlnPAjEIti\/ilOwcn0N0cRz\/18JvWfxfHS+DDtrK\/sz2CUXOZvcfnyqcSJcz6J\/\/HTfLSu+wrqxy9yCHroC+5VoXRgZSTJEYFgEL6ihAta\/lrZoIK51n7rss0IS9rDI2OmLHWaFUNLrns5efqdrAfmfZvrznKLCotlO79rRXHda6o37p7g5nqMYuxy1dlPS96nfkng\/jIM5R2APRWwX7juHUfT4Fe1HLhDF3QsNpfZiLcmKYnZVuGgtE2SIqXUl","pkt_caplen":336,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":60,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2377{"flow_id":60,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":60,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":187,"pkt":"AMDKkaPvePiC0\/vCCABFAACt8TdAAEAGW46sECrYSBXOh6SkAbuyb7mYqbMZ9FAYAVvggQAA2Zx9K85Ekc2HfUsVz6PKx1k6tlk44z1EUWvdkuN3oIjeQgnO0R+LAae+MyaXL1MuwMwfKWuVHw8XlVrXI4vMrZG98\/79HgFPCkUKpP3XNSY+lD5Q7uEZPaw4SJ5abqvMjlebCVBM8PW4nK050OOhcgOSKFcNVAtH4DyaLapg0Szl31E51g==","pkt_caplen":187,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqqU0VdHYrBAq2AG71KJ+bVwJX8R4G6AScSBROQAAAgQFtAQCCAptHVo6APZXfQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0L2hAAEAGLkasECrYNFXR2NSiAbtfxHgbfm1cCoAQAVfvyQAAAQEICgD2V4NtHVo6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1102{"flow_id":62,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":62,"flow_packet_id":4,"flow_first_seen":1490976064452,"flow_last_seen":1490976064520,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0396{"flow_id":60,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoLGBAAN0Gg+pIFc6HrBAq2AG7pKSpsxn0sm+uMFAQf+B3xwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0BktAAPMGpGI0VdHYrBAq2AG71KJ+bVwKX8R6IIAQAHbunQAAAQEICm0dWkEA9leE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":62,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":222,"pkt":"ePiC0\/vCAMDKkVoBCABFAADQBkxAAPMGo8U0VdHYrBAq2AG71KJ+bVwKX8R6IIAYAHZQKwAAAQEICm0dWkIA9leEFgMDAGQCAABgAwO0ahuAu\/mxCC7FLjcjJHsCRdjVzbWF6rnmSZki2hWy+yBHUQT65GzShmSQt43DXU\/iRpfvK3yVUZImuuA4WpXHa8AvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACgY50qTfNIcvqinmQ3E+DPfwPuU5K6raP7Loz32LgY07caLSfq6mttr","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":62,"flow_packet_id":6,"flow_first_seen":1490976064452,"flow_last_seen":1490976064578,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"5ee142340adf02ded757447e2ff78986","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0403{"flow_id":62,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0L2pAAEAGLkSsECrYNFXR2NSiAbtfxHogfm1cpoAQAVvtFQAAAQEICgD2V4ptHVpC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":62,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":117,"pkt":"AMDKkaPvePiC0\/vCCABFAABnL2tAAEAGLhCsECrYNFXR2NSiAbtfxHogfm1cpoAYAVtdUAAAAQEICgD2V4ptHVpCFAMDAAEBFgMDACgAAAAAAAAAAIzF4OdeVlaCewECt1pR31RMu8hup3MBOGRShskTWu0F","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":62,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2380{"flow_id":62,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":62,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":139,"pkt":"AMDKkaPvePiC0\/vCCABFAAB9L25AAEAGLfesECrYNFXR2NSiAbtfxIWjfm1cpoAYAVsWjwAAAQEICgD2V4xtHVpCHV3gIia2CWgSyfbYPu+UpzEX8Pq8sFJm4onhaXujCkHIO0rjwmWUxjcWlVLJnXWs1bBj\/DTlKho6HZhfmunvpP1pC42Z4ZJIpA==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":62,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":62,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":62,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":1495,"pkt":"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","pkt_caplen":1495,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":62,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976064,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0Bk1AAPMGpGA0VdHYrBAq2AG71KJ+bVymX8R\/+4AQAIHoDAAAAQEICm0dWkoA9leK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":63,"flow_packet_id":1,"flow_first_seen":1490976067916,"flow_last_seen":1490976067916,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976067,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WlhAAEARM1+sECrYrBAqAe2EADUAKHojSVQBAAABAAAAAAAAA2FwaQZhbWF6b24DY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":63,"flow_packet_id":1,"flow_first_seen":1490976067916,"flow_last_seen":1490976067916,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"api.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0435{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976067,"pkt_len":90,"pkt":"ePiC0\/vCAMDKkaPvCABFAABM1zdAAEARtm+sECoBrBAq2AA17YQAOOTBSVSBgAABAAEAAAAAA2FwaQZhbWF6b24DY29tAAABAAHADAABAAEAAAAsAAQ27x2S","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":63,"flow_packet_id":2,"flow_first_seen":1490976067916,"flow_last_seen":1490976067965,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"api.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.29.146"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":64,"flow_packet_id":1,"flow_first_seen":1490976067968,"flow_last_seen":1490976067968,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976067,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8kvdAAEAGfFusECrYNu8dkqLbAbtu3MorAAAAAKAC\/\/\/lJAAAAgQFtAQCCAoA9ljcAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw1NlAAOcGk4Q27x2SrBAq2AG7otunydf3btzKLHASH\/7bQAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":64,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvhAAEAGfG6sECrYNu8dkqLbAbtu3Mosp8nX+FAQAVclsgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":64,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":275,"pkt":"AMDKkaPvePiC0\/vCCABFAAEFkvlAAEAGe5CsECrYNu8dkqLbAbtu3Mosp8nX+FAYAVdqyAAAFgMBANgBAADUAwMdKoGNaOtWl2eYW4si+Xi4wmWhQDuns4mF\/nWjaB0YoAAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAfwAAABMAEQAADmFwaS5hbWF6b24uY29tAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":64,"flow_packet_id":4,"flow_first_seen":1490976067968,"flow_last_seen":1490976068066,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":20,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0396{"flow_id":64,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2FJAAOcGkBM27x2SrBAq2AG7otunydf4btzLCVAQf\/ymLwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":64,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoZIRAANsGD+I27x2SrBAq2AG7otunydf4btzLCVAQf\/ymLwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":64,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":64,"flow_packet_id":7,"flow_first_seen":1490976067968,"flow_last_seen":1490976068174,"flow_tot_l4_data_len":1849,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":264,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2357{"flow_id":64,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0950{"flow_id":64,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":464,"pkt":"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","pkt_caplen":464,"pkt_type":2048,"pkt_ipoffset":14}
+1148{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":64,"flow_packet_id":9,"flow_first_seen":1490976067968,"flow_last_seen":1490976068174,"flow_tot_l4_data_len":3759,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":417,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.amazon.com","server_names":"api.amazon.com,wsync.us-east-1.amazon.com","ja3":"bdf21e38e1f69776df407235625e75e2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=api.amazon.com","fingerprint":"1D:A3:CD:C3:06:9E:9B:A0:61:1E:1A:75:55:C1:A8:B0:DC:F8:75:2D"}}
+0388{"flow_id":64,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvpAAEAGfGysECrYNu8dkqLbAbtu3MsJp8ndrFAQAWIfFgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":64,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvtAAEAGfGusECrYNu8dkqLbAbtu3MsJp8njYFAQAW0ZVwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":64,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokvxAAEAGfGqsECrYNu8dkqLbAbtu3MsJp8nk+lAQAXkXsQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":64,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACmkv1AAEAGe+usECrYNu8dkqLbAbtu3MsJp8nk+lAYAXkRuwAAFgMDAEYQAABCQQQ46D6Y+UkGsvZQOcPhRkHCWnfIPXTDx\/pw1D0fy3NnkyB5H1viTB9LQDFgLBJbS3ysAlHrtm5l7+PPvPeTuTWkFAMDAAEBFgMDACjkCJX4dr0ILknXj8wy2V44ye61dT+shkTZjNif5tZN70vlauF4yX54","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":64,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":105,"pkt":"ePiC0\/vCAMDKkVoBCABFAABbZIhAANsGD6s27x2SrBAq2AG7otunyeT6btzLh1AYf\/oR1gAAFAMDAAEBFgMDACj\/05YtkjPkhogM3qsd3oBvWrpIBlIsg+QyIW\/imeeQrNa1vk1Hj2Vv","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":64,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976068,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAokv5AAEAGfGisECrYNu8dkqLbAbtu3MuHp8nlLVAQAXkXAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":65,"flow_packet_id":1,"flow_first_seen":1490976071237,"flow_last_seen":1490976071237,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49606,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA870hAAEAGV6asECrYNF7ohsHGAFAgR7VrAAAAAKAC\/\/9hTwAAAgQFtAQCCAoA9lojAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":66,"flow_packet_id":1,"flow_first_seen":1490976071286,"flow_last_seen":1490976071286,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8a3lAAEAG23WsECrYNF7ohrJ9AbuRJzFRAAAAAKAC\/\/+CYgAAAgQFtAQCCAoA9looAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":67,"flow_packet_id":1,"flow_first_seen":1490976071306,"flow_last_seen":1490976071306,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8mshAAEAGrCasECrYNF7ohrJ+AbvI+MDiAAAAAKAC\/\/+6\/AAAAgQFtAQCCAoA9loqAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":68,"flow_packet_id":1,"flow_first_seen":1490976071312,"flow_last_seen":1490976071312,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":76,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WllAAEARM1ysECrYrBAqAWH5ADUAKtG2BusBAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":68,"flow_packet_id":1,"flow_first_seen":1490976071312,"flow_last_seen":1490976071312,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw3TJAAOcGwsc0XuiGrBAq2ABQwcY3D6dGIEe1bHASH\/76HQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":65,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo70lAAEAGV7msECrYNF7ohsHGAFAgR7VsNw+nR1AQAVdEjwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1429{"flow_id":65,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":834,"pkt":"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","pkt_caplen":834,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":65,"flow_packet_id":4,"flow_first_seen":1490976071237,"flow_last_seen":1490976071324,"flow_tot_l4_data_len":888,"flow_min_l4_data_len":20,"flow_max_l4_data_len":800,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49606,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/manifest\/pitangui.appcache","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":69,"flow_packet_id":1,"flow_first_seen":1490976071349,"flow_last_seen":1490976071349,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8lMZAAEAGsiisECrYNF7ohrJ\/Abuhu87oAAAAAKAC\/\/\/ULgAAAgQFtAQCCAoA9louAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwaLpAAOcGN0A0XuiGrBAq2AG7sn5peFkmyPjA43ASH\/5viQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":67,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomslAAEAGrDmsECrYNF7ohrJ+AbvI+MDjaXhZJ1AQAVe5+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_id":67,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":261,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3mspAAEAGq2msECrYNF7ohrJ+AbvI+MDjaXhZJ1AYAVcLWAAAFgMBAMoBAADGAwOkcAvRwSrfQVVFK\/foqopFdMlvROgq0BQ0TyljveD8PAAAIKqqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfQoKAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAh6egAdABcAGNraAAEA","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":67,"flow_packet_id":4,"flow_first_seen":1490976071306,"flow_last_seen":1490976071362,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0400{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWSpAAOcGRtA0XuiGrBAq2AG7sn0V5Ch+kScxUnASH\/67KQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoa3pAAEAG24isECrYNF7ohrJ9AbuRJzFSFeQof1AQAVcFmwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXa3tAAEAG2pisECrYNF7ohrJ9AbuRJzFSFeQof1AYAVcrhgAAFgMBAOoBAADmAwM07In88XJWi3gVEL3IAq3jnfxPPEmAP53P8CbtvduRQCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9iooAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACOrqAB0AFwAY+voAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":66,"flow_packet_id":4,"flow_first_seen":1490976071286,"flow_last_seen":1490976071365,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":70,"flow_packet_id":1,"flow_first_seen":1490976071380,"flow_last_seen":1490976071380,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Ky9AAEAGG8CsECrYNF7ohrKAAbueQXEdAAAAAKAC\/\/81bwAAAgQFtAQCCAoA9loyAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":71,"flow_packet_id":1,"flow_first_seen":1490976071385,"flow_last_seen":1490976071385,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fzdAAEAGx7esECrYNF7ohrKBAbt+UyUFAAAAAKAC\/\/+hdAAAAgQFtAQCCAoA9loyAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":68,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl2DBAAEARtV2sECoBrBAq2AA1YfkAUYstBuuBgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAADUACwhwaXRhbmd1acASwC4AAQABAAAANQAENF7ohg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":68,"flow_packet_id":2,"flow_first_seen":1490976071312,"flow_last_seen":1490976071389,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":72,"flow_packet_id":1,"flow_first_seen":1490976071392,"flow_last_seen":1490976071392,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8hllAAEAGwJWsECrYNF7ohukyAbtO5dxqAAAAAKAC\/\/\/iygAAAgQFtAQCCAoA9lozAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwichAAOcGFjI0XuiGrBAq2AG7soCzlhpDnkFxHnASH\/7eyAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":67,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":67,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_id":67,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1456{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":67,"flow_packet_id":7,"flow_first_seen":1490976071306,"flow_last_seen":1490976071432,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+0387{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKzBAAEAGG9OsECrYNF7ohrKAAbueQXEes5YaRFAQAVcpOgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":67,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomstAAEAGrDesECrYNF7ohrJ+AbvI+MGyaXhe21AQAWKzbAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":67,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomsxAAEAGrDasECrYNF7ohrJ+AbvI+MGyaXhkj1AQAW2trQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXKzFAAEAGGuOsECrYNF7ohrKAAbueQXEes5YaRFAYAVcyZAAAFgMBAOoBAADmAwORwZN3Gg+iPVw7yQc+k6Ude4qIjSThz3bWXaU7z9yE3SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAYenoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":70,"flow_packet_id":4,"flow_first_seen":1490976071380,"flow_last_seen":1490976071434,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0388{"flow_id":67,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoms1AAEAGrDWsECrYNF7ohrJ+AbvI+MGyaXhl6FAQAXmsSAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_id":67,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":380,"pkt":"AMDKkaPvePiC0\/vCCABFAAFums5AAEAGqu6sECrYNF7ohrJ+AbvI+MGyaXhl6FAYAXnW3QAAFgMBAQYQAAECAQBJhI5pXt9KUuhYtXZVUTefHIRqb4mPusZhFGh+ntQ1k6GZTpZfcGc0TC5g\/zcEoQUMtm1DrA9KBjJLyTrFuym7ck2XMMF1ybVm7i\/N9brqQebh1dPL4YhjPe43l2GN2Hxk9AW3JPZlQWQYdyR1HD\/8TgWhbFH2ery3rfOhsHpXnkHWo2FVfROnh95Lgqytv\/0smf+Ez3W\/zmXyv6UNpf0c1CoJH9kI757fT0+1d+CgWqerFGIe7e6qvr2Goz9PfVhhOEARCqlPHX8+S4x9x0QfVrcbyWSBi7ZYKDXhDhz1qO2I6BL2oKbcrtNPEi98rMjrZ+QxLUlAN2JVDq8e8DB3FAMBAAEBFgMBADD53gbtexNDlUKXeiGNYz+QUmAU+ebu8AHo6N+yH\/puWb3ah2kVi8CbVfGJIqn0InQ=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwR+BAAOcGWBo0XuiGrBAq2AG7sn8uyCJ8obvO6XASH\/76GQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwR+FAAOcGWBk0XuiGrBAq2AG7soEpho4ZflMlBnASH\/5hCAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":65,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJp5AANsGhWQ0XuiGrBAq2ABQwcY3D6dHIEe4eFAQf\/PC5gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":69,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolMdAAEAGsjusECrYNF7ohrJ\/Abuhu87pLsgifVAQAVdEiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":71,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofzhAAEAGx8qsECrYNF7ohrKBAbt+UyUGKYaOGlAQAVereQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":69,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXlMhAAEAGsUusECrYNF7ohrJ\/Abuhu87pLsgifVAYAVcuOwAAFgMBAOoBAADmAwMlSSyj1sonJu72Ryt7k8+6RtgrzaXQnI0RTQtftkcFSSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9KioAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACEpKAB0AFwAYqqoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":69,"flow_packet_id":4,"flow_first_seen":1490976071349,"flow_last_seen":1490976071441,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0710{"flow_id":71,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXfzlAAEAGxtqsECrYNF7ohrKBAbt+UyUGKYaOGlAYAVdE2wAAFgMBAOoBAADmAwMyYJ1Vgi7pXUY+w9BYO5x0QgA8tcoAaPoo5I8kMHaIXSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYWloAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":71,"flow_packet_id":4,"flow_first_seen":1490976071385,"flow_last_seen":1490976071441,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0508{"flow_id":66,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9SDRAAOcGV3k0XuiGrBAq2AG7sn0V5Ch\/kScyQVAYf\/iw2AAAFgMBAEoCAABGAwFY3n1HoIqu4iz1t6q3Aw\/d1XGda8i7JbQ0V4SKKTuKVyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":66,"flow_packet_id":5,"flow_first_seen":1490976071286,"flow_last_seen":1490976071444,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0387{"flow_id":66,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoa3xAAEAG24asECrYNF7ohrJ9AbuRJzJBFeQo1FAQAVcEVwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":66,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdSJRAAOcGVzk0XuiGrBAq2AG7sn0V5CjUkScyQVAYf\/j50gAAFgMBADBk9BasL9AE3pWKtlUjlgloy1YCNYsbYZdDrY7qJVR6QnHqM5QQ0PVDvzOM8Oobatc=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":66,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoa31AAEAG24WsECrYNF7ohrJ9AbuRJzJBFeQpCVAQAVcEIgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":66,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABja35AAEAG20msECrYNF7ohrJ9AbuRJzJBFeQpCVAYAVcNXwAAFAMBAAEBFgMBADCk9Z\/spxrYXjwbbCJRm\/mnGHlpvO0bZFWTFjFN+k7jNvvakDETOFv4jwhzR5aAtx4=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw0V1AAOcGzpw0XuiGrBAq2AG76TIsDp+yTuXca3ASH\/6OPgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":72,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohlpAAEAGwKisECrYNF7ohukyAbtO5dxrLA6fs1AQAVfYrwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_id":72,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":248,"pkt":"AMDKkaPvePiC0\/vCCABFAADqhltAAEAGv+WsECrYNF7ohukyAbtO5dxrLA6fs1AYAVeOnQAAFgMBAL0BAAC5AwN6cp6GYC5xfAeiRgQRCWi6UVwyVXoduZRVV+ZY6Nku9AAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAZAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":72,"flow_packet_id":4,"flow_first_seen":1490976071392,"flow_last_seen":1490976071451,"flow_tot_l4_data_len":302,"flow_min_l4_data_len":20,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2217{"flow_id":65,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1400,"pkt":"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","pkt_caplen":1400,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":66,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":65,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo70tAAEAGV7esECrYNF7ohsHGAFAgR7h4Nw+siVAQAWE8NwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"flow_id":66,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":204,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+a4BAAEAG2uysECrYNF7ohrJ9AbuRJzgwFeQpCVAYAVeBxgAA7XzbTfJPCljtPACuxNf910BkKL0BTjK7gsTdQXLRQd3P2iXVx\/zmjFcZIq4k7g08AHhc93Jk3CR+2dz3mTa4E7lk\/aTPA6sgqrE\/Co\/NrrNIKy+oHzLw1hkYlAO9G5J1l\/Dht+MWeLUHkZxUhK8Nh5lTFRXMd7XDp\/j2lVe46PpVFUhtc8XHH7BTzYTSxiXPqf6xOQcn","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":70,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAodjdAAOcGKcs0XuiGrBAq2AG7soCzlhpEnkFyDVAQf\/ipqQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":70,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9djlAAOcGKXQ0XuiGrBAq2AG7soCzlhpEnkFyDVAYf\/gwpAAAFgMBAEoCAABGAwFY3n1HZlzaG39Wabnrdmi+ugu5LTH2Z63hbn1vRZ5tPCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":70,"flow_packet_id":6,"flow_first_seen":1490976071380,"flow_last_seen":1490976071486,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":70,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABddjxAAOcGKZE0XuiGrBAq2AG7soCzlhqZnkFyDVAYf\/jtQAAAFgMBADAFZSWByLsoLy1\/csajsfivnhztXAs4zq7uoYJQMDQFipkxBSRUH6BUVLRAhMv2evI=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":70,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKzJAAEAGG9GsECrYNF7ohrKAAbueQXINs5YamVAQAVcn9gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":70,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoKzNAAEAGG9CsECrYNF7ohrKAAbueQXINs5YazlAQAVcnwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":70,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjKzRAAEAGG5SsECrYNF7ohrKAAbueQXINs5YazlAYAVefhQAAFAMBAAEBFgMBADA5pEwoQPc2Rl08Xc+uxxgK\/jG\/F4sS1CdDVBCLIAS0X8NCW++soAuMSipA5eUO5f4=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":67,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAocaBAAOcGLmI0XuiGrBAq2AG7sn5peGXoyPjC+FAQf\/QshwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":67,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjccxAAOcGLfs0XuiGrBAq2AG7sn5peGXoyPjC+FAYf\/RwBQAAFAMBAAEBFgMBADBWGYFWbKhfozhvbfgdlDYFXwWJ5cfzoS2E+uV5UjntiBSNIykATpYl+72N9zISE24=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":69,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9TDxAAOcGU3E0XuiGrBAq2AG7sn8uyCJ9obvP2FAYf\/gL4QAAFgMBAEoCAABGAwFY3n1H4DyL9g\/1O6DL9RnLeqLLg8udYmp+nrKe5HWJKCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":69,"flow_packet_id":5,"flow_first_seen":1490976071349,"flow_last_seen":1490976071501,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":69,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdTD5AAOcGU480XuiGrBAq2AG7sn8uyCLSobvP2FAYf\/gBcQAAFgMBADCwRun2EbMj42BvmYCZAbeOlpUhb8bhBcgyWdgABb0A86poQz9hHLJnBv5bFoOHXac=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":69,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolMlAAEAGsjmsECrYNF7ohrJ\/Abuhu8\/YLsgi0lAQAVdDRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":69,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolMpAAEAGsjisECrYNF7ohrJ\/Abuhu8\/YLsgjB1AQAVdDEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":66,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTJFAAOcGU3E0XuiGrBAq2AG7sn0V5CkJkScyfFAQf\/eFRgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":72,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcve1AAOcG3GA0XuiGrBAq2AG76TIsDp+zTuXdLVAYf\/kF2gAAFgMBDLwCAABGAwFY3n1HSu1ZxzDw\/auCivD7kMpHzquqECpdXSsk4uYbkCCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAvAAsADGoADGcAByUwggchMIIGCaADAgECAhAcRU2OfD5RXVxbu\/\/vTuNvMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTcwMTEyMDAwMDAwWhcNMTgwMTEzMjM1OTU5WjBtMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEcMBoGA1UEAwwTcGl0YW5ndWkuYW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYBiz7+LgeGD3Pa4IJcJ09bhuxaGQSx+xajoPkJc5erzMpRRS1Ah2pufryf6dws05DN70Qan0Ob6GrLw2\/HxaGvneCRZhiBGyUMFBcJjk1AKw9+Nf1hXE48DlafnWpGrqpfYt2zsG+eRrhPeKWj+oj0pEgYLwOn\/a4xa6m8CUPuQAn6\/wNlnTqVyC\/SG0Yol6GVytCBUh+TZofarTRdpyUAS308UAcUFDf6BimC5d5mYn2J5R4k65+6sdF0Lg5T\/DhNiIsjt\/imBX+pqRiOG+KKP+QbbicThn04ySXzkSx\/F+UEKU29ls2FzrMVLknBH7eb59tKsTdRgaRpZOW3joUCAwEAAaOCA6owggOmMIIBVgYDVR0RBIIBTTCCAUmCE3BpdGFuZ3VpLmFtYXpvbi5jb22CE2d1aXBpdGFuLmFtYXpvbi5jb22CEGFsZXhhLmFtYXpvbi5jb22CD2VjaG8uYW1hem9uLmNvbYIPYWxleGEuYW1hem9uLmNhghJndWlwaXRhbi5hbWF6b24uY2GCEmFsZXhhLmFtYXpvbi5jby5qcIIVZ3VpcGl0YW4uYW1hem9uLmNvLmpwghNhbGV4YS5hbWF6b24uY29tLm14ghZndWlwaXRhbi5hbWF6b24uY29tLm14ghNhbGV4YS5hbWF6b24uY29tLmJyghZndWlwaXRhbi5hbWF6b24uY29tLmJyghNhbGV4YS5hbWF6b24uY29tLmF1ghZndWlwaXRhbi5hbWF6b24uY29tLmF1gg9hbGV4YS5hbWF6b24uY26CEmd1aXBpdGFuLmFtYXpvbi5jbjAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWZBMcQIAAAQDAEYwRAIgKRWoVVA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":72,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_id":72,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1494{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":72,"flow_packet_id":7,"flow_first_seen":1490976071392,"flow_last_seen":1490976071512,"flow_tot_l4_data_len":3627,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+2366{"flow_id":70,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":70,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":156,"pkt":"AMDKkaPvePiC0\/vCCABFAACOKzZAAEAGG2esECrYNF7ohrKAAbueQXf8s5YazlAYAVerUAAA1hJWn5K9HkA5GaL8aM62erG6py7j6o3KWQJagZ1eEWONAmFvx9zGif3UeOMt3plh7vtPhBPNAW8uG0UGhVdOxy4RfWyVGqyzsC+9IGrt6ZHBjn04Egmuc9XXNPbkP5Oa8Hk\/NLmc","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":69,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjlMtAAEAGsfysECrYNF7ohrJ\/Abuhu8\/YLsgjB1AYAVf5iQAAFAMBAAEBFgMBADAB7XXixEKXZx9fUSjs4B0EgdAiHDJakuL8sQpJYQbh2fJipuEIESpKffh+zLMRwYo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":72,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohlxAAEAGwKasECrYNF7ohukyAbtO5d0tLA6lZ1AQAWLSLgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":72,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohl1AAEAGwKWsECrYNF7ohukyAbtO5d0tLA6rG1AQAW3MbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":72,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohl5AAEAGwKSsECrYNF7ohukyAbtO5d0tLA6sdFAQAXnLCgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":66,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTXtAAOcGUoc0XuiGrBAq2AG7sn0V5CkJkSc4MFAQf+B\/qQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":66,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTXxAAOcGUoY0XuiGrBAq2AG7sn0V5CkJkSc4xlAQf95\/FQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1334{"flow_id":67,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":752,"pkt":"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","pkt_caplen":752,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":69,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_id":69,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+lM1AAEAGsV+sECrYNF7ohrJ\/Abuhu9XHLsgjB1AYAVev9gAAyBDaQIOsxV+IpWvVDJsa+p8SiU13wJeJKYAbwYjjmzToh9r4CZ9lsMfIAYWSwLFkG1COgsfY2Np2V79f7Gjq90iabh+M7zFDMzOiMQbGdyDOan3VZvWJhvLKFH5fuUjSMN1XmXCSFHjIm1ZQe\/ns13WKGIbrom2AxuD4dYoebX09OM04UFkBOanuyVOWxbSk45UL6NSky6RGn4VMwoo0\/OD8r8TZbWECxsnDUcLOibLa6SY5Vo6SIJBR\/LPqBAIosVH9fBB0cl01aFBHYn\/BfITm20a1lg==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_id":72,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":70,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeatAAOcGJlc0XuiGrBAq2AG7soCzlhrOnkFySFAQf\/eo5QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":69,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUTdAAOcGTss0XuiGrBAq2AG7sn8uyCMHobvQE1AQf\/fENgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":67,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYKZAAOcGP1w0XuiGrBAq2AG7sn5peGYjyPjFslAQf+kpnQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":69,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUZlAAOcGTmk0XuiGrBAq2AG7sn8uyCMHobvVx1AQf+C+mQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":69,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUZpAAOcGTmg0XuiGrBAq2AG7sn8uyCMHobvWnVAQf929xgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":73,"flow_packet_id":1,"flow_first_seen":1490976071583,"flow_last_seen":1490976071583,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8H+ZAAEAGJwmsECrYNF7ohrKCAbsHHkWgAAAAAKAC\/\/\/3+QAAAgQFtAQCCAoA9lpGAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":70,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofKBAAOcGI2I0XuiGrBAq2AG7soCzlhrOnkFySFAQf\/eo5QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":66,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":72,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAowtRAAOcG3S00XuiGrBAq2AG76TIsDqx0TuXec1AQf\/RLSQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":72,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjwwZAAOcG3MA0XuiGrBAq2AG76TIsDqx0TuXec1AYf\/R1uQAAFAMBAAEBFgMBADDSB0Co2jV9gbAoqs1QNiOjr6RYT6Ak5bH4MLvFE2CF090JxLL8jKaGwwnYeUnOByo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":70,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1922{"flow_id":72,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":1184,"pkt":"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","pkt_caplen":1184,"pkt_type":2048,"pkt_ipoffset":14}
+1069{"flow_id":69,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":555,"pkt":"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","pkt_caplen":555,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwgCVAAOcGH9U0XuiGrBAq2AG7soJWhIA2Bx5FoXASH\/6YhgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+dAAEAGJxysECrYNF7ohrKCAbsHHkWhVoSAN1AQAVfi9wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXH+hAAEAGJiysECrYNF7ohrKCAbsHHkWhVoSAN1AYAVf+QQAAFgMBAOoBAADmAwOE8oRDXFsSV3ryNEuSilTOl1C7aDt7WJHDEI4Zx+ik8yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9iooAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACPr6AB0AFwAYSkoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":73,"flow_packet_id":4,"flow_first_seen":1490976071583,"flow_last_seen":1490976071642,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":72,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAox49AAOcG2HI0XuiGrBAq2AG76TIsDqyvTuXi3VAQf+NGtQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9hPJAAOcGGrs0XuiGrBAq2AG7soJWhIA3Bx5GkFAYf\/jJCAAAFgMBAEoCAABGAwFY3n1H7tprYGnn77iiblUs3pVsX7OsznnNQ5TSj9yK7yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":73,"flow_packet_id":5,"flow_first_seen":1490976071583,"flow_last_seen":1490976071700,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":73,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdhPlAAOcGGtQ0XuiGrBAq2AG7soJWhICMBx5GkFAYf\/hrxAAAFgMBADBggpjqg00ss3rdzoekLdoL0PT1y3WvcQwna1zchUAionSGNDMnhNpfXSpqU9zWdAo=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":73,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+lAAEAGJxqsECrYNF7ohrKCAbsHHkaQVoSAjFAQAVfhswAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":73,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+pAAEAGJxmsECrYNF7ohrKCAbsHHkaQVoSAwVAQAVfhfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":73,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjH+tAAEAGJt2sECrYNF7ohrKCAbsHHkaQVoSAwVAYAVc6OwAAFAMBAAEBFgMBADBPkwyv4Mo3z\/GOHs52sMdfOXkmlcWDKkUqbn4ArkpgC\/XjfRPslwZMnl\/Zb3FF4HM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":73,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":192,"pkt":"ePiC0\/vCAMDKkVoBCABFAACyhPJAAOcGGoY0XuiGrBAq2AG7soJWhIA3Bx5GkFAYf\/i33AAAFgMBAEoCAABGAwFY3n1H7tprYGnn77iiblUs3pVsX7OsznnNQ5TSj9yK7yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABARYDAQAwYIKY6oNNLLN63c6HpC3aC9D09ct1r3EMJ2tc3IVAIqJ0hjQzJ4TaX10qalPc1nQK","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":73,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+xAAEAGJxesECrYNF7ohrKCAbsHHkbLVoSAwVAQAVfhQwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":71,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXfzpAAEAGxtmsECrYNF7ohrKBAbt+UyUGKYaOGlAYAVdE2wAAFgMBAOoBAADmAwMyYJ1Vgi7pXUY+w9BYO5x0QgA8tcoAaPoo5I8kMHaIXSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYWloAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":73,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiXJAAOcGFpA0XuiGrBAq2AG7soJWhIDBBx5Gy1AQf\/diowAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":71,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9SlBAAOcGVV00XuiGrBAq2AG7soEpho4aflMl9VAYf\/gclQAAFgMBAEoCAABGAwFY3n1HHbnxbLsDLLoNcR255BOdgpz59QMm4sIttZcWoCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":71,"flow_packet_id":6,"flow_first_seen":1490976071385,"flow_last_seen":1490976071803,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":71,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdSlJAAOcGVXs0XuiGrBAq2AG7soEpho5vflMl9VAYf\/jl4gAAFgMBADCzIi9vBBXuYwKUIiMvYHZXvDconsMjgvxRIJVCQutlwnHiInG5YyCGffU68ceIKNE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":71,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofztAAEAGx8esECrYNF7ohrKBAbt+UyX1KYaOb1AQAVeqNQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":71,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofzxAAEAGx8asECrYNF7ohrKBAbt+UyX1KYaOpFAQAVeqAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":71,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjfz1AAEAGx4qsECrYNF7ohrKBAbt+UyX1KYaOpFAYAVdYwwAAFAMBAAEBFgMBADCVFVLdJscWz5sG2Z1O1Tl+euQXtxpS5boBrewAmdfoJNjy9fPa9KEjL7MU4nMJy4E=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":71,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976071,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTytAAOcGUNc0XuiGrBAq2AG7soEpho6kflMmMFAQf\/crJQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976072,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7NAAEAGvmasECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/\/JvAAAAgQFtAQCCAoA9lqgAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976072,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzdAAEAGfuKsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9XuAAAAgQFtAQCCAoA9lq8AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":73,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+1AAEAGJxasECrYNF7ohrKCAbsHHkbLVoSAwVARAVfhQgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":71,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofz5AAEAGx8SsECrYNF7ohrKBAbt+UyYwKYaOpFARAVepxAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":65,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo70xAAEAGV7asECrYNF7ohsHGAFAgR7h4Nw+siVARAWE8NgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":73,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAohYZAAOcGGnw0XuiGrBAq2AG7soJWhIDBBx5GzFARf\/dioQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":65,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo13lAAOcGyIg0XuiGrBAq2ABQwcY3D6yJIEe4eVARAH89FwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":71,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoSahAAOcGVlo0XuiGrBAq2AG7soEpho6kflMmMVARf\/crIwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":73,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoH+5AAEAGJxWsECrYNF7ohrKCAbsHHkbMVoSAwlAQAVfhQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":65,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo701AAEAGV7WsECrYNF7ohsHGAFAgR7h5Nw+silAQAWE8NQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":71,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976075,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofz9AAEAGx8OsECrYNF7ohrKBAbt+UyYxKYaOpVAQAVepwwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":74,"flow_packet_id":1,"flow_first_seen":1490976076042,"flow_last_seen":1490976076042,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8BbZAAEAGQTmsECrYNF7ohpD5Abuu0lmyAAAAAKAC\/\/9b\/gAAAgQFtAQCCAoA9lwEAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwMG5AAOcGb4w0XuiGrBAq2AG7kPnjZM+NrtJZs3ASH\/4iEQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBbdAAEAGQUysECrYNF7ohpD5Abuu0lmz42TPjlAQAVdsggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":228,"pkt":"AMDKkaPvePiC0\/vCCABFAADWBbhAAEAGQJ2sECrYNF7ohpD5Abuu0lmz42TPjlAYAVfYNgAAFgMBAKkBAAClAwGdxeV2toJ3ZUdADhSV31FbJ8VJ\/C4Ztf1iHRQqcc2FASCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":74,"flow_packet_id":4,"flow_first_seen":1490976076042,"flow_last_seen":1490976076117,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0397{"flow_id":74,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoM75AAOcGbEQ0XuiGrBAq2AG7kPnjZM+OrtJaYVAQf\/rtMAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":74,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9M8JAAOcGa+s0XuiGrBAq2AG7kPnjZM+OrtJaYVAYf\/riFQAAFgMBAEoCAABGAwFY3n1Mp0JE4kOdseiNzFiy0qUvQpBLQ8w9ltp9\/\/G+AiCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":74,"flow_packet_id":6,"flow_first_seen":1490976076042,"flow_last_seen":1490976076167,"flow_tot_l4_data_len":407,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0464{"flow_id":74,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdM8hAAOcGbAU0XuiGrBAq2AG7kPnjZM\/jrtJaYVAYf\/pG2wAAFgMBADDLFCeLq7myUYguH+aUp+zJCMiGlEiiwkYEaQer603SBV4OGPys8lwNnx2pgKrCbxQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":74,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBblAAEAGQUqsECrYNF7ohpD5Abuu0lph42TP41AQAVdrfwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":74,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBbpAAEAGQUmsECrYNF7ohpD5Abuu0lph42TQGFAQAVdrSgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":74,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjBbtAAEAGQQ2sECrYNF7ohpD5Abuu0lph42TQGFAYAVdPtwAAFAMBAAEBFgMBADCzF0fNMRJdH2d+ioMsV7SbH0Xt31UB6U+doAcIJWvLGifwPyOC+M3KCffhf9G\/lwA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":74,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":74,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":60,"pkt":"AMDKkaPvePiC0\/vCCABFAAAuBb1AAEAGQUCsECrYNF7ohpD5Abuu0mBQ42TQGFAYAVckvwAAiVCKkiyr","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":74,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoN3dAAOcGaIs0XuiGrBAq2AG7kPnjZNAYrtJanFAQf\/nsbAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":74,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoOdBAAOcGZjI0XuiGrBAq2AG7kPnjZNAYrtJanFAQf\/nsbAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":74,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":75,"flow_packet_id":1,"flow_first_seen":1490976076275,"flow_last_seen":1490976076275,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49613,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Bx5AAEAGP9GsECrYNF7ohsHNAFDXKVsFAAAAAKAC\/\/8C1AAAAgQFtAQCCAoA9lwbAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwijBAAOcGFco0XuiGrBAq2ABQwc3F00\/v1ylbBnASH\/5mLQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":75,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBx9AAEAGP+SsECrYNF7ohsHNAFDXKVsGxdNP8FAQAVewngAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1430{"flow_id":75,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":834,"pkt":"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","pkt_caplen":834,"pkt_type":2048,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":75,"flow_packet_id":4,"flow_first_seen":1490976076275,"flow_last_seen":1490976076341,"flow_tot_l4_data_len":888,"flow_min_l4_data_len":20,"flow_max_l4_data_len":800,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49613,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/manifest\/pitangui.appcache","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36"}}
+0398{"flow_id":75,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAogcFAANsGKkE0XuiGrBAq2ABQwc3F00\/w1yleElAQf\/Mu9gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2218{"flow_id":75,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":1400,"pkt":"ePiC0\/vCAMDKkVoBCABFAAVqgcJAANsGJP40XuiGrBAq2ABQwc3F00\/w1yleElAYf\/OA3AAASFRUUC8xLjEgMjAwIE9LDQp4LWFtem4tUmVxdWVzdElkOiA0NTgzY2RmMy0xNjJiLTExZTctYTg4OC1iMWM3MTU4OWE1MzgNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpFeHBpcmVzOiBGcmksIDMxIE1hciAyMDE3IDE2OjAxOjE2IFVUQw0KQ29udGVudC1UeXBlOiB0ZXh0L2NhY2hlLW1hbmlmZXN0DQpDb250ZW50LUxlbmd0aDogMTA4OA0KRGF0ZTogRnJpLCAzMSBNYXIgMjAxNyAxNjowMToxNSBHTVQNCg0KH4sIAAAAAAAAAJWW3W+rNhTA3\/NXVNrbJAeDY8B96207rVrbW91m2sM0IX8SbgAj27lp99fPQBMoEF1NSqLY5+fz5eNj397c\/n5\/9XTz\/PDb\/et29csVREEE\/SdMrkJ4DaOrl6fV6ralrlcBtzbACZYRoE2zrop67Wf66TTdUAV+6LdhWunaBTcV\/VfX9xWTJnt0a+fUguBJXBB8yy8ItruR4IvWe2nK98fbu+zBXRCcVBVVHmAaIwVsI+m+qPPH+7sshvDNf9d58YGkscACKPqj4Lpe+59+2sfdTtgghCmKQNFQATqiqfMJkaANJp7Y6VoCI11R00so4TFUXpg9y+OTZkUp76Q3LNf2xxTlOKLxSesFdTJEKex9W7TLyoN0WrtdIOOQUdCOt+34hRbGJ2TrdQ+ZGNEpw\/FA3+q6ltxJMbBcH2pn3oOQEBy2AaG3TNbgz9fB+AmRqYBt7qZyqesAEZikINc6L2VW6lwPYlUW+c69OuoONojTGKFWRz87pGtHa2GBMlIGUYJJ0jJ8R5cJFKYJbolaH7OmpO8+BYtgwiLFWrCFsoYe7GiHysI6G2x4ghE47gonPVALOnG\/pxjHEvm9EYtMdbAFD2AcJwz4HKvCVNQVuv5C+T43Pn0iu5N273Tzv9ZsKSul+7ts4+G0kf\/MVqdsw0FjikoCS+1uKg8jFqKfaG+0cYYWbqY8lFGIwVelpBmt6ot9ym5CwsklQ8tL8CaKGKg1oMYdtdlP5QTBCM3MX0gjSekGg25\/+5Nzru9ezjHdRDNlP80vVywUl5ZdTJyI4oiDvvdlT+1U9vipXGrtClXwLk82QDxhEAh9rI\/UiBtj9HGoUa2ZDGAYYl\/FVZ4d\/bpM8p2eEGHCI9URlLdaM6HdFCEIww4RXadaUhMlUogxM1eDUgI3gy8LgBI8GrviaDNBMES+WZx1zIE0VmnvR9fx\/e1xbmlTMkWEjq0tRJWKNE7HUc0Nkg0nvdPtwfY\/fH+YMYpADF5ozb1HZ8eavgFnlRajEu8WMIVY8ikKenjjbfEMmu2+KEsbRFRhDLpWMyj5kLFYMgSsa\/uOEc+j2pmhKiZEgj7KGyGMtGN1pZSNdwojCrr\/WXXwPe\/zRWObwl8RxnuEIgJBN\/ThAW1onftLsf1f9ef5fMTOa5AkCQSlpsLH6ivDZmI\/CvWExUJFCnwMQW7kO9CNWwCJQlAt+xAtmGec+oY1Mj9WaXx\/twFkxN+H\/QgcJXU7acbB91SSEixPVLuVc4RhxvgY6R5SM0ww6G9rW\/keB3a6OimdOyb9Y0yAtvhOSv2DLg6jEA2s7zbKb33L+rtISNs+FNo6eGi38Ix9hBUonIhwEiuo5bH38rt3jiRMnd+F3\/37ryxYkJLQnxYhG\/tpmvnDZ70HTfd2PI+Gt6NtaFDUQr6td64qV6vn++1fX7\/9cb36dfUfPnBO\/LMKAAA=","pkt_caplen":1400,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":75,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976076,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoByFAAEAGP+KsECrYNF7ohsHNAFDXKV4SxdNVMlAQAWGoRgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":75,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976077,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoByJAAEAGP+GsECrYNF7ohsHNAFDXKV4SxdNVMlARAWGoRQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":75,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976077,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofjpAAOcGIcg0XuiGrBAq2ABQwc3F01Uy1yleE1ARAH+pJgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":75,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976077,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoByNAAEAGP+CsECrYNF7ohsHNAFDXKV4TxdNVM1AQAWGoRAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":76,"flow_packet_id":1,"flow_first_seen":1490976080485,"flow_last_seen":1490976080485,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA80qBAAEAGOXysECrYIsc08JYEAbs8Ao8fAAAAAKAC\/\/9XyQAAAgQFtAQCCAoA9l2\/AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAOsGYRwixzTwrBAq2AG7lgTyw5w6PAKPIKASaN+a6gAAAgQFtAQCCApEF4DYAPZdvwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":76,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qFAAEAGOYOsECrYIsc08JYEAbs8Ao8g8sOcO4AQAVcxOQAAAQEICgD2XcZEF4DY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_id":76,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":326,"pkt":"AMDKkaPvePiC0\/vCCABFAAE40qJAAEAGOH6sECrYIsc08JYEAbs8Ao8g8sOcO4AYAVdhlgAAAQEICgD2XcZEF4DYFgMBAP8BAAD7AwOX\/QoHOQfrIm4YrainwIcb8HJqxyAya+r9gcsMJ\/OOBSCuITFLxCcAmkxVA5xh9l9LJAIe6ginKsjl8g3o3EcTxQAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACSCgoAAP8BAAEAAAAALQArAAAoY29nbml0by1pZGVudGl0eS51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACPr6AB0AFwAYGhoAAQA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":76,"flow_packet_id":4,"flow_first_seen":1490976080485,"flow_last_seen":1490976080544,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0404{"flow_id":76,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0HN1AAOsGREcixzTwrBAq2AG7lgTyw5w7PAKQJIAQAHcxBQAAAQEICkQXgOgA9l3G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":76,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":76,"flow_packet_id":6,"flow_first_seen":1490976080485,"flow_last_seen":1490976080606,"flow_tot_l4_data_len":1916,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2359{"flow_id":76,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1074{"flow_id":76,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":559,"pkt":"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","pkt_caplen":559,"pkt_type":2048,"pkt_ipoffset":14}
+1197{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":76,"flow_packet_id":8,"flow_first_seen":1490976080485,"flow_last_seen":1490976080607,"flow_tot_l4_data_len":3921,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":490,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cognito-identity.us-east-1.amazonaws.com","server_names":"cognito-identity.amazonaws.com,cognito-identity.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=cognito-identity.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"56:17:8F:E9:45:10:32:78:FF:FD:E3:09:60:5A:B5:3B:8D:8C:F8:34"}}
+0404{"flow_id":76,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qNAAEAGOYGsECrYIsc08JYEAbs8ApAk8sOh44AQAWIqbAAAAQEICgD2XcxEF4Do","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":76,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qRAAEAGOYCsECrYIsc08JYEAbs8ApAk8sOni4AQAW0kuQAAAQEICgD2XcxEF4Do","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":76,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA00qVAAEAGOX+sECrYIsc08JYEAbs8ApAk8sOpeIAQAXkiwAAAAQEICgD2XcxEF4Do","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":76,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACy0qZAAEAGOQCsECrYIsc08JYEAbs8ApAk8sOpeIAYAXkmegAAAQEICgD2Xc5EF4DoFgMDAEYQAABCQQSwy3DVfMj9pnVVFSmqsPhNbncc8oXxeNP2XGPnozuBQOQ32hLL8BToNyN9G\/CcsXShYbUSYlqFHTUkIjXuEP2RFAMDAAEBFgMDACgAAAAAAAAAAPLIx+Hh1EiJ40X7nbZoPKkHKOXQ39KH7lYkBnXvwB20","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":76,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":117,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnHOFAAOsGRBAixzTwrBAq2AG7lgTyw6l4PAKQooAYAHfxAwAAAQEICkQXgPsA9l3OFAMDAAEBFgMDACiWhI1ruLIrR8jg9wtW668uNxDVB7PSd256THrnBFN6MD4BwKFzuf16","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1606{"flow_id":76,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":950,"pkt":"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","pkt_caplen":950,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":76,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976080,"pkt_len":117,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnHOJAAOsGRA8ixzTwrBAq2AG7lgTyw6l4PAKQooAYAHfwwgAAAQEICkQXgTwA9l3OFAMDAAEBFgMDACiWhI1ruLIrR8jg9wtW668uNxDVB7PSd256THrnBFN6MD4BwKFzuf16","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":77,"flow_packet_id":1,"flow_first_seen":1490976082723,"flow_last_seen":1490976082723,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976082,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8n\/hAAEAGdDKsECrYNu8YuoUFAbsbksFnAAAAAKAC\/\/9eHgAAAgQFtAQCCAoA9l6fAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":78,"flow_packet_id":1,"flow_first_seen":1490976082964,"flow_last_seen":1490976082964,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34054,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976082,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8NvRAAEAG3TasECrYNu8YuoUGAbttlGhMAAAAAKAC\/\/9lHQAAAgQFtAQCCAoA9l64AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976082,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwftZAAOcG7l827xi6rBAq2AG7hQU1exHsG5LBaHASH\/6SVwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":77,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976082,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAon\/lAAEAGdEWsECrYNu8YuoUFAbsbksFoNXsR7VAQAVfcyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":77,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976082,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErn\/pAAEAGc0GsECrYNu8YuoUFAbsbksFoNXsR7VAYAVfciQAAFgMBAP4BAAD6AwMHSRC2c+5r\/3MPJESGwrrTfqmqXxfWC6hnzFlITFd0gCAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRGhoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAISkoAHQAXABi6ugABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":77,"flow_packet_id":4,"flow_first_seen":1490976082723,"flow_last_seen":1490976082975,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0401{"flow_id":78,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWypAAOcGEgw27xi6rBAq2AG7hQaUlSPBbZRoTXASH\/4ogAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":77,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwRAANsGGjo27xi6rBAq2AG7hQU1exHtG5LBaFAQARzdAwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":77,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwVAANsGGjk27xi6rBAq2AG7hQU1exHtG5LCa1AQASzb8AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":77,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEXwZAANsGGZw27xi6rBAq2AG7hQU1exHtG5LCa1AYASx+uQAAFgMDAGQCAABgAwPehMvu5novbNArKScBJhC9DeefEhWeATMztF98Cop19yAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACiHOfVoJ1AWj9rEVgWapKXkd5\/HZG1P1iTZT389LqD2yhjHifKuHigq","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":77,"flow_packet_id":7,"flow_first_seen":1490976082723,"flow_last_seen":1490976083245,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0388{"flow_id":78,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNvVAAEAG3UmsECrYNu8YuoUGAbttlGhNlJUjwlAQAVdy8QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":78,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAom51AANsG3aA27xi6rBAq2AG7hQaUlSPCbZRoTVAQARxzLAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":77,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEXwdAANsGGZs27xi6rBAq2AG7hQU1exHtG5LCa1AYASx+uQAAFgMDAGQCAABgAwPehMvu5novbNArKScBJhC9DeefEhWeATMztF98Cop19yAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACiHOfVoJ1AWj9rEVgWapKXkd5\/HZG1P1iTZT389LqD2yhjHifKuHigq","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":77,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAon\/tAAEAGdEOsECrYNu8YuoUFAbsbksJrNXsSiVAQAVvbJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":77,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABbn\/xAAEAGdA+sECrYNu8YuoUFAbsbksJrNXsSiVAYAVut+QAAFAMDAAEBFgMDACgAAAAAAAAAACKMi5jkrbEKMqBPUE63CaQw5XgwZVTWcDJlYzBPIAIa","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2369{"flow_id":77,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2275{"flow_id":77,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":1439,"pkt":"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","pkt_caplen":1439,"pkt_type":2048,"pkt_ipoffset":14}
+1956{"flow_id":77,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976083,"pkt_len":1212,"pkt":"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","pkt_caplen":1212,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":77,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976084,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwhAANsGGjY27xi6rBAq2AG7hQU1exKJG5LIUlAQAVjVQQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":77,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976084,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXwlAANsGGjU27xi6rBAq2AG7hQU1exKJG5LSQVAQAbTK9gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":78,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976084,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNvZAAEAG3UisECrYNu8YuoUGAbttlGhNlJUjwlARAVdy8AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":78,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976084,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAom55AANsG3Z827xi6rBAq2AG7hQaUlSPCbZRoTlARARxzKgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":78,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976084,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNvdAAEAG3UesECrYNu8YuoUGAbttlGhOlJUjw1AQAVdy7wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":79,"flow_packet_id":1,"flow_first_seen":1490976085644,"flow_last_seen":1490976085644,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8I8hAAEAGIyesECrYNF7ohrKHAbtpd3wLAAAAAKAC\/\/9ZswAAAgQFtAQCCAoA9l\/DAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":80,"flow_packet_id":1,"flow_first_seen":1490976085829,"flow_last_seen":1490976085829,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8qZ1AAEAGnVGsECrYNF7ohrKIAbvGQPZJAAAAAKAC\/\/+CmQAAAgQFtAQCCAoA9l\/UAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":81,"flow_packet_id":1,"flow_first_seen":1490976085832,"flow_last_seen":1490976085832,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8k2FAAEAGs42sECrYNF7ohrKJAbv5cMy2AAAAAKAC\/\/94+AAAAgQFtAQCCAoA9l\/XAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":82,"flow_packet_id":1,"flow_first_seen":1490976085883,"flow_last_seen":1490976085883,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40242,"dst_port":8080,"l4_proto":"tcp"}
+0420{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/VAAEAGPiSsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/94MQAAAgQFtAQCCAoA9l\/cAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":83,"flow_packet_id":1,"flow_first_seen":1490976085884,"flow_last_seen":1490976085884,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45707,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA83c5AAEAGaSCsECrYNF7ohrKLAbvdeYISAAAAAKAC\/\/\/fjAAAAgQFtAQCCAoA9l\/cAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":84,"flow_packet_id":1,"flow_first_seen":1490976085891,"flow_last_seen":1490976085891,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38434,"dst_port":8080,"l4_proto":"tcp"}
+0419{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8K1lAAEAGbNGsECrYwKgLAZYiH5Cn8nSEAAAAAKAC\/\/9ycAAAAgQFtAQCCAoA9l\/dAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwHsZAAOcGgTQ0XuiGrBAq2AG7sofzK0GgaXd8DHASH\/6hqwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwdw1AAOcGKO00XuiGrBAq2AG7sojjQR2VxkD2SnASH\/7+lwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":79,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoI8lAAEAGIzqsECrYNF7ohrKHAbtpd3wM8ytBoVAQAVfsHAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":79,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXI8pAAEAGIkqsECrYNF7ohrKHAbtpd3wM8ytBoVAYAVdMhgAAFgMBAOoBAADmAwMZTwgAvEIt2Qb5o7X9W24vk2EndyOWpP4UOltDjjzDCyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACEpKAB0AFwAYGhoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":79,"flow_packet_id":4,"flow_first_seen":1490976085644,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0388{"flow_id":80,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqZ5AAEAGnWSsECrYNF7ohrKIAbvGQPZK40EdllAQAVdJCQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":80,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXqZ9AAEAGnHSsECrYNF7ohrKIAbvGQPZK40EdllAYAVchAgAAFgMBAOoBAADmAwM0H8Xsbj55clduvHcNurVJrQGc\/Pqbv8v55WlkE30hCyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9ysoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAY6uoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":80,"flow_packet_id":4,"flow_first_seen":1490976085829,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976085,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFEAAoAABAAD0Gmy7AqAsBrBAq2B+QliIAAAAAp\/J0hVAUAAA7FAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":79,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9HHlAAOcGgzQ0XuiGrBAq2AG7sofzK0GhaXd8+1AYf\/gWvgAAFgMBAEoCAABGAwFY3n1WmU2DpWAHVrvTcVkefcqPXG\/VUu7kD2bqD9s6GyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":79,"flow_packet_id":5,"flow_first_seen":1490976085644,"flow_last_seen":1490976086218,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":79,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdHI5AAOcGgz80XuiGrBAq2AG7sofzK0H2aXd8+1AYf\/iZYQAAFgMBADBumwbswz78F38KYUA1LReV72sE4fP2hoAfRqbMRoILN4Gitrad3ELxUnZammcSf8U=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":81,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwSbFAAOcGVkk0XuiGrBAq2AG7soktOgAj+XDMt3ASH\/7IcwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwHTJAAOcGgsg0XuiGrBAq2AG7sosHecze3XmCE3ASH\/6IEgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":80,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9fsNAAOcGIOo0XuiGrBAq2AG7sojjQR2WxkD3OVAYf\/it4AAAFgMBAEoCAABGAwFY3n1WO78rfAE+1qPfnKCZXIna9VF+PCVlge\/Xf2\/VpyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":80,"flow_packet_id":5,"flow_first_seen":1490976085829,"flow_last_seen":1490976086218,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":80,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdfsdAAOcGIQY0XuiGrBAq2AG7sojjQR3rxkD3OVAYf\/hsXAAAFgMBADAU6xBGcB9xOb6V3MKpQJBHV2d3SRfKZoqC73gwWwdhkCQFO0MhyvP7PGydhK0Rqtw=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":79,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoI8tAAEAGIzisECrYNF7ohrKHAbtpd3z78ytB9lAQAVfq2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":79,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoI8xAAEAGIzesECrYNF7ohrKHAbtpd3z78ytCK1AQAVfqowAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":81,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok2JAAEAGs6CsECrYNF7ohrKJAbv5cMy3LToAJFAQAVcS5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":79,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjI81AAEAGIvusECrYNF7ohrKHAbtpd3z78ytCK1AYAVe6lgAAFAMBAAEBFgMBADDO9o2A+9aXLOZdWIejSS\/Mc1S\/PHFhIxDxFFON1a8BQneuneZqYSgKR+odZcOcDdk=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":83,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo3c9AAEAGaTOsECrYNF7ohrKLAbvdeYITB3nM31AQAVfSgwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":80,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqaBAAEAGnWKsECrYNF7ohrKIAbvGQPc540Ed61AQAVdHxQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":80,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoqaFAAEAGnWGsECrYNF7ohrKIAbvGQPc540EeIFAQAVdHkAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":80,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjqaJAAEAGnSWsECrYNF7ohrKIAbvGQPc540EeIFAYAVce7wAAFAMBAAEBFgMBADAPoa1ts7infxbjjfR8emR0iLKgkDJxMknN5jT+3Oj94JqiGw+Ghid4vvtV\/qImMkA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":79,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":79,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":188,"pkt":"AMDKkaPvePiC0\/vCCABFAACuI89AAEAGIq6sECrYNF7ohrKHAbtpd4Lq8ytCK1AYAVcSOgAAiUnxJ8FdEFN4uQzu5DWCVUhw5fm8W51SwPQh5Tee6yHP\/q771b9at3P4VMm2MoEsYofFfYrlXDO8EPqyCLVwu7EkLHp+VOGvrC853LzM0wuNZkkNL8FCWE0VN2jHgweP4JQa3aEFhiV31zGYyBo4MK3l25inq5amLu3epBHGuYmtqymBiSM=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":81,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXk2NAAEAGsrCsECrYNF7ohrKJAbv5cMy3LToAJFAYAVdDMAAAFgMBAOoBAADmAwMX0DmvFoc93MqqbnDLtg4DTevZCvztq0wbg4n1o5FhxCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9OjoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACNraAB0AFwAYqqoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":81,"flow_packet_id":4,"flow_first_seen":1490976085832,"flow_last_seen":1490976086244,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2373{"flow_id":80,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":80,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":236,"pkt":"AMDKkaPvePiC0\/vCCABFAADeqaRAAEAGnKisECrYNF7ohrKIAbvGQP0o40EeIFAYAVdRlwAAmPuk9xQL067n6lGxgVKXBM4UFe5ZAxeONmzDM5vsajDS6B+FYzlFINNdpTzneoxvkF4rDLmx6krgshFu8XD\/vL2WJ+LtbZ5Wp1Ch9l4tql\/7dcrPfbrMVEr3XEKv8jHxIoNHvj3\/BurgjaveUEJCxyzFNzvf2b\/Kr0XeJu8Vbsb9hgCbdRBRa0FfRSSLULS6mOLrTNFr4L4gdUEcC91Pa9g0MbpowbLabZw9NXwc3dSdCqYVU3U=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":79,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoF+pAAOcGiBg0XuiGrBAq2AG7sofzK0IraXd9NlAQf\/dryAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":79,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGBtAAOcGh+c0XuiGrBAq2AG7sofzK0IraXeC6lAQf+BmKwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":80,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeUJAAOcGJsA0XuiGrBAq2AG7sojjQR4gxkD3dFAQf\/fItAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":81,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9SB9AAOcGV440XuiGrBAq2AG7soktOgAk+XDNplAYf\/gBdQAAFgMBAEoCAABGAwFY3n1W5OOWJNfC\/vUq2mNwZtKQmiBffDQIpiP84nPzOiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":81,"flow_packet_id":5,"flow_first_seen":1490976085832,"flow_last_seen":1490976086648,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":81,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdSCJAAOcGV6s0XuiGrBAq2AG7soktOgB5+XDNplAYf\/gj4AAAFgMBADB3Tw1XVAuvmIcZBBsRqEr04YWcg2pwJ+22+vesqZrU91kZzVtkEQdmZMtZUaiTOM4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":80,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeiZAAOcGJdw0XuiGrBAq2AG7sojjQR4gxkD93lAQf93CZAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1161{"flow_id":80,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":619,"pkt":"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","pkt_caplen":619,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":80,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjqaVAAEAGnSKsECrYNF7ohrKIAbvGQPc540EeIFAYAVce7wAAFAMBAAEBFgMBADAPoa1ts7infxbjjfR8emR0iLKgkDJxMknN5jT+3Oj94JqiGw+Ghid4vvtV\/qImMkA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":81,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok2RAAEAGs56sECrYNF7ohrKJAbv5cM2mLToAeVAQAVcRoQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":81,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok2VAAEAGs52sECrYNF7ohrKJAbv5cM2mLToArlAQAVcRbAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":81,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjk2ZAAEAGs2GsECrYNF7ohrKJAbv5cM2mLToArlAYAVdfuwAAFAMBAAEBFgMBADD1Qn98mbdLfAsblAUjNCVzWHs56uKx7P+e2rtX\/wryt\/D1GTWmPTseili4T+zPW40=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":81,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0596{"flow_id":81,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":204,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+k2hAAEAGswSsECrYNF7ohrKJAbv5cNOVLToArlAYAVeIkAAAdGLW5H5tTxOxzRjIEqeKFVG7l0Nr+rcel634fX1yuCcRyUbZXWZBiC7dV9sPVa8UskOM3FOIvx7h2QTBDirkKD+n\/WhkMB148f\/zuQwqDoEAOEkwB6IleBBe2m2rtg0dQAGYjJIy+uhkjgF4p2WU18KoCO\/eJeaTTCwJY5\/odSUZWwm\/Tt6nBtRxejmpiAvztm+1HWQe","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976086,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/ZAAEAGPiOsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/93zQAAAgQFtAQCCAoA9mBAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":81,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976087,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoTZNAAOcGUm80XuiGrBAq2AG7soktOgCu+XDN4VAQf\/eSkAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":81,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976087,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUntAAOcGTYc0XuiGrBAq2AG7soktOgCu+XDTlVAQf+CM8wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":81,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976087,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoUnxAAOcGTYY0XuiGrBAq2AG7soktOgCu+XDUK1AQf96MXwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1130{"flow_id":81,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976087,"pkt_len":603,"pkt":"ePiC0\/vCAMDKkVoBCABFAAJNVFBAAOcGSY00XuiGrBAq2AG7soktOgCu+XDUK1AY\/bC9vwAAFwMBAiDfR4\/l3sWzCZIYvKPXTOB9dczNoz9\/HQ0L7CRWYtpwJNPwvTxXoZYmNOhH7JQ34GBZcXYU67CKxtfB42LJElvobawHG6Wk39dUSaoLQ1FY3rI43H06F1jCLJZaGxB03BKhAEsHMpWfe3nx+qqRJrSNv3zjYXD4xG9AfhlM0yW\/jRM5ufUNlvpj7WbbGYR9jFYx3v9fxhfKwNmlF+xgBU3R6idnAQpQ1wuQ90sS2LB+BV\/WyRQ1lXiNslswF8ieOlACoYworQwLdqbIm6SHxAQEs0UXcng+5wBIWPaFFh9qsitQ9V9Wxb8C89quo1iNQ4HCsEgrtMhqOvO95e6A8INmKeMGsgPyVhaAVP3pKG8JsF82HJJycXVqhtahjTMQLfuI9DOM2PT5ypo1APbcjvCz8gxM9DdBTb0EYrFUFmp7hgRRxIUSvFhXHtTLqpfrB6HDIkLGoEZ94ID2bl8q9+WmaSLwox0Nm6w6DupayONhT1V9lbDrF9eBzj3c2p96Z9NWMIoAiLf3Wi1Kk54aGPrfRPLMfrLuNZsFr1YX+h52f65xSTylnE7hehTZD5S3pUZuCyKcgJGRkDwO2XnwmZdKlvIH3FSsuoXTKXtjOymzefVbD6oY\/emoUEhF4D3X6qy9AqSxu7rmBwH81q2PfIGWJkEUvPUipIfHhvwMPwt\/ZYsCWupZhk9SUNCVp1IfH16sTJyUEAwiPmhwzcm5xnlO","pkt_caplen":603,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":79,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976087,"pkt_len":188,"pkt":"AMDKkaPvePiC0\/vCCABFAACuI9BAAEAGIq2sECrYNF7ohrKHAbtpd4Lq8ytCK1AYAVcSOgAAiUnxJ8FdEFN4uQzu5DWCVUhw5fm8W51SwPQh5Tee6yHP\/q771b9at3P4VMm2MoEsYofFfYrlXDO8EPqyCLVwu7EkLHp+VOGvrC853LzM0wuNZkkNL8FCWE0VN2jHgweP4JQa3aEFhiV31zGYyBo4MK3l25inq5amLu3epBHGuYmtqymBiSM=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":79,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoHBVAAOcGg+00XuiGrBAq2AG7sofzK0IraXeDcFAQf95lpwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":83,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo3dBAAEAGaTKsECrYNF7ohrKLAbvdeYITB3nM31ARAVfSggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":83,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoJzdAAOcGeMs0XuiGrBAq2AG7sosHeczf3XmCFFARgABT2AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":83,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo3dFAAEAGaTGsECrYNF7ohrKLAbvdeYIUB3nM4FAQAVfSgQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":85,"flow_packet_id":1,"flow_first_seen":1490976088605,"flow_last_seen":1490976088605,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA81ixAAEAGcMKsECrYNF7ohrKNAbu9HLbAAAAAAKAC\/\/\/KKQAAAgQFtAQCCAoA9mDsAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":86,"flow_packet_id":1,"flow_first_seen":1490976088631,"flow_last_seen":1490976088631,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8NFtAAEAGEpSsECrYNF7ohrKOAbuEplS0AAAAAKAC\/\/9kqAAAAgQFtAQCCAoA9mDvAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":85,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwfFZAAOcGI6Q0XuiGrBAq2AG7so2w2ze+vRy2wXASH\/5ffQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw3pBAAOcGwWk0XuiGrBAq2AG7so5AYHD5hKZUtXASH\/4xPwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":85,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo1i1AAEAGcNWsECrYNF7ohrKNAbu9HLbBsNs3v1AQAVep7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":85,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX1i5AAEAGb+WsECrYNF7ohrKNAbu9HLbBsNs3v1AYAVePOwAAFgMBAOoBAADmAwP1YthODLslBmCd7PjY7YVBLxQl6oZDQnpqrQA1aXZumyB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB92toAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYSkoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":85,"flow_packet_id":4,"flow_first_seen":1490976088605,"flow_last_seen":1490976088849,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0388{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNFxAAEAGEqesECrYNF7ohrKOAbuEplS1QGBw+lAQAVd7sAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXNF1AAEAGEbesECrYNF7ohrKOAbuEplS1QGBw+lAYAVeALwAAFgMBAOoBAADmAwO2qvjWcAzn6foPrm6RG05xGgv+E5HiiVFKOX3z9RkdZCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAY2toAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":86,"flow_packet_id":4,"flow_first_seen":1490976088631,"flow_last_seen":1490976088854,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0419{"flow_id":82,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/dAAEAGPiKsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/93BQAAAgQFtAQCCAoA9mEIAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":87,"flow_packet_id":1,"flow_first_seen":1490976088937,"flow_last_seen":1490976088937,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8PTlAAEAGCbasECrYNF7ohrKPAbuIDFw0AAAAAKAC\/\/9ZowAAAgQFtAQCCAoA9mENAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":88,"flow_packet_id":1,"flow_first_seen":1490976088958,"flow_last_seen":1490976088958,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976088,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8FFJAAEAGMp2sECrYNF7ohrKQAbsDIHVdAAAAAKAC\/\/\/FYwAAAgQFtAQCCAoA9mEPAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":89,"flow_packet_id":1,"flow_first_seen":1490976089173,"flow_last_seen":1490976089173,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49627,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976089,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Al9AAEAGRJCsECrYNF7ohsHbAFAaMGN6AAAAAKAC\/\/+yQAAAAgQFtAQCCAoA9mElAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":90,"flow_packet_id":1,"flow_first_seen":1490976089227,"flow_last_seen":1490976089227,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976089,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA835BAAEAGZ16sECrYNF7ohrKSAbuabb66AAAAAKAC\/\/\/kmwAAAgQFtAQCCAoA9mEqAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":91,"flow_packet_id":1,"flow_first_seen":1490976089239,"flow_last_seen":1490976089239,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976089,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8TPtAAEAG+fOsECrYNF7ohrKTAbvSFy3QAAAAAKAC\/\/892gAAAgQFtAQCCAoA9mErAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":92,"flow_packet_id":1,"flow_first_seen":1490976089426,"flow_last_seen":1490976089426,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49630,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976089,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZGdAAEAG4oesECrYNF7ohsHeAFAhsQVZAAAAAKAC\/\/8IxQAAAgQFtAQCCAoA9mE+AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":87,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976089,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8PTpAAEAGCbWsECrYNF7ohrKPAbuIDFw0AAAAAKAC\/\/9ZPwAAAgQFtAQCCAoA9mFxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":88,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976089,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8FFNAAEAGMpysECrYNF7ohrKQAbsDIHVdAAAAAKAC\/\/\/E\/wAAAgQFtAQCCAoA9mFzAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":85,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX1i9AAEAGb+SsECrYNF7ohrKNAbu9HLbBsNs3v1AYAVePOwAAFgMBAOoBAADmAwP1YthODLslBmCd7PjY7YVBLxQl6oZDQnpqrQA1aXZumyB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB92toAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACGpqAB0AFwAYSkoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":86,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXNF5AAEAGEbasECrYNF7ohrKOAbuEplS1QGBw+lAYAVeALwAAFgMBAOoBAADmAwO2qvjWcAzn6foPrm6RG05xGgv+E5HiiVFKOX3z9RkdZCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAY2toAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":86,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo4RtAAOcGvuY0XuiGrBAq2AG7so5AYHD6hKZVpFAQf\/j8HwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":86,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB94R1AAOcGvo80XuiGrBAq2AG7so5AYHD6hKZVpFAYf\/hPBgAAFgMBAEoCAABGAwFY3n1ZkgSfZxpUVsjukL3QGrN+GftTic3QmVujVubAeSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":86,"flow_packet_id":7,"flow_first_seen":1490976088631,"flow_last_seen":1490976090037,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":86,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd4SBAAOcGvqw0XuiGrBAq2AG7so5AYHFPhKZVpFAYf\/iKdwAAFgMBADBXbXWv9x8yogHMZKeomD9A3X3jhBGhFOe49dACaecBIRmNbQNQ40Kg6WMt6HISTwA=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":85,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoexpAAOcGJOg0XuiGrBAq2AG7so2w2ze\/vRy3sFAQf\/gqXgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":85,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9ex1AAOcGJJA0XuiGrBAq2AG7so2w2ze\/vRy3sFAYf\/h6IgAAFgMBAEoCAABGAwFY3n1Zaj55sS+EvodLnj8hxDSUiAwyyX\/BEsibV0fx7yB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":85,"flow_packet_id":7,"flow_first_seen":1490976088605,"flow_last_seen":1490976090037,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0463{"flow_id":85,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdeyBAAOcGJK00XuiGrBAq2AG7so2w2zgUvRy3sFAYf\/hhmwAAFgMBADAbRVoyWiOBYOT3tZ1jA+7dCzYcrialI08fyQ25bUqqMrZSfP1nFclwrDaYAGhuKLs=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":91,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwtKtAAOcG6040XuiGrBAq2AG7spNBzzb30hct0XASH\/5DQAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":87,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwe6ZAAOcGJFQ0XuiGrBAq2AG7so\/BFRS5iAxcNXASH\/4B4wAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":92,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwa1pAAOcGNKA0XuiGrBAq2ABQwd5KW8E7IbEFWnASH\/57bQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwe7VAAOcGJEU0XuiGrBAq2AG7spKfnILVmm2+u3ASH\/5AVQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":88,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw9UZAAOcGqrM0XuiGrBAq2AG7spCu8tJmAyB1XnASH\/7CGgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":89,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwjedAAOcGEhM0XuiGrBAq2ABQwds2rrGpGjBje3ASH\/5IDwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":87,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwhnJAAOcGGYg0XuiGrBAq2AG7so\/BFRS5iAxcNXASH\/4B4wAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":86,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNF9AAEAGEqSsECrYNF7ohrKOAbuEplWkQGBw+lAQAVd6wQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":85,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo1jBAAEAGcNKsECrYNF7ohrKNAbu9HLewsNs4FFAQAVeoqgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":85,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo1jFAAEAGcNGsECrYNF7ohrKNAbu9HLewsNs4SVAQAVeodQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":85,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj1jJAAEAGcJWsECrYNF7ohrKNAbu9HLewsNs4SVAYAVcEtAAAFAMBAAEBFgMBADCGv234ZBUqozAMPHPOSNvrnGj6Q9P5yYc7q3ziPs4vb7yuShT+GP2ur4y\/pUcWyVQ=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":89,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8AmBAAEAGRI+sECrYNF7ohsHbAFAaMGN6AAAAAKAC\/\/+x3AAAAgQFtAQCCAoA9mGJAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":91,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTPxAAEAG+gasECrYNF7ohrKTAbvSFy3RQc82+FAQAVeNsQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":87,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPTtAAEAGCcisECrYNF7ohrKPAbuIDFw1wRUUulAQAVdMVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":92,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGhAAEAG4pqsECrYNF7ohsHeAFAhsQVaSlvBPFAQAVfF3gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":90,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo35FAAEAGZ3GsECrYNF7ohrKSAbuabb67n5yC1lAQAVeKxgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":88,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFRAAEAGMq+sECrYNF7ohrKQAbsDIHVervLSZ1AQAVcMjAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":89,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmFAAEAGRKKsECrYNF7ohsHbAFAaMGN7Nq6xqlAQAVeSgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":87,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPTxAAEAGCcesECrYNF7ohrKPAbuIDFw1wRUUulAQAVdMVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":91,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXTP1AAEAG+RasECrYNF7ohrKTAbvSFy3RQc82+FAYAVfMxwAAFgMBAOoBAADmAwN2ORpKrhOyHUV07StwwZSHYsVIRIzr5Y8\/9rRF0KIdZyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9GhoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACDo6AB0AFwAYSkoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":91,"flow_packet_id":4,"flow_first_seen":1490976089239,"flow_last_seen":1490976090191,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0711{"flow_id":87,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXPT1AAEAGCNesECrYNF7ohrKPAbuIDFw1wRUUulAYAVfLTAAAFgMBAOoBAADmAwPjfQc08nicJlIWvpWTsnguVDAWVUUtWHA8jlVxZgUfkiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYOjoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":87,"flow_packet_id":7,"flow_first_seen":1490976088937,"flow_last_seen":1490976090191,"flow_tot_l4_data_len":435,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0711{"flow_id":90,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX35JAAEAGZoGsECrYNF7ohrKSAbuabb67n5yC1lAYAVccWAAAFgMBAOoBAADmAwNaeZ4ISZVz+LBPXmReGVk3y0uzNDLI3JpfNeWOq+pSDyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9mpoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYCgoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":90,"flow_packet_id":4,"flow_first_seen":1490976089227,"flow_last_seen":1490976090192,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0711{"flow_id":88,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXFFVAAEAGMb+sECrYNF7ohrKQAbsDIHVervLSZ1AYAVdNGQAAFgMBAOoBAADmAwPYo856fiqLFy2iEPtPPss95VhSsyrseZstWVe+UbRC3CCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9ysoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACKqqAB0AFwAYenoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":88,"flow_packet_id":5,"flow_first_seen":1490976088958,"flow_last_seen":1490976090192,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+1340{"flow_id":85,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":752,"pkt":"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","pkt_caplen":752,"pkt_type":2048,"pkt_ipoffset":14}
+1720{"flow_id":92,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1050,"pkt":"AMDKkaPvePiC0\/vCCABFAAQMZGlAAEAG3rWsECrYNF7ohsHeAFAhsQVaSlvBPFAYAVe23QAAR0VUIC9saWIvYm9vdHN0cmFwL2ltZy9nbHlwaGljb25zLWhhbGZsaW5ncy5wbmcgSFRUUC8xLjENCkhvc3Q6IGFsZXhhLmFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vbGliL2Jvb3RzdHJhcC9jc3MvYm9vdHN0cmFwLm1pbi5jc3MNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KQ29va2llOiBjc3JmPS04NDYxMjczODsgc2Vzc2lvbi1pZC10aW1lPTIwODI3ODcyMDFsOyBzZXNzaW9uLWlkPTE1NC0zMTAzMjY1LTI5MzI1MTY7IGxjLW1haW49ZW5fVVM7IHViaWQtbWFpbj0xNTItODc2MzUwNS03MzA0OTA0OyBzZXNzaW9uLXRva2VuPSI3S0hoNVRqUzVrSkVsck5LcDdpUVlWZEY3U1VyYVV6QzdaallYOFNobzF5bXFZaGp3NElNR1FPNUE4Y3B1TStyS0ZyTVU2a3VjUlpwUDhSb3p5c2hDRVRWdlBIYWVHSzBXSk9LaW1nMnJlRTJvRmszOXhJemVzUXFoeGE5NFZhNVpuOFgyc1E5MDNqT2w2UlllWVowL2VCWDhkdVpoYVRNVE1pRk0veFdsS0NmZHdQNTF4WDhFRmNGcTI2OXBaWkR4YXpNSVJnbzQ1UT0iOyB4LW1haW49IloyU2tCV2VGdDh0YWt4P3VvSE1oQmdXS0o4QlZubTlWMFprVXNmM3FmbHBCaEBMSDBDVDBVU2hvaE1xSHpvWWYiDQpYLVJlcXVlc3RlZC1XaXRoOiBjb20uYW1hem9uLmRlZS5hcHANCg0K","pkt_caplen":1050,"pkt_type":2048,"pkt_ipoffset":14}
+0952{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":92,"flow_packet_id":4,"flow_first_seen":1490976089426,"flow_last_seen":1490976090196,"flow_tot_l4_data_len":1104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49630,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AmazonAlexa","category":"VirtualAssistant"},"http": {"hostname":"alexa.amazon.com","url":"alexa.amazon.com\/lib\/bootstrap\/img\/glyphicons-halflings.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0398{"flow_id":85,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoil9AAOcGFaM0XuiGrBAq2AG7so2w2zhJvRy3sFAQf\/gp1AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":88,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw7D5AAOcGs7s0XuiGrBAq2AG7spCu8tJmAyB1XnASH\/7CGgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":86,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo2lZAAOcGxas0XuiGrBAq2AG7so5AYHGEhKZVpFAQf\/j7lQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":86,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":192,"pkt":"ePiC0\/vCAMDKkVoBCABFAACy4R1AAOcGvlo0XuiGrBAq2AG7so5AYHD6hKZVpFAYf\/g4YAAAFgMBAEoCAABGAwFY3n1ZkgSfZxpUVsjukL3QGrN+GftTic3QmVujVubAeSCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABARYDAQAwV211r\/cfMqIBzGSnqJg\/QN1944QRoRTnuPXQAmnnASEZjW0DUONCoOljLehyEk8A","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":88,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFZAAEAGMq2sECrYNF7ohrKQAbsDIHZNrvLSZ1AQAVcLnQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":86,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoNGBAAEAGEqOsECrYNF7ohrKOAbuEplWkQGBxhFAQAVt6MwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":86,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjNGFAAEAGEmesECrYNF7ohrKOAbuEplWkQGBxhFAYAVshCAAAFAMBAAEBFgMBADDWB3TsQREYcZYFatiyv\/28vS6aqfOrZkK7wt\/6mJgP7+4ogcbosmClPtQFljzrWoE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":86,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":85,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofqZAAOcGIVw0XuiGrBAq2AG7so2w2zhJvRy361AQf\/cpmgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":89,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwkgFAAOcGDfk0XuiGrBAq2ABQwds2rrGpGjBje3ASH\/5IDwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":89,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmJAAEAGRKGsECrYNF7ohsHbAFAaMGN7Nq6xqlAQAVeSgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":89,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmNAAEAGRKCsECrYNF7ohsHbAFAaMGN7Nq6xqlARAVeSfwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":91,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9oyNAAOcG\/Ik0XuiGrBAq2AG7spNBzzb40hcuwFAYf\/gzBgAAFgMBAEoCAABGAwFY3n1aF6lPPNih6vU2L516RRA2PNaAuJQVoSG0DdNj8SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":91,"flow_packet_id":5,"flow_first_seen":1490976089239,"flow_last_seen":1490976090313,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0465{"flow_id":91,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdoytAAOcG\/KE0XuiGrBAq2AG7spNBzzdN0hcuwFAYf\/jUMQAAFgMBADA0x1J7d28auzJxT4u1gKAxdUtWHUew0ZE\/2kS5Yg5wnR4VIrBhZAM9ViqPAHjPKYs=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":88,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9+spAAOcGpOI0XuiGrBAq2AG7spCu8tJnAyB2TVAYf\/h1PwAAFgMBAEoCAABGAwFY3n1a2HUEHb8l+gdOfm0Wpe53BCEMctORC57U0hROwiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":88,"flow_packet_id":8,"flow_first_seen":1490976088958,"flow_last_seen":1490976090313,"flow_tot_l4_data_len":540,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0508{"flow_id":90,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9gXVAAOcGHjg0XuiGrBAq2AG7spKfnILWmm2\/qlAYf\/graAAAFgMBAEoCAABGAwFY3n1ai4AZfffdz5bHBi2EULPj6iyOuJD7kDTLpt0SsyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":90,"flow_packet_id":5,"flow_first_seen":1490976089227,"flow_last_seen":1490976090313,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0397{"flow_id":85,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAogXlAAOcGHok0XuiGrBAq2AG7so2w2zhJvRy6pVAQf+wm6wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":88,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd+tBAAOcGpPw0XuiGrBAq2AG7spCu8tK8AyB2TVAYf\/ihaAAAFgMBADDHfuUUhfI1VeevQcG7Dtps2YOp0PzTwPXBH9I11FOaaptlvKvSxGvagTHcLnkxJmc=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":90,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdgXtAAOcGHlI0XuiGrBAq2AG7spKfnIMrmm2\/qlAYf\/gFiAAAFgMBADDdEn3FnYpyhAP6tAWBSGDR3e8YizyMcWbhCxETNYkJSRnD2z4Ks3QnAjsWHd6G06I=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":92,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo829AANsGuJI0XuiGrBAq2ABQwd5KW8E8IbEJPlAQf\/BDYQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":86,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo5ThAAOcGusk0XuiGrBAq2AG7so5AYHGEhKZV31AQf\/f7WwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":92,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":237,"pkt":"ePiC0\/vCAMDKkVoBCABFAADf83BAANsGt9o0XuiGrBAq2ABQwd5KW8E8IbEJPlAYf\/AGlwAASFRUUC8xLjEgNDA0IE5vdCBGb3VuZA0KeC1hbXpuLVJlcXVlc3RJZDogNGRjYTdkMmMtMTYyYi0xMWU3LTg0YWUtMjM3ZDcwMTMyNzhkDQpDb250ZW50LUVuY29kaW5nOiBnemlwDQpDb250ZW50LUxlbmd0aDogMjANCkRhdGU6IEZyaSwgMzEgTWFyIDIwMTcgMTY6MDE6MzAgR01UDQoNCh+LCAAAAAAAAAADAAAAAAAAAAAA","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":91,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTP5AAEAG+gSsECrYNF7ohrKTAbvSFy7AQc83TVAQAVeMbQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":91,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoTP9AAEAG+gOsECrYNF7ohrKTAbvSFy7AQc83glAQAVeMOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":88,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFdAAEAGMqysECrYNF7ohrKQAbsDIHZNrvLSvFAQAVcLSAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":90,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo35NAAEAGZ2+sECrYNF7ohrKSAbuabb+qn5yDK1AQAVeJggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":88,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoFFhAAEAGMqusECrYNF7ohrKQAbsDIHZNrvLS8VAQAVcLEwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":90,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo35RAAEAGZ26sECrYNF7ohrKSAbuabb+qn5yDYFAQAVeJTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":91,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjTQBAAEAG+cesECrYNF7ohrKTAbvSFy7AQc83glAYAVfM2wAAFAMBAAEBFgMBADCXr4\/yt4GiwUGcbuFVCB2cBxuznUFWEZgKJVh+bLDy4IIkx5KJKIWQCWkDIkdu8RQ=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":92,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGpAAEAG4pisECrYNF7ohsHeAFAhsQk+SlvB81AQAVvBPwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":88,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjFFlAAEAGMm+sECrYNF7ohrKQAbsDIHZNrvLS8VAYAVekygAAFAMBAAEBFgMBADB+QDOBKB6DiUBA1lzxRbrQZIb\/O2BlPKwdonL6yWLccgEqt1tGdPJGYB0bGLj9gTE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":90,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj35VAAEAGZzKsECrYNF7ohrKSAbuabb+qn5yDYFAYAVcm7wAAFAMBAAEBFgMBADDshyTVInbRbN2ymc2iEmiDsTOenwGfxs\/W7cVyh669hp8Femd5jT235TED1jmIn5Q=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2373{"flow_id":91,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_id":91,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+TQJAAEAG+SqsECrYNF7ohrKTAbvSFzSvQc83glAYAVe8ngAA58EZT8d2kwcBeLjXo89JZC0OpowLKB5l6w0+Tdh25bRMzhtVBRQefquUxXZz\/sMi1lSxWRjKY7lHfBBD0MDrgWfqjiVs2FYwgln0ECAFkrOiF\/8ZNIyNvSWb+xRt9yLX3QKkN4dhDCi4bwZVhWTOEDTQZPaUr3q1RC7zrLOzyyDk4ln9u4dAvNGmTPrSiq40a8FCBpyD+0SI3+xZ+IU5wmdC81TDZdqsQcc6m6wkYMtQYkEqiqsxsIcfWYdrvWNkWbGcnlSZeTxShXptzBGVyGDyKSFSmg==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":88,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcFFpAAEAGLPWsECrYNF7ohrKQAbsDIHaIrvLS8VAQAVdwYgAAFwMBACDiFGt3P8H00bwqeclGLndjLOb7EtGRR3+9lH6bsVvM5hcDAQZgV+jfZzFhRRVKWM59IpGTceGuIM3g1HCU8t53\/Pfi01Da3fA2nyr5yW59dTa4tBOOHWD+9dLhncP+rukT9G+CmFH73\/\/q8cLAlsDNCeIO38pKN\/j+4pahP9CX86bzoV7IdtmI7OUBXlKA2QU1sqmnBaZF+bWB7HY48o\/jE6IjncDfj\/j82lx1Hm2wDjJrDPlOsKMpgWZmYB7pxb45WQldo3IO9moSrO45yIyLtE\/fnctF64VxQXXBFi7MaiRacocvQuOyHVTyBYkPKGVNdQrKKgXOT902KqNP85gILmF3v1VJkXW3YjctpPCsP7zdbiX9mhdBX+tkvCb6J0qDIAt1Oqski3lHZK9Fwc3eZUy85uouDrgmRLbnHg2mRvD0vvkeu3JnedeyM1LnFZty3+JLj9T85a5QBoUOWjeFnsIZYbei6Lb6mRXBGHDgA7RDvA7NOnqLuTN86xEBAjXhB6DIJmT77r9DFJZ\/Y0kOzUNVetNnZ1Id89udQ38tCPcL6B7AuOXK+7ChpkOT3AfObjoLkxzcUqADbBohMTzw8FdshqCZ\/VtwreUngvPWoKN2Nm4vrB3JXvZQSQ2wIn4IGi\/IpKStES4MZiubHljkbiqI4OyP6\/kNT0PoZeBVl8ufXs0587xgxPQLtfBJlVlovFFVECPjwCT6LhTTx2pZz3ss+PaZm80W4KUnqn\/jXGRE92lj9+0BgWYPBbMy6Y+DeATSYNdUqYFi0DtnG0JDueFidWj9Bumc+iZW0TlA5nSATzPAYvIfzNJaYYTtYAbInWkCPiFpOt9IctAtdE4WvR6vFYeQfVCyaLJkkFPQjbBWBNkhtoxS6Z2Cc8pPRYlUXQm8Z2y\/bHLfkWAalrzAmwxoxTzfXTmGN35pSYM5Lvgk3n2HHWYALVAE7AKFx\/HMIl7lrmgsOhwSKNHT4dQjPO43LZPUR4o7jldClDhYl6PQI6JCKaQthCMd0XV6B7Kw2B+jUvf0N\/U0NG0tfvwwoB2bPGfnP87w2A+MKiPmpi1A1nMOY8DkHY666YC\/T2Fp3Hq8WteRn3Qtu6g79sYQUUAH6iWyPwyhYSpiyED7Y9GtQbe3B48d5Z6UyBTNGM5bEPJTku46ojefsGtLi5ua9JR+AVpf\/5TC39sxjt6qSHY3qoI4+uZPSSZMhqJd+nUtIXNc7nPWXIOkIuPA4O95giBWIZaTVORwBb5DfrSqpwxaRlWPOz0Y09\/mjyIdybd2+VC7GFoxiADW0oC7v8Y6F7F1vToHTHUGrpypDLdQIKexKDdGI8JBA0+JNR4boiO9GAftFYjqYQz0BG4y+Iqj6YAUPfg1AISuoeZcmxqnM3gddbE6WLVCqY0Hyw0Z26go7auo+Dc3gIqyNSpGh8sATcqG3Lfk5F8Fod8YewQFA99sNf8Lvlx9XrzBXz5ODAbHprj0UkIcxJ6oLqNU7ng9J5tlRqoaCiBZLSxytZiZsBtqwYaKxr0GGEsR4BzxhOtay+\/eVET3MX7jXlO81o\/25AysQ6YpoPrEF0wJ2EV1P6ClcdD0NI5L\/8La9EAGTcRmn6Hwmjg2VT4+\/qJctRGn+pR5e+FUJeemESB2RJyVVrr\/2VRTadxJqtPObpqaKZ49oMxJ9VTgavPZ4tjn42wML+yQuhc6Waz\/YltGBxvay04IHBNYF8zuk2BR3sCDn0p1gz+\/f+799odmDtPHnQNkQSZ8tXi1uo4vJjYhLlnrxvcme\/SimVZcXwa5FJC0+rBkO8JvqOngnLy9kwv3vwMzfsbe9JXSH9NK69XSy1jhabdEQxq9gxmOBSlQSsvfDP1GRsioXaReRu9MPRUN6AS8rn7j7sPvg2nQwqz96CW4U+ZAZnpmaRcL1tpcpRzJvScx3LP+AkB+JSkN2UnXaqQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":88,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+FFtAAEAGMdKsECrYNF7ohrKQAbsDIHw8rvLS8VAYAVfkmQAAYfiB561ng9LvCg1\/ni8hVIclnlRA77AjXYu6e\/IK6OLHJ5GCgaMt\/famG2wgotcnxDjdpZOe1cwonTftUkd\/OqS7qhoSKIqljgP13il+O5dtHCX+g05DwTsUXzBOua19zuDVDMHJtEdIa\/9jpNvxbaVI+Okg\/bQKkvcgLf0h4ZjvXgS14147hRtkKyi3qbfvs2USdhmmawwv0gHDRnyG1q9LB0Ldc6nmaVe4F7Jd6gYW+R9N3\/Znomb290Qs1LbHnbXtH4rMQ+Kx+ZcvJtTplkAfafkH2A==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":90,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0595{"flow_id":90,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":204,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+35dAAEAGZtWsECrYNF7ohrKSAbuabcWZn5yDYFAYAVdbFgAA67UFfZIxmJUo3JpvT8icrXuTKCdSyn0jKciZ9PQ+69k9rIuPqSx+Y1eonhrV\/ieSyOjKgRk6pFhuJdWz9MB844wfIEx\/rxZv40KOtX9mUPgXmn\/cVzlVnuHC5mbQ1st0UXf7CV476OOyPqyLcT+cy0Zw5lLiqu8Abt9AdpBb512iCh\/sGjVAHHrJzGZiYtKCZQ3K6j3m","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":89,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonTNAAOcGAs80XuiGrBAq2ABQwds2rrGqGjBjfFARAH+TVgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":89,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAmRAAEAGRJ+sECrYNF7ohsHbAFAaMGN8Nq6xq1AQAVeSfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":88,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo7oFAAOcGsYA0XuiGrBAq2AG7spCu8tLxAyB2iFAQf\/eMNwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":91,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAorklAAOcG8bg0XuiGrBAq2AG7spNBzzeC0hcu+1AQf\/cNXQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":90,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoi29AAOcGFJM0XuiGrBAq2AG7spKfnINgmm2\/5VAQf\/cKcgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":91,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAosGBAAOcG76E0XuiGrBAq2AG7spNBzzeC0hcu+1AQf\/cNXQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":93,"flow_packet_id":1,"flow_first_seen":1490976090572,"flow_last_seen":1490976090572,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8o8xAAEAGcF6sECrYNu8YuoUVAbs6msJ9AAAAAKAC\/\/863gAAAgQFtAQCCAoA9mGxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2373{"flow_id":91,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":93,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwZiVAAOcGBxE27xi6rBAq2AG7hRXpU+crOprCfnASH\/7pEAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":93,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoo81AAEAGcHGsECrYNu8YuoUVAbs6msJ+6VPnLFAQAVczggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_id":93,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAEro85AAEAGb22sECrYNu8YuoUVAbs6msJ+6VPnLFAYAVetagAAFgMBAP4BAAD6AwNTzm7uRNuMF2nu0jG4OW4cloVHrfFLs+QfEmruD54TVyAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRamoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIysoAHQAXABjq6gABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":93,"flow_packet_id":4,"flow_first_seen":1490976090572,"flow_last_seen":1490976090757,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":94,"flow_packet_id":1,"flow_first_seen":1490976090796,"flow_last_seen":1490976090796,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":87,"pkt":"AMDKkaPvePiC0\/vCCABFAABJWlpAAEARM1CsECrYrBAqAYuOADUANbcep0QBAAABAAAAAAAADXMzLWV4dGVybmFsLTIJYW1hem9uYXdzA2NvbQAAAQAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":94,"flow_packet_id":1,"flow_first_seen":1490976090796,"flow_last_seen":1490976090796,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"s3-external-2.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0398{"flow_id":93,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAobwJAAOcG\/js27xi6rBAq2AG7hRXpU+csOprDgVAQf\/uz2gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":93,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoU6BAANsGJZ427xi6rBAq2AG7hRXpU+csOprDgVAQf\/uz2gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":93,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEU6FAANsGJQE27xi6rBAq2AG7hRXpU+csOprDgVAYf\/uFfwAAFgMDAGQCAABgAwMFxYNk4h7Cqgw+EpcZUuAI2voL1iACiKKQZmILf1NDUCAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACiMWogYyy4KpYQtzAOFhkVEkD0Z++tdsOXV5vG6W882qckfcMhjxJH+","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":93,"flow_packet_id":7,"flow_first_seen":1490976090572,"flow_last_seen":1490976090959,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0388{"flow_id":93,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoo89AAEAGcG+sECrYNu8YuoUVAbs6msOB6VPnyFAQAVsx3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":93,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABbo9BAAEAGcDusECrYNu8YuoUVAbs6msOB6VPnyFAYAVsudAAAFAMDAAEBFgMDACgAAAAAAAAAAB0w4gPWY3YckGqBaIlRln9W1Z9p7Eqgk+86BYrFQm4s","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":94,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":131,"pkt":"ePiC0\/vCAMDKkaPvCABFAAB13VlAAEARsCSsECoBrBAq2AA1i44AYd1op0SBgAABAAIAAAAADXMzLWV4dGVybmFsLTIJYW1hem9uYXdzA2NvbQAAAQABwAwABQABAAAADgAQDXMzLWV4dGVybmFsLTHAGsA5AAEAAQAAAAQABDbnSFg=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":94,"flow_packet_id":2,"flow_first_seen":1490976090796,"flow_last_seen":1490976090982,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":53,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"s3-external-2.amazonaws.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.231.72.88"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":95,"flow_packet_id":1,"flow_first_seen":1490976090991,"flow_last_seen":1490976090991,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8byFAAEAGdXOsECrYNudIWKNcAbsQFQ76AAAAAKAC\/\/\/K3wAAAgQFtAQCCAoA9mHbAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":93,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2273{"flow_id":93,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1439,"pkt":"AMDKkaPvePiC0\/vCCABFAAWRo9JAAEAGawOsECrYNu8YuoUVAbs6mslo6VPnyFAYAVsaZAAAorwvKCUypguS0t0clDFKU1VIF\/yIcCrecT8LlV\/7GlRC5Qmweu3RBIA9rBJJi4ok0UJgddYCY4xTn1gbUo+NHhl21tUZQ4O5409uBwBqPYrOswCxOYF31HDaXlv\/iBDwd1srdg2s35KAYwqGi\/ai39a0VYOnGwz1G14ulaQOK3l7bO2VLeF+m8Qz+xAmfO5B3KpZjbs6mqC8cHcrNatluouZyus6CPvhlVaeJoO8yjeEdJdpGfQFw1Ew61YBiD7\/TDt0IPF31DFovoQ55wD0IBOEFh4R0iWYZ6ebPOD7xZBZOCVg3iuqTA+MyiGX+JmGO2tK3TluE1floqmmdVbCQEgeEw1ea6lKStIDmeBoxVrRkbBWz53ajdGSTpQZtEsmQPL9Sdu4AFlqobPlD7HOUFnNO+fZ7xyv3Ew0pvthSXLKgCregPpIH1Xl9S4AOly3HaMQ4mSr+vgnbRDoK2nCWB\/jFF1IyGaQXimEqTK+p93+\/mCrH8nnzMuXVV493yy4zrO5\/i0TM7fHH9VWsWggE4wOsNiJtAg38WetMkk8HLZRlTv+wTTvTEKcucJYJWokARNUi+bTqHruvGGgvKoYna50EF6cscrTeazdJA4iEGOWQjW4uc947OIZ\/8uoHSyLSCTtO2SXRuqSRYQGLdNEujxfcAyhrOa6X9tn2Kw6aggzMw9alBb1SvtMx1wNNzvm2VZf7vit9CiKzp4KGMN\/nJ9yF\/Who+fRuwPST1NlmI6KCzsoHzoMmyf8dN7SkK90qJgOuaKo+O3T\/TKkm5fdYunrptbadqcTsVu\/qwF\/Vb33Ghtiw80WH\/T+hV1ohVeYE\/+Ug9fCMwmenQhMVnePDukWIejC+elRL7naEhQG49fwcOnHNQzYi9AdRKeCFwVvRJoWFWtSDmQGEwNC38sqhXAZzsr\/jIHPU7D7gkH1+XAXL\/JE6Ws3IbgGuY3WaW34LKcc5Ghc\/cPrbeSOmw9j0kUina08femOG\/8baBi60eIdC3AboFi8OdvbLzmZ8rYpTROt+IFAAMgjlK5DZyT3veAlGpLrmD5HYIlolVmgTZj2AMRMuXpwvZgaHooh0qAMCdQ7sTE3GIE\/eOHth6iAzcXFUoeOmIxwKV9fN+6pJsSEXq7pLKt8cgXRzmv6JaMInXk4OiHQWXE+Hf56iKzOcJ\/mrh71Fnw0VeWSpa2DOUd4zvkA3mJSSTnkflHA+pLm9edSpECb6SSup3dRrilywt91z\/dZJenzkDggwrFIYyaChs+yq9fsnXEHCCbzXQ+g\/A\/HBA0ZA13K9pF0mW2QfjbRy4JVYqzFvXQw4QZm+fFjCjAL5In0qxZ7ZRorDtTjilEj0QSXLwplgC+ApyVbdX3h6\/bi0dx+YfdUIc0jomhA\/1Uox\/BOvGRY5JEEhitlDachDk3b8Iwp7cevR49RVxrL0K5hsTqneRrXWd86o6UBByHG4gyN2z1PIrDGmI5UWEA8zNSbQpI9ikJzYMkEi3W5obPW7LFJIuqMGv9\/MOnqLi6\/r6J94Q33Hw4C30AP+4POuk6d8Z4v5uk8mSmhS5K4ma5dl5A99ED+mUZzZopmhQgneGEqzhPW90Z1K3ZuHkwuc0M7l4rbrzxJhR9sUugf+rHp4i9SBeyEUtYobi5+wbljiBl7AF2UTxmLiNTipJmG1e15QqyXNNbkCTpEqSH2YHaK4Pxa1vgqRaBhYxyW2dl9TO2mkI3LVWataIo+NCqmOGp1t4H+v7EiM+OLk+WcBM4BWADmAmWmUdhWppIHSyTuToFiaok3PFxt9hG51V+YpyErL8FAFdO\/f7K27d\/F0ugovo6qdeqGaUiPjye7t3KDSSAnJ5c=","pkt_caplen":1439,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":93,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2380{"flow_id":93,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":93,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2385{"flow_id":93,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976090,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":96,"flow_packet_id":1,"flow_first_seen":1490976091048,"flow_last_seen":1490976091048,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41821,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA80ahAAEAGEuysECrYNudIWKNdAbtkFLBIAAAAAKAC\/\/\/ViwAAAgQFtAQCCAoA9mHgAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":95,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0KVkAACcGFEQ250hYrBAq2AG7o1w0YmduEBUO+4AS\/\/+yAwAAAgQFmAMDCAEEAgEB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":95,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyJAAEAGdYasECrYNudIWKNcAbsQFQ77NGJnb1AQAVf4XAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_id":95,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":269,"pkt":"AMDKkaPvePiC0\/vCCABFAAD\/byNAAEAGdK6sECrYNudIWKNcAbsQFQ77NGJnb1AYAVcUGAAAFgMBANIBAADOAwPiWwT6rMYxCKpzwVWlHQ4+YJCqbihOIRaiGpLsY6Y1LgAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAhQoKAAD\/AQABAAAAACAAHgAAG3MzLWV4dGVybmFsLTIuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACFpaAB0AFwAY+voAAQA=","pkt_caplen":269,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":95,"flow_packet_id":4,"flow_first_seen":1490976090991,"flow_last_seen":1490976091163,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0406{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0Sq8AACcG8u0250hYrBAq2AG7o117lZ8zZBSwSYAS\/\/89vAAAAgQFmAMDCAEEAgEB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":96,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo0alAAEAGEv+sECrYNudIWKNdAbtkFLBJe5WfNFAQAVeEFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":95,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAozJ1AAOcGcQo250hYrBAq2AG7o1w0YmdvEBUP0lAQAD74ngAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":95,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":146,"pkt":"ePiC0\/vCAMDKkVoBCABFAACEzJ5AAOcGcK0250hYrBAq2AG7o1w0YmdvEBUP0lAYAD5MZQAAFgMDAFcCAABTAwNY3n1bB1IWchbASFbdS+TEN7MPbREAIen8zENYwPlHZyBPSeLkXjji7rxbuBfRuYdiOn9o7tUR6tCEdV9ZFui2uMAvAAALAAsAAgEA\/wEAAQA=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":95,"flow_packet_id":6,"flow_first_seen":1490976090991,"flow_last_seen":1490976091345,"flow_tot_l4_data_len":459,"flow_min_l4_data_len":20,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2316{"flow_id":95,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":2048,"pkt_ipoffset":14}
+2007{"flow_id":95,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":1257,"pkt":"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","pkt_caplen":1257,"pkt_type":2048,"pkt_ipoffset":14}
+1208{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":95,"flow_packet_id":8,"flow_first_seen":1490976090991,"flow_last_seen":1490976091346,"flow_tot_l4_data_len":3134,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":391,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","server_names":"s3-external-1.amazonaws.com,*.s3-external-1.amazonaws.com,s3-external-2.amazonaws.com,*.s3-external-2.amazonaws.com,*.s3.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Baltimore CA-2 G2","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com Inc., CN=*.s3-external-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"C0:51:D8:FA:6B:58:94:F2:3E:4E:7D:B2:36:5F:02:E4:F0:3F:54:FF"}}
+0846{"flow_id":95,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":392,"pkt":"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","pkt_caplen":392,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":95,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":63,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAxzKJAAOcGcPw250hYrBAq2AG7o1w0YnNoEBUP0lAYAD7PgwAAFgMDAAQOAAAA","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":95,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyRAAEAGdYSsECrYNudIWKNcAbsQFQ\/SNGJny1AQAVf3KQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":95,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyVAAEAGdYOsECrYNudIWKNcAbsQFQ\/SNGJtY1AQAWLxhgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":95,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyZAAEAGdYKsECrYNudIWKNcAbsQFQ\/SNGJyFlAQAW3syAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":95,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobydAAEAGdYGsECrYNudIWKNcAbsQFQ\/SNGJzaFAQAXjrawAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":95,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976091,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobyhAAEAGdYCsECrYNudIWKNcAbsQFQ\/SNGJzcVAQAXjrYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":82,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976092,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/hAAEAGPiGsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/91dAAAAgQFtAQCCAoA9mKZAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":87,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXPT5AAEAGCNasECrYNF7ohrKPAbuIDFw1wRUUulAYAVfLTAAAFgMBAOoBAADmAwPjfQc08nicJlIWvpWTsnguVDAWVUUtWHA8jlVxZgUfkiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYOjoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":97,"flow_packet_id":1,"flow_first_seen":1490976093238,"flow_last_seen":1490976093238,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":82,"pkt":"AMDKkaPvePiC0\/vCCABFAABEWltAAEARM1SsECrYrBAqAaKnADUAMOTtwQkBAAABAAAAAAAAC2RwLWd3LW5hLWpzBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":97,"flow_packet_id":1,"flow_first_seen":1490976093238,"flow_last_seen":1490976093238,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"dp-gw-na-js.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2381{"flow_id":90,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXc35hAAEAGYbasECrYNF7ohrKSAbuabb\/ln5yDYFAQAVdY4AAAFwMBACAxOXnbOB00Ydbq0myEW0OkHMSFkb95zBRYrCRko6JpzhcDAQYgNLTnSXQ9svgqfKWVlrQngszukuTE7nKnDUEZYxrlAmYbGa1uZ9dFMEH1kcfHo6zOTAkPkSr3v05auMyQXhxyUM+Qlw0ggqwNfizjxfRy\/UTnOo5Ec6FDh\/4oYfa+J46aZ9XLhR8omFWa60IDdQQgnw7SPrV+xQkLTAA4EIb0XbLbGsllipsNHeXmJeh0aGA3ht0tEkwFfjopVs3JQ9XxwS+ghp7l\/eHyOcCrcWOmijXPfIF7fB1t8qMue6sK75mbRQMyOpYkuHC6vGSBi3C6D9dHCwkc4ciV2PxV9fZegOkUhKJT2g893OeHbn+cGu9FChWLZYJ99HQUOumcrur+nZbplAojB8vDFFR+QLS3\/GjgzyyxRFnp1frnHqivV67H6xaSgX4To2ORRiqXdrWzrZTe5qwPtpIKGR5eCf6IenCVXl4BvbLE4M7\/j4sRpg8PMJpWFmWNpJqMDEzui5IhhQZEpuSYq8+NiyjiECAI3NgvGuGdAb39yEbyx8cvLebCZCLKdESYrjT9T8I24aJkp4ulxShcIvVbEgYsFrt4R7NNQmsZvsRraSN5AHW66\/lyhj2UvGjvWqq3zjkIMYYL7+Wl\/3Ucntf6dJt8ceMiIGFRYfTgvDfUSYChK+gyWNX6m29Vpy7tAffHakNsdC9yHGo7HevDE\/7oR\/VfgDFPU9LW4v1iipwz5CoUO2BkN3RrIQjhk0leTMfmnYusHwNR1\/82MFoho2R+4zWvVCSvCCDudehqGb7zkFaYdpSgeUqDlj\/a302l03x6d\/u5O5VKWEs5+Nm6CKagglsyTDXCtT5GMPJ9qOf1KzFXxmKfh1qPGPUjH6uMj\/GmJy0zHHzFCuFvHHs94qWBxhFpG2tQ6e9QQ1ebYXii\/gf9dlVuG3t0huSqTFhYDKyt5k0Z7s8QZ6WsmWGhC0fE3lSSO40hoN9Y5nrXsLSe6fSqCtQT03d03D02RE6GUz3sp+H8gXUCLmZb6sxqTJ209iw3scEnrzCEcXlA058OSXeJag0rV9Erllz5fbKrpS1kCvdLretW1tBL\/vCaHyRPUTAqLrg3\/yFXv78FN5NS31yhsRbNuWC4KWPGRsbmzbNqXSpLm9kYQLNQHMOzjnXOGZ3ynmiP\/Ekzu5zWrH\/GrQ0KbEt5xXHqnEjilk0STUzBka3cPdy8nHfJ8N2xtcw80\/2Scz\/SxWTBvAAQdmy7Qh965JZml\/onIcinXc8tG+6FIod\/TluEUGqO\/nfAgO\/qyqCOstVYkXzqAYQam9FOMH8sFEB9SdhdZ5rHslSZn9jCWBfaphItGETUpwGVGQ\/+I9\/5IqK59SDBxJZ79K\/K9KvvugTFitD8lD0I2dNrqDwk3SMpZ13IUi2xIZtYvGPPcHy\/hI5llZnaVeOqmx4KCM5wXWEoVcrVr0r4sd7p9HPoLeCWaW3j2BR5b0AVjA3Y0mdbN+C2RII\/VeVkCMaX6Su\/9FSy+A5KL6eDEQd1qNbMiJbjsWCnRcJSsq9GonkVGG2LnjE+qXT\/xBRWhUnnEiYNkH8484UfDNwoRVAPYeEM+Z\/TZQ3oKNstYo9ztA\/jxXvIXHuodw2JOBGY\/IqGutMlHdpOGB9ycbkRfwWNOIH8EKqoPD0gUTmb3jdoKTbIOjsbke6GQYzPhkZUJeiFuZQz02XnBPUJ+wKESpvBxhgVUuJl39RFf1GG87lRo94Wath7m0EGZK7ql7mBTpGY1K8j8\/X\/f8GwEd8JQwxjM+YuL20vfjEYa1AeWltEDcjw4Nd6ekBcJiZqv\/llpjT9sejK8H5iNlSWhjJmuUtkLe3YTNvZGPqOYEltH7SvUFE4WbOGrTQ13ySWzAifVyF\/DP56aNnNXFMewttDnvLLszCgJdF\/ZvgK9fj2UpjYBDMa8bM=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":97,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":121,"pkt":"ePiC0\/vCAMDKkaPvCABFAABr3WJAAEARsCWsECoBrBAq2AA1oqcAV3huwQmBgAABAAIAAAAAC2RwLWd3LW5hLWpzBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAIQACwhkcC1ndy1uYcAYwDQAAQABAAAAFAAEsCBlNA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":97,"flow_packet_id":2,"flow_first_seen":1490976093238,"flow_last_seen":1490976093355,"flow_tot_l4_data_len":135,"flow_min_l4_data_len":48,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"dp-gw-na-js.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"176.32.101.52"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":98,"flow_packet_id":1,"flow_first_seen":1490976093358,"flow_last_seen":1490976093358,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA88bJAAEAGXMysECrYsCBlNKvhAbv82ZN1AAAAAKAC\/\/+6GAAAAgQFtAQCCAoA9mLHAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2373{"flow_id":91,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwL+xAAOcGd56wIGU0rBAq2AG7q+GBdUC1\/NmTdnASH\/53tgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":98,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bNAAEAGXN+sECrYsCBlNKvhAbv82ZN2gXVAtlAQAVfCJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":98,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":246,"pkt":"AMDKkaPvePiC0\/vCCABFAADo8bRAAEAGXB6sECrYsCBlNKvhAbv82ZN2gXVAtlAYAVdf+wAAFgMBALsBAAC3AwMUk28qOfCX+6BknWYBVekF4sddVYXUxYb5G4wUZo66+AAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAbmpqAAD\/AQABAAAAABsAGQAAFmRwLWd3LW5hLWpzLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAACwACAQAACgAKAAiamgAdABcAGCoqAAEA","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":98,"flow_packet_id":4,"flow_first_seen":1490976093358,"flow_last_seen":1490976093491,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":20,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dp-gw-na-js.amazon.com","ja3":"731bcada65b0a6f850bada3bdcd716d1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0397{"flow_id":98,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoBI1AAN0GrQWwIGU0rBAq2AG7q+GBdUC2\/NmUNlAQASzBkgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":98,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcBI5AAN0Gp1CwIGU0rBAq2AG7q+GBdUC2\/NmUNlAQASzHCgAAFgMDDUUCAABNAwNY3n1di6S2tK83OuR6x\/Vk1WfaHQb\/fjmvRs8+b+gskCBY3n1dFrR1oDAIXc3AuFkKnOfZtk\/GQhS3v6zIpdKk+sAvAAAF\/wEAAQALAAufAAucAAZaMIIGVjCCBT6gAwIBAgIQddu4RKgnp9AKBCFQ7BHJUDANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDkyNDAwMDAwMFoXDTE3MDkxMzIzNTk1OVowbTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcMB1NlYXR0bGUxGTAXBgNVBAoMEEFtYXpvbi5jb20sIEluYy4xHDAaBgNVBAMME2RwLWd3LW5hLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7oSPmCckd3KygN+T1DM19CWoYk8vZUE\/JozMKL0TpIMe2QeyHMQqdvqaTuPI1brDtyJbyyUfky9CMjFZ4\/tvGndISi9iXCBd\/gPvUvGcsSjUMmkVX8XGjs3FEnL4Z3hRs\/CllzL\/6cXLWDDi9efHIvk0j8Bjed4VdqYEH\/daD81tKURUPyonU3HUFeNxy0KGg5KjjJDlrfSej1TM4J61ccyWVjumCH1AT0ltIhLc5tLpeI4wDSipJrdBEUPmNmWgoiucipYr0XpAqxsnLrIhgM76i6VIGfomUkz5rRY0q7O+SfsNjbhKHOsFWqJtoXTcYpmtiCV8qsbnm9227E89AgMBAAGjggLfMIIC2zCBjgYDVR0RBIGGMIGDghNkcC1ndy1uYS5hbWF6b24uY29tghZkcC1ndy1uYS1qcy5hbWF6b24uY29tghVkcC1ndy1uYS5hbWF6b24uY28udWuCEmRwLWd3LW5hLmFtYXpvbi5kZYIVZHAtZ3ctbmEuYW1hem9uLmNvLmpwghJkcC1ndy1uYS5hbWF6b24uaW4wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVdbL95eAAAEAwBGMEQCIGBJj2409lWMTY3leVh+hZadQ9CA1g7R7q8ufddk53u7AiARfDhfwoOuM5JgidbgN\/Tmdb1UQXcO\/E9BYW50gez\/OQB1AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT\/vEAAABV1sv3yYAAAQDAEYwRAIgYUUxMXJECP+ra5zTlmT7KHJ3uzsD5rDZB5gUoNfVOdgCIAQwwZ7n5B+1wXaalm1d1jJFC9AfOu5DmAUon0RVoM+uMA0GCSqGSIb3DQEBCwU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":98,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1041{"flow_id":98,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976093,"pkt_len":536,"pkt":"ePiC0\/vCAMDKkVoBCABFAAIKBJBAAN0GqyCwIGU0rBAq2AG7q+GBdUwe\/NmUNlAYASynKAAAkegkm0ZAZfQics2Z+IgR9fN\/5jOC5qjFfv7QCOIlWAhxaObNouYU3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5GeHw6w3jBSZIaJqp1mnA52DIDydNgq+Lg6ztfWDxG+a6sU9b1BoCJjifG6D28pY2YtP6yMcsX7x+TUD\/I7T4wpxwwAAUkDABdBBDQ7Zsmi55awstxAoD5YVFuS80uahpNp94czUjdedxVwigtOuX1ppyilGVgDD3v4BhhIHte5frdW5MKSlwHtCDQEAQEALIVuocSYhYFp9IkTvzZqAqftCQeVFoWhQjK9KbxAC2EUc4oLdWWjhDVD2V277NueUY1C1XRZP9yiQXEO7eETvAIwU\/2fPusBVepINnoPhS2BAxsuEPcA+i3vQVGLzS\/b9i8QgKpc96JJQ5TcPOg3n43GSlJu1gSJxWBI6R4oEIpJpYydJ9bJrVYXcTrzg0YeSTfxyivoT49t9C6dcKIj0J7tNCyp4P9Nzm1xjM\/EaTWoPfbkiS+N4KWI5u+yKLPHG46EfVj3IYUZAQFQNI0crI\/nChUZjglRmX0Hxa4Or7dZxgFwPaZlWR7Lx2rUolF0u3L3rboNyzPaWPrmGplFNQ4AAAA=","pkt_caplen":536,"pkt_type":2048,"pkt_ipoffset":14}
+1245{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":98,"flow_packet_id":8,"flow_first_seen":1490976093358,"flow_last_seen":1490976093953,"flow_tot_l4_data_len":3782,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dp-gw-na-js.amazon.com","server_names":"dp-gw-na.amazon.com,dp-gw-na-js.amazon.com,dp-gw-na.amazon.co.uk,dp-gw-na.amazon.de,dp-gw-na.amazon.co.jp,dp-gw-na.amazon.in","ja3":"731bcada65b0a6f850bada3bdcd716d1","ja3s":"fbe78c619e7ea20046131294ad087f05","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=dp-gw-na.amazon.com","fingerprint":"27:E5:06:34:82:69:BC:97:5E:28:A3:C1:5A:23:81:C7:E3:28:95:8C"}}
+0647{"flow_id":98,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":246,"pkt":"AMDKkaPvePiC0\/vCCABFAADo8bVAAEAGXB2sECrYsCBlNKvhAbv82ZN2gXVAtlAYAVdf+wAAFgMBALsBAAC3AwMUk28qOfCX+6BknWYBVekF4sddVYXUxYb5G4wUZo66+AAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAbmpqAAD\/AQABAAAAABsAGQAAFmRwLWd3LW5hLWpzLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAACwACAQAACgAKAAiamgAdABcAGCoqAAEA","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":92,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGtAAEAG4pesECrYNF7ohsHeAFAhsQk+SlvB81ARAVvBPgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":96,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo0apAAEAGEv6sECrYNudIWKNdAbtkFLBJe5WfNFARAVeEFAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":98,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":246,"pkt":"AMDKkaPvePiC0\/vCCABFAADo8bZAAEAGXBysECrYsCBlNKvhAbv82ZN2gXVAtlAYAVdf+wAAFgMBALsBAAC3AwMUk28qOfCX+6BknWYBVekF4sddVYXUxYb5G4wUZo66+AAAIBoazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAbmpqAAD\/AQABAAAAABsAGQAAFmRwLWd3LW5hLWpzLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAACwACAQAACgAKAAiamgAdABcAGCoqAAEA","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":60,"pkt":"AMDKkaPvePiC0\/vCiQ0CDAoBZRIAwMqRdPh4+ILT+8IAwMqRo+\/dFACgxgAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":35085,"pkt_ipoffset":14}
+0181{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","type":35085}
+0389{"flow_id":98,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bdAAEAGXNusECrYsCBlNKvhAbv82ZQ2gXVGalAQAWK7qAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":98,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bhAAEAGXNqsECrYsCBlNKvhAbv82ZQ2gXVMHlAQAW216QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":98,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8blAAEAGXNmsECrYsCBlNKvhAbv82ZQ2gXVOAFAQAXmz+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":98,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACm8bpAAEAGXFqsECrYsCBlNKvhAbv82ZQ2gXVOAFAYAXm2wAAAFgMDAEYQAABCQQTckZsd8+RkJuResgaQkK5Mcc05joYp36isSPV1sAa1yemGa4THFw80p6P6KN15VMfq3SViqxH31nD0WeDHJsEsFAMDAAEBFgMDACgAAAAAAAAAAGopQvnydwKwwVYbSE9q3k9HY9HgvpLHXtXC1bca0c0e","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":21,"flow_packet_id":10,"flow_first_seen":1490976031691,"flow_last_seen":1490976032855,"flow_tot_l4_data_len":2382,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1366,"flow_avg_l4_data_len":238,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49572,"dst_port":80,"l4_proto":"tcp"}
+0398{"flow_id":98,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoMwpAAOcGdIiwIGU0rBAq2AG7q+GBdU4A\/NmUNlAQASy0SAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":92,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAocVhAAOcGLqo0XuiGrBAq2ABQwd5KW8HzIbEJP1ARAH\/CGQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":96,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":61,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAvXMBAAOcG4OA250hYrBAq2AG7o117lZ80ZBSwSlAYADpuIQAAFQAAAAIBAA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":96,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXMFAAOcG4OY250hYrBAq2AG7o117lZ87ZBSwSlAUADqFJgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":92,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZGxAAEAG4pasECrYNF7ohsHeAFAhsQk\/SlvB9FAQAVvBPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":96,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976094,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAotR9AAEAGL4msECrYNudIWKNdAbtkFLBKAAAAAFAEAACgQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":90,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976098,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":90,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976098,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiNpAAOcGFyg0XuiGrBAq2AG7spKfnINgmm3FmVAQf+AE1QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":87,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXPT9AAEAGCNWsECrYNF7ohrKPAbuIDFw1wRUUulAYAVfLTAAAFgMBAOoBAADmAwPjfQc08nicJlIWvpWTsnguVDAWVUUtWHA8jlVxZgUfkiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9CgoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYOjoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":87,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9dQ5AAOcGKp80XuiGrBAq2AG7so\/BFRS6iAxdJFAYf\/g3GQAAFgMBAEoCAABGAwFY3n1j3jcPsMcAIdiIuSLM88\/OFSZtrCeaXYUsGhLw9iCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":87,"flow_packet_id":10,"flow_first_seen":1490976088937,"flow_last_seen":1490976099286,"flow_tot_l4_data_len":1058,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0465{"flow_id":87,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABddRBAAOcGKr00XuiGrBAq2AG7so\/BFRUPiAxdJFAYf\/h2aQAAFgMBADCdGcwOIl710sxEJNcOJTZXD3j+sWleBy0Peiv+xTQTfEXF8gc2Rm1CibUI7TEm3B8=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":87,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPUBAAEAGCcOsECrYNF7ohrKPAbuIDF0kwRUVD1AQAVdLEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":87,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoPUFAAEAGCcKsECrYNF7ohrKPAbuIDF0kwRUVRFAQAVdK2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":87,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjPUJAAEAGCYasECrYNF7ohrKPAbuIDF0kwRUVRFAYAVe7gAAAFAMBAAEBFgMBADCfjEPAbb36FJormBeZ\/8MCYmVtS5QtNfExD9E34Tt+s8RDj7n3ctNLzBzT29bTpD4=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":87,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976099,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeCJAAOcGJ+A0XuiGrBAq2AG7so\/BFRVEiAxdX1AQf\/fL\/wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":99,"flow_packet_id":1,"flow_first_seen":1490976100559,"flow_last_seen":1490976100559,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34073,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8EgZAAEAGAiWsECrYNu8YuoUZAbtS0XeRAAAAAKAC\/\/9pqQAAAgQFtAQCCAoA9mWXAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":100,"flow_packet_id":1,"flow_first_seen":1490976100811,"flow_last_seen":1490976100811,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8BwBAAEAGDSusECrYNu8YuoUaAbt\/SWKxAAAAAKAC\/\/9R9gAAAgQFtAQCCAoA9mWxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":101,"flow_packet_id":1,"flow_first_seen":1490976100859,"flow_last_seen":1490976100859,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8OO5AAEAGq6asECrYNudIWKNhAbuICV1bAAAAAKAC\/\/8AqwAAAgQFtAQCCAoA9mW1AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":82,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/lAAEAGPiCsECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/9yUQAAAgQFtAQCCAoA9mW8AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":100,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw6qtAAOcGgoo27xi6rBAq2AG7hRpDnUSYf0lisnASH\/5McwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0s4IAACcGiho250hYrBAq2AG7o2ETwX1YiAldXIAS\/\/\/2XwAAAgQFmAMDCAEEAgEB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":100,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976100,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBwFAAEAGDT6sECrYNu8YuoUaAbt\/SWKyQ51EmVAQAVeW5AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":101,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOO9AAEAGq7msECrYNudIWKNhAbuICV1cE8F9WVAQAVc8uQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":100,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErBwJAAEAGDDqsECrYNu8YuoUaAbt\/SWKyQ51EmVAYAVcVawAAFgMBAP4BAAD6AwNQLskK0EtMvl083kPSq0nopXQlOdvR+0IZKHw7KLO7aiAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACRysoAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIKioAHQAXABgKCgABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":100,"flow_packet_id":4,"flow_first_seen":1490976100811,"flow_last_seen":1490976101001,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0725{"flow_id":101,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":301,"pkt":"AMDKkaPvePiC0\/vCCABFAAEfOPBAAEAGqsGsECrYNudIWKNhAbuICV1cE8F9WVAYAVfc9gAAFgMBAPIBAADuAwN6LJpcPFiGGpu9Ln0VWrwN6uX9+Oq10gWhn0l9jMi\/ACBPSeLkXjji7rxbuBfRuYdiOn9o7tUR6tCEdV9ZFui2uAAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACFmpoAAP8BAAEAAAAAIAAeAAAbczMtZXh0ZXJuYWwtMi5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIKioAHQAXABhaWgABAA==","pkt_caplen":301,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":101,"flow_packet_id":4,"flow_first_seen":1490976100859,"flow_last_seen":1490976101001,"flow_tot_l4_data_len":359,"flow_min_l4_data_len":20,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":100,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQZAANsG3Dc27xi6rBAq2AG7hRpDnUSZf0lislAQARyXHwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":100,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQdAANsG3DY27xi6rBAq2AG7hRpDnUSZf0ljtVAQASyWDAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":100,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEnQhAANsG25k27xi6rBAq2AG7hRpDnUSZf0ljtVAYASyamAAAFgMDAGQCAABgAwNomJJTyRLdMZEQGwStnUDPt2Okhn+MHFq33qGLoWDjqiAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDAChyA9xUSZViCGDQ+CAg5P+SmIxrL5EQPvw8f2D6svvPM\/eNbomZ3\/FO","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":100,"flow_packet_id":7,"flow_first_seen":1490976100811,"flow_last_seen":1490976101100,"flow_tot_l4_data_len":583,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0390{"flow_id":100,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoBwNAAEAGDTysECrYNu8YuoUaAbt\/SWO1Q51FNVAQAVuVQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":100,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABbBwRAAEAGDQisECrYNu8YuoUaAbt\/SWO1Q51FNVAYAVtTewAAFAMDAAEBFgMDACgAAAAAAAAAAIPLBXx6v98+bexAuiXMZSMm8L\/q1sZ\/uxD1ItJ87nj5","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":100,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2270{"flow_id":100,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":1439,"pkt":"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","pkt_caplen":1439,"pkt_type":2048,"pkt_ipoffset":14}
+1979{"flow_id":100,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":1220,"pkt":"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","pkt_caplen":1220,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":101,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoaBZAAOcG1ZE250hYrBAq2AG7o2ETwX1ZiAleU1AQAD482wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":101,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":146,"pkt":"ePiC0\/vCAMDKkVoBCABFAACEaBdAAOcG1TQ250hYrBAq2AG7o2ETwX1ZiAleU1AYAD4ICwAAFgMDAFcCAABTAwNY3n1llS4Esy4awxtds68GA4tb2AgmMZO8jk83k75XHyAGw6pP2tZgkbIS4p8bLezgqIPjTSDOaVq9aJoKfGBKDMAvAAALAAsAAgEA\/wEAAQA=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":101,"flow_packet_id":6,"flow_first_seen":1490976100859,"flow_last_seen":1490976101182,"flow_tot_l4_data_len":491,"flow_min_l4_data_len":20,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2318{"flow_id":101,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":2048,"pkt_ipoffset":14}
+2008{"flow_id":101,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":1257,"pkt":"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","pkt_caplen":1257,"pkt_type":2048,"pkt_ipoffset":14}
+1209{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":101,"flow_packet_id":8,"flow_first_seen":1490976100859,"flow_last_seen":1490976101183,"flow_tot_l4_data_len":3166,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":395,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s3-external-2.amazonaws.com","server_names":"s3-external-1.amazonaws.com,*.s3-external-1.amazonaws.com,s3-external-2.amazonaws.com,*.s3-external-2.amazonaws.com,*.s3.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"ea615e28cb25adfb2f261151eab3314f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Baltimore CA-2 G2","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com Inc., CN=*.s3-external-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"C0:51:D8:FA:6B:58:94:F2:3E:4E:7D:B2:36:5F:02:E4:F0:3F:54:FF"}}
+0846{"flow_id":101,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":392,"pkt":"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","pkt_caplen":392,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":101,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":63,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAxaBtAAOcG1YM250hYrBAq2AG7o2ETwYlSiAleU1AYAD4TwAAAFgMDAAQOAAAA","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":101,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPFAAEAGq7esECrYNudIWKNhAbuICV5TE8F9tVAQAVc7ZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":101,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPJAAEAGq7asECrYNudIWKNhAbuICV5TE8GDTVAQAWI1wwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":101,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPNAAEAGq7WsECrYNudIWKNhAbuICV5TE8GIAFAQAW0xBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":101,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPRAAEAGq7SsECrYNudIWKNhAbuICV5TE8GJUlAQAXgvqAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":101,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoOPVAAEAGq7OsECrYNudIWKNhAbuICV5TE8GJW1AQAXgvnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":100,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQlAANsG3DQ27xi6rBAq2AG7hRpDnUU1f0lpnFAQAViPXQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":99,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8EgdAAEAGAiSsECrYNu8YuoUZAbtS0XeRAAAAAKAC\/\/9pRQAAAgQFtAQCCAoA9mX7AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":99,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwX5pAAOcGDZw27xi6rBAq2AG7hRl1e+g1UtF3knASH\/6OkAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":99,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoEghAAEAGAjesECrYNu8YuoUZAbtS0XeSdXvoNlAQAVfZAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":99,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976101,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofrxAANsG+oE27xi6rBAq2AG7hRl1e+g2UtF3klAQARzZPAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2270{"flow_id":100,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976102,"pkt_len":1439,"pkt":"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","pkt_caplen":1439,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":100,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976102,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAonQpAANsG3DM27xi6rBAq2AG7hRpDnUU1f0lvBVAQAYiJxAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976104,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8G7RAAEAGvmWsECrYCsl+8Z0IH5CvoFXQAAAAAKAC\/\/+9NAAAAgQFtAQCCAoA9mcoAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976104,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WzhAAEAGfuGsECrYCsl+8Z0KH5BhrRWqAAAAAKAC\/\/9LNAAAAgQFtAQCCAoA9mdAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":44,"flow_packet_id":11,"flow_first_seen":1490976044439,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":2423,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49589,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":27,"flow_packet_id":32,"flow_first_seen":1490976041156,"flow_last_seen":1490976043655,"flow_tot_l4_data_len":11044,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":345,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45661,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":28,"flow_packet_id":18,"flow_first_seen":1490976041384,"flow_last_seen":1490976042405,"flow_tot_l4_data_len":2759,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1118,"flow_avg_l4_data_len":153,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45662,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":29,"flow_packet_id":18,"flow_first_seen":1490976041400,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":2791,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1150,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45663,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":42,"flow_packet_id":26,"flow_first_seen":1490976044189,"flow_last_seen":1490976046415,"flow_tot_l4_data_len":6933,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1198,"flow_avg_l4_data_len":266,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45673,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":43,"flow_packet_id":24,"flow_first_seen":1490976044219,"flow_last_seen":1490976046417,"flow_tot_l4_data_len":6925,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1214,"flow_avg_l4_data_len":288,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45674,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":45,"flow_packet_id":22,"flow_first_seen":1490976044488,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":4870,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1166,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45676,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":46,"flow_packet_id":17,"flow_first_seen":1490976044502,"flow_last_seen":1490976046415,"flow_tot_l4_data_len":2771,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1150,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45677,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":47,"flow_packet_id":14,"flow_first_seen":1490976044509,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45678,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":48,"flow_packet_id":13,"flow_first_seen":1490976044521,"flow_last_seen":1490976046418,"flow_tot_l4_data_len":724,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45679,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":36,"flow_packet_id":78,"flow_first_seen":1490976041942,"flow_last_seen":1490976046399,"flow_tot_l4_data_len":43981,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":563,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54411,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":37,"flow_packet_id":17,"flow_first_seen":1490976041961,"flow_last_seen":1490976042341,"flow_tot_l4_data_len":6241,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":367,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54412,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":38,"flow_packet_id":6,"flow_first_seen":1490976042054,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54413,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":38,"flow_packet_id":6,"flow_first_seen":1490976042054,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54413,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":40,"flow_packet_id":29,"flow_first_seen":1490976043814,"flow_last_seen":1490976046408,"flow_tot_l4_data_len":10991,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":379,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42129,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":41,"flow_packet_id":32,"flow_first_seen":1490976043814,"flow_last_seen":1490976046401,"flow_tot_l4_data_len":11707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":365,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42130,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":35,"flow_packet_id":25,"flow_first_seen":1490976041870,"flow_last_seen":1490976042512,"flow_tot_l4_data_len":7430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":297,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34019,"dst_port":443,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":31,"flow_packet_id":2,"flow_first_seen":1490976041434,"flow_last_seen":1490976041437,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38391,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":31,"flow_packet_id":2,"flow_first_seen":1490976041434,"flow_last_seen":1490976041437,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38391,"dst_port":8080,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":24,"flow_packet_id":24,"flow_first_seen":1490976035553,"flow_last_seen":1490976036358,"flow_tot_l4_data_len":6484,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38363,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":25,"flow_packet_id":18,"flow_first_seen":1490976037754,"flow_last_seen":1490976042398,"flow_tot_l4_data_len":3903,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":216,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38364,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":102,"flow_packet_id":1,"flow_first_seen":1490976107217,"flow_last_seen":1490976107217,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":83,"pkt":"AMDKkaPvePiC0\/vCCABFAABFWlxAAEARM1KsECrYrBAqATiMADUAMXUjXSIBAAABAAAAAAAADHNraWxscy1zdG9yZQZhbWF6b24DY29tAAABAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":102,"flow_packet_id":1,"flow_first_seen":1490976107217,"flow_last_seen":1490976107217,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"skills-store.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0449{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":99,"pkt":"ePiC0\/vCAMDKkaPvCABFAABV3nRAAEARrymsECoBrBAq2AA1OIwAQbpsXSKBgAABAAEAAAAADHNraWxscy1zdG9yZQZhbWF6b24DY29tAAABAAHADAABAAEAAAA7AAQ27x39","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":102,"flow_packet_id":2,"flow_first_seen":1490976107217,"flow_last_seen":1490976107359,"flow_tot_l4_data_len":114,"flow_min_l4_data_len":49,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"skills-store.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.29.253"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":103,"flow_packet_id":1,"flow_first_seen":1490976107365,"flow_last_seen":1490976107365,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZVhAAEAGqY+sECrYNu8d\/Z+VAbuWKg0YAAAAAKAC\/\/9uYQAAAgQFtAQCCAoA9mhAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":104,"flow_packet_id":1,"flow_first_seen":1490976107365,"flow_last_seen":1490976107365,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA87ItAAEAGIlysECrYNu8d\/Z+WAbsjoITLAAAAAKAC\/\/9pNwAAAgQFtAQCCAoA9mhAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":105,"flow_packet_id":1,"flow_first_seen":1490976107366,"flow_last_seen":1490976107366,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40855,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8yY5AAEAGRVmsECrYNu8d\/Z+XAbtod6HOAAAAAKAC\/\/8HXAAAAgQFtAQCCAoA9mhAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":106,"flow_packet_id":1,"flow_first_seen":1490976107455,"flow_last_seen":1490976107455,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fklAAEAGkJ6sECrYNu8d\/Z+YAbtWLhYAAAAAAKAC\/\/+laQAAAgQFtAQCCAoA9mhJAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":104,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwq71AAOcGvDU27x39rBAq2AG7n5aOPa1rI6CEzHASH\/6yzwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":104,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7IxAAEAGIm+sECrYNu8d\/Z+WAbsjoITMjj2tbFAQAVf9QAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":104,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":265,"pkt":"AMDKkaPvePiC0\/vCCABFAAD77I1AAEAGIZusECrYNu8d\/Z+WAbsjoITMjj2tbFAYAVdJtQAAFgMBAM4BAADKAwP4B+BuTBBzSprf0L4ScFyMs5UBKYxjcchKBNI\/gg\/KXQAAIPr6zKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAgerqAAD\/AQABAAAAABwAGgAAF3NraWxscy1zdG9yZS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAICgoAHQAXABhqagABAA==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":104,"flow_packet_id":4,"flow_first_seen":1490976107365,"flow_last_seen":1490976107479,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0402{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwkaBAAOcG1lI27x39rBAq2AG7n5UJgL2ZlioNGXASH\/4siQAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":103,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZVlAAEAGqaKsECrYNu8d\/Z+VAbuWKg0ZCYC9mlAQAVd2+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":103,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":265,"pkt":"AMDKkaPvePiC0\/vCCABFAAD7ZVpAAEAGqM6sECrYNu8d\/Z+VAbuWKg0ZCYC9mlAYAVc0jQAAFgMBAM4BAADKAwNhVWetGOgUJ6\/qUSs5PlkuSczE1Yh13cFVbTVOQK8mPwAAIGpqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAgWpqAAD\/AQABAAAAABwAGgAAF3NraWxscy1zdG9yZS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABiqqgABAA==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":103,"flow_packet_id":4,"flow_first_seen":1490976107365,"flow_last_seen":1490976107486,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0402{"flow_id":106,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwxddAAOcGohs27x39rBAq2AG7n5iFQQi8Vi4WAXASH\/6ctgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":106,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofkpAAEAGkLGsECrYNu8d\/Z+YAbtWLhYBhUEIvVAQAVfnJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":106,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":265,"pkt":"AMDKkaPvePiC0\/vCCABFAAD7fktAAEAGj92sECrYNu8d\/Z+YAbtWLhYBhUEIvVAYAVeFIwAAFgMBAM4BAADKAwNqGtrxEAyAkzWENgeiXeCCp8PZIZCzg0AB0basAuPyZAAAIGpqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAgdraAAD\/AQABAAAAABwAGgAAF3NraWxscy1zdG9yZS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIGhoAHQAXABj6+gABAA==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":106,"flow_packet_id":4,"flow_first_seen":1490976107455,"flow_last_seen":1490976107514,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2356{"flow_id":104,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXctZBAAOcGrLY27x39rBAq2AG7n5aOPa1sI6CFn1AYf\/lqiQAAFgMBCoICAABGAwFY3n1rOIW7oNSRBaCm8PAUHRKCqVhTjWcV2wM8OxfDZCDjl57+rOdpHXFgnzLflMNz4qaHfY\/vFo0YS4Pak7BlqwAvAAsACjAACi0ABOswggTnMIIDz6ADAgECAhA0Qbe7gak5NwZ8R7riI\/gSMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYwNTE0MDAwMDAwWhcNMTcwNTE1MjM1OTU5WjBxMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEgMB4GA1UEAwwXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ae\/8bgpr5OT5\/RUtaQE+q8wE+dsD8nkwfLZqRQzjHJjtegSGks2UzorWQFjWLtG+i256c+CUJ1vhl+EHtTJZ4pFArm7qohc9RDPXtDwDQu18ZpRPvjmPS4TSA8nOK8r9xaX32HNCvTyderUUV1a0NNUIFpK+6LcIjbyGcyCaP\/FJoXT9nbIop+WM\/EKfFsl1CZWkXMot1hRn5sGz2p1s6jZXPOZOTnhZn+CIRXXyMbeIbCppJEhu1Mh3xOBhHGaQTS5iR+rFBoS27FGONZDnloMZn3fHoaN7SAvLzGU4FtqSO4B4tBauIUyFzQYO6iaZJD\/vbuhgO0BQjfmPbkX5AgMBAAGjggFsMIIBaDAiBgNVHREEGzAZghdza2lsbHMtc3RvcmUuYW1hem9uLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAMJuWvUYLSQ3sYCoWOsBqYtkf\/ko1GhTo5gNupiDsn+IgyuHoy4nKuZaSrYNFgoeo2FjedkWNhnFLW30u+UlkI\/WsY5Q52jq4whsQvbJG8+DPpZIdtc6nvl4qPL3EtlOXDVH4Kri+qlwwzdfFhWM3czMmLnBvlCUNq4JBqrvhmA3KF9qj7Wjwy5JVCsia2zuN\/X0zGerui2uwu5O4+4yVRP80x8mfsnUXusXD+hsYHeDwkYPFSKl6XIXtq3usyX8YcpYtOhR\/uF6aqIHWpFwE2\/CT3GQYiDmcFGlMFD5rvfyShw16+6g6q790O1FZfOvT39+SOIypcukxZXDU05O5RwAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2055{"flow_id":104,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1289,"pkt":"ePiC0\/vCAMDKkVoBCABFAAT7tZJAAOcGrZU27x39rBAq2AG7n5aOPbMgI6CFn1AYf\/kOBQAAdXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTAeFw0xMzEwMzEwMDAwMDBaFw0yMzEwMzAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2AXKHHQttRdWOcVKUgmW6EvYDPFon5pCKGLDpTBTflURglsDeg0v4XkEybSWdxmBAZRZ+bz3epkngi23g91aJ3+yA3qcUyXpSB9GT8idKfi+eVb29\/3ZOmjai0uCM0ESw8g8zNaWeoQhGiIEAycXixxoYZMPDlGAMx20tc7rftBirO6zewF072k168rVPanul5jKjapEDiWZShWWpM5tAlQfKmom4gY6Y0istEzRdZNQ\/xMv1trhxhj1n8klXfMAOt4mTbQpCc0PPSNvFkqBFvvygxDDuNbYVTI98b0PvYxSlUoWl3pSIWN1Lxb5xGa+9bUJ2P8nAM1EfG9LP7D3AgMBAAGjggFjMIIBXzASBgNVHRMBAf8ECDAGAQH\/AgEAMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9zMS5zeW1jYi5jb20vcGNhMy1nNS5jcmwwDgYDVR0PAQH\/BAQDAgEGMC8GCCsGAQUFBwEBBCMwITAfBggrBgEFBQcwAYYTaHR0cDovL3MyLnN5bWNiLmNvbTBrBgNVHSAEZDBiMGAGCmCGSAGG+EUBBzYwUjAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM0MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zAfBgNVHSMEGDAWgBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzANBgkqhkiG9w0BAQsFAAOCAQEAXpRWSd2OLWX1wTZRtgPj2p5zGfIfWatYfmwmBSz6gddcIxciLDeT94bsheawo\/0f4jKoRW\/h2fu5r9JwoDJCZb+E\/hYqjz\/Fptajk31D6XQhkTUo9GPpLu339Vx\/S5q1IOkKveBFEAwUlJpdpeNLkegkm0ZAZfQics2Z+IgR9fN\/5jOC5qjFfv7QCOIlWAhxaObNouYU3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5GeHw6w3jBSZIaJqp1mnA52DIDydNgq+Lg6ztfWDxG+a6sU9b1BoCJjifG6D28pY2YtP6yMcsX7x+TUD\/I7T4wpxw4AAAA=","pkt_caplen":1289,"pkt_type":2048,"pkt_ipoffset":14}
+1177{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":104,"flow_packet_id":6,"flow_first_seen":1490976107365,"flow_last_seen":1490976107577,"flow_tot_l4_data_len":3054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":509,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","server_names":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=skills-store.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2A:40:0E:E9:9A:EC:7C:0D:40:AA:C9:C5:66:67:00:B8:3E:90:DC:B2"}}
+0390{"flow_id":104,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7I5AAEAGIm2sECrYNu8d\/Z+WAbsjoIWfjj2zIFAQAWL2rgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":104,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7I9AAEAGImysECrYNu8d\/Z+WAbsjoIWfjj2381AQAW3x0AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_id":104,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":99,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoEglAAEAGAjasECrYNu8YuoUZAbtS0XeSdXvoNlARAVfZAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":103,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2055{"flow_id":103,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1289,"pkt":"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","pkt_caplen":1289,"pkt_type":2048,"pkt_ipoffset":14}
+1177{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":103,"flow_packet_id":6,"flow_first_seen":1490976107365,"flow_last_seen":1490976107622,"flow_tot_l4_data_len":3054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":509,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","server_names":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=skills-store.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2A:40:0E:E9:9A:EC:7C:0D:40:AA:C9:C5:66:67:00:B8:3E:90:DC:B2"}}
+0390{"flow_id":103,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZVtAAEAGqaCsECrYNu8d\/Z+VAbuWKg3sCYDDTlAQAWJwaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":103,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZVxAAEAGqZ+sECrYNu8d\/Z+VAbuWKg3sCYDIIVAQAW1rigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":106,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXczPJAAOcGlVQ27x39rBAq2AG7n5iFQQi9Vi4W1FAYf\/lWXQAAFgMBCoICAABGAwFY3n1rqVW5nc7pK0t8Q96UIvIibG3NJ3jfQ0jSHhJUvSBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvAAsACjAACi0ABOswggTnMIIDz6ADAgECAhA0Qbe7gak5NwZ8R7riI\/gSMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYwNTE0MDAwMDAwWhcNMTcwNTE1MjM1OTU5WjBxMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEgMB4GA1UEAwwXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ae\/8bgpr5OT5\/RUtaQE+q8wE+dsD8nkwfLZqRQzjHJjtegSGks2UzorWQFjWLtG+i256c+CUJ1vhl+EHtTJZ4pFArm7qohc9RDPXtDwDQu18ZpRPvjmPS4TSA8nOK8r9xaX32HNCvTyderUUV1a0NNUIFpK+6LcIjbyGcyCaP\/FJoXT9nbIop+WM\/EKfFsl1CZWkXMot1hRn5sGz2p1s6jZXPOZOTnhZn+CIRXXyMbeIbCppJEhu1Mh3xOBhHGaQTS5iR+rFBoS27FGONZDnloMZn3fHoaN7SAvLzGU4FtqSO4B4tBauIUyFzQYO6iaZJD\/vbuhgO0BQjfmPbkX5AgMBAAGjggFsMIIBaDAiBgNVHREEGzAZghdza2lsbHMtc3RvcmUuYW1hem9uLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAMJuWvUYLSQ3sYCoWOsBqYtkf\/ko1GhTo5gNupiDsn+IgyuHoy4nKuZaSrYNFgoeo2FjedkWNhnFLW30u+UlkI\/WsY5Q52jq4whsQvbJG8+DPpZIdtc6nvl4qPL3EtlOXDVH4Kri+qlwwzdfFhWM3czMmLnBvlCUNq4JBqrvhmA3KF9qj7Wjwy5JVCsia2zuN\/X0zGerui2uwu5O4+4yVRP80x8mfsnUXusXD+hsYHeDwkYPFSKl6XIXtq3usyX8YcpYtOhR\/uF6aqIHWpFwE2\/CT3GQYiDmcFGlMFD5rvfyShw16+6g6q790O1FZfOvT39+SOIypcukxZXDU05O5RwAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2055{"flow_id":106,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1289,"pkt":"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","pkt_caplen":1289,"pkt_type":2048,"pkt_ipoffset":14}
+1177{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":106,"flow_packet_id":6,"flow_first_seen":1490976107455,"flow_last_seen":1490976107625,"flow_tot_l4_data_len":3054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":509,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","server_names":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=skills-store.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2A:40:0E:E9:9A:EC:7C:0D:40:AA:C9:C5:66:67:00:B8:3E:90:DC:B2"}}
+0834{"flow_id":103,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":106,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofkxAAEAGkK+sECrYNu8d\/Z+YAbtWLhbUhUEOcVAQAWLglQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":106,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofk1AAEAGkK6sECrYNu8d\/Z+YAbtWLhbUhUETRFAQAW3btwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0837{"flow_id":106,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":380,"pkt":"AMDKkaPvePiC0\/vCCABFAAFufk5AAEAGj2esECrYNu8d\/Z+YAbtWLhbUhUETRFAYAW0EPgAAFgMBAQYQAAECAQCy6ERn3\/H+A9F2tfAfiBHH+jIl+9RvJUpnytLaG7g4iNG1cbJIX+DEaDmdvMDiOBb6cKilY81S9c\/SKa7uQSznHf9f+KiymXWUoNVB0vm1kg73y1qKYHv9EAv+XmLz739DIQMKA\/r3SEP79I21lpGDTVYKMxua+O3PGvqf5u9koCs2fzg8yt\/gkNnh4DetHgH34g+xBzT2hDMu9XaIevI+Uy5ZkhABef9ySyocvld4eBoWmjXqn2CsFaqv0\/bJuYzhEw8CftnK\/L\/mqdZI2KcTGns3Z5v0GP2sdDhkz8cIcvVCflxZ5Dtz+16asIyK\/LllAMN1j\/NUlsfa67V1CNCZFAMBAAEBFgMBADAQcGyD1uo1T3aj13ZMS9I3tIsHvU8HNF8+cdwlFzpcuiCbYOyEqlasrg6ulwczSXY=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":104,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolI9AAOcG02s27x39rBAq2AG7n5aOPbfzI6CG5VAQf\/RyAwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":104,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjlLpAAOcG0wU27x39rBAq2AG7n5aOPbfzI6CG5VAYf\/RlywAAFAMBAAEBFgMBADBahzZhtyNAERc\/G7PKUrR3JWQi7lb0Ch0v9kKwPp4wmQPOfW8CEmNa4dKuO48eIrw=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":104,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7JFAAEAGImqsECrYNu8d\/Z+WAbsjoIbljj24LlAQAW3wTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":99,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofr1AANsG+oA27xi6rBAq2AG7hRl1e+g2UtF3k1ARARzZOgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":99,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoEgpAAEAGAjWsECrYNu8YuoUZAbtS0XeTdXvoN1AQAVfY\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":103,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAofpRAAOcG6WY27x39rBAq2AG7n5UJgMghlioPMlAQf\/TrvAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":104,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXc7JJAAEAGHLWsECrYNu8d\/Z+WAbsjoIbljj24LlAQAW3XwwAAFwMBACDRc+GAbfOoymuRjqCdQREztByUIMdeakVdUDmbhBrtehcDAQZgKG+c0N1yWSEDF5tB+tuCKTXWt+fUDtLkjGvNdQTKA+KHV6G6FBd6DS+smDH157uBHDcoiKAtEGIuqqFoi\/To091IH58lghg6T0aKVoGP+pEc09xe2fyWD\/t8v1oFAoq7EyEEllnv81yePhgv59mJSBAPbHDFFydyr9bGkWruGMRlgs0ZVKdqc\/U\/g7byH9wlkcJZx2anbdVyewuxtSc1dD6KMskWOma4B4xm8aPDUPnK24yiXDBYNOcEC3Hub0J3xk8usVUgUXcApbGakLWHoZ9EZN7y3FhkTpRkOMCOcgiHnglEi9J7Xb0Zk5\/al73cety+4yXxApo7Auc\/JYvWqvgP+\/n53MjhIyYu9gxRtV9mHnXrerMOVLvX8GTFdneieny\/i0t7KA6WxZQ90lb9+89HPNgs1aVjhGrWwFWSOoenn\/pz7RLTPKpFkGfa5o4xIGQ\/7zAzmVcKgno8VeJrWNRgZZ36QAyHjg8sm59uS8c9l4t8xOEcF4WTJosH8L3N9\/phsck+lXDAa\/f9JMDew0pHglUhpeITkIVO5aZ9fWYuNVHYEZueMjw6a3CXKWgUEDO\/jI+zpp3QQRHG\/zjUErffqlZMhfSS8JHl2LK5GIKA7lDI1nSQCMahlIwBVRC4Z5koau\/UQ5IRNuPUP35rS+9vHF7J5eTpnD4IiF86ofFZHTXuTTg6q4XAcYfQRWm50YbzX6uU5Sb0wxXt9hFike+WzpZqGOlhM43xUYE9339LTwU2rr0ne8fI0NqArTBrQxN6C+B\/7F5YWksCRjISeAOXLmD4807NNtTxQMn3Rk4OO55blolzmcqcS9jybeaM6T9jus8YoNiLCFOxl5bghDXZQ0zfBDkDtSkb5b9x39rbdmxo0CZnaIlS3ZJefOA7yJrTTxpbrNhrEHQKZKu+lr8C3xXf1y\/7k\/ELNuETsY9Oe0Tq3SlgZmNw+zK4JGPM+fLHlSdSVp1HIiPGzLvPUuCuH7Id\/FgeKRBr4tRhCIeqS0yzpMyTHWg4qK3EbG4Rrn9nhf88bb8kA4Kw9WG45mB3tMI8AieaWLCV1LXTHAYIJAixVQORqcV5KF+E3yvIiiJ2ew7FWrnmSWi5jMI07gbEqe09U0emUQ2yLBbgYrTERr5Fd7w1fUMjw7n\/LmvB1vVGIhf1Rw\/t\/q4Q1z3jI7FGjKYFXDDHoWUrR\/bnCFIsHNociKf2S6NKkPK6V9Kxo5wDTFWCPIU2V0kGCyOeRDLMms4IweopAxtwkzNXqjpNX1j20ApnVCx49G72BxiJcW82aLnK+AY3e7nonA7zqHMSa\/zA9tNvVd1JiGoP2\/j+ml95Cf6Whufnqp6yHN5sAuazM2cOmon0UVL9SH60960L6viZAComtbkBcAAsNIv2JdwRwAH60KtCqxoE0gnHHOukV+kvHcH61mxHyLtB7QBvQPtigMlfd9b+xyBDcVI3QJvuS0ZQ9zYRHQa6hzCo3+6up16uqvEtEqgrKMxRVY1rqaONNEc9zDsWCM2846aDCtf0ohGwXd0gq7n3UZ95ZncsLUe1g1TyVo14gRExqSvMOmPAWwn5YLu48oTrw91KdYd3yCtrBLzuvtAE7JnVVaEJ8it075LBJg1\/hu1DCmC5hEyBhd3OaEVqYalO14J7w3AkswjiwgAlyrMhV5z47qBnISHg5VyfjR+03I9wqv\/QwLqkgKTGQGN145TuQmRjUsPhcj2U96na1kfSFHSsCEYDEswnQYcvURjUcO3aGNswsnCWvhXabNLIMETdOrRszPKhwKMT3jtSyHkQ39+vHlOSS0y1qoJwyeEp0veRiqOl6rwasTqqOXSjcytCm3UkW7V9MAPH2d4JdG5\/KgwefCSTqr3CJsio4GUM3GvtRmnWS8+rkpaBcpU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":103,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjfstAAOcG6PQ27x39rBAq2AG7n5UJgMghlioPMlAYf\/RdOwAAFAMBAAEBFgMBADDsacu8jImixmH1RuOBg+Uy\/l2lDg+o8pO6+76EMSWR6zxb714+DoclG9eOLjfuiw8=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":106,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo0LpAAOcGl0A27x39rBAq2AG7n5iFQRNEVi4YGlAQf\/Rb6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":106,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABj0M5AAOcGlvE27x39rBAq2AG7n5iFQRNEVi4YGlAYf\/S6ZAAAFAMBAAEBFgMBADBXkmS8vo5qqM5lhOm5JPsXVBCab5ULVmVa0g+JXLcySdCwyf\/4IcsVskO8g9Ih3BM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":104,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+7JNAAEAGIZKsECrYNu8d\/Z+WAbsjoIyZjj24LlAYAW1SIgAATQ\/61uv6U2YwMDUfRyE+djEifZMvSaSyCLO0CQddgwD1vfbmsUPkJSGT6hVOFNsAcVlhZvWEGzK\/XhMe2wm0PrPTG4lN7ah\/2pViliRddB\/KMbzaO5oQmo736VliB218+AEJnBcODoVlRQ4eym5I4W4XYdrBAS+q8uVCkdrYhesQtLWBwOSek0dpYsLXMo3JWT1JCGrQUTRU\/VKUvvDiholUxMN0W0uboGDV1sHzu10nzizYHfD+5Wg\/nl2wbqKJ0ibMOcU8q2fPATvJbll1ePSBI0PmFg==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":103,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":103,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":284,"pkt":"AMDKkaPvePiC0\/vCCABFAAEOZV9AAEAGqLasECrYNu8d\/Z+VAbuWKhTmCYDIXFAYAW2IngAA1AXVr3zzc8fFUw4nBqUDRZrkWNErlpKH0FFxrebelBtAqA\/S9+VcqNYUHaSJz4h3gJSEJtZqsNpyiRwNTCxltCvpr9VB4l4jhZWzzz7wmZ6mKrAJDutn2u5leFr5L4ue9hTvFMiXN9v8j4RTWAF22F633u9VWoLvzrG3ALVqHhJwkG\/V1q9W7kx9QsFmvaGh93ns9nJlrNdbw8NsUKUOz0hbq9HUF9kJx8dkm0SI7HX1GZ7cIcg3cRv\/yO4XmTElWIEIha65QOXJk6TLcnUhUxtWBt3l4HLBYwbP9vlLD3QYbCGoDPU=","pkt_caplen":284,"pkt_type":2048,"pkt_ipoffset":14}
+2373{"flow_id":106,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":106,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":284,"pkt":"AMDKkaPvePiC0\/vCCABFAAEOflBAAEAGj8WsECrYNu8d\/Z+YAbtWLh3OhUETf1AYAW0kNAAAdA26JWGwpmmML9e4Z1WWC5kg+cE5b42l4ZsZ6BCfXr+AVGdmF4zMQ362uBMsEL2iaKh4j7crEqOqGheC1gPG2THszGi7Zl3NdZRRGAu731Wce+oA+TrMnrvQHhrFtLYbO1Mkulbwh2i6fPAlDjKCbZzZhdDDu5B2YKunCbnQSbNkSsBdTANIKB1Mhs29kDyidD\/PjwGzrSr7WGhJ\/L1q3MbGlYabYZdDkm+EApfYVeynkdBQtNNtZqqu2\/hlL1fnJO8rkRZ6xotCLRcHsbtRm9vIAiSZ0SfxkbkAXZSDyC7qiUC3LHc=","pkt_caplen":284,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":103,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAohK1AAOcG40027x39rBAq2AG7n5UJgMhclioVzFAQf9nlAgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":106,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo1elAAOcGkhE27x39rBAq2AG7n5iFQRN\/Vi4etFAQf9lVMAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":104,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAon2xAAOcGyI427x39rBAq2AG7n5aOPbguI6CG5VAQf\/RxyAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":103,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976107,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1727{"flow_id":106,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976108,"pkt_len":1035,"pkt":"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","pkt_caplen":1035,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":105,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976108,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8yY9AAEAGRVisECrYNu8d\/Z+XAbtod6HOAAAAAKAC\/\/8G+AAAAgQFtAQCCAoA9mikAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":105,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976108,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwt7hAAOcGsDo27x39rBAq2AG7n5d09wMmaHehz3ASH\/4UgAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":105,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976108,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoyZBAAEAGRWusECrYNu8d\/Z+XAbtod6HPdPcDJ1AQAVde8QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":105,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976109,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoyZFAAEAGRWqsECrYNu8d\/Z+XAbtod6HPdPcDJ1ARAVde8AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":105,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976110,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo1g1AAOcGke027x39rBAq2AG7n5d09wMnaHeh0FARgADgRQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":105,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976110,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoyZJAAEAGRWmsECrYNu8d\/Z+XAbtod6HQdPcDKFAQAVde7wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":107,"flow_packet_id":1,"flow_first_seen":1490976114879,"flow_last_seen":1490976114879,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp"}
+0425{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABBWl1AAEARM1WsECrYrBAqAVG6ADUALQ0pp4sBAAABAAAAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":107,"flow_packet_id":1,"flow_first_seen":1490976114879,"flow_last_seen":1490976114879,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0445{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":95,"pkt":"ePiC0\/vCAMDKkaPvCABFAABR3zxAAEARrmWsECoBrBAq2AA1UboAPYqqp4uBgAABAAEAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAAAoABDRe6IY=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":107,"flow_packet_id":2,"flow_first_seen":1490976114879,"flow_last_seen":1490976114880,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":108,"flow_packet_id":1,"flow_first_seen":1490976114885,"flow_last_seen":1490976114885,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8u1JAAEAGi5ysECrYNF7ohrKgAbstn9BiAAAAAKAC\/\/81rgAAAgQFtAQCCAoA9mswAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":109,"flow_packet_id":1,"flow_first_seen":1490976114894,"flow_last_seen":1490976114894,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA88bJAAEAGVTysECrYNF7ohrKhAbvIHJqDAAAAAKAC\/\/\/RDQAAAgQFtAQCCAoA9msxAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":110,"flow_packet_id":1,"flow_first_seen":1490976114906,"flow_last_seen":1490976114906,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8mqJAAEAGrEysECrYNF7ohrKiAbt67fGQAAAAAKAC\/\/\/HLQAAAgQFtAQCCAoA9msyAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":111,"flow_packet_id":1,"flow_first_seen":1490976114921,"flow_last_seen":1490976114921,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA87MtAAEAGWiOsECrYNF7ohrKjAbuMuIf\/AAAAAKAC\/\/8e8QAAAgQFtAQCCAoA9ms0AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":112,"flow_packet_id":1,"flow_first_seen":1490976114940,"flow_last_seen":1490976114940,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976114,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8CnJAAEAGPH2sECrYNF7ohrKkAbvN5GFHAAAAAKAC\/\/8EewAAAgQFtAQCCAoA9ms1AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":109,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwcUdAAOcGLrM0XuiGrBAq2AG7sqGNgYNXyByahHASH\/5IZwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":108,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwOTtAAOcGZr80XuiGrBAq2AG7sqDRCzchLZ\/QY3ASH\/61sgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":110,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwU4dAAOcGTHM0XuiGrBAq2AG7sqKEfV0Neu3xkXASH\/5t1gAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwVCVAAOcGS9U0XuiGrBAq2AG7sqOllKPSjLiIAHASH\/5dvwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw30dAAOcGwLI0XuiGrBAq2AG7sqRySquQzeRhSHASH\/5u1gAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":109,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bNAAEAGVU+sECrYNF7ohrKhAbvIHJqEjYGDWFAQAVeS2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":108,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAou1NAAEAGi6+sECrYNF7ohrKgAbstn9Bj0Qs3IlAQAVcAJAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":110,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomqNAAEAGrF+sECrYNF7ohrKiAbt67fGRhH1dDlAQAVe4RwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":111,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7MxAAEAGWjasECrYNF7ohrKjAbuMuIgApZSj01AQAVeoMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":112,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoCnNAAEAGPJCsECrYNF7ohrKkAbvN5GFIckqrkVAQAVe5RwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":109,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX8bRAAEAGVF+sECrYNF7ohrKhAbvIHJqEjYGDWFAYAVerKQAAFgMBAOoBAADmAwMTUXxa84E2F3pyMjY2W\/V+lEhi9FqJ+EKlZzRwMn7VOCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgGhrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9enoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACFpaAB0AFwAYWloAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":109,"flow_packet_id":4,"flow_first_seen":1490976114894,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0712{"flow_id":108,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXu1RAAEAGir+sECrYNF7ohrKgAbstn9Bj0Qs3IlAYAVf4uwAAFgMBAOoBAADmAwP360WETO0hSDqvk2qAYkKwSgYBIFaAvPrL9FgCIcYj3SCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9SkoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACOrqAB0AFwAYiooAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":108,"flow_packet_id":4,"flow_first_seen":1490976114885,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0712{"flow_id":110,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXmqRAAEAGq2+sECrYNF7ohrKiAbt67fGRhH1dDlAYAVcYsgAAFgMBAOoBAADmAwO2XSVDdXNQjGmQUibPeB5qMKhST7rrpP3BhCu+r5mY3yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9KioAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACFpaAB0AFwAYSkoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":110,"flow_packet_id":4,"flow_first_seen":1490976114906,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0714{"flow_id":111,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX7M1AAEAGWUasECrYNF7ohrKjAbuMuIgApZSj01AYAVdJYgAAFgMBAOoBAADmAwN\/4n78\/jPCxa1OijX2MR8fx7sU0O7ARqXBjxgvMTAhtiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9enoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACOrqAB0AFwAY+voAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":111,"flow_packet_id":4,"flow_first_seen":1490976114921,"flow_last_seen":1490976115066,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0712{"flow_id":112,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXCnRAAEAGO6CsECrYNF7ohrKkAbvN5GFIckqrkVAYAVfgTwAAFgMBAOoBAADmAwOHALGigIjvApxLIe0mGRpTgcLEUyJobZ3dCQZJexl6RCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9uroAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACAoKAB0AFwAYqqoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":112,"flow_packet_id":4,"flow_first_seen":1490976114940,"flow_last_seen":1490976115067,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0509{"flow_id":109,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9YoNAAOcGPSo0XuiGrBAq2AG7sqGNgYNYyBybc1AYf\/ijGAAAFgMBAEoCAABGAwFY3n1zINgI1Vy\/FXdUMuPvUGDLWthjR2H7WINeUtzlBCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":109,"flow_packet_id":5,"flow_first_seen":1490976114894,"flow_last_seen":1490976115189,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0389{"flow_id":109,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bVAAEAGVU2sECrYNF7ohrKhAbvIHJtzjYGDrVAQAVeRlAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":109,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdYrtAAOcGPRI0XuiGrBAq2AG7sqGNgYOtyBybc1AYf\/hN2gAAFgMBADB7pB5S47sHi48VnW8WLmVWafa\/K61NUo6qUxUYWxLiw8b1Kbg\/Xg03sM0eHRceYao=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":110,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9ReVAAOcGWcg0XuiGrBAq2AG7sqKEfV0Oeu3ygFAYf\/ig1AAAFgMBAEoCAABGAwFY3n1zJme6pFAslczvpX19TcUFgg3DbLK17SjfiEEQUyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":110,"flow_packet_id":5,"flow_first_seen":1490976114906,"flow_last_seen":1490976115200,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0510{"flow_id":108,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9RCRAAOcGW4k0XuiGrBAq2AG7sqDRCzciLZ\/RUlAYf\/gsyQAAFgMBAEoCAABGAwFY3n1zE6Tufw7kJSJXbVavRo\/6lNuOwDxaW+i7VIwIKCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":108,"flow_packet_id":5,"flow_first_seen":1490976114885,"flow_last_seen":1490976115200,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0509{"flow_id":111,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9RepAAOcGWcM0XuiGrBAq2AG7sqOllKPTjLiI71AYf\/jGMAAAFgMBAEoCAABGAwFY3n1zTn6J09aDxTBb8TVltBdGJeEW\/LDcikVqGAruryCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":111,"flow_packet_id":5,"flow_first_seen":1490976114921,"flow_last_seen":1490976115200,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0466{"flow_id":108,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdRCtAAOcGW6I0XuiGrBAq2AG7sqDRCzd3LZ\/RUlAYf\/hkXgAAFgMBADA37z1MUXYPCTkZzIkxPt0L62IG2JW4lQJa+PyuDrDQ9\/jP2tysOn1Oi765In4eobE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":111,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdRftAAOcGWdI0XuiGrBAq2AG7sqOllKQojLiI71AYf\/jinwAAFgMBADBGgL8CbH+FphIn8Kw58CgcI1Hvy02Rc+ye4fIk9uZ91iGdsMyT+csUtTaAtdZ19js=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":110,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdRflAAOcGWdQ0XuiGrBAq2AG7sqKEfV1jeu3ygFAYf\/j04AAAFgMBADCZonBElb76M9e\/It2\/9+kwjK0rFBwkaSlpXnXJXqaRCCgerN1nZkwFif0azWrVX28=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":112,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB95rdAAOcGuPU0XuiGrBAq2AG7sqRySquRzeRiN1AYf\/gEdwAAFgMBAEoCAABGAwFY3n1z\/bQjY2ZjlLbA3DZTa+cwMTsfQ+lvAGzSBsvFwiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":112,"flow_packet_id":5,"flow_first_seen":1490976114940,"flow_last_seen":1490976115201,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0466{"flow_id":112,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd5rpAAOcGuRI0XuiGrBAq2AG7sqRySqvmzeRiN1AYf\/gjVwAAFgMBADCY3eZagvXQQKtaOKvRqqxwqtoI6Fa+4RdiQI2sH3uhs\/j8UwHK3sEOkR\/OASIyoEo=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":109,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo8bZAAEAGVUysECrYNF7ohrKhAbvIHJtzjYGD4lAQAVeRXwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":110,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomqVAAEAGrF2sECrYNF7ohrKiAbt67fKAhH1dY1AQAVe3AwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":109,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj8bdAAEAGVRCsECrYNF7ohrKhAbvIHJtzjYGD4lAYAVeLaQAAFAMBAAEBFgMBADAbgko9AFmbaZWFfpPGBhNj6viOE+OxadmZDL5I8fQD9j1v2UbjEyoLFGWZmnSxYkU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":108,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAou1VAAEAGi62sECrYNF7ohrKgAbstn9FS0Qs3d1AQAVf+3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":111,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7M5AAEAGWjSsECrYNF7ohrKjAbuMuIjvpZSkKFAQAVem7AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":108,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAou1ZAAEAGi6ysECrYNF7ohrKgAbstn9FS0Qs3rFAQAVf+qgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":111,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo7M9AAEAGWjOsECrYNF7ohrKjAbuMuIjvpZSkXVAQAVemtwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":110,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAomqZAAEAGrFysECrYNF7ohrKiAbt67fKAhH1dmFAQAVe2zgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":112,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoCnVAAEAGPI6sECrYNF7ohrKkAbvN5GI3ckqr5lAQAVe4AwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":112,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoCnZAAEAGPI2sECrYNF7ohrKkAbvN5GI3ckqsG1AQAVe3zgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":110,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjmqdAAEAGrCCsECrYNF7ohrKiAbt67fKAhH1dmFAYAVcn9wAAFAMBAAEBFgMBADAPpKzHTxyvv9tYIbi3+Q2l4tloo1icixF9vFKR4D8pDcZ++bhsrXbBbiMd0tvp+u0=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":108,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABju1dAAEAGi3CsECrYNF7ohrKgAbstn9FS0Qs3rFAYAVdFBgAAFAMBAAEBFgMBADCH2LItt+70XHQ1SGBbhd\/teuRFnEgxGnygH+vL3m98+WHjV05Dzhhl+mYqx45rqH8=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":111,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj7NBAAEAGWfesECrYNF7ohrKjAbuMuIjvpZSkXVAYAVcs9QAAFAMBAAEBFgMBADDvxNCBAJVrGzgQQTMP\/cLT1b\/EYDa0bXfim8sQn00VZ+1SwqzvLYpo89lgGEVfnHs=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":112,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjCndAAEAGPFGsECrYNF7ohrKkAbvN5GI3ckqsG1AYAVfN\/AAAFAMBAAEBFgMBADCcVdBWpFmo2PK+jEkjr0+xMhBJ\/0sB1HkJKkLpxz1ENCjmb6B\/IlrfYXzPjqpXmkk=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2370{"flow_id":109,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0749{"flow_id":109,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":316,"pkt":"AMDKkaPvePiC0\/vCCABFAAEu8blAAEAGVEOsECrYNF7ohrKhAbvIHKFijYGD4lAYAVcaqAAAqH+NaJ6Vh0k3C+5CWjQJDJEfVCf+UO7p3HdyzBtEbJfJL1qxQeLmkE3uLLZ9cPW4k+MoR\/DXsCbtN5aWbymUiyGYGlAtsQvihtMF5j3k+81U8llPLDFj1JI3ys5Dp8dk5YKdO7Hm8NwXHVdxonCR8ZUfob6Tf5fxPFNxbc6OOcIi4Lgl0sT+YGuax8DZrFU5CLAozbHarPdfsRzsqD33YXhM2Bq5yiXQxFHx2CrrlJnBoNrkStW9\/H6OHauurdu5mSw3fwDqhfMdPgPSPw5EMGpB1h\/75EsvjzXfZZ7CA2l5WiSRX\/wqApOxxmcCM0MYnEwIbG4Cm0bp0DrihP9oCUC0\/PB6dA==","pkt_caplen":316,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":110,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_id":110,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":220,"pkt":"AMDKkaPvePiC0\/vCCABFAADOmqlAAEAGq7OsECrYNF7ohrKiAbt67fhvhH1dmFAYAVeGwAAA7\/E0wbucuzohFFM6QMIlnLFXdsqGbdkTc+08FwoD4senuooeAaew6DA4tBOQqF5voDFp6YoOtOvsIwVuUOrVAH\/nuRHvAyqS26JZf3+h3poKjiRdp7mYw+gMlt197CU5vSFVBp6q5xTSSx6jX6svlmLUr0030mLQ9gJXMBghlBfsTEodW3FDQPnMP2eGvOfyjcsA2TDRG7MVSmFGGOwEzvmBQzYXjQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":108,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_id":108,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":220,"pkt":"AMDKkaPvePiC0\/vCCABFAADOu1lAAEAGiwOsECrYNF7ohrKgAbstn9dB0Qs3rFAYAVe+HQAAEJxE\/s+xLbpmguRIcIhsSmNuULiEggbNb9acX5uaYQuGGjoaJpdRjy1eJf3Wns\/l6Uk9Yu\/ecQBLX03cvIowVuu7jAi3G+IfyzNWh9xfurxs0kYh\/rY0d6+G7QzUCJXjq9iyB0a4Ubm1ZJoipTLxfMdaCFgcaKgItZEKq8xB26J91cwvFSNar9+37YQKaJpJLQ3dztNono53w6GDvJ81KeFVHUn1hQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":111,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":111,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+7NJAAEAGWVqsECrYNF7ohrKjAbuMuI7epZSkXVAYAVfmPwAAEXoOQGW\/HQ\/7kidhTYs\/PxxVdV7f9p+vSN260F5TKai7mkJ83bEWRmp5lqmO\/RIU1SKmgCvvZfvld0g+Dl4cMKVr2QfnZZ3KVpd9GgfMrVhm0A9OSmM0xrM4XUJsooWMGxOq21EXS+1Sb4HDOUxcs1+oTBf4Nr3bj+VEty6ekL+48+NJEqLjCtLV+LDYkr8tr3ZmDKMuoVIpxdOaIZZHBgZ99klizNVG\/4G9XH3pocryE7qFEmG7iB3URl0wxw8OWDEKifDJpJwW4m62BSs2+\/BXFPHklw==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":112,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":112,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+CnlAAEAGO7SsECrYNF7ohrKkAbvN5GgmckqsG1AYAVefmQAAAEO1NVqCDHm+PFgZSCaA6EZL7aeCsoG1gFO1E\/OdSdtOXCc2BI3b3YUPeH6aM\/TX2sCoAe\/oz6X6OqA0eCve3J0KdLry4BGLjyA471K1QaiID8qRCQi3evlpB0FhB1tD9GRnWeyj+lGWPJDRQiJ5e+TXfyL5h+2xnVGUadl1LF2XUUR9pbF7xE5+MVJb7ViloG6WkDn37ip1\/rSJXJDtSjvgZ\/V0EhMwEC+OSdeTIIC5MCgrCnuG3FPQz7pf3lHJff9Mrb\/pnKbO9GtWt6cmAdv6+T9F9A==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":109,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoacRAAOcGNj40XuiGrBAq2AG7sqGNgYPiyBybrlAQf\/cShAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":111,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWuJAAOcGRSA0XuiGrBAq2AG7sqOllKRdjLiJKlAQf\/cn3AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":110,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWuFAAOcGRSE0XuiGrBAq2AG7sqKEfV2Yeu3yu1AQf\/c38wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":108,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQ4tAAOcGXHc0XuiGrBAq2AG7sqDRCzesLZ\/RjVAQf\/d\/zwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":112,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo5XZAAOcGuos0XuiGrBAq2AG7sqRySqwbzeRiclAQf\/c48wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":109,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXY1AAOcGQnU0XuiGrBAq2AG7sqGNgYPiyByhYlAQf+AM5wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":109,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXZJAAOcGQnA0XuiGrBAq2AG7sqGNgYPiyByiaFAQf9wL5QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":111,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWzBAAOcGRNI0XuiGrBAq2AG7sqOllKRdjLiO3lAQf+AiPwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":111,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWzFAAOcGRNE0XuiGrBAq2AG7sqOllKRdjLiPtFAQf90hbAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":110,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoXJZAAOcGQ2w0XuiGrBAq2AG7sqKEfV2Yeu3yu1AQf\/c38wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":108,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoRZBAAOcGWnI0XuiGrBAq2AG7sqDRCzesLZ\/RjVAQf\/d\/zwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":112,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo0gZAAOcGzfs0XuiGrBAq2AG7sqRySqwbzeRiclAQf\/c48wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1162{"flow_id":109,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":619,"pkt":"ePiC0\/vCAMDKkVoBCABFAAJdYIxAAOcGPUE0XuiGrBAq2AG7sqGNgYPiyByiaFAY\/a8pHwAAFwMBAjBq+6rNxMKeG8pDiFMSqYsGv3ou+Wv5gyRA6kWdWbKWNxaWuMTUvAKyBwg6PSHFkjBQ8fEBuGSvcAqn8BTIlHckrvlmKfuMOi21OXj3D\/p\/RDSMb6nq8KiiP4h9c43HdOJsJNdgM7C1TQr0l8je\/DDzmAnBO0vep05rA2fHRmv3rjfLjhPydqbdeGVQ5c0zB+nkSS0VnGnGH7vTng25ESgtwszM6Cx\/T9A5lBvK7pyyqBL\/vzaEWHCkorlNBL3TDYua05Njv5c591kXEQHu7r3nethc050clwx3VNyKoNka95k0Q8eDw9NhXT8bv7KjDRALOTDWnKwq3HNZ7u\/PjJQ+IGOgWolBjfLtwJ8MBVO5zqJeLGyQA18MsMh+d7XjnAY0L2GSbGXnK7ZovNV7w4oi4FrvfPd7zv9wrqhSMC0GIkeI0sHExmSFPSuwmyOY\/bhB+vdgB+VnO2JjHTFm52ZiaV7DzLFjV+SfDbknbAaokwVwdAD95Rhzs+VMGjbCNViwSOlE7TXfT9A6VpfwaPhUQvsmS6AxALnIGAG0wCRiC+nRZEEXUpsFwerDT9hxKtRDMhQoeRxwDx8rRjoF2O5x6fZT9Q\/Cl+5SRparxzHz\/yshc0S9n486ttPJziI+zGYGbF4CuDE8vcYqgXfZc8j\/a\/nipZv07L+dgzaDuSWfRHkmSxfeCTT+47y4HTcr6lw5CfpqK\/3WXKIq9jjTFu4Yq28u91Ivikh0uQ385Qvk\/g==","pkt_caplen":619,"pkt_type":2048,"pkt_ipoffset":14}
+1073{"flow_id":111,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":555,"pkt":"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","pkt_caplen":555,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":110,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":108,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":112,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":110,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoVMZAAOcGSzw0XuiGrBAq2AG7sqKEfV2Yeu35FVAQf94xsgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":108,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoQFxAAOcGX6Y0XuiGrBAq2AG7sqDRCzesLZ\/X51AQf955jgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":113,"flow_packet_id":1,"flow_first_seen":1490976115835,"flow_last_seen":1490976115835,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp"}
+0450{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":99,"pkt":"AMDKkaPvePiC0\/vCCABFAABVWl5AAEARM0CsECrYrBAqAW\/GADUAQT0E1ZsBAAABAAAAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQAB","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":113,"flow_packet_id":1,"flow_first_seen":1490976115835,"flow_last_seen":1490976115835,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_id":113,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl30tAAEARrkKsECoBrBAq2AA1b8YAUeVS1ZuBgAABAAEAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQABwAwAAQABAAAAIQAENu8YtA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0691{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":113,"flow_packet_id":2,"flow_first_seen":1490976115835,"flow_last_seen":1490976115901,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.24.180"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":114,"flow_packet_id":1,"flow_first_seen":1490976115905,"flow_last_seen":1490976115905,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976115,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8JUVAAEAG7uusECrYNu8YtJKvAbsZEE7TAAAAAKAC\/\/+4mQAAAgQFtAQCCAoA9muWAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":115,"flow_packet_id":1,"flow_first_seen":1490976116084,"flow_last_seen":1490976116084,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37552,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8uXBAAEAGWsCsECrYNu8YtJKwAbtgAdLYAAAAAKAC\/\/\/tjwAAAgQFtAQCCAoA9muoAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":114,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwcfNAAOcG+0g27xi0rBAq2AG7kq+qRjf5GRBO1HASH\/5e8QAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":114,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJUZAAEAG7v6sECrYNu8YtJKvAbsZEE7UqkY3+lAQAVepYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":114,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJUdAAEAG7fqsECrYNu8YtJKvAbsZEE7UqkY3+lAYAVdXdAAAFgMBAP4BAAD6AwPrW9HSsEakj6mtt\/VNcOse9OO4StwA3f8PEsza4rC61SAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACR2toAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjKygABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":114,"flow_packet_id":4,"flow_first_seen":1490976115905,"flow_last_seen":1490976116122,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0403{"flow_id":115,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwirZAAOcG4oU27xi0rBAq2AG7krCs\/eb6YAHS2XASH\/7iQAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":115,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAouXFAAEAGWtOsECrYNu8YtJKwAbtgAdLZrP3m+1AQAVcssgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":114,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiX1AANsG78Y27xi0rBAq2AG7kq+qRjf6GRBO1FAQARypnQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":115,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoj3RAANsG6c827xi0rBAq2AG7krCs\/eb7YAHS2VAQARws7QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":114,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJUhAAEAG7fmsECrYNu8YtJKvAbsZEE7UqkY3+lAYAVdXdAAAFgMBAP4BAAD6AwPrW9HSsEakj6mtt\/VNcOse9OO4StwA3f8PEsza4rC61SAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACR2toAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjKygABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":115,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAouXJAAEAGWtKsECrYNu8YtJKwAbtgAdLZrP3m+1ARAVcssQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":82,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976116,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/pAAEAGPh+sECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/9sDQAAAgQFtAQCCAoA9mwAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":115,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976117,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoj3VAANsG6c427xi0rBAq2AG7krCs\/eb7YAHS2lARARws6wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":115,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976117,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAouXNAAEAGWtGsECrYNu8YtJKwAbtgAdLarP3m\/FAQAVcssAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":49,"flow_packet_id":29,"flow_first_seen":1490976046418,"flow_last_seen":1490976048924,"flow_tot_l4_data_len":10393,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1214,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45680,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":52,"flow_packet_id":15,"flow_first_seen":1490976047096,"flow_last_seen":1490976048927,"flow_tot_l4_data_len":902,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45683,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":56,"flow_packet_id":19,"flow_first_seen":1490976054009,"flow_last_seen":1490976055604,"flow_tot_l4_data_len":3973,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1166,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45687,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":53,"flow_packet_id":21,"flow_first_seen":1490976047560,"flow_last_seen":1490976048909,"flow_tot_l4_data_len":9156,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":436,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54427,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":54,"flow_packet_id":22,"flow_first_seen":1490976047563,"flow_last_seen":1490976048928,"flow_tot_l4_data_len":6132,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":278,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42143,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":55,"flow_packet_id":23,"flow_first_seen":1490976047858,"flow_last_seen":1490976048917,"flow_tot_l4_data_len":5019,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42144,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":50,"flow_packet_id":25,"flow_first_seen":1490976047014,"flow_last_seen":1490976048924,"flow_tot_l4_data_len":7330,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":293,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34033,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":51,"flow_packet_id":43,"flow_first_seen":1490976047050,"flow_last_seen":1490976048924,"flow_tot_l4_data_len":23419,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":544,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34034,"dst_port":443,"l4_proto":"tcp"}
+0742{"flow_id":114,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":313,"pkt":"AMDKkaPvePiC0\/vCCABFAAErJUlAAEAG7fisECrYNu8YtJKvAbsZEE7UqkY3+lAYAVdXdAAAFgMBAP4BAAD6AwPrW9HSsEakj6mtt\/VNcOse9OO4StwA3f8PEsza4rC61SAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LgAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACR2toAAP8BAAEAAAAALAAqAAAnbW9iaWxlYW5hbHl0aWNzLnVzLWVhc3QtMS5hbWF6b25hd3MuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABjKygABAA==","pkt_caplen":313,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":114,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiX5AANsG78U27xi0rBAq2AG7kq+qRjf6GRBP11AQASyoigAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0602{"flow_id":114,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":210,"pkt":"ePiC0\/vCAMDKkVoBCABFAADEiX9AANsG7yg27xi0rBAq2AG7kq+qRjf6GRBP11AYASwooQAAFgMDAGQCAABgAwNZS3nfHykATu3CC7mmoc0bUWm9K4e9z4q18mgLdytBOSAK8IS3HVgGOc2sZcVp0kAKYJvK21\/4JhIPoGYmpJU7LsAvAAAY\/wEAAQAABQAAABAACwAJCGh0dHAvMS4xFAMDAAEBFgMDACjewnNSd4iq4yrAhkxqFaRy27cheBPD04w9zfg+PVa226nC0Bx\/D34+","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":114,"flow_packet_id":9,"flow_first_seen":1490976115905,"flow_last_seen":1490976118335,"flow_tot_l4_data_len":1141,"flow_min_l4_data_len":20,"flow_max_l4_data_len":279,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d199ba0af2b08e204c73d6d81a1fd260","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0391{"flow_id":114,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoJUpAAEAG7vqsECrYNu8YtJKvAbsZEE\/XqkY4llAQAVunvwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":114,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":105,"pkt":"AMDKkaPvePiC0\/vCCABFAABbJUtAAEAG7sasECrYNu8YtJKvAbsZEE\/XqkY4llAYAVsBzgAAFAMDAAEBFgMDACgAAAAAAAAAAPuw3vfT07cXH8vq\/blRyZQzQaizRHQlltz7tuMsMLX5","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2369{"flow_id":114,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcJUxAAEAG6USsECrYNu8YtJKvAbsZEFAKqkY4llAQAVskpwAAFwMDCxcAAAAAAAAAAbDA0awcoSZj\/cmHmodFtqWsaRwLMcP0AQLYfFlA7gOqSVi6G68dQgBCJ0RxOR+S40meHjuFDNamCqeas+vPbHIQwq5t0\/Fr8ZJ1ylxt\/mOidcttJL5EazrZeE7oQ5Dh6CY7+\/aUuI5ClXntzl0OfkC+VLOBDpt3B\/iJ2RKF63\/bPSg8YVERd4GQKCqJE+bRiUmQljE3d5qOwRGurLXdWkfPn91ysq5SItLS6xqP+wFngIXlQJuy0431zig16FZOFHZcY9GLLKxzEdP\/EHlfT2fWjjQz9OMJOSrOMo9NoBrCPn+E3DkmVsvcroGOaKiJ5VpZjP8Vl\/cn2bygKKs6zxFKksvq6dat1OQBm+kW1N0USv4hoqYUtPUD8mWw4RUPbPl8VLd28ibl1+pONk9YuzzvLh\/OejuYEJTNHa1J\/izyyikysEV8VX7umlyox50Ca6rtVgvYn+tXcdt7IFx9W5zGl0A2BLTyhVWgsk+FVU8CIdGEkDHDAxMRyMyHuIIqX9J7itKCL+zNj4VAR57NUO8joIGctOsyK57+vq6TQC\/\/TjLerF7IA7uhRqKHnM4UQZWCGwuidXpAoXvoE70UUNEW230Nn2XW5pdq2MxxcPDiIiaD0tVG+NNlCAgRnRNLJzQk0gZywFFmlMSwIyO4pJnxQbBRTasM2vvWKSSNWKygP1ErGKYSnAVw5Yit+8sZqsjAt5LJfr4Y02rb7dobO9iCySA2gCBIVAviY+htmCidKpF1fJm3n0eLM2k6ZF6s3ByJCdS37bvp0Y\/WJFRMvySiNVMXcayZ2xlnVf67Z2rmVCFH8YZh5IX5IWwXpnzBwgQUueqpAl7nWy5gCBz6dr\/PBXkbHDnCqaAmjsuf12s3UH2mzFipUWyn8XRJNFnH6PDSd7hMn9xs40870xxkMLna2yMpnipQN1afnfl6+GRuoQl9vlVzgzzr\/j74a3KWj0y+VVPEBFYlm46UyNRdvA3hQUuO4MByEWV7mVzRVDGQ0c5zADa6DrsXsC+lsocHm1XSMfY+tdbk2\/umUFdRg9HgRVUY6h3JEEx9crXdZOuRwtX3Cq2qeMjJDpUk5pkHxZmanRwZTvdBz8YPgwZbi\/TfIlKR4GJ0XrSCkYxSlJUUNywpCa0l3ljDdntCS3k\/zx9ubEng94M+ALvsePWJ4pVEl98eTdznLOZsi++VkcWmp3fqB5GfeEIIIr2JApduaImCibbYR045lvjzOvLIwH84glVehZ8VFQBWvtazuYaFwSddAZuCB9i8Fk\/tGlO73Z\/HQZJayB6QZJC5LsTH8gIob5Cl0rqE07Dr4N+ptG5F4J5qr1blh7BYvzfhEXBpLVBl\/Ju8WlNCxMqx387nZAJC5tV4r5MOQQ8qXqb8ug8AD+PbmxAxw4OD0phk0IsTgyg5iEsGdH\/3F9lfLg6Cj9ra2\/mTCJbrxxFz7XqXX\/3IT7vKajE5VUOhdRLXzxpdgfBYHseLqQPn6VRJmMVw5X2TXlKkkPYFMCxnlOOl5Z9Yo2qGjtxh8AIMyYAAIkiskwDCZE+wIhs3CSo6l3WbQFEDGUhJZgCnhKrnr9UTwOME5zh2D4mps9KszKepwMzpyS0yEhPOci3VVCCehnXRbQdfiyGKfuE9eMuRqMjljg+XEvqbV60Cfp5XBlilBSG4rfTwB+twa9kWKqUklDlgIG07apG2O9w5gwqIxEnvjwCQIA6GVYqCO48W\/pkXGiMdlaV9SuBj6TQUC6prv9f6al+UmoBK4BLVQJROcAXEWIzmid56SJPrMbnICrT3MmkoviUjCb9p6wBIpqJ26KYCb3gzbUlqADG21zQ3w+ZZRh6Oi7HnRRzagiI9+kR9zZe0kSkLvAdwOPg4TuVl0lZZgM9Ct1N4OH\/6dxq3PWI8aToM2yHYfxaG\/kA0q7iVxH+3X7cHq8faQ4Q=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":114,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoiYBAANsG78M27xi0rBAq2AG7kq+qRjiWGRBQClAQASynuwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":114,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":114,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":308,"pkt":"AMDKkaPvePiC0\/vCCABFAAEmJU5AAEAG7fisECrYNu8YtJKvAbsZEFtyqkY4llAYAVv26gAA8+MNFYinlBYjQ2Hj+t5wnhQlPi7Yzs44ocg4KG8IYqYc2GsURXaQW3BxKhWmcrGGN1WrTL43aw8nQfqeyFJ2UnsewknXI3JUNb\/7zlE998ToBOvb0Fl51wDtWY12H7KtoirKF\/YtRoZrnWS25hU5OICuJTWvnuwuixEEo\/z2nl5kdU321VNOzko3h9OrjraSd7TggyYO1vJF+SyaPIUHr0fnQkPB+mw62cXDU2zAsberg0Xw\/ERPF4fjd0a\/lsp60Tp+ltbxoMbBMwZy0yLWeZpDs76v+c6a8eZuM71USibf+Hsy5N8vsZORZy9ckRo2Gbi7aMKsp4n\/ZF+ZTsc=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":112,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":58,"flow_packet_id":20,"flow_first_seen":1490976057977,"flow_last_seen":1490976058806,"flow_tot_l4_data_len":5219,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":260,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45688,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":62,"flow_packet_id":33,"flow_first_seen":1490976064452,"flow_last_seen":1490976068180,"flow_tot_l4_data_len":18692,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":566,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.216","src_port":54434,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":60,"flow_packet_id":21,"flow_first_seen":1490976064328,"flow_last_seen":1490976064897,"flow_tot_l4_data_len":6078,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.135","src_port":42148,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":59,"flow_packet_id":19,"flow_first_seen":1490976058103,"flow_last_seen":1490976058813,"flow_tot_l4_data_len":5117,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":269,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34041,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":116,"flow_packet_id":1,"flow_first_seen":1490976130073,"flow_last_seen":1490976130073,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8j51AAEAGf0qsECrYNu8d\/Z+gAbt6Gf6DAAAAAKAC\/\/+QHQAAAgQFtAQCCAoA9nEeAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":116,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAww\/RAAOcGo\/427x39rBAq2AG7n6DOZIqUehn+hHASH\/7FQwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":116,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoj55AAEAGf12sECrYNu8d\/Z+gAbt6Gf6EzmSKlVAQAVcPtQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0717{"flow_id":116,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":297,"pkt":"AMDKkaPvePiC0\/vCCABFAAEbj59AAEAGfmmsECrYNu8d\/Z+gAbt6Gf6EzmSKlVAYAVfa4QAAFgMBAO4BAADqAwN0b1XxRD1+7q81PZEt7s8JLjF+zs7TJetZZPnvHETq+SBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACBWloAAP8BAAEAAAAAHAAaAAAXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAhqagAdABcAGPr6AAEA","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":116,"flow_packet_id":4,"flow_first_seen":1490976130073,"flow_last_seen":1490976130310,"flow_tot_l4_data_len":351,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0510{"flow_id":116,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9z7BAAOcGl\/U27x39rBAq2AG7n6DOZIqVehn\/d1AYf\/hZrQAAFgMBAEoCAABGAwFY3n2ChqENgB5ulodafVGXSlcQ1mED7PxYBMV1H121KiBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":116,"flow_packet_id":5,"flow_first_seen":1490976130073,"flow_last_seen":1490976130469,"flow_tot_l4_data_len":456,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0467{"flow_id":116,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdz9VAAOcGl\/A27x39rBAq2AG7n6DOZIrqehn\/d1AYf\/jOuwAAFgMBADBr7rcoma6yI9u+hwZHRhABfiFPvPkpGdxK57qKeW\/S079grGg18giIHqTY7wSdzXU=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":116,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoj6BAAEAGf1usECrYNu8d\/Z+gAbt6Gf93zmSK6lAQAVcObQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":116,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoj6FAAEAGf1qsECrYNu8d\/Z+gAbt6Gf93zmSLH1AQAVcOOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":116,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjj6JAAEAGfx6sECrYNu8d\/Z+gAbt6Gf93zmSLH1AYAVdimAAAFAMBAAEBFgMBADDxJL4N2qtGIcYMDVbpVMKRkW9NwKq96ykSeUymTi2c8KWF4PijJDaOzHsAYyfa8cU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2393{"flow_id":116,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcj6NAAEAGeaSsECrYNu8d\/Z+gAbt6Gf+yzmSLH1AQAVeRYwAAFwMBACBjjUNK+Nx8EgLCTPB59WYSRW0naZwJRJj\/5iBOcb3rUhcDAQaAXb8y9YwZGQwzgcNCQBnA49Rnn2MSCIX6kx9OkFZXAk4OJ1NyAbMnKlNKZ2HKGCzo39w5BQILkAUa2MEwdP9r+rNN72a45u7ZHYOI2OHzBCQFqj+3lGJtywXUTp\/cEqDqGgy6CZs+sqkcjVYYeHeaRgPYShSkLeGTzYqLWMENBsj3h+HW\/1oJacf1sVg5hdDOqwDSpYnuro47DeeSw6YP7TvBbNwIblmYU+3O+e8jr4J0ZxJSU9P6jvq54FKhK2jnksAU\/ha5MyNkAVn7qczTEQoEEvEkpznrVUHMbMWbpFdIYQsuh2a0ZLNTA6899\/zcDr77+ys0CPxJzrE\/ZsiqEHelMJANmKbNR5cJnGjdNGQjAr5W9qb649BPhUZIOGL1O40z1VRDAi+qGnLtgrBPqoRcYcvEu8iGWInMHBdUSkrGJh+\/f6i8YQ1+u5zDFP9WHstNWpS77aG5Ekvy9m9r0lin19aawK3Z7EOeEQsCNWcY+KWKzg8Uwf3+HX62y7tAsGE0tF+N66rQOy6fwcAvpt2iKAMsRHemDFJEE1kYGq72Ti1Be7JpxBYlUyF0N0enjEv8nyWRWw0X3D+saqfedzHYbpHTf0ZlGwdeVEJg0jIom76iM+E3qvmYm7IoBXl\/m\/xsKGAUSMtQH625bo836kBUz1LUOIqgHL4PQLczlf5SWywmw\/oivN9YpheqS7xd8hSvjvQN\/BhuzOTpyEofo+Z9cpC42TMcheKkoccYK9CSp9UrYEWx15gQl06FZqaK3BGEzxqxLGvVqKkaBfvXWo0NzFTMtLwpcFJhGTTg+ysETUZ+WvlHByEuvM1wzsSse\/QzPwy\/0JE9AdslXe9ZGUYCew\/jq4sY6UbS+RusiG8t5T5JAg3qP9QrqcHMHPgwqEjBs\/iXcvqR8vOozR8BSTllgXu+td+RjukssAdz8RKu6n1wZGHkUgFOdspSzqUgTgsQEZND\/8LJQ3uKPdrG\/7JwNkIJ\/GwP\/71nF+5Y8kDDd7O1P+fji1AwPU3RKsKvbG8i73yW7\/zxij4+ytJ\/iqHjNTboOEQ6ZT2oF7w5SVFNjQ2C6VH\/XwgmkIllad9uQyDLeVxoBgU6PRq9L6UibjlDl1H+hxgj\/Nk3CWybarjmKR4uCrzD97\/DCxVCCwsXxPCBdTBtH1WH1eC8VftX3gCMVywZKEGwAsVhXPa8Sag1BbHXRxaU0oQo1\/uS6L9JD7TQ24PMQaZCiU82Uj\/FSIpvaD4qnjZnP8dlpWJjWDp4KRW7VfSa7nmfh7m\/8rB8gDgbO+yrER5qwxh+2v\/+aYb88\/ZzwOi+qMxdqeCuXYfh98zXp6i8\/CM4SfGbsP3Wn4qSxtzmkTQV1ILYXbclbBpds+DZVl5XBrgRb2\/y7sGhAcNpszozbogw4n2JuucxVoiZaWIy\/apyBx\/lu\/kCaejsNuEAUwZ7P6sRUMIwU\/H3Vt\/vN+XMJqdBHtroSX1pHNAhGNX3Ryu8A\/CHUjMcC8jgdaq\/XYmnU5AWq8+ovxJn23P1\/S3zxISAmuZdcFxyc3EAmuCun++DROkGoL9aKOU65mNpLSaNkqd5JqLpje4bnddK3PjmcPGhph\/G\/iByZDa8joK6Wq+lI+77\/gJKHITO5K8CrO9cvM2rJo0rh0m2vI0+Mzg+UgDpaMPENGqfwM1iQVa+PiDAYORs7tCyodLyXLiynDvPKfjzVFNPT1+soqRk4+0yngQqtaxtSK4YbQl2mIQ7S7Wf3I3aphlPUFcCi4\/N80zyoMOmXkkq45X\/btY84NWVJoKnK\/B8eKZZ9H6Y1+7MuCu0vp\/QxRmh6+1sk6pHmneQX\/eaGreNV\/gI9D8xXmD8uc+ndD+Qo\/TeGjY9OJ3NDcY9CCRSvWjQnmi\/XQyIIqTI5ts=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0731{"flow_id":116,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":300,"pkt":"AMDKkaPvePiC0\/vCCABFAAEej6RAAEAGfmGsECrYNu8d\/Z+gAbt6GgVmzmSLH1AYAVciSQAAkUpZPO2ugQFpOa3lJeT6Xe49SX76REJuslkKFhTmJsQTPA2vUhH4vrDTQ\/vjPgb8l89+LHQBChO0y5YJ4GQvdVvt8LzeknnZjByo2BBmZhWsgPTDKB3\/3ASuBmz4vfHA1oa3y80olF81AKMHYtXRYv\/FAoA5AtogvpZnIWBepltiKs1TjTeM1nWjj+aTqrxz\/ewJELVBdcXP0oVJkIdkWPYlFvWJBLy6xWr\/FjkpTF9lUwRbQX\/z1p32oF+\/zQ6gRiY5ZT6DWOg\/3jFQ2TgJDJXd8tV+Q3nJjsLhM3rEIww\/t\/Cta3PZBOOxJSK7agbbFgzgHc4P","pkt_caplen":300,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":116,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAouAJAAOcGr\/g27x39rBAq2AG7n6DOZIsfehn\/slAQf\/ePXAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":116,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAouAVAAOcGr\/U27x39rBAq2AG7n6DOZIsfehoFZlAQf+CJvwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":116,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976130,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAouKVAAOcGr1U27x39rBAq2AG7n6DOZIsfehoGXFAQf9yIzQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2370{"flow_id":116,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976131,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":117,"flow_packet_id":1,"flow_first_seen":1490976133936,"flow_last_seen":1490976133936,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp"}
+0425{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976133,"pkt_len":81,"pkt":"AMDKkaPvePiC0\/vCCABFAABDWl9AAEARM1GsECrYrBAqARM4ADUALyGouR4BAAABAAAAAAAAA2VjeA1pbWFnZXMtYW1hem9uA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":117,"flow_packet_id":1,"flow_first_seen":1490976133936,"flow_last_seen":1490976133936,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"ecx.images-amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0660{"flow_id":117,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":252,"pkt":"ePiC0\/vCAMDKkaPvCABFAADu5XxAAEARp4isECoBrBAq2AA1EzgA2tC0uR6BgAABAAkAAAAAA2VjeA1pbWFnZXMtYW1hem9uA2NvbQAAAQABwAwABQABAAAAMQAfDmQxZ2Uwa2sxbDVrbXMwCmNsb3VkZnJvbnQDbmV0AMAzAAEAAQAAADsABDRUPzjAMwABAAEAAAA7AAQ0VD8QwDMAAQABAAAAOwAENFQ\/PcAzAAEAAQAAADsABDRUPxrAMwABAAEAAAA7AAQ0VD\/swDMAAQABAAAAOwAENFQ\/I8AzAAEAAQAAADsABDRUP9\/AMwABAAEAAAA7AAQ0VD\/n","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":117,"flow_packet_id":2,"flow_first_seen":1490976133936,"flow_last_seen":1490976134135,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":47,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"ecx.images-amazon.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.84.63.56"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":118,"flow_packet_id":1,"flow_first_seen":1490976134140,"flow_last_seen":1490976134140,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51985,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA82ItAAEAGF7ysECrYNFQ\/OMsRAFDDaqo+AAAAAKAC\/\/9Q1AAAAgQFtAQCCAoA9nK1AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":119,"flow_packet_id":1,"flow_first_seen":1490976134141,"flow_last_seen":1490976134141,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51986,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8xZVAAEAGKrKsECrYNFQ\/OMsSAFCeYrcjAAAAAKAC\/\/9o9QAAAgQFtAQCCAoA9nK2AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":120,"flow_packet_id":1,"flow_first_seen":1490976134144,"flow_last_seen":1490976134144,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51987,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA85X5AAEAGCsmsECrYNFQ\/OMsTAFDQ0pfIAAAAAKAC\/\/9V3wAAAgQFtAQCCAoA9nK2AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":121,"flow_packet_id":1,"flow_first_seen":1490976134146,"flow_last_seen":1490976134146,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51988,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8TQZAAEAGo0GsECrYNFQ\/OMsUAFAHRT+wAAAAAKAC\/\/93hAAAAgQFtAQCCAoA9nK2AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":122,"flow_packet_id":1,"flow_first_seen":1490976134148,"flow_last_seen":1490976134148,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51989,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8vDBAAEAGNBesECrYNFQ\/OMsVAFCK3c6GAAAAAKAC\/\/9lFAAAAgQFtAQCCAoA9nK2AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":123,"flow_packet_id":1,"flow_first_seen":1490976134149,"flow_last_seen":1490976134149,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51990,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8EjJAAEAG3hWsECrYNFQ\/OMsWAFAy6mCEAAAAAKAC\/\/8rCQAAAgQFtAQCCAoA9nK2AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":122,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxXC1q1Wit3Oh6AScSCcZgAAAgQFtAQCCAps+npUAPZytgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":121,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxSwmxNdB0U\/saAScSBYswAAAgQFtAQCCAps+nysAPZytgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":118,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxG999POw2qqP6AScSBjDwAAAgQFtAQCCAps+n3SAPZytQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":119,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxLyFCLFnmK3JKAScSD4HAAAAgQFtAQCCAps+n3SAPZytgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxNJprFn0NKXyaAScSAI+QAAAgQFtAQCCAps+nOsAPZytgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":122,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0vDFAAEAGNB6sECrYNFQ\/OMsVAFCK3c6HwtatV4AQAVc6+AAAAQEICgD2crts+npU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":122,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":122,"flow_packet_id":4,"flow_first_seen":1490976134148,"flow_last_seen":1490976134200,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51989,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/71pwMKDRQIL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0406{"flow_id":121,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0TQdAAEAGo0isECrYNFQ\/OMsUAFAHRT+xsJsTXoAQAVf3QwAAAQEICgD2crxs+nys","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":118,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02IxAAEAGF8OsECrYNFQ\/OMsRAFDDaqo\/vffTz4AQAVcBnwAAAQEICgD2crxs+n3S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":119,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xZZAAEAGKrmsECrYNFQ\/OMsSAFCeYrck8hQixoAQAVeWrQAAAQEICgD2crxs+n3S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":120,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA05X9AAEAGCtCsECrYNFQ\/OMsTAFDQ0pfJSaaxaIAQAVeniQAAAQEICgD2crxs+nOs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":121,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"AMDKkaPvePiC0\/vCCABFAAJXTQhAAEAGoSSsECrYNFQ\/OMsUAFAHRT+xsJsTXoAYAVeTLwAAAQEICgD2crxs+nysR0VUIC9pbWFnZXMvSS82MW9CVGIralp2TC5fU0wyMTBfUUw5NV8ucG5nIEhUVFAvMS4xDQpIb3N0OiBlY3guaW1hZ2VzLWFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vc3BhL2luZGV4Lmh0bWwNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg==","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":121,"flow_packet_id":4,"flow_first_seen":1490976134146,"flow_last_seen":1490976134203,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51988,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/61oBTb+jZvL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+1141{"flow_id":118,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":118,"flow_packet_id":4,"flow_first_seen":1490976134140,"flow_last_seen":1490976134203,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51985,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/51woiL9kgkL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+1140{"flow_id":119,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":119,"flow_packet_id":4,"flow_first_seen":1490976134141,"flow_last_seen":1490976134203,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51986,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/81diFQyVjHL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+1140{"flow_id":120,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":120,"flow_packet_id":4,"flow_first_seen":1490976134144,"flow_last_seen":1490976134204,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51987,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/71GcCNTb6kL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0417{"flow_id":123,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxaJEqCkMupghaAScSCurAAAAgQFtAQCCAps+nR5APZytgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":123,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0EjNAAEAG3hysECrYNFQ\/OMsWAFAy6mCFiRKgpYAQAVdNOgAAAQEICgD2cr9s+nR5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1141{"flow_id":123,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":123,"flow_packet_id":4,"flow_first_seen":1490976134149,"flow_last_seen":1490976134239,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51990,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/612xlaOI2NL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0405{"flow_id":118,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0rhBAAPIGkD40VD84rBAq2ABQyxG999PPw2qsYoAQAHYATwAAAQEICmz6feAA9nK8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":120,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0wtFAAPIGe300VD84rBAq2ABQyxNJprFo0NKZ7IAQAHamOgAAAQEICmz6c7kA9nK8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":121,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0b+dAAPIGzmc0VD84rBAq2ABQyxSwmxNeB0VB1IAQAHb19AAAAQEICmz6fLkA9nK8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":119,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0XyZAAPIG3yg0VD84rBAq2ABQyxLyFCLGnmK5R4AQAHaVXQAAAQEICmz6feAA9nK8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":119,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcXydAAPIG2X80VD84rBAq2ABQyxLyFCLGnmK5R4AQAHZr4wAAAQEICmz6feAA9nK8SFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL2pwZWcNCkNvbnRlbnQtTGVuZ3RoOiAxMTQxOA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KU2VydmVyOiBTZXJ2ZXINCkRhdGU6IFNhdCwgMTQgSmFuIDIwMTcgMDc6MTk6MzkgR01UDQpYLUFtei1JUi1JZDogMmRkNGFmYmQtMGNmZC00NjY5LTk0MzItMzAzYmM2NWRjM2UzDQpFeHBpcmVzOiBGcmksIDA5IEphbiAyMDM3IDA3OjE5OjM5IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT02MzA3MjAwMDAscHVibGljDQpMYXN0LU1vZGlmaWVkOiBGcmksIDA2IEphbiAyMDE3IDIyOjAzOjI3IEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBZ2U6IDY1OTc3NTUNClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIGFhNGQxNDliMDI3NDRkMzAzNGI1MjZkODA5OWJlN2MwLmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IHRQdGlGZ2FpTWphdGo2RHBYeGpIVXdsSURpS0FLSDN2eTVrSGtPT29RQnI2YlRnZm9sQ2xNdz09DQoNCv\/Y\/+AAEEpGSUYAAQEAAAEAAQAA\/9sAQwACAQEBAQECAQEBAgICAgIEAwICAgIFBAQDBAYFBgYGBQYGBgcJCAYHCQcGBggLCAkKCgoKCgYICwwLCgwJCgoK\/9sAQwECAgICAgIFAwMFCgcGBwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK\/8AAEQgA0gDSAwEiAAIRAQMRAf\/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC\/\/EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29\/j5+v\/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC\/\/EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29\/j5+v\/aAAwDAQACEQMRAD8A\/fyiiigAooooAKKKKACimzzw20TT3EqoijLMxwBXM634+OWt9FT289x\/If40AdHd31nYRedeXKRr6u2M\/T1rD1D4g6fCSmn2zzH+83yr\/jXKXN3c3kpnu52kc9Wc5qOgDZu\/HOvXJIilSFT2jT+pzWfPrOrXJPnalO2e3mHFVqACeAKAHNNK5y8rH6tSLJIvKuR9DSORH\/rDt\/3uKRGWQ4jYMf8AZOaALMOrapb\/AOp1GdfYSmr1r418QW3DXKyj0lQH9Rg1kkEHBGKKAOssPiJbOQmo2TJ\/txHI\/I1uWGq6dqab7G7ST1UHkfUda83p0UssEglhkZGHRlOCKAPTqK5DRvHt1bkQasnmp081R8w+vrXVWd9aahALmzk=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2394{"flow_id":119,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2385{"flow_id":119,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcXylAAPIG2X00VD84rBAq2ABQyxLyFC4WnmK5R4AQAHb1XAAAAQEICmz6feAA9nK83oBNEYBkb+WwD9B6+mTXPOmm7mkZNH3n4J+NPhL4ueCofF+izFGt5MXdseZLSUcMCB\/D39CORXRXd5bvLaFXBDhCGRshiATmvlvwv4F+IHwM0KL41+D5S082nQXev+Fwu1PJdFZvLwSGRcn5vvLjByOa9y8DeI9H8Y+ErX4h+H9TR9JvRHNaxxnmNmJV4z6bSBwO+exFZulrY0VTQ1tfK6hYHR722jdDM3lF+h+Qf1Ir5I+NMGu+BfixbWngSGaKW11PzYrfdmG8imy6ggkYZW3DPcAc19YrdpO6mdQwWQsoJHB29h24r52\/aSgi0DxVpPxFzut4NU23MYz8\/lyIwJwD6H04+tZunoHPrqcf4T+N\/in4V\/EQaro8sumnzYmvoI38yCXKh2DLwVIyfp2PGa\/Tz9gj\/gov4Q+PekDwl4p1hUv7SQW\/2ieYMyN0VXbo6t\/DL36NzzX4zX2t3F94mfxHfai3mS3Qe8EY4wQFwuehCsf5V0Xw98d+NvhN8T9I13w5qX2a3vdQt\/NfcQjKUJ2uM8qwY5zxjnPFXRm6T8uxE7VNT+i2p9Pv7nTLtL21fDofwI9DXyz\/AME6f23PD\/7R\/geLwxqWoAatY5gVJZd0gZRkxOe524ZW\/iQ88qa+n69JNNXRzHo+lanb6vYpe254YfMueVPcVZrh\/B2tnS9RFvO+IJyFbJ4VuxruKYBRRRQAUUUUAFFFFAFbWNRTStNlvn6ovyj1bsPzrzqWWSeVppWLM7EsT3JrpviJqB\/caWjf9NJB+g\/rXL0AYfxI8dad8OPBl74t1EBvs8eLeHPM0p4RB9T19ACe1fA2qajc\/Fb41an4r8VSC9GhSLs3kMp1CZBJJIB28uJo0T0DvjqK9+\/bF+Irar4ug8D2Vx\/o+jIJblQ3D3Drkf8AfKEfQsa+ZPgxfJeeGb3xGibDq2vX1y75J3r57xxt1\/55xx49hXbhqWnOznrT+ydn4s1O8tdEkTTLkR3NyyW9tKRny3kYIHI77c5\/CuJ1\/wCE\/wDwgdjN4w+GOr38WpWkRnubWe9eZNRK4Zw4Yn52APIxyenp26zCaLbKoZQwIzzgg8fjmnmXew4+8OSK0nG+xmpWMTUpLP4rfCyVLOZY4tc0dhE\/dDJGcfXBP6Vy+jfGbxF4W0y30bxp8NvEMmoQRrC0mmWHnpOw+XcGBA5wPb+mj8ET9l8ESaSp\/d2Os39vDt7Il1KFH4DArpbm4aM4fOD0HFc8o3LU3cyPA9tqWmeHJLvU7U295qd\/Pf3FuzDMJlckRnBIyq7VOCRkHHFVNZv5hukkfBTJ+grckuA6eZ5uQDxXn\/xh1UnTGtLLUjah+LudF3MI+dwXkYYjp15IGORWbpouMrux5tHqj39\/qviS2ZW+33crjB4dS\/loQfTbCv5mvMfi14D0\/wAVePbTwXd2149veSvqF2dOiMkhjON0e3PHIIzz15r1htHaGwglZI4F8\/abeI8RKAoEY9l4Ge5yRXA+A59O8QftYXcEzb3stC3sCxIjJY4wM8DDNx7\/AFrCUE9DZNnsvjPVfEfjTQrfwfovhGeETwmNb+e7WAW6bCCCVDPjBIIAHpnmpPg58MLD4L\/C2bwR\/bs1\/H5ks5LDCRljjag6hc7T1PIz3rct7oW8Qc5BHCZ64qtJqwubEAncsi8q3uTn8OlS4IFOxVkN3aaLbXBuwxeB2ZkBxySuAPqCa8j\/AGvr\/QNO8BW+h2S\/atUurtWS0BOYg3y5J6\/wk49AOORXX\/E\/4mTfDLwubu2aCS9jtbiS1jkziNVkJ3t2wOwPUkKD8wr5B8R\/GC6+LPi3SnmikjEbPI7GbDyTOV8x8DPVQQO4worCUbKxaldFbxpY2nh50niuwQkDuUVeS4YL+HAPHrUNiJPGl0up6RvZLOxedVY4wiqsK5zx\/EAKwfite6hD4rs=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2379{"flow_id":119,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2383{"flow_id":119,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2393{"flow_id":119,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":119,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcXy1AAPIG2Xk0VD84rBAq2ABQyxLyFES2nmK5R4AQAHZT8wAAAQEICmz6feAA9nK8DDsa2PiJ4COtaXcWfmtHcRzsthqO7cWydy4zkEYYdfet6xsotNuLvwlLOLgoTPYyMcGWNkZuOORjsM9Kp293dH+0PD98G2w82c3OUICqAfbGBn1b3ocTJye58xeIPCU8\/hvXtI1uEi+094fLQIRvmnbbLc4GOwUDIx8wwBivUP8AgjB+zhqXx6\/a\/t9ZGlSDT\/C8rCOdl+X7Q48qPI\/2UM8me3lj1q74z8FXeo2+pa\/4Xt7m616G2YWcUJP+kqQcoVHBKtkg9RjNfqT\/AMEZ\/wBjS0\/Z0+CyeJNW0xI9SvWkeRyvJmk5kOfRF2xAjjIk9aynodGGvKXkfaVlZWum2UOnWUQjht4ljhQfwoowB+QrU8M2Rv8AXLeAjKh97\/Qc1Qrqvh5ppWObVZF+9+7j+nUn+X5VkegdNRRRQAUUUUAFFFFACOiyIY3UEMMEHuK891\/Sn0fU5LQg7M7omPdT0\/w\/CvQ6yvFmhf2zp++Bf38OTH\/tDutAHn9\/YWeqWM2majbLNb3ETRTxOMh0YYIP1Br4U\/aZ+CWo\/CnxnKkSO9lLmWxnK58yHPGT\/eXo34HgGvvAgqSrDBHUGua+Kvww0H4r+E5fDWtKEf79ndhctbyY4YeoPQjuPfBGlOo6U+ZGdWnGrDlZ+bk13sb7pIPtyPWrVuPPiEkPUjnHNdT8WPg34j+HHie40LVdO8mSI5IXlWUnh1P8SHsfqDgiuZsdMuLbqBnHJz2rudeDR5joTTsxDHI4ZWQH3HU1UuLcFSzZ9x61vRae0zA4GQOwplzocp5UbgRg45IrF143KVGXY4HxcY9P0O91K4kVEggeR3ccKoUnP6V+efxz1y61v4jC0lcyQ29nALKKKNyyqFXqQODheh9frX6QfE3wPc694G1fS7SykuJJtPljS3BAMhKkbRkgZPTnivmnWvFHwAvbO51jxJqype2hZLzTxp7NdwyJhTDIuPlIxjk4PrWNTERfU1hRknsfOmj+AfEPjbxPb6b4Y00wOZxHdXs+UijiJGWweSdvH5V9Q2z+EPhf4fs9BuPE1pDb2tubeF7m7UNIoUAKMnkjA468V4l8Wviw8\/hGW7+F\/h5LSxFyg8zaQQynncAMMTjgDIGSfmOCOVkTVtSdIL2aSRHFtMQ5yeQRwO\/OT+IrB4uC6m8cNOSNP9rf4iQfFDVLCw0JxJpun3LKXfH72YlQ3yZzxgAZxzk96yvCOi+A9JaLxt8QNTltFiuma02hjJPLEA5jRF4GCV+YjAPr0q7a+A7jw94ebxPq0ULEa0qLD5h+XfgxyJ6gCMgnPUjFZXxytjfabpum2KrNNDh2YqASXWRBkdsquSf60liIbilQkkkcR4i1zVfjL8YBDZSCG2lfL2Syk+XCjDJLH7xGNxPU+9fWvwy8D6T4G8KJ4T0kLOsn724umODPIQB5ntkAYHTAwK+UI9BuPh\/oWn+L7C1K6s9wtzJO5yoiLELjBOQy8FSO9fU3wP8AE1p4u8I2lxbbkmEIZVzuyvG5PXKkH6jmt6VRSZzVYOKudhGHvNKju3X\/AEnTH8qRgPmaIkj17HBz7mkvkihuoNVEq7ZIxFLuHDrnB\/HbkY\/2at208dpfrczRnynQQTKrZBBUnHr03Dj1r0H4B\/s0+Jvjh4wtvDMOk3EtlFcAKyEr57cEbTxgADLN0UE966G1a7OZRlOfKlua\/wCwF+yD4m+J\/wAYTrN7bOml2dz5llctk8AfvJTn+FCSq\/3nI9Dn9ZPD+haX4Y0S18PaLbCG0s4FigjHZQO\/qT1J7kk1yvwI+Cfhz4HeCYPDOjW8X2gxoLy4jTAYqMKi+iKOAPqeprtq5JS5mevRpKlCxJaWs17cpaQLl5GCqK9G0+yi06yisoR8saAZ9T3NYHgLQzGh1m5TlhtgB7Duf6V0tSahRRRQAUUUUAFFFFABRRQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":119,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xZhAAEAGKresECrYNFQ\/OMsSAFCeYrlH8hQoboAQAWKOugAAAQEICgD2csts+n3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":119,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0xZlAAEAGKrasECrYNFQ\/OMsSAFCeYrlH8hQuFoAQAW2JBwAAAQEICgD2csts+n3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":119,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":118,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2417{"flow_id":118,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcrhJAAPIGipQ0VD84rBAq2ABQyxG999l3w2qsYoAQAHaKTAAAAQEICmz6feAA9nK8mznWRD3U9Pr6UAS0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAVU1fWbLRbY3F2\/J+4g6sfajWtYttEsjdXByTxGgPLH0rgtT1O71a7a7vJMseg7KPQUATa34gv9cm3XD7YwfkiU8L\/AIn3qjRXk\/7TX7Yvwe\/Ze8LXeveOfEdqk1rHukhknCrET03tyQT2RQXbsOc0AeqXd3aWFs97f3UcEMSlpZpnCqg9STwBXhfx+\/4KLfs0fs\/ae934m8b2buoOwvdLFG5HZSctIf8ArmrZr8o\/20\/+C2nxl+N+o3Ph74Q3L6XpQcrFqM8WHI9YoTlY\/wDefe\/+7XxF4l8VeJvGesS+IPF3iC91O+nbM13f3LSyOfdmJNWoN7kOaWx+q\/xv\/wCDivSreaaw+EPhS6vApIjnit1t42H\/AF0nDv8AiI1r5k+IX\/BcL9r3xlO\/9ltY2MLHhLi6ubggf9\/EX\/x2vjSirUYojmkfQGof8FPP2xr6RpE+IdnBuOcJoVq\/\/oxGNNsv+CnH7Y9o4d\/iPaTY\/v6DaJ\/6LjWvAaKfKhXZ9h+AP+C2v7YPgyZPt1xp97Ch5SGa5t2I\/CUr\/wCO19K\/BT\/g4tYTw2Pxb8HXdupwHmaJLqNR674hHJ\/469flPRS5YjUpI\/o4\/Z6\/4Kbfsw\/tC2aP4e8Z2kc5UGRYrkSiPP8AfXAkj\/4GgHvX0Dpup6brFlHqWkahBdW8ozFPbyh0cexHBr+VDRtb1rw5qcWteHtXurG8gbdBd2c7RSRn1VlIIP0r7H\/Y3\/4LN\/Hn4Aapb6T8R9Qn1zSdyrLeRgfaAvTMiHCTjHc7X6ndmocGti1NdT976s6Xq19pFwLiymKn+JT0YehFeE\/snft2fBb9q7wva6v4R8SWn2m4wqxpKdkkmOUG7DI\/\/TNwG543da9tqCz0DQfEdnrsP7s7JlH7yEnke49RWhXmdrdXFlcLdWspR0OVYV3XhvxDDrtrk4WdB+9j\/qPagDSooooAKKKKACiiigAooooAKjurmGzt3urhwqRrliakrkvHmtmacaPbv8kfM2O7dh+H+elAGRrms3Gt3zXUuQg4ijz90VTor5z\/AOCif7cHhH9j\/wCEl9ql1qe3U5IMRpC+JQXB2Rx\/9NHwcH+FQznGBQBzv\/BRb\/gpX8O\/2QPBdzYWGqrca3MHhgitZFMrygcxRdgwyN0h4jzjliAPww\/aM\/ad+Kv7TnjKXxX8RtckeISu1jpkch8i1DHsD95z3dss30wBmfHP43+Ov2gviFefETx7qDS3FwxFtbK5MVpDn5YowegHr1JJJ5NcfW0Y2MZSuFFFFUSFFFFABRRRQAUV0HgL4T\/E34pXUln8OPAOr65JDjzhplg8wjz03FQQufeut\/4Yx\/au\/wCjfvFP\/gqf\/CvOxGcZRg6rp18RCEu0pxT+5u52UcuzDEQ56VGUl3UW196R5lRXpv8Awxj+1d\/0b94p\/wDBU\/8AhR\/wxj+1d\/0b94p\/8FT\/AOFYf6xcP\/8AQXS\/8GQ\/zNf7Hzf\/AKB5\/wDgEv8AIxPgf8eviX+z34yi8afDbXntZgy\/arVyWgu0BzskTuPQ8EZyCDX7ef8ABNH\/AIKm+Bf2qfClv4X8X6mtnrtqiRXEN3ODJC54AdjjfGTwsv4Ng81+KWu\/softL+GdMl1nXPgV4ot7WBC007aPKVRRyScA4A9a5\/4XfFHxr8GvHFl4\/wDAWrvZ6jYyZUgnZKn8Uci\/xIw4IP8AMA12YbGYHMIuWGqxmlu4yUvvs2YVcPisHJRrwlG\/dNfmf1P1Pp+oXOmXaXtq+HQ\/gR6Gvkf\/AIJeft\/+GP2uPhVZ6dfXoj1m1j8mS3ll3SRyKuWhYn72B8yN\/EnXlTX1jWhJ6PpWp2+r2KXtueGHzLnlT3FWa4fwbrZ0vURbTPiCchWyeFbsa7igAooooAKKKKA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2416{"flow_id":118,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2429{"flow_id":118,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2394{"flow_id":118,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2425{"flow_id":118,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":118,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02I5AAEAGF8GsECrYNFQ\/OMsRAFDDaqxivffZd4AQAWL5qgAAAQEICgD2csxs+n3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2420{"flow_id":118,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcrhdAAPIGio80VD84rBAq2ABQyxG99\/W\/w2qsYoAQAHYyLgAAAQEICmz6feAA9nK8Q7W14iuZEHltOAOq4G1P9kE9XNd1\/wAEt2dPAXxxAJBHgcH8fKu6+P6+l4VyClQ4txeHnUc6OBcVh4Pan7aPPK3V8t+SF\/hjoZ1Jt00+r3+QUUVr\/D\/wjfeP\/HWjeB9MUm41fU4LOLA6GSQLn8M5\/Cv1g5z9+P8AgjX4Nn8Jfsa6CLmIo8um2QYH+95AlP6zV9Y151+yh4Kt\/AfwG0HRbe3EQe3MwQDorHEf\/kNUr0YAsQo7muc6FojvvCcXk+HrVcdULfmSf61o1FY2\/wBksorX\/nnGq\/kKloAKKKKACiiigDivHdibbWvtIHyzoG\/EcH+Q\/OsQqrAqyggjBB712\/jjTDfaObmNcvbneP8Ad7\/4\/hXEUAfhB\/wXI\/ZqufhF+0VH4\/0+xK2GrA2ksgXjeg3Qkn1aFlX\/ALYn0r4er+hH\/grV+yNZ\/tNfs76gbK2QajZwfuZyv+rkUloZD6AOSjf7Mrelfz76zo+p+HtXutA1qyktryyuHgureVcNFIjFWUj1BBFawd0YzVmdp+y78CvEv7TX7QnhH4B+DtftdK1TxTrMdlY6jelxFbSHJDtsBbjHYZr9EtQ\/4Nbf2ttWumvtV\/al8DXM743zXEd+7tgYGSY8nivy+8NeJ\/EngzX7TxV4P8Q32k6pYTCax1LTLt4Li3kHR45EIZGHqCDX7of8EM\/jD8XPiT\/wSr+LPjb4i\/FLxHr+tWPiHXkstX1rXLi6urdU0e0dFSWV2dArszAAjBJI5NElrzdRxSejPzN\/4KVf8ExfjZ\/wTU07wbo3xP8Ai9o\/iOy8XNfPp9roj3IjtntvI3lklVRlvtAwR6NmvbP2X\/8Ag3Z\/ac\/aA+CHg\/8AaM8F\/tE+D9Fg8U6LBqun28y3ouLVJV3KGaOPAYDrtP418HfEj42\/Gf4yNaP8Xvi74n8VHTw4sD4k1+5vjbB9u\/y\/Odtm7aucYztGegr96vD\/AOzr8ef2qP8AghL8Lvg1+zZ48tvDfiy+8F+H5rLVrvV7ixSOOJo5JVM1ujyLlARgLg5weKlxio2stdwVmz8+P2zf+CBX\/BQL4K\/DO\/8AjRqXxJ0n4mWOhWb3Op2+mandy39tboCzyJFcoPMVVGSEYtgHCnFfFv7Nnw28Z\/Gn47eFPgt4B8UjRtU8X67a6Pa6hJPJHHC08qoGcx5YqCQSAD0r96P2B\/g78dP+CU\/7LXxG8d\/8FIf2qbDxFowkS70+1bXrq\/hsUSOQPFFJdojvLcMyKIUXBKDGSxr8Xv8AgnRfWmqf8FLPhFqen2gt4Lj4r6ZLBAP+WaNeqQv4AgfhShTpxp+zUVy9rafcDWqN3\/gpN+w18fP+Cdvj7RPhV8WPjXb+Jz4l0NtRik0m9ujEsYmaIo6zAZOUz3HNdn+0b\/wR9\/aB+EP7D+i\/txWvxr8P+N\/Bs2m6feR2mjyXTS2NndqgWTEqBQqO0cbqMFSeRhTj3v8A4OpP+To\/hn\/2IEv\/AKXS16r\/AMG8\/wC0D4R\/al\/ZP+IH\/BNT43Si9gsdNupNJtpnG6bRrzMdxEmRwYZ33g9vtC4+7SjSpU4pxil8kFlzWPzO\/Yi\/Z5\/aE\/bh+P2j\/s3\/AAk8d3dld31vNNNf3uoTi10+1hjLNLIEJIXhUAA5Z1Henft\/\/sV+Jf2DPj6fgL4z+Kmh+K9aXSYL\/UrnQ\/O22jzM5WGTzVU+ZsVJO\/yyrX62f8EnP2I7X\/gk18G\/jh+1f+07ClvfaTd6hY2V26YaTRNPdiJYsjP+lzKpVf4gkWOtfiv+0H8b\/GP7Sfx18UfHjx9cmTVvFWuTahcruysId8pCv+xGm2NR2VAKdOnThJuEUvRCekdT6K\/4KNf8EoPjz+wT8MfCfxe+L3xl0PxRB4nvvsFrDp0l001s3kGYZMyAFcAjg9e3NfJWmaxq2izm60bVLm0lZCrSWs7RsV9MqQc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":118,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02I9AAEAGF8CsECrYNFQ\/OMsRAFDDaqxivfffH4AQAW3z9wAAAQEICgD2csxs+n3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":118,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02JBAAEAGF7+sECrYNFQ\/OMsRAFDDaqxivffkx4AQAXnuQwAAAQEICgD2csxs+n3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":123,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA01CNAAPIGais0VD84rBAq2ABQyxaJEqClMupiqIAQAHZL6wAAAQEICmz6dIYA9nK\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":120,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2399{"flow_id":120,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2395{"flow_id":120,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2395{"flow_id":120,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2387{"flow_id":120,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":120,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2380{"flow_id":120,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1698{"flow_id":120,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1011,"pkt":"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","pkt_caplen":1011,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":120,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA05YFAAEAGCs6sECrYNFQ\/OMsTAFDQ0pnsSaa3EIAQAWKfkQAAAQEICgD2ctBs+nO6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":120,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA05YJAAEAGCs2sECrYNFQ\/OMsTAFDQ0pnsSaa8uIAQAW2Z3gAAAQEICgD2ctBs+nO6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":123,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2420{"flow_id":123,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2430{"flow_id":123,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2436{"flow_id":123,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2445{"flow_id":123,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":123,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0EjVAAEAG3hqsECrYNFQ\/OMsWAFAy6mKoiRKmTYAQAWJFQQAAAQEICgD2ctNs+nSI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":123,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0EjZAAEAG3hmsECrYNFQ\/OMsWAFAy6mKoiRKr9YAQAW0\/jgAAAQEICgD2ctNs+nSI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2460{"flow_id":123,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2430{"flow_id":123,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc1CpAAPIGZHw0VD84rBAq2ABQyxaJEsKVMupiqIAQAHZBNgAAAQEICmz6dIgA9nK\/xNNIWB\/75213IBYhR3NAHfeE4vJ8PWq46oW\/Mk\/1rRqKxt\/sllFa\/wDPONV\/IVLQAUUUUAFFFFAHFeO7E22tfaQPlnQN+I4P8h+dYhVWBVlBBGCD3rt\/HGmG+0c3Ma5e3O8f7vf\/AB\/CuIoAw\/2VNTHhmTxJ8DdSm2r4e1JrrTIz1lsrg70A9drEg47uBXQftceAdV+K37LXxG+Guk2jzaj4h8Catp+m2sfUyzWcsaD6lmA\/HFcB8S7q7+GfjTRPj3pNuzppbfYvEMKLky2ErYLYHUox3D6jsK98069tNUso9Q0q+SeG5iWUXsbAqyMMqVPoQQR7GgD+Wn\/gmB8VdA+Bv\/BQn4TfEbxleCy02x8ZW9vqN1LwLaK43Wzyt6BBKWJ7BTX9KX7Xn7N3hb9sH9mbxb+zl4r1e403TPFOl\/Zo7+0QPJDMrrLDMFJG8LKiNtJG4AjIzmvwX\/4Lj\/8ABN7xT+xn+0xqfxb8E+G5j8M\/Hmpy32hX8ER8rTruQmSaxcj7mHLtHnAaMgDJRse5f8E+v+DlLX\/gh8ONM+EP7YXw41Xxfb6JaR2mk+LdDuYzf\/Z0G1UuIpmVZ2VQB5odWIA3BjliAfWf\/BK3\/ghVN\/wTx\/aAvP2gfGnx3g8W6qNGn07RdP07RWtIoFmZfMnlZpXLNtXaFGANx5PGPN\/+Dp742+HdH\/Z5+H37O0F8kur634ubXbiIHLpb2lvLAGPoGe6wPXy29DWl8Wf+Dpb9kzRPC0zfBL4H+O9e1qWJjGniCK1063D4+XfJHNM+M9gnToe9fj1+15+1v8Yv22fjhqfx4+NesRz6nfAQ2llaqUttNtUJ8u2gQklY1yepJZmZmJZiSAfpn\/wak\/Di8OrfGH4vXlvL9kS30nSLRgPlmlLTzSL7lQIT7bxX11\/wWM+C3\/BUj4vWXgpf+CeHxKutJhs3uz4q0\/R\/EMel3cjt5fkP57sm6MASgoGHzMCQ3G35B\/4Jd\/8ABY3\/AIJsf8E+v2RdF+CU+mfEK+8STzSal4r1K18M25hm1CbbvEZN0CURFjiUkAsIwSASRX0P\/wARN\/8AwTjAESaD8TQrcyP\/AMIzbbmP\/gXQB8kr+xb\/AMHM+2SVfjF46C5+dv8AhcNvg\/8Ak1zSH9ir\/g5oEUaH4v8AjvBI8tD8YLf+X2mvrf8A4icP+CcTPlvDvxL2R\/6uMeGbbH1P+l0D\/g5y\/wCCc4Bl\/sD4lmZuCx8MW2EHoP8AS\/8A9dAHG\/8ABMb9mf8A4Lr\/AA4\/a50jxP8Atd\/F\/V5\/h\/DY3S+IbLxH42h1dblWhcRJFGskhSQTeW+\/5cKjAkg7Tz3\/AAci\/sh\/tM\/tM\/EH4Wap+zz8CvEnjC10fRtUi1S60TTmnWCSSa3KhyOhIVseuD6V6mf+Dm7\/AIJw4EC6B8TRGeZD\/wAIzbbnPv8A6XS\/8ROX\/BOMv5j+HfiX8n+qjHhm2wPc\/wCl9f5UAfbH7MvhMeAf2cPh94Nfw\/NpjaT4L0uzj0ieLZJatHaRoySL\/C6kENnoc967kBw5RHBlI\/ey44Qeg\/w\/E1+do\/4Ocf8AgnMqlhoXxL8x+HkPhi2+Uew+10p\/4Obv+CcBxANA+JgiHLD\/AIRm2y59\/wDS\/wD9dAHzB+wn+wV+1D8Lf+C3snxq1f8AZq8V6N8OofHfiiey1+60h47NbSaK+W3YP02vvjC+u4etfS3\/AAc+ahZ2\/wDwTz0W0vbtIri6+Jmni1ti3LBbS9LYHfA6+lSXv\/Bzx\/wTthtZb238J\/Ey5njQm3tV8OWqgnsMm7wCfXtX5b\/8FX\/+CrPjb\/gpZ4\/0oQeFW8N+CvDJlOg6HJcCWeaaTAe6uGAClyqhVRflRcgFizMQD6f\/AODU+K5f9on4qyxfLGPBVoJJf7ubsH8zg\/lX6y\/tb67c3XgnTfhPoM5iu\/F+pJZoFPw=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2418{"flow_id":123,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":121,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2396{"flow_id":121,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2400{"flow_id":121,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2412{"flow_id":121,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2413{"flow_id":121,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2407{"flow_id":121,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":122,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+2397{"flow_id":121,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2396{"flow_id":121,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1782{"flow_id":121,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1068,"pkt":"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","pkt_caplen":1068,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":121,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0TQlAAEAGo0asECrYNFQ\/OMsUAFAHRUHUsJsZBoAQAWLvOgAAAQEICgD2ct1s+ny+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":122,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":122,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA018tAAPIGZoM0VD84rBAq2ABQyxXC1q1Xit3QqoAQAHY5VAAAAQEICmz6epwA9nLV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":122,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2402{"flow_id":122,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2403{"flow_id":122,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2403{"flow_id":122,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2388{"flow_id":122,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc19BAAPIGYNY0VD84rBAq2ABQyxXC1sP3it3QqoAQAHZWQwAAAQEICmz6ep0A9nLVvG05qSVv7sbK3zPsfEvF4KvnuDw9N6Q5Pucm2fq58DtGi1q+uvEM4Rjc380qMyDIDyFiAf8APWvzC\/bchgu\/2rPHYtcFbfxLd22R6RSNGP0Sv0n+E\/xI8GfDH4djxT408RQaZp1uitJNdPjnH3VHV2PYAEkkDBr8zPjD4e+JPiH4s6\/4m1nwZq8L61r9zdFrnTJlMYlmZstleMBsnvXw30d8pjlHF2Y5jjHyK3s1KWik73sm9HypK9trrufUeK+Lq5nw5hsJg487vGbUdXFJNXaW129O+p5VJYJbzEOOgzz61yfiqLyVkmHOM9K+hPiB+ztJ4Z0zUJbjxTb3F1p8CSR2lvA7tdMxwVQpkZAHv15x1rxrxL4M1Z1WfUPDepQ26MDcSyWMoWNM\/Mx46AZr+1YY7B1KLnCopaX0af6n84fUsZGaU6cld9U0fav7UOvHSbjwx4DH7uHQvhp4Ys0VTgKzaNaTycevmzyZHqTXwl\/wUWla3+M+naH5vy2XgzSMLnGHe0jeTj13sQfpX3B+2HfaX44+NXiPxN4NuY59FvrrPh+6h5jutPVRHaSof7rQLER+XByK\/P8A\/b+1+01L9qzxfawS7oNO1H7BCQ2QEhURgD244HYYrzIU3HD4NLZU3+UF+p3U5c+IxUn\/ADL85f5HgmqqS7rtxjvmsS11nUPD2s2viHR7xoLuyuY7i0njbDRyIwZWHuCAa19Zk5fYDg+o5rmr9drEYorI9LDLQ\/sY\/wCCdvxwtP2if2NvAfxYtXU\/2poFvM6o2Qm+JZAn\/AVdV\/CvRfGVyfDvjnwV43Q4+x+I0srhvSG6RoWz7bihr4J\/4NfviZceO\/8AgmboeiXlyZJtBvLmzfJ6Bbq4CD8IliH4V92\/HiKVvhTq15b8S2SR3cTf3WilSQH\/AMdr5qa5ZNHuRd4pnv8ARUdldRX1nFew\/cmiV0+hGRUlSMKKKKACiiigDyb4\/sX+K\/w9tj036rJ+K26D\/wBmNWarftBJ5XxP+Ht6en2nUoc+72wI\/wDQDVmgD+Rf\/gq3qE+sf8FGfijd3Uvzf21Am5vRbSBR+grw6DEMIdZ1Ybuxr3z\/AILG+HJPCP8AwUv+KGl3cbKG1K0lU46h7G3b+ZI\/CvnZZoRABAxJLcgjp1r6HDS\/dR9EeHiIt1X6nTWurB0UMApHB2r\/APXr0D4JfAj40\/tF6tfeHvgv4F1DX7zTtPe9u7exjVpPJQbmEakjzZNoZliXLuEbaDg15VZykoM8H0r9X\/8Agh74Rs9N+Fln4xuZjBNJrc91DOjbWTaURWDDkEGPIrarOrZQpu0paJ2vbRva67HPGlBJzkrqP+aX6ns3\/BHr\/gmF8I9R8J2XxZstRj8QTX8QM+qyIBISD80RX\/lltYYMfUEc5PNfqZofwu8IeAdHh03So0RYlCkA9K\/Hb\/gtz8YvGX7J3ijwF8Wf2Qfi94i+H2vfEiDULrxhaeFNS+zWeotbyiEXjQqNqTu24O6437MkZ5r4s8P\/APBVH\/gopHOv2\/8Aa58Z3aA8rPrkn+NfiHGvh1xTxHifa4aVJ26zlO7afblsvk7H12RcSYLKabU+bXsla33r8j+hb9oXX7ew8O3MunNNETEc7STgev0r86vHPjW6u\/E95qHjnVGt9KsXle0vjOPtNtclTh4S3GGGFeNvkdMhhkKy\/Ecn\/BSD9rjxfbJa+LfjXrt9GwwUm1ORgR7jdWdrnxp8c+N3WbXdXuJgeQJZi\/v3\/lXjcPeD\/FdGo5Y2rTjzPVxTbS62TstT1M58QMLisF7ChTfzt+O56n8bfjVJ411F9H0qXbp0cmUhgyokJwSTySwyOAenFebrdsXMSu8bZ+QqxVlOeCCMYI9axzqdy482RSuRwyoFB59sUxtYkdlVsnHfHOK\/oTJ8mwmSZdDB4aNoxX3vq35s\/K8Vi68=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2398{"flow_id":122,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2390{"flow_id":122,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc19JAAPIGYNQ0VD84rBAq2ABQyxXC1s9Hit3QqoAQAHaqcQAAAQEICmz6ep0A9nLVK+Dr+W78e62+o+LdRgt2kWxshayC1WSQL+7G5oXXJ6ySj1A+Lb39q3+19A1Dw7ZfDXR9Fg13nWW02MJJcoGJZW2IuCwLfMQcBjgc5qp4u\/av+KmteL7bxXpviq+0u0tmg8vQbTU3S2MaYO1lBAIcZySDgED0r5HFcHZhisHVwdGjGnSqTcmrpXUYJQTUZNX5nzXVruCctWe9Rz\/DUcRTr1KkpzhFRTtezcryabS0srWd7KTsfQHwY1cfs\/6t8b\/FmjCKGfSbiS30K72LviQ\/aJEAJHCkNbkqODgZBwK5fxZ+2d8SNX8J+D\/Efj3w5fPcadr636eIzlIbxUaZWgixEFUNGdjEMScHI548xX9tPV21jWZ9R+Huk3drrE0cl3YzSb0Z44Y4cnKlXBWJDgj72Tnmub+Nf7Set\/FzRNN8NL4fsdI03S8m3s9PGFzjb0AUKMdgvUkknNfR4HLa0sy+sYzDpzbi+fmXupUoxcdHd+\/e62d73Z4uJxMPq3sqFW0Vf3bPW8209rbW89LH1J8ada8B\/s1Wvir9p\/wzrMV14g8Z2NvaeGNi4VC0QLTrz8yuBHMxI\/gC5\/eGvDv+CVWg3vxB\/b98M69qd08jaL9r8Q31zI2eLaMzs5J9xkn3zXmnx6\/aL1T4z+HfC3hq78PRWFv4V00WdsY7kyGYCKGPcflGOIV456nmvXf+CQ8rWPxo+I\/iwA7dH+CniaR2C5IMtp9nQD0O+Zce\/HevdhSnDB+zlu7R+V7L8Dhpu1fn7a\/dqfVXhbQfDfhmeC6TxZHdvbt5rJbxnLBOT14GOOvXnpX48\/EzUn1XxxrWpSTb2udWuJC2fvbpWOf1r9K7b4iS29vqOqC\/jEtr4f1JnCHkOllNt\/8AHgOR3Ffl1rE5lupZy4O5yfzOa9jNaj9pCPNeyPPyGn7k5WtqZ9642dfwFZd02Rirl3IR3rf+BHwo1n49fG3wr8G9BDG58Sa7bWCuq58tJJAHkPsibmPsprwK01y3Pq6S2P6ev+DeD4PXHwg\/4JheArS9tDDPqlj\/AGg6sMEi5d7vn6faSPwr61+OiyXfw4udCtyfO1a7tbCEDqWmnRMfkTTP2e\/hzp3wm+Cnhr4e6VYLaw6ZpUUaW6jAi4zs\/wCA52\/QVf1q1Pib4t+CfBqjckepyavdgfwpbRkpn2MjoPrXz0nzNs9JKyse4xRpDGsMS4VFAUDsBTqKKQwooooAKKKKAEdVdSjqCCMEEcEV4L8NrOTwhqOvfCm5yG8Paq4sQ3VrKYmWBvfAZl\/4BXvdeRftB6WfBnjDRvjRbrttMDSfEZHRYJHzDMf9yU4J9JKAPKv29v2bNA\/av\/ZV8X\/BjxBaeamp6POkRCbmRjGw3L\/tAHcv+0q+lfyG\/Ff4ceLPg58S9c+FXjewNtqvh7VZrG9jIOC8bEblz1VhhlPdWB71\/apwRX4K\/wDBzl\/wTPvfBfjWH9tn4UeHydNv1WDxZDbR\/wCr5Cx3BA\/ukiNj\/dMX91jXZg6vLPlfU5sTT5o83Y\/IfRbi1g1a1uL8EwR3MbTKOpUMMj8q+8fFf7W2p\/DS5t\/CXwPRdX17xLEsvh+RJA62kM3zCSQqcB0ywKnHKkkYxXwIYpVHzKR712Xwf+NXiT4RXt3d6Lpthdm8iRHOoQlzHtztKMGDKRkjgjg46V7NLEV8NPmp9dH3t5eZ4uJwlDFR9\/W23a\/n5H6a\/BL9kr9kq78DRax+0z8No\/iF42vna51vxHqviTU4nmkbHyBYLqNdqgBQcZwPoBrav8Av2B9ADDRv2LPC05Uced4j19j+moivhTTv+CiHxhsLZLY+GdCdQgCsVuVJ\/wC+ZuT71ct\/29fi9chrqLQNEQyAxsN12QQRjGDP706sMpneSw07\/wDXyX5c9l9xx0oZrDSVeNv8Kf8A7afXWt\/Dn9kaz0SPxJY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":122,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976134,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc19NAAPIGYNM0VD84rBAq2ABQyxXC1tTvit3QqoAQAHZ70AAAAQEICmz6ep0A9nLVn7BPgo23myK0jeIvEuGMeC20Jqy4A3KMnjJ4z0Hg37XH7MPh3wnpD\/tCfACe4\/4QLULhLfVdIu5JJbrwrfyAstlM+My28mG+z3JAWVVKsRIjqOE079uv4uWWiy+HU8O+HpreScyhLtb6Xy3IALLm7wp46gc981gXv7VHxWL6idBuNP0WPWNOuNP1i30yGZ4b20mcu8EkNzNNEU37XXCBkdEdSrKGHHTqV6db93ScY36z5lb0bf4Hc6dOVP8AeVFJ26Rtr8kjCOsXb2yXv+k7Eba0o4XOOmcYz\/hWbca3DLksrg9wWHJxzyB644qm\/iy5trclbdCNw+YrkL1Azwe2ay7jXTeuQrIpI4UZ4wDzgKBXtyr3W558aOuxurqxd8puUjAwWzzVhb9nXHOK5mDV5Lhl8wgYGBhQOg9hW3pMwnjG4KSTjnrWaqXZcocqJLnewOM16D+zd+0le\/AKDxx4et9Lt2h8e+Ex4fudQkJ3afH9ttbsyqB97cbYRtnoshI5UA8XNGnl\/IBjsawdVQsWiQA5PTFTKWzfR\/kCV013PdYviZqFv4J8W3E2SLfwpPHlV34Zp4EB46cTfe9DXyJfyAkqB16V7Jq3xF8e+Dvgzc\/DOyOmw6frcyyXt0lqBeyog+SFpc58obnwnT5znOFx4xqUUsbNkYrHEV61eo5TVraLXp3OjA0KNCmoxd77mbcvnqenrX6jf8GuP7DVz8cP2pb79p7xVoxfQvBcTWumySx5SS8dQZSD32xMIz\/1857V+bPwn+FHjf46\/FDRPhD8OtJe91rxBfx2ljAo4DN1dz\/CirlmboFUntX9bP8AwS8\/Yh8J\/sG\/sl+G\/g3oVov22OxSXVbtowslxOw3O7ejM7M5H8O4L0UV5GLq+7y9z26EOp9F1S+Atj\/wlPxP8U\/Ehxut9PVNB01+x8s+bcEf9tGRc\/7HtVD4i+KZPCHhK51WzhM16+23023UZM1zIdkSAd8sR+ANej\/CHwFH8NPhzpfg8yCSe2t919N\/z1uHJeV898uzfhivNOs6WiiigAooooAKKKKACqPiXw7pHi7w\/e+GNetRPZ39s8FzEf4kYYP0Poexq9RQB4P4AudY8OX978JPGFwZNV0DAhuX4+3WR\/1NwPXjCt6Mpz1pnxs+Dvgv49fDPVfhd490mC807VbR4ZY7iIOvzKVOQeoIJBHcEjvXe\/HP4Yal4vsrXxn4J2R+JtC3SaczHC3cR\/1lrIf7rgcH+FsHjmuX8F+MNN8baKurWKPDIjtFe2c4xLazrw8TjswP+PegNz+VL\/gq5\/wTm+In\/BOv48Xnhu90iebwfql07eGdWZC6hD832aRv76jof41w3XcF+UoJg7Ag9+hr+w39tn9if4NftzfBfUvhB8XPDkF1Fd25W2uXXDwv1VlYcqVbkMOVPI7g\/wAw3\/BSb\/glt8fP+CcPxOudI8X6Rc6l4RuLoroniaOHKFSTsinxwkmBwfuvjKnhlX1KGLc7KW55tXCqndw2Pn2S8VokbYVG7BA7ev8AOt7w\/OJdOVx\/z3Uf+PCuSSZTapu4Jkbn\/vmr9lrFzY2ohhlIxKD0HJz\/APWrvU0jidNuOh0L3pinkVlP3zj86DqS4ObgLgcZzz+VYb6qJHLM7EsSc+uagl1R\/OHknnPBz3\/pRzkKkzZ1G6227ZcAZbaCvPBAznFUbee48\/fCVDK7Y3sowR9atald6Xd3h0iJrJN5YfaJpGATB7nOBn+lZNpqlmLiSxuEibzJHHnO2AoyDkEkDt39a65KN7NkQi+XRGhDemGQxyHBBIx7iui0DUVFuGEoJD5IHauW1O+0sbLiOVZEa5l3lQC3AG3jI4OeT\/hSaVrMttIo3jkD7rZ75rKT5J2KdNzhc9A\/tNXtw2fXvWVf6obS688qGKAECsZNfkWLyy3c9ag1XUWZiHfkoDg=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":124,"flow_packet_id":1,"flow_first_seen":1490976136930,"flow_last_seen":1490976136930,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976136,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8bqFAAEAGoEasECrYNu8d\/Z+nAbuZbx1qAAAAAKAC\/\/9PLQAAAgQFtAQCCAoA9nPLAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":124,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwrQVAAOcGuu027x39rBAq2AG7n6dEArKimW8da3ASH\/7pVAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":124,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobqJAAEAGoFmsECrYNu8d\/Z+nAbuZbx1rRAKyo1AQAVczxgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_id":124,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":297,"pkt":"AMDKkaPvePiC0\/vCCABFAAEbbqNAAEAGn2WsECrYNu8d\/Z+nAbuZbx1rRAKyo1AYAVcOogAAFgMBAO4BAADqAwNhY3NDhjYtpf41Zp5hXeye2JYVtN+jXNyco\/qKL4s4VSBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAgamrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACBenoAAP8BAAEAAAAAHAAaAAAXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAhqagAdABcAGEpKAAEA","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":124,"flow_packet_id":4,"flow_first_seen":1490976136930,"flow_last_seen":1490976137044,"flow_tot_l4_data_len":351,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":124,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAotQJAAOcGsvg27x39rBAq2AG7n6dEArKjmW8eXlAQf\/i0MQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":124,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9tQVAAOcGsqA27x39rBAq2AG7n6dEArKjmW8eXlAYf\/gwgQAAFgMBAEoCAABGAwFY3n2J10RhgC68733hZUmscGmdgG8JZVPQEuz4sMP7eSBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":124,"flow_packet_id":6,"flow_first_seen":1490976136930,"flow_last_seen":1490976137222,"flow_tot_l4_data_len":476,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":124,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdtQdAAOcGsr427x39rBAq2AG7n6dEArL4mW8eXlAYf\/im5AAAFgMBADCNB31WBPLwXL3aVlGdUkiEHXV16hNw+LYmC2gi25gCR793y4LyHNgldd5fo2sWHKw=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":124,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobqRAAEAGoFesECrYNu8d\/Z+nAbuZbx5eRAKy+FAQAVcyfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":124,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAobqVAAEAGoFasECrYNu8d\/Z+nAbuZbx5eRAKzLVAQAVcySQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":124,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjbqZAAEAGoBqsECrYNu8d\/Z+nAbuZbx5eRAKzLVAYAVdY2gAAFAMBAAEBFgMBADB8EdB7Q\/LODNFL3srbcV+Ju17YEPSWzWukcLyKSWI+dwgGSVJA5TIhqKiK+K3T9sI=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":124,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_id":124,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":300,"pkt":"AMDKkaPvePiC0\/vCCABFAAEebqhAAEAGn12sECrYNu8d\/Z+nAbuZbyRNRAKzLVAYAVdnbgAA4mEOxAE6z6V5hYsGLsZxzcQwsbofWxHiU7ZnBdtdpNeEQ2Fl9fiE0iAQZNRSiiCjdsHsFnkHkoPGHzIYqFRjPVCsx4lViteAtnyXyi1ESsbJKlCkQ1F8DTrsQgHhdidSmib+4gWxp2fi9B+58WJP0t8S9qMkZ4wcHEjvtH5uKCAn38Ku179vU0TNZr+zsviGL57KLWVv6pfDHz0BHeAOzBgzwBraDgMJcS3h4J0\/BduvxydBQg0WEFtVrj90W64wo91HC\/tJ6Wa6s4X2pu3U+29cbcBGTK5DNrus3iWj6eCV9CioPd7ziARC\/9M3XzBNWeC567tO","pkt_caplen":300,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":124,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAon+xAAOcGyA427x39rBAq2AG7n6dEArMtmW8emVAQf\/ezbQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":124,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoogVAAOcGxfU27x39rBAq2AG7n6dEArMtmW8emVAQf\/ezbQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":124,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976137,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXcbqlAAEAGmp6sECrYNu8d\/Z+nAbuZbx6ZRAKzLVAQAVfB8wAAFwMBACDiZbNXtdYZKphJts39B9gz40YxVGHdsz5DK\/66mpovShcDAQaAyHTN7OFAu+7w6BWUP6a4R3j+arFpY3E\/k9QfAYqXhGsAmIjVa\/k+QdxGauulHrPls1kQu3kaGiYXtTyoXtYtozWGsEJhg672OMOLNJMw1wPZ3MygbC6f1oBuNVp5iljwqUwRiQvECXBz7IExoSFDjvcGJ8weFY6RvGK99WEJcmkewc3QG14xud3uIfcCMj2KfM4uWJ3\/ZnTOBiV86vvHKxogF+ibfQDGcH+bPISNQUySd5nnr8Aergsj6YpCzsVBrSBq5qxYIU3TARsl6ijBfNrL8NSCtaNcxCFAenlKT1XR7RprRQ2iLV4MR\/VaaZP7vPf1zD5sqeUTslXebjCQ6zGrGs\/xUULZ2BTBd4shBWUaRd1a5dFzeNv4DtDEC08sMmWYYk01Ley5Hi2mYEgWBEOwbsQ1T8OiCYDzdacYfYs6NTDAnZu2J+gZp7AjxxlRpb8L0JTtGWcPjeTFVMop0vWn\/aGmuygBgRdCwUkZyQfM27oYZ+nqIkPuJChw3j4Lw98I6bAZ4IzBHhyrojG7l\/QdioS3zhsptbm88s\/IkNHoODOT4T6M69u0LxSkF8xuurSCfOJw6EHa27BCG9hpSbyMCAb5snLwJ2lV\/+gy+76QKBDVhHGUy3nOzRRMKrOWRcrtfqFO4kcJbmbMp\/Xfu10nnQlHJLSR1uhOLmXb1jUygeoYtbiIa7+NUQm9IL3h8fuOeyhQ3rjbuJUSlYtnkcvRwvvp9egk90dGT5a1oHReDq+c1BNqDWjvB34EADtlXmgc\/T5T0sgRkBwiwXe5BL9WJlIBudRq6L1hpFQDOwGCArA\/7f9CycI0Vcj8unphWy530d9Y78qhzjr1tS3qQVvjOufOWDHojZvYcZnIy80YlxB7B9Y07DI2HGY\/tslwFNsRp5q0WmWlczRnFK7d0\/b94wz84qPp31FukOLIO05nYZmik0QwO6tStjP4Fwy+hVMzgBvNuxz3CN1x3gbvyQqGMm5sGx2PSUkMlfI14GH5OSRcOqm\/sBdCoAtvBTG75SGanamo8EoDmwAb0xXfN7YO2hL8jBfR0mcoyf2W\/4UTfPsUNhVQEhg\/S7YAVLRHxjXu\/kFJ14RUTJ3aa92KPIeo\/ygbH7NG+QkpX9jAPEY5ZZyG6BHgJq0ZQZiUF\/7vPds\/QogKMox4Oomld8\/cs\/zzFd1mk4nCPbTGn2CLtfQ1\/6J570D5c4dGM\/tO049A9f8G2W4ZpM6YhArq7JnlqEZCmgPynFoO0Z9xzUtCtXp\/MSnVbKhe5voEqLT7fcgsE2Q2Z5n1yi3sO4zrd5sJit+cx5VaRhEsd7u57c5h4vfswcJvKouRy1zyqLRQ3nHBEwA8WiSvIl+oHVlssYOU3\/fnm6VjmUHKxUVvF+HpL3caIiNVd6fFXVIrOi0XxFZRUbwdC4bmoi11iOeo7uxzXEVzga6TYUcr76XkIbJKb4ia1rEyglfh8ZWClyouBU4sY5uGkWRIwSV\/GEhfig6riENVKjfFH7ql31ZFxwGQ0tqIfIh3TKvoJXTnLWIrm6Topb9nK5ldkseGMMxzfpnfBBm5WofZWVF9Odf0ngGPCz0HThpQbuTzPoirijp5tHMwNjJMNZww3ePGPR55B3M6YYVdb4lDs1NcY31H+dZcwI+vvh8gi1RHCLgcx8i9laBTYhLKk6QN9t2MbQVCX63PJFrD7IpYeI44Hg44MDHojf+QXQdB0peZpS4VgiTHUSQyxvFBZAObJOxcSdZJ5emLr9gWRPNwW2WAAlFxA+Gu5AQ0\/guG+Kps7+dgWKI8MAV2vPCMywVDBMNfHivBMsxZGFbyoCJotm6zqMkiX18A2hgpkOQIn6QphT5zjoQxQetwDxzvOV\/xBj2RhTII6vuPB1DpiIp3HAykd80=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":125,"flow_packet_id":1,"flow_first_seen":1490976139642,"flow_last_seen":1490976139642,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51992,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ooBAAEAGTcesECrYNFQ\/OMsYAFAytNZaAAAAAKAC\/\/+zQgAAAgQFtAQCCAoA9nTaAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":126,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":1490976139643,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51993,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA82RlAAEAGFy6sECrYNFQ\/OMsZAFDfya3CAAAAAKAC\/\/8uwwAAAgQFtAQCCAoA9nTbAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":127,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":1490976139643,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51994,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ao9AAEAGhbisECrYNFQ\/OMsaAFCdOh5UAAAAAKAC\/\/8AwAAAAgQFtAQCCAoA9nTbAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":128,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":1490976139643,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51995,"dst_port":80,"l4_proto":"tcp"}
+0421{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ziFAAEAGIiasECrYNFQ\/OMsbAFAzpLr6AAAAAKAC\/\/\/NrgAAAgQFtAQCCAoA9nTbAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":129,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":1490976139643,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51996,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8c6xAAEAGfJusECrYNFQ\/OMscAFApFQd3AAAAAKAC\/\/+LwAAAAgQFtAQCCAoA9nTbAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":130,"flow_packet_id":1,"flow_first_seen":1490976139643,"flow_last_seen":1490976139643,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51997,"dst_port":80,"l4_proto":"tcp"}
+0421{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8MrZAAEAGvZGsECrYNFQ\/OMsdAFCU10ZqAAAAAKAC\/\/\/hCAAAAgQFtAQCCAoA9nTcAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":125,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxh7572AMrTWW6AScSAgygAAAgQFtAQCCAps+nrkAPZ02gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":125,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ooFAAEAGTc6sECrYNFQ\/OMsYAFAytNZbe+e9gYAQAVe\/XAAAAQEICgD2dN5s+nrk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":125,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":125,"flow_packet_id":4,"flow_first_seen":1490976139642,"flow_last_seen":1490976139669,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51992,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/71nqwmwmRlL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0418{"flow_id":127,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxrjsd\/DnToeVaAScSDohQAAAgQFtAQCCAps+naYAPZ02wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":128,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxtRO\/n\/M6S6+6AScSAtRgAAAgQFtAQCCAps+ncBAPZ02wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":126,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxlSuJ7038mtw6AScSDlMAAAAgQFtAQCCAps+nm5APZ02wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":129,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyxx\/FDN0KRUHeKAScSCFPAAAAgQFtAQCCAps+nXPAPZ02wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":127,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apBAAEAGhb+sECrYNFQ\/OMsaAFCdOh5V47HfxIAQAVeHGAAAAQEICgD2dN9s+naY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":128,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ziJAAEAGIi2sECrYNFQ\/OMsbAFAzpLr7UTv6AIAQAVfL2AAAAQEICgD2dN9s+ncB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":126,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02RpAAEAGFzWsECrYNFQ\/OMsZAFDfya3DUrie9YAQAVeDwwAAAQEICgD2dN9s+nm5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":129,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0c61AAEAGfKKsECrYNFQ\/OMscAFApFQd4fxQzdYAQAVcjzwAAAQEICgD2dN9s+nXP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":127,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":613,"pkt":"AMDKkaPvePiC0\/vCCABFAAJXapFAAEAGg5usECrYNFQ\/OMsaAFCdOh5V47HfxIAYAVdhGwAAAQEICgD2dN9s+naYR0VUIC9pbWFnZXMvSS8zMTV5OUlFWFpTTC5fU0wyMTBfUUw5NV8ucG5nIEhUVFAvMS4xDQpIb3N0OiBlY3guaW1hZ2VzLWFtYXpvbi5jb20NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCA1LjEuMTsgTEdMUzc1MSBCdWlsZC9MTVk0N1Y7IHd2KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBWZXJzaW9uLzQuMCBDaHJvbWUvNTYuMC4yOTI0Ljg3IE1vYmlsZSBTYWZhcmkvNTM3LjM2IFBpdGFuZ3VpQnJpZGdlLzEuMTYuNC41LVtNQU5VRkFDVFVSRVI9TEdFXVtSRUxFQVNFPTUuMS4xXVtCUkFORD1sZ2VdW1NESz0yMl1bTU9ERUw9TEdMUzc1MV0NCkFjY2VwdDogaW1hZ2Uvd2VicCxpbWFnZS8qLCovKjtxPTAuOA0KUmVmZXJlcjogaHR0cDovL2FsZXhhLmFtYXpvbi5jb20vc3BhL2luZGV4Lmh0bWwNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUw0KWC1SZXF1ZXN0ZWQtV2l0aDogY29tLmFtYXpvbi5kZWUuYXBwDQoNCg==","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":127,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51994,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/315y9IEXZSL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+1140{"flow_id":128,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":128,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51995,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/5100jxqrQhL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+1140{"flow_id":126,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":126,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51993,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/61SZU-lPFNL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+1140{"flow_id":129,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":129,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139678,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/81Ni5COup-L._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0418{"flow_id":130,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPkc0VD84rBAq2ABQyx1XQZuRlNdGa6AScSCQFAAAAgQFtAQCCAps+n\/1APZ03AEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":130,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MrdAAEAGvZisECrYNFQ\/OMsdAFCU10ZrV0GbkoAQAVcupAAAAQEICgD2dONs+n\/1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1141{"flow_id":130,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":130,"flow_packet_id":4,"flow_first_seen":1490976139643,"flow_last_seen":1490976139714,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51997,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {"hostname":"ecx.images-amazon.com","url":"ecx.images-amazon.com\/images\/I\/61Tfp7ZVcoL._SL210_QL95_.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 5.1.1; LGLS751 Build\/LMY47V; wv) AppleWebKit\/537.36 (KHTML, like Gecko) Version\/4.0 Chrome\/56.0.2924.87 Mobile Safari\/537.36 PitanguiBridge\/1.16.4.5-[MANUFACTURER=LGE][RELEASE=5.1.1][BRAND=lge][SDK=22][MODEL=LGLS751]"}}
+0405{"flow_id":125,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0x2ZAAPIGdug0VD84rBAq2ABQyxh7572BMrTYfoAQAHa+FwAAAQEICmz6eucA9nTe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":125,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0x2dAAPIGduc0VD84rBAq2ABQyxh7572BMrTYfoAQAHa+FwAAAQEICmz6eucA9nTe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":125,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcx2hAAPIGcT40VD84rBAq2ABQyxh7572BMrTYfoAQAHaVlAAAAQEICmz6eucA9nTeSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL2pwZWcNCkNvbnRlbnQtTGVuZ3RoOiAxMzczNA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KU2VydmVyOiBTZXJ2ZXINCkRhdGU6IEZyaSwgMTAgTWFyIDIwMTcgMTc6MjM6MzEgR01UDQpYLUFtei1JUi1JZDogMjA0NjVmNTQtYzAxMC00MGU4LWI0YTktNmIzNjU4OGM2MzYyDQpFeHBpcmVzOiBNb24sIDI5IERlYyAyMDM2IDE3OjI4OjI5IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT02MzA3MjAwMDAscHVibGljDQpMYXN0LU1vZGlmaWVkOiBUdWUsIDA2IFNlcCAyMDE2IDE3OjE0OjMyIEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBZ2U6IDE4MjA5MDQNClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIGI0MGRkNDI4ODg0NmIwMjgzMTNhYjk5Zjc5NzRkZmVhLmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IGlnUTc0dnV1YWJnQlBJYnEybHMxcFZueXdsZGF3TlVnU3hMY3dtdUo0X2JQMkNwRFFnYXJWdz09DQoNCv\/Y\/+AAEEpGSUYAAQEAAAEAAQAA\/9sAQwACAQEBAQECAQEBAgICAgIEAwICAgIFBAQDBAYFBgYGBQYGBgcJCAYHCQcGBggLCAkKCgoKCgYICwwLCgwJCgoK\/9sAQwECAgICAgIFAwMFCgcGBwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK\/8AAEQgA0gDSAwEiAAIRAQMRAf\/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC\/\/EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29\/j5+v\/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC\/\/EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29\/j5+v\/aAAwDAQACEQMRAD8A\/fyiiigAooooAKKKKACimyyxQRmWaQKqjLMxwBXN614+VCbfRUDHoZ3HH4D\/ABoA6K6vLWyj867uEjX1dsViah8QNNtyUsYHnI\/iPyr\/AI\/pXJ3d9d38pnvLh5GPdjnFRUAbV3471y4JEDRwj0RMn8zmqE+u6zc\/67U5znt5hA\/SqlFADnmmkOXmZvqxNIJHU5VyPoaTBPQUYI6igCxDqup2\/wDqdQmX6Smrtr4z8QWxGbwSAdpUB\/XrWVRQB1Vj8RImITUbEr6vEc\/of8a3NP1rTNUXNleI5xymcMPwPNec0qO8bB43KsDwQcEUAen0VxujeOr+zIh1IG4j\/v5+cfj3\/Gur0\/U7LVIBcWM4de47r7EdqAJ6KKKACig=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2382{"flow_id":125,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2389{"flow_id":125,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2390{"flow_id":125,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcx2tAAPIGcTs0VD84rBAq2ABQyxh75855MrTYfoAQAHZY+gAAAQEICmz6eucA9nTelUxpnnPPJ4IUHFe7fBX4Jr8QPCb+JvF7R\/8ACO6TL5NrGqgNqcq8NO3cxqeEXpjnvXR22oaZpnj+\/tLWFEUaLawLHGgAwiyhche3yj3\/ACrnjVc7pL19dD6OhlcKUYym\/wDO39fecn4Z\/wCCeF3qbzSeP\/iTKkkGli5EGnuIY9zEfKAgXGCeeKp\/Dz\/gnp4O8c+Cf7Xi+Jmt2F42vXFsbiG7crGqXcsQyN2PuoGzXtWofEq1mh0fxJZRARXUSwxGMNmRj8yj7uOoxz3468VmfDzxYnw4sYPB+vqWumvbnUI5Ilbbse5lk6leu2QAjsfbmlKjj3C+vQ9HlyNTjHRqzv8Ahb9T5e+N\/wCwZ8Y\/BvhzXdasL3TfGmj6VC0l7DJAkF4ic5dHCglhyeQScV8veEPFPi\/4P+K113wXcXFo8br9ttriHbJGp\/hZT1Ug9Rwc1+s\/h7xP4b8WfDb4iKnmG9j02YSNLGRtYJPkcj0weOMc9814R+0N+yd4Z+PXwu0rxF4V0mKw8X6dolvIl5FGAl2iwgskg\/iBGBXVhMbOm5Uqy7L70eLmmQUq8FiMG9bN23vZ9G\/yenocB+yN8d\/CXxS8dTfFb4n+MC2uaXA6WEV1IqQaRadMw7jhXOSWfknp0zn7Y+FfxT+JfxwtbfQvAmsv4a8OMGN145v7dUvLqP5VkXT7Q4GDn\/XS9M\/KBX5N2GhX3wv1uL4r6L4U2rol4sOt6XOFkignVuchjkg\/KyggjDZzxX3t8APir8Y\/Hfh238V+CPDtvp+m38isNd8TXnk26luSVto8yyDPA+4vAFPMcIowUoxuui6I8DAYhuo41HZ9X1fp\/X3H6QfsJ\/FjQv2Q\/iovgrw3rGpXHhLVpx\/wkTahdGeVriXaBqMrs2S4wNx5+TtwuP0vXUNyhlkBBGQQa\/Dm10fwVbafB4u+IHju\/wDHl6CuLGTbY6bbzKcbVtIeWxtPzSFzjB+n6nfsWftByfHX4FWPiLUMrqOnzyafqSMTuDx4Ksd3PMbIcnvmpyPF1HKVCpK\/VeXdf15lZ1g4qEa9NWWz\/R\/0+x7Z4gsbPxJpMuk3zsqyYMcqHDxODlZFPZlYAg+oqHwdrt1rGnyWmq7F1HT5vs9+qDAZwARIo7K6kMPTOOoNUv7WHr+tZ02qLo3iyy8QqcQ3RWx1DnjazfuXP+7Idv0lY9q+jPnDta7XwNqpvtLNnK2ZLc7Rnuvb\/CuKrU8IagbDXIsthJv3b\/j0\/XFAHeUUUUAFFFFABRRTZZFiiaVuiqSfwoA4LxVefbdeuJAchX2L9BxWa7pGhkkYKqjLMTwB60+SRpZGlbqzEmuc+K2otpnw91SVJCjTW\/2ZHB5UysIgfw35oA4fSNe+3JPr0rfvNTuGumz1CtgRr+EYRf8AgNW\/7aT++PzrjRr6qNsYCqOFVegHpR\/wkH+1+tAHGf8ABQz40QfB39iL4n\/ECZIpPsvhG6gSOV2Cs9wv2dASpB+9KOhzX4C\/DL4X\/DXxHaRL4J+KOv6FftbBzbanHBe27lj9z5l8zHbO7J9s4r9X\/wDgur8X9O0H9itPhfq1jdy2\/j\/xRZ6RNPYXghmtVj3XokXIYN81qikMCMP9K\/L74R\/AHwnrd5Hb23x98S6cbaND9omgsZlV8\/cGY1J65xmvPx1RRjZux6GAhzT2uehaV+z18Xo9HHiXRPE\/w58SW1lA1w0UV\/c6Zdz7AGKAOsiM3B54Xg5NcX8KPD\/jfxAb3xBrlrc2GoeKb0aYJ5XR5khyfOXcpJykYmBJA52kE5475vBNp4YtLnw9YftayC6MDxRx6t4KhKMCpHzOkinoSMryOlZPwhvdas9W0DStZeNRHc6m0dzBINsu0RIGXJO0HzGOOozyK+fcuZSen47H2WWwi6yi7\/hvtuvU9T1O+sfCfhK70OysxDa2umrb28I=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2383{"flow_id":125,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2406{"flow_id":125,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcx21AAPIGcTk0VD84rBAq2ABQyxh759nJMrTYfoAQAHYeCgAAAQEICmz6eucA9nTeQhH3fzM62Pr15L2r1W2h2OteGb8aVZeHbG3GnS28sckMd21yqsEcHG3ggYyMr0zkYqLwl4C8RadM1\/qWrpO8byFZ3mm3qHlkYR7yfu7TGMAZ\/d9cHjDi\/aM0PWb83vjLX9PtYkZvIt7bT7g5JABJYxA4AC8Y7fl01v8AtMfA280a4VPGAl3FQFjgnIO3IOP3eODkHPP49Dlppf8ABKjVc53drryS\/As6xJr+i3V3D4ZubdIr8yreQl3lMqtCV4P8J3bDnnO3BrP8B6J4q0iwtNF1O\/spDZW0ccBgWQEALjJJByeCO3GOM5JoL8b\/AAEZE+066qqcugGnXGSOuR+7\/HrT9N+OPwzngk1Kx8RmeEptW4SxuCCDjHIj6EHj61Ps8PbQr61iXJa6LZetjlP2ofhb4l8RWEPiuG+tEttPiiEqPv8AMY7wQQfu46gjGeBz1z5Z8BfBPi3xH4516IfFuTwqibJGT+w4bwyfKGydzYxkcfrjpXtvxW+Ofwy1T4U3egWPiIfarhUWGF7OYB3LAcEpgc9D9a8j+AfgjxJ428ea3LY+OtK0MLZxrJFq9k8xkORnb5UoAHYZzkdh0HVG31RpbI8PM03jVN7uzdj3PTPhl8TbbRkuLT9sxlRnItg\/gq12SNnLYZXPrn+dfQP\/AAT\/APC\/jG7\/AGpfDZ8b\/tKXniG3s3nvk0mPwpb2avPFE3ll5RuOMAnC4zxz1B8V8MfB\/wAd2\/h+HVP+Fy+EZF09t0UV34XuztOBk7hcYHQDjnAHGBXt\/wCx4\/iPSv2itB8R+KPHvg64RROkUHh\/SZ4bi4le3lTa5eZwoXzNxyOcLg189CSeMhe3xLou68jukv8AY52Ul7r6vt6n6Y\/8JOMf6w\/nR\/wk4z\/rD+deb\/8ACWf9Nf1pD4s\/6a\/rX1x8ifUP7LOs\/btW1eANndawn\/vh3\/8Ajgr2avnP9h\/Ujqer6tMGyEtSp\/76jx\/WvoygDsfh5Ju0mWP+7cH9QK36534dA\/2fcH\/psP5V0VABRRRQAVBqsRm0y4iA5aBwPyNT0EAjB70AeX15d+2Np0l98BNXniTLWm2YDGecMg\/9Dr1a9tza3ktsw5jkK\/ka5z4o+Hv+Eq+Hes6AIPMa40+Ty4\/7zqNyj\/voCgD8xP8AhMh\/z1\/Wj\/hMh\/z1FeYeJdcuPDXiK+8PXUp8yxu5IGLDGdrEZ\/HGao\/8Jv8A9Nv1oA8p\/wCCr7T\/ABP+HvhnwPoXiXTbfVLTWW1NbLUmkRLiEQyQkh41YqwMowCOeeRgZ8f\/AGbfhd+1jZ3Nu\/gx\/AVykTCQw3vimSPIVepzBn0PQ8ipf+Ch2mfE\/wAU+P8Awv4m+HFnaao1rp0sFzpR1JIJgDJuEo8wbSvG3rnPYjkcz8Jof2vdBj+1Wn7Ot7chGAE1v4qsFMfbGTJx\/EPx\/GvKzDnaa0+b\/wCCenl\/KpJ6\/Jf8Bns3iXXf2kNJ0TU7fU\/C\/wAOxZTxNBPFa+OZgRIoOSvmQDcevBOD2IzXnQ0eXxe\/haDVLCe1ksdDusAsUcDzFjdT0JUruUj7rAEjIIJb40uPj54l024m1P8AZa1q3MMSm4ng8VadMQdpwxAbknG4qOeD71a8B6rP4hk0eWe1eCRvCbmJ7hGXnz3JyGAP8O0\/1FeHTi6d3ZLVbO\/R+bPs8tkp1bN39VbqvJGh4s+EXhO68DXemz6NbLunBLqpDAZX5Rjn16Vxvw\/sNBt\/ihr+oy24a6kngUtLKT5oEUbfPk\/Ocopy2Tlc9c17X4gSKfw9Pqd3EHjjvApAGAwJ5Hv0FeF+F4Z5\/HfiK9j2lbW9jypXACm3Rev4jj3NaYaXNTlf+tj28coxxNJ2vr+Vzr\/GJsNdv7G3hg+zH7S8hu4n8tlYeXhtwOQdynuKzvgz8OPCi6LPdxWwUza3eJKpcmMFbuYKQvQHHcc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2397{"flow_id":125,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2390{"flow_id":125,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":125,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ooNAAEAGTcysECrYNFQ\/OMsYAFAytNh+e+fDKYAQAWK3dwAAAQEICgD2dOps+nrn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":127,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0qVhAAPIGlPY0VD84rBAq2ABQyxrjsd\/EnTogeIAQAHaF0gAAAQEICmz6dpwA9nTf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":127,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0qVlAAPIGlPU0VD84rBAq2ABQyxrjsd\/EnTogeIAQAHaF0gAAAQEICmz6dpwA9nTf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":128,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0jQVAAPIGsUk0VD84rBAq2ABQyxtRO\/oAM6S9HoAQAHbKkgAAAQEICmz6dwUA9nTf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":127,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2390{"flow_id":127,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcqVtAAPIGj0s0VD84rBAq2ABQyxrjseVsnTogeIAQAHYMmgAAAQEICmz6dpwA9nTfJbExI\/Gpta\/4Ko6h8Jr108TfD7x9orxNtkhuND8hWP8Ad5lAP0r4yHif\/tPsqmV4mLvbak393tPn1PI\/4iBka1albvZf5n6Y2HjbXbM4lmW4X+7MvP5jmui0bxlpeqsIJT9nmJwEkPDH2P8A+qvyz8F\/8HCXwHtbyCw8f+CfFMtuzhZr1dKgRowSMElZjwuefldiBwM19ufAP9pD4IftQeCU+IHwJ+Idjr+nEAXC28mJ7V9qsUliPzRsA65BAI3DIBOK\/QstzPD5nQVSmpR\/uyi4yXyf5q68z6TLs7yzNV\/s1RN9tn93+Wh9D0Vx3hjxjNYsthqsheA8JKeTH9fUfyrsFZXUOjAgjIIPBFeieqLRRRQAVDqF9BptlJfXJwka5Pv7VNXKfELVC88WkRtwg8yT6np+mfzoAwNY1dr6efV9TuUijRGklklfCQxqMkk9lA5\/+ua\/HD\/gqj\/wWN8WfGnxTffs3\/si+I59O8GWM7W+veKrGTbNrsqkqyQOpytuD\/GpBkIBU7Bul+gv+DgT9tHxP8CPgVpX7O3w7upbTVPiG00WsalHjNvp8aoZY1OchnEiLnaRtZiCropr8mfgn4b0e\/8AE2lWOtSOtrPqFslx5TYYRtIobH4Zrycfjo06UuR3te9vLp6\/8MfnHG3EdTCReCwzs38TXn0X6\/d3NbwB4L1vW54tOttHu7u5kQ7ILW0kd1XoB8vfj\/8AXXuHw1\/4JzftgfFYpqHhP9nfxPNbzIF+0yae0cR9Bvk2r6k8+lfqHbftPfBP9kb\/AIKK\/Dz9iTQvBvhLRPAmufDzSDFfJ4fc3Ka3qNzew2BkvADHGkrWK26rJhpJ72AKSSQPvN2WNC7HCqMk+grzqWWY\/ERU5zjFNXsk5P8A8CvFf+Sv1POw3htKraeJxNr9Ix\/Vv\/20\/OX9h\/8AZr+OX7H37KcHhTRPD66X8Qtb+IT3Otw2V3Cbo6ZZWhnaFeplLsscBVQQGuASV+8Pvay0P4dfEXwtbR38em+J7WOAQNd3scNyZGUANvIGA\/8AeAA5J4FeS\/E\/9l34DftGfDLw\/wDE343fD6HWb\/w3qF74l8OPNdSxfZbidmkTPlsu5QBD8rZG6JDjivgz9tX9vz\/goh+zf+2xL4B+B3we8O\/EHwn4n0SDTPhVb2Xh7+0I7uS2WIXMiS2ZWeSdGEySQmQKgZSQAvMYH2GDymE8RHmhUs9r\/HeWsbWWrt16H75wRwdS4lyXC5JlcoKpSpzqT9rywUveTsp3fO1F8zTjBRSk9dz74+JH\/BMH9gj4reZJ4v8A2YfDJll+\/cWFqbWQ++YSvNeTeC\/+CIvwA+BHxMh+L37KHxV8afDvWIplea3stRW6srtAc+RNDMCHjILA87gGJVlOCPnn4qftEf8ABXDwr4pGpfCvwfHYWG6y1HUdH837ZLFctaQXF\/p0bzT7Ps0U0sqK8aSMFXAb5SB9c\/sm\/tSfG\/xN8GbPx5+1a2n+CtZ1fXp9N0TwvqGlTT6hO0LbHbESQM4LZICwDaoyWOeMsPLK62LdOWFnQcb+8v3cWk0k7xlG99LXXqeJmPA2XYSlDFRdGUr2\/dSXPF+fJZ9Hqm1956jNZavpF5\/YniJYherD5izQLtivIxgNLGM\/LgsAyfwlgRlWBrpvAniBgw0O7fIOTbsT09V\/qPx9q5H4O\/Eu5\/aj+FU3i6PQU0mW31OddGumkaRXaNnWOYqQMLJGVLR5b5JSu4nOJNO1A3VvBqtrE8DOA6xufmicEgofdWBGe+M9DX1sWmkczXK7M9ToqvpV+mp6dDfxjAkTJHoehH51YqgCvOdavY7nVrq+uWPliRmcqMkIvp+Ar0SZmSF3XqFJFeS+I52h8NajcRtyLCXB78oR\/WgD8av+DiG+udf8T\/DLXJSyi7vdZMqs+dpH2UsAfTcTgelfFfw0tro=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2402{"flow_id":127,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2401{"flow_id":127,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1688{"flow_id":127,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1003,"pkt":"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","pkt_caplen":1003,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":128,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2409{"flow_id":128,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2468{"flow_id":128,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2454{"flow_id":128,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2437{"flow_id":128,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcjQpAAPIGq5w0VD84rBAq2ABQyxtRPBCgM6S9HoAQAHYWzwAAAQEICmz6dwUA9nTfjVj1+TH6ee8\/so\/8ibqX\/YT\/APaaVxf7T3\/JSx\/2DYv5vXbfspKB4K1Bh1OpnP8A37Sue+Pngbxf4s+Ji\/8ACO+Hrq6X7BEplSPCA5bgseB+dADNI\/Z\/tfF\/wu03xHoFx5GqyQO8qSuTHcfO2B\/sHGBkcevrWh+zl8Mtf0TxLe+I\/EmmS2htEa2gjmTBZzjcw9QBxkcHdXpfw60S98N+B9L0PUowlxbWipMisCA3UjI61tHODtOD2yKAPLP2ovGEGn+GoPB1vKDcX8oknUH7sSHIz9Wxj\/dNcv8As+\/DPwf4+03U5\/E+nPO9vPGsJW4dNoIJP3SM9KwfjV4R8eaN4pn1rxe32lLuX9zfxKfKYdkA\/gwONp9O\/Wu6\/ZKYnTNbXsJ4D\/469ADfjB8F\/h94P8BXniDRdOmjuYmjETNdOwG51B4J9Ca8Ur6K\/abuTB8MmiB\/11\/Eh\/8AHm\/9lr51oAr6x\/yCbr\/r2f8A9BNfiFdf8fMn\/XQ\/zr9vdY\/5BN1\/17P\/AOgmvxCuv+PmT\/rof519zwbtX\/7d\/wDbj4zi3ej\/ANvf+2jKKKK+3Pjj90P+DX7UJp\/2XvFFm7ErD4mmVR6fJC383NfpB8WYRP8AC\/xFGwyDotycfSJjX53f8Gxnh6bT\/wBkbXdakQhL3xBNJGSOCM+Xx+MJr9Dvi9cC1+FniKZjgDRrgfnGw\/rX5FnLTzWtb+Zn6nlKayylf+VHrXw5na6+Hug3LHJk0a1Yn1zEprZrJ8A2jWHgXRbFxgw6TbRkfSJR\/StavMPRCiiigAooooA8u\/ahhNrpvhPxMBgad4wtRM\/92OZZIGJ9sutLW5+0P4ZuPFvwX8Q6XYqTcx2BurTA586EiZAPclAPxrlPC+uQeJvDen+IrUgx31nHOuO25QcfrQB\/PR\/wcKfCyf4f\/t9XviBbYpBr+lJOrEcNIkjgj8I2h\/OvhWv2r\/4Oev2dp9c+HHhf9oTSbDc+i3nkX8ir0hl2xsSf94WwH41+KlfqvDuIWIymn3j7r+W34WPzPPqDoZpPtLX7\/wDg3Cv0X\/4Nxf8Ak4X4g\/8AYmRf+lcdfnRX6L\/8G4v\/ACcL8Qf+xMi\/9K460z\/\/AJFFb0\/VEZJ\/yNaXr+jPsn4g\/wDI961\/2Fbj\/wBGNWPWx8Qf+R71r\/sK3H\/oxqx6\/Jj9PPff2VUA8CXr+uqN\/wCi0rc+Inxv8MfDrUf7Fv7G7ubswiQRwqoXBzjLE+3oax\/2WEx8PLl8ddVk5\/7Zx1wf7T6kfEpSe+mxY\/76egD33Q9SOs6LaauYPK+1Wsc3l7s7NyhsZ74zVCDx54cl8XXHgiW88nUIFVkilwBMrKGyh7kZ5HXirnhuLyPDthB\/csol\/JBXz5+0RNLb\/Fu7nglZHSKBkdGwVIQYII6UAfROp6Xp2s2MmmarZx3FvMu2SKVcqwrn\/h78MtN+HF5qf9jXTtaX8kbxQyctCV3ZXPccjHf1z1rgvhN+0aH8rw98Q58HhYdUI6+gk\/8Aivz9a9iiljmjWaGRXR1BVlOQQehBoA8y\/arn2eBLKDP+s1RTj6RvXgVe4\/tZz7dD0e2z9+7lbH0UD\/2avDqAK+sf8gm6\/wCvZ\/8A0E1+IV1\/x8yf9dD\/ADr9vdY\/5BN1\/wBez\/8AoJr8Qrr\/AI+ZP+uh\/nX3PBu1f\/t3\/wBuPjOLd6P\/AG9\/7aMoorpfg18N9U+MHxX8O\/C\/R1bz9d1eCzDKM+WruA7\/AEVdzH2WvtZzjCDlLZanyEYynJRjuz+iD\/ghD8LJ\/hj\/AME9PCUd3bGKbU7f7YwYckTM1xz+M5H4V9OfHRZLr4cXOh27HztWu7WwhA6lpp0TH5E0nwA+H1l8LPgz4c8CafZLbx6fpkaCBRjyyRnb+Gdv4Vd1q1Pib4t+CfBqjckepyavdgfwpbRkpn2MjoPrX4viKrr4idU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2464{"flow_id":128,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2433{"flow_id":128,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2013{"flow_id":128,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1237,"pkt":"ePiC0\/vCAMDKkVoBCABFAATHjQ1AAPIGrK40VD84rBAq2ABQyxtRPCGYM6S9HoAYAHY+SgAAAQEICmz6dwUA9nTfyQD\/AGzwzn1wOMVh\/CrwVffF3xBa\/FbxhYPDoFhJ5nhbSrhMG5fteyqf\/IanoPm9M+z1gbBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABWF4++Gvgv4m6SNH8ZaHHdIjbreYEpNbv\/AH45FwyN05B7c5rdooA8W1X4cfGf4aEyeHbj\/hNNGT7ttcyLDqcC+gc4S4x77WNVND+K3g3Wb86JdXsml6mpxJpOswm1uFPpsfG7\/gOa90rJ8W+A\/BfjywOm+MvC9jqUOPlW8t1cp7qSMqfcEGgDhaK57xv4B1n4ARf8JT4WvrzUvB8bD+09Ku5Wmm0pCf8AXQufmaJf4kOSByD1xvW9xBd28d3azLJFKgeORDkMpGQQe4xQBTvPC3hjUGLah4csJyepms0bP5ioE8A+BYm3x+CtJU+q6bED\/wCg1rUUAQ2mn2Gnp5dhYwwL\/dhiCj9KmoooAKKKo+I\/EmieEtHm17xDqEdtawDLyOep7ADqSewHJoAsahqFjpVjLqWp3ccFvBGXmmlYKqKOpJPSsTwR4H1H4+ajB4q8V2Mtt4LtpRJpmmTqVfWXBys8q9RADyqH7\/U8YFWfBPwt1\/4w30HjD4paXLYeHoXEuk+GJ+JLsjlZrsendYv++vQ+zoiRoI40CqowqqMAD0oAERI0EcahVUYVQMACloooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigCO8s7XULSWwvoFlhnjaOaJxlXVhggj0INeD\/B+ObStD1LwXLM0g8N6\/eaXC7nJaGKT93\/AOOMo\/CvfK8J8Bf8jR45\/wCx4vP\/AECKgDpqKKKACikkkjhjaWWRVRQSzMcAD1JrlrLxH4u+KV\/JoPwYs43t45DHfeKbxD9jtvURD\/l4kHoPlHGTigC94u8ead4Wlg0m3tJtS1e9O3TtGsV3T3DeuP4VHdzwBmtv4c\/AzUrvV4PiJ8ZpYb3VoW36Zo8J3WelehA\/5ay+sh6H7vQGuk+GPwb8LfDGKa9tGm1DWLwZ1HXNQIe5uT6Z\/gQdkXAGB1611tABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV4T4C\/5Gjxz\/wBjxef+gRV7tXzdpvxD8LeDfFnjSy1W9aS9uPHF59k0yziM1zcHZFgJGuWPIxnp70Aeg1z\/AIm+I2i+H9Qj8O2NvcatrU4\/0bRdLj824f3YDiNfVmIFTaR8PvjL8UMS63K\/grRX6wxMsmqTr7nlLfI\/3mFelfD\/AOF3gb4Y6e1h4P0KO3aU5urtyZLi5b+9JI2Wc9+Tj0xQB5\/oHwG8V\/EKRNW+ON8kFhuDw+EdMnPle32mYYMx\/wBlcJx3r1rTtN0\/SLGLS9KsYba2gQJBbwRhEjUdAAOAKmooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigArg\/hBoGhQa\/4r16DRbRL6XxJdJLepbKJXXf0L4yR7ZoooA7yiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA\/\/2Q==","pkt_caplen":1237,"pkt_type":2048,"pkt_ipoffset":14}
+1688{"flow_id":127,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1003,"pkt":"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","pkt_caplen":1003,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":127,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apJAAEAGhb2sECrYNFQ\/OMsaAFCdOiB447HlbIAQAWJ\/LAAAAQEICgD2dPFs+nac","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2013{"flow_id":128,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1237,"pkt":"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","pkt_caplen":1237,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":127,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apNAAEAGhbysECrYNFQ\/OMsaAFCdOiB447HrFIAQAW15eQAAAQEICgD2dPFs+nac","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":127,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0apRAAEAGhbusECrYNFQ\/OMsaAFCdOiB447HwvIAQAXlzxQAAAQEICgD2dPFs+nac","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":128,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0ziRAAEAGIiusECrYNFQ\/OMsbAFAzpL0eUTv\/qIAQAWLD7AAAAQEICgD2dPFs+ncF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":126,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA05ztAAPIGVxM0VD84rBAq2ABQyxlSuJ7138mv5oAQAHaCbAAAAQEICmz6ec4A9nTf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":129,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0RpFAAPIG9700VD84rBAq2ABQyxx\/FDN1KRUJm4AQAHYieAAAAQEICmz6deQA9nTf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":126,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2416{"flow_id":126,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2382{"flow_id":126,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":126,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02RxAAEAGFzOsECrYNFQ\/OMsZAFDfya\/mUriknYAQAWJ7wwAAAQEICgD2dPRs+nnO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":126,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02R1AAEAGFzKsECrYNFQ\/OMsZAFDfya\/mUriqRYAQAW12EAAAAQEICgD2dPRs+nnO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":126,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA02R5AAEAGFzGsECrYNFQ\/OMsZAFDfya\/mUriv7YAQAXlwXAAAAQEICgD2dPRs+nnO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2392{"flow_id":126,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2389{"flow_id":126,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2388{"flow_id":126,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2389{"flow_id":126,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc50JAAPIGUWQ0VD84rBAq2ABQyxlSuMDl38mv5oAQAHY+yAAAAQEICmz6ec4A9nTf+M\/Fep61eeI9X8Tald3+oo6ahfT38jTXSuMMsjklnBHBDE5HWgWp654d\/YyvYP2s\/Ef7J3xS8YXeh6j4fh1WQajp+hi9W6SytZb3zFR5ocRy2sLSo+453R8YYsGfswfse2f7Ttr4t1Sx+NWieFrHwxfafFHfeKYjBFdxXMk5ZtwchJEt7aaYRDc0pTykJdkDeVJ4v1L+011qa\/1B7tLYW63X9pyCUQiLyRGH6hBF+725xs+XpxXa3\/w98R+A\/DPhfVr7w1JPY+OQJ9KsdN8QtvnkicKgkjUZDgyqVJB++QDkMAxNs6\/4PfsB\/Eb40\/tZeLv2V\/DOtxxy+DNQ1G21jX5rJzBALa7FlHJIiklEkuXgjJydglLHIQ1kfs8\/sX+P\/wBoDxl40+GlvqcWh+JPB9ou7R9UgKveXx1GCxFgCWAjnaWcIit96QLHwWBG34c+EXi7xX8XvE\/wWsfhVcXPiezWS41y0n8f7BqJSVGDrI2FuizyJImCxfcGXPWsmw0XUfEUfjXxzpPgszxeHroN4ruT49cy3LGV3EoJIe4Hmwht43YcxnOWXJZC5pdvyPOfil8OL\/4YfFvxJ8JLq8F1deHfEV5pEtwI9gle3neEvtyduSmcZOM9au\/Gr4FfE39n7xTH4M+KmhLp+oy2ouI4VuUlzCXdUk3ISNrqgkQ5w8bxuMq6k+3fsq+NfgP8QfihHo9\/+ybLrur3Jkup765+KF7ZM7ZyztIBksWYepy2Txkj0H9oL9qf9nr48fDO7+J2pfss37J4furXQV\/t340X9xdErEVijiiYEyRxxxhc9FAUDsKdo23Jc6nNpHQ+evEX7Kuo6P8AskaH+1ZpniWTULbUdW+w6rp8NlEqaSzzXkcIldp\/OYyfY5GVlg8kglRKXR0Wz8fP2N\/GPwA0iLXPEWrtLbXXiOLSrCZtOaFLsPp1pfefGzMQ6hLyIcZHIOfmAp2meO9B+IXhS\/8ADejfB3VZfD3hq0k1abS5fHV41nZLvCGRY2GxXLSAcDLFj61c8S2ur+JrbwJpviHwDdXFprjpYeDI9T+IE0kFqrGDCKZDttowZowfuqpDZxtOFZFc0u35HV\/Fv\/gnFJ8Nf2y\/C\/7HWlfG3TdZ1PxBq82m3d1bwWwl0ueO8mtsTQx3ciR7vJ81VkljfY6l1jrnfht+xJL8T\/2lvEP7Pfh\/xzcMNB0d77+0Es7CSS6I8hREgXUDaks86qG+1EHH947a53VtG1zQfG\/jDxAIU03xD4Ivmn1S9Piu5+2SXH2oQNLBLjdI\/mupLZB+bd64jtfD3xS+I\/jtVuJbifWNd8PHU7jUtR8TzSSTWKpu\/eyFi78RLhDk\/KvHHAO7Oh+HH7EknxB8a\/EfwZN8bfDejj4eautjJq2qFo7PUMXMsUjpIT8m2KCaZVILSbBGuXdQZ\/hF+wD8RPjT+0l47\/Z28H6\/EZfA17f2c+sTWTCO5uYrs2dtFt3fuzPOUHLHy08xzkRtXnd74V8c6j8K7z45XNzu0m\/8THTbt5dXd7i6vliFwXdCSWAEoO9v4n4yc1yr+JfEDz3FwNcvQ91dLdXT\/a3JmnUsVlc5+ZwWYhjyCx55NGgantH7KP7CfjP9qyLUbXQfFltpGqad4s03RG0i\/tG86c3CXUkzR5ZQZIIrSWRojgsiSEEFMHN\/YE\/Zh1n9r79snwH+zxpWnvcx634hiXVFTI22UTeZcHI+6TGjAH+8yjvXldr4t8VWN019ZeJtQhme9W8aaK9dWNwu7bMSDnzBvfD9Rubnk1+6n\/BpH\/wTyuNK0rXv+CgHxG0Nkl1JX0nwYLiL\/l2VgZp1z13yKAO48gHo9Iep+23g3wxYeC\/CeneEtMjRINOso7eMIoUYVQMgDpk81rWtu91cx20Y+aRwo\/E1HW54D003erG9dfkt1z\/wI8D+p\/CgZ2UMSQQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":129,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2418{"flow_id":129,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2393{"flow_id":129,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2402{"flow_id":129,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2416{"flow_id":129,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2398{"flow_id":129,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2407{"flow_id":129,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcRphAAPIG8g40VD84rBAq2ABQyxx\/FFVlKRUJm4AQAHZqdQAAAQEICmz6deQA9nTfdlFtmSu5pI\/pW\/Yn8Dr4C8B3PhiOPamiW+m6Co\/68LGG3P8AKvaa4j9nfTLyy+Fdlqepj\/S9Xmm1K7b+800hYH\/vnbXcAFiFHc18+fRHfeE4vJ8PWq46oW\/Mk\/1rRqKxt\/sllFa\/8841X8hUtABRRRQAUUUUAcV47sTba19pA+WdA34jg\/yH51iFVYFWUEEYIPeu38caYb7Rzcxrl7c7x\/u9\/wDH8K4igD4n\/wCCkf7Lsv7TH\/BOD4ufsy2Wmi68Q\/DO8\/4THwTCY97y28YeV44x1Zmge5jwP4plFfzgzIBv2EqOo2nnnqT3JI75z+OSf62\/ibPP8OPGOjfHSwtTLb6eTYeJrdU3efp0pwSR\/FsY7se4zwK\/nY\/4LT\/sKN+w3+23rmg+FLP\/AIoTxpnxF8P7yAfuTp9wxY26EcEwyFowM52+Wx++M+jgKi1g\/U83MKb0qL5nx9cgMxKjJHoc5P8An\/PFZN8VVSGiP4kYBxz\/AD\/StbUz9mt5LqeJxGnzFgvX2Hv2HqTVJ9IIi3XM9w0kigyBJXQKSOm0EY6gYruktTgi7asx7mBi2084\/hGOPwrK1eFkQiSPBI4962k03S1TyLe1iDY5G0bivTknk8nr75+uXrNrAilliULj7gXC\/Xb0znviuea0N6bXMf0Sf8GfOiCD\/gnB40v7gHbe\/GK+2gEjITTdOHbr1NfGHjnSZbfxh4ptowdqeJdQVfYC5kwB7V+kn\/Brr8K7n4Z\/8Eh\/B+t38Jjm8ZeJtZ10oy4Ow3bWiE59UtFYezCvgXx3p9nD8VvGmmyceT4x1WIAnnK3kq+ntXlTfvM9eOkEfjX4rsWtPGusWrKf3eq3CkHtiRhUBsxIu3b26Dt712\/7RPhCfwZ+0J4y8OTRFBD4huZEXbz5cjmVDj0KuprmYYN0eO3fmuyCvFHHOVmdV+zr+0V8Qf2a\/FkuteFrhptOvgE1jR5JGWK7QZweD8si5JVu2SDkEg\/pt+xL+3fZavDFqWnait3pVyQtzaSTtugfHKspJ2MM\/QgDBIINflBJYb1LFf0rS8B+NvGvwq8Qp4k8G6tJbzcCaIZMc65zsdf4h+o6gjrWVTDRcuZLUcKkb6n9GXhvXfB\/jvTRqujy211b3CbJoyd2B0KsP6V+cv8AwUq\/4Ig63Z\/2n+0h+xJ4XNza5a51\/wCH1ipaSE8s81gv8adzbjkc+XkERjzv9lH\/AIKZX0N3BJY35sr1SEuNNuJcx3G04JjJ++OuP4h+p\/S79m39ub4ffFDTYrV9Sjtb5lCzWc8gBJ\/2T3rmTnTehvJc0dD+eyYS3JiSWF1ubadcLIMPGQw3gqSORjpxjB+ldjp1xHPZRzjnzYwxIIxyOwx71+yf7ev\/AASI+CP7aIufip8Jbyz8I\/ECUGR9Tgh\/0LVnwOLuNB949POQb\/7wfAA\/I39oD9mr4+fsc+N1+HPx48A3ejzsSLK9Kl7TUEB\/1lvMvySqc8gfMucMFPFejh8TCbs9zgq0na6MeNyCxhOfmByCcnvjPp9K\/SL\/AIN7\/wBmzU\/iB8UfEXxomsyEgRfDWgzOhJFzc7ZLyZG7+VaIUYf3bwfj+b3gzTNT8b+IbDwtoGnzXmoaneR21jaW67nnmdwqRqB1Yk4\/Kv6ZP+CRH7HGl\/sv\/s\/6JoPkRvNpVm8U10gGLzUpsPfXIP8AEu7ECN1MUSg9K2xdVQo8q3ZODouVbmey\/M+vLKytdNsodOsohHDbxLHCg\/hRRgD8hWp4Ysvt+uW8JXKq+9\/oOaoV1Xw800pFNqsi\/f8A3cf06n+n5V5B7B01FFFABRRRQAUUUUAI6LIhjdQQwwQe4rz3X9KfR9TktCDszuiJ7qen+H4V6HWV4s0L+2bDfCv7+HJj\/wBr1WgDz+\/sLPVLGbTNRtlmt7iJop4nGQ6MMEH6g18Wf8FEf2C7T9s=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2393{"flow_id":129,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcRplAAPIG8g00VD84rBAq2ABQyxx\/FFsNKRUJm4AQAHbOlgAAAQEICmz6deQA9nTfa\/Zw1H9jzVZreHxv4c8\/WfgX4lvyAsj7T5mlyueAsijZzwCEbGEUH7YIKkqwwR1BrA+I3w\/074iaB\/ZlxcyWl3byifTNStziWznXlZFI569RnkehwRUZOEk0TKMZxcXsfx+a18MvGHgrxld6F8QNDvdI1zSb+4stT0XUrNoJ7SeN5InRwx3A9eCAeep72Ejt5lMsplG3qBExLZI5BAx7\/jX7ff8ABZH\/AIJU6p+2\/Y6j8bfhH4di0348aBp+fFvh2yRUTx1YRJhby14w14qKAUGDKq4GGULX4n6tZXulTyafqGnyw3VtMyTW88RV4pF4KsCQQQeMH39K9qhUjWhdb9Tw69OdGfK9uhjXOn2LsFhZScbTIOrjtg45+n+Rz3iKzYxGRWynYgEZ5P8An2rcnlubm5aGzVjkYHPOOp6\/5+lZd1BJtkgJdc9Qp44zz9eaqUbihLU\/Zb\/g3j\/4Ks+MPF3wii\/YP8eeJgmq+CbNn8HPNIE+26TuJMAz1eAtxjkxMvH7tjXkX7TnxE0r4XfFP4o+J\/FF95Vrp\/jTWZpSvJI+2ykKvqSSAB3JFfml8KPiJ8QvgN8UNE+Mvww1p7fX\/Dd+l5psnl\/LIV+9EwHLJIu5GXurkcivT\/22f2sR+1X46vfFHg3Tru00jWr3+2L2zdDuF1MPMaI\/3ljdnUN0Y89hXlzw7VXTZno0q65L3PIfij8RNf8AjT8StT+JfiZVF1qlwG2KeI4lUJGnHXaiquepxms2GAkcpgeoPX1q3aafmJXihQ5fAIPHHJye34\/3u9WEsZImKyFRhct5gK\/044+vTNdkIKMTllNykZ42eXnyyxzyu7t69On1x1p9wtlFC0zEK\/8AAVj3EH147fzOB3xUk+r6dB5n2CUSCI7Z5EPyqw7bu5z2XI4PI60LYWfiWzntJ7eOWcIWicxAtvC4IHf1\/EZ7ZpvVaAnZq5S\/4R5LW3RLONkEX3OzDB47D616D8Lv2k\/iD8NrqGLUbiXULSNhh\/MKzxgejfxfQ8+4rBt9HiiRIIHeRPLDxM4JLIQCOenRl+mQOgApkuiBxzHyCQTjpQ6EakRKvOEtD9Ef2Tf+CsGoaIttZ3+s\/wBsWakebYXUgjuoh3wT97Ge+QemRX3V4O+OP7JP7c\/w\/l+FvxB03RfEVnfAG68NeILZPNRgD86KeQy5OJIjlc8MK\/n6OhSwzLcWxZHUgq6kgr6YI96+6\/8Agkd+xT+0V+1d8RbHXNb+2jwVZ3O1blyVuNSnQg+TC\/BEa8+ZKc7QCoOeV46mH9j73Q66daNV2W59w\/so\/wDBD74A\/Cj9tGz+Jvwd8Q6tdWFtavNY6JqpFwmgzMQrXCzn5pAsZZY1cFldlbeSAR+tHh\/QtL8MaJa+HtFthDaWcCxQRjsoHf1J6k9ySa5r4KfB\/Rvg94TTR7PbNfTqraje45lcDhRnnYuSAPqeprsa5pzlN3Z1whGCsiS0tZr25jtLdcvIwVRXo2n2UWnWUVlCPljQDPr6msDwHoZijOtXKfM4KwAjoO5\/pXS1JYUUUUAFFFFABRRRQAUUUUAcv408MHLazp8fHW4QD\/x4f1rl69QIBGCK5PxV4PaBm1LSYsxnmSFR933Ht7dqAPOviH8N9H+IVhCLmeay1Gyk83S9WtG2z2co5DKR1GQMr3x2OCPzd\/4Kk\/8ABIfwf+1pqV149sY9K8D\/ABgmBI8QFPJ0HxqR\/wA\/RUYs7w\/89gArn\/WBchx+odVNb0LRvEmmS6Nr+mQ3lrMMSwTxhlPv7H0I5FXTqTpy5osipThVjyyWh\/Ix8ePgJ8YP2afiPefDf41fDfVPC3iPTHxdWGowspZG+7IhB2yxsBuV1LKw5U964SaAu4mcD5jlmK4496\/qX\/ao\/wCCenw0\/aD8CHwD428D6d418PQBzp+j69IY77SS3U6ffriS3P8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2386{"flow_id":129,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_id":129,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":346,"pkt":"ePiC0\/vCAMDKkVoBCABFAAFMRptAAPIG9ps0VD84rBAq2ABQyxx\/FGZdKRUJm4AYAHZ3tQAAAQEICmz6deQA9nTfaAI7a1t7OBba1hVEUfKqipKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAGXPNtIP9g\/yrzKvTbni2kP+wf5V51YaVqOpvssbR5PVgOB9T0oAr1Ja2l1eyiC0gaRz\/CgzXS6X8PQMS6vc5\/6ZRH+Z\/wrobLT7LTovJsrZI17hR1+p70Ac7o3gA8T6zL7+RGf5n\/D866S2tbezhFvawrGi9FUYFSUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAjgMpVhkEcg0JGkSCOJAqjoqjAFFFAC0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAH\/\/2Q==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":130,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0G5lAAPIGIrY0VD84rBAq2ABQyx1XQZuSlNdIjoAQAHYtTAAAAQEICmz6gAsA9nTj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":130,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcG5pAAPIGHQ00VD84rBAq2ABQyx1XQZuSlNdIjoAQAHYy8QAAAQEICmz6gAsA9nTjSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGltYWdlL2pwZWcNCkNvbnRlbnQtTGVuZ3RoOiAxNDczMw0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KU2VydmVyOiBTZXJ2ZXINCkRhdGU6IFR1ZSwgMjggRmViIDIwMTcgMDk6MzM6MjQgR01UDQpYLUFtei1JUi1JZDogNDU3ZTU3YWQtZTFkYi00ZTg2LWEyNjYtZDhiNjFkZGRhYjM2DQpFeHBpcmVzOiBNb24sIDEwIE5vdiAyMDM2IDA1OjIzOjA0IEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT02MzA3MjAwMDAscHVibGljDQpMYXN0LU1vZGlmaWVkOiBUdWUsIDI4IEp1biAyMDE2IDE2OjUzOjQwIEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBZ2U6IDI3ODY0MDINClgtQ2FjaGU6IEhpdCBmcm9tIGNsb3VkZnJvbnQNClZpYTogMS4xIGFhNGQxNDliMDI3NDRkMzAzNGI1MjZkODA5OWJlN2MwLmNsb3VkZnJvbnQubmV0IChDbG91ZEZyb250KQ0KWC1BbXotQ2YtSWQ6IDdXSFlYRWNBRUFnbGdUVklZbDRpTUpUMlBQNVFwTWlOR25NXzRhRkFmTldGZ2JzZHlkUmtMdz09DQoNCv\/Y\/+AAEEpGSUYAAQEAAAEAAQAA\/9sAQwACAQEBAQECAQEBAgICAgIEAwICAgIFBAQDBAYFBgYGBQYGBgcJCAYHCQcGBggLCAkKCgoKCgYICwwLCgwJCgoK\/9sAQwECAgICAgIFAwMFCgcGBwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK\/8AAEQgA0gDSAwEiAAIRAQMRAf\/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC\/\/EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29\/j5+v\/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC\/\/EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29\/j5+v\/aAAwDAQACEQMRAD8A\/fyiiigAooooAKKKKACimyyxQRmWaQKqjLMxwBXN614+VCbfRUDHoZ3HH4D\/ABoA6K6vLWyj867uEjX1dsViah8QNNtyUsYHnI\/iPyr\/AI\/pXJ3d9d38pnvLh5GPdjnFRUAbV3471y4JEDRwj0RMn8zmqE+u6zc\/67U5znt5hA\/SqlFADnmmkOXmZvqxNIJHU5VyPoaTBPQUYI6igCxDqup2\/wDqdQmX6Smrtr4z8QWxGbwSAdpUB\/XrWVRQB1Vj8RImITUbEr6vEc\/of8a3NP1rTNUXNleI5xymcMPwPNec0qO8bB43KsDwQcEUAen0VxujeOr+zIh1IG4j\/v5+cfj3\/Gur0\/U7LVIBcWM4de47r7EdqAJ6KKKACig=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2384{"flow_id":130,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":130,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":130,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcG51AAPIGHQo0VD84rBAq2ABQyx1XQayKlNdIjoAQAHZRWAAAAQEICmz6gAsA9nTjfa94l\/a8uIb\/APaO8ceGbLwnBMk1r8K\/DmqvNa3bqQySarczpE98AQGFsIooAR84nIVl77xB8Wvhr4StS2oeK7L5FwtvayiVz6AKmcfoK1y7IcdCunUpyUltGzv8z0MBkmNjWTnTlzdFZ3+Zr+JNf0\/wtoN34h1SUJBaQtI5J646KPcnAHuar\/sveK\/AHwg+HC+JPix440jQ9U8b6lLqdtBqd+kLzQmRIkKhiCQXkXB9ZkHVhWB4M+G\/jb9qHWbbVfFGlXOieBrWUSpbzEpPqjDp9F9+g7Enker+Pfhl8OTpUJ+MHwy8P+LtC0q1aK0vNY0O2uZtOgJQlGWRCGjzHGSUAPyLlTt3D0c6qQw+CeX05J1ptOaTvZK9oX2cru7V+iW9zvzacKGDeApyTqyacknsltG+zlfVrySWpvfCz46fCD42215c\/Cj4h6Zro06Xy79LC5DPbNvkQeYn3k3NFJtJADBcjIwa6i6vLSyj868uo4UHV5XCj8zXl2i6v8HvDFkmr\/s9+BfD0GoeJbaNpbrRtJhtzJGjSMnnGNVLbGkmIVj8pdzxk5sw+ATqkv8AaPjTVrjUbluWUykRp7Adcfl9K\/D854uq4XMKmX5dh\/bVqbtNylyU6cv5ZStJua6xjFtfaaZ4dHKpKHPiZci6K15O3lpZebaO7h8X+E7iXyLfxPp7v\/cS9Qn8s1oKyuodGBB6EHrXj3xU1P4HfB\/wdL4z+JNxb6Xp0cqQRyDzXmuJ5Dtjghij3STzOxCpFGrO7EBVJ4ryHwn+3t8L9E8dT+BtCtfHWlanYa1Y6brfh3xJ4OvAumyXwhNibmaJHhtftJuIliErpIWYqyhlYDgpcVcS4ROtjsCp0V8UqEpSlFdW4SjFyS3fK27fZZcsvwNR8tKraXRSSSfzTdvmreZ9W+MfCmmeNvDtz4c1UMI51BjmjOHgkU5SVD2ZWAYH1FeZaBe6i63Oia+qpqml3BttQVBhXYAFZVH9yRSrj03Y6g16b4S8Vab4w0dNW01iMnbLCx+aJ+6n\/PNcb8YtIGha\/pvxDtlxFMyaZrGOhR2PkSn\/AHZW2fSY+lfeYPGYXMMLDE4aanTmk4tbNM8ipTqUajhNWa3RUrtfA2qm+0s2crZktztGe69v8K4qtTwhqBsNciy2Em\/dv+PT9cV0kHeUUUUAFFFFABRRTZZFiiaVuiqSfwoA4LxVefbdeuJAchX2L9BxWa7pGhkkYKqjLMTwB60+SRpZGlbqzEmsT4gGeTwjd6faOVmv9ljC46q88iwg\/gZM0Adt8CdMaHwHH4luYyLnxBcPqUxYchJMCFT\/ALsKxL9Qa8y\/a78R6h408ZaD+z5pNy8VteJ\/aPiCSM4JgUnYn4lSfqUr3y0tLewtIrG0iEcUMaxxIo4VQMAD8K+Vvi74i1Lw1+0X8RPF1l4ZvNcvtF8ILPpui2GPtF8UgSQW8W7je7AKO2Wr6fhSnD6\/UxD3pQlNf4rqKfycr+qPFz2UvqsKS2qSUX6atr52t8zL\/augtvC37NesalpNssFv4afT9WjWMYEMdhfW92W\/4CIC34VjfEOFvhr8Zr\/XZruKGw8KfHZ4rxmODFpPifSLdlb\/AHH1xowTwMqx\/hrnPid+0PqPiX9mHXdb+KvgbSrTwt4y8MalpukeLfCviRtU0sXklvLF\/Z9401tbT2N0ZN0IWWEJ5o8ousrLG31j4A+FPwu+KHwyh8W+PPBGla9N488D6PaeK01K1Fxa6rbxQvJEkkEu6NlDXMx+7khwCTtXHHmWKhPE08RTle35p31OjCUZRoypSVj4w8bPoHxc8I+I\/iX460Ual4Y8RaNe+PdRsHwPO8I+H4JU0O3bGDm91SeXU4TwdiFDytep+IPhn4itvgb4a1LVLo3Hi3wnoFmbm+lPmPcywwoJw5bO\/cys3OcnPqa7D9s=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2401{"flow_id":130,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2395{"flow_id":130,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcG59AAPIGHQg0VD84rBAq2ABQyx1XQbfalNdIjoAQAHZZggAAAQEICmz6gAsA9nTjEsOP7ef8\/sVzigD1yvnT9prT3+G3x20L4uSx7dK1qz\/svVZ8cRSg5RmPbI2\/hG1fRdYnxD8AeG\/if4QvPBfiq0820vI8ErgPEw5V0PZgeQf6Zr18jzGGW49VKivCScZJb8stHbzWjXmjz8zwksZhXCDtJNOPqv0ez9T5U+INn4P+DfjDUvHXi7w9Y3\/wx+INlJpPxf0bU7MXGnIXhEdtrFxCQR5aqv2a6bGDDJFJIQtrkdF4Q0b\/AIKdeIfDHhs6P43+DWl2FteytLd6Xb3U8F1p23y7f7PGg2GMJ+9U7xnMYIXY2+nqa\/Ej9m2X\/hGPibo9xrHhtDs0\/wAR2URfZH0CSjtgcYPPpuGK6T\/gnjdeDlg+KmifDcRweG7D4jRjRtNtY2itrIS6Jpc8yQxHCwo1xLNIVQBS8sjYyxJ9DPso+rwWNotSpSdlJbP\/ACfeLs0zkyvMFWk8PUXLOK1T3X+a7NaHn\/xp0f8AbE0fUvhxo37R\/jfwZren3\/xVhbTW8O2M0NzHIkGp3SI25VQxpbx7M\/eOxSeQzP2fxj8ZR+DPAt3cxMTeXiG10+JeWeVxgYHfAJP4e9R\/tyeM5tA+O3wjMWkXer29mdduTp+np5jR35tYYLZ2A+4THPdoCR\/GwANbfwi\/Z28WePfEcfxW+Pds1qYVzoXh2GZlNpnkSuVOVccEc5yATjAFd2QLDYHA\/XcY7U1K6X2ptW91Lt3eyXW5zZpOrisT9Ww2s7Wb6RT6t\/kt2db4Wgtf2Yv2TJtT8Rzm2bw94cudR1GRQu5JdrzMPm+XIY7RnjgZ4rnf2L9O8Qaz8MvCXi7x01hdeIdT0GPXvEOr2ekQWsmo3VygihnnMEcazTGFJMybEBDDCgYFO\/a7+AGq\/Hb4bWXw18YeJ4otHtdettQl1iexlmDxwliILqKGaHK7yjeZ8yfu\/njA+avU\/hxbWLafd6zpkcaWt3dlLBYQNi20IEMQTHAQiMuMcYevnMROtWrVcXUd3Nt3Wzcnr+DenTQ+iwEaVDDckNOSKik\/u\/K+ux0VFFFeaUeI\/tufB68+LXwr1zwnotvC2o63oU8GkvPIUVNRgR5rb51+ZA6m4hZgQSspGea2P2RPiD4e+M\/7M+h6hZzXDyJYvputQXmtNqE0V3ETHMGuGdmlDH94jk\/NHJGwwGFd9470y71Pwxcf2auby1K3ViMdZomEiL9CV2n2Y15x+z\/8H\/CPw58Na5ovwd1W+fSfFXiG51y\/v7xIUjtHuFQfZrSOGONFVI0RBwcFSztJIXJ5qnJaVOaupdO99Gv8\/U3xFW1CFVfEvd87rVfhp6RMv4P\/AAM8QS\/G7WviN8Q\/G2mXv9iaHdeG\/DOiadp7Ry6bZ3U0M9zNNM8jeZJM1vBt2JGqpEAd5yRkWf8AwSo\/YdsotCiT4RyP\/YVwJ1aXW7pvt0gheIm4BkxJu3h2wFy0aA\/KNtewaN8L9N8FaXFH4Fb7NdwF2eWdiwu9zbmEp6tz0PVcCvIvjRr\/AO1N4y8W3XgS61e1+HHgptiSa94cL32vakhUGRYZZESDThnK7wtzIV5Uwvhl+Uw2ZYHg7KYYXME6VKklGM7SlFx2ScktJLZ81k\/ijpot4UsXmc\/apJ1Jayins+tr2uvNL5HMXXhz4d\/DSHW\/2J\/+CfPhO38O39\/NGfiF4u0uZ3g8IxtbQwbzLIXM2qNbRRiGDJ8v5Z5sKVE3t3gDwF4R+FvgjSvh14D0SHTdG0WxjtNNsoR8sUSLgDJ5Y9yxyWJJJJJNcv8ADZvgr8HPBVp4C+GWi\/YNNtNzR2ltC7SSyOxaSWSSQlpppHLO8rszyOzMzMxJO9DD42+IP+h6bp0mlaa\/E15cjEjr6KPf2\/Ovmcw41wGbVvZZc\/rE\/swpe985SXuxXdyaSR6lHK6uGjzVvcXVy0+5bv0RN4ai\/wCEz+I=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2378{"flow_id":130,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2384{"flow_id":130,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2378{"flow_id":130,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2386{"flow_id":130,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":65,"flow_packet_id":10,"flow_first_seen":1490976071237,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":2354,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1366,"flow_avg_l4_data_len":235,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49606,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":75,"flow_packet_id":10,"flow_first_seen":1490976076275,"flow_last_seen":1490976077663,"flow_tot_l4_data_len":2354,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1366,"flow_avg_l4_data_len":235,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49613,"dst_port":80,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":66,"flow_packet_id":28,"flow_first_seen":1490976071286,"flow_last_seen":1490976075975,"flow_tot_l4_data_len":9214,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":329,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45693,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":67,"flow_packet_id":20,"flow_first_seen":1490976071306,"flow_last_seen":1490976075950,"flow_tot_l4_data_len":5532,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45694,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":69,"flow_packet_id":23,"flow_first_seen":1490976071349,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":5242,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":227,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45695,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":70,"flow_packet_id":23,"flow_first_seen":1490976071380,"flow_last_seen":1490976075949,"flow_tot_l4_data_len":7319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":318,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45696,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":71,"flow_packet_id":14,"flow_first_seen":1490976071385,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":983,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45697,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":73,"flow_packet_id":15,"flow_first_seen":1490976071583,"flow_last_seen":1490976075957,"flow_tot_l4_data_len":902,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45698,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":131,"flow_packet_id":1,"flow_first_seen":1490976142629,"flow_last_seen":1490976142629,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Si5AAEAGxLmsECrYNu8d\/Z+uAbuBOjwrAAAAAKAC\/\/9GYAAAAgQFtAQCCAoA9nYFAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":131,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw0iJAAOcGldA27x39rBAq2AG7n66gUyr3gTo8LHASH\/4OHAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":131,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSi9AAEAGxMysECrYNu8d\/Z+uAbuBOjwsoFMq+FAQAVdYjQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_id":131,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":297,"pkt":"AMDKkaPvePiC0\/vCCABFAAEbSjBAAEAGw9isECrYNu8d\/Z+uAbuBOjwsoFMq+FAYAVc4xwAAFgMBAO4BAADqAwNiqd1S7MhG5wB\/dT8PiLwUoMSITVffXbD1xI\/bdNzIUCBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAgamrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACB2toAAP8BAAEAAAAAHAAaAAAXc2tpbGxzLXN0b3JlLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAiqqgAdABcAGFpaAAEA","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":131,"flow_packet_id":4,"flow_first_seen":1490976142629,"flow_last_seen":1490976142698,"flow_tot_l4_data_len":351,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0508{"flow_id":131,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB91YZAAOcGkh827x39rBAq2AG7n66gUyr4gTo9H1AYf\/i1wAAAFgMBAEoCAABGAwFY3n2Obh+Ev43oa4t9qN6MX4wxb9ryi9I8T8yVK9XgOCBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":131,"flow_packet_id":5,"flow_first_seen":1490976142629,"flow_last_seen":1490976142816,"flow_tot_l4_data_len":456,"flow_min_l4_data_len":20,"flow_max_l4_data_len":263,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"skills-store.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0465{"flow_id":131,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABd1YhAAOcGkj027x39rBAq2AG7n66gUytNgTo9H1AYf\/jqaAAAFgMBADAoR\/0TYnF80ADW+lgTaaOlzX3uxl5lxwxGronRv9lj8fc8AZpVx2yvoPs4v43USu0=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":131,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":192,"pkt":"ePiC0\/vCAMDKkVoBCABFAACy1YZAAOcGkeo27x39rBAq2AG7n66gUyr4gTo9H1AYf\/i3nQAAFgMBAEoCAABGAwFY3n2Obh+Ev43oa4t9qN6MX4wxb9ryi9I8T8yVK9XgOCBtDRI0q2icP6fVqlksmygn0U781lDdxNdezB5jmLBlqwAvABQDAQABARYDAQAwKEf9E2JxfNAA1vpYE2mjpc197sZeZccMRq6J0b\/ZY\/H3PAGaVcdsr6D7OL+N1Ert","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":131,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSjFAAEAGxMqsECrYNu8d\/Z+uAbuBOj0foFMrTVAQAVdXRQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":131,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSjJAAEAGxMmsECrYNu8d\/Z+uAbuBOj0foFMrglAQAVdXEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":131,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoSjNAAEAGxMisECrYNu8d\/Z+uAbuBOj0foFMrglAQAVdXEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":131,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjSjRAAEAGxIysECrYNu8d\/Z+uAbuBOj0foFMrglAYAVfvDAAAFAMBAAEBFgMBADCSpRSX0nWnelO4\/IR5saDycpiAge1BSi3FeA\/6wYKR0p5m4SxVDg04fn6ItpdwWSs=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":131,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_id":131,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":364,"pkt":"AMDKkaPvePiC0\/vCCABFAAFeSjZAAEAGw4+sECrYNu8d\/Z+uAbuBOkMOoFMrglAYAVf\/egAAkxoF3knfO6ULUgEZYQoRhi\/Vn\/n+FiZLYhlOKuYCFKC5etiXjsp35pE+VKNnASJ9NwUzvz3iUMgm8phh2xBpyvCcCNcenN\/vPA42+RzUSykPt7k92uagy1KOBrDw7xb8E79CNugQyC6wM8xE1uG3U2OHMVKhJNefAsYLiQ4YlzQyuriNj1IJmEd9YnOWQ2NJc+vkBh6rEEQ5mkFNBDv\/An1jCWueOJzAx0JT1eXEDQmClOF4Iv6qW3txgSyNCsv2kXyCxzu+3km86eC5j\/j0BGUjozi03DbUELN9oCY2bcYJIwQem\/OlBhfahw4hDU+C33NXk3gUbpFQS6N+GCb8NVQi7I+k5RgsycxnwFGZAiHeQfGQD8xPoPkNw00P8sY7Qi2HA2Cw3MzDllmv0Ed54+mmHa2bng==","pkt_caplen":364,"pkt_type":2048,"pkt_ipoffset":14}
+0606{"flow_id":131,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976142,"pkt_len":208,"pkt":"AMDKkaPvePiC0\/vCCABFAADCSjdAAEAGxCqsECrYNu8d\/Z+uAbuBOkREoFMrglAYAVfOpwAAFwMBACAWxvN46g6VgVkZs0Q094LfgT\/pq9o\/SEAEMU9QrE06nRcDAQBwKXftPLjaa9RHJvDxrfOeAnk+zpErXzihm2xYqtTKGH4v5h7Cmhb8rfYcc1NFC8fQGwT\/0HfP9\/hEMUIL0I10Zoykkcbz0G273bRWcQjZsLzatb25\/hBybT1hGkCbuDmZ4b7hpuHawnx8vrzS4wZC7A==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":131,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976143,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAovV1AAOcGqp027x39rBAq2AG7n66gUyuCgTo9WlAQf\/fYNAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":82,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976149,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8m\/tAAEAGPh6sECrYCsl+8Z0yH5CNbMQpAAAAAKAC\/\/9fhQAAAgQFtAQCCAoA9niIAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":132,"flow_packet_id":1,"flow_first_seen":1490976150029,"flow_last_seen":1490976150029,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA86ydAAEAGW8esECrYNF7ohrK2AbvOUJPOAAAAAKAC\/\/\/DwQAAAgQFtAQCCAoA9njpAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":132,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwoZ9AAOcG\/lo0XuiGrBAq2AG7sra0EJrCzlCTz3ASH\/4K2QAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":132,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo6yhAAEAGW9qsECrYNF7ohrK2AbvOUJPPtBCaw1AQAVdVSgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_id":132,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX6ylAAEAGWuqsECrYNF7ohrK2AbvOUJPPtBCaw1AYAVchEAAAFgMBAOoBAADmAwOKdjFFpOOXsbbSqMMeJaFC\/d12VQO5ox2KdTo39VCnrCB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9OjoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACHp6AB0AFwAYSkoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":132,"flow_packet_id":4,"flow_first_seen":1490976150029,"flow_last_seen":1490976150127,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":132,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAokKxAAOcGD1Y0XuiGrBAq2AG7sra0EJrDzlCUvlAQf\/jVuQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":132,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9kK5AAOcGDv80XuiGrBAq2AG7sra0EJrDzlCUvlAYf\/ioFQAAFgMBAEoCAABGAwFY3n2WsKEO5j\/+XQ3InBz8BmJWU6tqL8GGvPxEhHBE0SB4kgfiZLrEZoIvfOT\/tQMGZLL4w9FhfVsGJHEZL4q82wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":132,"flow_packet_id":6,"flow_first_seen":1490976150029,"flow_last_seen":1490976150196,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":132,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdkLBAAOcGDx00XuiGrBAq2AG7sra0EJsYzlCUvlAYf\/g0tAAAFgMBADASYFDIqpzI2dQ4RB9g2j6Kixqtu5sqtDIGdUVHpCxbAK9w8U0NNpbUWqlnRm3UmlM=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":132,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo6ypAAEAGW9isECrYNF7ohrK2AbvOUJS+tBCbGFAQAVdUBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":132,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo6ytAAEAGW9esECrYNF7ohrK2AbvOUJS+tBCbTVAQAVdT0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":132,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj6yxAAEAGW5usECrYNF7ohrK2AbvOUJS+tBCbTVAYAVdiRgAAFAMBAAEBFgMBADCwuv8XBYK0+AHTDf78NuYcAQ5Wd60Wpm3oTJFtOxaTinjcMJIvU0VlbtkQLiDDMss=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1334{"flow_id":132,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":752,"pkt":"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","pkt_caplen":752,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":80,"flow_packet_id":23,"flow_first_seen":1490976085829,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":4832,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45704,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":81,"flow_packet_id":19,"flow_first_seen":1490976085832,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":3003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45705,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":83,"flow_packet_id":6,"flow_first_seen":1490976085884,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45707,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":83,"flow_packet_id":6,"flow_first_seen":1490976085884,"flow_last_seen":1490976088478,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45707,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":77,"flow_packet_id":20,"flow_first_seen":1490976082723,"flow_last_seen":1490976084872,"flow_tot_l4_data_len":5448,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":272,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34053,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":78,"flow_packet_id":7,"flow_first_seen":1490976082964,"flow_last_seen":1490976084873,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34054,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":78,"flow_packet_id":7,"flow_first_seen":1490976082964,"flow_last_seen":1490976084873,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34054,"dst_port":443,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":84,"flow_packet_id":2,"flow_first_seen":1490976085891,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38434,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":84,"flow_packet_id":2,"flow_first_seen":1490976085891,"flow_last_seen":1490976085978,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"192.168.11.1","src_port":38434,"dst_port":8080,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":76,"flow_packet_id":27,"flow_first_seen":1490976080485,"flow_last_seen":1490976081484,"flow_tot_l4_data_len":8508,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"34.199.52.240","src_port":38404,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":132,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976150,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolzNAAOcGCM80XuiGrBAq2AG7sra0EJtNzlCU+VAQf\/fU9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1334{"flow_id":132,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976156,"pkt_len":752,"pkt":"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","pkt_caplen":752,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":132,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976157,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolx9AAOcGCOM0XuiGrBAq2AG7sra0EJtNzlCXs1AQf+zSRgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1164{"flow_id":132,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976157,"pkt_len":619,"pkt":"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","pkt_caplen":619,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":133,"flow_packet_id":1,"flow_first_seen":1490976158680,"flow_last_seen":1490976158680,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976158,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8\/ohAAEAGSGasECrYNF7ohrK3Abt2joLDAAAAAKAC\/\/8pLAAAAgQFtAQCCAoA9nxLAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":133,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976158,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwc8dAAOcGLDM0XuiGrBAq2AG7sreYM6oZdo6CxHASH\/6AKwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":133,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976158,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo\/olAAEAGSHmsECrYNF7ohrK3Abt2joLEmDOqGlAQAVfKnAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0715{"flow_id":133,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976158,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEX\/opAAEAGR4msECrYNF7ohrK3Abt2joLEmDOqGlAYAVepYwAAFgMBAOoBAADmAwPtGRNrH\/FF66PH1PCooAX1Dd1\/3OeWvWeSDYxuFGcUDiCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9GhoAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAYamoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":133,"flow_packet_id":4,"flow_first_seen":1490976158680,"flow_last_seen":1490976158842,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0508{"flow_id":133,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9ZJ1AAOcGOxA0XuiGrBAq2AG7sreYM6oado6Ds1AYf\/jWEQAAFgMBAEoCAABGAwFY3n2ejsBVJxuO9LpSs5v2aSzauuFSRGgpga0DGSdUzyCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":133,"flow_packet_id":5,"flow_first_seen":1490976158680,"flow_last_seen":1490976159147,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":133,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdZKJAAOcGOys0XuiGrBAq2AG7sreYM6pvdo6Ds1AYf\/glEQAAFgMBADBQGcC5qybAnI9iGstyBUWJgNk+lZDudarUeJSYsOnfkMQBIsPOKnH1wiFJDU8PRtQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":133,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo\/otAAEAGSHesECrYNF7ohrK3Abt2joOzmDOqb1AQAVfJWAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":133,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo\/oxAAEAGSHasECrYNF7ohrK3Abt2joOzmDOqpFAQAVfJIwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":133,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABj\/o1AAEAGSDqsECrYNF7ohrK3Abt2joOzmDOqpFAYAVeKqQAAFAMBAAEBFgMBADDT\/fj5mt1K7DDH\/OsfTdSBbVYkr7hyQzmxO0nFMrIDZLjQMPZPtKLys+qOIzRRSgc=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":133,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_id":133,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+\/o9AAEAGR52sECrYNF7ohrK3Abt2jomimDOqpFAYAVcrJgAA7xVaUmqbmDSVPO2fg+Oy2Q57Zf4bVpkxkOj1ehHX1cKjQKMfCj6d09RaxiIEJPzK6aRCTwT5SBqGzrqsvayLlyiiPu3+\/g6pw9w6xTbcxZY\/PKVDIdst1za5FWwqiQlh91v4k2CPgpsUmT0JNKf+wuTn13EExWd1Hd9GQf\/s8SbFb8LuyMUChyPra6n63yLoj1lhxAybutp3aXvPrUHeZjbdjjScqON+rHZ07NFbUyaiTQ2yWqfgvJAiKXXwEBR2N9BVc4CPdMPYycstzwDLm8uuBsZxfg==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0690{"flow_id":133,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976159,"pkt_len":272,"pkt":"AMDKkaPvePiC0\/vCCABFAAEC\/pBAAEAGR5isECrYNF7ohrK3Abt2jop4mDOqpFAYAVdlTAAAFwMBACCUcGkaUnrzncHd6sSkNaOPHGc1Dl27HI2zTxnWcEqvXhcDAQCwYP9NrHnqNc09tv16Kwg\/IvxUNE7987ViO4uzfV010UupSzEvd0dVubN9HvQjbY0itvA+GZFyQ9LerY7Aqwt4\/bTENdClAZ6ZcZ6uxMU8Y2DQKY6sJwXOCxobJob+9TooqGSxu+6UtU3BbxdVrvBYWecX\/S0fp9qFPrhb7PdwwUjPoIixfKE6ReUqwtSaYfb54t\/\/IfUwvheZJIKlipwZ82ybN8kjtdoXkSFLSKbc5II=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":133,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976160,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYPdAAOcGPws0XuiGrBAq2AG7sreYM6qkdo6D7lAQf\/dKSAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":133,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976160,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYRlAAOcGPuk0XuiGrBAq2AG7sreYM6qkdo6JolAQf+BEqwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":133,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976160,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYRpAAOcGPug0XuiGrBAq2AG7sreYM6qkdo6KeFAQf91D2AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":89,"flow_packet_id":9,"flow_first_seen":1490976089173,"flow_last_seen":1490976090510,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49627,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Amazon","category":"Web"},"http": {}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":89,"flow_packet_id":9,"flow_first_seen":1490976089173,"flow_last_seen":1490976090510,"flow_tot_l4_data_len":236,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49627,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":92,"flow_packet_id":10,"flow_first_seen":1490976089426,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":1407,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1016,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":49630,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":79,"flow_packet_id":56,"flow_first_seen":1490976085644,"flow_last_seen":1490976098828,"flow_tot_l4_data_len":22501,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":401,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45703,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":85,"flow_packet_id":20,"flow_first_seen":1490976088605,"flow_last_seen":1490976094930,"flow_tot_l4_data_len":2366,"flow_min_l4_data_len":20,"flow_max_l4_data_len":718,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45709,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":86,"flow_packet_id":49,"flow_first_seen":1490976088631,"flow_last_seen":1490976098828,"flow_tot_l4_data_len":19892,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":405,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45710,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":88,"flow_packet_id":42,"flow_first_seen":1490976088958,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":13667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45712,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":95,"flow_packet_id":27,"flow_first_seen":1490976090991,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":5829,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41820,"dst_port":443,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":96,"flow_packet_id":7,"flow_first_seen":1490976091048,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41821,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":96,"flow_packet_id":7,"flow_first_seen":1490976091048,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41821,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":93,"flow_packet_id":30,"flow_first_seen":1490976090572,"flow_last_seen":1490976094931,"flow_tot_l4_data_len":13094,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":436,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34069,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":134,"flow_packet_id":1,"flow_first_seen":1490976164994,"flow_last_seen":1490976164994,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp"}
+0421{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976164,"pkt_len":76,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WmBAAEARM1WsECrYrBAqAfpJADUAKhd4KNkBAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":134,"flow_packet_id":1,"flow_first_seen":1490976164994,"flow_last_seen":1490976164994,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_id":134,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl5+FAAEARpaysECoBrBAq2AA1+kkAUQAZKNmBgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAAsACwhwaXRhbmd1acASwC4AAQABAAAABgAENF7ohg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":134,"flow_packet_id":2,"flow_first_seen":1490976164994,"flow_last_seen":1490976165058,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.94.232.134"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":135,"flow_packet_id":1,"flow_first_seen":1490976165062,"flow_last_seen":1490976165062,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp"}
+0421{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZaZAAEAG4UisECrYNF7ohptGAbs\/AhtsAAAAAKAC\/\/\/dAQAAAgQFtAQCCAoA9n7KAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":135,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwviBAAOcG4dk0XuiGrBAq2AG7m0ayU5bRPwIbbXASH\/4vqAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":135,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZadAAEAG4VusECrYNF7ohptGAbs\/AhttslOW0lAQAVd6GQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":135,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":228,"pkt":"AMDKkaPvePiC0\/vCCABFAADWZahAAEAG4KysECrYNF7ohptGAbs\/AhttslOW0lAYAVcqOgAAFgMBAKkBAAClAwFXCTeQDMK\/FDjYD8QCr4+nmvueUE6Ddrnzytp5\/6hChCCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":135,"flow_packet_id":4,"flow_first_seen":1490976165062,"flow_last_seen":1490976165125,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0509{"flow_id":135,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9wjpAAOcG3XI0XuiGrBAq2AG7m0ayU5bSPwIcG1AYf\/p8IQAAFgMBAEoCAABGAwFY3n2lKrNMt6\/OX8FdZoR8ql5RDmr00v4XE5Mx8EPChiCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":135,"flow_packet_id":5,"flow_first_seen":1490976165062,"flow_last_seen":1490976165190,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0467{"flow_id":135,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdwjxAAOcG3ZA0XuiGrBAq2AG7m0ayU5cnPwIcG1AYf\/oiSQAAFgMBADBdZ5j7PVlY8cSi8l8jfX\/OXPuu6Vgg3tkA1Tr\/q1QeYxZ4o\/GYivNNHdWTTKHOIPc=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":135,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZalAAEAG4VmsECrYNF7ohptGAbs\/AhwbslOXJ1AQAVd5FgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":135,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZapAAEAG4VisECrYNF7ohptGAbs\/AhwbslOXXFAQAVd44QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":135,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjZatAAEAG4RysECrYNF7ohptGAbs\/AhwbslOXXFAYAVdc2QAAFAMBAAEBFgMBADBSQIIfTbQwzak1XiVUUaFcUtabPa9IYqnmntQWj7webx5lx1apW1ykY8UmsIbVB+Y=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2142{"flow_id":135,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":1344,"pkt":"AMDKkaPvePiC0\/vCCABFAAUyZaxAAEAG3EysECrYNF7ohptGAbs\/AhxWslOXXFAYAVca1wAAFwMBACCIA6SDRTDWwZkoTbAd9AiMvWUBwj5EmEBwkM1hEfSBXxcDAQTg7HALRJ765HAVBwdxoFt7F6OCVSznew3Nhq3Fpo3Kmhj3supbGgWO5nKg7Y20IAfYu0fFWVycDHEbWqU5dg\/fM33OdodiIHQ5JbhxkQPUEZlnN7PR8qwyrPGxSFjADZ1pYqFnHXkDOTElpuWIiuylDGZaNXyMwqjZqfA0hGR4YBcwRdnieHFhzG7hyHqFjP8OZo7mN6yRBrOwe87gn2UxMU5SM6S4h0fUlPohUDBNjUDmfj9RY4b3r4XcoPHt82+mKXE\/vFK44jL2+LzUbhcdimAjjwC4HvN615clyuK9FArLXJZcKvzHlYIA6jW8w7MMigNrjBtNBK1Jg5UXYnzrwqnpqk4AOYUGoydtdmR6re\/gREABDfgOVRriS+aZXrGTo0dAz54Y+7tFa8foiDuYDTZmUtMJRvDYdJTrvugkGt0AGrfG1vk0lOF\/GcOr5WB8kWchRAxxigUsw+6tBOAknOuqpvqM\/NTAAw2lbdiiJSPMsJfw\/qqYQ\/waCO\/Ru\/A1ycSQ+rDHUZL\/iXzV2IlqTRijWlxbA0Zo22vA2gLezJOrZ3pM\/PO9mzBWl28c3r2qA+pvowCtJES4H7IFhrAEqwGSdKf\/Y8wXMEchWkRw0t0jTJPPuVgMBCC\/96pEgv3Rv3A6jAtUOXq502lcv5bZFGHuw3qV5NmktJss0ym6ofvMfADxSpkAY6Kc2Qrzrb2zSXzY97\/CBqDJURRz7eEzxRrUSOW2mYELLcT15YcXdhHD3pb17v+cFGtzDPizau2IKhQKBPB6eXbeQqQsXGoL8LLSmK5WaqsBiJuuaq7iO9VP2\/bbl6nHRzpZnb4cIokKz45ngaPU3doKQoAugCNYb7xVxYBM1sWldq28WzraMDZvUdsyLWlC7PlqEpX9ZcCebs1CYkhm5jFlD1r1lmcYBOeIQKWel8dJB7qNwhSDkT3uQaWCxN1Q9mJU+At\/Sf009iXx5+vFUdaVZ+\/E\/CkbwafGXUC\/xSzU+a5f5NbZl5IJ3Lc86Xb100Ml31NXLwJReDTHV1xS4VAjFvFbiIMaoPFaOjZcNOtcrIWHtyQvPsUkyyJhfRnMcshnZGZ7v2EjcKpzgdtvMVoOCLKr4Z9V8lFP6H1o5rWQAPd1B3UTMVsohzMnbKtFmVE3sJMvTttn8NfJk4VM8QO4laYpbK1zJLYfiknCqzVzKFn2jrvd30HYsaBVeiO9LW2nNVUcoVFmzmfpZ1wimKrfdBXcJpP7pcQA2\/y9rXkMHVRS5Fl0B7l1vhpztUZFvrAZLOv+D5aBby7QJXG8wvsQR+l7x3K4QtOw3IYOXwsuapLDTgFdal7\/Xu4AP4BpX1GhSzUC+mOhcScnngXerHGiXKCGHosLFSVg1RR\/55ebSg5Fon1ezHsF7ahCxoWoaguEylgv8lmHulw1Uxff1hjuGbzjyfFud9Go+4uy47LBvWi5LeSr+PEh6YJGpSQBg2XIeltmoPo\/\/pDOC4vQtWXoCZSha+63PNmJ3shz4L+m2mC4FGLLXx+UdhuEQSm5pz8ZGYGqvk7df4e96hxz0xUk\/QGHooVUKJOE7qe2tbofTmZhqzzXA7+KFouW\/nzJgWZ\/QGvwwR6snyF9Kln2wtkjs4nS1WPcIF3uz6BycMPznpYo9AXLN3wOQYDPLdeSkhio4cBteYpv","pkt_caplen":1344,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":135,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoxpRAAOcG2W00XuiGrBAq2AG7m0ayU5dcPwIcVlAQf\/n6AwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2142{"flow_id":135,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":1344,"pkt":"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","pkt_caplen":1344,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":135,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976165,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAow7pAAOcG3Ec0XuiGrBAq2AG7m0ayU5dcPwIhYFAQf+X1DQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":135,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976166,"pkt_len":251,"pkt":"ePiC0\/vCAMDKkVoBCABFAADtyNxAAOcG1mA0XuiGrBAq2AG7m0ayU5dcPwIhYFAY\/beG8QAAFwMBAMDJv35d\/4mG6xcuQdUXTW8L7k5gVEHMWQZwoBlF6usDy812CjYM7U1PdElAKcWIQgOJFIG8iiG33nf3XoZIiIpAVLYDf9Y89hEgE7bXAie3tIqR4W3xskqkH6ig88TldRDlkGl4crebAn89VA2QTRzdyixv3ETKn6o3DAiSD8T6h\/cZkgREUy85uUk5MsASg2LHRufKSVLZ6r2buWxlO1mki2TE1nygHir39sNCBGYD78Jm\/CohIvznj0x6GV7GuRE=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":135,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976166,"pkt_len":251,"pkt":"ePiC0\/vCAMDKkVoBCABFAADtyNxAAOcG1mA0XuiGrBAq2AG7m0ayU5dcPwIhYFAY\/beG8QAAFwMBAMDJv35d\/4mG6xcuQdUXTW8L7k5gVEHMWQZwoBlF6usDy812CjYM7U1PdElAKcWIQgOJFIG8iiG33nf3XoZIiIpAVLYDf9Y89hEgE7bXAie3tIqR4W3xskqkH6ig88TldRDlkGl4crebAn89VA2QTRzdyixv3ETKn6o3DAiSD8T6h\/cZkgREUy85uUk5MsASg2LHRufKSVLZ6r2buWxlO1mki2TE1nygHir39sNCBGYD78Jm\/CohIvznj0x6GV7GuRE=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976168,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoG7VAAEAGvnisECrYCsl+8Z0IH5CvoFXQAAAAAFAUAVeLzQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976168,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoWzlAAEAGfvSsECrYCsl+8Z0KH5BhrRWqAAAAAFAUAVcZ5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":136,"flow_packet_id":1,"flow_first_seen":1490976169531,"flow_last_seen":1490976169531,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8anRAAEAG3HqsECrYNF7ohrK4AbvvmuryAAAAAKAC\/\/9DtAAAAgQFtAQCCAoA9oCGAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":136,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwhFlAAOcGG6E0XuiGrBAq2AG7srhwEXla75rq83ASH\/73zwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":136,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoanVAAEAG3I2sECrYNF7ohrK4AbvvmurzcBF5W1AQAVdCQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":136,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":293,"pkt":"AMDKkaPvePiC0\/vCCABFAAEXanZAAEAG252sECrYNF7ohrK4AbvvmurzcBF5W1AYAVfzhwAAFgMBAOoBAADmAwNQGProSMl78hAUDaTmTX5yUTx4scZiFRjHHV08S9IO6yCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB9+voAAP8BAAEAAAAAGAAWAAATcGl0YW5ndWkuYW1hem9uLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACBoaAB0AFwAY6uoAAQA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":136,"flow_packet_id":4,"flow_first_seen":1490976169531,"flow_last_seen":1490976169731,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0508{"flow_id":136,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9eExAAOcGJ2E0XuiGrBAq2AG7srhwEXlb75rr4lAYf\/iM1wAAFgMBAEoCAABGAwFY3n2pJltIvltxhfK2SiAqZURuo+oby5xQQ9okKpdqHCCCMRQMGMoVs0icgvrIiO2DryH4GtgAAWm5say3aH682wAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":136,"flow_packet_id":5,"flow_first_seen":1490976169531,"flow_last_seen":1490976169888,"flow_tot_l4_data_len":452,"flow_min_l4_data_len":20,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","alpn":"h2,http\/1.1"}}
+0464{"flow_id":136,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdeE5AAOcGJ380XuiGrBAq2AG7srhwEXmw75rr4lAYf\/h6LgAAFgMBADBQVkNT4uaaSSAglKmvPunGJayO3SHtKYOmCtH54SGOEkJf3Z9dbCNljTNT8klD2+o=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":136,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoandAAEAG3IusECrYNF7ohrK4AbvvmuvicBF5sFAQAVdA\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":136,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoanhAAEAG3IqsECrYNF7ohrK4AbvvmuvicBF55VAQAVdAyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":136,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjanlAAEAG3E6sECrYNF7ohrK4AbvvmuvicBF55VAYAVcGrAAAFAMBAAEBFgMBADD9DVK6Ic8S6q\/dSJgqxcQvPM+gtGP4KlULP0poOsVfe2B8SUb9rEpyvAW\/Xh3dfxM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":136,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":136,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976169,"pkt_len":236,"pkt":"AMDKkaPvePiC0\/vCCABFAADeantAAEAG29GsECrYNF7ohrK4AbvvmvHRcBF55VAYAVfxCQAA5Z1tr4N1RVm\/XqfSAKgmF4L3tsnKJYgGIQQq88ZSNvdAQizkCyG49cWo5qaAuqTcjSKyoDlYE6ASDAr7LQ7hAi3UstndyLMsPNUjh5fBsfyLkSdmej3QTR0Mi4w+H2zE3BFt\/rh1Uuy\/RlmsD4lcWbCPyBfGW8zdNaS01It2bA5qTTo\/zAH3BQ6N1cNtY4XaEq30aUhqDGzRH0LWz1RwNpAlPRmE5YtwB1wtpYtsdJ\/jT2n+i3c=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":136,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976170,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoeSNAAOcGJt80XuiGrBAq2AG7srhwEXnl75rsHVAQf\/fB7AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":136,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976170,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoei9AAOcGJdM0XuiGrBAq2AG7srhwEXnl75ryh1AQf927nAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1485{"flow_id":136,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976170,"pkt_len":859,"pkt":"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","pkt_caplen":859,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":136,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976170,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoanxAAEAG3IasECrYNF7ohrK4AbvvmvKHcBF9ClAQAV02+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":103,"flow_packet_id":23,"flow_first_seen":1490976107365,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":7372,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":320,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40853,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":104,"flow_packet_id":37,"flow_first_seen":1490976107365,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":13845,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":374,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40854,"dst_port":443,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":105,"flow_packet_id":7,"flow_first_seen":1490976107366,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40855,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":105,"flow_packet_id":7,"flow_first_seen":1490976107366,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40855,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":106,"flow_packet_id":98,"flow_first_seen":1490976107455,"flow_last_seen":1490976110047,"flow_tot_l4_data_len":33419,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":341,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40856,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":87,"flow_packet_id":33,"flow_first_seen":1490976088937,"flow_last_seen":1490976110046,"flow_tot_l4_data_len":12974,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":393,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45711,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":90,"flow_packet_id":27,"flow_first_seen":1490976089227,"flow_last_seen":1490976107676,"flow_tot_l4_data_len":8584,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":317,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45714,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":91,"flow_packet_id":29,"flow_first_seen":1490976089239,"flow_last_seen":1490976111839,"flow_tot_l4_data_len":11074,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":381,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45715,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":101,"flow_packet_id":29,"flow_first_seen":1490976100859,"flow_last_seen":1490976107676,"flow_tot_l4_data_len":5930,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":204,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.231.72.88","src_port":41825,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":99,"flow_packet_id":8,"flow_first_seen":1490976100559,"flow_last_seen":1490976107681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34073,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":99,"flow_packet_id":8,"flow_first_seen":1490976100559,"flow_last_seen":1490976107681,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34073,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":100,"flow_packet_id":22,"flow_first_seen":1490976100811,"flow_last_seen":1490976107676,"flow_tot_l4_data_len":7891,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.186","src_port":34074,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":137,"flow_packet_id":1,"flow_first_seen":1490976177026,"flow_last_seen":1490976177026,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp"}
+0425{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":79,"pkt":"AMDKkaPvePiC0\/vCCABFAABBWmFAAEARM1GsECrYrBAqARDYADUALXE1hGEBAAABAAAAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":137,"flow_packet_id":1,"flow_first_seen":1490976177026,"flow_last_seen":1490976177026,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0445{"flow_id":137,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":95,"pkt":"ePiC0\/vCAMDKkaPvCABFAABR5+JAAEARpb+sECoBrBAq2AA1ENgAPRuAhGGBgAABAAEAAAAACHBpdGFuZ3VpBmFtYXpvbgNjb20AAAEAAcAMAAEAAQAAACEABDbvHLI=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":137,"flow_packet_id":2,"flow_first_seen":1490976177026,"flow_last_seen":1490976177105,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"pitangui.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.28.178"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":138,"flow_packet_id":1,"flow_first_seen":1490976177116,"flow_last_seen":1490976177116,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8k45AAEAGfKSsECrYNu8cssZsAbvv1RDwAAAAAKAC\/\/\/QEwAAAgQFtAQCCAoA9oN+AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":139,"flow_packet_id":1,"flow_first_seen":1490976177116,"flow_last_seen":1490976177116,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8pCxAAEAGbAasECrYNu8cssZtAbubwSdTAAAAAKAC\/\/8NwwAAAgQFtAQCCAoA9oN\/AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":140,"flow_packet_id":1,"flow_first_seen":1490976177116,"flow_last_seen":1490976177116,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50798,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8lftAAEAGejesECrYNu8cssZuAbts9RaEAAAAAKAC\/\/9NXQAAAgQFtAQCCAoA9oN\/AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":138,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwImlAAOcGRtU27xyyrBAq2AG7xmzGEdgp79UQ8XASH\/7SVwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":139,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwWDhAAOcGEQY27xyyrBAq2AG7xm3jvKzYm8EnVHASH\/4drgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":138,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok49AAEAGfLesECrYNu8cssZsAbvv1RDxxhHYKlAQAVccyQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":139,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopC1AAEAGbBmsECrYNu8cssZtAbubwSdU47ys2VAQAVdoHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_id":138,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":261,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3k5BAAEAGe+esECrYNu8cssZsAbvv1RDxxhHYKlAYAVegdQAAFgMBAMoBAADGAwNlXadIw7yx7VLHe4UdO3wZiu\/EcwTKyJ+o5joejNiDegAAIGpqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfaqqAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAhaWgAdABcAGEpKAAEA","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":138,"flow_packet_id":4,"flow_first_seen":1490976177116,"flow_last_seen":1490976177233,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0668{"flow_id":139,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":261,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3pC5AAEAGa0msECrYNu8cssZtAbubwSdU47ys2VAYAVdEqAAAFgMBAMoBAADGAwPJsGFZNlhJRMty6KrMnV1YFeE+Nh3uPX+8iS4ufNPtYgAAIMrKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfWpqAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAi6ugAdABcAGFpaAAEA","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":139,"flow_packet_id":4,"flow_first_seen":1490976177116,"flow_last_seen":1490976177235,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":141,"flow_packet_id":1,"flow_first_seen":1490976177276,"flow_last_seen":1490976177276,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8ZidAAEAGqgusECrYNu8cssZvAbuB1uWoAAAAAKAC\/\/9pRgAAAgQFtAQCCAoA9oOPAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":141,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwnrRAAOcGyok27xyyrBAq2AG7xm8x5Gl6gdblqXASH\/5ueAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":138,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":138,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":138,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1458{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":138,"flow_packet_id":7,"flow_first_seen":1490976177116,"flow_last_seen":1490976177411,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+2356{"flow_id":139,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":139,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":139,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1458{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":139,"flow_packet_id":7,"flow_first_seen":1490976177116,"flow_last_seen":1490976177412,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+0389{"flow_id":141,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZihAAEAGqh6sECrYNu8cssZvAbuB1uWpMeRpe1AQAVe46QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":138,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok5FAAEAGfLWsECrYNu8cssZsAbvv1RHAxhHd3lAQAWIWOwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":138,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok5JAAEAGfLSsECrYNu8cssZsAbvv1RHAxhHjklAQAW0QfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":138,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAok5NAAEAGfLOsECrYNu8cssZsAbvv1RHAxhHk61AQAXkPFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":139,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopC9AAEAGbBesECrYNu8cssZtAbubwSgj47yyjVAQAWJhkQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_id":141,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":261,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3ZilAAEAGqU6sECrYNu8cssZvAbuB1uWpMeRpe1AYAVfk5AAAFgMBAMoBAADGAwMsuk8budl5l63szylFKYvttXtVR+FVs3ji\/ibU4XOTkgAAICoqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfUpKAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAi6ugAdABcAGBoaAAEA","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":141,"flow_packet_id":4,"flow_first_seen":1490976177276,"flow_last_seen":1490976177419,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0389{"flow_id":139,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopDBAAEAGbBasECrYNu8cssZtAbubwSgj47y4QVAQAW1b0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":139,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAopDFAAEAGbBWsECrYNu8cssZtAbubwSgj47y5mlAQAXlabQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_id":138,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":139,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":141,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":141,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":141,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1458{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":141,"flow_packet_id":7,"flow_first_seen":1490976177276,"flow_last_seen":1490976177553,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+0399{"flow_id":138,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGvxAAOcGTko27xyyrBAq2AG7xmzGEeTr79UTBlAQf\/SPVQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":139,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoWO1AAOcGEFk27xyyrBAq2AG7xm3jvLmam8EpaVAQf\/TaqwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":138,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjGxpAAOcGTfE27xyyrBAq2AG7xmzGEeTr79UTBlAYf\/RPRgAAFAMBAAEBFgMBADDysS8s17Av6q29JKVleCyRBxjY2knH\/ButdO+dAcV9hFGlhuDsUlPHeA3HbJgvBIE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":139,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjWdRAAOcGDzc27xyyrBAq2AG7xm3jvLmam8EpaVAYf\/SXtwAAFAMBAAEBFgMBADB\/aKRnHVktOG33KnjPXWS3VERO0MFSrgghrmWY0NPKg9c1MhDVmZuGh91kAOts6D8=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":141,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZipAAEAGqhysECrYNu8cssZvAbuB1uZ4MeRvL1AQAWKyWwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":141,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZitAAEAGqhusECrYNu8cssZvAbuB1uZ4MeR041AQAW2snAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":141,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoZixAAEAGqhqsECrYNu8cssZvAbuB1uZ4MeR2PFAQAXmrNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_id":141,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+2373{"flow_id":138,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"AMDKkaPvePiC0\/vCCABFAAXck5VAAEAGdv2sECrYNu8cssZsAbvv1RMGxhHlJlAQAXkBdgAAFwMBACAPOlilCgtsRTrj\/zVYXDs5vENmOyczVGlQvjoRnB5a8hcDAQYwotvvIKKuj9clpdFgpfwtunP\/j\/gs8sq5Pue1mrz8JbWu\/GD58JLm2dBy+qQhn3n+xFlZZUZUScYNXU9zfbd7GQvcUjxXOL7RbymRT74jyiA\/nY6udhZhUIPHQ\/MZ7Eb89bDZH12RFV3CtSTLllu7egnD8hU0mfSHl63PLRUS5WcRrtR8W9wJRkyDdyPLO7vsnoedsiqGz0BjxeRV3ivdoCYRqnyQLWZAOQrw+gBOa7qwyti75Hz9bjdZmR+QoC5HjHo34XbGTEhFlswVmx4NzpsioIV0Vct0nUvvpzOKCRWvoAP6pgxxCp7rflO4pVXS8Q7pOLz3NYCzitCPe6wrGe2Q50JnD8BjCQhjJrE\/e7CinDQkMt+fdWhzzZ0Rd1r8yE9Y\/zxMPrLGc2yMWVjI8wZHjGMYQnwdYvVlZP2X8ixir2CzWZ+UOs9r95t0z7Qp\/X1h3\/uIwx73Rfa2N\/6g4xedSr6rm3Uxni\/icSm0PfYvej7Uo8C0JgiVWnpfMC+XeAvrDwaShEapHetyyiZOJYL7pBLkzLjcHbfymfbXjUY9ivaVsJJNMOYb\/CB7U8NQBIUpkKNKV5+OzhsjawkTMvxpP9vgVDyUBpfzhFGP5zjq41s\/AIpfJuz0KG3CX7\/8K498lXUPGhg8j0bu0DwvpISrOQjUvdsIAN6WBH9DjLS0SJgKVQwaEvwsy7KPN1tdv5b\/euhkVaPbyZgc3Qzb6MW0th8Jinnf4ksRal7bahNV557E5typL8D7BNJGrVbAlqOjt9Ng6hGGNbiNWk6B+zuk3M99XOfj88TECsB7mjRuw7V1zRaVM5Kdp9OyQBBsu12iaSlhJGVTwNd7fo7JN+RiPjrXMm\/ig+TP4bpDrjvAz02CzK5LSeEMPBhYh\/69V4kZiui07CQUa9JopgF2+1Qp0BoXD8ATEFsPwHi90JDep4PRHb8CnhLRwTgyPUs0KMk0dXX0D5W0Oom290lppvfUwvDafuCRR2O4Jt\/RrW0fIbjSx13v5NzgRG1AIA7XQ9u8rG7vuMYkMwkAKHxTsr\/LOW20vQllJfG4mAz6Y95ud6KB1vtSclAe820Rg1M2JY8yfyv7VyBkXIelQnnO1NZAucfvVOy5MjZcV5JT+we7Gqf7wWBRqRiTNsS\/S9QMFcQ29s98uZDpkUexRUTUa80UyYOJZ3nkfV3SV2ZnIpT0HPFTdbzv+Qfq7z2OXkGTzHGLjzXSmI0LfhLrYK0bu1feedZ1aPsY6hm\/g2o0uHH7HsHflesF5TFK8aAIrGhaJ5eyPzxHqIVkzihdqv8dL8Vwvwbcgz8+PnumTa48q4w8sLiZLxhDKREX3Z+syv43IsmCAVPmhp9spLuagL7YhS+OmfwvLTDTnu51r+48NV9zs1LfdNGJsM7ikYtlvCntsSoDoF7oqnDN\/vGMnGK7Mh2XZaXmG+Mtr3hdRFyesgZRKuKPSqp+bLsLwhjTE3ezdiRc7ml8lUq2P0Txvn3oJv\/UikTdJzhFDUPtBqwkWAYRyxDFlp9Bjcm2qFeJB5bO2H+LrRom15HOPtmOr0J3zuTi2Pnu2aUqEbQXrxTMQRYGMVXRdjQryUD8QPYK+Lt7dEIM5L\/baW\/m\/eYtJk7wmXtfLE5GZgvCE\/japY23mTATkKD2PKIJEms7IaA1aKq8yRl2IWUBhuO2AVS9u4w9SEtf1xJg2KqLOCjG3RtkCDc\/lKGsTuDeroZMLJVSvdsHt52vyeL8dfQ1dcek4HVo0KXF+CCMGycHdgSoByMTw6uIsQKjl2Lv4nnaZ9J6WPtuNHx0ffwdhRytKLUetOqCQ+SHUZ\/7laZSWO1sZEnkNTqTs3C+xXEH8PrWBo79OtfTDzbgPg6PnnQtnCz6tukTGmvvGP+\/+7QlwT8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_id":138,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":220,"pkt":"AMDKkaPvePiC0\/vCCABFAADOk5ZAAEAGfAqsECrYNu8cssZsAbvv1Ri6xhHlJlAYAXkefgAA+Rzf6zr\/NKfwgzUDGEhZDiqYq5KNh5Ls8RIpRZdu5T\/RdzlWcXrJ0AKOqK1div5r+vMsMBTQ6dg6kajV0oM13HGv7rmSckytddlgvKOEHiZGRLhEVbgaecIBbhGu2AsiaGlTxDHPcJmrH1H5Onf4R5azNI0HJW42LDn023IQZLeoYgiA7j0YiUzxpZxnMiGYxQ4rbVYH\/uDkklWFyIi5SCqvu+EKSQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":139,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_id":139,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":252,"pkt":"AMDKkaPvePiC0\/vCCABFAADupDRAAEAGa0ysECrYNu8cssZtAbubwS8d47y51VAYAXn+vwAAou4Nuyvkq70ewnCkeGOe5ZFIPUspR1lJJL8kVunB4W7ILt3TJrNstVaZyFvHJfxiD61KIeBrhYI0zzYMJHrlpYYEYiB3wD0CydktEHkFtj+\/nOttCsrdpEY9UQokHfx4hskQfcg\/YVPAG2Pk1bRwg2+\/HoiiPnSHlm6Wb5q8JrOfu20KWsEwv23tkMlMQ1eiWwKSwDXxWOjTR1gwU+a21rR4qUnsGcAs3SNzXts5pevcCwQHsXcVhJAo2VCpGczB6Ss+2in4","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":141,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAolCVAAOcG1SA27xyyrBAq2AG7xm8x5HY8gdbnvlAQf\/QrdgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":141,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjlTFAAOcG09k27xyyrBAq2AG7xm8x5HY8gdbnvlAYf\/S+vgAAFAMBAAEBFgMBADB9gvYuBpcbUnBnuBvPzdkhPYLU8E2S00JokREMGv3BSLBGsmwk\/LW1V8\/IwFabyEU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":141,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0596{"flow_id":141,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976177,"pkt_len":204,"pkt":"AMDKkaPvePiC0\/vCCABFAAC+Zi9AAEAGqYGsECrYNu8cssZvAbuB1u1yMeR2d1AYAXk1CgAAZy8oy9CSnqJQ3MRlhyQpptDmDezU2q9t7YG6Behrt6rcxKtryiTqa6YU3rEkKsEivWFfbVhxjOddbXhWOv1sQdiH\/xz4GEs\/rF6wYQdWMMNq21MkVS+iaX5O\/xY3eH0PiKuZ6MR5dCtTBkXPbRETLi3Bq2pzOMTx2Usahq\/Y+rkfadNdhvqRlRRiPIEDP0AnvJNdt2MT","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":140,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976178,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8lfxAAEAGejasECrYNu8cssZuAbts9RaEAAAAAKAC\/\/9M+QAAAgQFtAQCCAoA9oPjAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":140,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976178,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAww9ZAAOcGpWc27xyyrBAq2AG7xm5KXM+cbPUWhXASH\/7T5AAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":140,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976178,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolf1AAEAGekmsECrYNu8cssZuAbts9RaFSlzPnVAQAVceVgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976180,"pkt_len":46,"pkt":"AQBeAAABAMDKkaPvCABGwAAgAABAAAECBBcAAAAA4AAAAZQEAAARZO6bAAAAAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":108,"flow_packet_id":20,"flow_first_seen":1490976114885,"flow_last_seen":1490976117017,"flow_tot_l4_data_len":4467,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":223,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45728,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":109,"flow_packet_id":19,"flow_first_seen":1490976114894,"flow_last_seen":1490976116921,"flow_tot_l4_data_len":3131,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45729,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":110,"flow_packet_id":20,"flow_first_seen":1490976114906,"flow_last_seen":1490976117017,"flow_tot_l4_data_len":5043,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":252,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45730,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":111,"flow_packet_id":19,"flow_first_seen":1490976114921,"flow_last_seen":1490976117016,"flow_tot_l4_data_len":3019,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45731,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":112,"flow_packet_id":21,"flow_first_seen":1490976114940,"flow_last_seen":1490976120960,"flow_tot_l4_data_len":5979,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45732,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":114,"flow_packet_id":31,"flow_first_seen":1490976115905,"flow_last_seen":1490976120950,"flow_tot_l4_data_len":11436,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":368,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37551,"dst_port":443,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":115,"flow_packet_id":7,"flow_first_seen":1490976116084,"flow_last_seen":1490976117005,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37552,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":115,"flow_packet_id":7,"flow_first_seen":1490976116084,"flow_last_seen":1490976117005,"flow_tot_l4_data_len":168,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.24.180","src_port":37552,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":142,"flow_packet_id":1,"flow_first_seen":1490976186164,"flow_last_seen":1490976186164,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8hhtAAEAGihesECrYNu8cssZwAbtODwEcAAAAAKAC\/\/9+IQAAAgQFtAQCCAoA9ocHAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":142,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwCmJAAOcGXtw27xyyrBAq2AG7xnDcplSHTg8BHXASH\/7w+wAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":142,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohhxAAEAGiiqsECrYNu8cssZwAbtODwEd3KZUiFAQAVc7bQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_id":142,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":261,"pkt":"AMDKkaPvePiC0\/vCCABFAAD3hh1AAEAGiVqsECrYNu8cssZwAbtODwEd3KZUiFAYAVcX6AAAFgMBAMoBAADGAwNIp1N542sFVSo0EG+FRg60u0Yye1+MLqKN0bYZ2TEvIQAAIEpKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAfVpaAAD\/AQABAAAAABgAFgAAE3BpdGFuZ3VpLmFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAiqqgAdABcAGHp6AAEA","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":142,"flow_packet_id":4,"flow_first_seen":1490976186164,"flow_last_seen":1490976186398,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":20,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pitangui.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2353{"flow_id":142,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":142,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0861{"flow_id":142,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1458{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":142,"flow_packet_id":7,"flow_first_seen":1490976186164,"flow_last_seen":1490976186551,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"pitangui.amazon.com","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","alpn":"h2,http\/1.1","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+0389{"flow_id":142,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohh5AAEAGiiisECrYNu8cssZwAbtODwHs3KZaPFAQAWI03wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":142,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohh9AAEAGiiesECrYNu8cssZwAbtODwHs3KZf8FAQAW0vIAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":142,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAohiBAAEAGiiasECrYNu8cssZwAbtODwHs3KZhSVAQAXktuwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_id":142,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":142,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoDgNAAOcGW0M27xyyrBAq2AG7xnDcpmFJTg8DMlAQf\/St+QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":142,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABjDgpAAOcGWwE27xyyrBAq2AG7xnDcpmFJTg8DMlAYf\/RKogAAFAMBAAEBFgMBADA4p7End5KUwuKxH9Ha9msxq4AuncpgUjhFvfkTnyh9R3UJ82TPzFkRvwxRuPwx3fo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1388{"flow_id":142,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":784,"pkt":"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","pkt_caplen":784,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":142,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoAqdAAOcGZp827xyyrBAq2AG7xnDcpmGETg8GDFAQf+mq7wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":143,"flow_packet_id":1,"flow_first_seen":1490976186818,"flow_last_seen":1490976186818,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp"}
+0449{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":99,"pkt":"AMDKkaPvePiC0\/vCCABFAABVWmJAAEARMzysECrYrBAqASHdADUAQT24ItEBAAABAAAAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQAB","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":143,"flow_packet_id":1,"flow_first_seen":1490976186818,"flow_last_seen":1490976186818,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_id":143,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl6vpAAEARopOsECoBrBAq2AA1Id0AUTsIItGBgAABAAEAAAAAD21vYmlsZWFuYWx5dGljcwl1cy1lYXN0LTEJYW1hem9uYXdzA2NvbQAAAQABwAwAAQABAAAAIgAENu8XXg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":143,"flow_packet_id":2,"flow_first_seen":1490976186818,"flow_last_seen":1490976186879,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"mobileanalytics.us-east-1.amazonaws.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.23.94"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":144,"flow_packet_id":1,"flow_first_seen":1490976186884,"flow_last_seen":1490976186884,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp"}
+0422{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976186,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8flZAAEAGlzCsECrYNu8XXq9wAbvy\/\/kGAAAAAKAC\/\/\/9UAAAAgQFtAQCCAoA9odQAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":144,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwqiJAAOcGxG827xderBAq2AG7r3A+ML0a8v\/5B3ASH\/6mVwAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":144,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofldAAEAGl0OsECrYNu8XXq9wAbvy\/\/kHPjC9G1AQAVfwyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":144,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":281,"pkt":"AMDKkaPvePiC0\/vCCABFAAELflhAAEAGll+sECrYNu8XXq9wAbvy\/\/kHPjC9G1AYAVc9QAAAFgMBAN4BAADaAwOYirXhV1FDzrGLqmFF+8oxLuoLV0r4D7tvlmDsmzXE4AAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAkbq6AAD\/AQABAAAAACwAKgAAJ21vYmlsZWFuYWx5dGljcy51cy1lYXN0LTEuYW1hem9uYXdzLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAY6uoAAQA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":144,"flow_packet_id":4,"flow_first_seen":1490976186884,"flow_last_seen":1490976187057,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":144,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYjtAANsGGF827xderBAq2AG7r3A+ML0b8v\/5B1AQARzxAwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":144,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoYjxAANsGGF427xderBAq2AG7r3A+ML0b8v\/56lAQASzwEAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":144,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0810{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":144,"flow_packet_id":7,"flow_first_seen":1490976186884,"flow_last_seen":1490976187167,"flow_tot_l4_data_len":1855,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2359{"flow_id":144,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":144,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofllAAEAGl0GsECrYNu8XXq9wAbvy\/\/nqPjDCz1AQAWLqJgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":144,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoflpAAEAGl0CsECrYNu8XXq9wAbvy\/\/nqPjDIg1AQAW3kZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":144,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcYj9AANsGEqc27xderBAq2AG7r3A+MMiD8v\/56lAQASydXwAA3k5SJC395XkTU+deLy1NG21AFVIr94eJeBKBbtlNqi141MIsPQhfh5GeHw6w3jBSZIaJqp1mnA52DIDydNgq+Lg6ztfWDxG+a6sU9b1BoCJjifG6D28pY2YtP6yMcsX7x+TUD\/I7T4wpxxYDAwZRFgAGTQEABkkwggZFCgEAoIIGPjCCBjoGCSsGAQUFBzABAQSCBiswggYnMIGeohYEFEUgAqiLimWfdfr16QoaeNLwNwueGA8yMDE3MDMzMTA0NDUyNlowczBxMEkwCQYFKw4DAhoFAAQU0bFki4yfDdFro4rNK1AX1fnPwGQEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvAhA4NltvtzQZFjv8ve7WrL1kgAAYDzIwMTcwMzMxMDQ0NTI2WqARGA8yMDE3MDQwNzA0NDUyNlowDQYJKoZIhvcNAQEFBQADggEBAJG4mKDAIkHJGohEcAXrjWcL\/X9efPGdSWnIujVQblXj9Sr0T36LlIP6QAecCnTuDUccLdRBVsLBrGLFuSZhZFAr0bCbBDXT6pzyL\/6othUDtcsJOWKfVOFjwAlPelx5E36DQxWy\/UrA8ffDBvCs\/rOG3McAu\/c86V66PK+nEJdWQ333YOD5+Gl2OWY7eiNxGk+60HEQY771HF27aILCKdV1jZAq4q93Td4HzHLhg8\/K21C8odN63ecG5gyRacL8wAMfhIjcpQTkPRcQ8A5YlZlYNVememWqBabsOL1RgB0iJn\/NE9tjFaweytAKzoVCni\/W8cvzyM1Xw0pZim0KetOgggRuMIIEajCCBGYwggNOoAMCAQICEERokGNpSAXWyvb9udHEBSEwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNzAyMDQwMDAwMDBaFw0xNzA1MDUyMzU5NTlaMEAxPjA8BgNVBAMTNVN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0IE9DU1AgUmVzcG9uZGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqitCn32+QLqqv0UypRjFp6XQuyZrZxojgGML2TdmIzCun529IQIDjBtay0e+gHzpbxmaV3syrW21bLBjTcwZ8CX3o43Q+I5WjVd4Nkm5dNv1tAtRLFVe7OCfA5sYO5ZVPGllHeqsWMl7wjYDK9M0+OAAZXCXu5WDcZ3mT3VW+fvDRuPEHnMaZhIC5sIh\/POmvUsWf+aBTwm77otPaqw\/WWQ2Xk1sd442vWvW6yqCL\/C89qKaCLli\/9xRNJLDBUiuc5eJ+IoZv9G3gijlABp0b1fC39k5zZSGgZuBwq6H8sP8BgcXJhXpEUTGDBt7VHvtvZeNGqKVsDTiOy9wYTzE6wIDAQABo4IBHDCCARgwDwYJKwYBBQUHMAEFBAIFADAiBgNVHREEGzAZpBcwFTETMBEGA1UEAxMKVEdWLUQtMzg1NzAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zAdBgNVHQ4EFgQURSACqIuKZZ91+vXpChp40vA3C54wDAYDVR0TAQH\/BAIwADBuBgNVHSAEZzBlMGMGC2CGSAGG+EUBBxcDMFQwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCoGCCsGAQUFBwICMB4aHCAgaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwEwYDVR0lBAwwCgYIKwYBBQUHAwkwDgYDVR0PAQH\/BAQDAgeAMA0GCSqGSIY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1164{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":144,"flow_packet_id":11,"flow_first_seen":1490976186884,"flow_last_seen":1490976187172,"flow_tot_l4_data_len":4855,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":441,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobileanalytics.us-east-1.amazonaws.com","server_names":"mobileanalytics.us-east-1.amazonaws.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=mobileanalytics.us-east-1.amazonaws.com","alpn":"h2,http\/1.1","fingerprint":"87:AD:E9:2D:E8:42:F0:5C:3A:09:13:00:12:93:59:04:84:C3:E2:2D"}}
+1219{"flow_id":144,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":669,"pkt":"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","pkt_caplen":669,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":144,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAofltAAEAGlz+sECrYNu8XXq9wAbvy\/\/nqPjDON1AQAXnepwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":144,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoflxAAEAGlz6sECrYNu8XXq9wAbvy\/\/nqPjDQnlAQAYTcNQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":144,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACmfl1AAEAGlr+sECrYNu8XXq9wAbvy\/\/nqPjDQnlAYAYQ72QAAFgMDAEYQAABCQQQzmkwPDnOmIAg3QlRslB1qe+YTVHttWD20laAy60x2Os0B7HSPAVjAA8XjfHKOyza9XZlmTLv3isuTj3jqkskpFAMDAAEBFgMDACgAAAAAAAAAADNZr2CfC7plw22hneymwUt5WU5f307bBv+8beucmggc","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":145,"flow_packet_id":1,"flow_first_seen":1490976187242,"flow_last_seen":1490976187242,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp"}
+0421{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":76,"pkt":"AMDKkaPvePiC0\/vCCABFAAA+WmNAAEARM1KsECrYrBAqAeoEADUAKipZJj0BAAABAAAAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":145,"flow_packet_id":1,"flow_first_seen":1490976187242,"flow_last_seen":1490976187242,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_id":145,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":115,"pkt":"ePiC0\/vCAMDKkaPvCABFAABl6w9AAEARon6sECoBrBAq2AA16gQAUSKUJj2BgAABAAIAAAAABWFsZXhhBmFtYXpvbgNjb20AAAEAAcAMAAUAAQAAADoACwhwaXRhbmd1acASwC4AAQABAAAAOgAENu8csg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":145,"flow_packet_id":2,"flow_first_seen":1490976187242,"flow_last_seen":1490976187508,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AmazonAlexa","category":"VirtualAssistant"},"dns": {"query":"alexa.amazon.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.239.28.178"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":146,"flow_packet_id":1,"flow_first_seen":1490976187511,"flow_last_seen":1490976187511,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8IbxAAEAG7nasECrYNu8cspdlAbtMyaYzAAAAAKAC\/\/8I0wAAAgQFtAQCCAoA9oePAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":146,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw3K9AAOcGjI427xyyrBAq2AG7l2UCDLyqTMmmNHASH\/7urAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":146,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIb1AAEAG7omsECrYNu8cspdlAbtMyaY0Agy8q1AQAVc5HgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":146,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":228,"pkt":"AMDKkaPvePiC0\/vCCABFAADWIb5AAEAG7dqsECrYNu8cspdlAbtMyaY0Agy8q1AYAVf+iAAAFgMBAKkBAAClAwG16AV0b+GAfYYNp1IOTvu8DJ0f7IEfHu7urYszcZFfGCCDPveyl8oknA6Yiw9M10d1fqyNuQQHuX5ZwIOnN4q82wAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":146,"flow_packet_id":4,"flow_first_seen":1490976187511,"flow_last_seen":1490976187577,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2352{"flow_id":146,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":146,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":146,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+1417{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":146,"flow_packet_id":7,"flow_first_seen":1490976187511,"flow_last_seen":1490976187704,"flow_tot_l4_data_len":3607,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":515,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"pitangui.amazon.com,guipitan.amazon.com,alexa.amazon.com,echo.amazon.com,alexa.amazon.ca,guipitan.amazon.ca,alexa.amazon.co.jp,guipitan.amazon.co.jp,alexa.amazon.com.mx,guipitan.amazon.com.mx,alexa.amazon.com.br,guipitan.amazon.com.br,alexa.amazon.com.au,guipitan.amazon.com.au,alexa.amazon.cn,guipitan.amazon.cn","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=pitangui.amazon.com","fingerprint":"13:E9:3B:22:22:61:41:53:CA:B6:3A:AE:C8:B7:23:FB:A5:11:2F:24"}}
+0389{"flow_id":146,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIb9AAEAG7oesECrYNu8cspdlAbtMyabiAgzCX1AQAWIysQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":146,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIcBAAEAG7oasECrYNu8cspdlAbtMyabiAgzIE1AQAW0s8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":146,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIcFAAEAG7oWsECrYNu8cspdlAbtMyabiAgzJbFAQAXkrjQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_id":146,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":146,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo3IZAAOcGjL827xyyrBAq2AG7l2UCDMlsTMmoKFAQf\/WrygAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":146,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":113,"pkt":"ePiC0\/vCAMDKkVoBCABFAABj3W1AAOcGi5027xyyrBAq2AG7l2UCDMlsTMmoKFAYf\/UdAQAAFAMBAAEBFgMBADCUODbUhHdS1090\/oGYD+5LuWOp86CtwHvwrAw5cxGRFyoZxtJ4zGaCLPfuUR\/SN54=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":146,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoIcNAAEAG7oOsECrYNu8cspdlAbtMyagoAgzJp1AQAXkqDAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2143{"flow_id":146,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976187,"pkt_len":1344,"pkt":"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","pkt_caplen":1344,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":140,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolf5AAEAGekisECrYNu8cssZuAbts9RaFSlzPnVARAVceVQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":147,"flow_packet_id":1,"flow_first_seen":1490976195484,"flow_last_seen":1490976195484,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8WmRAAEARM1OsECrYrBAqATpWADUAKI0W4msBAAABAAAAAAAAA3d3dwZhbWF6b24DY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":147,"flow_packet_id":1,"flow_first_seen":1490976195484,"flow_last_seen":1490976195484,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0593{"flow_id":147,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":203,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC96\/xAAEARoTmsECoBrBAq2AA1OlYAqVJ+4muBgAABAAYAAAAAA3d3dwZhbWF6b24DY29tAAABAAHADAAFAAEAAAW8AAoDd3d3A2NkbsAQwCwABQABAAAAWAAfDmQzYWc0aHVra2g2MnluCmNsb3VkZnJvbnQDbmV0AMBCAAEAAQAAABoABDRV0Y\/AQgABAAEAAAAaAAQ0VdF6wEIAAQABAAAAGgAENFXR2MBCAAEAAQAAABoABDRV0cU=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":147,"flow_packet_id":2,"flow_first_seen":1490976195484,"flow_last_seen":1490976195524,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"www.amazon.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.85.209.143"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":148,"flow_packet_id":1,"flow_first_seen":1490976195529,"flow_last_seen":1490976195529,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8suhAAEAGqwasECrYNFXRj6NkAbuAhDhYAAAAAKAC\/\/+BjwAAAgQFtAQCCAoA9oqwAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":149,"flow_packet_id":1,"flow_first_seen":1490976195545,"flow_last_seen":1490976195545,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":86,"pkt":"AMDKkaPvePiC0\/vCCABFAABIWmVAAEARM0asECrYrBAqAZ3pADUANBzi5IoBAAABAAAAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":149,"flow_packet_id":1,"flow_first_seen":1490976195545,"flow_last_seen":1490976195545,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0397{"flow_id":140,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAovadAAOcGq5427xyyrBAq2AG7xm5KXM+dbPUWhlARgACfqgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":140,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAolf9AAEAGekesECrYNu8cssZuAbts9RaGSlzPnlAQAVceVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":148,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqu40VdGPrBAq2AG7o2R8wwHRgIQ4WaAScSCn6AAAAgQFtAQCCApttHwsAPaKsAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":148,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0sulAAEAGqw2sECrYNFXRj6NkAbuAhDhZfMMB0oAQAVdGegAAAQEICgD2irVttHws","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_id":148,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+supAAEAGqkKsECrYNFXRj6NkAbuAhDhZfMMB0oAYAVf8KgAAAQEICgD2irVttHwsFgMBAMUBAADBAwPpTJSZ1poYdnnlgBS9wmRJ7foXKk14XitVw1d4X49ZiQAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAeJqaAAD\/AQABAAAAABMAEQAADnd3dy5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAISkoAHQAXABiKigABAA==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":148,"flow_packet_id":4,"flow_first_seen":1490976195529,"flow_last_seen":1490976195574,"flow_tot_l4_data_len":346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0405{"flow_id":148,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0feNAAPMGLRM0VdGPrBAq2AG7o2R8wwHSgIQ5I4AQAHZGjAAAAQEICm20fDEA9oq1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":148,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcfeRAAPMGJ2o0VdGPrBAq2AG7o2R8wwHSgIQ5I4AQAHYeuQAAAQEICm20fDEA9oq1FgMDAFQCAABQAwNduu+JesKyGafrWGMXSdsoWSCaruFvtY6z0Kx5uTwzOwDALwAAKAAAAAD\/AQABAAALAAQDAAECACMAAAAFAAAAEAALAAkIaHR0cC8xLjEWAwML6AsAC+QAC+EABp8wggabMIIFg6ADAgECAhAdSr2qeNCa\/nmdQbzrenZiMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYxMDMxMDAwMDAwWhcNMTcxMjMxMjM1OTU5WjBoMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEXMBUGA1UEAwwOd3d3LmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWihndZ\/4HxzWdNmP\/XjAI8iPKFw5XnK0RlANu1+1aLE7FOkbZKWTYYjWnO0RKmikGZtj+Fozlg1YNgMevTUBC\/MCrCw3LPmxfivK2QgRYj3YOiYpu\/FAqvLSbRm6P0zNptlva8dvR1tbBSXbJefmeV8clJ+YPRNLdQU1pDNcTEWeUpT+LtWiYsQH870618nRXZdnNvM7HdF+9PLnCafgDEILucZGSU0EpVr6elGXTOP6WjIJoz4AXlhX1ltREi7FiJk5be7ZrrpXNjAJFrYR20hs8As791KsU0C5oCEqqkU3Q4HjZ3XohZQ4qIyIcMkvnXZgAkkGZ9A8jt9VC1cnAgMBAAGjggMpMIIDJTCB1AYDVR0RBIHMMIHJggphbWF6b24uY29tgghhbXpuLmNvbYIRdWVkYXRhLmFtYXpvbi5jb22CDXVzLmFtYXpvbi5jb22CDnd3dy5hbWF6b24uY29tggx3d3cuYW16bi5jb22CFGNvcnBvcmF0ZS5hbWF6b24uY29tghFidXlib3guYW1hem9uLmNvbYIRaXBob25lLmFtYXpvbi5jb22CDXlwLmFtYXpvbi5jb22CD2hvbWUuYW1hem9uLmNvbYIVb3JpZ2luLXd3dy5hbWF6b24uY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFYGJ\/J8QAABAMASDBGAiEA6fFlggg6W7QvWe9jf7KTwDKBjO3dGyhkPVZyzlOX5b8CIQCuPTe0zJihJrUjbnOuq6NcNCnkacxegjQwcBcg1ZwRXQB3AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT\/vEAAABWBifyhoAAAQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":148,"flow_packet_id":6,"flow_first_seen":1490976195529,"flow_last_seen":1490976195621,"flow_tot_l4_data_len":1858,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2354{"flow_id":148,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":148,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1263{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":148,"flow_packet_id":8,"flow_first_seen":1490976195529,"flow_last_seen":1490976195622,"flow_tot_l4_data_len":4818,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":602,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.amazon.com","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","alpn":"h2,http\/1.1","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}}
+1452{"flow_id":148,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":833,"pkt":"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","pkt_caplen":833,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":148,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0sutAAEAGqwusECrYNFXRj6NkAbuAhDkjfMMHeoAQAWI\/8wAAAQEICgD2irpttHwx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":148,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0suxAAEAGqwqsECrYNFXRj6NkAbuAhDkjfMMNIoAQAW06QAAAAQEICgD2irpttHwx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":148,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0su1AAEAGqwmsECrYNFXRj6NkAbuAhDkjfMMSyoAQAXk0jAAAAQEICgD2irpttHwx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":148,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0su5AAEAGqwisECrYNFXRj6NkAbuAhDkjfMMVyYAQAYQxggAAAQEICgD2irpttHwx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":149,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":126,"pkt":"ePiC0\/vCAMDKkaPvCABFAABw6\/5AAEARoYSsECoBrBAq2AA1nekAXGuw5IqBgAABAAIAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAHADAAFAAEAAAErAAwHYW5kcm9pZAFswBzAOAABAAEAAAErAATYOsJO","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0692{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":149,"flow_packet_id":2,"flow_first_seen":1490976195545,"flow_last_seen":1490976195628,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":52,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.194.78"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":150,"flow_packet_id":1,"flow_first_seen":1490976195633,"flow_last_seen":1490976195633,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8fD5AAEAGTQysECrY2DrCTr+rAbtBfvaFAAAAAKAC\/\/9RcQAAAgQFtAQCCAoA9oq7AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0585{"flow_id":148,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACysu9AAEAGqomsECrYNFXRj6NkAbuAhDkjfMMVyYAYAYT3ewAAAQEICgD2irtttHwxFgMDAEYQAABCQQR\/iyUDBD5QHIqcL2y\/iDVj4\/p29H0Z\/7JlugE+juqz+ykVJVirfGOjGxDQc3m7NMxlpIR+w\/HNlOiuFcCxOd0YFAMDAAEBFgMDACgAAAAAAAAAAD03hH\/kAE\/axQU4iUFGg\/QO5KSPlw\/4sUYxxZRO1rp6","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":148,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":150,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8ibgAADcGiJLYOsJOrBAq2AG7v6uBvvSDQX72hqASpajvAAAAAgQFZAQCCAoLBTvAAPaKuwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":150,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fD9AAEAGTROsECrY2DrCTr+rAbtBfvaGgb70hIAQAVfBygAAAQEICgD2ir8LBTvA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":150,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":251,"pkt":"AMDKkaPvePiC0\/vCCABFAADtfEBAAEAGTFmsECrY2DrCTr+rAbtBfvaGgb70hIAYAVcNmQAAAQEICgD2isQLBTvAFgMBALQBAACwAwOyGSGBgtCm4VEGsO9q\/vzaBrFVmU1Xzv04\/EnIjdiunAAAKMypzBTAK8AszKjME8AvwDAAngCfwAnACsATwBQAMwA5AJwAnQAvADUBAABf\/wEAAQAAAAAfAB0AABphbmRyb2lkLmNsaWVudHMuZ29vZ2xlLmNvbQAXAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":150,"flow_packet_id":4,"flow_first_seen":1490976195633,"flow_last_seen":1490976195724,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"5bf38a5cbf896cd31eeef4d6ad1503e1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0405{"flow_id":150,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0idQAADcGiH7YOsJOrBAq2AG7v6uBvvSEQX73P4AQAVTAtgAAAQEICgsFPBkA9orE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2304{"flow_id":150,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1484,"pkt":"ePiC0\/vCAMDKkVoBCABFAAW+idUAADcGgvPYOsJOrBAq2AG7v6uBvvSEQX73P4AQAVSgnQAAAQEICgsFPBoA9orEFgMDAFsCAABXAwNY3n3DDL+algu9UzbgCZgTTV+cp0kWsPY9N9U8YH7x7iBtu\/9gnRCQJlHQwKGfvFkpVNjddeFLlYBCG+hlD2XCssypAAAP\/wEAAQAAFwAAAAsAAgEAFgMDDq0LAA6pAA6mAAcoMIIHJDCCBgygAwIBAgIIZm0NGUUgCcswDQYJKoZIhvcNAQELBQAwSTELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRlcm5ldCBBdXRob3JpdHkgRzIwHhcNMTcwMzIyMTcwMjUwWhcNMTcwNjE0MTYxNzAwWjBmMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEVMBMGA1UEAwwMKi5nb29nbGUuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERjGx6s9o\/BcqozqN8UiwzbcHdCvaVPellf7KFLWtbsaC8Oo+QcYhDdeSGHkuUk8MV61V6Z+bLMK5AAp6NIqEUKOCBLwwggS4MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjALBgNVHQ8EBAMCB4AwggN7BgNVHREEggNyMIIDboIMKi5nb29nbGUuY29tgg0qLmFuZHJvaWQuY29tghYqLmFwcGVuZ2luZS5nb29nbGUuY29tghIqLmNsb3VkLmdvb2dsZS5jb22CDiouZ2NwLmd2dDIuY29tghYqLmdvb2dsZS1hbmFseXRpY3MuY29tggsqLmdvb2dsZS5jYYILKi5nb29nbGUuY2yCDiouZ29vZ2xlLmNvLmlugg4qLmdvb2dsZS5jby5qcIIOKi5nb29nbGUuY28udWuCDyouZ29vZ2xlLmNvbS5hcoIPKi5nb29nbGUuY29tLmF1gg8qLmdvb2dsZS5jb20uYnKCDyouZ29vZ2xlLmNvbS5jb4IPKi5nb29nbGUuY29tLm14gg8qLmdvb2dsZS5jb20udHKCDyouZ29vZ2xlLmNvbS52boILKi5nb29nbGUuZGWCCyouZ29vZ2xlLmVzggsqLmdvb2dsZS5mcoILKi5nb29nbGUuaHWCCyouZ29vZ2xlLml0ggsqLmdvb2dsZS5ubIILKi5nb29nbGUucGyCCyouZ29vZ2xlLnB0ghIqLmdvb2dsZWFkYXBpcy5jb22CDyouZ29vZ2xlYXBpcy5jboIUKi5nb29nbGVjb21tZXJjZS5jb22CESouZ29vZ2xldmlkZW8uY29tggwqLmdzdGF0aWMuY26CDSouZ3N0YXRpYy5jb22CCiouZ3Z0MS5jb22CCiouZ3Z0Mi5jb22CFCoubWV0cmljLmdzdGF0aWMuY29tggwqLnVyY2hpbi5jb22CECoudXJsLmdvb2dsZS5jb22CFioueW91dHViZS1ub2Nvb2tpZS5jb22CDSoueW91dHViZS5jb22CFioueW91dHViZWVkdWNhdGlvbi5jb22CCyoueXRpbWcuY29tghphbmRyb2lkLmNsaWVudHMuZ29vZ2xlLmNvbYILYW5kcm9pZC5jb22CG2RldmVsb3Blci5hbmRyb2lkLmdvb2dsZS5jboIEZy5jb4IGZ29vLmdsghRnb29nbGUtYW5hbHl0aWNzLmNvbYIKZ29vZ2xlLmNvbYISZ29vZ2xlY29tbWVyY2UuY29tggp1cmNoaW4uY29tggp3d3cuZ29vLmdsggh5b3V0dS5iZYILeW91dHViZS5jb22CFHlvdXR1YmVlZHVjYXRpb24uY29tMGgGCCsGAQUFBwEBBFwwWjArBgg=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0854{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":150,"flow_packet_id":6,"flow_first_seen":1490976195633,"flow_last_seen":1490976195762,"flow_tot_l4_data_len":1811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"5bf38a5cbf896cd31eeef4d6ad1503e1","ja3s":"9b1466fd60cadccb848e09c86e284265","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"}}
+2322{"flow_id":150,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1958{"flow_id":150,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1217,"pkt":"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","pkt_caplen":1217,"pkt_type":2048,"pkt_ipoffset":14}
+1917{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":150,"flow_packet_id":8,"flow_first_seen":1490976195633,"flow_last_seen":1490976195763,"flow_tot_l4_data_len":4444,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":555,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","server_names":"*.google.com,*.android.com,*.appengine.google.com,*.cloud.google.com,*.gcp.gvt2.com,*.google-analytics.com,*.google.ca,*.google.cl,*.google.co.in,*.google.co.jp,*.google.co.uk,*.google.com.ar,*.google.com.au,*.google.com.br,*.google.com.co,*.google.com.mx,*.google.com.tr,*.google.com.vn,*.google.de,*.google.es,*.google.fr,*.google.hu,*.google.it,*.google.nl,*.google.pl,*.google.pt,*.googleadapis.com,*.googleapis.cn,*.googlecommerce.com,*.googlevideo.com,*.gstatic.cn,*.gstatic.com,*.gvt1.com,*.gvt2.com,*.metric.gstatic.com,*.urchin.com,*.url.google.com,*.youtube-nocookie.com,*.youtube.com,*.youtubeeducation.com,*.ytimg.com,android.clients.google.com,android.com,developer.android.google.cn,g.co,goo.gl,google-analytics.com,google.com,googlecommerce.com,urchin.com,www.goo.gl,youtu.be,youtube.com,youtubeeducation.com","ja3":"5bf38a5cbf896cd31eeef4d6ad1503e1","ja3s":"9b1466fd60cadccb848e09c86e284265","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google.com","fingerprint":"54:A0:1E:03:FF:CB:33:BC:9D:65:DC:D7:BF:6B:04:2B:F9:F3:D5:42"}}
+0406{"flow_id":150,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fEFAAEAGTRGsECrY2DrCTr+rAbtBfvc\/gb76DoAQAWK7GQAAAQEICgD2isgLBTwa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":150,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fEJAAEAGTRCsECrY2DrCTr+rAbtBfvc\/gb7\/mIAQAW21hAAAAQEICgD2isgLBTwa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":150,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0fENAAEAGTQ+sECrY2DrCTr+rAbtBfvc\/gb8EF4AQAXiw+gAAAQEICgD2isgLBTwa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":150,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":151,"pkt":"AMDKkaPvePiC0\/vCCABFAACJfERAAEAGTLmsECrY2DrCTr+rAbtBfvc\/gb8EF4AYAXiEPgAAAQEICgD2issLBTwaFgMDACUQAAAhIO1+O6b2BWfLmOgN7l2aamEnxuIbcJyZR\/JKgs3LJUgaFAMDAAEBFgMDACB3rvUMBQHIPoXwK5nSrId2Fv9BoevfBrrHRAMwMw6rhA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":150,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":109,"pkt":"ePiC0\/vCAMDKkVoBCABFAABfifYAADcGiDHYOsJOrBAq2AG7v6uBvwQXQX73lIAYAVRb7wAAAQEICgsFPF0A9orLFAMDAAEBFgMDACCwAGwbxkE02sXDMu+6itAO3CJMbdGhkjTKTdngMMJeJw==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+2265{"flow_id":150,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_id":150,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":268,"pkt":"AMDKkaPvePiC0\/vCCABFAAD+fEZAAEAGTEKsECrY2DrCTr+rAbtBfvzsgb8EQoAYAXjjjgAAAQEICgD2itELBTxdy\/doybMCEQg\/D4aCyc9z4pOWaiz9DAgy7GNnhIaBmoi3hc31JaIKDxCLEJponZsOOr+E\/PQ9FCFQyRxOuGqYG+\/z4jHSFdoCP0xOhgIpHQQXBM4sTjs4q9X+LgxtylZR3Tjrk\/fnOP4A\/gtfjcLUDXAwlMdEMz2o0xGNW0azyZU8U3iZYmqLawBQlzXDne7HVWY5cS3hEx2\/\/eD1ypDHPnU5\/TsSMJlSP2AU1Cnjhhwv7th0yx3NoSsEOviXJ93A2eUFSS+kZ+svmw==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":151,"flow_packet_id":1,"flow_first_seen":1490976195921,"flow_last_seen":1490976195921,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp"}
+0442{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":91,"pkt":"AMDKkaPvePiC0\/vCCABFAABNWmZAAEARM0CsECrYrBAqARIEADUAOVP\/iiYBAAABAAAAAAAACWltYWdlcy1uYRFzc2wtaW1hZ2VzLWFtYXpvbgNjb20AAAEAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":151,"flow_packet_id":1,"flow_first_seen":1490976195921,"flow_last_seen":1490976195921,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"images-na.ssl-images-amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0583{"flow_id":151,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":197,"pkt":"ePiC0\/vCAMDKkaPvCABFAAC37AVAAEARoTasECoBrBAq2AA1EgQAo8CaiiaBgAABAAUAAAAACWltYWdlcy1uYRFzc2wtaW1hZ2VzLWFtYXpvbgNjb20AAAEAAcAMAAUAAQAAAAMAHg1kazlwczdnb3FvZWVmCmNsb3VkZnJvbnQDbmV0AMA9AAEAAQAAADsABDRUPnPAPQABAAEAAAA7AAQ0VD7rwD0AAQABAAAAOwAENFQ+v8A9AAEAAQAAADsABDRUPj4=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":151,"flow_packet_id":2,"flow_first_seen":1490976195921,"flow_last_seen":1490976195980,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":57,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"images-na.ssl-images-amazon.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.84.62.115"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":152,"flow_packet_id":1,"flow_first_seen":1490976195983,"flow_last_seen":1490976195983,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8wa5AAEAGL16sECrYNFQ+c6O4AbsdU0twAAAAAKAC\/\/9kRAAAAgQFtAQCCAoA9oreAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":153,"flow_packet_id":1,"flow_first_seen":1490976195984,"flow_last_seen":1490976195984,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8CnNAAEAG5pmsECrYNFQ+c6O5Abv6a4CtAAAAAKAC\/\/9R7QAAAgQFtAQCCAoA9oreAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":154,"flow_packet_id":1,"flow_first_seen":1490976195985,"flow_last_seen":1490976195985,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976195,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8MZ1AAEAGv2+sECrYNFQ+c6O6AbtYObtDAAAAAKAC\/\/+5iAAAAgQFtAQCCAoA9oreAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":153,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPww0VD5zrBAq2AG7o7kDZGUl+muArqAScSCFQwAAAgQFtAQCCAps+oX0APaK3gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":152,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPww0VD5zrBAq2AG7o7jUvy2sHVNLcaAScSD3DwAAAgQFtAQCCAps+oycAPaK3gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":153,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnRAAEAG5qCsECrYNFQ+c6O5Abv6a4CuA2RlJoAQAVcj2AAAAQEICgD2iuBs+oX0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":152,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wa9AAEAGL2WsECrYNFQ+c6O4AbsdU0tx1L8trYAQAVeVpAAAAQEICgD2iuBs+oyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_id":153,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":285,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPCnVAAEAG5cSsECrYNFQ+c6O5Abv6a4CuA2RlJoAYAVfOvQAAAQEICgD2iuBs+oX0FgMBANYBAADSAwPpjfK00MIrt3BxXOFv6gz55nS9q4nJk9FBExT7V8ZmxQAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAifr6AAD\/AQABAAAAACQAIgAAH2ltYWdlcy1uYS5zc2wtaW1hZ2VzLWFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAiKigAdABcAGLq6AAEA","pkt_caplen":285,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":153,"flow_packet_id":4,"flow_first_seen":1490976195984,"flow_last_seen":1490976196003,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0700{"flow_id":152,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":285,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPwbBAAEAGLomsECrYNFQ+c6O4AbsdU0tx1L8trYAYAVfIxQAAAQEICgD2iuBs+oycFgMBANYBAADSAwPu6GGuPmyzw7dLNflsWT5nlBqUB1hxgKWeZNpugQIoJQAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAiWpqAAD\/AQABAAAAACQAIgAAH2ltYWdlcy1uYS5zc2wtaW1hZ2VzLWFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjq6gAdABcAGKqqAAEA","pkt_caplen":285,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":152,"flow_packet_id":4,"flow_first_seen":1490976195983,"flow_last_seen":1490976196005,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0417{"flow_id":154,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPIGPww0VD5zrBAq2AG7o7r33SsOWDm7RKAScSApGwAAAgQFtAQCCAps+o9VAPaK3gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":154,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MZ5AAEAGv3asECrYNFQ+c6O6AbtYObtE990rD4AQAVfHrwAAAQEICgD2iuBs+o9V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_id":154,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":285,"pkt":"AMDKkaPvePiC0\/vCCABFAAEPMZ9AAEAGvpqsECrYNFQ+c6O6AbtYObtE990rD4AYAVcgywAAAQEICgD2iuBs+o9VFgMBANYBAADSAwOZ4tBPqLqYdHU6SDQI1rutJPljePPKqcU84R0pjyIHmAAAIJqazKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAidraAAD\/AQABAAAAACQAIgAAH2ltYWdlcy1uYS5zc2wtaW1hZ2VzLWFtYXpvbi5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjq6gAdABcAGEpKAAEA","pkt_caplen":285,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":154,"flow_packet_id":4,"flow_first_seen":1490976195985,"flow_last_seen":1490976196010,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":251,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":155,"flow_packet_id":1,"flow_first_seen":1490976196016,"flow_last_seen":1490976196016,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8LWlAAEAG4smsECrYNu8csuLAAbtkEKeIAAAAAKAC\/\/+hiQAAAgQFtAQCCAoA9orhAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":153,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA04NBAAPIGXkM0VD5zrBAq2AG7o7kDZGUm+muBiYAQAHYj3AAAAQEICmz6hfYA9org","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":154,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0pFhAAPIGmrs0VD5zrBAq2AG7o7r33SsPWDm8H4AQAHbHswAAAQEICmz6j1cA9org","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":152,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0oQ1AAPIGngY0VD5zrBAq2AG7o7jUvy2tHVNMTIAQAHaVpgAAAQEICmz6jKAA9org","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":153,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc4NFAAPIGWJo0VD5zrBAq2AG7o7kDZGUm+muBiYAQAHYHvgAAAQEICmz6hfcA9orgFgMDAFQCAABQAwMchVgr9AjLWixAKujTvHZoIk1uz271I4e\/jrQ7u2hALgDALwAAKAAAAAD\/AQABAAALAAQDAAECACMAAAAFAAAAEAALAAkIaHR0cC8xLjEWAwMLowsAC58AC5wABlowggZWMIIFPqADAgECAhBpH0FX++InsW31pP5h+nftMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYwOTIzMDAwMDAwWhcNMTcxMDI2MjM1OTU5WjB5MQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEoMCYGA1UEAwwfSW1hZ2VzLW5hLnNzbC1pbWFnZXMtYW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALEuJO\/+bBZp+65A3qd7KXAfp\/cKV5sEn6gPlLX+kNYjVLDHtwBivFeUG6bFEOhwWdlcNuDzu9KkW7lLTHitJ5nFNZV8ab6lWZc6IgABVBSUzarnyfLq7rKfC2JGnZNxMXEzi1Vj5qs4OUNzMETVJxx9HbMK3VCITO7h6OYz2D3VyZgIJwqq7Onpkkx2YSQTdtBy9Pr3Yx71pOWk\/3vh3jwlUgByGncft+zlHReypSHZCXLE\/RRSYVMOdSSWd9vlmStKxq5H0TRrvkLw+d3p5plGcmL7d1fjoFAWT259eL1DlUmYfkteR\/zCwtPSGW3K6F6CzoKpayF3+Zj22dILQUkCAwEAAaOCAtMwggLPMIGABgNVHREEeTB3gh9JbWFnZXMtbmEuc3NsLWltYWdlcy1hbWF6b24uY29tgh9pbWFnZXMtZXUuc3NsLWltYWdlcy1hbWF6b24uY29tgh9pbWFnZXMtZmUuc3NsLWltYWdlcy1hbWF6b24uY29tghJtLm1lZGlhLWFtYXpvbi5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVdUkiseAAAEAwBHMEUCIQD6iIA+rmG7QUCCeoEWrVeccR1EZDWz9MXobNmyZkT4uQIgaiJVZCKRbwFdkbUxvM4Cisi\/8VdNDoagQ9TsWHWxRdUAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0\/7xAAAAVdUkitHAAAEAwBHMEUCIEoThh0jOnprHDW1k9YHcA6yuygvskznTHLMQPBWQS8oAiEAy\/WI\/dbVY6t2GtrwR2xpuZ7b0b0g40Bn0vI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":153,"flow_packet_id":6,"flow_first_seen":1490976195984,"flow_last_seen":1490976196033,"flow_tot_l4_data_len":1875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2356{"flow_id":153,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc4NJAAPIGWJk0VD5zrBAq2AG7o7kDZGrO+muBiYAQAHZAyQAAAQEICmz6hfcA9orgtH\/sB3rLMA0GCSqGSIb3DQEBCwUAA4IBAQBkiDIxxnEZQrKUokw1tGkpri5hfM77NzUNZVWC0Fgdg74+ZMaxjY5ejtf+ySz7Q4YfW\/gX7WyTv0J6x9UzilKxYpa3x1E+FkaueHDs9uPAqFWK3dEAeXxMgoNrRERymOERcZoEhmu4s90r+y6wcrksN9W2xICvAv60b4k6vUuYH9j27CDbSivSCe71iV6zZ+kGTvIhEJRdwt3iYMyQwQMN55VSSzpX+SrB2wiDul3yiV4HjaS703ElwqvtEXQGCQux6WhUMHOBXzY0kebNFDKYD63s\/sHwq4c2qTdzD3pvCQ16okmwVy481q+faunmHtn14Kr9QeLcLqT7vLASm9BTAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+k=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":153,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXc4NNAAPIGWJg0VD5zrBAq2AG7o7kDZHB2+muBiYAQAHaf0QAAAQEICmz6hfcA9orgdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHFgMDBlEWAAZNAQAGSTCCBkUKAQCgggY+MIIGOgYJKwYBBQUHMAEBBIIGKzCCBicwgZ6iFgQURSACqIuKZZ91+vXpChp40vA3C54YDzIwMTcwMzI5MDkwMDU3WjBzMHEwSTAJBgUrDgMCGgUABBTRsWSLjJ8N0Wujis0rUBfV+c\/AZAQUX2DPYZBV34RDFIpgKrL1evRDGO8CEGkfQVf74iexbfWk\/mH6d+2AABgPMjAxNzAzMjkwOTAwNTdaoBEYDzIwMTcwNDA1MDkwMDU3WjANBgkqhkiG9w0BAQUFAAOCAQEAlbbCUTPj5w12J6GrEmf5hV4iufntZZG3Y8S0pI0kB7GvfElrulxav4QgdcZbLdUPkMWM9+kneCt+exqXrJeZ+COEhhUEqc\/nVfEavr\/oYR62P3Lz8Ut0O17jXqENh\/mbjRoREBil\/CIzWU+luSiF\/ZMRq0H1zEw\/mSTmMnhxRiz6ahuQV+JItIEhPJlQs5iWx8ruofIcqOvKelrA24cDxEyufpN9ZEfQvyl5ymmsDXK\/xcHYknZLM3WSC0UUBnlcq4NYqiQh5Pymkkp2G44BW2p9GbWOYszSsqf\/C+hiL7zN1WiscirUykahmZ7D1\/a5eJFOsv0Tf\/hRZVBAlJ3ZHKCCBG4wggRqMIIEZjCCA06gAwIBAgIQRGiQY2lIBdbK9v250cQFITANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDIwNDAwMDAwMFoXDTE3MDUwNTIzNTk1OVowQDE+MDwGA1UEAxM1U3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQgT0NTUCBSZXNwb25kZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK0Kffb5Auqq\/RTKlGMWnpdC7JmtnGiOAYwvZN2YjMK6fnb0hAgOMG1rLR76AfOlvGZpXezKtbbVssGNNzBnwJfejjdD4jlaNV3g2Sbl02\/W0C1EsVV7s4J8Dmxg7llU8aWUd6qxYyXvCNgMr0zT44ABlcJe7lYNxneZPdVb5+8NG48QecxpmEgLmwiH886a9SxZ\/5oFPCbvui09qrD9ZZDZeTWx3jja9a9brKoIv8Lz2opoIuWL\/3FE0ksMFSK5zl4n4ihm\/0beCKOUAGnRvV8Lf2TnNlIaBm4HCrofyw\/wGBxcmFekRRMYMG3tUe+29l40aopWwNOI7L3BhPMTrAgMBAAGjggEcMIIBGDAPBgkrBgEFBQcwAQUEAgUAMCIGA1UdEQQbMBmkFzAVMRMwEQYDVQQDEwpUR1YtRC0zODU3MB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB0GA1UdDgQWBBRFIAKoi4pln3X69ekKGnjS8DcLnjAMBgNVHRMBAf8EAjAAMG4GA1UdIARnMGUwYwYLYIZIAYb4RQEHFwMwVDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKgYIKwY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":153,"flow_packet_id":8,"flow_first_seen":1490976195984,"flow_last_seen":1490976196034,"flow_tot_l4_data_len":4835,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}}
+1355{"flow_id":153,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":764,"pkt":"ePiC0\/vCAMDKkVoBCABFAALu4NRAAPIGW4U0VD5zrBAq2AG7o7kDZHYe+muBiYAYAHZ4RwAAAQEICmz6hfcA9orgAQUFBwICMB4aHCAgaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwEwYDVR0lBAwwCgYIKwYBBQUHAwkwDgYDVR0PAQH\/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQB4HMFiNVhH\/deb\/gTB86atVF4ywqr0xapUyerApNwQq\/ERx+P2vuV6cbn7nw+nwAPKmQ2C1\/5mrPKO+CN8i46q+JdQmfb3UoTuoYQVXYzQ5WxhHij7MjF7swqsQ6AJAagWS\/6Sw4vnUhMJSJti+y6cojNMGRQ1Mn010zjA5f2mqtQbJcXTwe66\/hVsPQIMJFgkX565MDEbMxCO2AmjPJFfLBm0dCw5zcfFfjJS+xPuB8aEo67ogH19P5klyyuA4HZedrQHXKAwHnWUs\/h+mP27rKq05NZ00cCJLBBUa+lOYqRx\/HeSlpKdROtQa1wj09sFAyeSF2EkjMuvIXq7h0QOFgMDAU0MAAFJAwAXQQS\/2oyBC7yKFb2GJpph+VEAhud80AYfLwHrlG0+0onox2mf1eonEqAhMH\/EANDV1Fj160WyB6vHQ+A0mQLCmmbABgEBABpj1KRclHhCpjIukJZGFy\/9M0vMIyhjAW51yo7mTClI2FZTwUYOX3lWEYuE6rDACM72R8aL7QYty04bFV8Srnx411EO7LhkyKUGWS50CeS8kBumZJb4XqDJKOHu7JyS5NXVQfg9mupECI4Bowvqef32hD28qdSukXuchQtN+hIEMnZ1m4iIvGF75WiiSLtQhXWpW\/OkK3d8xQqFuaDw1qmoEc8rfPBngIm5lkE\/OHH+JhTyju729oGksGpH55tcQzeqdifeQtPkJwLwYf+F\/95rXlzGwbtWR\/fsAWQ5xyyXrMih6kvLtkBNnPgyfPpqKn1kR6+K3n5pZp0GCuh4FbgWAwMABA4AAAA=","pkt_caplen":764,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":153,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnZAAEAG5p6sECrYNFQ+c6O5Abv6a4GJA2RqzoAQAWIdRAAAAQEICgD2iuNs+oX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":153,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CndAAEAG5p2sECrYNFQ+c6O5Abv6a4GJA2RwdoAQAW0XkQAAAQEICgD2iuNs+oX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":154,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":154,"flow_packet_id":6,"flow_first_seen":1490976195985,"flow_last_seen":1490976196037,"flow_tot_l4_data_len":1875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2356{"flow_id":154,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":154,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":154,"flow_packet_id":8,"flow_first_seen":1490976195985,"flow_last_seen":1490976196038,"flow_tot_l4_data_len":4835,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}}
+1358{"flow_id":154,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":764,"pkt":"ePiC0\/vCAMDKkVoBCABFAALupFxAAPIGl\/00VD5zrBAq2AG7o7r33TwHWDm8H4AYAHZioAAAAQEICmz6j1gA9orgAQUFBwICMB4aHCAgaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9ycGEwEwYDVR0lBAwwCgYIKwYBBQUHAwkwDgYDVR0PAQH\/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQB4HMFiNVhH\/deb\/gTB86atVF4ywqr0xapUyerApNwQq\/ERx+P2vuV6cbn7nw+nwAPKmQ2C1\/5mrPKO+CN8i46q+JdQmfb3UoTuoYQVXYzQ5WxhHij7MjF7swqsQ6AJAagWS\/6Sw4vnUhMJSJti+y6cojNMGRQ1Mn010zjA5f2mqtQbJcXTwe66\/hVsPQIMJFgkX565MDEbMxCO2AmjPJFfLBm0dCw5zcfFfjJS+xPuB8aEo67ogH19P5klyyuA4HZedrQHXKAwHnWUs\/h+mP27rKq05NZ00cCJLBBUa+lOYqRx\/HeSlpKdROtQa1wj09sFAyeSF2EkjMuvIXq7h0QOFgMDAU0MAAFJAwAXQQSg\/YDzpbMGRfYIi0q8QT\/d3pG3qpHDoLGOM7k\/h0MymO3MF0Y9WrK5dBzpfpi64vnW3gx\/n2iUbSc3VDLQwWA\/BgEBABc5u17NF4UcOMvIuCb5of2WctWdLjxKYJGb+vNJXEr+DK2PljjiwnirXBY2Vr+9MjsBFjdfKUQh6QoUmuH+ITHiDIQJrGdyfLBJUxjYSxygbcq7PFTLhWu0yexZgvQefSRBevcGVO9mybvKTuLjKH2wmm8AKm9HywyvszutP\/7Bltnoep6K\/1tGsVNteEtGPFsefdxyRFum6laVeWbpTlWtdH+9iGiZqznpe0HfpX0Fg4IRa3gLfNBqBSUGk\/iYVRnFXyrhSl9cThSOnERH0Gu2Dc8AQw99CmvvCYLm\/ZFv54cELZnDxLLLu4vssc3EnZp320TJj3U6oOCal5ncCsoWAwMABA4AAAA=","pkt_caplen":764,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":152,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcoQ5AAPIGmF00VD5zrBAq2AG7o7jUvy2tHVNMTIAQAHZQkQAAAQEICmz6jKAA9orgFgMDAFQCAABQAwOoc\/4c7y2t24VDpst7Vx0u3G0aKvYyQd+r9kFRBGY3\/gDALwAAKAAAAAD\/AQABAAALAAQDAAECACMAAAAFAAAAEAALAAkIaHR0cC8xLjEWAwMLowsAC58AC5wABlowggZWMIIFPqADAgECAhBpH0FX++InsW31pP5h+nftMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYwOTIzMDAwMDAwWhcNMTcxMDI2MjM1OTU5WjB5MQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEoMCYGA1UEAwwfSW1hZ2VzLW5hLnNzbC1pbWFnZXMtYW1hem9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALEuJO\/+bBZp+65A3qd7KXAfp\/cKV5sEn6gPlLX+kNYjVLDHtwBivFeUG6bFEOhwWdlcNuDzu9KkW7lLTHitJ5nFNZV8ab6lWZc6IgABVBSUzarnyfLq7rKfC2JGnZNxMXEzi1Vj5qs4OUNzMETVJxx9HbMK3VCITO7h6OYz2D3VyZgIJwqq7Onpkkx2YSQTdtBy9Pr3Yx71pOWk\/3vh3jwlUgByGncft+zlHReypSHZCXLE\/RRSYVMOdSSWd9vlmStKxq5H0TRrvkLw+d3p5plGcmL7d1fjoFAWT259eL1DlUmYfkteR\/zCwtPSGW3K6F6CzoKpayF3+Zj22dILQUkCAwEAAaOCAtMwggLPMIGABgNVHREEeTB3gh9JbWFnZXMtbmEuc3NsLWltYWdlcy1hbWF6b24uY29tgh9pbWFnZXMtZXUuc3NsLWltYWdlcy1hbWF6b24uY29tgh9pbWFnZXMtZmUuc3NsLWltYWdlcy1hbWF6b24uY29tghJtLm1lZGlhLWFtYXpvbi5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVdUkiseAAAEAwBHMEUCIQD6iIA+rmG7QUCCeoEWrVeccR1EZDWz9MXobNmyZkT4uQIgaiJVZCKRbwFdkbUxvM4Cisi\/8VdNDoagQ9TsWHWxRdUAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0\/7xAAAAVdUkitHAAAEAwBHMEUCIEoThh0jOnprHDW1k9YHcA6yuygvskznTHLMQPBWQS8oAiEAy\/WI\/dbVY6t2GtrwR2xpuZ7b0b0g40Bn0vI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":152,"flow_packet_id":6,"flow_first_seen":1490976195983,"flow_last_seen":1490976196039,"flow_tot_l4_data_len":1875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2356{"flow_id":152,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":152,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1229{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":152,"flow_packet_id":8,"flow_first_seen":1490976195983,"flow_last_seen":1490976196041,"flow_tot_l4_data_len":4835,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}}
+1353{"flow_id":152,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":764,"pkt":"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","pkt_caplen":764,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":153,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnhAAEAG5pysECrYNFQ+c6O5Abv6a4GJA2R2HoAQAXkR3QAAAQEICgD2iuNs+oX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":153,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0CnlAAEAG5pusECrYNFQ+c6O5Abv6a4GJA2R42IAQAYQPGAAAAQEICgD2iuNs+oX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":153,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACyCnpAAEAG5hysECrYNFQ+c6O5Abv6a4GJA2R42IAYAYRO5QAAAQEICgD2iuRs+oX3FgMDAEYQAABCQQRJPJI5ckU+c6NJF0CORANPufMLtlmXoxTyviiJsm7SBks1pkUewhu1PlH13Kb63fM06ckmfAApgu3JTLWhM4I3FAMDAAEBFgMDACgAAAAAAAAAAC2GpyvwjAkC9SEoKi\/Nq5HiVGDJ81ZENKRdKhQGHhG4","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":154,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaBAAEAGv3SsECrYNFQ+c6O6AbtYObwf990wt4AQAWLBGgAAAQEICgD2iuRs+o9Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":154,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaFAAEAGv3OsECrYNFQ+c6O6AbtYObwf9902X4AQAW27ZwAAAQEICgD2iuRs+o9Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":154,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaJAAEAGv3KsECrYNFQ+c6O6AbtYObwf9908B4AQAXm1swAAAQEICgD2iuRs+o9Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":154,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0MaNAAEAGv3GsECrYNFQ+c6O6AbtYObwf990+wYAQAYSy7gAAAQEICgD2iuRs+o9Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":152,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbFAAEAGL2OsECrYNFQ+c6O4AbsdU0xM1L8zVYAQAWKPDgAAAQEICgD2iuRs+oyg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":152,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbJAAEAGL2KsECrYNFQ+c6O4AbsdU0xM1L84\/YAQAW2JWwAAAQEICgD2iuRs+oyg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":152,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbNAAEAGL2GsECrYNFQ+c6O4AbsdU0xM1L8+pYAQAXmDpwAAAQEICgD2iuRs+oyg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":152,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0wbRAAEAGL2CsECrYNFQ+c6O4AbsdU0xM1L9BX4AQAYSA4gAAAQEICgD2iuRs+oyg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_id":154,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACyMaRAAEAGvvKsECrYNFQ+c6O6AbtYObwf990+wYAYAYRovQAAAQEICgD2iuVs+o9YFgMDAEYQAABCQQRLw1Xt1afKgMwBhTyLXws3I6lfhjp77F8bDmBdrLRozBSuHnJ4iaNT1sfbc4D+khkds1+KsBalbQ82eeMgyxoyFAMDAAEBFgMDACgAAAAAAAAAAPIfznDImRK+dp9h7tX4J6h\/xTZWVqVrSBbs\/PfdU\/KT","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":152,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACywbVAAEAGLuGsECrYNFQ+c6O4AbsdU0xM1L9BX4AYAYSkkwAAAQEICgD2iuZs+oygFgMDAEYQAABCQQScXkjIoHVj9eFK24GofJJ8AB0DRiTwh7TcakJMxtSgtGPH6f3gAfltWruZoZ1gzYllRweDI4XiPrrzBCRrnCnWFAMDAAEBFgMDACgAAAAAAAAAAIP5NNydPUm6hMAx57nXup4fEcU7Y9t9e53wGQgvNoL1","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_id":153,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":324,"pkt":"ePiC0\/vCAMDKkVoBCABFAAE24NVAAPIGXTw0VD5zrBAq2AG7o7kDZHjY+muCB4AYAHb\/mgAAAQEICmz6hfsA9orkFgMDAMoEAADGAAAqMADAgJEsFgnfW6+1G9seOjvPHE9\/\/e6aDxwC6JqGUw7TrVBH8ld0n+eaosncXzVKigxXDV13pGBWbvSqxAR7a6aP+9zLXgzfTlcvUFopwI3iojJPdc6rEJOF6CbmmRRtUqTqjE58BuzJwfOguXRelkWMiVDz4pMcJHGg3CZo3etPrYTpgLmqbU4Ws6x3rxfQ0\/\/2YxUf6X9ux2nYDy+uxVSXHAOLEMV2\/yneOEmMz0rcYE5Xv1aPnXxfd+Pvam6WHh+WFAMDAAEBFgMDACjKJDrknttVfyQdQYHWYjoVXt7uJcNJaDH4CXVLsJ\/R92bDrdELnzuc","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":155,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwIa5AAOcGR5A27xyyrBAq2AG74sBbwNFvZBCniXASH\/4cPAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":155,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoLWpAAEAG4tysECrYNu8csuLAAbtkEKeJW8DRcFAQAVdmrQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_id":154,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":324,"pkt":"ePiC0\/vCAMDKkVoBCABFAAE2pF1AAPIGmbQ0VD5zrBAq2AG7o7r33T7BWDm8nYAYAHY+jQAAAQEICmz6j1wA9orlFgMDAMoEAADGAAAqMADAgJEsFgnfW6+1G9seOjvPHM6O74JMDRDFUISq\/ppn0DO9aqruIOfVaR5LrTCCzy8t+KvEVEZ9qC43JZtWToJcUGose6HTIYlEGiWxuq6zP7rmzs3klvP\/ASgYWRHDJlJxizCvIVNDChtT8\/DKQWm\/tl5+cXUbRccAodB3\/kKSEPNKGrehSZKuuxZjaGA7gc6KQVGFmLyMXG7NZWcyhDbf4U17z4T1RaqgOXpDmPUyNVqXu084rLQyc78Pv9rFuOwyFAMDAAEBFgMDACj8V+syjbuyeyHSHjpxxn6M\/tvtoBCvs\/AvB2aRjdjw6LFR5aY80QeQ","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":155,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":228,"pkt":"AMDKkaPvePiC0\/vCCABFAADWLWtAAEAG4i2sECrYNu8csuLAAbtkEKeJW8DRcFAYAVdgIgAAFgMBAKkBAAClAwEIvZt9+BC6Nupqw3rZKTOo5DVtg3EJn2TLxazoTB5EvSCh56jEaMWoPL9OuslqKXpycwU0yxHxmHJEb6cXK1MHCAAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":155,"flow_packet_id":4,"flow_first_seen":1490976196016,"flow_last_seen":1490976196079,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0757{"flow_id":152,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":324,"pkt":"ePiC0\/vCAMDKkVoBCABFAAE2oRJAAPIGnP80VD5zrBAq2AG7o7jUv0FfHVNMyoAYAHampQAAAQEICmz6jKUA9ormFgMDAMoEAADGAAAqMADAgJEsFgnfW6+1G9seOjvPHBogvEOu\/mn+xMz3rJx2AUVfQFoKjLNeTiME4nQZ8RKXytF+lLyuo9ZDzCQHOJq92cL3aZ0NIvvbSODO5dssY3WT85lFrxetrZn4ITURLaz+aUXYwxqxgJhJGFAznejdzxcrfRWBt8RQNAqGDRNR3r+hzWG7\/lxvrspn2og\/kb0BxnsslEivK2W3JF6EsAOQ2c7dtxrtSH9iH1FQb9r8RC1TsTCOLTVddXjMDRl\/grcnFAMDAAEBFgMDACg43\/PD1dhqSfT6rC3wIL9Q4NHZ9+CkGzCs5EkXkPvjLN4mSRPNXJ97","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":155,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoKCNAAOcGQSM27xyyrBAq2AG74sBbwNFwZBCoN1AQf\/rnWwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":155,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":139,"pkt":"ePiC0\/vCAMDKkVoBCABFAAB9KCZAAOcGQMs27xyyrBAq2AG74sBbwNFwZBCoN1AYf\/pUggAAFgMBAEoCAABGAwFY3n3EdqMpX58ZXpF2Q6Q1jZwfZ4R0vjI8oQRX\/yTXKSCh56jEaMWoPL9OuslqKXpycwU0yxHxmHJEb6cXK1MHCAAvABQDAQABAQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0808{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":155,"flow_packet_id":6,"flow_first_seen":1490976196016,"flow_last_seen":1490976196143,"flow_tot_l4_data_len":407,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+0464{"flow_id":155,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":107,"pkt":"ePiC0\/vCAMDKkVoBCABFAABdKDRAAOcGQN027xyyrBAq2AG74sBbwNHFZBCoN1AYf\/oYgQAAFgMBADCJz2Z1Hciu4Jc7mGhTYE9YtOvxsJHpLsZEwejRBcKX73Y17G7NADlcbD9xgnDCzCU=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":155,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoLWxAAEAG4tqsECrYNu8csuLAAbtkEKg3W8DRxVAQAVdlqgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":155,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoLW1AAEAG4tmsECrYNu8csuLAAbtkEKg3W8DR+lAQAVdldQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":155,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":113,"pkt":"AMDKkaPvePiC0\/vCCABFAABjLW5AAEAG4p2sECrYNu8csuLAAbtkEKg3W8DR+lAYAVeqEQAAFAMBAAEBFgMBADD2QvgoZCzL2sq9QkWBCk4oZYYnMOqmN0xgX5RLRlGnxcOsJXhxtOLqkEjsjWjhac0=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1058{"flow_id":155,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":544,"pkt":"AMDKkaPvePiC0\/vCCABFAAISLW9AAEAG4O2sECrYNu8csuLAAbtkEKhyW8DR+lAYAVfCVwAAFwMBACAq1pVXkGSW4f2YohoU+FIGpU10z0bdYKMLfEeBr1uVNhcDAQHAfuhhV8jDb3AMgYqrEAETSCFFdqHfJVviEQ8iPKs82cgGEJmw8cZX+0\/Tue8IqHeSYG25k3IedqFe++SBL4MVz2MbqgnG4hrhn0JcN3IUcj8gQFNfrpCBt7iLoL4qvQ5g81iZ2SzcatlKm2X2qtG6wRqOll220jIzVJlE0rDIU\/0tjXGOKpgW4jQrPDyzvsZsYifXbLKNlILac7lviqRlZsj+XbS5GiB3tGTtwuP9XnxXgEPPPwPD2Se4Le++yQkCaK+MlvF\/Tg6HPxctU+vgRJ691Ss2\/ZKGIqHlZh25\/2ux843yj0CESkW5C8Yfye0GkBwqUHoY0oJJ39jXZ7PnGcGfEYPegzYKSx7fA4o\/nqR2lEHu1ieFqTR+1O+e0QxVk0JauRqix7VF26ojv1ejMe1iMoyMSzCX59i4jFk8nPX1naK1fTnzojXksdlA7MQhEQeqcWAxvjI712FwqBANLeztME\/TxY7rW5H0bjc\/ZunyqwxdXMRQy\/xuxzCjrvGfff9tc8OnNgdiHqJm8MLH93hv9AgKGuTqdXWnErvhCpycV1FwvzfzAn+52a\/rbSMXaKJpwMltLLU3EYuMM3pfbA==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":118,"flow_packet_id":30,"flow_first_seen":1490976134140,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":14885,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":496,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51985,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":119,"flow_packet_id":59,"flow_first_seen":1490976134141,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":33432,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":566,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51986,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":120,"flow_packet_id":26,"flow_first_seen":1490976134144,"flow_last_seen":1490976135402,"flow_tot_l4_data_len":13433,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":516,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51987,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":121,"flow_packet_id":28,"flow_first_seen":1490976134146,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":15059,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":537,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51988,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":122,"flow_packet_id":31,"flow_first_seen":1490976134148,"flow_last_seen":1490976135505,"flow_tot_l4_data_len":16709,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51989,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":123,"flow_packet_id":28,"flow_first_seen":1490976134149,"flow_last_seen":1490976135403,"flow_tot_l4_data_len":15709,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":561,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51990,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":116,"flow_packet_id":31,"flow_first_seen":1490976130073,"flow_last_seen":1490976134134,"flow_tot_l4_data_len":9238,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40864,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":155,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGApAAOcGUTw27xyyrBAq2AG74sBbwNH6ZBCoclAQf\/nmlwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":155,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoGA1AAOcGUTk27xyyrBAq2AG74sBbwNH6ZBCqXFAQf\/HktQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1205{"flow_id":155,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":155,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":91,"pkt":"AMDKkaPvePiC0\/vCCABFAABNLXBAAEAG4rGsECrYNu8csuLAAbtkEKpcW8DUT1AYAVvbAwAAFQMBACCZ0zYYKq2pf3c+\/yzZ9rYaEKoGfov5k19l\/J3sUoGLzg==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":156,"flow_packet_id":1,"flow_first_seen":1490976196223,"flow_last_seen":1490976196223,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8Y0xAAEAG+qKsECrYNFXRj5ZTAbu3TOm6AAAAAKAC\/\/+mLwAAAgQFtAQCCAoA9or2AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA8AABAAPMGqu40VdGPrBAq2AG7llOp3LO0t0zpu6AScSBd6wAAAgQFtAQCCApt5QucAPaK9gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":156,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y01AAEAG+qmsECrYNFXRj5ZTAbu3TOm7qdyztYAQAVf8fgAAAQEICgD2ivlt5Quc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_id":156,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":260,"pkt":"AMDKkaPvePiC0\/vCCABFAAD2Y05AAEAG+easECrYNFXRj5ZTAbu3TOm7qdyztYAYAVe1MwAAAQEICgD2ivpt5QucFgMBAL0BAAC5AwOo7Axkb8GLUakvQG63Tsv7HZAz5uQ4F\/rfU5NRiOqOZwAALMArwCzAL8AwAJ4An8AJwArAE8AUADMAOQAyADjAB8ARAJwAnQAvADUABQD\/AQAAZAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM=","pkt_caplen":260,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":156,"flow_packet_id":4,"flow_first_seen":1490976196223,"flow_last_seen":1490976196261,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":32,"flow_max_l4_data_len":226,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0405{"flow_id":156,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"ePiC0\/vCAMDKkVoBCABFAAA0uBVAAPMG8uA0VdGPrBAq2AG7llOp3LO1t0zqfYAQAHb8mAAAAQEICm3lC6AA9or6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":156,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcuBZAAPMG7Tc0VdGPrBAq2AG7llOp3LO1t0zqfYAQAHbCLAAAAQEICm3lC6AA9or6FgMDADkCAAA1AwOITJ+WtrmemlElVvtzO5mNNeHpceR5rWEa3LkT6uGYtgDALwAADf8BAAEAAAsABAMAAQIWAwML6AsAC+QAC+EABp8wggabMIIFg6ADAgECAhAdSr2qeNCa\/nmdQbzrenZiMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTYxMDMxMDAwMDAwWhcNMTcxMjMxMjM1OTU5WjBoMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEXMBUGA1UEAwwOd3d3LmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWihndZ\/4HxzWdNmP\/XjAI8iPKFw5XnK0RlANu1+1aLE7FOkbZKWTYYjWnO0RKmikGZtj+Fozlg1YNgMevTUBC\/MCrCw3LPmxfivK2QgRYj3YOiYpu\/FAqvLSbRm6P0zNptlva8dvR1tbBSXbJefmeV8clJ+YPRNLdQU1pDNcTEWeUpT+LtWiYsQH870618nRXZdnNvM7HdF+9PLnCafgDEILucZGSU0EpVr6elGXTOP6WjIJoz4AXlhX1ltREi7FiJk5be7ZrrpXNjAJFrYR20hs8As791KsU0C5oCEqqkU3Q4HjZ3XohZQ4qIyIcMkvnXZgAkkGZ9A8jt9VC1cnAgMBAAGjggMpMIIDJTCB1AYDVR0RBIHMMIHJggphbWF6b24uY29tgghhbXpuLmNvbYIRdWVkYXRhLmFtYXpvbi5jb22CDXVzLmFtYXpvbi5jb22CDnd3dy5hbWF6b24uY29tggx3d3cuYW16bi5jb22CFGNvcnBvcmF0ZS5hbWF6b24uY29tghFidXlib3guYW1hem9uLmNvbYIRaXBob25lLmFtYXpvbi5jb22CDXlwLmFtYXpvbi5jb22CD2hvbWUuYW1hem9uLmNvbYIVb3JpZ2luLXd3dy5hbWF6b24uY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFYGJ\/J8QAABAMASDBGAiEA6fFlggg6W7QvWe9jf7KTwDKBjO3dGyhkPVZyzlOX5b8CIQCuPTe0zJihJrUjbnOuq6NcNCnkacxegjQwcBcg1ZwRXQB3AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT\/vEAAABWBifyhoAAAQDAEgwRgIhANGVBDwoLZH9u855YmvQUZ53FuM=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":156,"flow_packet_id":6,"flow_first_seen":1490976196223,"flow_last_seen":1490976196300,"flow_tot_l4_data_len":1850,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2353{"flow_id":156,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1175{"flow_id":156,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":632,"pkt":"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","pkt_caplen":632,"pkt_type":2048,"pkt_ipoffset":14}
+1320{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":156,"flow_packet_id":8,"flow_first_seen":1490976196223,"flow_last_seen":1490976196301,"flow_tot_l4_data_len":3928,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"amazon.com,amzn.com,uedata.amazon.com,us.amazon.com,www.amazon.com,www.amzn.com,corporate.amazon.com,buybox.amazon.com,iphone.amazon.com,yp.amazon.com,home.amazon.com,origin-www.amazon.com","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=www.amazon.com","fingerprint":"EF:14:6C:F1:5C:4A:F8:4D:BA:83:C2:1E:6C:5B:ED:C4:FA:34:1C:3E"}}
+0405{"flow_id":156,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y09AAEAG+qesECrYNFXRj5ZTAbu3TOp9qdy5XYAQAWL2AAAAAQEICgD2iv5t5Qug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":156,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y1BAAEAG+qasECrYNFXRj5ZTAbu3TOp9qdy\/BYAQAW3wTQAAAQEICgD2iv5t5Qug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":156,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":66,"pkt":"AMDKkaPvePiC0\/vCCABFAAA0Y1FAAEAG+qWsECrYNFXRj5ZTAbu3TOp9qdzBO4AQAXnuCwAAAQEICgD2iv5t5Qug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":156,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":192,"pkt":"AMDKkaPvePiC0\/vCCABFAACyY1JAAEAG+iasECrYNFXRj5ZTAbu3TOp9qdzBO4AYAXmTOQAAAQEICgD2iwFt5QugFgMDAEYQAABCQQRZjFZBoZQy1WSCXeEf9ZFwV+3HZUWN20zI3MZe0+VETbGd8JN8GbtCcuBMdorY8m5fszOUhn72WJDwzkI\/glPjFAMDAAEBFgMDACiR9kFTQTtEBWl5nSBVp38VhIEla9OJ3EAQEfYvWHrJEkIPeKyeQh4+","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":156,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":117,"pkt":"ePiC0\/vCAMDKkVoBCABFAABnuBlAAPMG8qk0VdGPrBAq2AG7llOp3ME7t0zq+4AYAHbPRAAAAQEICm3lC6gA9osBFAMDAAEBFgMDAChWudD8\/Y9J6iJCqyx9UWDG+p1Ub4eVKBZ3gW7Vx+dmvGpgw45iiD\/j","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1306{"flow_id":156,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":732,"pkt":"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","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+1307{"flow_id":156,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":732,"pkt":"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","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":157,"flow_packet_id":1,"flow_first_seen":1490976196840,"flow_last_seen":1490976196840,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp"}
+0422{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":77,"pkt":"AMDKkaPvePiC0\/vCCABFAAA\/WmdAAEARM02sECrYrBAqAQqTADUAK8ZJ2BYBAAABAAAAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":157,"flow_packet_id":1,"flow_first_seen":1490976196840,"flow_last_seen":1490976196840,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1225{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":153,"flow_packet_id":255,"flow_first_seen":1490976195984,"flow_last_seen":1490976196843,"flow_tot_l4_data_len":236993,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":929,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AmazonVideo","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images-na.ssl-images-amazon.com","server_names":"images-na.ssl-images-amazon.com,images-eu.ssl-images-amazon.com,images-fe.ssl-images-amazon.com,m.media-amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=Images-na.ssl-images-amazon.com","alpn":"h2,http\/1.1","fingerprint":"39:3D:27:B3:4D:FA:B4:04:AB:48:7F:5C:CB:A9:9A:95:F5:22:2A:52"}}
+0441{"flow_id":157,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":93,"pkt":"ePiC0\/vCAMDKkaPvCABFAABP7ApAAEARoZmsECoBrBAq2AA1CpMAO2jR2BaBgAABAAEAAAAABmZscy1uYQZhbWF6b24DY29tAAABAAHADAABAAEAAAA7AARIFc55","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":157,"flow_packet_id":2,"flow_first_seen":1490976196840,"flow_last_seen":1490976196938,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":43,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Amazon","category":"Web"},"dns": {"query":"fls-na.amazon.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"72.21.206.121"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":158,"flow_packet_id":1,"flow_first_seen":1490976196942,"flow_last_seen":1490976196942,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976196,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA85QlAAEAGaDusECrYSBXOebn1AbuZi243AAAAAKAC\/\/8K4AAAAgQFtAQCCAoA9os+AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":158,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAwSYFAAOcGXM9IFc55rBAq2AG7ufUB00CKmYtuOHASH\/5wwgAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":158,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5QpAAEAGaE6sECrYSBXOebn1AbuZi244AdNAi1AQAVe7MwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_id":158,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD15QtAAEAGZ4CsECrYSBXOebn1AbuZi244AdNAi1AYAVcK3wAAFgMBAMgBAADEAwPgpEwF\/Xat48+4W37drUaLhGz9wRo+dbZ872q4eXXW7QAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAe0pKAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIqqoAHQAXABgKCgABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":158,"flow_packet_id":4,"flow_first_seen":1490976196942,"flow_last_seen":1490976197026,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":158,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo8eNAANsGwHRIFc55rBAq2AG7ufUB00CLmYtuOFAQARy7bgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":159,"flow_packet_id":1,"flow_first_seen":1490976197297,"flow_last_seen":1490976197297,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":74,"pkt":"AMDKkaPvePiC0\/vCCABFAAA8At9AAEAGSmasECrYSBXOebn2AbvarIm+AAAAAKAC\/\/+uEwAAAgQFtAQCCAoA9othAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_id":158,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD15QxAAEAGZ3+sECrYSBXOebn1AbuZi244AdNAi1AYAVcK3wAAFgMBAMgBAADEAwPgpEwF\/Xat48+4W37drUaLhGz9wRo+dbZ872q4eXXW7QAAIOrqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAe0pKAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIqqoAHQAXABgKCgABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":159,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":62,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAw5DlAAOcGwhZIFc55rBAq2AG7ufYaDpo72qyJv3ASH\/6iLAAAAgQFtAEDAwY=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":159,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuBAAEAGSnmsECrYSBXOebn2AbvarIm\/Gg6aPFAQAVfsnQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_id":159,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":259,"pkt":"AMDKkaPvePiC0\/vCCABFAAD1AuFAAEAGSausECrYSBXOebn2AbvarIm\/Gg6aPFAYAVf7IAAAFgMBAMgBAADEAwOvXx4qoD9hGvfdVqZ\/Da8Sic0\/mG13oBFGNV7wDdZlEgAAIKqqzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAexoaAAD\/AQABAAAAABYAFAAAEWZscy1uYS5hbWF6b24uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIWloAHQAXABgqKgABAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":159,"flow_packet_id":4,"flow_first_seen":1490976197297,"flow_last_seen":1490976197357,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":225,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":158,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAo8eRAANsGwHNIFc55rBAq2AG7ufUB00CLmYtvBVAQASy6kQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":158,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":158,"flow_packet_id":8,"flow_first_seen":1490976196942,"flow_last_seen":1490976197363,"flow_tot_l4_data_len":2058,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2356{"flow_id":158,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":158,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1158{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":158,"flow_packet_id":10,"flow_first_seen":1490976196942,"flow_last_seen":1490976197363,"flow_tot_l4_data_len":5018,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":501,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}}
+1254{"flow_id":158,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":688,"pkt":"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","pkt_caplen":688,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":158,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5Q1AAEAGaEusECrYSBXOebn1AbuZi28FAdNGP1AQAWK0pwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":158,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5Q5AAEAGaEqsECrYSBXOebn1AbuZi28FAdNL81AQAW2u6AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":158,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5Q9AAEAGaEmsECrYSBXOebn1AbuZi28FAdNRp1AQAXmpKAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":158,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAo5RBAAEAGaEisECrYSBXOebn1AbuZi28FAdNUIVAQAYSmowAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":159,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoFXlAANsGnN9IFc55rBAq2AG7ufYaDpo82qyJv1AQARzs2AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":159,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":60,"pkt":"ePiC0\/vCAMDKkVoBCABFAAAoFXpAANsGnN5IFc55rBAq2AG7ufYaDpo82qyKjFAQASzr+wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":159,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":1514,"pkt":"ePiC0\/vCAMDKkVoBCABFAAXcFXtAANsGlylIFc55rBAq2AG7ufYaDpo82qyKjFAQASwiRAAAFgMDAGwCAABoAwO5WKdwm7z7kCLhq0qcFlDEutB5z\/OteruJnxh3pbdF8iCRdsiwRX7lBuKi2xkvVBvsi\/pEkh+mqwTu4hSpvMh0GcAvAAAg\/wEAAQAACwAEAwABAgAFAAAAEAALAAkIaHR0cC8xLjEWAwMLbwsAC2sAC2gABiYwggYiMIIFCqADAgECAhAjXKYxTs1ErLy+l509p0IQMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEvMC0GA1UEAxMmU3ltYW50ZWMgQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzQwHhcNMTcwMTA3MDAwMDAwWhcNMTgwMTMwMjM1OTU5WjBrMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwHU2VhdHRsZTEZMBcGA1UECgwQQW1hem9uLmNvbSwgSW5jLjEaMBgGA1UEAwwRZmxzLW5hLmFtYXpvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiX1uuFeHp7s\/u9RJVeIg7pSJGX42DFxgePcypEXRXU1o3cArZybBO2C5Lpg6GM3f45K4KToO0khIXQJB7mXH4bbbQ3+YNFdt7793pBUrodbhy1vNPfwwdBaxsqZ6o5AMBkbpsaSUOdcoTvF9z7DiYKtABRBdPFplNooNjVCUNw9hfksqkbBfzmRXOVJUe6FB2TYGtc1mXHHxQSxvyBoGKYrbiWmhKRKN2oU7shNkGGr+2AY1qqKK5nRLcdy57snSkPzc1VrU7kChpo1TaC6Boi5W9qzCYG13onxMu6WbKte80fZF9+vPs9N9E66H+HyD7t7ZkEmtZMIt4ZpLRyDj9AgMBAAGjggKtMIICqTBaBgNVHREEUzBRghBmbHMtbmEuYW1hem9uLmNhghFmbHMtbmEuYW1hem9uLmNvbYIUZmxzLW5hLmFtYXpvbi5jb20uYnKCFGZscy1uYS5hbWF6b24uY29tLm14MAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFZeQ7n1QAABAMARzBFAiEAyqHpuySuZQoGcM+I+Z0wX00rBtbjPPh\/qzCzZAyUhAoCIAhBWQVD0U3G8MO5dyAwrlvYf2mmJVOHUcCx971NZg0sAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFZeQ7oJwAABAMASDBGAiEA\/RAOoLROyik62vKihf3Zx1TBs1KxISOTjmjnjZrbf64CIQDPCRXOcglmhnaH9koY+cdNR\/1ozx5g78hwrDg9pc0RtzANBgkqhkiG9w0BAQsFAAOCAQEAoKU0Dbk5SCaAT6\/D0vE=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":159,"flow_packet_id":7,"flow_first_seen":1490976197297,"flow_last_seen":1490976197532,"flow_tot_l4_data_len":1833,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2356{"flow_id":159,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":159,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1157{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":159,"flow_packet_id":9,"flow_first_seen":1490976197297,"flow_last_seen":1490976197532,"flow_tot_l4_data_len":4793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":532,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fls-na.amazon.com","server_names":"fls-na.amazon.ca,fls-na.amazon.com,fls-na.amazon.com.br,fls-na.amazon.com.mx","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"159d46e54a2c066ef95e656fdf034e1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=Washington, L=Seattle, O=Amazon.com, Inc., CN=fls-na.amazon.com","alpn":"h2,http\/1.1","fingerprint":"2F:16:23:0F:F8:49:12:18:49:55:48:DA:E6:59:D9:B3:BB:0E:41:8A"}}
+1252{"flow_id":159,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":688,"pkt":"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","pkt_caplen":688,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":159,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuJAAEAGSnesECrYSBXOebn2AbvarIqMGg6f8FAQAWLmEQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":159,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuNAAEAGSnasECrYSBXOebn2AbvarIqMGg6lpFAQAW3gUgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":159,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuRAAEAGSnWsECrYSBXOebn2AbvarIqMGg6rWFAQAXnakgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":159,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":54,"pkt":"AMDKkaPvePiC0\/vCCABFAAAoAuVAAEAGSnSsECrYSBXOebn2AbvarIqMGg6t0lAQAYTYDQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_id":159,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","pkt_oversize":false,"pkt_ts":1490976197,"pkt_len":180,"pkt":"AMDKkaPvePiC0\/vCCABFAACmAuZAAEAGSfWsECrYSBXOebn2AbvarIqMGg6t0lAYAYRNaAAAFgMDAEYQAABCQQQJZBnvJnWA+MuEoBN0+HrOeSGGwWp\/lMUBpYesnGyEe8+EwOD1buwoY9PbYMqcEE2yeBvFpzQGBjY0\/Akn28BLFAMDAAEBFgMDACgAAAAAAAAAAKKmKckizYCC0IOZuaIZIUHBw\/f7WqAMKNzoOZNBC00Z","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":26,"flow_packet_id":2,"flow_first_seen":1490976041150,"flow_last_seen":1490976041151,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":54886,"dst_port":53,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":138,"flow_packet_id":18,"flow_first_seen":1490976177116,"flow_last_seen":1490976177850,"flow_tot_l4_data_len":6964,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":386,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50796,"dst_port":443,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":139,"flow_packet_id":25,"flow_first_seen":1490976177116,"flow_last_seen":1490976187290,"flow_tot_l4_data_len":10035,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":401,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50797,"dst_port":443,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":140,"flow_packet_id":7,"flow_first_seen":1490976177116,"flow_last_seen":1490976195547,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50798,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":140,"flow_packet_id":7,"flow_first_seen":1490976177116,"flow_last_seen":1490976195547,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50798,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":141,"flow_packet_id":37,"flow_first_seen":1490976177276,"flow_last_seen":1490976187754,"flow_tot_l4_data_len":13563,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":366,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50799,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":142,"flow_packet_id":17,"flow_first_seen":1490976186164,"flow_last_seen":1490976186790,"flow_tot_l4_data_len":5520,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":324,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":50800,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":125,"flow_packet_id":51,"flow_first_seen":1490976139642,"flow_last_seen":1490976140773,"flow_tot_l4_data_len":30946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":606,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51992,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":126,"flow_packet_id":26,"flow_first_seen":1490976139643,"flow_last_seen":1490976140772,"flow_tot_l4_data_len":13670,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":525,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51993,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":127,"flow_packet_id":21,"flow_first_seen":1490976139643,"flow_last_seen":1490976140745,"flow_tot_l4_data_len":8913,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":424,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51994,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":128,"flow_packet_id":47,"flow_first_seen":1490976139643,"flow_last_seen":1490976140773,"flow_tot_l4_data_len":32039,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":681,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51995,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":129,"flow_packet_id":28,"flow_first_seen":1490976139643,"flow_last_seen":1490976140773,"flow_tot_l4_data_len":14771,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":527,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51996,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":130,"flow_packet_id":30,"flow_first_seen":1490976139643,"flow_last_seen":1490976140781,"flow_tot_l4_data_len":16797,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":559,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.63.56","src_port":51997,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":2,"flow_packet_id":2,"flow_first_seen":1490976023264,"flow_last_seen":1490976023264,"flow_tot_l4_data_len":646,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0422{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":57,"flow_packet_id":2,"flow_first_seen":1490976055356,"flow_last_seen":1490976180796,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"224.0.0.1","l4_proto":2}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":146,"flow_packet_id":21,"flow_first_seen":1490976187511,"flow_last_seen":1490976190310,"flow_tot_l4_data_len":9629,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":458,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":38757,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":144,"flow_packet_id":33,"flow_first_seen":1490976186884,"flow_last_seen":1490976197347,"flow_tot_l4_data_len":16171,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":490,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.23.94","src_port":44912,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":124,"flow_packet_id":41,"flow_first_seen":1490976136930,"flow_last_seen":1490976140745,"flow_tot_l4_data_len":14534,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40871,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":131,"flow_packet_id":23,"flow_first_seen":1490976142629,"flow_last_seen":1490976148981,"flow_tot_l4_data_len":4083,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":177,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.253","src_port":40878,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":13,"flow_packet_id":2,"flow_first_seen":1490976027958,"flow_last_seen":1490976030758,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","l4_proto":"icmp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":8,"flow_packet_id":2,"flow_first_seen":1490976027514,"flow_last_seen":1490976027560,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":42,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":53188,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":113,"flow_packet_id":2,"flow_first_seen":1490976115835,"flow_last_seen":1490976115901,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":28614,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":74,"flow_packet_id":24,"flow_first_seen":1490976076042,"flow_last_seen":1490976177233,"flow_tot_l4_data_len":4002,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":37113,"dst_port":443,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":158,"flow_packet_id":24,"flow_first_seen":1490976196942,"flow_last_seen":1490976198168,"flow_tot_l4_data_len":11559,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47605,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":159,"flow_packet_id":28,"flow_first_seen":1490976197297,"flow_last_seen":1490976198043,"flow_tot_l4_data_len":9624,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":343,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"72.21.206.121","src_port":47606,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":72,"flow_packet_id":23,"flow_first_seen":1490976071392,"flow_last_seen":1490976176431,"flow_tot_l4_data_len":6144,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":267,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":59698,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":20,"flow_packet_id":2,"flow_first_seen":1490976031581,"flow_last_seen":1490976031687,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41030,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":3,"flow_packet_id":1,"flow_first_seen":1490976023267,"flow_last_seen":1490976023267,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.1","dst_ip":"172.16.42.216","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":102,"flow_packet_id":2,"flow_first_seen":1490976107217,"flow_last_seen":1490976107359,"flow_tot_l4_data_len":114,"flow_min_l4_data_len":49,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14476,"dst_port":53,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":152,"flow_packet_id":30,"flow_first_seen":1490976195983,"flow_last_seen":1490976196942,"flow_tot_l4_data_len":14926,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":497,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41912,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":153,"flow_packet_id":350,"flow_first_seen":1490976195984,"flow_last_seen":1490976198040,"flow_tot_l4_data_len":261612,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":747,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41913,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":154,"flow_packet_id":35,"flow_first_seen":1490976195985,"flow_last_seen":1490976196943,"flow_tot_l4_data_len":16954,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":484,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.84.62.115","src_port":41914,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":137,"flow_packet_id":2,"flow_first_seen":1490976177026,"flow_last_seen":1490976177105,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4312,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":11,"flow_packet_id":2,"flow_first_seen":1490976027724,"flow_last_seen":1490976027725,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":10462,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":6,"flow_packet_id":2,"flow_first_seen":1490976024847,"flow_last_seen":1490976024848,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":55619,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":39,"flow_packet_id":2,"flow_first_seen":1490976043611,"flow_last_seen":1490976043811,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":43,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":43350,"dst_port":53,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":148,"flow_packet_id":65,"flow_first_seen":1490976195529,"flow_last_seen":1490976198776,"flow_tot_l4_data_len":36892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":567,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":41828,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":1,"flow_packet_id":2,"flow_first_seen":1490976022741,"flow_last_seen":1490976022741,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0433{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":0,"flow_packet_id":2,"flow_first_seen":1490976022731,"flow_last_seen":1490976022731,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ffd3:fbc2","l4_proto":"icmp6"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":19,"flow_packet_id":29,"flow_first_seen":1490976030894,"flow_last_seen":1490976194743,"flow_tot_l4_data_len":14473,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":499,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.22.185","src_port":53682,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":132,"flow_packet_id":20,"flow_first_seen":1490976150029,"flow_last_seen":1490976164211,"flow_tot_l4_data_len":3390,"flow_min_l4_data_len":20,"flow_max_l4_data_len":718,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45750,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":133,"flow_packet_id":21,"flow_first_seen":1490976158680,"flow_last_seen":1490976164214,"flow_tot_l4_data_len":3261,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45751,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":107,"flow_packet_id":2,"flow_first_seen":1490976114879,"flow_last_seen":1490976114880,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":20922,"dst_port":53,"l4_proto":"udp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":136,"flow_packet_id":18,"flow_first_seen":1490976169531,"flow_last_seen":1490976175920,"flow_tot_l4_data_len":3271,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":45752,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":143,"flow_packet_id":2,"flow_first_seen":1490976186818,"flow_last_seen":1490976186879,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":8669,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":68,"flow_packet_id":2,"flow_first_seen":1490976071312,"flow_last_seen":1490976071389,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":25081,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":151,"flow_packet_id":2,"flow_first_seen":1490976195921,"flow_last_seen":1490976195980,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":57,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4612,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":145,"flow_packet_id":2,"flow_first_seen":1490976187242,"flow_last_seen":1490976187508,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":59908,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":17,"flow_packet_id":19,"flow_first_seen":1490976029756,"flow_last_seen":1490976171313,"flow_tot_l4_data_len":5432,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":285,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.0","src_port":33556,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":135,"flow_packet_id":19,"flow_first_seen":1490976165062,"flow_last_seen":1490976175921,"flow_tot_l4_data_len":3753,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1310,"flow_avg_l4_data_len":197,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.94.232.134","src_port":39750,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":134,"flow_packet_id":2,"flow_first_seen":1490976164994,"flow_last_seen":1490976165058,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":42,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":64073,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":147,"flow_packet_id":2,"flow_first_seen":1490976195484,"flow_last_seen":1490976195524,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":14934,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":157,"flow_packet_id":2,"flow_first_seen":1490976196840,"flow_last_seen":1490976196938,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":43,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":2707,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":97,"flow_packet_id":2,"flow_first_seen":1490976093238,"flow_last_seen":1490976093355,"flow_tot_l4_data_len":135,"flow_min_l4_data_len":48,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":41639,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":155,"flow_packet_id":19,"flow_first_seen":1490976196016,"flow_last_seen":1490976196282,"flow_tot_l4_data_len":1903,"flow_min_l4_data_len":20,"flow_max_l4_data_len":617,"flow_avg_l4_data_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.28.178","src_port":58048,"dst_port":443,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":64,"flow_packet_id":56,"flow_first_seen":1490976067968,"flow_last_seen":1490976168824,"flow_tot_l4_data_len":27953,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":499,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"54.239.29.146","src_port":41691,"dst_port":443,"l4_proto":"tcp"}
+0448{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":22,"flow_packet_id":2,"flow_first_seen":1490976032763,"flow_last_seen":1490976032763,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0446{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":4,"flow_packet_id":6,"flow_first_seen":1490976023731,"flow_last_seen":1490976031750,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7af8:82ff:fed3:fbc2","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":117,"flow_packet_id":2,"flow_first_seen":1490976133936,"flow_last_seen":1490976134135,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":47,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":4920,"dst_port":53,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":150,"flow_packet_id":19,"flow_first_seen":1490976195633,"flow_last_seen":1490976195989,"flow_tot_l4_data_len":7206,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":379,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"216.58.194.78","src_port":49067,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":34,"flow_packet_id":2,"flow_first_seen":1490976041806,"flow_last_seen":1490976041938,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52077,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":94,"flow_packet_id":2,"flow_first_seen":1490976090796,"flow_last_seen":1490976090982,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":53,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":35726,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":33,"flow_packet_id":2,"flow_first_seen":1490976041770,"flow_last_seen":1490976041866,"flow_tot_l4_data_len":146,"flow_min_l4_data_len":65,"flow_max_l4_data_len":81,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":21391,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":12,"flow_packet_id":7,"flow_first_seen":1490976027733,"flow_last_seen":1490976027826,"flow_tot_l4_data_len":511,"flow_min_l4_data_len":32,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":35540,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":23,"flow_packet_id":2,"flow_first_seen":1490976035502,"flow_last_seen":1490976035549,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":66,"flow_max_l4_data_len":162,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":23559,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":14,"flow_packet_id":2,"flow_first_seen":1490976029184,"flow_last_seen":1490976029244,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":48155,"dst_port":53,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":156,"flow_packet_id":62,"flow_first_seen":1490976196223,"flow_last_seen":1490976196880,"flow_tot_l4_data_len":26834,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":432,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.143","src_port":38483,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":7,"flow_packet_id":7,"flow_first_seen":1490976024857,"flow_last_seen":1490976024994,"flow_tot_l4_data_len":511,"flow_min_l4_data_len":32,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.217.9.142","src_port":60246,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":30,"flow_packet_id":8,"flow_first_seen":1490976041428,"flow_last_seen":1490976168813,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40200,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":30,"flow_packet_id":8,"flow_first_seen":1490976041428,"flow_last_seen":1490976168813,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40200,"dst_port":8080,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":32,"flow_packet_id":8,"flow_first_seen":1490976041680,"flow_last_seen":1490976168960,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":32,"flow_packet_id":8,"flow_first_seen":1490976041680,"flow_last_seen":1490976168960,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40202,"dst_port":8080,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":18,"flow_packet_id":2,"flow_first_seen":1490976030681,"flow_last_seen":1490976030890,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":7358,"dst_port":53,"l4_proto":"udp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":82,"flow_packet_id":7,"flow_first_seen":1490976085883,"flow_last_seen":1490976149040,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40242,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"HTTP_Proxy","category":"Web"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":82,"flow_packet_id":7,"flow_first_seen":1490976085883,"flow_last_seen":1490976149040,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"10.201.126.241","src_port":40242,"dst_port":8080,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":98,"flow_packet_id":41,"flow_first_seen":1490976093358,"flow_last_seen":1490976194991,"flow_tot_l4_data_len":8165,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":199,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"176.32.101.52","src_port":44001,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":5,"flow_packet_id":2,"flow_first_seen":1490976024793,"flow_last_seen":1490976024844,"flow_tot_l4_data_len":138,"flow_min_l4_data_len":55,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":3440,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":9,"flow_packet_id":2,"flow_first_seen":1490976027522,"flow_last_seen":1490976027523,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":52603,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":63,"flow_packet_id":2,"flow_first_seen":1490976067916,"flow_last_seen":1490976067965,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":60804,"dst_port":53,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":10,"flow_packet_id":17,"flow_first_seen":1490976027567,"flow_last_seen":1490976028006,"flow_tot_l4_data_len":2009,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"173.194.223.188","src_port":42878,"dst_port":5228,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":61,"flow_packet_id":2,"flow_first_seen":1490976064333,"flow_last_seen":1490976064448,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":44475,"dst_port":53,"l4_proto":"udp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":15,"flow_packet_id":38,"flow_first_seen":1490976029248,"flow_last_seen":1490976152630,"flow_tot_l4_data_len":13618,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"52.85.209.197","src_port":55242,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":149,"flow_packet_id":2,"flow_first_seen":1490976195545,"flow_last_seen":1490976195628,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":52,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":40425,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng","flow_id":16,"flow_packet_id":2,"flow_first_seen":1490976029669,"flow_last_seen":1490976029753,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":50,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.42.216","dst_ip":"172.16.42.1","src_port":19967,"dst_port":53,"l4_proto":"udp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/alexa-app.pcapng"}
diff --git a/tests/result/nDPId_among_us.pcap.txt b/tests/result/nDPId_among_us.pcap.txt
new file mode 100644
index 000000000..5de28a47f
--- /dev/null
+++ b/tests/result/nDPId_among_us.pcap.txt
@@ -0,0 +1,6 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/among_us.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/among_us.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.105.251.170","src_port":64260,"dst_port":22023,"l4_proto":"udp"}
+0383{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/among_us.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":57,"pkt":"eJS0JASgYDjgxTWgCABFAAArJhEAAH8RqpAKAAABrGn7qvsEVgcAF2toCAABAIDZAgMGQUFBQUFB","pkt_caplen":57,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/among_us.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.105.251.170","src_port":64260,"dst_port":22023,"l4_proto":"udp","ndpi": {"proto":"AmongUs","category":"Game"}}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/among_us.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.105.251.170","src_port":64260,"dst_port":22023,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/among_us.pcap"}
diff --git a/tests/result/nDPId_amqp.pcap.txt b/tests/result/nDPId_amqp.pcap.txt
new file mode 100644
index 000000000..d33294e33
--- /dev/null
+++ b/tests/result/nDPId_amqp.pcap.txt
@@ -0,0 +1,56 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1490904166118,"flow_last_seen":1490904166118,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44205,"dst_port":5672,"l4_proto":"tcp"}
+0452{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":107,"pkt":"AAAAAAAAAAAAAAAACABFAABdxi1AAEAGdWt\/AAABfwABAaytFihPdGXjNxAmEoAYAV7\/UQAAAQEICgC+1cIAvtPNAQABAAAAIQA8ACgAAAhjZWxlcnlldhB3b3JrZXIuaGVhcnRiZWF0AM4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1490904166118,"flow_last_seen":1490904166118,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44205,"dst_port":5672,"l4_proto":"tcp","ndpi": {"proto":"AMQP","category":"RPC"}}
+0394{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puJAAEAGlN9\/AAEBfwAAARYorK03ECYST3RmDIAQSfD\/KAAAAQEICgC+1cIAvtXC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":162,"pkt":"AAAAAAAAAAAAAAAACABFAACUxi5AAEAGdTN\/AAABfwABAaytFihPdGYMNxAmEoAYAV7\/iAAAAQEICgC+1cIAvtXCAgABAAAAWAA8AAAAAAAAAAABJ\/gAEGFwcGxpY2F0aW9uL2pzb24FdXRmLTgAAAAtCGhvc3RuYW1lUwAAAB9jZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tAgDO","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puNAAEAGlN5\/AAEBfwAAARYorK03ECYST3RmbIAQSfD\/KAAAAQEICgC+1cIAvtXC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":369,"pkt":"AAAAAAAAAAAAAAAACABFAAFjxi9AAEAGdGN\/AAABfwABAaytFihPdGZsNxAmEoAYAV4AWAAAAQEICgC+1cIAvtXCAwABAAABJ3sic3dfc3lzIjogIkxpbnV4IiwgImNsb2NrIjogMzkxNzI1LCAidGltZXN0YW1wIjogMTQ5MDkwNDE2Ni4xMTg1ODMsICJob3N0bmFtZSI6ICJjZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tIiwgInBpZCI6IDE4OTQsICJzd192ZXIiOiAiMy4xLjE4IiwgInV0Y29mZnNldCI6IDAsICJsb2FkYXZnIjogWzAuNzgsIDAuNTYsIDAuNDJdLCAicHJvY2Vzc2VkIjogMTEzOTQyLCAiYWN0aXZlIjogMCwgImZyZXEiOiAyLjAsICJ0eXBlIjogIndvcmtlci1oZWFydGJlYXQiLCAic3dfaWRlbnQiOiAicHktY2VsZXJ5In3O","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puRAAEAGlN1\/AAEBfwAAARYorK03ECYST3Rnm4AQSe7\/KAAAAQEICgC+1cIAvtXC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1490904166119,"flow_last_seen":1490904166119,"flow_tot_l4_data_len":480,"flow_min_l4_data_len":480,"flow_max_l4_data_len":480,"flow_avg_l4_data_len":480,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.1.1","dst_ip":"127.0.0.1","src_port":5672,"dst_port":44204,"l4_proto":"tcp"}
+0995{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":514,"pkt":"AAAAAAAAAAAAAAAACABFAAH0AQRAAEAGOP5\/AAEBfwAAARYorKyekqFfoHNnjIAYAXcA6QAAAQEICgC+1cIAvtPXAQADAAAAKQA8ADwBMwAAAAAAAGF2AAhjZWxlcnlldhB3b3JrZXIuaGVhcnRiZWF0zgIAAwAAAFgAPAAAAAAAAAAAASf4ABBhcHBsaWNhdGlvbi9qc29uBXV0Zi04AAAALQhob3N0bmFtZVMAAAAfY2VsZXJ5QHRlc3QuY29nbml0b25ldHdvcmtzLmNvbQIAzgMAAwAAASd7InN3X3N5cyI6ICJMaW51eCIsICJjbG9jayI6IDM5MTcyNSwgInRpbWVzdGFtcCI6IDE0OTA5MDQxNjYuMTE4NTgzLCAiaG9zdG5hbWUiOiAiY2VsZXJ5QHRlc3QuY29nbml0b25ldHdvcmtzLmNvbSIsICJwaWQiOiAxODk0LCAic3dfdmVyIjogIjMuMS4xOCIsICJ1dGNvZmZzZXQiOiAwLCAibG9hZGF2ZyI6IFswLjc4LCAwLjU2LCAwLjQyXSwgInByb2Nlc3NlZCI6IDExMzk0MiwgImFjdGl2ZSI6IDAsICJmcmVxIjogMi4wLCAidHlwZSI6ICJ3b3JrZXItaGVhcnRiZWF0IiwgInN3X2lkZW50IjogInB5LWNlbGVyeSJ9zg==","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904166,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMNAAEAGHv9\/AAABfwABAaysFiigc2eMnpKjH4AQDjX\/KAAAAQEICgC+1cIAvtXC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":107,"pkt":"AAAAAAAAAAAAAAAACABFAABdxjBAAEAGdWh\/AAABfwABAaytFihPdGebNxAmEoAYAV7\/UQAAAQEICgC+17YAvtXCAQABAAAAIQA8ACgAAAhjZWxlcnlldhB3b3JrZXIuaGVhcnRiZWF0AM4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puVAAEAGlNx\/AAEBfwAAARYorK03ECYST3RnxIAQSe7\/KAAAAQEICgC+17YAvte2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":162,"pkt":"AAAAAAAAAAAAAAAACABFAACUxjFAAEAGdTB\/AAABfwABAaytFihPdGfENxAmEoAYAV7\/iAAAAQEICgC+17YAvte2AgABAAAAWAA8AAAAAAAAAAABJ\/gAEGFwcGxpY2F0aW9uL2pzb24FdXRmLTgAAAAtCGhvc3RuYW1lUwAAAB9jZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tAgDO","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puZAAEAGlNt\/AAEBfwAAARYorK03ECYST3RoJIAQSe7\/KAAAAQEICgC+17YAvte2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":369,"pkt":"AAAAAAAAAAAAAAAACABFAAFjxjJAAEAGdGB\/AAABfwABAaytFihPdGgkNxAmEoAYAV4AWAAAAQEICgC+17YAvte2AwABAAABJ3sic3dfc3lzIjogIkxpbnV4IiwgImNsb2NrIjogMzkxNzI3LCAidGltZXN0YW1wIjogMTQ5MDkwNDE2OC4xMjA1NzYsICJob3N0bmFtZSI6ICJjZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tIiwgInBpZCI6IDE4OTQsICJzd192ZXIiOiAiMy4xLjE4IiwgInV0Y29mZnNldCI6IDAsICJsb2FkYXZnIjogWzAuNzgsIDAuNTYsIDAuNDJdLCAicHJvY2Vzc2VkIjogMTEzOTQyLCAiYWN0aXZlIjogMCwgImZyZXEiOiAyLjAsICJ0eXBlIjogIndvcmtlci1oZWFydGJlYXQiLCAic3dfaWRlbnQiOiAicHktY2VsZXJ5In3O","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0pudAAEAGlNp\/AAEBfwAAARYorK03ECYST3RpU4AQSe7\/KAAAAQEICgC+17YAvte2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0996{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904168,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMRAAEAGHv5\/AAABfwABAaysFiigc2eMnpKk34AQDjX\/KAAAAQEICgC+17YAvte2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490904169152,"flow_last_seen":1490904169152,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44206,"dst_port":5672,"l4_proto":"tcp"}
+0440{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":97,"pkt":"AAAAAAAAAAAAAAAACABFAABTPztAAEAG\/Gd\/AAABfwABAayuFiiKm04N2t+K4IAYAV7\/RwAAAQEICgC+2LgAvtO2AQABAAAAFwA8ACgAAAdkZWZhdWx0B3Rhc2tzLiMAzg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1490904169152,"flow_last_seen":1490904169152,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44206,"dst_port":5672,"l4_proto":"tcp","ndpi": {"proto":"AMQP","category":"RPC"}}
+0395{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sFAAEAGZQB\/AAEBfwAAARYorK7a34rgiptOLIAQDAj\/KAAAAQEICgC+2LgAvti4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0586{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAPzxAAEAG+\/l\/AAABfwABAayuFiiKm04s2t+K4IAYAV7\/tAAAAQEICgC+2LgAvti4AgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkZjMzYWFlMjctNjlmNC00ZjQ4LWIwYmMtMmVmZGM0NTVjMTI4JGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sJAAEAGZP9\/AAEBfwAAARYorK7a34rgiptOuIAQDAj\/KAAAAQEICgC+2LgAvti4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":312,"pkt":"AAAAAAAAAAAAAAAACABFAAEqPz1AAEAG+45\/AAABfwABAayuFiiKm0642t+K4IAYAV4AHwAAAQEICgC+2LgAvti4AwABAAAA7oACfXEBKFUHZXhwaXJlc3ECTlUDdXRjcQOIVQRhcmdzcQRdcQVYAwAAADI1OXEGYVUFY2hvcmRxB05VCWNhbGxiYWNrc3EITlUIZXJyYmFja3NxCU5VB3Rhc2tzZXRxCk5VAmlkcQtVJGYzM2FhZTI3LTY5ZjQtNGY0OC1iMGJjLTJlZmRjNDU1YzEyOHEMVQdyZXRyaWVzcQ1LAFUEdGFza3EOVR9Db2duaXRvQ29yZS50YXNrcy5leGVjdXRlUG9saWN5cQ9VCXRpbWVsaW1pdHEQTk6GVQNldGFxEU5VBmt3YXJnc3ESfXETdS7O","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sNAAEAGZP5\/AAEBfwAAARYorK7a34rgiptProAQDAj\/KAAAAQEICgC+2LgAvti4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0964{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":491,"pkt":"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","pkt_caplen":491,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMVAAEAGHv1\/AAABfwABAaysFiigc2eMnpKmiIAQDjX\/KAAAAQEICgC+2LgAvti4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":104,"pkt":"AAAAAAAAAAAAAAAACABFAABaxjNAAEAGdWh\/AAABfwABAaytFihPdGlTNxAmEoAYAV7\/TgAAAQEICgC+2LgAvte2AQABAAAAHgA8ACgAAAhjZWxlcnlldg10YXNrLnJlY2VpdmVkAM4=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0puhAAEAGlNl\/AAEBfwAAARYorK03ECYST3RpeYAQSe7\/KAAAAQEICgC+2LgAvti4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":162,"pkt":"AAAAAAAAAAAAAAAACABFAACUxjRAAEAGdS1\/AAABfwABAaytFihPdGl5NxAmEoAYAV7\/iAAAAQEICgC+2LgAvti4AgABAAAAWAA8AAAAAAAAAAABQfgAEGFwcGxpY2F0aW9uL2pzb24FdXRmLTgAAAAtCGhvc3RuYW1lUwAAAB9jZWxlcnlAdGVzdC5jb2duaXRvbmV0d29ya3MuY29tAgDO","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":87,"pkt":"AAAAAAAAAAAAAAAACABFAABJHMZAAEAGHud\/AAABfwABAaysFiigc2eMnpKmiIAYDjX\/PQAAAQEICgC+2LkAvti4AQABAAAADQA8AFAAAAAAAAG9FwDO","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":1,"flow_packet_id":7,"flow_first_seen":1490904166119,"flow_last_seen":1490904169156,"flow_tot_l4_data_len":1566,"flow_min_l4_data_len":32,"flow_max_l4_data_len":480,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.1.1","dst_ip":"127.0.0.1","src_port":5672,"dst_port":44204,"l4_proto":"tcp","ndpi": {"proto":"AMQP","category":"RPC"}}
+0395{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AQdAAEAGOrt\/AAEBfwAAARYorKyekqaIoHNnoYAQAXf\/KAAAAQEICgC+2LkAvti5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":97,"pkt":"AAAAAAAAAAAAAAAACABFAABTPz5AAEAG\/GR\/AAABfwABAayuFiiKm0+u2t+K4IAYAV7\/RwAAAQEICgC+2SYAvti4AQABAAAAFwA8ACgAAAdkZWZhdWx0B3Rhc2tzLiMAzg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sRAAEAGZP1\/AAEBfwAAARYorK7a34rgiptPzYAQDAj\/KAAAAQEICgC+2SYAvtkm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAPz9AAEAG+\/Z\/AAABfwABAayuFiiKm0\/N2t+K4IAYAV7\/tAAAAQEICgC+2SYAvtkmAgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkZWM1MGM2M2ItMmRjMC00OGE3LWI2OTctY2NmMmZmYTEzZjk0JGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sVAAEAGZPx\/AAEBfwAAARYorK7a34rgiptQWYAQDAj\/KAAAAQEICgC+2SYAvtkm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":312,"pkt":"AAAAAAAAAAAAAAAACABFAAEqP0BAAEAG+4t\/AAABfwABAayuFiiKm1BZ2t+K4IAYAV4AHwAAAQEICgC+2SYAvtkmAwABAAAA7oACfXEBKFUHZXhwaXJlc3ECTlUDdXRjcQOIVQRhcmdzcQRdcQVYAwAAADI2M3EGYVUFY2hvcmRxB05VCWNhbGxiYWNrc3EITlUIZXJyYmFja3NxCU5VB3Rhc2tzZXRxCk5VAmlkcQtVJGVjNTBjNjNiLTJkYzAtNDhhNy1iNjk3LWNjZjJmZmExM2Y5NHEMVQdyZXRyaWVzcQ1LAFUEdGFza3EOVR9Db2duaXRvQ29yZS50YXNrcy5leGVjdXRlUG9saWN5cQ9VCXRpbWVsaW1pdHEQTk6GVQNldGFxEU5VBmt3YXJnc3ESfXETdS7O","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sZAAEAGZPt\/AAEBfwAAARYorK7a34rgiptRT4AQDAj\/KAAAAQEICgC+2SYAvtkm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0964{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":491,"pkt":"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","pkt_caplen":491,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":87,"pkt":"AAAAAAAAAAAAAAAACABFAABJHMdAAEAGHuZ\/AAABfwABAaysFiigc2ehnpKoMYAYDjX\/PQAAAQEICgC+2ScAvtknAQABAAAADQA8AFAAAAAAAAG9GADO","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904169,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0AQlAAEAGOrl\/AAEBfwAAARYorKyekqgxoHNntoAQAXf\/KAAAAQEICgC+2ScAvtkn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0997{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":514,"pkt":"AAAAAAAAAAAAAAAACABFAAH0AQpAAEAGOPh\/AAEBfwAAARYorKyekqgxoHNntoAYAXcA6QAAAQEICgC+2asAvtknAQADAAAAKQA8ADwBMwAAAAAAAGF4AAhjZWxlcnlldhB3b3JrZXIuaGVhcnRiZWF0zgIAAwAAAFgAPAAAAAAAAAAAASf4ABBhcHBsaWNhdGlvbi9qc29uBXV0Zi04AAAALQhob3N0bmFtZVMAAAAfY2VsZXJ5QHRlc3QuY29nbml0b25ldHdvcmtzLmNvbQIAzgMAAwAAASd7InN3X3N5cyI6ICJMaW51eCIsICJjbG9jayI6IDM5MTczNSwgInRpbWVzdGFtcCI6IDE0OTA5MDQxNzAuMTIyNTgxLCAiaG9zdG5hbWUiOiAiY2VsZXJ5QHRlc3QuY29nbml0b25ldHdvcmtzLmNvbSIsICJwaWQiOiAxODk0LCAic3dfdmVyIjogIjMuMS4xOCIsICJ1dGNvZmZzZXQiOiAwLCAibG9hZGF2ZyI6IFswLjc4LCAwLjU2LCAwLjQyXSwgInByb2Nlc3NlZCI6IDExMzk0NCwgImFjdGl2ZSI6IDAsICJmcmVxIjogMi4wLCAidHlwZSI6ICJ3b3JrZXItaGVhcnRiZWF0IiwgInN3X2lkZW50IjogInB5LWNlbGVyeSJ9zg==","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":97,"pkt":"AAAAAAAAAAAAAAAACABFAABTP0FAAEAG\/GF\/AAABfwABAayuFiiKm1FP2t+K4IAYAV7\/RwAAAQEICgC+2a4AvtkmAQABAAAAFwA8ACgAAAdkZWZhdWx0B3Rhc2tzLiMAzg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA01sdAAEAGZPp\/AAEBfwAAARYorK7a34rgiptRboAQDAj\/KAAAAQEICgC+2a4Avtmu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":206,"pkt":"AAAAAAAAAAAAAAAACABFAADAP0JAAEAG+\/N\/AAABfwABAayuFiiKm1Fu2t+K4IAYAV7\/tAAAAQEICgC+2a4AvtmuAgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkNTRhOTE1NGEtMTZiNC00NGFkLTg5OWYtNmMzNjI5YzNiNGVlJGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0965{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":491,"pkt":"AAAAAAAAAAAAAAAACABFAAHdAQtAAEAGOQ5\/AAEBfwAAARYorKyekqnxoHNntoAYAXcA0gAAAQEICgC+2a4AvtknAQABAAAAHwA8ADwBNAAAAAAAAb0ZAAdkZWZhdWx0B3Rhc2tzLiPOAgABAAAAhAA8AAAAAAAAAAAA7v4AHmFwcGxpY2F0aW9uL3gtcHl0aG9uLXNlcmlhbGl6ZQZiaW5hcnkAAAAAAgAkNTRhOTE1NGEtMTZiNC00NGFkLTg5OWYtNmMzNjI5YzNiNGVlJGFiZjI3YmI1LTAxNDktM2RiZC1hMmRiLWQzNTcyYzMwOTc5MM4DAAEAAADugAJ9cQEoVQdleHBpcmVzcQJOVQN1dGNxA4hVBGFyZ3NxBF1xBVgDAAAAMjYycQZhVQVjaG9yZHEHTlUJY2FsbGJhY2tzcQhOVQhlcnJiYWNrc3EJTlUHdGFza3NldHEKTlUCaWRxC1UkNTRhOTE1NGEtMTZiNC00NGFkLTg5OWYtNmMzNjI5YzNiNGVlcQxVB3JldHJpZXNxDUsAVQR0YXNrcQ5VH0NvZ25pdG9Db3JlLnRhc2tzLmV4ZWN1dGVQb2xpY3lxD1UJdGltZWxpbWl0cRBOToZVA2V0YXERTlUGa3dhcmdzcRJ9cRN1Ls4=","pkt_caplen":491,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":66,"pkt":"AAAAAAAAAAAAAAAACABFAAA0HMhAAEAGHvp\/AAABfwABAaysFiigc2e2npKrmoAQDjX\/KAAAAQEICgC+2a4Avtmr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0965{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","pkt_oversize":false,"pkt_ts":1490904170,"pkt_len":491,"pkt":"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","pkt_caplen":491,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":1,"flow_packet_id":22,"flow_first_seen":1490904166119,"flow_last_seen":1490904170242,"flow_tot_l4_data_len":4278,"flow_min_l4_data_len":32,"flow_max_l4_data_len":480,"flow_avg_l4_data_len":194,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.1.1","dst_ip":"127.0.0.1","src_port":5672,"dst_port":44204,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":0,"flow_packet_id":108,"flow_first_seen":1490904166118,"flow_last_seen":1490904170243,"flow_tot_l4_data_len":10751,"flow_min_l4_data_len":32,"flow_max_l4_data_len":361,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44205,"dst_port":5672,"l4_proto":"tcp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap","flow_id":2,"flow_packet_id":30,"flow_first_seen":1490904169152,"flow_last_seen":1490904170195,"flow_tot_l4_data_len":3045,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":101,"midstream":1,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.1.1","src_port":44206,"dst_port":5672,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/amqp.pcap"}
diff --git a/tests/result/nDPId_android.pcap.txt b/tests/result/nDPId_android.pcap.txt
new file mode 100644
index 000000000..cc32666d9
--- /dev/null
+++ b/tests/result/nDPId_android.pcap.txt
@@ -0,0 +1,630 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1582454769772,"flow_last_seen":1582454769772,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"95.101.24.53","dst_ip":"192.168.2.17","src_port":443,"dst_port":50677,"l4_proto":"tcp"}
+0427{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454769,"pkt_len":90,"pkt":"xGGLNYKpxiwDYGpkCABFAABMMy4AADUGGCtfZRg1wKgCEQG7xfVNnd4qbhnKg4AYAUXNDgAAAQEICmx+XigR4ZkoFwMDABMwxZA0Xbk6ucnG2OFNZYAG8R1y","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454779631,"flow_last_seen":1582454779631,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":78,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":78,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50584,"l4_proto":"tcp"}
+0461{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454779,"pkt_len":112,"pkt":"xGGLNYKpxiwDYGpkCABFAgBirQcAAC4GWpAR+LBLwKgCEQG7xZj0WotEsqX09IAYBCokkgAAAQEIClsVyooR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8Hg==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454779,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAgBTrQgAAC4GWp4R+LBLwKgCEQG7xZj0WotysqX09IAZBCpyhAAAAQEIClsVyooR3+x3FQMDABoAAAAAAAAABZSZBhugqn7IvMs7ScmDJ6yQxA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454779,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQkAAC4GWnER+LBLwKgCEQG7xZj0WotEsqX09IAZBCq7DgAAAQEIClsVy7YR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454780,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQoAAC4GWnAR+LBLwKgCEQG7xZj0WotEsqX09IAZBCq4jgAAAQEIClsVzjYR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1582454780612,"flow_last_seen":1582454780612,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":78,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":78,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50580,"l4_proto":"tcp"}
+0464{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454780,"pkt_len":112,"pkt":"xGGLNYKpxiwDYGpkCABFAgBiArsAAC4GBN0R+LBLwKgCEQG7xZQAd+\/fhij6wYAYBTCNMgAAAQEIClsVzl8R3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8Q==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454780,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAgBTArwAAC4GBOsR+LBLwKgCEQG7xZQAd\/ANhij6wYAZBTCw2QAAAQEIClsVzl8R3+\/bFQMDABoAAAAAAAAACeuqoxCRLc0dnl7lMGJ\/SkF\/RQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454780,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAr0AAC4GBL4R+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTC0SwAAAQEIClsVz4YR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454781,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAr4AAC4GBL0R+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCx2wAAAQEIClsV0fYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454781,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQsAAC4GWm8R+LBLwKgCEQG7xZj0WotEsqX09IAZBCqzzQAAAQEIClsV0vcR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454782,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAr8AAC4GBLwR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCtGwAAAQEIClsV1rYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454784,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQwAAC4GWm4R+LBLwKgCEQG7xZj0WotEsqX09IAZBCqqTgAAAQEIClsV3HYR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454784313,"flow_last_seen":1582454784313,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0780{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454784,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDQAAP8RQnEAAAAA\/\/\/\/\/wBEAEMBNI1GAQEGAHhURwsAAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454784313,"flow_last_seen":1582454784313,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}}
+0506{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454785,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAsAAAC4GBLsR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCj2wAAAQEIClsV3\/YR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454786,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDUAAP8RQnAAAAAA\/\/\/\/\/wBEAEMBNI1EAQEGAHhURwsAAgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454787658,"flow_last_seen":1582454787658,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.185.10","dst_ip":"192.168.2.17","src_port":443,"dst_port":50702,"l4_proto":"tcp"}
+0440{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454787,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAgBThkMAADAGdqQR+LkKwKgCEQG7xg7EYLJptSIfH4AYBDV85QAAAQEIChoMpyQR4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454787,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0hkQAADAGdsQR+LkKwKgCEQG7xg7EYLKItSIfH4ARBDUyJQAAAQEIChoMpyQR4cyf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454788,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkUAADAGdqQR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDV7OQAAAQEIChoMqM8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454788,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkYAADAGdqMR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDV3uQAAAQEIChoMrE8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454789,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDYAAP8RQm8AAAAA\/\/\/\/\/wBEAEMBNI1BAQEGAHhURwsABQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454789,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQ0AAC4GWm0R+LBLwKgCEQG7xZj0WotEsqX09IAZBCqWjQAAAQEIClsV8DcR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454789,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAsEAAC4GBLoR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTCRmwAAAQEIClsV8jYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454790,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkcAADAGdqIR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDVw+QAAAQEIChoMsw8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454792980,"flow_last_seen":1582454792980,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1055{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454792,"pkt_len":552,"pkt":"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","pkt_caplen":552,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454792980,"flow_last_seen":1582454792980,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0780{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454793,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDcAAP8RQm4AAAAA\/\/\/\/\/wBEAEMBNI09AQEGAHhURwsACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454794,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkgAADAGdqER+LkKwKgCEQG7xg7EYLJptSIfH4AZBDVjuQAAAQEIChoMwE8R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454796360,"flow_last_seen":1582454796360,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0433{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454796,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIV+oAAEARnGrAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454796360,"flow_last_seen":1582454796360,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0502{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454799,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBrQ4AAC4GWmwR+LBLwKgCEQG7xZj0WotEsqX09IAZBCpwjQAAAQEIClsWFjcR3+x3FwMDACkAAAAAAAAABGgk1MfD1SR1H5v5Q6dSq6XAgQAjDJnQ9jro2uiXnku8HhUDAwAaAAAAAAAAAAWUmQYboKp+yLzLO0nJgyeskMQ=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454799,"pkt_len":143,"pkt":"xGGLNYKpxiwDYGpkCABFAACBAsIAAC4GBLkR+LBLwKgCEQG7xZQAd+\/fhij6wYAZBTBrmwAAAQEIClsWGDYR3+\/bFwMDACkAAAAAAAAACH\/oI1Kw++l3rtTYoEdnoXbMNGznM5xRQS6qcOaP89cv8RUDAwAaAAAAAAAAAAnrqqMQkS3NHZ5e5TBif0pBf0U=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454801,"pkt_len":97,"pkt":"xGGLNYKpxiwDYGpkCABFAABThkkAADAGdqAR+LkKwKgCEQG7xg7EYLJptSIfH4AZBDVIeQAAAQEIChoM248R4cyfFQMDABoAAAAAAAAAArlWa60ADWOMgYlfYrlhFGv+Kg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454802,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDgAAP8RQm0AAAAA\/\/\/\/\/wBEAEMBNI00AQEGAHhURwsAEgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454811,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDkAAP8RQmwAAAAA\/\/\/\/\/wBEAEMBNI0rAQEGAHhURwsAGwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454819,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDoAAP8RQmsAAAAA\/\/\/\/\/wBEAEMBNI0jAQEGAHhURwsAIwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+1056{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454823,"pkt_len":552,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAIavtMAAEARM6\/AqAIBwKgC\/0RcRFwCBr34eyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAzMzA0MDI2MjQwMTMxNjcxMTI3MTc3MTQ1ODMyOTcxNTM2ODg0ODIsICJkaXNwbGF5bmFtZSI6ICIiLCAibmFtZXNwYWNlcyI6IFsyNzUwMzcwNTYwLCA3ODUyNjYxNzcsIDE1MjYyNjMwNDUsIDEzMzg2NTkyMDEsIDE0ODE5MzM3LCA0ODEwNTkxNzYwLCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgOTk2MzA2MjE1LCA1MzAzMzAxMjQ4LCAyODUyMTYwNywgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgOTk0Njk3NzMsIDcwNzk2MzY2ODgsIDE3Njk2NDMwNywgMTI1NTQwNTY2LCAxMDQ3NDI4MTg5LCA0NzE2MTkwMDQ4LCA1NDY3MTYzMDg4LCAxMTk1MDQ0MDcxLCA5Njg1MzIyNCwgMTc2MDk5NjMsIDY0NzgzMDM0NDAsIDUxMTcwNjY0MiwgNjI5Nzk1NTE4NCwgMTQxNTYyMDM1MF19","pkt_caplen":552,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":1582454823653,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0425{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454823,"pkt_len":87,"pkt":"AQBeAAD72DBiVgAcCABFAABJmVsAAP8RtXWp\/uHY4AAA+xTpFOkANUGgAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":1582454823653,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":1582454823653,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0424{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454823,"pkt_len":87,"pkt":"AQBeAAD7xiwDYGpkCABFAABJ7RwAAAERKOPAqAIB4AAA+xTpFOkANQrOAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":1582454823653,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454825628,"flow_last_seen":1582454825628,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp"}
+0540{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454825,"pkt_len":168,"pkt":"AQBef\/\/62DBiVgAcCABFAACa4oMAAP8RXP2p\/uHY7\/\/\/+ux6B2wAhmGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454825628,"flow_last_seen":1582454825628,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454825629,"flow_last_seen":1582454825629,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp"}
+0540{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454825,"pkt_len":168,"pkt":"AQBef\/\/6xiwDYGpkCABFAACaWhcAAAERrJjAqAIB7\/\/\/+sjTB2wAhk51TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454825629,"flow_last_seen":1582454825629,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0433{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454826,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABItCAAAEARQDTAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454827,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDsAAP8RQmoAAAAA\/\/\/\/\/wBEAEMBNI0bAQEGAHhURwsAKwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454835,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeDwAAP8RQmkAAAAA\/\/\/\/\/wBEAEMBNI0TAQEGAHhURwsAMwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454839,"pkt_len":113,"pkt":"TGr2n\/Yn2DBiVgAciI4CAwBfAgCKABAAAAAAAAAAAIz8BFqJChwkZ1iJYPgAYGUrS4o4DJHL\/S\/E6LdOr1skAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":113,"pkt_type":34958,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","type":34958}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454839,"pkt_len":135,"pkt":"2DBiVgAcTGr2n\/YniI4BAwB1AgEKAAAAAAAAAAAAABuBPQRawmcmCJuMCTTl787Fbc92e9r2cPO8HkAbqnp8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI+Bbd0vg6TUoOiFATr40\/ABYwFAEAAA+sBAEAAA+sBAEAAA+sAgAA","pkt_caplen":135,"pkt_type":34958,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","type":34958}
+0781{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454844,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeD0AAP8RQmgAAAAA\/\/\/\/\/wBEAEMBNI0KAQEGAHhURwsAPAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454853,"pkt_len":552,"pkt":"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","pkt_caplen":552,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454856,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIA+oAAEAR8GrAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":2,"flow_packet_id":8,"flow_first_seen":1582454780612,"flow_last_seen":1582454799515,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50580,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":2,"flow_packet_id":8,"flow_first_seen":1582454780612,"flow_last_seen":1582454799515,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50580,"l4_proto":"tcp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":1,"flow_packet_id":8,"flow_first_seen":1582454779631,"flow_last_seen":1582454799004,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50584,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":1,"flow_packet_id":8,"flow_first_seen":1582454779631,"flow_last_seen":1582454799004,"flow_tot_l4_data_len":795,"flow_min_l4_data_len":63,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.176.75","dst_ip":"192.168.2.17","src_port":443,"dst_port":50584,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1582454787658,"flow_last_seen":1582454801077,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":32,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":58,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.185.10","dst_ip":"192.168.2.17","src_port":443,"dst_port":50702,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1582454787658,"flow_last_seen":1582454801077,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":32,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":58,"midstream":1,"l3_proto":"ip4","src_ip":"17.248.185.10","dst_ip":"192.168.2.17","src_port":443,"dst_port":50702,"l4_proto":"tcp"}
+0412{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454865,"pkt_len":113,"pkt":"TGr2n\/Yn2DBiVgAciI4CAwBfAgCKABAAAAAAAAAAAItGYkOhXtVHFSBei+KDaRb2mr+UrA3yLPv\/bW2693f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":113,"pkt_type":34958,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","type":34958}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454865,"pkt_len":135,"pkt":"2DBiVgAcTGr2n\/YniI4BAwB1AgEKAAAAAAAAAAAAABovI0nixZFFW\/ZpJww553gjQO2Uwi5137Ow8+iP3PqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6nQQ8V4nFthsHWtgZMXFABYwFAEAAA+sBAEAAA+sBAEAAA+sAgAA","pkt_caplen":135,"pkt_type":34958,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","type":34958}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454865,"pkt_len":169,"pkt":"TGr2n\/Yn2DBiVgAciI4CAwCXAhPKABAAAAAAAAAAAYtGYkOhXtVHFSBei+KDaRb2mr+UrA3yLPv\/bW2693f7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZcbSnYYoBu5dETlqS4YLUADjuvEvKQvPJ0rVdu0zb5LSOsCSMjRkTMYTV0rOZo1ZtYgUxQ\/1u64gYvePhWbMqouPvhtSR61kuMw==","pkt_caplen":169,"pkt_type":34958,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","type":34958}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454865,"pkt_len":113,"pkt":"2DBiVgAcTGr2n\/YniI4BAwBfAgMKAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACSXhMQpT7Z+H8pmeIKqgblAAA=","pkt_caplen":113,"pkt_type":34958,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","type":34958}
+0427{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454865794,"flow_last_seen":1582454865794,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff9f:f627","l4_proto":"icmp6"}
+0423{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454865,"pkt_len":78,"pkt":"MzP\/n\/YnTGr2n\/Ynht1gAAAAABg6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/n\/YnhwBLLgAAAAD+gAAAAAAAAE5q9v\/+n\/Yn","pkt_caplen":78,"pkt_type":34525,"pkt_ipoffset":14}
+0480{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454865794,"flow_last_seen":1582454865794,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff9f:f627","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0418{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454865802,"flow_last_seen":1582454865802,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0435{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454865,"pkt_len":90,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHjDAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0471{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454865802,"flow_last_seen":1582454865802,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0435{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":90,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAQAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAHjDAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0768{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":328,"pkt":"\/\/\/\/\/\/\/\/TGr2n\/YnCABFEAE6AABAAEAROaQAAAAA\/\/\/\/\/wBEAEMBJv6iAQEGAO9+0loAAAAAAAAAAAAAAAAAAAAAAAAAAExq9p\/2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBPQcBTGr2n\/YnOQIF3DwOYW5kcm9pZC1kaGNwLTk3CgEDBg8aHDM6Oyv\/AA==","pkt_caplen":328,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454866407,"flow_last_seen":1582454866407,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.16","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0773{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":342,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFILXYAAP8RB83AqAIBwKgCEABDAEQBNN9OAgEGAO9+0loAAAAAAAAAAMCoAhDAqAIBAAAAAExq9p\/2JwAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQECNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454866407,"flow_last_seen":1582454866407,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.16","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454866448,"flow_last_seen":1582454866448,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0469{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":114,"pkt":"MzMAAQACTGr2n\/Ynht1gBNipADwRAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAQACAiICIwA8Uc8B2OT+AAEADgABAAEl5RSOTGr2n\/YnAAMADA4ACMoAAAAAAAAAAAAIAAIAAAAGAAQAFwAY","pkt_caplen":114,"pkt_type":34525,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454866448,"flow_last_seen":1582454866448,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","category":"Network"}}
+0784{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":340,"pkt":"\/\/\/\/\/\/\/\/TGr2n\/YnCABFEAFGAABAAEAROZgAAAAA\/\/\/\/\/wBEAEMBMg8gAQEGAO9+0loAAAAAAAAAAAAAAAAAAAAAAAAAAExq9p\/2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDPQcBTGr2n\/YnMgTAqAIQNgTAqAIBOQIF3DwOYW5kcm9pZC1kaGNwLTk3CgEDBg8aHDM6Oyv\/AA==","pkt_caplen":340,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":342,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFILXcAAP8RB8zAqAIBwKgCEABDAEQBNNxOAgEGAO9+0loAAAAAAAAAAMCoAhDAqAIBAAAAAExq9p\/2JwAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":1582454866803,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0437{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":90,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAEAQAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":1582454866803,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":1582454866803,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0413{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":70,"pkt":"MzMAAAACTGr2n\/Ynht1gAAAAABA6\/\/6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAChQAIygAAAAABAUxq9p\/2Jw==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454866803,"flow_last_seen":1582454866803,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0437{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454866,"pkt_len":90,"pkt":"MzMAAAAWTGr2n\/Ynht1gAAAAACQAAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAWOgAFAgAAAQCPAEAQAAAAAQQAAAD\/AgAAAAAAAAAAAAH\/n\/Yn","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454867034,"flow_last_seen":1582454867034,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":77,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA\/qSJAAEARDCrAqAIQwKgCAc7ZADUAKwPW+6YBAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454867034,"flow_last_seen":1582454867034,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0609{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":221,"pkt":"TGr2n\/YnxiwDYGpkCABFAADPTgIAAEARprrAqAIBwKgCEAA1ztkAu4V++6aBgAABAAUAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAHADAAFAAEAABCKACoMY2FwdGl2ZS1jaWRyDG9yaWdpbi1hcHBsZQNjb20GYWthZG5zA25ldADALwAFAAEAAACCAA4LY2FwdGl2ZS1jZG7APMBlAAUAAQAAAVQAFAdjYXB0aXZlAWcHYWFwbGltZ8AawH8AAQABAAAAEwAEEf01ycB\/AAEAAQAAABMABBH9NdA=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1582454867034,"flow_last_seen":1582454867075,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":43,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.253.53.201"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454867151,"flow_last_seen":1582454867151,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"17.253.53.201","src_port":58338,"dst_port":80,"l4_proto":"tcp"}
+0414{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8SJ9AAEAG557AqAIQEf01yePiAFBF7HpxAAAAAKAC\/\/9mAgAAAgQFtAQCCAr\/\/zLuAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8AAAAADQGfD4R\/TXJwKgCEABQ4+KuJAPnRex6cqAScNDonAAAAgQFrAQCCAp2SOQ3\/\/8y7gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKBAAEAG56XAqAIQEf01yePiAFBF7HpyriQD6IAQAVeG0QAAAQEICv\/\/Mvh2SOQ3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":269,"pkt":"xiwDYGpkTGr2n\/YnCABFAAD\/SKFAAEAG5tnAqAIQEf01yePiAFBF7HpyriQD6IAYAVcOJwAAAQEICv\/\/Mvp2SOQ3R0VUIC8gSFRUUC8xLjENClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzYwLjAuMzExMi4zMiBTYWZhcmkvNTM3LjM2DQpDb25uZWN0aW9uOiBDbG9zZQ0KSG9zdDogY2FwdGl2ZS5hcHBsZS5jb20NCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo=","pkt_caplen":269,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1582454867151,"flow_last_seen":1582454867196,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":32,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"17.253.53.201","src_port":58338,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Apple","category":"ConnectivityCheck"},"http": {"hostname":"captive.apple.com","url":"captive.apple.com\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.32 Safari\/537.36"}}
+0401{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0ee4AADQGAlgR\/TXJwKgCEABQ4+KuJAPoRex7PYAQAHWGuAAAAQEICnZI5GX\/\/zL6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1361{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":781,"pkt":"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","pkt_caplen":781,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0efAAADQGAlYR\/TXJwKgCEABQ4+KuJAazRex7PYARAHWD6wAAAQEICnZI5Gb\/\/zL6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKJAAEAG56PAqAIQEf01yePiAFBF7Hs9riQGs4AQAVyC\/AAAAQEICv\/\/MwN2SORm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454867244,"flow_last_seen":1582454867244,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":76,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA+qTJAAEARDBvAqAIQwKgCAYvxADUAKg90oPQBAAABAAAAAAAABHRpbWUHYW5kcm9pZANjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454867244,"flow_last_seen":1582454867244,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"time.android.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKNAAEAG56LAqAIQEf01yePiAFBF7Hs9riQGtIAQAVyC8AAAAQEICv\/\/Mw52SORm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SKRAAEAG56HAqAIQEf01yePiAFBF7Hs9riQGtIARAVyC7gAAAQEICv\/\/Mw92SORm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":140,"pkt":"TGr2n\/YnxiwDYGpkCABFAAB+z3oAAEARJZPAqAIBwKgCEAA1i\/EAapnsoPSBgAABAAQAAAAABHRpbWUHYW5kcm9pZANjb20AAAEAAcAMAAEAAQAAARgABNjvIwjADAABAAEAAAEYAATY7yMAwAwAAQABAAABGAAE2O8jBMAMAAEAAQAAARgABNjvIww=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1582454867244,"flow_last_seen":1582454867284,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":42,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"time.android.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.35.8"}}
+0402{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0AAAAADQGfEYR\/TXJwKgCEABQ4+KuJAa0Rex7PoAQAHWDhAAAAQEICnZI5Lf\/\/zMP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454867323,"flow_last_seen":1582454867323,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.35.8","src_port":45863,"dst_port":123,"l4_proto":"udp"}
+0430{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":90,"pkt":"xiwDYGpkTGr2n\/YnCABFAABMoTdAAEAR2rnAqAIQ2O8jCLMnAHsAOGfAGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOH81o7jEm7M","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454867323,"flow_last_seen":1582454867323,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.35.8","src_port":45863,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Google","category":"System"}}
+0431{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":90,"pkt":"TGr2n\/YnxiwDYGpkCABFAABMa8oAAGcRKSfY7yMIwKgCEAB7sycAOKcPHAEA7AAAAAAAAAAMR09PR+H81tNW8KhI4fzWjuMSbszh\/NbTVvCoSeH81tNW8KhL","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454867637,"flow_last_seen":1582454867637,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBqXVAAEARC9XAqAIQwKgCAYbsADUALQrUr3oBAAABAAAAAAAACGNsaWVudHMxBmdvb2dsZQNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454867637,"flow_last_seen":1582454867637,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"clients1.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0438{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRpSEAAEARUBnAqAIBwKgCEAA1huwAPTVyr3qBgAABAAEAAAAACGNsaWVudHMxBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1582454867637,"flow_last_seen":1582454867639,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"clients1.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1582454867688,"flow_last_seen":1582454867688,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8oxlAAEAG1YLAqAIQ2O8meIDOAbtPCpBsAAAAAKAC\/\/\/waQAAAgQFtAQCCAr\/\/zN1AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA840EAAHYGn1rY7yZ4wKgCEAG7gM7sufL\/TwqQbaAS6yANxQAAAgQFZAQCCAoG5BEl\/\/8zdQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oxpAAEAG1YnAqAIQ2O8meIDOAbtPCpBt7LnzAIAQAVcmCAAAAQEICv\/\/M3kG5BEl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1582454867723,"flow_last_seen":1582454867723,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBqYtAAEARC7\/AqAIQwKgCAdY1ADUALYAStecBAAABAAAAAAAABHBsYXkKZ29vZ2xlYXBpcwNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1582454867723,"flow_last_seen":1582454867723,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"play.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0629{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":232,"pkt":"xiwDYGpkTGr2n\/YnCABFAADaoxtAAEAG1OLAqAIQ2O8meIDOAbtPCpBt7LnzAIAYAVcMzgAAAQEICv\/\/M4cG5BElFgMBAKEBAACdAwMRGw5cHdksc9heZfp3I+xA9Dx3FfWs\/ESCI9YfdinRawAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABY\/wEAAQAAAAAYABYAABNjbGllbnRzMS5nb29nbGUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAALAAIBAAAKAAgABgAdABcAGA==","pkt_caplen":232,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1582454867688,"flow_last_seen":1582454867759,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":32,"flow_max_l4_data_len":198,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"clients1.google.com","ja3":"c60d01d600aacc2c04844595ce224279","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0439{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRO4cAAEARubPAqAIBwKgCEAA11jUAPbDuteeBgAABAAEAAAAABHBsYXkKZ29vZ2xlYXBpcwNjb20AAAEAAcAMAAEAAQAAARgABKzZFEo=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1582454867723,"flow_last_seen":1582454867761,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"play.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.74"}}
+0401{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA044kAAHYGnxrY7yZ4wKgCEAG7gM7sufMATwqRE4AQAPAldAAAAQEICgbkEWz\/\/zOH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2302{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1582454867688,"flow_last_seen":1582454867788,"flow_tot_l4_data_len":1792,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"clients1.google.com","ja3":"c60d01d600aacc2c04844595ce224279","ja3s":"b31c0b82752ea0e2c48b8ce46e9263e5","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"}}
+2309{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1600{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":951,"pkt":"TGr2n\/YnxiwDYGpkCABFAAOp46AAAHYGm47Y7yZ4wKgCEAG7gM7suf4UTwqRE4AYAPB3NwAAAQEICgbkEXz\/\/zOHxhwt79EYYWXnI4MgqCMS\/9Ikf9Qv50RqW03XUGawr55CYwX74BzEY2Gvn2oz\/2KXvUjZ03wUZ9x13C5p6PhteGnQtxAFuPExwjsk\/RozdPgj4OxrGYoWxuPNpM0L27OkWWA4iDutHbnGjKdTG\/y82aSrvN08YdeTFZjugb2P4mRHIEAGTtesl+i5wFkSoUklI+TtcDQspbRjfPmjPYPRzW0krAcCAwEAAaOCATMwggEvMA4GA1UdDwEB\/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH\/BAgwBgEB\/wIBADAdBgNVHQ4EFgQUmNH4bhDrz5vsYJ8YkBug630J\/SswHwYDVR0jBBgwFoAUm+IHV2ccHsBqBt5ZtJot39wZhi4wNQYIKwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC5wa2kuZ29vZy9nc3IyMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMi9nc3IyLmNybDA\/BgNVHSAEODA2MDQGBmeBDAECAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3BraS5nb29nL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAagD42efvzLqlGN31eVBY1rsdOCJn+vdE0aSZSZgc9CrpJy2L08RqO\/BFPaJZMdCvTZ96yo6oFjYRNTCBlD6WW2g0W+Gw7228EI4hrOmzBYL1on3GO7i1YNAfw1VTphln9e14NIZT1jMmo+NjyrcwPGvOap6kEJ\/mjybD\/AnhrYbrHNSvoVvpPwxwM7bY8tEvq7czhPOzcDYzWPpvKQliLzBYhF0C8otZm79rEFVvNiaqbCSbnMtINbmcgAlsQsJAJnAwfnq3YO+qh\/GzoEFwIUhlRKnG7rHq13RXtK8kIKiyKtKYhq2P\/11JJUNCJt63yr\/tQri\/hlQ3zRq2dnPXKFgMDAHMMAABvAwAdIHJo2c4KVN+CoUxaZSNZJAA1neTMVFMdaLlrhYyfhlJEBAMARzBFAiEA1aEQpiPcP2j255s8vrM7twEVl2fURcih\/qijiSimjZECIBovWYnKwFgg5yE9gM68Z2ly7RBtG2LFPMOcmq5NxiHvFgMDAAQOAAAA","pkt_caplen":951,"pkt_type":2048,"pkt_ipoffset":14}
+2150{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":22,"flow_packet_id":8,"flow_first_seen":1582454867688,"flow_last_seen":1582454867789,"flow_tot_l4_data_len":4159,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":519,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"clients1.google.com","server_names":"*.google.com,*.android.com,*.appengine.google.com,*.cloud.google.com,*.crowdsource.google.com,*.g.co,*.gcp.gvt2.com,*.gcpcdn.gvt1.com,*.ggpht.cn,*.gkecnapps.cn,*.google-analytics.com,*.google.ca,*.google.cl,*.google.co.in,*.google.co.jp,*.google.co.uk,*.google.com.ar,*.google.com.au,*.google.com.br,*.google.com.co,*.google.com.mx,*.google.com.tr,*.google.com.vn,*.google.de,*.google.es,*.google.fr,*.google.hu,*.google.it,*.google.nl,*.google.pl,*.google.pt,*.googleadapis.com,*.googleapis.cn,*.googlecnapps.cn,*.googlecommerce.com,*.googlevideo.com,*.gstatic.cn,*.gstatic.com,*.gstaticcnapps.cn,*.gvt1.com,*.gvt2.com,*.metric.gstatic.com,*.urchin.com,*.url.google.com,*.wear.gkecnapps.cn,*.youtube-nocookie.com,*.youtube.com,*.youtubeeducation.com,*.youtubekids.com,*.yt.be,*.ytimg.com,android.clients.google.com,android.com,developer.android.google.cn,developers.android.google.cn,g.co,ggpht.cn,gkecnapps.cn,goo.gl,google-analytics.com,google.com,googlecnapps.cn,googlecommerce.com,source.android.google.cn,urchin.com,www.goo.gl,youtu.be,youtube.com,youtubeeducation.com,youtubekids.com,yt.be","ja3":"c60d01d600aacc2c04844595ce224279","ja3s":"b31c0b82752ea0e2c48b8ce46e9263e5","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.google.com","fingerprint":"80:50:28:F4:84:F5:C4:C6:41:DE:75:67:38:C4:A6:E2:59:FF:75:42"}}
+0401{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oxxAAEAG1YfAqAIQ2O8meIDOAbtPCpET7Ln4ioAQAWIfYAAAAQEICv\/\/M48G5BF8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0ox1AAEAG1YbAqAIQ2O8meIDOAbtPCpET7Ln+FIAQAW0ZywAAAQEICv\/\/M48G5BF8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0ox5AAEAG1YXAqAIQ2O8meIDOAbtPCpET7LoBiYAQAXgWSwAAAQEICv\/\/M48G5BF8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454867,"pkt_len":159,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRox9AAEAG1SfAqAIQ2O8meIDOAbtPCpET7LoBiYAYAXgQmwAAAQEICv\/\/M8EG5BF8FgMDACUQAAAhIMGlnjEj9Lj1b\/2iWKBd9kUBXaFAcW1UWVPIVmFcNMtPFAMDAAEBFgMDACgAAAAAAAAAANK4JZVSTeCl1uhh6WRGot44JjTc1K4kPGrZP3tF5k\/M","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":117,"pkt":"TGr2n\/YnxiwDYGpkCABFAABn5DgAAHYGnjjY7yZ4wKgCEAG7gM7sugGJTwqRcIAYAPAlqQAAAQEICgbkElb\/\/zPBFAMDAAEBFgMDACgAAAAAAAAAAGCBkTH0GlTpEG03TUiHoZEtrWtXoJe8ULPjsbHqT8w5","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oyBAAEAG1YPAqAIQ2O8meIDOAbtPCpFw7LoBvIAQAXgUqgAAAQEICv\/\/M8YG5BJW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1582454868348,"flow_last_seen":1582454868348,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8A3VAAEAGs2vAqAIQrNkUSs0GAbvbqzdvAAAAAKAC\/\/+uLAAAAgQFtAQCCAr\/\/zQaAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8PjQAAHUGg6ys2RRKwKgCEAG7zQbWjo3E26s3cKAS6yAJ1AAAAgQFZAQCCAq9hJee\/\/80GgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3ZAAEAGs3LAqAIQrNkUSs0GAbvbqzdw1o6NxYAQAVciEQAAAQEICv\/\/NCS9hJee","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":251,"pkt":"xiwDYGpkTGr2n\/YnCABFAADtA3dAAEAGsrjAqAIQrNkUSs0GAbvbqzdw1o6NxYAYAVdNBgAAAQEICv\/\/NC29hJeeFgMBALQBAACwAwMhPT2KHzHW0LHLGe6T2CwyHBBvprpU2QgwVPHkrHLB\/AAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABr\/wEAAQAAAAAYABYAABNwbGF5Lmdvb2dsZWFwaXMuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEAALAAkIaHR0cC8xLjEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1582454868348,"flow_last_seen":1582454868424,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.googleapis.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0401{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0PwMAAHUGguWs2RRKwKgCEAG7zQbWjo3F26s4KYAQAPAhagAAAQEICr2El+r\/\/zQt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1582454868462,"flow_last_seen":1582454868462,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":89,"pkt":"xiwDYGpkTGr2n\/YnCABFAABLqjFAAEARCw\/AqAIQwKgCAbfpADUAN\/8RnJ4BAAABAAAAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2dzdGF0aWMDY29tAAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1582454868462,"flow_last_seen":1582454868462,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2305{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1582454868348,"flow_last_seen":1582454868466,"flow_tot_l4_data_len":1811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.googleapis.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2312{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0615{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":222,"pkt":"TGr2n\/YnxiwDYGpkCABFAADQPxYAAHUGgjas2RRKwKgCEAG7zQbWjpjZ26s4KYAYAPAc4gAAAQEICr2El+7\/\/zQtIatj\/9dSSVDQibet8q\/7UK4v4ZUN80atnZz1yhYDAwByDAAAbgMAHSB7VtxCRs0c8B9etZT3IUKTQvlT5LDLWvonE9yJN3gFTgQDAEYwRAIgWQUikQAvlG1Y+hPTaCU66fj7H82hI\/D32LV46lBO2YQCIAsnO6sk7meCDdFHCBVwp\/+edGHHEih2ITumUaxcpKb3FgMDAAQOAAAA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+1464{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":24,"flow_packet_id":8,"flow_first_seen":1582454868348,"flow_last_seen":1582454868466,"flow_tot_l4_data_len":3449,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":431,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.googleapis.com","server_names":"*.storage.googleapis.com,*.appspot.com.storage.googleapis.com,*.commondatastorage.googleapis.com,*.content-storage-download.googleapis.com,*.content-storage-upload.googleapis.com,*.content-storage.googleapis.com,*.googleapis.com,*.storage-download.googleapis.com,*.storage-upload.googleapis.com,*.storage.select.googleapis.com,commondatastorage.googleapis.com,storage.googleapis.com,storage.select.googleapis.com,unfiltered.news","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.storage.googleapis.com","alpn":"http\/1.1","fingerprint":"BA:BA:BA:55:69:9F:E0:BD:48:80:23:A4:B3:AD:C1:FF:EA:4E:17:C9"}}
+0401{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3hAAEAGs3DAqAIQrNkUSs0GAbvbqzgp1o6TT4AQAWIbXwAAAQEICv\/\/NDi9hJfu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3lAAEAGs2\/AqAIQrNkUSs0GAbvbqzgp1o6Y2YAQAW0VygAAAQEICv\/\/NDi9hJfu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3pAAEAGs27AqAIQrNkUSs0GAbvbqzgp1o6ZdYAQAW0VLgAAAQEICv\/\/NDi9hJfu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":105,"pkt":"TGr2n\/YnxiwDYGpkCABFAABbmZAAAEARW6DAqAIBwKgCEAA1t+kAR93wnJ6BgAABAAEAAAAAEWNvbm5lY3Rpdml0eWNoZWNrB2dzdGF0aWMDY29tAAABAAHADAABAAEAAACxAASs2RID","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1582454868462,"flow_last_seen":1582454868503,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"ConnectivityCheck"},"dns": {"query":"connectivitycheck.gstatic.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.18.3"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1582454868511,"flow_last_seen":1582454868511,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36888,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8PG9AAEAGfLjAqAIQrNkSA5AYAbuCdQgsAAAAAKAC\/\/91sgAAAgQFtAQCCAr\/\/zRDAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1582454868527,"flow_last_seen":1582454868527,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8stVAAEAGBlLAqAIQrNkSA5AaAbtdpoaTAAAAAKAC\/\/8cFQAAAgQFtAQCCAr\/\/zRGAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8mn0AAHYGKKqs2RIDwKgCEAG7kBpu4mZiXaaGlKAS6yC\/LgAAAgQFZAQCCApPRk15\/\/80RgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0stZAAEAGBlnAqAIQrNkSA5AaAbtdpoaUbuJmY4AQAVfXbAAAAQEICv\/\/NE9PRk15","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":261,"pkt":"xiwDYGpkTGr2n\/YnCABFAAD3stdAAEAGBZXAqAIQrNkSA5AaAbtdpoaUbuJmY4AYAVcAOwAAAQEICv\/\/NFBPRk15FgMBAL4BAAC6AwOZySzIWyWPFv9jpx+5YWNqQg+xq9GVJmpUnw7vrnZc6QAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAAB1\/wEAAQAAAAAiACAAAB1jb25uZWN0aXZpdHljaGVjay5nc3RhdGljLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1582454868527,"flow_last_seen":1582454868563,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":32,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0401{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0mn4AAHYGKLGs2RIDwKgCEAG7kBpu4mZjXaaHV4AQAPDW6gAAAQEICk9GTZ7\/\/zRQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1582454868597,"flow_last_seen":1582454868597,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBqkFAAEARCwnAqAIQwKgCAcjmADUALYwU2tsBAAABAAAAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1582454868597,"flow_last_seen":1582454868597,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRZjUAAEARjwXAqAIBwKgCEAA1yOYAPQ9d2tuBgAABAAEAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAcAMAAEAAQAAAEEABKzZqM4=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1582454868597,"flow_last_seen":1582454868597,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.168.206"}}
+2300{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1582454868527,"flow_last_seen":1582454868603,"flow_tot_l4_data_len":1821,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2307{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1580{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":938,"pkt":"TGr2n\/YnxiwDYGpkCABFAAOcmoQAAHYGJUOs2RIDwKgCEAG7kBpu4nF3XaaHV4AYAPC2NQAAAQEICk9GTaX\/\/zRQIxL\/0iR\/1C\/nRGpbTddQZrCvnkJjBfvgHMRjYa+fajP\/Ype9SNnTfBRn3HXcLmno+G14adC3EAW48THCOyT9GjN0+CPg7GsZihbG482kzQvbs6RZYDiIO60ducaMp1Mb\/LzZpKu83Txh15MVmO6BvY\/iZEcgQAZO16yX6LnAWRKhSSUj5O1wNCyltGN8+aM9g9HNbSSsBwIDAQABo4IBMzCCAS8wDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH\/AgEAMB0GA1UdDgQWBBSY0fhuEOvPm+xgnxiQG6DrfQn9KzAfBgNVHSMEGDAWgBSb4gdXZxwewGoG3lm0mi3f3BmGLjA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5wa2kuZ29vZy9nc3IyL2dzcjIuY3JsMD8GA1UdIAQ4MDYwNAYGZ4EMAQICMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vcGtpLmdvb2cvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABqAPjZ5+\/MuqUY3fV5UFjWux04Imf690TRpJlJmBz0KuknLYvTxGo78EU9olkx0K9Nn3rKjqgWNhE1MIGUPpZbaDRb4bDvbbwQjiGs6bMFgvWifcY7uLVg0B\/DVVOmGWf17Xg0hlPWMyaj42PKtzA8a85qnqQQn+aPJsP8CeGthusc1K+hW+k\/DHAzttjy0S+rtzOE87NwNjNY+m8pCWIvMFiEXQLyi1mbv2sQVW82JqpsJJucy0g1uZyACWxCwkAmcDB+erdg76qH8bOgQXAhSGVEqcbuserXdFe0ryQgqLIq0piGrY\/\/XUklQ0Im3rfKv+1CuL+GVDfNGrZ2c9coWAwMAcwwAAG8DAB0gSrU5ywnvnkB7dZHgM0sLsZmnlRz1E8V2FCDzK2mLyDMEAwBHMEUCIQCPeNWXClhlpfwwmkAkeAjuRggqxb0S1CUaJEKYc87xtgIgR21phmoPwqRwHIAuDCtSt6vUsRiSJcTnj77tX2jgzCoWAwMABA4AAAA=","pkt_caplen":938,"pkt_type":2048,"pkt_ipoffset":14}
+2135{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":27,"flow_packet_id":8,"flow_first_seen":1582454868527,"flow_last_seen":1582454868603,"flow_tot_l4_data_len":4175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":521,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","server_names":"*.google.com,*.android.com,*.appengine.google.com,*.cloud.google.com,*.crowdsource.google.com,*.g.co,*.gcp.gvt2.com,*.gcpcdn.gvt1.com,*.ggpht.cn,*.gkecnapps.cn,*.google-analytics.com,*.google.ca,*.google.cl,*.google.co.in,*.google.co.jp,*.google.co.uk,*.google.com.ar,*.google.com.au,*.google.com.br,*.google.com.co,*.google.com.mx,*.google.com.tr,*.google.com.vn,*.google.de,*.google.es,*.google.fr,*.google.hu,*.google.it,*.google.nl,*.google.pl,*.google.pt,*.googleadapis.com,*.googleapis.cn,*.googlecnapps.cn,*.googlecommerce.com,*.googlevideo.com,*.gstatic.cn,*.gstatic.com,*.gstaticcnapps.cn,*.gvt1.com,*.gvt2.com,*.metric.gstatic.com,*.urchin.com,*.url.google.com,*.wear.gkecnapps.cn,*.youtube-nocookie.com,*.youtube.com,*.youtubeeducation.com,*.youtubekids.com,*.yt.be,*.ytimg.com,android.clients.google.com,android.com,developer.android.google.cn,developers.android.google.cn,g.co,ggpht.cn,gkecnapps.cn,goo.gl,google-analytics.com,google.com,googlecnapps.cn,googlecommerce.com,source.android.google.cn,urchin.com,www.goo.gl,youtu.be,youtube.com,youtubeeducation.com,youtubekids.com,yt.be","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.google.com","alpn":"http\/1.1","fingerprint":"80:50:28:F4:84:F5:C4:C6:41:DE:75:67:38:C4:A6:E2:59:FF:75:42"}}
+0401{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0sthAAEAGBlfAqAIQrNkSA5AaAbtdpodXbuJr7YAQAWLQ3QAAAQEICv\/\/NFpPRk2l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0stlAAEAGBlbAqAIQrNkSA5AaAbtdpodXbuJxd4AQAW3LSAAAAQEICv\/\/NFpPRk2l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0stpAAEAGBlXAqAIQrNkSA5AaAbtdpodXbuJ034AQAXjH1QAAAQEICv\/\/NFpPRk2l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":114,"pkt":"MzMAAQACTGr2n\/Ynht1gBNipADwRAf6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAQACAiICIwA8Uc8B2OT+AAEADgABAAEl5RSOTGr2n\/YnAAMADA4ACMoAAAAAAAAAAAAIAAIAAAAGAAQAFwAY","pkt_caplen":114,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8fo0AAHYGRJqs2RIDwKgCEAG7kBjGuYRJgnUILaAS6yAZNAAAAgQFZAQCCApRt9Th\/\/80QwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0PHBAAEAGfL\/AqAIQrNkSA5AYAbuCdQgtxrmESoAQAVcxKAAAAQEICv\/\/NJZRt9Th","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":261,"pkt":"xiwDYGpkTGr2n\/YnCABFAAD3PHFAAEAGe\/vAqAIQrNkSA5AYAbuCdQgtxrmESoAYAVdmqgAAAQEICv\/\/NK1Rt9ThFgMBAL4BAAC6AwPJiz4b6rt+LTNT4uSDXUKsbprZa0zZMc753ZkGH\/Y+XwAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAAB1\/wEAAQAAAAAiACAAAB1jb25uZWN0aXZpdHljaGVjay5nc3RhdGljLmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":261,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1582454868511,"flow_last_seen":1582454868936,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":32,"flow_max_l4_data_len":227,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36888,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"ConnectivityCheck"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connectivitycheck.gstatic.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0401{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454868,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0ft4AAHYGRFGs2RIDwKgCEAG7kBjGuYRKgnUI8IAQAPAwPAAAAQEIClG31Vr\/\/zSt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1581{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":938,"pkt":"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","pkt_caplen":938,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":78,"pkt":"xiwDYGpkTGr2n\/YnCABFAABAPHJAAEAGfLHAqAIQrNkSA5AYAbuCdQjwxrmESrAQAV1KBwAAAQEICv\/\/NMVRt9VaAQEFCsa5j17GuZLG","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2301{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":78,"pkt":"xiwDYGpkTGr2n\/YnCABFAABAPHNAAEAGfLDAqAIQrNkSA5AYAbuCdQjwxrmJ1LAQAWlECgAAAQEICv\/\/NM1Rt9W5AQEFCsa5j17GuZLG","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":159,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRsttAAEAGBffAqAIQrNkSA5AaAbtdpodXbuJ034AYAXhnDQAAAQEICv\/\/NOdPRk2lFgMDACUQAAAhIMBLX70949rUneLdAt6kQ7JUecdFpMbjPr2q5f9qci8IFAMDAAEBFgMDACgAAAAAAAAAAOKRcgWgMQ72eFonRygN442T7BhItab6pte3bmn49Wlb","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0PHRAAEAGfLvAqAIQrNkSA5AYAbuCdQjwxrmSxoAQAXQgbwAAAQEICv\/\/NP1Rt9XX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYnD0AAHYGJc6s2RIDwKgCEAG7kBpu4nTfXaaHtIAYAPB9EQAAAQEICk9GUFH\/\/zTnFgMDAOwEAADoAAGJvwDiAZR0wlJK56tqlFe1HOm0VA0hoNgd3WqRdt3VwNjJbABNFZ9zOd32WAw1h9XjV41RjhucVX7ApWvXZe5Zy+ti7+mo7AL9UE0iaxgA879V5c4wT1WxffCTNwn4rXks0Ez41Gfz8DZxFsum0C3k4EGCG4Jd5\/Rbzy4rsyMlDCqdSoUlFIJYawbJG2cjr8Rm+IAfDFYruos9nfazR2oqH\/hZ5w83F10f1D5Jzw1rluUTBwu8+qgbOURLuiVFYW4Lt2sayRdeUDmz3XRhiQmr8AfQi3w15FdrRfc2gQe7BuSdOSbMahQDAwABARYDAwAoAAAAAAAAAACZiErzXS0kd7\/KA9aEEAASjTiTXaFyZp7ND4tkNQ4v3w==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":327,"pkt":"xiwDYGpkTGr2n\/YnCABFAAE5stxAAEAGBU7AqAIQrNkSA5AaAbtdpoe0buJ2A4AYAYPsjgAAAQEICv\/\/NQVPRlBRFwMDAQAAAAAAAAAAAR4cFXslGpAZPuHoiPLlIlie7vqB6wq3xrA\/e6HrMCAQHz2AF8AbKO7FAUcqGUP7GLQ51xsck044J1hJDAPdfb27\/h7irFPkjP6rPostVsSj1gLzUkkjriCgLKhWHPXDK6UxDC7akrlGwl0ppS8gTqKGg747J9cJfIsuHktFX8IGsJ29ucQ6+0Bzp7lzmE8lCOe1j2cOeD7REoVaDT2u8RxWjfSuRKJfFQZzdl+7TBFRBZ5WoLQWO16D+nFqBLcAoN3m4QjwieOjfwnzwxDLCtoB\/Y4oDP5hUrPzeYkuWGrkZGwdD8BWg2421IjvNuTJ0v\/swtva+s2d","pkt_caplen":327,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYnEgAAHYGJcOs2RIDwKgCEAG7kBpu4nYDXaaIuYAYAPTElQAAAQEICk9GUHL\/\/zUFFwMDAR8AAAAAAAAAAf5p\/XqVoeBC+89RVlKX4rcaaMrlscPRmbHbHRxgxdrCAvV7Bne5xeVb0z3OXOQSUekEx2NhtiTxgNtf+gZbcg2rrGIapFfoHSdPK85pjcY33U27qzDoZH6rmTKn0oNLHEOxgIFsh7Zjz+9+1La3Ysk1WnfhSHwvWekf4lnoZFJ\/utO+KzhHrFOGWJa7bRGdk6JA3vrXf5Ue4+xzpKV+LFwwIlFVbQEUV2SgiUt6kKI7R5pCkzI8qv6QhpzLdsxR\/pIWDlZNPuIn4vTpoCU9bDBhk9rUrqpEz7fwRpCAIxbJZIgKdE8X8C5MSucg5ZkhVqj2AdXsX3TE6x0vaZHw8CULR5IPoEidIq04D+FdVrsFgUiucXB6Ow==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1582454869361,"flow_last_seen":1582454869361,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":76,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA+qnVAAEARCtjAqAIQwKgCAZhgADUAKv996DEBAAABAAAAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1582454869361,"flow_last_seen":1582454869361,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0435{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":92,"pkt":"TGr2n\/YnxiwDYGpkCABFAABORPIAAEARsEvAqAIBwKgCEAA1mGAAOr6H6DGBgAABAAEAAAAABW10YWxrBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1582454869361,"flow_last_seen":1582454869363,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":42,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"mtalk.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454869517,"flow_last_seen":1582454869517,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8ooxAAEAGf8\/AqAIQrNmozsTQAbv86pehAAAAAKAC\/\/+fWQAAAgQFtAQCCAr\/\/zUtAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA80VwAAHUGW\/+s2ajOwKgCEAG7xNCPRbjJ\/OqXoqAS6yAGLQAAAgQFZAQCCApmsf+J\/\/81LQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oo1AAEAGf9bAqAIQrNmozsTQAbv86peij0W4yoAQAVceWQAAAQEICv\/\/NUhmsf+J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":251,"pkt":"xiwDYGpkTGr2n\/YnCABFAADtoo5AAEAGfxzAqAIQrNmozsTQAbv86peij0W4yoAYAVd6YwAAAQEICv\/\/NVdmsf+JFgMBALQBAACwAwNEQVlrFj9Y47MgZ8vO8k2FXJJ0JJ\/6X8XoKgfa\/cCzYgAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABrAAAAGAAWAAATYXBwLW1lYXN1cmVtZW50LmNvbQAXAAD\/AQABAAAKAAgABgAdABcAGAALAAIBAAAjAAAAEAALAAkIaHR0cC8xLjEABQAFAQAAAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgE=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1582454869517,"flow_last_seen":1582454869614,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1582454869626,"flow_last_seen":1582454869626,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":49510,"dst_port":5228,"l4_proto":"tcp"}
+0416{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8g2ZAAEAG9TXAqAIQ2O8meMFmFGxVMrY\/AAAAAKAC\/\/9vQQAAAgQFtAQCCAr\/\/zVZAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA00aQAAHUGW7+s2ajOwKgCEAG7xNCPRbjK\/OqYW4AQAPAdlwAAAQEICmax\/+r\/\/zVX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2307{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1582454869517,"flow_last_seen":1582454869657,"flow_tot_l4_data_len":1811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"9d9ce860f1b1cbef07b019450cb368d8","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2319{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0903{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":431,"pkt":"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","pkt_caplen":431,"pkt_type":2048,"pkt_ipoffset":14}
+1277{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":30,"flow_packet_id":8,"flow_first_seen":1582454869517,"flow_last_seen":1582454869657,"flow_tot_l4_data_len":3658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":457,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","server_names":"*.google-analytics.com,*.fps.goog,app-measurement.com,fps.goog,google-analytics.com,googleoptimize.com,googletagmanager.com,service.urchin.com,ssl.google-analytics.com,urchin.com,www.google-analytics.com,www.googleoptimize.com,www.googletagmanager.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"9d9ce860f1b1cbef07b019450cb368d8","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.google-analytics.com","alpn":"http\/1.1","fingerprint":"B0:D9:D3:57:C2:34:87:2C:FB:F5:E6:BD:7F:9F:54:65:08:61:AF:01"}}
+0901{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":431,"pkt":"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","pkt_caplen":431,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":159,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRPHVAAEAGfF3AqAIQrNkSA5AYAbuCdQjwxrmSxoAYAXTxaAAAAQEICv\/\/NWZRt9XXFgMDACUQAAAhIL1QAZblmBaS6MGJRISNBquGjHKHv6oBM9BlgurCo98yFAMDAAEBFgMDACgAAAAAAAAAAL6QL605fB1xUgS6LTyTDwho0hrG6v3MkF+xlS4sSJrG","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0oo9AAEAGf9TAqAIQrNmozsTQAbv86phbj0W+VIAQAWIXbgAAAQEICv\/\/NYBmsf\/u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0opBAAEAGf9PAqAIQrNmozsTQAbv86phbj0XD3oAQAW0R2QAAAQEICv\/\/NYBmsf\/u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0opFAAEAGf9LAqAIQrNmozsTQAbv86phbj0XFS4AQAXgQXwAAAQEICv\/\/NYFmsf\/v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":78,"pkt":"xiwDYGpkTGr2n\/YnCABFAABAopJAAEAGf8XAqAIQrNmozsTQAbv86phbj0XFS7AQAXgyQQAAAQEICv\/\/NYFmsgBAAQEFCo9Fw96PRcVL","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYgUgAAHYGQMOs2RIDwKgCEAG7kBjGuZLGgnUJTYAYAPAZbwAAAQEIClG32KP\/\/zVmFgMDAOwEAADoAAGJvwDiAZR0wlJK56tqlFe1HOm0VMDTJM2hhMrtm7J4uhSs\/qnPqdRXnJ+VgZLiyJmE4KsUZvDqmgQgdO5Z1wTqybmaIKCbLIAAmMe1utrJGqwQyJOKFrCV7kr+wOwqwWo2+g3PdEQ3xSBcBnJmOaGhQYc\/CUME0DK1XMfXLgBnMFcDU3V20QhWCZvUNyfzrlwP97As5IeJ3tyCPnvO8q\/O+YVpvEtIRG5QL9oslDtncaaoPFmIYNB4MoxA3\/bD0Vj2H05VMWvj5A8BOftCxLlCncmLS8U6J4lHkRw\/\/6abGKcSiAX+khQDAwABARYDAwAoAAAAAAAAAABG1km8AJdd\/e5z1fhM4jtMgWneNY46Xy2oMvE6kT36dw==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":327,"pkt":"xiwDYGpkTGr2n\/YnCABFAAE5PHZAAEAGe7TAqAIQrNkSA5AYAbuCdQlNxrmT6oAYAX\/VywAAAQEICv\/\/NYdRt9ijFwMDAQAAAAAAAAAAAStS8At\/QoVUtoUj6L2do5lgir4oUPAfx7kSQkQ9JablyGUuyaf7e+jULj5ueO\/c3vMrlAB\/GoMM7hHRMYb5CV1MYvmpBTVNQzojFM\/JdnZI3\/aY+GufNmJpTQDD2W45YwjGyYBvcD6M98h2hRuugp7za4AXrGQvmHpq+eZgqoa69WHpCL2mEyA8LUDKvopJjeta1FvZ\/KadP3MeuTx1XAZfwXIbt6rPg1v+TkZlQ9mdpu0e2Uowkc6o4Mk6iHV0ekLu11xZvgjRa6WMYalpRFe2r1uOpJZSqFKgigawMj+gCXRIoHhXibvSVjT9hDngzW1d2YWelPVm","pkt_caplen":327,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":159,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRA3tAAEAGsxDAqAIQrNkUSs0GAbvbqzgp1o6ZdYAYAW02EwAAAQEICv\/\/NY+9hJfuFgMDACUQAAAhINDcq7G2UaubeWr+qjIw+Q90gF+FynEaMlJRMek0ZxQtFAMDAAEBFgMDACgAAAAAAAAAACp713gMJqW5O+xHQnEjEnIUjBU\/TMV+DYKV1wD1oduv","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454869,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYQZoAAHUGfyqs2RRKwKgCEAG7zQbWjpl126s4hoAYAPD6iQAAAQEICr2EnXT\/\/zWPFgMDAOwEAADoAAGJvwDiAZR0wlJK56tqlFe1HOm0VFhaiOcWtJZ43nf7eHsD2tyJ\/K8ndsT7\/moN+g+kqNoa96voAWR3X73z9F0sK2KRZoQ9VN6HNaYW+Llmhb+0VOgcE4Ch\/0maD\/B+wb0XHVFjEgoTLxKpa4r2EIurmjinfiWqsQ3xErD1BZzKNiSV8CvlpNJP3hvsK3HMgyDE6PQHkSLVMVv8S8BywaAe4ghg1aOL5+lpNM4cJv07v5epWwpZzHG2meHf5xzIJBrxdqcqYNqmzCnwuhMieNA1vJHA\/vF\/V4VZZDMtPzZhwQsnEqh\/JRQDAwABARYDAwAoAAAAAAAAAACaYR3799nn+p+nWgFSXGdBG3YKm8ZwEAm9gcVDhHHhhw==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454870,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0A3xAAEAGs2zAqAIQrNkUSs0GAbvbqziG1o6amYAQAXgMtAAAAQEICv\/\/NaC9hJ10","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0703{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454870,"pkt_len":286,"pkt":"xiwDYGpkTGr2n\/YnCABFAAEQA31AAEAGso\/AqAIQrNkUSs0GAbvbqziG1o6amYAYAXinsAAAAQEICv\/\/Nay9hJ10FwMDANcAAAAAAAAAAaUjp1pLq7doAXFoRPhZWR58fJOAnEpRkxO8Mv4ktuLmRQtiUMdV95mG4kqqPDHeqpzHA6lmvtKElK4xI9opiKbL06SgDrYtAygpdyYEy0vutTDREtFTwp2s6D\/1TaKOmK4EaXURmC4JPOM6tf0cu9yJSwwmhaxSsGEm8viYV3nmq19Hq6+xXInWS6B+ABplV3bV+VSZNMMbuy74K1cGTc0K+PtSRYBPu4w2wUEAYSMdI\/gxkypgBLQVpTzAZp4Mbxk2QPOSe48DI8gFybwi0A==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454870,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFYghgAAHYGP\/Os2RIDwKgCEAG7kBjGuZPqgnUKUoAYAPR1hwAAAQEIClG32bn\/\/zWHFwMDAR8AAAAAAAAAAQ7BhBG2DqqUMdwwsRseJG1rLbfoFfMGewoYmrVXALwA7JotYtDqBdPtWrARdP0z1AuCOC+kFPd\/t\/Cz4o\/KYIi1aMBLfMwwX7LmP2Xb8SYiD9VoTZSXEnGC8uXAjGSum\/ZcbiAhFwEHBotnLEOekifc6MgOgcJbQOoEw9EvxL+udMJ2Dbm25w09KdE5NQNAZruKREcbWqjnlkkXG\/IQj++BmW5eLSawGefGDc5FxLol9v0Cn8UbEjcC0ovNvBbu6AoKbdO6XhzsAhLW5IjlKz+nGVf5sZywenHdKYtgAWuGJf1ADfTw7bALT31Hp0ogHNXxDCVwmTy3Go6qvk3jm6sIDSU+6PxWH3ViVRmYZhPouOqlV5DGZQ==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454870,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8g2dAAEAG9TTAqAIQ2O8meMFmFGxVMrY\/AAAAAKAC\/\/9uQgAAAgQFtAQCCAr\/\/zZYAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454870996,"flow_last_seen":1582454870996,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454870,"pkt_len":86,"pkt":"xiwDYGpkTGr2n\/YnCABFAABIq6dAAEARCZzAqAIQwKgCAY8FADUANFCq5z4BAAABAAAAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454870996,"flow_last_seen":1582454870996,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0449{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454870,"pkt_len":102,"pkt":"TGr2n\/YnxiwDYGpkCABFAABYgb0AAEARc3bAqAIBwKgCEAA1jwUARA+05z6BgAABAAEAAAAAB2FuZHJvaWQHY2xpZW50cwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1582454870996,"flow_last_seen":1582454870998,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":52,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.PlayStore","category":"SoftwareUpdate"},"dns": {"query":"android.clients.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454871042,"flow_last_seen":1582454871042,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA83wxAAEAGmY\/AqAIQ2O8meIDaAbu5DOmwAAAAAKAC\/\/8p0AAAAgQFtAQCCAr\/\/za8AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454871051,"flow_last_seen":1582454871051,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq69AAEARCZvAqAIQwKgCAX6cADUALTLn3DQBAAABAAAAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454871051,"flow_last_seen":1582454871051,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0414{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA84WAAAHcGoDvY7yZ4wKgCEAG7gNr8u4aauQzpsaAS6yCywwAAAgQFZAQCCAqJFH+\/\/\/82vAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03w1AAEAGmZbAqAIQ2O8meIDaAbu5DOmx\/LuGm4AQAVfLBwAAAQEICv\/\/Nr+JFH+\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":70,"pkt":"MzMAAAACTGr2n\/Ynht1gAAAAABA6\/\/6AAAAAAAAATmr2\/\/6f9if\/AgAAAAAAAAAAAAAAAAAChQAIygAAAAABAUxq9p\/2Jw==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454871061,"flow_last_seen":1582454871061,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":84,"pkt":"xiwDYGpkTGr2n\/YnCABFAABGq7FAAEARCZTAqAIQwKgCAR3sADUAMs+l\/agBAAABAAAAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454871061,"flow_last_seen":1582454871061,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1582454871069,"flow_last_seen":1582454871069,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8\/AdAAEAGfJTAqAIQ2O8meIDcAbs4lMrFAAAAAKAC\/\/\/JKwAAAgQFtAQCCAr\/\/zbCAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1582454871075,"flow_last_seen":1582454871075,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8xAhAAEAGtJPAqAIQ2O8meIDeAbsJrvLMAAAAAKAC\/\/\/QBgAAAgQFtAQCCAr\/\/zbEAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8bmcAAHYGFDXY7yZ4wKgCEAG7gNxV\/jlEOJTKxqAS6yDJiQAAAgQFZAQCCAom516W\/\/82wgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/AhAAEAGfJvAqAIQ2O8meIDcAbs4lMrGVf45RYAQAVfhzAAAAQEICv\/\/NsYm516W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8Nk0AAHcGS0\/Y7yZ4wKgCEAG7gN4gvysUCa7yzaAS6yD0TQAAAgQFZAQCCApclUhu\/\/82xAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xAlAAEAGtJrAqAIQ2O8meIDeAbsJrvLNIL8rFYAQAVcMkgAAAQEICv\/\/NsdclUhu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRSjQAAEARqwbAqAIBwKgCEAA1fpwAPWeH3DSBgAABAAEAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAQMABK3CT3I=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1582454871051,"flow_last_seen":1582454871090,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"173.194.79.114"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1582454871094,"flow_last_seen":1582454871094,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36834,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8RuFAAEAGM+7AqAIQrcJPco\/iAFBu6HAoAAAAAKAC\/\/\/iBQAAAgQFtAQCCAr\/\/zbJAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":100,"pkt":"TGr2n\/YnxiwDYGpkCABFAABWpmUAAEARTtDAqAIBwKgCEAA1HewAQssi\/aiBgAABAAEAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQABwAwAAQABAAABKwAErNkVyg==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1582454871061,"flow_last_seen":1582454871100,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.21.202"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454871103,"flow_last_seen":1582454871103,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8ApdAAEAGssnAqAIQrNkVysrYAbsvYjRcAAAAAKAC\/\/9bhgAAAgQFtAQCCAr\/\/zbLAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1582454871075,"flow_last_seen":1582454871103,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1102{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"xiwDYGpkTGr2n\/YnCABFAAI53w5AAEAGl5DAqAIQ2O8meIDaAbu5DOmx\/LuGm4AYAVc8kAAAAQEICv\/\/NsuJFH+\/FgMBAgABAAH8AwNXR4IBK0icLctGWlxjvV\/JiAB62cpYMwCtfNZyJo3zdyCr3\/X3EqQMslzWKxfodTxbMmxBkYxsWxP2dnqi9pIeZQAiEwETAhMDwCvALMypwC\/AMMyowAnACsATwBQAnACdAC8ANQEAAZEAAAAfAB0AABphbmRyb2lkLmNsaWVudHMuZ29vZ2xlLmNvbQAXAAD\/AQABAAAKAAgABgAdABcAGAALAAIBAAAFAAUBAAAAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAzACYAJAAdACDrv790wU6es29sORpkI+NUqAeVoQxGptljCga\/6WmGZAAtAAIBAQArAAkIAwQDAwMCAwEAFQDxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1582454871042,"flow_last_seen":1582454871105,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1582454871115,"flow_last_seen":1582454871115,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8q7VAAEARCZrAqAIQwKgCAZ6EADUAKMiehDwBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1582454871115,"flow_last_seen":1582454871115,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0401{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0NlQAAHcGS1DY7yZ4wKgCEAG7gN4gvysVCa700oAQAPAK1AAAAQEIClyVSIr\/\/zbL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":90,"pkt":"TGr2n\/YnxiwDYGpkCABFAABM2yQAAEARGhvAqAIBwKgCEAA1noQAOIeohDyBgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1582454871115,"flow_last_seen":1582454871117,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+0402{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA04ZEAAHcGoBLY7yZ4wKgCEAG7gNr8u4abuQzrtoAQAPDJHgAAAQEICokUf\/7\/\/zbL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA83d0AAGcGtfGtwk9ywKgCEABQj+ImKPRybuhwKaAS87giVwAAAgQFlgQCCArBhO\/i\/\/82yQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuJAAEAGM\/XAqAIQrcJPco\/iAFBu6HApJij0c4AQAVdDYAAAAQEICv\/\/NtHBhO\/i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":363,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFdRuNAAEAGMsvAqAIQrcJPco\/iAFBu6HApJij0c4AYAVesTgAAAQEICv\/\/NtLBhO\/iR0VUIC9jb25uZWN0IEhUVFAvMS4xDQpIb3N0OiBjaGVjay5nb29nbGV6aXAubmV0DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgOTsgTm9raWEgMi4yKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1LjkzIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogaXQtSVQsaXQ7cT0wLjksZW4tVVM7cT0wLjgsZW47cT0wLjcNCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1582454871094,"flow_last_seen":1582454871131,"flow_tot_l4_data_len":441,"flow_min_l4_data_len":32,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36834,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.DataSaver","category":"Web"},"http": {"hostname":"check.googlezip.net","url":"check.googlezip.net\/connect","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 9; Nokia 2.2) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/79.0.3945.93 Mobile Safari\/537.36"}}
+2327{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1582454871075,"flow_last_seen":1582454871132,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2317{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8KYcAAHYGldms2RXKwKgCEAG7ytjkokMBL2I0XaAS6yDzNwAAAgQFZAQCCAptKuid\/\/82ywEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1676{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1003,"pkt":"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","pkt_caplen":1003,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xAtAAEAGtJjAqAIQ2O8meIDeAbsJrvTSIL8wn4AQAWIEwQAAAQEICv\/\/NtJclUia","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xAxAAEAGtJfAqAIQ2O8meIDeAbsJrvTSIL82KYAQAW3\/KgAAAQEICv\/\/NtNclUia","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0AphAAEAGstDAqAIQrNkVysrYAbsvYjRd5KJDAoAQAVcLdwAAAQEICv\/\/NtNtKuid","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0xA1AAEAGtJbAqAIQ2O8meIDeAbsJrvTSIL850oAQAXj7dgAAAQEICv\/\/NtNclUia","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2323{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":33,"flow_packet_id":6,"flow_first_seen":1582454871042,"flow_last_seen":1582454871135,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2328{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1673{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1002,"pkt":"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","pkt_caplen":1002,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03w9AAEAGmZTAqAIQ2O8meIDaAbu5DOu2\/LuMJYAQAWLDCQAAAQEICv\/\/NtSJFIAO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03xBAAEAGmZPAqAIQ2O8meIDaAbu5DOu2\/LuRr4AQAW29dAAAAQEICv\/\/NtSJFIAO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":39,"flow_packet_id":4,"flow_first_seen":1582454871103,"flow_last_seen":1582454871138,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"datasaver.googleapis.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0403{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA03xFAAEAGmZLAqAIQ2O8meIDaAbu5DOu2\/LuVV4AQAXi5wQAAAQEICv\/\/NtSJFIAO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1582454871152,"flow_last_seen":1582454871152,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA82rlAAEAGneLAqAIQ2O8meIDkAbvMauxuAAAAAKAC\/\/8TjwAAAgQFtAQCCAr\/\/zbXAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA03fEAAGcGteWtwk9ywKgCEABQj+ImKPRzbuhxUoAQAPhCcAAAAQEICsGE8Af\/\/zbS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1015{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":524,"pkt":"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","pkt_caplen":524,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA82hIAAHUGqYnY7yZ4wKgCEAG7gOSVNE5IzGrsb6AS6yB0TQAAAgQFZAQCCArIBAje\/\/821wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuRAAEAGM\/PAqAIQrcJPco\/iAFBu6HFSJij2PYAQAVtAOQAAAQEICv\/\/NtvBhPAI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0KaEAAHYGlces2RXKwKgCEAG7ytjkokMCL2I2YoAQAPAJtQAAAQEICm0q6MD\/\/zbU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02rpAAEAGnenAqAIQ2O8meIDkAbvMauxvlTROSYAQAVeMkAAAAQEICv\/\/NtvIBAje","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0842{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":39,"flow_packet_id":6,"flow_first_seen":1582454871103,"flow_last_seen":1582454871175,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"datasaver.googleapis.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2319{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0716{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":296,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEaKawAAHYGlNas2RXKwKgCEAG7ytjkok4WL2I2YoAYAPAHAAAAAQEICm0q6Mj\/\/zbUAlLuQZ7tC2E0I\/+a4yeVVUagZEEPssldkCoLqeJxckTw2TIPmak2VCzniPgQ7M4ovahjuMhAR7qP17BFuihlHGBi1Toiq7\/LsT1UbCaVj9KeWxU3qn5LqVESaWFILTwW4xepPErEhadU4P45jllOiVB7NTdj3qlwiIbh7f8RE8Y\/M17Nek1+tX909HFoLKuLYyNaKg70hb63ilQhvHFXdN5WdJQRR5iXkQxlo57FlsXrcD4fIlE9mL9um2nslYAlzcN39R+reeRMU\/alga+cZCm9X3GP0zzVr\/hbXlJDklrfXJPCxUo=","pkt_caplen":296,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0AppAAEAGss7AqAIQrNkVysrYAbsvYjZi5KJIjIAQAWIDqAAAAQEICv\/\/Nt1tKujI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0AptAAEAGss3AqAIQrNkVysrYAbsvYjZi5KJOFoAQAW3+EQAAAQEICv\/\/Nt5tKujI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0ApxAAEAGsszAqAIQrNkVysrYAbsvYjZi5KJO\/IAQAW39KwAAAQEICv\/\/Nt5tKujI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":246,"pkt":"xiwDYGpkTGr2n\/YnCABFAADo2rtAAEAGnTTAqAIQ2O8meIDkAbvMauxvlTROSYAYAVcGiwAAAQEICv\/\/NuPIBAjeFgMBAK8BAACrAwNFVUmkRCYrsTAD0Sv7c78jm6\/45rXgRFs9zPd5tSprMAAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABmAAAAEwARAAAOd3d3Lmdvb2dsZS5jb20AFwAA\/wEAAQAACgAIAAYAHQAXABgACwACAQAAIwAAABAACwAJCGh0dHAvMS4xAAUABQEAAAAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIB","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1582454871152,"flow_last_seen":1582454871200,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":32,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+1100{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":36,"flow_packet_id":4,"flow_first_seen":1582454871069,"flow_last_seen":1582454871207,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0401{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA02kYAAHUGqV3Y7yZ4wKgCEAG7gOSVNE5JzGrtI4AQAPCMDAAAAQEICsgECQ3\/\/zbj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0bqkAAHYGE\/vY7yZ4wKgCEAG7gNxV\/jlFOJTMy4AQAPDfhQAAAQEICibnXyD\/\/zbl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2309{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":41,"flow_packet_id":6,"flow_first_seen":1582454871152,"flow_last_seen":1582454871230,"flow_tot_l4_data_len":1806,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+1936{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1202,"pkt":"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","pkt_caplen":1202,"pkt_type":2048,"pkt_ipoffset":14}
+1028{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":41,"flow_packet_id":7,"flow_first_seen":1582454871152,"flow_last_seen":1582454871230,"flow_tot_l4_data_len":2974,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":424,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","server_names":"www.google.com","ja3":"6ec2896feff5746955f700c0023f5804","ja3s":"eca9b8f0f3eae50309eaf901cb822d9b","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=www.google.com","alpn":"http\/1.1","fingerprint":"32:07:6C:9F:96:7D:CE:82:15:C6:C5:7B:49:90:53:A1:CF:80:4F:B0"}}
+0401{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02rxAAEAGnefAqAIQ2O8meIDkAbvMau0jlTRT04AQAWKF9wAAAQEICv\/\/NuzIBAkd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02r1AAEAGnebAqAIQ2O8meIDkAbvMau0jlTRYQ4AQAW2BfAAAAQEICv\/\/NuzIBAkd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1582454871069,"flow_last_seen":1582454871237,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.PlayStore","category":"SoftwareUpdate"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.clients.google.com","ja3":"9c815150ea821166faecf80757d8826a","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2329{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW+broAAHYGDmDY7yZ4wKgCEAG7gNxV\/j7POJTMy4AQAPB1RAAAAQEICibnXzD\/\/zbl8kB0BU\/LoX9fP25axRi6mg+jrwjfAAdasFgcXjDqwFVU6VaTsul2cnbxO5J0BWqduNiWF+j9+9iksv2bjEvLQ6yzljqQdm3jGQ1SDSX7\/pVyt5tuz3NriQ3W6bekKGbTIZMSYTsb1XEZYrH6zvaRdlj5gFn4cIS7cibqVfQn9vQ1\/QdvzdVMEPQeNlyJ69YvLM\/e6yF1yKSyUJyEBsy41kvDL9mYCqm4SzrNP29Sx58fWJHNxdY3po7NaURYW8jnDoLXyzojO5c6Ng0uDC\/60Eql8TR42dVqT+CwpWu70Y3JD8s+o6KH7zPddPyrxSzRUoqiuRkE7bSE97RRz1+C3fxR7ooMYJ4sf0Lq0mR3XFAkZqAHSFUxx06S4q5iBRaq+MSiaJR9yJaPtODtMCp0v+ncelXeEuZyKaFBW2wXbNnX1oJmdN3dcyskJZXgq6tohkMC9BLM9eI1N8IUav7SIgh4FtZBoYJq25wiGjzjc7GzEUqs4N2JPWdKfdD9y8Lcv+NSYOtZY0bN3A0eNy4WnLDm7Spbc\/xi69F2X9s7EKcd3OyLM\/Q0Zl2Ol5qvjVDNu3LPsvDriS0h5Hnnvm+JYQeaZn5SPDpdYkGIhI9R\/VkSp2WrTqqlMC4NbXXxiK9X+z4GGXa78QmMRgex1xcCLDGB2zRvdeHu+Rwt8pdfEVdtCfOn4sXtRCNk+8fu8fg7GikzNSpc3w7KoqLdhfymIFg1hXZAhp8jD2PHPDpfFjt67kxKAEOHFprggf5L7jojuhTlxMgonaRPEKwnWJ2p2+wDmyvLzHB1GwHTv6VBWdsJqDnYLKPw9K7F+q1\/l2MQe6smPKOMPN3tRhWelrPHc2u\/6X\/ZOCzD\/TP1EX+hjPKaQz8+ayjsqCarYlbE2SbLEO3BsnWPpL7ZwBtrt41EFmrrvsYQ+x6P+ZaGkC0AUIF0h4HJJeu0ZEye6RSjn4m0ECmrjKfbi2yn8Ci+HDQFRdew\/Gr8uvOhWTqiKBkC7viSxMf0pjcXrJcmIWAfvKEGEimAdd4ZRwk0oE\/hC0TOrhdbwMPI7We\/c96IKsu7IhmvwjLU5w9exrihf7D+cgPpYgaxU3IcWJ\/IDKh5kMgiF5prSZPoC1KwpIoonSBqAsWeWrxIqwmjAqVT1ly1nrlSPZESYlcCqOLu1ErspULpxnjW2X3UxcBYcuIEOUqNEdvePKDDHQzzFdeDaI2z319DUR9jSDNK7BYwjCJIRxC5VvtP9OG2gV99uPNS6mCRUinynLHcz4hbafoU\/8DVgx\/QAEMSsTQoEYLZ1AV+1XCj9\/YewzH8ZJ7bJLsr1F8vxn2S3DdMyeSgxpA\/dYf2Qg4yHOTnhQ2+PE\/3oQVDD5hiQ8utO6X80v8MyHyoa+Kj81JDoH1CDyFp6iEN8kdCHfnBJtLfd+FYm52oJ8tks0C2JS5QB6qhh6PZElobgOutpvt9\/XUEKdjVnKniKiodRHqi7IJWliT4mMxAtgWznIIVuOzh9576xUmD9xvSyIewQ80V3xbGLKbR0gzVqRADKPpWvV4mA+i7vzQfM8xf5BMhlDBtKghWenh6kePLk8YQp1PBgU+Geafh+ibgiexxOWUocGyie2bHdCm4Sd\/Sd4Zbj\/\/71IiuJhG1r05bIBj8UY3KLzOlGJQnys9UvUqZs1S\/lR4cJ1Uf8duJ\/Fds6X3vr1Wtk7wxcj4I\/bRAmAbK5gage6cci5bla6T02NoyXVYGfTMrehYWh5tznIXiY5QZMVye9xkY36qPYMccHG2Iu8b268aQHUjlTFqjJ6YQuD6m41O0\/w2ONbwRAh0a0TZbjVFDX4OD1Yi3FOmctBmhA2iTCi3gt5Wkla1Smvb295ZJlocnhekhhhHZ\/GT4jV57FRRRGiSPtfx\/eeQ=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1673{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1002,"pkt":"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","pkt_caplen":1002,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/ApAAEAGfJnAqAIQ2O8meIDcAbs4lMzLVf4+z4AQAWLZcQAAAQEICv\/\/Nu0m518w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/AtAAEAGfJjAqAIQ2O8meIDcAbs4lMzLVf5EWYAQAW3T3AAAAQEICv\/\/Nu0m518w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0\/AxAAEAGfJfAqAIQ2O8meIDcAbs4lMzLVf5IAYAQAXjQKQAAAQEICv\/\/Nu0m518w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0xA5AAEAGtFXAqAIQ2O8meIDeAbsJrvTSIL850oAYAXj6uAAAAQEICv\/\/NvNclUiaFAMDAAEBFwMDADXphCLNpI1gUCv08CVDDhCS3vb4M90om4x3uX0gnJ8HzXozLxHgey1xT19EPJNX9LKDpskIxQ==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":363,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFdRuVAAEAGMsnAqAIQrcJPco\/iAFBu6HFSJij2PYAYAVupDgAAAQEICv\/\/NvXBhPAIR0VUIC9jb25uZWN0IEhUVFAvMS4xDQpIb3N0OiBjaGVjay5nb29nbGV6aXAubmV0DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgOTsgTm9raWEgMi4yKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1LjkzIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogaXQtSVQsaXQ7cT0wLjksZW4tVVM7cT0wLjgsZW47cT0wLjcNCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB03xJAAEAGmVHAqAIQ2O8meIDaAbu5DOu2\/LuVV4AYAXg1rQAAAQEICv\/\/NvaJFIAOFAMDAAEBFwMDADXVRmSdtYV84rUYgscB7KZOxlHItd3y5xaAQ8+97H62qRsrr9NPFJFj45mvi9FpX6MWKxOldg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0NsIAAHcGSuLY7yZ4wKgCEAG7gN4gvznSCa71EoAQAPD7CgAAAQEIClyVSS7\/\/zbz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454871292,"flow_last_seen":1582454871292,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq9RAAEARCXbAqAIQwKgCAbUXADUALUF1Da4BAAABAAAAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454871292,"flow_last_seen":1582454871292,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0402{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA04csAAHcGn9jY7yZ4wKgCEAG7gNr8u5VXuQzr9oAQAPC5SQAAAQEICokUgKz\/\/zb2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRfN0AAEAReF3AqAIBwKgCEAA1tRcAPWwTDa6BgAABAAEAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1582454871292,"flow_last_seen":1582454871294,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+1015{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":524,"pkt":"TGr2n\/YnxiwDYGpkCABFAAH+3nIAAGcGs5qtwk9ywKgCEABQj+ImKPY9buhye4AYAP2uDwAAAQEICsGE8Jb\/\/zb1SFRUUC8xLjEgMjAwIE9LDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkFjY2Vzcy1Db250cm9sLUFsbG93LU9yaWdpbjogKg0KQWNjZXNzLUNvbnRyb2wtRXhwb3NlLUhlYWRlcnM6IFZpYSwgWC1PcmlnaW5hbC1Db250ZW50LUxlbmd0aCwgQ2hyb21lLVByb3h5DQpDb250ZW50LUxlbmd0aDogMw0KRGF0ZTogU3VuLCAyMyBGZWIgMjAyMCAxMDo0Nzo1MSBHTVQNClByYWdtYTogbm8tY2FjaGUNCkV4cGlyZXM6IEZyaSwgMDEgSmFuIDE5OTAgMDA6MDA6MDAgR01UDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZSwgbm8tc3RvcmUsIG11c3QtcmV2YWxpZGF0ZQ0KTGFzdC1Nb2RpZmllZDogVGh1LCAyMSBBcHIgMjAxNiAwMzoxNzoyMiBHTVQNClgtQ29udGVudC1UeXBlLU9wdGlvbnM6IG5vc25pZmYNClNlcnZlcjogc2ZmZQ0KWC1YU1MtUHJvdGVjdGlvbjogMA0KDQpPSwo=","pkt_caplen":524,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuZAAEAGM\/HAqAIQrcJPco\/iAFBu6HJ7Jij4B4AQAV88kQAAAQEICv\/\/Nv7BhPCW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0Ap1AAEAGsovAqAIQrNkVysrYAbsvYjZi5KJO\/IAYAW3dLQAAAQEICv\/\/Nv9tKujIFAMDAAEBFwMDADVv854oia57qsZKL2XJMUFtHTxjeo6vjfgJRQUfy2PLm1T1JGRC5KM+KNF15Iy3q9pdxkWnXQ==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1582454871321,"flow_last_seen":1582454871321,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8nfFAAEAG2qrAqAIQ2O8meIDmAbsuQarwAAAAAKAC\/\/\/zCgAAAgQFtAQCCAr\/\/zcBAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":152,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKAp5AAEAGsnTAqAIQrNkVysrYAbsvYjai5KJO\/IAYAW34zAAAAQEICv\/\/NwRtKujIFwMDAFFJnZKaM9gQsevdeBdx89hdv7S7NW06cDUNblX2QxT8+Fz\/6srYXvn2lo26tjuuh\/o0\/uD1mTA\/amaUtg4XOC\/5vu97X0e0xIppBPzz3RfhtOA=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":382,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFwAp9AAEAGsY3AqAIQrNkVysrYAbsvYjb45KJO\/IAYAW0xrgAAAQEICv\/\/NwVtKujIFwMDATc82jPEDruuII+fpFTJEuZupdHBO9TshMIb2eLglBMe2a+soTgBbQLVgOkrQ17rR345soZYwnq8o8cZSRK1bN3xFJKjJrXXhw9JAuJZoGSOZaZbvxAGG8fMErxQHvFRArKk3YkHUTDw+KlHZoKuCjNcnW2TmKDRia\/A1H5GGhOBYkwqWL4tFoeZ1S1JIhpfFAzz7zqFGLrPetqe0xd+uSahDyOuBc+ffHsmD4xbTOUD3CCKEjEX\/SA\/7EqOrv\/0AdoL36p\/tt2RL5LmFIPx0523VRt7+DTe80TiqcCeOSt76JQSw3WwGoq3ddCcvQN3FJ+72iZ\/E5OKMst7yguhgo5GQrAWACWPPvqFC2YWnHzHK0DVMENxpnqc0nWY01vA37IUMiWEeYL6fWr1QZXZvgb4qr69gSxrjQ==","pkt_caplen":382,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":132,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB2AqBAAEAGsobAqAIQrNkVysrYAbsvYjg05KJO\/IAYAW09JAAAAQEICv\/\/NwVtKujIFwMDAD3KgCX9htg7W3R2fS8o9jlCurkQVVj9Gb7dDNKtzVqo95yM25x0wDUHTWb+nmhY4QJeslp9CXBZYnLBBOoM","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8saEAAHUG0frY7yZ4wKgCEAG7gOY64cVhLkGq8aAS6yCKsAAAAgQFZAQCCAofL14G\/\/83AQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1699{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1023,"pkt":"xiwDYGpkTGr2n\/YnCABFAAPxxA9AAEAGsNfAqAIQ2O8meIDeAbsJrvUSIL850oAYAXhFBAAAAQEICv\/\/NwRclUkuFwMDA7jcXSbmK+7whAoBJqkuLSQdNF0dOQ\/xEt0K9KXgAXlO+nMKeWY5RqBoBswD8QbQh2+LKGTlcqALheQbXFUcEUInngBab18DPttwjj1qeCr6lVeuLlqseDaZT0Rc+03FvOApJanR3Hj5qA+CM\/IoKYXulhMt5DY\/un1XHbqFpImaPS4ZDCaCZkuJkQwsjXsQQ\/V\/nZwvEZKLehvJu27L7YvhbDykKRfX64Vx\/qOrnTwb+qjsbXDYULlyac+zQbfpNQ1xLZcC8fMjI3OJhxzWaYDFXCUX\/075XnmS9JjIzH6Z6SeAblZXJDAJVAh5awPDg3Yr1s0AAjW+TN9UfD\/6HBH09hRYurHfUiMWUDT3xVFARnFYvwVH8cantQnttRhDL5TeyrChB9mmGttaWubpUtkiAwXl2fYvxp4QKAvqgrsYE1WWjjdMCgqtVb+w64RJ+knv49dC67n\/Ug+Z6badQ+6kg4VCHcoBzYjRkfsK2agi1j3dFSsxON5Pw+31iXniKDheOKFavHCnolai+8EUcSMD4H\/px4dfuv9IlS2g3InYdce4c77enIGF24ahns\/wU2S5BLGXp5tS24Uk0N6dp3CwkXrZkeIA8YBRSRVBRQNSkF4BL0UpxVHjP6vGPrd1LzG\/UYHC+PHjYiP8ZfWrslklydVMtjZiRUWZz2GKLJSnFzDqRK5lrpf8Qul\/AS+XdxIiiGyTc8\/8QFB8sHrh4BgS4h8xZjKWQ8ezMIvQTdGYCm9iI4N3Ay0irF3ICU+zIqVM1Zmv5JYVNZiT6EUrtEljAUJD7HzDkpC4r3KwvOvG69IQOOGLbvP3VYEwwPQpqw9eIImnrmQqZEd9+F5KD6IavEikqo9h0HhxXXZhJgzwMeOaQC6x1rgGhl\/zVi8gOVD1v\/N4EzhOiMwWtcqxtknM1LlzrGsC+7DONroynyymIvw8mR42pvXVl2l0HGeUCyAC55EgYbgJPKLo5Sz2ek6SBjDqwdYJNTiPZp5aZ7OxDRXfAqygjYL17huYnpYQ27CpCutbZaO59ubIHWFeNzpmEahhSFmZtnN27ekaYY4RHU9JLZ0FtQHnU9+SEZC68J8pI2e2RfQKAJYvy6MGC1ae71hs1ywtqJjlj0DUMuEtiDQZyqeRX6gzy2NirFu1ux5B+6HJyhOYZdclDDIWy76E6sRMdesPHR\/aSJCIvoflRIyR37hLMmWuHHUQ6nWB+yRQCrYxtluzJGJ2i9kYGZebpB5jVvUcVyUY1xc75t1a2dJzOuuJ5GB6","pkt_caplen":1023,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0nfJAAEAG2rHAqAIQ2O8meIDmAbsuQarxOuHFYoAQAVei8wAAAQEICv\/\/NwUfL14G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1101{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"xiwDYGpkTGr2n\/YnCABFAAI5nfNAAEAG2KvAqAIQ2O8meIDmAbsuQarxOuHFYoAYAVe\/wgAAAQEICv\/\/NwYfL14GFgMBAgABAAH8AwM2HQqqNkiYixPn9BwY+6aPMTBPHUYVai51sP\/t1krD8iCPeQv28z7\/GLsaGfQh98BpWEFaJzPvJz3ZigJL3Bq7jwAiqqoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUACgEAAZG6ugAAAAAAGAAWAAATYWNjb3VudHMuZ29vZ2xlLmNvbQAXAAD\/AQABAAAKAAoACNraAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQASAAAAMwArACna2gABAAAdACDaIvjlTeWP\/EfNzQgKtZHyge+ZIFM5wilp\/lsIRx8ZUQAtAAIBAQArAAsKiooDBAMDAwIDAQAbAAMCAAIKCgABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1582454871321,"flow_last_seen":1582454871339,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1582454871343,"flow_last_seen":1582454871343,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":94,"pkt":"xiwDYGpkTGr2n\/YnCABFAABQq9VAAEARCWbAqAIQwKgCAYtpADUAPJHqlgwBAAABAAAAAAAAE3NlbWFudGljbG9jYXRpb24tcGEKZ29vZ2xlYXBpcwNjb20AAAEAAQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1582454871343,"flow_last_seen":1582454871343,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"semanticlocation-pa.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0402{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0Nu4AAHcGSrbY7yZ4wKgCEAG7gN4gvznSCa74z4AQAPf28QAAAQEIClyVSXL\/\/zcE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0sbMAAHUG0fDY7yZ4wKgCEAG7gOY64cViLkGs9oAQAPChQgAAAQEICh8vXhj\/\/zcG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0nfRAAEAG2q\/AqAIQ2O8meIDmAbsuQaz2OuHFYoARAVeg1QAAAQEICv\/\/NwsfL14Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RudAAEAGM\/DAqAIQrcJPco\/iAFBu6HJ7Jij4B4ARAV88gwAAAQEICv\/\/NwvBhPCW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2324{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":43,"flow_packet_id":7,"flow_first_seen":1582454871321,"flow_last_seen":1582454871370,"flow_tot_l4_data_len":2175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":310,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2330{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"TGr2n\/YnxiwDYGpkCABFAAW+sc0AAHUGzEzY7yZ4wKgCEAG7gOY64crsLkGs9oAQAPD6GAAAAQEICh8vXin\/\/zcGu1IywbQbnDc5ksf3r3A9cpM75iOyHjU9m\/pzcf1D1KKa0Y+q8qTCI6ibmEJGvZBc\/pyC6bzW9vp\/RjW\/jEE6rxszvW9No1vC3+4Upo\/moRHxC5460pU5mEl0C\/rIhxb9ZqKz9imSAW1A1MFcxgIXjkqp2Txd\/69oex\/MnOc7nq3H3mXJcbElER2WggtIeNSwxA65XMFhRluAX5dnYiDIG+mhXOHPyKYFDhaEFkRG1gTWBt9ErqKKw0JabG8MSuSajimj0CIbFoA6ThiA+Fy\/lmymgrFaKoUXkg17lORKkMwV6q4tL7Dkc\/aQ3erUMXv21yjorSJtTEk2h76w3fxCi5KqK4CJQAC\/bSuVfrGaq+TwKISfi7gfKCfhYEZdUquwnh8ts2Svs6ue1VByD4g\/uplHRQFel2Av4M0DDLhE4WTarczEVm0tCpvySs7\/5a4E6mAb4Pvvhq3Ehwemz+tjXDky1NCTfSsNMHWLf2oocAKK\/IU90wJ7ZKQDVEyDwtAhgfwqz6QLRhBLGYYPGs\/CWxL8A1dtUTTDNro1ee3Hk+96VntFB3ewB0puBySlTttVaW28TG1u6dYWlJghTWmTKpmPiZBqgYDJJBNRnnzZNEl0nWhW90Ah2YUbd3FvRa4ckqGYSUHAvt6PNT2nOmYGK\/D5Gj1xyv7mHzD6RrF+RahYm8AqGJ6\/jByt74D6JhzqpJxMhw0mtFHSlP41fNSzdUSteM\/wI8nd1MgvTmAS6yKamFipzpOJGmHdyVn7Q6YLHSmrkOuKkK78jwZvaDUnVV4bLlDil8vlJenC7kFTrV2uCNzQdBqJRIrRYFRYCEBbjAH0LIrlRhoIpHwU\/wvAZ84hAtrOcMbLVQ3TXA2s0av+5rNScJAHXtGlvCHpyB+wup6BRoS1GLdw9EP\/fqg6jy+4J9klo\/eE47vA8YhATuD0wNeyV0tX1u+yUg2EyIwpj0x0hSwTQA6c34pTjAhYdO8zKX1tscCbLsxXRw45vEzpzFZRjfkAvKhLLcI3fLpTJyxFAm80fDCcTmSXlyMUIX+6paT3jiru4lb9x2FisU1TnQnAHuPg7ICf0EL1MHgr6SBu7GQ2MtbXyX\/U4VFgsU5oWKIwAOfqpKZt\/9n4tQmDfUu3w+CwO7A2usG1jd+VvT3Rh5tZECP0Ws1X3h4T3+2EuymphaGigx4Nffn+5FdtiJ2UbSPY6YoIuqAxifiIA6g8jfcLU1T4VRyLxYrJwt2h555xwlr3JOLQvlFdX3dW0klbYnmF91p0QMLwEUXTYJNVyno0FhSZ3ju9qztgZorW\/+F09caxSOnf\/roEJOxXCeMN\/hJk8uGefKDe\/yclC2svHEyN7S8wn5ny40jJGVrQiS1GJnANfH2RjRFQGRja9DFRh4JqER7bBGuAlPj05uE3M3aC53ghBh9I1lJ1RI3MxiH65S0XJk6XrOSVMH2f+215UAsHTlOQPyiw06Y6tw8Js010vfKDz2KEDIqUZcc3Q1YSGplrsomHOOjCU1tY\/N\/OR\/6bXcggsW0N9+nAx7oi0QxLlsSOBGl5z1hgrXUmUAV1cm8qxtBtZwFhfuG6vtDzcC0eg5p0yG32tYqai218Z1FPXvKTqB4tj+pA5vabVkFhPHdb6k0p+KuZeD1X5XGzFWwO68LIaIZ+lre3L+fhIw3WF0mHJ62dNTpA\/KfzUmhy\/FJvDx8O6VFjXLe+pa6qVGFpn7GWnMcLEbpoRaTQZCkFEiFNlFnp+B409wxFP8FXj3De4vr854OdUGXXfE+J9qDGi350rOaTiIvL5ZWZnj1jrXJvTS82NE2nn9+cKXs\/tMolW0uqYmvUXNtDHES5QHMevGBoBNyfMnOcF8rKgh+1erjpLO0zACGZsXft4PxbLWoP1Ks=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":275,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEFsc4AAHUG0QTY7yZ4wKgCEAG7gOY64dB2LkGs9oAYAPCqKAAAAQEICh8vXin\/\/zcG7ueDwtBPQ+\/zXsd4N+IEldV7LTFV2EKTDrUd7hUGwSYlVe0vqdvSZnh5+J+xEX+LutOXu6gzXGICoDkMaViKEaCNE5scBgiduaC2FyrTG22vcjUAhYx0BAyOwo5phr51dWHRwZ8\/4NMZ59QJtbgQrURiXm6DkeH\/9kjPuwsj0TV5WyfnKb9U3B8F9KYSXt6tXbwTT2cLPpA7Kl6QYsKtDGlSH8ah+eEL5OjS9A6xeA8Iyp9c6uhfJC+Inp+pmx\/v2ge54HDt537QN4TWGHVU0CY=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMNAAEAG3+zAqAIQ2O8meIDmAbsuQaz2AAAAAFAEAACP5wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0sdEAAHUG0dLY7yZ4wKgCEAG7gOY64dFHLkGs94ARAPCVQgAAAQEICh8vXiz\/\/zcL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMRAAEAG3+vAqAIQ2O8meIDmAbsuQaz2AAAAAFAEAACP5wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMVAAEAG3+rAqAIQ2O8meIDmAbsuQaz2AAAAAFAEAACP5wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAomMZAAEAG3+nAqAIQ2O8meIDmAbsuQaz3AAAAAFAEAACP5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":110,"pkt":"TGr2n\/YnxiwDYGpkCABFAABgqGIAAEARTMnAqAIBwKgCEAA1i2kATI9glgyBgAABAAEAAAAAE3NlbWFudGljbG9jYXRpb24tcGEKZ29vZ2xlYXBpcwNjb20AAAEAAcAMAAEAAQAAALIABKzZFEo=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1582454871343,"flow_last_seen":1582454871383,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":60,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"semanticlocation-pa.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.74"}}
+0402{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA03ooAAGcGtUytwk9ywKgCEABQj+ImKPgHbuhyfIARAP08jwAAAQEICsGE8Ov\/\/zcL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0RuhAAEAGM+\/AqAIQrcJPco\/iAFBu6HJ8Jij4CIAQAV88JAAAAQEICv\/\/NxTBhPDr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1651{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":984,"pkt":"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","pkt_caplen":984,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":33,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA04lEAAHcGn1LY7yZ4wKgCEAG7gNr8u5VXuQzvjIAQAPe0xwAAAQEICokUgWP\/\/zck","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454871496,"flow_last_seen":1582454871496,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq+5AAEARCVzAqAIQwKgCAVlCADUALUQf0TEBAAABAAAAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454871496,"flow_last_seen":1582454871496,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0528{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":159,"pkt":"xiwDYGpkTGr2n\/YnCABFAACRopNAAEAGf3PAqAIQrNmozsTQAbv86phbj0XFS4AYAXh5yAAAAQEICv\/\/Ny5msgBAFgMDACUQAAAhINwq9dm2l+1NqZbhRu5yA6j6RbJvmaMd4dASJb8g97h4FAMDAAEBFgMDACgAAAAAAAAAAHyPThhVhwEUPK3EZVkzHmk2upX9RvQBnCbUPrOAggRx","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRnZYAAEARV6TAqAIBwKgCEAA1WUIAPff70TGBgAABAAEAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAJMABKzZFEw=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1582454871496,"flow_last_seen":1582454871536,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.76"}}
+0803{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFY1kUAAHUGVfqs2ajOwKgCEAG7xNCPRcVL\/OqYuIAYAPB\/hAAAAQEICmayB0j\/\/zcuFgMDAOwEAADoAAGJvgDiAZR0wlJK56tqlFe1HOm0VICTP5ZM\/eSHNSM2EnSKfUzry\/oUm6AATJtMRjz8a94e7NdE77GktTCb8W9\/REi7XjvKa9zAnUKqD351xUG6x23vdQzLarjM55gDmCiTGJTE8ECuAaYeBOyVdE7a4jahZlQ5K8Rht5jCI9tVIWfOGdj4LDS21nhwgv71QLVUNpo\/kvdBLsdVnNCwlFpRqUtJRdwVlBA8ttrRUdvraKOu77af5AxzZ1K+zVMBBHOYfeTvwFLZnmrpEU7qLLrKUtNpD1gl9s58z9XAoaWRJHqygPeXHxQDAwABARYDAwAoAAAAAAAAAACls3U\/mXy65X7Grzj2c6IzhQm8OEIMQqPstE+Q9ytycg==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1582454871553,"flow_last_seen":1582454871553,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8o7ZAAEAGEyjAqAIQrNkUTKpyAbt9gJSNAAAAAKAC\/\/\/OqgAAAgQFtAQCCAr\/\/zc7AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8n5IAAHUGIkys2RRMwKgCEAG7qnIP+mJJfYCUjqAS6yAAJQAAAgQFZAQCCAqRSuAV\/\/83OwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0o7dAAEAGEy\/AqAIQrNkUTKpyAbt9gJSOD\/piSoAQAVcYYgAAAQEICv\/\/N0WRSuAV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454871600,"flow_last_seen":1582454871600,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp"}
+0421{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBq\/ZAAEARCVTAqAIQwKgCAeYMADUALTc\/5u4BAAABAAAAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454871600,"flow_last_seen":1582454871600,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRUPMAAEARpEfAqAIBwKgCEAA15gwAPWHd5u6BgAABAAEAAAAACGFjY291bnRzBmdvb2dsZQNjb20AAAEAAcAMAAEAAQAAANoABNjvJng=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1582454871600,"flow_last_seen":1582454871601,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"accounts.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+1097{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1582454871553,"flow_last_seen":1582454871614,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0529{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":159,"pkt":"xiwDYGpkTGr2n\/YnCABFAACR2r5AAEAGnYjAqAIQ2O8meIDkAbvMau0jlTRYQ4AYAW31ZwAAAQEICv\/\/N0zIBAkdFgMDACUQAAAhICz48gWJKZkp2KCZYEWlbEtnamYNOrvBXd8icZepK9lYFAMDAAEBFgMDACgAAAAAAAAAAKgrBLovHa9iALmwD3r2UN8P\/Cc1B+BYZJt55LSw9zEx","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1582454871623,"flow_last_seen":1582454871623,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8E0lAAEAGZVPAqAIQ2O8meIDqAbtXpCQEAAAAAKAC\/\/9QRAAAAgQFtAQCCAr\/\/zdNAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0o7lAAEAGEy3AqAIQrNkUTKpyAbt9gJaTD\/piSoARAVcWUwAAAQEICv\/\/N06RSuAV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0805{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":358,"pkt":"TGr2n\/YnxiwDYGpkCABFAAFY208AAHUGpzDY7yZ4wKgCEAG7gOSVNFhDzGrtgIAYAPDi8wAAAQEICsgECrP\/\/zdMFgMDAOwEAADoAAGJwADiAZR0wlJK56tqlFe1HOm0VCpWs2\/K26cuVt0+FdhYYcAWYeBOMH739QqoXqTZxdAwSf5SJMkskBjvOFCT2egFBRGdz\/dMQa+5zEG7KzOq8+a2cjNiNSFQTukt0\/JfWFxxYclpUg8+WWJMLKDlF4keVUBUuqhc3eLmRYgOPso9z5UsT7\/VPm60p2zlqL5BHD25XoT1UaPNRkJjTDwBD\/qzk9ErFC+85Zjzt2e1vrZc+B5QnFf4cqMxExq\/KExjhomz3HtjXzkdwfQ2L3WwYtsha\/0yWLJKeItQHe7kJtjmA7KLSRQDAwABARYDAwAoAAAAAAAAAAC\/tg0hOynrZ\/f7nkadyxJgik+pTzT93RTmcJLpr0rG5g==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8YK4AAHYGIe7Y7yZ4wKgCEAG7gOoEIWijV6QkBaAS6yBQGwAAAgQFZAQCCAqpXP8l\/\/83TQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA02r9AAEAGneTAqAIQ2O8meIDkAbvMau2AlTRZZ4AQAXh99QAAAQEICv\/\/N1HIBAqz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E0pAAEAGZVrAqAIQ2O8meIDqAbtXpCQFBCFopIAQAVdoXgAAAQEICv\/\/N1GpXP8l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0n6sAAHUGIjus2RRMwKgCEAG7qnIP+mJKfYCWk4AQAPAWgQAAAQEICpFK4FL\/\/zdL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0836{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":46,"flow_packet_id":7,"flow_first_seen":1582454871553,"flow_last_seen":1582454871657,"flow_tot_l4_data_len":2175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":310,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2321{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":286,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEQn7IAAHUGIVis2RRMwKgCEAG7qnIP+m1efYCWk4AYAPBrTgAAAQEICpFK4Ff\/\/zdLhZxPPl5g12SWR76o8mqaRhsahZZepmW088pypBWFGvuk7y0AUpNhokLZK1\/u06Xyo+4eMIMfWhu3AS\/4G4uJSMvcDp0pZZO\/E2pukUrNQJWBpomkGEbyq3FyS6A+VWn258iXtUs1w8X8IcXms8uWTo\/rpuXEf9hwHjuEB1\/Y+uM7wGtfibiHKyD1JkLzRtMypBL72dCHVnhlQLQesuCRQJL3udVVPbBKtkCkEYRXyxUdcHa8g4yWoQJ9qi1r1Vyl1tuA0VowniC5eSQrw88pwrRxtt32+0kvrXX42g==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqFAAEAGYFHAqAIQrNkUTKpyAbt9gJaTAAAAAFAEAABrwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqJAAEAGYFDAqAIQrNkUTKpyAbt9gJaTAAAAAFAEAABrwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqNAAEAGYE\/AqAIQrNkUTKpyAbt9gJaTAAAAAFAEAABrwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0n7kAAHUGIi2s2RRMwKgCEAG7qnIP+m46fYCWlIARAPAKfwAAAQEICpFK4F\/\/\/zdO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":54,"pkt":"xiwDYGpkTGr2n\/YnCABFAAAoVqRAAEAGYE7AqAIQrNkUTKpyAbt9gJaUAAAAAFAEAABrwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1101{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1582454871623,"flow_last_seen":1582454871671,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454871676,"flow_last_seen":1582454871676,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBrABAAEARCUrAqAIQwKgCAYHYADUALeidI0IBAAABAAAAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454871676,"flow_last_seen":1582454871676,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRtlYAAEARPuTAqAIBwKgCEAA1gdgAPR0+I0KBgAABAAEAAAAABWNoZWNrCWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAQMABK3CT3I=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1582454871676,"flow_last_seen":1582454871677,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"check.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"173.194.79.114"}}
+0402{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0YMIAAHYGIeLY7yZ4wKgCEAG7gOoEIWikV6QmCoAQAPBmhwAAAQEICqlc\/1b\/\/zdZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1582454871623,"flow_last_seen":1582454871702,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"accounts.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2328{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":275,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEFYMYAAHYGIQ3Y7yZ4wKgCEAG7gOoEIXO4V6QmCoAYAPDmjgAAAQEICqlc\/2f\/\/zdZFInUiXd0kaYEdpcxleOS67gYnABGoCxqGAj2L6oEmIFGVoq\/Or1R\/UMCz28Vrm5swFo0M5+A8ibBsdRBrp4O9r8uMau1rSvUHb8Iq6L67JL1a744dtYrLnMMJ4A\/F6rcIxHrIVX0YhsMQxLeS70ceTQlbaTd5B1b9RQnxBddLAebAqW5398qiLSuU2DTlrzu18ELxtiXzFkIVdhNCF0T23rYqcvvclDZ14CHSE\/FLMpN9Ab6zW2Jx2SQxY4v2o68vWtF39FLsKwzN4c7nKbSbD0=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E0xAAEAGZVjAqAIQ2O8meIDqAbtXpCYKBCFuLoAQAWJgcgAAAQEICv\/\/N2GpXP9n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E01AAEAGZVfAqAIQ2O8meIDqAbtXpCYKBCFzuIAQAW1a3QAAAQEICv\/\/N2GpXP9n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0E05AAEAGZVbAqAIQ2O8meIDqAbtXpCYKBCF0iYAQAW1aDAAAAQEICv\/\/N2GpXP9n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1582454871741,"flow_last_seen":1582454871741,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52514,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8FotAAEAGoFXAqAIQrNkUSs0iAbsOnCHhAAAAAKAC\/\/+NXgAAAgQFtAQCCAr\/\/zdqAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1582454871745,"flow_last_seen":1582454871745,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36848,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8bVhAAEAGDXfAqAIQrcJPco\/wAFDXL1ozAAAAAKAC\/\/+PAwAAAgQFtAQCCAr\/\/zdrAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1582454871772,"flow_last_seen":1582454871772,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36850,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8CzhAAEAGb5fAqAIQrcJPco\/yAFDC1DxKAAAAAKAC\/\/\/BPgAAAgQFtAQCCAr\/\/zdyAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0\/A1AAEAGfFbAqAIQ2O8meIDcAbs4lMzLVf5IAYAYAXhG4QAAAQEICv\/\/N3Im518wFAMDAAEBFwMDADXarbwkrqrPnfEARK1iXmIzlBg2eUTpj8CcDfqBTPbv0wL0B0zlGN1po0ii3NbiPPQC1NSc9A==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8S\/EAAHUGde+s2RRKwKgCEAG7zSLiUVJTDpwh4qAS6yCWYgAAAgQFZAQCCAoTCsRq\/\/83agEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8QWIAAGcGUm2twk9ywKgCEABQj\/AL32zY1y9aNKAS87jv8AAAAgQFlgQCCArQ72G\/\/\/83awEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0FoxAAEAGoFzAqAIQrNkUSs0iAbsOnCHi4lFSVIAQAVeungAAAQEICv\/\/N3UTCsRq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0bVlAAEAGDX7AqAIQrcJPco\/wAFDXL1o0C99s2YAQAVcQ9wAAAQEICv\/\/N3bQ72G\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0b9gAAHYGEszY7yZ4wKgCEAG7gNxV\/kgBOJTNC4AQAPDNxAAAAQEICibnYVj\/\/zdy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1582454871804,"flow_last_seen":1582454871804,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":84,"pkt":"xiwDYGpkTGr2n\/YnCABFAABGrB5AAEARCSfAqAIQwKgCAUfLADUAMmcLPGQBAAABAAAAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1582454871804,"flow_last_seen":1582454871804,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0449{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":100,"pkt":"TGr2n\/YnxiwDYGpkCABFAABWsEQAAEARRPHAqAIBwKgCEAA1R8sAQmKIPGSBgAABAAEAAAAACWRhdGFzYXZlcgpnb29nbGVhcGlzA2NvbQAAAQABwAwAAQABAAABKwAErNkVyg==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1582454871804,"flow_last_seen":1582454871805,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"datasaver.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.21.202"}}
+0414{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8DHkAAGcGh1atwk9ywKgCEABQj\/Jn2o0VwtQ8S6AS87jgEAAAAgQFlgQCCArQTChF\/\/83cgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CzlAAEAGb57AqAIQrcJPco\/yAFDC1DxLZ9qNFoAQAVcBGQAAAQEICv\/\/N3vQTChF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1582454871814,"flow_last_seen":1582454871814,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8CFFAAEAGrQ\/AqAIQrNkVysroAbtCYT8sAAAAAKAC\/\/889QAAAgQFtAQCCAr\/\/zd9AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":363,"pkt":"xiwDYGpkTGr2n\/YnCABFAAFdbVpAAEAGDFTAqAIQrcJPco\/wAFDXL1o0C99s2YAYAVd53gAAAQEICv\/\/N37Q72G\/R0VUIC9jb25uZWN0IEhUVFAvMS4xDQpIb3N0OiBjaGVjay5nb29nbGV6aXAubmV0DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgOTsgTm9raWEgMi4yKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzkuMC4zOTQ1LjkzIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkFjY2VwdC1MYW5ndWFnZTogaXQtSVQsaXQ7cT0wLjksZW4tVVM7cT0wLjgsZW47cT0wLjcNCg0K","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1582454871745,"flow_last_seen":1582454871818,"flow_tot_l4_data_len":441,"flow_min_l4_data_len":32,"flow_max_l4_data_len":329,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36848,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.DataSaver","category":"Web"},"http": {"hostname":"check.googlezip.net","url":"check.googlezip.net\/connect","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Linux; Android 9; Nokia 2.2) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/79.0.3945.93 Mobile Safari\/537.36"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1582454871823,"flow_last_seen":1582454871823,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBrCJAAEARCSjAqAIQwKgCASm1ADUALW7k1fkBAAABAAAAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1582454871823,"flow_last_seen":1582454871823,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRS4IAAEARqbjAqAIBwKgCEAA1KbUAPSLB1fmBgAABAAEAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAJMABKzZFEw=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1582454871823,"flow_last_seen":1582454871824,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.76"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1582454871827,"flow_last_seen":1582454871827,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8rCNAAEARCSzAqAIQwKgCAYBAADUAKPh7cqMBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1582454871827,"flow_last_seen":1582454871827,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0431{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":90,"pkt":"TGr2n\/YnxiwDYGpkCABFAABMd48AAEARfbDAqAIBwKgCEAA1gEAAOLeFcqOBgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":56,"flow_packet_id":2,"flow_first_seen":1582454871827,"flow_last_seen":1582454871827,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1582454871829,"flow_last_seen":1582454871829,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8SmpAAEAGbHTAqAIQrNkUTKp+Abul3n3qAAAAAKAC\/\/+8ngAAAgQFtAQCCAr\/\/zeAAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":578,"pkt":"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","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1582454871839,"flow_last_seen":1582454871839,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8witAAEAGtnDAqAIQ2O8meID2AbsYfvWoAAAAAKAC\/\/+9gwAAAgQFtAQCCAr\/\/zeDAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8oe8AAHYGHXGs2RXKwKgCEAG7yuig7Cw9QmE\/LaAS6yAtmgAAAgQFZAQCCArvemfU\/\/83fQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CFJAAEAGrRbAqAIQrNkVysroAbtCYT8toOwsPoAQAVdF2AAAAQEICv\/\/N4bvemfU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8AF8AAHUGgz3Y7yZ4wKgCEAG7gPZMYENyGH71qaAS6yCi0QAAAgQFZAQCCArDx9w1\/\/83gwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wixAAEAGtnfAqAIQ2O8meID2AbsYfvWpTGBDc4AQAVe7FAAAAQEICv\/\/N4fDx9w1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0264AAHUGp\/XY7yZ4wKgCEAG7gOSVNFlnzGrvgIAQAPR7agAAAQEICsgEC5D\/\/zeD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0QZUAAGcGUkKtwk9ywKgCEABQj\/AL32zZ1y9bXYAQAPgP3AAAAQEICtDvYgj\/\/zd+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":100,"pkt":"xiwDYGpkTGr2n\/YnCABFAABW2sFAAEAGncDAqAIQ2O8meIDkAbvMau+AlTRZZ4AYAXiAvQAAAQEICv\/\/N4fIBAuQFwMDAB0AAAAAAAAAAsDcrFdPBLCWt+vq6GI2nmRFM\/1NpQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+1017{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":524,"pkt":"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","pkt_caplen":524,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":51,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0bVtAAEAGDXzAqAIQrcJPco\/wAFDXL1tdC99uo4AQAVsNowAAAQEICv\/\/N4jQ72IK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8+7cAAHUGxias2RRMwKgCEAG7qn7jcCu5pd5966AS6yBHnwAAAgQFZAQCCArp2ZEZ\/\/83gAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SmtAAEAGbHvAqAIQrNkUTKp+Abul3n3r43AruoAQAVdf2wAAAQEICv\/\/N4vp2ZEZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1200{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":660,"pkt":"xiwDYGpkTGr2n\/YnCABFAAKGCFNAAEAGqsPAqAIQrNkVysroAbtCYT8toOwsPoAYAVfGNQAAAQEICv\/\/N43vemfUFgMBAk0BAAJJAwNrXT7L+PJep4B\/dk8AB+uJB9Pwzmj4f8u29vBYTRHG4CDv0sgDEuW0ydkkTNHJWYUIu7zui1THvKT7nSHdEo4WbQAiysoTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUACgEAAd6qqgAAAAAAHQAbAAAYZGF0YXNhdmVyLmdvb2dsZWFwaXMuY29tABcAAP8BAAEAAAoACgAIysoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBABIAAAAzACsAKcrKAAEAAB0AIA7SNmfcO9z5Fk8eILAkK8oUeEYOBFCgnNeuFUKzBOEGAC0AAgEBACsACwpKSgMEAwMDAgMBABsAAwIAAvr6AAEAACkBDQDoAOIBlHTCUkrnq2qUV7Uc6bRUrJdD\/LtOX9saWvlSIiAibjKIU0wHw9yQxl9yfCDql2xDdrNsm7zbF6\/OGNfdahzYSr6RfqSfTZGLDMZZfk1MJbPFSKnzYvS6jOEo3TW7x+9BZ4+3KDyjSvE5m\/8l2XSPqIu13oiFGgsmpE4gdERCudtURq0Ogikb8MlcSRimaW6Jyuzxd70fGrtNyd8LfqifFc1h2FkIDgK11FO2C2BHwFuqglbOegGmZKZuntDRxgQqNPVB57xYszkl2XDvW62m55mBMYgOxxISmOX9JOYaN4l\/oAeAdwAhICV8acJGk5urIeyURl35qfHipUs4BWNlBpXTDG5xEgou","pkt_caplen":660,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1582454871814,"flow_last_seen":1582454871879,"flow_tot_l4_data_len":738,"flow_min_l4_data_len":32,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"datasaver.googleapis.com","ja3":"554719594ba90b02ae410c297c6e50ad","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1099{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":58,"flow_packet_id":4,"flow_first_seen":1582454871839,"flow_last_seen":1582454871880,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1582454871881,"flow_last_seen":1582454871881,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":82,"pkt":"xiwDYGpkTGr2n\/YnCABFAABErDBAAEARCRfAqAIQwKgCAZtQADUAMNjjuKUBAAABAAAAAAAAB2FuZHJvaWQKZ29vZ2xlYXBpcwNjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1582454871881,"flow_last_seen":1582454871881,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"android.googleapis.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0492{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0E09AAEAGZRXAqAIQ2O8meIDqAbtXpCYKBCF0iYAYAW2SPgAAAQEICv\/\/N4+pXP9nFAMDAAEBFwMDADUeoCqVohjOxbck2a5v5Pyyv1Fk1FpMgNW5QT+r4NnmhfmQ2DVwE7l9c1TQBuYpiVsdz55Ebw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":583,"pkt":"xiwDYGpkTGr2n\/YnCABFAAI5SmxAAEAGanXAqAIQrNkUTKp+Abul3n3r43AruoAYAVdhvAAAAQEICv\/\/N5Dp2ZEZFgMBAgABAAH8AwNXABRh0bUwv02\/tcLYJb8tWNqjNMehgKwAQKR+V6qhpSB5nowSHXSTk06sjSwrAIShPUtbUgvH7+EkOPJ+Q5cJZAAiuroTARMCEwPAK8AvwCzAMMypzKjAE8AUAJwAnQAvADUACgEAAZHKygAAAAAAGAAWAAATcHJveHkuZ29vZ2xlemlwLm5ldAAXAAD\/AQABAAAKAAoACAoKAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQASAAAAMwArACkKCgABAAAdACBLZwILTiy6lRDHwjubzrib1KyQtw7d5xCTjiQBUnoNPgAtAAIBAQArAAsKqqoDBAMDAwIDAQAbAAMCAALq6gABAAAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":57,"flow_packet_id":4,"flow_first_seen":1582454871829,"flow_last_seen":1582454871890,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0521{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":152,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKE1BAAEAGZP7AqAIQ2O8meIDqAbtXpCZKBCF0iYAYAW2ejgAAAQEICv\/\/N5CpXP9nFwMDAFEyrbnJ6g4lCcl8fGr55cy4dgSJsqsxBYOBEOPjwhy8zTKp1bcUYupcfT8mB5D9a\/tIswIrfWM1UfUQyWgObXtLZcEhoiIdzik9SuLwFlKQkuU=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+1223{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":670,"pkt":"xiwDYGpkTGr2n\/YnCABFAAKQE1FAAEAGYvfAqAIQ2O8meIDqAbtXpCagBCF0iYAYAW2NnwAAAQEICv\/\/N5CpXP9nFwMDAlcD4iJ\/jPRtCquF0drwP2GZ2kuHnwLJVhypQf5KlAEVz0CdRqWLF\/E4v9AhgK1jksjBVADmPNL3ZuK\/Hv\/6ihMbxALk9beOiNipPBW7zVk0qNPxpCyinREk2yGnTILEAMKsmKojLR2xYtdo3P9Rlk+7tnqrVVTltYOZBzNNefPUfo9fCaXJqAGCnzqEXQMovEhb1aKY2vjJ0gZw5H\/zl8W+KL2+lidNLrVzlNSKekB+i7lEB3g65QNITwPZiWT05\/+mKMNaKmKnEfsZPzXFqAiSB9M8Sk06mpdK61S2Z9Uzf\/\/ycDhU6AROjlHrY+BA5QlUrIMkOo\/iS+xfbSWrLdCcU8Cf7NcuXTywlu+mahvC4sEeJTJStJTb8g36MBySHplLZ1KUgrdTOPJKxrIPSlbB38ODN6xkWjwpQ\/JaqkqTZGPNi7ac25dRlZ5hy6fThFOP5WcYgu7tlJF+ZdxsIMLaXoKAQkJJlydyR1w07hQKNoMBqHTxaMXgkWKI1jj6WA6VMOnc+VdJujytPfAldM6edYldGOHAEK4gcwrGeVPgNOxrm8KLri4fx5dOChmObLEzVjEQe1LA1jki7BheYByAbzgAR4AHVUffRFUZ4iRT06cq1HsIFXiNihvF4Z1ox8ftB8CbMI+qBycE2FEMCl16O4cm7kpRKQvfkIKbjNSXnIt8LhPtqE94ZxL8sR2szMand36ldeazSXt2CqehDZy04wcnOc3w94d15u1w15UTypaIprm55lLKSVcHn4O7iaE3L+rgpSe6z3S\/t8y3+iQ3JaQ51zRohA==","pkt_caplen":670,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":98,"pkt":"xiwDYGpkTGr2n\/YnCABFAABUE1JAAEAGZTLAqAIQ2O8meIDqAbtXpCj8BCF0iYAYAW1plgAAAQEICv\/\/N5GpXP9nFwMDABtkPRZwjvRWJYqbOhc+xpUQmZc0th6UFI3h900=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0AIIAAHUGgyLY7yZ4wKgCEAG7gPZMYENzGH73roAQAPC5RwAAAQEICsPH3F7\/\/zeN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2321{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":58,"flow_packet_id":6,"flow_first_seen":1582454871839,"flow_last_seen":1582454871911,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2049{"flow_id":58,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1275,"pkt":"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","pkt_caplen":1275,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0ogoAAHYGHV6s2RXKwKgCEAG7yuig7Cw+QmFBf4AQAPBDpgAAAQEICu96aBT\/\/zeN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":278,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEIogwAAHYGHIis2RXKwKgCEAG7yuig7Cw+QmFBf4AYAPCDsgAAAQEICu96aBX\/\/zeNFgMDAIACAAB8AwNXyuwDxMqVzVMdddxZ833D8C1lZmBy\/fnbob7+g9LiqyDv0sgDEuW0ydkkTNHJWYUIu7zui1THvKT7nSHdEo4WbRMBAAA0ACkAAgAAADMAJAAdACAbMxGW7At0HGDNDYgsDvU7\/zP00nEyGi+JFSenP9DTFAArAAIDBBQDAwABARcDAwBEmIk3Cfsq8y6kfOnRgN2JvXSQL48Jsuhz3DdaihsLhjVD1fUjNsHQjrzI+tlRQg3gUU5jKn9Z1P9IsA9DMYI8sr1L96I=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1582454871814,"flow_last_seen":1582454871913,"flow_tot_l4_data_len":1014,"flow_min_l4_data_len":32,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"datasaver.googleapis.com","ja3":"554719594ba90b02ae410c297c6e50ad","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0402{"flow_id":58,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wi5AAEAGtnXAqAIQ2O8meID2AbsYfveuTGBI\/YAQAWKzMAAAAQEICv\/\/N5fDx9xv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":58,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wi9AAEAGtnTAqAIQ2O8meID2AbsYfveuTGBNtoAQAW2ubAAAAQEICv\/\/N5fDx9xv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CFRAAEAGrRTAqAIQrNkVysroAbtCYUF\/oOwtEoAQAVdCYAAAAQEICv\/\/N5fvemgV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":98,"pkt":"TGr2n\/YnxiwDYGpkCABFAABUFXQAAEAR38PAqAIBwKgCEAA1m1AAQNQ0uKWBgAABAAEAAAAAB2FuZHJvaWQKZ29vZ2xlYXBpcwNjb20AAAEAAcAMAAEAAQAAARcABKzZFgo=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":59,"flow_packet_id":2,"flow_first_seen":1582454871881,"flow_last_seen":1582454871920,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"android.googleapis.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.22.10"}}
+0493{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0CFVAAEAGrNPAqAIQrNkVysroAbtCYUF\/oOwtEoAYAVd7bwAAAQEICv\/\/N5fvemgVFAMDAAEBFwMDADWuL6pwY2dIV5u6\/9nmZIIdexhghTCWFLHE+GEvRKQh3wPKjSSu8ku0XJIM5+nfYupn+ZOFrg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":152,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKCFZAAEAGrLzAqAIQrNkVysroAbtCYUG\/oOwtEoAYAVdWOQAAAQEICv\/\/N5nvemgVFwMDAFE\/VvvW6mNzVmgxZNu1+N4cHNqClH7bFY48b+AuqXlO9Z3OTRtvnlqvsWLprVSmODGDssPWzMZd8iaoYJxU+Wl3eDbRZPkYJ1PQLnFB8uLLHkI=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0++4AAHUGxfes2RRMwKgCEAG7qn7jcCu6pd5\/8IAQAPBd+wAAAQEICunZkVb\/\/zeQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1162{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":623,"pkt":"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","pkt_caplen":623,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0836{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":57,"flow_packet_id":6,"flow_first_seen":1582454871829,"flow_last_seen":1582454871933,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DataSaver","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"proxy.googlezip.net","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2327{"flow_id":57,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":57,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":286,"pkt":"TGr2n\/YnxiwDYGpkCABFAAEQ+\/MAAHUGxRas2RRMwKgCEAG7qn7jcDbOpd5\/8IAYAPDC7gAAAQEICunZkVz\/\/zeQ5ZMFJGThhmhvfLrWTr\/8+p4unKTT0n0E5LUmkSu428EPzfUlIpHGEhMRzSqBTdvJEel71Rrs340eQFiAU75SSl59qD5iSohBU9XX3H3SHlycFpw+sZhAEbXtFZP6RM47+u8indZ8CvZHpJ11K7dlTsGom6Qyo1Ezyk\/CZpxwUp+ChC6fcNOGUvWnQBdWeTRa6Sju7NI1uRpMdk7clRzueQscobaxkRobNrLVctD\/uBjLfV7eIg+jPkKsfVbryg3pxeLwxDC9X6TrBCZGeCaDwkRIHnPvWw3B7eJHMg==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":57,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0Sm1AAEAGbHnAqAIQrNkUTKp+Abul3n\/w43AxRIAQAWJX7gAAAQEICv\/\/N5vp2ZFc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":57,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0Sm5AAEAGbHjAqAIQrNkUTKp+Abul3n\/w43A2zoAQAW1SWQAAAQEICv\/\/N5vp2ZFc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":57,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0Sm9AAEAGbHfAqAIQrNkUTKp+Abul3n\/w43A3qoAQAW1RfQAAAQEICv\/\/N5vp2ZFc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1582454871947,"flow_last_seen":1582454871947,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8i1NAAEAGKc3AqAIQrNkWCq1WAbtFj7zOAAAAAKAC\/\/\/ZVgAAAgQFtAQCCAr\/\/zedAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1196{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":646,"pkt":"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","pkt_caplen":646,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":97,"pkt":"TGr2n\/YnxiwDYGpkCABFAABToikAAHYGHSCs2RXKwKgCEAG7yuig7C9WQmFCFYAYAPA95wAAAQEICu96aET\/\/zeZFwMDABr3Fs+IhNHLfhmvUV\/iFyWjU03ElxMerhpH9g==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0CFhAAEAGrRDAqAIQrNkVysroAbtCYURCoOwvdYAQAVs9AgAAAQEICv\/\/N6Hvemg\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":97,"pkt":"xiwDYGpkTGr2n\/YnCABFAABTCFlAAEAGrPDAqAIQrNkVysroAbtCYURCoOwvdYAYAVvVywAAAQEICv\/\/N6Lvemg\/FwMDABrVUJrd8ZFtIlRImst6TZUwoKm90sWIsdJn5g==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0oi8AAHYGHTms2RXKwKgCEAG7yuig7C91QmFEQoAQAPU9ZgAAAQEICu96aEn\/\/zeZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":74,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA8OOwAAHYGhjSs2RYKwKgCEAG7rVbtvX7+RY+8z6AS6yDuawAAAgQFZAQCCAq7R9gE\/\/83nQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0i1RAAEAGKdTAqAIQrNkWCq1WAbtFj7zP7b1+\/4AQAVcGrAAAAQEICv\/\/N6S7R9gE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":57,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454871,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SnBAAEAGbHbAqAIQrNkUTKp+Abul3n\/w43A3qoARAW1RcAAAAQEICv\/\/N6fp2ZFc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1100{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":60,"flow_packet_id":4,"flow_first_seen":1582454871947,"flow_last_seen":1582454872014,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"android.googleapis.com","ja3":"629b587f706aee60430ec3879c6edb66","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1097{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1582454871741,"flow_last_seen":1582454872015,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"semanticlocation-pa.googleapis.com","ja3":"33490b1d5377580b19f7f9b5849d7991","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0495{"flow_id":58,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":130,"pkt":"xiwDYGpkTGr2n\/YnCABFAAB0wjBAAEAGtjPAqAIQ2O8meID2AbsYfveuTGBNtoAYAW2umQAAAQEICv\/\/N6\/Dx9xvFAMDAAEBFwMDADVbu6lmuoyUsN+4Pg9R95AiJ3cOU\/w0ELRSdXuiw82zCKp2P\/R3ocEPaJdhwqvhDQv8ND4drw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":58,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":152,"pkt":"xiwDYGpkTGr2n\/YnCABFAACKwjFAAEAGthzAqAIQ2O8meID2AbsYfvfuTGBNtoAYAW1KVgAAAQEICv\/\/N6\/Dx9xvFwMDAFGzhX3zSHCSeQpcf+zj8Wg7u0+TqEYwPvzEsCCIKC3h+Rh2v2i2Wc+KkH4gJdydkzKfja2tSy9hV1nfpRWuGELl22sRnalE\/L4M0AIVuHR+R3Y=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1582454872021,"flow_last_seen":1582454872021,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":79,"pkt":"xiwDYGpkTGr2n\/YnCABFAABBrFBAAEARCPrAqAIQwKgCAdv4ADUALYKcD\/4BAAABAAAAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1582454872021,"flow_last_seen":1582454872021,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1729{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":1038,"pkt":"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","pkt_caplen":1038,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":95,"pkt":"TGr2n\/YnxiwDYGpkCABFAABRBMwAAEAR8G7AqAIBwKgCEAA12\/gAPTZ5D\/6BgAABAAEAAAAABXByb3h5CWdvb2dsZXppcANuZXQAAAEAAcAMAAEAAQAAAJMABKzZFEw=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1582454872021,"flow_last_seen":1582454872022,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.DataSaver","category":"Web"},"dns": {"query":"proxy.googlezip.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.20.76"}}
+0404{"flow_id":57,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0\/AMAAHUGxeKs2RRMwKgCEAG7qn7jcDeqpd5\/8YARAPBRkgAAAQEICunZkbb\/\/zen","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":57,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0SnFAAEAGbHXAqAIQrNkUTKp+Abul3n\/x43A3q4AQAW1RCwAAAQEICv\/\/N7Hp2ZG2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":58,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0APEAAHUGgrPY7yZ4wKgCEAG7gPZMYE22GH74RIAQAPCtwgAAAQEICsPH3Oj\/\/zev","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1582454872031,"flow_last_seen":1582454872031,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43652,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":74,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA8+JhAAEAGvkXAqAIQrNkUTKqEAbsc\/M8rAAAAAKAC\/\/\/0BgAAAgQFtAQCCAr\/\/zezAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1191{"flow_id":58,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":646,"pkt":"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","pkt_caplen":646,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":58,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":97,"pkt":"TGr2n\/YnxiwDYGpkCABFAABTAPMAAHUGgpLY7yZ4wKgCEAG7gPZMYE\/6GH74RIAYAPCCEwAAAQEICsPH3On\/\/zevFwMDABqhPvYLz5iU2T1bnDXI4Y7BIbGOgUS60MVNUQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":58,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":66,"pkt":"xiwDYGpkTGr2n\/YnCABFAAA0wjJAAEAGtnHAqAIQ2O8meID2AbsYfvhETGBP+oAQAXiq8QAAAQEICv\/\/N7PDx9zp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0cHAAAHYGEjTY7yZ4wKgCEAG7gNxV\/kgBOJTQ14AQAPfIvQAAAQEICibnYk7\/\/zew","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":66,"pkt":"TGr2n\/YnxiwDYGpkCABFAAA0OQUAAHYGhiOs2RYKwKgCEAG7rVbtvX7\/RY++1IAQAPAEwQAAAQEICrtH2Eb\/\/zev","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","pkt_oversize":false,"pkt_ts":1582454872,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0871{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":60,"flow_packet_id":6,"flow_first_seen":1582454871947,"flow_last_seen":1582454872047,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"android.googleapis.com","ja3":"629b587f706aee60430ec3879c6edb66","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1582454871115,"flow_last_seen":1582454871117,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":40580,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1582454871051,"flow_last_seen":1582454871090,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32412,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":3,"flow_packet_id":12,"flow_first_seen":1582454784313,"flow_last_seen":1582454866536,"flow_tot_l4_data_len":3680,"flow_min_l4_data_len":294,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1582454867034,"flow_last_seen":1582454867075,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":43,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":52953,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1582454867637,"flow_last_seen":1582454867639,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":34540,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1582454870996,"flow_last_seen":1582454870998,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":52,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":36613,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":30,"flow_packet_id":20,"flow_first_seen":1582454869517,"flow_last_seen":1582454872012,"flow_tot_l4_data_len":6050,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":302,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.168.206","src_port":50384,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454825629,"flow_last_seen":1582454825629,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":24,"flow_packet_id":22,"flow_first_seen":1582454868348,"flow_last_seen":1582454870097,"flow_tot_l4_data_len":5736,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52486,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1582454871741,"flow_last_seen":1582454872015,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.74","src_port":52514,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":1582454823653,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":60,"flow_packet_id":6,"flow_first_seen":1582454871947,"flow_last_seen":1582454872047,"flow_tot_l4_data_len":2143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.22.10","src_port":44374,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1582454871804,"flow_last_seen":1582454871805,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":18379,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1582454868462,"flow_last_seen":1582454868503,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":47081,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":56,"flow_packet_id":2,"flow_first_seen":1582454871827,"flow_last_seen":1582454871827,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":32832,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":18,"flow_packet_id":11,"flow_first_seen":1582454867151,"flow_last_seen":1582454867312,"flow_tot_l4_data_len":1286,"flow_min_l4_data_len":32,"flow_max_l4_data_len":747,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"17.253.53.201","src_port":58338,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1582454866407,"flow_last_seen":1582454866538,"flow_tot_l4_data_len":616,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.16","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1582454869361,"flow_last_seen":1582454869363,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":42,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39008,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1582454792980,"flow_last_seen":1582454853081,"flow_tot_l4_data_len":1554,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454825628,"flow_last_seen":1582454825628,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1582454866448,"flow_last_seen":1582454868606,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1582454868597,"flow_last_seen":1582454868597,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":51430,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1582454871496,"flow_last_seen":1582454871536,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":22850,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":22,"flow_packet_id":23,"flow_first_seen":1582454867688,"flow_last_seen":1582454868211,"flow_tot_l4_data_len":6249,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32974,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":33,"flow_packet_id":21,"flow_first_seen":1582454871042,"flow_last_seen":1582454871531,"flow_tot_l4_data_len":7312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32986,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":36,"flow_packet_id":15,"flow_first_seen":1582454871069,"flow_last_seen":1582454872035,"flow_tot_l4_data_len":5821,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32988,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":37,"flow_packet_id":21,"flow_first_seen":1582454871075,"flow_last_seen":1582454871428,"flow_tot_l4_data_len":7490,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32990,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1582454865802,"flow_last_seen":1582454866026,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0429{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454865794,"flow_last_seen":1582454865794,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff9f:f627","l4_proto":"icmp6"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":41,"flow_packet_id":32,"flow_first_seen":1582454871152,"flow_last_seen":1582454871906,"flow_tot_l4_data_len":12687,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":396,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32996,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":43,"flow_packet_id":14,"flow_first_seen":1582454871321,"flow_last_seen":1582454871375,"flow_tot_l4_data_len":3978,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":32998,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":48,"flow_packet_id":30,"flow_first_seen":1582454871623,"flow_last_seen":1582454871978,"flow_tot_l4_data_len":7356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":245,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33002,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":58,"flow_packet_id":18,"flow_first_seen":1582454871839,"flow_last_seen":1582454872035,"flow_tot_l4_data_len":4973,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":33014,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1582454871823,"flow_last_seen":1582454871824,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":10677,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454823653,"flow_last_seen":1582454823653,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1582454871676,"flow_last_seen":1582454871677,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":33240,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":38,"flow_packet_id":13,"flow_first_seen":1582454871094,"flow_last_seen":1582454871395,"flow_tot_l4_data_len":1942,"flow_min_l4_data_len":32,"flow_max_l4_data_len":490,"flow_avg_l4_data_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36834,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":51,"flow_packet_id":7,"flow_first_seen":1582454871745,"flow_last_seen":1582454871859,"flow_tot_l4_data_len":995,"flow_min_l4_data_len":32,"flow_max_l4_data_len":490,"flow_avg_l4_data_len":142,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36848,"dst_port":80,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":52,"flow_packet_id":3,"flow_first_seen":1582454871772,"flow_last_seen":1582454871808,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36850,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"Web"},"http": {}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":52,"flow_packet_id":3,"flow_first_seen":1582454871772,"flow_last_seen":1582454871808,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"173.194.79.114","src_port":36850,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1582454796360,"flow_last_seen":1582454856384,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":26,"flow_packet_id":16,"flow_first_seen":1582454868511,"flow_last_seen":1582454870126,"flow_tot_l4_data_len":5393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36888,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":27,"flow_packet_id":16,"flow_first_seen":1582454868527,"flow_last_seen":1582454869366,"flow_tot_l4_data_len":5369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":335,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.18.3","src_port":36890,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1582454867323,"flow_last_seen":1582454867358,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.35.8","src_port":45863,"dst_port":123,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":59,"flow_packet_id":2,"flow_first_seen":1582454871881,"flow_last_seen":1582454871920,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":39760,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1582454871343,"flow_last_seen":1582454871383,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":60,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35689,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1582454867244,"flow_last_seen":1582454867284,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":42,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":35825,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1582454872021,"flow_last_seen":1582454872022,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":56312,"dst_port":53,"l4_proto":"udp"}
+0507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1582454769772,"flow_last_seen":1582454769772,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"95.101.24.53","dst_ip":"192.168.2.17","src_port":443,"dst_port":50677,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1582454769772,"flow_last_seen":1582454769772,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"95.101.24.53","dst_ip":"192.168.2.17","src_port":443,"dst_port":50677,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1582454869626,"flow_last_seen":1582454870649,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":49510,"dst_port":5228,"l4_proto":"tcp","ndpi": {"proto":"Google","category":"Web"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1582454869626,"flow_last_seen":1582454870649,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"216.239.38.120","src_port":49510,"dst_port":5228,"l4_proto":"tcp"}
+0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1582454866803,"flow_last_seen":1582454871058,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0443{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1582454866803,"flow_last_seen":1582454866894,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4e6a:f6ff:fe9f:f627","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":46,"flow_packet_id":14,"flow_first_seen":1582454871553,"flow_last_seen":1582454871667,"flow_tot_l4_data_len":3989,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43634,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":57,"flow_packet_id":14,"flow_first_seen":1582454871829,"flow_last_seen":1582454872026,"flow_tot_l4_data_len":4037,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":288,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43646,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1582454872031,"flow_last_seen":1582454872031,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43652,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1582454872031,"flow_last_seen":1582454872031,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.20.76","src_port":43652,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1582454871292,"flow_last_seen":1582454871294,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":46359,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":39,"flow_packet_id":27,"flow_first_seen":1582454871103,"flow_last_seen":1582454871450,"flow_tot_l4_data_len":6541,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":242,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51928,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":54,"flow_packet_id":24,"flow_first_seen":1582454871814,"flow_last_seen":1582454872019,"flow_tot_l4_data_len":4060,"flow_min_l4_data_len":32,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"172.217.21.202","src_port":51944,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1582454871061,"flow_last_seen":1582454871100,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":7660,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1582454871600,"flow_last_seen":1582454871601,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":58892,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1582454867723,"flow_last_seen":1582454867761,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.16","dst_ip":"192.168.2.1","src_port":54837,"dst_port":53,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/android.pcap"}
diff --git a/tests/result/nDPId_anyconnect-vpn.pcap.txt b/tests/result/nDPId_anyconnect-vpn.pcap.txt
new file mode 100644
index 000000000..15f9493d9
--- /dev/null
+++ b/tests/result/nDPId_anyconnect-vpn.pcap.txt
@@ -0,0 +1,609 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569687240992,"flow_last_seen":1569687240992,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.53","src_port":56885,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687240,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP5MKAADjuBk4Nd41AFDGVya80\/P93YAREABFkgAAAQEIChwNaWayL1Dq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0BhtAADcGQni4GTg1CgAA4wBQ3jXT8\/3dxlcmvYARAOurFAAAAQEICrIv+nscDWlm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP5MKAADjuBk4Nd41AFDGVya90\/P93oAQEACb7gAAAQEIChwNaXeyL\/p7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569687241064,"flow_last_seen":1569687241064,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56916,"dst_port":8009,"l4_proto":"tcp"}
+0420{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":78,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/9D4wAAAgQFtAEDAwUBAQgKHA1prQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569687241422,"flow_last_seen":1569687241422,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":142,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":142,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56320,"dst_port":8009,"l4_proto":"tcp"}
+0555{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":176,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKQ8auVpuYAYEABwEgAAAQEIChwNaxEAIdNWFwMDAGnlEQRtW5ojm6mWGmuJ194WM1mCL2bpF6lVRy8fAR1ACLW+\/3MKXobzfgt7ehMx+gNqTDxT8XKtVt5pIDD++LOG\/\/cqs3TN3c3wAeYVwc4BceqqH837rqaW0xgZLYui1J36mDCwUeIDu0c=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569687241422,"flow_last_seen":1569687241422,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":142,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":142,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56320,"dst_port":8009,"l4_proto":"tcp","ndpi": {"proto":"CiscoVPN","category":"VPN"}}
+0555{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":176,"pkt":"NDY7z3UopHczjPFACABFAgCiFAFAAEAGENwKAACVCgAA4x9J3ABq5Wm5uFSkqoAYARVOTgAAAQEICgAh1UocDWsRFwMDAGlPAxZ+sivF5tip\/a4L1+WZBjanPy6dIIBwPewIOXwBBC++JWdD5zwUQ1UFmtf+v81kwZap7Lx2\/Gcfr+ckh4zK2QCeLZSVHkvGQHTulBE1960y\/ZxOXKVM8M0GvGzhWev1+K8IvZbQRCI=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKSqauVqJ4AQD\/zHZwAAAQEIChwNaxMAIdVK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569687241452,"flow_last_seen":1569687241452,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":2}
+0390{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":56,"pkt":"AQBeAAABLH6BsEqhCABGwAAgGHkAAAECIZ0KAAAB4AAAAZQEAAARCu71AAAAAGluZyBzeXNjZmc=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569687241452,"flow_last_seen":1569687241452,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0449{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569687241656,"flow_last_seen":1569687241656,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::2e7e:81ff:feb0:4aa1","dst_ip":"ff02::1","l4_proto":"icmp6"}
+0555{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569687241656,"flow_last_seen":1569687241656,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::2e7e:81ff:feb0:4aa1","dst_ip":"ff02::1","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0425{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569687241657,"flow_last_seen":1569687241657,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","l4_proto":2}
+0379{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687241,"pkt_len":46,"pkt":"AQBeAAD7pHczjPFACABGwAAgAABAAAEC+IcKAACV4AAA+5QEAAAWAAkE4AAA+w==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569687241657,"flow_last_seen":1569687241657,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0422{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687242,"pkt_len":78,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/8\/+wAAAgQFtAEDAwUBAQgKHA1tlQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569687242271,"flow_last_seen":1569687242271,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.3.22","l4_proto":2}
+0381{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687242,"pkt_len":46,"pkt":"AQBefwMWpHczjPFACABGwAAgAABAAAEC5m0KAACV7\/8DFpQEAAAWAPbp7\/8DFg==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569687242271,"flow_last_seen":1569687242271,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.3.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0429{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569687242476,"flow_last_seen":1569687242476,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.255.250","l4_proto":2}
+0387{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687242,"pkt_len":46,"pkt":"AQBef\/\/6pHczjPFACABGwAAgAABAAAEC6YgKAACV7\/\/\/+pQEAAAWAPoE7\/\/\/+g==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569687242476,"flow_last_seen":1569687242476,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.255.250","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0421{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687243,"pkt_len":78,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/88EwAAAgQFtAEDAwUBAQgKHA1xfQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687244,"pkt_len":78,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/84KwAAAgQFtAEDAwUBAQgKHA11ZQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687244,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569687245251,"flow_last_seen":1569687245251,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":82,"pkt":"LH6BsEqhNDY7z3UoCABFAABE1h4AAP8RQxAKAADjS0tMTM6PADUAMDW7jEkBAAABAAAAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569687245251,"flow_last_seen":1569687245251,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0447{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":98,"pkt":"NDY7z3UoLH6BsEqhCABFAABUAABAADYRoh9LS0xMCgAA4wA1zo8AQIZKjEmBgAABAAEAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AAAEAAcAMAAEAAQAAADwABAglZls=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1569687245251,"flow_last_seen":1569687245288,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"8.37.102.91"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569687245295,"flow_last_seen":1569687245295,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":82,"pkt":"LH6BsEqhNDY7z3UoCABFAABE77wAAEAR6XMKAADjS0tLS+\/LADUAMHT3LLcBAAABAAAAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569687245295,"flow_last_seen":1569687245295,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0537{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":163,"pkt":"NDY7z3UoLH6BsEqhCABFAACVAABAADoRnt9LS0tLCgAA4wA178sAgY60LLeBgAABAAAAAQAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAcAYAAYAAQAAA4QARQZucy02MzIJYXdzZG5zLTE1A25ldAARYXdzZG5zLWhvc3RtYXN0ZXIGYW1hem9uwB8AAAABAAAcIAAAA4QAEnUAAAFRgA==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1569687245295,"flow_last_seen":1569687245320,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":48,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569687245321,"flow_last_seen":1569687245321,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":82,"pkt":"LH6BsEqhNDY7z3UoCABFAABEwHQAAEARF7sKAADjS0tMTPNyADUAMHBPLLcBAAABAAAAAAAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569687245321,"flow_last_seen":1569687245321,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0538{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":163,"pkt":"NDY7z3UoLH6BsEqhCABFAACVAABAADYRod5LS0xMCgAA4wA183IAgYoMLLeBgAABAAAAAQAAA3ZjbwdwYW5kaW9uBnZpYXNhdANjb20AABwAAcAYAAYAAQAAA4QARQZucy02MzIJYXdzZG5zLTE1A25ldAARYXdzZG5zLWhvc3RtYXN0ZXIGYW1hem9uwB8AAAABAAAcIAAAA4QAEnUAAAFRgA==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1569687245321,"flow_last_seen":1569687245366,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":48,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vco.pandion.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569687245379,"flow_last_seen":1569687245379,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp"}
+0423{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":78,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGwVUKAADjCCVmW95WAbsTaDYfAAAAALAC\/\/\/9eAAAAgQFtAEDAwUBAQgKHA16ewAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":70,"pkt":"NDY7z3UoLH6BsEqhCABFAAA4kvsAAPcGt2EIJWZbCgAA4wG73lYzzRbpE2g2IJASgADBAwAAAgQFtAEBCAo\/+VnGHA16ew==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDYgM80W6oAQ\/\/9YmgAAAQEIChwNeqI\/+VnG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":233,"pkt":"LH6BsEqhNDY7z3UoCABFAADbAABAAEAGwLoKAADjCCVmW95WAbsTaDYgM80W6oAY\/\/+4KQAAAQEIChwNeqI\/+VnGFgMBAKIBAACeAwM+zYdRpoPn9yYDnCChCBgRRxI\/vte+Xuq+CHHW0pF46gAALMAswDAAnwCdwCTAKABrAD3AK8AvAJ4AnMAjwCcAZwA8ADkANQAzAC8ACgD\/AQAASQALAAQDAAECAAoACgAIABkAGAAXABMADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMAEAALAAkIaHR0cC8xLjE=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1569687245379,"flow_last_seen":1569687245420,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0405{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA01g8AAPcGdFEIJWZbCgAA4wG73lYzzRbqE2g2x4AQgADXxAAAAQEICj\/5WfQcDXqi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"NDY7z3UoLH6BsEqhCABFAAXc0GEAAPcGdFcIJWZbCgAA4wG73lYzzRbqE2g2x4AYgADj\/wAAAQEICj\/5WfUAAAAAFgMDAEoCAABGAwNGY8X1XGeskR+DB6H8u05zgfXUF1Em8dt25Bz9wtftVSBG2iDOKRACO\/zsXshJ8HPrVULueirBjXs51B0\/QnctfgA1ABYDAxYMCwAWCAAWBQAHTzCCB0swggYzoAMCAQICEEzL1X2WMv84AAAAAFDtNsswDQYJKoZIhvcNAQELBQAwgboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQLEx9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykgMjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAsBgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcNMTkwMjA1MjE0MzU4WhcNMjEwMjA1MjIxMzU3WjBqMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTERMA8GA1UEBxMIQ2FybHNiYWQxFDASBgNVBAoTC1ZpYXNhdCBJbmMuMR0wGwYDVQQDDBQqLnBhbmRpb24udmlhc2F0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDLELlHVBK6u0Ebo80pCb8efwbCh\/TMouznnqPBNL9tRNwaGpyybhpzuk1Zsi17UHvzdRRi5jC1ABXEEMLDXnTmlJa8rTgrPFp+bDbQ0hUdzWHHqPeU2HtG04mySjEkEvEPPwEnXQ9WDwkLnm26wRjipUJ8im1nDlikggUMLPlTTSKVgq3SBlVGLStLOLbOoOETJwpjr5YBSUNc5kkHfCAlc5qW4vLVkqFKFRcjyNxUOZxbBYtQaUddL0tuM4H9CfrWrqh9LLWx1xsOqHp+nS51DEO+pTwRR6wUyq6bNJMs+PbLCQs17zxAOp51PnIcZcczqbjMDGIgELfxksap7yECAwEAAaOCA5owggOWMDMGA1UdEQQsMCqCFCoucGFuZGlvbi52aWFzYXQuY29tghJwYW5kaW9uLnZpYXNhdC5jb20wggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB3AFWB1MIWkDYBSuoLm1c8U\/DA5Dh4cCUIFy+jqh0HE9MMAAABaL+5ngAAAAQDAEgwRgIhAKxxvM9C5gPV1Owy4M\/Dyzx7kBpwyzXQc7wZ0mGBR9fOAiEA\/A\/FJxuASzJphQeYq5ltFnIhSeTPRbPItlQigQZkkDwAdgBElGUusO7Or8RAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAWi\/uZ35AAAEAwBHMEUCIQDNq3daAkrYxX6VQ9b6GqComWKfQou0IMsDnXGHMLZiSAIgEnWktUcQyNRmFvjh+POicMbVzLnjlwLij\/eoPMW67IwAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAWi\/uZ5ZAAAEAwBHMEUCICH\/OekR\/g8Jdz2Y7Qc3us2XTMZ75OBnWYjV61BMMxsGAiEAtIuo7AamIHqnZDAbI1eeM3ogDSbRJ5hn12CgIZCempMAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWi\/uZ5NAAAEAwBHMEUCIHkJ3QKOEfzyT\/nCAMVpK04S4woe8rsVcpjzIhSsRoSsAiEA324g9fbsnh\/O\/XKfcV4vnykRYq8iMzykYAT+PPtA1MEwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1569687245379,"flow_last_seen":1569687245469,"flow_tot_l4_data_len":1823,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","alpn":"http\/1.1"}}
+0407{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80ckoAQ\/\/9R7AAAAQEIChwNetI\/+Vn1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"NDY7z3UoLH6BsEqhCABFAAXc\/KkAAPcGSA8IJWZbCgAA4wG73lYzzRySE2g2x4AYgACa1QAAAQEICj\/5Wh4AAAAASAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUmi0VGuslo\/WsT4R+rNKNmFj1ZL0wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAKdBE7Z+\/QgBIjgKdoPLQP+aFD6KtOZlOiHey04vsERDOADqNdu8unwz6N0izPw2l\/n+UoPoV6GrQkCjChT893I2Smv8Vj1mVR9ZW1nnkmVR9MJr+xC5Iw99s1Ntq2M7Knro\/38pMlTbzDdIcgeyuFS+2iILYDpWpJ7TdQfZH5XVAvdIk3ZnRxtGd7Lcy\/jVbSYIGFTi\/TuA8Bv82FbHnQSqp4ezyTgTKuHmdSMry0pP20Z6nga4Vd2slNm7KOIghxUpnvRfKqVpF04m1QFzXE34qRtPEU80S1e6wlIl8ZcZrL\/KcU+88mv0xL3dpgVjURuISIJE90mwZCDqslRXPTgAFEjCCBQ4wggP2oAMCAQICDA7pTMMAAAAAUdN3hTANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwHhcNMTUxMDA1MTkxMzU2WhcNMzAxMjA1MTk0MzU2WjCBujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANo\/ltBNuS9E59s5XptQ7lylYdpBZ1MJqgCajld\/KWvbx+EhJKo60I1HI9LtchbwkSHSXbe4S6iDj7eRMmjPziWTLLJ9l8j+wbQXugmeA5CTe3xJgyJoipveR8MxmHoufUAL0u8+07KMqo9Iqf8A6ClYBve2k1qUcyYmrVgO5UK41epzeWRoUyW4hM+Ueq4GRQyja03Qxr7qGKQ28JKyuhyIjzpSf\/debYMcnfAf5cPW3aV4kj2wbSzqyc+UQRlxRGi6RzwE6V26PvA19xW2nvIuFR4\/R8jIOKdzRV1NsDuxjhcpN+rdBQEiu5Q2Ko1bNf5TGS8IRsEqsxpiHU4r2RsCAwEAAaOCAQwwggEIMA4GA1UdDwEB\/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH\/AgEAMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL2NybC5lbnRydXN0Lm5ldC9nMmNhLmNybDA7BgNVHSAENDAyMDAGBFUdIAAwKDAmBggrBgEFBQc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80iOoAQ\/\/9L8wAAAQEIChwNevo\/+Voe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80n4oAQ\/\/9GSwAAAQEIChwNevo\/+Voe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1459,"pkt":"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","pkt_caplen":1459,"pkt_type":2048,"pkt_ipoffset":14}
+1208{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":11,"flow_packet_id":12,"flow_first_seen":1569687245379,"flow_last_seen":1569687245547,"flow_tot_l4_data_len":6304,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":525,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"*.pandion.viasat.com,pandion.viasat.com","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K","issuerDN":"C=US, ST=California, L=Carlsbad, O=Viasat Inc., CN=*.pandion.viasat.com","alpn":"http\/1.1","fingerprint":"92:70:CF:E3:69:4B:1D:F4:E2:DE:63:54:EC:DF:40:DB:F3:AC:D1:CA"}}
+0408{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95WAbsTaDbHM80tU4AQ\/\/9AjQAAAQEIChwNex8\/+VpG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569687245576,"flow_last_seen":1569687245576,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56915,"dst_port":443,"l4_proto":"tcp"}
+0498{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":131,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5TAbsf\/e\/ecO3V5YAYEAD5fAAAAQEIChwNezsAjX27FwMDADwAAAAAAAAABDacZQu2ja7FJp11i4XaHEcZRuFBd8RaXcXBvhAzXAi\/k3IQYhPu9V\/rSa1OnXc4wt4EKb0=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569687245576,"flow_last_seen":1569687245576,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56914,"dst_port":443,"l4_proto":"tcp"}
+0498{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":131,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5SAbt7aDL2a\/IufIAYEADmYwAAAQEIChwNezsCYFg6FwMDADwAAAAAAAAAA\/6MZ3K3UnwgKSolneP\/V\/Ul5QfA4HWbTZY4CgoWP92J0WcPzatLmBPNGkrfeEXB3KaiGuM=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0872{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":408,"pkt":"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","pkt_caplen":408,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":141,"pkt":"NDY7z3UoLH6BsEqhCABFAAB\/iREAAPcGwQQIJWZbCgAA4wG73lYzzS1TE2g4HYAYgACVLQAAAQEICj\/5Wp8cDXtOFAMDAAEBFgMDAEDllkG1IAug8S8sqM3n3iNS1LNB5MMCdyEdPjW7AL1gumzcUkXoZwb0oNzL6RTaSsQw4gsOBWyCNoSplvvWDSXv","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8JAACsGUUw0JfOtCgAA4wG73lNw7dXlH\/3wH4AQAAnwQQAAAQEICgCNhOgcDXs7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VN5AACoGyTA0JfOtCgAA4wG73lJr8i58e2gzN4AQAAkgwQAAAQEICgJgYHkcDXs7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569687245688,"flow_last_seen":1569687245688,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp"}
+0422{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":78,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGwVUKAADjCCVmW95XAbsu53nzAAAAALAC\/\/+c+QAAAgQFtAEDAwUBAQgKHA17pgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":70,"pkt":"NDY7z3UoLH6BsEqhCABFAAA4hY0AAPcGxM8IJWZbCgAA4wG73ldszApGLud59JASgAAy9QAAAgQFtAEBCAo\/+Vr5HA17pg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53n0bMwKR4AQ\/\/\/KjAAAAQEIChwNe8w\/+Vr5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":233,"pkt":"LH6BsEqhNDY7z3UoCABFAADbAABAAEAGwLoKAADjCCVmW95XAbsu53n0bMwKR4AY\/\/+TfQAAAQEIChwNe8w\/+Vr5FgMBAKIBAACeAwOyKS4PH48MEPNrcANjNvEKq9DZdlehvPjBqsUvxif81gAALMAswDAAnwCdwCTAKABrAD3AK8AvAJ4AnMAjwCcAZwA8ADkANQAzAC8ACgD\/AQAASQALAAQDAAECAAoACgAIABkAGAAXABMADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMAEAALAAkIaHR0cC8xLjE=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1569687245688,"flow_last_seen":1569687245728,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0405{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0q70AAPcGnqMIJWZbCgAA4wG73ldszApHLud6m4AQgABJugAAAQEICj\/5WyQcDXvM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1569687245688,"flow_last_seen":1569687245772,"flow_tot_l4_data_len":1823,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","alpn":"http\/1.1"}}
+0409{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwP74AQ\/\/\/D5QAAAQEIChwNe\/g\/+Vsl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwVl4AQ\/\/+97AAAAQEIChwNfCA\/+VtO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwbP4AQ\/\/+4RAAAAQEIChwNfCA\/+VtO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1208{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":14,"flow_packet_id":12,"flow_first_seen":1569687245688,"flow_last_seen":1569687245851,"flow_tot_l4_data_len":6359,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":529,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"*.pandion.viasat.com,pandion.viasat.com","ja3":"9f1a41f932f274fe47a992310a26a23a","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K","issuerDN":"C=US, ST=California, L=Carlsbad, O=Viasat Inc., CN=*.pandion.viasat.com","alpn":"http\/1.1","fingerprint":"92:70:CF:E3:69:4B:1D:F4:E2:DE:63:54:EC:DF:40:DB:F3:AC:D1:CA"}}
+1902{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":1181,"pkt":"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","pkt_caplen":1181,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwg54AQ\/\/+yTgAAAQEIChwNfEY\/+Vt2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687245,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95XAbsu53qbbMwlQoAQ\/\/+t8wAAAQEIChwNfEY\/+Vt2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":78,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl95UH0ntZWziAAAAALAC\/\/8wWwAAAgQFtAEDAwUBAQgKHA19NQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":176,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKSqauVqJ4AYEABWlgAAAQEIChwNfn0AIdVKFwMDAGltB4Q9ZE7MwMLqA\/qW5WJXb0PHNtCROrUMkJHw\/OP719Jk7orSFs9TCm756O7SILnP3vnstuJ4xPfpszSDO6LW4XcEaWDlp33D\/dMihM\/bvEZuYHMlrzKnK9TylV815IAQKWsax0+Dp+A=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":176,"pkt":"NDY7z3UopHczjPFACABFAgCiFAJAAEAGENsKAACVCgAA4x9J3ABq5WonuFSlGIAYARXEpwAAAQEICgAh1z8cDX59FwMDAGnSDUBTzxnFH9ckBLkGJJxtZYOnnoJTcPtGWYx7fflTVjXPGvnWJvT5kELd8Dyk7N8gqq17Y91Gw5NO81U2bwcOEaqqMVk4vbp1wYVpe8wc5fgUWL03+X7m6bLc5s5fILREqdmBY0Re1KI=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKUYauVqlYAQD\/yxKgAAAQEIChwNfn8AIdc\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569687246891,"flow_last_seen":1569687246891,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp"}
+0404{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":65,"pkt":"LH6BsEqhNDY7z3UoCABFAAAzrdgAAP8Ra2cKAADjS0tMTPaDADUAH3AoGBgBAAABAAAAAAAABWxvY2FsAAAGAAE=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569687246891,"flow_last_seen":1569687246891,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"local","num_queries":0,"num_answers":0,"reply_code":0,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0506{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":140,"pkt":"NDY7z3UoLH6BsEqhCABFAAB+AABAADYRofVLS0xMCgAA4wA19oMAah4oGBiBgwABAAAAAQAABWxvY2FsAAAGAAEAAAYAAQAAAyoAQAFhDHJvb3Qtc2VydmVycwNuZXQABW5zdGxkDHZlcmlzaWduLWdycwNjb20AeFjpQAAABwgAAAOEAAk6gAABUYA=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1569687246891,"flow_last_seen":1569687246924,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":31,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"local","num_queries":1,"num_answers":1,"reply_code":3,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569687246924,"flow_last_seen":1569687246924,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","l4_proto":"icmp"}
+0412{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":70,"pkt":"LH6BsEqhNDY7z3UoCABFAAA4dQYAAEABY0UKAADjS0tMTAMDBdoAAAAARQAAfgAAQAA2EaH1S0tMTAoAAOMANfaDAGoAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569687246924,"flow_last_seen":1569687246924,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569687246981,"flow_last_seen":1569687246981,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0526{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":154,"pkt":"AQBeAAD7GIEORo7ICABFAACMDQUAAP8RwosKAADV4AAA+xTpFOkAeGDHAAAAAAADAAAAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMgAEAACkFoAAAEZQAEgAEAA4AmjqBDkaOyBiBDkaOyA==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0608{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569687246981,"flow_last_seen":1569687246981,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":1569687246982,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0554{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":174,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AHgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QB4u70AAAAAAAMAAAAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAyAAQAAKQWgAAARlAASAAQADgCaOoEORo7IGIEORo7I","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":1569687246982,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}}
+0424{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":1569687246982,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2}
+0380{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":46,"pkt":"AQBeAAACGIEORo7ICABGAAAgLwcAAAECCvoKAADV4AAAApQEAAAXAAgE4AAA+w==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":1569687246982,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":1569687246982,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2}
+0380{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687246,"pkt_len":46,"pkt":"AQBeAAD7GIEORo7ICABGAAAg0EsAAAECaLwKAADV4AAA+5QEAAAWAAkE4AAA+w==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569687246982,"flow_last_seen":1569687246982,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569687247192,"flow_last_seen":1569687247192,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0687{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":274,"pkt":"GIEORo7INDY7z3UoCABFAAEE6tAAAP8RumAKAADjCgAA1RTpFOkA8ADKAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABQRTFAtUktFUlVSLU9TWCAoOSnADMAyACGAAQAAAHgADQAAAADbaQRuRFBJwCHAMgAQgAEAABGUACIWcnBCQT0zNzoyRTo0Nzo2RDoxODo1NApycFZyPTE1Mi4xEUxQLVJLRVJVUi1PU1ggKDkpDF9kZXZpY2UtaW5mb8AcABAAAQAAEZQAIBRtb2RlbD1NYWNCb29rUHJvMTEsMQpvc3h2ZXJzPTE3wFgAAYABAAAAeAAECgAA4w==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569687247192,"flow_last_seen":1569687247192,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}}
+0496{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":129,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5SAbt7aDM3a\/IufIAYEAAjBQAAAQEIChwNgekCYGB5FwMDADoAAAAAAAAABP6P4Nbq7ON\/6\/AGxu6nGVDbyH\/VD4ZdKbxLWPLfwYcNeZogzNp7TOtgIRax\/b1ZBFBO","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":129,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5TAbsf\/fAfcO3V5YAYEADtVwAAAQEIChwNgekAjYToFwMDADoAAAAAAAAABVQHVjyN4wBxs8m+2i54okht8UdFndDP4vwtKiUe9j1LvsBOOnvld8r5j6XDOjeRQG2g","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VN9AACoGyS80JfOtCgAA4wG73lJr8i58e2gzdoAQAAkYLwAAAQEICgJgYh4cDYHp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAABzVOBAACoGyO80JfOtCgAA4wG73lJr8i58e2gzdoAYAAkk1QAAAQEICgJgYh8cDYHpFwMDADr34AORZ\/msv0j6WvLdm0r85swBaOE53ONB+mNFF8k0Tix035Gilv9+v4KT\/+rpr9rvyLTGpxY4i3mx","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5SAbt7aDN2a\/Iuu4AQD\/4H1wAAAQEIChwNggwCYGIf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8NAACsGUUs0JfOtCgAA4wG73lNw7dXlH\/3wXoAQAAnnrAAAAQEICgCNhpAcDYHp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAABzy8RAACsGUQs0JfOtCgAA4wG73lNw7dXlH\/3wXoAYAAmExgAAAQEICgCNhpAcDYHpFwMDADoscoyH7e3mD0YV5j76bq2IiuIC\/UPtlNWvhrdB63Msjxv0jshQMl60ISItlU90x5KX0HExOJgiVTIM","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5TAbsf\/fBecO3WJIAQD\/7XUAAAAQEIChwNghEAjYaQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569687247596,"flow_last_seen":1569687247596,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0440{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":90,"pkt":"MzMAAAAWGIEORo7Iht1gAAAAACQAAf6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPANy0AAAAAQQAAAD\/AgAAAAAAAAAAAAAAAAD7","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569687247596,"flow_last_seen":1569687247596,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0557{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687247,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0567{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687248,"pkt_len":186,"pkt":"AQBeAAD7GIEORo7ICABFAACszwUAAP8RAGsKAADV4AAA+xTpFOkAmDTQAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4QABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCaOoEORo7IGIEORo7I","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687248,"pkt_len":206,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYj8YAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADhAAFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJo6gQ5GjsgYgQ5Gjsg=","pkt_caplen":206,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687248,"pkt_len":90,"pkt":"MzMAAAAWGIEORo7Iht1gAAAAACQAAf6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPANy0AAAAAQQAAAD\/AgAAAAAAAAAAAAAAAAD7","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569687249612,"flow_last_seen":1569687249612,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56917,"dst_port":80,"l4_proto":"tcp"}
+0389{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687249,"pkt_len":54,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoT2EAAEAGMCYKAADjuBk4Td5VAFBor5ytCT1EPVAQEAlzBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1569687249612,"flow_last_seen":1569687249612,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56884,"dst_port":80,"l4_proto":"tcp"}
+0390{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687249,"pkt_len":54,"pkt":"LH6BsEqhNDY7z3UoCABFAAAogHcAAEAG\/w8KAADjuBk4Td40AFBjyKiAGk9l7lAQEAA5gAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687249,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0NJhAADcGE+O4GThNCgAA4wBQ3jQaT2XuY8iogYAQAPO0OwAAAQEICuMU+IIcDWOU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687249,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0uJpAADgGjuC4GThNCgAA4wBQ3lUJPUQ9aK+croAQAOvt6gAAAQEICuMU+IIcDWN7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687250,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1569687251177,"flow_last_seen":1569687251177,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp"}
+0422{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687251,"pkt_len":76,"pkt":"LH6BsEqhNDY7z3UoCABFAAA+HQ0AAP8R\/CcKAADjS0tMTNZDADUAKtGSphcBAAABAAAAAAAABXByaW50BnZpYXNhdANjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1569687251177,"flow_last_seen":1569687251177,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"print.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0532{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687251,"pkt_len":157,"pkt":"NDY7z3UoLH6BsEqhCABFAACPAABAADYRoeRLS0xMCgAA4wA11kMAe\/FSpheBgwABAAAAAQAABXByaW50BnZpYXNhdANjb20AAAEAAcASAAYAAQAAA4QARQZucy02MzIJYXdzZG5zLTE1A25ldAARYXdzZG5zLWhvc3RtYXN0ZXIGYW1hem9uwBkAAAABAAAcIAAAA4QAEnUAAAFRgA==","pkt_caplen":157,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1569687251177,"flow_last_seen":1569687251230,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":42,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"print.viasat.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0555{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687251,"pkt_len":176,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKUYauVqlYAYEACLWQAAAQEIChwNkfYAIdc\/FwMDAGnBoRpnSakDpbbtOO1oFQFMvTatXfQ13YvHj0oLfGJl9JpWlsgauBFeoA7+JlmFrD8o9ELaYLgs9RsfLxNGWM8Fap769GXl+TuJe1SDZT7YsErPd9vuIVPm60SZhhH5VOfnzBgNpzDOaYk=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687251,"pkt_len":176,"pkt":"NDY7z3UopHczjPFACABFAgCiFANAAEAGENoKAACVCgAA4x9J3ABq5WqVuFSlhoAYARVo3QAAAQEICgAh2TMcDZH2FwMDAGnME9q5WBaoTxO4eWqtx9PaFo02Fc3nfPNp8pF7vSt+swHbhi70yI0wIgY4irdjppeso7+tYJgVpxy3Dq7WX32l1ccQW5M5AFGSshc12Yls9xl2CLpSmG1mEsWpkHkZoEdQqG0j2ZVcEiM=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687251,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKWGauVrA4AQD\/ya4QAAAQEIChwNkfgAIdkz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687253,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1569687255989,"flow_last_seen":1569687255989,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687255,"pkt_len":69,"pkt":"LH6BsEqhNDY7z3UoCABFAAA3enMAAP8RnsgKAADjS0tMTOMrADUAI5+UjycBAAABAAAAAAAABXNsYWNrA2NvbQAAAQAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1569687255989,"flow_last_seen":1569687255989,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Slack","category":"Collaborative"},"dns": {"query":"slack.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0434{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":85,"pkt":"NDY7z3UoLH6BsEqhCABFAABHAABAADcRoSxLS0xMCgAA4wA14ysAM\/asjyeBgAABAAEAAAAABXNsYWNrA2NvbQAAAQABwAwAAQABAAAAIwAEY1YinA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1569687255989,"flow_last_seen":1569687256018,"flow_tot_l4_data_len":86,"flow_min_l4_data_len":35,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Slack","category":"Collaborative"},"dns": {"query":"slack.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"99.86.34.156"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1569687256018,"flow_last_seen":1569687256018,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp"}
+0423{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":78,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGqeMKAADjY1YinN5YAbvhhxKGAAAAALAC\/\/8SKwAAAgQFtAEDAwUBAQgKHA2jzgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":74,"pkt":"NDY7z3UoLH6BsEqhCABFAAA8AABAAO4G++ZjViKcCgAA4wG73lg6Ai8I4YcSh6AScSDdlgAAAgQFtAQCCApVvxWbHA2jzgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGqe8KAADjY1YinN5YAbvhhxKHOgIvCYAQEBVtUAAAAQEIChwNo+1VvxWb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0731{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1569687256018,"flow_last_seen":1569687256050,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Slack","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"slack.com","ja3":"d8dc5f8940df366b3a58b935569143e8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0406{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0OpdAAO4GwVdjViKcCgAA4wG73lg6Ai8J4YcUjIAQAHZ65gAAAQEIClW\/FZ8cDaPt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":212,"pkt":"NDY7z3UoLH6BsEqhCABFAADGOphAAO4GwMRjViKcCgAA4wG73lg6Ai8J4YcUjIAYAHZtAgAAAQEIClW\/FZ8cDaPtFgMDAFoCAABWAwN+R7Nshs\/ehq2TNPP3JdaT01yY+pmTbRbKEq72Sa92tyCNfN3\/DfWLQ8HungFwV0GCEYkIdCKU0GMUI0bm8cDscsAvAAAO\/wEAAQAAEAAFAAMCaDIUAwMAAQEWAwMAKDYMjtJfzeRO5qVw0Kt+Z2fVyY9j0seokftrrwCnACaby9QeanHF8og=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1569687256018,"flow_last_seen":1569687256093,"flow_tot_l4_data_len":875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Slack","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"slack.com","ja3":"d8dc5f8940df366b3a58b935569143e8","ja3s":"7bee5c1d424b7e5f943b06983bb11422","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0405{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGqe8KAADjY1YinN5YAbvhhxSMOgIvm4AQEBFqkAAAAQEIChwNpBZVvxWf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":117,"pkt":"LH6BsEqhNDY7z3UoCABFAABnAABAAEAGqbwKAADjY1YinN5YAbvhhxSMOgIvm4AYEBHMjAAAAQEIChwNpBdVvxWfFAMDAAEBFgMDACgAAAAAAAAAAEkqWW9vMe9wu\/mI5boJymXWXb6Kk058wzXcVuC6\/gkE","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":159,"pkt":"LH6BsEqhNDY7z3UoCABFAACRAABAAEAGqZIKAADjY1YinN5YAbvhhxS\/OgIvm4AYEBF7QgAAAQEIChwNpBdVvxWfFwMDAFgAAAAAAAAAATNLTuPHYyyTgb1ohdK2597G2vdYRI46G8U4WDCMBl2ySdHDtlVf62S4aRN6D1TdJgZ56yZhvPyeVW5\/6m4IoUR0g6x+NYIy7XNmMXQx9rbv","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+1477{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":853,"pkt":"LH6BsEqhNDY7z3UoCABFAANHAABAAEAGptwKAADjY1YinN5YAbvhhxUcOgIvm4AYEBG8egAAAQEIChwNpBdVvxWfFwMDAw4AAAAAAAAAAvf9iJTGO9SxTeeTQZamzz+suxHTu7wggeCdxzg\/V9YXcR\/NhRPDHTkoc2tRf0bLNjy5qXlqXHu5ZRGKnyOfDkC9AsEc4Lly2x8NSgEw0eDG6AVUWmYjun3yUP5p\/CJH+md+SbqNhC0MVKyr31\/YWXf\/uh595HJkZFPN+6gGfCvo7cUioMTBpS+3sL5ZZfzhdRRuS6W6q+WDJjU8uTIBlXj87Vp4bL69PaZHtraVby3+aUVATpjU3\/HbrC54e+466Z9vlzA\/qyPzX8xAFr4\/AuVOLwcVPwg+wEnUYUl2NjL1mmnv\/2VJelqMYqFR4pVOEPe0wuLyJKXIA0jh83e8fOvPtDBwpyMVzg1jpsz4+US7RhEqGeZ2BMH8pp4DXIatlpqyUdukmnj37Az2NnF24QhK2KbJthGdywkfzL5FbWeWNsANRreQyZd229hBhvQU2ni\/giDAWZ3+ai+UoxByBphvb71yIn3UAnW86+fwbG2rKFSmZ2ds68SAAomI6jOtOHiE36UmMDSqZVicj8dLW0IM2t8Dd2B01WP8oe+fszzBCii0wPSWXsDxBrGUz2b5tX+9f+8mxxRgwg\/eldIphnB5QKA7VtpROdakE9Dlqj3v2eftVE86e8W3ZIvWd1Ig4bcGuQBhr36HjP6OVasCTGgMs5YBlu8ZIgaWaMM08cbRcsUFacw89GJ4xVxw5P6Iv7IdEy6MQk4\/tcUJiz5nIe26NiL5NO0OCngMpuBBw3JsRXNbf0Udy1oTWujl6c9oABjKGdMmECOD6YYtMGw+OdceauXGOUoZbVGSDfymA05zyDer0ePrfEWiWp6rdlg3DPyu9z750XEvzkVrt3xaJvgUYRFmmhoh8Z7O4Ql5q3aUyZdGQ4Dp3CfUo\/hfiMyfhMtpOFFcl\/mWVZn4p\/VhXTKGz\/Sk2esfbxDit6GQu0z1NXRfcd4et\/8xn8k+gpn9B8XvazVgS+8u8KO7AVm26XvJ6BcrOGAlrX6ZaZwpNMtTdBsdPuM2LT05f2WZs+yfoGPvpoe5Dw==","pkt_caplen":853,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0OplAAO4GwVVjViKcCgAA4wG73lg6Ai+b4YcYL4AQAHx2fQAAAQEIClW\/FaMcDaQX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":144,"pkt":"NDY7z3UoLH6BsEqhCABFAACCOppAAO4GwQZjViKcCgAA4wG73lg6Ai+b4YcYL4AYAHzZOwAAAQEIClW\/FaMcDaQXFwMDAEk2DI7SX83kT4Az9x4bmWZxNO4uvk0jgKhRQYRs3aRw1zH882HA0Y3NIUr1WQ8j0CIj9wf4UEXmrQZXbDk\/xMwrTf\/AdXQIXXZl","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGqe8KAADjY1YinN5YAbvhhxgvOgIv6YAQEA5mfQAAAQEIChwNpDdVvxWj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":104,"pkt":"LH6BsEqhNDY7z3UoCABFAABaAABAAEAGqckKAADjY1YinN5YAbvhhxgvOgIv6YAYEA5QrgAAAQEIChwNpDdVvxWjFwMDACEAAAAAAAAAAzKe643NDoVxE72MN\/7HbwasKc8PYurQQ3E=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0986{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":487,"pkt":"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","pkt_caplen":487,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":176,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKWGauVrA4AYEAD\/fAAAAQEIChwNpWUAIdkzFwMDAGnUncxdOauHzmjFwguRYdtf0TJI63b4yVza31VgVxmV4jwpgBzJA\/qAYGWUnB\/618+e\/1edMQ+OHkYDeVlLRX27l\/LcYyDMLAeEOvCGEY9Sqs3\/KigshLQgAq+20Q\/n8mubXMFcnfS3Gn0=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":176,"pkt":"NDY7z3UopHczjPFACABFAgCiFARAAEAGENkKAACVCgAA4x9J3ABq5WsDuFSl9IAYARV1xQAAAQEICgAh2yccDaVlFwMDAGmMCHP98KlRXIA7TGmo3+Bq56QkuNiT0wtlj5Xc\/D9AZF+TeIY7JEaMOGJjd+UEaLs+JKCt5ILl8HtR9hsQk0h9qSMCDd3Cxm2FKvBnPaWoV0i2lyboe\/tMji1LZRv0H\/hnQ6RRnY5LMQM=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKX0auVrcYAQD\/yEogAAAQEIChwNpWcAIdsn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687256,"pkt_len":129,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5SAbt7aDN2a\/Iuu4AYEACMxQAAAQEIChwNp4ECYGIfFwMDADoAAAAAAAAABWpQugOqCE38l\/frkqmzk177YnwE6gNr3Pdqbx\/COOeetvWHyx1IFsd9DoAqrv\/zC4NH","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687257,"pkt_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAABzVOFAACoGyO40JfOtCgAA4wG73lJr8i67e2gztYAYAAlXSQAAAQEICgJga5AcDaeBFwMDADr34AORZ\/mswNYfmNi7\/+6i2ig9OqqyvrgbKQJR8qDwLIs02hMuySZ+JbUzHN4FJfLFnMXUzMRsZoxp","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687257,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5SAbt7aDO1a\/Iu+oAQD\/7YTgAAAQEIChwNp6UCYGuQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687257,"pkt_len":129,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5TAbsf\/fBecO3WJIAYEADn9wAAAQEIChwNq2wAjYaQFwMDADoAAAAAAAAABl\/SrHoqKXSzyLq95nfMqN\/R0VHZx30WEMc1I5zcFMzTdCQXjG0ezvYo7QrOFylBAnZU","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687258,"pkt_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAABzy8VAACsGUQo0JfOtCgAA4wG73lNw7dYkH\/3wnYAYAAmnHQAAAQEICgCNkP0cDatsFwMDADoscoyH7e3mELBK2d4xy1OsgkHRaRwhAoZTVn3ilJ4pAYyRlRs1EXZaYPdw22i2nO8w6wO1EsutrZ9I","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687258,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5TAbsf\/fCdcO3WY4AQD\/6i5QAAAQEIChwNq5EAjZD9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":154,"pkt":"AQBeAAD7GIEORo7ICABFAACMyOAAAP8RBrAKAADV4AAA+xTpFOkAeGDGAAAAAAADAAAAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMgAEAACkFoAAAEZQAEgAEAA4AmzqBDkaOyBiBDkaOyA==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":174,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AHgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QB4u7wAAAAAAAMAAAAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAyAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0687{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":274,"pkt":"GIEORo7INDY7z3UoCABFAAEEsFAAAP8R9OAKAADjCgAA1RTpFOkA8ADKAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABQRTFAtUktFUlVSLU9TWCAoOSnADMAyACGAAQAAAHgADQAAAADbaQRuRFBJwCHAMgAQgAEAABGUACIWcnBCQT0zNzoyRTo0Nzo2RDoxODo1NApycFZyPTE1Mi4xEUxQLVJLRVJVUi1PU1ggKDkpDF9kZXZpY2UtaW5mb8AcABAAAQAAEZQAIBRtb2RlbD1NYWNCb29rUHJvMTEsMQpvc3h2ZXJzPTE3wFgAAYABAAAAeAAECgAA4w==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0390{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":54,"pkt":"LH6BsEqhNDY7z3UoCABFAAAo3\/wAAEAGn4oKAADjuBk4Td5VAFBor5ytCT1EPVAQEAlzBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":54,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoLkYAAEAGUUEKAADjuBk4Td40AFBjyKiAGk9l7lAQEAA5gAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0uJtAADgGjt+4GThNCgAA4wBQ3lUJPUQ9aK+croAQAOvGjAAAAQEICuMVH+AcDWN7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687259,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0NJlAADcGE+K4GThNCgAA4wBQ3jQaT2XuY8iogYAQAPOM2AAAAQEICuMVH+UcDWOU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":46,"pkt":"AQBeAAACGIEORo7ICABGAAAgPP4AAAEC\/QIKAADV4AAAApQEAAAXAAgE4AAA+w==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":46,"pkt":"AQBeAAD7GIEORo7ICABGAAAgpGYAAAEClKEKAADV4AAA+5QEAAAWAAkE4AAA+w==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":186,"pkt":"AQBeAAD7GIEORo7ICABFAACsLkIAAP8RoS4KAADV4AAA+xTpFOkAmDTPAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4QABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":206,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYj8UAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADhAAFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg=","pkt_caplen":206,"pkt_type":34525,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1569687260469,"flow_last_seen":1569687260469,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"35.201.124.9","src_port":56910,"dst_port":443,"l4_proto":"tcp"}
+0460{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":104,"pkt":"LH6BsEqhNDY7z3UoCABFAABaAABAAEAGj+kKAADjI8l8Cd5OAbsN94yysPePlIAYEACJPAAAAQEIChwNtRgGQIQkFwMDACEAAAAAAAAAA3VW6sM2CHDT\/Oy2e1MF3bFmEvrGQamtRJY=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0Bk0AAHoGj8IjyXwJCgAA4wG73k6w94+UDfeM2IAQAPROCgAAAQEICgZA6j4cDbUY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":98,"pkt":"NDY7z3UoLH6BsEqhCABFAABUBk4AAHoGj6EjyXwJCgAA4wG73k6w94+UDfeM2IAYAPS6xgAAAQEICgZA6l4cDbUYFwMDABsAAAAAAAAABNY2znqkTRgDlTqE63fXsBbyQmM=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGkA8KAADjI8l8Cd5OAbsN94zYsPePtIAQD\/8+iwAAAQEIChwNtUwGQOpe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569687260591,"flow_last_seen":1569687260591,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp"}
+0423{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":78,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGxu4KAADjCCVgwt5ZEL8UzEFoAAAAALAC\/\/+sRwAAAgQFtAEDAwUBAQgKHA21kQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":78,"pkt":"NDY7z3UoLH6BsEqhCABFAABAE+xAAPEGAgIIJWDCCgAA4xC\/3lkWZHs7FMxBabASECzSsgAAAgQFZAEDAwIBAQgKeKa\/ZBwNtZEEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEFpFmR7PIAQEAgSNwAAAQEIChwNta14pr9k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":214,"pkt":"LH6BsEqhNDY7z3UoCABFAADIAABAAEAGxmYKAADjCCVgwt5ZEL8UzEFpFmR7PIAYEAijywAAAQEIChwNta14pr9kFgMBAI8BAACLAwMD1fZJLnU2wbbg4p6uNb1F++uvR9\/ndJiHrNU+USXu3wAADsAwwCjAFMAJwBMAMwD\/AQAAVAALAAQDAAECAAoADAAKAB0AFwAeABkAGAAWAAAAFwAAAA0AMAAuBAMFAwYDCAcICAgJCAoICwgECAUIBgQBBQEGAQMDAgMDAQIBAwICAgQCBQIGAg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1569687260591,"flow_last_seen":1569687260620,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e3adec914f3893f18136762f1c0d7d81","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0408{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0E\/NAAPEGAgcIJWDCCgAA4xC\/3lkWZHs8FMxB\/YAQBDAdWQAAAQEICnimv4YcDbWt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2183{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":1374,"pkt":"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","pkt_caplen":1374,"pkt_type":2048,"pkt_ipoffset":14}
+1073{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1569687260591,"flow_last_seen":1569687260667,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1340,"flow_avg_l4_data_len":278,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp","ndpi": {"flow_risk": {"6":"Self-signed Certificate","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e3adec914f3893f18136762f1c0d7d81","ja3s":"e54965894d6b45ecb4323c7ea3d6c115","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=813845657003339838, O=Code42, OU=TEST, ST=MN, C=US","issuerDN":"CN=813845657003339838, O=Code42, OU=TEST, ST=MN, C=US","fingerprint":"86:2A:47:EF:00:68:79:60:7F:94:E2:91:6F:E0:38:82:37:8A:8E:2E"}}
+0405{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEH9FmSAWIAQD98MVwAAAQEIChwNtdp4pr+Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2022{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":1261,"pkt":"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","pkt_caplen":1261,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0FQFAAPEGAPkIJWDCCgAA4xC\/3lkWZIBYFMxGqIAQBVoSBwAAAQEICnimv7YcDbXe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":117,"pkt":"NDY7z3UoLH6BsEqhCABFAABnFQJAAPEGAMUIJWDCCgAA4xC\/3lkWZIBYFMxGqIAYBVrYdAAAAQEICnimv7gcDbXeFAMDAAEBFgMDACg7dB3xmvKsFEH\/K1fakcw6GRzltlckKapF\/elLCgSM6vaL+Iyl+b5k","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEaoFmSAi4AQD\/4HEAAAAQEIChwNtfx4pr+4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1012{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":510,"pkt":"LH6BsEqhNDY7z3UoCABFAAHwAABAAEAGxT4KAADjCCVgwt5ZEL8UzEaoFmSAi4AYEAAu7wAAAQEIChwNtf14pr+4FwMDAbdgdjhWB+\/hgLh+jK23J36VZvUSbpVsO2rZopXPnB1sE1m\/n44SG4\/0Ukq22hErOkjUJNIQ72Mb5bruOQs7UT6AXj521xlXzouMdeBn\/\/tWR8RApAGmte953YCBMevJUfa\/piZefm7Ad6vn1VcbEcYft07M9AC3IK6MCqBWDilHrrYSYctEGiJ0gEMNHiJlN4xU4jMi5y6Y1Ii7RE5ePOqGptRw+H\/++5VzMQjiifTNwrhkB6rxQXgvJmSrx8MCxIoHYLmmptRaltbA3ROzFYXyBly1JaGC\/uv3MfEVrkm6eClCxuRppVpOwnVPvstTTTkwf+YXF9C\/cVgBRt3ithkJCjaW3o+\/7MIB7acMtzo\/Gd+vNJpCmkdik6BrWeZJEnFSEdFLhuqtrYGQEbbaq+F9v2RICzwmvmmwSOKMeEP2HhuIc4OEBR8aPilwyGEMi3ATc29N7dDnZeC3Z9Zu1rvn0s8Yvi8raMX\/4McNEUqy+shXRUlx34ACJOllyHP+e97qAipUQWKq3pskOEKHsUClOW75XN3mTZt+tdqLUVrGnKOuCM8dBz+SxZ++31bXjONN9TmkqQle","pkt_caplen":510,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0FUNAAPEGALcIJWDCCgAA4xC\/3lkWZICLFMxIZIAQBckPaQAAAQEICnimv9ccDbX9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0963{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":477,"pkt":"NDY7z3UoLH6BsEqhCABFAAHPFVhAAPEG\/wYIJWDCCgAA4xC\/3lkWZICLFMxIZIAYBcklXQAAAQEICnimv9kcDbX9FwMDAZY7dB3xmvKsFbpSGU5Z6+l16NuHUzEljEDzWYBP7ZWZDOZTGoZRttKdAB5qRWccWgycvaITMQnNtQn+P8N1Kg9uCikre4MryKs805hwnDbcg75H4yMsR7wuQFgTs3ao0XS512SZmYqnk5GfxR8tkIzviZsmpjxotnNqt1hJbce9L+zE12\/gtwBS\/A0RRY+P7kulc8bdxkXBQAHdXgFrz+qkBT2QjVQ49lNTuiWwY4CPM3DxJovwKuacISr23vMoR08eScybdrbrMeWidZ3LeIoKrXIMea0uS8qmp8H74Xl0uHJSlt+tNY\/eOZOUMz3Rh3Rure\/HjO1mQn073Oj0H1Xou7mBj6XUhyzMVXfmTDCt6Qbnwx13I6w1ibQVWsSRt+UVC7JZQYtyT+rTqV3dImDfT89H3ss5j1zUag41AW2R1hw9XRp9WLwHdLVjvIjtxtfr2OF2abRO1GDx6aJHg4pEb6MyIgcACB8qRr\/m29KEEUlyOt5y5XgodVs9fr8EAuCcviQ8QI47peMxp0wW+xrCU3vLaizy","pkt_caplen":477,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGxvoKAADjCCVgwt5ZEL8UzEhkFmSCJoAQD\/MDhAAAAQEIChwNtht4pr\/Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":1569687260751,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp"}
+0456{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":101,"pkt":"LH6BsEqhNDY7z3UoCABFAABXLuMAAP8R6zkKAADjS0tLS\/3MADUAQ49kJ8YBAAABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwAzEyOAIyOAMxNzIHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":1569687260751,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.128.28.172.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":1569687260751,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp"}
+0450{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":97,"pkt":"LH6BsEqhNDY7z3UoCABFAABT7b0AAP8RLGMKAADjS0tLS\/CtADUAP6A2wl8BAAABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwATABMAIxMAdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569687260751,"flow_last_seen":1569687260751,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.0.0.10.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0456{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":101,"pkt":"NDY7z3UoLH6BsEqhCABFAABXAABAADoRnx1LS0tLCgAA4wA1\/cwAQw7hJ8aBgwABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwAzEyOAIyOAMxNzIHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0683{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1569687260751,"flow_last_seen":1569687260767,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.128.28.172.in-addr.arpa","num_queries":1,"num_answers":0,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0449{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687260,"pkt_len":97,"pkt":"NDY7z3UoLH6BsEqhCABFAABTAABAADoRnyFLS0tLCgAA4wA18K0APx+zwl+BgwABAAAAAAAAAmxiB19kbnMtc2QEX3VkcAEwATABMAIxMAdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1569687260751,"flow_last_seen":1569687260772,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lb._dns-sd._udp.0.0.0.10.in-addr.arpa","num_queries":1,"num_answers":0,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569687261034,"flow_last_seen":1569687261034,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":93,"pkt":"LH6BsEqhNDY7z3UoCABFAABPSYUAAP8R0J8KAADjS0tLS9+tADUAOxFSxpgBAAABAAAAAAAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569687261034,"flow_last_seen":1569687261034,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1569687261035,"flow_last_seen":1569687261035,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":93,"pkt":"LH6BsEqhNDY7z3UoCABFAABPv9YAAP8RWk4KAADjS0tLS86PADUAO9rj8yQBAAABAAAAAAAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1569687261035,"flow_last_seen":1569687261035,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0551{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":174,"pkt":"NDY7z3UoLH6BsEqhCABFAACgAABAADoRntRLS0tLCgAA4wA1360AjBq8xpiBgwABAAAAAQAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAAQABwCMABgABAAACzwBFBm5zLTYzMglhd3NkbnMtMTUDbmV0ABFhd3NkbnMtaG9zdG1hc3RlcgZhbWF6b27AKgAAAAEAABwgAAADhAASdQAAAVGA","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1569687261034,"flow_last_seen":1569687261050,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":59,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0551{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":174,"pkt":"NDY7z3UoLH6BsEqhCABFAACgAABAADoRntRLS0tLCgAA4wA1zo8AjF9N8ySBgwABAAAAAQAADnZjYWNyYXNocGxhbjAxAmhxBGNvcnAGdmlhc2F0A2NvbQAAHAABwCMABgABAAADVABFBm5zLTYzMglhd3NkbnMtMTUDbmV0ABFhd3NkbnMtaG9zdG1hc3RlcgZhbWF6b27AKgAAAAEAABwgAAADhAASdQAAAVGA","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1569687261035,"flow_last_seen":1569687261054,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":59,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vcacrashplan01.hq.corp.viasat.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0495{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":132,"pkt":"AQBeAAD7GIEORo7ICABFAAB23NkAAP8R8swKAADV4AAA+xTpFOkAYmA6AAAAAAAEAAAAAAABBV9yYW9wBF90Y3AFbG9jYWwAAAyAAcAMAAyAAQhfYWlycGxhecASAAyAAcAoAAyAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0606{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":17,"flow_packet_id":5,"flow_first_seen":1569687246981,"flow_last_seen":1569687261317,"flow_tot_l4_data_len":642,"flow_min_l4_data_len":98,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0527{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AGIR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QBiuzAAAAAAAAQAAAAAAAEFX3Jhb3AEX3RjcAVsb2NhbAAADIABwAwADIABCF9haXJwbGF5wBIADIABwCgADIABAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg=","pkt_caplen":152,"pkt_type":34525,"pkt_ipoffset":14}
+0617{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":18,"flow_packet_id":5,"flow_first_seen":1569687246982,"flow_last_seen":1569687261318,"flow_tot_l4_data_len":642,"flow_min_l4_data_len":98,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0557{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":176,"pkt":"pHczjPFANDY7z3UoCABFAgCiAABAAEAGJN0KAADjCgAAldwAH0m4VKX0auVrcYAYEABPswAAAQEIChwNuMkAIdsnFwMDAGkquNBHUc+ChscXrUtRgCMYZjRJVOaQbTlODQaeY5amqm\/GjUiqzcV41wRmui04E3RqPf8DL0M0lIjsIbM19o\/m74SCL79srfXk80arhJGRlFMGMhcIdyIAYFhKQmR+T8ve+Kap9JlvJLM=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":176,"pkt":"NDY7z3UopHczjPFACABFAgCiFAVAAEAGENgKAACVCgAA4x9J3ABq5WtxuFSmYoAYARVPTQAAAQEICgAh3RwcDbjJFwMDAGk+N0ALJRzLafZuvouf5uUs5D\/U0tzAEaeM6atOPCHqQy7mpl9mt8bavf1mAJLusCbLzj5NJ+78e5L239EIVOnh5iS5h\/9VQOkeND9rF9xLGZBWJl3sT7DKnf23IQJYNAQU58BplPorNjw=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAldwAH0m4VKZiauVr34AQD\/xubQAAAQEIChwNuMsAId0c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1569687261485,"flow_last_seen":1569687261485,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":93,"pkt":"LH6BsEqhNDY7z3UoCABFAABPCDAAAP8REfUKAADjS0tLS+dWADUAO8LFIuMBAAABAAAAAAAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1569687261485,"flow_last_seen":1569687261485,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1569687261486,"flow_last_seen":1569687261486,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":93,"pkt":"LH6BsEqhNDY7z3UoCABFAABPXz4AAP8RuuYKAADjS0tLS965ADUAO3SWXq8BAAABAAAAAAAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1569687261486,"flow_last_seen":1569687261486,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0515{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":145,"pkt":"NDY7z3UoLH6BsEqhCABFAACDAABAADoRnvFLS0tLCgAA4wA151YAb4gYIuOBgwABAAAAAQAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAAQABwBoABgABAAAcIAAoBmRuczEwMcAiCGRuc2FkbWluwCIBawJtAAAcIAAADhAACTqAAAAcIA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1569687261485,"flow_last_seen":1569687261501,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":59,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0515{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687261,"pkt_len":145,"pkt":"NDY7z3UoLH6BsEqhCABFAACDAABAADoRnvFLS0tLCgAA4wA13rkAbznpXq+BgwABAAAAAQAADUxQLVJLRVJVUi1PU1gEaHNkMQJjYQdjb21jYXN0A25ldAAAHAABwBoABgABAAAcIAAoBmRuczEwMcAiCGRuc2FkbWluwCIBawJtAAAcIAAADhAACTqAAAAcIA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1569687261486,"flow_last_seen":1569687261506,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":59,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"lp-rkerur-osx.hsd1.ca.comcast.net","num_queries":1,"num_answers":1,"reply_code":3,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0495{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":132,"pkt":"AQBeAAD7GIEORo7ICABFAAB2VcMAAP8ReeMKAADV4AAA+xTpFOkAYmE7AAAAAAAEAAAAAAABBV9yYW9wBF90Y3AFbG9jYWwAAAwAAcAMAAwAAQhfYWlycGxhecASAAwAAcAoAAwAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AGIR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QBivDEAAAAAAAQAAAAAAAEFX3Jhb3AEX3RjcAVsb2NhbAAADAABwAwADAABCF9haXJwbGF5wBIADAABwCgADAABAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg=","pkt_caplen":152,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1569687262866,"flow_last_seen":1569687262866,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"162.222.43.153","src_port":56881,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":82,"pkt":"LH6BsEqhNDY7z3UoCABFAABEAABAAEAGYVoKAADjot4rmd4xAbu3QBvT9S8yS4AYEAD8CwAAAQEIChwNvkTkAuRNDi2ISqeLxJuBXTMcrWivnw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":292,"pkt":"LH6BsEqhNDY7z3UoCABFAAEWAABAAEAGYIgKAADjot4rmd4xAbu3QBvj9S8yS4AYEACf4gAAAQEIChwNvkTkAuRNC2FzYPnyOhEIxzv9HgAAAQAAAAAABf0HAAAAAAAAAFYAAAAAABO4pgAAAfJ1AAAAGzdZOcQAAAAAAAAAAAAAAAAAAAAAAAAAAGwAAAAAEjynVwAAAAAACz6PAAAAAABmQ+JAyo3EgU6LQwAAAAAAAAAAAAAACK7duMsBAQAAAAELYXNg+fI6EQjHO\/0eAAABAAAAAAAF\/QcAAAAAAAAAVgAAAAAAE7imAAAB8nUAAAAbN1k5xAAAAAAAAAAAAAAAAAAAAAAAAAAAbAAAAAASPKdXAAAAAAALPo8AAAAAAAAAAQ==","pkt_caplen":292,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":82,"pkt":"LH6BsEqhNDY7z3UoCABFAABEAABAAEAGYVoKAADjot4rmd4xAbu3QBzF9S8yS4AYEABLrAAAAQEIChwNvkTkAuRNchVP5mraMf5Tgny7zRbHZQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":126,"pkt":"LH6BsEqhNDY7z3UoCABFAABwAABAAEAGYS4KAADjot4rmd4xAbu3QBzV9S8yS4AYEABPBwAAAQEIChwNvkTkAuRNLTIzODY1fGNvbS5jb2RlNDIuYmFja3VwLm1lc3NhZ2UuYmFja3VwLkJhY2t1cFN0b3BwZWRNZXNzYWdl","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":82,"pkt":"LH6BsEqhNDY7z3UoCABFAABEAABAAEAGYVoKAADjot4rmd4xAbu3QB0R9S8yS4AYEADIjwAAAQEIChwNvkTkAuRNRQ1ifkkVkNnk0YE1teSo+A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":98,"pkt":"LH6BsEqhNDY7z3UoCABFAABUAABAAEAGYUoKAADjot4rmd4xAbu3QB0h9S8yS4AYEAAhRwAAAQEIChwNvkTkAuRNHuF\/Al5FNwM4471Fk+MWxK07D9Qza39tA746URV9VhY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEBAADYGzymi3iuZCgAA4wG73jH1LzJLt0Ab44AQAVQHkQAAAQEICuQC+50cDb5E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEFAADYGzyii3iuZCgAA4wG73jH1LzJLt0AcxYAQAVoGqQAAAQEICuQC+50cDb5E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEJAADYGzyei3iuZCgAA4wG73jH1LzJLt0Ac1YAQAVoGmQAAAQEICuQC+50cDb5E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nENAADYGzyai3iuZCgAA4wG73jH1LzJLt0AdEYAQAVoGXQAAAQEICuQC+50cDb5E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nERAADYGzyWi3iuZCgAA4wG73jH1LzJLt0AdIYAQAVoGTQAAAQEICuQC+50cDb5E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687262,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0nEVAADYGzySi3iuZCgAA4wG73jH1LzJLt0AdQYAQAVoGLAAAAQEICuQC+54cDb5E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687263,"pkt_len":186,"pkt":"AQBeAAD7GIEORo7ICABFAACsdwMAAP8RWG0KAADV4AAA+xTpFOkAmDfPAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4NABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687263,"pkt_len":206,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYksUAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADg0AFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg=","pkt_caplen":206,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":132,"pkt":"AQBeAAD7GIEORo7ICABFAAB2\/EIAAP8R02MKAADV4AAA+xTpFOkAYmE7AAAAAAAEAAAAAAABBV9yYW9wBF90Y3AFbG9jYWwAAAwAAcAMAAwAAQhfYWlycGxhecASAAwAAcAoAAwAAQAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":152,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AGIR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QBivDEAAAAAAAQAAAAAAAEFX3Jhb3AEX3RjcAVsb2NhbAAADAABwAwADAABCF9haXJwbGF5wBIADAABwCgADAABAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg=","pkt_caplen":152,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":131,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5TAbsf\/fCdcO3WY4AYEADz9AAAAQEIChwNyNQAjZD9FwMDADwAAAAAAAAAB0DKjLoi0YJPNBD6fKWPxXLjfwudlEvIp0PM4dw9EFvpHBBpN2KOzc9FM29HIr9B+UxWLR0=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":131,"pkt":"LH6BsEqhNDY7z3UoCABFAAB1AABAAEAGB84KAADjNCXzrd5SAbt7aDO1a\/Iu+oAYEACJLAAAAQEIChwNyNQCYGuQFwMDADwAAAAAAAAABjEPCyt4xTfnoXPR1XL1HU4hhWTdOMs+FxaQdOH\/20SQDX\/7cDb3x2KSZCxXlbYCPWUwJBE=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8ZAACsGUUg0JfOtCgAA4wG73lNw7dZjH\/3w3oAQAAmN4QAAAQEICgCNmHIcDcjU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VOJAACoGySw0JfOtCgAA4wG73lJr8i76e2gz9oAQAAm+YQAAAQEICgJgdAIcDcjU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687265,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1569687267035,"flow_last_seen":1569687267035,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp"}
+0423{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":78,"pkt":"LH6BsEqhNDY7z3UoCABFAABAAABAAEAGwVUKAADjCCVmW95hAbsGNnxMAAAAALAC\/\/9wfAAAAgQFtAEDAwUBAQgKHA3OcQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":70,"pkt":"NDY7z3UoLH6BsEqhCABFAAA47VEAAPcGXQsIJWZbCgAA4wG73mHOEwD1BjZ8TZASgABbLAAAAgQFtAEBCAo\/+a5OHA3OcQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnxNzhMA9oAQ\/\/\/yvgAAAQEIChwNzpw\/+a5O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":218,"pkt":"LH6BsEqhNDY7z3UoCABFAADMAABAAEAGwMkKAADjCCVmW95hAbsGNnxNzhMA9oAY\/\/8upgAAAQEIChwNzp0\/+a5OFgMBAJMBAACPAwPfZ7WFHXaroFdgiVVapTjr1SY5uqwiS6qMuNeoYJyORwAALMAwwCzAKMAkAJ8AawA5AJ0APQA1wC\/AK8AnwCMAngBnADMAnAA8AC8ACgD\/AQAAOgALAAQDAAECAAoACgAIABkAGAAXABMADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1569687267035,"flow_last_seen":1569687267079,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":32,"flow_max_l4_data_len":184,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"c9f0b47c9805f516e6d3900cb51f7841","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0406{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA09J0AAPcGVcMIJWZbCgAA4wG73mHOEwD2BjZ85YAQgABx9gAAAQEICj\/5rn0cDc6d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0845{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1569687267035,"flow_last_seen":1569687267125,"flow_tot_l4_data_len":1808,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"c9f0b47c9805f516e6d3900cb51f7841","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}}
+0409{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMGnoAQ\/\/\/sIAAAAQEIChwNzso\/+a5+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":1514,"pkt":"NDY7z3UoLH6BsEqhCABFAAXc\/u0AAPcGRcsIJWZbCgAA4wG73mHOEwaeBjZ85YAYgACJBAAAAQEICj\/5rqUAAAAASAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUmi0VGuslo\/WsT4R+rNKNmFj1ZL0wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAKdBE7Z+\/QgBIjgKdoPLQP+aFD6KtOZlOiHey04vsERDOADqNdu8unwz6N0izPw2l\/n+UoPoV6GrQkCjChT893I2Smv8Vj1mVR9ZW1nnkmVR9MJr+xC5Iw99s1Ntq2M7Knro\/38pMlTbzDdIcgeyuFS+2iILYDpWpJ7TdQfZH5XVAvdIk3ZnRxtGd7Lcy\/jVbSYIGFTi\/TuA8Bv82FbHnQSqp4ezyTgTKuHmdSMry0pP20Z6nga4Vd2slNm7KOIghxUpnvRfKqVpF04m1QFzXE34qRtPEU80S1e6wlIl8ZcZrL\/KcU+88mv0xL3dpgVjURuISIJE90mwZCDqslRXPTgAFEjCCBQ4wggP2oAMCAQICDA7pTMMAAAAAUdN3hTANBgkqhkiG9w0BAQsFADCBvjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDA5IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEyMDAGA1UEAxMpRW50cnVzdCBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIwHhcNMTUxMDA1MTkxMzU2WhcNMzAxMjA1MTk0MzU2WjCBujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANo\/ltBNuS9E59s5XptQ7lylYdpBZ1MJqgCajld\/KWvbx+EhJKo60I1HI9LtchbwkSHSXbe4S6iDj7eRMmjPziWTLLJ9l8j+wbQXugmeA5CTe3xJgyJoipveR8MxmHoufUAL0u8+07KMqo9Iqf8A6ClYBve2k1qUcyYmrVgO5UK41epzeWRoUyW4hM+Ueq4GRQyja03Qxr7qGKQ28JKyuhyIjzpSf\/debYMcnfAf5cPW3aV4kj2wbSzqyc+UQRlxRGi6RzwE6V26PvA19xW2nvIuFR4\/R8jIOKdzRV1NsDuxjhcpN+rdBQEiu5Q2Ko1bNf5TGS8IRsEqsxpiHU4r2RsCAwEAAaOCAQwwggEIMA4GA1UdDwEB\/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH\/AgEAMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL2NybC5lbnRydXN0Lm5ldC9nMmNhLmNybDA7BgNVHSAENDAyMDAGBFUdIAAwKDAmBggrBgEFBQc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":1514,"pkt":"NDY7z3UoLH6BsEqhCABFAAXcuXcAAPcGi0EIJWZbCgAA4wG73mHOEwxGBjZ85YAYgAAKqAAAAQEICj\/5rqUAAAAAAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMB0GA1UdDgQWBBSConB03bxTP8971PfNf6dgxgpMvzAfBgNVHSMEGDAWgBRqciZ60B7vfec7aVHUbI2fkBJmqzANBgkqhkiG9w0BAQsFAAOCAQEAOdWOmINhyCxj03AdGTDL9gmszGnVydw3QfIyD+90w1j2eCcJNAiVki\/X37ij\/Q6B6aSc0z9NaCsVMQoVzFIEk+iTUMPZseLhaLc6CXTxNFgKP3eYQLjmaP9d5MhGxeyB18mCGFyDznHYvL+smQKT25SYhNKcprX+XLvwSq8hrMI\/SSRn1i6Oz6zMZBUYcuVsd9NSqLndjawASjUZ1G9zo3Xva2TD4I2DEqGK5w6GTdi0IBu+aqWMS2hm4yvHWAv7VhDUkfsd0zFYEIxE43V7EJ21OLH2qsqBZGzo8uKBVZdRf+HCJ1CiyTxbAEP2W7nVpfz\/B1BAZwewVfC3fm4tzAAFAzCCBP8wggPnoAMCAQICBFHTQEQwDQYJKoZIhvcNAQELBQAwgbAxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMTkwNwYDVQQLEzB3d3cuZW50cnVzdC5uZXQvQ1BTIGlzIGluY29ycG9yYXRlZCBieSByZWZlcmVuY2UxHzAdBgNVBAsTFihjKSAyMDA2IEVudHJ1c3QsIEluYy4xLTArBgNVBAMTJEVudHJ1c3QgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNDA5MjIxNzE0NTdaFw0yNDA5MjMwMTMxNTNaMIG+MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2VlIHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMDkgRW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MTIwMAYDVQQDEylFbnRydXN0IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALqEtnLbngxr4pnpMAGnduoyuJVBGsnaYU5Ycs\/+9oJ5v3NhBgqlJ9izX9NFThxy1k4y8nKKD\/eDGdBqgIAARR6wx+eavxJXJxyjaC8Kh71qaw5eZfMcd9XUhY1wIbSzMueLotWGOQKxuNJHzuTJScQ7p977VH1XvvDobsJ5sjoLVeJQmBYyE1wveFbBwpSz8lrkJ5qfJNfG7NCbJYLjzMLERcWMl3oGayoRn6kKbkg7b9vUERlC948Hv\/VTX5w+9Bcs5mmsTjJMYnfqt+jluzS8GYuunFHnt361U7EzIuVtz3A8Gvrim2e2g\/SNpa9iTE3gWKxkNBID+LaNlGMkpHECAwEAAaOCAQ8wggELMA4GA1UdDwEB\/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH\/AgEBMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9yb290Y2ExLmNybDA7BgNVHSAENDAyMDAGBFUdIAAwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9DUFMwHQYDVR0OBBYEFGpyJnrQHu995ztpUdRsjZ+QEmarMB8GA1UdIwQYMBaAFGiQ5GekplOAx4ZmpPH3S0P7hL1tMA0GCSqGSIb3DQEBCwUAA4IBAQBpM4P8KHpvfe+dVevFPnqddbPMwzg22TSiKGgY6h5p073n0HfauACDTkrPb9HxwSI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMMRoAQ\/\/\/mKQAAAQEIChwNzvI\/+a6l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMR7oAQ\/\/\/ggQAAAQEIChwNzvI\/+a6l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1231{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":37,"flow_packet_id":12,"flow_first_seen":1569687267035,"flow_last_seen":1569687267203,"flow_tot_l4_data_len":6344,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":528,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"*.pandion.viasat.com,pandion.viasat.com","ja3":"c9f0b47c9805f516e6d3900cb51f7841","ja3s":"82f0d8a75fa483d1cfe4b7085b784d7e","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Entrust, Inc., OU=See www.entrust.net\/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K","issuerDN":"C=US, ST=California, L=Carlsbad, O=Viasat Inc., CN=*.pandion.viasat.com","fingerprint":"92:70:CF:E3:69:4B:1D:F4:E2:DE:63:54:EC:DF:40:DB:F3:AC:D1:CA"}}
+1903{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":1181,"pkt":"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","pkt_caplen":1181,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMXloAQ\/\/\/ajAAAAQEIChwNzxc\/+a7N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGwWEKAADjCCVmW95hAbsGNnzlzhMb8YAQ\/\/\/WMQAAAQEIChwNzxc\/+a7N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":129,"pkt":"LH6BsEqhNDY7z3UoCABFAABzAABAAEAGB9AKAADjNCXzrd5SAbt7aDP2a\/Iu+oAYEACCzQAAAQEIChwNz2oCYHQCFwMDADoAAAAAAAAAB7TF6ysJtS62rG9nufpvlCPdT42N4ZN6t9sYhLoWHYOoHQvLEDm6j84VBW0nca1Gx5So","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0VONAACoGySs0JfOtCgAA4wG73lJr8i76e2g0NYAQAAm17AAAAQEICgJgdaIcDc9q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAABzVORAACoGyOs0JfOtCgAA4wG73lJr8i76e2g0NYAYAAmvvAAAAQEICgJgdaIcDc9qFwMDADr34AORZ\/mswQrOpB6saZ5OTdZLtVApkLcu7nvjHL4ZxtsMSNce\/N0YGd0SLA8DL+PkoKYgkm4G3tEm","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGCA8KAADjNCXzrd5SAbt7aDQ1a\/IvOYAQD\/6llQAAAQEIChwNz40CYHWi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1569687267453,"flow_last_seen":1569687267453,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56865,"dst_port":8008,"l4_proto":"tcp"}
+0405{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld4hH0glPK3eiXsRe4AREAA75QAAAQEIChwN0AsAIb2q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1569687267453,"flow_last_seen":1569687267453,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56866,"dst_port":8060,"l4_proto":"tcp"}
+0405{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAjsAAAAQEIChwN0AsGksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"NDY7z3UopHczjPFACABFAAA0sX1AAEAGc88KAACVCgAA4x9I3iGJexF7JTyt34ARAPMpJgAAAQEICgAh33UcDdAL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld4hH0glPK3fiXsRfIAQEAAaFwAAAQEIChwN0A0AId91","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1569687267477,"flow_last_seen":1569687267477,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp"}
+0413{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":71,"pkt":"LH6BsEqhNDY7z3UoCABFAAA5Pw0AAP8R2y0KAADjS0tLS9+lADUAJfklv50BAAABAAAAAAAAB21vemlsbGEDb3JnAAABAAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1569687267477,"flow_last_seen":1569687267477,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"mozilla.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1569687267481,"flow_last_seen":1569687267481,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":84,"pkt":"LH6BsEqhNDY7z3UoCABFAABG89oAAP8RJlMKAADjS0tLS\/PbADUAMlit7RYBAAABAAAAAAAADGRldGVjdHBvcnRhbAdmaXJlZm94A2NvbQAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1569687267481,"flow_last_seen":1569687267481,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"detectportal.firefox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0820{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":373,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnyhkAAEAGtC4KAADjuBk4Td40AFBjyKiBGk9l7oAYEABAcgAAAQEIChwN0CfjFR\/lR0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":24,"flow_packet_id":5,"flow_first_seen":1569687249612,"flow_last_seen":1569687267482,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":20,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":88,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56884,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"ConnectivityCheck"},"http": {"hostname":"detectportal.firefox.com","url":"detectportal.firefox.com\/success.txt?ipv4","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10.13; rv:69.0) Gecko\/20100101 Firefox\/69.0"}}
+0812{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":368,"pkt":"LH6BsEqhNDY7z3UoCABFAAFiADsAAEAGfhIKAADjuBk4Td5VAFBor5yuCT1EPYAYEAk5BQAAAQEIChwN0CjjFR\/gR0VUIC9zdWNjZXNzLnR4dCBIVFRQLzEuMQ0KSG9zdDogZGV0ZWN0cG9ydGFsLmZpcmVmb3guY29tDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMC4xMzsgcnY6NjkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC82OS4wDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":368,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":23,"flow_packet_id":5,"flow_first_seen":1569687249612,"flow_last_seen":1569687267483,"flow_tot_l4_data_len":438,"flow_min_l4_data_len":20,"flow_max_l4_data_len":334,"flow_avg_l4_data_len":87,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56917,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"ConnectivityCheck"},"http": {"hostname":"detectportal.firefox.com","url":"detectportal.firefox.com\/success.txt","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10.13; rv:69.0) Gecko\/20100101 Firefox\/69.0"}}
+0434{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":87,"pkt":"NDY7z3UoLH6BsEqhCABFAABJAABAADoRnytLS0tLCgAA4wA136UANZKzv52BgAABAAEAAAAAB21vemlsbGEDb3JnAAABAAHADAABAAEAAAAaAAQ\/9dDD","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1569687267477,"flow_last_seen":1569687267493,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":37,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"mozilla.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"63.245.208.195"}}
+0643{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":242,"pkt":"NDY7z3UoLH6BsEqhCABFAADkAABAADoRnpBLS0tLCgAA4wA189sA0PLn7RaBgAABAAUAAAAADGRldGVjdHBvcnRhbAdmaXJlZm94A2NvbQAAAQABwAwABQABAAAAIwAeDGRldGVjdHBvcnRhbARwcm9kBm1vemF3cwNuZXQAwDYABQABAAAADgAoDGRldGVjdHBvcnRhbAdmaXJlZm94BmNvbS12MgllZGdlc3VpdGXAT8BgAAUAAQAAUnoAFAVhMTA4OQRkc2NkBmFrYW1hacBPwJQAAQABAAAACQAEuBk4UsCUAAEAAQAAAAkABLgZODM=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":1569687267481,"flow_last_seen":1569687267500,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":50,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"detectportal.firefox.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.56.82"}}
+0919{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":450,"pkt":"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","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td40AFBjyKm0Gk9nboAQD\/TwCAAAAQEIChwN0D\/jFT5V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":450,"pkt":"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","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0xDAAAEAGu0oKAADjuBk4Td5VAFBor53cCT1FvYAQD\/0piwAAAQEIChwN0EPjFT5Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":373,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnAABAAEAGPkgKAADjuBk4Td40AFBjyKm0Gk9nboAYEAAfMQAAAQEIChwN0EXjFT5VR0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0919{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":450,"pkt":"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","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td40AFBjyKrnGk9o7oAQD\/TtGAAAAQEIChwN0FzjFT51","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1569687267677,"flow_last_seen":1569687267677,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.10.115.210","src_port":56879,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":105,"pkt":"LH6BsEqhNDY7z3UoCABFAABb+tIAAEAGzQsKAADjNApz0t4vAbv\/h0Qcal\/PeIAYEACaRQAAAQEIChwN0OQwQN34FwMDACIAAAAAAAAAAwpFwR2TiNxP0z\/UzUIiCJ75mBQ8ToLTjZaT","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":101,"pkt":"NDY7z3UoLH6BsEqhCABFAABXHWRAAOsGv300CnPSCgAA4wG73i9qX894\/4dEQ4AYAHaKdwAAAQEICjBBJbkcDdDkFwMDAB60PFmzucBfQdusHvXD0\/WWAM1faNPMBMLPArfIzdE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA09sQAAEAG0UAKAADjNApz0t4vAbv\/h0RDal\/Pm4AQD\/4TQgAAAQEIChwN0QUwQSW5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAihAAAAQEIChwN0TcGksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1569687267797,"flow_last_seen":1569687267797,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"17.57.144.116","src_port":56886,"dst_port":5223,"l4_proto":"tcp"}
+0405{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0xfMAAEAGCEEKAADjETmQdN42FGcxHLjbZd23sYAREACqlQAAAQEIChwN0VbVpVJo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1569687267797,"flow_last_seen":1569687267797,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"17.57.144.116","src_port":56886,"dst_port":5223,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","category":"Cloud"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":1569687267799,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":73,"pkt":"LH6BsEqhNDY7z3UoCABFAAA72BEAAP8RQicKAADjS0tLS+u1ADUAJxlWhe8BAAABAAAAAAAAA3d3dwVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":1569687267799,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"www.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":1569687267799,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":84,"pkt":"LH6BsEqhNDY7z3UoCABFAABGM9oAAP8R5lMKAADjS0tLS8d0ADUAMjjn9V4BAAABAAAAAAAACTEtY291cmllcgRwdXNoBWFwcGxlA2NvbQAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1569687267799,"flow_last_seen":1569687267799,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","category":"Cloud"},"dns": {"query":"1-courier.push.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1569687267800,"flow_last_seen":1569687267800,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":92,"pkt":"LH6BsEqhNDY7z3UoCABFAABOdGcAAP8Rpb4KAADjS0tLS+i+ADUAOr+fEJABAAABAAAAAAAACTEtY291cmllcgdzYW5kYm94BHB1c2gFYXBwbGUDY29tAAABAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1569687267800,"flow_last_seen":1569687267800,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","category":"Cloud"},"dns": {"query":"1-courier.sandbox.push.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0820{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":373,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnAABAAEAGPkgKAADjuBk4Td40AFBjyKrnGk9o7oAYEAAbSAAAAQEIChwN0VvjFT51R0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1569687267805,"flow_last_seen":1569687267805,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp"}
+0434{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":85,"pkt":"LH6BsEqhNDY7z3UoCABFAABHoW4AAP8ReL4KAADjS0tLS\/rBADUAMyCpE94BAAABAAAAAAAACjI0LWNvdXJpZXIEcHVzaAVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1569687267805,"flow_last_seen":1569687267805,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","category":"Cloud"},"dns": {"query":"24-courier.push.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1569687267812,"flow_last_seen":1569687267812,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":75,"pkt":"LH6BsEqhNDY7z3UoCABFAAA9PxQAAP8R2yIKAADjS0tLS8sWADUAKZk5eJ4BAAABAAAAAAAABG1haWwGdmlhc2F0A2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1569687267812,"flow_last_seen":1569687267812,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"mail.viasat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0619{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":224,"pkt":"NDY7z3UoLH6BsEqhCABFAADSAABAADoRnqJLS0tLCgAA4wA167UAvhHNhe+BgAABAAQAAAAAA3d3dwVhcHBsZQNjb20AAAEAAcAMAAUAAQAABRUAGwN3d3cFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AMArAAUAAQAAFoEALwN3d3cFYXBwbGUDY29tB2VkZ2VrZXkDbmV0C2dsb2JhbHJlZGlyBmFrYWRuc8BBwFIABQABAAAE7QAZBWU2ODU4BWRzY2U5CmFrYW1haWVkZ2XAQcCNAAEAAQAAAAcABLgbc6E=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1569687267799,"flow_last_seen":1569687267814,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":39,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"www.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.27.115.161"}}
+0920{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":450,"pkt":"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","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":323,"pkt":"NDY7z3UoLH6BsEqhCABFAAE1AABAADoRnj9LS0tLCgAA4wA16L4BIf0XEJCBgAABAAoAAAAACTEtY291cmllcgdzYW5kYm94BHB1c2gFYXBwbGUDY29tAAABAAHADAAFAAEAAElSAC0BMRpjb3VyaWVyLXNhbmRib3gtcHVzaC1hcHBsZQNjb20GYWthZG5zA25ldADAPgAFAAEAAACOACIUdXMtc2FuZGJveC1jb3VyaWVyLTQKcHVzaC1hcHBsZcBbwHcAAQABAAAALgAEEbyKR8B3AAEAAQAAAC4ABBG8hEjAdwABAAEAAAAuAAQRvIbKwHcAAQABAAAALgAEEbyKSMB3AAEAAQAAAC4ABBG8iLrAdwABAAEAAAAuAAQRvIU9wHcAAQABAAAALgAEEbyHusB3AAEAAQAAAC4ABBG8ikY=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0690{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1569687267800,"flow_last_seen":1569687267818,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":58,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","category":"Cloud"},"dns": {"query":"1-courier.sandbox.push.apple.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.188.138.71"}}
+0407{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td40AFBjyKwaGk9qboAQD\/ToPgAAAQEIChwN0WrjFT+O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":190,"pkt":"NDY7z3UoLH6BsEqhCABFAACwAABAADoRnsRLS0tLCgAA4wA1x3QAnFOt9V6BgAABAAMAAAAACTEtY291cmllcgRwdXNoBWFwcGxlA2NvbQAAAQABwAwABQABAAAYQwAlATESY291cmllci1wdXNoLWFwcGxlA2NvbQZha2FkbnMDbmV0AMA2AAUAAQAAABcAHQ91cy1zdy1jb3VyaWVyLTQKcHVzaC1hcHBsZcBLwGcAAQABAAAAFwAEETmQdA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1569687267799,"flow_last_seen":1569687267819,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":50,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","category":"Cloud"},"dns": {"query":"1-courier.push.apple.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.57.144.116"}}
+0479{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":119,"pkt":"NDY7z3UoLH6BsEqhCABFAABp+WRAADUGn5oROZB0CgAA4xRn3jZl3bexMRy43IAYARnThAAAAQEICtWmYt0cDdFWFQMDADDYQSIj3jkYV2ViIYpeEoheM2HYhDINcbYvi9M0lKa7pHKjHCudSoLIJkInalaEjXI=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":54,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoAABAAEAGjkAKAADjETmQdN42FGcxHLjcAAAAAFAEAAAmugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0+WVAADUGn84ROZB0CgAA4xRn3jZl3bfmMRy43IARARmo0AAAAQEICtWmYt0cDdFW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":54,"pkt":"LH6BsEqhNDY7z3UoCABFAAAoAABAAEAGjkAKAADjETmQdN42FGcxHLjcAAAAAFAEAAAmugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":192,"pkt":"NDY7z3UoLH6BsEqhCABFAACyAABAADoRnsJLS0tLCgAA4wA1+sEAnlIeE96BgAABAAMAAAAACjI0LWNvdXJpZXIEcHVzaAVhcHBsZQNjb20AAAEAAcAMAAUAAQAASVMAJgIyNBJjb3VyaWVyLXB1c2gtYXBwbGUDY29tBmFrYWRucwNuZXQAwDcABQABAAAAGwAdD3VzLXN3LWNvdXJpZXItNApwdXNoLWFwcGxlwE3AaQABAAEAAAAuAAQROZAU","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1569687267805,"flow_last_seen":1569687267824,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":51,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ApplePush","category":"Cloud"},"dns": {"query":"24-courier.push.apple.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.57.144.20"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1569687267831,"flow_last_seen":1569687267831,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":69,"pkt":"LH6BsEqhNDY7z3UoCABFAAA3jBMAAP8RjikKAADjS0tLS8J1ADUAI5qcqN8BAAABAAAAAAAABWFwcGxlA2NvbQAAAQAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1569687267831,"flow_last_seen":1569687267831,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1569687267841,"flow_last_seen":1569687267841,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.103.196","src_port":56871,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0KKIAAEAG11YKAADjCCVnxN4nAbsMJdDwho1uAoAR\/\/8iBAAAAQEIChwN0X94psIw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":117,"pkt":"NDY7z3UoLH6BsEqhCABFAABnAABAADoRnw1LS0tLCgAA4wA1wnUAU2BUqN+BgAABAAMAAAAABWFwcGxlA2NvbQAAAQABwAwAAQABAAAE+gAEEbJgO8AMAAEAAQAABPoABBGOoDvADAABAAEAAAT6AAQRrOAv","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1569687267831,"flow_last_seen":1569687267847,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":35,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"apple.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.178.96.59"}}
+0441{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":91,"pkt":"NDY7z3UoLH6BsEqhCABFAABNAABAADoRnydLS0tLCgAA4wA1yxYAOeBneJ6BgAABAAEAAAAABG1haWwGdmlhc2F0A2NvbQAAAQABwAwAAQABAAAAPAAECCVnxA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":48,"flow_packet_id":2,"flow_first_seen":1569687267812,"flow_last_seen":1569687267847,"flow_tot_l4_data_len":98,"flow_min_l4_data_len":41,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"mail.viasat.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"8.37.103.196"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1569687267851,"flow_last_seen":1569687267851,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":75,"pkt":"LH6BsEqhNDY7z3UoCABFAAA9LvsAAP8R6zsKAADjS0tLS+LaADUAKWM2zl4BAAABAAAAAAAAA3d3dwdvdXRsb29rA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1569687267851,"flow_last_seen":1569687267851,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"www.outlook.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0627{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":230,"pkt":"NDY7z3UoLH6BsEqhCABFAADYAABAADoRnpxLS0tLCgAA4wA14toAxJ5uzl6BgAABAAcAAAAAA3d3dwdvdXRsb29rA2NvbQAAAQABwAwABQABAAAAzQAUB291dGxvb2sJb2ZmaWNlMzY1wBjALQAFAAEAAABWABkHb3V0bG9vawdtcy1hY2RjBm9mZmljZcAYwE0ABQABAAAHZQAKB3NqYy1lZnrAVcByAAEAAQAAADAABChh3iLAcgABAAEAAAAwAAQ0YAOCwHIAAQABAAAAMAAEKGHdcsByAAEAAQAAADAABDRgEgI=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1569687267851,"flow_last_seen":1569687267865,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":41,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"www.outlook.com","num_queries":1,"num_answers":7,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"40.97.222.34"}}
+0406{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0KOdAAPMG5BAIJWfECgAA4wG73ieGjW4CDCXQ8YAQTdZYOgAAAQEICninPiMcDdF\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1569687267988,"flow_last_seen":1569687267988,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"74.125.197.188","src_port":56874,"dst_port":443,"l4_proto":"tcp"}
+0406{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0c9UAAEAG69IKAADjSn3FvN4qAbvQnkCVU\/eYD4AREABMcgAAAQEIChwN0hGhDZLg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1569687267991,"flow_last_seen":1569687267991,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":61328,"dst_port":1900,"l4_proto":"udp"}
+0612{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687267,"pkt_len":216,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKY+gAAAERWl4KAADj7\/\/\/+u+QB2wAtlB4TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1569687267991,"flow_last_seen":1569687267991,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":61328,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0405{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0lz4AAGoGnmlKfcW8CgAA4wG73ipT95gP0J5AloAQAP3kSQAAAQEICqEOCgscDdIR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":373,"pkt":"LH6BsEqhNDY7z3UoCABFAAFnAABAAEAGPkgKAADjuBk4Td40AFBjyKwaGk9qboAYEAAWhQAAAQEIChwN0lLjFT+OR0VUIC9zdWNjZXNzLnR4dD9pcHY0IEhUVFAvMS4xDQpIb3N0OiBkZXRlY3Rwb3J0YWwuZmlyZWZveC5jb20NClVzZXItQWdlbnQ6IE1vemlsbGEvNS4wIChNYWNpbnRvc2g7IEludGVsIE1hYyBPUyBYIDEwLjEzOyBydjo2OS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzY5LjANCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTLGVuO3E9MC41DQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":368,"pkt":"LH6BsEqhNDY7z3UoCABFAAFiEVkAAEAGbPQKAADjuBk4Td5VAFBor53cCT1FvYAYEAAVugAAAQEIChwN0lXjFT5ZR0VUIC9zdWNjZXNzLnR4dCBIVFRQLzEuMQ0KSG9zdDogZGV0ZWN0cG9ydGFsLmZpcmVmb3guY29tDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMC4xMzsgcnY6NjkuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC82OS4wDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuNQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":368,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":450,"pkt":"NDY7z3UoLH6BsEqhCABFAAG0NJ1AADcGEl64GThNCgAA4wBQ3jQaT2puY8itTYAYARVp4wAAAQEICuMVQI0cDdJSSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4NCkNvbnRlbnQtTGVuZ3RoOiA4DQpMYXN0LU1vZGlmaWVkOiBNb24sIDE1IE1heSAyMDE3IDE4OjA0OjQwIEdNVA0KRVRhZzogImFlNzgwNTg1ZjQ5Yjk0Y2UxNDQ0ZWI3ZDI4OTA2MTIzIg0KQWNjZXB0LVJhbmdlczogYnl0ZXMNClNlcnZlcjogQW1hem9uUzMNClgtQW16LUNmLUlkOiBJcS1oTGRhcmRnZUVmOTBhU3dsQlZkRDJUbjFzY29hcnBlQlMtbUtNWmdLNG1lWGlWTEpHTUE9PQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG5vLXN0b3JlLCBtdXN0LXJldmFsaWRhdGUNCkRhdGU6IFNhdCwgMjggU2VwIDIwMTkgMTY6MTQ6MjggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCnN1Y2Nlc3MK","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1569687268077,"flow_last_seen":1569687268077,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":38616,"dst_port":61328,"l4_proto":"udp"}
+1063{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1569687268077,"flow_last_seen":1569687268077,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":38616,"dst_port":61328,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0919{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":450,"pkt":"NDY7z3UoLH6BsEqhCABFAAG0uJ1AADgGjV24GThNCgAA4wBQ3lUJPUW9aK+fCoAYAPyo7AAAAQEICuMVQJgcDdJVSFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4NCkNvbnRlbnQtTGVuZ3RoOiA4DQpMYXN0LU1vZGlmaWVkOiBNb24sIDE1IE1heSAyMDE3IDE4OjA0OjQwIEdNVA0KRVRhZzogImFlNzgwNTg1ZjQ5Yjk0Y2UxNDQ0ZWI3ZDI4OTA2MTIzIg0KQWNjZXB0LVJhbmdlczogYnl0ZXMNClNlcnZlcjogQW1hem9uUzMNClgtQW16LUNmLUlkOiBJcS1oTGRhcmRnZUVmOTBhU3dsQlZkRDJUbjFzY29hcnBlQlMtbUtNWmdLNG1lWGlWTEpHTUE9PQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUsIG5vLXN0b3JlLCBtdXN0LXJldmFsaWRhdGUNCkRhdGU6IFNhdCwgMjggU2VwIDIwMTkgMTY6MTQ6MjggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCnN1Y2Nlc3MK","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGP3sKAADjuBk4Td5VAFBor58KCT1HPYAQD\/QiegAAAQEIChwN0nDjFUCY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAg9AAAAQEIChwN0scGksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":105,"pkt":"LH6BsEqhNDY7z3UoCABFAABbAABAAEAGh94KAADjNApz0t4vAbv\/h0RDal\/Pm4AYEAAiawAAAQEIChwN0xUwQSW5FwMDACIAAAAAAAAABOSiEtX++2wFU+QPmxUY3GRLet\/12fHye+Na","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":101,"pkt":"NDY7z3UoLH6BsEqhCABFAABXHWVAAOsGv3w0CnPSCgAA4wG73i9qX8+b\/4dEaoAYAHZkqAAAAQEICjBBJkkcDdMVFwMDAB60PFmzucBfQpbZG5fkhGLdfsdJy9p7QpDrf7iqgfM=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0AABAAEAGiAUKAADjNApz0t4vAbv\/h0Rqal\/PvoAQD\/4QNwAAAQEIChwN0zYwQSZJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":129,"pkt":"LH6BsEqhNDY7z3UoCABFAABzsJwAAEAGlzMKAADjNCXzrd5TAbsf\/fDecO3WY4AYEAAQHgAAAQEIChwN00UAjZhyFwMDADoAAAAAAAAACEzGPPJ3Kcu6RavuCPBDM8XTcgluoyj+7Z3MIZ+UxsM4YZLkjnm2tNIw1TP+GkWg18Gv","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0y8dAACsGUUc0JfOtCgAA4wG73lNw7dZjH\/3xHYAQAAmAkwAAAQEICgCNmxAcDdNF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":129,"pkt":"NDY7z3UoLH6BsEqhCABFAABzy8hAACsGUQc0JfOtCgAA4wG73lNw7dZjH\/3xHYAYAAl3vQAAAQEICgCNmxAcDdNFFwMDADoscoyH7e3mEaLj9szbkWqqmEqDlelG3R9AcZ4tJ3XN64I60DPQ058YYyhPfpVvx4TCC6nlGIJyOZ\/k","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"LH6BsEqhNDY7z3UoCABFAAA0x1cAAEAGgLcKAADjNCXzrd5TAbsf\/fEdcO3WooAQD\/5wPAAAAQEIChwN02gAjZsQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1569687268376,"flow_last_seen":1569687268376,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":61328,"l4_proto":"udp"}
+0791{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":353,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTj5RAAEARlIwKAACXCgAA4wds75ABPzXfSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1569687268376,"flow_last_seen":1569687268376,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":61328,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1569687268559,"flow_last_seen":1569687268559,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":57547,"dst_port":1900,"l4_proto":"udp"}
+0612{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":216,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKeUwAAAERRPoKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1569687268559,"flow_last_seen":1569687268559,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":57547,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1569687268746,"flow_last_seen":1569687268746,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":54107,"dst_port":443,"l4_proto":"udp"}
+0508{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":141,"pkt":"LH6BsEqhNDY7z3UoCABFAAB\/CAgAAEAR+QMKAADjCCVmW9NbAbsAa+4DFgEAAAAAAAAAAAAAVgEAAEoAAAAAAAAASgEA7YnEaZ6hZImmhCHr0JUfCBctWVvywlB71JRnxl7mI4ogm7BxyKgEQGFPg0eizi7+AVQMevU74i4erAc5hyngJu8AAAIAOQEA","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1569687268747,"flow_last_seen":1569687268747,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":50081,"dst_port":57547,"l4_proto":"udp"}
+1063{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1569687268747,"flow_last_seen":1569687268747,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":50081,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0405{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAenAAAAQEIChwN1R8GksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":90,"pkt":"NDY7z3UoLH6BsEqhCABFAABMkFUAAPcRuegIJWZbCgAA4wG701sAOF8pFgEAAAAAAAAAAAAAIwMAABcAAAAAAAAAFwEAFGKRvPEadu7FYjYhjKxM1MN8EkEd","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":161,"pkt":"LH6BsEqhNDY7z3UoCABFAACTQPwAAEARv\/sKAADjCCVmW9NbAbsAf9nwFgEAAAAAAAAAAAEAagEAAF4AAQAAAAAAXgEA7YnEaZ6hZImmhCHr0JUfCBctWVvywlB71JRnxl7mI4ogm7BxyKgEQGFPg0eizi7+AVQMevU74i4erAc5hyngJu8UYpG88Rp27sViNiGMrEzUw3wSQR0AAgA5AQA=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":230,"pkt":"NDY7z3UoLH6BsEqhCABFAADYxf0AAPcRg7QIJWZbCgAA4wG701sAxPjiFgEAAAAAAAAAAAEAUgIAAEYAAQAAAAAARgEALUKlqOqp+9af1GcxChS4QXaLYgzyjV+CMRoD1u04EzMgm7BxyKgEQGFPg0eizi7+AVQMevU74i4erAc5hyngJu8AOQAUAQAAAAAAAAAAAgADAQACFgEAAAEAAAAAAAAAQD8tH8NZsi0zp5KqIEac2zndlXephyhcvDs6uk0ts\/C74lCOOKMP7cl2vA0Fdivj2Vu+P3CxRTCYlcHvZh6mgEM=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":135,"pkt":"LH6BsEqhNDY7z3UoCABFAAB5ttQAAEARSj0KAADjCCVmW9NbAbsAZSHLFAEAAAAAAAAAAAIAAwEAAhYBAAABAAAAAAAAAEB13T5lRIw++YjQQ3Qkoyswag+IeQZwzjpfo12O7l1Xcp3w\/UpkhLeZaAWDRsXTNSL+R32oH3qj2v2CyHpmZrLD","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":167,"pkt":"LH6BsEqhNDY7z3UoCABFAACZG00AAEAR5aQKAADjCCVmW9NbAbsAhSBxFwEAAAEAAAAAAAEAcJAp8TP5L9aIAzjZZH+8T1estbsDYKyCkdkhe7+UIBVsNqyejSSkPEU7ONW2iokPbFMvxRUeCNaw\/RBrJMSNbsKC3EuMrgGykf+U9Wpz8EHY6SCoix9y+LnSEFWosh2QWwehPeVhCuFY\/xnfwN3j9dY=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":57,"flow_packet_id":6,"flow_first_seen":1569687268746,"flow_last_seen":1569687268850,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":56,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":54107,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"CiscoVPN","category":"VPN"}}
+0545{"flow_id":57,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":167,"pkt":"LH6BsEqhNDY7z3UoCABFAACZ5VoAAEARG5cKAADjCCVmW9NbAbsAhSuuFwEAAAEAAAAAAAIAcIroYcS3\/qjlLAJ5hVgNA24x6wrtxtbMm99puobFdI66KucUrXLCm27CpIExufGVwJVqf2dvO9CVHHSBup6yXTyxuJs4l0NHL\/QivpVOwo7lEHdJCThBbAs8Wx+IU5suN7IEDaosnRxSWsC2AMv9YUg=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_id":57,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":167,"pkt":"LH6BsEqhNDY7z3UoCABFAACZfpEAAEARgmAKAADjCCVmW9NbAbsAhXmZFwEAAAEAAAAAAAMAcDzvmPLtB4V20+vs+Pcr7Wx7iMFNIgDukd6WG4O587T8V7dCFBodz9a9s7xVrA3ERlsVnzccWHU51YiWyOFePh6Fd3h3UTko6Na4xxDhX5uGJ0Xd7XUu\/x6Q+cY0WD4xtC+shdVmC\/8lPH\/\/WjPzLa4=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_id":57,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":263,"pkt":"NDY7z3UoLH6BsEqhCABFAAD54UEAAPcRaE8IJWZbCgAA4wG701sA5YSXFwEAAAEAAAAAAAEA0LaEehtTZv8b2CA+a2IlOUc+Bvbq1lzEFnHAPMXuajrB85eB1MKeGzW3VNDRQWRwwuxJPQ2mMwZHhCjKnrmWW5KS2qzAK+qFSujGSVdmMGee\/7OHdHST79gz89tgHJxfuyBQfhXTys1q1mdON9ThMXarq+ChjYzv1lGnip9ves8v5LamEWf6T4IWeU4PuLdBbrziDg0Q71+FePE\/DDBfGX+DD21\/jcgPrUfagJMgvz+9HTnoOO9cEAORFAF9xsHc0X3haTRRd5VwQoJZPeiTVCM=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0612{"flow_id":57,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":215,"pkt":"NDY7z3UoLH6BsEqhCABFAADJ1N8AAPcRdOEIJWZbCgAA4wG701sAtf2iFwEAAAEAAAAAAAIAoJWe2p35kGmfrEo4F3leJjn3j4r1xM7nc7JIQnXHHmyTh0FmmIlM9zTT+cjBgqP\/4YSp30pK\/M9ivi\/nNfBeQS4VQpJ9ow9UBufxaAW7k6gSLO9qRRZJHOflrKtXIRpmqfDWoVXLlTz2sA5m5W6kzXS9BT+w4hra5mZ9T7Mvwb7BsSwwHNheo1+hOFtvFidLl\/ymSV6QeqezlRlYqRflE1w=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":57,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":215,"pkt":"NDY7z3UoLH6BsEqhCABFAADJsq8AAPcRlxEIJWZbCgAA4wG701sAtWKPFwEAAAEAAAAAAAMAoCZ5fA\/WJVcpp3g69CPnMWAN6FiyDe8lRdJUl1drBF2zUdazOAOhRXSEi\/RlpkLWMNn1yDpr9CExt7zA\/osjteZVcFi1c8I2ZsMOVHH1mL4kgvDSdipKYFeu7ykTjwZtNQV4\/FVY7FH\/SIusECU9+teK1lt\/IksfSUT\/QnedeTLEfVyP7HAwmnU7huP9ivAs5oOSh\/ps0mTKFIVB5SntE4Y=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0611{"flow_id":57,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":215,"pkt":"NDY7z3UoLH6BsEqhCABFAADJhq8AAPcRwxEIJWZbCgAA4wG701sAtY3TFwEAAAEAAAAAAAQAoHeKGZxBW1Q4pABJMTSX3LUbHu34OICOIbBrwnlOoqSFAGNgRLcSSvCSkoPEWiSx6yLOL++0WFQ\/\/cnvli67B1U1bN0KNW7pxo4I+bqkXjfZ8xBCFGbjxJJVfLSVw+5J4bqy3vY1bqKQCFlRfiQY5q4UuIaq+3kXHFQwCb5UNxTuIQqeQUCbZOsX6Aw1\/GTECatE4XqDtUkdwJuL9GpXIz4=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0588{"flow_id":57,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":199,"pkt":"NDY7z3UoLH6BsEqhCABFAAC5u7MAAPcRjh0IJWZbCgAA4wG701sApUJkFwEAAAEAAAAAAAUAkG5KNuk+EZOV1nNxmMR0wghy2Q+h3ttKxHQgKNRewJXyNdIBQKiYywiPhtcFIX0WgeskclTE0KCF9mQ+j5N66vLDvZbqTEkY8iyv5BP3Jra3vtiRG37SSrw1GENZNXr0O1GPc0Ry6bJ72MxSeUAA2Za5tPJV00oHfWupVTa1384uF+19TdK92Lxe5ukdC6G4yA==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":57,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":151,"pkt":"LH6BsEqhNDY7z3UoCABFAACJOdIAAEARxy8KAADjCCVmW9NbAbsAddrCFwEAAAEAAAAAAAQAYKkcQctvWgGrvdO\/PrYGLApIwYpWUheFZjMVzufzIRAcKjKNazs\/06ngcZiPVgUqhcX84s760euS8M3xIrDvpCKFzKSAjWoh4pylx4pwlItuT3UmopW385XbWJ+K1TtL4A==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":57,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":167,"pkt":"LH6BsEqhNDY7z3UoCABFAACZw3kAAEARPXgKAADjCCVmW9NbAbsAhfRMFwEAAAEAAAAAAAUAcAguDkNAFEpmjyLWL5ulA2X4vi7kL33Wj73almtX8jli+B8jjvqpmzC3x2W92joDZtuks\/EfbirzWU8ByPtXmm6aWQxjNAvCnmxuCC3eMGkqUoaqRSBLGTcN8OkSIzWZ47yqEaMjNbN1k4XgAqL+7M8=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687268,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1569687269094,"flow_last_seen":1569687269094,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.1","src_port":52595,"dst_port":192,"l4_proto":"udp"}
+0381{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg7WwAAEAReH0KAADjCgAAAc1zAMAADBGuCAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1569687269223,"flow_last_seen":1569687269223,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":57547,"l4_proto":"udp"}
+0791{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":353,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTj6FAAEARlH8KAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1569687269223,"flow_last_seen":1569687269223,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0612{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":216,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKtRAAAAERCTYKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1569687269561,"flow_last_seen":1569687269561,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56954,"dst_port":8008,"l4_proto":"tcp"}
+0423{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":78,"pkt":"pHczjPFANDY7z3UoCABFAABAAABAAEAGJUEKAADjCgAAld56H0gqQcOaAAAAALAC\/\/9B2AAAAgQFtAEDAwUBAQgKHA3YAQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1569687269562,"flow_last_seen":1569687269562,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56955,"dst_port":8060,"l4_proto":"tcp"}
+0423{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":78,"pkt":"2DE0IHf7NDY7z3UoCABFAABAAABAAEAGJT8KAADjCgAAl957H3yCfYpEAAAAALAC\/\/8iuwAAAgQFtAEDAwUBAQgKHA3YAQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":74,"pkt":"NDY7z3UopHczjPFACABFAAA8AABAAEAGJUUKAACVCgAA4x9I3np8gG11KkHDm6ASOJBP2wAAAgQFtAQCCAoAIeBIHA3YAQEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":61,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld56H0gqQcObfIBtdoAQEBWnIAAAAQEIChwN2AIAIeBI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0743{"flow_id":61,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":317,"pkt":"pHczjPFANDY7z3UoCABFAAEvAABAAEAGJFIKAADjCgAAld56H0gqQcObfIBtdoAYEBUO5QAAAQEIChwN2AIAIeBIR0VUIC9zc2RwL2RldmljZS1kZXNjLnhtbCBIVFRQLzEuMQ0KSG9zdDogMTAuMC4wLjE0OTo4MDA4DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMF8xM182KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzcuMC4zODY1LjkwIFNhZmFyaS81MzcuMzYNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KDQo=","pkt_caplen":317,"pkt_type":2048,"pkt_ipoffset":14}
+0852{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":61,"flow_packet_id":4,"flow_first_seen":1569687269561,"flow_last_seen":1569687269563,"flow_tot_l4_data_len":399,"flow_min_l4_data_len":32,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56954,"dst_port":8008,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"10.0.0.149","url":"10.0.0.149:8008\/ssdp\/device-desc.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36"}}
+0405{"flow_id":61,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"NDY7z3UopHczjPFACABFAAA0jT9AAEAGmA0KAACVCgAA4x9I3np8gG12KkHEloAQAPO1RgAAAQEICgAh4EkcDdgC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":74,"pkt":"NDY7z3Uo2DE0IHf7CABFAAA8AABAAEAGJUMKAACXCgAA4x983nsgu1W7gn2KRaASqbA3ZQAAAgQFtAQCCAoGktWOHA3YAQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYpFILtVvIAQEBX\/yAAAAQEIChwN2AUGktWO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0731{"flow_id":62,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":308,"pkt":"2DE0IHf7NDY7z3UoCABFAAEmAABAAEAGJFkKAADjCgAAl957H3yCfYpFILtVvIAYEBU8YgAAAQEIChwN2AUGktWOR0VUIC9kaWFsL2RkLnhtbCBIVFRQLzEuMQ0KSG9zdDogMTAuMC4wLjE1MTo4MDYwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTWFjaW50b3NoOyBJbnRlbCBNYWMgT1MgWCAxMF8xM182KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNzcuMC4zODY1LjkwIFNhZmFyaS81MzcuMzYNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KDQo=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":62,"flow_packet_id":4,"flow_first_seen":1569687269562,"flow_last_seen":1569687269567,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":32,"flow_max_l4_data_len":274,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56955,"dst_port":8060,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"10.0.0.151","url":"10.0.0.151:8060\/dial\/dd.xml","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36"}}
+2005{"flow_id":61,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":1261,"pkt":"NDY7z3UopHczjPFACABFAATfjUBAAEAGk2EKAACVCgAA4x9I3np8gG12KkHEloAYAPNXUQAAAQEICgAh4EkcDdgCSFRUUC8xLjEgMjAwIE9LDQpBcHBsaWNhdGlvbi1VUkw6aHR0cDovLzEwLjAuMC4xNDk6ODAwOC9hcHBzLw0KQ29udGVudC1MZW5ndGg6MTA3OQ0KQ29udGVudC1UeXBlOmFwcGxpY2F0aW9uL3htbA0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiPz4NCjxyb290IHhtbG5zPSJ1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2UtMS0wIj4NCiAgPHNwZWNWZXJzaW9uPg0KICAgIDxtYWpvcj4xPC9tYWpvcj4NCiAgICA8bWlub3I+MDwvbWlub3I+DQogIDwvc3BlY1ZlcnNpb24+DQogIDxVUkxCYXNlPmh0dHA6Ly8xMC4wLjAuMTQ5OjgwMDg8L1VSTEJhc2U+DQogIDxkZXZpY2U+DQogICAgPGRldmljZVR5cGU+dXJuOmRpYWwtbXVsdGlzY3JlZW4tb3JnOmRldmljZTpkaWFsOjE8L2RldmljZVR5cGU+DQogICAgPGZyaWVuZGx5TmFtZT5DaHJvbWVjYXN0MTY5OTwvZnJpZW5kbHlOYW1lPg0KICAgIDxtYW51ZmFjdHVyZXI+R29vZ2xlIEluYy48L21hbnVmYWN0dXJlcj4NCiAgICA8bW9kZWxOYW1lPkV1cmVrYSBEb25nbGU8L21vZGVsTmFtZT4NCiAgICA8VUROPnV1aWQ6NzlkODhlODMtNzI1Yy1iNzFiLWJhZDAtNTg2MmQ1YjIyMzg2PC9VRE4+DQogICAgPGljb25MaXN0Pg0KICAgICAgPGljb24+DQogICAgICAgIDxtaW1ldHlwZT5pbWFnZS9wbmc8L21pbWV0eXBlPg0KICAgICAgICA8d2lkdGg+OTg8L3dpZHRoPg0KICAgICAgICA8aGVpZ2h0PjU1PC9oZWlnaHQ+DQogICAgICAgIDxkZXB0aD4zMjwvZGVwdGg+DQogICAgICAgIDx1cmw+L3NldHVwL2ljb24ucG5nPC91cmw+DQogICAgICA8L2ljb24+DQogICAgPC9pY29uTGlzdD4NCiAgICA8c2VydmljZUxpc3Q+DQogICAgICA8c2VydmljZT4NCiAgICAgICAgPHNlcnZpY2VUeXBlPnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MTwvc2VydmljZVR5cGU+DQogICAgICAgIDxzZXJ2aWNlSWQ+dXJuOmRpYWwtbXVsdGlzY3JlZW4tb3JnOnNlcnZpY2VJZDpkaWFsPC9zZXJ2aWNlSWQ+DQogICAgICAgIDxjb250cm9sVVJMPi9zc2RwL25vdGZvdW5kPC9jb250cm9sVVJMPg0KICAgICAgICA8ZXZlbnRTdWJVUkw+L3NzZHAvbm90Zm91bmQ8L2V2ZW50U3ViVVJMPg0KICAgICAgICA8U0NQRFVSTD4vc3NkcC9ub3Rmb3VuZDwvU0NQRFVSTD4NCiAgICAgIDwvc2VydmljZT4NCiAgICA8L3NlcnZpY2VMaXN0Pg0KICA8L2RldmljZT4NCjwvcm9vdD4NCg==","pkt_caplen":1261,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":61,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"pHczjPFANDY7z3UoCABFAAA0AABAAEAGJU0KAADjCgAAld56H0gqQcSWfIByIYAQD\/ChmAAAAQEIChwN2AgAIeBJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":62,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"NDY7z3Uo2DE0IHf7CABFAAA0gDJAAEAGpRgKAACXCgAA4x983nsgu1W8gn2LN4AQAVwNkAAAAQEICgaS1Y4cDdgF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":62,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":256,"pkt":"NDY7z3Uo2DE0IHf7CABFAADygDNAAEAGpFkKAACXCgAA4x983nsgu1W8gn2LN4AYAVx\/qAAAAQEICgaS1Y8cDdgFSFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJva3UgVVBuUC8xLjAgTWluaVVQblBkLzEuNA0KQ29udGVudC1MZW5ndGg6IDExNDANCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb250ZW50LVR5cGU6IHRleHQveG1sOyBjaGFyc2V0PSJ1dGYtOCINCkFwcGxpY2F0aW9uLVVSTDogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsDQoNCg==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":62,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYs3ILtWeoAQEA\/+FQAAAQEIChwN2A0GktWP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1929{"flow_id":62,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":1206,"pkt":"NDY7z3Uo2DE0IHf7CABFAASogDRAAEAGoKIKAACXCgAA4x983nsgu1Z6gn2LN4AYAVwcKQAAAQEICgaS1Y8cDdgNPD94bWwgdmVyc2lvbj0iMS4wIj8+DQo8cm9vdCB4bWxucz0idXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlLTEtMCI+DQo8c3BlY1ZlcnNpb24+DQo8bWFqb3I+MTwvbWFqb3I+DQo8bWlub3I+MDwvbWlub3I+DQo8L3NwZWNWZXJzaW9uPg0KPGRldmljZT4NCjxkZXZpY2VUeXBlPnVybjpyb2t1LWNvbTpkZXZpY2U6cGxheWVyOjEtMDwvZGV2aWNlVHlwZT4NCjxmcmllbmRseU5hbWU+RXhwcmVzczwvZnJpZW5kbHlOYW1lPg0KPG1hbnVmYWN0dXJlcj5Sb2t1PC9tYW51ZmFjdHVyZXI+DQo8bWFudWZhY3R1cmVyVVJMPmh0dHA6Ly93d3cucm9rdS5jb20vPC9tYW51ZmFjdHVyZXJVUkw+DQo8bW9kZWxEZXNjcmlwdGlvbj5Sb2t1IFN0cmVhbWluZyBQbGF5ZXIgTmV0d29yayBNZWRpYTwvbW9kZWxEZXNjcmlwdGlvbj4NCjxtb2RlbE5hbWU+Um9rdSBFeHByZXNzPC9tb2RlbE5hbWU+DQo8bW9kZWxOdW1iZXI+MzkwMFg8L21vZGVsTnVtYmVyPg0KPG1vZGVsVVJMPmh0dHA6Ly93d3cucm9rdS5jb20vPC9tb2RlbFVSTD4NCjxzZXJpYWxOdW1iZXI+WUcwMDRKNDg2ODYzPC9zZXJpYWxOdW1iZXI+DQo8VUROPnV1aWQ6Mjk1YzAwMDQtNjgwNy0xMDZkLTgwY2YtZDgzMTM0MjA3N2ZiPC9VRE4+DQo8c2VydmljZUxpc3Q+DQo8c2VydmljZT4NCjxzZXJ2aWNlVHlwZT51cm46cm9rdS1jb206c2VydmljZTplY3A6MTwvc2VydmljZVR5cGU+DQo8c2VydmljZUlkPnVybjpyb2t1LWNvbTpzZXJ2aWNlSWQ6ZWNwMS0wPC9zZXJ2aWNlSWQ+DQo8Y29udHJvbFVSTD48L2NvbnRyb2xVUkw+DQo8ZXZlbnRTdWJVUkw+PC9ldmVudFN1YlVSTD4NCjxTQ1BEVVJMPmVjcF9TQ1BELnhtbDwvU0NQRFVSTD4NCjwvc2VydmljZT4NCjxzZXJ2aWNlPg0KPHNlcnZpY2VUeXBlPnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MTwvc2VydmljZVR5cGU+DQo8c2VydmljZUlkPnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlSWQ6ZGlhbDEtMDwvc2VydmljZUlkPg0KPGNvbnRyb2xVUkw+PC9jb250cm9sVVJMPg0KPGV2ZW50U3ViVVJMPjwvZXZlbnRTdWJVUkw+DQo8U0NQRFVSTD5kaWFsX1NDUEQueG1sPC9TQ1BEVVJMPg0KPC9zZXJ2aWNlPg0KPC9zZXJ2aWNlTGlzdD4NCjwvZGV2aWNlPg0KPC9yb290Pg0K","pkt_caplen":1206,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":62,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYs3ILta7oAQD+z5wQAAAQEIChwN2BAGktWP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg\/t4AAEARZwsKAADjCgAAAc1zAMAADAmuEAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1569687269716,"flow_last_seen":1569687269716,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":49816,"dst_port":57547,"l4_proto":"udp"}
+1063{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1569687269716,"flow_last_seen":1569687269716,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":49816,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0405{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687269,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAatAAAAQEIChwN2QcGksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687270,"pkt_len":353,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTj91AAEARlEMKAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0612{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687270,"pkt_len":216,"pkt":"AQBef\/\/6NDY7z3UoCABFAADK9bsAAAERyIoKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687270,"pkt_len":353,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTkARAAEARlBwKAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1569687270740,"flow_last_seen":1569687270740,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":48166,"dst_port":57547,"l4_proto":"udp"}
+1063{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687270,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1569687270740,"flow_last_seen":1569687270740,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":48166,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0381{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687271,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgLGIAAEAROYgKAADjCgAAAc1zAMAADBGuCAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0612{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687271,"pkt_len":216,"pkt":"AQBef\/\/6NDY7z3UoCABFAADKB2sAAAERttsKAADj7\/\/\/+uDLB2wAtl89TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS83Ny4wLjM4NjUuOTAgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687271,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg1aQAAEARkEUKAADjCgAAAc1zAMAADAmuEAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687271,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAATrAAAAQEIChwN4A8GksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1569687271764,"flow_last_seen":1569687271764,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":51382,"dst_port":57547,"l4_proto":"udp"}
+1063{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687271,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1569687271764,"flow_last_seen":1569687271764,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":51382,"dst_port":57547,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0558{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687271,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0791{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687272,"pkt_len":353,"pkt":"NDY7z3Uo2DE0IHf7CABFAAFTkAZAAEARlBoKAACXCgAA4wds4MsBP0SkSFRUUC8xLjEgMjAwIE9LDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTM2MDANClNUOiB1cm46ZGlhbC1tdWx0aXNjcmVlbi1vcmc6c2VydmljZTpkaWFsOjENClVTTjogdXVpZDoyOTVjMDAwNC02ODA3LTEwNmQtODBjZi1kODMxMzQyMDc3ZmI6OnVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KRXh0OiANClNlcnZlcjogUm9rdSBVUG5QLzEuMCBSb2t1LzkuMS4wDQpMT0NBVElPTjogaHR0cDovLzEwLjAuMC4xNTE6ODA2MC9kaWFsL2RkLnhtbA0KV0FLRVVQOiBNQUM9ZDg6MzE6MzQ6MjA6Nzc6ZmI7VGltZW91dD0xMA0KDQo=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687272,"pkt_len":186,"pkt":"AQBeAAD7GIEORo7ICABFAACsXgQAAP8RcWwKAADV4AAA+xTpFOkAmEDPAAAAAAADAAEAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAEMX3NsZWVwLXByb3h5BF91ZHDAIQAMAAHADAAMAAEAAA4EABQRTFAtUktFUlVSLU9TWCAoOSnADAAAKQWgAAARlAASAAQADgCbOoEORo7IGIEORo7I","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687272,"pkt_len":206,"pkt":"MzMAAAD7GIEORo7Iht1gBoi5AJgR\/\/6AAAAAAAAABAg+RTq8FVL\/AgAAAAAAAAAAAAAAAAD7FOkU6QCYm8UAAAAAAAMAAQAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAhAAwAAcAMAAwAAQAADgQAFBFMUC1SS0VSVVItT1NYICg5KcAMAAApBaAAABGUABIABAAOAJs6gQ5GjsgYgQ5Gjsg=","pkt_caplen":206,"pkt_type":34525,"pkt_ipoffset":14}
+0406{"flow_id":62,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687273,"pkt_len":66,"pkt":"NDY7z3Uo2DE0IHf7CABFAAA0gDVAAEAGpRUKAACXCgAA4x983nsgu1rugn2LN4ARAVwGwQAAAQEICgaS1x8cDdgQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":62,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687273,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl957H3yCfYs3ILta74AQEADo1gAAAQEIChwN51YGktcf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687274,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgHDkAAEARSbEKAADjCgAAAc1zAMAADBGuCAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687274,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgdkAAAEAR76kKAADjCgAAAc1zAMAADAmuEAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687274,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0406{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687275,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREAAGZAAAAQEIChwN7VcGksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1569687277139,"flow_last_seen":1569687277139,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0477{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687277,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgVbYAAEARDvYKAADjCgAA\/wCJAIkATLhJRX8wEAABAAAAAAABIEVNRkFDTkZDRUxFRkZDRkZGQ0NORVBGREZJQ0FDQUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1569687277139,"flow_last_seen":1569687277139,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0452{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687277,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOK\/AAAEAROM4KAADjCgAA\/wCJAIkAOvmHRYABEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687277,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgQ9oAAEARINIKAADjCgAA\/wCJAIkATMRRRYEwEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687277,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOTbMAAEARFwsKAADjCgAA\/wCJAIkAOvmFRYIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687277,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0477{"flow_id":66,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687278,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABg2UoAAEARi2EKAADjCgAA\/wCJAIkATLhJRX8wEAABAAAAAAABIEVNRkFDTkZDRUxFRkZDRkZGQ0NORVBGREZJQ0FDQUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":66,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687278,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABO6AgAAEARfLUKAADjCgAA\/wCJAIkAOvmHRYABEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":66,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687278,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABghFIAAEAR4FkKAADjCgAA\/wCJAIkATMRRRYEwEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":66,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687278,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOmWsAAEARy1IKAADjCgAA\/wCJAIkAOvmFRYIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgye8AAEARm\/oKAADjCgAAAc1zAMAADBGuCAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":66,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgNbcAAEARLvUKAADjCgAA\/wCJAIkATLhJRX8wEAABAAAAAAABIEVNRkFDTkZDRUxFRkZDRkZGQ0NORVBGREZJQ0FDQUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":66,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABO00cAAEARkXYKAADjCgAA\/wCJAIkAOvmHRYABEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":66,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABg5ykAAEARfYIKAADjCgAA\/wCJAIkATMRRRYEwEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAAAAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":66,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABg61kAAEAReVIKAADjCgAA\/wCJAIkATMfLRYMpEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAOEAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":66,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABOjQgAAEAR17UKAADjCgAA\/wCJAIkAOvmFRYIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgsKcAAEARtUIKAADjCgAAAc1zAMAADAmuEAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687280,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0407{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687281,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0UBJAAPMGvOUIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYkXAAAAQEICnincgAcDdF\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":66,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687281,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgUbMAAEAREvkKAADjCgAA\/wCJAIkATMfLRYMpEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAOEAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687281,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREADsmwAAAQEIChwOBx8GksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687282,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0UoVAAPMGunIIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYgdAAAAQEICnindegcDdF\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":66,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687283,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/NDY7z3UoCABFAABgHKoAAEARSAIKAADjCgAA\/wCJAIkATMfLRYMpEAABAAAAAAABIEVNRkFDTkVDREFERUREREFERkREQ05GSERIREdERUFBAAAgAAHADAAgAAEAAAOEAAZgAAoAAOM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687284,"pkt_len":174,"pkt":"MzMAAAABLH6BsEqhht1gAAAAAHg6\/\/6AAAAAAAAALn6B\/\/6wSqH\/AgAAAAAAAAAAAAAAAAABhgBH5kDAALQAAAAAAAAAABkFAAAAAVGAIAEFWP7tAAAAAAAAAAAAASABBVj+7QAAAAAAAAAAAAIDBEDAAAL9HQAC\/R0AAAAAJgEGRoQCRLAAAAAAAAAAABgDAAAAAAC0AAAAAAAAAAAAAAAAAAAAAAEBLH6BsEqh","pkt_caplen":174,"pkt_type":34525,"pkt_ipoffset":14}
+0407{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687284,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0WbNAAPMGs0QIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYYpAAAAQEICninfbgcDdF\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687286,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAgwLAAAEARpTkKAADjCgAAAc1zAMAADBGuCAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687286,"pkt_len":46,"pkt":"LH6BsEqhNDY7z3UoCABFAAAg9UsAAEARcJ4KAADjCgAAAc1zAMAADAmuEAEDEA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1569687286917,"flow_last_seen":1569687286917,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0430{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687286,"pkt_len":82,"pkt":"AQBeAAD7pHczjPFACABFAABEAABAAP8RkBgKAACV4AAA+xTpFOkAMI4UAAAAAAABAAAAAAAAC19nb29nbGV6b25lBF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1569687286917,"flow_last_seen":1569687286917,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlezone._tcp.local"}}
+0481{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687286,"pkt_len":119,"pkt":"AQBeAAD7pHczjPFACABFAABpAABAAP8Rj\/MKAACV4AAA+xTpFOkAVS3HAAAAAAABAAAAAAAAJDc5ZDg4ZTgzLTcyNWMtYjcxYi1iYWQwLTU4NjJkNWIyMjM4NgtfZ29vZ2xlem9uZQRfdGNwBWxvY2FsAAAhAAE=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":67,"flow_packet_id":2,"flow_first_seen":1569687286917,"flow_last_seen":1569687286918,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":48,"flow_max_l4_data_len":85,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"79d88e83-725c-b71b-bad0-5862d5b22386._googlezone._tcp.local"}}
+0680{"flow_id":67,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687286,"pkt_len":268,"pkt":"AQBeAAD7pHczjPFACABFAAD+AABAAP8Rj14KAACV4AAA+xTpFOkA6vJcAACEAAAAAAEAAAADC19nb29nbGV6b25lBF90Y3AFbG9jYWwAAAwAAQAAAHgAJyQ3OWQ4OGU4My03MjVjLWI3MWItYmFkMC01ODYyZDViMjIzODbADMAuABCAAQAAEZQAOCNpZD0yMERGOEZENkYzMTU5MUQyMDUwNEE5RkQ5OThDMzlFRRNfX2NvbW1vbl90aW1lX189MXwwwC4AIYABAAAAeAAtANIA8ycRJDc5ZDg4ZTgzLTcyNWMtYjcxYi1iYWQwLTU4NjJkNWIyMjM4NsAdwKsAAYABAAAAeAAECgAAlQ==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":67,"flow_packet_id":3,"flow_first_seen":1569687286917,"flow_last_seen":1569687286918,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":48,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlezone._tcp.local"}}
+0568{"flow_id":67,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687286,"pkt_len":186,"pkt":"AQBeAAD7pHczjPFACABFAACsAABAAP8Rj7AKAACV4AAA+xTpFOkAmGRVAACEAAAAAAEAAAABJDc5ZDg4ZTgzLTcyNWMtYjcxYi1iYWQwLTU4NjJkNWIyMjM4NgtfZ29vZ2xlem9uZQRfdGNwBWxvY2FsAAAhgAEAAAB4AC0A0gDzJxEkNzlkODhlODMtNzI1Yy1iNzFiLWJhZDAtNTg2MmQ1YjIyMzg2wELAWQABgAEAAAB4AAQKAACV","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0611{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":67,"flow_packet_id":4,"flow_first_seen":1569687286917,"flow_last_seen":1569687286919,"flow_tot_l4_data_len":519,"flow_min_l4_data_len":48,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"79d88e83-725c-b71b-bad0-5862d5b22386._googlezone._tcp.local"}}
+0433{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1569687287737,"flow_last_seen":1569687287737,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":"icmp"}
+0396{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687287,"pkt_len":56,"pkt":"AQBeAAABLH6BsEqhCABFwAAkGHoAAAEBtp0KAAAB4AAAAQkA5rYBAgVGCgAAAQAAAAAAAP\/\/Aiw=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1569687287737,"flow_last_seen":1569687287737,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0407{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687288,"pkt_len":66,"pkt":"NDY7z3UoLH6BsEqhCABFAAA0aqNAAPMGolQIJWfECgAA4wG73ieGjW4CDCXQ8YARTdYJBAAAAQEICninjVgcDdF\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","pkt_oversize":false,"pkt_ts":1569687288,"pkt_len":66,"pkt":"2DE0IHf7NDY7z3UoCABFAAA0AABAAEAGJUsKAADjCgAAl94iH3wAQcGNmjQa94AREADS0wAAAQEIChwOIOcGksZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1569687268559,"flow_last_seen":1569687271560,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":57547,"dst_port":1900,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":24,"flow_packet_id":19,"flow_first_seen":1569687249612,"flow_last_seen":1569687268122,"flow_tot_l4_data_len":4039,"flow_min_l4_data_len":20,"flow_max_l4_data_len":416,"flow_avg_l4_data_len":212,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56884,"dst_port":80,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1569687240992,"flow_last_seen":1569687241009,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.53","src_port":56885,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1569687240992,"flow_last_seen":1569687241009,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.53","src_port":56885,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":60,"flow_packet_id":4,"flow_first_seen":1569687269223,"flow_last_seen":1569687272080,"flow_tot_l4_data_len":1276,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":57547,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":23,"flow_packet_id":10,"flow_first_seen":1569687249612,"flow_last_seen":1569687268086,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":20,"flow_max_l4_data_len":416,"flow_avg_l4_data_len":166,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"184.25.56.77","src_port":56917,"dst_port":80,"l4_proto":"tcp"}
+0434{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1569687287737,"flow_last_seen":1569687287737,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":"icmp"}
+0430{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1569687246982,"flow_last_seen":1569687260293,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","l4_proto":2}
+0428{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1569687246982,"flow_last_seen":1569687260293,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.2","l4_proto":2}
+0428{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569687241657,"flow_last_seen":1569687241657,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","l4_proto":2}
+0424{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569687241452,"flow_last_seen":1569687241452,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"224.0.0.1","l4_proto":2}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":66,"flow_packet_id":15,"flow_first_seen":1569687277139,"flow_last_seen":1569687283186,"flow_tot_l4_data_len":1032,"flow_min_l4_data_len":58,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1569687260469,"flow_last_seen":1569687260521,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":32,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":49,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"35.201.124.9","src_port":56910,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1569687260469,"flow_last_seen":1569687260521,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":32,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":49,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"35.201.124.9","src_port":56910,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1569687260751,"flow_last_seen":1569687260767,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64972,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1569687271764,"flow_last_seen":1569687271764,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":51382,"dst_port":57547,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1569687251177,"flow_last_seen":1569687251230,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":42,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":54851,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1569687247192,"flow_last_seen":1569687259297,"flow_tot_l4_data_len":480,"flow_min_l4_data_len":240,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.213","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1569687246891,"flow_last_seen":1569687246924,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":31,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":63107,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1569687261035,"flow_last_seen":1569687261054,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":59,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":52879,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1569687245251,"flow_last_seen":1569687245288,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":52879,"dst_port":53,"l4_proto":"udp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":42,"flow_packet_id":6,"flow_first_seen":1569687267677,"flow_last_seen":1569687268288,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":32,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.10.115.210","src_port":56879,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":42,"flow_packet_id":6,"flow_first_seen":1569687267677,"flow_last_seen":1569687268288,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":32,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.10.115.210","src_port":56879,"dst_port":443,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":57,"flow_packet_id":2441,"flow_first_seen":1569687268746,"flow_last_seen":1569687289262,"flow_tot_l4_data_len":809503,"flow_min_l4_data_len":56,"flow_max_l4_data_len":1477,"flow_avg_l4_data_len":331,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":54107,"dst_port":443,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1569687261486,"flow_last_seen":1569687261506,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":59,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57017,"dst_port":53,"l4_proto":"udp"}
+0455{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":4,"flow_packet_id":16,"flow_first_seen":1569687241656,"flow_last_seen":1569687287122,"flow_tot_l4_data_len":1920,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::2e7e:81ff:feb0:4aa1","dst_ip":"ff02::1","l4_proto":"icmp6"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":67,"flow_packet_id":4,"flow_first_seen":1569687286917,"flow_last_seen":1569687286919,"flow_tot_l4_data_len":519,"flow_min_l4_data_len":48,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":17,"flow_packet_id":9,"flow_first_seen":1569687246981,"flow_last_seen":1569687272376,"flow_tot_l4_data_len":1142,"flow_min_l4_data_len":98,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.213","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1569687261485,"flow_last_seen":1569687261501,"flow_tot_l4_data_len":170,"flow_min_l4_data_len":59,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59222,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1569687267799,"flow_last_seen":1569687267819,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":50,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51060,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1569687267477,"flow_last_seen":1569687267493,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":37,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57253,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1569687261034,"flow_last_seen":1569687261050,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":59,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":57261,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569687246924,"flow_last_seen":1569687246924,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","l4_proto":"icmp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":2,"flow_packet_id":30,"flow_first_seen":1569687241422,"flow_last_seen":1569687286460,"flow_tot_l4_data_len":3160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":105,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56320,"dst_port":8009,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1569687245295,"flow_last_seen":1569687245320,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":48,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61387,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1569687269716,"flow_last_seen":1569687269716,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":49816,"dst_port":57547,"l4_proto":"udp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":43,"flow_packet_id":5,"flow_first_seen":1569687267797,"flow_last_seen":1569687267821,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":20,"flow_max_l4_data_len":85,"flow_avg_l4_data_len":37,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"17.57.144.116","src_port":56886,"dst_port":5223,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":29,"flow_packet_id":57,"flow_first_seen":1569687260591,"flow_last_seen":1569687262892,"flow_tot_l4_data_len":11015,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":193,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.96.194","src_port":56921,"dst_port":4287,"l4_proto":"tcp"}
+0450{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1569687247596,"flow_last_seen":1569687248620,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1569687260751,"flow_last_seen":1569687260772,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":61613,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1569687267800,"flow_last_seen":1569687267818,"flow_tot_l4_data_len":347,"flow_min_l4_data_len":58,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":59582,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1569687268747,"flow_last_seen":1569687268747,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":50081,"dst_port":57547,"l4_proto":"udp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1569687267841,"flow_last_seen":1569687288158,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.103.196","src_port":56871,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1569687267841,"flow_last_seen":1569687288158,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.103.196","src_port":56871,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1569687270740,"flow_last_seen":1569687270740,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":48166,"dst_port":57547,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":11,"flow_packet_id":30,"flow_first_seen":1569687245379,"flow_last_seen":1569687245725,"flow_tot_l4_data_len":9034,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":301,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56918,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":14,"flow_packet_id":54,"flow_first_seen":1569687245688,"flow_last_seen":1569687268830,"flow_tot_l4_data_len":24196,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":448,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56919,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":37,"flow_packet_id":92,"flow_first_seen":1569687267035,"flow_last_seen":1569687288923,"flow_tot_l4_data_len":24648,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":267,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"8.37.102.91","src_port":56929,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1569687267988,"flow_last_seen":1569687268026,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"74.125.197.188","src_port":56874,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1569687267988,"flow_last_seen":1569687268026,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"74.125.197.188","src_port":56874,"dst_port":443,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":13,"flow_packet_id":15,"flow_first_seen":1569687245576,"flow_last_seen":1569687267323,"flow_tot_l4_data_len":988,"flow_min_l4_data_len":32,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":65,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56914,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":13,"flow_packet_id":15,"flow_first_seen":1569687245576,"flow_last_seen":1569687267323,"flow_tot_l4_data_len":988,"flow_min_l4_data_len":32,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":65,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56914,"dst_port":443,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":12,"flow_packet_id":15,"flow_first_seen":1569687245576,"flow_last_seen":1569687268339,"flow_tot_l4_data_len":988,"flow_min_l4_data_len":32,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":65,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56915,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":12,"flow_packet_id":15,"flow_first_seen":1569687245576,"flow_last_seen":1569687268339,"flow_tot_l4_data_len":988,"flow_min_l4_data_len":32,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":65,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"52.37.243.173","src_port":56915,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":38,"flow_packet_id":3,"flow_first_seen":1569687267453,"flow_last_seen":1569687267455,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56865,"dst_port":8008,"l4_proto":"tcp","ndpi": {"proto":"CiscoVPN","category":"VPN"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":38,"flow_packet_id":3,"flow_first_seen":1569687267453,"flow_last_seen":1569687267455,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56865,"dst_port":8008,"l4_proto":"tcp"}
+0513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":1,"flow_packet_id":5,"flow_first_seen":1569687241064,"flow_last_seen":1569687246096,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56916,"dst_port":8009,"l4_proto":"tcp","ndpi": {"proto":"AJP","category":"Web"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":1,"flow_packet_id":5,"flow_first_seen":1569687241064,"flow_last_seen":1569687246096,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56916,"dst_port":8009,"l4_proto":"tcp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":39,"flow_packet_id":9,"flow_first_seen":1569687267453,"flow_last_seen":1569687288697,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56866,"dst_port":8060,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":39,"flow_packet_id":9,"flow_first_seen":1569687267453,"flow_last_seen":1569687288697,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56866,"dst_port":8060,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":61,"flow_packet_id":7,"flow_first_seen":1569687269561,"flow_last_seen":1569687269570,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1227,"flow_avg_l4_data_len":241,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.149","src_port":56954,"dst_port":8008,"l4_proto":"tcp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":18,"flow_packet_id":9,"flow_first_seen":1569687246982,"flow_last_seen":1569687272377,"flow_tot_l4_data_len":1142,"flow_min_l4_data_len":98,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::408:3e45:3abc:1552","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1569687267831,"flow_last_seen":1569687267847,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":35,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":49781,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":62,"flow_packet_id":11,"flow_first_seen":1569687269562,"flow_last_seen":1569687273580,"flow_tot_l4_data_len":1944,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1172,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.151","src_port":56955,"dst_port":8060,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":59,"flow_packet_id":10,"flow_first_seen":1569687269094,"flow_last_seen":1569687286632,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.1","src_port":52595,"dst_port":192,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":59,"flow_packet_id":10,"flow_first_seen":1569687269094,"flow_last_seen":1569687286632,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"10.0.0.1","src_port":52595,"dst_port":192,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1569687267805,"flow_last_seen":1569687267824,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":51,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":64193,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1569687267851,"flow_last_seen":1569687267865,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":41,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":118,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":58074,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":27,"flow_packet_id":27,"flow_first_seen":1569687256018,"flow_last_seen":1569687267492,"flow_tot_l4_data_len":3907,"flow_min_l4_data_len":32,"flow_max_l4_data_len":819,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"99.86.34.156","src_port":56920,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1569687268077,"flow_last_seen":1569687268077,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":522,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"10.0.0.227","src_port":38616,"dst_port":61328,"l4_proto":"udp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":36,"flow_packet_id":12,"flow_first_seen":1569687262866,"flow_last_seen":1569687262912,"flow_tot_l4_data_len":750,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":62,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"162.222.43.153","src_port":56881,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":36,"flow_packet_id":12,"flow_first_seen":1569687262866,"flow_last_seen":1569687262912,"flow_tot_l4_data_len":750,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":62,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"162.222.43.153","src_port":56881,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":48,"flow_packet_id":2,"flow_first_seen":1569687267812,"flow_last_seen":1569687267847,"flow_tot_l4_data_len":98,"flow_min_l4_data_len":41,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":51990,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1569687255989,"flow_last_seen":1569687256018,"flow_tot_l4_data_len":86,"flow_min_l4_data_len":35,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":58155,"dst_port":53,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1569687267991,"flow_last_seen":1569687267991,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"239.255.255.250","src_port":61328,"dst_port":1900,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1569687245321,"flow_last_seen":1569687245366,"flow_tot_l4_data_len":177,"flow_min_l4_data_len":48,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.76.76","src_port":62322,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1569687268376,"flow_last_seen":1569687268376,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.151","dst_ip":"10.0.0.227","src_port":1900,"dst_port":61328,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1569687267799,"flow_last_seen":1569687267814,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":39,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":60341,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":1569687267481,"flow_last_seen":1569687267500,"flow_tot_l4_data_len":258,"flow_min_l4_data_len":50,"flow_max_l4_data_len":208,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.227","dst_ip":"75.75.75.75","src_port":62427,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569687242476,"flow_last_seen":1569687242476,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.255.250","l4_proto":2}
+0429{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569687242271,"flow_last_seen":1569687242271,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.149","dst_ip":"239.255.3.22","l4_proto":2}
+0153{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anyconnect-vpn.pcap"}
diff --git a/tests/result/nDPId_anydesk.pcap.txt b/tests/result/nDPId_anydesk.pcap.txt
new file mode 100644
index 000000000..ec6cc12ba
--- /dev/null
+++ b/tests/result/nDPId_anydesk.pcap.txt
@@ -0,0 +1,41 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591342198821,"flow_last_seen":1591342198821,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.239.144","src_port":36351,"dst_port":80,"l4_proto":"tcp"}
+0452{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342198,"pkt_len":105,"pkt":"AFBW5dKtAAwplUdeCABFAABbtopAAEAGCwXAqJWBM1PvkI3\/AFB7i54qMVwSUlAY+DR5WwAAFwMDAC7mz9mv7V5op8uDzrVlyYzGPOa22i4SIRv\/ctzVUMWyqJzhwIdSdK\/Qd7DJrcKc","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342198,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1AAAIAGRnIzU++QwKiVgQBQjf8xXBJSe4ueXVAQ+vBP7wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342198,"pkt_len":102,"pkt":"AFBW5dKtAAwplUdeCABFAABYtotAAEAGCwfAqJWBM1PvkI3\/AFB7i55dMVwSUlAY+DR5WAAAFwMDACvmz9mv7V5oqHbrZghdQbdzwBFFDzsTJ43BfdwI8acT8HfThIVfMXtYD9Ln","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342198,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1EAAIAGRnEzU++QwKiVgQBQjf8xXBJSe4uejVAQ+vBPvwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":103,"pkt":"AAwplUdeAFBW5dKtCABFAABZe1IAAIAGRj8zU++QwKiVgQBQjf8xXBJSe4uejVAY+vBoPwAAFwMDACwkrUQuni1bEw+EOVXQULZxliYh7KSKyV8boo6+bx\/PbNgRA1Ej\/EtfUWhm2A==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAotoxAAEAGCzbAqJWBM1PvkI3\/AFB7i56NMVwSg1AQ+DR5KAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":213,"pkt":"AAwplUdeAFBW5dKtCABFAADHe1MAAIAGRdAzU++QwKiVgQBQjf8xXBKDe4uejVAY+vC7swAAFwMDAJokrUQuni1bFHnCrCrci8mu17SSshonC+8pGDiK6l\/Phzxh+NqjpoA5ePRAbTasLuAk4CkeR\/3tMjzdi54ShmUijEg7vw7jf2Yibglow2dlbDkiN8RweFkh8WAg9qfiulu\/uBXqXNlyQGNFnq0FuLddJpIfp\/rRQZTfZvnPbpMerzuj+HtmaUXL4pG6hubYJ0hdsp6pU1FeUjm4","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoto1AAEAGCzXAqJWBM1PvkI3\/AFB7i56NMVwTIlAQ+DR5KAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1591342199201,"flow_last_seen":1591342199201,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":74,"pkt":"AFBW5dKtAAwplUdeCABFAAA8CJBAAEAGudPAqJWBM1Pu26oPAFApppzyAAAAAKAC+vB4hwAAAgQFtAQCCAqukMx3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAse1UAAIAGRx4zU+7bwKiVgQBQqg9odWR8Kaac82AS+vDm4QAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJFAAEAGuebAqJWBM1Pu26oPAFApppzzaHVkfVAQ+vB4cwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0737{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":317,"pkt":"AFBW5dKtAAwplUdeCABFAAEvCJJAAEAGuN7AqJWBM1Pu26oPAFApppzzaHVkfVAY+vB5egAAFgMBAQIBAAD+AwPH+2RueS0bCFAjOjiKaUYj6rfjOOjwnxNAapJEdabvkAAAgMAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANsAywC7AKsAmwA\/ABQCdAD0ANcAvwCvAJ8AjwBPACQCkAKIAoACeAGcAQAA\/AD4AMwAyADEAMMAxwC3AKcAlwA7ABACcADwAL8ASwAgAFgATABAADcANwAMACgD\/AQAAVQALAAQDAAECAAoAHAAaABcAGQAcABsAGAAaABYADgANAAsADAAJAAoAIwAAAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE=","pkt_caplen":317,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1591342199201,"flow_last_seen":1591342199366,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0388{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1YAAIAGRyEzU+7bwKiVgQBQqg9odWR9Kaad+lAQ+vD9lwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2136{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":1354,"pkt":"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","pkt_caplen":1354,"pkt_type":2048,"pkt_ipoffset":14}
+0890{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1591342199201,"flow_last_seen":1591342199532,"flow_tot_l4_data_len":1707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"107030a763c7224285717ff1569a17f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"}}
+0380{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJNAAEAGueTAqJWBM1Pu26oPAFAppp36aHVpkVAQ+NR4cwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2144{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":1354,"pkt":"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","pkt_caplen":1354,"pkt_type":2048,"pkt_ipoffset":14}
+1092{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":1,"flow_packet_id":8,"flow_first_seen":1591342199201,"flow_last_seen":1591342199532,"flow_tot_l4_data_len":3047,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":380,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"107030a763c7224285717ff1569a17f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=AnyNet Root CA, O=philandro Software GmbH, C=DE","issuerDN":"C=DE, O=philandro Software GmbH, CN=AnyNet Relay","fingerprint":"9E:08:D2:58:A9:02:CD:4F:E2:4A:26:B8:48:5C:43:0B:81:29:99:E3"}}
+0380{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJRAAEAGuePAqJWBM1Pu26oPAFAppp36aHVupVAQ+NR4cwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAte1kAAIAGRxkzU+7bwKiVgQBQqg9odW6lKaad+lAY+vDvVAAABA4AAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJVAAEAGueLAqJWBM1Pu26oPAFAppp36aHVuqlAQ+NR4cwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1862{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":1148,"pkt":"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","pkt_caplen":1148,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAoe1oAAIAGRx0zU+7bwKiVgQBQqg9odW6qKaaiQFAQ+vDvJAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":105,"pkt":"AAwplUdeAFBW5dKtCABFAABbe1sAAIAGRukzU+7bwKiVgQBQqg9odW6qKaaiQFAY+vB2YAAAFAMDAAEBFgMDACi4iiS75ftB9gM9aj9+xuZ4lRQvtRoX8YpGHm1rLD+ZptnwWDmjbYq4","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342199,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoCJdAAEAGueDAqJWBM1Pu26oPAFAppqJAaHVu3VAQ+NR4cwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1089{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":1,"flow_packet_id":255,"flow_first_seen":1591342199201,"flow_last_seen":1591342212202,"flow_tot_l4_data_len":131872,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":517,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.AnyDesk","category":"RemoteAccess"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"201999283915cc31cee6b15472ef3332","ja3s":"107030a763c7224285717ff1569a17f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=AnyNet Root CA, O=philandro Software GmbH, C=DE","issuerDN":"C=DE, O=philandro Software GmbH, CN=AnyNet Relay","fingerprint":"9E:08:D2:58:A9:02:CD:4F:E2:4A:26:B8:48:5C:43:0B:81:29:99:E3"}}
+0452{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342214,"pkt_len":105,"pkt":"AFBW5dKtAAwplUdeCABFAABbto5AAEAGCwHAqJWBM1PvkI3\/AFB7i56NMVwTIlAY+DR5WwAAFwMDAC7mz9mv7V5oqQRiiK1BmntnBec1wc6utyo8wHetLW4+4vpxLCxi5CGV1lyg9OUE","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342214,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAofKsAAIAGRRczU++QwKiVgQBQjf8xXBMie4uewFAQ+vBOvAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342214,"pkt_len":103,"pkt":"AAwplUdeAFBW5dKtCABFAABZfM4AAIAGRMMzU++QwKiVgQBQjf8xXBMie4uewFAY+vBbDwAAFwMDACwkrUQuni1bFVh+peWRbnlsLw+6JDYDm31RWqGf060eD0C3WeR2ucetl5\/1QQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342214,"pkt_len":54,"pkt":"AFBW5dKtAAwplUdeCABFAAAoto9AAEAGCzPAqJWBM1PvkI3\/AFB7i57AMVwTU1AQ+DR5KAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342229,"pkt_len":105,"pkt":"AFBW5dKtAAwplUdeCABFAABbtpBAAEAGCv\/AqJWBM1PvkI3\/AFB7i57AMVwTU1AY+DR5WwAAFwMDAC7mz9mv7V5oqiGs9UmHGy59yVVeeA5lJVIYioWWJ6DRPZ7\/AKPnOzRdEdmukW2o","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342229,"pkt_len":60,"pkt":"AAwplUdeAFBW5dKtCABFAAAogvwAAIAGPsYzU++QwKiVgQBQjf8xXBNTe4ue81AQ+vBOWAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","pkt_oversize":false,"pkt_ts":1591342229,"pkt_len":103,"pkt":"AAwplUdeAFBW5dKtCABFAABZgw0AAIAGPoQzU++QwKiVgQBQjf8xXBNTe4ue81AY+vB\/XQAAFwMDACwkrUQuni1bFlXQfhlbpM1ompEjuxnWze1GuQIrlqNjGlJEE1Ae4+mTb0GZcg==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1591342198821,"flow_last_seen":1591342244652,"flow_tot_l4_data_len":1007,"flow_min_l4_data_len":20,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.239.144","src_port":36351,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.AnyDesk","category":"RemoteAccess"},"http": {}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1591342198821,"flow_last_seen":1591342244652,"flow_tot_l4_data_len":1007,"flow_min_l4_data_len":20,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.239.144","src_port":36351,"dst_port":80,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap","flow_id":1,"flow_packet_id":6943,"flow_first_seen":1591342199201,"flow_last_seen":1591342255171,"flow_tot_l4_data_len":2556299,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":368,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.149.129","dst_ip":"51.83.238.219","src_port":43535,"dst_port":80,"l4_proto":"tcp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":6963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/anydesk.pcap"}
diff --git a/tests/result/nDPId_bad-dns-traffic.pcap.txt b/tests/result/nDPId_bad-dns-traffic.pcap.txt
new file mode 100644
index 000000000..7de3606ba
--- /dev/null
+++ b/tests/result/nDPId_bad-dns-traffic.pcap.txt
@@ -0,0 +1,71 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1486012623234,"flow_last_seen":1486012623234,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp"}
+0499{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012623,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3821AAEARVP\/AqCtbBAICBIx+ADUAYyoIa68BAAABAAAAAAAAODA1ZTEwMGE2MjFjMzYyMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1486012623234,"flow_last_seen":1486012623234,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"05e100a621c3620001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0498{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012624,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB38+5AAEARVH7AqCtbBAICBIx+ADUAY73N0g0BAAABAAAAAAAAODk1ODcwMGE2MjFjMzYyMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1486012623234,"flow_last_seen":1486012624242,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"958700a621c3620001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0542{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012624,"pkt_len":168,"pkt":"5LMYS\/DDAhoR+f4qCABFAACaAABAADMRVUoEAgIEwKgrWwA1jH4AhhPK0g2BgAABAAEAAAAAODk1ODcwMGE2MjFjMzYyMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAcAMAA8AAQAAADwAFwAKEjYzNGYwMGE2MjEwMTBhMDAwMMBF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1486012623234,"flow_last_seen":1486012624325,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":99,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"958700a621c3620001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0445{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012624,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR8\/FAAEARVKHAqCtbBAICBIx+ADUAPZ97lHsBAAABAAAAAAAAEjdjZDUwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1486012623234,"flow_last_seen":1486012624325,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"7cd501a621c362010a.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0486{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012624,"pkt_len":126,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1jH4AXFjwlHuBgAABAAEAAAAAEjdjZDUwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSOTZiMjAxYTYyMTAxMGFjMzYy","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1486012623234,"flow_last_seen":1486012624382,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"7cd501a621c362010a.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}}
+0445{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012625,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9NNAAEARU7\/AqCtbBAICBIx+ADUAPZVqopQBAAABAAAAAAAAEmIxMWMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1486012623234,"flow_last_seen":1486012625339,"flow_tot_l4_data_len":546,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"b11c01a621c362010a.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}}
+0486{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012625,"pkt_len":126,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1jH4AXFDmopSBgAABAAEAAAAAEmIxMWMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSZTE0MDAxYTYyMTAxMGFjMzYy","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012626,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9a9AAEARUuPAqCtbBAICBIx+ADUAPeaXV2gBAAABAAAAAAAAEjBhYjgwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAFAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012626,"pkt_len":128,"pkt":"5LMYS\/DDAhoR+f4qCABFAAByAABAADMRVXIEAgIEwKgrWwA1jH4AXiCIV2iBgAABAAEAAAAAEjBhYjgwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAFAAHADAAFAAEAAAA8ABUSMGUzZDAxYTYyMTAxMGFjMzYywB8=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012627,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9gVAAEARUo3AqCtbBAICBIx+ADUAPanQuVgBAAABAAAAAAAAEjc3MjMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012627,"pkt_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1jH4AYJvzuViBgAABAAEAAAAAEjc3MjMwMWE2MjFjMzYyMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJkMDFiMDFhNjIxMDEwYWMzNjLAHw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012628,"pkt_len":194,"pkt":"AhoR+f4q5LMYS\/DDCABFAAC09opAAEARUaXAqCtbBAICBIx+ADUAoBwVmRMBAAABAAAAAAAAPGI3M2YwMWE2MjFjMzYyMDEwYTU3NjU2YzYzNmY2ZDY1MjA3NDZmMjA2NDZlNzM2MzYxNzAyMTIwNTQ2ODg2NTIwNjY2YzYxNjcyMDY5NzMyMDYyNjU2YzZmNzcyYzIwNjg2MTc2NjUyMDY2NzU2ZTIxMjEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012628,"pkt_len":229,"pkt":"5LMYS\/DDAhoR+f4qCABFAADXAABAADMRVQ0EAgIEwKgrWwA1jH4Awx2PmROBgAABAAEAAAAAPGI3M2YwMWE2MjFjMzYyMDEwYTU3NjU2YzYzNmY2ZDY1MjA3NDZmMjA2NDZlNzM2MzYxNzAyMTIwNTQ2ODg2NTIwNjY2YzYxNjcyMDY5NzMyMDYyNjU2YzZmNzcyYzIwNjg2MTc2NjUyMDY2NzU2ZTIxMjEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJhZWIxMDFhNjIxMDEwYWMzOTPAgg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012628,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR9pxAAEARUfbAqCtbBAICBIx+ADUAPTyE+j4BAAABAAAAAAAAEmYxZmQwMWE2MjFjMzkzMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012628,"pkt_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1jH4AYCrM+j6BgAABAAEAAAAAEmYxZmQwMWE2MjFjMzkzMDEwYQxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChI1NWE3MDFhNjIxMDEwYWMzOTPAHw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486012635073,"flow_last_seen":1486012635073,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp"}
+0499{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012635,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3+zhAAEARTTTAqCtbBAICBNwiADUAYwrvCk0BAAABAAAAAAAAODI0NDMwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486012635073,"flow_last_seen":1486012635073,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"244300fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0499{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012636,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3+7NAAEARTLnAqCtbBAICBNwiADUAY1S7n3sBAAABAAAAAAAAODZiNTAwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAAUAAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1486012635073,"flow_last_seen":1486012636079,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"6b5000fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":5,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0500{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012637,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3\/ElAAEARTCPAqCtbBAICBNwiADUAY0RMqrgBAAABAAAAAAAAOGUxOGYwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAAUAAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1486012635073,"flow_last_seen":1486012637085,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"e18f00fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":5,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0500{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012638,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3\/K5AAEARS77AqCtbBAICBNwiADUAY1PDy0gBAAABAAAAAAAAODQ2YjEwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAAUAAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1486012635073,"flow_last_seen":1486012638093,"flow_tot_l4_data_len":396,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"46b100fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":5,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0501{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012639,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3\/ZNAAEARStnAqCtbBAICBNwiADUAY\/RRFrgBAAABAAAAAAAAOGM3NTkwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAABAAAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":5,"flow_first_seen":1486012635073,"flow_last_seen":1486012639101,"flow_tot_l4_data_len":495,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0539{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012639,"pkt_len":164,"pkt":"5LMYS\/DDAhoR+f4qCABFAACWAABAADMRVU4EAgIEwKgrWwA13CIAgtZjFriBgAABAAEAAAAAOGM3NTkwMGZkZjUyNTMyMDAyMTYzNmY2ZDZkNjE2ZTY0MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAABAAAcAMABAAAQAAADwAExI2ZTE3MDBmZGY1NDE3ZDAwMDA=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1486012635073,"flow_last_seen":1486012639174,"flow_tot_l4_data_len":625,"flow_min_l4_data_len":99,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}}
+0446{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012639,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/aBAAEARSvLAqCtbBAICBNwiADUAPVKHMO0BAAABAAAAAAAAEjJhN2IwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012639,"pkt_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA13CIAYAA+MO2BgAABAAEAAAAAEjJhN2IwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJjZWZiMDFmZGY1NDE3ZDI1MzLAHw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012640,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/oFAAEARShHAqCtbBAICBNwiADUAPZ+EE+4BAAABAAAAAAAAEjM4OGUwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAFAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012641,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/3pAAEARSRjAqCtbBAICBNwiADUAPRScyK4BAAABAAAAAAAAEjA4YzAwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAQAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012641,"pkt_len":126,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA13CIAXMSoyK6BgAABAAEAAAAAEjA4YzAwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSYjQyZTAxZmRmNTQxN2QyNTMy","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012642,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABR\/69AAEARSOPAqCtbBAICBNwiADUAPWEvi0IBAAABAAAAAAAAEjUwNzQwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAFAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012642,"pkt_len":128,"pkt":"5LMYS\/DDAhoR+f4qCABFAAByAABAADMRVXIEAgIEwKgrWwA13CIAXlbsi0KBgAABAAEAAAAAEjUwNzQwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAFAAHADAAFAAEAAAA8ABUSYWM2YjAxZmRmNTQxN2QyNTMywB8=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012643,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRAC9AAEARSGTAqCtbBAICBNwiADUAPaQHCm0BAAABAAAAAAAAEjc2MmIwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012643,"pkt_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA13CIAYLAaCm2BgAABAAEAAAAAEjc2MmIwMWZkZjUyNTMyNDE3ZAxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChIyOTkyMDFmZGY1NDE3ZDI1MzLAHw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":255,"flow_first_seen":1486012635073,"flow_last_seen":1486012691087,"flow_tot_l4_data_len":63345,"flow_min_l4_data_len":61,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":248,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"c75900fdf525320021636f6d6d616e64202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486012730177,"flow_last_seen":1486012730177,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp"}
+0502{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012730,"pkt_len":133,"pkt":"AhoR+f4q5LMYS\/DDCABFAAB3Lk5AAEARGh\/AqCtbBAICBLdxADUAYz49\/HsBAAABAAAAAAAAOGEwNTcwMGU2ZGE4MzUxMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486012730177,"flow_last_seen":1486012730177,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"a05700e6da83510001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0545{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012730,"pkt_len":168,"pkt":"5LMYS\/DDAhoR+f4qCABFAACaAABAADMRVUoEAgIEwKgrWwA1t3EAhvb+\/HuBgAABAAEAAAAAOGEwNTcwMGU2ZGE4MzUxMDAwMTYzNmY2ZTczNmY2YzY1MjAyODczNjk3Mjc2Njk2ZDY1NzMyOTAwDHNrdWxsc2VjbGFicwNvcmcAAA8AAcAMAA8AAQAAADwAFwAKEmRlNjkwMGU2ZGE2ZWEyMDAwMMBF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1486012730177,"flow_last_seen":1486012730381,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":99,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"a05700e6da83510001636f6e736f6c65202873697276696d65732900.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0446{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012730,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRLntAAEARGhjAqCtbBAICBLdxADUAPY6IeT8BAAABAAAAAAAAEmI1NDEwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":3,"flow_first_seen":1486012730177,"flow_last_seen":1486012730381,"flow_tot_l4_data_len":294,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"b54101e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0496{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012730,"pkt_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1t3EAYGtAeT+BgAABAAEAAAAAEmI1NDEwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChI1YzRmMDFlNmRhNmVhMjgzNTHAHw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1486012730177,"flow_last_seen":1486012730437,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"b54101e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0446{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012731,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRL1lAAEARGTrAqCtbBAICBLdxADUAPbE6V7kBAAABAAAAAAAAEjMxNzMwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":5,"flow_first_seen":1486012730177,"flow_last_seen":1486012731395,"flow_tot_l4_data_len":451,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"317301e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0488{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012731,"pkt_len":126,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1t3EAXCh8V7mBgAABAAEAAAAAEjMxNzMwMWU2ZGE4MzUxNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSYzQ5MzAxZTZkYTZlYTI4MzUx","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1486012730177,"flow_last_seen":1486012731485,"flow_tot_l4_data_len":543,"flow_min_l4_data_len":61,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"317301e6da83516ea2.skullseclabs.org","num_queries":1,"num_answers":1,"reply_code":0,"query_type":16,"rsp_type":16,"rsp_addr":"0.0.0.0"}}
+0708{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012732,"pkt_len":290,"pkt":"AhoR+f4q5LMYS\/DDCABFAAEUL4lAAEARGEfAqCtbBAICBLdxADUBAJjrdSEBAAABAAAAAAAAPGFjZTMwMWU2ZGE4MzUxNmVhMjQ3NmY2ZjY0MjA2Yzc1NjM2YjIxMjA1NDY4NjE3NDIwNzc2MTczMjA2NDw2ZTczNjM2MTc0MzIyMDc0NzI2MTY2NjY2OTYzMjA2ZjZlMjA2MTIwNjY2YzYxNmI3OTIwNjM2ZjZlNmU8NjU2Mzc0Njk2ZjZlMjA3NzY5NzQ2ODIwNmM2Zjc0NzMyMDZmNjYyMDcyNjUyZDc0NzI2MTZlNzM2ZDY5Hjc0NzMyZTIwNTM2NTcyNjk2Zjc1NzM2Yzc5MmMyMAxza3VsbHNlY2xhYnMDb3JnAAAFAAE=","pkt_caplen":290,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012732,"pkt_len":323,"pkt":"5LMYS\/DDAhoR+f4qCABFAAE1AABAADMRVK8EAgIEwKgrWwA1t3EBIdVsdSGBgAABAAEAAAAAPGFjZTMwMWU2ZGE4MzUxNmVhMjQ3NmY2ZjY0MjA2Yzc1NjM2YjIxMjA1NDY4NjE3NDIwNzc2MTczMjA2NDw2ZTczNjM2MTc0MzIyMDc0NzI2MTY2NjY2OTYzMjA2ZjZlMjA2MTIwNjY2YzYxNmI3OTIwNjM2ZjZlNmU8NjU2Mzc0Njk2ZjZlMjA3NzY5NzQ2ODIwNmM2Zjc0NzMyMDZmNjYyMDcyNjUyZDc0NzI2MTZlNzM2ZDY5Hjc0NzMyZTIwNTM2NTcyNjk2Zjc1NzM2Yzc5MmMyMAxza3VsbHNlY2xhYnMDb3JnAAAFAAHADAAFAAEAAAA8ABUSOWIxZjAxZTZkYTZlYTI4M2IxwOI=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012732,"pkt_len":123,"pkt":"AhoR+f4q5LMYS\/DDCABFAABtL5BAAEARGOfAqCtbBAICBLdxADUAWY4gBY0BAAABAAAAAAAALjY0NWIwMWU2ZGE4M2IxNmVhMjY3NmY2ZjY0MjA2Yzc1NjM2YjJlMjAzYTI5MGEMc2t1bGxzZWNsYWJzA29yZwAAEAAB","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012732,"pkt_len":154,"pkt":"5LMYS\/DDAhoR+f4qCABFAACMAABAADMRVVgEAgIEwKgrWwA1t3EAeLH5BY2BgAABAAEAAAAALjY0NWIwMWU2ZGE4M2IxNmVhMjY3NmY2ZjY0MjA2Yzc1NjM2YjJlMjAzYTI5MGEMc2t1bGxzZWNsYWJzA29yZwAAEAABwAwAEAABAAAAPAATEmFkYTYwMWU2ZGE2ZWEyODNiZg==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012732,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRL5NAAEARGQDAqCtbBAICBLdxADUAPXWyLhQBAAABAAAAAAAAEjMzN2EwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012732,"pkt_len":126,"pkt":"5LMYS\/DDAhoR+f4qCABFAABwAABAADMRVXQEAgIEwKgrWwA1t3EAXPaPLhSBgAABAAEAAAAAEjMzN2EwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAQAAHADAAQAAEAAAA8ABMSMjEzZTAxZTZkYTZlYTI4M2Jm","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012733,"pkt_len":95,"pkt":"AhoR+f4q5LMYS\/DDCABFAABRMElAAEARGErAqCtbBAICBLdxADUAPeYHvL4BAAABAAAAAAAAEjU0NWIwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","pkt_oversize":false,"pkt_ts":1486012733,"pkt_len":130,"pkt":"5LMYS\/DDAhoR+f4qCABFAAB0AABAADMRVXAEAgIEwKgrWwA1t3EAYDm3vL6BgAABAAEAAAAAEjU0NWIwMWU2ZGE4M2JmNmVhMgxza3VsbHNlY2xhYnMDb3JnAAAPAAHADAAPAAEAAAA8ABcAChJhOGRkMDFlNmRhNmVhMjgzYmbAHw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":2,"flow_packet_id":14,"flow_first_seen":1486012730177,"flow_last_seen":1486012733669,"flow_tot_l4_data_len":1607,"flow_min_l4_data_len":61,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":46961,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":1,"flow_packet_id":349,"flow_first_seen":1486012635073,"flow_last_seen":1486012727540,"flow_tot_l4_data_len":83007,"flow_min_l4_data_len":61,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":237,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":56354,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1486012623234,"flow_last_seen":1486012630741,"flow_tot_l4_data_len":1772,"flow_min_l4_data_len":61,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.91","dst_ip":"4.2.2.4","src_port":35966,"dst_port":53,"l4_proto":"udp"}
+0153{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bad-dns-traffic.pcap"}
diff --git a/tests/result/nDPId_badpackets.pcap.txt b/tests/result/nDPId_badpackets.pcap.txt
new file mode 100644
index 000000000..f7385cb60
--- /dev/null
+++ b/tests/result/nDPId_badpackets.pcap.txt
@@ -0,0 +1,202 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0625{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451029,"pkt_len":271,"pkt":"xDRrta3IeLr5aHlnCABFAAXcP1QgAOcRe9CDTlH+zLpQ5QA1zGcGtUqtAWiFkwABAAAADAABC3BobDFzcHJ0MTA4AmFkA2RsYQNtaWwAAAEAAcAbAAYAAQAAAh0ALQhlYWdsZWliMcAYC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAh0AmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":237}
+0669{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451030,"pkt_len":305,"pkt":"xDRrta3IeLr5aHlnCABFAAXc9nogAOcRxKmDTlH+zLpQ5QA1PsIG13F6XwyFkwABAAAADAABC3BobDFzcHJ0MTA4BGRhYXMDZGxhA21pbAAAAQABwBgABgABAAAAbgAwCGVhZ2xlaWIxAmFkwB0LcmFuZHkuc21pdGjAHQExm5UAAAC0AAAAEgAJOoAAAAOEwBgALgABAAAAbgCgAAYIAwAAALRZLyttWSHuXTGGBGRhYXMDZGxhA21pbABfZgMcUaz74\/opjmPI6fIN7S4Ga9GN4s2JVqvb0uXXvbdLi9ee5JaFRYVlFB0RVerGRt3pX5esuSlY9ySHVHjOBX09ZI1nwdlSMxmFBY9ZemmmfYIR43tvzwqFnbufNVeL7\/vc0q83XBfNipWbDRE5bz+qVR8=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":271}
+0526{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451039,"pkt_len":195,"pkt":"xDRrta3IeLr5aHlnCABFAAXc+0kgAD4R+SzH+X0BzLpQ5QA17UEGadbGg\/+EAAABAAcAAAABAmFjAmluAAAwAAHADAAwAAEAAAOEAIgBAAMHAwEAAaeWg1I7aL35m5DCbWdqIX1+dVtvwe4HaQJz7QrnwC+P8\/7Gi54fYbmoWgZ9BgFy+rRM5fLeLdyqgaAlGaU+qP7EB\/v\/pv\/GHQKcotJZ+biekG9TccSc6BYmV0hXKBRudE\/xZj\/qEl0HEAn3LKZa","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":161}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451051,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcmCogADkR555F\/HiszLpQ5QA15twF1D2Yf1WEAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0206{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":46,"len":60}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451051,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcmCogADkR555F\/HiszLpQ5QA15twF1D2Yf1WEAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0191{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+0631{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451098,"pkt_len":276,"pkt":"xDRrta3IeLr5aHlnCABFAAXc\/u8gAOcRvDSDTlH+zLpQ5QA1ofQGuiMOhg6FkwABAAAADAABDG5jYjFzZHYwMDcyMQNkaXICYWQDZGxhA21pbAAAAQABwCAABgABAAAAmQAtCGVhZ2xlaWIxwB0LcmFuZHkuc21pdGjAIHeyKSsAACowAAAEOAAJOoAAAAOEwCAALgABAAAAmQCbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwq3LEc5Fr","pkt_caplen":276,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":242}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451112,"pkt_len":179,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1QgADURSISMrBHtzLpQ5QA1RHoMIdhWPYOEEAABAA0ABAANCGVkZ2UtaGRxA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgAf19hoQ062mEgmdReiMHoN\/8sTkGCL+YszFpFSC7g=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":145}
+0937{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":503,"pkt":"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","pkt_caplen":503,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":469}
+0746{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":363,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAEgADIR1DahNyACzLpQ5QA1FAoM2VerW6eEEAABAAYABAANA3d3dwNvcGMEbmNlcARub2FhA2dvdgAAAQABwAwABQABAAABLAAJBm9yaWdpbsAQwAwALgABAAABLAEhAAUFBQAAASxZK4tpWSJQ6VBkBG5jZXAEbm9hYQNnb3YAvM3K1OBR2VQQj4QVOGZxr6WG5B4+fABWkfGP1KGkGFsR4zOi7Eo7vmr2TJiaR66HfSMoitVNm4kwmQeusE1J+sPLARPh02h5Z1H+HsQ2b48KB6bVXbum1BeZX4yX1eoeScXJkBrFAe8F6pDF+Ml8UnuCbXzf+\/NtRUw9ZGk\/b8n+GLS5YEkLV6tINZ1NF7znVhYpo87DIH1d72melFmv8f65eH1mu6AzkUXSI502HCpox0\/KLdxxAP64c2LL03iQVYlgYQmiBnMT8YejrLi9PuDdsHa5wauH","pkt_caplen":363,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":329}
+1866{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":1194,"pkt":"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","pkt_caplen":1194,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1160}
+0800{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":366}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAUgADIR1DKhNyACzLpQ5QA1J78LqfTQ7QyEEAABAAQABAAND2F2aWE=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0207{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":59,"len":60}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAUgADIR1DKhNyACzLpQ5QA1J78LqfTQ7QyEEAABAAQABAAND2F2aWE=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1ggADURSICMrBHtzLpQ5QA156AF2iNRhq2EEAABAAUAAA==","pkt_caplen":52,"pkt_type":2048,"pkt_ipoffset":14}
+0207{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":52,"len":60}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW1ggADURSICMrBHtzLpQ5QA156AF2iNRhq2EEAABAAUAAA==","pkt_caplen":52,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+1870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451113,"pkt_len":1193,"pkt":"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","pkt_caplen":1193,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1159}
+1863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":1186,"pkt":"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","pkt_caplen":1186,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1152}
+1869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":1193,"pkt":"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","pkt_caplen":1193,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1159}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":179,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW14gADURSHqMrBHtzLpQ5QA1cdYMIeseCHyEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":145}
+0501{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":179,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsAogADIR1C2hNyACzLpQ5QA1Q\/EMIbPPgtyEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":145}
+1863{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":1190,"pkt":"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","pkt_caplen":1190,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1156}
+0500{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":179,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsA4gADIR1CmhNyACzLpQ5QA1XMQMIcjtVOuEEAABAA0ABAANCGVkZ2UtbndzA3dvYwRub2FhA2dvdgAAAQABwAwABQABAAABLAAMB2VkZ2UtcDEBbMAZwAwALgABAAABLAEgAAUFBAAAASxZK4vIWSJRSL+OA3dvYwRub2FhA2dvdgCQTrqAqFPUlwzaSBYq8hc48+OOYcX3TV6bWxXaYm8=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":145}
+0934{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":501,"pkt":"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","pkt_caplen":501,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":467}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2IgADURSHaMrBHtzLpQ5QA1ue4F2rYkIYyEEAABAAUAAA==","pkt_caplen":52,"pkt_type":2048,"pkt_ipoffset":14}
+0207{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":52,"len":60}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451114,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2IgADURSHaMrBHtzLpQ5QA1ue4F2rYkIYyEEAABAAUAAA==","pkt_caplen":52,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+0773{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451120,"pkt_len":384,"pkt":"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","pkt_caplen":384,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":350}
+1280{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451125,"pkt_len":759,"pkt":"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","pkt_caplen":759,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":725}
+0600{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451143,"pkt_len":253,"pkt":"xDRrta3IeLr5aHlnCABFKAXcix5gAPYRtKqAcIEPzLpQ5QA1PwIGo6sTVh2EEAABAAEABgAPBmdpdmluZwlwcmluY2V0b24DZWR1AAABAAEGZ2l2aW5nCVByaW5jZXRvbgNFRFUAAAEAAQAAqMAABEtlhE3ALQACAAEAAqMAAA0FYWRuczEEdWNzY8AdwC0AAgABAAKjAAAYBWF1dGgyA2Rucwhjb2dlbnRjbwNjb20AwC0AAgABAAKjAAALCGRpa2FoYmxlwC3ALQACAAEAAqMAAAgFYXV0aDHAdcAtAAIAAQACowAACAVhZG5zMsBcwC0AAgABAAKjAAAGAw==","pkt_caplen":253,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":219}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451144,"pkt_len":70,"pkt":"xDRrta3IeLr5aHlnCABFAAXc8l4gADcRrZWY2AelzLpQ5QA1QFwLtGqgHLSEAAABAAIABQAQAnNhBHd3dzQDaXJzA2dvdg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":36}
+1405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451150,"pkt_len":850,"pkt":"xDRrta3IeLr5aHlnCABFAAXcp70gADMRDquBBg0DzLpQ5QA1tIMI+JbQPi6EEAABAAMABQANBG5pc3QEdGltZQNnb3YAAAEAAcAMAAUAAQAABwgAEAR0aW1lA2dsYgRuaXN0wBbADAAuAAEAAAcIAJwABQcDAAAHCFkqyCtZIYRnjJkEdGltZQNnb3YAqr9jxTZXybcXnuCzjwFwvmFI+Ze7+m+rSWmDSn1MGMydCqolZgbVKJgNgG1S4zXIK8pdBL562Arwa55agW7HdTeBY84CmqWupq562AYDen9j\/fcu4j8dUrr0Np5qd65iLfnFlqyyY1lwhO5MLHlBGeFoLloqXXTeoUcgip7f3svADAAuAAEAAAcIAJwABQcDAAAHCFkqyCtZIYRno1UEdGltZQNnb3YA1mVm7+rmIQsKL0j8gZgmJcKynM3ZMQd2XdMAq44akLYox+waENon7a\/NmZaeWbIVHTDHZNuDBA9d3DqfTwZmq6tNJfokzKjG5g+KihH2Xa4Kp9wiLwRswtv6QxM2Qg5XcrAKw8x7jBKYqECsGcjybhwp76K9osOWdUlx9tS+dNnAMAACAAEAAAcIAAcEZ3RtZ8A0wDAAAgABAAAHCAAHBGd0bWLANCBWQ0xEQlZEM045OVFSSElHTFY5UVFBRkUxRFU3UEJOTMA0ADIAAQAAASwAHwEAAAoCf28U+zG4nx40du+nR\/TU4M0oy+4k6+cAASDBsQAuAAEAAAEsAJwAMgcDAAABLFkqrVZZIWt\/TSoEbmlzdANnb3YAin87ubwH5bbudTk+e+xAakiTfHLL5BNm7U1T7Tp5nwZ+YiMNjXALwdG0Rzv41sO6d6JzvqGjEvTLlZHOxMvzh5qOOCQ5pTDJOeqLshIcRoXLTP+W5JHoo22\/LNWmDP4Sejibo\/ExdMmbbKksTx5XkoOuibEJlXT+CgT9AZmeMRTBsQAuAAEAAAEsAJwAMgcDAAABLFkqrVZZIWt\/afUEbmlzdANnb3YACfYO\/o1yNCznWcx+k3iT2eRehKQYOK+FNHFc5RmDgi0nh2MAeCXjMinIJ79YtQqPSh00E\/qkzv0dT8zKvlO44sNJMgS8x9irpUURGpmdOjra2Peut2w6hiAF+w==","pkt_caplen":850,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":816}
+1387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451210,"pkt_len":830,"pkt":"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","pkt_caplen":830,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":796}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451247,"pkt_len":71,"pkt":"xDRrta3IeLr5aHlnCABFAAXcWZUgADkRzYvQTkcCzLpQ5QA1l\/cF7eAXMAuEEAABAA4ABgABBG1haWwFaG91enoDY29tAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":37}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451247,"pkt_len":145,"pkt":"xDRrta3IeLr5aHlnCABFAAXcSyQgADkRLD3MDfsCzLpQ5QA10qYGN8NYfIeEEAABAAUABgABBWhvdXp6A2NvbQAAEAABwAwAEAABAAk6gABFRGdvb2dsZS1zaXRlLXZlcmlmaWNhdGlvbj0zWEpwSUlaRzJZeUVCWnlPYUs1ZWZrWDFnN21qaFV1aVhqT2xKZw==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":111}
+1911{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451309,"pkt_len":1228,"pkt":"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","pkt_caplen":1228,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1194}
+0748{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451309,"pkt_len":361,"pkt":"xDRrta3IeLr5aHlnCABFAAXcW2UgADURSHOMrBHtzLpQ5QA1ufwM17VSuDGEEAABAAYABAANA21hZwRuY2VwBG5vYWEDZ292AAABAAHADAAFAAEAAAEsAAsDbWFnBGNwcmvAEMAMAC4AAQAAASwBIQAFBQQAAAEsWSuLaVkiUOlQZARuY2VwBG5vYWEDZ292ADcGQyBFP4D+oljdb2+uDa9\/19GSwvR6WriPq+5z0bu\/0ZaU\/D8IQsmXY34oOVHWkzG6MucH8ZmcfTOJDErUlSNSiRzFT51PBmw6nGKnxTSwXkETkX04Oo9QP2yzVDt5BovyB6C9tXHehSkdYBFKv3dkwzGxANJxhe+yFBxgwF9UCs8+cZEJOlz8tn056cIu0n8cLm0Luw3FG\/hQGfvItzUlOxBl1A60sdiGmy6QUdNCXAcNU0yZ9pOPKxcCxUBH4IhMSpEnUlvPR6QJH5nmfUQe2XEJKZYxCw==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":327}
+1862{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451309,"pkt_len":1191,"pkt":"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","pkt_caplen":1191,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1157}
+1913{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451310,"pkt_len":1228,"pkt":"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","pkt_caplen":1228,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1194}
+1871{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451311,"pkt_len":1192,"pkt":"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","pkt_caplen":1192,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1158}
+1857{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451311,"pkt_len":1191,"pkt":"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","pkt_caplen":1191,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1157}
+0992{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451320,"pkt_len":538,"pkt":"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","pkt_caplen":538,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":504}
+1331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451362,"pkt_len":791,"pkt":"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","pkt_caplen":791,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":757}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451391,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXc76ogADkRkB1F\/HitzLpQ5QA1x5kF4D53demEAAABAAUABgABE2NlZA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0207{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":58,"len":60}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451391,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXc76ogADkRkB1F\/HitzLpQ5QA1x5kF4D53demEAAABAAUABgABE2NlZA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+0997{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451394,"pkt_len":548,"pkt":"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","pkt_caplen":548,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":514}
+1174{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451408,"pkt_len":673,"pkt":"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","pkt_caplen":673,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":639}
+1033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451408,"pkt_len":568,"pkt":"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","pkt_caplen":568,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":534}
+1867{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451455,"pkt_len":1191,"pkt":"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","pkt_caplen":1191,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1157}
+0621{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451467,"pkt_len":268,"pkt":"xDRrta3IeLr5aHlnCABFAAXcLicgAPMRVGeA54D7zLpQ5QA1cboMeow9trSEEAABAAIABgAVBmdzbGIwMgNubG0DbmloA2dvdgAAHAABwAwAHAABAAAOEAAQJgfyIAQfFAUAAAAAAAAAA8AMAC4AAQAADhAAnwAcBwQAAA4QWT\/Mx1kYPpsoHANubG0DbmloA2dvdgA8qDsghhg3NnlrIvnzqjoi2t8F9ueZTTrSfT36cTwMHvoAfuu6t8YRYeVd3+cOzU8zRktKFuhy8uB4+IQMr8Ww4Pznbu1iFnscMdfQImu1yTjxzcTFcCU7ST4qi8TAkxt4FjZaNJAfAflP93iMa9IgaD+Y6GcxRg==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":234}
+1448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451472,"pkt_len":881,"pkt":"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","pkt_caplen":881,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":847}
+1448{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451472,"pkt_len":881,"pkt":"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","pkt_caplen":881,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":847}
+0667{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451502,"pkt_len":298,"pkt":"xDRrta3IeLr5aHlnCABFAAXcNasgADkRNoKili+uzLpQ5QA13pAG0FwHT9+EAAABAAYABgABCm15cmlhZC14Y3IDeGNyB2NvbWNhc3QDbmV0AAAwAAHADAAwAAEAAAA8AIgBAAMFAwEAAbCEE7E\/tK2nbtUQfpCepzR9frAaFkveZPoT70D7sMwOQ\/+xk54PDTVfx31QpdhWXZxF\/qABasrJ\/6LYfaZOmcQd4SE2DinBGMT4mCTb3tu0MWKWTlWYTQ08jmf+Gj4hy3cOj1CHK0wnSFV850\/91\/y71SWIEMLStLnWPdodVRCzwAwAMAABAAAAPAEIAQEDBQMBAAHEJufWP+5+U3MEy5wDHiagptJ60KZhTslmbiAZzWh\/R9+Ert+MpcHrkSaQsQ==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":264}
+1415{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451558,"pkt_len":858,"pkt":"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","pkt_caplen":858,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":824}
+0640{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451574,"pkt_len":282,"pkt":"xDRrta3IeLr5aHlnCABFAAXcvxEgADcRsUa4rRdszLpQ5QA1oygGwFz7eMKEEAABAAQAAAABDWp1ZGljaWFsd2F0Y2gDb3JnAAAwAAHADAAwAAEAAA4QAQgBAAMHAwEAAdl6vxiL++F\/pjIKqj9e7RaBV5rwA3o9DNcv0h4HQ93WZJ+2YrrhIVTBghHPFs+8FEN7Xdx2djyC1pjSprgXQ2HeWbJZy1rO2CCoH12hxAbUEQnPy1BYYsMpATL7FFzDIup6CYAV7Is7xTwPl\/Wm5B0cxltQlAHAlLMQiylRrZup5SRgZQGoi1q7dsIP6kgvfOSmZGIwr5OxtBC\/RzC+7OcNnmbexBAx\/ujQjwn1ITH0JeAIU+9jiKC+","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":248}
+0457{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451582,"pkt_len":146,"pkt":"xDRrta3IeLr5aHlnCABFAAXceY4gADMRzHRRW60TzLpQ5QA1plQGOJZ\/AaiEEAABAAIABAAJCGdyZG5zLWRlBWRlbmljAmRlAAABAAHADAABAAEAAA4QAARRW6FQwAwALgABAAAOEADcAAEIAwAADhBZNR2QWSKokGYrBWRlbmljAmRlAJfVO1vdsL8bdrClwW8=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":112}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451603,"pkt_len":131,"pkt":"xDRrta3IeLr5aHlnCABFAAXc\/D8gADMRuiiBBg0DzLpQ5QA1arUGKRUJU+aEEAABAAEAAgANAzEwMgE0AzE2MwMxMzIHSU4tQUREUgRBUlBBAAAMAAHADAAMAAEAAAcIAB0GdGltZS1iCHRpbWVmcmVxB2JsZHJkb2MDZ292AMASAAI=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":97}
+0682{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451611,"pkt_len":314,"pkt":"xDRrta3IeLr5aHlnCABFAAXcDxkgADkRXROili+vzLpQ5QA1TDYG4IL0xMOEAAABAAYABgABDmxpbmVhci10dmUtcGlsA3RvcAdjb21jYXN0A25ldAAAMAABwAwAMAABAAAAPACIAQADBQMBAAG7xRiYkSu1FrneRCH6ntrsauJWLw6fk1RtMzYYwMb16Knn1SeDLbMj6jRuPHc\/N9CDpNHKBwY7D8GGYJHtQOlY1BRgtvcl2XG\/z4KT5bOP8sBaXSr1Q60QyLTjEldwC8Hcrwfq0nlgSqdeedPWUZEiInPjf0m6Q0yG3lTY3p3jMcAMADAAAQAAADwBCAEBAwUDAQABl4a8UCzCZt5CAPJ1+RL9MCCZmtygIfM+1EkpxZWzKFW6hTlX1fvx29DxB35W993mMAjv0961og8=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":280}
+1286{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451613,"pkt_len":762,"pkt":"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","pkt_caplen":762,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":728}
+0943{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451617,"pkt_len":508,"pkt":"xDRrta3IeLr5aHlnCABFAAXcdRkgAPQRTW+A50ABzLpQ5QA17tYHop3j4riEEAABAAIABQANBnN0YXRpYwZwdWJtZWQDZ292AAABAAHADAAFAAEAAVGAAB0JcHVibWVkZ292A3dpcARuY2JpA25sbQNuaWjAGsAMAC4AAQABUYABHgAFBwMAAVGAWr+PY1jk82PoEAZwdWJtZWQDZ292AJu6kQSEhR8egq7iff9kNvnUi3EB8Cqxahn7\/xnKCblnIeeP205Pcfvq58wdpFd4t2tLrbNoUdrfjjrIvtJTNm8AczdH8VxTTwKlZ544pPbKqSowUHJH8kt1BYbS08C6W\/koWBsjtLuk2wwJn3Xv1EHHGFTmeMXVa9Ykgp+szm4UYdPEnokSrW0ySALEqeqR1T8NYKCXtsBVthVcDs6IE2iJWsUHfJN\/ND5yD6NryHs5EYO0a5uiDSFdbl2a1e3U2IiqRcHf12Yi7nNig+en76ODdO7CGdj4XsXz8AYWndn30mHl316TfYk9Tr8TfkagYqHqYLV3kzp8Pim2wy5nSI7AOQACAAEAABwgAAkGZ3NsYjAxwELAOQACAAEAABwgAAkGZ3NsYjAywELAOQACAAEAABwgAAkGZ3NsYjAzwELAOQArAAEAAVGAABiP2QcBjJqKhZbbxHR4uEOouQ==","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":474}
+1260{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451617,"pkt_len":738,"pkt":"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","pkt_caplen":738,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":704}
+0736{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451618,"pkt_len":353,"pkt":"xDRrta3IeLr5aHlnCABFAAXcvUsgADcR9T6JyAQfzLpQ5QA1fIMHB7MjfFCEEAABAAIABQAPBGRuczEDc3NhA2dvdgAAAQABwAwAAQABAAAAPAAEicgrCMAMAC4AAQAAADwAmwABBwMAAAA8WUE2n1kZn1cHPQNzc2EDZ292AC5156k1jArAQVGBahVpB6i1h\/fLJ3i\/HJY8GxrDrwsXIly+1WH6d7kRKc6lk\/uZf0+AmaTOUahspZVRqb7TH6GrbnsyXZmTfc3Kzu2iCB1GZM+ThGuuBfTJP\/RUgJK9tEeQ4pfMuSB5LQOaizURDpM8RAEaHBNs8UiaB2wYxjm8wEwAAgABAACMoAAHBGRuczbATMBMAAIAAQAAjKAAAsAMwEwAAgABAACMoAAHBGRuczLATMBMAAIAAQAAjKAABwRkbnM1wEzATAAuAAEAAIygAJsAAgcCAACMoFlBLTxZGZ8=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":319}
+0748{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451619,"pkt_len":361,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsBcgADIR1CChNyACzLpQ5QA1FUYM12ePIm2EEAABAAYABAANA21hZwRuY2VwBG5vYWEDZ292AAABAAHADAAFAAEAAAEsAAsDbWFnBGNwcmvAEMAMAC4AAQAAASwBIQAFBQQAAAEsWSuLaVkiUOlQZARuY2VwBG5vYWEDZ292ADcGQyBFP4D+oljdb2+uDa9\/19GSwvR6WriPq+5z0bu\/0ZaU\/D8IQsmXY34oOVHWkzG6MucH8ZmcfTOJDErUlSNSiRzFT51PBmw6nGKnxTSwXkETkX04Oo9QP2yzVDt5BovyB6C9tXHehSkdYBFKv3dkwzGxANJxhe+yFBxgwF9UCs8+cZEJOlz8tn056cIu0n8cLm0Luw3FG\/hQGfvItzUlOxBl1A60sdiGmy6QUdNCXAcNU0yZ9pOPKxcCxUBH4IhMSpEnUlvPR6QJH5nmfUQe2XEJKZYxCw==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":327}
+0936{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451619,"pkt_len":501,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+sgADgR3T6MWiHtzLpQ5QA1+sANYy2s8YiEEAABAA8ABAANA3d3dwNuaGMEbm9hYQNnb3YAAAEAAcAMAAUAAQAAASwADwhlZGdlLW53cwN3b2PAFMAMAC4AAQAAASwBIAAFBQQAAAEsWSuLeVkiUPkyEANuaGMEbm9hYQNnb3YAmdicnE8euFUxTHUXfeUJmy6UvdRd01G3Waurvp4SxZ2PJZgNPzjjITBMLV6ecU4\/JueThrSlKZCbDqf7PO1nwK30oVaMXimjEp\/WM+cq2lYinJ+rRAUpOFrU1\/PMoKmi\/NA9YhzR1i84ntUn6pU7gPRsC1l0stlJvmpn5vPK2SEpb2eW0Gowmg8iUnJq32XYuUvIED4TSMnVkgyeOVQyRuntLmYEqOLIN1Y4bfKDTdnt4ooZOC4nZltsnzRyIjkMnu6GUtEuSBRaXw7\/LMILqzp94rUYZ+A0FpoK\/AokSahDQC+1b+t0iMHL6XYsjM4sNHxXO6pg\/DJfgn7ZWUE0hMAuAAUAAQAAASwADAdlZGdlLXAxAWzAX8AuAC4AAQAAASwBIAAFBQQAAAEsWSuLyFkiUUi\/jgN3b2MEbm9hYQNnb3YAkE66gKhT1JcM2kgWKvIXOPPjjmHF901em1sV2mJv","pkt_caplen":501,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":467}
+0318{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451620,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+4gADgR3TuMWiHtzLpQ5QA16sALmpGgy8o=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0207{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":44,"len":60}
+0318{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451620,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs+4gADgR3TuMWiHtzLpQ5QA16sALmpGgy8o=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451620,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs\/AgADgR3TmMWiHtzLpQ5QA1Jh0F0T0AFA==","pkt_caplen":43,"pkt_type":2048,"pkt_ipoffset":14}
+0207{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","caplen":43,"len":60}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451620,"pkt_len":60,"pkt":"xDRrta3IeLr5aHlnCABFAAXcs\/AgADgR3TmMWiHtzLpQ5QA1Jh0F0T0AFA==","pkt_caplen":43,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":26}
+1117{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451632,"pkt_len":636,"pkt":"xDRrta3IeLr5aHlnCABFAAXcsh4gADYR8CWCDh0fzLpQ5QA1H4MIImMAvk+EEAABAAIABgAJBG5jYmkDbmxtA25paANnb3YAAAEAAcAMAAEAAQABUYAABIIOHW7ADAAuAAEAAVGAASQAAQcEAAFRgFoAvupZE3Dqzb4EbmNiaQNubG0DbmloA2dvdgAkf1HSoxN8AcwUdKY7WYciGx3geHak0EvSutU7odDo4dq+NlD8O\/xERFOOtnm1OnbmotJrAyzkKRKq2LhHEAKnpnQ\/7o4BV5VPHkuyi+TApDKVmXneUpTyPtHjKhT2CXt\/fyExp+B7ruJjC+Pcr5ZslqwQv1r1rPCkU5Mhz4yMR3BggA0Hh5V6YsPB3ZKTiKS\/eiA5iAmjeNxUPq28qT0hVjLTG5jO15eNmG2vPLSE3IUKr1s52HiMixNOjA9zTiA\/KJ+hR8CkVUQekEXmvwf9VBsUpBGDeS2mGNHxD+rzAlEWmLXNCGAh5Oui3uYYiuNNDR79YStEu6BCY8ZmkvsqwFAAAgABAAAOEAAMCWRuczEtbmNiacBQwFAAAgABAAAOEAAGA25zM8BZwFAAAgABAAAOEAAMCWRuczItbmNiacBQwFAAAgABAAAOEAAFAm5zwFnAUAACAAEAAA4QAAYDbnMywFnAUAAuAAEAAA4QASQAAgcEAAAOEFoAvupZE3Dqzb4EbmNiaQNubG0DbmloA2dvdgA+EebMkCne2CNH9\/msBB1ttxS45FhdXCD5iR18dVqPuT200zDdV4BFS01NU4MYeoc3XDyOxIWfU7WKy5Zs94YsWp3mz1cDLKuZG3MK\/hBxOol\/fcuIoTQU9\/sE","pkt_caplen":636,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":602}
+0619{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451636,"pkt_len":265,"pkt":"xDRrta3IeLr5aHlnCABFAAXcg4sgAOcRN5mDTlH+zLpQ5QA179EGr6+UudOFkwABAAAADAABCk5PU1MyUFJPNTICYWQDZGxhA21pbAAAAQABwBoABgABAAACJAAtCGVhZ2xlaWIxwBcLcmFuZHkuc21pdGjAGneyKSsAACowAAAEOAAJOoAAAAOEwBoALgABAAACJACbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwqw==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":231}
+0630{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451636,"pkt_len":275,"pkt":"xDRrta3IeLr5aHlnCABFAAXcRyUgAOcRc\/+DTlH+zLpQ5QA1lCQGuTGo9n2FkwABAAAADAABCk5PU1MyUFJPNTIEdXNlNgJhZANkbGEDbWlsAAABAAHAHwAGAAEAAAGdAC0IZWFnbGVpYjHAHAtyYW5keS5zbWl0aMAfd7IpKwAAKjAAAAQ4AAk6gAAAA4TAHwAuAAEAAAGdAJsABggCAAADhFkv6OZZIqvWNiQDZGxhA21pbABD42Os2m1X5vb8JOpkofZuJI\/bu2Q5ZMarYoJSGU4f0TjUwtI6TaUJgvqyYNfl+abXMm6hunZ3KtSj70iat3xtcPFQyBu8yX+3+hvYIpGPVTAhpgcS5bCrcsRzkWs=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":241}
+0630{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451636,"pkt_len":274,"pkt":"xDRrta3IeLr5aHlnCABFAAXc1mwgAOcR5LeDTlH+zLpQ5QA1mK0GuOHsaJmFkwABAAAADAABCk5PU1MyUFJPNTIDZXRuA2RsYQNtaWwAAAEAAcAbAAYAAQAAAo4AMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAo4AmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":240}
+0959{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451661,"pkt_len":520,"pkt":"xDRrta3IeLr5aHlnCABFAAV8MiEgADMR67bAa2aOzLpQ5QA1kJIHTuawQK+EEAABAAIABQAPBXByZXNzBmJhbXBmYQhiZXJrZWxleQNlZHUAAAEAAcAMAAEAAQAAKjAABEWjkf3ADAAuAAEAACowAKcAAQoEAAAqMFkmu3pZIXKW\/GIGYmFtcGZhCGJlcmtlbGV5A2VkdQDYr4iiKwGHUj8t5HsllLRdCw51+RuHgmXTVi3BKZp2SlHKwPPE5NDgykdlf2nh09MKoRsS4ZQ6K+HtO0Fgl3XDsVj0e38hlFZSyxT3UsVtxM+no9NBzelbSMqdsdKPMBXZBU6WN68SPUB0Mpo5EB0ERXosqZrbp40B7OEuBwhJTsBZAAIAAQAAKjAACQZhb2RuczLAYMBZAAIAAQAAKjAACAVhZG5zMsBgwFkAAgABAAAqMAAJBmFvZG5zMcBgwFkAAgABAAAqMAAIBWFkbnMxwGDAWQAuAAEAACowAKcAAgoDAAAqMFkn98ZZIq5X\/GIGYmFtcGZhCGJlcmtlbGV5A2VkdQAn0OdhYPVBP+po1b2zTtthnlvR+AwkjgERoFRV1d81BBycm1q7rnJTejDubWCC+fexo8tBaiAWuF7QlClYFOJSAmzwtfgGPOICDtid\/wne+kDmwXvgLbwXYX5lBPAt0LIXRb3dGGBe+RGHeQ==","pkt_caplen":520,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":486}
+0625{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451685,"pkt_len":272,"pkt":"xDRrta3IeLr5aHlnCABFAAXcdQIgAOcRRiKDTlH+zLpQ5QA12ScGtpz7Az2FkwABAAAADAABDG5jYjFzZHYwMDkwMQJhZANkbGEDbWlsAAABAAHAHAAGAAEAAAHJAC0IZWFnbGVpYjHAGQtyYW5keS5zbWl0aMAcd7IpKwAAKjAAAAQ4AAk6gAAAA4TAHAAuAAEAAAHJAJsABggCAAADhFkv6OZZIqvWNiQDZGxhA21pbABD42Os2m1X5vb8JOpkofZuJI\/bu2Q5ZMarYoJSGU4f0TjUwtI6TaUJgvqyYNfl+abXMm6hunZ3KtSj70iat3xtcPFQyBu8yX+3+hvYIpGPVTAhpgcS5bCrcsRzkWs=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":238}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451704,"pkt_len":129,"pkt":"xDRrta3IeLr5aHlnCABFAAXcLFogADcR72\/BRGNjzLpQ5QA16EkGJwo+kYmEEAABAAUAAAABAmJnAAAwAAHADAAwAAEAAA4QAIgBAAMFAwEAAatvnBmra+7zeBm9l13suknlkqymM+dxrFdopER\/atXEXpeKon1lB9rWXtPTizfX","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":95}
+0657{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451720,"pkt_len":295,"pkt":"xDRrta3IeLr5aHlnCABFAAXcf7QgAOQRIpPOJiMDzLpQ5QA1bBYGzcCiF4OFkwABAAAADAABBmlzYXRhcARkYWFzA2RsYQNtaWwAAAEAAcATAAYAAQAAADAAMAhlYWdsZWliMQJhZMAYC3JhbmR5LnNtaXRowBgBMZuVAAAAtAAAABIACTqAAAADhMATAC4AAQAAADAAoAAGCAMAAAC0WS8rbVkh7l0xhgRkYWFzA2RsYQNtaWwAX2YDHFGs++P6KY5jyOnyDe0uBmvRjeLNiVar29Ll1723S4vXnuSWhUWFZRQdEVXqxkbd6V+XrLkpWPckh1R4zgV9PWSNZ8HZUjMZhQWPWXpppn2CEeN7b88KhZ27nzVXi+\/73NKvN1wXzYqVmw0ROQ==","pkt_caplen":295,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":261}
+1459{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451745,"pkt_len":889,"pkt":"xDRrta3IeLr5aHlnCABFAAXcuAIgADYRFDWAx\/RyzLpQ5QA1xd4JH1hTgneEEAABAAIABgALCGNvbnRlbnQ0CG5vdm9wb3JuA2NvbQAAAQABwAwAAQABAAAOEAAExgc9H8AMAC4AAQAADhABIAABBwMAAA4QcNvYgFkGc0W0+Ahub3ZvcG9ybgNjb20AlewZozFU2n96aVRqxQUtXjawCyGgM6B0TzRF56i4jQojMtEEU5RHV2P7Vi\/giydID14A4YyUQ85+uCYlFI0DOCtWk0z5XmpprtC9X+\/T1\/r4JD0uPBpyimV4NZ7fwQxxt5\/3s2rlf4r73xWZZ+3IUuJ2vwbncpUyzu1TuFq+36Vdmu0LH4Wzte\/E0y2pkf37K2RBRQ7Nn\/d+Xj6t5ggL4KWxhT3Q0vSCylzZfyLrz2NK8Qb9WKZPaGXKWrHYVjLVERNJemNdvrQWUyPUJZC8YuSGBgJRiBu7nGJd9NUwi+LJQ8nOWu\/g3XZWYEgJTSqnXRaYhwfpdJtUS4EbhA6YOcBVAAIAAQAADhAADANuczMFZnd3Z2\/AXsBVAAIAAQAADhAABgNuczLBc8BVAAIAAQAADhAABgNuczXBc8BVAAIAAQAADhAABgNuczHBc8BVAAIAAQAADhAABgNuczTBc8BVAC4AAQAADhABIAACBwIAAA4QcNvYgFkGc0W0+Ahub3ZvcG9ybgNjb20AcFsxOk+TskskfmYioP9UewSZSL9WmuTUot1PfZFKaiFZLalRXKlbejn1Bpls9bVGMNJ8VYVUfoGcuesziAD8mlHukbkBjCvqsQLQJlUn18HhsM8Un6BUiQsAyEQsQp5HXtsXSzUuW2h7pa5HvFt51KDRqdLdfTwvCR7QFOYApeIeE7jGd14b6fcFUUntTWakr8Diay1Cx6MEqchNtPP8y5WWowh4rqtf9abZ6MihUGhOYq4GAOz7667QkstI2cH0PhPu2Q\/5ONAvjTiLfKSfgeeGC8VSswFyq2aFb6HIlVmYOK1XmDe3BmP7FLuXhq9PlJ6aBBY41kBThidqiIzU58GrAAEAAQAADhAABGjskh7BhwABAAEAAA4QAATAYM65wW8AAQABAAAOEAAEJTBzbsG9AAEAAQAADhAABC6l7FHBmQABAAEAAA4QAASAx\/RywasALgABAAAOEAEdAAEHAw==","pkt_caplen":889,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":855}
+1286{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451748,"pkt_len":762,"pkt":"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","pkt_caplen":762,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":728}
+2293{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451756,"pkt_len":1501,"pkt":"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","pkt_caplen":1501,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1467}
+2290{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451756,"pkt_len":1501,"pkt":"xDRrta3IeLr5aHlnCABFAAXcGO8gADcRhwaY2AekzLpQ5QA1NzILg45YlzKEAAABAAIABQAPA25zMgNpcnMDZ292AAABAAHADAABAAEAABwgAASY2AelwAwALgABAAAcIAEbAAEIAwAAHCBZK47XWSJGR6xiA2lycwNnb3YACIMpywUArJkA9Pr8GoybhgY2Ocgs\/9GIFFuvETX0fJGJlUnHAJSqKW\/R0LzP1Il9v6s81BpuSZpAB849wqEfWzFXluuZB5AR56eqVSJblguN5+T40xCB341G4528ZhyGRaXl+eYxq78eUD4cE2wBk3V74cfj1DDbMsYAW8Vgk6o8X8cK20+vQNjt9Ter915MWxERLC+lB5u+Ke9vetQqeV0qcZqahg+htHixrcdztcnVQBwTTHnqT931MsE2NAIeg+Z6OSUfvUAvK1zPWSo3JuVwhfiUlmKxv3X6Q3XgaskSAJbjqymmW7axPqELiWZ02m\/0lohciHpUFWYG\/hqdjcAQAAIAAQAAHCAABgNuczHAEMAQAAIAAQAAHCAAAsAMwBAAAgABAAAcIAAGA25zM8AQwBAAAgABAAAcIAAGA25zNMAQwBAALgABAAAcIAEbAAIIAgAAHCBZK47XWSJGR6xiA2lycwNnb3YAe+rn2tmycvJNbOGLWjldMLdA22UT7xzZh6HJYvuJrE5+qGxJ\/K9yON+rGW5STnO8kj2d7HsVVtkx7ts0\/\/XDYlHvMvWnWK\/Dq3C0qhX4Y4OXOL2k9lkOXDls5DytCZ+qVKg+alb58DzoDOU5yVHtP9rMKfk9VxtfA9LIEQBilUu0fUAjg6x8b2zwKV\/jt6dY6YdR2oAGxQWcfwUhdEB3XcH5NlvhjHUGSlAUPWnm6zjJAgd2MgFTKihm5f+gD+mtCN9sSjuoCyjb\/J+INEr+l8If9XkT6uujAFdNt62xgrprlhR\/4ZT3wgiZkdJcmZ4Hrkq2N2BnT7dMThz1hN6ZBcFgAAEAAQAAHCAABJjYB6TBYAAuAAEAABwgARsAAQgDAAAcIFkrjtdZIkZHrGIDaXJzA2dvdgCNfUC+vOaSAIQikt\/wOmN6FcRNH787rVK7vx8EOTihWPPbRHscOApvDuppsQAybpUJQDSnhmKXzmW0RGA6n2G0ciYqXXOsL0P3\/\/ygg+7XWZuYzKb304Zfx6QfhPLSsEP8shH+rTSNdno\/S62Ol7IpIPQ0RCioobQ2UR\/UDEXTGGbKuR4mDZJLFYeh5tIFpoqvTkHShLjF6v2OlcN8aKTXl7dgMdindVnqMLXbceQ\/g0+K8BgVnEE\/6MZYL80Ns\/V8grnGdCpO48BX8ffkLGatTdnf+50+sN\/QX2lbVRYMuygjrQrIMeAro+VDEin8TTXEdrj+U639Pp8xolDwNQMSwYAAAQABAAAcIAAEmNgLhMGAAC4AAQAAHCABGwABCAMAABwgWSuO11kiRkesYgNpcnMDZ292AFGjlQ0CcH7S\/YLa1DPEXyweqkjgV2S03PR6JP+jCFHGNKfmV2pVirBrldKkmIh6dGa0ltVAeBhTCcr+8ZtXfz6P7tUuUdPDHhVQPkdmbbxwRKzO5MP+LxNgOdYf4tNoaCzxD8LxFy+wV0RMK42Jdk0LKblpz2I4hl5Ot4PMa+kxYLse429gUV0OCwR8p415576bd12GBm3JlgMhjwLDn\/YULhBVE1vAdeWR\/mInSsz0Na1PaUUoZuz3dxaWAIii5OIt+dc2GSNtHPCTbsCAgkoPVDFmF7HzF0Pgp0r7IG7wKQDJuq4dAzHMJACT32pT6xgRHG+WdY8eMHRoAIggXq\/BkgABAAEAABwgAASY2AuFwZIALgABAAAcIAEbAAEIAwAAHCBZK47XWSJGR6xiA2lycwNnb3YAJ3yCZvDhJMpICeF2AdNj6dX83t1aIlZReudVBhsa5qliqrUuu1fMBb1RYQ38UscZhlrQBQAAAAAAAGEBAAAAAAAAQwAAAAAAAADE0AAAxA==","pkt_caplen":1501,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1467}
+2296{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451756,"pkt_len":1501,"pkt":"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","pkt_caplen":1501,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1467}
+1284{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451760,"pkt_len":762,"pkt":"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","pkt_caplen":762,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":728}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451763,"pkt_len":72,"pkt":"eLr5aHlnxDRrta3ICABFAAXcogYgAEARoZXMulDlS2GodAA12qEF7q5VMVqBoAABAA8ABAABA3d3dwNzc2QEbm9hYQNnb3YA","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":38}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451779,"pkt_len":108,"pkt":"xDRrta3IeLr5aHlnCABFAAXcjkogADURn38YivwdzLpQ5QA1IBMGEoHof96EEwABAAAACAABB2R5bmFtaWMJbGliZXJ0eXByA25ldAAAHAABwBQABgABAAAOEAAkBWRucy0xwBQFYWRtaW7A","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":74}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451779,"pkt_len":108,"pkt":"xDRrta3IeLr5aHlnCABFAAXcjksgADURn34YivwdzLpQ5QA1chAGEkLdh+yEEwABAAAACAABB2R5bmFtaWMJbGliZXJ0eXByA25ldAAAAQABwBQABgABAAAOEAAkBWRucy0xwBQFYWRtaW7A","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":74}
+0647{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451779,"pkt_len":286,"pkt":"xDRrta3IeLr5aHlnCABFAAXcB3MgADsR6J3HK4U1zLpQ5QA1x0sGxG739qGEEAABAAIABgANA3d3dwVpY2FubgNvcmcAAAEAAcAMAAUAAQAADhAACgN3d3cDdmlwwBDADAAuAAEAAA4QAKAABQcDAAAOEFkvMblZE0c+sGYFaWNhbm4Db3JnAFcOXWiLmAn+7RhE3TKRAZ5C+YCLPXSCXHhs6mLxoYLFSB9OmyFE9HQ90+HWIdUDemeRreC546O8dauCK16auNeVpMGVWBmAVkdmYo\/jYS\/f0rb0ZmripWbPcu3lWPDh7GnpYHF2BQ+z6kikiq9qTkmjhshwCrs5yNXSFD+OutJN\/jecwC8AAgABAAAOEAALBGd0bTEDbA==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":252}
+1814{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451795,"pkt_len":1163,"pkt":"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","pkt_caplen":1163,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1129}
+1215{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451801,"pkt_len":709,"pkt":"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","pkt_caplen":709,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":675}
+0678{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451802,"pkt_len":310,"pkt":"xDRrta3IeLr5aHlnCABFAAXc7j0gADgRdoqiljgTzLpQ5QA13WQG3OQmOZmEAAABAAYABgABDXN0YXRpYy1hc3NldHMDdG9wB2NvbWNhc3QDbmV0AAAwAAHADAAwAAEAAAA8AIgBAAMFAwEAAdNI7Jg7FgzKcoFbbTVFnNS103uNlzSi57w6MSU8g4N7BY45c8wRU0sUX4wCfS5mnvFDJOVeri9\/brOPAihImJbUq1qtU1hWYhriE+Q5okjx68WWhd44ZtMny6bsYRvUiusoqWjg23bXi9ii\/7fg+pccZPnCpi15g6KH4Pi07RLdwAwAMAABAAAAPAEIAQEDBQMBAAHH50NT4xwBENYYIASJ2mD3BG9QGEiNhcrE595erpAhJx7YsU81LP9gTvm6xTLb7N7F1r2ajg==","pkt_caplen":310,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":276}
+1890{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451817,"pkt_len":1212,"pkt":"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","pkt_caplen":1212,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1178}
+0630{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451840,"pkt_len":274,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQSkgAOcRefuDTlH+zLpQ5QA1iN8GuEyAW62FkwABAAAADAABCkhJMDFXRUYwMDEDZXRuA2RsYQNtaWwAAAEAAcAbAAYAAQAAAycAMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAycAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":240}
+0695{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451840,"pkt_len":324,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQccgAOcReV2DTlH+zLpQ5QA1iBUG6lPedjOFkwABAAAADAABCkhJMDFXRUYwMDEEbm9zYwNkbGEDbWlsAAABAAHAFwAGAAEAAABZADAIZWFnbGVpYjECYWTAHAtyYW5keS5zbWl0aMAcAAAHZgAAALQAAAASAAk6gAAAA4TAFwAuAAEAAABZAKAABggDAAAAtFkv4yBZIqYQMlUEbm9zYwNkbGEDbWlsAHAi\/\/IpY3Psvud3bXls8gvS7SxTXcJbJ2fO4LqoVAeoWw33Sok4nKe8G5wSzgrj+gHIwqz4AXRl3ZauyfrHZKtplIVp\/qYFFwFvnbKy4VuVxCDuV39nS0bYD6vwMZut5duIQsRD92AJMBuJaLwaFueObOvDDzhSu2qWb8T7Pru6wBcALgABAAAA","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":290}
+0643{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451840,"pkt_len":283,"pkt":"xDRrta3IeLr5aHlnCABFAAXcQ9AgAOcRd1SDTlH+zLpQ5QA1+V4GwcnHlaqFkwABAAAADAABCkhJMDFXRUYwMDEDb29iA2RsYQNtaWwAAAEAAcAbAAYAAQAAAZUAMAhlYWdsZWliMQJhZMAbC3JhbmR5LnNtaXRowBt3sikrAAAqMAAABDgACTqAAAADhMAbAC4AAQAAAZUAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORa\/AgRGTYgjUNSA==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":249}
+1215{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451860,"pkt_len":709,"pkt":"xDRrta3IeLr5aHlnCABFAAXctFYgADoRIiVBMSXFzLpQ5QA1N2wOM3VnSZ6EEAABAAIABgATA25zMQNucmMDZ292AAAcAAHADAAcAAEAAA4QABAgAQRwAAEAeiAAAAAAAACXwAwALgABAAAOEAEbABwHAwAADhBZlIDRWR3Z0YaKA25yYwNnb3YALVciLeV6\/9PVH3ix0oDMwPVXP+IuKi7iilwN8AXuICaEixRjMcL3k6CimR5Qqz2Ycw6GKR7q0Ru6zaeR+QYAjDqrD+MMW8dbCcINrpqJWjnqBRalN\/yYo\/yvsBa2wZPK3alx2x5VnRHoD2Js8UfeJJoW0zLMCnQkcnHnI8zIxKzPAlhcVwmcU+2j33B8sM29LmFlzJzazhfNwdxdRvaTNbUEhTzhlpB7woguGh3UcEHOLFrxazn6WmkxImFq2NBaB\/T0eDIozLqDuE+altkXto3Lyhd11i49paFgy0Mhg2C0ZQoPj1+cSeqFyHfhmq920VlYzrf1hk07KsH5DFRWS8BXAAIAAQAADhAAFghkbnNzZWMxMQdkYXRhbXRuA2NvbQDAVwACAAEAAA4QAAYDbnMzwFfAVwACAAEAAA4QAALADMBXAAIAAQAADhAACgdkbnNzZWM3wXXAVwACAAEAAA4QAAYDbnMywFfAVwAuAAEAAA4QARsAAgcCAAAOEFmUgNFZHdnRhooDbnJjA2dvdgCZi7bFn+nZ2P6WVw6o+kkwQuaKLgQuorJ5umHdHNd9400r4gzeBn33Ed0Zu7gD64lr2vhaLbxzLduR1aVAh1X4VlSh2jIQFWHIeoJ8Onasxl0l5tBD7VY1PneeZ1c40Al01eURgN\/WP7woAAMGLHDFWcaVfxALKzEXvlThyjffaO1k\/60LDVhVBDOZ6qeLxCdDVAfYZWLOALT5G71UUp\/mfWeY+zuZZrL9Mg==","pkt_caplen":709,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":675}
+0673{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451867,"pkt_len":304,"pkt":"xDRrta3IeLr5aHlnCABFAAXcqqsgAOcREHmDTlH+zLpQ5QA1TnkG1twua62FkwABAAAADAABClJDMDFXRUYwMDEEbmVtbwNkbGEDbWlsAAABAAHAFwAGAAEAAAA8ADAIZWFnbGVpYjECYWTAHAtyYW5keS5zbWl0aMAcd9p7lQAAKjAAAAQ4ABJ1AAAAA4TAFwAuAAEAAAA8AKAABggDAAAAPFkvM2hZIfZYHRkEbmVtbwNkbGEDbWlsAB1eP48NXB48YC39LxAk\/Khj2mVEQ6aS5HOSznEHbJsfSIIptRD6BtLuXwGHekuWL8Z8c4kWh5ITHm730bhtaFCQHR4MBMAUg\/QYfZB\/3QkezK+jd+kE5nVF\/tAkTs15nBpCsT3XFv1DW\/UqWuIhDZwgTv+++Q==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":270}
+0535{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451874,"pkt_len":203,"pkt":"xDRrta3IeLr5aHlnCABFAAXcE+8gADUR5p1N8Pn0zLpQ5QA1XvoGcR\/WhA+EEAABAAIABQAHA25zMQNjc2MCbHQAAAEAAcAMAAEAAQABUYAABE3w+fTADAAuAAEAAVGAARoAAQcDAAFRgFkvGkZZB4jkr\/cDY3NjAmx0ALbKVVGDcRZDqk1lyGdWsP5IQ26mLHrrMMz2pPyson+cx8+CsnAw8\/PhfvXbGxejQaIrCYXN3lCaimZi4Ns9eAyNg0i42MNM14BM77qxS7I=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":169}
+0619{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451891,"pkt_len":265,"pkt":"xDRrta3IeLr5aHlnCABFAAXcxOggAOQR3V7OJiMDzLpQ5QA1oocGr2AqSlqFkwABAAAADAABClBIMDFXRUYwMDECYWQDZGxhA21pbAAAAQABwBoABgABAAACAgAtCGVhZ2xlaWIxwBcLcmFuZHkuc21pdGjAGneyKSsAACowAAAEOAAJOoAAAAOEwBoALgABAAACAgCbAAYIAgAAA4RZL+jmWSKr1jYkA2RsYQNtaWwAQ+NjrNptV+b2\/CTqZKH2biSP27tkOWTGq2KCUhlOH9E41MLSOk2lCYL6smDX5fmm1zJuobp2dyrUo+9Imrd8bXDxUMgbvMl\/t\/ob2CKRj1UwIaYHEuWwqw==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":231}
+1869{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451910,"pkt_len":1189,"pkt":"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","pkt_caplen":1189,"pkt_type":2048,"pkt_ipoffset":14}
+0194{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":1155}
+0670{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451913,"pkt_len":305,"pkt":"xDRrta3IeLr5aHlnCABFAAXcoZEgAOcRGZODTlH+zLpQ5QA1hecG1xOqS+SFkwABAAAADAABC0NNSDBTLTUwNjI0BGRhYXMDZGxhA21pbAAAAQABwBgABgABAAAAPwAwCGVhZ2xlaWIxAmFkwB0LcmFuZHkuc21pdGjAHQExm5UAAAC0AAAAEgAJOoAAAAOEwBgALgABAAAAPwCgAAYIAwAAALRZLyttWSHuXTGGBGRhYXMDZGxhA21pbABfZgMcUaz74\/opjmPI6fIN7S4Ga9GN4s2JVqvb0uXXvbdLi9ee5JaFRYVlFB0RVerGRt3pX5esuSlY9ySHVHjOBX09ZI1nwdlSMxmFBY9ZemmmfYIR43tvzwqFnbufNVeL7\/vc0q83XBfNipWbDRE5bz+qVR8=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":271}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451914,"pkt_len":110,"pkt":"xDRrta3IeLr5aHlnCABFAAXcXUggADgRPcyY2AuFzLpQ5QA1eM4GFPW9NOaEAwABAAAACAABC3NpcGludGVybmFsA2lycwNnb3YAAAEAASBlZmxia2RtZjJtY241ZWg0ZjB1OW9lZHN2bWFxODA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0192{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":76}
+0915{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451914,"pkt_len":486,"pkt":"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","pkt_caplen":486,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":452}
+0630{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","pkt_oversize":false,"pkt_ts":1495451915,"pkt_len":274,"pkt":"xDRrta3IeLr5aHlnCABFAAXcZssgAOcRVFmDTlH+zLpQ5QA1TRMGuBtHRUGFkwABAAAADAABCkhRMDFXRUYwMDEDRElSAkFEA0RMQQNNSUwAAAEAAcAeAAYAAQAAA2gALQhlYWdsZWliMcAbC3JhbmR5LnNtaXRowB53sikrAAAqMAAABDgACTqAAAADhMAeAC4AAQAAA2gAmwAGCAIAAAOEWS\/o5lkiq9Y2JANkbGEDbWlsAEPjY6zabVfm9vwk6mSh9m4kj9u7ZDlkxqtiglIZTh\/RONTC0jpNpQmC+rJg1+X5ptcybqG6dncq1KPvSJq3fG1w8VDIG7zJf7f6G9gikY9VMCGmBxLlsKtyxHORaw==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0193{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap","l4_data_len":240}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/badpackets.pcap"}
diff --git a/tests/result/nDPId_bitcoin.pcap.txt b/tests/result/nDPId_bitcoin.pcap.txt
new file mode 100644
index 000000000..8257a422c
--- /dev/null
+++ b/tests/result/nDPId_bitcoin.pcap.txt
@@ -0,0 +1,110 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1301327937725,"flow_last_seen":1301327937725,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"188.165.213.169","src_port":55317,"dst_port":8333,"l4_proto":"tcp"}
+0545{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327937,"pkt_len":171,"pkt":"ACPrIpS0ACNshovhCABFAACdb3BAAEAGdmXAqAGOvKXVqdgVII1UFpaF9ORId4AY\/\/\/XwQAAAQEICicy22Mwkrss+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAABBsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/vKXVqSCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/\/AqAGOII3ZMDrPGxAeDAD6vQEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327937,"pkt_len":171,"pkt":"ACNshovhACPrIpS0CABFAACd8zJAADQG\/qK8pdWpwKgBjiCN2BX05Eh3VBaWhYAYAC7fMwAAAQEICjCSu0gnMttj+b602XZlcnNpb24AAAAAAFUAAACcfAAAAQAAAAAAAABqsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHtgVAQAAAAAAAAAAAAAAAAAAAAAA\/\/+8pdWpII1MLcnArv8XlgAGwwEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+1757{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327937,"pkt_len":1067,"pkt":"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","pkt_caplen":1067,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327937,"pkt_len":86,"pkt":"ACNshovhACPrIpS0CABFAABI8zRAADQG\/vW8pdWpwKgBjiCN2BX05EjgVBaW7oAYAC4XIAAAAQEICjCSu2wnMttk+b602XZlcmFjawAAAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"ACPrIpS0ACNshovhCABFAAXc+RdAAEAG537AqAGOvKXVqdgVII1UFrF39OSPg4AQ\/\/\/TlwAAAQEICicy224wkrxCP5UBTHilBlBRJpIAdXeKmKTSxCs\/eLRwQgAAAAAAAAIAAAAxDHEZN8GJ7CYIxLiWapy2kTgTp0z1Vnw\/awAAAAAAAAIAAABDIcwNr34855TDdBMMLup8\/GsTrObVKajDmwAAAAAAAAIAAABmpQoY6UhlQGpsxcgVKeKy2EBuwOmi1VqLMAAAAAAAAAIAAADJ0N5n3v\/NZEbQeFhNYLjnZlzC35iubuo3dgAAAAAAAAIAAADYiUuZCZjWYj+LHORa4jAAKab6JpqJt6wGAAAAAAAAAAIAAAAPbIedVZleT9ItUPMnf3Y0ss6pZANiAG8xqwAAAAAAAAIAAABt2nJs68KRw2DfufpzDgApCOfmiaoHicqHXgAAAAAAAAIAAAC9eanEUULRegv8xCYi2O8KIEy\/ToMl9Zu7rQAAAAAAAAIAAADNLLPAKblpRpjeAJRgyFA6xivXQh7k8vzMlwAAAAAAAAIAAABk8QC8kkpYx3ClbqgEwFyJEoG9eEWZYPe2CgAAAAAAAAIAAACtW04kUeJNQeNXQDrQGXXaYE468h7Uqwr8mQAAAAAAAAIAAACeJVBfrbZxlo1haYMN7sgp7kxhbHPE\/F\/4OAAAAAAAAAIAAAD5gN6yrnoZ5FQ9OkCs09Unpkr1dIYIM633jAAAAAAAAAIAAACjIl5NCGx61iW8zXb55ysfcRyhEAAoujX0JgAAAAAAAAIAAABmM\/GBZDAZCb9F8WZz4hW1Ei7GZ8N8Nf40ogAAAAAAAAIAAAD7b23+tbHORVzfPKYzeAXAHdXxTVxaV4mAjwAAAAAAAAIAAADzWggfjxox0PutYAS1Rajljl1iN4Eny02IuwAAAAAAAAIAAACWdtidKGH7oXaDZzHse31rorakzpNdRd7KOAAAAAAAAAIAAAAS5k6PmHcT8wSKJJXNvD44vPDliPelzVUxHgAAAAAAAAIAAAAgAV+WOSVTCmuu5DQLVEyGzzMk67jlgnH7ZAAAAAAAAAIAAAC9hjLXw83khL0KbA5BF0le+H7ySpCmVw3LpAAAAAAAAAIAAAC2mxVD2Cvx5t1jyQlvFMM3jxIv7djP1JYfzwAAAAAAAAIAAAD+zONN+HsFMjhZlY+IGM18\/CwGlhxAUYAhwwAAAAAAAAIAAADgCAOAo\/dDqwp4XVAKTBG4PuK2PzZf4tS\/iAAAAAAAAAIAAADwkiGi1n4TyuYjxWiMDd3psU76ZJpbHPn+1QAAAAAAAAIAAABlgBj07PZgyBfM7LKOK1wp9CeAGDtUZbxwjQAAAAAAAAIAAAAOkpEG6EJ\/v3a7BPd7XSZLqgPOSf4ja47yUAAAAAAAAAIAAABO6JNstqgWIaJBwT6K6ksiT0tXxu523uekVAAAAAAAAAIAAACSKke23svh1RVRE3EkoPlgeePrPVkGsTpv2QAAAAAAAAIAAABZVlcMwdLRxW3jf0jler3LmIUHuARBeQDHWgAAAAAAAAIAAADrU2vt1iD6Lc+WJu+pVe+m4YZMPOAvcaZcAAAAAAAAAAIAAAC\/lw0DLqYtKerc71RCUVtsQ8rNRDPZ6v9LvAAAAAAAAAIAAACJF1l1j6b9RvNWLKDrLpvbauz6KrvMh9tupAAAAAAAAAIAAABj5tsBO1sNUx\/xzLcTGTEPt76oATZQGgHWKQAAAAAAAAIAAADF7ZReo2SmM6M7T71qg9pPQIC2o7vewrTkCgAAAAAAAAIAAABabkavkkygEA5Fg\/DaQkhaiktBAHQV\/1FPVgAAAAAAAAIAAACMQc5+U\/qcFcuFecFAdrMyiCNaGA04my3ntAAAAAAAAAIAAAAZmuB5zq3Knui9Ld6b20KBTCSVKwlUYLZNtQAAAAAAAAIAAACO41lNvXBLHXwZdtGKSZX6vY5197o7VE8qdAAAAAAAAAIAAADr0CZuuLMQy1c=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"ACPrIpS0ACNshovhCABFAAXc\/FZAAEAG5D\/AqAGOvKXVqdgVII1UFrcf9OSPg4AQ\/\/+cgwAAAQEICicy224wkrxDhCjkjf1kZDz6a7VQoEu4m4oAAAAAAAACAAAA1IaNe70QZ83Z24IVl1nSVJ1rSQvM7O0hUxwAAAAAAAACAAAAJAjBJFgJi+79Sba9jXRDsMxw7pZBgblFDBIAAAAAAAACAAAAR8Tabunpg\/NX3lgnOOaqEIrKic1DdCyGbW8AAAAAAAACAAAAVgyQu6jI1AFKMIUV+AW91h2hJ2EMBQV0M6QAAAAAAAACAAAAw5oFGDr9nmhqx4NaotVZDpNbbIqZUTBTM9UAAAAAAAACAAAA\/DmDVR99nGHMDw4IdNCCb8Bi7M3ALjxrM8YAAAAAAAACAAAAuB3agvZFvhvtY9gMuGvzAyXXctZBH\/Zt3cQAAAAAAAACAAAAZJWBX3mnOR59iNk66lBFt6XgSa0Uo6D9FLkAAAAAAAACAAAAn4x96tiUPpjOpY8eDqHBShjAV8P4kM3jViEAAAAAAAACAAAAcVdW8s3N1hTivcOVWCHg3XnqMK9S9gYMwZQAAAAAAAACAAAA8GBZtHFFnjk92cEEhP2GGk\/6sBNe894B\/NIAAAAAAAACAAAAypFmNU7vFWUzXQwx3zpwyWzGbflqWN65cBQAAAAAAAACAAAAAngIt9ObhwGhPDl6a7J\/ABGgnDOrH3nxdDYAAAAAAAACAAAA1q0QhdCpS0XkR+gTzlE2JMSCka+9CuhD49EAAAAAAAACAAAABGMrEYPzigo1+8mPfEaFh6wbeuu4vx8rmkIAAAAAAAACAAAAQG7kq79+P3hwqr++cQG86yL4RO446ojXUzYAAAAAAAACAAAAyFHM7nSiFjkextccv+5H4PxT13aAqLXClncAAAAAAAACAAAAncyDMNt5IiW50SKVSw0yX3kpbm7AnpTZb10AAAAAAAACAAAAqlUhpTtpHzWpN7TPGeBrPG\/ECKcNAcpC824AAAAAAAACAAAAYES6UoayNmt1Mp3GS+Z9FRmqlrvWes4JeB0AAAAAAAACAAAAnJ\/7JOUYz1R8pIELcG5ovlmus3iny0O2sLYAAAAAAAACAAAAPe9tPmlenOk9KrsZIunEdP96lwdlN8lfiVoAAAAAAAACAAAAaEToZE+1mBFA9AlcT408ODMAAoPd16pstQUAAAAAAAACAAAAZkvQ98FDZP\/FfeoEaK23KgHu5R6S6h+BmYkAAAAAAAACAAAAMT5dwPWm0ZYuBZfXJGR4aHfFJ5nimcOcvHMAAAAAAAACAAAAPfpDpc+zhYrXXyeRFb31u2ryrSWjHSX0a6EAAAAAAAACAAAAGrkseZnLhmzpu0YHlxxXAfEjAF4HnMfKKKwAAAAAAAACAAAAtVbuAjRbsTFqJx7GhHXD9XuZr1WwEH7VQ5AAAAAAAAACAAAAj8bNJA6oIkcgT1Bn\/uZCukVQjuj5UNe1+MAAAAAAAAACAAAAfvcNmEhydPMkdN4J734GhE2Q4Fom1cWDXzwAAAAAAAACAAAARYk5E2OTybkcV3rD0hIFkliZDn+4baxAxZoAAAAAAAACAAAAyGQ7baUiY5n5yYzjlK6P4u3WMLccnV7kylEAAAAAAAACAAAASYVTws1InPgqNlXOhT4bWRpRuWxVPLK8xbEAAAAAAAACAAAA4of5sEhGmrPDwFKMYvfEqgcNaZes8ffikgAAAAAAAAACAAAA8dp527KPTlpAyGg9VP7UjyuXC7Tzos97UEkAAAAAAAACAAAAsd+begKTjMgQfPgL9k7gsSZoXgrDUS+C5aEAAAAAAAACAAAA8m4zUggsVHGnANbljvTHWAIZWJ+YK27CVTYAAAAAAAACAAAAW1G7oJNPBehnQ5OEBDFqnasMJFAABiROgKoAAAAAAAACAAAAWfncApVxrDBJGoWONyZ87ZgiH8PotojKHJMAAAAAAAACAAAAXvsr1qNH1I4s1poCbqv9Fhc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301327938,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1301328089970,"flow_last_seen":1301328089970,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"69.118.54.122","src_port":55328,"dst_port":8333,"l4_proto":"tcp"}
+0545{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328089,"pkt_len":171,"pkt":"ACPrIpS0ACNshovhCABFAACdrppAAEAGTZrAqAGORXY2etggII0QKtRyRVLzIYAY\/\/\/YagAAAQEICicy4VQAPPkD+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAADZsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/RXY2eiCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII3pIMJ+i724nwBQvgEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328090,"pkt_len":171,"pkt":"ACNshovhACPrIpS0CABFAACdT81AAHYGdmdFdjZ6wKgBjiCN2CBFUvMhECrU24AYAQRFgAAAAQEICgA8+QknMuFU+b602XZlcnNpb24AAAAAAFUAAAACfQAAAQAAAAAAAADZsJBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHtggAQAAAAAAAAAAAAAAAAAAAAAA\/\/9FdjZ6II3xDaOK7c9BwgAGwwEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328090,"pkt_len":86,"pkt":"ACNshovhACPrIpS0CABFAABIT85AAHYGdrtFdjZ6wKgBjiCN2CBFUvOKECrU24AYAQQkRgAAAQEICgA8+RAnMuFV+b602XZlcmFjawAAAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328126,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxUGBAAHYGdgBFdjZ6wKgBjiCN2CBFUvOeECrU24AYAQQi8QAAAQEICgA9ByUnMuFV+b602WludgAAAAAAAAAAACUAAADiGz+gAQIAAAATnTgTiBlSSxOQ+SUaDDVFUWBazyHUndkaHgAAAAAAAA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328133,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrUIdAAHYGdd9FdjZ6wKgBjiCN2CBFUvPbECrU24AYAQTVCAAAAQEICgA9Cc0nMuK++b602WFkZHIAAAAAAAAAAB8AAAAaUD6xAZ2wkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/3zFMPkgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328204,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxUVhAAHYGdQhFdjZ6wKgBjiCN2CBFUvQSECrU24AYAQQmBAAAAQEICgA9JZ4nMuMD+b602WludgAAAAAAAAAAACUAAAA9nFzlAQEAAAAVWe9CINyyneBHwVgOlv1L+\/P21bD\/kS+scRp34fwyBA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328231,"pkt_len":110,"pkt":"ACPrIpS0ACNshovhCABFAABgtHZAAEAGR\/vAqAGORXY2etggII0QKtTbRVL0T4AY\/\/9SuwAAAQEICicy5tsAPSWe+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+2394{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328232,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2401{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328232,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcUeJAAHYGbxNFdjZ6wKgBjiCN2CBFUvn3ECrhQIAQAQQx5gAAAQEICgA9MKonMubi2EsY9HhR1ZK\/vm\/i1x6VqJB3x0HX2HuWnSNHS1UBQQR2gcMI6msYMANonFclP\/HnYSEBZ4h0HiB0Yf9+ALmP7finzeJFPwZypR+zq2yb5+CryUzqEuGS1TfC727hyq\/q\/\/\/\/\/71CUGQZmrhuh5oOFdd2jWqhqB6mu1CfCxS1XIuvXcdWAAAAAIxJMEYCIQDmndIIfihqJZgSP3WcCMvA4v7DVzwYZ5mnfJ8ZO5\/RPwIhAKlonm9pn08G6bAiZkvKnDtJh10Xn\/CFQIOPM0JAeDlKAUEEdoHDCOprGDADaJxXJT\/x52EhAWeIdB4gdGH\/fgC5j+34p83iRT8GcqUfs6tsm+fgq8lM6hLhktU3wu9u4cqv6v\/\/\/\/\/d+YYAAsVnYLgqr+jak1nEN4s5VAFgFwOdDIdCt7HAWQAAAACLSDBFAiEA58NwciwCv6kaUTCmyvrprH8kBYzDl01xqokKYT9k5cUCIBTgz+Uhi72IUQCBdUCWWSzWI7jgbjbke7xCu+\/76pirAUEEw3k\/6RNdNWxhFepapRUPnKbA2Q1M9b7atGAe2bk\/oAJYmmmSi9kAgz7YWo2+qEWeTKTEgLPvh7nVAMqcBx2UF\/\/\/\/\/8fi\/Ji4CUM\/JfqgxDhOb9wkqcEa1eLOIc8Mw0zyrzxWgAAAACLSDBFAiEA37snNLcqyn8+roijVRqev23lVqk1aavezTsCQ\/+dAKgCIDusWrMOYsiZWV6ZZA2e7hGzAtNNofxffBnTQ3QjAAUmAUEEdoHDCOprGDADaJxXJT\/x52EhAWeIdB4gdGH\/fgC5j+34p83iRT8GcqUfs6tsm+fgq8lM6hLhktU3wu9u4cqv6v\/\/\/\/85SzHkEOIWhp0dTNE1khQwpPH\/LlZJ+mpWk4WwC1\/lDQEAAACKRzBEAiACqNO5xYoKDhVg38eTKYmWL\/uLHVaBPMAwNf\/weQpAJAIgJE454oCvdK5vNyjfU5HaizPc0+bdZrdSUbSYKbFPE+4BQQR2gcMI6msYMANonFclP\/HnYSEBZ4h0HiB0Yf9+ALmP7finzeJFPwZypR+zq2yb5+CryUzqEuGS1TfC727hyq\/q\/\/\/\/\/zuJJw+S+PSHIduUqb4EwQ6ymsPj2d2WplLuPREbguBbAQAAAItIMEUCIBnR2zSHoYtNzM4O6A38V0ziLHzFUHgCkh51is9K7aKDAiEA7Rn+zfZIkDmF3LU6qjCC0NFUZ3SVFWTd3wZZKXz8G3QBQQR2gcMI6msYMANonFclP\/HnYSEBZ4h0HiB0Yf9+ALmP7finzeJFPwZypR+zq2yb5+CryUzqEuGS1TfC727hyq\/q\/\/\/\/\/0ILgnOarjcnYiwKwOGk\/CWmzMJ20dLbmbTkzUbxc18aAAAAAItIMEUCIHTETthZWWh+CTt8gU9AOuih+nwrXog1lMwqm7D7LiZCAiEA6+6dpifreSRIuzIN5TA2KMmXg+VWft0mZY53CHVFGuMBQQR2gcMI6msYMANonFclP\/HnYSEBZ4h0HiB0Yf9+ALmP7finzeJFPwZypR+zq2yb5+CryUzqEuGS1TfC727hyq\/q\/\/\/\/\/1spVIJvJs3fYYIhQhPMqibuDPVYvIlh2U6o0FwzJC5MAQAAAItIMEUCIQDcb1XjMDC87GykXKFFb9y375vaUQFW8T1YXrY8+FF0+AIgT+ygTce\/xJPTlX4o4vKsa1pbS2UHq1fcAmM463U+knQBQQR2gcMI6msYMANonFclP\/HnYSEBZ4h0HiB0Yf9+ALmP7finzeJFPwZypR+zq2yb5+CryUzqEuGS1TfC727hyq\/q\/\/\/\/\/150lU9arFbiTfYtR1COlnVFwr47lXyJLXRjy1wU6uzoAQAAAIxJMEYCIQD+JSZX8ETSdP95tg2sODIjReDxC9dznrNInjewUw1jvwIhAOSUyCilU06vLJA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2419{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328232,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcUeNAAHYGbxJFdjZ6wKgBjiCN2CBFUv+fECrhQIAQAQSzXwAAAQEICgA9MKwnMubjSpvwQF0pvfPbt6ryFuozeOA\/gz\/migFBBHaBwwjqaxgwA2icVyU\/8edhIQFniHQeIHRh\/34AuY\/t+KfN4kU\/BnKlH7OrbJvn4KvJTOoS4ZLVN8LvbuHKr+r\/\/\/\/\/Ze\/kKw6lGNc\/LakJOwPbluRBat9tJCgwvHNvb3Nu\/sQAAAAAikcwRAIgQ\/0Y1rkTWmc0WUko2ts5MhAridHcT\/CuQb4CWYP\/3LICIDuZJO5cGHY9UDbU90xu1XLbT1tJIrxbWHc0Evyq1PIIAUEEdoHDCOprGDADaJxXJT\/x52EhAWeIdB4gdGH\/fgC5j+34p83iRT8GcqUfs6tsm+fgq8lM6hLhktU3wu9u4cqv6v\/\/\/\/92aIOL8Oqcn\/S71CPJbDfz0l2Srx+stuWozkOfQJYzsAEAAACMSTBGAiEAqhAgVxGqCjJ\/m8jTaXHjwSed4LktQFSA6e1UVaaFmNMCIQDQa6m5sl\/zgPU6yfoZVdJbN+Ce3csbw9+QZ3ikfSBYPAFBBHaBwwjqaxgwA2icVyU\/8edhIQFniHQeIHRh\/34AuY\/t+KfN4kU\/BnKlH7OrbJvn4KvJTOoS4ZLVN8LvbuHKr+r\/\/\/\/\/gaN00JPzXxbh6cFmFaJdsCnktP68ATvneMvM6R3YbAkAAAAAi0gwRQIgX1pmobONkEF1LpJ0IY1HKcnzSvcLFHwVKthqg4Me9tECIQDCyOWv9deAXi0zTqwxhE7\/Q6QoyG3clqE0Me1xAql+LQFBBMN5P+kTXTVsYRXqWqUVD5ymwNkNTPW+2rRgHtm5P6ACWJppkovZAIM+2FqNvqhFnkykxICz74e51QDKnAcdlBf\/\/\/\/\/\/LHeZPMO043bI1mzX75dtDZh5N385M20rNIweABqvKgAAAAAjEkwRgIhAKaHzggcKZTzRSotDMh255\/tflRuHqq2s6LrApnoQQ5aAiEA1ZiAJIxdkaJtEsoWaRFd5qO6PahPS1EdN\/ImdgPyZaUBQQTDeT\/pE101bGEV6lqlFQ+cpsDZDUz1vtq0YB7ZuT+gAliaaZKL2QCDPthajb6oRZ5MpMSAs++HudUAypwHHZQX\/\/\/\/\/zJFKV1k8WRaziMI1ePHM\/E7ONaKjKoahCYGeQ\/6rcmtRAAAAItIMEUCIGBMhe5NY2hY1tST3W3\/bkKel2+u1XiVokTClxp83C3qAiEAxmHsKVSO\/cYFeu\/JLliZsIuZ3zewQ7WTeZuRufBhsJgBQQR2gcMI6msYMANonFclP\/HnYSEBZ4h0HiB0Yf9+ALmP7finzeJFPwZypR+zq2yb5+CryUzqEuGS1TfC727hyq\/q\/\/\/\/\/zmb1jrj1wcviwXsLYuJ2XWZkqgv00SaLv4JT0\/xr5yXXwAAAIxJMEYCIQDQxtnblqVW4DW\/e2WhP5Q6aofL\/e9L\/pEWAoJPaB54uwIhAK0\/HbpCyY9xBvZLMMWgHbkIK\/cvvEO8hkbhDvkqNxiWAUEEdoHDCOprGDADaJxXJT\/x52EhAWeIdB4gdGH\/fgC5j+34p83iRT8GcqUfs6tsm+fgq8lM6hLhktU3wu9u4cqv6v\/\/\/\/+UKvNPJQrCkZiYvPU4YxqGG8u7GEfNraDwx0+QqikzYzYAAACMSTBGAiEA\/qOB6Ct9Voi6YbzNs\/YB8sxOyt19s59dEaJovI5Ev04CIQDJelJ7ZLqLrr7ZnlClvl4qk3394lUWampdr+sMN2NvYgFBBHaBwwjqaxgwA2icVyU\/8edhIQFniHQeIHRh\/34AuY\/t+KfN4kU\/BnKlH7OrbJvn4KvJTOoS4ZLVN8LvbuHKr+r\/\/\/\/\/AoAHaEcAAAAAGXapFPHPbnktQtFJyywXMVdUksjB4wswiKwA6HZIFwAAABl2qRSeoPGHTtUIqu49LFwtN\/UJkrJVl4isAAAAAAEAAAAC6wPENV3WfTbO4gFkUsg=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2383{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328232,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcUeRAAHYGbxFFdjZ6wKgBjiCN2CBFUwVHECrhQIAQAQT2DwAAAQEICgA9MKwnMubjTGEEe\/VZgF7sRSZnmfn255LfAAAAAIxJMEYCIQDAf1a7odzA9rv7EcI1FzSn0a\/9ENb7M8H\/G1FMsxSd5gIhAOhekosoP0mMIbwLytBBN8010AtJD8XomEUyQYzmKPGsAUEE\/W3Sc\/HaQWgQAOntx\/xbM\/VOsdOZ9phX2TNID4C+WQGMTuxTrcgBwfIC\/+xZxUmNAlGnxk+SgXnWfiRiffC62f\/\/\/\/\/rA8Q1XdZ9Ns7iAWRSyExhBHv1WYBe7EUmZ5n59ueS3wEAAACLSDBFAiEAhXDLrRX9i3EZnLanTragAd7toJ9yV4jjEeXE02x06h8CIEj2TDRgCPJEYah\/uM0mJNL01LO7ilrtsnQMNdIe9otPAUEEH2iSHnjx9cw7UpeMh0tBi+3wrVau+gTof3ZYEGAfeuDWY8ORREzvMOZe621ewgQh9ee4J5Fph2WNT98OWSr7uv\/\/\/\/8CQIgIkgEAAAAZdqkUE0NyKux1sb9lLjcnegoPU0zYYYCIrIDhhNYBAAAAGXapFBvxVdXfPihwZ6npYxTIgY4P7vi4iKwAAAAAAQAAAAGgO9igiRgD5jyrKecjiBPdrha0\/JYo2TLJMEEpTNwokQEAAACKRzBEAiBJKQ61PLe3Ekv\/1cck9l5l2+Ag9AsFLpe2SX0xyzNtfgIgFDTy3e5JJWUyvP+WDOXUhGmqYiph5nhuEy7c+P14qlYBQQTbqQDXBzK5D3KDBvNRYb4NC85pS8xRYq65jKaH+gZJGe2bufwlF70syUzuiQBjZqYugk+4Pe+ICmc4LFqXGvC5\/\/\/\/\/wJAQg8AAAAAABl2qRQeMt+Jx8UXiwKF+7XDBPR8DoiWk4iswCGT7AIAAAAZdqkUxH2ihP\/tNYMuOqVHsY398vcDFECIrAAAAAABAAAAAtAY+oWozybrBxNZDpuEr5dLaBH8sLH90wJZn5HAkjXhAAAAAItIMEUCIG6dp0lYeoKqBJjVd6ya\/pkYZj6YLYY+rAGqiOi3UzxWAiEAtm0QpqovU4\/RUzn0QXkvQCrkw9trHRjdYENUWaKTkIABQQSMxjB7bsohgZy5g5xmnNF7HCWaluyDq686GBHK7+r+cqBe5ypZgr8JP5YvfC65tLmDJK+QBGMZyLbng41lftK3\/\/\/\/\/9AY+oWozybrBxNZDpuEr5dLaBH8sLH90wJZn5HAkjXhAQAAAItIMEUCIQCzeoS+9xCcM5J57UuU5+z0P6+zktQJTzlYYIjoOhTafAIgMIKDUf1n8adyJ\/M5jTaTXW\/f+CSAXmvMOdE45LPamocBQQTclwqicpxvwzNmoJvf9PaANEuNkc2q3Ms1Nqlm1cC7KbMtRzkERaohSUgYgK3MFtCrZS1QtCPfbMx+Ku9AwRyu\/\/\/\/\/wIAZejUAAAAABl2qRRsV8OeL0W6CM9aaJKGjWMxJQKcwIisAEm+ugEAAAAZdqkUnNt5lid+mRpoPneAd3nMA4zv9Y6IrAAAAAABAAAAARs8L86frcfnRECVKtX0BhA7o9SR8fFwCfGFDLonXZybAAAAAIpHMEQCIHZ\/BehsXs7uRw2cpqvJ6YmbkmZ1rEtHv5zQaRvo+2huAiAZv5nfPjPqLYliWiMI5alBDGPBR15k7PYCMEt8Q8ezxwFBBOFNbWQV5fRZpvpuSQSzg6AFps8Wgrh3FTDK8g4civ4JrfDNKj\/mwUNMNbhHJS0Ry5DOkOeNqhvzhB00gL2g6XT\/\/\/\/\/AgDPlrwAAAAAGXapFL+s0rLDzsCkISTY23YS1bznOPL2iKxAS0wAAAAAABl2qRRGiVbhIbal9Ll\/QRd8EDvm317oa4isAAAAAAEAAAABm1ls64UUByBrM28OJWP3VTtZrIdl\/5\/vn+2Hl91gpQAAAAAAjEkwRgIhAP0cOmge75JW3IE62sHWrnhDlrAPn3uB5G8Y+GQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1736{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328232,"pkt_len":1045,"pkt":"ACNshovhACPrIpS0CABFAAQHUeVAAHYGcOVFdjZ6wKgBjiCN2CBFUwrvECrhQIAYAQSboQAAAQEICgA9MKwnMubjBBOKrgIhAI3LIZr70eMUhsFlpqUM8rNzPymIi8G9JeUCuPc6no1cAUEEmchNOtqIodcdfN8kqbxxObgWi7Ol\/hvhmOtjavhJcLEZQcZ73IesqVxDQ1L6SW4W21dFqjoZCbOx8vlyxWBWyP\/\/\/\/8CwObOBwAAAAAZdqkUFpLG3I3tjz2NMjkFrkXHlaHYITyIrEBLTAAAAAAAGXapFOjlJPxHMD8sjRtZ3ZKbkJSwVMm\/iKwAAAAAAQAAAAHJuDKKpKicKjZzAK2WQqX3nphDr3KXcaarDZPj7MG05gAAAACLSDBFAiEAuQNG4ruZErIwxZOegK18b8F1KmJPSHYIKcf70KLgIF4CIBv5T7WfRL0X13U79n+y4nlmGkWF2ljLr57cmuiV5kqBAUEEHZBKJ+xlAVGsIqvQUkJXnwhAtWEeeUmKm+xcyAo97i2ze29TlsxHJuG6+srxw5GC8TaHoPW+GbueJ6r5LLISdf\/\/\/\/8CQFlzBwAAAAAZdqkUoDojmCQKPs+kAAIp2yPmnSvcS5WIrEBLTAAAAAAAGXapFNQU6arywpPpoNp6zbnDsxUnkRqCiKwAAAAAAQAAAAEzTSe95OZ\/vbJrmXqXGlRHByOh7JTi6a\/0FhHcT6LB6gAAAACKRzBEAiBFDpxWBoT5gYYztlKnjF79IrIlnkJ136J\/9khIly6w4QIgbCWuH8ApaZkoxgxzt2fCzd7TF3n3YLSfN3oBZK0tfcwBQQToQ4RNGUprZGBMNag16VCCLizJxE4nedLjJG6RhpDr+LGXOLdCBGaHQLyAH14iYDly63+1a\/FkRGZXmYlPbPCk\/\/\/\/\/wLAyxcHAAAAABl2qRR8oMN3inNp4KDaKV1q+Dp9IokA5YisQEtMAAAAAAAZdqkU+5XpSTnQRTFSEnAcWgRVY2N3a0aIrAAAAAD5vrTZdHgAAAAAAAAAAAAAAQEAABVZ70IBAAAAAW7pT5JdOusyjCXJc6lqN+0mXbdK9G0idM7\/7tphxwxCAQAAAIpHMEQCIBKHlHk1hTJC7VulNHBiiCrkXM8Jrrl7oigOv8jmLLD9AiBmxJbEwiuKcTAlnTowVocUHrSJG36gcutw24isPtDDjAFBBGMUCv7taQEzTE8+3GyJWN\/m+FLw1AAa\/X51j4eIW0V0YJh8SU+80WYlZd81UHgpm9gWQnP3tZXW3YIA03SWp7z\/\/\/\/\/AkBMT+oCAAAAGXapFJKZyceLrvFdbDwHqQeBxpfjKGW+iKyA1UMCAAAAABl2qRRGy1hmYplhaQ7ZP9BleGYMFerdNYisAAAAAA==","pkt_caplen":1045,"pkt_type":2048,"pkt_ipoffset":14}
+2430{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328234,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2430{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328234,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2435{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328234,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcUetAAHYGbwpFdjZ6wKgBjiCN2CBFUxoSECrhQIAQAQTD7gAAAQEICgA9MW0nMubkAAAA\/\/86CS+PII3QoJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/87XxLxII37lpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/87p46rII0pj5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/87p8JfII0po5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/88MGJ0II0WkZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/88Mx9\/II3TpJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/888G+pII1WlZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/888SllII0jlpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/888dkcII3flJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/888vMpII0ujpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+EOrmII14mJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+H9clII0KipBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+MMoCII0CoJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+MdfzII3DlJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+UzM7II3+kZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+V8ByII28o5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+m+muII04jpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+wPIJII3kpJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+3UtFII1\/lZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+5MPqII2ppJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8+7F4ZII14kpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8++M+pII1ih5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8\/fkgZII1tl5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8\/ppzxII15nJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AD1HsII3hiJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AFm3WII04lJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AFuvNII10k5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AGaDwII2il5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9ANYDoII2InpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9ARnQrII3nlJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AbsApII2Pn5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AbtvCII0YkJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AeVaEII0+kZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AhkYvII34h5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AkUKVII2fkJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AlwETII2MiJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9AzkJiII2hiJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Az+2GII1JiJBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9A0BzSII1OjZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9A7nxyII0mlpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9A7rdDII1XopBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BG1DZII1SipBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BHD11II1Jj5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BH9CxII2fl5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BIEcCII1KmZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BIFBNII1ZnpBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BIn33II0diZBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BKEa9II3vipBNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9BKJI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1301328319392,"flow_last_seen":1301328319392,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"74.89.181.229","src_port":55348,"dst_port":8333,"l4_proto":"tcp"}
+0547{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328319,"pkt_len":171,"pkt":"ACPrIpS0ACNshovhCABFAACdlslAAEAG4RzAqAGOSlm15dg0II2cIEOJr5xIoIAY\/\/\/04QAAAQEICicy6kgDS\/0c+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAAC\/sZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/Slm15SCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII2qu+Pk33arXQC9vgEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328319,"pkt_len":171,"pkt":"ACNshovhACPrIpS0CABFAACdR2RAAHYG+oFKWbXlwKgBjiCN2DSvnEignCBD8oAYAQSuQgAAAQEICgNL\/SInMupI+b602XZlcnNpb24AAAAAAFUAAAAAfQAAAQAAAAAAAAC4sZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHtg0AQAAAAAAAAAAAAAAAAAAAAAA\/\/9KWbXlII1O39\/bLGJPkgAHwwEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328319,"pkt_len":86,"pkt":"ACNshovhACPrIpS0CABFAABIR4lAAHYG+rFKWbXlwKgBjiCN2DSvnEkJnCBD8oAYAQTU7AAAAQEICgNL\/S8nMupI+b602XZlcmFjawAAAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328329,"pkt_len":182,"pkt":"ACNshovhACPrIpS0CABFAACoT8pAAHYG8hBKWbXlwKgBjiCN2DSvnEkdnCBD8oAYAQTsUQAAAQEICgNMAQUnMupJ+b602WFkZHIAAAAAAAAAAB8AAAAFPjqqAaqxkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0wRf6wgjfm+tNlpbnYAAAAAAAAAAAAlAAAAQQzzYQEBAAAA12rEGNmGheXOu8ek7zu7IlWIcBBqXZRWnJhjR8ftgeg=","pkt_caplen":182,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328369,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrcG9AAHYG0ahKWbXlwKgBjiCN2DSvnEmRnCBD8oAYAQRUwgAAAQEICgNMEIYnMuqr+b602WFkZHIAAAAAAAAAAB8AAAD2469xAcixkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0bvCbAgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328390,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrA1xAAHYGPrxKWbXlwKgBjiCN2DSvnEnInCBD8oAYAQTR4QAAAQEICgNMGQknMuw5+b602WFkZHIAAAAAAAAAAB8AAADwhhaWAaexkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/7IhkJUgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328419,"pkt_len":110,"pkt":"ACPrIpS0ACNshovhCABFAABg4IlAAEAGl5nAqAGOSlm15dg0II2cIEPyr5xJ\/4AY\/\/8VgwAAAQEICicy7jADTBkJ+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328419,"pkt_len":121,"pkt":"ACPrIpS0ACNshovhCABFAABriLJAAEAG72XAqAGOSlm15dg0II2cIEQer5xJ\/4AY\/\/\/+JAAAAQEICicy7jMDTCRP+b602WFkZHIAAAAAAAAAAB8AAAD19xBfASOykE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/yZghB4gjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+2431{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2432{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2434{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2432{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2433{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcJZhAAHYGFw9KWbXlwKgBjiCN2DSvnGCfnCBEVYAQAQNezgAAAQEICgNMJH0nMu43AAAAAAAAAAAAAAAAAAAAAAD\/\/0NWXB0gjeyXkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0NWmMMgjSekkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OLLbQgjTOZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OLrcwgjY6PkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OYOmIgjf2SkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Oe4sogjSKVkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OhVnIgjT+VkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OoiBwgjZWPkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OpAY0gjaeTkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Oq3nYgjSKUkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OrIXggjcGdkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OrhTkgjeaQkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OrwCEgjfKRkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OsEJYgjfuQkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OszDUgjXWQkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Os+REgjb2SkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OvR44gjWmMkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OwLEggjR2WkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OwxGsgjTeJkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0OxIf4gjaKjkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0O4dIAgjVCPkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PBvuMgjWeRkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PFVDUgjWWJkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PMAZAgjRqVkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PTQecgjVKWkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PUCpggje2NkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PcGPggjQuRkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PcdGQgjQaSkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PiipEgjTKYkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Pp1xwgjUmqkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PqmGcgjaqMkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0PxmB4gjRmUkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0P5xC8gjT6NkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0P\/LfYgjY+akE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0P\/N8Agjb2bkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QEPaUgjcyZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QFbBMgjUGZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QGW7AgjYyUkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QHrWggjdmJkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QMFxIgjSWPkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QPWWwgjUGKkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QhDuggjf2ZkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QkU6cgjRWgkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QlQeIgjfmSkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0QrViwgjXuMkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0Q\/ZGYgjbWSkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0REYVogjeCckE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0REyYIgjfaJkE0BAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2434{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2434{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328420,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1301328472925,"flow_last_seen":1301328472925,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"66.68.83.22","src_port":55383,"dst_port":8333,"l4_proto":"tcp"}
+0545{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328472,"pkt_len":171,"pkt":"ACPrIpS0ACNshovhCABFAACde+1AAEAGZt3AqAGOQkRTFthXII0tj7Vf9ZidkYAY\/\/+IsAAAAQEICicy8EYAAAAA+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAABYspBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/QkRTFiCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII21Dgd4gTLgpgDgvgEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328472,"pkt_len":171,"pkt":"ACNshovhACPrIpS0CABFAACdMqtAAG8GgR9CRFMWwKgBjiCN2Ff1mJ2RLY+1yIAY\/5aM3QAAAQEICgBK7W0nMvBG+b602XZlcnNpb24AAAAAAFUAAACcfAAAAQAAAAAAAABZspBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHthXAQAAAAAAAAAAAAAAAAAAAAAA\/\/9CRFMWII0z3Rs+AfeDdwAHwwEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328473,"pkt_len":86,"pkt":"ACNshovhACPrIpS0CABFAABIMqxAAG8GgXNCRFMWwKgBjiCN2Ff1mJ36LY+1yIAY\/5avrAAAAQEICgBK7W4nMvBG+b602XZlcmFjawAAAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328487,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxMvRAAG8GgQJCRFMWwKgBjiCN2Ff1mJ4OLY+1yIAY\/5YyzAAAAQEICgBK7fonMvBH+b602WludgAAAAAAAAAAACUAAAAXvAGWAQEAAAAYqnCtA4JeCfSWUZFYsh6sAyMBtBHVR6Y5dbVZJO1sMQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328526,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxM2VAAG8GgJFCRFMWwKgBjiCN2Ff1mJ5LLY+1yIAY\/5bHMAAAAQEICgBK74cnMvDT+b602WludgAAAAAAAAAAACUAAAAOAWk4AQEAAACmU2ocFfjbk6bwRfCWT0dV1t0G5OkxndgzFqeVZZtzHw==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328538,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxM+RAAG8GgBJCRFMWwKgBjiCN2Ff1mJ6ILY+1yIAY\/5bQbwAAAQEICgBK7\/onMvJg+b602WludgAAAAAAAAAAACUAAABr1PSfAQIAAAACQk0EsEdX9pnaln3xHefyXv4xWPTxfPvJjgAAAAAAAA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1301327937725,"flow_last_seen":1301327939000,"flow_tot_l4_data_len":22798,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1199,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"188.165.213.169","src_port":55317,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1301327937725,"flow_last_seen":1301327939000,"flow_tot_l4_data_len":22798,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1199,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"188.165.213.169","src_port":55317,"dst_port":8333,"l4_proto":"tcp"}
+0558{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328547,"pkt_len":182,"pkt":"ACNshovhACPrIpS0CABFAACoNBdAAG8Gf6hCRFMWwKgBjiCN2Ff1mJ7FLY+1yIAY\/5Y30gAAAQEICgBK8FMnMvLS+b602WFkZHIAAAAAAAAAAB8AAADFd1QeAe2xkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/z+VNnggjfm+tNlpbnYAAAAAAAAAAAAlAAAAbpdHCgEBAAAAAJFuNNZN7lTuzzmknwSYKbRCQJGJA0EJPn0yPmuOS08=","pkt_caplen":182,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328570,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxNJNAAG8Gf2NCRFMWwKgBjiCN2Ff1mJ85LY+1yIAY\/5akrAAAAQEICgBK8TgnMvMu+b602WludgAAAAAAAAAAACUAAABwZvzNAQIAAADeIqDjYKdDJQkrvsZjbQFePaqBy15E2soqxwAAAAAAAA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":110,"pkt":"ACPrIpS0ACNshovhCABFAABgbHFAAEAGdpbAqAGOQkRTFthXII0tj7XI9ZifdoAY\/\/8FCwAAAQEICicy9YMASvE4+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":1514,"pkt":"ACPrIpS0ACNshovhCABFAAXckC9AAEAGTVzAqAGOQkRTFthXII0tj7uc9ZifdoAQ\/\/+JdQAAAQEICicy9YcASvKxFR2eg8y6oJzuZMQAAAAAAAACAAAAhsk0znkeeWemKwanXjpNh7+8VbZpkGmrhD0AAAAAAAACAAAA4aTnKlqUSuNHiwauL6y3Fg7PxH5cceBHb8cAAAAAAAACAAAARqgPEyGafV0I4DUCXrgxk095YditlvnxwYIAAAAAAAACAAAAieAGQI+wROGRzI6XzzAgMkSaU\/ue9NOcbqwAAAAAAAACAAAAQHUUcCXp+o1\/4tG+3cLo+HTp3XWUcFMLK6UAAAAAAAACAAAA11sCET\/bF5hneBBUmx2eCSCATEQE++\/cAFYAAAAAAAACAAAARBwgoVsFJGZbyGqzLQDHLwTnP0yu9kmYBsQAAAAAAAACAAAA7fbisFUyVzT0WrsKTalF53x9oCfgceIPtl4AAAAAAAACAAAA5lAD8xKoqF7LXnMznGwzcduOIOz2iKC2i2YAAAAAAAACAAAAdIH\/fxbjq54ejJ3JIX8SMYigjJeDA+FkvagAAAAAAAACAAAAW42nDju3oSWSlVVgbsLFWSQF\/AXMPSEFy1MAAAAAAAACAAAAYyrcmmarm9GuEF601xDgV5SMLjMj6FeA18kAAAAAAAACAAAAgHrF0ZeiMcDsleawM65itMYMFdBAoeqtZWEAAAAAAAACAAAAGdwnvN44z9nAf2JFRSmss9pj3WU+v\/autS0AAAAAAAACAAAAQ1032nh4WU82qEwvci3P8dbREPL9HizLCG0AAAAAAAACAAAAx8QnFJRV79Z8Rv1J9ZU+81EM9WkGlutJ65UAAAAAAAACAAAAYsv7LCM+OCMZSBSimz0T7VF7SQUfHR9RezgAAAAAAAACAAAAfguuGyU7XV9Sf8wpnWAcNTiLvntSR+VLASwAAAAAAAACAAAAg452gQH7wX1ZHIGBFutZu5k3LOPj2B+zV0IAAAAAAAACAAAA\/Eo6c5f6WPlxUqMFNDuC8Sp\/y\/QbDFyrJ9AAAAAAAAACAAAAvBVDh\/1YzE8Xj4eAKYgWrAR6JXlCAt5kB34AAAAAAAACAAAAJm2amLB9IE5Q5H33ytYDcGJof43DlaiXAakAAAAAAAACAAAAwc61Y+J9j1lcSj6h0J5e5HuIy3Tgxse8V7MAAAAAAAACAAAA7WM7EmIPcyfuQJ7f7yNdsifxi\/o\/HRGXWZAAAAAAAAACAAAAkT5s24rlRERYEz13ndyEzw4pLuGjOwAWdo8AAAAAAAACAAAAQ9aSaAQmp4OBfJppVsIIHlGYrJ\/8t9c3ekMAAAAAAAACAAAAMMZq7pHSFHJcumRX50A0YWaLPYPbsLckeqkAAAAAAAACAAAAtBDQ9MvLb4afz9zHz6APCmZG2FWCQsFXppgAAAAAAAACAAAA19m+cfXmm7yYTklQODRl\/pJq1Ckl0XagGB8AAAAAAAACAAAAT6X1IoyMQlHXPkCxvudSuW8\/MSrfh0PAOooAAAAAAAACAAAA0Q1OmSJBHp9+vjpiUvlPxr0kp7JbaWNbfD8AAAAAAAACAAAAOLjpdw99OXygSljZES+IuchYo1kc3AsRcjcAAAAAAAACAAAAp4ZGsc8DTHLJhch0nVK\/hZRxY2\/7gTZkTX8AAAAAAAACAAAA8h9UNvbqbQRCT\/luMD18f\/WxNzsO8E4CRhoAAAAAAAACAAAA\/yxDoIbTiDQ+xqNEVJb+dMrTTtxk+ozoJ1EAAAAAAAACAAAAcXgFbqWZ9HT9SW+YRMc213Kk9KltCYMwgakAAAAAAAACAAAAWFLZyIi3uzJBwbhWNE+lBmF5lACr5qMecUoAAAAAAAACAAAAipOOgLVLHVhGhyTrtqCoOmUKBa2OSrWjXVcAAAAAAAACAAAAKt8FXefN\/eJUXPF4eG+5+TXTSt+Vh\/xlbWIAAAAAAAACAAAAAfXL7NXiXjU+VeuiaAxu7RGxeQxpWt8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328607,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1301328699728,"flow_last_seen":1301328699728,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"195.218.16.178","src_port":55400,"dst_port":8333,"l4_proto":"tcp"}
+0545{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328699,"pkt_len":171,"pkt":"ACPrIpS0ACNshovhCABFAACdK9RAAEAGd8TAqAGOw9oQsthoII1BDXcu4yOzE4AY\/\/9L7wAAAQEICicy+R8AACIN+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAAA7s5BNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/w9oQsiCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII38Ree1v7hQ3gC4wAEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328699,"pkt_len":171,"pkt":"ACNshovhACPrIpS0CABFAACdBc9AAHUGaMnD2hCywKgBjiCN2GjjI7MTQQ13l4AYAQQ8gQAAAQEICgAAIhwnMvkf+b602XZlcnNpb24AAAAAAFUAAAACfQAAAQAAAAAAAAA4s5BNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHthoAQAAAAAAAAAAAAAAAAAAAAAA\/\/\/D2hCyII0FGo5IhpYwXgAKwwEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328699,"pkt_len":86,"pkt":"ACNshovhACPrIpS0CABFAABIBdlAAHUGaRTD2hCywKgBjiCN2GjjI7N8QQ13l4AYAQRZWQAAAQEICgAAIignMvkg+b602XZlcmFjawAAAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328717,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrBgZAAHUGaMTD2hCywKgBjiCN2GjjI7OQQQ13l4AYAQQrZwAAAQEICgAAKOAnMvki+b602WFkZHIAAAAAAAAAAB8AAABr2MyYATqzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1XJqP0gjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328728,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrByNAAHUGZ6fD2hCywKgBjiCN2GjjI7PHQQ13l4AYAQSkaAAAAQEICgAALVknMvnN+b602WFkZHIAAAAAAAAAAB8AAAATXr9rAUCzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/4FhwkwgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328732,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrBy5AAHUGZ5zD2hCywKgBjiCN2GjjI7P+QQ13l4AYAQTVPgAAAQEICgAALnQnMvpA+b602WFkZHIAAAAAAAAAAB8AAACeN6V7ATuzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1+UZHYgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328732,"pkt_len":121,"pkt":"ACNshovhACPrIpS0CABFAABrBzBAAHUGZ5rD2hCywKgBjiCN2GjjI7P+QQ13l4AYAQTVDAAAAQEICgAALqYnMvpA+b602WFkZHIAAAAAAAAAAB8AAACeN6V7ATuzkE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1+UZHYgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328734,"pkt_len":127,"pkt":"ACNshovhACPrIpS0CABFAABxB0JAAHUGZ4LD2hCywKgBjiCN2GjjI7Q1QQ13l4AYAQTZkgAAAQEICgAAL7wnMvpi+b602WludgAAAAAAAAAAACUAAABIUBDzAQEAAACneTs23HM3c2MVGABe4AbbCWLW+6yYwSq5vpZNcwSkww==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328740,"pkt_len":110,"pkt":"ACPrIpS0ACNshovhCABFAABgxcJAAEAG3hLAqAGOw9oQsthoII1BDXeX4yO0coAY\/\/+qggAAAQEICicy+rsAAC+8+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328741,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328741,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328741,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2202{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328741,"pkt_len":1399,"pkt":"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","pkt_caplen":1399,"pkt_type":2048,"pkt_ipoffset":14}
+2431{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328743,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcB51AAHUGYbzD2hCywKgBjiCN2GjjJCWSQQ2N8IAQAQTtnQAAAQEICgAAMv4nMvrPAAAAAAAAAAAA\/\/9OZhMCII1fp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9OaTyqII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Oak4KII1ep5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9ObbYrII1gp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9OgMTJII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9OibIBII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Oj4sMII1ip5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Ok01XII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9OmluBII1dp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PQ+u9II1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PRuXOII1ep5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PWFH5II1bp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PYWlEII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PZysAII1hp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Pb+qKII1dp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PcDUsII1gp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PcHKJII1ap5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PfD5SII1ep5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PgRhjII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PjJQTII1dp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PpBoMII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Pqw2rII1Yp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Ps8qYII1bp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PtblHII1bp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9PzG9HII1Yp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9P0EZ6II1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9P\/knSII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QA02HII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QA5drII1ep5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QHtqMII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QKtbLII1gp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QOMSbII1ip5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QRCrkII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QRuxGII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QR4dUII1hp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QSEnQII35vrTZYWRkcgAAAAAAAAAAM3UAAO3uR5P96ANep5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QWUxSII1ap5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QZZdZII1ip5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Qf5LXII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QqwaJII1hp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QsJT0II1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QsZMiII1lp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QvWeGII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QwaTGII1hp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Qyl23II1kp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9QymOOII1Zp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/9Qyt1KII1cp5BNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2433{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301328743,"pkt_len":1514,"pkt":"ACNshovhACPrIpS0CABFAAXcB55AAHUGYbvD2hCywKgBjiCN2GjjJCs6QQ2N8IAQAQRnRAAAAQEICgAAMv4nMvrPUMtdtiCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UMv5tCCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNW6PiCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNkerCCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNoQyCCNYqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UNzYxiCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN0dSCCNYqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN01MyCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN6CESCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UN\/eXCCNYaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UOskVSCNYaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UTk33SCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UVjeMiCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UWuW\/CCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UWyc4yCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UW37PCCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UYoMSyCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UZDx8yCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UZExAiCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Uafu7iCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ua6aSCCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ua+D+CCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UbKHmiCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ub9iASCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UcH7AyCNVYqQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UcgHZSCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UcgWpyCNWKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UeapJyCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UegJwSCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UerxUSCNYqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UgI56yCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UgdeYSCNYaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UghK8iCNX6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ug0QPSCNWKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UhAfoSCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UhBs8CCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UhxcFyCNZKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UiA7RCCNWqeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UiM06CCNY6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UilhHSCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UiuZ9SCNW6eQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Uix\/9SCNWaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ui4++yCNZaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkMkpSCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkTZDiCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkXVniCNYKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UkZgGSCNXKeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/Ul+wDyCNXaeQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/UmM0OiCNW6c=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":1,"flow_packet_id":139,"flow_first_seen":1301328089970,"flow_last_seen":1301328420526,"flow_tot_l4_data_len":186584,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1342,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"69.118.54.122","src_port":55328,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":1,"flow_packet_id":139,"flow_first_seen":1301328089970,"flow_last_seen":1301328420526,"flow_tot_l4_data_len":186584,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1342,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"69.118.54.122","src_port":55328,"dst_port":8333,"l4_proto":"tcp"}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1301329304767,"flow_last_seen":1301329304767,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"184.58.165.119","src_port":55487,"dst_port":8333,"l4_proto":"tcp"}
+0546{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329304,"pkt_len":171,"pkt":"ACPrIpS0ACNshovhCABFAACdDAhAAEAGDmvAqAGOuDqld9i\/II0stRatNDMFDIAY\/\/9S8AAAAQEICiczELoAVdzf+b602XZlcnNpb24AAAAAAFUAAAABfQAAAQAAAAAAAACYtZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/uDqldyCNAQAAAAAAAAAAAAAAAAAAAAAA\/\/8mYIQeII0b7ZMAlkQ1dwALwwEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329304,"pkt_len":171,"pkt":"ACNshovhACPrIpS0CABFAACdBMxAAHQG4aa4OqV3wKgBjiCN2L80MwUMLLUWrYAYAQTgGAAAAQEICgBV3OcnMxC6+b602XZlcnNpb24AAAAAAFUAAAACfQAAAQAAAAAAAACQtZBNAAAAAAEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHti\/AQAAAAAAAAAAAAAAAAAAAAAA\/\/+4OqV3II2BHa1kLxLeCgCuwgEA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329305,"pkt_len":165,"pkt":"ACPrIpS0ACNshovhCABFAACX6RJAAEAGMWbAqAGOuDqld9i\/II0stRcWNDMFdYAY\/\/+hogAAAQEICiczEL0AVdz7+b602XZlcmFjawAAAAAAAAAAAAD5vrTZZ2V0YWRkcgAAAAAAAAAAAF324OL5vrTZYWRkcgAAAAAAAAAAHwAAAKr+QCYBbLWQTQEAAAAAAAAAAAAAAAAAAAAAAP\/\/JmCEHiCN","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329309,"pkt_len":127,"pkt":"ACPrIpS0ACNshovhCABFAABxpRVAAEAGdYnAqAGOuDqld9i\/II0stRd5NDMFdYAY\/\/\/QMQAAAQEICiczEOgAVd0S+b602WludgAAAAAAAAAAACUAAAAM+O86AQEAAABjYqN6+8l5NV5ILuoyGWmRHhZ4vrImNA17xLD+35pOKQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329331,"pkt_len":127,"pkt":"ACPrIpS0ACNshovhCABFAABx5FNAAEAGNkvAqAGOuDqld9i\/II0stRe2NDMFdYAY\/\/+YyAAAAQEICiczEcYAVd7J+b602WludgAAAAAAAAAAACUAAACKqR5BAQEAAADko5gKOXTkTY\/EAL+Sv3gEjdoxRRE7Qf9xD2E6EXEwBA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329341,"pkt_len":127,"pkt":"ACPrIpS0ACNshovhCABFAABxKyJAAEAG73zAqAGOuDqld9i\/II0stRfzNDMFdYAY\/\/9dZQAAAQEICiczEikAVedx+b602WludgAAAAAAAAAAACUAAAAzU8q9AQEAAAA9VkTQaGen6\/H+3Jup6DC4ZO3kyKuoimJiIHOV7IvS9Q==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329365,"pkt_len":127,"pkt":"ACPrIpS0ACNshovhCABFAABxah1AAEAGsIHAqAGOuDqld9i\/II0stRgwNDMFdYAY\/\/8vBAAAAQEICiczExgAVetQ+b602WludgAAAAAAAAAAACUAAABZR+UtAQEAAAB\/0JQInOCDWb2Kk3ogFME+p5OgUuk0fjTxXrDH4P6ptg==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329377,"pkt_len":121,"pkt":"ACPrIpS0ACNshovhCABFAABrMlpAAEAG6ErAqAGOuDqld9i\/II0stRhtNDMFdYAY\/\/+rxgAAAQEICiczE5AAVfSo+b602WFkZHIAAAAAAAAAAB8AAAC0PZC+Abe1kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0pO10ogjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329389,"pkt_len":127,"pkt":"ACPrIpS0ACNshovhCABFAABx6yRAAEAGL3rAqAGOuDqld9i\/II0stRikNDMFdYAY\/\/8Y5wAAAQEICiczFAoAVflg+b602WludgAAAAAAAAAAACUAAAAyBRj4AQEAAAA0v73UnM8KQiW\/kw2WSJrGMb6zIZPWW83kRQkooap6cw==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329390,"pkt_len":121,"pkt":"ACPrIpS0ACNshovhCABFAABr7iZAAEAGLH7AqAGOuDqld9i\/II0stRjhNDMFdYAY\/\/9bdgAAAQEICiczFBYAVf4m+b602WFkZHIAAAAAAAAAAB8AAABC2ommAb21kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/1t6E90gjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329425,"pkt_len":121,"pkt":"ACPrIpS0ACNshovhCABFAABr+olAAEAGIBvAqAGOuDqld9i\/II0stRkYNDMFdYAY\/\/\/9sQAAAQEICiczFXQAVf6X+b602WFkZHIAAAAAAAAAAB8AAACHMlocAbe1kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/0TIINYgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329452,"pkt_len":86,"pkt":"ACNshovhACPrIpS0CABFAABIDS5AAHQG2Zm4OqV3wKgBjiCN2L80MwV1LLUZT4AYAQGOZAAAAQEICgBWFpInMxV0+b602XZlcmFjawAAAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+1841{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329452,"pkt_len":1127,"pkt":"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","pkt_caplen":1127,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329459,"pkt_len":127,"pkt":"ACPrIpS0ACNshovhCABFAABx3JpAAEAGPgTAqAGOuDqld9i\/II0stRlPNDMPVoAY\/\/++0QAAAQEICiczFsgAVhar+b602WludgAAAAAAAAAAACUAAADz4eNcAQEAAAAYg4ufJ32yLdAwF+WR3fXVdidlMCL1gr70pTNlRjPDUw==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","pkt_oversize":false,"pkt_ts":1301329480,"pkt_len":121,"pkt":"ACPrIpS0ACNshovhCABFAABrS6VAAEAGzv\/AqAGOuDqld9i\/II0stRmMNDMPVoAY\/\/\/9ZgAAAQEICiczF5MAVhmU+b602WFkZHIAAAAAAAAAAB8AAAADTXMNASC2kE0BAAAAAAAAAAAAAAAAAAAAAAD\/\/206XacgjQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":2,"flow_packet_id":172,"flow_first_seen":1301328319392,"flow_last_seen":1301329810648,"flow_tot_l4_data_len":157645,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":916,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"74.89.181.229","src_port":55348,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":2,"flow_packet_id":172,"flow_first_seen":1301328319392,"flow_last_seen":1301329810648,"flow_tot_l4_data_len":157645,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":916,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"74.89.181.229","src_port":55348,"dst_port":8333,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":4,"flow_packet_id":119,"flow_first_seen":1301328699728,"flow_last_seen":1301329807659,"flow_tot_l4_data_len":78705,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":661,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"195.218.16.178","src_port":55400,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":4,"flow_packet_id":119,"flow_first_seen":1301328699728,"flow_last_seen":1301329807659,"flow_tot_l4_data_len":78705,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":661,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"195.218.16.178","src_port":55400,"dst_port":8333,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":5,"flow_packet_id":27,"flow_first_seen":1301329304767,"flow_last_seen":1301329810839,"flow_tot_l4_data_len":3548,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1093,"flow_avg_l4_data_len":131,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"184.58.165.119","src_port":55487,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":5,"flow_packet_id":27,"flow_first_seen":1301329304767,"flow_last_seen":1301329810839,"flow_tot_l4_data_len":3548,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1093,"flow_avg_l4_data_len":131,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"184.58.165.119","src_port":55487,"dst_port":8333,"l4_proto":"tcp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":3,"flow_packet_id":161,"flow_first_seen":1301328472925,"flow_last_seen":1301329809936,"flow_tot_l4_data_len":110136,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":684,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"66.68.83.22","src_port":55383,"dst_port":8333,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap","flow_id":3,"flow_packet_id":161,"flow_first_seen":1301328472925,"flow_last_seen":1301329809936,"flow_tot_l4_data_len":110136,"flow_min_l4_data_len":52,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":684,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.142","dst_ip":"66.68.83.22","src_port":55383,"dst_port":8333,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bitcoin.pcap"}
diff --git a/tests/result/nDPId_bittorrent.pcap.txt b/tests/result/nDPId_bittorrent.pcap.txt
new file mode 100644
index 000000000..5cc32e8a0
--- /dev/null
+++ b/tests/result/nDPId_bittorrent.pcap.txt
@@ -0,0 +1,178 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1455469967246,"flow_last_seen":1455469967246,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52888,"dst_port":38305,"l4_proto":"tcp"}
+0495{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469967,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4eD1AAEAGAADAqAEDUjrYc86YlaHFzANOp3OTAoAY\/\/\/swwAAAQEIChnb8BkAhEMxE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjhgayboXmHFSZj4=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1455469967246,"flow_last_seen":1455469967246,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52888,"dst_port":38305,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+1274{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469967,"pkt_len":624,"pkt":"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","pkt_caplen":624,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455469967550,"flow_last_seen":1455469967550,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52887,"dst_port":53137,"l4_proto":"tcp"}
+0492{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469967,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4KZJAAEAGAADAqAEDUjlhU86Xz5EMkOfxIylUooAY70J1ogAAAQEIChnb8UUAFHnUE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjhJMcBHQL4ndrvA=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455469967550,"flow_last_seen":1455469967550,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52887,"dst_port":53137,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0553{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469967,"pkt_len":178,"pkt":"xCwDBkn+LFbcjDU0CABFAACkC49AAHcGgo1SOWFTwKgBA8+RzpcjKVSiDJDoNYAYAQJHBAAAAQEICgAUefwZ2\/FFE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wornNx4q0nl1XkqQAAADnFABkMTplaTBlNDppcHY0NDpSOWFTMTI6Y29tcGxldGVfYWdvaTNlMQ==","pkt_caplen":178,"pkt_type":2048,"pkt_ipoffset":14}
+1234{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469968,"pkt_len":593,"pkt":"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","pkt_caplen":593,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469968,"pkt_len":216,"pkt":"LFbcjDU0xCwDBkn+CABFAADK\/idAAEAGAADAqAEDUjlhU86Xz5EMkOiMIylXIoAY7zF19AAAAQEIChnb8wcAFHn+aTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTpwaTQwOTU5ZTQ6cmVxcWkyNTVlMTp2MTk6wrVUb3JyZW50IE1hYyAxLjguNjY6eW91cmlwNDpSOWFTZQAAAAEP","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469968,"pkt_len":80,"pkt":"LFbcjDU0xCwDBkn+CABFAABCeFJAAEAGAADAqAEDUjlhU86Xz5EMkOkiIylXIoAZ70J1bAAAAQEIChnb8wcAFHn+AAAAAwmf\/wAAAAMUAwA=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455469969259,"flow_last_seen":1455469969259,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52895,"dst_port":51413,"l4_proto":"tcp"}
+0493{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4K5tAAEAGAADAqAEDU9i48c6fyNXli2jySWt7B4AYK\/LO3wAAAQEIChnb9+x4G0bsE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjvi3q9Fc8jVIrp0=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455469969259,"flow_last_seen":1455469969259,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52895,"dst_port":51413,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0513{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":148,"pkt":"xCwDBkn+LFbcjDU0CABFYACGozdAADIG1mVT2LjxwKgBA8jVzp9Ja3sH5YtpNoAYECl7XAAAAQEICngbRx8Z2\/fsE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMTg4Qi2qniMLxLorRFP2hZAAAAEAFABkMTplaTBlNA==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+1309{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":648,"pkt":"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","pkt_caplen":648,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":198,"pkt":"LFbcjDU0xCwDBkn+CABFAAC41NtAAEAGAADAqAEDU9i48c6fyNXli2mfSWt9n4AYK9\/PHwAAAQEIChnb+G54G0dGaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTpwaTQwOTU5ZTQ6cmVxcWkyNTVlMTp2MTk6wrVUb3JyZW50IE1hYyAxLjguNjY6eW91cmlwNDpT2LjxZQAAAAEP","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":1455469969441,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52896,"dst_port":14627,"l4_proto":"tcp"}
+0493{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4XbBAAEAGAADAqAEDTzXkAs6gOSOymifHI+P1WoAYmwf1TQAAAQEIChnb+J8AAH2QE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjqb8v2rPEXkzqd0=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0617{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":1455469969441,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52896,"dst_port":14627,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":1455469969441,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52894,"dst_port":39332,"l4_proto":"tcp"}
+0493{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4duZAAEAGAADAqAEDeD4h8c6emaQxnKbPGdPY9oAYmwdcRQAAAQEIChnb+J8AQ+diE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjsdMZTLXvd5m7DE=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":1455469969441,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52894,"dst_port":39332,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0519{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":151,"pkt":"xCwDBkn+LFbcjDU0CABFAACJEvpAAHcG+5FPNeQCwKgBAzkjzqAj4\/VaspooC4AYAQLEvgAAAQEICgAAfaoZ2\/ifE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wovPx6i8m4ev0sHgAAADnFABkMTplaTBlNDppcA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+1272{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":620,"pkt":"xCwDBkn+LFbcjDU0CABFAAJeEvxAAHcG+bpPNeQCwKgBAzkjzqAj4\/WvspooC4AZAQKoaAAAAQEICgAAfaoZ2\/ifdjQ0Ok815AIxMjpjb21wbGV0ZV9hZ29pNmUxOm1kMTE6dXBsb2FkX29ubHlpM2UxMTpsdF9kb250aGF2ZWk3ZTEyOnV0X2hvbGVwdW5jaGk0ZTExOnV0X21ldGFkYXRhaTJlNjp1dF9wZXhpMWUxMDp1dF9jb21tZW50aTZlZTEzOm1ldGFkYXRhX3NpemVpMTkwMDllMTpwaTE0NjI3ZTQ6cmVxcWkyNTVlMTp2MTU6zrxUb3JyZW50IDMuNC41Mjp5cGk1Mjg5NmU2OnlvdXJpcDQ6UjfNAWUAAAB0Bf\/\/\/\/\/\/\/\/\/\/\/f\/\/\/\/\/\/\/\/\/\/\/\/9\/7\/\/\/\/\/fv\/\/\/\/\/\/f\/\/\/3\/\/\/\/\/9\/7\/\/\/\/\/\/\/v\/\/\/\/\/\/\/\/\/\/\/\/\/v\/+\/\/\/\/9\/\/\/\/\/\/\/\/+\/\/\/9\/\/\/\/f\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8\/\/\/\/\/\/f\/\/\/\/\/\/7\/\/\/\/\/\/f\/\/3\/P\/\/\/\/\/4AAAAAFBAAAA2sAAAAFBAAAAW0AAAAFBAAAAlYAAAAFBAAAAdEAAAAFBAAAAPQAAAAFBAAAAtIAAAAFBAAAAMsAAAAFBAAAAyUAAAAFBAAAAKMAAAAFBAAAAMQAAAAFBAAAAcEAAAAFBAAAAtMAAAAFBAAAAiUAAAAFBAAAAEYAAAAFBAAAAT8AAAAFBAAAAe4AAAAFBAAAAjwAAAAFBAAAAvgAAAAFBAAAA2oAAAAFBAAAA2AAAAAFBAAAAJgAAAAFBAAAATQAAAAFBAAAAQ4AAAAFBAAAA0w=","pkt_caplen":620,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":195,"pkt":"LFbcjDU0xCwDBkn+CABFAAC1EEdAAEAGAADAqAEDTzXkAs6gOSOymih3I+P32oAYmvb1igAAAQEIChnb+ZYAAH2qMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTpwaTQwOTU5ZTQ6cmVxcWkyNTVlMTp2MTk6wrVUb3JyZW50IE1hYyAxLjguNjY6eW91cmlwNDpPNeQCZQAAAAEP","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469969,"pkt_len":80,"pkt":"LFbcjDU0xCwDBkn+CABFAABC3FpAAEAGAADAqAEDTzXkAs6gOSOymij4I+P32oAZmwf1FwAAAQEIChnb+ZYAAH2qAAAAAwmf\/wAAAAMUAwA=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469970,"pkt_len":80,"pkt":"LFbcjDU0xCwDBkn+CABFAABCmoJAAEAGAADAqAEDU9i48c6fyNXli2ojSWt9n4AYK\/LOqQAAAQEIChnb+3R4G0d8AAAAAwmf\/wAAAAMUAwA=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1455469970233,"flow_last_seen":1455469970233,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52897,"dst_port":22673,"l4_proto":"tcp"}
+0493{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469970,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB45PBAAEAGAADAqAEDlxpfHs6hWJHZNtVIfkyTS4AYJnO4TgAAAQEIChnb+7IRKfdEE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjjCQUdTBqR8vIZE=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1455469970233,"flow_last_seen":1455469970233,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52897,"dst_port":22673,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0554{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469970,"pkt_len":178,"pkt":"xCwDBkn+LFbcjDU0CABFAACkCYZAAHIGRuqXGl8ewKgBA1iRzqF+TJNL2TbVjIAYHVxFKAAAAQEIChEp94AZ2\/uyE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC2coXQqpAS87AVXIDwAAADnFABkMTplaTBlNDppcHY0NDqXGl8eMTI6Y29tcGxldGVfYWdvaTFlMQ==","pkt_caplen":178,"pkt_type":2048,"pkt_ipoffset":14}
+1235{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469970,"pkt_len":593,"pkt":"xCwDBkn+LFbcjDU0CABFAAJDCYlAAHIGRUiXGl8ewKgBA1iRzqF+TJO72TbVjIAYHVwHogAAAQEIChEp97wZ2\/vsOm1kMTE6dXBsb2FkX29ubHlpM2UxMTpsdF9kb250aGF2ZWk3ZTEyOnV0X2hvbGVwdW5jaGk0ZTExOnV0X21ldGFkYXRhaTJlNjp1dF9wZXhpMWUxMDp1dF9jb21tZW50aTZlZTEzOm1ldGFkYXRhX3NpemVpMTkwMDllMTpwaTIyNjczZTQ6cmVxcWkyNTVlMTp2MTU6zrxUb3JyZW50IDMuNC41Mjp5cGk1Mjg5N2U2OnlvdXJpcDQ6UjfNAWUAAAB0Bf\/\/\/\/\/\/\/\/\/7\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/2\/3\/\/\/\/r\/\/\/\/\/9\/3\/\/\/\/\/9\/+\/\/+\/\/+\/\/\/\/f\/\/\/\/\/\/9\/\/\/\/\/\/\/\/\/\/f\/9\/\/\/\/\/\/\/\/+\/\/\/+\/v\/\/\/7\/\/7\/\/9\/\/\/\/\/\/\/7\/\/\/\/\/\/\/\/\/\/\/v\/\/\/\/\/\/\/\/\/\/\/\/4AAAAAFBAAAAUAAAAAFBAAAAboAAAAFBAAAArkAAAAFBAAAA0EAAAAFBAAAAD0AAAAFBAAAAvsAAAAFBAAAAPwAAAAFBAAAAPMAAAAFBAAAAqcAAAAFBAAAAX0AAAAFBAAAAY8AAAAFBAAAAaEAAAAFBAAAAo0AAAAFBAAAAPAAAAAFBAAAAegAAAAFBAAAAjYAAAAFBAAAARsAAAAFBAAAAm0AAAAFBAAAAoUAAAAFBAAAAUoAAAAFBAAAARkAAAAFBAAAAswAAAAFBAAAAiYAAAAFBAAAAXA=","pkt_caplen":593,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469970,"pkt_len":191,"pkt":"LFbcjDU0xCwDBkn+CABFAACxx\/1AAEAGAADAqAEDlxpfHs6hWJHZNtX8fkyVyoAYJmO4hwAAAQEIChnb\/CoRKfe8dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OpcaXx5lAAAAAQ8=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1455469970452,"flow_last_seen":1455469970452,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52893,"dst_port":12097,"l4_proto":"tcp"}
+0494{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469970,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB41kZAAEAGAADAqAEDTzeBFs6dL0HtOa3YPhLeWYAYVhCSYwAAAQEIChnb\/IcCXeBSE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjpi3Emqkm5uHs80=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1455469970452,"flow_last_seen":1455469970452,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52893,"dst_port":12097,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0563{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469971,"pkt_len":185,"pkt":"LFbcjDU0xCwDBkn+CABFAACrZhpAAEAGAADAqAEDlxpfHs6hWJHZNtZ5fkyVy4AYJnO4gQAAAQEIChnb\/0ERKfrcAAAAAwmf\/wAAAAMUAwAAAABlFAZkODptc2dfdHlwZWkwZTM6bnVtaTIwZTY6ZmlsdGVyNjQ6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGU=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1455469971321,"flow_last_seen":1455469971321,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52903,"dst_port":60163,"l4_proto":"tcp"}
+0494{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469971,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB48HJAAEAGAADAqAEDxmSSCc6n6wMx0mzN3F5zZYAYZooahAAAAQEIChnb\/+QB8nE1E0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjuG56+SlFtqa9S4=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1455469971321,"flow_last_seen":1455469971321,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52903,"dst_port":60163,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0543{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469971,"pkt_len":170,"pkt":"xCwDBkn+LFbcjDU0CABFAACcFzZAAHYG0wzGZJIJwKgBA+sDzqfcXnNlMdJtEYAYAQK5ewAAAQEICgHycUYZ2\/\/kE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wopccBVvnEHfGIYQAAADnFABkMTplaTBlNDppcHY0NDrGZJIJMTI6Y29tcGxldGU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+1246{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469971,"pkt_len":601,"pkt":"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","pkt_caplen":601,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469971,"pkt_len":196,"pkt":"LFbcjDU0xCwDBkn+CABFAAC2nnFAAEAGAADAqAEDxmSSCc6n6wMx0m183F515IAYZnkawgAAAQEIChncASMB8nFWZTExOnV0X21ldGFkYXRhaTJlNjp1dF9wZXhpMWUxMjp1dF9yZWNvbW1lbmRpNWUxMDp1dF9jb21tZW50aTZlZTE6cGk0MDk1OWU0OnJlcXFpMjU1ZTE6djE5OsK1VG9ycmVudCBNYWMgMS44LjY2OnlvdXJpcDQ6xmSSCWUAAAABDw==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1455469971675,"flow_last_seen":1455469971675,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52902,"dst_port":46633,"l4_proto":"tcp"}
+0495{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469971,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4IXFAAEAGAADAqAEDvmfDOM6mtimT1S+nN0acgIAY\/\/9DtgAAAQEIChncAUQAv2TsE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjkGjzZtimXS5YKE=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1455469971675,"flow_last_seen":1455469971675,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52902,"dst_port":46633,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0420{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469972,"pkt_len":80,"pkt":"xCwDBkn+LFbcjDU0CABFEABCIPVAAHYGyZfGZJIJwKgBA+sDzqfcXnXkMdJt\/oAYAQEO9wAAAQEICgHycYEZ3ACEAAAAAwnrAwAAAAMUAwE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469972,"pkt_len":185,"pkt":"xCwDBkn+LFbcjDU0CABFAACrWLRAAHIGbE2+Z8M4wKgBA7YpzqY3RpyAk9Uv64AYAQLhNwAAAQEICgC\/ZvwZ3AFEE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLUJUNzk1MC3xopUl3euuGS1IpvoAAAEBFABkMTplaTBlNDppcHY0NDq+Z8M4NDppcHY2MTY6IAEAAF71efs4aCApQZg8xzE=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469972,"pkt_len":171,"pkt":"LFbcjDU0xCwDBkn+CABFAACdvFdAAEAGAADAqAEDU9i48c6fyNXli2oxSWt9n4AYK\/LPBAAAAQEIChncAw54G0oPAAAAZRQGZDg6bXNnX3R5cGVpMGUzOm51bWkyMGU2OmZpbHRlcjY0OgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABl","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469972,"pkt_len":80,"pkt":"LFbcjDU0xCwDBkn+CABFAABCjUxAAEAGAADAqAEDxmSSCc6n6wMx0m3+3F518oAYZooaTgAAAQEIChncAw4B8nGBAAAAAwmf\/wAAAAMUAwA=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469973,"pkt_len":215,"pkt":"LFbcjDU0xCwDBkn+CABFAADJDUpAAEAGAADAqAEDvmfDOM6mtimT1TBDN0ac94AZ\/\/9EBwAAAQEIChncBtUAv2b8M2UxMjp1dF9ob2xlcHVuY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0Or5nwzhlAAAAAQ8=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469973,"pkt_len":73,"pkt":"xCwDBkn+LFbcjDU0CABFYAA7Gf1AADIGX+tT2LjxwKgBA8jVzp9Ja32f5Ytqm4AYEB4d7AAAAQEICngbU7QZ3AcQAAAAAwnI1Q==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469973,"pkt_len":106,"pkt":"xCwDBkn+LFbcjDU0CABFYABcD45AADIGajlT2LjxwKgBA8jVzp9Ja32m5Ytqm4AZEB6lPgAAAQEICngbU7QZ3AcQAAAAAxQDAQAAAB0UBmQ4Om1zZ190eXBlaTFlODpjb21tZW50c2xlZQ==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469973,"pkt_len":80,"pkt":"xCwDBkn+LFbcjDU0CABFAABCWLhAAHIGbLK+Z8M4wKgBA7YpzqY3Rp8Zk9Uw2YAZAQFLnQAAAQEICgC\/bJ8Z3AbVAAAAAwm2KQAAAAMUAwE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455469974358,"flow_last_seen":1455469974358,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52907,"dst_port":38305,"l4_proto":"tcp"}
+0496{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469974,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4DCdAAEAGAADAqAEDUjrYc86rlaExvR02+FTOIoAY\/\/\/swwAAAQEIChncC64AhEXwE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjk6UZQGZj8psqfs=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455469974358,"flow_last_seen":1455469974358,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52907,"dst_port":38305,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455469974533,"flow_last_seen":1455469974533,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52906,"dst_port":53137,"l4_proto":"tcp"}
+0494{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469974,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4WuVAAEAGAADAqAEDUjlhU86qz5GeFCpM34MiOYAY0pJ1ogAAAQEIChncDF0AFHySE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjjDhVI8cWXj55ew=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455469974533,"flow_last_seen":1455469974533,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52906,"dst_port":53137,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0562{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469974,"pkt_len":185,"pkt":"xCwDBkn+LFbcjDU0CABFAACrC6JAAHcGgnNSOWFTwKgBA8+RzqrfgyI5nhQqkIAYAQJ8JwAAAQEICgAUfLUZ3AxdE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wosdxOntFzioIvnoAAADnFABkMTplaTBlNDppcHY0NDpSOWFTMTI6Y29tcGxldGVfYWdvaTBlMTptZDExOnU=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+1231{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469974,"pkt_len":586,"pkt":"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","pkt_caplen":586,"pkt_type":2048,"pkt_ipoffset":14}
+0602{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469974,"pkt_len":215,"pkt":"LFbcjDU0xCwDBkn+CABFAADJ6cdAAEAGAADAqAEDUjlhU86qz5GeFCr+34MkuYAY0oJ18wAAAQEIChncDb8AFHy2dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OlI5YVNlAAAAAQ8=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469974,"pkt_len":85,"pkt":"LFbcjDU0xCwDBkn+CABFAABH5SFAAEAGAADAqAEDUjlhU86qz5GeFCuT34MkuYAZ0pJ1cQAAAQEIChncDb8AFHy2AAAAAwmf\/wAAAAMUAwAAAAABAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1385{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":705,"pkt":"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","pkt_caplen":705,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455469975234,"flow_last_seen":1455469975234,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52911,"dst_port":22673,"l4_proto":"tcp"}
+0494{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4WJNAAEAGAADAqAEDlxpfHs6vWJEERbWJ8qKonIAYJJ+4TgAAAQEIChncDxURKgrLE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjhul1XASmRgFxRA=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455469975234,"flow_last_seen":1455469975234,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52911,"dst_port":22673,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455469975240,"flow_last_seen":1455469975240,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.72.255.163","src_port":52912,"dst_port":59928,"l4_proto":"tcp"}
+0497{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4VgZAAEAGAADAqAEDl0j\/o86w6hjbuZSz\/XvqFoAYKEhZAgAAAQEIChncDxoAaM\/9E0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjpHIptJ+s3GSLpo=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0621{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455469975240,"flow_last_seen":1455469975240,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.72.255.163","src_port":52912,"dst_port":59928,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455469975265,"flow_last_seen":1455469975265,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52909,"dst_port":14627,"l4_proto":"tcp"}
+0495{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4dKFAAEAGAADAqAEDTzXkAs6tOSO1PcfcBOlxsoAYN4r1TQAAAQEIChncDzIAAH\/nE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjpuHBUmeY0dBAis=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455469975265,"flow_last_seen":1455469975265,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52909,"dst_port":14627,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0526{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":157,"pkt":"xCwDBkn+LFbcjDU0CABFAACPKABAAHIGh9GXSP+jwKgBA+oYzrD9e+oW27mU94AYAQF3EQAAAQEICgBo0AMZ3A8aE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wopW+kcQUcjSA5QoAAADnFABkMTplaTBlNDppcHY0NDqXSA==","pkt_caplen":157,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":171,"pkt":"xCwDBkn+LFbcjDU0CABFAACdCeVAAHIGRpKXGl8ewKgBA1iRzq\/yoqicBEW1zYAYHVwArAAAAQEIChEqCxYZ3A8VE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC2coV7lk33H8ZRraqcAAADnFABkMTplaTBlNDppcHY0NDqXGl8eMTI6Y29tcGxldGVf","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":600,"pkt":"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","pkt_caplen":600,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":223,"pkt":"LFbcjDU0xCwDBkn+CABFAADRiRFAAEAGAADAqAEDlxpfHs6vWJEERbYz8qKrG4AYJI64pwAAAQEIChncD6ARKgtUY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxMzptZXRhZGF0YV9zaXplaTE5MDA5ZTE6cGk0MDk1OWU0OnJlcXFpMjU1ZTE6djE5OsK1VG9ycmVudCBNYWMgMS44LjY2OnlvdXJpcDQ6lxpfHmUAAAABDw==","pkt_caplen":223,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":236,"pkt":"LFbcjDU0xCwDBkn+CABFAADeIplAAEAGAADAqAEDl0j\/o86w6hjbuZVQ\/XvsloAYKDdZaAAAAQEIChncD64AaNAEMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OpdI\/6NlAAAAAQ8=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":85,"pkt":"LFbcjDU0xCwDBkn+CABFAABHP2VAAEAGAADAqAEDl0j\/o86w6hjbuZX6\/XvsloAZKEhY0QAAAQEIChncD64AaNAEAAAAAwmf\/wAAAAMUAwAAAAABAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455469975407,"flow_last_seen":1455469975407,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52910,"dst_port":39332,"l4_proto":"tcp"}
+0494{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4fvZAAEAGAADAqAEDeD4h8c6umaQbpzY0C9TW44AYjjZcRQAAAQEIChncD7sAQ+m5E0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjhq4aGFIV+2F24M=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455469975407,"flow_last_seen":1455469975407,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52910,"dst_port":39332,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455469975622,"flow_last_seen":1455469975622,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52908,"dst_port":12097,"l4_proto":"tcp"}
+0496{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469975,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4JlBAAEAGAADAqAEDTzeBFs6sL0FM+lulp3q\/xoAYVhCSYwAAAQEIChncEJACXeJGE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjsY\/A3YcaePRRY8=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455469975622,"flow_last_seen":1455469975622,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52908,"dst_port":12097,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0429{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":85,"pkt":"LFbcjDU0xCwDBkn+CABFAABHu31AAEAGAADAqAEDlxpfHs6vWJEERbbQ8qKrG4AYJJ+4HQAAAQEIChncErERKguWAAAAAwmf\/wAAAAMUAwAAAAABAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":113,"pkt":"xCwDBkn+LFbcjDU0CABFAABjNRhAAHUG5CNSOthzwKgBA5Whzqv4VNChMb0e+YAY+6GlEwAAAQEICgCERrEZ3A98AAAAAwmVoQAAAAMUAwEAAAAdFAZkODptc2dfdHlwZWkxZTg6Y29tbWVudHNsZWU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455469976336,"flow_last_seen":1455469976336,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52915,"dst_port":60163,"l4_proto":"tcp"}
+0494{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4SfNAAEAGAADAqAEDxmSSCc6z6wOon+tuBozVl4AYZVEahAAAAQEIChncE1MB8nMrE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjlkC3tYvcSfI56Y=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1455469976336,"flow_last_seen":1455469976336,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52915,"dst_port":60163,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0511{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":146,"pkt":"xCwDBkn+LFbcjDU0CABFEACEZqRAAHYGg6bGZJIJwKgBA+sDzrMGjNWXqJ\/rsoAYAQLT1gAAAQEICgHycz0Z3BNTE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wokMyLr47j7jk1aEAAADnFABkMTplaTA=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1455469976582,"flow_last_seen":1455469976582,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52914,"dst_port":46633,"l4_proto":"tcp"}
+0494{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4BctAAEAGAADAqAEDvmfDOM6ytinSUvXkM6bvoIAY+3dDtgAAAQEIChncFEcAv3iAE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjkKv+eYrLs2+ChY=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0621{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1455469976582,"flow_last_seen":1455469976582,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52914,"dst_port":46633,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+1281{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":625,"pkt":"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","pkt_caplen":625,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469976,"pkt_len":242,"pkt":"LFbcjDU0xCwDBkn+CABFAADktcxAAEAGAADAqAEDxmSSCc6z6wOon+wFBozYFoAYZUAa8AAAAQEIChncFLoB8nNNbmx5aTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OsZkkgllAAAAAQ8=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":147,"pkt":"xCwDBkn+LFbcjDU0CABFAACFWMJAAHMGa2W+Z8M4wKgBA7YpzrIzpu+g0lL2KIAYAQKm2wAAAQEICgC\/ehQZ3BRHE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLUJUNzk1MC3xovjV8bH+iIGCHSYAAAEBFABkMTplaTBl","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":80,"pkt":"xCwDBkn+LFbcjDU0CABFEABCbrhAAHYGe9TGZJIJwKgBA+sDzrMGjNgWqJ\/stYAYAQF3lwAAAQEICgHyc3EZ3BQDAAAAAwnrAwAAAAMUAwE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":190,"pkt":"LFbcjDU0xCwDBkn+CABFAACwJkxAAEAGAADAqAEDxmSSCc6z6wOon+y1BozYJIAYZVEavAAAAQEIChncFpQB8nNxAAAAAwmf\/wAAAAMUAwAAAAABAgAAAGUUBmQ4Om1zZ190eXBlaTBlMzpudW1pMjBlNjpmaWx0ZXI2NDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1455469977229,"flow_last_seen":1455469977229,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.15.48.189","src_port":52917,"dst_port":47001,"l4_proto":"tcp"}
+0496{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4L\/xAAEAGAADAqAEDlw8wvc61t5l0EJCE2E\/BJoAYIPWJ4gAAAQEIChncFslLXJigE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjv4JZL7rS4V2Vgo=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1455469977229,"flow_last_seen":1455469977229,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.15.48.189","src_port":52917,"dst_port":47001,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0519{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":153,"pkt":"xCwDBkn+LFbcjDU0CABFAACLG6xAAHIGY0mXDzC9wKgBA7eZzrXYT8EmdBCQyIAYAQLHiQAAAQEICktcmNgZ3BbJE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wogWCKk\/sCNEtOuUAAADnFABkMTplaTBlNDppcHY0","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+1266{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":236,"pkt":"LFbcjDU0xCwDBkn+CABFAADe4MhAAEAGAADAqAEDlw8wvc61t5l0EJEh2E\/DpoAYIOSKSAAAAQEIChncFyZLXJjmMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OpcPML1lAAAAAQ8=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":85,"pkt":"LFbcjDU0xCwDBkn+CABFAABHCeZAAEAGAADAqAEDlw8wvc61t5l0EJHL2E\/DpoAZIPWJsQAAAQEIChncFyZLXJjmAAAAAwmf\/wAAAAMUAwAAAAABAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1312{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":650,"pkt":"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","pkt_caplen":650,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":241,"pkt":"LFbcjDU0xCwDBkn+CABFAADjfklAAEAGAADAqAEDvmfDOM6ytinSUvZ8M6byOYAY+2REIQAAAQEIChncGI4Av3vbbHlpM2UxMjp1dF9ob2xlcHVuY2hpNGUxMTp1dF9tZXRhZGF0YWkyZTY6dXRfcGV4aTFlMTI6dXRfcmVjb21tZW5kaTVlMTA6dXRfY29tbWVudGk2ZWUxMzptZXRhZGF0YV9zaXplaTE5MDA5ZTE6cGk0MDk1OWU0OnJlcXFpMjU1ZTE6djE5OsK1VG9ycmVudCBNYWMgMS44LjY2OnlvdXJpcDQ6vmfDOGUAAAABDw==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":104,"pkt":"xCwDBkn+LFbcjDU0CABFEABafuBAAHYGa5TGZJIJwKgBA+sDzrMGjNgkqJ\/tMYAYAQFDwAAAAQEICgHyc80Z3BaUAAAAAQEAAAAdFAZkODptc2dfdHlwZWkxZTg6Y29tbWVudHNsZWU=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469977,"pkt_len":100,"pkt":"LFbcjDU0xCwDBkn+CABFAABWJDVAAEAGAADAqAEDxmSSCc6z6wOon+0xBozYSoAYZVEaYgAAAQEIChncGZoB8nPNAAAADQYAAAMwAACAAAAAQAAAAAANBgAAAzAAAMAAAABAAA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":190,"pkt":"LFbcjDU0xCwDBkn+CABFAACwZdxAAEAGAADAqAEDvmfDOM6ytinSUvcrM6byOYAY+3dD7gAAAQEIChncGnQAv35iAAAAAwmf\/wAAAAMUAwAAAAABAgAAAGUUBmQ4Om1zZ190eXBlaTBlMzpudW1pMjBlNjpmaWx0ZXI2NDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1455469978413,"flow_last_seen":1455469978413,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.234.159.16","src_port":52921,"dst_port":41205,"l4_proto":"tcp"}
+0494{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4DnNAAEAGAADAqAEDX+qfEM65oPXUDpz5ZKj0loAYkUPBEAAAAQEIChncG14CELSbE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjvUWScco35PygrU=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1455469978413,"flow_last_seen":1455469978413,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.234.159.16","src_port":52921,"dst_port":41205,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1455469978422,"flow_last_seen":1455469978422,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.237.193.34","src_port":52922,"dst_port":11321,"l4_proto":"tcp"}
+0495{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4xBlAAEAGAADAqAEDX+3BIs66LDm\/gbIP+oH76IAYlsHjJQAAAQEIChncG2YAA5hpE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjvGP0W3l6zj59Ik=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1455469978422,"flow_last_seen":1455469978422,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.237.193.34","src_port":52922,"dst_port":11321,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+2355{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":83,"pkt":"LFbcjDU0xCwDBkn+CABFAABFMFJAAEAGAADAqAEDxmSSCc6z6wOon+1TBo0byoAYZVEaUQAAAQEIChncG\/wB8nQKAAAADQYAAAMwAAEAAAAAQAA=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":185,"pkt":"xCwDBkn+LFbcjDU0CABFAACrIv1AAHYG\/pRf7cEiwKgBAyw5zrr6gfvov4GyU4AYAQLALAAAAQEICgADmIEZ3BtmE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wog5gTbVhOs8MSY8AAADnFABkMTplaTBlNDppcHY0NDpf7cEiMTI6Y29tcGxldGVfYWdvaTJlMTptZDExOnU=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":185,"pkt":"xCwDBkn+LFbcjDU0CABFAACrdTRAAHcGzXJf6p8QwKgBA6D1zrlkqPSW1A6dPYAYAMM1JwAAAQEICgIQtLMZ3BteE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wos5cW3r846cWQCoAAADoFABkMTplaTBlNDppcHY0NDpf6p8QMTI6Y29tcGxldGVfYWdvaTQ1ZTE6bWQxMTo=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+1226{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":587,"pkt":"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","pkt_caplen":587,"pkt_type":2048,"pkt_ipoffset":14}
+0611{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":221,"pkt":"LFbcjDU0xCwDBkn+CABFAADPg31AAEAGAADAqAEDX+qfEM65oPXUDp2lZKj3F4AYkTPBZwAAAQEIChncHGECELSzaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0Ol\/qnxBlAAAAAQ8=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+1228{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":586,"pkt":"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","pkt_caplen":586,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":85,"pkt":"LFbcjDU0xCwDBkn+CABFAABH9ndAAEAGAADAqAEDX+qfEM65oPXUDp5AZKj3F4AZkUPA3wAAAQEIChncHGECELSzAAAAAwmf\/wAAAAMUAwAAAAABAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":215,"pkt":"LFbcjDU0xCwDBkn+CABFAADJsAZAAEAGAADAqAEDX+3BIs66LDm\/gbLB+oH+aIAYlrHjdgAAAQEIChncHGEAA5iBdXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0Ol\/twSJlAAAAAQ8=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":85,"pkt":"LFbcjDU0xCwDBkn+CABFAABH3TRAAEAGAADAqAEDX+3BIs66LDm\/gbNW+oH+aIAZlsHi9AAAAQEIChncHGEAA5iBAAAAAwmf\/wAAAAMUAwAAAAABAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1907{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":1180,"pkt":"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","pkt_caplen":1180,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":83,"pkt":"LFbcjDU0xCwDBkn+CABFAABFwo5AAEAGAADAqAEDxmSSCc6z6wOon+1kBo1eBIAYZSQaUQAAAQEIChncHJUB8nQbAAAADQYAAAMwAAFAAAAAQAA=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":113,"pkt":"xCwDBkn+LFbcjDU0CABFAABjWMdAAHMGa4K+Z8M4wKgBA7YpzrIzpvI50lL3p4AYAQGEzwAAAQEICgC\/gJMZ3Bp0AAAAAwm2KQAAAAMUAwEAAAAdFAZkODptc2dfdHlwZWkxZTg6Y29tbWVudHNsZWU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1157{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":623,"pkt":"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","pkt_caplen":623,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":95,"pkt":"LFbcjDU0xCwDBkn+CABFAABRH7FAAEAGAADAqAEDxmSSCc6z6wOon+11Bo2YcbAYZVEaXQAAAQEIChncHTMB8nQqAQEFCgaNnhEGjaOxAAAADQYAAAF4AAAAAAAAQAA=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469978,"pkt_len":83,"pkt":"LFbcjDU0xCwDBkn+CABFAABFwtlAAEAGAADAqAEDxmSSCc6z6wOon+2GBo3YfoAYZVEaUQAAAQEIChncHT0B8nQrAAAADQYAAAF4AABAAAAAQAA=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":75,"pkt":"LFbcjDU0xCwDBkn+CABFAAA9WCBAAEAGAADAqAEDvmfDOM6ytinSUvenM6byaYAY+3dDewAAAQEIChncIcwAv4ZsAAAABQQAAAAA","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1455469980213,"flow_last_seen":1455469980213,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52927,"dst_port":51413,"l4_proto":"tcp"}
+0496{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4U25AAEAGAADAqAEDU9i48c6\/yNUzq1kTBM6UFIAYL5vO3wAAAQEIChncIiN4G2eaE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1Bjq+Lj4Q+qUQM4PY=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1455469980213,"flow_last_seen":1455469980213,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52927,"dst_port":51413,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1455469980262,"flow_last_seen":1455469980262,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.249.100","src_port":52926,"dst_port":31336,"l4_proto":"tcp"}
+0497{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4esFAAEAGAADAqAEDXUH5ZM6+emiQl\/fDL3XicoAYTYMYvAAAAQEIChncIlIAH\/RSE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjkTA1ljAvA+q8j0=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0621{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1455469980262,"flow_last_seen":1455469980262,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.249.100","src_port":52926,"dst_port":31336,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1455469980275,"flow_last_seen":1455469980275,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.227.100","src_port":52925,"dst_port":19116,"l4_proto":"tcp"}
+0495{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":134,"pkt":"LFbcjDU0xCwDBkn+CABFAAB4g5FAAEAGAADAqAEDXUHjZM69Sqzdpe7S802+OYAYVXMCvAAAAQEIChncIl4AhA2FE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVNMTg2MC1BjlkhEgSgYOOKqPw=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0621{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1455469980275,"flow_last_seen":1455469980275,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.227.100","src_port":52925,"dst_port":19116,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":"dcfcdccfb9e670ccc3dd40c78c161f2bea243126"}}
+0511{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":146,"pkt":"xCwDBkn+LFbcjDU0CABFYACEPABAADIGPZ9T2LjxwKgBA8jVzr8EzpQUM6tZV4AYECksHwAAAQEICngbZ84Z3CIjE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMTg4Qi2qnlHDgsE5LNSCYRoAAAEAFABkMTplaTA=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+1312{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":650,"pkt":"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","pkt_caplen":650,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":354,"pkt":"LFbcjDU0xCwDBkn+CABFAAFUAnpAAEAGAADAqAEDU9i48c6\/yNUzq1mtBM6WrIAYL4nPuwAAAQEIChncIrV4G2gMaTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZTEyOnV0X3JlY29tbWVuZGk1ZTEwOnV0X2NvbW1lbnRpNmVlMTM6bWV0YWRhdGFfc2l6ZWkxOTAwOWUxOnBpNDA5NTllNDpyZXFxaTI1NWUxOnYxOTrCtVRvcnJlbnQgTWFjIDEuOC42Njp5b3VyaXA0OlPYuPFlAAAAdAWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":354,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":182,"pkt":"xCwDBkn+LFbcjDU0CABFAACocqBAAHMGfF5dQflkwKgBA3pozr4vdeJykJf4B4AYAMOuCwAAAQEICgAf9F4Z3CJSE0JpdFRvcnJlbnQgcHJvdG9jb2wAAAAAABAABdz83M+55nDMw91Ax4wWHyvqJDEmLVVUMzQ1MC3wogL0Pl3FbMgdQMAAAAEAFABkMTplaTBlNDppcHY0NDpdQflkNDppcHY2MTY6IAEAAF71ef0Mhifaor4=","pkt_caplen":182,"pkt_type":2048,"pkt_ipoffset":14}
+1264{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469980,"pkt_len":614,"pkt":"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","pkt_caplen":614,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","pkt_oversize":false,"pkt_ts":1455469981,"pkt_len":94,"pkt":"LFbcjDU0xCwDBkn+CABFAABQyXBAAEAGAADAqAEDU9i48c6\/yNUzq1rNBM6WrIAYL5vOtwAAAQEIChncJYd4G2hMAAAAAwmf\/wAAAAMUAwAAAAABAgAAAAUEAAAAOw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":1,"flow_packet_id":5,"flow_first_seen":1455469967550,"flow_last_seen":1455469968002,"flow_tot_l4_data_len":1031,"flow_min_l4_data_len":46,"flow_max_l4_data_len":559,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52887,"dst_port":53137,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":10,"flow_packet_id":5,"flow_first_seen":1455469974533,"flow_last_seen":1455469974889,"flow_tot_l4_data_len":1035,"flow_min_l4_data_len":51,"flow_max_l4_data_len":552,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.57.97.83","src_port":52906,"dst_port":53137,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":2,"flow_packet_id":8,"flow_first_seen":1455469969259,"flow_last_seen":1455469973374,"flow_tot_l4_data_len":1286,"flow_min_l4_data_len":39,"flow_max_l4_data_len":614,"flow_avg_l4_data_len":160,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52895,"dst_port":51413,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":21,"flow_packet_id":5,"flow_first_seen":1455469980213,"flow_last_seen":1455469981133,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":60,"flow_max_l4_data_len":616,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"83.216.184.241","src_port":52927,"dst_port":51413,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":20,"flow_packet_id":5,"flow_first_seen":1455469978422,"flow_last_seen":1455469978679,"flow_tot_l4_data_len":1035,"flow_min_l4_data_len":51,"flow_max_l4_data_len":552,"flow_avg_l4_data_len":207,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.237.193.34","src_port":52922,"dst_port":11321,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1455469975240,"flow_last_seen":1455469975394,"flow_tot_l4_data_len":476,"flow_min_l4_data_len":51,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":119,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.72.255.163","src_port":52912,"dst_port":59928,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":5,"flow_packet_id":5,"flow_first_seen":1455469970233,"flow_last_seen":1455469971153,"flow_tot_l4_data_len":1111,"flow_min_l4_data_len":100,"flow_max_l4_data_len":559,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52897,"dst_port":22673,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":11,"flow_packet_id":5,"flow_first_seen":1455469975234,"flow_last_seen":1455469976169,"flow_tot_l4_data_len":1043,"flow_min_l4_data_len":51,"flow_max_l4_data_len":566,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.26.95.30","src_port":52911,"dst_port":22673,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":19,"flow_packet_id":5,"flow_first_seen":1455469978413,"flow_last_seen":1455469978679,"flow_tot_l4_data_len":1042,"flow_min_l4_data_len":51,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":208,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"95.234.159.16","src_port":52921,"dst_port":41205,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":22,"flow_packet_id":3,"flow_first_seen":1455469980262,"flow_last_seen":1455469980488,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":100,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":276,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.249.100","src_port":52926,"dst_port":31336,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1455469980275,"flow_last_seen":1455469980275,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"93.65.227.100","src_port":52925,"dst_port":19116,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1455469971675,"flow_last_seen":1455469973590,"flow_tot_l4_data_len":478,"flow_min_l4_data_len":46,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":119,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52902,"dst_port":46633,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":17,"flow_packet_id":7,"flow_first_seen":1455469976582,"flow_last_seen":1455469980118,"flow_tot_l4_data_len":1312,"flow_min_l4_data_len":41,"flow_max_l4_data_len":616,"flow_avg_l4_data_len":187,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"190.103.195.56","src_port":52914,"dst_port":46633,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":3,"flow_packet_id":5,"flow_first_seen":1455469969441,"flow_last_seen":1455469969689,"flow_tot_l4_data_len":1010,"flow_min_l4_data_len":46,"flow_max_l4_data_len":586,"flow_avg_l4_data_len":202,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52896,"dst_port":14627,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455469975265,"flow_last_seen":1455469975265,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.53.228.2","src_port":52909,"dst_port":14627,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1455469970452,"flow_last_seen":1455469970452,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52893,"dst_port":12097,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455469975622,"flow_last_seen":1455469975622,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"79.55.129.22","src_port":52908,"dst_port":12097,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":18,"flow_packet_id":5,"flow_first_seen":1455469977229,"flow_last_seen":1455469977324,"flow_tot_l4_data_len":1056,"flow_min_l4_data_len":51,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":211,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"151.15.48.189","src_port":52917,"dst_port":47001,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1455469971321,"flow_last_seen":1455469972136,"flow_tot_l4_data_len":1057,"flow_min_l4_data_len":46,"flow_max_l4_data_len":567,"flow_avg_l4_data_len":176,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52903,"dst_port":60163,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":16,"flow_packet_id":210,"flow_first_seen":1455469976336,"flow_last_seen":1455469982106,"flow_tot_l4_data_len":277999,"flow_min_l4_data_len":46,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1323,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"198.100.146.9","src_port":52915,"dst_port":60163,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1455469967246,"flow_last_seen":1455469967465,"flow_tot_l4_data_len":690,"flow_min_l4_data_len":100,"flow_max_l4_data_len":590,"flow_avg_l4_data_len":345,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52888,"dst_port":38305,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1455469974358,"flow_last_seen":1455469976244,"flow_tot_l4_data_len":1265,"flow_min_l4_data_len":79,"flow_max_l4_data_len":671,"flow_avg_l4_data_len":316,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"82.58.216.115","src_port":52907,"dst_port":38305,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1455469969441,"flow_last_seen":1455469969441,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52894,"dst_port":39332,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455469975407,"flow_last_seen":1455469975407,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"120.62.33.241","src_port":52910,"dst_port":39332,"l4_proto":"tcp"}
+0148{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent.pcap"}
diff --git a/tests/result/nDPId_bittorrent_ip.pcap.txt b/tests/result/nDPId_bittorrent_ip.pcap.txt
new file mode 100644
index 000000000..f0028db50
--- /dev/null
+++ b/tests/result/nDPId_bittorrent_ip.pcap.txt
@@ -0,0 +1,39 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1492508985380,"flow_last_seen":1492508985380,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"185.56.20.36","dst_ip":"10.0.0.14","src_port":53646,"dst_port":35030,"l4_proto":"tcp"}
+2372{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h3tAAEAG294KAAAOuTgUJIjW0Y46TwemgtIgtoAQCI+fXQAAAQEICgBqiw9zhriD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFKAXcnYpAADUGyv+5OBQkCgAADtGOiNaC0iC2Ok8HpoAQAQ+BVgAAAQEICnOGuIMAaon5BuPRLy3uJClpq06N5WbznePjpAb33PwIhDmQzu2amLpqojqD8pITOs+XbaoSgUtCjoMw918bf1kT0PwfNLnQaxL48UHV7myOpaEdJ8VltTypXbxcXCetJJM6gRvH7ym+4hJ4tcr2zekZutLAQjA2A1uiGfgzMF1ut0E7fVqsfQrYv72\/xPwmLPE4vfQ2X8WomSOaMi4wt5m+fmcqD7e+bckg26tp0o+Czgwy47BmFi4tSe42zJqjwrbuZnRxl5R1O\/j7cS3DzHcfxdJVuWBfwx1MvQ49JuS6eYyLe3XQFNuxixXY6GXXeERkcbxBT7Lb1riJflqG+q1NPO57Xk5XbpGzlWX5ncKkblZ3LrRtwKyglC891nWyCbf2GMAiMGfnq2EhxvbsKz+j\/pt0frlmE5XglerKsRhqlt4JvKk9gCPdDlnkSpgt6vcuoRIOxrfm2eTAVfNhx6CQ2IuVPhOAasCwOkG8pUGkqRe6LODGhZMagzSpBj0qEbTOP\/nZ1wDKXgmIFlGyxm0yxZeJOVzBPs3Wrce7TsuReOlTpVaNLpjSe0nIjh79sNpzxXRN3fq+DrJoG6mde11Cr+PE0XpMjWYssAFpJAtA5MN5uyVzdtyGbzHO2mZ2dVQuy\/LKNeOg54Hed4XqXZ+YkcRdAV+qxpt+i5443UdMfoggkY6Dgmeas8IoGPIxy\/F1aYn\/0ntdXOdQCtLaPtnVeWNZ4i8Y1jQqdGs5FP\/yYvhK9ZjwZ30aedmX7HdQavUFTxo+CIzJDcVRVJmSizwljNmn53GAdwtF9ZOliUAJGuhU2aX2CdjlNpcIIhcjR22VSkt2uEj7UTioi2efL2UNX9NvUsNym+l5gYa4e5G1cEFwRCjaIVkqdDBSDJdg3POuDFgeU6vIhhLuQXoicw04wO+Xjc+NIvW0g4HOyvXMjMLo+1lIXWf\/wil860bZ8dcJKnGIOZaWsA0QaDBIFhW1u2oBSFO\/9AXIm8behQDqQz5asWfGHjJdg8Oy0tMlQWMBK9pDo30IjNPez7bfZj9hxZ6sb5FDvSj6iwwn1H6NIpmLF6aF4BPDl5bvjAlqbaae6vn\/bEdweGulxxyKri96vRMASxK0NDSViZF9pzX2TEtg1z68PnNJexmxFyI\/1\/jw4iTSFgTpmkWn\/HZdU52OFen96owDvY6j78ZdkHaN1r4xDrNDPIeqxWhgvXe8ss4awVKrb2YX089D\/MitjkeShQZBZ42JvzMY5MvxJSl2zFv\/L6rNZ7NgZ9+eUWL\/AfLeo5F1xuMTKDJsFgJFmRyraDsNdpy+6q7fX6k9D+pabZs6K158Kg0fVT2yQIBroDGxM1QE8faZZCIHtc4OXJfstrC3lA8Lmy+ub2Vhg790zL7DKhf3deHSySeAIxpQlVytfpOeRHbueQ977qmpJ6mNwxivN07QLge+I5TV9UAm8C\/8mEKXRZwCTgksGem0MHtLQHcHgAyVq3DwvrLIbgJFg+qrY8f3YSjrTKDCxnFFqEf\/k+DpR0PIB8vx8d6i7CqO80LKMLY09+pIsRbs1iaREhcvxtiSQcPorl+xzUOpFF+ynEOJwniCrLZ9Um3lOIQwekvMzVg1\/E8kwhzoUVfq65oC1Nj4qhJYXWBdOegYHdoLPw9e8D61y3JA8fmRXFd1eMX4AQ4se+E0wzfA\/1x2bkZe2YNOndoBBB+Nl1kSDpp36avXMKGGqgGUv8JnWRPrFSmswcbiHJFltbqFgrm3JaB6LsMDYkZ3Q4oWjkBYH+AqtZlcLeDiXmiTreMV7hQ1sYkZnyoS0VB6rFVH+0+WXLmbOY7Um0YGrs3I2CFSOj2qxt9f9kMiKPgQpbYcoA9TAl7kD4ysSlXUeSvrMg63NJUKn+J\/RHzYJDMuRaxlCrLjRkiwIAM6wOD\/KLQPtI6e4VYwtvjiy84faZt6WMI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h3xAAEAG290KAAAOuTgUJIjW0Y46TwemgtImXoAQCKWZnwAAAQEICgBqiw9zhriD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFKAXcnYtAADUGyv65OBQkCgAADtGOiNaC0iZeOk8HpoAQAQ+76gAAAQEICnOGuIMAaon5tAwCHndU0VmrlOg4jDaOwNCAU6N6zjsb3ubxt0dKyQ3Z6XiOh7pGoYVUXi3h+zUpevQJHRONdvFWLtFyxokS0xxw0wfJLe1BbBMwhKojBzjw2f09a9hWhijO2Gt+oTeG3bvxbeTOYp0ub21+HQmEJLPSD+tNgNWdvdopVS302TCApQhThDLzRXjNHFPe7zuea0\/arVMZ433VdZ4yE\/8geJqBgC6DB3j32XFk3NFWSMMwOqPMnZMcg4qqhhlYL01m\/NTXT66exY7ARXOu4QtPKnhvxxIdcBYAHzC0odlSNqMxXAUlWqmEh9ZRLEathRpcuMO7zgCoQPmWCcVFTWFpTpGbUXAQz4mxqt2NhpdIcqcqSnK\/OwjBlyUCrT3fGmYV1faeDpH21Ln3V\/kkrRgKrLNmmuTiUR536sUKuZLBnJt4N9Bjtneq1N80QMWQ7PrTcfpinPqsGRK\/oS\/yb5ykJFcf4LxwWtRqW8lpRj3\/Ekg+Jay0Iapy2n34tqebuT3uGdxHB3JKUru\/0leyV+u4iFQfYmnwwxuE2pWejrdTqk\/baBW5ABGwEjJz5Ncr\/6pKXBzLX13NvfkbUBdcUa0xejhTLOvNPgionQMNHD7llq8m1InBRCs0suW+oH3WZ8r9KrGLX6aaBoUZBOUnn9WB6ZbGkW0wi\/3bpFc9+cgbQZjIeG0g4alKNwi\/hAwZO\/ArzVyViyT7cVDVlZ6EcHP+IBAiZuiYT42TlGVzl5dx3NRuSkLQDMS6myqtOcyPSHLQpjARn7nhjsjc7tg+qvT72CcMtU2mAERx7DPAFlmulIFcD+enqRyyjeWqUPNRLloaSxOMyGIKZENbvfhZzCvxm7COku\/X5\/IWt4gIOgyYuAWWEyDkSsCgsz9MNqyb64fIVfJ3jzrcEeHnZZ+GD2SB7hCGY1qmNNotI2Yae4cA5g0fZhcmqNBEfLXOX2S5i1CNm9SfWBS7snjnSAnUbit9c1odQLXDdki+zsmQmOTjZL3HoXlU3T1hsahc5TM9mSrzczQcflqAtsXWLeR+UsNHwkYptT0ekT1aAk4xKcvPxY1VVweH5sls3hCdaOBoWTQFW2vt0npcpJvJC3jbEaZ5OSIlb\/lnh7SwcAXU\/ZSu9DjifldB2d6vYdY77HN7t6Isd7n4RnbY29B4cjRM4AtCsZrmU96cJWJ9sctNIffjyST9ly+l1j8OTFO7LvzY57DkgM4lOrNmvFXta54lZzXoDQzIMGTuKrZozgLqETS3YbOvkLkeOjtH7HDTKBG8AR3F+xQhnNCgqYUW8qLpowWxPOV3Owb1NnLSEkep5zZZNnRM5OfsybMpwp22y+sJytUa7tn2HnoXGKjakF5seqCxyuK6MZeOe\/JbGLuVwLLGgjEVja3MJBYU0RKpco4GDwyu8OeXiH36GR2XH4CauCoUyjeCWi753l8wC+2LS3t9ss92IgKmPsL\/W1o3A3j4z0AkY4eOYkx8pgld2imFxNcSAbPdtv1P2ioSBrlTjk6rAwiaKiuPIeLhiKnR6FfrXioV739S9fjZjLbbyeJC5yVNzh4d\/eWMj8WyiFnG2Pher9on5WzHNvL4mdScTzTNJGqIzBd+fzkp+G6iPOTJ9yDxhg7xtxK05EB0aMZPNvC7j85JjKMwWoV+Hta1LQRMOYfrjOQHYH6FDG5HecotvgWpS1VrddThxsQf7aA643TsiFLz1q9YF9YsCWuU8+XGJojjVo86ZPALrQ2lBPpBDlJObdnAFADxjnSg1gZ4x1iM9BCILIf8Zi12vV+KmZ9Ler5Kv7wqb9JjpA5rb4vPxF8fdCmcczJ7Pe7zzftNHWAs7gzq+thSOCKC3kq4St4HLV7iABNrr91pWz6umMk5Qtd3lN8t3j2w0RYhYKMrsC96FfRtB2oZ3PGNb9Pbmbk4opwdNKFeEy8xHpU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h31AAEAG29wKAAAOuTgUJIjW0Y46TwemgtIsBoAQCLyT4AAAAQEICgBqiw9zhriD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFKAXcnYxAADUGyv25OBQkCgAADtGOiNaC0iwGOk8HpoAQAQ9uGQAAAQEICnOGuIMAaon5hetExJi\/+batrVH\/zLgP13yNI+iOZr9qFftNhmKwmrWg23XNXvaATnGdKzRHQxkeVKIgPAPTnlNZZBFa5bSTUeYTxOqJ9HSJ7YjeKvM\/70m7WFMiSV4T7N7N\/Z4LoDuM3nCAR7MMSDJ5Rwe9wYpEg1kfr6ssfRcjdfXZtp3Sy64Zn26bOTid4a0VP84Rbq16n00puJq8AlPxjQ6JWiU0qMcm5o95UR51T4eD8zGwfbDBRycb1q1Q+K9pmNMwZ79ui83mxewCIoLAA\/fbnsTN6Eo\/agV7K+1Jh9cTxZ3K7t6gvi8fHLM+ZNBMds3MKM0j253PWhCuSmGjVO6KNqyBr6HV6\/m4GgCSdquQiGAlngSsnDERAFjPCy0wC78GDo4MPPYDBgOtcG83HuOIZjNB0VWrWJltqXtLHlApjpk\/q2uRSmG5ld\/JgTT2i8mBEFs2OUFD8jCGDN12ofA0ntjwc0fTcwwS9OTg2+DOW96qOW0kRwktqEe7C2pEB9m1vBcPctFGt\/mtcFaopF4\/KhXeC5SivWhX+5BsCsinQD7RLupibmsDbUk6vWpjaBv1AhEpcGtyfbUmyCMaXTq\/PhnlII6bKdbav\/xuHEbPZKp608cw7V1Hk8Oo69xIXWEc4LXhm1pHHnHJujzgRyRcM0\/aADKuFyquxS7mBxabOgT1zrnJDb2ImZ0f2YMFQEUmoHTQPfV2Ijn51KgnLMH1m34261SeobCzjzAXNWhzTcFtJutDkNBCHljySm7fCg+2dHwITe01jEzMQt1g1+urJwvHn5N50cWkEe5d8U\/a2srBg4edLiHlJKWbk2+zhJndUl+pzfY5wVCFTQw45XbEckHyhayNKh8i+YLkacIi39I0LzUdoSNj6D4zNqfKlundfuKGVtikuLXhasigKW2zr\/MhWe1TyM\/FjtdshnMvc9aI5nF+EB7boZkHQuqjUpyWwV42xl8OLknPZI89zNknIKSnz6FJ+sXFmL5PvI4Hy2zr72P0JULPEtpxYLVlc99dSOrHtVwPSKM1AQ2FR7+Wzs\/nFyYlB\/FCqGL7QPleDRKkPzI8M1noyuIbWtFXz3Ng2tZ9dpuL12JCdqn+NK30nc2ihfAoOXTSGN7++diq+Q8PpUbnOy4xtPTyEamoISNBZxXETYbdpwUyHwBg40xdHulakaDgUbfTsMFk3W2o\/hOJdL9v89\/i+bxTmW7UV5ieIAWyLQJL4EoWoFdQc98wlijOow5KEd2ITIa4+2Z8FWuADt6CZiOaJ9zmk2baD+mioxsG\/fNBcaH+cTT5AGiae7I8yM06UPRwIQVn1CaelVSN6HOTQzIDgjpqJaJX3Gbzp0cQNqKc16JGKO0Oy1aOKcFcezVQRyD4DjiXQSBi9OVUMstM4A2wqXx6KRQuPUW9aZLiGH2VbBKHED7agMBWlyAioZpkVtZBNqSK5RWRIVsP6rpKPiU5jH9Xgyu9tKD8MYQWq+3+\/7gE2Dw1xMIp\/9qESHgRBIwPbZqyjoucYq4iIF0hDumgwWCXCQlukmZwvt8LfLa+QKEoLXbDzBDNg0SS6qpeqixpo96vgzYWc5AYtZleRNY5keOQMUpTtoQmIYDD8qvtd+N7qtpRlb10KnztVe1adQuTOLvJ3UHt+EWuzr8avTz\/wyKlNjVKQwptXAY82doVDl\/Zfz0gtKaTPuKP3r6LavkDu2ast6n8DFzAydUDH0oZ5zMnIpLWc08WFEuXpu6NNMlguYcpaD+sGkELClTBS74uX0Ksch\/oJnPltHPJJ2WFEYM8\/BJWh1EUJD1OVeE9lSibcKGZrM1Ll+obR8AFZ1oaNx3gmQFn7FcKLdORkx3RkodK2oMCc\/yOITo2R7IYRbLqm7WAeTAgeMixf7HprX\/OgAQgjyRhtSqtdl8m2Ft0adyzgCKuaLa4rH+uYgdxNEAl8b8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h35AAEAG29sKAAAOuTgUJIjW0Y46TwemgtIxroAQCNOOIQAAAQEICgBqiw9zhriD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2370{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFKAXcnY1AADUGyvy5OBQkCgAADtGOiNaC0jGuOk8HpoAQAQ8EXAAAAQEICnOGuIMAaon51lfhYRPCmyHE3gXhaadZNNTH+OGUBmjE1ElOZ7z+SoZmkgK3aXaWLVEpkzIH7T7kko2g7\/JUGLkIyZ6wg0Xb4hndGSu4MSz23L9vFGudGuvvZ7ZJ1KuQshtTB+GUVXIaUhuqPPodCePCwjddVUyQMIwJrRVDmJafTnwXqu3k+SNh4HzEhTmT684yn+Bdk8CsgydGn8iWWHJZFVW\/5uTZMx8kS1dwRmmg1BER9F0MysQktRAnxH2DHmD+XYggrzCbpH3jcAX0kTdlv0NmdFLxqVzZFhzlRepyDGhPxuqE5mkoZTOvWNO8gO8uZ+ZEeKGmmjUDmtEou1aVSRzpr1gdQF3SyER8np1stWkWPCQo\/Oz5YCCZpr7Px8u1wmezvGqeqdfL+Ew836Yg0LjOVdPRC0nk3TEnL7CADKb70N7e0unG9i85w++6jshVgqh4+LmaWEnAroOiPmv7HJ8QWqw1WAPIwhauUqLI7wpIcMFrhxH6bvk9GZLhdtblnllI4VhpyPRfdoXUu9Zxc7JsJDLicZSUtvGDhA7TFj1w2ze7WxM9SfJi6702eGpaEXD\/+MvMLpBdcLP1o\/DSezAeey+0vOtVDpAsldSXCb\/PgHXMKhLa4KpCxLFuvMjXhzYJ1Pa1jnkL2SAq17Sd\/zLlzDCUaL1c+Vu7y1czHENnv9G0\/tXvc4+lSxPPsJYqp1ELL6VJq9k\/siSIFn85CQ3BmmrDYR3nJdbBf9dr7sYvbvTuI\/tIN9eVcG4SJ9WcWuugGrZeeBi6FBzXk7FBdviUHGSNM4ibPdpeB+Gw4wUyMGb5ctms108vHsMa3c0SCRQ4rFDPoIpXcCuMryycWXAIevBG3kmzwpMtR+e8Ae\/ecnZakWoZl3kdT3Oq0Xli59HifKYX8zkB8MzBPLQe04fc\/Tq0QS8KgXWE4g7kwQP6\/9WssMyVfb0ii6b6umrnVlHofgO7HaPTt4LbM5LBURM34tUlwWhgBj47FSsVDSZtpoeqcMQB2lRxSY1S8xS4OM5c\/BSIoqOvIcqsssI\/fzizq3raJ9ZHpjPffmZOCr+HKaXv4Dlsxpf+wTlnYSVNvTlHKVjiUNycDZkgNi5RF6K1skiUpgfagyR5xkiDr4wEPh5fN3fkvH1TXhkkvz+LiRgX6aMR0cRboOBt2PcrHsplfkptRv\/yTY6fW+o+\/x9Pc\/PVKjiknOPavXXhHwArqhQKnX7sZoFMr9RY+MRGgXqq5KHIfxFsW8hpSi6s\/9\/qP6ED58DtEQ5Cd8So14QdLBtp7lTM1UJvWGStjQFawLy3rYa3L3kmPVxAVFwDVVt8UnmdBSbn4vlU+1Ejp8VFefokVQ0I3kfGnSrQxjsGBXNwTb\/+YV4ppLETCi3fmm15ki7gElwP\/rdRFXId+YO+4Hm3+CIIzS0pM1qJX9iTCuMeoCmO7eiPkQUijiFaIgijQAL9FpGRUB\/HQ3H8Rbxdbg6Neb5NR\/iaB0NHlhM0VXtrAYftiyk8s9677H+Kqi5AChxUwhTcMog49GioM4m8HHaX5jCQw\/Isa\/iA4VAFkZgsMT\/g3rWl+NmMlrAtD9qfKEJOayYyoJ8IAVcDQpS\/jBSrSpqD2SiH82i65ciYCWttB5G4k+KO+udzLjula1++aOQvgKYcp3aQV0CZmXh1hcncsmwel1CxRFlB+7JaBSVzKBmx8FBzXdaB1AsVibpynSDk5ADiPwtx+V9KHFk4QWfcavT9hronEwesjJL5UsxaKlTmS5+o8xgDejE\/4BiWE3lqpwL3G1P2G7GH9YvlJSlOZVbGAGzArpzJAKk+DDCpTH+4Dq46262RiktxsUAvIQRB35\/oWoQeA3G6q8DGolR0sk8lCVv\/nJuaDkAoCyKtvLtVzPB0zorQHYs\/T1mQHYHb88\/jyCTSY7fxAjROgiui5bzsLcssaeDPIMs=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h39AAEAG29oKAAAOuTgUJIjW0Y46TwemgtI3VoAQCOmIYwAAAQEICgBqiw9zhriD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h4BAAEAG29kKAAAOuTgUJIjW0Y46TwemgtI8\/oAQCQCCpAAAAQEICgBqiw9zhriD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2373{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0h4FAAEAG29gKAAAOuTgUJIjW0Y46TwemgtJCpoAQCRd84AAAAQEICgBqixFzhriG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1492508991649,"flow_last_seen":1492508991649,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp"}
+2374{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFIAXcXOtAAFYGvBBN3q4UCgAADgsythIFf+1oyg3zkIAQAQTgjAAAAQEIChotFWoAapAXo34tMz4skfaHlYY\/ScNpDxIpCs+P5jEsNAxpbVkUCDph\/pBzMB\/LwnipjHQtHoSdK8T5c6F80YLV8r4yOc6N2BSayttGT02IcKpL4u7OmmkC8v9\/K17IrOvPSiKzm8IXRcVGvWLEe7mSpkbGXP8Zg500fAiD07gmzEjqDvcGQwae\/\/c+fT68j5qTn4EIMnlVV6K3u4\/YjaSNQ5X0kUrG4oshGwbT6lOr7qjrcpHx811m57vXMYMYdLpZlpYL3oCUJJoZmbYnALEOz0mDJkuefbnLwlSq1HWKxOP+GdZiMuM3zqBFAhRFpOw0wsHIgYwiLZnjgU2necxHkVHPeXyRvs7PXtFfjrsS9PYsP4dh+js8z\/HcmJYGR83xYLEXA4a0\/eDgV2ZN3mJ246foC2z7ESpSlbDC7rDC7kxPuL+vxgE1IJunPjOeZX8vRzrWdOhpseT6UBY+SivCjRALwumw8jaII\/0avXIXosCaJWtRKZMmdFQaTdoQK8gsWTQBoGt2TE2kZXnWB\/rApZxcgbQEyzgxgcTfZBPcV\/3V1jRhF4D7oaPJc9EpwDGnjV9Mav5Q3stag588iPoH2gzQBtl7pZHgOHi1XQcz5kB19l3w4lPjAd5YKvzqL2+O7HLsqkxJvCc9xdSQMeZIq61Xc8hUjm3R8ibutovYPhKqO94ataVUmAYrTHLBUiOgGFBdvIxrvTCmQQ9Be+7ybkUWeqSsixsDWzQI5UUaBY0MPN+FMMQYdval+DZSlnOiTbIx1T7PKkq\/0wFPkNyo0knB1r\/EsQVn2O7BFGfSq4gT9z+dYK0E9w3X7FjlS86WoHdTb5RRBw8xH8Fh7dSqdNJBR1IzH\/32Lu5S+67T0h\/5z9BRLTqqyqP5iwd+vtZ0GOkBYlS9TsOPdxhIjSaj1w5CC827\/kTX3P5CMBTKq5L34ltxCBEy4fxlNOgSgyr2c8CzN7W3+9q\/2lQHIwhVb+JW8Wui9hDMNU\/wujR5n32OFvwD2QHVeJRQHs166q6yxxlMKx68f6TXlexEhPC+g5jAK+iIE9t12iL2zbNyEIrU9BGVwHSjvi9dn\/R2rW6+XZTQ5m9I2MvRHE4KW0mfjS0Bbxx07TQtwhn0mE\/CuyZtLYMHn\/xUxoXUl6ReTcf+DQcD6PDQVb5u2Ac3XqIXomVn6ks7GOKGpAS1vo1sy9N9B92UnP\/Esv0qk5vYtzQGnayZMCdNm5iN7cXyeHDQvrsA\/syaRP23zdQSDJwkhDiC7grWYuL00L2z9fymp8OdI6qZlZmC5UP5erWZ\/y\/NATjfTE2lPIZ4CufAdTNaV+HL\/OENr7VzqlcUSPMJUpZe\/uPBX4hb5PTr2k79iqBn5W2bAOg7f8OUTsuGNCRx2esiT77WgsjtYMLWGohNp8xgnHEQ\/f2U+Umki8C6MAJk5V+ShBv27oPYtAaESwDy4i6pXIdNqgYbuC8tjYHTTxYVK5PLBUAnT7sfWJ9tNba8K7LfESYNsMZ2NEyYLSogogqOIBqX2RhGWFxZmcmNyMr+mipx2RqzLPtlvv8+kvPsAMtUmyl3amIiZgIvn8KvwnKuxavASbzL1yhnGFf8G5TIUTVmmJkA4hggxNpWmxxcPef\/HOamo4tsekfmXeSCur6ixMEpKu8xonqrX8ZyK9dEJzbc4+ry2K3zY5v+u6KriUQwOdDYzrn9xlIYWXlKpIJMaRT7Yel9DnXLtQGGVgPboCYRdqKv8AvtOJ6Ejw2yug8KSDGMadC0cnfSs\/SOYlGavKDGmtW94SCRgDE3gRafvD+c0eaoWKwQu9\/JSnpokqEi2gK8TdXJt5arUnG6ISh\/qG477G+d+KyVZJFRXyLBDKMJVuCHgdN+PBrPL2G\/4T28dATlQcAmGchVsj0We7WEFzT6cH7Ok7VBXgCxQGetulH4jjNutVlTNpowG9g=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFIAXcXOxAAFYGvA9N3q4UCgAADgsythIFf\/MQyg3zkIAQAQTEnAAAAQEIChotFWoAapAXin3jI4ARKjVzLsHKHqf0eIbRIWzLABcT2\/h2G1F+6R1+NYd0dCvt0tnxxfqRWn1RYuahphiLQ4wktD8lNPU4DtXpNdlpqumKgvrZFXodsWrom1N8t6xryu\/E0m1Z1ql1ee+DLth6NH74VmruNLYD6SnIbzvOwjO0xPCx33wakRciHkq7RP5ztglIb5eBKAYKpFTqldfebbBBj2NzIkO09M5Li6a0Q+yGxmjFz7xt3wmahWpzenfF76rsuBEBdPOGn3cIIEo9V4GpW\/1Lcy2Y6golYpINKPuoe051x0p6EfkwNEgNTVI5PknJjh8DLQy+S+iiabNPy4Wuz4Z29sO3UcTbI0FXzNSE5+arxO9fGVzsHQZMzMmCpF9GrK\/B30GHG\/ZyHQhyziSR6y4xyvAdJ8nTfZFnUBURWjDzzHbLKGnUTQljhNTua44LZUkCPYPLvnSqy3oyAbMNEHf\/KaPyDv4qLw3IB7d\/2XNyxwUcZzNdmB1fwMvTAkHYUi\/uqnAjN1mXJltMT5wC7iN8jYNZNjPeE0a9hYlUtRfFiUPLxbpYYVapCnh2FX+Ctm8GX4fkqVbh9kSeGcLX9kJLBzDy3Uop3tSAD5xZHmhI9Q\/IPKsJ8jLCiu9IY8O4W0azacMqwq+e7GXbIKTziJnlV+q1WBdAYrxocVCNXeDGKmflDYMiuGvRsv18Jrf\/dTmHFWW1R1LuDQtpnQOev\/ZBOBXXD88wiwd8mSiCjN+1vRnCm3P5te+C1QJm4c9BezvsE7mVWhUpIyw2keZusvaHbIKjJv5qf\/xE+txjn2o\/x+3YZBsV5yTHUYDBHIRKiiAfMckqW2pwZZOXQ9IlIQYT5UN6o1EA4NhUw7oaR6J1NgSTOxxPFScL\/3+F5TDHrQg7TBZaLbbHXVKbpo7mvD36CLfqDYNXssdIEltIBoy8AZRd8xI5GQuI5gFP6Wjf\/3ooDq6WagIW4vzQx0UC3+X\/w7COBEw6kRpulcGFosgCWGhwgAMrtTSilcfPSfMq2VgN\/r6xOs3egY\/Ge42To0LGUB\/vnPYy3Cy6lIZ0jPqucO4NwE9iO1vMeB0CPQwGmzE5iKea01O9t8Wm6iirfnMI9eXzbKY1ux0ThzsmJTNJBFy\/WfcKj3WsWoJBBTgEtxjS1EqielS1GSFQEHjui24ubSBIaCgeQ96sdh3IObHf9FOqkiMIhh3ltxxCHP0Km7DyQzN3HJcL+xjpP3Ae6E+FFo7LOGrYSDbyWcNXbSISJHso+3Znv6YGWBEbXj75Ie69B+d1sZ2\/Yk1ZTb7seX02Fbq1BL4FhkImhuAJO+JnQ1p3pchczUOp8T53M507sNc5xmvei1IGViEBgZtci6UfQl\/2Te3fVdx7hdovgWOoa00R6VxsT2gGeWrcLix0CkBy5U9C2qUC07JgOdY9ysGZcGos4SlBO5NO0xM7t952urMo8OrVFsXvdL28d9XRtQJY7yQy60XKugdg1UYzhmSoQyRjNi5m9+\/V0YeBm1pOWdj\/gOvBNko29IxSXZuGaTEBFpoPFVWPMt\/gVGpFT9m2SwjT2XBytKEyjcppJvDRynyqUq51q\/MW8\/f9uSyn3Q06zJDysyVOgWA7ZmGxp5sxwT8\/Em\/M\/euPjOWONXGNQ2lnBuUlQbOPYhiFMwptuMeZck6Sg30qMH32vhZbKicNnkmDMnUCW3ChWQIe01E02FgtEwaDgj46+76jPfyR7Yf7epGBpMrhlj2Mh7rQWgjjhegI82Evg\/8nW64VVVvU15kEbexGTS0v4x8KcoGnqIsBK0MLIrq8jFQLhK6SQrGlhfZvEzJFlf+4TGr4C4UBx9AnZ8umxn2rXOXQCwiwqElsdIs8KReJMwfCYtUvdEmRNXmClaV+MEiWCDdLnx3HVC7AO6ywQjaBwA25YN6L96xFQTMRuEeo19Qvx\/8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWFAAEAGg2IKAAAOTd6uFLYSCzLKDfOQBX\/4uIAQX9bSmwAAAQEICgBqkS4aLRVq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFIAXcXO1AAFYGvA5N3q4UCgAADgsythIFf\/i4yg3zkIAQAQTGzQAAAQEIChotFWoAapAXmUACt2+8PCNOKC6Defe1JwzW4W+TwpKigOZ3XZeSbJ\/3Hk\/Y7SjL\/fSNtTM9c0ml1ufcsPE1jPGsRfiBDZ5YZd3977eMX2GGM+xwBNddEx5lU8CBsBYK7dgI\/AxErd77cEkafTF+aOqVXnZqs8c7btYpZrv8TtXLGB+pSRX6qZgf\/IJfObZb4Xi83z\/lwzyVJgP4XB7vpF80IlPVTvwCxAOo7q+5HVVB\/SXFGBI+tbQHVnYB4kbry1BPpzjrkkQbpJoDttiy0X2FaLIjkT56wsZzFLJ5qRtvFSKEGMi19yt2y5gjq1tpe3vaEnt00\/qwgeWSAo4BwAesE7mnBKKQljHE+h5CY7lsbdY3ZKAL5agK7VDv4IE879PGFXBUL9WyXm5ATzmGva5fWiQ2Zr27GA0T9O5SsZOFsPLyiTmfilm9F5oVsjUDYvNA0QNtPTNAUPwNlk1b6Y+aDhIlJF1kkQsa4CozLIcLoI2Pz7a4zX8eg1lTquJDCB\/rEh0LT\/Y+FNpj8ftRK1fgxzZcfraSQSo2BkqC\/BXxzpdVcvZ\/jGTu+holOLTbQt6Q92y3L6jsGvgFWidzQEDl0mb+Tq0TOiiblmQ3oyd2PN+Jlh9uj1OeAr+XMd00nEcFdQXp3CaFYi349G3loKE6AxAmvOAhAZTuqlVTkwk902maqMhIeEPHX5WvTqwOonjPmpKsh+nBC\/Wo4JT\/cdokibSGWwY+gaG3Z4VZhNBRP4hKN8\/tbCBtMqhIURTh9GVPABHdJtZX1x1ynjvS\/aOiLEJJ\/5\/yu72iixe2wwMxyuWsoqHshI1RfzLncme8FY7wXJ0l5j06qIF9zyOEY2U5ORwYuummPU2YZvcvB0oM8+DEIEoS66hkbsksuHf64uSK8AEY+7hWF2eTgdtTxJE+T\/UvuGUUYHqu0s8f75NaPzNRzBRMeKxLp67wFaT7ymwJSlBxmcPNBg\/Xjw4RC\/p2P8ZtEhq7hogdv+doCBTaIVjdSP5+y0PUVCTuxE3narDz+0ID4AYfYG3XKNv0Jo2uHdaB2qb+VANtr+AyhZqqqKVSX9fiixapz8UA0RziPny8DGgHyosiwp6zZhJ+\/wZYlSAdxnw+BmC19uDKyvf90UldhIyy+dfPCCytB3msAgt8wyqZyxbR7JTrd64oGvTMktxymGxxT11ZbnlVxzu1AlcJoPIvBM1s7QFB4+AKS4ir5lh+08uPP3PrETksQ2KSFyArLP9vWitg18T0Z3xIP8grflM372zb6IWDDTBT\/XK7E4qb1B3XMYUUvxYfs06RM+vcAmClXY7d3TyemxJsZR4Qz2JZhav0dVuunowcCxHoecp7h9pHmtUyaHV3YIrMoPNILmO0nxNQz3wS3d3g0D5HJ2IwUwyb\/02LuZwt9Y+1NBv8IX\/9wD9iw6GryuzPHv\/xJEFRww6LLVd\/mUMQajhaJJKCCfJhipUaSBZ+npVTMr7ofrMcrmGryzfwUMxYbfwUMbZlNiqKnSqbxEwjS0PZq1k87n2c9WQIsIqfOrCYiu4bFBUqjVKU9NshMhY2WgJyixV3PWYZF5ovAcOs3tdvkxu10U2W37H7\/n9DZ5aEJRCK5AVGeVPI4I2qCC4vA8i0SJ6MEkH+K\/OzIh85oP446uBQGKCxRlLxyNsnZD92xMtW+dzG5eSC6EUPy3ale\/hKt2M9NA1X5sTdEtPyUFmmYXXiOXB1uJozwk7rr+Dt1k90gfHE67JYtJUPxJg0KEV1jk\/uz1gVMWR7yotRUZd4QnFL0gMruJdmicdaZjNSn\/e3wBZ7mPUlZ02F3zVblAC02NWT1TCEH27SauEzflqLwHWscqXSrUnD+xCdsXOa5+u5snj1pv49uaYWzFD2AxraHB3Bw3aaRXc4hliKvLPf9W0G28\/jZsHLW65iChxv5XzkVU31DOxaE9DGYwU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFIAXcXO5AAFYGvA1N3q4UCgAADgsythIFf\/5gyg3zkIAQAQSKpQAAAQEIChotFWoAapAXr+ghlAQKDML22o0RI5m74TOL5me+6QqUxyQPyMdg1Le8I06MVEs+Ejl4WNMnx2QAQGGYu7UlMgLMHq7L8x5LIpGA\/Gfzl6noHUyTh42CEdJb9iH5U1iSBO63rcioe\/\/URuJnq1Y5Ni2gJFaH7de\/dW\/ZRkuxKZQMuS6drr\/bNE\/DJ\/to0Kw0GWkVsKv8I8HRl6yTqvBd\/kEAAkYvuDM1pXYV0je7JSpGfaOqpmpVPoU8+7n9M0zhNlSORXoWipLosI18gN6KThD9KhuwheglfAyAcnsm1PBcQXH46DBtVVmKrmmmd530vKUTALVfFc77R69Hb\/PoPR66YoWUcvNlgEuc\/lmg8RrARiOLEdXTKpP1rLckbsXMaOwuIdX0rRGN1GtNjdwr6J\/flHdcKcuCxZxdmS4xkEunRdQOjOACWhGj4\/2zv5jhGS7fh6UbvBNEN6FwnUjkF1PnQ0e7nduKIgB9FMGOLMNN60OoT\/QRLxQRJcFrOB6cpZ6rcV8+GneSGl0PAqPl04VMl1tkAOVgAHZjCnXt9lbUM9v3bLXCi\/tLiFYGtlP+4PEB9aWyZaBKVBuILrVg6NiOMcZmuzoAOqSuakYng64e0FtF7aptPKVwnY9KfpF0IiM2kx\/GHIchJNSvYC\/hiebZ+S0hKAw8V1VpNexdN\/t8ppJ+gVyp5mizun56H2XRDkdrCQOAYu17MnQRQ2PX2KqVJxyWkH+YcqruMv+tPYY2hdaaeDYv0yHPo5KWq2OTpByR34dWZMAFbo5Vu35v1HAlQ2Qp5S1lsD\/HzMIW0oFXmLECwZOxlHju1J16fJsokTdLK56Yo0YZOauVuuBeTo64L8SkwWYGfilGwmpro8+q9umhjy0GR5s0F0z+Lcp0wwzuhCr0JsbZUjL\/+A+mbTagkxrHciy4dNiw1HyXzU6LikA0Cu7Y3XYB3fvM5aduLOCenheH13ypnBhzQmzhPDE2eOuKxMzzwCrq+zFruZtB3IBkURKjNXTa9vvV\/\/Ghq2Qta\/sddWjNG0P5vpng\/AHDlbTRUy+RfWYL5YPetHXQb\/jx0GNZFRuqPLRDhftwvRmDWWUB3fqNU9B\/gsXvT4ssh4t8FmmpfLMZGHs6fi+y3lI6zz6NOLT6QY3PU1tcXP++s5cFz8hUC8FQEl6AHgGDakW2eoZSixMMPNSdaHM89lM0LB2XWmM\/vKOK4n6WtHjZfimaqKOgQ1v8JENCkaQSaTdlPAe20RJlgdcxTFlGIcBp5ybfNkzyGY8itDq9oi9wBDJSpI44jgDeQTUSTpNfuvPvcLP18cL5gAiWF59f2LLzrfTGgk2jlHRf0NxpH02uT+bPFpJtwAvqaS+QvHQ7el9qZH58kRbR8xWDM1wbmt+1NgJGqjNhGYVmVtKed\/Poff4P\/TQXgXc7oGXiiO0DKoeQGGGrtB0sOFeE4f8LgjGjI8yLhQ9MfkpACiDM9x4JzEDwixH+fczZbMmGVXn01grXGq2vqaad0eOxhvjKG0U7WoSbWhjGySjSoKKxi9OzFhDZST9ZfeBHhsX5clA0fH\/bB6fVQmEVGokaWLgHKAI55si+nz5gLlPw0zLdjBHD9ZA4uJU9m0giINTNZB+hIgsXKSMxACdXdeQQTnBvmWkdZw0gC5SjRBIjV4FmoQg9oJkzC51g7DMpPK6VdUW792gu8n+ZjWFGyWsxjIpZSDSH8HgqSkEy70NnBa6FGBTsvGSw6GWbI\/OuENtFrfiTXkgMkafjuqLtwKLjp0wBr60aGU4ZeMVe7CMADGVYDVp72l2o3d706n5MwDC99iORiWje8Hml8B6C1KrxckUrC1Xwdftf\/UT2q+Uho8JH6iOLJQGZTJP4K7sGv3D8PKas++zaX9UYfUZtrZyU47FCRAGbIayZAo43sO9uycwohXoA4+ngZr9M2v\/cZFISIoY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWJAAEAGg2EKAAAOTd6uFLYSCzLKDfOQBYAECIAQX+vHNQAAAQEICgBqkS8aLRVq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2369{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"GM9eF7izpL8BAjLCCABFIAXcXO9AAFYGvAxN3q4UCgAADgsythIFgAQIyg3zkIAQAQQViAAAAQEIChotFWoAapAXLFebLODnP6+dEHG1kcnfenuhKCU01b6DgzJ+a+\/0w4njqydhRmQajfD1+LICTKZo+KsQoNlkbokBiKGyf3IocFCJT87QY0g\/PHfi1pZqrqVrD7RPWTs0exTwZ4i3i1SwXmDuOU+zqkMTSDLCX\/SN15673WM8Y\/F+kQErBcTybhOk0eLQtW31K32TBFKQI29IdUWhAH08LkQvR64p2F\/Zz4zYm5KrmQyJx82nMUxLToUKIpanSWRztAPsz2gQMMo\/\/0XYrRv+XX+p5JDcb+yDNCF+mBw+llmYYFmb0ufSJ7GMWjs7VJ70TZBAWyE+r2ynxWPfh1DBqOGNe025ervu8r6cFqMGQ1osCm0OERyylfyvjivcHf6oldaS3ffCxNZaVCCqA5gmcUkvV\/xY0AKp9daUSn2oEz6N+6v6sbSu8VNAK+UmHfATOEqTH+KLUo0vEdyw0G0V49HhWbNwbGaU2cbz\/Ky42Tzbrb3DVdEBA9AKxeNijYdMviEvVCmHAk\/IE8dkVnSrsUVHtDrhaPKw3LuEx8pPWwAJinsrsXWWoAJwUAtpRkYfesIMjUSqpYeo0hOcUA3StytrcUc8PkisiqCz5j9lc9+ZWNNaMGbQppLj1tADTZYzktp8X3AArf21vofUqOOWiyW9m9lR1zzp16chiLXw6pCedVwBUAkec8XxHR+Myis0+o+zzIK5uLVNq\/aPR5DZnP\/puyDxvDWm6uR7Ex8Ce2m803frI8qWav6sfINtQ3Z1BF0hcXBhlHmwUWKZURtAdiQcEvJKuq+z8E+XwcnZSCJi\/X5tev+O38zlkyCaJtNGW\/2HtSpZ7pqQmMTW34ZCpB7MlWh1M2dszfmBUlu8Xq926mHUEV9qS2O7mv13nYIAHJ2pmrhKefLEnq1aIudvlomn\/W6pJHy3QqFSdXfP1RLkbBU2BbgR9sHCjBrBtlkpYae4Icmr7+d+cv5DiVYbbaCnvP8NZ8rAfsgIk3GAysLAGQ3ITHXdXV+787oKmzp02TEnWHJzygEntg5DPZ8vHua+JdZLQml27S5M+e4tHNAB5dpuFEMYd2H0321H9AMdmLLdpluWHbqPCUd8ZZrjfCXgEEssvXsYC0oabMpsgOIed8Az34Dpf+KV4DtntcLArvmdJ9WaxxTz9OICUSTbaJg9c9C7r7JF4XqTdkPj7+8CWJsWwZeCoTa5PYzfuzmmRS9QkNKgu9DglVGU\/B0vQvFG9OjC0PSG0JYNFX8y5iNoLKHJUrv3N\/HiJttqnG4fiyYEVG3GahmQNNiJSyj9v5+6d0MMVr95S6MAE\/8KkCh7gXJnNdppNj5pkTZyEQQSI+slVok1cfqwhGbktk+sn++b\/txjXt+IBCfzFBQibHn+dP336H7vvrNn2A6CxSHgiug\/yfVlGtA3IVqRvObJpUMRKJrPsEPOMOoc4cjzMZKz6zXboe40Cemlh4YAhxp96l9Ei08RKi9\/ZawNZVeOSO\/pgdAanAQE\/0Ztpq1ZHaY22mnzutXYOKCtY4Wk\/7aK0RDUlLbwQvy1fvjusjxPXo7C07hTSe7W06wNHHOv6fX7HbbFEm+bk4stoD6GODEfUCabVAi7mOM6Z6xZOV4tGXDgV11pZY9VQ\/VMpkDRAkqNIeVjbRvYmG1ERwFKD0FGe+ce6sOGUt5G+30EIiXnUYp2slehO5cFDSN8bCZ404cSBDJGbCQSp+U0VkbL+F6othfOCnFkklrseqBA8mqTUnLaSwjMwbiUhWqNjHRtI+1FlFyBIrprU\/1Z\/9c8blUUCBQ\/ZHO7fB7VqyoGMZYPu+3yRbeMzadmqJNlfjwu6o8Pq3Tu4B4ldVivpL6wITWVencXtTQRLsA1B18coPydKWh9s\/\/UvDFYvGOfiqK3kN4PzTZfsMe8W0F1t\/CQdqb2hWwkZDK9logN5CGLKClM5pQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2382{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWNAAEAGg2AKAAAOTd6uFLYSCzLKDfOQBYAPWIAQX+u75AAAAQEICgBqkTAaLRVq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":66,"pkt":"pL8BAjLCGM9eF7izCABFAAA0sWRAAEAGg18KAAAOTd6uFLYSCzLKDfOQBYAaqIAQX+uwlAAAAQEICgBqkTAaLRVq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2370{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","pkt_oversize":false,"pkt_ts":1492508991,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0585{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":1,"flow_packet_id":255,"flow_first_seen":1492508991649,"flow_last_seen":1492508992859,"flow_tot_l4_data_len":267352,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1048,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}}
+0586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":1,"flow_packet_id":255,"flow_first_seen":1492508991649,"flow_last_seen":1492508992859,"flow_tot_l4_data_len":267352,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1048,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}}
+0582{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":0,"flow_packet_id":48,"flow_first_seen":1492508985380,"flow_last_seen":1492508985594,"flow_tot_l4_data_len":36300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":756,"midstream":1,"l3_proto":"ip4","src_ip":"185.56.20.36","dst_ip":"10.0.0.14","src_port":53646,"dst_port":35030,"l4_proto":"tcp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":0,"flow_packet_id":48,"flow_first_seen":1492508985380,"flow_last_seen":1492508985594,"flow_tot_l4_data_len":36300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":756,"midstream":1,"l3_proto":"ip4","src_ip":"185.56.20.36","dst_ip":"10.0.0.14","src_port":53646,"dst_port":35030,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap","flow_id":1,"flow_packet_id":431,"flow_first_seen":1492508991649,"flow_last_seen":1492508994096,"flow_tot_l4_data_len":455432,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1056,"midstream":1,"l3_proto":"ip4","src_ip":"77.222.174.20","dst_ip":"10.0.0.14","src_port":2866,"dst_port":46610,"l4_proto":"tcp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_ip.pcap"}
diff --git a/tests/result/nDPId_bittorrent_utp.pcap.txt b/tests/result/nDPId_bittorrent_utp.pcap.txt
new file mode 100644
index 000000000..d80de0c9f
--- /dev/null
+++ b/tests/result/nDPId_bittorrent_utp.pcap.txt
@@ -0,0 +1,20 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1456385034843,"flow_last_seen":1456385034843,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"82.243.113.43","dst_ip":"192.168.1.5","src_port":64969,"dst_port":40959,"l4_proto":"udp"}
+0514{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385034,"pkt_len":146,"pkt":"xCwDBkn+LFbcjDU0CABFCACEN6IAAHARjPNS83ErwKgBBf3Jn\/8AcJbNZDE6YWQyOmlkMjA69\/YAfOoTUG5RTefsvJTyrlFxFfg5OmluZm9faGFzaDIwOvf2AdimJ292LCw98nSvKCf40fHeZTE6cTk6Z2V0X3BlZXJzMTp0MjoOYTE6djQ6TFQBATE6eTE6cWU=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0582{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1456385034843,"flow_last_seen":1456385034843,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"82.243.113.43","dst_ip":"192.168.1.5","src_port":64969,"dst_port":40959,"l4_proto":"udp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}}
+0515{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385039,"pkt_len":146,"pkt":"xCwDBkn+LFbcjDU0CABFCACEPR1AAHARR3hS83ErwKgBBf3Jn\/8AcOi+ZDE6YWQyOmlkMjA69\/YAfOoTUG5RTefsvJTyrlFxFfg5OmluZm9faGFzaDIwOvf2AbAuK1Rd0f1URppB\/xHRD5bKZTE6cTk6Z2V0X3BlZXJzMTp0MjoZ4TE6djQ6TFQBATE6eTE6cWU=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":62,"pkt":"xCwDBkn+LFbcjDU0CABFCAAwPfxAAHARRu1S83ErwKgBBf3Jn\/8AHJxJQQBTAhDusvAAAAAAAAAAAOf1AAA=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":72,"pkt":"LFbcjDU0xCwDBkn+CABFAAA60g0AAEARAADAqAEFUvNxK5\/\/\/ckAJoYDIQJTAgb\/P19\/\/\/\/\/AADwAEnH5\/UACAAAAAAAAAAA","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":252,"pkt":"xCwDBkn+LFbcjDU0CABFCADuPhxAAHARRg9S83ErwKgBBf3Jn\/8A2oQHAQBTAxDwaHYJ8SkXABAAAOf2ScYTQml0VG9ycmVudCBwcm90b2NvbAAAAAAAGAAFDKTI5\/smo1Sxp6oVuuryYGfGaBEtTFQxMTAwLTFGYTUzMVJ0THV2dwAAAHEFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/ff\/+\/\/\/\/v++\/7\/\/f\/f\/\/\/t\/+5gAAAAAEB","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+1015{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":519,"pkt":"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","pkt_caplen":519,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":62,"pkt":"LFbcjDU0xCwDBkn+CABFAAAwWbEAAEARAADAqAEFUvNxK5\/\/\/ckAHIX5IQBTAgcCkIz2EJ8pAADwAEnI5\/Y=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":62,"pkt":"xCwDBkn+LFbcjDU0CABFCAAwPkdAAHARRqJS83ErwKgBBf3Jn\/8AHNIuIQBTAxD0KXQJ8yGNAA\/+N+f3Scc=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":117,"pkt":"LFbcjDU0xCwDBkn+CABFAABnWmcAAEARAADAqAEFUvNxK5\/\/\/ckAU4YwAQBTAgcEst72EIlfAADwAEnI5\/YAAAADCZ\/\/AAAAAQIAAAANBgAAA3gAAAAAAABAAAAAAA0GAAADeAAAQAAAAEAAAAAABQQAAAFc","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0683{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":271,"pkt":"xCwDBkn+LFbcjDU0CABFCAEBPktAAHARRc1S83ErwKgBBf3Jn\/8A7fO6AQBTAxD0LVwJ8yGNABAAAOf3SccAAADNFABkMTI6Y29tcGxldGVfYWdvaTBlMTptZDExOmx0X2RvbnRoYXZlaTdlMTA6c2hhcmVfbW9kZWk4ZTExOnVwbG9hZF9vbmx5aTNlMTI6dXRfaG9sZXB1bmNoaTRlMTE6dXRfbWV0YWRhdGFpMmU2OnV0X3BleGkxZWUxMzptZXRhZGF0YV9zaXplaTE4MTg1ZTE6cGk1NjQwMGU0OnJlcXFpNTAwZTE6djE4OmxpYnRvcnJlbnQvMS4xLjAuMDY6eW91cmlwNDpPGL4DZQ==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":62,"pkt":"xCwDBkn+LFbcjDU0CABFCAAwPlpAAHARRo9S83ErwKgBBf3Jn\/8AHOlzIQBTAxD18oMJ8T+lAA\/\/yef4Scg=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":62,"pkt":"LFbcjDU0xCwDBkn+CABFAAAw5oQAAEARAADAqAEFUvNxK5\/\/\/ckAHIX5IQBTAgcGdEb2EIG0AADwAEnJ5\/c=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":146,"pkt":"xCwDBkn+LFbcjDU0CABFCACEPltAAHARRjpS83ErwKgBBf3Jn\/8AcGQkZDE6YWQyOmlkMjA69\/YAfOoTUG5RTefsvJTyrlFxFfg5OmluZm9faGFzaDIwOvf2AKNLQi81\/RCcQj+jdmBNANVsZTE6cTk6Z2V0X3BlZXJzMTp0MjpdRzE6djQ6TFQBATE6eTE6cWU=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","pkt_oversize":false,"pkt_ts":1456385040,"pkt_len":68,"pkt":"LFbcjDU0xCwDBkn+CABFAAA2viAAAEARAADAqAEFUvNxK5\/\/\/ckAIoX\/IQFTAgcHYOz2ERRIAADwAEnJ5\/cABAEAAAA=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap","flow_id":0,"flow_packet_id":86,"flow_first_seen":1456385034843,"flow_last_seen":1456385054059,"flow_tot_l4_data_len":38565,"flow_min_l4_data_len":28,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":448,"midstream":0,"l3_proto":"ip4","src_ip":"82.243.113.43","dst_ip":"192.168.1.5","src_port":64969,"dst_port":40959,"l4_proto":"udp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bittorrent_utp.pcap"}
diff --git a/tests/result/nDPId_bt_search.pcap.txt b/tests/result/nDPId_bt_search.pcap.txt
new file mode 100644
index 000000000..243a6a1d6
--- /dev/null
+++ b/tests/result/nDPId_bt_search.pcap.txt
@@ -0,0 +1,7 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1430752225251,"flow_last_seen":1430752225251,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp"}
+0527{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap","pkt_oversize":false,"pkt_ts":1430752225,"pkt_len":161,"pkt":"AQBeQJiPABZEH1lmCABFAACTaOEAAP8RCRrAqABm78CYjxpzGnMAf8gHQlQtU0VBUkNIICogSFRUUC8xLjENCkhvc3Q6IDIzOS4xOTIuMTUyLjE0Mzo2NzcxDQpQb3J0OiA2MTE5Nw0KSW5mb2hhc2g6IEVENEYxMDg1RTg4NUY5OEY5QTY5QjcwRUU4OUVCOTg4QjhGRDkxMTUNCg0KDQo=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1430752225251,"flow_last_seen":1430752225251,"flow_tot_l4_data_len":127,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp","ndpi": {"proto":"BitTorrent","category":"Download-FileTransfer-FileSharing"},"bittorrent": {"hash":""}}
+0528{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap","pkt_oversize":false,"pkt_ts":1430752525,"pkt_len":161,"pkt":"AQBeQJiPABZEH1lmCABFAACTCiwAAP8RZ8\/AqABm78CYjxpzGnMAf8gHQlQtU0VBUkNIICogSFRUUC8xLjENCkhvc3Q6IDIzOS4xOTIuMTUyLjE0Mzo2NzcxDQpQb3J0OiA2MTE5Nw0KSW5mb2hhc2g6IEVENEYxMDg1RTg4NUY5OEY5QTY5QjcwRUU4OUVCOTg4QjhGRDkxMTUNCg0KDQo=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1430752225251,"flow_last_seen":1430752525284,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":127,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.102","dst_ip":"239.192.152.143","src_port":6771,"dst_port":6771,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/bt_search.pcap"}
diff --git a/tests/result/nDPId_capwap.pcap.txt b/tests/result/nDPId_capwap.pcap.txt
new file mode 100644
index 000000000..6f5cb94b1
--- /dev/null
+++ b/tests/result/nDPId_capwap.pcap.txt
@@ -0,0 +1,72 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1422328949167,"flow_last_seen":1422328949167,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp"}
+0455{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328949,"pkt_len":107,"pkt":"uDhh8wWsJOmzR64gCABFwABdANlAAH8RZJPAqAoJwKgKChR+MFsASQAAAQAAABX+\/wABAAAAAAABADCRUl3gOBqBz\/u8XElQaHVuhYA4Oyehwv8gEXQ+BVAOU1L6bxnlZCgpb3mFtLC\/ZhI=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1422328949167,"flow_last_seen":1422328949167,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","category":"Network"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1422328963915,"flow_last_seen":1422328963915,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp"}
+0431{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328963,"pkt_len":83,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFAABFAAEAAP8R8PTAqAoK\/\/\/\/\/8BrADUAMQAA9LUBAAABAAAAAAAAF0NJU0NPLUNBUFdBUC1DT05UUk9MTEVSAAABAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1422328963915,"flow_last_seen":1422328963915,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"cisco-capwap-controller","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0431{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328966,"pkt_len":83,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFAABFAAIAAP8R8PPAqAoK\/\/\/\/\/8BrADUAMQAA9LUBAAABAAAAAAAAF0NJU0NPLUNBUFdBUC1DT05UUk9MTEVSAAABAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328970,"pkt_len":365,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE=","pkt_caplen":365,"pkt_type":351,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":351}
+0742{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328971,"pkt_len":365,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE=","pkt_caplen":365,"pkt_type":351,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":351}
+0742{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328972,"pkt_len":365,"pkt":"AQAMzMzMuDhh8wWsAV+qqgMAAAwgAAK0db0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAUR2lnYWJpdEV0aGVybmV0MAAEAAgAAAADAAsABQE=","pkt_caplen":365,"pkt_type":351,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":351}
+0775{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328982,"pkt_len":389,"pkt":"AQAMzMzMuDhh8wWsAXeqqgMAAAwgAAK0iX0AAQAUQVBiODM4LjYxZjMuMDVhYwAFAPJDaXNjbyBJT1MgU29mdHdhcmUsIEMyNjAwIFNvZnR3YXJlIChBUDNHMi1LOVc4LU0pLCBWZXJzaW9uIDE1LjIoNClKQTEsIFJFTEVBU0UgU09GVFdBUkUgKGZjMikKVGVjaG5pY2FsIFN1cHBvcnQ6IGh0dHA6Ly93d3cuY2lzY28uY29tL3RlY2hzdXBwb3J0CkNvcHlyaWdodCAoYykgMTk4Ni0yMDEzIGJ5IENpc2NvIFN5c3RlbXMsIEluYy4KQ29tcGlsZWQgVHVlIDMwLUp1bC0xMyAyMjo1NyBieSBwcm9kX3JlbF90ZWFtAAYAG2Npc2NvIEFJUi1DQVAyNjAySS1RLUs5AAIAEQAAAAEBAcwABMCoCgoAAwAWR2lnYWJpdEV0aGVybmV0MC4xAAQACAAAAAMACwAFAQAQAAYyyAAZABCkjQAAAAA8KAAAMsg=","pkt_caplen":389,"pkt_type":375,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":375}
+0787{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328989,"pkt_len":397,"pkt":"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","pkt_caplen":397,"pkt_type":383,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":383}
+0787{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422328993,"pkt_len":397,"pkt":"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","pkt_caplen":397,"pkt_type":383,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":383}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1422329005766,"flow_last_seen":1422329005766,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp"}
+0543{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329005,"pkt_len":165,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAARAAP8Rr9\/AqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g6AAAAAEAAGYAABQAAQAAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1422329005766,"flow_last_seen":1422329005766,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","category":"Network"}}
+0543{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329005,"pkt_len":165,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAARAAP8Rr9\/AqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g6AAAAAEAAGYAABQAAQAAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1422329005767,"flow_last_seen":1422329005767,"flow_tot_l4_data_len":122,"flow_min_l4_data_len":122,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12380,"l4_proto":"udp"}
+0517{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329005,"pkt_len":156,"pkt":"uDhh8wWsJOmzR64gCABFwACOANoAAH8RpGHAqAoJwKgKChR+MFwAegAAABACAAAAAAAAAAACAABlAAABACQAAAPoAAAABQIBAAMAQJYAAAEABAcFZgAAQJYAAAAABAEAAAEABAAJQ2lzY28yNTA0BBgABQAAAAAAAAoABsCoCgkAAAAlAAcAQJYAANAAACUACwBAlgAAl1THBF8A","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1422329005767,"flow_last_seen":1422329005767,"flow_tot_l4_data_len":122,"flow_min_l4_data_len":122,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12380,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","category":"Network"}}
+0517{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329005,"pkt_len":156,"pkt":"uDhh8wWsJOmzR64gCABFwACOANsAAH8RpGDAqAoJwKgKChR+MFwAegAAABACAAAAAAAAAAACAABlAAABACQAAAPoAAAABQIBAAMAQJYAAAEABAcFZgAAQJYAAAAABAEAAAEABAAJQ2lzY28yNTA0BBgABQAAAAAAAAoABsCoCgkAAAAlAAcAQJYAANAAACUACwBAlgAAl1THBF8A","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329015,"pkt_len":115,"pkt":"JOmzR64guDhh8wWsCABFwABlAAVAAP8R5V7AqAoKwKgKCTBcFH4AURfgAQAAABb+\/wAAAAAAAAAAADgBAAAsAAAAAAAAACz+\/1Z4mrz13vIlLHFGU8KNmBPwkXkcj0vpbAEOfTafYoZSAAAABAAvADMBAA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329015,"pkt_len":106,"pkt":"uDhh8wWsJOmzR64gCABFwABcANxAAH8RZJHAqAoJwKgKChR+MFwASAAAAQAAABb+\/wAAAAAAAAAAAC8DAAAjAAAAAAAAACP+\/yDAqAoKMFwSNFZ4mrz11boJ8TslJR9U5jzXLHEUL1R1yw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329015,"pkt_len":147,"pkt":"JOmzR64guDhh8wWsCABFwACFAAZAAP8R5T3AqAoKwKgKCTBcFH4AcfJNAQAAABb+\/wAAAAAAAAABAFgBAABMAAEAAAAAAEz+\/1Z4mrynPGWI5IMm9p17jE2f9KaJMQrrWK2ES2Ll2lIYACDAqAoKMFwSNFZ4mrz11boJ8TslJR9U5jzXLHEUL1R1ywAEAC8AMwEA","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+1102{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329015,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+1104{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329015,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329015,"pkt_len":360,"pkt":"uDhh8wWsJOmzR64gCABFwAFaAN9AAH8RY5DAqAoJwKgKChR+MFwBRgAAAQAAABb+\/wAAAAAAAAAEANALAAR\/AAIAA68AAMSV8eWLwg\/T77WxbxIxRK6x2jYlo7Z2cqoh9b6JGB3HnnGYc304EkjWR+kyoZhdnfnZ97xdoWjT+G80HRr3fzMZ7IED\/Ld3Y89rwj57M0zSxp5gIx4\/ydX1YhtsU2K0YpTuBL3T\/qMxPOkAtfgypMobpqdvaJj87AmG4hOvNwcBxhM6Pb0uvol4tl4xIF512+IBp\/FbJt8wL3AC7jnPWfJfL\/IVpIJkTrPhUKCnPoZlUPPR\/oLxU49YxkvqyK1enrUgd1PBFv7\/AAAAAAAAAAUAGAsABH8AAgAEcwAADEQad4fMdu\/vnlUC6Rb+\/wAAAAAAAAAGABINAAAGAAMAAAAAAAYDAQJAAAAW\/v8AAAAAAAAABwAMDgAAAAAEAAAAAAAA","pkt_caplen":360,"pkt_type":2048,"pkt_ipoffset":14}
+1109{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":590,"pkt":"JOmzR64guDhh8wWsCABFwAJAAAdAAP8R44HAqAoKwKgKCTBcFH4CLAtQAQAAABb+\/wAAAAAAAAACAhMLAAR6AAIAAAAAAgcABHcABHQwggRwMIIDWKADAgECAgoqrIqiAAAAAXOpMA0GCSqGSIb3DQEBBQUAMDkxFjAUBgNVBAoTDUNpc2NvIFN5c3RlbXMxHzAdBgNVBAMTFkNpc2NvIE1hbnVmYWN0dXJpbmcgQ0EwHhcNMTQwMTIwMjAyOTQ2WhcNMjQwMTIwMjAzOTQ2WjCBjDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExETAPBgNVBAcTCFNhbiBKb3NlMRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJBUDNHMi1iODM4NjFmMzA1YWMxIDAeBgkqhkiG9w0BCQEWEXN1cHBvcnRAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuATk7cPa3vnTJxzfUObrDdM7J6XTufQvIacU3Ko0964hJ3LBGSsj5kA9vLCMwwOvJ1Wwi4cHSCWpk++jEHE\/nygBfhD0eQkGisre\/HO3xzX8g\/LcyG\/fbKRMLjye\/Vb5ddsJIignGLgK5fzFipt\/iOf6QiLYdxWF8y9n\/i\/BVpq6gd9AM+A\/x9muYJcgQIpczbcCWqUfOQUBCXC8yA5wz06TyT3wkLuURU3d6+qz8hY9rTvwnKHEsgrQUhQh\/\/L4stJ7Oc3rKX7Hb+0yjgM=","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":179,"pkt":"JOmzR64guDhh8wWsCABFwAClAAlAAP8R5RrAqAoKwKgKCTBcFH4AkTSbAQAAABb+\/wAAAAAAAAAEAHgLAAR6AAIABA4AAGwO60eCwWrlPgSFY62APN2PPcWZnI2Zdr8ywPYb0yh7sc8jOEdpl3bC9hpeJFRHUNiILeT35N20+eK4xhtBgVlauus8xPz0OnSmo+ZFqaGGZqmlKbcD4H94Qr\/Pa6I34FKTe8EW5CHp54taDaw=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":329,"pkt":"JOmzR64guDhh8wWsCABFwAE7AApAAP8R5IPAqAoKwKgKCTBcFH4BJ2GxAQAAABb+\/wAAAAAAAAAFAQ4QAAECAAMAAAAAAQIBAKWp9n\/WITq6NCsApnsZKUBxM8SiZMAffLBQM+GS0aV4LqZFesqFzxKEHwhGnQV7\/Rmxi8LH9BtxffYttqmcnNNhHY2wJkzenfnFFeZUKA1zOlO5nldNzNicwU2EwLGFw98y01XZ4uuff7jq3rwhkCgI6nxPrtUtEovbkuhVZYJ3tukAUCcsP0DAA+VpXlM4s7e5ww55q08d51ka0pqBsyrzb4hbEKiYDTL9bz5\/339Q2rLBvAVQXCzpJsBpESHRo+vjk8dbdkjqROD0ywFkuLYNI84Gzic+c3nQYvy43TC4n0c9itg2BYuFRfLNXZjpIP+sE8ITCnVRdqpUHk2VrQA=","pkt_caplen":329,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":420,"pkt":"JOmzR64guDhh8wWsCABFwAGWAAtAAP8R5CfAqAoKwKgKCTBcFH4BggMgAQAAABb+\/wAAAAAAAAAGAQ4PAAECAAQAAAAAAQIBAKzqmDA5ptloyEefacEa3YZgJXJyrzHF9nOG+TK9vyBNPWeO9+lhySpNcxfS8U9xgOzjbnL4Y8XZDOAhiQFo8vgjxgbH1rJwvhKQMjpbB+xdMWwdAZVbqz\/DJLtziqhxnhe\/GeuuhoXqmlJ7RBS889V98vMqx8wmgWQ9IXwmnK36CCAZCauFy7HXZ0sOzDk9wNxlY\/eY\/72RK74kwLuFDOHXIPaNDAU+HsbXTmvlbNtFVnwHDJimGDggl85KsTO808\/4PBQujPnd0LudLsXt0Z3ZQQ7ZfuPbaIy4ykb9jPf8UlzC+ettkAlrxmevD8RB2ZeTOWIDYXnJFAhBcldYXJQU\/v8AAAAAAAAABwABARb+\/wABAAAAAAAAAEBV91YC49Abw+RBYmothQ3D6tqvTueKPrWukdB\/wh0UtvIy46qL++VfDHw4siAWRqqz+G6lxJZxWYAYP9VmMLsC","pkt_caplen":420,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":137,"pkt":"uDhh8wWsJOmzR64gCABFwAB7AOBAAH8RZG7AqAoJwKgKChR+MFwAZwAAAQAAABT+\/wAAAAAAAAAIAAEBFv7\/AAEAAAAAAAAAQM4p0S2Be8BScJ9\/t\/V5ioLrBk4kt01aT9C3ULVTwKotu4SpBhH4dYERsQJCgfQ\/FU95FjFjz1ipPTEr6AwbtI8=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329016,"pkt_len":1499,"pkt":"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","pkt_caplen":1499,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1422329017533,"flow_last_seen":1422329017533,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp"}
+0475{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329017,"pkt_len":122,"pkt":"JOmzR64guDhh8wWsCABFwABsAAFAAEARpFzAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFKDMU3RsAQJYlAAEcq6fyE50AAEcACwAFJ\/9UIA8C1d0=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1422329017533,"flow_last_seen":1422329017533,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp","ndpi": {"proto":"CAPWAP","category":"Network"}}
+0592{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329018,"pkt_len":209,"pkt":"JOmzR64guDhh8wWsCABFwADDAAJAAEARpATAqAoKwKgKCTBcFH8ArwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFL9Qy3RsAQJYlAAEcq6fyE50AAEkACwAFKFJLQAQC3ePdGwBAliUAARyrp\/ITnQAAHQALAAUtdhsgDQK\/xN0bAECWJQABHKun8hOdAAAOAAsABS9iq+AIAt7o3RsAQJYlAAEcq6fyE50AAAwACwAFL7WkAA0C3+g=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329018,"pkt_len":296,"pkt":"JOmzR64guDhh8wWsCABFwAEaAANAAEARo6zAqAoKwKgKCTBcFH8BBgAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFN3Va3RsAQJYlAAEcq6fyE50AACMACwAFMGt3IAoC5+ndGwBAliUAARyrp\/ITnQAAEwALAAUwdLNADQLo6d0bAECWJQABZICZPC30AAADAAsABTJ3KPD9AqWm3RsAQJYlAAH4Ht\/dIQ8AAB8ACwAFNejwUJoCvcLdGwBAliUAAfge390hDwAAEgALAAU2FOxglQK9wt0bAECWJQAB+B7f3SEPAAAcAAsABTZHxnCRAr\/A3RsAQJYlAAH4Ht\/dIQ8AAAcACwAFN246sJsCvr4=","pkt_caplen":296,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329019,"pkt_len":151,"pkt":"JOmzR64guDhh8wWsCABFwACJAARAAEARpDzAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFPxZ83RsAQJYlAAH4Ht\/dIQ8BABcALAAFORP5UJQCtLDdGwBAliUAAfge390hDwEAFwAsAAU5O8ZgngK0sA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329022,"pkt_len":238,"pkt":"JOmzR64guDhh8wWsCABFwADgAAVAAEARo+TAqAoKwKgKCTBcFH8AzAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFbN1R3RsAQJYlAAEcq6fyE50AAAAACwAFajBGkAsC7uTdGwBAliUAAXx6kbf6FgAAGgALAAVq6G\/ACgLR0N0bAECWJQABHKun8hOdAAAJAAsABWsIPqABAu\/k3RsAQJYlAAEcq6fyE50AACUACwAFbBYHsAUC7+TdGwBAliUAARyrp\/ITnQAAMwALAAVstjrADQLu5A==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329022,"pkt_len":151,"pkt":"JOmzR64guDhh8wWsCABFwACJAAZAAEARpDrAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFdH5v3RsAQJYlAAEcq6fyE50AABQACwAFbZTN0AUC7eTdGwBAliUAAXx6kbf6FgAAAgALAAVt4GRQCALSzw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329023,"pkt_len":122,"pkt":"JOmzR64guDhh8wWsCABFwABsAAdAAEARpFbAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFfB+a3RsAQJYlAAF8epG3+hYBADIALAAFdlKSIAQCz8o=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0592{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329023,"pkt_len":209,"pkt":"JOmzR64guDhh8wWsCABFwADDAAhAAEARo\/7AqAoKwKgKCTBcFH8ArwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFg8C33RsAQJYlAAEcq6fyE50BAEcALAAFfRaA8AUC4uXdGwBAliUAARyrp\/ITnQEASQAsAAV977MACwLk5t0bAECWJQAB2LssxieZAAAbAAsABX83KGCdAry33RsAQJYlAAHYuyzGJ5kBAAkALAAFgandIJoCpKQ=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329024,"pkt_len":325,"pkt":"JOmzR64guDhh8wWsCABFwAE3AAlAAEARo4nAqAoKwKgKCTBcFH8BIwAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFi2Hh3RsAQJYlAAGEeohETCAAAAcACwAFhkvCMAICwsLdGwBAliUAAYR6iERMIAAADwALAAWG87lADALDwt0bAECWJQABhHqIREwgAAAdAAsABYeQv1AEAr7B3RsAQJYlAAGEeohETCAAAAkACwAFiDBXYAwCwMXdGwBAliUAAYR6iERMIAAABAALAAWI2t1wBgK9v90bAECWJQABtAf58HYUAAACAAsABYnpqeAKAtbQ3RsAQJYlAAG0B\/nwdhQAACwACwAFik\/Z8AMC1tXdGwBAliUAAbQH+fB2FAAAEgALAAWKuBgADQLV1A==","pkt_caplen":325,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329024,"pkt_len":151,"pkt":"JOmzR64guDhh8wWsCABFwACJAApAAEARpDbAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFkwL73RsAQJYlAAGEeohETCABAB0ALAAFj1OREAQCu7TdGwBAliUAAYR6iERMIAEAIwAsAAWP9HAgDQLAuA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329025,"pkt_len":122,"pkt":"JOmzR64guDhh8wWsCABFwABsAAtAAEARpFLAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFmqQi3RsAQJYlAAF8epG3+hYAAC8ACwAFman9cAoCzdM=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329025,"pkt_len":122,"pkt":"JOmzR64guDhh8wWsCABFwABsAAxAAEARpFHAqAoKwKgKCTBcFH8AWAAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFokVC3RsAQJYlAAF8epG3+hYAABgACwAFnKONABgC1dY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329026,"pkt_len":151,"pkt":"JOmzR64guDhh8wWsCABFwACJAA1AAEARpDPAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFqeZm3RsAQJYlAAFIQ3zRg20AAA4ACwAFo66FoJsCs6\/dGwBAliUAAXx6kbf6FgEALwAsAAWkuumAHgLNyw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329026,"pkt_len":296,"pkt":"JOmzR64guDhh8wWsCABFwAEaAA5AAEARo6HAqAoKwKgKCTBcFH8BBgAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFsYeJ3RsAQJYlAAEcq6fyE50AAAIACwAFqj\/7QA8C8OXdGwBAliUAARyrp\/ITnQAAAAALAAWqnVZgBwLv5N0bAECWJQABHKun8hOdAABIAAsABarktYAJAu\/l3RsAQJYlAAEcq6fyE50AAEkACwAFqzOnoAwC8OfdGwBAliUAARyrp\/ITnQAABgALAAWsDwHgAwLu5N0bAECWJQABHKun8hOdAQBMACwABbCrFWAKAuXm3RsAQJYlAAEcq6fyE50BAEsALAAFsPjYgA4C5OU=","pkt_caplen":296,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329027,"pkt_len":151,"pkt":"JOmzR64guDhh8wWsCABFwACJAA9AAEARpDHAqAoKwKgKCTBcFH8AdQAAACADIAAAAAABBAAAAAAAAABAAABYCiBpDiAAAAAAAABYCiBpDiAAAN0JAECWJQEFwMnO3RsAQJYlAAHYuyzGJ5kAAA4ACwAFvYpMsJICu7fdGwBAliUAAdi7LMYnmQAAFAALAAW\/LzbAmwK9tQ==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329034,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":375,"pkt_ipoffset":14}
+0173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":375}
+0776{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329091,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":375,"pkt_ipoffset":14}
+0173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":375}
+0544{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329136,"pkt_len":165,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAGlAAP8Rr3rAqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g\/wAAABMAAGYAABQAAQEAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329136,"pkt_len":165,"pkt":"\/\/\/\/\/\/\/\/uDhh8wWsCABFwACXAGlAAP8Rr3rAqAoK\/\/\/\/\/zBcFH4AgwAAACACEAAAAAAGWAogaQ4g\/wAAABMAAGYAABQAAQEAJwAoAgIAAQBAlgAAAAAEAQAAAABAlgAAAQAEBwVmAABAlgAAAgAEDAQZAAApAAEEACwAAQEAJQAKAECWAADPAQAAAQAlABYAQJYAAAVBUGI4MzguNjFmMy4wNWFj","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","pkt_oversize":false,"pkt_ts":1422329141,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":375,"pkt_ipoffset":14}
+0173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","type":375}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1422328963915,"flow_last_seen":1422328966914,"flow_tot_l4_data_len":98,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":49259,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1422329005766,"flow_last_seen":1422329136181,"flow_tot_l4_data_len":524,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"255.255.255.255","src_port":12380,"dst_port":5246,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1422328949167,"flow_last_seen":1422328949167,"flow_tot_l4_data_len":73,"flow_min_l4_data_len":73,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12379,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":3,"flow_packet_id":217,"flow_first_seen":1422329005767,"flow_last_seen":1422329174862,"flow_tot_l4_data_len":56296,"flow_min_l4_data_len":72,"flow_max_l4_data_len":1465,"flow_avg_l4_data_len":259,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.9","dst_ip":"192.168.10.10","src_port":5246,"dst_port":12380,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap","flow_id":4,"flow_packet_id":173,"flow_first_seen":1422329017533,"flow_last_seen":1422329175528,"flow_tot_l4_data_len":28020,"flow_min_l4_data_len":59,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.10.10","dst_ip":"192.168.10.9","src_port":12380,"dst_port":5247,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/capwap.pcap"}
diff --git a/tests/result/nDPId_check_mk_new.pcap.txt b/tests/result/nDPId_check_mk_new.pcap.txt
new file mode 100644
index 000000000..0a9fb1c33
--- /dev/null
+++ b/tests/result/nDPId_check_mk_new.pcap.txt
@@ -0,0 +1,20 @@
+0364{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1512031663734,"flow_last_seen":1512031663734,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.100.22","dst_ip":"192.168.100.50","src_port":58998,"dst_port":6556,"l4_proto":"tcp"}
+0413{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":74,"pkt":"RjIA9qTs8soKyPpECABFEAA8gwhAAEAGbgrAqGQWwKhkMuZ2GZzVcug3AAAAAKACchA4TQAAAgQFtAQCCAorDGs\/AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":74,"pkt":"8soKyPpERjIA9qTsCABFAAA8AABAAEAG8SLAqGQywKhkFhmc5nZuqQJN1XLoOKAScSBJyAAAAgQFtAQCCAoWUVydKwxrPwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwlAAEAGbhHAqGQWwKhkMuZ2GZzVcug4bqkCToAQAOVJwAAAAQEICisMaz8WUVyd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":81,"pkt":"8soKyPpERjIA9qTsCABFAABDXtNAAEAGkkjAqGQywKhkFhmc5nZuqQJO1XLoOIAYAONJzwAAAQEIChZRXJ4rDGs\/PDw8Y2hlY2tfbWs+Pj4K","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1512031663734,"flow_last_seen":1512031663736,"flow_tot_l4_data_len":159,"flow_min_l4_data_len":32,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.100.22","dst_ip":"192.168.100.50","src_port":58998,"dst_port":6556,"l4_proto":"tcp","ndpi": {"proto":"CHECKMK","category":"DataTransfer"}}
+0400{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwpAAEAGbhDAqGQWwKhkMuZ2GZzVcug4bqkCXYAQAOVJwAAAAQEICisMa0AWUVye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0758{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":331,"pkt":"8soKyPpERjIA9qTsCABFAAE9XtRAAEAGkU3AqGQywKhkFhmc5nZuqQJd1XLoOIAYAONKyQAAAQEIChZRXJ4rDGtAVmVyc2lvbjogMS40LjBwOQpBZ2VudE9TOiBsaW51eApIb3N0bmFtZTogYnVpbGRob3N0LTkKQWdlbnREaXJlY3Rvcnk6IC9ldGMvY2hlY2tfbWsKRGF0YURpcmVjdG9yeTogL3Zhci9saWIvY2hlY2tfbWtfYWdlbnQKU3Bvb2xEaXJlY3Rvcnk6IC92YXIvbGliL2NoZWNrX21rX2FnZW50L3Nwb29sClBsdWdpbnNEaXJlY3Rvcnk6IC91c3IvbGliL2NoZWNrX21rX2FnZW50L3BsdWdpbnMKTG9jYWxEaXJlY3Rvcnk6IC91c3IvbGliL2NoZWNrX21rX2FnZW50L2xvY2FsCg==","pkt_caplen":331,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwtAAEAGbg\/AqGQWwKhkMuZ2GZzVcug4bqkDZoAQAO1JwAAAAQEICisMa0AWUVye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":76,"pkt":"8soKyPpERjIA9qTsCABFAAA+XtVAAEAGkkvAqGQywKhkFhmc5nZuqQNm1XLoOIAYAONJygAAAQEIChZRXJ4rDGtAT25seUZyb206IA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gwxAAEAGbg7AqGQWwKhkMuZ2GZzVcug4bqkDcIAQAO1JwAAAAQEICisMa0AWUVye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":67,"pkt":"8soKyPpERjIA9qTsCABFAAA1XtZAAEAGklPAqGQywKhkFhmc5nZuqQNw1XLoOIAYAONJwQAAAQEIChZRXJ4rDGtACg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gw1AAEAGbg3AqGQWwKhkMuZ2GZzVcug4bqkDcYAQAO1JwAAAAQEICisMa0AWUVye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":75,"pkt":"8soKyPpERjIA9qTsCABFAAA9XtdAAEAGkkrAqGQywKhkFhmc5nZuqQNx1XLoOIAYAONJyQAAAQEIChZRXJ4rDGtAPDw8ZGY+Pj4K","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gw5AAEAGbgzAqGQWwKhkMuZ2GZzVcug4bqkDeoAQAO1JwAAAAQEICisMa0AWUVye","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1076{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":568,"pkt":"8soKyPpERjIA9qTsCABFAAIqXthAAEAGkFzAqGQywKhkFhmc5nZuqQN61XLoOIAYAONLtgAAAQEIChZRXJ8rDGtAdWRldiAgICAgICAgICAgZGV2dG1wZnMgICAgICA0OTQwOTIgICAgICAgMCAgICA0OTQwOTIgICAgICAgMCUgL2Rldgp0bXBmcyAgICAgICAgICB0bXBmcyAgICAgICAgIDEwMTAzNiAgICA2ODQ4ICAgICA5NDE4OCAgICAgICA3JSAvcnVuCi9kZXYveHZkYTEgICAgIGV4dDQgICAgICAgICA3MDM3MTc2IDIwNDkyNzIgICA0NjEwNzE2ICAgICAgMzElIC8KdG1wZnMgICAgICAgICAgdG1wZnMgICAgICAgICA1MDUxODAgICAgICAgMCAgICA1MDUxODAgICAgICAgMCUgL2Rldi9zaG0KdG1wZnMgICAgICAgICAgdG1wZnMgICAgICAgICAgIDUxMjAgICAgICAgMCAgICAgIDUxMjAgICAgICAgMCUgL3J1bi9sb2NrCnRtcGZzICAgICAgICAgIHRtcGZzICAgICAgICAgNTA1MTgwICAgICAgIDAgICAgNTA1MTgwICAgICAgIDAlIC9zeXMvZnMvY2dyb3VwCnRtcGZzICAgICAgICAgIHRtcGZzICAgICAgICAgMTAxMDM2ICAgICAgIDAgICAgMTAxMDM2ICAgICAgIDAlIC9ydW4vdXNlci8xMDAwCg==","pkt_caplen":568,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","pkt_oversize":false,"pkt_ts":1512031663,"pkt_len":66,"pkt":"RjIA9qTs8soKyPpECABFEAA0gw9AAEAGbgvAqGQWwKhkMuZ2GZzVcug4bqkFcIAQAPVJwAAAAQEICisMa0AWUVyf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap","flow_id":0,"flow_packet_id":98,"flow_first_seen":1512031663734,"flow_last_seen":1512031663775,"flow_tot_l4_data_len":16910,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4128,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.100.22","dst_ip":"192.168.100.50","src_port":58998,"dst_port":6556,"l4_proto":"tcp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/check_mk_new.pcap"}
diff --git a/tests/result/nDPId_coap_mqtt.pcap.txt b/tests/result/nDPId_coap_mqtt.pcap.txt
new file mode 100644
index 000000000..c8c9d7d9c
--- /dev/null
+++ b/tests/result/nDPId_coap_mqtt.pcap.txt
@@ -0,0 +1,189 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1333957710293,"flow_last_seen":1333957710293,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61043,"dst_port":5683,"l4_proto":"udp"}
+0428{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1333957710,"pkt_len":86,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nMWMwAg\/RpDAQXKchYzKy53ZWxsLWtub3duBGNvcmU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1333957710293,"flow_last_seen":1333957710293,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61043,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1333957715764,"flow_last_seen":1333957715764,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61044,"dst_port":5683,"l4_proto":"udp"}
+0428{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1333957715,"pkt_len":86,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nQWMwAgAxVDAv\/NchYzKy53ZWxsLWtub3duBGNvcmU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1333957715764,"flow_last_seen":1333957715764,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61044,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1333957717200,"flow_last_seen":1333957717200,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61045,"dst_port":5683,"l4_proto":"udp"}
+0427{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1333957717,"pkt_len":86,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nUWMwAgyuNDAzf9chYzKy53ZWxsLWtub3duBGNvcmU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1333957717200,"flow_last_seen":1333957717200,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61045,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1333957718629,"flow_last_seen":1333957718629,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61046,"dst_port":5683,"l4_proto":"udp"}
+0427{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1333957718,"pkt_len":86,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACARQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7nYWMwAgvHpDBEZkchYzKy53ZWxsLWtub3duBGNvcmU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1333957718629,"flow_last_seen":1333957718629,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61046,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1333957720773,"flow_last_seen":1333957720773,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61047,"dst_port":5683,"l4_proto":"udp"}
+0431{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1333957720,"pkt_len":90,"pkt":"ACOJtMwBSF1gwJdKht1gAAAAACQRQCABDagCFRFxoQvLSI+DV\/YgAQYgAAg12QAAAAAAAAAQ7ncWMwAkKH5FAYp0chYzKy53ZWxsLWtub3duBGNvcmUQEj3U","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1333957720773,"flow_last_seen":1333957720773,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61047,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1333957710293,"flow_last_seen":1333957710293,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61043,"dst_port":5683,"l4_proto":"udp"}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1333957715764,"flow_last_seen":1333957715764,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61044,"dst_port":5683,"l4_proto":"udp"}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1333957717200,"flow_last_seen":1333957717200,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61045,"dst_port":5683,"l4_proto":"udp"}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1333957718629,"flow_last_seen":1333957718629,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61046,"dst_port":5683,"l4_proto":"udp"}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1333957720773,"flow_last_seen":1333957720773,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"2001:da8:215:1171:a10b:cb48:8f83:57f6","dst_ip":"2001:620:8:35d9::10","src_port":61047,"dst_port":5683,"l4_proto":"udp"}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1375090528017,"flow_last_seen":1375090528017,"flow_tot_l4_data_len":27,"flow_min_l4_data_len":27,"flow_max_l4_data_len":27,"flow_avg_l4_data_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":33499,"dst_port":5683,"l4_proto":"udp"}
+0418{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090528,"pkt_len":81,"pkt":"uCfrprIvACTop0mhht1gAAAAABsRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADgtsWMwAblIJCAekbB5C4c2VwYXJhdGUQ0SMR","pkt_caplen":81,"pkt_type":34525,"pkt_ipoffset":14}
+0500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1375090528017,"flow_last_seen":1375090528017,"flow_tot_l4_data_len":27,"flow_min_l4_data_len":27,"flow_max_l4_data_len":27,"flow_avg_l4_data_len":27,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":33499,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0398{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090528,"pkt_len":66,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjOC2wAMpjBgAOkb","pkt_caplen":66,"pkt_type":34525,"pkt_ipoffset":14}
+0569{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090529,"pkt_len":191,"pkt":"ACTop0mhuCfrprIvht1gAAAAAIkRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjOC2wCJMIhCRVcPB5D\/VGhpcyBtZXNzYWdlIHdhcyBzZW50IGJ5IGEgc2VwYXJhdGUgcmVzcG9uc2UuCllvdXIgY2xpZW50IHdpbGwgbmVlZCB0byBhY2tub3dsZWRnZSBpdCwgb3RoZXJ3aXNlIGl0IHdpbGwgYmUgcmV0cmFuc21pdHRlZC4=","pkt_caplen":191,"pkt_type":34525,"pkt_ipoffset":14}
+0398{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090529,"pkt_len":66,"pkt":"uCfrprIvACTop0mhht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADgtsWMwAMOD1gAFcP","pkt_caplen":66,"pkt_type":34525,"pkt_ipoffset":14}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1375090926676,"flow_last_seen":1375090926676,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":50250,"dst_port":5683,"l4_proto":"udp"}
+0428{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090926,"pkt_len":85,"pkt":"uCfrprIvACTop0mhht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADxEoWMwAfdD1AAs6gt3N0b3JhZ2X\/bXlyZXNvdXJjZQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1375090926676,"flow_last_seen":1375090926676,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":50250,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0427{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090926,"pkt_len":85,"pkt":"ACTop0mhuCfrprIvht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjPESgAfeP9gQc6gh3N0b3JhZ2UKbXlyZXNvdXJjZQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0412{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090935,"pkt_len":73,"pkt":"uCfrprIvACTop0mhht1gAAAAABMRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADxEoWMwATY+NAA86h\/215ZGF0YQ==","pkt_caplen":73,"pkt_type":34525,"pkt_ipoffset":14}
+0399{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090935,"pkt_len":66,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjPESgAMfrZghc6h","pkt_caplen":66,"pkt_type":34525,"pkt_ipoffset":14}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1375090935240,"flow_last_seen":1375090935240,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":46819,"dst_port":5683,"l4_proto":"udp"}
+0435{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090935,"pkt_len":92,"pkt":"uCfrprIvACTop0mhht1gAAAAACYRQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADtuMWMwAmaNlAA5Uit3N0b3JhZ2UKbXlyZXNvdXJjZf9teWRhdGE=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1375090935240,"flow_last_seen":1375090935240,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":46819,"dst_port":5683,"l4_proto":"udp","ndpi": {"proto":"COAP","category":"RPC"}}
+0399{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375090935,"pkt_len":66,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjO24wAMxd1gRJUi","pkt_caplen":66,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375091005,"pkt_len":85,"pkt":"uCfrprIvACTop0mhht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADtuMWMwAfsCNAAZUjt3N0b3JhZ2UKbXlyZXNvdXJjZQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0412{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375091005,"pkt_len":73,"pkt":"ACTop0mhuCfrprIvht1gAAAAABMRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjO24wATioZgRZUj\/215ZGF0YQ==","pkt_caplen":73,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375091022,"pkt_len":85,"pkt":"uCfrprIvACTop0mhht1gAAAAAB8RQLu7AAAAAAAAAAAAAAAAAAG7uwAAAAAAAAAAAAAAAAADtuMWMwAfsB9ABJUkt3N0b3JhZ2UKbXlyZXNvdXJjZQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0399{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1375091022,"pkt_len":66,"pkt":"ACTop0mhuCfrprIvht1gAAAAAAwRQLu7AAAAAAAAAAAAAAAAAAO7uwAAAAAAAAAAAAAAAAABFjO24wAMxd1gQpUk","pkt_caplen":66,"pkt_type":34525,"pkt_ipoffset":14}
+0457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1375090528017,"flow_last_seen":1375090529165,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":12,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":33499,"dst_port":5683,"l4_proto":"udp"}
+0455{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1375090926676,"flow_last_seen":1375090935086,"flow_tot_l4_data_len":93,"flow_min_l4_data_len":12,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":50250,"dst_port":5683,"l4_proto":"udp"}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1375090935240,"flow_last_seen":1375091022272,"flow_tot_l4_data_len":143,"flow_min_l4_data_len":12,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip6","src_ip":"bbbb::1","dst_ip":"bbbb::3","src_port":46819,"dst_port":5683,"l4_proto":"udp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1455907243976,"flow_last_seen":1455907243976,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53522,"dst_port":17501,"l4_proto":"tcp"}
+0391{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907243,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAqELhAAIAG+F7AqDgBwKg4ZdESRF16higakEiEGVAYAQAwoAAAwAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1455907243976,"flow_last_seen":1455907243976,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53522,"dst_port":17501,"l4_proto":"tcp","ndpi": {"proto":"MQTT","category":"RPC"}}
+0387{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907243,"pkt_len":56,"pkt":"CAAnAERyCAAnmO\/hCABFAAAqrABAAEAGnRbAqDhlwKg4AURd0RKQSIQZeoYoHFAYAOXx0wAA0AA=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907244,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoELlAAIAG+F\/AqDgBwKg4ZdESRF16higckEiEG1AQAQDwpgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455907258332,"flow_last_seen":1455907258332,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53523,"dst_port":17501,"l4_proto":"tcp"}
+0391{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907258,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAqELpAAIAG+FzAqDgBwKg4ZdETRF1NYgogm49Jd1AYAQCrGAAAwAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1455907258332,"flow_last_seen":1455907258332,"flow_tot_l4_data_len":22,"flow_min_l4_data_len":22,"flow_max_l4_data_len":22,"flow_avg_l4_data_len":22,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53523,"dst_port":17501,"l4_proto":"tcp","ndpi": {"proto":"MQTT","category":"RPC"}}
+0388{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907258,"pkt_len":56,"pkt":"CAAnAERyCAAnmO\/hCABFAAAqf0dAAEAGyc\/AqDhlwKg4AURd0RObj0l3TWIKIlAYAOXx0wAA0AA=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907258,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoELtAAIAG+F3AqDgBwKg4ZdETRF1NYgoim49JeVAQAQBrHwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1455907267002,"flow_last_seen":1455907267002,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53528,"dst_port":17501,"l4_proto":"tcp"}
+0400{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":66,"pkt":"CAAnmO\/hCAAnAERyCABFAAA0ELxAAIAG+FDAqDgBwKg4ZdEYRF3fAvFmAAAAAIACIAB3eQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":66,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0AABAAEAGSQ3AqDhlwKg4AURd0RiuSO3C3wLxZ4ASchDx3QAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEL1AAIAG+FvAqDgBwKg4ZdEYRF3fAvFnrkjtw1AQAQA7MAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":73,"pkt":"CAAnmO\/hCAAnAERyCABFAAA7EL5AAIAG+EfAqDgBwKg4ZdEYRF3fAvFnrkjtw1AYAQCebQAAEBEABE1RVFQEAgA8AAVCdXM0MQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1455907267002,"flow_last_seen":1455907267007,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":20,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53528,"dst_port":17501,"l4_proto":"tcp","ndpi": {"proto":"MQTT","category":"RPC"}}
+0384{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAolKdAAEAGtHHAqDhlwKg4AURd0RiuSO3D3wLxelAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAslKhAAEAGtGzAqDhlwKg4AURd0RiuSO3D3wLxelAYAOXx1QAAIAIAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEL9AAIAG+B3AqDgBwKg4ZdEYRF3fAvF6rkjtx1AYAQBtHAAAMzoACUJ1czE3SW5mbwABVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjA3IEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAslKlAAEAGtGvAqDhlwKg4AURd0RiuSO3H3wLxtlAYAOXx1QAAQAIAAQ==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":69,"pkt":"CAAnmO\/hCAAnAERyCABFAAA3EMBAAIAG+EnAqDgBwKg4ZdEYRF3fAvG2rkjty1AYAQBdXAAAgg0AAgAIQnVzMTdDbWQB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtlKpAAEAGtGnAqDhlwKg4AURd0RiuSO3L3wLxxVAYAOXx1gAAkAMAAgE=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":138,"pkt":"CAAnAERyCAAnmO\/hCABFAAB8lKtAAEAGtBnAqDhlwKg4AURd0RiuSO3Q3wLxxVAYAOXyJQAAMFIACEJ1czE3Q21keyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDoyNzo0OSBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEMFAAIAG+FfAqDgBwKg4ZdEYRF3fAvHFrkjuJFAQAQA6cQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMJAAIAG+BrAqDgBwKg4ZdEYRF3fAvHFrkjuJFAYAQBqdAAAMzoACUJ1czE3SW5mbwADVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjA3IEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAslKxAAEAGtGjAqDhlwKg4AURd0RiuSO4k3wLyAVAYAOXx1QAAQAIAAw==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907267,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEMNAAIAG+FXAqDgBwKg4ZdEYRF3fAvIBrkjuKFAQAQA6MQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":1455907271481,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp"}
+0500{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":138,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EMQAAIARN\/bAqDgBwKg4ZcSHRFwAaLRJQwM1AW9STXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMSBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":1455907271481,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0501{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+rAFAAEAGnMHAqDhlwKg4AURd0RKQSIQbeoYoHFAYAOXyJwAAMlQACEJ1czE3Q21kAAJ7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+f0hAAEAGyXrAqDhlwKg4AURd0RObj0l5TWIKIlAYAOXyJwAAMlQACEJ1czE3Q21kAAJ7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455907271483,"flow_last_seen":1455907271483,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":106,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":106,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.101","dst_ip":"192.168.56.1","src_port":17501,"dst_port":53524,"l4_proto":"tcp"}
+0502{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+1KdAAEAGdBvAqDhlwKg4AURd0RSW3pIhxZi6gFAYAOXyJwAAMlQACEJ1czE3Q21kAAJ7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1455907271483,"flow_last_seen":1455907271483,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":106,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":106,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.101","dst_ip":"192.168.56.1","src_port":17501,"dst_port":53524,"l4_proto":"tcp","ndpi": {"proto":"MQTT","category":"RPC"}}
+0397{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":61,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXYVAAEAR64HAqDhlwKg4AURcxIcAG\/HjY0Q1AW9STYsvci9CdXMxN0NtZA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsEMVAAIAG+E\/AqDgBwKg4ZdETRF1NYgoim49Jz1AYAP8qugAAQAIAAgAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsEMdAAIAG+E3AqDgBwKg4ZdEURF3FmLqAlt6Sd1AYAP++LAAAQAIAAgAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsEMhAAIAG+EzAqDgBwKg4ZdESRF16higckEiEcVAYAP+wQQAAQAIAAgAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof0lAAEAGyc\/AqDhlwKg4AURd0RObj0nPTWIKJlAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1KhAAEAGdHDAqDhlwKg4AURd0RSW3pJ3xZi6hFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMlAAIAG+BPAqDgBwKg4ZdETRF1NYgomm49Jz1AYAP+fyAAAMzoACUJ1czE3SW5mbwAEVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof0pAAEAGyc7AqDhlwKg4AURd0RObj0nPTWIKYlAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMtAAIAG+BHAqDgBwKg4ZdEURF3FmLqElt6Sd1AYAP8zOwAAMzoACUJ1czE3SW5mbwAEVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1KlAAEAGdG\/AqDhlwKg4AURd0RSW3pJ3xZi6wFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAsf0tAAEAGycnAqDhlwKg4AURd0RObj0nPTWIKYlAYAOXx1QAAQAIABA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAs1KpAAEAGdGrAqDhlwKg4AURd0RSW3pJ3xZi6wFAYAOXx1QAAQAIABA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorAJAAEAGnRbAqDhlwKg4AURd0RKQSIRxeoYoIFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkEMxAAIAG+BDAqDgBwKg4ZdESRF16higgkEiEcVAYAP8lUAAAMzoACUJ1czE3SW5mbwAEVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorANAAEAGnRXAqDhlwKg4AURd0RKQSIRxeoYoXFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAsrARAAEAGnRDAqDhlwKg4AURd0RKQSIRxeoYoXFAYAOXx1QAAQAIABA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EM0AAIARN+7AqDgBwKg4ZcSHRFwAZzJrQgM1Anj4ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+rAVAAEAGnL3AqDhlwKg4AURd0RKQSIR1eoYoXFAYAOXyJwAAMlQACEJ1czE3Q21kAAN7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+f0xAAEAGyXbAqDhlwKg4AURd0RObj0nTTWIKYlAYAOXyJwAAMlQACEJ1czE3Q21kAAN7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEM5AAIAG+ErAqDgBwKg4ZdESRF16hihckEiEy1AQAP\/vtwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+1KtAAEAGdBfAqDhlwKg4AURd0RSW3pJ7xZi6wFAYAOXyJwAAMlQACEJ1czE3Q21kAAN7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEM9AAIAG+EnAqDgBwKg4ZdETRF1NYgpim49KKVAQAP9qMAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoENBAAIAG+EjAqDgBwKg4ZdEURF3FmLrAlt6S0VAQAP\/9ogAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXZ1AAEAR62rAqDhlwKg4AURcxIcAGvHiYkQ1Anj4iy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsENJAAIAG+ELAqDgBwKg4ZdEURF3FmLrAlt6S0VAYAP+9kQAAQAIAAwAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsENNAAIAG+EHAqDgBwKg4ZdETRF1NYgpim49KKVAYAP8qHwAAQAIAAwAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAsENVAAIAG+D\/AqDgBwKg4ZdESRF16hihckEiEy1AYAP+vpgAAQAIAAwAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1KxAAEAGdGzAqDhlwKg4AURd0RSW3pLRxZi6xFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof01AAEAGycvAqDhlwKg4AURd0RObj0opTWIKZlAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorAZAAEAGnRLAqDhlwKg4AURd0RKQSITLeoYoYFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkENZAAIAG+AbAqDgBwKg4ZdEURF3FmLrElt6S0VAYAP8xoQAAMzoACUJ1czE3SW5mbwAFVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAo1K1AAEAGdGvAqDhlwKg4AURd0RSW3pLRxZi7AFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkENdAAIAG+AXAqDgBwKg4ZdETRF1NYgpmm49KKVAYAP+eLgAAMzoACUJ1czE3SW5mbwAFVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAof05AAEAGycrAqDhlwKg4AURd0RObj0opTWIKolAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":114,"pkt":"CAAnmO\/hCAAnAERyCABFAABkENlAAIAG+APAqDgBwKg4ZdESRF16hihgkEiEy1AYAP8jtgAAMzoACUJ1czE3SW5mbwAFVXBkYXRlIHRyaWdnZXJlZCBGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":54,"pkt":"CAAnAERyCAAnmO\/hCABFAAAorAdAAEAGnRHAqDhlwKg4AURd0RKQSITLeoYonFAQAOXx0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":58,"pkt":"CAAnAERyCAAnmO\/hCABFAAAs1K5AAEAGdGbAqDhlwKg4AURd0RSW3pLRxZi7AFAYAOXx1QAAQAIABQ==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":136,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6ENoAAIARN+LAqDgBwKg4ZcSHRFwAZlueQQM1AxdyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":140,"pkt":"CAAnAERyCAAnmO\/hCABFAAB+1K9AAEAGdBPAqDhlwKg4AURd0RSW3pLVxZi7AFAYAOXyJwAAMlQACEJ1czE3Q21kAAR7Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnmO\/hCAAnAERyCABFAAAoEN1AAIAG+DvAqDgBwKg4ZdEURF3FmLsAlt6TK1AQAP\/9CAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXaZAAEAR62LAqDhlwKg4AURcxIcAGfHhYUQ1AxeLL3IvQnVzMTdDbWQ=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":143,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEOcAAIARN87AqDgBwKg4ZcSHRFwAbZmySAM1BCrL+A7rA\/3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":66,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XahAAEAR61nAqDhlwKg4AURcxIcAIPHoaEQ1BCrL+A7rA\/3Eiy9yL0J1czE3Q21k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EPQAAIARN8XAqDgBwKg4ZcSHRFwAaSr1RAM1BaHn3H9yRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXcFAAEAR60TAqDhlwKg4AURcxIcAHPHkZEQ1BaHn3H+LL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":136,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6EQEAAIARN7vAqDgBwKg4ZcSHRFwAZr+aQQM1BrJyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTIgRUVUIDIwMTYifQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXcxAAEAR6zzAqDhlwKg4AURcxIcAGfHhYUQ1BrKLL3IvQnVzMTdDbWQ=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":138,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EQ4AAIARN6zAqDgBwKg4ZcSHRFwAaGrJQwM1B8\/MNXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":61,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXc1AAEAR6znAqDhlwKg4AURcxIcAG\/HjY0Q1B8\/MNYsvci9CdXMxN0NtZA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":138,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8ERsAAIARN5\/AqDgBwKg4ZcSHRFwAaNHfQwM1CFi1RXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":1455907272856,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp"}
+0499{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EWkAAIARN1LAqDgBwKg4ZcSORFwAZ7scQgMdqQeYckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEyIEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":1455907272856,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0393{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXhFAAEAR6vbAqDhlwKg4AURcxI4AGvHiYkQdqQeYiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":141,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/EYMAAIARNzTAqDgBwKg4ZcSORFwAa8WlRgMdqhF5z0YYRXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMyBFRVQgMjAxNiJ9","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":64,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyXh5AAEAR6uXAqDhlwKg4AURcxI4AHvHmZkQdqhF5z0YYRYsvci9CdXMxN0NtZA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EZ0AAIARNxvAqDgBwKg4ZcSORFwAakdVRQMdqyVsmyV8ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXi1AAEAR6tfAqDhlwKg4AURcxI4AHfHlZUQdqyVsmyV8iy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":142,"pkt":"CAAnmO\/hCAAnAERyCABFAACAEbcAAIARNv\/AqDgBwKg4ZcSORFwAbOGwRwMdrCZfT\/MB3yhyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":65,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzXjVAAEAR6s3AqDhlwKg4AURcxI4AH\/HnZ0QdrCZfT\/MB3yiLL3IvQnVzMTdDbWQ=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EdEAAIARNurAqDgBwKg4ZcSORFwAZ8IuQgMdrQCBckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXkRAAEAR6sPAqDhlwKg4AURcxI4AGvHiYkQdrQCBiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EecAAIARNtLAqDgBwKg4ZcSORFwAafrxRAMdrpQQMahyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXlpAAEAR6qvAqDhlwKg4AURcxI4AHPHkZEQdrpQQMaiLL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Ef0AAIARNrvAqDgBwKg4ZcSORFwAassPRQMdr\/Kq\/CfKckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXnBAAEAR6pTAqDhlwKg4AURcxI4AHfHlZUQdr\/Kq\/CfKiy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EhcAAIARNqLAqDgBwKg4ZcSORFwAaYovRAMdsNz8WXxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":1455907274088,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp"}
+0505{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EncAAIARNkLAqDgBwKg4ZcSIRFwAaR7GRANSj9XGl0FyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":1455907274088,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0398{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXqNAAEAR6mLAqDhlwKg4AURcxIgAHPHkZERSj9XGl0GLL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":143,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEpIAAIARNiPAqDgBwKg4ZcSIRFwAbeMnSANSkLugNTWCkTE2ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":66,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XrRAAEAR6k3AqDhlwKg4AURcxIgAIPHoaERSkLugNTWCkTE2iy9yL0J1czE3Q21k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9ErEAAIARNgjAqDgBwKg4ZcSIRFwAaZj1RANSkbrKOAxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXsVAAEAR6kDAqDhlwKg4AURcxIgAHPHkZERSkbrKOAyLL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EtAAAIARNejAqDgBwKg4ZcSIRFwAajY+RQNSknZ4406+ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXtpAAEAR6irAqDhlwKg4AURcxIgAHfHlZURSknZ4406+iy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Eu8AAIARNcnAqDgBwKg4ZcSIRFwAaj5\/RQNSkz2wCtXHckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXuNAAEAR6iHAqDhlwKg4AURcxIgAHfHlZURSkz2wCtXHiy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7Ew4AAIARNa3AqDgBwKg4ZcSIRFwAZ6AIQgNSlO3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXvJAAEAR6hXAqDhlwKg4AURcxIgAGvHiYkRSlO3Eiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EykAAIARNZLAqDgBwKg4ZcSIRFwAZyZkQgNSlWdockRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXwBAAEAR6gfAqDhlwKg4AURcxIgAGvHiYkRSlWdoiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7E0wAAIARNW\/AqDgBwKg4ZcSIRFwAZyoCQgNSlmPJckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":1455907275690,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp"}
+0507{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":141,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FCAAAIARNJfAqDgBwKg4ZcSPRFwAa2JLRgOAZtDWwMpn\/nJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNSBFRVQgMjAxNiJ9","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":1455907275690,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0403{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":64,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyX35AAEAR6YXAqDhlwKg4AURcxI8AHvHmZkSAZtDWwMpn\/osvci9CdXMxN0NtZA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":142,"pkt":"CAAnmO\/hCAAnAERyCABFAACAFEwAAIARNGrAqDgBwKg4ZcSPRFwAbLkURwOAZ6ExGoh1VzNyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTUgRUVUIDIwMTYifQ==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":65,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzX45AAEAR6XTAqDhlwKg4AURcxI8AH\/HnZ0SAZ6ExGoh1VzOLL3IvQnVzMTdDbWQ=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FHgAAIARNEPAqDgBwKg4ZcSPRFwAZyUVQgOAaDrbckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX5xAAEAR6WvAqDhlwKg4AURcxI8AGvHiYkSAaDrbiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FKIAAIARNBnAqDgBwKg4ZcSPRFwAZ\/GyQgOAaW48ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX65AAEAR6VnAqDhlwKg4AURcxI8AGvHiYkSAaW48iy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+FMkAAIARM+\/AqDgBwKg4ZcSPRFwAap3JRQOAaiZbdwHjckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxX71AAEAR6UfAqDhlwKg4AURcxI8AHfHlZUSAaiZbdwHjiy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FPoAAIARM8HAqDgBwKg4ZcSPRFwAZ2MyQgOAa\/y6ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX9tAAEAR6SzAqDhlwKg4AURcxI8AGvHiYkSAa\/y6iy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":136,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6FSUAAIARM5fAqDgBwKg4ZcSPRFwAZtwsQQOAbEZyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTYgRUVUIDIwMTYifQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtX+dAAEAR6SHAqDhlwKg4AURcxI8AGfHhYUSAbEaLL3IvQnVzMTdDbWQ=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":141,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FUwAAIARM2vAqDgBwKg4ZcSPRFwAa923RgOAbRWOzuOZuXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNiBFRVQgMjAxNiJ9","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":11,"flow_packet_id":200,"flow_first_seen":1455907271481,"flow_last_seen":1455907282686,"flow_tot_l4_data_len":13320,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":14,"flow_packet_id":200,"flow_first_seen":1455907274088,"flow_last_seen":1455907285181,"flow_tot_l4_data_len":13394,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":13,"flow_packet_id":200,"flow_first_seen":1455907272856,"flow_last_seen":1455907284046,"flow_tot_l4_data_len":13420,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":15,"flow_packet_id":200,"flow_first_seen":1455907275690,"flow_last_seen":1455907286608,"flow_tot_l4_data_len":13342,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":8,"flow_packet_id":1922,"flow_first_seen":1455907243976,"flow_last_seen":1455907286855,"flow_tot_l4_data_len":100044,"flow_min_l4_data_len":20,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53522,"dst_port":17501,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":9,"flow_packet_id":1926,"flow_first_seen":1455907258332,"flow_last_seen":1455907286855,"flow_tot_l4_data_len":100124,"flow_min_l4_data_len":20,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53523,"dst_port":17501,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":12,"flow_packet_id":1919,"flow_first_seen":1455907271483,"flow_last_seen":1455907286855,"flow_tot_l4_data_len":99996,"flow_min_l4_data_len":20,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.56.101","dst_ip":"192.168.56.1","src_port":17501,"dst_port":53524,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap","flow_id":10,"flow_packet_id":1928,"flow_first_seen":1455907267002,"flow_last_seen":1455907286845,"flow_tot_l4_data_len":100439,"flow_min_l4_data_len":20,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":53528,"dst_port":17501,"l4_proto":"tcp"}
+0148{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":8516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/coap_mqtt.pcap"}
diff --git a/tests/result/nDPId_cpha.pcap.txt b/tests/result/nDPId_cpha.pcap.txt
new file mode 100644
index 000000000..9b2bdd61d
--- /dev/null
+++ b/tests/result/nDPId_cpha.pcap.txt
@@ -0,0 +1,4 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/cpha.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/cpha.pcap","pkt_oversize":false,"pkt_ts":1603354463,"pkt_len":96,"pkt":"AQBeFQMBAAAAAAEBgQAAFQgARQAATgAAAAD\/EQyKAAAAAKwVAwAftB+0ADpJ\/BqQDDEnhQABABZ5PgAB\/\/7gSgEAAAIAAQAACAoAAgADAAQAAAIECQAAAAkAAAAAAAIA","pkt_caplen":96,"pkt_type":33024,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/cpha.pcap","type":33024}
+0140{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/cpha.pcap"}
diff --git a/tests/result/nDPId_diameter.pcap.txt b/tests/result/nDPId_diameter.pcap.txt
new file mode 100644
index 000000000..393f8caf3
--- /dev/null
+++ b/tests/result/nDPId_diameter.pcap.txt
@@ -0,0 +1,11 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1263278878271,"flow_last_seen":1263278878271,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":364,"flow_max_l4_data_len":364,"flow_avg_l4_data_len":364,"midstream":1,"l3_proto":"ip4","src_ip":"10.201.9.245","dst_ip":"10.201.9.11","src_port":50957,"dst_port":3868,"l4_proto":"tcp"}
+0842{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","pkt_oversize":false,"pkt_ts":1263278878,"pkt_len":398,"pkt":"ABpk3ZWLACYYlIbACABFAAGABtlAAIAGAAAKyQn1CskJC8cNDxz34fq2+LwvkFAY+gQqBAAAAQABWIAAARAAAAAEAupJMCbwAAMAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAc1AAAAUQ29tdmVyc2UuRENJAAABAkAAAAwAAAAEAAABCEAAABlueGwxLm5ldHhjZWxsLmNvbQAAAAAAAShAAAAUbmV0eGNlbGwuY29tAAABn0AAAAwAAAAAAAABJUAAABlkZ3UyLmNvbXZlcnNlLmNvbQAAAAAAARtAAAAUY29tdmVyc2UuY29tAAAAN0AAAAzO9pmeAAABu0AAACgAAAG8QAAAFDkxOTA4MDAwMDAxNgAAAcJAAAAMAAAAAAAAAbhAAAAkAAABuUAAAAwAAAACAAABukAAAA1kYmlsbAAAAAAAAaBAAAAMAAAAAQAAAbVAAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAIAAAGpQAAADAAAAWQ=","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","pkt_oversize":false,"pkt_ts":1263278878,"pkt_len":290,"pkt":"ACYYlIbAABpk3ZWLCABFAAEUlYlAAEAGe8kKyQkLCskJ9Q8cxw34vC+Q9+H8DlAYGSCUIQAAAQAA7EAAARAAAAAEAupJMCbwAAMAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAQxAAAAMAAAH0QAAAQhAAAAaZHNsdTEuY29tdmVyc2UuY29tAAAAAAEoQAAAFGNvbXZlcnNlLmNvbQAAAQJAAAAMAAAABAAAAaBAAAAMAAAAAQAAAZ9AAAAMAAAAAAAAARZAAAAMAABBbQAAADdAAAAMzvaZ5QAAAcBAAAAMAAAABQAAAa9AAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAIAAAGpQAAADAAAAWQ=","pkt_caplen":290,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","pkt_oversize":false,"pkt_ts":1263278878,"pkt_len":414,"pkt":"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","pkt_caplen":414,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","pkt_oversize":false,"pkt_ts":1263278878,"pkt_len":290,"pkt":"ACYYlIbAABpk3ZWLCABFAAEUlYpAAEAGe8gKyQkLCskJ9Q8cxw34vDB89+H9dlAYHVCNmAAAAQAA7EAAARAAAAAEAupJMSbwAAUAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAQxAAAAMAAAH0QAAAQhAAAAaZHNsdTEuY29tdmVyc2UuY29tAAAAAAEoQAAAFGNvbXZlcnNlLmNvbQAAAQJAAAAMAAAABAAAAaBAAAAMAAAAAgAAAZ9AAAAMAAAAAQAAARZAAAAMAABBbQAAADdAAAAMzvaZ5QAAAcBAAAAMAAAABQAAAa9AAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAIAAAGpQAAADAAAAWQ=","pkt_caplen":290,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","pkt_oversize":false,"pkt_ts":1263278878,"pkt_len":362,"pkt":"ABpk3ZWLACYYlIbACABFAAFcBttAAIAGAAAKyQn1CskJC8cNDxz34f12+LwxaFAY+Cwp4AAAAQABNIAAARAAAAAEAupJMibwAAcAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAc1AAAAUQ29tdmVyc2UuRENJAAABAkAAAAwAAAAEAAABCEAAABlueGwxLm5ldHhjZWxsLmNvbQAAAAAAAShAAAAUbmV0eGNlbGwuY29tAAABn0AAAAwAAAACAAABJUAAABlkZ3UyLmNvbXZlcnNlLmNvbQAAAAAAARtAAAAUY29tdmVyc2UuY29tAAAAN0AAAAzO9pmeAAABu0AAACgAAAG8QAAAFDkxOTA4MDAwMDAxNgAAAcJAAAAMAAAAAAAAAaBAAAAMAAAAAwAAAb5AAAA0AAABnUAAACwAAAG9QAAAGAAAAb9AAAAQAAAAAAAAAAEAAAGpQAAADAAAAWQ=","pkt_caplen":362,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","pkt_oversize":false,"pkt_ts":1263278878,"pkt_len":226,"pkt":"ACYYlIbAABpk3ZWLCABFAADUlYtAAEAGfAcKyQkLCskJ9Q8cxw34vDFo9+H+qlAYIYAUAQAAAQAArEAAARAAAAAEAupJMibwAAcAAAEHQAAAHW54bDthcGk7MTI2MzI3ODg3ODE0NwAAAAAAAQxAAAAMAAAH0QAAAQhAAAAaZHNsdTEuY29tdmVyc2UuY29tAAAAAAEoQAAAFGNvbXZlcnNlLmNvbQAAAQJAAAAMAAAABAAAAaBAAAAMAAAAAwAAAZ9AAAAMAAAAAgAAARZAAAAMAABBbQAAADdAAAAMzvaZ5Q==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1263278878271,"flow_last_seen":1263278878357,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":192,"flow_max_l4_data_len":380,"flow_avg_l4_data_len":296,"midstream":1,"l3_proto":"ip4","src_ip":"10.201.9.245","dst_ip":"10.201.9.11","src_port":50957,"dst_port":3868,"l4_proto":"tcp","ndpi": {"proto":"Diameter","category":"Network"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1263278878271,"flow_last_seen":1263278878357,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":192,"flow_max_l4_data_len":380,"flow_avg_l4_data_len":296,"midstream":1,"l3_proto":"ip4","src_ip":"10.201.9.245","dst_ip":"10.201.9.11","src_port":50957,"dst_port":3868,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/diameter.pcap"}
diff --git a/tests/result/nDPId_dlt_ppp.pcap.txt b/tests/result/nDPId_dlt_ppp.pcap.txt
new file mode 100644
index 000000000..75f063b0f
--- /dev/null
+++ b/tests/result/nDPId_dlt_ppp.pcap.txt
@@ -0,0 +1,4 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dlt_ppp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+1915{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dlt_ppp.pcap","pkt_oversize":false,"pkt_ts":1,"pkt_len":1230,"pkt":"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","pkt_caplen":1230,"pkt_type":0,"pkt_ipoffset":0}
+0175{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dlt_ppp.pcap","datalink":9}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dlt_ppp.pcap"}
diff --git a/tests/result/nDPId_dnp3.pcap.txt b/tests/result/nDPId_dnp3.pcap.txt
new file mode 100644
index 000000000..c69700ce7
--- /dev/null
+++ b/tests/result/nDPId_dnp3.pcap.txt
@@ -0,0 +1,146 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0450{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1097501938503,"flow_last_seen":1097501938503,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2789,"dst_port":20000,"l4_proto":"tcp"}
+0390{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTFlAAIAGmmQKAAAICgAAAwrlTiBVHBrSAAAAAHAC\/\/+mIQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTFlAAIAGmmQKAAAICgAAAwrlTiBVHBrSAAAAAHAC\/\/+mIQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTFlAAIAGmmQKAAAICgAAAwrlTiBVHBrSAAAAAHAC\/\/+mIQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkmJAAIAGVFsKAAADCgAACE4gCuVSxjiFVRwa03AS\/\/8axQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkmJAAIAGVFsKAAADCgAACE4gCuVSxjiFVRwa03AS\/\/8axQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkmJAAIAGVFsKAAADCgAACE4gCuVSxjiFVRwa03AS\/\/8axQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFpAAIAGmmsKAAAICgAAAwrlTiBVHBrTUsY4hlAQ\/\/9HiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFpAAIAGmmsKAAAICgAAAwrlTiBVHBrTUsY4hlAQ\/\/9HiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFpAAIAGmmsKAAAICgAAAwrlTiBVHBrTUsY4hlAQ\/\/9HiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5kmNAAIAGVFEKAAADCgAACE4gCuVSxjiGVRwa01AY\/\/+NwQAABWQKRAMABAB8rub3ghAAT70=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1097501938503,"flow_last_seen":1097501938504,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2789,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0404{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5kmNAAIAGVFEKAAADCgAACE4gCuVSxjiGVRwa01AY\/\/+NwQAABWQKRAMABAB8rub3ghAAT70=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5kmNAAIAGVFEKAAADCgAACE4gCuVSxjiGVRwa01AY\/\/+NwQAABWQKRAMABAB8rub3ghAAT70=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFtAAIAGmmoKAAAICgAAAwrlTiBVHBrTUsY4l1AQ\/+5HiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFtAAIAGmmoKAAAICgAAAwrlTiBVHBrTUsY4l1AQ\/+5HiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097501938,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTFtAAIAGmmoKAAAICgAAAwrlTiBVHBrTUsY4l1AQ\/+5HiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1097502623045,"flow_last_seen":1097502623045,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2803,"dst_port":20000,"l4_proto":"tcp"}
+0391{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTRVAAIAGmagKAAAICgAAAwrzTiBm5W0JAAAAAHAC\/\/9CEwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTRVAAIAGmagKAAAICgAAAwrzTiBm5W0JAAAAAHAC\/\/9CEwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTRVAAIAGmagKAAAICgAAAwrzTiBm5W0JAAAAAHAC\/\/9CEwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkrlAAIAGVAQKAAADCgAACE4gCvNc+rZHZuVtCnAS\/\/8uwAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkrlAAIAGVAQKAAADCgAACE4gCvNc+rZHZuVtCnAS\/\/8uwAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwkrlAAIAGVAQKAAADCgAACE4gCvNc+rZHZuVtCnAS\/\/8uwAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRZAAIAGma8KAAAICgAAAwrzTiBm5W0KXPq2SFAQ\/\/9bhAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRZAAIAGma8KAAAICgAAAwrzTiBm5W0KXPq2SFAQ\/\/9bhAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRZAAIAGma8KAAAICgAAAwrzTiBm5W0KXPq2SFAQ\/\/9bhAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5krpAAIAGU\/oKAAADCgAACE4gCvNc+rZIZuVtClAY\/\/8AfwAABWQKRAMABAB8rur5ggAAm1o=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":1,"flow_packet_id":10,"flow_first_seen":1097502623045,"flow_last_seen":1097502623047,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2803,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0405{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5krpAAIAGU\/oKAAADCgAACE4gCvNc+rZIZuVtClAY\/\/8AfwAABWQKRAMABAB8rur5ggAAm1o=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5krpAAIAGU\/oKAAADCgAACE4gCvNc+rZIZuVtClAY\/\/8AfwAABWQKRAMABAB8rur5ggAAm1o=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRdAAIAGma4KAAAICgAAAwrzTiBm5W0KXPq2WVAQ\/+5bhAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRdAAIAGma4KAAAICgAAAwrzTiBm5W0KXPq2WVAQ\/+5bhAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097502623,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTRdAAIAGma4KAAAICgAAAwrzTiBm5W0KXPq2WVAQ\/+5bhAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":0,"flow_packet_id":39,"flow_first_seen":1097501938503,"flow_last_seen":1097502062040,"flow_tot_l4_data_len":1173,"flow_min_l4_data_len":20,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2789,"dst_port":20000,"l4_proto":"tcp"}
+0454{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":1,"flow_packet_id":39,"flow_first_seen":1097502623045,"flow_last_seen":1097502648678,"flow_tot_l4_data_len":1023,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2803,"dst_port":20000,"l4_proto":"tcp"}
+0451{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1097504102255,"flow_last_seen":1097504102255,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2828,"dst_port":20000,"l4_proto":"tcp"}
+0391{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTjtAAIAGmIIKAAAICgAAAwsMTiCPBdusAAAAAHAC\/\/+rNgAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTjtAAIAGmIIKAAAICgAAAwsMTiCPBdusAAAAAHAC\/\/+rNgAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwTjtAAIAGmIIKAAAICgAAAwsMTiCPBdusAAAAAHAC\/\/+rNgAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwk7JAAIAGUwsKAAADCgAACE4gCwxzB1SQjwXbrXAS\/\/\/jjQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwk7JAAIAGUwsKAAADCgAACE4gCwxzB1SQjwXbrXAS\/\/\/jjQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwk7JAAIAGUwsKAAADCgAACE4gCwxzB1SQjwXbrXAS\/\/\/jjQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTjxAAIAGmIkKAAAICgAAAwsMTiCPBdutcwdUkVAQ\/\/8QUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTjxAAIAGmIkKAAAICgAAAwsMTiCPBdutcwdUkVAQ\/\/8QUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTjxAAIAGmIkKAAAICgAAAwsMTiCPBdutcwdUkVAQ\/\/8QUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5k7NAAIAGUwEKAAADCgAACE4gCwxzB1SRjwXbrVAY\/\/8pVQAABWQKRAMABAB8rsnyghAAigc=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":2,"flow_packet_id":10,"flow_first_seen":1097504102255,"flow_last_seen":1097504102257,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2828,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0404{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5k7NAAIAGUwEKAAADCgAACE4gCwxzB1SRjwXbrVAY\/\/8pVQAABWQKRAMABAB8rsnyghAAigc=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5k7NAAIAGUwEKAAADCgAACE4gCwxzB1SRjwXbrVAY\/\/8pVQAABWQKRAMABAB8rsnyghAAigc=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTj1AAIAGmIgKAAAICgAAAwsMTiCPBdutcwdUolAQ\/+4QUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTj1AAIAGmIgKAAAICgAAAwsMTiCPBdutcwdUolAQ\/+4QUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097504102,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoTj1AAIAGmIgKAAAICgAAAwsMTiCPBdutcwdUolAQ\/+4QUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":2,"flow_packet_id":138,"flow_first_seen":1097504102255,"flow_last_seen":1097504224083,"flow_tot_l4_data_len":6225,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":2828,"dst_port":20000,"l4_proto":"tcp"}
+0452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1097505644006,"flow_last_seen":1097505644006,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1080,"dst_port":20000,"l4_proto":"tcp"}
+0393{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAVNAAIAG5WkKAAAJCgAAAwQ4TiAZahgcAAAAAHAC\/\/\/rNQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAVNAAIAG5WkKAAAJCgAAAwQ4TiAZahgcAAAAAHAC\/\/\/rNQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAVNAAIAG5WkKAAAJCgAAAwQ4TiAZahgcAAAAAHAC\/\/\/rNQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwxfhAAIAGIMQKAAADCgAACU4gBDiWbHn2GWoYHXAS\/\/\/awQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwxfhAAIAGIMQKAAADCgAACU4gBDiWbHn2GWoYHXAS\/\/\/awQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwxfhAAIAGIMQKAAADCgAACU4gBDiWbHn2GWoYHXAS\/\/\/awQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAVRAAIAG5XAKAAAJCgAAAwQ4TiAZahgdlmx591AQ\/\/8HhgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAVRAAIAG5XAKAAAJCgAAAwQ4TiAZahgdlmx591AQ\/\/8HhgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505644,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAVRAAIAG5XAKAAAJCgAAAwQ4TiAZahgdlmx591AQ\/\/8HhgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505719,"pkt_len":69,"pkt":"AAKzznBRAFAEk3BnCABFAAA3AVZAAIAG5V8KAAAJCgAAAwQ4TiAZahgdlmx591AY\/\/9B+gAABWQIxAQAAwC0uMDBDdIt","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":3,"flow_packet_id":10,"flow_first_seen":1097505644006,"flow_last_seen":1097505719035,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":20,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1080,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0401{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505719,"pkt_len":69,"pkt":"AAKzznBRAFAEk3BnCABFAAA3AVZAAIAG5V8KAAAJCgAAAwQ4TiAZahgdlmx591AY\/\/9B+gAABWQIxAQAAwC0uMDBDdIt","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505719,"pkt_len":69,"pkt":"AAKzznBRAFAEk3BnCABFAAA3AVZAAIAG5V8KAAAJCgAAAwQ4TiAZahgdlmx591AY\/\/9B+gAABWQIxAQAAwC0uMDBDdIt","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505719,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5xflAAIAGILoKAAADCgAACU4gBDiWbHn3GWoYLFAY\/\/CgYQAABWQKRAYABAC\/sNH3ggAAujk=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505719,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5xflAAIAGILoKAAADCgAACU4gBDiWbHn3GWoYLFAY\/\/CgYQAABWQKRAYABAC\/sNH3ggAAujk=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097505719,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5xflAAIAGILoKAAADCgAACU4gBDiWbHn3GWoYLFAY\/\/CgYQAABWQKRAYABAC\/sNH3ggAAujk=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":3,"flow_packet_id":135,"flow_first_seen":1097505644006,"flow_last_seen":1097506028601,"flow_tot_l4_data_len":4473,"flow_min_l4_data_len":20,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1080,"dst_port":20000,"l4_proto":"tcp"}
+0452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1097507785883,"flow_last_seen":1097507785883,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1086,"dst_port":20000,"l4_proto":"tcp"}
+0393{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAaRAAIAG5RkKAAAICgAAAwQ+TiAMLRLKAAAAAHAC\/\/\/9vwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAaRAAIAG5RkKAAAICgAAAwQ+TiAMLRLKAAAAAHAC\/\/\/9vwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAaRAAIAG5RkKAAAICgAAAwQ+TiAMLRLKAAAAAHAC\/\/\/9vwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwx49AAIAGHy4KAAADCgAACE4gBD62X0jyDC0Sy3AS\/\/\/+XAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwx49AAIAGHy4KAAADCgAACE4gBD62X0jyDC0Sy3AS\/\/\/+XAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwx49AAIAGHy4KAAADCgAACE4gBD62X0jyDC0Sy3AS\/\/\/+XAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaVAAIAG5SAKAAAICgAAAwQ+TiAMLRLLtl9I81AQ\/\/8rIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaVAAIAG5SAKAAAICgAAAwQ+TiAMLRLLtl9I81AQ\/\/8rIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaVAAIAG5SAKAAAICgAAAwQ+TiAMLRLLtl9I81AQ\/\/8rIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5x5BAAIAGHyQKAAADCgAACE4gBD62X0jzDC0Sy1AY\/\/+x7AAABWQKRAMABAB8rsDwgpAAQ6I=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":4,"flow_packet_id":10,"flow_first_seen":1097507785883,"flow_last_seen":1097507785885,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1086,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0405{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5x5BAAIAGHyQKAAADCgAACE4gBD62X0jzDC0Sy1AY\/\/+x7AAABWQKRAMABAB8rsDwgpAAQ6I=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507785,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5x5BAAIAGHyQKAAADCgAACE4gBD62X0jzDC0Sy1AY\/\/+x7AAABWQKRAMABAB8rsDwgpAAQ6I=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507786,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaZAAIAG5R8KAAAICgAAAwQ+TiAMLRLLtl9JBFAQ\/+4rIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507786,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaZAAIAG5R8KAAAICgAAAwQ+TiAMLRLLtl9JBFAQ\/+4rIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097507786,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAaZAAIAG5R8KAAAICgAAAwQ+TiAMLRLLtl9JBFAQ\/+4rIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":4,"flow_packet_id":93,"flow_first_seen":1097507785883,"flow_last_seen":1097507856257,"flow_tot_l4_data_len":3327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1086,"dst_port":20000,"l4_proto":"tcp"}
+0452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1097510947092,"flow_last_seen":1097510947092,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1159,"dst_port":20000,"l4_proto":"tcp"}
+0392{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBZtAAIAG4SIKAAAICgAAAwSHTiCYpsdTAAAAAHAC\/\/+8cwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBZtAAIAG4SIKAAAICgAAAwSHTiCYpsdTAAAAAHAC\/\/+8cwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBZtAAIAG4SIKAAAICgAAAwSHTiCYpsdTAAAAAHAC\/\/+8cwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyZlAAIAGHSQKAAADCgAACE4gBIfliDTWmKbHVHAS\/\/+iAwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyZlAAIAGHSQKAAADCgAACE4gBIfliDTWmKbHVHAS\/\/+iAwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyZlAAIAGHSQKAAADCgAACE4gBIfliDTWmKbHVHAS\/\/+iAwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZxAAIAG4SkKAAAICgAAAwSHTiCYpsdU5Yg011AQ\/\/\/OxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZxAAIAG4SkKAAAICgAAAwSHTiCYpsdU5Yg011AQ\/\/\/OxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZxAAIAG4SkKAAAICgAAAwSHTiCYpsdU5Yg011AQ\/\/\/OxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yZpAAIAGHRoKAAADCgAACE4gBIfliDTXmKbHVFAY\/\/+b+AAABWQKRAMABAB8rtb9ggEAYEY=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":5,"flow_packet_id":10,"flow_first_seen":1097510947092,"flow_last_seen":1097510947094,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1159,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0405{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yZpAAIAGHRoKAAADCgAACE4gBIfliDTXmKbHVFAY\/\/+b+AAABWQKRAMABAB8rtb9ggEAYEY=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yZpAAIAGHRoKAAADCgAACE4gBIfliDTXmKbHVFAY\/\/+b+AAABWQKRAMABAB8rtb9ggEAYEY=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZ1AAIAG4SgKAAAICgAAAwSHTiCYpsdU5Yg06FAQ\/+7OxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZ1AAIAG4SgKAAAICgAAAwSHTiCYpsdU5Yg06FAQ\/+7OxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097510947,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBZ1AAIAG4SgKAAAICgAAAwSHTiCYpsdU5Yg06FAQ\/+7OxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":5,"flow_packet_id":27,"flow_first_seen":1097510947092,"flow_last_seen":1097510959487,"flow_tot_l4_data_len":783,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1159,"dst_port":20000,"l4_proto":"tcp"}
+0452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1097512255234,"flow_last_seen":1097512255234,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1184,"dst_port":20000,"l4_proto":"tcp"}
+0392{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBpNAAIAG4CoKAAAICgAAAwSgTiANrtDCAAAAAHAC\/\/895AAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBpNAAIAG4CoKAAAICgAAAwSgTiANrtDCAAAAAHAC\/\/895AAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwBpNAAIAG4CoKAAAICgAAAwSgTiANrtDCAAAAAHAC\/\/895AAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyodAAIAGHDYKAAADCgAACE4gBKD5DYC1Da7Qw3AS\/\/\/EDwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyodAAIAGHDYKAAADCgAACE4gBKD5DYC1Da7Qw3AS\/\/\/EDwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwyodAAIAGHDYKAAADCgAACE4gBKD5DYC1Da7Qw3AS\/\/\/EDwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpRAAIAG4DEKAAAICgAAAwSgTiANrtDD+Q2AtlAQ\/\/\/w0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpRAAIAG4DEKAAAICgAAAwSgTiANrtDD+Q2AtlAQ\/\/\/w0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpRAAIAG4DEKAAAICgAAAwSgTiANrtDD+Q2AtlAQ\/\/\/w0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yohAAIAGHCwKAAADCgAACE4gBKD5DYC2Da7Qw1AY\/\/8eDAAABWQKRAMABAB8rtvxghAAVeE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1097512255234,"flow_last_seen":1097512255236,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1184,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0405{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yohAAIAGHCwKAAADCgAACE4gBKD5DYC2Da7Qw1AY\/\/8eDAAABWQKRAMABAB8rtvxghAAVeE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5yohAAIAGHCwKAAADCgAACE4gBKD5DYC2Da7Qw1AY\/\/8eDAAABWQKRAMABAB8rtvxghAAVeE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpVAAIAG4DAKAAAICgAAAwSgTiANrtDD+Q2Ax1AQ\/+7w0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpVAAIAG4DAKAAAICgAAAwSgTiANrtDD+Q2Ax1AQ\/+7w0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097512255,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoBpVAAIAG4DAKAAAICgAAAwSgTiANrtDD+Q2Ax1AQ\/+7w0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":6,"flow_packet_id":33,"flow_first_seen":1097512255234,"flow_last_seen":1097512267645,"flow_tot_l4_data_len":1005,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.8","dst_ip":"10.0.0.3","src_port":1184,"dst_port":20000,"l4_proto":"tcp"}
+0452{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1097513177295,"flow_last_seen":1097513177295,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1084,"dst_port":20000,"l4_proto":"tcp"}
+0392{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAUpAAIAG5XIKAAAJCgAAAwQ8TiBc3qwfAAAAAHAC\/\/8TugAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAUpAAIAG5XIKAAAJCgAAAwQ8TiBc3qwfAAAAAHAC\/\/8TugAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":62,"pkt":"AAKzznBRAFAEk3BnCABFAAAwAUpAAIAG5XIKAAAJCgAAAwQ8TiBc3qwfAAAAAHAC\/\/8TugAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwy1lAAIAGG2MKAAADCgAACU4gBDwG052kXN6sIHAS\/\/9vMQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwy1lAAIAGG2MKAAADCgAACU4gBDwG052kXN6sIHAS\/\/9vMQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":62,"pkt":"AFAEk3BnAAKzznBRCABFAAAwy1lAAIAGG2MKAAADCgAACU4gBDwG052kXN6sIHAS\/\/9vMQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUtAAIAG5XkKAAAJCgAAAwQ8TiBc3qwgBtOdpVAQ\/\/+b9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUtAAIAG5XkKAAAJCgAAAwQ8TiBc3qwgBtOdpVAQ\/\/+b9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUtAAIAG5XkKAAAJCgAAAwQ8TiBc3qwgBtOdpVAQ\/\/+b9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5y1pAAIAGG1kKAAADCgAACU4gBDwG052lXN6sIFAY\/\/\/I4gAABWQKRAMABgCZtcb2gpUBD9Y=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":7,"flow_packet_id":10,"flow_first_seen":1097513177295,"flow_last_seen":1097513177297,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1084,"dst_port":20000,"l4_proto":"tcp","ndpi": {"proto":"DNP3","category":"IoT-Scada"}}
+0406{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5y1pAAIAGG1kKAAADCgAACU4gBDwG052lXN6sIFAY\/\/\/I4gAABWQKRAMABgCZtcb2gpUBD9Y=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":71,"pkt":"AFAEk3BnAAKzznBRCABFAAA5y1pAAIAGG1kKAAADCgAACU4gBDwG052lXN6sIFAY\/\/\/I4gAABWQKRAMABgCZtcb2gpUBD9Y=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUxAAIAG5XgKAAAJCgAAAwQ8TiBc3qwgBtOdtlAQ\/+6b9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUxAAIAG5XgKAAAJCgAAAwQ8TiBc3qwgBtOdtlAQ\/+6b9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","pkt_oversize":false,"pkt_ts":1097513177,"pkt_len":60,"pkt":"AAKzznBRAFAEk3BnCABFAAAoAUxAAIAG5XgKAAAJCgAAAwQ8TiBc3qwgBtOdtlAQ\/+6b9QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap","flow_id":7,"flow_packet_id":39,"flow_first_seen":1097513177295,"flow_last_seen":1097513185107,"flow_tot_l4_data_len":1023,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.9","dst_ip":"10.0.0.3","src_port":1084,"dst_port":20000,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnp3.pcap"}
diff --git a/tests/result/nDPId_dns-tunnel-iodine.pcap.txt b/tests/result/nDPId_dns-tunnel-iodine.pcap.txt
new file mode 100644
index 000000000..2fc120ce1
--- /dev/null
+++ b/tests/result/nDPId_dns-tunnel-iodine.pcap.txt
@@ -0,0 +1,26 @@
+0369{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1282356640051,"flow_last_seen":1282356640051,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":82,"pkt":"CAAnx266CAAnnOC0CABFAABEAABAAEARIngKAAIeCgACFK5fADUAMAHkErABAAABAAAAAAAAC3ZhYWFha2FyZGxpBnBpcmF0ZQNzZWEAAAoAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1282356640051,"flow_last_seen":1282356640051,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"vaaaakardli.pirate.sea","num_queries":0,"num_answers":0,"reply_code":0,"query_type":10,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":103,"pkt":"CAAnnOC0CAAnx266CABFAABZAABAAEARImMKAAIUCgACHgA1rl8ARRoeErCEAAABAAEAAAAAC3ZhYWFha2FyZGxpBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAACVZBQ0tEA8XpAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0707{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1282356640051,"flow_last_seen":1282356640051,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":48,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"23":"Suspicious DNS traffic"},"proto":"DNS","category":"Network"},"dns": {"query":"vaaaakardli.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}}
+0459{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":103,"pkt":"CAAnx266CAAnnOC0CABFAABZAABAAEARImMKAAIeCgACFK5fADUARcobMN8BAAABAAAAAAAAIGxhZWdwdW1pcGxoaHB6MTJ5bmQxZWZsandsa2pjZ3d5BnBpcmF0ZQNzZWEAAAoAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1282356640051,"flow_last_seen":1282356640051,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":48,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","category":"Network"},"dns": {"query":"laegpumiplhhpz12ynd1efljwlkjcgwy.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}}
+0511{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":144,"pkt":"CAAnnOC0CAAnx266CABFAACCAABAAEARIjoKAAIUCgACHgA1rl8Abm4wMN+EAAABAAEAAAAAIGxhZWdwdW1pcGxoaHB6MTJ5bmQxZWZsandsa2pjZ3d5BnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAHTEwLjIwLjMwLjEtMTAuMjAuMzAuMy0xMTMwLTI0","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1282356640051,"flow_last_seen":1282356640052,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":48,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","category":"Network"},"dns": {"query":"laegpumiplhhpz12ynd1efljwlkjcgwy.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}}
+0437{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":88,"pkt":"CAAnx266CAAnnOC0CABFAABKAABAAEARInIKAAIeCgACFK5fADUANnlrTw4BAAABAAAAAAABBnlyYmkwMgZwaXJhdGUDc2VhAAAKAAEAACkQAAAAgAAAAA==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0737{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1282356640051,"flow_last_seen":1282356640057,"flow_tot_l4_data_len":350,"flow_min_l4_data_len":48,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","category":"Network"},"dns": {"query":"yrbi02.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}}
+0508{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":137,"pkt":"CAAnnOC0CAAnx266CABFAAB7AABAAEARIkEKAAIUCgACHgA1rl8AZwLqTw6EAAABAAEAAAAABnlyYmkwMgZwaXJhdGUDc2VhAAAKAAHADAAKAAEAAAAAADAAAAAA\/\/\/\/\/1VVVVWqqqqqgWPI0sd8shdfT87JSS1SIWGpcSAlswZz5thEMHlQV78=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0737{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1282356640051,"flow_last_seen":1282356640057,"flow_tot_l4_data_len":453,"flow_min_l4_data_len":48,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","category":"Network"},"dns": {"query":"yrbi02.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}}
+0483{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":123,"pkt":"CAAnx266CAAnnOC0CABFAABtAABAAEARIk8KAAIeCgACFK5fADUAWRsabT0BAAABAAAAAAABKXppMDNhQS1BYWFoaGgtRHJpbmstbWFsLWVpbi1K5Gdlcm1laXN0ZXItBnBpcmF0ZQNzZWEAAAoAAQAAKRAAAACAAAAA","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":166,"pkt":"CAAnnOC0CAAnx266CABFAACYAABAAEARIiQKAAIUCgACHgA1rl8AhD+SbT2EAAABAAEAAAAAKXppMDNhQS1BYWFoaGgtRHJpbmstbWFsLWVpbi1K5Gdlcm1laXN0ZXItBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAKnppMDNhQS1BYWFoaGgtRHJpbmstbWFsLWVpbi1K5Gdlcm1laXN0ZXItLg==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":132,"pkt":"CAAnx266CAAnnOC0CABFAAB2AABAAEARIkYKAAIeCgACFK5fADUAYgOpi2wBAAABAAAAAAABMnppMDRhQS1MYS1mbPt0ZS1uYe92ZS1mcmFu52Fpc2UtZXN0LXJldGly6S3gLUNy6HRlBnBpcmF0ZQNzZWEAAAoAAQAAKRAAAACAAAAA","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":184,"pkt":"CAAnnOC0CAAnx266CABFAACqAABAAEARIhIKAAIUCgACHgA1rl8Alqpji2yEAAABAAEAAAAAMnppMDRhQS1MYS1mbPt0ZS1uYe92ZS1mcmFu52Fpc2UtZXN0LXJldGly6S3gLUNy6HRlBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAM3ppMDRhQS1MYS1mbPt0ZS1uYe92ZS1mcmFu52Fpc2UtZXN0LXJldGly6S3gLUNy6HRlLg==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":138,"pkt":"CAAnx266CAAnnOC0CABFAAB8AABAAEARIkAKAAIeCgACFK5fADUAaHG0qZsBAAABAAAAAAABOHppMDVhQWJCY0NkRGVFZkZnR2hIaUlqSmtLbExtTW5Ob09wUHFRclJzU3RUdVV2VndXeFh5WXpaBnBpcmF0ZQNzZWEAAAoAAQAAKRAAAACAAAAA","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0585{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":196,"pkt":"CAAnnOC0CAAnx266CABFAAC2AABAAEARIgYKAAIUCgACHgA1rl8AoqSpqZuEAAABAAEAAAAAOHppMDVhQWJCY0NkRGVFZkZnR2hIaUlqSmtLbExtTW5Ob09wUHFRclJzU3RUdVV2VndXeFh5WXpaBnBpcmF0ZQNzZWEAAAoAAcAMAAoAAQAAAAAAOXppMDVhQWJCY0NkRGVFZkZnR2hIaUlqSmtLbExtTW5Ob09wUHFRclJzU3RUdVV2VndXeFh5WXpaLg==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":118,"pkt":"CAAnx266CAAnnOC0CABFAABoAABAAEARIlQKAAIeCgACFK5fADUAVBazx8oBAAABAAAAAAABJHppMWFhQTAxMjM0NTY3ODm8vb6\/wMHCw8TFxsfIycrLzM3OzwZwaXJhdGUDc2VhAAAKAAEAACkQAAAAgAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":156,"pkt":"CAAnnOC0CAAnx266CABFAACOAABAAEARIi4KAAIUCgACHgA1rl8AegzWx8qEAAABAAEAAAAAJHppMWFhQTAxMjM0NTY3ODm8vb6\/wMHCw8TFxsfIycrLzM3OzwZwaXJhdGUDc2VhAAAKAAHADAAKAAEAAAAAACV6aTFhYUEwMTIzNDU2Nzg5vL2+v8DBwsPExcbHyMnKy8zNzs8u","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","pkt_oversize":false,"pkt_ts":1282356640,"pkt_len":134,"pkt":"CAAnx266CAAnnOC0CABFAAB4AABAAEARIkQKAAIeCgACFK5fADUAZN9j5fkBAAABAAAAAAABNHppMWJhQdDR0tPU1dbX2Nna29zd3t\/g4eLj5OXm5+jp6uvs7e7v8PHy8\/T19vf4+fr7\/P0GcGlyYXRlA3NlYQAACgABAAApEAAAAIAAAAA=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0737{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":255,"flow_first_seen":1282356640051,"flow_last_seen":1282356654812,"flow_tot_l4_data_len":37534,"flow_min_l4_data_len":48,"flow_max_l4_data_len":1478,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name","23":"Suspicious DNS traffic"},"proto":"DNS","category":"Network"},"dns": {"query":"yrbi02.pirate.sea","num_queries":1,"num_answers":1,"reply_code":0,"query_type":10,"rsp_type":10,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap","flow_id":0,"flow_packet_id":434,"flow_first_seen":1282356640051,"flow_last_seen":1282356664538,"flow_tot_l4_data_len":55496,"flow_min_l4_data_len":48,"flow_max_l4_data_len":1478,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.30","dst_ip":"10.0.2.20","src_port":44639,"dst_port":53,"l4_proto":"udp"}
+0155{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns-tunnel-iodine.pcap"}
diff --git a/tests/result/nDPId_dns_doh.pcap.txt b/tests/result/nDPId_dns_doh.pcap.txt
new file mode 100644
index 000000000..095c690f6
--- /dev/null
+++ b/tests/result/nDPId_dns_doh.pcap.txt
@@ -0,0 +1,21 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1571089200789,"flow_last_seen":1571089200789,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":78,"pkt":"WkBO7NFkeDHBvV4kCABFAABAAABAAEAGI5asFAoEaBD4+cLVAbuk7FgiAAAAALAC\/\/+OlwAAAgQFtAEDAwYBAQgKHZWyDQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":66,"pkt":"eDHBvV4kWkBO7NFkCABFAAA0AAAAADAGc6JoEPj5rBQKBAG7wtXKYdwupOxYI4ASchB+OgAAAgQFFAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":54,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FgjymHcL1AQEAAggAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1076{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1571089200789,"flow_last_seen":1571089200878,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0379{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":54,"pkt":"eDHBvV4kWkBO7NFkCABFAAAoZNYAADAGDthoEPj5rBQKBAG7wtXKYdwvpOxaKFAQAB4uXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2155{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":1354,"pkt":"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","pkt_caplen":1354,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1571089200789,"flow_last_seen":1571089200968,"flow_tot_l4_data_len":1973,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":328,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2143{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":1354,"pkt":"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","pkt_caplen":1354,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":54,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FooymHmV1AQD9cUfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":54,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FooymHmV1AQEAAUUwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0995{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":503,"pkt":"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","pkt_caplen":503,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":54,"pkt":"WkBO7NFkeDHBvV4kCABFAAAoAABAAEAGI66sFAoEaBD4+cLVAbuk7FooymHoGFAQD\/gSmgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":118,"pkt":"WkBO7NFkeDHBvV4kCABFAABoAABAAEAGI26sFAoEaBD4+cLVAbuk7FooymHoGFAYEACn1QAAFAMDAAEBFwMDADW8J+MNaAb\/wrltAAv4HDSCQz8Bzyn512OJeqBzVj9glvtCmUJWsHGBAefv3ABeaMgYnCN\/ZQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":224,"pkt":"WkBO7NFkeDHBvV4kCABFAADSAABAAEAGIwSsFAoEaBD4+cLVAbuk7FpoymHoGFAYEAAeoAAAFwMDAKVH6TqazYA7ng6LT4l7ICcI+zDrPqkD74EaZ6KlHesT55LnIvUipV2qXZpL8fzDqyEQhFLmXlLAQ93tMr6RsRmWGutBjX2OhZG68kQ4zzqatM7jcG4Y2nVphp4aNS7ac9Qo2\/v7IVdjtQB1CkeQwcFBtxuU+JEsGcEl4y5hc2GPOmwe\/WlOtwx06\/p3NlOkXM54GAVosDROpyIcNMw\/TJ\/7wU2Gazw=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":297,"pkt":"WkBO7NFkeDHBvV4kCABFAAEbAABAAEAGIrusFAoEaBD4+cLVAbuk7FsSymHoGFAYEADbRgAAFwMDAO5\/vj0XEVnApHWZyVont16WzoBfdkAUmUbtIto2rVqakjpRrb9v2jurJwqyY\/z6UQZ3HmonNk14uRAJ2lvf9WUw3Lxqp7XnO9mc2Y0eGDeOQ78Bx7eTPAZJQY8jyiAoQ0jXnRqdThIktvVorw4e0Wm1AXUizW5CUhMfL\/E8EAZDMdczfxELdU1ZS42ZaZ+Phxpxn5fNufCX++USMGjMdp0Yzm2pqkSCVTURNOtV4CfYYOT0WamTvw9J8T9gizqAu6EOuMORP1Jd2wYehzjyC0fMtnDXpkcDrt5TeWwCR9SAmt3pp7M0dWeWWko8+S69","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","pkt_oversize":false,"pkt_ts":1571089200,"pkt_len":133,"pkt":"WkBO7NFkeDHBvV4kCABFAAB3AABAAEAGI1+sFAoEaBD4+cLVAbuk7FwFymHoGFAYEACdtAAAFwMDAEqnnHxUsCqmPBkBxfdKmS1LGWAClj9T3prwE3TeVTsVPs4vesfDED+gBYka+2qIBZHm9ndhgvy1QPO4+xzZ0FzqwIc8Gf+UTIjqXQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap","flow_id":0,"flow_packet_id":142,"flow_first_seen":1571089200789,"flow_last_seen":1571089204031,"flow_tot_l4_data_len":15534,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1320,"flow_avg_l4_data_len":109,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.10.4","dst_ip":"104.16.248.249","src_port":49877,"dst_port":443,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_doh.pcap"}
diff --git a/tests/result/nDPId_dns_dot.pcap.txt b/tests/result/nDPId_dns_dot.pcap.txt
new file mode 100644
index 000000000..60746cb66
--- /dev/null
+++ b/tests/result/nDPId_dns_dot.pcap.txt
@@ -0,0 +1,21 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1572783663234,"flow_last_seen":1572783663234,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp"}
+0407{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":74,"pkt":"uCfrK5DxCAAnjau+CABFAAA8w6dAAEAGpKPAqAG5CAgICOOyA1VVRPv3AAAAAKAC+vDSnwAAAgQFtAQCCAoqL5UTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":74,"pkt":"CAAnjau+uCfrK5DxCABFAAA8cqUAAHcG\/qUICAgIwKgBuQNV47LuO0vYVUT7+KAS6yDKxQAAAgQFZAQCCAqOOwAQKi+VEwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":66,"pkt":"uCfrK5DxCAAnjau+CABFAAA0w6hAAEAGpKrAqAG5CAgICOOyA1VVRPv47jtL2YAQAfbSlwAAAQEICiovlTaOOwAQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":264,"pkt":"uCfrK5DxCAAnjau+CABFAAD6w6lAAEAGo+PAqAG5CAgICOOyA1VVRPv47jtL2YAYAfbTXQAAAQEICiovlTaOOwAQFgMDAMEBAAC9AwOCK\/MuQQ5sSYHkQFarOZKq84a6P\/ILns+YkoRGDIAgSQAAMsAszKnArcAKwCvArMAJwDDMqMAUwC\/AEwCdwJ0ANQCcwJwALwCfzKrAnwA5AJ7AngAzAQAAYgAFAAUBAAAAAAAKABQAEgAXABgAGQAdAQABAQECAQMBBAALAAIBAAANACAAHgQBCAkIBAQDCAcFAQgKCAUFAwYBCAsIBgYDAgECAwAWAAAAFwAAACMAAP8BAAEAABwAAkAA","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0813{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1572783663234,"flow_last_seen":1572783663269,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":32,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"4fe4099926d0acdc9b2fe4b02013659f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0396{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":66,"pkt":"CAAnjau+uCfrK5DxCABFAAA0cqYAAHcG\/qwICAgIwKgBuQNV47LuO0vZVUT8voAQAPDiaAAAAQEICo47ADIqL5U2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+4531{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":3135,"pkt":"CAAnjau+uCfrK5DxCABFAAwxcqsAAHcG8qoICAgIwKgBuQNV47LuO0vZVUT8voAYAPDelAAAAQEICo47AEIqL5U2FgMDAD8CAAA7AwNdvsYvAkHw9e7UIX3PyBcPhbDwczOdLTRET1dOR1JEAQDMqAAAEwAXAAD\/AQABAAALAAIBAAAjAAAWAwMKegsACnYACnMABh8wggYbMIIFA6ADAgECAhEAm93VOAzvaEYCAAAAAEfYsDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMwEQYDVQQDEwpHVFMgQ0EgMU8xMB4XDTE5MTAxMDIwNTg0MloXDTIwMDEwMjIwNTg0MlowZDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxEzARBgNVBAoTCkdvb2dsZSBMTEMxEzARBgNVBAMTCmRucy5nb29nbGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabVL3kPdFkZMO4tZFZTS3pJCwgDAv0Vaooht8m3xHNG+02FQTpPXnHzVnED+66l8hLi\/lnzRXG3UO6kuSQ4n4aWPEu9y2EfYMSeRt0uZ0Oyx\/Nx0pLeJwf6Q+MeFJ8ViEiMtGPi6uWxbiLjtXxqXEEiYRBaFtX5jMDwm6wV40e+vEiP\/kQOf7WOTGimZzcxCCcJn8hFiAlLXC4ByzIwFE7xcVdP+ydRE9Zy9T\/Y0rFUDDjCcYJFpw5Py9J+9HYCFAcloNZg8S1ortTsRH90h3RwM7Tn\/bVSEzsWHebAF6mMcoc0B8uk3A0szJiY3cqwMwi0ESAYx1nRkHC3pbrq5\/AgMBAAGjggLoMIIC5DAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH\/BAIwADAdBgNVHQ4EFgQUeGOKNB8SqBHv7OJWGnOorUt7eUgwHwYDVR0jBBgwFoAUmNH4bhDrz5vsYJ8YkBug630J\/SswZAYIKwYBBQUHAQEEWDBWMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHMxbzEwKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29vZy9nc3IyL0dUUzFPMS5jcnQwgawGA1UdEQSBpDCBoYIKZG5zLmdvb2dsZYIQKi5kbnMuZ29vZ2xlLmNvbYILODg4OC5nb29nbGWCDmRucy5nb29nbGUuY29tghBkbnM2NC5kbnMuZ29vZ2xlhxAgAUhgSGAAAAAAAAAAAABkhxAgAUhgSGAAAAAAAAAAAGRkhxAgAUhgSGAAAAAAAAAAAIhEhxAgAUhgSGAAAAAAAAAAAIiIhwQICAQEhwQICAgIMCEGA1UdIAQaMBgwCAYGZ4EMAQICMAwGCisGAQQB1nkCBQMwLwYDVR0fBCgwJjAkoCKgIIYeaHR0cDovL2NybC5wa2kuZ29vZy9HVFMxTzEuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFtt65opAAABAMARzBFAiA2zaOLybV\/po66kZBkyy8WcFZVe8T\/uksXcjWZlDY2pgIhAPeTjLqwHjLhH2wgJ9gFinuuR7lLCOmx+MCyMKiIOxiBAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtt65owgAABAMARzBFAiEA1B5xDge6E+cVFJVON0YMFY48b6xoUFxQUvzMkiMWUYYCIGScEKTeAm5hjbas8zubogEIcrvEFI\/6e0RKPgdzzou\/MA0GCSqGSIb3DQEBCwUAA4IBAQA9Dp7Wqfw2aYKeyr7uJlu4SujZSvaN675RHdEPhMj+qJGop\/Gq5vJbt91usUroGfvDFQb8VoGPSLFynOC5OY06PXWWCd5c5kKN\/iTeEjX9Ha8HQlh9FEvaul9Qz2lQt+cRe3qRpImpRl4DMKtgNOCxk9SnRVEA3P1o+uOVhDwcPdK2VQ2NPqzeGatK+IxwlukNqW6ZOiKyZvEqQawdfWbDQ40fYxm10LSZdohzHkPn9Oar7WOKW1cMYwnaW7ItZQ9mFqJrMky8xTzHCDRgBJdrijixQdHfxSUsfSCPGAUn5KR0BMBA9hr5HksIm6zCgJYEwKr1jJCqJhVnFhxD4c7tAAROMIIESjCCAzKgAwIBAgINAeO0mqGNiqmBJWlQuDANBgkqhkiG9w0BAQsFADBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMjETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xNzA2MTUwMDAwNDJaFw0yMTEyMTUwMDAwNDJaMEIxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVHb29nbGUgVHJ1c3QgU2VydmljZXMxEzARBgNVBAMTCkdUUyBDQSAxTzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGM9F1IvN05zkQO9+tN1pIRvJzzyOTHW5DzEZhD2ePCnvUA0Qk28FgICfKqC9EksC4T2fWBYk\/jCfC3R3VZMdS\/dN4ZKCEPZRrAzDsiKUDzRrmBBJ5wudgzndIMYcLe\/RGGFl5yODIKgjEv\/SJH\/UL+dEaltN11BmsK+eQmMF++AcxGNhr59qM\/9il71I2dN8FGfcddwuaej4bXhp0LcQBbjxMcI7JP0aM3T4I+DsaxmKFsbjzaTNC9uzpFlgOIg7rR25xoynUxv8vNmkq7zdPGHXkxWY7oG9j+JkRyBABk7XrJfoucBZEqFJJSPk7XA0LKW0Y3z5oz2D0c1tJKwHAgMBAAGjggEzMIIBLzAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB\/wQIMAYBAf8CAQAwHQYDVR0OBBYEFJjR+G4Q68+b7GCfGJAboOt9Cf0rMB8GA1UdIwQYMBaAFJviB1dnHB7AagbeWbSaLd\/cGYYuMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AucGtpLmdvb2cvZ3NyMjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnBraS5nb29nL2dzcjIvZ3NyMi5jcmwwPwYDVR0gBDgwNjA0BgZngQwBAgIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly9wa2kuZ29vZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAGoA+Nnn78y6pRjd9XlQWNa7HTgiZ\/r3RNGkmUmYHPQq6Scti9PEajvwRT2iWTHQr02fesqOqBY2ETUwgZQ+lltoNFvhsO9tvBCOIazpswWC9aJ9xju4tWDQH8NVU6YZZ\/XteDSGU9YzJqPjY8q3MDxrzmqepBCf5o8mw\/wJ4a2G6xzUr6Fb6T8McDO22PLRL6u3M4Tzs3A2M1j6bykJYi8wWIRdAvKLWZu\/axBVbzYmqmwkm5zLSDW5nIAJbELCQCZwMH56t2Dvqofxs6BBcCFIZUSpxu6x6td0V7SvJCCosirSmIatj\/9dSSVDQibet8q\/7UK4v4ZUN80atnZz1yhYDAwEsDAABKAMAHSCENl1POvb6My7D4hPc\/sMJ7Tufg\/LCEx1rGH6qSE8RaQgEAQC5wySkCTDkvijEKyzcSo\/8MnFKyuNuS9ozlsIo\/40DVij51vWGmHTS5GhFyCASQxaHGFTYsSHNMC3Wgv1H5KA3Mee1B9o\/hTw4uoTHLTeXjL2YEsYJN9UTVvZQVJzdkM4XQcWw5Br+vs7\/JC6fD8JjJh5+eSdQSQUB1aDgH89Z9ZwCeYsojgzQtwUQ5wgEEXVn+8ro2wBZ1wX27tOYjI\/oTWlDrsQz8l4usXnSogdtc1LL9t0IoL8kjOwDk997Z7u7Ftz23DDAL\/5t80M3zHefGPuWFCnrCFYqLE6vev\/cyzB+YQm+GAEHnkVrh2JZz65l3\/Xfzwl06w\/f+XmJ7He+FgMDAAQOAAAA","pkt_caplen":3135,"pkt_type":2048,"pkt_ipoffset":14}
+1183{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1572783663234,"flow_last_seen":1572783663319,"flow_tot_l4_data_len":3475,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3101,"flow_avg_l4_data_len":579,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"4fe4099926d0acdc9b2fe4b02013659f","ja3s":"2b341b88c742e940cfb485ce7d93dde7","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"BE:73:46:2A:2E:FB:A9:E9:42:D0:71:10:1B:8C:BF:44:6A:5D:AD:53"}}
+0395{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":66,"pkt":"uCfrK5DxCAAnjau+CABFAAA0w6pAAEAGpKjAqAG5CAgICOOyA1VVRPy+7jtX1oAQAenSlwAAAQEICiovlWiOOwBC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":151,"pkt":"uCfrK5DxCAAnjau+CABFAACJw6tAAEAGpFLAqAG5CAgICOOyA1VVRPy+7jtX1oAYAfXS7AAAAQEICiovlWmOOwBCFgMDACUQAAAhIIM\/\/7FVcfHSFoqNIHr07cwqtvDH7hAhWndiIOh8GFcLFAMDAAEBFgMDACAsJJrG91X8jl9pfndV2J\/0bngr7Be5pjDHfr3UQO+thw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":89,"pkt":"uCfrK5DxCAAnjau+CABFAABLw6xAAEAGpI\/AqAG5CAgICOOyA1VVRP0T7jtX1oAYAfXSrgAAAQEICiovlWmOOwBCFwMDABJ94OHAwTINl5f66A1sOf3\/IT8=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":128,"pkt":"uCfrK5DxCAAnjau+CABFAAByw61AAEAGpGfAqAG5CAgICOOyA1VVRP0q7jtX1oAYAfXS1QAAAQEICiovlWmOOwBCFwMDADk+iF8WPogamauS6gq3tjNHZmWCZeuPS7CKykhxgrPl9SkAa+FKuW8abnIFYN1rE6iL2lyZIzBEbNg=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":342,"pkt":"CAAnjau+uCfrK5DxCABFAAFIcr0AAHcG\/YEICAgIwKgBuQNV47LuO1fWVUT9E4AYAPBtAgAAAQEICo47AGMqL5VpFgMDAOQEAADgAAGJwADaAANPyS96Dnih+MQfD5GnBlJnAkBO\/bzmqeQVptfgwT391iseGI33ohOOJcPIJSQK\/OjtFfbzntzZDgiiBxv5lJS3Yn5133JSBVoRxa4quztlpAvYA7UZoOrFtfDjnvq7jfvTcSl9TjxdScdWC+QMTiN+ojOC3txxoYuf\/VMy7bQhkhTmvfdxyxc8O8Sl54xomNFsejR1POo2iLuH5HcvEW7rkSCZwQ8bZnjAZ1GAUdUtTREFP8VWiZGr9cIJ50sqsyH9aBwXSaRanjNBwG8rnHNe8cOQ9Ply\/wEUAwMAAQEWAwMAIMflBP6A7l78Jq+fJ0vlRSexLHF48\/TgtM27rcU3NLae","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":66,"pkt":"CAAnjau+uCfrK5DxCABFAAA0cr4AAHcG\/pQICAgIwKgBuQNV47LuO1jqVUT9aIAQAPDUSQAAAQEICo47AGMqL5Vp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":178,"pkt":"CAAnjau+uCfrK5DxCABFAACkcscAAHcG\/hsICAgIwKgBuQNV47LuO1jqVUT9aIAYAPA14wAAAQEICo47AG0qL5VpFwMDAGtCZAKYrlOw7p7Ypme9t\/jxCtE4s3HbB+oF3nvBhGolPit9CQPVOUDaPHWJ6Wddy5sdn+0b82cMnVdi1F6cKaM9dEhCKMWku7ZXhgF9LPwgwe31yVB9tI+mAU3oHSrmP6q7mlJnO5Q6OCmQ+g==","pkt_caplen":178,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783663,"pkt_len":66,"pkt":"uCfrK5DxCAAnjau+CABFAAA0w65AAEAGpKTAqAG5CAgICOOyA1VVRP1o7jtZWoAQAfXSlwAAAQEICiovlZOOOwBj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","pkt_oversize":false,"pkt_ts":1572783664,"pkt_len":89,"pkt":"uCfrK5DxCAAnjau+CABFAABLw69AAEAGpIzAqAG5CAgICOOyA1VVRP1o7jtZWoAYAfXSrgAAAQEICiovmhuOOwBjFwMDABI82N\/gUdWtanJsd6FACr8N0eU=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap","flow_id":0,"flow_packet_id":24,"flow_first_seen":1572783663234,"flow_last_seen":1572783666246,"flow_tot_l4_data_len":5053,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3101,"flow_avg_l4_data_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.185","dst_ip":"8.8.8.8","src_port":58290,"dst_port":853,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_dot.pcap"}
diff --git a/tests/result/nDPId_dns_exfiltration.pcap.txt b/tests/result/nDPId_dns_exfiltration.pcap.txt
new file mode 100644
index 000000000..d555fc5a5
--- /dev/null
+++ b/tests/result/nDPId_dns_exfiltration.pcap.txt
@@ -0,0 +1,26 @@
+0368{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1580978146717,"flow_last_seen":1580978146717,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp"}
+0606{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978146,"pkt_len":215,"pkt":"qqru7hERjNzURr7ECABFAADJegRAAD8RAADAqNw4wKjLp9w1ADUAtSn4OR0BAAABAAAAAAAABmRuc2NhdDw1NDZiMDNmNTAwMDAwMDAwMDBhNjAyM2VkNGRmMTg0ZDZhYzVjMjYyOGI0NzcxNGZkZWU1ODRmZWQ3Mzk8NWEwM2I1YjFlMWFhOGY4ZmRiMWJiZThkNWUwNDk1MjE0MWY3ZDRmODJjN2UzYjA2ZGNjOGI4N2ZhZDdhGjE5ZTRkMDk4ZGM4YzYxOGY4ZDgxY2ZlYjAyAAAPAAE=","pkt_caplen":215,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1580978146717,"flow_last_seen":1580978146717,"flow_tot_l4_data_len":181,"flow_min_l4_data_len":181,"flow_max_l4_data_len":181,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.546b03f50000000000a6023ed4df184d6ac5c2628b47714fdee584fed739.5a03b5b1e1aa8f8fdb1bbe8d5e04952141f7d4f82c7e3b06dcc8b87fad7a.19e4d098dc8c618f8d81cfeb02","num_queries":0,"num_answers":0,"reply_code":0,"query_type":15,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0835{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978146,"pkt_len":386,"pkt":"jNzURr7Eqqru7hERCABFAAF0PC1AAD8R1RrAqMunwKjcOAA13DUBYD3xOR2BgAABAAEAAAAABmRuc2NhdDw1NDZiMDNmNTAwMDAwMDAwMDBhNjAyM2VkNGRmMTg0ZDZhYzVjMjYyOGI0NzcxNGZkZWU1ODRmZWQ3Mzk8NWEwM2I1YjFlMWFhOGY4ZmRiMWJiZThkNWUwNDk1MjE0MWY3ZDRmODJjN2UzYjA2ZGNjOGI4N2ZhZDdhGjE5ZTRkMDk4ZGM4YzYxOGY4ZDgxY2ZlYjAyAAAPAAHADAAPAAEAAAA8AJ8ACgZkbnNjYXQ\/MjAxZjAzZjUwMDAwMDAwMDAwNzEzYjkyNzFmMDExZGM3NjQyM2RhYjM5MmMzMmMxOGJmYzk2YjZkMjY5NWEyPzZhOTExYzk0NDcyZjU5NDA5YTVmNTI2MDEzZTc2MDE5MzY2YTA3NzkyOWUzNDgwZmJlNmQ3YzRlZGE2ZjkwOBRmMmJjOTlhNjAxZTFhODIyMTMzNgA=","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0857{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1580978146717,"flow_last_seen":1580978146888,"flow_tot_l4_data_len":533,"flow_min_l4_data_len":181,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":266,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.546b03f50000000000a6023ed4df184d6ac5c2628b47714fdee584fed739.5a03b5b1e1aa8f8fdb1bbe8d5e04952141f7d4f82c7e3b06dcc8b87fad7a.19e4d098dc8c618f8d81cfeb02","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0542{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978147,"pkt_len":166,"pkt":"qqru7hERjNzURr7ECABFAACYekZAAD8RAADAqNw4wKjLp9w1ADUAhCnHfRoBAAABAAAAAAAABmRuc2NhdDw5MWYwMDNmNTAwZjYxMjIxODEwYWVhMDAwMDA0ODYzYzY5MTU4MGVjYWQ2NmY2NGFjN2RkYjg3Yjg5YzcmOTIwMDgyMWU1MjdkNGUxNzYzMjUzYzI1ZTI5N2UyYWE0MTEzZDAAAAUAAQ==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1580978146717,"flow_last_seen":1580978147753,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":132,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.91f003f500f61221810aea000004863c691580ecad66f64ac7ddb87b89c7.9200821e527d4e1763253c25e297e2aa4113d0","num_queries":1,"num_answers":1,"reply_code":0,"query_type":5,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0704{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978147,"pkt_len":286,"pkt":"jNzURr7Eqqru7hERCABFAAEQPNhAAD8R1NPAqMunwKjcOAA13DUA\/N3XfRqBgAABAAEAAAAABmRuc2NhdDw5MWYwMDNmNTAwZjYxMjIxODEwYWVhMDAwMDA0ODYzYzY5MTU4MGVjYWQ2NmY2NGFjN2RkYjg3Yjg5YzcmOTIwMDgyMWU1MjdkNGUxNzYzMjUzYzI1ZTI5N2UyYWE0MTEzZDAAAAUAAcAMAAUAAQAAADwAbAZkbnNjYXQ\/OWI2MTAzZjUwMGVlZTIwYjE1MTVmZGZmZmZiNTU4MmRiY2I4YzYwODg4NzY5MjFhNGI2MTNkZDkyNDIyNWQ1IzM0YjgzZDM2ZjJiNWJlNDljMzM0ZGIzMzAzMmFkNjE4ZTc1AA==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0806{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1580978146717,"flow_last_seen":1580978147755,"flow_tot_l4_data_len":917,"flow_min_l4_data_len":132,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.91f003f500f61221810aea000004863c691580ecad66f64ac7ddb87b89c7.9200821e527d4e1763253c25e297e2aa4113d0","num_queries":1,"num_answers":1,"reply_code":0,"query_type":5,"rsp_type":5,"rsp_addr":"0.0.0.0"}}
+0502{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978148,"pkt_len":136,"pkt":"qqru7hERjNzURr7ECABFAAB6emtAAD8RAADAqNw4wKjLp9w1ADUAZimpRz4BAAABAAAAAAAABmRuc2NhdDxhMzVjMDBmNTAwNTcwM2M4YjFiOGNkMDAwMTE4YjUyMzQ3YWViMWQ3MzM0MGM5N2NjYTQzYzM0YjI3Y2YIZWRmMGRiZGEAAA8AAQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1580978146717,"flow_last_seen":1580978148768,"flow_tot_l4_data_len":1019,"flow_min_l4_data_len":102,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.a35c00f5005703c8b1b8cd000118b52347aeb1d73340c97cca43c34b27cf.edf0dbda","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":5,"rsp_addr":"0.0.0.0"}}
+0579{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978148,"pkt_len":193,"pkt":"jNzURr7Eqqru7hERCABFAACzPONAAD8R1SXAqMunwKjcOAA13DUAn\/NXRz6BgAABAAEAAAAABmRuc2NhdDxhMzVjMDBmNTAwNTcwM2M4YjFiOGNkMDAwMTE4YjUyMzQ3YWViMWQ3MzM0MGM5N2NjYTQzYzM0YjI3Y2YIZWRmMGRiZGEAAA8AAcAMAA8AAQAAADwALQAKBmRuc2NhdCJmYWVlMDBmNTAwZmFjZGFmZjY2Y2Y5ZmZmZmZmZDMyZGJjAA==","pkt_caplen":193,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1580978146717,"flow_last_seen":1580978148770,"flow_tot_l4_data_len":1178,"flow_min_l4_data_len":102,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.a35c00f5005703c8b1b8cd000118b52347aeb1d73340c97cca43c34b27cf.edf0dbda","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0454{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978148,"pkt_len":101,"pkt":"qqru7hERjNzURr7ECABFAABXemxAAD8RAADAqNw4wKjLp9w1ADUAQymGG10BAAABAAAAAAAABmRuc2NhdCJmOTdjMDFmNTAwNmM3OThiOGQ2ZTk5MDAwMmUzNzcyYmM4AAAQAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978148,"pkt_len":148,"pkt":"jNzURr7Eqqru7hERCABFAACGPORAAD8R1VHAqMunwKjcOAA13DUAcnoeG12BgAABAAEAAAAABmRuc2NhdCJmOTdjMDFmNTAwNmM3OThiOGQ2ZTk5MDAwMmUzNzcyYmM4AAAQAAHADAAQAAEAAAA8ACMiMjU1NTAxZjUwMDM1MjJlZjQ2NDE1NWZmZmZmZmQzYWE0Yg==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978149,"pkt_len":101,"pkt":"qqru7hERjNzURr7ECABFAABXepdAAD8RAADAqNw4wKjLp9w1ADUAQymGMhMBAAABAAAAAAAABmRuc2NhdCJjMDgzMDFmNTAwMGViYjFmNDIxYTAzMDAwMzMyMGE2MTViAAAQAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978149,"pkt_len":148,"pkt":"jNzURr7Eqqru7hERCABFAACGPZxAAD8R1JnAqMunwKjcOAA13DUAcltcMhOBgAABAAEAAAAABmRuc2NhdCJjMDgzMDFmNTAwMGViYjFmNDIxYTAzMDAwMzMyMGE2MTViAAAQAAHADAAQAAEAAAA8ACMiNjFkNzAxZjUwMGI3MWIxNWQyODQ1ZmZmZmZmZmQzYWE0Yg==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978150,"pkt_len":101,"pkt":"qqru7hERjNzURr7ECABFAABXer1AAD8RAADAqNw4wKjLp9w1ADUAQymGrbEBAAABAAAAAAAABmRuc2NhdCI2M2MyMDFmNTAwNWZkMDJjYTVhMWJjMDAwNDcwMTVmM2QzAAAFAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978150,"pkt_len":156,"pkt":"jNzURr7Eqqru7hERCABFAACOPcRAAD8R1GnAqMunwKjcOAA13DUAevGsrbGBgAABAAEAAAAABmRuc2NhdCI2M2MyMDFmNTAwNWZkMDJjYTVhMWJjMDAwNDcwMTVmM2QzAAAFAAHADAAFAAEAAAA8ACsGZG5zY2F0IjdmMjcwMWY1MDAyMmQyZTcwNmJjODlmZmZmZmZkM2FhNGIA","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978151,"pkt_len":101,"pkt":"qqru7hERjNzURr7ECABFAABXeuJAAD8RAADAqNw4wKjLp9w1ADUAQymGXxkBAAABAAAAAAAABmRuc2NhdCJmYjhiMDFmNTAwMmZjMDE3ZTYxYmRhMDAwNWQ3YTZhZWFjAAAQAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978151,"pkt_len":148,"pkt":"jNzURr7Eqqru7hERCABFAACGPjJAAD8R1APAqMunwKjcOAA13DUAckeuXxmBgAABAAEAAAAABmRuc2NhdCJmYjhiMDFmNTAwMmZjMDE3ZTYxYmRhMDAwNWQ3YTZhZWFjAAAQAAHADAAQAAEAAAA8ACMiYTYzZjAxZjUwMDc0MjhjMzBlMWMwYWZmZmZmZmQzYWE0Yg==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","pkt_oversize":false,"pkt_ts":1580978152,"pkt_len":101,"pkt":"qqru7hERjNzURr7ECABFAABXezVAAD8RAADAqNw4wKjLp9w1ADUAQymG420BAAABAAAAAAAABmRuc2NhdCJjNGY5MDFmNTAwNDcxY2Q2ODNlZWQwMDAwNmY5MDdmMGY0AAAPAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":255,"flow_first_seen":1580978146717,"flow_last_seen":1580978206666,"flow_tot_l4_data_len":50136,"flow_min_l4_data_len":67,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":196,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"dnscat.a35c00f5005703c8b1b8cd000118b52347aeb1d73340c97cca43c34b27cf.edf0dbda","num_queries":1,"num_answers":1,"reply_code":0,"query_type":15,"rsp_type":15,"rsp_addr":"0.0.0.0"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap","flow_id":0,"flow_packet_id":300,"flow_first_seen":1580978146717,"flow_last_seen":1580978206707,"flow_tot_l4_data_len":63345,"flow_min_l4_data_len":67,"flow_max_l4_data_len":352,"flow_avg_l4_data_len":211,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.220.56","dst_ip":"192.168.203.167","src_port":56373,"dst_port":53,"l4_proto":"udp"}
+0154{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_exfiltration.pcap"}
diff --git a/tests/result/nDPId_dns_long_domainname.pcap.txt b/tests/result/nDPId_dns_long_domainname.pcap.txt
new file mode 100644
index 000000000..dac60784d
--- /dev/null
+++ b/tests/result/nDPId_dns_long_domainname.pcap.txt
@@ -0,0 +1,8 @@
+0371{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1599686652555,"flow_last_seen":1599686652555,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","pkt_oversize":false,"pkt_ts":1599686652,"pkt_len":103,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZsREAAEAR9yLAqAGoCAgICP8fADUARcOpi1QBAAABAAAAAAAABmdtcjAyYwIxNgEwDGZoa2Zoc2RrZmhzawZ0dW5uZWwHZXhhbXBsZQNjb20AAAEAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1599686652555,"flow_last_seen":1599686652555,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"gmr02c.16.0.fhkfhsdkfhsk.tunnel.example.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0534{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","pkt_oversize":false,"pkt_ts":1599686652,"pkt_len":159,"pkt":"KDc3AG3IEBMx8Tl2CABFAACR3WoAAHYRlJEICAgIwKgBqAA1\/x8AfQAAi1SBgwABAAAAAQAABmdtcjAyYwIxNgEwDGZoa2Zoc2RrZmhzawZ0dW5uZWwHZXhhbXBsZQNjb20AAAEAAcAsAAYAAQAABcMALAJucwVpY2FubgNvcmcAA25vYwNkbnPATHhn+r4AABwgAAAOEAASdQAAAA4Q","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1599686652555,"flow_last_seen":1599686652578,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":69,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Google","category":"Web"},"dns": {"query":"gmr02c.16.0.fhkfhsdkfhsk.tunnel.example.com","num_queries":1,"num_answers":1,"reply_code":3,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1599686652555,"flow_last_seen":1599686652578,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":69,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.168","dst_ip":"8.8.8.8","src_port":65311,"dst_port":53,"l4_proto":"udp"}
+0155{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dns_long_domainname.pcap"}
diff --git a/tests/result/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt b/tests/result/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt
new file mode 100644
index 000000000..77f9fb51b
--- /dev/null
+++ b/tests/result/nDPId_dnscrypt-v1-and-resolver-pings.pcap.txt
@@ -0,0 +1,1483 @@
+0382{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":946735705348,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp"}
+1071{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcCf9AAL0Rd68KAAABlTjkLZX0AbsCCDw8f0cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":946735705348,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":946735705348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp"}
+2353{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcCgAgAL0Rk+4KAAABlTjkLbKaAbsGBGxVf0QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":946735705348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQCgAAub0RuMEKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0211{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":946735705348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp"}
+2353{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcCgEgAL0Rk+0KAAABlTjkLYqnAbsGBJRGf0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":946735705348,"flow_last_seen":946735705348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQCgEAub0RuMAKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0211{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":946735705349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp"}
+1071{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcCgJAAL0Rd6wKAAABlTjkLYMdAbsCCDw8f0UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":946735705349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":946735705349,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp"}
+2353{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcCgMgAL0Rk+sKAAABlTjkLYmcAbsGBJVVf0IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":946735705349,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQCgMAub0RuL4KAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0211{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":946735705349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp"}
+1071{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":946735705349,"flow_last_seen":946735705349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0639{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC5oAADQRQF2VOOQtCgAAAQG7lfQAwC\/rf0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC5sAADQRQFyVOOQtCgAAAQG7640AwNpVf0OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC5wAADQRQFuVOOQtCgAAAQG7spoAwBNIf0SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC58AADQRQFiVOOQtCgAAAQG7iZwAwDxIf0KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC50AADQRQFqVOOQtCgAAAQG7iqcAwDs5f0aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946735705,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC54AADQRQFmVOOQtCgAAAQG7gx0AwELEf0WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":946735705348,"flow_last_seen":946735705453,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":946735705349,"flow_last_seen":946735705459,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":946735705348,"flow_last_seen":946735705457,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":946735705348,"flow_last_seen":946735705460,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":946735705349,"flow_last_seen":946735705461,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":946735705349,"flow_last_seen":946735705457,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp"}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":51004,"dst_port":1053,"l4_proto":"udp"}
+1072{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcFypAAL0R8NAKAAABPtK0R8c8BB0CCLXvBycBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":51004,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":52636,"dst_port":1053,"l4_proto":"udp"}
+1072{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":52636,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":49518,"dst_port":1053,"l4_proto":"udp"}
+1072{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":49518,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp"}
+2354{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcFy0gAL0RDQ4KAAABPtK0R6rkBB0GBCq4ByYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQFy0Aub0RMeEKAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp"}
+2355{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcFy4gAL0RDQ0KAAABPtK0R+AzBB0GBPVqByQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQFy4Aub0RMeAKAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp"}
+2355{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcFy8gAL0RDQwKAAABPtK0R9AzBB0GBAVtByIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQFy8Aub0RMd8KAAABPtK0RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0636{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWguYAADURTls+0rRHCgAAAQQdxzwAwvgJByeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAD603DX03HFYUGSUUMZQ5AFHqQDCbcRbndp5mF3SVu19eScXuGrpg2nLc5WDzV06y+FJw+Dah4cv34QVXrvZ7Q8nY1y4iPNLnPDmhCiX6M9Qv8kZOhpPDs+tmijF9ICJLydjXLiI80ucXop2NF6KdjRga6m0","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWguUAADQRT1w+0rRHCgAAAQQdzZwAwvGtByOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczIIaXJpc2VkZW4CZnIAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAD603DX03HFYUGSUUMZQ5AFHqQDCbcRbndp5mF3SVu19eScXuGrpg2nLc5WDzV06y+FJw+Dah4cv34QVXrvZ7Q8nY1y4iPNLnPDmhCiX6M9Qv8kZOhpPDs+tmijF9ICJLydjXLiI80ucXop2NF6KdjRga6m0","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":53697,"dst_port":8443,"l4_proto":"udp"}
+2355{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcHPkgAL0RfJ0KAAABuYbEN9HBIPsGBAgHfxoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":53697,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp"}
+1073{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQHPkAub0RoXAKAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp"}
+2355{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcHPsgAL0RfJsKAAABuYbEN4i9IPsGBFEJfxwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQHPsAub0RoW4KAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":59405,"dst_port":8443,"l4_proto":"udp"}
+1073{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":59405,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":50435,"dst_port":8443,"l4_proto":"udp"}
+1073{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcHP1AAL0RYFkKAAABuYbEN8UDIPsCCECUfxsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":50435,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp"}
+2355{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcHP4gAL0RfJgKAAABuYbEN9dTIPsGBAJxfx4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739304328,"flow_last_seen":946739304328,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQHP4Aub0RoWsKAAABuYbENwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWmUJAADQRblq5hsQ3CgAAASD7xQMAwuTIfxuAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWmUFAADQRblu5hsQ3CgAAASD7kiUAwhejfx+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWmURAADQRbli5hsQ3CgAAASD7iL0AwiEOfxyAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWmUNAADQRblm5hsQ3CgAAASD70cEAwtgLfxqAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44712,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcylFAAL0RDRQKAAABaO66wK6oAbsCCOaEZFgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44712,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcylIgAL0RKVMKAAABaO66wN6lAbsGBMqkZFUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQylIAub0RTiYKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":39655,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcylNAAL0RDRIKAAABaO66wJrnAbsCCOaEZFYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":39655,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59261,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcylVAAL0RDRAKAAABaO66wOd9AbsCCOaEZFQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59261,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59641,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcylYgAL0RKU8KAAABaO66wOj5AbsGBMBOZFcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59641,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcylQgAL0RKVEKAAABaO66wK3LAbsGBPuAZFMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739304363,"flow_last_seen":946739304363,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQylQAub0RTiQKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQylYAub0RTiIKAAABaO66wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWmUVAADQRble5hsQ3CgAAASD76A0AwsG8fx2AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWmUZAADQRbla5hsQ3CgAAASD711MAwtJ1fx6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUETlAADQRUHVo7rrACgAAAQG73qUAwDQQZFWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUETpAADQRUHRo7rrACgAAAQG7rqgAwGQKZFiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUETxAADQRUHJo7rrACgAAAQG7rcsAwGTsZFOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUET1AADQRUHFo7rrACgAAAQG7530AwCs5ZFSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUETtAADQRUHNo7rrACgAAAQG7mucAwHfNZFaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUET5AADQRUHBo7rrACgAAAQG76PkAwCm6ZFeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAF2CGRuc2NyeXB0AnVrAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAhKdWfhZK3D+gyCT1iixW\/FSRGoXDftkwga2BkZlttUlKSV94EyK2+BzaupeI4vEl+rXXsyVAmoCDcu2+5DAsD7Asxq95SKQwdQwh70VVdkKEIfYOFTawzG9XuIku9iynsCzGr3lIpDAAAAAFfU3cYX1TImA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":32793,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcZhNAAL0R0ewKAAAB0frxGYAZAbsCCIXq8VkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":32793,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcZhQgAL0R7isKAAAB0frxGdrjAbsGBM5Z8VQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQZhQAub0REv8KAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcZhUgAL0R7ioKAAAB0frxGZEDAbsGBBg48VYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQZhUAub0REv4KAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37950,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcZhZAAL0R0ekKAAAB0frxGZQ+AbsCCIXq8VUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37950,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":34324,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcZhdAAL0R0egKAAAB0frxGYYUAbsCCIXq8VcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":34324,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcZhggAL0R7icKAAAB0frxGefnAbsGBMFR8VgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739304599,"flow_last_seen":946739304599,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQZhgAub0REvsKAAAB0frxGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0629{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPni1AADcRISDR+vEZCgAAAQG7gBkAu2Pi8VmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPni5AADcRIR\/R+vEZCgAAAQG72uMAuwkd8VSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPnjBAADcRIR3R+vEZCgAAAQG7lD4Au0\/B8VWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPni9AADcRIR7R+vEZCgAAAQG7kQMAu1L78VaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43609,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcpRkgAL0RA98KAAABKU9FDapZAbsGBIt\/BsABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43609,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcpRogAL0RA94KAAABKU9FDbSVAbsGBIFBBsIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQpRkAub0RKLIKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQpRoAub0RKLEKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56043,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcpRsgAL0RA90KAAABKU9FDdrrAbsGBFrpBsQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56043,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcpRxAAL0R55sKAAABKU9FDZT4AbsCCDEyBsMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQpRsAub0RKLAKAAABKU9FDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56177,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcpR1AAL0R55oKAAABKU9FDdtxAbsCCDEyBsEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56177,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43365,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcpR5AAL0R55kKAAABKU9FDallAbsCCDEyBsUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":946739304628,"flow_last_seen":946739304628,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43365,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0629{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPnjFAADcRIRzR+vEZCgAAAQG7hhQAu13p8VeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPnjJAADcRIRvR+vEZCgAAAQG75+cAu\/wU8ViBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhtZWdhbmVyZAAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAfYAKepZwtScVP1uN5sT5N32akeuKSAV4oXU5Dhs9DYGIJJAdGKfXtNXiElvsQvm00KyC1gH3yBcsV0UHMhcHDXsbONUID12Y3+IJuxI0oT3pvizj3NQWIv0z50xYMyIaexs41QgPXZgAAAABX1N8A19UzYM=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSRcYAADIREz0pT0UNCgAAAQG7qlkAvgzwBsCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":45767,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":45767,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc6z8gAL0RfgsKAAABMw96+pfTAbsGBFECxkYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ6z8Aub0Rot4KAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc60AgAL0RfgoKAAABMw96+uk9AbsGBP+VxkgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ60AAub0Rot0KAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp"}
+2355{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc60IgAL0RfggKAAABMw96+phfAbsGBFB4xkQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ60IAub0RotsKAAABMw96+gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0212{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp"}
+1073{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":946739304789,"flow_last_seen":946739304789,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0635{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSRcUAADIREz4pT0UNCgAAAQG723EAvtvWBsGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSRcgAADIREzspT0UNCgAAAQG72usAvtxZBsSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSRcQAADIREz8pT0UNCgAAAQG7lPgAviJOBsOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSRccAADIREzwpT0UNCgAAAQG7tJUAvgKyBsKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSRckAADIREzopT0UNCgAAAQG7qWUAvg3fBsWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJ0egRkMHduA2JpegAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAA1OqoPAErbOR3M17\/\/Kp81C0M1irw8YLMFAcPIvcR6xyplTIczMGQTrzWWN9IPA9l2Zy1iwuUTL7se0EmV4wWC0NhfmNsLEH2LkBE84etohseSn740G5SsmjVFMMQ1O1aQ2F+Y2wsQfZfU52hX1OdoV9U7yE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTDfBAADURyGQzD3r6CgAAAQG7sscAv146xkmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTDfFAADURyGMzD3r6CgAAAQG7l9MAv3kxxkaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTDfJAADURyGIzD3r6CgAAAQG7ldoAv3srxkWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTDfNAADURyGEzD3r6CgAAAQG76T0AvyfFxkiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTDfRAADQRyWAzD3r6CgAAAQG7jzwAv4HHxkeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTDfVAADURyF8zD3r6CgAAAQG7mF8Av3inxkSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxzY2FsZXdheS1hbXMAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANmtKqgh6GipMki1mJfjDA0AnYgv5x5ccE3t3oFTaUI52T95jfN1yOwZ4Avs9tatx4lCV7PDmZkXQULOG2i1+g8X39eqNuFP4dSqiJZOoeF4tcdLtZP0Xezh1C6PMdZNUhff16o24U\/hAAAAAV9TeY1fVMsN","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59476,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcU1NAAL0RVBEKAAABizvIdOhUAbsCCBaGc5UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59476,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":47341,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcU1RAAL0RVBAKAAABizvIdLjtAbsCCBaGc5EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":47341,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":50335,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcU1VAAL0RVA8KAAABizvIdMSfAbsCCBaGc5MBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":50335,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcU1YgAL0RcE4KAAABizvIdKpxAbsGBMEKc5QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQU1YAub0RlSEKAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcU1cgAL0RcE0KAAABizvIdJLbAbsGBNikc5ABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQU1cAub0RlSAKAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcU1ggAL0RcEwKAAABizvIdOc6AbsGBIRDc5IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":946739305155,"flow_last_seen":946739305155,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQU1gAub0RlR8KAAABizvIdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0636{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSF51AADcRFxKLO8h0CgAAAQG76FQAvuw2c5WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSF55AADcRFxGLO8h0CgAAAQG7xJ8Avg\/uc5OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSF59AADcRFxCLO8h0CgAAAQG7uO0Avhuic5GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSF6FAADcRFw6LO8h0CgAAAQG7qnEAviobc5SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":47865,"dst_port":8443,"l4_proto":"udp"}
+1074{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcZYtAAL0RdE4KAAABwx5eHLr5IPsCCOQQMs4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":47865,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":33369,"dst_port":8443,"l4_proto":"udp"}
+2356{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcZYwgAL0RkI0KAAABwx5eHIJZIPsGBDAsMssBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":33369,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp"}
+1074{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcZY1AAL0RdEwKAAABwx5eHIhFIPsCCOQQMswBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQZYwAub0RtWAKAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp"}
+1074{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcZY5AAL0RdEsKAAABwx5eHKw9IPsCCOQQMsoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp"}
+2356{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcZY8gAL0RkIoKAAABwx5eHNIzIPsGBOBTMskBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQZY8Aub0RtV0KAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0636{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSF6JAADcRFw2LO8h0CgAAAQG7ktsAvkG1c5CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp"}
+2356{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcZZAgAL0RkIkKAAABwx5eHKz6IPsGBAWJMs0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":946739305192,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQZZAAub0RtVwKAAABwx5eHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0636{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSF6NAADcRFwyLO8h0CgAAAQG75zoAvu1Tc5KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJ1awAAEAABwAwAEAABAABwgAB9fEROU0MAAgAABjDMcMbz7yA0RLegztcBfq7VeYHKBaMLey+aMNVSTMo4Qj51\/gmF1JL4mny7Kl7CHKqU1ouuslp1lX1chQTTD+JLJw323p3g\/i9lq2cywGbzFxjIXwRFrAIdM6Cq64tY4ksnDfbeneAAAAABX1N7RV9UzMU=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQ+LRAADgRZ3HDHl4cCgAAASD7iEUAvOWBMsyAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQ+LVAADgRZ3DDHl4cCgAAASD7uvkAvLLLMs6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQ+LdAADgRZ27DHl4cCgAAASD7rD0AvMGLMsqAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQ+LZAADgRZ2\/DHl4cCgAAASD7glkAvOtuMsuAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":32970,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIciBpAAL0RGIYKAAABjgTMb4DKAbsCCB1KAhEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":32970,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":60962,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXciBwgAL0RNMQKAAABjgTMb+4iAbsGBKD1AgwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":60962,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXciBsgAL0RNMUKAAABjgTMb4EvAbsGBA3nAg4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQiBwAub0RWZcKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQiBsAub0RWZgKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":52284,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":52284,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXciB8gAL0RNMEKAAABjgTMb7cIAbsGBNgLAhABAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":946739305219,"flow_last_seen":946739305219,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQiB8Aub0RWZQKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0632{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQ+LhAADgRZ23DHl4cCgAAASD70jMAvJuWMsmAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQ+LlAADgRZ2zDHl4cCgAAASD7rPoAvMDLMs2AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydAVmZm11YwNuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAANu1cuNn82W5kyvuIYj3yDd11LkL534iAFDK9fBQA07jnu8CUEQwYJt1XxEE91D0YyFd2wLooVHv9yyAcc0SAAB5FL6yNLYbucmv1fHy4RsAcOv\/0XhGDt+qQ0bl\/YNRIXkUvrI0thu5ATQ9Gl8jB9hnnVXw","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWg00AADQR55mOBMxvCgAAAQG7zDwAwg0OAg2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWg04AADQR55iOBMxvCgAAAQG7gMoAwlh8AhGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWg1AAADQR55aOBMxvCgAAAQG7gS8AwlgaAg6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":50035,"dst_port":8443,"l4_proto":"udp"}
+1074{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcwI1AAL0RNQwKAAABlXBwCsNzIPsCCMhQbAABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":50035,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwI4gAL0RUUsKAAABlXBwCpxJIPsGBPr0a\/0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwI4Aub0Rdh4KAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwI8gAL0RUUoKAAABlXBwCtrWIPsGBLxpa\/sBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwI8Aub0Rdh0KAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwJEgAL0RUUgKAAABlXBwCqZKIPsGBPDxa\/8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":946739305327,"flow_last_seen":946739305327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwJEAub0RdhsKAAABlXBwCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":946739305328,"flow_last_seen":946739305328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":946739305328,"flow_last_seen":946739305328,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0641{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWg1EAADQR55WOBMxvCgAAAQG7qfEAwi9XAg+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWg08AADQR55eOBMxvCgAAAQG77iIAwusoAgyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWg1IAADQR55SOBMxvCgAAAQG7twgAwiI\/AhCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHTCJAADsRLU2VcHAKCgAAASD7nEkAM5Mra\/2AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":946739305348,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcCf9AAL0Rd68KAAABlTjkLZX0AbsCCDw8f0cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":946739305348,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":946739305348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcCgAgAL0Rk+4KAAABlTjkLbKaAbsGBGxVf0QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":946739305348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQCgAAub0RuMEKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":946739305348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcCgEgAL0Rk+0KAAABlTjkLYqnAbsGBJRGf0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":946739305348,"flow_last_seen":946739305348,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQCgEAub0RuMAKAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":946739305349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcCgJAAL0Rd6wKAAABlTjkLYMdAbsCCDw8f0UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":946739305349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":946739305349,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcCgMgAL0Rk+sKAAABlTjkLYmcAbsGBJVVf0IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":946739305349,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQCgMAub0RuL4KAAABlTjkLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0448{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHIUUAADsRmCqVcHAKCgAAASD7w3MAM2v+bACAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":946739305349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":946739305349,"flow_last_seen":946739305349,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0449{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHTCRAADsRLUuVcHAKCgAAASD7pkoAM4koa\/+AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHTCNAADsRLUyVcHAKCgAAASD72tYAM1Sga\/uAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHIUgAADsRmCeVcHAKCgAAASD72LoAM1a7a\/yAAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABH12NAADsRoguVcHAKCgAAASD74HkAM076a\/6AAAABAAAAAAAAATINZG5zY3J5cHQtY2VydAVxdWFkOQNuZXQAABAAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC5oAADQRQF2VOOQtCgAAAQG7lfQAwC\/rf0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC5sAADQRQFyVOOQtCgAAAQG7640AwNpVf0OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC5wAADQRQFuVOOQtCgAAAQG7spoAwBNIf0SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC58AADQRQFiVOOQtCgAAAQG7iZwAwDxIf0KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":68,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC50AADQRQFqVOOQtCgAAAQG7iqcAwDs5f0aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUC54AADQRQFmVOOQtCgAAAQG7gx0AwELEf0WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0yAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAAAFGFEAAwsZ+sBWpvUVROInn0h1y0+FE\/VHdPKdwGWI15rFeV84ZdSkid7VtVlPn9SchFzfn3Pj66PFpyoNS6YMir6PRfcrBtc8JsfsQb\/FwAoHgENy0Ke+Bxb4NU7gNSOLvo9F9ysG119TYaFfU2GhX1SzIQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":49512,"dst_port":1443,"l4_proto":"udp"}
+1074{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":49512,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp"}
+2356{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+mAgAL0REzsKAAABrGhdUMbhBaMGBCsUtDYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+mAAub0ROA4KAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp"}
+2356{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+mEgAL0REzoKAAABrGhdUKNIBaMGBE6vtDQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+mEAub0ROA0KAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp"}
+1074{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":59489,"dst_port":1443,"l4_proto":"udp"}
+1074{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":59489,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp"}
+2356{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+mQgAL0REzcKAAABrGhdUN5GBaMGBBOttDgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":946739306241,"flow_last_seen":946739306241,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+mQAub0ROAoKAAABrGhdUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0822{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":361,"pkt":"ZmZmZmZmRERERERECABFAAFbc7kAADgRQ2SsaF1QCgAAAQWjwWgBRx3ktDmBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":361,"pkt":"ZmZmZmZmRERERERECABFAAFbc70AADgRQ2CsaF1QCgAAAQWj6GEBR\/bstDeBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":361,"pkt":"ZmZmZmZmRERERERECABFAAFbc7oAADgRQ2OsaF1QCgAAAQWjxuEBRxhutDaBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":361,"pkt":"ZmZmZmZmRERERERECABFAAFbc74AADgRQ1+saF1QCgAAAQWj3kYBRwEHtDiBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":361,"pkt":"ZmZmZmZmRERERERECABFAAFbc7wAADgRQ2GsaF1QCgAAAQWjlYsBR0nFtDWBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":361,"pkt":"ZmZmZmZmRERERERECABFAAFbc7sAADcRRGKsaF1QCgAAAQWjo0gBRzwJtDSBgAABAAIAAAAAATINZG5zY3J5cHQtY2VydAJqcAR0aWFyA2FwcAAAEAABwAwAEAABAAAAAAB9fEROU0MAAgAARetMpee6oZgp6bqFLigcb0SLVmyPyCbHZR6HuGkwY4G1zZ8bDjrU7\/iD1UD40EN1uvlcdqls0BZMl43HwVwZARZAkJHggho4ekmN0Zb884jA2erV10Cju7fjg6Pz8KRbF0CQkeCCGjhfU2UoX1NlKF9UtqjADAAQAAEAAAAAAH18RE5TQwABAACIFa1N+k0s+4iBtwxUZ\/VXDn6QTrqbz7JAjEb6C42munCjxleQqYGFgM5AgV1cY1L\/xiUTddAkkuTfkcOlN9YEFkCQkeCCGjh6SY3RlvzziMDZ6tXXQKO7t+ODo\/PwpFsWQJCR4IIaOF9TZShfU2UoX1S2qA==","pkt_caplen":361,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38349,"dst_port":553,"l4_proto":"udp"}
+1074{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIctEJAAL0RBKQKAAABzbl0dJXNAikCCAUEnScBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38349,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38879,"dst_port":553,"l4_proto":"udp"}
+1074{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIctENAAL0RBKMKAAABzbl0dJffAikCCAUEnSsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38879,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":43528,"dst_port":553,"l4_proto":"udp"}
+1074{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIctERAAL0RBKIKAAABzbl0dKoIAikCCAUEnSkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":43528,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":51770,"dst_port":553,"l4_proto":"udp"}
+2356{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXctEUgAL0RIOEKAAABzbl0dMo6AikGBP1vnSoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":51770,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp"}
+2356{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXctEYgAL0RIOAKAAABzbl0dJWGAikGBDIonSYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQtEUAub0RRbQKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQtEYAub0RRbMKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp"}
+2356{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXctEcgAL0RIN8KAAABzbl0dNoOAikGBO2dnSgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":946739311153,"flow_last_seen":946739311153,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQtEcAub0RRbIKAAABzbl0dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADShQAAADIRADHNuXR0CgAAAQIpqggAvpKvnSmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADShP8AADIRADLNuXR0CgAAAQIpl98AvqTWnSuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":78,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADShQEAADIRADDNuXR0CgAAAQIplc0AvqbsnSeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADShQQAADIRAC3NuXR0CgAAAQIp2g4AvmKqnSiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":81,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADShQIAADIRAC\/NuXR0CgAAAQIpyjoAvnJ8nSqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADShQMAADIRAC7NuXR0CgAAAQIplYYAvqc0nSaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdmcmVldHNhA29yZwAAEAABwAwAEAABAAAAAAB9fEROU0MAAQAAn\/hr1LBKsWo8ISWGing3CJIxyJebVH0i+FiEft0kNqLwa8d8MG0HYasP8XBuGRRYuXbJWON+8OmftD\/GOCqkDQBv6De0v2\/+w89vsWNxuh1o1S9D9qyf\/kIslLiOA5h7AG\/oN7S\/b\/5fU2VhX1NlYV9UtuE=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55834,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcgu5AAL0RWGMKAAABNEHrgdoaAbsCCOKYCnMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55834,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":46313,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcgu8gAL0RdKIKAAABNEHrgbTpAbsGBA+NCnABAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0608{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":46313,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcgvBAAL0RWGEKAAABNEHrgc6vAbsCCOKYCnEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQgu8Aub0RmXUKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcgvEgAL0RdKAKAAABNEHrgbpFAbsGBAozCm4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0608{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcgvJAAL0RWF8KAAABNEHrgdqrAbsCCOKYCm8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQgvEAub0RmXMKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcgvMgAL0RdJ4KAAABNEHrgdhxAbsGBOwCCnIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0608{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":946739311802,"flow_last_seen":946739311802,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"DNScrypt.Amazon","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQgvMAub0RmXEKAAABNEHrgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUhiJAACkR6nc0QeuBCgAAAQG72hoAwNtICnOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUhiRAACkR6nU0QeuBCgAAAQG7zq8AwOa1CnGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":85,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUhiNAACgR63Y0QeuBCgAAAQG7tOkAwAB9CnCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":87,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUhiVAACkR6nQ0QeuBCgAAAQG7ukUAwPsiCm6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":38812,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcRfwgAL0RYAgKAAABMw8+QZecAbsGBGX0xUgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":38812,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0641{"flow_id":89,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUhiZAACkR6nM0QeuBCgAAAQG72HEAwNzyCnKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQRfwAub0RhNsKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcRf1AAL0RQ8cKAAABMw8+QbOpAbsCCDQmxUkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAHBAAwBvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcRf4gAL0RYAYKAAABMw8+Qd1wAbsGBCAixUYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQRf4Aub0RhNkKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":88,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUhidAACgR63I0QeuBCgAAAQG72qsAwNq7Cm+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydApkZWZmZXItZG5zAmF1AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAHR7dJhGoyFx8KdrkIsoh61C8rxtxAaFzxQo\/agVQzzjpZ5APiE6q3FOpAI96QjakMreCrdTAjP8EJbJX\/I6UH9uHXHTkXq4cOyA70iJwlafDxONoi+u6\/0zTNviG6FU724dcdORerhwAAAAFfU2DvX1Sybw==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp"}
+2356{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcRf8gAL0RYAUKAAABMw8+QYLxAbsGBHqjxUQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAW9AAwFuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQRf8Aub0RhNgKAAABMw8+QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp"}
+1074{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcRgBAAL0RQ8QKAAABMw8+QarCAbsCCDQmxUUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAQAAAAAAAAAAAAHBAAwBvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":946739312105,"flow_last_seen":946739312105,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":946739312106,"flow_last_seen":946739312106,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":60735,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":946739312106,"flow_last_seen":946739312106,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":60735,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0642{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":231,"pkt":"ZmZmZmZmRERERERECABFAADZ1MsAADURfjwzDz5BCgAAAQG7l5wAxS3cxUiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":92,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":231,"pkt":"ZmZmZmZmRERERERECABFAADZ1MwAADURfjszDz5BCgAAAQG73XAAxegJxUaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":41913,"dst_port":4343,"l4_proto":"udp"}
+1074{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":41913,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp"}
+2356{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwbUgAL0RbKUKAAABLZm7YJQCEPcGBM6aMPUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwbUAub0RkXgKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp"}
+2356{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwbYgAL0RbKQKAAABLZm7YLOjEPcGBK77MPMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwbYAub0RkXcKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp"}
+1074{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":43129,"dst_port":4343,"l4_proto":"udp"}
+1075{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":43129,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwbkgAL0RbKEKAAABLZm7YJ4DEPcGBMSXMPcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":946739312132,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwbkAub0RkXQKAAABLZm7YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0642{"flow_id":93,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":231,"pkt":"ZmZmZmZmRERERERECABFAADZ1M0AADURfjozDz5BCgAAAQG7gvEAxUKLxUSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":91,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":231,"pkt":"ZmZmZmZmRERERERECABFAADZ1MoAADURfj0zDz5BCgAAAQG7s6kAxRHOxUmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":95,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":231,"pkt":"ZmZmZmZmRERERERECABFAADZ1M4AADURfjkzDz5BCgAAAQG77T8Axdg5xUeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":94,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":231,"pkt":"ZmZmZmZmRERERERECABFAADZ1M8AADQRfzgzDz5BCgAAAQG7qsIAxRq5xUWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA5za3lmaWdodGVyLWRucwNjb20AABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAG60zsERLlFII2wj6zTIwofCbgq4wxjKMp9YEu9fS884Cf11c1Q4cTQ+J+ZjK7ZH4aaqK8VPbAGFYW80ueYrfwU8FAQJxEup2Hwk1EI2Qz7npiyDDRkpQyGDCxkaPRZtbjwUBAnES6nYAAAAAV9TrQRfVP6E","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWP31AADYRWuQtmbtgCgAAARD3o7kAwiF7MPiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":99,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWP35AADYRWuMtmbtgCgAAARD3s+8AwhFHMPaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":100,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWP39AADYRWuItmbtgCgAAARD3qHkAwhy\/MPSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":97,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWP4BAADYRWuEtmbtgCgAAARD3lAIAwjE1MPWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWP4FAADYRWuAtmbtgCgAAARD3s6MAwhGWMPOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWP4JAADYRWt8tmbtgCgAAARD3ngMAwicyMPeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9zdGgtZG5zY3J5cHQtc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAJDQ0ZbvRpC3D0bgumZKuy3tvg+CeWgIXh45Ishvbc3SjW3OKRxUShg2C7mIARv2NR589zRzZQEE1IcPTnNuvwAPMT4OYzIpCP1X\/njGK43zV6uPrF4F7max8o8+EVSzPA8xPg5jMikIAAAAAV9TfFZfVM3W","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":55896,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcaDJAAL0RMhoKAAABQlUec9pYAbsCCCOeLCwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":55896,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcaDMgAL0RTlkKAAABQlUec71AAbsGBPfPLCkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQaDMAub0RcywKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcaDRAAL0RMhgKAAABQlUec5yjAbsCCCOeLCoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcaDUgAL0RTlcKAAABQlUec7lIAbsGBPvFLCsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQaDUAub0RcyoKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcaDZAAL0RMhYKAAABQlUec9NgAbsCCCOeLCgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcaDcgAL0RTlUKAAABQlUec4syAbsGBCngLCcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":946739312286,"flow_last_seen":946739312286,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQaDcAub0RcygKAAABQlUecwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":106,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUFOhAADYRDa1CVR5zCgAAAQG702AAwE8ILCiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUFOlAADYRDaxCVR5zCgAAAQG72lgAwEgMLCyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUFOpAADYRDatCVR5zCgAAAQG7vUAAwGUnLCmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":46255,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":46255,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc7t4gAL0R6HAKAAABXV\/ipcAiAbsGBEBnx+kBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ7t4Aub0RDUQKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc7t8gAL0R6G8KAAABXV\/ipeMBAbsGBB2Gx+sBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc7uBAAL0RzC4KAAABXV\/ipaSsAbsCCALbx+oBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ7t8Aub0RDUMKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc7uIgAL0R6GwKAAABXV\/ipZ6TAbsGBGH4x+cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ7uIAub0RDUAKAAABXV\/ipQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0641{"flow_id":104,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUFOtAADYRDapCVR5zCgAAAQG7nKMAwIXDLCqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":105,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUFOxAADYRDalCVR5zCgAAAQG7uUgAwGkdLCuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUFO1AADYRDahCVR5zCgAAAQG7izIAwJc3LCeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADd8l9MieIsifjQGavIzw6tdHygby+pfz9uNV\/2so9cMC7hGKDfc+LzmB07CCRnhhWiHEKH9gFPecA8dSkDUDQHbk9p0e06j3wfoDIfK8NHA0t38M\/xpcLwZlzH2416A0JuT2nR7TqPfAAAAAFfU1T+X1Smfg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_id":108,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTA\/MAADYRf2ZdX+KlCgAAAQG7tK8Av+Gux+yBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAEQUmbKEod9nlyKPPrQqGP9Ls8t6H\/YHI72RThtMayAXvqOxd6z058i8UJ7+KMLpc+YgjKuAGDN2+1oeB3OFIgnw9LuNjyX7NTXMUO6Dulhi3d3ExK4wLeAsg632WDfaPfD0u42PJfs1X1OugV9TroFfVQAB","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTA\/QAADYRf2VdX+KlCgAAAQG7pKwAv\/Gzx+qBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAEQUmbKEod9nlyKPPrQqGP9Ls8t6H\/YHI72RThtMayAXvqOxd6z058i8UJ7+KMLpc+YgjKuAGDN2+1oeB3OFIgnw9LuNjyX7NTXMUO6Dulhi3d3ExK4wLeAsg632WDfaPfD0u42PJfs1X1OugV9TroFfVQAB","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTA\/UAADYRf2RdX+KlCgAAAQG75jgAv7Apx+iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANpczIEZDB3bgNiaXoAABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAEQUmbKEod9nlyKPPrQqGP9Ls8t6H\/YHI72RThtMayAXvqOxd6z058i8UJ7+KMLpc+YgjKuAGDN2+1oeB3OFIgnw9LuNjyX7NTXMUO6Dulhi3d3ExK4wLeAsg632WDfaPfD0u42PJfs1X1OugV9TroFfVQAB","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":37035,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcmsFAAL0RhlMKAAABM56mYZCrAbsCCJzVB2IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAABwwAMAb8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":37035,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcmsIgAL0RopIKAAABM56mYbiZAbsGBBC9B18BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQmsIAub0Rx2UKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcmsMgAL0RopEKAAABM56mYbPyAbsGBBVmB10BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQmsMAub0Rx2QKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":60334,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":60334,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcmsUgAL0Roo8KAAABM56mYbvBAbsGBA2TB2EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":946739317403,"flow_last_seen":946739317403,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQmsUAub0Rx2IKAAABM56mYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0647{"flow_id":114,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADXKhpAADMRgkAznqZhCgAAAQG7kKsAw\/s4B2KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_id":117,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADXKh1AADMRgj0znqZhCgAAAQG73K4Aw683B2CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_id":115,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADXKhtAADQRgT8znqZhCgAAAQG7uJkAw9NNB1+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":41717,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":41717,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0647{"flow_id":116,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADXKhxAADMRgj4znqZhCgAAAQG7s\/IAw9f2B12BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_id":118,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADXKh5AADMRgjwznqZhCgAAAQG7664Aw6A5B16BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc144gAL0RoeEKAAABsDjtq9cGAbsGBFSSsmQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ144Aub0RxrQKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc15AgAL0Rod8KAAABsDjtq49EAbsGBJxWsmIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ15AAub0RxrIKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc15JAAL0RhZ0KAAABsDjtq79wAbsCCGC6smMBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAG+AAwBugAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc15EgAL0Rod4KAAABsDjtq7zFAbsGBG7RsmYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ15EAub0RxrEKAAABsDjtqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0646{"flow_id":119,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADXKh9AADQRgTsznqZhCgAAAQG7u8EAw9AjB2GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxhY3NhY3Nhci1hbXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAAAQt4OLzm4x3OBnTPVYOyWbwQ07ZuPzfh5UHeUSDpkuLilk8PnzqIG19XCvUsQGZmTzZ+d2RjpSDvvlP\/+37YoDPjwKVuBVGSevZiWx3QxU\/Ww92uJXMr1\/GUOUVCxbO0A+PApW4FUZJwAAAAFfU6w6X1T9ug==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcYmUAADoRvwuwOO2rCgAAAQG7ovUAyPSjsmeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":121,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcYmYAADkRwAqwOO2rCgAAAQG71wYAyMCVsmSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":122,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcYmcAADoRvwmwOO2rCgAAAQG7yKMAyM73smWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":123,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcYmgAADoRvwiwOO2rCgAAAQG7j0QAyAhasmKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":60091,"dst_port":2053,"l4_proto":"udp"}
+1075{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcwFtAAL0RvgEKAAABstjJ3uq7CAUCCD+NfScBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":60091,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52356,"dst_port":2053,"l4_proto":"udp"}
+2357{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwFwgAL0R2kAKAAABstjJ3syECAUGBG5EfSQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52356,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp"}
+1075{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwFwAub0R\/xMKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp"}
+2357{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwF4gAL0R2j4KAAABstjJ3sv9CAUGBG7NfSIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp"}
+2357{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwF8gAL0R2j0KAAABstjJ3pbCCAUGBKQEfSYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwF4Aub0R\/xEKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwF8Aub0R\/xAKAAABstjJ3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp"}
+1075{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":946739317462,"flow_last_seen":946739317462,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0648{"flow_id":124,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcYmkAADoRvwewOO2rCgAAAQG7v3AAyNgssmOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjEIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAABl3+ykQSZujAz2k88UgiWZ8EW8WsV\/cZTbX4vJmZY7W5pQMpzujkuwlfjXc+3bckBxwziAxuzLgEVuJhZegpADIiVqOfVhh6bINcwjX2cKXslxwpVLP3wwY1fcQglCKacmJWo59WGHpX1OncV9Tp3FfVPjx","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":128,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUfxoAADgRxYuy2MneCgAAAQgFz30AwELIfSWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":126,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUfxkAADgRxYyy2MneCgAAAQgF6rsAwCeIfSeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":127,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUfxsAADgRxYqy2MneCgAAAQgFzIQAwEXCfSSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":129,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUfx0AADgRxYiy2MneCgAAAQgFy\/0AwEZLfSKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":130,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUfx4AADgRxYey2MneCgAAAQgFlsIAwHuCfSaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":131,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUfxwAADgRxYmy2MneCgAAAQgF5XQAwCzTfSOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlzb2x0eXNpYWsDY29tAAAQAAHADAAQAAEAAAAAAH18RE5TQwABAACUEmW5IqEpBOIJ6OaaARxYZGtpF\/IlhAtf26qHIkb2CzdApz2tTrsIcpPG9I9VOY64aWiKVSPR4fI2Zci4AowMZh1rbmzrBh4Ds7P4I2QNBDqhYpufqNWKNKJm6\/BuBFZmHWtubOsGHl9TOclfUznJX1SLSQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43224,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcbsxAAL0R7dwKAAABLUxxH6jYAbsCCGFBZBkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43224,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcbs0gAL0RChwKAAABLUxxH9fjAbsGBNdkZBYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQbs0Aub0RLu8KAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcbs5AAL0R7doKAAABLUxxH8mFAbsCCGFBZBcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43776,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcbs9AAL0R7dkKAAABLUxxH6sAAbsCCGFBZBUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43776,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":59707,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcbtAgAL0RChkKAAABLUxxH+k7AbsGBMYOZBQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":59707,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcbtEgAL0RChgKAAABLUxxH8tlAbsGBOPgZBgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":946739317496,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQbtEAub0RLusKAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQbtAAub0RLuwKAAABLUxxHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0642{"flow_id":135,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSA+ZAAC8R6A0tTHEfCgAAAQG7qwAAvmKSZBWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":134,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSA+dAAC8R6AwtTHEfCgAAAQG7yYUAvkQLZBeBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":136,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSA+tAAC8R6AgtTHEfCgAAAQG76TsAviRYZBSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":137,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSA+pAAC8R6AktTHEfCgAAAQG7y2UAvkIqZBiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":132,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSA+hAAC8R6AstTHEfCgAAAQG7qNgAvmS2ZBmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":133,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSA+lAAC8R6AotTHEfCgAAAQG71+MAvjWuZBaBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAr5zEv1WGx7jem2pK2nflqiaMVF6rzF7WHGlvrWl\/ySW6UfM8aTB84zwXL6LFGFBJtiDl\/1MLBjf7\/4+Tj2baBU4DeMBZ\/3\/bX+\/ckKf+At437jBg5+agLK3mfgxAT218TgN4wFn\/f9sAAAABX1NRj19Uow8=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":53876,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":53876,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":45497,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+3MgAL0RpkAKAAABl1DeT7G5AbsGBKXWXC8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":45497,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+3QgAL0Rpj8KAAABl1DeT7pxAbsGBJ0gXC0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+3MAub0RyxMKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+3QAub0RyxIKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc+3VAAL0Rif4KAAABl1DeT8tIAbsCCDh2XDABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAABwwAMAb8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+3YgAL0Rpj0KAAABl1DeT+EkAbsGBHZpXDEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAEAAAAAAAAAAAAFvwAMBbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+3YAub0RyxAKAAABl1DeTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":946739318038,"flow_last_seen":946739318038,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0647{"flow_id":138,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADX+4ZAADQRFDOXUN5PCgAAAQG70nQAw+UcXDKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":139,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADX+4dAADQRFDKXUN5PCgAAAQG7sbkAwwXbXC+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":59011,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":59011,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":50387,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcXckgAL0RXlcKAAABjgTNL8TTAbsGBCE2qlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":50387,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcXcpAAL0RQhYKAAABjgTNL5zKAbsCCB4KqloBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQXckAub0RgyoKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcXcsgAL0RXlUKAAABjgTNL8rfAbsGBBssqlcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQXcsAub0RgygKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcXcwgAL0RXlQKAAABjgTNL9NQAbsGBBK3qlsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0647{"flow_id":141,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADX+4lAADQRFDCXUN5PCgAAAQG7y0gAw+xKXDCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQXcwAub0RgycKAAABjgTNLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":946739318061,"flow_last_seen":946739318061,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0647{"flow_id":142,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADX+4pAADQRFC+XUN5PCgAAAQG74SQAw9ZtXDGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":143,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADX+4tAADQRFC6XUN5PCgAAAQG7lm8AwyEmXC6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":140,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":229,"pkt":"ZmZmZmZmRERERERECABFAADX+4hAADQRFDGXUN5PCgAAAQG7unEAw\/0kXC2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAdvcGVubmljBGkycGQDeHl6AAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADbIkde1\/iXw9F8aP3hFzW\/UlCbjrsaMoYt8+MW53XVHmJZ40u2KJ1Y5p9+bOkgm9KOg6J\/Jk5OIIo5rrGKNcsPhxVktS2XlAVyckcTA1HXSkhBDvC7R+LCFU83mg2ymgqHFWS1LZeUBQAAAAFfU5R+X1Tl\/g==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":144,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWEe8AADQRWDiOBM0vCgAAAQG75oMAwm2uqlyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":147,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWEfEAADQRWDaOBM0vCgAAAQG7yt8AwolXqleBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":145,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWEfAAADQRWDeOBM0vCgAAAQG7xNMAwo9hqlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":946739318168,"flow_last_seen":946739318168,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":37328,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcuoVAAL0Rw2MKAAABwb+7a5HQAbsCCEABLy0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":946739318168,"flow_last_seen":946739318168,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":37328,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":35885,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":35885,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcuocgAL0R36EKAAABwb+7a4H\/AbsGBBdyLyoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQuocAub0RBHUKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcuokgAL0R358KAAABwb+7a9PHAbsGBMWnLywBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcuoggAL0R36AKAAABwb+7a7+QAbsGBNniLygBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQuokAub0RBHMKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQuogAub0RBHQKAAABwb+7awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":946739318169,"flow_last_seen":946739318169,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0644{"flow_id":146,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWEfMAADQRWDSOBM0vCgAAAQG7nMoAwrdpqlqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":148,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWEfIAADQRWDWOBM0vCgAAAQG701AAwoDiqluBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":149,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWEfQAADQRWDOOBM0vCgAAAQG7jD8Awsf2qliBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczQCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAAVJsH+RdJNH3D0PM7heo\/dPPI3i1+4vLX8T10ivxa\/CqjJyTHnmZoOX4oJMyJ42Khrgw6i1Ft4Vh\/Rb2U7RsAXZ5P9pZAltiMSwIbLDTpLjw5sG+xMI0gbdPS4ze+O\/Bdnk\/2lkCW2IWX62bll+tm5sSrlu","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":155,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSHkVAADYR5+7Bv7trCgAAAQG7v9sAvjTaLymBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":151,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSHkZAADYR5+3Bv7trCgAAAQG7jC0AvmiGLyuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":152,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSHkdAADYR5+zBv7trCgAAAQG7gf8AvnK1LyqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":153,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSHkhAADYR5+vBv7trCgAAAQG708cAviDrLyyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":150,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSHkRAADYR5+\/Bv7trCgAAAQG7kdAAvmLhLy2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":154,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSHklAADYR5+rBv7trCgAAAQG7v5AAvjUmLyiBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAJiZQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAzGGkyIiowp8pFszsXxkEW0y0qS06At4miIE7AyLIdZ2u5Jf0Kd+gqa\/ZnKsGDqB9\/JqMQzB5mxntdDH0TQRsCBpBtMbo6VmIyWnkxOdJSeZWPK9K\/gWr4WDPFo1HWxdqGkG0xujpWYgAAAABX1Oe6F9U8Gg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":45375,"dst_port":4343,"l4_proto":"udp"}
+1076{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":45375,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+L0gAL0RbrcKAAABMw980MM3EPcGBKwyaUIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+L0Aub0Rk4oKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":38310,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+L4gAL0RbrYKAAABMw980JWmEPcGBNnFaUABAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":38310,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp"}
+1075{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+L4Aub0Rk4kKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc+MAgAL0RbrQKAAABMw980JvmEPcGBNOBaUQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ+MAAub0Rk4cKAAABMw980AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":53887,"dst_port":4343,"l4_proto":"udp"}
+1076{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":946739337048,"flow_last_seen":946739337048,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":53887,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0644{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWnoBAADURNfszD3zQCgAAARD3sT8Awv\/QaUWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":159,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWnoFAADURNfozD3zQCgAAARD32dgAwtc5aUOBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":157,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWnoJAADURNfkzD3zQCgAAARD3wzcAwu3baUKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":36930,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc\/chAAL0ReVsKAAABp3LcfZBCAbsCCEbGm2kBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":36930,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc\/ckgAL0RlZoKAAABp3LcfZZsAbsGBGHYm2YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ\/ckAub0Rum0KAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":39816,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":39816,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc\/csgAL0RlZgKAAABp3LcfbItAbsGBEYVm2gBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ\/csAub0RumsKAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc\/cwgAL0RlZcKAAABp3LcfejFAbsGBA+Bm2QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ\/cwAub0RumoKAAABp3LcfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45747,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":946739337078,"flow_last_seen":946739337078,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45747,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0643{"flow_id":158,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWnoNAADURNfgzD3zQCgAAARD3laYAwhtvaUCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":161,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWnoVAADURNfYzD3zQCgAAARD30n8Awt6UaUGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":160,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWnoRAADURNfczD3zQCgAAARD3m+YAwhUraUSBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydA9hbXMtZG5zY3J5cHQtbmwAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPvb\/epXmbtmpFJPDJPj0\/8kG2WLVy9aKZXG64Z\/RD4Asb+lk0fHUNVwKqjvyNJwSQDMlfv0kF+DU4Xf9AOufg1vl\/oZmXyGUvpIk2ki4WFZb2z8KlMPRm7olQdpuGdje2+X+hmZfIZSAAAAAV9TS2BfVJzg","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":163,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADU4rUAADMRX7enctx9CgAAAQG7lmwAwOCxm2aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":164,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADU4rcAADMRX7Wnctx9CgAAAQG7m4gAwNuUm2eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":162,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADU4rYAADMRX7anctx9CgAAAQG7kEIAwObYm2mBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":35734,"dst_port":465,"l4_proto":"udp"}
+1075{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":35734,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":44496,"dst_port":465,"l4_proto":"udp"}
+1075{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":44496,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp"}
+2357{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcw6sgAL0RoycKAAABBb2qxOL4AdEGBCbssn4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQw6sAub0Rx\/oKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":40748,"dst_port":465,"l4_proto":"udp"}
+1075{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcw6xAAL0RhuYKAAABBb2qxJ8sAdECCHNXsoEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAG7AAwBtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":40748,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58650,"dst_port":465,"l4_proto":"udp"}
+2357{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcw60gAL0RoyUKAAABBb2qxOUaAdEGBCTIsoABAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58650,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp"}
+2357{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcw64gAL0RoyQKAAABBb2qxOllAdEGBCB7soIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAQAAAAAAAAAAAAW3AAwFswAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQw60Aub0Rx\/gKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQw64Aub0Rx\/cKAAABBb2qxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0640{"flow_id":165,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADU4rgAADMRX7Snctx9CgAAAQG7si0AwMTum2iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":166,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADU4rkAADMRX7Onctx9CgAAAQG76MUAwI5am2SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":167,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADU4roAADMRX7Knctx9CgAAAQG7srMAwMRrm2WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdARjYS0xAAAQAAHADAAQAAEAAAAAAH18RE5TQwACAACtvTpPmuzdARCZdHINGnm84Rta+Q9yZkJOIOBZH1xDWjyTETMesMGOqAFTeyjt37OaMFtfnU1CukJNcbLtFisLiXsfUndKvm3+Vr\/KkwQySWxBEvG+JEE+3LVi8Tb5u3eKex9Sd0q+bV9TqoVfU6qFX1T8BQ==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_id":168,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":237,"pkt":"ZmZmZmZmRERERERECABFAADfmrhAADkRNRgFvarECgAAAQHRi5YAy+QIsoOAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAcAMABAAAQAADhAAfXxETlNDAAEAAECBm+\/xTzDeD4KSjeZIgKwk3d3hDoaJSO\/h1pwRZePAj9XQLJ\/4Aa45W8vDBSKrJViJIaMolD7iTZBWDGXuFATTYhzIUZpFJ+MsooNEpkdNSme+M97PW3cWzIMHmxZ+fdNiHMhRmkUnX1O28V9TqKVfU9NN","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_id":169,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":237,"pkt":"ZmZmZmZmRERERERECABFAADfmrlAADkRNRcFvarECgAAAQHRrdAAy8HSsn+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAcAMABAAAQAADhAAfXxETlNDAAEAAECBm+\/xTzDeD4KSjeZIgKwk3d3hDoaJSO\/h1pwRZePAj9XQLJ\/4Aa45W8vDBSKrJViJIaMolD7iTZBWDGXuFATTYhzIUZpFJ+MsooNEpkdNSme+M97PW3cWzIMHmxZ+fdNiHMhRmkUnX1O28V9TqKVfU9NN","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_id":171,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":237,"pkt":"ZmZmZmZmRERERERECABFAADfmrpAADkRNRYFvarECgAAAQHRnywAy9B0soGAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARuczE2AmRlA2RucwdvcGVubmljBGdsdWUAABAAAcAMABAAAQAADhAAfXxETlNDAAEAAECBm+\/xTzDeD4KSjeZIgKwk3d3hDoaJSO\/h1pwRZePAj9XQLJ\/4Aa45W8vDBSKrJViJIaMolD7iTZBWDGXuFATTYhzIUZpFJ+MsooNEpkdNSme+M97PW3cWzIMHmxZ+fdNiHMhRmkUnX1O28V9TqKVfU9NN","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38709,"dst_port":4343,"l4_proto":"udp"}
+1075{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38709,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":44469,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwiUgAL0RAO8KAAABuf2aQq21EPcGBC1ZY0YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":44469,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp"}
+1075{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwiUAub0RJcIKAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":43540,"dst_port":4343,"l4_proto":"udp"}
+1075{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":43540,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwiggAL0RAOwKAAABuf2aQrwfEPcGBB7tY0gBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwigAub0RJb8KAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp"}
+2357{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcwikgAL0RAOsKAAABuf2aQpZSEPcGBES4Y0oBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":946739348756,"flow_last_seen":946739348756,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQwikAub0RJb4KAAABuf2aQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0640{"flow_id":176,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTW7dAADkR0Ga5\/ZpCCgAAARD3svcAv+AkY0uBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":174,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTW7hAADkR0GW5\/ZpCCgAAARD3lzUAv\/vqY0eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":177,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTW7pAADkR0GO5\/ZpCCgAAARD3qhQAv+kJY0mBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":175,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTW7lAADkR0GS5\/ZpCCgAAARD3rbUAv+VrY0aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":179,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTW7xAADkR0GG5\/ZpCCgAAARD3llIAv\/zKY0qBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":178,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTW7tAADkR0GK5\/ZpCCgAAARD3vB8Av9b\/Y0iBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAxiY24tZG5zY3J5cHQAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAPzOPvxAqRNc7Q72GZx6clSW\/rILjCJS5AVCUtIfh\/knKqjuiGnU\/ySlMpkdSKAUBEzuxnQcAR\/n3q9w6kY3ZQBbAAtR8Cvhyf4swkJ5CXEM5Flzvf2K4fhPC+UgsGecNlsAC1HwK+HJAAAAAV9TdNFfVMZR","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":51647,"dst_port":443,"l4_proto":"udp"}
+1076{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":51647,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":59224,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXclaUgAL0RJzsKAAABjgTMb+dYAbsGBJhPEXwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":59224,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQlaUAub0RTA4KAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46363,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcladAAL0RCvkKAAABjgTMb7UbAbsCCB1KEXsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46363,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXclaggAL0RJzgKAAABjgTMb99cAbsGBKBJEX4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQlagAub0RTAsKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXclakgAL0RJzcKAAABjgTMb7oFAbsGBMWkEXoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":946739348805,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQlakAub0RTAoKAAABjgTMbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0642{"flow_id":182,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWoIMAADQRymOOBMxvCgAAAQG7o6cAwiYzEX2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":181,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWoIUAADQRymGOBMxvCgAAAQG751gAwuKCEXyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":183,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWoIQAADQRymKOBMxvCgAAAQG7tRsAwhTBEXuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":184,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWoIcAADQRyl+OBMxvCgAAAQG731wAwup8EX6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":180,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWoIYAADQRymCOBMxvCgAAAQG7yb8AwgAZEX+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":185,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWoIgAADQRyl6OBMxvCgAAAQG7ugUAwg\/YEXqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANuczMCY2EFbHVnZ3MCY28AABAAAcAMABAAAQAAAAAAfXxETlNDAAEAAG0rJMeHQmadAAjPo7oVfCGn+vVnYNn+3VnMSzQY0rAkl3fyY6FeDYzevPOP9Wx6CFjMcHM\/npT74\/JxSlg\/ZQ+xYYapuSWJmSy0bkM5eaAYWq1iOjOwzrlApye0OOzsPbFhhqm5JYmZWX62h1l+todsSrmH","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":946739380804,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":38371,"dst_port":443,"l4_proto":"udp"}
+1077{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc\/YZAAH4Rg9UKAAAB1C\/kiJXjAbsCCHuObd4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAHEAAwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":946739380804,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":38371,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":946739380804,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":34228,"dst_port":443,"l4_proto":"udp"}
+2358{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcIEwgAH4RfVAKAAAB1C\/kiIW0AbsGBB6ibd0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":946739380804,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":34228,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":946739380804,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp"}
+1077{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":946739380804,"flow_last_seen":946739380804,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQIEwAuX4RoiMKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":946739380805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":40775,"dst_port":443,"l4_proto":"udp"}
+1077{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":946739380805,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":40775,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":946739380805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp"}
+2359{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc\/YkgAH4RoBIKAAAB1C\/kiNwPAbsGBMhCbeEBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":946739380805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ\/YkAuX4RxOUKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":946739380805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp"}
+2359{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc\/YogAH4RoBEKAAAB1C\/kiO3VAbsGBLZ+bd8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":946739380805,"flow_last_seen":946739380805,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ\/YoAuX4RxOQKAAAB1C\/kiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0640{"flow_id":186,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWpUBAADIRKWLUL+SICgAAAQG7leMAwtNqbd6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":187,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWpUJAADIRKWDUL+SICgAAAQG7hbQAwuOabd2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":188,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWpUFAADMRKGHUL+SICgAAAQG7y1gAwp3xbeKBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":190,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWpUNAADMRKF\/UL+SICgAAAQG73A8Awo07beGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":191,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWpURAADIRKV7UL+SICgAAAQG77dUAwnt3bd+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":189,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWpUVAADIRKV3UL+SICgAAAQG7n0cAwsoEbeCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAJmcghkbnNjcnlwdANvcmcAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAAAGnqbCRK7WvFnA0fqnvTaP0TkhGLYlM337fP\/M0VQi0o3wTy7gpqyMQZFkjfrWn031Ofm4JJLwM1X8FbNxmrQCWUcFQ8RQkVXWSFLecisgk5xXaKVbLy2ZX6VNRztvrCJZRwVDxFCRVAAAAAV9ToghfVPOI","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":946739380983,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":58948,"dst_port":8443,"l4_proto":"udp"}
+1076{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcVMVAAH4RMmQKAAABVQVd5uZEIPsCCHXB4\/IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":946739380983,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":58948,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":946739380983,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":50403,"dst_port":8443,"l4_proto":"udp"}
+1076{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcCx1AAH4RfAwKAAABVQVd5sTjIPsCCHXB4\/ABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAAAcsADAHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":946739380983,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":50403,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":946739380983,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":46646,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":946739380983,"flow_last_seen":946739380983,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":46646,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":946739380984,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcVMcgAH4RTqIKAAABVQVd5t8CIPsGBKCC4+8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":946739380984,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQVMcAuX4Rc3UKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":946739380984,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":51826,"dst_port":8443,"l4_proto":"udp"}
+2358{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcVMkgAH4RTqAKAAABVQVd5spyIPsGBLUQ4\/EBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":946739380984,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":51826,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":946739380984,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcVMggAH4RTqEKAAABVQVd5plbIPsGBOYr4+0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABAAAAAAAAAAAABccADAXDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":946739380984,"flow_last_seen":946739380984,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQVMgAuX4Rc3QKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQVMkAuX4Rc3MKAAABVQVd5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0632{"flow_id":194,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739381,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPeUtAADQRWStVBV3mCgAAASD7tjYAu6OI4+6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":192,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739381,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPeUlAADQRWS1VBV3mCgAAASD75kQAu3N24\/KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":193,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739381,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPeUpAADQRWSxVBV3mCgAAASD7xOMAu5TZ4\/CBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":195,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739381,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPeUxAADQRWSpVBV3mCgAAASD73wIAu3q74++BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":197,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739381,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPeU1AADQRWSlVBV3mCgAAASD7mVsAu8Bk4+2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":196,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739381,"pkt_len":221,"pkt":"ZmZmZmZmRERERERECABFAADPeU5AADQRWShVBV3mCgAAASD7ynIAu49J4\/GBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhpYmtzdHVybQAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAQmF4jrNkSB0NiNqctWCLsz9Hoe15aS6mrwyMq15DMDKxowa47TLEyU+dCwefDt3RvbYdetUltVlZd+8gb8kmCcgRT\/L7wkmA5gU0xv13eDWtHcb4jTpxlTH+X73K1n94yBFP8vvCSYAAAAABX1Nm5l9UuGY=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":50601,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcBYVAAH4RyuMKAAABi2PeSMWpIPsCCCyCmlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":50601,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":40374,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcBYYgAH4R5yIKAAABi2PeSJ22IPsGBPDSmlQBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":40374,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcBYcgAH4R5yEKAAABi2PeSMk1IPsGBMVRmlYBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQBYYAuX4RC\/YKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcBYhAAH4RyuAKAAABi2PeSLJyIPsCCCyCmlcBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQBYcAuX4RC\/UKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":59400,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcBYlAAH4Ryt8KAAABi2PeSOgIIPsCCCyCmlUBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAAAcgADAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":59400,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcBYogAH4R5x4KAAABi2PeSMKEIPsGBMwAmlgBAAABAAAAAAABATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABAAAAAAAAAAAABcQADAXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQBYoAuX4RC\/IKAAABi2PeSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0640{"flow_id":201,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSWtFAACoRyuGLY95ICgAAASD7snIAvm5FmleBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":198,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSWtNAACoRyt+LY95ICgAAASD7xakAvlsMmlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":202,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":224,"pkt":"ZmZmZmZmRERERERECABFAADSWtJAACoRyuCLY95ICgAAASD76AgAvjixmlWBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydANkbnMEc2VieQJpbwAAEAABwAwAEAABAABwgAB9fEROU0MAAgAAAR0hTbelwStbUvrsyN4TMcjd6ciaJLWS\/+lAjdb\/qhY\/GqLYEoO6rv\/+JZlrPe5rwefrjN2pIualeqx6XQ1AD9Zj2kPVDPuO2VaFeIl38Qe5+u3sSCCBiqzaCgrP\/G5+1mPaQ9UM+44AAAABX1NQIl9UoaI=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48300,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIclEJAAH4RqpMKAAABkFtq47ysAbsCCL4UZl4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48300,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXclEMgAH4RxtIKAAABkFtq46CUAbsGBGABZlsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQlEMAuX4R66UKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXclEQgAH4RxtEKAAABkFtq47xtAbsGBEQqZlkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQlEQAuX4R66QKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54305,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIclEVAAH4RqpAKAAABkFtq49QhAbsCCL4UZloBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54305,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":55469,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIclEZAAH4Rqo8KAAABkFtq49itAbsCCL4UZlwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAHHAAwBwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":55469,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXclEcgAH4Rxs4KAAABkFtq49O8AbsGBCzXZl0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAQAAAAAAAAAAAAXDAAwFvwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":946739396047,"flow_last_seen":946739396047,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQlEcAuX4R66EKAAABkFtq4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0635{"flow_id":205,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTkQZAADcR9hiQW2rjCgAAAQG7oJQAvzbjZluBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33293,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33293,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":38242,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcSFkgAH4RFuEKAAABLuPIN5ViIPsGBDRUFdABAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":38242,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcSFogAH4RFuAKAAABLuPIN4HeIPsGBEfaFc4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQSFkAuX4RO7QKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQSFoAuX4RO7MKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":50277,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":50277,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0491{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp"}
+2357{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcSFwgAH4RFt4KAAABLuPIN6yBIPsGBB0zFdIBAAABAAAAAAABATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAQAAAAAAAAAAAAXAAAwFvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQSFwAuX4RO7EKAAABLuPINwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":49177,"dst_port":8443,"l4_proto":"udp"}
+1075{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":946739396070,"flow_last_seen":946739396070,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":49177,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0635{"flow_id":207,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTkQhAADcR9haQW2rjCgAAAQG71CEAvwNXZlqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":204,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTkQVAADcR9hmQW2rjCgAAAQG7vKwAvxrIZl6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":206,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTkQdAADcR9heQW2rjCgAAAQG7vG0AvxsMZlmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":208,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTkQlAADcR9hWQW2rjCgAAAQG72K0Av\/7IZlyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":209,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":225,"pkt":"ZmZmZmZmRERERERECABFAADTkQpAADcR9hSQW2rjCgAAAQG707wAvwO5Zl2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdANvbmUAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAALkTa3PmYOnbKVsenPA+dUbqb7bPdeethm+r51VaewMcP0sfe1RtTAHcc8Uvs8bFQylZgA4Na3Yk4xgl2KWmKw4bPctGhBgarq2J2ya3ifLfvYsxbqqez8iaBEin48TCXxs9y0aEGBquAAAAAV9TgfdfVNN3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":210,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWzCtAADcRvxQu48g3CgAAASD7gg0AwherFdOAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":213,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWzC1AADcRvxIu48g3CgAAASD7xGUAwtVUFdGAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":211,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWzCxAADcRvxMu48g3CgAAASD7lWIAwgRZFdCAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":212,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWzC5AADcRvxEu48g3CgAAASD7gd4AwhffFc6AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":214,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWzC9AADcRvxAu48g3CgAAASD7rIEAwu03FdKAAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":54375,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":54375,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcKekgAH4Rh58KAAABa6o5IteRAbsGBOOGsy4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQKekAuX4RrHIKAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":36335,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcKepAAH4Ra14KAAABa6o5Io3vAbsCCGeisy8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAG+AAwBugAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":36335,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":37287,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":37287,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":33143,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcKewgAH4Rh5wKAAABa6o5IoF3AbsGBDmjsywBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":33143,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcKe0gAH4Rh5sKAAABa6o5IqSdAbsGBBZ5szABAAABAAAAAAABATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":946739396111,"flow_last_seen":946739396111,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQKewAuX4RrG8KAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQKe0AuX4RrG4KAAABa6o5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0643{"flow_id":215,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":228,"pkt":"ZmZmZmZmRERERERECABFAADWzDBAADcRvw8u48g3CgAAASD7wBkAwtmiFc+AAAABAAEAAAAAATINZG5zY3J5cHQtY2VydARyZG5zBmZhZWxpeANuZXQAABAAAcAMABAAAQAADhAAfXxETlNDAAEAADn5TxO0FAodB0MfyNII\/q4yfvBzna8lha8rHqMZH6brB0hzmteXf96oRMNtUVCp592lxf62HHwuDSbhBbtGtQcalorpuHO8PTt\/PSXI1nToKeQ\/\/4xUAF+WFp6Iz9p9KhqWium4c7w9AAAAAV7URQBxousA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":216,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcvzUAADQRYVNrqjkiCgAAAQG71GcAyMwVszGBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":217,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcvzYAADQRYVJrqjkiCgAAAQG715EAyMjusy6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":218,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcvzoAADQRYU5rqjkiCgAAAQG7je8AyBKQsy+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":220,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcvzgAADQRYVBrqjkiCgAAAQG7gXcAyB8LsyyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":219,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcvzsAADQRYU1rqjkiCgAAAQG7kacAyA7asy2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":221,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739396,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcvzkAADQRYU9rqjkiCgAAAQG7pJ0AyPvgszCBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAhkbnNjcnlwdAl2ZW50cmljbGUCdXMAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAI\/a1gzqXBRkeMMNLdByUsrCAeXq9pAoSIZvWZO078wHKN5t9zokYno4cH1X8DUwDBTmKYZNXI496f2ZPTyfGw7EiDsrhQ4a28OXE48fibQ4VcAHxN0Yn+p8BQ7Bz9i\/KcWIOyuFDhrbX1Oowl9TqMJfVPpC","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":56988,"dst_port":443,"l4_proto":"udp"}
+1077{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIcPTRAAH4RwyoKAAABucF\/9N6cAbsCCPyL\/I8BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAHKAAwBxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":56988,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":50062,"dst_port":443,"l4_proto":"udp"}
+1078{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":50062,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":59354,"dst_port":443,"l4_proto":"udp"}
+1077{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":59354,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp"}
+2359{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcPTYgAH4R32gKAAABucF\/9NaIAbsGBKQ8\/IwBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQPTYAuX4RBDwKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":46314,"dst_port":443,"l4_proto":"udp"}
+2359{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcPTggAH4R32YKAAABucF\/9LTqAbsGBMXY\/I4BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":46314,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp"}
+2359{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcPTcgAH4R32cKAAABucF\/9LtjAbsGBL9j\/IoBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAQAAAAAAAAAAAAXGAAwFwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":946739400460,"flow_last_seen":946739400460,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQPTcAuX4RBDsKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQPTgAuX4RBDoKAAABucF\/9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0633{"flow_id":222,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQoahAADYRqAK5wX\/0CgAAAQG73pwAvLKe\/I+BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":224,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQoapAADYRqAC5wX\/0CgAAAQG759oAvKli\/I2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":223,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQoalAADYRqAG5wX\/0CgAAAQG7w44AvM2w\/IuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":225,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQoatAADYRp\/+5wX\/0CgAAAQG71ogAvLq1\/IyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":227,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQoaxAADYRp\/65wX\/0CgAAAQG7u2MAvNXc\/IqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49568,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49568,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":46140,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":46140,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":40209,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcaQogAH4RSx8KAAABTUJU6Z0RAbsGBIoKspkBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":40209,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQaQoAuX4Rb\/IKAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcaQwgAH4RSx0KAAABTUJU6cZFAbsGBGDUspsBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQaQwAuX4Rb\/AKAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXcaQ0gAH4RSxwKAAABTUJU6d8VAbsGBEgCsp0BAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAQAAAAAAAAAAAAW6AAwFtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":946739400522,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQaQ0AuX4Rb+8KAAABTUJU6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0634{"flow_id":226,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":222,"pkt":"ZmZmZmZmRERERERECABFAADQoa1AADYRp\/25wX\/0CgAAAQG7tOoAvNxR\/I6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAl5b2Zpamktc2UAABAAAcAMABAAAQAAcIAAfXxETlNDAAIAANT+QyCeqOpvY3ek9vOTVGrWy3oc27D9SS491oCJRe7RQWKb3q0aPb33Ziq0RP9PPCzRMBy1lW3l6rz74jWgmwszJtIbCS+4i64Fme9c0vB4hxz+sKp41i8d9KRbhVFMbjMm0hsJL7iLAAAAAV9TV8BfVKlA","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":229,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcDmgAADYREsJNQlTpCgAAAQG7tDwAyK7NspqBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":228,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcDmcAADYREsNNQlTpCgAAAQG7waAAyKFlsp6BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":230,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcDmoAADYREsBNQlTpCgAAAQG7nREAyMX5spmBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":231,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcDmkAADYREsFNQlTpCgAAAQG7wkQAyKDDspyBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":232,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcDmsAADYREr9NQlTpCgAAAQG7xkUAyJzDspuBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":233,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":234,"pkt":"ZmZmZmZmRERERERECABFAADcDmwAADYREr5NQlTpCgAAAQG73xUAyIPxsp2BgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlyZXNvbHZlcjIIZG5zY3J5cHQCZXUAABAAAcAMABAAAQAAAAAAfXxETlNDAAIAAHTELXM+13EPB+IE+zJ9PQOXdJ7IKBJfAx72Wd7gihP8hRGtsF77cDm0yhz652JqAFc0tI+h6KATFWPKnD7HPQCiR1MNmirJFbpEf5fuBV5xkfCiHCm163IIgp4yvCcsa6NHUw2aKskVX1OfeV9Tn3lfVPD5","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":946739402187,"flow_last_seen":946739402187,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":59587,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc1vJAAH4RAOYKAAABF29KzejDAbsCCCUSS8MBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":946739402187,"flow_last_seen":946739402187,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":59587,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60852,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc1vNAAH4RAOUKAAABF29Kze20AbsCCCUSS8UBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60852,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":44793,"dst_port":443,"l4_proto":"udp"}
+1075{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":554,"pkt":"REREREREZmZmZmZmCABFAAIc1vRAAH4RAOQKAAABF29Kza75AbsCCCUSS8cBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAABxgAMAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":44793,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":53045,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc1vYgAH4RHSIKAAABF29Kzc81AbsGBMTJS8YBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":53045,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc1vUgAH4RHSMKAAABF29KzYToAbsGBA8bS8IBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ1vYAuX4RQfUKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ1vUAuX4RQfYKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp"}
+2357{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":1514,"pkt":"REREREREZmZmZmZmCABFAAXc1vcgAH4RHSEKAAABF29KzerRAbsGBKkvS8QBAAABAAAAAAABATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAEAAAAAAAAAAAAFwgAMBb4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":946739402188,"flow_last_seen":946739402188,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":94,"pkt":"REREREREZmZmZmZmCABFAABQ1vcAuX4RQfQKAAABF29KzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0213{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","l4_data_len":60}
+0640{"flow_id":234,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUpqhAADURe3gXb0rNCgAAAQG76MMAwNUkS8OBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":236,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUpqpAADURe3YXb0rNCgAAAQG7rvkAwA7rS8eBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":237,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUpqtAADURe3UXb0rNCgAAAQG7zzUAwO6vS8aBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":239,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUpq1AADURe3MXb0rNCgAAAQG76tEAwNMVS8SBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":235,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUpqlAADURe3cXb0rNCgAAAQG77bQAwNAxS8WBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":238,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":226,"pkt":"ZmZmZmZmRERERERECABFAADUpqxAADURe3QXb0rNCgAAAQG7hOgAwDkBS8KBgAABAAEAAAAAATINZG5zY3J5cHQtY2VydAlldmlsdmliZXMDY29tAAAQAAHADAAQAAEAAHCAAH18RE5TQwACAADFMi1FdTWI6xs9AIHJqo\/A+wDfjlj3WkVYnoIQAvOP3ISfoMelOBqvsYElaECIkBkM1KRmWo7IwtwzQE5GK6ICxIfEdneiwuXVbSuJIibtWiAHFQr52HeEOQNDYtX2pkLEh8R2d6LC5QAAAAFfU1VGX1Smxg==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":946739611961,"flow_last_seen":946739611961,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47545,"dst_port":443,"l4_proto":"udp"}
+1167{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739611,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_id":240,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739612,"pkt_len":410,"pkt":"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","pkt_caplen":410,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":240,"flow_packet_id":2,"flow_first_seen":946739611961,"flow_last_seen":946739612032,"flow_tot_l4_data_len":960,"flow_min_l4_data_len":376,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47545,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":946739614386,"flow_last_seen":946739614386,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":38660,"dst_port":443,"l4_proto":"udp"}
+1168{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739614,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":241,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739614,"pkt_len":282,"pkt":"ZmZmZmZmRERERERECABFAAEMVHFAADcRMnWQW2rjCgAAAQG7lwQA+NqDcjZmbnZXajgjdLCNWn7A4Ae4OM+V95TEH+wEPWjCUqAPqLgKz03zsgxbeQD\/5ecQsA4RfRBRViLb9egczysjt1OolDW9kDXjXmmQiF571kS9rCn31TE60wfdQuvLsxXdWOqgaclRBMIB2+xIEcqZiOOnbAC3owgMpf07BM+8qosYU+1EzXz7EouWJa8VxL5FW0SNfmJsYYBjcSkC0myJwAMFESyFpxNCQtb+Z3Q2X9FOvOphUjS1Bh6POqoHGB4CgchAKjQ4X8fxQb5Wv65jhpmBRnmn5yUbcKZT8A2zfL7KGiy9Vrk+mU3WwB6UiVmU","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":241,"flow_packet_id":2,"flow_first_seen":946739614386,"flow_last_seen":946739614411,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":38660,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":946739615603,"flow_last_seen":946739615603,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":60393,"dst_port":443,"l4_proto":"udp"}
+1175{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739615,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_id":242,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739615,"pkt_len":346,"pkt":"ZmZmZmZmRERERERECABFAAFMVRFAADcRMZWQW2rjCgAAAQG76+kBOCk6cjZmbnZXajggH\/GcTy7cgJpG6LWEOqYXy9eZW2i3Qbkc+\/ab87nm8hxILOmwmIagjS3082zNqzOBnUfDvXH1wdeKy55EXymmAOR3ISimesD3NSPRd1l+RxmfBHNn3a7Bw5aEHaIlwaCNLNQFqK+BhPyPkErS5VbNOhmY5xHp0Ui2kKe72GXKf4WLQR7zh9TTBssKJNiCiW7f2BiWF1TEyHipKDeny4ICpyTd3Wo2+B3IqtOVZ3rHmsTn5k+U7Dl0LO15r3tqh6n0WPCSwFlzqIYmOuOCTIqRIw6ZGfDu889dv4sOKdhqSdpo5gBsF5uRtahg1DOgrYIIV6k+VvSO\/ChUBVAry4GOrZXgTyxKsOYZ+21X5TNc3orLlCmaabkA\/armCA8Dr977H97D0+Y1rw==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":242,"flow_packet_id":2,"flow_first_seen":946739615603,"flow_last_seen":946739615628,"flow_tot_l4_data_len":896,"flow_min_l4_data_len":312,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":448,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":60393,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":946739617004,"flow_last_seen":946739617004,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":50443,"dst_port":443,"l4_proto":"udp"}
+1170{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739617,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_id":243,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739617,"pkt_len":282,"pkt":"ZmZmZmZmRERERERECABFAAEMVhtAADcRMMuQW2rjCgAAAQG7xQsA+AQwcjZmbnZXajjGL+pVy0kwJq3b0ws3QQmU1oaTmLs\/KBJiu7G8scEX3PGgxPg+ruVnqVNFUraQxsErWYtLItB90wPdHcXiqlBhJWtFp4LLnWAvhKLKhjFEw\/atFhZeDiqXStF1L94cSN904FNHbkEph9CBTREE+edOKfiP4WqHgqjHUNPQp7n\/XDg\/V39BVU7YZKgJKtX72jHsW8p+y1tD4\/oB5Dnpf9M\/FhDm1mUKnuHl2H9\/fkExtOnA6OjnoUWzl+W3CX4dYlGVJl9MVrQvZzZFoWkXil+wG5XW3z1KVD3tlSpd4VUIxP+btk8gcC+s","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":243,"flow_packet_id":2,"flow_first_seen":946739617004,"flow_last_seen":946739617027,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":50443,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":946739620053,"flow_last_seen":946739620053,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":37711,"dst_port":443,"l4_proto":"udp"}
+1168{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739620,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":244,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739620,"pkt_len":218,"pkt":"ZmZmZmZmRERERERECABFAADMWFtAADcRLsuQW2rjCgAAAQG7k08AuMXMcjZmbnZXajiSCnkcFfgd6P0tVYuPcDHPBNH+Q2V36ecIOy5+Vn6hASP7zwS+HB7\/COLeZpsYSR\/D4KtiLxFMLHMCSd4CEFa3HkazvGkn1cTMf7cEedRa5ffS2XboBOubQlEIegWZ\/uOw8cxjcAsifupeBdcSOB0uu0iqAXb97mPtwXo9C5m\/fEJEqoOJOH7mervMe4nPhBoqZk\/lTKOfh1zHYDnQCY0xNdH9fhG+JJ4=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":244,"flow_packet_id":2,"flow_first_seen":946739620053,"flow_last_seen":946739620112,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":37711,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":946739660371,"flow_last_seen":946739660371,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":40958,"dst_port":8443,"l4_proto":"udp"}
+1172{"flow_id":245,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739660,"pkt_len":618,"pkt":"REREREREZmZmZmZmCABFAAJc6wNAAK8R\/JUKAAABwx5eHJ\/+IPsCSORQeRS+sjS2G7nK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDAyVmLtuOyOPrdbG9Aa84c6ABESOcWKO1lD0bmXASu6Lp1JrrhdSsrfi+qCLd+yV08wcBIOyOD3xWu+JqcvR+qyyD2wAqK+7GtNLfa5CYKvl4+qE+B8Fdcg3etmdvWho9v6RWRGqvWQ79X3lh7drodQ5tDBKL+haa6jK+KUocn+9wX11hwHxQkGR1McxgwheyWwiQ8yk86\/0X3FOuLzu\/q11WpJtGw+xpq\/OB+8OUVOD89R6Mnj\/UOcx7obvr0eYbF5A8onkaQEbT7AaiYRJQ+hA7ZZDi2ljxg+uDg1AUnD5AkpxvEvbz9buRkBehRmtAjmpjCb+1eSSGGy0pj3fWliJpufCy0cLqKeBAa8pN+PboX7ibcQKD2oLVDzOMCPNysRr7U4iSHLRzA3mGLlWv1wmtPqVLl\/EoRbf02Q+FQ\/4r6mOaMPxUziXWn4x9EAZfWAyRDD7Afeh1n3Kmrb8xH0TDb8AwH7WhW4050ZoDY8fwOoRj\/\/yicxCkUFPRn2\/1wmsWfaim9o7xstoH1TFkuOYolb5zL0b\/s+Q6LzmCI0CRhGzcGbTPbKaxkq5YwwG9Y4Y7yX3r23bemnved9GKHI+BB80yEb94yRK1wmhzXgZyDB626hQAGMFgeYF1jYBg8XUeiAWAkUeVdpaFQcCYu3RciaRBtQKGADb1WYqE\/SeWtKsrZLM+n2BJmC8O6wwHCEtXzUPi0rg","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0912{"flow_id":245,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739660,"pkt_len":426,"pkt":"ZmZmZmZmRERERERECABFAAGcN+1AADgRJ23DHl4cCgAAASD7n\/4BiHhncjZmbnZXajgMlZi7bjsjj63WxvRslmVw4ADDYw9Zf7rvWXePF7DzWlPhjWqgv8O9se2dHg\/hMkwpzbF\/IwWGmMmxEowkpKXdmkUibqvznKVpkcwGgbuuCaS7Y6VBAIjGo9kWj7NiKTrA6Y4suMJM1qQ00IXt9U3jt4cutk2V8vfwhRYcaNOhsYhZrStljarNU+tA0k9iIXbco1x+a3RzKSkOB\/31hiwlYARdPxVfA4tlw7PDeRv6xT+b+Zv+a+jVuxZiNAikFvbCic9wNteLeIi7n5SfaDU1hH5H0TBuxqIVG9IHOsQSrBqKpNMeo1qfha7yS2X+OJjDupJOcyA3aK4UBMnSr\/hwPHcnofH4+5e3N9vB71o19Y0N1Cu3OIZZTlMMscwt3XDJIpsNrPW0k\/KXOVig1xeZdDezEjIt7JmJY9nlO847+Hb404Ny9pRCt57zdrjCVnAEbkkF4phZwF7K\/zzTOwqW\/8CPNUPEe\/A1vTBCVo6HwXAA4OkIci3U","pkt_caplen":426,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":245,"flow_packet_id":2,"flow_first_seen":946739660371,"flow_last_seen":946739660417,"flow_tot_l4_data_len":976,"flow_min_l4_data_len":392,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":488,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":40958,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":946739719617,"flow_last_seen":946739719617,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":59812,"dst_port":8443,"l4_proto":"udp"}
+1168{"flow_id":246,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739719,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0961{"flow_id":246,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739719,"pkt_len":460,"pkt":"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","pkt_caplen":460,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":246,"flow_packet_id":2,"flow_first_seen":946739719617,"flow_last_seen":946739719664,"flow_tot_l4_data_len":1010,"flow_min_l4_data_len":426,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":505,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":59812,"dst_port":8443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":946739720236,"flow_last_seen":946739720236,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45234,"dst_port":443,"l4_proto":"udp"}
+1167{"flow_id":247,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739720,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_id":247,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739720,"pkt_len":282,"pkt":"ZmZmZmZmRERERERECABFAAEM3XMAADURdWEzDz5BCgAAAQG7sLIA+HYgcjZmbnZXajjrzdyyppbCjyYJ8RwtW4RTIlvIG\/FZbH1Xp2LSeUte4yLE0KEYJIy\/W8+x\/FH3nQM381uStJPi54eYTbEiFOHb6+tNj6JfFejP8ANh9SW7+XztIQKHTMkKaKwDijmfQK3jWMvzYn5RQLy\/kgEd3jZcHSQ4+mGlJFAq0q9\/sxSmeRSE7Bf4lfghgGePrvRax2LVMOPyLQdEzOtXRcimFhC\/P2NV+z\/yC5UUyjWbNHflc5ZhEb6wjqEIWWaXMR9PmHFkJmX18vLk2mHCcaPJ0ISTpxtaV1D5IuKPIa2LIoH3gyFLk8kBlxy8","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":247,"flow_packet_id":2,"flow_first_seen":946739720236,"flow_last_seen":946739720266,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45234,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":946739725845,"flow_last_seen":946739725845,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":36746,"dst_port":443,"l4_proto":"udp"}
+1169{"flow_id":248,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739725,"pkt_len":618,"pkt":"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","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_id":248,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739725,"pkt_len":282,"pkt":"ZmZmZmZmRERERERECABFAAEM4eEAADURcPMzDz5BCgAAAQG7j4oA+L7VcjZmbnZXajh4DJAVXnt\/A\/iO355MVB4P\/\/Rk8\/R8bJwvIdLtYy13W15OTi+Go1C5ARLPQjyVOYrIdtt78KeJtxqvLGMYFgf90WzBjkKY8vjgNB0MPV1q9fSbDPwYJMt9sDZnnX7J06DitoJz19fiGevmNqdw2iS+W0+hbeSiK8kirJT\/QpPdxVHp2xD743rTjnXejSHner\/lxnNhKbPdOrwzbBbFmJ\/STzN7we3lc\/L7tRfFce0lf4Dadw+FNCaY6kAAQ713YJ6hg1mApwixRpXpT16U0DoxmV6YKXf9KevXwY7CFTGcq9MsTSP1FQYE","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":248,"flow_packet_id":2,"flow_first_seen":946739725845,"flow_last_seen":946739725874,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":36746,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":946739727013,"flow_last_seen":946739727013,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33089,"dst_port":443,"l4_proto":"udp"}
+1165{"flow_id":249,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739727,"pkt_len":618,"pkt":"REREREREZmZmZmZmCABFAAJchI5AALYRC\/YKAAABMw8+QYFBAbsCSDRmPBQECcRLqdjK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDAvLo+OTm36q6otOO+fGemzVvq0dD3jxm9VGAJSNGJ7CPJoGqXj8m9e0jdRInMcNRA9p4+0Ni8e31vogtljvbwYYgmhAZTxwGYs6C50cDQFt1uHfEvD15mlAq995eAVsOx9PzSthVaX\/ivHpOY6L3Ij\/Ef7SZJJCujYYFW73myi8HjWORk7BxBZfRqH+6sXHsTHW9JgIyfg81CrvoYmjj6eguA0dO39fTJaKjXzcpWKnEcMMNV4ml8LGnAy0T9PzW3di7md5aeCc6dVE4FKwEMVWCPhdhJoRf2eXkrqBw09LkEK01y9a7hl1hmtvIUWP7Fpi4bKoZT2dc0fFL1f9KzoS20B8JdI1HDtUFbfn9WkC6dXWkvGuh\/9+Rlymk6CKSLR0QVl5o+\/deX43CF3YmoxgH2snZah0gHUFwhHSA2MzyATzLiO4hwopOla7EXLAzrjJnmBpaFbHi1L+QqXQh2bLrcU+P9O4f9I6E21iw7CMaLWnshFHMR4k17Kr3eYvvp5nk3smnj6RkzbyXiwre7VxnxR8luWJiFKQAtgTS7iTP90QNwfWgaQbUtbBzkaFhJU0sLHhiOY7bVruAAJT6m3XAbRU\/eHVLtQFKfLcw5DBcGucce2S1ZsrhqHFcOTeV5s1bkuGYusFVrqTNERXk+qQd0EJRZ80ghllq3WCfjIbNz4NU54JpS6KXFVABPgeMm+7RrRRXRHV","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":249,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739727,"pkt_len":218,"pkt":"ZmZmZmZmRERERERECABFAADM4h4AADURcPYzDz5BCgAAAQG7gUEAuGT7cjZmbnZXajgLy6Pjk5t+quqLTjthMYRcpmrtygKi+8ge\/d5a\/EggfKFstwqlUcEQ0npRyt3o\/+nrMu7IyAemLvDGwM3nY6O0vBX25jf4NlD5NhKqGUUpFydrLINODy\/Et1yVVHUUL4VBz3CwT8bs4b54QwYXASMjQfnf\/0NTpkvJ+0v2f5ntIAM7o81gzx\/1ovB+r6k93kwem7LHnom40gyZk3GGiIOpwn\/P\/XOKwtE=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":249,"flow_packet_id":2,"flow_first_seen":946739727013,"flow_last_seen":946739727039,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33089,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":946739861286,"flow_last_seen":946739861286,"flow_tot_l4_data_len":584,"flow_min_l4_data_len":584,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":40675,"dst_port":443,"l4_proto":"udp"}
+1170{"flow_id":250,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739861,"pkt_len":618,"pkt":"REREREREZmZmZmZmCABFAAJc8z5AAGQR70UKAAABMw8+QZ7jAbsCSDRmPBQECcRLqdjK1L0mf5PIChUIPitfU3P1xdue2oSi59s41xANmFlcDEDim3A5yf0wjjkn7c0KZ99+wsaC8Q0jJNdVtRyvQ4vttz57bauXWf7aWWZI9GXe13Bq\/1R6iUwT\/A0\/zRCc0Ayq9cmcu623YyCddihLAAMnrLyfM6t6rL27MiG1nzMzmCPyF28NwS5XqwjPRfHv4CZ99g0HmhnodYUO8q68IgHhgstyCXs7D74EPnDSNCXWvxBvHIE3vRmyPvunw0teioCjIqxqULRcggjd13KNSzhv65LTFQDOYbWOCn+rymPlyEaTGV8M85qpLCbZBx+P2mZMjdPflMOxEUQrHk9kdqOlL2mWcrX2tI9xOtQuzvv+NeAjtLGeixP59GGL75pvlLSdqyad1gu\/frI3Onyk042MoSYGJ6RwV3eaPNbZQCtEwb9AOFIXBmvRH9XM7npQUXePLACdz9iCTPKnV7Kw8ctrZrqQ4N6l7ZvcAG2rUT+Q9\/LXDXqKjl09ujD68NhiQh61LzaYdfK4i7pycnU4qJoDyh6wqXlEnhJrx33Uml0q43\/LZkKq6+gBtMyFx1G0t8TXOxdVJjjFCI6asgc8Kxe6G3w1FuEYOCYdPJ1BDXSvfQyl+xvLRdx79zlvjoh3CA3lgSqjekZ4r\/nVmPAWeluQHxO36OZiUmB2ai6gs8+TK+H6\/M45c1\/tfkqR+WeZABxv3Wq+MtDzkLR1Ba9KFIEFLcYA\/aPSp26qFfnJhX4KU8kKJXh\/RvHe","pkt_caplen":618,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":250,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","pkt_oversize":false,"pkt_ts":946739861,"pkt_len":218,"pkt":"ZmZmZmZmRERERERECABFAADMBL8AADQRT1YzDz5BCgAAAQG7nuMAuKxVcjZmbnZXajhA4ptwOcn9MI45J+2cfN20Dl9sTMp3rF67X\/jDpIVgb1a+3\/m31lpJBtYvfwV0B9vwzZtjNo+jG7GftQDbJaUY\/oveZ3k2CcZHOjICUKnGXvyF5yEl+85urFpytmNQcYoVHSk5XuOkfP++TbbcrYxYsDH+x2d1Xg60pF+BeHKLrLF0X3ik2Kl1hdwwJCMdJ5w1\/ra7TZUP4kyuPD6WApR9UYb+H+3yIn0=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":250,"flow_packet_id":2,"flow_first_seen":946739861286,"flow_last_seen":946739861499,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":40675,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"DNScrypt","category":"Network"}}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":164,"flow_packet_id":2,"flow_first_seen":946739337078,"flow_last_seen":946739337184,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":39816,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":50,"flow_packet_id":2,"flow_first_seen":946739305192,"flow_last_seen":946739305214,"flow_tot_l4_data_len":708,"flow_min_l4_data_len":188,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":34885,"dst_port":8443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":237,"flow_packet_id":2,"flow_first_seen":946739402188,"flow_last_seen":946739402354,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":53045,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":180,"flow_packet_id":2,"flow_first_seen":946739348805,"flow_last_seen":946739348917,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":51647,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":946739305155,"flow_last_seen":946739305192,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":37595,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":101,"flow_packet_id":2,"flow_first_seen":946739312132,"flow_last_seen":946739312183,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":40451,"dst_port":4343,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":39,"flow_packet_id":2,"flow_first_seen":946739304789,"flow_last_seen":946739304821,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":36668,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":128,"flow_packet_id":2,"flow_first_seen":946739317462,"flow_last_seen":946739317493,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":53117,"dst_port":2053,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":57,"flow_packet_id":2,"flow_first_seen":946739305219,"flow_last_seen":946739305329,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":43505,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":59749,"dst_port":465,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":229,"flow_packet_id":2,"flow_first_seen":946739400522,"flow_last_seen":946739400550,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":46140,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":66,"flow_packet_id":2,"flow_first_seen":946739305348,"flow_last_seen":946739305453,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":38388,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":105,"flow_packet_id":2,"flow_first_seen":946739312286,"flow_last_seen":946739312406,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":47432,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":185,"flow_packet_id":2,"flow_first_seen":946739348805,"flow_last_seen":946739348917,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":47621,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":226,"flow_packet_id":2,"flow_first_seen":946739400460,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":188,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":834,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":46314,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":946739304328,"flow_last_seen":946739304362,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":35005,"dst_port":8443,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":248,"flow_packet_id":2,"flow_first_seen":946739725845,"flow_last_seen":946739725874,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":36746,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":115,"flow_packet_id":2,"flow_first_seen":946739317403,"flow_last_seen":946739317431,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":195,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":47257,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":90,"flow_packet_id":2,"flow_first_seen":946739312105,"flow_last_seen":946739312130,"flow_tot_l4_data_len":1677,"flow_min_l4_data_len":197,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":838,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":38812,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":216,"flow_packet_id":2,"flow_first_seen":946739396111,"flow_last_seen":946739396210,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":54375,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":213,"flow_packet_id":2,"flow_first_seen":946739396070,"flow_last_seen":946739396108,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":50277,"dst_port":8443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":114,"flow_packet_id":2,"flow_first_seen":946739317403,"flow_last_seen":946739317428,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":195,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":37035,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":244,"flow_packet_id":2,"flow_first_seen":946739620053,"flow_last_seen":946739620112,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":37711,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":214,"flow_packet_id":2,"flow_first_seen":946739396070,"flow_last_seen":946739396110,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":44161,"dst_port":8443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":143,"flow_packet_id":2,"flow_first_seen":946739318038,"flow_last_seen":946739318062,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":195,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":38511,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":946739304789,"flow_last_seen":946739304818,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38867,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":196,"flow_packet_id":2,"flow_first_seen":946739380984,"flow_last_seen":946739381021,"flow_tot_l4_data_len":1667,"flow_min_l4_data_len":187,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":833,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":51826,"dst_port":8443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":221,"flow_packet_id":2,"flow_first_seen":946739396111,"flow_last_seen":946739396218,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":42141,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":177,"flow_packet_id":2,"flow_first_seen":946739348756,"flow_last_seen":946739348803,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":43540,"dst_port":4343,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":946739304599,"flow_last_seen":946739304627,"flow_tot_l4_data_len":707,"flow_min_l4_data_len":187,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37950,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":189,"flow_packet_id":2,"flow_first_seen":946739380805,"flow_last_seen":946739380844,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":40775,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":135,"flow_packet_id":2,"flow_first_seen":946739317496,"flow_last_seen":946739317810,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43776,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":209,"flow_packet_id":2,"flow_first_seen":946739396047,"flow_last_seen":946739396074,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54204,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":154,"flow_packet_id":2,"flow_first_seen":946739318169,"flow_last_seen":946739318205,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49040,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":230,"flow_packet_id":2,"flow_first_seen":946739400522,"flow_last_seen":946739400551,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":40209,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":946739304363,"flow_last_seen":946739304399,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59641,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":147,"flow_packet_id":2,"flow_first_seen":946739318061,"flow_last_seen":946739318167,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":51935,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":242,"flow_packet_id":2,"flow_first_seen":946739615603,"flow_last_seen":946739615628,"flow_tot_l4_data_len":896,"flow_min_l4_data_len":312,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":448,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":60393,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":49186,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":43748,"dst_port":1053,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":137,"flow_packet_id":2,"flow_first_seen":946739317496,"flow_last_seen":946739317822,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52069,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":946739304789,"flow_last_seen":946739304821,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":39007,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":102,"flow_packet_id":2,"flow_first_seen":946739312286,"flow_last_seen":946739312400,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":55896,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":155,"flow_packet_id":2,"flow_first_seen":946739318169,"flow_last_seen":946739318200,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":49115,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":246,"flow_packet_id":2,"flow_first_seen":946739719617,"flow_last_seen":946739719664,"flow_tot_l4_data_len":1010,"flow_min_l4_data_len":426,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":505,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":59812,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":156,"flow_packet_id":2,"flow_first_seen":946739337048,"flow_last_seen":946739337076,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":45375,"dst_port":4343,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":207,"flow_packet_id":2,"flow_first_seen":946739396047,"flow_last_seen":946739396071,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":54305,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":121,"flow_packet_id":2,"flow_first_seen":946739317432,"flow_last_seen":946739317461,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":55046,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":946739304328,"flow_last_seen":946739304362,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":53697,"dst_port":8443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":82,"flow_packet_id":2,"flow_first_seen":946739311153,"flow_last_seen":946739311314,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38278,"dst_port":553,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":211,"flow_packet_id":2,"flow_first_seen":946739396070,"flow_last_seen":946739396109,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":38242,"dst_port":8443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":234,"flow_packet_id":2,"flow_first_seen":946739402187,"flow_last_seen":946739402352,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":59587,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":74,"flow_packet_id":2,"flow_first_seen":946739306241,"flow_last_seen":946739306435,"flow_tot_l4_data_len":1807,"flow_min_l4_data_len":327,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":903,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":41800,"dst_port":1443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":148,"flow_packet_id":2,"flow_first_seen":946739318061,"flow_last_seen":946739318171,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":54096,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":86,"flow_packet_id":2,"flow_first_seen":946739311802,"flow_last_seen":946739312103,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":52911,"dst_port":443,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":247,"flow_packet_id":2,"flow_first_seen":946739720236,"flow_last_seen":946739720266,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45234,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":176,"flow_packet_id":2,"flow_first_seen":946739348756,"flow_last_seen":946739348800,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":45815,"dst_port":4343,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":123,"flow_packet_id":2,"flow_first_seen":946739317432,"flow_last_seen":946739317462,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":36676,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":206,"flow_packet_id":2,"flow_first_seen":946739396047,"flow_last_seen":946739396073,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48237,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":78,"flow_packet_id":2,"flow_first_seen":946739311153,"flow_last_seen":946739311310,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38349,"dst_port":553,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58104,"dst_port":465,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":946739304328,"flow_last_seen":946739304361,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":37413,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":124,"flow_packet_id":2,"flow_first_seen":946739317432,"flow_last_seen":946739317463,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":49008,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":946739305155,"flow_last_seen":946739305189,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":50335,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":182,"flow_packet_id":2,"flow_first_seen":946739348805,"flow_last_seen":946739348912,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":41895,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":946739305192,"flow_last_seen":946739305220,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":188,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":834,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":53811,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":204,"flow_packet_id":2,"flow_first_seen":946739396047,"flow_last_seen":946739396071,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":48300,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":225,"flow_packet_id":2,"flow_first_seen":946739400460,"flow_last_seen":946739400520,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":188,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":834,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":54920,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":159,"flow_packet_id":2,"flow_first_seen":946739337048,"flow_last_seen":946739337077,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":55768,"dst_port":4343,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":64,"flow_packet_id":2,"flow_first_seen":946739305327,"flow_last_seen":946739305384,"flow_tot_l4_data_len":571,"flow_min_l4_data_len":51,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":285,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":57465,"dst_port":8443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":222,"flow_packet_id":2,"flow_first_seen":946739400460,"flow_last_seen":946739400518,"flow_tot_l4_data_len":708,"flow_min_l4_data_len":188,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":56988,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":218,"flow_packet_id":2,"flow_first_seen":946739396111,"flow_last_seen":946739396215,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":36335,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":946739305192,"flow_last_seen":946739305218,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":188,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":834,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":33369,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":38,"flow_packet_id":2,"flow_first_seen":946739304789,"flow_last_seen":946739304821,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":59709,"dst_port":443,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":249,"flow_packet_id":2,"flow_first_seen":946739727013,"flow_last_seen":946739727039,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33089,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":198,"flow_packet_id":2,"flow_first_seen":946739391046,"flow_last_seen":946739391308,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":50601,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":946739312286,"flow_last_seen":946739312407,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":35634,"dst_port":443,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":40374,"dst_port":8443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":946739304628,"flow_last_seen":946739304810,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43365,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":946739305328,"flow_last_seen":946739305354,"flow_tot_l4_data_len":571,"flow_min_l4_data_len":51,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":285,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":55482,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":232,"flow_packet_id":2,"flow_first_seen":946739400522,"flow_last_seen":946739400553,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":50757,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":243,"flow_packet_id":2,"flow_first_seen":946739617004,"flow_last_seen":946739617027,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":50443,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":106,"flow_packet_id":2,"flow_first_seen":946739312286,"flow_last_seen":946739312399,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":54112,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":168,"flow_packet_id":2,"flow_first_seen":946739337184,"flow_last_seen":946739337214,"flow_tot_l4_data_len":723,"flow_min_l4_data_len":203,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":35734,"dst_port":465,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":58,"flow_packet_id":2,"flow_first_seen":946739305219,"flow_last_seen":946739305326,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":52284,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":149,"flow_packet_id":2,"flow_first_seen":946739318061,"flow_last_seen":946739318175,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":35903,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":100,"flow_packet_id":2,"flow_first_seen":946739312132,"flow_last_seen":946739312179,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":43129,"dst_port":4343,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":946739304599,"flow_last_seen":946739304628,"flow_tot_l4_data_len":707,"flow_min_l4_data_len":187,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":34324,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":161,"flow_packet_id":2,"flow_first_seen":946739337048,"flow_last_seen":946739337078,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":53887,"dst_port":4343,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":48,"flow_packet_id":2,"flow_first_seen":946739305192,"flow_last_seen":946739305214,"flow_tot_l4_data_len":708,"flow_min_l4_data_len":188,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":47865,"dst_port":8443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":163,"flow_packet_id":2,"flow_first_seen":946739337078,"flow_last_seen":946739337183,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":38508,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":178,"flow_packet_id":2,"flow_first_seen":946739348756,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":48159,"dst_port":4343,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":946739304363,"flow_last_seen":946739304397,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":39655,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":122,"flow_packet_id":2,"flow_first_seen":946739317432,"flow_last_seen":946739317461,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":51363,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":146,"flow_packet_id":2,"flow_first_seen":946739318061,"flow_last_seen":946739318170,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":40138,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":145,"flow_packet_id":2,"flow_first_seen":946739318061,"flow_last_seen":946739318168,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":50387,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":233,"flow_packet_id":2,"flow_first_seen":946739400522,"flow_last_seen":946739400553,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":57109,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":193,"flow_packet_id":2,"flow_first_seen":946739380983,"flow_last_seen":946739381016,"flow_tot_l4_data_len":707,"flow_min_l4_data_len":187,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":50403,"dst_port":8443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":946739304628,"flow_last_seen":946739304788,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":43609,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":150,"flow_packet_id":2,"flow_first_seen":946739318168,"flow_last_seen":946739318202,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":37328,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":224,"flow_packet_id":2,"flow_first_seen":946739400460,"flow_last_seen":946739400519,"flow_tot_l4_data_len":708,"flow_min_l4_data_len":188,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":59354,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":89,"flow_packet_id":2,"flow_first_seen":946739311802,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55409,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":157,"flow_packet_id":2,"flow_first_seen":946739337048,"flow_last_seen":946739337077,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":49975,"dst_port":4343,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":183,"flow_packet_id":2,"flow_first_seen":946739348805,"flow_last_seen":946739348915,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46363,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":126,"flow_packet_id":2,"flow_first_seen":946739317462,"flow_last_seen":946739317493,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":60091,"dst_port":2053,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":142,"flow_packet_id":2,"flow_first_seen":946739318038,"flow_last_seen":946739318061,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":195,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":57636,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":152,"flow_packet_id":2,"flow_first_seen":946739318169,"flow_last_seen":946739318201,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":33279,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":118,"flow_packet_id":2,"flow_first_seen":946739317403,"flow_last_seen":946739317432,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":195,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":60334,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":104,"flow_packet_id":2,"flow_first_seen":946739312286,"flow_last_seen":946739312405,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":40099,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":239,"flow_packet_id":2,"flow_first_seen":946739402188,"flow_last_seen":946739402356,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60113,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":119,"flow_packet_id":2,"flow_first_seen":946739317403,"flow_last_seen":946739317434,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":195,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":48065,"dst_port":443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":94,"flow_packet_id":2,"flow_first_seen":946739312105,"flow_last_seen":946739312136,"flow_tot_l4_data_len":717,"flow_min_l4_data_len":197,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":43714,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":946739304789,"flow_last_seen":946739304815,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":45767,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":217,"flow_packet_id":2,"flow_first_seen":946739396111,"flow_last_seen":946739396214,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":55185,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":946739304628,"flow_last_seen":946739304793,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56043,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":79,"flow_packet_id":2,"flow_first_seen":946739311153,"flow_last_seen":946739311308,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":38879,"dst_port":553,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":75,"flow_packet_id":2,"flow_first_seen":946739306241,"flow_last_seen":946739306435,"flow_tot_l4_data_len":847,"flow_min_l4_data_len":327,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":423,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":38283,"dst_port":1443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":93,"flow_packet_id":2,"flow_first_seen":946739312105,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1677,"flow_min_l4_data_len":197,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":838,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":33521,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":116,"flow_packet_id":2,"flow_first_seen":946739317403,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":195,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":46066,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":946739305349,"flow_last_seen":946739305459,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35228,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":946739337184,"flow_last_seen":946739337184,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":58650,"dst_port":465,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":946739299327,"flow_last_seen":946739299356,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":52636,"dst_port":1053,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":946739305192,"flow_last_seen":946739305217,"flow_tot_l4_data_len":708,"flow_min_l4_data_len":188,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44093,"dst_port":8443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":240,"flow_packet_id":2,"flow_first_seen":946739611961,"flow_last_seen":946739612032,"flow_tot_l4_data_len":960,"flow_min_l4_data_len":376,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47545,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":139,"flow_packet_id":2,"flow_first_seen":946739318038,"flow_last_seen":946739318059,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":195,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":45497,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":160,"flow_packet_id":2,"flow_first_seen":946739337048,"flow_last_seen":946739337079,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":39910,"dst_port":4343,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58113,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":103,"flow_packet_id":2,"flow_first_seen":946739312286,"flow_last_seen":946739312401,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"66.85.30.115","src_port":48448,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":215,"flow_packet_id":2,"flow_first_seen":946739396070,"flow_last_seen":946739396113,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":49177,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":241,"flow_packet_id":2,"flow_first_seen":946739614386,"flow_last_seen":946739614411,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":248,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":38660,"dst_port":443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":946739304628,"flow_last_seen":946739304791,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":56177,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":175,"flow_packet_id":2,"flow_first_seen":946739348756,"flow_last_seen":946739348804,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":44469,"dst_port":4343,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":62,"flow_packet_id":2,"flow_first_seen":946739305327,"flow_last_seen":946739305351,"flow_tot_l4_data_len":1531,"flow_min_l4_data_len":51,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":765,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":56022,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":946739305219,"flow_last_seen":946739305330,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":60962,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":946739304599,"flow_last_seen":946739304629,"flow_tot_l4_data_len":1667,"flow_min_l4_data_len":187,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":833,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":59367,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":946739305155,"flow_last_seen":946739305194,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59194,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":194,"flow_packet_id":2,"flow_first_seen":946739380983,"flow_last_seen":946739381015,"flow_tot_l4_data_len":707,"flow_min_l4_data_len":187,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":46646,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":202,"flow_packet_id":2,"flow_first_seen":946739391046,"flow_last_seen":946739391308,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":59400,"dst_port":8443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":192,"flow_packet_id":2,"flow_first_seen":946739380983,"flow_last_seen":946739381016,"flow_tot_l4_data_len":707,"flow_min_l4_data_len":187,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":58948,"dst_port":8443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":77,"flow_packet_id":2,"flow_first_seen":946739306241,"flow_last_seen":946739306435,"flow_tot_l4_data_len":1807,"flow_min_l4_data_len":327,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":903,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":56902,"dst_port":1443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":91,"flow_packet_id":2,"flow_first_seen":946739312105,"flow_last_seen":946739312133,"flow_tot_l4_data_len":717,"flow_min_l4_data_len":197,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":45993,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":117,"flow_packet_id":2,"flow_first_seen":946739317403,"flow_last_seen":946739317429,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":195,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.166.97","src_port":56494,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":162,"flow_packet_id":2,"flow_first_seen":946739337078,"flow_last_seen":946739337184,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":36930,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":946739304599,"flow_last_seen":946739304626,"flow_tot_l4_data_len":707,"flow_min_l4_data_len":187,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":32793,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":169,"flow_packet_id":2,"flow_first_seen":946739337184,"flow_last_seen":946739337214,"flow_tot_l4_data_len":723,"flow_min_l4_data_len":203,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":44496,"dst_port":465,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":129,"flow_packet_id":2,"flow_first_seen":946739317462,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52221,"dst_port":2053,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":946739304328,"flow_last_seen":946739304360,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":50435,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":946739305192,"flow_last_seen":946739305220,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":188,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":834,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":44282,"dst_port":8443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":140,"flow_packet_id":2,"flow_first_seen":946739318038,"flow_last_seen":946739318063,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":195,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":47729,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":138,"flow_packet_id":2,"flow_first_seen":946739318038,"flow_last_seen":946739318059,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":195,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":53876,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":144,"flow_packet_id":2,"flow_first_seen":946739318061,"flow_last_seen":946739318164,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.205.47","src_port":59011,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":188,"flow_packet_id":2,"flow_first_seen":946739380804,"flow_last_seen":946739380834,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":52056,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":67,"flow_packet_id":2,"flow_first_seen":946739305348,"flow_last_seen":946739305457,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":45722,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":68,"flow_packet_id":2,"flow_first_seen":946739305348,"flow_last_seen":946739305460,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":35495,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":179,"flow_packet_id":2,"flow_first_seen":946739348756,"flow_last_seen":946739348805,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38482,"dst_port":4343,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":60,"flow_packet_id":2,"flow_first_seen":946739305327,"flow_last_seen":946739305349,"flow_tot_l4_data_len":571,"flow_min_l4_data_len":51,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":285,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":50035,"dst_port":8443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":84,"flow_packet_id":2,"flow_first_seen":946739311802,"flow_last_seen":946739312102,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55834,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":166,"flow_packet_id":2,"flow_first_seen":946739337078,"flow_last_seen":946739337188,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":59589,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":73,"flow_packet_id":2,"flow_first_seen":946739306241,"flow_last_seen":946739306434,"flow_tot_l4_data_len":1807,"flow_min_l4_data_len":327,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":903,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":50913,"dst_port":1443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":87,"flow_packet_id":2,"flow_first_seen":946739311802,"flow_last_seen":946739312105,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":47685,"dst_port":443,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":127,"flow_packet_id":2,"flow_first_seen":946739317462,"flow_last_seen":946739317494,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":52356,"dst_port":2053,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":153,"flow_packet_id":2,"flow_first_seen":946739318169,"flow_last_seen":946739318202,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":54215,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":59,"flow_packet_id":2,"flow_first_seen":946739305219,"flow_last_seen":946739305331,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":46856,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":195,"flow_packet_id":2,"flow_first_seen":946739380984,"flow_last_seen":946739381017,"flow_tot_l4_data_len":1667,"flow_min_l4_data_len":187,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":833,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":57090,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":120,"flow_packet_id":2,"flow_first_seen":946739317432,"flow_last_seen":946739317460,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":41717,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":69,"flow_packet_id":2,"flow_first_seen":946739305349,"flow_last_seen":946739305461,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":33565,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":946739304628,"flow_last_seen":946739304806,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":46229,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":946739304599,"flow_last_seen":946739304628,"flow_tot_l4_data_len":1667,"flow_min_l4_data_len":187,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":833,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":37123,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":946739299327,"flow_last_seen":946739299355,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":51004,"dst_port":1053,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":88,"flow_packet_id":2,"flow_first_seen":946739311802,"flow_last_seen":946739312105,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":55979,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":141,"flow_packet_id":2,"flow_first_seen":946739318038,"flow_last_seen":946739318061,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":195,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"151.80.222.79","src_port":52040,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":946739305155,"flow_last_seen":946739305187,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":59476,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":220,"flow_packet_id":2,"flow_first_seen":946739396111,"flow_last_seen":946739396216,"flow_tot_l4_data_len":1680,"flow_min_l4_data_len":200,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":840,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":33143,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":190,"flow_packet_id":2,"flow_first_seen":946739380805,"flow_last_seen":946739380837,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":56335,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":181,"flow_packet_id":2,"flow_first_seen":946739348805,"flow_last_seen":946739348913,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":59224,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":184,"flow_packet_id":2,"flow_first_seen":946739348805,"flow_last_seen":946739348916,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":57180,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":228,"flow_packet_id":2,"flow_first_seen":946739400522,"flow_last_seen":946739400550,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49568,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":151,"flow_packet_id":2,"flow_first_seen":946739318169,"flow_last_seen":946739318200,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.191.187.107","src_port":35885,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":238,"flow_packet_id":2,"flow_first_seen":946739402188,"flow_last_seen":946739402357,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":34024,"dst_port":443,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":51509,"dst_port":8443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":111,"flow_packet_id":2,"flow_first_seen":946739312402,"flow_last_seen":946739312464,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":42156,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":108,"flow_packet_id":2,"flow_first_seen":946739312402,"flow_last_seen":946739312463,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":46255,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":98,"flow_packet_id":2,"flow_first_seen":946739312132,"flow_last_seen":946739312181,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":45987,"dst_port":4343,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":133,"flow_packet_id":2,"flow_first_seen":946739317496,"flow_last_seen":946739317829,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":55267,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":219,"flow_packet_id":2,"flow_first_seen":946739396111,"flow_last_seen":946739396216,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"107.170.57.34","src_port":37287,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":158,"flow_packet_id":2,"flow_first_seen":946739337048,"flow_last_seen":946739337078,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":38310,"dst_port":4343,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":946739305327,"flow_last_seen":946739305348,"flow_tot_l4_data_len":1531,"flow_min_l4_data_len":51,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":765,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":40009,"dst_port":8443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":946739304628,"flow_last_seen":946739304804,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"41.79.69.13","src_port":38136,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":946739312132,"flow_last_seen":946739312178,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":41913,"dst_port":4343,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":71,"flow_packet_id":2,"flow_first_seen":946739305349,"flow_last_seen":946739305457,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":60301,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":205,"flow_packet_id":2,"flow_first_seen":946739396047,"flow_last_seen":946739396069,"flow_tot_l4_data_len":1671,"flow_min_l4_data_len":191,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":41108,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":174,"flow_packet_id":2,"flow_first_seen":946739348756,"flow_last_seen":946739348800,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":38709,"dst_port":4343,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":946739304363,"flow_last_seen":946739304396,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44491,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":208,"flow_packet_id":2,"flow_first_seen":946739396047,"flow_last_seen":946739396074,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"144.91.106.227","src_port":55469,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":80,"flow_packet_id":2,"flow_first_seen":946739311153,"flow_last_seen":946739311306,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":43528,"dst_port":553,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":171,"flow_packet_id":2,"flow_first_seen":946739337184,"flow_last_seen":946739337218,"flow_tot_l4_data_len":723,"flow_min_l4_data_len":203,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"5.189.170.196","src_port":40748,"dst_port":465,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":83,"flow_packet_id":2,"flow_first_seen":946739311153,"flow_last_seen":946739311312,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":55822,"dst_port":553,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":212,"flow_packet_id":2,"flow_first_seen":946739396070,"flow_last_seen":946739396109,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33246,"dst_port":8443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":99,"flow_packet_id":2,"flow_first_seen":946739312132,"flow_last_seen":946739312179,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":46063,"dst_port":4343,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":97,"flow_packet_id":2,"flow_first_seen":946739312132,"flow_last_seen":946739312180,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":37890,"dst_port":4343,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":131,"flow_packet_id":2,"flow_first_seen":946739317462,"flow_last_seen":946739317496,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":58740,"dst_port":2053,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":95,"flow_packet_id":2,"flow_first_seen":946739312106,"flow_last_seen":946739312136,"flow_tot_l4_data_len":717,"flow_min_l4_data_len":197,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":60735,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":81,"flow_packet_id":2,"flow_first_seen":946739311153,"flow_last_seen":946739311313,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"205.185.116.116","src_port":51770,"dst_port":553,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":946739305155,"flow_last_seen":946739305189,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":47341,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":210,"flow_packet_id":2,"flow_first_seen":946739396070,"flow_last_seen":946739396107,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.55","src_port":33293,"dst_port":8443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":231,"flow_packet_id":2,"flow_first_seen":946739400522,"flow_last_seen":946739400551,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":200,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":360,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"77.66.84.233","src_port":49732,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":92,"flow_packet_id":2,"flow_first_seen":946739312105,"flow_last_seen":946739312132,"flow_tot_l4_data_len":1677,"flow_min_l4_data_len":197,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":838,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":56688,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":235,"flow_packet_id":2,"flow_first_seen":946739402188,"flow_last_seen":946739402356,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":60852,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":53299,"dst_port":1053,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":57395,"dst_port":1053,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":165,"flow_packet_id":2,"flow_first_seen":946739337078,"flow_last_seen":946739337186,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45613,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":76,"flow_packet_id":2,"flow_first_seen":946739306241,"flow_last_seen":946739306434,"flow_tot_l4_data_len":847,"flow_min_l4_data_len":327,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":423,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":59489,"dst_port":1443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":132,"flow_packet_id":2,"flow_first_seen":946739317496,"flow_last_seen":946739317825,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":43224,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":946739304789,"flow_last_seen":946739304821,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.122.250","src_port":38362,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":946739304363,"flow_last_seen":946739304393,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":56997,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":946739304363,"flow_last_seen":946739304394,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":44712,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":227,"flow_packet_id":2,"flow_first_seen":946739400460,"flow_last_seen":946739400522,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":188,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":834,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":47971,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":201,"flow_packet_id":2,"flow_first_seen":946739391046,"flow_last_seen":946739391306,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":45682,"dst_port":8443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":223,"flow_packet_id":2,"flow_first_seen":946739400460,"flow_last_seen":946739400519,"flow_tot_l4_data_len":708,"flow_min_l4_data_len":188,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.193.127.244","src_port":50062,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":946739304328,"flow_last_seen":946739304369,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55123,"dst_port":8443,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":946739391046,"flow_last_seen":946739391046,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":49796,"dst_port":8443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":54,"flow_packet_id":2,"flow_first_seen":946739305219,"flow_last_seen":946739305326,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":32970,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":167,"flow_packet_id":2,"flow_first_seen":946739337078,"flow_last_seen":946739337190,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":45747,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":136,"flow_packet_id":2,"flow_first_seen":946739317496,"flow_last_seen":946739317819,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":59707,"dst_port":443,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":946739317432,"flow_last_seen":946739317432,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"176.56.237.171","src_port":48325,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":187,"flow_packet_id":2,"flow_first_seen":946739380804,"flow_last_seen":946739380834,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":34228,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":112,"flow_packet_id":2,"flow_first_seen":946739312402,"flow_last_seen":946739312466,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":191,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":58936,"dst_port":443,"l4_proto":"udp"}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":191,"flow_packet_id":2,"flow_first_seen":946739380805,"flow_last_seen":946739380838,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":60885,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":134,"flow_packet_id":2,"flow_first_seen":946739317496,"flow_last_seen":946739317819,"flow_tot_l4_data_len":710,"flow_min_l4_data_len":190,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":51589,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":946739304599,"flow_last_seen":946739304626,"flow_tot_l4_data_len":1667,"flow_min_l4_data_len":187,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":833,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":56035,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":186,"flow_packet_id":2,"flow_first_seen":946739380804,"flow_last_seen":946739380832,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"212.47.228.136","src_port":38371,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":56,"flow_packet_id":2,"flow_first_seen":946739305219,"flow_last_seen":946739305326,"flow_tot_l4_data_len":1674,"flow_min_l4_data_len":194,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":837,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"142.4.204.111","src_port":33071,"dst_port":443,"l4_proto":"udp"}
+0492{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":130,"flow_packet_id":2,"flow_first_seen":946739317462,"flow_last_seen":946739317496,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"178.216.201.222","src_port":38594,"dst_port":2053,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":946739304363,"flow_last_seen":946739304396,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.238.186.192","src_port":59261,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":197,"flow_packet_id":2,"flow_first_seen":946739380984,"flow_last_seen":946739381017,"flow_tot_l4_data_len":1667,"flow_min_l4_data_len":187,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":833,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":39259,"dst_port":8443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":946739312402,"flow_last_seen":946739312402,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"93.95.226.165","src_port":40595,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":946739306241,"flow_last_seen":946739306433,"flow_tot_l4_data_len":847,"flow_min_l4_data_len":327,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":423,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":49512,"dst_port":1443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":946739305155,"flow_last_seen":946739305191,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":190,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":835,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.59.200.116","src_port":43633,"dst_port":443,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":245,"flow_packet_id":2,"flow_first_seen":946739660371,"flow_last_seen":946739660417,"flow_tot_l4_data_len":976,"flow_min_l4_data_len":392,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":488,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":40958,"dst_port":8443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":946739304328,"flow_last_seen":946739304367,"flow_tot_l4_data_len":714,"flow_min_l4_data_len":194,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":357,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":59405,"dst_port":8443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739299327,"flow_last_seen":946739299327,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":520,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":520,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"62.210.180.71","src_port":49518,"dst_port":1053,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":236,"flow_packet_id":2,"flow_first_seen":946739402188,"flow_last_seen":946739402354,"flow_tot_l4_data_len":712,"flow_min_l4_data_len":192,"flow_max_l4_data_len":520,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"23.111.74.205","src_port":44793,"dst_port":443,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":250,"flow_packet_id":2,"flow_first_seen":946739861286,"flow_last_seen":946739861499,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":184,"flow_max_l4_data_len":584,"flow_avg_l4_data_len":384,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.62.65","src_port":40675,"dst_port":443,"l4_proto":"udp"}
+0488{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":85,"flow_packet_id":2,"flow_first_seen":946739311802,"flow_last_seen":946739312103,"flow_tot_l4_data_len":1672,"flow_min_l4_data_len":192,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":836,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"52.65.235.129","src_port":46313,"dst_port":443,"l4_proto":"udp"}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap","flow_id":63,"flow_packet_id":2,"flow_first_seen":946739305327,"flow_last_seen":946739305350,"flow_tot_l4_data_len":1531,"flow_min_l4_data_len":51,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":765,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.112.112.10","src_port":42570,"dst_port":8443,"l4_proto":"udp"}
+0168{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v1-and-resolver-pings.pcap"}
diff --git a/tests/result/nDPId_dnscrypt-v2-doh.pcap.txt b/tests/result/nDPId_dnscrypt-v2-doh.pcap.txt
new file mode 100644
index 000000000..3d82fe342
--- /dev/null
+++ b/tests/result/nDPId_dnscrypt-v2-doh.pcap.txt
@@ -0,0 +1,622 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946739298533,"flow_last_seen":946739298533,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp"}
+0772{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739298,"pkt_len":337,"pkt":"REREREREZmZmZmZmCABFAAFD4UdAAL0GsQQKAAABi2PeSNGqAbt5f9qX6vvArlAYAfYrngAAFgMBARYBAAESAwPY4R+kmwrmRkwkOvmL20MZvvmmXV\/QYaA6X4C5e+GFvyA2SDuI+F1GOq7qyiEw+aePhhElQVpDVzMYXSdiyok3WQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLTIuc2VieS5pbwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACA0hS9OEA\/J5twwMByNtSlpgrCPJW9Ooqwd+S9NxEdaCw==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946739298533,"flow_last_seen":946739298533,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2309{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739298,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":946739298533,"flow_last_seen":946739298797,"flow_tot_l4_data_len":1733,"flow_min_l4_data_len":303,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":866,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2222{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739298,"pkt_len":1408,"pkt":"ZmZmZmZmRERERERECABFAAVy1TFAACsGSuyLY95ICgAAAQG70arq+8YweX\/bslAYAfkcrQAAThemFBuD34j0ZojpR7nDk08tEILyrSrE7HS0zZ4kmhXJJxPvCajO9mPz0f1Ba7CUeJZuC\/ww3Lrn+zD28CW1o9VT3LiWNj\/tk7IhVjR3oxyzXVyp8GIUKoCq+rFgLmVNv3t4E9NSsp0vzaP0F7j0JBrlPSojRxE2tlZsJ5feSSYzKGVucsWX6pYRquGlpuPfdHODx0L8ifTKNZ7sMGSXufTYU71W7zucIJWTJn92oiP3KQmXtYYb39SlVhRkoPmox0CcWIbUIkPk1mOfiZj7ZHZGdjmSkO+stoE+mAIy1qeh6xhTg7nyjAGvTt0OEbSBbL64py0gHtL8p9MnYDH\/rEu94PzROteC\/nq08LwZZof+0aydUgoyNJpYIzziL6obgZ8r3XFfT2yBZeGRYlK+7j980Fzg4IJlxXjB\/7u4t3CFM2KzwkVTOl0QgQ2WdVMZr63UzYIuBqVeqhjDwph8EAIPfj6GHii36awX1ARUIn+i2we8pqEICyjrrtz5abqrvBqhOgUymt9799jpjN96PN89rSa+qz8R5hSWva8Z0q12NMSUqK4V32q2T+XbFuVZUlGqNPo8Q4LGFZXuYD0rXuNudeUYIvyeE2j5uqdZqZHCJg4amyAZz0RTts0c1\/NYqX2y5hPaOLvInAlZn4kgRx8P3JUIFzzVPNJJ35uuAChT5mattKXxu8qwume7sBZMgcO4xIk9V0GeDf7Q0iqbxG1cZybv7JIhiCiaIbji819I0oDOejGbK2XffVEsRj3+LURpVM8fUmFAk669Ff\/Nr+yt6tH9Ktz6qOevm0rhgviDIUwzLNJNTxk3pvt9wNVus\/LUfcLiMKspToabUtDV2KtFlgjUQBZ6M603sQeMbcyD6v4zye6TReEZisbYDNmcge+IFl+e+6gIZYcwnBnjL+IMuKODuiRDaCLQJS72LiQoTClqyWNhk8p3nZX4LJsLVi6dW6cV7ErhFynQJtxWGrvo9DrmvbJGRV80Ul449jTrc22WvgTBKnaXTTsv2pw69IL3ziatAlwA6VUKivZyuSnP\/qeqQsLIM3h1xsud7x+raSQILbisV46QaEMOKNMhEo4f9EE5vYtzwm\/ngKP6CEyyxa5eOnqoj72FpXRNgDKcpbuNQSddL+rkopq\/y8uRR5TATut5xq9zEjEQLnRu3bhaqmLH7wPAre5tejGNaBElH9ZorCCzrnrfL+5ZFV65djnMn\/burxQW9SIIOlDcRe3ddZxIf\/z8dXGWfc\/YJ2alVKWABNBLcFPeFubCnDOGFnp7WaEezUQCo1huX1d\/AR2t9ZFIxb+\/2YA0Fcu4FFOucBmHB64h34YnG1QktWj0QN6yNlW1E24ubX3xPextdjh4av9ufsqLyV+lQC34GqCFKa3D2btbNVuYlf3F\/nsdPHHCRn+svJvZKssoO39MnIg20E8\/NZSYgAW7+dMxM2JbTCDpQf718V5e42Tcc3D\/MVuwLpSLFUnGgbahF3PvczhUvo5QFk5tF0YRiH+1QJX+P4Bld+SLzREBNKhff3\/yg9uJJKca+U+6nBcDAwCBaMxAcfS4h68NX8O4\/JsJCa+QWF87yNO9r0+szCZ1TeWGW\/KMvQNFzX1G+Y2PEnQ68hI4LpJQIC4VjBdW13rCggF8QR46NY3HL4enM7oteZTlqkQvxVphVmRyDsYFcjY4u2fGUw5LFrsQktQhx2VsQTygsXipX2KtdmPdscHLlgGRFwMDADV5C7WBlZ+ocDTA\/zppOjhaktsCXwO0sG+1hu0Zi0K+GaWwxXTJGdG0p2vdDlGf4dOI0eNxTQ==","pkt_caplen":1408,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739298,"pkt_len":84,"pkt":"REREREREZmZmZmZmCABFAABG4UpAAL0Gsf4KAAABi2PeSNGqAbt5f9uy6vvLelAYAfUqoQAAFAMDAAEBFwMDABPWqttRMY+Z46PAR95YRNrv8Sy\/","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":946739299058,"flow_last_seen":946739299058,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp"}
+0770{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":337,"pkt":"REREREREZmZmZmZmCABFAAFDIvZAAL0Gb1YKAAABi2PeSNGsAbu+7R6jIfk4pVAYAfYrngAAFgMBARYBAAESAwOSQ8JxHhGuu6wLKnGtwDfaCU9fn2zkXyLvCqG6Z1EJrSA97l3xa4NDBUHApuStJw5z26JVCZKgohlNqcovRpE62AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLTIuc2VieS5pbwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACBvduxHcveHyzSwUHe1UMoR3WO30Q1YJASO6Gqd5f5rOQ==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":946739299058,"flow_last_seen":946739299058,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2297{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":946739299058,"flow_last_seen":946739299325,"flow_tot_l4_data_len":1733,"flow_min_l4_data_len":303,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":866,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh-2.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2221{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":1406,"pkt":"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","pkt_caplen":1406,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739299,"pkt_len":84,"pkt":"REREREREZmZmZmZmCABFAABGIvlAAL0GcFAKAAABi2PeSNGsAbu+7R++IflDb1AYAfUqoQAAFAMDAAEBFwMDABNO8IRSNKqnBU+tmi3o0yr7jeRP","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":946739304432,"flow_last_seen":946739304432,"flow_tot_l4_data_len":318,"flow_min_l4_data_len":318,"flow_max_l4_data_len":318,"flow_avg_l4_data_len":318,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp"}
+0795{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":352,"pkt":"REREREREZmZmZmZmCABFAAFSUVZAAL0GFwkKAAABuV\/aKsW2AbtqjRCaK20m8FAYAfZViwAAFgMBASUBAAEhAwPqrEqAFBwbSYnmd5FQ4vhXWCXQOM7WSA+ydz5Uq2T7jCDruFBRjE\/ZRtIlov08nzXX8Izc\/f7Ut++FjeF3CgO25wAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACyAAAAIQAfAAAcZG5zLmRpZ2l0YWxlLWdlc2VsbHNjaGFmdC5jaAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACDBZSA439npt9wjB\/Qij4hgUYqoHU3i8\/GsiDYDjRoMEQ==","pkt_caplen":352,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":946739304432,"flow_last_seen":946739304432,"flow_tot_l4_data_len":318,"flow_min_l4_data_len":318,"flow_max_l4_data_len":318,"flow_avg_l4_data_len":318,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.digitale-gesellschaft.ch","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4320{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0842{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":946739304432,"flow_last_seen":946739304474,"flow_tot_l4_data_len":3242,"flow_min_l4_data_len":318,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1621,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.digitale-gesellschaft.ch","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1520{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":892,"pkt":"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","pkt_caplen":892,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4UVlAAL0GF+AKAAABuV\/aKsW2AbtqjRHEK201jlAYAfVUsQAAFAMDAAEBFwMDAEXf5i7KhTG4S8dv24+5p+S+LhQ+PYyJONVNe1tUvJx\/L+\/9b0i1+dS9lEG6c5mDNHT9GO4jeygeA+4A4wrs7q7eoeKIu20=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+UVpAAL0GF9kKAAABuV\/aKsW2AbtqjRIUK201jlAYAfVUtwAAFwMDAFG0yPRl5vfYgYrNqN6Xr0RSsU8qyxBJs\/X5WTC1lrz\/gpr+0l90DKKjt1jArHygBMrF84aQB1D6XplQ1nx8u1Fux106dKe9yzC6\/Eneuw2en7U=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":235,"pkt":"REREREREZmZmZmZmCABFAADdUVtAAL0GF3kKAAABuV\/aKsW2AbtqjRJqK201jlAYAfVVFgAAFwMDALAR+rOevaFZ1hGerSsqphnwFB5ZIZHz5bwz\/NY1C89yuFqmSC+WCb23CeN66ZJcuaXazm4oFV\/dL57uHBwFM\/VkQta5Fz6DAclKAd7f82NgLQ4hMtJesUU2Hjt0BZl\/Y+J9B3LKFNnDiw3Sl6kEG\/rPliLLBm8zw7vVHV1N\/1cgvM1AJ2IBM6\/f1dBJEltgb\/UCH8dbd\/QXZRUxBSXOr92+dQF5w0CGtrdtWeWF5nWCog==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3UVxAAL0GF94KAAABuV\/aKsW2AbtqjRMfK201jlAYAfVUsAAAFwMDAEpdoR5wJcvMnnoIJWUjsvZ6yczwu5pLMXJpbcG6enDtxGPuwB0rOOkxL9pE+I2uuLfw99wylHgCPSMchfL+dDFgcUsTylQlz4fldA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB38ZNAADUG\/6a5X9oqCgAAAQG7xbYrbTWOao0TblAYAfU9rwAAFwMDAEo1o7dxaDrWwtHbxdK\/bYIx0cVaitiU8vkoY2kZdC4naV1l5IVugaQvMhYgQKq1OC+8ehM5MHDRK8vvX6dlrwFAz8f6Ut4xNwYvvQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB38ZRAADUG\/6W5X9oqCgAAAQG7xbYrbTXdao0TblAYAfVTIQAAFwMDAErse5P1FA3mzZ0cx49r+hxNHxy50CyxPcannKpe3ft\/ECwd2wXHQXfHGQKePC5PalM1X2DdYyeOXWV++woxJUKzaSqyDAQvG2feUA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":138,"pkt":"ZmZmZmZmRERERERECABFAAB88ZVAADUG\/5+5X9oqCgAAAQG7xbYrbTYsao0TblAYAfU0wAAAFwMDAE8excIlDzlU5G2Df5nerhuvZ0C4wd8qBt6VrWsuqtVx2Jr0qMCasmh9cTG17e8aP5s4PJzl1Ak7zdHju72ZUc4T\/CFFK8lnq96T4\/rYdvDw","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHUV5AAL0GGAwKAAABuV\/aKsW2AbtqjRNuK202gFAYAfVUgAAAFwMDABrEBKTE+klfT6lD0c+WMHiGtt5WGOmKlylRzw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1457{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":840,"pkt":"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","pkt_caplen":840,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABH8ZdAADUG\/9K5X9oqCgAAAQG7xbYrbTmSao0TblAYAfXKPwAAFwMDABq2w+EgNw1Uc4R5UXmOYRclitVqGcW6tjqy7Q==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":160,"pkt":"REREREREZmZmZmZmCABFAACSUWBAAL0GF78KAAABuV\/aKsW2AbtqjRONK205sVAYAfVUywAAFwMDAGXrvgAlUHCjITpl4KMASatmqna9e\/E+FqvmZh7UxJcnge5ROlIX9hZsf4Ya92Ea2RROdlp098UA+mdHl5vxFOf1boQLJpYUnuHc3BdCsWdWSLwcpgO\/rDPjVLlI4Me24bd9SJzWTg==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWUWFAAL0GF7oKAAABuV\/aKsW2AbtqjRP3K205sVAYAfVUzwAAFwMDAGlo6TRtzKG2Adwzj03nWd9OaygWX7gjGe9hX13CVMXOcFy2nYCY6j\/80gf5Bt1OkzQH0vPzsKbCxgckIEET7XKmYgeG2kNLad+9Ya0NpTF2SiB0RB7Qw\/V29rzYCtSBJC6ss51HwxxhdQ0=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":946739304846,"flow_last_seen":946739304846,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp"}
+0782{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":344,"pkt":"REREREREZmZmZmZmCABFAAFKCqJAAL0GKn8KAAABM56TMtqaAbsV\/EiYhf03fVAYAfaIyQAAFgMBAR0BAAEZAwMDM0zFcZBVaq8jarHhMnn706tDCSlU6qIcSdmbVQbksCDb4Qi2Yz\/q0+XeTvQ9QWQ6+8m8vlFJqWD30N7xMHe76AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACqAAAAGQAXAAAUcmVzb2x2ZXItZXUubGVsdXguZmkABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgp73dM21LptFd0ThW7be4\/uwlUqgVJQtqqMQYrFbmEGQ=","pkt_caplen":344,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":946739304846,"flow_last_seen":946739304846,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"resolver-eu.lelux.fi","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4638{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":3185,"pkt":"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","pkt_caplen":3185,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":946739304846,"flow_last_seen":946739304885,"flow_tot_l4_data_len":3461,"flow_min_l4_data_len":310,"flow_max_l4_data_len":3151,"flow_avg_l4_data_len":1730,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"resolver-eu.lelux.fi","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0480{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoCqRAAL0GK18KAAABM56TMtqaAbsV\/Em6hf1DuFAYAfWH5wAAFAMDAAEBFwMDADVGrMk33Jx9u4V9oT8gk9T3N9siooKVMszOs96zlvjMst5cKF\/6mDE\/X3tfb1uyKq+NLUpVEQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+CqVAAL0GK0gKAAABM56TMtqaAbsV\/En6hf1DuFAYAfWH\/QAAFwMDAFHXdLFaAz+Z2rHdRMF6waDqPR4Tw1IOHDhUOX4GIW3IMxkSZnzM4IxIu8uFUy3E0ZKGcdTqsrNExBJvv2oqkuc8+GXwUqWl+KahajxLfpnsMkI=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYCqZAAL0GKu0KAAABM56TMtqaAbsV\/EpQhf1DuFAYAfWIVwAAFwMDAKus1yP1uKqMf1urenhXvkk1hHi5ysvI5vyFfqtgY7v\/4nRbEU5uNq0wg5+jVbveXNEZspGMDNtai7WF8t2v\/t5LwbYD+cQyx\/yKWMvd+aPvRdf9hU+NHxeDFND1qO6ntW\/6XX3UERjRgJPnDDWLmLo9EfSKCZqn\/QZLxvp1pQX6lmDwrVkvwYAqwv6GnlidXXNWG\/GwqTe+iZ37GYK1wGymo\/DctlUHBZMn+D0=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3CqdAAL0GK00KAAABM56TMtqaAbsV\/EsAhf1DuFAYAfWH9gAAFwMDAEpxc7y8ZCknaJ0aZlywYrDFkPtZi60HKqecmDR\/R+0fONQiRsDGRxVksKYxSlddgGeQYWWWpr4pkN1u5o+aTZ7TG8J3L1nnl1VceA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB3gBBAADcGO+QznpMyCgAAAQG72pqF\/UO4FfxLT1AYAfVHMQAAFwMDAEr3X7AqI4R1tFi5Kj\/fS7\/ucZHqtWxDFFI3S0lAm9QPhI6G9\/bqAb+vVK0DwhIngp5zKlj\/zg4n8Wv+wNXNmTPd1tD2Vb3t6JmDNA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB3gBFAADcGO+MznpMyCgAAAQG72pqF\/UQHFfxLT1AYAfW6NgAAFwMDAEqiz2IPh22vDr8iTF+woYOSptNBY2mrZomC4cXYURoxH4INZkjVmrsnnlxnFE+b7Eg17WE9IkVauhDTXAoug5nSbC8dNb44fgVUIQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":126,"pkt":"ZmZmZmZmRERERERECABFAABwgBJAADcGO+kznpMyCgAAAQG72pqF\/URWFfxLT1AYAfXg0AAAFwMDAEMoVCQ7vgBpsbDKkxjIgERJliTT0TawcR4LEOlOnXa1eh87bD9xfXcsb8+uhWuRCvBQcfhsEYVyLnQM7MKfXQDT6U5c","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHCqlAAL0GK3sKAAABM56TMtqaAbsV\/EtPhf1EnlAYAfWHxgAAFwMDABrfsw5kkkbfYqbiWE\/KT0O5Hl\/CjE4JZ3vEAw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1689{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":1011,"pkt":"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","pkt_caplen":1011,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLCqpAAL0GK3YKAAABM56TMtqaAbsV\/Etuhf1IW1AYAfWHygAAFwMDAB7sM8oFk88mAgCz0I2wdSGqaYZmmCq5UtDOoRfj74E=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRCqtAAL0GKy8KAAABM56TMtqaAbsV\/EuRhf1IW1AYAfWIEAAAFwMDAGSama1Yhb51kK2zbQ6rM5eFyfh7rS1snhG9VmY4XL+xDlnXMLc84rbL3uR95gwnzpyGXbL2WOZQWI4tSDxAo8uplzLFHVcroxi48kgP5kyZVcB\/WhwSKkWrDV3iMlXjmckAj51E","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWCqxAAL0GKykKAAABM56TMtqaAbsV\/Ev6hf1IW1AYAfWIFQAAFwMDAGkg3rUd+kv9D7LpeRqMgxeTsATVsDIt1mVHZnZqap6LKtw1K9Gl\/XnzCbmcIcjEn6NFnYjtNrvcQuyI+J3IiMpas9FE+4hRsQRXQ8osoT3u2QKxF0Kde5d9akjBi20rbEm5NigAzZOpgMU=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739304,"pkt_len":102,"pkt":"ZmZmZmZmRERERERECABFAABYgBVAADcGO\/4znpMyCgAAAQG72pqF\/UhbFfxMaFAYAfVMZQAAFwMDACvzd62r12MvNm4T9ST9QVvoNu+55SlThx2NBggyYv+RPK5HD9OFiDS2kFMI","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":946739305016,"flow_last_seen":946739305016,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp"}
+0779{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":342,"pkt":"REREREREZmZmZmZmCABFAAFIJYRAAL0Ggi8KAAABuf2aQugMAbv\/W2fgE34PaFAYAfYWNwAAFgMBARsBAAEXAwO7rF9fivBYq0PPnnVftpI5xv63Wth8iDXYIbCI66xBbCCVvQ4J9sHqcW\/KB2T6FVper40CtcJE9we9duJ2lwo5jAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zZXMuYWxla2JlcmcubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIHdlaU8VTQtoxOo631cPtMLo1fhD\/NP8\/WHh2FCfWmp6","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":946739305016,"flow_last_seen":946739305016,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dnses.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4330{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":946739305016,"flow_last_seen":946739305061,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1616,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dnses.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0586{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":198,"pkt":"ZmZmZmZmRERERERECABFAAC4+UtAADkGMvi5\/ZpCCgAAAQG76AwTfhrA\/1tpAFAYAIPkeAAA4ov2OS2FYwHLyLK8HvldhjW58oZhz\/dEDG0qRvP07Xrr9KbrwFzXsPAENpwnRYTilEXtuGTXfjP8+51dqVC3h3Voz6vzPB2E1qN7598iQNHjvdaBjrZ71M3dNmhXs0fudaDBYxVH3HnrCgr\/VoLnr9AAImTV5ybiMJS9e3W0V7h9Z35p6EhyTXdDS8\/1x5Ew","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoJYdAAL0GgwwKAAABuf2aQugMAbv\/W2kAE34bUFAYAfUVVwAAFAMDAAEBFwMDADXfncreHH\/w41ETGxAbKhaT3vZm4z54UR30vbUShr9IVbJ7OCCA+pMljhOzcbHXS37RYg7ndA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+JYhAAL0GgvUKAAABuf2aQugMAbv\/W2lAE34bUFAYAfUVbQAAFwMDAFFCEWDs3sccqWd0uheET3JL6DjLTtPLiQmtDDP\/Rl5nPBW1sUJXIKVZtvgSbC59saZ4oVaBt07mMLExEbGQTB1v0bQ3ojKnMrYG+LAmpLooAew=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":228,"pkt":"REREREREZmZmZmZmCABFAADWJYlAAL0GgpwKAAABuf2aQugMAbv\/W2mWE34bUFAYAfUVxQAAFwMDAKnmGwvLwrTXxhPTTzcEC535NjD8uAooAoIVB5RdTpRNOPj\/\/mN6\/l9KpoP98jI9McLNuFT1f6mt6HbowGg42Ckub1UkE6wsoIoSvhaZD2LGlTxBt7BUNjEFWxc2fSkzTEjWQZxGgQpvLNYue1QZ4ZiGi1al66UOwXRDYE523xweYfihcnGz5bLj8O7OrnwSsMFtSL57Ub+JkwSOgin0BYy8VTw8eHQHbrwq","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3JYpAAL0GgvoKAAABuf2aQugMAbv\/W2pEE34bUFAYAfUVZgAAFwMDAEodoB\/jG4tLp9pDzYcl30EZh6dy6HePWtSOGTuL5fuqQELiJn85jBFFnsUGfWlSOIN9erzu517dOeEa\/S7QbfCdbQoGkLwi6RKbcA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":116,"pkt":"ZmZmZmZmRERERERECABFAABm+UxAADkGM0m5\/ZpCCgAAAQG76AwTfhtQ\/1tpQFAYAINIDwAAFwMDADnG0pyUeq5BwsUUEaqM8EHddAKB5VF4Gc\/lNXPW0SSZYjATe39i6VIu06uMoesQieSIdoYjbZhKNeQ=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHJYtAAL0GgykKAAABuf2aQugMAbv\/W2qTE34bjlAYAfUVNgAAFwMDABo12I6f2bnmxjRx7558UlVmD8llvA0RqvaAKw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":98,"pkt":"ZmZmZmZmRERERERECABFAABU+U5AADkGM1m5\/ZpCCgAAAQG76AwTfhuO\/1tqk1AYAIXiDQAAFwMDACeSvM9qa3BN4ScRUBUY1tjxyMIz1TCtENnc6VIob19Rg93Zld\/Pv1U=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+1493{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":868,"pkt":"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","pkt_caplen":868,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLJY1AAL0GgyMKAAABuf2aQugMAbv\/W2qyE34e6FAYAfUVOgAAFwMDAB6pgarzoZFPxdrbCJldYAvpFU+0XnDZh8Ng77timV0=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRJY5AAL0GgtwKAAABuf2aQugMAbv\/W2rVE34e6FAYAfUVgAAAFwMDAGSwGvxSL3FIyDR310\/9O7PcMPe0ggdrreIARkJTs2CLGVT1Ypiw13DA1nyD6gImpazyC5vUf1UFekKskNcT2L7LbMB\/g+5wrrV5znXzb6XmxNp1ibeEuMn3nwejnFN9EIiup5Kt","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWJY9AAL0GgtYKAAABuf2aQugMAbv\/W2s+E34e6FAYAfUVhQAAFwMDAGl4Ax7b\/n2TYV+yAF7kw\/tZI7yNepzO7WMF9ElM742tNU0B1rqhUIxffsYxoT0e94SkRODtGgqBbI5T1DuYgzpRkCmv\/VBGiBWFJFnG96I91tiatUHn0Ag2aFFicyHE0j8xCQuA5vGVoO8=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABL+VFAADkGM1+5\/ZpCCgAAAQG76AwTfh7o\/1trPlAYAIUVngAAFwMDAB5IOLZETBFPI2tNUcP0eQPXsxWmDRunSXpjj7yYkUU=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":946739305650,"flow_last_seen":946739305650,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp"}
+0772{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":335,"pkt":"REREREREZmZmZmZmCABFAAFBLvBAAL0Gw1EKAAABrGhdUJ\/qAbvjN2w6lQOuzlAYAfbLqAAAFgMBARQBAAEQAwPaSOnODEW\/53X3FLI0n+Mih\/iyk2Bze7sXLhS9N0ueoyDada2r8SjLZf4K7a+NbQASLzSYT4924P6pAuqOJM8\/hgAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAChAAAAEAAOAAALanAudGlhci5hcHAABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgYin8bJdqHx3ibHrbfDgwuFVcZV3PPNkWvp1zHo7\/2AM=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":946739305650,"flow_last_seen":946739305650,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jp.tiar.app","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2357{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":946739305650,"flow_last_seen":946739305852,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":301,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":886,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"jp.tiar.app","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"475c9302dc42b2751db9edcac3b74891","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+3361{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":2248,"pkt":"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","pkt_caplen":2248,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoLvNAAL0GxCcKAAABrGhdUJ\/qAbvjN21TlQO9DFAYAfXKzwAAFAMDAAEBFwMDADVZFDeGx9jhCVSvCDaoaTI7mm2C6bZOxUPj4ceROxo5CeHsTjuSnwiy3kJv2riOTzR6QvI4fA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+LvRAAL0GxBAKAAABrGhdUJ\/qAbvjN22TlQO9DFAYAfXK5QAAFwMDAFFabSFzRWPlZVKWzVkzQqDNwl3RlR5jphaFJDPBgV+CTmoVTmB0SLiXAGsFcB3shFjQukJa1DJWCTsOPPotW0xzi+wcsm0T4LkQV8d6PaOHtYA=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":222,"pkt":"REREREREZmZmZmZmCABFAADQLvVAAL0Gw70KAAABrGhdUJ\/qAbvjN23plQO9DFAYAfXLNwAAFwMDAKP+N3oqZ+PiKcTFP8HLDCR2K7brZD5hmaMo29m0T9l3Wm32reR+WpuauKrqsATbTUxzI5xcbDAcclEjZYQeQaQS+TCJQOoU4\/AD97CYTphRKqs\/qfgWRrggOMi0Qz4CVTjeUGT\/irZUGg\/4VF5Ikm8GOuLQ\/PvGD2Orsp9dmCuwiF9Avyo1PEtQ4O7Hor+gnRn8VuS5QKZ7IZAPQom6QfFpZ71M","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739305,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3LvZAAL0GxBUKAAABrGhdUJ\/qAbvjN26RlQO9DFAYAfXK3gAAFwMDAErgySskmwPThe0k1XU0HhIpE+d+gGf9Nf7iFBQEQlOc2rTHmY7gVD+ThbuIjr2kCn1w5oH5EJL6DdWrTfnrKCGY3xDDGTTf76bxbQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":580,"pkt":"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","pkt_caplen":580,"pkt_type":2048,"pkt_ipoffset":14}
+0954{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":470,"pkt":"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","pkt_caplen":470,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHLvhAAL0GxEMKAAABrGhdUJ\/qAbvjN27glQPAulAYAfXKrgAAFwMDABr0\/Ik65IAQ8O1qOfP91jhsNzWZ7fikprkNJg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRLvlAAL0Gw\/gKAAABrGhdUJ\/qAbvjN27\/lQPAulAYAfXK+AAAFwMDAGSApmrldti6oN+DULKIZJewODe5W+o6CuHJI2G42fdd7hAs6R08icry3Y4E7rvXz6YD+wbopgo+FbCOxTt+9V1S7BgiMS2VlG056Aj2WAUkRlKKHqvi3hU462wZBu6qkjA340kb","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWLvpAAL0Gw\/IKAAABrGhdUJ\/qAbvjN29olQPAulAYAfXK\/QAAFwMDAGn1FOkTV8bkkUFsuChemkwWhSKcZnZUV5rDptmc\/he41kQXSfhBbGvHpaGpylzzgsGVyupoZ20AruLps9TDAGvxqBhIazXRcryUNoAnFkGoZvlonJzUO8s+\/7AiDlBJ8C3ozU7+6HZhRlE=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":335,"pkt":"ZmZmZmZmRERERERECABFAAFBYsVAADcGFX2saF1QCgAAAQG7n+qVA8C64zdv1lAYABYDRAAAFwMDARTrTqe\/uHssUSe\/BxhHUCQnJdK8zPVZzxi61zBMtiDfzpbO88e+tPjHzdRl6FcUa+bNfalZxPGXaQ+zB1NyAOYpH2UrhmWzi1qPlCYzZkG8Szz1HaauJAYnB0P3OPeOU4747d+bb70yirGt8iJL90AeQy1tELZt6ToWjyyyDcQ50bJED8\/OlUkfbS6pcPtAKzSdD2oH3ZDav5+EQgksXYHvZ3e2yPeCOi6FPQya7KNI5O05wb2J0Yrqi+eF9cKQx6Ef0GOy1QN8QgjZG7D4y\/SoPB4TeV5S72x0nGMxV8z2gZ3r2w2ez3ujPbpr0kHRNVU4Pa7+P11fiZ1flJCoH7xKpzJtrzRY\/BfEtfcWpiTZMR8qzv0=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739306,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLLvtAAL0GxDwKAAABrGhdUJ\/qAbvjN2\/WlQPB01AYAfXKsgAAFwMDAB6h799Z6YSmgeoCnvmbPudRM5Zunhi\/Era65MsC8qs=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":946739310588,"flow_last_seen":946739310588,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp"}
+0780{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":340,"pkt":"REREREREZmZmZmZmCABFAAFGz7FAAL0GqFMKAAABp3LcfZKaAcWpCIgSh0x2XlAYAfZF5QAAFgMBARkBAAEVAwNM+6CQ4xrTV+1tOPP7h0Gj90S89M7DOPc8QQnDuq\/mRiD0eC9rhNsSjRzwJJQFthL\/q1ufnITsbP94aSBdrdhzDwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACmAAAAFQATAAAQZG5zMS5kbnNjcnlwdC5jYQAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACDUjoSgwC\/YwRC2sL4\/9W3ATSzLtM\/v84EfifaAhQZfWw==","pkt_caplen":340,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":946739310588,"flow_last_seen":946739310588,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns1.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4603{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":3154,"pkt":"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","pkt_caplen":3154,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":946739310588,"flow_last_seen":946739310697,"flow_tot_l4_data_len":3426,"flow_min_l4_data_len":306,"flow_max_l4_data_len":3120,"flow_avg_l4_data_len":1713,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns1.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0478{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoz7NAAL0GqS8KAAABp3LcfZKaAcWpCIkwh0yCelAYAfVFBwAAFAMDAAEBFwMDADWIup5ey1m73Olzdr+La\/pgBsOV2156nE0gjo7pkVZbX+HWq3wNBOBZgTPS2Gv4V1H1NoVl6Q==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+z7RAAL0GqRgKAAABp3LcfZKaAcWpCIlwh0yCelAYAfVFHQAAFwMDAFFigyjvaz4NANCTzY4A\/FUXStyH+vseBven0alEeSEgvizXGcy1JnutBrGtSy8oe\/Q87ZYytxhafI\/Pby87ceV10hAtpAb+z8MULO4M5g4llwg=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0626{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":229,"pkt":"REREREREZmZmZmZmCABFAADXz7VAAL0GqL4KAAABp3LcfZKaAcWpCInGh0yCelAYAfVFdgAAFwMDAKrhH5lHsVppiHapV0zMHNQK3jqxCpj8r+ER9OICFkNzJz9qMJa5JYEXb22MhKW4BH33WnJ2LmSW5MNK8j08SmNpIfM2RW6B6MFQCpHtWW9tEcGzveBruJEzzvXnhr3LZ5undg3ELbCtFU1iSyysu6j3nVfIFS3ncxFxzeF7SNyd5mNUDjIyfOHruygpvCXPI1LCM85A11NVhG1DXv\/2DVueewebUqyir10dfA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3z7ZAAL0GqR0KAAABp3LcfZKaAcWpCIp1h0yCelAYAfVFFgAAFwMDAEqIvS6yZsjM\/Kt9Kfs\/KWzV9wJT6LzIo3EeHiOzOY7ZeQIF4IkV3ckPDIqRa9v8NuBsXbodaWFd5I9juv3GnXZQoJ1snjxDubmWVA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":109,"pkt":"ZmZmZmZmRERERERECABFAABfyENAADMGOqmnctx9CgAAAQHFkpqHTIJ6qQiJxlAYAfUTKgAAFwMDADJtwCawbfPWmh5An3v6NnHsYb3+j4Ok\/Ym\/ZWwL3zbPamxcOhETe19lP0G4Cr9GXrzkLg==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":98,"pkt":"ZmZmZmZmRERERERECABFAABUyERAADMGOrOnctx9CgAAAQHFkpqHTIKxqQiJxlAYAfVaVAAAFwMDACdvJsOlTNusl+7ulRDa7i5KlAobBRJKROKHTVg7gEKaKLuNYv3qyLg=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHz7hAAL0GqUsKAAABp3LcfZKaAcWpCIrEh0yC3VAYAfVE5gAAFwMDABpbBaBTtXHD9j8OQxm3aC2bQM+5KBR7+IULIg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLyEZAADMGOrqnctx9CgAAAQHFkpqHTILdqQiKxFAYAfXh2AAAFwMDAB4jfLoPme6Ayqubm+i7K\/f9JzA7gOZZlvpLpEctb7M=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB3yEdAADMGOo2nctx9CgAAAQHFkpqHTIMAqQiKxFAYAfWr2AAAFwMDAEoGe3DPrKqCrwNj5dlw4xuV6PVZrkcJdsyNC+WX1ISq1tsD7UkXKJO3UxnUxMCgloQYGHaSEq1dp6c1I0sVIHV9D5TDcKVb69LNMQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1068{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":553,"pkt":"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","pkt_caplen":553,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLz7pAAL0GqUUKAAABp3LcfZKaAcWpCIrjh0yFQlAYAfVE6gAAFwMDAB5H180FN1WxacaxhnoQHhq2NjiZyrRyAme0TEU8JOI=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":161,"pkt":"REREREREZmZmZmZmCABFAACTz7tAAL0GqPwKAAABp3LcfZKaAcWpCIsGh0yFQlAYAfVFMgAAFwMDAGZ4tXqlwfbAQvZu8ODXG8wQDCvKFpu\/Su7bFHNR4TqZWjHfQcytP0HkKD+su6Jwbzx6PS8b9VRvaNXJwIYoXHnyA0b\/zq9gf9gDnSOtgSSK654K03rZszN9Ew6dltH4fGIG912EB9U=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWz7xAAL0GqPgKAAABp3LcfZKaAcWpCItxh0yFQlAYAfVFNQAAFwMDAGkkDzU65XfdIOYT+nJzAb5iwIS79Iug7SsJVvuIivcTddhHId7chPL3Z4DfINNbg5VXCvFXc9IpSlgsLyK103E8hL6U6\/nz6LtSnd0GMTNlhz9hqobz83bi9FGSwAgX\/N289OYycU2ONOA=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739310980,"flow_last_seen":946739310980,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp"}
+0767{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739310,"pkt_len":335,"pkt":"REREREREZmZmZmZmCABFAAFBYCBAAL0GW60KAAABuSuHAZUqAburhCguMeSlTVAYAfYCHQAAFgMBARQBAAEQAwM7gJo4OG7S+iUgpLXTuxo5Xw1OBGj4DiyxVBvpcTjrrSC1ygzgmnU02BGfASVXjVBWPNfoJIqu28ODMXbR4UvXGQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAChAAAAEAAOAAALb2R2ci5uaWMuY3oABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg+HQ6d2TRAhXiPlV4SzYTTgVvyRFR0ttaRH8caXLPDAE=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":946739310980,"flow_last_seen":946739310980,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"odvr.nic.cz","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4440{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":3057,"pkt":"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","pkt_caplen":3057,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":946739310980,"flow_last_seen":946739311016,"flow_tot_l4_data_len":3324,"flow_min_l4_data_len":301,"flow_max_l4_data_len":3023,"flow_avg_l4_data_len":1662,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"9":"TLS Expired Certificate"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"odvr.nic.cz","server_names":"odvr.nic.cz","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=odvr.nic.cz","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"15:57:4E:06:5B:3D:23:22:EF:BC:2E:5B:A3:3E:A5:76:BD:14:01:4B"}}
+0560{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":180,"pkt":"REREREREZmZmZmZmCABFAACmYCJAAL0GXEYKAAABuSuHAZUqAburhClHMeSxCFAYAfUBggAAFgMDAEYQAABCQQS+L1tdhkv27psDloITDJmmm+nkuKGJ6kBYeGBEdwUOSK4polbbfA55gXHwNtK3Y1Aq1CUhl++X\/zqhOD+IGqi8FAMDAAEBFgMDACgAAAAAAAAAALayQyzNIxhtoOFefQYzbs\/rDW3NZGb\/HW2xO7qHfaVY","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":105,"pkt":"ZmZmZmZmRERERERECABFAABb5XxAADUGXze5K4cBCgAAAQG7lSox5LEIq4QpxVAYAO3kswAAFAMDAAEBFgMDACgM3BAgXmTBrS3s\/v\/TLpgtdJ4pAYEQBzm8bgZO9q3GlVtpE11XxqpT","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":92,"pkt":"ZmZmZmZmRERERERECABFAABO5X1AADUGX0O5K4cBCgAAAQG7lSox5LE7q4QpxVAYAO3YLAAAFwMDACEM3BAgXmTBrtvUUjN4IXyxDqm09\/JiypfLAmSXnwNvJzM=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":147,"pkt":"REREREREZmZmZmZmCABFAACFYCRAAL0GXGUKAAABuSuHAZUqAburhCnFMeSxYVAYAfUBYQAAFwMDAFgAAAAAAAAAAVvU5Cqy5vW+CcxldtfJqUlcpan0xgqGJGh9iFwFyd8I8K+Fmd20ESpCrb\/oBCpAwddHGTZ4e10I3MYVBNJCeuLqlMFQ5jn5o1de1\/S+Cxne","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0621{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADTYCVAAL0GXBYKAAABuSuHAZUqAburhCoiMeSxYVAYAfUBrwAAFwMDAKYAAAAAAAAAAl5QB3lst2BcOHgjrTHPO7zhMBVuIsBRZLESLzB41kelMEM25KPd+t4B0aLZjBjxJSCWBRJ+q6vjDxUqxJmwk6NpNXeLtYvW1ukV6rImidlF7iuP7tnjWO9rxHCqz2M2eBZFBuikU7mBVIl\/tm7Rbbdy+CeGRYrmYK5QbIy9wWDKUE28ZV+Qzi4AOwUIJ\/iEnn\/Au6\/8nmJC+MQEfA2f","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":92,"pkt":"REREREREZmZmZmZmCABFAABOYCZAAL0GXJoKAAABuSuHAZUqAburhCrNMeSxYVAYAfUBKgAAFwMDACEAAAAAAAAAAwNZnN6xxa+M32A6GKanV0GW6QqTIXehyuw=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+YCdAAL0GXGkKAAABuSuHAZUqAburhCrzMeSxYVAYAfUBWgAAFwMDAFEAAAAAAAAABJBGwRvSmuCz2ggW3Km2jX3aGznJ1nn\/L5\/1tAAdpI15H6AUsOtv6d8GOZJp3AqWfKW9vFMJA2dTIASoQinwFGsjrW61DNPApd4=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":92,"pkt":"ZmZmZmZmRERERERECABFAABO5X5AADUGX0K5K4cBCgAAAQG7lSox5LFhq4QqIlAYAO1tMAAAFwMDACEM3BAgXmTBr1Q\/iTzTc8p\/Vc1811xjYu2PvbeMAHU6gP4=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":96,"pkt":"ZmZmZmZmRERERERECABFAABS5YBAADUGXzy5K4cBCgAAAQG7lSox5LGHq4QrSVAYAPXbEAAAFwMDACUM3BAgXmTBsIzuCymQCZdv5SnQT+oDJhGiWElRmkvU\/KZterFT","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":96,"pkt":"ZmZmZmZmRERERERECABFAABS5YFAADUGXzu5K4cBCgAAAQG7lSox5LGxq4QrSVAYAPUVOAAAFwMDACUM3BAgXmTBseIdS3qmp+55uuGe3MFoHvaXn9uoQApRFPJBgXWO","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":142,"pkt":"ZmZmZmZmRERERERECABFAACA5YJAADUGXwy5K4cBCgAAAQG7lSox5LHbq4QrSVAYAPUtRAAAFwMDAFMM3BAgXmTBsszXKmPJMeQOI0MkfcYQA+ooKae5hUP4MLmmY0Ld7Ih0Dxjdtk95UcVjx99quseqon6HZoBzdoLKcy0HNp6dn4X8nvirHS9hBjPbpg==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":560,"pkt":"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","pkt_caplen":560,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":96,"pkt":"REREREREZmZmZmZmCABFAABSYCpAAL0GXJIKAAABuSuHAZUqAburhCtJMeS0LVAYAfUBLgAAFwMDACUAAAAAAAAABY9aRMDmOR8f9esMpluWV5JN3iwergY59UqdwDxq","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739311335,"flow_last_seen":946739311335,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp"}
+0775{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFF8W5AAL0G+HQKAAABCQkJCso6Abuxr7nkL4f0JVAYAfbUBgAAFgMBARgBAAEUAwN330DAziY7Qy75ow2vvPPweI0WjrfNmIygzjgDJAOaiiBkC+TeFnwD\/kQWoA8NwSkWiR\/ZS3JD6l8yhQXJVgAa3gAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG5zMTAucXVhZDkubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AICW+8u6SZcrHjrKSceEpWhhd\/sXKRaui0Qq2OMNRWOwf","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":946739311335,"flow_last_seen":946739311335,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2361{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":946739311335,"flow_last_seen":946739311357,"flow_tot_l4_data_len":1777,"flow_min_l4_data_len":305,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":888,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2511{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1616,"pkt":"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","pkt_caplen":1616,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB48XFAAL0G+T4KAAABCQkJCso6Abuxr7sBL4f\/61AYAfXTOQAAFAMDAAEBFwMDAEVsvNBLawQQ\/QfxJf3NLpeF7eAiUlhCDm37dRf6vXOC0VcPLFJUrmdWYdRdI8w8wDD+uKAkMT3Wsv2DaZVXdNXVQPPAkgM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+8XJAAL0G+TcKAAABCQkJCso6Abuxr7tRL4f\/61AYAfXTPwAAFwMDAFFoIkgZAncDrVQtZhxU59u2TnfYXuklezZY\/lnRCXnYBC1Rn+rtNjTEGwm84kLz7QwRhvXYq2B9+mlphTgCBe3P2jyxhVVoBcmooRlGblt7DM8=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADT8XNAAL0G+OEKAAABCQkJCso6Abuxr7unL4f\/61AYAfXTlAAAFwMDAKYZJOg3XAYAord7aI6NvWcxk5WNW16atD42q5girOKJV0b6rPC5XYaqJTP3KYeUDN5rQfvf2helUNMhSY74neuMV4umU+OxFnJrY+Qkw6Ft2v9\/3NqX+V13r46k9\/CnwLkdTR9Us\/h\/Ekx6AbEikajcydVh9hqXGjiTATQ5O3DxcwOEsGUUPoJebpOrmr8wsEgfT+jF1JbTSMxkC6H8X2pjmi+SwVnD","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB38XRAAL0G+TwKAAABCQkJCso6Abuxr7xSL4f\/61AYAfXTOAAAFwMDAEr7A5vUIh2EgkJkabwMXu1kKb0CvxVKdNb3jWLb2Up6qqHpF\/wbFof14rZrnKHF9GLkq0fidWS8UvRS4X+Ix6WySA7NB7h59xAaHg==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1085{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":106,"pkt":"ZmZmZmZmRERERERECABFAABcErBAADsGWh0JCQkKCgAAAQG7yjoviAHpsa+8oVAYAHv8PQAAFwMDAC8ZtiTidBWhji9TVOFf+RnoBTjL\/rvLzjFpe7vLKmU5Igqocn9WmG75UPlYg6Cfkg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLErFAADsGWi0JCQkKCgAAAQG7yjoviAIdsa+8oVAYAHsrEwAAFwMDAB6Gi8+63oqhpzPdgJlBy8hd9Yk30XMu61UnhXIvomA=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABH8XZAAL0G+WoKAAABCQkJCso6Abuxr7yhL4gCQFAYAfXTCAAAFwMDABoIeNV+S+IlWMFMt\/t\/7BnUO\/\/esewX+XLoWQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":392,"pkt":"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","pkt_caplen":392,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACR8XdAAL0G+R8KAAABCQkJCso6Abuxr7zAL4gDklAYAfXTUgAAFwMDAGR9NyGzywy8SdhomKhtO\/rl30vXbMuXESX\/Q8svv20kgZYHPLVif9KPBXpYw79WxwwmtvYreHRJn7\/WUhroH5ZlNkuGsDwGzjA6xI2Sey+ge6QhNtyEV9KdchXRnVn2Msg\/+Eh0","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACW8XhAAL0G+RkKAAABCQkJCso6Abuxr70pL4gDklAYAfXTVwAAFwMDAGkxHi7McmOLywyC2PPw48UhmG\/9LXtg7UsntSmiizF8Yv9hL\/Ad329PtDJntMJthJHT0ze2DDxyNWp+GsXY2IzfJqhuk3CVqOHhIXcY+f1E6Q0xPMk6i38qjmbOTbgzfhZkNPGDhHAtPqQ=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":238,"pkt":"ZmZmZmZmRERERERECABFAADgErRAADsGWZUJCQkKCgAAAQG7yjoviAOSsa+9l1AYAHsy3wAAFwMDALOz4PktMFNHUYrjN62jZzcxw2rdFk9CrcaNJdo6vQJbYD3BkXnVTr8yO7lhjCoid0EqYQG+pQtv2M1dVuSBYMKnxUHfKmyRLxDA4ztpH9k6i0xArNPBFhlubjZeUmnLnGOFdZcEY5NrixI1zSznaRB0eNi4NZNdo8W75WFzCb7Bh473FVqN60zSDdXW9\/k84Yy\/z5tJw2QECH94F+ndKFsosBHDrntfy138Vv86iPQcEg\/geQ==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739311566,"flow_last_seen":946739311566,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp"}
+0774{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFFTLFAAL0GMYcKAAABuYbEN9gaAbsU0wRrjALq7FAYAfY\/sgAAFgMBARgBAAEUAwN53D+IdbyKMqUcdChlG3BH1byG6PSts1pdzll38jdueyClHPY2D7aJB29xaaA7zmDQUztgP6bTAGw+VMEA\/cNmhwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPcmRucy5mYWVsaXgubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIASid2tq+mdmASZBUTGU5iyt2F1JUvrNCp22BxrDleoO","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":946739311566,"flow_last_seen":946739311566,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4317{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":946739311566,"flow_last_seen":946739311603,"flow_tot_l4_data_len":3229,"flow_min_l4_data_len":305,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1614,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2276{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":1444,"pkt":"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","pkt_caplen":1444,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4TLRAAL0GMlEKAAABuYbEN9gaAbsU0wWIjAL7slAYAfU+5QAAFAMDAAEBFwMDAEX5LOrm\/q2t2eUGDASTuROoLPaXY3V7nIjXeCI2LSFnWiFzKh+skLRrkkkVsvCS7j6wsu3v4MgbuWujQFuzeh3uUOaKgmo=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+TLVAAL0GMkoKAAABuYbEN9gaAbsU0wXYjAL7slAYAfU+6wAAFwMDAFExh0tAyckORIsAyWSkeVyMG1coXJ4zHtSy0EnQML4KrQawGJNWi7QaLyPqSsPuMMVvSIQJabV34HcU64MxycruXFBNdtWfhrY94XOKn7mHGQ8=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":218,"pkt":"REREREREZmZmZmZmCABFAADMTLZAAL0GMfsKAAABuYbEN9gaAbsU0wYujAL7slAYAfU\/OQAAFwMDAJ8L6RVzwU6TD26VJYQp5ktm+DPa2WXDpoj+jmPAMX648cg4E4QLij297jqwOYjFUlXn12HZ1i67nfV\/9xI9O4CKfT33fJAmaNSesF5bVs69grUh0lv\/hKwxYUbpV1b\/j0pS2sqDnmaLF08Rv3W371wnxvvGFEwWUA3YFYYbYBim1S3GEXb4TZdEO3KO0sFS1kPHe9bdKrhO3sNqJVMmszI=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3TLdAAL0GMk8KAAABuYbEN9gaAbsU0wbSjAL7slAYAfU+5AAAFwMDAEpTWV26YrYn6HcwCnHaLnHTixHUnNN3rsGEYdDCZsd0DifVentvq2HxJFksovcUNbSJJDDpC6kZSg9AwFIVp7ssd3w73g5vtqbjJA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABpg4NAADQGhJG5hsQ3CgAAAQG72BqMAv2wFNMHIVAYAfX54wAAFwMDADxvbsgXJlGjvcwLlt3YsmQo2MTdykEFcVbIFAgPf28vXYrPz1RJRIrsixZBfSWYwjKNDWyO\/BM\/Gyj47fI=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHTLlAAL0GMn0KAAABuYbEN9gaAbsU0wchjAL98VAYAfU+tAAAFwMDABpzPPu5fkzwy95TpMib2S4vE4pd0WKGrH5qYg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0866{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":404,"pkt":"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","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLTLpAAL0GMngKAAABuYbEN9gaAbsU0wdAjAL\/T1AYAfU+uAAAFwMDAB4wwOMXOL6wlbT2mD8KGfIu+ljq2pDZrvGUR1EMwiA=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":152,"pkt":"REREREREZmZmZmZmCABFAACKTLtAAL0GMjgKAAABuYbEN9gaAbsU0wdjjAL\/T1AYAfU+9wAAFwMDAF1on4nRvK2bkyWrlP0SAUuwD6w5rSzlhYgB6nl5ZQnEauQD2MIH+b+D4mRwD\/YaKUTywjUobUg\/VtD7WsuFfZj8T2odlVaHwsNqDuInuL5BG64WdECnwrPMmLga7G0=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWTLxAAL0GMisKAAABuYbEN9gaAbsU0wfFjAL\/T1AYAfU\/AwAAFwMDAGktFlMcQj8Va+OYpDNiB95\/ro587yr93e8zdihbqyMV83P2IZwsj0f+Jv9pHYGQ9n2AtFwdPKePqMzPeblgmCnpM3qDLrw8kY1C\/pQgd\/Qdtlar9i\/afTUePgE7YfQmH2jHTE0uokGzZb4=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":248,"pkt":"ZmZmZmZmRERERERECABFAADqg4dAADQGhAy5hsQ3CgAAAQG72BqMAv9PFNMIM1AYAfVnsQAAFwMDAL2QlTU5MNbz+YYrvQfbMQnVVpssEvR+MjlkcOHM62BV0M7DDvyuV8VlfsrwJh6+bCtT\/6rB\/jECI\/SJOtv9w0JHz8w5lYAYSg7eFz+LalbB2hwEqp6U7v3N75+vEfOdsLYkulzq\/cXhvHOPXSRhaeLc24NkG87nlS5QBbHje2FsnGVDwjXfKAh0YBjlxQe0btOA\/Wga8xh0lymrB5k1eb9\/jeWmcathMoM\/0N5YAHOqOLLyX67dwh63luW+DXs=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739311703,"flow_last_seen":946739311703,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp"}
+0780{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":342,"pkt":"REREREREZmZmZmZmCABFAAFIvxBAAL0GjQMKAAABMw980MyiAbu+o\/fohj5JlVAYAfZx1gAAFgMBARsBAAEXAwOEmak1ToTEOPVX0jBh7rLNZM1Gt5\/Gr6ZvrmdHklieHSAP2LkoS3kAHcBOg6onjDU7HEdrdZ3cuMs9iD3w5kCD4AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zbmwuYWxla2JlcmcubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIGzt4\/5xvtyifU6VTcrfvT+YrIEhagkzRKKKlOYdvDd6","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":946739311703,"flow_last_seen":946739311703,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dnsnl.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4330{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":946739311703,"flow_last_seen":946739311732,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1616,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dnsnl.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0588{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":198,"pkt":"ZmZmZmZmRERERERECABFAAC4X8lAADUGdNszD3zQCgAAAQG7zKKGPlTtvqP5CFAYAIMEyQAAeS0tOv0CsE56CKvTlOFyTsi\/xDWjEiSHZ06cNkY05jGBZ0BY+\/8ar9VauCfvuAhmfbkHRsufSt9+BCdWOZTLG2pLv7Rqy1KMbXDj1dE3FFg5TtH6GqR+kavc+JEGFEgehaZ\/FbuVi\/sk8mhzGqOKXx4crPRKN7mN3k61duL6EtdmqASfaRcWFkjwmH\/5s907","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABovxNAAL0GjeAKAAABMw980MyiAbu+o\/kIhj5VfVAYAfVw9gAAFAMDAAEBFwMDADUgVFuFuNgwePbawSbqpxqNFUCOzmkYzG2pGl01BK01AFH98ErPdE\/IsFBOcddeF+MHO+I0\/g==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+vxRAAL0GjckKAAABMw980MyiAbu+o\/lIhj5VfVAYAfVxDAAAFwMDAFEtdUh44cEGQdA3iHwUtUH1NhGg8lVZ04bNaTVbyKMgEel2TlTxN4YD1\/YJJ3t8IZOkmDbABbG1rTX\/m4jdYwD9NvWe4\/dWFtcJFflMl6AIJvE=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":227,"pkt":"REREREREZmZmZmZmCABFAADVvxVAAL0GjXEKAAABMw980MyiAbu+o\/mehj5VfVAYAfVxYwAAFwMDAKjeMLMhyS8RnzzOQS4cuWjijF7smW3XZr8jg+qDJurkQ1wgeLreREePT+slViPXK25iP2bDTzXQxs+to4ronhFHKfwguRUIlG99TVLmS6O\/S0c0mIzS9MAqpn\/\/zlTn6K6Tq7hMPYxO+RjUtj2wT1oeFQ\/UTWMGXXugZa3oHQjkX3h5kpsUm4dHwvZFd0IeemOALdh\/jh3M6p+9az7Ky5\/0dMaZdH5uBFI=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3vxZAAL0Gjc4KAAABMw980MyiAbu+o\/pLhj5VfVAYAfVxBQAAFwMDAEoYT250LpL3AzfDYXx1tPKkA2dacZ\/cHFZBTPtKMuWR4WK7\/wbmWWwzF9YdzFJStPgJa+c5mnAejznpWHojzFGZcGfjCwyaOU6PCQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":116,"pkt":"ZmZmZmZmRERERERECABFAABmX8pAADUGdSwzD3zQCgAAAQG7zKKGPlV9vqP5SFAYAIMkPwAAFwMDADn7lMvqljQv5HuCIubFWktRbINX851c7tgUrxUwrgSuk\/7FXRFVn9xpbGD\/8J1MgPGEtz+DjnBaeE4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHX8tAADUGdUozD3zQCgAAAQG7zKKGPlW7vqP5nlAYAIORVAAAFwMDABr+qWF8QlS\/5A4HgGzmnm6FQoNv\/\/Q4KsWFng==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHvxhAAL0GjfwKAAABMw980MyiAbu+o\/qahj5V2lAYAfVw1QAAFwMDABpo2kz1Ww3x0n2idI2NRhSA7Tl4Z\/J52wGg6A==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLX81AADUGdUQzD3zQCgAAAQG7zKKGPlXavqP6mlAYAIVtCwAAFwMDAB65bfHot+wQ6i1UR5Pkde0TACBP5AFTE3dWynUh2dw=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+1500{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":868,"pkt":"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","pkt_caplen":868,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLvxpAAL0GjfYKAAABMw980MyiAbu+o\/q5hj5ZK1AYAfVw2QAAFwMDAB6tOffBq7b64QmsSd+v2c786Zhv5fiYEDuaa3zhYCk=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":160,"pkt":"REREREREZmZmZmZmCABFAACSvxtAAL0Gja4KAAABMw980MyiAbu+o\/rchj5ZK1AYAfVxIAAAFwMDAGUSdilsnk\/DPCg2yJSmsPDr7T33UpDt7+fouyU7qugS3mc9WlRpzhBODn6kogeE8qQPmYW+sgOJpYyaj\/fEVTl5HFaT10uDxxLeSCv\/DfULel8k7sQWkW\/x89wDwp8NSpi0WLeX0w==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739311,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWvxxAAL0GjakKAAABMw980MyiAbu+o\/tGhj5ZK1AYAfVxJAAAFwMDAGkcIdxZpkdanT9u5zf3CPqQB\/78XpNb\/ByXljyCZgyJpkvfvLYi97zU3lVUx1ibVLgT1FzxzwmcB6WJ8gKgQ\/+uQH1RAtsJmi+4IgEvK59Ia4TDcUFuqPyr9T47vrlX9m3EHNX1jLuPzfE=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739312203,"flow_last_seen":946739312203,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp"}
+0773{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":338,"pkt":"REREREREZmZmZmZmCABFAAFEaI9AAL0GaqQKAAABdMuz+KL4AbtonCHmRxNJVFAYAfbqtgAAFgMBARcBAAETAwNLJ0LoKZs0jG4db6SH737y8naHXDM3S+mAdGRoYzSPaSD3zYs+eWXICfX4e3zLCPsIhyJf4YitXdBLrNgVR3LKFwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACkAAAAEwARAAAOcnVtcGVsc2VwcC5vcmcABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg33Waic8Yfh0yJ5buIXWM7xt29S4VxDeDA2qvuzRytkE=","pkt_caplen":338,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":946739312203,"flow_last_seen":946739312203,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rumpelsepp.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2352{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":946739312203,"flow_last_seen":946739312226,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":304,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":888,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rumpelsepp.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2364{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":393,"pkt":"ZmZmZmZmRERERERECABFAAF7J6RAADYGMll0y7P4CgAAAQG7ovhHE1SsaJwjAlAYAfVGjQAAa5XmI3QYf4U3GsgNUiYg6nE+sTM2tlCEaWD8a+yhV47rmE6kvvkUyHudhyGiVLBix\/s2Tl66k6oMofRZkQrLXScZtdHRIfQgK9btbsMM1xTaTzfknUCL8Cww5biZh9NDUry8F8w5qpojEKHzH3A3\/4lC6uHgw2s20sHxwLZeI\/SjDolPw0HgqtQ7HRGthKZGgTF7EF5W3jX9zyxYcKT5Z+6a10K\/AJDS4B9NuFR6g1KQ6qPeFwMDAGD+4QCAyHAuMeUJDl\/3cFciykXBFAH+fIJCuocOnRHoaZKbLjxfCuEOFssJeNkoB7QqAW9OD5gzqBZNRuNAkbcUPEYKafd8lUfYNtA6Qc4Hu\/0eRYaPXNNUA8lYtFnGE6cXAwMANeAmEtdH6fzebaiXt7tDhzhyIraQebUR9GWfb0bTVPXdXtGXRnRa+RFnQlFlafsVPs9+iBkn","pkt_caplen":393,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoaJNAAL0Ga3wKAAABdMuz+KL4AbtonCMCRxNV\/1AYAfXp2gAAFAMDAAEBFwMDADVrZKXXCOBBCDNpYRE7STWc\/HnJjONF20ovpuvcRz\/QdPSitaw7jbrSJSqUOOsH\/fAYewK\/Rw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+aJRAAL0Ga2UKAAABdMuz+KL4AbtonCNCRxNV\/1AYAfXp8AAAFwMDAFExZn5jSITTgmrs7ExkoeSZzlhSTuj4TR+4utefA5DiQ2kS719\/JkLi4stEeXZfx996d3a6GyqM3LQHuLw5DfJRkfnHr6O3qmLOGwyHWgfAKWw=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":224,"pkt":"REREREREZmZmZmZmCABFAADSaJVAAL0GaxAKAAABdMuz+KL4AbtonCOYRxNV\/1AYAfXqRAAAFwMDAKUCUgYkOFrO5eltKNLJm0Lzwq1+bSATXeJO50AjxgF0R8b+\/FUg\/qmNr06X9AUAPv4HH+xqiI9GHl1wcny80GZwP04NUXeTjCb5MQC4G2INBP+SbWMq7KsiKeNd+C8VdUmGT7\/y6LS5VAvQtDECw69yP0BOd8E2F\/JkdWggMljqNnkubmRJQt4U084yV9gMiq6zFIilF6EyNAg3\/5149wKtzlCDASs=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3aJZAAL0Ga2oKAAABdMuz+KL4AbtonCRCRxNV\/1AYAfXp6QAAFwMDAEph2Pm4rRyt7OxAWHqf+qXDuLy4wCaTMbaT1HeG\/K1tqmuJMEpAd27bZX4SWP30Kd4YsyJizFXnQuWaFZogxHO+vSiwWZVoHHmCiQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":109,"pkt":"ZmZmZmZmRERERERECABFAABfJ6lAADYGM3B0y7P4CgAAAQG7ovhHE1X\/aJwkkVAYAfVJ8AAAFwMDADK2AxGqQujb4PzGpktez6VTpZxZRdtfk4n55r2ESMvF9aFQN4Rm+ttAl5gVIT1lOkk4Qg==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":98,"pkt":"ZmZmZmZmRERERERECABFAABUJ6pAADYGM3p0y7P4CgAAAQG7ovhHE1Y2aJwkkVAYAfWjAwAAFwMDACccDVGEid\/eQmNgSsJ67w+hj\/UAZw5xZOI+zIs5sTLmsTWkNWzJ\/lE=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHaJhAAL0Ga5gKAAABdMuz+KL4AbtonCSRRxNWYlAYAfXpuQAAFwMDABqsrgFEOJBsuvr9U3DqdC4dJVO1lBZdaWr4YQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLJ6tAADYGM4J0y7P4CgAAAQG7ovhHE1ZiaJwkkVAYAfUr3wAAFwMDAB7W13+CjNVTwk6v7SOQFX6jdMX7G2ttvB5nucDsuf4=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":177,"pkt":"ZmZmZmZmRERERERECABFAACjJ6xAADYGMyl0y7P4CgAAAQG7ovhHE1aFaJwkkVAYAfWNfQAAFwMDAHbNNMxlK2hi+kM73RG+R9mVK1k1n278Xq2fwo65cKzW32ncn3dJ7kB\/wz+TBKjCjHuzTa3am\/FIFV25etmokJlONLLJrfcoS+4PkOtmintpqLX1\/mQcZ5cwcG1CyWfqnc5A+A1kfAB6j4X1LC+tm9SmlL8k5lmx","pkt_caplen":177,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":345,"pkt":"ZmZmZmZmRERERERECABFAAFLJ61AADYGMoB0y7P4CgAAAQG7ovhHE1cAaJwkkVAYAfU4YgAAFwMDAR5OjaBU4K9RxaEOIHl9RkqXTssLDishesbzjLuUbDAZDJRFnzyaj8ejMM2ueTD6CLNtc2jjLJ57t1g80LgQbfy+JUMoRcjIg2IhWkko7S39iw6bgbvyFu3qH1cVkJkjMLOEtHMOGvK4yLYcn21AtyDTIr0Dds40lNJS5EgMcBmhGdtQpaMyXjkJRvHbR3JAZL+cEgYUfuF7xSkh0zPrqz7JjgwtwL0VYQpeusE93XLn+m308ziE6DVryUHuJj7+c7wd8sJ8cb5hVwtxDaAvhSlRMwIlHPrEGLQBNmUFaMohgZq0V19XXuBHz+cBpdoF3+8cnhG48hJE9MwRgEbCeOVFu\/pxXrE0wmFPSGGGmePjRa2StuxxBWE6hgEkPVLz","pkt_caplen":345,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739312,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLaJpAAL0Ga5IKAAABdMuz+KL4AbtonCSwRxNYI1AYAfXpvQAAFwMDAB4\/8FLPAjMrydunzm041lSiRjMKOj5EiHlPHgxxkXE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739317842,"flow_last_seen":946739317842,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp"}
+0774{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":337,"pkt":"REREREREZmZmZmZmCABFAAFDy\/NAAL0GDsoKAAABwx5eHOp6AbvJsoUZMUH8QlAYAfbjLAAAFgMBARYBAAESAwOCYT7eCU1xUXbhTPV2JlKPIHcY7sPH2WwKtpwnSeF8xyAex0Qk69Rnwb5oftgvyqN3KWFf9IzenmheX1LYHsKC9AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLmZmbXVjLm5ldAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACAw+TAbBBMqcOYtJZmoA1qcBE16Yt0ym3XOBLcMkrVpDQ==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":946739317842,"flow_last_seen":946739317842,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.ffmuc.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4329{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":2958,"pkt":"ZmZmZmZmRERERERECABFAAuAyWFAADgGjB\/DHl4cCgAAAQG76noxQfxCybKGNFAQAfXtaQAAFgMDAHoCAAB2AwNkyl8ogzMlAhTUQA2TsMh7Q0Cc2\/3wZHCiwad1Z9NoaCAex0Qk69Rnwb5oftgvyqN3KWFf9IzenmheX1LYHsKC9BMCAAAuACsAAgMEADMAJAAdACD+8H0HbVGEEmZC5hZLdNizcuC\/0pRP3fgeIP4D\/GwhdRQDAwABARcDAwAkfwnuX6wEOZOBUTjar1eVwNX\/5E0Ocx7Di9qIEnerial2sCiHFwMDDDWV4W2nvLW+\/N2l4x6sJgc8wiYdu5HOhM21Gm3mnFcxKO2Ie6ZC8TBNY2Mpp7Yb5rcL6bqv3cZKl4w3lzpNGDKGTjZnaTdTckz2Zj9T\/bsrBq0FYycXELwNiLo2fX1zTKtRPyLUu0GGauan4AQwcaDjRQzNlNJGd6461bdar1412MhrLksAOF3Zz32PJXTXtFU1mwvYVqphcZDb4pPZ0N+gjj7dNR4S3YwPGEbwlcx1UcGfiv3pyH+UUZNMH5Baw9z+5KY9RTPE3Rfw1bhKsm9xadHFb6suVuYDZzfowFS+\/J7rFZVNyczZA\/78zcdYuuXbTxeDjPhOqxAoQDX7VF1HojbcFFzFMGuyikHPdDYckD+WeR5lbhzc\/IDh75MNMf\/KMikRmHFGsWSPgCfnHcJinGKvxJJW58RraOB\/5irkT41Kj2mTP7rHD5SNd2CjxOxspgfL21g9EgRySSvXC+1MOm1qzwLgfjx1ZGRqf62CTxE1WBGLSGVSBUD0U9VUbvm7X5SNczaQPf0VLn8L3p7i1Ks07MNKvx2UZUXfrd\/RU2JWlAdhuGfs4RK7IYupZ9gwETRs4hxHaE\/JmiH23lQ8LvM6OtMsbQ6PirB\/Qq+igXuyD0TY3sAc4gdxm+SJGHsDpdSKgD9SodG\/vExsIGp+Gl5tevJKVwUT0pGU9EjX1Bi1e0B1xZ5ye5cjD8jxqC6fGWDYbc0qUQnT6Ei3AwoDVwqGAF6EPjjKHUKSNJDHKDRweWDMJ8eQeivUqlu+lhWhCAE9lUvj8qFKlloewows6Y7yqVUmSPPw60JQ\/7KRplxJ3xUWU3++WylOr+8YCwNo64NgMLldroBbTf3wwNL5K2B8K2fa0ar2Xxz3JO0bcvkksssiMRLPicETirp6CaB0jh\/JBv+EtfNF9XlRRV3bVxTCpp5g2WrRk6UQuYXfLZgXXpvWsW3UQwQvcMLuqGRqk0Lrq45fax67cEa4ablkdoldX6BJdVjUPEVJmY\/4EAB6c5ffE2gmcKP798gpjRuEOsJHx7lU8XAha86w59XzXonwVhFiFEiku0\/ryBztip397enoLu3d\/DdWuO13MC2xztCFDC63o+OIx4LKccR2dUluAwyjMQHJH2QfKyLnH3gJwChS1jbNN6JjmBlIjJ5F5oE0c\/LLe7ZNRcNl04\/gPLP3X4Ig1u++FkuVZR4VffxYIDiKTeCsRjSq8xT0sFQrVMRqRExsxUpTFlLjgmk+4A5gz+AWsHQgXQDHpc8q+tpaaLw2T\/VxrMhaAlTNwD0R+fPu6xqKcmZ7K4tPJ18rUG2cCEq2Vyx\/nZ5Bsb4X51YWHYwI\/b62OL85Ky892\/YpuTiyCwr\/n7zKZjbYHc3bE3kJITVYYhhm7SCsQwZLdboBPXK1hc5zPXoZ51+dKsAS5jlTrL7t90UaX+3d5RBjR5yWI+hwkpRHZC4YPu4wFBj9CS+kKkAjOdshMO3DBnfsoKT51IiDooH56PULR9jXPjPvXwHziEAOD5lKZLhl\/1PpgUaU+m0Qhb9DGdPkvd5L5MtmeN6AG3ojp00pWioyce1OEa+lwCX86DDB4V50XA8WSmUf8Ruv9dDKOkEto48W94o6jbWCBaVHLa30AI1sBDsLlVma26j5oIbiMjlGK8ArsP5ukW3ec2Ucyyw4OeOhYe4PTq7O8QJdyRJffrasJ10uS+VJlhZE6nntiGTZcHenBLx6mVY\/sNy\/xKxBzOkMpSKdjL8GC01HDHp6JDU\/ZHpm00Le70fm6tFZ9vCb5wPUsyYycjMTWmiSgMdLOaewpU9tlODZTwi8DEVWJyEa6fkCFWYdu3u0ydeu8NzIOlQcZ1lyy\/E5qNM0pqUIMKgu+I5sA\/1d+JmmvGoRZQYTQTUa3kxoSS7rPzyV28dHyfYsyZ6xH4xX0Te4M4ymNWY+c\/L9THfsDN\/oVSD593mlv7UAAlNYa3xzFv8UKd\/o0wqF1apADEX5sol\/96BK9yt++kADu5RkL3Q9suLz5lPpANm2QRRIs8Ow+4yzU\/7qCzwe3wQndBdO2mvPNrxNQWX0RWtNADT1hADdzQX8UO24dOXh4qk+iHH6bl8lfIvW8+qqcF2nRbvY6bMLSrGQokwAzcMtwiZdjIJEsFZPEIqPD7EZnzjfnQijrIF9Wn4vbTwPzBnADd1msbtKeSaVNdMJih6KLod12TaeDOeCDRiB61IfXV9dgIKfGFyMlxjk0+d6Grs+cJ7UQzYlQ0mX0vg3on5LNDK23JzvxJlO9RApmtXu0TOUl67cxwpSzAdhxbWvI8l0V4Ai4I3tdYPelpVFVsSo+cgXM3bWISOOqQjzDzqnRV3rpFOpKmYj18yo6Iw3eQgPQrdVloO5tfEf2RUtUbOK+ineibqkTHcOjvhuseYK31qZJs+iTw0+voLfLVtqWLppBhUR5ajc3xYiWsGOK3UP0Zb+9tGTDp7eUX5mpFIs5TGNFA+qxq204tT5KujsIYtCIDdSXn6JYPAXRTlwA4oEjKa3OoGb33tMMT9hVxCQHDLFOs45v41USfRH5jGOfkuc9t77jPR84y7jSr8tXiXsE5CuwKv3P7uF9BVlABkx3ZlxEIz4\/1UR7mzFGAx9K\/RIDlF6SxU6mh73+mMXE0JVkoSTGdIPiDILMtKbfWz72\/UvSW7dTt35fwXmnQwL7He\/RlLL0\/sjJ8vBxcVsv7+Y0XxXaeqzhRtNiCnRgUcTqfLUOJS8aBbh4HPdSKkdltzZb\/S5Lper3Z8zxxuZkIif3ZJ\/gz\/T0iQbX6Et9RMROBoUHjPg5pKYqkENDxoMG\/MC0WVGiX5R06OFe3s9dZ\/ozvLZvYcEZE7N7F5n9sPRwd+I+59lPh72uicIxFdChXuEOxCFU0V3rGzpol1Y\/VsMpTxsDCKvlfGj6qXugNMGkxmq51kciXtj75pUlzwIMe6kQUn2jTFnukdp6OPxrp0T4\/lDiC3VaK0fB4xi6LdOz\/EwCzEu7lICtRLOOwfKoiPsMnC\/K4Myo47r7qgooc6Dyct7xyGHbGYJon8e+PQMECksrlAXwIcA8LQoEysxirtgk51VSp5RdhUCampTO83NLVIjW6\/5AUld9ViiwVRqzLBg7wtcqkBPZd3uqzxG5sC5MeKaDzMg3QKygjiklub6zdiCWJK8V5PVpgiHBa0as\/kw\/NbzRIp8\/DH7U1o9eDK98CHzu8jiLgQ5n1w2IYkMJA1JpBIvlpsoUz6Qe08g4O6AzxZi5RyC6\/8K7\/Ed0NrDjr+G1S6iNZ+qijE4QRaBke9Co9IWob47jnSAaxgFwziKOB2hnQn493UlWhwDwQZuENq4DusUKLl4gaZTo1LvBrcu9EW+pZ0sdlBNW+e5bo09BfXSYhwTQVczSoVWspRueOrFVGx29DRpvDMWXSToev+\/5dhguN8sE7\/6r6UStt1tBEq6JkIdV7o\/cGVmADZ9PpG+uKpSV95fJQxwhEgMidjt9Nuj7TkbtLKuomHY1OGt2HlKFszmF624Ixr0UPZ7oS0P3i\/BbBVqEJdJZsiVw4MhJvqQMjH63aJ9Ie4EL24xwrBjLm1YPTGhWjPxzGPCBhmgSj9u3DHYv7ANgf\/CwtQN4PY6wBmanZg8AFnKkxZzdFSDH5pdfVl85gHQh72n","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":946739317842,"flow_last_seen":946739317868,"flow_tot_l4_data_len":3227,"flow_min_l4_data_len":303,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1613,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.ffmuc.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1415{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":814,"pkt":"ZmZmZmZmRERERERECABFAAMgyWNAADgGlH3DHl4cCgAAAQG76noxQgeaybKGNFAYAfV6GQAACB\/j9FRzrXDeV1gMTvdtnDbaxVBoJBh9cy8pOcYrD8iqnoIgGbCFSCgUCuevEmCLqMD6ndxwNBjeWxvehtGcTzYfxO5MsUhftQ0+dqR1WhFRhDtmvuIG3Q\/1JnJ+iTTGKy7+d19ANVD5kJS2Kbw1kq1CCeKCETSjOhUhw85xD38cYnUuHGOyMgN3a57KOUyOmb4EwXoByM8BsVlxu1vc1oPozugCeie0GDWpbdeaEmjgROEgR6DsCHE32e8OUOXMw3\/fTV5lRZlHvoE+WIdAJO23JksMoSbzH5lXNpwBfPg5fllHB2gzZy73MltgSTbtU05NdkOcr1ZFoqdQ2V7wBDgCUult1m1frKnm9RbG5so0kMdI1K2imdVR2omx+E2ZIA0aLFwNHZ87uVzv\/27AUYdBTlcNoD9yJPyo52+VSIEhFJ+iC6HMt6T8vMgHE9t8doC6zzQ5PPfhV0Y\/wHOciEZ1QCJawdjeaWA1oK+LH3dEkeN+2N6ZvT6aGJRirsBAqqpY1jcHkYSWOu0YNfkmmhcDAwEZhRt19HF8btCDpTYJhT082yjULJw4KauCEpxSogJCDv0wIm\/nxsgKWJ5swMbqyuXpT7mdSSff3VOjrgPc6f4pSWMC0gPkidij6lKAHSShm5G9hfxPyAE5LFfSUSjOyv6KeU3qvvH\/y9kOCN3ZJI34MmNCSHjx7F7SwgBhT+XBQWcGdTlLW08ufWjBpFEV0wweQ+sorOCpyYk1BQhN7aPpwW+8cPmzhDQyCikmnIgsWh1OdzHEfXqnhQmoNEJoF7iPcZZ2Q5XdXc7TB5Nr97MOlFTANPGwh+Z0IQ0oeyTOBC76R3rCyPcgQuUbw2ZmngRvKZCro22Tf+lTL3RL8Wypoy8hNNZMukYZOxZV3pu1hHfTdtt5At2T9yMXAwMARRSoalzVajpzS8ANj2fKvjjGfm\/L7CaKj2s8TbmN14sqePDJ6R8MH8TM+nnzmnQKkuZgpCVkmHfyoZtoN5aVAw1RpWQU5w==","pkt_caplen":814,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4y\/ZAAL0GD5IKAAABwx5eHOp6AbvJsoY0MUIKklAYAfXiYQAAFAMDAAEBFwMDAEW5sMLbd0gmem1uKXhOn4xsScvIMh841vOSv25s7WegMWRU2Aswoauuqax20OLYWSZS0GCafTK4XRon6bwmx9k2Q1hF9xw=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+y\/dAAL0GD4sKAAABwx5eHOp6AbvJsoaEMUIKklAYAfXiZwAAFwMDAFFGa1RBxhcsaVS1JTQbsm6b3akfyKh\/Q2QTKdRkJM6NqfDPzD3c5QZ89kS9wTJn28NiChl0RiDJUJUnuw7FkiBDzP828V4cNxsAiVSYcyY6e6Q=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADTy\/hAAL0GDzUKAAABwx5eHOp6AbvJsobaMUIKklAYAfXivAAAFwMDAKa9exxu0dEz4INQ6vyP1m\/DFlk\/Pr1zMOa+A3Q6GFtcie\/apw3waA1OR6d6aLmI6wKfSXOeH3kctfnAf89EtusX+vcCqFfnl6BAtI60QXuiXWMwckFXwAoo52guJi5ZUXVP1W2rVdh94v\/woZRrqyZhJuJ4ExkMze+7WUJVXrO3VHHo2rPL0OsY6N5fpIwM70xUZNrphXFiTYO4ub6Eeaeiqz+ylUS7","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3y\/lAAL0GD5AKAAABwx5eHOp6AbvJsoeFMUIKklAYAfXiYAAAFwMDAEpSpWbBsE8yKulsHJP0e3Ckr9z7+yuzWyAPOOj9mGycFIYrF54XTvqP3OCh7nD32w1mlc1r6\/N\/UDa6EqLrk6cEg2wBg1nXOfGhWA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":341,"pkt":"ZmZmZmZmRERERERECABFAAFHyWVAADgGllTDHl4cCgAAAQG76noxQgqSybKH1FAYAfRGHgAAFwMDARr2kjNOR2Ill2VqFuqMZwq0txDPf7ZDGNQZypAXA1bVGrUvF8y0Zbj29Td0K2xmPihRxKWSZvuAEj3RzCI4qwpOgwFWywCYC+1EJA1l4bZ422mACRnVKBsO4zmXgXlC5tZEAyzLW8v1YQDA3eauyzCyLqeicYAErrrsdYpFPgixO4hqi5Dbwlr0DJn6R4qkD+NzxGBP7JNQ6wexb84\/RHHSNul1vscGvx3JqifkHdkcZC095RZfDvEqLBJCLZCPhCE4tsRShZ54dOmDpl6Q6JbFCx45No4yCWEqHKywZhxYRdOtARc1qKKCcEx\/JL37B3iik41qBsORyIzL5AdCqVsIA0XJCnCDdwDOcnFbEnfj0Fcid9qkSIkSr6c=","pkt_caplen":341,"pkt_type":2048,"pkt_ipoffset":14}
+1419{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":811,"pkt":"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","pkt_caplen":811,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHy\/xAAL0GD70KAAABwx5eHOp6AbvJsofUMUIOplAYAfXiMAAAFwMDABpmftOoHbecVW+Xa67bcodPl9dZGh4S1Byjjw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRy\/1AAL0GD3IKAAABwx5eHOp6AbvJsofzMUIOplAYAfXiegAAFwMDAGSUoeGv9\/WPNc43UWHkg3c8IXWeJLMTmyjBdSkhM1gop+nYxq8CYXYcVsfFggbdzLiDPfdoGLQOfxXZova5F3xanc7KxIV1aDqYsVDP1pPdXQRjxq6y1rt1HUG1RKaxCGXQJlUB","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWy\/5AAL0GD2wKAAABwx5eHOp6AbvJsohcMUIOplAYAfXifwAAFwMDAGmJ5\/uJASXHrZSRrJrwmpm8kqpFfwvyT8vYbD6mUN4jsEyjY+\/ErPyd2ByB2HmNDQDz9KAj0JZM+umyLcrmhp38y8zUb1sSWpCBW\/VKjoTWZBzYTUcYI5Tl8vkdWAb33L8blAXAy0TugrI=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739317,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLyWhAADgGl03DHl4cCgAAAQG76noxQg6mybKIXFAYAfX7kgAAFwMDAB4dB\/guf4S2hfjJCiGzltHgv8KT3P\/uVqFdhkG63QY=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739318,"pkt_len":334,"pkt":"ZmZmZmZmRERERERECABFAAFAyWpAADgGllbDHl4cCgAAAQG76noxQg7JybKIylAYAfXY2AAAFwMDAPTBSH\/KUN9Ho41cffCQxrJYqIef6Xn8cytekOXeeAPHjzza5w5Lk\/Fs5hXSHCDw5NX72Ztnf7IH6QGxoxyIJ1HUWKk+Edlf1yCaaiWSG2qK0boEbCex1OgZCSzfuqjAo1mHvYIcjlHdYDJB5a9RjE\/U5d3pi1ylEMZuVl9S7BmnFfzWYQLG9VTEqRoJUXsx5QLiwYAlmszUJDalFHNSRVxzZZvw6QxVh+8FC1InrW1oyRKR2xFIYp4YUJ3wdWp5tEn2LIvCuBP1JRsGgB49yTiHweVhl2D1toTYHLPXBFKveGUx4gMgeosIn4YM+HOhJb4bRHYOFwMDABqApNe+JAK5l37wbw8X7NNtNzFmPvcJ8YVILA==","pkt_caplen":334,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739327,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAzAFAAL0GD78KAAABwx5eHOp6AbvJsojKMUIP4VAYAfXiKQAAFwMDABPOFDsRNkPmvUgsjvIivquiUuss","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739327,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABALvxAAL0GxEYKAAABrGhdUJ\/qAbvjN2\/5lQPB01AYAfXKpwAAFwMDABPe80YjBSFaopQ49brkBueHC77J","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739336955,"flow_last_seen":946739336955,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp"}
+0774{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739336,"pkt_len":338,"pkt":"REREREREZmZmZmZmCABFAAFEM0dAAL0Go94KAAABuelq6LZCAbsgVVLXybMJllAYAfbmxAAAFgMBARcBAAETAwMcr1WdeadOHog3lEpiodEeAcm2gZJgU0L8O6YStA7tWSAYYApreqfeMV002xSAt2FZT+xN2PBaLBfkQPkpY2yRnAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACkAAAAEwARAAAOZG5zLmRuc2hvbWUuZGUABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgsGpq4zmMsA+1iGgtz9f+LYYNyHCIQZ\/zq3SyFDX6FwI=","pkt_caplen":338,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":946739336955,"flow_last_seen":946739336955,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.dnshome.de","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4325{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739336,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":946739336955,"flow_last_seen":946739336992,"flow_tot_l4_data_len":3228,"flow_min_l4_data_len":304,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1614,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.dnshome.de","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1376{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739336,"pkt_len":782,"pkt":"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","pkt_caplen":782,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739336,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4M0pAAL0GpKcKAAABuelq6LZCAbsgVVPzybMXxlAYAfXl+AAAFAMDAAEBFwMDAEUCA\/YbRSqPjsGQUsI7BDvq7g3hnx8stX\/\/v2CQCTsComt49V00Fj0d8MRffKPSBQAZmRH9pre9c9BbaPqDdrxQX\/Gf1xA=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0845{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739336,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":2048,"pkt_ipoffset":14}
+1080{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":564,"pkt":"ZmZmZmZmRERERERECABFAAImvvBAADkGm1O56WroCgAAAQG7tkLJsxfGIFVUQ1AYAfW8cAAAFwMDAPq0S5xRhUiFBm5oQjIpVR+\/xFtssf1hfIL5Knbb8EpDUxIkyA\/NYsg9hqvkUOWvQoRzHaXK8H0ZKKTsoAqv9UYJM2LOp2vqkH91TXl5Ocww0pLgQCbrAB3n\/0S8mjmYnNDnLEZW+KUgrOXpxj\/a8DL8DUJ81uRceFfV82w4VtHuBs9vQ0AV1YoKuKvDEOfYV3cJxVW00Xcxsq7zW3t2VW9C+A9teGLAC5JpPbmLpLH9Z2HwmhmSoHG18jHRIU+fmuEcJi\/8THJhgMezs7\/wtbiEIq6nDxSroTcIEeoiCrasiJUioRwCODXhTwuvzWUxCM+kPFhVfU+TAj3pFwMDAPp+Snu2WER35XWYJqme2A6kBPgwCSg9yNLza6qsM6y8WrQF\/cGyYuEAki7sctu2Ii3QdQvlbTd6fZcbI6mLj++kqGsmamd1d0Dcgr4x4R2uCk8sh06Ay3+lA4KX7NzoLH+nPBk30eo0P3OzvWfWIjcqJJzJweBBhZphkk8OvPsQLsaNaTCIiKByeoBJl0hF6huHVvF8nr0D7GyWIviEQsG2RuHcSOMysu9kl6fA1s4jOdVcQnA2TAcPd6dmI6eTli\/oh8lDxWDRuWdfyASCY1KlZBJJ3cxaiu\/q4qSqE8irqama7gLGQhv971Qv78mKAaEuQEChvBjZyCLE","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABpvvJAADkGnQ656WroCgAAAQG7tkLJsxnEIFVVklAYAfVLjAAAFwMDADwoucuVLHWMm3AFWJMEQ7gMUxEn83bQuNE8fyjxQXNBRwAw8zs8zWjWOpP\/154bQau1Xmv1Tgcm1\/RRGTU=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHM01AAL0GpNUKAAABuelq6LZCAbsgVVWSybMaBVAYAfXlxwAAFwMDABrq+RlpSkVFRDdVkfO7aya9rNVNmSpj3Qh0Yw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0865{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":404,"pkt":"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","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":160,"pkt":"REREREREZmZmZmZmCABFAACSM05AAL0GpIkKAAABuelq6LZCAbsgVVWxybMbY1AYAfXmEgAAFwMDAGX0RULNJBJGL2vHmOiAlEdfYOPmS2gI5A3EysxJ3oiIARS6c0ZQTRA0eL9Y8vHODyFq2ojg3anHd0xo6LcKzj6oCC\/09gfbtNVuc58k2B3xfYyI6flTzCk99qPHxe4medbrrMOeSg==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWM09AAL0GpIQKAAABuelq6LZCAbsgVVYbybMbY1AYAfXmFgAAFwMDAGlkty+gqGrZ6kcEx6eBNJkFXATj\/PJ2qcItHe\/UVJd0Zib66d2kn86BcOtb4B5FFYHtH6onDNf0gbokZwIoYEMVa0r17ktTXFUNebFvyIdqYEIhAVbONH2RHpX1ccsyOFmwuGRf8aZpw9E=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":249,"pkt":"ZmZmZmZmRERERERECABFAADrvvdAADkGnIe56WroCgAAAQG7tkLJsxtjIFVWiVAYAfXszQAAFwMDAL5fINknzSWUmJfsu6P5GG2HB04fm9Xp7ShxhoWlZA2Gsvv1uYsUhk1FoHjhZmw3jgY7hhBO4qrsQXrxPHGKcJRhNk5YjXZq0Iq+Xc\/0f\/Wfudy5r79osixFidmFWbYPxQ+dQuZ0OQb1xmezDUI0x31kyUuCW2Rp54AKfccofoQiACif0\/hxjLMQJ0jL0Irnhj4RevmIj9hvfxGMqPHsfxDIUxm6IpyxgtbAA4OSpTMWQWyososskgVkuA\/Ffiha","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739337,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLM1BAAL0GpM4KAAABuelq6LZCAbsgVVaJybMcJlAYAfXlywAAFwMDAB46We2Qp+l8+vEhQuOpjYEBZk1tUGLiEp2u6nYNM2Y=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739348407,"flow_last_seen":946739348407,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp"}
+0777{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":340,"pkt":"REREREREZmZmZmZmCABFAAFGD1pAAL0GczUKAAABlTjkLYysAcV+b2P18dMOKVAYAfY7WwAAFgMBARkBAAEVAwN1j0zYbg0sj5M3182ApIbVPce07i2k0VciV63ZowCdCSAqVc02WrOXRNItgTWsiYtxSSngWuVjvyRNgTc9xl83+QAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACmAAAAFQATAAAQZG5zMi5kbnNjcnlwdC5jYQAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACDGkG2e0e5ygLjqcZTIOnp7CQIXlvblqyaK24BObKyFNQ==","pkt_caplen":340,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":946739348407,"flow_last_seen":946739348407,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns2.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4596{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":3152,"pkt":"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","pkt_caplen":3152,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":946739348407,"flow_last_seen":946739348519,"flow_tot_l4_data_len":3424,"flow_min_l4_data_len":306,"flow_max_l4_data_len":3118,"flow_avg_l4_data_len":1712,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns2.dnscrypt.ca","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0479{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoD1xAAL0GdBEKAAABlTjkLYysAcV+b2UT8dMaQ1AYAfU6fQAAFAMDAAEBFwMDADViidEmWrIRj1bupCYNTHJ+IR+sbSf6KT90A8qW52RQBURyQL9vFT6E9CFjlI93BJu2cr+zKg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+D11AAL0Gc\/oKAAABlTjkLYysAcV+b2VT8dMaQ1AYAfU6kwAAFwMDAFErq550LH95uke0rm23VPceTqLIT5XXzMqalNs7I2JJrXOWUChHedceFo52rS2b6I6rUVra47JaBhmqJSjZZC8zmJ2wvcqD4AZr7WxTsoZAniY=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYD15AAL0Gc58KAAABlTjkLYysAcV+b2Wp8dMaQ1AYAfU67QAAFwMDAKsOGAidzVIImZBe8IrlHfcbcM11mmaHWvkM7H5DrafIKyBdOKxCc4GdZm+Qq+PXfPf0ndmV5FWH7h+IZADqRJal\/xOyFOe6Purf+ohwLWuQQt\/ZupLyqJH7ZZNQ9xhnhti95OsaKR2Y1b4EKds3ijmnaoMndpYL0W0+RcfMCAznlz3IcmNPTwpP+DR23n6pUpxgqmz18syHYKiy0yZrey0DrSIKjKAW6G9+eko=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3D19AAL0Gc\/8KAAABlTjkLYysAcV+b2ZZ8dMaQ1AYAfU6jAAAFwMDAEo0OArYkQNMg27EXbPA5UrWaL87A\/L0tltP7KNYQ2zvpxu2si2+eQTKxj5r4dgooUM6ahPoUi795pyNc88cAa\/92cd8rlnTDr6oEw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":109,"pkt":"ZmZmZmZmRERERERECABFAABf6C5AADQGJEiVOOQtCgAAAQHFjKzx0xpDfm9mqFAYAfUIMQAAFwMDADILec5zH0u1csdc3ruFfLw6vcHmQRu19oAbaB9Lb+1NcUcdGYRfJ+g3n90KsKyCnD\/JiA==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":98,"pkt":"ZmZmZmZmRERERERECABFAABU6C9AADQGJFKVOOQtCgAAAQHFjKzx0xp6fm9mqFAYAfWrkwAAFwMDACfLl\/IH6CMalJKe8Khp5YGPlYvyPQBfXcdH6zqfYAnpHab+PiL\/L1Y=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHD2FAAL0GdC0KAAABlTjkLYysAcV+b2ao8dMaplAYAfU6XAAAFwMDABqLIiqOgl3KOS5PBGKunkM0r4HPem0E\/SEnmg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABL6DBAADQGJFqVOOQtCgAAAQHFjKzx0xqmfm9mqFAYAfUzjwAAFwMDAB7yGrUD6l\/BhILhpIjUyvj9JSRNNkCQxIkkZWu2rME=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB36DFAADQGJC2VOOQtCgAAAQHFjKzx0xrJfm9mqFAYAfU6dgAAFwMDAEqdNGcXantoUBRmbRZv0bDTHKyi9luTueRwY6W3vlxI7b6CyEb3rzxrtWlFK9vKaqzLqMTGyYF8AlzYv+KTTlsgXyKOxapzA\/LhPg==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1068{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":553,"pkt":"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","pkt_caplen":553,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRD2NAAL0Gc+EKAAABlTjkLYysAcV+b2bH8dMdC1AYAfU6pgAAFwMDAGRDuH0SRNge4KtZJvTqZaQaq1HgJSCCMpnQKHMI6ovV3CB\/t7j+uraRVyqkljO5z4BxQF+HTGb50xsX4UmW+lMgAbNvmHAFAzVZFYVqLizRSaFP7VQiTmHMNiIa\/c1OBP6HA27b","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWD2RAAL0Gc9sKAAABlTjkLYysAcV+b2cw8dMdC1AYAfU6qwAAFwMDAGlXhFdWqvEhyTlDp6w1hPZVH1D4QGtG5TFAn\/M+fvanG054BYUJax5Hl\/f1KcEDrezIHYgOsJiAwxt7unRbKlztIlLkkXB8fI0RhD6y08eFlXpDTXDQ8ateflvgRq7dQVPGMZlNlXa5z5w=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABL6DRAADQGJFaVOOQtCgAAAQHFjKzx0x0Lfm9nnlAYAfU93wAAFwMDAB5Ji3IaPqPqsPpO7e7I7ITP5Ggy7RENl6Impzd4GGE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739348961,"flow_last_seen":946739348961,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp"}
+0783{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739348,"pkt_len":342,"pkt":"REREREREZmZmZmZmCABFAAFIPztAAL0G074KAAABLZm7YJSCAbsJfFJ\/n27j2lAYAfaq8AAAFgMBARsBAAEXAwMZV\/YJsl1KDGHp6vinUuSzBgwYUj7HikeN2yT\/6PXJXSCCG8AdBIamvVFUtiPCGd7atl\/XGLRDF4fN5wiY+j2o\/gAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zc2UuYWxla2JlcmcubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AILqIx\/2aPwjQ+1CtVREnVkbTOyfaXxjQI4MYF1wNoZlj","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":946739348961,"flow_last_seen":946739348961,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dnsse.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4330{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":946739348961,"flow_last_seen":946739349012,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1616,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dnsse.alekberg.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0587{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":198,"pkt":"ZmZmZmZmRERERERECABFAAC4VvxAADYGQ44tmbtgCgAAAQG7lIKfbu8yCXxTn1AYAIOAngAAUbudk7Sx467B78RwxwixN7WbszxDSJth5tiFKuiBrGoB9KFJtYBVt1C9rFJk5PyiCKlQsUVoHGHAH28fXEOq226wLx4N\/Z5eAHXlqMB6V1mSenxLPr5ItjgHCvxui0hIr8CHs4BD\/dcyFi\/lJAfYyCLIMg195o3ptTftZf8UL\/yW+5j1eIJyx2wYxG1Bmojg","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoPz5AAL0G1JsKAAABLZm7YJSCAbsJfFOfn27vwlAYAfWqEAAAFAMDAAEBFwMDADXzhu9IckZdRF5p9rktj4FIPv\/RwuhvcZ5iWKfecDRsL5LtFLthbeqdmQGRbwyypD9mazUNOQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+Pz9AAL0G1IQKAAABLZm7YJSCAbsJfFPfn27vwlAYAfWqJgAAFwMDAFFS6HSolQONUAW59PBdGtgVHQTC6yJoVCA4lOkKUOgLspS0M5eGwl4vbADuT6W\/63Ogy8VduvtD38O7x2SBJDrj07p4QErHcergSl3nvKoUwYU=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":227,"pkt":"REREREREZmZmZmZmCABFAADVP0BAAL0G1CwKAAABLZm7YJSCAbsJfFQ1n27vwlAYAfWqfQAAFwMDAKgQHKzlXDHoL4GdlXpdHC\/5+dtOWJ5cuddY934s+jfVjmli4lQlIZlYGWZjR1muNxfzyvzHzMaCtLX\/RaxKG\/K182lERTih\/vst77sKNOa\/G7QYfppYLAXSdZc4eRJnoT4\/yAzkZZq4TjeW6p\/hB23K55WkeY8yRUjE7B6d4xm07fsf4fQ+8Xy9An8K5tXAx6VaJ6wf2odfwhiIB6fS1gtRM7wkvjAs\/TI=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3P0FAAL0G1IkKAAABLZm7YJSCAbsJfFTin27vwlAYAfWqHwAAFwMDAEobqJg6P6nFSQkY+Z509BTM37U7Y2mTYXe\/nBNGoeesPfg4kx1\/yv8u91noYurEFuuKzmDI+bhvgs11hi7oZEInBsUrRN3++8L2dw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":138,"pkt":"ZmZmZmZmRERERERECABFAAB8Vv5AADYGQ8gtmbtgCgAAAQG7lIKfbu\/CCXxVMVAYAIM2VQAAFwMDAE9XU4i09u+c4b\/wv6s\/0CkY8QvGwFL8ahX7JTuHU+hjRPbBsxDP\/vAne9MgTeIi8bi3Cy9ryIZP\/UKK6EGkWEREhLeHS1M5mx9Ly3Msehzs","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHP0JAAL0G1LgKAAABLZm7YJSCAbsJfFUxn27wFlAYAfWp7wAAFwMDABpvWBiQI8nQHz2L4DuRqcAuVUAA3pwevv2WCQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1503{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":868,"pkt":"ZmZmZmZmRERERERECABFAANWVv9AADYGQO0tmbtgCgAAAQG7lIKfbvAWCXxVMVAYAIO0OwAAFwMDAynuHotPI4iWpWq5jvE\/b8DbYmL+3UTjiljCGs7FV36Nt1gcGHX+RBZ5sQiAiOCMP4PLjDDsHmD7Cb6D42tBZjaMVPR\/mPPcIP5JAcBHvNV9a2ZwSnuQMlxpVQ6PjzwuTz057XmAN5s0MKCGl6LnWdDu+fC0bG6Mx0LiBJ\/aXySAUhjTsx\/ah1xZSQGXbbBeXRCZ6Hgh\/TSGCJVvKvYzsC\/a\/vBU39IdDwTk8gANnKjW3EgYeQqKQA\/CV0K09RascyhXTC7nGfCz+uaiUwg1AamuF40fQZ1E7Y+1xJav0ExfL8fxlO1yly2YfdVz9AO1uG\/XkfxuMUIHTLOSOrZnhHDJ2XPG70yPQE8Zqxv+fw+hhRAQaYDaTslSumYfGd5LpOnZ2aymYAG32eWwnkMqSwITDe9DVFMwKdG9dz8L+Y9Eeven\/4WHF+Ox7GGgbG+mO4YhRJWQGpNj9LJoDTAq8PmHPbeoR5qUCcrxXDZljiH\/h1kfPXNZHGVHnqMYLflfZA4DyTmQNd7DTWBXoFSeGUndWGtGDDq3I6CCuQKGe6u5D9Bcu2iKWg+vsjB1\/fGCM4MWurzg5QGLfHlePeycv80sx18Pm9PWyy68RJ\/f9\/r83smmWslZvbed7Kjn7paqm3I6c12jim+Wv758JCVip2nHcHMs\/tNEsKn29FFh\/dHCizgBtL\/UVq7oeWqfox8t1sYCT\/DmO2ZGCLWjNJWfSrVy+V74XIEExirC4h5d2BNSHrtpFGfkdLGQcn3cElb9Rs5TxNFzKKej1azWkuR\/4LFCkhx5f8rDoFVulJhHULZDF6Z0KgmbMG9+GiPIRm36NCTZWNmqMq7cXcuCTrBQvlgsz66g8mEhjq4ZNHngQIXZr0371opPj1iiQ4REM42w0+EVTRxMS1WIwcPeu\/apW8WKY\/Xz5463YAdeE2iCM9xBF8s\/lO4W\/WqphkyKGg0IpXyZ37atAeQfBb7ZSKa0f01wiFWtyp8CQJXtNyIyoA1sRuF98HX5s1zCglZ55z+X3yYm+EQA7ZBZf6KWp53V6SqFvDDYh81L3rB7LpljwI0K6VRWC0BgaHeDvQ==","pkt_caplen":868,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":161,"pkt":"REREREREZmZmZmZmCABFAACTP0NAAL0G1GsKAAABLZm7YJSCAbsJfFVQn27zRFAYAfWqOwAAFwMDAGafYU+EBlLbtjSqWah5eR8R8gLQK02AFOPIqzmJ6gKt9HwWw7B0S5PQR7\/SjqGjJwh5i26m7cSrvqa9Cl\/tzaxWT\/ysDB0npRYcnSyzvescnm5hp2YlASJts08\/d87VVhDQ4uKTRa8=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWP0RAAL0G1GcKAAABLZm7YJSCAbsJfFW7n27zRFAYAfWqPgAAFwMDAGn6PtIkVHmoMJzjgnATo\/ZJEjP78dbfTDYCDqYkTi3+wLGg0MV7H5ZkPBTMTwrv4al6lvpl6iYG+my2jimgUkz\/xkX3NfQvTv8nr8kDL3hBX18zhdwCA1rVR9xVIWVhkT84sSRuAePVKBc=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLVwFAADYGQ\/YtmbtgCgAAAQG7lIKfbvNECXxWKVAYAINn0QAAFwMDAB72vYhNJfr2emZvkuGwRpUrsgwkpkyMMIbGlSfK6XM=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739349,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739354159,"flow_last_seen":946739354159,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp"}
+0773{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFFsX5AAL0GP4sKAAABuetRAa5gAbtwXMMeYngARlAYAfbM4AAAFgMBARgBAAEUAwPEqi+8SizamcFZuiOMoqnZy7ZEtN03UH+nij+VYBL3GiAFdLPwuVYC1BfptVDzpRdMmd95Dbs0SjTzk4T9Cfoa3AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG9oLmRuc2xpZnkuY29tAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIAlFpvTRrkboC35Gi6Kti1ZQzFT3L63Tg7Ad2VS1Z0Nh","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":946739354159,"flow_last_seen":946739354159,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4602{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":3168,"pkt":"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","pkt_caplen":3168,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":946739354159,"flow_last_seen":946739354179,"flow_tot_l4_data_len":3439,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3134,"flow_avg_l4_data_len":1719,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0501{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4sYBAAL0GQFYKAAABuetRAa5gAbtwXMQ7YngMcFAYAfXMEwAAFAMDAAEBFwMDAEWXq32pwHEzhcGDp\/NKLjvxgMAkksKxKcFIOFCDodEb90S6h8Gu0G\/BLuFfZ5sttQB7HESBT0tBjYEfHL61VthvR6QOjls=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+sYFAAL0GQE8KAAABuetRAa5gAbtwXMSLYngMcFAYAfXMGQAAFwMDAFGixfX+jyF1WhRHrN0+9CkAoYVj9DMr4YJ1kGbeEieNSecS+q0w\/iwl0yO2jmQwPz4JR3HyX5YbhQTrE+hYVumNbIkZKWuNU8LLxZezccE+lJ0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADTsYJAAL0GP\/kKAAABuetRAa5gAbtwXMThYngMcFAYAfXMbgAAFwMDAKbK9JgVHlFfw34FW0sw7dqQdGptZcZlO2RVkyCS9wnAksDujYS\/HvTuJaYyWrH+y2X4Bmu1xtRT05JwyRgxId\/Ba7+JzaKKgwintj3e33DfQyGya0AOLueZ+\/oQp7LSw9HD2MZM1r2dZ5ajI\/ki9R13QBfBlmX9ZJhMygxhpuJ\/kgAEbTo1exiYt1KPairdfATdtJ33NozQdJtvL9vaKpTjWkiyjKod","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3sYNAAL0GQFQKAAABuetRAa5gAbtwXMWMYngMcFAYAfXMEgAAFwMDAEpYoN2mcWNzlPP+6FgfIxHN8hB9hLglVChWzb2jcQP8xRoaJUyn+yI71m3Q6wdx69vwMrAqK6KGu1+blVzaUfSOxe8brp4779peEw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1087{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":106,"pkt":"ZmZmZmZmRERERERECABFAABcLpdAADQGTFy561EBCgAAAQG7rmBieA5ucFzF21AYA+ei0wAAFwMDAC+39rMya2Kpqo1SOidq12xa4YB7JvorSVeEuzsrHpSF4rvKcFPJrEem+ZrHD3EWZQ==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHsYVAAL0GQIIKAAABuetRAa5gAbtwXMXbYngOolAYAfXL4gAAFwMDABpkAy2DcHSwTsuSkNcwKgKpj4HfPu76yEIDAg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLLphAADQGTGy561EBCgAAAQG7rmBieA6icFzF21AYA+oe\/wAAFwMDAB7b+0jOYo\/js\/ehKs1iaVpQoq6acxniQAyvrVvOuW4=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0897{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":426,"pkt":"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","pkt_caplen":426,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRsYdAAL0GQDYKAAABuetRAa5gAbtwXMX6YngQOVAYAfXMLAAAFwMDAGSEo\/0HVN70U3LD84aFwnYU72kbbcOdnR4IUAorhgyfkrydviphMRRUBK7XywVj\/e6ebDlhw5wz8l0KQpjj7cxDJPaDZfnFlA4bLsv6yubH6x3Uv5hY2KnWoT75gsNnY20o72OE","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWsYhAAL0GQDAKAAABuetRAa5gAbtwXMZjYngQOVAYAfXMMQAAFwMDAGlLuu+sOO5zwbHTqC5v0+od3QT52CcIsKB0FjrKgo8A76KNx9J4Oqy+5cs3nXisfXMpFKybtbsx2TWRWEuuG7dbNC+7EcYZAA\/HRaM4BqIhhJg1vo7M0W+Q+PWOtvYmdhMe5vk3QP1iPPs=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739354,"pkt_len":239,"pkt":"ZmZmZmZmRERERERECABFAADhLptAADQGS9O561EBCgAAAQG7rmBieBA5cFzG0VAYA+o\/4QAAFwMDALRS4p0Y2oLal+dIwwUi8onL7JYp3e8vzyVgT62EryJaIF0vLW+ycwACSmYigwZ5H1E9iB2F8QnTx29dJ5xKqyqppqVt6+Y8J16ikBpVeKDkkMdnAnVIEYYc7AWc\/Tad+OYIHPw2zdLIR3GJ2uTWm5ABg8ov55BM3CIJLS3v6z3qyr6cIMfQMik6ViB8MJfSc8Hsg8bgfVWY7lwy6JmagzzxznAH4AsO7pKByhFQBQiC5Wlow+g=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739364,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAM1FAAH4G49gKAAABuelq6LZCAbsgVVasybMcJlAYAfXlwAAAFwMDABPH+HMbtsbylqHqR1SCnzYxY8Hg","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739364,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAsYpAAH4Gf4QKAAABuetRAa5gAbtwXMbRYngQ8lAYAfXL2wAAFwMDABNRzPKFC48C1Fna9B1nJzgOx45c","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739364,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAP0ZAAH4GE7wKAAABLZm7YJSCAbsJfFYpn271bFAYAfWp6AAAFwMDABObfBxL8bMwvnBw43SK8etxZJTY","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739364,"pkt_len":78,"pkt":"ZmZmZmZmRERERERECABFAABAvvpAADkGnS+56WroCgAAAQG7tkLJsxwmIFVWxVAYAfUuaQAAFwMDABOXRSu08WL10pc3CGxVUSKDv69S","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739374011,"flow_last_seen":946739374011,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp"}
+0775{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFF9DpAAH4GIdcKAAABdMqwGqhiAbtWR3H7NJTy0VAYAfbm2AAAFgMBARgBAAEUAwO\/FCTCx\/QYlyW+S6EGE0TFYQ1H3k3FO+5pvJMM4NWMBSCY7MF+HV8NsAFc82xlqHj0YcQW9bewwKxZQwscQJJKpgAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG9oLmxpYnJlZG5zLmdyAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIOxloY7MOWvSgZ3hQaojp9inJ84Sw+igf7hW9Y3pU+ch","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":946739374011,"flow_last_seen":946739374011,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.libredns.gr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4627{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":3179,"pkt":"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","pkt_caplen":3179,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":946739374011,"flow_last_seen":946739374036,"flow_tot_l4_data_len":3450,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3145,"flow_avg_l4_data_len":1725,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.libredns.gr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0502{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB49DxAAH4GIqIKAAABdMqwGqhiAbtWR3MYNJT\/BlAYAfXmCwAAFAMDAAEBFwMDAEUX9381c\/+R1qgydby2LZz\/D1isDmITv8iB3tIfcLl3X1ZN85j+RzDG7ZR0PP5I0SioKkHY5OtmjMfBNJaLny9tLOB5RTM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+9D1AAH4GIpsKAAABdMqwGqhiAbtWR3NoNJT\/BlAYAfXmEQAAFwMDAFElX+TKJBiopImIj2GXQOtwcKaEiElkh8K2UhzQ0jUKPgTXoSqnHz5ocovk7BGGFmhJ86k+WLCOTysTJDvQuF8U0maWZ1+mvmRXguvsmflwWCA=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADT9D5AAH4GIkUKAAABdMqwGqhiAbtWR3O+NJT\/BlAYAfXmZgAAFwMDAKa4vc8Mrjz1P93k75fEHIClEV7TNmkIFwWl\/1AVOuTvIrxY9revacc0XrdxN40np8KrY4KxIZxf4IUauu1u\/n+AqXbQHYwvrskX9qmD6BDtChuI2f36i5DNyXHNbP6X+z0PV63njfV1lCHhAzCnzpgOU6S3kxl+xtdlvsM\/YbjgGP9PXPXPCaKSUZs6ZKIy0FGbC45IvrIAh1RuNDWWb3MhJ43W1rsH","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB39D9AAH4GIqAKAAABdMqwGqhiAbtWR3RpNJT\/BlAYAfXmCgAAFwMDAErBEp+RCRmvW5q4nPBTjPrqPYQrN9e1zcJm+MqN86VB\/wtIDIh2ZQ5sK4X7Vs9fqI3xfyVjYZ35sRtlPm2QPgJG5LcqIFMzbI\/mRQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":341,"pkt":"ZmZmZmZmRERERERECABFAAFHExJAADYGSv50yrAaCgAAAQG7qGI0lP8GVkd0uFAYAfXWpAAAFwMDARqFYRpHCv0AuYeeLcWXhS8ONuMlRzWz5aoHl+kmWlPJr2sxhtaYT917kvAauPkO3Xp9XwO8snGuMzyEoHdydAsdyAanazZQyxbEYluhwMQbGYriIboZP3S7badMMxsJufZ8Q25ly6DcSMAmG+PLujyg89TQX8lai4R0\/ZmlA7qDt5\/QPsmkCsaP1t8nij\/RWigU\/0rBUIqW7rxD+YZczlQF3fE1IixlK+7B6vrvN4Mp3kB7iECUJJiMJMUyxxFWyEJKzCXWemrk6fsykLQ+3NEBGzjGNnYFwbVQkko1sKIp0qrEQnC+dPKzfSb\/zc0tDtDzQ2sVLFeVNpnKTza35aU6S9smBxKDSYQtP+DqTkm7iOGDkYVjmdNzVrU=","pkt_caplen":341,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":341,"pkt":"ZmZmZmZmRERERERECABFAAFHExNAADYGSv10yrAaCgAAAQG7qGI0lQAlVkd0uFAYAfXnyAAAFwMDARopwY94GQDXgmzDL+r3w5LldiBN+naTEvhBSahoFBRYB0tiQYBeY5D1QY733PibtgwaCi\/a1X5wand8K2Io68hslErEKp9u9APeYs4w+RQVui0rgReilpY7P54jxnzlziedPyZrJA3PDURTwoGyPqWRm0mv9DqWynyqtyLIHwEKt\/\/f5S8fOIjlgY+AG9PSkgZ5NF5t2thNqHImY+5pDyWJPfLQtDcZKju1ChMkHL8b3Ht+15yr7zQecM085LzHCRp4ouJ015qQc4Qp+ynroU8OEr6W8IZ4Hf4NDSAfDaI0bjyDRvz6a55ezwcsq1jZ3ycvkf7mlwd2dUqR3YLza29eKp7kbK4J8Nx\/HJTeLBzS32fiGuY6wtLTyLc=","pkt_caplen":341,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":138,"pkt":"ZmZmZmZmRERERERECABFAAB8ExRAADYGS8d0yrAaCgAAAQG7qGI0lQFEVkd0uFAYAfX5rAAAFwMDAE8depdqBhD9ETbtYMDdlnqpiyyBC9BB37c9LPAGl3O+Np5WcGSeR3Wm2ysJP5BzartGtc0ECkkGy2uXbNzjIbxgPEGcDKO9xZXTUDwZn6LF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABH9EFAAH4GIs4KAAABdMqwGqhiAbtWR3S4NJUBmFAYAfXl2gAAFwMDABrOv5D5uEFtV8rwdZASpQ0sp0s7MdM7WrOPqA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0875{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":410,"pkt":"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","pkt_caplen":410,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACR9EJAAH4GIoMKAAABdMqwGqhiAbtWR3TXNJUC\/FAYAfXmJAAAFwMDAGTnU7+AMqNhEenTXEcWxnfetx7wQe6kiwvqtk147rxP0Z9Ir+YBaglmAk805+lm9FAIZGXrw7fAtTVj6fS6vSknrDIlPMEWs3ARiBcNH\/SW411Z7u\/nWpxsXLvDfU8T635pX+d8","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACW9ENAAH4GIn0KAAABdMqwGqhiAbtWR3VANJUC\/FAYAfXmKQAAFwMDAGlZefRuBILhCa44nOQseZvAsQiGp\/GaIQOPhH5d9qoTVY3e\/V7BxLhHxrEUmNpn\/fgjQH5YM8B5ugf6JBLlb1AHH5glyGJ4Cph3RmHdM6pJZZcRVHlRUuhYyr7qtZo4Gx6TGsVJ86U3szE=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLExdAADYGS\/V0yrAaCgAAAQG7qGI0lQL8Vkd1QFAYAfXsZQAAFwMDAB6y6866gsVlqQ5blx3VUSPxGKjLjp2AbFxiT6ORdzA=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739374,"pkt_len":386,"pkt":"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","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739378281,"flow_last_seen":946739378281,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp"}
+0784{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":344,"pkt":"REREREREZmZmZmZmCABFAAFK6MRAAH4Gn0EKAAABVQVd5uaSAbv2ZmEwaR3\/oVAYAfZ05AAAFgMBAR0BAAEZAwPCcBaP\/DC8hVoTSokbsQvpjhaLnYrt7eKsiMQ8EXb5AyAAGOihE6CuqcDNXckkTdE7CmzbbGzUcC6GWkBVFb5CcQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACqAAAAGQAXAAAUaWJrc3R1cm0uc3lub2xvZ3kubWUABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg6FKiZGfISPafy0Na34RI3z\/9T8Zo5Ona0mhcVKXwyTI=","pkt_caplen":344,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":946739378281,"flow_last_seen":946739378281,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":310,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":310,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ibksturm.synology.me","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0523{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":153,"pkt":"ZmZmZmZmRERERERECABFAACL5iJAADQG7KJVBV3mCgAAAQG75pJpHf+h9mZiUlAYAFOUtgAAFgMDAFgCAABUAwPPIa105ZphEb4djAIeZbiRwqIRFnq7jF4HngniyKgznCAAGOihE6CuqcDNXckkTdE7CmzbbGzUcC6GWkBVFb5CcRMCAAAMACsAAgMEADMAAgAZFAMDAAEB","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":946739378281,"flow_last_seen":946739378310,"flow_tot_l4_data_len":429,"flow_min_l4_data_len":119,"flow_max_l4_data_len":310,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ibksturm.synology.me","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":60,"pkt":"REREREREZmZmZmZmCABFAAAu6MZAAH4GoFsKAAABVQVd5uaSAbv2ZmJSaR4ABFAYAfZzyAAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":445,"pkt":"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","pkt_caplen":445,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1125{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":599,"pkt":"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","pkt_caplen":599,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":128,"pkt":"REREREREZmZmZmZmCABFAABy6MlAAH4GoBQKAAABVQVd5uaSAbv2ZmPfaR4NfVAYAfV0DAAAFwMDAEWyjOcFIgR35VXwL\/2pOJJEVo1EdwWyNxifwRg1XuiZYluuH6N0z2FnbAj6G\/dYOr+Uz\/gDshK5lkYbPFMK07JQhMRi1og=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+6MpAAH4GoAcKAAABVQVd5uaSAbv2ZmQpaR4NfVAYAfV0GAAAFwMDAFET6wzW0O2Eb4d5ii3lgVgTtdp+pOnhTKhybIKby0ge5fuO8A3Oc4Mv\/tXgs7UBgWg+T9mro+2mEQIzywXkJLV06fbVnr9QCGgSH8i\/d6Qk1WU=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADY6MtAAH4Gn6wKAAABVQVd5uaSAbv2ZmR\/aR4NfVAYAfV0cgAAFwMDAKsyL5CpEcUWeL+2lqcne5fd0ttHCEHiW8SKCzaf4ELSyEiAUyR7UzbD+pGS5gH\/KISQxTbsh1lR3ue3YmdZqA4nvhBi49qqUOsRGTY\/0kD8HK3\/fDoHgby2MwAXuc43Bd9NUF7PJYaf3feOkkIagzCsrtF+NBh5Cs16EmcaTt3q0TXjCQzWFHu5ntk+V+dMXBQdLT\/5h3TAJufN43sm4xavEachSd\/IZ1Je\/rM=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB36MxAAH4GoAwKAAABVQVd5uaSAbv2ZmUvaR4NfVAYAfV0EQAAFwMDAEprZ96vQSue6bErv5h0pL6Bq7cMxiUceeoXwYvgYJacAK71iT+6u2u+NTJp8XhbBpVefg9VPnWweHs7YuFUvgTklWMO5GKxVclWRw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":365,"pkt":"ZmZmZmZmRERERERECABFAAFf5ixAADQG68RVBV3mCgAAAQG75pJpHg199mZlflAYAFNNNQAAFwMDATL7AkIEqXKwRVlGGs9Sz1Tjd5KZ24juicH5hkQ\/GIEK6EH+Ie7UPgDDdBMN2Thi3atLzH7yNUQgCj+N68MO4YHrlzVzGBuNpoEKfx6OLdTItHqf06ZKfFsQduoLGN8mOVVjgQZuatRGSJET8qjiJJ2NLdPBzY3lET6lBJ7Cop\/jz7RSddd1D9hO9nAhPYtA\/iH9k7HsHc8ELIXuUwmJyE2pgT\/KFulIWYkwxHviUhhXjsK1X8eSzmYuJ4yxlme4wdmCSwdc0+AQLi8DntzuLy1pk0fKIanZAX7+izcdZE7Jc2Ww2NfzSdF7hJxameEgwZDCHC3EmD7SocF5PQldegCq5nDx7AUD3Mm0KophPKY4dhX5kfAkvAK3Rh1jaqPQfay+dN49FMWT7ulKwHVy0EgdbNs=","pkt_caplen":365,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":365,"pkt":"ZmZmZmZmRERERERECABFAAFf5i1AADQG68NVBV3mCgAAAQG75pJpHg609mZlflAYAFOecwAAFwMDATLvFn2dCHpX5ucAb60\/bust1dF4G0efxnH\/Ie9iI0zRiLlB4F7RHnYdsRD+gDXrcCgEcYSd+eq6qrEY7zZPOSeWNMGdfP1yZ\/+a4jZTpYfLQg1\/wmhGiIjweUwOFipd2GZGk4yBoXHYbC5\/rIZO2ylpFfwrLcIVNOwrhGb6oe5i4uEwijqDjc36MEJy9Sj+yjaXSSKDdwCCec30eNEiETJhyR+Jb6QsqCV5zD2yWL730sPIWV+9PWxxFzhcPRsV3jPvl8AxHLu8CSujyHjA1twKQp3hhHDvoQHnXSML\/5AThuWBdNCPwK\/dnCGMYTy8NxPNABaz5og1l\/mYTq8teV8Xur7ai9p6Hm7+9pv5MENUWf6husIDCKq4yVsRH8jhdZCifEUReGYd31ngSHcz9O\/KC3M=","pkt_caplen":365,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":138,"pkt":"ZmZmZmZmRERERERECABFAAB85i5AADQG7KVVBV3mCgAAAQG75pJpHg\/r9mZlflAYAFPxtQAAFwMDAE9iFvd+NSXnn3akoG9wS0pu\/nEwPEZTzjOoUC7LcJkPFKktQGRfkVZfGjUsiAXh7VHiXv+17PPH6j\/Z6a4+gnh2sfbG9SMbuK5DsCclqYjs","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABH6M5AAH4GoDoKAAABVQVd5uaSAbv2ZmV+aR4QP1AYAfVz4QAAFwMDABqjGCxcM+TPK0TxPC54YtVIhaoXfHJm0O1RLA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739378577,"flow_last_seen":946739378577,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp"}
+0776{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":337,"pkt":"REREREREZmZmZmZmCABFAAFDLylAAH4Gh5EKAAABaBwcIoO8AbvZKqUSoyMYWVAYAfZGMAAAFgMBARYBAAESAwNktN1XF4bqrby0niN\/MgT4p6NPXKBlRwOJCoza94pvXyD9DZHEPvQMzjP6pbu5TmyGbnG5vDXlt6MJFI6XifT24wAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANanAudGlhcmFwLm9yZwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACBNe3CKgugpSU\/ahaeKXUN1ypv0O\/7wv4rJDS1FbyCQKA==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":946739378577,"flow_last_seen":946739378577,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jp.tiarap.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+3778{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":2557,"pkt":"ZmZmZmZmRERERERECABFAAnv8ehAADcGAyZoHBwiCgAAAQG7g7yjIxhZ2SqmLVAYAEJO3AAAFgMDAHoCAAB2AwM5\/Tpf+0rVAVLiqp3AKzeP0oc5LUJ7LbPa16oj3TgNDiD9DZHEPvQMzjP6pbu5TmyGbnG5vDXlt6MJFI6XifT24xMBAAAuADMAJAAdACC6HV5GLKVmM89uM3s2SIWu43Lfyhq5unw8YJ6WUfrNYwArAAIDBBQDAwABARcDAwk9PLTYD+JT2QAppt0TUbAwAmxAstQCMsQy32ww9oSEEAAMGSMNt+TTdp0V3tZ3ctmeFKC8drVcJHMoKPW\/gLMtyIUmD\/3+eYMhUKtI+3FRz671m\/FiCxQ+DYhEAA2djrJV7bAD8riXyaqFyW2aaJF84flOMuq9DLwOUI0IypM1HnMNVT7vNmCordbJ4vYfoJCHZ3Jdxa1PMxflxUdqb7t2xbf5y\/m1Lgj+QBUEN2VGq3ZK1ktt1GgLlt5OMY6q\/EMncuhg\/OHccuz87CSxEURWL2O5XG3NQ8ZSkyDIF1XtrmR6FGXAhlzN0GIMFD4mIZ5QqyhyGprKsDD36CWqaTOR27WUIRMeWgua2kpjr+elVVRiIT0yfyvShMeR5KvvMj5AG9M4S4\/qWWxJjIv9qLfYm7RWSC4r34hNlFnFlqsqqqzzh\/BxMvV1bwxfAaqA1qBideWKRVA+7EuN95c4ue7X\/hRVHEx3iQLqTqKG9s8vcXeE42KLZOgVl3B7xu8\/i92\/WkhbHAp1VaoXVrJw6GLiISb\/po8DiOQt5NIdGX5eDQSEZ7O9baKasLWzq1YkwfZijF3n9KVs9qv2KSy5IfvS0SD4T0T96JowaLvO1lvBNbG7CindkMAn7au9+n1sxBnSgPOEhxjP6eP7I9klViNjl15nUFM6o4r0CQuVxRwVYjFh10tMhUtqr5ufjJtftBeIT7Z6ffMsMrzPdyzkIvDM+swGXo7V35YzVo8DyoBYe9uM0JJnrorf04OKftnG+pjuV1J118k\/TcF7dgWMascYwrYulqMRqr3vNGGbqZxylwmKp462M5UtGuo+qerBWSrRXWS6eh\/Pd34MrDX1VmvCOR23Z07RB6KZ9U0a03sYPKhsU\/m8X7Y3lJg3mFbu5qAjYzD1O+cD4Myf40iIoCP9xcs4bu1pUmgjVbsp3ut86GCDAgM+2h3m+dYO91dTNrC6JdnpsdKfoGqobbC1Nd6P0Kznfd6xn\/BQDvXNQHfd3IPzPYj2FRyDUuFDyWgT\/cwlGc7O60WUydzXXvs9ttqI8TuCUJYd1Ao8xx8mAgIvrwtyiwJR5QZQxYq0NnVo97JO1hRxuXJb+LTsywktm+cb6647KFCAIE22xi+EiXjOKZOlKgY\/++l2PKcbQh7+iHITgTYo09PyNcnTJxUwLKCZUcpj08uHLE+si9w6kmA+pKFDGKHD2OQi0\/dVl+2FqCH2+A3DCa2Gg9EWzElOrJ9mp3PsOzxGAh1T1616sYT0her6SVuXlhCGP0slwtRkTfN5tnJIo22tEgWtQ+b6y1PTsvRTouR9DpgUBw8BD3g0lRYqf3KAJIjUNpSvsRMGe0P3S4KCcJTz19EnjfZoP6uX+a1+4rjk2AihvF76LGF5wO7bsnmmIDYTvndhSZUKAm3a49yHTGG7gVwYkqmq0TRbx3kmFRXEBuvlULDIz+RlQyLwuJX5uRyHubvUf803FCAz\/4a9pnE6WEDc+zOoXHErWhAfoc5tjJI1gMxGX8U3yJwrwEtij2gQTn0Bbv4+6DXg8iV1mRetvz2V395BS+h9qVm0PJky45RjI5FxKVNW8VUHbBkrW32Ln2Pm3mojmUt+Xsx7zInkOkVoS97LxHGe13JTpikDPPGgpjpEoHIcQRKqtRb0XznaWZx01cfmn3isfcOxCOvXJUXQwHOBr0ZOeVU8JyV5j86F3c2x16THC9pMZadmbjMRbWkSLTw4DMHNpPKhS6WbcQJhxPZwfAVbKEjktlF0JguUnWmRyDWlD919TvF+XWK\/xSop+ME26vjlWYdWryJvX71XiN34ciEg6jsS9BSYdT6j+C8MLHQApTVrKIlUjg7LizXHOZ\/8TbPIjDL1MmbwanCPsnz+x51R4gaxLum0nLoSL+ZmdQWjq\/uyo2YE03WUuDCwEqP451PgmdaqLRPfWLB1DwCAkXZchOxevuMOjyvWV6dC+e+ksCIkxwJmTgcBQXwfuBwje22m5Cj2nv\/zq4aMsV7kiFOS1VcPYLEbw+c4UolvdLrBBCbMxCQZeGhjAzGdsZDuX\/6sRIGIbuHAE8nIh+KJ0joM4KoZNtLXSA2HqbNN+kRQ5gTFmAp4mqAOgsHxAv6V1xCZg8P3MEffeog7NEB4\/K8wtwtgVyjvZaZ4E5jbN5Fjj\/jqK88SEXhkPYnN+on2bA\/r\/BMBIaoCajkogUyGLoyIPMT+pBrWa+wfZKdLurwPxZw+jCxKJC0\/mmFBL81N3ktV2QA+uWulN8QPCd7cD0\/Hjf2QklIJga5shMEJkHY6px3Tk68O3abNmIreZ6S\/N71agsTVbVTSaRlprW4p5D79LYThW+q2zikyKF2eG4VtVQ1Z087sY8sCBmmZG8ETPN5Xq0TN3Q1mXCkwjS9y4DvkEf4d2VKsFN6yj110+kONDzC8lVgKicr46oqIhZ9cyUDwr5+MuFqHiF2KMvJx9XA7v9+a265RIEavlSRTRm3PXbeYNOWUADrJWXjguUacdKmikyCoiD9vRp7ll6YxsV5jSfRT\/9SmZeNE+aTDy2wakB7qY1oeeLE4kVchDyQa22zUAtVHOgOvTZInJYA\/takDFgegJnQaYWISVIejbCOHLLvY\/LGAj1CyqRrh1\/LJm06TJxFQn5cMNb5SSEJFNyxF75PSPT288zWx2Va0aIhDIB+vku9QlaiV4ac8CwDTFNaqbQKECa5ibv22eB002L0jyDWacUoUluFvwofh+CTE377hEPfvjsRjX+V3P\/erPya8F4fW7JQkFJgCrTK1VaoDF64ZvLzNQJ5aCIC3Js6D+sD6g4jOpLHGy2zHMlk9wTN+yBybuSBsrJL9uS5j3JgQRC167kARpn8\/3wkN3\/lvlFPoVYVhj99l\/NeW6y\/YdomeNnyw0D7qas3wz1t0EQFticUf9LLfRMzRHEf20AYOoy9Fonct0XWUb6fLDU7CQJTqCHU8Eiy+rgD2t\/dxE4NlpfZ2ZSbDZ7QWFdftipHKlR4nJqLL0sU6kjZ8SydsZ8oAinHCIV9v5PNYgUBa8WbGYb2kgxJMSN3jbYzsoGwAsbdeAghc0S7LurZvISJXwa0jBqUzUHZmweZXCdDnfDiPc92KCXG9hA13VfXTouQnTd0zyBwPxIcvLGDhAu1CCSmBlGZrOEjmOi1\/i4ug\/A==","pkt_caplen":2557,"pkt_type":2048,"pkt_ipoffset":14}
+0828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":946739378577,"flow_last_seen":946739378607,"flow_tot_l4_data_len":2826,"flow_min_l4_data_len":303,"flow_max_l4_data_len":2523,"flow_avg_l4_data_len":1413,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"jp.tiarap.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0479{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoLytAAH4GiGoKAAABaBwcIoO8AbvZKqYtoyMiIFAYAfVFVQAAFAMDAAEBFwMDADUQNuPt6m2nY9MgXiEHZRB5L+gDtuMOMxUUfy82Uox32sOXoFpXHp3NUSfU3Rmr6gABtUijkQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+LyxAAH4GiFMKAAABaBwcIoO8AbvZKqZtoyMiIFAYAfVFawAAFwMDAFEdfSV7R53tWPLwbpLAvpYZkl19\/BcxP+TDWyhLaoxetWjrDvoUAtcNmsNiuCZnkdjB+V3dT5jW3XlxFbDY728t\/WQMk1LbxBUFh8jkvOtgrcU=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":223,"pkt":"REREREREZmZmZmZmCABFAADRLy1AAH4Gh\/8KAAABaBwcIoO8AbvZKqbDoyMiIFAYAfVFvgAAFwMDAKSMB\/dBKj3UpGjMiH6\/1VnkucRlgJJUh+qKTpK1hnLktIkXTIZNK771WiAD8CCQWY\/50puGvx13gF6dxepR2eZrDXtNRM3+WITv7yAVM2zLslCIU6mXHswTWezDiNss0zAMjO5iTucBRew73pLZ7zSDttwfLKSZX3jAzQuGsed6FSQJLBSwHHVgAkaiewtxnPDS+tpjzWocy6dfvO6T067l7AmVDQ==","pkt_caplen":223,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3Ly5AAH4GiFgKAAABaBwcIoO8AbvZKqdsoyMiIFAYAfVFZAAAFwMDAEqnBbrKPIIn+t7ho\/EJI6ooJTsZXUy6sZj2vPty1Ajh+P+v\/\/8I3ccIXfufkFrd5j3HhOe0hGYW0KtD7K8WDQOXzERWE0Dms8Tt\/g==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":116,"pkt":"ZmZmZmZmRERERERECABFAABm8etAADcGDKxoHBwiCgAAAQG7g7yjIyIg2SqmbVAYAEJpvQAAFwMDADlSxhp9h3L99k1aW1VZeD+FvSFQris3slrnjbIotlR0wnSMUoBcXrohR3EM3O3TdfRztAaf4o3C1KQ=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHLy9AAH4GiIcKAAABaBwcIoO8AbvZKqe7oyMiXlAYAfVFNAAAFwMDABrbAC9n7UMI5tYKjSEbIvSP+d2JrMddG4nMjQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABH8e1AADcGDMloHBwiCgAAAQG7g7yjIyJe2Sqmw1AYAEJecQAAFwMDABrBF3y+\/oH5OyHYkE7i\/E8FaT8QZJRahrdmmg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":580,"pkt":"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","pkt_caplen":580,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABH8fFAADcGDMVoHBwiCgAAAQG7g7yjIySL2Sqnu1AYAEPWQgAAFwMDABq9UoJMXpsU9zJdogrBX1uG8TGcPZR4QnQUtg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739378,"pkt_len":156,"pkt":"REREREREZmZmZmZmCABFAACOLzFAAH4GiD4KAAABaBwcIoO8AbvZKqfaoyMkqlAYAfVFewAAFwMDAGHOfFHWL2qNFfeTIVveCzldmUmzBcmkoc3FqqpldL5Wi5K67j1rTDWqRop+ebrnkaDCR2BUMxDTfYSP8gxd05PIvEgYOxRALj3JJh5+Nn01rQKkgU1nPKg77scHDPZ7Nsmf","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+1001{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739379,"pkt_len":504,"pkt":"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","pkt_caplen":504,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739379,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABH8fVAADcGDMFoHBwiCgAAAQG7g7yjIyZs2SqoQFAYAEOAPwAAFwMDABp2DqgZV0Txz+XGhszRzilLqpOniLTFqPk8IA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739379,"pkt_len":187,"pkt":"REREREREZmZmZmZmCABFAACtLzNAAH4GiB0KAAABaBwcIoO8AbvZKqhAoyMmi1AYAfVFmgAAFwMDAIBw+gd9vJeD\/x8X5Xd0lYOO0wTp\/\/7OmS\/7wdThDKO4T2Gvhv4LE68i5UtMPxdw7+72aREJzgTku82uWhfzjH6MBuSwQZI7NM2yCK7qMauc56q1AMWz5yTsz5cdbPAp7C3Nm4PvKkfSPPjHAa1HlSg\/iu0oITjeQnMELwjuPGchpQ==","pkt_caplen":187,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739380697,"flow_last_seen":946739380697,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp"}
+0782{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":342,"pkt":"REREREREZmZmZmZmCABFAAFIsgNAAH4Gh+8KAAABAQAAAdIqAbvH6z5LSWNp6VAYAfbC9wAAFgMBARsBAAEXAwNccnLckexdP3Wz7tsKiknbwUElui2FZGSKODu9LnFkjSDCKDL2dIORj+O\/DGu\/+ddISHKLc0yxsHWSEQ0iee1a7AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASZG5zLmNsb3VkZmxhcmUuY29tAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIM\/CjtFE6\/BfV0qVOcMMUIig11i56\/tpHaQ1FlARye8w","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":946739380697,"flow_last_seen":946739380697,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.cloudflare.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4252{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":2892,"pkt":"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","pkt_caplen":2892,"pkt_type":2048,"pkt_ipoffset":14}
+0828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":946739380697,"flow_last_seen":946739380725,"flow_tot_l4_data_len":3166,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2858,"flow_avg_l4_data_len":1583,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.cloudflare.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0481{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABosgVAAH4GiM0KAAABAQAAAdIqAbvH6z9rSWN0\/1AYAfXCFwAAFAMDAAEBFwMDADVke5XeBLKUZMMwsdywo3cwWM6dcwvPxEIBrrKuQwAVECVGBCt8L\/1vmMSczXlzhvKSsbEzJA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+sgZAAH4GiLYKAAABAQAAAdIqAbvH6z+rSWN0\/1AYAfXCLQAAFwMDAFFrhWmS7Y1bCOIeKODPz+I7YfqENoT6TMuVqwyG4G3SX6UxpkGUbLXAM6aI3cio6qRGa53fwYiMMoMH2Pgmh7dvXF8VRjQEWsyymfdbjhOkNcQ=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":227,"pkt":"REREREREZmZmZmZmCABFAADVsgdAAH4GiF4KAAABAQAAAdIqAbvH60ABSWN0\/1AYAfXChAAAFwMDAKhknTtbWPjKRxC8RF8H9CkmrA+Bk9ZccxNWxVGeMn2xlgfxJ+N\/oa2lauG31Sz2Z1dteZDbkTjSzDgqVARVb0wPo6eAtwO4lFO50Slr19o+QoMq7p+H6F9zmQss+aX8BSdKO823UvcZWjEYIciGcgJZ3gCCgxZcU44M0uB2tLCuz3HkSp0QwPOmeFciqWF26PpPzwsdHrIS34z6Hc1U7Hanulmh94TGEzY=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3sghAAH4GiLsKAAABAQAAAdIqAbvH60CuSWN0\/1AYAfXCJgAAFwMDAEq767GCHBkhaHbAdlZm3WikokYp7v4zgQu7Rm9I87ZE3Ms4u2kntWki1\/MsfU9nA\/21VXFyl+Xnto1xjafwDKCgQrQTqRWdmCH7Kw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":116,"pkt":"ZmZmZmZmRERERERECABFAABmVjlAADoGKJwBAAABCgAAAQG70ipJY3T\/x+s\/q1AYAEKtOQAAFwMDADkrUPubGw3c8lgbV0MtCdPLTgHvJBHR4\/jXPhkhAzyV8w+3SbNR\/LOCcxc8cVbrgbJoNWq\/4I0vIR4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHsglAAH4GiOoKAAABAQAAAdIqAbvH60D9SWN1PVAYAfXB9gAAFwMDABreY+yQL4JOlNgzAoc8Dna7HxE4Kfd\/50P6NA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHVjtAADoGKLkBAAABCgAAAQG70ipJY3U9x+tAAVAYAELIUAAAFwMDABoDdKRRgvowIzBeiJ2A8GIF6nO3qX8OLZmhvA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1335{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":752,"pkt":"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","pkt_caplen":752,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHVj9AADoGKLUBAAABCgAAAQG70ipJY3gWx+tA\/VAYAEPPDQAAFwMDABrNXLyKcHgLTmJsUnEUdkyk+ZLsBWADmGRapQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":160,"pkt":"REREREREZmZmZmZmCABFAACSsgtAAH4GiJ0KAAABAQAAAdIqAbvH60EcSWN4NVAYAfXCQQAAFwMDAGWQNEaltFFGGaiTqD79TovgQpwacOL4LMC7ieA98g4L9py0YcXlrjN+wu\/teafWE\/UED7VJTR01zH++gpDEghCkcQgh7EQho7LlvWySzL3XY6qTrMToL0m\/4NMDj1u7QBer85M2DQ==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWsgxAAH4GiJgKAAABAQAAAdIqAbvH60GGSWN4NVAYAfXCRQAAFwMDAGnag5mpGQgyzK72rYLgzjTgXEFF7\/vyM5TeCE56xwsqKcnLoJ5Rnj29UWbQvKgKVIeHXwFZTTBHNy5hunyZRNsfNL\/lBY7OHjRJZ\/tbRyLFVy5Rc8aufiha9M+GIYlpfxX9UzyDOKSKPjo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+1144{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":611,"pkt":"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","pkt_caplen":611,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABHVkRAADoGKLABAAABCgAAAQG70ipJY3pix+tB9FAYAEPaZQAAFwMDABr+tfnjAL4t\/Y1IAjERbdL\/wJntZcUUnRUN2A==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739380870,"flow_last_seen":946739380870,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp"}
+0774{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":338,"pkt":"REREREREZmZmZmZmCABFAAFEC7lAAH4G5eQKAAABLVocAII6AbvzwYfFjc3Z3lAYAfYLTQAAFgMBARcBAAETAwME0sG+tMqbxpRl1DV8Z2dnX5LfzpIiHTt74xC1bVbZqCBq5Am0FD9Ax\/Z0hd9jpGF+x36pK3fx2LqXRJeDdYghvgAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACkAAAAEwARAAAOZG5zLm5leHRkbnMuaW8ABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAghy6XniNnPGDj9u0r7tzchu6tmfTKqCDkZge3YRdGMjI=","pkt_caplen":338,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":946739380870,"flow_last_seen":946739380870,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":304,"flow_max_l4_data_len":304,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.nextdns.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2362{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":946739380870,"flow_last_seen":946739380903,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":304,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":888,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.nextdns.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2304{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":1467,"pkt":"ZmZmZmZmRERERERECABFAAWtAxpAADQGNBstWhwACgAAAQG7gjqNzd+K88GI4VAYAnlzfQAACEkFkdj1Us7HE6XsQGxneQX\/pTaXJNHBzTBwjbjFH2PSLY9gxHervwko9HwLHhkgWdiRotlJENzv3dIlV0Q25g7GanzLzAoq\/bJLnF1bxRf0nf8R7xwqHIiEyWrnrfJqukts8v3m8MMBnkDAGd5xOmtynEVhFSJmjPZeWlanPH3W\/gPE9eVpcr\/bC8aD31d4wHJftv6KUYCRDzDXbCSoL\/6F7bgfENCEavhYW2LuID8zVPN+yKzb3WDD71Bfm\/QzlUMFQuZM5HbG0c7uIAOOAxkawVYPNiqL2TFCk1ynXFgmF4gXvbL\/HYrDLFRfjW4de\/NkjjSai08L+PfACua2q5oTvt2qGJPeolVEHsMmZEjEwazNhDwGqFKG5OP+F531r01cH7BTJcZ05QE7qXBrbvqwdtdoGPvG50ZEjeoenLq9i4bYfhTR7gqdrp+nT5HdXBlwZ3BA7TNBvRO28EIkDbwnbkKR1uAOgeHpmVvBpmpiphn4DYQZvVFKBDcAp0CgnjFhQ7BpU5nrco2WQPx+1Dj+wVwuk8wQg4nsuaxF9uoh5BJPTUJDd+oGcKzJnMyQnjiAungCkABFhOHccfPCI4WdjBjLMLNqgoxHw6DJHYylEKtOB9OnnXDF2J7Jvo9Dz26D1KrzmXsDWoLDC1fC96J8yd93fYvTZHskQxfY50BQIAKcBIdr8K4+MowCcaLlKXgQ2BvySvU9B5mJVdaqmTLF1fzesL+WRRK51q7IAwLh77wssc7jt76mm0H3PAWysYvmp\/NCiSKfjKaaLkm9x2NoEkekjBVCT4zJZaY12lyFWkBUvQQdolUu\/1tiRf86EnZ+MpspCpIhymi\/IUp68M\/Eb+2ljNKVmV1Er+pytZKFdhm+LxFZQDgPvwZts5tJVArrKTXEX7mbMUyNCFK87rJIQtF3h75H2QQdF8Dne8XAGsXDDnswycmS8W4DR2ei8Mvw6EchukCH49+5iX+zWw8yLNfbuXrdtwpsTWibehpgDGJwJ32GJ3PUhcT2O8ckRkT01hA4OhJ5s8FVi9G4sK5PSDUaW\/FVD5mXCOlbG6fI8ep93Cq318IKEa9gHWkRIcGP1KNeJ0vqPt6W+fiprWcAT+y38\/pHS\/DIldwWXxoakgp8kEgE10+BHsdUGoLtM0vHARs9JoXziCU\/gwCe4xJoYT7yIuKPLoyyOJzupzLZV+Yx6GthfYTU5x9FRZbuuSu\/4e+BWK3Ph42jg8FFm3MjO7iYnNl4v1+ChQKVR7XODNZWDH3jwqcZ8qhbkD9u5SI6j\/BA1C0rUPcBjh1+6XjoNgW\/MuFBBpUx0b9PcVFriOAhMdQziZ17xbnHnF7nwzD4ltsyPw098+Y62NYg0g7ZzmYgr7Bp\/OQu72rrzto9ZurPdNMKCU\/kuUSQfJNRXnpCKpphgwF89PQmt81ZhzDDg8jGUYjA+eCwP5b5c3W1mHz2rbpTYaJ5WAEPawg7kcD\/0daljt7SoSzY0j1SW+z8PqelVSwUwhQf5v+dUBJntKDTvIA8dd3\/P5RebSAS6fwWCMpEa2Wpe0EbiTKfmmwomuAMmkjN4HlloVMdOTeEonHISxyYlgXipaeXT8CPFbuFXE4ejDU2aTkR9\/ZIbgoZdx7IXmaK+NxS9KICVTe0LPka0QmobSr15yArkyNHaP1EjswXAwMAYdZTBGnK4vcmbufHHRKWT+kPKyQO98Boq8AW86\/7q3c0DIh4T2TuGPAeaW+ueW75g7BJBBU7YuGFvnEEgi07qTSBXDL1UISZX8PwWOHA6mln36hZp5MmWU+JESIy2cQgYeQXAwMANQq+Suu4\/zFTPT1s4z\/CUiKzLUAWytPdwzfRZmXCp50PDxLOSYvzo75EbO+96Njs+ccRggY7","pkt_caplen":1467,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoC7xAAH4G5r0KAAABLVocAII6AbvzwYjhjc3lD1AYAfUKcQAAFAMDAAEBFwMDADXqnL\/aOrn0ACDUNs\/5OlNFpIHBA+TE3F8+\/Z5EIvZ1VnRDRjwJhogJkYt\/Q3H0b0fjAhpU+w==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+C71AAH4G5qYKAAABLVocAII6AbvzwYkhjc3lD1AYAfUKhwAAFwMDAFFzwYDG03zIsCu775EDRZ4OSzL00weZVbglbgfpbwM8U7J+7uomYsjKj6MjKfVgOgHkAPvTphVgv8ZNnos8qRet2Hk8sVVcepl6hWnfJr3ih7o=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":229,"pkt":"REREREREZmZmZmZmCABFAADXC75AAH4G5kwKAAABLVocAII6AbvzwYl3jc3lD1AYAfUK4AAAFwMDAKq52qmpKIMTU9DsgWdqIK7afq2FM0NbpM7Niaus6XuVyIVHtLOSmXQCJem\/6B6WtQA+HcaL1DZxyysEcf4rL5RBCsmRb7hMYSqlCi1wEW0orrRrhNkVDisZS9HMQG9zM8\/MU4rFnzKScSDlZjxS60U1yQn7D3mfC+Tj5yw7387V7zYgjH4vsa2RMq+OVLofV1o9IklOfRIH5rnN50ZGy6vkx8IFPqduuAKKdg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3C79AAH4G5qsKAAABLVocAII6AbvzwYomjc3lD1AYAfUKgAAAFwMDAErDi1XUYYWaVlCpX3jrDeiXqG+Hu\/N4mntL4jSwcHbj5t5mtgWnGjU\/o\/R9CihGCSpuogFnJCSlkLHNnJxyAHvuBvf8c92WMEoLOg==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":109,"pkt":"ZmZmZmZmRERERERECABFAABfAxxAADQGOWctWhwACgAAAQG7gjqNzeUP88GKdVAYA4VxDwAAFwMDADIbHfrNokcxDuykI4MWnaOwrISZZACBPx3hGwyoi9WElzYJUfs8N4VoelUnY4whXRTRbQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":98,"pkt":"ZmZmZmZmRERERERECABFAABUAx1AADQGOXEtWhwACgAAAQG7gjqNzeVG88GKdVAYA4UOPQAAFwMDACflS5nDr9G0xagnYUwNmZl68p16DhGx+\/5nUXnoi1nYfibYW\/ilbwg=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHC8FAAH4G5tkKAAABLVocAII6AbvzwYp1jc3lclAYAfUKUAAAFwMDABob7MR4aAN+Z7vNJt7WJGMKDZNmgrsmNCFVOA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLAx5AADQGOXktWhwACgAAAQG7gjqNzeVy88GKdVAYA4UKeQAAFwMDAB5KVo6PZikBA\/B7ZhduH0RpFHjWyxd5L2ah8YKshPo=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":167,"pkt":"ZmZmZmZmRERERERECABFAACZAx9AADQGOSotWhwACgAAAQG7gjqNzeWV88GKdVAYA4WVqwAAFwMDAGwmyoiP6Voaj8uxe6bnRi\/rx5ejDxuVNIQ3VET8\/xNlq1I42OUUjfc8rfiXB6cUKvheEHF9EwS1WawGYtLKilQvNqlb0U4zNV6AsL\/brv5swAyAMIT0xOxEqIS\/T5zIsRmFDgU8UclJoeRfb8w=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0758{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":324,"pkt":"ZmZmZmZmRERERERECABFAAE2AyBAADQGOIwtWhwACgAAAQG7gjqNzeYG88GKdVAYA4Vd0wAAFwMDAQlsB7yIRhmBmY\/vv1SXZzhkhlHvNOJM5tBUvUzg\/VsaDJwCkQ9CBIfpygaQ6w4IxZXSStc9ORhCKCRjwVgLqwJjuC3iK8phAqs2VINkkcyWwjZCopzPp7DH+OeIwV4fTOsBa7UpL9pxthM0sOQAB1gOL\/ovuBuZ85sSbJsGkC7+ClqiyEz8Xs\/NaRrekhNCvfHsNjVpJP0oxDSRsuqMlAhIa3Rtkq7M5cdTBzQ1aXm6ebSZAIa6sv0rIyC3PG\/QPmTj5AV5b+CfTaV2LETRjg94tsyaloyKKw02AVvbDAaLs+vJEhkLHHPhzv\/ZC6nL30llEMmLzz692lEh33CTowjmyVMIa5+PUt88","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":163,"pkt":"REREREREZmZmZmZmCABFAACVC8NAAH4G5okKAAABLVocAII6AbvzwYqUjc3nFFAYAfUKngAAFwMDAGgRVXdwoQFkT5SxPu1w7EW8p\/0u7VDqPc9wI24Np6CHAU6sa+HueSFuM3KNdFdDMW4tXn4LXazSJ+hVOe7VdIBWkIJGCmjq\/a0GBM2AD2XRyWWu3pSDv+y23zeCjlI7AewIZ4CU0+0RUA==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739380,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWC8RAAH4G5ocKAAABLVocAII6AbvzwYsBjc3nFFAYAfUKnwAAFwMDAGlsdpEmub0+t10g9q5Tr3vsXAWirmH7TIxUkMmOmRTA6ry3dLoXppmgosG8dB8yI\/3nqYyJ4lrJDIbgJI9R53xwGlp2q4bhy7L3uYUgxnz6KYV6OjO+ud1FprIZ4TijnSiNTGSwgGokadQ=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739385090,"flow_last_seen":946739385090,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp"}
+0779{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":340,"pkt":"REREREREZmZmZmZmCABFAAFGrgFAAH4GLMUKAAABiJDXnsvQAbv3Oz1sep96IVAYAfYiJAAAFgMBARkBAAEVAwNZtcLiAhjzwZoFuSzepzhVh3+I+642bR2Bdc1go+HJvyB94\/ND5pNfeKEuu8RDLRRLZQtcZUnz37DmCj0UC1geOAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACmAAAAFQATAAAQZG9oLnBvd2VyZG5zLm9yZwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACBPoxVI1tXnUcUqsbORFpVub7e\/4DvFTpQM4hnCin1UEw==","pkt_caplen":340,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":946739385090,"flow_last_seen":946739385090,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":306,"flow_max_l4_data_len":306,"flow_avg_l4_data_len":306,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.powerdns.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4606{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":3170,"pkt":"ZmZmZmZmRERERERECABFAAxUg1ZAADcGk2KIkNeeCgAAAQG7y9B6n3oh9zs+ilAYAO0tMgAAFgMDAHoCAAB2AwNC32Ly6HNyagXW\/50d2q6qJAOmShuP86HMxipBKzBmwCB94\/ND5pNfeKEuu8RDLRRLZQtcZUnz37DmCj0UC1geOBMCAAAuACsAAgMEADMAJAAdACBiVzglBWvQOWIt\/inusfkCbeAeDbm6AiXUcYUQ0SeUdBQDAwABARcDAwAgVY3jrnTrJkAawm+Mv8gBTn6zfdywiZ3PkfSROpmIxNoXAwMKFapXpMK700YralL2NJ+2AqPfCUAacni3qdcZUnufsXl31+F2NSHowZS8bEZc4wYIOhESfjBH81NgZUBCJL0cGqDMG7c\/GafBLHylsDncbVfIqhYnumIxgnBjMekzN4Jr3Pc5g1dWYk4XIPvLeMa1AeLFQqOY+unh1DHuo4FV4KfjYjnh7ERuvhffEbloWyMHFdAQi8p2J65FwIVJHxtFX6hmaEMmHATlFHHOx1RIGQmbmA5r5k0vgPGiuUMBe1e8Ay6+kNyhTTutV32hMuU4\/4gl06pCrT6iDU4Fx4eNT+Bo6E12QIKo042tC7Wn8Kl\/KILiC4TaY1uTO0+LE4wVqs5DJHWwykde\/Mpu9moeLZ0VhV6Rnx2ocHW4rczn9gPX5qTiTrDgHO7CKCVp0Yo86Aw2suyeRkNR6Pz2DTuex3RC6JD+6hKlKYjQfx6kO1r8jKEZ8UZCGU+Rw2Pd2IT\/whiiT5Kf7zLPm28Fu5xYAFYob+TbRXBcQ0z8XUJIWzCMQvkjyj\/EBbyfhm8Iz194guweTL19Y3Q2XO+NnAUm9ihjSHpRimJ0Ale\/24shK7Q0gI7NtX4Sy93vR61pN+Zbul9p4+Mos8cFPIfYJPR5DmxNv9L\/cWnYOwtiE8KnRSAYR+6q3d\/0S6rIgkskZa1GGNAffeDtgnD5SVrh+YhdzCWZCb6834ULGghfWcw8DVqJTSeWttzs5JvcUzLfaxv2WQHaWCXuUpmCZy6HgKkW3jxYYWr2tyqizXXXq732dtVhz4LWmL9EHS1WzONzEhrNFQDtpAQ95k9MRPEdXjg0bNse0lpUI4AUqhIkxWgs0j+8YRzV3BBFFrpEwA3Ylhpo+Wbg8IG0hFyThCaHTvj0vN5WKh94GQCSIjO11AtJoS9k0tl5NWJ7dp2n0NCYI25hp41FivaF\/BBZqFxHTd\/4w8k1KmIQOky6ICw7WRykbaqxzUboD5Bq7peIuOsiwZoUMD+BDbF\/3fE\/CVHWoaOcr09A0PaL0PLhUDjARYyrR4LsVfpqkH4CZh+5Jr1aOIJ+zgcH7Gme4o7fpj5Ml+hu\/y+kOOZZN5J0XdtmvZE5w20Osrk+W9YsiLIeYNt9SB2i7LEsIRfsOrVhh9XsJ8\/VF+0Pp0BTxOsC+9Ft0\/Qj6hgm17CCVsOwdD0VhkUWaus1O+o2PGnC8v4FL3kFyyqT6BtubEcffH1AbvnEid+VZXXjMTJvMB6eWAs+UqpOrNnkCEZAK35TZ0tRUT\/0MJ65M3rSS8cnt+LL4apIWh9CenPODN35ZvH8b3XA1lwJHej3o7w4KZBEvRoLt8OxNNvwpgMfHbFpXZIqbODt95v1PnTJxwC\/vTEturbRIFjRNgt+KCX3zfwvULi6DBxiqBmChwECudELdgYVXSzaQF56hOrspt7m7cSP\/bSuhLgvGoeM7hRIXBgEFXWWobiqWKLPkIiUnd3zKygePoMYOZHF1u2D1V4jxKHpRJ6c0k9v9f8PV1\/2cqY\/66gHBBbRV41oC7rjWm5aIoPFQPYH0PovphDScGBnJ6jwAMRZhEh8stnUD5D9slPJ\/emP0c\/PTpb6PEHZyu0Q7qMTKM1bbEpBCcvYFzyVsCvmHuicyOKAs3xMxmCmWm4Eqf7griGXbNKYrhS8laSwuwkSEnXVtwhIr1b+a3aGOTQNdzJzZMKbJeIH1FS5VDDqACuwzlpn2\/PpEcmP5h\/q7H0tPqDs+gUGEHDMancSkknkDjnO8AWIHrv7XSmAw8MzBpM2IwCdCuY2dZXBowy6lZV\/inUY7ZvvXtbP6a8QnD\/\/IUygRpu63NQLm4VeKCFEprpn1cgwz5cL4vjrW8z1Oy+wINHvxXqkotg8FbTmtoSQdi7m2\/uaxkwXGvCE+Ey\/VyskJtt+1lkVPt6gqRb1ZVRQm9DD0JoMxHNgFOAaDrB+WFlvX4dGQvQzwATgRC8IKAuMZ8oKSe0p8HpA+6MvWjcmzVE8kVy6HlIQ+H75lU+B2jVUeDC7BKjayT8YnFAN9VHJiYBcwsc6cBByDnSSlpjY95o1fVD\/OvMoqArUx2Avc07VIGr\/MqkoiuFsBZpt7HMy13Sks4rLBRM4blbz1tgnQW4V9XKGhwXXv\/r\/C7JzoFDKo1O5LL2d9NrS47Pk6pIUPyJaZQjYfdcqsgSPEYWloR+Ff71Pv2pzjT7Sxhw7YViV\/havSqMuVAeVNrx2FMlZ7\/Bjxt5t67OkjvVTbouDt\/zCvvPnjRGuWwfp0n7UEFUPBk0VQxxGTP46k14fFISL3DGCnaRmvSrBlk9oDA6joQ7sLe2wbd3yp\/7JTFG1yDws5hd9oSrDxTaFhT45Qw3wjaIXqpHrDVkIJVV3fSH3u051VvqUmuXNvgcA8QfJRF+xOWpwuJtANd+GaqvaC+iETLzkP5VxYMxDGAjzMI0o+7huhk06Ls+Jf4doAnMQ5xvzlXN0Jrm+66K6cwpPwq24uT0WBbVDSG8a63HdMk9Pitugm8gT5TfsMmkXcm8XvYm1EpxDTSUVXFdXoLfWyXIhhuACKArB7XcNbTOuzKmBQBNDeLFYB1E9Xt4xRs2cOc5M8BTSXsHSPQTYdc21dTZiVfSAP6\/2Gshg6m4bugupSvk5LVq6A3lh9ffmzYt3Db3zvnfSy\/Tt0BCYi48I1IzHC+nCbjFn40UDUHc5XrNCkmhQS1xNJg2qHFTjjUPePEW4+j3bBQRUYXBtmXyjbe7imkVYxn1jKZ8UW4USSgX9QTTgWMboFPNKvAGle0s4p63tKesbx5ZYZnXD1JMoq2wiuX3opjO2N0ancv\/RxoLDDssEhCe9dO3easTHhI9ARvh9rKZYKF6v6Kl1ISp1JmJSDWM7inua1o+4o1SDMyo05cBVGhhMTS\/9p3uBa3Q1+zink\/HkPt7+J8Qdeq8lFck+4f63IssnVRJTPYYtIlJvBDnEIzxlrIFjJvmSNN4lcsRZJPOIHxFfXw8TJRTgsvPxtdi3tSQFm4F+2sukCmWqPEy6giI87MQfoD2C\/Yj2M+9KXDCNq9W6tv2b4CTjfHZU+XTLbVYONSXTzAYgn5lkwz08bD2gqCs44qF\/KSJheO2v6XSQicbKpwE887mn21\/pZ1Aw7fFPdQKOSr+ozmKo3Hb7k8xRc9xS+jbMArySJEwlivY0HatI+S+fkF+iQUSFVepgBMwShL52IjMRPaDyXtnlg9nE04NDcI9V\/O40c8DJA21O6zuYXUndYIEnkJP\/UZOqiU4vEYGHHSxvu9z+OTP3HTmjMdAhSyUL1oGolZq+yT9EbInHY55rq655Oq72NwpUp+JpPgCJKsED+NjtqOZ3sxznqDpY1ghAohk4yNRdPDZzbaGgQemzPXCmXrFUsJTwcXd\/xU2NomnNTP3pmszYNUkgCR3tnkTvld9wZ\/IPs3fkgYPdntgi8PuMGjCH6ME+NhxjtV2MwDTodlIXAwMBGU0t8RnrdJi\/j1+SnvZYpC3oLybUZ0YAwC7FNMEEzD3PWZ1mQcdYkqPO6V4n6ARpcK+AxFYr2ZmYp5VZ6aP4ufUuA8CpPBGwUlNcZ3M2nwocOtccZ2oJCl6+gngVMfWFCnvPyKdJAIVEiwSYCs+M06T9K8Dn7IVtMoEfwHeIvTYluO2bnPQHkZLgVvtx4CODgchK9krbewpUgSyVMOqarNN5yC6WFzhdNiofu8YhqHlXXyYNaQehlZN2BSM6BAq9rstGdYvwLr32NuZBk40ppHqXSd1NL8zbf+k8yuXVg+g2tFIIoJcrHKG\/jMtPDHaZoxXSW0XP9QnmktFPm2sVrC8auYwtvIIcyHfmG4LUFWv9oOl2RWB0AiDdFwMDAEX95TGyYknbRQv3FxTdx\/ySOpsXyo9B3C1mQe9wKL+RuBQiooWFUmPWbB6tbYWNx9OjEFACLxCx4a2G5wYexWMh\/ScbEd4=","pkt_caplen":3170,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":946739385090,"flow_last_seen":946739385124,"flow_tot_l4_data_len":3442,"flow_min_l4_data_len":306,"flow_max_l4_data_len":3136,"flow_avg_l4_data_len":1721,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.powerdns.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0500{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4rgNAAH4GLZEKAAABiJDXnsvQAbv3Oz6Kep+GTVAYAfUhVgAAFAMDAAEBFwMDAEXEY3mnjR52mKqLxIMUmRZZcXFLr4uTi7u4xG7UfhN8KpUlgxkvImJLngXBZJdhlsdOO80qBVROy\/zQG1hjQj9e57h2KPE=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+rgRAAH4GLYoKAAABiJDXnsvQAbv3Oz7aep+GTVAYAfUhXAAAFwMDAFFwNNZDnjPK+shBymQiVBXbt7xi202dOQR8Rrb+yjJPWnLgMbhsBD51RnG9LISVe3Ei\/llN05tBlMIcUdZIzxbBUHgMMlLa7+nN2BwIgI3qz\/Q=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":220,"pkt":"REREREREZmZmZmZmCABFAADOrgVAAH4GLTkKAAABiJDXnsvQAbv3Oz8wep+GTVAYAfUhrAAAFwMDAKFAqHgt5ACD\/Hcnb0rfPawr1OJLN70nlF3dkYhA7ZQCOVewA6hwaIedDAlnDsEzTPRBpJWDv46vr2npo9S7MmryglbookGhf8BtnT5kHpryQnIxzmMUSkMe06vjg0NEJ8B00c40pwt2ffEb9ttTkd+oxC3Whylux+1Us6Kk9rBwv9Fj9VurRmLTFoD8b6q2+TC8GBevn3AcTvwA4+53G6VP4g==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3rgZAAH4GLY8KAAABiJDXnsvQAbv3Oz\/Wep+GTVAYAfUhVQAAFwMDAEo9ZELIeTkd6D8v8QIoaIwNrtm8sLLrBdCLjcuCDoZXFNCR4LkdRP2adcM24qwUkmMZG4b2U9fbWBU+zpiaR2KaAp4H3BPXpOkxSw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1088{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABpg1tAADcGn0iIkNeeCgAAAQG7y9B6n4hL9ztAJVAYAPUmCgAAFwMDADwX2bcoGXknUOywaU6W9U2qrYTraHil2c+jn8X5uXoKe2PCFXZ0z74SWzcb42mshcRGhryOy8YjeTQHKas=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHrghAAH4GLb0KAAABiJDXnsvQAbv3O0Alep+IjFAYAfUhJQAAFwMDABoKhtk\/RqrqG9XBDx+pLohoYYa4CqA3ckWDzw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0877{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":406,"pkt":"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","pkt_caplen":406,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLrglAAH4GLbgKAAABiJDXnsvQAbv3O0BEep+J7FAYAfUhKQAAFwMDAB4zSgzUR2ZcuzTK98bCWfSm2u7Zzxp0+D+pYzlJtxU=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":153,"pkt":"REREREREZmZmZmZmCABFAACLrgpAAH4GLXcKAAABiJDXnsvQAbv3O0Bnep+J7FAYAfUhaQAAFwMDAF7z9ZllIUJYVifkzfTmNZkbfoqBmuSaCnxtztvKBDeHssiwVOQo5nSR6hS5QkqXs2NqvhncFigbQkXSNOHHZD5sGv+1+C9xTFaldSDCLlu0cWZ1cb3oGLBlsyO6ttj6","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWrgtAAH4GLWsKAAABiJDXnsvQAbv3O0DKep+J7FAYAfUhdAAAFwMDAGljKoEdACJVSu6LfUQxS7Zexs7VdtZ0WWd3zkpBzdNePqSAkmPDwdqpmsW3s8yVNWD1l6kq2LB71Xq3IVZ448YTWlaSIx78F+mVdDN7fDH0CMeFIDqL5DKGDEFzM\/1oGnCGpoQmFfwpMcc=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":238,"pkt":"ZmZmZmZmRERERERECABFAADgg15AADcGns6IkNeeCgAAAQG7y9B6n4ns9ztBOFAYAPU26wAAFwMDALOTK54BMRDpe4MtRO4mvaKSRanWnUcsocEhf9imDZHTA69qRe1uMpLNe4m7Qp6bbB11SlMzzljnJWHK+xtT3NsLO0bn8SbPTm\/fP2HByAEIKCeJjzX6cTzrqctPaQMfDSYpsZyjirFQZJWd9zNZ8BqFngUuVVeMYAnqiHHR711KLHnNmYB21LdkXKWJ\/KQgiEfOFQlvg\/OO7+9BRDX2ISiFdjwYwba6lX0BaMvdwPOAIYVaXQ==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739385216,"flow_last_seen":946739385216,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp"}
+0774{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":337,"pkt":"REREREREZmZmZmZmCABFAAFDj7xAAH4GQrYKAAABaBwAapkuAbuxqh8KTGGTY1AYAfYqeAAAFgMBARYBAAESAwMGpOiD7bGSBZJpQPwx8jjTz98dXRQiG2dJooZruAvSbiD6XuSv8nbXMIfp9OgUL1wdFi5SuPi3kly1rdyONGuyoAAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG9oLmNyeXB0by5zeAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACCocx\/g1t9BSq0aHoBq6EokYegQUNndj200eG6GOsFbfA==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":946739385216,"flow_last_seen":946739385216,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.crypto.sx","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2359{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0827{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":946739385216,"flow_last_seen":946739385246,"flow_tot_l4_data_len":1775,"flow_min_l4_data_len":303,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":887,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.crypto.sx","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1807{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":1102,"pkt":"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","pkt_caplen":1102,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoj79AAH4GQ44KAAABaBwAapkuAbuxqiAlTGGdJ1AYAfUpnQAAFAMDAAEBFwMDADU1mfBqFD8uaoHHksUqQF0WMpTshJt1M0V43sKcAkWhg0T\/LJZoQXQ8FIVxhBlb5ZxztNSQTw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+j8BAAH4GQ3cKAAABaBwAapkuAbuxqiBlTGGdJ1AYAfUpswAAFwMDAFEr\/4Kxjdy2JlHhHqoeUlzBoSChhU4AhSRE+IUjehRAWKkNfzysT+0Oa50QZXF5YPbgpgDZmub9nHv8hWg+dGd\/l6r8nkjmi0wO7m6LEwq8g1Q=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":224,"pkt":"REREREREZmZmZmZmCABFAADSj8FAAH4GQyIKAAABaBwAapkuAbuxqiC7TGGdJ1AYAfUqBwAAFwMDAKXWdaMuCiGL3nSong+aLncKbORk3WO+9JegqpzukyYg8TMgD0BgVb\/r0kBGkJ+9ByhczfdybV4gFhh\/6XFY8bDB+ooYkFyaUw7SCwdguWkxPM8eJdGQl5PWzSoH7LbNiZz\/WT4VGkZuBxgWcRl2o\/NFrB2ej9nvhAOS7YzwIUfWrpbsW0jWuQM7pgtLIbw2prelOGZFO7OQXC5zXv2YsiiLifu56sc=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3j8JAAH4GQ3wKAAABaBwAapkuAbuxqiFlTGGdJ1AYAfUprAAAFwMDAEr1sXHKMvMJzb2lc1mC+IROtuXm2Go3bzfmBmd\/sWIVbjGS+26nlOjaJCrcSFlc4DnFBJtLpoUWI2EjcBRYk55cHIftshNE0jrgZw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":125,"pkt":"ZmZmZmZmRERERERECABFAABv\/PJAADcGHVRoHABqCgAAAQG7mS5MYZ0nsaohtFAYAENh+gAAFwMDAEJzfp4khsC7V9ddzW9ozBZHiXVw1MAQdp2jlH5AZBkIHx3c3z0vMlcJ7G9+NRaVb4t23wHScPcElbyqhk0LW6lIoNg=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHj8NAAH4GQ6sKAAABaBwAapkuAbuxqiG0TGGdblAYAfUpfAAAFwMDABoGC7eZ3Bn1AYVney+AFF6MBuQ2UEHDwOQKRQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0881{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":411,"pkt":"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","pkt_caplen":411,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":156,"pkt":"REREREREZmZmZmZmCABFAACOj8RAAH4GQ2MKAAABaBwAapkuAbuxqiHTTGGe01AYAfUpwwAAFwMDAGE9nUSszN6Hj8ejdHmms9XC5Cf2c8wpyB4MnmII6QB4sYCQgWpYlXxCBCp0pJixMfW\/q6v5p7x4scFue5Wtj3\/0Bzg7RUAlC+ZQwbY1sod3RlRFhnEi1G2Gvaw7qnYRAPCG","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0927{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":450,"pkt":"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","pkt_caplen":450,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":85,"pkt":"ZmZmZmZmRERERERECABFAABH\/PdAADcGHXdoHABqCgAAAQG7mS5MYaBfsaoiOVAYAEMWLAAAFwMDABo\/6em8S+cskJCsgTPlQqXRsWlC4TiMQ4i7bg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":188,"pkt":"REREREREZmZmZmZmCABFAACuj8ZAAH4GQ0EKAAABaBwAapkuAbuxqiI5TGGgflAYAfUp4wAAFwMDAIEKgmKWX6YJ7EyrwW6UghlXKcoJ+dlzOTuPpcSLOsTbquE2gnNikXT6K1Wm2i1baScC4\/wKLo2OPiGC3Luvwce+I21tzmxYzD8LqsuN+\/aohVjp1coCNcS12EFOamPV40OYgKnUNYc0etOgF4dXD\/z9B5EUsK\/F0FqgOPBxG1vjLKc=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739385,"pkt_len":359,"pkt":"ZmZmZmZmRERERERECABFAAFZ\/PhAADcGHGRoHABqCgAAAQG7mS5MYaB+saoiv1AYAEQvTQAAFwMDASwIOtnhxHgdCgQey4U19\/NOVQeoKhAjFytVdqdlNMepeyLN10r8EnEvFgwlJOqbn3jVg4D5gHhOz8YJayO69m35\/gSva3GMKU3IYEt4mRO7Og72e7CdTt7WlPpuH2yJzlDoMxqM8WIVENPl5wDi7D0LA7rWEPagJRWBBV9g7FAv1zAp4Avqs8vJrDF84dxBjJ9N0EWun0QJUwWdK7e3Get20X9+B+j\/UxjxhfG77h4DRB+zhIFQ5sPT95Rh6TYcIyIUJk0sap6MOtu+\/0pPK3fwozE\/Qw9UbZga\/69PyXill0sssG3IU4A0Iqkz\/yhwP69NxS4HELP6acm1AabWnpDspLBmF3ezb5xhszBYT37rQZYehwSV\/yqSX6InrXWao0z0iINaMnm6sjRuAgw=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739389936,"flow_last_seen":946739389936,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp"}
+0772{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739389,"pkt_len":335,"pkt":"REREREREZmZmZmZmCABFAAFBc1lAAH4GKTYKAAABLUxxH8s8IPtar+ZR\/RI3kFAYAfZgWwAAFgMBARQBAAEQAwPDKTE3gtHe4YkRucyB7lgiewe8eRdkAeXi8xQ\/UXf8siCUJYNjNKAcmo3iKZ+yKMitYiljKY339PIqZtuOYBZE7AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAChAAAAEAAOAAALZG9oLnNlYnkuaW8ABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAgBTSef\/+Gs9funZgaOAKPCcHz5qP34E4cKsNkKCajyxU=","pkt_caplen":335,"pkt_type":2048,"pkt_ipoffset":14}
+0842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":946739389936,"flow_last_seen":946739389936,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":301,"flow_max_l4_data_len":301,"flow_avg_l4_data_len":301,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2306{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0883{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":946739389936,"flow_last_seen":946739390265,"flow_tot_l4_data_len":1731,"flow_min_l4_data_len":301,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":865,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.seby.io","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2293{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+2131{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":1330,"pkt":"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","pkt_caplen":1330,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":95,"pkt":"ZmZmZmZmRERERERECABFAABR70BAAC8G\/T4tTHEfCgAAASD7yzz9EkeQWq\/nalAYAfk2SgAAc4ENe0G5ulHSVo9U8Di2+Rff9T48vIN31l10ubtaT7+HT\/yeAS5vvgc=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":118,"pkt":"REREREREZmZmZmZmCABFAABoc15AAH4GKgoKAAABLUxxH8s8IPtar+dq\/RJHuVAYAfVfggAAFAMDAAEBFwMDADVH7Hx7szbovxeg7sgCYqLOBb\/Lc2wMoQRrRY34QP1teEeb2lYxKMTfAHOGcDkQ++N+1ELh6w==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+c19AAH4GKfMKAAABLUxxH8s8IPtar+eq\/RJHuVAYAfVfmAAAFwMDAFEju3UGBClBg8GKld7geR39EUyZUIW+610btNHHYXt+WDZgetm2qZ3Hpd+Oxl7Z7Ru6vGxqBpzbhCaO3QIC9MCMgH7DwLaAaOHvLidBy9Xm9X8=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":226,"pkt":"REREREREZmZmZmZmCABFAADUc2BAAH4GKZwKAAABLUxxH8s8IPtar+gA\/RJHuVAYAfVf7gAAFwMDAKdTz+kULt+KULNDP5MG4yd1HawTRAQLZc7sGFyXyXagSYJIUhMvFoyHTqFN50W5VigrnqnPzxh5rFYPkTcgGl\/EH52X+QGkfDmuIqotrsTIuo7r5tVCnC1mei42U2ZLRJY7AmtMy6DiqNG7c8FOiVj8OcUquGKfn9r6\/uUnq7HSuGZzcB+oUVzmTPMgeJy01pwvPfnU9lDC+4\/qpp4LdoIjSL+83DMz7Q==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3c2FAAH4GKfgKAAABLUxxH8s8IPtar+is\/RJHuVAYAfVfkQAAFwMDAEqTTud6EsJoMYPw6L5HTHsycb\/u\/BOgDuSuFhLxLRXZ0fJS0F4ixo2rqWHRxZxOpTV0gVloL2dm79vTsjpbNKXScMsUBtordSwTag==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB370FAAC8G\/RctTHEfCgAAASD7yzz9Eke5Wq\/orFAYAfd9RgAAFwMDAEp+kgyf2u1A2AlKxLld7p7QuM\/cz6OWK2UqygaSScY4M5SzmA3J4fq4rgGIOdpD5\/lWnDKEbeNtbMA5H0mTVckfrDT4Dar3JxUqwA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":133,"pkt":"ZmZmZmZmRERERERECABFAAB370JAAC8G\/RYtTHEfCgAAASD7yzz9EkgIWq\/o+1AYAfc6oAAAFwMDAEqQKnlapyrJwuMhUmVUzsExFJegsRhHoef5Y4L0WkZTGTK79Le+byLnTnCUS086wP3FK2WDVz+oQPMdg\/3sauTG\/ZghcxKIaq1TlQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":126,"pkt":"ZmZmZmZmRERERERECABFAABw70NAAC8G\/RwtTHEfCgAAASD7yzz9EkhXWq\/o+1AYAfdWdAAAFwMDAEMg8HbtFuWhwF7IruCIuggSqbBmBxZuK6crxWHL3rGA4tMnHHTPKrutBFmivqmae6IoI0CtEWKpk1uU65IykWst8sQx","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHc2NAAH4GKiYKAAABLUxxH8s8IPtar+j7\/RJIn1AYAfVfYQAAFwMDABo4gQ0\/ti+GmkptcE2+fzBrSGCpuBrJi5HiKg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1459{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":838,"pkt":"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","pkt_caplen":838,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRc2RAAH4GKdsKAAABLUxxH8s8IPtar+ka\/RJLr1AYAfVfqwAAFwMDAGQTbp72Fcho4nrmgw40E8KxYIGuP0OPkWfS59V3PlW+86dER1\/SLENpVbWQOr2\/IvStSqCI+I4U7XIX8X0TVY4H836AapEtnh3hhTXQPIuOfgU\/m87qaWiOeWaecqoAAQYEbJRQ","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739390933,"flow_last_seen":946739390933,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp"}
+0775{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":337,"pkt":"REREREREZmZmZmZmCABFAAFDddBAAH4G12cKAAAB2akUF4T0AbuSPuOKlASrClAYAfavsgAAFgMBARYBAAESAwMYXSzw+8AvMstO05PQ7qPBj27f4mGkG8QM9OU7ZRFcuCDJZDN\/6VucUquGKl+O4ES6VCX4Z6V\/a7wGR73kRIiX4wAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACjAAAAEgAQAAANZG5zLmFhLm5ldC51awAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACAuLsKlIgLTs2y17K315yEyJxqnsCXfl0yS1kyaNKG0aQ==","pkt_caplen":337,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":946739390933,"flow_last_seen":946739390933,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":303,"flow_max_l4_data_len":303,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.aa.net.uk","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4605{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":3165,"pkt":"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","pkt_caplen":3165,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":946739390933,"flow_last_seen":946739390967,"flow_tot_l4_data_len":3434,"flow_min_l4_data_len":303,"flow_max_l4_data_len":3131,"flow_avg_l4_data_len":1717,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns.aa.net.uk","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0501{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4ddJAAH4G2DAKAAAB2akUF4T0AbuSPuSllAS3MVAYAfWu5wAAFAMDAAEBFwMDAEWr1XNIOucPlOXvVPAlxCVPjuVei0Kv510pke\/KbmmoYPXHQYgn\/dXPL9SYgvzqDxY7NHWdbkgaLyLveAQw2UhT5DxScM0=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+ddNAAH4G2CkKAAAB2akUF4T0AbuSPuT1lAS3MVAYAfWu7QAAFwMDAFH5fOXuGGQTCSec9DTFnTKi073A3dyDK5aGklXxdlyqkvpUyevkvdQoFRxqD\/oXjlTQmrcRcGuGVlNE943mWtSSfq4hBwQRGa56H8GFDP\/RQpo=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADTddRAAH4G19MKAAAB2akUF4T0AbuSPuVLlAS3MVAYAfWvQgAAFwMDAKbOcashR5\/uMF3amwObsbFEZG4juIUud\/eSvh8GM+2\/skB5mrP+x00KhZsh7TmiL5saD+QkYu20S1OFq3z3EABJ7aHU2OgjGgUR7ODTq6fEo3O2ABLyrcG9Ds272JZCpBMNmRtXCFGpAhXKEUch\/vntLpgNQ1ZkdXe8TE6GtgT\/Sgi71RWZ53nstVrSnXdxp9dvYCNB5SywsI0xQcpCQ875V6im+3qb","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739390,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3ddVAAH4G2C4KAAAB2akUF4T0AbuSPuX2lAS3MVAYAfWu5gAAFwMDAEo1DfqG1j3YEAiQS\/IxJ7S8MOmd31dgOGehz8CVlNBSYZD5J4\/DBMWGkhtbrSa7oYnscBwc3kF9CbW0pgFJpv8+HnoD0Sm96v756w==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1077{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABpNdJAADgGXkDZqRQXCgAAAQG7hPSUBLkvkj7mRVAYAfVRngAAFwMDADzafYgYMFvNYWxGFc\/+lGY7jBmZuxiCW9SpxlJFPkLqXKENzHJc1VeBjhkPEMPVKijp384t3EBuAnF76S8=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHdddAAH4G2FwKAAAB2akUF4T0AbuSPuZFlAS5cFAYAfWutgAAFwMDABocHZz48Tn7aYdQj+HmQ\/QXcbDagkLOGX3oLQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0891{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":412,"pkt":"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","pkt_caplen":412,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":160,"pkt":"REREREREZmZmZmZmCABFAACSddhAAH4G2BAKAAAB2akUF4T0AbuSPuZklAS61lAYAfWvAQAAFwMDAGU0Om3KypVM8Y7TUyWS8zY\/gOnEuEyTi1omO9ghEMQhpGt3Da20wVC3moJBG8mJLeWerLPfPU8B4gaJJDMyGovdhD7ZHm7U7havpa\/ZxC1tp9OGxD+mmQ8Ygl2TAQrsEnpwEi35fQ==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWddlAAH4G2AsKAAAB2akUF4T0AbuSPubOlAS61lAYAfWvBQAAFwMDAGkgWZNHHwUbRMjYZgPim+jcVPA8lIvlt8uCJ2eZKbKkof6emBeQB4ZuiNcpdnGozUD8xcUuYn90pq9wM3IlcVmBkjD\/l6WaohLg4aGOCUJtHm3lL5Nl+MBLSzJ21bUZhqw2ulCaIjhcHjM=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":249,"pkt":"ZmZmZmZmRERERERECABFAADrNdVAADgGXbvZqRQXCgAAAQG7hPSUBLrWkj7nPFAYAfVNeAAAFwMDAL6TKnbkFATDhtx3ySWDDQ2If6D3T\/atYxe8jN8eJLMXkaT60hSuSj6Caq8pc3kR55Lc5n7zezg\/M1IjudVoQ834E7mBmLpGlFm9+uVdppFEj25R9ZxcsIt3ktWSIpcsHbSqwQRsaNAehftbwQVvrwC31Q8L0JUTIrtkgAAd4jE3c3TS1omS2qjQ\/7VJt66M+cUwBoULTREmH35UDP3G4lm9V9U\/m7fF\/\/rigsamLr5yjLd4wBFYa9kShAV8+AC6","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739391,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLddpAAH4G2FUKAAAB2akUF4T0AbuSPuc8lAS7mVAYAfWuugAAFwMDAB5L2lkJjpLClO8v9wZzC+dOrVqBd4j92hX82Nk7jW4=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739400294,"flow_last_seen":946739400294,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp"}
+0785{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":346,"pkt":"REREREREZmZmZmZmCABFAAFMOfJAAH4GNZwKAAABkv84YqrGAbtdpqacr2JwdlAYAfaNXAAAFgMBAR8BAAEbAwPHJz7Bz9zA6vh2mAtXguxbTFdhb5D1tFb1Dou8iu1ITyDK94fArz+mQ8rbbzgPn8nq5li5Q+JT9k4ZyOL9YBHZZQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACsAAAAGwAZAAAWZG9oLmFwcGxpZWRwcml2YWN5Lm5ldAAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACADmPqzqEwwIPykBECgQ7iBmKhoGpqhv77PEzGKWzxqPw==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":946739400294,"flow_last_seen":946739400294,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.appliedprivacy.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4322{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":946739400294,"flow_last_seen":946739400340,"flow_tot_l4_data_len":3236,"flow_min_l4_data_len":312,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1618,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.appliedprivacy.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0398{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":60,"pkt":"ZmZmZmZmRERERERECABFAAApAAJAADgGtq+S\/zhiCgAAAQG7qsavYnvOXaanwFAYBBNMgAAA9gAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4OfVAAH4GNm0KAAABkv84YqrGAbtdpqfAr2J7z1AYAfWMiAAAFAMDAAEBFwMDAEWvoM+cBnqYmnkRkDPuwLtAUVkYLlQ03USNt7TH6Ov+UQEEyvORaaPH3O3ZNMzL2MgXRjNUDyx4v+rdCpv8GZgAXv9\/o9E=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+OfZAAH4GNmYKAAABkv84YqrGAbtdpqgQr2J7z1AYAfWMjgAAFwMDAFF\/agLwf2hkurOtclPc7PloPgHX8tIH4ISdSa4EvDGmjxH6c1qM4Rsw8Ui8OUp\/ZpG22ARbOXsOsMotn0yCCQpPKADwUIKVj5BjlvTnVXcua0Q=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0626{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":228,"pkt":"REREREREZmZmZmZmCABFAADWOfdAAH4GNg0KAAABkv84YqrGAbtdpqhmr2J7z1AYAfWM5gAAFwMDAKkCgB9PakWenp2FfM5\/\/AJ15KkTCJ3LM4o74rswd5jGhQ1nfFiZHOYG8jPVggR5QsQbO+oanzG\/i8AEUij0tpPzzk4Jme1HCJrSzamPfBJ8UsfdRmtEVPVvPtBQVTJr1UhLnlHPx75wCbH6UuwQQ1KCWw3xSd3w5qlFT+R89juMgmqsXHAFqCs9rFzshFxNm7k2qrZFGQaHjY6ZtZEB+w3tFfLEIJ5PWW6k","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3OfhAAH4GNmsKAAABkv84YqrGAbtdpqkUr2J7z1AYAfWMhwAAFwMDAErpQSDqIJch4nsbcQM0LXBZbmeetkY4nbe6GP+8Vem33iV8l5sPhxCBj+CpQYNtBPEi\/\/7BkqHcKZjTH2IDN17TSnGJH995KU4U+g==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABpAABAADgGtnGS\/zhiCgAAAQG7qsavYn3NXaapY1AYBBOVzwAAFwMDADwgvIYr\/fVd0\/IoLpD6r2RiaFvFG\/sAvbZKMjwdNEjrNa8MMQtldCF2H7A4ShCVlHR+p0Fqa8bFBVhCELM=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHOfpAAH4GNpkKAAABkv84YqrGAbtdpqljr2J+DlAYAfWMVwAAFwMDABopgl92dirYJk26Rdz234hk\/nwtX13QWCVDkg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0865{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":402,"pkt":"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","pkt_caplen":402,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":156,"pkt":"REREREREZmZmZmZmCABFAACOOftAAH4GNlEKAAABkv84YqrGAbtdpqmCr2J\/alAYAfWMngAAFwMDAGEwR+Uwm3JnbHX21T0EU4mimI\/BzOwLcAvWO7tFHXof8QQ9y7zhq2B5iSZ82GEwQVrEYfEjgD\/1yxMkOsLMFuesUYv5H7F9Ehc+sedhLYoepOfrgUEoXab\/LLmDQ325Qwqs","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWOfxAAH4GNkgKAAABkv84YqrGAbtdpqnor2J\/alAYAfWMpgAAFwMDAGkskbE6jojziEWZcr57nfNO3QVwvQHpO7RpYrit0PxYi\/EdGvNfu4dy\/1VG2nMOx2X5QyLU7PTvVX9K1Tk31jOxrfcpc4jXuSE2rb1qXnua7aXnvU1Clxzf9Q5XRvJCVGrIefRWpqyqjP4=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":250,"pkt":"ZmZmZmZmRERERERECABFAADsAABAADgGte6S\/zhiCgAAAQG7qsavYn9qXaaqVlAYBBPuLAAAFwMDAL+5P1wGAW7bqRbFQF49PLOyL7Nktp9V27s\/vxONurX4s2n\/rQw\/Pc6utp\/JQlx92Iwj0pMSpIonnsrcCShzvBfOIR4WwTTnN18t69G6PIAyQbjCzKU1Y5oI08MKAUN7p2wK9FhJ6KKs7dY3QsCtHu8Vp\/\/1URT5ZXAiCCddtgsJ4DVxjVT9RBqSeaO0vFHPJdMho6CfUjl26TvqbCuOy+ZmMvzj1FGAx9OM+o8vAKjrH07NZSC3jl7sTS6mK38UsQ==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLOf1AAH4GNpIKAAABkv84YqrGAbtdpqpWr2KALlAYAfWMWwAAFwMDAB5mHAVxw6qC2wo8lvd1nMMLvER4s1pZjX+1yYfWJU0=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739400581,"flow_last_seen":946739400581,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp"}
+0779{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":341,"pkt":"REREREREZmZmZmZmCABFAAFHpuhAAH4GfboKAAABwUZVC9OUAbunNzlTos+VOVAYAfbYRwAAFgMBARoBAAEWAwO9Yq6mzn6Kf+YkY+w4Q\/vo+7yhlWhjohroCY4Mal823CCy3rkp5WTaWd5nTdItXIFahRCh9ETfjIRyGCS4r9a3XwAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACnAAAAFgAUAAARZG9oLmJvcnR6bWV5ZXIuZnIABQAFAQAAAAAACgAKAAgAHQAXABgAGQALAAIBAAANABoAGAgEBAMIBwgFCAYEAQUBBgEFAwYDAgECA\/8BAAEAABAADgAMAmgyCGh0dHAvMS4xABIAAAArAAkIAwQDAwMCAwEAMwAmACQAHQAg6wutcF723xZ1OaF0ooDfgy7xahyBeOD2x7PNk\/t6gG4=","pkt_caplen":341,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":946739400581,"flow_last_seen":946739400581,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":307,"flow_max_l4_data_len":307,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.bortzmeyer.fr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4312{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":946739400581,"flow_last_seen":946739400612,"flow_tot_l4_data_len":3231,"flow_min_l4_data_len":307,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1615,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.bortzmeyer.fr","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0684{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":268,"pkt":"ZmZmZmZmRERERERECABFAAD+44BAADQGi2vBRlULCgAAAQG705Siz6CRpzc6clAYAfVAMQAA7MoGonW0Fj4lHArVaOCgJtbHn9aRY0n9LKnu3cTyqbChLhfccHsdC81z2fZ+Ukv\/nAuBoKACJX8Pwem5JBIGeQ+hR9gvbJqO0dljTEjfnQJGlcWyJk4FqoFjayNoVLdbRg\/yWeK8VeLtflQjLxqwMpDM\/QbduG5HAuBrFrE4C7dTGq1PezTGhU9pqGsXAwMARb1ScBcpf\/m81VPRA3LW\/2mv0IZmicbA7T0x5byJ5bKDeMQneniKc1y1kH9Jz7ueZz9IjjqOqk3CW8r0ZREMc3BCfYPYBQ==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4putAAH4GfoYKAAABwUZVC9OUAbunNzpyos+hZ1AYAfXXeAAAFAMDAAEBFwMDAEWxR7EUjZHkVtX08CQhsaM\/Xs5Q6DMNginzkPCY+KYKSCqwTiH7uki4RDfQf\/Ey5MQ7C8dbvaWK4mwFe9xZLaA8IB711hA=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+puxAAH4Gfn8KAAABwUZVC9OUAbunNzrCos+hZ1AYAfXXfgAAFwMDAFEBK72qoyavs84v144gQzkZ+lvScOqnCOg4Fxl2R1DXDjRCzInGloAcyb9frAgUO2t8D8mxkuPsXSeiPIHZe9AVf6jmwOKW+LIq2uGYnRymDuE=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":221,"pkt":"REREREREZmZmZmZmCABFAADPpu1AAH4Gfi0KAAABwUZVC9OUAbunNzsYos+hZ1AYAfXXzwAAFwMDAKJ3XOpiXev7l7MZAm22Vm9Xjy7eXrvwymGtypbWuvyq7I3PdRDDKWj\/RLTtMYaNSJ8vz+ujKQBG7B7TL5snczjeUIzIcb07o5lQqFtI+7O9JFd9xIWrlQCF03DPpiuAREP9pThFNJ\/sQp3JRZTktykiNUigvBJdFe2nfwwNDbRwdy1aQTs9qsEaovHOVTeeBYIk8TyQQ1UKn+4SQ\/Se9wKOx1A=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3pu5AAH4GfoQKAAABwUZVC9OUAbunNzu\/os+hZ1AYAfXXdwAAFwMDAEpfXy2K6WTUn0j454zgLOF6BaviYpKv88lvCaVXYIu4lw0hRymeGnrlwHlRY56VzsBgK4wdpVXsYr1Bzx7dS7iuUeL5MDnSETeLMw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1080{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":126,"pkt":"ZmZmZmZmRERERERECABFAABw44ZAADQGi\/PBRlULCgAAAQG705Siz6Nlpzc8DlAYAfV1KgAAFwMDAEPMUApz45ZKaxcj6GpbdUc2nwi\/WoTFabjKTqpClANH1mZOZX3nHeKRmMcDfze4uF1riE\/rAra\/dAdgTEzdS0uFBsUi","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":455,"pkt":"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","pkt_caplen":455,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHpvBAAH4GfrIKAAABwUZVC9OUAbunNzwOos+lPlAYAfXXRwAAFwMDABp6FHvVxJHBeQ5g0MDWL9tnLR+tzdx1IEXTLA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":153,"pkt":"REREREREZmZmZmZmCABFAACLpvFAAH4Gfm0KAAABwUZVC9OUAbunNzwtos+lPlAYAfXXiwAAFwMDAF76q0IrLJQZEJgb\/pjTaLC2A7atFOybNTh0ihfMiNbZliLQMbPuqJ9A1tTpMd3xJ9jSC8cV6GO6gfvAuOQ4r\/fqFUn7Apr2RhO9z9ti\/6m4c\/HpVr2Q20KPpoeoGkzc","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWpvJAAH4GfmEKAAABwUZVC9OUAbunNzyQos+lPlAYAfXXlgAAFwMDAGl2Br1EfvOd+7oTvKC3kE7CXBP\/2IvAewAtinvUxfi9a9UDm0t4OOCcLCJQfBTLqmjIaFlNVaCrSE4mXly1X6PfjJglufG+Yj3IVrGULPk9zqrUZstqStRuEBJJM5YzfTUxQjZllbU9xx4=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABL44tAADQGjBPBRlULCgAAAQG705Siz6U+pzc8\/lAYAfUtRQAAFwMDAB6GTFZkUYOJTOEIFUQpPcd97xSl2MUDje80zwgABzc=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":249,"pkt":"ZmZmZmZmRERERERECABFAADr44xAADQGi3LBRlULCgAAAQG705Siz6Vhpzc8\/lAYAfV5MAAAFwMDAL4Y\/TNvQbA387qryrTfghOJwmBq7MrrqjaXgMYkUrdb7+JV7GyX2G1PlYEBhrHtmGmLe8TY\/GzaK\/74z5502T2LG8iavzUZbT7qD3yWi4wLUUuzZgCc8gQgsaBuwMQyskQjNARBgpNUYYX\/vIFT3JcxdZbYJJamKEp6CJnx0\/ERgrjyKOUeId0DgNdohXVJsvUqUinT5MHse8b9T1mcvnPy7kU\/joqvQgHKNgEtNxFahCTXP\/UEY3nBkseKTsx4","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739400702,"flow_last_seen":946739400702,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp"}
+0779{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":342,"pkt":"REREREREZmZmZmZmCABFAAFILINAAH4GS1wKAAAB0frxGYuCAbtSRrNTwAekRVAYAfaFCwAAFgMBARsBAAEXAwMzpeRPPpmPOBWwlYuEr5uNgoasUYbxY5rOmYFKCjGtJyAIAEydch7b9cupGuDzo92xh9NLKrnQMxUlfE7nWZM5\/gAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASamFyamFyLm1lZ2FuZXJkLm5sAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIJeuQLdGEJN7n7Os\/LoZLYTlp1p11dddxIYAQZdOassB","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":946739400702,"flow_last_seen":946739400702,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+3154{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":2102,"pkt":"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","pkt_caplen":2102,"pkt_type":2048,"pkt_ipoffset":14}
+0850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":946739400702,"flow_last_seen":946739400727,"flow_tot_l4_data_len":2376,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1188,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2390{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":1535,"pkt":"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","pkt_caplen":1535,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":28,"flow_packet_id":3,"flow_first_seen":946739400702,"flow_last_seen":946739400727,"flow_tot_l4_data_len":3877,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1292,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"9":"TLS Expired Certificate"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","server_names":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=jarjar.meganerd.nl","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"17:C9:8C:F5:DD:1F:0E:0F:DC:C5:42:4F:ED:C4:CD:57:5A:5D:7A:4F"}}
+0516{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":147,"pkt":"REREREREZmZmZmZmCABFAACFLIZAAH4GTBwKAAAB0frxGYuCAbtSRrRzwAeyDlAYAfWESAAAFgMDACUQAAAhIFrMk2g1XxRnkwN933MQ\/vEuKAIrPsEtdQ8XwZlKgX5QFAMDAAEBFgMDACgAAAAAAAAAAEgtNJFxGFxxxT5Wgfvmxud3VLSSH9hQHBUaUB9qvfYZ","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":105,"pkt":"ZmZmZmZmRERERERECABFAABbuOFAADcGBuvR+vEZCgAAAQG7i4LAB7IOUka00FAYAfVwaAAAFAMDAAEBFgMDAChUn0cMTAufsksasolz73Qdzf\/2+QYz6jP4Gw+eKrW+TSaX2KNtN3mv","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":123,"pkt":"ZmZmZmZmRERERERECABFAABtuOJAADcGBtjR+vEZCgAAAQG7i4LAB7JBUka00FAYAfU4+AAAFwMDAEBUn0cMTAufs5C+MZY2hrafZ4EG2X+BGXTwD+FMqilLBcQDOoGlAmOq+AbxwIvaJE1kGGXhoFbZaiZKMJNhg4aR","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":147,"pkt":"REREREREZmZmZmZmCABFAACFLIhAAH4GTBoKAAAB0frxGYuCAbtSRrTQwAeyhlAYAfWESAAAFwMDAFgAAAAAAAAAAYIWkSfXDgYWeabFGwJKgBBXuK2BLddPrLspAqomaOumRb4SJw+zeZGGfSLvvyekw89yi8Umej+DFgsP4CVJ8UXuJCOYhTVPwM5yNJ5KLqKm","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":231,"pkt":"REREREREZmZmZmZmCABFAADZLIlAAH4GS8UKAAAB0frxGYuCAbtSRrUtwAeyhlAYAfWEnAAAFwMDAKwAAAAAAAAAAqzPH+9oxBPblym7ieDiaqhymwsR+B8aK\/1nuM9p9yrRqCMplZSJFY1dtdSkQyDd9E8sm7IrgmR8X07YI1dZc0oywbPqY5z+I0hrdztrql1e3oCb7rHCC+cs02SRDEOGG50Lgr5s8cgwrReAo38u8zS4Rpp4CsgaIoKUU5N6zber\/8QOWhw361FvBhluRHPHNSuzrhIwN\/kD5kgYtUU3ybQ+7oj+","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":92,"pkt":"REREREREZmZmZmZmCABFAABOLIpAAH4GTE8KAAAB0frxGYuCAbtSRrXewAeyhlAYAfWEEQAAFwMDACEAAAAAAAAAA1r3AluILlliBeXgqITk4r3UkvMh8L80cac=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+LItAAH4GTB4KAAAB0frxGYuCAbtSRrYEwAeyhlAYAfWEQQAAFwMDAFEAAAAAAAAABGvROubl4Ptsb44cO0B7wvE65\/\/iAoDky+XpCw\/4eRMlNPw1Es4hy37IbYsC2vDKmvZVw215SYP6j8rBQQm38H+1s2RKPOeY8w0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":92,"pkt":"ZmZmZmZmRERERERECABFAABOuONAADcGBvbR+vEZCgAAAQG7i4LAB7KGUka1LVAYAfUwIQAAFwMDACFUn0cMTAuftIx5aCXX1Dk83CjVXzUaimxiMwfLQTXaV\/k=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":96,"pkt":"ZmZmZmZmRERERERECABFAABSuOVAADcGBvDR+vEZCgAAAQG7i4LAB7KsUka2BFAYAfVK4wAAFwMDACVUn0cMTAuftUkvH1jgpWF3p73oGAvakhRFN4S6LMWZ0GnUAmVd","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0956{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":469,"pkt":"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","pkt_caplen":469,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":161,"pkt":"REREREREZmZmZmZmCABFAACTLI1AAH4GTAcKAAAB0frxGYuCAbtSRrZawAe0dVAYAfWEVgAAFwMDAGYAAAAAAAAABXG\/KQ+1f119dlMHblR2yidnQRbPvW\/zq63F\/igpgY2RqnaozqFyuABfvZrMQkxz0fmLCoThfIqwIZSAKsK+0ZpgoKUVQoA\/SuZsr\/YGiOO2ertUe8\/qVvDQqLhwLz0=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739400,"pkt_len":171,"pkt":"REREREREZmZmZmZmCABFAACdLI5AAH4GS\/wKAAAB0frxGYuCAbtSRrbFwAe0dVAYAfWEYAAAFwMDAHAAAAAAAAAABkcWKuZir635GoU1xm6sJ2pRP8I0lJaRiou4x857lKheGwpvuwMadXPtJo+n0\/ZVfO2j\/AWrt\/rHPyN+D9GGnGfJgyGzaweQAcKD9eDsiGzhiW0OZAjxJa9MS\/UdwGs\/MkWfhwyKm0VG","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739401864,"flow_last_seen":946739401864,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp"}
+0786{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":346,"pkt":"REREREREZmZmZmZmCABFAAFMN1VAAH4GvigKAAABX9jlmatwAbtGU6iimu8Jz1AYAfYHbQAAFgMBAR8BAAEbAwOH23fm3DrJaQXLovxzyYyk5R\/PesPVPPqPMsnNPw9NhCA+BKUjIeM9NnmcNXI7jO56RaAWoMnCcXIJRfPvBK89HQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACsAAAAGwAZAAAWZmkuZG9oLmRucy5zbm9weXRhLm9yZwAFAAUBAAAAAAAKAAoACAAdABcAGAAZAAsAAgEAAA0AGgAYCAQEAwgHCAUIBgQBBQEGAQUDBgMCAQID\/wEAAQAAEAAOAAwCaDIIaHR0cC8xLjEAEgAAACsACQgDBAMDAwIDAQAzACYAJAAdACAgB93oNekrupxQPrzRHifFos9GGTUaOGYLuLqXCSqLFg==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":946739401864,"flow_last_seen":946739401864,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":312,"flow_max_l4_data_len":312,"flow_avg_l4_data_len":312,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fi.doh.dns.snopyta.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4314{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":2958,"pkt":"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","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0839{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":946739401864,"flow_last_seen":946739401922,"flow_tot_l4_data_len":3236,"flow_min_l4_data_len":312,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1618,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fi.doh.dns.snopyta.org","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2018{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":1246,"pkt":"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","pkt_caplen":1246,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":136,"pkt":"ZmZmZmZmRERERERECABFAAB6LHtAADcGENVf2OWZCgAAAQG7q3Ca7xnPRlOpxlAYAfVWYgAA2V5hLsUbgAEXAwMARXXob5MYCcvmeQLUlTRsCD5Me1SM3hQe8X\/HgcHMk2uI0LOPU2IcCIkNX9+C7LIGQhPSeM57X\/Qd94pvwqCsYv6NMr\/xuQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4N1lAAH4GvvgKAAABX9jlmatwAbtGU6nGmu8aIVAYAfUGmQAAFAMDAAEBFwMDAEUW+ynfPIUPgWsGIdUFpk0OwOAClb0Oq\/mIShKs292RBPHxvRC8jQty7TSrdGva8zXMNO4LmAoXO7IVucdmZqSgYyt9EQo=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+N1pAAH4GvvEKAAABX9jlmatwAbtGU6oWmu8aIVAYAfUGnwAAFwMDAFF\/3krTFxSOUsJkIKyftR+wIOCD1ttZ2qxz2Te1DLtUgZcTwxpB0q\/FHVfmPoiLp4+kizX5+PoUNeq9KORgYF2pATlboYKTH76j1zU3C1Pg3Ic=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":231,"pkt":"REREREREZmZmZmZmCABFAADZN1tAAH4GvpUKAAABX9jlmatwAbtGU6psmu8aIVAYAfUG+gAAFwMDAKypOwe4FbsVtmOPdOeLuukACnCX7PlG3Tw3gKD07Fi\/pO+4wqwaf4N3xQsAdi6hm75hlNx2LYSyPQHrDPalyToPvhXy6hVrg3Yafspbgb9h0dPcWiKYWVxkvwlOLHN1cG\/HVzMx7Z82jyNYUz0tWA7aIsxjr+7I2NrMcdTg5m40JMR8o3R5Oc381W9GmB3GDaLkfqT\/X2IFhwoDVZiwsHej8EfzoXNLaL4ibgd2","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3N1xAAH4GvvYKAAABX9jlmatwAbtGU6sdmu8aIVAYAfUGmAAAFwMDAEpjaLGkZq+5OJd7VagSnAEdrqh1IFN3pCDQUvqjEKq49zdLY78xY0vgQNRRy40HMsyocbuHITHjHB3eVgJyOOxYwSlUFA6TdJKOzA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":125,"pkt":"ZmZmZmZmRERERERECABFAABvLH1AADcGEN5f2OWZCgAAAQG7q3Ca7xohRlOqbFAYAfW8NQAAFwMDAEJI4u2tqbc1POiBFaZP1k\/ovH1mA7ODMvGNr40MIQ\/3fBgctufWDw+wotBnEVLOK6Iruje+6ukz9fcqGmTjU+KvppI=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHN11AAH4GvyUKAAABX9jlmatwAbtGU6tsmu8aaFAYAfUGaAAAFwMDABrwmmurIsCeIUEcskjqkcQbV1RDR5Rzrih9\/Q==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLLH9AADcGEQBf2OWZCgAAAQG7q3Ca7xpoRlOrbFAYAfUuuAAAFwMDAB70QzLR\/nIx0s6ePSycZ5ebqK3vciSUscnqxhSDgvs=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+1634{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":970,"pkt":"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","pkt_caplen":970,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLN19AAH4Gvx8KAAABX9jlmatwAbtGU6uLmu8eH1AYAfUGbAAAFwMDAB4Nf8UJeas06r+T3i6\/\/7y1II+ujukEFzKxnznhsWg=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":159,"pkt":"REREREREZmZmZmZmCABFAACRN2BAAH4GvtgKAAABX9jlmatwAbtGU6uumu8eH1AYAfUGsgAAFwMDAGSyk1KOdSdDi7O85h4PA7Kj1kLRD8Cvyu10TnJET0F2PpxtEkeiBWme8hFIBcwhfrN+u\/Tulm6\/k6XcAsDJdXdNFDD6wwHPy+S3J4XDEn8tXTis7ukzh5mU35a7uJWAcYD72OkA","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739401,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWN2FAAH4GvtIKAAABX9jlmatwAbtGU6wXmu8eH1AYAfUGtwAAFwMDAGn4jD7I94ILrD7yyLiHEy5w+P9gXVYReJhoXDO4JiMUs1dSjEejMlBhK6LplTsX8\/Hb7o6IqK0sUCjWidZwT\/UOjxb\/JoRhBj5HBAsOKbGfXFD+LzRVsvAk4SCxSRdqAk5nuAYKrAeE+oE=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739402059,"flow_last_seen":946739402059,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp"}
+0775{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFFMVtAAH4GEoIKAAABLuPINt7iAbvHEJB+u++XVVAYAfa5DQAAFgMBARgBAAEUAwMZSog080zqV7Jj5Dvb3ndcTDVXiuYN2\/F4nl5oM8685CAD8\/DpQOi68rj3Dpf6v96RxtLLH4tYGgdf5WLODM4bbQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPcmRucy5mYWVsaXgubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIJ7aJCDYGU5kBdEWwbRqPCTJbp2+gk2aiKbS3L7SQcx7","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":946739402059,"flow_last_seen":946739402059,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4333{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":2958,"pkt":"ZmZmZmZmRERERERECABFAAuAZpBAADcGGhIu48g2CgAAAQG73uK775dVxxCRm1AQAfXDSAAAFgMDAHoCAAB2AwMvYFLfcaEHo3aJMGXc3Nj5JHcSpejvVC+OlDWKY+lERSAD8\/DpQOi68rj3Dpf6v96RxtLLH4tYGgdf5WLODM4bbRMCAAAuACsAAgMEADMAJAAdACCh186lBtHTNByoJBA0po27dnFNUREe5HIPKtcxu6S2dhQDAwABARcDAwAg9o2cPZarHTdrUnIxRn1VCbJHnvCJutGQQOHJwtgi\/RAXAwMOr0yaSOXTVxNy1MdOCL2l0VNtPnwh1Pur1Peod0tJjP9bgm\/AXbCeom1NL8K2T1J0dOI2RGuShy8YsyfJSw5Wmm071ESTozks9\/pWNhc8EY3OZk6mCQg3Q3y0vd4NtUzxexbQ\/ljBYll7ps6UiVrepG46JDr3EaPIsRJxAZ8gk2GaeDNtt7RJ53LkT05zfjvHMA6aBmH7t2BOZWkMQkrXRLmYtnSacXrlIzcJzUpGVRU0MO5jJX8g6q6PFhL59lDZu8Wsxk4Ijhyg4K8UnAjzRt0sqrXp6a0SqTxPZDzAPdhdwet3y+1QvN+aCu84nNSfCfN63IrHLSK6g6E3lem15SKv2YkiXF084ouwYBCBJXJ0DejPRccdH+Bp7CthOdZD9VLsoaB6QmK0BYE+B3JLwPXFYwO17RILfiGHekeCLv1KycofjSKkrY8yMabLa35ij5iLlwpIadsWJnwxXtZhNE88TO3LP+8rk3SThdBjlwIn02grC3P5DVdRHQUuYvIj+XumPYY4OniV3MWQD5oVffgmBaE\/MiLcfXRUvAgscquxip1c\/\/iyBNFRLF3RUPwBL5NcLPUAOiX8VC6qW6UmkIisNPyl59sHHQPhjQtTaV3HdBxVSxa+lXvafEDpCFPhfq7Z8DomnjFz314Mo2YICe+ZZ\/VP\/fu7\/DCzGaGMJt\/y8fB\/6C7VSPpretnL2mHkpzqNNsRNJHmpTbExTf\/W0z7d7eRfUyi4HRoWhN1u+9quMVSyao8SZFSb9c6pJV2Cpd+PDnrbNELHRV\/F65mKZXLF2SBEFyPK6XtRb+DOfMx0N6eOXr93S\/6+HvwSpArnHXm2qs+EDh7L5OyLbYX7hk\/pTg3eyPRsiU+T1VKMmTm3HYiEMmPROOISeM2PorfGczBqiAbHiPnaSSCDWzXHHee3yjPZXq9NGQADWivkdXNHAGorqs10ePRotp6azTgDg+3xjhiyUN8\/5\/JSc3Kyd9\/Y7eBwt2u3jJ0Ir1dMpZrh8Xytn\/oFEDmMRBapOHclfLOBBRZGJk+RA7J4ax9KIam6HVgRqufRZ7dV+VdgeVMjYSy4DQHs6oQV1dnsfERFBqYVQdJ93jWD1Gsdc8Pxx1qQ6tb7lnC4UqWJg2j4TF\/4asugxqLUp8iztI1CeTH4Reu1S6K\/rL+\/r1FEIu\/3a\/Pc+80qIi1Y87Z88cA68V6AnrKI\/jRFdeUnKaulroYDyincGpznQ32nbV7\/a8ufW3HqHzuY8Srdsdzg7OWNNr818v6m39ySIusJPgs5uFC9xvx8R+dIpVEYzkh3Q2eeeMG9\/8K2vIPpbbOtWSl8S5FN+69DYbQxN3KXTRYnKAcgBhodqiyj+6scHhaFARQYGoblFVqgXvJu7mshFdDHwBCaC5uowdNEKy4yrw5ottXf3H2NCsu9qcfXXi\/z\/OosB\/qYdcOqltwSq\/80V+8Ge38CLLZRSG\/4XrYzdhVDiFWoHxmaBU5QDEtQZH3S5OWqN1YkEB+FuSwADN6wY1gWAHclaDt280QNrqehBd4CwSsxy7G0qCDy36MMZMs7kf2Vj2TgH2Ktlytg+thkxDKtjS\/3aeMtSmm43ddFCAwkHZueXWUvoZnXP444s3zmu+73i2ZuHERFPrHSjFT+Y1Mpgo0Q6tWu1ilCv3IprR0S6yOnEJ5GH5r1Gf8ZIpGpefh36oorDOpgHiyqyCCd2qxXI8dwpeWwmWx2f1fKIN+bOmeDA+2HTL5b\/h\/S8LxTnnbWVqrgwQxdpAQ1xCVDtsVFko7TfSsPQoikR1NXdGw35qIw15E77U92szex\/zyWrA\/2KGcD2M3u3eNzXjjgmkxW27iRaDVs9Dg00I8PXscfPuLziMbIIt+Qm0SfB\/SFf1ylBL4HammClVdC7YNhrs4NDTvUTrxAf\/9BLynvePRrZvNzUMjBT8JtlvsBmnasO+COXrGwGyL50S3HH+eTrpMH9LMnT\/2nWeiT7sDmyjA9eJmW05\/8DRI8uR2ignlELeQeE7ZYC8KKYreOyXVjuVJO8KRaBbSIU8dUGF\/ILBa6hey1v4zK5JU1MHXOVQdX1RkKit5IUXefBWJ4R0BtjoPPFwKYAfyrsAKBcQzvKsyota24c0cDVjMzge24BKry1Tqr123sw9sTncyGrJzrjJCAkeCEkQo\/KqOKmxNrr6CtJmmIByoS+EjVKjVpJBluAdt5s3qw9VBr\/A44f7M4XZ82OLHYLOdXuuY4Rgtek4oFOa\/eUNUqECm7Y6b272wQZRBWvplBYlD2RWyR8BI01QWkzD2WfZpeGCzTSL5ABcGznl3CTw+DF6WcoeJd6SbUQUUEPVBF4u3zdh9b1Jl9zNuwWauO57o6a9eFR5unb1g++tHtZoIerFI1gyMEkvujqSt\/jK8uIRkRYOGlslTd\/3gwipdTVXxsLWi2fDz9+hxgVNOGQx8\/XNWyG1F\/L1mjtzU1UBNgZmslQP0EHO4J0uMMhguKNrTksx3df79c\/0PdkBKYtPr+8Ipj\/SC3QYRzf0s53zKfkSiObQ\/sOVJpwMvMhEUZunN4GQG+WMzs5eDRzdpQVJe47jiYijmkgXFbUCq004yxOCosLJYnsGKuZDQyE0z4teBgJH8ZC2mVlhO8lAz8gPU5mm5pEBH0gFKqsINKjcIbhVPUHYBlhBeR1erIfe5hsNdbM\/YCyGrep30hH+qZ\/IBF\/s3j2eRJAN56DPG7eQXCsiZSBsk9PTgJ38fSGAbaH0pLxsq2c1CaH7DzSlA01ud99lTK4rI7nRSGX9tAnrwTrORIzDrntkMH1VggJmMFY3EGxAMzh1CUd24C\/NVxnQ9P5qmX0Sgg6uSgxO2c7COAq2edHC\/ucd7dmb9rLGiOGU7YGRxfXuPTU+xfVNmV8wvcxQY9WY3QcHJbT2Vz2Hldj+q9L+347LUl4d5nRCyZOpijGWSFFM5lFqup\/GoObWXXvMsTO9NawTXovnf4MnjeZczPg2FrW3tlX0uBW7P24cE4VNHjvnvHknCsLft2dOFPhwAUA7qVOuJixr0stgCN8eCmK\/n1WzppsTm55hMBmYIkE9rYwxrxXiN39LFT+j0SlpiMqf5n1b7aJjSjiQjm1\/T42XF5prhRwaxJyOBzS5a2w2BxZDhOvMuBRY6ZtDe+ptzu07\/eUIO\/cQq36LXuMCRYTHNEIXnWWtA0vjAcmq+EwSCLEygFwVxoPgN5h2qTp7SdJVushbBgsziLiKFyhenEAkjP4tYMg82sWXtGvK2T4GbMrKF+OJsVll7gTGHENl+vuBtGryghKs2kRZov918dT+VWdywju+ew9zl+S0NiyZlvWu+CmHSGFpvtCqWMXNaXEERtmXJVFofSJ7ykCfNo49lq+tJOi\/mrPExexfpWVgisqVMvGukP+ZkhcE5Ck47mFMZqfJTRL364HqGaNbc7EKIab24NToEVrdLyvx+sQZXNXCyXhOVxnIWFgUdF0PMAFDvMwWrgJTufvZcx1q\/rK6GjKie1KAVcLQPkAeyb2aBh0GehIKRHB5OLWsjRXWSnC7RfnFW6K8cokr6NiSGrPTHJtZfW+014hI265qPA0R6qLZ3SkGPsU2l+ULOh8f4TsNZmRbk\/UzcCp9zJB2\/sAwMANTEmXxPw2yMWVIdXVMdzqrOV","pkt_caplen":2958,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":946739402059,"flow_last_seen":946739402097,"flow_tot_l4_data_len":3229,"flow_min_l4_data_len":305,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":1614,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rdns.faelix.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2275{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":1444,"pkt":"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","pkt_caplen":1444,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4MV5AAH4GE0wKAAABLuPINt7iAbvHEJGbu++oG1AYAfW4QAAAFAMDAAEBFwMDAEXKqSJC2lkh5G42SMH+kUqPJFSCLOrnY5qYiyyOSGxU019Z3g1+admSewNNt0yPEZJoMQ1+JpUFad+MGHQ3aW46rImbTFY=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+MV9AAH4GE0UKAAABLuPINt7iAbvHEJHru++oG1AYAfW4RgAAFwMDAFHgR8CaAUsNqdt5xPfcdxXk\/ccwFxgxpSNMxvQytY9LevtkgxLHXMiQ60Vij3ZxU\/QEiR4Cl8Vf7C\/woRAEzI9Vk7xgbuIDVQT9L9Z9gXPTwyE=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":220,"pkt":"REREREREZmZmZmZmCABFAADOMWBAAH4GEvQKAAABLuPINt7iAbvHEJJBu++oG1AYAfW4lgAAFwMDAKEmGZ\/HoG2G2kIs0VOHX4VfluSvRbS3B5Dtro5flfU2S2pOYAqLjwJjn2MWxTA1twASDnU2goUAn4YGjpjjhLvK9IIRYIrgtHzlq7onpiEKjsj8WvSSO0yuRZ35KGqAMt66xsxXCEIugn4rYXwCA+yQRdS82dIpQnJvvlhKrmm1cT6bHj6U0TcWH6MZoWJpv6TPpVtzyxEprgFz7TjZIoOjdA==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":133,"pkt":"REREREREZmZmZmZmCABFAAB3MWFAAH4GE0oKAAABLuPINt7iAbvHEJLnu++oG1AYAfW4PwAAFwMDAEqQlMT4wdk+n7c86xb+CFcQm9klrwq37oR49lIONO\/FA29ONh3WL23\/nqrtaVrZ3IHK5V2IC7rINW4AuDCxpLmBO6MGrDfO3IZc8Q==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+1085{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":106,"pkt":"ZmZmZmZmRERERERECABFAABcZpRAADcGJTIu48g2CgAAAQG73uK776oZxxCS51AYAfWMqQAAFwMDAC8WFYozbIiHX0UDDG6Nk86vuDPcuYee4GV5jyCshrz3xwM+YfYskw3yL7UYSboviA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHMWNAAH4GE3gKAAABLuPINt7iAbvHEJM2u++qTVAYAfW4DwAAFwMDABp2ejkwHFygT\/3qqX9IUHmiYwTa1QrfBCpJdA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":89,"pkt":"ZmZmZmZmRERERERECABFAABLZpVAADcGJUIu48g2CgAAAQG73uK776pNxxCTNlAYAfXahAAAFwMDAB7BAK1mPxIfHtkTa9vVNUol3MuUDIoHfx1tTbLeaTY=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0864{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":404,"pkt":"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","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":152,"pkt":"REREREREZmZmZmZmCABFAACKMWVAAH4GEzMKAAABLuPINt7iAbvHEJNVu++rzlAYAfW4UgAAFwMDAF1C7DgJXg3YyPO9uvkP6QbQ4j8b3kWI119+UChIa6U9pz3\/FhgEDZtAVBUMyoQ3YNVHcUi0u95tXZ62LNZuP8IKMpmrghRSbJ5yFXFi9AbMIwDSuIyTUM\/FXw\/KX9s=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":164,"pkt":"REREREREZmZmZmZmCABFAACWMWZAAH4GEyYKAAABLuPINt7iAbvHEJO3u++rzlAYAfW4XgAAFwMDAGkEfwTn9FX0oEnOUqxR2KLsW6EXX1lylmfHTlijJoxjavUWfyyS9tVnQLfMAGC42UPyr3hipB1j79znzEvg3FgLvK+BzM+JRHcrkf4gGFO3VuxmS287aXHwq6SuYWu1wVLMxyf8PBcrSOk=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739402,"pkt_len":249,"pkt":"ZmZmZmZmRERERERECABFAADrZphAADcGJJ8u48g2CgAAAQG73uK776vOxxCUJVAYAfV0OwAAFwMDAL6wyx998YbKxmhMw3+CbPsfnr4wXvWu9\/nfQvNorwHZg0srS5b7iFdGjGxZUGNlFBD4TLH3AzFc1xK1\/J0T2VFH8uDpGe8owqNCKImjGik5Rfd5F24uYKSGIYmxbUfgE5PK2eru+BRCrL8IEcqvV0LwgKt5CQaKMtHOFanb7Cza85s9XyOcjYz9wcZRJTSv46SL8xZ0wNzMBRezCeekROZM5P3D2xzeSAqSrV3f5Ck85qOoGJR8Qi7HLCko8nA2","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739415,"pkt_len":105,"pkt":"ZmZmZmZmRERERERECABFAABbg19AADcGn1KIkNeeCgAAAQG7y9B6n4qk9ztBOFAYAPXJwgAAFwMDAC7p4enar7a69h\/ap6n0W5hiq1K9j0xA71Ah1sGQS9PZ3SOPEcpAhCVrUATzJZDF","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739421,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAddtAAJkGvV8KAAAB2akUF4T0AbuSPudflAS7mVAYAfWurwAAFwMDABPAQVvrxZDxyu0V2WbXi8Wc7\/ph","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739603327,"flow_last_seen":946739603327,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp"}
+0778{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFFXkZAAKYGop0KAAABCQkJCsqGAbs6mTvywXrNXlAYAfbUBgAAFgMBARgBAAEUAwPEiPyvZDyiU8chFqn7v3nOV\/W\/daCFgBrWvLyeLgdOBSBmgVOewdr23+YbXlV2oJqCio3+iP7mE\/SqSoHvhanHngAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG5zMTAucXVhZDkubmV0AAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIELSbbeQ+1Z\/PGkzWYpOrrGvdC\/XSIyiiMDimHGqOwN9","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":946739603327,"flow_last_seen":946739603327,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4468{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":3068,"pkt":"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","pkt_caplen":3068,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":946739603327,"flow_last_seen":946739603346,"flow_tot_l4_data_len":3339,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3034,"flow_avg_l4_data_len":1669,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"dns10.quad9.net","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0502{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4XkhAAKYGo2gKAAABCQkJCsqGAbs6mT0PwXrZJFAYAfXTOQAAFAMDAAEBFwMDAEXJf2y8xWhMhAZA2WXz9agwI9f91RKP49sWLlsKAqD2Anz18+mnUXeRrd7MefwrF\/wulkzvUzp\/PNHsE\/j94eCMWT0CzeI=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+XklAAKYGo2EKAAABCQkJCsqGAbs6mT1fwXrZJFAYAfXTPwAAFwMDAFGj4ZdVWENvHP7mlWww4fyc\/LCUwAcUVZSTOZOCuihsQZi0qxZIU3KBjmxt4UsdwiDNOUBuB692q78ru91BCfhzjqstzxoqRC1z\/lvOLOyurCE=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":226,"pkt":"REREREREZmZmZmZmCABFAADUXkpAAKYGowoKAAABCQkJCsqGAbs6mT21wXrZJFAYAfXTlQAAFwMDAKeCWd2l1u2Lq5nscCXqD9rzuIFbFEIFXZRDecLEcxbM7PSMCkfJA+iEkaf0cGjV8LczZrsob3nZH\/qH4fB6bL9ggwzZsJcQ\/vTsjE5m2W4ZKgiwKat7BKpY36LD\/9Afx1qnea6QcjD2EWkQhCPe1Soya4r1y5EkeNxIyteNSI\/VQNM0d8BDdw9EJlLgnh+Uvy7R4PE6D6LtYWxW+\/MgQt9Sj\/BpbZZ8ww==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":153,"pkt":"REREREREZmZmZmZmCABFAACLXktAAKYGo1IKAAABCQkJCsqGAbs6mT5hwXrZJFAYAfXTTAAAFwMDAF5DZPCTuTMg6EP7O5nFv+X7VNP\/SMbNr06s49ac1+GEJdaPIR62STC0H72Az\/UsfRt68lTfVTLUf8hb\/oHWQ4sODz004FoFJeXEzoaFJnB4aywTG2zsDBHKVze9DJl9","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+1081{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABpVbpAADsGFwYJCQkKCgAAAQG7yobBetsiOpk+xFAYAHuaQAAAFwMDADwKMwBP7SBBT5wzfvFPzMJzeCEJ7vZA0WZKQLHKNby0MibQIN\/sgyoj8TvBs6bVrfDPBoT80LSvqpaqWec=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHXk1AAKYGo5QKAAABCQkJCsqGAbs6mT7EwXrbY1AYAfXTCAAAFwMDABoOGqzLn9jyiuDfgjshiPc1HtEXBwEakLpYnA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0606{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739603,"pkt_len":213,"pkt":"ZmZmZmZmRERERERECABFAADHVbtAADsGFqcJCQkKCgAAAQG7yobBettjOpk+xFAYAHtFOwAAFwMDAJrlZdBVS0cKHJnqEJaXIqAMqgJO9gAwybL2E7xe9qQZDr4J2CA0CxAtNC0Boxr8btXLopFLp0PWcJf8L9I6Bnv9ARtkisdIMLLx4GNLsopMbMvf1P9LXCNWLKmRGCDKo3N4vvUhY7bBpv6nEeDTO\/oU7mh5T37WkPBRQhHrVJs7lTiljdD2tCiBraXCJY+h+e7jpTKniTc\/A+Xc","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739633,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAXk9AAKYGo5kKAAABCQkJCsqGAbs6mT7jwXrcAlAYAfXTAQAAFwMDABPuHGcQnap0Vm7XVP89BjuxPcso","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739633,"pkt_len":134,"pkt":"ZmZmZmZmRERERERECABFAAB4Vb1AADsGFvQJCQkKCgAAAQG7yobBetwCOpk+41AYAHvgMwAAFwMDAEuf8FnU6xhGOURGBoRDN3wq2DAZCmPVTSnU3vLzpSv0xnEWwtxWw+S8xLuhv8sm5rPi9TW2uaKE9E2ATpSI\/WmLTaqDOIUZ3oIMR9g=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739661512,"flow_last_seen":946739661512,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp"}
+0776{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":339,"pkt":"REREREREZmZmZmZmCABFAAFFx6JAAK8GN2cKAAABuetRAa6gAbuz5lknlG0\/21AYAfbM4AAAFgMBARgBAAEUAwMfgFJ2Kafn6OC8bsQNsKFbNXsDyxgypaGgbuYoVgNdqiAeN08qEmNJsvb5yXXS9i9uE1kipCfBRoZuyc\/JvsnF3AAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAAClAAAAFAASAAAPZG9oLmRuc2xpZnkuY29tAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AIIH2RRfX3PNaXYMOoXj3ynNGqfHChI6\/gAXerDGvzggi","pkt_caplen":339,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":946739661512,"flow_last_seen":946739661512,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":305,"flow_max_l4_data_len":305,"flow_avg_l4_data_len":305,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+4613{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":3168,"pkt":"ZmZmZmZmRERERERECABFAAxS7o9AADQGgG2561EBCgAAAQG7rqCUbT\/bs+ZaRFAYA+rX7QAAFgMDAHoCAAB2AwOIv9853ekbZoNmLmgcqNPyyS1j9KmZm6LL1EB3x+W+MyAeN08qEmNJsvb5yXXS9i9uE1kipCfBRoZuyc\/JvsnF3BMCAAAuACsAAgMEADMAJAAdACD6x6OWYowjGpQ7hpL1\/XAvKAPz7Qey4KV7v02zhqXZdBQDAwABARcDAwAgyc0HM+W8H8TE3DEJWTZrLIbavzRZjtX85L8RdcWlDvUXAwMKE3Ep4ySuvwn1mgGngq567huqNt4kq0krhrI\/h93Xu5m86O9X2PLgikjAQ\/f9b0D4TlJnxV9cGU04GfVlCuVdBuDl1OIowNDzv97yB1hnS\/nmnSeVxy1F8D7\/C2lvCqf2cxAVE09ueyG1Z8bXZ2QECTYKbWaJhHhH3grXMLxM9TK7dwfYp5ry3mgBLj8Im1sBBtK1ijR5DOPlXD4i38GWBdXuEFX66BB\/RJoRwVEIncNbQelSZeCqjUb3u++TUwMNQylDBUpnEAe47WxBvCiB3j4t00aQSmqM0TAluU8dwn7tiUiJEwAYZgDG8XeCA2d8CwkyaaNUs0P3Rp5Ub77dFKLlWkM7Ox84gnAyRhVMHCmMumYMkWKlAivuj\/eXgWwWByB6smKGxdGHvMorcYTbQq9mZYmNNNkDPDaVaw5533PFvpx4ba99q1b36RpLWXBUvp3e8mh0pBow5UcR930tP8k9y3Mp\/Hul\/USMW6fOtKvrODulyByiQtZSjqe6z4\/9jz9br68\/R0pBmxYIdiwDh9sAHDejB9VSYvk7ssbBQpn+Jgwnz6Ryy+sDgPoInVRafSLVQ2XaqYm5f6C0Jwzhr6UtNZ4\/zNTcpzOWnfrCB0SA4OuUkh\/XzE\/16DFk8ZQDliBoueyPhn8cEizoLe43IQ4BRx1FGhFopJsvL2cINLJIZh8DTM\/8W7f\/ASccXTbKN3NreGL2zPJ9HkyArzmAuS0H6AWBUpZyjU0X4LPypLaoIp74s3Z6LMGrDv+Q9HPcSM3AsvYaPpVMikXZgrncjZjmSO3nKjVK7tuPHzmBxV2ASbUY9dkYy7qS1LbwD5HCaZkMJLquTC43\/zrZa9Cf+VJlQO+7\/bTkI19jV7MBsNxvCJS3vho32OcNSgskst5WCDisQYxOEJ7yIiJ4Qj131r3komITCdIi6sfPNECBD925ao9iSOw1a3NghVbKi1Ke9+osy6p4OIfl7R\/jJIRkFpjTHB9lrhuKyd3x90HahF\/Bgrc+0OPDW3df50BV25QUTv0YHg583iZZwuimhgpeeN8oRbZn4Oz1sb61wMILMVA1YkIFgELm6QWH0EjBDa5PcdPXwcXSRAXJR2\/zX8giHU9oVoqfNaIjA+SmyaolS9o0C9Gxx9xhkTFg+SAbN3Goh5osUJrTzgif84rF3v\/clkf8\/ZhPyDROa9H0yWh+TK3VY9NLRXxv12lS5FZMqutTNAtmppSaz1n5imbXVp1Da9\/rGuGJgyHbUPRjpcY\/qQ4nrdYPUt0lBpjbxywR21B5bH94VrAutoZgT1NlpA1fjy8uX6CC\/PzzpWgwoLz2\/ah06JLAEuj5ndY\/3P\/Cea86JZSQRIAOkxHfXLLrlrueGx1dvDahl9VAk02WVblMiy86oo72YX2jdNNf7IRMOaPtI08s6slCfPDpn3bANNyLKCX6T8oskMhdiK\/HIjCb1KyAdgQ2+yLvi3d+MuMeWmC07amcrbn+OTYQQNPWx6i\/o5VJfAp896EdOSd0n7JnPYzTA1M2RyiA5D2thGuZ18x5oW4andkKefpZLKocbhraKqdRDR2qHe1UOjP7ac97YdAdmgxzkuJnD41fZ8SEi5Zg3NfdmEEfpkvRjC5orTLd0fIsx5c1+XLU\/R3b4bQM96DkiRuZJ1NUlIhf9JvTA7QhsNS9Evhm+KxSrzo4fPncRHMt8lm5+VkFq5jZsS\/4aS9tmtMGO7fcr\/LpSveCPtAloCQrU+vhpaXaC4\/SCuRji5PdK182R618OsLro46yH5FqoSw3EFuupxW4KHdDcJyAmbvTP3RLz1SxCnflYoAqTczyrDRGBg9\/VwVoEVI1F90s2UJwdF3wAnZAvtsFo0aX7P\/QLLigT0+21EtehOsx99nALYpQP+Wes4pdBUuuM1hrGs4phO3GFIyYVSCdORl3bwKcDgUn6jxeA5jLALqAkUQz6oQZAw+UAmaFT7liB5ZMHspe2Nk5qb3bDaj1FmXHIWt\/85M5M02qebtth3yNCkr6Yp8QH7DkvUBEcBvugZfGdO8uohym\/eNU58r4tZ+dX\/tuHtfYu\/HTthyF6zJIA5NCwZI8ZPOa0Ik2ZVHuDdccBZzRFIr6iS6N658h5UD2w34\/Zc25OfWHIIyNU8f8\/IYCk9XVJNve0Okk42KtkEZEvU5b0G1QgC8PnK8r+XSR+vGYlx30IHhP0Drstay6UqCpdjb38zyt16Qx9KI1K78\/2x0ZLR7g9lNe5aJSm2DGdBsBLk1r5a74FD95UK8Adgld6WS3J1isO2nKe9Xs1y3yG0BHL6PVzcVJ6xLZkhyj81HERDbvsw89dCQ0RJq5YmEae+boIDnKyAnLYzUgmbMRlc1g8JOgQmr6\/NRcNQVzPj9Tmr7h+4nauDzZ0EwSB6bpnhekE6zTzsN8ksFy6WPV1V2TWaFMCxIJpm4tqxJloTCvFyT3CBtW57hPqqD33WSzMFQ4mYuH5Kgu\/JydyuTxbX33iR4YxYd7QhqiqEqf7Z40jPc99ZwAIj52PTzQ7U+ojkqP4MuUynWiVDvS\/8M2\/Vvth6PA4ClC+NG9V0jqT2CwEy0LU0ERe0qEd656+zZx\/fgC3xfIuWV0svyqgeH7U8anrlDCpp7N40O2SWqb3L3JMSf4o49g5Y7jySS1fW2+m5VjaQqCccoq+\/wn0QIhjH7Xd2oER1gcyADsjGJt5aqBudWst9NAdC7\/E6mgwXOhZmtXb1lcPmN1A3ldDXRkgXTncFzTkiGIgqqygowkLd1h\/u0K8p6hXN6SporJbwLrTenWrNDIG63gFBLm2D7U+S642eghPumVgo7B1N6elGvUpSDX3m8qB6zRisoSKoWKWO5xgUo0OWMndotDAaZPAq3bhL2Pxzdl9WOKnnP6NOK4+F4BC3OgZgYIEUhrknbM3wBtdHfsfGuj0RFj5lNw2AlFe8pNBDRkjYdmUdc0f\/vnWwnfo22NWKX1BdiVu7196lmWb3TQ4gFhlK81yNy7eFJuFbgrYZ5PUlfjIwTDgxIXshraxns8270zwqor2u3QZYQoN4I1EUcEja7lh2qdAWxfca\/zxpKtNeCFUm8zfvAy2hjwmAqVnw7n4Et+Xyf9ksFEQ4\/qzsOHpBM0zGs5xxH5dXSgC84hPug8TuHm5XeS02QK5ivwcMFrRGIBts0M6ytr6tm6t5af5Z2U58e0QlvyTSXCPiJUK3gUQUYViS\/IjXLR2ycg4306mXwXdbQ8v7MG8Jbo+42mtOwsAND+01bl1fOhl5IjO\/hKWjGNBJndlQaRfYzoY1bNcjrUVpsWniWOjJBYJ9yapHVp6DQ0QxTAp4enh41yjjXkuC9cO0IfBYAr0q3doev3F6MDmfD3QC30o0nnTuJKglBmQmNqmFF98Ioa6LYtVQSVj9fT7Jq0Jj7\/w6McuInFQUSdd3NIs7zDF4f1McMigXXd3svv1byyFwMDARmEZ3FvSkJXAws42ybGrYb\/Ga9WUTit+emudCQdO3qxSLRL9Xz90Zj\/0AIfatwlfnnVgLFc5QxTIdMvpyCnIjSAcDaEJvu6yM03S3K45PurYyNI6VNrD8T3C7JZ2oGRKr9xNDuiMdmtC9\/9YGpIp8JcXSnnpIql+dalqpwG9n50trcQI0C4J+hm1Yu6USN4wzVC+tr3gsW6PyyDAAs17vVbo+Scs5p00FZ1o\/rHfMtLfFwh8MAYWoGvtptGh9N2zS+PrJ1tBcSPIWnstLtsnAnrYxfC9FGgvCH\/DigiWfhGZwyoa504FzWxS6CzOvDPhsC522yXw\/\/MDJuJbpdH1g+oBnB701N1aymW+zBchXMoA1YOfcUScPREsxcDAwBF82UTEIbXenVn7eF73krbJp8pjxkB3FH+h3306Rr5JIHM3AbirkPdWnHupm94YxIhIDqYUbC9YcWD3w0dLlmwNJiAVT\/+","pkt_caplen":3168,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":946739661512,"flow_last_seen":946739661535,"flow_tot_l4_data_len":3439,"flow_min_l4_data_len":305,"flow_max_l4_data_len":3134,"flow_avg_l4_data_len":1719,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"doh.dnslify.com","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0501{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":134,"pkt":"REREREREZmZmZmZmCABFAAB4x6RAAK8GODIKAAABuetRAa6gAbuz5lpElG1MBVAYAfXMEwAAFAMDAAEBFwMDAEU4SkGRhTVOzjkja1xO2w+N\/vz+OkRmcdhLqaqpXQNb6A6SRcM4Xi9F7CyJ7zWjY541e0wZEZOfbwCMOI4VGHKGlHVB\/Ow=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":140,"pkt":"REREREREZmZmZmZmCABFAAB+x6VAAK8GOCsKAAABuetRAa6gAbuz5lqUlG1MBVAYAfXMGQAAFwMDAFHO0jbbFd53\/ZuDXr7vmFxcqFu0J8Lh\/X61p5xsIdeiV0og3mV\/A6pcxScMeZBlAeEIH5hDkEBw1sCQ9Mi8V+\/F1osqkP5BLLW5Wz8JDl02L8Y=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":225,"pkt":"REREREREZmZmZmZmCABFAADTx6ZAAK8GN9UKAAABuetRAa6gAbuz5lrqlG1MBVAYAfXMbgAAFwMDAKbOQ7z0brbBFxgWZxwhW0QoxqthM\/YW2w0x8djZzSiWzVGpKLqzVQgkOT3HmOXxWdTl2fvHJh3N5G4mHK5ZWfcqKFlK\/fPDvKjV9wXy2wts7afxohUDvCcvWmA2n3Ej1Bu+ajruE2SeIFZ8sHHacL4bjLmiwm5VQ\/eEaQaQGwb91Bxh8GH0Jbyin88rP63FYAmiEMZR6fMeJDXgQHxpsypc8wZI+C21","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":153,"pkt":"REREREREZmZmZmZmCABFAACLx6dAAK8GOBwKAAABuetRAa6gAbuz5luVlG1MBVAYAfXMJgAAFwMDAF4dHIBrxxjOeZ3RLYf0gSXI77GDd3F\/5Ibu9MwuVRD86Sy9Mt76SkXOccR6k1VZeLW5qY6+yPueBKxzoFoyHcBggXkWxrprM98SlYzXPlEx\/xAkXb\/EfmzUJ3hM\/QNg","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":119,"pkt":"ZmZmZmZmRERERERECABFAABp7pNAADQGjFK561EBCgAAAQG7rqCUbU4Ds+Zb+FAYA+rjgQAAFwMDADz8EhRHRoEIGQSdXCQImbp\/kE02TJ3P2JKfMrXSLN2s0fZwe6bzpYKn57VMu3ihtS7cmJf9RaTPQ423d6g=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHx6lAAK8GOF4KAAABuetRAa6gAbuz5lv4lG1ORFAYAfXL4gAAFwMDABq2pz77x0Spcx+S5cJ15Kr8yUOJz7rCg6vZqA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":300,"pkt":"ZmZmZmZmRERERERECABFAAEe7pRAADQGi5y561EBCgAAAQG7rqCUbU5Es+Zb+FAYA+pHfgAAFwMDAPEq+AAN4OOGz2PFvsXGwLmERFftSwIvlatBQPPp3Tpcl+tRmMLE1bof51iC\/jDoI3iAUHEfYu9MPcywFni2OthFT1RIweIBH7P0Pqj6MGnoJUxgJ\/GKsJuciCr4bdqjpe+Wqwre3tRn7iEPSFaS1aFPxwpTxb27Hm3CBmx6UrY6nmEEX59Tgwpx8RUVMDAjYeboT2BBHXstFPir22ebrX\/JcdmlzNTbY4dt9am6Zt2Myg9uQKD3\/0OqynsDvUcRBYBOrCDJGBk2dp4pSKbQayqWNRv0Heku2+iNA+kxwq7BGRv6M4HOM78lHhqW8NkDKFoY","pkt_caplen":300,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739661,"pkt_len":89,"pkt":"REREREREZmZmZmZmCABFAABLx6pAAK8GOFkKAAABuetRAa6gAbuz5lwXlG1POlAYAfXL5gAAFwMDAB47P6zsJLwbwYHugGHZbxWAzApODX7VmeBEgUQGckw=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739691,"pkt_len":78,"pkt":"REREREREZmZmZmZmCABFAABAx6tAAK8GOGMKAAABuetRAa6gAbuz5lw6lG1POlAYAfXL2wAAFwMDABMWEHy35xGvTWnWCOeYpetAF3W+","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739691,"pkt_len":78,"pkt":"ZmZmZmZmRERERERECABFAABA7pZAADQGjHi561EBCgAAAQG7rqCUbU86s+ZcU1AYA+q7SwAAFwMDABMugBtN+BphYqwIRyb7JrNaAFhQ","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739879619,"flow_last_seen":946739879619,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp"}
+0777{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":342,"pkt":"REREREREZmZmZmZmCABFAAFIcKVAAGQGIToKAAAB0frxGYueAbsFpAMoj2Q4kFAYAfaFCwAAFgMBARsBAAEXAwNRmx2nSkx+6m6KcnM1jGr2d9+E6hEUWeU+Rct80JF14yBFUW7fbN2m28L3JLX9K8uSgoBCeEP2oBBIn6aFnchRZQAmwC\/AMMArwCzMqMypwBPACcAUwAoAnACdAC8ANcASAAoTARMDEwIBAACoAAAAFwAVAAASamFyamFyLm1lZ2FuZXJkLm5sAAUABQEAAAAAAAoACgAIAB0AFwAYABkACwACAQAADQAaABgIBAQDCAcIBQgGBAEFAQYBBQMGAwIBAgP\/AQABAAAQAA4ADAJoMghodHRwLzEuMQASAAAAKwAJCAMEAwMDAgMBADMAJgAkAB0AILzmWxHpwarRt4Ej829OBgtUnpC5uzX3e58yGu+riJtB","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":946739879619,"flow_last_seen":946739879619,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+3153{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":2102,"pkt":"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","pkt_caplen":2102,"pkt_type":2048,"pkt_ipoffset":14}
+0850{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":946739879619,"flow_last_seen":946739879647,"flow_tot_l4_data_len":2376,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1188,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2395{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":1535,"pkt":"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","pkt_caplen":1535,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":33,"flow_packet_id":3,"flow_first_seen":946739879619,"flow_last_seen":946739879647,"flow_tot_l4_data_len":3877,"flow_min_l4_data_len":308,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":1292,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"9":"TLS Expired Certificate"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"jarjar.meganerd.nl","server_names":"jarjar.meganerd.nl","ja3":"d0ee3237a14bbd89ca4d2b5356ab20ba","ja3s":"2464432ec440b95b36263230c3148d11","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=jarjar.meganerd.nl","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"17:C9:8C:F5:DD:1F:0E:0F:DC:C5:42:4F:ED:C4:CD:57:5A:5D:7A:4F"}}
+0519{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":147,"pkt":"REREREREZmZmZmZmCABFAACFcKhAAGQGIfoKAAAB0frxGYueAbsFpARIj2RGWVAYAfWESAAAFgMDACUQAAAhIDhgl\/pgcZzI6lO9kUAZaFzioUwXXdw7Ym0x6dU\/q10rFAMDAAEBFgMDACgAAAAAAAAAAOFPtsf5Zh\/ZpfjCXPcTMYNe90ERP2qdVmtu1keYta\/S","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":105,"pkt":"ZmZmZmZmRERERERECABFAABbIhRAADcGnbjR+vEZCgAAAQG7i56PZEZZBaQEpVAYAfVgFwAAFAMDAAEBFgMDACjtN4hu+Wj5TjjaWNwCyZ8ctKfP1eL5gPNYY2UtZk64saxD6JdGPhjz","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":123,"pkt":"ZmZmZmZmRERERERECABFAABtIhVAADcGnaXR+vEZCgAAAQG7i56PZEaMBaQEpVAYAfW7lgAAFwMDAEDtN4hu+Wj5T72OhZyUZQISOWl\/\/qTKLhF2qZvrmv3+8i7gpYLzyJ27T1c244ZQ8rq8Ep2UkicIrJvjhNE5\/mV\/","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":147,"pkt":"REREREREZmZmZmZmCABFAACFcKpAAGQGIfgKAAAB0frxGYueAbsFpASlj2RG0VAYAfWESAAAFwMDAFgAAAAAAAAAAa280Fxh3JW46GJAjjYu7f0AHRGlloII3NWdDFRR7g7uAAWHe42u\/SRLCv2XeFgp7Y8JMnKsKBfc1lIKIwFqkTIuFvkG7Q20AuAJqIbfZCaO","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":231,"pkt":"REREREREZmZmZmZmCABFAADZcKtAAGQGIaMKAAAB0frxGYueAbsFpAUCj2RG0VAYAfWEnAAAFwMDAKwAAAAAAAAAAvdgXqkoTGsNMGDbMEPZs060afb5FBw8aNJXBj3x0ikE8tS+70XTD6v7NIj83Jl4aHfI5M+M9ntUaIMUeHes31olc0R0IcoameWjBJMGcQZYjYSCEe12Rds+SDdZ3LheQJPS1sIvutWg9Gcbqy6+1zhgr7JbVuY9ymFOF39Rs01jFk9NnBaExDspDWOs4Un4OVLNDhP64cb+aQZR6MM7JrdCkhYX","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":198,"pkt":"REREREREZmZmZmZmCABFAAC4cKxAAGQGIcMKAAAB0frxGYueAbsFpAWzj2RG0VAYAfWEewAAFwMDACEAAAAAAAAAA6CQqxFlSAHeIGrNjv2oOUR3J0LxPSBmRNgXAwMAZQAAAAAAAAAExHOEvRhOCPX8FBYzFH5SzQbMc1\/PQCi5oUyd3xEuWtFGchJuac7fE2AflAd517YV1PK1PLzgzI16FJ1uwBGcVaS+ZZdB1nwtgUxs1fywQdiqN6mdFg6AuG3724Et","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":92,"pkt":"ZmZmZmZmRERERERECABFAABOIhdAADcGncLR+vEZCgAAAQG7i56PZEbRBaQFs1AYAfUjDAAAFwMDACHtN4hu+Wj5UOMafaC9vTy\/Mct502s5JfkjzPTjcT\/XAoo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":96,"pkt":"ZmZmZmZmRERERERECABFAABSIhhAADcGnb3R+vEZCgAAAQG7i56PZEb3BaQFs1AYAfWevQAAFwMDACXtN4hu+Wj5UQTQ8xGzr5tXNbl6A4DoCWK916SfRq4aMmGacpiP","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":342,"pkt":"ZmZmZmZmRERERERECABFAAFIIhpAADcGnMXR+vEZCgAAAQG7i56PZEchBaQGQ1AYAfXh1wAAFwMDARvtN4hu+Wj5UmDU\/NMvzW4ZaZqdIfuvzN649M3dg1IslZuV497wZdEWN18SPWfNvNW8q4xHtzKTRCxZAREEWQlp4nWAChN9Hf0WxJtC4IwpmzNwtcEChHWK9OqnFadz54IjXtGIgyjPtiP9fPB2F8WZ5zS+xv6fFfbEDAHBnShO4sPY76jns+QN2mo17OrzBGKkRb9cfJAt3iMizwZUpOlQOP2GiA85Nvlo6Yb9YkROjwvoZdV9nxmOZsEFjMzRr4OgXqZov\/LdhkmpLzhTBsID8buM\/NdEZejpGf0vO4i4denS\/k8t04Fc8guOCMoh6UEz6cm3PEl+vJqH8CPXw5T1kX6wZ8C7qcgMbHakCiCtWYQ2ONg2qedqPksX","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739879,"pkt_len":96,"pkt":"REREREREZmZmZmZmCABFAABScK5AAGQGIicKAAAB0frxGYueAbsFpAZDj2RIQVAYAfWEFQAAFwMDACUAAAAAAAAABVhjIGTs+\/AOgfYG19x5nx37HUS1BlwfDA6hyRYj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","pkt_oversize":false,"pkt_ts":946739888,"pkt_len":85,"pkt":"REREREREZmZmZmZmCABFAABHcK9AAGQGIjEKAAAB0frxGYueAbsFpAZtj2RIQlAYAfWECgAAFQMDABoAAAAAAAAABvrFh2UDsPRtvqC2sowvAB5faw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":28,"flow_packet_id":18,"flow_first_seen":946739400702,"flow_last_seen":946739407673,"flow_tot_l4_data_len":5927,"flow_min_l4_data_len":51,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35714,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":11,"flow_packet_id":22,"flow_first_seen":946739312203,"flow_last_seen":946739327905,"flow_tot_l4_data_len":5556,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":252,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.203.179.248","src_port":41720,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":33,"flow_packet_id":14,"flow_first_seen":946739879619,"flow_last_seen":946739888204,"flow_tot_l4_data_len":5165,"flow_min_l4_data_len":51,"flow_max_l4_data_len":2068,"flow_avg_l4_data_len":368,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"209.250.241.25","src_port":35742,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":24,"flow_packet_id":20,"flow_first_seen":946739389936,"flow_last_seen":946739420902,"flow_tot_l4_data_len":7077,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":353,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.76.113.31","src_port":52028,"dst_port":8443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":25,"flow_packet_id":16,"flow_first_seen":946739390933,"flow_last_seen":946739421078,"flow_tot_l4_data_len":5644,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3131,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"217.169.20.23","src_port":34036,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":9,"flow_packet_id":17,"flow_first_seen":946739311566,"flow_last_seen":946739327918,"flow_tot_l4_data_len":6769,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":398,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.134.196.55","src_port":55322,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":13,"flow_packet_id":15,"flow_first_seen":946739336955,"flow_last_seen":946739364937,"flow_tot_l4_data_len":6081,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":405,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.233.106.232","src_port":46658,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":19,"flow_packet_id":18,"flow_first_seen":946739378577,"flow_last_seen":946739410674,"flow_tot_l4_data_len":5436,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2523,"flow_avg_l4_data_len":302,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.28.34","src_port":33724,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":5,"flow_packet_id":16,"flow_first_seen":946739305650,"flow_last_seen":946739328075,"flow_tot_l4_data_len":6196,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2214,"flow_avg_l4_data_len":387,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"172.104.93.80","src_port":40938,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":3,"flow_packet_id":17,"flow_first_seen":946739304846,"flow_last_seen":946739327879,"flow_tot_l4_data_len":6365,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3151,"flow_avg_l4_data_len":374,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.158.147.50","src_port":55962,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":7,"flow_packet_id":24,"flow_first_seen":946739310980,"flow_last_seen":946739321153,"flow_tot_l4_data_len":6132,"flow_min_l4_data_len":51,"flow_max_l4_data_len":3023,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.43.135.1","src_port":38186,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":12,"flow_packet_id":15,"flow_first_seen":946739317842,"flow_last_seen":946739327879,"flow_tot_l4_data_len":6292,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":419,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"195.30.94.28","src_port":60026,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":30,"flow_packet_id":17,"flow_first_seen":946739402059,"flow_last_seen":946739432187,"flow_tot_l4_data_len":6815,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":400,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"46.227.200.54","src_port":57058,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":16,"flow_packet_id":16,"flow_first_seen":946739354159,"flow_last_seen":946739364932,"flow_tot_l4_data_len":5583,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3134,"flow_avg_l4_data_len":348,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44640,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":20,"flow_packet_id":17,"flow_first_seen":946739380697,"flow_last_seen":946739410804,"flow_tot_l4_data_len":5584,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2858,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"1.0.0.1","src_port":53802,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":27,"flow_packet_id":17,"flow_first_seen":946739400581,"flow_last_seen":946739430677,"flow_tot_l4_data_len":5685,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":334,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"193.70.85.11","src_port":54164,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":26,"flow_packet_id":16,"flow_first_seen":946739400294,"flow_last_seen":946739430460,"flow_tot_l4_data_len":5357,"flow_min_l4_data_len":21,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":334,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"146.255.56.98","src_port":43718,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":32,"flow_packet_id":13,"flow_first_seen":946739661512,"flow_last_seen":946739691599,"flow_tot_l4_data_len":5030,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3134,"flow_avg_l4_data_len":386,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.235.81.1","src_port":44704,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":17,"flow_packet_id":17,"flow_first_seen":946739374011,"flow_last_seen":946739404206,"flow_tot_l4_data_len":5852,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3145,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"116.202.176.26","src_port":43106,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":8,"flow_packet_id":17,"flow_first_seen":946739311335,"flow_last_seen":946739327906,"flow_tot_l4_data_len":5468,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1582,"flow_avg_l4_data_len":321,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51770,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":31,"flow_packet_id":12,"flow_first_seen":946739603327,"flow_last_seen":946739633413,"flow_tot_l4_data_len":4845,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3034,"flow_avg_l4_data_len":403,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"9.9.9.10","src_port":51846,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":29,"flow_packet_id":18,"flow_first_seen":946739401864,"flow_last_seen":946739432023,"flow_tot_l4_data_len":7232,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":401,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"95.216.229.153","src_port":43888,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":10,"flow_packet_id":18,"flow_first_seen":946739311703,"flow_last_seen":946739327879,"flow_tot_l4_data_len":5898,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":327,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"51.15.124.208","src_port":52386,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":18,"flow_packet_id":23,"flow_first_seen":946739378281,"flow_last_seen":946739408545,"flow_tot_l4_data_len":6994,"flow_min_l4_data_len":26,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":304,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"85.5.93.230","src_port":59026,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":22,"flow_packet_id":16,"flow_first_seen":946739385090,"flow_last_seen":946739415188,"flow_tot_l4_data_len":5594,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3136,"flow_avg_l4_data_len":349,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"136.144.215.158","src_port":52176,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":21,"flow_packet_id":21,"flow_first_seen":946739380870,"flow_last_seen":946739411017,"flow_tot_l4_data_len":5067,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":241,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.90.28.0","src_port":33338,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":946739298533,"flow_last_seen":946739298798,"flow_tot_l4_data_len":3157,"flow_min_l4_data_len":50,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":789,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53674,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":946739299058,"flow_last_seen":946739299326,"flow_tot_l4_data_len":3155,"flow_min_l4_data_len":50,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":788,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"139.99.222.72","src_port":53676,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":14,"flow_packet_id":19,"flow_first_seen":946739348407,"flow_last_seen":946739365024,"flow_tot_l4_data_len":5744,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3118,"flow_avg_l4_data_len":302,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"149.56.228.45","src_port":36012,"dst_port":453,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":6,"flow_packet_id":20,"flow_first_seen":946739310588,"flow_last_seen":946739327990,"flow_tot_l4_data_len":5802,"flow_min_l4_data_len":44,"flow_max_l4_data_len":3120,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"167.114.220.125","src_port":37530,"dst_port":453,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":2,"flow_packet_id":30,"flow_first_seen":946739304432,"flow_last_seen":946739327879,"flow_tot_l4_data_len":8783,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.95.218.42","src_port":50614,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":23,"flow_packet_id":18,"flow_first_seen":946739385216,"flow_last_seen":946739415379,"flow_tot_l4_data_len":5059,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":281,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"104.28.0.106","src_port":39214,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":15,"flow_packet_id":15,"flow_first_seen":946739348961,"flow_last_seen":946739364914,"flow_tot_l4_data_len":5760,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":384,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"45.153.187.96","src_port":38018,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap","flow_id":4,"flow_packet_id":17,"flow_first_seen":946739305016,"flow_last_seen":946739327879,"flow_tot_l4_data_len":5856,"flow_min_l4_data_len":44,"flow_max_l4_data_len":2924,"flow_avg_l4_data_len":344,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"185.253.154.66","src_port":59404,"dst_port":443,"l4_proto":"tcp"}
+0153{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dnscrypt-v2-doh.pcap"}
diff --git a/tests/result/nDPId_dos_win98_smb_netbeui.pcap.txt b/tests/result/nDPId_dos_win98_smb_netbeui.pcap.txt
new file mode 100644
index 000000000..4215a6322
--- /dev/null
+++ b/tests/result/nDPId_dos_win98_smb_netbeui.pcap.txt
@@ -0,0 +1,375 @@
+0373{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409796,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACQAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAABwAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAACgAAAAAAAAAAAAAAAAAAAAAATURKUjk4ICAgICAgICAgIA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576409797553,"flow_last_seen":1576409797553,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0471{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgBwAAAIAR07fAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1576409797553,"flow_last_seen":1576409797553,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0472{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCAAAAIAR0rfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCQAAAIAR0bfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409797,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgCgAAAIAR0LfAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":1576409798047,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp"}
+0402{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409798,"pkt_len":60,"pkt":"AQBeAAACAFBWM3ieCABFAAAcCwAAAIABn7TAqO+B4AAAAgoA9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":1576409798047,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409798,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0472{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDgAAAIARzLfAqO+BwKjvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409799,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHg==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409800543,"flow_last_seen":1576409800543,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0481{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEAAAAIARybrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1576409800543,"flow_last_seen":1576409800543,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0481{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEgAAAIARx7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409800,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFAAAAIARxbrAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFQAAAIARxLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFgAAAIARw7rAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409801,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgFwAAAIARwrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGAAAAIARwbrAqO+BwKjv\/wCJAIkATAq6AAQpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGQAAAIARwLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGgAAAIARv7rAqO+BwKjv\/wCJAIkATA22AAgpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgGwAAAIARvrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":180,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA","pkt_caplen":180,"pkt_type":166,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":166}
+0482{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHQAAAIARvLrAqO+BwKjv\/wCJAIkATHyvAAIoEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEABJPgAAaAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409802,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAABgHgAAAIARu7rAqO+BwKjv\/wCJAIkATAu6AAQoEAABAAAAAAABIEVORUVFS0ZDREpESUNBQ0FDQUNBQ0FDQUNBQ0FDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":1576409807597,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0657{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409807,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJAAAAIARtTXAqO+BwKjv\/wCKAIoA0Qn+EQIADMCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQNg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBAABUEVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1576409807597,"flow_last_seen":1576409807597,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409811,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409811,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409811,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409812,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409813,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409815,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409817,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409819,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409822,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409825,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409828,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409832,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409836,"pkt_len":91,"pkt":"AFBWM3ieAAwp1HmyAE3g4AP\/\/wBKAAQAAAAAAFBWM3ieBVAAAAAAAAwp1HmyBVL\/U01CKwAAAAAAAAAAAAAAAAACAQwAAAAA0AAyAADBAwEBAAcABEhlbGxvAA==","pkt_caplen":91,"pkt_type":77,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":77}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409844,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409844,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgACo2haC8B0A+lo+\/82xHHoV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQAEuP7\/UOih91uNRuQWUOhaVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409845,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409846,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142}
+0625{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409851,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJQAAAIARtE3AqO+BwKjv\/wCKAIoAuRxGEQIADsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409856,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiAAQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":61,"pkt":"AwAAAAABAAwp1HmyAC\/w8AMsAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":61,"pkt":"AAwp1HmyAFBWM3ieAC\/w8AMsAP\/vDhcVAAMAFQBURVNUMSAgICAgICAgICAATURKUjk4ICAgICAgICAgIA==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAAPw8H8sAP\/vAQAAAAAAAQACo2haC8B0A+lo+\/82xHHoVEVTVDEgICAgICAgICAg","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAAPw8XNgDAAAAIARzrfAqO+BwKjvAgCJAIkATA7DAAgpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8AEBAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEBDQAAAIARzbfAqO+BwKjvAgCJAIkATHy8AAIpAAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8AAADgD\/7xmPygUVAAMAFQP\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieABLw8AADDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEDAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0504{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":174,"pkt":"AFBWM3ieAAwp1HmyAKDw8AICDgD\/7xYEAAAAAAEAFQP\/U01CcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAABrAAJQQyBORVRXT1JLIFBST0dSQU0gMS4wAAJNSUNST1NPRlQgTkVUV09SS1MgMy4wAAJET1MgTE0xLjJYMDAyAAJET1MgTEFOTUFOMi4xAAJXaW5kb3dzIGZvciBXb3JrZ3JvdXBzIDMuMWEA","pkt_caplen":174,"pkt_type":160,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":160}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEEDwAAAIARy7fAqO+BwKjvAgCJAIkATA7DAAYpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":101,"pkt":"AAwp1HmyAFBWM3ieAFfw8AIEDgD\/7xYMAAABACgAAxX\/U01CcgAAAACAAAAAAAAAAAAAAAAAAAAAAAAyAAAhAA0EAAIAaAsCAAEAAwAVBQOAsmSPT8T\/AAAAAAgAFQUDgAEb9l0=","pkt_caplen":101,"pkt_type":87,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":87}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEEAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":155,"pkt":"AFBWM3ieAAwp1HmyAI3w8AQEDgD\/7xYMAAAoAAIAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAyAQAhAAp1AEcAPgYCAAAAFQUDgAEAAAAAABAAAE1BUlRJTiBST1NFTkFVAAT\/AAAAAAAYACkANLVcqnsYd8yVvD05\/JKBnmi3H4Zsvi3FXFxNREpSOThcVEVTVABBOgA=","pkt_caplen":155,"pkt_type":141,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":141}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEGAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":83,"pkt":"AAwp1HmyAFBWM3ieAEXw8AQGDgD\/7xYMAAACACgAAxX\/U01CcwAAAACQAAAAAAAAAAAAAAAAAAAAyAAyAAAhAAN1ACkAAAAAAAL\/AAAAAwBBOgA=","pkt_caplen":83,"pkt_type":69,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":69}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEGAP\/vCgADAAAAAwBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8AYGDgD\/7xYMAAAoAAMAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEIEQAAAIARyLrAqO+BwKjv\/wCJAIkATHuvAAIpEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":76,"pkt":"AAwp1HmyAFBWM3ieAD7w8AYIDgD\/7xYMAAADACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAABhAAEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEIAP\/vAAAAAAAAAgAEuP7\/UOih91uNRuQWUOhaV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8AgJDgD\/7xQAAAAoAAAAFQP\/U01CcwAAAAAQAAAAAAAAAAAAAAAAAAAAAAAy","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QELEwAAAIARxrrAqO+BwKjv\/wCJAIkATA22AAYpEAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409859,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409860,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409860,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409861,"pkt_len":115,"pkt":"\/\/\/\/\/\/\/\/AAwp1HmyAGXg4AP\/\/wBiABQAAAAA\/\/\/\/\/\/\/\/BVEAAAAAAAwp1HmyBVIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPMBAYBNREpSOTggICAgICAgICAgVEVTVDEgICAgICAgICAgAA==","pkt_caplen":115,"pkt_type":101,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":101}
+0625{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409861,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNJgAAAIARs03AqO+BwKjv\/wCKAIoAuRxEEQIAEMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409862,"pkt_len":180,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA","pkt_caplen":180,"pkt_type":166,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":166}
+0479{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409866,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142}
+0657{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409867,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlJwAAAIARsjXAqO+BwKjv\/wCKAIoA0Qj3EQIAEsCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQRg6gAATURKUjk4AAAAAAAAAAAAAAQAAyBBABUEVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8AoIDgD\/7xYEAAAAAAQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8AgMDgD\/7xYMAAAEACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAAAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8AwKDgD\/7xYMAAAoAAUAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAIUAAAABQAEAAUAAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8AoODgD\/7xYMAAAFACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAChAAAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8A4MDgD\/7xYMAAAoAAYAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75}
+0493{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":158,"pkt":"AAwp1HmyAFBWM3ieAJDw8AwQDgD\/7xYMAAAGACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAAECAFkABVYAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAAA=","pkt_caplen":158,"pkt_type":144,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":144}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":97,"pkt":"AFBWM3ieAAwp1HmyAFPw8BAODgD\/7xYMAAAoAAcAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAgwAAAQ==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8A4SDgD\/7xYMAAAHACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAADhAAAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":67,"pkt":"AFBWM3ieAAwp1HmyADXw8BIQDgD\/7xYMAAAoAAgAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":77,"pkt":"AAwp1HmyAFBWM3ieAD\/w8BAUDgD\/7xYMAAAIACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAQVq\/wABAAJ2+AAAAAA=","pkt_caplen":77,"pkt_type":63,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":63}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8BQTDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409868,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEXHAAAAIARvbrAqO+BwKjv\/wCJAIkATA62AAgoEAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0626{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409871,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNKAAAAIARsU3AqO+BwKjv\/wCKAIoAuRxAEQIAFMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":107,"pkt":"AFBWM3ieAAwp1HmyAF3w8BYSDgD\/7xYEAAAAAAkAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAABwACABYAIAAeKfZdEgAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA=","pkt_caplen":107,"pkt_type":93,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":93}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":97,"pkt":"AAwp1HmyAFBWM3ieAFPw8BIYDgD\/7xYMAAAJACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAQ\/\/AAAAAAAgAB4p9l0AAAAAAgAAAAAAAgAAAAAAAAAAAA==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83}
+1884{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":1204,"pkt":"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","pkt_caplen":1204,"pkt_type":1190,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":1190}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":69,"pkt":"AAwp1HmyAFBWM3ieADfw8BQaDgD\/7xYMAAAKACgAAxX\/U01CCwAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABBAQFkBAAA","pkt_caplen":69,"pkt_type":55,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":55}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":73,"pkt":"AFBWM3ieAAwp1HmyADvw8BoWDgD\/7xYMAAAoAAsAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQMAAB4p9l0AAA==","pkt_caplen":73,"pkt_type":59,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":59}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8BYcDgD\/7xYMAAALACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409872,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8BwYDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409873,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEeIQAAAIARuLrAqO+BwKjv\/wCJAIkATG2mAAopEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142}
+0418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":107,"pkt":"AFBWM3ieAAwp1HmyAF3w8B4YDgD\/7xYEAAAAAAwAFQP\/U01CLQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAABwAAABYAAAAiKfZdAQAAAAAAAAAAAAAAAAAKAFxURVNULlRYVAA=","pkt_caplen":107,"pkt_type":93,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":93}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEgIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":97,"pkt":"AAwp1HmyAFBWM3ieAFPw8BggDgD\/7xYMAAAMACgAAxX\/U01CLQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAACBAQ\/\/AAAAAQAgAB4p9l1kBAAAAAAAAAAAAQAAAAAAAAAAAA==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":73,"pkt":"AFBWM3ieAAwp1HmyADvw8CAaDgD\/7xYMAAAoAA0AFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQMBAP\/\/\/\/8AAA==","pkt_caplen":73,"pkt_type":59,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":59}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEiAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8BoiDgD\/7xYMAAANACgAAxX\/U01CBAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8CIcDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409876,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEkAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0626{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409881,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNKQAAAIARsE3AqO+BwKjv\/wCKAIoAuRw+EQIAFsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":78,"pkt":"AFBWM3ieAAwp1HmyAEDw8CQcDgD\/7xYEAAAAAA4AFQP\/U01CEAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQALAARcVEVTVC5UWFQA","pkt_caplen":78,"pkt_type":64,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":64}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8BwmDgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUFAADBAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":80,"pkt":"AFBWM3ieAAwp1HmyAELw8CYeDgD\/7xYMAAAoAA8AFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQEAAAsABFxURVNULlRYVAA=","pkt_caplen":80,"pkt_type":66,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":66}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409882,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8B4oDgD\/7xYMAAAPACgAAxX\/U01CBgAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADhAQAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409883,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8CggDgD\/7xQAAAAoAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409883,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEqDgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409886,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409888,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409888,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8CogDgD\/7x8AAAAAAAAAFQP\/U01CBAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409888,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEsAP\/vAAAAAAAAFAAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409889,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409890,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154}
+0496{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409891,"pkt_len":168,"pkt":"AwAAAAABAFBWM3ieAJrw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBfIgBAAAAAABNREpSOTgA","pkt_caplen":168,"pkt_type":154,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":154}
+0642{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409891,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZKgAAAIARr0HAqO+BwKjv\/wCKAIoAxRTzEQIAGMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAAAAAAAAAAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409892,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409893,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0642{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409893,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZKwAAAIARrkHAqO+BwKjv\/wCKAIoAxYA9EQIAGsCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409894,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAV09SS0dST1VQICAgICAgHQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0642{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409894,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409895,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0643{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409895,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLQAAAIARrEHAqO+BwKjv\/wCKAIoAxYA5EQIAHsCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409895,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGABXT1JLR1JPVVAgICAgICAdAQJfX01TQlJPV1NFX18CAQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0643{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409896,"pkt_len":231,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADZLgAAAIARq0HAqO+BwKjv\/wCKAIoAxYA3EQIAIMCo74EAigCvAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAFQAAAAAAAAAAAAAAAAAAAAAAAAAVAFYAAwABAAEAAgAmAFxNQUlMU0xPVFxCUk9XU0UACAEAFQQBj50BAAAAAABNREpSOTgA","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409896,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAQJfX01TQlJPV1NFX18CAQ==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142}
+0480{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":156,"pkt":"AwAAAAABAFBWM3ieAI7w8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgIP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":156,"pkt_type":142,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":142}
+0473{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgLwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409897,"pkt_len":180,"pkt":"AwAAAAABAFBWM3ieAKbw8AMsAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA","pkt_caplen":180,"pkt_type":166,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":166}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409898,"pkt_len":74,"pkt":"AFBWM3ieAAwp1HmyADzw8CwgDgD\/7xYEAAAAABAAFQP\/U01CAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAHAARcVEVTVAA=","pkt_caplen":74,"pkt_type":60,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":60}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409898,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8CAuDgD\/7xYMAAAQACgAAxX\/U01CAAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAABAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409898,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8C4iDgD\/7xQAAAAoAAAAFQP\/U01CBgAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0474{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409899,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409899,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0474{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409900,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgMQAAAIARqbfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8DAiDgD\/7xYEAAAAABEAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgIUAAgAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QEyAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAdTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8CIyDgD\/7xYMAAARACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAAAhAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8DIkDgD\/7xYMAAAoABIAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgIUAAAABQAEAAUAAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE0DgD\/7xYMAAAOACgAAxX\/U01CEAEAAwCAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8CQ0DgD\/7xYMAAASACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAABBAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":89,"pkt":"AFBWM3ieAAwp1HmyAEvw8DQmDgD\/7xYMAAAoABMAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgIUABYAEgAEXD8\/Pz8\/Pz8\/Lj8\/PwAFAAA=","pkt_caplen":89,"pkt_type":75,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":75}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE2DgD\/7xeBvAUDABUAAxXvAgCJAIkATAvHAAQpAAABAAAAAAABIEVORUVF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0552{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":201,"pkt":"AAwp1HmyAFBWM3ieALvw8CY2DgD\/7xYMAAATACgAAxX\/U01CgQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAABhAgEDAIQABYEAgz8\/Pz8\/Pz8\/Pz8\/FgAAAQAAAAAAECpjj08AAAAALgAgICAgICAAAAAAAIM\/Pz8\/Pz8\/Pz8\/PxYBAAEAAAAAABAqY49PAAAAAC4uACAgICAgAAAAAACDPz8\/Pz8\/Pz8\/Pz8WAgABAAAAAAAQyWSPTwAAAABURVNUACAgIAAAAAAA","pkt_caplen":201,"pkt_type":187,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":187}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":97,"pkt":"AFBWM3ieAAwp1HmyAFPw8DYoDgD\/7xYMAAAoABQAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgIUAAAAGgAEAAUVAIM\/Pz8\/Pz8\/Pz8\/PxYCAAEAgwAAAQ==","pkt_caplen":97,"pkt_type":83,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":83}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE4AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8Cg4DgD\/7xYMAAAUACgAAxX\/U01CgQEAEgCAAAAAAAAAAAAAAAAAAAAAyHUFAACBAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":67,"pkt":"AFBWM3ieAAwp1HmyADXw8DgqDgD\/7xYMAAAoABUAFQP\/U01CgAAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE6AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":77,"pkt":"AAwp1HmyAFBWM3ieAD\/w8Co6DgD\/7xYMAAAVACgAAxX\/U01CgAAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAAChAgVq\/wABAAJ2+AAAAAA=","pkt_caplen":77,"pkt_type":63,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":63}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8DosDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409903,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QE8AP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409905,"pkt_len":74,"pkt":"AFBWM3ieAAwp1HmyADzw8DwsDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAHAARcVEVTVAA=","pkt_caplen":74,"pkt_type":60,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":60}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409905,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8Cw+DgD\/7xYMAAAWACgAAxX\/U01CAQAAAACAAAAAAAAAAAAAAAAAAAAAyHUFAADBAgAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409906,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8D4uDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409906,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFALAAAAIARrUHAqO+BwKjv\/wCKAIoAxYA7EQIAHMCo74EAigCvAAAgRU5F","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0627{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNOgAAAIARn03AqO+BwKjv\/wCKAIoAuRsuEQIAJsCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":219,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADNOwAAAIARnk3AqO+BwKjv\/wCKAIoAufUpEQIAKMCo74EAigCjAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAACQAAAAAAAAAAAAAAAAAAAAAAAAAJAFYAAwABAAEAAgAaAFxNQUlMU0xPVFxCUk9XU0UAAgBNREpSOTgA","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADlPAAAAIARnTXAqO+BwKjv\/wCKAIoA0ZTzEQIAKsCo74EAigC7AAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAAAAAAAAAAAAAAAhAFYAAwABAAEAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwXA1AEATURKUjk4AAAAAAAAAAAAAAQAAyBFABUEVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":76,"pkt":"AFBWM3ieAAwp1HmyAD7w8EAuDgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFCAP\/vCAAAAAAAAABXT1JLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":76,"pkt":"AAwp1HmyAFBWM3ieAD7w8C5CDgD\/7xYMAAAXACgAAxX\/U01CKwAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAADhAgEBAAcABEhlbGxvAA==","pkt_caplen":76,"pkt_type":62,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":62}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8EIwDgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409908,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFELwAAAIARq7fAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409909,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieABLw8DBEDgD\/7x8AAAAAAAAAAxVLR1JPVVAgICAgICAeTURKUjk4ICAgICAgICAg","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409909,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QEyDgD\/7xYEAAAAABYAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":67,"pkt":"AFBWM3ieAAwp1HmyADXw8EQyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":67,"pkt":"AAwp1HmyAFBWM3ieADXw8DJGDgD\/7xYMAAAYACgAAxX\/U01CcQAAAACAAAAAAAAAAAAAAAAAAAAAyAAyAAABAwAAAA==","pkt_caplen":67,"pkt_type":53,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":53}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAATw8QE0DgD\/7xYEAAAAABcAFQP\/U01CKwAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8EY0DgD\/7xQAAAAoAAAAFQP\/U01CgQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyABLw8Eg1DgD\/7xgAAAAAAAAAFQP\/U01CAQAAAAAAAAAAAAAAAAAAAAAAAAAAyHUF","pkt_caplen":60,"pkt_type":18,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":18}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAATw8QFLMAAAAIARqrfAqO+BwKjvAgCJAIkATO+bACIpAAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":4,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":4}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AFBWM3ieAAwp1HmyAAPw8FMyDgD\/7xYEAAAAABgAFQP\/U01CcQAAAAAAAAAAAAAAAAAAAAAAAAAAyAAy","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409911,"pkt_len":60,"pkt":"AAwp1HmyAFBWM3ieAAPw8XMwIwAAAIARtrrAqO+BwKjv\/wCJAIkATG6mAAooEAABAAAAAAABIEZIRVBG","pkt_caplen":60,"pkt_type":3,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":3}
+0520{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409912,"pkt_len":186,"pkt":"AwAAAAABAFBWM3ieAKzw8AMsAP\/vCAAAAAAAAAABAl9fTVNCUk9XU0VfXwIBTURKUjk4ICAgICAgICAgAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA","pkt_caplen":186,"pkt_type":172,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":172}
+0668{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409923,"pkt_len":249,"pkt":"\/\/\/\/\/\/\/\/AFBWM3ieCABFAADrPQAAAIARnC\/AqO+BwKjv\/wCKAIoA11O8EQIALMCo74EAigDBAAAgRU5FRUVLRkNESkRJQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAJwAAAAAAAAAAAAAAAAAAAAAAAAAnAFYAAwABAAEAAgA4AFxNQUlMU0xPVFxCUk9XU0UADADA1AEAV09SS0dST1VQAAAAAAAAAAQAACBAgAAAAABNREpSOTgA","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409925,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgPgAAAIARnLfAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409925,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAdTUFSVElOIFJPU0VOQVUgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409925,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQBXT1JLR1JPVVAgICAgICAeTUFSVElOIFJPU0VOQVUgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409926,"pkt_len":61,"pkt":"AwAAAAABAFBWM3ieAC\/w8AMsAP\/vAQAAAAAAGQAAAAAAAAAAAAAAAAAAAAAATUFSVElOIFJPU0VOQVUgAw==","pkt_caplen":61,"pkt_type":47,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","type":47}
+0474{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409926,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgPwAAAIARm7fAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","pkt_oversize":false,"pkt_ts":1576409928,"pkt_len":110,"pkt":"AFBW6YlWAFBWM3ieCABFAABgQAAAAIARmrfAqO+BwKjvAgCJAIkATOGIAC4pAAABAAAAAAABIEVORUJGQ0ZFRUpFT0NBRkNFUEZERUZFT0VCRkZDQUFEAAAgAAHADAAgAAEABJPgAAYAAMCo74E=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1576409798047,"flow_last_seen":1576409798047,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"224.0.0.2","l4_proto":"icmp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":2,"flow_packet_id":32,"flow_first_seen":1576409800543,"flow_last_seen":1576409931837,"flow_tot_l4_data_len":2432,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":0,"flow_packet_id":14,"flow_first_seen":1576409797553,"flow_last_seen":1576409928060,"flow_tot_l4_data_len":1064,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.2","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap","flow_id":3,"flow_packet_id":15,"flow_first_seen":1576409807597,"flow_last_seen":1576409923353,"flow_tot_l4_data_len":2937,"flow_min_l4_data_len":185,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":195,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.239.129","dst_ip":"192.168.239.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0159{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dos_win98_smb_netbeui.pcap"}
diff --git a/tests/result/nDPId_drda_db2.pcap.txt b/tests/result/nDPId_drda_db2.pcap.txt
new file mode 100644
index 000000000..e9dc4605e
--- /dev/null
+++ b/tests/result/nDPId_drda_db2.pcap.txt
@@ -0,0 +1,20 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1175543772220,"flow_last_seen":1175543772220,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.106.1","dst_ip":"192.168.106.128","src_port":4847,"dst_port":50000,"l4_proto":"tcp"}
+0395{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":62,"pkt":"AAwpfMZqAFBWwAABCABFAAAwIqBAAIAGglXAqGoBwKhqgBLvw1AKtGewAAAAAHAC\/\/\/kqAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":62,"pkt":"AFBWwAABAAwpfMZqCABFAAAwAABAAEAG5PXAqGqAwKhqAcNQEu\/9XlZHCrRnsXASFtB6IQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":54,"pkt":"AAwpfMZqAFBWwAABCABFAAAoIqFAAIAGglzAqGoBwKhqgBLvw1AKtGex\/V5WSFAQ\/\/+9tQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":229,"pkt":"AAwpfMZqAFBWwAABCABFAADXIrhAAIAGgZbAqGoBwKhqgBLvw1AKtGex\/V5WSFAY\/\/8dAAAAAInQQQABAIMQQQA5EV6EgvKRg4NtgZeXk4mDgaOJlpVAQNHDw\/Dy8fDw8BfD8MH49sHw8UsBEbF1H\/kAAAAAAAAAAAAWEW3UqNfDYMiWoqOVgZSFQEBAQEAADBFa0cPD8PLx8PAAGBQEFAMAByQHAAckDwAHFEAABxR0AAUADBFH2MTC8mHR5dQAJtABAAIAIBBtAAYRogADABYhENToxMLyxMJAQEBAQEBAQEBAQA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1175543772220,"flow_last_seen":1175543772338,"flow_tot_l4_data_len":271,"flow_min_l4_data_len":20,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.106.1","dst_ip":"192.168.106.128","src_port":4847,"dst_port":50000,"l4_proto":"tcp","ndpi": {"proto":"DRDA","category":"Database"}}
+0381{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":54,"pkt":"AFBWwAABAAwpfMZqCABFAAAoelNAAEAGaqrAqGqAwKhqAcNQEu\/9XlZICrRoYFAQGSCj5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":161,"pkt":"AFBWwAABAAwpfMZqCABFAACTelVAAEAGaj3AqGqAwKhqAcNQEu\/9XlZICrRoYFAYGSAErAAAAFvQQwABAFUUQwAYEV6EgvKEgvKBh4WVo\/Dw8PDww\/Tx8AAYFAQUAwAHJAcAByQPAAcUQAAHFHQABQAOEUfYxMLyYdPJ1eTnAAcRbYSC8gAMEVri2NPw+PDy9AAQ0AMAAgAKFKwABhGiAAM=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":318,"pkt":"AAwpfMZqAFBWwAABCABFAAEwIrtAAIAGgTrAqGoBwKhqgBLvw1AKtGhg\/V5Ws1AY\/5T1dQAAADrQQQABADQQbgAGEaIAAwAWIRDU6MTC8sTCQEBAQEBAQEBAQEAAChGg1Ojk4sXZAAoRodTo5OLF2QDO0AEAAgDIIAEAFiEQ1OjEwvLEwkBAQEBAQEBAQEBAAAYhDyQHAAwRLtHDw\/Dy8fDwAHkhBHTRw8Pw8vHw8NSo18NgyJaio5WBlIVAQEBAQISC8pGDg22Bl5eTiYOBo4mWlUBA1Ojk4sXZQEA90cPD8PLx8PDUqNfDYMiWoqOVgZSFQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAfWvnffDwfQANAC\/Y48Ti2NPB4sMAFgA1AAYRnAS4AAYRnQSwAAYRngS4","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543772,"pkt_len":54,"pkt":"AFBWwAABAAwpfMZqCABFAAAoeldAAEAGaqbAqGqAwKhqAcNQEu\/9XlazCrRpaFAQHVCeQwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":295,"pkt":"AFBWwAABAAwpfMZqCABFAAEZellAAEAGabPAqGqAwKhqAcNQEu\/9XlazCrRpaFAYHVCnbgAAABXQQgABAA8SGQAGEUkAAAAFEaQAAFDQUgACAEoiAQAGEUkAAAAMES7i2NPw+PDy9AANAC\/Y48Ti2NPn+PYACgA1AAYRnAMzAAYhAwIuABchNcPwwfj2wfDxS8XG8fIHBAIZVhIAjNADAAIAhiQIAAAAAAAwMDAwMFNRTDA4MDI0AP\/\/\/\/8CAAAAAAAAAAMAAAAAAAAAAAAAACAgICAgICAgICAgABJNWURCMkRCICAgICAgICAgICAAAAAzMf84MTn\/TVlVU0VSICD\/TVlEQjJEQv9RREIyL0xJTlVY\/zU1OP81NTj\/MP8xMjA4\/zD\/\/w==","pkt_caplen":295,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":54,"pkt":"AAwpfMZqAFBWwAABCABFAAAoIzRAAIAGgcnAqGoBwKhqgBLvw1AKtGlo\/V5XpFAQ\/qO7\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1279{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":717,"pkt":"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","pkt_caplen":717,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":54,"pkt":"AFBWwAABAAwpfMZqCABFAAAoeltAAEAGaqLAqGqAwKhqAcNQEu\/9XlekCrRr\/1AQJEKTyQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1021{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":524,"pkt":"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","pkt_caplen":524,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":64,"pkt":"AAwpfMZqAFBWwAABCABFAAAyI31AAIAGgXbAqGoBwKhqgBLvw1AKtGv\/\/V5ZelAY\/M3JNgAAAArQAQABAAQgDg==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","pkt_oversize":false,"pkt_ts":1175543773,"pkt_len":108,"pkt":"AFBWwAABAAwpfMZqCABFAABeel9AAEAGamjAqGqAwKhqAcNQEu\/9Xll6CrRsCVAYJEI06gAAACvQUgABACUiDAAGEUkABAAFIRUBABYhENToxMLyxMJAQEBAQEBAQEBAQAAL0AMAAQAFJAj\/","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap","flow_id":0,"flow_packet_id":38,"flow_first_seen":1175543772220,"flow_last_seen":1175543810683,"flow_tot_l4_data_len":5399,"flow_min_l4_data_len":20,"flow_max_l4_data_len":683,"flow_avg_l4_data_len":142,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.106.1","dst_ip":"192.168.106.128","src_port":4847,"dst_port":50000,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/drda_db2.pcap"}
diff --git a/tests/result/nDPId_dropbox.pcap.txt b/tests/result/nDPId_dropbox.pcap.txt
new file mode 100644
index 000000000..351b95bc0
--- /dev/null
+++ b/tests/result/nDPId_dropbox.pcap.txt
@@ -0,0 +1,161 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":1455907271481,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp"}
+0496{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":138,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EMQAAIARN\/bAqDgBwKg4ZcSHRFwAaLRJQwM1AW9STXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMSBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1455907271481,"flow_last_seen":1455907271481,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":104,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0393{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":61,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXYVAAEAR64HAqDhlwKg4AURcxIcAG\/HjY0Q1AW9STYsvci9CdXMxN0NtZA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EM0AAIARN+7AqDgBwKg4ZcSHRFwAZzJrQgM1Anj4ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXZ1AAEAR62rAqDhlwKg4AURcxIcAGvHiYkQ1Anj4iy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":136,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6ENoAAIARN+LAqDgBwKg4ZcSHRFwAZlueQQM1AxdyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXaZAAEAR62LAqDhlwKg4AURcxIcAGfHhYUQ1AxeLL3IvQnVzMTdDbWQ=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":143,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEOcAAIARN87AqDgBwKg4ZcSHRFwAbZmySAM1BCrL+A7rA\/3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjExIEVFVCAyMDE2In0=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":66,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XahAAEAR61nAqDhlwKg4AURcxIcAIPHoaEQ1BCrL+A7rA\/3Eiy9yL0J1czE3Q21k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EPQAAIARN8XAqDgBwKg4ZcSHRFwAaSr1RAM1BaHn3H9yRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTEgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907271,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXcFAAEAR60TAqDhlwKg4AURcxIcAHPHkZEQ1BaHn3H+LL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":136,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6EQEAAIARN7vAqDgBwKg4ZcSHRFwAZr+aQQM1BrJyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTIgRUVUIDIwMTYifQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtXcxAAEAR6zzAqDhlwKg4AURcxIcAGfHhYUQ1BrKLL3IvQnVzMTdDbWQ=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":138,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8EQ4AAIARN6zAqDgBwKg4ZcSHRFwAaGrJQwM1B8\/MNXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":61,"pkt":"CAAnAERyCAAnmO\/hCABFAAAvXc1AAEAR6znAqDhlwKg4AURcxIcAG\/HjY0Q1B8\/MNYsvci9CdXMxN0NtZA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":138,"pkt":"CAAnmO\/hCAAnAERyCABFAAB8ERsAAIARN5\/AqDgBwKg4ZcSHRFwAaNHfQwM1CFi1RXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMiBFRVQgMjAxNiJ9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":1455907272856,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp"}
+0495{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EWkAAIARN1LAqDgBwKg4ZcSORFwAZ7scQgMdqQeYckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEyIEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1455907272856,"flow_last_seen":1455907272856,"flow_tot_l4_data_len":103,"flow_min_l4_data_len":103,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0389{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXhFAAEAR6vbAqDhlwKg4AURcxI4AGvHiYkQdqQeYiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":141,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/EYMAAIARNzTAqDgBwKg4ZcSORFwAa8WlRgMdqhF5z0YYRXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxMyBFRVQgMjAxNiJ9","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907272,"pkt_len":64,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyXh5AAEAR6uXAqDhlwKg4AURcxI4AHvHmZkQdqhF5z0YYRYsvci9CdXMxN0NtZA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EZ0AAIARNxvAqDgBwKg4ZcSORFwAakdVRQMdqyVsmyV8ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXi1AAEAR6tfAqDhlwKg4AURcxI4AHfHlZUQdqyVsmyV8iy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":142,"pkt":"CAAnmO\/hCAAnAERyCABFAACAEbcAAIARNv\/AqDgBwKg4ZcSORFwAbOGwRwMdrCZfT\/MB3yhyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":65,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzXjVAAEAR6s3AqDhlwKg4AURcxI4AH\/HnZ0QdrCZfT\/MB3yiLL3IvQnVzMTdDbWQ=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EdEAAIARNurAqDgBwKg4ZcSORFwAZ8IuQgMdrQCBckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXkRAAEAR6sPAqDhlwKg4AURcxI4AGvHiYkQdrQCBiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EecAAIARNtLAqDgBwKg4ZcSORFwAafrxRAMdrpQQMahyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXlpAAEAR6qvAqDhlwKg4AURcxI4AHPHkZEQdrpQQMaiLL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Ef0AAIARNrvAqDgBwKg4ZcSORFwAassPRQMdr\/Kq\/CfKckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjEzIEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXnBAAEAR6pTAqDhlwKg4AURcxI4AHfHlZUQdr\/Kq\/CfKiy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907273,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EhcAAIARNqLAqDgBwKg4ZcSORFwAaYovRAMdsNz8WXxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTMgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":1455907274088,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp"}
+0500{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9EncAAIARNkLAqDgBwKg4ZcSIRFwAaR7GRANSj9XGl0FyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1455907274088,"flow_last_seen":1455907274088,"flow_tot_l4_data_len":105,"flow_min_l4_data_len":105,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0393{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXqNAAEAR6mLAqDhlwKg4AURcxIgAHPHkZERSj9XGl0GLL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":143,"pkt":"CAAnmO\/hCAAnAERyCABFAACBEpIAAIARNiPAqDgBwKg4ZcSIRFwAbeMnSANSkLugNTWCkTE2ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":66,"pkt":"CAAnAERyCAAnmO\/hCABFAAA0XrRAAEAR6k3AqDhlwKg4AURcxIgAIPHoaERSkLugNTWCkTE2iy9yL0J1czE3Q21k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":139,"pkt":"CAAnmO\/hCAAnAERyCABFAAB9ErEAAIARNgjAqDgBwKg4ZcSIRFwAaZj1RANSkbrKOAxyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTQgRUVUIDIwMTYifQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":62,"pkt":"CAAnAERyCAAnmO\/hCABFAAAwXsVAAEAR6kDAqDhlwKg4AURcxIgAHPHkZERSkbrKOAyLL3IvQnVzMTdDbWQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+EtAAAIARNejAqDgBwKg4ZcSIRFwAajY+RQNSknZ4406+ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXtpAAEAR6irAqDhlwKg4AURcxIgAHfHlZURSknZ4406+iy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+Eu8AAIARNcnAqDgBwKg4ZcSIRFwAaj5\/RQNSkz2wCtXHckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxXuNAAEAR6iHAqDhlwKg4AURcxIgAHfHlZURSkz2wCtXHiy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7Ew4AAIARNa3AqDgBwKg4ZcSIRFwAZ6AIQgNSlO3EckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXvJAAEAR6hXAqDhlwKg4AURcxIgAGvHiYkRSlO3Eiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7EykAAIARNZLAqDgBwKg4ZcSIRFwAZyZkQgNSlWdockRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuXwBAAEAR6gfAqDhlwKg4AURcxIgAGvHiYkRSlWdoiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907274,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7E0wAAIARNW\/AqDgBwKg4ZcSIRFwAZyoCQgNSlmPJckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE0IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":1455907275690,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp"}
+0503{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":141,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FCAAAIARNJfAqDgBwKg4ZcSPRFwAa2JLRgOAZtDWwMpn\/nJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNSBFRVQgMjAxNiJ9","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1455907275690,"flow_last_seen":1455907275690,"flow_tot_l4_data_len":107,"flow_min_l4_data_len":107,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":107,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0399{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":64,"pkt":"CAAnAERyCAAnmO\/hCABFAAAyX35AAEAR6YXAqDhlwKg4AURcxI8AHvHmZkSAZtDWwMpn\/osvci9CdXMxN0NtZA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":142,"pkt":"CAAnmO\/hCAAnAERyCABFAACAFEwAAIARNGrAqDgBwKg4ZcSPRFwAbLkURwOAZ6ExGoh1VzNyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTUgRUVUIDIwMTYifQ==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":65,"pkt":"CAAnAERyCAAnmO\/hCABFAAAzX45AAEAR6XTAqDhlwKg4AURcxI8AH\/HnZ0SAZ6ExGoh1VzOLL3IvQnVzMTdDbWQ=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FHgAAIARNEPAqDgBwKg4ZcSPRFwAZyUVQgOAaDrbckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907275,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX5xAAEAR6WvAqDhlwKg4AURcxI8AGvHiYkSAaDrbiy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FKIAAIARNBnAqDgBwKg4ZcSPRFwAZ\/GyQgOAaW48ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX65AAEAR6VnAqDhlwKg4AURcxI8AGvHiYkSAaW48iy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":140,"pkt":"CAAnmO\/hCAAnAERyCABFAAB+FMkAAIARM+\/AqDgBwKg4ZcSPRFwAap3JRQOAaiZbdwHjckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":63,"pkt":"CAAnAERyCAAnmO\/hCABFAAAxX71AAEAR6UfAqDhlwKg4AURcxI8AHfHlZUSAaiZbdwHjiy9yL0J1czE3Q21k","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":137,"pkt":"CAAnmO\/hCAAnAERyCABFAAB7FPoAAIARM8HAqDgBwKg4ZcSPRFwAZ2MyQgOAa\/y6ckRcQXIIQnVzMTdDbWQRMv97Im1lc3NhZ2VUeXBlIjoiVVBEQVRFIiwibWVzc2FnZUNvbnRlbnQiOiJGcmkgRmViIDE5IDIwOjQxOjE2IEVFVCAyMDE2In0=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":60,"pkt":"CAAnAERyCAAnmO\/hCABFAAAuX9tAAEAR6SzAqDhlwKg4AURcxI8AGvHiYkSAa\/y6iy9yL0J1czE3Q21k","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":136,"pkt":"CAAnmO\/hCAAnAERyCABFAAB6FSUAAIARM5fAqDgBwKg4ZcSPRFwAZtwsQQOAbEZyRFxBcghCdXMxN0NtZBEy\/3sibWVzc2FnZVR5cGUiOiJVUERBVEUiLCJtZXNzYWdlQ29udGVudCI6IkZyaSBGZWIgMTkgMjA6NDE6MTYgRUVUIDIwMTYifQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":59,"pkt":"CAAnAERyCAAnmO\/hCABFAAAtX+dAAEAR6SHAqDhlwKg4AURcxI8AGfHhYUSAbEaLL3IvQnVzMTdDbWQ=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1455907276,"pkt_len":141,"pkt":"CAAnmO\/hCAAnAERyCABFAAB\/FUwAAIARM2vAqDgBwKg4ZcSPRFwAa923RgOAbRWOzuOZuXJEXEFyCEJ1czE3Q21kETL\/eyJtZXNzYWdlVHlwZSI6IlVQREFURSIsIm1lc3NhZ2VDb250ZW50IjoiRnJpIEZlYiAxOSAyMDo0MToxNiBFRVQgMjAxNiJ9","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":0,"flow_packet_id":200,"flow_first_seen":1455907271481,"flow_last_seen":1455907282686,"flow_tot_l4_data_len":13320,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50311,"dst_port":17500,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":2,"flow_packet_id":200,"flow_first_seen":1455907274088,"flow_last_seen":1455907285181,"flow_tot_l4_data_len":13394,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50312,"dst_port":17500,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":1,"flow_packet_id":200,"flow_first_seen":1455907272856,"flow_last_seen":1455907284046,"flow_tot_l4_data_len":13420,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50318,"dst_port":17500,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":3,"flow_packet_id":200,"flow_first_seen":1455907275690,"flow_last_seen":1455907286608,"flow_tot_l4_data_len":13342,"flow_min_l4_data_len":25,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.56.1","dst_ip":"192.168.56.101","src_port":50319,"dst_port":17500,"l4_proto":"udp"}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1459182796665,"flow_last_seen":1459182796665,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182796,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAOLtAAEARfTrAqAFpwKgB\/thvADUALFKSg5wBAAABAAAAAAAABmNsaWVudAdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1459182796665,"flow_last_seen":1459182796665,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"client.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0414{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182796,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAOLtAAEARfTrAqAFpwKgB\/thvADUALFKSg5wBAAABAAAAAAAABmNsaWVudAdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182796,"pkt_len":333,"pkt":"eJKcD6iO8IQvSpdgCABFAAE\/AABAAEARtPbAqAH+wKgBaQA12G8BK6cig5yBgAABAAMABAAEBmNsaWVudAdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAwAALBmNsaWVudAF2wBPAMAABAAEAAAAUAARsoKzMwDAAAQABAAAAFAAEbKCs7MA3AAIAAQAA9bUAGQducy0xOTI2CWF3c2Rucy00OAJjbwJ1awDANwACAAEAAPW1ABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwDcAAgABAAD1tQASBW5zLTU3CWF3c2Rucy0wN8AbwDcAAgABAAD1tQAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDArgABAAEAAkcJAATN+8A5wIwAAQABAAJG7wAEzfvDBcDMAAEAAQACRu8ABM37xPzAZwABAAEAAkbkAATN+8eG","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1459182796665,"flow_last_seen":1459182796786,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":44,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"client.dropbox.com","num_queries":1,"num_answers":11,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"108.160.172.204"}}
+0756{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182796,"pkt_len":333,"pkt":"eJKcD6iO8IQvSpdgCABFAAE\/AABAAEARtPbAqAH+wKgBaQA12G8BK6cig5yBgAABAAMABAAEBmNsaWVudAdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAwAALBmNsaWVudAF2wBPAMAABAAEAAAAUAARsoKzMwDAAAQABAAAAFAAEbKCs7MA3AAIAAQAA9bUAGQducy0xOTI2CWF3c2Rucy00OAJjbwJ1awDANwACAAEAAPW1ABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwDcAAgABAAD1tQASBW5zLTU3CWF3c2Rucy0wN8AbwDcAAgABAAD1tQAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDArgABAAEAAkcJAATN+8A5wIwAAQABAAJG7wAEzfvDBcDMAAEAAQACRu8ABM37xPzAZwABAAEAAkbkAATN+8eG","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1459182798602,"flow_last_seen":1459182798602,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":81,"pkt":"8IQvSpdgeJKcD6iOCABFAABDOVFAAEARfKHAqAFpwKgB\/r\/YADUALxT2I4YBAAABAAAAAAAACWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1459182798602,"flow_last_seen":1459182798602,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"client-cf.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0419{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":81,"pkt":"8IQvSpdgeJKcD6iOCABFAABDOVFAAEARfKHAqAFpwKgB\/r\/YADUALxT2I4YBAAABAAAAAAAACWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1459182798651,"flow_last_seen":1459182798651,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp"}
+0410{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":73,"pkt":"8IQvSpdgeJKcD6iOCABFAAA7OV1AAEARfJ3AqAFpwKgB\/sZlADUAJw161e8BAAABAAAAAAAAAWQHZHJvcGJveANjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1459182798651,"flow_last_seen":1459182798651,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"d.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0410{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":73,"pkt":"8IQvSpdgeJKcD6iOCABFAAA7OV1AAEARfJ3AqAFpwKgB\/sZlADUAJw161e8BAAABAAAAAAAAAWQHZHJvcGJveANjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":306,"pkt":"eJKcD6iO8IQvSpdgCABFAAEkAABAAEARtRHAqAH+wKgBaQA1v9gBEDDEI4aBgAABAAEABAAECWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAFAAENvCuH8AWAAIAAQABU2AAGQducy0xOTQ5CWF3c2Rucy01MQJjbwJ1awDAFgACAAEAAVNgABcHbnMtMTE2Mglhd3NkbnMtMTcDb3JnAMAWAAIAAQABU2AAFgZucy01NjQJYXdzZG5zLTA2A25ldADAFgACAAEAAVNgABMGbnMtMzE1CWF3c2Rucy0zOcAewK0AAQABAAIhDwAEzfvBO8CLAAEAAQABU1QABM37wjQHTlMtMTE2MsBwAAEAAQABU10ABM37xIrAQwABAAEAAVNaAATN+8ed","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1459182798602,"flow_last_seen":1459182798781,"flow_tot_l4_data_len":366,"flow_min_l4_data_len":47,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"client-cf.dropbox.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.240.174.31"}}
+0719{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":306,"pkt":"eJKcD6iO8IQvSpdgCABFAAEkAABAAEARtRHAqAH+wKgBaQA1v9gBEDDEI4aBgAABAAEABAAECWNsaWVudC1jZgdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAFAAENvCuH8AWAAIAAQABU2AAGQducy0xOTQ5CWF3c2Rucy01MQJjbwJ1awDAFgACAAEAAVNgABcHbnMtMTE2Mglhd3NkbnMtMTcDb3JnAMAWAAIAAQABU2AAFgZucy01NjQJYXdzZG5zLTA2A25ldADAFgACAAEAAVNgABMGbnMtMzE1CWF3c2Rucy0zOcAewK0AAQABAAIhDwAEzfvBO8CLAAEAAQABU1QABM37wjQHTlMtMTE2MsBwAAEAAQABU10ABM37xIrAQwABAAEAAVNaAATN+8ed","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0744{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":323,"pkt":"eJKcD6iO8IQvSpdgCABFAAE1AABAAEARtQDAqAH+wKgBaQA1xmUBIb321e+BgAABAAMABAAEAWQHZHJvcGJveANjb20AAAEAAcAMAAUAAQAAAQsABgFkAXbADsArAAEAAQAAAC0ABGygrOHAKwABAAEAAAAtAARsoKzBwC0AAgABAAD1swAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDALQACAAEAAPWzABIFbnMtNTcJYXdzZG5zLTA3wBbALQACAAEAAPWzABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwC0AAgABAAD1swAZB25zLTE5MjYJYXdzZG5zLTQ4AmNvAnVrAMCAAAEAAQACRwcABM37wDnAngABAAEAAkbtAATN+8MFwF0AAQABAAJG7QAEzfvE\/MDAAAEAAQACRuIABM37x4Y=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1459182798651,"flow_last_seen":1459182798820,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":39,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"d.dropbox.com","num_queries":1,"num_answers":11,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"108.160.172.225"}}
+0744{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182798,"pkt_len":323,"pkt":"eJKcD6iO8IQvSpdgCABFAAE1AABAAEARtQDAqAH+wKgBaQA1xmUBIb321e+BgAABAAMABAAEAWQHZHJvcGJveANjb20AAAEAAcAMAAUAAQAAAQsABgFkAXbADsArAAEAAQAAAC0ABGygrOHAKwABAAEAAAAtAARsoKzBwC0AAgABAAD1swAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDALQACAAEAAPWzABIFbnMtNTcJYXdzZG5zLTA3wBbALQACAAEAAPWzABYGbnMtNzczCWF3c2Rucy0zMgNuZXQAwC0AAgABAAD1swAZB25zLTE5MjYJYXdzZG5zLTQ4AmNvAnVrAMCAAAEAAQACRwcABM37wDnAngABAAEAAkbtAATN+8MFwF0AAQABAAJG7QAEzfvE\/MDAAAEAAQACRuIABM37x4Y=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1459182816605,"flow_last_seen":1459182816605,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3NAAEARdoLAqAFpwKgB\/o1NADUALHL+F+YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1459182816605,"flow_last_seen":1459182816605,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"log.getdropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0414{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3NAAEARdoLAqAFpwKgB\/o1NADUALHL+F+YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3RAAEARdoHAqAFpwKgB\/o1NADUALO8im6YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1459182816605,"flow_last_seen":1459182816605,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"log.getdropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0414{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAP3RAAEARdoHAqAFpwKgB\/o1NADUALO8im6YBAAABAAAAAAAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":194,"pkt":"eJKcD6iO8IQvSpdgCABFAAC0AABAAEARtYHAqAH+wKgBaQA1jU0AoAOWm6aBgAABAAEAAQAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAOwAGAAEAAAHWAEUGbnMtNzczCWF3c2Rucy0zMgNuZXQAEWF3c2Rucy1ob3N0bWFzdGVyBmFtYXpvbsAbAAAAAQAAHCAAAAOEABJ1AAAAASw=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":7,"flow_packet_id":5,"flow_first_seen":1459182816605,"flow_last_seen":1459182816645,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":44,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"log.getdropbox.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":28,"rsp_type":5,"rsp_addr":"0.0.0.0"}}
+0571{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":194,"pkt":"eJKcD6iO8IQvSpdgCABFAAC0AABAAEARtYHAqAH+wKgBaQA1jU0AoAOWm6aBgAABAAEAAQAAA2xvZwpnZXRkcm9wYm94A2NvbQAAHAABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAOwAGAAEAAAHWAEUGbnMtNzczCWF3c2Rucy0zMgNuZXQAEWF3c2Rucy1ob3N0bWFzdGVyBmFtYXpvbsAbAAAAAQAAHCAAAAOEABJ1AAAAASw=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":345,"pkt":"eJKcD6iO8IQvSpdgCABFAAFLAABAAEARtOrAqAH+wKgBaQA1jU0BN+znF+aBgAABAAMABAAEA2xvZwpnZXRkcm9wYm94A2NvbQAAAQABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAMAABAAEAAAA1AARsoKzDwDAAAQABAAAANQAEbKCs48A7AAIAAQAAAkYAFgZucy03NzMJYXdzZG5zLTMyA25ldADAOwACAAEAAAJGABkHbnMtMTkyNglhd3NkbnMtNDgCY28CdWsAwDsAAgABAAACRgAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDAOwACAAEAAAJGABIFbnMtNTcJYXdzZG5zLTA3wBvA3QABAAEAAVNyAATN+8A5wHMAAQABAAFTTAAEzfvDBcC6AAEAAQABU0wABM37xPzAlQABAAEAAVNQAATN+8eG","pkt_caplen":345,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182816,"pkt_len":345,"pkt":"eJKcD6iO8IQvSpdgCABFAAFLAABAAEARtOrAqAH+wKgBaQA1jU0BN+znF+aBgAABAAMABAAEA2xvZwpnZXRkcm9wYm94A2NvbQAAAQABwAwABQABAAABpgAXCmdldGRyb3Bib3gBdgdkcm9wYm94wBvAMAABAAEAAAA1AARsoKzDwDAAAQABAAAANQAEbKCs48A7AAIAAQAAAkYAFgZucy03NzMJYXdzZG5zLTMyA25ldADAOwACAAEAAAJGABkHbnMtMTkyNglhd3NkbnMtNDgCY28CdWsAwDsAAgABAAACRgAXB25zLTEyNzYJYXdzZG5zLTMxA29yZwDAOwACAAEAAAJGABIFbnMtNTcJYXdzZG5zLTA3wBvA3QABAAEAAVNyAATN+8A5wHMAAQABAAFTTAAEzfvDBcC6AAEAAQABU0wABM37xPzAlQABAAEAAVNQAATN+8eG","pkt_caplen":345,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":1459182817566,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0640{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182817,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfQ1JAAEARNKvAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":1459182817566,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0640{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182817,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfQ1JAAEARNKvAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182817,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfQ1JAAEARNKvAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":1459182817566,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0636{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182817,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf1cRAAEAR35DAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1459182817566,"flow_last_seen":1459182817566,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0636{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182817,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf1cRAAEAR35DAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182817,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf1cRAAEAR35DAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1459182818229,"flow_last_seen":1459182818229,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182818,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAQCRAAEARddHAqAFpwKgB\/oGlADUALERt3H0BAAABAAAAAAAABm5vdGlmeQdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1459182818229,"flow_last_seen":1459182818229,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"notify.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0415{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182818,"pkt_len":78,"pkt":"8IQvSpdgeJKcD6iOCABFAABAQCRAAEARddHAqAFpwKgB\/oGlADUALERt3H0BAAABAAAAAAAABm5vdGlmeQdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182818,"pkt_len":294,"pkt":"eJKcD6iO8IQvSpdgCABFAAEYAABAAEARtR3AqAH+wKgBaQA1gaUBBH9u3H2BgAABAAEABAAEBm5vdGlmeQdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAcQAEon0Rg8AMAAIAAQAAAHEAFwducy0xMTU0CWF3c2Rucy0xNgNvcmcAwAwAAgABAAAAcQASBW5zLTgzCWF3c2Rucy0xMMAbwAwAAgABAAAAcQAWBm5zLTg5NQlhd3NkbnMtNDcDbmV0AMAMAAIAAQAAAHEAGQducy0xOTM2CWF3c2Rucy01MAJjbwJ1awDAYwABAAEAAVOfAATN+8BTwIEAAQABAAFTrgAEzfvDf8BAAAEAAQABU6sABM37xILAowABAAEAAVN1AATN+8eQ","pkt_caplen":294,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":10,"flow_packet_id":3,"flow_first_seen":1459182818229,"flow_last_seen":1459182818263,"flow_tot_l4_data_len":348,"flow_min_l4_data_len":44,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"notify.dropbox.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"162.125.17.131"}}
+0704{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182818,"pkt_len":294,"pkt":"eJKcD6iO8IQvSpdgCABFAAEYAABAAEARtR3AqAH+wKgBaQA1gaUBBH9u3H2BgAABAAEABAAEBm5vdGlmeQdkcm9wYm94A2NvbQAAAQABwAwAAQABAAAAcQAEon0Rg8AMAAIAAQAAAHEAFwducy0xMTU0CWF3c2Rucy0xNgNvcmcAwAwAAgABAAAAcQASBW5zLTgzCWF3c2Rucy0xMMAbwAwAAgABAAAAcQAWBm5zLTg5NQlhd3NkbnMtNDcDbmV0AMAMAAIAAQAAAHEAGQducy0xOTM2CWF3c2Rucy01MAJjbwJ1awDAYwABAAEAAVOfAATN+8BTwIEAAQABAAFTrgAEzfvDf8BAAAEAAQABU6sABM37xILAowABAAEAAVN1AATN+8eQ","pkt_caplen":294,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182830,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfRXtAAEARMoLAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182830,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfRXtAAEARMoLAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182830,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADfRXtAAEARMoLAqAFp\/\/\/\/\/0RcRFwAy8gLeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182830,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf2zBAAEAR2iTAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182830,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf2zBAAEAR2iTAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1459182830,"pkt_len":237,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAADf2zBAAEAR2iTAqAFpwKgB\/0RcRFwAywVkeyJob3N0X2ludCI6IDI3NDM2MzU3MDAzNjkzNDgyMzM2MDM0MTQwOTA1MTg0MTU3MzU3OSwgInZlcnNpb24iOiBbMiwgMF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDYwMzE0MCwgMTY3MTU2ODYsIDQ4NzQ1ODk1LCAxOTA3NjA0MCwgODc5NTY4MDQzLCAxMjM1MzUwMzAsIDE4MjE2NDkyMl19","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1459182798651,"flow_last_seen":1459182798820,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":39,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":50789,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":8,"flow_packet_id":6,"flow_first_seen":1459182817566,"flow_last_seen":1459182830673,"flow_tot_l4_data_len":1218,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1459182798602,"flow_last_seen":1459182798781,"flow_tot_l4_data_len":638,"flow_min_l4_data_len":47,"flow_max_l4_data_len":272,"flow_avg_l4_data_len":159,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":49112,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1459182796665,"flow_last_seen":1459182796786,"flow_tot_l4_data_len":686,"flow_min_l4_data_len":44,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":55407,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":9,"flow_packet_id":6,"flow_first_seen":1459182817566,"flow_last_seen":1459182830673,"flow_tot_l4_data_len":1218,"flow_min_l4_data_len":203,"flow_max_l4_data_len":203,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1459182818229,"flow_last_seen":1459182818263,"flow_tot_l4_data_len":608,"flow_min_l4_data_len":44,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":33189,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":7,"flow_packet_id":8,"flow_first_seen":1459182816605,"flow_last_seen":1459182816645,"flow_tot_l4_data_len":1118,"flow_min_l4_data_len":44,"flow_max_l4_data_len":311,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.254","src_port":36173,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1535391465534,"flow_last_seen":1535391465534,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0606{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391465,"pkt_len":210,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEWzxAAEARHT\/AqAEG\/\/\/\/\/0RcRFwAsAWteyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1535391465534,"flow_last_seen":1535391465534,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1535391465535,"flow_last_seen":1535391465535,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0602{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391465,"pkt_len":210,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADENtRAAEARfv\/AqAEGwKgB\/0RcRFwAsEMFeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1535391465535,"flow_last_seen":1535391465535,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0605{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391495,"pkt_len":210,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEaV5AAEARDx3AqAEG\/\/\/\/\/0RcRFwAsAWteyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391495,"pkt_len":210,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEPR9AAEAReLTAqAEGwKgB\/0RcRFwAsEMFeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0605{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391525,"pkt_len":210,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADEd25AAEARAQ3AqAEG\/\/\/\/\/0RcRFwAsAWteyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391525,"pkt_len":210,"pkt":"\/\/\/\/\/\/\/\/rNG4wD8JCABFAADETEZAAEARaY3AqAEGwKgB\/0RcRFwAsEMFeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiZGlzcGxheW5hbWUiOiAiIiwgImhvc3RfaW50IjogMTQyNjI0OTI5OTAwNTgxMDUzNDA3MzQwMDE2NzI1NzY2ODExMzI2LCAibmFtZXNwYWNlcyI6IFszMTE2NDIwNDE2LCAzMjA5MzgyOTQ0LCAxMjM1ODYyNywgMTEzODA0NDM2N119","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1535391651168,"flow_last_seen":1535391651168,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0602{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391651,"pkt_len":205,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/jlBAAEAR6fXAqAFA\/\/\/\/\/0RcRFwAq9+deyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1535391651168,"flow_last_seen":1535391651168,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1535391651170,"flow_last_seen":1535391651170,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0598{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391651,"pkt_len":205,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/SNZAAEARbMjAqAFAwKgB\/0RcRFwAqxz2eyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1535391651170,"flow_last_seen":1535391651170,"flow_tot_l4_data_len":171,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0602{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391652,"pkt_len":205,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/jm9AAEAR6dbAqAFA\/\/\/\/\/0RcRFwAq9+deyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391652,"pkt_len":205,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/SaBAAEARa\/7AqAFAwKgB\/0RcRFwAqxz2eyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0602{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391682,"pkt_len":205,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/nwpAAEAR2TvAqAFA\/\/\/\/\/0RcRFwAq9+deyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","pkt_oversize":false,"pkt_ts":1535391682,"pkt_len":205,"pkt":"\/\/\/\/\/\/\/\/eJKcD6iOCABFAAC\/ZDZAAEARUWjAqAFAwKgB\/0RcRFwAqxz2eyJuYW1lc3BhY2VzIjogWzE5MDc2MDQwLCAyMDYwMzE0MCwgMTY3MTU2ODYsIDEyMzUzNTAzMF0sICJwb3J0IjogMTc1MDAsICJob3N0X2ludCI6IDMzMzEzOTY5NzEzOTU2MTA4MDE1Mzk5Mjk4MTIxOTY3OTIyMTUzNiwgImRpc3BsYXluYW1lIjogIiIsICJ2ZXJzaW9uIjogWzIsIDBdfQ==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":13,"flow_packet_id":3,"flow_first_seen":1535391651168,"flow_last_seen":1535391682513,"flow_tot_l4_data_len":513,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":11,"flow_packet_id":3,"flow_first_seen":1535391465534,"flow_last_seen":1535391525545,"flow_tot_l4_data_len":528,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1535391651170,"flow_last_seen":1535391682514,"flow_tot_l4_data_len":513,"flow_min_l4_data_len":171,"flow_max_l4_data_len":171,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.64","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap","flow_id":12,"flow_packet_id":3,"flow_first_seen":1535391465535,"flow_last_seen":1535391525545,"flow_tot_l4_data_len":528,"flow_min_l4_data_len":176,"flow_max_l4_data_len":176,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dropbox.pcap"}
diff --git a/tests/result/nDPId_dtls.pcap.txt b/tests/result/nDPId_dtls.pcap.txt
new file mode 100644
index 000000000..80aeecdfc
--- /dev/null
+++ b/tests/result/nDPId_dtls.pcap.txt
@@ -0,0 +1,7 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1545143424891,"flow_last_seen":1545143424891,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.13.203","dst_ip":"192.168.13.57","src_port":40739,"dst_port":56515,"l4_proto":"udp"}
+0571{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap","pkt_oversize":false,"pkt_ts":1545143424,"pkt_len":197,"pkt":"WLEPD4fwhLVBbZhoCABFAAC3FtBAAEARhxHAqA3LwKgNOZ8j3MMAozuLFv7\/AAAAAAAAAAAAjgEAAIIAAAAAAAAAgv79zrBtKgTLKhUXwuJm7W22k25ueldyqs3Q4tvQaM4mc34AAAAYwCvAL8ypzKjACcATwArAFACcAC8ANQAKAQAAQP8BAAEAABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEADgAFAAIAAQAACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1545143424891,"flow_last_seen":1545143424891,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.13.203","dst_ip":"192.168.13.57","src_port":40739,"dst_port":56515,"l4_proto":"udp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS","category":"Web"},"tls": {"version":"DTLSv1.2","client_requested_server_name":"","ja3":"bd743610892cec1efed851b2b5efd4f5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0571{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap","pkt_oversize":false,"pkt_ts":1545143424,"pkt_len":197,"pkt":"WLEPD4fwhLVBbZhoCABFAAC3FtBAAEARhxHAqA3LwKgNOZ8j3MMAozuLFv7\/AAAAAAAAAAAAjgEAAIIAAAAAAAAAgv79zrBtKgTLKhUXwuJm7W22k25ueldyqs3Q4tvQaM4mc34AAAAYwCvAL8ypzKjACcATwArAFACcAC8ANQAKAQAAQP8BAAEAABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEADgAFAAIAAQAACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1545143424891,"flow_last_seen":1545143424891,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.13.203","dst_ip":"192.168.13.57","src_port":40739,"dst_port":56515,"l4_proto":"udp"}
+0140{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/dtls.pcap"}
diff --git a/tests/result/nDPId_encrypted_sni.pcap.txt b/tests/result/nDPId_encrypted_sni.pcap.txt
new file mode 100644
index 000000000..7468595e2
--- /dev/null
+++ b/tests/result/nDPId_encrypted_sni.pcap.txt
@@ -0,0 +1,14 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":1590680386576,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp"}
+1352{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","pkt_oversize":false,"pkt_ts":1590680386,"pkt_len":770,"pkt":"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","pkt_caplen":770,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":1590680386576,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":1590680387847,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp"}
+1356{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","pkt_oversize":false,"pkt_ts":1590680387,"pkt_len":770,"pkt":"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","pkt_caplen":770,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":1590680387847,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":1590680391590,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp"}
+1350{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","pkt_oversize":false,"pkt_ts":1590680391,"pkt_len":770,"pkt":"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","pkt_caplen":770,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":1590680391590,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":1590680386576,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":1590680391590,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":1590680387847,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/encrypted_sni.pcap"}
diff --git a/tests/result/nDPId_ethereum.pcap.txt b/tests/result/nDPId_ethereum.pcap.txt
new file mode 100644
index 000000000..72c002d6a
--- /dev/null
+++ b/tests/result/nDPId_ethereum.pcap.txt
@@ -0,0 +1,1029 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1578508362274,"flow_last_seen":1578508362274,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"87.14.222.25","dst_ip":"192.168.1.184","src_port":56693,"dst_port":30303,"l4_proto":"udp"}
+0542{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508362,"pkt_len":170,"pkt":"KDc3AG3IEBMx8Tl2CABFAACc0mBAADURe2hXDt4ZwKgBuN11dl8AiEJtHMys6Q29AOp21rwpZSDXERjTbIzhwNph0idC5kCkV\/FDnhOUP\/GMZC9pQ1ikY4tKfgVohRJdDV\/jhdY3JkNQ8nfjTjeSnG7Ixlzbx1L2txMkADCUTD6WfRXFuzz03\/IfAAHdBMuEfwAAAYJ2X4J2X8mETxbOvYLp94CEXhYgXgU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1578508362274,"flow_last_seen":1578508362274,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"87.14.222.25","dst_ip":"192.168.1.184","src_port":56693,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0597{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508363,"pkt_len":213,"pkt":"KDc3AG3IEBMx8Tl2CABFAADH0wVAADURephXDt4ZwKgBuN11dl8As\/l1jW6o\/uOLsNilE7wPPGgWLrGBgPfvOzwO1DfZyAOcgKFZ114jjOcqSahrn1BNVaBcqPiZ+5Zw3KmlNNeK6areM2YGHfDo3L4DI03KcwYwznBps1b+iFJS+0Kipikc3Gq9AQP4R7hAl090ZgbQhHWBj8BMRwa4LeNB32fKxPZW6UW3BwzH4FX8L40Uh5Yh\/LpdLpgFyY0tX7A7rx7OhPCc704eHlKGuoReFiBf","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1578508363692,"flow_last_seen":1578508363692,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"60.191.32.71","dst_ip":"192.168.1.184","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0539{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508363,"pkt_len":171,"pkt":"KDc3AG3IEBMx8Tl2CABFAACdOfxAACwR9O08vyBHwKgBuHZfdl8AicNGfxf10Wb92tmu8P4AYDHc1S9CYBd0hA8u+7bp2exSZpfjoD4stw3HK2zECpnkODZdOg6LxGWvabU8eolUhCpRWxf283jKbdR45yXwcXrtjWJbPi2JRR9Nts4CTYECrpr\/AQHeBcuErBIAAoJ2X4J2X8uETxbOvYLp94J2X4ReFiBe","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1578508363692,"flow_last_seen":1578508363692,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"60.191.32.71","dst_ip":"192.168.1.184","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1578508364272,"flow_last_seen":1578508364272,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"3.112.138.57","dst_ip":"192.168.1.184","src_port":25516,"dst_port":30303,"l4_proto":"udp"}
+0555{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":181,"pkt":"KDc3AG3IEBMx8Tl2CABFCACn7eVAACURF08DcIo5wKgBuGOsdl8Ak1lonaJ3QYcb7U0uMgLRKCkYOOmsVBzd6scD1gTgbTNauX3kB3bPaDZ67w0\/6JScqj4YBzeDQtx9d9GUfbwpNwws+A3fj9N5t1f25M57T8Etpo9cRpw0Ipg9vE7GnadXMLBRAAHoBNeQAAAAAAAAAAAAAAAAAAAAAIInD4InD8mETxbOvYLp94CEXhYgYA==","pkt_caplen":181,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1578508364272,"flow_last_seen":1578508364272,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"3.112.138.57","dst_ip":"192.168.1.184","src_port":25516,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":1578508364382,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0598{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHswoAAEAR05vAqAG4A9EtT3Zfdl8As46jAUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":1578508364382,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":1578508364382,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0598{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHegkAAEARY2nAqAG4NOelbHZfdl8As+VvAUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":1578508364382,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":1578508364382,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0599{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADH\/g8AAEAROunAqAG4EopsQ3Zfdl8As0D2AUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1578508364382,"flow_last_seen":1578508364382,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1578508364421,"flow_last_seen":1578508364421,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0597{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHWYMAAEARj8vAqAG4ImGsFnZfdl8As\/EZ15lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1578508364421,"flow_last_seen":1578508364421,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1578508364422,"flow_last_seen":1578508364422,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0540{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcLWUAAEAR9WvAqAG4QipS9nZfdl8AiGZvYT14ALKwnMdgMCBzf19RhoDEZwfAnRP1Mz5t1CQfWH9BMW+RtakCpISLcdct0MfsiOdcBIDUccBBbd+y\/K0wDya+KeRA13HRMdUz2NPxyyUESIw4\/BeiGYIdI8USz9rYAAHdBMuEfwAAAYJ2X4J2X8mEQipS9oJ2X4CEXhYgYAU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1578508364422,"flow_last_seen":1578508364422,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0597{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHAOAAAEAR3JLAqAG4NOelbHZfdl8As+U915lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+1793{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1097,"pkt":"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","pkt_caplen":1097,"pkt_type":2048,"pkt_ipoffset":14}
+0937{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":467,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHFF1VAAC8RP1MD0S1PwKgBuHZfdl8BsTR2htDCYwB7bPwVHRrppzCkGewLkUUNlB3jVcwKSsPl3PpRPPiYpogGSbVhGO6LOf+6vpmiVjQKuGK9fr9HzQor5V9uX7UyvZMEj8wMYsgT45Bz2Z7bdsQaazyQJOYgw3sXAAT5AUT5ATz4TYSi5B2ggnZfgnZfuEAwVdpN68jOobX+wHrrL2RH\/wK1ka2szeSJGHiHFFoNLEPxKwxFy33NRZ3ovPOnkwdh3qJaARUyaYeXnrMHfiPL+E2EpERrUoJ2YYJ2YbhAbVK4hBOIFxjMK61hoo+B2E1DFAGWystZDApZ1qWqMdGzPO6EtDCqKOy2kznyTf9sEf\/6IzNe3mDxF09nkCXqPPhNhCPpxYOCdl+Cdl+4QEyRwYHw012pKtGG4pX25QXUlp9AiY+SLu1l7sUn3fRNHZfvnNA3az+glcVdf8irWyfLyfxkF3pVP8czohGx7uH4TYTR+vDNgnZfgnZfuEDT1Pf73xy4M3qZSRLleOgEdgguFkAavHpg2I9RZUlU1ZSe7W107ts9v4ZrZs61PWJz3Pgt4YI56NsUnL8RZ7gNhF4WIGA=","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":1578508364522,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":56612,"dst_port":30303,"l4_proto":"tcp"}
+0416{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG4zfAqAG4QipS9t0kdl9\/aKJnAAAAALAC\/\/+zAAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":1578508364522,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"165.22.107.33","src_port":56610,"dst_port":30303,"l4_proto":"tcp"}
+0415{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGaCDAqAG4pRZrId0idl9zKqGzAAAAALAC\/\/9E3QAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":1578508364522,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"104.42.217.25","src_port":56611,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGNxTAqAG4aCrZGd0jdl\/sFGYiAAAAALAC\/\/\/WdgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":1578508364522,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.243.160.83","src_port":56613,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGNRHAqAG4ovOgU90ldl\/qeq6yAAAAALAC\/\/+NewAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1578508364522,"flow_last_seen":1578508364522,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.158.244.151","src_port":56615,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGYCLAqAG4I570l90ndl+E\/i4vAAAAALAC\/\/+eigAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":56617,"dst_port":30303,"l4_proto":"tcp"}
+0416{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGqeDAqAG4ImGsFt0pdl+dmoURAAAAALAC\/\/94yAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":56618,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGngTAqAG4NOelbN0qdl\/FC\/gzAAAAALAC\/\/\/SVwAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"191.234.162.198","src_port":56620,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFafAqAG4v+qixt0sdl9ft67AAAAAALAC\/\/\/4vwAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.187.207.27","src_port":56621,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGdIHAqAG4NLvPG90tdl\/U+mmAAAAAALAC\/\/8nlgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":56622,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+YrAqAG4EopsQ90udl8TbQyrAAAAALAC\/\/\/LAQAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.81.28","src_port":56623,"dst_port":30303,"l4_proto":"tcp"}
+0416{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFLLAqAG4EopRHN0vdl8VNVkbAAAAALAC\/\/+X7wAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"89.38.99.34","src_port":56624,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGvA\/AqAG4WSZjIt0wdl+afwcPAAAAALAC\/\/8MDgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"5.1.83.226","src_port":56625,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGH3XAqAG4BQFT4t0xdl\/cLTE7AAAAALAC\/\/8DmAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.128.195.220","src_port":56626,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGAfvAqAG4soDD3N0ydl\/wysJIAAAAALAC\/\/9AcgAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.255.23.113","src_port":56627,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGPejAqAG4Iv8Xcd0zdl8e+UQoAAAAALAC\/\/\/MUAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1578508364523,"flow_last_seen":1578508364523,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":56628,"dst_port":30303,"l4_proto":"tcp"}
+0416{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGRzjAqAG4A9EtT900dl+bF1VlAAAAALAC\/\/9IRAAAAgQFtAEDAwUBAQgKItiUTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":191,"pkt":"KDc3AG3IEBMx8Tl2CABFAACxV7ZAADERmgVCKlL2wKgBuHZfdl8AnaK0fEIbGBqDvIrgEkHISxvw4daIo1RSAPsaWiRQZnDOwteCpdNuEHAKkf4qhTn951kjq+ta18NQVXgW\/g4PPXuXiV0Qa\/G9UyK1NNATBLMnTaWqYuSaSklfuyWrYJCN+duPAALyy4RPFs69gun3gun3oGE9eACysJzHYDAgc39fUYaAxGcHwJ0T9TM+bdQkH1h\/hF4WIIg=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC0GcyYjnvSXwKgBuHZf3ScG6rxyhP4uMKAScSBDbwAAAgQFrAQCCAo03AK8ItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/i4wBuq8c4AQECzS\/AAAAQEICiLYlHo03AK8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGDf+ygMPcwKgBuHZf3TL4VGlQ8MrCSaAScSATXAAAAgQFrAQCCApfPQwNItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysJJ+FRpUYAQECyi6QAAAQEICiLYlHpfPQwN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1075{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":561,"pkt":"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","pkt_caplen":561,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364568,"flow_tot_l4_data_len":643,"flow_min_l4_data_len":32,"flow_max_l4_data_len":527,"flow_avg_l4_data_len":160,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.158.244.151","src_port":56615,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+1147{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":612,"pkt":"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","pkt_caplen":612,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364568,"flow_tot_l4_data_len":694,"flow_min_l4_data_len":32,"flow_max_l4_data_len":578,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.128.195.220","src_port":56626,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0410{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGyBNZJmMiwKgBuHZf3TAEAfQVmn8HEKAScSAQTQAAAgQFrAQCCApfmkPpItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvBvAqAG4WSZjIt0wdl+afwcQBAH0FoAQECyf1wAAAQEICiLYlH1fmkPp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1046{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":539,"pkt":"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","pkt_caplen":539,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364571,"flow_tot_l4_data_len":621,"flow_min_l4_data_len":32,"flow_max_l4_data_len":505,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"89.38.99.34","src_port":56624,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0411{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACcGVuwi\/xdxwKgBuHZf3TMrXBsGHvlEKaAScSD3ewAAAgQFrAQCCAqnEIc7ItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UQpK1wbB4AQECyG7wAAAQEICiLYlJSnEIc7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":578,"pkt":"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","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364595,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":32,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.255.23.113","src_port":56627,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0398{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ZWFAADQGqKWygMPcwKgBuHZf3TL4VGlR8MrEa4AQAOuv4AAAAQEICl89DDMi2JR8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Z0xAAC0GC+IjnvSXwKgBuHZf3ScG6rxzhP4wH4AQAOvgIwAAAQEICjTcAuUi2JR8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1012{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUZ05AAC0GC8AjnvSXwKgBuHZf3ScG6r4zhP4wH4AYAOvxHgAAAQEICjTcAuYi2JR8gysLESbTv4Dr4YCTkrO5fHNXM1YguvymVlM0IUGgL8I=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+M4AQEB7O9QAAAQEICiLYlLY03ALm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+U4AQEB3O1QAAAQEICiLYlLc03ALm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1Z09AAC0GC94jnvSXwKgBuHZf3ScG6r5ThP4wH4AYAOtaOQAAAQEICjTcAuYi2JR8hA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+VIAQEBzO1QAAAQEICiLYlLc03ALm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2Z1BAAC0GC9wjnvSXwKgBuHZf3ScG6r5UhP4wH4AYAOtXRAAAAQEICjTcAuYi2JR8hvM=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGYC7AqAG4I570l90ndl+E\/jAfBuq+VoAQEBzO0wAAAQEICiLYlLc03ALm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBZ1FAAC0GC9AjnvSXwKgBuHZf3ScG6r5WhP4wH4AYAOv5nAAAAQEICjTcAuYi2JR8AfV+\/QCkfx6rGGK\/1g==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEZ1JAAC0GC8wjnvSXwKgBuHZf3ScG6r5jhP4wH4AYAOsBEAAAAQEICjTcAuYi2JR8EHNO5VzCxmv5MG48fSR18g==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0947{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":470,"pkt":"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","pkt_caplen":470,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUZWNAADQGqIOygMPcwKgBuHZf3TL4VGrl8MrEa4AYAOtPxQAAAQEICl89DDUi2JR8QsQIMxLQgUH5fnek9asOwZLzzG\/3c77N9MR6xo419l0=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1ZWRAADQGqKGygMPcwKgBuHZf3TL4VGsF8MrEa4AYAOvxIAAAAQEICl89DDUi2JR8vQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":222,"pkt":"KDc3AG3IEBMx8Tl2CABFAADQZWVAADQGqAWygMPcwKgBuHZf3TL4VGsG8MrEa4AYAOvq3AAAAQEICl89DDUi2JR8QBvbLRG6QDCRG3RWTwEZaDTBcxsiKBcls6RB8vHUBWy9Tr31rj+QHMAHiom174q9mbEJJDHB6R3VSQrfIhkAkV9ZbSk9iiaRqjmCK4N7DAUi00ZZH\/9QdioMGkVSlbTIQtRzeIZUHlrJswnO5UanzfhD4xu3cpYIPEs0ebY21XpI3xtg3x7OqnwSCFngogIAadteMgmP+Oi\/PB6f","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":69,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA3ZWZAADQGqJ2ygMPcwKgBuHZf3TL4VGui8MrEa4AYAOuVRwAAAQEICl89DDUi2JR8JDr0","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRq5YAQEB+e2wAAAQEICiLYlLdfPQw1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRrBYAQEB6evAAAAQEICiLYlLdfPQw1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRrBoAQEB6euwAAAQEICiLYlLdfPQw1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGAgfAqAG4soDD3N0ydl\/wysRr+FRrooAQEBmeJAAAAQEICiLYlLdfPQw1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEZWdAADQGqI+ygMPcwKgBuHZf3TL4VGul8MrEa4AYAOuCqwAAAQEICl89DDUi2JR8yjgzdiqPQc3ERKwWeITX2w==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+1800{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1099,"pkt":"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","pkt_caplen":1099,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1578508364632,"flow_last_seen":1578508364632,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.60.79","src_port":56629,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGCOPAqAG4MyY8T901dl\/qiNMXAAAAALAC\/\/88YQAAAgQFtAEDAwUBAQgKItiUuAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0sAZAADQGGBVZJmMiwKgBuHZf3TAEAfQWmn8I6YAQAOutFQAAAQEICl+aRBIi2JR+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0901{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":433,"pkt":"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","pkt_caplen":433,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvBvAqAG4WSZjIt0wdl+afwjpBAH1hYAQECCcMQAAAQEICiLYlLxfmkQU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGu\/vAqAG4WSZjIt0wdl+afwjpBAH1hYAYECCqQAAAAQEICiLYlLxfmkQUxcpHUka6Nv2S2Ufz6z\/PcyUNRbY0ZGIBN\/5tLIxxnq4=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGvBrAqAG4WSZjIt0wdl+afwkJBAH1hYAYECBUCAAAAQEICiLYlLxfmkQUSA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGu5\/AqAG4WSZjIt0wdl+afwkKBAH1hYAYECDynQAAAQEICiLYlLxfmkQU1vIQ4L6OVF1a9tr8H1ebgGF7lEJ02fLSz9VmzeJ5rrxs2wIgHwrg+JPKnxyBCTbuTymXDp4sYmvWiJSQTVOBRSWDsB\/mqaz+SwECNHF1O9oNYt3hZ3L+cxyXkjyKlMNN4xfN1Mr3mqbgIiMEx8YFuC1N4RZBLkygM5i1FA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGvBjAqAG4WSZjIt0wdl+afwmGBAH1hYAYECAV9QAAAQEICiLYlLxfmkQUiZP8","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGvAvAqAG4WSZjIt0wdl+afwmJBAH1hYAYECCQoQAAAQEICiLYlLxfmkQUCiwuecniiz\/qObmRVIGEww==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGQxWi86BTwKgBuHZf3SW77REO6nqus6AScSAW9gAAAgQFrAQCCAp1Z9P7ItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNR3AqAG4ovOgU90ldl\/qeq6zu+0RD4AQECymNwAAAQEICiLYlMZ1Z9P7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1022{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":524,"pkt":"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","pkt_caplen":524,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364647,"flow_tot_l4_data_len":606,"flow_min_l4_data_len":32,"flow_max_l4_data_len":490,"flow_avg_l4_data_len":151,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.243.160.83","src_port":56613,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+1805{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1099,"pkt":"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","pkt_caplen":1099,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+1812{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1099,"pkt":"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","pkt_caplen":1099,"pkt_type":2048,"pkt_ipoffset":14}
+0943{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1578508364654,"flow_last_seen":1578508364654,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"128.0.51.140","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0600{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHl8oAAEARbG\/AqAG4gAAzjHZfdl8AswwF15lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1578508364654,"flow_last_seen":1578508364654,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"128.0.51.140","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0400{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0tVBAACcGoaMi\/xdxwKgBuHZf3TMrXBsHHvlGKYAQAOuT7wAAAQEICqcQh3si2JSV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0945{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":468,"pkt":"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","pkt_caplen":468,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUtVJAACcGoYEi\/xdxwKgBuHZf3TMrXByZHvlGKYAYAOtT8AAAAQEICqcQh3wi2JSVmzR\/Z2r4JlLZOXsyzI3ghD22rwaNEB4McRzPEE97aVw=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1tVNAACcGoZ8i\/xdxwKgBuHZf3TMrXBy5HvlGKYAYAOtQMwAAAQEICqcQh3wi2JSVQg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2tVRAACcGoZ0i\/xdxwKgBuHZf3TMrXBy6HvlGKYAYAOsvCgAAAQEICqcQh3wi2JSVYyc=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBtVVAACcGoZEi\/xdxwKgBuHZf3TMrXBy8HvlGKYAYAOtx2QAAAQEICqcQh3wi2JSVGyW4bay1k8waLKwJRg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEtVZAACcGoY0i\/xdxwKgBuHZf3TMrXBzJHvlGKYAYAOvplgAAAQEICqcQh3wi2JSV94dKeTKGT9J\/lM3\/mcX8yQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcmYAQEB+C7QAAAQEICiLYlNCnEId8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcuYAQEB6CzgAAAQEICiLYlNCnEId8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcuoAQEB6CzQAAAQEICiLYlNCnEId8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPfTAqAG4Iv8Xcd0zdl8e+UYpK1wcvIAQEB6CywAAAQEICiLYlNCnEId8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC8GWDwD0S1PwKgBuHZf3TTdrvLSmxdVZqAScSC43wAAAgQFrAQCCApOlRAnItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1Vm3a7y04AQECxIFwAAAQEICiLYlNBOlRAn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1578508364659,"flow_last_seen":1578508364659,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"40.67.144.128","src_port":56630,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGv5TAqAG4KEOQgN02dl98bCWSAAAAALAC\/\/8OmwAAAgQFtAEDAwUBAQgKItiU0QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0936{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":461,"pkt":"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","pkt_caplen":461,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEG8jtCKlL2wKgBuHZf3SQj+YV4f2iiaKAScSArVwAAAgQFrAQCCAodkmB\/ItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG40PAqAG4QipS9t0kdl9\/aKJoI\/mFeYAQECy6hgAAAQEICiLYlNgdkmB\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEGF+czJjxPwKgBuHZf3TW8w0qY6ojTGKAScSDV+QAAAgQFrAQCCAphOp2qItiUuAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNMYvMNKmYAQECxlkQAAAQEICiLYlNlhOp2q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0978{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":495,"pkt":"EBMx8Tl2KDc3AG3ICABFAAHhAABAAEAG4ZbAqAG4QipS9t0kdl9\/aKJoI\/mFeYAYECzM0QAAAQEICiLYlNkdkmB\/AasE+v2aCVNnM9qWpvTSHLoErqBLg3QSZ\/tMLN0zJwbq9Mu7q3VJWJNHr1heAKUFIH6bvGaLiNrFnIPCKtgOScwiTFw54GiWDntwJGw8S+My1sqbWwD5rVIxP74gpnGytj6O4F8rmrsyuiCsm77q8dfz211MKn3j7YhZmMWRYURZRdJFY51v9X7khyKovEo46VYW2jGC6GVtWcTrDZDFJYn1e7LsFlaqQaxOYfrD2tz9VK5oXG6zm+eA7MB4mCMofI9yaMLuWFfMklNuksZWQffmLOkkjvu+JeHXPBtaXcMyG6VQPZJt5vhTrK\/7tBIlYl8s5ITS6No1RpH0BgIPXt+46ugXdA5HzKZGb0lj1Jqo7E5sc7dPngrn9FSmEo456JbHmmJNKy0g4v\/k7zERy0mVrS+SUdpPvt6FhVgG960MG14DOtzVo3TIF3qyoLS+K3GzC41yovcXuYwGLCbuyXph1W5BQKu1Xl8AY3quLjxp+IoaGsJALixRryGkpmUSIIsbwWErVFKVYiLqsRpD+6+H6II578lFsF0CkB8cpISbWAjzV02hsEOVgzK4","pkt_caplen":495,"pkt_type":2048,"pkt_ipoffset":14}
+0971{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":487,"pkt":"EBMx8Tl2KDc3AG3ICABFAAHZAABAAEAGB0rAqAG4MyY8T901dl\/qiNMYvMNKmYAYECzM5gAAAQEICiLYlNphOp2qAaME5oGp5GvmHIWgGGU93Sb4NHYjusUApM6sRP5i8qY+HzhQdCIFLnndrt7Lyb35ijFh\/RKRZMveJjaTrvg07LR7B4kXgNNmDCnZ2mleUCoqai5pRFszdTaWzaDsM4Q3Wpw7y0J8UpUFV6JX3TRY81kn1wATSI1nzIaZiu8M7z9ugzT1Bhp5p5TFxbdeYQO6JrfMV4SRpyBXU0Rr7lBPIIFGiWnTkFtnxAhgodqQRFvRwZqLnZCsgQbUsh0fSXnkXvrGai3JM75BbyPWqwTWuWiqsasopvi+xYlm0p3aCAgHFYfwBoK2+KEvTZF1a6IBLF7ajmDeyzfdyjRL\/4Fdv1tddrUHTtxiT94TQMGrf7w+6PD94c1BvIA\/tb\/lxk1wzuF9hyaRwsvRsoh5iUSYTluqLNaUZEyWxIttTdFdUw+4KtjnqIaaVDrFEF2xOF4vZXkHdM6Nz+NtV7XrL5ILFjgViwhX3DPu4RTPwZeAt0lPJnUpfywRheWctZ\/iNqYU3QdkPrFOAx1inq1ZAUdz9ftjWvMI+49unsEi+QuvIeQbOJO4fA==","pkt_caplen":487,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":306,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEksAhAADQGFyNZJmMiwKgBuHZf3TAEAfWFmn8I6YAYAOsQnAAAAQEICl+aRF4i2JS8xcqDUka6Nv2S2Ufz6z\/Pc4tUOEiP2qX35MgcMm\/FRcBI1j4Q8LC7QUcc9JL\/Yw3KyGBqgE03yu+YnYklie4xu7Al3VM2TQGz54\/LgRl0\/Ie5C27Q8ysWIDe7ZEW+uiq4a95fxvQnunVacIlTA0Gpw4J+oGybZovq+Rk5DJxjUmwrb8Uy6Vt0\/oPrb6yV5\/MR+SZ8DsrePdRSAl65pGEVkjyYpKbSgRz1ChT52ZoUU2vYtyjxLRwORKHS28j300fvx67g0QIGEmJy4CquA1lMx31OufL1tZusRvGCS1tl8+mE6ykfwjozXV8dBrI12PHz","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0sAlAADQGGBJZJmMiwKgBuHZf3TAEAfZ1mn8JmYAQAOupewAAAQEICl+aRF8i2JS8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvBvAqAG4WSZjIt0wdl+afwmZBAH2dYAQEBmaJQAAAQEICiLYlOVfmkRe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1578508364682,"flow_last_seen":1578508364682,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.81.180","src_port":56632,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG833AqAG4MyZRtN04dl9aLQCVAAAAALAC\/\/+JqQAAAgQFtAEDAwUBAQgKItiU5gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1910{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1178,"pkt":"KDc3AG3IEBMx8Tl2CABFAASM2BBAADcR1ngiYawWwKgBuHZfdl8EeMBgH0wTNhnEtwanpj7oWlZ\/Hp0Gak0vyLNY48lrCKzEN97iWOlAwiKU8J2As0GDwpvqMobAk\/doYUwERgBj\/dX1qwI+w93bqV+opA8zeXK5DOY5QqaAWe1EmRlafyw14V0SAAT5BAv5BAP4TYRPFs69gun3gun3uECCARRJlalZmbRgrccKpmIFHuwcnfCnxRI\/PJfvccahZWq2zhSNF3xN8PFm4Ig97uMj8JcxYkHuXulMILJ8m+Dx+E2ENiSg04J2X4J2X7hAPRqHFTz0e8oEsmOadgUbUG0\/Gq1XFXFWshB59yMDlMnzDbSaQte3vRlNp0x8bXK\/C0IExkQW+7e6O42uaIsSOfhNhG\/lALSCTtaCTta4QNKaGvf27ePtI09PYWMWWoqsTgBFWVV\/OStWx2mo9mqS58z7TiK83yibq71BZSi0CSsekwb4Zyr8nj5zQd0mqCb4TYSkhGWfgnZfgnZfuEBoaZQlH\/tAMTmENPyYivdiK6qXFlTxe+\/p6cPLqiael7D6BFBiRXZHacw3oUOaGk4+u32W1NMUjoJXk06B2mEI+E2ELzgXtoJ2X4J2X7hAZ5DyvV4L2UjTbfMTNRlwVlkkGIIkt\/VYvYJ76IXUVE6r5fvcx+2tWoDAFaFaLZO1vJw5B3fbXfeObFaJ1qahJvhNhHLbOhmCTtaCTta4QOsAfRHCWayd+ePpaQzEOGf3dXjZZgxjuurzp9q\/DaDAlIrlX0hFIpZGowqYAlmPGRQlb2Zp7G196tUzRB5lA1D4TYRQniRSgnZfgnZfuEDy+3Y1qZpk8\/KZSHkhI\/dUtq2PmnojEAJ+pvc2bi3A23IJ6RM8OAW49hm6EgP+nw9QrdJ1FOvq3+1MzaqVwKmC+E2EI9yzYIJ2YIJ2YLhAOJyQU2JE6mr+PrqS1VpbvrNoILvKRQR+abFnLs+XgISTnL1u7Up3BqfrKb9hyDFv4+EivNbWhPn9c0jykBsfLvhNhC9ngvuCdmKCdmK4QMQewuj5qn6FtR+caLmA7fiCCCWlXl5n4eHsa\/hStv5IXJfR3qW2xYlmjRashSfhzXIk\/cArlEuFCVyLKkliTzj4TYR68x8XgglNgk7WuEDyUr+wEhCRTzC+abav+Qq8gCoJQuHHGbcH\/DZQmfl9EGgUirj+pxEJRc8L7rXREu747IWcesHQp9HRE6vORWkC+E2E1W2gk4Kvx4Kvx7hAdMXaCMYMMwBE0nd2ZguY7X9OffS41d7S\/Y+mPW\/bN2r4s5PDjCrWaOVF\/TvDBjFcUWsPiqOXMHIqsOoggNo9SvhNhE4vwp6Cdl+Cdl+4QPkOM4NqDnpAiCaFdcv7mpRSPLANloklV4wbFH\/35BGlAWuLnC96pYG30ySaUekbUEoxDdJFuDpuhxs7uesYXD\/4TYSOLK6TgnZhgnZhuEDoktJdZWuqibhkACX5AYXpi\/92jauNHaPZe57KQENT7f3lptm8vn\/KsHCyQGycNosbcDhgVNlPlUl4B5KRi2QIhF4WIGA=","pkt_caplen":1178,"pkt_type":2048,"pkt_ipoffset":14}
+0837{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":386,"pkt":"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","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1578508364697,"flow_last_seen":1578508364697,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"54.36.160.211","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0599{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHkfoAAEARTtTAqAG4NiSg03Zfdl8As+iZ15lp9gBLtC6IaCW33is1Th50j8UHjOmT4mAffcZn+yYEl4jGBnLnkKaeXePCjndUh79\/WTQA2R4kNex3KmtFmldicE1yJNj24ZecPC4hxpTcI9qIeMXPlU0BU5Rec0LcAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1578508364697,"flow_last_seen":1578508364697,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"54.36.160.211","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0yT1AADEGTrEzJjxPwKgBuHZf3TW8w0qZ6ojUvYAQAOtzCwAAAQEICmE6ncsi2JTa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0866{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":406,"pkt":"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","pkt_caplen":406,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUyT9AADEGTo8zJjxPwKgBuHZf3TW8w0vt6ojUvYAYAOuWGwAAAQEICmE6ncwi2JTaDKbYTK0e7YzAyq8CJTCkEPjRnlZmQ1Ln\/nt1w+7tb0U=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1yUBAADEGTq0zJjxPwKgBuHZf3TW8w0wN6ojUvYAYAOu5jAAAAQEICmE6ncwi2JTauA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2yUFAADEGTqszJjxPwKgBuHZf3TW8w0wO6ojUvYAYAOsm4QAAAQEICmE6ncwi2JTaSqo=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":95,"pkt":"KDc3AG3IEBMx8Tl2CABFAABRyUJAADEGTo8zJjxPwKgBuHZf3TW8w0wQ6ojUvYAZAOslLgAAAQEICmE6ncwi2JTaOOrkmVLM229iTDzO2G5orn6EEsKP1\/pdX00ufXc=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNL7YAQECFiVgAAAQEICiLYlQRhOp3M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMDYAQECBiNwAAAQEICiLYlQRhOp3M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMDoAQECBiNgAAAQEICiLYlQRhOp3M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMEIAQECBiNAAAAQEICiLYlQRhOp3M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGCO\/AqAG4MyY8T901dl\/qiNS9vMNMLoAQEB9iFwAAAQEICiLYlQRhOp3M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1578508364714,"flow_last_seen":1578508364714,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"82.145.220.249","src_port":56633,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGSM3AqAG4UpHc+d05dl+ffKVSAAAAALAC\/\/\/0ywAAAgQFtAEDAwUBAQgKItiVBQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACMGVBhoKtkZwKgBuHZf3SMhYrdg7BRmI6AS\/ohxlQAAAgQFoAQCCAru0q\/IItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGYjIWK3YYAQEAmOFAAAAQEICiLYlQju0q\/I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1068{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364719,"flow_tot_l4_data_len":638,"flow_min_l4_data_len":32,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":159,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"104.42.217.25","src_port":56611,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+1801{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1097,"pkt":"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","pkt_caplen":1097,"pkt_type":2048,"pkt_ipoffset":14}
+0942{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1578508364732,"flow_last_seen":1578508364732,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"111.229.0.180","src_port":30303,"dst_port":20182,"l4_proto":"udp"}
+0543{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACccxcAAEAR1EDAqAG4b+UAtHZfTtYAiDTvS0gyrIvyYAXql+rzEz+AR\/cLOiJor5McpZ3aQTzvVtbxvdlPVHOvm8x2T63kxRajQJXVXM7hf79y1fQG9XWokxXgcqkKLlUPoIFVVYrTntTkZjbBJdoltYqy5v2xN8\/CAAHdBMuEfwAAAYJ2X4J2X8mEb+UAtIJO1oCEXhYgYAU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1578508364732,"flow_last_seen":1578508364732,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"111.229.0.180","src_port":30303,"dst_port":20182,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0411{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACsGCIIzJlG0wKgBuHZf3ThkB68VWi0AlqAScSALcgAAAgQFrAQCCAqBHInXItiU5gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQCWZAevFoAQECya6gAAAQEICiLYlSaBHInX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1052{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":545,"pkt":"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","pkt_caplen":545,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1578508364682,"flow_last_seen":1578508364752,"flow_tot_l4_data_len":627,"flow_min_l4_data_len":32,"flow_max_l4_data_len":511,"flow_avg_l4_data_len":156,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.81.180","src_port":56632,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+1907{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1178,"pkt":"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","pkt_caplen":1178,"pkt_type":2048,"pkt_ipoffset":14}
+0836{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":386,"pkt":"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","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1578508364776,"flow_last_seen":1578508364776,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.97.143.1","src_port":30303,"dst_port":50000,"l4_proto":"udp"}
+0544{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACc6zkAAEARbFTAqAG40WGPAXZfw1AAiAuoYX\/X5Uw4lffkPNHSCMW6SrDFB88ojJJssa\/u4MiJ7ftgjBcFdVPuw+tvNym45804Q6\/uLh0oQsOr0riQp0FxmC7+mATc88CsFLix8wyPMseFlTK290MHGwkPORWZli5hAQHdBMuEfwAAAYJ2X4J2X8mE0WGPAYLDUICEXhYgYAU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1578508364776,"flow_last_seen":1578508364776,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.97.143.1","src_port":30303,"dst_port":50000,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0413{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACsGswg056VswKgBuHZf3SosjczmxQv4NKAS\/ohsIgAAAgQFoAQCCApgPx7\/ItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/g0LI3M54AQEAmIYgAAAQEICiLYlUdgPx7\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC0GKKu\/6qLGwKgBuHZf3SxpEHBBX7euwaAS\/ohj6AAAAgQFoAQCCAo0GJnqItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft67BaRBwQoAQEAmAJwAAAQEICiLYlUg0GJnq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1010{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":516,"pkt":"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","pkt_caplen":516,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":578,"pkt":"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","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364787,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":32,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"191.234.162.198","src_port":56620,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0411{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAADMGVclSkdz5wKgBuHZf3TlFnUTdn3ylU6AScSDFhwAAAgQFrAQCCAqGNr5sItiVBQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKVTRZ1E3oAQECxU+wAAAQEICiLYlUqGNr5s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1006{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":508,"pkt":"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","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jZZAADIGtYai86BTwKgBuHZf3SW77REP6nqwfYAQAOuzMQAAAQEICnVn1Hci2JTH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0856{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNR3AqAG4ovOgU90ldl\/qerB9u+0SXoAQECGiGwAAAQEICiLYlVd1Z9R4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGNP3AqAG4ovOgU90ldl\/qerB9u+0SXoAYECHk7gAAAQEICiLYlVd1Z9R4qB7rhOXyDkG7gf4wVue1YKGdu7r54mR2rHXQFcpIbKw=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGNRzAqAG4ovOgU90ldl\/qerCdu+0SXoAYECE+8gAAAQEICiLYlVd1Z9R4Yw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGNKHAqAG4ovOgU90ldl\/qerCeu+0SXoAYECHouQAAAQEICiLYlVd1Z9R4lfDP5tjJZpMfMjR7eiKq0MDCgLKaeJFxEU3f+IZKTWjmMrd+cbze++CWY0cTERf8CYqt6vfqCR3lfDFsuymJupfomkb1vapTP00fTHjTZ3Vess+sh+PKmRGkZHOlmkCR1I2sz7QsY0HpykuOFDo4U1A3RyWGkH+BzXaDFQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGNRrAqAG4ovOgU90ldl\/qerEau+0SXoAYECG6xwAAAQEICiLYlVd1Z9R46qr8","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGNQ3AqAG4ovOgU90ldl\/qerEdu+0SXoAYECHIiwAAAQEICiLYlVd1Z9R4SrQMBxeRIeYtZ96E\/Nk\/3w==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACgG15goQ5CAwKgBuHZf3TZG9x3QfGwlk6AScSARhwAAAgQFoAQCCApyLMYFItiU0QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCWTRvcd0YAQEAmgwgAAAQEICiLYlWVyLMYF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0989{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":497,"pkt":"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","pkt_caplen":497,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0EGtAAC8GR9kD0S1PwKgBuHZf3TTdrvLTmxdW8YAQAOtVRwAAAQEICk6VEKsi2JTS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1038{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":536,"pkt":"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","pkt_caplen":536,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70qYAQEB1DqAAAAQEICiLYlWhOlRCs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUEG1AAC8GR7cD0S1PwKgBuHZf3TTdrvSpmxdW8YAYAOs7nQAAAQEICk6VEKwi2JTSHHlbI663HlBlqhCztiz1v+iEJRHJqaLgSpim1SRPIN8=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1EG5AAC8GR9UD0S1PwKgBuHZf3TTdrvTJmxdW8YAYAOshRwAAAQEICk6VEKwi2JTSMg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70yYAQEBxDiQAAAQEICiLYlWhOlRCs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70yoAQEBxDiAAAAQEICiLYlWhOlRCs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2EG9AAC8GR9MD0S1PwKgBuHZf3TTdrvTKmxdW8YAYAOvr6gAAAQEICk6VEKwi2JTSZ1o=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBEHBAAC8GR8cD0S1PwKgBuHZf3TTdrvTMmxdW8YAYAOsRtgAAAQEICk6VEKwi2JTSa3IwvqEKiAw\/Ph78Hg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEEHFAAC8GR8MD0S1PwKgBuHZf3TTdrvTZmxdW8YAYAOvZIgAAAQEICk6VEKwi2JTSYL0bmiUz0WRRW26Jpqqghg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR0TAqAG4A9EtT900dl+bF1bx3a70zIAQEBxDhQAAAQEICiLYlWlOlRCs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACYGE48SimxDwKgBuHZf3S4uwDPtE20MrKAS\/ogQ2gAAAgQFrAQCCAqmusMwItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQysLsAz7oAQECws4QAAAQEICiLYlWmmusMw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1578508364824,"flow_last_seen":1578508364824,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"159.203.84.31","src_port":56634,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGhG3AqAG4n8tUH906dl\/csM+rAAAAALAC\/\/\/IeAAAAgQFtAEDAwUBAQgKItiVagAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1124{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":597,"pkt":"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","pkt_caplen":597,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364825,"flow_tot_l4_data_len":679,"flow_min_l4_data_len":32,"flow_max_l4_data_len":563,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":56622,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0JQ9AACsG43ozJlG0wKgBuHZf3ThkB68WWi0CdYAQAOuoBwAAAQEICoEcihsi2JUn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1000{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":505,"pkt":"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","pkt_caplen":505,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAOcGbbUSilEcwKgBuHZf3S\/8FjKFFTVZHKASaN8k0QAAAgQFrAQCCApjgYkbItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUJRFAACsG41gzJlG0wKgBuHZf3ThkB7DNWi0CdYAYAOtkWgAAAQEICoEcih0i2JUnEZgUVDZrXdsUNyYoS5f1QdXeuMvykc7hqZg1EPAT7YU=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAewzYAQEB6W0wAAAQEICiLYlW+BHIod","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVkc\/BYyhoAQECyrKAAAAQEICiLYlW9jgYkb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew7YAQEB2WtAAAAQEICiLYlW+BHIod","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1JRJAACsG43YzJlG0wKgBuHZf3ThkB7DtWi0CdYAYAOsoJQAAAQEICoEcih0i2JUnfg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2JRNAACsG43QzJlG0wKgBuHZf3ThkB7DuWi0CdYAYAOuASgAAAQEICoEcih4i2JUnJdg=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBJRRAACsG42gzJlG0wKgBuHZf3ThkB7DwWi0CdYAYAOseDwAAAQEICoEcih4i2JUnJHlWQ1omdFEWSFOJ1Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew7oAQEB2WswAAAQEICiLYlW+BHIod","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew8IAQEB2WsAAAAQEICiLYlW+BHIoe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG84nAqAG4MyZRtN04dl9aLQJ1ZAew\/YAQEByWpAAAAQEICiLYlW+BHIoe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1578508364832,"flow_last_seen":1578508364832,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.228.29.160","src_port":56635,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGt9PAqAG4ouQdoN07dl+4t7BdAAAAALAC\/\/8\/HwAAAgQFtAEDAwUBAQgKItiVcAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1043{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":537,"pkt":"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","pkt_caplen":537,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364833,"flow_tot_l4_data_len":619,"flow_min_l4_data_len":32,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.81.28","src_port":56623,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0412{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADcGsuQiYawWwKgBuHZf3SnE3x7vnZqFEqAS\/ojiZQAAAgQFrAQCCAoxzJM4ItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05dtAADEGDGhCKlL2wKgBuHZf3SQj+YV5f2ikFYAQAOvH9gAAAQEICh2SYKIi2JTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqezAqAG4ImGsFt0pdl+dmoUSxN8e8IAQECz+XAAAAQEICiLYlXkxzJM4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1035{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":538,"pkt":"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","pkt_caplen":538,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364842,"flow_tot_l4_data_len":620,"flow_min_l4_data_len":32,"flow_max_l4_data_len":504,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":56617,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0410{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGeCSlFmshwKgBuHZf3SJnRYz4cyqhtKAScSBl3gAAAgQFrAQCCAo1gVUZItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqG0Z0WM+YAQECz0WAAAAQEICiLYlY01gVUZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1176{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1578508364522,"flow_last_seen":1578508364863,"flow_tot_l4_data_len":722,"flow_min_l4_data_len":32,"flow_max_l4_data_len":606,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"165.22.107.33","src_port":56610,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0969{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":488,"pkt":"KDc3AG3IEBMx8Tl2CABFCAHa+qFAADMGWYlSkdz5wKgBuHZf3TlFnUTen3ynDYAYAOuFtQAAAQEICoY2vn8i2JVLAaQEbR9vA4hTDZTsaicm3PEQBs1j86Mycfx789yK5+er465ZfyX2n+nTL58MP0xXLKumuX4y77o14\/toVQMmgRjref+Li68nmPtzUmRtU6SEiahbKo37gS4o3M3QF24kGfey3mNBMKT5ToCRQ39nsVmniGV9g4P5ptNKDWJzjosVv\/EszkgGjDts7d78DQ7fT2aF320kValLQcix2tmbKmAHJjMXNvalPWdBFatY1S3SuGiGT248si4LQvX2LhXcMwMNmjXWSm+ZhyVJ6x8N4c0v5VGlJ7q7w0O\/iX79IUfl+TWI9iG4W1vhAosinoYpiMwZUIL688QZo6IvsuhRlPxz0382tUcXd4nr9U3qtZtBw1pnwLKQfkYdchFHLfW+8mV04ZtHZwqSa5CSmB5Qb8duMliiUFy\/ljj65J7vDVtz5fgIwfuLnqtVvR40aKApzo0dLBcVMhz+ay0+xMwy7aRazAp8CHMTMyNk1SJCyHuFy0f5ZZoRQToG5brr9QqeDUfXm1EDXAoRlASzdmea2bev430tJ6icFbvR+n7dpGFOdQOcJeM=","pkt_caplen":488,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKcNRZ1GhIAQEB5RUAAAAQEICiLYlZCGNr5\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFCABU+qJAADMGWw5Skdz5wKgBuHZf3TlFnUaEn3ynDYAYAOtuJAAAAQEICoY2vn8i2JVLnLL1gX77HRpC9TPLOTpMrB\/B6hvFFwZfZ0YjLMCkpx8=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFCABU+qNAADMGWw1Skdz5wKgBuHZf3TlFnUakn3ynDYAZAOsjhwAAAQEICoY2vn8i2JVLqwm6yV6vLv9FGZehW4WuKHc5zk5aEDG1ywz25+gM570=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKcNRZ1GpIAQEB1RMQAAAQEICiLYlZCGNr5\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSNnAqAG4UpHc+d05dl+ffKcNRZ1GxYAQEBxREQAAAQEICiLYlZCGNr5\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGSLnAqAG4UpHc+d05dl+ffKcNRZ1GxYAYEBw+lwAAAQEICiLYlZCGNr5\/nLKLgX77HRpC9TPLOTpMrPEqcxv5iVk\/GkGrB6VHL8E=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGSNjAqAG4UpHc+d05dl+ffKctRZ1GxYAYEBwm6AAAAQEICiLYlZCGNr5\/Kg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGSF3AqAG4UpHc+d05dl+ffKcuRZ1GxYAYEBzMQgAAAQEICiLYlZCGNr5\/MMTM9uhLiy024ZB1vIARNUIvWgr6yfskRj26+jgWcEX0Jn3du43NoquYMARxwiYEyB64oFzOBG4ARwjZF6Woy\/A3G6ORlmfKbuffyoc1km3yAXEnBWCqG5eTNQpMXPCTFrlwsOSUzg318LU+6crg3qWe9NW1VJ51QPG\/LA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGSNbAqAG4UpHc+d05dl+ffKeqRZ1GxYAYEBxJVQAAAQEICiLYlZCGNr5\/FxPw","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGSMnAqAG4UpHc+d05dl+ffKetRZ1GxYAYEBxQfgAAAQEICiLYlZCGNr5\/FpRmKN9qSZ88ES56eup0ng==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACEGk4U0u88bwKgBuHZf3S3Pd7n11PppgaAS\/oiD+wAAAgQFoAQCCApvJb2EItiUTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+mmBz3e59oAQEAmf6AAAAQEICiLYlZpvJb2E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1115{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":591,"pkt":"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","pkt_caplen":591,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1578508364523,"flow_last_seen":1578508364879,"flow_tot_l4_data_len":673,"flow_min_l4_data_len":32,"flow_max_l4_data_len":557,"flow_avg_l4_data_len":168,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.187.207.27","src_port":56621,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0y95AACMGiEFoKtkZwKgBuHZf3SMhYrdh7BRoDYAQAfqZdwAAAQEICu7SsIki2JUJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1031{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":533,"pkt":"KDc3AG3IEBMx8Tl2CABFAAIHy99AACMGhm1oKtkZwKgBuHZf3SMhYrdh7BRoDYAYAfoG8gAAAQEICu7SsIoi2JUJAdEECf3\/gUaB196qa5SKbq61ayfaRe5YPi8bE8Z\/ruIusKnunXdyfMLWFFhxkiakm151gYheppOQ5HLhbk4iradZvSQB6VCqdwqs6JGGEKaSbZM3Iq79iKwwWiMAUxlmy6uoYLlsjCUWoBbR1crrDSvda72I74SsPY+FZJJSCwuTPYehunpr0iWeFd54jsoRHCEkLOWvlP1bWj\/1YdQT5oBMQYb58z3HoHcluozQ1LMUl9QwiD0rin9C7jneWOQLIX6pAUH2ZANTLnj9zWQfyjRQXu\/x6yxujquPe0jie3d3nIQ05+1PMEQwhTIcZWNfr+fzsA0dc54uUkPBRf9WWgHc8Tb23z7FvzW8hnnQnWKaC8VhQB0PKZtQMtoFmlPJo8WsiKfXWyw6XemOIP9as83AKzCms0jG2YgRhhr2FGHAWOrX\/1H8dkm2z+M6MXDod0rpfBNzviq0kGLLbhlmtuih9+X71QTPS9IEszBwHqPMz8qLqIf2XLyLWNy0L+IaZhjfRLVg1rEGsLODLQWnw4FYBhCXawM8AeJKjP6Ei1no4LRv9WTnY\/y2WulLwAKTb4B1ZGjpOdKco70HMG0C8rRdK2+WWwx7sn8XKbxVKJZ4pbU=","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUy+BAACMGiB9oKtkZwKgBuHZf3SMhYrk07BRoDYAYAfrC\/AAAAQEICu7SsIsi2JUJ6mDqKlOK0qjZ8Js5u+lMMkh6tR1OPY\/JYhy6CX7L5ec=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5NIAQD\/qI6QAAAQEICiLYlcPu0rCK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5VIAQD\/mIyQAAAQEICiLYlcPu0rCL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1y+FAACMGiD1oKtkZwKgBuHZf3SMhYrlU7BRoDYAYAfqyeAAAAQEICu7SsIsi2JUJ5Q==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5VYAQD\/mIyAAAAQEICiLYlcPu0rCL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2y+JAACMGiDtoKtkZwKgBuHZf3SMhYrlV7BRoDYAYAfrKMQAAAQEICu7SsIsi2JUJzUU=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBy+NAACMGiC9oKtkZwKgBuHZf3SMhYrlX7BRoDYAYAfofVgAAAQEICu7SsIsi2JUJridXwKMiLkho+m7GyQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5V4AQD\/6IwQAAAQEICiLYlcPu0rCL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNyDAqAG4aCrZGd0jdl\/sFGgNIWK5ZIAQD\/6ItAAAAQEICiLYlcPu0rCL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1578508364922,"flow_last_seen":1578508364922,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.233.197.131","src_port":56637,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGjuvAqAG4I+nFg909dl+ptEcpAAAAALAC\/\/+OGAAAAgQFtAEDAwUBAQgKItiVxAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0683{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEjZhAADIGtLSi86BTwKgBuHZf3SW77RJe6nqwfYAYAOsoBgAAAQEICnVn1Q8i2JVXqB4IhOXyDkG7gf4wVue1YBFCV\/+yw6M8jA+kibTv3mtjlRHP9tP8c4lZMHx4Bnj7mMHTlL3Za4w7RRGZo8UUWGTgaOZ8JOqKt7XBLl7t5KWgTNCjGVv3RUP6yr0BVUHzhnpspLE08nXhRp8eeEgMQsae0889yLYtd+IUmq6Pe66E5ioWd5V9CkIGXfzLzJydx6Pqnbs79okijpwxi3jn33pSoE12UO5sqd1y+ayd3FqVRJPuM8YUW0R+3V2bORENbDuTDn4j9PpTkJU+JkYd9A==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jZlAADIGtYOi86BTwKgBuHZf3SW77RMu6nqxGoAQAOuvTAAAAQEICnVn1RAi2JVX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGNR3AqAG4ovOgU90ldl\/qerEtu+0TLoAQEBufmwAAAQEICiLYlcZ1Z9UP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1578508364924,"flow_last_seen":1578508364924,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.250.240.205","src_port":56638,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGtY\/AqAG40frwzd0+dl+QvttrAAAAALAC\/\/85bQAAAgQFtAEDAwUBAQgKItiVxgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1578508364925,"flow_last_seen":1578508364925,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.180.246.169","src_port":30303,"dst_port":30301,"l4_proto":"udp"}
+0601{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHG4wAAEARgdzAqAG4I7T2qXZfdl0As6VnAUq3Z7jOf6Ug2frhkOredmKGawH96dNwPwCsVwwwAuHNRLachJG6Hj8pd5+\/iUKj3xzFalkHy\/4zo7e13\/nakEgcyoOcntMlISOmld4GtANNEoWSHW0IYrUbIiG7qvHSAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBg","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1578508364925,"flow_last_seen":1578508364925,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":179,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.180.246.169","src_port":30303,"dst_port":30301,"l4_proto":"udp","ndpi": {"proto":"Mining.Amazon","category":"Mining"}}
+0399{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0P7RAACgGl+woQ5CAwKgBuHZf3TZG9x3RfGwnQoAQAOutlAAAAQEICnIsxqEi2JVm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0975{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":489,"pkt":"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","pkt_caplen":489,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUP7ZAACgGl8ooQ5CAwKgBuHZf3TZG9x94fGwnQoAYAOt\/8QAAAQEICnIsxqIi2JVmT9YL9qHOr0+NjibtWyjL3KtIFwbnBG9OdvuZeHcpAyg=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfeIAQD\/ycdgAAAQEICiLYlctyLMai","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfmIAQD\/ucVgAAAQEICiLYlcxyLMai","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEP7dAACgGl9koQ5CAwKgBuHZf3TZG9x+YfGwnQoAYAOv6ewAAAQEICnIsxqIi2JVmaQSSfAunAVdryRpVb4ezEw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEP7hAACgGl9goQ5CAwKgBuHZf3TZG9x+ofGwnQoAZAOvZsQAAAQEICnIsxqMi2JVmJTEt4KPUwxg43ASaD+jKkw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfqIAQD\/6cQwAAAQEICiLYlcxyLMai","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGv6DAqAG4KEOQgN02dl98bCdCRvcfuYAQD\/6cMQAAAQEICiLYlcxyLMaj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGv4DAqAG4KEOQgN02dl98bCdCRvcfuYAYEAAjWAAAAQEICiLYlcxyLMajT9Z19qHOr0+NjibtWyjL3MIap8B6zyRhJSkkobKTgNk=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGv5\/AqAG4KEOQgN02dl98bCdiRvcfuYAYEAC0BAAAAQEICiLYlc1yLMaj6A==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGkHGfy1QfwKgBuHZf3TprW2X93LDPrKAScSCdQwAAAgQFrAQCCApPeKo9ItiVagEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGhHnAqAG4n8tUH906dl\/csM+sa1tl\/oAQECwsmQAAAQEICiLYlc1PeKo9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1578508364932,"flow_last_seen":1578508364932,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":56639,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGvd3AqAG4Etunn90\/dl9+5\/UeAAAAALAC\/\/851wAAAgQFtAEDAwUBAQgKItiVzQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1187{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":637,"pkt":"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","pkt_caplen":637,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1578508364824,"flow_last_seen":1578508364933,"flow_tot_l4_data_len":719,"flow_min_l4_data_len":32,"flow_max_l4_data_len":603,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"159.203.84.31","src_port":56634,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+1807{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":1099,"pkt":"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","pkt_caplen":1099,"pkt_type":2048,"pkt_ipoffset":14}
+0948{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGw5PR+vDNwKgBuHZf3T7\/g0hGkL7bbKAScSAsgwAAAgQFrAQCCAoN8FcJItiVxgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtZvAqAG40frwzd0+dl+Qvtts\/4NIR4AQECy8HAAAAQEICiLYleUN8FcJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0967{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":481,"pkt":"EBMx8Tl2KDc3AG3ICABFAAHTAABAAEAGs\/zAqAG40frwzd0+dl+Qvtts\/4NIR4AYECw\/fgAAAQEICiLYleYN8FcJAZ0E+FMyZM6APP7oCGTdgWb3yFwhYBpKGGdHxVs6\/WFawsMKFTP1GE4bS9ZGKitYFI6X9SczYGK34fv33vN7bwOoHuDLSEmFepT6qKIXU0o52LpqO4\/\/S4iCaTUFZU25DlJm7rKyaYiQUNQs188t1MgWKQJll9l7A5c36CcJV13HcpT4uHcO11tQbpUDfAmYHf8g91oohYLCK840wTh1pzwjGdFtPtKPIlkFk1I1KlhfXLsnea7v1Q\/ShXbNxFHOeNcmQxZQK\/djTCT5xFTl26m5hPRLr7bo6oEShkma0QAzk7dx4oLmxs6xdhraZ8\/KLIrywgGOsqHtYNCAN1bYwBrh3O3VymK8Mc6Id82RS+1OENrFg+MVBhmQrqzd8EKkdPY62PYyc6nFRZKHWeOUieBs0SzBcjgQMxcKSxChYDCR9Zj7HIJe0hUt2Ra0u2gRnlW5LF\/F99KO80qZeqJg+U5xv2dN3bWuOXucPVSSrR7+GQvchgofcyhiHymQaVedRTSwqM+Y31quk7elIGo9u8xUlOwxOWWPvJhRHhOVBQ==","pkt_caplen":481,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGxNei5B2gwKgBuHZf3TsLfbp+uLewXqAScSA1yAAAAgQFrAQCCArR1xFdItiVcAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGt9\/AqAG4ouQdoN07dl+4t7BeC326f4AQECzE7QAAAQEICiLYlgPR1xFd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0963{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":479,"pkt":"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","pkt_caplen":479,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508364,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ZbFAADIGXerR+vDNwKgBuHZf3T7\/g0hHkL7dC4AQAOvJnAAAAQEICg3wVyoi2JXm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1074{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":560,"pkt":"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","pkt_caplen":560,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtZvAqAG40frwzd0+dl+Qvt0L\/4NKNYAQEBy4VQAAAQEICiLYlg0N8Fcr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtXvAqAG40frwzd0+dl+Qvt0L\/4NKNYAYEByfHAAAAQEICiLYlg4N8FcrLRGfxe2Hjnojnpc7+sqNn3C\/NGvladR4NP4YCS9nsXY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGtZrAqAG40frwzd0+dl+Qvt0r\/4NKNYAYEBxtKwAAAQEICiLYlg4N8FcrSw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGtR\/AqAG40frwzd0+dl+Qvt0s\/4NKNYAYEBxG9gAAAQEICiLYlg4N8FcrTAjwvKMqkbWbtCB5g7APV43PUsuingdXDzmJtL\/zuMEPxLYG1ew1jkjko8VhrrAuyqNeiRnksmh1n9ddSkYOjkmXYt4k8nXCDXJ3AEeEwHU6tqI0nvdY4dwnw+M25nbAocZxAyFV2mfwMJxWO3YYfMp+RPTY5kDS1V3E+g==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGtZjAqAG40frwzd0+dl+Qvt2o\/4NKNYAYEBxNaQAAAQEICiLYlg4N8FcrYkMI","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGtYvAqAG40frwzd0+dl+Qvt2r\/4NKNYAYEByO1AAAAQEICiLYlg4N8FcrgJ1Z8OuhheHU0wuRtb9Gkg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUZbNAADIGXcjR+vDNwKgBuHZf3T7\/g0o1kL7dC4AYAOvPAgAAAQEICg3wVywi2JXmLRFtxe2Hjnojnpc7+sqNn0LcZ2KK83heFrDu1jYjtSk=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1ZbRAADIGXebR+vDNwKgBuHZf3T7\/g0pVkL7dC4AYAOt8gwAAAQEICg3wVywi2JXmSw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":209,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDZbVAADIGXVfR+vDNwKgBuHZf3T7\/g0pWkL7dC4AYAOuzbQAAAQEICg3wVywi2JXmTP7wrNsfl7LZp2U\/0+tbVYiKHZDgyAVRCzmStL\/z7soPy7AaiuUpkknmtMGUWgJk0qIPOeKsp21RKVsyrygr6e0OFXNWV1tgc7wqheEoDzw96rg6Gfi1l+Tzh\/60VM7cAsdNVG3e3F\/3XBf8TFMb00VS3kTql9\/mwqDqvl8he\/8Z7t4\/Wqqx2cvO4Ek\/5K0=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0aAlAACsGSwc056VswKgBuHZf3SosjcznxQv59oAQAfqTrAAAAQEICmA\/IAEi2JVI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1018{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":519,"pkt":"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","pkt_caplen":519,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUaAtAACsGSuU056VswKgBuHZf3Sosjc6sxQv59oAYAfojjQAAAQEICmA\/IAMi2JVIkvm68c7g4B32X9gUFR69q92Ew+e4gTYu8fFO4JOla3M=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1aAxAACsGSwM056VswKgBuHZf3Sosjc7MxQv59oAYAfoAvAAAAQEICmA\/IAMi2JVIkQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3OrIAQD\/uDGwAAAQEICiLYlhJgPyAC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3OzIAQD\/qC+wAAAQEICiLYlhJgPyAD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3OzYAQD\/qC+gAAAQEICiLYlhJgPyAD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2aA1AACsGSwE056VswKgBuHZf3Sosjc7NxQv59oAYAfqOZgAAAQEICmA\/IAMi2JVIA1Q=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBaA5AACsGSvU056VswKgBuHZf3Sosjc7PxQv59oAYAfrb6gAAAQEICmA\/IAMi2JVIqyCs2wsztRRJ6NSVfw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3Oz4AQD\/6C9AAAAQEICiLYlhJgPyAD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnhDAqAG4NOelbN0qdl\/FC\/n2LI3O3IAQD\/6C5wAAAQEICiLYlhJgPyAD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0xtZAAC0GYdy\/6qLGwKgBuHZf3SxpEHBCX7ewwYAQAfqLMgAAAQEICjQYmu0i2JVJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1025{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":525,"pkt":"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","pkt_caplen":525,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUxthAAC0GYbq\/6qLGwKgBuHZf3SxpEHINX7ewwYAYAfqKGwAAAQEICjQYmu8i2JVJri8Oec5Jc\/9KO15o1AzccOXslfCvLBdS6VhC26Tkk5k=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1xtlAAC0GYdi\/6qLGwKgBuHZf3SxpEHItX7ewwYAYAfpYPAAAAQEICjQYmu8i2JVJMQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByDYAQD\/t6nAAAAQEICiLYlhI0GJru","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByLYAQD\/p6fAAAAQEICiLYlhI0GJrv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByLoAQD\/p6ewAAAQEICiLYlhI0GJrv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2xtpAAC0GYda\/6qLGwKgBuHZf3SxpEHIuX7ewwYAYAfoQHwAAAQEICjQYmu8i2JVJeRs=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBxttAAC0GYcq\/6qLGwKgBuHZf3SxpEHIwX7ewwYAYAfoeswAAAQEICjQYmu8i2JVJfTDJzPSuNlS9oWrX0A==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByMIAQD\/56dQAAAQEICiLYlhI0GJrv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFbPAqAG4v+qixt0sdl9ft7DBaRByPYAQD\/56aAAAAQEICiLYlhI0GJrv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1578508365009,"flow_last_seen":1578508365009,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"144.91.120.135","src_port":56641,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGb3XAqAG4kFt4h91Bdl90OGLhAAAAALAC\/\/+IEgAAAgQFtAEDAwUBAQgKItiWFAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1578508365021,"flow_last_seen":1578508365021,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.10.218","src_port":56642,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGuz\/AqAG4sj4K2t1Cdl8xVnl5AAAAALAC\/\/8AHAAAAgQFtAEDAwUBAQgKItiWHgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1578508365029,"flow_last_seen":1578508365029,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.29.183","src_port":56643,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGqGLAqAG4sj4dt91Ddl+W2yuDAAAAALAC\/\/\/VpgAAAgQFtAEDAwUBAQgKItiWJgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1578508365038,"flow_last_seen":1578508365038,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.230.108.42","src_port":56644,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG\/kfAqAG4DeZsKt1Edl+KMGOvAAAAALAC\/\/8AAwAAAgQFtAEDAwUBAQgKItiWLQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGe3mQW3iHwKgBuHZf3UEpl2emdDhi4qAScSAVuAAAAgQFrAQCCArbhaVwItiWFAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGb4HAqAG4kFt4h91Bdl90OGLiKZdnp4AQECylVgAAAQEICiLYli7bhaVw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":606,"pkt":"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","pkt_caplen":606,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1578508365009,"flow_last_seen":1578508365040,"flow_tot_l4_data_len":688,"flow_min_l4_data_len":32,"flow_max_l4_data_len":572,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"144.91.120.135","src_port":56641,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0z6lAADQGwM+fy1QfwKgBuHZf3TprW2X+3LDR54AQAOw5ggAAAQEICk94qlgi2JXO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1092{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":579,"pkt":"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","pkt_caplen":579,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGhHnAqAG4n8tUH906dl\/csNHna1tn\/4AQEBsn8AAAAQEICiLYljBPeKpY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGhFnAqAG4n8tUH906dl\/csNHna1tn\/4AYEBt\/CAAAAQEICiLYljFPeKpYJ+o7vqCq2VJlu7F2z8Fq0rOYoeyopxrANCFHTjd9rXg=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGhHjAqAG4n8tUH906dl\/csNIHa1tn\/4AYEBuGxQAAAQEICiLYljFPeKpYoQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGg\/3AqAG4n8tUH906dl\/csNIIa1tn\/4AYEBvHpwAAAQEICiLYljFPeKpYZNU0dcweWe6v9T2LiLdLC4alwOyoX1XReF4DC9f\/c5fsgLmfXG7TuZhmxp8jLAK6yRfKyrmZaLxy0VEyK3rVfsxB3fwoQKl\/R9T0EFazfxL+KNomk2\/3SY8tDhd4nC0uJU8v4HWRMIF3y6SIxHoqJW2J82sd6ri3TF096w==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGhHbAqAG4n8tUH906dl\/csNKEa1tn\/4AYEBtyGwAAAQEICiLYljFPeKpYPSt4","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGhGnAqAG4n8tUH906dl\/csNKHa1tn\/4AYEBsoMAAAAQEICiLYljFPeKpYMhgdBulowcOr+Cj2xLNrGQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUz6tAADQGwK2fy1QfwKgBuHZf3TprW2f\/3LDR54AYAOylrgAAAQEICk94qlgi2JXOJ+pFvqCq2VJlu7F2z8Fq0p0vzt4GVNN645NbvcgqCuU=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGhHnAqAG4n8tUH906dl\/csNKXa1toH4AQEBonIAAAAQEICiLYljFPeKpY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1z6xAADQGwMufy1QfwKgBuHZf3TprW2gf3LDR54AYAOwXWAAAAQEICk94qlgi2JXOIA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1578508365045,"flow_last_seen":1578508365045,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"185.219.133.62","src_port":56645,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGOT7AqAG4uduFPt1Fdl+PNscoAAAAALAC\/\/\/ScwAAAgQFtAEDAwUBAQgKItiWMgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACMG2uES26efwKgBuHZf3T9fy8\/Lfuf1H6ASaN8cNgAAAgQFrAQCCAoSyYNbItiVzQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/UfX8vPzIAQECyjNQAAAQEICiLYlkUSyYNb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1110{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":587,"pkt":"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","pkt_caplen":587,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1578508364932,"flow_last_seen":1578508365065,"flow_tot_l4_data_len":669,"flow_min_l4_data_len":32,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":56639,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0411{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGx0OyPgrawKgBuHZf3UIGbP5HMVZ5eqAScSDZAAAAAgQFrAQCCAoLgra+ItiWHgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGu0vAqAG4sj4K2t1Cdl8xVnl6Bmz+SIAQECxokQAAAQEICiLYlkYLgra+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHKIQAAEAR+iHAqAG4QipS9nZfdl8As8h52l5Lj\/FNPSwNskN7KXHg69sINFX5NaCleeEwgXwmONn61xupKUye1QOfHD1DMyDw8Rv4bxSGME4AJ9XC7q+0Pwz+NqNAUtNYGL1TDF+F5wROIhyoide5OcgIFnuRD6baAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBh","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0967{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":481,"pkt":"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","pkt_caplen":481,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0nAdAADQG33mQW3iHwKgBuHZf3UEpl2endDhk\/oAQAOuyXAAAAQEICtuFpY4i2JYv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGb4HAqAG4kFt4h91Bdl90OGT+KZdo64AQECGhxQAAAQEICiLYlkrbhaWQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGb2HAqAG4kFt4h91Bdl90OGT+KZdo64AYECHfLgAAAQEICiLYlkrbhaWQOD2HVbLrdC\/cTcdqNF\/\/MzPw7q9nqUi3JbC7sZprtaY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGb4DAqAG4kFt4h91Bdl90OGUeKZdo64AYECEEnAAAAQEICiLYlkrbhaWQnQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGbwXAqAG4kFt4h91Bdl90OGUfKZdo64AYECGlWAAAAQEICiLYlkrbhaWQKQa7RKADCp5Yww7OYuE9Miggmh8ySoRi+lUrW3LdjBvCIfExIFFU5MRWp\/qMcjmUORtP27nIvalZnsRogyuMTqpRo3c2lh790FNu+C2YmtmB+SqlsubcMwL2Ac6m8CfzaJg1\/DAz6AAgvE2B7+EgtQPeZdXQpBbqCFH1Jw==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGb37AqAG4kFt4h91Bdl90OGWbKZdo64AYECGlRgAAAQEICiLYlkrbhaWQxtY1","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGb3HAqAG4kFt4h91Bdl90OGWeKZdo64AYECEX3QAAAQEICiLYlkrbhaWQCZ0\/M0WSZNzAgZ1sJM8TNA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGtGayPh23wKgBuHZf3UMO43zOltsrhKAScSBk2gAAAgQFrAQCCArDycEqItiWJgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2yuEDuN8z4AQECz0awAAAQEICiLYlk3DycEq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1036{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":535,"pkt":"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","pkt_caplen":535,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1578508365029,"flow_last_seen":1578508365075,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":501,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.29.183","src_port":56643,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0WHZAACYGuyASimxDwKgBuHZf3S4uwDPuE20Ov4AQAfk32AAAAQEICqa6xFgi2JVq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":384,"pkt":"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","pkt_caplen":384,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUWHhAACYGuv4SimxDwKgBuHZf3S4uwDUsE20Ov4AYAflSXwAAAQEICqa6xFki2JVqj3Qyu+5+uy1+28jwkZ3YRlGt3y1Sf7962SCA0mk3wIQ=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1LIAQECIniwAAAQEICiLYlk+musRZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1TIAQECEnbAAAAQEICiLYlk+musRZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1WHlAACYGuxwSimxDwKgBuHZf3S4uwDVME20Ov4AYAfmTbwAAAQEICqa6xFki2JVqow==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1TYAQECEnawAAAQEICiLYlk+musRZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2WHpAACYGuxoSimxDwKgBuHZf3S4uwDVNE20Ov4AYAfnh\/QAAAQEICqa6xFki2JVqVHA=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBWHtAACYGuw4SimxDwKgBuHZf3S4uwDVPE20Ov4AYAfms9gAAAQEICqa6xFki2JVqdj9nUXn\/sAhEHAq1Mw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1T4AQECAnagAAAQEICiLYlk+musRZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+ZbAqAG4EopsQ90udl8TbQ6\/LsA1XIAQECAnXAAAAQEICiLYllCmusRZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1578508365079,"flow_last_seen":1578508365079,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"172.105.94.62","src_port":56646,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGbbDAqAG4rGlePt1Gdl8dOmrnAAAAALAC\/\/\/VAwAAAgQFtAEDAwUBAQgKItiWUQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0SuZAAOcGItcSilEcwKgBuHZf3S\/8FjKGFTVa84AQANu3cAAAAQEICmOBiksi2JVx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEGSEK524U+wKgBuHZf3UWdKkNsjzbHKaASbCBIRwAAAgQFdAQCCAp\/mc8NItiWMgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGOUrAqAG4uduFPt1Fdl+PNscpnSpDbYAQEAzSvAAAAQEICiLYll1\/mc8N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0974{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":488,"pkt":"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","pkt_caplen":488,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0LIAQEB6lmQAAAQEICiLYll5jgYpM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUSuhAAOcGIrUSilEcwKgBuHZf3S\/8FjQsFTVa84AYANvqGwAAAQEICmOBik0i2JVxCwE11PmlHdYYJwUZ7wQVcG+zA+gfe1cyoc3bs4RpZUo=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0TIAQEB2leAAAAQEICiLYll9jgYpN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1SulAAOcGItMSilEcwKgBuHZf3S\/8FjRMFTVa84AYANssnwAAAQEICmOBik0i2JVxiQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2SupAAOcGItESilEcwKgBuHZf3S\/8FjRNFTVa84AYANsCNAAAAQEICmOBik0i2JVxs2k=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0TYAQEB2ldwAAAQEICiLYll9jgYpN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFL7AqAG4EopRHN0vdl8VNVrz\/BY0T4AQEB2ldQAAAQEICiLYll9jgYpN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBSutAAOcGIsUSilEcwKgBuHZf3S\/8FjRPFTVa84AYANsf4AAAAQEICmOBik0i2JVxF4jwu0sCYR894Thpaw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABESuxAAOcGIsESilEcwKgBuHZf3S\/8FjRcFTVa84AYANt5wwAAAQEICmOBik0i2JVxicyOakUFu81kNVzra1b2Ow==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0960{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":476,"pkt":"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","pkt_caplen":476,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1578508365094,"flow_last_seen":1578508365094,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"182.162.161.61","src_port":56647,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGIHjAqAG4tqKhPd1Hdl8HffxGAAAAALAC\/\/8MGQAAAgQFtAEDAwUBAQgKItiWYAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEnAlAADQG3qeQW3iHwKgBuHZf3UEpl2jrdDhk\/oAYAOudKAAAAQEICtuFpasi2JZKOD1kVbLrdC\/cTcdqNF\/\/M4myJbuDPiTQR6RUYgwP1uedKee7VKs2H4QewUbNHrtseikxjhBxWZkorgltADGDmRfEe6AzdQcAqJEB6uNyh4vIfEFBKBXV8fdGKEgFbUP2ckfVnYD32cFPqYFvzB1Hv2pBmCo0\/bM73fFG\/xOMNjWlbZdEdNl8R0hfgpQcGWH1T1goLnjUzh8o835V9CrzJubJpsi36J+WHIjPS2e38krYjJGf8DvXs\/hb9yvVQc3X3BKPL6jhGHuYwGCshh9jcA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGb4HAqAG4kFt4h91Bdl90OGWuKZdpu4AQEBugGAAAAQEICiLYlmLbhaWr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGb2HAqAG4kFt4h91Bdl90OGWuKZdpu4AYEBvf2gAAAQEICiLYlmLbhaWrKLJdwgWgzHiunNDUMQjL\/MKl3U2Vlj17wXkYaRtrgr4=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAADMGeqysaV4+wKgBuHZf3UajVVX7HTpq6KAS\/ojIGAAAAgQFrAQCCAobAQsKItiWUQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGbbzAqAG4rGlePt1Gdl8dOmroo1VV\/IAQECzlIgAAAQEICiLYlmgbAQsK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1043{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":540,"pkt":"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","pkt_caplen":540,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1578508365079,"flow_last_seen":1578508365105,"flow_tot_l4_data_len":622,"flow_min_l4_data_len":32,"flow_max_l4_data_len":506,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"172.105.94.62","src_port":56646,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0MqxAADQGlJ+yPgrawKgBuHZf3UIGbP5IMVZ7GYAQAOt2BQAAAQEICguCtusi2JZH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0852{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGu0vAqAG4sj4K2t1Cdl8xVnsZBmz\/lYAQECFlWQAAAQEICiLYlm0Lgrbu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGuyvAqAG4sj4K2t1Cdl8xVnsZBmz\/lYAYECEHDgAAAQEICiLYlm0Lgrbua\/lnmthymb17L9ARL2zYQhI6q+DTSDG\/ZiFitzQvBUQ=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGu0rAqAG4sj4K2t1Cdl8xVns5Bmz\/lYAYECHzLwAAAQEICiLYlm0Lgrbucg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGus\/AqAG4sj4K2t1Cdl8xVns6Bmz\/lYAYECGbzAAAAQEICiLYlm0LgrbufEASHbbIKdsWPRGBWP2\/0bGzDmNMrG4EYXUoZ1MnOGbFQP9WcDD3yxwD4fxRQVOw7N\/bmhJFK856wP9yR7JRpY3y3EtIwjJNo3N+5p2\/gfIfV3eZBTsdcdlbgXCRrGEqmFR4W9O\/ElrSRMYrDzR6FlEMWTF4wykswvhJQw==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGu0jAqAG4sj4K2t1Cdl8xVnu2Bmz\/lYAYECF16wAAAQEICiLYlm0LgrbuQMWu","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGuzvAqAG4sj4K2t1Cdl8xVnu5Bmz\/lYAYECGljwAAAQEICiLYlm0LgrbuDY2mMyinnrsxamIg43LM8A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RKBAADcGbkwiYawWwKgBuHZf3SnE3x7wnZqG6oAQAfoJewAAAQEICjHMlHMi2JV6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0940{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":461,"pkt":"KDc3AG3IEBMx8Tl2CABFAAG\/RKFAADcGbMAiYawWwKgBuHZf3SnE3x7wnZqG6oAYAfp2oAAAAQEICjHMlHUi2JV6AYkE8aJ77cE8dSwL75t+OW101MsW2OiUsKZqYG2EA0v+3wDL9od+Pi\/iI\/1ALPH2t4zmSgvRbIEs+hZX7juryn9WBboGFB3OGwfz13+t7tQskrfG5uMgONIcdY7RN7ALzzKSANlIzqhX1Bk+HBdKQucQiRc9WD9Dv1qSUNBQ46\/ts9oODWsjtsGYgutou7V3t3Vhq4yc\/amIdohWdjF8vUU0XAH0YCJuKTlD9njqcs8P7OyB4pswgNhaC96\/CU0k3e5Y2HMJNd\/cpLGqQQ\/qvyYvOR40sS99rXuXfH9EFywfaO7kaoPJR\/q2W+Kr4dVAiXxz4hDVfsKhYcpZdO3bkSDdlxdWPRQU5MwbdVfF7SPNGb6A9Bl8BIXFpLMawRO76XLiP9BUpy4ZABu6VwIlJHMl9lxFKqJuRoQ36REWHNLg8c3V+9AZ7FKyLpNZ\/XMqtyzJpJA+kPShr0tnb\/L6gQ4soKBuOZU7DTq3U0rJMJdYO9i2rwVdcRN8Tg85oK1PCAmZ8oCKVy7Nu5I=","pkt_caplen":461,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqezAqAG4ImGsFt0pdl+dmobqxN8ge4AQEB\/40wAAAQEICiLYlm8xzJR1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGqczAqAG4ImGsFt0pdl+dmobqxN8ge4AYEB+p5gAAAQEICiLYlnAxzJR1GdYS6dME+3x4dvya5AgCwtLQbeVlC41w\/v03m8m1xCU=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGqevAqAG4ImGsFt0pdl+dmocKxN8ge4AYEB8mqQAAAQEICiLYlnAxzJR10g==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGqXDAqAG4ImGsFt0pdl+dmocLxN8ge4AYEB9IHAAAAQEICiLYlnAxzJR1LkEqVyxrnuUjShLR7kCtMlVrgivXnPcxOxyK9foiZirdOJWdQLNBZD+BC2+gRUC0Rk8aJIadyne6wCYW3ZeuBkP2MnCOInA\/pC4Q6Z7+Cqr7n8ng7E1iJWtTuVB8k1naIAw1DOMdmYmBXV85raaxcfa4ytDjy1x3B7OxgA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGqenAqAG4ImGsFt0pdl+dmoeHxN8ge4AYEB9A5wAAAQEICiLYlnAxzJR1n0MY","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGqdzAqAG4ImGsFt0pdl+dmoeKxN8ge4AYEB9dKQAAAQEICiLYlnAxzJR1G14L7wVytaivW9Fz4oNVNg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA04C1AADQG1ECyPh23wKgBuHZf3UMO43zPltstWYAQAOsBqQAAAQEICsPJwVgi2JZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":384,"pkt":"KDc3AG3IEBMx8Tl2CABFAAFy4C5AADQG0wGyPh23wKgBuHZf3UMO43zPltstWYAYAOtPKgAAAQEICsPJwVwi2JZOATwESnMuF8uiJN6mAD2e1yP0+8DS1dzxeaRvV77kHqBaJ\/xyg2RgRja+xOEOXpsMmbrBOEsea\/LvB6acta\/ypeX+E7nOgwAN0ee0yVa1PeK4rZ0DKZK0fOobL177xW7lxEBS0kn6lGa8vgC33R0rPjbF3kwF36AJ5fT3HOrXWOLccMxph+8sO\/n2M\/Wg\/kGW6c4bIPf7Eo99E\/ayzfg\/W0hiCLLIl8Cq0BeX62zKILR1DVPQHL9KJrEgdCdNSNLKmnZvMqLePSMRrqBKpdMrCw12oe9TPVjb7MIJukT6Oea9Nx4Kqkf0MAyvjpVXBY1wpN2y2daFRPaboe1C+2rZI3lIx2mV4pm0NaI6m1dlBtzpyTbMqTw9+uFkIZU3Nsm7JHPIQvX38jk\/yNc+20DUndoM37DHqbGhLXd+ePkw","pkt_caplen":384,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU4C9AADQG1B6yPh23wKgBuHZf3UMO434NltstWYAYAOsL1gAAAQEICsPJwV0i2JZO0zw7FhZpUcidiOCDauDcMNl2dF0R0RSsF6k42OBkE44=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+DYAQECLxBQAAAQEICiLYlnjDycFc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+LYAQECHw5QAAAQEICiLYlnjDycFd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA14DBAADQG1DyyPh23wKgBuHZf3UMO434tltstWYAYAOt2PAAAAQEICsPJwV0i2JZOig==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+LoAQECHw5AAAAQEICiLYlnjDycFd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":191,"pkt":"KDc3AG3IEBMx8Tl2CABFAACx4DFAADQG07+yPh23wKgBuHZf3UMO434ultstWYAYAOtvtQAAAQEICsPJwV0i2JZOhI4pdWDbNWif+9x0UYKE1kTM+FVqWHNcSuAYd4bTAAd\/sRmlEE6f1CWlKVB+ab3TmaNtDvpAeJlV9fVY4n5Ykw1FFR0nLopNk4AmLeov9PfRHTYpmzef9J+NwDakID1bUKHJy9qmn88\/CTOu8sS0ZGA5eVumNfuTIPVk2H8=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA24DJAADQG1DmyPh23wKgBuHZf3UMO436rltstWYAYAOsxbgAAAQEICsPJwV0i2JZOzk8=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+q4AQEB3wawAAAQEICiLYlnjDycFd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGqG7AqAG4sj4dt91Ddl+W2y1ZDuN+rYAQEB3waQAAAQEICiLYlnjDycFd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA0BINAADMGdjGsaV4+wKgBuHZf3UajVVX8HTpswoAQAfrxXgAAAQEIChsBCyUi2JZp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jFFAADEGu\/i524U+wKgBuHZf3UWdKkNtjzbIw4AQAOHgGQAAAQEICn+Zzz8i2JZf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0qEJAADMGHJ2i5B2gwKgBuHZf3TsLfbp\/uLex+4AQAOvR8gAAAQEICtHXEfsi2JYE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0921{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":448,"pkt":"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","pkt_caplen":448,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGOUrAqAG4uduFPt1Fdl+PNsjDnSpE64AQEADPTgAAAQEICiLYlol\/mc9D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGOSrAqAG4uduFPt1Fdl+PNsjDnSpE64AYEABiYQAAAQEICiLYlol\/mc9DutDqtonG\/D06DU\/JQCj2uklhqVzK1UXnuk7EZC1I0Qg=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGOUnAqAG4uduFPt1Fdl+PNsjjnSpE64AYEADYJAAAAQEICiLYlol\/mc9D9w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUjFNAADEGu9a524U+wKgBuHZf3UWdKkTrjzbIw4AYAOGXMQAAAQEICn+Zz0Qi2JZfutAKtonG\/D06DU\/JQCj2ulB\/5IEdt9pNNKlrtCrOQsY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGOM7AqAG4uduFPt1Fdl+PNsjknSpE64AYEAAVCwAAAQEICiLYlol\/mc9Do70TAQ\/ySrA+uSvOI\/6g18xgVL4IH1xoj7Fr1dAkh\/ENHxMCna+WxIe3d01DYbLV1QFeDOT6mwpgqh8imbbx\/B3Yhn7CaWP808wbpsEt7Q08Vq926x6u2cS05L0MOLlkvF8sbR9COBt7SD2axN8PsijUZm3Hgfl0mouBlA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":42,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGOUrAqAG4uduFPt1Fdl+PNslgnSpFC4AQD\/\/OkQAAAQEICiLYlol\/mc9E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":42,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGOUfAqAG4uduFPt1Fdl+PNslgnSpFC4AYD\/8IZgAAAQEICiLYlop\/mc9EaB9e","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":42,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGOTrAqAG4uduFPt1Fdl+PNsljnSpFC4AYEACYtQAAAQEICiLYlop\/mc9EHK4OVDd5Ne81sYHJq9I6Bw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":42,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1jFRAADEGu\/S524U+wKgBuHZf3UWdKkULjzbIw4AYAOHnbAAAAQEICn+Zz0Qi2JZf9w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA08iVAADAGhgalFmshwKgBuHZf3SJnRYz5cyqj8oAQAOwACAAAAQEICjWBVmsi2JWO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEMq5AADQGk82yPgrawKgBuHZf3UIGbP+VMVZ7GYAYAOtKIgAAAQEICguCtxci2JZta\/mEmthymb17L9ARL2zYQj\/cHIUraTxhMIqDuNNw1DByfKESDb39PMFQP1mCJKfumbCiGmwPv3NONSluPRB5LWrDGq5UJWr1g0sDqeWvtOHsqYXXbr5YZ5BldnMfqdormWB24ryJje3\/2qF\/0q1nrUHfNncISm76nyrrf627vhnSWCVfFh9tH3+VZIagFZV\/f1EVvh2drc+zY35oaG8hCFwkUPOroXbi1DfxN2VkCCMGadVQ91HxcSik8t76qpfM0vC8bT21hxEa3TQDcuF85A==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGu0vAqAG4sj4K2t1Cdl8xVnvJBm0AZYAQEBtjlgAAAQEICiLYlo0LgrcX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0947{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":471,"pkt":"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","pkt_caplen":471,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGt9\/AqAG4ouQdoN07dl+4t7H7C328FIAQEB\/AmAAAAQEICiLYlo3R1xID","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGuyvAqAG4sj4K2t1Cdl8xVnvJBm0AZYAYEBvRYAAAAQEICiLYlo0LgrcXmaJau\/Q4et\/Ud5H2Rrr7stmA5sNlyHTeeLPaoArRjKo=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0935{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":462,"pkt":"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","pkt_caplen":462,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqPyZ0WOhYAQEB\/uRwAAAQEICiLYlo01gVZt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGt7\/AqAG4ouQdoN07dl+4t7H7C328FIAYEB\/mUgAAAQEICiLYlo7R1xID6YscrRyaIoVB7ORY4lCsOTv+ub9tGMhE78mY2\/09LvY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGt97AqAG4ouQdoN07dl+4t7IbC328FIAYEB\/ObQAAAQEICiLYlo7R1xID8g==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGt2PAqAG4ouQdoN07dl+4t7IcC328FIAYEB8EAQAAAQEICiLYlo7R1xIDsSkYgb0hcx8ljWJoukWa7tc7\/6o\/qt1J+G+AYNk2dsy18ela8\/rJ6lf5XhA3BB4J2pIVKs4Hd6x4e2ncS2Yk2OeDgYMXLjZKRm2hbOYgJz9NrjDbW3fUpqZsz2ppz0nZCqbo77pBFmBXAuL0agTj4HI\/hJdewiCljRNklA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGt9zAqAG4ouQdoN07dl+4t7KYC328FIAYEB\/OgAAAAQEICiLYlo7R1xID+W34","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGt8\/AqAG4ouQdoN07dl+4t7KbC328FIAYEB+HZAAAAQEICiLYlo7R1xID0K2\/H4jYP\/mE0m5AeTZzkg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU8idAADAGheSlFmshwKgBuHZf3SJnRY6Fcyqj8oAYAOzqqQAAAQEICjWBVm4i2JWOLWtPblpT9FNp8\/GM3T16C0Lh00p+oKv0Vhnhc2kjs+o=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA18ihAADAGhgKlFmshwKgBuHZf3SJnRY6lcyqj8oAYAOy9TwAAAQEICjWBVm4i2JWOQQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqPyZ0WOpYAQEB7uJgAAAQEICiLYlo41gVZu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGaCzAqAG4pRZrId0idl9zKqPyZ0WOpoAQEB7uJQAAAQEICiLYlo41gVZu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGaAzAqAG4pRZrId0idl9zKqPyZ0WOpoAYEB77EwAAAQEICiLYlo41gVZuLWsxblpT9FNp8\/GM3T16CyOTcpMVXfT4MU41dZGK+dQ=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGaCvAqAG4pRZrId0idl9zKqQSZ0WOpoAYEB4t\/AAAAQEICiLYlo41gVZuwA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA28ilAADAGhgClFmshwKgBuHZf3SJnRY6mcyqj8oAYAOy5OQAAAQEICjWBVm4i2JWORRQ=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABB8ipAADAGhfSlFmshwKgBuHZf3SJnRY6ocyqj8oAYAOyIuQAAAQEICjWBVm4i2JWOwPQCqrCsxM1spHjJVw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUqERAADMGHHui5B2gwKgBuHZf3TsLfbwUuLex+4AYAOueOAAAAQEICtHXEgQi2JYE6YtirRyaIoVB7ORY4lCsOeH3eCuwvQEPRCr1biylf50=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1qEVAADMGHJmi5B2gwKgBuHZf3TsLfbw0uLex+4AYAOtdKgAAAQEICtHXEgUi2JYEcw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":33,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGt9\/AqAG4ouQdoN07dl+4t7KrC328NIAQEB6\/xgAAAQEICiLYlo\/R1xIE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1578508365153,"flow_last_seen":1578508365153,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.250.140","src_port":56650,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGWefAqAG4I+T6jN1Kdl95PEStAAAAALAC\/\/+LMAAAAgQFtAEDAwUBAQgKItiWjwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1578508365154,"flow_last_seen":1578508365154,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.201.12.87","src_port":56651,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG4TfAqAG4iskMV91Ldl\/HR3E5AAAAALAC\/\/+X6AAAAgQFtAEDAwUBAQgKItiWjwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1578508365169,"flow_last_seen":1578508365169,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"176.9.136.209","src_port":56652,"dst_port":30303,"l4_proto":"tcp"}
+0417{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGP33AqAG4sAmI0d1Mdl8ouUvbAAAAALAC\/\/+6CgAAAgQFtAEDAwUBAQgKItiWngAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA09h9AACMG5MkS26efwKgBuHZf3T9fy8\/Mfuf3KIAQANuwWwAAAQEIChLJg3wi2JZG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIG7zuKyQxXwKgBuHZf3Uu6UG6Lx0dxOqAScSDP1QAAAgQFrAQCCAq1b4mgItiWjwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3E6ulBujIAQECxfbwAAAQEICiLYlq61b4mg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1077{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vRtoAQEByexwAAAQEICiLYlq8SyYN8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0968{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":483,"pkt":"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","pkt_caplen":483,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU9iFAACMG5KcS26efwKgBuHZf3T9fy9G2fuf3KIAYANsDZAAAAQEIChLJg3wi2JZG4qGVIF\/rNS4b0ha3yk0E2UhJE+8SAnGMPc5yyiee5Fs=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA19iJAACMG5MUS26efwKgBuHZf3T9fy9HWfuf3KIAYANuDSAAAAQEIChLJg3wi2JZGKw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR1oAQEBueqAAAAQEICiLYlq8SyYN8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR14AQEBuepwAAAQEICiLYlq8SyYN8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":81,"pkt":"KDc3AG3IEBMx8Tl2CABFAABD9iNAACMG5LYS26efwKgBuHZf3T9fy9HXfuf3KIAYANsFtgAAAQEIChLJg3wi2JZGUsWADRP8l5x1RNhHiotS","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR5oAQEBuemAAAAQEICiLYlq8SyYN8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABE9iRAACMG5LQS26efwKgBuHZf3T9fy9Hmfuf3KIAYANuriAAAAQEIChLJg3wi2JZG8fBAxzjaRWd6BoyLtAOXEQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGvenAqAG4Etunn90\/dl9+5\/coX8vR9oAQEBqeiQAAAQEICiLYlq8SyYN8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1578508365189,"flow_last_seen":1578508365189,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"85.214.108.52","src_port":56654,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGtk3AqAG4VdZsNN1Odl+\/h8KiAAAAALAC\/\/8jMQAAAgQFtAEDAwUBAQgKItiWsAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1578508365189,"flow_last_seen":1578508365189,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0544{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcflcAAEARfx\/AqAG4Etunn3Zfdl8AiGnBB7Pc5ZlsDZTbUrqaaoRxeL1l7Crbcxf\/BOXFZNGdyZsOxpmBlW67u9+KWe59CkWnKw2GIsEnEKk87oxTf3me3BvKcrMQD0jXMXlBXiHkLViPnwRaOVxyx4odh7D\/BO97AAHdBMuEfwAAAYJ2X4J2X8mEEtunn4J2X4CEXhYgYQU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1578508365189,"flow_last_seen":1578508365189,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0399{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0UNhAACEGQrU0u88bwKgBuHZf3S3Pd7n21PprjoAQAfmqiwAAAQEICm8lvuMi2JWb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1578508365194,"flow_last_seen":1578508365194,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":56655,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGkX3AqAG4ynAcat1Pdl84sWAlAAAAALAC\/\/\/nsAAAAgQFtAEDAwUBAQgKItiWswAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1012{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":517,"pkt":"KDc3AG3IEBMx8Tl2CABFAAH3UNlAACEGQPE0u88bwKgBuHZf3S3Pd7n21PprjoAYAfkNlQAAAQEICm8lvuQi2JWbAcEEfexCFt2jnTqWIQ4crQ8vIbdE1KnH8YHvTHdpE2WBn7WNjuJtME\/5vnUJYGr7Co2bbwwMFxhtwsytreX0hhXyzz4vHIJFNkShaTT69RQDTl8JRvcPBZIgYN0p4T9tQtR5KgrWxun53a8fpwaDpsVIRnZQamAF5FksKmPmU+VDHaAj46s7l\/R5UQLWsjIHELWVkUgWJPFcjF3u\/de1aUrt18amXqYuviEKJrRcI4W46S8iCbN40sw4USJH8pQnZj6nCivGF420eAl4bLGwXm6OC3x9HWg+adWTmjqRLwSmzOYgceT9nM2HE67tBp92+PIBvsqUepzgEHG3NzNqVT\/Pafhaaq+0cmnUve9S0dM4EbJaQeLfm9aii2YC1tqgtp4O4kJgoNgt+uHhwqqhICVTp7KiM3mzaycQCwfuRM+YVv+zy6rjZizKBuKWJuxoVA3kGYlrH4fhE2DXXIIIDUJNv3yUKH1G+YauLqqTQ+T9sYkmCT4ejriP40uTp4WcbyE5dKED9fbNOTmq5R7sjFiWkLpWsCbqSU3p7Tdjecyb\/U0XkIAb\/RGTov\/OHhEUynnOjnwjI08W8Va5i2+TGe7WgA==","pkt_caplen":517,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e7uYAQD\/uZrAAAAQEICiLYlrRvJb7k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUUNpAACEGQpM0u88bwKgBuHZf3S3Pd7u51PprjoAYAflAygAAAQEICm8lvuQi2JWbgX6Fl4FfV+V7Fw+vyS2B+j7eKfVJU6OhRdHQYOJjYy0=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e72YAQD\/+ZiAAAAQEICiLYlrRvJb7k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1UNtAACEGQrE0u88bwKgBuHZf3S3Pd7vZ1PprjoAYAfkJnQAAAQEICm8lvuUi2JWbnw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e72oAQD\/6ZhgAAAQEICiLYlrVvJb7l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":68,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA2UNxAACEGQq80u88bwKgBuHZf3S3Pd7va1PprjoAYAfmtGAAAAQEICm8lvuUi2JWb+4I=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdI3AqAG4NLvPG90tdl\/U+muOz3e73IAQD\/6ZhAAAAQEICiLYlrVvJb7l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBUN1AACEGQqM0u88bwKgBuHZf3S3Pd7vc1PprjoAYAfnvqgAAAQEICm8lvuUi2JWbXcW461yQNl22AdpCfw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEUN5AACEGQp80u88bwKgBuHZf3S3Pd7vp1PprjoAYAfkm7gAAAQEICm8lvuUi2JWbM+SmXeZsnaLqEmcbtsobRg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGTYGwCYjRwKgBuHZf3UxCOLg9KLlL3KAScSB8NwAAAgQFrAQCCAqsVDbiItiWngEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouUvcQji4PoAQECwL1AAAAQEICiLYlrqsVDbi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":597,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJHAABAAEAGPXbAqAG4sAmI0d1Mdl8ouUvcQji4PoAYECzTgAAAAQEICiLYlrusVDbiAhEE8PJpnPbySdRqYDVxMP+F\/sUREqF\/ZPapL0ZkwOKMkrT9n4zoxh41j\/glS+PHo\/5d9kUdB0t8XsUegDI2rTK1qd731I+OxYB5atRAvsAHKjhEJvXyxBlcONwpQSP\/EbY3bHhBzCKl6skIsbvrHid\/G+pdbkvCg99m5ksWTyjKeOLBOEzpnsCQQJ46PAi5Gt+cDzFuB51Q88zUU35bDXVA0lLvIw+\/X9Ad5weyrfi170rwq+ovDDRTwLnXqPpcqTfzPWDebsd\/6JjsLeqiFe0w+TGqkb7XnmvyJRXCCSwZwNWBqW2wMglzYEG7ltbYW98qdjPkjWQR+9tsbEjKGZaGADeDpJTqev97xI1vdrueDinIGP0oRJzLadvSTqC2Ltp\/C5Yi2IWcYPY8sywmbCd7WiiseixOfbruQnBYJcuCqP9v9CzDCs5AIhr5M0ZuPRMu5dbjOvMkXJ3NW6ba6vBl30SnnPSKHWyXB5KIK4IjuThpFVBpTLHLgCfrizWGDE\/hM2VI817zJI53Z4uO\/Bb+w7RrXYUFd2cFzRSZ49MZ\/vQhuKbfvsBPQ88Ow0AARIwIVnac6G2XL8ek6PHG7zFReTp7DodXUTvDgJg7wZNQ8sPEdVrTFE2Fs9IZezbTOy5TaeVX30ypx3wwNi5iz9g3SdiXLC8HImUZXOcXLmnt\/fLL7x6cPdF8T6a4GSRCrRxx","pkt_caplen":597,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":47,"flow_packet_id":4,"flow_first_seen":1578508365169,"flow_last_seen":1578508365203,"flow_tot_l4_data_len":679,"flow_min_l4_data_len":32,"flow_max_l4_data_len":563,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"176.9.136.209","src_port":56652,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0412{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADYGY+sj5PqMwKgBuHZf3UovaHbWeTxErqASbgBmbgAAAgQFjAQCCAqaQodaItiWjwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PESuL2h214AQECjytwAAAQEICiLYlsKaQoda","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1024{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1578508365153,"flow_last_seen":1578508365212,"flow_tot_l4_data_len":610,"flow_min_l4_data_len":32,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.250.140","src_port":56650,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0400{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0oJ9AADIGTqSKyQxXwKgBuHZf3Uu6UG6Mx0dy24AQAOts7QAAAQEICrVvicEi2Jav","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGbbzAqAG4rGlePt1Gdl8dOmzCo1VXSIAQECHhLQAAAQEICiLYlswbAQuA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGbZzAqAG4rGlePt1Gdl8dOmzCo1VXSIAYECGKOQAAAQEICiLYlswbAQuAoajHoDvlsI1RFYeIr1BU6Plv3IFrsNXbbYl+z3dfqQI=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGbbvAqAG4rGlePt1Gdl8dOmzio1VXSIAYECH7AwAAAQEICiLYlswbAQuA5g==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGbUDAqAG4rGlePt1Gdl8dOmzjo1VXSIAYECHwTAAAAQEICiLYls0bAQuA\/8zDJEpQT4Yl1eabVWhT5CDBH0yI5YUXfJ5IInROa2PfNnXkX7XZpeeddS8cfNH2dGApEfAw4aj1UCj4Num0GHGO\/FO60HnDPe48xLIA3jcsvdIQxVrdsBmBymc29XLWEq5KC1bvZabznoUEdw9TEeUI60T5uHLmP9DjKQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGbbnAqAG4rGlePt1Gdl8dOm1fo1VXSIAYECEaKQAAAQEICiLYls0bAQuAPluI","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGbazAqAG4rGlePt1Gdl8dOm1io1VXSIAYECEtQwAAAQEICiLYls0bAQuAitllegMnso5\/74FyHFLvcw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGxFFV1mw0wKgBuHZf3U5vpmVtv4fCo6ASOJBjegAAAgQFrAQCCApls11ZItiWsAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtlnAqAG4VdZsNN1Odl+\/h8Kjb6ZlboAQECy6hQAAAQEICiLYls1ls11Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0845{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":393,"pkt":"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","pkt_caplen":393,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBv04AQECFcTQAAAQEICiLYls61b4nF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUoKFAADIGToKKyQxXwKgBuHZf3Uu6UG\/Tx0dy24AYAOt4rwAAAQEICrVvicYi2JavTozlzwjlxFiIlSmpCZLTvNOq2ncb4Kd+YgX4UUpES4U=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBv84AQECBcLQAAAQEICiLYls61b4nG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEoKJAADIGTpGKyQxXwKgBuHZf3Uu6UG\/zx0dy24AYAOtOhQAAAQEICrVvicYi2Jav34WLD11CYvjsJ2AfuHjtUw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBwA4AQECBcHAAAAQEICiLYls+1b4nG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEoKNAADIGTpCKyQxXwKgBuHZf3Uu6UHADx0dy24AZAOuM\/AAAAQEICrVvicYi2Jav1jRaKtLwi0beQ4e4XxuKrQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4UPAqAG4iskMV91Ldl\/HR3LbulBwFIAQEB9cDAAAAQEICiLYls+1b4nG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":574,"pkt":"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","pkt_caplen":574,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1578508365189,"flow_last_seen":1578508365225,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":540,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"85.214.108.52","src_port":56654,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0446{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG4SPAqAG4iskMV91Ldl\/HR3LbulBwFIAYEB++egAAAQEICiLYls+1b4nGToybzwjlxFiIlSmpCZLTvKJaCcU4dDONFHdW6naBXD4=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG4ULAqAG4iskMV91Ldl\/HR3L7ulBwFIAYEB\/94gAAAQEICiLYls+1b4nGXg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1578508365226,"flow_last_seen":1578508365226,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.75.171.190","src_port":56657,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGQk7AqAG4ikurvt1Rdl8erUWUAAAAALAC\/\/\/M9wAAAgQFtAEDAwUBAQgKItiW0AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA03PBAADIGcJiwCYjRwKgBuHZf3UxCOLg+KLlN74AQAOsY3wAAAQEICqxUNwQi2Ja7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0981{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":494,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHg3PFAADIGbuuwCYjRwKgBuHZf3UxCOLg+KLlN74AYAOs6tgAAAQEICqxUNwYi2Ja7AaoEYUpDMueFQ29SYV04DhjKVkzrfBOIzAJy2k96xLiVPC91+TyvsLpnxRqP8LXVlOLtHcmce\/jW3zRyIMDcExOzW1G2EF8ZpU+eyftEVvJ3eZjqKjGzkGUuajzUBL3\/xzWdxJLxfPxvuu2Qzb4Nl7h7vY0jBocCuiToAim3My5afbpu+OQYLydrbK\/DJ+JWD+ptIR2XIVU8N3npHewuEofawLiLlgyh0wRr3GIvVNEZHCTIi+ycYzcVvVoHPmP9JCx46zE4KvgZkf0v3vH0ytdwn99dEwUQYNaSIuy4+ms9Tp5hGABdt1R5XienBqbiJ\/bl\/V4uySwjeBXhgxLSTJEtBgu2oqy08jjR2eUs0ugH3oxhrfgbnaIucZbZIZW\/zPPw9VcYF0qylTErTDAp5bm3mC+AQnFiWU1tU51wpYzyWvSXQta1y4PZCxQPtAjEgtcyw8Igm7lcHF9sxT11hsqO1tzEd0YNVsuGB5J19DtscEfH3u33nG4ORZiAG7Xspcj0kMeh51oC+\/aMvJ8NoXr9CrIKZJZyGrTDkyzH8II2x0SXsTYp34jnG2o=","pkt_caplen":494,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji56oAQEB4H3wAAAQEICiLYltqsVDcG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU3PJAADIGcHawCYjRwKgBuHZf3UxCOLnqKLlN74AYAOurkwAAAQEICqxUNwci2Ja7mZA6PBcbAj6Wf5Qavau+noYG9SnO8cqKdKw4xjOU4bU=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji6CoAQEB0HvwAAAQEICiLYltqsVDcH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABE3PNAADIGcIWwCYjRwKgBuHZf3UxCOLoKKLlN74AYAOtFfgAAAQEICqxUNwci2Ja7Q0CEWSZWDlv7BVOPH9dmwg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":47,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABE3PRAADIGcISwCYjRwKgBuHZf3UxCOLoaKLlN74AZAOt\/igAAAQEICqxUNwci2Ja7UOmrdfZce3XxQC9FzYU7Hw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":47,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji6GoAQEB0HrwAAAQEICiLYltqsVDcH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":47,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGP4nAqAG4sAmI0d1Mdl8ouU3vQji6K4AQEBwHnwAAAQEICiLYltqsVDcH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":47,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGP2nAqAG4sAmI0d1Mdl8ouU3vQji6K4AYEBy6BwAAAQEICiLYltqsVDcHmZBEPBcbAj6Wf5Qavau+nh\/irgtiI6tR9CHl5eZxE4g=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":47,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGP4jAqAG4sAmI0d1Mdl8ouU4PQji6K4AYEBxFdQAAAQEICiLYltqsVDcHwg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1578508365239,"flow_last_seen":1578508365239,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"157.230.152.87","src_port":56658,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGQhrAqAG4neaYV91Sdl9OT1qyAAAAALAC\/\/+H9wAAAgQFtAEDAwUBAQgKItiW2wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":306,"pkt":"KDc3AG3IEBMx8Tl2CABFCAEkBIVAADMGdT+saV4+wKgBuHZf3UajVVdIHTpswoAYAfpi5AAAAQEIChsBC5gi2JbMoagBoDvlsI1RFYeIr1BU6AhB7X1Y1lBBp5PbNNbeSifm\/w7DNEZlWpxj166YKTICrCHQC0PL9phdL8IOezcQfm\/ZbCTmbZSjxZn5FTaF9xndT19Y+wtto5+D5L3U3YbVKclAy78hwqF3Qytv75\/e7Jo435Rnjg50musiH2pjhj+y\/ss3gyVuYjR5ZuiXNY3H5QQ5bGoRdiQL+wtfsqaFYCs+1a+ovcEGn7h9a9tj0PuRvmEjUDb3s9Y2xZ6t1Si\/goTN5bhl9U42SL04OFrAx0H0P+CQ6U1JkiSgS9gLpp5OaYfPvoExw53yu8uswsDM","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGbbzAqAG4rGlePt1Gdl8dOm1yo1VYOIAQEBrfZwAAAQEICiLYluEbAQuY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":43,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGbZzAqAG4rGlePt1Gdl8dOm1yo1VYOIAYEBp\/FAAAAQEICiLYluEbAQuYc2JO4UTNfKteJHQtTeQwGgGIzeBOK47e7yctP2OtX5c=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0OBRAADIGjEVV1mw0wKgBuHZf3U5vpmVuv4fEn4AQAHrIFQAAAQEICmWzXX0i2JbP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":401,"pkt":"KDc3AG3IEBMx8Tl2CABFAAGDOBVAADIGivVV1mw0wKgBuHZf3U5vpmVuv4fEn4AYAHrktAAAAQEICmWzXX4i2JbPAU0E0wMf6mL+8RIgiEgLPJDTXttEuw3glZ6dcbq24R3h9bf+QVjHjjLu1slj\/UkQ+tSzfp6rSZEtZcKgcQNBZpK3\/dJuQFXXThdI1bq7Nw6rSm53mYM0qa36EUo8Zy07pmUA+kKVvldY29F7cJ0gnah4L73wWchgBJjrSTvgZfbx86\/sI8q4dLisBMix3n60QaCU\/T2WrZNK4QmYEAEDIqE7niGQGP3ZWhJcZsw8u4NyuUFfFmrTFM6yx+Yook0rb2oxiSzu6JkaVltrKPNmdqFLbd1nPoLtMD\/0\/JFDJ9Jz3NHAOqOU5Bypv9LzEFHOP4vP5Vniw6Kfjrk3hqU2ic8QG\/fJRkRSElAwE1UFVIxQijo7oMhdIp8goOFGJMYjwJvAUX1LlMn42zgZV\/Vb4i5LnLEeoKGkCexGFIkeA1+JxKRo1IZgaK\/fOWsV9d4=","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtlnAqAG4VdZsNN1Odl+\/h8Sfb6ZmvYAQECG3AAAAAQEICiLYlu1ls11+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtjnAqAG4VdZsNN1Odl+\/h8Sfb6ZmvYAYECErfAAAAQEICiLYlu5ls11+jiU6N\/UkjGHiI4KK6khM\/ZfQIvM\/A5dFSoabSW5swDo=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGtljAqAG4VdZsNN1Odl+\/h8S\/b6ZmvYAYECGA1gAAAQEICiLYlu5ls11+Ng==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGtd3AqAG4VdZsNN1Odl+\/h8TAb6ZmvYAYECHhVQAAAQEICiLYlu5ls11+lNBuOEk8QiGyZNwM+cNY7H3WoxsizUW1lIOts92BRYajNjBan3Jgo0zWqcf2+yxJAtZ6qj3pjPB9NAeo5uha7yggC5yxX37RBfOVhGIsoLbtBpnAqUQnJA2uo47EAI6es5BqQieFQ8\/NVEaE+ZJzidsPub0pVIn+v8MK2g==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGtlbAqAG4VdZsNN1Odl+\/h8U8b6ZmvYAYECHczQAAAQEICiLYlu5ls11+rIkt","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGtknAqAG4VdZsNN1Odl+\/h8U\/b6ZmvYAYECFfnwAAAQEICiLYlu5ls11+5WLcelp8o89Qb5BJHc+X9g==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0LhxAADYGNdcj5PqMwKgBuHZf3UovaHbXeTxGfIAQAOX\/8gAAAQEICppCh5Mi2JbD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1000{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":508,"pkt":"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","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h4kYAQEBruzgAAAQEICiLYlvaaQoeV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABULh5AADYGNbUj5PqMwKgBuHZf3UovaHiReTxGfIAYAOVKXgAAAQEICppCh5Yi2JbD0ZeBpKtiUhfhIx7WeV7\/+33NKl4dBNY+RnmT+w6aZSc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h4sYAQEBnurgAAAQEICiLYlvaaQoeW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":209,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDLh9AADYGNUUj5PqMwKgBuHZf3UovaHixeTxGfIAYAOXd9wAAAQEICppCh5Yi2JbDvgVhoUyzSLH4EGC8sqcFWwsc3Y+vzxjNT6Zqhr1ymJHWDlReHGhGazz50A\/aAhtGGLxqnQx4+e9EeTcvDpyt5DgWJkKlvAZnsq4sqtjxFJ6DaLD5E\/BcyR55u0VtAW3yRgi+5Tx\/md0bc\/4EJQz4H9hTD3omLFBdOilFcsqyjc9zTO0pl5Eh2o8WiLTwbqs=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1LiBAADYGNdIj5PqMwKgBuHZf3UovaHlAeTxGfIAYAOUefQAAAQEICppCh5Yi2JbD3w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h5QIAQEBTuJAAAAQEICiLYlvaaQoeW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGWfPAqAG4I+T6jN1Kdl95PEZ8L2h5QYAQEBTuIwAAAQEICiLYlvaaQoeW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGWdPAqAG4I+T6jN1Kdl95PEZ8L2h5QYAYEBQdZQAAAQEICiLYlvaaQoeW0ZdzpKtiUhfhIx7WeV7\/+5iewNRxWOu\/lShzWkhuDQ8=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":45,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGWfLAqAG4I+T6jN1Kdl95PEacL2h5QYAYEBQv+gAAAQEICiLYlvaaQoeWvg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1578508365271,"flow_last_seen":1578508365271,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.161.23.12","src_port":56660,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGLavAqAG4M6EXDN1Udl9XVw7PAAAAALAC\/\/+2RQAAAgQFtAEDAwUBAQgKItiW9wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1578508365279,"flow_last_seen":1578508365279,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.9.128.68","src_port":56661,"dst_port":30303,"l4_proto":"tcp"}
+0421{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxArAqAG4NAmARN1Vdl\/t7etbAAAAALAC\/\/\/ZeQAAAgQFtAEDAwUBAQgKItiW\/gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":306,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEkOBZAADIGi1NV1mw0wKgBuHZf3U5vpma9v4fEn4AYAHr1awAAAQEICmWzXZ8i2JbtjiX8N\/UkjGHiI4KK6khM\/chT1LHox1qUiskn1P9E0bM2lBJuKEUJVzv0ZpQPhZkJpHzHtxRh3lj\/xt\/j98DYRYmrZSlFmiljtU\/TqsEKD5YcQo50QMa0zscLgJKEDYc73pDuPHAqTaZlezbGr0\/zkhv5ZN+34hCODv8NdoORc8P6X\/UXylQERF1HrCsXuxDnfTo+PpPBmt8Texgoh7A+pDFftuOC\/NzbVkocAYoV9KGW+uUqxpSFE2s45Hh4KNsP\/yh6yWO1kGOXa7wuiVy1tbbCN2g6wrbb2opFPDrladJZEav7kjTTx48sbgd7cyXH","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtlnAqAG4VdZsNN1Odl+\/h8VPb6ZnrYAQEBq1KAAAAQEICiLYlwtls12f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtjnAqAG4VdZsNN1Odl+\/h8VPb6ZnrYAYEBqvswAAAQEICiLYlwtls12fk05E\/eNp2gBn2Wn2YezoSgCwsTFTQBL0WeUZCIZvQhw=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1578508365295,"flow_last_seen":1578508365295,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.229.232.19","src_port":56662,"dst_port":30303,"l4_proto":"tcp"}
+0420{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGbF\/AqAG4I+XoE91Wdl\/o6wkCAAAAALAC\/\/9pGwAAAgQFtAEDAwUBAQgKItiXDAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1578508365300,"flow_last_seen":1578508365300,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"124.217.235.180","src_port":56663,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGD8rAqAG4fNnrtN1Xdl9L2gYiAAAAALAC\/\/+scgAAAgQFtAEDAwUBAQgKItiXEAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":192,"pkt":"KDc3AG3IEBMx8Tl2CABFAACymwlAACMRP1cS26efwKgBuHZfdl8AnsFrVj4puAH6ZgARKbHJmno0oUTDSx6ME3WyQvgYFdLFf82IMxF0n+9n2kTCv9WKp0W5OWAeoQIHesUQlOhBZUox8XuUKjSw2r\/cLxIh6clEUwjRudwx4mptlXU2a3WMaDxBAALzy4RPFs69gun3gnZfoAez3OWZbA2U21K6mmqEcXi9Zewq23MX\/wTlxWTRncmbhF4WIGEK","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":170,"pkt":"KDc3AG3IEBMx8Tl2CABFAACcmwpAACMRP2wS26efwKgBuHZfdl8AiLphceZOwZGufNXFAvXWI774ooc6PkwC6kxvzCm0BhiTs\/TWig3gE4P3+Y0lY\/Fll4rTUKnacLSuqKdSUAk7eTbz218E2dS8j3sLMJigll9ziTSt7jKgE6R7GxELpoJhO+ReAQHdBMuEEtunn4J2X4J2X8mETxbOvYLp94CEXhYgYQo=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAmgAAEAR+vjAqAG4Etunn3Zfdl8Anj7AyKLY5AHDHkr8d6KSA+T3Tls\/POEygEa\/IYu00zDsS\/rUOw6lzLJwrJGeGp5ZbDZpK7GjW2rkr31SRKZcwxqVK3x67DtjZyUlj3CybqwG4tIXJkxmTgyRuyMntMeOtUM\/AQLzy4QS26efgnZfgnZfoHHmTsGRrnzVxQL11iO++KKHOj5MAupMb8wptAYYk7P0hF4WIGEF","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEERKJAADcGbXoiYawWwKgBuHZf3SnE3yB7nZqG6oAYAfoxBgAAAQEICjHMlYIi2JZvGdby6dME+3x4dvya5AgCwvqTN38qxsoQG0cVajFonOjSLqEqRyBei\/9lSFrSkhr8elR6liSUj+p7b0DEsed7ZiXVa4yCEb9HejeECGlcsfrhCxUTzn3AiEDMdLM6NvjPN\/s4BZwVMKiL2utDwrMkOAfN\/Y+CugH0SGzKoHXaxPA78qQbAxrbjdN4m9Zc\/t1hGf5Wm3pbjqQuWhEervR7QU9RvZQzqMoxtdq9s6Iwi7TVA7hVHJ3h4940Itigx7bj+mWQrtUAYEE1SvseyocxXg==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RKNAADcGbkkiYawWwKgBuHZf3SnE3yFLnZqHC4AQAfoE+gAAAQEICjHMlYIi2JZw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0RKRAADcGbkgiYawWwKgBuHZf3SnE3yFLnZqHmoAQAfkEawAAAQEICjHMlYMi2JZw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1578508365408,"flow_last_seen":1578508365408,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"183.129.242.164","dst_ip":"192.168.1.184","src_port":1024,"dst_port":30303,"l4_proto":"udp"}
+0547{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":171,"pkt":"KDc3AG3IEBMx8Tl2CABFAACdhY9AAC4RWjq3gfKkwKgBuAQAdl8AiS5Y3VkKujBE9K5giYMoNotbt65xxd7ko3VSXKgTCSaupxKnp71rmT0XRsX6xoF5macEurqmdfib0\/9m0ybRIVy\/Qzz+\/\/zwyKtEHKyC9Xjjwvc8TLpzNetXjDWFS0pbC\/Z0AQHeBcuErBRsfYJ2X4J2X8uETxbOvYLp94J2X4ReFiBh","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1578508365408,"flow_last_seen":1578508365408,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"183.129.242.164","dst_ip":"192.168.1.184","src_port":1024,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0573{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACy8oAAAEARGzTAqAG4t4HypHZfBAAAnqbvG70JBv5PXjvCBbR1Rp7tYoTQJi2jMUD7JOn6eWv9REwRmFSXtYoHsvszWP\/amLZkv0asbrMZoJOaxU2yggG3KzVpk0IKmRZiX\/KGqSOqaOPD2NnZ\/WIPpNjQN9gDidCOAQLzy4S3gfKkggQAgnZfoN1ZCrowRPSuYImDKDaLW7euccXe5KN1UlyoEwkmrqcShF4WIGEF","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACc4fIAAEARK9jAqAG4t4HypHZfBAAAiACVOpGBWjTeJor2OHTFdIkJfHanNwusT7Z+X6ZhMccUpEYH1blVudB+7Lhiy59WZ4RAivu0dgr\/6z5c18c2wNa0j2NMO4UV7uXk8QqS8l0iv7COflKJEb7GBR6jLr1IE7ZSAQHdBMuEfwAAAYJ2X4J2X8mEt4HypIIEAICEXhYgYQU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEGPK8zoRcMwKgBuHZf3VQuhVQAV1cO0KAScSARYwAAAgQFrAQCCAo+6INOItiW9wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLbfAqAG4M6EXDN1Udl9XVw7QLoVUAYAQECygnAAAAQEICiLYl3Y+6INO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1173{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":639,"pkt":"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","pkt_caplen":639,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":53,"flow_packet_id":4,"flow_first_seen":1578508365271,"flow_last_seen":1578508365413,"flow_tot_l4_data_len":721,"flow_min_l4_data_len":32,"flow_max_l4_data_len":605,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.161.23.12","src_port":56660,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0412{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGUh6d5phXwKgBuHZf3VIVkuQhTk9as6AScSDAlwAAAgQFrAQCCAq827CpItiW2wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1qzFZLkIoAQECxPsAAAAQEICiLYl3u827Cp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1195{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":649,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJ7AABAAEAGP9\/AqAG4neaYV91Sdl9OT1qzFZLkIoAYECzcTgAAAQEICiLYl32827CpAkUEkClDEehLobmQbbq0Gz88T6EtnrPK5m21ZMthOtQadc9Bu2BpGWCvf9sJsO1HNQSMiG\/gRXiUvC1qsMYknKuo5riP0O5pCPUXOV9\/dCGVmpEoJbX9Cu4SU8oOVVcq0BW5mBcSCXRzqVkJ6OuFKGVTETzXDICOVY5\/x4IlVl067mKLB\/y5BdW+kH6ZLpWMCALAcMn2\/N\/iuz7T4n58+LdBAiZGJcKZIWLhE0kGcJEWBFrygfok1RQVFkWtbGZu7Yv7S3BhIHHDNoh2JCQyRKUOY3W1VSS+94ol1wQvZHK2D\/7cg3DZHBIELc1hEYWnGs7+v+aH3JWQbtMvGudM\/\/TxcEs5sbHPj2iuPwUs+GWr\/ABYrJbqnLktLNlolZ93lHC2AiZh7UnQSEZTQ2C0klPi0thw4o3CnU9xvXxsrflgbGFAzwNXG03KE25YHxzaVDpGfCzy9Gr6gwSGkF3c3kmPryW7WuvlPz9g4Qw01EnLeHPggGUoZYmc0gvvD3Dsvfo9uusSrfCPX9JGhzriLcXtplCdwocezH9CR3bPV\/XtsjxN+Nr7eBjpfw3OsMQ4OAwbZ2HbAGUJo15wGuvtlDl6V61+4R5Cg4votIpuRyRgpVUBGlee0R7tb2JnAr4Yd2w1u5wUF+hroymJMt828hU4NcUZIN8xqd5NItltnYBHoXPBTsYssjGvvdmkIN35e9KfJyCJj5cohl4gdMFpEjXdRXq5jWfjrb4KRRnkt1m8IiceoNy6GFXL7gqcU9Jy\/F0tjlZ37g==","pkt_caplen":649,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":52,"flow_packet_id":4,"flow_first_seen":1578508365239,"flow_last_seen":1578508365420,"flow_tot_l4_data_len":731,"flow_min_l4_data_len":32,"flow_max_l4_data_len":615,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"157.230.152.87","src_port":56658,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0413{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAACwG2AY0CYBEwKgBuHZf3VXR7JfX7e3rXKASaN9TlwAAAgQFrAQCCAqDIEEYItiW\/gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7etc0eyX2IAQECzabQAAAQEICiLYl5+DIEEY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1051{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":538,"pkt":"EBMx8Tl2KDc3AG3ICABFAAIMAABAAEAGwj7AqAG4NAmARN1Vdl\/t7etc0eyX2IAYECw2bAAAAQEICiLYl6CDIEEYAdYE5LsQSZlDUqqTHDd28VIop408G8yHQ+g12SBtC4bobvsWyQ4YWXiRfGVfScHSSUnTjTpf\/+23Sz0kCTGUpeeZFIqw3JnBHdptJpv6R2QSdjwWF97DyrJFySS8bo0Z5f6iv8act5Gj4QOtF9wl7L4XXQ\/F1DNsc\/lWP2vigp16BUuZMGglwG663lAad9u0dkQ9FK2\/7\/8AOVyotPmi+JeFwCWQ8jE2NRIY\/iLlnhd84GwGpOWfGlXg2sRox3c92a0drS3o5YJyHfODCJKd193nihFVDq18n74tRhyKX6zzotiy\/kwSO6m\/\/Y8jtY8L+ZeEz+ApaHZAgbWiteJxWtEen3Z6RV1DI8tKhdynvtOMMOzz49Rx25gKK9DSlgEi54tvDDIa4VG2z8P5l1nvHLjyaLGh0LL6goab8xtTadEJUjCnY3t\/fZrnnudTuWibKhNHBZrOh1FASkf\/u4aIsAaa\/fTHS++2nsizi3dopiJ8G9PkpE7aMhPDUyHILPc8tYAJAyXN39XQYwYzL+ry\/\/lAbapCn30R24vKqkiwseOuDMtEC9yiUtZN\/ju0Qt6\/PDHFGgfGtibb9zS0CSW6nDPiDOBnf9bT0whSnVZlZ+MLutLVJqm5jA==","pkt_caplen":538,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1578508365279,"flow_last_seen":1578508365460,"flow_tot_l4_data_len":620,"flow_min_l4_data_len":32,"flow_max_l4_data_len":504,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.9.128.68","src_port":56661,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining.Amazon","category":"Mining"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1578508365461,"flow_last_seen":1578508365461,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0544{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcQtMAAEARjkPAqAG4ynAcanZfdl8AiDkPCEixaJX\/9thQC0r9cGcsCeen+iETb10JXBU9BZQL28M1nK8vCE6bMd2SC2XGliMqSbi8oqYHUjyrBa753h2KySNTFNso18+nMzMVWvdibnHX4lluxe+\/vRPiYB2kYX3uAAHdBMuEfwAAAYJ2X4J2X8mEynAcaoJ2X4CEXhYgYQU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1578508365461,"flow_last_seen":1578508365461,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0413{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACsGNXy2oqE9wKgBuHZf3Ueh\/8nUB338R6ASOJDbwAAAAgQFrAQCCAo8EmDbItiWYAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGIITAqAG4tqKhPd1Hdl8HffxHof\/J1YAQECwxpAAAAQEICiLYl6U8EmDb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1110{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":588,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI+AABAAEAGHnrAqAG4tqKhPd1Hdl8HffxHof\/J1YAYECxPlAAAAQEICiLYl6Y8EmDbAggEdoa9oP2cg5WbFRFp1huJY5VX6jNWR4iP8q0\/ZL+UfNj5WPNc5X3v5yp6YKaivB+gVGyrqfEZ+GjIg4XUCsubChBVe+OydG5YXSKovd4Zvd2sMMyI2oOC03c\/\/kw7hbjJ+rbBQxdWEgnQfHb5jg0KH99eYra9BRmnscjtPZ0VPLlbqSIcGOO1IiECUgTAOnr7SvcmyLFIiAGvGrvIdBrTIX76tgcsbBfHLo9eTIxNuEIPzftpoJlQRkkJFNo8lNqUk\/8C6TDddviZkLmf4HMeMlelv0\/SasZ6LuKmyQqv+6Mt7JjKWqNyxGEEereBZV30a3IwqqLc6nUseUnNUQaHuDiCR2cYJetm4kh+05RWknax3MTWGgsKyA1\/YRLowef50NB62eOQ35t\/nBtZreItPNm4cNzObl4w+R+inyZ6li8vfc3BlOL32oXm0w2h\/yO0+x2iMoMFs5E9MhSHHxNibIum2iNU6EkUL9wtesdWPyKtSi9lBYLQsSPpaLzTCSWPERK9PKL++NBm\/U676p1bFKl4W7\/Ejrza39gV8xmvOiBamM+U+6+vGXo0NysfKdV7T+LqlOjRTzZaPkLZ\/iVcI1ZddWk4e4FedK17QLh10zktBCaEDabKeg0lqB4s1r5My9st7NMBbRXcQGzOAxWryiBkdnxlPs7Ka+FwnQf3qTCDYsXMFh2h","pkt_caplen":588,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1578508365094,"flow_last_seen":1578508365466,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":32,"flow_max_l4_data_len":554,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"182.162.161.61","src_port":56647,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0414{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC0GVVKKS6u+wKgBuHZf3VEGdfqIHq1FlaAS\/og\/VgAAAgQFrAQCCAqkAfsSItiW0AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUWVBnX6iYAQECxbjgAAAQEICiLYl7mkAfsS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1135{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":605,"pkt":"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","pkt_caplen":605,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1578508365226,"flow_last_seen":1578508365487,"flow_tot_l4_data_len":687,"flow_min_l4_data_len":32,"flow_max_l4_data_len":571,"flow_avg_l4_data_len":171,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.75.171.190","src_port":56657,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0400{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA019hAADEGZN4zoRcMwKgBuHZf3VQuhVQBV1cRDYAQAOytEQAAAQEICj7og9si2Jd3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0974{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":487,"pkt":"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","pkt_caplen":487,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":53,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLbfAqAG4M6EXDN1Udl9XVxENLoVVpoAQEB6brAAAAQEICiLYmAE+6IPf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":53,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLZfAqAG4M6EXDN1Udl9XVxENLoVVpoAYEB54kgAAAQEICiLYmAE+6IPfb+qeZi5PrK+rKZYwUNUYR9bKRfgb91aeREsKhRKHnns=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":53,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGLbbAqAG4M6EXDN1Udl9XVxEtLoVVpoAYEB4qgwAAAQEICiLYmAE+6IPfcQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":53,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGLTvAqAG4M6EXDN1Udl9XVxEuLoVVpoAYEB6eUgAAAQEICiLYmAE+6IPfMFrA+N42rZKvoG8QdvlI4z39qbIWDffMIk1+GnwxhjLb76yafIG8rKsKFifeQVzv5VFi0GWvoIqpwZp6rNxXVdEgz7xR59uXEBY7qaL7KxFcNosf7Qo13gxsKQ67UEaKlHU2GEi5NvH7fUH8N6ySYHj\/hvocv3nIwo7fQQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":53,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGLbTAqAG4M6EXDN1Udl9XVxGqLoVVpoAYEB4TRwAAAQEICiLYmAE+6IPf17yw","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":53,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGLafAqAG4M6EXDN1Udl9XVxGtLoVVpoAYEB4CRAAAAQEICiLYmAE+6IPft0hzLBvCTwNpwwqES4lDpQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":53,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU19pAADEGZLwzoRcMwKgBuHZf3VQuhVWmV1cRDYAYAOxkzgAAAQEICj7og+Ei2Jd3b+p0Zi5PrK+rKZYwUNUYR5dfWQ7Ch8tPqncxWPhSikE=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":53,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLbfAqAG4M6EXDN1Udl9XVxG9LoVVxoAQEB2a1QAAAQEICiLYmAc+6IPh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":53,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA119tAADEGZNozoRcMwKgBuHZf3VQuhVXGV1cRDYAYAOw6PQAAAQEICj7og+Ei2Jd3cQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1578508365567,"flow_last_seen":1578508365567,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"106.12.39.168","src_port":30303,"dst_port":30333,"l4_proto":"udp"}
+0545{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACcHIoAAEARCbPAqAG4agwnqHZfdn0AiGszdDnl2LgHwUzwnp\/NUaAjl2\/6ukAyoGtKBC9U9NcJJ2SSjY1bIBQONPG3UmfcMXvTBTN6oZMu6GXIBxr9UadDckfonN6CsHl3H7EBI7wV8mnDuf+AbUa\/i02tPDo+DL09AAHdBMuEfwAAAYJ2X4J2X8mEagwnqIJ2fYCEXhYgYQU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1578508365567,"flow_last_seen":1578508365567,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"106.12.39.168","src_port":30303,"dst_port":30333,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1578508365588,"flow_last_seen":1578508365588,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":56670,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGVs\/AqAG4p1Z6Mt1edl9ccbjwAAAAALAC\/\/8vAQAAAgQFtAEDAwUBAQgKItiYGgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1578508365592,"flow_last_seen":1578508365592,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"86.107.243.62","src_port":56671,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGLq7AqAG4VmvzPt1fdl9sf4vVAAAAALAC\/\/8j6AAAAgQFtAEDAwUBAQgKItiYHgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAADQGeGsj5egTwKgBuHZf3VbzHyaM6OsJA4ASbvDSjgAAAgQFjAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wkD8x8mjVAQIABiKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0978{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":489,"pkt":"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","pkt_caplen":489,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05IZAADAGbZ+d5phXwKgBuHZf3VIVkuQiTk9c+oAQAOxb8gAAAQEICrzbsV4i2Jd9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0936{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":457,"pkt":"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","pkt_caplen":457,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLlqYAQEB9KiwAAAQEICiLYmCi827Fg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU5IhAADAGbX2d5phXwKgBuHZf3VIVkuWpTk9c+oAYAOwIyAAAAQEICrzbsWAi2Jd9GR3+01kKOvK39tTkRDrLyVeADK8pwUapv4CqMrTOFZA=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLlyYAQEB5KbAAAAQEICiLYmCi827Fg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA15IlAADAGbZud5phXwKgBuHZf3VIVkuXJTk9c+oAYAOyYPwAAAQEICrzbsWAi2Jd9wg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLlyoAQEB5KawAAAQEICiLYmCi827Fg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":227,"pkt":"KDc3AG3IEBMx8Tl2CABFAADV5IpAADAGbPqd5phXwKgBuHZf3VIVkuXKTk9c+oAYAOwAJQAAAQEICrzbsWAi2Jd96Sm0nA21yZyxszPxHuGjY56bdCUFtT0yrdYH8kqLtrVADjUIamYWuuUHrQinaJ7tkbuLKxFiHLNxmbfF4rIzth5Ut1YwbTMUULlzX7JrrOXLI54S5xqVx4TtYlrhmT4LHiv4kt19CYgySJRjOA6r3JDCyABMc\/pc8sdM0dZ8IsCJeJUsP9T3nwZVEOKj1TaJTVBXqu7Z8rnmJl6FPmeusQw=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":80,"pkt":"KDc3AG3IEBMx8Tl2CABFAABC5ItAADAGbYyd5phXwKgBuHZf3VIVkuZrTk9c+oAYAOxF+AAAAQEICrzbsWAi2Jd9YC32BTCGxthbL7f1suE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLma4AQEBlJzwAAAQEICiLYmCi827Fg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQibAqAG4neaYV91Sdl9OT1z6FZLmeYAQEBlJwQAAAQEICiLYmCi827Fg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGH3XAqAG4BQFT4t0xdl\/cLTE7AAAAALAC\/\/\/\/rwAAAgQFtAEDAwUBAQgKItiYNwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAACcGqoHKcBxqwKgBuHZf3U9YWyaeOLFgJqAScSDw0wAAAgQFrAQCCAonH\/CcItiWswEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWAmWFsmn4AQECx\/AQAAAQEICiLYmD8nH\/Cc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1073{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":560,"pkt":"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","pkt_caplen":560,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1578508365194,"flow_last_seen":1578508365630,"flow_tot_l4_data_len":642,"flow_min_l4_data_len":32,"flow_max_l4_data_len":526,"flow_avg_l4_data_len":160,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":56655,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0414{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIGPLJWa\/M+wKgBuHZf3V\/moIrRbH+L1qAScSBDVwAAAgQFrAQCCApQzL4rItiYHgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":61,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLrrAqAG4VmvzPt1fdl9sf4vW5qCK0oAQECzS7AAAAQEICiLYmEFQzL4r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGY9OnVnoywKgBuHZf3V5M8kZiXHG48aAScSAfsAAAAgQFrAQCCArTe0haItiYGgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVtvAqAG4p1Z6Mt1edl9ccbjxTPJGY4AQECyvQQAAAQEICiLYmEHTe0ha","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1133{"flow_id":61,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":606,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJQAABAAEAGLJ7AqAG4VmvzPt1fdl9sf4vW5qCK0oAYECxOAwAAAQEICiLYmEJQzL4rAhoEiPjdbB4Kgwl\/PHapbSVH2zNIQK7AWWYtANw9khTPrqfFaiG7hw8fy3FHkDjGMA5jVqMoDIzdBBBvVUP6bqKBY9pYw1aVPYSZ\/GxjPlRteY8+bb3qTe1SpBlH1FX5ThLiQgUWD6\/tw8h0to43qJDr0yz+z\/ZnTYWXcLKdBELTN6nj3OnuhgVIBk8rtZUgsEfckIn9WEPCbB0dYrkhHKGgt5GynLdCdl+S5E6meb2h\/4I+MlrHqLmw+1qCvhhT9tJ3jVvSIhbpshZRhsYYo3XBbFfGsv9C4pgnKjKNn2y9njGxhAREtxMbZtNYWcHodt00ieY\/a5dad5r5vhOWGl9ftWz1jTN6cJchvW2cw7rj\/srwPZiBUf\/9ILjFvk6nKYrtLr8QVgBbS4ABS+ALElvcfLqP0KuU5onA3Jw8rzXQOYhLSb1mC+Wqcf6wqJwgNotJ8Y1QzSZDsbsQVQW\/KXBTufZVqupzNKNQmgzAHznb9DuIjWFdsOwb4CXDao5ZeiPeA55UuL1dvi7eRtSYguvi021EBxQ\/GKNOHCcaNxEFMr+xIpHh4lkybLQuyKaY+jMX7+XSH87RQfggdlAc1bKATomLc+N5DLFbMFgfh0NM+5k6gq0WEYX2PaZl3Otaeqfvl57dPy6TIg\/y+3guItFdnGQtcdFE+Du1WPHup9HI9HIawoOFK6hL9+nZFGuZbL9XMwrfOW4dkT79","pkt_caplen":606,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":61,"flow_packet_id":4,"flow_first_seen":1578508365592,"flow_last_seen":1578508365632,"flow_tot_l4_data_len":688,"flow_min_l4_data_len":32,"flow_max_l4_data_len":572,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"86.107.243.62","src_port":56671,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0931{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":455,"pkt":"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","pkt_caplen":455,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA0Cs5AACwGzUA0CYBEwKgBuHZf3VXR7JfY7e3tNIAQANvnMAAAAQEICoMgQc0i2Jeg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0984{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":494,"pkt":"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","pkt_caplen":494,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFCABUCtBAACwGzR40CYBEwKgBuHZf3VXR7JmE7e3tNIAYANt+iwAAAQEICoMgQc8i2JegdZYj7iqe2ipfPfAuIk20LujaADegKDpiO67O8kQSkEk=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7e000eyZhIAQEB7VjAAAAQEICiLYmFSDIEHO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7e000eyZpIAQEB3VbAAAAQEICiLYmFSDIEHP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":198,"pkt":"KDc3AG3IEBMx8Tl2CABFCAC4CtFAACwGzLk0CYBEwKgBuHZf3VXR7Jmk7e3tNIAYANtUKgAAAQEICoMgQc8i2JegBNAQi7HLfxVmCkOSXESLaAffyNOZURZwXYcP95MYcqHm70alvfBTNgdPcRdASIQitQjNYthGGfN8WtCNwiQS2q+Oqm\/S\/HqwIg3qU+wrqkBRmCSEQmQJJUVSX3f\/Ta8H\/7fVhFqXaiRZZVKoKBl9MdaOWhAc06LsOeQNI3\/X6VSPUzjq","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxBbAqAG4NAmARN1Vdl\/t7e000eyaKIAQEBnU7AAAAQEICiLYmFSDIEHP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGw\/bAqAG4NAmARN1Vdl\/t7e000eyaKIAYEBmh0wAAAQEICiLYmFWDIEHPdZba7iqe2ipfPfAuIk20LhmI9SbKadzHaob5m8O+2fc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGxBXAqAG4NAmARN1Vdl\/t7e1U0eyaKIAYEBnQwgAAAQEICiLYmFWDIEHPBA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGw5rAqAG4NAmARN1Vdl\/t7e1V0eyaKIAYEBkSAgAAAQEICiLYmFWDIEHP0OuLtst\/FWYKQ5JcRYtgEoHPxppfHzoU1021n0I88bmkHPj84kQqSBMmD0CrJs7hUpRs0QD\/4mBybvABw2em2Zu7dqt6xWWSw5yOBP1e8oA8kT+z5nfGa4OLN\/onKKUV\/RMXryc\/RFtzDYiRYrmO9dfyAjWyFkoTEFmw7g==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGxBPAqAG4NAmARN1Vdl\/t7e3R0eyaKIAYEBmthAAAAQEICiLYmFWDIEHPNL7y","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":61,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0IvdAADIGGcNWa\/M+wKgBuHZf3V\/moIrSbH+N8oAQAOvf6QAAAQEIClDMvlIi2JhC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0907{"flow_id":61,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0acBAADMG+hqnVnoywKgBuHZf3V5M8kZjXHG6doAQAOu80gAAAQEICtN7SIQi2JhC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":61,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLrrAqAG4VmvzPt1fdl9sf43y5qCMPoAQECDPJQAAAQEICiLYmGVQzL5S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0861{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":403,"pkt":"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","pkt_caplen":403,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":60,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVtvAqAG4p1Z6Mt1edl9ccbp2TPJHtIAQECGsJgAAAQEICiLYmGXTe0iG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":61,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLprAqAG4VmvzPt1fdl9sf43y5qCMPoAYECAK4QAAAQEICiLYmGZQzL5SsiVoxCVKpZuV98HXaGsGWa7dBwXJ1zi6HkSsGmTJMBs=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":61,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGLrnAqAG4VmvzPt1fdl9sf44S5qCMPoAYECCQ+wAAAQEICiLYmGZQzL5SPg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":61,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGLj7AqAG4VmvzPt1fdl9sf44T5qCMPoAYECBfxAAAAQEICiLYmGZQzL5SGrA7rrgnU5TiYIN+BIPOsNwIDgCA\/TvLIi+f3hhSyhAMsH6HRPDhbew4DQZsVfNTWu8\/boP80ulUsk5u8icbLgKC9aDXUcIs7EUhmdQCg6ooIvsoyGFMh99R3Jpd0ZaPcnTnBkuYkkh4ciMbNEi2YhuwB3ebtNESniAQvw==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":61,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGLrfAqAG4VmvzPt1fdl9sf46P5qCMPoAYECAu+wAAAQEICiLYmGZQzL5SlIEL","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":61,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGLqrAqAG4VmvzPt1fdl9sf46S5qCMPoAYECCT4wAAAQEICiLYmGZQzL5SEmnCDDqJlsUpyn9G010YVg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":60,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGVrvAqAG4p1Z6Mt1edl9ccbp2TPJHtIAYECGQUQAAAQEICiLYmGbTe0iG0GaCOk6I9uZwYf0gw9wiYDWwjG5xfSpZsCE2lTattII=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":60,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGVtrAqAG4p1Z6Mt1edl9ccbqWTPJHtIAYECEe\/AAAAQEICiLYmGbTe0iGjQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":60,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGVl\/AqAG4p1Z6Mt1edl9ccbqXTPJHtIAYECHo5QAAAQEICiLYmGbTe0iG1TnYSmlk+vJahxyeQoKm3Jm5XtWmgxQMAQxr4KdxIl\/BoUxee\/xx21p3ABXyuOsvvNV12cCi\/vJYX02jdkCHO9V5sKMFy\/yGzt2gKir\/NH\/nxjUFjTjK249UOwVkMOlGfoJ3t0SONe3d1fkjlSxocU7IjXYZD0xC+cI4BQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":60,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGVtjAqAG4p1Z6Mt1edl9ccbsTTPJHtIAYECHSaAAAAQEICiLYmGbTe0iGhhRT","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":60,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGVsvAqAG4p1Z6Mt1edl9ccbsWTPJHtIAYECGJpQAAAQEICiLYmGbTe0iGKKhRJLgTSZQJ8bTmMMy2rw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA8AABAACwGI8Z82eu0wKgBuHZf3VfxiPe9S9oGI6AScSAoCwAAAgQFrAQCCArI+HIBItiXEAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGD9bAqAG4fNnrtN1Xdl9L2gYj8Yj3voAQECy2XAAAAQEICiLYmHfI+HIB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1144{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":611,"pkt":"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","pkt_caplen":611,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1578508365300,"flow_last_seen":1578508365690,"flow_tot_l4_data_len":693,"flow_min_l4_data_len":32,"flow_max_l4_data_len":577,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"124.217.235.180","src_port":56663,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1578508365701,"flow_last_seen":1578508365701,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"139.162.255.210","src_port":56672,"dst_port":30303,"l4_proto":"tcp"}
+0421{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG7OLAqAG4i6L\/0t1gdl\/B\/P6FAAAAALAC\/\/8ZigAAAgQFtAEDAwUBAQgKItiYggAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_id":61,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":306,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEkIvlAADIGGNFWa\/M+wKgBuHZf3V\/moIw+bH+N8oAYAOsi2wAAAQEIClDMvn8i2JhlsiWpxCVKpZuV98HXaGsGWdACwNWMp23fbiYao02\/V9U+GnM7vrMSRo6kYst9eNmf+N0ZGg\/D7iaBdnPZh1sM3xwK6i+FGvnpd+k8EB+SoEEPH7YxmS\/hnrdLBMIDHE9hEu8Gy1cWHh2elZcgreTdphnoYfu5kimzVmsUGItfWJ0YjwLpSn7qhMmCTQh7Z9lTULxymUAC+XPWvQOw\/c3Cijw6mymkgjCtcKvpI0ddb0PZwgC2ot5od\/bFPuEDBXuHa0WAw5uUJkfU3haWm0QdUn6J3nxQD044wrVPMQgwNpYTanRBjtxtTs0LxAI23dVc","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":61,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLrrAqAG4VmvzPt1fdl9sf46i5qCNLoAQEBnNOwAAAQEICiLYmIlQzL5\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":61,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0IvpAADIGGcBWa\/M+wKgBuHZf3V\/moI0ubH+OE4AQAOvdGwAAAQEIClDMvn8i2Jhm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":60,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEacJAADMG+UinVnoywKgBuHZf3V5M8ke0XHG6doAYAOt8gAAAAQEICtN7SK8i2Jhl0GZhOk6I9uZwYf0gw9wiYBe3JEESZOxFY\/m1z0AQEkWN1djYWmJR7+gchVSdPtj3lJioStrlkAlGVVAtuuQvN1PH+x1cLqZzkw13SAwMTVlz+Y95LWy\/sqxH6cHOmCj9Bzj9jlTEhCM0tw+hHhonGMwnpzWUwm0tNXzkxdhOFgOOQpMCt4hQ9Ps7xeqtipIj8Ilc+12YpyvpJMhwLoo4rWR6BlGEWwLOLSEaYvf1tbnNeMkeUdqg3Ib3u4bdVcrRPygFKa2kHy9n4IwdrYPxMQ==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":60,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVtvAqAG4p1Z6Mt1edl9ccbsmTPJIhIAQEBqqXQAAAQEICiLYmIzTe0iv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":60,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGVrvAqAG4p1Z6Mt1edl9ccbsmTPJIhIAYEBof4wAAAQEICiLYmIzTe0iv5NXl\/jx2D\/KlQyWhxFLwE59FuHBoR1OI8ZxPbkmwVYg=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1578508365712,"flow_last_seen":1578508365712,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"78.47.147.155","src_port":56673,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGlo3AqAG4Ti+Tm91hdl8xKZuYAAAAALAC\/\/+26gAAAgQFtAEDAwUBAQgKItiYjAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHpIMAAEARoqnAqAG4b+UAtHZfTtYAsxSK2l5Lj\/FNPSwNskN7KXHg69sINFX5NaCleeEwgXwmONn61xupKUye1QOfHD1DMyDw8Rv4bxSGME4AJ9XC7q+0Pwz+NqNAUtNYGL1TDF+F5wROIhyoide5OcgIFnuRD6baAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBh","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1578508365741,"flow_last_seen":1578508365741,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"94.68.55.162","src_port":56674,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG4nHAqAG4XkQ3ot1idl9YCAHzAAAAALAC\/\/91dwAAAgQFtAEDAwUBAQgKItiYqQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADIG+uaLov\/SwKgBuHZf3WDeocLiwfz+hqAS\/ogDJwAAAgQFrAQCCArjm6OzItiYggEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/P6G3qHC44AQECwgIAAAAQEICiLYmKrjm6Oz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0925{"flow_id":62,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":452,"pkt":"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","pkt_caplen":452,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0upBAAC0GmsmKS6u+wKgBuHZf3VEGdfqJHq1HsIAQAflmoAAAAQEICqQB\/Bci2Je6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1027{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":525,"pkt":"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","pkt_caplen":525,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":51,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUewBnX8VIAQEB1VuAAAAQEICiLYmLCkAfwa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":51,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUupJAAC0GmqeKS6u+wKgBuHZf3VEGdfxUHq1HsIAYAfnnsAAAAQEICqQB\/Bsi2Je6nYeAytg2TEJotPxBTQevzlnCyzfg+IVkAy2rPq7s77A=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":51,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUewBnX8dIAQEBxVmAAAAQEICiLYmLCkAfwb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":51,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUupNAAC0GmqaKS6u+wKgBuHZf3VEGdfx0Hq1HsIAZAfnQQgAAAQEICqQB\/Bsi2Je6qM7AwVShsxZzhXhdsQcsNk0keaiRuBty0CREehnyt1M=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":51,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGQlrAqAG4ikurvt1Rdl8erUewBnX8lYAQEBtVeAAAAQEICiLYmLCkAfwb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":51,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGQjrAqAG4ikurvt1Rdl8erUewBnX8lYAYEBubiAAAAQEICiLYmLCkAfwbnYf+ytg2TEJotPxBTQevzp\/VhaT7INkUlHowKfB56GE=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":51,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGQlnAqAG4ikurvt1Rdl8erUfQBnX8lYAYEBssTwAAAQEICiLYmLCkAfwbKQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":51,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGQd7AqAG4ikurvt1Rdl8erUfRBnX8lYAYEBv9DQAAAQEICiLYmLCkAfwb977E\/ObWYhuqDmyfPgIPwuTmOBezAwvI5cp\/JEum7h5HFcXkmQuscOgcYwoP3pghW0t+Prm\/B8dpBXtVhybDWgUcizbPQrfaHmSDkR9NePwPwpWQOEuKKTKPp5daoVMw3wihmo6gc+IRk8r8HiVFKnnBeU3eKqpy8c\/xqg==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":51,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGQlfAqAG4ikurvt1Rdl8erUhNBnX8lYAYEBvg0AAAAQEICiLYmLCkAfwbYv8R","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1578508365751,"flow_last_seen":1578508365751,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.235.37.216","src_port":56675,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGLpXAqAG4I+sl2N1jdl9d8bObAAAAALAC\/\/8KAAAAAgQFtAEDAwUBAQgKItiYsQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC4GqJFOL5ObwKgBuHZf3WHPYyPBMSmbmaAScSA0jAAAAgQFrAQCCApPJ9\/rItiYjAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":63,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGlpnAqAG4Ti+Tm91hdl8xKZuZz2MjwoAQECzEHgAAAQEICiLYmLJPJ9\/r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_id":63,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":633,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJrAABAAEAGlGLAqAG4Ti+Tm91hdl8xKZuZz2MjwoAYECxJTAAAAQEICiLYmLNPJ9\/rAjUEaxC968g2R\/UCKOkAMZOG2GOOWkhEE4hBMPwWXGSryh5laEOY1kWT5ispkEnM\/49AUGIIZuJkqD2akSiX\/XVah9j1CHxvoQXnNWCiYfCGLvgMMQzSq2sHb3uVyYKm6ZIChx3IU71KwVaUjNwWUK5WEKS69CEDFdEB33CJ8ZVANf1A7J2459ZkzZUYmuWuESN6qwVAnAnkW57zzCZJ6tekLSrTgxSufEuRo3rLg6y2SWrXZHsMfm8NWC\/coOdUr+hoUV\/5a6o1UoK9kWAk77KyyfipxirR8r7OAjT3q2Stt\/WbpSPWcYV2qqS9Bm4nw5FL48cIcqcdiLPSIb9dEYxC38Z6TP+rtTho8YMsg5GKttdHQR2UgIeOQIgGdeiEqpNL79eaB95gl4RjhykkyaZTqPIP1c1y7eskq6OXasaM5vYH3ha952yxGXLJ8kk\/2FJx8uYrmBx1LLHCx11u5jQNtKtpl6P3LlY88u9lsBi8XGN9pRwXfdB8uUsqhG6qxr4\/YzujpZDRhIcmXTfuFAoCyZ868l0pneYeWhzm8aVdXGngXPpPjlIlA+fh1Dr\/mlSIjt3dwk7D6Hc0GdedJcfKJqZNzCWgifQSHPMms2eXsh03tI85ZIV0zZZIkF1s1LTorhEXICW6oYC9SAvhr5ELvUJ9Gp\/pI3HsEx1stHXgNgeDS+ZTDCNpCRfRNLsSY6c722ZAI0Q6tM+xt1LeuTTvyJ+2D8LSRE2JV7ipflk\/HQZyYEle","pkt_caplen":633,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":63,"flow_packet_id":4,"flow_first_seen":1578508365712,"flow_last_seen":1578508365754,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":32,"flow_max_l4_data_len":599,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"78.47.147.155","src_port":56673,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0413{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADsGM5kj6yXYwKgBuHZf3WOqScTQXfGznKAS\/ohykQAAAgQFrAQCCAo1IQWkItiYsQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":65,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLqHAqAG4I+sl2N1jdl9d8bOcqknE0YAQECyPmwAAAQEICiLYmMg1IQWk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1126{"flow_id":65,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":596,"pkt":"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","pkt_caplen":596,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":65,"flow_packet_id":4,"flow_first_seen":1578508365751,"flow_last_seen":1578508365778,"flow_tot_l4_data_len":678,"flow_min_l4_data_len":32,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":169,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.235.37.216","src_port":56675,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0600{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHjqoAAEARyLjAqAG40WGPAXZfw1AAs7BF2l5Lj\/FNPSwNskN7KXHg69sINFX5NaCleeEwgXwmONn61xupKUye1QOfHD1DMyDw8Rv4bxSGME4AJ9XC7q+0Pwz+NqNAUtNYGL1TDF+F5wROIhyoide5OcgIFnuRD6baAQP4R7hAggEUSZWpWZm0YK3HCqZiBR7sHJ3wp8USPzyX73HGoWVqts4UjRd8TfDxZuCIPe7jI\/CXMWJB7l7pTCCyfJvg8YReFiBh","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":62,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0bUpAADIGjaSLov\/SwKgBuHZf3WDeocLjwf0ACIAQAfsspAAAAQEICuObo90i2Jir","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0891{"flow_id":62,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":422,"pkt":"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","pkt_caplen":422,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":62,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHER4AQECAc9QAAAQEICiLYmM\/jm6Pf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":62,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUbUxAADIGjYKLov\/SwKgBuHZf3WDeocRHwf0ACIAYAfuoZgAAAQEICuObo98i2Jir3xXwQkNdpmNp4zgFuV1Wb9lb6g8eD4\/RKI9h1\/c6JPI=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":62,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHEZ4AQEB8c1gAAAQEICiLYmM\/jm6Pf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":62,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEbU1AADIGjZGLov\/SwKgBuHZf3WDeocRnwf0ACIAYAfslOgAAAQEICuObo98i2JirPuGcPzRl2U\/AFrNaiZQf8A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":62,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHEd4AQEB8cxgAAAQEICiLYmM\/jm6Pf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":62,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEbU5AADIGjZCLov\/SwKgBuHZf3WDeocR3wf0ACIAZAft8WQAAAQEICuObo98i2JirjKbVT1bFtf2JeZd3eFWmmw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":62,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7O7AqAG4i6L\/0t1gdl\/B\/QAI3qHEiIAQEB4ctgAAAQEICiLYmM\/jm6Pf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":62,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG7M7AqAG4i6L\/0t1gdl\/B\/QAI3qHEiIAYEB4e3gAAAQEICiLYmNDjm6Pf3xWOQkNdpmNp4zgFuV1Wb+UdpZAvY04AxwHQzzHfIx0=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":62,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG7O3AqAG4i6L\/0t1gdl\/B\/QAo3qHEiIAYEB5diwAAAQEICiLYmNDjm6Pfvw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":189,"pkt":"KDc3AG3IEBMx8Tl2CABFAACvhghAAC4RWa+3gfKkwKgBuAQAdl8Am4d5FgHfIftbEdGemWX9uJ16FA6k+WVbnPu2Id92nOmvNTMzJsYZhuKpgOg2BWLs9gpXt9MYEHTb4XRrvJpY9bxU7gk6CGcHLVmx9130TYh4XRLkOZ66VYrf8Hdp9jo5nr33AALwyYS3gfKkggQAgKA6kYFaNN4mivY4dMV0iQl8dqc3C6xPtn5fpmExxxSkRoReFiBh","pkt_caplen":189,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":63,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0MZBAAC4GdwlOL5ObwKgBuHZf3WHPYyPCMSmd0IAQAOzQ\/AAAAQEICk8n4BUi2Jiz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":65,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ZFVAADsGz0sj6yXYwKgBuHZf3WOqScTRXfG1roAQAfmboQAAAQEICjUhBb4i2JjJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0878{"flow_id":65,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":420,"pkt":"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","pkt_caplen":420,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":65,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLqHAqAG4I+sl2N1jdl9d8bWuqknGM4AQECCMAgAAAQEICiLYmN41IQW\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":65,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLoHAqAG4I+sl2N1jdl9d8bWuqknGM4AYECDycAAAAQEICiLYmN41IQW\/sSDndzO5xunIQpnmN9FX6CnA7jE22ovF0AyOLOgy80w=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":65,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGLqDAqAG4I+sl2N1jdl9d8bXOqknGM4AYECAZ2QAAAQEICiLYmN41IQW\/cg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":65,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGLiXAqAG4I+sl2N1jdl9d8bXPqknGM4AYECD3vAAAAQEICiLYmN41IQW\/dNNh4mTaufbkhPrNIM6EgZZEDQohpITx2a0zQnfdeWx715LOL1CQhfbubZ6pIYosLDI1+36fIDKvOLxJDwUSwvzstLVkVG5PvD6w8cKg32vcZecPh0xsPZmtWKPcHWEvmzH477Z911CX0IOi2ux16PT\/\/zYKvbv6e6idxw==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":65,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGLp7AqAG4I+sl2N1jdl9d8bZLqknGM4AYECCKxAAAAQEICiLYmN41IQW\/1pUq","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":65,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGLpHAqAG4I+sl2N1jdl9d8bZOqknGM4AYECA4DQAAAQEICiLYmN41IQW\/uYVQVGaWgADUQilmCSNcAA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAG8nVeRDeiwKgBuHZf3WKbomHRWAgB9KAScSDEJQAAAgQFrAQCCAppF+qfItiYqQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":64,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAH0m6Jh0oAQECxToAAAAQEICiLYmOdpF+qf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1144{"flow_id":64,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":64,"flow_packet_id":4,"flow_first_seen":1578508365741,"flow_last_seen":1578508365814,"flow_tot_l4_data_len":695,"flow_min_l4_data_len":32,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"94.68.55.162","src_port":56674,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0600{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":213,"pkt":"EBMx8Tl2KDc3AG3ICABFAADHexAAAEARgjvAqAG4Etunn3Zfdl8As7I6jzNiPJIVM3tcF4QguFz6RQGGDso0T\/4eOeRfeMWf4oyQ0IEszB80EYqWvZ5Dhv0d0QTf1b4I2pLi4d6Z91CPKy22KMZLr0TQSl9sdxLmB2kXyrRTAu4NovLwLl22EUUjAQP4R7hAGwckxV38aoEQ3R3z6i1sbxgztMaJbhd8mlK6anhGQ6H0+w6JOUS\/FIH4b+eX+gcKRXXgkrfcf69BwK1A+Siq+4ReFiBh","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":65,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEZFdAADsGznkj6yXYwKgBuHZf3WOqScYzXfG1roAYAfkJoAAAAQEICjUhBdgi2JjesSAHdzO5xunIQpnmN9FX6FS+6+b+rlWAitKZqUsN4JlydDNh8mjvrOyihrLOXJTVyZdVGQVit5m7jfF9BmqEeWNzhIvRflyWm\/7rbphV1TB5YWg8EYXCYgXZjCll5Gpz80Qig1n\/Rrb7wvvj2u967cbqB6Ft0QD6UJ40QYYPNqui6TpHdf1eozH\/E1Yn4adzsVtU5tcU+qCS92tdcfxlyUViHe73BxjKps79HdJ2C8FnJ9y7CJbKLMAda6BPUcVByhJgxZhvbPLj9qCx9aOCRA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":65,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGLqHAqAG4I+sl2N1jdl9d8bZeqknHA4AQEBqKWQAAAQEICiLYmPQ1IQXY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":65,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGLoHAqAG4I+sl2N1jdl9d8bZeqknHA4AYEBqCzwAAAQEICiLYmPQ1IQXYxmUj79op++5WJO44HUqPuDNYLWB9AuJOPqqc\/gMDtt4=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1578508365828,"flow_last_seen":1578508365828,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.251.14.199","src_port":56678,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGW5bAqAG4DfsOx91mdl9PCwRhAAAAALAC\/\/\/02wAAAgQFtAEDAwUBAQgKItiY9AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0q5tAACsGiei2oqE9wKgBuHZf3Ueh\/8nVB33+UYAQAHo91wAAAQEICjwSYk8i2Jem","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1064{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":554,"pkt":"KDc3AG3IEBMx8Tl2CABFAAIcq5xAACsGh\/+2oqE9wKgBuHZf3Ueh\/8nVB33+UYAYAHpECQAAAQEICjwSYlEi2JemAeYEOFCoDomJpGLeDJQ7AD4gQWAw\/fExrgJLefLaC9Xp4QZKgPOYtoYKSLvC2B0a614x6+NWZNtV6HiBjdMsZDbdolHQ7JzELC37ylnG635DqDVSgHSvy3lh2NfoniEZfAfH0cEIiUWbe3mPyTPe6vTdxkhO4RfsSeCl\/Iuv0aPuaOjPapzEKrdgIX97jXJ7VdfIECX4djICMGTBhet8wSyTQzA6hSIiU5n+3hFHmS4KopsAX3K3nhQBVScbt+VlKCGzYcIM94qH20W4U5\/bSAv22yO5EZSl9L2SBS1fUPL+EHCWZd5y0xwwjB6fGQ57Pqq\/QaZo5vt+RxCYfTtCT+rgwHESoJSbydmutp839nAHLxFv8U\/sulhVQGHtPDKKGWpvluVQvKv8yffG6WmH083mBF6i\/TvfA1Ai8ObQP7DDyGRPV4A9tvK927LKkSq3Fy6Q+WMHRlkmJiKtSH0ePIcOW19v9o7oR\/EBj4+UAzku5MRdXcJ3EJEnyVDe1T1h6AOYr2KqlQUrTNUgPVr9WpA7AsJCBDGWItCB0o3cOywzU6MfqSdN4cAUlYvuBuffQ4gLyo\/Wr32TQhogtgqsZ1ASnhilAwuU68iuHCPoS4jRbh1o6TuKRrtjI7CjSC75sywdKhLgC24=","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"KDc3AG3IEBMx8Tl2CABFAABEq6FAACsGidK2oqE9wKgBuHZf3Ueh\/8vtB33+UYAYAHpo2gAAAQEICjwSYlEi2JemMva8aj1M2HKpBO4wWgfcbQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGIITAqAG4tqKhPd1Hdl8Hff5Rof\/LvYAQEBwq8wAAAQEICiLYmP48EmJR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGIHjAqAG4tqKhPd1Hdl8Hff5Rof\/LvbAQEBwY8QAAAQEICiLYmP48EmJRAQEFCqH\/y+2h\/8v9","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0q6JAACsGieG2oqE9wKgBuHZf3Ueh\/8v9B33+UYARAHo7rAAAAQEICjwSYlEi2Jem","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGIHjAqAG4tqKhPd1Hdl8Hff5Rof\/LvbAQEBwY8AAAAQEICiLYmP48EmJRAQEFCqH\/y+2h\/8v+","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":110,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgAABAAEAGIFjAqAG4tqKhPd1Hdl8Hff5Rof\/LvbAYEBz1KwAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+U6+4ZxV\/cs84MN1UgeAmQFT+Q\/GXov0fdci3X+zVid8=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":79,"pkt":"EBMx8Tl2KDc3AG3ICABFAABBAABAAEAGIHfAqAG4tqKhPd1Hdl8Hff5xof\/LvbAYEBygxQAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+eA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":202,"pkt":"EBMx8Tl2KDc3AG3ICABFAAC8AABAAEAGH\/zAqAG4tqKhPd1Hdl8Hff5yof\/LvbAYEByf\/QAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+htnM9YjeCBpeUlMdaGr6u0okHbghKJ5iKuG51mCVFuMQDYcMIeM2B3nAaB6iRiZuIcnO\/vYn3SJ3jO3zGU0sB0k4gNoAfMCVJUpE5SiBRxJHYfHz6RHc8ehuJQ7gaqA+Vx+Z9SWjcFEMdNLt\/KKwarHUTmi9+rCEAZt8oA==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":81,"pkt":"EBMx8Tl2KDc3AG3ICABFAABDAABAAEAGIHXAqAG4tqKhPd1Hdl8Hff7uof\/LvbAYEBxHrgAAAQEICiLYmP88EmJRAQEFCqH\/y+2h\/8v+G5i1","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1578508365846,"flow_last_seen":1578508365846,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.158.52","src_port":56679,"dst_port":30303,"l4_proto":"tcp"}
+0420{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGtj\/AqAG4I+SeNN1ndl9FuX9aAAAAALAC\/\/\/dzAAAAgQFtAEDAwUBAQgKItiZBAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1578508365852,"flow_last_seen":1578508365852,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.59.17.58","src_port":56680,"dst_port":30303,"l4_proto":"tcp"}
+0419{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG3OLAqAG4ijsROt1odl\/ttHvbAAAAALAC\/\/9f7QAAAgQFtAEDAwUBAQgKItiZCQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoEm9AADQGZggj5egTwKgBuHZf3VbzHyaN6OsKtlAQAOd\/jwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0972{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":487,"pkt":"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","pkt_caplen":487,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":55,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oPlAQH\/Je0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":55,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":86,"pkt":"KDc3AG3IEBMx8Tl2CABFAABIEnFAADQGZeYj5egTwKgBuHZf3VbzHyg+6OsKtlAYAOepuwAALM3VaULRqJHcrMW\/yU9nmB+ktKOP0l0Mqw5xT2wnyV8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":55,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oXlAQH\/9epgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":55,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApEnJAADQGZgQj5egTwKgBuHZf3VbzHyhe6OsKtlAYAOfFtAAAuAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":55,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oX1AQH\/5epgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":55,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAqEnNAADQGZgIj5egTwKgBuHZf3VbzHyhf6OsKtlAYAOeHEwAA9p8AAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":55,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oYVAQH\/5epAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":55,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA1EnRAADQGZfYj5egTwKgBuHZf3VbzHyhh6OsKtlAYAOcChwAAPNB3aYtxQoCP62kIAA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":55,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGbHfAqAG4I+XoE91Wdl\/o6wq28x8oblAQH\/5elwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1578508365885,"flow_last_seen":1578508365885,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"207.180.206.216","src_port":56681,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG2crAqAG4z7TO2N1pdl+dzwtmAAAAALAC\/\/8dEQAAAgQFtAEDAwUBAQgKItiZJwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":64,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0TipAADEGo1NeRDeiwKgBuHZf3WKbomHSWAgEF4AQAOtgdQAAAQEICmkX6uci2Jjo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1086{"flow_id":64,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":570,"pkt":"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","pkt_caplen":570,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":64,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABUTixAADEGozFeRDeiwKgBuHZf3WKbomPKWAgEF4AYAOt2VAAAAQEICmkX6uki2JjoCYr4qwJjtz2DgHReoNvrXkcDO65TEH1T2yZF3+1URp4=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":64,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6JjyoAQEBxPCQAAAQEICiLYmSppF+ro","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":64,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6Jj6oAQEBtO6AAAAQEICiLYmStpF+rp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"flow_id":64,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":209,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDTi1AADEGosFeRDeiwKgBuHZf3WKbomPqWAgEF4AYAOs4JwAAAQEICmkX6uki2JjoUP8w53HQ1BrJoFv9UgWbWnFEziwIsUm4buDvN6ZqWxelnxFxKvBr8canGnTnj8cVG0+zejuuiwgruOl8+ZeVtiyQ2qcS0MZZDPX4wDaWuvqnWqDsZxecpUr0bIjsYCK\/5Mbbc6AtCZ14+el3KtNkll1EazqDuq0HxIi+T+fQqjbtfhvYkR+etp\/Z7IUVyBI=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":64,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6JkeYAQEBZOXgAAAQEICiLYmStpF+rp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":64,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":83,"pkt":"KDc3AG3IEBMx8Tl2CABFAABFTi5AADEGoz5eRDeiwKgBuHZf3WKbomR5WAgEF4AYAOvAkAAAAQEICmkX6uki2JjoNZxYKpiJ+cASXYBUa+RWeyg=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":64,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG4n3AqAG4XkQ3ot1idl9YCAQXm6JkioAQEBZOTQAAAQEICiLYmStpF+rp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":64,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG4l3AqAG4XkQ3ot1idl9YCAQXm6JkioAYEBaqEAAAAQEICiLYmStpF+rpCYoKqwJjtz2DgHReoNvrXqGU6YKU6zEBG8ODuQT0XLA=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":64,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG4nzAqAG4XkQ3ot1idl9YCAQ3m6JkioAYEBb+IwAAAQEICiLYmStpF+rpUA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":191,"pkt":"KDc3AG3IEBMx8Tl2CABFAACxNvdAACcRcwrKcBxqwKgBuHZfdl8AnfAw9M4wDHlezlLb\/XVAde5xoPK0MYWPqo8wL1hvUi9RDAnTme70\/IGTzT1fYmed3PImx\/QlqjXSlKRDpOJrSqown1EL4xkYxe9gDpH7mkxI5SW3Td37cSNZr69+s5vwesE7AQLyy4RPFs69gun3gnZfoAhIsWiV\/\/bYUAtK\/XBnLAnnp\/ohE29dCVwVPQWUC9vDhF4WIGE=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADUGwUMj5J40wKgBuHZf3Weyx8H3Rbl\/W6AS\/ogN9wAAAgQFrAQCCAqAlezxItiZBAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":67,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtkvAqAG4I+SeNN1ndl9FuX9bssfB+IAQECwq5AAAAQEICiLYmTiAlezx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0925{"flow_id":67,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":452,"pkt":"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","pkt_caplen":452,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1578508365919,"flow_last_seen":1578508365919,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0543{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":170,"pkt":"EBMx8Tl2KDc3AG3ICABFAACc44MAAEARsuTAqAG4p1Z6MnZfdl8AiFGIcmRL\/sJ+HmBFF7n+UfEKJLvDdBgdKzSECJqxpMbuAWJCFnSyz1LOPGHXvK4XvgJfd8y9TVVaoZxiY0SgM1nuu1KcsxmveZ1Iboux45kEq0UHna5hbl98Bua+Zy2zz7pAAAHdBMuEfwAAAYJ2X4J2X8mEp1Z6MoJ2X4CEXhYgYQU=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1578508365919,"flow_last_seen":1578508365919,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":30303,"dst_port":30303,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0412{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMG5s7PtM7YwKgBuHZf3WknDwC1nc8LZ6AScSCqDAAAAgQFrAQCCApcfI6dItiZJwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":69,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2dbAqAG4z7TO2N1pdl+dzwtnJw8AtoAQECw5oAAAAQEICiLYmUxcfI6d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1087{"flow_id":69,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":568,"pkt":"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","pkt_caplen":568,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":69,"flow_packet_id":4,"flow_first_seen":1578508365885,"flow_last_seen":1578508365927,"flow_tot_l4_data_len":650,"flow_min_l4_data_len":32,"flow_max_l4_data_len":534,"flow_avg_l4_data_len":162,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"207.180.206.216","src_port":56681,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+1810{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":1099,"pkt":"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","pkt_caplen":1099,"pkt_type":2048,"pkt_ipoffset":14}
+0948{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":189,"pkt":"KDc3AG3IEBMx8Tl2CABFAACvrTpAADMRthqnVnoywKgBuHZfdl8AmyGXAff4avCCJKd8iLkYnGp5WBGcR5kwKjaGYfuGK7O5Pxha3PZrVargsE3sp+V969kCE0ZShXRyP212X0\/ogX+KLxU0BMrg9yur0MCSn4OC+hF8e78p1SovnEhcJv1j5UvsAALwyYSnVnoygnZfgKByZEv+wn4eYEUXuf5R8Qoku8N0GB0rNIQImrGkxu4BYoReFiBh","pkt_caplen":189,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":67,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0lsZAADUGKoUj5J40wKgBuHZf3Weyx8H4RbmA3YAQAfs3WAAAAQEICoCV7Ssi2Jk5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0905{"flow_id":67,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":436,"pkt":"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","pkt_caplen":436,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":67,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtkvAqAG4I+SeNN1ndl9FuYDdssfDaoAQECAniQAAAQEICiLYmXCAle0s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":67,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtivAqAG4I+SeNN1ndl9FuYDdssfDaoAYECAdewAAAQEICiLYmXGAle0s\/VfBYp9WnJ3+zFkHxCjUeSH3cFjbAkmBx2YcMGcSHUI=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":67,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGtkrAqAG4I+SeNN1ndl9FuYD9ssfDaoAYECBLXgAAAQEICiLYmXGAle0s3A==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":67,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGtc\/AqAG4I+SeNN1ndl9FuYD+ssfDaoAYECAdKQAAAQEICiLYmXGAle0s1fu8Z+b5UXdGCxs4OwzemGh524+1MXFFTu\/nxsBqMlmhWgMiNBqf3yu0FfaAjGbjYH11el+RWJ8DbT5rj1Eg7Y3\/fcOSw140poe9iiCAkgzCetHc8j8LzufOwuKTLKCp00lDIOE5WbUDK7N80vpDd\/u7E55esYyUEK5gKQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":67,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGtkjAqAG4I+SeNN1ndl9FuYF6ssfDaoAYECAbRwAAAQEICiLYmXGAle0sqJhj","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":67,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGtjvAqAG4I+SeNN1ndl9FuYF9ssfDaoAYECALhwAAAQEICiLYmXGAle0sOOV40j0F+dMG7z6rzcofUw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":69,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ojNAADMGRKPPtM7YwKgBuHZf3WknDwC2nc8NXYAQAOtGwwAAAQEIClx8jsQi2JlN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":69,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":384,"pkt":"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","pkt_caplen":384,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":69,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2dbAqAG4z7TO2N1pdl+dzw1dJw8B9IAQECI2JwAAAQEICiLYmXJcfI7G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":69,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAG2bbAqAG4z7TO2N1pdl+dzw1dJw8B9IAYECJ+7gAAAQEICiLYmXNcfI7G28hpfqlnMu83LDC0xfM0r9I5GJIVOhLQQAU7zewpuBs=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":69,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAG2dXAqAG4z7TO2N1pdl+dzw19Jw8B9IAYECLA\/AAAAQEICiLYmXNcfI7GdQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":69,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAG2VrAqAG4z7TO2N1pdl+dzw1+Jw8B9IAYECInMAAAAQEICiLYmXNcfI7Gn7c6VZwBmbGNXMHjLc3VhFx576XQ4kzQevsDG1ieczVR2Oeay2igxLqkKCgF6gsvM3G52hRkgkvj01sdxRPM7SiM22NRXNAZy2Y8f0POMonaHG5zJYIaHAgTEYnCdvl8IJ86kCBz1f9YZWZKD628peWgml\/cHLuSVfS+IQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":69,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAG2dPAqAG4z7TO2N1pdl+dzw36Jw8B9IAYECIiWgAAAQEICiLYmXNcfI7GvSNW","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":69,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508365,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAG2cbAqAG4z7TO2N1pdl+dzw39Jw8B9IAYECIWpQAAAQEICiLYmXNcfI7G+XstQLTnZ6kIFthcDlfssQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":69,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEEojVAADMGQ9HPtM7YwKgBuHZf3WknDwH0nc8NXYAYAOvksQAAAQEIClx8jusi2Jly28iJfqlnMu83LDC0xfM0r0E5TfT75slEXNEgJtxw1Uh1n1c6RZA0jKvLXongUZeEzF1o+6qT8VGaLqdNX0XHczpZi\/6FmmSm2rKhKy75HrF6fiuwMO85wHyVZ84xLnyt3JBC7I\/KTgittaNvVG4UACTsfigRc86McQ+KCKyIUyrK74yEU1iFP8wyLKgfocUfkq\/7Hvaj0xLc6aZwUbnRdEQatoYHlWB8VjwawanY1hqJT5m79uBHezOp42ATeQPGjU++4M3MyksCxtsjgS6xfw==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":69,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0ojZAADMGRKDPtM7YwKgBuHZf3WknDwLEnc8NfoAQAOtERgAAAQEIClx8juwi2Jlz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":69,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2dbAqAG4z7TO2N1pdl+dzw4NJw8CxIAQEBs0ZAAAAQEICiLYmZdcfI7r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1578508366005,"flow_last_seen":1578508366005,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.83.237.44","src_port":56684,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGV9jAqAG4M1PtLN1sdl8dp4x2AAAAALAC\/\/+ZwwAAAgQFtAEDAwUBAQgKItiZlwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":67,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEElshAADUGKbMj5J40wKgBuHZf3Weyx8NqRbmA3YAYAfu5ZwAAAQEICoCV7WYi2Jlw\/VchYp9WnJ3+zFkHxCjUeSKKubwsCzHL8F3dpFfOBNfc1Ru8d+rMRG0ACVM7R1aP0Gloz4D2ImwPGrOpgt0zMlapCRo9ZRaZwSOxFvB8eNy2LSd8kKTMGqh12atHZD5B3DUxSi8J0YaA2ELuoQ1aoKH0GJe+pHOdo+BX28euGlBhzdLprYhTDnJtBBdM7lhPLxIaWTScqzqpqavJcB8EkKzLl+\/jsfVtsUmAzsLvMxRboV5sZPMkADF2JBssusdztVyBiuAhngXx6XyXilkCRQ==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":67,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGtkvAqAG4I+SeNN1ndl9FuYGNssfEOoAQEBklogAAAQEICiLYmaSAle1m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":67,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGtivAqAG4I+SeNN1ndl9FuYGNssfEOoAYEBmgbwAAAQEICiLYmaSAle1mKsWiTIXS5Mc5RUOD6OkYbREkfBTkkeSNB0THQamLANU=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1578508366020,"flow_last_seen":1578508366020,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"88.99.93.219","src_port":56685,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGwhnAqAG4WGNd291tdl+CSdQcAAAAALAC\/\/9XrgAAAgQFtAEDAwUBAQgKItiZpAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGjuvAqAG4I+nFg909dl+ptEcpAAAAALAC\/\/+KMAAAAgQFtAEDAwUBAQgKItiZrAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_id":63,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":306,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEkMZJAAC4GdhdOL5ObwKgBuHZf3WHPYyUdMSmd0IAYAOwP5AAAAQEICk8n4Qoi2Jiz+WuEmVeTussSRtxNbHdPT1uknZCO3iddAUlEGG7lnqrwBDdgCsFPrF1yK6ImtV01Mnntqk3rvSImsW63OFSPlrCmXlcGRTibgtIkW4MDAJ\/AskVpKnUkjiuqdygkabvXTvkGzMSN1Eh8OFn9iB40+j0XyeJH1kkHBTI6eXW+6BehVc8YcucnQzoL5CQztC\/0koPs+Yk8vxJhNzXXV5aGmau3sxddLaJmY9GhZD8VIdI2h1IErpT6WMvnh8eCeOKCPxhisAX1TQiJjBTFThGrygeqLrUdvV9y1dwohRW8iWuHHiTfXIExtJCa6VnA0ZYM","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":63,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGlo3AqAG4Ti+Tm91hdl8xKZ3Qz2MjwrAQECygsAAAAQEICiLYmbZPJ+AVAQEFCs9jJR3PYyYN","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAAC4GadwzU+0swKgBuHZf3WzP3gWFHaeMd6AScSA1dQAAAgQFrAQCCAppVMVvItiZlwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":71,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGV+TAqAG4M1PtLN1sdl8dp4x3z94FhoAQECzFBwAAAQEICiLYmb1pVMVv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1169{"flow_id":71,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":627,"pkt":"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","pkt_caplen":627,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":71,"flow_packet_id":4,"flow_first_seen":1578508366005,"flow_last_seen":1578508366049,"flow_tot_l4_data_len":709,"flow_min_l4_data_len":32,"flow_max_l4_data_len":593,"flow_avg_l4_data_len":177,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.83.237.44","src_port":56684,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0412{"flow_id":68,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQG6OaKOxE6wKgBuHZf3Wh1cVfy7bR73KAScSDVxwAAAgQFrAQCCArYuYPhItiZCQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":68,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG3O7AqAG4ijsROt1odl\/ttHvcdXFX84AQECxkxwAAAQEICiLYmcLYuYPh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1009{"flow_id":68,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":513,"pkt":"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","pkt_caplen":513,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADEG0R1YY13bwKgBuHZf3W1kMpWvgknUHaAScSBLTAAAAgQFrAQCCApXTVsMItiZpAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":72,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGwiXAqAG4WGNd291tdl+CSdQdZDKVsIAQECza4gAAAQEICiLYmcZXTVsM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1188{"flow_id":72,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":646,"pkt":"EBMx8Tl2KDc3AG3ICABFAAJ4AABAAEAGv+HAqAG4WGNd291tdl+CSdQdZDKVsIAYECxi5gAAAQEICiLYmcdXTVsMAkIEkU6nNDsxTimm1+lLIM9VAtDD96FWduAKv2o7tn9pg5MVAkOlOVQb\/Xnad7N8GyCEZIAprkWLu5XsJegMQIC8fkIR9S38ycW0YYnM\/im4zvuKRhf\/c3huXgugQKX39sJV\/7Ha9xRxYzIlvSSFLsDo\/6Qn4IO++AZaabw4aKrdnQ0WMQhOnXE5cJMAPFZxbbfL8IxuO7Dz1K0i5h5bkCeK9+\/Gt3b\/VyW8c5Zhh0UkXEzpp89UPtnGpJQXAG9IqEnLXUSMD1LpV66H4a8Qc6nvfeq5vU\/xZjZAyzvEW1q5ILYGeQvc8GMntYiEgfDfED8vvMAUPdnXeTbHW1HeANMbiHXCbZhK2+gXVzpSgv74B9pnRDZnlgnutHC\/8XPbTHEZuJkR5UGgSYC46E5rszgjczIZo4pVPtCYlNkNRpKDzCOJl6sqAvlw1xq0rBJa3A1x0jnRfsq+lQgOvj3G7eSUdu7jVUEamyfkInFJZhPtc0zm5EESxm7D3cqablMR9oTI9Ezj5XKyHFmra0B9wQjEz38HdfaUDzTs8DHGPSK34n5+cl\/xlQVz4N1xqA5D8lqHtrp2yCCYjg+3V++Er7SZLvHCRxmWZYVG0WQp905J7e9aoBpaRRifRIpj8LjvV3Qav5XZ11iUErkIqvJdI3buKkfz6f42KqHb8SZRPPn2hi6vy+yjx+0yZFXPpsmgIUkO9lHJxTj+R38BFIe5uM7xzCcSI6M89NfNaAOg1fZ5DfyPg+0xi9rbBtRivyHaZkRfPw==","pkt_caplen":646,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":72,"flow_packet_id":4,"flow_first_seen":1578508366020,"flow_last_seen":1578508366059,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":32,"flow_max_l4_data_len":612,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"88.99.93.219","src_port":56685,"dst_port":30303,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0400{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFCAA0RYJAACwG3kt82eu0wKgBuHZf3VfxiPe+S9oIRIAQAOvB9QAAAQEICsj4c4ci2Jh4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0902{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":434,"pkt":"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","pkt_caplen":434,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsoD4AQECB4aQAAAQEICiLYmc0nH\/JU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFAABU1PhAACcG1XDKcBxqwKgBuHZf3U9YWygPOLFiFIAYAHafggAAAQEICicf8lQi2JhANllCERmR2VK9kmKwHvD7QDS4JVUSEm2EXJ7hD702b6o=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsoL4AQEB94SgAAAQEICiLYmc0nH\/JU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":67,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA11PlAACcG1Y7KcBxqwKgBuHZf3U9YWygvOLFiFIAYAHZAdwAAAQEICicf8lQi2JhASQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsoMIAQEB94SQAAAQEICiLYmc0nH\/JU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":193,"pkt":"KDc3AG3IEBMx8Tl2CABFAACz1PpAACcG1Q\/KcBxqwKgBuHZf3U9YWygwOLFiFIAYAHZXrAAAAQEICicf8lQi2JhALFfiBPgUbK3HbPQp5jDonRNv+Pl+svX7Sdu\/0FxuOYbnI5eh6oQo0t1oe08XMaUfDKJTKSxHYb39fFeYJt0Wp3G5gXQwZSuZDxPOkofCfsJ3KMnxvoMChdiLblwTyxyIHze15rdvZVGjfy76njMwc15qjMH2\/DmI+gyWPeLPHQ==","pkt_caplen":193,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGkYnAqAG4ynAcat1Pdl84sWIUWFsor4AQEBt3zQAAAQEICiLYmc4nH\/JU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGkWnAqAG4ynAcat1Pdl84sWIUWFsor4AYEBtkKAAAAQEICiLYmc4nH\/JUNlm\/ERmR2VK9kmKwHvD7QBpTuwo8rxXMw3SsmfHIZwk=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGkYjAqAG4ynAcat1Pdl84sWI0WFsor4AYEBsupAAAAQEICiLYmc4nH\/JUSQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGkQ3AqAG4ynAcat1Pdl84sWI1WFsor4AYEBu2qQAAAQEICiLYmc4nH\/JULFDiHfgUbK3HbPQp5zDgiE1o7fpwu7+yHZH+igAnbN+secrg+JM0nYE\/Y0\/0k0lLVvtcwpvk0FbYiIfnJGRCaNzxp+DFlcA6aJmTN8wfMfk6MlQ4wS7L1Gp2He9Ewrky5FOsgrzhgaVKrZRtZk\/qO7L7geYs2r703JuEMw==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":394,"pkt":"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","pkt_caplen":394,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGD9bAqAG4fNnrtN1Xdl9L2ghE8Yj5BoAQECGwGgAAAQEICiLYmdHI+HOL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFCABURYRAACwG3il82eu0wKgBuHZf3VfxiPkGS9oIRIAYAOuQoQAAAQEICsj4c4wi2Jh4qH73TS91bWCLvqkTbIuP8xsJ8R15tCQvNlo2OG1hPe0=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGD9bAqAG4fNnrtN1Xdl9L2ghE8Yj5JoAQECCv+gAAAQEICiLYmdHI+HOM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGD7bAqAG4fNnrtN1Xdl9L2ghE8Yj5JoAYECDBUgAAAQEICiLYmdHI+HOMqH6JTS91bWCLvqkTbIuP81KvCFBPI5UwRYO1CwTCr+g=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGD9XAqAG4fNnrtN1Xdl9L2ghk8Yj5JoAYECCA0QAAAQEICiLYmdHI+HOMLw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGD1rAqAG4fNnrtN1Xdl9L2ghl8Yj5JoAYECCaSwAAAQEICiLYmdHI+HOMh72+sc+npgFlvOHhjZ9DDLM\/88cWZcL8IJsILEDZg566nHhY5BjG2Ndug1Q+nInnwhWA49EBTLmT4EIeJ9U7T3xu+Ue7WShJRstRQYOjA2LY25CeqZOlxMaapu+AosP5JpblLoiAdB1SSUXB3DltdUDSjT664tV6NBrX7g==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGD9PAqAG4fNnrtN1Xdl9L2gjh8Yj5JoAYECDQSAAAAQEICiLYmdHI+HOMxwkY","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGD8bAqAG4fNnrtN1Xdl9L2gjk8Yj5JoAYECA17gAAAQEICiLYmdHI+HOMGATc1lZhbFAlvJTq3pUoiw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"KDc3AG3IEBMx8Tl2CABFCABURYVAACwG3ih82eu0wKgBuHZf3VfxiPkmS9oIRIAZAOujxwAAAQEICsj4c4wi2Jh4rr7DuxmIwtJpSsrQz7Sxem3AKUGCV5rPSZt7ukB2XoM=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1578508366073,"flow_last_seen":1578508366073,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"206.189.107.35","src_port":56686,"dst_port":30303,"l4_proto":"tcp"}
+0418{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGPnfAqAG4zr1rI91udl8AOSk+AAAAALAC\/\/8AywAAAgQFtAEDAwUBAQgKItiZ0wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0873{"flow_id":63,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":63,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGlpnAqAG4Ti+Tm91hdl8xKZ3Qz2MmDYAQEBm9QAAAAQEICiLYmdlPJ+Ez","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8jPoAACgGJqAN+w7HwKgBuHZf3WZ3LeB+TwsEYqASaN+zCgAAAgQFrAQCCAoTnX6eItiY9AEDAws=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":63,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGlnnAqAG4Ti+Tm91hdl8xKZ3Qz2MmDYAYEBlILgAAAQEICiLYmdlPJ+Ez+WtCmVeTussSRtxNbHdPT\/RRzJDZVGoV4Q3628PT2CA=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGW6LAqAG4DfsOx91mdl9PCwRidy3gf4AQECw5oQAAAQEICiLYmdkTnX6e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":63,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGlpjAqAG4Ti+Tm91hdl8xKZ3wz2MmDYAYEBnNFgAAAQEICiLYmdlPJ+Ez8A==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":63,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGlh3AqAG4Ti+Tm91hdl8xKZ3xz2MmDYAYEBlZHgAAAQEICiLYmdlPJ+EzBPVgGs16uUc0KeolyQdkenj8vkKorj9s5TL3fEnWlr+uDU4fQDOdyIEuWIX\/9CWV\/h9vwI55zBzcw70IgtS2f0HI+ygWxpDIRpyuozPuyJADq6QwnR2uL8CZrHjrm1rFuapl+pSmRKiBHEmg9q1gZmLdfqfUcUSM8+5UKQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":63,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGlpbAqAG4Ti+Tm91hdl8xKZ5tz2MmDYAYEBkOhgAAAQEICiLYmdlPJ+EzhhIo","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":63,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGlonAqAG4Ti+Tm91hdl8xKZ5wz2MmDYAYEBlMBgAAAQEICiLYmdlPJ+Ezk5AMYSvFtw\/6\/LNCBCQ7WA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":63,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGlnnAqAG4Ti+Tm91hdl8xKZ6Az2MmDYAYEBm91QAAAQEICiLYmdpPJ+EzUEeyoazh7D7PL19FH7tlm\/ENzOokkNHBRSNeZo6HyGA=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":470,"pkt":"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","pkt_caplen":470,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":71,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0\/xlAAC4GasozU+0swKgBuHZf3WzP3gWGHaeOqIAQAOzR6gAAAQEICmlUxZoi2Jm+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0900{"flow_id":71,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":432,"pkt":"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","pkt_caplen":432,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":71,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGV+TAqAG4M1PtLN1sdl8dp46oz94G9IAQECDBIgAAAQEICiLYmeNpVMWb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":71,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGV8TAqAG4M1PtLN1sdl8dp46oz94G9IAYECDQ5QAAAQEICiLYmeNpVMWbOWr+gF8zqqT3ux8u1K\/g6Wr8U17rW\/eyVdJPIfhNoyI=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":71,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGV+PAqAG4M1PtLN1sdl8dp47Iz94G9IAYECBR+QAAAQEICiLYmeNpVMWbbw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":71,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGV2jAqAG4M1PtLN1sdl8dp47Jz94G9IAYECBcywAAAQEICiLYmeNpVMWbmDl1vn8B6eKkjFJHtYzEaxLJUafYBIjOOw7tHhS6Ux0\/ninrrXPnQyolQoLSpPsoYghRWj2T1laiw28o4oubXwZSScsYgbOwrdxmAf47tnSUNZp84Y4QAYfTudCTVuSUcTiJhH49vVBJ8KpmPD8aW0V8lXe0R6l6haKYoQ==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":71,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGV+HAqAG4M1PtLN1sdl8dp49Fz94G9IAYECCxDgAAAQEICiLYmeNpVMWbnGtz","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":71,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGV9TAqAG4M1PtLN1sdl8dp49Iz94G9IAYECAT0AAAAQEICiLYmeNpVMWbuaqjMCZysPyzfi200trEQg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":72,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA00c9AADEG\/1VYY13bwKgBuHZf3W1kMpWwgknWYYAQAOzntgAAAQEICldNWzMi2JnH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_id":72,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":463,"pkt":"KDc3AG3IEBMx8Tl2CABFAAHB0dBAADEG\/cdYY13bwKgBuHZf3W1kMpWwgknWYYAYAOwucwAAAQEICldNWzYi2JnHAYsEVhtODuKDfMlldtngZ+bmLIqUmNn1mDhO5JKEuMoM32EzkSJhKGFtE4j0GEUWU6eS2tO9byexgHHx85LjkPhqq7fkZm7Wo8zf2JuVT4gIBAOnDgCTKrFl\/wCimxuvQ94\/3A3LW+XZBdBGeNRa31qKlLef40MQpFk5EKtCbeOfYfEIiSvlAayEQGmNFaatHB5O\/24QwyjvNLtjW+Y0X8VqWiN1rBqA\/aAwyC0IG2EeP1j\/\/3u0lDQAzfC7P4zAMjHMYaB7eC6X1Re\/RdLybPTmTN0sEfYv1RyFg3POgZM0lV+uI80MjI7vpM8\/DPAQDSBCfoRVI9MMYnb9vwzd5V9c4dIGtFdoqgnv8hxaZ0zwSsPlEsNwCwzeaWsUgxRusVoHRaBnhHiQKvljs6JJaMobTYkhLOdoLMuuT5O51P\/cOZy6g9n0WVAvfTJ6nmIqZvb2KMrkX5NZ+jo5ak0Sz0AqnqnNDOXGwXTUiX2SorbN9QlaPdDZo2WQtGZaPQz9Tsu11tJLyA9UVQH3hg==","pkt_caplen":463,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":72,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGwiXAqAG4WGNd291tdl+CSdZhZDKXPYAQEB\/W0AAAAQEICiLYmepXTVs2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":72,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGwgXAqAG4WGNd291tdl+CSdZhZDKXPYAYEB8P0QAAAQEICiLYmepXTVs22RguNtordFGKZZ82nBAQ7q9AsEepuWvcg3BMnMVmj94=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":72,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":67,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA1AABAAEAGwiTAqAG4WGNd291tdl+CSdaBZDKXPYAYEB\/bpgAAAQEICiLYmepXTVs2+w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":72,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":190,"pkt":"EBMx8Tl2KDc3AG3ICABFAACwAABAAEAGwanAqAG4WGNd291tdl+CSdaCZDKXPYAYEB+NrgAAAQEICiLYmepXTVs2jEqrrFeuODoIo6Jp+yue76C\/gliLuflANEfG9sUN3eLZXyWwTb3ea5hy8Rl5VMw4GBTVknSyou8jfNs\/B3nRM7Lcpgxulgt7mJdXanueiFZXzLtIbh\/WY9O9OLtne4a5Ddr3ujs2SIUUu0tC21Cyez2XxpMx6LebzM3TXw==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":72,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":69,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA3AABAAEAGwiLAqAG4WGNd291tdl+CSdb+ZDKXPYAYEB+SmQAAAQEICiLYmepXTVs2eI7L","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":72,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAABAAEAGwhXAqAG4WGNd291tdl+CSdcBZDKXPYAYEB8hfAAAAQEICiLYmepXTVs2G7X+6OxeBGFJ+OW\/xrWy0A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGSnvOvWsjwKgBuHZf3W6FBUsAADkpP6AScSCofQAAAgQFrAQCCApn2sBGItiZ0wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPoPAqAG4zr1rI91udl8AOSk\/hQVLAYAQECw4DwAAAQEICiLYmfpn2sBG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0953{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":473,"pkt":"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","pkt_caplen":473,"pkt_type":2048,"pkt_ipoffset":14}
+0690{"flow_id":71,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":274,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEE\/xtAAC4GafgzU+0swKgBuHZf3WzP3gb0HaeOqIAYAOy\/HwAAAQEICmlUxcQi2JnjOWodgF8zqqT3ux8u1K\/g6U6QBmyPDWBUcKgtfjzQ8ZlvmNh1rnQ0\/PjijhpEydaVIxPYRaibF5WEb1KrRVfkRhE5xHjp+CWzD39yD5ssUUl0J1JfqZGOmgi9deNFDOPhY+vWdzzZzmwC1A5nNc7kk8dUVJrtrtv373RjRw25qIqq\/0+\/hFZW00NdV0znJoUGJE91KNHYPMi7wCtFEj6Ucp0mi8GwDXYDJrWFHthe7h6\/TwY2K3iLjVuLLfeXN76lHvSq1nVFTCIT67e9N28wUg==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":71,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGV+TAqAG4M1PtLN1sdl8dp49Yz94HxIAQEBq\/WwAAAQEICiLYmgdpVMXE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":71,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","pkt_oversize":false,"pkt_ts":1578508366,"pkt_len":98,"pkt":"EBMx8Tl2KDc3AG3ICABFAABUAABAAEAGV8TAqAG4M1PtLN1sdl8dp49Yz94HxIAYEBrpfQAAAQEICiLYmgdpVMXEsbvcLYadChRphbpgRufGc3E5TGLY9wr\/00\/QEFUd68g=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":51,"flow_packet_id":33,"flow_first_seen":1578508365226,"flow_last_seen":1578508366012,"flow_tot_l4_data_len":2246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":571,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.75.171.190","src_port":56657,"dst_port":30303,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":68,"flow_packet_id":4,"flow_first_seen":1578508365852,"flow_last_seen":1578508366055,"flow_tot_l4_data_len":595,"flow_min_l4_data_len":32,"flow_max_l4_data_len":479,"flow_avg_l4_data_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.59.17.58","src_port":56680,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":68,"flow_packet_id":4,"flow_first_seen":1578508365852,"flow_last_seen":1578508366055,"flow_tot_l4_data_len":595,"flow_min_l4_data_len":32,"flow_max_l4_data_len":479,"flow_avg_l4_data_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.59.17.58","src_port":56680,"dst_port":30303,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":42,"flow_packet_id":61,"flow_first_seen":1578508365045,"flow_last_seen":1578508365241,"flow_tot_l4_data_len":3436,"flow_min_l4_data_len":20,"flow_max_l4_data_len":442,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"185.219.133.62","src_port":56645,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":42,"flow_packet_id":61,"flow_first_seen":1578508365045,"flow_last_seen":1578508365241,"flow_tot_l4_data_len":3436,"flow_min_l4_data_len":20,"flow_max_l4_data_len":442,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"185.219.133.62","src_port":56645,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":45,"flow_packet_id":54,"flow_first_seen":1578508365153,"flow_last_seen":1578508365387,"flow_tot_l4_data_len":3296,"flow_min_l4_data_len":20,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.250.140","src_port":56650,"dst_port":30303,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":49,"flow_packet_id":7,"flow_first_seen":1578508365189,"flow_last_seen":1578508365942,"flow_tot_l4_data_len":2265,"flow_min_l4_data_len":136,"flow_max_l4_data_len":1065,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":67,"flow_packet_id":30,"flow_first_seen":1578508365846,"flow_last_seen":1578508366076,"flow_tot_l4_data_len":2164,"flow_min_l4_data_len":20,"flow_max_l4_data_len":418,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.158.52","src_port":56679,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":67,"flow_packet_id":30,"flow_first_seen":1578508365846,"flow_last_seen":1578508366076,"flow_tot_l4_data_len":2164,"flow_min_l4_data_len":20,"flow_max_l4_data_len":418,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.228.158.52","src_port":56679,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":64,"flow_packet_id":50,"flow_first_seen":1578508365741,"flow_last_seen":1578508366031,"flow_tot_l4_data_len":3327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":579,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"94.68.55.162","src_port":56674,"dst_port":30303,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":33,"flow_packet_id":37,"flow_first_seen":1578508364832,"flow_last_seen":1578508365305,"flow_tot_l4_data_len":2254,"flow_min_l4_data_len":20,"flow_max_l4_data_len":445,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.228.29.160","src_port":56635,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":33,"flow_packet_id":37,"flow_first_seen":1578508364832,"flow_last_seen":1578508365305,"flow_tot_l4_data_len":2254,"flow_min_l4_data_len":20,"flow_max_l4_data_len":445,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.228.29.160","src_port":56635,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":69,"flow_packet_id":30,"flow_first_seen":1578508365885,"flow_last_seen":1578508366042,"flow_tot_l4_data_len":2228,"flow_min_l4_data_len":20,"flow_max_l4_data_len":534,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"207.180.206.216","src_port":56681,"dst_port":30303,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":55,"flow_packet_id":30,"flow_first_seen":1578508365295,"flow_last_seen":1578508365885,"flow_tot_l4_data_len":1808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":455,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.229.232.19","src_port":56662,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":55,"flow_packet_id":30,"flow_first_seen":1578508365295,"flow_last_seen":1578508365885,"flow_tot_l4_data_len":1808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":455,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.229.232.19","src_port":56662,"dst_port":30303,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":36,"flow_packet_id":3,"flow_first_seen":1578508364925,"flow_last_seen":1578508364954,"flow_tot_l4_data_len":1677,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1065,"flow_avg_l4_data_len":559,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.180.246.169","src_port":30303,"dst_port":30301,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":28,"flow_packet_id":3,"flow_first_seen":1578508364697,"flow_last_seen":1578508364773,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1144,"flow_avg_l4_data_len":558,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"54.36.160.211","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1578508365567,"flow_last_seen":1578508365567,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":136,"flow_max_l4_data_len":136,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"106.12.39.168","src_port":30303,"dst_port":30333,"l4_proto":"udp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":73,"flow_packet_id":4,"flow_first_seen":1578508366073,"flow_last_seen":1578508366119,"flow_tot_l4_data_len":555,"flow_min_l4_data_len":32,"flow_max_l4_data_len":439,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"206.189.107.35","src_port":56686,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":73,"flow_packet_id":4,"flow_first_seen":1578508366073,"flow_last_seen":1578508366119,"flow_tot_l4_data_len":555,"flow_min_l4_data_len":32,"flow_max_l4_data_len":439,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"206.189.107.35","src_port":56686,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":12,"flow_packet_id":42,"flow_first_seen":1578508364522,"flow_last_seen":1578508364664,"flow_tot_l4_data_len":2467,"flow_min_l4_data_len":20,"flow_max_l4_data_len":527,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.158.244.151","src_port":56615,"dst_port":30303,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1578508365038,"flow_last_seen":1578508365038,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.230.108.42","src_port":56644,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining.Amazon","category":"Web"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1578508365038,"flow_last_seen":1578508365038,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.230.108.42","src_port":56644,"dst_port":30303,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":24,"flow_packet_id":38,"flow_first_seen":1578508364632,"flow_last_seen":1578508364787,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":20,"flow_max_l4_data_len":453,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.60.79","src_port":56629,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":24,"flow_packet_id":38,"flow_first_seen":1578508364632,"flow_last_seen":1578508364787,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":20,"flow_max_l4_data_len":453,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.60.79","src_port":56629,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":27,"flow_packet_id":41,"flow_first_seen":1578508364682,"flow_last_seen":1578508364899,"flow_tot_l4_data_len":2422,"flow_min_l4_data_len":20,"flow_max_l4_data_len":511,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.38.81.180","src_port":56632,"dst_port":30303,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":19,"flow_packet_id":30,"flow_first_seen":1578508364523,"flow_last_seen":1578508364743,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":505,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"89.38.99.34","src_port":56624,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":48,"flow_packet_id":31,"flow_first_seen":1578508365189,"flow_last_seen":1578508365331,"flow_tot_l4_data_len":2363,"flow_min_l4_data_len":20,"flow_max_l4_data_len":540,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"85.214.108.52","src_port":56654,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1578508364272,"flow_last_seen":1578508364272,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"3.112.138.57","dst_ip":"192.168.1.184","src_port":25516,"dst_port":30303,"l4_proto":"udp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":9,"flow_packet_id":45,"flow_first_seen":1578508364522,"flow_last_seen":1578508365440,"flow_tot_l4_data_len":2554,"flow_min_l4_data_len":20,"flow_max_l4_data_len":606,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"165.22.107.33","src_port":56610,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1578508362274,"flow_last_seen":1578508363333,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":136,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"87.14.222.25","dst_ip":"192.168.1.184","src_port":56693,"dst_port":30303,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":52,"flow_packet_id":64,"flow_first_seen":1578508365239,"flow_last_seen":1578508365961,"flow_tot_l4_data_len":3718,"flow_min_l4_data_len":20,"flow_max_l4_data_len":615,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"157.230.152.87","src_port":56658,"dst_port":30303,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":39,"flow_packet_id":29,"flow_first_seen":1578508365021,"flow_last_seen":1578508365192,"flow_tot_l4_data_len":2124,"flow_min_l4_data_len":20,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.10.218","src_port":56642,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":39,"flow_packet_id":29,"flow_first_seen":1578508365021,"flow_last_seen":1578508365192,"flow_tot_l4_data_len":2124,"flow_min_l4_data_len":20,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.10.218","src_port":56642,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":40,"flow_packet_id":54,"flow_first_seen":1578508365029,"flow_last_seen":1578508365211,"flow_tot_l4_data_len":3043,"flow_min_l4_data_len":20,"flow_max_l4_data_len":501,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.62.29.183","src_port":56643,"dst_port":30303,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":60,"flow_packet_id":30,"flow_first_seen":1578508365588,"flow_last_seen":1578508365744,"flow_tot_l4_data_len":2134,"flow_min_l4_data_len":20,"flow_max_l4_data_len":421,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":56670,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":60,"flow_packet_id":30,"flow_first_seen":1578508365588,"flow_last_seen":1578508365744,"flow_tot_l4_data_len":2134,"flow_min_l4_data_len":20,"flow_max_l4_data_len":421,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":56670,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1578508364732,"flow_last_seen":1578508365736,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":136,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"111.229.0.180","src_port":30303,"dst_port":20182,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":22,"flow_packet_id":41,"flow_first_seen":1578508364523,"flow_last_seen":1578508364723,"flow_tot_l4_data_len":2418,"flow_min_l4_data_len":20,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.255.23.113","src_port":56627,"dst_port":30303,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":14,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508365220,"flow_tot_l4_data_len":2439,"flow_min_l4_data_len":20,"flow_max_l4_data_len":485,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":56618,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":14,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508365220,"flow_tot_l4_data_len":2439,"flow_min_l4_data_len":20,"flow_max_l4_data_len":485,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":56618,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":63,"flow_packet_id":37,"flow_first_seen":1578508365712,"flow_last_seen":1578508366123,"flow_tot_l4_data_len":3058,"flow_min_l4_data_len":32,"flow_max_l4_data_len":599,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"78.47.147.155","src_port":56673,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":1578508365919,"flow_last_seen":1578508365951,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":136,"flow_max_l4_data_len":155,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"167.86.122.50","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1578508364776,"flow_last_seen":1578508365781,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":136,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.97.143.1","src_port":30303,"dst_port":50000,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1578508364382,"flow_last_seen":1578508364651,"flow_tot_l4_data_len":3354,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1065,"flow_avg_l4_data_len":559,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.231.165.108","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1578508363692,"flow_last_seen":1578508363692,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":137,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"60.191.32.71","dst_ip":"192.168.1.184","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":57,"flow_packet_id":4,"flow_first_seen":1578508365408,"flow_last_seen":1578508365790,"flow_tot_l4_data_len":586,"flow_min_l4_data_len":136,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"183.129.242.164","dst_ip":"192.168.1.184","src_port":1024,"dst_port":30303,"l4_proto":"udp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":21,"flow_packet_id":69,"flow_first_seen":1578508364523,"flow_last_seen":1578508364687,"flow_tot_l4_data_len":4026,"flow_min_l4_data_len":20,"flow_max_l4_data_len":578,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"178.128.195.220","src_port":56626,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":50,"flow_packet_id":24,"flow_first_seen":1578508365194,"flow_last_seen":1578508366069,"flow_tot_l4_data_len":2114,"flow_min_l4_data_len":32,"flow_max_l4_data_len":526,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":56655,"dst_port":30303,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1578508364523,"flow_last_seen":1578508365619,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"5.1.83.226","src_port":56625,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1578508364523,"flow_last_seen":1578508365619,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"5.1.83.226","src_port":56625,"dst_port":30303,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":23,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508364937,"flow_tot_l4_data_len":2401,"flow_min_l4_data_len":20,"flow_max_l4_data_len":502,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":56628,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":23,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508364937,"flow_tot_l4_data_len":2401,"flow_min_l4_data_len":20,"flow_max_l4_data_len":502,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":56628,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":13,"flow_packet_id":29,"flow_first_seen":1578508364523,"flow_last_seen":1578508365656,"flow_tot_l4_data_len":2255,"flow_min_l4_data_len":20,"flow_max_l4_data_len":504,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":56617,"dst_port":30303,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1578508364922,"flow_last_seen":1578508366029,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.233.197.131","src_port":56637,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1578508364922,"flow_last_seen":1578508366029,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.233.197.131","src_port":56637,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":53,"flow_packet_id":65,"flow_first_seen":1578508365271,"flow_last_seen":1578508365838,"flow_tot_l4_data_len":3718,"flow_min_l4_data_len":20,"flow_max_l4_data_len":605,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.161.23.12","src_port":56660,"dst_port":30303,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":54,"flow_packet_id":53,"flow_first_seen":1578508365279,"flow_last_seen":1578508366038,"flow_tot_l4_data_len":3248,"flow_min_l4_data_len":20,"flow_max_l4_data_len":504,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.9.128.68","src_port":56661,"dst_port":30303,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":29,"flow_packet_id":32,"flow_first_seen":1578508364714,"flow_last_seen":1578508364919,"flow_tot_l4_data_len":2080,"flow_min_l4_data_len":20,"flow_max_l4_data_len":474,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"82.145.220.249","src_port":56633,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":29,"flow_packet_id":32,"flow_first_seen":1578508364714,"flow_last_seen":1578508364919,"flow_tot_l4_data_len":2080,"flow_min_l4_data_len":20,"flow_max_l4_data_len":474,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"82.145.220.249","src_port":56633,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":56,"flow_packet_id":22,"flow_first_seen":1578508365300,"flow_last_seen":1578508366073,"flow_tot_l4_data_len":1901,"flow_min_l4_data_len":32,"flow_max_l4_data_len":577,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"124.217.235.180","src_port":56663,"dst_port":30303,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":46,"flow_packet_id":36,"flow_first_seen":1578508365154,"flow_last_seen":1578508365257,"flow_tot_l4_data_len":2088,"flow_min_l4_data_len":20,"flow_max_l4_data_len":449,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.201.12.87","src_port":56651,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":46,"flow_packet_id":36,"flow_first_seen":1578508365154,"flow_last_seen":1578508365257,"flow_tot_l4_data_len":2088,"flow_min_l4_data_len":20,"flow_max_l4_data_len":449,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"138.201.12.87","src_port":56651,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1578508364654,"flow_last_seen":1578508364729,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":558,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"128.0.51.140","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":43,"flow_packet_id":52,"flow_first_seen":1578508365079,"flow_last_seen":1578508365297,"flow_tot_l4_data_len":3274,"flow_min_l4_data_len":20,"flow_max_l4_data_len":506,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"172.105.94.62","src_port":56646,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":47,"flow_packet_id":35,"flow_first_seen":1578508365169,"flow_last_seen":1578508365272,"flow_tot_l4_data_len":2271,"flow_min_l4_data_len":20,"flow_max_l4_data_len":563,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"176.9.136.209","src_port":56652,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":58,"flow_packet_id":2,"flow_first_seen":1578508365461,"flow_last_seen":1578508365899,"flow_tot_l4_data_len":293,"flow_min_l4_data_len":136,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"202.112.28.106","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":17,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508365331,"flow_tot_l4_data_len":2373,"flow_min_l4_data_len":20,"flow_max_l4_data_len":563,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":56622,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":18,"flow_packet_id":43,"flow_first_seen":1578508364523,"flow_last_seen":1578508365354,"flow_tot_l4_data_len":2449,"flow_min_l4_data_len":20,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.81.28","src_port":56623,"dst_port":30303,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":8,"flow_packet_id":5,"flow_first_seen":1578508364522,"flow_last_seen":1578508364841,"flow_tot_l4_data_len":609,"flow_min_l4_data_len":32,"flow_max_l4_data_len":461,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":56612,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":8,"flow_packet_id":5,"flow_first_seen":1578508364522,"flow_last_seen":1578508364841,"flow_tot_l4_data_len":609,"flow_min_l4_data_len":32,"flow_max_l4_data_len":461,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":56612,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1578508364382,"flow_last_seen":1578508364519,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":558,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"3.209.45.79","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":10,"flow_packet_id":42,"flow_first_seen":1578508364522,"flow_last_seen":1578508365097,"flow_tot_l4_data_len":2493,"flow_min_l4_data_len":20,"flow_max_l4_data_len":522,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"104.42.217.25","src_port":56611,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1578508364421,"flow_last_seen":1578508364694,"flow_tot_l4_data_len":1675,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1144,"flow_avg_l4_data_len":558,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"34.97.172.22","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":62,"flow_packet_id":36,"flow_first_seen":1578508365701,"flow_last_seen":1578508365828,"flow_tot_l4_data_len":2086,"flow_min_l4_data_len":20,"flow_max_l4_data_len":418,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"139.162.255.210","src_port":56672,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":62,"flow_packet_id":36,"flow_first_seen":1578508365701,"flow_last_seen":1578508365828,"flow_tot_l4_data_len":2086,"flow_min_l4_data_len":20,"flow_max_l4_data_len":418,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"139.162.255.210","src_port":56672,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":15,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508365223,"flow_tot_l4_data_len":2495,"flow_min_l4_data_len":20,"flow_max_l4_data_len":544,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"191.234.162.198","src_port":56620,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":44,"flow_packet_id":16,"flow_first_seen":1578508365094,"flow_last_seen":1578508365839,"flow_tot_l4_data_len":1818,"flow_min_l4_data_len":32,"flow_max_l4_data_len":554,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"182.162.161.61","src_port":56647,"dst_port":30303,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":35,"flow_packet_id":62,"flow_first_seen":1578508364924,"flow_last_seen":1578508365071,"flow_tot_l4_data_len":3977,"flow_min_l4_data_len":20,"flow_max_l4_data_len":526,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.250.240.205","src_port":56638,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":35,"flow_packet_id":62,"flow_first_seen":1578508364924,"flow_last_seen":1578508365071,"flow_tot_l4_data_len":3977,"flow_min_l4_data_len":20,"flow_max_l4_data_len":526,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"209.250.240.205","src_port":56638,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":37,"flow_packet_id":39,"flow_first_seen":1578508364932,"flow_last_seen":1578508365309,"flow_tot_l4_data_len":2451,"flow_min_l4_data_len":20,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.219.167.159","src_port":56639,"dst_port":30303,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":26,"flow_packet_id":35,"flow_first_seen":1578508364659,"flow_last_seen":1578508365043,"flow_tot_l4_data_len":2166,"flow_min_l4_data_len":20,"flow_max_l4_data_len":463,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"40.67.144.128","src_port":56630,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining","category":"Mining"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":26,"flow_packet_id":35,"flow_first_seen":1578508364659,"flow_last_seen":1578508365043,"flow_tot_l4_data_len":2166,"flow_min_l4_data_len":20,"flow_max_l4_data_len":463,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"40.67.144.128","src_port":56630,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":16,"flow_packet_id":42,"flow_first_seen":1578508364523,"flow_last_seen":1578508365511,"flow_tot_l4_data_len":2512,"flow_min_l4_data_len":20,"flow_max_l4_data_len":557,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"52.187.207.27","src_port":56621,"dst_port":30303,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1578508365828,"flow_last_seen":1578508366083,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":32,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.251.14.199","src_port":56678,"dst_port":30303,"l4_proto":"tcp","ndpi": {"proto":"Mining.Amazon","category":"Web"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1578508365828,"flow_last_seen":1578508366083,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":32,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"13.251.14.199","src_port":56678,"dst_port":30303,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1578508364382,"flow_last_seen":1578508364650,"flow_tot_l4_data_len":1677,"flow_min_l4_data_len":179,"flow_max_l4_data_len":1065,"flow_avg_l4_data_len":559,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"18.138.108.67","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":65,"flow_packet_id":30,"flow_first_seen":1578508365751,"flow_last_seen":1578508365853,"flow_tot_l4_data_len":2280,"flow_min_l4_data_len":20,"flow_max_l4_data_len":562,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"35.235.37.216","src_port":56675,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":71,"flow_packet_id":24,"flow_first_seen":1578508366005,"flow_last_seen":1578508366135,"flow_tot_l4_data_len":2215,"flow_min_l4_data_len":20,"flow_max_l4_data_len":593,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"51.83.237.44","src_port":56684,"dst_port":30303,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1578508364422,"flow_last_seen":1578508365065,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":136,"flow_max_l4_data_len":179,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"66.42.82.246","src_port":30303,"dst_port":30303,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":61,"flow_packet_id":48,"flow_first_seen":1578508365592,"flow_last_seen":1578508365773,"flow_tot_l4_data_len":3244,"flow_min_l4_data_len":20,"flow_max_l4_data_len":572,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"86.107.243.62","src_port":56671,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":72,"flow_packet_id":12,"flow_first_seen":1578508366020,"flow_last_seen":1578508366101,"flow_tot_l4_data_len":1557,"flow_min_l4_data_len":32,"flow_max_l4_data_len":612,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"88.99.93.219","src_port":56685,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":11,"flow_packet_id":31,"flow_first_seen":1578508364522,"flow_last_seen":1578508365036,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":20,"flow_max_l4_data_len":490,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"162.243.160.83","src_port":56613,"dst_port":30303,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":38,"flow_packet_id":31,"flow_first_seen":1578508365009,"flow_last_seen":1578508365126,"flow_tot_l4_data_len":2240,"flow_min_l4_data_len":20,"flow_max_l4_data_len":572,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"144.91.120.135","src_port":56641,"dst_port":30303,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap","flow_id":32,"flow_packet_id":44,"flow_first_seen":1578508364824,"flow_last_seen":1578508365152,"flow_tot_l4_data_len":2648,"flow_min_l4_data_len":20,"flow_max_l4_data_len":603,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.184","dst_ip":"159.203.84.31","src_port":56634,"dst_port":30303,"l4_proto":"tcp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ethereum.pcap"}
diff --git a/tests/result/nDPId_exe_download.pcap.txt b/tests/result/nDPId_exe_download.pcap.txt
new file mode 100644
index 000000000..d2a888bb2
--- /dev/null
+++ b/tests/result/nDPId_exe_download.pcap.txt
@@ -0,0 +1,21 @@
+0364{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569434051004,"flow_last_seen":1569434051004,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":66,"pkt":"IOUqtpPxAAgCHEeuCABFAAA0AI9AAIAGAKkKCRllkFtFw8ANAFC+hvgeAAAAAIACIADegAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":58,"pkt":"AAgCHEeuIOUqtpPxCABFAAAsBbAAAIAGO5CQW0XDCgkZZQBQwA0+79i4vob4H2AS+vAU7QAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALJAAIAGAJIKCRllkFtFw8ANAFC+hvgfPu\/YuVAQ+vAsqgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0593{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":207,"pkt":"IOUqtpPxAAgCHEeuCABFAADBALNAAIAG\/\/cKCRllkFtFw8ANAFC+hvgfPu\/YuVAY+vAITAAAR0VUIC9zb2xhci5waHAgSFRUUC8xLjENCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLXVzDQpVc2VyLUFnZW50OiBwd3R5eUVLek50R2F0d25Kam1DY0JMYk92ZUNWcGMNCkhvc3Q6IDE0NC45MS42OS4xOTUNCg0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1569434051004,"flow_last_seen":1569434051324,"flow_tot_l4_data_len":249,"flow_min_l4_data_len":20,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"144.91.69.195","url":"144.91.69.195\/solar.php","code":0,"content_type":"","user_agent":"pwtyyEKzNtGatwnJjmCcBLbOveCVpc"}}
+0384{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":54,"pkt":"AAgCHEeuIOUqtpPxCABFAAAoBbEAAIAGO5OQW0XDCgkZZQBQwA0+79i5vob4uFAQ+vAsEQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1514,"pkt":"AAgCHEeuIOUqtpPxCABFAAXcBbQAAIAGNdyQW0XDCgkZZQBQwA0+79i5vob4uFAQ+vA4RgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuMTAuMw0KRGF0ZTogV2VkLCAyNSBTZXAgMjAxOSAxNzo1NDoxMiBHTVQNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vb2N0ZXQtc3RyZWFtDQpDb250ZW50LUxlbmd0aDogNjc5MDA4DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDb250ZW50LURlc2NyaXB0aW9uOiBGaWxlIFRyYW5zZmVyDQpDb250ZW50LURpc3Bvc2l0aW9uOiBhdHRhY2htZW50OyBmaWxlbmFtZT0icGhuMzR5Y2p0Z2htLmV4ZSINCkV4cGlyZXM6IDANCkNhY2hlLUNvbnRyb2w6IG11c3QtcmV2YWxpZGF0ZQ0KUHJhZ21hOiBwdWJsaWMNCg0KTVqQAAMAAAAEAAAA\/\/8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAADF5hWJgYd72oGHe9qBh3vasqVe2oOHe9pbpGfai4d72likZ9qAh3vae6Ri2piHe9qBh3ra\/4V72nujO9qdh3vae6Nn2gSHe9qqplzaiId72nujZtoZh3vae6M+2oCHe9p7o0bagId72lJpY2iBh3vaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUEUAAEwBBAA3BYtdAAAAAAAAAADgAA8BCwEHAABABAAAwAQAAAAAAGIRAQAAEAAAAFAEAAAAQAAAEAAAABAAAAQAAAAAAAAABAAAAAAAAAAAEAkAABAAAJAACQACAAAAAAAQAAAQAAAAABAAABAAAAAAAAAQAAAAAAAAAAAAAAAsZAUAGAEAAAAABgDyAQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAEAGAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudGV4dAAAAKMzBAAAEAAAAEAEAAAQAAAAAAAAAAAAAAAAAAAgAABgLnJkYXRhAABgOwEAAFAEAABAAQAAUAQAAAAAAAAAAAAAAAAAQAAAQC5kYXRhAAAAxGAAAACQBQAAMAAAAJAFAAAAAAAAAAAAAAAAAEAAAMAucnNyYwAAAPIBAwAAAAYAABADAADABQAAAAAAAAAAAAAAAABAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1569434051004,"flow_last_seen":1569434051623,"flow_tot_l4_data_len":1749,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":291,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer","11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Download-FileTransfer-FileSharing"},"http": {"hostname":"144.91.69.195","url":"144.91.69.195\/solar.php","code":200,"content_type":"application\/octet-stream","user_agent":"pwtyyEKzNtGatwnJjmCcBLbOveCVpc"}}
+2080{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1322,"pkt":"AAgCHEeuIOUqtpPxCABFAAUcBbUAAIAGNpuQW0XDCgkZZQBQwA0+795tvob4uFAY+vAhYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1322,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALZAAIAGAI4KCRllkFtFw8ANAFC+hvi4Pu\/jYVAQ+vAhaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2208{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1418,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8BbYAAIAGNjqQW0XDCgkZZQBQwA0+7+Nhvob4uFAY+vAcDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALdAAIAGAI0KCRllkFtFw8ANAFC+hvi4Pu\/uCVAQ+vAWwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2410{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1418,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8BbgAAIAGNjiQW0XDCgkZZQBQwA0+7+4Jvob4uFAY+vD9OgAAzMzMzFWL7IHsxAAAAFeJjUD\/\/\/\/HhUj\/\/\/8AAAAAuQ4AAAAzwI29TP\/\/\/\/Orx0XAPAAAAIuFQP\/\/\/4tIHFH\/FUxVRABQ6CJrAgCJhUT\/\/\/9qWouVRP\/\/\/1L\/FRxRRACJRfyNRcBQagFoOgQAAIuNQP\/\/\/4tRHFL\/FUhVRADHhUj\/\/\/88AAAAg71A\/\/\/\/AHUMx4U8\/\/\/\/AAAAAOsPi4VA\/\/\/\/i0gciY08\/\/\/\/i5U8\/\/\/\/iZVM\/\/\/\/x4VQ\/\/\/\/AAAAAI1FhImFVP\/\/\/8eFXP\/\/\/0EhAADHhXz\/\/\/8BAAAAx0WAZgYAAItN1ImNYP\/\/\/8eFdP\/\/\/wAAAABmx4V4\/\/\/\/ACSLRcwPr0X8mbmgBQAA9\/n32IlFhMdFiAAAAADHRYwAAAAAx0WQAAAAAItVyIPiAffaG9KB4iwBAACBwpABAACJVZSLRciD4AKFwA+VwYhNmItVyIPiBIXSD5XAiEWZi03Ig+EIhckPlcKIVZrGRZwAxkWdAMZFngGKRdiIRZuKTdmITZ+NVdpSjUWgUOiy7wAAg8QIjY1I\/\/\/\/Uf8VhFZEAIXAdQXpqwAAAMdFwDwAAADHRcQ\/AADoi5VY\/\/\/\/0eKJVczHRcg\/AABAgX2UvAIAAH0Ji0XIg+D+iUXID7ZNmIXJdQmLVciD4v2JVcgPtkWZhcB1CYtNyIPh+4lNyA+2VZqF0nUJi0XIg+D3iUXIi41g\/\/\/\/iU3UilWbiFXYikWfiEXZjU2gUY1V2lLoEu8AAIPECI1FwFCLjUD\/\/\/\/oDsEBAIXAdQ5qAGoAaChbRADoUJUCAF+L5V3DzMzMzMzMzMzMVYvsav9oKylEAGShAAAAAFBkiSUAAAAAgez8AAAAVleJjfj+\/\/9qAGoAagCNjVz\/\/\/\/o5bABAMdF\/AAAAACNjVz\/\/\/\/oW7ABAIP4AXVfi0XYiYUA\/\/\/\/jY0E\/\/\/\/UYuN+P7\/\/+jBwAEAi1XYiZX8\/v\/\/i4X8\/v\/\/iYUY\/\/\/\/i40M\/\/\/\/geH\/\/\/+\/iY0M\/\/\/\/g+xUuRUAAACNtQT\/\/\/+L\/POli434\/v\/\/6FMFAADHRfz\/\/\/\/\/jY1c\/\/\/\/6BccAgCLTfRkiQ0AAAAAX16L5V3DzFWL7FGJTfyLTfzo9xsCAIvlXcPMzMzMzMzMzMzMzMzMVYvsg+xcVleJTaSNRahQi02k6CPAAQCLTaSDudABAAAAdB6LVbCD4v6JVbBmx0XkkAGLRaTHgNABAAAAAAAA6ymLTayByQAAQACDyQGJTazHRbABAAAAZsdF5LwCi1Wkx4LQAQAAAQAAAIPsVLkVAAAAjXWoi\/zzpYtNpOiPBAAAX16L5V3DzMzMzMzMzMzMVYvsgezEAAAAiY08\/\/\/\/jYVA\/\/\/\/UIuNPP\/\/\/+invwEAx4VE\/\/\/\/IAAAAA+3jUj\/\/\/+D+QF1G4uVPP\/\/\/8eCzAEAAAAAAABmx4VI\/\/\/\/AADrGYuFPP\/\/\/8eAzAEAAAEAAABmx4VI\/\/\/\/AQCNjUD\/\/\/9Ri408\/\/\/\/6Ie\/AQBqAGoBaLkAAACLlTz\/\/\/+LQhxQ\/xVIVUQAi+Vdw8zMzMzMzFWL7IPsXFZXiU2kjUWoUItNpOjzvgEAi02kg7ncAQAAAHQYi1Wwg+L9iVWwi0Wkx4DcAQAAAAAAAOsbx0WsAgAAAMdFsAIAAACLTaTHgdwBAAABAAAAg+xUuRUAAACNdaiL\/POli02k6HMDAABfXovlXcPMzMzMzMzMzMzMzMzMVYvsg+xcVleJTaSNRahQi02k6HO+AQCLTaSDudgBAAAAdBiLVbCD4veJVbCLRaTHgNgBAAAAAAAA6xvHRawIAAAAx0WwCAAAAItNpMeB2AE=","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+2503{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2109{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":1302,"pkt":"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","pkt_caplen":1302,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","pkt_oversize":false,"pkt_ts":1569434051,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoALhAAIAGAIwKCRllkFtFw8ANAFC+hvi4Pu\/98VAQ+vAG2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap","flow_id":0,"flow_packet_id":703,"flow_first_seen":1569434051004,"flow_last_seen":1569434056186,"flow_tot_l4_data_len":693561,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":986,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"144.91.69.195","src_port":49165,"dst_port":80,"l4_proto":"tcp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download.pcap"}
diff --git a/tests/result/nDPId_exe_download_as_png.pcap.txt b/tests/result/nDPId_exe_download_as_png.pcap.txt
new file mode 100644
index 000000000..2fe1ad856
--- /dev/null
+++ b/tests/result/nDPId_exe_download_as_png.pcap.txt
@@ -0,0 +1,21 @@
+0371{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569434903040,"flow_last_seen":1569434903040,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434903,"pkt_len":66,"pkt":"IOUqtpPxAAgCHEeuCABFAAA0Bk9AAIAGv+sKCRlluWJXucAtAFB7PMGWAAAAAIACIAAdNgAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434903,"pkt_len":58,"pkt":"AAgCHEeuIOUqtpPxCABFAAAsESIAAIAG9SC5Yle5CgkZZQBQwC0vLgrVezzBl2AS+vAxRwAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434903,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlJAAIAGv\/QKCRlluWJXucAtAFB7PMGXLy4K1lAQ+vBJBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0593{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434903,"pkt_len":203,"pkt":"IOUqtpPxAAgCHEeuCABFAAC9BlNAAIAGv14KCRlluWJXucAtAFB7PMGXLy4K1lAY+vA3lwAAR0VUIC90YWJsb25lLnBuZyBIVFRQLzEuMQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClByYWdtYTogbm8tY2FjaGUNClVzZXItQWdlbnQ6IFdpbkhUVFAgbG9hZGVyLzEuMA0KSG9zdDogMTg1Ljk4Ljg3LjE4NQ0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1569434903040,"flow_last_seen":1569434903441,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":20,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"185.98.87.185","url":"185.98.87.185\/tablone.png","code":0,"content_type":"","user_agent":"WinHTTP loader\/1.0"}}
+0391{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434903,"pkt_len":54,"pkt":"AAgCHEeuIOUqtpPxCABFAAAoESMAAIAG9SO5Yle5CgkZZQBQwC0vLgrWezzCLFAQ+vBIbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1569434903040,"flow_last_seen":1569434904053,"flow_tot_l4_data_len":1745,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":290,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"185.98.87.185","url":"185.98.87.185\/tablone.png","code":200,"content_type":"image\/png","user_agent":"WinHTTP loader\/1.0"}}
+2087{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1322,"pkt":"AAgCHEeuIOUqtpPxCABFAAUcESUAAIAG8C25Yle5CgkZZQBQwC0vLhCKezzCLFAY+vA9vwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1322,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlRAAIAGv\/IKCRlluWJXucAtAFB7PMIsLy4VflAQ+vA9xwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2215{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1418,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8ESYAAIAG78y5Yle5CgkZZQBQwC0vLhV+ezzCLFAY+vA4awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+2221{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlVAAIAGv\/EKCRlluWJXucAtAFB7PMIsLy4gJlAQ+vAzHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+2236{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1418,"pkt":"AAgCHEeuIOUqtpPxCABFAAV8ESkAAIAG78m5Yle5CgkZZQBQwC0vLiV6ezzCLFAY+vCF8gAA6LBFums813x8GqfsAAAAAAAAAGRFQABMAAAAUAAAAN9uiYgizvFGuh2dNdOBjtEAAAAAAAAAAAAAAAAAAAAAAwAAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPYVAAAAAAAAUEZAAJwAAADoAAAAOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AAAAP\/\/\/\/8AAAAA0AAAANEAAADhAAAAAAAAAMPqUh0p6LBFums813x8GqcAFH2S901MS6oECpq+XrR3y+IzLEEPxUGmS11wcgPVKeOSxrAzpaRGvgd9xm+yfh4xjrter\/k+T7eGjRsDtdunPwEAAADgAAAARoT\/DwMAAOxiHWDQkSRJhGgetLBl\/ZJowTPquYefQaoiGxAoHisfAAAAAGITVyAAAAAAAAAAAAAAAAAAAAAAAEFNTUFDQVJFLmpDaGFydABqQ2hhcnQABwAAALRBQAAHAAAAcEFAAAcAAAAsQUAABwAAAOBAQAAHAAAAhEBAAAcAAAAwQEAABwAAAOw\/QAAHAAAAqD9AAAcAAABgP0AABwAAABg\/QAAHAAAAsD5AAAcAAABsPkAABwAAACg+QAAHAAAA3D1AAAcAAACUPUAABwAAAFA9QAAHAAAA7DxAAAcAAACkPEAABwAAAFw8QAAHAAAAFDxAAAcAAADMO0AABwAAAIg7QAAHAAAAGDtAAAcAAADUOkAABwAAAJA6QAAHAAAATDpAAAcAAAAIOkAABwAAAMQ5QAAHAAAAYDlAAAcAAAAEOUAABwAAAMA4QAAHAAAAeDhAAAYAAAD8M0AABwAAAEQwQAAHAAAA\/C9AAAcAAACgL0AABwAAAEwvQAAHAAAA8C5AAPQBAABsK0AAAAAAANBqQADQ10AAABYAAAjgQACmFUAAAOBAACoAXABBAEYAOgBcADgAMQA3ADIAMAAwADAAXABEAGkAYwBWAGUAcgBvAG4AYQA0AFAAYQByAHQAMgAuAHYAYgBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQbQAAmAAAAAQAAAGwrQAAAAAAApGZAAP\/\/\/\/8AAAAAwCtAACDgQAAAAAAAGMdUCQAAAAAAAAAAAAAAAOgeQAABAAAAoDBAAAAAAADoHkAAAQAAAPAeQAABAAAA7B5AAAIAAAD0HkAADwDiAWgAbABEH0AAHO5AAAAAAAA09mAJsDBAAMAwQADQMEAAQAAsAIgGAADgMEAA\/\/\/\/\/wA=","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":54,"pkt":"IOUqtpPxAAgCHEeuCABFAAAoBlZAAIAGv\/AKCRlluWJXucAtAFB7PMIsLy4qzlAQ+vAodwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2257{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","pkt_oversize":false,"pkt_ts":1569434904,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap","flow_id":0,"flow_packet_id":534,"flow_first_seen":1569434903040,"flow_last_seen":1569434972556,"flow_tot_l4_data_len":511293,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":957,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.25.101","dst_ip":"185.98.87.185","src_port":49197,"dst_port":80,"l4_proto":"tcp"}
+0157{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/exe_download_as_png.pcap"}
diff --git a/tests/result/nDPId_facebook.pcap.txt b/tests/result/nDPId_facebook.pcap.txt
new file mode 100644
index 000000000..a85d055c1
--- /dev/null
+++ b/tests/result/nDPId_facebook.pcap.txt
@@ -0,0 +1,41 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1472393122365,"flow_last_seen":1472393122365,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":74,"pkt":"mAyC0zx8MFLLbJwbCABFAAA84M9AAEAGjxHAqCsSQtycRMtiAbv14btyAAAAAKACchDLCQAAAgQFtAQCCAoAS1u9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":74,"pkt":"MFLLbJwbmAyC0zx8CABFAAA8AABAAE0GYuFC3JxEwKgrEgG7y2LsHfNy9eG7c6ASNpzIhwAAAgQFeAQCCAq7uwhkAEtbvQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NBAAEAGjxjAqCsSQtycRMtiAbv14btz7B3zc4AQAOXLAQAAAQEICgBLXBi7uwhk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":262,"pkt":"mAyC0zx8MFLLbJwbCABFAAD44NFAAEAGjlPAqCsSQtycRMtiAbv14btz7B3zc4AYAOXLxQAAAQEICgBLXBi7uwhkFgMBAL8BAAC7AwNbh8URkho8fraMBpv52BLid6sw70NU5sSdt5TqEulpNAAAGsArwC\/MqcyowArACcATwBQAMwA5AC8ANQAKAQAAeAAAABEADwAADGZhY2Vib29rLmNvbQAXAAD\/AQABAAAKAAgABgAXABgAGQALAAIBAAAjAAAzdAAAABAAFwAVAmgyCHNwZHkvMy4xCGh0dHAvMS4xAAUABQEAAAAAAA0AGAAWBAEFAQYBAgEEAwUDBgMCAwUCBAICAg==","pkt_caplen":262,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1472393122365,"flow_last_seen":1472393122668,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":32,"flow_max_l4_data_len":228,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"facebook.com","ja3":"bfcc1a3891601edb4f137ab7ab25b840","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}}
+0396{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":66,"pkt":"MFLLbJwbmAyC0zx8CABFAAA0+htAAE0GaM1C3JxEwKgrEgG7y2LsHfNz9eG8N4AQADsrTQAAAQEICru7CXIAS1wY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2260{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1472393122365,"flow_last_seen":1472393122981,"flow_tot_l4_data_len":1792,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"facebook.com","ja3":"bfcc1a3891601edb4f137ab7ab25b840","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,spdy\/3.1,http\/1.1"}}
+0396{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NJAAEAGjxbAqCsSQtycRMtiAbv14bw37B3434AQAPvLAQAAAQEICgBLXHa7uwlz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2266{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NNAAEAGjxXAqCsSQtycRMtiAbv14bw37B3+S4AQARLLAQAAAQEICgBLXHa7uwlz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":463,"pkt":"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","pkt_caplen":463,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1472393122365,"flow_last_seen":1472393122982,"flow_tot_l4_data_len":3705,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":370,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"facebook.com","server_names":"*.facebook.com,*.facebook.net,*.fb.com,*.fbcdn.net,*.fbsbx.com,*.m.facebook.com,*.messenger.com,*.xx.fbcdn.net,*.xy.fbcdn.net,*.xz.fbcdn.net,facebook.com,fb.com,messenger.com","ja3":"bfcc1a3891601edb4f137ab7ab25b840","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=CA, L=Menlo Park, O=Facebook, Inc., CN=*.facebook.com","alpn":"h2,spdy\/3.1,http\/1.1","fingerprint":"A0:4E:AF:B3:48:C2:6B:15:A8:C1:AA:87:A3:33:CA:A3:CD:EE:C9:C9"}}
+0399{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA04NRAAEAGjxTAqCsSQtycRMtiAbv14bw37B3\/2IAQASjLAQAAAQEICgBLXHa7uwlz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":192,"pkt":"mAyC0zx8MFLLbJwbCABFAACy4NVAAEAGjpXAqCsSQtycRMtiAbv14bw37B3\/2IAYASjLfwAAAQEICgBLXHi7uwlzFgMDAEYQAABCQQSAlgFY9IZcjwQPBd3SSxYnf5W+I6IUQLtCuTFvKSoeSzJNC4vEueRm01PoOXo\/YGxo9wieuDET4bYBjDPBwwHxFAMDAAEBFgMDACgAAAAAAAAAAH5uX9yyXIxa\/zk1zAh0oKXPuwxd4KdkybU1YwbgOWCw","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0922{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393122,"pkt_len":449,"pkt":"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","pkt_caplen":449,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":324,"pkt":"MFLLbJwbmAyC0zx8CABFAAE2+h9AAE0GZ8dC3JxEwKgrEgG7y2LsHf\/Y9eG8tYAYADvLfwAAAQEICru7CtAAS1x4FgMDAMoEAADGAAKjAADAFQiR\/u1qMSyuiMG2jw0zD0BOx2ZEoC+h5yfZ\/aHoiKV3agik\/rOIcv8JwkST852oQ+ROkK1rjV\/TZjXRBB5lldDYcaKy6KlnuCIAl26B6voPrnm\/eMncwrwsOJt6ySPFwAoK1XUVBKrtRNpVUB9MB3kJyjmXk0vHN8sOa8PKBJZkPxVqY1F\/hstlsqgEtyaTW5BmX1FNIh7VpSwUBZ+UWIhRtcJRMowhsds+M2OCtUGV7eCAtsg9z0MSUxkUoQaXFAMDAAEBFgMDACgSNvkDis0ZoSTD4XoWdCm\/HywniGJgJMyf0JxvM2W\/MIyhKa7W1\/lx","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":147,"pkt":"MFLLbJwbmAyC0zx8CABFAACF+iBAAE0GaHdC3JxEwKgrEgG7y2LsHgDa9eG8tYAYADt+fAAAAQEICru7CtAAS1x4FwMDAEwSNvkDis0ZotYDEUHWuujm70FV+TWEIePaonjZDsqD2mGpm1zTEdYm0dp9+D54ih5TgReTCCLrCeU6vVxFhqVpVAMMpplemlzSyeZD","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1472393123550,"flow_last_seen":1472393123550,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":74,"pkt":"mAyC0zx8MFLLbJwbCABFAAA8dR1AAEAGZLPAqCsSHw1WJK5GAbsvASg9AAAAAKACchBhGgAAAgQFtAQCCAoAS10gAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":74,"pkt":"MFLLbJwbmAyC0zx8CABFAAA8AABAAFMGxtAfDVYkwKgrEgG7rkZw6dh2LwEoPqASNpwMewAAAgQFeAQCCAolRdDWAEtdIAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA0dR5AAEAGZLrAqCsSHw1WJK5GAbsvASg+cOnYd4AQAOVhEgAAAQEICgBLXUglRdDW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1100{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1472393123550,"flow_last_seen":1472393123683,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.facebook.com","ja3":"5c60e71f1b8cd40e4d40ed5b6d666e3f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}}
+0397{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":66,"pkt":"MFLLbJwbmAyC0zx8CABFAAA0CRtAAFMGvb0fDVYkwKgrEgG7rkZw6dh3LwEqQ4AQADtuqgAAAQEICiVF0WwAS11I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":212,"pkt":"MFLLbJwbmAyC0zx8CABFAADGCRxAAFMGvSofDVYkwKgrEgG7rkZw6dh3LwEqQ4AYADv9TQAAAQEICiVF0WwAS11IFgMDAFoCAABWAwOyE6NOKTMBswvrpLFOz1jmB39VCfqFE6Rr+kbsG3T56yDpbumLT\/pcQV4Yd+w5nmyQiqDe8maQl\/9twNFsjvN1qMArAAAO\/wEAAQAAEAAFAAMCaDIUAwMAAQEWAwMAKPBm4AzPMe30kcGHV47ykMueUWB5RUjEcIK30bhxhSXw4FWjRJShiRs=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0801{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1472393123550,"flow_last_seen":1472393123838,"flow_tot_l4_data_len":871,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.facebook.com","ja3":"5c60e71f1b8cd40e4d40ed5b6d666e3f","ja3s":"96681175a9547081bf3d417f1a572091","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,spdy\/3.1,http\/1.1"}}
+0397{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA0dSBAAEAGZLjAqCsSHw1WJK5GAbsvASpDcOnZCYAQAO1hEgAAAQEICgBLXXclRdFs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":117,"pkt":"mAyC0zx8MFLLbJwbCABFAABndSFAAEAGZITAqCsSHw1WJK5GAbsvASpDcOnZCYAYAO1hRQAAAQEICgBLXXclRdFsFAMDAAEBFgMDACgAAAAAAAAAAFa8+ZgbktrV2bEUW\/LVlxKn8iTxi1uR4wfFZ6+jvK3W","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0922{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":452,"pkt":"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","pkt_caplen":452,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":147,"pkt":"MFLLbJwbmAyC0zx8CABFAACFCR1AAFMGvWofDVYkwKgrEgG7rkZw6dkJLwEqdoAYADutnAAAAQEICiVF0eUAS113FwMDAEzwZuAMzzHt9dBCSzHivMG3r6DcPFwF6hAddU2BOvgL3UVkvvQZQWHGSV5E6RK\/5NRZRuZrMhIYTnxkF4rTCUgunoD1ESvrgLjPuiSv","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":104,"pkt":"mAyC0zx8MFLLbJwbCABFAABadSNAAEAGZI\/AqCsSHw1WJK5GAbsvASv4cOnZWoAYAO1hOAAAAQEICgBLXZ0lRdHlFwMDACEAAAAAAAAAAwfBHk\/nx32zgq2UbuqHxsqi+6uyrYxK1og=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":104,"pkt":"MFLLbJwbmAyC0zx8CABFAABaCR5AAFMGvZQfDVYkwKgrEgG7rkZw6dlaLwEr+IAYAD9eWgAAAQEICiVF0eUAS114FwMDACHwZuAMzzHt9kyPc9NsR3405p8lt7t2i+uK2btQV7qZuBY=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":108,"pkt":"MFLLbJwbmAyC0zx8CABFAABeCR9AAFMGvY8fDVYkwKgrEgG7rkZw6dmALwEr+IAYAD9ngQAAAQEICiVF0eUAS114FwMDACXwZuAMzzHt97ZyjO39DSkFoBZdHFHJZUlTmsJ7MnD+3N\/jhCYy","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393123,"pkt_len":66,"pkt":"mAyC0zx8MFLLbJwbCABFAAA0dSRAAEAGZLTAqCsSHw1WJK5GAbsvASwecOnZqoAQAO1hEgAAAQEICgBLXZ4lRdHl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2286{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","pkt_oversize":false,"pkt_ts":1472393124,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1472393122365,"flow_last_seen":1472393123665,"flow_tot_l4_data_len":5099,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":268,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"66.220.156.68","src_port":52066,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap","flow_id":1,"flow_packet_id":41,"flow_first_seen":1472393123550,"flow_last_seen":1472393124229,"flow_tot_l4_data_len":23372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":570,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"31.13.86.36","src_port":44614,"dst_port":443,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/facebook.pcap"}
diff --git a/tests/result/nDPId_fbzero-missing-lengthcheck.pcap.txt b/tests/result/nDPId_fbzero-missing-lengthcheck.pcap.txt
new file mode 100644
index 000000000..8703b1b35
--- /dev/null
+++ b/tests/result/nDPId_fbzero-missing-lengthcheck.pcap.txt
@@ -0,0 +1,6 @@
+0378{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fbzero-missing-lengthcheck.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fbzero-missing-lengthcheck.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1508836814282,"flow_last_seen":1508836814282,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":1,"l3_proto":"ip4","src_ip":"10.106.97.215","dst_ip":"157.240.13.14","src_port":44933,"dst_port":443,"l4_proto":"tcp"}
+0564{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fbzero-missing-lengthcheck.pcap","pkt_oversize":false,"pkt_ts":1508836814,"pkt_len":175,"pkt":"NLNUAobF5MLR8yARCABFAAChSG1AAEAG2qoKamHXnfANDq+FAbsELzzkjFXBd4AYAKq+4gAAAQEICgB1diCKsiJ1MVFUVjDSAAAAQ0hMTwoAAABTTkkAEgAAAE5PTkMyAAAAQUVBRDYAAABTQ0lERgAAAFRJTUVKAAAAQUxQTk4AAABQVUJTbgAAAFZFUlNyAAAAS0VYU3YAAABSU0laegAAAGdyYXBoLmZhY2Vibw==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fbzero-missing-lengthcheck.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1508836814282,"flow_last_seen":1508836814282,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":1,"l3_proto":"ip4","src_ip":"10.106.97.215","dst_ip":"157.240.13.14","src_port":44933,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fbzero-missing-lengthcheck.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1508836814282,"flow_last_seen":1508836814282,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":1,"l3_proto":"ip4","src_ip":"10.106.97.215","dst_ip":"157.240.13.14","src_port":44933,"dst_port":443,"l4_proto":"tcp"}
+0162{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fbzero-missing-lengthcheck.pcap"}
diff --git a/tests/result/nDPId_fix.pcap.txt b/tests/result/nDPId_fix.pcap.txt
new file mode 100644
index 000000000..9a14cf6d7
--- /dev/null
+++ b/tests/result/nDPId_fix.pcap.txt
@@ -0,0 +1,186 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1493755109242,"flow_last_seen":1493755109242,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":118,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":118,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":43594,"l4_proto":"tcp"}
+0512{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":152,"pkt":"THK5MeMlACJNe\/gxCABFAACKT3MAAPUGlw4IERYfwKgAFA+gqko3bYCMRQ1qAYAY\/\/+s3wAAAQEICsq+JozkIvOrOD1PATk9MDA3NQEzNT1HAQIgAAANgQxAKWj1wo9cKQAAAAEAABRnDEBj4euA7PpqAAAAAQAADiEMQENwo99tuUEAAAABAAAMAwxAYm64YJmdywAAAAE=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1493755109242,"flow_last_seen":1493755109242,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":118,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":118,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":43594,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0394{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04yxAAEAGeKvAqAAUCBEWH6pKD6BFDWoBN22A4oAQ\/+CtQgAAAQEICuQi8\/bKviaM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":91,"pkt":"THK5MeMlACJNe\/gxCABFAABNT3sAAPUGl0MIERYfwKgAFA+gqko3bYDiRQ1qAYAY\/\/8cMQAAAQEICsq+JozkIvOrOD1PATk9MDAxNAEzNT1QAQA4AAAUjFEGgw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04y1AAEAGeKrAqAAUCBEWH6pKD6BFDWoBN22A+4AQ\/+CtKQAAAQEICuQi8\/bKviaM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1493755109264,"flow_last_seen":1493755109264,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47968,"l4_proto":"tcp"}
+0434{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":96,"pkt":"THK5MeMlACJNe\/gxCABFAABSVaMAAPUGkRYIERYfwKgAFA+gu2Bwv8eLGL2htoAY\/\/8FlAAAAQEICsq+JqLD2CKPOD1PATk9MDAxOQEzNT1QAQBgAAAA1ygEAAAC+SgE","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1493755109264,"flow_last_seen":1493755109264,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47968,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0394{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQVAAEAGvtLAqAAUCBEWH7tgD6AYvaG2cL\/HqYAQ\/+ACDgAAAQEICsPYIsvKviai","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":1493755109301,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45578,"l4_proto":"tcp"}
+0428{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABPilIAADIGAaLQ9WsDwKgAFA+gsgqYEHEay+C1D1AYXjiwMAAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":1493755109301,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45578,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0386{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPdAAEAGESTAqAAU0PVrA7IKD6DL4LUPmBBxQVAQ\/\/9nMgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":1493755109301,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47952,"l4_proto":"tcp"}
+0488{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":133,"pkt":"THK5MeMlACJNe\/gxCABFAAB3JWUAAPUGwS8IERYfwKgAFA+gu1Cc6Eb967pj5oAY\/\/+1oAAAAQEICsq+Jsaxc69UOD1GSVguNC4xATk9MDAwMDQxATM1PTABMzQ9MDA2MTI3ATQzPU4BNTI9MjAxNzA1MDItMTk6NTg6MjkBMTA9MTEzAQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1493755109301,"flow_last_seen":1493755109301,"flow_tot_l4_data_len":99,"flow_min_l4_data_len":99,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":99,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47952,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0498{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":140,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+LPhAAEAGEM3AqAAU0PVrA7IKD6DL4LUPmBBxQVAY\/\/8uDQAAOD1GSVhDT01QATk9NzEBeJwNx7ENgDAMBED9QER+x684kdwisQEtDR0N+xdw3WXtx9miEbPMQugqQ48\/iuGQlxuHyXzjXMrlCdLrvt4HtKKED90WDdY=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04B5AAEAGe7nAqAAUCBEWH7tQD6DrumPmnOhHQIAQ\/+BBSgAAAQEICrFztPLKvibG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":169,"pkt":"THK5MeMlACJNe\/gxCABFAACbilMAADIGAVXQ9WsDwKgAFA+gsgqYEHFBy+C1D1AYXjh7AwAAOD1PATk9MDAxOQEzNT1QAQBgAAAAEiZl+XgqbZqYOD1PATk9MDAxNgEzNT1QAQBIAAAAEiMAk8A4OD1PATk9MDAyMAEzNT1QAQBoAAAAEicA\/o\/4Kj\/T2Dg9TwE5PTAwMTYBMzU9UAEASAAAABIjAQ3SOA==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAoilQAADIGAcfQ9WsDwKgAFA+gsgqYEHG0y+C1ZVAQXjgIMQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":101,"pkt":"THK5MeMlACJNe\/gxCABFAABXdbIAAPUGcQIIERYfwKgAFA+gu2Bwv8epGL2htoAY\/\/9rRwAAAQEICsq+JwbD2CLLOD1PATk9MDAyNAEzNT1HAQCIAAAA1gw\/8YUeuFHrhQAAAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":92,"pkt":"THK5MeMlACJNe\/gxCABFAABOdbQAAPUGcQkIERYfwKgAFA+gu2Bwv8fMGL2htoAY\/\/8MbwAAAQEICsq+JwbD2CLLOD1PATk9MDAxNQEzNT1QAQBAAAAAMCQGKA4=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQZAAEAGvtHAqAAUCBEWH7tgD6AYvaG2cL\/HzIAQ\/+ABaQAAAQEICsPYIunKvicG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQdAAEAGvtDAqAAUCBEWH7tgD6AYvaG2cL\/H5oAQ\/+ABTwAAAQEICsPYIunKvicG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPlAAEAGESLAqAAU0PVrA7IKD6DL4LVlmBBxtFAQ\/\/9maQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1493755109440,"flow_last_seen":1493755109440,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45584,"l4_proto":"tcp"}
+0425{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":89,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzMAADIGwMTQ9WsDwKgAFA+gshDsZRC0r0wvBlAYWghECQAAOD1PATk9MDAyNAEzNT1HAQCIAAAAVgxAWLVwoAAAAAAAAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1493755109440,"flow_last_seen":1493755109440,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45584,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0386{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkFAAEAG\/9nAqAAU0PVrA7IQD6CvTC8G7GUQ11AQo65yMAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0995{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":511,"pkt":"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","pkt_caplen":511,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPpAAEAGESHAqAAU0PVrA7IKD6DL4LVlmBBzfVAQ\/\/9koAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":101,"pkt":"THK5MeMlACJNe\/gxCABFAABXn+0AAPUGRscIERYfwKgAFA+gu2Bwv8fmGL2htoAY\/\/+1MAAAAQEICsq+J2rD2CLpOD1PATk9MDAyNAEzNT1HAQCIAAAAQQw\/51h5Pdl\/YwAAAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":100,"pkt":"THK5MeMlACJNe\/gxCABFAABWn\/kAAPUGRrwIERYfwKgAFA+gu2Bwv8gJGL2htoAY\/\/\/VPAAAAQEICsq+J2rD2CLpOD1PATk9MDAyMwEzNT1QAQCAAAAAAyAaAAAANCUBOCkD9g==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQhAAEAGvs\/AqAAUCBEWH7tgD6AYvaG2cL\/ICYAQ\/+AAqgAAAQEICsPYIwfKvidq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQlAAEAGvs7AqAAUCBEWH7tgD6AYvaG2cL\/IK4AQ\/+AAiAAAAQEICsPYIwfKvidq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbroEAAPUGOC8IERYfwKgAFA+gqko3bYD7RQ1qAYAY\/\/9THwAAAQEICsq+J4fkIvP2OD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":152,"pkt":"THK5MeMlACJNe\/gxCABFAACKrpsAAPUGN+YIERYfwKgAFA+gqko3bYEiRQ1qAYAY\/\/\/LDQAAAQEICsq+J4fkIvP2OD1PATk9MDA3NQEzNT1HAQIgAAAPmgxAVgj1vl2eQQAAAAEAAAw8DEBsIuE\/SpirAAAAAQAADVsMQGQMzMA3kxQAAAABAAAMNAxAWWZmXgLqlgAAAAE=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04y5AAEAGeKnAqAAUCBEWH6pKD6BFDWoBN22BIoAQ\/+CrvAAAAQEICuQi9EHKvieH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04y9AAEAGeKjAqAAUCBEWH6pKD6BFDWoBN22BeIAQ\/+CrZgAAAQEICuQi9EHKvieH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":151,"pkt":"ACJNe\/gxTHK5MeMlCABFAACJ4zBAAEAGeFLAqAAUCBEWH6pKD6BFDWoBN22BeIAY\/+ChJgAAAQEICuQi9EHKvieHOD1GSVhDT01QATk9NzABeJwFwbENgDAMBEB5IKJ\/xyZOpG+R2ICWho6G\/QvuSsd5tWi0KSDSegrWQ2DW6JYuBwcSvnGurOVlpOu5v9cIcaf93gcN2Q==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0615{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":230,"pkt":"THK5MeMlACJNe\/gxCABFAADYilYAADIGARXQ9WsDwKgAFA+gsgqYEHN9y+C1ZVAYXjhm3QAAOD1PATk9MDAyMAEzNT1QAQBoAAAAEiZeWFgrAJD1YDg9TwE5PTAwMTUBMzU9UAEAQAAAABIiR3T4OD1PATk9MDAyMAEzNT1QAQBoAAAAEiY4MrgrAL68IDg9TwE5PTAwMjABMzU9UAEAaAAAABImMJGYKwDVn4A4PU8BOT0wMDIwATM1PVABAGgAAAASJiYloCsA3UCgOD1PATk9MDAxNQEzNT1QAQBAAAAAEiIehIA=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPtAAEAGESDAqAAU0PVrA7IKD6DL4LVlmBB0LVAQ\/\/9j8AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0txoAAPUGL70IERYfwKgAFA+gqko3bYF4RQ1qVoAQ\/\/+q4AAAAQEICsq+J5nkIvRB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":233,"pkt":"THK5MeMlACJNe\/gxCABFAADbilcAADIGARHQ9WsDwKgAFA+gsgqYEHQty+C1ZVAYXjj1cwAAOD1PATk9MDA1OAEzNT1HAQGYAAABbQw\/78AvL5h0AAAAAAEAAAAODD\/0skyDZlFuAAAAAQAAAGMMP\/CHqNZNfw8AAAABOD1PATk9MDAxNgEzNT1QAQBIAAAAEisA5OHAOD1PATk9MDAyMAEzNT1QAQBoAAAAEiYPQkArAPQkADg9TwE5PTAwNDEBMzU9RwEBEAAAAWEMQF6aj2Bas6sAAAABAAAABQxAXAHbHp8neAAAAAE=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLPxAAEAGER\/AqAAU0PVrA7IKD6DL4LVlmBB04FAQ\/\/9jPQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":92,"pkt":"THK5MeMlACJNe\/gxCABFAABOzkUAAPUGGHgIERYfwKgAFA+gu2Bwv8grGL2htoAY\/\/8K7AAAAQEICsq+J87D2CMHOD1PATk9MDAxNQEzNT1QAQBAAAAAPiQDKCM=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQpAAEAGvs3AqAAUCBEWH7tgD6AYvaG2cL\/IRYAQ\/+D\/6wAAAQEICsPYIyXKvifO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":143,"pkt":"THK5MeMlACJNe\/gxCABFAACBilgAADIGAWrQ9WsDwKgAFA+gsgqYEHTgy+C1ZVAYXjhSGwAAOD1PATk9MDAxNgEzNT1QAQBIAAAAEisA7ILgOD1PATk9MDAxOQEzNT1QAQBgAAAAEgVVWCMBaV+4OD1PATk9MDAyMQEzNT1QAQBwAAAAEicBYb6YKwD0JAA=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLP1AAEAGER7AqAAU0PVrA7IKD6DL4LVlmBB1OVAQ\/\/9i5AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":110,"pkt":"THK5MeMlACJNe\/gxCABFAABgilkAADIGAYrQ9WsDwKgAFA+gsgqYEHU5y+C1ZVAYXjgdegAAOD1PATk9MDAxOAEzNT1QAQBYAAAAEgVVWSIPQkA4PU8BOT0wMDE2ATM1PVABAEgAAAASKwDk4cA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1493755109654,"flow_last_seen":1493755109654,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47962,"l4_proto":"tcp"}
+0449{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbr+gAAPUGNsgIERYfwKgAFA+gu1oMn5kifDan54AY\/\/9QgQAAAQEICsq+KCgaP0xfOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1493755109654,"flow_last_seen":1493755109654,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47962,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0394{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA07JVAAEAGb0LAqAAUCBEWH7taD6B8NqfnDJ+ZSYAQhgAbHwAAAQEICho\/VIrKvigo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":152,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK7JZAAEAGbuvAqAAUCBEWH7taD6B8NqfnDJ+ZSYAYhgDh+QAAAQEICho\/VIrKvigoOD1GSVhDT01QATk9NzEBeJwNx7ENgDAMBED9QER+x684kdwisQEtDR0N+xdw3WXtx9miEbPMQugqQ48\/iuGQlxuHyXzjXMrlCdLrvt4HtKKED90WDdY=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":135,"pkt":"THK5MeMlACJNe\/gxCABFAAB57E0AAPUG+kQIERYfwKgAFA+gu2Bwv8hFGL2htoAY\/\/9dtAAAAQEICsq+KDPD2CMlOD1PATk9MDA1OAEzNT1QAQGYAAAAPxVYGakAuoAAAD9SAlu8AAAANAUlSCUHog0lSSkBDwAAAD4FWBgkYigrAAAAMCAO","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0nQtAAEAGvszAqAAUCBEWH7tgD6AYvaG2cL\/IioAQ\/+D\/IgAAAQEICsPYI0TKvigz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0vboAAPUGKR0IERYfwKgAFA+gu1oMn5lJfDaoPYAQ\/\/+gsgAAAQEICsq+KD8aP1SK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":169,"pkt":"THK5MeMlACJNe\/gxCABFAACbFWEAAPUG0Q8IERYfwKgAFA+gqko3bYF4RQ1qVoAY\/\/8vNAAAAQEICsq+KIHkIvRBOD1PATk9MDA5MgEzNT1HAQKoAAAGUQxAJ2FHrhR64QAAAAEAAAaEDEBjFCkAPuohAAAAAQAADCUMQEMlHsC1Z1UAAAABAAAMBAxAbdfW\/8EV3wAAAAEAAA19DEBHgo9cKPXDAAAAAQ==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":91,"pkt":"THK5MeMlACJNe\/gxCABFAABNIFoAAPUGxmQIERYfwKgAFA+gu2Bwv8iKGL2htoAY\/\/+F4wAAAQEICsq+KJfD2CNEOD1PATk9MDAxNAEzNT1QAQA4AAAFBykKog==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04zFAAEAGeKbAqAAUCBEWH6pKD6BFDWpWN22B34AQ\/+CpWAAAAQEICuQi9JnKviiB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":89,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzQAADIGwMPQ9WsDwKgAFA+gshDsZRDXr0wvBlAYWgiDjAAAOD1PATk9MDAyNAEzNT1HAQCIAAAAWQxAldWZn+Q2dgAAAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkJAAEAG\/9jAqAAU0PVrA7IQD6CvTC8G7GUQ+lAQo65yDQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":169,"pkt":"THK5MeMlACJNe\/gxCABFAACbX0YAAPUGhyoIERYfwKgAFA+gqko3bYHfRQ1qVoAY\/\/\/cJwAAAQEICsq+KXvkIvSZOD1PATk9MDA5MgEzNT1HAQKoAAAOCwxATgPXAdn00wAAAAEAAAwHDEBRTCj+JgstAAAAAQAABssMQIyfwoAn2IwAAAABAAAGwwxAXmrhP0qYqwAAAAEAABDTDEBd564hEBsAAAAAAQ==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755109,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04zJAAEAGeKXAqAAUCBEWH6pKD6BFDWpWN22CRoAQ\/+CnuQAAAQEICuQi9NfKvil7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABPyzUAADIGwL7Q9WsDwKgAFA+gshDsZRD6r0wvBlAYWghiwwAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkNAAEAG\/9fAqAAU0PVrA7IQD6CvTC8G7GURIVAQo65x5gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":141,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB\/PkRAAEAG\/3\/AqAAU0PVrA7IQD6CvTC8G7GURIVAYo64pmAAAOD1GSVhDT01QATk9NzIBeJwNxzkOgDAMBEDtg4i8jpcckttI\/ICWho6G\/xcw3fRcx1miECPNQqhKQ40\/iuaQpxubyXzjmOrTB0jP+3of0JLa8QHdKg3Y","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAoyzYAADIGwOTQ9WsDwKgAFA+gshDsZREhr0wvXVAQWgi7NQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":186,"pkt":"THK5MeMlACJNe\/gxCABFAACs6yIAAPUG+zwIERYfwKgAFA+gqko3bYJGRQ1qVoAY\/\/\/H0wAAAQEICsq+KnbkIvTXOD1PATk9MDEwOQEzNT1HAQMwAAANgQxAKWj1wo9cKQAAAAEAABRnDEBj4euA7PpqAAAAAQAABfIMQERMzLwF1SwAAAABAAAOIQxAQ3Cj3225QQAAAAEAAAwDDEBibrhgmZ3LAAAAAQAAA44MQDGMzLwF1SwAAAAB","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1493755110320,"flow_last_seen":1493755110320,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38652,"l4_proto":"tcp"}
+0485{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":131,"pkt":"THK5MeMlACJNe\/gxCABFAAB1U\/wAADIGN9LQ9WsDwKgAFA+glvwzTd9PWnk+l1AYb96N\/wAAOD1PATk9MDA2NgEzNT1HAQHYAAAABVkI5OEMFeFiPZCEMAATlYJyAAAABFkI5OEMFVZHfdCEMAATwIJ3AAAABlkI5OEIW+2APQJxEAQ=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1493755110320,"flow_last_seen":1493755110320,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38652,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1493755110328,"flow_last_seen":1493755110328,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40918,"l4_proto":"tcp"}
+0453{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABb5\/wAAPUG\/rMIERYfwKgAFA+gn9aNJ1RO\/ryrG4AY\/\/8NBQAAAQEICsq+KsnWRqh9OD1PATk9MDAyOAEzNT1HAQCoAAAAAVkI5OEMBKkS\/dCEMAAJlIEx","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1493755110328,"flow_last_seen":1493755110328,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40918,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0397{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9ZAAEAG7AHAqAAUCBEWH5\/WD6D+vKsbjSdUdYAQ\/\/\/knQAAAQEICtZGrHjKvirJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouAtAAEAGhg\/AqAAU0PVrA5b8D6BaeT6XM03fnFAQ\/GxkGwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":89,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzcAADIGwMDQ9WsDwKgAFA+gshDsZREhr0wvXVAYWghDRQAAOD1PATk9MDAyNAEzNT1HAQCIAAAAVgxAWLVwoAAAAAAAAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkVAAEAG\/9XAqAAU0PVrA7IQD6CvTC9d7GURRFAQo65xbAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":89,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzgAADIGwL\/Q9WsDwKgAFA+gshDsZRFEr0wvXVAYWgiCyAAAOD1PATk9MDAyNAEzNT1HAQCIAAAAWQxAldWZn+Q2dgAAAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755110,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkZAAEAG\/9TAqAAU0PVrA7IQD6CvTC9d7GURZ1AQo65xSQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755111,"pkt_len":126,"pkt":"THK5MeMlACJNe\/gxCABFAABwiaEAAPUGXPoIERYfwKgAFA+gn9aNJ1R1\/ryrG4AY\/\/+zfAAAAQEICsq+Lw\/WRqx4OD1PATk9MDA0OQEzNT1HAQFQAAAADVkI5OEMFgYg3VCIUAATiYF3AAAADFkI5OEMB9wg3RAAEAATiYAA","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755111,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9dAAEAG7ADAqAAUCBEWH5\/WD6D+vKsbjSdUsYAQ\/\/\/e0wAAAQEICtZGrcDKvi8P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1493755111956,"flow_last_seen":1493755111956,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38646,"l4_proto":"tcp"}
+0432{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755111,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP7\/wAADIGm\/fQ9WsDwKgAFA+glvYLJrChYuT9OVAYYmg1SgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1493755111956,"flow_last_seen":1493755111956,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38646,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0387{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755111,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPOZAAEAGATXAqAAU0PVrA5b2D6Bi5P05CyawyFAQ\/Gz0DgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755111,"pkt_len":139,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9POdAAEAGAN\/AqAAU0PVrA5b2D6Bi5P05CyawyFAY\/GyQmgAAOD1GSVhDT01QATk9NzABeJwFwTEKgEAMBEDyII\/dJIu5g7SCP7C1sbPx\/4Uz1cd5jRy02UDKQg2LbFAVafJ2cIfgG+dSraCR3s\/9vUY05fYD3SIN0A==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755112,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbUHoAAPUGljYIERYfwKgAFA+gn9aNJ1Sx\/ryrG4AY\/\/8jgwAAAQEICsq+MWbWRq3AOD1PATk9MDAyOAEzNT1HAQCoAAAAClkI5OEMBKcgnRAAEAATiYAA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755112,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9hAAEAG6\/\/AqAAUCBEWH5\/WD6D+vKsbjSdU2IAQ\/\/\/bogAAAQEICtZGrnPKvjFm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755112,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo7\/0AADIGnB3Q9WsDwKgAFA+glvYLJrDIYuT9jlAQYmiNvgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1493755113353,"flow_last_seen":1493755113353,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":39094,"l4_proto":"tcp"}
+0431{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP8tQAADIGmR\/Q9WsDwKgAFA+gmLZKUJEYQJIHD1AYWpQ0OgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1493755113353,"flow_last_seen":1493755113353,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":39094,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0496{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":138,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB8GO1AAEAGJNrAqAAU0PVrA5i2D6BAkgcPSlCRP1AY\/\/\/ZrgAAOD1GSVhDT01QATk9NjkBeJwFwTsKgEAQA1ByICWZnbAfmFbwBrY2djbev\/C9Ucd57bkLs8g0motoWZR7Co4KqtOMTXN5rBaQop77eyGWTPzcug3M","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8tUAADIGmUXQ9WsDwKgAFA+gmLZKUJE\/QJIHY1AQWpSMrwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbkAcAAPUGVqkIERYfwKgAFA+gn9aNJ1TY\/ryrG4AY\/\/98qAAAAQEICsq+N3DWRq5zOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9lAAEAG6\/7AqAAUCBEWH5\/WD6D+vKsbjSdU\/4AQ\/\/\/ToQAAAQEICtZGsEPKvjdw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":151,"pkt":"ACJNe\/gxTHK5MeMlCABFAACJb9pAAEAG66jAqAAUCBEWH5\/WD6D+vKsbjSdU\/4AY\/\/\/eYAAAAQEICtZGsEPKvjdwOD1GSVhDT01QATk9NzABeJwFwbENgDAQA0D9QET2J4YkkttIbEBLQ0fD\/gV33eu8SiuMYaApqoyozaD6jlA6wQNCbhxTfdYMMv3c3xuEqYwf3RAN0A==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755113,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0m3MAAPUGS2QIERYfwKgAFA+gn9aNJ1T\/\/ryrcIAQ\/\/\/TNQAAAQEICsq+N4fWRrBD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755114,"pkt_len":143,"pkt":"ACJNe\/gxTHK5MeMlCABFAACB4B9AAEAGe2vAqAAUCBEWH7tQD6DrumPmnOhHQIAY\/+BrUwAAAQEICrFzuwzKvibGOD1GSVhDT01QATk9NjIBeJwNx8ENwDAIA0B5oEYGQxMi8Y3UDbr\/JO39bvV53hHDUE3qhrIJxZ+smkhvp00m\/bLaubYEYzOED2YPC2I=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755114,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA00NgAAPUGFf8IERYfwKgAFA+gu1Cc6EdA67pkM4AQ\/\/8mWgAAAQEICsq+OzCxc7sM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755115,"pkt_len":135,"pkt":"THK5MeMlACJNe\/gxCABFAAB5U\/0AADIGN83Q9WsDwKgAFA+glvwzTd+cWnk+l1AYb976PQAAOD1PATk9MDA3MAEzNT1HAQH4AAAABVkI5OYMFeFg3lAEMAATioF3AAAABFkI5OYMFVZgnhAAEAATiYAAAAAABlkI5OYMW+2AXhAAEAQTiIAA","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755115,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouAxAAEAGhg7AqAAU0PVrA5b8D6BaeT6XM03f7VAQ\/GxjygAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755115,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbk4wAAPUGUyQIERYfwKgAFA+gn9aNJ1T\/\/ryrcIAY\/\/8W+gAAAQEICsq+P5\/WRrBDOD1PATk9MDAyOAEzNT1HAQCoAAAAAVkI5OYMBKkBnnAEEAAAfYAA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755115,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9tAAEAG6\/zAqAAUCBEWH5\/WD6D+vKtwjSdVJoAQ\/\/\/IdAAAAQEICtZGssXKvj+f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":89,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzkAADIGwL7Q9WsDwKgAFA+gshDsZRFnr0wvXVAYWghtswAAOD1PATk9MDAyNAEzNT1HAQCIAAAAWQxAldUzQAuIygAAAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoPkdAAEAG\/9PAqAAU0PVrA7IQD6CvTC9d7GURilAQo65xJgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbCkwAAPUG3GQIERYfwKgAFA+gn9aNJ1Um\/ryrcIAY\/\/\/qjgAAAQEICsq+QzHWRrLFOD1PATk9MDAyOAEzNT1HAQCoAAAADVkI5OYMFgYg3jAEMAATiYB9","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA0b9xAAEAG6\/vAqAAUCBEWH5\/WD6D+vKtwjSdVTYAQ\/\/\/DtgAAAQEICtZGs8rKvkMx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1493755116662,"flow_last_seen":1493755116662,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"217.192.86.32","dst_ip":"192.168.0.20","src_port":4000,"dst_port":53330,"l4_proto":"tcp"}
+0431{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP0h0AAC8GyO7ZwFYgwKgAFA+g0FJoqda4F+2kj1AYRRhFXQAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1493755116662,"flow_last_seen":1493755116662,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"217.192.86.32","dst_ip":"192.168.0.20","src_port":4000,"dst_port":53330,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0499{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":139,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9Lt9AAEAGGv\/AqAAU2cBWINBSD6AX7aSPaKnW31AYhgAmIwAAOD1GSVhDT01QATk9NzABeJwFwTsKgEAMBFByIJeZJMN+IK2wN7C1sbPx\/oXvjTr31bLRZgEpCxUsskD1SJOXgx2CH5xLY4WM9Hru7zWiKNkP3UcN1g==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755116,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo0h4AAC8GyRTZwFYgwKgAFA+g0FJoqdbfF+2k5FAQRRid0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":126,"pkt":"THK5MeMlACJNe\/gxCABFAABw0W4AAPUGFS0IERYfwKgAFA+gn9aNJ1VN\/ryrcIAY\/\/\/t8QAAAQEICsq+ROvWRrPKOD1PATk9MDA0OQEzNT1HAQFQAAAAClkI5OYMBKcg3hAAEAATiYAAAAAADFkI5OYMB9wgnhAAEAATiYAA","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":153,"pkt":"ACJNe\/gxTHK5MeMlCABFAACLGO5AAEAGJMrAqAAU0PVrA5i2D6BAkgdjSlCRP1AY\/\/946wAAOD1GSVhDT01QATk9ODQBeJwVxzEKgDAMRmFyIEv+pKltIWvBVRy8QAdHUcHjW9\/y8bK3ZQ8xgIozJyY1B2kc80cmLoyZjWVCqZarJgLE2\/Fu\/brXfj4DhVghsCNm+gDp7BLR","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":89,"pkt":"THK5MeMlACJNe\/gxCABFAABLyzoAADIGwL3Q9WsDwKgAFA+gshDsZRGKr0wvXVAYWggu3AAAOD1PATk9MDAyNAEzNT1HAQCIAAAAVgxAWLWEoAAAAAAAAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8tYAADIGmUTQ9WsDwKgAFA+gmLZKUJE\/QJIHxlAQWpSMTAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":108,"pkt":"THK5MeMlACJNe\/gxCABFAABe8tcAADIGmQ3Q9WsDwKgAFA+gmLZKUJE\/QJIHxlAYWpTOmAAAOD1GSVguNC4xATk9MDAwMjkBMzU9MAExMTI9Rml4VGVzdFJlcXVlc3QzMTI1OQExMD0yMzYB","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoGO9AAEAGJSzAqAAU0PVrA5i2D6BAkgfGSlCRdVAQ\/\/\/mqgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1493755117668,"flow_last_seen":1493755117668,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40928,"l4_proto":"tcp"}
+0452{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABb6MoAAPUG\/eUIERYfwKgAFA+gn+AbjTX8bvFE4oAY\/\/8xhAAAAQEICsq+R3VyD9Q7OD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1493755117668,"flow_last_seen":1493755117668,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40928,"l4_proto":"tcp","ndpi": {"proto":"FIX","category":"RPC"}}
+0518{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":152,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK1yxAAEAGhFXAqAAUCBEWH5\/gD6Bu8UTiG402I4AY\/+CkEwAAAQEICnIP3\/PKvkd1OD1GSVhDT01QATk9NzEBeJwFwbENgDAMBEB5IKJ\/Ow5OpG+R2ICWho6G\/QvuSsd5td5oU0BPixQsusCsLEuXgzsSvnGurBXDSNdzf68R4gj7Ad5tDd0=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755117,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA09L8AAPUG8hcIERYfwKgAFA+gn+AbjTYjbvFFOIAQ\/\/9+KwAAAQEICsq+R4lyD9\/z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABPU\/4AADIGN\/bQ9WsDwKgAFA+glvwzTd\/tWnk+l1AYb96XaAAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouA1AAEAGhg3AqAAU0PVrA5b8D6BaeT6XM03gFFAQ\/GxjowAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":140,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+uA5AAEAGhbbAqAAU0PVrA5b8D6BaeT6XM03gFFAY\/GygFgAAOD1GSVhDT01QATk9NzEBeJwFwTkOgDAMBEDtg4h27TiX5DYSP6CloaPh\/wUzI\/d5lVqEmWQNeCThNakY3hCWRnUG7dBcMZZ3SJbP\/b0QU434Ad3bDdc=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAoU\/8AADIGOBzQ9WsDwKgAFA+glvwzTeAUWnk+7VAQb97v2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":152,"pkt":"ACJNe\/gxTHK5MeMlCABFAACKLuBAAEAGGvHAqAAU2cBWINBSD6AX7aTkaKnW31AYhgCh7QAAOD1GSVhDT01QATk9ODMBeJwVi70KgDAMBskDWfIljf2BrAVXcfAFOjiKCj6+9Zbjhsvelj3EACrOPDOpOUjjiB8ycWEkNpYJpVqumggQb8e79ete+\/kMKWS8YEcEfem4EsM=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo0h8AAC8GyRPZwFYgwKgAFA+g0FJoqdbfF+2lRlAQRRidbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":108,"pkt":"THK5MeMlACJNe\/gxCABFAABe0iAAAC8GyNzZwFYgwKgAFA+g0FJoqdbfF+2lRlAYRRjcxQAAOD1GSVguNC4xATk9MDAwMjkBMzU9MAExMTI9Rml4VGVzdFJlcXVlc3QzMTI2MAExMD0yMjgB","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLuFAAEAGG1LAqAAU2cBWINBSD6AX7aVGaKnXFVAQhgBcUQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":179,"pkt":"THK5MeMlACJNe\/gxCABFAAClfJYAAPUGadAIERYfwKgAFA+gu1Cc6EdA67pkM4AY\/\/+VzwAAAQEICsq+S8Oxc7sMOD1GSVguNC4xATk9MDAwMDg3ATM1PVUBMzQ9MDA2MTI4ATQzPU4BNTI9MjAxNzA1MDItMTk6NTg6MzgBNjA0MD03NwExPVU0MTE5ODkBNjU2Nj0xATE1PUJBU0UBOTgwNj03OTgxLjg1ATEwPTE2OQE=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755118,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04CBAAEAGe7fAqAAUCBEWH7tQD6DrumQznOhHsYAQ\/+AQdgAAAQEICrFzwAvKvkvD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755119,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbvqcAAPUGKAkIERYfwKgAFA+gu1oMn5lJfDaoPYAY\/\/8gswAAAQEICsq+T04aP1SKOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755119,"pkt_len":152,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK7JdAAEAGburAqAAUCBEWH7taD6B8Nqg9DJ+ZcIAYhgCZHwAAAQEICho\/YEnKvk9OOD1GSVhDT01QATk9NzEBeJwNxzsKgEAMBFDmQC6ZJMN+IK3gDWxt7Gy8f6Gve6P242zZiFlmKYTKEPlH2QPycmM3mW+cS2PFAOl1X+8DWlEdH91UDdo=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755119,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0w8MAAPUGIxQIERYfwKgAFA+gu1oMn5lwfDaok4AQ\/\/9tVQAAAQEICsq+T2AaP2BJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755120,"pkt_len":131,"pkt":"THK5MeMlACJNe\/gxCABFAAB1VAAAADIGN87Q9WsDwKgAFA+glvwzTeAUWnk+7VAYb95WQgAAOD1PATk9MDA2NgEzNT1HAQHYAAAABVkI5OsMFeFjHxAAEAATnoAAAAAABFkI5OsMFVZg3xAAEAATioAAAAAABlkI5OsIW+2APwJxEAQ=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755120,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouA9AAEAGhgvAqAAU0PVrA5b8D6BaeT7tM03gYVAQ\/GxjAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755121,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP7\/4AADIGm\/XQ9WsDwKgAFA+glvYLJrDIYuT9jlAYYmg0zgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755121,"pkt_len":139,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9POhAAEAGAN7AqAAU0PVrA5b2D6Bi5P2OCyaw71AY\/Gxo9QAAOD1GSVhDT01QATk9NzABeJwFwbENgDAQA0D9QET25y2SSG6R2ICWho6G\/Qvuho\/zatUY00ApuozoZVCjK5ROcIeQG+fSWMUg08\/9vUGYqvgB3WAN1A==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755122,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo7\/8AADIGnBvQ9WsDwKgAFA+glvYLJrDvYuT941AQYmiNQgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755123,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP8tgAADIGmRvQ9WsDwKgAFA+gmLZKUJF1QJIHxlAYWpQzJgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755123,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoGPBAAEAGJSvAqAAU0PVrA5i2D6BAkgfGSlCRnFAQ\/\/\/mgwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755123,"pkt_len":140,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+GPFAAEAGJNTAqAAU0PVrA5i2D6BAkgfGSlCRnFAY\/\/9R8AAAOD1GSVhDT01QATk9NzEBeJwNyDkOgDAQA0Dtg4jsTawcklskfkBLQ0fD\/wuYcob34yytMKaBpqgyojaD6i1D6QQ7hNw4l8b6k0zf1\/sEYSrjA9z4DdA=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755123,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8tkAADIGmUHQ9WsDwKgAFA+gmLZKUJGcQJIIHFAQWpSLmQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755124,"pkt_len":143,"pkt":"ACJNe\/gxTHK5MeMlCABFAACB4CFAAEAGe2nAqAAUCBEWH7tQD6DrumQznOhHsYAY\/+AODgAAAQEICrFzxsTKvkvDOD1GSVhDT01QATk9NjIBeJwNx8kNgEAMA0C5IFbOYUhWyheJDui\/Epjf1NzPu3IZesg4ERoi8o+6C\/Jx2kXRD+ut2hkwDlP4AGY7C2Y=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755124,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0WgIAAPUGjNUIERYfwKgAFA+gu1Cc6Eex67pkgIAQ\/\/\/yzwAAAQEICsq+YkSxc8bE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755125,"pkt_len":135,"pkt":"THK5MeMlACJNe\/gxCABFAAB5VAEAADIGN8nQ9WsDwKgAFA+glvwzTeBhWnk+7VAYb95DkwAAOD1PATk9MDA3MAEzNT1HAQH4AAAABVkI5PAMFeEj0FAIUAATooLxAAAABFkI5PAMFVZg8BAAEAATioAAAAAABlkI5PAMW+1AkFAIUAQTiYPo","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755125,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouBBAAEAGhgrAqAAU0PVrA5b8D6BaeT7tM03gslAQ\/GxirwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755126,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP0iEAAC8GyOrZwFYgwKgAFA+g0FJoqdcVF+2lRlAYRRhESQAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755126,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAoLuJAAEAGG1HAqAAU2cBWINBSD6AX7aVGaKnXPFAQhgBcKgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755126,"pkt_len":140,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+LuNAAEAGGvrAqAAU2cBWINBSD6AX7aVGaKnXPFAYhgAJXwAAOD1GSVhDT01QATk9NzEBeJwNyjkOgDAQA0Dtg0D2JlYOyS0SP6CloaPh\/wWZerqP89rrzhgGqqLIiFINqhWF0gk2CLlxTPW5Dpl+7u8NwqvFD92FDdo=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755126,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo0iIAAC8GyRDZwFYgwKgAFA+g0FJoqdc8F+2lnFAQRRicvAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755127,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbJlQAAPUGwFwIERYfwKgAFA+gn+AbjTYjbvFFOIAY\/\/\/+PgAAAQEICsq+boVyD9\/zOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755127,"pkt_len":151,"pkt":"ACJNe\/gxTHK5MeMlCABFAACJ1y1AAEAGhFXAqAAUCBEWH5\/gD6Bu8UU4G402SoAY\/+A6TgAAAQEICnIP66zKvm6FOD1GSVhDT01QATk9NzABeJwFwbENgDAMBEB5IKJ\/xx+cSG6R2ICWho6G\/Qvuso7zatFos4CQdRWsR4FKTZOXgzsE3ziXcsUw0uu5v9eI4pD93qsN4Q==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755127,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0LuoAAPUGt+0IERYfwKgAFA+gn+AbjTZKbvFFjYAQ\/\/9K5gAAAQEICsq+bplyD+us","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755128,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABPVAIAADIGN\/LQ9WsDwKgAFA+glvwzTeCyWnk+7VAYb96WTQAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755128,"pkt_len":60,"pkt":"ACJNe\/gxTHK5MeMlCABFAAAouBFAAEAGhgnAqAAU0PVrA5b8D6BaeT7tM03g2VAQ\/GxiiAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755128,"pkt_len":140,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB+uBJAAEAGhbLAqAAU0PVrA5b8D6BaeT7tM03g2VAY\/GxXfgAAOD1GSVhDT01QATk9NzEBeJwFwbENgDAMBEB5IKJ\/x8ZJpG+R2ICWho6G\/Qvuho7zatFoU0Ck9RSsh8AcvSxdDhYSvnGuHCvKSNdzf68R4u72A94ZDds=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755128,"pkt_len":133,"pkt":"THK5MeMlACJNe\/gxCABFAAB3Er4AAPUG09YIERYfwKgAFA+gu1Cc6Eex67pkgIAY\/\/9PzwAAAQEICsq+ctSxc8bEOD1GSVguNC4xATk9MDAwMDQxATM1PTABMzQ9MDA2MTI5ATQzPU4BNTI9MjAxNzA1MDItMTk6NTg6NDgBMTA9MTE2AQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755128,"pkt_len":66,"pkt":"ACJNe\/gxTHK5MeMlCABFAAA04CJAAEAGe7XAqAAUCBEWH7tQD6DrumSAnOhH9IAQ\/+DdHAAAAQEICrFzy8PKvnLU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755129,"pkt_len":105,"pkt":"THK5MeMlACJNe\/gxCABFAABbipgAAPUGXBgIERYfwKgAFA+gu1oMn5lwfDaok4AY\/\/\/tTwAAAQEICsq+dnUaP2BJOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755129,"pkt_len":152,"pkt":"ACJNe\/gxTHK5MeMlCABFAACK7JhAAEAGbunAqAAUCBEWH7taD6B8NqiTDJ+Zl4AYhgDaIQAAAQEICho\/bAjKvnZ1OD1GSVhDT01QATk9NzEBeJwNx7ENgDAMBED9QER+x684kdwisQEtDR0N+xdw3WXtx9miEbPMQugqQ48\/ihGQlxuHyXzjXMoVCdLrvt4HtKImPt2SDd4=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755129,"pkt_len":66,"pkt":"THK5MeMlACJNe\/gxCABFAAA0knoAAPUGVF0IERYfwKgAFA+gu1oMn5mXfDao6YAQ\/\/858gAAAQEICsq+docaP2wI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755131,"pkt_len":93,"pkt":"THK5MeMlACJNe\/gxCABFAABP8AAAADIGm\/PQ9WsDwKgAFA+glvYLJrDvYuT941AYYmg0UgAAOD1GSVguNC4xATk9MDAwMTQBMzU9MQExMTI9ZmFybQExMD0yMTcB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755131,"pkt_len":139,"pkt":"ACJNe\/gxTHK5MeMlCABFAAB9POlAAEAGAN3AqAAU0PVrA5b2D6Bi5P3jCyaxFlAY\/GwoNwAAOD1GSVhDT01QATk9NzABeJwFwbENgDAQA0D9QET2Jw5JJLdIbEBLQ0fD\/gV3w8d5lVYY00BTVBlRm0GN2kPpBHcIuXEujSUGmX7u7w3CVI8f3Z4N2A==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","pkt_oversize":false,"pkt_ts":1493755132,"pkt_len":54,"pkt":"THK5MeMlACJNe\/gxCABFAAAo8AEAADIGnBnQ9WsDwKgAFA+glvYLJrEWYuT+OFAQYmiMxgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":2,"flow_packet_id":456,"flow_first_seen":1493755109301,"flow_last_seen":1493755132102,"flow_tot_l4_data_len":23399,"flow_min_l4_data_len":20,"flow_max_l4_data_len":477,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45578,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":4,"flow_packet_id":70,"flow_first_seen":1493755109440,"flow_last_seen":1493755131870,"flow_tot_l4_data_len":2792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":45584,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":7,"flow_packet_id":36,"flow_first_seen":1493755110328,"flow_last_seen":1493755132019,"flow_tot_l4_data_len":2072,"flow_min_l4_data_len":32,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":57,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40918,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1493755117668,"flow_last_seen":1493755127687,"flow_tot_l4_data_len":441,"flow_min_l4_data_len":32,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":40928,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":10,"flow_packet_id":11,"flow_first_seen":1493755116662,"flow_last_seen":1493755126832,"flow_tot_l4_data_len":621,"flow_min_l4_data_len":20,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"217.192.86.32","dst_ip":"192.168.0.20","src_port":4000,"dst_port":53330,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":0,"flow_packet_id":222,"flow_first_seen":1493755109242,"flow_last_seen":1493755131889,"flow_tot_l4_data_len":17013,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":76,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":43594,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":3,"flow_packet_id":10,"flow_first_seen":1493755109301,"flow_last_seen":1493755128771,"flow_tot_l4_data_len":721,"flow_min_l4_data_len":32,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":72,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47952,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":5,"flow_packet_id":10,"flow_first_seen":1493755109654,"flow_last_seen":1493755129718,"flow_tot_l4_data_len":695,"flow_min_l4_data_len":32,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":69,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47962,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":1,"flow_packet_id":401,"flow_first_seen":1493755109264,"flow_last_seen":1493755132120,"flow_tot_l4_data_len":21072,"flow_min_l4_data_len":32,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"8.17.22.31","dst_ip":"192.168.0.20","src_port":4000,"dst_port":47968,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":8,"flow_packet_id":10,"flow_first_seen":1493755111956,"flow_last_seen":1493755132007,"flow_tot_l4_data_len":572,"flow_min_l4_data_len":20,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":57,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38646,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":6,"flow_packet_id":18,"flow_first_seen":1493755110320,"flow_last_seen":1493755130355,"flow_tot_l4_data_len":1007,"flow_min_l4_data_len":20,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":38652,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap","flow_id":9,"flow_packet_id":11,"flow_first_seen":1493755113353,"flow_last_seen":1493755123449,"flow_tot_l4_data_len":621,"flow_min_l4_data_len":20,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"208.245.107.3","dst_ip":"192.168.0.20","src_port":4000,"dst_port":39094,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fix.pcap"}
diff --git a/tests/result/nDPId_ftp.pcap.txt b/tests/result/nDPId_ftp.pcap.txt
new file mode 100644
index 000000000..b9c5f0167
--- /dev/null
+++ b/tests/result/nDPId_ftp.pcap.txt
@@ -0,0 +1,51 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1552590234892,"flow_last_seen":1552590234892,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50694,"dst_port":21,"l4_proto":"tcp"}
+0409{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":78,"pkt":"EBMx8Tl2xCwDBkn+CABFAABAAABAAEAGAADAqAHUWoJGScYGABWjI5ftAAAAALAC\/\/9jegAAAgQFtAEDAwUBAQgKO1eYmQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":74,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA8AABAADYG4XRagkZJwKgB1AAVxgZYKsHSoyOX7qASqbA+KAAAAgQFrAQCCAoSZ\/tNO1eYmQEDAw4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFAAA0AABAAEAGAADAqAHUWoJGScYGABWjI5fuWCrB04AQECxjbgAAAQEICjtXmLQSZ\/tN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":86,"pkt":"xCwDBkn+EBMx8Tl2CABFAABIOodAADYGpuFagkZJwKgB1AAVxgZYKsHToyOX7oAYAAO8UwAAAQEIChJn+1Q7V5i0MjIwICh2c0ZUUGQgMy4wLjMpDQo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA0AABAAEAGAADAqAHUWoJGScYGABWjI5fuWCrB54AQECtjbgAAAQEICjtXmNESZ\/tU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":82,"pkt":"EBMx8Tl2xCwDBkn+CABFEABEAABAAEAGAADAqAHUWoJGScYGABWjI5fuWCrB54AYECtjfgAAAQEICjtXmNESZ\/tUVVNFUiBhbm9ueW1vdXMNCg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":66,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0OohAADYGpvRagkZJwKgB1AAVxgZYKsHnoyOX\/oAQAAMWNwAAAQEIChJn+1s7V5jR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":100,"pkt":"xCwDBkn+EBMx8Tl2CABFAABWOolAADYGptFagkZJwKgB1AAVxgZYKsHnoyOX\/oAYAAPO6wAAAQEIChJn+1s7V5jRMzMxIFBsZWFzZSBzcGVjaWZ5IHRoZSBwYXNzd29yZC4NCg==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA0AABAAEAGAADAqAHUWoJGScYGABWjI5f+WCrCCYAQECpjbgAAAQEICjtXmOwSZ\/tb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590234,"pkt_len":79,"pkt":"EBMx8Tl2xCwDBkn+CABFEABBAABAAEAGAADAqAHUWoJGScYGABWjI5f+WCrCCYAYECpjewAAAQEICjtXmOwSZ\/tbUEFTUyBOY0ZUUEANCg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590235,"pkt_len":66,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0OopAADYGpvJagkZJwKgB1AAVxgZYKsIJoyOYC4AQAAMV2wAAAQEIChJn+207V5js","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590235,"pkt_len":89,"pkt":"xCwDBkn+EBMx8Tl2CABFAABLOotAADYGptpagkZJwKgB1AAVxgZYKsIJoyOYC4AYAAM0PgAAAQEIChJn+3I7V5jsMjMwIExvZ2luIHN1Y2Nlc3NmdWwuDQo=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590235,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA0AABAAEAGAADAqAHUWoJGScYGABWjI5gLWCrCIIAQECljbgAAAQEICjtXmUUSZ\/ty","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590235,"pkt_len":71,"pkt":"EBMx8Tl2xCwDBkn+CABFEAA5AABAAEAGAADAqAHUWoJGScYGABWjI5gLWCrCIIAYECljcwAAAQEICjtXmUUSZ\/tyUFdEDQo=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590235,"pkt_len":66,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0OoxAADYGpvBagkZJwKgB1AAVxgZYKsIgoyOYEIAQAAMVWgAAAQEIChJn+3k7V5lF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1552590234892,"flow_last_seen":1552590235121,"flow_tot_l4_data_len":794,"flow_min_l4_data_len":32,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50694,"dst_port":21,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"anonymous","password":"NcFTP@","auth_failed":0}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1552590236580,"flow_last_seen":1552590236580,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50695,"dst_port":25685,"l4_proto":"tcp"}
+0410{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":78,"pkt":"EBMx8Tl2xCwDBkn+CABFAABAAABAAEAGAADAqAHUWoJGScYHZFXuwKKMAAAAALAC\/\/9jegAAAgQFtAEDAwUBAQgKO1efIQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":74,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA8AABAADYG4XRagkZJwKgB1GRVxgdmK2Nw7sCijaASqbDL3QAAAgQFrAQCCAoSZ\/zzO1efIQEDAw4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFAAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitjcYAQECxjbgAAAQEICjtXnzkSZ\/zz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2005{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":1271,"pkt":"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","pkt_caplen":1271,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1552590236580,"flow_last_seen":1552590236637,"flow_tot_l4_data_len":1353,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1237,"flow_avg_l4_data_len":338,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50695,"dst_port":25685,"l4_proto":"tcp","ndpi": {"proto":"FTP_DATA","category":"Download-FileTransfer-FileSharing"}}
+0393{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":66,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0n4xAADYGQfBagkZJwKgB1GRVxgdmK2gm7sCijYARAAOfgQAAAQEIChJn\/Po7V585","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitoJoAQEAZjbgAAAQEICjtXn1USZ\/z6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitoJ4AQEAZjbgAAAQEICjtXn1USZ\/z6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYHZFXuwKKNZitoJ4AREAZjbgAAAQEICjtXn1USZ\/z6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590236,"pkt_len":66,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA0n41AADYGQe9agkZJwKgB1GRVxgdmK2gn7sCijoAQAAOfXAAAAQEIChJn\/QI7V59V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1552590241545,"flow_last_seen":1552590241545,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50696,"dst_port":24523,"l4_proto":"tcp"}
+0410{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":78,"pkt":"EBMx8Tl2xCwDBkn+CABFAABAAABAAEAGAADAqAHUWoJGScYIX8sNBxpOAAAAALAC\/\/9jegAAAgQFtAEDAwUBAQgKO1eyYgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":74,"pkt":"xCwDBkn+EBMx8Tl2CABFAAA8AABAADYG4XRagkZJwKgB1F\/LxggMTnkwDQcaT6ASqbBmYgAAAgQFrAQCCAoSaAHMO1eyYgEDAw4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFAAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE55MYAQECxjbgAAAQEICjtXsn0SaAHM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeONAADYGYvlagkZJwKgB1F\/LxggMTn7RDQcaT4AQAAMzeQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":78,"pkt":"EBMx8Tl2xCwDBkn+CABFCABAAABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE55MbAQECxjegAAAQEICjtXspoSaAHMAQEFCgxOftEMToRx","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOJAADYGYvpagkZJwKgB1F\/LxggMTnkxDQcaT4AQAAM5GQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6EcYAQD9JjbgAAAQEICjtXspoSaAHT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeORAADYGYvhagkZJwKgB1F\/LxggMToRxDQcaT4AQAAMt2QAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6KEYAQEABjbgAAAQEICjtXspoSaAHT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOVAADYGYvdagkZJwKgB1F\/LxggMTooRDQcaT4AQAAMoOQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOZAADYGYvZagkZJwKgB1F\/LxggMTo+xDQcaT4AQAAMimQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6VUYAQD9NjbgAAAQEICjtXspsSaAHT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOdAADYGYvVagkZJwKgB1F\/LxggMTpVRDQcaT4AQAAMc+QAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":66,"pkt":"EBMx8Tl2xCwDBkn+CABFCAA0AABAAEAGAADAqAHUWoJGScYIX8sNBxpPDE6a8YAQEABjbgAAAQEICjtXspsSaAHT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","pkt_oversize":false,"pkt_ts":1552590241,"pkt_len":1506,"pkt":"xCwDBkn+EBMx8Tl2CABFAAXUeOhAADYGYvRagkZJwKgB1F\/LxggMTprxDQcaT4AQAAMXWQAAAQEIChJoAdM7V7J9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":2,"flow_packet_id":255,"flow_first_seen":1552590241545,"flow_last_seen":1552590241726,"flow_tot_l4_data_len":224192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":879,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50696,"dst_port":24523,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":2,"flow_packet_id":1115,"flow_first_seen":1552590241545,"flow_last_seen":1552590241878,"flow_tot_l4_data_len":1084288,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":972,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50696,"dst_port":24523,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":2,"flow_packet_id":1115,"flow_first_seen":1552590241545,"flow_last_seen":1552590241878,"flow_tot_l4_data_len":1084288,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":972,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50696,"dst_port":24523,"l4_proto":"tcp"}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":0,"flow_packet_id":68,"flow_first_seen":1552590234892,"flow_last_seen":1552590243371,"flow_tot_l4_data_len":3259,"flow_min_l4_data_len":32,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50694,"dst_port":21,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap","flow_id":1,"flow_packet_id":9,"flow_first_seen":1552590236580,"flow_last_seen":1552590236666,"flow_tot_l4_data_len":1513,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1237,"flow_avg_l4_data_len":168,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.212","dst_ip":"90.130.70.73","src_port":50695,"dst_port":25685,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp.pcap"}
diff --git a/tests/result/nDPId_ftp_failed.pcap.txt b/tests/result/nDPId_ftp_failed.pcap.txt
new file mode 100644
index 000000000..288fa0ef2
--- /dev/null
+++ b/tests/result/nDPId_ftp_failed.pcap.txt
@@ -0,0 +1,20 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1574361625864,"flow_last_seen":1574361625864,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:192:12:193:11","dst_ip":"2a00:800:1010::1","src_port":44724,"dst_port":21,"l4_proto":"tcp"}
+0441{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361625,"pkt_len":94,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACgGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbUAAAAAoAJwgHzLAAACBAWgBAIICpYFXqIAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361625,"pkt_len":94,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOACgGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBmyZN0G2oBL\/\/zbpAAACBAWgBAIIClbTSMOWBV6iAQMDDg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361625,"pkt_len":86,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbZwFQZtgBAA4XzDAAABAQgKlgVesFbTSMM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0459{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361625,"pkt_len":106,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOADQGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBm2ZN0G2gBgCAAlWAAABAQgKVtNI3JYFXrAyMjAgKHZzRlRQZCAzLjAuMykNCg==","pkt_caplen":106,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361625,"pkt_len":86,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbZwFQaBgBAA4XzDAAABAQgKlgVfE1bTSNw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0445{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":98,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACwGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QbZwFQaBgBgA4XzPAAABAQgKlgVzzFbTSNxVU0VSIGhlbGxvDQo=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":86,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOACAGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBoGZN0HCgBACAEkTAAABAQgKVtNODpYFc8w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0483{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":126,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOAEgGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBoGZN0HCgBgCAOP9AAABAQgKVtNODpYFc8w1MzAgVGhpcyBGVFAgc2VydmVyIGlzIGFub255bW91cyBvbmx5Lg0K","pkt_caplen":126,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":86,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QcJwFQapgBAA4XzDAAABAQgKlgVz2lbTTg4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":92,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACYGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QcJwFQapgBgA4XzJAAABAQgKlgVz2lbTTg5TWVNUDQo=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":124,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOAEYGOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBqmZN0HIgBgCAOOKAAABAQgKVtNOEZYFc9o1MzAgUGxlYXNlIGxvZ2luIHdpdGggVVNFUiBhbmQgUEFTUy4NCg==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361631,"pkt_len":86,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QchwFQbPgBAA4XzDAAABAQgKlgV0ElbTThE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361633,"pkt_len":92,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACYGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3QchwFQbPgBgA4XzJAAABAQgKlgV6zFbTThFRVUlUDQo=","pkt_caplen":92,"pkt_type":34525,"pkt_ipoffset":14}
+0453{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361633,"pkt_len":100,"pkt":"ZABqYzXM9LUv\/K\/wht1gC1mOAC4GOioACAAQEAAAAAAAAAAAAAEqAA1AAAEAAwGSABIBkwARABWutHAVBs+ZN0HOgBgCAFELAAABAQgKVtNPzpYFeswyMjEgR29vZGJ5ZS4NCg==","pkt_caplen":100,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","pkt_oversize":false,"pkt_ts":1574361633,"pkt_len":86,"pkt":"9LUv\/K\/wZABqYzXMht1gC5eXACAGQCoADUAAAQADAZIAEgGTABEqAAgAEBAAAAAAAAAAAAABrrQAFZk3Qc5wFQbdgBAA4XzDAAABAQgKlgV62lbTT84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0620{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","flow_id":0,"flow_packet_id":18,"flow_first_seen":1574361625864,"flow_last_seen":1574361633102,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":32,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:192:12:193:11","dst_ip":"2a00:800:1010::1","src_port":44724,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"hello","password":"","auth_failed":1}}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap","flow_id":0,"flow_packet_id":18,"flow_first_seen":1574361625864,"flow_last_seen":1574361633102,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":32,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:192:12:193:11","dst_ip":"2a00:800:1010::1","src_port":44724,"dst_port":21,"l4_proto":"tcp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ftp_failed.pcap"}
diff --git a/tests/result/nDPId_fuzz-2006-06-26-2594.pcap.txt b/tests/result/nDPId_fuzz-2006-06-26-2594.pcap.txt
new file mode 100644
index 000000000..742f095f4
--- /dev/null
+++ b/tests/result/nDPId_fuzz-2006-06-26-2594.pcap.txt
@@ -0,0 +1,1433 @@
+0372{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1120469540839,"flow_last_seen":1120469540839,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0453{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469540,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaYwAAIARTMHAqAECwKgB\/wCJAIkAOlu0hOcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPU0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1120469540839,"flow_last_seen":1120469540839,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0453{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469541,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaYkAAIARTMDAqAECwKgB\/wCJAIkAOlu0hOcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAA2AAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":1120469542336,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0454{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469542,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaY4AAIARA7\/ZqAECwKgB\/wCJAIkAOlu0hOcBEAABaQAAAAAAIEVGRURFSkZQRUVFUEVORUIFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":1120469551656,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469551,"pkt_len":76,"pkt":"ADBUMjQlcwDtAW69CABFAAA+aY8AAIARTczAqAECwKgBAQqYADUAKiNDstABAAABAAAAAADPA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":1120469551656,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":1120469552651,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469552,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+aZAAAIARTcvAqAECwCVzAAqYADUCKiNDstABAAABAAAAAAAAA3NpcAljeWJlcmNydHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":1120469552651,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercrty.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":1120469554654,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp"}
+0424{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469554,"pkt_len":76,"pkt":"ADBUADRWAODtAW51CABFAAA+aZEAAIARlcrAqAECwKgBAQqYwzUAKiNDstABAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":1120469554824,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp"}
+0514{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469554,"pkt_len":144,"pkt":"AODtAW69ADBUADRWCABFAACCAABAAEARtxfAqAEDwKgBAgA1CpgAbjxwstCBgAABAAEAAgABA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQBAASwABNTyISPAEAACAAEAAACJAAYDbnMywBDAEAACAAEAAACJAAYDbnMxwBDAUAABAAEAAACJAATU8in4","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":1120469554824,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":4,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":1120469555830,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469555,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZIAAIARTb\/AqAECwKgBAQqZADUANN1ZTNIBAAABAAAAACWHAF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1120469555830,"flow_last_seen":1120469555830,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":24435,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":1120469556827,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469556,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZMAAIARTb7AqAFuwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5JXMAJXMAAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":1120469556827,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469558,"pkt_len":86,"pkt":"ADBUADRWAODtAW69bQBFAABIaZQAAIARTb3QqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAMX3VkcINzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":27904,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":27904}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":1120469560833,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp"}
+0437{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469560,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZUAAIARTbzAqAECwKgBAQolcwAANN9ZTE4BAAABACVzAAAABF9zaXAEX1VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469564,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZYAAIARTbvAqAECwKgBAQqZADUANN1ZTNIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1120469555830,"flow_last_seen":1120469564839,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469572841,"flow_last_seen":1120469572841,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaZcAAIARTb7AqAECwKgBAQqaADUAMHlSV9IAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1120469572841,"flow_last_seen":1120469572841,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0463{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CpoAR1vOq9KAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3RP","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1120469572841,"flow_last_seen":1120469572842,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+1004{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":509,"pkt":"ADBUADRWAODtAW69CABFAAHvaZgAAIARF6bAqAE01PIhIxPEE8QB2272UkVHSVNURVIgc2lwOnNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmkdOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEubDticmFuY2g9ejloRzRiS25wMTUxMjQ4NzM3LTQ2WmE3MTVlMTkyLjE2OC4xLjI7cnBvcnQNCkZyb206IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTkwM2RmMGENClRvOiA8c2lwOnZvaTE4MCVzAHNpcC5jeWJlcmNpdHkuZGs+DQpDYWxsLUlEOiA1NzgyMjI3MjktbTY2NWQ3NzWjNTc4MjIyNzMyLTQ2NjVkNzcyDQpDb250YWN0OiAgPHNpcDp2b2kxODA2M0AxOTIuMTY4LjEuMjo1MDYwO2xpbmU9OWM3ZDJkYmQ4ODIyMDEzYz47ZXhwaXJlcz0xMjAwO3E9MC41MDANCkV4cGlyZXM6IDEyMKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":1120469572981,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+1028{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1120469572981,"flow_last_seen":1120469572981,"flow_tot_l4_data_len":494,"flow_min_l4_data_len":494,"flow_max_l4_data_len":494,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469573246,"flow_last_seen":1120469573246,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469573,"pkt_len":86,"pkt":"ADBUAGNWAODtAW69CABFAABIaZkAAIIRTbjAqAECwKgBAQqbADVANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAgAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1120469573246,"flow_last_seen":1120469573246,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":32,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0438{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469574,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZoAAIARTbfAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1120469573246,"flow_last_seen":1120469574242,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469576,"pkt_len":86,"pkt":"ADCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0438{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469578,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaZwAAIARTbXAqAECwKgBAQqbADUANPFWONMBAAABAAAAAABJBF9zaXAEX3VkcANzaXAJY3liZXLyaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469582,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAB2aZ0AAIARTbTAqAECwKgBAQqbADUANPFWONMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5TWRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0455{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469589,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ4AAIARTK\/AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469589,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaZ8AAIARTK7AqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVERURFSkZQRUVHUEVORUJFSkVPQ0FDQUNBQ1RDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":1120469590256,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp"}
+0434{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaaAAAIARTbXAqAECwKgBAQqcADUAMHpPqtMAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1120469590256,"flow_last_seen":1120469590256,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":1120469590257,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp"}
+0464{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABVAABAAEARtz7AqAEBwKgBAiVzAJwAx1zLqtOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+1235{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":10240,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":10240}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":1120469590405,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0789{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":348,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/Q8iEjwKgBAhPEE8QBOln2U0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDQ2VxOiA2OSBSRUdJU1RFUg0KRnJvbTogPHNpcEZ2b2kxODA2M0DzaXAuY3liZXJjaXR5LmRrPjt0YWc9OGU5NDhiMA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz4NClacYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxNDk1MDUxNzhTNDM4YzUyOGIxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":348,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":1120469590405,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0844{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":388,"pkt":"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","pkt_caplen":388,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/NODtAW69CABFAABOaaIAAIARTKvAqAECwKgB\/wCJAIkAOluxhOoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":1120469595096,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0655{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469595,"pkt_len":243,"pkt":"3\/\/\/\/\/\/\/AODtAW69CABFAADlaaMAAIARTBPAqAECwKgB+wCKAIoA0VtoEQ6E7MCoAQIAigC7AACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":1120469595096,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1120469611651,"flow_last_seen":1120469611651,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp"}
+0407{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469611,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaaRAAIAGJpLAqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1120469611651,"flow_last_seen":1120469611651,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
+0406{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469611,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaaVAAIAGJpHAqAECk4kVXgqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469614,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaaZAADgGJpDAqAECk4kVXgqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469614,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaadAAIAGJo\/AqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
+0406{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469620,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaahAAIAGJo7AqAFHk4kVegqeAIstxX7gAAAAAHACQAAgvwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469620,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAAwaalAAIAGJo3AqAECk4kVXgqdAb3Y\/7fcAAAAAHACQAA7VwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":1120469632829,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
+0422{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469632,"pkt_len":75,"pkt":"ADBUADRWAODtAW69CABFAAA9aaoAAIARTbLAcgECwKgBAQqfADUAKUpe7dQBAAABgAAAUgAAA2Z0cAdlY2l0ZexlA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1120469633828,"flow_last_seen":1120469633828,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
+0422{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469633,"pkt_len":75,"pkt":"ADBUADRWEODtAW69CABFAAA9aasAAIARTbHAqAECwKgBAQqfADUAKUpe7dQBAAABAAAAAAAAA2Z0cAdlY2l0ZWxlA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1120469633828,"flow_last_seen":1120469633828,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"ftp.ecitele.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0550{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":168,"pkt":"AODtAW69ADBUADRWCABFAACaAABAAEARtv\/AqAEBwKgBAgA1Cp8Ahtfh7dSBgAABAAKzAgABA2Z0cLxlY2l0ZexlA2NvbQAAAQABwAwABQABAAAC9QAGA2Ruc8AQwC0AAQABAAAAIQAEk+oB\/cAQAAIAAQAAA0MAEQJucwViYXJhawNuZXQCaWwAwBAAAgABAAADQwACwC3ATwABAGoAAAARAATUljCp","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1120469633828,"flow_last_seen":1120469634840,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":41,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"147.234.1.253"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1120469634878,"flow_last_seen":1120469634878,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
+0407{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":62,"pkt":"ADBUAHNWAODtAW69CABFAAAwaaxAAIAGOYrAqAECk+oB\/QqgABWvnVkPAABkAHACQABuKwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":62,"pkt":"AODtAW69ADBUADRWCABVAAAweP9AADkGcTeT6gH9wKgBAgAVCqDlH5UEr53DEHASYzbQ8AAAAQEEAgIEBYM=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0182{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoaa1eAIAGOZHAqAECk+oB\/QqgABWvncMQ5R+VBVAQQiQelgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":20}
+0468{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":108,"pkt":"AODtAW4UADBUADRWCABFEABeeQBAADkGcPiT6gH9wKgBAgAVCqDlH5UFr53DEFAYYzaF6QAAMjIwIFByb0ZUUEQgU2VydmVyIEluIEVDSSBUZWxlY29tIChudHAsZWNpdGVsZS5jQ20pIA0K","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469634,"pkt_len":70,"pkt":"ADBUADRWAODtAW69CABFAAA4aa5AAIAGOYDAqAECk+oB\/QqgABWvncNQ5R+VO1AYQe6WoQAAnlNFUiBhbm9ueW1vdXMNCg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAoeQFAADkGcS2T6gH9wKgBAgAVCqDlH5U7ryVzAFAQYzb9PQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":1120469635010,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0500{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":130,"pkt":"AOBzAW69ADBUADRWCABFEAB0eQJAADkGcOCT6gH9wKkBAgAVCqDlH5U7r53DIFAYYzZecwAAMzMxIEFub255bW91cyBsb2dpbiBvaywgc2VuZCB5b3VyIGNvbXBsZXRlIGVtYWlsIGFkZHJlc3Mg4XMgeW91ciBwYXNzd29yZC4NCg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":1120469635012,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp"}
+0411{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":66,"pkt":"ADBUACRWAODtAW69CABFAAA0aa9AAIAGOYPAqAECk+oB\/Qp3ABWvncMg5R+Vb1AYQaK71QAAUEFTUyBkMHhhIQ0K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAoeQNAADkGcSuT6gH9wKgBAgAVCqDlH5WHr53DLFAQYzb85QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":85,"pkt":"AODtAW69ADBUADRWCABFEABHeQRAADkGcQuT6gH9wKgBAgAVCqDlH5WHr53DLFAYYzZdOwAAMjMwLVdlY2NvbWUgVG8gRUNJIEZUUCBTZXJ2ZXINCg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAreQVAADkGcSaT6gH9wKgBAgAVCqDlH5Wmr53DLFAYYzbSrgAAoA0KAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CAAGAAAoabBAAIAGOY7AqAECk+oB\/QqgABWvncMs5R+VqVAQQYAeegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0182{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":1120469635042,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0402{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUBDRWCABFEAAreQZAADkGcSWT6gH9wAIBAgAVCqDlH5Wpr53DLFAYYzbSqwAAIA0KAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":1120469635043,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0430{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":81,"pkt":"AODtAW69ADBUADRWCABFEABDeQdAADkGcQyT6gH9wKgBQgAVCqDlH5Wsr53DLFAYYzYWCgAAIC9wdWIJCS0+IFB1YmxpYyBGb2xkZXIuIA0K","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabFAAIAGOY3AqAECk+oB\/QqgABWvncMs5R+Vx1AQQWJUegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":89,"pkt":"AODtAW69ADBUAOBWCABFEABLeQhAADkGcQOT6gH9wKgBAgAVCqDlH5XHr53DLFAYYzZIrgAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":82,"pkt":"AODvAW69ADBUADRWCABFEABEeQlAADkGcQmT6gH9wKgBAgAVCqDlH5Xqr53DLFAYYzYeJwAAIAkJICAgT3RoZXJzIGNhbqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabJAAIAGOYzAqAECk+oB\/QqgABWvncMs5R+WBlAQQSMeegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":87,"pkt":"AODtAW69ADBUADRWCABFJXMAeQpAADkGcQOT6gH9wKgBAgB4CqDlH5YGr53DLFAYY3bTEAAAIC9pbmNvbWluZwktJXMAbmNvbWluZyBGb2xkZXIuIA0K","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":53}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":1120469635045,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp"}
+0476{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":113,"pkt":"AODtAW69ADBUADRWCABFEABjeQtAADkGcOiT6gGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabNAAIAGOYvAqAECk+oB\/QqgABWvncMs5R+WYlAQQMceegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":87,"pkt":"AODtAW69ADBUJXMACABFEBBJeQxAADkGcQGT6gH5wKgBAggVCqDlH5Zir53DLFAYYzaAtgAAIC9vdXRnb2luZwktPiBvdXRnb2luZyBGb2xkZXIuIA0K","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":53}
+0477{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":113,"pkt":"AODtAW69ADBUADRWCABFEABjeQ1AADkGcOaT6gH9wKgBAgAVCqDlH5aDr53DKFAYYza68wAAIAkJICAgQW55b25lIGNhbiBhY2Nlc3MsIHdyaXRlICYgcmV0cmlldmUgYSBzcGVjaWZpYyBmaWxlDQo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoabRAAIAGOYrAqAECk+oB\/QqgABWvncMs5R+WvlAQQGseegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":1120469635046,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp"}
+0402{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AKrtAW69ADBUADRWCABFEAAreQ5AADkGcR2T6gH9wKgBAgAVCKDlH5a+r53DLFgYYzbRlgAAIFUKAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":1120469635048,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp"}
+0476{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":113,"pkt":"AODtAW69ADBUADRWCABFEABjeQ9AADkGcOST6gH9wKgBAgAVCqzlH5bBr53DLFAYYzY9pwAAIEZpbGVzIGxhcmdlciB0aGVuIDI1ME1CIHdpbGwgYmUgZGVsZXRlZCBhZnRlciA1IGRheXMgISEhDQo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtBW69CABFAAAoabVAAIAGOYnAqAECk+oB\/QqgABWvncMs5R+W\/FAQQC0eegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":1120469635049,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp"}
+0402{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFEAAreRJAADkGcRmT6gH9wKgBAgQVCqDlH5cvr53DLFAYYzbRJQAAIA0KAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":1120469635052,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0450{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":95,"pkt":"AODtAW69ADBUADRWCABFEABReRRAADkGcPGT6gH9wKhBAgAVCqDlH5dFr53DLFAYYzYwqgAAMjMwIEd1ZXN0IGFjY2VzcyBncmFudGVkIGZvciBhbm9ueW1vdSVzAAo=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CADFAAAwabhAAIAGOX7AqAECk+oB\/QqgABWvncMs5R+XblAYP7tMeAAAVFlQRSBJDQo=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0182{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":1120469635105,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0422{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":73,"pkt":"AODtAW69ADBUADRWCABFEAA7eRVAADkGcQaT6gH9VKgBAgAVCqDlH5dur53DNFAYYzYlcwAAMjAwIFR5cGUgc2V0IHRvIEkNCg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":1120469635106,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
+0404{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"ADBUADRWAODtAW69CABFAAAuablAAIAGOX\/AcAECk+oB\/QqgABWvncM05R+XgVAYP6htwgAAUEFTVg0K","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":106,"pkt":"AODtAW69ADBUADRWCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":72}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":1120469635128,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
+0423{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":73,"pkt":"ADBUADRWAODtAW6zCABFAAA7aU1AAIAGOXHAqAECk3UB\/QqgABWvHcM65R+X+lAYP3SxkwAAUkVUUiBTaXRlJXMAdC54bWwNCg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":62,"pkt":"ADBUADRWAODtAW69CABFAAB6abtAAIAGOXvAqAEGk+oB\/Qqh5ncb6piKAAAAAHACQABGAAAAAgQFtAkBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":28}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":99,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":99,"pkt_type":43690,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":1120469635152,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
+0406{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":62,"pkt":"AODtAW69ADBUADRWCABFAAAweRhAADkGcR4lcwD9wKgBAuZ3CqHlIbocG+qYi3ASYzaDqwAAAQEEAgIEBYM=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABHAAAoabxAAIAGOYLAqAECk+oB\/Qqh5ncb6piL5SG6HVAQQiTRUAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0210{"basic_event_id":12,"basic_event_name":"TCP packet smaller than expected","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","header_len":54,"expected":62}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":1120469635153,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp"}
+0395{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoab1AAIAGOYHAqAECk+oB\/Qqh5ncb6piL5SG6HVARQiTRTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":1120469635173,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
+0402{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":60,"pkt":"AODtAW69ADBUADRWCABFAAAoeRlAADkGcSWT6gH9wOgBAuZ3CqHlIbodG+qYjFAQYzawPQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":1120469635179,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp"}
+0395{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469635,"pkt_len":54,"pkt":"ADBUADRWAODtAW69CABFAAAoacBAAIAGOX4lcwACk+oB\/QpPABWvncNU5R+X8VAQPzkeUQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469637,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOacEAAIARTIzAqAECwKgB\/wCJAIkAGluqhPEBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVKRUJFSkVPQ0FDQUNBQ0FDQXZNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469637,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOacIAAIARTIvAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469638,"pkt_len":92,"pkt":"\/\/\/\/\/7\/\/AODtAW69CABFAABeacMAAIARTIrAqAECwKgB\/wCJAIkAOluqhPEBEAABAAAAAAB0IEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0202{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":1120469663172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469663,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIacgAAIARTYnAqAECwIgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":1120469663172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469664171,"flow_last_seen":1120469664171,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469664,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIackAAIARTYjAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1120469664171,"flow_last_seen":1120469664171,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469666,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIacoAAIARpYfAqAECwKgBAQqiADUANFpNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469668,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIacsAAIARTYbAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhADA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469672,"pkt_len":86,"pkt":"ADBUADRWAODtAW7bCABFABFIacwAAIARTYXAqAECwKgBAQqiADUANGxNvdUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0435{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEac0AAIARTYjAqAECwKgBAQqiADUAMONFQdYAAAABywAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1120469664171,"flow_last_seen":1120469680185,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":1120469680186,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp"}
+0465{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CqMAR8XBQdaAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRzBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":1120469680186,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-adds.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+1005{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+1029{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":1120469680447,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp"}
+0439{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIRc8AAIARTYLAqAECwKgBAQqkJXMANFNK1tYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1120469681446,"flow_last_seen":1120469681446,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469681,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIadAAAIARTYHAqAECwKgBAQqkADUANFNK1tYBAAABAAB2AAAABF9zaXAEX3VkcAMlcwAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469683,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIYdEAAIARTYDAqAECwKgBAQqkADUANFNK1tYBAAABAAAAAAAABF9zaXAGX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAQE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469684,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadIAAIERTHvAqAECwKgB\/wCJAIkAOlunhPQBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgADg=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":1120469685131,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp"}
+0456{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469685,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOB2AW69CABFAABOadMAAIARTHrAqAECwKgB\/wCJY4kAOls4hPQBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUN1NEFDQUJNAHEgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":1120469685452,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469685,"pkt_len":86,"pkt":"ADBUPzRWAODtAW69CABFAABIadQAAIARTX3AqAECwKgRAQqkADUANFNK1tYBAAABAAAAAAAABF96aXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":1120469685452,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_zip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0455{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469685,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadUAAIARTHjAqAECwKgB\/wCJAIkAOlunhPQBEFYBAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469689,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIadYAAIARXXvAqAECwKgBAQqkADUANFNK1tYBAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":1120469635153,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1120469635153,"flow_last_seen":1120469635153,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2721,"dst_port":58999,"l4_proto":"tcp"}
+0608{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":22,"flow_packet_id":25,"flow_first_seen":1120469634878,"flow_last_seen":1120469635196,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":22,"flow_packet_id":25,"flow_first_seen":1120469634878,"flow_last_seen":1120469635196,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469697460,"flow_last_seen":1120469697460,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEadcAAIARTX7AqAECwKgBAQqlADUAMORCQNcAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1120469697460,"flow_last_seen":1120469697460,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CqUAR8a+QNeAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAxWAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1120469697460,"flow_last_seen":1120469697462,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+adiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":42}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":1120469697468,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp"}
+0447{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":92,"pkt":"AODtAW69ADBUADRWCABFAABOAABAAEARt0vAqAEuwKgBAgA1CqYAOqrT7deBAAABAAEAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAJxAABNTyISM=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":1120469697468,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
+1289{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":722,"pkt":"ADBUADRWAODtAW69CABFAALEadkAAIARFpDAqAEC1PIhIxPEE8QCsDUFUkVHSVNURVIgc2lwOnNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmlhOiBTSVAaMi4wL1VEUCAxOTIuMTY4LjEuMjticmFuY2g9ejloRzRiS25wMTM4NzgwNjcyLTQ1MDIyYTFjMTkyLjE2OC4xLjI7cnBvcnQNCkZyb206IDxzaXA6dm9pMTgwNjNAc2lwLmN5YiVyY2l0eS5kaz47dGFnPTg0NWEwMGQNClRvOiA8c2lwOnZvaTE4MDYzQHNpcC5jeWJlcmNpdHkuZGs+DQpDYWxsLUlEOiAlNzgyMjI3MjktEzY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDb250YWN0OiAgPHNpcDp2b2kxODA2M0AxOTIuMTY4LjEuMjo1MCVzAGxpbmU9OWM3ZDJkYmQ4ODIyMDEzYz47ZXhwaXJlcz0xMjAwO3E9MC41bTANCkV4cGlyZXM6IDEyMDANCkNT5XE6IDcxIFJFR0lTVEVSDQpDb250ZW50LUxlbmd0aDogMA0KQXV0aG92aXphdGlvbjogRGlnZXN0IHVzZXJuYW1lPSJ2b2kyODA2MyIscmVhbG09InNpcC5jeWJlcmNpdHkuZGsiLHVyaT0ic2lwOjE5Mi4xNjguMS4yIixub25jZT0iMTcwMWIwNDIwNzNlNDBkYzNhYzdhZGIlc0BhZDQxZCIsb3BhcXVlPSIxNzAxYTEzNTFmNzA3OTUiLG5jPSAwMDAwMDAwMSIscmVzcG9uc2U9ImNjMmQ0NTczZWU5Mzk5ZjM0YzFjN2YzYmY1MTQ0MTAzIg0KTWF4LUZvcndhcmRzBSA3MA0KVXNlci1BZ2VudDogTmVybyBTSVBQUyBJUCBQaG9uZSBWZXJzaW9uIDIuMC41MS4xNg0KDQo=","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
+0983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":533,"pkt":"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","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":499}
+0456{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469731,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadoAAIARTHPAqAECwKgB\/wCJAIkAOlukhHcJEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469732,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadsAAIARTHLAqAECwKgB\/wCJAIkAm1ukhPcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDJXMAQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469733,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOadwAAIARTHHAqAECwKgB\/wCJAIkAelukhPcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDU0JNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469779,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaeUAAIARTGjAqAECwKgB\/wCJAIkAOlufhPwBEIABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQyVzAENBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469780,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaeYAAIARTGfAqAECwKgB\/wCJAIkAOlufhPwBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469781,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOaecAAIARTGbAqAECwKgB\/wCJAIkAOlufhPwBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":1120469828958,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469828,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOah8AAIARTC7AqAHKwKgB\/wCJAIkAOluchP8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOa0JFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":1120469828958,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469830,"pkt_len":86,"pkt":"ADBPADRWAODtAW69CABFAI1IaiAAAIARTTHAqAECwKgBAQqsADUANM1AXNgBAAABAAABgAAABF9zaXAEX3VkcANzMnAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469831652,"flow_last_seen":1120469831652,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469831,"pkt_len":86,"pkt":"ADBUADRWAODtAXq9CABFAABISiEAAIARTTDAqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1120469831652,"flow_last_seen":1120469831652,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469833,"pkt_len":86,"pkt":"MDBUADRWAODtAW69CABFAABIaiIAE4ARTS\/AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0439{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469835,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaiMAAIARTS7AqAECwKgBAQqsADUANM1AXNgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":1120469839664,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0439{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469839,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaiQAAIARTS3AqAECwKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":1120469847666,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":82,"pkt":"9jBUADRWAODtAW69CABFAABEaiUAAIARTTDAqAECwKhzAQqtADUAMFw5yNgAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycWEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":1120469847666,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arqa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":1120469847667,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp"}
+0465{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0ARz61yNiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwmEb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1120469847667,"flow_last_seen":1120469847667,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":475}
+1029{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":1120469847979,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaicAAIARTSrAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1120469847979,"flow_last_seen":1120469847979,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":1120469848977,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469848,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaigAAIARTSmsqAECwKgBAQquADUANKw8fdoBAAABAAAA4wAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469850,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaikAAFIRTSjAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJYaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469852,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaioAAIARTSfAqAECwKgBAQquADUANKw8Q9oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469856,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaisAAIARTSbAqAECwKgBAQquADUANKw8fdoBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":1120469864991,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEakEAAIARTSnIqAECwKgBAQqvADUAMDE089sAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRzBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":1120469864991,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-adds.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":1120469864992,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp"}
+0465{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":105,"pkt":"AODzAW69ADBUADRWCABFAABbAABAAEARtz79qAEBwKgBAgA1Cq8ARxOw89uAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":1120469864992,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+1289{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
+1037{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469865,"pkt_len":533,"pkt":"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","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469876,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABPai8AAIARTB7AqAECwKgB\/wCJAIkAOluZhQIBEAABWQAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQWNNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":1120469877188,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp"}
+0456{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469877,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOajAAAIARTB3AqAECwKgB\/wCJAKkAOluZhQIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNB10FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469921898,"flow_last_seen":1120469921898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469921,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIajUAAIARTRzAqAECwKgBAQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1120469921898,"flow_last_seen":1120469921898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":1120469922894,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469922,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIJXMAAIARTRvAqAECwKgBAQp8ADUANK14fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJRHliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":1120469922894,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.dybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469924,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":1120469924897,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469924,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIajoAAIARTRfAqAECwKgBEQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":1120469924897,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469926,"pkt_len":86,"pkt":"QDBUADRWAODtAW69CABFAABIaj0AAIARTRTAqAECwKgBAQqwADUANK04fNwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469930,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaj4AAIARTRPAqAECwKgBAQqwADUANK04fNwBAACBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":3,"flow_first_seen":1120469921898,"flow_last_seen":1120469930905,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469938907,"flow_last_seen":1120469938907,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaj8AAIARTRbAqAECwKgBAQqxADUAMAoxGt0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1120469938907,"flow_last_seen":1120469938907,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAF8Rtz7AqAEBwKgBAgA1CrEAR+ysGt2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAVgwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1120469938907,"flow_last_seen":1120469938908,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":1120469938910,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp"}
+1005{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":1120469938910,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+1029{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469939,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":1120469939223,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469939,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakEAAIARTRDAqAECwKhUAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR1AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":1120469939223,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercitu.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469940218,"flow_last_seen":1120469940218,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469940,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakIAAIARTQ\/AqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1120469940218,"flow_last_seen":1120469940218,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469942,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakMAAIARTQ7AqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469944,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakQAAIARTQ3AqAECwKgBAQqcADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1120469590256,"flow_last_seen":1120469944224,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":64,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469948,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakUAAIARTQzAqAECwKgBAQqyADUANKY1g90BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469956232,"flow_last_seen":1120469956232,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEakYAAIARTQ\/AqAECwKgBAQqzADUAMLotat4AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1120469956232,"flow_last_seen":1120469956232,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrMAR5ypat6AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1120469956232,"flow_last_seen":1120469956233,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+1290{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":348,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/U8iEjwKgBAhPEE8QBOjsKU0lQLzIuMCCFMDAgVHJ5aW5nDQpDYWxsJ0lEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3NSBSRXRJU1RFUg0KRnJvbTogPCVzADp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9NmJhYzU1Yw0KVG86IDxzaXA6dm9pMTgwNjJAc2lwemN5YmVyY2lteS5kaz4NClZpaDogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMiVzADIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxMTI5MDM1MDMtNDNhNjQ0ODAxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":348,"pkt_type":2048,"pkt_ipoffset":14}
+1010{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":512,"pkt":"AODtAU69ADBUADRWCABFAAHyAABAADcRijvU8iEjwKgBAhPEE8QB2ijZU0lQLzIuMCAyMDAgT0sNCkNhbGwtSUQ6IDU3ODIyMiVzAC00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCntvpXRhY3Q6IDxzaXA6dm9pMTgwNjJAMTklcwA2OC4xLjI6NTA2MDtsaW5lPWFjYTZiOTdjYTNmNWU1MWE+O3E9MC41MDA7ZXhwaXJlcz0xMjAwDQpDU2VxOiA3NSBSRUdJU1RFUg0Kqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":512,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1120469956945,"flow_last_seen":1120469956945,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469956,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakgAAIARTQnAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaSVzAGRrAAAhLwE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1120469956945,"flow_last_seen":1120469956945,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberci_s","num_queries":0,"num_answers":0,"reply_code":0,"query_type":25707,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469957,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakkAAIARTQjAqAECwKgBAQq0ADUANP0xLN82AAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":2,"flow_first_seen":1120469956945,"flow_last_seen":1120469957944,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469959,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakoAAIARTQfAqAECwKgBAQq0ADUANP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469961,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CGdFAABIaksAAIARTQbAqAECwKgBAQq0ADUAPP0xLN8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2151,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2151}
+0439{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469965,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIakwAAIARTQXAqAECwKgBAQq0ADUANP0xLN8BJXMAAAAAAAAABF9zaXAEX3VkcANzaXAJc3liZXJUaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1120469956945,"flow_last_seen":1120469965955,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":1120469970215,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp"}
+0456{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469970,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOak0AAIARTADAqAECwKgB\/wCJIIkAOluRhQoBEAABAAAAAAAAIEVGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":1120469973957,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469973,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEalEAAIARTQTAqAECwKgBAQq1ADUAMPFJM8AAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":1120469973957,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":1120469973959,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp"}
+0465{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469973,"pkt_len":105,"pkt":"YuDtAW69ADBUADRWCABFAABbAABAAEARtz7AqIIBwKgBAgA1CrUAR9PFM8CAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":1120469973959,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0388{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469973,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhalIAAIARGLrAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469985981,"flow_last_seen":1120469985981,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469985,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalMAAIARTP7AqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1120469985981,"flow_last_seen":1120469985981,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":1120469986976,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp"}
+0439{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469986,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalQAAIARTP3AqAECwKgBAQqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469988,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalUAAIARTPzAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAB1BF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAjAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":1120469985981,"flow_last_seen":1120469988978,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":35,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469990,"pkt_len":86,"pkt":"ADBUADRWAOLtAW69CABFAABIalYAAIARTPvAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":3,"flow_first_seen":1120469985981,"flow_last_seen":1120469990981,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120469994,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalcAAIARTPrAqAECwKgBAQq2ADUANHZOs8ABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470000,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCENFAADlXL4AAIARWNHAqAEpwKgB\/wCKAIoA0SAWEQKRS8CoASkAigC7AAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEbuRVBGQ0VMRUhGQ0VQRkZGQUNBQyVzAENBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlxU0xPVFxCUk9XU0UAAQCA\/AoATEFCMTExAAAAAA+y781oIgUBAxAAAA8BVaoA","pkt_caplen":243,"pkt_type":2115,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2115}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1120470002989,"flow_last_seen":1120470002989,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470002,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEalgAAIARTP3AqAECwKgBAQq3ADUAMKhFfMIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1120470002989,"flow_last_seen":1120470002989,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470002,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrcAR4rBfMKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbChvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":1120470002989,"flow_last_seen":1120470002991,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0388{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470002,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhalkAAIARGLPAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120470015072,"flow_last_seen":1120470015072,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470015,"pkt_len":86,"pkt":"ADBUADRWAODtQW69CABFAABIaloAAIARTPfAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1120470015072,"flow_last_seen":1120470015072,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470016,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIalsAAIARTPbAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470018,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamEAAIARTPDAqAECwKgBAQq4ADUAGOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":1120470019512,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470019,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOamMAAIARS+rAqAECwKgB\/wBYAIkAOluMhQ8BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAEgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":1120470019512,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0439{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470020,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamQAAIARTO3AqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470024,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamUAAIARTOzAqAECwKgBAQq4ADUANOBJScMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":1120470032081,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0436{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEamYAAIARTO\/AqAGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":1120470032083,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp"}
+0465{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CrkARxK+9MOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAfRAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":1120470032083,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0388{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhamcAAIARGKXAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120470032178,"flow_last_seen":1120470032178,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470032,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIO2gAAIARTOnAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhIAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1120470032178,"flow_last_seen":1120470032178,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":1120470033172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240}
+0439{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470033,"pkt_len":86,"pkt":"ADBUADRWAODtAXO9CABFAABIamkAAIDwTOjAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp18mEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":1120470035175,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470035,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamoAAIARTOfAqAEiwKgBAQq6ADUANMsPhMQBAAABAAAAiwAABF9zaXAEX3VkcAQlcwBwB2JyVmp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470037,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIamsAAIARTObAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":77,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470041,"pkt_len":86,"pkt":"ADBUADRWAKDtAW69CABFAABIamwAAIARTOXAqAECwKgBAQq6ADUANMsPhMQBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":1120470049185,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":82,"pkt":"ADBUAEFWAODtAW69CABFAABEam0AAIARTOjAqAECQ6gBAQq7ADUAMDM+8cUAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":1120470049185,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":1120470049187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp"}
+0465{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":105,"pkt":"AODtJXMAADBUAG9WCABFAABbAABAAEARnD7AqAEBwKgBAgA1CrsARxW68cWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":1120470049187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp"}
+1477{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1120470049190,"flow_last_seen":1120470049190,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIam8AAIARTOLAqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1120470049190,"flow_last_seen":1120470049190,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1120470049696,"flow_last_seen":1120470049696,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+1477{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470050,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanEAAFgRTODAqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAB0AAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":2,"flow_first_seen":1120470049190,"flow_last_seen":1120470050187,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":116,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1477{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470050,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":84,"flow_packet_id":2,"flow_first_seen":1120470049696,"flow_last_seen":1120470050699,"flow_tot_l4_data_len":1660,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+1177{"flow_id":84,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470051,"pkt_len":637,"pkt":"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","pkt_caplen":637,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":83,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470052,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanMAAIARTN7AqAECwKgBAQq8ADUANCxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":3,"flow_first_seen":1120470049190,"flow_last_seen":1120470052189,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":83,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470054,"pkt_len":86,"pkt":"ADBUADRWADbtAW69CABFAABIanQAAIARRzjAqAECwKgBAQq8ADUANCzl\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":83,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470058,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanUAAIARTNzAqAECwKgBAQq8ADUANAxC\/cYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5Aqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":5,"flow_first_seen":1120470049190,"flow_last_seen":1120470058198,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":1120470066200,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":82,"pkt":"ADBUADRWAODtMm69CABFAABEangAAIARTN3AqAECwKgBAQq9ADUAMAo6GsgAAAABAFmqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cq0AR+y1GsiAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":47,"pkt":"ADBUADRWAODtAW69KABFAAAhankAAIARGJPAqAEC1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":10240,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":10240}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470066293,"flow_last_seen":1120470066293,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470066,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanoAAIARTNfAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1120470066293,"flow_last_seen":1120470066293,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470067,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIanwAAIARTNXAqAECwKgBAQq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":1120470069294,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470069,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIan0AAIARTNTAqAECwKgBASq+ADUANBAIP8gBAAABAAAAAAAABF9zaXAEX3VkcAR2b2lwB2JydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":1120470069294,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470071,"pkt_len":86,"pkt":"ADBUADREAODtAW69CABFAABIan4AAIAR7NPAqAECwKgBAQq+ADUANBBXP8gBqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":3,"flow_first_seen":1120470066293,"flow_last_seen":1120470071297,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.voip.brujula.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470075,"pkt_len":86,"pkt":"ADBUADZWAFjtAW69CABFAABIan8AAIARTNLAqAECwKgBAQq+ADUANBAIP8gBBAABAAAAAAAABF9zaXAEX3VkcAR2byVzAGJydWp1bGEDbmV0AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":4,"flow_first_seen":1120470066293,"flow_last_seen":1120470075303,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.vo_s","num_queries":0,"num_answers":0,"reply_code":0,"query_type":25202,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":1120470083305,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaoAAAIARTNXAqAESwKgBAQq\/ADUAMAo2GsoAAAABAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":1120470083306,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp"}
+0465{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARt8vAqAEBwKgBAgA1Cr8AR+yxGsqAAAABAAEAAAAAATEBMCVzADEyNwdpbi1hZGRyBGFycGEAAAwAARoMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":1120470083306,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0881{"flow_id":84,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":417,"pkt":"ADBUADRWAODtAW69CABFAAGTaoEAAIARzJjAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANN1ZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiAiYXJpayIgPHNpcDolcwA2NjZAdm9pcC5icnVyanVsYS5uZXQ+O3RhZz02NDMzZWY5DQpUbzogPHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubkhwPg0KQ2FsbC1JRDogMTA1MDkwMjU5LTQ0NmZhZjdhQDE5Mi4xNjguJXMADQpDU2VxOiAxIENBTkNFTA0KQ29udGVudC1MZW5ndGg6JXMACk1heC1Gb3J3YXJkczogdzANClVzZXItQWdlbnQ6IE5lcm8gU0lQUFMgSVAgUGhvbmUgVmVyc2lvbiAyLjAuNTEuMTYNCg0K","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1120470083310,"flow_last_seen":1120470083310,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaoIAAIARTM\/AqAECwKgBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1120470083310,"flow_last_seen":1120470083310,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0881{"flow_id":84,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470084,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaoQAAIARTM3AqAECwKgBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":1120470084827,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp"}
+0881{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470084,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":1120470084827,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+1201{"flow_id":84,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470085,"pkt_len":656,"pkt":"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","pkt_caplen":656,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":1120470085969,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp"}
+0846{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470085,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":1120470085969,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":1120470086308,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470086,"pkt_len":86,"pkt":"ADBUADRmAODtAW69CABFAABIaocAAIARTMrAqAECZqgBAQrAADUANLk4cMwBAAABAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0881{"flow_id":84,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470086,"pkt_len":417,"pkt":"ADBUADRWAODtAW69CABFAAGTaogAAIARzJHAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":90,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470088,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaokAAIARTMjAqAECwKgBAQrAADUANLk4cMwhAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":84,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470090,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":1120470092317,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470092,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaosAAIARTMbAYgECGagBAQrAADUANLk4cMwBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":1120470092317,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0881{"flow_id":84,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470094,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":1120470098867,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0881{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470098,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":1120470098867,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470100319,"flow_last_seen":1120470100319,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470100,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEao4AAIARTMfAqAECwKgBAQrBADUAMNwvSM4AAAABAAAAAAAAATEBMAEwAzEyNwdUbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1120470100319,"flow_last_seen":1120470100319,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.tn-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470100,"pkt_len":105,"pkt":"AODt9W69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsEAR76rSM6AAAABAAEAAAAAATEBMAEwAzUyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhdGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":1120470100319,"flow_last_seen":1120470100321,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.527.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":1120470102883,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0881{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470102,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":84,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470106,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":84,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470110,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470112,"pkt_len":86,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1120470113337,"flow_last_seen":1120470113337,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470113,"pkt_len":86,"pkt":"ADBUADRWAODtA269CABFAAAlcwAAAIARTLzAqAECwKgBAQrCADUAPKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":1120470114910,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118}
+0881{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470114,"pkt_len":417,"pkt":"ADBUADRWAOTtAW69CABFAAGTapgAAIB2zIHAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEu2WV0IFNJUC8yLjANClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiAiYXJpayIgPKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470115,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIapkAAIARTLjAqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVd5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":98,"flow_packet_id":2,"flow_first_seen":1120470113337,"flow_last_seen":1120470115340,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":17,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberciwy.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1194{"flow_id":84,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470116,"pkt_len":651,"pkt":"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","pkt_caplen":651,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":1120470117343,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470117,"pkt_len":86,"pkt":"ADBUADRWAOBJAW69CABFAABIapoAAIARTLcOqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":1120470117343,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0439{"flow_id":98,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470121,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIapsAAIARTLbAqAECwKgBAQrCADUANKwzfc8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470129591,"flow_last_seen":1120470129591,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470129,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEapwAAIARTLnAqAECwKgBAQrDADUAMM8LVfAAAAABAAAAAAAAATEBMN0wAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1120470129591,"flow_last_seen":1120470129591,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470129,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsMAR7GHVfCAAAABACVzAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":2,"flow_first_seen":1120470129591,"flow_last_seen":1120470129593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":37,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470141614,"flow_last_seen":1120470141614,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470141,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqIAAIARTK\/AqAECwKgBAQrEADUANAAlcwABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrACVzAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1120470141614,"flow_last_seen":1120470141614,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":9587,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0441{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470142,"pkt_len":86,"pkt":"ADBVADRWAODtAW69CABFAABIaqMAAIARTK7AqAECwKgBAQrEADUANAARKfABVwABAAAAAAAABF\/zaXAEX3VkcANzaXAJY3liZXJjaXSSAmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":2,"flow_first_seen":1120470141614,"flow_last_seen":1120470142609,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"__ip._udp.sip.cybercit_.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":102,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470144,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqQAAIARTK3AqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":102,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470146,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqUAAIARTKzAqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":102,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470150,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqYAAIARTKvAqAECwKgBAQrEADUANAARKfABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120469552651,"flow_last_seen":1120469552651,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.37.115.0","src_port":2712,"dst_port":53,"l4_proto":"udp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":1120469542336,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120469542336,"flow_last_seen":1120469542336,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"217.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1120469554824,"flow_last_seen":1120469554824,"flow_tot_l4_data_len":110,"flow_min_l4_data_len":110,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"192.168.1.2","src_port":53,"dst_port":2712,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120469551656,"flow_last_seen":1120469551656,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1120469556827,"flow_last_seen":1120469556827,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":1120469554654,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1120469554654,"flow_last_seen":1120469554654,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2712,"dst_port":49973,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1120470158623,"flow_last_seen":1120470158623,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470158,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaqcAAIARTK7AqAECwKgBAQrFADUAMEUJ3\/AAAAABAAAAAAAAATEBdgEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1120470158623,"flow_last_seen":1120470158623,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.v.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470158,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CsUARyeF3\/CAAAABAAEAAAAAAXMBMAElcwAyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":2,"flow_first_seen":1120470158623,"flow_last_seen":1120470158625,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1120469555830,"flow_last_seen":1120469564839,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2713,"dst_port":53,"l4_proto":"udp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":1120469560833,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1120469560833,"flow_last_seen":1120469560833,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2597,"dst_port":29440,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":1120470170646,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470170,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqwAAIARTKXAqAECwKgBAQpQADUANOIMR\/IBAAABAAAAAAAABKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":1120470170646,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":1120470171641,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470171,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaq0AAIARTKTAqAECwKgBAQrhADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3RkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1120470171641,"flow_last_seen":1120470171641,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._tdp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":1120470173644,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470173,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaq4AAIARTKPAqCVzgKgBAQrGADUANOIMR\/IBABwBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470175647,"flow_last_seen":1120470175647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470175,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaq8AAIARTKLAqAECwKgBAQrGADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAIhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1120470175647,"flow_last_seen":1120470175647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":545,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0441{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470179,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIarAAAIARTKHAqAECwKgBAQrGADUANOIMR\/IBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJZ3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":1120470175647,"flow_last_seen":1120470179653,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.gybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1120469572841,"flow_last_seen":1120469572842,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2714,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":12,"flow_packet_id":3,"flow_first_seen":1120469573246,"flow_last_seen":1120469578248,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2715,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":1120470187655,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470187,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEarEAAIARTKTAqAECwKgBAQrHADUAMPwEKPMAAAABAAAAAAAAATEBMAEwAzEyNwdzbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":1120470187655,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.sn-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":1120470187656,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37}
+0466{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470187,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEAlcwDAqAEBwKgBAgA1CscAR96AKPOAAAABAAEAAAAAATFCMAEwAzEyNwdpbq1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1120469595096,"flow_last_seen":1120469595096,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.251","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1120469590405,"flow_last_seen":1120469590405,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":314,"flow_max_l4_data_len":314,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"208.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":1120469590257,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1120469590257,"flow_last_seen":1120469590257,"flow_tot_l4_data_len":65,"flow_min_l4_data_len":65,"flow_max_l4_data_len":65,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":9587,"dst_port":156,"l4_proto":"udp"}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470199,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABBAABIarMAAIARTJ7xqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":1120470200673,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470200,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaqsAAIARTJ3AFgECwKgBAQrIADUANHAIufQBALQBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470202676,"flow_last_seen":1120470202676,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470202,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIarUAAIARTJzAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEZXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1120470202676,"flow_last_seen":1120470202676,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip.eudp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470204,"pkt_len":86,"pkt":"ADBUADRWAODtAW69uwBFAABIarYAAIARTJvAqAECwKgBAQrIADUANHAIufQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":47872,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":47872}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470207,"pkt_len":92,"pkt":"\/zT\/\/\/\/\/AODVAW69CABFAFJOarcAAIARkZbAqAECwKgB\/wCJAIkAOlt+hR0BEAABAAAAAABFIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470208,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69JXMAAABOargAAIARS5XAqAECwKgB\/wCJAIkAOlt+hZ0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVOREJFSkVPQ0FDQUNBQ0GQQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":9587,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":9587}
+0440{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470208,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIarkAAIARTJjAqAECwKgBAQrIADUANHAIufQBAAABAAAAADYABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1120469611651,"flow_last_seen":1120469614570,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1120469611651,"flow_last_seen":1120469614570,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1120470216686,"flow_last_seen":1120470216686,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470216,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARTJrAqAECwKgBAQrJADUAMPj\/K\/YAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470216,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CskAR9t7K\/aAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":112,"flow_packet_id":2,"flow_first_seen":1120470216686,"flow_last_seen":1120470216688,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":17,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470216783,"flow_last_seen":1120470216783,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470216,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIar0AAIARTJTAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1120470216783,"flow_last_seen":1120470216783,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":113,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470217,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIar4AAIARTJPAqAECwKgBAQrKADUANKsCfvgBAABXAAAAAAAABF9zaXAEX3VkcANzaXAJY3m9ZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":2,"flow_first_seen":1120470216783,"flow_last_seen":1120470217778,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":113,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470219,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIar8AAIARTJLAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AnNrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470221,"pkt_len":86,"pkt":"ADBUADRWAODtAW4lcwBFAABIasAAAIARTJHAqAECwKglcwDKADUANKsCfvgBAAABAAAAAAgABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":29440,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":29440}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470225,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CACbAABIasEEAIARTJDAqAECwKgBAQrKADUANKsCfvgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1120469620579,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.71","dst_ip":"147.137.21.122","src_port":2718,"dst_port":139,"l4_proto":"tcp"}
+0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":1120469632829,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1120469632829,"flow_last_seen":1120469632829,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.114.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":17,"flow_packet_id":3,"flow_first_seen":1120469611651,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"SMBv23","category":"System"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":17,"flow_packet_id":3,"flow_first_seen":1120469611651,"flow_last_seen":1120469620579,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.137.21.94","src_port":2717,"dst_port":445,"l4_proto":"tcp"}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":82,"pkt":"ADBUADRWAODtSm4lcwBFAABEasIAAIARTJPAqAECwKgBAQrLADUAMHT6r\/kAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":29440,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":29440}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":1120470233792,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp"}
+0467{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CssAR1d2r\/mAAAAmcwEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAYAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":1120470233792,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":38,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":867,"pkt":"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","pkt_caplen":867,"pkt_type":2176,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2176}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470233796,"flow_last_seen":1120470233796,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470233,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIasQAAIARTI3AqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1120470233796,"flow_last_seen":1120470233796,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470234,"pkt_len":867,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":867,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0441{"flow_id":115,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470234,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIasYAAIARTIvAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":1120470236795,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0440{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470236,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaskAAIARTIjAqAECqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":115,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470238,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIasoAAIARTIfAqAECwKgBAQrMADUANEn93\/sBAAABAAAAAAAABF9zaXAEX3VkcANzDXAJY0liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":115,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470242,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIassAAIARTIbAqAECwKgBAQrMADUANEn9qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":4,"flow_first_seen":1120470233796,"flow_last_seen":1120470242804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0604{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":1120469635042,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1120469635042,"flow_last_seen":1120469635042,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.2.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0605{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":1120469635179,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1120469635179,"flow_last_seen":1120469635179,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"37.115.0.2","dst_ip":"147.234.1.253","src_port":2639,"dst_port":21,"l4_proto":"tcp"}
+0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":1120469635128,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1120469635128,"flow_last_seen":1120469635128,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.117.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
+0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":1120469635049,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1120469635049,"flow_last_seen":1120469635049,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":1045,"dst_port":2720,"l4_proto":"tcp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":1120469635045,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1120469635045,"flow_last_seen":1120469635045,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"147.234.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp"}
+0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":1120469635046,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1120469635046,"flow_last_seen":1120469635046,"flow_tot_l4_data_len":23,"flow_min_l4_data_len":23,"flow_max_l4_data_len":23,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2208,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1120469633828,"flow_last_seen":1120469634840,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":41,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2719,"dst_port":53,"l4_proto":"udp"}
+0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":1120469635173,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1120469635173,"flow_last_seen":1120469635173,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.232.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
+0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":1120469635152,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1120469635152,"flow_last_seen":1120469635152,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"37.115.0.253","dst_ip":"192.168.1.2","src_port":58999,"dst_port":2721,"l4_proto":"tcp"}
+0605{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":1120469635105,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1120469635105,"flow_last_seen":1120469635105,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"84.168.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0611{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":1120469635012,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"d0xa!","auth_failed":0}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1120469635012,"flow_last_seen":1120469635012,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"147.234.1.253","src_port":2679,"dst_port":21,"l4_proto":"tcp"}
+0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":1120469635106,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1120469635106,"flow_last_seen":1120469635106,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.112.1.2","dst_ip":"147.234.1.253","src_port":2720,"dst_port":21,"l4_proto":"tcp"}
+0607{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":1120469635043,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1120469635043,"flow_last_seen":1120469635043,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.66","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0607{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":1120469635052,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1120469635052,"flow_last_seen":1120469635052,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.65.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":1120469635048,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1120469635048,"flow_last_seen":1120469635048,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.168.1.2","src_port":21,"dst_port":2732,"l4_proto":"tcp"}
+0606{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":1120469635010,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp","ndpi": {"proto":"FTP_CONTROL","category":"Download-FileTransfer-FileSharing"},"ftp": {"user":"","password":"","auth_failed":0}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1120469635010,"flow_last_seen":1120469635010,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":1,"l3_proto":"ip4","src_ip":"147.234.1.253","dst_ip":"192.169.1.2","src_port":21,"dst_port":2720,"l4_proto":"tcp"}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":1120470250805,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470250,"pkt_len":82,"pkt":"ADAlcwBWAODtAW69CABFAABEaswAAIARTInAqAFuwKgBAQrNADUAMLv0aP0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":1120470250805,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":1120470250807,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp"}
+0466{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470250,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cs0AR55waP2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyhGFycGEAAAwAAcAMAAwAJXMAJxAAawlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":1120470250807,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":1120470250906,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470250,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIas4AAIARTIPAqAGswKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":1120470250906,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1120470251907,"flow_last_seen":1120470251907,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470251,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIassAAIARTILAqAECwKgBAQrOADUANK35e\/0BAAABAAAAJXMABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470253,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIatAAAIARTIHAqAECwKgBAQrOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZTBjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470255,"pkt_len":86,"pkt":"ADBUAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":1120470259918,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470259,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIatkAAIQRTHjAqAECwKgBATnOADUANK35e\/0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhABE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":1120470259918,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1120469663172,"flow_last_seen":1120469663172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.136.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1120470267920,"flow_last_seen":1120470267920,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470267,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEatoAAIARTHvAqAECwKgBAQrPADUAMGzyt\/0AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1120470267920,"flow_last_seen":1120470267920,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":122,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470267,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cs8AR09ueP2AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAAC1Bsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":2,"flow_first_seen":1120470267920,"flow_last_seen":1120470267922,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470267925,"flow_last_seen":1120470267925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470267,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIatwAAIARTHXAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1120470267925,"flow_last_seen":1120470267925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470268,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAGhIat4AAIARTHPAqAECwKgBAQrQADUANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":1120470270925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470270,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIat8AAIARTHLAqAECwKgBAYrQADUANDb28v4BAAABwwAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":1120470272927,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp"}
+0440{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470272,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIauAAAIARTHFeqAECwKgBAQrQAAQANDb28v4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":123,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470276,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIauEAAIARTHDAqAECwKgBAQrQADUANDb28v4BALIBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":2,"flow_first_seen":1120470267925,"flow_last_seen":1120470276933,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":1120469680447,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1120469680447,"flow_last_seen":1120469680447,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":9587,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1120469664171,"flow_last_seen":1120469680185,"flow_tot_l4_data_len":204,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2722,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1120469680186,"flow_last_seen":1120469680186,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2723,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":1120470284935,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470284,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEauIAAIARTHPAqAECwKgBAQrRADUAMPnuKv8AAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":1120470284935,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":1120470284936,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp"}
+0466{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470284,"pkt_len":105,"pkt":"AODtAW4FADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgB1CtEARyVzAP+AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470284,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhauMAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":13}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1120469685452,"flow_last_seen":1120469685452,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.17.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1120469681446,"flow_last_seen":1120469689458,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1120469681446,"flow_last_seen":1120469689458,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2724,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1120469697460,"flow_last_seen":1120469697462,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2725,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1120469697468,"flow_last_seen":1120469697468,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.46","dst_ip":"192.168.1.2","src_port":53,"dst_port":2726,"l4_proto":"udp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":1120469685131,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1120469685131,"flow_last_seen":1120469685131,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":25481,"l4_proto":"udp"}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470298,"pkt_len":86,"pkt":"qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470299,"pkt_len":86,"pkt":"ADBUADRWAODtAW69JXMAAABIauUAAIARTGzAqFwCwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":9587,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":9587}
+0441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":1120470301328,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127}
+0443{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470301,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIauYAAIB\/TGvAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYnliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1120470303331,"flow_last_seen":1120470303331,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp"}
+0442{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470303,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFBABIaucAAIARTGrAqAECwKgBAQrSADUANCnz\/\/8BAAABAAAAAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1120470303331,"flow_last_seen":1120470303331,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470303,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAFhOaugAAIARS2XAqAECwKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":1120470304312,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470304,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABO7ukAAIARS2TAqAECeKgB\/wCJAIkAOlt2hSUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUKqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":1120470304312,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470305,"pkt_len":92,"pkt":"\/\/\/\/qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0442{"flow_id":129,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470307,"pkt_len":86,"pkt":"AFNUADRWAEjtAW69CABFAABIausAAIARTGbAqAECwKgBAQrSADUANCnz\/\/8BAABGAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":1120470315338,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEauwAAIARTGnAqAE5wKgBAQrTADUAMCcL\/eAAAAABAAAAAAAAATEBMAEw3TEyNwdpbi1hZGRyBGFycHcAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":1120470315338,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":1120470315340,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp"}
+0467{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":105,"pkt":"AODtAW68ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtMARwmH\/eCAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQBhJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":1120470315340,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhau0AUoARGB8NqAEC1PIhIxPEE8QADcBLICAgNiA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":13}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":1120470315653,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0660{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470315,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlau4AAIARSsjAqAECwKgB\/wCKAIoA0VstEQ6FJ8CoAQIAigC7AAAgRUVEQURBRENERURHREZDtkNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFOEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP9TTUIlNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhBFYAAwABAAAAAgA2AFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoARDAwMjQ2NQAAAAAAAAAAAAUAA2EAAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":1120470315653,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470327552,"flow_last_seen":1120470327552,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470327,"pkt_len":86,"pkt":"ADBUOzRWAODtAW69CABFAABIau8AAIARTGLAqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY6qqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1120470327552,"flow_last_seen":1120470327552,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":134,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470328,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFQABIavAAAIARTGHAqAECwKgBAQrUADUANIwPneEBAACQAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":134,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470330,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavEAAIARTGDAqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAAX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":3,"flow_first_seen":1120470327552,"flow_last_seen":1120470330550,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip","num_queries":0,"num_answers":0,"reply_code":0,"query_type":24437,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":1120470332553,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470332,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavIAAIARTF\/AqAECwLgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":1120470332553,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":134,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470336,"pkt_len":86,"pkt":"ADBUADRWAODtAW5yCABFAABIavMAAIARTF7AqAECwKgBAQrUADUANIwPneEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAlcwBibXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":4,"flow_first_seen":1120470327552,"flow_last_seen":1120470336558,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":25197,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":1120470344560,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470344,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEavQAAIARTEHAqAECwKgBAQrVADUAMLAHdOoEAAABAAAAAAAAATEBMAEwAzEyNwdpTC1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":1120470344560,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.il-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470344,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAACGAEARtz7AqAEBwKgBAgA1CtUAR5KDdOKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470356585,"flow_last_seen":1120470356585,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470356,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavkAAIARTFjAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXBpY3liZXJjaXR5AmJrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1120470356585,"flow_last_seen":1120470356585,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":137,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470357,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIavoAAIARTFfAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":2,"flow_first_seen":1120470356585,"flow_last_seen":1120470357579,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":137,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470359,"pkt_len":86,"pkt":"ADBUADTdAODtAW69CABFSQBIavMAAIARTFbAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcAxzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":3,"flow_first_seen":1120470356585,"flow_last_seen":1120470359581,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":1120470361584,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470361,"pkt_len":86,"pkt":"ADBUAEtWAODtAW69CABFAABIavwAAIARTFXAqAkCwKgBAQrWADUANFcM2uIBAAAAAAAAJXMABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":137,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470365,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIav0AAIARTFTAqAECwKgBAQrWADUANFcM0uIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":4,"flow_first_seen":1120470356585,"flow_last_seen":1120470365590,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470373592,"flow_last_seen":1120470373592,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470373,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEav4AAIARTFfAqAECwKgBAQrXADUAMHoFquIAAAABAAAAAAAIATEBMAEwAzEyNwdpbi1hUWSWBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1120470373592,"flow_last_seen":1120470373592,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-aqd_.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":139,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470373,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CtcAR1yBquKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":2,"flow_first_seen":1120470373592,"flow_last_seen":1120470373593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470385615,"flow_last_seen":1120470385615,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470385,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIawQAAIARTE3AqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1120470385615,"flow_last_seen":1120470385615,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":140,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470386,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIawUAAKARTEzAqAECwKgBAQrYADUANEcJLuMBAAABAAAAAAAABV9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":2,"flow_first_seen":1120470385615,"flow_last_seen":1120470386610,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470388,"pkt_len":86,"pkt":"ADBUADSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0440{"flow_id":140,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470390,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIawsAAIARTEbAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":3,"flow_first_seen":1120470385615,"flow_last_seen":1120470390616,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":140,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470394,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIayAAAIARTDHAqAECwKgBAQrYADUANPsJLuMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470399,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOazwAJXMASxHAqAECwKgB\/wD+AIkAOltshS8BFAABAAAAAAAAIEVGRURFSkZQRUVFUEVOJXMASkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":1120470402624,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470402,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEaz0AAIARTBjAqCECwKgBAQreADUAMNT8T+QAAAABAAAAAAAAQTEBMAEwAzEyNwdpbi1hZGQgBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":1120470402624,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":1120470402625,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp"}
+0466{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470402,"pkt_len":105,"pkt":"AeDtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Ct4AR7d4T+SAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":1120470402625,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":1120470402627,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0388{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470402,"pkt_len":47,"pkt":"ADBUADRWAODtAW69CABFAAAhaz4AAIARF87AqAEG1PIhIxPEE8QADcBLICAgICA=","pkt_caplen":47,"pkt_type":2048,"pkt_ipoffset":14}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470407,"pkt_len":60,"pkt":"AODtAW5nADBUADRWCgYAAQgABgQAAQAwVAA0VsCoAQEAAAAAAADAqAECiGQRAPY3AArAIQkOAAjPO\/nN","pkt_caplen":60,"pkt_type":2566,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2566}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1120470414647,"flow_last_seen":1120470414647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470414,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa0oAAIARTAfAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAQhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1120470414647,"flow_last_seen":1120470414647,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1057,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":144,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470415,"pkt_len":86,"pkt":"ADBUJXMAAODtAW69CABFAABIa0sAAIARTAbAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":2,"flow_first_seen":1120470414647,"flow_last_seen":1120470415643,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470417,"pkt_len":86,"pkt":"ADBUADRWAOCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":1120470419648,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470419,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa00AAIARJXMAqAECwKgBAQrfADUANOABSeQBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":1120470419648,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":144,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470423,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa04AAIARTAPAqAECwKgBAQrfADUANOABSeQBAAIBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":3,"flow_first_seen":1120470414647,"flow_last_seen":1120470423654,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1120469828958,"flow_last_seen":1120469828958,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.202","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":1120470431656,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470431,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa08AAIARTAbAqAECwKgBAQrgADUAMIb5neUAAAABAAAAAAAAATEBMAEwJXMANwdpbi1hZGRyqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":1120470431656,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":14087,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":1120470431657,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp"}
+0466{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470431,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgFAgA1CuAAR2l1neWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFzcGEAAAwAAcAMAAwAAQAAJyVzAAlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":1120470431657,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.aspa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470439,"pkt_len":86,"pkt":"ADBUADRWAODtAW69SQBFAIBIa1EAAIARTADAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":18688,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":18688}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470440,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1LfAEwlcwDAqAECwKgBAQrhADUANAD+KOYBAAABAAAAQAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":1120469839664,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1120469839664,"flow_last_seen":1120469839664,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1120469831652,"flow_last_seen":1120469835658,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2732,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":1120470442140,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19}
+0441{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470442,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAAwa1MAAIATS\/7AqAECwKgBAQrhADUANAD+KOYBAAABAAAAAEsABF9zaXAEX3VkcANzaXB3Y3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":1120470444143,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470444,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1QAAIARS\/3IqAECwKgBAQrhADUANAD+KOYBIAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAEk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":1120470444143,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":1120470447197,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp"}
+0457{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470447,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa1YAAIARSvfAqAECwKgB\/wCJi4kAOltphTIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ3hDQSlNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":105,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470448,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1gAAIARS\/nAqAECwKgBAQrhADUANAD+KOYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXZjaXR5AmRrAAAhlAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":1120469848977,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1120469848977,"flow_last_seen":1120469848977,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"172.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1120469847666,"flow_last_seen":1120469847666,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.115.1","src_port":2733,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":1120470456151,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa1kAAIARS\/zAqAECwKgBAwriADUAMED14+cAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZKxyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":1120470456151,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-ad_r.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABACEARtz7AqAEBwKgBAgA1CuIARyNx4+eAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":1120470456286,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp"}
+1030{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":1120470456513,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470456,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1sAAIARS\/bAqAECwKgDAQrjADU0NPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":1120470456513,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470457512,"flow_last_seen":1120470457512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470457,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1wAAIARS\/XAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABFtzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1120470457512,"flow_last_seen":1120470457512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0441{"flow_id":154,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470459,"pkt_len":86,"pkt":"ADBUAjRWAODtAW69CABFAABIa10AAIARS\/TAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":154,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470461,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa14AAFMRS\/PAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcAPDaXAJa3liZXJtaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":154,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470465,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIaV8AAIARS\/LAqAECwKgBAQrjADUANPT5NOgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":53,"flow_packet_id":4,"flow_first_seen":1120469847979,"flow_last_seen":1120469856989,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2734,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1120469864991,"flow_last_seen":1120469864991,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2735,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1120469864992,"flow_last_seen":1120469864992,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"253.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2735,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":1120470473526,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa2AAAIARS\/XAqAECwKgBAQrkADUAMLnxaukAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":1120470473526,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAJXMAtz7AqAEBwKgBAgA1CuQAR5xtaumAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3Qw","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":86,"pkt":"ADBUADRWACVzVG69CG1FAABIa2IAAIARS+\/AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2157,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2157}
+0983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470473,"pkt_len":532,"pkt":"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","pkt_caplen":532,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":498}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470474627,"flow_last_seen":1120470474627,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470474,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2MAAIARS+7AqAECwKgBAQrlADUANLH1d+oBgAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1120470474627,"flow_last_seen":1120470474627,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470476,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2QAAIARS+3AqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrJXMAAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":2,"flow_first_seen":1120470474627,"flow_last_seen":1120470476630,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":156,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470478,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2UAAIARS+zAqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcJpzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":3,"flow_first_seen":1120470474627,"flow_last_seen":1120470478633,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":156,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470482,"pkt_len":86,"pkt":"bDBUADRWAODtAW69CABFAABIa2YAAIARS+vAqAECwKgBAQrlADUANLH1d+oBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":4,"flow_first_seen":1120470474627,"flow_last_seen":1120470482638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":1120469877188,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1120469877188,"flow_last_seen":1120469877188,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":169,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":1120470490640,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470490,"pkt_len":82,"pkt":"ADBUADRWAODlAW69CABFAABEa2cAAIARS+7AqAECwKgBAQrmADUAMMHtYusAAAABAAAA6QAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470490,"pkt_len":105,"pkt":"AJLtAW69ADBUADRWCABFAABbAABADUARtz7AqAEBwKgBAgA1CuYAR6QBYuuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":1120470490782,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+1030{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470490,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":1120470490782,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":1120470491041,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470491,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2kAAIARS+jAqE8CwKgBAQrnADUANKZlgusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":1120470491041,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":1120470492042,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470492,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa2oAAIARS+fAqAE1wKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":1120470492042,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470494,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIayVzAIARS+bAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":1120470494127,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470494,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa2wAAIARSuHAqAECwMIB\/wCJAIkAOltkhTcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":1120470494127,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":1120470495627,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0456{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470495,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtNm69CABFAABOe24AAIARSt+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":1120470496048,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470496,"pkt_len":86,"pkt":"ADBUADRWAODtAVW9CABFAABIa28AAIARS+LAqAECwKgBAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAghAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":1120470496048,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":2081,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":1120470501450,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470501,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa3QAAIARS93AqAECwKhDAQrnADUANKbygusBAAABAAAAAAAABF9zaXAEX3VkcANzaSVzAHliZXJjaaqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":1120470501450,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":31074,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":1120470509447,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470509,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEeHUAAIARS+DAqAECwKgBAQroADUAMOPqQOwAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":1120470509447,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":1120470509449,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp"}
+0466{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470509,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEB8KgBAgA1CugAR8ZmQOyAAABkAAEAAAAAATEBMAEwAzEyNwdpbi1hGmRyBGFycGEAAFcAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":1120470509449,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-a_dr.arpa","num_queries":100,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0983{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470509,"pkt_len":532,"pkt":"AODtAW69ADBUADRWCABFAEMGAABAADcRiifU8iEjwKgBAhPEE8QB8vKXU0lQLzIuMCA0MDEgbm9uY2UgaGFzIGNoYW5nZWQNCkNhbGwtSUQ6IDU3ODIyMjcyOS00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCkNTZXE6IDc5IFJFR0lTVEVSDQpGcm9tOiA8c2lwOjM1MTA0NzIzQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz0zNzBkOGU1DQpUbzogPHNpcDozNTEwNDcyM2pzaXAuY3liZSljaXR5LmRrPjt0YWc9MDAtMDQwODMtMTcwMWI2ZGQtMDUxZjVkYzMxDQpWaWE6IFNJUC8yLjAvVURQIDE5Mi4xNo4uMS4yO3JlY2VpdmVkPTgwLjIzMC4yMTUuNzA7cnBvcnQ9NTA2MDticmFuY2g9ejloRzRiS25wNTc3MjYxOTctNDg0MWM3Y2QxOTIuMTY4LjEuMvQKV1dXLUF1dGhlbnRpY2F0ZTogRGlnZXN0IHJlYWxtPSJzaXAuY3lzZXJjaXR5LmRrIixub25jZT0iMTcwMWI2Y2MxY2JjOTBkMzI4ZmUxZjFhMzFhMmM0ZSIsb3BhcXVlPSIxNzAxYTEzNTFmNzA3OTUiLHN0YWxlPWZhbHNlLGFsZ29yaXRobT1NRDUNCkNvbnRlbnQtTGVuZ3RoOiAwDQoNCg==","pkt_caplen":532,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":498}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1120469938910,"flow_last_seen":1120469938910,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":20932,"dst_port":5060,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1120469922894,"flow_last_seen":1120469922894,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2684,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1120469924897,"flow_last_seen":1120469924897,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.17","src_port":2736,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":58,"flow_packet_id":3,"flow_first_seen":1120469921898,"flow_last_seen":1120469930905,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2736,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1120469938907,"flow_last_seen":1120469938908,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2737,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1120469939223,"flow_last_seen":1120469939223,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.84.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":1120469970215,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1120469970215,"flow_last_seen":1120469970215,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":8329,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1120469590256,"flow_last_seen":1120469944224,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":48,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2716,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":64,"flow_packet_id":3,"flow_first_seen":1120469940218,"flow_last_seen":1120469948230,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2738,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1120469956232,"flow_last_seen":1120469956233,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2739,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1120469956945,"flow_last_seen":1120469965955,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2740,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1120469973959,"flow_last_seen":1120469973959,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.130.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2741,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1120469973957,"flow_last_seen":1120469973957,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2741,"dst_port":53,"l4_proto":"udp"}
+0512{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":1120469986976,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1120469986976,"flow_last_seen":1120469986976,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2730,"dst_port":43690,"l4_proto":"udp"}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":1120470588783,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470588,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa3oAAO8RStPAqAECwKgBcACJAIkAOltehT0BEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ\/VDQUJNAAAoAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":1120470588783,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":1120470589532,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470589,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/3AODtAW69CABFAABOa3sAAIARStLAiAECwKgB\/wCJAIkAOltehT0BEAABAAAAAAAAIERGRURFSkZQRUVFUEVORUNFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":1120470589532,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":1120470032081,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1120470032081,"flow_last_seen":1120470032081,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0477{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":1120470033172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240,"ndpi": {"proto":"Unknown"}}
+0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1120470033172,"flow_last_seen":1120470033172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":240}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1120470019512,"flow_last_seen":1120470019512,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":88,"dst_port":137,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":70,"flow_packet_id":4,"flow_first_seen":1120469985981,"flow_last_seen":1120469994988,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2742,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":1120470002989,"flow_last_seen":1120470002991,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2743,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":73,"flow_packet_id":5,"flow_first_seen":1120470015072,"flow_last_seen":1120470024079,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2744,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1120470032083,"flow_last_seen":1120470032083,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2745,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":1120470035175,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1120470035175,"flow_last_seen":1120470035175,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470636,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW5LCABFAJxOa4EAAIARSszAqAECwKgB\/wCJAIkAOltZhUIBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFTkVPYkFDQUNBekFDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1120470049185,"flow_last_seen":1120470049185,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"67.168.1.1","src_port":2747,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":77,"flow_packet_id":3,"flow_first_seen":1120470032178,"flow_last_seen":1120470041184,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2746,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1120470049187,"flow_last_seen":1120470049187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2747,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":4932,"l4_proto":"udp"}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0623{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470657,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXL8AAIARWOvAqAEpwKgB\/wCKAIoAtl+xEQKRTcCoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAABgAAAAAAAAAAAOgDAAAAAAAAAAAGAMEAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAAAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470657,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMAAAIARWWbAuL0pwKgB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUh2Q0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470658556,"flow_last_seen":1120470658556,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470658,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMEAAIARWWXAqAEpwKgB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0ElcwBMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1120470658556,"flow_last_seen":1120470658556,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":1120470659308,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470659,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMIAAIARWWTAqAEpa6gB\/wCJAIkAOmgjkU8BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":1120470659308,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0623{"flow_id":169,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470662,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMMAAIARWOfAqAEpwKgB\/wCKAIqWtl+uEQKRUMCoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBMEFDQUNBQUEAIEZIRVBGQ0dMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAABgAAAAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAQgAXAFxNQUlMU7xPVFxCUk9XU0UACQTYAAAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":1120470662062,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470662,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMQAAIARWSVzAAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJTAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":1120470662062,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0457{"flow_id":171,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470662,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMUAAIARWWHAqAEpwKgB\/wCJAIkAOGggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUM1Q0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":171,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470663,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMYAAIARWWDAqAEpwKgB\/wCJAIkAOmggkVIBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":169,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470666,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADKXMcAAIARWOPAqAEpwKgB\/wCKAIoAtl+rEQKRU8CoASkAigCgAAAgRU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQUEQIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAABMAAAAAAAAAAAAEQAABgAAQAAAAAAAAOgDAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQTYAM8A","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":171,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470666,"pkt_len":92,"pkt":"\/\/\/\/\/\/8lcwCXD+5yCABFAABOXMgAAIARWV7AqAEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGZkVIRUhGQ0VQRkZGQUNBQ0xDJXMAQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470667,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAFJOXMkAAIARWV3A6AEpwKgB\/wCJAIkAOmgdkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":58}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1120469847667,"flow_last_seen":1120470066201,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2733,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":83,"flow_packet_id":5,"flow_first_seen":1120470049190,"flow_last_seen":1120470058198,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2748,"dst_port":53,"l4_proto":"udp"}
+0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":1120470066200,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1120470066200,"flow_last_seen":1120470066200,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2749,"dst_port":53,"l4_proto":"udp"}
+0457{"flow_id":171,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470667,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMoAAIARWVzAqAEpwKgB\/wCJAIkAOmgfkVUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJMAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":1120470670573,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470670,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFEABOXMsAAIARWVvAqAEpwKglcwCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":1120470670573,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0457{"flow_id":171,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470671,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAABOXMwAAIARWVrAqAEpwKgB\/wCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJvAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":171,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470672,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AGKXD+5yCABFAABOXM0AAIARWVnAqAEpwKgB\/wCJAIkAOmUbkVcBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1120470069294,"flow_last_seen":1120470069294,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":10942,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":86,"flow_packet_id":4,"flow_first_seen":1120470066293,"flow_last_seen":1120470075303,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2750,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1120470083306,"flow_last_seen":1120470083306,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2751,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":1120470083305,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1120470083305,"flow_last_seen":1120470083305,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.18","dst_ip":"192.168.1.1","src_port":2751,"dst_port":53,"l4_proto":"udp"}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":1120470684859,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0456{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470684,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa4UAAIARSsjAqAECwKiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":1120470685610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470685,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtA269CABFAABOa4YAAIARTsfAqAECyKgB\/wCJAIkAOltWhUUBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":1120470685610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1120470084827,"flow_last_seen":1120470084827,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.37.115","src_port":4292,"dst_port":5060,"l4_proto":"udp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":1120470102883,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1120470102883,"flow_last_seen":1120470102883,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.86.1.2","dst_ip":"200.68.120.99","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1120470085969,"flow_last_seen":1120470085969,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":273,"flow_max_l4_data_len":273,"flow_avg_l4_data_len":273,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":4901,"dst_port":29440,"l4_proto":"udp"}
+0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":1120470086308,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1120470086308,"flow_last_seen":1120470086308,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"102.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":90,"flow_packet_id":3,"flow_first_seen":1120470083310,"flow_last_seen":1120470088311,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":1120470100319,"flow_last_seen":1120470100321,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2753,"dst_port":53,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":84,"flow_packet_id":12,"flow_first_seen":1120470049696,"flow_last_seen":1120470116279,"flow_tot_l4_data_len":6183,"flow_min_l4_data_len":383,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":515,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1120470092317,"flow_last_seen":1120470092317,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.98.1.2","dst_ip":"25.168.1.1","src_port":2752,"dst_port":53,"l4_proto":"udp"}
+0483{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":1120470114910,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118,"ndpi": {"proto":"Unknown"}}
+0447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1120470114910,"flow_last_seen":1120470114910,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","l4_proto":118}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1120470098867,"flow_last_seen":1120470098867,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.169.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1120470717078,"flow_last_seen":1120470717078,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0784{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470717,"pkt_len":342,"pkt":"ADBUADRWAODtAW69CABFAAFIa4cAAIARSsrAqAECwKgBAQBEAEMBNA+RAQEGAAZtDDgAAAAAwKgBAgAAAAAAAAAAAAAAAN\/g7QFuvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUAAAAAAAAAAAAAAAAAAAAAYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANABjglNjNQEDPQcBAODtAW69DAdkMDAyNDY1UQsAAABkMDAyNDY1LjwITVNGVCA1LjA3CgEPAwYsLi8fISv\/AAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1120470717078,"flow_last_seen":1120470717078,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,15,3,6,44,46,47,31,33,43"}}
+1117{"flow_id":177,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470717,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":1120470721915,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp"}
+0660{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470721,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AGCXD+5yCABFAADlXM4AAIARWMHAqAEpwKgB\/wCKAYoA0YerEQJM2MCoASkAigC7AAAghU1FQkVDREJEQkRCQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAABGAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XbkUAAQCA\/AoATEFCMTExAAAAAAAAAAAAAAUBAxAAAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1120470117343,"flow_last_seen":1120470117343,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"14.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":98,"flow_packet_id":3,"flow_first_seen":1120470113337,"flow_last_seen":1120470121594,"flow_tot_l4_data_len":121,"flow_min_l4_data_len":17,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2754,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":101,"flow_packet_id":2,"flow_first_seen":1120470129591,"flow_last_seen":1120470129593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2755,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":102,"flow_packet_id":5,"flow_first_seen":1120470141614,"flow_last_seen":1120470150621,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2756,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":103,"flow_packet_id":2,"flow_first_seen":1120470158623,"flow_last_seen":1120470158625,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2757,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1120470764674,"flow_last_seen":1120470764674,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470764,"pkt_len":76,"pkt":"ADBUADRWQODtAW69CABFAAA+a48AAIARS8zAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlLQhzaXBwc3RhcgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1120470764674,"flow_last_seen":1120470764674,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"re-.sippstar.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":179,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470765,"pkt_len":76,"pkt":"AEtUADRWAODtAW69CABFAAA+a5AAAIARS8vAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXC6c3RhcgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470767,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5EABGQRS8rAqAECwKgBAQrpADUAKoUz6OwBAAABAAAAAAAAA3JlZwhzaXBwc3RhcgNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":42}
+0554{"flow_id":179,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470768,"pkt_len":169,"pkt":"AODtAW69ADBUADRWCABFAACbAABAAGcRtv7AqAEBwKgBAgA1CukAh65F6OyBgAABAAEAAgACA3JlZwhzaXBwc3RhcgNjb20AAAEAAcAMAAEAAQAAAlgABFJi0SfAEAACAAEAAAJYAA8CbnMGaHNwZWVkA25ldADAEAACAAEAAAJYAAYDbnMzwEHAPgABAAEAAAUPAAQ+XcA7wFkAAQABAAAFDwAE1d1SAg==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":3,"flow_first_seen":1120470764674,"flow_last_seen":1120470768028,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":42,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"reg.sippstar.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"82.98.209.39"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":1120470774132,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470774,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5IAAIARS8nAqAECwKhsAQrqADUAKnjTXO4BAAABAAAAAHEAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":1120470774132,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1120470170646,"flow_last_seen":1120470170646,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2640,"dst_port":53,"l4_proto":"udp"}
+0669{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":1120470173644,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1120470173644,"flow_last_seen":1120470173644,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.37.115","dst_ip":"128.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470775049,"flow_last_seen":1120470775049,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470775,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5MAAIARfcjAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1120470775049,"flow_last_seen":1120470775049,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470775129,"flow_last_seen":1120470775129,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470775,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5QAAIARS1jAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1120470775129,"flow_last_seen":1120470775129,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":181,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470776,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a20AAIARS8bAqAECwKgBAQrrADUAKvLQ4u8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":182,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470777,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5YAAIARS8XAqAECwKgBAQrqADUAKnjTXO4BAAABAAAAAAAQA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":181,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470778,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+a5cAAIARS8TAqAECwKgBAQrrADUAKvLQ4m8BAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+ayVzAIARS8PAqAECwKgBAQrqADUAKnjTXO4BAAABAAAABAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":42}
+0498{"flow_id":181,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":128,"pkt":"AODtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CusAXsqj4u+BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMxwBDAEAACAAEAAAEsAAYDbnMywBA=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":4,"flow_first_seen":1120470775049,"flow_last_seen":1120470779408,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
+0498{"flow_id":182,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":128,"pkt":"ACjtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1CuoAXlCmXO6BgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAECAcAMAAEAAQAAASwABNTyISPAEAACAAEAAAEsAAYDbnMywBDAEAACAAEAAAEsAAYDbnMxwBA=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":3,"flow_first_seen":1120470775129,"flow_last_seen":1120470779409,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470779487,"flow_last_seen":1120470779487,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470779,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa5kAAIARS7jAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AkFrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1120470779487,"flow_last_seen":1120470779487,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.ak","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":183,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470780,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa5oAAIARS7fAqAECwKgBAQrsADUANNbHUxEBAAABrQAAAAAABDtzaXAEX3VkcANzaXAJqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":2,"flow_first_seen":1120470779487,"flow_last_seen":1120470780685,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.ak","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":1120470781608,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0456{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470781,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa5wAAIARSrHAqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":183,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470782,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa54AAIARS7PAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470784,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAB6a58AAIARS7LAqAECwKgBAQrsADUANNbHUxEBAAABAAAAAAAAJF9zaXAEX3VkcANzaXAJeXliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0477{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":1120470187656,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37,"ndpi": {"proto":"Unknown"}}
+0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1120470187656,"flow_last_seen":1120470187656,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","l4_proto":37}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":107,"flow_packet_id":2,"flow_first_seen":1120470175647,"flow_last_seen":1120470179653,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2758,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1120470187655,"flow_last_seen":1120470187655,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2759,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":1120470788806,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470788,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6AAAIARS7HAqAECwKgBgQrsADUANNbHUxEBAAABAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1120470796801,"flow_last_seen":1120470796801,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470796,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa6EAAIARS7TAqAECwKgBAQrtADUAMFm\/yxIAAAABAAAAQAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycFwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":186,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470796,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFiQBbAABAAEARtz7AqAEBwKgBAgA1Cu0ARzw7yxKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470796,"pkt_len":508,"pkt":"ADBUADRWAODtAW69CABFAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":474}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470797,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAACBa6MAAIARSyVzAAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXB0Y3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":1120470798172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470798,"pkt_len":86,"pkt":"ADBUABRUAODtAW69CABFAABIa6QAAIARS63AqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1120470798172,"flow_last_seen":1120470798172,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":187,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470800,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6UAAIARS6zAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470802,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CHdFAABIa6YAAIARS6vAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEXyVzAANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2167,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2167}
+0440{"flow_id":187,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470806,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6cAAIARS6rAqAECwKgBAQruADUANPLDNxMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":1120470200673,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1120470200673,"flow_last_seen":1120470200673,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.22.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":111,"flow_packet_id":2,"flow_first_seen":1120470202676,"flow_last_seen":1120470208684,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2760,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":1120470814186,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470814,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa6gAAIARS63AqAECwKgBAQrvADXTMAi8HBQAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":1120470814186,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":1120470814187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp"}
+0466{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470814,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKh3AgA1Cu8AR+s3HBSAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAUAAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":1120470814187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1120470814334,"flow_last_seen":1120470814334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470814,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6oAAIARS6fAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zxXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1120470814334,"flow_last_seen":1120470814334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_s_p._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0441{"flow_id":190,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470815,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6sAAIARS6bAqAECwKgBAQrwADUASDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":190,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470817,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa6wAAIARS6XAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":1120470819393,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp"}
+0441{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470819,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAAAlcwAAAIARS6TAqAECwKgBAQrwABUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3libXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470823,"pkt_len":86,"pkt":"ADBUADRWAODtAW69JXMAAABIa64AAIARS6PAqAECwKgBAQrwADUANDG\/+BUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":9587,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":9587}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":112,"flow_packet_id":2,"flow_first_seen":1120470216686,"flow_last_seen":1120470216688,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":17,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2761,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":113,"flow_packet_id":3,"flow_first_seen":1120470216783,"flow_last_seen":1120470219780,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2762,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470831400,"flow_last_seen":1120470831400,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa7IAAIARS6PAqAECwKgBAQrxADUAMKq2ehcAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAQAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1120470831400,"flow_last_seen":1120470831400,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16396,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":192,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvEAR40yeheAAAABAAEAAAAAATEBMCVzADEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":2,"flow_first_seen":1120470831400,"flow_last_seen":1120470831402,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":16396,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0951{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":508,"pkt":"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","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":474}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":1120470831516,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470831,"pkt_len":86,"pkt":"ADBUADRWAODsAW69CABFAABIa7QAAIARS53AqAECwKgBAQoIADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":1120470831516,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1120470832512,"flow_last_seen":1120470832512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470832,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7UAAIARS5zAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1120470832512,"flow_last_seen":1120470832512,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":1120470834515,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470834,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7YAAIARS5vAqAECwKgBAUbyADUANBq8DxcBAAABRwAAAAAABF9zaXAEX3VkcANzaXAJY3loZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":194,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470836,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7cAAIARS5rAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":1120470236795,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1120470236795,"flow_last_seen":1120470236795,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1120470233792,"flow_last_seen":1120470233792,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2763,"l4_proto":"udp"}
+0440{"flow_id":194,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470840,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa7gAAIARS5nAqAECwKgBAQryADUANBq8DxcBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1120470848525,"flow_last_seen":1120470848525,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":82,"pkt":"ADBUADRWAODtAW5iCABFAABEa7kAAIARS5zAqAECwKgBAQrzADUAMMmyWxkAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1120470848525,"flow_last_seen":1120470848525,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":196,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvMAR6wuWxmAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAMMAAcAMAAyeAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":2,"flow_first_seen":1120470848525,"flow_last_seen":1120470848527,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470848643,"flow_last_seen":1120470848643,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIW7sAAIARS5bAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1120470848643,"flow_last_seen":1120470848643,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0784{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470848,"pkt_len":382,"pkt":"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","pkt_caplen":382,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
+0440{"flow_id":197,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470849,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa70AAIARS5TAqAECwKgBAQr0ADUANOq3JXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj6XR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":115,"flow_packet_id":4,"flow_first_seen":1120470233796,"flow_last_seen":1120470242804,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2764,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1120470250807,"flow_last_seen":1120470250807,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2765,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1120470250805,"flow_last_seen":1120470250805,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.110","dst_ip":"192.168.1.1","src_port":2765,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1120470250906,"flow_last_seen":1120470250906,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.172","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":197,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470851,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa74AAIARS5PAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470853,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CFhFAABIa78AAIARS5LAqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAET3VkcANzaXAJY3liZXJjaXR5AuRrAFchAAE=","pkt_caplen":86,"pkt_type":2136,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2136}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470857,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABJa8QAAIARS43AqAECwKgBAQr0ADUANOq3PxkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1120470259918,"flow_last_seen":1120470259918,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":14798,"dst_port":53,"l4_proto":"udp"}
+0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":120,"flow_packet_id":2,"flow_first_seen":1120470251907,"flow_last_seen":1120470253909,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":120,"flow_packet_id":2,"flow_first_seen":1120470251907,"flow_last_seen":1120470253909,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2766,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":1120470865650,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp"}
+0436{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470865,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa8UAAIARS5DAqAECwKgBAQr1ADMAMFWvzyVzAAABAAAAAAAAATEBMAEwAzEyNwdpbj1hZGRyBGFmcGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":1120470865651,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp"}
+0466{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470865,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvUARzgrzxqAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsbmNhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":1120470865651,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470865712,"flow_last_seen":1120470865712,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470865,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa8cAAIARS4rAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaU0EX3VkcANzaXAJY3tiZXJbaXRNAmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1120470865712,"flow_last_seen":1120470865712,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sim._udp.sip.c_ber_itm.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":200,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470866,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa8gAAIARS4jAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJYzRiZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":200,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470868,"pkt_len":86,"pkt":"ADB0ADRWAODtAW69CABFAABIa8kAAIARS4jAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":200,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470870,"pkt_len":86,"pkt":"ADBrADRWAODtAW69CABFAABIa8oAAIARW4fAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3hiZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":200,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470874,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa8sAAIARS4bAqAECwKgBAQr2ADUANKezghsBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AlFrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":1120470272927,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1120470272927,"flow_last_seen":1120470272927,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"94.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":4,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":122,"flow_packet_id":2,"flow_first_seen":1120470267920,"flow_last_seen":1120470267922,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2767,"dst_port":53,"l4_proto":"udp"}
+0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":1120470270925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1120470270925,"flow_last_seen":1120470270925,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":35536,"dst_port":53,"l4_proto":"udp"}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470882,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CAhFAABEa88AAIARS4bCqAECwKgBAQr3ADUAMHGrsxwAAAABAAAAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2056,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":2056}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":1120470882726,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp"}
+0466{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470882,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvcAR1QnsxyAAAABAAEAAAAAASVzAAEwAzEyNwdpbi1hZGRyBGF2cGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":1120470882726,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":1120470882846,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp"}
+0440{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470882,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9EAAIARS4DAqAECwKgBAQr4lzUAND6uRB4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1120470883845,"flow_last_seen":1120470883845,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470883,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9IAAIARS3\/AqAECwKgBAQr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAHghAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1120470883845,"flow_last_seen":1120470883845,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":30753,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":203,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470885,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9MAAIARS37AqAECwKgBAQr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":2,"flow_first_seen":1120470883845,"flow_last_seen":1120470885848,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":123,"flow_packet_id":2,"flow_first_seen":1120470267925,"flow_last_seen":1120470276933,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2768,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1120470284935,"flow_last_seen":1120470284935,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2769,"dst_port":53,"l4_proto":"udp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":1120470284936,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1120470284936,"flow_last_seen":1120470284936,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":117,"dst_port":2769,"l4_proto":"udp"}
+0387{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470887,"pkt_len":86,"pkt":"ADBUADRWAODtAW69qYBFAABI\/dQAAIARS33AqAECwKgBAXP4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaWJ5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":43392,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43392}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":1120470891857,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470891,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa1YAAIARS3zAqAECwKgBAUr4ADUAND6u6x4BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":1120470891857,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1120470899859,"flow_last_seen":1120470899859,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEVdYAAIARS3\/AqAECwKgBAQr5ADUAMKjFfAAAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1120470899859,"flow_last_seen":1120470899859,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":205,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CvkAR4tBfACAAAABAgEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":2,"flow_first_seen":1120470899859,"flow_last_seen":1120470899861,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0486{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":1120470899862,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp"}
+1822{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":1118,"pkt":"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","pkt_caplen":1118,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":1120470899865,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470899,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9gAAIARS3nAqgECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrd0YhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":1120470899865,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470900860,"flow_last_seen":1120470900860,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470900,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9oAAIARS3fAqAECwKgBAQr6ADUANDnU8AEBAAABAAAAAAAABF9zaXAEX3VkcQNzaXAJTXliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1120470900860,"flow_last_seen":1120470900860,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udq.sip.mybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":208,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470902,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9sAAIARS3bAqAECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAheQE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":208,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470904,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa9wAAIARS3XAqAECwKgBAQr6ADUANDnJ8AEBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJTnliZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":1120470908872,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470908,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa90AAIARS3SAqAECwKgBAQr6ADUANDnJ8AEBAIgBAAAAABAABF9zaXAEX3VkcANzaXAJY3liZXNjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":1120470301328,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127,"ndpi": {"proto":"Unknown"}}
+0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1120470301328,"flow_last_seen":1120470301328,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":127}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1120470304312,"flow_last_seen":1120470304312,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"120.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1120470315653,"flow_last_seen":1120470315653,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":129,"flow_packet_id":2,"flow_first_seen":1120470303331,"flow_last_seen":1120470307336,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2770,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1120470315340,"flow_last_seen":1120470315340,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2771,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1120470315338,"flow_last_seen":1120470315338,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.57","dst_ip":"192.168.1.1","src_port":2771,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":1120470916873,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470916,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa94AAIARS3fAqAECwKgBAQr7ADUAMMzBWAIAAAABqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":1120470916875,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp"}
+0466{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470916,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqOkBwKgBAgA1CvsAR689eAKAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":1120470916875,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470916,"pkt_len":47,"pkt":"ADBUADRWAODtAaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":47,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":43690}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470923,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW4zDABFAABOa+AAAIARSm3AqAECwKgB\/wCJAIkAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":3072,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":3072}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":1120470924263,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp"}
+0457{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470924,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+EAAIARSmzAqAECwKgB\/wCJA4kAOltBhVoBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVIQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1120470332553,"flow_last_seen":1120470332553,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.184.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":134,"flow_packet_id":4,"flow_first_seen":1120470327552,"flow_last_seen":1120470336558,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2772,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1120470344560,"flow_last_seen":1120470344560,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2773,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470949427,"flow_last_seen":1120470949427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470949,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+MAAIARS27AqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3lhZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1120470949427,"flow_last_seen":1120470949427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyaercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":213,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470950,"pkt_len":86,"pkt":"ADBUADRWAODtAW49CABFAABIa+QAAIARS23AqAECwKgBAQr8ADUANNjGUZgBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":213,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470952,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+UAAIARS2zAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470954,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+YAEIARS6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0440{"flow_id":213,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470958,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+cAAIARS2rAqAECwKgBAQr8ADUANNjGUQIBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":1120470361584,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1120470361584,"flow_last_seen":1120470361584,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.9.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":137,"flow_packet_id":4,"flow_first_seen":1120470356585,"flow_last_seen":1120470365590,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2774,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":1120470966440,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa+gAAIARS23AqAECwKgBAQr9ADUAMIS+oAMAAAABAAAAAAAAATEBMAEwEzEyNwdpbi1hZGByBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":1120470966440,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127_in-ad_r_arpa___","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":105,"pkt":"AJrtBW69ADBUADRWCABFAJFbeQBAAEARtz7AqAEBwKgBAgA1Cv0AR2c6oAOAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGTyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+1416{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":856,"pkt":"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","pkt_caplen":856,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":822}
+0767{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":371,"pkt":"ADBUADRWAODtAW69CABFAAFla+oIAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":337}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470966852,"flow_last_seen":1120470966852,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470966,"pkt_len":86,"pkt":"ADBUADR2AODtAW69CABFAABIa+sAAIARS2bAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcAJzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1120470966852,"flow_last_seen":1120470966852,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470967,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa+yjAIARS2XAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470969,"pkt_len":86,"pkt":"ADBUADRWAODtASVzAABFAABIa+0AAIARS2TAqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABGRzaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":0,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":0}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470971,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69AABFAABOa+4AAIARSl\/AqAECwKgB\/wCJAIkAOlt8hV8BEAABAAAAAAAAIEVGRW9FSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQTVNAAAgAAE=","pkt_caplen":92,"pkt_type":0,"pkt_ipoffset":14}
+0185{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":0}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":1120470971822,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470971,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABOa+8AAIARSl7AqAECwKgBJXMAAIkAOls8hV8BEAABAAAAAAAAIUVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":1120470971822,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470971,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAGVIa\/AAAIARS2HAqAECwKgBAQr+ADUANOrBPwUBAAABAAAACAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0442{"flow_id":215,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470975,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa\/IAAIARS1\/AqAECwKgBAQr+ADUANOrBPwUBAAABAAAAAAAABF9zaWIEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":2,"flow_first_seen":1120470966852,"flow_last_seen":1120470975858,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sib._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":139,"flow_packet_id":2,"flow_first_seen":1120470373592,"flow_last_seen":1120470373593,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2775,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":1120470983860,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470983,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEa\/cAAIARS17AqAECwKgBAQr\/ADUAMJu6iQWqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":1120470983860,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":170,"num_answers":254,"reply_code":10,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470983,"pkt_len":105,"pkt":"AODtam69ADBUADRWCABFAABLAABcAEARtz7AqAEBhagBAgA1Cv8AR342iQWAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470983999,"flow_last_seen":1120470983999,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470983,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIa\/kAAIARS1jAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABOxzaXAEX3VkcANzaHAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1120470983999,"flow_last_seen":1120470983999,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.shp.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":1120470984353,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0815{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470984,"pkt_len":366,"pkt":"ADBUADRWAODt4G69CABFAAFga\/oAAIARFdPAqAEC1PIhyRPEE8QBRC7GQUNLIHNpcDozNTEwNDcwNEBzaXAuY3liZXJjaXR5LmRrIFNJUC8yLjANCkZyb206ICJhcmlrIiA8c2lwOjM1MTA0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":366,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":1120470984353,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0441{"flow_id":218,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":86,"pkt":"ADBUADTZAODtAW69CABFAABIa\/sAAIARS1bAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkUQNzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0616{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/wAAIARFmjAqAED1PIhJHUwncgAHRjegAhvrgAABNg3lstx1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1U\/V1dXV1REEHBgYEhIeEBQXahMcGAQEBQYBAQAHBQUZEwUbGRATGQUEBAcDAgMDAAACDQ0NAAEDDQwNAAABAgMBBgYBDw4eDAMABwYAAwMGBwEEBgYbHxwRaWBiFBEQFGoTFWBpYX10UltZ10dcVlJVREtCdatzeFp8bmgUag==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":1120470985418,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0617{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUNjRWAODtAW69CABFAADIa\/0AAIARFmfAqAECJXMAJHUwncgAtL+rgAhvrwAABXg3lstxbmgVFGoUFBVpYG5qbG5kbGoWF2xubWBmfn9Fxsnw\/Ofz+uXwy+phC83k+sJTdF9CW\/bw8vzg7pfo8ldaT011Z399ZmV0dUN4S0dVQ2dmbWNsZGZkeGRvbxQUbBcRExAXEBwfHRAQFhAQHxwfGR4YEBcSFGxibWNqFRUXbmV3ckDQ93N9fmJnYmoVahcVZa9xWll+YGZ6cnJJZXpgeF1EQg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":1120470985418,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1120470985421,"flow_last_seen":1120470985421,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0618{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/4AAIARFmbAqAEC1PIhJHUwncgAtNyMgGNvsAAABhg3lstxcX5wdvzF0Et0dn92T1BB0VhmZ2V\/Z294Y2ZmahQXFhQREBAVb2ZPemVlYWJoYE9\/YWZkcnV4bWwVFRVqZ2xpYn94ZmBnY2F0zfjXdmNiYXhveHJgaW5jUFlwZTFkYc9lamoREhAQEx4fHx0XahRvRl1F3V5ESXjQxFFR39TfQXR\/Z9L15ebs6JeW7+DslJOU6uqUn5CcnJKX+Ofs5+Hg6g==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1120470985421,"flow_last_seen":1120470985421,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0615{"flow_id":222,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/8AAIARFmXAqAEC1PIhJHUwncgAtJlvgAhvsQAABrg3lstxkpfo6Zfq5frn5uz6+gt4emFkcGBneMvv7+rslZHuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_id":222,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAAAAIARFmTAqAEC1PIhJHUwncgAtMoSgAhvsgAABVg3lstxRH1wXN719vLg7uHxw3h4ZHZhfE9UWV\/RzzPt5\/PklJOUlJXt4uzx+Pjm5vPHzf38\/fr05+3ikurj4ezn4+H6\/97AwEJ8S9DN9Vd1XdzJ8eDp6eXwzcXWRUJnZHhnYX96aHLW+ubo6eHg5\/DG\/MNRcE3B+ubNy+Xu7Obt7+qX4+7oy9fw3vLT3N1W19X49PBBf39jZnhmbBEdEWpqb2BweA==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0615{"flow_id":222,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAEAAIARFmPAqAEC1PIhJHUwncgAtHeogAhvswAAB\/g3louqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":222,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAIAAIARFmLAqAEC1PIhJHUwncgAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":1120470985504,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0618{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAMAAIARFmHAqAEC1vIhJHUwncgAtLaDgAhvtQAACTg3lstx6urs5ueUkJOXlZGWbOyVlOD46O7hzXXbxsfz\/OLg5ufawPH4wk3N8Obu7+Pv6unk4fj\/29jZ1\/7l4+Ht7JOXyOrs4vPPUfVQz97J5fLjl5GXkpyRl+jqk5aQlero4svh7+rslJfp6uP+9vbL+OLg5vj99\/LL9ub4+uTs6ZSVlJXp6Ojv7eqWkZOTnJORkpCbk5GXlpaRkJBK6ejp7JWXlw==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":1120470985504,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0618{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAb+9CABFAADIbAQAAIARFm9RqAEC1PIhJHUwncgAtIfqgAhvtgAACdg3lstxlpDplp2cmZ6fkpaRle3n9PTy\/CVzAJKehIeEmJGRl52QlJaX6OOU6JaRlp2cn4WEhZ2RkJeV6WOQnZ6EhJOFh4WFmYWYk7+dkpCQ6u\/qkZ2fmYSYnZ6Rk5OU7OD6+Pbh4PTl+OTo6unl9eXi7f7c1VT\/+uiX6JSUkJCV7uXm\/Obu7pWWkZeW7OPpk5Ofm5+Yk5WV7untlJeSkpeV7+qWkA==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470986,"pkt_len":146,"pkt":"ADBUADRWAODtAW69UgBFAACEbAVoAIARFqPAqAEC9PIhJHUxnckAcCyBgMgABjeWy3FCyQfKXvrGAwAAJMMAAAAJAAAGDIHKAAs3lstxAR0xMTg5NDI5Ny00NDMyYTlmOEAxOTIuMTY4LjEuMgYFU0lQUFMAAIHLAAY3lstxEHNlc3Npb24gc2h1dGRvd24AAAE=","pkt_caplen":146,"pkt_type":20992,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":20992}
+0440{"flow_id":218,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470987,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbAYAAIARS0vAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470989,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbAdtAIARS07AqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaVN5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0440{"flow_id":218,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120470993,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbAgAAIARS0nAqAECwKgBAQsAADUANFW+1AYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":140,"flow_packet_id":4,"flow_first_seen":1120470385615,"flow_last_seen":1120470394622,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2776,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":1120471001245,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEbDoAAIARSxvAqAECwKgBAQsGADUAMBixDAgAAAABEAAAAAAAATEBMAEwAzHvNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":105,"pkt":"AODtAW4lcwBUADRWCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":71}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":1120471001263,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+1003{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":1120471001263,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0967{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":522,"pkt":"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","pkt_caplen":522,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":488}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1120471001714,"flow_last_seen":1120471001714,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471001,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbDwAAIARSxXAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1120471001714,"flow_last_seen":1120471001714,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":227,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471002,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbD8gAIARSxTAqAECwKgBAQsHADUANKe0gjgBAAABAAAAAAAABF9zaXAEXXVkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471004,"pkt_len":86,"pkt":"ALlUADRWAODtAW69CABFAABIbD4Au4ARSxNYqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0440{"flow_id":227,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471006,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbEcAAIARSwrAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAApAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":3,"flow_first_seen":1120471001714,"flow_last_seen":1120471006712,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":41,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":227,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471010,"pkt_len":86,"pkt":"ADBUADRWAODtAW6kCABFAABIbEgAAIARSwnAqAECwKgBAQsHADUANKe0ggkBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":4,"flow_first_seen":1120471001714,"flow_last_seen":1120471010718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":1120470402627,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1120470402627,"flow_last_seen":1120470402627,"flow_tot_l4_data_len":13,"flow_min_l4_data_len":13,"flow_max_l4_data_len":13,"flow_avg_l4_data_len":13,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1120470402625,"flow_last_seen":1120470402625,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2782,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1120470402624,"flow_last_seen":1120470402624,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.33.2","dst_ip":"192.168.1.1","src_port":2782,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120471018720,"flow_last_seen":1120471018720,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471018,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEbEkAAIARSwzAqAECwKgBAQsIADUAMBesDQsAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1120471018720,"flow_last_seen":1120471018720,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":228,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471018,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwgAR8InDQuAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAgQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":2,"flow_first_seen":1120471018720,"flow_last_seen":1120471018721,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0727{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471018,"pkt_len":342,"pkt":"AODtAW69ADBUADRWCABFAAFIAABACDcRiuXU8iEjwKgBAhPEE8QBNCHFU0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiAyOTg1ODE0qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":308}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120471019307,"flow_last_seen":1120471019307,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471019,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbEwAAIARSwXAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1120471019307,"flow_last_seen":1120471019307,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":229,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471020,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbE4AAIARSwPAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAAcF9zaXAEX3VkcANzaXAJY3liZXJjaXT5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":2,"flow_first_seen":1120471019307,"flow_last_seen":1120471020302,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":229,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471022,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFAAAIARSwHAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":229,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471024,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFEAAIARSwDAqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":4,"flow_first_seen":1120471019307,"flow_last_seen":1120471024307,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0441{"flow_id":229,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471028,"pkt_len":86,"pkt":"ADBUADRWAODtARe9CABFAABIbFIAAIARSv\/AqAECwKgBAQsJADUANMyuXQ0BAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1120470419648,"flow_last_seen":1120470419648,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"0.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":144,"flow_packet_id":3,"flow_first_seen":1120470414647,"flow_last_seen":1120470423654,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2783,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1120470431657,"flow_last_seen":1120470431657,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.5.2","src_port":53,"dst_port":2784,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1120470431656,"flow_last_seen":1120470431656,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2784,"dst_port":53,"l4_proto":"udp"}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":1120471033895,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0659{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471033,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAADlbFMAAIARSWPAqAECwKgB\/wCKAIoA0VrwEQ6FZMCoAQIAigC7AAAgRUVEQURBBENERURHREZDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJOAP+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":1120471033895,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1120471036315,"flow_last_seen":1120471036315,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471036,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEbFQAAIARSwHAqAECwKgBAQsKADUAMJWmjw4AAAABAAAAAAAAATEBEgEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1120471036315,"flow_last_seen":1120471036315,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1._.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":231,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471036,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1CwoAR3gijw6AAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAgAwAAcAMAAwAAQAAJRAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":2,"flow_first_seen":1120471036315,"flow_last_seen":1120471036317,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0477{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":1120470442140,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19,"ndpi": {"proto":"Unknown"}}
+0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1120470442140,"flow_last_seen":1120470442140,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","l4_proto":19}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":105,"flow_packet_id":2,"flow_first_seen":1120470171641,"flow_last_seen":1120470448149,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1120470444143,"flow_last_seen":1120470444143,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"200.168.1.2","dst_ip":"192.168.1.1","src_port":2785,"dst_port":53,"l4_proto":"udp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":1120470447197,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1120470447197,"flow_last_seen":1120470447197,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":35721,"l4_proto":"udp"}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":1120471048339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471048,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFYAAIARSvvAqAECwKgBcgsLADUANESJJXMAAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":1120471048339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":1120471049334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471049,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFcAAIARSvrAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaU15Alb4AAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":1120471049334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercimy.v_","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471051,"pkt_len":86,"pkt":"ADBUADRWAODtAW69SABFAABIbFgAAIARQvnAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":18432,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","type":18432}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":1120471053339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471053,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbFkAAIARSvjAqAECwKoBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJj8XR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":1120471053339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cyberc_ty.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471057,"pkt_len":86,"pkt":"ADBcADRHAODtAW69CABgAABIbFoAAIARSvfAqAECwKgBAQsLADUANESJ5TABAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liRXdjaXR5AmRrAAAhgAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","protocol":2048}
+0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":1120470456286,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1120470456286,"flow_last_seen":1120470456286,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":9587,"dst_port":196,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1120470456151,"flow_last_seen":1120470456151,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.3","src_port":2786,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1120470456513,"flow_last_seen":1120470456513,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.3.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":1120471065347,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471065,"pkt_len":82,"pkt":"ADBUADRWAODtAW69CABFAABEJXMAAIARSvrAqAECwKgBAQsMADUAMOiAPDIAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":1120471065347,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":1120471065349,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp"}
+0466{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471065,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAAFAAEARtz7AqAEBwKgBAgA1CgwAR8r8PDKAAAABAAHJAAAAATEBMAEwAzEyN0ppbi1hZGRyBGFycGEAABwAAcAMAAwAAQBsJxAADwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":1120471065349,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":1,"num_answers":1,"reply_code":0,"query_type":0,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":1120471067211,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471067,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABObF0AAIARSfDAqAECwKgB\/wALAIkAOls0hWcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":1120471067211,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":1120471068711,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471068,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AODtAW69CABFAABObF8AAIARSe4+qAECwKgB\/wCJAIkAOls0hWcBEAABAAAAAAAAIEVGRURFSkZQRUVFUEVORUJFSkVPQ0FDQUNBQ0FDQUJNNQAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":1120471068711,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":154,"flow_packet_id":4,"flow_first_seen":1120470457512,"flow_last_seen":1120470465524,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2787,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1120470473526,"flow_last_seen":1120470473526,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2788,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471077370,"flow_last_seen":1120471077370,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471077,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGAAAIARSvHAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1120471077370,"flow_last_seen":1120471077370,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0440{"flow_id":239,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471078,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGEAAIARSvDAqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471080,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABjbGIAAIARSu\/AqAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3muZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":1120471082371,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471082,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGMAAIARSu7AqDYCwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcCVzAHAJY2liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":1120471082371,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":28681,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471084097,"flow_last_seen":1120471084097,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471084,"pkt_len":76,"pkt":"ADBUADQ1AODtAW69CABFAAA+bGQAAIARSvfAqAECwKgBAQsOADUAKohoTTQBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAQQEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1120471084097,"flow_last_seen":1120471084097,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":16641,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":241,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471085,"pkt_len":76,"pkt":"JDBUADRWAODtAW69CABFAAA+bGUAAIARSvbAqAECwKgBAQsOADUAKohoTTUBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":2,"flow_first_seen":1120471084097,"flow_last_seen":1120471085095,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":1120471086377,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471086,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbGYAAIARSut0qAECwKgBAQsNADUANFmE0DMBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":1120471086377,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":241,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471087,"pkt_len":76,"pkt":"ADBUADRWAODtAW69CABFAAA+bGcAAIARSvTAqAECwKgBAQsOADUAKohoTTUBAAABAAAAAAAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":156,"flow_packet_id":4,"flow_first_seen":1120470474627,"flow_last_seen":1120470482638,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2789,"dst_port":53,"l4_proto":"udp"}
+0498{"flow_id":241,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471088,"pkt_len":128,"pkt":"AODtAW69ADBUADRWCABFAAByAABAAEARtyfAqAEBwKgBAgA1Cw4AXmA7TTWBgAABAAEAAgAAA3NpcAljeWJlcmNpdHkCZGsAAAEAAcAMAAEAAQAAAVUABNTyISPAEAAmAgEAAAEsAAYDbnMxwBDAEAACAAEAAAEsAAYDbnMywBA=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":4,"flow_first_seen":1120471084097,"flow_last_seen":1120471088463,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"sip.cybercity.dk","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"212.242.33.35"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471094410,"flow_last_seen":1120471094410,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471094,"pkt_len":82,"pkt":"ADBUADRWAODtAW5TCABFAABEbGgAAIARSu3AqAECwKgBAQsPADUAMMF5YzYAAAABAAAAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1120471094410,"flow_last_seen":1120471094410,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_id":243,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471094,"pkt_len":105,"pkt":"AODtAW69ADBUADRWCABFAABbAABAAEARtz7AqAEBwKgBAgA1Cw8AR6P1dTaAAAABAAEAAAAAATEBMAEwAzEyNwdpbi1hZGRyBGFycGEAAAwAAcAMAAwAAQAAJxAACwlsb2NhbGhvc3QA","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":2,"flow_first_seen":1120471094410,"flow_last_seen":1120471094412,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.0.0.127.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1120470490782,"flow_last_seen":1120470490782,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.37.115.0","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":1120470495627,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1120470495627,"flow_last_seen":1120470495627,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1120470494127,"flow_last_seen":1120470494127,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.194.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":1120470490640,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1120470490640,"flow_last_seen":1120470490640,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2790,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1120470492042,"flow_last_seen":1120470492042,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1120470501450,"flow_last_seen":1120470501450,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.67.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1120470496048,"flow_last_seen":1120470496048,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1120470491041,"flow_last_seen":1120470491041,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.79.2","dst_ip":"192.168.1.1","src_port":2791,"dst_port":53,"l4_proto":"udp"}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471106,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbG4A3oARSuPAqAECwKgBAQsQJXMANDd+8jYBAFEBAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","l4_data_len":52}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":1120471107427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp"}
+0440{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","pkt_oversize":false,"pkt_ts":1120471107,"pkt_len":86,"pkt":"ADBUADRWAODtAW69CABFAABIbJIAAIARSuLAqAECwKgBAQsQADUANDd+8jYBAAABAAAAAAAABF9zaXAEX3VkcANzaXAJY3liZXJjaXR5AmRrAAAhAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":1120471107427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"_sip._udp.sip.cybercity.dk","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":1120470834515,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1120470834515,"flow_last_seen":1120470834515,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":18162,"dst_port":53,"l4_proto":"udp"}
+0522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":1120470781608,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1120470781608,"flow_last_seen":1120470781608,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":177,"flow_packet_id":2,"flow_first_seen":1120470717078,"flow_last_seen":1120470717080,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":308,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":432,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1120471068711,"flow_last_seen":1120471068711,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"62.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1120471067211,"flow_last_seen":1120471067211,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":11,"dst_port":137,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1120470659308,"flow_last_seen":1120470659308,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"107.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1120470662062,"flow_last_seen":1120470662062,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"115.0.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1120470670573,"flow_last_seen":1120470670573,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.37.115","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":171,"flow_packet_id":7,"flow_first_seen":1120470658556,"flow_last_seen":1120470672075,"flow_tot_l4_data_len":406,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1120470657808,"flow_last_seen":1120470657808,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.184.189.41","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1120470588783,"flow_last_seen":1120470588783,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.112","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1120470589532,"flow_last_seen":1120470589532,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.136.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":0,"flow_packet_id":69,"flow_first_seen":1120469540839,"flow_last_seen":1120471067960,"flow_tot_l4_data_len":3994,"flow_min_l4_data_len":50,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1120471033895,"flow_last_seen":1120471033895,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":169,"flow_packet_id":3,"flow_first_seen":1120470657808,"flow_last_seen":1120470666317,"flow_tot_l4_data_len":546,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1120470685610,"flow_last_seen":1120470685610,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1120470984353,"flow_last_seen":1120470984353,"flow_tot_l4_data_len":332,"flow_min_l4_data_len":332,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":332,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.201","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1120471001263,"flow_last_seen":1120471001263,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.234.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":11,"flow_packet_id":57,"flow_first_seen":1120469572981,"flow_last_seen":1120471094413,"flow_tot_l4_data_len":22875,"flow_min_l4_data_len":13,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":401,"midstream":0,"l3_proto":"ip4","src_ip":"212.242.33.35","dst_ip":"192.168.1.2","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":1120470721915,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1120470721915,"flow_last_seen":1120470721915,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.41","dst_ip":"192.168.1.255","src_port":138,"dst_port":394,"l4_proto":"udp"}
+0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":1120470882846,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1120470882846,"flow_last_seen":1120470882846,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":38709,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1120470831516,"flow_last_seen":1120470831516,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2568,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1120471065349,"flow_last_seen":1120471065349,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2572,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":1120470908872,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1120470908872,"flow_last_seen":1120470908872,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"128.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1120471086377,"flow_last_seen":1120471086377,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"116.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
+0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":1120470819393,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1120470819393,"flow_last_seen":1120470819393,"flow_tot_l4_data_len":17,"flow_min_l4_data_len":17,"flow_max_l4_data_len":17,"flow_avg_l4_data_len":17,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":21,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1120470509447,"flow_last_seen":1120470509447,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2792,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":179,"flow_packet_id":3,"flow_first_seen":1120470764674,"flow_last_seen":1120470768028,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":42,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2793,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":182,"flow_packet_id":3,"flow_first_seen":1120470775129,"flow_last_seen":1120470779409,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1120470774132,"flow_last_seen":1120470774132,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.108.1","src_port":2794,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":181,"flow_packet_id":4,"flow_first_seen":1120470775049,"flow_last_seen":1120470779408,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2795,"dst_port":53,"l4_proto":"udp"}
+0668{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":1120470788806,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1120470788806,"flow_last_seen":1120470788806,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.129","src_port":2796,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":183,"flow_packet_id":3,"flow_first_seen":1120470779487,"flow_last_seen":1120470782692,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2796,"dst_port":53,"l4_proto":"udp"}
+0667{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":186,"flow_packet_id":2,"flow_first_seen":1120470796801,"flow_last_seen":1120470796802,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":186,"flow_packet_id":2,"flow_first_seen":1120470796801,"flow_last_seen":1120470796802,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2797,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":187,"flow_packet_id":3,"flow_first_seen":1120470798172,"flow_last_seen":1120470806184,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2798,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1120470814187,"flow_last_seen":1120470814187,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.119.2","src_port":53,"dst_port":2799,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1120470814186,"flow_last_seen":1120470814186,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2799,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":190,"flow_packet_id":3,"flow_first_seen":1120470814334,"flow_last_seen":1120470817390,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2800,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":192,"flow_packet_id":2,"flow_first_seen":1120470831400,"flow_last_seen":1120470831402,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2801,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":194,"flow_packet_id":3,"flow_first_seen":1120470832512,"flow_last_seen":1120470840523,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2802,"dst_port":53,"l4_proto":"udp"}
+0510{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":1120470865650,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1120470865650,"flow_last_seen":1120470865650,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2805,"dst_port":51,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":196,"flow_packet_id":2,"flow_first_seen":1120470848525,"flow_last_seen":1120470848527,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2803,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":197,"flow_packet_id":3,"flow_first_seen":1120470848643,"flow_last_seen":1120470851639,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2804,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1120470865651,"flow_last_seen":1120470865651,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2805,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":200,"flow_packet_id":5,"flow_first_seen":1120470865712,"flow_last_seen":1120470874723,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2806,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1120470882726,"flow_last_seen":1120470882726,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2807,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1120470891857,"flow_last_seen":1120470891857,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":19192,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":203,"flow_packet_id":2,"flow_first_seen":1120470883845,"flow_last_seen":1120470885848,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2808,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":205,"flow_packet_id":2,"flow_first_seen":1120470899859,"flow_last_seen":1120470899861,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2809,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":208,"flow_packet_id":3,"flow_first_seen":1120470900860,"flow_last_seen":1120470904866,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1120470916875,"flow_last_seen":1120470916875,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.233.1","dst_ip":"192.168.1.2","src_port":53,"dst_port":2811,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":1120470916873,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1120470916873,"flow_last_seen":1120470916873,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2811,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":213,"flow_packet_id":4,"flow_first_seen":1120470949427,"flow_last_seen":1120470958433,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2812,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1120470966440,"flow_last_seen":1120470966440,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2813,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":215,"flow_packet_id":2,"flow_first_seen":1120470966852,"flow_last_seen":1120470975858,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2814,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1120470983860,"flow_last_seen":1120470983860,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2815,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":218,"flow_packet_id":4,"flow_first_seen":1120470983999,"flow_last_seen":1120470993243,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2816,"dst_port":53,"l4_proto":"udp"}
+0666{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":1120471001245,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"num_queries":0,"num_answers":0,"reply_code":0,"query_type":0,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1120471001245,"flow_last_seen":1120471001245,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2822,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":227,"flow_packet_id":4,"flow_first_seen":1120471001714,"flow_last_seen":1120471010718,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2823,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":228,"flow_packet_id":2,"flow_first_seen":1120471018720,"flow_last_seen":1120471018721,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2824,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":229,"flow_packet_id":5,"flow_first_seen":1120471019307,"flow_last_seen":1120471028313,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2825,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":231,"flow_packet_id":2,"flow_first_seen":1120471036315,"flow_last_seen":1120471036317,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2826,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1120471049334,"flow_last_seen":1120471049334,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1120471048339,"flow_last_seen":1120471048339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.114","src_port":2827,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1120471065347,"flow_last_seen":1120471065347,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2828,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1120471082371,"flow_last_seen":1120471082371,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.54.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":239,"flow_packet_id":2,"flow_first_seen":1120471077370,"flow_last_seen":1120471078365,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2829,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":241,"flow_packet_id":4,"flow_first_seen":1120471084097,"flow_last_seen":1120471088463,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":42,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2830,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":243,"flow_packet_id":2,"flow_first_seen":1120471094410,"flow_last_seen":1120471094412,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":48,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2831,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1120471107427,"flow_last_seen":1120471107427,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.1","src_port":2832,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1120470509449,"flow_last_seen":1120470509449,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":71,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"240.168.1.2","src_port":53,"dst_port":2792,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1120470971822,"flow_last_seen":1120470971822,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.37","src_port":29440,"dst_port":137,"l4_proto":"udp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":1120470899862,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1120470899862,"flow_last_seen":1120470899862,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":17860,"l4_proto":"udp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":1120470924263,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1120470924263,"flow_last_seen":1120470924263,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.1.255","src_port":137,"dst_port":905,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1120470985511,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"81.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":222,"flow_packet_id":5,"flow_first_seen":1120470985421,"flow_last_seen":1120470985466,"flow_tot_l4_data_len":900,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.3","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1120470985504,"flow_last_seen":1120470985504,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"214.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1120470899865,"flow_last_seen":1120470899865,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.170.1.2","dst_ip":"192.168.1.1","src_port":2810,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1120471053339,"flow_last_seen":1120471053339,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.170.1.1","src_port":2827,"dst_port":53,"l4_proto":"udp"}
+0518{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":1120470684859,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1120470684859,"flow_last_seen":1120470684859,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"192.168.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1120470985418,"flow_last_seen":1120470985418,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"37.115.0.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0158{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-06-26-2594.pcap"}
diff --git a/tests/result/nDPId_fuzz-2006-09-29-28586.pcap.txt b/tests/result/nDPId_fuzz-2006-09-29-28586.pcap.txt
new file mode 100644
index 000000000..900840352
--- /dev/null
+++ b/tests/result/nDPId_fuzz-2006-09-29-28586.pcap.txt
@@ -0,0 +1,261 @@
+0373{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854484,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CQBFAAAo8EpAAIAGrEqsFAMFrBQDDQooAFDkFf3+yWv\/bVARIal6iQAABIGD1GDD","pkt_caplen":60,"pkt_type":2304,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","type":2304}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1031854484481,"flow_last_seen":1031854484481,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp"}
+0396{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854484,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKVAAEAGF\/CsFAMNrBQDBQBQCijJa\/9t5BX9\/1AQgywZBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854484,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKZAAEAGF++sFAMNrBQDBQBQCijJa\/9t5BX9\/1ARgywZBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854484,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAo8UpAAIAGq0qsFAMFrBQDDQooAFDkFf3\/yWv\/blAQIal6iAAABIGD1GDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":60,"pkt":"CAAgsl17AFCLk5J8CMZFAAAs9EpAAIAGqEasFAMFrBQDDQopAFDkS6qJAAAAACUCMACAnQAAuAQFtGBh","pkt_caplen":60,"pkt_type":2246,"pkt_ipoffset":14}
+0187{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","type":2246}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1031854488666,"flow_last_seen":1031854488666,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp"}
+0401{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxKdAAEAGF+qsFAMNrBQDBQBQCinJpw1U5EuqimASgyxGZAAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAo9UpAAIAGp0qsFAMFrBQDDQopAFDkS6qKyacNVVAQIji\/FQAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":1514,"pkt":"CAAgsl17AFCLk5N8CABFAAXc9kpAAIAGoJasFAMFrBQDDQopAFDkS6qKyacNVVAQIjheTQAAUE9TVCAvc2VydmxldHMvbW1zIEhUVFAvMS4xDQpIb3N8OiAxNzIuMjAuMy4xMw0KT3B0OiDQaHR0cDovL3d3dy53My5vcmdtMTk5OS8wNi8yNC1DQ1BQZXhjaGFuZ2UiOyBucz01Ng0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi92bmQud2FwLm1tcy1tZXNzYWdlDQpBY2NlcHQ6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuDQpVc2VyLUFnZW50OiBTb255RXJpY3Nzb25UNjgvUjIwMUENCkFjY2VwdC1DaGFyc2V0OiAqDQo1Ni1Qcm9maWxlLURpZmYtMTowPD94bWwgdmVyc2lvbj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3Lnd2Lm9yZy8xOTk5LzAyL6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":1514,"pkt":"CAAgsl17AFCLk5N8CABFAAXc90pAAIAGn5asFAMFrBQDDQopAFDkS7A+yacNVVAQIjhRbwAAMjAxLnhtbCIsIjEtT3dQVndnTWs4aXRxR3gwOGZNWXVTdz09IiwiMi1IZ0NURVFFMW8ydmVOM0ZCeW8xLzVnPT0iLCIzLXpJdGdzSXlLQnBCem01c2xPb2RISEE9PSINCkNvb2tpZTogVXNlci1JZGVudGl0eS1Gb3J3YXJkLXBwcC11c2VybmFtZT02QzZENjM2RDZGNkM2Ng0KQ29vmmllOiBVc3VyLUlkZW50aXR5LUZvcndhcmQtbXNpc2RuPTM0MzkzMTPXMzIzNjMxMzAzMTMwMzAzNA0KQ29va2llOiBVc2VyLUlkZW5kaXR5LUF1dGhlbnRpY2F0aW9uPUJlYXJlcg0KQ29va2llOiBJcC1BZGRyZXNzPTE5Mi4xNjh3Mi4xMw0KQ29va2mOOiBCZWFyJXMAVHlwZT1VRFANCldBUC1Db25uZWN0aW9uOiBTdGFjay1UeXBlPUNPDQpDb29raWU6IHd0bHMtc2VjdXJpdHktbGV2ZWw9bm9uZQ0KQ29udGVudC1MZW5ndGg6IDM5NTYNCg0KjICYMS05Z2EwAI2QhQQ9gOeoiQGBlys0OTE3MjYxMDEwMDQvVFlQRT1QTE1OAJZSRTogAIqAiASBAg4Qj4GUgYaAkICEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":1031854488668,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":81,"dst_port":2601,"l4_proto":"tcp"}
+0394{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKhAAEAGF+2sFAMNrBQDBQBRCinJpw1V5EuwPlAQgyxYbQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":1031854488668,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp"}
+0394{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKlAAEAGJXMAFAMNrBQDBQBQCinJpw1V5Eu18lAQgyxSuQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":1514,"pkt":"CAAgsl17AFCLk5N8CABFAAXc+EpAAIAGnpasFAMFrBQDDQopAFDkS7XyyacNVVAQIji3tQAApDAxgASgCvTaPPgeM+XgsJQEIgodGH0mb5SODuKqBDRCxAo8xI9ibn5zZAQNATm1rQuB\/Tv\/9pIEM+YYAxz234p8wqMEBCloMXhtvJDO3jHSDAQpiww+VXGU8j4aFJIEkgoaODzItbTK\/3Okohxs5omFIJUaBLdDxARuChTIdrimOXAFrkwELScHBx3qH4ZDwBOKBA3TYPo+L4LS+vdrgAQbbMsRHffBx806m1oEDdNrNzk9jiKMy+82BDFR20Ul6eTmKw+NPgRKPRH5vWSRX0xgi9wEMwDKKBX+FayuGTmCBEQmEIgt4KRe0NsHZgQZMhw5dQT1RcD+FggEGR4UM107FbFtg428BBomcIOYLoHrWZo1EAQCbAAYPTF8pwGAGXgEbiaAzz35MVq76N7ABBBfIjOlDJRDwiRGkAQ0bCCHjYb\/nK3EXJYEnSYOqDU4dFKZH7H4BNCeweih\/+hUv5Ml1gQ5QgcIklWaoT0ADBQEMTPWCLSfWPJfKLLgBBtCy82SUDmkN3j8XAS3M\/8IMTNoXtNUv6wEIsAYCBeB4FLAwBiUBCEmFvgV+VW14pnhYgTKAA6DmCzRqtAdecAEAiYIx5kRJ7pH3oksBA3Tvxhc0jat02LVvASSU7uzlVu0mcqpbyIERAoQ44hkUDv4vnewBA1yI1qRTghUPlgwigQDCjGbpShq3rOi024EZAcuZ6J\/kD3RZjXUBG69La2ledXXTntSXgQaAC2t04FH1aMt5RIEGo8q3cXbYFpAFQ8iBAKLJznliQBpy7c06gQB1inLkNphI85iN34EAUDnPOrPQNLmTbgOBA4eKB6VnpFDTYiEGARawh494InghrNGonKEDsKzvYV6IKTjquR+BBrR8Kic1OdIymYfHgQBOnM5lWtE7NhzybgEW1EiybWZwaamcaCsBCLAGXy1hWXZ+xLCggQjGQTOzEyXViGRBToEYBQbfJWNES1dDFmGBOAeZC6VXiEe4wTgKARbwC2M3cVhtfM2dvIEXwATO51479XQKsmcBMrTITWtHz2cpIacWgSgQiJt7ax+H98dCLYEYEImrd1jOizCQRCCBAITIq3kvAAoURDlqgQBcyKtyao8jNBiABgEGgcirZ3YXuzCIIOqBCIKoq2tOBC1RkVs+gRgayKpoe9YqiVzAM4EGmsk6JTH0eSkCwigBBpzIdmhPYnO6s02FgQa8CJ0rXcBzSSWt2IEbs8iibGvWC\/PMJykBDGSJ6y9kSu7QiieEATKkjKtlM0xytkRH+YEwJJIbOKlTBs3gOc0BCFrjErVxPwc3UrG7ATQkj6tmWBsAuNWWSQEG\/Y6q9WOKsJ0OQJUBBxrOum5o3wEHEFw4gQbazmbsqkRfULyUI4EbsY6bHU5XBTwV1tyBGBzOnmyUnFQcAxq\/gRgxjqtlUYdcNMIORAEwNw6abCPGcptRZcEBGDGOkyRfFkCbx5gMASSEquolHpQyoKBFwIEAo3AeKQ1EEIKhFO0BGBsOjvZTT6ZTwS7egQcazdr1M03efjiJTgEYDMzfZ9vBbKkYVGYBJ2SQq3dyJEaIxgirAQhQkLttFRXZB6cwWoEAvFA6ZLeWjh+4ZEDBC2NQpqyT9gX8ZmpdAQBjUabo+MHxEXYt\/JEYHNF2YzZT+eYn71EBAGyQ1u9ixDXGTRNRARgjUdsqBFoQ\/VME\/4EYMFGuJXT5QDtECRsBGCNSNr30BNENlHIIgQh80+lw2eeVwomkMgEAvNQ7oyyHvqzpF6oBBvz3rmK9l\/NICUqAAQQxwxxg0m+rTTtZXIEWpQJLapSn3hQckuABBAdEqyzlW6HtJ01egRfTxDpddVg+g21viAEoJTws4izwYbSnLPSBBodDBua3iHXJJR4RAQ8jQzYZ22xJLyfVqoEOy3ZejLimzpyF0F0BFsdEz2YWSCyQDFIfARujeDpMrEaWm+FKHY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":1501,"pkt":"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","pkt_caplen":1501,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxKpAAEAGF+usFAMNrBQDBQBQCinJpw1V5EvBTVAwgyxHXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854488,"pkt_len":243,"pkt":"AFCLk5N8CAAgsl17VQBFAADlxKtAAEAGFy2sFAMNrBQDBQBQCinLpw1V5EvBTVAYgyzwBgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXL+IFJlc2luLzIuMMsxDQpDb2509m50LVR5cGU6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiA0NQ0KRGF0ZTogVGh1LCAxMiBTZXAgMjAwMiAxODoxNDo0OCBHTVQNCg0KjIGYMS05YmEwAI2QkoCLMTg5MzAwQGdl\/WTHMi5tb2JpbGl0eWxhYi5uZXQA","pkt_caplen":243,"pkt_type":21760,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","type":21760}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1031854489004,"flow_last_seen":1031854489004,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":62,"pkt":"AFCLk5N8CAAgsl17CABFAAAwxKxAAEAGF+GsFAMNrBQDBc+MAFDJtOyOAAAAAHACgywbmAAAAQEEiQIEBbQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAs+0pAAIAGoUasFAMFrBQDDQBQz4zkTZoOyWDsj2ASIjgTJgAAAgQFtG4v","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxK1AAEAGF+isFAMNrBQDBc+MAFDJtOyP\/k2aD1AQgyzJ7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":370,"pkt":"AFCLk5N8CAAgsl17CABFAAFkxK5AAEAGFqusFAMNrBQDBc+MAFDJtOyP5E2aD1AYgyzf6gAAUE9TVCAvcHBnY3RybC9wcGdjb250cm9sbG9naWMuZGxsIEhUVFAvMS4xDQpBdXRob3JpemF0aW9uOiBCYXNpYyBiRzFqWDNjNlZHVnpkREV5TXpRPQ0KQ29udGVudC1UeXBlOiBtdWx0aXBhcnQvcmVsYXRlZDsgYm91bmRhcnk9Im1zZ3BhcnRfMF8xMDM4XzEwMzE4NTQ0GDg5OTkiOyB0eXAlcwBhcHBsaWNhdGlvbi94bWwiDQpVc2VyLUFnZW50OiBNTVMtUmVsYXktRGVsaXZlcnlJbml0aWF0b3INCkFjY2VxdDogYXBwbGljYXRpb24vem1sDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpIb3N0OiVzADIuMjAuMy41DQpDb250ZW50LWxlbmd0aDogODQwDQoNCg==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1031854489004,"flow_last_seen":1031854489006,"flow_tot_l4_data_len":408,"flow_min_l4_data_len":20,"flow_max_l4_data_len":336,"flow_avg_l4_data_len":102,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"%s","url":"%s","code":0,"content_type":"multipart\/related","user_agent":"MMS-Relay-DeliveryInitiator"}}
+1516{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":894,"pkt":"AFCLk5N8CAAgsl0UCABFAANwxK9AAEAGFJ6sFAMNrBQDBc+MAFDJtO3L5E2aD1AYgyzm2AAALS1tc2dwYXJ0XzBfMTAzOF8xMDMxODU0NDg4OTk5DQpDb250ZW50LVR5cGU6IGFwcGxpuWF0aW9uL0ZtbA0KDQo8P3htbCB2JXMAaW9uPSIxLjAiPz4NCjwhRE9DVFlQRSBwYXAgUFVCTElDICItLy9XQVBGT1JVTS+DRFREIFBBUCAxLjAvL0VOIg0KICAgICAgICAgImh0dHA6Ly93d3cud2FwZm9ydW0ub3JnL0RURC9wYXBfMS4wLmR0ZCI+DQo8cGFwPg2qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":894,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAo\/EpAAIAGoE6sFAMFrBQDDQBQz4zkTZoPybTxE1AQHbQq4wAAAgQFtG4v","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1031854489007,"flow_last_seen":1031854489007,"flow_tot_l4_data_len":109,"flow_min_l4_data_len":109,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":109,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.1","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp"}
+0517{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":143,"pkt":"CAAgsl17AFCLk5N8CABFAACB\/UpAAIAGnvGsFAMBrBQDDQBQz4zkTZoPybTxE1AYHbQX8gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpQYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE3OjU4OjU2IEdNVA0KDQo=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1031854489007,"flow_last_seen":1031854489007,"flow_tot_l4_data_len":109,"flow_min_l4_data_len":109,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":109,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.1","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0394{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLBAAEAGLeWsFAMNrBQDBc+MAFDJtPET5E2aaFAQgyzFEQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1031854489031,"flow_last_seen":1031854489031,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":161,"flow_max_l4_data_len":161,"flow_avg_l4_data_len":161,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.57.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp"}
+0585{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":195,"pkt":"CAAgsl17AFCLk5N8CABFAAC1\/kpAAIAGnb2sFAMFrDkDDQBQz4zkTZpoybTxE1AYHbQrwQAASFRUby8xLjEgMjAyIEFjY2VwdGVkDQpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDUyIDE3OjU4OjU2IEdNVA0KQ29udGVudC1MZW5ndGg6IDQyNw0KJXMAdGVudC1UeXBlOiBhcHBsaWNhdGlvbi94bWwNCg0K","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1031854489031,"flow_last_seen":1031854489031,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":161,"flow_max_l4_data_len":161,"flow_avg_l4_data_len":161,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.57.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0394{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl1QCABFAAAoxLFAAEAGF+SsFAMNrBQDBc+MAFDJtPE35E2a9VAQgyzEhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1031854489131,"flow_last_seen":1031854489131,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":447,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":447,"midstream":1,"l3_proto":"ip4","src_ip":"172.6.3.5","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp"}
+0969{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":481,"pkt":"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","pkt_caplen":481,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoAEtAAIAGnEqsFAMFrBQDDQopAFDkS6qqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854489,"pkt_len":54,"pkt":"AFCLY5N8CAAgsl17CABFAAAoxLJAAEAGF+OsFAMNrBQDBc+MAFDJtPET5E2coFAQgyzC2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854494,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLNAAEAGF+KsFAMNrBQDBc+MAFDJtPET5E2coFARgyzC2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854494,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoAktAAIAGmkqsFAMFrBQDDQBQz4zkTZygybTxFFAQHbQoUQAA0Li6rVQI","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854494,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoA0tAAIAGmUqsFAMFrBQDDQBQz4zkTZwiybTxFFARHbQoUAAA0Li6rVQI","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854494,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLRAAEAGF+GsFAMNrBQDBc+MAFDJtPEU5E2coVAQgyzC1wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":1031854495447,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp"}
+0402{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAsB0tAAIAGlUasFAMFrBUDDQoqAFDkZMdqAADsAGACIABjogAAAgQFtFQI","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CIFFAAAsxLVAAEAGF9ysFAMNTBQDBQBQCirJ0lLg5GTHa2ASgywbsgAAAgQFtA==","pkt_caplen":58,"pkt_type":2177,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","type":2177}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":60,"pkt":"CAAgskZ7AFCLk5N8CABFAAAoCKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","l4_data_len":26}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":1031854495447,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":728,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":728,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp"}
+1340{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":762,"pkt":"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","pkt_caplen":762,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":1031854495447,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":728,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":728,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"172.20.3.13","url":"172.20.3.13.servlets\/mms","code":0,"content_type":"application\/xml","user_agent":""}}
+0394{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLZAAEAGF9+sFAMNrBQDBQBQCirJ0hrh5GTKL1AQgywwqwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1050{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":541,"pkt":"AFCLk5N8CAAgsjZ7CABFAAIPxLdAAEAGU\/esFAMNrBQDBQBQCirJ0hrh5GTKL1AYgyw7RQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3htbA0KY29udGVudC1MZW5ndGg6IDM1OA0KRGF0ZTogVGh1LCAxMiBTZXAgMjAwMiAxODoxNDo1NSBHTVQNCg0KPD94bWzfdmVyc2lvbj0iMS4wIj8+DQo8IURPQ1RZUEUgcGFwIFBVQkxJQyAiLS8vV0FQRk\/+VU0vL0RURCBQQVAgMS4wLy9FTiIgImh0dHA6Ly93d3cud2FwZlVyd20ub3JnL0RURC9wYXBfMS4wL2R0ZCI+DVQ8cGFwPg0KPHJlc3VsdG5vdGlmaWNhdGlvbi1yZXNwb25zZSBwdXNoLWlkPSIxODkzMDFfMTAzMTg1NDQ4ODk5N18xMDM4QGdlY2RzMi5tb2JpbGl0eWxhYi5uZXQiIGNvZGU9IjEwMDAiIGRlc2M9Ik93Ij4NCjxhZ2RyZXPPIDNkZHJlc3MtdmFsdWU9IldBUFBVU0g9KzQ5MTcyNjEwMTAwNC9UWVBFclBMTU5AMTcyLjIwLjMuNSI+PC9hZGRyZXNzPg0KPC9yZXN1bHRub3RpZmljYXRpb24tcmVzcCVzAGU+DQo8L3BhcKqqqg==","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854495,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoDEtAAIAGkEqsFAMFrBQDDQoqAFDkZMovydIcyFAQIFGRnwAAAABMjAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854499,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoDUtAAIAGj0qsFAMFrBQDDQopAFDkS8FNyacOElARIXuoUQAAAAAAjAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1031854499919,"flow_last_seen":1031854499919,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.88","dst_ip":"172.20.3.82","src_port":80,"dst_port":2601,"l4_proto":"tcp"}
+0395{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854499,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLhAAEAGF92sFANYrBQDUgBQCinJpw4S5EvBTlAQgyxGoAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854499,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLlAAEAGF9ysFAMNrBQDBQBQCinJpw4S5EvBTlARgyxGnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854499,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoDmtAAIAGjkqsFAMFrBQDDQopAFDkS8FmyacOE1AQIXs1UAAAAAAAjAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854506,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoD0tAAIAGjUqsFAMFrBQDDQoqAFDkZMovydIcyFARIFFYngAAAAAAjAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854506,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLpAAEAGF9usFAMNrBQDBQBQCirJ0hzI5GTKMFAQRSwuwwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854506,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxLtAAEAGF9qsFAMNrBQDBQBQCirJ0hzI5GTKMFARgywuwgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854506,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoEEtAAIAGjN6sFAMFrBQDDQoqAFDkZMowyWkcyVAQIFGRnwAAAAAAjAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":1031854514843,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0404{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAsE0tAAIAGiUasFAMFrBQDDQorAFDkqWrQAAAAAGACIAC\/9gAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxLxAAEAGF9WsFAMNrBQDBQBQCivKHToI5Klq0WASgyxYkwAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":1031854514843,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.77","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoFEtAAIAGiEqsFAMFrBQDTQorAFDkqWrRyh06CVAQIjjRRAAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":1514,"pkt":"CAAgsl17AFCLk5N8CABFAAXcFaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","l4_data_len":1480}
+0911{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":479,"pkt":"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","pkt_caplen":479,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","l4_data_len":445}
+0395{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFIAAoxL1AAEAGF9isFAMNrBQDBQBQCivKHToJ5KlwhVAQgyxqnAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854514,"pkt_len":197,"pkt":"AFCLk5N8CAAgsl17CABFAAC3xL5AAEAGF0isFAMNrBQDBQBQCivKHToJ5KlyLlAYgyzBOgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjE1ujE0IEdNVA0KDQo=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1031854514843,"flow_last_seen":1031854514913,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":20,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0403{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854515,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoGEtAAIAGhEqsFAMFrBQDDQorAFDkqXIuyh06mFAQIanJ5wAAYXRpb24v","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":1031854525903,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"72.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854525,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoGktAAIAGgkqsFAMFSBQDDQorAFDkqXIuyh06mFARIanJ5gAApxaHSO7L","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":1031854525903,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.82.5","src_port":80,"dst_port":2603,"l4_proto":"tcp"}
+0395{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854525,"pkt_len":54,"pkt":"AFCLk5PaCAAgsl17CABFAAAoxL9AAEAGF9asFAMNrBRSBQBQCivKHTqY5KlyL1AQgyxoYwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854525,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMBAAEAGF9WsFAMNrBQDBQBQCivKHTqY5KlyL1ARgyxoYAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1031854525904,"flow_last_seen":1031854525904,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"68.37.115.0","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854525,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoG0tAAIAGgUqsFAMFRCVzAAorAFDkqXIvyh06mVAQIanJ5QAApxaHSO7L","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1031854532142,"flow_last_seen":1031854532142,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2604,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAsHktAAIAGfkasFAMFrBQDDQosAFDk5q2kEAAAAGACIAB85AAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMFAAEAGF9CsFAMNrBQDBQBQCizKXurZ5OatpWASgyxkbgAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoH0tAAIAGfUqsFAMFrBQDDQosAFDk5q2lyl7q2lAQIjjdHwAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":1514,"pkt":"CAAgsl17AFCLk5N8CABFAAXcIEtAAIAGdpasFAMFrBQDDQosAFDk5q2lyl7q2lAQIjj8mAAAR0VUIC9zZXJ2bGV0cy9tbXM\/bWVzc2FnZS1pZD0xODkwMDEgSFRUUC8xLjENCkhvc3Q6IDE3Mi4yMC4zLjEzDQpPcHQ6ICJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzA2LzIlcwBDUFBleH5oYW5nZSI7IG5zPTU2DQpBY2NlcHQ6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNhY2hlLUNvbnRy8Gw6IG5vLWNhY2hlDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuDQpVc2VyLUFnZW50OiBTb255RXJpY3Nzb25UNjgvUjIwMUENCkFjY2VBdC1DaGFyc2V0OiAqDQp1Ni1Qcm9maWxlLURpZmYtMTogPD94bWwgdmUHc2kObj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1JeW50YXgtbnMjInhtbG5zOnByZj0iAnR0cDovL3d3dy53YXBmb3J1bS5vcmcvVUFQUk9GL2NjcHBzY2hlbWEtMTk5OTEwMTQjIj48IS0tIGJyb3dzZXIgdmVuZG9yIHNpdGU6IERlZmF1bHQgZGVzJXMAcHRpb24gb2YgcHJvcGVydGllcyAtLT48cmRmOkRlc2NyaXB0aW9uPjxwcmY6Q2NwcEFjY2VwdD48cmRmOkJhZz48cmRmOmxpPmFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2U8L3JkZjpsaT48L3JkZjpCYWc+PC9wcmZsQ2NwcEFjY2VwdD48L3JkZjpEZXNjcmlwdGlvbj48L3JkZjpSREY+DQo1Ni1Qcm9maWxlLURpZmYtMjogPD94bWwgdmVyc2lvbj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkjS1zeW50YXgtbnMjInhtbG5zOnByZj0iaHR0cDovL3d3dy53YXBmb3J1bS5vcmcvVUFQUk9GL2NjcHBzY2hlbWEtMTk5OTEwMSVzAD48IS0tIGJyb3dzZXIgdmVuZG9yIHNpdGU6IERlZmF1bHQgZGVzY3JscHRpb24gb2YgcHJvcGVydGllcyAtLT48cmRmOkRlc2NyaXB0aW9uPjxwcmY6Q2NwcEFjY2VwdC1DaGFyc2V0PjxyZGY6QmFnPjxyZGY6bGk+KjwvcmRmOmxpPjwvcmRmOkJhZz48L3ByZjpDY3BwQWNjZXB0LUNoYXJ3ZXQ+PC9yZGY6RGVzY3JpcHRpb248PC9yZGY6UkRGPg0KNTYtUHJvZmlsZS1EaWZmLTM6IDw\/eG1sIHZlcnNpb249IjEuMCI\/PjxyZGY6UkRGIPhtbG5zOqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1031854532142,"flow_last_seen":1031854532143,"flow_tot_l4_data_len":1548,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":387,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2604,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent","12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"172.20.3.13","url":"172.20.3.13\/servlets\/mms?message-id=189001","code":0,"content_type":"","user_agent":"SonyEricssonT68\/R201A"}}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":59136,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","type":59136}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1031854532143,"flow_last_seen":1031854532143,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp"}
+0395{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMJAAEAGF9OsFAMNrBREBQBQCizKXura5OazWVAlcwB2dwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMNAAEAGF9KsFAMNrBQDBQBQCizKXura5Oa0wFAQgyx1EAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0881{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":417,"pkt":"AFCLk5N8CAAgsl17CABFAAGTxMRAAEAGVWasFAMNrBQDBQBQCizKXura5Oa0wFAYgyw7LAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5YGU6IGFwcGxpY2F0aW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiAyMTgNCkRhdGU6IFRodSwgMTIgU2VwIDIwMDIgMTg6MTU6MzIgR01UDQoNCnOEmDE4OTAwMQCNkIsxODkwMDBAZ2VjZHMyLm1vYmlsaXR5bGFiLm5ldACFBD2A5vmJGYAr+DkxNzI2MTAxMDA0L1RZUEU9UExNTgCXKzR5MTcyNjEwMTAwNC9UWVBFPVBMTU4AllJlYWQ6IACKg4+BhoGQgYSjAQRcA4OB6llvdXIgbWVzc2FnZSBoYXMgYmVlbiByZWFkClNlbnQ6MTIgU2VwIDI6MDlwbQogKEdNVC0wNS4wMGgpClJlYWQ6MTIgU2VwIDI6MTFwbQogKEfNVC0wNS4wMGgp","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854532,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoI0tAAIAGKEqsFAMFrBQDDQosAFDk5jPAyl7sRVAQIM3WBAAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":1031854535021,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAsJEtAAIAGeEasFAMFrBQDDQotAFDk8VvfAAAAAGACIADOnQAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMVAAEAGF8ysFAMNrBQDBQBQCi3KbXHL5PFb4GASgywvJwAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoJUtAAIAGd0qsFAMFrBQDDQotAFDk8Vvgym1xzFAQIjin2AAAAgQFtGDD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":1514,"pkt":"CAAgsl17AFCLk5N8CABFACVzAEtAAIAGcJasFAMFrBQDDQotAFDk8Vvgym1xzFAQIjhHEAAAUE9TVCAvc2VydmxldHMvbW1zIEhUVFAvMS4xDQpIb3N0OiAxNzIuMjAuMy4xMw0KT3B0OiAiaHR0cDovL3d3dy53My5vcmcvMTk5OS8wNi8yNC1DQ1BQZXhjaGFuZ2UiOyBucz01Ng0KQ29udGVudC1UeXB0OiBhcHBsaWNhdGlvbi92bmQud2FwLm1tcy1tZXNzYWdlDQpBY2NlcHQ6IGFwcGxpY2F0Rm9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpBY2NlcHQtTGFuZ3VhZ2U6IENuDQpVc2VyLUFnZW50OiBTb255inJpY3Nzb25UNjgvUjIwMUENCkFjY2Vw9C1DaGFyc2V0OiAqDQo1Ni1Qcm9maWxlLURpZmYtMTogPD94bWwgdqdyc2lvbj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjInhtbG5zOnByZj0ibHR0cDovL3d3dy53YXBmb3J1bS5vcmcvVUFQUk9GL2Nja3BzY2hlbWEtMTk5OTEwMTQjIj48IS0tIGJyb3dzZXIgdmVuZG9yIHNpdGU6IERlZmF1bHQgZGVzY3JpcHRpb24gb2YgcHJvcGVydGllcyAtLT48cmRmOkRlc2NyaXB0aW9uPjxwcmY6Q2NwcEFjY2VwdD48cmRmOkJhJXMAcmRmOmxpPmFwcGxpY2F0aW9uL3ZubC53YXAubW1zLW1lc3NhZ2U8L3JkZjpsaT48L3JkZjpCYWc+PC9wcmY6Q2NwcEFjY2VwdD48L3JkZjpEZXNjcmlwdGlvbj48L3JkZjpSREY+DQo1Ni1Qcm9maWxlLURpZmYt1TogPD94bWwgdmVyc2lvbj0iMS4wIj8+PHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjInhtbG5zOnByZj0iaHR0cDovL3d3dy53YXBmb3J1bS5vUmcvVUFQUk9GL2NjcHBzY2hlbWEtMTk5OTEwMTQjIiVzAC0tIGJyb3dzZXIgdmVuZG9yIHNpdGU6IEQlcwB1bHQgZGVzY3JpcHRpb24gb2YgcHJvcGVydGllcyAtJj48cqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","l4_data_len":1480}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":1031854535021,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":443,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":443,"midstream":1,"l3_proto":"ip4","src_ip":"51.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp"}
+0961{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":477,"pkt":"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","pkt_caplen":477,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":1031854535021,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":443,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":443,"midstream":1,"l3_proto":"ip4","src_ip":"51.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1031854535022,"flow_last_seen":1031854535022,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.76.5","src_port":80,"dst_port":65069,"l4_proto":"tcp"}
+0396{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMZAAEAGF8+sFAMNrBRMBQBQ\/i3KbXHM5PFhlFAQgyxBMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1031854535090,"flow_last_seen":1031854535090,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp"}
+0589{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":197,"pkt":"AFCLk5N8CAAgsl17CABFAAC3xMdAAEAGFz+sFAMNLBQDBQBQCi3KbXHM5PFjO1AYgyyWzgAASFRUUC8xLjEgMjIwIE9LDQpTZXJ2ZXI6IEJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3Zuay53YXAubW1zLW1lc3NhZ2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjFKOjM1IEdNVA0KDQo=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1031854535090,"flow_last_seen":1031854535090,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0349{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854535,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CAAQAAAoKUtAAIAGc0qsFAMFrBQDDQotAFDk8WM7ym1yW1AQIamgfQAAYXRpb24v","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","protocol":2048}
+0403{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854543,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoLUtAAIAGb0qsFAMFrBQDDQosAFDk5rTAyl7sRVARIM3WAwAAHonTQB2F","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854543,"pkt_len":54,"pkt":"ADWLk5N8CAAgsl17CABFAAAoxMhAAEAGF82sFAMNrBQDBQBQCizKXkZF5Oa0wVAQWSxzpAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854543,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAACqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0203{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","l4_data_len":20}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1031854543322,"flow_last_seen":1031854543322,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp"}
+0403{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854543,"pkt_len":60,"pkt":"CAAgsiVzAFCLk5N8CABFAAAoLktAAIAGbkqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854546,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoL0tAAIAGbUqsFAMFrBQDDQotAFDk8WM7ym1yW1ARIamgfAAAHonTQB2F","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1031854546078,"flow_last_seen":1031854546078,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2639,"l4_proto":"tcp"}
+0396{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854546,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMpAAEAGF8usFAMNrBQDBQBQCk\/KbXJb5PFjPFAQgyw++QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1031854546079,"flow_last_seen":1031854546079,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.52.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2093,"l4_proto":"tcp"}
+0395{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854546,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxMtAAEAGF8qsNAMNrBQDBQBQCC3KbXJb5PFjPFARuSw++AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854546,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoMEtAAIAGbEqsFAMFrBQDDQotAFDk8WM8ym1yXFAQIamgewAAHonTQB2F","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":4,"flow_packet_id":13,"flow_first_seen":1031854489004,"flow_last_seen":1031854494143,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":860,"flow_avg_l4_data_len":109,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53132,"dst_port":80,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1031854484481,"flow_last_seen":1031854484482,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1031854484481,"flow_last_seen":1031854484482,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2600,"l4_proto":"tcp"}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1031854557802,"flow_last_seen":1031854557802,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2606,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAsNUtAAIAGZ0asFAMFrBQDDQouAFDlQWz1AAAAAGACIADjNgAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxMxAAEAGF8WsFAMNrBQDBQBQCi7KxfhE5UFs9mASgyyW7gAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoNktAAIAGZkqsFAMFrBQDDQouAFDlQWz2ysX4RVAQIjgPoAAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1031854557802,"flow_last_seen":1031854557802,"flow_tot_l4_data_len":1548,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":387,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2606,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"172.20.3.13","url":"172.20.3.13\/servlets\/mms?message-id=189301","code":0,"content_type":"","user_agent":""}}
+0877{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":413,"pkt":"CAAgsl17AFCLUJN8CABFTQGPOEtAAIAGYuOsFAMFrBQDDQouAFDlQXKqysX4RVAYIjhECAAAWXVTdz09IjEiMi1IZ0NURVFFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":413,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxM1AAEAGF8isFAMNrBQDBQBQCi7KxfhF5UFyqlAQgyyo9wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":54,"pkt":"AFCLk5N8kgAgsl2cCAAlcwAoxM5AAEAGF8esFAMNrBQDBQB+Ci7KxfhF5UF0EVAQgyynkAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","protocol":2048}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1031854557975,"flow_last_seen":1031854557975,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp"}
+2350{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1031854557975,"flow_last_seen":1031854557975,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+2353{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2040{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":1283,"pkt":"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","pkt_caplen":1283,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854557,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoOUtAAIAGY0qsFAMFrBQDDQouAFDlQXQRysYDrVAQIjj9HAAAAncFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854558,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoPUtAAIAGX0qsFAMFrBQDDQouAFDlQXQRysYIelAQHWtT+wAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1031854562320,"flow_last_seen":1031854562320,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2607,"dst_port":80,"l4_proto":"tcp"}
+0403{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":60,"pkt":"CAAgsl1rAFCLk5N8CABFAAAsPltAAIAGXkasFAMFrBQDDQovAFDlUj+sAAAAAGACIADqbQAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxNJAAEAGF7+sFAMNrBQDBQBQCi\/K2yc15VI\/rWASgyyVHwAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFIAAoP0tAAIAGXUqsFAMFrBQDDQovAFDlUj+tytsnNlAQIjgN0QAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1031854562321,"flow_last_seen":1031854562321,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":9587,"dst_port":80,"l4_proto":"tcp"}
+2350{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0962{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":477,"pkt":"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","pkt_caplen":477,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1031854562320,"flow_last_seen":1031854562321,"flow_tot_l4_data_len":511,"flow_min_l4_data_len":20,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2607,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0397{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxNNAAEAGF8KsFAMNrBQDBQBQCi\/K2yc25VJFYVAQgyynKAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1031854562401,"flow_last_seen":1031854562401,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.2.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2607,"l4_proto":"tcp"}
+0592{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":197,"pkt":"AFCLk5N8CAAgsl17CABFAAA7xNRAAEAGFzKsFAINrBQDBQBQCi\/K2yc25VJHCFAYgyz\/yAAASFRUUC8xLjEgMjAwIE9LDQpTZXN2ZXI6IFJlc2luLzIuMC4xDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0eW9uL3ZuZC53YXAubW1zLW1lc3NhZ2UNCnRvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjE2OjAyIEdNVA0KDQo=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1031854562401,"flow_last_seen":1031854562401,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.2.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2607,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53193,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":62,"pkt":"AHWLk5N8CAAgsl17CABFAAAwxNVAAEAGF7isFAMNrBQDBc\/JAFDK5CpLAAAAAHACgyzcpwAAAQEEAgIEBbQ=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.35.13","src_port":80,"dst_port":53136,"l4_proto":"tcp"}
+0404{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAsQ0tAAIAGWUasFAMFrBQjDQBQz5DlU6AgyuQqTGASIjjNHQAAAgQFtG4v","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxNZAAEAGF7+sFAMNrBQDBc+QAFDK5CpM5VPMIVAQgyyD5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":370,"pkt":"AFCLkxN8CAAgsl17CABFAAFkZddAAEAGFoKsFAMNrBQDBc+QAFDK5CpN5VOgIVAYgyyj7gAAUE9TVCAvcHBnY3RybC9wcGdjb24lcwBsbG9naWMuZGxsIEhUVFAvZC4xDQpBdXRob3JpemF0aXhuOiBCYXNpYyBiRzFqWDNjNlZHVnpkREV5TXpRPQ0KQ29udGVudC1UeXBlOiBtdWx0aXBhcnQvcmVsYXRlZDsgYm91bmRhcnk9Im1zZyVzAHRfMF8xMDM4XzEwMzE4NTQ1NjI0ODQiOyB0eXBlPSJhcHBsaWNhdGlvTi94bWwiDQpVc2VyLUFnZW50OiBNTVMtUmVsYXktRGVsaXZlcnlJbml0aWF0b3INCkFjY2VwdDogYXBwbGljYXRpb24veG1sDQpDb25uZWN0aW9uOiVzAGVwLWFsaXZlDQpIb3N0OiAxNzIuMjAuMy41DQpDb250ZW50LWxlbmd0aDogODAwDQoNGg==","pkt_caplen":370,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1031854562489,"flow_last_seen":1031854562489,"flow_tot_l4_data_len":820,"flow_min_l4_data_len":820,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.70.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp"}
+1466{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":854,"pkt":"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","pkt_caplen":854,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1031854562489,"flow_last_seen":1031854562489,"flow_tot_l4_data_len":820,"flow_min_l4_data_len":820,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.70.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Cloudflare","category":"Web"},"http": {}}
+0404{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoREtAAIAGWEqsFAMFrBQDDQBQz5DlW6AhyuQuqFAQHdzk2gAAAgQFtG4v","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":143,"pkt":"CAAgsl17AFCLk5N8CABFAACBRUtAAIAGVvGsFAMFrBQDDQBQz5DlU6AhyuQuqFAYHdzS9gAASFRUUC8xLjEgMTAwIENvbnRpbnVlDQpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpEYXRlOiBUaHUsIDEyIFNlcCAyMDAyIDE4OjAwOjA5IEdNVA0KDQo=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAjxNlAAEAGF7ysFAMNrBQDBc+QAFDK5C6o5VOgelAQgyx\/MQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoRktAAIAGVkqsFAMFrBQDDQovAFDlUkcIytsnxVBQIakGdgAASFRUUC8x","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0586{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":195,"pkt":"CAAgsl17AFCLk5N8CABFAAC1R0tAAIAGVL2sFAMFrBQDDQBQz5DlU6B6yuQuqFAYHdzmxQAASFRUUC8xLjEgMjAyIEFjY2VwdGVkDRpTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvNC4wDQpEYXRlOiBUaHXlIDEyIFNlcCAyMDAyIDE4OjAwOjA5IEdNVA0KQ29udGVuvy1MZW5ndGg6IDQyNw0KQ4VudGVudC1UeXBlOiBhcHBsaWNhdGlvbi94bWwNCg0K","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1031854562690,"flow_last_seen":1031854562690,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAobNpAAEAGF7usFEMNrBQDBc+QAFDK5C6o5VOhNFAQgyx+pAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0970{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":481,"pkt":"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","pkt_caplen":481,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854562,"pkt_len":54,"pkt":"AFCLk5NcCAAgsl17CABFAAAoxNtAAEAGF7qsFAMNrBQDBc+QAFDK5C6o5VOislAQgyx8+QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8DABFJXMATUtAAIAGT0asFAMFrBQDDQowAFDlXnSjAABhAGACIAC1aQAAAgQFtCiq","pkt_caplen":60,"pkt_type":3072,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","type":3072}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1031854565447,"flow_last_seen":1031854565447,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2608,"l4_proto":"tcp"}
+0404{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":58,"pkt":"AFCLk5N8CAAgsl17CABFAAAsxNxAAEQGF7WsFAMNrBQDBQBQCjDK9pOA5V50pGASgyzztQAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoTktAAIAGTkqsFAMFrBQDDQowAFDlXnSkyvaTgVAQIgtsZgAAAgQFtCiq","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1343{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":762,"pkt":"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","pkt_caplen":762,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1031854565449,"flow_last_seen":1031854565449,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.148.5","src_port":80,"dst_port":2608,"l4_proto":"tcp"}
+0396{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":54,"pkt":"AFCLk5MlcwAgsl17CABFAAAoxN1AAEAGF7isFAMNrBSUBQBQCjDK9viB5V53aFEQgywIrgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1031854565547,"flow_last_seen":1031854565547,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","l4_proto":115}
+1050{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854565,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoUktAAIAGSkqsFAMFrBQDDQowAFDlXndoyvaVaFAQIFFpogAAAAAAZAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854567,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxN9AAEAGF7asFAMNrBQDBc+QAFDK5C6o5VOislARgyx8+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854567,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoU0tAAIAGSUqsFAMFrBQDDQBQz5B0U6KyyuQuqVAQHdziSAAAAAAAZAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854567,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoVEtAAIAGSEqsFAMFrBQDDQBQz5DlU6KyyuQuqVARHdziRwAAAAAAZAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854567,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxOBAAEAGF7WsFAMNrBQDBc+QAFDK5C6p5VOis1AQgyx89wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":1,"flow_packet_id":11,"flow_first_seen":1031854488666,"flow_last_seen":1031854499919,"flow_tot_l4_data_len":6051,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":550,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":1,"flow_packet_id":11,"flow_first_seen":1031854488666,"flow_last_seen":1031854499919,"flow_tot_l4_data_len":6051,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":550,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":9,"flow_packet_id":8,"flow_first_seen":1031854495447,"flow_last_seen":1031854506544,"flow_tot_l4_data_len":1355,"flow_min_l4_data_len":20,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":169,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp"}
+0405{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854568,"pkt_len":60,"pkt":"CAAgsl17AFCLk5N8CABFAAAoVUtAAIAGR0qsFAMFrBQDDQouAFDlQXQRysYIelARHWv9GwAAAAAAZAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854568,"pkt_len":54,"pkt":"AVCLk5N8CAAgsl17CABFAAAoxOFAAEAGF7SsFAMNrBQDBQBQCi7Kxgh65UF0ElAQgyyXWgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0342{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854568,"pkt_len":54,"pkt":"AFCLk5N8CAAgsl17CABFAAAoxOJAl0AGF7OsFAMNrBQDBQBQCi7Kxgh65UF0ElARgyyXWQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","l4_data_len":20}
+0405{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","pkt_oversize":false,"pkt_ts":1031854568,"pkt_len":60,"pkt":"DAAgsl17AFCLk5N8CABFAAAoVktAAIAGRkqsFAMFrBQDDQouAFDlQXQSysYIe1AQHWv9GgAAAAAAZAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1031854489007,"flow_last_seen":1031854489007,"flow_tot_l4_data_len":109,"flow_min_l4_data_len":109,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":109,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.1","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1031854562690,"flow_last_seen":1031854562690,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1031854562690,"flow_last_seen":1031854562690,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.67.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":32,"flow_packet_id":12,"flow_first_seen":1031854562488,"flow_last_seen":1031854567701,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":15,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":32,"flow_packet_id":12,"flow_first_seen":1031854562488,"flow_last_seen":1031854567701,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":15,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.35.13","src_port":80,"dst_port":53136,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.35.13","src_port":80,"dst_port":53136,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53193,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1031854562488,"flow_last_seen":1031854562488,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":53193,"dst_port":80,"l4_proto":"tcp"}
+0481{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1031854565547,"flow_last_seen":1031854565547,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","l4_proto":115,"ndpi": {"proto":"Unknown"}}
+0445{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1031854565547,"flow_last_seen":1031854565547,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","l4_proto":115}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1031854546079,"flow_last_seen":1031854546079,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.52.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2093,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1031854546079,"flow_last_seen":1031854546079,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.52.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2093,"l4_proto":"tcp"}
+0522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1031854543322,"flow_last_seen":1031854543322,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1031854543322,"flow_last_seen":1031854543322,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":1031854488668,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":1031854488668,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"0.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2601,"l4_proto":"tcp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1031854489131,"flow_last_seen":1031854489131,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":447,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":447,"midstream":1,"l3_proto":"ip4","src_ip":"172.6.3.5","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1031854489131,"flow_last_seen":1031854489131,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":447,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":447,"midstream":1,"l3_proto":"ip4","src_ip":"172.6.3.5","dst_ip":"172.20.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1031854562489,"flow_last_seen":1031854562489,"flow_tot_l4_data_len":820,"flow_min_l4_data_len":820,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.70.3.5","src_port":53136,"dst_port":80,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1031854535090,"flow_last_seen":1031854535090,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":163,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":163,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"44.20.3.5","src_port":80,"dst_port":2605,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1031854535021,"flow_last_seen":1031854535021,"flow_tot_l4_data_len":443,"flow_min_l4_data_len":443,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":443,"midstream":1,"l3_proto":"ip4","src_ip":"51.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":1031854525903,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"72.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":1031854525903,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"72.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1031854499919,"flow_last_seen":1031854499919,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.88","dst_ip":"172.20.3.82","src_port":80,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1031854499919,"flow_last_seen":1031854499919,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.88","dst_ip":"172.20.3.82","src_port":80,"dst_port":2601,"l4_proto":"tcp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":1031854488668,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":81,"dst_port":2601,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1031854488668,"flow_last_seen":1031854488668,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":81,"dst_port":2601,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":1031854525903,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.82.5","src_port":80,"dst_port":2603,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1031854525903,"flow_last_seen":1031854525903,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.82.5","src_port":80,"dst_port":2603,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":1031854514843,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.77","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1031854514843,"flow_last_seen":1031854514843,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.77","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1031854514843,"flow_last_seen":1031854525904,"flow_tot_l4_data_len":271,"flow_min_l4_data_len":20,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1031854532143,"flow_last_seen":1031854532143,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1031854532143,"flow_last_seen":1031854532143,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.68.5","src_port":80,"dst_port":2604,"l4_proto":"tcp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":16,"flow_packet_id":9,"flow_first_seen":1031854532142,"flow_last_seen":1031854543315,"flow_tot_l4_data_len":2011,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":223,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2604,"dst_port":80,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":18,"flow_packet_id":5,"flow_first_seen":1031854535021,"flow_last_seen":1031854546079,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":20,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":21,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":18,"flow_packet_id":5,"flow_first_seen":1031854535021,"flow_last_seen":1031854546079,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":20,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":21,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2605,"dst_port":80,"l4_proto":"tcp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1031854557975,"flow_last_seen":1031854557975,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.72.5","src_port":80,"dst_port":2606,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":25,"flow_packet_id":13,"flow_first_seen":1031854557802,"flow_last_seen":1031854568982,"flow_tot_l4_data_len":4776,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":367,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2606,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1031854562401,"flow_last_seen":1031854562401,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.2.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2607,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1031854562320,"flow_last_seen":1031854562528,"flow_tot_l4_data_len":551,"flow_min_l4_data_len":20,"flow_max_l4_data_len":443,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":2607,"dst_port":80,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1031854565449,"flow_last_seen":1031854565449,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.148.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1031854565449,"flow_last_seen":1031854565449,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.148.5","src_port":80,"dst_port":2608,"l4_proto":"tcp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1031854565447,"flow_last_seen":1031854565700,"flow_tot_l4_data_len":792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2608,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1031854565447,"flow_last_seen":1031854565700,"flow_tot_l4_data_len":792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2608,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1031854546078,"flow_last_seen":1031854546078,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2639,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1031854546078,"flow_last_seen":1031854546078,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.3.5","src_port":80,"dst_port":2639,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1031854525904,"flow_last_seen":1031854525904,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"68.37.115.0","src_port":2603,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1031854525904,"flow_last_seen":1031854525904,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"68.37.115.0","src_port":2603,"dst_port":80,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":1031854495447,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1031854495447,"flow_last_seen":1031854495447,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.21.3.13","src_port":2602,"dst_port":80,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1031854489031,"flow_last_seen":1031854489031,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":161,"flow_max_l4_data_len":161,"flow_avg_l4_data_len":161,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.57.3.13","src_port":80,"dst_port":53132,"l4_proto":"tcp"}
+0537{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1031854562321,"flow_last_seen":1031854562321,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":9587,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1031854562321,"flow_last_seen":1031854562321,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.5","dst_ip":"172.20.3.13","src_port":9587,"dst_port":80,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1031854535022,"flow_last_seen":1031854535022,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.76.5","src_port":80,"dst_port":65069,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1031854535022,"flow_last_seen":1031854535022,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"172.20.3.13","dst_ip":"172.20.76.5","src_port":80,"dst_port":65069,"l4_proto":"tcp"}
+0159{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2006-09-29-28586.pcap"}
diff --git a/tests/result/nDPId_fuzz-2020-02-16-11740.pcap.txt b/tests/result/nDPId_fuzz-2020-02-16-11740.pcap.txt
new file mode 100644
index 000000000..7fe928d3c
--- /dev/null
+++ b/tests/result/nDPId_fuzz-2020-02-16-11740.pcap.txt
@@ -0,0 +1,472 @@
+0373{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1528996067791,"flow_last_seen":1528996067791,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"108.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1319{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996067,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1528996067791,"flow_last_seen":1528996067791,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"108.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1528996068005,"flow_last_seen":1528996068005,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.102.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0565{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996068,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAACl7dxAAPwRZijG4hk1CmZAHgcUchAAkTltCwoAiSM4ARafmcO5UlnZgWS\/VrEBNTAzMXE0ODAyNzE1MTY0ODBAd2xhbi5tbmM0ODAufWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEwZDEvZmM6ZGI6YjM6MDg6dmY6MTQvMjA1Tw4BAgAMFwwAAAwBQABQEpOK5mo0k\/FCxgtYc0d6dIg=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1528996068005,"flow_last_seen":1528996068005,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.102.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1528996068129,"flow_last_seen":1528996068129,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1255{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996068,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1528996068129,"flow_last_seen":1528996068129,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0668{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996068,"pkt_len":257,"pkt":"ABRP+4rqcNuYVcUnCABFAADz7eFAAPwRZdbG4hk1CgxAHgcUchAA39JxAwsA1+U\/DuIEVKatp1a5Vz8iUQkBNTAzMTE0ODAyNzE1MTY0ODBAd2xhbi5tbmM0ODAubaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+1267{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996520,"pkt_len":745,"pkt":"AAAMqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":43690,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0645{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996520,"pkt_len":239,"pkt":"AFFP+4rqcNuYVcUnCABFAADh9PZAAPwRXtPG4hk1CgxAHgcUchAAzf\/ACwwAxUX8kZJ5SD1GIY9b3TLnaCUBNTAzMTEjODAwNzM2MzgwNzJAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEwZmQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA2T0oBAgBIFwEAAAEFAACzfR5W9eh2OghNxDwVbojaAgEAABPTIXEVtgAALhLyMDDdAueLAQACCwUAJQD\/wh144KSIGN1E2YBCoTFQEji6recwpo2EGDX0tsWSQ1s=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1528996521324,"flow_last_seen":1528996521324,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp"}
+1292{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996521,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1528996521324,"flow_last_seen":1528996521324,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0752{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996521,"pkt_len":318,"pkt":"ABRP+4rqcNOYVcUnCABFAAEw9PpAAPwRXoDG4hk1CgxAHgcUchABHEdCAg0BFLBkFDYkf5Ol\/\/UprAe1krUaCwAAV8gbBVNQQxpuAAABNxA0lgZ9Ob56idWnj5mrGjH9HVyfl2CMD7kHBXWTlONuAdNpUT0PNMJ4+c6yAevgnrhFEzURNLRXMV1cukbtDiUAZlR3mWagN\/b3t5lQTdi7GNrmf6bckCtQUI9IvHwc\/ERWIYX5lcD4ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV08W9yay5vcmcsIDViMjJhMGZkL2YwOjc5OjYwOmQxOjdkOjM3LzIwNlkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBLahKO3\/veID+CdEt7EaDBi","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1528996603395,"flow_last_seen":1528996603395,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp"}
+1319{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996603,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1528996603395,"flow_last_seen":1528996603395,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996603,"pkt_len":147,"pkt":"ABRP+4qfcNuYqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":147,"pkt_type":43690,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+1492{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996609,"pkt_len":876,"pkt":"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","pkt_caplen":876,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996609,"pkt_len":147,"pkt":"ABRP+4rqcNuYVcUnCABFAACFyc1AAPwRiljG4hk1CgxAHgcVchAAcZmUBQ8AaTuYG1n4ee1Aq0+zAcDNdlwBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3Jrqm9yZywgNWIyMmEwZmUvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjA3","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996636,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":34816,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":34816}
+0648{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996636,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADh9yRAAPwRXKXG4hk1CgxAHgcUchAAzSJ2CxAAxcpdxYPqjgyBzTYMzPfpkxMBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjM7ExLjMxcHBuZXR3b3JrLm9ybywgNWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjExT0olAABIFwEAAAEFAAD95AJZP0+7Q\/6oleR\/E2tUAgUAAI7JC71dMQAA76WXOEIE2IeLAQACCwUAAMljLwgpxN6xg\/7jZ9YaNhFQEjEMUX1kG7YQeYS+L\/mCsO8=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996636,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":691}
+0697{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996636,"pkt_len":318,"pkt":"gBRP+4rqcNuYVcUnCABFAAEw9zBNAPwRXErG4hk1CgxAHgcUchABHM4XAhEBFIZVJWGtUrjkjYJ31AMheaoaCwAAV8gbBVNQQxpuAAABNxA0kHJPpbx8ay85DeRD\/YfvMwI+ldBikhmaYO0o9\/xxLxLcmQJWjN7B7B+dfQVGF8gDCMcRNLOAK5rezWH47eySAtmcrdIo8yMjeGx8MCZsAtT7L4lJowMPwZmfH007sNXtvljXq+BWATUwMzExNGUwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d2+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+1167{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996641,"pkt_len":671,"pkt":"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","pkt_caplen":671,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1528996641548,"flow_last_seen":1528996641548,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp"}
+0521{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996641,"pkt_len":147,"pkt":"ABRP+4rqcNuYVcUnCABJAACFyrZAAPsRim\/G4hk1CgxAHgcVchAAcXfuBRIAaavjNmx4LDA40fVoWG4z4qoBNTAzMTE0ODAwNjM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBsZXR3b3JrLm9yZywgNWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2RZMzcvMjEx","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1528996068005,"flow_last_seen":1528996068005,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.102.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1528996067791,"flow_last_seen":1528996067791,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"108.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1320{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996680,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996680,"pkt_len":179,"pkt":"ABRPYorqcNuYVcUnCABFAACl98JAAPwRXEPG4hk1CgxAHgcUchAAkW14CxMAie9Z0EJyCfDsUjdkT3I3GbgBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNTgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFywAAAwBf\/xQEhzIhNDHhW\/ImS5eu8l9\/uw=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1257{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996680,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1528996680808,"flow_last_seen":1528996680808,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0600{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996680,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADA98dAAPwRXCPG4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1528996684582,"flow_last_seen":1528996684582,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1320{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996684,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1528996684582,"flow_last_seen":1528996684582,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0568{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996684,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcU2CABFAACl915AAPwRXDXG4hk1CgxAHgcUchAAkS+ZCxUAiUY+7jRq\/wB\/LF\/Ns5cYrXEBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFwwAAAwBf\/xQEuZXEJbQmcaCVUEqz46tdDc=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1257{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996684,"pkt_len":697,"pkt":"AAAMB6xAABRP+4rqCABFAAKrINJAAP8RAAAKDEAexuIZNXIQBxQClwAAARYCj2x1VTvVaIEUnwUKplEKCjEaCgAAJQAOBFVTGgwAAKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996684,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcVBCABFAADA99VAAPwRXBXG4hk1CgxAHgcUchAArOOlAxYApPHzvOROin1u7Fmmsh4+4s0BNTAzMTE0ODAyWTg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEibrHcskq4YL9cVzQTtgI+Y=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+1321{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996689,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1528996689402,"flow_last_seen":1528996689402,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp"}
+0565{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996689,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClbuVAAPwRXCDG4hk1CgxAHgcUclYAkWdmCxcAiQrIitkB1LgR0s5zEPVzzzIBNTAzMTE0dzAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDgvNjQ6YjA6YTY6MGU6YTQ6ZWMvMjEyTw4BAAAMFwwAAHYBf\/xQEjLibctMfYgZSgHqxKHsV1U=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1528996689402,"flow_last_seen":1528996689402,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1257{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996689,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996689,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADA9+klAPwRXAHG4hk1CgxAHgcUchAArPtqAxgApNkk5fehx32PqouJEXUDfwgBNTAzMTE0ODAyNzg1MDEwMDlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzNDkvNjQ6YjA6YU06uGU6YTQ6ZWMvMjEyeCIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8lAAEABwBQEslNLvLV5rc9WbdNXraRxZQ=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":172}
+1322{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996733,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1528996733156,"flow_last_seen":1528996733156,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp"}
+0567{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996733,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABMBACl+GRAAPwRW6HG4hk1CgxAHgcUchAAkfvBCxkAidYnQnH6\/q3z6sD9\/UzPvYgBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmEzN2MvYjA6OWY6YmE6NGE6MGU6N2UvMjEzTw4BAAAxFwwAAAwBf\/xQEj4NW9JYKjnp+Qug4VR6j6U=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1258{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996733,"pkt_len":697,"pkt":"AAAMB6xAABRP+4rqCABFAAKrINZAAP8RAAAKDEAexuIZNXIQBxQClwAAARoCjwO28c1pf8gpc01HIuuennMaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMzNwZaIqN9ejUwMzExNDgwMDcxMzk0MzA0QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TYjAtOWYtYmEtNGF\/MGUtN2UeJTAwLWE3LTQyLWQwLWUwLTAwOlZlV2l6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYjg3ZGEzMjI1YiwgNWIyMmEzN2MvYjA6OWY6YmE6NGE6MCUAN2UvMjEzBAasFAEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAImBgAAAAIMBgAABaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+1267{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996736,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2050,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2050}
+0548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996736,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADA+HNBAPwRW3fG4hk1CgxAHgcUchAArIw9AxwApBZ8i1l5y5I6R7UN7fbGLQ0BNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLhNncHBuZXR3b3JrLm9yZywgNWIyMmEzN2PpYjA6OWY6YmE6NGE6MGU6N2UvMjEzEiIzMjc2NCBTdWJzY3JpYmVyJWlvdCBwcm92aXNpb25lZE8HBAEABwBQEhu6bMXdvKMo\/pphwZK5oRM=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":172}
+0733{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996825,"pkt_len":305,"pkt":"AAAMB6xAABRP+4rqCABFAAEjINtAAP8RAAAKDEAexuIZNXIQBxUBDwAABB8BBzWIo5zi+WF\/SUvYePTRu6oBEzAyLTA4LWVjLWJiLWJiLWJVBQYAAAABBAbY6pSHCAYKQABAIBBWZXJpem9uUHJlUHJvZBoMAAA3YwEGAAAAASwhNWIyMjljYVovMDI6MDg6ZWM6YmI6YmI6YmIvMlYzM31OAAAAEy0GAAAAAzcGWyKj2SgGAAAAAioGBPtwQzQGAAAAACsGAboEJTUGAAAAAC8GAAoJnjAGAAIn3DEGAABMAS4GAAIHOSlUAAAAAB8TMDItMDgtZWMtYmItYmItYmIeJDcwLTdkLWI5LWFkLTVkLTYwOnZlcml6b25ndWVzdHdpZmkaDAAABYMHBsAf3qs=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996832,"pkt_len":251,"pkt":"AAAMB6xAABRP+4rqCABFAADtINxAAP8RAAAKDEAexuIZNXIQBxUA2QAABCAA0XhHQDWMoVost5kNJ4VLqq8BEzAyLTA4LWVjLWJiLWJiLWJiBQYAAAABBAbY6pSHCAYKQABAIBBWZXJpem9uUHJlUHJvZBoMAAA3YwEGAAAAASwhNWIyMmEzZGYvMDI6MDg6ZWM6YmI6YmI6YmIvMjYWND0GAAAAEy0GAAAAAzcGWyKj3ygGAAAAAR8TMDItMDgtZWMtYmItYmItYmIOJDcwLTdkLWI5LWFkLTVkLTYwOnZlcml6b25ndWVzU3dpZmkaDAAABYMHBsAf3qs=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1528996990566,"flow_last_seen":1528996990566,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+1321{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996990,"pkt_len":745,"pkt":"AAAMB6xAABRP+4rqCABFAALbIN1AAP8Rqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1528996990648,"flow_last_seen":1528996990648,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp"}
+0521{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996990,"pkt_len":147,"pkt":"ABRP+4rqcNuYVcUnCABFAACFzqFAAPwRhYTG4hk1CgxAHgcVclAAcSboBSEAaT3FxpV5xYvpMtB7xhdyjsUBNTAzMTE0ODAwNzM2MzgwNzJAd2xhOS5tbmNwODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgJWIyMmEzMWMvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjEx","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1528996990648,"flow_last_seen":1528996990648,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0695{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528996997,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnJQBFAAE4+6JAAPwRV9jG4hk1Cgyqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":9472,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":9472}
+0594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997003,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCAJFAADh+7RAAPwRWBXG4hk1CgxAHgcUchAAzbxOCyQAxZ9vEHep5UhYAk0ZSBfGW2ABNTAzMTE0ODAwcjM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0ODQvZjA6Nzk6NjA6ZDE6N2Q6MjcvMjE1WEoBAgBIFwEAAAEFAAD\/dHhHt8FXBaLd\/Dz8eGsAAgUAALtgmvoL3QAA9ON0yrW1Z\/uLAQACCwUAACkdfnJp8UtH8QraekvpDSFQErTrf98odpcx7aFbGWQ5MZk=","pkt_caplen":239,"pkt_type":2050,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2050}
+0697{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997012,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFAIEw++ZAAPwRV5TG4hk1CgxAHgcUchABHA0JAicBFBsdKAWbpXDSR2MuOEvDRI4aCwAAV8gbBVNQQxpuAAABNxA0owm4HCG6PU2XNAkv\/vzDOB0KCSSyhii6vunR59O76CIKGOYjAfl7PUhdXq\/+IyUA1AERNOgzhBq9cBFTORk8iq5zOGawlRK5SmrzC9CE14BmLSTx9+rzUr5gcK7nljeTYDH3Q7JtAU4wMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNCUALm12YzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNDg0L2YwOjc5OjYwOmQxOjdkOjM3LzIxNVkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJln13lrCrLxGDT3fIxBMmg","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+1267{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997023,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0183{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1528997023501,"flow_last_seen":1528997023501,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp"}
+0602{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997023,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADA\/A1AAPwRV93Gohk1CgxAHgcSchAArGNDAysApImnbffn85ODhNvEVYWJb4QBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5HbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NLU6ODA6MDk6NWYvMjE2EiIzMuQ2NCBTdWJzY3JpYmVyIG5vdCBw8m92aXNpb25lZE8HBAEABwBQEhVAqRdhR287TKPkS7q+CkU=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1528997023501,"flow_last_seen":1528997023501,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997037,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":19456,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":19456}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1528997046661,"flow_last_seen":1528997046661,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0567{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997046,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAACl\/GdAAPwRV57G4hk1SgxAHgcUchAAkRD9CzAAiXzLxBwubl1wwfS6AWnHLCcBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NCU6OTA6MDk6NWYvMjE2Tw4BAAAMFwwAAAwBf\/xQEsknsuWEL1cn0K6nAa77dv0=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1528997046661,"flow_last_seen":1528997046661,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1528997046798,"flow_last_seen":1528997046798,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.77.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1258{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997046,"pkt_len":697,"pkt":"AAAMB6xAABRP+4rqCABFAAKrIO1AAP8RAAAKDEAexuJNNXIQBxQClwAAATECjwe2IRDkqP0tMlR6xA\/iWasaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgsAADghDQM0NwZbIqS2ATUwMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZTAtJQAtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxn2FjMDAwMDAwYmE5ZmE0MjI1YiwgNWIyMmE0OWYvZTA6NWY6NDU6OTA6MDk6NWYvMjE2BAbsFAEQIA5WWldDOlRlc3RMSWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TwoCAAAIFwwAMRoUAABXyAcOVqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1528997046798,"flow_last_seen":1528997046798,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.77.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1528997050187,"flow_last_seen":1528997050187,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1321{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997050,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1528997050187,"flow_last_seen":1528997050187,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0568{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997050,"pkt_len":179,"pkt":"ABRP+0\/qcNuYVcUnCABFAACl\/HNAAPwRV4nG4hk+CgxAHgcUchAIkVSXCzIAiQCjJQAe3VyUfsXAQgu9DVIBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZTA6NWY6NDU6OTA6MDk6NWYvMjE2Tw4BAAAMFwwAAAwBf\/xQEnsk2TyvRrElAGPaQu1TGoc=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1258{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997050,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997050,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADA\/Hc3APwRV2rG4hk+CgxAHgcUchAArOXvAzMApAK5\/vK2WJ8qPE8W1U8CkZoBNTAzMTE0ODAyODE1MDE1ODlAd2xhbg5tbmM0ODAu2WNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE0OWYvZSUANWY6NDU6OTA6MDk6tWYXMjE2EiIzMjc2NGFTdWJzY3JpYmVyIG5vdCBwcm92aXdpb25lZE8HwQEABwBQEvaqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":172}
+1267{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997104,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":711}
+0594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997104,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/QZEAPwRVsPG4hk1CgxAHgcUchAAzQgPCzQAxXtSKpzAf8BNRiUAokr5DysBNTAzMTE0ODAwN542MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncEhuZXR3b3JrLm9yZyyJNWIyMmE0ZjAvZjA6Nzk6NjA6ZDE6N2Q6MzclADE4T0oBAgBIFwEAAAEFAACKcjsVwlSKKOJtGmnEM40WAgUAJQAILZ6MsQAAKZLBCeu2GRuLAQACCwUAAJ\/BcysACZ\/4FKr5Z9ZbwGpQEmbTcy3rfjC83itm2j6DCO4=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":205}
+0445{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1528997105304,"flow_last_seen":1528997105304,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88}
+0754{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997105,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFAAEw\/QtAAPxYVm\/G4hk1CgxAHgcUchABHIJZAjUBFIVrGSOS1oLndVnFKVWnbGoaCwAAV8gbBVNQQxpuAAABNxA068q45YUN\/fhrVdP8LBtW4SmALFtdsWb5hs7\/8\/9n5+eq0Df0PkMMbrFhe6mwiqYImFERNLWmv3lBPH8LOa+rokyY3FJkdnDDQhSYNRCrOtMioCo5aXrsAAJ6j7Kc6YNqYGU8UqSvASgwMzExNDgwMDczUjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNGYwL2YwOjc5OjYwOmQxOjdkOlk3LzIxOFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJMzhShZ173Q9M6eXZ8hQzE","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1528997109583,"flow_last_seen":1528997109583,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254}
+1296{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997109,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997113,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAAvh\/SZAAPwRVqNv4hk1CgxAHgcUchAAzU+kCzgAxaY+TEQIBvIbEM8gxwm8HiEBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNSUAMmE0ZjBKZjA6Nzk6NjA6ZDE6N2Q6MzcvMjE4T0oBAgBIFwEAAAEFAADPr1+7vG3\/htCZ9485+1faAgUAAJ17h25JOQAAmA0tC\/t4G7mLAQACCwUAAM8TNgqzvAoBwPCLdirLFOVQEinOKpiYJ1ox0+WTuvuhy58=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0204{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":205}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1528996521324,"flow_last_seen":1528996521324,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1796,"l4_proto":"udp"}
+1269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997133,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2100,"pkt_ipoffset":14}
+0188{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2100}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1528997134036,"flow_last_seen":1528997134036,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0646{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997134,"pkt_len":239,"pkt":"ABxP+4rqcNuYVcUnCABFAADh\/WZAAPsRV2PG4hk1Cgx4HgcUchAAzWYuCzpCxXGn0Uh9HQ+OyLOqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1528997212627,"flow_last_seen":1528997212627,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1321{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997212,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1528997212627,"flow_last_seen":1528997212627,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997217,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":3072,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":3072}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1528997221594,"flow_last_seen":1528997221594,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0648{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997221,"pkt_len":239,"pkt":"ABRP+4olANuYVcUnCABFAADh\/iUAAPwRVXHGnRk1CgxAHgcUchAAzbneC0AAxXHEG2jtNCK6Pim9jxODZEQBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWYyMmE1NDkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjE5T0oBAgBIFwEAAAEFAAC130tW1AOjyO4EWETLCns4AgUAADpBoI2KsgAA1NEalEdfz2mLAQACCwUAAKYxpY6FFiCOWOh\/rUxMKdLfEvgA+nuQ51DKsqmwU74i6PE=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1528997221594,"flow_last_seen":1528997221594,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997221,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":691}
+0515{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1528996641548,"flow_last_seen":1528996641548,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1528996641548,"flow_last_seen":1528996641548,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":30764,"dst_port":12344,"l4_proto":"udp"}
+1322{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997257,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1528997257373,"flow_last_seen":1528997257373,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0649{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997257,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/rJAAPwRVQ7G5hk+CgxAHgcUchAAzVNaC0IAxU8cxybfn6wHKrLckjIf7\/YBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE1ODkvZjA6Nzk6NjA6ZDE6JQA6MzcvMjIwT0oBAgBIFwEAAAEFAAAT7kZq++1qq413Vnves+S4AgUAAGvzvZs2igAAfRnGIlbt+UCLAQACCwUAACpMCwseOO2rxFCxvsNqPXlQEr\/1MOfsnBTEG6mXYQrsxeM=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1528997257373,"flow_last_seen":1528997257373,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1295{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997257,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997257,"pkt_len":318,"pkt":"ABRk+4rqcNuYVcUnCABFAAEw\/rdAAPwRVLrG4hk+CgxAHgcUchABHBAqAkMBFJKUOcPLMsHSqD8mDFCtU+4aCwAAV8gbBVNQQxouAAABNxA0pLyUW3Ovb6JdG1WHoXHa1uRHR4Oqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+1270{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997259,"pkt_len":708,"pkt":"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","pkt_caplen":708,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997259,"pkt_len":165,"pkt":"ABRP+4rqcNuYVcUnCABFAACX\/sFAAPwRVUnG4hk+CgxAHgcUchAAgzXUC0QAezb\/4VyKamFOA3TktFr\/JAwBNTAzMTE0ODAxNTg4NDk2ODVAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywSN0ExM0FEN0UxOTJDQjEwQU8OAQAADBcMAAAMAX\/8UBJS64zA4ilsPt4yAqT5NcFg","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+1206{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997259,"pkt_len":660,"pkt":"AAAMB6xAABRP+4pECABFAAKGtO5AAP8RAAAKDEAexuIZPnIQBxQCcgAAAUUCav61YVJRYKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":660,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1528997260021,"flow_last_seen":1528997260021,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":158,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85}
+0585{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997260,"pkt_len":192,"pkt":"ABRP+4rqcNuYVcUnCABFAACy\/sZAAPxVVSnG4hk+CgxAHgcUchAAnp2\/A0UAlvMIt1JJhr\/PERoAnbXM5t8BNTAzMTE0czAxNTg4NDk2ODVAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywSN0ExM0FEN0UxOTJDQjEwQRIiMzI3NjQgU3Vic2NyaWJlciBub3QgcCUAdmlzaW9uZSUABwQBAAcAUBIlCbhyzGO3iZxohSCASLvo","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1528997261783,"flow_last_seen":1528997261783,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0649{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997261,"pkt_len":239,"pkt":"dxRP+4rqcNuYVcUnCABFAADh\/sxAAPwRVP3G4lI1CgxAHgcUchAAzQ3qC0YAxVP5rh2w5Lj8PI2upF4y\/0IBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXT3b3JrLm9yZywgNWIyMmE1ODkvZjA6N+g6NjA6ZDE6N2Q6MzcvMjIwT0oBAgBIFwEAAAEFAADvkK66gUfrDsISd3KA2Dq0AgUAAEGPAVxuDAAAtFagJxCAdoSLAQACCwUAAF3vTu1rfeBtyKrBBShZZHpQEiKq\/RQqlqya5NkwR6FJjV0=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1528997261783,"flow_last_seen":1528997261783,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1244{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997262,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":691}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1528997262272,"flow_last_seen":1528997262272,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp"}
+0755{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997262,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUlCABFAAEw\/tJAAPwRVKjG4hk1CgxAHgdnchABHO9uAkcBFNPCS391ou+9cV+4e8winsYaCwAAV8gbBVNQQxpuAAABNxA00HHPRTyBsiZ\/6IZyvYM7SEcCX4QDUPpLB\/Nfl+7+pUh0wsa+NLqA2uxWkFDu5HiEeuARNLVaDzSIzbsbfVqWHWeSG0JbhaHnOPPCnMTZqtKCAvxt6AWKG1d8LjPCNKE\/ymsqNvHxATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNTg5L2YwOjc5OjYwOmQxOjdkOjM3LzIyMFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJTw+nZtWuGBh7\/qdpxMTkR","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1528997262272,"flow_last_seen":1528997262272,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1528997265856,"flow_last_seen":1528997265856,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp"}
+1322{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997265,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1528997265856,"flow_last_seen":1528997265856,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1528997266054,"flow_last_seen":1528997266054,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp"}
+0649{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997266,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/tpAAPwRVO\/G4hk1CjhAHgcUJQAAzZq1C0gAxTQDE\/syEk8COAKXrk0TJQABNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuTHR3b3JrLm9yZywgNWIyMmE1ODkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjIwT0oBAgBIFwEAAAEFAADQlOBVyiA51UB5+BTRf1Z+AgUAAJqmOeZiwwAAElk1sqzX2LSLAQACCwUAAAF5eGigvLsuc5FvQXnfthRQEr72IV3uvADHqUwosXSRIBM=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1528997266054,"flow_last_seen":1528997266054,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1528996684582,"flow_last_seen":1528996684582,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.4.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1528996689402,"flow_last_seen":1528996689402,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29270,"l4_proto":"udp"}
+0525{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1528996680808,"flow_last_seen":1528996680808,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0489{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1528996680808,"flow_last_seen":1528996680808,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1528997294408,"flow_last_seen":1528997294408,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0649{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997294,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADh\/xpAAPsRVa\/G4hk1ChxAHgcUchAAzU8kC0oAxWEDMLFDKTYIfgbKyEyHMfIBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE1YWUvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjIxT0oBAjRIFwEAAAEFAACfFoRHbsDvI\/+46yBaysIsAgUAAJcLQv7ORgAASiNmmimRHNuLAQACCwUAAKEH8wkM8t7F6HlgkovXWwdQEo++iUihP9VHkRTh6mD7kgU=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1528997294408,"flow_last_seen":1528997294408,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1241{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997294,"pkt_len":725,"pkt":"AAAMB6xAqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":725,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0702{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997294,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCPhFAAEw\/yNAAPwRVFfG4hk1CgxAHgcUchABHADcAksBFFLEf\/kOKgAErzLPbpm7axIaCwAAV8gbBVNQQxpuAAABNxA040janeSai176IwGdu20qfHT6JdVX190nBVzQ8vbUeCsV1xduBdcl\/a+H+pp\/9\/XZ2p4RNITv9nAcFfSIQXySxypwJddtE1ldHXfDo7SxndAJGg66ub4EawJGyutGrkBcdNZ\/YktYATUwMzExNDgwMjUwODY0NjI4QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":2296,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2296}
+1269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997299,"pkt_len":745,"pkt":"AKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997307,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":711}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1528997311323,"flow_last_seen":1528997311323,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1323{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997311,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1528997311323,"flow_last_seen":1528997311323,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1528996733156,"flow_last_seen":1528996733156,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1528996733156,"flow_last_seen":1528996733156,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":309,"dst_port":12339,"l4_proto":"udp"}
+1241{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997395,"pkt_len":725,"pkt":"AAAMqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":725,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1528997399308,"flow_last_seen":1528997399308,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0648{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997399,"pkt_len":239,"pkt":"ABRPJQDqcNuYVcUnCABFAADhALRAAPwRUxbG4hk1CgwlAAcUchAAzVpOC1QAxRxqj+ts\/zbuXZza\/XyA7U4BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b1ZrLm9yZywgNWIyMiUAMTIvZjA6Nxk6NjA6ZDE6N2S6MzcvMjI0T0oBAgBIFwEAAAEFAAClYf4DzpLiqdyPyTgI99pYAgUAAG+BQKA0HAAAC9tSu9kUjAmLAQACCwUAANTPOn7BAwke3m06BT0FpdxQErKfyMWPNDJCfwFi2pzKF6M=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1528997399308,"flow_last_seen":1528997399308,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0700{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997399,"pkt_len":318,"pkt":"ABRP+4pTcNuYVcUnCAAbAAEwAL1AAPwRUr7G4hk1CgxAHgcUchABHDwbAlUBFM63G2\/ABME95vC\/YtPM3\/caCwAAV8gbBVNQQxpuAAABNxA0xuSFjY5XIJgFQGu0Uv0OYONLFS6YzD8pAXH0KZXHpfwyK4L\/92l5H6gqAq8nL0kepb8RNLxJYMKQCK0eGlYCRiBKtSavfrre3EDS6oPiPCuIZCCfvU44Ccl11WwK9jFxTgAolMtFATUwMzFPNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1DYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNjEyL2YwOjc5OjYwOmQxOjdkOjM3LzIyNFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBL2pfBK3Ll7exMTohpXZCAH","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1528997403593,"flow_last_seen":1528997403593,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1322{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997403,"pkt_len":745,"pkt":"AAAMB6xAABRP+4rqCABFAALbIQxAAP8RAAAKDEBuxuIZNXIQBxQCxwAAAVYCv+kKLAd5QTZEtH35XGAZbVIaCgAAV8gOBMFTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMwNwZbIqYbATUwMzExNDgwMDczNmM4MDcyQHdkYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQgLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYzExMmE2MjI1YiwgNWIyMmE2MTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI0BAasFAEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAEBRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TzoCAQA4ATAzMTE0ZTAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZxoUqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1528997403593,"flow_last_seen":1528997403593,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1528997403841,"flow_last_seen":1528997403841,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"72.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0650{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997403,"pkt_len":239,"pkt":"ABRP+4rqUtuYVcUnCABFAADhAMdAAPwRUwNI4hk1CgxAHgcUchAAzZCBC1YAxcgsJl6LYV\/S6USqzg063n4BZDAzMTE0ODAwNzM2MzgwNzJAd01hbi55bmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE2MTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI0T0oBAgBIFwEAAAEFAADHRYXcoWwXwUZiNDAUiPZYAgUAAKf5M2Yd6gAAEyJCfEY39q2LAQACCwUAABPeNlqa\/2jA+R6oV5E\/laFQEt3nRw9TK906hgwY5FpY4\/w=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1528997403841,"flow_last_seen":1528997403841,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"72.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":4,"flow_packet_id":5,"flow_first_seen":1528996603395,"flow_last_seen":1528996832079,"flow_tot_l4_data_len":2154,"flow_min_l4_data_len":113,"flow_max_l4_data_len":842,"flow_avg_l4_data_len":430,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp"}
+1269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997476,"pkt_len":745,"pkt":"AAAMB6xAABRPqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0593{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997476,"pkt_len":239,"pkt":"ABRP+4rqcNuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":239,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1528997476761,"flow_last_seen":1528997476761,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1294{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997476,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1528997476761,"flow_last_seen":1528997476761,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1528997023501,"flow_last_seen":1528997023501,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.162.25.53","dst_ip":"10.12.64.30","src_port":1810,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1528996990648,"flow_last_seen":1528996990648,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29264,"l4_proto":"udp"}
+0526{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1528996990566,"flow_last_seen":1528996990566,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0490{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1528996990566,"flow_last_seen":1528996990566,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0447{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1528997632285,"flow_last_seen":1528997632285,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112}
+1294{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997632,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1528997632285,"flow_last_seen":1528997632285,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112,"ndpi": {"proto":"VRRP","category":"Network"}}
+0701{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997632,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnRQBFAAEwA2FAAPwRUBrG4hk1CgxAHgcUchABHGYCAlsBFPJGkwRL+pjdA5197qGahcwaCwAAV8gbBVNQQxpuAAABNxA06\/sNxTnxG6ukTqwhWbbA2iqJ9xUQWB4T5BwZI+vaxI+7bs\/vfw\/eMzQ3J3YR5Fh5RZWRNDm4c5zmNtk9aBmMKxf9+K7wySD8NYXouGgH0g5FMhfbrMBBWqKOxwRMjh\/pBwtArUnjATUwMzExNDgwMjUwODY0NjI4QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNmZmLzAwOjU2OmNkOjZkOjQyOjU5LzIyNyUAMjAxMjU0NDIzNRIJU3Vj42VzcxkFU1BDTwYDAgAEUBLN9Y5G45qq3LYn60raic1U","pkt_caplen":318,"pkt_type":17664,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":17664}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1528997046798,"flow_last_seen":1528997046798,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.77.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1528997046661,"flow_last_seen":1528997046661,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"74.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+1323{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997654,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1528997655006,"flow_last_seen":1528997655006,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0647{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997655,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA5NAAPwRJQAlABk+CgxAHgcUchAAzVdGC1wAxX62GNWdpucNZiYPcJ1Tw+4BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyamE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEF+QC\/pRrW1P2OBIB77PLtyYRYAgUAAKO0Q86taQAA4Eb2Dn1+Ei2LAQACCwUAANEKc5kzaUyUHJ2asC+h4v1QEoNkNdC6vGAIe51fKjW9k5g=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1528997655006,"flow_last_seen":1528997655006,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1242{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997655,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":691}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1528997655528,"flow_last_seen":1528997655528,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0754{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997655,"pkt_len":318,"pkt":"ABRP+4rqcNuYZMUnCABFAAEwA5xAAPwRT9bG4hk+CgwlAAcUchB0HNn2Al0BFJBXpcO19tza8j\/VlLjh3P0aCwAAV8gbBVNQQxpuAAABNxA0jONf4TbIHPUvuy933g6GTJqzqlfKJTFZvtaM0NBQo2jkN\/g2tPEp73PKTNfSnSD8j7kRNPVhPusRHPLIHahhhZlLWh2egFea0oaNGerpaQMfhEQ5jMYg8ICzMJVYCSspbKc8\/fk7ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIjViMjJhNzE2L2YwOjc5OjYwOmQxOjclADM3LzIyOFkMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBIwdD70xCUAoHuVXO\/FXR+q","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1528997655528,"flow_last_seen":1528997655528,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1325{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997659,"pkt_len":745,"pkt":"AAAMB6xAABRP+4rqCABFAALbtPFAAP8RAAAKDEAexuIZPnIQBxQCxwAAAV4Cv0qC4LnwI1oT30\/+r6N\/324aCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADchDQM1NwZbIqcbMzUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmUxd29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLTAwOlZlJQB6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwYzUxNmE3MjI1YiwgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4BAasFAEQIA5WWldDMlRXc3RMYWIaDHUAN2MBBgD2AAIGBgAAAAIMBgAABRQ9BgAAABNHBgAAAA1BBgAAAAZRBDU2TzoCAQA4ATAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZxoUAABXyAcOVlpXQzJUZXN0Z2FiGgoAAFfICARFVBoQAABXyAoKU3RhbmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoRAABXyBELTHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIHRFWWlcgQzIgVGVzdCBMYWIaCwAlAMglBVZ6VxoNAAA4IQ4HMDclADEaDAAAOCERBgAAAAAaFQAAOCESD0ludmFsaWQgVmFsdWUaHQAAOCETFzQwLjgwNDg4Mk4tNzQuMTAyODM5VxoMAAA4IRQGAAABAhoMAAA4IRUGAAAAAhoVAAA4IRYPU3RhZGl1bURpcmVjdBoMAAAFgwcGwFBKmVASL5LJM0zKVOhBluOjWkW9+A==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1528997659473,"flow_last_seen":1528997659473,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29295,"l4_proto":"udp"}
+0648{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997659,"pkt_len":239,"pkt":"ABRP+4rqcNuYVccnCABFAADhA6lAAPwRUBjG4hk+CgxAHgcUcm8AzZu5C14AxUxI+gXiLIrMuBk\/g\/m1ALsBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEFAACnLVLIF0rTm6KFdNC987pOAgUAAJOGz1Q0xAAAaP51Ml0i0tuLAQACCwUAAGEYnEUncDkjDC3ik4qARkBQEl1GRO63bmbIH3rSxoBwm9k=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1528997659473,"flow_last_seen":1528997659473,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29295,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1297{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997659,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997660,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwA65AAPwRT8TG4hk+CgxAHgcUchABHFcyAl8BFHoykfgj\/Xd90spv0VGuIxkaCwAAV8gbBVNQQxpuAAABNxA0y0HUfpHpu9Z3knb9Jpgvmt8vWbZneyAfXcD6muQub+z7bwH3sqeNrHKOY569w344TjoRNMcMuZNkGqJng8EUVV9syhhxc2110dDxowezjCZXGmCAOyFNoMiW2LHvnImGQN+XL1\/kATUwMzExPDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm0lADMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNzE2L2YwOjc5OjYwOmQxOjdkOjM3ZjIyOFksOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJZyPqb4BVbNz+q0H3p2bHm","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1528997663786,"flow_last_seen":1528997663786,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29304,"dst_port":1812,"l4_proto":"udp"}
+1323{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997663,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1528997663786,"flow_last_seen":1528997663786,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29304,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1528997663992,"flow_last_seen":1528997663992,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170}
+0646{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997663,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA8JAAPuqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0697{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997664,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwJQBAOfwRT6vG4hk1CgxAHgcUchABHPYEAmEBFD8mC375vqLp+KF9uwm3k4gaCwAAV8gbBVNQQxpuAAABNxA07wUYi7+P\/KZsVS9NJaMwCtVJk9jEkC3Vl7jOtDBnuTtoap5IYaKcg6eQ4RJKJBTY9DYRNNB+ybyX+uSA4d1O4JYyTwpoEtUi2e6DQEAJ+nzQSzAvvoa2HSAJtTQFSW0rq69l6fpVATUwMzExNDgwMDcTwDM4MDcyQHdsYW4ubW5jNDjSLm1jYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhNzE2L2YwOjc5OjYwOmQxOjdkOjM3LzIyOFkMOTA4JQAhMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBJTXIMaNTnLNgc2lqiL9H7Q","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997683,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1528997683490,"flow_last_seen":1528997683490,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0649{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997683,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhA\/1AAPsRUM3G4hk1CgysngcUchAAzV+4C2IAxbjeL+gJ\/Z8y3pAVBW+ilI8BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrTG9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6UjE6NyUAMzcvMjI4T0oBAgBIFwEAAAEFAACeTPrzq4G+qMdV63zS5jgKAgUAANMitQR5aAAATi\/4eqBv42KLAQBzCwUAAI3Vpdgp79asxAN0pnzOl99QEuFioroE6q1umxIDXtaj55s=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1528997683490,"flow_last_seen":1528997683490,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1528997683835,"flow_last_seen":1528997683835,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.119.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1294{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997683,"pkt_len":725,"pkt":"AAAMB6xAABRP+4vqCABFAALHIRVAAP8RAAAKDEAexncZNXIQBxQCswAAAWMCqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1528997687969,"flow_last_seen":1528997687969,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp"}
+0648{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997687,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhBApAAPwRT8DG4hk1CgxAHgetchAAzW6NC2QAxZQNQW9gM5ZAoOSO4YFP3T0BNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4T0oBAgBIFwEAAAEFAABnRC75Yur1ZFj3fN3BeW98AgUAAFegbuvq5gAA\/FNfCuUdMLiLAQACCwUAAJwUGRbAWowbz35Ho4OQS4FQEj0VhwwOXHKZf7fI3xH\/2bM=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1528997687969,"flow_last_seen":1528997687969,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997692,"pkt_len":725,"pkt":"ACUAB2ugABRP+4rqCQBFAALHIRlAAP8RAAAKDEAexuIZNXIQBxQCswAAAWcCq6p8EPt1JA7lQ+Db9yRaDGkaCgAAV8gOBFVTGnAAAFfIDQZ3aWZpGg8AAFfICSlXSVNQUjEwGgkAADghDQM5NwZbIqc8ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLUkwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAIJASthdWRpdC1zZXNzaW9uLWlkJQAwZmYxMGFjMDIwMDAwYzUxNmE3MjI1YiwgNWIyMmE3MTYvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjI4BAasFAEQII5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIGIQAAAAIMBgAABRQ9Bk0AABNABgAAAA1BBgAAAAZRBDU2TyYCAnEkFwEAAAsFAAB5qZtl7jXBbH7Ivr+LWOj2AwIAIKwexEUaFAAAVsgHDlZaV0MyVGVzdExhYhoKAABXyAgERVQaEAAAV8gKClN0YW5kYXJkGhAAAFfICwpUZXN0IExhYhoJgwBXyA8DMRoKAABXyBAETkoaEQAAV8gRC0x5bmRodXJzdBoMAABXyBIGAAAAyRoXAABXwB0RVlpXIEMyIFRlc3QgTGFiGgslAFclAAVWelcaDQAAOCEOBzA3MDcxGgwAADghEQYAAAAAGhUAADghEg9JbnZhbGlkIFZhbHVlGh0AADghExc0MC44MDQ4ODJOLTc0LjEwMjgzOVcaDAAAOCEUBgAAAQIaDAAAOCEVBgAAAAIaFQAAOCEWj1N0YWRpdW1EaXJlY3QaDAAABYMHBsBQSolQEnRJIAwgdOVHaEimFKQwq+M=","pkt_caplen":725,"pkt_type":2304,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2304}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1528997134036,"flow_last_seen":1528997134036,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1528997134036,"flow_last_seen":1528997134036,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.120.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1528997105304,"flow_last_seen":1528997105304,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88,"ndpi": {"proto":"Unknown"}}
+0447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1528997105304,"flow_last_seen":1528997105304,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":88}
+0484{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1528997109583,"flow_last_seen":1528997109583,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254,"ndpi": {"proto":"Unknown"}}
+0448{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1528997109583,"flow_last_seen":1528997109583,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":254}
+0445{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1528997764910,"flow_last_seen":1528997764910,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0}
+1259{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997764,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1528997774688,"flow_last_seen":1528997774688,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.234.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0567{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997774,"pkt_len":179,"pkt":"ABRP+4rqc9uYVcUnCABFAAClBRNAAPwRTvPG6hk1CgxAHgcUchAAkYpBC3AAiTMAZqtMn01XpTgevOOwYPEBNTCyMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMjExLjNncHBuZXR3b3JrLm9yZy4gNWIyMmE3ODYvZTA6NWY6NDU6OTA6MDk6NWYvMjMwTw4BAAAMFwwAAAwBf\/xQEt5biXJtQqmEfDYtwo6O3Ew=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1528997774688,"flow_last_seen":1528997774688,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.234.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1528997775506,"flow_last_seen":1528997775506,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.76.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1322{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997775,"pkt_len":745,"pkt":"AAAMB6xAABRP+4rqCABFAALbISRAAP8RAAAKTEAexuIZNXIQBxQCxwAAAXICv9jhsXiK6zCbKgcltxzBMb4aCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQM3NwZbIqePAQIwMzExNDgwMDcxMzk0MzA0QHdsYW4ubW5jRBEwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CHljaXNjb4MGAAAAAR8TYjAtOWYtYmEtNGEtMGUtN2UeJTAwLWE3LTQyL2QwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjECAAAJASthqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1528997775506,"flow_last_seen":1528997775506,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.76.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0485{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1528997775573,"flow_last_seen":1528997775573,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0566{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997775,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBSFAAPwRTuXG4hk1Cgyqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1528997775762,"flow_last_seen":1528997775762,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.112.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0602{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997775,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUvCABFAADABSVAAPwRTsbG4hk1CgxwHgcUchAArFncA3MApFzr0zNm1cGtfYGqw8gu2esBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMGE3ODQvYjA6OWY6YmE6NGE6MGU6N2UvMjI5EiIzMjc2NCBTdWJzY3JpYmVyIG5rdCBwcm92aXNpb25lZE8HBAEABwBQEol7YUaBxcy8xSb+BSA62Ds=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1528997775762,"flow_last_seen":1528997775762,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.112.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1528997777144,"flow_last_seen":1528997777144,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1295{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997777,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1528997777144,"flow_last_seen":1528997777144,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0700{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997777,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFAAEwBTlWAPwRTkLG4hk1CgxAHgcUchABHFtlAnUBFPy\/77suJLORzOzxdqID6lIaCwAAV8gbBVNQQxpuAAABNxA0sgGX0jUZ0GkvrTEvR6JJSI5kjTryeLE5ZDtRZpqfIB5gVwEzf0GZAiOA3v7qRShWEqoRNMrrQ0Ld9EZkDOPTXqYYz\/U0I\/SC+HAlACKylcNORMjkiI8OEYrbS\/uvrFsRUJm7gb3AATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0dyUAay5vcmcsIDViMjJhNzhjL2aqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+0548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997778,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABVAADABUNAAPwRTqjG4hk1CgxAHgcUchAArF9UA3cApCAevq4tL8m2+S5T0IZH68wBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3ODYvZTA6NWY6NDU6OTA6MDk6NWYvMjMwEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEqtx8kLAbqN4aRfnk10cKJs=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997780,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":711}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997781,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1528997212627,"flow_last_seen":1528997212627,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"206.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1528997221594,"flow_last_seen":1528997221594,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.157.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997826,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1528997829855,"flow_last_seen":1528997829855,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1324{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997829,"pkt_len":745,"pkt":"AAAMB6xAABRd+4rqCABFAALbIS5AAP8RAAAKDEAlAOIZNXIQBxQCxwAAAXwCv4IsSQM3nR8wY02\/WtSNjVsaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAF\/ICQlXSVNQUjEwOgkAADghDQMyNwZbIqfFATVRMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vc2dZAxB+CDFjaXNjb4MGAAAAAR8TZTAtNWYtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzZG9uLWlkPTEwZmYxMGFjMDAwMDAwYzljMmE3MjI1YiwgNWIyMmE3YzIvZTA6NWY6NDU6OTA6MDk6NWYvMjMyBAasFAEQIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgC7AAZRBDU2TzoCAQA4ATAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLkVyZxoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFahoQAABXyAoKU3RhbmRhcmQaEAAAV8gLClRlc3QgTGFiGgkAAFfIDwMxGgoAAFfIEAROShoRAABXyBELTHluZGh1cnN0GgwAAFfIEgYAAADJGhcAAFfIHRFWWlcgYzIgVGVzdCBMYWIaCwAAV8glBVZ6VxoNAAA4IQ4HMDcwNzEaDAAAOCERBgAAAAAaFQAAOCESD0ludmFsaWUgVmFsdWUaHQAAOCETFzQwLjgwNDg4Mk4tNzQuMTAyODM5VxoMeQA4IRQGAAABAhoMAAA4IRUzAAAAAhoVAAA4IRYPU3RhZGl1bURpcmVjdBoMAAAFgwcGwFBKmVASDRiCmnK8XecKtcjM1khyyg==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1528997829855,"flow_last_seen":1528997829855,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1528997833437,"flow_last_seen":1528997833437,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.48.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1322{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997833,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1528997833437,"flow_last_seen":1528997833437,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.48.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1528997833703,"flow_last_seen":1528997833703,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.52.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0602{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997833,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADABiRAAPwRTcfGNBk1CgxAHgcUchAArG8ZA38ApPpRavVvUwLj8+Vom5Z2csUBNTAzMTE0ODAyODE1MDE1ODlAS2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3Y1EvZXM6NWY6NDU6OTA6MDk6FWYvMjMyEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEnLsj3tLTX0TFwMzSpwXcJE=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1528997833703,"flow_last_seen":1528997833703,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.52.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997839,"pkt_len":745,"pkt":"AAAMB6xAABRP+4rqCABFAALbITKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":711}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1528997839322,"flow_last_seen":1528997839322,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp"}
+0567{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997839,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBj5AAPwRTcjG4hk1CgxAHgcVchAAkSN5C4AAiYCfkZP9IDJyM93m2y+NtRUBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0MDAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE3Y2YvYjA6OWY6YmE6NGE6MGU6N2UvMjMzTw4BAAAMFwwAAAwBf\/xQEl7YRWPdxCp7KxkigG7kdUs=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1528997839322,"flow_last_seen":1528997839322,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1205{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997839,"pkt_len":697,"pkt":"AAAMB6xAVRRP+4qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997839,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABlAADABkJAAPwRTaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1528997261783,"flow_last_seen":1528997261783,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.82.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1528997262272,"flow_last_seen":1528997262272,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1895,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1528997265856,"flow_last_seen":1528997265856,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":30224,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1528997257373,"flow_last_seen":1528997257373,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.230.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1528997266054,"flow_last_seen":1528997266054,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.56.64.30","src_port":1812,"dst_port":9472,"l4_proto":"udp"}
+0483{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1528997260021,"flow_last_seen":1528997260021,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":158,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85,"ndpi": {"proto":"Unknown"}}
+0447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1528997260021,"flow_last_seen":1528997260021,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":158,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","l4_proto":85}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1528997867612,"flow_last_seen":1528997867612,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29204,"l4_proto":"udp"}
+0567{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997867,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClBqNAAPsRTmPG4hk1CgxAHgcUchQAkRggC4IAiUKdIcJOOZHCxHzP96o9900BNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZy4gNWIyMvo3Y2YvYjA6OWY64mE6NGE6MGU6N2UvMmgzTw4BAAAMFwwAAAwBf\/xQEmqru8HGcXlY8CXWo9RL+sk=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1528997867612,"flow_last_seen":1528997867612,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29204,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1528997294408,"flow_last_seen":1528997294408,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.28.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1528997311323,"flow_last_seen":1528997311323,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.224.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0594{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997988,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCgBFAADhCANAAPwRS8fG4hk1CgxAHgcUchAAzcqaC4QAxQGJ6Lj45v3l8O9jNbsTb\/MBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NjQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM0T0oBAhBIFwEAAAEFAAD7NrjaxmMHv4vIE1TL2G1wAgUAANQK+SugcQAAjldODJoz\/yqLAQACCwUAAPFizAqNmvaDbjPlWgGZGZpQEuJJeKWQmKkvyDnGACXbYRU=","pkt_caplen":239,"pkt_type":2560,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2560}
+1238{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997989,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":0,"pkt_ipoffset":14}
+0186{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":0}
+0696{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997989,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+1250{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997997,"pkt_len":691,"pkt":"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","pkt_caplen":691,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528997998,"pkt_len":147,"pkt":"ABRP+4rqcNuYVcUnCABFAACF2NZAAPwRe0\/G4hk1CgxAHgcVchAAcWngBYYAafOBk\/MbbTEmOF2SETjhcxsBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NjQvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM0","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1528997403593,"flow_last_seen":1528997403593,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.110","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1528997399308,"flow_last_seen":1528997399308,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1528997403841,"flow_last_seen":1528997403841,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"72.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1528998009111,"flow_last_seen":1528998009111,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"65.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0648{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998009,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhCFZAAPsRTHTG4hk1QQxAHgcUchAAzZhiC4cAxfpcYMkIJQAq\/AYDHQwJPKgBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NzgvMDA6NTY6Y2Q6NmQ6NDI6NTkvMjM1T0oBAgBIFwEAAAEFAAD1MaNN\/eVrXVA5NyB7PdAiAgUAAKijzKdTogAAg+UMifaIvECLAQACCQUAAKm646oYz3UcK6LI7VxSaVlQEnCDxzf23chcIFKFSs5a0So=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1528998009111,"flow_last_seen":1528998009111,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"65.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1528998013338,"flow_last_seen":1528998013338,"flow_tot_l4_data_len":637,"flow_min_l4_data_len":637,"flow_max_l4_data_len":637,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.69.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp"}
+1222{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998013,"pkt_len":671,"pkt":"AAAMB6xAABRP+4rqCABFAAKRITtAAP8RAAAKDEUexuIZNXIQBxUCfQAABIkCdRaYwGBcpHTMfyd7vuQnfxIaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGQVTYkMaCQAAOCENAzGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":671,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1528998013338,"flow_last_seen":1528998013338,"flow_tot_l4_data_len":637,"flow_min_l4_data_len":637,"flow_max_l4_data_len":637,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.69.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0523{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998013,"pkt_len":147,"pkt":"ABRP+4rqcNuYVcUnCABFAACF2RVAAPwRexDG4hk1CgxAHgcVchAAcUrEBbcAaShyHYE9O1\/+qc2DoEUV8fmqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1528997476761,"flow_last_seen":1528997476761,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.37.0","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1528998226495,"flow_last_seen":1528998226495,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1323{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998226,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1528998226495,"flow_last_seen":1528998226495,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1528998226700,"flow_last_seen":1528998226700,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.66","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0646{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998226,"pkt_len":239,"pkt":"AGRP+4rqcNuYVcUnCABFAADhCw9AAPwRSLvG4hk1CgxAQgcUchAAzUSUJQAAxU7iei8YAqXgQzF8ViRYUTYBNTAzMTE0ODAwNzM2UzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1528997632285,"flow_last_seen":1528997632285,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":112}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1528998238764,"flow_last_seen":1528998238764,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"88.12.80.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1259{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998238,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1528998238764,"flow_last_seen":1528998238764,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"88.12.80.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1324{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998257,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998257,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClC51AAPwRSGDG4hk+CgxAHgcUchAAkfysC5QAiW3tOcJvsUMExQ3khIQf5JsBNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MAI6NWYvMjM4Tw4BAAAMFwwAAAwBf\/xQEttbuyUYSqflHrLDivPrVrc=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1205{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998257,"pkt_len":697,"pkt":"AAAMB6xAABRP+4rqCABFAAKrtPRAZP8RAAAKLEAexuIZPnIQBxQClwAAAZUCj2QnnzQfo5ejlXtjb\/umlWwaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQM1NwZbIqlxATUwMzExNDgwMjgxNTAxNTg5QHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNib4OUAAAAAR8TZTAtNWYtNDUtOTAtMDktNWYeJTAwLWE3LTQyLWQwLWUwLTEwOlZlcml6b25XaTZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXOqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":663}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1528997655528,"flow_last_seen":1528997655528,"flow_tot_l4_data_len":284,"flow_min_l4_data_len":284,"flow_max_l4_data_len":284,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.37.0","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1528997659473,"flow_last_seen":1528997659473,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29295,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1528997655006,"flow_last_seen":1528997655006,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"37.0.25.62","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1528998260755,"flow_last_seen":1528998260755,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1322{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998260,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1528998260755,"flow_last_seen":1528998260755,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1528998260831,"flow_last_seen":1528998260831,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0568{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998260,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClC7JAAPwRSFTG4hk1ClJAHgcUchAAkW2jC5YAiay3x5utrN9ef0\/5StJEFS4BNTAzMTE0ODAyODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWUvZTA6NWY6NDU6OTA6MDk6NWYvMjM4Tw4BAAAMVwwAAAwBf\/xQEkJeR7D8c3a4+60+qxnUicM=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1528998260831,"flow_last_seen":1528998260831,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1205{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998260,"pkt_len":697,"pkt":"AAAMB6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0549{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998261,"pkt_len":206,"pkt":"ABRX+4rqcNuYVcUnCAhFAADAC7dAAPwRSDTG4hk1CgxAHgcUchAArEQCA5cApOyxS9lHKp\/iE8OGfXn5m7UBNTAzMTE0ODAwODE1MDE1ODlAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NWEvZTA6NWY6NDU6OTA6MDk6NWYvMjM4EiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92aXNpb25lZE8HBAEABwBQEvCuKaRJ36jDL+AkcQNYHtM=","pkt_caplen":206,"pkt_type":2056,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2056}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1528997663786,"flow_last_seen":1528997663786,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29304,"dst_port":1812,"l4_proto":"udp"}
+0490{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1528997663992,"flow_last_seen":1528997663992,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170,"ndpi": {"proto":"Unknown"}}
+0454{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1528997663992,"flow_last_seen":1528997663992,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"170.170.170.170","dst_ip":"170.170.170.170","l4_proto":170}
+0514{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998279,"pkt_len":179,"pkt":"gBRP+yUAcNuYVcUnCABFADClC+NAAPsRSSPG4hk1CgxAHgcUchAAkf3TC5gAiaqvlSxwmtnYRSbHVUGZo3ABNTAzMTE0ODA0MzI2MDg1ODabd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5ODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5Tw4BAAAMFwwAAAwBf\/xQEnv5mqy\/X1rSPl3U34VdPzc=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":145}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1528998279797,"flow_last_seen":1528998279797,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1260{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998279,"pkt_len":697,"pkt":"AAAMB6xAABRP+4rqCABFAAKrIUlAAP8RAAAKDEAexuJQNXIQBxQClwAAAZkCj3rtQEtjvnzCegZr\/ks\/YsIaCgAAJQAOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQM3NwZbIq2HATUwMzExNDgwNDMyNjA4NTg2QHNsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yay5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TNWMtMWQtZDktNTMtMGMtOWIeJTAwLWE3LTQyLWQwLWUwLTAwOlaNcml6b25XaUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkPTEwZmYxMGFjMDAwMDAwZDA4N2E5MjI1YiwgNWIyMmE5ODcvFWM6MWQ6ZDk6NTM6MGM6OWIvMjM5BASsFAEQIA5WWldDMlRlc3RMYWIaDPYAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TwoCAAAIFwwAABoUAABXyAcOVlpXQzJUZXN0TGFiGgoAAFfICARFVBoQAABXyCoKU3RhbmRhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1528998279797,"flow_last_seen":1528998279797,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1528998285403,"flow_last_seen":1528998285403,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp"}
+0568{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998285,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClDBBAAPwRR\/bG4hk1DgxAHg8UchAAkVlTC5wAid6Vm2Prh8ff1igjujrPQY0BNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWPjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmELODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5Tw4BAAAMFwwAAAwBf\/xQEvWoCrn3KdnMpOYKRlABwJ8=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1528998285403,"flow_last_seen":1528998285403,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0548{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998285,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADADBdAEPwRR9TG4hlFCgxAHgcUchAArDMCA50ApI8fGqCVnysbmexp5ciWlfwBJTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5ODcvNWM6MWQ6ZDk6NTM6MGM6OWIvMjM5EiIzMjc2NCBTqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":172}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1528997683490,"flow_last_seen":1528997683490,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.172.158","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1528997687969,"flow_last_seen":1528997687969,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1965,"dst_port":29200,"l4_proto":"udp"}
+0534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1528997683835,"flow_last_seen":1528997683835,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.119.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1528997683835,"flow_last_seen":1528997683835,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.119.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1528998307737,"flow_last_seen":1528998307737,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0647{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998307,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhDH5AAPsRSEzGBwk1CgxAHgcUchAAzRApC54AxbiGAVeQd4nw9IQcbiUA5zoBNTAzMTM0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjM3T0oBAnZIFwEAAAEFAAD4l2tdy6yk\/88l9cpE8l40DAUAACRoRug2qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1528998307737,"flow_last_seen":1528998307737,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1528998308061,"flow_last_seen":1528998308061,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp"}
+1294{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998308,"pkt_len":725,"pkt":"AAAMB3BAABRP+4rqCABFAALHIU9AAP8RAAAKDEAexuIZNXIwBxRDswAAAZ8Cq9PofZmSNOhQyNOgaRsyJ1QaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNYUjEwGgkAADghDQMwNxZbIqmjATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29yaS5vcmdZAxB+CDFjaXNjb4MGAAAAAR8TZjAtNzktNjAtZDEtN2QtMzceJTAwLWE3LTQyLWQwLWUwLTAwOlZlcml6b243aUZpQWNjZXNzBQYAAAAIGjEAAAAJASthdWRpdC1zZXNzaW9uLWlkczEwZmYxMGFjMDAwMDAwY2U1MmE5MjI1YiwgNWIyMmE5NTIvZjA6Nzk6JQA6ZDE6N2Q6MzcvMjM3BAasFAEQIA5WWldDhFRlc3RMYWIaDAAAN2MBBgAAAAIGBgAAAAIMBgAABRQ9BgAAABNABgAAAA1BBgAAAAZRBDU2TyYCAgAkFwEAAAsFAADqGOBIENmf79hbM4GZs1ZYAwIAIJdiOR0aFAC4V8gHDlZaV0MyVGVzdExhYhoKAABXyAgERVQaEAAAV8gKClN0YW5kYXJkGhBhAFfICwpUZXN0IExhYhoJAABXyA8DMRoKpwBXyBAETkoaEQAAV8gRC0x5bmRodXJzdBoMAABXyBIGAAAAyRoXAABXyB0RVlpXIEMyIFRlc3QgTGFiGgsAAFfIJQVWelcaDQAAOCEOBzA3MDcxGgwAADghEQYAAAAAGhUAADghEg9JbnZhbGlkIFZhbHVlGh0AADghExc0MC44MDQ4ODJOLTc0LjEwMjgzOVcaDAAAOCEUBgAAAQIaDAAAOCEVBgAAAAIaFQAAOCEWD1N0YWRpdW1EaHJlY3QaDAAABYNHBsBQSplQEuURqTNatQDGcJFc00xUIbY=","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1528998308061,"flow_last_seen":1528998308061,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0699{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998308,"pkt_len":318,"pkt":"ABRP+4rqcNu2VcUnQQBFAAEwDINAAPsRR\/jG4hk1CgwlAAcUchABHKZIAp8BFMKP3L7bmNggOPWkTIavpgoaCwAAV8gbBVNQQxpuAAABNxA0723Z5fHoC0l+gadvadgzfaSzCz27rPwxopk71TEDK1VIm8mW\/vsFxUsHy2TxysAjZO8RNM3E07NOswLZR1Yjduj2RuApthb0mlkqWQZZpjfg4Vd1eYt2TqpojJTwm8thaNHCskFYATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLiUAYzMxMS4zZ3BwbmV0d29yay5vcmcsIDViMjJhOTUyL2YwOjc5OlAwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFeVBDTwYDAgAEUBIoTJCJ2HxVvdUlAOn56UH9","pkt_caplen":318,"pkt_type":16640,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":16640}
+1270{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998308,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1528998314309,"flow_last_seen":1528998314309,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0567{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998314,"pkt_len":179,"pkt":"ABRP+4pIcNuYVcUnCABFAAClDKJAAPwRR2TG4hk1ClFAHgcUchAAkVZiC6QAiXXtUkUY2UEpsUhCUrecX98BNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5YTQvNWM6MWQ6ZDk6NTM6MGM6OWIvMjQwTw4BAAAMFwwAAAwBf\/xQEi8FyNCyWjoJnDm8uRInVVc=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1528998314309,"flow_last_seen":1528998314309,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1528998314512,"flow_last_seen":1528998314512,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp"}
+0603{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998314,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADADKZAAPwRR0XG4hk1CgxAHqgUchAArLr7A6UApAJ1Pjz8JGCwuo5GIgtQcZwBNTAzMTE0ODA0MzI2MDg1ODZAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm5yZywgNWIyMmE5YTQvNWM6MWQ6ZDk6QjM6MGM6OWIvMjQwEiIzMjc2NCBTdWJzY3JpYmVyIG5vdCBwcm92a3Npa25lZE8HBAEABwBQEil3cnDy8\/cVSnBQY7FdIyI=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1528998314512,"flow_last_seen":1528998314512,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998315,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":691}
+0700{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998315,"pkt_len":318,"pkt":"ABRU+4rqcNuYVcUnQwBFAAEwDOpAAPwRRszG4hk1CgxAHgcUchABHIc+AicBFAVYRP7z9BnlCK2x3nMNu9caCwAAV8gbBVNQQ\/1uAAABNxA0lSfZbnfLLhoh4+5ALjW4bpaGB\/F5lLUmaXWeOTpERaZCygHBXW8G5d8wRSUAsOoyXuERNO7GEB2l9DfyYkq5gsPl9gYDdVKWsTzavhi3cpWL4d4hWImwBdGLigMB9OjFS4NJg5i2ATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0d29iay5vcmcsIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBKDY\/Qv9KooB2GY4bCH4+IC","pkt_caplen":318,"pkt_type":17152,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":17152}
+0592{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998323,"pkt_len":239,"pkt":"ABRP+0zqcNuYVcUnCABFAAAlAL1AEPwRRw3G4hk1CgxAHgcUchAAzTbHC6gAxWfYqv2MMmfQQQEjLJV5MYwBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjA3T0oBAgBIFwEAAAEFAAASnKqRiXtNkJ7pl81Lqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":205}
+0697{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998323,"pkt_len":318,"pkt":"ABRP+4rqcNsYVcUnCACOAAEwDMFAAPwRRrrG4hk1CgxAHgcUchABHN46AqkBFC7XsmGo9thH1H39z75ZofsaCwAAV8gbBVNQQxpuAAABNxA01fgke7cAxvNUQc8fbhbu8Vj1f4ydqDyFV6zE3SwbdURor5DaN1W5275SM8SlmfBSLKIRNMdp\/4Zs6S04Xowx3iRvmA3n8taa5E4m8wpB3etCd2VzmAkdeZLlem0oTIzBlWNTWH1RATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jSzgwLm1jYzMxMS4zZ3BwbmV0d2Vyay5vc04sIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBLs7b4ERJr4qPbI12xbGqC0","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998338,"pkt_len":745,"pkt":"AAAMB6xAABRP+4rqCABFAALbIVpEAP8RAAAKDEAexuIZNXIQBxQCxwAAAaoCv2Uj1+ujspK2VyIvdisE+iUaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGgkAADghDQMzNwaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":711}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1528998338382,"flow_last_seen":1528998338382,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0647{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998338,"pkt_len":239,"pkt":"ABQlAIrqcNuYVcUnCABFAADhDOxAAPwRRt7G4hk1CgxASQcUchAAzQ2+C6oAxV4x6AhgYl+1t\/7aBLDTkJgBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjA6Nzk6NjA6ZDE6N2Y6MzcvMjM3T0oBAgBIFwEAAAEFAAD9ndZ8FHhsyj5jhEswY1t0AgUAABpKKGv5SQAALFBpvDseP8KLAQACCwUAAC1HLAQoI0jpYeW4fPFsl+tQEgCJjyegSbpAOXlBuPG4l8E=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1528998338382,"flow_last_seen":1528998338382,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0699{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998338,"pkt_len":318,"pkt":"ABRP+4rq8NuYVcUnCABFAAEwDPCkAPwRRos14hk1CgxAHgcUchABHImMAqsBFPNe2aGl6LP5y1u\/scR1o3AaCwAAV8gbBVNQOBpuAAABNxA0yJ0HwRo2kUg5GkMLWv3LIW9bZ\/+pjZx0CoGr7LPlqjfgOPOLXgeADm9RiTIaXTD+uAsRNK2vP2ZsGXahxC9sjBUhoGJOMJlzjqJyAyTjvpVvse28Qg5S9JgwmD8p+ZaQYnYBaM5xATUwMzExNDgwMDczNjM4MDcyQHdsYW4ubW5jNDgwLm1jYzMxMS4zZ3BwbmV0JQByay5vcmcsIDViMjJhOTUyL2YwOjc5OjYwOmQxOjdkOjM3LzIzN1kMOTA4NDIxMzI5MhIJU3VjY2VzcxkFU1BDTwYDAgAEUBIrffGqrk1JHmvfqoB\/bRcD","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+1268{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998342,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":711}
+1240{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998342,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":691}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1528998346991,"flow_last_seen":1528998346991,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp"}
+0647{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998346,"pkt_len":239,"pkt":"ABRP+4rqcNuTVcUnCABFAADhDRdAAPwRRrPG4hk1CgxAHgcUchgAzQnPC64AxTy6++0fAX35UVXUpCEgeNcBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE5NTIvZjAlADk6QTA6ZCUAN2Q6MzcvMjM3T0oBAgBIFwEAAAEFAAB+LhDHIi3oCVbmy0rSchdaAgUAAJdIOUyErgAA73piWKcgvT+LAQACCwUAAEZfsVUxfYxGJMfW\/6iCQHdQEgwvQS2NfxbBCfFadP4Rx2E=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1528998346991,"flow_last_seen":1528998346991,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1528998347284,"flow_last_seen":1528998347284,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp"}
+1294{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998347,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1528998347284,"flow_last_seen":1528998347284,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0697{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998347,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":43690,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":43690}
+0482{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1528997764910,"flow_last_seen":1528997764910,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0,"ndpi": {"proto":"Unknown"}}
+0446{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1528997764910,"flow_last_seen":1528997764910,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","l4_proto":0}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1528998372930,"flow_last_seen":1528998372930,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.21","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+1323{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998372,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1528998372930,"flow_last_seen":1528998372930,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.21","src_port":29200,"dst_port":1812,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1528997775762,"flow_last_seen":1528997775762,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.112.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1528997774688,"flow_last_seen":1528997774688,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.234.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1528997775506,"flow_last_seen":1528997775506,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.76.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1528997777144,"flow_last_seen":1528997777144,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.84.37.0","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1528997867612,"flow_last_seen":1528997867612,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29204,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1528997833703,"flow_last_seen":1528997833703,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.52.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0522{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1528997775573,"flow_last_seen":1528997775573,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1528997775573,"flow_last_seen":1528997775573,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.170.170","src_port":43690,"dst_port":43690,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1528997833437,"flow_last_seen":1528997833437,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.48.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1528997829855,"flow_last_seen":1528997829855,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.37","dst_ip":"0.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0512{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998557,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCAAlAAClD1JAAPwRRKvG4hk+CgxAHgcUchAAkYCWC7QAiR2+QwBH7d0zmbIWMmGskGYBNTAzMTE0ODAwNzEzqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0184{"basic_event_id":2,"basic_event_name":"Unknown L3 protocol","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","protocol":2048}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1528998576181,"flow_last_seen":1528998576181,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp"}
+0567{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998576,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClD7RAAPsRRVLG4hk1CgxAHgcWchAAkUUeC7YAjbHF+KxzM1jmiRGRdJnwnSQBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmFhOTAvYjA6OWY6YmE6NGE6MGU6N2UvMjQzTw4BAAAMFwwAAAwBf\/xQEmpMlHIe9v0pkoCIcMRZLH4=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998576,"pkt_len":206,"pkt":"ABRP+4rqcNuYVcUnCABFAADAD7hAAfwRRDPG4hk1CgxAHgcUchAArCnlA7cApDiN+d11wTNhp6tcCWDiFuUBNTAzMTE0ODAwNzEzOTQzMDRAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmFhOTAvYjA6OWY6YmE6NGE6MGU6N2UvMjQzEiIzMjc2NCBTdWJzYydpYmVyIG5vdCBwcm92aXNpb25lZEcHBAEABwBQEmSUFMWhON8\/wqCGcP\/+Ta0=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":172}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1528998584808,"flow_last_seen":1528998584808,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp"}
+1322{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998584,"pkt_len":745,"pkt":"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","pkt_caplen":745,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1528998584808,"flow_last_seen":1528998584808,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1528998585019,"flow_last_seen":1528998585019,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp"}
+0647{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998585,"pkt_len":239,"pkt":"ABRP+4rqcNuYVcUnCABFAADhD9lAAPwRdvHG4hk1CgxAHgcUWBAAzQh\/C7gAxWTiZLZdO+cme7xhCKfM6MYBNTAzMTE0ODAyNTA4NjQ2MjhAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZywgNWIyMmE4NzgvMDA6NTY6Y2Q6d2Q6NDI6NTkvMjM1T0oBAgBIFwEAAAEFAADyCxcI7XkaT0UFvUk8tJ2YAgUAAMJakSoc8QAAT38LtnrvLnGLAQACCwUAADQNzAWg+MfiRgxSS6PGeYdQEs5faleq8GPWzRgEVPv2RUo=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1528998585019,"flow_last_seen":1528998585019,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0697{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998585,"pkt_len":318,"pkt":"ABRP+4rqcNuYVcUnCABFADUwD91AAPwRQ57G4hk1CgxAHgcUchABHJkzArkBFPuMuhZj3jbkVosdPxLeAO4aCwAAV8gbBVNQQxpuAAABNxA0w9JZoXWsZGeHUoYiJ9p40yJPEfSCC1VPuzQcz\/tcT9Zniiv93vAfl8Sqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq","pkt_caplen":318,"pkt_type":2048,"pkt_ipoffset":14}
+0205{"basic_event_id":8,"basic_event_name":"nDPI IPv4\/L4 payload detection failed","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","l4_data_len":284}
+1222{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998605,"pkt_len":671,"pkt":"AAAMB6xAABRP+4rqCABFAAKRIWpAAP8RAAAKDEAexuIZNXIQBxUCfQAABLwCddn+cEnhcqnQe5pr1rrJmHQaCgAAV8gOBFVTGgwAAFfIDQZ3aWZpGg8AAFfICQlXSVNQUjEwGQVTUEMaCQAAOCENAzABNTAzMTE0ODgwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZ34IMWNpc2NvBQYAAAAIBAasFAEQCAasFAEWIA5WWldDMlRlc3RMYWIaDAAAN2MBBgAAAAIsIDViMjJhYWM5L2YwOjc5OjYwOmQxOjdkOjM3LzI0NDEGAAAAExoxAAAACQErYXVkaXQtc2Vzc2lvbi1pZD0xMGZmMTBhWTAwMPowMGQ1YzlhYTIyNWItBgAAAAFABgAAAA1BBl4AAAZRBDU2NwZbIqrNGhQAAFfIBw5WWldDMlRlc3RMYWIaCgAAV8gIBEVUGhAAAFfICgpTdGFuZGFyZBoQAABXyAsKVGVzdCBMYWIaCQAAV8gPAzEaCgAAV8gQBE5KGhEAAFfIEQtMeW5kaHVyc3QaDAAAV8gSBgAAAMkaFwAAV8gdEVZaVyBDMiBUZXN0IExhYhoLAABXyCUFVnpXGg2qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqo=","pkt_caplen":671,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1528998605816,"flow_last_seen":1528998605816,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":21008,"l4_proto":"udp"}
+0522{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998605,"pkt_len":147,"pkt":"ABRP+4rqcNuYVcUnCABFAACF321AAPwRdKvG4hk1CgxAHgcVUhAAcX0pBbwAafRaWCO5QhnkLZA61WpkFeUBNTAzMTE0ODAwNzM2MzgwNzJAd2xhbi5tbmM0ODAubWNjMzExLjNncHBZZXR3b3JrLm9yZywgNWIyMmFhYzkvZjA6Nzk6NjA6ZDE6N2Q6MzcvMjQ0","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1528998605816,"flow_last_seen":1528998605816,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":21008,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1528998013338,"flow_last_seen":1528998013338,"flow_tot_l4_data_len":637,"flow_min_l4_data_len":637,"flow_max_l4_data_len":637,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.69.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1813,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1528998009111,"flow_last_seen":1528998009111,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"65.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1528998636010,"flow_last_seen":1528998636010,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":37}
+0568{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998636,"pkt_len":179,"pkt":"ABRP+4rqcNuYVcUnCABFAAClEJJAAPslAHTG4hk1CgxAHgcUchAAkT3yC70AiXLX5bK1bcbjOxq4bylP028BNTAzMTE0ODAyMxg1Njg2MzFAd2xhbi5tbmM0ODAubWNjMzExLjNncHBuZXR3b3JrLm9yZyxiNWIyMmFhZWIvOTA6YjA6ZWQ6NGU6Nzc6YTMvMjQ1Tw4BAAAMFwwAAAxRf\/xQEvTT2\/+5xTPwYXYdoAWLt9A=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1204{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998636,"pkt_len":697,"pkt":"AAAMB6xAABRP+4rqCBBFAAKrIWxAAP8RAAAKDEAexuIZNXIQBxQClwAAAb4Cj8yIFnOZ6cZavy+ov11X2XMaCgAAV8gOBKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqg==","pkt_caplen":697,"pkt_type":2064,"pkt_ipoffset":14}
+0189{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":2064}
+1205{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","pkt_oversize":false,"pkt_ts":1528998639,"pkt_len":697,"pkt":"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","pkt_caplen":697,"pkt_type":22528,"pkt_ipoffset":14}
+0190{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","type":22528}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1528998338382,"flow_last_seen":1528998338382,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.73","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1528998226700,"flow_last_seen":1528998226700,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.66","src_port":1812,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Radius","category":"Network"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1528998226700,"flow_last_seen":1528998226700,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.66","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1528998226495,"flow_last_seen":1528998226495,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.82.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1528998279797,"flow_last_seen":1528998279797,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.80.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":15,"flow_packet_id":18,"flow_first_seen":1528997050187,"flow_last_seen":1528998557443,"flow_tot_l4_data_len":9435,"flow_min_l4_data_len":131,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":524,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.62","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1528998372930,"flow_last_seen":1528998372930,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.21","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":2,"flow_packet_id":200,"flow_first_seen":1528996068129,"flow_last_seen":1528998643334,"flow_tot_l4_data_len":90603,"flow_min_l4_data_len":145,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1528998605816,"flow_last_seen":1528998605816,"flow_tot_l4_data_len":113,"flow_min_l4_data_len":113,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":21008,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":51,"flow_packet_id":5,"flow_first_seen":1528997839322,"flow_last_seen":1528998605741,"flow_tot_l4_data_len":1665,"flow_min_l4_data_len":113,"flow_max_l4_data_len":657,"flow_avg_l4_data_len":333,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1813,"dst_port":29200,"l4_proto":"udp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1528998576181,"flow_last_seen":1528998576181,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1528998576181,"flow_last_seen":1528998576181,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1814,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1528998285403,"flow_last_seen":1528998285403,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"14.12.64.30","src_port":3860,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1528998346991,"flow_last_seen":1528998346991,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29208,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1528998308061,"flow_last_seen":1528998308061,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29232,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1528998238764,"flow_last_seen":1528998238764,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":663,"flow_max_l4_data_len":663,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip4","src_ip":"88.12.80.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1528998347284,"flow_last_seen":1528998347284,"flow_tot_l4_data_len":691,"flow_min_l4_data_len":691,"flow_max_l4_data_len":691,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"10.12.64.30","dst_ip":"198.226.25.53","src_port":29289,"dst_port":1812,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1528998314512,"flow_last_seen":1528998314512,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":172,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":172,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":43028,"dst_port":29200,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1528998260755,"flow_last_seen":1528998260755,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"10.6.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":1812,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1528998584808,"flow_last_seen":1528998584808,"flow_tot_l4_data_len":711,"flow_min_l4_data_len":711,"flow_max_l4_data_len":711,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"57.12.64.30","dst_ip":"198.226.25.53","src_port":29200,"dst_port":28948,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1528998314309,"flow_last_seen":1528998314309,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.81.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1528998307737,"flow_last_seen":1528998307737,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.7.9.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1528998585019,"flow_last_seen":1528998585019,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","src_port":1812,"dst_port":22544,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1528998260831,"flow_last_seen":1528998260831,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.82.64.30","src_port":1812,"dst_port":29200,"l4_proto":"udp"}
+0483{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1528998636010,"flow_last_seen":1528998636010,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":37,"ndpi": {"proto":"Unknown"}}
+0447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1528998636010,"flow_last_seen":1528998636010,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"198.226.25.53","dst_ip":"10.12.64.30","l4_proto":37}
+0159{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/fuzz-2020-02-16-11740.pcap"}
diff --git a/tests/result/nDPId_git.pcap.txt b/tests/result/nDPId_git.pcap.txt
new file mode 100644
index 000000000..66d462fb4
--- /dev/null
+++ b/tests/result/nDPId_git.pcap.txt
@@ -0,0 +1,20 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1460821630164,"flow_last_seen":1460821630164,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.77","dst_ip":"5.153.231.21","src_port":47991,"dst_port":9418,"l4_proto":"tcp"}
+0403{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":74,"pkt":"nJcm0ghCPJcOZtCOCABFAAA8Q1ZAAEAGScLAqABNBZnnFbt3JMp+hgtEAAAAAKACchB0gwAAAgQFtAQCCAoBp0gSAAAAAAEDAwo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":74,"pkt":"PJcOZtCOnJcm0ghCCABFCAA8AABAAC8GnhAFmecVwKgATSTKu3dqwE5VfoYLRaASOJBfrwAAAgQFrAQCCAorjWmrAadIEgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":66,"pkt":"nJcm0ghCPJcOZtCOCABFAAA0Q1dAAEAGScnAqABNBZnnFbt3JMp+hgtFasBOVoAQAB3G2AAAAQEICgGnSCArjWmr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":135,"pkt":"nJcm0ghCPJcOZtCOCABFAAB5Q1hAAEAGSYPAqABNBZnnFbt3JMp+hgtFasBOVoAYAB1NLgAAAQEICgGnSCErjWmrMDA0NWdpdC11cGxvYWQtcGFjayAvY29sbGFiLW1haW50L3dvdHNhcC5naXQAaG9zdD1hbm9uc2NtLmRlYmlhbi5vcmcA","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1460821630164,"flow_last_seen":1460821630222,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":32,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.77","dst_ip":"5.153.231.21","src_port":47991,"dst_port":9418,"l4_proto":"tcp","ndpi": {"proto":"Git","category":"Collaborative"}}
+0391{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":66,"pkt":"PJcOZtCOnJcm0ghCCABFCAA0J+9AAC8GdikFmecVwKgATSTKu3dqwE5WfoYLioAQAHLGLwAAAQEICiuNabkBp0gh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":267,"pkt":"PJcOZtCOnJcm0ghCCABFCAD9J\/BAAC8GdV8FmecVwKgATSTKu3dqwE5WfoYLioAYAHIZMQAAAQEICiuNacUBp0ghMDBjOTM0ODUzNGM3NjBkMmY1NmVjZjkzZjhkNjdiODRjNWYwYWJhMDc3YzEgSEVBRABtdWx0aV9hY2sgdGhpbi1wYWNrIHNpZGUtYmFuZCBzaWRlLWJhbmQtNjRrIG9mcy1kZWx0YSBzaGFsbG93IG5vLXByb2dyZXNzIGluY2x1ZGUtdGFnIG11bHRpX2Fja19kZXRhaWxlZCBzeW1yZWY9SEVBRDpyZWZzL2hlYWRzL21hc3RlciBhZ2VudD1naXQvMS45LjEK","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":66,"pkt":"nJcm0ghCPJcOZtCOCABFAAA0Q1lAAEAGScfAqABNBZnnFbt3JMp+hguKasBPH4AQAB7FlgAAAQEICgGnSDkrjWnF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1590{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":962,"pkt":"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","pkt_caplen":962,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":66,"pkt":"nJcm0ghCPJcOZtCOCABFAAA0Q1pAAEAGScbAqABNBZnnFbt3JMp+hguKasBSn4AQACDB+gAAAQEICgGnSEcrjWnR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1099{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":593,"pkt":"nJcm0ghCPJcOZtCOCABFAAJDQ1tAAEAGR7bAqABNBZnnFbt3JMp+hguKasBSn4AYACAr4gAAAQEICgGnSEcrjWnRMDA3YndhbnQgMzQ4NTM0Yzc2MGQyZjU2ZWNmOTNmOGQ2N2I4NGM1ZjBhYmEwNzdjMSBtdWx0aV9hY2tfZGV0YWlsZWQgc2lkZS1iYW5kLTY0ayB0aGluLXBhY2sgb2ZzLWRlbHRhIGFnZW50PWdpdC8yLjguMC5yYzMKMDAzMndhbnQgMzQ4NTM0Yzc2MGQyZjU2ZWNmOTNmOGQ2N2I4NGM1ZjBhYmEwNzdjMQowMDMyd2FudCBjMTlhYmYwNjViMzhkNzU5NDJkYWUzNWQ5YWUzNjIxYjY4MjcyYTg1CjAwMzJ3YW50IDI4MTUzMDc3NzAwNTMxYmJiNWJmYTZiNDE1NjVjOTE3YThkZjA3ZGMKMDAzMndhbnQgN2NkNGU1OTdlNWUwOGUxMTRmZDZhZGVmYjc0ZGU0NzQ2ZDMwOWM3NwowMDMyd2FudCA2OTA2ZjY4YzY5NjlmNTVhZTNkMDkwZTBmNmI5ZjBmOWQ4YjYzZmFhCjAwMzJ3YW50IDdmYmI5M2UzZDYxMWVjODU4YzQ2ZWYxZGM0ZTFjYjk5NWIxZjg4N2QKMDAzMndhbnQgZTMyNzI4MGUzZmEyOWNlMTQwZTljZjE4OGVmNGZmYjNhMWU2YzUzZgowMDMyd2FudCBlMWM1OTA2OTViMWRkZTMyZjExNjJiYzdkNDU0MDk2NmY0Y2Q0NmQxCjAwMDA=","pkt_caplen":593,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":66,"pkt":"PJcOZtCOnJcm0ghCCABFCAA0J\/JAAC8GdiYFmecVwKgATSTKu3dqwFKffoYNmYAQAHq\/gwAAAQEICiuNad8Bp0hH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":75,"pkt":"nJcm0ghCPJcOZtCOCABFAAA9Q1xAAEAGSbvAqABNBZnnFbt3JMp+hg2ZasBSn4AYACCCgQAAAQEICgGnSFQrjWnfMDAwOWRvbmUK","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":66,"pkt":"PJcOZtCOnJcm0ghCCABFCAA0J\/NAAC8GdiUFmecVwKgATSTKu3dqwFKffoYNooAQAHq\/YgAAAQEICiuNaeoBp0hU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":74,"pkt":"PJcOZtCOnJcm0ghCCABFCAA8J\/RAAC8GdhwFmecVwKgATSTKu3dqwFKffoYNooAYAHrFngAAAQEICiuNaeoBp0hUMDAwOE5BSwo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","pkt_oversize":false,"pkt_ts":1460821630,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap","flow_id":0,"flow_packet_id":90,"flow_first_seen":1460821630164,"flow_last_seen":1460821631269,"flow_tot_l4_data_len":70945,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2912,"flow_avg_l4_data_len":788,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.77","dst_ip":"5.153.231.21","src_port":47991,"dst_port":9418,"l4_proto":"tcp"}
+0140{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/git.pcap"}
diff --git a/tests/result/nDPId_google_ssl.pcap.txt b/tests/result/nDPId_google_ssl.pcap.txt
new file mode 100644
index 000000000..af1176ecb
--- /dev/null
+++ b/tests/result/nDPId_google_ssl.pcap.txt
@@ -0,0 +1,20 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1434443394683,"flow_last_seen":1434443394683,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.31.3.224","dst_ip":"216.58.212.100","src_port":42835,"dst_port":443,"l4_proto":"tcp"}
+0390{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443394,"pkt_len":58,"pkt":"AA6OTbSogMbKAJ6fCABFAAAsBqJAAEAG14usHwPg2DrUZKdTAbt6Z3LqAAAAAGACFtCOVwAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443394,"pkt_len":60,"pkt":"gMbKAJ6fAA6OTbSoCABFAAAseLYAADMGsnfYOtRkrB8D4AG7p1PuIxETemdy62ASp5T+aAAAAgQFlgAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443394,"pkt_len":54,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqNAAEAG146sHwPg2DrUZKdTAbt6Z3Lr7iMRFFAQFtCmzAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443394,"pkt_len":180,"pkt":"AA6OTbSogMbKAJ6fCABFAACmBqRAAEAG1w+sHwPg2DrUZKdTAbt6Z3Lr7iMRFFAYFtBdNwAAgHwBAwEAYwAAABAAADkAADgAADUAABYAABMAAAoHAMAAADMAADIAAC8DAIAAAGYAAAUAAAQBAIAIAIAAAGMAAGIAAGEAABUAABIAAAkGAEAAAGUAAGQAAGAAABQAABEAAAgAAAYEAIAAAAMCAIBEdnQFirnJpau7BnAsxs8f","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443395,"pkt_len":60,"pkt":"gMbKAJ6fAA6OTbSoCABFAAAoeX0AADMGsbTYOtRkrB8D4AG7p1PuIxEUemdzaVAQp5QVigAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0798{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443395,"pkt_len":358,"pkt":"gMbKAJ6fAA6OTbSoCABFAAFYeYAAADMGsIHYOtRkrB8D4AG7p1PuIxxAemdzaVAYp5RnXgAAAf8EBAMCAQYwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nZW90cnVzdC5jb20vY3Jscy9zZWN1cmVjYS5jcmwwTgYDVR0gBEcwRTBDBgRVHSAAMDswOQYIKwYBBQUHAgEWLWh0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeTANBgkqhkiG9w0BAQUFAAOBgQB24RJuTksWEoYwBrKBCM\/wCMfHcX5m7sLt1Dsf\/\/DwyE7WQziwuTB9GNBVg6JqyzYRnOhIZqNtf7gT1Ef+i1pcc\/yu2RsyGTirlzQUqpbS66McFAhJtrvlke+DNusdVm\/K2rxzY5Dkf3s+Iss9B+1fOHSc4wNQTqGvmO5h8oQ\/EhYDAQAEDgAAAA==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443395,"pkt_len":54,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqVAAEAG14ysHwPg2DrUZKdTAbt6Z3Np7iMRFFAQFtCmTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2312{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443395,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443396,"pkt_len":54,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqZAAEAG14usHwPg2DrUZKdTAbt6Z3Np7iMWqlAQIYSWBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443396,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443397,"pkt_len":54,"pkt":"AA6OTbSogMbKAJ6fCABFAAAoBqdAAEAG14qsHwPg2DrUZKdTAbt6Z3Np7iMdcFAQLLCEEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443397,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443398,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443398,"pkt_len":368,"pkt":"AA6OTbSogMbKAJ6fCABFAAFiBqhAAEAG1k+sHwPg2DrUZKdTAbt6Z3Np7iMdcFAYLLBd8wAAFgMBAQYQAAECAQCJE\/UgWC1ephqdHlX76FYEvfsgrbMWPzUiKCabJKOq+PPxveMMBWMoKrAR383+Za5DefH15hpBf6KHSBreRxt4DCtCeYZyOCOTnaHmJuA+B+CpAvxIUauUywgA0Kbv0PY\/h2DOTF85nFsyyCCRlu5+Z\/Hagc5FBjk5JLDWo82AqJaazwoDzKcLFLAkqYtOgQGuLs9u6iqKkrvx9Rlomd+2PxuohkGYjk4iGsVFmSRrlhKDxifSDIlNWNln2rjAgXo+hjOSOs+xzBkSIMieIqFTTdF9t1nhteQEs3JQXWgLW4EkCINmccl84iq7ma03klyZ8Gg+dxC3vXdte3pIvlN0FAMBAAEBFgMBACRVFaqlyGalIwzWGm3pOUlb5hIiHh6emt5yoX3HqC5Oozr9Lv4=","pkt_caplen":368,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","pkt_oversize":false,"pkt_ts":1434443399,"pkt_len":358,"pkt":"gMbKAJ6fAA6OTbSoCABFAAFYfNoAADMGrSfYOtRkrB8D4AG7p1PuIxxAemdzaVAYp5RnXgAAAf8EBAMCAQYwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nZW90cnVzdC5jb20vY3Jscy9zZWN1cmVjYS5jcmwwTgYDVR0gBEcwRTBDBgRVHSAAMDswOQYIKwYBBQUHAgEWLWh0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeTANBgkqhkiG9w0BAQUFAAOBgQB24RJuTksWEoYwBrKBCM\/wCMfHcX5m7sLt1Dsf\/\/DwyE7WQziwuTB9GNBVg6JqyzYRnOhIZqNtf7gT1Ef+i1pcc\/yu2RsyGTirlzQUqpbS66McFAhJtrvlke+DNusdVm\/K2rxzY5Dkf3s+Iss9B+1fOHSc4wNQTqGvmO5h8oQ\/EhYDAQAEDgAAAA==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","flow_id":0,"flow_packet_id":28,"flow_first_seen":1434443394683,"flow_last_seen":1434443401353,"flow_tot_l4_data_len":8136,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":290,"midstream":0,"l3_proto":"ip4","src_ip":"172.31.3.224","dst_ip":"216.58.212.100","src_port":42835,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap","flow_id":0,"flow_packet_id":28,"flow_first_seen":1434443394683,"flow_last_seen":1434443401353,"flow_tot_l4_data_len":8136,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":290,"midstream":0,"l3_proto":"ip4","src_ip":"172.31.3.224","dst_ip":"216.58.212.100","src_port":42835,"dst_port":443,"l4_proto":"tcp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/google_ssl.pcap"}
diff --git a/tests/result/nDPId_googledns_android10.pcap.txt b/tests/result/nDPId_googledns_android10.pcap.txt
new file mode 100644
index 000000000..e06429ed7
--- /dev/null
+++ b/tests/result/nDPId_googledns_android10.pcap.txt
@@ -0,0 +1,122 @@
+0371{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592552824409,"flow_last_seen":1592552824409,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.8.8","dst_ip":"192.168.1.159","src_port":853,"dst_port":55856,"l4_proto":"tcp"}
+0410{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552824,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0gpUAAHcG7tcICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT59wAAAQEIChWqa0r\/\/5Cw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552824,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0gzYAAHcG7jYICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT5GAAAAQEIChWqbCn\/\/5Cw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552824,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0g5MAAHcG7dkICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT4OAAAAQEIChWqbQn\/\/5Cw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0hHAAAHcG7PwICAgIwKgBnwNV2jAOPHBKaWPSFIARAUT2gAAAAQEIChWqbsH\/\/5Cw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1592552825913,"flow_last_seen":1592552825913,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp"}
+0424{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":74,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8tGBAAEAGuAjAqAGfCAgEBLusA1UTsXihAAAAAKAC\/\/9hlgAAAgQFtAQCCAr\/\/8zBAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1592552825913,"flow_last_seen":1592552825913,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp"}
+0424{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":74,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8yAFAAEAGoGPAqAGfCAgICNrYA1WXsATAAAAAAKAC\/\/8uSAAAAgQFtAQCCAr\/\/8zBAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":74,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8q2cAAHcGygEICAQEwKgBnwNVu6wOvAEKE7F4oqAS6yBkegAAAgQFZAQCCAp\/X4MU\/\/\/MwQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":74,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8xdcAAHYGrI0ICAgIwKgBnwNV2tjD\/e2fl7AEwaAS6yBjdQAAAgQFZAQCCApkDcpF\/\/\/MwQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGFAAEAGuA\/AqAGfCAgEBLusA1UTsXiiDrwBC4AQAVd8vQAAAQEICv\/\/zMV\/X4MU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":220,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADOtGJAAEAGt3TAqAGfCAgEBLusA1UTsXiiDrwBC4AYAVdpogAAAQEICv\/\/zMV\/X4MUFgMBAJUBAACRAwOw6eX3GPuUCseewx8KJQKq65uZZdDYuRYi0MWCjT+jCwAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1592552825913,"flow_last_seen":1592552825928,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0412{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yAJAAEAGoGrAqAGfCAgICNrYA1WXsATBw\/3toIAQAVd7uAAAAQEICv\/\/zMVkDcpF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":220,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADOyANAAEAGn8\/AqAGfCAgICNrYA1WXsATBw\/3toIAYAVdohAAAAQEICv\/\/zMVkDcpFFgMBAJUBAACRAwOVSYhvB5NCZzUc9GHHE6Pd9b9dT20UrbAk09jz7PnHSwAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1592552825913,"flow_last_seen":1592552825929,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0411{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0q3UAAHgGyPsICAQEwKgBnwNVu6wOvAELE7F5PIAQAPB8fAAAAQEICn9fgyL\/\/8zF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0xdkAAHYGrJMICAgIwKgBnwNV2tjD\/e2gl7AFW4AQAPB7dgAAAQEICmQNylT\/\/8zF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1592552825913,"flow_last_seen":1592552825957,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2325{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1121{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":1,"flow_packet_id":7,"flow_first_seen":1592552825913,"flow_last_seen":1592552825957,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}}
+0739{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":305,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjq30AAHgGyAQICAQEwKgBnwNVu6wOvAwfE7F5PIAYAPCBTwAAAQEICn9fgzP\/\/8zFWkXoaRZWKwjLSUJGN3CmDF5dRNLykDwG7pTkFkLN7gp\/102O6AmwwdVceRHgogGvAykqYxKCmAi77yZ4Ft3DRhWHkP57qZJu3+2PxOP2VPziPKgJ+WulpnZmEM\/6aXA72fn15Q\/r0IUSLwpglfA2aaOTek0bfdKz6On4IdcjxIKFGo635zNHz4MngRG9urLcfGYnSr8Qi7SwcOcGknBFO7H52eKxKLwygtnmepN8U5+eUSHT3eUeqARJbDeeVVg43xpyB\/9thjuefxarX+24DRIRgWkhS4nZrfqe\/D18PQYU\/eyjmTwWAwMABA4AAAA=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1592552825913,"flow_last_seen":1592552825959,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2327{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":1484,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAW+xesAAHYGpvcICAgIwKgBnwNV2tjD\/fMql7AFW4AQAPCIOwAAAQEICmQNymX\/\/8zFBWU\/U1SwWFqB51XKOk\/9gYc9EfnV8DMmwcygUgaToHLYUMwUZiFSJ1LqRJEm3oknKcmGpn6E+8rpojBhPvTewD8kzc3KtWn0xIyDeDz+Z1J8g\/uv+o2If+iKyGWYGf4RT\/KFSb\/lYkCgp373jBd81x2dBToH41zJgQMiTcRji8A4I0eyWkRpuReYMwBKatDuD2J7yUI9b+O06es4KhBC9a+DKwwGcm20clrv8FMBPBA3oxgf2d7Tp3YHw5XBW1+9IPzq88tSTj+WKJs15ATWPHPRFsSXyMFQZgstMB5d3dOB2ANmme6AIIj99uss4gAETjCCBEowggMyoAMCAQICDQHjtJqhjYqpgSVpULgwDQYJKoZIhvcNAQELBQAwTDEgMB4GA1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjIxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMTcwNjE1MDAwMDQyWhcNMjExMjE1MDAwMDQyWjBCMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMwEQYDVQQDEwpHVFMgQ0EgMU8xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BjPRdSLzdOc5EDvfrTdaSEbyc88jkx1uQ8xGYQ9njwp71ANEJNvBYCAnyqgvRJLAuE9n1gWJP4wnwt0d1WTHUv3TeGSghD2UawMw7IilA80a5gQSecLnYM53SDGHC3v0RhhZecjgyCoIxL\/0iR\/1C\/nRGpbTddQZrCvnkJjBfvgHMRjYa+fajP\/Ype9SNnTfBRn3HXcLmno+G14adC3EAW48THCOyT9GjN0+CPg7GsZihbG482kzQvbs6RZYDiIO60ducaMp1Mb\/LzZpKu83Txh15MVmO6BvY\/iZEcgQAZO16yX6LnAWRKhSSUj5O1wNCyltGN8+aM9g9HNbSSsBwIDAQABo4IBMzCCAS8wDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH\/AgEAMB0GA1UdDgQWBBSY0fhuEOvPm+xgnxiQG6DrfQn9KzAfBgNVHSMEGDAWgBSb4gdXZxwewGoG3lm0mi3f3BmGLjA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5wa2kuZ29vZy9nc3IyL2dzcjIuY3JsMD8GA1UdIAQ4MDYwNAYGZ4EMAQICMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vcGtpLmdvb2cvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABqAPjZ5+\/MuqUY3fV5UFjWux04Imf690TRpJlJmBz0KuknLYvTxGo78EU9olkx0K9Nn3rKjqgWNhE1MIGUPpZbaDRb4bDvbbwQjiGs6bMFgvWifcY7uLVg0B\/DVVOmGWf17Xg0hlPWMyaj42PKtzA8a85qnqQQn+aPJsP8CeGthusc1K+hW+k\/DHAzttjy0S+rtzOE87NwNjNY+m8pCWIvMFiEXQLyi1mbv2sQVW82JqpsJJucy0g1uZyACWxCwkAmcDB+erdg76qH8bOgQXAhSGVEqcbuserXdFe0ryQgqLIq0piGrY\/\/XUklQ0Im3rfKv+1CuL+GVDfNGrZ2c9coWAwMBLAwAASgDAB0gz7rMJbgrJvLNELNJ4ltNigCj+UX2TiWQMThYrp6byhkIBAEAqwkJBMouQT82rL\/jSgisqQw4wiLt1+Xmi+E=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1121{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":2,"flow_packet_id":7,"flow_first_seen":1592552825913,"flow_last_seen":1592552825960,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}}
+0741{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":305,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjxewAAHYGq5EICAgIwKgBnwNV2tjD\/fi0l7AFW4AYAPBBaAAAAQEICmQNymX\/\/8zFxYLVsh0XBPBon\/dZK5fwP0f+D6HQBgodlevFaX40Qojl6fN5kYFp\/IMamekDmny2Tg+MQYdHS+NKqsqN9JkaZdY57lJcoOtbiFZlorHig6Gur0c3O64+IY9\/yzForraiSJSH05G8FeV1u2pdTO3ohu1K2vcU4NSoV1T7GxWd4M4gz8nhxQnJzW1EK3wgWliMbyOJPXeTKIRwsf\/8siihdwQBVxH+fTy1LIc3v4onjL8JdSGFTqyv1emQ12oetaF0Y5mfXrLSAFsT4A5mNd1\/wWJpF9CmCjcQ20MzmMAtWB0t\/3WTT\/MWAwMABA4AAAA=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGNAAEAGuA3AqAGfCAgEBLusA1UTsXk8DrwGlYAQAWJ2ZwAAAQEICv\/\/zM1\/X4Mz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGRAAEAGuAzAqAGfCAgEBLusA1UTsXk8DrwMH4AQAW1w0gAAAQEICv\/\/zM1\/X4Mz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0tGVAAEAGuAvAqAGfCAgEBLusA1UTsXk8DrwNDoAQAW1v4wAAAQEICv\/\/zM1\/X4Mz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yARAAEAGoGjAqAGfCAgICNrYA1WXsAVbw\/3zKoAQAWJ1YQAAAQEICv\/\/zM1kDcpl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yAVAAEAGoGfAqAGfCAgICNrYA1WXsAVbw\/34tIAQAW1vywAAAQEICv\/\/zM5kDcpl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0yAZAAEAGoGbAqAGfCAgICNrYA1WXsAVbw\/35o4AQAW1u3AAAAQEICv\/\/zM5kDcpl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":159,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACRyAdAAEAGoAjAqAGfCAgICNrYA1WXsAVbw\/35o4AYAW2IqwAAAQEICv\/\/zM9kDcplFgMDACUQAAAhILeCNg8jv6jCikgxhfkU3HgT7WoBqRBJXMyl0pUWnAEeFAMDAAEBFgMDACgAAAAAAAAAAJhbzSCk2Tht0cc+LCBCU1nYBazVcI2EU09kNu20VVUE","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":159,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACRtGZAAEAGt63AqAGfCAgEBLusA1UTsXk8DrwNDoAYAW3cwQAAAQEICv\/\/zNB\/X4MzFgMDACUQAAAhIB1NzO65iF1RgzRYUOGwikF2wXKLNJOXWHai+wX\/XmACFAMDAAEBFgMDACgAAAAAAAAAADMYmv1ve8+roAea\/hOyzz8x5G2VCxfbIwWd6P7onSbo","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0814{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":358,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYxe8AAHYGq1kICAgIwKgBnwNV2tjD\/fmjl7AFuIAYAPCVwgAAAQEICmQNynr\/\/8zPFgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7stUI3n9w6Bd7Bo1xVXy+0OXV\/lHT5lA9\/GbuMkzwugBBchLSxvyY0LEl5xIuCp83HBEhH+1MxqmtX4gW4cxNBmD4J7ZB6UV5zmoLDyYH8f06kQ0cbxh\/YLNXHSzVirvfugV3LQBlV+9Bpp0yZSzIkUJLf0qN9Qh8y28fYVh8wrxt\/44w864fkSANzJFhTx0c+Av9PV54L7qn8Ok7eTCjxTG+sTMMtH6DPnvMu7qKQQksevJ9p2LQGHlp\/QGUw6Cs0o62K\/KxYFfLCcXx3OH\/taS5FhQDAwABARYDAwAoAAAAAAAAAAAgilLoAsCqZ+bWS7HX8RV+x6hkiqdBDfE2k1d4jOgLPQ==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":358,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYq4MAAHgGx8kICAQEwKgBnwNVu6wOvA0OE7F5mYAYAPCNwQAAAQEICn9fg0z\/\/8zQFgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7si\/DOnq1DGgu8OxQKIPD47uYPnO8xM2aeSK2T\/19bmxIkcfRP00II55x5yfpEv3\/ODq\/7O8EdsmMGI5zxavF7YdVwJUnDAN7hCO7OWFeviLfkGe\/D59YmVRYODja4O49f1v08EKrt6bow4V9ruahBKixKZpY2lFj7FB4DJ6rZKo1+sO8wC8wqe3xvifD7WiW0T1CEOENgeWWMxkeOeSVhfFNemB4dIS4B5xTAU6m1kQcUKSSPB90Glm7Ln3sg+MJf9zxMpTwpOve8EBmeSYyZQBrmRQDAwABARYDAwAoAAAAAAAAAAAt9na1d630FOWMHH\/zJ8SbQeTHoOlsN7C2LFPgeVAqNg==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":151,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACJtGdAAEAGt7TAqAGfCAgEBLusA1UTsXmZDrwOMoAYAXgenwAAAQEICv\/\/zNN\/X4NMFwMDAFAAAAAAAAAAAaI\/1br7qpFCm0iqQN3tCmfEr3xZlO4fCdyKXAN6C7IgYrco8oZs\/+q+UFTPzCFjUkqj0fkGIIXuDIE2GmNUAXJj63zvWrXMLw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552825,"pkt_len":151,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACJyAhAAEAGoA\/AqAGfCAgICNrYA1WXsAW4w\/36x4AYAXhpDwAAAQEICv\/\/zNVkDcp6FwMDAFAAAAAAAAAAART8lEX6ZoAkVgX7dDGPPd7aOXVC56IOwlYrJPrXITEl0kw2smePPpFiQ0QHAmpKlI3Welu7CqTq2DaJ2VTWEoUuXYN80BTAqw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0q4wAAHgGyOQICAQEwKgBnwNVu6wOvA4yE7F57oAQAPBuVwAAAQEICn9fg2D\/\/8zT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0xg4AAHYGrF4ICAgIwKgBnwNV2tjD\/frHl7AGDYAQAPBtSAAAAQEICmQNypn\/\/8zV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1592552826036,"flow_last_seen":1592552826036,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp"}
+0425{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":74,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA80uBAAEAGmYjAqAGfCAgEBLuwA1WtLB4AAAAAAKAC\/\/8imQAAAgQFtAQCCAr\/\/8zgAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":74,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8wHkAAHcGtO8ICAQEwKgBnwNVu7B94BEWrSweAaAS6yCziAAAAgQFZAQCCAq0eUC+\/\/\/M4AEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uFAAEAGmY\/AqAGfCAgEBLuwA1WtLB4BfeARF4AQAVfLywAAAQEICv\/\/zOS0eUC+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":220,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADO0uJAAEAGmPTAqAGfCAgEBLuwA1WtLB4BfeARF4AYAVfZbQAAAQEICv\/\/zOS0eUC+FgMBAJUBAACRAwNJCyrg3LiPOkzp25J1tFPL9Xy02QHRBJvQzPxg67QKYwAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1592552826036,"flow_last_seen":1592552826051,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0411{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0wIMAAHcGtO0ICAQEwKgBnwNVu7B94BEXrSwem4AQAPDLiQAAAQEICrR5QM3\/\/8zk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2319{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1592552826036,"flow_last_seen":1592552826080,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2326{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1121{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":3,"flow_packet_id":7,"flow_first_seen":1592552826036,"flow_last_seen":1592552826081,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}}
+0738{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":305,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjwIoAAHcGs\/cICAQEwKgBnwNVu7B94BwrrSwem4AYAPCFQAAAAQEICrR5QN3\/\/8zkFbaAdPgn9Xj8uyFqLPU+JTr6qBW1nG\/d2+KaEzIAXr6bjwYGXTiSp9ZvYPJb0OMzDZ2LBvK5xtDjG9GZOwNAks+89\/1CY78nKowg8GyRuecrOeqGDGQvNOKgdru0Frfgcj0D+HgdCjduRsmDboc4wkUAUeA+P3UBRQrsAr0gqIBmX3YfhA4NCQ4oZ7qnMb90HCJIr9jquCRjaAZTFW514qhB7sAyEoBR2cESB\/AXpCIgC947j6aaut4nYMLpv4jcNBeY3vyfH4oyO8xlKFbmUcH4xaQ7j\/RxMzwjYKkQy6bUBpkzrOwWAwMABA4AAAA=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uNAAEAGmY3AqAGfCAgEBLuwA1WtLB6bfeAWoYAQAWLFdQAAAQEICv\/\/zOy0eUDd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uRAAEAGmYzAqAGfCAgEBLuwA1WtLB6bfeAcK4AQAW2\/4AAAAQEICv\/\/zOy0eUDd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA00uVAAEAGmYvAqAGfCAgEBLuwA1WtLB6bfeAdGoAQAW2+8QAAAQEICv\/\/zOy0eUDd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":159,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACR0uZAAEAGmS3AqAGfCAgEBLuwA1WtLB6bfeAdGoAYAW3zyQAAAQEICv\/\/zO+0eUDdFgMDACUQAAAhIFnfRGROSEcuZEqTogskzo6vAaCrvjhKwzw4GYUFaUR2FAMDAAEBFgMDACgAAAAAAAAAALyUqjC41+IdP9iflwsKIsFu1ccuts39lMpC63Dha1SY","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0815{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":358,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYwJoAAHcGs7IICAQEwKgBnwNVu7B94B0arSwe+IAYAPAmkAAAAQEICrR5QPr\/\/8zvFgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7stzGYyX+ErxweKZvMWA+DHe7GLRnLRUybuHfiV5knTQIjhK\/GK5IIqvLNAmTKNvSo0hv8h0ulRB0aqm8FwgEpkVHHcM6UG5TzNCQ9KdT\/k7UNWuK7swRz9Yvi+k8q96rcEJr\/LXENmBb2UY8tY9l2xJKbBYA9tKwIPIBAerEXFDAPYWZdKDd5Q1S\/gPO223uC0X1er\/jYr9tA39W1m4B\/\/vKp4wt45p5c\/xW9Tg39T7eLvvvPWnCGQRfWtPx5seY9+CMB7cDPpL3T3JV2Fpgho3ydhQDAwABARYDAwAoAAAAAAAAAAD2JH2Q10f36N6vGuWc\/hRIObvPakpcECw6NEiyoMaKGQ==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":225,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADT0udAAEAGmOrAqAGfCAgEBLuwA1WtLB74feAePoAYAXjEgAAAAQEICv\/\/zPi0eUD6FwMDAJoAAAAAAAAAAZU7gg7NoNkCljO87amzN8ZbwElHFFpBRBaS4YZEbG6wHlJJJy4r8Ue3TaR5758jmsQsX31xCOSQ2ljUNCXsQBacf6J3EKnJgTy2WHiwgALMUvuZHgC8vLdpcuMquLezmJNo4BIdDxxNZ+icbjMKG6rBDyR+mI+\/QZALJ7f0bEnGVtYC\/wPeVtPMH75SpiKmQHJv","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0wLYAAHcGtLoICAQEwKgBnwNVu7B94B4+rSwfl4AQAPS89wAAAQEICrR5QST\/\/8z4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0hqoAAHcG6sIICAgIwKgBnwNV2jAOPHBKaWPSFIARAUTy8AAAAQEIChWqclH\/\/5Cw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552826,"pkt_len":54,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAAoAABAAEAGaHnAqAGfCAgICNowA1VpY9IUAAAAAFAEAADEiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1592552827426,"flow_last_seen":1592552827426,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","l4_proto":"icmp"}
+0453{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552827,"pkt_len":98,"pkt":"EBMx8Tl2ag\/ahpuQCABFAABUl9BAAEAB0IHAqAGfCAgICAgA4JUAAgABem3sXgAAAADqxwcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1592552827426,"flow_last_seen":1592552827426,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","l4_proto":"icmp","ndpi": {"proto":"ICMP.Google","category":"Network"}}
+0453{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552827,"pkt_len":98,"pkt":"ag\/ahpuQEBMx8Tl2CABFoABUAAAAAHEBdrIICAgIwKgBnwAA6JUAAgABem3sXgAAAADqxwcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552828,"pkt_len":98,"pkt":"EBMx8Tl2ag\/ahpuQCABFAABUl\/5AAEAB0FPAqAGfCAgICAgAgPEAAwABe23sXgAAAABJawcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552828,"pkt_len":98,"pkt":"ag\/ahpuQEBMx8Tl2CABFoABUAAAAAHEBdrIICAgIwKgBnwAAiPEAAwABe23sXgAAAABJawcAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1592552871852,"flow_last_seen":1592552871852,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.4.4","dst_ip":"192.168.1.159","src_port":853,"dst_port":47968,"l4_proto":"tcp"}
+0413{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552871,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0V5sAAHYGHtYICAQEwKgBnwNVu2A7uJADhSLfzIARAX\/+2gAAAQEICuSDFST\/\/78G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552871,"pkt_len":54,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAAoAABAAEAGbH3AqAGfCAgEBLtgA1WFIt\/MAAAAAFAEAAC96AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1592552878549,"flow_last_seen":1592552878549,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp"}
+0425{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":74,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8PO5AAEAGL3vAqAGfCAgEBLviA1WhETzJAAAAAKAC\/\/\/ccgAAAgQFtAQCCAoAAAAnAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":74,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8nAYAAHYG2mIICAQEwKgBnwNVu+J3bBxFoRE8yqAS6yB6VAAAAgQFZAQCCAo7E6h3AAAAJwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0PO9AAEAGL4LAqAGfCAgEBLviA1WhETzKd2wcRoAQAVeSlgAAAQEICgAAACw7E6h3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1114{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1592552878549,"flow_last_seen":1592552878564,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"b734f75d22aaff9866fbd5d27eef9106","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0410{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nAgAAHYG2mgICAQEwKgBnwNVu+J3bBxGoRE+z4AQAPCQ6QAAAQEICjsTqIYAAAAs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":213,"pkt":"ag\/ahpuQEBMx8Tl2CABFAADHnAkAAHYG2dQICAQEwKgBnwNVu+J3bBxGoRE+z4AYAPBK3wAAAQEICjsTqIYAAAAsFgMDAFsCAABXAwNe7G2uCykxvbVdBcxAJcwMizMEDI80T9lET1dOR1JEASA3JDMO7OphzpU36YzIUm3zGK0YYOmlQM62LkpDm0rDGsAvAAAPABcAAP8BAAEAAAsAAgEAFAMDAAEBFgMDACgAAAAAAAAAANwZZ3mHbB4\/MCX8h+8kQXM4R1XQtwh2o3bU+qtBI5kE","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1592552878549,"flow_last_seen":1592552878577,"flow_tot_l4_data_len":872,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"b734f75d22aaff9866fbd5d27eef9106","ja3s":"1249fb68f48c0444718e4d3b48b27188","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0410{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0PPFAAEAGL4DAqAGfCAgEBLviA1WhET7Pd2wc2YAQAVeP6wAAAQEICgAAADA7E6iG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":117,"pkt":"EBMx8Tl2ag\/ahpuQCABFAABnPPJAAEAGL0zAqAGfCAgEBLviA1WhET7Pd2wc2YAYAVf7KAAAAQEICgAAADA7E6iGFAMDAAEBFgMDACgAAAAAAAAAANm4HIl2OyTAmc5U14SCMz8r4I+dvSSVjJRSzcy89BtT","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nBIAAHYG2l4ICAQEwKgBnwNVu+J3bBzZoRE\/AoAQAPCQCwAAAQEICjsTqJoAAAAw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":225,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADTPPNAAEAGLt\/AqAGfCAgEBLviA1WhET8Cd2wc2YAYAVckxgAAAQEICgAAADU7E6iaFwMDAJoAAAAAAAAAARFIQabocIgzTFl5FrgaH4UQ6yv8xHxzzwgoRyUK8YU3tm85HeiVNR1\/rSStZV+l\/oMFV1\/vYBOnDvGpptcQB7TAcrGP\/nWBwcXNI5h8Zx92OlkQ\/U2OLAx+B+XV00Vc5MQqiU8VwOPkRKznKnpdyJ+SRWNLk8yol6j\/pb4xJL2fx3Mhlbo\/F2dQCFZT1cMPTQuq","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nBgAAHYG2lgICAQEwKgBnwNVu+J3bBzZoRE\/oYAQAPSPVQAAAQEICjsTqKgAAAA1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1089{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":565,"pkt":"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","pkt_caplen":565,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552878,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0PPRAAEAGL33AqAGfCAgEBLviA1WhET+hd2wezIAQAVuM6wAAAQEICgAAAEQ7E6ip","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552879,"pkt_len":225,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADTPPVAAEAGLt3AqAGfCAgEBLviA1WhET+hd2wezIAYAVtM5AAAAQEICgAAAOQ7E6ipFwMDAJoAAAAAAAAAAmn5\/+4ILFRPfNGt4q8o8vcvtz73sPbtaxwnqGBasfUF\/qq7OLbp\/mKbYQ8PaarzPUpCLTPdQ+sBOAQ4CDaFkM3x8fofwCDGcygT7A1YwRVGQpwHkTJE8vro477jrqvHjodqaSM8V0mWsI3PqlboE3fzxj5T2inAx2gMxkBr2uVksMjgv4tqjDazn6CMgwVEWSW+","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592552879,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0nXkAAHYG2PcICAQEwKgBnwNVu+J3bB7MoRFAQIAQAPiJRQAAAQEICjsTq3MAAADk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1592552824409,"flow_last_seen":1592552826208,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":30,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.8.8","dst_ip":"192.168.1.159","src_port":853,"dst_port":55856,"l4_proto":"tcp","ndpi": {"proto":"DoH_DoT.Google","category":"Web"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1592552824409,"flow_last_seen":1592552826208,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":30,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.8.8","dst_ip":"192.168.1.159","src_port":853,"dst_port":55856,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":2,"flow_packet_id":21,"flow_first_seen":1592552825913,"flow_last_seen":1592552826054,"flow_tot_l4_data_len":4531,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","src_port":56024,"dst_port":853,"l4_proto":"tcp"}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":1,"flow_packet_id":21,"flow_first_seen":1592552825913,"flow_last_seen":1592552826030,"flow_tot_l4_data_len":4531,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48044,"dst_port":853,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1592552871852,"flow_last_seen":1592552871941,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.4.4","dst_ip":"192.168.1.159","src_port":853,"dst_port":47968,"l4_proto":"tcp","ndpi": {"proto":"DoH_DoT.Google","category":"Web"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1592552871852,"flow_last_seen":1592552871941,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"8.8.4.4","dst_ip":"192.168.1.159","src_port":853,"dst_port":47968,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":3,"flow_packet_id":104,"flow_first_seen":1592552826036,"flow_last_seen":1592552867048,"flow_tot_l4_data_len":24559,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":236,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48048,"dst_port":853,"l4_proto":"tcp"}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1592553007037,"flow_last_seen":1592553007037,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp"}
+0425{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":74,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA8FgpAAEAGVl\/AqAGfCAgEBLxSA1VGZWurAAAAAKAC\/\/+KUgAAAgQFtAQCCAoAAH2hAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":74,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA8ScwAAHYGLJ0ICAQEwKgBnwNVvFKvdpW\/RmVrrKAS6yB4FwAAAgQFZAQCCAp\/c2KvAAB9oQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0FgtAAEAGVmbAqAGfCAgEBLxSA1VGZWusr3aVwIAQAVeQUgAAAQEICgAAfa1\/c2Kv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":220,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADOFgxAAEAGVcvAqAGfCAgEBLxSA1VGZWusr3aVwIAYAVd\/mgAAAQEICgAAfa9\/c2KvFgMBAJUBAACRAwNWAMlRN\/y9+y5bn87kl8S7SwnuvLXD9du+\/Dt1fS20NAAAHsArwC\/ALMAwzKnMqMAJwBPACsAUAJwAnQAvADUACgEAAEoAAAAPAA0AAApkbnMuZ29vZ2xlABcAAP8BAAEAAAoACAAGAB0AFwAYAAsAAgEAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1592553007037,"flow_last_seen":1592553007088,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":32,"flow_max_l4_data_len":186,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0410{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0SeYAAHYGLIsICAQEwKgBnwNVvFKvdpXARmVsRoAQAPCP6wAAAQEICn9zYuEAAH2v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1592553007037,"flow_last_seen":1592553007118,"flow_tot_l4_data_len":1780,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2324{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1122{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":7,"flow_packet_id":7,"flow_first_seen":1592553007037,"flow_last_seen":1592553007118,"flow_tot_l4_data_len":3230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dns.google","server_names":"dns.google,*.dns.google.com,8888.google,dns.google.com,dns64.dns.google","ja3":"2c776785ee603cc85d37df996bb90cc8","ja3s":"b44baa8a20901c5663b3a9664ba8a767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Trust Services, CN=GTS CA 1O1","issuerDN":"C=US, ST=California, L=Mountain View, O=Google LLC, CN=dns.google","fingerprint":"5B:59:09:FC:7D:50:E6:F7:D1:08:8E:57:42:A2:D8:AE:1F:03:FF:EC"}}
+0739{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":305,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAEjSfIAAHYGK5AICAQEwKgBnwNVvFKvdqDURmVsRoAYAPBSpwAAAQEICn9zYvIAAH2vpuPGZP4JgUyAM7wCOdE4Fc16QU9KxcfuTIhOOPUog3Y3FGW+vpnz9jN1jLRfVrzUArxGxWLXFvRtjHjwsl6SCEkYsNE5RY4uTRDpU9uWBYz91xhpepEE0Quki2+5+Ao69X+zNarzIcksJTy7VNGA9mPObcF2ja\/A0h9v3eN06YBN5Gx+VkaA9eKqoP2Ok\/RNdhaTA3wp4woECZFYPCqog7eqqe\/\/eYo2V4kaFBuDro79ZWnsfyPD\/hfrPae1LgaUONOZb\/c2utzv2C7AVX5Zi9BG0\/aEPCZmoDR5UwzEKpJQ2FHTtCsWAwMABA4AAAA=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0Fg1AAEAGVmTAqAGfCAgEBLxSA1VGZWxGr3abSoAQAWKJ1gAAAQEICgAAfbd\/c2Ly","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0Fg5AAEAGVmPAqAGfCAgEBLxSA1VGZWxGr3ag1IAQAW2EQQAAAQEICgAAfbd\/c2Ly","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":66,"pkt":"EBMx8Tl2ag\/ahpuQCABFAAA0Fg9AAEAGVmLAqAGfCAgEBLxSA1VGZWxGr3ahw4AQAW2DUgAAAQEICgAAfbd\/c2Ly","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":159,"pkt":"EBMx8Tl2ag\/ahpuQCABFAACRFhBAAEAGVgTAqAGfCAgEBLxSA1VGZWxGr3ahw4AYAW2vzgAAAQEICgAAfbt\/c2LyFgMDACUQAAAhIJkSTnDpQIa7DpGzu\/G1gW3LnyV4nS87HvRg7yx7Wl4YFAMDAAEBFgMDACgAAAAAAAAAAFEEa\/B2Ai\/upGK9I+N5Kptl6u7fR82l17fMpb3KE015","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0815{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":358,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAFYSgMAAHYGK0oICAQEwKgBnwNVvFKvdqHDRmVso4AYAPBy2wAAAQEICn9zYxIAAH27FgMDAOwEAADoAAGJwADiARwM3mDSTy2KnFOJMzn7skYIQXN0\/2tY\/9Yy+gWv+Ue7CvPIHCD5aJ5WQlCE11QpsnW60kjdl4gNz\/wsv9vCMdmQOOU3d\/dW+j4lHIFbnJmU3tTSxA9x+upSkAMJac8C8bp+qBGFGUs2U4s0Ko+QjjDu9HQyL1\/X\/Gd7VX4r+Vhti3LccpMwsHpiZ0o4JwPuthPI0LbcWoWxWnr4g0fil3IGw6UPbuA\/anPZyjKokO1FvKa0\/kNP2xizN8lpRdvl72lnswNXvfpKBnlVuksDYmrDKAks1HH63C83hGox2x+qiRQDAwABARYDAwAoAAAAAAAAAAA1U+0e0zdH7jZ6YkApz\/r+7sqkbi97MpL\/Yw+KPaFP5w==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":225,"pkt":"EBMx8Tl2ag\/ahpuQCABFAADTFhFAAEAGVcHAqAGfCAgEBLxSA1VGZWyjr3ai54AYAXiZ1AAAAQEICgAAfb9\/c2MSFwMDAJoAAAAAAAAAASvU9Egx87RbkmJ13pZK7LHbvoZqJEW+LMQCXUVUsYXXYOT0A07A9oBhbd3xAqGLJVjanY8YjA+PchbEeksYAxBUebXNWt3CLGgqUZ1zZL2W9RktPfe\/xpJ61Di5ER1tDbATkasN2MFVlbRIP0cM9hu\/oS8YMUya1uNp3pnEVI9bPChlf\/XPzz7so24uZvPXyyE2","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","pkt_oversize":false,"pkt_ts":1592553007,"pkt_len":66,"pkt":"ag\/ahpuQEBMx8Tl2CABFAAA0ShMAAHYGLF4ICAQEwKgBnwNVvFKvdqLnRmVtQoAQAPSBbwAAAQEICn9zYyYAAH2\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":6,"flow_packet_id":133,"flow_first_seen":1592552878549,"flow_last_seen":1592552996502,"flow_tot_l4_data_len":24100,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48098,"dst_port":853,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":7,"flow_packet_id":241,"flow_first_seen":1592553007037,"flow_last_seen":1592553079303,"flow_tot_l4_data_len":56597,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.4.4","src_port":48210,"dst_port":853,"l4_proto":"tcp"}
+0441{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1592552827426,"flow_last_seen":1592552828415,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.159","dst_ip":"8.8.8.8","l4_proto":"icmp"}
+0157{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/googledns_android10.pcap"}
diff --git a/tests/result/nDPId_gquic.pcap.txt b/tests/result/nDPId_gquic.pcap.txt
new file mode 100644
index 000000000..3d4f0d57b
--- /dev/null
+++ b/tests/result/nDPId_gquic.pcap.txt
@@ -0,0 +1,6 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/gquic.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/gquic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591876186378,"flow_last_seen":1591876186378,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.44.5.25","dst_ip":"216.58.213.163","src_port":61097,"dst_port":443,"l4_proto":"udp"}
+2197{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/gquic.pcap","pkt_oversize":false,"pkt_ts":1591876186,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/gquic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591876186378,"flow_last_seen":1591876186378,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.44.5.25","dst_ip":"216.58.213.163","src_port":61097,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.gstatic.com"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/gquic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591876186378,"flow_last_seen":1591876186378,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.44.5.25","dst_ip":"216.58.213.163","src_port":61097,"dst_port":443,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/gquic.pcap"}
diff --git a/tests/result/nDPId_h323-overflow.pcap.txt b/tests/result/nDPId_h323-overflow.pcap.txt
new file mode 100644
index 000000000..06353362d
--- /dev/null
+++ b/tests/result/nDPId_h323-overflow.pcap.txt
@@ -0,0 +1,6 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/h323-overflow.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/h323-overflow.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":31337,"dst_port":80,"l4_proto":"tcp"}
+0393{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/h323-overflow.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":58,"pkt":"IiIiIiIiIiIiIiIjCABFAAAsRr1AAIAG+9DAqAEBwKgBAnppAFA5fV1j4FJ\/s1AYQD3UwAAAAwAABA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/h323-overflow.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":31337,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/h323-overflow.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.2","src_port":31337,"dst_port":80,"l4_proto":"tcp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/h323-overflow.pcap"}
diff --git a/tests/result/nDPId_hangout.pcap.txt b/tests/result/nDPId_hangout.pcap.txt
new file mode 100644
index 000000000..0e9876ae1
--- /dev/null
+++ b/tests/result/nDPId_hangout.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1468516947751,"flow_last_seen":1468516947751,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"74.125.134.127","dst_ip":"10.89.61.13","src_port":19305,"dst_port":56406,"l4_proto":"udp"}
+0506{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516947,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEs2cAACwRwp9KfYZ\/Clk9DUtp3FYAcAThAQEAVCESpEJmaHpqc2RpS0drd1gABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFKAHosL2sVKq2EKifFUwLylv3i3sgCgABLYwivQ=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1468516947751,"flow_last_seen":1468516947751,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"74.125.134.127","dst_ip":"10.89.61.13","src_port":19305,"dst_port":56406,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.GoogleHangoutDuo","category":"VoIP"}}
+0507{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516948,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEtXUAACwRwJFKfYZ\/Clk9DUtp3FYAcMuPAQEAVCESpEJ2bG8rRTlqWDZMSTAABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFD0l9HkkR5C8mDGwDSrC9i\/8E7pdgCgABPT5D+E=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516949,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEuNIAACwRvTRKfYZ\/Clk9DUtp3FYAcJ51AQEAVCESpEJFNlpieTl0eEswU3gABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFGvaO+U3jhYTDCbM5zzzk6bw5Z+5gCgABA724k8=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516950,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEuZ4AACwRvGhKfYZ\/Clk9DUtp3FYAcMbxAQEAVCESpEI0V3JrM294eUpQYkUABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFNC9mufBZa6t2mlytRWG+GVqRPeFgCgABFD8O5k=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516951,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEvAkAACwRuf1KfYZ\/Clk9DUtp3FYAcMoTAQEAVCESpEIzNzUzNHA3SFB5WXkABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFN19ozbT6UHvV6s9ZmQQ8B8JGd90gCgABKablDQ=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516952,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEvhwAACwRt+pKfYZ\/Clk9DUtp3FYAcOxmAQEAVCESpEJZVDJ0VGJEK204SGUABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFJWVXhm5Uvoi3JpUNIESeZ6JoLq1gCgABDhZ1ac=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516953,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEwFYAACwRtbBKfYZ\/Clk9DUtp3FYAcFneAQEAVCESpEJMZDV2OWROemh2NmIABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFPNQ0Ul3I9EdSpZrCChGZ1YZ52uCgCgABMUCTGM=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516954,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEwncAACwRs49KfYZ\/Clk9DUtp3FYAcGR2AQEAVCESpEJ1U2Q0Tlo1R2xkeTIABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFJGzv4QOCWaQcP4krIUJzcYUo0BngCgABMtKdX4=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516955,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACExN4AACwRsShKfYZ\/Clk9DUtp3FYAcGXOAQEAVCESpEJ0bUVuSE9IalFmSEUABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFP+et246X\/p6Bsq18Xy2JnBo8T+MgCgABKawBk8=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516956,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEyAIAACwRrgRKfYZ\/Clk9DUtp3FYAcDqgAQEAVCESpEJkVWpoUkNpbGdZcFQABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFOrmWQXYa41B3XVvruXjzfESE5x+gCgABG8RhmQ=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516957,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEyssAACwRqztKfYZ\/Clk9DUtp3FYAcMLeAQEAVCESpEJPSi9mVlVoL3BCa0IABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFL5ZUAwcmpyOazepX3yamVtAuI7wgCgABAIiS9c=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516958,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEzakAACwRqF1KfYZ\/Clk9DUtp3FYAcGFZAQEAVCESpEJUT1pjS3pyUUxqVkMABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFCsVuAMLeQM4yH4LZ0ruyypJGZ5vgCgABAK3tMg=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516959,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACEz3MAACwRppNKfYZ\/Clk9DUtp3FYAcACSAQEAVCESpEIwbERtNENYWTlOSXgABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFLskEr4nSL5TTWv7Gw6qDRufq\/+8gCgABLRf+vQ=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516960,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACE0JgAACwRpW5KfYZ\/Clk9DUtp3FYAcHRZAQEAVCESpEJQTHJwc3FEeStHK2YABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFDEX\/dQ5fy+SxiE0bgZSagBAyTwBgCgABD1H6LY=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","pkt_oversize":false,"pkt_ts":1468516961,"pkt_len":146,"pkt":"CJ4BbNkmACFeRhcmCABFAACE0uIAACwRoyRKfYZ\/Clk9DUtp3FYAcEuMAQEAVCESpEJ3RGRuSlI1b3p6TVQABgAhWWRWSldCNmwzN20xYzhENDpCbU1TU1l3ZHhBT1czSFlYAAAAACAACAABfY2fUviQAAgAFJx22As21z4ewdrKbbQZAFr9rafBgCgABAFQq5M=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1468516947751,"flow_last_seen":1468516965768,"flow_tot_l4_data_len":2128,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"74.125.134.127","dst_ip":"10.89.61.13","src_port":19305,"dst_port":56406,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/hangout.pcap"}
diff --git a/tests/result/nDPId_http-crash-content-disposition.pcap.txt b/tests/result/nDPId_http-crash-content-disposition.pcap.txt
new file mode 100644
index 000000000..f9c4ab1ff
--- /dev/null
+++ b/tests/result/nDPId_http-crash-content-disposition.pcap.txt
@@ -0,0 +1,20 @@
+0382{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":60,"pkt":"RQAAPNS7QABABvZlwKgAZ66BAArH4wBQe0WpbgAAAACgAjkINI0AAAIEBbQEAggKABR91QAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":60,"pkt":"RQAAPAAAQAAtBt4hroEACsCoAGcAUMfjkVcfantFqW+gEjiQ\/PYAAAIEBawEAggKK6FboQAUfdUBAwMH","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":52,"pkt":"RQAANNS8QABABvZswKgAZ66BAArH4wBQe0Wpb5FXH2uAEADlY08AAAEBCAoAFH3sK6FboQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0917{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":480,"pkt":"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","pkt_caplen":480,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":99,"pkt":"RQAAY9S+QABABvY7wKgAZ66BAArH4wBQe0WrG5FXH2uAGADlbXAAAAEBCAoAFH3uK6FboQ0KLS01djdMaGJuYTJyZXdIcmowZV9GOHdyMFdBVlRwWTkzRVQ5aVFIRHktLQ0K","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":52,"pkt":"RQAANEN0QAAtBpq1roEACsCoAGcAUMfjkVcfa3tFqxuAEAB6YXsAAAEBCAoroVwyABR97g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":52,"pkt":"RQAANEN1QAAtBpq0roEACsCoAGcAUMfjkVcfa3tFq0qAEAB6YUsAAAEBCAoroVwzABR97g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+2269{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":1492,"pkt":"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","pkt_caplen":1492,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+1583{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","pkt_oversize":false,"pkt_ts":1492518365,"pkt_len":981,"pkt":"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","pkt_caplen":981,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap","datalink":12}
+0166{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-crash-content-disposition.pcap"}
diff --git a/tests/result/nDPId_http-lines-split.pcap.txt b/tests/result/nDPId_http-lines-split.pcap.txt
new file mode 100644
index 000000000..8db0eb8d2
--- /dev/null
+++ b/tests/result/nDPId_http-lines-split.pcap.txt
@@ -0,0 +1,19 @@
+0368{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1593713340401,"flow_last_seen":1593713340401,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.20","src_port":39236,"dst_port":31337,"l4_proto":"tcp"}
+0404{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":66,"pkt":"ABjzZLGIYDjgxTWgCABFAAA0t6tAAHkGyLLAqAABwKgAFJlEemkrolmxAAAAAIAC+vBZugAAAgQFtAEBBAIBAwMG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":66,"pkt":"YDjgxTWgABjzZLGICABFAAA0AABAALIGR17AqAAUwKgAAXppmUT8ca\/AK6JZsoAS+vCBjAAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":60,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot6xAAHkGyL3AqAABwKgAFJlEemkrolmy\/HGvwVAQA+zlTAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":92,"pkt":"ABjzZLGIYDjgxTWgCABFAABOt61AAHkGyJbAqAABwKgAFJlEemkrolmy\/HGvwVAYA+z\/KAAAR0VUIC8gSFRUUC8xLjENCkhvc3Q6IHRvbmkubGFuOjMxMzM3DQo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1593713340401,"flow_last_seen":1593713340402,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.20","src_port":39236,"dst_port":31337,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"HTTP","category":"Web"},"http": {"hostname":"toni.lan","url":"toni.lan:31337\/","code":0,"content_type":"","user_agent":""}}
+0389{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":54,"pkt":"YDjgxTWgABjzZLGICABFAAAoPVdAALIGChPAqAAUwKgAAXppmUT8ca\/BK6JZ2FAQAfaBgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":83,"pkt":"ABjzZLGIYDjgxTWgCABFAABFt65AAHkGyJ7AqAABwKgAFJlEemkrolnY\/HGvwVAYA+zalAAAVXNlci1BZ2VudDogdWNsaWVudC1mZXRjaA0KDQo=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":54,"pkt":"YDjgxTWgABjzZLGICABFAAAoPVhAALIGChLAqAAUwKgAAXppmUT8ca\/BK6JZ9VAQAfaBgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":71,"pkt":"YDjgxTWgABjzZLGICABFAAA5PVlAALIGCgDAqAAUwKgAAXppmUT8ca\/BK6JZ9VAYAfaBkQAASFRUUC8xLjAgMjAwIE9LDQo=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":209,"pkt":"YDjgxTWgABjzZLGICABFAADDPVtAALIGCXTAqAAUwKgAAXppmUT8cbWGK6JZ9VAZAfaCGwAAIGhyZWY9IlBLR0JVSUxEIj5QS0dCVUlMRDwvYT4KPGxpPjxhIGhyZWY9IlJFQURNRSI+UkVBRE1FPC9hPgo8bGk+PGEgaHJlZj0iUkVBRE1FLm1kIj5SRUFETUUubWQ8L2E+CjxsaT48YSBocmVmPSJzcmMvIj5zcmMvPC9hPgo8L3VsPgo8aHI+CjwvYm9keT4KPC9odG1sPgo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":60,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot69AAHkGyLrAqAABwKgAFJlEemkroln1\/HGv0lAQA+zk+AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":60,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot7BAAHkGyLnAqAABwKgAFJlEemkroln1\/HG2IlAQA+reqgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":60,"pkt":"ABjzZLGIYDjgxTWgCABFAAAot7FAAHkGyLjAqAABwKgAFJlEemkroln1\/HG2IlARA+reqQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","pkt_oversize":false,"pkt_ts":1593713340,"pkt_len":54,"pkt":"YDjgxTWgABjzZLGICABFAAAoAABAALIGR2rAqAAUwKgAAXppmUT8cbYiK6JZ9lAQAfbgnQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap","flow_id":0,"flow_packet_id":14,"flow_first_seen":1593713340401,"flow_last_seen":1593713340404,"flow_tot_l4_data_len":2003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.20","src_port":39236,"dst_port":31337,"l4_proto":"tcp"}
+0153{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http-lines-split.pcap"}
diff --git a/tests/result/nDPId_http_ipv6.pcap.txt b/tests/result/nDPId_http_ipv6.pcap.txt
new file mode 100644
index 000000000..a65fba51c
--- /dev/null
+++ b/tests/result/nDPId_http_ipv6.pcap.txt
@@ -0,0 +1,184 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1448269123954,"flow_last_seen":1448269123954,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:804::200e","src_port":40526,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269123,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAYIBAAAAAAAACAOnk4Bu0sl6VcU0QFTgBAA8iVzAAABAQgKEg1o4A\/E+0k=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269123,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBABggEAAAAAAAAIA4qAA1AAAEAA3qswP\/+pw1MAbueThTRAVNLJelYgBABCVvaAAABAQgKD8WrNBINPNs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1448269127395,"flow_last_seen":1448269127395,"flow_tot_l4_data_len":214,"flow_min_l4_data_len":214,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":214,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":41776,"dst_port":443,"l4_proto":"tcp"}
+0676{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":268,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAANYGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3EcnAKcmsggBgBYRYsAAABAQgKEg1sPOPdU5wXAwMAsUohbF6hqm2iPbr5acUercfvDKKXo6eRxQREALqHMULPkKcrij9I+s937a+Ptj\/48lLHQ1Wb3SgwI5IkBSOhrv6IVrq\/yOhvf7XOjabBqvbdcaHqf1DGDHgPPOpYr+dJO5wcSH25xkyZHXLU0QNqpczDg7dKCMPOVcOltspkl5ZzoyNyh0jvlmeYCBWg6kXBip25FBniFP0s4NZksUmy3aWhoSbUDQ+LvhRDb4xtwZyJTw==","pkt_caplen":268,"pkt_type":34525,"pkt_ipoffset":14}
+0483{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":124,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAEYGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3EcyYKcmsggBgBYRWcAAABAQgKEg1sPOPdU5wXAwMAISEEhc9+XaFrGjMSta2tz\/npJ9wouC3HutuqGdJZFlD+8g==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1448269127400,"flow_last_seen":1448269127400,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":45931,"dst_port":443,"l4_proto":"udp"}
+2205{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":1412,"pkt":"UMWNrEEBeKzApw1Mht1gAAAABU4RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwVOGq8NSb7i0\/DtzNZRMDI1AdhpfiGrZQ0z8Xo88wCgAQAEQ0hMTxcAAABQQUQAlQEAAFNOSQCiAQAAU1RLANwBAABWRVIA4AEAAENDUwDoAQAATk9OQwgCAABNU1BDDAIAAEFFQUQQAgAAVUFJRDACAABTQ0lEQAIAAFRDSUREAgAAUERNREgCAABTUkJGTAIAAElDU0xQAgAAUFVCU3ACAABTQ0xTdAIAAEtFWFN4AgAAQ09QVHgCAABDQ1JUkAIAAElSVFSUAgAAQ0VUVjgDAABDRkNXPAMAAFNGQ1dAAwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0td3d3Lmdvb2dsZS5pdP6VATCysYcS+6UyHFs91qYSgNdeDzmk0IEyIe5t2+bJKAI2qamMt0i7KMYplR0K0jnCGwmAm\/d3HOJRMDI1eybp5+Rccf9WUtVHu\/cGtxBbc83x\/ixhHuZYGb85GDRSl0WTDzqXHGQAAABDQzEyQ2hyb21lLzQ2LjAuMjQ5MC44MCBMaW51eCB4ODZfNjRJY0N+fBRzPpi9ZOX2cffRAAAAAFg1MDkAABAAHgAAAKnIKfkyK+SzUnB6164ARpx8JYjcWyR0opR8VfpSZa5LAQAAAEMyNTWqEkFTJwbowuJjGoJ9cYVfQAt7kKmueesKxAMAMPg3G85FTSE++LOaAtQpI1KVeq729JfhjhoCsaupNHH2PFh7nIyQFBUHu\/yG69qYF+ZOXnLeZQlagMSAtKsuormBERnE1N5BArSjLGqyjEsI7xMsjf+GWiD9zqRxEMc6cBgFvzaEvMvxi2SGPZg7npVciNOVP9ZU7k0lklFQEmkIVXhAz857PhdAM9F8uaoJzSnjSvvppgNKNbAOmmtmPDeC+pIAAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1412,"pkt_type":34525,"pkt_ipoffset":14}
+0592{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1448269127400,"flow_last_seen":1448269127400,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":45931,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.google.it"}}
+0429{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApyayANxHMmgBABMJ3AAAABAQgK493E7RINbDw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApyayANxHNMgBABMJ2aAAABAQgK493E7RINbDw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0484{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":124,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAEYGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApyayANxHNMgBgBMJRuAAABAQgK493E7RINbDwXAwMAIamaKXQXAEJ+l6GRGDPCWYkk8\/GIYJF1yZM9UcV466R1KQ==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcmtGgBABYRV2AAABAQgKEg1sQuPdxO0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2235{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":1412,"pkt":"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","pkt_caplen":1412,"pkt_type":34525,"pkt_ipoffset":14}
+0447{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":99,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAC0RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAtFY4MSb7i0\/DtzNYC4PYSufRYk3sdRNPxvPTHCMs5+9cyKuKyC\/5g","pkt_caplen":99,"pkt_type":34525,"pkt_ipoffset":14}
+0659{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":255,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAMkGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApya0YNxHNMgBgBMED7AAABAQgK493FEBINbEIXAwMApLTQBW4rB3BTVM58xVIHpgNMU0GxZCneWqMf66wOv3\/BusN7Gm139O1Z\/tCbkzgMpgcO\/GlcWnuZDZLFXlVNloedNSt2vsOVLLaGhRdzaXCiXulvoOYZc5vXW4tGotuSwjw4rWzFi3pVwDWnYoPLfXdNjL96Ho0QslNywnjcyUibE6sk71RI4nUnqskBwJ8rhA5rRLsRTGWv2WenNA0cGof9nM68","pkt_caplen":255,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcmvvgBABdBV2AAABAQgKEg1sSuPdxRA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":592,"pkt":"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","pkt_caplen":592,"pkt_type":34525,"pkt_ipoffset":14}
+0487{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":124,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAEYGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApybekNxHNMgBgBMHYTAAABAQgK493FEBINbEIXAwMAIUeAs\/Z+bqg9GbTL\/4Fr9OR2Xj18DWrqgtMhcVpj3uyepQ==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcm3pgBABhxV2AAABAQgKEg1sSuPdxRA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcm4PgBABhxV2AAABAQgKEg1sSuPdxRA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":124,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAEYGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXozABuw3Ec0wKcm4PgBgBhxWcAAABAQgKEg1sSuPdxRAXAwMAIbcwx7pNRpc92YqQAFv\/SuGAIZNVhQbJIxbEuuigER8Wpg==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbujMApybg8NxHNygBABMJoXAAABAQgK493FTRINbEo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1961{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":1216,"pkt":"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","pkt_caplen":1216,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAo5EYAAjH5M5nbBTZRo5csvuygUEwHGXuZB1lWad0vvJ9Sbg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+1228{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":674,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAmwROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawJsVPIAA7uvQHrBqFhHz4yCJJ6y5PW\/ffgA4XPTbXpQIXDdmDr6z9F9guONTXwt0tNyuuBqfkD4NZlwBNNZfex0NLcZKK4t232AjUoRmf10tuIxjRQ+drQxCTlGjlRjiE1hPcP2ZU4xZ4LQrHa6D9nyTSrPit3RxLXMLy69oMLvnvw2V602Pxc0YMw8qKl2tIHWmdTYoSEOGA955bZ9HxOQIuvjRqk109M3qeDZg0HduuHrSrGANMs4LTCvqQPPm\/vT3E1F4aB4OWshPmp3U51xD6TfiumPhvb8vkxbV1PnG6jSpNxy67ayQj1URxLZkCbQ07CKS\/ndZrDE1JG\/KUgnh43OCuD8dat5UX\/dtNy7C8ALyL65O1vZ06bs9IQyTrO\/gAgFaydEf8MEs7WYwd6Y++kAngQERWPPesAKCPPmy68sr9jdE\/i+\/2rqwjQGxRzx\/VbIJTd22EKFz75z+TOpGGBQRuwF57ePA\/vlsK1ukxM476aQLIPGcIIEEI16t\/pvmeWu3WAGpw1XY8t89gzRm3DWWGwCV0OLWBI7A3dVclzbtg3jX17h1fAiuXTOXLbhlMyRmFMduA9oUejkWDx0b4tiJy0rVLuSBffuFgiNHTUvuC5O0ZUIMiznSX8aM\/e37iqrTMta1CoftvvPZ8lP5Pas+mW8TAlAodvUtzAPGXLRLhIOLCtqFM2Q0x3Q5dNsoR4OpJaXWH29nW96X05Prs6QUgBqJCxtOrynKgSeHH0DN4W0tMNq67xes5m8EFDmtyda8d8QUKmsvwLrIxxHbH29gSSB7YoVfQ9eCmV0OKQsuaixS4E=","pkt_caplen":674,"pkt_type":34525,"pkt_ipoffset":14}
+0454{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":102,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAADARQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAwFZEMSb7i0\/DtzNYEktTQwBGu8uI\/NDa3nf1fULhgE33qhk6d\/Nqk3uKv","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0655{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":252,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAMYRQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwDGFicMSb7i0\/DtzNYFA2H9F86EvQY3yq4wnWp+DV7Ys66y+Vm0fjURng5sNNLizE7Hgxw0WNl2woWG1QaAptzuLHpS27sc5HPsVrS+hdXsOjjI9CzmQJnrNcRm+Z18tHmtkWkDvYeTY+Lo9mbfZah1DHPOxtFjFgdqmNKVKHQ\/6e93Ct0lieNHs5\/2ctPU1cl5Zx1kAAEoKhVJmySCnSSmxY32Xxjs5FEM8Czed+0BOIO1GAXKZXb6\/7vum44eh+Va","pkt_caplen":252,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAooi0ABDeGFev8UCGQ1qamNBuSNlKzV+\/y5VpA2YmHTra3Jw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0453{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":102,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAADARQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAwFZEMSb7i0\/DtzNYGUIuDi46XnUgClmr6a8ymXOCiaN0Qz5lUseBqK5hP","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+1107{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":581,"pkt":"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","pkt_caplen":581,"pkt_type":34525,"pkt_ipoffset":14}
+0453{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":102,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAADARQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwAwFZEMSb7i0\/DtzNYHRDHMJE6JwbqCwTUm1pgKamJUbxHMwtRxH0S17Bee","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":91,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACUROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAlJwsABu4AWQBJc6S\/ABpFwRqNbmpSh1W8j6OzpFWJyQ==","pkt_caplen":91,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1448269127922,"flow_last_seen":1448269127922,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:803::2008","src_port":58660,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAYIAwAAAAAAACAI5SQBuwROHG\/ILPHEgBACniVsAAABAQgKEg1swGh+tvU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBABggDAAAAAAAAIAgqAA1AAAEAA3qswP\/+pw1MAbvlJMgs8cQEThxwgBAA+ZiqAAABAQgKaH9m+RINFL8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1448269127960,"flow_last_seen":1448269127960,"flow_tot_l4_data_len":206,"flow_min_l4_data_len":206,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":206,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::5f","src_port":55145,"dst_port":443,"l4_proto":"udp"}
+0668{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269127,"pkt_len":260,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAM4RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAsMAgAAAAAAAABf12kBuwDOCoAMj5N114hr41MJBd7sKG9JfODv2KzX0uexKi4OUzkr936AyksmjfKzejWhR1IllABVz6\/Nd8+DDPRvVbNJa4sAljMB\/byd9EnDrnASdvNnincHpyqVPP90d4TSxj+ARZa\/L622T2LNfPxOM6m\/si1ZmPjMCf2wR7DzkfTBciJe2oZugnMhbWbTFVoln8LtSZhpET4oRj3Jk\/IY0Vhm0AHAVNXjHBEt89UVS7Gr6h9OBH5HRJ1TIdTk4GJ40SQl9lgo1l4eCx0=","pkt_caplen":260,"pkt_type":34525,"pkt_ipoffset":14}
+0510{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269128,"pkt_len":143,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAAFkRMyoAFFBACwwCAAAAAAAAAF8qAA1AAAEAA3qswP\/+pw1MAbvXaQBZLuIAB1nnejc74Zg5YssedTReRP0KRIf1hcs3Aafoe+Tuwy6JT\/77UOdg9PcT9s8XDyyGEBG\/Mph8KZAg9aAfxnp6BrSLMfMbzThg3fGY8Pw0dHA=","pkt_caplen":143,"pkt_type":34525,"pkt_ipoffset":14}
+0445{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269128,"pkt_len":99,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAC0RQCoADUAAAQADeqzA\/\/6nDUwqABRQQAsMAgAAAAAAAABf12kBuwAtCd8Mj5N114hr41MKZOnBWgR9A+MJ4bypcpF9U29vj07q+fvNp9EO","pkt_caplen":99,"pkt_type":34525,"pkt_ipoffset":14}
+0665{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269129,"pkt_len":257,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAMsRQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAXs2sBuwDLFiwMSb7i0\/DtzNYIgWvfZMMzgV0eLq0rcF8Wjfdc88El\/OKe3m4b7L9HS+mMBEYrS+doCavo0g9v4cjNuvKk8Lt9jqbVMq4hpZuUInyA\/FDGcB9PdVXM1PG9Twc53K\/NE22oYsP600rWQqAeBHFPUIlrjHB7GsGewzsm\/LoNAyfg92ccCbiDQGEU7VnL8MvE74giVX7LYq16CD0sRU278L4kXMTwks9YhQkTkzvxemT+Ky6GjVXsflRJFFvd1vRUrGaTm7w=","pkt_caplen":257,"pkt_type":34525,"pkt_ipoffset":14}
+0446{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269129,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgROCoAFFBAAQgDAAAAAAAAEBcqAA1AAAEAA3qswP\/+pw1MAbuzawAoTL8AB+q\/vPhS\/ZnAgyOaUqmaLKPlvPx\/8rQ+trou59iqhw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1448269138575,"flow_last_seen":1448269138575,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp"}
+0441{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":94,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbXIAAAAAoAJwgGsaAAACBAWgBAIIChINdycAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1448269138575,"flow_last_seen":1448269138575,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp"}
+0441{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":94,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnU0AAAAAoAJwgGsaAAACBAWgBAIIChINdycAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSbiqmXmyY1W1zoBJvkBOIAAACBAWgBAIICgBerOcSDXcnAQMDCA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbXMqpl5tgBAA4WsSAAABAQgKEg13LQBerOc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOqziew8Z1OoBJvkELPAAACBAWgBAIICgBerOcSDXcnAQMDCA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnU5Dqs4ogBAA4WsSAAABAQgKEg13LQBerOc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0717{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":298,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbXMqpl5tgBgA4WvmAAABAQgKEg13LQBerOcWAwEAzwEAAMsDA3KnuJVYkfUxfYZivfoDxsSlMXT0r7J\/8CEfMp57IxYdAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA==","pkt_caplen":298,"pkt_type":34525,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1448269138575,"flow_last_seen":1448269138600,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0717{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":298,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnU5Dqs4ogBgA4WvmAAABAQgKEg13LQBerOcWAwEAzwEAAMsDA6vh\/5Bm8Zaj64wlmhNi+L0mv17cXjOZyxYSV5DW8g55AAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA==","pkt_caplen":298,"pkt_type":34525,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1448269138575,"flow_last_seen":1448269138600,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0430{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSbiqmXm2Y1W5HgBAAdLB9AAABAQgKAF6s7RINdy0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOqziiw8Z4igBAAdN\/EAAABAQgKAF6s7RINdy0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2353{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":1514,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAABbQGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOqziiw8Z4igBAAdLr0AAABAQgKAF6s7hINdy0VAwMAAgFwFgMDAEECAAA9AwPbHrwc7Zlupy05Lmaoc8pOPmXnptE8luGpRyrXQPj6zQDALwAAFQAAAAD\/AQABAAALAAQDAAECACMAABYDAxDjCwAQ3wAQ3AAFTzCCBUswggQzoAMCAQICEGlwh8ZXzEdaqUNvI9+NN8MwDQYJKoZIhvcNAQELBQAwgZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYDVQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUxMTE1MDAwMDAwWhcNMTgxMTE0MjM1OTU5WjBRMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRYwFAYDVQQDEw1zaG9wLm50b3Aub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR6BIHt+rHaCaBL\/qKK36Y6zgLZa7uQ42uYff0TmO+nrjezjVzokWSc+b7XT8xiQLH5AkqJ9Lf\/\/NeqkB1fm7\/K3k27TQzmGn0gZ\/gjZ0up1RGHlcWqkmBgu1hm4kF0hAptThu\/QQTHz6OE2C2JERem\/TCFrM+LeqAlRcK\/9iYu2odCWrMkYWJu1Zur8eL0LtVyxc3kqCMWwu7at46P1qNP8vTbSQDxFLJTvozfhfIr+zQT412txGL1UCyQye5MRn5Abou0RkIjFXoM+zdLQQC3yVy\/Jd1s9wnLEcoBoeKxiqK5BJxLO\/3yH8uWwyg8YUFbd5+1cgJHdZ69cFgM4ZwIDAQABo4IB3TCCAdkwHwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFJAVUwm3FdB8i+jm6lJjVmDmcoYFMA4GA1UdDwEB\/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTArBgNVHREEJDAigg1zaG9wLm50b3Aub3JnghF3d3cuc2hvcC5udG9wLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEABHga0CoUddKc8gTKl8pscY7onSvxASeGg6n14z8FhR2xLi3sQM93tAHGjfXnqbvor3abNIZbNbF0KzRdqJu4Pf8lRVflEivDChvy3JGmTgemN9zWuDPZ57rHKIP2WX88hJ\/PhjhgpWwDlVARS9gLCvB+ao\/MqFUPnRHIB\/ozv+GFroJaou2ptXCVpGzEcU5eeKmEk7EDV1FIeaLukxlf2pdWAhu92nfkdMVk7CEaYe2jnnRpGgH3FSI7e35KuJ6qcNoKFw3CRdQMfoBimHtdql+6OuUlCrOYGYcfLlT2dHNLRy5B10L6oRI=","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1448269138575,"flow_last_seen":1448269138627,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0429{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDqtO8gBAA+GsSAAABAQgKEg13NABerO4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+4013{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":2754,"pkt":"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","pkt_caplen":2754,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDqt4ogBABIWsSAAABAQgKEg13NABerO4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2354{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1448269138575,"flow_last_seen":1448269138628,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0429{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpmQBgBAA+GsSAAABAQgKEg13NABerO4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2344{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpmmVgBABDmsSAAABAQgKEg13NABerO4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2106{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":1326,"pkt":"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","pkt_caplen":1326,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpm5tgBABJGsSAAABAQgKEg13NABerO4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1329{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":742,"pkt":"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","pkt_caplen":742,"pkt_type":34525,"pkt_ipoffset":14}
+1196{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":5,"flow_packet_id":12,"flow_first_seen":1448269138575,"flow_last_seen":1448269138635,"flow_tot_l4_data_len":5364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}}
+0431{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpnD9gBABO2sSAAABAQgKEg13NgBerPA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1323{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":742,"pkt":"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","pkt_caplen":742,"pkt_type":34525,"pkt_ipoffset":14}
+1196{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1448269138575,"flow_last_seen":1448269138636,"flow_tot_l4_data_len":5300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2700,"flow_avg_l4_data_len":530,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}}
+0431{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDquC4gBABOGsSAAABAQgKEg13NgBerPA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0603{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":212,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkm4Bu5jVbkcqpnD9gBgBO2uQAAABAQgKEg13NgBerPAWAwMARhAAAEJBBNWDt8ZrBvz5dueP\/aomnZb+jhQ+bA7OfrnRoZ5xj8q3Xbd9m9fa4XdUTQKHEW6053f0odL76ZWoQqwcQ0AD5LAUAwMAAQEWAwMAKAAAAAAAAAAA7SA6uYWEmcQRKWMFkBZdArEL8RdWN3BYP7\/siN6rDgs=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0606{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":212,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxniJDquC4gBgBOGuQAAABAQgKEg13NwBerPAWAwMARhAAAEJBBCi8P\/EExM0Xu6JZErQb\/mrysQLciXK\/MPBwDe3\/RtXCA+1TMXC6HMw2Ppf0shM99s4lIkFKPpuBs2liuhCpjNUUAwMAAQEWAwMAKAAAAAAAAAAAMjj9iBhSXJD0M52DevX+Zy3OY\/d+OUBXzGhOg7EaYwE=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0806{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":360,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSbiqmcP2Y1W7FgBgAdPOOAAABAQgKAF6s9xINdzYWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R3+FYD6ruT+88SfAh8\/ipBVAOE\/znv5aOKbfxLJ3YLcML1yHkoXhtJqf4fucgCiUMz1QnwmpKsW26RivEQGC0aDsa2SsipsGin44HeEKpW3F4Lc2uU55bm+6jt8as8leWnaMHORPiPT\/TDG\/OOzmZwWA+MPtvMGH0\/ljSD3cI8CaDYdOn3sie3Zo6yx5znlgAQlprws4QTlVJ9CnAzVbgmfiU\/oqEOmBxsBBwWW\/HzBEUlHHXRPgsmXUEnv5CR6L\/CFAMDAAEBFgMDACitfhmnzMbAv4BSmsiQxmmUIf8SgXwkDA4ZvlUvdoj5dGTiUd6WawoI","pkt_caplen":360,"pkt_type":34525,"pkt_ipoffset":14}
+0805{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":360,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGOCoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuScEOq4Liw8Z6ggBgAdHBVAAABAQgKAF6s9xINdzcWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R3Gkq0wSBn+JJrOvPDuGcaeSeQYfYW8XiToXNfzxX95HoarO9PH5fFlOD2LF\/WhIJ8kZHn6PO5gYzl01z8hqzsfijA0jKKV2GWrCRSGwu1bJ9vtgZ2uQlA3t7EDCyA8mtvJmvqOeLY2b2QRZUZ\/jiGR6S\/LaH7oJTBUtddg1SBi1CGaieQtSjIJyikpKr0pxp12OU7\/ICH73vQdw\/07zVK5fWlbYmyKox0BfYySBx5X8Uz3QifaButrbMN+nd9JkWcFAMDAAEBFgMDACiEuSuOd0g+FPcdT\/BvxyVDi\/LHUtOzqJIxutwBfqrrX+uxTroXvDIw","pkt_caplen":360,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnqBDquHKgBABTmsSAAABAQgKEg13RwBerPc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269138,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknABu7DxnqBDquHKgBEBTmsSAAABAQgKEg13SwBerPc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1448269139219,"flow_last_seen":1448269139219,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp"}
+0442{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":94,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9NoAAAAAoAJwgGsaAAACBAWgBAIIChINd8gAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlL8YOHPTboBJvkPn2AAACBAWgBAIICgBerYcSDXfIAQMDCA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9Nt05S\/HgBAA4WsSAAABAQgKEg13zQBerYc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0718{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":298,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9Nt05S\/HgBgA4WvmAAABAQgKEg13zQBerYcWAwEAzwEAAMsDAxNG7IQgXbVqJt444LAcQyYZDBjNyphCo4eH+1bCSic4AAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA==","pkt_caplen":298,"pkt_type":34525,"pkt_ipoffset":14}
+0768{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1448269139219,"flow_last_seen":1448269139239,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0431{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlL8cOHPWvgBAAdJbuAAABAQgKAF6tjBINd80=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2355{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":1514,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAABbQGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlL8cOHPWvgBAAdKEoAAABAQgKAF6tjRINd80VAwMAAgFwFgMDAEECAAA9AwPZKCPjZPliuXEyb5\/i+kCdBwZ0PhXjXwwbzR8X949FEwDALwAAFQAAAAD\/AQABAAALAAQDAAECACMAABYDAxDjCwAQ3wAQ3AAFTzCCBUswggQzoAMCAQICEGlwh8ZXzEdaqUNvI9+NN8MwDQYJKoZIhvcNAQELBQAwgZAxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTYwNAYDVQQDEy1DT01PRE8gUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUxMTE1MDAwMDAwWhcNMTgxMTE0MjM1OTU5WjBRMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxFDASBgNVBAsTC1Bvc2l0aXZlU1NMMRYwFAYDVQQDEw1zaG9wLm50b3Aub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR6BIHt+rHaCaBL\/qKK36Y6zgLZa7uQ42uYff0TmO+nrjezjVzokWSc+b7XT8xiQLH5AkqJ9Lf\/\/NeqkB1fm7\/K3k27TQzmGn0gZ\/gjZ0up1RGHlcWqkmBgu1hm4kF0hAptThu\/QQTHz6OE2C2JERem\/TCFrM+LeqAlRcK\/9iYu2odCWrMkYWJu1Zur8eL0LtVyxc3kqCMWwu7at46P1qNP8vTbSQDxFLJTvozfhfIr+zQT412txGL1UCyQye5MRn5Abou0RkIjFXoM+zdLQQC3yVy\/Jd1s9wnLEcoBoeKxiqK5BJxLO\/3yH8uWwyg8YUFbd5+1cgJHdZ69cFgM4ZwIDAQABo4IB3TCCAdkwHwYDVR0jBBgwFoAUkK9qOpRaC9iQ6hJWc99DtDoo2ucwHQYDVR0OBBYEFJAVUwm3FdB8i+jm6lJjVmDmcoYFMA4GA1UdDwEB\/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBPBgNVHSAESDBGMDoGCysGAQQBsjEBAgIHMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNvbW9kby5jb20vQ1BTMAgGBmeBDAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGFBggrBgEFBQcBAQR5MHcwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTArBgNVHREEJDAigg1zaG9wLm50b3Aub3JnghF3d3cuc2hvcC5udG9wLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEABHga0CoUddKc8gTKl8pscY7onSvxASeGg6n14z8FhR2xLi3sQM93tAHGjfXnqbvor3abNIZbNbF0KzRdqJu4Pf8lRVflEivDChvy3JGmTgemN9zWuDPZ57rHKIP2WX88hJ\/PhjhgpWwDlVARS9gLCvB+ao\/MqFUPnRHIB\/ozv+GFroJaou2ptXCVpGzEcU5eeKmEk7EDV1FIeaLukxlf2pdWAhu92nfkdMVk7CEaYe2jnnRpGgH3FSI7e35KuJ6qcNoKFw3CRdQMfoBimHtdql+6OuUlCrOYGYcfLlT2dHNLRy5B10L6oRI=","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1448269139219,"flow_last_seen":1448269139263,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0430{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905TVbgBAA+GsSAAABAQgKEg130wBerY0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2344{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905TrvgBABDmsSAAABAQgKEg130wBerY0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2106{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":1326,"pkt":"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","pkt_caplen":1326,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905T\/HgBABJGsSAAABAQgKEg130wBerY0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1321{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":742,"pkt":"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","pkt_caplen":742,"pkt_type":34525,"pkt_ipoffset":14}
+1196{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":7,"flow_packet_id":12,"flow_first_seen":1448269139219,"flow_last_seen":1448269139267,"flow_tot_l4_data_len":5364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}}
+0431{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905UJXgBABO2sSAAABAQgKEg131ABerY4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0602{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":212,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABknYBuw4c9a905UJXgBgBO2uQAAABAQgKEg131ABerY4WAwMARhAAAEJBBJzPR2sM7OXWdxxTH8ExN47HkmvsmfbFKoKpWKuQbAgx16wrf2Ju0jo7UKJ4ey27iDy9z0akfx+6qqHS0YZyK\/MUAwMAAQEWAwMAKAAAAAAAAAAAVYNTEifBKSPslrliap2MBJ4eUNQS6r3F5g0RZT2LNnM=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0801{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":360,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSdnTlQlcOHPYtgBgAdCYUAAABAQgKAF6tlBINd9QWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R32JsXZKQkGVMRBICFQu21kmwsUFbQ4fWFEWniUJQ1U5Ndjg3zAKrWb+Xo64MaD9i4KF18Y58k0uqRdFnrY7SfNc3skH1KszimnYvY7GZaehYi\/O8Dp9uxj18b58fTf4imGbk9R14dKUOK+lbCmVGaj\/amG7vnxb17jKw3vP9B6TUc1IqNvMfuLr8tfNwVA0O7GNYD3XVbD7MXao09q\/SvVaO3XO5Z4rQfLdFiLMs9SBSTuY9JlPaSwHcbvTLJDwv6FAMDAAEBFgMDACgsEaR9WDcIXZeWNgvSMO7Uz+Mu+b6EsYO33vgkZDfPmJ9HXC947vcV","pkt_caplen":360,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1448269139314,"flow_last_seen":1448269139314,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:1a1::eed","src_port":60124,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BoQAAAAAAAA7t6twBuwxnksLpg7gmgBABC+E3AAABAQgKEg134BvnLVo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269139,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOyoCJvAArQGhAAAAAAAADu0qAA1AAAEAA3qswP\/+pw1MAbvq3OmDuCYMZ5LDgBAD0zk\/AAABAQgKG+fdWhINH94=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1448269143410,"flow_last_seen":1448269143410,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:2880:1010:3f20:face:b00c::25de","src_port":40308,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269143,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAyiAEBA\/IPrOsAwAACXenXQBu97bCAR6JAzggBADIfF3AAABAQgKEg174HFvpAM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269143,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gwAAAACAGKyoDKIAQED8g+s6wDAAAJd4qAA1AAAEAA3qswP\/+pw1MAbuddHokDODe2wgFgBAAa0\/sAAABAQgKcXBUrRINT9U=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1448269144306,"flow_last_seen":1448269144306,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::9a","src_port":33062,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAsMAgAAAAAAAACagSYBu7SkSa3RTHVvgBABRwoCAAABAQgKEg18wD9sNbI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGNSoAFFBACwwCAAAAAAAAAJoqAA1AAAEAA3qswP\/+pw1MAbuBJtFMdW+0pEmugBABd0eeAAABAQgKP2zlshINJLA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1448269144450,"flow_last_seen":1448269144450,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":94,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNhUAAAAAoAJwgGsaAAACBAWgBAIIChINfOQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjE+S8HnzYWoBJvkOerAAACBAWgBAIICgBesqQSDXzkAQMDCA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNhZ4xPkwgBAA4WsSAAABAQgKEg186gBesqQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0718{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":298,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAPQGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNhZ4xPkwgBgA4WvmAAABAQgKEg186gBesqQWAwEAzwEAAMsDA4LVJCHbKPrRWLN7cMDCu4vR3mRdCUE46R109x1CWpcaAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACC\/wEAAQAAAAARAA8AAAx3d3cubnRvcC5vcmcAFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA==","pkt_caplen":298,"pkt_type":34525,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1448269144450,"flow_last_seen":1448269144475,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0432{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjE+TAHnzbqgBAAdIShAAABAQgKAF6yqhINfOo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2356{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1448269144450,"flow_last_seen":1448269144502,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0431{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xP7EgBAA+GsSAAABAQgKEg188QBesqs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2346{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQRYgBABDmsSAAABAQgKEg188QBesqs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2107{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":1326,"pkt":"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","pkt_caplen":1326,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQkwgBABJGsSAAABAQgKEg188QBesqs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1323{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":742,"pkt":"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","pkt_caplen":742,"pkt_type":34525,"pkt_ipoffset":14}
+1197{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":11,"flow_packet_id":12,"flow_first_seen":1448269144450,"flow_last_seen":1448269144508,"flow_tot_l4_data_len":5364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.ntop.org","server_names":"shop.ntop.org,www.shop.ntop.org","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=shop.ntop.org","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"FB:A6:FF:A7:58:F3:9D:54:24:45:E5:A0:C4:04:18:D5:58:91:E0:34"}}
+0432{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQvAgBABO2sSAAABAQgKEg188gBesqw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0602{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":212,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqA7DAAAMA0AAAAAAAcBABkoIBuwefNup4xQvAgBgBO2uQAAABAQgKEg188wBesqwWAwMARhAAAEJBBI2kiTbFVqk1DnTMkksLyBJY73L7yEM3biwxnYTxFSEWSVY81Ndsd88TY9qGNC+qUQjFAAStyjdWtIZMKeYeaE0UAwMAAQEWAwMAKAAAAAAAAAAA6LNWqSOV9xS+am+jb+odvLJ3wy3u8abT8cohbnsD+cQ=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0810{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269144,"pkt_len":360,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAATIGNyoDsMAAAwDQAAAAAABwEAEqAA1AAAEAA3qswP\/+pw1MAbuSgnjFC8AHnzdogBgAdJvpAAABAQgKAF6ysxINfPMWAwMA2gQAANYAAAEsANDvs7P+YV2DQXBR8VMRR3R3OIv\/Ead+tcM\/fneMx5kPIpBedJOYBNv\/DjGBgwssRMpXMNnsPcQ80l3SJ8zKGOODHeRFN\/L2WcR\/BL\/hMZa2fuYoATXULlLMbr3M08PAbqVZC\/btKDT\/5xY\/ujY+EEbwfkz73Js7\/kppVheXfGPkL8IzEJYvYoebv4PHpvKl2c1xfyHumPru6eiY88sp7UK9JV9pZD2pNU\/werVtYVSDCzhNSlmajLB2as7Q1SRUyNj5EgiqP3O1Z4YmgpIWm4wyFAMDAAEBFgMDACgndRFmdPhy5vjdcuuThpfWuc2y2v2fq1H6j93EAvEgrMYJHKjRT1pl","pkt_caplen":360,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1448269145458,"flow_last_seen":1448269145458,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1012","src_port":59690,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269145,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqABRQQAEIAwAAAAAAABAS6SoBu3aemNPcvXclgBAA6hVxAAABAQgKEg194OPdWG4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269145,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOSoAFFBAAQgDAAAAAAAAEBIqAA1AAAEAA3qswP\/+pw1MAbvpKty9dyV2npjUgBAA8BoIAAABAQgK494IbhIM+eU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1448269146905,"flow_last_seen":1448269146905,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":94,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKuykAAAAAoAJwgNR+AAACBAWgBAIIChINf0kAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1448269146905,"flow_last_seen":1448269146905,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":94,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACgGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrfMAAAAAoAJwgNR+AAACBAWgBAIIChINf0kAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjun6mTbEj630oBJswJfaAAACBAV8BAIIChvn+wESDX9JAQMDBQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrfTp+pk3gBAA4dR2AAABAQgKEg1\/Sxvn+wE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":94,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACgGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBmT8LSrsqoBJswEUcAAACBAV8BAIIChvn+wESDX9JAQMDBQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKuyrowZlAgBAA4dR2AAABAQgKEg1\/Sxvn+wE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0736{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":310,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAQAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrfTp+pk3gBgA4dVWAAABAQgKEg1\/Sxvn+wEWAwEA2wEAANcDA983Ohoy\/qhBKvCaVPmNiUY3vp8oIoa+qbmtm60AZHnPAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACO\/wEAAQAAAAAdABsAABhzLXN0YXRpYy5hay5mYWNlYm9vay5jb20AFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA==","pkt_caplen":310,"pkt_type":34525,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1448269146905,"flow_last_seen":1448269146912,"flow_tot_l4_data_len":368,"flow_min_l4_data_len":32,"flow_max_l4_data_len":256,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0735{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":310,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAQAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKuyrowZlAgBgA4dVWAAABAQgKEg1\/Sxvn+wEWAwEA2wEAANcDA2fZZiw9kTAlONWXaPhqH8RvUelTTuaSCvPTIzelaImLAAAgzBTME8wVwCvALwCewArAFAA5wAnAEwAzAJwANQAvAAoBAACO\/wEAAQAAAAAdABsAABhzLXN0YXRpYy5hay5mYWNlYm9vay5jb20AFwAAACMAAAANABYAFAYBBgMFAQUDBAEEAwMBAwMCAQIDAAUABQEAAAAAM3QAAAASAAAAEAAdABsIaHR0cC8xLjEIc3BkeS8zLjEFaDItMTQCaDJ1UAAAAAsAAgEAAAoABgAEABcAGA==","pkt_caplen":310,"pkt_type":34525,"pkt_ipoffset":14}
+0789{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1448269146905,"flow_last_seen":1448269146912,"flow_tot_l4_data_len":368,"flow_min_l4_data_len":32,"flow_max_l4_data_len":256,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0432{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjun6mTfEj67UgBADiC68AAABAQgKG+f7CBINf0s=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAACAGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBmUALSrwKgBADiNv9AAABAQgKG+f7CBINf0s=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+5192{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":3633,"pkt":"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","pkt_caplen":3633,"pkt_type":34525,"pkt_ipoffset":14}
+1273{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1448269146905,"flow_last_seen":1448269146921,"flow_tot_l4_data_len":3979,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3579,"flow_avg_l4_data_len":663,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","server_names":"*.ak.fbcdn.net,s-static.ak.fbcdn.net,igsonar.com,*.igsonar.com,ak.facebook.com,*.ak.facebook.com,*.s-static.ak.facebook.com,connect.facebook.net,s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance CA-3","issuerDN":"C=US, ST=CA, L=Menlo Park, O=Facebook, Inc., CN=*.ak.fbcdn.net","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"E7:62:76:74:8D:09:F7:E9:69:05:B8:1A:37:A1:30:2D:FF:3B:BC:0A"}}
+0432{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrtTp+qcSgBABGdR2AAABAQgKEg1\/TRvn+wo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+4261{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":2942,"pkt":"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","pkt_caplen":2942,"pkt_type":34525,"pkt_ipoffset":14}
+0846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1448269146905,"flow_last_seen":1448269146921,"flow_tot_l4_data_len":3288,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":548,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1,spdy\/3.1,h2-14,h2"}}
+0432{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvArowaRogBABDtR2AAABAQgKEg1\/TRvn+wo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1369{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":777,"pkt":"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","pkt_caplen":777,"pkt_type":34525,"pkt_ipoffset":14}
+1273{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":13,"flow_packet_id":8,"flow_first_seen":1448269146905,"flow_last_seen":1448269146921,"flow_tot_l4_data_len":4043,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":505,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s-static.ak.facebook.com","server_names":"*.ak.fbcdn.net,s-static.ak.fbcdn.net,igsonar.com,*.igsonar.com,ak.facebook.com,*.ak.facebook.com,*.s-static.ak.facebook.com,connect.facebook.net,s-static.ak.facebook.com","ja3":"d3e627f423a33ea41841c19b8af79293","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance CA-3","issuerDN":"C=US, ST=CA, L=Menlo Park, O=Facebook, Inc., CN=*.ak.fbcdn.net","alpn":"http\/1.1,spdy\/3.1,h2-14,h2","fingerprint":"E7:62:76:74:8D:09:F7:E9:69:05:B8:1A:37:A1:30:2D:FF:3B:BC:0A"}}
+0432{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvArowacbgBABJNR2AAABAQgKEg1\/TRvn+wo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0603{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":212,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPrtTp+qcSgBgBGdT0AAABAQgKEg1\/Thvn+woWAwMARhAAAEJBBN3R5PXwMPzZz2nMnGQami8pV3SpzN0YQkERfC1yJ9Mqy\/GKa7eYDffP2t8k9aqcajQnVv86yePutuFUEHwcz2gUAwMAAQEWAwMAKAAAAAAAAAAAN35VNt7e8Eus7EPHQL7by0oQmynUiyqZ24VcS0UkEOk=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0606{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":212,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAAJ4GQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvArowacbgBgBJNT0AAABAQgKEg1\/Thvn+woWAwMARhAAAEJBBCsvrtmXkq7vlrwd9wU5MuJa26vkg+D0spkE\/QfHhZpv9ZR3t\/PZv+DxosFyg\/CdTlrU2QjdItsyB9fedIP2XWoUAwMAAQEWAwMAKAAAAAAAAAAAnryPL+XtHqy8cBKU5ZAlDwxGY9UKkivgM3VjYSpGBQQ=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0761{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":328,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAARIGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjun6pxLEj69SgBgDiIOjAAABAQgKG+f7EhINf04WAwMAugQAALYAABwgALCmxpnijZhcM64vCu\/Oer5dr+D4JJMqpkFlYXjTYCUhqxF4ZYsgeMoQ3ddjOkmSMrH5o++L4sphi1qaZ4xa0v1Qa4riMsRnXt9l7blOmFj5eakGuCLDRxAF\/+LDTn+AiRJw0ssWr04LL9kmlJN4NuXnFjopAnSmUcM8sARfR2oEK3YTpQcfmJxrkSvM22GhHCSr918kAhMG1ZSCEiKsC8xHsTdkdbmZ9kdwjkAgLZThLRQDAwABARYDAwAoPUEciuAfinGlQ08iSPTxQ4Cmcej7m6EBy5g\/U52v5JnAthlQL8jMEw==","pkt_caplen":328,"pkt_type":34525,"pkt_ipoffset":14}
+0763{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":328,"pkt":"eKzApw1M9LUv\/K\/Cht1gAAAAARIGOyoCJvAArQGXAAAAAAAAAjYqAA1AAAEAA3qswP\/+pw1MAbvPjOjBpxsLSryIgBgDiAPWAAABAQgKG+f7FBINf04WAwMAugQAALYAABwgALCmxpnijZhcM64vCu\/Oer5dI9ws+1Sh4C7e+6h1VezKkkWzLNFOEhCxJ\/e7qeGje77wq1c0Blk4oGMX66OZHyF83TvWUgG977HQR4Unb6sRF6SzJpK3+NvQ4YJwzQVAfePJydOI+pOgZQbTUW5\/pGjx+9RjBv1HOCpfeNAlfvdP04FY2woLgiThgOywr\/tzZNPKbYyeS4+ln9C4KCZcXfMdZtabq0sCVLel6B+tEDDsARQDAwABARYDAwAoDsyLHNtuAalm3dvDfTp1jLQpg9kJAp9VNWjWGA9tvoytcPS9bJWjNQ==","pkt_caplen":328,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z44Bu8SPr1Lp+qgEgBABL9R2AAABAQgKEg1\/WRvn+xI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","pkt_oversize":false,"pkt_ts":1448269146,"pkt_len":86,"pkt":"UMWNrEEBeKzApw1Mht1gAAAAACAGQCoADUAAAQADeqzA\/\/6nDUwqAibwAK0BlwAAAAAAAAI2z4wBuwtKvIjowagNgBABO9R2AAABAQgKEg1\/Whvn+xQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":13,"flow_packet_id":12,"flow_first_seen":1448269146905,"flow_last_seen":1448269146970,"flow_tot_l4_data_len":4539,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":378,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53132,"dst_port":443,"l4_proto":"tcp"}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":14,"flow_packet_id":10,"flow_first_seen":1448269146905,"flow_last_seen":1448269146966,"flow_tot_l4_data_len":4475,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3579,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:197::236","src_port":53134,"dst_port":443,"l4_proto":"tcp"}
+0545{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":1,"flow_packet_id":14,"flow_first_seen":1448269127395,"flow_last_seen":1448269127510,"flow_tot_l4_data_len":1457,"flow_min_l4_data_len":32,"flow_max_l4_data_len":538,"flow_avg_l4_data_len":104,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":41776,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0501{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":1,"flow_packet_id":14,"flow_first_seen":1448269127395,"flow_last_seen":1448269127510,"flow_tot_l4_data_len":1457,"flow_min_l4_data_len":32,"flow_max_l4_data_len":538,"flow_avg_l4_data_len":104,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":41776,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":2,"flow_packet_id":62,"flow_first_seen":1448269127400,"flow_last_seen":1448269138520,"flow_tot_l4_data_len":12629,"flow_min_l4_data_len":37,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1017","src_port":45931,"dst_port":443,"l4_proto":"udp"}
+0537{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1448269139314,"flow_last_seen":1448269139321,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:1a1::eed","src_port":60124,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0493{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1448269139314,"flow_last_seen":1448269139321,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a02:26f0:ad:1a1::eed","src_port":60124,"dst_port":443,"l4_proto":"tcp"}
+0540{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1448269127922,"flow_last_seen":1448269127940,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:803::2008","src_port":58660,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1448269127922,"flow_last_seen":1448269127940,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:803::2008","src_port":58660,"dst_port":443,"l4_proto":"tcp"}
+0500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":5,"flow_packet_id":19,"flow_first_seen":1448269138575,"flow_last_seen":1448269138746,"flow_tot_l4_data_len":5988,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37486,"dst_port":443,"l4_proto":"tcp"}
+0500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":6,"flow_packet_id":17,"flow_first_seen":1448269138575,"flow_last_seen":1448269138746,"flow_tot_l4_data_len":5924,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2700,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37488,"dst_port":443,"l4_proto":"tcp"}
+0500{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":7,"flow_packet_id":18,"flow_first_seen":1448269139219,"flow_last_seen":1448269139339,"flow_tot_l4_data_len":5956,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":330,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37494,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":11,"flow_packet_id":26,"flow_first_seen":1448269144450,"flow_last_seen":1448269144884,"flow_tot_l4_data_len":14213,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":546,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:b0c0:3:d0::70:1001","src_port":37506,"dst_port":443,"l4_proto":"tcp"}
+0540{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1448269123954,"flow_last_seen":1448269123971,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:804::200e","src_port":40526,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0496{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1448269123954,"flow_last_seen":1448269123971,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4006:804::200e","src_port":40526,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1448269143410,"flow_last_seen":1448269143539,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:2880:1010:3f20:face:b00c::25de","src_port":40308,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1448269143410,"flow_last_seen":1448269143539,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a03:2880:1010:3f20:face:b00c::25de","src_port":40308,"dst_port":443,"l4_proto":"tcp"}
+0533{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1448269127960,"flow_last_seen":1448269128028,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":45,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::5f","src_port":55145,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1448269127960,"flow_last_seen":1448269128028,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":45,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::5f","src_port":55145,"dst_port":443,"l4_proto":"udp"}
+0539{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1448269144306,"flow_last_seen":1448269144348,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::9a","src_port":33062,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0495{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1448269144306,"flow_last_seen":1448269144348,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:400b:c02::9a","src_port":33062,"dst_port":443,"l4_proto":"tcp"}
+0541{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1448269145458,"flow_last_seen":1448269145478,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1012","src_port":59690,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1448269145458,"flow_last_seen":1448269145478,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a00:d40:1:3:7aac:c0ff:fea7:d4c","dst_ip":"2a00:1450:4001:803::1012","src_port":59690,"dst_port":443,"l4_proto":"tcp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/http_ipv6.pcap"}
diff --git a/tests/result/nDPId_iec60780-5-104.pcap.txt b/tests/result/nDPId_iec60780-5-104.pcap.txt
new file mode 100644
index 000000000..ae33adffb
--- /dev/null
+++ b/tests/result/nDPId_iec60780-5-104.pcap.txt
@@ -0,0 +1,108 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1219992231267,"flow_last_seen":1219992231267,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1568,"dst_port":2404,"l4_proto":"tcp"}
+0401{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992231,"pkt_len":62,"pkt":"ABXFGNTMABNy14eKCABFAAAwbS5AAIAGRKWsG\/htrBv4TwYgCWR6t61JAAAAAHAC\/\/8CpgAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992231,"pkt_len":62,"pkt":"ABNy14eKABXFGNTMCABFAAAwQVVAAIAGcH6sG\/hPrBv4bQlkBiDrZdPBeretSnAS\/\/9DbQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992231,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobS9AAIAGRKysG\/htrBv4TwYgCWR6t61K62XTwlAQ\/\/9wMQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992231,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubTBAAIAGRKWsG\/htrBv4TwYgCWR6t61K62XTwlAY\/\/8BHwAAaAQHAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1219992231267,"flow_last_seen":1219992231283,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1568,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","category":"IoT-Scada"}}
+0397{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992231,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQVZAAIAGcH+sG\/hPrBv4bQlkBiDrZdPCeretUFAY\/\/lJFQAAaAQLAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992231,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobTFAAIAGRKqsG\/htrBv4TwYgCWR6t61Q62XTyFAQ\/\/lwKwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992239,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAApbTZAAIAGRKSsG\/htrBv4TwYgCWR6t61Q62XTyFAY\/\/lwIgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992239,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQVlAAIAGcIKsG\/hPrBv4bQlkBiDrZdPIeretUVAQ\/\/hJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992248,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAqbTlAAIAGRKCsG\/htrBv4TwYgCWR6t61R62XTyFAY\/\/luuAAAAWgAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992248,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQVpAAIAGcIGsG\/hPrBv4bQlkBiDrZdPIeretU1AQ\/\/ZJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992271,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubTtAAIAGRJqsG\/htrBv4TwYgCWR6t61T62XTyFAY\/\/n0BQAAAgJoABIS","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992271,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQVtAAIAGcICsG\/hPrBv4bQlkBiDrZdPIeretWVAQ\/\/BJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992291,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubUBAAIAGRJWsG\/htrBv4TwYgCWR6t61Z62XTyFAY\/\/nFDwAAaARDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992291,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQVxAAIAGcHmsG\/hPrBv4bQlkBiDrZdPIeretX1AY\/+pJFQAAaASDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992291,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobUFAAIAGRJqsG\/htrBv4TwYgCWR6t61f62XTzlAQ\/\/NwHAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1219992393215,"flow_last_seen":1219992393215,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1570,"dst_port":2404,"l4_proto":"tcp"}
+0403{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992393,"pkt_len":62,"pkt":"ABXFGNTMABNy14eKCABFAAAwbYNAAIAGRFCsG\/htrBv4TwYiCWRtLtqlAAAAAHAC\/\/\/i0AAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992393,"pkt_len":62,"pkt":"ABNy14eKABXFGNTMCABFAAAwQXdAAIAGcFysG\/hPrBv4bQlkBiJI3nuobS7apnAS\/\/8eOQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992393,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobYRAAIAGRFesG\/htrBv4TwYiCWRtLtqmSN57qVAQ\/\/9K\/QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992393,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubYVAAIAGRFCsG\/htrBv4TwYiCWRtLtqmSN57qVAY\/\/\/b6gAAaAQHAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1219992393215,"flow_last_seen":1219992393217,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1570,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","category":"IoT-Scada"}}
+0398{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992393,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQXhAAIAGcF2sG\/hPrBv4bQlkBiJI3nupbS7arFAY\/\/lJFQAAaAQLAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992393,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobYZAAIAGRFWsG\/htrBv4TwYiCWRtLtqsSN57r1AQ\/\/lK9wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992435,"pkt_len":70,"pkt":"ABXFGNTMABNy14eKCABFAAA4bZRAAIAGRDesG\/htrBv4TwYiCWRtLtqsSN57r1AY\/\/nkBQAABwcHBwcHB2gFFxcXFxcXFw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992435,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQXlAAIAGcGKsG\/hPrBv4bQlkBiJI3nuvbS7avFAQ\/+lJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":0,"flow_packet_id":29,"flow_first_seen":1219992231267,"flow_last_seen":1219992392222,"flow_tot_l4_data_len":683,"flow_min_l4_data_len":20,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1568,"dst_port":2404,"l4_proto":"tcp"}
+0398{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992453,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubZdAAIAGRD6sG\/htrBv4TwYiCWRtLtq8SN57r1AY\/\/mf1AAAaARDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992453,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQXpAAIAGcFusG\/hPrBv4bQlkBiJI3nuvbS7awlAY\/+NJFQAAaASDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992453,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobZhAAIAGREOsG\/htrBv4TwYiCWRtLtrCSN57tVAQ\/\/NK4QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992485,"pkt_len":72,"pkt":"ABXFGNTMABNy14eKCABFAAA6baBAAIAGRCmsG\/htrBv4TwYiCWRtLtrCSN57tVAY\/\/NiQAAACAgICAgICAhoBhgYGBgYGBgY","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992485,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQXxAAIAGcF+sG\/hPrBv4bQlkBiJI3nu1bS7a1FAR\/9FJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992485,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobaFAAIAGRDqsG\/htrBv4TwYiCWRtLtrUSN57tlAQ\/\/NKzgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992485,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobaJAAIAGRDmsG\/htrBv4TwYiCWRtLtrUSN57tlAR\/\/NKzQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1219992486295,"flow_last_seen":1219992486295,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1571,"dst_port":2404,"l4_proto":"tcp"}
+0402{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":62,"pkt":"ABXFGNTMABNy14eKCABFAAAwbaNAAIAGRDCsG\/htrBv4TwYjCWQlpaXOAAAAAHAC\/\/9fMAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":62,"pkt":"ABNy14eKABXFGNTMCABFAAAwQX5AAIAGcFWsG\/hPrBv4bQlkBiP13h8HJaWlz3AS\/\/9KOQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobaRAAIAGRDesG\/htrBv4TwYjCWQlpaXP9d4fCFAQ\/\/92\/QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubaVAAIAGRDCsG\/htrBv4TwYjCWQlpaXP9d4fCFAY\/\/8H6wAAaAQHAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1219992486295,"flow_last_seen":1219992486297,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1571,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","category":"IoT-Scada"}}
+0390{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQX9AAIAGcFysG\/hPrBv4bQlkBiP13h8IJaWl1VAQ\/\/lJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYBAAIAGcFWsG\/hPrBv4bQlkBiP13h8IJaWl1VAY\/\/lJFQAAaAQLAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992486,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobaZAAIAGRDWsG\/htrBv4TwYjCWQlpaXV9d4fDlAQ\/\/l29wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":1,"flow_packet_id":16,"flow_first_seen":1219992393215,"flow_last_seen":1219992485282,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":20,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1570,"dst_port":2404,"l4_proto":"tcp"}
+0398{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992546,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubblAAIAGRBysG\/htrBv4TwYjCWQlpaXV9d4fDlAY\/\/nL5AAAaARDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992546,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYFAAIAGcFSsG\/hPrBv4bQlkBiP13h8OJaWl21AY\/\/NJFQAAaASDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992546,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobbpAAIAGRCGsG\/htrBv4TwYjCWQlpaXb9d4fFFAQ\/\/N28QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992580,"pkt_len":67,"pkt":"ABXFGNTMABNy14eKCABFAAA1bb9AAIAGRA+sG\/htrBv4TwYjCWQlpaXb9d4fFFAY\/\/O+nQAACAgICAgICAhoBhgYGA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992580,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYJAAIAGcFmsG\/hPrBv4bQlkBiP13h8UJaWl6FAQ\/+ZJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992589,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAtbcJAAIAGRBSsG\/htrBv4TwYjCWQlpaXo9d4fFFAY\/\/MupwAAGBgYGBgA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992589,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYNAAIAGcFisG\/hPrBv4bQlkBiP13h8UJaWl7VAR\/+FJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992589,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobcNAAIAGRBisG\/htrBv4TwYjCWQlpaXt9d4fFVAQ\/\/N23gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1219992590188,"flow_last_seen":1219992590188,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1572,"dst_port":2404,"l4_proto":"tcp"}
+0402{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992590,"pkt_len":62,"pkt":"ABXFGNTMABNy14eKCABFAAAwbcVAAIAGRA6sG\/htrBv4TwYkCWQxVG2fAAAAAHAC\/\/+LrwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992590,"pkt_len":62,"pkt":"ABNy14eKABXFGNTMCABFAAAwQYVAAIAGcE6sG\/hPrBv4bQlkBiSd+ybXMVRtoHAS\/\/\/GywAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992590,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobcZAAIAGRBWsG\/htrBv4TwYkCWQxVG2gnfsm2FAQ\/\/\/zjwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992590,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubcdAAIAGRA6sG\/htrBv4TwYkCWQxVG2gnfsm2FAY\/\/+EfQAAaAQHAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1219992590188,"flow_last_seen":1219992590189,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1572,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","category":"IoT-Scada"}}
+0398{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992590,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYZAAIAGcE+sG\/hPrBv4bQlkBiSd+ybYMVRtplAY\/\/lJFQAAaAQLAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992590,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobchAAIAGRBOsG\/htrBv4TwYkCWQxVG2mnfsm3lAQ\/\/nziQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":2,"flow_packet_id":17,"flow_first_seen":1219992486295,"flow_last_seen":1219992589197,"flow_tot_l4_data_len":398,"flow_min_l4_data_len":20,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1571,"dst_port":2404,"l4_proto":"tcp"}
+0398{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992650,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubhRAAIAGQ8GsG\/htrBv4TwYkCWQxVG2mnfsm3lAY\/\/lIdwAAaARDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992650,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQYhAAIAGcE2sG\/hPrBv4bQlkBiSd+ybeMVRtrFAY\/\/NJFQAAaASDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992650,"pkt_len":74,"pkt":"ABXFGNTMABNy14eKCABFAAA8bhVAAIAGQ7KsG\/htrBv4TwYkCWQxVG2snfsm5FAY\/\/NbXgAACQkJCQkJCQkJaAYZGRkZGRkZGRk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992650,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYlAAIAGcFKsG\/hPrBv4bQlkBiSd+ybkMVRtwFAQ\/99JDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992676,"pkt_len":68,"pkt":"ABXFGNTMABNy14eKCABFAAA2bh1AAIAGQ7CsG\/htrBv4TwYkCWQxVG3Anfsm5FAY\/\/OmmwAACQkJCQkJCQkJaAYZGRk=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992676,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYpAAIAGcFGsG\/hPrBv4bQlkBiSd+ybkMVRtzlAQ\/9FJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992686,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubiBAAIAGQ7WsG\/htrBv4TwYkCWQxVG3Onfsm5FAY\/\/OoCAAAGRkZGRkZ","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992686,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQYtAAIAGcFCsG\/hPrBv4bQlkBiSd+ybkMVRt1FAQ\/8tJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992710,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubiNAAIAGQ7KsG\/htrBv4TwYkCWQxVG3Unfsm5FAY\/\/NISQAAaARDAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1219992782348,"flow_last_seen":1219992782348,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1577,"dst_port":2404,"l4_proto":"tcp"}
+0402{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992782,"pkt_len":62,"pkt":"ABXFGNTMABNy14eKCABFAAAwbjdAAIAGQ5ysG\/htrBv4TwYpCWQN1WRMAAAAAHAC\/\/+4fAAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992782,"pkt_len":62,"pkt":"ABNy14eKABXFGNTMCABFAAAwQZFAAIAGcEKsG\/hPrBv4bQlkBikE5Jl8DdVkTXAS\/\/8aCwAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992782,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobjhAAIAGQ6OsG\/htrBv4TwYpCWQN1WRNBOSZfVAQ\/\/9GzwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992782,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubjlAAIAGQ5ysG\/htrBv4TwYpCWQN1WRNBOSZfVAY\/\/\/XvAAAaAQHAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1219992782348,"flow_last_seen":1219992782350,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1577,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","category":"IoT-Scada"}}
+0398{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992782,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQZJAAIAGcEOsG\/hPrBv4bQlkBikE5Jl9DdVkU1AY\/\/lJFQAAaAQLAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992782,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobjpAAIAGQ6GsG\/htrBv4TwYpCWQN1WRTBOSZg1AQ\/\/lGyQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992804,"pkt_len":71,"pkt":"ABXFGNTMABNy14eKCABFAAA5bkBAAIAGQ4qsG\/htrBv4TwYpCWQN1WRTBOSZg1AY\/\/leQQAACgoKCgoKCgoKCmgIGhoaGho=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992804,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQZNAAIAGcEisG\/hPrBv4bQlkBikE5JmDDdVkZFAQ\/+hJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992818,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAtbkFAAIAGQ5WsG\/htrBv4TwYpCWQN1WRkBOSZg1AY\/\/n4dgAAGhoaGhoA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992818,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQZRAAIAGcEesG\/hPrBv4bQlkBikE5JmDDdVkaVAR\/+NJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992818,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobkJAAIAGQ5msG\/htrBv4TwYpCWQN1WRpBOSZhFAQ\/\/lGsgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992818,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobkNAAIAGQ5isG\/htrBv4TwYpCWQN1WRpBOSZhFAR\/\/lGsQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992818,"pkt_len":54,"pkt":"ABNy14eKABXFGNTMCABFAAAoQZVAAIAGcEasG\/hPrBv4bQlkBikE5JmEDdVkalAQ\/+NJDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1219992819942,"flow_last_seen":1219992819942,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1578,"dst_port":2404,"l4_proto":"tcp"}
+0404{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992819,"pkt_len":62,"pkt":"ABXFGNTMABNy14eKCABFAAAwbkRAAIAGQ4+sG\/htrBv4TwYqCWRBsBqPAAAAAHAC\/\/\/OXQAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992819,"pkt_len":62,"pkt":"ABNy14eKABXFGNTMCABFAAAwQZZAAIAGcD2sG\/hPrBv4bQlkBir5wu6KQbAakHAS\/\/\/l\/gAAAgQFtAEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992819,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobkVAAIAGQ5asG\/htrBv4TwYqCWRBsBqQ+cLui1AQ\/\/8SwwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992819,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubkZAAIAGQ4+sG\/htrBv4TwYqCWRBsBqQ+cLui1AY\/\/+jsAAAaAQHAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1219992819942,"flow_last_seen":1219992819944,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1578,"dst_port":2404,"l4_proto":"tcp","ndpi": {"proto":"IEC60870","category":"IoT-Scada"}}
+0399{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992819,"pkt_len":60,"pkt":"ABNy14eKABXFGNTMCABFAAAuQZdAAIAGcD6sG\/hPrBv4bQlkBir5wu6LQbAallAY\/\/lJFQAAaAQLAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992820,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobkdAAIAGQ5SsG\/htrBv4TwYqCWRBsBqW+cLukVAQ\/\/kSvQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":3,"flow_packet_id":25,"flow_first_seen":1219992590188,"flow_last_seen":1219992781349,"flow_tot_l4_data_len":626,"flow_min_l4_data_len":20,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":25,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1572,"dst_port":2404,"l4_proto":"tcp"}
+0415{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992852,"pkt_len":70,"pkt":"ABNy14eKABXFGNTMCABFAAA4QaNAAIAGcCisG\/hPrBv4bQlkBir5wu6RQbAallAY\/\/lJHwAAaA4AAAAARgEEAA2RAAAAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992852,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAobk5AAIAGQ42sG\/htrBv4TwYqCWRBsBqW+cLuoVAQ\/+kSvQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992869,"pkt_len":70,"pkt":"ABXFGNTMABNy14eKCABFAAA4blFAAIAGQ3qsG\/htrBv4TwYqCWRBsBqW+cLuoVAY\/+kw8AAAaA4AAAIAZAEGAA2RAAAAFA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992869,"pkt_len":118,"pkt":"ABNy14eKABXFGNTMCABFAABoQaRAAIAGb\/esG\/hPrBv4bQlkBir5wu6hQbAaplAY\/+lJTwAAaAQBAAIAaA4CAAIAZAEHAA2RAAAAFGgWBAACAAGJFAANkRonANCAgIDAgICAgGgQBgACAAODFAANkSpOAICAgA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992870,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAoblJAAIAGQ4msG\/htrBv4TwYqCWRBsBqm+cLu4VAQ\/6kSrQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":4,"flow_packet_id":13,"flow_first_seen":1219992782348,"flow_last_seen":1219992818955,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":20,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1577,"dst_port":2404,"l4_proto":"tcp"}
+0399{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992889,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAubldAAIAGQ36sG\/htrBv4TwYqCWRBsBqm+cLu4VAY\/6mhmgAAaAQBAAgA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992889,"pkt_len":70,"pkt":"ABNy14eKABXFGNTMCABFAAA4Qa9AAIAGcBysG\/hPrBv4bQlkBir5wu7hQbAarFAY\/+NJHwAAaA4IAAIAZAEKAA2RAAAAFA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992890,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAoblhAAIAGQ4OsG\/htrBv4TwYqCWRBsBqs+cLu8VAQ\/5kSpwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","pkt_oversize":false,"pkt_ts":1219992909,"pkt_len":60,"pkt":"ABXFGNTMABNy14eKCABFAAAublxAAIAGQ3msG\/htrBv4TwYqCWRBsBqs+cLu8VAY\/5mflAAAaAQBAAoA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap","flow_id":5,"flow_packet_id":47,"flow_first_seen":1219992819942,"flow_last_seen":1219993055118,"flow_tot_l4_data_len":1373,"flow_min_l4_data_len":20,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.248.109","dst_ip":"172.27.248.79","src_port":1578,"dst_port":2404,"l4_proto":"tcp"}
+0152{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iec60780-5-104.pcap"}
diff --git a/tests/result/nDPId_imaps.pcap.txt b/tests/result/nDPId_imaps.pcap.txt
new file mode 100644
index 000000000..e0cf2b8e6
--- /dev/null
+++ b/tests/result/nDPId_imaps.pcap.txt
@@ -0,0 +1,22 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590857744659,"flow_last_seen":1590857744659,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp"}
+0414{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+f\/AqAEIp2PXpMVKA+HRNM\/NAAAAALAC\/\/\/ajwAAAgQFtAEDAwUBAQgKFE2dOQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBgSnY9ekwKgBCAPhxUrMi6La0TTPzqAS\/ojr6QAAAgQFrAQCCAqpw+fsFE2dOQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+gvAqAEIp2PXpMVKA+HRNM\/OzIui24AQECwI4wAAAQEIChRNnWGpw+fs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":293,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEXAABAAEAG+SjAqAEIp2PXpMVKA+HRNM\/OzIui24AYECzQ0gAAAQEIChRNnWSpw+fsFgMBAN4BAADaAwNe0pAQoUxdbqNEmHqACTYoEy7RbC2uNC4pbnZPkmPkMyAkUBxuKNil5bUhgr6oHofj7e9MtyuIV+orRKnjfI7R5wBCAP\/ALMArwCTAI8AKwAnACMAwwC\/AKMAnwBTAE8ASAJ8AngBrAGcAOQAzABYAnQCcAD0APAA1AC8ACsAHwBEABQAEAQAATwAAABIAEAAADW1haWwubnRvcC5vcmcACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1590857744659,"flow_last_seen":1590857744710,"flow_tot_l4_data_len":375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mail.ntop.org","ja3":"4923a265be4d81c68ecda45bb89cdf6a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0393{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0NrtAADQGz1CnY9ekwKgBCAPhxUrMi6Lb0TTQsYAQAfwWAAAAAQEICqnD6BkUTZ1k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1590857744659,"flow_last_seen":1590857744765,"flow_tot_l4_data_len":1879,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mail.ntop.org","ja3":"4923a265be4d81c68ecda45bb89cdf6a","ja3s":"b653c251b0ee54c3088fe7bb997cf59d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}}
+2339{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1012{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1590857744659,"flow_last_seen":1590857744765,"flow_tot_l4_data_len":3351,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mail.ntop.org","server_names":"mail.ntop.org","ja3":"4923a265be4d81c68ecda45bb89cdf6a","ja3s":"b653c251b0ee54c3088fe7bb997cf59d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3","issuerDN":"CN=mail.ntop.org","fingerprint":"F1:9A:35:30:96:57:5E:56:81:28:2C:D9:45:A5:83:21:9E:E8:C5:DF"}}
+0609{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":225,"pkt":"KDc3AG3IEBMx8Tl2CABFAADTNr5AADQGzq6nY9ekwKgBCAPhxUrMi64b0TTQsYAYAfzSbwAAAQEICqnD6CcUTZ1kAPSFCvb8OYHeJTvCvkpUKEbmM+UGhIJhREjvK899r8eOFMYAx\/++EEmK3kxoLRjkxC0on9rLVxnLicHl6SST3oXXiRnYJk3Rvb1VHjVM43LMFs64hyxL15y1H0fSiLC8y0u5d0f9ylbwOfKcMRoXGM96Zl7NBK5iPS0H2WqW1xXHdzk9\/iuf3Euv+nK4b0gYBXMzVK82FgMDAAQOAAAA","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+gvAqAEIp2PXpMVKA+HRNNCxzIuuG4AQD9L8rQAAAQEIChRNnZKpw+gn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+gvAqAEIp2PXpMVKA+HRNNCxzIuuuoAQD838EwAAAQEIChRNnZKpw+gn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":173,"pkt":"EBMx8Tl2KDc3AG3ICABFAACfAABAAEAG+aDAqAEIp2PXpMVKA+HRNNCxzIuuuoAYEAAd7AAAAQEIChRNnampw+gnFgMDAGYQAABiYQQMa2OgWxKGD1OH2cJlSC4P8d1hecZqTf2a+Xy9mKQfgX0Vh1RWPWG+UGeuZKj0nvmAYi+21GC9jKcUf6TsKtrKQ21yY\/8TA7d0DMC+G52kpZwswjFMFNPsUXW7gEhx+EY=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Nr9AADQGz0ynY9ekwKgBCAPhxUrMi6660TTRHIAQAfwI+gAAAQEICqnD6JAUTZ2p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG+djAqAEIp2PXpMVKA+HRNNEczIuuuoAYEAA7XwAAAQEIChRNneqpw+iQFAMDAAEBFgMDACglJ8Mzvl1tB2IhOqlbKgTgBKc91pKNDFqA2GYulIqLvB4p2N7Frl1n","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0NsBAADQGz0unY9ekwKgBCAPhxUrMi6660TTRT4AQAfwIYQAAAQEICqnD6LUUTZ3q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","pkt_oversize":false,"pkt_ts":1590857744,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnNsFAADQGzxenY9ekwKgBCAPhxUrMi6660TTRT4AYAfxr8wAAAQEICqnD6LUUTZ3qFAMDAAEBFgMDAChAqpq8t2fITIfMhvOf8DvJz3jdHhYAkNco57ZHSCpyv0i\/fAHB+HFs","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1590857744659,"flow_last_seen":1590857744987,"flow_tot_l4_data_len":4516,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":225,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.8","dst_ip":"167.99.215.164","src_port":50506,"dst_port":993,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/imaps.pcap"}
diff --git a/tests/result/nDPId_instagram.pcap.txt b/tests/result/nDPId_instagram.pcap.txt
new file mode 100644
index 000000000..5e53f31ba
--- /dev/null
+++ b/tests/result/nDPId_instagram.pcap.txt
@@ -0,0 +1,505 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1436720898354,"flow_last_seen":1436720898354,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":74,"pkt":"ABsv8H60QPMIw47hCABFAAA8TypAAEAGEYLAqABnrfxrBNw+AbsehKWiAAAAAKACOQjaPgAAAgQFtAQCCAoAA+qIAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1436720898386,"flow_last_seen":1436720898386,"flow_tot_l4_data_len":1397,"flow_min_l4_data_len":1397,"flow_max_l4_data_len":1397,"flow_avg_l4_data_len":1397,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33936,"dst_port":443,"l4_proto":"tcp"}
+2245{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":1431,"pkt":"ABsv8H60QPMIw47hCABFAAWJa5BAAEAGjI7AqABnHw1dNISQAbuIwY4ypNSTmIAYARMTGgAAAQEICgAD6otaUmp7FwMBBVB9SXVyqGN\/Z0IQOrRWeDqy2ESAojaAx4QQZK8Nvn9P2WG4BrAo87sybB9iQ6L07zu3SJx\/yEENym+6oXOIueLurovz4xM5H+e2VkXRxNwq2D0zbcPaARfl1kqZ5lxozT2KxP5upnv5ZlZknUeHJ9iJUeI933878+9Wa2p3jAkSn4v+PhMZ8tdKr\/DbC4Dao9UoiB0NXUAr3Yz5mLZxqwvhp7T5JBYmrpug0k+c+c5jewd+5zMMLlTOh9zrkFpN\/SPdxljY89SWMG4iWok6qAWd81044WQFB8MMk6d1YEgnl4MTRR4s5nra0RAZ\/18nINKDy\/+7OtbIdykHRTDGdkzNglojGhlbMwXwCoSaU7eaC\/UG3QHuANJheRiTxBbb9LObDO61gFXBkdpo\/nFCQJ5DEAR9LRi5VbgUevhOk8v2CnW3NfU8tU\/NhXT2Fwav0PyuAxlku4R0TFjGrX0lMbSi5TfJsyWyqS9JUaHL9+9Lo2MolHMixycuQJ8OBJfxMjbh4vndGe6E5xjywRDhon5Ivpm51kbX7pr85erPPQ5esyd11\/S2GN1nyosTrQfKPFTMJ2PKe2m7QTQt+uAz\/lbUTHbMP5WXngggI0bC1v64BOTbVZvk5uSBRBJTxfNNwpu5Mu42yT2kpORmWxKLjzXxHI3WY0zq00CLVkZ1W4ZdSNXs14xkPKnh8GETvWNyrC0OkJAC\/senhsF4RXOoqIV\/fvDhI7Lz\/aB3VqgZGkZTiT2tG0nkNbTl36TNhCL0NMIpdEkg3CtkeHnRpYXxlFUaqjl0oiNlqmXrT3txeOlkpgLeE8sil6hQeUXLUDxeB\/KJ3hVWQV57tvquoi3TQ0mdlDPh3nKxwFekfGvexzie5JWVEiecROjBicDHlMGZSqgfGOOL9obBhKFQKyGkKwqvDD0GLpn+uVlqpq4HgYehGmZsXkGfKjhOvgYnCN46aHecrF2yix3uKy9HcGVhEh0jdkP6ZVKeYPjfh1VormnzwC798pJrA6FXeukKkQhENaxtIfjtfZqrhxgkGn44Wi6ohn6pe\/FHHmbNcPgV6V8fsqp75GNTcdW4payqjcXiRcbHyE8T1\/Qx4baiJDp6KLsZS4gAneRh+ALhxukKM03jbRUClXAh8oRiLl0u+SOlflfwh8goOCkzbht0yzBBd5s+YE\/rKLvLODamT6vRSajD988ioyLCTi6O7PjCpIz0x86CPfl59RFLMWfW1DDNxLLiQpG5QmdGA\/0xKZPtgucNxJfMg8zisuAsBotSOZNTt7iyYW\/IMjbjZfUDk2XnW0FMevjvN1dNSzxncEScDgEwhOZR\/bPFjnmrDfWVV5x9BRHI5MP8wUwSlhypizc+qxTGIgicImjYGkhAIz+xcFmXadM0YNZEvMZaj9aBOHMX1Oble6EYxmSHOrpQKqfzbWeMlvwrQYuci0kLy\/\/bshVduwlDBy5JYqDunQnZyDGNhNVfyaH+ng8KQ6sBqINnITFXfAnCkwXV\/HK1iUkb7QzoqBn3gpftCp83hNH0foudA8Gdf6kurlWwgMEOXi5BfTqlD4DwASXt9A68u1P9Zz8s0alrX2UlusB6fvL9Q9Js6MLwiQyj+bjdEcQ3Uplwrw6qLdouhHzsdgkMnVdwc2l5wv8KPOcXqmQvqjndZFz1nXaAVhwsFoo1zwY3LiNiYjhwWSYaeCHLdPVBHtAjW1OZFou+zyYe9X36AFhBBqrW+04QrWGvIhn1jD27wWhOa1bAC4ScjrpH0lKPe5njeedOXaKkZFE++EHilCzyFRBq6mDF3sb10u4yUIsQcfD4LLSh","pkt_caplen":1431,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA05iNAAFUGAlAfDV00wKgAZwG7hJCk1JOYiMGTh4AQAE5t9QAAAQEIClpSq0YAA+qL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":74,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAAFIGTqyt\/GsEwKgAZwG73D5XFMWUHoSlo6ASOJBK1AAAAgQFlgQCCAq8TYT0AAPqiAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0TytAAEAGEYnAqABnrfxrBNw+AbsehKWjVxTFlYAQAOXaNgAAAQEICgAD6pe8TYT0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1024{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":530,"pkt":"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","pkt_caplen":530,"pkt_type":2048,"pkt_ipoffset":14}
+0775{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1436720898354,"flow_last_seen":1436720898501,"flow_tot_l4_data_len":608,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"telegraph-ash.instagram.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+1229{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":679,"pkt":"QPMIw47hABsv8H60CABFAAKZ5iRAAFUG\/+kfDV00wKgAZwG7hJCk1JOYiMGTh4AYAE6DfwAAAQEIClpSq5UAA+qLFwMBAmB3TNLiDxMdaG\/77FJR8O6B7ETM5PL1YEwRicjM0iP0UHaAjwUM69tZJRboKPSJSylQ1372woiRMUoGT0dkqivXwS77nykGpDpQxH2zG\/qLmXj10Apbm9mNJzojbuGkVAQeXciVaLovJfxV8pe4ApuOMtqX+wzNa0ZzIxrRfdGy1r+REoc96\/duttzeccU7r8F+0sSj4kAMBptpjPxHIWmQ8bvcQmsOZTBbtWqbInBydwnOzZKHuUG4UpWsNoKQLrxSa1ETAsjugoyEe5PPT8+cb8Irh4mKsNfbStX5KDjpe9Dme8aKUCL1ceYHHjALeMY9l4fx2o0KIF6TukGkzvqR8cZ+qcyDG5U\/HYh5lxYTcHS7lDXS1PzV6XOR41h1cZ9L+KxXE6JczRHCSiNT1VF7boI4Qizj5lEdfdajhSQHOEg16UAhsZHpgK1G5Iki1ek6rdWyUqwchJMZYUThaRdJpKv9RM0OW9cAtKW4cZKenq0TEdOPDEBRCwskRboA6Gi3YnhJ3qdvDGkTLGo9t+FpkGczAZZn4gKC4xoEybQb10OFqFb4BP0BHlc1dmzqbYjWeEKW2wJjaNEaqdUvlusDaKzJPAfd\/FC3qcdqBy6RoP1rw6AWfXgFirXb5SF1IsZGaICO7Vi\/A05NBIj2TN+sAkrMTvlnJxzijI3OS4z\/O7pdS0yJ1AhdM2CbNqiTSP1\/fSWG2i895LYIERx7TAiABxyhh9ufac6WLn1D9wJV86snpuHfJEPWipx7pSJs20IjfVBIUe\/onrcoOjL6GotP95FotxVNOdpbLqczmpv1mQ==","pkt_caplen":679,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5FAAEAGkeLAqABnHw1dNISQAbuIwZOHpNSV\/YAQATA9dwAAAQEICgAD6pxaUquV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0QOlAAFIGDcut\/GsEwKgAZwG73D5XFMWVHoSnc4AQAD2vaQAAAQEICrxNhYIAA+qX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":211,"pkt":"QPMIw47hABsv8H60CABFAADFQOpAAFIGDTmt\/GsEwKgAZwG73D5XFMWVHoSnc4AYAD2yzgAAAQEICrxNhYIAA+qXFgMBAFECAABNAwFHLmXJR9\/q2J6Pslnr9f62ZQAg36o7keVHgwUNpsaSASAvcExfwJCbXHILQOxXqreX44nTobQUpbpO1CIvwxwdmMATAAAF\/wEAAQAUAwEAAQEWAwEAMPTbPcZwJ6zr\/OQt29Uiiihx7RTlLMyZgMzrIXSjRTqWbLg4j\/BoDhkVd2Y7f8IgKg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0827{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1436720898354,"flow_last_seen":1436720898646,"flow_tot_l4_data_len":817,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"telegraph-ash.instagram.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"acb741bcdffb787c5a52654c78645bdf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+0398{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0Ty1AAEAGEYfAqABnrfxrBNw+AbsehKdzVxTGJoAQAPXaNgAAAQEICgAD6qW8TYWC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":125,"pkt":"ABsv8H60QPMIw47hCABFAABvTy5AAEAGEUvAqABnrfxrBNw+AbsehKdzVxTGJoAYAPXQFgAAAQEICgAD6qW8TYWCFAMBAAEBFgMBADA6BSvr\/cw4t8bShR5c7IU4xFAIHF9VHAsMRl6WfI2i0nHFHmxUuXsf++F7l3akxsM=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0QOtAAFIGDcmt\/GsEwKgAZwG73D5XFMYmHoSnroAQAD2t1wAAAQEICrxNhjoAA+ql","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":311,"pkt":"ABsv8H60QPMIw47hCABFAAEpTy9AAEAGEJDAqABnrfxrBNw+AbsehKeuVxTGJoAYAPXxCAAAAQEICgAD6ri8TYY6FwMBAPCpLlKYD382hl7177ZOu2EdkdBKoErZQbU8HKoC1zRb1Vg5QjDTHmAvIxNP+1KwlZ1ORcua5TRhk25fZggrGS8qt8pkKiej8AoVHdhzsGciY1CbshbfX8r\/gZblBVEu4wOpMqfS0TCXEkpc6Mc7UVTFybEWDkDUNLHAQippimHjKg3baKpercs3LY3\/0wm7lEM\/sfon7WcB3WND6mmTpPCueD8dpVuNnknCV6Ej5whxx\/LrVOOGox4ISiJ7qWYD4RCwINbZ\/\/5XP\/O5\/5nF+SUnWOkPKr+OMjml5xp5gvuC\/6ngWAB8myAmAjy+wRcnIfk=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0QOxAAFIGDcit\/GsEwKgAZwG73D5XFMYmHoSoo4AQAEGsPQAAAQEICrxNhsgAA+q4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":231,"pkt":"QPMIw47hABsv8H60CABFAADZQO1AAFIGDSKt\/GsEwKgAZwG73D5XFMYmHoSoo4AYAEFPIgAAAQEICrxNhsgAA+q4FwMBAKD0nAUdv7C1t7S22EJi3PcpcF\/3V5extuHl3XmsTRLj9PGQvTEE3+Ta7x0PtQuZa883ySut8\/11OCHFyGF1WU4LdkDH8vvk85ZBsDoKNJvgmYohCXXPPV+CmnJVEzMLemMhA9Yx1HQ8uQMqOiBRMn5dhPgwmqkvpb856\/y8dz60Hyq0oXcNGI4oql8jwQW35PKzyTsrYU3RbyK2Q7+2XUxJ","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":135,"pkt":"QPMIw47hABsv8H60CABFAAB5QO5AAFIGDYGt\/GsEwKgAZwG73D5XFMbLHoSoo4AYAEHzqQAAAQEICrxNhskAA+q4FwMBAEDgnY4kGGWnb75s+z8TFtbxtuqAnXEjAu8Px+zSx6HFXrtWz0ftGuGZBQfoHKqUmEUALoPqfF0cycpTZ6oqOZMW","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0TzBAAEAGEYTAqABnrfxrBNw+AbsehKijVxTHEIAQAQbaNgAAAQEICgAD6sa8TYbI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720898,"pkt_len":279,"pkt":"ABsv8H60QPMIw47hCABFAAEJTzFAAEAGEK7AqABnrfxrBNw+AbsehKijVxTHEIAYAQbKBgAAAQEICgAD6sa8TYbIFwMBANClWvAz5t\/Fb8uGhnF1lzj3rZ1FgkPlJy4cEm8HEC92EXu9AdlySrhHm7yoxdi6tN3aMhZOTwVVrZlp++afRlj2vZlqRdK9NtFsbk40QBCLMUYLofcjA2sYeqK1jb70Mn4mSEfcIY+UEHr4xmRm6t4JxIFyy1kXHX6Pbx7v3+yCBDA1z0OuV74gMbAQDbea43IxCKZgEE9ei5e+j5QXUIy4YrEINVoD3C8X7H58qxdncHQKpIj+dM+cRt0oFmRRjHUAYTcfuOaN8z2Cr0CHFrWq","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+1749{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1063,"pkt":"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","pkt_caplen":1063,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA05iVAAFUGAk4fDV00wKgAZwG7hJCk1JX9iMGXbIAQAFhggwAAAQEIClpSsbsAA+s0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5NAAEAGkeDAqABnHw1dNISQAbuIwZdspNSbc4AQAV09dwAAAQEICgAD61taUrMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0593{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":209,"pkt":"QPMIw47hABsv8H60CABFAADD5idAAFUGAb0fDV00wKgAZwG7hJCk1JtziMGXbIAYAFiKvgAAAQEIClpSswIAA+s06eZOb9JJmldY7FcZ8MlsFAe6ZYD6Y9LYDhtsd0ejlQhydVEKejKb8eWAOcW3neB2UrSKr0VElP0W\/oCIZwbRV7yLOsok7Hd0BF0GpYjF6qR3K8ttqbQFEi59UmCaEX1s+Z8bihVTcqPzwvYcHHmj+bZXDeK5cOpRZUupTuYSjLbvLr63nua+tUilnRREZ3A=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5RAAEAGkd\/AqABnHw1dNISQAbuIwZdspNScAoAQAYk9dwAAAQEICgAD61taUrMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1464,"pkt":"QPMIw47hABsv8H60CABFAAWq5ihAAFUG\/NQfDV00wKgAZwG7hJCk1JwCiMGXbIAQAFgPdwAAAQEIClpSswIAA+s0FwMBCkBlT1E4\/77N0J+6o1w0knrifzZIOanISbuA13t4ufbAtpqdknw+mLEm9xWx3Eb7l5eAuih03zQTTp\/E3s0iPQMIJZGw6gplL0izf16zXWOTp+NmC7+06i6siTCqM0VGyy0tKEAkbn6P\/+yWU65QjQOWBvfKB\/dL4mVW37kFdSgsXup6Cty532Ow8UYNs3Uxu01hnaUlkS+AmreKWHqpMEyJXTcJwfl99YN0LJm8LDrdxDYXaM80wa+ylkJLMT\/i8YjyC0DXSpxvaxmY7XBGaDhNm9eAkX6vV6DoPBFDz7uSQzbHdkuiWGhPLPqi24RyQqSFs5ZFohdwZCLxohbJEnePiFOckRC5y7e1WQTXZWKbVBRA4J+pZnoRWbFaV20o7lnfapPxLRuMGM2gUZXhWLMBzb73vSS+Bvke6MebJy\/QVZ7pjSvy\/BBsHCxnGG8bLt2OqgX1QFJqEBLK2TyIBktpihusVURMWcHFnABL8lmxV3yxsvuUg9LyC6fXHM8huOhmEgJ5MvvF4esD\/ET4KAxZeZR01joCcHPFPuS9Keu6DTZOAH4djlNuEi4AMT5qei709XImaMl0AUtiz9h6BdVqgA4oyOaO1TkP09qSXM2qA4gyiEZdLagvIp0isLyVgeibrud6+bOPB5P5ly3kVVr7EnBzxKKyB1PJ\/3dy+FwJmsq7t4ob6wcsrnVbcqex5ZoFlG4A8RhlMhelChVuNjPxuyASosV2pP79iGufBkDJwA4HoFLNNtFeXvj3LSHcswohSO9IephcuEkmig0h2\/lIDOTniQYfdveP6p8sGZ44PL2+LvrUozreSMzlXl1qdHDWdcDQqkzDlBGi60lO0MmGyHZ7CNUgDw4akKzAXfUOmhaLx9eDR2VBKo17lFq0NEn5cxPKMFRX0AHGbUxZrdb8h3aAEjS8eRQjqkT7StGossAZnsBwaKEvqEtP01ihSoIgw8EQeYTi0O7vxUyiKj7f4NzR5GalVPOWA9RSDVMpakc5okhOJdiTGdqJWH1Av34Y3CU5Ar\/R8howSRxtSI6sBvDEWCEwnb9Y5dgjX8mkfTpfR6nO46d4htMREJHLVnR4RbKcKyxHbobhP34drA47PQHtNdrT\/97mIkJLCmY3N\/zQvf0zxNI7hvpZLTC3JkDbUqHUoJjnYaxZMeC6n+ZQ0ulaZBtUFGO1kzieEO\/JtXYg\/9NwJ4vrLtzroijD4lxTlRjZrgSX2YsnFd7hDX4mY2qUpb7mJa5ytiRPKsY2bWYgyjfEqk+2Vgw8YD\/\/OQqsFg2\/GIsQVhfA7JN1EQCRKlXTiOXkEkKHrNY5mYFepIm4nHWlqdfAIDYxzkR\/ZAbbPdQD70RnRX1L1sBMTxCYjl57GzCqSObqRGw+echfuDL\/RETndCBuCmJegLN84ydqgqb+EKuXnFzu4GmyJW66+QBdLAgmH3ZVdn3IhFZSMGHm2f67yJGmnZfQ+x55spFwoD+jaOBDNMHZOwiDHC0JC850xPvaZ\/iTvyGGMQCeCZAj\/rWiZg8cs3wzb3V1Ntm17igRAWkVyQHci39rT2xN9Lyv3lbWdkAYcUIGqX4V2OI\/OfaJe2kVCAfWR8fbyp6OK4tUDT6xvNZ+V9pKJbgHPr+S5i8sHwxk0OvUQt1kXfVkc8u\/j6vJRQoo5tmlRubLtTrl4UmgoqK3JAyhEA0DxyZOKJySBz3NmW85BnoM8sOt8POn5NzhR8tUrl3uZm14sbzs11OgZL+P6lBWg\/ZpVy+sPhuCXVy+b19dyL9Cv1ig25HUK4j5pHhPRR2dYjJD9tcl6fk0EXxuoAYrGU59k6p3HcLqp5LiqIHJkwGKJNg3LJmg2L1wfh4QBDnEqrc0","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5VAAEAGkd7AqABnHw1dNISQAbuIwZdspNSheIAQAbY9dwAAAQEICgAD61taUrMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2073{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1297,"pkt":"QPMIw47hABsv8H60CABFAAUD5ilAAFUG\/XofDV00wKgAZwG7hJCk1KF4iMGXbIAYAFgtQAAAAQEIClpSswIAA+s0c9PZpcIdo97vqW+zDXNfxkt+5hSLMDEOaNcRMP8OfQNYlAdI\/OjaYdVFTkhzSJImLWOwFsxHEMr4z1ldNgdfL2IzOZi0Mr6VsXdj\/Ko+13o+n3EyPGZZfWEW+3jo62tYZj3o2SLxydN+UaP07FHfnrKWg1nX6V+JnZ\/a7vBpPJKTEh8CeyEAFgNrA8ezG3bPGiFzbGUKz4alw+O6yxjc8PVE5DLdKsn4mJJ7LRWsGx1LZe2edYPbD7JPOeqDZNmAnfunxmaJy2ooLPYo62K3OJENRAiormRpmEhQzyCCP1ZuFnyBnrf5fYqQwgx+AmmwxtjVdrq47NGqhc2lEmv11\/6HhH5OzQDE1vQcZRwKnnqR7gFD8\/OfRF4tqcU7BfY6Oku0ulpIwoUNKkLStMSa9EsrpkVRA8eDgQioanyZi7PyGy8bvA3F0GiaAodDtsSVOB9GLRy8owX976nTVuhflViEarITMbH4afs58Rx2p\/kX+CN6Di1dmJVpcpuAWScpMXikphTkFn\/jSWIj7Q3I8M5SlL2h4d4r4nqBqOgDHBh+4wKTodwZT5NeImHmN70ZbJSe1rIrPBBEEEj2Iv92uNutSpiDWBnn24mr42kV+hcFG3oB6IC5rFdjT2ggv2GoAnu1N8jJk6r7pnv9FnO2sPE61MAi7iMgvttfLY6UYPW4JGkMJP0PaLqLshHBb8FTj41fB0fl1jYIT7Adee0C5IYu\/a5qzIb6v\/pcLZYsjbIt3akCFzjPSSSUOGy5WyVOme+hyVpkgHoNz\/wD8TzeoLUrQL56PLVJ0L3IGsvTXLwyRac0QFJJcOwdgUWd\/wnB9TYbEN5njfMqAPwIern2gMkt+mrM4CFA7yGdf1hF2YXrKekjDb4oszhct8XZ7uvH\/9xY7KRQ66Sij6T6baPQo8Hn7zTL19q9qb48PdFg5VWkyAoRDYHv0drCDdYV3vgGyFxbAcdHz2cws3+XD4lB2+O9o+UCaRb4XCQD8VJgweKIsDuty4TxuYXJPts9SPh\/qjT+ff8fhwAKO4ci4abqPyQbAJCM8rN5T5l2F2xibZo+oM4JSGbEVxscUlx+BiyBQ2OEfoAo4CkmWSwqo3IlpSAmnxbo71q07Lw9Hj373+I+Xoei8XdHu8ZSJCjLWlCdcFgilGeXqOEL61LsJfI\/BqksucXwTtLXieaVZAccFyk2Yi1ppHfj6Q30i5vi+\/DwRPT8CKZtoU3ZjsN6vtjY6FkOHq9WQ3j0hB2TqfjEL9rEc44sipkeBKGl6SOERe0s\/u7RnoW\/uHb5zAqgngDSRUi2Tr2jEdlxljG7PKNc5o7sP4H9iMdycA3Z8EzbHryjRO6FKldJmsB+D1y3gZoSUNBZRax6I35tpYAaZ74HE\/SXUi6MdevGH0LF+nL+\/srldyrxE34Y2rHtfKTNZCR+V7EIIib0kvb70lDK7NXMYdc7ivaZv12714QDSUNgJLjeSHd5o+Ahvrv6DorDbdPw\/JhK\/ngErDQMFmfQC92KMgcmnPyc59ZhuKJ+9RPPHf2XbQw\/Bl29MwMm45Vgoq1kk6K7PG6Ck+O76jgmz3kuzlFOmsy+rF6giC9x+Be\/ZZczNRg8ee+\/TAhXnw4s\/4doRa5LK0VGwjB4nlFkucQGhA==","pkt_caplen":1297,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0a5ZAAEAGkd3AqABnHw1dNISQAbuIwZdspNSmR4AQAeM9dwAAAQEICgAD61taUrMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1436720900684,"flow_last_seen":1436720900684,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38816,"dst_port":80,"l4_proto":"tcp"}
+0749{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":326,"pkt":"ABsv8H60QPMIw47hCABFAAE4wXBAAEAGQn\/AqABnLiFGoJegAFCP9SVkp0jV34AYH+olJAAAAQEICgAD63Ga3vWjR0VUIC9ocGhvdG9zLWFrLXhhcDEvdDUxLjI4ODUtMTUvZTM1LzEwODU5OTk0XzEwMDk0MzM3OTI0MzQ0NDdfMTYyNzY0NjA2Ml9uLmpwZz9zZT03IEhUVFAvMS4xDQpIb3N0OiBwaG90b3MtaC5hay5pbnN0YWdyYW0uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBJbnN0YWdyYW0gNy4xLjEgQW5kcm9pZCAoMTkvNC40LjI7IDQ4MGRwaTsgMTA4MHgxOTIwOyBzYW1zdW5nOyBHVC1JOTUwNTsgamZsdGU7IHFjb207IGl0X0lUKQ0KDQo=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1436720900684,"flow_last_seen":1436720900684,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38816,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-h.ak.instagram.com","url":"photos-h.ak.instagram.com\/hphotos-ak-xap1\/t51.2885-15\/e35\/10859994_1009433792434447_1627646062_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1436720900687,"flow_last_seen":1436720900687,"flow_tot_l4_data_len":285,"flow_min_l4_data_len":285,"flow_max_l4_data_len":285,"flow_avg_l4_data_len":285,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":57936,"dst_port":80,"l4_proto":"tcp"}
+0740{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":319,"pkt":"ABsv8H60QPMIw47hCABFAAEx0CVAAEAGO5vAqABnUlUaouJQAFA6kgvvKZIczIAYH0cqkQAAAQEICgAD63FWCuc2R0VUIC9ocGhvdG9zLWFrLXhhZjEvdDUxLjI4ODUtMTUvZTE1LzExMzg2NTI0XzExMDI1NzYxOTMxNzQzMF8zNzk1MTM2NTRfbi5qcGcgSFRUUC8xLjENCkhvc3Q6IHBob3Rvcy1nLmFrLmluc3RhZ3JhbS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEluc3RhZ3JhbSA3LjEuMSBBbmRyb2lkICgxOS80LjQuMjsgNDgwZHBpOyAxMDgweDE5MjA7IHNhbXN1bmc7IEdULUk5NTA1OyBqZmx0ZTsgcWNvbTsgaXRfSVQpDQoNCg==","pkt_caplen":319,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1436720900687,"flow_last_seen":1436720900687,"flow_tot_l4_data_len":285,"flow_min_l4_data_len":285,"flow_max_l4_data_len":285,"flow_avg_l4_data_len":285,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":57936,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-g.ak.instagram.com","url":"photos-g.ak.instagram.com\/hphotos-ak-xaf1\/t51.2885-15\/e15\/11386524_110257619317430_379513654_n.jpg","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1436720900690,"flow_last_seen":1436720900690,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.186","src_port":44379,"dst_port":80,"l4_proto":"tcp"}
+0748{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":325,"pkt":"ABsv8H60QPMIw47hCABFAAE3v7dAAEAGS+vAqABnUlUauq1bAFCj1oFKfMvpWoAYDTz8dgAAAQEICgAD63JUYaBjR0VUIC9ocGhvdG9zLWFrLXhhZjEvdDUxLjI4ODUtMTUvZTM1LzExMzc5MTQ4XzE0NDkxMjAyMjg3NDUzMTZfNjA3NDc3OTYyX24uanBnP3NlPTcgSFRUUC8xLjENCkhvc3Q6IHBob3Rvcy1lLmFrLmluc3RhZ3JhbS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEluc3RhZ3JhbSA3LjEuMSBBbmRyb2lkICgxOS80LjQuMjsgNDgwZHBpOyAxMDgweDE5MjA7IHNhbXN1bmc7IEdULUk5NTA1OyBqZmx0ZTsgcWNvbTsgaXRfSVQpDQoNCg==","pkt_caplen":325,"pkt_type":2048,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1436720900690,"flow_last_seen":1436720900690,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.186","src_port":44379,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-e.ak.instagram.com","url":"photos-e.ak.instagram.com\/hphotos-ak-xaf1\/t51.2885-15\/e35\/11379148_1449120228745316_607477962_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1436720900692,"flow_last_seen":1436720900692,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57965,"dst_port":80,"l4_proto":"tcp"}
+0748{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":325,"pkt":"ABsv8H60QPMIw47hCABFAAE3iBFAAEAGg5LAqABnUlUaueJtAFAE8EMOWjfyZYAYD+bdMQAAAQEICgAD63JZ6ogYR0VUIC9ocGhvdG9zLWFrLXhmYTEvdDUxLjI4ODUtMTUvZTM1LzExNDI0NjIzXzE2MDgxNjMxMDk0NTA0MjFfNjYzMzE1ODgzX24uanBnP3NlPTcgSFRUUC8xLjENCkhvc3Q6IHBob3Rvcy1mLmFrLmluc3RhZ3JhbS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEluc3RhZ3JhbSA3LjEuMSBBbmRyb2lkICgxOS80LjQuMjsgNDgwZHBpOyAxMDgweDE5MjA7IHNhbXN1bmc7IEdULUk5NTA1OyBqZmx0ZTsgcWNvbTsgaXRfSVQpDQoNCg==","pkt_caplen":325,"pkt_type":2048,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1436720900692,"flow_last_seen":1436720900692,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":291,"flow_max_l4_data_len":291,"flow_avg_l4_data_len":291,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57965,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-f.ak.instagram.com","url":"photos-f.ak.instagram.com\/hphotos-ak-xfa1\/t51.2885-15\/e35\/11424623_1608163109450421_663315883_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+2306{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0wXFAAEAGQ4LAqABnLiFGoJegAFCP9SZop0jbaYAQH+o19wAAAQEICgAD63Sa3z3b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2306{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2305{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2306{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2309{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+uIFAADkGTeguIUagwKgAZwBQl6CnSOwHj\/UmaIAQAin7XQAAAQEICprfPdsAA+txCJvfajwwxvj6hH5\/Nee10nkkk16fFlC22RGIbWvM7AFuNSOpo1afR5F+k2FkNmu3TK7DGidZzp6iB7uVO5rk+c5o2NmUVbpowSN\/AxHOCJbJSaF2NNFj0CJdFPjrkB\/osYeYp6Ln98M6lultivdzjpoHjlbE5NY1RjF1mm5unGGDsPP1RSQ2ctKTLcTUKPjpRREnhTLwOh2GwQKrq1plVdXSuUbM1Pyuu65z9Ofg0dZ5kj\/n9DXP0ZnjvtAmQCoFRjzHf5mgAYGaJm\/8g9FxcNkM8+mRAnkbsaacZQ1E1UWXFoNm8PPrkQF67OhitgP00aYSp6NldM9\/HlNTKp2c4O3x2OfMgZrS+a7GnvnldEG02d4qxdrNa3OFxs1OlCZPQTRzZaDut3I0bZsSVCJDZqbN4ER6eYmkqd\/n1orcTiOaCELCNshXjttHXZLCLpFVOv1rmQTVbGO0k1aXSHdEg7KpNFtjlgTjimWpgtvWas2K9zLaa\/StYb2pK7MtLcVN1KXolCAVo69zkR+2r78+HftB2mWekO6ebzmjmrcnXYjqJNX+qxhdtBLKpsk1xMc+eynRittarSx1nNtJJVVLrKjruiq1mTlFzKsRDWk5OvOpUM7Y2Enc5z+vzBdqwotyZhR4ZzppIsyzeeXkaKeml6cWVC6vHUaPXebGpdi0GH1Fzc53RTVfNGb0Xhmnsbvhp6KgJ0O3M3YmtAAaJ6MfQ8sKl6+IzrshtPP7qb55eTtghHaro5sJDcpbY3w+uzUurc6RVYHlSUtz+qzVx0md0yOPzTFe0zsoesz9WpZjWRkFJrZmMCW7eDQ8OO789fp49Ia+LhdE\/osQZy+k5Ot7ZLfZyUp7ckaUkISzWUsT6zHfFS7AdriDvLBS6zRnlkrNSfHosIi56QLHHU3JRaCJPFcF2vU65nRrBPlrcF+KvEqMksVLNamMPHNaBGuz051alUlIBD6ki4feHHK101ZZEsu2tJwWmxoDFYlT4CSW3m9sP0fTWLo5vq0Teefai8Qx0YYvLsrqhyDGf1AVlXV58ZGhSQY+LPg8s\/XPZVsrsE43kwsraBWArjftxMPN02Kshy4y1jUrGmNXSBagclh1qvVLB6ldtjCEM2pMlzdoBJGOKEWqBU6pa5TS6GQnjtn5aWr0jNgw668pS0U0+ixWkvRy4hl+GpqUbME1IwhnkWhJUFcb3ReY+kdfHdWTu3jggqBM9NM7K3cdu0+L22HRb5knVyySskjS3INki\/P995n6Jw90UTY\/U8qaOOUcb57E1BOjYuzHWlTrjzj2Zd2o5rN3Cz5efvF4ExdiSJqZXyxca23JjKhlrWZTTNuBbSSTQ9pmmysyw9qSWo+aVJFFUtV5QsuZDNXKzIWWuDsuMrX1g3zvQz21xOwTBB9gDuMvrKpLbDzqzsCKeC7fiYsPYJkEZ6ppmjBO8+rb5+kg3visuf1N+az9XZh088+e+49JH34OXq80LE7OmekD1FTywP0wZpjm9OpDPfOBttTqMxX1KUn63HXefotGMccTfkyNNstWhRzxUWxOtoBVNmSoeh+c9fGS9Oz5nOr8UUKpQhepWeJvmy2+OBvbwbFZ4l0M6OgudNViYW1ti6gZpzUB7NEJrRF8UYeerJ+dGujHSuzvDONwxGazG4zmj5eqZjoPY8WaenOqsrTjm7jK5SWMg0gsdWajdC7dhJc\/T1mwmG0UbKTUtNkW2LbUFapOOxLnOxTOzKi9VkydSvfdUjqxAfplGsl1lGa1LNUppBwHq2Wc1pK+esXF+KCFqxHbYGUnHEfI9fMaW\/aTrBpazRyFlQVyrfJAOs1B5OlZkWlHltPx6M7Q2gfTLOzkYunlpel+P7DHfUgSIVGenryaRc1WUNZ3V0cT40GSwXE=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2307{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+uIJAADkGTecuIUagwKgAZwBQl6CnSPGRj\/UmaIAQAininAAAAQEICprfPdsAA+txqQTmLFTo5IpcegmEMjbyHm68emYCxos\/UQ6Pz6yPfUgyZbWKJe05DJJjLn3e\/wCYeh821yOR2eleKTONVHUe3xIR1M5ee\/Zm73VylsvEPmisNOSdDFvPRYa727kLtTobg22Kvn9Fgrk1VhzzS73yz0JPQ1xNmLCUyIOpM6vMWsenTVi6+14YF15tTVvlCvP0Ub8zeXrhBHbbWG7bQ6Ziz9ZMd561SAVin0ekI9tpj7MdjLUSB2IvbAJbpybYlrrV5+jomVxObyXLmthqLFoWoFmCphzDLbagIpeprlXvxRDKuA6DO61ExW8n1ANuRJoRauMYODn7ohEZyROxnrNPSbD7Rus5s+TkS83o7EatBHHHtTE5pNMs6Bzjt8SIzNfScX40T9NuY7fNvrSwXPleo0c9QKqLoM9B7jFtVeEtCNH69IO5AmcJ6DaKDp3ZVDSLTDHbHEaHPaHz70HO3kQNAYhb+9grkaegdgp4ZYRQn2zKCrFSbKUbi3FPP3xOuJZQJ9VboyV2o9DQP56TTOckLzJnK9XPYGCNci0apU+fbZzTJhqHZXFFHcvbHTpsLAmx1cnq\/ed16XorsCgbh2CCB7GnnJzTPUtrpnt3c4UoIuUZgLqierk01kGUw6L7YW5adUuLaBA9aC6OWgfz8umZtFt4dFRSck1moCjNch7rkzQpp4aKB8c1TXZOPqX1nOvNS4ZVU1tJPnfoQmYlA+n5mr1XjPrmO14FZyKAm18U3fRh6bitj8\/YdHqmnwBxG1B38Cnq6JrKqibxvJ6WlVHb84SodI1Pln054xvUarLegeQxOiqKyeihRMVtM8D7L5N65cZsuPlQS8y1OIKJqKliyGlyW1zvTXMpo8tGYv0zwu5HaELd3y0sAZctTIwoOm1kmKuak9SOWWqPuMCxmEvMY6YjLz1PQSXONumeqYW2CKZA5kZufYiMLDLmMBpKekZa9rMRpkNZvgKNjHitNjqVmoR47s66Ez1hkFXejnOpzAiCaAPrloaNeHbDYOoE+rmra\/DWWgOgy5zn6dvE1txQpFYNc6bVsuZLlm3z9MPL2d1KRBumYLjFjSHFJLHJ2V4nsmqgo\/2mWSsEwvRhetV7UXXgt06mtFPJeQbrkGuddHq5y5wNP5XqPo3yE1CK1ASaoaTO64AttLWelLzL0V1TkDBZdc6NNZkGqbbM3G22k1DZt5q84vP9ZV2xD6ivPGl1YILzctF02QFapIsFe1KzWLBenZypw5Spo6A2nxuoKs6bI7+AfDdfLp+a+l+Pa42ruR0d5Gq9+SNBr3SK7rgVMWsiB6CNYVm5OtbjJSxUt0DpldiV2mVZhWwqzWkqXJtsAtKk9BndAHZ4lhtM9xUz22azXa2rNZuc5RTjgNX8dr+X1gvl6siQI7Dp5c8D9OFTWJqasbtjngOkzO2O44KydbM+c0GmPWbMcaayIRQijcAhtI9dx2iijHUERXMZm1lqU0\/nl7fD0fI1AeemjkzwZHpveWpc+01LFfs5XxV3XI69BYvOaKpGFhrq1KBks15jXHll+UV7aeb6N8DqRitu9893ubxtrOaXbLyD0fzf1nbIjAIdwd2rnwd\/SNtTmiRPm7kbdM5QnF5aanu65R37V\/LUXaIOiwk8lG81rR2WX5B8k1qog5aKgzpkTcZ6IDe6MZY74ZMrrvPNDL9Ds5c\/DM+Sel+bzVAmKqb5HbOLMS9eA9E88jSSvpMrpncowxkkL5Hp0zxDKGnOqlrWc9CtkYM0y0FnP6KLMVoZMN\/MyIY51c7Rc1SkFD7CjtgK9Lxewz0svWLDegJPBXJ2zlL83r8brPN+bpK6zG6rbHS+fbPOS+y+uFa5BsrtZdIwOqIZu4TRVaQEmTXosUX4TcMsyRDUGUqiNR5VyPU=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2309{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+uINAADkGTeYuIUagwKgAZwBQl6CnSPcbj\/UmaIAQAilNWgAAAQEICprfPdsAA+txV\/mh7l6tTXAMVaTNQidcdsFHy0uuhpp09ph86sd3n+gL59Cnt7HkAwPY5PKPSNYIy26F5zuyRrLUzBRk2x83sHoPM9FRVsdNUISV+1mC9TTVnjbWtEqgqaMkjG6nNxlaUmFZJNDCEYQ1PllpHrw\/R0+bpGzZX0JgfjXhrn1mpKSVeekBtxu8XGXxQX8\/DrhbTP2yiErpwH5QwJ1xJ2xxxoo8KKmtFkCTAB2Z46zMKFJTpqspaozehq1alRrsUPoXHognJ2ZNNPaI4dGfboLQ8tWP5TXFswu3rja23nBeNSclDmlHyVdMoWEL9TZsVLGO12TNJGhwfBo2hhJLEWdxOzyPH2U5yJLq5cqQMCqkXniek0yw2t3nY7eXxeqhrgYQztlrbBtdDjfntvV+NaRtMTv8VaB3adPTLVgSZKNQ5UGYbmkpxzRABo2hN1a+kEYXKzeNJbGrLw\/beo6xQP0i9efnBHSS6ZR5TVSFYu3p3Z2FNoO0zMwXK2dSNkYwLVOwOfMNHpat52AxgrGmC9FpW2ZSrbA1B47k9hF28sczUWIvSXKn2DPwavm6PAvoAQEqdf4r6WibyY6sn5nfFWejn1lwPBntXvZIrtzrJWNzco5ZwzWnF6gAYqTN6Z+uFsbpctYyefMKvOF4Lpzb21n8DVelafyze46nsVqsK5otJkbkJsowMvZkfMp8tvR5cXay2HOKnevk8\/vaRlR5kRrSUi7qQKa2K1bUaWQOhmJzt1xKpqIQFZ6HCMdOavzZRqrVCieax0uUPNqXfx+wi\/LW3HsJ3y3Vcnbp\/LNVRqSqyHifLdDtadTpkFvgI+AexDmDB+9AtBc7rDVrAmLYO4S2WSGOtE1nXLGZgQtrIBv5akYatiNK+E0HnHRh6Q0bu5ePJ6x81gbsjrh6jrw5mRjxZ\/Q+T+g7Y6R1G1jpEPJDrmGIcNcbOyIPTokOnZjrlqcKb4RSTWgrTRSzdEfVk1wO56bMB79nSOb5exNBldfNBxul8x2web85L74+qkboDj7IVjk0ibInL1Z4nQw3nF\/zva5QrcG8I9w2sVhaprAic160qvF6SncvG8EJW28adhsTJy0LoRuckxnogDNjFoJfzbsc76D0YZQ9lbOPRsbWbuuFNhr1zjq5+1l2vbTm5+u2xlY0IDkaRxAQzfiNVLqrPX1h5JKottyq3nyeavMERpaJVT859gydx5z6vVkapz0rc1rAYUntnIWyTXPr9PIug2UWKvp7XLrnctuvibdxngHoQeprx3aQzwfcYZUR8+2GbvPQ4raiyzFa0Qi9YOkvYawRX3pxsq1gH8TpVLQw8ppnUtCohGzGcLRoIIUzdSmeJGBB5dPVkZasNi1hOzVPmeb9OxGipnM\/qGgcJCFMRsLI9EGP30TeblNgUDdqCkRs6dI1ncMiARX67HGnn1i7a6OawIoSEWda\/wBCy2yhshOr85j9I890xz5EbNUz0CgmpdNd9EawYvVcjz2P0Oy15Sels1Wdu+t38nm71YbpnlTNkyPyaciLZbS7BrgPNa30Wo8\/m2uU5O3zu\/6WCnbzG36AMvDJ1vSxGeowowwAYXuvKA3Uw25h0S1hEPRz+hlsQVx1FAoQ2uNzQh7TCdB1FMnG9yZOwO1WG2E32RNTeGgtEOvjIXsmRVNMY8gMs9w\/XE9SDpFeiOxuj597k1YjNBw5IbvjhEP0dJqSXpFUNAnwVKZjOBsLw30bO8PZOBk0Ea+kngYfTK9wDO2+jQTpMzm2hmz8668vRJKcMakoW33NGQG7TEo4bXApdypKNSIAhIwJQ01EWC11t1SVmAistduPFFpvN6CMTcbKmPuTQ2AqQVA1NpFhSYtmmeyzU1eWV0WWCqt3ZxWjuDEcGHc2APoWXvLN0NGFuGc=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2311{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2306{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2307{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2310{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2313{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+uIlAADkGTeAuIUagwKgAZwBQl6CnSRhXj\/UmaIAQAim2fAAAAQEICprfPdsAA+txtDy3nPrnnFT6PbA2YtAlrVMwpS9VCzILLzd4IVMqfMk9KwOixV83nbkjRktiHyGAU1s62WNY7SxEbCMtDrqdQIjq2tc566FBiae1powUOpHayB12RJTXpev8j9D83uIU7AXTFIjGbVWNfhz1yQeMtdWVsVasORtl1pOmRhz4m5sjnqQ2mYvNY7UU7ot48dWz1ZJo3J5MVunC81p+jj3OZmdVcn58dcV62yJiz2Mz5MsUctCRk3oMsTEaZI8tQeYujpRzzE26sNJ7XV2GdOBky3v563WckHgKTm\/U63efEKlJPXhgxsemk6plrc6rUC+NeBa1EwIiInDSQqxUrjCdJawV9vUZ2kNc6cfDWG9LsDmkk1eoc7qbLBapvpoe+wMQN1tE4ii8c1E+XN52kXlgdNny1CwS3H7zFtW7Y\/Qzdy5WbKmDvDCBWjd+jGdsszaCwHZGswUtxIt1IyU3WI6XEp7LJVKjGSlwdTXka8U0tkiU4tmbMsohwfjZOkjcdrjhlapEMQD0Y+nXPLN1pOjsirrdSPH1iVrZ+3UziyFAdaxTvuaJgOQCW\/U6KfXngRSr2X099p\/ONjnpfG3YZYUdth7WOr6qq4GxUn2jFWos3rbInT5756LSZWoH38TU1w9NFjy03mesQVBDopU0auhmsjLq5xZ2ltqreWkvTuc0Uum0LW48ryA\/bVyaePP2XOP0OpnHkrFuwqH5\/ZUM6zlLZXEYjQ2bW0LS0ImaxBfL6jXIsE9BxGd0yeN1tS7SA9HFW2zUJu9IMu3mKD6ICpqibJR09I7MslVfTa02U0IcTuaFT0Y+CyiDqlJrc2gWhmnxyStebsP4fTM1V7ZJgtvRs57P8i9X8nuCHsvnush3fM9NnGZ7aW9kwHTLhU44zlZoVYleVEFtDkrd8fpc7zWO9VyOmYC3Rs6xstP5NoVWq8302EqUgpPqDSs0s3h6xAfpmXJgnTZ6UfLFWB54wn5u30Gg1kDkvAaMTvim3xxAqKK8CJpUdJQaovWsKXWgZo10AWiYpYmqSz1xL0DnI2\/XH1OoOYsnNnWXKkWpfPWQcMrOuKxCjTFq1DvmrF8FWDTAxHpIeeSez5BoTUOGEB6OsoZalg8wXyfROkMMSqCNeVnocpSqoHfM7c84O1GprhiaoON1eZch9uPKpkLccs1VgtupQB79hxk7B\/Oii0PnfpaY+aREUeFWALySEZPJavp\/mOsPWhqhakxB2Wtmai8WWwno+E0n0q1aoxdEmEKRbfN97i7jTwE+mqVq46aLWATWiINsVSXuZy20SoSERg2n8sMvbgxY9onXJPNFt1dYWjZc4vUlcMbDoKjBxkbWEwYUmpVOu0gNWxZCWfoqTmrtUiksDObKNR0zFRyBsTj1RO5lDASr0DUt6vdANn9KPRTv4vRDr5ciGuY56U9KwInlCxeQrLqxFC8uo3S2VWABazcUvFL\/AKOTFhtAbjFdn6NJLSIDqla0GVwvouHHTn403kNRY1gUqNUanei38ieFHejczCVt2xGNJHmDy2e9K4MFJsGhCVq3VUEsNgIJ68TCLhxVoTmPQeR5nZ9JjF4zc0GTc+nGM5LjR7Eyl2\/LNPQLNaZYmSQXxxNieRbvCaR6YFDtllyxAKqqyZ30NyMuhqs2dnrjYsnMHKXMXnhzKa5FPTfL\/WFQuHQA5rQgLs6eQuZctU6wjBPNiwRizrnhIfRQIZ8YZGCstt0BWWF748Oy4AvO5cm0KodoqpaCaGBsok+u0ow0CtB2LN5pz6LHkj5QfD+vY9wJJgoU9NtML6CFKawOmmHasid4Ux1TEH1vlYtnnhenHLfs3k3XgFWkarSzodB10BbJLzlqEIAS0IpJkxEjEUdO641lq+jpDyfaGgrqXh2dZr9Ni9k=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2304{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00CZAAEAGPJfAqABnUlUaouJQAFA6kgzsKZIiVoAQH3QuLQAAAQEICgAD63dWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2251{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1445,"pkt":"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","pkt_caplen":1445,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00CdAAEAGPJbAqABnUlUaouJQAFA6kgzsKZInuYAQH6EuLQAAAQEICgAD63dWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2321{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00ChAAEAGPJXAqABnUlUaouJQAFA6kgzsKZItQ4AQH88uLQAAAQEICgAD63dWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2323{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00ClAAEAGPJTAqABnUlUaouJQAFA6kgzsKZIyzYAQH8wuLQAAAQEICgAD63dWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00CpAAEAGPJPAqABnUlUaouJQAFA6kgzsKZI4V4AQH7ouLQAAAQEICgAD63dWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2312{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+u11AADkGUtZSVRqiwKgAZwBQ4lApkjhXOpIM7IAQAkvC3QAAAQEIClYLL1sAA+tx6lr8zYVeno+Fm49ObB0+4TPS3H0w4+jNX4xm81u75XnCS0xjNu8+9TVv0F8s+8fIqEdh9g8dbrss6A4cnKPGm6egflv0RDZty5+fnflTXk8lUG6jv9Wv+cKrOrZLz93HKHRx1GzZr5aIo2jrI3fRtVuO7J2RyHtTQVVmXuDUhXxs2NBY9b660AdPup2ZlabmrZb7wNFTGTRm9P8AGnSkF1Dmcz9K4LuZ7rL8v2KtNYcvsozOuOILtF3ystwMbfSO2+b2XRH0UqvIGw6rN3bA1tSs8+n4Lz9yr6+1axobl0nfKPiYHRy2bKp1drlbtVy0RfQhd1d1V0SRayKbbbru502UZFzEKJKQCsSUJfAlYEMp\/EW1YcyKxK7S69412FF1eGXjW1503U80dqGFA12zT9ZlnB6eqs63cJ\/Us9fXsbV9MkIhO4ExTdvLJ0LlRTubTZy2FmoiYtw2JP6jftjbqPYIOqb8vCO125s7Vc9pM1ULDB4hss2V5OVjiNlgmq2zCW1ddE0hzOjwKaf1u6y1wKcSURNCrSjd36fk12dAVum4tU045YMiazqxHuF6ZjYdSmKhb6vOvDIFdTeUQ2UWNS9dcDOxRmxnVU2qVtqpQuOVCWv8GYxJ1Nv5TEXkRyCEJOLW3lxziwxnsh+M2sduXlVKRRR0L5t7Bbi5GHSqytxvOXXc89B50onHSUFKrJlIZ8UjE5CU5FppY3M9eNGSY+agoaAyh2zOxtDVkpdTJ2Kj4ddk5LQGbCRuQs1Bx6Iq0SSsZcKpT0STTFoCHCRaTIKUS3LYYo\/LwhZXPLiNoxs15j7P1qPOwI52Km4AFKIIjlCSficmNjrCClF7GS+nmOYiQysyOwgZWTE68lkkicU2oARkBv4rqtWpp6NqsssZV4Ta0W0SIKRhbC5WbhJouNNvUbRUL1EEKe9hospyWc5hSadRkBjtWCEaVMwSxZL+BIwubjZSNlW2+xJij8ht5SLIZYUrRlxr2LVW5iPndmbEipdlShZ+MtLjUwZCckYFwJPGTjkjxsvEnVMSVbcHYY6OZUsthVhCsG4443aneknPOLVzNhZ2Jsy4ikOuOdk486TwMI8wMavy0U4vsLccDW2EyJJtGELAwDVycrENJ8jkBZETcY+EoHdGvbbCyoVecwBs40jG2QKy1ixOquBAshIMtprscz491q21KRilIElRF97IfjbDtOJnVj5TL7MfKwclC8ZaAmXn47NoxZ+AvminOssZGXNUTlO1SpVjstSg6xjSsg4xiro9NVGJvsZXKmZ0xDpYSTRZWMjGDU2eLk1W50ZNRNdn\/8QAOBAAAAYCAQMEAQMDBAICAQUAAAECAwQFBhESBxAhExQxQSIIFSAWI1EkMjNhFzQlQhgnMDU2Q\/\/aAAgBAQABBwEa7689tDWh57a7GQ120PHYvI14BAwRAy7\/AH30NA\/5kfbXbXf\/AANdjL+BENDQ1\/AhryPka8DXga2NDXbXbXka7aGi0Nef4aGhoGNaP+BkPn+Wu30CIaH32PsY147fAIa7kQ1rt9jQ121sfQMeT767a8jXfX8dAu2gRduPcgfbj47fQ0NAy120NbGtD4GhrufYu59tDXb7GvHfX8PoffYu+iMa7\/P8CIGnv9jQMaB99DQ1sEXfQPtrtoa89taIaBEC86H32P5H\/YL5B\/I+h57EW+xEC768D7Gux\/4Gh9DQ+O3wNDwfbXb4MEPsH5MaGvIMvI12MhxGgXbXgaGuxDQ0Nd+PYhrz30NDW+2tgux9v+j8D4Bl214GhrQ0ND47fPbWu2h\/15BFsaGgXnuRfw+C7a7GPrt433LtrZD7HEa7F8fx1vtrx21sF8gi7F8j5GvI12+wZA\/jvrz20NDQIaGh999d9a7aBEPgfQ+O5+A=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00CtAAEAGPJLAqABnUlUaouJQAFA6kgzsKZI94YAQH6kuLQAAAQEICgAD63dWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":186,"pkt":"QPMIw47hABsv8H60CABFAACsu15AADkGV+dSVRqiwKgAZwBQ4lApkj3hOpIM7IAYAktQLAAAAQEIClYLL1sAA+txfXYi2CLQ138dtDXkfQIt9vkx86Gu\/wAF2+T7aGh9jWuxjXgGNee5ee2h8fwMhoaGtaH2NA\/A1vtrQ0PrsZaIH4GvgaBAzHz314GuxEPIItD6Ggfgxoa0ND6Bf415H2Nb7EPgaGhrsZeBxBENA\/j+Ou\/0CB9y8D4P","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA00CxAAEAGPJHAqABnUlUaouJQAFA6kgzsKZI+WYAQH6guLQAAAQEICgAD63hWCy9b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2301{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+QeZAADkGzDZSVRq5wKgAZwBQ4m1aOH8QBPBEEYAQAktstgAAAQEIClnq0tgAA+t6yOoxEtjJYMe0j6G03geIuahaK1oTHsEliMMTZ8IV3w+jNLnJcKpRQYoNH0Q1owU7ElIg1BvY00M1sKh00GrYYaKmxapIfSuhKlliV5Ggz2ZEdUXqEuURYhcRmGdF6HkVYKkoGKmh3bGvRvDFLCRD9sysMedkSiftieCrscIysGDeGZuR52JNFJwy1gdIqmuE8SC43k2NNmXvnK0LZ7Q9kdYKlspkg9CZoqhXWJtbKpgafXBrJWhOsqdlcjGlMIf02UEyYUEoN\/R3BPJjY2bCG2s0iEvRRNQ+jO4xqKDwyI0ohahosjThi9BIrI7gehuDWUCCJLBXotaGI3Qlg0wJ4IVBKoTow2PA\/UqeR2ILqdQ62OGMraO4hekPhuNoceBSE3cCJmskaK+hP2IZK1kxs+D0NwaUQbYMYurNlQeMoTLYsrBUslTyTGB4bJjIpUh1Csyxlol2o3gucCaI7VzLkaJHRLOOI9DqwQy9GXvictCZRvBROF7M75lwMNqMbA1Q7yIm8GJWsFybGm8jbOi8hKnkr2M2jAtIEustYo61E\/YmmP6L0b3whJbGvRDYcGUzATfFIDVQIw2Oobux01kTo0N6FINdmGBYdKOUophoRJtodkbFVo9gsdiVGqholRuBaWjGKEmDKSSFXnjQZrsSagmHGQ2V6YSOqJlWjZkzB3BjS9mOWLBMSDwqGspicFTSY2vRnKTsOEJT6izJU3UzZMYLFNbFHhcKrhEElmjUHgsGw3eFliqL7LktKtGhuCzshGkdcMxokwNDSEy0x5WRazwkNsaY8bLNjG6JXCGsDRGmNiieYQKFSLNMh9GJBBqDcYmQ\/TLYs4Y5okeCCq6KrROsWRPA\/QgqexNDwJeyORUtLVhijncHacZgTImKglDuKPKPiNMVuBBPFGsVisByZlsa7HsdRZxjrKIyEiLkwMS2JuxPlJTJB8H6bZlkrSN1n4byX0J4EzWxRB5yNNiRbIpUIU6KJCXaHjR8G5KJ9CS9nWBuYG8YG6i9HshCfoTL7I9i9svs2S0igzvAmIqQvhrDHLkQf6KrgpKCatLEWjeRJbOsDeINKDg0ui5F0zaibWWN0bpi9BWZoEHKMpILVMCwVlji1gwwlSnhCVWC+iHqDPofxpWqTM0eNJ2xqh8YRjmCGxosC24xO6HlDsYiabHsVY3Q2j8FwXDnhHTop2I0ZBKKmqh+g1MksMLJUzHQ4tCWBioqFxpAlEhOSDo8Dagmn2S4NI9pDj9P0qphlFmxt9ob7Q4fDeWdIS9mSomrgesCHk9xVyISbeBYZYqOnkRY6Qi+xNoTGi3wtcJ8IdEGuiiJs+CUCzHWBIwyehKjUWCjSYQ2xehJQkV4bmCDSE3ajpBI9MbbKsnYhMqSE6SoSmxVZQz7F7Cxw52a0Oi4wa6G80SyNISCZNs1kTWjAjbEjBSIX0JgVNEej4YLk6FUNkLSpOMieS4G8EdEeg2KpGUxUsEchDaYw1FYKjISLZtH5xdj6MjnZrR0KQaPJCYqtCpZNBN3Ym8GJNCRoeRqPAyVRi2Jvp8EoJ4hRsvRtEZTjFNsRZ6Lg1GM+iyL6KpBqRssXcg5w2Ui1l6HGqjFFnaPpYhNtEfI6Fk9p+jWy+h1jWBucKo6btHQ1cIbLY6jKwI1kTtCe6OF7GyQ+luTvB+OCeRZE8Cjzw\/QQ2lsbbGNL0REErSTiKuDRksFTw2JZIJTbY1oaZGzXwTzsbdEiLmog0Ji7YqmN+hroiag0PQeUVDI9mcQw6G101ZROVMQtGQ7eH6WaIbNDwsDsK10NpNDbcMrspisEOJISYYqTRU0RDqgVWGQxaXIsvmpFmWPDA8JDDqHRSQsC9DYnnBYhpbF9KmJvaYk7Ktm8jfrhZcJnL5r4twNjbk=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0970{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":488,"pkt":"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","pkt_caplen":488,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":94,"pkt":"ABsv8H60QPMIw47hCABFAABQv9ZAAEAGTLPAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zLnlfMypR3zMrtF8zJKnfMyYMQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":78,"pkt":"ABsv8H60QPMIw47hCABFAABAiC1AAEAGhG3AqABnUlUaueJtAFAE8EQRWjhz\/LAQE\/cuUAAAAQEICgAD64RZ6tKHAQEFClo4eYZaOH8Q","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":78,"pkt":"ABsv8H60QPMIw47hCABFAABAiC5AAEAGhGzAqABnUlUaueJtAFAE8EQRWjhz\/LAQE\/cuUAAAAQEICgAD64RZ6tKHAQEFClo4eYZaOISa","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":78,"pkt":"ABsv8H60QPMIw47hCABFAABAiC9AAEAGhGvAqABnUlUaueJtAFAE8EQRWjhz\/LAQE\/cuUAAAAQEICgAD64RZ6tKHAQEFClo4eYZaOIZA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2327{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":94,"pkt":"ABsv8H60QPMIw47hCABFAABQv9dAAEAGTLLAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zL9vfMypR3zMrtF8zJKnfMyYMQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":94,"pkt":"ABsv8H60QPMIw47hCABFAABQv9hAAEAGTLHAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zMT5fMypR3zMrtF8zJKnfMyYMQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+2325{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":94,"pkt":"ABsv8H60QPMIw47hCABFAABQv9lAAEAGTLDAqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zMqDfMypR3zMrtF8zJKnfMyYMQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":94,"pkt":"ABsv8H60QPMIw47hCABFAABQv9pAAEAGTK\/AqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64RUYwVLAQEFGnzMtFt8zNANfMypR3zMrtF8zJKnfMyYMQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+G25AADkG8q1SVRq6wKgAZwBQrVt8zNANo9aCTYAQAxSztgAAAQEIClRjBbIAA+t+VCTDAmEU9Ea7bYVBwe6PCqh1Q2tVKk9jTumGs13aIyq3oaNtSm1Kdyr1xWFoCc4vPJri1XO8ptWPUjUBqAu0C67SO3BTavlN1XUntR0TW3aLIwU82YReI\/ECMTLO1A1DrlGo9myHEvC+K9ka85hSVJCuJ\/JCLWA4TbA7RPA2Cns+yZb9QRp2+gwqdbNtXCJxhCTgYRDgoRB8K0aFOBdUawJzR8Ta3ZUm7lOTMIcnmSAuKOY+ThafVrtYdNT9guEd1eIqVzvn90W3uFPbUoquLSOIj06\/ZcXLqTlSqENeG\/UdU31ujRMdbVa7bT91Xpio28at\/unCGy79EO0C7ZB1zU3HCPnfH7qq1lF1nCE3\/wBIy39fCqXCg+m7aoumC0UihwTLdcoNNN\/cqD\/CBWqb3uc\/9AuK7azo5B5bosnKA+QFCVaUJnCEu1KLAulugAE+E7SAhqqYbUXE1g1vTYuD\/EYS7A9lbDMKo+0WqpkQqHCVK+fS3yU7+H1xkZCqufFhbCIIXC0uo8KjY1sAoEdZx91xAdMXSFSF7yNgm6xoiOp27bptMahPMaK1rhJTagsl2UC8utZiVxrzikN0GiwNOyFPtL9lde65XeUB1D2qnYxlg1RDXNFy2jZU+6t\/\/sBOqCqbj+ifSaceUKVVv4QCa5npOFZTA2TqdD1WrpNtgAAKpS7vR+ydRpkYEFdsKGu0yrnMEMaU1zrfQ4LrNb2nC6oAlCrOZT4ulBzTLVZi47oHfyP9lU\/wAywFeERLJQHcQd01Huaj7oPNLsOQdF1Hv\/yrq111a5Mrqn65XXC4dxbXM7hUu6q5yp+lHKiE3RPw1eXKqbqh+Sj+Hw9Wr57B+uq4dzhQd02zGXHYJhl3\/wAV1fxzTjt0n3VW003D2VSp\/wAuGN9Tm5WWtDBqVaGNk4Cc3sVKoHU79rU3vdJ0apc8zsm4uHuq7msoUqT5hxuMLhalN1OGYIVbNcj\/ADSnvuemkxhObM\/uqBLcFMejJbA3TW9sN0XHtAqAhZ5BUOHqV3Qz9SmcBw7R3y9VOBo1B2Cw+yrcFVpC71DyEF9kXGITQQphBwTkZWrsqVUqXYVN3SVOk\/inzOFSmiTRQw0EqpqqLA4z4VkZdqizCxklVm0h6hcU5tENupznUJlWs30tMKhw1SqDV9MqpwvEh3kINjLe0+E0x6ygRdChx+yqnKh2Y3XWc3TRN4im0EiblSmpU6j0SwZ1VavLem1MuaJUD0oPY3tCa96baxkuEJ\/Ew4WK1tkNx1P9lUewdrQhSHqcnEhwbTGfKhzTkLI950QuH3QNp9kHNBiYT\/8AdFjLvxAg3YYTT5V1ou1VUGo0VEx5plOA9TdDyb6lbdQ\/Re\/6pzZCd+fT8KcKmZpQnnuC0cmHtRXropxIdKFWlCa5r1E5KDYynVO+VwyHp5QmjK4nFNVXWUflqSKFKl5l37o0R04p9rrbfv8AdcMey4\/0j+yZJHuc\/qqgBpl3sg3tCLSHg+ya0ve1hzJyjLZp\/wBJTajuj0hjKLDFoOglU6eBKay95Pkwv4gP+bcNmgBUS0B4LZ8eycSE3VYtgJva\/wC+FBzGbdVSeCdU1\/j7BbQFXoMqtgp\/CvbkZXTd4XC8A6p31e1n9yg6nShje1uyqcTYYVCq1wwqrd1xnCMc3qUhDvbdAKArUANIyrY1TgiVITnyuHYJucq\/82FwoDbRouKhvEBypzZLyiJNyoj8O4qSH5VWpBgp72lpDX5ndOe3Jf3fZdSI8eED9BysWwFUN1UMZ+qta+XKqxrfdMDokBWhogLin6tCkoWuUZVOvTb6gn1DxDraeAm8KWaaos7pK6cDTVVGMauFYfWE4Mz1jJ1VT8WoAzTZGrY7p+BATGuIuTabw6Cvw6Z7kwsqTiA=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":94,"pkt":"ABsv8H60QPMIw47hCABFAABQv9tAAEAGTK7AqABnUlUauq1bAFCj1oJNfMxlZ\/AQEUsuYQAAAQEICgAD64VUYwVLAQEFGnzMtFt8zNWXfMypR3zMrtF8zJKnfMyYMQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+2324{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2325{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720900,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1436720901182,"flow_last_seen":1436720901182,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"77.67.29.17","src_port":33976,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/BAAEAGs3DAqABnTUMdEYS4AFDrYaSj8+woZ4AQH+origAAAQEICgAD66NkobAz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/FAAEAGs2\/AqABnTUMdEYS4AFDrYaSj8+wze4AQH+origAAAQEICgAD66NkobA0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+nH9AADkGdFdNQx0RwKgAZwBQhLjz7DN762Gko4AQAq9DyQAAAQEICmShsDQAA+ufWEdJBRPnaSmosKHYDmQEyGHV3GAwTrGe5kQxyGEYyxmyELBrJc+SMi3dmmwq1mAYjd9asgZG6SWIbmuecSeibLvJUKPOw0JlNLd+SsFoR4AyWWZMuWzjy22t8lg9nL1yby0j7G5yGHP2UfvrthqhUQLZPhRPRii5ZImLbbxtBh75Nwi10QstpiiOURwgsk\/gse0fhODW3xEaIlCTuwGMxEsajO6KBwgVZE4oD8EZJ8CUI+IftidbAnEAzCB+CxiXeSUkT7I4PLvoy1NnMNCUuGI63ybZNQBpkMtmgmFlmfthxhK9DguCw4XPNprshLbUVoAbHdBaG0WibQPaUDoawN0QnEMFu5OOsEXu+c3ydgozRy0R9FbV0F8hsoSyHLIicGyGMakQqAYSTks8J\/2+\/kORfizOWuAtMcMCSaUPfEY6f\/ttodWXWPLX7bzs5o8i2FH5IZ4wLEpEOhwV2MADYJIWDBmF9CQdn6hh1kzmvWM7b4SuFg+iI0QmrTgRgMl\/rAMZDtwdyKQyk+DPksJTgtrhZZRA\/GY+X2oyKfiboDY0NouOzUthrGCw4ToWxqMKM+rf1sDDAEsjSzJB7rCfcDOwibANVH23SwWhh5rFCY04ksXdhurOKpIBQXzCwN2yHF8S1j2hc2z0kMsCW+OeS+e5HaaRoyzZaCzPNrgnwkhY7i8yZQkeMkH4woSzgHZw7AMoJTs5nD21BiRDuFCBqB4lGX+kk55UTfE62aMJ9jBPBhqltnyYDTEarQKEsWGbVjV7cRHRc\/JgmbZkQlW0YI\/xZdFg6wN2R+J3fOBbBmIcOvB5bIKiWTEFFXRESk7pA\/G3UwXXKB8XDGTJIAkPv49GZuMRZBkC+FhZzCzZ\/iYJh8LIJjV10uzY7Q6E8RpFbyee3Ru25UC5ETbDsFPCaR1ZZC+Qlrsu3Z2QOnm5Ijct96wHLCiQoCUx5CFCGTynRCNjadMyB8tlLRKCwv7KX++dvy1I4Ngs+X8bALTsRQ81XIDydJihBYicmO+O5EykyOu25b+jIYCOXX2WfISuvyX8JiI2GJxqYZEg+OZPoDhxBrn8TYtguClNRehGIQDtqZcwjb\/V86w0sQMOHMZzpnYBjpA8i2eJoGlmik3CQHHMRm8DxLkyFvCZWDFGTUEVI6mHEnfCoaSoN+\/pJIKAlCT4XxDOVC6F8g19jfq1eEJAj0k3u3yFtEJC0DXJolurtJkzJ6y5KHJWSGujZ7ucFS0YjpIoSX0blPAySPJvg33fP2OLma7cQ\/o6PyUHgctick8cobWRNWzIJG3koi8vkKbBIHEMIhdatBUZ40kmN4wtVBz4xoAKljf4v6tXAUt\/sabl0bLkuRE5KikyGgBCbojsrcdwSEGEBomIUFpEl4TvPOqQ8EQF08if3O9FnhnUw2jwQHpaPsw+3EzgNs0zWy6OB623FWGwH7yRctwfDWnw6uSz7AvbHpmHBs+lzanaBkBBq2DLF24dyAfJ1fyW2F8GD9sWLVnjCGZF3EsLst8bQIxxKOwYkoOS2WRsw0xVMJlnywe3Dcc8w+9gQNiBfxyDpYA\/BXzFgEQ3SDtI\/Iov2XBZk1lmPY59tj\/SH+23V5dy\/iiOkLW8UdeiSozNTMFJIdoa309Kn34h+DTnlxZPJVqKRj7du3Uk37CetFC6vFxS2151HHC6aWXemK7B3BpAILjJ\/RL8v0ZA5dOz14w3bAaJWBEg+oUMkesS4WzNnMtGFzWDqZOmcWARMZvW5QUXehDRGok1aYS2VUwcI4nRFkmR4HYk3YsQQ7hbSjts4wBuESi5cIWAPkICk+lgVslThZsIux2ZS+mHik4DwoYI7IF8QlYXTsSiw2By7i5s7AeQhpAzljeQfkQaQPQMK5P3IVCAQHZWMgI=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+nIBAADkGdFZNQx0RwKgAZwBQhLjz7DkF62Gko4AQAq+28QAAAQEICmShsDQAA+uftaf9j+RvyNXI2FLQDcwfI48lWBo3w85J2VgCe8oLSF\/tl+IL6hjkghr\/AId7\/G4DGon22BTdDwR\/Ul\/5ZiCJ05J5wip0wG4yiDrFHQncLnMkOdNDkwCTREx9hZPIgxI6j+yW+z+Fg+Fodi4FuMyUfMurhC5osZTDCbUTPiHXnMEp+QzkajzCScQJpN7SYqA2umSB3PpfdnqPxZdJ9i0NuFGe6p9wWBbrCDkzdTMkx8429t8mv2Pefex9COUo745H1uBJ8jch21+3AZP3ZoskrhdJmaRVbI4Q\/iJYhMyUfCgeDM\/IvKJs33gTlG\/QsYI0dGH2Is\/LNsul96yPySPbrJDZ59YuRj5cWxbJQXI8k5+CIhK+fpeCtu7Wg6eCU1jym\/LdZp\/VmvLJB+yOsyS4yrcJKkrHi\/1mBWk2S0g8WPzw36Wcl5qTPAgfZyBJtSJ7ZxlhMWSYsuxmO33TWCy5jiomd4iwgRCYkmIIgIxPoZWidOQFHJikZ27ZaH26dvmdpRsWl4xdnIcLZKfpFvY4EBtn9kLk9bBUMUsDh\/NGhMHIGZNNkh+3a2tFjYfkAsYV3Fxhz5AGwP2C5O2K\/lgj7eUMlsMBn4qGCYeBlkDvhD5fiGcssnjbLdetm2J2HGHN2PtiB84eQoEJzPKJ7GR4qVuNsjLMq6YL3OQN8WYDRFT4vpHONalIUZff0lqwtE\/1Ift11pGRbL694GDglJX5fchzH2b5tRBnOLPgHQjrCNUjxOGyj6ydEuw3zOZxz1NMw43A+FhwhKNh3ZiDY+ZFZHou9HmEJbakSZZcgilwESi8S6t9dgJkXQ2qj8iMSBiQiGf7wRyxsHyDrJODDYnBIO3W23b8zERrA3Lk6tn2VerAZDYE7i+98WP2X+2s\/UfVulhzcmgiaTzHps\/llndITZJ+yaWOWPtlnOR+WPmfsE+ueQp\/yL46X\/ljJejJalD209Q6yA69xO8HBSToe4RnyD5B1Ugv\/wAecW6HVENExHAUsIOSaQ1RmMukCKMUr7MGcirlwSEwtCcRNIy3eSvl0xw5dDCxVjFi\/FPU7L65sgRLqUyXQhljZREYeoBXZ4\/LmdT17AjYHEyXZc2RyZAXWDywRNYVwM5mqb8G6cyDIZ0KHeBxftkv5CEeTJJSOnyFZEfWFNT3LHbR9gSRtoRiG\/JL+MDUJkAQLgECPigHAsvRd\/l\/EGLP2yz4yznomfbHdyQEAWGWQ8BPXS+dZ8DcWWFnMsvseszes5y\/9mDwIcwf8qxjJqzIRAqreuExiCvJ5tZC8mRfU6Qm62x+2eT\/AIlxyT8uxMKQiaTDG7OQYdoy4Cn+JNLMAQkkGkdoTThMuC6VrZPsu9t+EcSuu2c7Yn5ITkbGWpj98ALO2yBuzVkdT8iPQmrD67p2O88DgGH7dO6DdoigbPBsYrSGcjGJPFoajd2d1SWrJ02T7IyE2V+W17fXIWWFnyAg7EgSDFR3zFwV6FNStXgq5YSm8\/Nfy4kxLMIiNj4zLCwmpyPyQUFhtkWeH92Z9v0eSFlPDVGZZyBksj8Wz0k2iMFS1xr7qad8UzH5+os1z8H5QTC6eJZM8mNi2wdivt7lK2wNiWHk+dsAxZD8iDtoGUAZWKaLVHY6FhpCn2KA+2u4RlhwZg0ZR2S8PDQ7dSAsh5FfkxhswF9SP7Gzsj4jfi0Zw+wqUJjbUbPyzh8YHmZWjl9dgETp9kn0\/OxLiz7qy2389MNqfxs37Z\/JQMmvohbWyryY66Z04VZvlYSGHdxJIPiOMS29PLqo55fSIpZ4c+d8ZyZ85WhipP8APHD2yxLoTi9hP1GSuFVbLMgu4vXzk6v4jxz8nXrO9m3OSnNBciedDWM0GxxHnYBOjLS\/I+iJMjctBP4nUdxYyJYyUy0=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/JAAEAGs27AqABnTUMdEYS4AFDrYaSj8+w+j4AQH+origAAAQEICgAD66NkobA0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2311{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/NAAEAGs23AqABnTUMdEYS4AFDrYaSj8+xJo4AQH+origAAAQEICgAD66NkobA0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0W\/RAAEAGs2zAqABnTUMdEYS4AFDrYaSj8+xUt4AQH8wrigAAAQEICgAD66NkobA1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+nIVAADkGdFFNQx0RwKgAZwBQhLjz7FS362Gko4AQAq9dZgAAAQEICmShsDcAA+ufLkCA\/htcNngwJsw4LqpWkAnbBC+VKzJYrYtM4BhG5hFy2JFvxpScQX02JX98ihwQRYM3NxgSCYgDXDAABR5x2uaZPOhEhNBIP+KSs6gmtk8N2MplIo9Miq2DNE+p9Gcc6SgciRl+wXyv3ITZC6VAXZEcdyxnY2GtpID1+L7gGDJycgTpsHW5aWSJgKFFIYKTeBDIdUhKWgY+HizhqDCGncwRARS2CwbpQAORTF8nKgMO0CYJZDTMB8ZJ\/wCAMNFK8Nxpr\/8AiseK+rCGKgmlUoliQE15DDoSbpecaQ0\/5uUwW\/lSeYorDOBbEfkqlK5PeTGkHmoDDYOXhVOPOVUhT6k8OG3OTl5vY8O8RB4WzlAsoujRc2AwTQrQOzFdSMZgZLiixEcuIsn3mieGE9vjTQE+wuEcoweABGs4uw8YbsH5HMNl2HfssFWF7GX9Bb+lrsL9tZ8kMNNVMM753hWHsDDWPT1mn0cLcO3Qw+W36ROqCc3yq+AiriRIXkyBcz2lQyQLagMwXQesSefbTTBpvxECPh4KjsCtTaaROaorh0MPNik1FDMCVgEIRWvfkQciClc+YvaHPLAQQTr2q0gisOdby8iGEyUY4HJ1jsbT\/h8a0SIbQM7u0ySj8I8RKUzeAaLhGQl5FRJsvVgBBNQYKvAkudnmyRbjkOnEbgOFNI4IsOJT5NXsMizltkQTXMfw8OgV4aSbeb6WX+Qn2H9wWF0uHL45OvS0Za\/EpP2d+Wwn2P8AGYc6nQhGTrUz1J4wWgb3dk20Aht2itQ0w7sOCx\/bnBxBSHHzDNrVAXq31IZ84jzUqwXe8uwwpXAyfAzUfKxgEBgUl\/eD9uUajXLRTEmuKQZE\/G6SEOaJXZ1h+wQUxXIizVj6ArK+YIwS1A+Jhf4JYzQZpip0BUymIAwARcH5NM8m\/wCUeyBOjpsUqaVswylF3wO0LCxVqI7Q4CAPy\/j4gEdkYtBuVlW2D0W09C0zx+FuW+ORke+o+Wzq2aXHuCIQmSNDQ9sP2\/wtJrhFTb67F85bRAJi\/wBnGf62lvdgyLPOGTyZI4jyguBlpxxIuAdgggHNOMpzHPIgghQU37PUPvYhSgwtFWh4j6dwEIquL2YItDmZyReZIaQMhXGh8A0MxrHEkM5oeAtKgEAeqUDTk65aR4xxQw5x4+cRNf8ACNQFsu01xNbWeNAkqy5NAMpkJMXgDs4AUQN6gMEhVydaTFhZq18Gsi8W\/hEiKSC2lZsaoK0uTCTFEsRbosyNlgdZz9W6GnbMiwTEL\/08B1gG2AgUjKxTuBsA0RCkKjvxjfjfbpsKJLCYU+R125tguFAxMnwuON8QvPJVNYKI+D44ry6DdVgb9UVxkbo6UEKBsJDGHwIvUXQKcEs8QIqi4+Xvxr6eJxgoZjqWcYRKMrNInMVwNbPh3tQUAHkMWt1ibcthIzYAvaQ0gA7ERG2VEfGhsFEHwkYmlQywZGTDia0HKh4SsMrxNVBHYoKwl1jHfBjiQfUQwa2tMbSib0zi2PwJpICFwswmyqRkhpLiXWNbYFi0NIx+XAxhiLE+aNpWlbIBaBJA8dZ1\/ndk8yA14h5\/2BynTlj9sovGAquP42fsPwmBDwfL4X0tGIc9HCFmAwJ55YVIgWTYsq8l\/JaEVAU0K3XR07ujvNkq6vLt424yF5901nliL6A0EMsD5\/nAx7AgIAw0QTdbTa31NGpIjZb0+iRXrLlvhWGBLNFrupC2zT8VGDFjgInO0bImb1uiJYr2uxeDHqi2I9lgwUeuREhqpHLyxZrgjIvKHYLWLiG7TKi918moEyeMpH4EpyQggAgrUHP2zLXyP8ioyySmchogZQBNw8ATYKCbO+Bn\/wCPBjGoB\/LQAe61cAq7EJwzx+iAyds+8hY=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2313{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+nIZAADkGdFBNQx0RwKgAZwBQhLjz7FpB62Gko4AQAq8q+wAAAQEICmShsDcAA+ufyRGDBYEdZ02\/hkBwZxnkFxSQCEwNmr09iMv2GcGCYXZL4CaRkwAI7eahMYyaLCFHwJhqBUvZ4FiwbKbm83q5RQEYxkI0Smr3e2c1umJVtwLwOAZSuvrmU24IRXw5gV6R78YDls1rjHVV3lFJysPEJ4vHhpk\/42JZFbSjzKOBCJi9hgiClAoDTFrTJ+ALizTwG8Ovb3PgmAbS6Br2N7FYUPNyOxttSuZbF7CLrw5QxLGg0NMIiSo0DIPBlGf8drCUaGKt\/wDKiYzrAWigolNjZirroqVRh1u4\/G44McaeQya0g5Pv1ujIfdnkn6QlAtKSAJRVED5kBMwDoWR3zbW5G3I\/FssdhsxsUzhZ6DHoNxCZXM4Ry3ADeBP8Uc411ld4ZJcdQSPhL4JJtiQ1WGOq+HKxVRNUZzNqdQMvPJSNZLzYGBhoKxC7AxyjhYkZkKv6MhPEn43KEiEY7fSc0QgqHv8AxkxEei79ImV+FVqsFsGoAF3qU3kvFk8ndYFYemHUIFuIUaE8e2\/snzB2u1yQTEfrKqWzoo4ZbbswIrQE8ckGBUj0wxgOm\/TFMgUHO2YSCMQWmXgPgw39SU4lh8uY2hc4BPI2d9Z7G\/JhGBFnJELG1cMPnxneBFNwzSxBkgy7GAbTX0swEs74U4EEO69NiLWgLjodj1mqEqeYdwTrPuRHsMK0WkUWkQbEAF9IBkFEO6mkSNmzBY73MfABPJgChMO55XrD4i4I+gyidD\/iF5+h6JLxpOuwHoEUS1H5od9osIcs6XnXJL6pNDsGI6RIuKlExK9bfE3XYjo54TDlyMvY\/qZuNmJrCfLjrAHaiMt8WCLcH6BYNRgoTA9YodOmDg2FD1kKUXjajSF0QgABCPE0jJfpdLLg2N4sjQIuiG\/ZPyAokruR1swNJuJ86cK1APkKIqggwMAR0hEcfa\/GfW2uBUsUysQElDUahswySB22hEMnSvNsbHVEQeA07dh3rf5EcCxYEDuarg8Ogtj15PiRZcLmIDGJRyaVhgAbyUTxJUiEIFFjGJYzESDeSiHJtyXMLRmtIPLEU1sj0vWkxILg3QYypJ1SxNuFf7ipCmk04L+GHAHnQ6mLyC6JBPiJgfJsGpQV6mxskVsJpu7sPTN6RtE7pZtcoZHQNAWoJC3gsA\/KDiiIBi8jlBaiYJHfLadcboyQmUivmc5GMWbpyT9lfrovKfQ9yyNSQziBIQm0YK5SD0sJbBAeNCAQk6mRiJFMH14Bm43IKwmpR8ghNhVHoyZyj4rKHcUOg8ZfgqIU3\/EJzuqKTxF5hlpyS3PAhKDJ5+N3sWF5jbfvkJcDRJCPJDFYcdxdgM77giYze72cY8nTfqmDxjHjRLQK2D4j55qQzvfg4bmlzPGE5eQXUQu5PE66mMJYmVSjWT2aSIiZSZKxj7DP0bsMZQcWA4uMrZxzLyAbwOz2yDif4QVaAdxWyL+ScPWCf0b0v8b6fIaW3R2BvPJAOFpyNvm3j+2WSeYfsd+z8oFhLeUK6sMwtmj7T7cbkwpZuEDtDpnhIid5BCI6ZEANhNOfx9b9EKTSwx+jAiwYFUkZQMMfQAJRyQCkLCg4jIVfNElMHy65ZPBhFIIsCdi4+MK57ROWTh2ebe08z5xT48IeWoh\/HCCiqCGdRYkTFZSHkUOR6eB1L6C54WgYbFbnGw9gVeE4PVyR2Dylm5RMfmi5IDm\/AlZEfGHoYbHEW7LQxlVM6S2bPtMCKN+sLVEmoTWXyjsGC\/rmVQHAIEuXiwMHg70ozM2HgZQUaYXyMsJSrsZZP+X2Oydj7cNgfElBIbDUAwz3wdNDCZ4XX5calgvOKdOD14M0oRP6jlprycPsadHBl6IwASjudsRIuDTEvBLuG4C4KcDy9xj0OtAUWj+XcZM=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2312{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1436720901262,"flow_last_seen":1436720901262,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":290,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.153","src_port":37350,"dst_port":80,"l4_proto":"tcp"}
+0746{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720901,"pkt_len":324,"pkt":"ABsv8H60QPMIw47hCABFAAE2VBZAAEAGt67AqABnUlUamZHmAFCdoJYSxR9Z0oAYDfbnvwAAAQEICgAD66tZ6cc2R0VUIC9ocGhvdG9zLWFrLXhmYTEvdDUxLjI4ODUtMTUvZTM1LzExMjQ4ODI5Xzg1Mzc4MjEyMTM3Mzk3Nl85MDk5MzY5MzRfbi5qcGc\/c2U9NyBIVFRQLzEuMQ0KSG9zdDogcGhvdG9zLWEuYWsuaW5zdGFncmFtLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogSW5zdGFncmFtIDcuMS4xIEFuZHJvaWQgKDE5LzQuNC4yOyA0ODBkcGk7IDEwODB4MTkyMDsgc2Ftc3VuZzsgR1QtSTk1MDU7IGpmbHRlOyBxY29tOyBpdF9JVCkNCg0K","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1436720901262,"flow_last_seen":1436720901262,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":290,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.153","src_port":37350,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-a.ak.instagram.com","url":"photos-a.ak.instagram.com\/hphotos-ak-xfa1\/t51.2885-15\/e35\/11248829_853782121373976_909936934_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1436720906017,"flow_last_seen":1436720906017,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0523{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":145,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5AAAIARdcjAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1436720906017,"flow_last_seen":1436720906017,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0523{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":145,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5EAAIARdcfAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":145,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5IAAIARdcbAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1436720906022,"flow_last_seen":1436720906022,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"192.168.0.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0518{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":145,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5MAAIARtB3AqABqwKgA\/0RcRFwAbz4HeyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1436720906022,"flow_last_seen":1436720906022,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"192.168.0.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0523{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":145,"pkt":"\/\/\/\/\/\/\/\/ABZEH1lmCABFAACDA5QAAIARdcTAqABq\/\/\/\/\/0RcRFwAb\/+ueyJob3N0X2ludCI6IDQxMzc2NzExNiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICIiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsyMDA5Mjk0MDNdfQ==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1436720906025,"flow_last_seen":1436720906025,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.255","src_port":520,"dst_port":520,"l4_proto":"udp"}
+0409{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":66,"pkt":"\/\/\/\/\/\/\/\/ABsv8H60CABFAAA0BsVAAEARsaPAqAABwKgA\/wIIAggAILagAgEAAAACAADAqAAAAAAAAAAAAAAAAAAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1436720906070,"flow_last_seen":1436720906070,"flow_tot_l4_data_len":645,"flow_min_l4_data_len":645,"flow_max_l4_data_len":645,"flow_avg_l4_data_len":645,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.93.52","dst_ip":"192.168.0.103","src_port":443,"dst_port":33934,"l4_proto":"tcp"}
+1234{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":679,"pkt":"QPMIw47hABsv8H60CABFAAKZYWZAAFUGhKgfDV00wKgAZwG7hI6seG5hv38UHoAYAGuTKQAAAQEICltMYqkAA+18FwMBAmCl7hwsC927JcFSAZYWLzz9PCOE13q\/R1R\/4Ep\/l7+HHbIpOFFcCYs42I3wFOgWiBw3wjx3pJOgTGydZF67jt6\/BKND+v8oyfRpnqlS5YMAWUNymHV7uHWxp+hxonkw6cNC93nRZtrxzkz6LP0NT0kghBPZC1Qj+5R6TJU9O4JNVgnaOk7a2PLjjlpxNviWyDprqQXVx0ggqtiTSBMr7Uc5EfDpzAAkL4Ijs+Gp7u5RRsTL\/vjjpIbFtLB91jbWUmuE049zO8Z0ZXe+NUKtpOUeDZz+3zpQ7uf3ydorfitQX7zdybIk3\/bzSVhOShF3BJrYBLAD2AQ24us0\/KfVGECFrd6OK2BQqjf6ncI9qOXNwiVF\/2inbzY\/Q3OsYRcS7XHEaq0O5REHcT8SzE5VoLX4XXQtBoZwVB5Yrj77GtBQdmGZD6u8UMQpctBx6N9Mr51OWWfdFnAbts6SnZuXGzlYjqJOxS7Vx73Uw8fCkf1IEri8UI1qbM9veDNciQdo3CmVyvU7iM87rUz7C0f+A4f1opsUJ5+EheBr1eGc36Efb4\/Ualnnz3nkJR3hncStDick4US+OxlgvGof266YJgZuAwCGxYg4vW2knDKYz5umzCws7lIHpIdAFNPByVtoUTPTPQS5UKgIEdb95j7F6DccGwtWvRW1Al5LucPJI7zWS2dtNSdT\/Ojj1Rno0QRGwZ45j0In5POotAgCjk30MTwIN5HhcpigFfTCmuPMsYmTn6MoC7DboyOfYCjSc6fhkNqfZ2xyKSzKyqklgdTHeGfRwO+op5ygRsksmKTJ1Q\/4mw==","pkt_caplen":679,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720906,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0Ga9AAEAG48TAqABnHw1dNISOAbu\/fxQerHhwxoAQAW09dwAAAQEICgAD7YxbTGKp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1702{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1015,"pkt":"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","pkt_caplen":1015,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1436720908216,"flow_last_seen":1436720908216,"flow_tot_l4_data_len":981,"flow_min_l4_data_len":981,"flow_max_l4_data_len":981,"flow_avg_l4_data_len":981,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33935,"dst_port":443,"l4_proto":"tcp"}
+1691{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1015,"pkt":"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","pkt_caplen":1015,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0YWdAAFUGhwwfDV00wKgAZwG7hI6seHDGv38X04AQAHYJOwAAAQEICltMay8AA+5h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0u1VAAFUGLR4fDV00wKgAZwG7hI+o7MT1gUCDQoAQAFyKzgAAAQEIClsYbBQAA+5i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbFAAEAG48LAqABnHw1dNISOAbu\/fxfTrHh2PIAQAZo9dwAAAQEICgAD7nhbTGvd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":209,"pkt":"QPMIw47hABsv8H60CABFAADDYWlAAFUGhnsfDV00wKgAZwG7hI6seHY8v38X04AYAHZQJQAAAQEICltMa90AA+5hpaN2iHfEdv\/X3pr2Xt6PWOrdWTYMlE+JBgtriQdQqsJJVEdRWj83ZvHQme+6V9l\/gV9Dtaxw1VeeFseSZYUkAyBGMPIcSJ2+VNcYH0iI1HitOwXV9j0T62qHHtMw7FKCliiHdkIsZrHHF8Y\/sTvDmt0\/hraFG9jcmj50TyPHVMKujRCQwbDTNeRqyqJKlkw=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbJAAEAG48HAqABnHw1dNISOAbu\/fxfTrHh2y4AQAcY9dwAAAQEICgAD7nhbTGvd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2302{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbNAAEAG48DAqABnHw1dNISOAbu\/fxfTrHh8QYAQAfM9dwAAAQEICgAD7nhbTGvd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1428{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":817,"pkt":"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","pkt_caplen":817,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GbRAAEAG47\/AqABnHw1dNISOAbu\/fxfTrHh\/MIAQAh89dwAAAQEICgAD7nhbTGvd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1464,"pkt":"QPMIw47hABsv8H60CABFAAWqu1ZAAFUGJ6cfDV00wKgAZwG7hI+o7MT1gUCDQoAQAFzmhwAAAQEIClsYbL0AA+5iFwMBBgCkPdU4R6wGSIS3keHeixTLTI9zV+il0PpZ8q91YamIsd4IZ1iA9S2D6W\/nJ4T6403w2+fJe+hdEKNsk0963CdXOEXDNkQKpXOBBE+0Y\/4Fle8ueshRyGFFEoc6PtZpKpwayy+TKxEJ4pFJyX2oGMWjaZzaOyD59AskeV\/YOll+Xm0S27uMjZKkLBkCxDNPTNhB8fh\/syM9nxdE4huEu1SgtsgSRap7+5OfSJa0vJji4Lac5HIGGpVuCAdsaWkkirxUeGhBT5KqUaH3z34YK2q9OCFDjG6zQx+K5wB6\/1tRpCV4T0Wdq9iazWqTK9fhu3Q8m7M+n+OlMsKGxDIEQhTmUFv6EsILdWY4XaXzsNt68ilI12u8FIErHj5xADP5BSss+D\/PqbyyYfj1siM7kMLTpiPXuCUljd29w+P7wtJOUzlqcHwFv60jtkmE5R7DR9LN47rlhx2ZgEX8b9nsvGl\/Z1KSCJ1m3XV6f0806axX94l9imfNEVAHweCX3kOlfFNWODbpNzNbLbpVtPn7xKRA5Y140DajcNQvyREJ7DrHWIxbEPKUq+SIMaNEJqDkl0rYnPqvJYuixcmcTK6joyocw7sF+MmuWuJzAwYoGvQacoqaNqOp0iEPlyz8x6cTF7HbzVKHlLYHsfsKMGz98miVsnjvci5f7S+qZN8wJt+ycMpErrmm5SYVwnyDiARUnY01FjBiu7oXosmSU8r8tl1Y7oQcefwWQmUMJwEVoICnXk5o\/1P1fTAJawMxQor10OxDf\/BV8+4BnkZNbktKhC4u6rpy4t9mTFTFoJnekuOgtsyuYF1D1pTovQynkNog8sbNDLg6lOVy2sSjtN38M5BrjfWP6NvWf5rAbsDm9Qvw2VUkrLm+vXfuLJeKqhTOHspJB2ZVScw6fgqCCRgXV4hbT47jXkZHPFeUj3xtv5oznldP1XEp\/Y0YyZnWCMaWATZlGVUiSYeiFbrcd70L0WujcTQSesgJzHbOqeptYMiDDVIYXi5utFDZis9FPZA2ul\/lArmvEL\/urLFDKdnXMnNjyIIqJtwWZlcpDAHOfD2KyMM51NtnpD3NXBz6ngCZNoi3DrWeJbaK2NX4FFrr9nkmfuHb0MCV8zapTpFVeDqmiCnEMr1A22q06nZsJij0BS+jpAlud6+DjOPKWljFzy06Xn15YGW3Dm07Vi1rGNQXnlLIYZbH\/Lf9VbK8rn+tf2U4X+kmR\/seSiHTIiCrfQRY82NcG+s2JE\/3RNuUUsdP3+A8UZATxsKmMNb9p9jduLcV5NSz3qcz\/E+TORnhzC5qM5iDlSbThKZAPEgvS54QGz00rdEYWdvIwL1jLd2l2yP9aEoOWrH+sNsRBCU97PG1IRhRS5jctVYyDntPEBlAbqGj6sdT5C6POfN9JdpaIsZmGaMmnU0z4bjokazZ5F6F501SFGcsFKmgoCdZLCQyyA\/CkkbqEF1LeEPM1KkE88DAsVjRhjRCz9D6VKRt8PZdtywXXp7E7yF8+4SN\/2h5CqHv4N+v+ejLyvCd2t1L4BFuJ7BTwaB6NicxBq3cWSEeADsWxC4xODPl+fmk90gThIrGh3\/E3G\/K8LjJkXPwBqDPoSCAh\/lyvY4cI9USKSjdTboTHfChgT73IzMJk4MESnvGhexHkwWw4ndKaJ88XZfXiGJCI\/GHCwJX7Zu\/IG7bV7st4TnImk\/Ds\/xEG7y3JgmTAc9wIRPfDmTaMW0XI0vpt5j1BnCLq+es4TBuh9vggrd8U5G3S+2hj2u1HQPo3wjRAM4dNo6in8nnmD4n\/\/G9yrHWQwizkMQMUhZbY0jDslavyFSGnWc0JVIhfEzkCZm+lGdYxoDPUYKjjFRFeJ8o","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5FAAEAGZeLAqABnHw1dNISPAbuBQINCqOzKa4AQAUs9dwAAAQEICgAD7nhbGGy9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0595{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":209,"pkt":"QPMIw47hABsv8H60CABFAADDu1dAAFUGLI0fDV00wKgAZwG7hI+o7MprgUCDQoAYAFzJuwAAAQEIClsYbL0AA+5iQ25FOGF6aulho7mTNb0DUBH6Y+obi1DcFLymmtlZJAMqLelfZVE6+l1AyanyE1iMBED3Ixt7sVaTLMTiDWbQQKxkc1XHgvwD10laZ529KVKgr34XuCKRh3jOjBv4TgsGpr+Brng0E7tHiMTNHsjUFfI7SVNNlrCoI7UZOI2NN1IFSd0fvRBo\/5mr75biI6M=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5JAAEAGZeHAqABnHw1dNISPAbuBQINCqOzK+oAQAXc9dwAAAQEICgAD7nhbGGy9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5NAAEAGZeDAqABnHw1dNISPAbuBQINCqOzQcIAQAaM9dwAAAQEICgAD7nhbGGy9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1429{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":817,"pkt":"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","pkt_caplen":817,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0l5RAAEAGZd\/AqABnHw1dNISPAbuBQINCqOzTX4AQAc49dwAAAQEICgAD7nhbGGy9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1436720908464,"flow_last_seen":1436720908464,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"192.168.0.103","l4_proto":"icmp"}
+0451{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":102,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRcAAEABOq\/AqABnwKgAZwMDE08AAAAARQAAPFm5QABABkodwKgAZ63CKBTA+AG7+Mu3wgAAAACgAjkIlxQAAAIEBbQEAggKAAPuewAAAAABAwMG","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1436720908464,"flow_last_seen":1436720908464,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"192.168.0.103","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0451{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":102,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRcAAEABOq\/AqABnwKgAZwMDE08AAAAARQAAPFm5QABABkodwKgAZ63CKBTA+AG7+Mu3wgAAAACgAjkIlxQAAAIEBbQEAggKAAPuewAAAAABAwMG","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1436720908466,"flow_last_seen":1436720908466,"flow_tot_l4_data_len":981,"flow_min_l4_data_len":981,"flow_max_l4_data_len":981,"flow_avg_l4_data_len":981,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33763,"dst_port":443,"l4_proto":"tcp"}
+1685{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1015,"pkt":"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","pkt_caplen":1015,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0kN9AAFUGV5QfDV00wKgAZwG7g+MQ445PobbjVYAQANn+UgAAAQEICvAgscMAA+57","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1436720908521,"flow_last_seen":1436720908521,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38817,"dst_port":80,"l4_proto":"tcp"}
+0401{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0\/y1AAEAGBcbAqABnLiFGoJehAFBl4Bu99+Pb34ARFTc19wAAAQEICgAD7oGa3vT1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1436720908523,"flow_last_seen":1436720908523,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":89,"pkt":"ABsv8H60QPMIw47hCABFAABL7oFAAEARewHAqABnCAgICMgTADUANxLxN7ABAAABAAAAAAAAEGlnY2RuLXBob3Rvcy1oLWEIYWthbWFpaGQDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1436720908523,"flow_last_seen":1436720908523,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-h-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1436720908524,"flow_last_seen":1436720908524,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":89,"pkt":"ABsv8H60QPMIw47hCABFAABL7oFAAEARewHAqABnCAgICINDADUANycOb2MBAAABAAAAAAAAEGlnY2RuLXBob3Rvcy1hLWEIYWthbWFpaGQDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1436720908524,"flow_last_seen":1436720908524,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-a-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1436720908531,"flow_last_seen":1436720908531,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57966,"dst_port":80,"l4_proto":"tcp"}
+0401{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0NKZAAEAG2ADAqABnUlUaueJuAFA8SfXPvvA\/t4ARCm0uRAAAAQEICgAD7oJZ6tXr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1436720908533,"flow_last_seen":1436720908533,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":89,"pkt":"ABsv8H60QPMIw47hCABFAABL7oJAAEARewDAqABnCAgICGesADUANyZVhbMBAAABAAAAAAAAEGlnY2RuLXBob3Rvcy1nLWEIYWthbWFpaGQDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1436720908533,"flow_last_seen":1436720908533,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-g-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0lYxAADkGdmcuIUagwKgAZwBQl6H349vfZeAbvoARAeZr3wAAAQEICprfXG4AA+6B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0\/y5AAEAGBcXAqABnLiFGoJehAFBl4Bu+9+Pb4IAQFTc19wAAAQEICgAD7oOa31xu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0dopAADkGnRxSVRq5wKgAZwBQ4m6+8D+3PEn10IARAgj5iQAAAQEIClnq8RsAA+6C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0NKdAAEAG1\/\/AqABnUlUaueJuAFA8SfXQvvA\/uIAQCm0uRAAAAQEICgAD7oVZ6vEb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":305,"pkt":"QPMIw47hABsv8H60CABFAAEjliwAADgRGn8ICAgIwKgAZwA1yBMBD5NUN7CBgAABAAoAAAAAEGlnY2RuLXBob3Rvcy1oLWEIYWthbWFpaGQDbmV0AAABAAHADAAFAAEAAAAZACoQaWdjZG4tcGhvdG9zLWgtYQhha2FtYWloZANuZXQJZWRnZXN1aXRlwCbAOwAFAAEAADHJABYFYTE0MDgGZHNwdzQzBmFrYW1hacAmwHEAAQABAAAAEwAELiFGrsBxAAEAAQAAABMABC4hRqHAcQABAAEAAAATAAQuIUawwHEAAQABAAAAEwAELiFGpsBxAAEAAQAAABMABC4hRo\/AcQABAAEAAAATAAQuIUagwHEAAQABAAAAEwAELiFGqcBxAAEAAQAAABMABC4hRrc=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1436720908523,"flow_last_seen":1436720908570,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":55,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-h-a.akamaihd.net","num_queries":1,"num_answers":10,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"46.33.70.174"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1436720908572,"flow_last_seen":1436720908572,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"ABsv8H60QPMIw47hCABFAAA8iDpAAEAGfKPAqABnLiFGrq4OAbuyG2a8AAAAAKACOQg2DQAAAgQFtAQCCAoAA+6GAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":209,"pkt":"QPMIw47hABsv8H60CABFAADD9CwAADgRvN4ICAgIwKgAZwA1g0MAr7pub2OBgAABAAQAAAAAEGlnY2RuLXBob3Rvcy1hLWEIYWthbWFpaGQDbmV0AAABAAHADAAFAAEAAAAhACoQaWdjZG4tcGhvdG9zLWEtYQhha2FtYWloZANuZXQJZWRnZXN1aXRlwCbAOwAFAAEAAFRcABYFYTEwMDEGZHNwdzQwBmFrYW1hacAmwHEAAQABAAAAEwAEUlUamsBxAAEAAQAAABMABFJVGpk=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1436720908524,"flow_last_seen":1436720908575,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-a-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"82.85.26.154"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1436720908576,"flow_last_seen":1436720908576,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"ABsv8H60QPMIw47hCABFAAA8nwVAAEAGbbjAqABnUlUamqDdAbvgTnGDAAAAAKACOQguLQAAAgQFtAQCCAoAA+6GAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1436720908577,"flow_last_seen":1436720908577,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"ABsv8H60QPMIw47hCABFAAA8GZtAAEAG8yLAqABnUlUamqDeAbviOvcdAAAAAKACOQguLQAAAgQFtAQCCAoAA+6GAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":209,"pkt":"QPMIw47hABsv8H60CABFAADD9DAAADgRvNoICAgIwKgAZwA1Z6wAr0GdhbOBgAABAAQAAAAAEGlnY2RuLXBob3Rvcy1nLWEIYWthbWFpaGQDbmV0AAABAAHADAAFAAEAAAA3ACoQaWdjZG4tcGhvdG9zLWctYQhha2FtYWloZANuZXQJZWRnZXN1aXRlwCbAOwAFAAEAAFQ9ABYFYTEwMDcGZHNwdzQzBmFrYW1hacAmwHEAAQABAAAAEwAELiFGiMBxAAEAAQAAABMABC4hRo4=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1436720908533,"flow_last_seen":1436720908579,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"igcdn-photos-g-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"46.33.70.136"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1436720908581,"flow_last_seen":1436720908581,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"ABsv8H60QPMIw47hCABFAAA8pvhAAEAGXgvAqABnLiFGiO3sAbtrdUh\/AAAAAKACOQg15wAAAgQFtAQCCAoAA+6HAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGC94uIUauwKgAZwG7rg7lq\/ivshtmvaASOJCK2QAAAgQFlgQCCAquiQq2AAPuhgEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0iDtAAEAGfKrAqABnLiFGrq4OAbuyG2a95av4sIAQAOU2BQAAAQEICgAD7oiuiQq2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1010{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":516,"pkt":"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","pkt_caplen":516,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1436720908572,"flow_last_seen":1436720908596,"flow_tot_l4_data_len":594,"flow_min_l4_data_len":32,"flow_max_l4_data_len":482,"flow_avg_l4_data_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-h-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0412{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGDAQuIUaIwKgAZwG77ezRfJMua3VIgKASOJCHDAAAAgQFlgQCCArOjo1YAAPuhwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0pvlAAEAGXhLAqABnLiFGiO3sAbtrdUiA0XyTL4AQAOU13wAAAQEICgAD7onOjo1Y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":324,"pkt":"ABsv8H60QPMIw47hCABFAAE2pvpAAEAGXQ\/AqABnLiFGiO3sAbtrdUiA0XyTL4AYAOW8wAAAAQEICgAD7onOjo1YFgMBAP0BAAD5AwFVop8MQRa\/LNGPcOhfcnf+rMAKLSf4OFV0ZRHxry69ZyCXpJ10n72tSFpYW4ZT6kMvwtZuo9Q9LTXctqN9z+ZxLABGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAGoAAAAiACAAAB1pZ2Nkbi1waG90b3MtZy1hLmFrYW1haWhkLm5ldAALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1436720908581,"flow_last_seen":1436720908606,"flow_tot_l4_data_len":402,"flow_min_l4_data_len":32,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-g-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0412{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGE75SVRqawKgAZwG7oN0D2rVm4E5xhKASOJDLywAAAgQFlgQCCApUeSUGAAPuhgEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwZAAEAGbb\/AqABnUlUamqDdAbvgTnGEA9q1Z4AQAOUuJQAAAQEICgAD7opUeSUG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":74,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGE75SVRqawKgAZwG7oN5hmBQZ4jr3HqASOJCH0wAAAgQFlgQCCApUeSUGAAPuhgEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GZxAAEAG8ynAqABnUlUamqDeAbviOvceYZgUGoAQAOUuJQAAAQEICgAD7opUeSUG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0707{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":292,"pkt":"ABsv8H60QPMIw47hCABFAAEWnwdAAEAGbNzAqABnUlUamqDdAbvgTnGEA9q1Z4AYAOWB4wAAAQEICgAD7opUeSUGFgMBAN0BAADZAwFVop8M+5Fn2JtR0XC3DjC1k6QlRCdk+PzEKMeFZf\/I9AAARgAEAAUALwA1wALABMAFwAzADsAPwAfACcAKwBHAE8AUADMAOQAyADgACsADwA3ACMASABYAEwAJABUAEgADAAgAFAARAP8BAABqAAAAIgAgAAAdaWdjZG4tcGhvdG9zLWEtYS5ha2FtYWloZC5uZXQACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAA==","pkt_caplen":292,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1436720908576,"flow_last_seen":1436720908617,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0706{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":292,"pkt":"ABsv8H60QPMIw47hCABFAAEWGZ1AAEAG8kbAqABnUlUamqDeAbviOvceYZgUGoAYAOU9twAAAQEICgAD7otUeSUGFgMBAN0BAADZAwFVop8Mx+4o5JlDiMj20RJ7KJRI3UtRsi0RYXWiY3UJSAAARgAEAAUALwA1wALABMAFwAzADsAPwAfACcAKwBHAE8AUADMAOQAyADgACsADwA3ACMASABYAEwAJABUAEgADAAgAFAARAP8BAABqAAAAIgAgAAAdaWdjZG4tcGhvdG9zLWEtYS5ha2FtYWloZC5uZXQACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAA==","pkt_caplen":292,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1436720908577,"flow_last_seen":1436720908619,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0401{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA08nxAADkGGWkuIUauwKgAZwG7rg7lq\/iwshtof4AQAebuTQAAAQEICq6JCtQAA+6I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0HkFAADkG7couIUaIwKgAZwG77ezRfJMva3VJgoAQAebrQwAAAQEICs6OjXMAA+6J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2302{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+HkJAADkG6D8uIUaIwKgAZwG77ezRfJMva3VJgoAQAeZbzQAAAQEICs6OjXUAA+6JFgMBADwCAAA4AwFVop8MTSgOmRsGnYvnerNu9wOXoR6rDvIGOgk4ZR+S5gDAFAAAEAAAAAAACwAEAwABAgAjAAAWAwEPDAsADwgADwUABcAwggW8MIIEpKADAgECAhQDvzrvL6J8lrjKj7lZzTMsnVARODANBgkqhkiG9w0BAQUFADCBjTELMAkGA1UEBhMCTkwxEjAQBgNVBAcTCUFtc3RlcmRhbTElMCMGA1UEChMcVmVyaXpvbiBFbnRlcnByaXNlIFNvbHV0aW9uczETMBEGA1UECxMKQ3liZXJ0cnVzdDEuMCwGA1UEAxMlVmVyaXpvbiBBa2FtYWkgU3VyZVNlcnZlciBDQSBHMTQtU0hBMTAeFw0xNTA2MTkxNjUyMDdaFw0xNjA2MTkxNjUyMDVaMG0xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNQTESMBAGA1UEBxMJQ2FtYnJpZGdlMSEwHwYDVQQKExhBa2FtYWkgVGVjaG5vbG9naWVzIEluYy4xGjAYBgNVBAMTEWEyNDguZS5ha2FtYWkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aLEkOCQxkE0nfPVlfraw4G75O4JEeSlRW1zKhn5OiCejRRPF7ha04I80NXzpLA\/tzpstXo66tMUibKsHLYIbVtB8oSIpx86xKeq8BolyxN4B3v7BC9fc17tGdJU7Peb7OkU88pTRhVUiOQfvI8YxMU1ycyxtn6L7yF1rVXpUgiMR9xIoMePtrmHwmxFPiBjj1Fi5Deam4+Aue4XAh05FsmKa2n86yrVmRetbT\/bKRPBfUurOVaNWUO7f4FxfiiKmog7COy88Nhe6EsJTSdmB7kg3i+QgczeqMi7d8Ymw17IODXgorClqRQIGdTIXnMhC63ChKRXycZZACQbVGFPKwIDAQABo4ICMTCCAi0wDAYDVR0TAQH\/BAIwADBMBgNVHSAERTBDMEEGCSsGAQQBsT4BMjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3NlY3VyZS5vbW5pcm9vdC5jb20vcmVwb3NpdG9yeTCBrwYIKwYBBQUHAQEEgaIwgZ8wLQYIKwYBBQUHMAGGIWh0dHA6Ly92YXNzZzE0MS5vY3NwLm9tbmlyb290LmNvbTA2BggrBgEFBQcwAoYqaHR0cHM6Ly9jYWNlcnQuYS5vbW5pcm9vdC5jb20vdmFzc2cxNDEuY3J0MDYGCCsGAQUFBzAChipodHRwczovL2NhY2VydC5hLm9tbmlyb290LmNvbS92YXNzZzE0MS5kZXIwbgYDVR0RBGcwZYIRYTI0OC5lLmFrYW1haS5uZXSCDiouYWthbWFpaGQubmV0ghYqLmFrYW1haWhkLXN0YWdpbmcubmV0gg8qLmFrYW1haXplZC5uZXSCFyouYWthbWFpemVkLXN0YWdpbmcubmV0MA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU3WyAfLq1MhelhEFA8NIEZhMvqZAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL3Zhc3NnMTQxLmNybC5vbW5pcm9vdC5jb20vdmFzc2cxNDEuY3JsMB0GA1UdDgQWBBQDtkqcgAxgGIgKZM2uKGKKemzAGDANBgkqhkiG9w0BAQUFAAOCAQEAHGTOw3ZNjCn8dtE8JINXjj53IQ7Wg\/FCuS4hnRSWwVNJ6BYgU0Dy5QG33wEHd0lt6lMQyQAFD7vIIR04nAd4nAqt4ZGRi5X5qOQCZOIVC6l\/E7gDrpXFRUcz+2XdMLxszJa7w7xSd3QDhqud3BZvBEm5n488th5bl+k=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":23,"flow_packet_id":6,"flow_first_seen":1436720908581,"flow_last_seen":1436720908633,"flow_tot_l4_data_len":1884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-g-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}}
+0400{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0pvtAAEAGXhDAqABnLiFGiO3sAbtrdUmC0XyYuYAQARI13wAAAQEICgAD7ozOjo11","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+HkNAADkG6D4uIUaIwKgAZwG77ezRfJi5a3VJgoAQAeYJdgAAAQEICs6OjXUAA+6J8Y7pulnadtR8pnrOL17YZmIG\/8EYYPitHjHTuu4GsnUaDwVqqWF6J+umvfd8Bccsu\/3\/LR60tbSpz5FbDp7j3pT6lbaZJr7lfCcD6biW+hdrheke7dTjQZ\/bvol27eiGhcGGHSkrF9EsC88HzYpSiZPhcnnFMX3x+jTO2TeUUAtxx0nIassABSMwggUfMIIEB6ADAgECAgQHJ6RqMA0GCSqGSIb3DQEBBQUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTQwNDAyMTQzMjQ1WhcNMjEwNDAyMTQzMTM5WjCBjTELMAkGA1UEBhMCTkwxEjAQBgNVBAcTCUFtc3RlcmRhbTElMCMGA1UEChMcVmVyaXpvbiBFbnRlcnByaXNlIFNvbHV0aW9uczETMBEGA1UECxMKQ3liZXJ0cnVzdDEuMCwGA1UEAxMlVmVyaXpvbiBBa2FtYWkgU3VyZVNlcnZlciBDQSBHMTQtU0hBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJHrLTWbDGRsyost1Tm2M7T8SQoWeNeoPTcQAnbb19tPnFZLoWm0Sy1K40P2bxYIte90RY90VhYrFaUWTH1vCpm0IOeKe5xG6a4x+xNP8JcWYeO6K6Uk2NxLlsG+06u\/ZthEJvkWlu2cNizfKTQqtT0T0rFBLVOTy7V0KAb0Y41e3rKoG9d9TyRmM+3GirCEbsYJWpYoBozkUcuhxUu730Q\/ClrDVhGL9TyV2wl71jSIUaL9S6pJFHepsSSrJU9inLn5yQctEMhwtxixVjIdP6mCUqewsmEkal+MdPYseCwgWXALds78UK1S65yiRTaai4EbTf9MdpveKez1veYIXusCAwEAAaOCAbcwggGzMBIGA1UdEwEB\/wQIMAYBAf8CAQIwTAYDVR0gBEUwQzBBBgkrBgEEAbE+ATIwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly9zZWN1cmUub21uaXJvb3QuY29tL3JlcG9zaXRvcnkwgboGCCsGAQUFBwEBBIGtMIGqMDIGCCsGAQUFBzABhiZodHRwOi8vb2NzcC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdDA5BggrBgEFBQcwAoYtaHR0cHM6Ly9jYWNlcnQub21uaXJvb3QuY29tL2JhbHRpbW9yZXJvb3QuY3J0MDkGCCsGAQUFBzAChi1odHRwczovL2NhY2VydC5vbW5pcm9vdC5jb20vYmFsdGltb3Jlcm9vdC5kZXIwDgYDVR0PAQH\/BAQDAgHGMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jZHAxLnB1YmxpYy10cnVzdC5jb20vQ1JML09tbmlyb290MjAyNS5jcmwwHQYDVR0OBBYEFN1sgHy6tTIXpYRBQPDSBGYTL6mQMA0GCSqGSIb3DQEBBQUAA4IBAQBYQSL\/TUJVrsgGh0U\/i1nTBzmasqCRgdIMwWdPT3EoWpAcaTqa9pvACPRaIolV32+vRbiiE3kYtarTwv7LcHOFJVvVzG8GkKnYr3aOdAdQgxBNHXkwltnpAh\/jIdbs0jwwLLVTyRKn8sNj7var++B7hf2E1ltXUDj00xkpPhHwZkDkn8G78GzibyQ+pms3IfUnu6cCIrn8Q9rtEw\/ngzZVkXoAHNb4GWw6D0Rzk5XKAdbmX4VHGid+BRI0nUjNlwSEOnX6dhSYXahpa9n27dHGyh8dw2KpxfAxTTNviyY=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0pvxAAEAGXg\/AqABnLiFGiO3sAbtrdUmC0XyeQ4AQAT813wAAAQEICgAD7ozOjo11","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2100{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1326,"pkt":"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","pkt_caplen":1326,"pkt_type":2048,"pkt_ipoffset":14}
+1230{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":23,"flow_packet_id":10,"flow_first_seen":1436720908581,"flow_last_seen":1436720908634,"flow_tot_l4_data_len":4690,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-g-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}}
+0401{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0pv1AAEAGXg7AqABnLiFGiO3sAbtrdUmC0XyjL4AQAWw13wAAAQEICgAD7ozOjo11","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":237,"pkt":"QPMIw47hABsv8H60CABFAADfHkVAADkG7RsuIUaIwKgAZwG77ezRfKMva3VJgoAYAeZpsQAAAQEICs6OjXUAA+6Jej2sNRDNQIdNG6VR7td2+0Sd2ApiuLVkgpTcP7yA60mXJoaj7HjfK98r1oit6MVz\/f2Zy5aXFecMMdHZG9mN+bU0+XJuNGn3ufs984iKn55U37SjXhAuRMQUiLliS1sQ+macYpc1gr17pikpO3Bh0w0lB27Q89c+Fu5zYrx3WC7Dfxl29aXxHhoonj2NBKCv2blajkD5FA2z0IluPib7xyvwFgMBAAQOAAAA","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0pv5AAEAGXg3AqABnLiFGiO3sAbtrdUmC0Xyj2oAQAZk13wAAAQEICgAD7ozOjo11","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2304{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1436720908572,"flow_last_seen":1436720908636,"flow_tot_l4_data_len":2076,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":346,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-h-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"7df57c06f869fc3ce509521cae2f75ce","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}}
+0401{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0iD1AAEAGfKjAqABnLiFGrq4OAbuyG2h\/5av+OoAQARI2BQAAAQEICgAD7oyuiQrc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2313{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0iD5AAEAGfKfAqABnLiFGrq4OAbuyG2h\/5awDxIAQAT82BQAAAQEICgAD7oyuiQrc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2107{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1326,"pkt":"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","pkt_caplen":1326,"pkt_type":2048,"pkt_ipoffset":14}
+1230{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":20,"flow_packet_id":10,"flow_first_seen":1436720908572,"flow_last_seen":1436720908638,"flow_tot_l4_data_len":4882,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":488,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-h-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"7df57c06f869fc3ce509521cae2f75ce","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}}
+0402{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0iD9AAEAGfKbAqABnLiFGrq4OAbuyG2h\/5awIsIAQAWw2BQAAAQEICgAD7o2uiQrc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":265,"pkt":"QPMIw47hABsv8H60CABFAAD78oBAADkGGJ4uIUauwKgAZwG7rg7lrAiwshtof4AYAebhPwAAAQEICq6JCtwAA+6IYFSYv4mudxHFz5sxywWWsazXJFrgzvE0JK+52sA0dU9CLiZ3XPU5E6dDL7dHmHEkPuJ4\/Da3Zh4f9Lcgmw7U50W\/D1et\/l4S8edGh2S9NNLemgTFDCn1oQVs3NJP+re0A0XN9fbbCsoMKGyL4kcoXYy+ThQic2K2WQhBsA5O6FVtwQBG1voUB85e4vFzoES4ba43SS+d00unyRJCUtpA+7cx6dCi6nnE2pwcoMHgiBqeh+sNCtpqm5CSYwxPVhYDAQAEDgAAAA==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0iEBAAEAGfKXAqABnLiFGrq4OAbuyG2h\/5awJd4AQAZk2BQAAAQEICgAD7o2uiQrc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0kE1AADkGg3hSVRqawKgAZwG7oN0D2rVn4E5yZoAQAeYwFAAAAQEIClR5JS4AA+6K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2304{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1436720908576,"flow_last_seen":1436720908660,"flow_tot_l4_data_len":1852,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}}
+0400{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwhAAEAGbb3AqABnUlUamqDdAbvgTnJmA9q68YAQARIuJQAAAQEICgAD7o9UeSUx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwlAAEAGbbzAqABnUlUamqDdAbvgTnJmA9rAe4AQAT8uJQAAAQEICgAD7o9UeSUx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2099{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1326,"pkt":"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","pkt_caplen":1326,"pkt_type":2048,"pkt_ipoffset":14}
+1230{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":21,"flow_packet_id":10,"flow_first_seen":1436720908576,"flow_last_seen":1436720908661,"flow_tot_l4_data_len":4658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}}
+0401{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwpAAEAGbbvAqABnUlUamqDdAbvgTnJmA9rFZ4AQAWwuJQAAAQEICgAD7o9UeSUx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":237,"pkt":"QPMIw47hABsv8H60CABFAADfkFFAADkGgslSVRqawKgAZwG7oN0D2sVn4E5yZoAYAeZypwAAAQEIClR5JTEAA+6KhsQiwLeeuOF2Z7LxHmzYA3nlcKy7XAtNGWLkeAGLtHOKGL0jDW7S5oGEYJgH3WQ1WFfVEewvE6nCamh5eUjP0YtfQZkD1\/x4jPtnMJXki9fNSh2m3rZn0KJ+6Ak9oK8JiBwt\/XAN2Zk9Wfl3RvszQ0HLTicNdjU7IEuBMTT+Gc8tvjtkZVCVQaMp3f7oKFKuuIuB0MGZe5sRI54HdpoyRuzVFgMBAAQOAAAA","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0nwtAAEAGbbrAqABnUlUamqDdAbvgTnJmA9rGEoAQAZkuJQAAAQEICgAD7o9UeSUx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0MTFAADkG4pRSVRqawKgAZwG7oN5hmBQa4jr4AIAQAebsFwAAAQEIClR5JTEAA+6L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2303{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1436720908577,"flow_last_seen":1436720908663,"flow_tot_l4_data_len":1852,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"}}
+0400{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GZ5AAEAG8yfAqABnUlUamqDeAbviOvgAYZgZpIAQARIuJQAAAQEICgAD7o9UeSU0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GZ9AAEAG8ybAqABnUlUamqDeAbviOvgAYZgfLoAQAT8uJQAAAQEICgAD7o9UeSU0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2102{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1326,"pkt":"QPMIw47hABsv8H60CABFAAUgMTRAADkG3aVSVRqawKgAZwG7oN5hmB8u4jr4AIAYAeYyHwAAAQEIClR5JTQAA+6LkUtADfHn0Kc7j6cynd6dqXEQ3\/RHTMctqSE0jukLbznxyQAEGTCCBBUwggN+oAMCAQICBAcnju0wDQYJKoZIhvcNAQEFBQAwdTELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD0dURSBDb3Jwb3JhdGlvbjEnMCUGA1UECxMeR1RFIEN5YmVyVHJ1c3QgU29sdXRpb25zLCBJbmMuMSMwIQYDVQQDExpHVEUgQ3liZXJUcnVzdCBHbG9iYWwgUm9vdDAeFw0xMjA0MTgxNjM2MThaFw0xODA4MTMxNjM1MTdaMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBLsiq5g9V+gmcpq1edQp4uHolYCxsONbjispmmTfoV3tsAkFbdsoLs5iomL+tIjaEus46yGdwEErAVJ7iHfTHI\/HurmItWoJ53PoEUCn0czKYo0t5Y8LplDSqFDDKOr1qyWHipqWHKlnuD8M1ff5UhMvwhvVcHDwj8ASygbLmuHZyjN6d9b47LnxaERCSBPSwMKkrl5g\/ramBfy03QdZAtRZGJhj9aVj4JAMfV2yBnrzherr1AOuXoQ+X\/8V7Wm8+Tk2cnXPd1JN88mQLLk95ckjUz8fJJghXAeZKb3GOuznboY6a5d0YzO9aBgx8HiNdr\/8no5dKoanTZDcJxo5AgMBAAGjggFHMIIBQzASBgNVHRMBAf8ECDAGAQH\/AgEDMEoGA1UdIARDMEEwPwYEVR0gADA3MDUGCCsGAQUFBwIBFilodHRwOi8vY3liZXJ0cnVzdC5vbW5pcm9vdC5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCAQYwgYkGA1UdIwSBgTB\/oXmkdzB1MQswCQYDVQQGEwJVUzEYMBYGA1UEChMPR1RFIENvcnBvcmF0aW9uMScwJQYDVQQLEx5HVEUgQ3liZXJUcnVzdCBTb2x1dGlvbnMsIEluYy4xIzAhBgNVBAMTGkdURSBDeWJlclRydXN0IEdsb2JhbCBSb290ggIBpTBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vd3d3LnB1YmxpYy10cnVzdC5jb20vY2dpLWJpbi9DUkwvMjAxOC9jZHAuY3JsMA0GCSqGSIb3DQEBBQUAA4GBAJMd\/ouuRuzLqQ+r5e\/KsmgWaNiP+hOpr7PLLedLbo5pKsIrEAqN9q5ztrn7FP1fbbhQtsSK1kB+18PLc9zJXVuvsEG1N+vq3CCRxDRq9KHzlp03hpfhcaTdffpEhJSu1wkEInYPZFE1qSQP+QvbMtrC\/sG5Klx6JxPKsUg6cdBDFgMBAUsMAAFHAwAXQQQIXoSOSFZW8unPAYwUWxMSzEbBSIgHYsapWTXry0xfJIgf0rMt\/ATR2am5iIExw\/cQm0yJ198rvVD118Vo2uG9AQCP7394WatLKL6uiulyfsLeeLEvxSI\/pS2Vy6WHBnDIlqipwCWuNQsLQPQMlTF5kNYvdIby7G7EIm\/DXDnA5ZyCJyEa\/47lD15hjT\/svpk\/tZMEOwiTwlauYNyOxfoC","pkt_caplen":1326,"pkt_type":2048,"pkt_ipoffset":14}
+1230{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":22,"flow_packet_id":10,"flow_first_seen":1436720908577,"flow_last_seen":1436720908665,"flow_tot_l4_data_len":4658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1","client_requested_server_name":"igcdn-photos-a-a.akamaihd.net","server_names":"a248.e.akamai.net,*.akamaihd.net,*.akamaihd-staging.net,*.akamaized.net,*.akamaized-staging.net","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"34d6f0ad0a79e4cfdf145e640cc93f78","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=NL, L=Amsterdam, O=Verizon Enterprise Solutions, OU=Cybertrust, CN=Verizon Akamai SureServer CA G14-SHA1","issuerDN":"C=US, ST=MA, L=Cambridge, O=Akamai Technologies Inc., CN=a248.e.akamai.net","fingerprint":"EA:5A:20:95:78:D7:09:60:5C:A1:E4:CA:A5:2B:BD:C1:78:FB:23:23"}}
+0401{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GaBAAEAG8yXAqABnUlUamqDeAbviOvgAYZgkGoAQAWwuJQAAAQEICgAD7o9UeSU0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":237,"pkt":"QPMIw47hABsv8H60CABFAADfMTVAADkG4eVSVRqawKgAZwG7oN5hmCQa4jr4AIAYAeZ25wAAAQEIClR5JTQAA+6LVZJZEf6qm6QysDIqa91QGyxXK7TIE5ZXmcrbgWPn7mmMIVywT8rdys42m+KuO7Vo0WEGwp2Lt6uQUUmfrXlamZzgiDEEzGhSHNw7QPJ7zZXXYoEQexwPFCcVcuOmAqSH3ahj6nX5xk6nb0VPAAB9NQ\/wSrA1fzM\/lOZ5bY2UOh6oUhbTM1lpo5cw8MIWAIo\/oZ0B+F4ZqR\/e0MGjFc\/lkrBUFgMBAAQOAAAA","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0GaFAAEAG8yTAqABnUlUamqDeAbviOvgAYZgkxYAQAZkuJQAAAQEICgAD7o9UeSU0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0586{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":200,"pkt":"ABsv8H60QPMIw47hCABFAAC6pv9AAEAGXYbAqABnLiFGiO3sAbtrdUmC0Xyj2oAYAZll5gAAAQEICgAD7pLOjo11FgMBAEYQAABCQQQNrcwOPpvyB2RqwohSVCfJkYWZyp\/y\/Fv5VDaQoiTuoX78TZkglEkiaamcDiFpdBhqFJL87BanZLJx6vovMQqSFAMBAAEBFgMBADBw66UeoH1d7B6dbnEV7KrPi7S3D4k0iZ9yv1fbaGnl2F47dyqq\/mEFpTjgnGgrLSk=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0585{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":200,"pkt":"ABsv8H60QPMIw47hCABFAAC6iEFAAEAGfB7AqABnLiFGrq4OAbuyG2h\/5awJd4AYAZlicQAAAQEICgAD7pSuiQrcFgMBAEYQAABCQQT4lbEv2t9NaU1uug1bQRj9hYrVZWIyVJPsDfHcjnGCadATPgBs3U+4DFzH\/TkvKtmRBNPcCeoGLyjkT8tj7AtoFAMBAAEBFgMBADClNUJVXlESWPmmp6bmzEKv6Qi8Cfj60BkiiazSLbq9XSxtunbocebFbfdGYklTgP4=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":102,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRgAAEABOq7AqABnwKgAZwMDAwcAAAAARQAAPLKEQABABvFRwKgAZ63CKBTA\/QG7ZKZcEQAAAACgAjkIlxQAAAIEBbQEAggKAAPulQAAAAABAwMG","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":102,"pkt":"AAAAAAAAAAAAAAAACABFwABYvRgAAEABOq7AqABnwKgAZwMDAwcAAAAARQAAPLKEQABABvFRwKgAZ63CKBTA\/QG7ZKZcEQAAAACgAjkIlxQAAAIEBbQEAggKAAPulQAAAAABAwMG","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0XL9AAEAGoLTAqABnHw1dNIPjAbuhtuNVEOOTxYAQCtA9dwAAAQEICgAD7pXwILKN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0596{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":209,"pkt":"QPMIw47hABsv8H60CABFAADDkOFAAFUGVwMfDV00wKgAZwG7g+MQ45PFobbjVYAYANnAZQAAAQEICvAgso0AA+57SvaW4hpGs+esYHa8jLC80pZXxBA3FlANKYGyStG82KwmwL43A5GtJ8oACIwMu6emjDMA6LNYqdelJ8zdPKsIXCzh2S4+DgOyq0XdA5OGCfWycm\/u\/7meW3uMdYAZZ+hfm3ePgbJdBPVAqIhjz9C+f1qx1C7dLYibaiXI+hzpYXr1X4aAFWSzgujxdbU0kXw=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0XMBAAEAGoLPAqABnHw1dNIPjAbuhtuNVEOOUVIAQCtA9dwAAAQEICgAD7pXwILKN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":1464,"pkt":"QPMIw47hABsv8H60CABFAAWqkOJAAFUGUhsfDV00wKgAZwG7g+MQ45RUobbjVYAQANlQjAAAAQEICvAgso0AA+57FwMBCICst5U4amk8vjSdQDGrrFt+x\/Jo4oVa6\/24yeJWJ5DeD0PlpW8buMWrFLfCRjduilp2IpXrbmgK\/Coyr2YKh1751D5nabQgGr7q88U\/DQhD\/zXgZhqmkFE7pqGpykWdYgeJ2B+oS7zICC60fDnvgCYFgf5Vjn458gu2pqVArzU8TUobQQ8oHqOUfeajvroj77xXRqLp4vLY7Ef0nGbAC2VBqQ3HaWSTqyI5tzrJY56lEoc0NmkT4dO1x+9b0wiEQ0JPVkqz9CIaV1DYntrk8KT6tnLjhEd6CWQOOBX7CJruALYeSWugDTviCmC5SL9jbRDbMNAC8JawDKWrRUS\/HQ11JiMUEvfRkWHgmqe3Ykn8wkMWcEoyc6CscIIJUfI4ofM3bPMxAzrQcLPsPwZmnaesEUGFZlC0i2DKegoU8zaCRfpkR8pNv1En8SLp3NOS3bouw2xCmjYisH8FkadyD6mzcsX\/ffRzkBYzEmFSeZ+z02nFy6tgWHRuMiHhM0pmdU1NuIRTfw0+\/4tRGX0Ei9ikg4QdZy\/5N\/BS\/Ivv1wobqMOBnFbCuuy3QKKPIeK9ixdHBd\/FXuWx5+VJQLCMZrQPZHydw6kuDxLsFy3jrhiOjLRjCnai68+1t8h0UCvBo1ySNUcajAKQUxSjaz7iIHy15qOodDhF80QktWrP8eff09c3QXBiQLuDYieqOydO9LDMdowzUhRjoa+zmVK0ASFN2c8Bpg2M8Wq0M3m96WT+1eF+YCIJmjUZqadZznNGzvAALB4vcBIvxAIm+AYCAu8nuTsY1RiHx2Wsin5w4Hbs\/9FHkFlFftGlbOqP4fywZW6GUTvWYlUeF594k\/xKihTS8xBQPHRBtf6Bp0gFDjm3oFROtEMjPnAFZUGk3DwJw237eTZ4rDAaWc5eD9Z4ueE2QdedkKxBwUlbZp1Hsu\/KwcsJfH0skGeQXmnW2ticSkU+6QpABjGzgDVkyIeKfYyEaWR3aP8nypQMWfoFGxsgEJUoUH6lRZwxBDcNK2AWaB1JlSBxz05g72piF7J8Z9VJF8pgZjbzr0dXZrvuBxzBs3M58\/QWsJNTWqCV2yDqVuL4yKGJ0QOceHp\/keeVZ\/bpFtC28q90vbfxBmUiX2ez8SJeMVRasTNntFyeOmPzj9\/Wzpt32TAoUYRNiAnvJ6EC1A2I6VHnGt+4P2lg+wePJeVwWGqGgeTFXz9Bnh4I\/nsWfvv5sD0svrsktwYUaK51SUMheJyjeFlB3Q71iepCzvWPs9sraibyMt0HyZgPZqw4ys9Gu2e8ufapGo+xGJ1TNk4x7bpK8WpbECujNeaRhKYg929AOD5b3EdeP3yMIx9FgP3dgL8tUk5n3o1WhiosUdCtgyoyfcII+QN94KgFiffDOMMCxQacZKf8ysXjQra\/NjZjcKm3aysWpIKP+bhPPrmJxdr+NHRtwNNDZtn2+gF8NIpR2E9wJKvvSAn8PBwr647vO1lImh4i5wbOE3ep+EtX0HTrFR7X\/whRKKzsfMD37Y+3\/cBPReaMHTQy7o3bCWS5L1flRfFvoBcwjxsgIpaBLouRRKe7HUrkzpQDqzmJSYPD5tjgt+tKxwcsOO07S8Tc8W9BJDSG3cHFoS4n\/kcd100M50e4qvSLUaVIxOTR6\/oyzuwqOBUjQ8T\/xugIsot6J8twQVtJW4gHsJceYN3fC1GBvhuXNfrDACXmNsogI3dYGYtD+TLZlLKDlFfwUgQVZaSMMWB8ig6sk4k4DmTKQrAAQyNDBqT69nbbeG6usMjSJo4yd91ziyMylLr+KI6OJ1W8vKUj+\/aFfsYTU+YmAgDk6tRtcuJddtjwQfRYfjIwnTVjtbWe0uNtIKmG","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0XMFAAEAGoLLAqABnHw1dNIPjAbuhtuNVEOOZyoAQCvw9dwAAAQEICgAD7pXwILKN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1465{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":849,"pkt":"QPMIw47hABsv8H60CABFAANDkONAAFUGVIEfDV00wKgAZwG7g+MQ45nKobbjVYAYANn7NAAAAQEICvAgso0AA+57vqM\/rbp9CmiCrCYv7ZxmQ8gfbaUtOkvN7gLl6P+T7VYllBrwtz\/8BscZfzDP3OGsIdYSGeOJVV9rwxHb82c7NbS6fIfL3k66FzmYFP6A+3+pJWNSuOin5Hr3Dy2u6p+xKxPLoXRj+BxFD\/vN1sjIOmKtoLgoBrTwPl6BS7chk5ej7RT9xN\/XZ3ni\/vpyxT+Rjx9MRy8vrGoy1VcZ\/aDH+vmzs4ufcQgnIYr0PTlD7OaAml4729Q5\/18c31YrHPW1\/+OItJgG+sGssF+bZBAdV4VjKfdXiS7XBARuOK\/3aQaT51HcprljLK2UfCrGdMZbSoBtdYAAhwBFihtD74hNGbF\/ymMdj5XLWnY1wNCxjpHMNosfIO7Yym2+dzXdHOCvoWIBRltgCvrFigwbPbH0eORgy4YfasOryNdkx3q3+kXjz2ks+SPezcyIHWfLa2I9zJ0ETpw\/F2fLsN9tsgAAcTteIUF16VbdL0VPvd8bi4lqd1RXLvSIjM942Xkw8V\/ea+rr+80Y+cOzkvqZAcrLe8HZcG6uyNZOcdaMp18BcMoPnJAZ\/rMWhX8N8a4H4D1zxMfnSw6CjOUUYpVa6ZwmF7xphVE1XeNWMMdIhKcPRZlXN\/9UwHhq\/nbrHdlc2BM5aK8EtqMGvyHyWd2GI+d1Ox4MABJM9v8uRgpN\/SFCfe5MUOOe+Xusx2cJmhUkNRH08p4yAYUlLTPnHHBkIRuvJJWEQhfOOFfLvC27vk0MNKJNsa6WAD+xt2KT8hPvleSQlfoRHNeNRMxOj8issvbvq4Ltu27LB9g9Tvesjx\/AMSEXSon\/1WbiBVLzaatGlcJCMx5RftiZLz4zmIAlXda4Ug9qkhq7AZLrrwifIjxmyQtIUZgG+CKGjwz+qb2M+19g3XeL93A72GjYDLs6MeL4pYpSk832Peh8c9spqvudkBlTQoAfiCkNCpO\/8i8PKu3Tv5NjkUzWXrnJMd5JT6pwTU49CO0NnKVCrAB9PUcNzmextCNDWVjXzBqh8W37w5wGISxUgW7RKuMk7L1eq7IX","pkt_caplen":849,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0XMJAAEAGoLHAqABnHw1dNIPjAbuhtuNVEOOc2YAQCyc9dwAAAQEICgAD7pXwILKN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":332,"pkt":"QPMIw47hABsv8H60CABFAAE+HkZAADkG7LsuIUaIwKgAZwG77ezRfKPaa3VKCIAYAgiEXQAAAQEICs6Ojc4AA+6SFgMBAMoEAADGAAAcIADAgpVMjhoyukvbzvvgY8vKzzOQXc5WS+T9Fz64ybIJ+UP6rNreXoZoJ0059H5M8pBOsM9bV8AUU2Frut7ACZUy0Gc8M3u9VYuaHUORkYQ0C3D741jwbENaHO2wbg1fMXLQxC4d5Pau3mMQLuThKHHX3j7f7uviXtmTpVj+ndo3e1Y7l8EA0qKwQZvgTvQPiwU\/tkai18YpN0PhV3dn2PNZmO1DssPI3O6i\/SszK9gdmJOQ+3ssdsnyu0lmxAi51dn\/FAMBAAEBFgMBADDqMVQdS4spqkW1K9BD2JYxZe+PZ2LQ8jX5Tu7osD4qRAHJV3QdpZm9Vb1PhvwVGrY=","pkt_caplen":332,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":200,"pkt":"ABsv8H60QPMIw47hCABFAAC6nwxAAEAGbTPAqABnUlUamqDdAbvgTnJmA9rGEoAYAZlFmAAAAQEICgAD7pZUeSUxFgMBAEYQAABCQQTqeXAmF1NCemBH1yW7FM7UVYcAvIux1s7dWT1f9587mdfzJbHz4K1nze+ad9+HvOIhQsrFJRjZFCylCC6t+KPAFAMBAAEBFgMBADBYIo6lLE+\/X9LC4tU6CPEoEccvemAqsLmbf69lY0bwT3WF38trjz1ePFCayXhVQa4=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":200,"pkt":"ABsv8H60QPMIw47hCABFAAC6GaJAAEAG8p3AqABnUlUamqDeAbviOvgAYZgkxYAYAZmQaQAAAQEICgAD7pZUeSU0FgMBAEYQAABCQQQ3nG\/\/dhmhmt1O0l6JeZrWbfDZOW5KRTHt5viK+oD8iV5sw6mI\/jXUuvq2ECW4tUJByR3VJ72FfpV3kLcp4hxDFAMBAAEBFgMBADDznkJSP0rWEgZUl7auyS6iL4xRlTYWLepC6bPfE6JoAgWyOuZf\/32sKLpJ4dImkJY=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720908,"pkt_len":125,"pkt":"QPMIw47hABsv8H60CABFAABv8oFAADkGGSkuIUauwKgAZwG7rg7lrAl3shtpBYAYAggwvwAAAQEICq6JC0oAA+6UFAMBAAEBFgMBADC6VroIWr\/hqwVJg27ZwPqVZhFQAA2pfaRQJLHVGlJachV2kuh4w5UzFNVZpii0P9I=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720910,"pkt_len":66,"pkt":"QPMIw47hABsv8H60CABFAAA0kOhAAFUGV4sfDV00wKgAZwG7g+MQ46QTobbrH4AQAOvWPQAAAQEICvAgu0UAA+9u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720911,"pkt_len":102,"pkt":"AAAAAAAAAAAAAAAACABFwABYvSEAAEABOqXAqABnwKgAZwMDsMAAAAAARQAAPKDWQABABiwxwKgAZ9g61GqoYQG7BIhPUQAAAACgAjkIbeMAAAIEBbQEAggKAAPvhwAAAAABAwMG","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1436720942507,"flow_last_seen":1436720942507,"flow_tot_l4_data_len":1450,"flow_min_l4_data_len":1450,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":1450,"midstream":1,"l3_proto":"ip4","src_ip":"92.122.48.138","dst_ip":"192.168.0.103","src_port":80,"dst_port":41562,"l4_proto":"tcp"}
+2341{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0JelAAEAGxsfAqABnXHowiqJaAFDOG+PYTO4eiYAQH+pOOgAAAQEICgAD+8dUZNR5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0JepAAEAGxsbAqABnXHowiqJaAFDOG+PYTO4pnYAQH+pOOgAAAQEICgAD+8hUZNR6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2321{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0JetAAEAGxsXAqABnXHowiqJaAFDOG+PYTO40sYAQH+pOOgAAAQEICgAD+8hUZNR8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+7YtAADkGAJtcejCKwKgAZwBQolpM7jo7zhvj2IAQAkvifgAAAQEIClRk1H8AA\/vEI\/Z3nHCZVeM5zhReGJS7M8RbYLp1EthEFpJ1JFog5\/M+J3g4Ibjw+Sf8XqdncVbgL5KoPCnx8bguykVb5s3ZbMEpvvumaDIJZh2L5uYIrH2SVmJGaH6pmIFLaSN1wCifTa+DGraJr+HgVz0dGQ4GQKihrMnZxAaeuNCMjWPGJTDdlOOSfE38IGVd3CUJOmYR5tAv1v67HY9FnJe8DGE5YCiOhULFC+vZ74VBCrBRzrTUR9NbZO94QayxQoABtPcbfgvSA58moUZgeYdtIg6DhIou2Dm0\/lmmOTx649PAajSYbk8op5U403k1TKsOd9c\/zvBRSKUR8WGxnCgF3HZmxKbFq7DgBuohnrIfq0C69kGHNFkTD8DQlnwCB8QY9m0cMOE321o2JN0Yknncn0oHqU3XfxoHOaMAUj3omEF5A7IfNF0tQyaHv1RpJ1wcts4Ck9AJIPYKAm0BUEydZ0Ld4hQiDpjmTfqpyoKPCLM8Ak2CQaQrwjp2GwLicZyWtnamthNrCWO\/KIInhUH6Otv+9OMigrK4xIuWr+9QgGMytmI5cbCJqZdm7GrB3XavL+5swOEzS8J3yThFhCNBT3TijO3Cw\/McqqpvEXPalougf89MEZd7cl0CPZLzesdzsEzOfD4Sokr42FAE8sE4LcAEaKtVDzHBQ5Iln8EDNv5eEZUgLYYPUhqPmTbvlO\/IfYBLDV2CNkCghYgRKrrFa2FKiIag\/PxLg2xtpVPhiAK7gPova2EcgBVv18sleIe54jQzJcfSJbjLD2kLC+igeYNqIGuElC6xeI1QOrbJEhJVZsArvVLFdmnBsJo9mWM0pcxpgbXS55qPLMfM5cAQPwyIH4ALZqZhw0VyqfEmsPC7tvydQ5Ewt5SlPpWY4fzXATFP5Xilp5zGEjGVfVIpuaArHoQ6M7\/CjjVbCdOGIsfG9IheGGIAMP8AE8WZ55yfq9DiDbp888ChAbtNRTglWVDAAL0DC2ECi\/gTVciqVfGx4OdMZCjLUGSvbrKpDVK2GlW8XdEw+BpDce0XegZQljsSxVOy5vgoaEMQYtiZwO7IFaVV4QIHuQpIJucJK6qoftZVxLoFPJFxA3ph9bASXA1wU5PNwAOfP1fqnYRPcqv1\/anHPAgF8ITQi2b7pLicIPjYzW4d20HMMvYArCni3Ng3m4FCV4UYPhwrpZnSzMXTOomJjJHmpAMVlGDc\/IG\/kZQfPBiwgECCQnJGqKYNYRpF3cHMe9nvcMiILF\/sLBgwK1WCHRHh0h7GWhIRhKMo2kkxaTQOWZF4VCZOhzmZl6rbjDJxia2rSx5SoRvDbAxbe0CAdRkyKTHgzWTY79QoiDBIMlBQEsHWxFNx4eiBim8FZ4ATJGZTUUG7sWR+bVgrkdJsv4GykjATE6H6AMhPNnhDL5JNCnPSIaVTT4oZumfJR7UxYnHCUlp9IW6C8iv5B3RkdQxD\/mdM61LxF41EfCdoa5eSjr\/IJYywUrsaHln7JgDbUU0JghBvrpGqJ\/mAbSzhnj6DgsALJH7eDQr+02BPIq6snBs3WTM4gCJ5T4RC+VRaLQO4EINaRNRqquSKBanJcmrQ6d\/9kzjAcw2YL9BXNHYOuM6hfJIfoeSB\/ocAGX+GYOg5a3fgem\/DftBQgfwz9ajSrRAcLBZqCwVBNkad4fazEDj9rPOVOt3kMlgZslAxjgWRnV7XjCcogkT8Wj51Z6Cvp8juL4IjXcf7kp5jRcUZmZLQjqTSmE\/mOnXskxQAKiOCrMx15l08APGslA+NCJIYfkA0BYexYipApvKDqRuCI32kToC8PBuQArQDPS26A+KeCYzic0IlN+y6YI10+jd\/M6M8JwHt4MNMppnINm5GDS1w4rpxB0Wyu0+FKXARrbq4puUZDJE=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2313{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0JexAAEAGxsTAqABnXHowiqJaAFDOG+PYTO4\/xYAQH+pOOgAAAQEICgAD+8hUZNR+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0Je1AAEAGxsPAqABnXHowiqJaAFDOG+PYTO5K2YAQH+pOOgAAAQEICgAD+8hUZNR\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1436720942530,"flow_last_seen":1436720942530,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58052,"dst_port":80,"l4_proto":"tcp"}
+0751{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":326,"pkt":"ABsv8H60QPMIw47hCABFAAE4n8hAAEAGa\/HAqABnUlUaouLEAFAvtWVoUhBMjIAYFINNAAAAAQEICgAD+8pWC84nR0VUIC9ocGhvdG9zLWFrLXhhZjEvdDUxLjI4ODUtMTUvZTM1LzExNDE3MzQ5XzE2MTA0MjQ0NTI1NTk2MzhfMTU1OTA5NjE1Ml9uLmpwZz9zZT03IEhUVFAvMS4xDQpIb3N0OiBwaG90b3MtZy5hay5pbnN0YWdyYW0uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBJbnN0YWdyYW0gNy4xLjEgQW5kcm9pZCAoMTkvNC40LjI7IDQ4MGRwaTsgMTA4MHgxOTIwOyBzYW1zdW5nOyBHVC1JOTUwNTsgamZsdGU7IHFjb207IGl0X0lUKQ0KDQo=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1436720942530,"flow_last_seen":1436720942530,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":292,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":292,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58052,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-g.ak.instagram.com","url":"photos-g.ak.instagram.com\/hphotos-ak-xaf1\/t51.2885-15\/e35\/11417349_1610424452559638_1559096152_n.jpg?se=7","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1436720942580,"flow_last_seen":1436720942580,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58053,"dst_port":80,"l4_proto":"tcp"}
+0742{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":321,"pkt":"ABsv8H60QPMIw47hCABFAAEzOUlAAEAG0nXAqABnUlUaouLFAFD1YMTERbSUBYAYD2PW+wAAAQEICgAD+89WC83JR0VUIC9ocGhvdG9zLWFrLXhmYTEvdDUxLjI4ODUtMTUvZTM1LzExMzc5Mjg0XzE2NTE0MTY3OTg0MDgyMTRfMTUyNTY0MTQ2Nl9uLmpwZyBIVFRQLzEuMQ0KSG9zdDogcGhvdG9zLWcuYWsuaW5zdGFncmFtLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogSW5zdGFncmFtIDcuMS4xIEFuZHJvaWQgKDE5LzQuNC4yOyA0ODBkcGk7IDEwODB4MTkyMDsgc2Ftc3VuZzsgR1QtSTk1MDU7IGpmbHRlOyBxY29tOyBpdF9JVCkNCg0K","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1436720942580,"flow_last_seen":1436720942580,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58053,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Instagram","category":"SocialNetwork"},"http": {"hostname":"photos-g.ak.instagram.com","url":"photos-g.ak.instagram.com\/hphotos-ak-xfa1\/t51.2885-15\/e35\/11379284_1651416798408214_1525641466_n.jpg","code":0,"content_type":"","user_agent":"Instagram 7.1.1 Android (19\/4.4.2; 480dpi; 1080x1920; samsung; GT-I9505; jflte; qcom; it_IT)"}}
+2318{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2302{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1475,"pkt":"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","pkt_caplen":1475,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8lAAEAGbPTAqABnUlUaouLEAFAvtWZsUhBSFoAQFLEuLQAAAQEICgAD+9BWC9LY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8pAAEAGbPPAqABnUlUaouLEAFAvtWZsUhBXoIAQFN4uLQAAAQEICgAD+9BWC9LY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8tAAEAGbPLAqABnUlUaouLEAFAvtWZsUhBdIYAQFQsuLQAAAQEICgAD+9BWC9LY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2311{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0n8xAAEAGbPHAqABnUlUaouLEAFAvtWZsUhBiq4AQFTguLQAAAQEICgAD+9BWC9LZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2312{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0n81AAEAGbPDAqABnUlUaouLEAFAvtWZsUhBoNYAQFWYuLQAAAQEICgAD+9BWC9LZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2307{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2311{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2306{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720942,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0n85AAEAGbO\/AqABnUlUaouLEAFAvtWZsUhBtv4AQFZMuLQAAAQEICgAD+9BWC9LZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1436720950909,"flow_last_seen":1436720950909,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":1430,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":1430,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.86.52","dst_ip":"192.168.0.103","src_port":80,"dst_port":58216,"l4_proto":"tcp"}
+2322{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0TetAAEAGtojAqABnHw1WNONoAFAuGbTPoOL3GoAQH8w2dwAAAQEICgAD\/xATwkKT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2309{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0TexAAEAGtofAqABnHw1WNONoAFAuGbTPoOMCBoAQH+o2dwAAAQEICgAD\/xATwkKV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2302{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+2306{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"QPMIw47hABsv8H60CABFAAWqgMxAAFYGaDEfDVY0wKgAZwBQ42ig4wd8Lhm0z4AQADtwkwAAAQEIChPCQpgAA\/8J4Uvu38moQoEmPYx93F5fe7mhjzhDyK2qx1dRPvdQ1NVvRBmMqst2uIWLSVqVVcrHUpzYrd9zFc+QJ93rF2ucV5NN+MWAtkCeIWI9YY9+YTTdknlzygj3v3sTyqHdz5e8wt2zXYlW5IJ6qqqqrWhbmCUuTRrVdoRVdVF9HnN4lyetbNC9MS1nCy3JjdUTZdmyid9\/JOMMfxmVi\/P33e3f3u7ljfs17\/WvEG7rXb5\/x4R5Hq8EmL\/XxJIHSdKAVlCKwWx34W\/xhTAZ+lgO7amXtZGjVmPelWH8WES\/RuEnD781tqzv3Ld8mhXL0Hbpbgpu7it3e1VXNo3vZRWLirTEvr8qp5YJKl\/22QqCMQMDKR\/RWYeIZA6UnqXV6yCuoKh4kCdC3A4b9P7hTDuYdt2QvombaPxkDv6Do4Nm+zs0UfJXB4n1AtJlpzjD111Ll+1rcRvd79hzkclfkvquvapEBJvG8my\/feOgOlSgpBqFUfOG8KpqmSVdr\/iXpF+rfHY0bpUmbFJnx1rQ4ZYlHEBHdj1y+K9xzryKomXit86LXW3L2IIUwLNSZO5\/NjDoVc6EVUXFO0JOTRdBHqLrVcXNmVBSqqououtTZqqS15C1pa2ybu\/KPivBVcUuZwHuN2oO06gv6qhNrG9jrJw3EkLL2Q5Svijb3qTXvu7+\/rqSgNhNDS9jL9cHVjU1Nlh\/L7qQFkDXKWPIgODUuO4Fz5JnrmMUbG0YWICk8CQRIcOAA4TAH3UROeOj\/Q8foSmoQGLTCMA6oJHUWH7IcB7KGGPsUggFy83kv8I5YB4G4Xqhpz4\/IzT4hNrNGpVKKj0R+ouAd6ll+lTxcxixj5b5+jZwQA5jI+IGuyBCNtgycPC+fnIPzUwXqWWkvxXf2Wna1X56srvfkWv+bu9+rGy8FtIQwl4rfYy\/jQqpRIMJMDwCjkqA2gOvA\/kOwfAdVJDHfwrpe3fjiC4vFPLR0wB3yeOZMgfh6NqIKB+eVLj+upz1EQd9D3STx9Mt89qK2to6chKDDizE\/sFO3uK3d73f6jt31pgkqqrh5lSa9WOSveXzm5covlnZagki+XxzoaEouOUChkgcDBiZR4+JLj39\/RYvvDD82sc32Es\/fLnrr7qCPk22X77rQRC+a+yrsEdak6YVLpCT0uY2KShTxaxDDCrU9HXiGWYy+sLmCpIJN13Zfls6sJRRyPsn68u54Xf4t\/Quy8vkxb+rsv\/+X+TUmgnB2Y60JPYrnNt5mJGEYsWrDKUEuKsLmNexIkS45o0pTXa8l8uFzxF94N7Ri7cuYmS78tK1Ct\/hHlpGP\/2GB7mV04Qh41L+6g1lvp8m9u1RQT3ijeX7\/XWpXLyw9lrr5cYlPu+x\/J47ES+\/f8EN34vObe\/axeUJcsBLZ8PlaJwS2qloHuj7PjGqy7tDcsKXF+WBf+Uj8eyvKgTyS\/GDZy723y81ypX5RIIuSBkrbsYEzWGQxWbTKLCm6CCHe4rBsNoNKZ++lLwqwa1ZEH6B7Q9QVIZoti1hFD8+X4tlVwp5sB23JVzEm80x\/sJjELGiOFq8GaXr74LeVi7lv3izbu+4vuB3lQwvUlCZDyyhgkzHdIXh1qQj6xA+LexJPgSybDc7ysXbamlLDCdwlnSPczH0Owb5Xpjvkt3aal9yNoWUvOwc35t031y\/vt\/JWl1CO5xbl+9k0aC1Nw2rIuQ2xsxqlLhGfO1g30kpfVXlFVzSLv8oRw4N2eh3SvTR3FQduxIDpcvAH\/g9hqVwIO4vHGs4g+eMq6tjUK3457SI6t0v6hRjUeOlzgMhYA+m8ZKJ+3pBLAo\/koq3ee1wIZNzLZ7FWWsHcK+Cp8gLBd0sjLbD3yRXFWGyqO\/I","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0Te1AAEAGtobAqABnHw1WNONoAFAuGbTPoOMM8oAQH+o2dwAAAQEICgAD\/xATwkKX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2299{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+2312{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0Te5AAEAGtoXAqABnHw1WNONoAFAuGbTPoOMX3oAQH+o2dwAAAQEICgAD\/xATwkKY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2299{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0Te9AAEAGtoTAqABnHw1WNONoAFAuGbTPoOMiyoAQH+o2dwAAAQEICgAD\/xATwkKa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2291{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+2294{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720950,"pkt_len":1464,"pkt":"QPMIw47hABsv8H60CABFAAWqgNJAAFYGaCsfDVY0wKgAZwBQ42ig4yhALhm0z4AQADuZUQAAAQEIChPCQp0AA\/8Kq91sV03W38Enc6h31Pa8lbRDfr317vl\/swZDIbNFxdSVl84XElLcFNuM8QfXWEGr9odZ\/IhFqXwShgkXCMM0GYYg1eWvir9NqWXPyiN37R7q0URcVvvHfdMJQba6CNwh352ZzGO4LSoKz94wprahpNIBbU\/J+S\/6RIvsKaIDeh5fVU1H9O9nwDPMxlbc2\/gjlpeIDr2uvQSvG5OhmM1K6nT5IlST\/dm+1zGhYZCYXNpjT15fQmUQUJiCTRp9BPQJO7vzt5qHM\/i+7vvShgJi7lwtIEKz9ro0Migp3d4WfFt+U+p79ywhfFYb0zPjhk9dEFqhF\/f1jheftLEwUeWBYHz\/4sgT4Qs8nAYhYgbQ6ztXFUyP45mJvomy3fyoTBt6ePmKF0iVbW9wnDQ1JzcMtS4+WXjsS5cHugFHPF7lgwV3NFdpp73C4kvFGHBypffUXEY4XIb5nHVrQlsSEb3LQDc6CYWQXezQmqY8IBxC1pqnGnKkgBtRbjhYUs45OgFjO5bBBbMh8HJaFBgzQa5huyodJzSQWbcSOmJvcUcFF31y4rd45xcJ3d90uaJpbapcv1KeHgiCi56OjGWGq1hmrrCu+OKDiDhS03AtplWaD2TdxbLdH2XS3liY4KQ6WyluOE93y\/LRdBHGjcHgrPgxWaxflljSCJm99\/TKr0wb2jbR5fkmRRkIQHH4cfSLOggb2il\/COdJXGb5m0CvaLxHTFcAvqewyLu1UJ\/ab8faPCMmK82abWO06WJafqMwPG7OJmJsXbbYleKvCEpnUXMnHpdbx3H19e+SzWlZ5RALLR7KQXbhimUZe\/zmDdJ9+cv8TRDiseKyDk8WAZdYjnYxEB9tJUGMtKzhSb1QJ40FQsA4znDQE4ZU7dA\/L+9fsDYZ7GYJ9O4JJphYNPBjRQMdmPTd1CkWVAx7mjeAAEAFExOmhlH6UmH3LkbqHx4DZsO0Ie0LYD971YxdD2BRqznPSitUwAFrR\/L5p7KWCuAyvjXMtXAdYNhgNKkTOCzrKwZoXrWW9\/ckKXu6b7u8vN3VNnZfECTCXGhgZdppnaA61pQhFvHFs6O4mTuEHgrGiIFG1UoNVfcvCAsFUWgEhSZ4PYDeNlf+7u7v2XxTIpBKF2QxgssFWg5FtjxgIdgmBEHAuL8ARPhe5+ZP2wT85OMAsdwTgo4HDoMWm5xBAAEAGeZAhEu5wPGRZYoPAAPzpCQasO1nRcLApFyGhCyOA4NgmPucsrSmYmCIwAHrM4D\/Juzh7ugTHfzRml9hkCsClzQjy4APXF9zwfg3lhiG\/3soDQGvZM00AaSzf4VD4zg4iklxcNPozSN7o4cSHdzUAF75Xagg3pkeLyha0GQ6zCeKnqlF9ir8WIH7RvmigaMQmJJb\/ClkPmZ2XhVZfBv08NtJHlu+MgnfUfeGnrwx+dcuJPepNjTXqEYlwFLVvd7n4h7z9eMuX39GPbOYtEB5oFj7deJqIm3pKnKY\/Yvuiuoe9qW9+qi\/VlZIUm7OIrN241GRLRpa8SwyygaNHsSdONjxlvYvpDY6y2MZ9veoK6HGzHoDcdk8t4fFefZ+SXZbFKKD3KQQWf+XzpWyMFWpfvHG0IbFbPLejxXyy+yCAkUSihTGAO5jGqF3Uvgjzsmot3tkgUlPGh7FUH1FO5qS4i+x6o\/TOHZsmmUTOXwvlJJCkb6VhTfTEFfMR0PNYYNIQvUM6RIgZwx+yrpFK5nMASBv0nvuh9h0lj4iWSY4hFiAN3ZX1THvtBQIGhDL++DYf7eLR80CcdlHvfHlu3FbuWVTBcOBS9z4N3RMZaywoKGILZDzPA7kolZBImEtSEUgwTrRoVqj\/jGy+EHhK5ty53khTF6ppl4D","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1436720952553,"flow_last_seen":1436720952553,"flow_tot_l4_data_len":1450,"flow_min_l4_data_len":1450,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":1450,"midstream":1,"l3_proto":"ip4","src_ip":"2.22.236.51","dst_ip":"192.168.0.103","src_port":80,"dst_port":44151,"l4_proto":"tcp"}
+2311{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0quZAAEAG4ITAqABnAhbsM6x3AFDqdVZ4KgegTIAQAtavfwAAAQEICgAD\/7RgZSg4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2306{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0qudAAEAG4IPAqABnAhbsM6x3AFDqdVZ4Kgel1oAQAwSvfwAAAQEICgAD\/7RgZSg4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0quhAAEAG4ILAqABnAhbsM6x3AFDqdVZ4KgerYIAQAzGvfwAAAQEICgAD\/7RgZSg4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2323{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0qulAAEAG4IHAqABnAhbsM6x3AFDqdVZ4Kgew6oAQA16vfwAAAQEICgAD\/7VgZSg5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1436720952561,"flow_last_seen":1436720952561,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.159","src_port":58690,"dst_port":443,"l4_proto":"tcp"}
+0455{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":103,"pkt":"ABsv8H60QPMIw47hCABFAABZAuBAAEAGAfDAqABnLiFGn+VCAbsSlgM32Tfr4YAYA4n5fAAAAQEICgAD\/7VWGIoUFQMBACAs4KplPbzXnvu9o5LJf4SK8seDxrub6gsxIshtI3HaOA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0qupAAEAG4IDAqABnAhbsM6x3AFDqdVZ4Kge2dIAQA4uvfwAAAQEICgAD\/7VgZSg5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0qutAAEAG4H\/AqABnAhbsM6x3AFDqdVZ4Kge7\/oAQA7mvfwAAAQEICgAD\/7VgZSg5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0AuFAAEAGAhTAqABnLiFGn+VCAbsSlgNc2Tfr4YARA4k19gAAAQEICgAD\/7VWGIoU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1436720952563,"flow_last_seen":1436720952563,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":27124,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":85,"pkt":"ABsv8H60QPMIw47hCABFAABH\/7VAAEARadHAqABnCAgICGn0ADUAM87BrqQBAAABAAAAAAAACHBob3Rvcy1iAmFrCWluc3RhZ3JhbQNjb20AAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1436720952563,"flow_last_seen":1436720952563,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":27124,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Instagram","category":"SocialNetwork"},"dns": {"query":"photos-b.ak.instagram.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2317{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0quxAAEAG4H7AqABnAhbsM6x3AFDqdVZ4KgfBiIAQA+avfwAAAQEICgAD\/7VgZSg7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":1484,"pkt":"QPMIw47hABsv8H60CABFAAW+RXxAADMGTWUCFuwzwKgAZwBQrHcqB8GI6nVWeIAQAeZuEAAAAQEICmBlKDsAA\/+vRKIrkkudn8NlljEjpRSOCzqLEPaRpkRmmT+R4FshjIiGvbLBLIiAtk+Cy\/YlySzsxIor4L2fvQ9mRXBEkaZP5JYEihDGRE\/cyWdoiRQlwU97GyOSWdmJFHOy+B+29kPZ53mjTJ\/JIWyKGiKK3e8h7RFsseykdIoko8nSOIkyt0P3v3oeNvO8yBL5JC2WzF7HvIltEQvYyt37GUUMe\/8A\/8QAMBEAAgIBAwQCAgMAAQMFAQAAAAECETEDECESIDJBMFEEIhNAYUJSYqEUI1BxgbH\/2gAIAQMBAT8A+L12KTLvKKidK+zp\/wBOl\/aOl\/4dL\/w6X9o6X9o6f9OlfZUT9fo636HJv3\/T4Q3fdVZ\/qJXgWn9iihxVDQlY1\/efGS0WiyyXP7ItHUi0Lkpey\/r+pGNiQkUUTRp5KHD6HH+5cS\/p\/wDguXpouf0Oclk\/kYpt+i\/9P\/po5+kV\/wBqOlf9J0r6\/wDJ0L6\/8nQhw\/350rdCX126hDll1kTTHGyUfv8AuWU36On7YpV7Z1scryj9foqP1\/5KidMfs6V9nT\/o\/wCkptH80U6Zd76hp52aXs6V6Ol\/Y4P2dMvoprKLLRa+e0WU\/o6WV\/pSOPo6mN\/FX3\/R1ZVEhryjkhqRnglFPhj05R502Q\/La4miOpGStM1DTyVsxDJKizqf2dTOotfRx9HH0fr9HH0WikUikUikfr9HH0cfR1M6n9l\/NX2X9f0vyXylvp\/kNcSIyUlcScFLI9OcHcTT1XNcmnnd7Nkxf07LLLOpF96TeCksnV9f1Nd3N9ibTtGn+RfEhc8oSSwPUUHbFK8C2Q0ahFWP4rKf0dL+yl9lROPov6OpnU\/s6n9nU\/s6n9nUxtPKKidP0xprK26fs4WBtv8Arank+6M3F2jT1OtbQXS+CMr7JkCS9j7ullL2zj6Op\/P0sVI6\/sca59f2J+T7mfjYZq6jhTRDVjPGRNojqfe+oQKGq47K+y6x\/Q6WUjq+uxOsDST4\/pV2z8n3M\/G9n5OFtDXceHyQlGfiJtCkmahp7SXA9383S\/ZwdX18D\/o47p+T7mfjez8jC3TrlGhqdap5HEbs092vXypMr7ZwdT\/t475v9mWWWjgSKPx\/Z+RhdmnNxlaItSVk+NlP7LJr2PfJjPZTKX2Wiy\/hsp7X\/Rv6+Cfk+\/8AHeT8jCK7PxNT\/izW9EVY4tCbQmnkfYrKRf0W\/hszgplf6cF\/3J+T7Fv+P7PyMLsSIvpdk5KSTRp7OK9DVd\/HsooplFf6V\/pS+zg4+iy\/\/gJ6MZck9GUd29\/x\/Z+RhbJbN7aUrVEGN7Mcfg\/+\/wC5XyrXjdMTT5RLTjLJLQa8RprO2nHqkkaUeltH5C4Rf126Psj2PBfw8FMRX9Vf6X80\/Jmim5cEfyGuJEZxlhkop8Ml+P8A9JpxcZqyC\/Zn5GF3aPsjsl8kIXyx4I54H\/3EoV86TeCOi3k\/jisii\/SNSFKzSS6Rwi\/RLR+iUWs\/JNfsz8euVvDWlEjrReeNlFJ2j8hNrZb0aSyR2W1jz8EVbEx4IZW3T9Ek18sdNf8AITiuIo\/Z5IwS21nwR1Yxj+zP\/V6f2L8rS+z+XTlxZPTrlfHN\/sz8Zctj2r7MmjfVVl81tLSjInoyWDp+y16JxpJmjhilTrtln4NSDfKZpazb6Z5Hghlb6hnnajna96e0Y2Rj+1CgkNban5MIcE\/y5yxwQk3LlmvldkdSUfFmnqOTpr4p+TPxld7JDLNDzP8AkzXbpUR1mvIjOMsMlpp5RL8f\/pNSLUUmaPsk6lHtk+fgWvzyJxkuBT+yGVvMS4se9lsveMbZGKQvPbU1owXJq\/kynwsb6Xka2VstOTFo\/Z0RjkerFYIT6lfwz8mfjqo2TjUmhlFH48eWyUeTXfC3hrQ=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1436720952611,"flow_last_seen":1436720952611,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"46.33.70.150","dst_ip":"192.168.0.103","src_port":80,"dst_port":40855,"l4_proto":"tcp"}
+0414{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":74,"pkt":"QPMIw47hABsv8H60CABFAAA8AABAADkGC\/YuIUaWwKgAZwBQn5dVkK9h7WtuhaASOJDXwwAAAgQFlgQCCAoJIvhRAAP\/swEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1436720952,"pkt_len":66,"pkt":"ABsv8H60QPMIw47hCABFAAA0kThAAEAGc8XAqABnLiFGlp+XAFDta26FVZCvYoAQAOU17QAAAQEICgAD\/7oJIvhR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1436720901262,"flow_last_seen":1436720901262,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":290,"flow_max_l4_data_len":290,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.153","src_port":37350,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":21,"flow_packet_id":14,"flow_first_seen":1436720908576,"flow_last_seen":1436720908733,"flow_tot_l4_data_len":5091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41181,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":22,"flow_packet_id":14,"flow_first_seen":1436720908577,"flow_last_seen":1436720908737,"flow_tot_l4_data_len":5091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.154","src_port":41182,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":3,"flow_packet_id":58,"flow_first_seen":1436720900687,"flow_last_seen":1436720901200,"flow_tot_l4_data_len":48248,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":831,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":57936,"dst_port":80,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1436720908533,"flow_last_seen":1436720908579,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":26540,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1436720900692,"flow_last_seen":1436720900876,"flow_tot_l4_data_len":3777,"flow_min_l4_data_len":44,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57965,"dst_port":80,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":18,"flow_packet_id":3,"flow_first_seen":1436720908531,"flow_last_seen":1436720908567,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57966,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":18,"flow_packet_id":3,"flow_first_seen":1436720908531,"flow_last_seen":1436720908567,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.185","src_port":57966,"dst_port":80,"l4_proto":"tcp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1436720952561,"flow_last_seen":1436720952561,"flow_tot_l4_data_len":101,"flow_min_l4_data_len":32,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.159","src_port":58690,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1436720952561,"flow_last_seen":1436720952561,"flow_tot_l4_data_len":101,"flow_min_l4_data_len":32,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.159","src_port":58690,"dst_port":443,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":6,"flow_packet_id":34,"flow_first_seen":1436720901182,"flow_last_seen":1436720908544,"flow_tot_l4_data_len":27883,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"77.67.29.17","src_port":33976,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":6,"flow_packet_id":34,"flow_first_seen":1436720901182,"flow_last_seen":1436720908544,"flow_tot_l4_data_len":27883,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":820,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"77.67.29.17","src_port":33976,"dst_port":80,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1436720908523,"flow_last_seen":1436720908570,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":55,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":51219,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":25,"flow_packet_id":75,"flow_first_seen":1436720942530,"flow_last_seen":1436720942621,"flow_tot_l4_data_len":54689,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":729,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58052,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1436720942580,"flow_last_seen":1436720942580,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.162","src_port":58053,"dst_port":80,"l4_proto":"tcp"}
+0438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":13,"flow_packet_id":5,"flow_first_seen":1436720908464,"flow_last_seen":1436720911139,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"192.168.0.103","l4_proto":"icmp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1436720906017,"flow_last_seen":1436720906024,"flow_tot_l4_data_len":444,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":23,"flow_packet_id":19,"flow_first_seen":1436720908581,"flow_last_seen":1436720908769,"flow_tot_l4_data_len":8694,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":457,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.136","src_port":60908,"dst_port":443,"l4_proto":"tcp"}
+0549{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":27,"flow_packet_id":150,"flow_first_seen":1436720950909,"flow_last_seen":1436720952614,"flow_tot_l4_data_len":148458,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":989,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.86.52","dst_ip":"192.168.0.103","src_port":80,"dst_port":58216,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Facebook","category":"SocialNetwork"},"http": {}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":27,"flow_packet_id":150,"flow_first_seen":1436720950909,"flow_last_seen":1436720952614,"flow_tot_l4_data_len":148458,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":989,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.86.52","dst_ip":"192.168.0.103","src_port":80,"dst_port":58216,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":20,"flow_packet_id":17,"flow_first_seen":1436720908572,"flow_last_seen":1436720908746,"flow_tot_l4_data_len":5791,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":340,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.174","src_port":44558,"dst_port":443,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1436720952611,"flow_last_seen":1436720952611,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"46.33.70.150","dst_ip":"192.168.0.103","src_port":80,"dst_port":40855,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1436720952611,"flow_last_seen":1436720952611,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"46.33.70.150","dst_ip":"192.168.0.103","src_port":80,"dst_port":40855,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":2,"flow_packet_id":52,"flow_first_seen":1436720900684,"flow_last_seen":1436720900750,"flow_tot_l4_data_len":57226,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":1100,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38816,"dst_port":80,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":15,"flow_packet_id":3,"flow_first_seen":1436720908521,"flow_last_seen":1436720908542,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38817,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":15,"flow_packet_id":3,"flow_first_seen":1436720908521,"flow_last_seen":1436720908542,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"46.33.70.160","src_port":38817,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1436720906022,"flow_last_seen":1436720906022,"flow_tot_l4_data_len":111,"flow_min_l4_data_len":111,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.106","dst_ip":"192.168.0.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1436720952563,"flow_last_seen":1436720952563,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":27124,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":0,"flow_packet_id":17,"flow_first_seen":1436720898354,"flow_last_seen":1436720899158,"flow_tot_l4_data_len":2069,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"173.252.107.4","src_port":56382,"dst_port":443,"l4_proto":"tcp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":14,"flow_packet_id":11,"flow_first_seen":1436720908466,"flow_last_seen":1436720910950,"flow_tot_l4_data_len":5023,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":456,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33763,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":14,"flow_packet_id":11,"flow_first_seen":1436720908466,"flow_last_seen":1436720910950,"flow_tot_l4_data_len":5023,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":456,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33763,"dst_port":443,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":28,"flow_packet_id":49,"flow_first_seen":1436720952553,"flow_last_seen":1436720952593,"flow_tot_l4_data_len":37018,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":755,"midstream":1,"l3_proto":"ip4","src_ip":"2.22.236.51","dst_ip":"192.168.0.103","src_port":80,"dst_port":44151,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":28,"flow_packet_id":49,"flow_first_seen":1436720952553,"flow_last_seen":1436720952593,"flow_tot_l4_data_len":37018,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":755,"midstream":1,"l3_proto":"ip4","src_ip":"2.22.236.51","dst_ip":"192.168.0.103","src_port":80,"dst_port":44151,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":4,"flow_packet_id":81,"flow_first_seen":1436720900690,"flow_last_seen":1436720908566,"flow_tot_l4_data_len":50662,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":625,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"82.85.26.186","src_port":44379,"dst_port":80,"l4_proto":"tcp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":11,"flow_packet_id":12,"flow_first_seen":1436720906070,"flow_last_seen":1436720908431,"flow_tot_l4_data_len":5636,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":469,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.93.52","dst_ip":"192.168.0.103","src_port":443,"dst_port":33934,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":11,"flow_packet_id":12,"flow_first_seen":1436720906070,"flow_last_seen":1436720908431,"flow_tot_l4_data_len":5636,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":469,"midstream":1,"l3_proto":"ip4","src_ip":"31.13.93.52","dst_ip":"192.168.0.103","src_port":443,"dst_port":33934,"l4_proto":"tcp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":12,"flow_packet_id":10,"flow_first_seen":1436720908216,"flow_last_seen":1436720908432,"flow_tot_l4_data_len":4959,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":495,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33935,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":12,"flow_packet_id":10,"flow_first_seen":1436720908216,"flow_last_seen":1436720908432,"flow_tot_l4_data_len":4959,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":495,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33935,"dst_port":443,"l4_proto":"tcp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":1,"flow_packet_id":68,"flow_first_seen":1436720898386,"flow_last_seen":1436720908442,"flow_tot_l4_data_len":43376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":637,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33936,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":1,"flow_packet_id":68,"flow_first_seen":1436720898386,"flow_last_seen":1436720908442,"flow_tot_l4_data_len":43376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":637,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"31.13.93.52","src_port":33936,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1436720908524,"flow_last_seen":1436720908575,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":55,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.103","dst_ip":"8.8.8.8","src_port":33603,"dst_port":53,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1436720906025,"flow_last_seen":1436720906025,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.255","src_port":520,"dst_port":520,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1436720906025,"flow_last_seen":1436720906025,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.0.255","src_port":520,"dst_port":520,"l4_proto":"udp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":24,"flow_packet_id":25,"flow_first_seen":1436720942507,"flow_last_seen":1436720942524,"flow_tot_l4_data_len":22675,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"92.122.48.138","dst_ip":"192.168.0.103","src_port":80,"dst_port":41562,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":24,"flow_packet_id":25,"flow_first_seen":1436720942507,"flow_last_seen":1436720942524,"flow_tot_l4_data_len":22675,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"92.122.48.138","dst_ip":"192.168.0.103","src_port":80,"dst_port":41562,"l4_proto":"tcp"}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1568796253770,"flow_last_seen":1568796253770,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDLAbuZigajAAAAALAC\/\/8cPAAAAgQFtAEDAwYBAQgKDXByoQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wMv1rwrBmYoGpKASbHB3qgAAAgQFeAQCCAo6Lg6wDXByoQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDLAbuZigak9a8KwoAQCAwKkgAAAQEICg1wcq86Lg6w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":288,"pkt":"xiwDYGpkxGGLNYKpCABFAAESAABAAEAGAezAqAIRHw1WNMDLAbuZigak9a8KwoAYCAzr2wAAAQEICg1wcq86Lg6wFgMBANkBAADVAwMjksyrSJEnHCj7+pBcrNa+PodYLpB74VGVqR+HKhs0GiApLypFPPq32Fv9\/MlD5ecljmzHmnbSZyDhqsHB+Vrs\/QAGEwETAhMDAQAAhgArAAUEAwT7GgAKAAYABAAdABcAMwAmACQAHQAgnrlXRF005fDXmdLGrmWHWUR+fUpyzgm8LYNWZJbzAl8ADQAGAAQEAwgEAAAAJQAjAAAgc2NvbnRlbnQtbXhwMS0xLmNkbmluc3RhZ3JhbS5jb20AEAALAAkIaHR0cC8xLjEALQADAgEA","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1568796253770,"flow_last_seen":1568796253784,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"7a29c223fb122ec64d10f0a159e07996","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0400{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cqAAAFQGvCkfDVY0wKgCEQG7wMv1rwrCmYoHgoAQAHERQAAAAQEICjouDr8NcHKv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2282{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":32,"flow_packet_id":6,"flow_first_seen":1568796253770,"flow_last_seen":1568796253798,"flow_tot_l4_data_len":1822,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":303,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"7a29c223fb122ec64d10f0a159e07996","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+2287{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":1454,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgcqIAAFQGtrsfDVY0wKgCEQG7wMv1rxAumYoHgoAQAHEdWAAAAQEICjouDsANcHKvg\/yJUZRN7QIOWSkcaxBUddVxwBTIY5nli3udicpNeHrH\/g1unJX2MoGNQ44WF\/UQZVSsIKbD8IXys3eBcExdJ4A4IcLPS905YlmIKGj1j2ZS4D9+CbkMBJQpW1HMC3IwxXmAlS\/l1F1cUoRtLP+3qygq2Q2Vyz7gx+CgMUeD1gZy+PvwsEEdVrTJczdJg2Lx7RFtYFB06Y+aU4x9g2NsIlt7hNgPMY6iIwD5zV4R2GDA\/4oLDfFYgUSEe\/qoshg\/5HDX5+tHB4rNeWT3mxLZZ9ZxDpyV91cZApNUwCjy86R0drLbPPStTpFGsu7o4V0pItMA6P1F31zKsV5GJlPODPEP3HtkWXiCpdPMaXlAi5q47My5Q6qAVR4JCMsKQ\/lj7nKPWT144JMTZdJj1Pxke+zwQoX9tXx6i7CP+i4I7JFo\/Y5zdDKMFGxBUMrvzodoAgilKjFPYoCFhqcMbgRbg1FX3qqphRNK4prF+YqTTfspGJ8ff9T4V2Lb14HQlC7Kyk2PjUH9lzS7bj3fSJEaQutze2IUQ\/2j6zIKgALb4FayW\/oDsi6uLyCwSbzUkal4v4TiUnK58fbZ0ZeWxBtz2WanXNAkyUO4oORXeIG5+aFScAY97tPY0tNvpHHx4U6kM0h7svNpmLqoFfTL0g0YKTOUsY3eD0\/COd0LQ4Py6sbpKqMZDU8lXAF9DdeDGVkApXroF5m9DluSrqsZ3VC\/jhs+LQwKSQ06ye0L4UsV2bnNadRPMmTHphmO++HR4VduY5gBtdq+1DYagaOj9IBPP+ThoioLeeN\/\/R+SuPORcU7lw7G6niSrx6PN9QpO4SqRiYZ2jwWJle2DgIl24LXu\/50fuJ3ftETL\/TSnAXATW600MQVzQHZzm2sByXmSSod+SecJyJ88L0msYymQyXM0z71kXIUKfTkkuF+L9Onsa7+oGs9ete1hGClR1i9PbfRTTgnEB34my+HJX4TL0+fpjIGtnKtAlD2fMtz91p7xGmoAjao0re6KA7Qe7xecWecqTK\/ZaC+7HbRUGN8KbX158ua4QoTAVsLMIvA8\/rmwz1z\/d\/85aamN0AFttfGKvtMYDiA0L+0uphHcpz2nkScjeqeKlgxgwehfEYzcwyeTMpo8hEh1ljd\/td+ADr7PGYPu+epOC4yEmwsYwB4VYVFFXX4AsEv87ZfSiTkiMedX1gt5Lg+Lump62kj3e2xOZbsYVyzsuOhiqeWbDm5XOAL08LbE6jzfKCViP1ysCMWYh7L57HO488ACXxZ\/t11ILxOWufpp8iSTC\/xy0gYxabMNnek4hK\/3hw6i5124NZl0UtrUHU6efAecWAsET+cnFHZpVczqaYKgeIdV195JwA7v93UQdhKr3ztrkPAIksSj6SPc\/ljwMUgjVFaSEisqVwf6YLuNfhjAoE3gz06bMB4uEKch8xxj8FokEefPlHjtZyiqKrCShuDZdY9uJwVWbxUX3pdCFZlNY\/2XN7uarDdPt2wxVYt\/0ZMzA+OuHfyjfUC5XDz0JXJvK9If2SgrGKqNNXcFU3bKnfYmXFMxVepcEuELXo\/6zJ0w4+xeZE2vaZqrO0RaaGNX8pNw5ER6yXPbA92hbub+5DvHD3riziCA0N4NFVdWVYeHKUh4DZa+JivcpYY6lM4NXqtoFcYh1u90Ai0iNBlntN6WlAWHSkF2I5SJIptcH6VMAegReVqvMxajIqXki+NsVQcXAwMBje1mKFpkrKxK\/\/+uM8Zoftaj1I4GwHXtddSYcuPQKtFTt2voIfb7Px5vpqPr3hWErBbf9AHCwwjQHPGGCHbgv85qkmYQVP0eBQalqLiijOf7LkCJcaIWPQvaV0Epv9g=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0813{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":369,"pkt":"xGGLNYKpxiwDYGpkCABFAAFjcqMAAFQGuvcfDVY0wKgCEQG7wMv1rxWamYoHgoAYAHEoRQAAAQEICjouDsANcHKvRXSJKcKjyPsVwJykOPMeDjybZnSthmDahKSEMsNrt5rmi6rVPF3EFgs9fvNAZYYpbE9NDN1Q5fgZu8DlGpYd010R6hsblTygK0rzqbHNCtkfR7pymdY05zkUrEMAYJDueS7Y\/4HUZSJlAnM35Tg4\/OXnkwjeEtQ6NfnJScU9UYGBD7Brt7RThKDLlINw2qLSEzi1dKLTlDky7BefubXUUsJSuAYu9uFbKGnZr\/\/Va9mYTQkf+3ErYcnqq6y4akqHUbBAVmadYIV4t95SUthzLYswBPtZv7SVjb62vdB6c6ANdao3UncLlPUe4II6e4TNif\/wamux\/IlJeo4KE98vPEfRlSd51er6b4hnmMhWEh5O04xcpiFm2uZQeR\/XQqoinF9aX3KKFxG5FtCv7Mw3","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDLAbuZigeC9a8VmoAQB+r+3QAAAQEICg1wcr86Lg7A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDLAbuZigeC9a8WyYAQB+X9swAAAQEICg1wcr86Lg7A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":130,"pkt":"xiwDYGpkxGGLNYKpCABFAAB0AABAAEAGAorAqAIRHw1WNMDLAbuZigeC9a8WyYAYCADGygAAAQEICg1wcsI6Lg7AFAMDAAEBFwMDADUSrfpYLxSMQDqWk+4CZkr2cuITAuXhhfVRFONpgBX+k3YAhslfXkBfWKoOwHDajRqcxLADpA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+1078{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":564,"pkt":"xiwDYGpkxGGLNYKpCABFAAImAABAAEAGANjAqAIRHw1WNMDLAbuZigfC9a8WyYAYCADA8wAAAQEICg1wcsI6Lg7AFwMDAe3NVZz2bp4Yz1k7\/qMMxcWk8D9vfSGbFGBOnjhyUgpjgsbH8+3uncF90BEPF6CO\/QxHvV4ftH3HmL1bNRa7wYAxVCzj\/uoKpJPni5p\/g5aWIi+D5v7EJoRWPdxdy\/oVKJVhuMd9dKtQANDuz5rtrcrORWsZBScIgovyf8mLPt1Ww\/NA0pOMzs9E\/7IjroZQk6efXD2IwQsGydkJh0xgZ04cd4jAooNFnTh+83QrPmxWVJszffRTL8Ck0FiZjGrceRBkJ+JLUanpU24qTFGREhm0yy2qXgREnnCF9mbXte9BcFUXzaiaL\/fCjPlk\/CIHYnVdxT6yRfwKS135pCmilCGqkqjr11jk59WVzB9jmmkOU5veYg8f4wiUY0Cs2ovykLj4bNq8xg1W+UcJ8pwEgPRvSSbeRWt8f7yqc9zxMUkbHz9vpyWKERK6nJ3CFX331Fq4JK0QHTTzjTGWjo4fMjNH2+vdqk0Ym5FYNLI5YEoQANOwxyIOqGcAXui+Kj8DM2kdgUqE1W0WQ7psPoORzihiVenwJpTCJN0oBjflVEpdxq8lCVwLwCEK\/22V5G6nWkor0DW4xZ81ERAIfCLWEh0D7e7cVfL32qJ3ZUyeuBDqyMc\/ipslhYwLXM84eIOf2zBecVRMMmzp1h9yDSDQ","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":259,"pkt":"xGGLNYKpxiwDYGpkCABFAAD1cqQAAFQGu2QfDVY0wKgCEQG7wMv1rxbJmYoHwoAYAHHmCwAAAQEICjouDtENcHLCFwMDALyXCZVZsRVc5YD7osb7G+dT2TOnrp6oODK59iu8MDODlmtQdZEnuJ0n59ahbesAUOJFjNodqwBTOnUZZXsgY\/H+kmgEEI8o5u\/kK+qQDpPHjeMWeKbHaFg4Nr2391apmeNNJYhjbUf47SOnNVsEAOSdxyenXsfoyQcIyl5FWX4ZT6VuG5IY9NORSto5piFSkcKxjKjWJqRzxhmLUncRBc8uH5lX3SJfTWLDfLNOZbXs2Jemup6mWmZLPgR9VQ==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+1261{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":696,"pkt":"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","pkt_caplen":696,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796253,"pkt_len":89,"pkt":"xGGLNYKpxiwDYGpkCABFAABLcqYAAFQGvAwfDVY0wKgCEQG7wMv1rxoAmYoJtIAQAHUO4AAAAQEICjouDtMNcHLCFwMDABJFi3rAA3KN3VF2IRE99YhtID8=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0845{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":32,"flow_packet_id":255,"flow_first_seen":1568796253770,"flow_last_seen":1568796253873,"flow_tot_l4_data_len":228029,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":894,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"7a29c223fb122ec64d10f0a159e07996","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1568796254514,"flow_last_seen":1568796254514,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDNAbsBxqpOAAAAALAC\/\/8NqAAAAgQFtAEDAwYBAQgKDXB1TAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1568796254515,"flow_last_seen":1568796254515,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDOAbvBtYQbAAAAALAC\/\/9z6gAAAgQFtAEDAwYBAQgKDXB1TAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1568796254524,"flow_last_seen":1568796254524,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp"}
+0420{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDPAbv9TOkSAAAAALAC\/\/\/TUgAAAgQFtAEDAwYBAQgKDXB1VAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wM2mvmccAcaqT6ASbHDxzgAAAgQFeAQCCAoU9Z3GDXB1TAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wM6bGFkcwbWEHKASbHAfPgAAAgQFeAQCCArYQyzxDXB1TAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDNAbsBxqpPpr5nHYAQCAyEugAAAQEICg1wdVYU9Z3G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDOAbvBtYQcmxhZHYAQCAyyKQAAAQEICg1wdVbYQyzx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0965{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":485,"pkt":"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","pkt_caplen":485,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1568796254514,"flow_last_seen":1568796254528,"flow_tot_l4_data_len":567,"flow_min_l4_data_len":32,"flow_max_l4_data_len":451,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1207{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":663,"pkt":"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","pkt_caplen":663,"pkt_type":2048,"pkt_ipoffset":14}
+0966{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":485,"pkt":"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","pkt_caplen":485,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1568796254515,"flow_last_seen":1568796254531,"flow_tot_l4_data_len":567,"flow_min_l4_data_len":32,"flow_max_l4_data_len":451,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1126{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":595,"pkt":"xiwDYGpkxGGLNYKpCABFAAJFAABAAEAGALnAqAIRHw1WNMDOAbvBtYW\/mxhZHYAYCAw5RgAAAQEICg1wdVjYQyzxFAMDAAEBFwMDAgY9IGVXL7OvWyqJahOvSUCJY8iw4p2I6w\/z9tqJYZ1qXlO8Ua4m0cjVttEEGsPKDnBhRcK\/RalKos02Wn2xrlKYE1kVBerOO6e+pJef251bfBnfTJT1bwC8WKoRJl7kN7nDOtO7so2rzZ\/bcKL0FJXKHriy1XEt\/vnjXVDsu9L9Uc8+ow25VVkb3mBz4yMPtWqKPBiy4xHCI8x0nRp54gC\/14QlNex1yYUz1AivdOTQ8FLkFhLArjpkuy3iyUrKOU6rsMaYWY8A2EmiwZFKe6t1eXUVkBPUTdQ2XLkLKdofF8Efyh7fEeBDGNQ5DUTMUaTcgsYWE9zLKbE8VQKPwSDlp33V8ATrg3wWNvkiXPZCNhc8GC1PSzSINWsFe4Wd0O\/CnGWAdPvCFeMoT9TG\/SG7CyMo\/elguQVkUCtPd58eq0YOTFDEUGlB3mM1aLgfDKP5+kB38uFg7l5jHqSl8qk53E+dY5RysX98A33pPQW+0EzBPkYDrRP\/sxH\/bb\/09vW+LT5D6G7AYAYP8HHiyRmNSUQH+L+jCK4DB9tGXgtn9iaLUMeXUqeq1pvGySfdp\/g1nvnZCTarJPrr\/4uJCyFWnvLYDEoQAZevWP7d9Y0+ARPa7a9d70xkRUctmvrerk5KnemtryInvBJDk8i3u1GPLfDJw\/XSMPhk4o0RKeBLn1JNL2qVHQ==","pkt_caplen":595,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wM\/pQUID\/UzpE6ASbHCRrQAAAgQFeAQCCAoUEKcNDXB1VAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDPAbv9TOkT6UFCBIAQCAwkmAAAAQEICg1wdV8UEKcN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0966{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":485,"pkt":"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","pkt_caplen":485,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1568796254524,"flow_last_seen":1568796254539,"flow_tot_l4_data_len":567,"flow_min_l4_data_len":32,"flow_max_l4_data_len":451,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0401{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0R3EAAFQG51gfDVY0wKgCEQG7wM2mvmcdAcar8oAQAHGKpAAAAQEIChT1ndMNcHVX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":579,"pkt":"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","pkt_caplen":579,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0R3IAAFQG51cfDVY0wKgCEQG7wM2mvmcdAcauR4AQAHaISQAAAQEIChT1ndQNcHVX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":288,"pkt":"xGGLNYKpxiwDYGpkCABFAAESR3MAAFQG5ngfDVY0wKgCEQG7wM2mvmcdAcauR4AYAHZjaQAAAQEIChT1ndQNcHVXFgMDAIACAAB8AwPejtbOe4Xg37m4DEvyRkVHFpUNhDGioQLDvBo7fpFtYiDMB3SW0+oLedhnRZBEjRhfhuHo9hBvfR7yTL5mOscQSBMBAAA0ACsAAvsaADMAJAAdACAax976UPmtFl4wDpxDTbBXGbWiduxcdYVeiCoejIhZNQApAAIAABQDAwABARcDAwBONglC3txN22OwlPsEr2kst\/0Chovc6Gy19uO185T8x3+Gy84kfHCbt5Cie4q\/diy0JFpWHozCzEGmMZtUBmW+kKZQr7W5BXY5ABCLm45g","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":33,"flow_packet_id":8,"flow_first_seen":1568796254514,"flow_last_seen":1568796254539,"flow_tot_l4_data_len":1514,"flow_min_l4_data_len":32,"flow_max_l4_data_len":629,"flow_avg_l4_data_len":189,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0401{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0W4AAAFQG00kfDVY0wKgCEQG7wM6bGFkdwbWFv4AQAHG4DwAAAQEICthDLQENcHVY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0W4EAAFQG00gfDVY0wKgCEQG7wM6bGFkdwbWH0IAQAHW1+QAAAQEICthDLQINcHVY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDNAbsBxq5Hpr5n+4AQCAh\/zAAAAQEICg1wdWQU9Z3U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":288,"pkt":"xGGLNYKpxiwDYGpkCABFAAESW4IAAFQG0mkfDVY0wKgCEQG7wM6bGFkdwbWH0IAYAHXP2wAAAQEICthDLQINcHVYFgMDAIACAAB8AwPu7mBOWB+dnzBdodsS\/Qd+mYtLLRJT5CMSYlusvWSqLiA+ZFjEC79ZWsyfIhM6TAFNirQ6Wfjdb2VnPIAynKQowhMBAAA0ACsAAvsaADMAJAAdACAvYV4Cx6ZdIDrw66Si03cK41S2S7y+u2EABlPhdPKSdQApAAIAABQDAwABARcDAwBOUOITJU0EYegn9mmGP+z5WYZY+THVVKk+i9uTdm+ECosqQHQpwVkAA+WdotzC\/c+SDw4CgZKR159NiBmarLoGBwqgLSUsDnq1WneFTQKg","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":34,"flow_packet_id":8,"flow_first_seen":1568796254515,"flow_last_seen":1568796254543,"flow_tot_l4_data_len":1446,"flow_min_l4_data_len":32,"flow_max_l4_data_len":561,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0517{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":150,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDNAbsBxq5Hpr5n+4AYCAhkuQAAAQEICg1wdWQU9Z3UFwMDABWoiQF8I3o1t\/hLBtah995KxIPPSW8XAwMANeuF28j7LdRw5BV4DA76aot4lozY1UywTGQ+4KQzeGO3wqBzuCdShfarJjBQO24JPOepiRTj","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDOAbvBtYfQmxhZ+4AQCAitewAAAQEICg1wdWXYQy0C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":150,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDOAbvBtYfQmxhZ+4AYCAhlsQAAAQEICg1wdWXYQy0CFwMDABUMrNQ3GUNadmOfoLt\/DYfAX4KLF1oXAwMANamLpAeKjA\/aPZDVQfMhMlY\/3s+OhGIAbzgS+vTspQbL6ew6l\/aeWMkpqiIoOoaqrKn+e30e","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0ktsAAFQGm+4fDVY0wKgCEQG7wM\/pQUIE\/UzqtoAQAHEqgAAAAQEIChQQpxwNcHVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0ktwAAFQGm+0fDVY0wKgCEQG7wM\/pQUIE\/Uzst4AQAHUoewAAAQEIChQQpxwNcHVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0705{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":288,"pkt":"xGGLNYKpxiwDYGpkCABFAAESkt0AAFQGmw4fDVY0wKgCEQG7wM\/pQUIE\/Uzst4AYAHV9iwAAAQEIChQQpxwNcHVgFgMDAIACAAB8AwO2vxlY5R8lsRFEyU+YGfcc9Zs7xC53L7Dp925P\/asA4iBlqQjva1tIZWpLGugxipAgopwgiPn9JIzY3sS4pJS4ixMBAAA0ACsAAvsaADMAJAAdACCp\/1gDFAENGUpwM5Fk3L2hD1pTRKOhnZGwPgn+szV5eQApAAIAABQDAwABARcDAwBOQ+bCv4rPDbN7ez8\/rg6XbNyujZh2PtuXjqnUpcCx71OTSSTGndLIOV05WjtA4XvgONYEldLuUqGwUEIPEUj7gsA\/mG+uC5J35jV44TC3","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":35,"flow_packet_id":8,"flow_first_seen":1568796254524,"flow_last_seen":1568796254551,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":32,"flow_max_l4_data_len":545,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1262{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":699,"pkt":"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","pkt_caplen":699,"pkt_type":2048,"pkt_ipoffset":14}
+2286{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2289{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2290{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDPAbv9TOy36UFC4oAQCAgf\/QAAAQEICg1wdW0UEKcc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":244,"pkt":"xGGLNYKpxiwDYGpkCABFAADmR3QAAFQG5qMfDVY0wKgCEQG7wM2mvmf7Acaum4AYAHZQ4gAAAQEIChT1neINcHVkFwMDAK1akumFV4pqVhGoG6lswpPY\/JBWcijL7iHYQunlhH8LzUO2ywOi9pMHPsRfPfWBHWpd+d9n27u9ZKn8HZiT8Ph4fNQpJOC9fjw+GD8JIoCaiaBI3E6pbdAd4w+VGuftkDA\/baE76qUpjHQOWsz6H7uO4ORV\/vAU8n5bpqVYdUEu6b9ZJKdjNs8TqaFzxfzqHftOg7vySKFvqAZciUvncA09z9XKDcxLwAlOVGsyeQ==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":244,"pkt":"xGGLNYKpxiwDYGpkCABFAADmW4MAAFQG0pQfDVY0wKgCEQG7wM6bGFn7wbWIJIAYAHXk2AAAAQEICthDLQ4NcHVlFwMDAK3eEF0eZSiaI3FIuucizHQ6xoA7LaqwJotyyKi2P+Q2fC158VMzy2lI0Aa0J4zdxjVxmpApNZV3zTWYfXintsMVRXRQLuT4d7nwKV34BABK6egPhMk6tx9otpxroAZ0n04bz4D+at2SzUZjWhMhwiWSLAJnXTW5snm0DGnDvU+xbiOUbV6aDCznxn9Q83FYbfLai5smoPgTYNloWnk6117JMzW3ddba28v8IfsB0g==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDNAbsBxq6bpr5orYAQCAZ+rgAAAQEICg1wdXAU9Z3i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDOAbvBtYgkmxharYAQCAasYAAAAQEICg1wdXDYQy0O","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1457{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":840,"pkt":"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","pkt_caplen":840,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2293{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgW4YAAFQGzdcfDVY0wKgCEQG7wM6bGGMfwbWIJIAQAHWn0gAAAQEICthDLakNcHVwYMukJ4toDWBAe0\/gpjp72B6sPzrWwEsh9t4K5Hl8U3wcMpBBd2UR3tcbuyRiam30nU5KrKqHpf29qv1gcNZ\/Xi1YxPFO7DPaSTO1jwz+aT\/FuLpn\/H90zGPF74lPVusndAXTunTRJGYFKqFU\/T3xgoh\/HJYfWcr364FXPYcmuF5qM977SDkXAwMF7Tzpc68qzAzMdwKUqOmJYU6sJswh2njHWHkrX\/T261fVFdfBwcjTXbD2W9gQLi\/pTtftwmTBfF5VLDp6C957HYjRMkrMj+QRj\/+wkq4EJc1GwfHpK56\/S64HFOFq03hcXZCqOyHH5aQau8P7XR8Jmf2grHUIxvnX8ESYY6f2NPXhKptKxViPmcOo1hidz11Ul3z81V7EoEjvL+eNADRp3uO5XFbtQH1+Z5tvHWj55kBv\/I7n1nXIXt2GN81uhJ21oMRlzMr0ZgyXUDbrPpaVQVOz2m\/KbySjXHcjoVacPCkZNO9tbLqSt9twrpA3zHjlt6jvD0aqIFarfIv0H1s3UEGCuJBbe20YbYQWOJbphlMrslUAWrdr2iwpSLmoUTNGI5ckwORWWA6jhGeaDWo7wijMr1JybZJRgSJNFTWryKzkGQGt\/6KBIAlUjmpegnDJ2EyWcdyo9JVEnXq5l7nMhJJkmabRjLzOmvE0b43\/h3LV0FuKY6oXtG2fYPYaYvWQtSbJB2yrMO\/Nq\/aiQWJ\/tXQT5za0A\/qC89DjKhT7IMSwL2SAG6XZJgFPFss0D\/htdYaj6P3Bs\/nkePxNQjD5ZQ1bYjwkTael062QFI6jYmBWLBPLb3mNfATX4KRtJS7tXIKgsZD\/1aA2UrmZZbBLYTKPnzACKaMJitiq48TWlriNAQWwvWJtyPpCFRBp0DqDpD+aTFD8NXh1O0QdN5wj9FfW6Y\/aeQOPveEUGa7xNPCMqjKiwpO1Pg2wEE\/DKTZoLjRKgHKgAu33v9+7Nn2J5dGL6OZNm6aeQgU3FYSzCiezunTlyDEBOqNpQK59HWJ6WaNqoCbbOT79l\/QwzUT1jnHbU5JRtrVuZG1YYXA4rj1H4i+ufTCbYiDkGu16pxvArTMvm8phGcFMtNRFDBkFMggC0TZ3F\/lZrMNpW3Ff5VtticyNI7NS04Xy59VpUK7i+Roe6tVk78Rlb5b4J0sH9k+8F0evmLdRuW1aD\/Rlz0ZOWcQZ6o8UlcRiKV8CXEvV8BNK9Scr4Xipcly3KTTS\/s+4xxtO16VkYK+RwJ5YhdRuu6uSIdQaCzFrf0tRLlnDca3EDAYpZbfV43EJoW6fkmnHfZRr5DeeQPdPUCgxK6dFEECmyDLXNKaQncu042bP1SrwCD2NYFBgFGy1Ptv0Co++l4zRUPeLpdRE1HROl5AfUHKwJ6x\/fZdfcs+0LCB0Q7bNDPJTlev465B8XmR+gmoBFLSRmxUhtjC4W850i9TDrGlQ6kETuvGxsJwRYKdZhSN8XqzIShP36XCRz81S9UBx8BgyzpGFm7TgL\/7qg0pwK2+xoyGph7Oy\/wJGxLq\/gdh2nQq4fYlYm+TVH8jBApBAFcJmNBQgAR2m5Y7Tm9VxKbfJ3W++vvn2dKOoMVOLdlogzbxQWCJtiEoWCY9GoqUX7JHGLl+XH23V+SKoefPZUtLA0Mm+mWahr4\/LOD06IsxPTI36Chwbp2XHNMJXF\/g8Dnrejk2HIwg1RU0j7i3mHI\/x6724MAnQFgXjRN8BkmSct55ge6IOfxt2tP4hhxkZkUncZZJfukLgd6GdDnb7h2KueCZRKdshjfDDmOHoGYJvsG8+cnqEXsc\/vt52sq5qAPX6NnrteS0KkYqieJoF1XfycoSDED+ZeQ0yKfGASV0=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+1449{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":839,"pkt":"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","pkt_caplen":839,"pkt_type":2048,"pkt_ipoffset":14}
+2282{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgR3YAAFQG4ecfDVY0wKgCEQG7wM2mvmuyAcaum4AQAHZBZQAAAQEIChT1nosNcHVwFwMDBe26TdKKuOwPFQEg88uujor58VNqXtphebDoaD6Z6JiicwPPXl4uJsCftqugA1MtCiuMd07DjsPnuA56Ve9oBgp6Y2LQAFLj6zclfMyRDikTjXJNy7lJR0ocjU1BloT23DpDf0ayvRh66iHGawrfuosTsgW7BTSEQrm74wsruE7FkYjviYzXMlmOdiETLhQNT2YhtANRP7pWzEvqSnk1ST9mVJGBqtEojDNsnsDL7EnD4Ym18W8B3o\/kg7TiA9xsbL4Lmsl8NdScMLWuB\/xx2g+EBH4ipEFqlFKuawKycInD2gomQfqOHWMfiPE8dPgXgYcXEoq4jkPLOMYlLnmcL46clMrmdpn0WL62j3M9lb1deZt0pfukTxaRoJHecHR5PYN2HNW+gslEYp9fO9G73gOnbALOoJY0VtWeHMNExMlvUTjafOZDQtGO6YVZKT9CWf4393dulDZK3YdHBllZK5GUkvlqwlbu6go\/Sk3P28HJA7zrreSDH+MjCaAqB0scJJZ++0Kmyl4bDM22qCKW4VnJCcm2C4fopa4aqDUuI5RlwsgiQVy3jDPseIpWs+X6xP8Dq3g7lSpGOcjA5ygt7qbq20ROp7G4mIfNbI6nfshSA3khMasJIipsA9U5b6Z56nXJ6QCY+IrtHdwOUmXMlJgYlYH7trmhlFk+7eNoM4kUdzKbCVPbz0fiZr8DHIYMHZQahfNUnK47H9cblnRnhCFunpQwp+vS4p4s7+RAXuUm+e\/pYkBW+fN3aL8dKrxjJZWrHdtV7vAXgIGcSx7roR2OxqohFPXAgAsNfeaT+W8mDqGRrCn2tcjyEO0yXwe\/LOKXb1gth6BepKYZ85DszWrXYmZWImD7PD4OO\/pvKEUtQxZY7QMK8ib6\/IMT847ICcyG\/SAJhy0+QO9cKHN+RsCNjwClXwLYLv8aacsJ0S2sKSXrp26Szr5rJNafOiFcJZY6phJg++MgQL0kiiPFIVDYGVbg91zDPPB8ebKA6Kk9N9WiulalN\/TwUTB7h8+JziD93Qw92XR\/T6jMHeQh5o98ixH0K5aQBblI+aOKa+mW8Q1m2u6YOk2HCf7hh652eE7mCjjI4PvfcKL8So8gxO6md1oaFjk01R9PT6ZbYXSuV2q725gLMqBgEreez\/NyQHW5YyX9alNseYZBFpWkAB7IYfmxZ4qU8vzOi6mVmsicjO4Z0BjzBagBy5YB1CiMB4\/qnkIUWOECVmJ\/BFz8HhPteo3oeehGEJ2f3zrUW36JRLMaVRgUHxDRIMzPnE2SKTZ1NFX+gm3D8CcoBd8o3Oy0Xd5pKdzAoT\/tpL+dSAoGXgxc19\/KxkJasNfwiWDVaJKk+AEY9oM3ff+nbvH5NW+NgbqmQ9nhOGbwg\/zzcKFWVZ71BiFP4eqclr9aaCeQkbm1Mbu1NZ3R\/+SCO0if57CZAbnMlZkX181hWBJ17sMiN28I+5AimtkDxJv5sl\/TI7Ci\/az9vG+d1EI3Tqw6x6x+ylJ\/rfjA82npRgkt1TNmaLXOFOD6RCAq2Oe\/vcS8pfxiVv+YZBXDtH3dOq2BPV4qRny3mDoJDo8G3rVUFhFzJuYNHJtImBhKW1n9tyDySqqd3R4kSoc0nxrqMx0snOBWpUjzTM91Y8+sL9f315MAUlt6igxSK\/CKGykiKtdHkKR5mwoviDK+XG2d2kqzKO\/RhFo1+EfhIsaL4JkP1Ngrxn0Z5fX73QPPK1KflOlF5RKMdvquu7u8NZCaAzrlYj+7kbl3YYywbHtqsa9GicvR6EFjGsIDMIcLmyFYbY8izQNRBPPjuyesVzYCjhCUZ1GM75y5iy\/eqfXvG6Li9zUGnvkdzAmC7nA=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2290{"flow_id":33,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796254,"pkt_len":1454,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgR3cAAFQG4eYfDVY0wKgCEQG7wM2mvnEeAcaum4AQAHZeJgAAAQEIChT1nosNcHVw6EusdcfDyZp8leckSeoA1xIb1zN6JCO2zk1rbjLsjUbfZrrWeV5CKAylP+ACNDdxVNRvSd4LwoY1QMqqXUbraupXPcvkluvxkEzNmgdzdU05kdtQdv0a\/HLAXg1QH2SJ5RlxEAde9g6c\/SLXW7VN4yDDDeqlhlWUw4LmYEkRCi5hPcIZf08XAwMF7TPJdieMo7NXEz1Uyoi+gFmSs+cJuB99kwvdy6\/Hn64+uBNDAty0BZGlwc8i8\/v22Riwykc7135XtztFrAt2vihoMU3Ay\/\/rlbyC+1JLs1w6nby8CPJ+h\/qHMX\/6fviiBH\/w+DPNYPZ3aMCCE6Ys9A992Y6ayYJy3by3RkWpSB0KVvQjpwshigopPz9VyjdxLgpvEOYKJp8i4Ak0+5ULWiVJkuCawJPxqJSC0KZ+OEYkOLRTWZVpOAePDrflgFC5Y80YQbfq8b799hY8AVpLpTKrYglQ735boK4mVqH5QrnBvqvW50PNn3Nmr1Cr2mxgWlfMutI6\/TQ+Aivf\/gNAYeWQSwJh6JS2syWWzpAlJEtwBOHLpszhkSDkMrRBfuuG+dl7DdSMGJL8ThYfSeB95Hh6\/BoL34GN8k1l6OloojHxhlBE4EDcbajZZ0Lhk\/NfCGJOkfoLl4so2VCsw1xAf3vOSQ\/o6wtzEMdSOyaazvFnmERKB508LwlJCjJFgG5WZ6dnUfg+Q8RbwyjCOBdd1JSjt5AnDfnZp7P1wPw0xjRpG9PViSY\/A1qEdTD7goUbXdKAF7oMmIlRBC8GeJMRwineuE2sweypc9CI3ejnVTSL6pzM1L92IU+bl2RC2QvtrnQS3Mu7\/4q3Q9\/2rDYT0QzSMDKYgZTZ\/CpFXmY5wJWvezDIw4OR5hf3OUsaXmXDIGHewQHCVu3JXxXn\/wA65+ts+2OXR0RK6zkw1E\/3o1F\/p66+CGysyZnhKVZ2Kj8j1iTIH98DUXeZ57AzOnLBOHXEVY17lYHD2025IMPwfS9rwcv+WwAnkHUI6eI4QUuOXzel88ZPtzrDUsF6fiHLYB2XhY8iTwO9KlhLO2fcXY9NH3qqFUwVtvAINa7uav4awscdzxZtUXFMjfDIkjC5Bsj1TdWRxXriygb4dXivDE2dDJSm0DB8i1L8bnnK1F5L3N\/a0qVm2SQyi5yBVj+pEo6cZWGFFj7\/Ou7LtYk63qCNdjI6YeBdBXSCDi0aHlU0y1Sn5rujw2NHQOb4sbKrz\/+cqC9JjbJ6nr0NzB8htpNp+7qK+mVkbwJP4YH5hsTjVUKYP38b7hbMqcBPppPXYFaZNZ9OXoGyehUYNjJ2i8RaT+ckie9kiqk13eRM0ynaPkr2NJffMZBgpcZe7q3Zo4thnzKBNPeE+GyviKTalXj57wpWzTdrTNZey0vCNvGD9Pqg1IEv5Ht\/cI0VQU2\/kbPOEEVq6QtWkc9Ac0lsQsoc+eVzvFffUHMN2fMetXwsuHL2BTjuGSFg91+4IE5TFwp6Yli7J9X0pMoWB8zNfL8QUwsDWHZC+NLH+k5\/3tYNTJXbFdSV3LzqgiH03bpFG+R8ChwtOxsfLkFH+z+DRqwpCV72SIbyXORZW47q818vEr1b1gs40tatMqqaFAsUJPRVay3Nxvvs1B1gaQe9JnxxYT1cOQHG9QickkXR2RiD\/HxzTi92ZPMje0QwAMdlZcIig3zFYPAAcaIUG2Uuzyl8BCzIx3ED7jqYbhRe97UNv\/5Nj6rpwpgZoliwRQznXzebY6zebFnLhbHpj79SFscxkD\/\/RW8Qwp5BD1zAxAbV1VFsJdmb9\/vGXKQHmvDB9dnb5Dvxnq6+SEifWGnSk35V7TtB0NIoHyckLwfdxxP971c=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1568796265146,"flow_last_seen":1568796265146,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDQAbvb0IW1AAAAALAC\/\/8u4wAAAgQFtAEDAwYBAQgKDXCenAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1568796265147,"flow_last_seen":1568796265147,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAr7AqAIRHw1WNMDRAbs6ii8aAAAAALAC\/\/8mxAAAAgQFtAEDAwYBAQgKDXCenAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wNDH6s7\/29CFtqASbHAaPQAAAgQFeAQCCApocroGDXCenAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAFQGLsIfDVY0wKgCEQG7wNGAszpfOoovG6ASbHAHRwAAAgQFeAQCCApsGJ0PDXCenAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDQAbvb0IW2x+rPAIAQCAytJAAAAQEICg1wnqpocroG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDRAbs6ii8bgLM6YIAQCAyaLgAAAQEICg1wnqpsGJ0P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0952{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":470,"pkt":"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","pkt_caplen":470,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":36,"flow_packet_id":4,"flow_first_seen":1568796265146,"flow_last_seen":1568796265162,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":32,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1115{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":592,"pkt":"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","pkt_caplen":592,"pkt_type":2048,"pkt_ipoffset":14}
+0947{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":470,"pkt":"xiwDYGpkxGGLNYKpCABFAAHIAABAAEAGATbAqAIRHw1WNMDRAbs6ii8bgLM6YIAYCAxkcwAAAQEICg1wnqxsGJ0PFgMBAY8BAAGLAwOAqhQQeNECe\/+9\/hWEsCUXoBmc17WJwpN6Dv+uZppp4CCxDRGsDttILxCLJQMyNqEqreyralyMGp7g0Opm0yvFgwAGEwETAhMDAQABPAArAAUEAwT7GgAKAAYABAAdABcAMwAmACQAHQAgDflfr8Yn3nqwAFG2UPszT201MszUPsD3TkZS35zQnVoADQAGAAQEAwgEAAAAJQAjAAAgc2NvbnRlbnQtbXhwMS0xLmNkbmluc3RhZ3JhbS5jb20AEAALAAkIaHR0cC8xLjEALQADAgEAACoAAAApAK4AiQCDk7JELb9TNLP0bj9gRMRkOJvPqRKtoboU\/jiXhirj8KoAAAAA0R83NY2xlS21RB+Ky1WN+gPP8p0w8+O2jdwGhxiwtDX77+HilbLh9lPlIOCv+O6DXIIy461AN\/1VgaFznAAOuF6g91qcCRHhPuyIutRIMLcftRUTfgFJZajUo+ztdbr8DWSXACEgUIntR5IHbn7YSyVV4jLlbmIrJs0jkHe7vUfeBcNmXco=","pkt_caplen":470,"pkt_type":2048,"pkt_ipoffset":14}
+0802{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1568796265147,"flow_last_seen":1568796265162,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":32,"flow_max_l4_data_len":436,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1121{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":592,"pkt":"xiwDYGpkxGGLNYKpCABFAAJCAABAAEAGALzAqAIRHw1WNMDRAbs6ijCvgLM6YIAYCAw4cgAAAQEICg1wnqxsGJ0PFAMDAAEBFwMDAgNo3PMGBE3Uy7mxkQeoZAJTCt\/t5mahCav99zTkK60ANTi+qGC30\/CXHNXA43ZPIq7\/C8M0ztacgfWPQTZMeHj28d+rHdUOBleRXFAAr12VCclSZPY11daZ7KPyEgGZ1WfWSKHMsGqUqVO9ISzL9tqh0xQi2oegbTDcvXAEaEeixyc7iE\/5Fbfdm2zGSkEoYdL8VOMoTV5Fq6WPjUf3uU0vQaabxg+nUWJATEYIamAT4GZ3pXch4q0Pzta37XFFiNMjS9UwN+uf\/W0VKBeUeWGMENVCs+41kjAjNqhNA7OfvACTE5Oe+EDw3SyWrtv2H+tuBRZlWOstBndp0uXzEtziTTvaW56JowDlFZSKZhr2YrXphECVIbTUjw1e3xB2U8ZXoCyUpn7KM6E36TKhlSct49iYusL+24jY\/PlEgf33kx8t\/PfC+6\/SSu\/dfiM6b+kqTUwfBrh39j9f4gYAdXaMfaJYEoLOjAFRa9RvR7Vc1i\/9QTr6DBNO5geRmghq+lJPdQsftLL4yiZTtBTj+OyJQ+uaUvyImw8J3xyAmoT8+rJ3HDj74zCanSiyVtZOpN9wGncTMVd6u26hqRxKasSy5t3bDDXyPWVlSvqe6TG0IgEdl7\/lgVcyv9nm82si\/V1YhXj4nvJRWMnZnYXuWFehOLEv3hLdjMFgwTI+1\/aCR\/7VBg==","pkt_caplen":592,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0pmQAAFQGiGUfDVY0wKgCEQG7wNDH6s8A29CHSoAQAHGzGgAAAQEICmhyuhYNcJ6r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0pmUAAFQGiGQfDVY0wKgCEQG7wNDH6s8A29CJWIAQAHWxCAAAAQEICmhyuhYNcJ6r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0soQAAFQGfEUfDVY0wKgCEQG7wNGAszpgOoowr4AQAHGgIwAAAQEICmwYnR8NcJ6s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0soUAAFQGfEQfDVY0wKgCEQG7wNGAszpgOooyvYAQAHWeEAAAAQEICmwYnSANcJ6s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0703{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":288,"pkt":"xGGLNYKpxiwDYGpkCABFAAESpmYAAFQGh4UfDVY0wKgCEQG7wNDH6s8A29CJWIAYAHVf5AAAAQEICmhyuhcNcJ6rFgMDAIACAAB8AwMlL28rg92sKmQb9oGsNMA+RajkL2IcaAywIjBJDhpxKCAVVtgPkL5YKAYDZH3R54j++7adj7J3C5T+\/WxuRVW3nBMBAAA0ACsAAvsaADMAJAAdACBLc7TMN4ezhX8UBdIZR11Gtyb7BW6N++w7k3CE+t6MWQApAAIAABQDAwABARcDAwBOz14LPIfQi+FO0wtI1TWbwAK14UAyz\/1ipvZhDtW0uIPParyoZ+aSMyX1yyoo+\/e60Nn17Tb\/xDWifGL2enVYALLTd5yia8f4iYqQvWdS","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":36,"flow_packet_id":8,"flow_first_seen":1568796265146,"flow_last_seen":1568796265175,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":32,"flow_max_l4_data_len":558,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0701{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":288,"pkt":"xGGLNYKpxiwDYGpkCABFAAESsoYAAFQGe2UfDVY0wKgCEQG7wNGAszpgOooyvYAYAHX9OgAAAQEICmwYnSANcJ6sFgMDAIACAAB8AwOYxNukl4Ng6qf3UXkEJHyQV7Ck+8Jb66Xy5wDWnotJjyCxDRGsDttILxCLJQMyNqEqreyralyMGp7g0Opm0yvFgxMBAAA0ACsAAvsaADMAJAAdACDdXsZJOtqKLBliZFG+ohtftoYKIDc2G9X38jB8J\/nWaQApAAIAABQDAwABARcDAwBOMaIC9pi0AJ8pG7dNcThNnUDCeU9+95y2p\/z5ZkrLshQhjucbJodbnFZ4Q775Cwq0NpVDkN1aAnRf3MSIxgEXSNG+F3e3xiRxFc7+wi8w","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":37,"flow_packet_id":8,"flow_first_seen":1568796265147,"flow_last_seen":1568796265176,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":32,"flow_max_l4_data_len":558,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1261{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":699,"pkt":"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","pkt_caplen":699,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDQAbvb0IlYx+rP3oAQCAioiAAAAQEICg1wnrlocroX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":89,"pkt":"xGGLNYKpxiwDYGpkCABFAABLpmgAAFQGiEofDVY0wKgCEQG7wNDH6tJX29CJWIAQAHXC3wAAAQEICmhyuhgNcJ6rFwMDABLavfURPg+gJrbDUe9058jhwTw=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDRAbs6ijK9gLM7PoAQCAiVkgAAAQEICg1wnrlsGJ0g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":150,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDQAbvb0IlYx+rP3oAYCAhL2QAAAQEICg1wnrpocroXFwMDABXijclT5QL1inKmIReRttCwkH7l\/BEXAwMANci7EOvzR8eJs0YMsfH5Tv8\/RZIt0uJHPusJ1h8uB5k8+H28XSIn7Wj2ROyuhCY6zDIlvurn","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+2276{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2281{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+2281{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":1454,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgpmsAAFQGgvIfDVY0wKgCEQG7wNDH6t1G29CJWIAQAHXd\/QAAAQEICmhyuhgNcJ6rFp7FrLtQULYKFvuAZlHTLDtZE8pdLMQcEB+viBKeBINN3EK1V6i+YRdcYkFX6TZx1ToMNeMPM+EV4+Q754YVqMqD2UnlXSH0cJRQgQPnNh1VU+SjfFaZl2VqoW6LC0rcKtUQpDznmlTl+uFxmR+Gk6LVzp2VSLpidliEyy9vsMD\/+6OXLYenMXg+FysL01b4bOqVe7TzxVF8ZZs53UXpzGKZhvdofNU2eZ7kloxZou8rsHbnDjKxC7Goc+v4PQNSEEmzZYIpKS3FKvaheJcaYdBQrMSjxovDv1WUWluzsn40M6EW35kO84x9b\/v41\/ggSUBoOW9b7s64QPz9AwEExfyRWrEWJWSDomulDZr0idCDZfoLTDJLhnC3dxWI9wWmOqTICdYsSpjqFuHb6XfhyKvIvs5mYBgE\/A4jvf3yb25pV7UvDTFMcfYprSPVm4TEPUhcGj\/QYo+Tp84K1Zstr4u9n+zHC1BbosRG6LvXsABgmkcDwXLpRZB1RPscI57qsihn0W8vwJ6vLsCOceX3EER8TT9Y7MO4gwG+lwG5oq3kV8Ry5LWx+HbUmXFT\/7YGYhAbeWk5PpNipGQ4roTFD3PpkIdcYY1VldolaE8i0JQT8VHgp8X8nCz6qmQZsNwZOb3LlP7b1UOKm1wVQTOLH9buCQzs4wiX3QHCfxeyjyMsTkDCfOPGYieDfjlFtfWnlkoV0EHfKtfbbJvkXoICaPYfX\/rO9PdRdH4JaghxV9LAmbOBg\/0fTUpRirEM4cDjaQKAE+EUzB9bgSsvT0nAWKJrzLsm0qpXzQ35urWn5kHtHBtsKOn0+mO7zrkHiERh2T+fT0se4Xx+KOdfMIut5dOxYBnKYhpZwT8QGLYTPf8U+3ZagttmHa5o8wgMmC9jZHqGlYNT2SlBVwjKmdprQwypt2CmktA4o7GyWs+2HOOLCUbyLkCI4j7pjzm8shPdbpIGiGk8lVB6INiUIex+3+w\/UwpVlp2Kql06sV5MVMvnShOTj492YjDSo0w3l8Z4obaLRRWoMJsiBjgyh\/T+JS0nPDD39GxShxy6GwFL+3DV3vgDabwDc0j4T6qSfP+YFW83l8wDpBzf4lo+nc9QDAwvoC6EX5iobA5vi+6by2DjgQ5kWAOXzU2cGGwM+Al1jcORu\/1NkwNpRF7rHPb7+Jy\/\/4y7MO7t8+8sqOOansmVfC45Z4T441F79Vl5JVfSWuPhh2PW2iu+Ey8K2CPPIZnXOyilxfIAUsYufbP8MMr\/sr7vUzwUJLWb6lTyxInIbEU7ZB1WplrwP6gRB9O33itZIdogP6mnlvMI09CV0gGD1ef00vaP+7EN7EhHhVC0RkTytVgQAUjP11Re4hV8FLF6mQKgEP6iu\/n7g8iLHxuf4mfpTEPWijzfjGV\/NfjXSUwU1c9dH5LyB+ltkldGaRPZfFNol3ex6Hg\/DRGMy0t+NSQY4SIWxNLNB2GV532nUw35J8EVOTJrHBZTFvzxdAe+nXig6Q7ejgBeoFhQJCLvU\/GceDgC238qx91YW80\/wYRALKOX\/vPgPf1nkZnXrlEdoBN5WDPLmL+2WasLiIx5O4f2cAEWK3BARjwd3N751j6mwZSSxRLDvAv0zJyyG8lGe+MIxXBSr5XH2DZ+sdTj6e7jLsHtywpKOfZDgqmkvX4QKV6QGp5nslDmh123HxDx5t89fHszJI86qvB6tuk4obJB+YMn4SEIUEBVEznYvU6GaHGGPYnIyy+eQ4HP+oc9OPc5ZA2yLvgLT2xFj\/7tPxe9bJLW74\/kN1Z5txcDAxAR4x7Hzo3PTlRc6+sJAEEwDIIqe+wwy5qrCOXlMZXnWQnQX1Qxdk6bjnE=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":150,"pkt":"xiwDYGpkxGGLNYKpCABFAACIAABAAEAGAnbAqAIRHw1WNMDRAbs6ijK9gLM7PoAYCAhLaAAAAQEICg1wnrpsGJ0gFwMDABV7fJ+fbDbsTl7xaLaB11VBQYy\/b+oXAwMANTIduwAU3+2QzfaqxE+E\/YGcP8wrLEs2Pm3lxeSDLQh9ENxS5FM06OuWTbLdZrAcmNN6EeQ4","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":244,"pkt":"xGGLNYKpxiwDYGpkCABFAADmsocAAFQGe5AfDVY0wKgCEQG7wNGAszs+OoozEYAYAHUiHQAAAQEICmwYnS4NcJ66FwMDAK2KZJMUjgrP69pD6VebKKOMCMb8f5CO9XpCeYdw+q85oaw8Gmidz315RI1z1aEF+PzZTig3y5eAZkfkt66OhZShdjKvKTzx3BVNIVJDEVjjK8BmpG3F8QDcgZeTpDQW2zJQEy3p3Z5KrTceyGN9bLCetFXPnAxg\/AacSKsz71NEoHIGw4s6h8+U3RifMayXByFeJarm2nF5ilEOVsNDittG7wnu9f15PvQcuh8+VA==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAsrAqAIRHw1WNMDRAbs6ijMRgLM78IAQCAaUcgAAAQEICg1wnsdsGJ0u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":36,"flow_packet_id":255,"flow_first_seen":1568796265146,"flow_last_seen":1568796265243,"flow_tot_l4_data_len":211648,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":829,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+1453{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":840,"pkt":"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","pkt_caplen":840,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":89,"pkt":"xGGLNYKpxiwDYGpkCABFAABLsokAAFQGfCkfDVY0wKgCEQG7wNGAsz72OoozEYAQAHXKpwAAAQEICmwYnbINcJ7HFwMDABJgUObMp8Yh43VpzLWrtvs+vcU=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+2283{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","pkt_oversize":false,"pkt_ts":1568796265,"pkt_len":1454,"pkt":"xGGLNYKpxiwDYGpkCABFAAWgsooAAFQGdtMfDVY0wKgCEQG7wNGAsz8NOoozEYAQAHW\/AwAAAQEICmwYnbINcJ7HFwMDBe2fuVF69OnvL+7P6xeUZG8KfIdGISriqfPejAtsrrSyGYAC6x0\/+7AbN+P8YnMWW6CDlHjG66lfeP42+RUSTfASQSqypWeLVlORWb79sRKDmwZhV6g5kOE5w7\/pHKNDHR99kVf3FYZzzgk5qxjpsTC2KgyeyXH9LQZoLmBnr4b3YC52p4KGXyCPV\/lCQHXJxEbYhJLN8DmSxOlTvCGvWRT\/Jq61slV+D\/bey\/H\/v5nBoJ5AARuAjzkg44tySQ1XNvUBJcL85Y4qz79nhrLc2l2VSZSdpD2j9YG\/9uxThvE7O9aEZzulHwRgggXtp4B6IO8AhEmtKUHqrz9YvZF3q4MRKwvN3yZObLbXln0IBjXzWzei1AFo8jafHnKRrtUl6jMCnWCt\/WIImUGxXsfT9IFaJfn8TV3ZVc8IH8pqv2cSn\/Cqvisvot04ybKT4A9383Gjtw2FLMcgdV5hW4AwE4\/NE+2eWD4u385bxkHF3lP5h6hyQdy9iVO8vEaHIyIXTJwLh7WP5S1baTvWdpXE8tJD1+tR+Bj6KtV+GMb0U4rAEDwUL5tESThIWX0+HZmRIhjOlLGqUtGKBYg\/H6lIuAYsOIMtOjzBDtc11R9rg2fHFILECq3RMn3zR9RKUAop5WXUwbJaO9HlEMqbSLQA82+RC13J6TDwmD1TUSgjlx84SdbyIiqrLKAOJeOp0igi20nXOqbC0NVT04xp50pHYtcDgZWf\/jRxYk0UctNP7uPo6APIyZRmuI8kT7kscW90h2XxB8Fjg2aGyf4mNWmD\/ZSlOMBCxj9OQEoOBTfkDH9oOjw24gkiUjASuCD5poPvSRUnWr0adFS1BdAmtRpwKpffyziTsyOajQMT1FFSn4LBjxD\/SbxHYyLj8VwwiaV3+HBxL9GqPMsPa9iU5RNggzTWYn+0K3HWpRqnWLR+fjXpzb6fW1jWF2UvOuGaVpb6MeDZv5q3qTne+rXd5kABZG23quMWNl8r45ecmjXG1WRUc45Pive8v3yuoJ6\/bt8Xe28g5WvAY8In4SLj+cmDPkXXSAzvr2tmZ2XVIvY8fPjzKJTLsspkgD4AcdQf9kDka+q\/hHEKKcplBoVe3A5qB5PzZbq2OX2D19RgjIMwShzm85IjuR6bLk9rgYBsxM8xhSgmPrpU\/UZepmoLLfUZwgx6yaV2OUDddq6a9npr2exIHpCocATVOpq2\/QCVRTuFfvGK+OPEHd1U0t46YhFqwW3Py2t45mq+L31nfvqoJvZKlVIjPJdLGuZkzrPPUusdYT+uDtAtjLqBHgAxCE4kqU39GMFCy4YTlHUrQJ8adU2LFOqumui4ry8r83G8oGKQg8IbCGxy5JJiHk6bWZJ8ipgLbJXKDoYgnbQX2kNZOt5HZFoEH+5jIlvpqfvqY3vpJBpyrGNUfeDSmnbLUbjAIZsh0ScSALxOl5loLGZ5TbZDnbKA5Vkak54gIiohpCpy6itmcR6esIfTPw\/SccTY9fB1Pe3OHQ2q5EQehAkVrIkDzp\/ApxHtUgNwCHalLszkTkPxQQl+AXreA\/IULTlygORuxIKXta77VClV7LbrqdAmC+K+8CiwLKrT1KcACuDL\/Jnhfn8L2+foxiDOXHEQBMcKKfaZ4QRBUf7csyvL09SuibgPklafIPLJf5KCLNyy4ir2vyR49icAlNuMA\/4BLAJzY2XCDuYZOIJFDz1Lkt8vbiXkn4XYysnhUnPsj3JtOxlwOaEHFvJDnfv7dMLZ089SnaJueBZZlxi4mbLqMQbWqf08oMhWFPStVsGMNWX2nRmDofAhKsEe8okDpLgY3axsYOEhsrSFlvhHxt1GEvGvqQHw6vLJ8HA=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":34,"flow_packet_id":255,"flow_first_seen":1568796254515,"flow_last_seen":1568796265535,"flow_tot_l4_data_len":196446,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":770,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Instagram","category":"SocialNetwork"},"tls": {"version":"TLSv1.3 (Fizz)","client_requested_server_name":"scontent-mxp1-1.cdninstagram.com","ja3":"44dab16d680ef93487bc16ad23b3ffb1","ja3s":"fcb2d4d0991292272fcb1e464eedfd43","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.3 (Fizz)"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":32,"flow_packet_id":1366,"flow_first_seen":1568796253770,"flow_last_seen":1568796268061,"flow_tot_l4_data_len":1263938,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":925,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49355,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":33,"flow_packet_id":144,"flow_first_seen":1568796254514,"flow_last_seen":1568796268054,"flow_tot_l4_data_len":102410,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":711,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49357,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":34,"flow_packet_id":388,"flow_first_seen":1568796254515,"flow_last_seen":1568796268054,"flow_tot_l4_data_len":296046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":763,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49358,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":35,"flow_packet_id":230,"flow_first_seen":1568796254524,"flow_last_seen":1568796268054,"flow_tot_l4_data_len":162614,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":707,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49359,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":36,"flow_packet_id":359,"flow_first_seen":1568796265146,"flow_last_seen":1568796268054,"flow_tot_l4_data_len":283527,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":789,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49360,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap","flow_id":37,"flow_packet_id":212,"flow_first_seen":1568796265147,"flow_last_seen":1568796268053,"flow_tot_l4_data_len":162004,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":764,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"31.13.86.52","src_port":49361,"dst_port":443,"l4_proto":"tcp"}
+0148{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/instagram.pcap"}
diff --git a/tests/result/nDPId_iphone.pcap.txt b/tests/result/nDPId_iphone.pcap.txt
new file mode 100644
index 000000000..e28dc6448
--- /dev/null
+++ b/tests/result/nDPId_iphone.pcap.txt
@@ -0,0 +1,498 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1582454552576,"flow_last_seen":1582454552576,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1053{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454552,"pkt_len":552,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAIaAFkAAEAR8inAqAIBwKgC\/0RcRFwCBr34eyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAzMzA0MDI2MjQwMTMxNjcxMTI3MTc3MTQ1ODMyOTcxNTM2ODg0ODIsICJkaXNwbGF5bmFtZSI6ICIiLCAibmFtZXNwYWNlcyI6IFsyNzUwMzcwNTYwLCA3ODUyNjYxNzcsIDE1MjYyNjMwNDUsIDEzMzg2NTkyMDEsIDE0ODE5MzM3LCA0ODEwNTkxNzYwLCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgOTk2MzA2MjE1LCA1MzAzMzAxMjQ4LCAyODUyMTYwNywgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgOTk0Njk3NzMsIDcwNzk2MzY2ODgsIDE3Njk2NDMwNywgMTI1NTQwNTY2LCAxMDQ3NDI4MTg5LCA0NzE2MTkwMDQ4LCA1NDY3MTYzMDg4LCAxMTk1MDQ0MDcxLCA5Njg1MzIyNCwgMTc2MDk5NjMsIDY0NzgzMDM0NDAsIDUxMTcwNjY0MiwgNjI5Nzk1NTE4NCwgMTQxNTYyMDM1MF19","pkt_caplen":552,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1582454552576,"flow_last_seen":1582454552576,"flow_tot_l4_data_len":518,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454553219,"flow_last_seen":1582454553219,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0778{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454553,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCUAAP8RQoAAAAAA\/\/\/\/\/wBEAEMBNI0tAQEGAHhURwkAGwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1582454553219,"flow_last_seen":1582454553219,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1582454553606,"flow_last_seen":1582454553606,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+1915{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454553,"pkt_len":1199,"pkt":"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","pkt_caplen":1199,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1582454553606,"flow_last_seen":1582454553606,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"luca___s_imac._odisk._tcp.local"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":1582454553607,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+1948{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454553,"pkt_len":1219,"pkt":"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","pkt_caplen":1219,"pkt_type":34525,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":1582454553607,"flow_tot_l4_data_len":1165,"flow_min_l4_data_len":1165,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":1165,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"luca___s_imac._odisk._tcp.local"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":1582454553607,"flow_tot_l4_data_len":1194,"flow_min_l4_data_len":1194,"flow_max_l4_data_len":1194,"flow_avg_l4_data_len":1194,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+1955{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454553,"pkt_len":1228,"pkt":"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","pkt_caplen":1228,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1582454553607,"flow_last_seen":1582454553607,"flow_tot_l4_data_len":1194,"flow_min_l4_data_len":1194,"flow_max_l4_data_len":1194,"flow_avg_l4_data_len":1194,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"luca___s_imac._odisk._tcp.local"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454556158,"flow_last_seen":1582454556158,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0431{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454556,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABITwkAAEARpUvAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1582454556158,"flow_last_seen":1582454556158,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0849{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454559,"pkt_len":404,"pkt":"AQBeAAD7xiwDYGpkCABFAAGGV\/AAAP8RvtHAqAIB4AAA+xTpFOkBcvWXAAAAAAARAAEAAAABCF9haXJwb3J0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAENX2FwcGxlLW1vYmRldsAVAAwAAQg4ZmIyMDdkZQRfc3ViDl9hcHBsZS1tb2JkZXYywBUADAABD19hcHBsZS1wYWlyYWJsZcAVAAwAAQtfZ29vZ2xlY2FzdMAVAAwAAQZfdXNjYW7AFQAMAAEHX3VzY2Fuc8AVAAwAAQdfaXBwdXNiwBUADAABCF9zY2FubmVywBUADAABBF9pcHDAFQAMAAEFX2lwcHPAFQAMAAEIX3ByaW50ZXLAFQAMAAEPX3BkbC1kYXRhc3RyZWFtwBUADAABBF9wdHDAFQAMAAEEX3JmYsAVAAwAAQZfYWRpc2vAFQAMAAHAJQAMAAEAAA4KABANTHVjYeKAmXMgaU1hY8AlAAApBaAAABGUABIABAAOAADELAMGSf7GLANgamQ=","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0883{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454559,"pkt_len":424,"pkt":"MzMAAAD7xiwDYGpkht1gBTIBAXIR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QFyac0AAAAAABEAAQAAAAEIX2FpcnBvcnQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQ1fYXBwbGUtbW9iZGV2wBUADAABCDhmYjIwN2RlBF9zdWIOX2FwcGxlLW1vYmRldjLAFQAMAAEPX2FwcGxlLXBhaXJhYmxlwBUADAABC19nb29nbGVjYXN0wBUADAABBl91c2NhbsAVAAwAAQdfdXNjYW5zwBUADAABB19pcHB1c2LAFQAMAAEIX3NjYW5uZXLAFQAMAAEEX2lwcMAVAAwAAQVfaXBwc8AVAAwAAQhfcHJpbnRlcsAVAAwAAQ9fcGRsLWRhdGFzdHJlYW3AFQAMAAEEX3B0cMAVAAwAAQRfcmZiwBUADAABBl9hZGlza8AVAAwAAcAlAAwAAQAADgoAEA1MdWNh4oCZcyBpTWFjwCUAACkFoAAAEZQAEgAEAA4AAMQsAwZJ\/sYsA2BqZA==","pkt_caplen":424,"pkt_type":34525,"pkt_ipoffset":14}
+0849{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454559,"pkt_len":404,"pkt":"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","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1582454560698,"flow_last_seen":1582454560698,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.1","src_port":5351,"dst_port":5350,"l4_proto":"udp"}
+0396{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454560,"pkt_len":66,"pkt":"AQBeAAABxiwDYGpkCABFAAA0yh8AAAERTO\/AqAIB4AAAARTnFOYAIDCVAoAAAAAAAAAAAAAhAAAAAAAAAAAAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454560,"pkt_len":54,"pkt":"AQBeAAABxiwDYGpkCABFAAAoSfUAAAERzSXAqAIB4AAAARTnFOYAFHD5AIAAAAAAACHAqAEL","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454561,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCYAAP8RQn8AAAAA\/\/\/\/\/wBEAEMBNI0lAQEGAHhURwkAIwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454570,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCcAAP8RQn4AAAAA\/\/\/\/\/wBEAEMBNI0cAQEGAHhURwkALAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454579,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCgAAP8RQn0AAAAA\/\/\/\/\/wBEAEMBNI0TAQEGAHhURwkANQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+1054{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454582,"pkt_len":552,"pkt":"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","pkt_caplen":552,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454583,"pkt_len":87,"pkt":"AQBeAAD72DBiVgAcCABFAABJrWMAAP8RoW2p\/uHY4AAA+xTpFOkANUGgAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454583,"pkt_len":87,"pkt":"AQBeAAD7xiwDYGpkCABFAABJLHMAAAER6YzAqAIB4AAA+xTpFOkANQrOAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454585624,"flow_last_seen":1582454585624,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp"}
+0540{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454585,"pkt_len":168,"pkt":"AQBef\/\/62DBiVgAcCABFAACab\/sAAP8Rz4Wp\/uHY7\/\/\/+ux6B2wAhmGgTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454585624,"flow_last_seen":1582454585624,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454585625,"flow_last_seen":1582454585625,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp"}
+0538{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454585,"pkt_len":168,"pkt":"AQBef\/\/6xiwDYGpkCABFAACaYI8AAAERpiDAqAIB7\/\/\/+sjTB2wAhk51TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454585625,"flow_last_seen":1582454585625,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0432{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454586,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIdggAAEARfkzAqAIBwKgC\/+EV4RUANNgcU3BvdFVkcDDcFXQoLlJiTAABAARIlcIDokHeIIm5eNggVkvVDJHA6KPmCng=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454586,"pkt_len":404,"pkt":"AQBeAAD7xiwDYGpkCABFAAGG7IsAAP8RKjbAqAIB4AAA+xTpFOkBchCYAAAAAAARAAEAAAABCF9haXJwb3J0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAENX2FwcGxlLW1vYmRldsAVAAwAAQg4ZmIyMDdkZQRfc3ViDl9hcHBsZS1tb2JkZXYywBUADAABD19hcHBsZS1wYWlyYWJsZcAVAAwAAQtfZ29vZ2xlY2FzdMAVAAwAAQZfdXNjYW7AFQAMAAEHX3VzY2Fuc8AVAAwAAQdfaXBwdXNiwBUADAABCF9zY2FubmVywBUADAABBF9pcHDAFQAMAAEFX2lwcHPAFQAMAAEIX3ByaW50ZXLAFQAMAAEPX3BkbC1kYXRhc3RyZWFtwBUADAABBF9wdHDAFQAMAAEEX3JmYsAVAAwAAQZfYWRpc2vAFQAMAAHAJQAMAAEAAA3vABANTHVjYeKAmXMgaU1hY8AlAAApBaAAABGUABIABAAOAADELAMGSf7GLANgamQ=","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0884{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454586,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":34525,"pkt_ipoffset":14}
+0850{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454586,"pkt_len":404,"pkt":"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","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454588,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIeCkAAP8RQnwAAAAA\/\/\/\/\/wBEAEMBNI0KAQEGAHhURwkAPgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454593,"pkt_len":113,"pkt":"xGGLNYKp2DBiVgAciI4CAwBfAgCKABAAAAAAAAAAAG++A2+4rA8X2gYxFbqZeXiyOn90e79J6gG73FMwvQ8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":113,"pkt_type":34958,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","type":34958}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454593,"pkt_len":135,"pkt":"2DBiVgAcxGGLNYKpiI4CAwB1AgEKABAAAAAAAAAAAOWT02eyYZMJTCbPZYTVE1RlWpVpVaVS1ktYpT2U96wiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdssiNbmCpdH7SIBd9jgSABYwFAEAAA+sBAEAAA+sBAEAAA+sAgwA","pkt_caplen":135,"pkt_type":34958,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","type":34958}
+0485{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454593,"pkt_len":169,"pkt":"xGGLNYKp2DBiVgAciI4CAwCXAhPKABAAAAAAAAAAAW++A2+4rA8X2gYxFbqZeXiyOn90e79J6gG73FMwvQ8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXMGwwvmlZsH0gzw9I1enDADiGRsswD1UC4klRmV38wG3VdihVeMQMrcq8SNK6fwgxxzGLV9yu95cWJOfEF6gBqVEfR0ZzH9vGYQ==","pkt_caplen":169,"pkt_type":34958,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","type":34958}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454593,"pkt_len":113,"pkt":"2DBiVgAcxGGLNYKpiI4CAwBfAgMKABAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBqniUXzeQOJOsxzjRJJCEAAA=","pkt_caplen":113,"pkt_type":34958,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","type":34958}
+0779{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454595,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/xGGLNYKpCABFAAFIJUkAAP8RlVwAAAAA\/\/\/\/\/wBEAEMBNFcnAQEGALeWutEAAAAAAAAAAAAAAAAAAAAAAAAAAMRhizWCqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwcBeQMGD3f8OQIF3D0HAcRhizWCqTMEAHanAAwMTHVjYXMtaVBob25l\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454595352,"flow_last_seen":1582454595352,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.17","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0769{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454595,"pkt_len":342,"pkt":"xGGLNYKpxiwDYGpkCABFAAFILXQAAP8RB87AqAIBwKgCEQBDAEQBNJWvAgEGALeWutEAAAAAAAAAAMCoAhHAqAIBAAAAAMRhizWCqQAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQECNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1582454595352,"flow_last_seen":1582454595352,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.17","src_port":67,"dst_port":68,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}}
+0426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":1582454595354,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff98:a29c","l4_proto":"icmp6"}
+0429{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454595,"pkt_len":86,"pkt":"MzP\/mKKcxGGLNYKpht1gAAAAACA6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/mKKchwBApQAAAAD+gAAAAAAAAAgjPxeCmKKcDgEq29a5HEA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0479{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":1582454595354,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff98:a29c","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0434{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":1582454595354,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0397{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454595,"pkt_len":62,"pkt":"MzMAAAACxGGLNYKpht1gCzl3AAg6\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAChQAQyAAAAAA=","pkt_caplen":62,"pkt_type":34525,"pkt_ipoffset":14}
+0487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":1582454595354,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454595839,"flow_last_seen":1582454595839,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0487{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454595,"pkt_len":128,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKFMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk=","pkt_caplen":128,"pkt_type":34525,"pkt_ipoffset":14}
+0561{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1582454595839,"flow_last_seen":1582454595839,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}}
+0439{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454596364,"flow_last_seen":1582454596364,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0492{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454596,"pkt_len":130,"pkt":"MzMAAAAWxGGLNYKpht1gAAAAAEwAAf6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPAIFJAAAAAwQAAAD\/AgAAAAAAAAAAAAAAAAD7BAAAAP8CAAAAAAAAAAAAAv8d2dAEAAAA\/wIAAAAAAAAAAAAB\/5iinA==","pkt_caplen":130,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1582454596364,"flow_last_seen":1582454596364,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0779{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454596,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/xGGLNYKpCABFAAFIJUoAAP8RlVsAAAAA\/\/\/\/\/wBEAEMBNGQTAQEGALeWutEAAQAAAAAAAAAAAAAAAAAAAAAAAMRhizWCqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAcRhizWCqTIEwKgCETYEwKgCAQwMTHVjYXMtaVBob25l\/wAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454596,"pkt_len":342,"pkt":"xGGLNYKpxiwDYGpkCABFAAFILXUAAP8RB83AqAIBwKgCEQBDAEQBNJKvAgEGALeWutEAAAAAAAAAAMCoAhHAqAIBAAAAAMRhizWCqQAAAAAAAAAAAABMdWNhcy1pTWFjLmxvY2FsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEFNgTAqAIBMwQAAU4gAQT\/\/\/8AAwTAqAIBBgTAqAIB\/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454596,"pkt_len":128,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKNMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk=","pkt_caplen":128,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454597,"pkt_len":130,"pkt":"MzMAAAAWxGGLNYKpht1gAAAAAEwAAf6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPAIFJAAAAAwQAAAD\/AgAAAAAAAAAAAAAAAAD7BAAAAP8CAAAAAAAAAAAAAv8d2dAEAAAA\/wIAAAAAAAAAAAAB\/5iinA==","pkt_caplen":130,"pkt_type":34525,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454598204,"flow_last_seen":1582454598204,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":90,"pkt":"xiwDYGpkxGGLNYKpCABFAABMpW8AAP8RkM7AqAIRwKgCAfeVADUAOH2lldMBAAABAAAAAAAAE3AyNi1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQAAAQAB","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1582454598204,"flow_last_seen":1582454598204,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"p26-keyvalueservice.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454598205,"flow_last_seen":1582454598205,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp"}
+0421{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":84,"pkt":"xiwDYGpkxGGLNYKpCABFAABGS9oAAP8R6mnAqAIRwKgCAfanADUAMj\/EHhQBAAABAAAAAAAADXAyNi1mbWZtb2JpbGUGaWNsb3VkA2NvbQAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1582454598205,"flow_last_seen":1582454598205,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"p26-fmfmobile.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454598209,"flow_last_seen":1582454598209,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":83,"pkt":"xiwDYGpkxGGLNYKpCABFAABFIREAAP8RFTTAqAIRwKgCAfGmADUAMT0yjvEBAAABAAAAAAAACmdzcGUzNS1zc2wCbHMFYXBwbGUDY29tAAABAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1582454598209,"flow_last_seen":1582454598209,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gspe35-ssl.ls.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454598212,"flow_last_seen":1582454598212,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":82,"pkt":"xiwDYGpkxGGLNYKpCABFAABEPtIAAP8R93PAqAIRwKgCAdpqADUAMKdbJH8BAAABAAAAAAAACWdzcDg1LXNzbAJscwVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1582454598212,"flow_last_seen":1582454598212,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gsp85-ssl.ls.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454598246,"flow_last_seen":1582454598246,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":77,"pkt":"xiwDYGpkxGGLNYKpCABFAAA\/VFIAAP8R4fjAqAIRwKgCAcc\/ADUAK6bSYEMBAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1582454598246,"flow_last_seen":1582454598246,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0646{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":252,"pkt":"xGGLNYKpxiwDYGpkCABFAADuMPYAAEARw6bAqAIBwKgCEQA19qcA2lqQHhSBgAABAAkAAAAADXAyNi1mbWZtb2JpbGUGaWNsb3VkA2NvbQAAAQABwAwABQABAAARlgAcCWZtZm1vYmlsZQJmZQlhcHBsZS1kbnMDbmV0AMA2AAEAAQAAAA8ABBH4uYzANgABAAEAAAAPAAQR+IMIwDYAAQABAAAADwAEEfiDysA2AAEAAQAAAA8ABBH4g8vANgABAAEAAAAPAAQR+LmkwDYAAQABAAAADwAEEfi5Z8A2AAEAAQAAAA8ABBH4g7LANgABAAEAAAAPAAQR+Lkw","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1582454598205,"flow_last_seen":1582454598247,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":50,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"p26-fmfmobile.icloud.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.248.185.140"}}
+0662{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":264,"pkt":"xGGLNYKpxiwDYGpkCABFAAD6F4oAAEAR3QbAqAIBwKgCEQA195UA5qzeldOBgAABAAkAAAAAE3AyNi1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQAAAQABwAwABQABAAARlgAiD2tleXZhbHVlc2VydmljZQJmZQlhcHBsZS1kbnMDbmV0AMA8AAEAAQAAADUABBH4uVfAPAABAAEAAAA1AAQR+LkmwDwAAQABAAAANQAEEfi5J8A8AAEAAQAAADUABBH4uQrAPAABAAEAAAA1AAQR+IOrwDwAAQABAAAANQAEEfi5Z8A8AAEAAQAAADUABBH4uYTAPAABAAEAAAA1AAQR+LmN","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1582454598204,"flow_last_seen":1582454598247,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":56,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"p26-keyvalueservice.icloud.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.248.185.87"}}
+0614{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":227,"pkt":"xGGLNYKpxiwDYGpkCABFAADVXGwAAEARmEnAqAIBwKgCEQA18aYAwXDXjvGBgAABAAQAAAAACmdzcGUzNS1zc2wCbHMFYXBwbGUDY29tAAABAAHADAAFAAEAAAtxACQKZ3NwZTM1LXNzbAhscy1hcHBsZQNjb20GYWthZG5zA25ldADANQAFAAEAAAFNACIKZ3NwZTM1LXNzbAJscwVhcHBsZQNjb20HZWRnZWtlecBUwGUABQABAAARlgAWBWU2OTg3AmU5CmFrYW1haWVkZ2XAVMCTAAEAAQAAAA8ABF9lGTU=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1582454598209,"flow_last_seen":1582454598248,"flow_tot_l4_data_len":242,"flow_min_l4_data_len":49,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gspe35-ssl.ls.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.25.53"}}
+0507{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":146,"pkt":"xGGLNYKpxiwDYGpkCABFAACEYIUAAEARlIHAqAIBwKgCEQA12moAcAk\/JH+BgAABAAIAAAAACWdzcDg1LXNzbAJscwVhcHBsZQNjb20AAAEAAcAMAAUAAQAADY0AJAlnc3A4NS1zc2wJbHMyLWFwcGxlA2NvbQZha2FkbnMDbmV0AMA0AAEAAQAAAD8ABBGCAi4=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1582454598212,"flow_last_seen":1582454598252,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":48,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gsp85-ssl.ls.apple.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.130.2.46"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1582454598252,"flow_last_seen":1582454598252,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGrHrAqAIREfi5jMWPAbsN6rbUAAAAALDC\/\/8jQQAAAgQFtAEDAwcBAQgKEd\/m0wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":221,"pkt":"xGGLNYKpxiwDYGpkCABFAADPyCcAAEARLJTAqAIBwKgCEQA1xz8Au1lGYEOBgAABAAUAAAAAB2NhcHRpdmUFYXBwbGUDY29tAAABAAHADAAFAAEAABGWACoMY2FwdGl2ZS1jaWRyDG9yaWdpbi1hcHBsZQNjb20GYWthZG5zA25ldADALwAFAAEAAAC8AA4LY2FwdGl2ZS1jZG7APMBlAAUAAQAAAOYAFAdjYXB0aXZlAWcHYWFwbGltZ8AawH8AAQABAAAAEQAEEf1pysB\/AAEAAQAAABEABBH9Nco=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1582454598246,"flow_last_seen":1582454598287,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":43,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.253.105.202"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":1582454598373,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAAA8dgsAAP8RwELAqAIRwKgCAdihADUAKKMQFxsBAAABAAAAAAAABG1lc3UFYXBwbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":1582454598373,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"mesu.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":1582454598373,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0454{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":108,"pkt":"AQBeAAD7xGGLNYKpCABFAABemlUAAP8RfYTAqAIR4AAA+xTpFOkASu+LAAAAAAABAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAyAAQAAKQWgAAARlAASAAQADgAA5mGLNYKpxGGLNYKp","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1582454598373,"flow_last_seen":1582454598373,"flow_tot_l4_data_len":74,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}}
+0487{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":128,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKFMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk=","pkt_caplen":128,"pkt_type":34525,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1582454598377,"flow_last_seen":1582454598377,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/2TAqAIRX2UZNcWQAbugppinAAAAALDC\/\/8BIgAAAgQFtAEDAwcBAQgKEd\/nTAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1582454598385,"flow_last_seen":1582454598385,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZE\/AqAIREYICLsWRAbsZOusXAAAAALDC\/\/+bAAAAAgQFtAEDAwcBAQgKEd\/nUwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1582454598387,"flow_last_seen":1582454598387,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":49152,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/DfAqAIREf1pysAAAFAslesxAAAAALDC\/\/8mdwAAAgQFtAEDAwYBAQgKEd\/nTQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADEG+34R+LmMwKgCEQG7xY+mDHMKDeq21aBScSAX2QAAAgQFrAEBCAr26Z7FEd\/m0wEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rbVpgxzC4AQBAuwVwAAAQEIChHf52v26Z7F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"xiwDYGpkxGGLNYKpCABFAgI5AABAAEAGqn\/AqAIREfi5jMWPAbsN6rbVpgxzC4AYBAuh0wAAAQEIChHf52v26Z7FFgMBAgABAAH8AwN8\/m8PXyQO32u1iV6RcZDnMbTrrPixNIjOuJcPKyu2YCAqbhRZg6XgGUsXaOUau6tuuVwQheEDrsOtyWvnbE4KuAA0EwETAhMDwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUAL8AIwBIACgEAAX\/\/AQABAAAAAB0AGwAAGHAyNi1mbWZtb2JpbGUuaWNsb3VkLmNvbQAXAAAADQAYABYEAwgEBAEFAwIDCAUIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAzACYAJAAdACAqltozl1XctQvleGh0N7IIp3TCS7HFVxwjJhj0\/2bbZgAtAAIBAQArAAkIAwQDAwMCAwEACgAKAAgAHQAXABgAGQAVAMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1582454598252,"flow_last_seen":1582454598405,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-fmfmobile.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0409{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGSmlfZRk1wKgCEQG7xZCMPaCSoKaYqKBScSBNPAAAAgQFrAQCCAoi0AShEd\/nTAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":214,"pkt":"xGGLNYKpxiwDYGpkCABFAADIRW8AAEARr1PAqAIBwKgCEQA12KEAtAJjFxuBgAABAAUAAAAABG1lc3UFYXBwbGUDY29tAAABAAHADAAFAAEAAAfrAB8IbWVzdS1jZG4FYXBwbGUDY29tBmFrYWRucwNuZXQAwCwABQABAAAMoAAYCG1lc3UtY2RuDG9yaWdpbi1hcHBsZcA7wFcABQABAAAARAARBG1lc3UBZwdhYXBsaW1nwBfAewABAAEAAAAPAAQR\/WnKwHsAAQABAAAADwAEEf01yw==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1582454598373,"flow_last_seen":1582454598412,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":40,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"mesu.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.253.105.202"}}
+0397{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppiojD2gk4AQBAvpMwAAAQEIChHf524i0ASh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1582454598377,"flow_last_seen":1582454598414,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gspe35-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1582454598416,"flow_last_seen":1582454598416,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/DfAqAIREf1pysWSAbt\/OqmMAAAAALDC\/\/8OTwAAAgQFtAEDAwcBAQgKEd\/ndwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1582454598418,"flow_last_seen":1582454598418,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/DfAqAIREf1pysWTAbsyJO8VAAAAALDC\/\/8V2QAAAgQFtAEDAwcBAQgKEd\/neQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGSjwR\/WnKwKgCEQBQwACbtSzNLJXrMqBScNC85AAAAgQFrAQCCAodNCSFEd\/nTQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGslMRggIuwKgCEQG7xZHfrwWiGTrrGKBSqbCWRAAAAgQFrAQCCAq1T9HeEd\/nUwEDAw4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0RA0AADUGBmRfZRk1wKgCEQG7xZCMPaCToKaarYAQAOvqKgAAAQEICiLQBMUR3+du","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1582454598377,"flow_last_seen":1582454598449,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"gspe35-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2348{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2053{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+2147{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1357,"pkt":"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","pkt_caplen":1357,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGSjwR\/WnKwKgCEQG7xZNpWNRgMiTvFqBScNC35wAAAgQFrAQCCAoAH8DDEd\/neQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADIGSjwR\/WnKwKgCEQG7xZLy+qnpfzqpjaBScNDegAAAAgQFrAQCCAqK\/qiVEd\/ndwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2148{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1357,"pkt":"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","pkt_caplen":1357,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1582454598542,"flow_last_seen":1582454598542,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp"}
+0412{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAIN8AAP8RFWvAqAIRwKgCAc50ADUALLvssQ8BAAABAAAAAAAAB2dhdGV3YXkGaWNsb3VkA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1582454598542,"flow_last_seen":1582454598542,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"gateway.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0397{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysAAAFAslesym7UszoAQCBZUCQAAAQEIChHf5+gdNCSF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":197,"pkt":"xiwDYGpkxGGLNYKpCABFAgC3AABAAEAG+77AqAIREf1pysAAAFAslesym7UszoAYCBZ75QAAAQEIChHf5+kdNCSFR0VUIC9ob3RzcG90LWRldGVjdC5odG1sIEhUVFAvMS4wDQpIb3N0OiBjYXB0aXZlLmFwcGxlLmNvbQ0KQ29ubmVjdGlvbjogY2xvc2UNClVzZXItQWdlbnQ6IENhcHRpdmVOZXR3b3JrU3VwcG9ydC0zOTAuNjAuMSB3aXNwcg0KDQo=","pkt_caplen":197,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1582454598387,"flow_last_seen":1582454598545,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":32,"flow_max_l4_data_len":163,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":49152,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP.Apple","category":"ConnectivityCheck"},"http": {"hostname":"captive.apple.com","url":"captive.apple.com\/hotspot-detect.html","code":0,"content_type":"","user_agent":"CaptiveNetworkSupport-390.60.1 wispr"}}
+0397{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOusY368Fo4AQBAtqWAAAAQEIChHf5\/C1T9He","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1582454598385,"flow_last_seen":1582454598545,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsp85-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0400{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD2r04AQA\/TbXQAAAQEIChHf5\/Ei0ATG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD2wk4AQA+vWpgAAAQEIChHf5\/Ei0ATG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD21noAQA+DRpAAAAQEIChHf5\/Ei0ATI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG\/2TAqAIRX2UZNcWQAbugppqtjD21nrAQA+AckAAAAQEIChHf5\/Ei0AUYAQEFCow9sJOMPbWe","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/3DAqAIRX2UZNcWQAbugppqtjD21noAQBADRNAAAAQEIChHf5\/Ei0AUY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWTAbsyJO8WaVjUYYAQBAtTNAAAAQEIChHf5\/cAH8DD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1582454598418,"flow_last_seen":1582454598546,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0400{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWSAbt\/OqmN8vqp6oAQBAt5ywAAAQEIChHf5\/eK\/qiV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1582454598416,"flow_last_seen":1582454598546,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0f0MAADEGfEMR+LmMwKgCEQG7xY+mDHMLDeq42oAQA6uuGQAAAQEICvbpn14R3+dr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1582454598252,"flow_last_seen":1582454598558,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-fmfmobile.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2321{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUf0UAADEGdp8R+LmMwKgCEQG7xY+mDHirDeq42oAQA6s5ugAAAQEICvbpn2AR3+drNTYtZm1mbW9iaWxlLmljbG91ZC5jb22CGHA1MC1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDU4LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMzktZm1mbW9iaWxlLmljbG91ZC5jb22CGHA0NS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDQ5LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNjgtZm1mbW9iaWxlLmljbG91ZC5jb22CGHAxMC1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDIyLWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMDctZm1mbW9iaWxlLmljbG91ZC5jb22CGHAyNS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDIwLWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNzEtZm1mbW9iaWxlLmljbG91ZC5jb22CGHAwNS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDk4LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNjYtZm1mbW9iaWxlLmljbG91ZC5jb22CGHAxNS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDE2LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNDQtZm1mbW9iaWxlLmljbG91ZC5jb22CGHAwNC1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDA5LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMjMtZm1mbW9iaWxlLmljbG91ZC5jb22CGHA2MS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDMwLWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNDYtZm1mbW9iaWxlLmljbG91ZC5jb22CGHA2MC1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDQzLWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNTctZm1mbW9iaWxlLmljbG91ZC5jb22CGHAxNC1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDAzLWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMzYtZm1mbW9iaWxlLmljbG91ZC5jb22CGHA2NC1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDI4LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMjQtZm1mbW9iaWxlLmljbG91ZC5jb22CGXAyMDItZm1mbW9iaWxlLmljbG91ZC5jb22CGHAwMS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDYyLWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNDctZm1mbW9iaWxlLmljbG91ZC5jb22CGHAzNS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDY1LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMzEtZm1mbW9iaWxlLmljbG91ZC5jb22CGHA2My1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDE5LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwMzMtZm1mbW9iaWxlLmljbG91ZC5jb22CGHA1MS1mbWZtb2JpbGUuaWNsb3VkLmNvbYIYcDU0LWZtZm1vYmlsZS5pY2xvdWQuY29tghhwNTktZm1mbW9iaWxlLmljbG91ZC5jb22CGXAyMDEtZm1mbW9iaWxlLmljbG91ZC5jb20wgf8GA1UdIASB9zCB9DCB8QYKKoZIhvdjZAULBDCB4jCBpAYIKwYBBQUHAgIwgZcMgZRSZWxpYW5jZSBvbiB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgYW55IGFwcGxpY2FibGUgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdXNlIGFuZC9vciBjZXJ0aWZpY2F0aW9uIHByYWN0aWNlIHN0YXRl","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rjapgx+S4AQA\/Sh9AAAAQEIChHf6AX26Z9g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+3026{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":19,"flow_packet_id":10,"flow_first_seen":1582454598252,"flow_last_seen":1582454598568,"flow_tot_l4_data_len":6617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":661,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-fmfmobile.icloud.com","server_names":"p67-fmfmobile.icloud.com,p48-fmfmobile.icloud.com,p53-fmfmobile.icloud.com,p34-fmfmobile.icloud.com,p72-fmfmobile.icloud.com,fmfmobile.icloud.com,p08-fmfmobile.icloud.com,p12-fmfmobile.icloud.com,p02-fmfmobile.icloud.com,p29-fmfmobile.icloud.com,p52-fmfmobile.icloud.com,p26-fmfmobile.icloud.com,p06-fmfmobile.icloud.com,p97-fmfmobile.icloud.com,p41-fmfmobile.icloud.com,p40-fmfmobile.icloud.com,p18-fmfmobile.icloud.com,p55-fmfmobile.icloud.com,p70-fmfmobile.icloud.com,p32-fmfmobile.icloud.com,p69-fmfmobile.icloud.com,p17-fmfmobile.icloud.com,p13-fmfmobile.icloud.com,p38-fmfmobile.icloud.com,p11-fmfmobile.icloud.com,p21-fmfmobile.icloud.com,p27-fmfmobile.icloud.com,p42-fmfmobile.icloud.com,p37-fmfmobile.icloud.com,p56-fmfmobile.icloud.com,p50-fmfmobile.icloud.com,p58-fmfmobile.icloud.com,p39-fmfmobile.icloud.com,p45-fmfmobile.icloud.com,p49-fmfmobile.icloud.com,p68-fmfmobile.icloud.com,p10-fmfmobile.icloud.com,p22-fmfmobile.icloud.com,p07-fmfmobile.icloud.com,p25-fmfmobile.icloud.com,p20-fmfmobile.icloud.com,p71-fmfmobile.icloud.com,p05-fmfmobile.icloud.com,p98-fmfmobile.icloud.com,p66-fmfmobile.icloud.com,p15-fmfmobile.icloud.com,p16-fmfmobile.icloud.com,p44-fmfmobile.icloud.com,p04-fmfmobile.icloud.com,p09-fmfmobile.icloud.com,p23-fmfmobile.icloud.com,p61-fmfmobile.icloud.com,p30-fmfmobile.icloud.com,p46-fmfmobile.icloud.com,p60-fmfmobile.icloud.com,p43-fmfmobile.icloud.com,p57-fmfmobile.icloud.com,p14-fmfmobile.icloud.com,p03-fmfmobile.icloud.com,p36-fmfmobile.icloud.com,p64-fmfmobile.icloud.com,p28-fmfmobile.icloud.com,p24-fmfmobile.icloud.com,p202-fmfmobile.icloud.com,p01-fmfmobile.icloud.com,p62-fmfmobile.icloud.com,p47-fmfmobile.icloud.com,p35-fmfmobile.icloud.com,p65-fmfmobile.icloud.com,p31-fmfmobile.icloud.com,p63-fmfmobile.icloud.com,p19-fmfmobile.icloud.com,p33-fmfmobile.icloud.com,p51-fmfmobile.icloud.com,p54-fmfmobile.icloud.com,p59-fmfmobile.icloud.com,p201-fmfmobile.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=fmfmobile.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"FF:C3:9F:1A:A1:3C:D2:3C:06:96:EC:49:B4:97:A9:D3:DA:05:A3:E2"}}
+0399{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rjapgyD64AQBACcNAAAAQEIChHf6A\/26Z9q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1696{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1026,"pkt":"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","pkt_caplen":1026,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrIbAqAIREfi5jMWPAbsN6rjapgyNS4AQA\/iS0QAAAQEIChHf6Br26Z9q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":244,"pkt":"xGGLNYKpxiwDYGpkCABFAADmpdwAAEARTsjAqAIBwKgCEQA1znQA0sdAsQ+BgAABAAkAAAAAB2dhdGV3YXkGaWNsb3VkA2NvbQAAAQABwAwABQABAAARlgAaB2dhdGV3YXkCZmUJYXBwbGUtZG5zA25ldADAMAABAAEAAAAiAAQR+LBLwDAAAQABAAAAIgAEEfixhcAwAAEAAQAAACIABBH4sCjAMAABAAEAAAAiAAQR+LCNwDAAAQABAAAAIgAEEfiwTcAwAAEAAQAAACIABBH4sWXAMAABAAEAAAAiAAQR+LGqwDAAAQABAAAAIgAEEfiwiQ==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1582454598542,"flow_last_seen":1582454598582,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":44,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"gateway.icloud.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.248.176.75"}}
+0398{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0nTYAADIGrQ0R\/WnKwKgCEQG7xZNpWNRhMiTxG4AQAHVURAAAAQEICgAfwUQR3+f3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUnTcAADIGp2oR\/WnKwKgCEQG7xZNpWNRhMiTxG4AQAHVBGQAAAQEICgAfwUQR3+f3FgMDAHoCAAB2AwMyKF9DOKuLw5bBJ9NVFrrF6VDCVBOwZ68rYpvChcZWzSD\/YLmMW82uuwbbKEYkARjm9\/sVvKjvTmHajlJ93y\/zsxMBAAAuACsAAgMEADMAJAAdACCkt4j8DfZ7YKSUflqfW1DYudx6NFOgOWG7+Cp946\/oVxQDAwABARcDAwAqLFuqMhmooVCeSjCEhpoKgBvKl13GFVCOJk3aR6rc3XPfPiJvinusQIAKFwMDDhhIAmeGzJRGR1eJTrfqR1feayAaXq7CQmBH\/9e6IXhmUdMGE2QJ5f5vrNzO0E8uifDIBEQqnOGRVQJQALuVlruvkCYzVIbGOUGCxNe8n3Ai4O1YZIUvwvbPKpdY5VU++ysANIaeAY5xSiGbfRCGOZ0eOLhShHmcLyPuHTqYFddSAeq7VBnsu7fSW95\/uJc8wJ7zrLOp2Y7UWY8svtPWi8fO+vWC6X4y3thEneEzOvD624+Nwts2OGdwfJMiaE4j2l8eWA28W+euCESNuVfCrRALJWm6FEKnMmUF6vWNZcBSHZ9sdySmwgJdHKYtQwGs36+207DIMqXJe9zTWYxXE5EQx3HI6GruvFb87uDu+E03XOeGJ2GOyQiVXkfPhpl6lEdQ\/TISF1ErnSOdVdKBxh15KqFtDgpzEuvnEwY3yWumneuI7J+DN1cpYfQVjIhX6j7H7n+kj+Wo4eBiTL5PMwkoSCvOysnHjdG2swL5pr9oLDpHIuHxmCzpfKFr8RXLRnC5Sp1lN5HbKxO5XgxZYdSx1geSz26mdoOjLZiGVAMBbULNf6IJrl0pheFNQ3QPQZ4YsmmBgefhsM58bClY7h8xqQdtMFjOaP39XCTOgDO0bErTDEgjppTFlTaWMssMuRNdg+YTWJFW05BCumcTVvWvnnidekxWswgQvhECYSRUWiLKJm+cSv3bOi9uOzhskf0yIt4tPozdU6AWIBq54xZ+VZCMwO1DMheSSjsr5nZ7qpk9m6QCGV8wIj8rDKQgAbuTveOZJ2nRcvcj8gnhRo4zXz46w\/5GUCF4H+U2AI+sPiNDYC0Joe33tioUQXT9hXZGYohx9afTcX8OlPWSrffSMoWeioeSVenr\/47HU5l2sDA\/IxcpBsd0fwJFhdrNO3FIID0H9pgdYiwshv7baBudMFjb3+VXM9K8gclztO8xu4dcWmlb12ldRENYxjCN6DE0PFkv4SelKFYTFdj\/oIGqDn2XaBCMgoSe3F0wT13WY853OzhSFgFpciOjW6L+Hm7zXtQaM3fLy7QZu021VwJQKDIRH7B2Ra1hp\/uc1e5zQAQ7Bo7nWejNnGcpBECjNhNvB7sRj5zonFANuGdg9v2VfrHuzETjyCVJBbG8HJwKOhvIPzUtZp48o+sSIQTu5S99otz05ItW0MHSK5H4sqk9gKsX5wI8nPFrgjWPo4m6Dx8h7+uCatU22Bd5uo\/IyY5yjv1i42\/7v0FFbDd+LtEsR3B\/uP926VMTvEBsRx+c84cPqKILt+74ZL6Hj4al1EkHitz2uGe7lsVVvAF\/zUxSYNJ67ON68T\/xMoe+Vr9DntrDFqc5hwyHKWGHzZhW3uGMFK5PW7il00PWvcV2eHaNa+PMoOl4OeV5\/vVszZPBFR\/Z4zmHZk1P+b2R03i+ZmAq4PIy40nyybPThNFIvaHnuOLm+JM6tu2KeMgBP6OJ5uashzuhXMVOe9YrZ+PUmV4dUaQu+g3NydXZJ2Bk3lo7ZhS9pDit3G6Zz2g0m0Fa1KANHpfxlGC0Fr9ZhRCIhhIuCdZQwkIow6ge+P61amsPhYnP2UayQkffM1LtJycCJjPdUUhxz+7n98xdNa5qC1njfNjUGFPyyWiSDuAQO4qBOGW64cdrs3dKCRO2iwgKdh46ZPfPldOxqz7NCWCQ9YK\/NJWGacDu","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1582454598418,"flow_last_seen":1582454598584,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2354{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1854{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1137,"pkt":"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","pkt_caplen":1137,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0\/jIAADIGTBER\/WnKwKgCEQBQwACbtSzOLJXrtYAQAHVahwAAAQEICh00JSQR3+fp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWTAbsyJPEbaVjfoYAQA\/RFXAAAAQEIChHf6CAAH8FE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWTAbsyJPEbaVjj0IAQA+xBNQAAAQEIChHf6CAAH8FE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1582454598587,"flow_last_seen":1582454598587,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGtbvAqAIREfiwS8WUAbuGKOrDAAAAALDC\/\/9\/HgAAAgQFtAEDAwcBAQgKEd\/oBAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1329{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":762,"pkt":"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","pkt_caplen":762,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0\/jQAADIGTA8R\/WnKwKgCEQBQwACbtS+GLJXrtYARAHVXywAAAQEICh00JScR3+fp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA06hUAADIGyEURggIuwKgCEQG7xZHfrwWjGTrtHYAQAANrugAAAQEICrVP0n8R3+fw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA00AIAADIGekER\/WnKwKgCEQG7xZLy+qnqfzqrkoAQAHV62AAAAQEICor+qRgR3+f4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1582454598416,"flow_last_seen":1582454598590,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mesu.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2352{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1863{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1137,"pkt":"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","pkt_caplen":1137,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0840{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":23,"flow_packet_id":6,"flow_first_seen":1582454598385,"flow_last_seen":1582454598592,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsp85-ssl.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"4ef1b297bb817d8212165a86308bac5f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2350{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1378{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":792,"pkt":"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","pkt_caplen":792,"pkt_type":2048,"pkt_ipoffset":14}
+1131{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":23,"flow_packet_id":8,"flow_first_seen":1582454598385,"flow_last_seen":1582454598592,"flow_tot_l4_data_len":4399,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":549,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsp85-ssl.ls.apple.com","server_names":"*.ls.apple.com","ja3":"55271a105172d5f225e4704755b9b250","ja3s":"4ef1b297bb817d8212165a86308bac5f","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=*.ls.apple.com, OU=management:idms.group.576486, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"E4:85:25:4C:99:F8:FB:66:49:4B:80:64:5E:63:2A:75:9B:8F:C3:51"}}
+0525{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":159,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGrCfAqAIREfi5jMWPAbsN6rjapgyNS4AYBACptgAAAQEIChHf6Cb26Z9qFgMDACUQAAAhIL9y1EDy9eTpmWS0iKCdetkIBrN9k091SGDIaH3oGnlJFAMDAAEBFgMDACgAAAAAAAAAADOHN7wq\/sCzBaRwj8WRi2eooJO8qHv5P+c0wRI9i8de","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAC4GB8AR+LBLwKgCEQG7xZQAd9VghijqxKBScSDqGQAAAgQFrAEBCApbEwd4Ed\/oBAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xiwDYGpkxGGLNYKpCABFAAA8BIgAAP8RMcbAqAIRwKgCAc3KADUAKGCiwekBAAABAAAAAAAAA3d3dwZpY2xvdWQDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"www.icloud.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":80,"pkt":"xiwDYGpkxGGLNYKpCABFAABCUOgAAP8R5V\/AqAIRwKgCAfrLADUALpJfu2MBAAABAAAAAAAACmJhc2VqdW1wZXIFYXBwbGUDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"basejumper.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":79,"pkt":"xiwDYGpkxGGLNYKpCABFAABB1EAAAP8RYgjAqAIRwKgCAdBFADUALQ1OiY4BAAABAAAAAAAACWlwaG9uZS1sZAVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"iphone-ld.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":73,"pkt":"xiwDYGpkxGGLNYKpCABFAAA7QA4AAP8R9kDAqAIRwKgCAfQ+ADUAJzA9jewBAAABAAAAAAAAA2NsNAVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"cl4.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":80,"pkt":"xiwDYGpkxGGLNYKpCABFAABCtyIAAP8RfyXAqAIRwKgCAfeRADUALilRj7EBAAABAAAAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":81,"pkt":"xiwDYGpkxGGLNYKpCABFAABD8ooAAP8RQ7zAqAIRwKgCAdAYADUALxueCAsBAAABAAAAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":80,"pkt":"xiwDYGpkxGGLNYKpCABFAABCQ9gAAP8R8m\/AqAIRwKgCAdLfADUALndaZloBAAABAAAAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":81,"pkt":"xiwDYGpkxGGLNYKpCABFAABD04UAAP8RYsHAqAIRwKgCAcLYADUAL8OecEkBAAABAAAAAAAABGluaXQGaXR1bmVzBWFwcGxlA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1582454598713,"flow_last_seen":1582454598713,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"init.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0490{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":130,"pkt":"xiwDYGpkxGGLNYKpCABFAgB0AABAAEAG\/AHAqAIREf1pysWTAbsyJPEbaVjj0IAYBAAl+AAAAQEIChHf6DQAH8FEFAMDAAEBFwMDADWHsyiYnHR9U1VZ39KYD7Vit6YXikasTmHUUAQVD89cL6mKnwQVFe0\/0ArpPWq2vxLyjznYdg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0936{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":460,"pkt":"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","pkt_caplen":460,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysAAAFAsleu1m7UvhoAQCAtPjQAAAQEIChHf6JMdNCUm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysAAAFAsleu1m7Uvh4AQCAtPiwAAAQEIChHf6JMdNCUn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOu0d368Q44AQA\/Rb3QAAAQEIChHf6Jq1T9KB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOu0d368TuYAQA+5ZDQAAAQEIChHf6Jq1T9KB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWSAbt\/OquS8vq1KoAQA\/RrcQAAAQEIChHf6KCK\/qkY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG\/EPAqAIREf1pysWSAbt\/OquS8vq5WYAQA+xnSgAAAQEIChHf6KCK\/qkY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1582454598721,"flow_last_seen":1582454598721,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGrK\/AqAIREfi5V8WVAbuoGt7oAAAAALDC\/\/9fVwAAAgQFtAEDAwcBAQgKEd\/opwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKOrEAHfVYYAQBAuCrAAAAQEIChHf6IhbEwd4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1582454598587,"flow_last_seen":1582454598723,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0525{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":159,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGY\/zAqAIREYICLsWRAbsZOu0d368TuYAYBACs0QAAAQEIChHf6LK1T9KBFgMDACUQAAAhIMgVY244BOxiKd2+gdbWzkS7fU3yOL5z306xpubGDQ9tFAMDAAEBFgMDACgAAAAAAAAAAFM42iq4K3c4kd2q4XVvp0HV7UIJJNofTiIO8GDsfdpQ","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnf0kAADEGfAgR+LmMwKgCEQG7xY+mDI1LDeq5N4AYA6v8uAAAAQEICvbpoBoR3+gmFAMDAAEBFgMDACgAAAAAAAAAAA3b\/qASlfy2I37M+RYMkmQWZE0T6Nz1drAnpgD2lscA","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":130,"pkt":"xiwDYGpkxGGLNYKpCABFAgB0AABAAEAG\/AHAqAIREf1pysWSAbt\/OquS8vq5WYAYBACILwAAAQEIChHf6LyK\/qkYFAMDAAEBFwMDADXYj6OcZ3754e+7+OU9dS\/mOMB0szbGNwTAiR9oKCscWnhKPEGDnnP7csWGx3lccKumqgrS5w==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0902{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":438,"pkt":"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","pkt_caplen":438,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":353,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTnToAADIGq+gR\/WnKwKgCEQG7xZNpWOPQMiTy5YAYAHoBwQAAAQEICgAfwesR3+g0FwMDARq+JSDaRuo+lztnEnUWNlmvEejTm\/rSgA7jki+ozt4tIa7R4HICQeNtqEXmAxGGqSQO+vO1AWhCKAqGpNvwQ\/DjSJStxGhPn\/ZbQ44ftmvtluqTFBcrA3amnQkX2rpB\/muOY6S+ZEcc0AhAcCIRa7I8jX8B2TvR1SNcYKYLmQr7ulNaEiOZsy6ptx0Hn\/LR1vkXv+ujcFBz2emPm3m42MqE8ucZwxo+ZODwLM20aF+WpV0iAcqRW9apkNSDwM1an7rTZeah\/ieEW372juJvpMcRPNCo0nA3U4svluGUwkCCLXs6zaFvFXQWXdzExXM2CAXznJU2mdJVlwezkf29\/Zfoz0a4vVtRnCVjzFCWv9rcrQ9C1AK3\/\/abAgo=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":353,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTnTsAADIGq+cR\/WnKwKgCEQG7xZNpWOTvMiTy5YAYAHo5DgAAAQEICgAfwesR3+g0FwMDARoZg5XzV2Lq7mj5iENSHRiOLkiIAFoq5umDQO7qzim0N3bAMypLvXQRo1r\/N5QhKSnRsHJkM\/3scna6z3OFBMsPsUTmotdBv6D1iV3wCK7vZFrB5tU5Knswt7kok8B3w5SLRfb\/DJYGcjstngikuVZYQ0MVSaUrSfMJck9CNCMue0Is7TuLDqimsYkLWmNxjg44dZpCBnCwDBcP4Aa3eGPyVwpNds2HJ1MIpMNWUNaSU+JpipohhHUAU0YTkB15jBd8\/uAa5NDqfSHZzsKUZLUcThc0WLv5s2XE\/CtZX2QobcEmkMPMrRqAxZDErlYnA8u4gKhrevhFjLoscdgfCiGY1r5tQBZRpI5sLscfE89WKHiplZLXaK0V1j4=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":2048,"pkt_ipoffset":14}
+0583{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":203,"pkt":"xGGLNYKpxiwDYGpkCABFAAC9YWUAAEARk2jAqAIBwKgCEQA1zcoAqUkOwemBgAABAAQAAAAAA3d3dwZpY2xvdWQDY29tAAABAAHADAAFAAEAAAfiAB8Hd3d3LWNkbgZpY2xvdWQDY29tBmFrYWRucwNuZXQAwCwABQABAAAAjwAZA3d3dwZpY2xvdWQDY29tB2VkZ2VrZXnARsBXAAUAAQAAEZYAFQVlNDQ3OAFhCmFrYW1haWVkZ2XARsB8AAEAAQAAABgABBctSi4=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598755,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"www.icloud.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.45.74.46"}}
+0612{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":224,"pkt":"xGGLNYKpxiwDYGpkCABFAADSfP0AAEARd7vAqAIBwKgCEQA10EUAvrFqiY6BgAABAAQAAAAACWlwaG9uZS1sZAVhcHBsZQNjb20AAAEAAcAMAAUAAQAACaQAJwlpcGhvbmUtbGQMb3JpZ2luLWFwcGxlA2NvbQZha2FkbnMDbmV0AMAxAAUAAQAAAMcAIQxpcGhvbmUtbGQtYXIFYXBwbGUDY29tB2VkZ2VrZXnAU8BkAAUAAQAAEZYAFQVlOTMzOAFkCmFrYW1haWVkZ2XAU8CRAAEAAQAAAA8ABFx6\/FI=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598756,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":45,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"iphone-ld.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.252.82"}}
+0491{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5PvQAAEARth3AqAIBwKgCEQA1+ssAZUgsu2OBgAABAAAAAQAACmJhc2VqdW1wZXIFYXBwbGUDY29tAAABAAHAFwAGAAEAAADfACsHbnNlcnZlcsAXCmhvc3RtYXN0ZXLAF3fP6nAAAAOEAAADhAAewwAAADhA","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598756,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":46,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"basejumper.apple.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0397{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0AqYAAC4GBSIR+LBLwKgCEQG7xZQAd9VhhijsyYAQA6uAfwAAAQEIClsTCAAR3+iI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":221,"pkt":"xGGLNYKpxiwDYGpkCABFAADPyEMAAEARLHjAqAIBwKgCEQA195EAu7eFj7GBgAABAAQAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAHADAAFAAEAABGWACYIaW5pdC1jZG4MaXR1bmVzLWFwcGxlA2NvbQZha2FkbnMDbmV0AMAyAAUAAQAAC+cAGwZpdHVuZXMFYXBwbGUDY29tB2VkZ2VrZXnAU8BkAAUAAQAAEZYAGARlNjczBWRzY2U5CmFrYW1haWVkZ2XAU8CLAAEAAQAAABcABF9lGDU=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598758,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":46,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}}
+0607{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":221,"pkt":"xGGLNYKpxiwDYGpkCABFAADPdQkAAEARf7LAqAIBwKgCEQA10t8AuwWPZlqBgAABAAQAAAAAA2JhZwZpdHVuZXMFYXBwbGUDY29tAAABAAHADAAFAAEAABGWACYIaW5pdC1jZG4MaXR1bmVzLWFwcGxlA2NvbQZha2FkbnMDbmV0AMAyAAUAAQAAC+cAGwZpdHVuZXMFYXBwbGUDY29tB2VkZ2VrZXnAU8BkAAUAAQAAEZYAGARlNjczBWRzY2U5CmFrYW1haWVkZ2XAU8CLAAEAAQAAABcABF9lGDU=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598758,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":46,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"bag.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}}
+2329{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUAqcAAC4G\/34R+LBLwKgCEQG7xZQAd9VhhijsyYAQA6t2dwAAAQEIClsTCAER3+iIFgMDAGgCAABkAwM1ZBgu0yS9bOcmbk0kGdrgxoQLKwV86Gi2S+QsS9zQLyB3UDw5CeZVXrBBqV2A2Nt5TbK\/3sasXZSQbppEORT6eMAsAAAcAAAAAP8BAAEAAAUAAAALAAIBAAAQAAUAAwJoMhYDAww4CwAMNAAMMQAH5zCCB+MwggbLoAMCAQICECDrGNnhMGOJ5gckndI1GuowDQYJKoZIhvcNAQELBQAwYjEcMBoGA1UEAxMTQXBwbGUgSVNUIENBIDIgLSBHMTEgMB4GA1UECxMXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEzARBgNVBAoTCkFwcGxlIEluYy4xCzAJBgNVBAYTAlVTMB4XDTE5MTAwODE4NDYxNFoXDTIwMTEwNjE4NTYwMFowVDEbMBkGA1UEAwwSZ2F0ZXdheS5pY2xvdWQuY29tMRMwEQYDVQQKDApBcHBsZSBJbmMuMRMwEQYDVQQIDApDYWxpZm9ybmlhMQswCQYDVQQGEwJVUzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABA3JTXZEMDNfkBeddGFOfWVcUMoJ8W7d3ST3e3HiTTWw27hpoGkazdY\/uyqetayMkeP9ioDxEA8PxI4fVx9gMvajggVsMIIFaDAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFNh6lER8kHCQFp7dF5wBRAOG1iopMH4GCCsGAQUFBwEBBHIwcDA0BggrBgEFBQcwAoYoaHR0cDovL2NlcnRzLmFwcGxlLmNvbS9hcHBsZWlzdGNhMmcxLmRlcjA4BggrBgEFBQcwAYYsaHR0cDovL29jc3AuYXBwbGUuY29tL29jc3AwMy1hcHBsZWlzdGNhMmcxMjUwgY0GA1UdEQSBhTCBgoIYZ2F0ZXdheS1pbmRpYS5pY2xvdWQuY29tghhnYXRld2F5LWNhcnJ5LmljbG91ZC5jb22CEmdhdGV3YXkuaWNsb3VkLmNvbYIcZ2F0ZXdheS1hdXN0cmFsaWEuaWNsb3VkLmNvbYIaZ2F0ZXdheS1zYW5kYm94LmljbG91ZC5jb20wgf8GA1UdIASB9zCB9DCB8QYKKoZIhvdjZAULBDCB4jCBpAYIKwYBBQUHAgIwgZcMgZRSZWxpYW5jZSBvbiB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgYW55IGFwcGxpY2FibGUgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdXNlIGFuZC9vciBjZXJ0aWZpY2F0aW9uIHByYWN0aWNlIHN0YXRlbWVudHMuMDkGCCsGAQUFBwIBFi1odHRwOi8vd3d3LmFwcGxlLmNvbS9jZXJ0aWZpY2F0ZWF1dGhvcml0eS9ycGEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5hcHBsZS5jb20vYXBwbGVpc3RjYTJnMS5jcmwwHQYDVR0OBBYEFDcTKYxfoGNbyxqPKQFc6\/l8HBeZMA4GA1UdDwEB\/wQEAwIDiDARBgsqhkiG92NkBhsPAgQCBQAwEQYLKoZIhvdjZAYbCwIEAgUAMBEGCyqGSIb3Y2QGGwcCBAIFADCCAm0GCisGAQQB1nkCBAIEggJdBIICWQJXAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFtrLqfoQAABAMARjBEAiBcyMXSqYu\/NQzPC1eks2fF3nNBwnRpvtSQ93jt9Y6FxAIgQAGZ6hMU0FVYk\/U5Nz\/IH+LWui0mpLb1ikJAbD2uT7kAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW2sup+hAAAEAwBI","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1582454598587,"flow_last_seen":1582454598759,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2341{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":222,"pkt":"xGGLNYKpxiwDYGpkCABFAADQatgAAEARieLAqAIBwKgCEQA1wtgAvFoLcEmBgAABAAQAAAAABGluaXQGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAJGQAmCGluaXQtY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAABEeABsGaXR1bmVzBWFwcGxlA2NvbQdlZGdla2V5wFTAZQAFAAEAABGWABgEZTY3MwVkc2NlOQpha2FtYWllZGdlwFTAjAABAAEAAAAbAARfZRg1","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598759,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":47,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"init.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}}
+0635{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":241,"pkt":"xGGLNYKpxiwDYGpkCABFAADjlzEAAEARXXbAqAIBwKgCEQA10BgAz2vgCAuBgAABAAUAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAMPAAmCHBsYXktY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAAAOnACIEcGxheQZpdHVuZXMFYXBwbGUDY29tCWVkZ2VzdWl0ZcBUwGUABQABAAAAXwAUBWExODA2BGRzY2IGYWthbWFpwFTAkwABAAEAAAAPAARce00awJMAAQABAAAADwAEXHtNQA==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598760,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":47,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.123.77.26"}}
+0595{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":212,"pkt":"xGGLNYKpxiwDYGpkCABFAADGO68AAEARuRXAqAIBwKgCEQA19D4AssJtjeyBgAABAAQAAAAAA2NsNAVhcHBsZQNjb20AAAEAAcAMAAUAAQAAD1IAJQdjbDQtY2RuDG9yaWdpbi1hcHBsZQNjb20GYWthZG5zA25ldADAKwAFAAEAAABkABgDY2w1BWFwcGxlA2NvbQdlZGdla2V5wEvAXAAFAAEAABGWABoGZTE0ODY4BWRzY2U5CmFrYW1haWVkZ2XAS8CAAAEAAQAAAA8ABGhJPR4=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598760,"flow_tot_l4_data_len":217,"flow_min_l4_data_len":39,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"cl4.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.73.61.30"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1582454598766,"flow_last_seen":1582454598766,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGHzLAqAIRXHr8UsWWAbuHn+lSAAAAALDC\/\/\/nwQAAAgQFtAEDAwcBAQgKEd\/ozwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUAqkAAC4G\/3wR+LBLwKgCEQG7xZQAd+ChhijsyYAQA6vWZgAAAQEIClsTCAoR3+iIeW1jZC5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwDQYJKoZIhvcNAQELBQADggEBABZHc2+FomLh5yp2u4mVQiaXvEqsrHBTOj8xgz08HKua4rFdHHYaoDwMcle+055Q4MiZ1ljXAurODSlUfM31wsaQKVWjbxSoC0INOphtBnie8GqjHQIKoiikjcKBRj5tZ9reP\/6FDkIqEt61t\/u4G6eW7Hef7NRTlXr\/B\/TyChTAUVKx1o5QCxqZXLwLyb3t7fhewVbbTX4jpBGhLNQbBZrkG1L2fDiZBUu6co1CiWAEZir0\/WjXa\/eZQSjWbCSr5iVTLsiCmeKijyO+MIOxJ4v6aH8BSejGmGsQLpheitfKS7HHyVia0DbblpXstoHk8s1vG3mHTBA8ieRN+lTcqqYWAwMFshYABa4BAAWqMIIFpgoBAKCCBZ8wggWbBgkrBgEFBQcwAQEEggWMMIIFiDCBoqIWBBRtmHWQn\/fqeBctjWd4mUcrWqqVwBgPMjAyMDAyMjMwMzQ0NDBaMHcwdTBJMAkGBSsOAwIaBQAEFCaEh7OMUBUpl9vU0X43\/z8u8xVoBBTYepREfJBwkBae3RecAUQDhtYqKQIQIOsY2eEwY4nmBySd0jUa6oAAGA8yMDIwMDIyMzAzNDQ0MFqgERgPMjAyMDAyMjMxNTQ0NDBaoQIwADANBgkqhkiG9w0BAQsFAAOCAQEAlz8kzwTNL4DreEokBuMsetKeh0dcofwzjM0d0OSiAy8HKR+etg0hwzjzkMoTWISwWgTi3B1sJGKSMZ19FUMgTZn4yIjxNdwrQNB4cE2DziZgsFITf77+13g64KVP2NaAc+T5V+bRcZJ03et+gkWWJJD3LiVlmJBNfdVp6tiuDAI0Ngsr7cQQ+0qp3EqrUku9Stxo4ldKmdcjeB\/B\/CQsoSSpQbHc7BFb2B5\/0IDczO68caVYUfrelBs9H77nfwtnFA3W+PQ8DlaNrLp+7dLN4WG2ImcEF29Tara8CKkJ0SunfNbHfcwQVfoqYwWu6e+ic24+sVNhYwm7Ezq+\/lDklaCCA8swggPHMIIDwzCCAqugAwIBAgIQQOU9e0o0X00kwGvYo3rGmTANBgkqhkiG9w0BAQsFADBiMRwwGgYDVQQDExNBcHBsZSBJU1QgQ0EgMiAtIEcxMSAwHgYDVQQLExdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTETMBEGA1UEChMKQXBwbGUgSW5jLjELMAkGA1UEBhMCVVMwHhcNMjAwMjE5MTYyMTQyWhcNMjAwNDAxMTYyMTQyWjBPMSswKQYDVQQDDCJBcHBsZSBJU1QgQ0EgMiBPQ1NQIFJlc3BvbmRlciBSTDA0MRMwEQYDVQQKDApBcHBsZSBJbmMuMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJrC64q6envcCtPKJaAaN4gVTLL0EuZUae9A15l28SjzyHp9U4w5buheyZLZT07XBTvH7vEDQnd8C8sUH\/2EnRwJt5yvAFlAEMx\/uhUizW82DYxuJHOfZdZKclTioPSXZnprOzxrOMshIah\/sjVpDoV2Hk7r0EmCnqStVOjixuPjuzxoTXsJqjPDnqRdVJa1vrg13NnmCHnku7+2sZvcK5UHb9d\/ft03IKYTpKniEEolsv1w3eeCBJBMgSqufUY4nWVfilwKJ5d1HJ\/E62apvXPRhP78ezj7odSWvKPwQ1S8n1deOxKuubQET9d53MjOA5zqmPB+gYsOnXEAunura2kCAwEAAaOBhzCBhDAMBgNVHRMBAf8EAjAAMB8GA1UdIwQY","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1218{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":28,"flow_packet_id":8,"flow_first_seen":1582454598587,"flow_last_seen":1582454598768,"flow_tot_l4_data_len":5113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","server_names":"gateway-india.icloud.com,gateway-carry.icloud.com,gateway.icloud.com,gateway-australia.icloud.com,gateway-sandbox.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D2:DA:1C:68:0C:91:A7:DB:BA:B2:2D:29:06:DB:57:42:10:3D:3A:FE"}}
+1098{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":580,"pkt":"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","pkt_caplen":580,"pkt_type":2048,"pkt_ipoffset":14}
+0746{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":324,"pkt":"xGGLNYKpxiwDYGpkCABFAgE26hkAADIGxz0RggIuwKgCEQG7xZHfrxO5GTrteoAYAAMNsQAAAQEICrVP00IR3+iyFgMDAMoEAADGAAABLADAmdO6ZKgegb4aq5BxQP5CxXrL1DVbM7xBuCLNMro28JKalbikOVIgUrccPEKr5L3fnfftuAOoYOGekEgPY1x2WVd\/SAAynLxhsy6dbfjmLrPGjMq1hAlWGcHSKLZK8J3hMajG9zm+c4ZMZr0lWfnlVyVa+xiMhyzU4al+L6B5lrZqxKr\/+mn89BjJqsN2byVi0mA9RiGlUe2IIeIHIu6TQs9dN4qx10w4eK9hoF5m4AfGPuCS8mZgYn8r6C6eRtBeFAMDAAEBFgMDACgzpCi6VvByC1sgagi8Q7raFpVF+kr0VUMH0mNdudSDbLrqRbx8pZrd","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":353,"pkt":"xGGLNYKpxiwDYGpkCABFAgFT0AYAADIGeRwR\/WnKwKgCEQG7xZLy+rlZfzqr0oAYAHWIbgAAAQEICor+qd0R3+i8FwMDARriUgIv6GkVu8F2AXfKdy8ox7cIh56uiJz+qprYzDppxDVem5iI+KoYUneGqEEMGK1AvbDY1MA8CDGbAnb4pf\/lomMf\/PHCBZS9gGT+wv5VsWpADGZ9yImUsxPqhIAIJlim\/rJlAfMInG\/MYAB+1v8dEVqt2ECIYPKSpIC12Si7kDJ7uB21lNmmvJFZDAy+k008mOnR2pAY3pDwBL\/5fDXHhx6+AU4Hq5+Jj47N8FW\/UF4N+DPfqCbddpycheXDR2dhENo35F+aWEWpu\/EcKhXVYRglEy\/4cMHNrAFPjES++v685ERZzqjI5E7iOWhBlgZKBaVy1UvkUGwXQLJ6a8+wDOtDILMtJZQhXeepf+G5amptLe2Z94KkfdM=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":353,"pkt":"xGGLNYKpxiwDYGpkCABFAgFT0AcAADIGeRsR\/WnKwKgCEQG7xZLy+rp4fzqr0oAYAHV+eQAAAQEICor+qd0R3+i8FwMDARq5SQGQLnpWEcZ2Mh6e8JpH9tNqVJSQsj1NJbd\/RGbmiMS+91Lwtn920c75q3zbN6d+yFmlUcVHA+V3CVtls7mlm1zgL+yEc+FSMDbNLEWo43ZT8hshMwnwLb7npY9b7JDOlmV1Qra90CMCKhe26wV0\/ynITWCCp\/krnpM1C+P5AKzy7Hq6U8p6ZDzX2t3Y\/sEtyuDYZSrODhSvPSx7uPqVffMy89AqsFy+kGj8eT3GGAt6LrTx5LXrLcDGVzn0kbHgxjpHYrIFntuAlbXNQndEuV9WSe5mQRRzfV+FyGY\/wXAzlUoEvEdgdrxbAAWYi4rKZBROMzCjTD0g3L5+5oukLIU4kb8WcqOuIs+gc7zU2eOr4jvucJ8kKns=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGajZcevxSwKgCEQG7xZaFiMYch5\/pU6BScSAUDwAAAgQFrAQCCAr\/dyjxEd\/ozwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADEG+7MR+LlXwKgCEQG7xZWfE+IlqBre6aBScSBsSgAAAgQFrAEBCArpLCwFEd\/opwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454598885,"flow_last_seen":1582454598885,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp"}
+0405{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":70,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4434AAEABEeTAqAIRwKgCAQMDBHsAAAAARQAAz8hDAABAESx4wKgCAcCoAhEANfeRALsAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1582454598885,"flow_last_seen":1582454598885,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0405{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":70,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4zMkAAEABKJnAqAIRwKgCAQMDKS0AAAAARQAAz3UJAABAEX+ywKgCAcCoAhEANdLfALsAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKOzJAHfgoYAQA\/R0UwAAAQEIChHf6SpbEwgB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":70,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4CTAAAEAB7DLAqAIRwKgCAQMDOTMAAAAARQAA0GrYAABAEYniwKgCAcCoAhEANcLYALwAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":70,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4spEAAEABQtHAqAIRwKgCAQMDK+AAAAAARQAA45cxAABAEV12wKgCAcCoAhEANdAYAM8AAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKOzJAHfoQ4AQA\/BsqwAAAQEIChHf6StbEwgK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZFvAqAIREYICLsWRAbsZOu16368Uu4AQA\/1WNgAAAQEIChHf6UK1T9NC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1582454598888,"flow_last_seen":1582454598888,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG0pfAqAIRaEk9HsWXAbvBeeAaAAAAALDC\/\/9qCgAAAgQFtAEDAwcBAQgKEd\/pSQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+lThYjGHYAQBAuvrgAAAQEIChHf6Un\/dyjx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1582454598766,"flow_last_seen":1582454598889,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"iphone-ld.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0810{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":367,"pkt":"xiwDYGpkxGGLNYKpCABFAgFhAABAAEAGYyzAqAIREYICLsWRAbsZOu16368Uu4AYBABb2AAAAQEIChHf6US1T9NCFwMDASgAAAAAAAAAAdj\/oh4JFAnecakNJj3aZhGQtlujQ3sfkuGMooEvvIa42NgztrVRsmvSSHptchNMfzB9XtSoRe3JJVMOw84TOq51ohCUx7Khwzf1Dnv5tfEXFJ2KYninJ2dCwf\/Lhp4bUTr3pLe6Tn2kQFJCZPZIKKuUOi0IjIndR2RlxsKUEDyRQvOcLbqVa1PCrETsZn7vnrVAZZi3u8mZv321lz\/v9mNReM+hdk+q8gigOG3yGTSnZuiHsuaq9NMnLDWs4hRxunQnTO6mmCY4m18R78wKjC924tJoRSv7PoH4I\/WahkK7W3Exhv+pPpqWdz2yYtVEHsIQixU2U0n9yOS35zZ\/\/1WnM6cRemep26nGe2LKomIscPZrlSg2UV1ewYuD5d+5wA==","pkt_caplen":367,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":204,"pkt":"xiwDYGpkxGGLNYKpCABFAgC+AABAAEAGY8\/AqAIREYICLsWRAbsZOu6n368Uu4AYBAC7QAAAAQEIChHf6US1T9NCFwMDAIUAAAAAAAAAAmp2IfLHHbKSxzXQ66EHNzB6Upc+RgXiwFZQtEzg6f0CMeSNbULtPf4GaeCAtFu+V5xUKAozV5S45swR43Y3NNTy\/s98twAqZNCau6i8C+CVNC42RlwSPI1SYdF2\/YQ3RZOSQkneh1zLZZREZxDwDKX0k6ReIlOxElfPjjt3","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGt7pnxPiJoAQBAsEtQAAAQEIChHf6VPpLCwF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1582454598721,"flow_last_seen":1582454598893,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-keyvalueservice.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0398{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0z7EAADUGmoxcevxSwKgCEQG7xZaFiMYdh5\/rWIAQAOuwTQAAAQEICv93KWwR3+lK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUz7IAADUGlOlcevxSwKgCEQG7xZaFiMYdh5\/rWIAQAOusqAAAAQEICv93KWwR3+lKFgMDAHoCAAB2AwPVclrs5qQ\/Sx24j5b7zPYzeLlCrcg8\/wYuD5y4WSjHASBuPIm6VXqnNWVU88hOzvhjpRW+5l\/fSYA7KifdMQlc9RMCAAAuACsAAgMEADMAJAAdACDyleVstpAS6tG0\/5z1HrqCZwd8JGTnUVgIrdC22fr1QRQDAwABARcDAwA0wnb1ePwh20l4Tf+pvQSVwpABc7rVlawOWSPd0S3vJvoFt0MQBaCADHcFHjq+h64QjLktVBcDAxKHtp1Vj7FXgxWqnWC8QrzkJbTasHPhAWIz9GeDRX4O8SxWYMgLA6p48Y2nKAoWp1xhz\/5IbLSSuPFbxgK1QMydZbQpl7XG9s7hM6vUOHFxrT1ZFccyH+5eokwBY+ZOcSEhwV86EqDSP1X2sU2l2QMoHEzb\/Qs4nhq\/mfpVluUBZQRNulh6Q4YTErkiBaAlbD3ilie6pMkEmHocEtLglKScSCl0b4O8N9PlNyyU05uxuVB9gMdZykIzX0HNpqAKkeXUj+tJV1rktGfadKiVjON5djWPiTSom1UibDJ5Ma5xkPXJHryCOxj2T3lzAr0O0iny7VP3kVqOexBkp5S+pnNskJfcGotGJLSEj49J5e5T2QKU9\/JpZ\/g\/lijnarGnehUwNRwtyzW5h\/\/UgLo7S7imVgzWKDqETgeXCkfByt5knE43sGW1SHeMIebCjB1MfAYq9Qoj\/Q7OHxAWJPdB1+36VH+z6ofgj7vn2Or3s8ynXk2aaEacv0sy8Diq95myUtLtLCJcTv\/00cbobrzYabFQn7oQVvP76Yg8h1pc7DQiPqWog2\/A0NLjIHNdwlKGO\/uqMVtGE9zBk7huLUinnZqH5fRa0OIf3U+IT0EKyMxb17w\/a3GQUIgW3oa9MVFKSf2D3qc+6Er+ndRecQpcG+31bHEJ7cerriBP+OTmqF8\/ep9tROS3GDbofFpb0zSP3uo1Kbf874LTLCOVhP5gbaMiKMwex0PG\/5b1OuyKHNTJ12cXwI+4Gn9nT0jJ10FyFLnnOHW2d2HaB0q3yixsEgOrXC8obTP68nFYnqV3ffOJYES3kunCJF+e4wpIN3wLx4MY+cVd6daHaDGBsl0vTVdGmMXbF3Q663Px041voKPWNsVtuHo+Ig6QPo8f\/L2w85hl7gYSIzGqg6R1Eky3Qv+Jt+7ysKq9emuzadqliMjRZEJBlYqzf0VXc7C0vBpHZTGGReGYcAWVq6vVv9MCCSFhisUDWs2xrzg52\/zc8lp0hnGopJeuxtnR4mhOF3MU2Zlrg+I8mJKul3LviY3yRZ\/IRffJO0vbBUZ1c+Q4CsI53zp681IjLL+M2kKARNLKKJVlLbE60\/eTG5kVTjeSe3cqeIdiFIs0sWdzeRXu4PRqR8w8KJwUCCqIiz\/ckA7zkYItswHMfu3S9d\/CcW0mQZ6Uw5SbuUakur\/4CnMlN0lLUrlg3XSF\/\/p1BByIHJo49jKA05qZXec9gh8r9BT2VTNrHQEJMBxOZgO5ufwQ2NmXKcW3nG6LmQ3Wb3BgM3NfVDu30WdAf8ojiK0b2z8L4XjVIIO1r5ool6iYZ0I99Z5x6mk\/iOmoA7zYAOa5peEzZHAGOIoa9aFeV5gGBISFFRl5dPLiJlzipW55F\/2liShC1OMMTsrNVKAfhd8Vc7jrssG\/8g6pTRoye4\/juWLCL5zYVn1ygeaTtpXWKvVCAgBq67VzjwnIhN3c8smyVW\/GZn+shbP+cPzxrNgkk0RiyNkbQN8mpltLZg95TF1HjJKLP0o7\/cSQgGdepllKZRZiHP82YtGfQ0x5uZ1xXpYJl6kCr+gyQQk58U4Er4ecUsrTqyg4KSPIf01YOGy6oK1j+sNHa1xnIMUtYabez\/fqunYPykzDcfq\/AZE5+gnrTzZ7+ftOL70m\/pPNmZOpGFni","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":38,"flow_packet_id":6,"flow_first_seen":1582454598766,"flow_last_seen":1582454598926,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"iphone-ld.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2360{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2053{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+2028{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1268,"pkt":"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","pkt_caplen":1268,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGHZxoST0ewKgCEQG7xZdpIXVbwXngG6BScSBpXgAAAgQFrAQCCAqgrSHdEd\/pSQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+tYhYjRXYAQA\/Sh3gAAAQEIChHf6XD\/dyls","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+tYhYjWHYAQA\/adHAAAAQEIChHf6XD\/dyls","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGHz7AqAIRXHr8UsWWAbuHn+tYhYjaz4AQA\/aYaQAAAQEIChHf6XD\/dylt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeAbaSF1XIAQBAsFUQAAAQEIChHf6XCgrSHd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1582454598888,"flow_last_seen":1582454598934,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cl4.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0b4QAADUGrh9oST0ewKgCEQG7xZdpIXVcwXniIIAQAOsGOAAAAQEICqCtIgsR3+l2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":40,"flow_packet_id":6,"flow_first_seen":1582454598888,"flow_last_seen":1582454598974,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cl4.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2356{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2061{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+2028{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454598,"pkt_len":1267,"pkt":"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","pkt_caplen":1267,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0NCoAADEGx5ER+LlXwKgCEQG7xZWfE+ImqBrg7oAQA6sCYwAAAQEICuksLLIR3+lT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2329{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1582454598721,"flow_last_seen":1582454599041,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-keyvalueservice.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2321{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":159,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGtWjAqAIREfiwS8WUAbuGKOzJAHfoQ4AYBABCnQAAAQEIChHf6ZBbEwgKFgMDACUQAAAhIL1bD1d4gCPrhXuI+0HyQ836+EFHhzg8hbOYWEtlXXlqFAMDAAEBFgMDACgAAAAAAAAAAJqD4mhUi0lPlD7vEeTtzw5MOqf4EnbHOHobPXgamAhn","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+3498{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":37,"flow_packet_id":9,"flow_first_seen":1582454598721,"flow_last_seen":1582454599054,"flow_tot_l4_data_len":6585,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":731,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p26-keyvalueservice.icloud.com","server_names":"p62-keyvalueservice.icloud.com,p41-keyvalueservice.icloud.com,p97-keyvalueservice.icloud.com,p28-keyvalueservice.icloud.com,p32-keyvalueservice.icloud.com,p56-keyvalueservice.icloud.com,p33-keyvalueservice.icloud.com,p37-keyvalueservice.icloud.com,p67-keyvalueservice.icloud.com,p70-keyvalueservice.icloud.com,p63-keyvalueservice.icloud.com,p07-keyvalueservice.icloud.com,p52-keyvalueservice.icloud.com,p18-keyvalueservice.icloud.com,p21-keyvalueservice.icloud.com,p17-keyvalueservice.icloud.com,p36-keyvalueservice.icloud.com,p19-keyvalueservice.icloud.com,p26-keyvalueservice.icloud.com,p55-keyvalueservice.icloud.com,p06-keyvalueservice.icloud.com,p23-keyvalueservice.icloud.com,p65-keyvalueservice.icloud.com,p58-keyvalueservice.icloud.com,p35-keyvalueservice.icloud.com,p42-keyvalueservice.icloud.com,p12-keyvalueservice.icloud.com,p15-keyvalueservice.icloud.com,p16-keyvalueservice.icloud.com,p29-keyvalueservice.icloud.com,p39-keyvalueservice.icloud.com,p71-keyvalueservice.icloud.com,p22-keyvalueservice.icloud.com,p40-keyvalueservice.icloud.com,p11-keyvalueservice.icloud.com,p66-keyvalueservice.icloud.com,p68-keyvalueservice.icloud.com,p201-keyvalueservice.icloud.com,p10-keyvalueservice.icloud.com,p61-keyvalueservice.icloud.com,p30-keyvalueservice.icloud.com,p01-keyvalueservice.icloud.com,p14-keyvalueservice.icloud.com,p50-keyvalueservice.icloud.com,p31-keyvalueservice.icloud.com,p47-keyvalueservice.icloud.com,p48-keyvalueservice.icloud.com,p20-keyvalueservice.icloud.com,p51-keyvalueservice.icloud.com,p27-keyvalueservice.icloud.com,p49-keyvalueservice.icloud.com,p03-keyvalueservice.icloud.com,p24-keyvalueservice.icloud.com,p25-keyvalueservice.icloud.com,p08-keyvalueservice.icloud.com,p13-keyvalueservice.icloud.com,p04-keyvalueservice.icloud.com,p05-keyvalueservice.icloud.com,p02-keyvalueservice.icloud.com,p09-keyvalueservice.icloud.com,p57-keyvalueservice.icloud.com,p59-keyvalueservice.icloud.com,p64-keyvalueservice.icloud.com,p38-keyvalueservice.icloud.com,p54-keyvalueservice.icloud.com,p72-keyvalueservice.icloud.com,keyvalueservice.icloud.com,p69-keyvalueservice.icloud.com,p43-keyvalueservice.icloud.com,p45-keyvalueservice.icloud.com,p202-keyvalueservice.icloud.com,p98-keyvalueservice.icloud.com,p34-keyvalueservice.icloud.com,p44-keyvalueservice.icloud.com,p46-keyvalueservice.icloud.com,p53-keyvalueservice.icloud.com,p60-keyvalueservice.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=keyvalueservice.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D8:84:3B:15:06:49:1C:72:C4:05:C0:F0:82:3B:43:4A:D1:8F:D5:9F"}}
+0424{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1582454599054,"flow_last_seen":1582454599054,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.22","l4_proto":2}
+0381{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":54,"pkt":"AQBeAAAWxGGLNYKpCABGAAAoAABAAAECQgDAqAIR4AAAFpQEAAAiAPkCAAAAAQQAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1582454599054,"flow_last_seen":1582454599054,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0399{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeIgaSGAnIAQA\/T3cwAAAQEIChHf6fCgrSIM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeIgaSGFXIAQA+vyvAAAAQEIChHf6fCgrSIM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG0qPAqAIRaEk9HsWXAbvBeeIgaSGKDYAQA\/bt\/wAAAQEIChHf6fCgrSIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454599065,"flow_last_seen":1582454599065,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":73,"pkt":"xiwDYGpkxGGLNYKpCABFAAA7Z5IAAP8RzrzAqAIRwKgCAfLQADUAJ+lbzwoBAAABAAAAAAAAA2dzYQVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1582454599065,"flow_last_seen":1582454599065,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2324{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1488,"pkt":"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","pkt_caplen":1488,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxPtZoAQA\/T2IwAAAQEIChHf6gjpLCyz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxP4poAQA97q7QAAAQEIChHf6gjpLCy\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxP+NIAQA9LlXwAAAQEIChHf6gjpLCzL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGrLvAqAIREfi5V8WVAbuoGuDunxP+NIAQBADlMQAAAQEIChHf6gjpLCzL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1582454599073,"flow_last_seen":1582454599073,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":73,"pkt":"xiwDYGpkxGGLNYKpCABFAAA7y\/EAAP8Ral3AqAIRwKgCAcs\/ADUAJ2vSdCUBAAABAAAAAAAAA2dzYQVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1582454599073,"flow_last_seen":1582454599073,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2029{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1267,"pkt":"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","pkt_caplen":1267,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAG0pfAqAIRaEk9HsWXAbvBeeIgaSGKDbAQBADVtQAAAQEIChHf6gagrSJzAQEFCmkhhVxpIYoN","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnAqsAAC4GBOgR+LBLwKgCEQG7xZQAd+hDhijtJoAYA6tmbQAAAQEIClsTCUoR3+mQFAMDAAEBFgMDACgAAAAAAAAAAD87ErFixIfSKGvShDbE2CGGHRjTt4qgrDktrKCv\/Wte","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAgB5AqwAAC4GBNUR+LBLwKgCEQG7xZQAd+h2hijtJoAYA6segQAAAQEIClsTCUoR3+mQFwMDAEAAAAAAAAAAAfwyc93ypSXSjT7YdleqSnSyI0t8c5f2umgeUSuH8pWwUNu+iwqsFST4AgZMD0zyauNYWp1JtmPL","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":159,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGrFzAqAIREfi5V8WVAbuoGuDunxP+NIAYBAD74wAAAQEIChHf6hfpLCzLFgMDACUQAAAhID1HH9ZLXe0svMiqOnBTSWAPUkzpXcDUWC8aOSS6gF9OFAMDAAEBFgMDACgAAAAAAAAAAJ5LgJBalXs2sm1ZwfhdACugHFBQMPLQgUQIaN4IzD12","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WUAbuGKO0mAHfodoAQA\/9qBQAAAQEIChHf6fJbEwlK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":127,"pkt":"xGGLNYKpxiwDYGpkCABFAABxJf8AAEARzxrAqAIBwKgCEQA18tAAXXwrzwqBgAABAAIAAAAAA2dzYQVhcHBsZQNjb20AAAEAAcAMAAUAAQAAEZYAGgNnc2EFYXBwbGUDY29tBmFrYWRucwNuZXQAwCsAAQABAAAA4QAEEYmmIw==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1582454599065,"flow_last_seen":1582454599105,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":39,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.137.166.35"}}
+0483{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":127,"pkt":"xGGLNYKpxiwDYGpkCABFAABx6W4AAEARC6vAqAIBwKgCEQA1yz8AXf6hdCWBgAABAAIAAAAAA2dzYQVhcHBsZQNjb20AAAEAAcAMAAUAAQAAEZYAGgNnc2EFYXBwbGUDY29tBmFrYWRucwNuZXQAwCsAAQABAAAA4QAEEYmmIw==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1582454599073,"flow_last_seen":1582454599105,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":39,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"gsa.apple.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.137.166.35"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1582454599225,"flow_last_seen":1582454599225,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGtbvAqAIREfiwS8WYAbuypew6AAAAALDC\/\/9PDwAAAgQFtAEDAwcBAQgKEd\/qGwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":70,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4qKAAAEABTMLAqAIRwKgCAQMDCZoAAAAARQAAcSX\/AABAEc8awKgCAcCoAhEANfLQAF0AAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAC4GB8AR+LBLwKgCEQG7xZj0WnUXsqXsO6BScSAj8wAAAgQFrAEBCApbEwn1Ed\/qGwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuypew79Fp1GIAQBAu8hwAAAQEIChHf6p1bEwn1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":583,"pkt":"xiwDYGpkxGGLNYKpCABFAgI5AABAAEAGs8DAqAIREfiwS8WYAbuypew79Fp1GIAYBAuhcQAAAQEIChHf6p1bEwn1FgMBAgABAAH8AwOqol5kmYHgPoq84\/\/Da6\/5UhNT\/nZAKlLwtuCLeOmg2yA8i7r3+6nZyxj+LpdSSvhjZQ\/dp+uNkXD86w44FnW6iwA0EwETAhMDwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUAL8AIwBIACgEAAX\/\/AQABAAAAABcAFQAAEmdhdGV3YXkuaWNsb3VkLmNvbQAXAAAADQAYABYEAwgEBAEFAwIDCAUIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAzACYAJAAdACADkr8qMij58U130ShRmVJ57YHqBPAcvleuo4UFzSZLegAtAAIBAQArAAkIAwQDAwMCAwEACgAKAAgAHQAXABgAGQAVAMsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1582454599225,"flow_last_seen":1582454599261,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0rPkAAC4GWs4R+LBLwKgCEQG7xZj0WnUYsqXuQIAQA6u6vgAAAQEIClsTChkR3+qd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1582454599225,"flow_last_seen":1582454599295,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2340{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1218{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":44,"flow_packet_id":8,"flow_first_seen":1582454599225,"flow_last_seen":1582454599297,"flow_tot_l4_data_len":5113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","server_names":"gateway-india.icloud.com,gateway-carry.icloud.com,gateway.icloud.com,gateway-australia.icloud.com,gateway-sandbox.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D2:DA:1C:68:0C:91:A7:DB:BA:B2:2D:29:06:DB:57:42:10:3D:3A:FE"}}
+1094{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":580,"pkt":"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","pkt_caplen":580,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1582454599396,"flow_last_seen":1582454599396,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGwFLAqAIREYmmI8WZAbu9h96xAAAAALDC\/\/9bXgAAAgQFtAEDAwcBAQgKEd\/rCQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":108,"pkt":"AQBeAAD7xGGLNYKpCABFAABeopUAAP8RdUTAqAIR4AAA+xTpFOkASvALAAAAAAABAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQAAKQWgAAARlAASAAQADgAA5mGLNYKpxGGLNYKp","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":128,"pkt":"MzMAAAD7xGGLNYKpht1gD8z1AEoR\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBKKNMAAAAAAAEAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABAAApBaAAABGUABIABAAOAADmYYs1gqnEYYs1gqk=","pkt_caplen":128,"pkt_type":34525,"pkt_ipoffset":14}
+0399{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuype5A9FqAWIAQA\/SupwAAAQEIChHf6ylbEwob","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuype5A9FqH+oAQA\/CnBwAAAQEIChHf6ylbEwod","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":159,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGtWjAqAIREfiwS8WYAbuype5A9FqH+oAYBACOfQAAAQEIChHf6zBbEwodFgMDACUQAAAhIPdiwyj1I6m4F7av9yBSV7JBAs1bbY3G5JfBek2ejyNdFAMDAAEBFgMDACgAAAAAAAAAAEwW\/\/KAh9P\/tQdwoWQmHSmK5nrXXG\/M6ic8CcWTXbGv","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnrP4AAC4GWpQR+LBLwKgCEQG7xZj0Wof6sqXunYAYA6v5LwAAAQEIClsTCq0R3+swFAMDAAEBFgMDACgAAAAAAAAAAI3hMVQg2deXwKW1to+3OLQwi53\/\/iOpKO3yRrz92EeF","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAgB5rP8AAC4GWoER+LBLwKgCEQG7xZj0WogtsqXunYAYA6uyIwAAAQEIClsTCq0R3+swFwMDAEAAAAAAAAAAAahZpiRsxGFaiStkfVsksJvAde8o0oPOAKemhQwWDE2QQVNrlmJ8oGhiAOiiFJTH+QHlpHA4KQWh","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WYAbuype6d9FqILYAQA\/+lsAAAAQEIChHf61FbEwqt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":70,"pkt":"MzMAAAACxGGLNYKpht1gCzl3ABA6\/\/6AAAAAAAAACCM\/F4KYopz\/AgAAAAAAAAAAAAAAAAAChQA9fgAAAAABAcRhizWCqQ==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAACsGFVcRiaYjwKgCEQG7xZn\/hRwvvYfesqBS\/\/9NtwAAAgQFrAQCCArKEDlZEd\/rCQEDAws=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGwF7AqAIREYmmI8WZAbu9h96y\/4UcMIAQBAt3qQAAAQEIChHf7BTKEDlZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1582454599396,"flow_last_seen":1582454599603,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsa.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1582454599740,"flow_last_seen":1582454599740,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGtbvAqAIREfiwS8WaAbsCzUbDAAAAALDC\/\/+ibQAAAgQFtAEDAwcBAQgKEd\/sCwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAC0GCMAR+LBLwKgCEQG7xZq3FAeKAs1GxKBScSAgIAAAAgQFrAEBCApbEwv6Ed\/sCwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUbEtxQHi4AQBAu4qgAAAQEIChHf7JdbEwv6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1582454599740,"flow_last_seen":1582454599776,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0398{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0JhcAACsG70cRiaYjwKgCEQG7xZn\/hRwwvYfgt4AQAEF4nwAAAQEICsoQOigR3+wU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1582454599396,"flow_last_seen":1582454599793,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsa.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2344{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1630{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":977,"pkt":"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","pkt_caplen":977,"pkt_type":2048,"pkt_ipoffset":14}
+1112{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":45,"flow_packet_id":8,"flow_first_seen":1582454599396,"flow_last_seen":1582454599794,"flow_tot_l4_data_len":4584,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":573,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gsa.apple.com","server_names":"gsas.apple.com,gsa.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gsa.apple.com, O=Apple Inc., ST=California, C=US","alpn":"http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D4:EF:5E:AD:7F:D5:13:5B:9F:B2:B9:84:19:75:BB:ED:53:FB:18:D6"}}
+0397{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA03G4AAC0GLFkR+LBLwKgCEQG7xZq3FAeLAs1IyYAQA6u24QAAAQEIClsTDB0R3+yY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2329{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXU3G8AAC0GJrYR+LBLwKgCEQG7xZq3FAeLAs1IyYAQA6vJSQAAAQEIClsTDB8R3+yYFgMDAGgCAABkAwPmeFGGnHgpP7l40Luq0\/4whPVBtZayXTPFxEUIIh8i9yBKruAHr1YWU9gHVpqeNK8Q\/3k8GBHQ+ecvxSY7m6rekcAsAAAcAAAAAP8BAAEAAAUAAAALAAIBAAAQAAUAAwJoMhYDAww4CwAMNAAMMQAH5zCCB+MwggbLoAMCAQICECDrGNnhMGOJ5gckndI1GuowDQYJKoZIhvcNAQELBQAwYjEcMBoGA1UEAxMTQXBwbGUgSVNUIENBIDIgLSBHMTEgMB4GA1UECxMXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxEzARBgNVBAoTCkFwcGxlIEluYy4xCzAJBgNVBAYTAlVTMB4XDTE5MTAwODE4NDYxNFoXDTIwMTEwNjE4NTYwMFowVDEbMBkGA1UEAwwSZ2F0ZXdheS5pY2xvdWQuY29tMRMwEQYDVQQKDApBcHBsZSBJbmMuMRMwEQYDVQQIDApDYWxpZm9ybmlhMQswCQYDVQQGEwJVUzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABA3JTXZEMDNfkBeddGFOfWVcUMoJ8W7d3ST3e3HiTTWw27hpoGkazdY\/uyqetayMkeP9ioDxEA8PxI4fVx9gMvajggVsMIIFaDAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFNh6lER8kHCQFp7dF5wBRAOG1iopMH4GCCsGAQUFBwEBBHIwcDA0BggrBgEFBQcwAoYoaHR0cDovL2NlcnRzLmFwcGxlLmNvbS9hcHBsZWlzdGNhMmcxLmRlcjA4BggrBgEFBQcwAYYsaHR0cDovL29jc3AuYXBwbGUuY29tL29jc3AwMy1hcHBsZWlzdGNhMmcxMjUwgY0GA1UdEQSBhTCBgoIYZ2F0ZXdheS1pbmRpYS5pY2xvdWQuY29tghhnYXRld2F5LWNhcnJ5LmljbG91ZC5jb22CEmdhdGV3YXkuaWNsb3VkLmNvbYIcZ2F0ZXdheS1hdXN0cmFsaWEuaWNsb3VkLmNvbYIaZ2F0ZXdheS1zYW5kYm94LmljbG91ZC5jb20wgf8GA1UdIASB9zCB9DCB8QYKKoZIhvdjZAULBDCB4jCBpAYIKwYBBQUHAgIwgZcMgZRSZWxpYW5jZSBvbiB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgYW55IGFwcGxpY2FibGUgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdXNlIGFuZC9vciBjZXJ0aWZpY2F0aW9uIHByYWN0aWNlIHN0YXRlbWVudHMuMDkGCCsGAQUFBwIBFi1odHRwOi8vd3d3LmFwcGxlLmNvbS9jZXJ0aWZpY2F0ZWF1dGhvcml0eS9ycGEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5hcHBsZS5jb20vYXBwbGVpc3RjYTJnMS5jcmwwHQYDVR0OBBYEFDcTKYxfoGNbyxqPKQFc6\/l8HBeZMA4GA1UdDwEB\/wQEAwIDiDARBgsqhkiG92NkBhsPAgQCBQAwEQYLKoZIhvdjZAYbCwIEAgUAMBEGCyqGSIb3Y2QGGwcCBAIFADCCAm0GCisGAQQB1nkCBAIEggJdBIICWQJXAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFtrLqfoQAABAMARjBEAiBcyMXSqYu\/NQzPC1eks2fF3nNBwnRpvtSQ93jt9Y6FxAIgQAGZ6hMU0FVYk\/U5Nz\/IH+LWui0mpLb1ikJAbD2uT7kAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW2sup+hAAAEAwBI","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":46,"flow_packet_id":6,"flow_first_seen":1582454599740,"flow_last_seen":1582454599811,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2340{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXU3HAAAC0GJrUR+LBLwKgCEQG7xZq3FA0rAs1IyYAQA6vpHQAAAQEIClsTDB8R3+yYMEYCIQDdbk0W3xLwRVSqExbk6WYwON+XhEgNjWS3c5gBslGuhAIhAOFAjfHHnYs0x+SaDx9TRoc6tbR7MkI8j7D8tL8bTA0\/AHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFtrLqfqwAABAMASDBGAiEAgaJ1MrRM2AKsBkPp1QIT6PfODIXbQVBUCAUpo+tzOrkCIQDddAHm4u\/Gn8li8ESlxL1ZJK3FxqbrgV3vXWLNi8iiHwB1AFYUBpov18Ls0\/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABbay6n6EAAAQDAEYwRAIgGHM1p6WBqV+vtqr6hd70KQdFzAWv+ozcuVTGuJp7dk4CIByS3BkfgbrlBXSSNJB0YU2uhFS8HFnPom3vv22lArFYAHUAb1N2rDHwMRnYmQCkURX\/dxUcEdkCwQApBo2yCJo32RMAAAFtrLqfywAABAMARjBEAiBaHWEaQOG2Acj23NJ5zQC63rSKppu35b4qfkAJ8X7kbgIgeEjIujG17P30x0NsVWfo0XlmL6r4EoA536jETLtvxuAwDQYJKoZIhvcNAQELBQADggEBAKGriMkz6sCwrnomv6YJ4jjwMaMNouZTjEijYKaSAYs2pIOE9O+xy3VQrni7VsR+gMkO6ivj8K8d+2za\/y+I2RQZ2TUQ6wWGorFDOoGqBZXtBV6gbGs9KDNThqQv865ePsXG2JT+biTm88weJMm7MYXFPMu6C9JosK0yxl3MDsDk45W8A+EciCdcIiZwl5J8dSnSGGYo5UMSF3qI3eSNp3NkNcxYPZnj4isyXRHrBHr1ekVVCMPF2Jox+AmwwfJRq0tdVhmqUS\/9z0Yc6KqLMm50HEB4+utGT9gDG45BW1xwuucQVqNjb4bcrs8WPZf4X7CL94S2\/\/ZbmTwQh3s0iuoABEQwggRAMIIDKKADAgECAgMCOnQwDQYJKoZIhvcNAQELBQAwQjELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xGzAZBgNVBAMTEkdlb1RydXN0IEdsb2JhbCBDQTAeFw0xNDA2MTYxNTQyMDJaFw0yMjA1MjAxNTQyMDJaMGIxHDAaBgNVBAMTE0FwcGxlIElTVCBDQSAyIC0gRzExIDAeBgNVBAsTF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRMwEQYDVQQKEwpBcHBsZSBJbmMuMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANCToR1HQyAWsgtr68PVtOjHmM3z3r\/oTenjNoAH\/EUbanxFhq5W06QJf2ENa11+Umt9tMg5xPRnOveDzhlvhi9+RX5HHGdSypUFXeI2UYXA1GeANW8V3T79HdL9jzRQ2Ox2Kr7j09rk\/cjrKAKWEZcXYRzpxFk7Qtwy0Qkd2qbRQ4b\/XrK8jM9m2wGLAq6USPM4j\/3qMqgI7IaXUZQkPklJllPoeaFAgekFu5OVUfzj\/XwRS\/eeCLMVSRUH+dE3oJtLMva1xNxq0fwK7fbgxSmgqItx\/g2SvP5UcBgKbcftDPvJLQbDjIX8y4Zc1jaOEosJf\/sZGjjV8JQweg+mjPMCAwEAAaOCAR0wggEZMB8GA1UdIwQYMBaAFMB6mGiNifurBWQMEX2qfWW4ysxOMB0GA1UdDgQWBBTYepREfJBwkBae3RecAUQDhtYqKTASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBBjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vZy5zeW1jYi5jb20vY3Jscy9ndGdsb2JhbC5jcmwwLgYIKwYBBQUHAQEEIjAgMB4GCCsGAQUFBzABhhJodHRwOi8vZy5z","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1218{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":46,"flow_packet_id":8,"flow_first_seen":1582454599740,"flow_last_seen":1582454599814,"flow_tot_l4_data_len":5113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.icloud.com","server_names":"gateway-india.icloud.com,gateway-carry.icloud.com,gateway.icloud.com,gateway-australia.icloud.com,gateway-sandbox.icloud.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"1e60202b4001a190621caa963fb76697","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","issuerDN":"CN=Apple IST CA 2 - G1, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"D2:DA:1C:68:0C:91:A7:DB:BA:B2:2D:29:06:DB:57:42:10:3D:3A:FE"}}
+1095{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":581,"pkt":"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","pkt_caplen":581,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUjJtxQSy4AQA\/Sq0AAAAQEIChHf7R5bEwwf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUjJtxQaboAQA\/CjLwAAAQEIChHf7R5bEwwh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGwF7AqAIREYmmI8WZAbu9h+C3\/4UncIAQA\/RoaQAAAQEIChHf7VbKEDop","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGwF7AqAIREYmmI8WZAbu9h+C3\/4Uq\/4AQA+1k4QAAAQEIChHf7VbKEDop","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454599929,"flow_last_seen":1582454599929,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":81,"pkt":"xiwDYGpkxGGLNYKpCABFAABDumIAAP8Re+TAqAIRwKgCAf43ADUALyJV0zQBAAABAAAAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1582454599929,"flow_last_seen":1582454599929,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0636{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":241,"pkt":"xGGLNYKpxiwDYGpkCABFAADjtQsAAEARP5zAqAIBwKgCEQA1\/jcAz3eX0zSBgAABAAUAAAAABHBsYXkGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAMOwAmCHBsYXktY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAAAOmACIEcGxheQZpdHVuZXMFYXBwbGUDY29tCWVkZ2VzdWl0ZcBUwGUABQABAAAAXgAUBWExODA2BGRzY2IGYWthbWFpwFTAkwABAAEAAAAOAARce00awJMAAQABAAAADgAEXHtNQA==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1582454599929,"flow_last_seen":1582454599930,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":47,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"play.itunes.apple.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.123.77.26"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1582454599934,"flow_last_seen":1582454599934,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGzmnAqAIRXHtNGsWbAbupO4D5AAAAALDC\/\/\/ZMQAAAgQFtAEDAwcBAQgKEd\/tTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":159,"pkt":"xiwDYGpkxGGLNYKpCABFAgCRAABAAEAGtWjAqAIREfiwS8WaAbsCzUjJtxQaboAYBADmiAAAAQEIChHf7TtbEwwhFgMDACUQAAAhIDKkQIEWZAlx88rOX5tT1olybnRVZCCFh2Ych8RieAgkFAMDAAEBFgMDACgAAAAAAAAAADOXRaCOmlNQDoZtFXOkJKDr47Af0t1lcWwFJ7SeDnj2","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGGW5ce00awKgCEQG7xZtUZWomqTuA+qBScSDQrwAAAgQFrAQCCAozMbcgEd\/tTwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAgBn3HMAAC0GLB8R+LBLwKgCEQG7xZq3FBpuAs1JJoAYA6v\/UgAAAQEIClsTDMER3+07FAMDAAEBFgMDACgAAAAAAAAAADE2avL7P0pc78ZIY1bGS0FIS5gBV3fQT3oYnSyr4D4Z","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454599,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAgB53HQAAC0GLAwR+LBLwKgCEQG7xZq3FBqhAs1JJoAYA6t1tgAAAQEIClsTDMER3+07FwMDAEAAAAAAAAAAASYx+h\/qLsTbOQlgH9YgSCutXJdRozXVc7bSZzNKXSSAd0yCTsFYntls75nAImoAahsOz3gPUtKa","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGtcfAqAIREfiwS8WaAbsCzUkmtxQaoYAQA\/+hSAAAAQEIChHf7cZbEwzB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4D6VGVqJ4AQBAtsOAAAAQEIChHf7eAzMbcg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1582454599934,"flow_last_seen":1582454600080,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"play.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0398{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cJ0AADUGqNhce00awKgCEQG7xZtUZWonqTuC\/4AQAOtswQAAAQEICjMxt7IR3+3g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0837{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1582454599934,"flow_last_seen":1582454600116,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"play.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2351{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUcJ8AADUGozRce00awKgCEQG7xZtUZW\/HqTuC\/4AQAOvMTQAAAQEICjMxt7MR3+3gn2nKgfmgF8aBkF3X7KNk6924h1FJsguks39Tk7FoXiTmioe6vz3e8l4G3Hl88yrKTSppvPgnbA4LIgCa\/hHBWlx0ORGxxsTEZgbUtoaAe7ZOLtOwoW90Py56ug379hKo85n8MFyPZBNKq4TcGR9hcO4NbuYxncak7IdoE7Nj6EUghd3aAjAXqH3LTxF76oopL\/JhumvVC3dw7VsHgEJauvJGO5HmNSu9AscFLSPu2qw5pH0qSm1H3dg53pUKsUfRg7y7dgZ8T\/v42On\/n5w3yLHouQ2sMaolF\/w\/p+SnXeNANgRhmY85tpb6B9kr2N3w4NEwBiC6S3MdfK1JF5yNBoobLxFbZFcTbayfGKs3at+GCok3OUkA7sT2s39j2lsr3H04Ik\/sHCq7YdiegEiBu\/eJy88ejAskE1SC6PTIBrH9DUOUhokOOEzz8eN+VeMte2E9Xe0WJn1ypDMXNh+ZYMI5LZFE13QL49M3Q+4+wmXLc+dk5EwAX0Mauvvek5S3GqoL+JBmSMG9TSmU4qlO4GXJwDq3WGToe8zBbnTBIvrv5As8GwuQ99OB4+ooth9+pC80yFhkesFfTlFQwIAsOQOAiCh0kjTLuidTU+fFeBeTLuyx4LEUD50WMmu1n6rgaZY4oWu96J0AFSqLYiJQXrTq31bnIIx7gu1RxyRByg4yjF7NfouMonfJ+470hO8cybUvH\/ormNXFsMrsjZqr76FxX9tA3KvtZJ2CTkYPOnvwThfg82YYhJi35M7dVEeKN0j7uBe1JEFiiAIYFT+Di5z4CaWtpwngWZJFEU3i3zpkdW2WqM5o1oaNUQ3dxcMPBN+8jHvz6MDcGqLoIvHsfIVBmMa5fJywxqhx2UGt7qMR4SUlIlOXiaA16yCvXF97FEDhUjD606Mck0RI0gYMuNOKTuFsuWlvJkgM1QtGtEhBoaFsWu9GFsm0rWYchXp6vY3iVLELUXJa1J9w7u0kznpwFhS50fSWRJVIrCAbtVUXLBwCwzeXA\/psp8mpwXu+1aFDnTulXXNIaKYIkvVuxBMn\/XcpETFJMfdw2RwxJ5SrXPcDYB4KEOBTeODNXA3ztqaFAw5aaaMvODhBx4aog4D7ncqV\/tSGnyt4SpZzGeAqnqTMcjCO8q4kTpdAwlCDOmKDI64u2u9y4R4jasGQgSLknp2qogAojJdaDjC07zGPnV54lVjlbM++gzmCl+64AV0Wapi57pNh5nhKe14UICK4S1\/eVSLi2UVPiRdXqHRAnVUMZwUZY4X2tro0Lmix0wo1CG2pnIzQd95Z1v99CXLjJUMssikjv5v9ArJouToIwVoeBEAIV\/FLIoLw6lKXaTRoUWU8b2t+exqF2oIoQyxUKvxiapQKC1tsfFo+kcDR9phLmtGbDTKK\/GecWARBWWWGpQjjodQ\/4tPWZwXsT9a8OyVUWkie6f7\/2E2WQ\/H+PiRFbFuHric+37Lk6zg2U5K3rFjOnp9g0sMCKRmFKs\/7Unj5v83vjtavl9H1YvUx+J3QefQzHy6LWoGG0ef6LRQRXodUdtpY\/yr36YpgYisXLiVgfJtuSyHDNGAlY4V1FZxawcS3MqO5+V1h3zGcddTgHIc82Cs+iKoHJgi91vel7\/pq1Tk7+uZH94J6dX1UIp5nO9cX6fVeUvOaO75f1iU5K\/Nijr\/EL\/Pzir59OuVP8R0\/uHhcStDoy3qeuRZ\/MOolCXeuhGRpPUGO7foBrnkxKZbYYViI7jBspmI\/TkXyPpiK5NStN88bhfNnsmQ7EEbCUuq8KkNAJHlkcYqA\/CdWAft6geJqvGog3p8feqyhTdoj1vPwv4H2KEQnWi2EfSZ0lShAFK4I4anU1WcuNlWWRYTFJENVgtO3kU8GMj65LfPRJrA9xjAdiOnDNlSY1DZgXSDBQJduK0LuWtBG","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2052{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+0928{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":456,"pkt":"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","pkt_caplen":456,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4L\/VGV1Z4AQA\/ReUgAAAQEIChHf7gUzMbez","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4L\/VGV6J4AQA\/ZZkAAAAQEIChHf7gUzMbez","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGznXAqAIRXHtNGsWbAbupO4L\/VGV7rYAQA\/xYAwAAAQEIChHf7gUzMbe0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":146,"pkt":"xiwDYGpkxGGLNYKpCABFAgCEAABAAEAGziPAqAIRXHtNGsWbAbupO4L\/VGV7rYAYBADYRAAAAQEIChHf7hEzMbe0FAMDAAEBFwMDAEX\/XpjJrdIuTQ7WfUad\/LITgBIPm70rbSOAE9S9roolg0tCwdyvLJXS9DsSfw\/F0W6bgM1P9P7o4jVsI7rbu5Y3epqnQq4=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":353,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTcKIAADUGp7Jce00awKgCEQG7xZtUZXutqTuDT4AYAOtUHgAAAQEICjMxt+MR3+4RFwMDARoUWmOetpJsTERJmzhBCA8jpi\/xcKnLsK84kce6Ao2MRyhDd69aWt\/ofXEx374g\/F5QC97XpSdg12YxhbAF4DSNvniVx\/hh0rTMr2XpyPxBVKAEzwiiURhFAHBFphw+C7xWaPNPncluuMrKbfPuxFXPxMxKCl3J8vv+Jm0txfRwh8+bLDtXV\/iCh65AvpA0Ns9oepa44WmiMYb51QvCNz8v\/PJjWXE6voFML1EXF7aSWioEpak47iKkIEa6yffGFtOQYGTiOR+xbxgmu67OPQ+8aieh\/\/g6bFtJblx+2VYbXwasB93CAS2\/flz59HKJF31E\/vzvRmun1HlzPcSi1keemf7CHy+rU5qqPDQk9aqWEcTe0vw50H7o2q4=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0790{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":353,"pkt":"xGGLNYKpxiwDYGpkCABFAgFTcKMAADUGp7Fce00awKgCEQG7xZtUZXzMqTuDT4AYAOvWbQAAAQEICjMxt+MR3+4RFwMDARphOZHE1qgUIOEb03ZCD+O0FOJclKPZ1SVCxLgyzVyVHzi4TUQEujdDgJNPkR\/GPimn6coUYENMg3ZdzceVssTJAy\/z\/2LbNdsPkMk8Gze3qRvtgOrBKekQhMmE4Y\/qzNNGfcOsK4uEwmaVThLaRKXXUZpdn3UJ++2PMvfaqROQKGmYtP77Z3kXY3QP1iwb\/42fJ5M7rzTJ7RYmEho2Qhc8r2AkkEaShuzx7GHCvnKyTTmUHHMpe9Zq2zY4gGkoW8aXLao81Ku0NC8JO2JLCGSdIUn9g7eBMAjUfoxEWHWWW6I5O\/jkBOUxwhD8Bp69iTvuEpx4QzDXjtAMCpzJrI2YMiY4GrVAvkgMqz8SnsGKNSzd4q8tUL9mlY8=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAgCyAABAAEAGv97AqAIREYmmI8WZAbu9h+C3\/4Uq\/4AYBABd+AAAAQEIChHf7kLKEDopFgMDAEYQAABCQQTZRdeqgH933\/0YQkxoVWk3vpi\/5MvHcUXVGqvztHrVmPzO2NQcXf+XPiq1cZU3+MjmkxYpWsXyROd9tneOJAR6FAMDAAEBFgMDACgAAAAAAAAAAJw1OZiuYS+tEO+Hd6c6lK0ZkgPyE5on+DTSJH1yoCwW","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAgBnJhsAACsG7w4RiaYjwKgCEQG7xZn\/hSr\/vYfhNYAYAEGDPwAAAQEICsoQPLQR3+5CFAMDAAEBFgMDACijXGTc3lLFvZRZu6rFz3PNVLffHlIVt0NF7hnDkSCoTEf3BF4V4KgZ","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454600454,"flow_last_seen":1582454600454,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":81,"pkt":"xiwDYGpkxGGLNYKpCABFAABDtJ8AAP8RgafAqAIRwKgCAfi9ADUAL+BtI4YBAAABAAAAAAAABHN5bmMGaXR1bmVzBWFwcGxlA2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1582454600454,"flow_last_seen":1582454600454,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"sync.itunes.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0607{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":222,"pkt":"xGGLNYKpxiwDYGpkCABFAADQcdgAAEARguLAqAIBwKgCEQA1+L0AvB7yI4aBgAABAAQAAAAABHN5bmMGaXR1bmVzBWFwcGxlA2NvbQAAAQABwAwABQABAAAF1gAmCHN5bmMtY2RuDGl0dW5lcy1hcHBsZQNjb20GYWthZG5zA25ldADAMwAFAAEAAAWqABsGaXR1bmVzBWFwcGxlA2NvbQdlZGdla2V5wFTAZQAFAAEAABGWABgEZTY3MwVkc2NlOQpha2FtYWllZGdlwFTAjAABAAEAAAAYAARfZRg1","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1582454600454,"flow_last_seen":1582454600494,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":47,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiTunes","category":"Streaming"},"dns": {"query":"sync.itunes.apple.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"95.101.24.53"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1582454600508,"flow_last_seen":1582454600508,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGAGXAqAIRX2UYNcWcAbsi3fgeAAAAALDC\/\/8YLgAAAgQFtAEDAwcBAQgKEd\/vhgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADUGS2lfZRg1wKgCEQG7xZzFmLU\/It34H6BScSB2MAAAAgQFrAQCCAqI0z6tEd\/vhgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fgfxZi1QIAQBAsSJAAAAQEIChHf76yI0z6t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1582454600508,"flow_last_seen":1582454600545,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sync.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0r2YAADUGnApfZRg1wKgCEQG7xZzFmLVAIt36JIAQAOsTGQAAAQEICojTPtMR3++s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUr2cAADUGlmdfZRg1wKgCEQG7xZzFmLVAIt36JIAQAOvvggAAAQEICojTPtMR3++sFgMDAHoCAAB2AwP8TH04ZCrBb\/gkfljnUmujowdNxER7kOqz1gAUSd1ARyAx8\/DIlhLRtqLIiYUYtk4NlTJqyrl\/fgPygPHG4YkVbhMCAAAuACsAAgMEADMAJAAdACBId\/Nnk2O5Sr4v6R4YPHo4E3mOFhXJdd0yp0DfW6I8TxQDAwABARcDAwAudMmXJPizSb+uU99qMbx5cAmpJSCLpPkIdtgbXgjKl2Es7W8sRKs7LwQENOumdxcDAxZZrS3p7EDxmR\/IXQjmqj4qIg62K04sA4wA8ndndzwoRJJ0ArSgjxsIw7SrLyfZo1bty+qCQYtU778MH9nCUJSxZLfaz4qJKmNOdx18ZEbSouWbYnumd26W36\/fu51gRJ9XS526VmaJUwQCfdv+7r6ZUSJ30RHugEU3fo3GLI5Yhe6sz2jCxaZylLfMjMgBcw6Ew7WqtZOmdo+m\/+V7FKX7YabQSZmpNz\/90iA87SUjBd+o0GPrlKSX+zgpaHBgvjZdqMSfGrDJgVtPEx8aL9b3ILaucW8tnzGY7\/hrsewgFXWKiKQ3YwWDMUX9gCE8GVAIiZSGpQmLJfUS6JLxMw6CyHNB6LZrGEY08Ljij\/qbKe0wdWpWXOJUJsVbpAw8SGs+ngDrozzw2MN1hX8nVhHctc+ZNwYfayeoMlbNyNz2crO70Ija9sijbkIQUM0xKwfwiexnPM5Ze4ksue4SfdSeCKlit4rerhP40Z2mh9xxZwHC8Yl6a\/LU0FBiMiG3X3ehFnXhnrJ4WqLsE5lQfb12V6AZlXSpDwCEHMVi6aZcHdmubp44fy3mTCBuKfI2DxJfXW7Ei6carC5Rn4PvDYucmJAVdinoQZi4BnShp5CkYd5sJuag1Y06B0y5pOiSM3EkRcI+jA1HqPICGHYgP9CqOqmnyaGJsIYwUMCCQlwq5vDvlgEETaqMtEGMpxQUVn7wH6RX8ysxaQ9gYqVrX5Z+fAvQvkyZZGwIoIqDF53PdClKh\/eBs+XtNdUU15aXQCE5wJbqhuXY36zI86AKLzkrTtkC+JkTtc0+b9YVvsLVTAk60yTnjC4yETkXglK5arNKJQQ8wO+yapKFYAy1z6RgktiiKO8HobCTmnrClWvRHGYqDk12Ih2RrtGQH18g\/B80eep9I\/EIOw4299xv6B0wvjiKDkvc3yUFkDfqs4IEW1j6w4f2h6I9mfV0woc6lmmWPACkfh3I1HvUftoBCC\/F4S+NWegAIYAHjhMhd5xS\/b3OWA0B7WYY\/AKwl0oGAIafXNFyIEEU3Tu5nS2FOjs+PZM6Ht+m4fUmSLxQM5SVWZo6Ga2Jm3GvuzbWiqWOiIPSAaFoPbq1PmeFX0qpIcjfiXjMCJZgoTnuD501kfO9FJPgV\/IATXU\/8dUpMk3cQwU7F6Um1gDSdO0UBTbEOXugn6kSlbhkSz9+JamsPAPBuzZYSeyQmZUZ24JlGUqZeqh60BUe4yvtzza49oGKt82zMxLWDI1jiMTrPt7cQ6tvF5ndLmftTJrIZjCbVHQ0bfpxz+Fz2Zd67mu8iPx1NfAZO5LJCXEYLbubq09dweHBNYTjHKm8TQzFs8wdtbhWa1yVdGS3h\/D9XcZvVmPlQ8MTJDdf\/Qe0HPLiG1miktNzT9Nyu3\/xsvWbLeaXVFkA7C9X67tzGDwARaO0\/\/MnABlnUjv3b9d17B0qWElkpNZAvOyzYw9iMrf21U9gYRZFEvFrA9PLZKhlV592v90TLSNkn5+eUdXprHVwBpJugztp2hkedjOPa8AgpPYJQZjkOJ7VFXp6ytPj6uc7wyl6N2NT3Xn06rL3X\/KuiYXW7QR4mTk1VA0KTdlbbr1IBR2zGy5jU134I9FqoaxSm5iu14lQGI8\/oyK3tOofGPmoPZ4GQghrNZ6UB+hh+t\/\/UnAY56vWxG\/p","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0837{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1582454600508,"flow_last_seen":1582454600580,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sync.itunes.apple.com","ja3":"6fa3244afc6bb6f9fad207b6b52af26b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2353{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2045{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAgXUr2oAADUGlmRfZRg1wKgCEQG7xZzFmMVAIt36JIAQAOvQhwAAAQEICojTPtYR3++srcLGnObwJWh1KtD5HhIBsggJqFWar6cSoSIwWqAUCmaXGHrihdiGEE8ZXENRE0znJCnkqAMmVRaq0pL6cruev7aHQVZGlu8dzZV\/vKN4Jz1AYs1YgI5A4AB4XLrNHDN8k+mOP\/+G1rxDd9tziZ0YQvQbqHJdMLXpTPo+q1fhD2vpI5Pm4Xftd+Cg7wRXMkPkKZUritmhuTOk5X6PYJZuxn57J2rbuNG6jpnITDJo79qBjfsBCf7pXoUcI\/wffxl4pPkjiYYf71HyG4cIg9WiWH1he83Pae1py4t7IIJgilUJQFX1jRK0np+GsQIMqZcGssLjQkUqW2cbBg7H0A8JHOvk\/hqvDpLjdX0LjyhVZ2IdDf0CHGW\/rcX06TH1BeEkdhFRYvc5Kj2lOMeY8waeWe8OtLkMbXjex5g5bB9Aikot7jZ5R3gZtaDtqM04\/2CUa9Z6xPwOWJ7AeFVgKFQrhA9bjIy26Hrto48+IMunzVyXVnFGSf\/5DfavR6WWkDmBsIYR9I4SNdosuggT9nONeG\/M97xpIiruF0uRcQtRkW4SE6SiuIXWFmjcAaN7QCivKiYfB6fh9nH7OoKJ1SoX+yZL3ii+I4vzIZn\/Btkd6CQDFdmmrwaeWHKhQqjCKzKm2BfjOFjc7AOam09OBJxztdhvQpAIwWqOYMjA8azCWJy6RU9kcAnHGvQxRSwzFnDzbIdqtYRU\/OeSEy5Ztd4KZrvL9noxmkt2wBYuz1blaCbTrGbw9WgOHVGzncvMZB3edtN2N0jPjdPrEx+wx6BkJiY9aIUXFgz0MqYfEq1d7Z6eQWA6mXZj2QYwM0i5q46qyJ80ZC2IHHQGAgeKTB1KJVI7z3TH5bBC5iF26KHUWheopOmVB956LvUkLq0aZCmES0bJfdXQGgqWmGgxEVOAvxw\/bwQUulXvhrS4+SAwUWR+DEqOZvfq+aPYGkxM0SdQVkzhJgefYVP9nrU8FPQd8ykxsrFhNU3lO5WvjK2zaTODgEjuPQbCo8Ud7whhr92bQt5wVq4nppGqVsNPGS0aTH5Ie3KCyfgE9sULHSOStDSgO3ozIkAu1vxYKGVxz35QBv7C3VdKGfdO23r4mh1DnU+fS9N3LQRz9qWSSrl6RGmYMqDEMuKogrkiIK39f5JefcLtdgWc8sMpftz0wCbf2i+tDi2cLg\/mCuVhwddeZj\/SPBa\/z4U++DVs3H5E1QghU5K\/LrZ6Clh82FCY0\/VUq293bkKfJz2ozKPjH6iz9vzkX2v7XjnL\/S2GplxNztI+s9N6Kyd78LQyBjD5cwnWXNZWoWHkro4OydglYIjzz6cqEx\/vpJ71q3wAlqL8ClfGKFG25kvQHr8LW8nDjnsGbbvjEakY8dRo7KHDbC0vTeJMzChpYPz9rH8xRr1FRvD85DfktMk3ySazOH5ThUd8rROoDYREah+MyYW8iT5nLKWisQ6bdKAPkoNJk8QWOC1GPGY2CUVIQhfGmsmMN21PsgDHh2u3k2t\/cPcq1dgY\/AfkXlNhg9ALTaZoFjUgTa9FQ0VQX+5DLucrsQ4uCuZBw2f3+FYkxj978rH4COsV\/d+pp4gwMV6rbFezXVaR\/\/3Lx7PEBCpBe1dehJpGI4CojENI0lAusubM1w\/iM+KdbdRj4e8LL+BpjtdndBGDa+LPYk74YR9ntiBhIN+Z9qsGgNRgMA5Ziau5wCW9tfpns4Td0myWARox4iVsK9i5\/0WapVO0K6\/4pjcNGtMFtJbSD4YrFRiYvOqgpjhuSf6ud0+xpQQuRe3N3z06z4+1HYWPTq+5cm\/QZQQVTqncwJ25\/Qeirr++X6j8DlTWD1ck1aLARV+DSdOu7ILHkALwnvPtyFuQ\/hvuu66\/NvAOF9q8RyIOJ9jVo6zsHHopgv1pC8AQfh3Tl+MKHX3Q8qUS9uoi","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fokxZjAgIAQA\/QEqwAAAQEIChHf79GI0z7T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fokxZjFQIAQA\/b\/6AAAAQEIChHf79GI0z7T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1395{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":800,"pkt":"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","pkt_caplen":800,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGAHHAqAIRX2UYNcWcAbsi3fokxZjNvoAQA\/r3QAAAAQEIChHf7\/SI0z7W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":146,"pkt":"xiwDYGpkxGGLNYKpCABFAgCEAABAAEAGAB\/AqAIRX2UYNcWcAbsi3fokxZjNvoAYBAD\/dQAAAQEIChHf8AmI0z7WFAMDAAEBFwMDAEVUOOj2tGvaINrHyVOhP0kBTB8LDlsPjRKAV8G0PLMBWW4ePVJCAbmXcCnjrI+JyeomJ1V4BzSnP+GW9fNRzui7ZvfHi3g=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","pkt_oversize":false,"pkt_ts":1582454600,"pkt_len":112,"pkt":"xiwDYGpkxGGLNYKpCABFAgBiAABAAEAGAEHAqAIRX2UYNcWcAbsi3fp0xZjNvoAYBABgXgAAAQEIChHf8AuI0z7WFwMDAClRVTUdkgd1Ri8nQFNd98VjxkuZgkygicyhmvcNiVIlazT8aPL8dJi3aw==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":19,"flow_packet_id":25,"flow_first_seen":1582454598252,"flow_last_seen":1582454599058,"flow_tot_l4_data_len":13378,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":535,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.140","src_port":50575,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":28,"flow_packet_id":45,"flow_first_seen":1582454598587,"flow_last_seen":1582454600617,"flow_tot_l4_data_len":12335,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":274,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50580,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":37,"flow_packet_id":77,"flow_first_seen":1582454598721,"flow_last_seen":1582454600748,"flow_tot_l4_data_len":75712,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":983,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.185.87","src_port":50581,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":44,"flow_packet_id":32,"flow_first_seen":1582454599225,"flow_last_seen":1582454600287,"flow_tot_l4_data_len":8941,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":279,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50584,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":46,"flow_packet_id":30,"flow_first_seen":1582454599740,"flow_last_seen":1582454600279,"flow_tot_l4_data_len":8893,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.176.75","src_port":50586,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1582454598542,"flow_last_seen":1582454598582,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":44,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52852,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1582454598205,"flow_last_seen":1582454598247,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":50,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63143,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":1,"flow_packet_id":7,"flow_first_seen":1582454553219,"flow_last_seen":1582454596366,"flow_tot_l4_data_len":2156,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1582454595839,"flow_last_seen":1582454599396,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1582454585625,"flow_last_seen":1582454585625,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":51411,"dst_port":1900,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1582454598246,"flow_last_seen":1582454598287,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":43,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":51007,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":45,"flow_packet_id":12,"flow_first_seen":1582454599396,"flow_last_seen":1582454600443,"flow_tot_l4_data_len":4889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":407,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.137.166.35","src_port":50585,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598758,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":46,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63377,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1582454598204,"flow_last_seen":1582454598247,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":56,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63381,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1582454553607,"flow_last_seen":1582454586688,"flow_tot_l4_data_len":1987,"flow_min_l4_data_len":53,"flow_max_l4_data_len":1194,"flow_avg_l4_data_len":496,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":40,"flow_packet_id":14,"flow_first_seen":1582454598888,"flow_last_seen":1582454599079,"flow_tot_l4_data_len":7495,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":535,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"104.73.61.30","src_port":50583,"dst_port":443,"l4_proto":"tcp"}
+0432{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":39,"flow_packet_id":5,"flow_first_seen":1582454598885,"flow_last_seen":1582454599226,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp"}
+0425{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1582454599054,"flow_last_seen":1582454599054,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.22","l4_proto":2}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598760,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":47,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53272,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598756,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":45,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53317,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1582454595352,"flow_last_seen":1582454596370,"flow_tot_l4_data_len":616,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.17","src_port":67,"dst_port":68,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":23,"flow_packet_id":18,"flow_first_seen":1582454598385,"flow_last_seen":1582454599058,"flow_tot_l4_data_len":5910,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":328,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.130.2.46","src_port":50577,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1582454552576,"flow_last_seen":1582454582628,"flow_tot_l4_data_len":1036,"flow_min_l4_data_len":518,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1582454598373,"flow_last_seen":1582454598412,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":40,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55457,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":38,"flow_packet_id":12,"flow_first_seen":1582454598766,"flow_last_seen":1582454598934,"flow_tot_l4_data_len":6219,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.122.252.82","src_port":50582,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1582454600454,"flow_last_seen":1582454600494,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":47,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":63677,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1582454585624,"flow_last_seen":1582454585624,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.225.216","dst_ip":"239.255.255.250","src_port":60538,"dst_port":1900,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1582454553607,"flow_last_seen":1582454586688,"flow_tot_l4_data_len":1905,"flow_min_l4_data_len":370,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0428{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1582454595354,"flow_last_seen":1582454595354,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff98:a29c","l4_proto":"icmp6"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1582454598209,"flow_last_seen":1582454598248,"flow_tot_l4_data_len":242,"flow_min_l4_data_len":49,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":61862,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":48,"flow_packet_id":34,"flow_first_seen":1582454599934,"flow_last_seen":1582454600426,"flow_tot_l4_data_len":10676,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"92.123.77.26","src_port":50587,"dst_port":443,"l4_proto":"tcp"}
+0494{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1582454560698,"flow_last_seen":1582454560698,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.1","src_port":5351,"dst_port":5350,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1582454560698,"flow_last_seen":1582454560698,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.1","src_port":5351,"dst_port":5350,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1582454598373,"flow_last_seen":1582454599396,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":74,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1582454553606,"flow_last_seen":1582454586688,"flow_tot_l4_data_len":1958,"flow_min_l4_data_len":53,"flow_max_l4_data_len":1165,"flow_avg_l4_data_len":489,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1582454556158,"flow_last_seen":1582454586170,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1582454598212,"flow_last_seen":1582454598252,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":48,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":55914,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598756,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":46,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":64203,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1582454599065,"flow_last_seen":1582454599105,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":39,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62160,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598759,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":47,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":49880,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598758,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":46,"flow_max_l4_data_len":187,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":53983,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1582454599073,"flow_last_seen":1582454599105,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":39,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52031,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":25,"flow_packet_id":20,"flow_first_seen":1582454598416,"flow_last_seen":1582454600719,"flow_tot_l4_data_len":6496,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":324,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50578,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":26,"flow_packet_id":20,"flow_first_seen":1582454598418,"flow_last_seen":1582454600719,"flow_tot_l4_data_len":6518,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":50579,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":22,"flow_packet_id":27,"flow_first_seen":1582454598377,"flow_last_seen":1582454598754,"flow_tot_l4_data_len":9966,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.25.53","src_port":50576,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":50,"flow_packet_id":28,"flow_first_seen":1582454600508,"flow_last_seen":1582454600678,"flow_tot_l4_data_len":10515,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":375,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"95.101.24.53","src_port":50588,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598760,"flow_tot_l4_data_len":217,"flow_min_l4_data_len":39,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":62526,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":24,"flow_packet_id":9,"flow_first_seen":1582454598387,"flow_last_seen":1582454598716,"flow_tot_l4_data_len":1135,"flow_min_l4_data_len":32,"flow_max_l4_data_len":728,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.253.105.202","src_port":49152,"dst_port":80,"l4_proto":"tcp"}
+0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1582454596364,"flow_last_seen":1582454597360,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1582454595354,"flow_last_seen":1582454599568,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":8,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::823:3f17:8298:a29c","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1582454598713,"flow_last_seen":1582454598755,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":40,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":52682,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1582454599929,"flow_last_seen":1582454599930,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":47,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":65079,"dst_port":53,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/iphone.pcap"}
diff --git a/tests/result/nDPId_ipv6_in_gtp.pcap.txt b/tests/result/nDPId_ipv6_in_gtp.pcap.txt
new file mode 100644
index 000000000..abfeef0bc
--- /dev/null
+++ b/tests/result/nDPId_ipv6_in_gtp.pcap.txt
@@ -0,0 +1,6 @@
+0363{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ipv6_in_gtp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ipv6_in_gtp.pcap","pkt_oversize":false,"pkt_ts":1536839120,"pkt_len":150,"pkt":"AAAAAAACNLNUB8pWgQAMoYEAYAUIAEVoAIBoSQAA\/xHueQruUBoK7v5LCGgIaABsAAAw\/wBcEoCPuGAIuFIANBFAJgf8IEBSA55JCupNF\/7gnP0Al2q8Zxk+AAAAAAAAAAe\/4GQ6ADQ3SIBuFZfDWsIvMrWrNfP4Fx5OYe4CUCXgPs5ziPlz8hT\/27dLl2xtqJbPLkrE","pkt_caplen":150,"pkt_type":33024,"pkt_ipoffset":14}
+0178{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ipv6_in_gtp.pcap","type":33024}
+0489{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ipv6_in_gtp.pcap","pkt_oversize":false,"pkt_ts":1536840494,"pkt_len":166,"pkt":"AAAAAAABNLNUB8pVgQAMn4EAQAIIAEVYAJD2QgAA\/xGMPAruJFwK7v5NCGgIaAB8AAAw\/wBsB0wVsGANtkgARDJAKgEEyMAUFE4AAQAClFtnYSoBBMjwAA9JAAAAAAAAAAT\/O2YDAAAAQhlm1OFxgeTba50SyREjm3lFbPc9lgrLUcRYebJHYlYzSCeWv2L\/IjSAXfS1U+Rh4DDxR7yVXb8kOaI3Xg==","pkt_caplen":166,"pkt_type":33024,"pkt_ipoffset":14}
+0178{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ipv6_in_gtp.pcap","type":33024}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ipv6_in_gtp.pcap"}
diff --git a/tests/result/nDPId_ja3_lots_of_cipher_suites.pcap.txt b/tests/result/nDPId_ja3_lots_of_cipher_suites.pcap.txt
new file mode 100644
index 000000000..cb6d15a5b
--- /dev/null
+++ b/tests/result/nDPId_ja3_lots_of_cipher_suites.pcap.txt
@@ -0,0 +1,24 @@
+0377{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":74,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAADTDSUAAPwad0wrOgxIKzkH55SEBu84u1gAAAAAAgAJyEJdSAAACBAW0AQEEAgEDAwI=","pkt_caplen":74,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0373{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":74,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAADQAAEAAPQZjHQrOQfkKzoMSAbvlIcEFrEzOLtYBgBI5CGLyAAACBAW0AQEEAgEDAwc=","pkt_caplen":74,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":68,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACjDSkAAPwad3grOgxIKzkH55SEBu84u1gHBBaxNUBAchMBIAAAAAAAAAAA=","pkt_caplen":68,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+1437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":866,"pkt":"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","pkt_caplen":866,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":68,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAACjoA0AAPQZ7JQrOQfkKzoMSAbvlIcEFrE3OLtklUBAAf9kpAAAAAAAAAAA=","pkt_caplen":68,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+2318{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":1522,"pkt":"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","pkt_caplen":1522,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+2321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":1522,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUABdzoBUAAPQZ1bwrOQfkKzoMSAbvlIcEFsgHOLtklUBAAf385AAALxoVe5\/5I\/GDx\/TXFQSvGZzZlkxxeY6r7JfvE1MO5kSqJIylcqtI3CgZidU7wxPplCb4PCKG\/MIidVTuxRwAE9jCCBPIwggPaoAMCAQICAQIwDQYJKoZIhvcNAQELBQAwgbAxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhOZXcgWW9yazESMBAGA1UEBwwJUm9jaGVzdGVyMRowGAYDVQQKDBFYZXJveCBDb3Jwb3JhdGlvbjErMCkGA1UECwwiR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTExMC8GA1UEAwwoWGVyb3ggR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTAgFw0xNTExMTIyMzUyNDBaGA8yMDI0MDQxNTIzNTk1OVowgbAxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhOZXcgWW9yazESMBAGA1UEBwwJUm9jaGVzdGVyMRowGAYDVQQKDBFYZXJveCBDb3Jwb3JhdGlvbjErMCkGA1UECwwiR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTExMC8GA1UEAwwoWGVyb3ggR2VuZXJpYyBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKt8bDMRhnfwJSIitgDFLpGuBprC4tMhmkGTeBAp8D9tAJoRmr+CQlMBB0pRzAN3w\/GP1z48MoOiOUPMjA0yAQqbt15H+uMuVo4oC0Zl\/CXAy2wCEdlvlnWBzsZx+on5aArVYHxCe638JGA7+LhPXCM+346VJRtjkNd9d11824SziT\/ygbTCBgVVvBQfxWREr4m3OIDTRnRYod7st+aMcTs4X8iIywZyrHXM2eAOP\/xODdJcpVCW5vx+mk6jJj73WVq\/XPDe0cXAxYE8sy6qGWTHvht48XMNGGpEESimKhn1YJiWKYBNbsKu1nbfEzD687rWbkrNMW0Sc\/MsgRTOAUcCAwEAAaOCAREwggENMB0GA1UdDgQWBBQOWEmdI4tSjG09lVZGeYhhhXH5GzCB3QYDVR0jBIHVMIHSgBQOWEmdI4tSjG09lVZGeYhhhXH5G6GBtqSBszCBsDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE5ldyBZb3JrMRIwEAYDVQQHDAlSb2NoZXN0ZXIxGjAYBgNVBAoMEVhlcm94IENvcnBvcmF0aW9uMSswKQYDVQQLDCJHZW5lcmljIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MTEwLwYDVQQDDChYZXJveCBHZW5lcmljIFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5ggECMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFzBoKpnLrmCU34LZVg1dmsGoHKRK8ICHad1WmoTf8tebjslNeQND+QJaTFr3pX+k42\/n0u56QcCuzaiFTXHUV9FwQBXBhJRCC1Gw8JtD3KZTYD9IBg4q76pwMV3oYIc7yX0hApuPlis99BtrQ9uAJVJiqY61RayEgUpVpo+CewQOmF5JFd9ewI7lhRF\/1idFtJtNnVamFRvVESZUI+qwjibTBflOWhLITGcO7Wiztv2SGGWMWBXMEA04kzRXHZBKwPrVxAN4fFTRFJV+ONyDQcmGWoouPJiF2sv+h4P7L2o+Dy0iFjKIFY9A5Cg99pRDDKSRMAvCINP6g5IjDcjgJUWAwMDDwwAAwsBAMNj2BphFRDNLN7J8e1RH+Su2MMVc1DB3hpn71wBz6BtmNgWp4+Y2p9CQiEHz4mR1ejIQBfdfvytF2PniPCskclZXrLgsDC4r0hI53ROCdv4P1SZUaFs3carINdEGB1bHf8sdFbtL9NWvyl+LVW75HzWLA==","pkt_caplen":1522,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+1274{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":734,"pkt":"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","pkt_caplen":734,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":68,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACjDTEAAPwad3ArOgxIKzkH55SEBu84u2SXBBbIBUBAfXrSWAAAAAAAAAAA=","pkt_caplen":68,"pkt_type":33024,"pkt_ipoffset":14}
+0192{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":68,"pkt":"AAAAAAABAAd9VAeAgQAAXYEAAQIIAEUAACjoB0AAPQZ7IQrOQfkKzoMSAbvlIcEFulXOLtksUBAAf8saAAAAAAAAAAA=","pkt_caplen":68,"pkt_type":33024,"pkt_ipoffset":14}
+0193{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","pkt_oversize":false,"pkt_ts":1557818846,"pkt_len":68,"pkt":"AAAAAAABsKp3tUhAgQAAXYEAAQIIAEUAACifbEAAPwbBvArOgxIKzkH55SEBu84u2SwAAAAAUAQAAEcBAAAAAAAAAAA=","pkt_caplen":68,"pkt_type":33024,"pkt_ipoffset":14}
+0193{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap","type":33024}
+0162{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites.pcap"}
diff --git a/tests/result/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt b/tests/result/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt
new file mode 100644
index 000000000..35b1f9869
--- /dev/null
+++ b/tests/result/nDPId_ja3_lots_of_cipher_suites_2_anon.pcap.txt
@@ -0,0 +1,46 @@
+0384{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724520,"pkt_len":118,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABkI90AAEARjIOEvvQMl3m5LAhoCGgAUAAAMv8AQAE8W3RuUAAARQAAPGNKQABABin+wKiTsZd5waDkgAG7Qsba5QAAAACgAjkIo+MAAAIEBbQEAggKAAu5rwAAAAABAwMF","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0230{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":114,"len":118}
+0489{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1505724520744,"flow_last_seen":1505724520744,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":80,"flow_max_l4_data_len":80,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp"}
+0488{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724520,"pkt_len":118,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABkI90AAEARjIOEvvQMl3m5LAhoCGgAUAAAMv8AQAE8W3RuUAAARQAAPGNKQABABin+wKiTsZd5waDkgAG7Qsba5QAAAACgAjkIo+MAAAIEBbQEAggKAAu5rwAAAAABAwMF","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1505724520744,"flow_last_seen":1505724520744,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":80,"flow_max_l4_data_len":80,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp","ndpi": {"proto":"GTP","category":"Network"}}
+0484{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724520,"pkt_len":110,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABgHZ4AAD0Rln6XebkshL70DAhoCGgATAAAMP8APEGxP1xFAAA8AABAADIGm0iXecGgwKiTsQG75IBV2gFiQsba5qAScSDmyQAAAgQFeAQCCAoxbvx\/AAu5rwEDAwc=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcNCoAAEARfD6EvvQMl3m5LAhoCGgASAAAMv8AOAE8W3RxUAAARQAANGNLQABABioFwKiTsZd5waDkgAG7Qsba5lXaAWOAEAHJhFMAAAEBCAoAC7oNMW78fw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0230{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":106,"len":110}
+0480{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcNCoAAEARfD6EvvQMl3m5LAhoCGgASAAAMv8AOAE8W3RxUAAARQAANGNLQABABioFwKiTsZd5waDkgAG7Qsba5lXaAWOAEAHJhFMAAAEBCAoAC7oNMW78fw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0973{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":517,"pkt":"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","pkt_caplen":513,"pkt_type":2048,"pkt_ipoffset":14}
+0230{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":513,"len":517}
+1026{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":517,"pkt":"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","pkt_caplen":513,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":102,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABYPdsAAD0RdkmXebkshL70DAhoCGgARAAAMP8ANEGxP1xFAAA0\/\/RAADIGm1uXecGgwKiTsQG75IBV2gFjQsbcfYAQAOuAKQAAAQEICjFu\/+8AC7oO","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":1490,"pkt":"MNF+EIYg\/Ejv6KgaCABFAAXEPegAAD0RcNCXebkshL70DAhoCGgFsAAAMP8FoEGxP1xFAAWg\/\/VAADIGle6XecGgwKiTsQG75IBV2gFjQsbcfYAQAOuzBgAAAQEICjFu\/+8AC7oOFgMDADUCAAAxAwNZv4IzEPG59Sc8ViQ5epGgkgXAVwx2IPXXGXvSBa32UgAAnQAACf8BAAEAACMAABYDAwXoCwAF5AAF4QAF3jCCBdowggPCAgkA1SvVTKv6EBAwDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZNdW5pY2gxETAPBgNVBAcMCEdyZW5vYmxlMSUwIwYDVQQKDBxNdW5uaWNjYW4gRXN0YWJsaXNobWVudCBHbUJIMRswGQYDVQQLDBJNdW5uaWNhbiBXb3JrZm9yY2UxFTATBgNVBAMMDG11bm5pY2Nhbi5kZTEgMB4GCSqGSIb3DQEJARYRaW5mb0BtdW5uaWNjYW4uZGUwHhcNMTYxMjIxMTkxOTI0WhcNMTkwOTE2MTkxOTI0WjCBrjELMAkGA1UEBhMCREUxDzANBgNVBAgMBk11bmljaDERMA8GA1UEBwwIR3Jlbm9ibGUxJTAjBgNVBAoMHE11bm5pY2NhbiBFc3RhYmxpc2htZW50IEdtQkgxGzAZBgNVBAsMEk11bm5pY2FuIFdvcmtmb3JjZTEVMBMGA1UEAwwMbXVubmljY2FuLmRlMSAwHgYJKoZIhvcNAQkBFhFpbmZvQG11bm5pY2Nhbi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMKzfrDBg91Q2iU1\/65O+F0iYSYmVWfxyLQLgK1rRhZ\/QpIhW43eQVpuem02IBIMdKJHNJ+htvtx3Ej1\/TjlBokdGN1EWMncmMpLc5UI3dKFtA9vUJsUmZP3DxrzDH7Vr3nbIx8acvz8raZGJBsoz32blbgRNwA+uLK8XCY1MKUv79S5jXQHHAVHLBjfM1+lqHhyTTBT0qZFH2DjV3InzIXp7znlNjfZeZ3+TG1X61XJ8y6EQV8e1dvYHTr91mtURp5M8\/XJF8LXzp4pESDvTUW4x3dovSALiv3dyGGnesHhBWZHNByX5Y5xNS37VtfYzwAZ6q7kNDHk\/Bvpd9EffbRsdw0BnOKTsRPJRuGueiCsLKvL+q\/L\/EV1EGqy6dqsMkZ+uxYAFVkPU0aIyou2f+QDg11xwaudbuJWgg7TB7zZIz5P31BE2njRzitZ0l3ckz\/Zhns8JP5j2+R2cgI7L6FRcFnKRkeNPz9uYXHW4kgaHscyzw4FLyG0ilHq5l4KSnN\/\/dgvAkUqXCr+gkmLifae1kVSAXvUJiUSNefT6RlmWOOKek+QF93MY2fiFDLcxW1IJ8yJemJzIvn20c+VN2DHZxx2ISOUh3uU92QjdgjFYcovIwetZNFBkrxV8lgd2MEcHNEcReblfdOPBGFaBFHFQupf57Au49FPjQjbqzznAgMBAAEwDQYJKoZIhvcNAQEFBQADggIBAEoAHxXZxu+oQnR4NAVCRnvnvWMocJpPE9+xx6+8XjFbndW6pv\/Ts2+8Agq\/CnswKHjXEIpmKPJagkxYOGPtrCY0lwx74PO6ZLLUI6WVodHKC6fcZzEqLFSuhVdm5dhyZ\/pJVZj36Wk\/vG6bQdPzN7ZlpGHZ2IXP2DUhMQ7xtsP8RO6hkNC51wc09AUAOWfeIhn8UT+kX4OfSjZaenrSdPbYUx3sUax0Xk1MFQLqzO7J98XafXOPJDGeMRmFbuvcwcGg4te9HSQ6PSX\/r9STCA\/OFpACicpmDGAh3uaeXGTn2srP\/oY5\/crDKmawYKS+RXvdClytALXuOBT3cllfKDtLWMvbcnw1kKJFf5EPuBd4SlRpHx9ROPvaOGtHT+\/Fxa8PWW9At+dYVlleWz3KK+Ad28MW0K5RYMAx1Al7A4X\/simkr28=","pkt_caplen":1490,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724521,"pkt_len":298,"pkt":"MNF+EIYg\/Ejv6KgaCABFAAEcPesAAD0RdXWXebkshL70DAhoCGgBCAAAMP8A+EGxP1xFAAD4\/\/ZAADIGmpWXecGgwKiTsQG75IBV2gbPQsbcfYAYAOugjwAAAQEICjFu\/+8AC7oOYSUZyl25o1vLU3AOcWfj6UUC2BU59xTfZshuq+pGA1KDa6DRNgUtzcJGQuYvfAJBznkRFz32xRHfN3R9R4ynZv4cFNzO0gAy7vqrj3EjAHX\/Ue2ZIryEVQoHxrB6qQmG0iFQetOTJdIU1nr4LCGoxTAch2BjR1H\/eoquppYSIac67bEEW2WQit6MfVSWguW1cFHYe6na5ATU6sL6PW5nYfJOzZX62ob7j3DOBa7YZlDNbhqQ\/KXSWIo0ShYDAwAEDgAAAA==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724522,"pkt_len":298,"pkt":"MNF+EIYg\/Ejv6KgaCABFAAEcbqYAAD0RRLqXebkshL70DAhoCGgBCAAAMP8A+EGxP1xFAAD4\/\/dAADIGmpSXecGgwKiTsQG75IBV2gbPQsbcfYAYAOucXgAAAQEICjFvBCAAC7oOYSUZyl25o1vLU3AOcWfj6UUC2BU59xTfZshuq+pGA1KDa6DRNgUtzcJGQuYvfAJBznkRFz32xRHfN3R9R4ynZv4cFNzO0gAy7vqrj3EjAHX\/Ue2ZIryEVQoHxrB6qQmG0iFQetOTJdIU1nr4LCGoxTAch2BjR1H\/eoquppYSIac67bEEW2WQit6MfVSWguW1cFHYe6na5ATU6sL6PW5nYfJOzZX62ob7j3DOBa7YZlDNbhqQ\/KXSWIo0ShYDAwAEDgAAAA==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724523,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABccWEAAEARPweEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R4UAAARQAANGNNQABABioDwKiTsZd5waDkgAG7QsbcfVXaBs+AEAIjeMYAAAEBCAoAC7rNMW7\/7w==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0230{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":106,"len":110}
+0481{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724523,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABccWEAAEARPweEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R4UAAARQAANGNNQABABioDwKiTsZd5waDkgAG7QsbcfVXaBs+AEAIjeMYAAAEBCAoAC7rNMW7\/7w==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724523,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcdugAAEAROYCEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R5UAAARQAANGNOQABABioCwKiTsZd5waDkgAG7QsbcfVXaB5OAEAIjeAIAAAEBCAoAC7rNMW7\/7w==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":106,"len":110}
+0483{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724523,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcdugAAEAROYCEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3R5UAAARQAANGNOQABABioCwKiTsZd5waDkgAG7QsbcfVXaB5OAEAIjeAIAAAEBCAoAC7rNMW7\/7w==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724523,"pkt_len":122,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABogi4AAEARLi6EvvQMl3m5LAhoCGgAVAAAMv8ARAE8W3R6UAAARQAAQGNPQABABin1wKiTsZd5waDkgAG7QsbcfVXaB5OwEAIjg6MAAAEBCAoAC7rNMW8EIAEBBQpV2gbPVdoHkw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":118,"len":122}
+0498{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724523,"pkt_len":122,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABogi4AAEARLi6EvvQMl3m5LAhoCGgAVAAAMv8ARAE8W3R6UAAARQAAQGNPQABABin1wKiTsZd5waDkgAG7QsbcfVXaB5OwEAIjg6MAAAEBCAoAC7rNMW8EIAEBBQpV2gbPVdoHkw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+1132{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":633,"pkt":"\/Ejvopo\/MNF+D2w+CABFuAJnsccAAEAR\/JWEvvQMl3m5LAhoCGgCUwAAMv8CQwE8W3R7UAAARQACP2NQQABABif1wKiTsZd5waDkgAG7QsbcfVXaB5OAGAIjv8IAAAEBCAoAC7rRMW8EIBYDAwIGEAACAgIAmOi+GN3N8UwFIOyGgG7fRoYqddIen6fJLfOoMdGcgjC7EXRuMLo4ueRPzuPNKTKsd0rXjIh8nF1luCtj74M6hLMrC8RgUQ8NtWnU+VyJ5ocLdxtzZF0gGB+1NhUGr48PAz8CyV8iWtZ4r5z1HdzPAjUZcbzNDe0GFdLkO0mrmT1V\/fADZpMXfOis2u6uwZpitz8p9IosL8QiH6+IqUMckXifdvysezYp9tH9I18YsH7HyCm46xkjwyg7bNLoY89xVSe+3KoGnCgNymiAS0DFirvRnfEhZ55M6aVqDHyopcrpE\/p7Ra+JZESNmMF2sYfinmGSLWypwRK8tqaU\/ff99MtBg4KsFRNdp7dUOalIiR2j+\/gLC7fy\/B8rinO1aEkQfPwupPH+TOkI6kU7p6ZpEMlgYUAeUCVVdw2kpGnwan1lhC7pX4eYGUKHCcYnb9WwWjN9kb1rdtJu6KJWHsmxhkqn+5IJXszwezV7EVVZplgJPkRBwWsUatOWpjd9GuEZrUofu+2zRAWb37O45WXULSMfnimMKJd4Xwqcyx7tqMpzzTK7dWYdIkVZW9y5jVbcfrEnX0PFjjBobFRt6z81tve44yNzWQLg\/BhIGmKgyP4ZWrM3REf0v0GIj8wfwr+jHsMczvQifNTnUyyug\/Xc6cQyMh8qaav4EhHbL4l4yFg=","pkt_caplen":629,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":629,"len":633}
+1186{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":633,"pkt":"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","pkt_caplen":629,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":116,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABis2MAAEAR\/P6EvvQMl3m5LAhoCGgATgAAMv8APgE8W3R8UAAARQAAOmNRQABABin5wKiTsZd5waDkgAG7QsbeiFXaB5OAGAIjWbAAAAEBCAoAC7rRMW8EIBQDAwABAQ==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":112,"len":116}
+0491{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":116,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABis2MAAEAR\/P6EvvQMl3m5LAhoCGgATgAAMv8APgE8W3R8UAAARQAAOmNRQABABin5wKiTsZd5waDkgAG7QsbeiFXaB5OAGAIjWbAAAAEBCAoAC7rRMW8EIBQDAwABAQ==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":155,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJtcMAAEAR+neEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3R9UAAARQAAYWNSQABABinRwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj3G8AAAEBCAoAC7rRMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":151,"len":155}
+0542{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":155,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJtcMAAEAR+neEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3R9UAAARQAAYWNSQABABinRwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj3G8AAAEBCAoAC7rRMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724525,"pkt_len":102,"pkt":"MNF+EIYg\/Ejv6KgaCABFAABYxM4AAD0R71WXebkshL70DAhoCGgARAAAMP8ANEGxP1xFAAA0\/\/hAADIGm1eXecGgwKiTsQG75IBV2geTQsbeiIAQAPNoYAAAAQEICjFvDrIAC7rR","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724526,"pkt_len":155,"pkt":"\/Ejvopo\/MNF+D2w+CABFuACJx48AAEAR6KuEvvQMl3m5LAhoCGgAdQAAMv8AZQE8W3SBUAAARQAAYWNTQABABinQwKiTsZd5waDkgAG7QsbejlXaB5OAGAIj26cAAAEBCAoAC7uZMW8EIBYDAwAoAAAAAAAAAADM1WLZBbPlOmD9XANW49sO0tmduGTuSuv4J+SEqWJkSA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":151,"len":155}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724526,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABcySMAAEAR50SEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3SDUAAARQAANGNUQABABin8wKiTsZd5waDkgAG7Qsbeu1XaCFKAEAIjZNIAAAEBCAoAC7vdMW8PEg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":106,"len":110}
+1909{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724526,"pkt_len":1206,"pkt":"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","pkt_caplen":1202,"pkt_type":2048,"pkt_ipoffset":14}
+0233{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":1202,"len":1206}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","pkt_oversize":false,"pkt_ts":1505724526,"pkt_len":110,"pkt":"\/Ejvopo\/MNF+D2w+CABFuABc0zYAAEAR3TGEvvQMl3m5LAhoCGgASAAAMv8AOAE8W3SFUAAARQAANGNWQABABin6wKiTsZd5waDkgAG7QsbjA1XaCIaAEQIjYE4AAAEBCAoAC7vkMW8PEg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0231{"basic_event_id":14,"basic_event_name":"Captured packet size is smaller than packet size","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","caplen":106,"len":110}
+0497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap","flow_id":0,"flow_packet_id":27,"flow_first_seen":1505724520744,"flow_last_seen":1505724526702,"flow_tot_l4_data_len":6048,"flow_min_l4_data_len":56,"flow_max_l4_data_len":1456,"flow_avg_l4_data_len":224,"midstream":0,"l3_proto":"ip4","src_ip":"132.190.244.12","dst_ip":"151.121.185.44","src_port":2152,"dst_port":2152,"l4_proto":"udp"}
+0169{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ja3_lots_of_cipher_suites_2_anon.pcap"}
diff --git a/tests/result/nDPId_kerberos.pcap.txt b/tests/result/nDPId_kerberos.pcap.txt
new file mode 100644
index 000000000..75a522787
--- /dev/null
+++ b/tests/result/nDPId_kerberos.pcap.txt
@@ -0,0 +1,187 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1549337929790,"flow_last_seen":1549337929790,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49157,"dst_port":88,"l4_proto":"tcp"}
+0704{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":293,"pkt":"pB9ywglqAAgCHEeuCABFAAEXABdAAIAGkNisEAjJrBAICMAFAFiynbRHbznTnlAYAQAf5QAAAAAA62qB6DCB5aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBwTCBvqAHAwUAQIEAEKEYMBagAwIBAaEPMA0bC2pvaG5zb24tcGMkohAbDmhhcHB5Y3JhZnQub3JnoyMwIaADAgECoRowGBsGa3JidGd0Gw5oYXBweWNyYWZ0Lm9yZ6URGA8yMDM3MDkxMzAyNDgwNVqmERgPMjAzNzA5MTMwMjQ4MDVapwYCBE7AFheoFTATAgESAgERAgEXAgEYAgL\/eQIBA6kdMBswGaADAgEUoRIEEEpPSE5TT04tUEMgICAgICA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":332,"pkt":"AAgCHEeupB9ywglqCABFAAE+ExRAAIAGfbSsEAgIrBAIyQBYwAVvOdOesp21NlAYAQCkkQAAAAABEn6CAQ4wggEKoAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg0OFqlBQIDBjUgpgMCARmpEBsOaGFwcHljcmFmdC5vcmeqIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDmhhcHB5Y3JhZnQub3JnrIGnBIGkMIGhMH6hAwIBE6J3BHUwczA0oAMCARKhLRsrSEFQUFlDUkFGVC5PUkdob3N0am9obnNvbi1wYy5oYXBweWNyYWZ0Lm9yZzAFoAMCARcwNKADAgEDoS0bK0hBUFBZQ1JBRlQuT1JHaG9zdGpvaG5zb24tcGMuaGFwcHljcmFmdC5vcmcwCaEDAgECogIEADAJoQMCARCiAgQAMAmhAwIBD6ICBAA=","pkt_caplen":332,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1549337929811,"flow_last_seen":1549337929811,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49158,"dst_port":88,"l4_proto":"tcp"}
+0812{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":373,"pkt":"pB9ywglqAAgCHEeuCABFAAFnABtAAIAGkISsEAjJrBAICMAGAFganBtaQ2U1slAYAQDaGgAAAAABO2qCATcwggEzoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4YERcga5zFfjuo7+oqo0hJ6Udj7efOwOKKYJj6PKpxuETgzDcdt27IvGW9sEQ18QPUV\/drVuLVBwwEaEEAgIAgKIJBAcwBaADAQH\/pIHBMIG+oAcDBQBAgQAQoRgwFqADAgEBoQ8wDRsLam9obnNvbi1wYySiEBsOaGFwcHljcmFmdC5vcmejIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDmhhcHB5Y3JhZnQub3JnpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIETsAWF6gVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":166,"pkt":"AAgCHEeupB9ywglqCABFAACYExlAAIAGflWsEAgIrBAIyQBYwAZDZTtmGpwcmVAYAQDnsgAAX5hri3Z\/opje40K53kwDKo2\/CTegm0pJkWpLVNFlnn\/MakUFXqKHv4CDtH2CbQqvJq\/ecJgxH2EwrzVmUcQk2zqXXjIwbkyszZ9\/Xc6IEgQ4qiI64lPzINS7ueVTbdUXk\/8v52QxoGdMilBjjWTAcQ==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1549337929815,"flow_last_seen":1549337929815,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49159,"dst_port":88,"l4_proto":"tcp"}
+0566{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":191,"pkt":"pB9ywglqAAgCHEeuCABFAACxACFAAIAGkTSsEAjJrBAICMAHAFgBsoC8gS4auFAYAQDUqQAAiNeE+tCJIo9Cz1KFHGicigIlxkFIEVkb70vifDKvvi6NwB24GlkehWdocuUvESpeAqtSofWtuKDm2yskVOheE+r4DxaQxRLncJy9zYBP+p7ofQvBukmarkg+oY3ctA8jgj5BSy2yi42NlxJjhcjuX3ByLG+GD20zq41Le0TbPh0TFS5qkRb0Q24=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":169,"pkt":"AAgCHEeupB9ywglqCABFAACbEx9AAIAGfkysEAgIrBAIyQBYwAeBLiBsAbKBRVAYAQBP\/wAA1H56bb56rLTzhI\/so6pGl6jILu03bHY2ZWl4A41JY07Kavo1sQRKhlNPx3vE\/LdSF6BX6NLW1Fm3Tdmvr7ZEbPWOq8FZs9c0RBY7wJbwPUW44FlC0vhqJn1yGB3K1Fxl0gPqAAMzMrhupJQMQzjV4fgdag==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1549337929816,"flow_last_seen":1549337929816,"flow_tot_l4_data_len":1451,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1451,"flow_avg_l4_data_len":1451,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49160,"dst_port":88,"l4_proto":"tcp"}
+2316{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":1485,"pkt":"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","pkt_caplen":1485,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":1498,"pkt":"AAgCHEeupB9ywglqCABFAAXMEyNAAIAGeResEAgIrBAIyQBYwAj+nIEzJM5dJFAYAQC28wAAAAAFoG2CBZwwggWYoAMCAQWhAwIBDaMQGw5IQVBQWUNSQUZULk9SR6QYMBagAwIBAaEPMA0bC0pPSE5TT04tUEMkpYIENGGCBDAwggQsoAMCAQWhEBsOSEFQUFlDUkFGVC5PUkeiIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHo4ID7DCCA+igAwIBEqEDAgECooID2gSCA9ZmgNa1dr3wGd87q5o3XWLsTIWysbTgkwJr+Tn54CyV4AH6vlEgusASRdJcyvN0onPWOO9TStPkihUEobLQ8WG5\/BAe\/pJm76NJeRjK9kGGi8G\/0XbFCYSPepa5PQwmUgAjsgxX98uOoIoeMgpxrDD2I4YnqT0o9T7E4u8XbTiIf+v3cdcN4dCZ+EoTKAM9GSdtpSP62\/Xb+2PxUXMWzXRKdBV4GPRc7M\/f3KRdK529+2pM4yLgF6mfdzw1YttOYiTQBSOIseZU5L5pWWwIAYUeadQLWeGW7MCmuOiezPfzHOKXT\/hMqEB\/2Egds2KA7Hm\/oP01r9IU6p42tCtn+I4EWSm5ZkiMAIXP6SCiOdO2PbdtR\/4GK9kZARZpgtLJG+aGmFpRzNAdcgcLMHN2OlX0J6+piruBM7Ww3kqLpZgruCuGx8K+d\/8FApmAeWnLmXbD3fu1T00fGd6fdKrkgCl98Sy4I0iKgJr019SubVPh\/tLfXvOPHFTskrZiab\/lkJMa\/lcaCHUWtHfBuxSsNJt7gody42oqvvYHikEn7VlQJDi\/u8KzU07HljjjoqhCYV678B3YcCsVdGefRzEoUzSdH\/BYJGW+CkosfzR7MiRBWyvn77tCF67oxZ3T5EhVst6OUOt05ejCBeF0j2P8Sa6RL1vPg6TCt7KX5yXzGdJtuRQYFzwHms4Ux+JYQXrmLh2ixoc55gWooUap7xcPOrj9EtgR7efu2PqGQVuytvq6rdV+3QUFA8AufxbPXK507+RBmLMcLcxZAxOp7SQc\/Ay3c\/ORhr+fWLV6VFfX75zufwBySCOGvrbuFXK0SnMVFwylor3lGY2Czl7Y5QKDcK4+FS+SJKTqaxj0EFxa2D+DbGLwbVt3zt9+tPhI+pr7vL0LtIL0O055Y3MLTTiVoB4FnEuGzQivRnPbXzFFcdCIUDcAh26XtB4LCpmd+fBTcLafa5ZKQ2nsR\/2LH7kpZxim50Hcvtyd5PzGPwKSVk2Q+psnZ0IehfsbwhALTs\/RQSOb7Rq41AGgy7OAH5YvpBKSd7qUDfb1gtLh6EIYhMprEuGvAg42lOnEYktaA8Y0X4PyM72xSTA9ZN+CxfcvwiIlvHf11TL5C5ZRBUy3du\/RJjPcfxsjqIdqVfXMDys4DGOvXOODvANQyMdpD2WSRWTBduQ+1useq7xNugt3rmAScfUohAT\/giN4TexFk96WUfGs376rRqExitzbuece0s6lptdaN+3sKDC1NFILlW4MQPBHpc3ComgefM9jAmeqLxMUur1iJW82d2i1F5BNiRpTZEFf7MD9poIBJjCCASKgAwIBEqKCARkEggEVQDvO7+WVQbXswJT\/WKenjoLOTOUb7xtnQSDSvTALA7cFBjKmG7py2Ll3YHsUrZQaKL2ZgS2bNcKYx\/3+lfvv+kAlvcN39ExBH9j9AGm8H1cRnFwNhRWCETnioXg\/P1Y2p+e3F0h6bOneEdLiePwHJv9FonrRV61HKyJDpzH6E0h5BR7t2eo\/60DJORIRuiguwoofBgNuIj9IIWatzAufVetcbqrWIpOgXa8Tl5itQ\/bI2zF6hwUS3TRThkmm+Lz7J7LBceoySEetzaEsRZtQYN6tENYmlD5+VEJvmJ\/Gk593lHeRAE07ZMXwY1fmEib\/vL\/sBgCUMH7CIYMAL4GjstMrJCbIeZhyoYmoahgOuedSq46aMw==","pkt_caplen":1498,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1549337929816,"flow_last_seen":1549337929816,"flow_tot_l4_data_len":2915,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":1457,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49160,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1549337929817,"flow_last_seen":1549337929817,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49156,"dst_port":445,"l4_proto":"tcp"}
+0690{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":281,"pkt":"pB9ywglqAAgCHEeuCABFAAELACpAAIAGkNGsEAjJrBAICMAEAb1XsKRSOc8tT1AYAP5XOQAAtEaCpoUNMQEcRu8rXL+flRkpXPhHudnte7juaoAeTLu\/yTOr\/klMHDKYHSz0JIIsigIVsBaMl3PyJLoeb\/thjoYGSwkEC2m4nRdpRXAof0BuI3WnXPinh7MhPVCaTGyJNfqfVu\/1dc4+HXKYy76MWWV4zUtzQAeAZlVdIbuoLUlvFXjFSw5Ryb7lDA5ay5XLMnQY1U2bYUt6MYxBsLvHXZpUwBGPjxstpVTddlgnyYV1MOsJQv5Du0utIGTzTo6LpQrGUrUbi+j64I7Cmr+KeRuwdhEzhGbc+mJlwRYjD6cvIxA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":314,"pkt":"AAgCHEeupB9ywglqCABFAAEsEydAAIAGfbOsEAgIrBAIyQG9wAQ5zy1PV7ClNVAYAQBD3AAAAAABAP5TTUJAAAEAAAAAAAEAHwAJAAAAAAAAAAIAAAAAAAAA\/\/4AAAAAAABZAAAAAAQAAM9KX1xrFqd60K9wkt\/rc1cJAAAASAC4AKGBtTCBsqADCgEAoQsGCSqGSIL3EgECAqKBnQSBmmCBlwYJKoZIhvcSAQICAgBvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbaDd4i7\/ItyR1a9jC52avEiTOhersM4IXB2s8eeK3O+ftonNzS3toSakh8sE2tBVm3gbqMBKq1zSZzBBR6cu+Hrjxp\/3xoJEFPVC\/4y\/BWmosce7zt2RHazTIcgt7F0qD+5oY0gWkTgMB+VU0Ro=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1549337929981,"flow_last_seen":1549337929981,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49162,"dst_port":88,"l4_proto":"tcp"}
+0591{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":207,"pkt":"pB9ywglqAAgCHEeuCABFAADBADZAAIAGkQ+sEAjJrBAICMAKAFgVCzarRRAS7FAYAQB2LAAAqoGWMIGToAMCARKigYsEgYi0+C7lIM6lpWfLcf2ezyusajpC0TYc1OX1vmb3DhkyjRtC5TeZRg9Wzt\/ubCTSXWpwv+zrJOhZpUKxM\/PhogQbKSmJJuvTC3n4CxJc9SponZNFKF1Kt9\/yiDsesCZaEKdbgZEf1rZ1aHAiihciexKw\/Qr8RPyDjBEhr0yc0K8+XP7zeT3kqKdm","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":180,"pkt":"AAgCHEeupB9ywglqCABFAACmEzJAAIAGfi6sEAgIrBAIyQBYwApFEBigFQs3RFAYAQCNWQAABoWQU5dMx7s3k7lFXcqa6uoE3YqM179MtGFm5Pp0PzGMSHM6ikhCYuxEbF8vf630PDV4M+ymDkgmnA6LZ83pNOsEhGLNGEwQsGjuja+QpA2dd9fjedDg4z2eYZ9DeqXNfMVtviu+Fd00prhwc+9nnU9I900bDPmSAhZM9lsL","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1549337929983,"flow_last_seen":1549337929983,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49161,"dst_port":389,"l4_proto":"tcp"}
+0748{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":320,"pkt":"pB9ywglqAAgCHEeuCABFAAEyADpAAIAGkJqsEAjJrBAICMAJAYUOQjJnSJfL+1AYAQBrWQAA8TZc0LDMp13P2bhHUwE3wC3znhyPA6u84KleikgMfgmc3jalHTIxDwXMnjy\/W4F7\/2WZoUcx2XOew9rGWayLePl5BZIz7shN5PFXYJc\/9PAyv29TC7M2XLiMKexhyeYlRE9uvUtK9DAnR\/ttWEC9zdC56cQON1H8q936tfR+Slz7RKm2uwASDHI8fSFcEQQxtgqaAo4BBsj3qlqLB0lXoxQ8eGOcEVy2\/38vMlSj+c\/3tdAxc+T2J+ChqVKK6Ti6p9NJhgfdb6n6Fkr1nJ\/E0PHo7Ab3tBkqkSpNzV9oaIDc\/AnEKYXHdAsdm\/IAEKeNDZ3xj3dnB41oCyCZcvi9r2HqvrS9bMHFZEs=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337929,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6EzZAAIAGfdasEAgIrBAIyQGFwAlIl8v7DkIzcVAYAQBePQAAMIQAAADMAgEDYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1fPlG7bKWdrh2HD6cpz+MijBmfhDcDSHRgxosMnwcbCi1ZRnrViGBtMC2nQv6mVUDSJapX\/mZgtc4l9ALb+\/jokxskSCIt0GZfBXlBh6SOp7g9nc\/2WT4mG5e+fctttNW4KixsBWTLsk4U0TsD","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1549337930192,"flow_last_seen":1549337930192,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49166,"dst_port":88,"l4_proto":"tcp"}
+0705{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":293,"pkt":"pB9ywglqAAgCHEeuCABFAAEXAE9AAIAGkKCsEAjJrBAICMAOAFh1zEKiBQpS4FAYAQB22wAAAAAA62qB6DCB5aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBwTCBvqAHAwUAQIEAEKEYMBagAwIBAaEPMA0bC2pvaG5zb24tcGMkohAbDkhBUFBZQ1JBRlQuT1JHoyMwIaADAgECoRowGBsGa3JidGd0Gw5IQVBQWUNSQUZULk9SR6URGA8yMDM3MDkxMzAyNDgwNVqmERgPMjAzNzA5MTMwMjQ4MDVapwYCBE6HHTSoFTATAgESAgERAgEXAgEYAgL\/eQIBA6kdMBswGaADAgEUoRIEEEpPSE5TT04tUEMgICAgICA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":332,"pkt":"AAgCHEeupB9ywglqCABFAAE+E0ZAAIAGfYKsEAgIrBAIyQBYwA4FClLgdcxDkVAYAQCvKAAAAAABEn6CAQ4wggEKoAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg0OFqlBQIDDGWApgMCARmpEBsOSEFQUFlDUkFGVC5PUkeqIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHrIGnBIGkMIGhMH6hAwIBE6J3BHUwczA0oAMCARKhLRsrSEFQUFlDUkFGVC5PUkdob3N0am9obnNvbi1wYy5oYXBweWNyYWZ0Lm9yZzAFoAMCARcwNKADAgEDoS0bK0hBUFBZQ1JBRlQuT1JHaG9zdGpvaG5zb24tcGMuaGFwcHljcmFmdC5vcmcwCaEDAgECogIEADAJoQMCARCiAgQAMAmhAwIBD6ICBAA=","pkt_caplen":332,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1549337930214,"flow_last_seen":1549337930214,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49167,"dst_port":88,"l4_proto":"tcp"}
+0812{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":373,"pkt":"pB9ywglqAAgCHEeuCABFAAFnAFNAAIAGkEysEAjJrBAICMAPAFhOqMfQDl0Bb1AYAQBFdgAAAAABO2qCATcwggEzoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4T+8E3pUi7h1ZsZOoIXjjwvAQAgQGpJXHn0jgIAIbXQei+GxBZQViNO7UVdhzj5KUys1PXrvG2C8wEaEEAgIAgKIJBAcwBaADAQH\/pIHBMIG+oAcDBQBAgQAQoRgwFqADAgEBoQ8wDRsLam9obnNvbi1wYySiEBsOSEFQUFlDUkFGVC5PUkejIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIETocdNKgVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":166,"pkt":"AAgCHEeupB9ywglqCABFAACYE0tAAIAGfiOsEAgIrBAIyQBYwA8OXQcjTqjJD1AYAQBZNwAAQBgDyB6VZPxID+fu9kcivDlP7463Dy1IfrYrHVzuJLB3P27gpkccW43Mtu3NrktwKAyme0Z0QNo0JvH3ppwCLvPborHS7i5Jp9I5pxLf5LZX6AlmVea2udQa4ufUWkijqzhrShLiqrevOUKPGzj2OQ==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1549337930217,"flow_last_seen":1549337930217,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49168,"dst_port":88,"l4_proto":"tcp"}
+0591{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":207,"pkt":"pB9ywglqAAgCHEeuCABFAADBAFlAAIAGkOysEAjJrBAICMAQAFhuA\/SQrSTVxVAYAQACWAAAqoGWMIGToAMCARKigYsEgYhFQhzXcnmj64Ly0uBtjkMUoTuM+x\/rpAOTUWDkUHAspBDcB8geScaOnqOyTgnIEt9ORSbyaLGh7aDpqWoX8LkoU9AsGNn4U6LRjikWi59PfjQn46P9BY0tn6JOEZn\/IKW+bzyhJYK72MU5dfE\/Y9v1QP4pOcMGsyTXEkOUPDq6y5KpwHUNPs1e","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":180,"pkt":"AAgCHEeupB9ywglqCABFAACmE1FAAIAGfg+sEAgIrBAIyQBYwBCtJNt5bgP1KVAYAQC1BwAApQG9zo7oa2HyeKU61c2m29Ax+Ioczo4ZbPhC81jR0pDanr7lBKhJeMuGW\/uva7FyAslnHaJSlZ\/JCHVy9T8T0Ut1tj8cqy\/o\/YC+6XwQJV1\/l63dulAmK8KMVnuSbTDSVBQ5iahKxwLlZ8cbK3LMBirQeX8FcESDlzlIPsVQ","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1549337930219,"flow_last_seen":1549337930219,"flow_tot_l4_data_len":395,"flow_min_l4_data_len":395,"flow_max_l4_data_len":395,"flow_avg_l4_data_len":395,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49165,"dst_port":49155,"l4_proto":"tcp"}
+0890{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":429,"pkt":"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","pkt_caplen":429,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":338,"pkt":"AAgCHEeupB9ywglqCABFAAFEE1VAAIAGfW2sEAgIrBAIycADwA2zKyf0U0aPtVAYAQCiqgAABQAMBxAAAAAcAagAAgAAANAW0BaHIgAABgA0OTE1NQADAAAAAgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMFcXG6vjdJgxm12++czDYBAAAAAwADAAAAAAAAAAAAAAAAAAAAAAAAAAAACQYAAAAAAAChgaUwgaKgAwoBAaELBgkqhkiC9xIBAgKigY0EgYpvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbZHvDki757uIRa6348vky4CmSXJcuY8x7Y1L3GMPoboaFC4AmaVBuECBYLv9qMZx8MRhhEX3NAubRHjTv4BhutqH0onvuRNc5YNBgbuLmx\/PeM5pC\/bambRC96DP0B9XtGxHF5b6I04IhLGs2Ss=","pkt_caplen":338,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337930,"pkt_len":274,"pkt":"pB9ywglqAAgCHEeuCABFAAEEAF5AAIAGkKSsEAjJrBAICMANwANTRo+1syspEFAYAP\/w8AAABQAOAxAAAADcAIwAAgAAANAW0BYAAAAAAQAAAAEAAQA1QlHjBkvREasEAMBPwtzSBAAAADMFcXG6vjdJgxm12++czDYBAAAACQYAAAAAAAChgYkwgYagAwoBAaJfBF1vWzBZoAMCAQWhAwIBD6JNMEugAwIBEqJEBEJ\/MyGgG2X9jllu+ZB+MxLzLgKVhkidSZOf9UFj0HoVGhQSTvPAIV6ETXdthgzo7fJnzn1QgLAxGW+unJjrxZzV2yGjHgQcBAQE\/\/\/\/\/\/8AAAAAToOoIEtcH3O\/XLUOvcMURw==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1549337931189,"flow_last_seen":1549337931189,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":262,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":262,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49169,"dst_port":389,"l4_proto":"tcp"}
+0713{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":296,"pkt":"pB9ywglqAAgCHEeuCABFAAEaAHBAAIAGkHysEAjJrBAICMARAYXGiPwnAgHw6FAYAQD72QAAHIAjHF8ymtjcD1VQuy4UgRChAu\/ekRMgcpsydbeCEgGc8O49XcEm2dIOQUYWz5jyNJ04mLjuLVb5JED7bXFEp0Ouk95kXWAsbhG+yaFiTruRiQNLefpIfBd02fAN9rH6kVBTVFVzTavxG5ZN46Q2CRurERdYtT07E7VAGTF+6yWhKn18+hUxFM5IXiI8jM4osfH687+lmO1gN\/3mr3cymHmPLwvBfLQ9P\/qJ62iSz72gALgVKjnTrFQYtji5UhDqTerpDdd7cbCpV4VyQehZ\/3jzwsKcVZtQElZtM7aiTvqbzIsK7RmP3EZFJoQ\/JIQyyhY=","pkt_caplen":296,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6E2FAAIAGfausEAgIrBAIyQGFwBECAfDoxoj9GVAYAQDO8AAAMIQAAADMAgEDYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1TTwhyAF9FVLbWTl8wTaD0aGMw9PDC0vNUorciel2CrkeZRTWRInWV74srNnVapF3vxPYDt7dvyfJVk888MzdKOasNrV1ijuwTfVJ0DIXj985iqAQmj9Mcte2ZOXgI6pFvWB0EEgpCluxB9enG","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1549337931198,"flow_last_seen":1549337931198,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49170,"dst_port":88,"l4_proto":"tcp"}
+0536{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":167,"pkt":"pB9ywglqAAgCHEeuCABFAACZAHRAAIAGkPmsEAjJrBAICMASAFgkNdEgXsLgdFAYAQB+8gAAMUMT6Lk9nd3l4g7meOnydVZeUkzRDUCNbnZ+O2nc5UtCJOGQV8MBRj2azOMjgxpQ1tcViooap1+TILjpjhURvLMTREvy8WPkAKcvtuPHKbLtQ3Ir7HNN6Ftdy+KwiOrOLvSrSyEtUhWZxA6KOnwca9s=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":122,"pkt":"AAgCHEeupB9ywglqCABFAABsE2VAAIAGfjWsEAgIrBAIyQBYwBJewuYoJDXRkVAYAQBPlQAA7mWAsz4LwR11oOSQ27Ex06YGG2bAP8ttVVXtAwxS755lCHRg4mUkpOjXnBJJ8KdHDkkp7LWBSVTLf+j0wkJ4hFVjx0c=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1549337931210,"flow_last_seen":1549337931210,"flow_tot_l4_data_len":1452,"flow_min_l4_data_len":1452,"flow_max_l4_data_len":1452,"flow_avg_l4_data_len":1452,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49171,"dst_port":88,"l4_proto":"tcp"}
+2326{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":1506,"pkt":"AAgCHEeupB9ywglqCABFAAXUE2tAAIAGeMesEAgIrBAIyQBYwBNIHXnmqOSkjlAYAQDmlQAAAAAFqG2CBaQwggWgoAMCAQWhAwIBDaMQGw5IQVBQWUNSQUZULk9SR6QYMBagAwIBAaEPMA0bC0pPSE5TT04tUEMkpYIEOGGCBDQwggQwoAMCAQWhEBsOSEFQUFlDUkFGVC5PUkeiJzAloAMCAQqhHjAcGxpqb2huc29uLXBjJEBIQVBQWUNSQUZULk9SR6OCA+wwggPooAMCARKhAwIBAaKCA9oEggPWM37115K3Hp8wZkASHyq+pZzCB52w4ZkoKvxkfuUu0LiaHFeH\/YmBkYuC+Y2vHUb50xj2RvlJ0VUIhZ76+RSlQ21W8ccYNaNUXAdabNdF58x1VLmlxuTxbWyuhApe3nart0yE2ggJlqq+SXunnCj4pybyo3D5UqYJsd2CPwW\/UrYMlNJN1gTQgtBaL+rVhNBO6KW9AYxQ1t3V4\/aN5W98Rm9mtqvqy8JlwwSbsqtA+fkgyuLhaFI64sFXeg2okoVY+WpiV8y69YH3VrH9iOYXgjNBApUv8XW3Inwsdd+FJTBLBvDWG4tGHW9DGxqpa+jzaFQyiDi46S1MFPNG5ax\/fXZRFVyIKm5Uvcg+IVoFoTv79M+o2izKZu3xW5GT3jmX5joC1Jz2cBBvfj31IPUawr97kChTt3baVrRO5jtj4Qe\/Yf9D1ea6AnOL3m9lXfbWlkiRMtogdbiLBmz40fY6y7s2fBoNzUM7PPtzjMCZD+mzFnuxbn6SKFsq1jRXr1gfhz99U\/sj4rpgf0fGzuAji6\/CldJydoJ3ZF35EbOHxlT67B0T5Wdz2DSGMxMFnFTU2y41IZZAFsQkozjJDlJyV\/H3UNEgpsuzFWCdn70SJWivzXQmU387\/5qoLQgDt1DzqhRxVq84eAlKWowli8llAVqtdeTmpgPePJrGuN8afpBvekjwt\/1CNWyg0EdZHQFfl1jlAEsgIyCski92E8xu8mvOhuDWTPYemtkOSb2FcxtoxHDyT\/GouX7ARs1ZykSB8j3R9t9ImA7xedyZ34sFfJFGRcLyx6qpTKqFmVZRuxhX4QxBOD\/ubH8xUJ\/p2KhM0jR1yUcK5cyCfymWcxTybrHYNySjaI0gUlhRAiWvZM8bRaCC8Fvoak+VMcqFAYw\/ve5dkR7KuJ\/TxqmhnlpwuoDkayoCpyiqZLALWWLzMuA+erM0osdjgnLPkazewgaOuGK+L14eoN40NcSEI4LVjIf3MizcDep1bu4x++f34uKnDRQCxEnEkfmry2Kt7UmB9dRWUyMnIhre\/LcHyWzVYKmQzK4jbAZGQz3E7SgAtaF8YpuFzK+wN7Al3\/bnw+mNGEv8UnWesnu6eYSeTafPkSExr0eHjyMGHylq1SYGRDikN47BEUJ9DRohxwo4GIbZJ4SlXZm2o1CyYrdjxESgLw7oBxv5ojM77+mqWLxxRYcXrNOO62jI7OC10ISrQjw9VRI73l6ie75xGP23mwgzTkWksp2AmXFXEibjsoWoxN\/dqkJ1paHMQ4D49jni4b2qEd7LE7wiCkMzEEz1wgpM028xFWhhGKaCASowggEmoAMCARKiggEdBIIBGXjHjK5feQ4HY+O2QW1CcrS7y98xjbx4G5\/F1UdYW0nRFrJ1ea7DBhGVKjGhvpNRa\/suoiAGgMaTxIusGGUQaAV3QBkZHI2P7w3S90dRv87TwzBiyLZFov6Iyju+rGIOEBeNij1u4+ieA37sl1WxkkeY5PDSqYQ0xi5dzSQDh1ZKJZF1swmboJUdCNAO5zs9II914vVd0a+gpHqPPfi\/aa\/2ENYesIfYc445XBAksieN4OCiUuXDZetEyUARPhuFnigdmrFcLiKa7lrUb+XOxw\/TpGzrNeFBj3QXNS06SOOdTL3pwlP77\/SR+78shwDam4sOlgv2UEV2H31TfNEKJs\/OC4Ks1WD8+3srLETa3NVngdje5im6AaSi","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1549337931210,"flow_last_seen":1549337931211,"flow_tot_l4_data_len":2924,"flow_min_l4_data_len":1452,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1462,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49171,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1549337931211,"flow_last_seen":1549337931211,"flow_tot_l4_data_len":1084,"flow_min_l4_data_len":1084,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":1084,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49173,"dst_port":88,"l4_proto":"tcp"}
+1824{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":1118,"pkt":"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","pkt_caplen":1118,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1549337931211,"flow_last_seen":1549337931211,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":262,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":262,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49172,"dst_port":389,"l4_proto":"tcp"}
+0714{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":296,"pkt":"pB9ywglqAAgCHEeuCABFAAEaAINAAIAGkGmsEAjJrBAICMAUAYWVZlyUeqXAF1AYAQAMZQAAADzwgZ4odBCJHRYlGGakwQrZbcEXWu9XXnYRAfBS9UWuXk5Gs8yUHN3o80HZG8YpVlAE6+3ZtDtC+pUsrywDAW4RiWhUhsRgT1sEZ7Vtb++mdY4XtnskLm1\/a8GZzwfpptF0EbEM2x6OOlhhC6IhVJD1Y8p9M\/8ToLfUByDVk8u4C3VF8fyeQ0nd00U5YKsyBV8n8IUXdemUN+fgHev0R3Z+H9FwOZZ3xgduPU1Vapfbai\/N6Y9ZMkNd8RzvF1IldwQMemLuz0F0TTbyd784T8orT0ooc+nzAjFSSfg1FeelCx\/Q2\/iHKtSIZWhWBK\/UpxM=","pkt_caplen":296,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":190,"pkt":"AAgCHEeupB9ywglqCABFAACwE3FAAIAGfeWsEAgIrBAIyQBYwBWLIyaf550WwVAYAQCWAgAAAAAAhH6BgTB\/oAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg0OVqlBQIDDJwypgMCAQ2pEBsOSEFQUFlDUkFGVC5PUkeqJzAloAMCAQqhHjAcGxpqb2huc29uLXBjJEBIQVBQWUNSQUZULk9SR6wZBBcwFaEDAgEDog4EDLsAAMAAAAAAAwAAAA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6E3RAAIAGfZisEAgIrBAIyQGFwBR6pcAXlWZdhlAYAQAZvwAAMIQAAADMAgEHYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG3yZsLFskNz2Tj8maOz7vLNMVSC3wBerc1xRFPj0GLDPGT9QlZRJav62bndhsIjLkgXNAdSqCa2GR8Luxe5TgJHZoIn44Is8Ku3wpqAc9pR3m8qLfoA6VkyZzzulSM2YJ4KniKJ4c7+rlJkc3DH","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1549337931218,"flow_last_seen":1549337931218,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49175,"dst_port":88,"l4_proto":"tcp"}
+0570{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":191,"pkt":"pB9ywglqAAgCHEeuCABFAACxAI5AAIAGkMesEAjJrBAICMAXAFhuRvAsCoQzw1AYAQDQpAAAiAqFUHJzV5J+NXZTIhoIU8GbmBSxYcQbV4PW+ckPMTgFBw0KsYU9otlYXn6Tyj5\/BmOv8b2TCLvhZTzW6Z3PoLeUqFO88\/fWi+AgP8mYvV1NNCnNorn77cmRI2eXkDk7qLKlgMm4cUN+eWFUE7G2Z1e9ZdF2LM4CSirBRuN96IFr6Z0blZRnqpw=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":169,"pkt":"AAgCHEeupB9ywglqCABFAACbE31AAIAGfe6sEAgIrBAIyQBYwBcKhDl3bkbwtVAYAQD\/bQAAzmwvcX+5XppDtJZXr9PwDYLsp98Hk08TTktA1oPPxQHxyFPFFH6C9d30u8d8saioSDapQyKHHyGt004ct60erCJP9bUby12IBGHwYva7Ha2y2bxZxEn3nV+8BQON\/a2dluoxZFHPI4urPpSWS9H8dnzG6Q==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1549337931219,"flow_last_seen":1549337931219,"flow_tot_l4_data_len":1451,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1451,"flow_avg_l4_data_len":1451,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49176,"dst_port":88,"l4_proto":"tcp"}
+2325{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":1485,"pkt":"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","pkt_caplen":1485,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":1498,"pkt":"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","pkt_caplen":1498,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1549337931219,"flow_last_seen":1549337931220,"flow_tot_l4_data_len":2915,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":1457,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49176,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1549337931220,"flow_last_seen":1549337931220,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":247,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":247,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49174,"dst_port":445,"l4_proto":"tcp"}
+0697{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":281,"pkt":"pB9ywglqAAgCHEeuCABFAAELAJhAAIAGkGOsEAjJrBAICMAWAb2ZMOb++YgxIFAYAP+McAAAQFskZ7b1ZYO5\/CuVOTe3ZqHs3nhqe1KXhnlBtJ\/qDgyo+sduQpC\/WLkmAdUvTJdV+CtGiwLoGf3Uio50ZE6gilnFEbzLLhzMIw4gwhRvlYwapNctw4G2EkpKfWO1MgMQ0yTGVxtfwAuP0ouYkDi\/6FI97AzDGvp\/R2LK19PAI403fVWk1Cbb2O\/YPOGH5a8hHowuR6tT8UugHDdGGl\/fWl8Wk4rCdi\/3gOYAhRVI6o2ZOHpv4GeBlLgJ6L2WL35O3jhh2e2dr0Fkd\/WG3ET2QLw9x3WRfncFn29f8nOqAUQDRH0=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0739{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337931,"pkt_len":314,"pkt":"AAgCHEeupB9ywglqCABFAAEsE4VAAIAGfVWsEAgIrBAIyQG9wBb5iDEgmTDn4VAYAP9zWgAAAAABAP5TTUJAAAEAAAAAAAEAHwAJAAAAAAAAAAEAAAAAAAAA\/\/4AAAAAAABdAAAAAAQAAPvWvNgjH\/I48OPxOa5H7a4JAAAASAC4AKGBtTCBsqADCgEAoQsGCSqGSIL3EgECAqKBnQSBmmCBlwYJKoZIhvcSAQICAgBvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbUswX\/mwh6g2ztwHi8\/dTRtvFzo0LVENq7tttT0JwVpKoIxijjsysss5HuCbI3DQGU7C0ILmrl+8phtVtu+2vBMSA9FKWe75R\/a+ST6oEaoDrDjzWfPqdU4xUCgD\/zK6J0O4Dsk+rO8nhy4LUmk=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1549337937690,"flow_last_seen":1549337937690,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49179,"dst_port":389,"l4_proto":"tcp"}
+0745{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":320,"pkt":"pB9ywglqAAgCHEeuCABFAAEyAM1AAIAGkAesEAjJrBAICMAbAYXq\/lHZFzDO61AYAQB3VwAADK3yhyWG\/w4ePjAcLdmQD9l5KJpA6NxzQuCtaFM+te5CWXRB5sUkdKJyUVp4kqyFJvIav1zvlLEwv\/M6QDvIyPip6cO\/Y7DDZ55OmD6IlKO8Nx5lANmfdaxcK4l74ZAlM45v2cQu8OV3yuWKq5L2jtnHunCltg9I9Mqjq93VmxUc7poK8vfSfY1YgBhAmlp0cXMsoyIbcEQodelj3wLBZ2oxItwV78GGNt7TlfW6joQ5wfkj6ZEyRFJn0CVihbNqYYKxBD44uauIJQKkPsQlzXsxooh9lhiWoZtuh5F2\/1LO7drek9zYg6pqUFpyhpL3WcFxh3R7Uuv9RQ5CYfOoVItdeOxn2w53bU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6E5tAAIAGfXGsEAgIrBAIyQGFwBsXMM7r6v5S41AYAQDOWAAAMIQAAADMAgEDYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1JH5VWFTlwrbTZZZgbjZtW4QY+VaIr2rFT9\/AbDkv31Idx3xo24Bwzqv50t5zQXx7Id1H\/iLYt+nRqN0NWzCDJwnAfwcbOTGF30f3qnaqB+vDQ9EhQX38cpSy926C3lIc0Vkhc+VaaHdh510+B","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1549337937700,"flow_last_seen":1549337937700,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49180,"dst_port":389,"l4_proto":"tcp"}
+0748{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":320,"pkt":"pB9ywglqAAgCHEeuCABFAAEyANVAAIAGj\/+sEAjJrBAICMAcAYWCU2zwSN6TcFAYAQDS2QAAEgduSF05n8MFVjy4LWbkIsui7POF\/jI0fgAi3\/kn4+lZJrv4uo1Xj0IHKshBaLfyrICuzZtbBAFYjLvQz7y8gyRTfkwzadmnUFntTq1Eam1s4n2Qhfn1fuSUa5DAR1i941DEujmYu8fTZX3tp1hllqkxXisHcqSEIi8W9weLGXgpYEZYoErMkYejHKEeDmPCwQO6JC7sDmP8cAErQb7Rc88wLF4lFI7xOIE4FiH\/05afA1w9V5d1P2yDaGB6bADs\/c2xi7QKQuP+FixF4gof0ovK0nwq\/y7Hd27V4SQ4qHRNlXJex92QoEPhio00QFq1bLTnuvdcqFYcMu\/6\/tRVEcFKp0ezr7WF5MI=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6E6JAAIAGfWqsEAgIrBAIyQGFwBxI3pNwglNt+lAYAQCvQgAAMIQAAADMAgEKYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG2EupGhqTVA+Kxm5vIdkbfFjlPoe8DmjpF\/p2I3j7EwFjqQzavz5jy+cGzZKn09a9y0dyj\/mpeHcqpjjORB3KYfxKGHrDmiKKSYiCwqx86ee7rLKiQPX2z3RSwNa4fWz8uAjgw+I5CkXYbP6rNu","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1549337937703,"flow_last_seen":1549337937703,"flow_tot_l4_data_len":259,"flow_min_l4_data_len":259,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":259,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49181,"dst_port":88,"l4_proto":"tcp"}
+0706{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":293,"pkt":"pB9ywglqAAgCHEeuCABFAAEXANlAAIAGkBasEAjJrBAICMAdAFjHhcaiuhdcXlAYAQCv5QAAAAAA62qB6DCB5aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBwTCBvqAHAwUAQIEAEKEYMBagAwIBAaEPMA0bC0pPSE5TT04tUEMkohAbDkhBUFBZQ1JBRlQuT1JHoyMwIaADAgECoRowGBsGa3JidGd0Gw5IQVBQWUNSQUZULk9SR6URGA8yMDM3MDkxMzAyNDgwNVqmERgPMjAzNzA5MTMwMjQ4MDVapwYCBFIcW1KoFTATAgESAgERAgEXAgEYAgL\/eQIBA6kdMBswGaADAgEUoRIEEEpPSE5TT04tUEMgICAgICA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":332,"pkt":"AAgCHEeupB9ywglqCABFAAE+E6VAAIAGfSOsEAgIrBAIyQBYwB26F1xex4XHkVAYAQDp0AAAAAABEn6CAQ4wggEKoAMCAQWhAwIBHqQRGA8yMDE5MDIwNTAzMzg1NlqlBQIDBJWNpgMCARmpEBsOSEFQUFlDUkFGVC5PUkeqIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHrIGnBIGkMIGhMH6hAwIBE6J3BHUwczA0oAMCARKhLRsrSEFQUFlDUkFGVC5PUkdob3N0am9obnNvbi1wYy5oYXBweWNyYWZ0Lm9yZzAFoAMCARcwNKADAgEDoS0bK0hBUFBZQ1JBRlQuT1JHaG9zdGpvaG5zb24tcGMuaGFwcHljcmFmdC5vcmcwCaEDAgECogIEADAJoQMCARCiAgQAMAmhAwIBD6ICBAA=","pkt_caplen":332,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1549337937724,"flow_last_seen":1549337937724,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":339,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49182,"dst_port":88,"l4_proto":"tcp"}
+0817{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":373,"pkt":"pB9ywglqAAgCHEeuCABFAAFnAN1AAIAGj8KsEAjJrBAICMAeAFgo\/29go\/Vk0VAYAQAVQgAAAAABO2qCATcwggEzoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4EwWkoanvLUiVA5eu8uG72\/EPy4+eHAiK9HbftleuqZ7DwBR\/wY3Sc5USTXPr6SJXdlLH8zfIE5MwEaEEAgIAgKIJBAcwBaADAQH\/pIHBMIG+oAcDBQBAgQAQoRgwFqADAgEBoQ8wDRsLSk9ITlNPTi1QQySiEBsOSEFQUFlDUkFGVC5PUkejIzAhoAMCAQKhGjAYGwZrcmJ0Z3QbDkhBUFBZQ1JBRlQuT1JHpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIEUhxbUqgVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":166,"pkt":"AAgCHEeupB9ywglqCABFAACYE6pAAIAGfcSsEAgIrBAIyQBYwB6j9WqFKP9wn1AYAQCbeQAAeBxjGZR555TmhlGtfWdB3hqYo6lYswe6vKpNUcrN1M7KGcxMIdPLYhZ04dECjGI6ypolTWuvt884Bi2lq0pIFbZFVKD3x\/BnUesSWAB9L0qg+5NPzwAEggckaZSGKHdd5sXD0ux4MNvoyw986qY1Nw==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1549337937725,"flow_last_seen":1549337937725,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":100,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":100,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49183,"dst_port":88,"l4_proto":"tcp"}
+0497{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":134,"pkt":"pB9ywglqAAgCHEeuCABFAAB4AONAAIAGkKusEAjJrBAICMAfAFi1TK\/3YmHJT1AYAQDj2wAAbj2wbk+derrxO0c0pxRSdruhR6\/j4Ui\/xNsBa8OfbfRkbAwdywbQynHUORFcFH8maukxsoLa+OhvD2a5+zDPKPlneJ\/sg2b\/GuIvr5ZD3Bg=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337937,"pkt_len":94,"pkt":"AAgCHEeupB9ywglqCABFAABQE7BAAIAGfgasEAgIrBAIyQBYwB9iYc8DtUywR1AYAQDGTwAA4zLECSz5GZPNqNSL4T5BMx8WrZoQ8TiJymulR2VkZN3O1rD+5YXABg==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1549337940431,"flow_last_seen":1549337940431,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49186,"dst_port":88,"l4_proto":"tcp"}
+0570{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337940,"pkt_len":191,"pkt":"pB9ywglqAAgCHEeuCABFAACxAPpAAIAGkFusEAjJrBAICMAiAFjJGNiQqlyd6VAYAQDPPQAAiJisSNul39yNkXIaZ7I9abKKHsFn\/6nUnlpuYlwP2aMvOAIHPA5TwBaAhiWq+tFyYupNZpDDILw6OTtdBUx9AScUIqcHtp8iuHt0kMVzTn\/4u2MWOJ3B5oBzCaRbB4JGSnxRjDJCJirb6nGFgBI0LOLujBAlXiGb5mYfdXtWDkYlEBJfjMNCAaw=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337940,"pkt_len":169,"pkt":"AAgCHEeupB9ywglqCABFAACbE79AAIAGfaysEAgIrBAIyQBYwCKqXKOdyRjZGVAYAQDDTwAAKYg87lVL35oh62EWNwE864\/2bfnOQr1tnnHZbVGEslhqWgqxgOlP8fU7tCl8Q\/Pa+OiAoCN8WQQSqJd8h73HLCORGVTkV2\/0V8MyUM0yQH1SL9l7PdXJm7IP\/IVn+E9KcR0nyC\/qPtxkWFJAw4YHnIb0GQ==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1549337940432,"flow_last_seen":1549337940432,"flow_tot_l4_data_len":379,"flow_min_l4_data_len":379,"flow_max_l4_data_len":379,"flow_avg_l4_data_len":379,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49185,"dst_port":49155,"l4_proto":"tcp"}
+0866{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337940,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337940,"pkt_len":338,"pkt":"AAgCHEeupB9ywglqCABFAAFEE8NAAIAGfP+sEAgIrBAIycADwCFAmQlcGVsd51AYAQDbOQAABQAMBxAAAAAcAagAAgAAANAW0BaIIgAABgA0OTE1NQADAAAAAgACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMFcXG6vjdJgxm12++czDYBAAAAAwADAAAAAAAAAAAAAAAAAAAAAAAAAAAACQYAAAAAAAChgaUwgaKgAwoBAaELBgkqhkiC9xIBAgKigY0EgYpvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8Ebfn2lEYLCMVIVfFxnfrMpLLQ5jje4X2obHkLE1mHLBb3QYmIfBpDW5VyIgGbPY54D9aSU3VouXp90Sdg8ibesBCnHqUH+HJX\/hdQ0brTNgFSTOR\/m3sdIfIuZmQkzV3dPMC5PlxnwhbW8ZWYvQE=","pkt_caplen":338,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337940,"pkt_len":274,"pkt":"pB9ywglqAAgCHEeuCABFAAEEAP9AAIAGkAOsEAjJrBAICMAhwAMZWx3nQJkKeFAYAP\/gGgAABQAOAxAAAADcAIwAAgAAANAW0BYAAAAAAQAAAAEAAQA1QlHjBkvREasEAMBPwtzSBAAAADMFcXG6vjdJgxm12++czDYBAAAACQYAAAAAAAChgYkwgYagAwoBAaJfBF1vWzBZoAMCAQWhAwIBD6JNMEugAwIBEqJEBELB6nut18jCMG03H8TJyLvCf8wWF6F7BqJ4bg85nSMTOiCmzGy+a5tNrq0VYdAt2TCIZ2p1Ys\/DpnWvcPxOp0LCSoajHgQcBAQE\/\/\/\/\/\/8AAAAAVL504MDCo+3fnXZuQhY33A==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1549337951630,"flow_last_seen":1549337951630,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49187,"dst_port":88,"l4_proto":"tcp"}
+0701{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":289,"pkt":"pB9ywglqAAgCHEeuCABFAAETAQ1AAIAGj+asEAjJrBAICMAjAFj9jJo6lSyMo1AYAQB4vAAAAAAA52qB5DCB4aEDAgEFogMCAQqjFTATMBGhBAICAICiCQQHMAWgAwEB\/6SBvTCBuqAHAwUAQIEAEKEcMBqgAwIBAaETMBEbD3RoZXJlc2Euam9obnNvbqIMGwpIQVBQWUNSQUZUox8wHaADAgECoRYwFBsGa3JidGd0GwpIQVBQWUNSQUZUpREYDzIwMzcwOTEzMDI0ODA1WqYRGA8yMDM3MDkxMzAyNDgwNVqnBgIEXdv8Z6gVMBMCARICARECARcCARgCAv95AgEDqR0wGzAZoAMCARShEgQQSk9ITlNPTi1QQyAgICAgIA==","pkt_caplen":289,"pkt_type":2048,"pkt_ipoffset":14}
+0705{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":294,"pkt":"AAgCHEeupB9ywglqCABFAAEYE9dAAIAGfResEAgIrBAIyQBYwCOVLIyj\/YybJVAYAQAREAAAAAAA7H6B6TCB5qADAgEFoQMCAR6kERgPMjAxOTAyMDUwMzM5MTBapQUCAwNKZqYDAgEZqQwbCkhBUFBZQ1JBRlSqHzAdoAMCAQKhFjAUGwZrcmJ0Z3QbCkhBUFBZQ1JBRlSsgYsEgYgwgYUwYqEDAgETolsEWTBXMCagAwIBEqEfGx1IQVBQWUNSQUZULk9SR3RoZXJlc2Euam9obnNvbjAFoAMCARcwJqADAgEDoR8bHUhBUFBZQ1JBRlQuT1JHdGhlcmVzYS5qb2huc29uMAmhAwIBAqICBAAwCaEDAgEQogIEADAJoQMCAQ+iAgQA","pkt_caplen":294,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1549337951638,"flow_last_seen":1549337951638,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":335,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":335,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49188,"dst_port":88,"l4_proto":"tcp"}
+0809{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":369,"pkt":"pB9ywglqAAgCHEeuCABFAAFjARFAAIAGj5KsEAjJrBAICMAkAFi0GLZOsNNMHlAYAQAvMAAAAAABN2qCATMwggEvoQMCAQWiAwIBCqNjMGEwTKEDAgECokUEQzBBoAMCARKiOgQ4Wndh9xw8qUUtso0vc8TuP9R5peLYlUKrIi93QkMXsrfVII\/B8UhLSOwTSHwq5LSHP2vURJP\/YpgwEaEEAgIAgKIJBAcwBaADAQH\/pIG9MIG6oAcDBQBAgQAQoRwwGqADAgEBoRMwERsPdGhlcmVzYS5qb2huc29uogwbCkhBUFBZQ1JBRlSjHzAdoAMCAQKhFjAUGwZrcmJ0Z3QbCkhBUFBZQ1JBRlSlERgPMjAzNzA5MTMwMjQ4MDVaphEYDzIwMzcwOTEzMDI0ODA1WqcGAgRd2\/xnqBUwEwIBEgIBEQIBFwIBGAIC\/3kCAQOpHTAbMBmgAwIBFKESBBBKT0hOU09OLVBDICAgICAg","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":216,"pkt":"AAgCHEeupB9ywglqCABFAADKE9xAAIAGfWCsEAgIrBAIyQBYwCSw01HStBi3iVAYAQA+gAAAtgxIRqdE2xpJueUsyACfoBkRIO2d0vdWoZTH7\/Uq\/IekfUoxUBvBS550+iWChkmhJucRdY1OlQL1WMQC8uhxGdFWaESvp\/JzESFsbwdEK2JaAYNNrn2MyR4+4w4oYIB6xP3aoFYA9y5s01X0oEa\/3ePvjWb66V7pwZZYO9bc89yozmxDtVb4zCT8SyPCYGj7ljiOz9w+sICchbsKK+VkdLL4","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1549337951639,"flow_last_seen":1549337951639,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49189,"dst_port":88,"l4_proto":"tcp"}
+0440{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":95,"pkt":"pB9ywglqAAgCHEeuCABFAABRARdAAIAGkJ6sEAjJrBAICMAlAFiRlp2kV2CH+1AYAQDPTQAAMzcwOTEzMDI0ODA1WqcGAgRd2\/xvqBIwEAIBEgIBEQIBFwIBGAIC\/3k=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":120,"pkt":"AAgCHEeupB9ywglqCABFAABqE+JAAIAGfbqsEAgIrBAIyQBYwCVXYI2vkZadzVAYAQBXRgAAQS6YdBRcDlPtUTrjUB8narHoPerU+E0Jfux+IwijhqkO1zkqtUVGrf6H2Py3dE6xzPm7+U9W58\/67z4LH\/YlBX9v","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1549337951709,"flow_last_seen":1549337951709,"flow_tot_l4_data_len":237,"flow_min_l4_data_len":237,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":237,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49190,"dst_port":88,"l4_proto":"tcp"}
+0680{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":271,"pkt":"pB9ywglqAAgCHEeuCABFAAEBAR5AAIAGj+esEAjJrBAICMAmAFg7QE\/YI2nTKVAYAQALhgAAZxsOaGFwcHljcmFmdC5vcmelERgPMjAzNzA5MTMwMjQ4MDVapwYCBF3PyFqoEjAQAgESAgERAgEXAgEYAgL\/eaqBljCBk6ADAgESooGLBIGIqYCMNPGCrPeLGO9qPK8YFBfjHxUTb+emA\/ivLTUTYudncy22kbyckKCiSeisUe8yJ84rq8HDegGsl0qK5XKbjnVH8LqImnH6XpTRvHWQpRpTszA\/lJoaM6MWsPPKugansbtAh5mO54t+2+bi3wT01iiQl45hp5bjTN1UEkZf+dFCUo8Xssy7aA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":244,"pkt":"AAgCHEeupB9ywglqCABFAADmE+lAAIAGfTesEAgIrBAIyQBYwCYjadjdO0BQsVAYAQAYcQAA4k0pIk9VQ3WSD8DyjCP6zDplkOu688cj7B+axduw7FbTE6AYUgZjQCgBXNnQmZk8AZkKxd6trQiOV9Q21Ig4\/vSvcG7YJA68j6K63UrdpgCrN\/5os+IHfd01LLYH5NyLiu66hLUPywBQtPqISEBXxfQa4YqqDi7eMFkF+tYnKAJyaEAa5CaoA\/k+JAFpYmNuKBJA\/cZZR\/sXThwZU9vDmuS8WhtIpf+zFLSMTZjUF9FuugxEPjg+p8gxz6TuBQ==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0855{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":405,"pkt":"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","pkt_caplen":405,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":286,"pkt":"AAgCHEeupB9ywglqCABFAAEQE+1AAIAGfQmsEAgIrBAIycADwA2zKy2ZU0abRFAYAQCuMgAABQAPAxAAAADoAKgABgAAANAW0BaHIgAAAAAAAAEAAAAAAAAAMwVxcbq+N0mDGbXb75zMNgEAAAAJBgAAAQAAAKGBpTCBoqADCgEBoQsGCSqGSIL3EgECAqKBjQSBim+BhzCBhKADAgEFoQMCAQ+ieDB2oAMCARKibwRtFkUGSBk\/WNs8P1WQ8Umu5czQ0+5kt3qmyCKwqmWsGmeP2HdAYpVM1NOW3vOxQVk7A3LJVo2UlBLe3M1zmefdmYzJtoJ+Cb3iexzSZ9Yc6KmePBXHlaCcN9nDA7to75z\/ZLHEO5LicF4DB997lA==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337951,"pkt_len":274,"pkt":"pB9ywglqAAgCHEeuCABFAAEEASNAAIAGj9+sEAjJrBAICMANwANTRptEsysugVAYAQBh\/wAABQAOAxAAAADcAIwABgAAANAW0BaHIgAAAQAAAAEAAQA1QlHjBkvREasEAMBPwtzSBAAAADMFcXG6vjdJgxm12++czDYBAAAACQYAAAEAAAChgYkwgYagAwoBAaJfBF1vWzBZoAMCAQWhAwIBD6JNMEugAwIBEqJEBEJp9mTBcU16IO1kQMogTwb1XWobfceiHBSuURHH8yh2afleWvmaoXkSqprumpVc36Wfdal7quigImkGz2pi9qx8WKijHgQcBAQE\/\/\/\/\/\/8AAAAAXc\/Il1MxPpRTzqxKK9xt6w==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1549337952265,"flow_last_seen":1549337952265,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49192,"dst_port":88,"l4_proto":"tcp"}
+0655{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":255,"pkt":"pB9ywglqAAgCHEeuCABFAADxATFAAIAGj+SsEAjJrBAICMAoAFgO6N+GhTfTAFAYAQDd\/AAAZ6URGA8yMDM3MDkxMzAyNDgwNVqnBgIEXbrRWKgSMBACARICARECARcCARgCAv95qoGWMIGToAMCARKigYsEgYglkZxyflQKWP\/Ais8K06SJm4BPQtT0hjtYpqxsbw8zJYoGM4sYpjZXyTJirO221HZEfk4Zw9eEBLahQpLvN\/C8eKG6Szv5sdWvrvtDno9G1S6IPzDJUqQoaMmLFbqp3TeM2kcY2MDfHhnn2YOkxOZoLnNXNaT+dUxt2+N2MukPguNeobu829zS","pkt_caplen":255,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":233,"pkt":"AAgCHEeupB9ywglqCABFAADbE\/lAAIAGfTKsEAgIrBAIyQBYwCiFN9i0DujgT1AYAQCK\/QAAiBuHmEFFmc+WsyXKuqx9Swihi4V8obVw5s2sIwUfT4tmX1K8bbM9re\/5e5wllRug+\/LlwLPFO11iuIJBpf\/1q6VzsWXZQ3Uhj6pv9Mvwu3XM\/Kg0OKnhbHwHjTwPH8AFLK9Xs6OvjCpemPsc4QD2yHfZIqmzSgyFffWrBEHUQ0oxARyRw\/cKuJ\/iV+cgVuWHP+LCTlyCV2gs4Zw\/xETck8iUuOpN6dDKbNN8Vw5JmilGwYg=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1549337952267,"flow_last_seen":1549337952267,"flow_tot_l4_data_len":334,"flow_min_l4_data_len":334,"flow_max_l4_data_len":334,"flow_avg_l4_data_len":334,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49191,"dst_port":389,"l4_proto":"tcp"}
+0816{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":368,"pkt":"pB9ywglqAAgCHEeuCABFAAFiATVAAIAGj2+sEAjJrBAICMAnAYUlT+9+CA99hlAYAQDCQwAAdUvVLNApPEvRYHXzTe8zaxz\/9SHPb\/8TWpCDGqMEAHclvciM0GOY0+pGIhzH\/f\/6jOacNFpBroqFCWgt6TZwWzHkJCgQPX52B1IK52bZg0ONYZDAO1UzroKY+wbOMCsJF8\/BbP9OSbZKzzlfun2r96DSICH7w7yEUFli3VQeP0ogbe+3tFoHFjb+05dbP\/VPGYwLelBDF4MSfNFsp+OMFLmJGy8zQTsDu6jfRxBXMbl8NmKpljCGrvpbK91ZL6OpbzC0zmaE6i4hHgj8sVok02UOBn0gMsv\/uMFl8gfFKRQNU\/cuTbNe+ET9apWENw\/dcLPR6pjmHtriptNJoQ3zVjS2Tc+IkoIqsOQ3cvktrgQFCtQLWZP3pztmcBjhot2oF4ypo07u7Pn3GnXRKfmep\/RhPO\/A8\/McJI0=","pkt_caplen":368,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6E\/1AAIAGfQ+sEAgIrBAIyQGFwCcID32GJU\/wuFAYAQAMIAAAMIQAAADMAgEPYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1aIGsolL+fu1BeIvW0ck8xNtulprbrU8LwWAQ+0HLcHzxYvBiLYdCRYKwhIeaZIrmfEg+Fmg6VMrCzRHOuCMx3gqqLIgnuXXvz9jtqiRlG1LxGN\/8hm6Dc5JLtY2J2bRsWOZJSU4VCKr7ax6LU","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1549337952273,"flow_last_seen":1549337952273,"flow_tot_l4_data_len":350,"flow_min_l4_data_len":350,"flow_max_l4_data_len":350,"flow_avg_l4_data_len":350,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49193,"dst_port":389,"l4_proto":"tcp"}
+0836{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":384,"pkt":"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","pkt_caplen":384,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":264,"pkt":"AAgCHEeupB9ywglqCABFAAD6FAFAAIAGfQusEAgIrBAIyQGFwClDpqjoog78PVAYAQACfgAAMIQAAADMAgETYYQAAADDCgEABAAEAIeCALihgbUwgbKgAwoBAKELBgkqhkiC9xIBAgKigZ0EgZpggZcGCSqGSIb3EgECAgIAb4GHMIGEoAMCAQWhAwIBD6J4MHagAwIBEqJvBG1lU8qvBSW6OfUooizc58b3UUWb1Dc9+q1BnNlk6M5gNl0OBLUYfNGeTN7jVmkr5YZr3HGFOATkbw9DVEo286mQ0yhq4w+ZVjlShGexAg6l9M9U7cWsZU11Tj+uS9vWEh6ZGrVD7TgBU6qOlGAU","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1549337952280,"flow_last_seen":1549337952280,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":221,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":221,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49195,"dst_port":88,"l4_proto":"tcp"}
+0658{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":255,"pkt":"pB9ywglqAAgCHEeuCABFAADxAURAAIAGj9GsEAjJrBAICMArAFh+ue0Nm8k31FAYAQCDOwAAZ6URGA8yMDM3MDkxMzAyNDgwNVqnBgIEXbhyIagSMBACARICARECARcCARgCAv95qoGWMIGToAMCARKigYsEgYjkLV5w61M4dBZf0U0Cc\/K54wTCl69GxhAdEJKI0gkw0Ve5ZSvbl+6jcyFmUgFhA4RyBx9pGsk\/XqrLuUXPEHyz9XOfuzdWYBvPp5yv4UFPIJKI5TMk\/2fkioL\/XfCG7Jr8xEeBwNw3Qk0PtCp3\/DDaU5\/NbtOzNRQiyiFTx75LpVnwmoKHd6R7","pkt_caplen":255,"pkt_type":2048,"pkt_ipoffset":14}
+0626{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":233,"pkt":"AAgCHEeupB9ywglqCABFAADbFApAAIAGfSGsEAgIrBAIyQBYwCubyT2Ifrnt1lAYAQDVagAATQg2IahlDr4Do2rw09NPfPwlJMuv1fJJCc5mjToXHNxo9crR1AT1CMr5O+bZxtqN6M9uCaNjeNur9XwIFCnpBuL05RtGDqn2i9hJpKd+E88QIO6v0xwHDv6iGr\/8TVgkK3vs2tcuY57O8+c4l9vRR7jejS5ww2dQZlIjb\/CCYROJuvRqA0LHwqGM0CcXmUposD8ISy568tJuLRICL3GBKJj5gtDiSRwMYGKFzsxgs2+QN48=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1549337952282,"flow_last_seen":1549337952282,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49196,"dst_port":88,"l4_proto":"tcp"}
+0430{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":89,"pkt":"pB9ywglqAAgCHEeuCABFAABLAUpAAIAGkHGsEAjJrBAICMAsAFiP2F5aCFrVJ1AYAQB5GAAAR6URGA8yMDM3MDkxMzAyNDgwNVqnBgIEXbhyJqgFMAMCARI=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":102,"pkt":"AAgCHEeupB9ywglqCABFAABYFBBAAIAGfZ6sEAgIrBAIyQBYwCwIWtrbj9hefVAYAQDaWgAAkAFNdIHXOvUSiNrRZ37a2E9NpclNBTiyKWuPGcwkWc2OKSpCtzAbfs9v1WRIgz2U","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1549337952282,"flow_last_seen":1549337952282,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":376,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":376,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49194,"dst_port":445,"l4_proto":"tcp"}
+0869{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":410,"pkt":"pB9ywglqAAgCHEeuCABFAAGMAVBAAIAGjyqsEAjJrBAICMAqAb0OVvT1RRDYGlAYAP+BiQAAx2oDxasXfLBTEcjz3tABELHnmrS3ZANlrcp\/hNjXtg\/fwYTBDdsdTzX+XDaW+uv3s2\/LBkJPP0K4Dy0YU3CzKo3pfb0515XvBfsBO7Ma0iP8tOV8txynjcFaEQvYkdi2SQ6bebHRRKNuECPHoWmL3h9GQAZAb4a73kOXQ+HdWdMxxkSNni5ZeogFxLOO9R2cL7EvadD9j700FIRXk1Ysly6p8QSOxUcF2BTlCAMMXraIVwnaJn4OFnBRV1kK62QzrTna4Mma6JSVzK\/6fCHORQn+FIHExUVoG3Vq1BveDwHtG0XGyIXhHabrgc6YQttz\/jzBPNDyI9ROMV3pQ0pZrTLzCjs+95mV\/WzyQTG\/SRF7u\/0NE9yZnVgk7HZw7F9bqd7MfX+aga2J6\/HQLbCChYzLyXsDW8WbBsbXh+XIiTyOIboYMLvBqY271GjiVoIyA7mbRvLsykMc7DElauDSPsA2vtc=","pkt_caplen":410,"pkt_type":2048,"pkt_ipoffset":14}
+0737{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","pkt_oversize":false,"pkt_ts":1549337952,"pkt_len":314,"pkt":"AAgCHEeupB9ywglqCABFAAEsFBRAAIAGfMasEAgIrBAIyQG9wCpFENgaDlb2WVAYAP9XsAAAAAABAP5TTUJAAAEAAAAAAAEAHwAJAAAAAAAAAAEAAAAAAAAA\/\/4AAAAAAABhAAAAAAQAAFesIp3Ms9YkV3HyzmcNx+gJAAAASAC4AKGBtTCBsqADCgEAoQsGCSqGSIL3EgECAqKBnQSBmmCBlwYJKoZIhvcSAQICAgBvgYcwgYSgAwIBBaEDAgEPongwdqADAgESom8EbUXiUY0MYNrse7Xdy+nvFD1NZYMmVWsdodfXY9v69kCk+MLVD1Rqj48zpMQyXFgAZRbdNaLq\/lZFH5cVcwmZOZp6PzJLHFRz2Ys9FBPKwjMkCOL5scijYfadSqIU\/eT7q\/ACDBFzzf8MmsOdu9E=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1549337930219,"flow_last_seen":1549337951711,"flow_tot_l4_data_len":1802,"flow_min_l4_data_len":240,"flow_max_l4_data_len":395,"flow_avg_l4_data_len":300,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49165,"dst_port":49155,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1549337930219,"flow_last_seen":1549337951711,"flow_tot_l4_data_len":1802,"flow_min_l4_data_len":240,"flow_max_l4_data_len":395,"flow_avg_l4_data_len":300,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49165,"dst_port":49155,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1549337940432,"flow_last_seen":1549337940433,"flow_tot_l4_data_len":923,"flow_min_l4_data_len":240,"flow_max_l4_data_len":379,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49185,"dst_port":49155,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1549337940432,"flow_last_seen":1549337940433,"flow_tot_l4_data_len":923,"flow_min_l4_data_len":240,"flow_max_l4_data_len":379,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49185,"dst_port":49155,"l4_proto":"tcp"}
+0595{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1549337929790,"flow_last_seen":1549337929790,"flow_tot_l4_data_len":557,"flow_min_l4_data_len":259,"flow_max_l4_data_len":298,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49157,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1549337929790,"flow_last_seen":1549337929790,"flow_tot_l4_data_len":557,"flow_min_l4_data_len":259,"flow_max_l4_data_len":298,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49157,"dst_port":88,"l4_proto":"tcp"}
+0595{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1549337929811,"flow_last_seen":1549337929812,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":132,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49158,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1549337929811,"flow_last_seen":1549337929812,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":132,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49158,"dst_port":88,"l4_proto":"tcp"}
+0571{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1549337929815,"flow_last_seen":1549337929815,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":135,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49159,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1549337929815,"flow_last_seen":1549337929815,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":135,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49159,"dst_port":88,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1549337929816,"flow_last_seen":1549337929816,"flow_tot_l4_data_len":2915,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":1457,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49160,"dst_port":88,"l4_proto":"tcp"}
+0571{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1549337929981,"flow_last_seen":1549337929983,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":146,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":159,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49162,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1549337929981,"flow_last_seen":1549337929983,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":146,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":159,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49162,"dst_port":88,"l4_proto":"tcp"}
+0595{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1549337930192,"flow_last_seen":1549337930193,"flow_tot_l4_data_len":557,"flow_min_l4_data_len":259,"flow_max_l4_data_len":298,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49166,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1549337930192,"flow_last_seen":1549337930193,"flow_tot_l4_data_len":557,"flow_min_l4_data_len":259,"flow_max_l4_data_len":298,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49166,"dst_port":88,"l4_proto":"tcp"}
+0595{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1549337930214,"flow_last_seen":1549337930214,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":132,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49167,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1549337930214,"flow_last_seen":1549337930214,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":132,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49167,"dst_port":88,"l4_proto":"tcp"}
+0571{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1549337930217,"flow_last_seen":1549337930217,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":146,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":159,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49168,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1549337930217,"flow_last_seen":1549337930217,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":146,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":159,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49168,"dst_port":88,"l4_proto":"tcp"}
+0571{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1549337931198,"flow_last_seen":1549337931199,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":88,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":110,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49170,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1549337931198,"flow_last_seen":1549337931199,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":88,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":110,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49170,"dst_port":88,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1549337931210,"flow_last_seen":1549337931211,"flow_tot_l4_data_len":2924,"flow_min_l4_data_len":1452,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1462,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49171,"dst_port":88,"l4_proto":"tcp"}
+0574{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1549337931211,"flow_last_seen":1549337931213,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":156,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":620,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49173,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1549337931211,"flow_last_seen":1549337931213,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":156,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":620,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49173,"dst_port":88,"l4_proto":"tcp"}
+0572{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1549337931218,"flow_last_seen":1549337931219,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":135,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49175,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1549337931218,"flow_last_seen":1549337931219,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":135,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49175,"dst_port":88,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1549337931219,"flow_last_seen":1549337931220,"flow_tot_l4_data_len":2915,"flow_min_l4_data_len":1451,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":1457,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49176,"dst_port":88,"l4_proto":"tcp"}
+0596{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1549337937703,"flow_last_seen":1549337937703,"flow_tot_l4_data_len":557,"flow_min_l4_data_len":259,"flow_max_l4_data_len":298,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49181,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1549337937703,"flow_last_seen":1549337937703,"flow_tot_l4_data_len":557,"flow_min_l4_data_len":259,"flow_max_l4_data_len":298,"flow_avg_l4_data_len":278,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49181,"dst_port":88,"l4_proto":"tcp"}
+0596{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1549337937724,"flow_last_seen":1549337937724,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":132,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49182,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"johnson-pc","domain":"happycraft.org","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1549337937724,"flow_last_seen":1549337937724,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":132,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49182,"dst_port":88,"l4_proto":"tcp"}
+0570{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1549337937725,"flow_last_seen":1549337937726,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":60,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":80,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49183,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1549337937725,"flow_last_seen":1549337937726,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":60,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":80,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49183,"dst_port":88,"l4_proto":"tcp"}
+0572{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1549337940431,"flow_last_seen":1549337940432,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":135,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49186,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1549337940431,"flow_last_seen":1549337940432,"flow_tot_l4_data_len":292,"flow_min_l4_data_len":135,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":146,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49186,"dst_port":88,"l4_proto":"tcp"}
+0597{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1549337951630,"flow_last_seen":1549337951631,"flow_tot_l4_data_len":515,"flow_min_l4_data_len":255,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":257,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49187,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"happycraft","username":"theresa.johnson"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1549337951630,"flow_last_seen":1549337951631,"flow_tot_l4_data_len":515,"flow_min_l4_data_len":255,"flow_max_l4_data_len":260,"flow_avg_l4_data_len":257,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49187,"dst_port":88,"l4_proto":"tcp"}
+0597{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1549337951638,"flow_last_seen":1549337951638,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":182,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49188,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"happycraft","username":"theresa.johnson"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1549337951638,"flow_last_seen":1549337951638,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":182,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49188,"dst_port":88,"l4_proto":"tcp"}
+0569{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1549337951639,"flow_last_seen":1549337951639,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":61,"flow_max_l4_data_len":86,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49189,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1549337951639,"flow_last_seen":1549337951639,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":61,"flow_max_l4_data_len":86,"flow_avg_l4_data_len":73,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49189,"dst_port":88,"l4_proto":"tcp"}
+0572{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1549337951709,"flow_last_seen":1549337951710,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":210,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49190,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1549337951709,"flow_last_seen":1549337951710,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":210,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":223,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49190,"dst_port":88,"l4_proto":"tcp"}
+0572{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1549337952265,"flow_last_seen":1549337952266,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":199,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49192,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1549337952265,"flow_last_seen":1549337952266,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":199,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49192,"dst_port":88,"l4_proto":"tcp"}
+0572{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1549337952280,"flow_last_seen":1549337952281,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":199,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49195,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1549337952280,"flow_last_seen":1549337952281,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":199,"flow_max_l4_data_len":221,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49195,"dst_port":88,"l4_proto":"tcp"}
+0569{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1549337952282,"flow_last_seen":1549337952282,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":55,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49196,"dst_port":88,"l4_proto":"tcp","ndpi": {"proto":"Kerberos","category":"Network"},"kerberos": {"hostname":"","domain":"","username":""}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1549337952282,"flow_last_seen":1549337952282,"flow_tot_l4_data_len":123,"flow_min_l4_data_len":55,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49196,"dst_port":88,"l4_proto":"tcp"}
+0513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1549337929983,"flow_last_seen":1549337929983,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":230,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49161,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1549337929983,"flow_last_seen":1549337929983,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":230,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49161,"dst_port":389,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1549337931189,"flow_last_seen":1549337931190,"flow_tot_l4_data_len":492,"flow_min_l4_data_len":230,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49169,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1549337931189,"flow_last_seen":1549337931190,"flow_tot_l4_data_len":492,"flow_min_l4_data_len":230,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49169,"dst_port":389,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1549337931211,"flow_last_seen":1549337931213,"flow_tot_l4_data_len":492,"flow_min_l4_data_len":230,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49172,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1549337931211,"flow_last_seen":1549337931213,"flow_tot_l4_data_len":492,"flow_min_l4_data_len":230,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49172,"dst_port":389,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1549337937690,"flow_last_seen":1549337937691,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":230,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49179,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1549337937690,"flow_last_seen":1549337937691,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":230,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49179,"dst_port":389,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1549337937700,"flow_last_seen":1549337937701,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":230,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49180,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1549337937700,"flow_last_seen":1549337937701,"flow_tot_l4_data_len":516,"flow_min_l4_data_len":230,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":258,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49180,"dst_port":389,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1549337952267,"flow_last_seen":1549337952267,"flow_tot_l4_data_len":564,"flow_min_l4_data_len":230,"flow_max_l4_data_len":334,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49191,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1549337952267,"flow_last_seen":1549337952267,"flow_tot_l4_data_len":564,"flow_min_l4_data_len":230,"flow_max_l4_data_len":334,"flow_avg_l4_data_len":282,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49191,"dst_port":389,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1549337952273,"flow_last_seen":1549337952274,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":230,"flow_max_l4_data_len":350,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49193,"dst_port":389,"l4_proto":"tcp","ndpi": {"proto":"LDAP","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1549337952273,"flow_last_seen":1549337952274,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":230,"flow_max_l4_data_len":350,"flow_avg_l4_data_len":290,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49193,"dst_port":389,"l4_proto":"tcp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1549337929817,"flow_last_seen":1549337929818,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":247,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49156,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"SMBv23","category":"System"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1549337929817,"flow_last_seen":1549337929818,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":247,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49156,"dst_port":445,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1549337931220,"flow_last_seen":1549337931221,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":247,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49174,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"SMBv23","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1549337931220,"flow_last_seen":1549337931221,"flow_tot_l4_data_len":527,"flow_min_l4_data_len":247,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":263,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49174,"dst_port":445,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1549337952282,"flow_last_seen":1549337952283,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":280,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49194,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"SMBv23","category":"System"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1549337952282,"flow_last_seen":1549337952283,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":280,"flow_max_l4_data_len":376,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.8.201","dst_ip":"172.16.8.8","src_port":49194,"dst_port":445,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/kerberos.pcap"}
diff --git a/tests/result/nDPId_malformed_dns.pcap.txt b/tests/result/nDPId_malformed_dns.pcap.txt
new file mode 100644
index 000000000..02f5f3443
--- /dev/null
+++ b/tests/result/nDPId_malformed_dns.pcap.txt
@@ -0,0 +1,14 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591551760342,"flow_last_seen":1591551760342,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp"}
+0410{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","pkt_oversize":false,"pkt_ts":1591551760,"pkt_len":70,"pkt":"AAAAAAAAAAAAAAAACABFAAA4nToAAEAR33h\/AAABfwAAAcUDADUAJP43hLQBAAABAAAAAAAAA3d3dwJ4dANjb20AAAEAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591551760342,"flow_last_seen":1591551760342,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"www.xt.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2580{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","pkt_oversize":false,"pkt_ts":1591551760,"pkt_len":1430,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8=","pkt_caplen":1430,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1591551760342,"flow_last_seen":1591551760357,"flow_tot_l4_data_len":1432,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":716,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"www.xt.com","num_queries":2,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"0.0.0.0"}}
+2580{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","pkt_oversize":false,"pkt_ts":1591551760,"pkt_len":1430,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8=","pkt_caplen":1430,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","pkt_oversize":false,"pkt_ts":1591551765,"pkt_len":70,"pkt":"AAAAAAAAAAAAAAAACABFAAA4ny8AAEAR3YN\/AAABfwAAAcUDADUAJP43hLQBAAABAAAAAAAAA3d3dwJ4dANjb20AAAEAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1591551760342,"flow_last_seen":1591551765342,"flow_tot_l4_data_len":2864,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":716,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"www.xt.com","num_queries":2,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"0.0.0.0"}}
+2580{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","pkt_oversize":false,"pkt_ts":1591551765,"pkt_len":1430,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8=","pkt_caplen":1430,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1591551760342,"flow_last_seen":1591551765355,"flow_tot_l4_data_len":4260,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":852,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"DNS","category":"Network"},"dns": {"query":"www.xt.com","num_queries":2,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"0.0.0.0"}}
+2580{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","pkt_oversize":false,"pkt_ts":1591551765,"pkt_len":1430,"pkt":"\/\/\/\/\/\/\/\/AAAAAAAACABFAAWIAAEAAEARd2J\/AAABfwAAAQA1xQMFdLSchLSBAAACAAIAAAAAA3d3dwJ4dANjb20AAAEAASJBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBPwAAAAA\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AQD0+Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wEHAQjs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/P8BDwETARcBGNzg5Ojs8PT4\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz\/AR8BIwEnASsBLwEzATcBOLzAxMjM0NTY3ODk6Ozw9Pj8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/Pz8\/wE\/AUMBRwFLAU8BUwFXAVsBXwFjAWcBawFvAXMBdwF4fICEiIyQlJicoKSorLC0uLzAxMjM0NTY3ODk6Ozw9PsBfwGDAYcBiwGPAZMBlwGbAZ8BowGnAasBrwGzAbcBuwG\/AcMBxwHLAc8B0wHXAdsB3wHjAecB6wHvAfMB9wH4AAQABwAwAAQABAAAAAAAEQkJCQsAMAAUAAQAAAAAATANBQUE\/MDAwMDEwMDAyMDAxMTAwMTIwMDIxMDAyMjAxMDEwMjAxMTEwMTEyMDEyMTAxMjIwMjAyMTEwMjEyMDIyMTAyBQAAAAAAwP8=","pkt_caplen":1430,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1591551760342,"flow_last_seen":1591551765368,"flow_tot_l4_data_len":5656,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1396,"flow_avg_l4_data_len":942,"midstream":0,"l3_proto":"ip4","src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":50435,"dst_port":53,"l4_proto":"udp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_dns.pcap"}
diff --git a/tests/result/nDPId_malformed_icmp.pcap.txt b/tests/result/nDPId_malformed_icmp.pcap.txt
new file mode 100644
index 000000000..c48ffc4ba
--- /dev/null
+++ b/tests/result/nDPId_malformed_icmp.pcap.txt
@@ -0,0 +1,6 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_icmp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0437{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_icmp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1593066612951,"flow_last_seen":1593066612951,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"218.152.179.213","dst_ip":"218.152.179.54","l4_proto":"icmp"}
+0371{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_icmp.pcap","pkt_oversize":false,"pkt_ts":1593066612,"pkt_len":42,"pkt":"AFUir8Y3AERm\/CmvCABFAAAcAAEAAEABXqPamLPV2pizNqUAWv8AAAAA","pkt_caplen":42,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_icmp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1593066612951,"flow_last_seen":1593066612951,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"218.152.179.213","dst_ip":"218.152.179.54","l4_proto":"icmp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"ICMP","category":"Network"}}
+0438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_icmp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1593066612951,"flow_last_seen":1593066612951,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"218.152.179.213","dst_ip":"218.152.179.54","l4_proto":"icmp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malformed_icmp.pcap"}
diff --git a/tests/result/nDPId_malware.pcap.txt b/tests/result/nDPId_malware.pcap.txt
new file mode 100644
index 000000000..388dc367a
--- /dev/null
+++ b/tests/result/nDPId_malware.pcap.txt
@@ -0,0 +1,41 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569571466977,"flow_last_seen":1569571466977,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp"}
+0453{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569571466,"pkt_len":106,"pkt":"CGoKOl4eMFLLbJwbCABFAABcg9cAAEARLQnAqAcHAQEBAaWCADUASMoKC6QBIAABAAAAAAABA3d3dw9pbnRlcm5ldGJhZGd1eXMDY29tAAABAAEAACkQAAAAAAAADAAKAAjrBFAObfGpig==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569571466977,"flow_last_seen":1569571466977,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"www.internetbadguys.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0457{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569571467,"pkt_len":110,"pkt":"MFLLbJwbCGoKOl4eCABFAABgLqZAADcRSzYBAQEBwKgHBwA1pYIATEdsC6SBgAABAAEAAAABA3d3dw9pbnRlcm5ldGJhZGd1eXMDY29tAAABAAHADAABAAEAAAABAARD11zSAAApBawAAAAAAAA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1569571466977,"flow_last_seen":1569571467001,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":72,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"www.internetbadguys.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"67.215.92.210"}}
+0431{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569571470672,"flow_last_seen":1569571470672,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","l4_proto":"icmp"}
+0439{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569571470,"pkt_len":98,"pkt":"CGoKOl4eMFLLbJwbCABFAABU4M1AAEABCcTAqAcHkIv33AgApMYAAQABjsKNXQAAAABuRAoAAAAAABAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569571470672,"flow_last_seen":1569571470672,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569571476362,"flow_last_seen":1569571476362,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","src_port":33706,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569571476,"pkt_len":66,"pkt":"CGoKOl4eMFLLbJwbCABFAAA0sPtAAEAGObHAqAcHkIv33IOqAFCfbfb4AAAAAIAC+vBQPgAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569571476362,"flow_last_seen":1569571476362,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","src_port":33706,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569571476362,"flow_last_seen":1569571476362,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","src_port":33706,"dst_port":80,"l4_proto":"tcp"}
+0432{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569571470672,"flow_last_seen":1569571470672,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"144.139.247.220","l4_proto":"icmp"}
+0455{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1569571466977,"flow_last_seen":1569571467001,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":72,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"1.1.1.1","src_port":42370,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569579408876,"flow_last_seen":1569579408876,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":48394,"dst_port":80,"l4_proto":"tcp"}
+0821{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579408,"pkt_len":383,"pkt":"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","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569579408876,"flow_last_seen":1569579408876,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":48394,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.OpenDNS","category":"Web"},"http": {"hostname":"www.internetbadguys.com","url":"www.internetbadguys.com\/","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (Windows NT 10.0; rv:68.0) Gecko\/20100101 Firefox\/68.0"}}
+0440{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579409,"pkt_len":98,"pkt":"MFLLbJwbCGoKOl4eCABFAABUIjBAADgGuBtD11zSwKgHBwBQvQrrd8wJyb3V8FAYAO11CAAALDXKuXRPxt9F45TTtQ17T177PqBz\/8Tm+6YgbZe0R+XFq38BUlr3UR8MAAA=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569579416636,"flow_last_seen":1569579416636,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579416,"pkt_len":66,"pkt":"CGoKOl4eMFLLbJwbCABFAAA0xe5AAEAGDH3AqAcHQ9dc0omkAbvdSlrrAAAAAIAC+vBofwAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579416,"pkt_len":66,"pkt":"MFLLbJwbCGoKOl4eCABFAAA0AABAADgG2mtD11zSwKgHBwG7iaQdaco+3Upa7IASchDpWQAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579416,"pkt_len":54,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxe9AAEAGDIjAqAcHQ9dc0omkAbvdSlrsHWnKP1AQAfZocwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1075{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579416,"pkt_len":571,"pkt":"CGoKOl4eMFLLbJwbCABFAAItxfBAAEAGCoLAqAcHQ9dc0omkAbvdSlrsHWnKP1AYAfZqeAAAFgMBAgABAAH8AwNiGwz6Nx6gZEkQ5mHfc0bz9cG8Q1IQ44DgAeGoVKlHzyC81+PdFDLSNn+Pdda1KG5hVhfTFmh4W9u7vJ1FmUKJWAAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAMwA5AC8ANQAKAQABjwAAABwAGgAAF3d3dy5pbnRlcm5ldGJhZGd1eXMuY29tABcAAP8BAAEAAAoADgAMAB0AFwAYABkBAAEBAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAAzAGsAaQAdACCsOS9UcRaQolAvHH2lkEhvl6dNSVE29u8oKtYL+CH9BQAXAEEEoQXtl8vTSjgX92dpSeeQSX7Rmu4m1tT+guDWflQ+qUwx5JY0QUT2kxtvCYRY4\/6+TGd5ECmhJM43gC52CQwAHQArAAkIAwQDAwMCAwEADQAYABYEAwUDBgMIBAgFCAYEAQUBBgECAwIBAC0AAgEBABwAAkABABUAhwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1569579416636,"flow_last_seen":1569579416830,"flow_tot_l4_data_len":621,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":155,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.OpenDNS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.internetbadguys.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0389{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":60,"pkt":"MFLLbJwbCGoKOl4eCABFAAAoJgFAADgGtHZD11zSwKgHBwG7iaQdaco\/3Upc8VAQAO2ZSgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1569579416636,"flow_last_seen":1569579417029,"flow_tot_l4_data_len":2121,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.OpenDNS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.internetbadguys.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"0c0aff9ccea5e7e1de5c3a0069d103f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0380{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":54,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfFAAEAGDIbAqAcHQ9dc0omkAbvdSlzxHWnP81AQAfVocwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":54,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfJAAEAGDIXAqAcHQ9dc0omkAbvdSlzxHWnVp1AQAe1ocwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2262{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":4,"flow_packet_id":10,"flow_first_seen":1569579416636,"flow_last_seen":1569579417030,"flow_tot_l4_data_len":5121,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":512,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch"},"proto":"TLS.OpenDNS","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.internetbadguys.com","server_names":"api.opendns.com,branded-login.opendns.com,cachecheck.opendns.com,community.opendns.com,dashboard2.opendns.com,dashboard.opendns.com,dashboard-ipv4.opendns.com,msp-login.opendns.com,api-ipv4.opendns.com,api-ipv6.opendns.com,authz.api.opendns.com,domain.opendns.com,help.vpn.opendns.com,ideabank.opendns.com,login.opendns.com,netgear.opendns.com,reseller-login.opendns.com,images.opendns.com,images-using.opendns.com,store.opendns.com,signup.opendns.com,twilio.opendns.com,updates.opendns.com,shared.opendns.com,tools.opendns.com,cache.opendns.com,api.umbrella.com,branded-login.umbrella.com,cachecheck.umbrella.com,community.umbrella.com,dashboard2.umbrella.com,dashboard.umbrella.com,dashboard-ipv4.umbrella.com,msp-login.umbrella.com,api-ipv4.umbrella.com,api-ipv6.umbrella.com,authz.api.umbrella.com,domain.umbrella.com,help.vpn.umbrella.com,ideabank.umbrella.com,login.umbrella.com,netgear.umbrella.com,reseller-login.umbrella.com,images.umbrella.com,images-using.umbrella.com,store.umbrella.com,signup.umbrella.com,twilio.umbrella.com,updates.umbrella.com,shared.umbrella.com,tools.umbrella.com,cache.umbrella.com","ja3":"f6ce47303dce394049af395fc6d0bc20","ja3s":"0c0aff9ccea5e7e1de5c3a0069d103f3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=OpenDNS, Inc., CN=api.opendns.com","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"21:B4:CF:84:13:3A:21:A4:B0:02:63:76:39:84:EA:ED:27:EE:51:7C"}}
+0381{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":54,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfNAAEAGDITAqAcHQ9dc0omkAbvdSlzxHWnbW1AQAeRocwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1313{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":744,"pkt":"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","pkt_caplen":744,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":54,"pkt":"CGoKOl4eMFLLbJwbCABFAAAoxfRAAEAGDIPAqAcHQ9dc0omkAbvdSlzxHWneDVAQAd9ocwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":180,"pkt":"CGoKOl4eMFLLbJwbCABFAACmxfVAAEAGDATAqAcHQ9dc0omkAbvdSlzxHWneDVAYAfVo8QAAFgMDAEYQAABCQQQXnDccjfVZWhqBUucdKddp1G59dDixN1oUPMNrwd\/5+g0DfHVKaOkM7PBEa\/PQ0DStvwqbgxEQhAx2pf\/kyEJVFAMDAAEBFgMDACgAAAAAAAAAAMBOO2LVRDZ5rUhBnMhKrHETxOl4WnHbkdoDiQqlhuRT","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","pkt_oversize":false,"pkt_ts":1569579417,"pkt_len":85,"pkt":"CGoKOl4eMFLLbJwbCABFAABHxfZAAEAGDGLAqAcHQ9dc0omkAbvdSl1vHWneDVAZAfVokgAAFQMDABoAAAAAAAAAARyktu6aPdJhbsX8oiEa2+1Qow==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":4,"flow_packet_id":20,"flow_first_seen":1569579416636,"flow_last_seen":1569579417280,"flow_tot_l4_data_len":6442,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":35236,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1569579408876,"flow_last_seen":1569579409087,"flow_tot_l4_data_len":413,"flow_min_l4_data_len":64,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":206,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.7.7","dst_ip":"67.215.92.210","src_port":48394,"dst_port":80,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/malware.pcap"}
diff --git a/tests/result/nDPId_modbus.pcap.txt b/tests/result/nDPId_modbus.pcap.txt
new file mode 100644
index 000000000..86c92c6b8
--- /dev/null
+++ b/tests/result/nDPId_modbus.pcap.txt
@@ -0,0 +1,20 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1223541953927,"flow_last_seen":1223541953927,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.110.131","dst_ip":"192.168.110.138","src_port":2074,"dst_port":502,"l4_proto":"tcp"}
+0396{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541953,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0i\/1AAIAGEGjAqG6DwKhuiggaAfZB0urG4RU6zlAY\/MYAMgAAANEAAAAGAQMAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1223541953927,"flow_last_seen":1223541953927,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.110.131","dst_ip":"192.168.110.138","src_port":2074,"dst_port":502,"l4_proto":"tcp","ndpi": {"proto":"Modbus","category":"IoT-Scada"}}
+0395{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541953,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzO9pAAIAGYIzAqG6KwKhugwH2CBrhFTrOQdLq0lAY++v\/BAAAANEAAAAFAQMCAAA=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541953,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0i\/5AAIAGEGfAqG6DwKhuiggaAfZB0urS4RU62VAY\/LsAJgAAANIAAAAGAQMAAAAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541953,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzO9tAAIAGYIvAqG6KwKhugwH2CBrhFTrZQdLq3lAY+982twAAANIAAAAFAQMCQcg=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541954,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jABAAIAGEGXAqG6DwKhuiggaAfZB0ure4RU65FAY\/LAAGAAAANMAAAAGAQMAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541954,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzO\/hAAIAGYG7AqG6KwKhugwH2CBrhFTrkQdLq6lAY+9P+7AAAANMAAAAFAQMCAAA=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541954,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAFAAIAGEGTAqG6DwKhuiggaAfZB0urq4RU671AY\/KUADAAAANQAAAAGAQMAAAAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541954,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzO\/lAAIAGYG3AqG6KwKhugwH2CBrhFTrvQdLq9lAY+8c2nwAAANQAAAAFAQMCQcg=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541955,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jARAAIAGEGHAqG6DwKhuiggaAfZB0ur24RU6+lAY\/Jr\/\/QAAANUAAAAGAQMAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541955,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzPBdAAIAGYE\/AqG6KwKhugwH2CBrhFTr6QdLrAlAY+7v+1AAAANUAAAAFAQMCAAA=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541955,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAVAAIAGEGDAqG6DwKhuiggaAfZB0usC4RU7BVAY\/I\/\/8QAAANYAAAAGAQMAAAAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541955,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzPBhAAIAGYE7AqG6KwKhugwH2CBrhFTsFQdLrDlAY+682hwAAANYAAAAFAQMCQcg=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541956,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAdAAIAGEF7AqG6DwKhuiggaAfZB0usO4RU7EFAY\/IT\/4wAAANcAAAAGAQMAAQAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541956,"pkt_len":65,"pkt":"AArkxYMKABzAX0kKCABFAAAzPDRAAIAGYDLAqG6KwKhugwH2CBrhFTsQQdLrGlAY+6P+vAAAANcAAAAFAQMCAAA=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","pkt_oversize":false,"pkt_ts":1223541956,"pkt_len":66,"pkt":"ABzAX0kKAArkxYMKCABFAAA0jAhAAIAGEF3AqG6DwKhuiggaAfZB0usa4RU7G1AY\/Hn\/1wAAANgAAAAGAQMAAAAB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap","flow_id":0,"flow_packet_id":102,"flow_first_seen":1223541953927,"flow_last_seen":1223541977037,"flow_tot_l4_data_len":3213,"flow_min_l4_data_len":31,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":31,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.110.131","dst_ip":"192.168.110.138","src_port":2074,"dst_port":502,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/modbus.pcap"}
diff --git a/tests/result/nDPId_monero.pcap.txt b/tests/result/nDPId_monero.pcap.txt
new file mode 100644
index 000000000..84405342e
--- /dev/null
+++ b/tests/result/nDPId_monero.pcap.txt
@@ -0,0 +1,38 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1514196188350,"flow_last_seen":1514196188350,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"94.23.199.191","src_port":46838,"dst_port":3333,"l4_proto":"tcp"}
+0408{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":74,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA8e7pAAEAG1e7AqAKUXhfHv7b2DQVL2\/baAAAAAKACchDZewAAAgQFtAQCCAocofANAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":74,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AA8AABAADEGX8leF8e\/wKgClA0FtvbB2Ar1S9v226AScSCYUwAAAgQFtAQCCArnhI20HKHwDQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e7tAAEAG1fXAqAKUXhfHv7b2DQVL2\/bbwdgK9oAQAOU3CgAAAQEIChyh8F7nhI20","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":164,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACWe7xAAEAG1ZLAqAKUXhfHv7b2DQVL2\/bbwdgK9oAYAOVlowAAAQEIChyh8F7nhI20eyJpZCI6MSwibWV0aG9kIjoibWluaW5nLnN1YnNjcmliZSIsInBhcmFtcyI6WyJFV0JGIDAuMy40YiIsbnVsbCwiZXUxLXpjYXNoLmZseXBvb2wub3JnIiwiMzMzMyJdfQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1514196188350,"flow_last_seen":1514196188430,"flow_tot_l4_data_len":242,"flow_min_l4_data_len":32,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"94.23.199.191","src_port":46838,"dst_port":3333,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0396{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":66,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AA0hz5AADEG2JJeF8e\/wKgClA0FtvbB2Ar2S9v3PYAQAOM2lgAAAQEICueEjcgcofBe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":128,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AByhz9AADEG2FNeF8e\/wKgClA0FtvbB2Ar2S9v3PYAYAON+EwAAAQEICueEjcgcofBeeyJpZCI6MSwicmVzdWx0IjpbIjA0ZDU2N2IyMTIiLCAiMDRkNTY3YjIxMiJdLCAiZXJyb3IiOiBudWxsfQo=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e71AAEAG1fPAqAKUXhfHv7b2DQVL2\/c9wdgLNIAQAOU2AwAAAQEIChyh8LHnhI3I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":161,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACTe75AAEAG1ZPAqAKUXhfHv7b2DQVL2\/c9wdgLNIAYAOX\/kgAAAQEIChyh8LHnhI3IeyJpZCI6MiwibWV0aG9kIjoibWluaW5nLmF1dGhvcml6ZSIsInBhcmFtcyI6WyJ0MWZBaFpGNWFVSmRZN0Npa0dVTEhtZVlrN2lkOHFtdmJBZC5yaWc0IiwieCJdfQo=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":104,"pkt":"cIXCQ0+ifmgbW\/gUCABF4ABah0BAADEG2GpeF8e\/wKgClA0FtvbB2As0S9v3nIAYAON8uAAAAQEICueEjd0cofCxeyJpZCI6MiwicmVzdWx0Ijp0cnVlLCAiZXJyb3IiOiBudWxsfQo=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":185,"pkt":"cIXCQ0+ifmgbW\/gUCABF4ACrh0FAADEG2BheF8e\/wKgClA0FtvbB2AtaS9v3nIAYAONMPAAAAQEICueEjd0cofCxeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLnNldF90YXJnZXQiLCJwYXJhbXMiOlsiMDAwNDE4OTM3NGJjNmE3ZWY5ZGIyMmQwZTU2MDQxODkzNzRiYzZhN2VmOWRiMjJkMGU1NjA0MTg5Mzc0YmM2YSJdfQo=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e79AAEAG1fHAqAKUXhfHv7b2DQVL2\/ecwdgL0YAQAOU0oQAAAQEIChyh8QLnhI3d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":126,"pkt":"fmgbW\/gUcIXCQ0+iCABFAABwe8BAAEAG1bTAqAKUXhfHv7b2DQVL2\/ecwdgL0YAYAOVHiQAAAQEIChyh8QLnhI3deyJpZCI6MywibWV0aG9kIjoibWluaW5nLmV4dHJhbm9uY2Uuc3Vic2NyaWJlIiwicGFyYW1zIjpbXX0K","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196188,"pkt_len":66,"pkt":"cIXCQ0+ifmgbW\/gUCABF4AA0h0JAADAG2Y5eF8e\/wKgClA0FtvbB2AvRS9v32IAQAOM0SQAAAQEICueEjfscofEC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196189,"pkt_len":376,"pkt":"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","pkt_caplen":376,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196189,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA0e8FAAEAG1e\/AqAKUXhfHv7b2DQVL2\/fYwdgNB4AQAO0uRQAAAQEIChyh9OrnhI7X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1514196196437,"flow_last_seen":1514196196437,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"116.211.167.195","src_port":53846,"dst_port":3333,"l4_proto":"tcp"}
+0408{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196196,"pkt_len":74,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAA8ltZAAEAGxBLAqAKUdNOnw9JWDQXzKAOTAAAAAKACchCvSQAAAgQFtAQCCAqVhds1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196196,"pkt_len":66,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAA0AABAACEGefF006fDwKgClA0F0lYVgl9O8ygDlIASchDSRAAAAgQFpAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196196,"pkt_len":54,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAoltdAAEAGxCXAqAKUdNOnw9JWDQXzKAOUFYJfT1AQAOWEMgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196196,"pkt_len":152,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACKlthAAEAGw8LAqAKUdNOnw9JWDQXzKAOUFYJfT1AYAOW00gAAeyJpZCI6MSwibWV0aG9kIjoibWluaW5nLnN1YnNjcmliZSIsInBhcmFtcyI6WyJFV0JGIDAuMy40YiIsbnVsbCwiY24xLXpjYXNoLmZseXBvb2wub3JnIiwiMzMzMyJdfQo=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1514196196437,"flow_last_seen":1514196196745,"flow_tot_l4_data_len":210,"flow_min_l4_data_len":20,"flow_max_l4_data_len":118,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"116.211.167.195","src_port":53846,"dst_port":3333,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0388{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":60,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAAoOQVAACEGQPh006fDwKgClA0F0lYVgl9P8ygD9lAQAOWD0AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":116,"pkt":"cIXCQ0+ifmgbW\/gUCABFAABmOQZAACEGQLl006fDwKgClA0F0lYVgl9P8ygD9lAYAOX7pgAAeyJpZCI6MSwicmVzdWx0IjpbIjMzMzZiODBlOGYiLCAiMzMzNmI4MGU4ZiJdLCAiZXJyb3IiOiBudWxsfQo=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":54,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAoltlAAEAGxCPAqAKUdNOnw9JWDQXzKAP2FYJfjVAQAOWDkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":147,"pkt":"fmgbW\/gUcIXCQ0+iCABFAACFltpAAEAGw8XAqAKUdNOnw9JWDQXzKAP2FYJfjVAYAOWF1AAAeyJpZCI6MiwibWV0aG9kIjoibWluaW5nLmF1dGhvcml6ZSIsInBhcmFtcyI6WyJ0MWZKdUhXcmZjV25ZTVl5UDlWQUY5NnZSbnZORDJOemlNRy5jMSIsIngiXX0K","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":92,"pkt":"cIXCQ0+ifmgbW\/gUCABFAABOOQdAACEGQNB006fDwKgClA0F0lYVgl+N8ygEU1AYAOXKXAAAeyJpZCI6MiwicmVzdWx0Ijp0cnVlLCAiZXJyb3IiOiBudWxsfQo=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":173,"pkt":"cIXCQ0+ifmgbW\/gUCABFAACfOQhAACEGQH5006fDwKgClA0F0lYVgl+z8ygEU1AYAOWZ4AAAeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLnNldF90YXJnZXQiLCJwYXJhbXMiOlsiMDAwNDE4OTM3NGJjNmE3ZWY5ZGIyMmQwZTU2MDQxODkzNzRiYzZhN2VmOWRiMjJkMGU1NjA0MTg5Mzc0YmM2YSJdfQo=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":54,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAolttAAEAGxCHAqAKUdNOnw9JWDQXzKARTFYJgKlAQAOWCmAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":114,"pkt":"fmgbW\/gUcIXCQ0+iCABFAABkltxAAEAGw+TAqAKUdNOnw9JWDQXzKARTFYJgKlAYAOWVgAAAeyJpZCI6MywibWV0aG9kIjoibWluaW5nLmV4dHJhbm9uY2Uuc3Vic2NyaWJlIiwicGFyYW1zIjpbXX0K","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196197,"pkt_len":60,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAAoOQlAACEGQPR006fDwKgClA0F0lYVgmAq8ygEj1AQAOWCXAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196198,"pkt_len":364,"pkt":"cIXCQ0+ifmgbW\/gUCABFAAFeOQpAACEGP71006fDwKgClA0F0lYVgmAq8ygEj1AYAOXjWAAAeyJpZCI6bnVsbCwibWV0aG9kIjoibWluaW5nLm5vdGlmeSIsInBhcmFtcyI6WyIyOWM0YzUxZTI4OGE4Y2EyYzM2NSIsIjA0MDAwMDAwIiwiOWUyZmM3NjhiZDE5Nzc1MjhjOGQ2MDk2ZDQ2Mzc2NzU4MTc5ZTI1YmYzMjkzNDI4YjY1ZjEyMDEwMDAwMDAwMCIsIjM1ZDM0MWE4YjE5YTM4Y2Q1ODRjYjU0OTQxODViNGRiZjFhN2VhYTkxYTlmZjY1NDFlODUxZGU1MGNiYzg4YTIiLCIwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIiwiYTljYzQwNWEiLCIwOWQ4MTUxYyIsdHJ1ZV19Cg==","pkt_caplen":364,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","pkt_oversize":false,"pkt_ts":1514196198,"pkt_len":54,"pkt":"fmgbW\/gUcIXCQ0+iCABFAAAolt1AAEAGxB\/AqAKUdNOnw9JWDQXzKASPFYJhYFAQAO2BHgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","flow_id":1,"flow_packet_id":47,"flow_first_seen":1514196196437,"flow_last_seen":1514197261597,"flow_tot_l4_data_len":8695,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1464,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"116.211.167.195","src_port":53846,"dst_port":3333,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap","flow_id":0,"flow_packet_id":272,"flow_first_seen":1514196188350,"flow_last_seen":1514197279769,"flow_tot_l4_data_len":147111,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":540,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.148","dst_ip":"94.23.199.191","src_port":46838,"dst_port":3333,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/monero.pcap"}
diff --git a/tests/result/nDPId_mongodb.pcap.txt b/tests/result/nDPId_mongodb.pcap.txt
new file mode 100644
index 000000000..782c7e1bf
--- /dev/null
+++ b/tests/result/nDPId_mongodb.pcap.txt
@@ -0,0 +1,56 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483459978,"pkt_len":82,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAAQHp6QAA\/BrGvCgoKCgoKCgvKbmmJmGzsIgAAAACwAv\/\/ouIAAAIEBVABAwMFAQEICm\/8XGwAAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483459978,"pkt_len":82,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAAQHp6QAA+BrKvCgoKCgoKCgvKbmmJmGzsIgAAAACwAv\/\/ouIAAAIEBVABAwMFAQEICm\/8XGwAAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483459979,"pkt_len":78,"pkt":"ABsXAAIwACKDPxfFgQABLAgARQAAPAAAQAA1BjYuCgoKCwoKCgppicpuPpqGQZhs7COgEmjf5dgAAAIEBSYEAggKXOpDgG\/8XGwBAwMH","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483459979,"pkt_len":70,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAANBx\/QAA\/Bg+3CgoKCgoKCgvKbmmJmGzsIz6ahkKAEBAaa4YAAAEBCApv\/F3CXOpDgA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483459979,"pkt_len":70,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAANBx\/QAA+BhC3CgoKCgoKCgvKbmmJmGzsIz6ahkKAEBAaa4YAAAEBCApv\/F3CXOpDgA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0689{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483459979,"pkt_len":317,"pkt":"LGv11hfFABsXAAIwgQABLAgARQABK\/fXQAA\/BjNnCgoKCgoKCgvKbmmJmGzsIz6ahkKAGBAaRyIAAAEBCApv\/F3CXOpDgPcAAACYNm5NAAAAANQHAAAAAAAAYWRtaW4uJGNtZAAAAAAA\/\/\/\/\/9AAAAAQaXNtYXN0ZXIAAQAAAANjbGllbnQAtQAAAANkcml2ZXIAKgAAAAJuYW1lAAgAAABQeU1vbmdvAAJ2ZXJzaW9uAAYAAAAzLjQuMAAAA29zAFUAAAACdHlwZQAHAAAARGFyd2luAAJuYW1lAAcAAABEYXJ3aW4AAmFyY2hpdGVjdHVyZQAHAAAAeDg2XzY0AAJ2ZXJzaW9uAAgAAAAxMC4xMS42AAACcGxhdGZvcm0AFwAAAENQeXRob24gMi43LjEwLmZpbmFsLjAAAAA=","pkt_caplen":317,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483558834,"pkt_len":82,"pkt":"AABeAAEBABsXAAIwgQABLAgARQAAQPlkQAA\/Bn5pCgoKDAoKCg3ZHmmJO1oRNAAAAACwAv\/\/WNkAAAIEBVABAwMFAQEIChY4dS8AAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483558834,"pkt_len":82,"pkt":"PIqwbyfFPIqwbyfMgQAAMggARQAAQPlkQAA+Bn9pCgoKDAoKCg3ZHmmJO1oRNAAAAACwAv\/\/WNkAAAIEBVABAwMFAQEIChY4dS8AAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0359{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483558835,"pkt_len":78,"pkt":"ABsXAAIwPIqwbnfFgQABLAgARQAAPAAAQAA0BoLSCgoKDQoKCgxpidkeO6pi7TtaETWgEhagavwAAAIEBbQEAggKjPy8NBY4dS8BAwMJ","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483558835,"pkt_len":70,"pkt":"AABeAAEBABsXAAIwgQABLAgARQAANBMKQAA\/BmTQCgoKDAoKCg3ZHmmJO1oRNTuqYu6AEBAgn6wAAAEBCAoWOHXNjPy8NA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483558835,"pkt_len":70,"pkt":"PIqwbyfFPIqwbyfMgQAAMggARQAANBMKQAA+BmXQCgoKDAoKCg3ZHmmJO1oRNTuqYu6AEBAgn6wAAAEBCAoWOHXNjPy8NA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483558835,"pkt_len":129,"pkt":"AABeAAEBABsXAAIwgQABLAgARQAAbzJyQAA\/BkUtCgoKDAoKCg3ZHmmJO1oRNTuqYu6AGBAgheQAAAEBCAoWOHXNjPy8NDsAAAAAAAAAAAAAANQHAAAAAAAAYWJ0ZXN0LiRjbWQAAAAAAP\/\/\/\/8TAAAAEGdldG5vbmNlAAEAAAAA","pkt_caplen":129,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483726705,"pkt_len":82,"pkt":"ABsXAAEkACKDPxfFgQAAZAgARQAAQCMwQAA9BrgMCgoKDgoKCg\/wP2mJBNDEtQAAAACwwv\/\/uGgAAAIEBWoBAwMFAQEICjJ1xd4AAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483726705,"pkt_len":78,"pkt":"ACKDPxfFABsXAAEkgQAAZAgARQAAPAAAQAA4BuBACgoKDwoKCg5pifA\/z9O+JwTQxLagUnEgLR0AAAIEBbQEAggKGQyESzJ1xd4BAwMH","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483726705,"pkt_len":70,"pkt":"ABsXAAEkACKDPxfFgQAAZAgARQAANDYCQAA9BqVGCgoKDgoKCg\/wP2mJBNDEts\/TviiAEBAavSkAAAEBCAoydcXkGQyESw==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0432{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483726705,"pkt_len":128,"pkt":"ABsXAAEkACKDPxfFgQAAZAgARQIAbrdWQAA9BiO2CgoKDgoKCg\/wP2mJBNDEts\/TviiAGBAaBDcAAAEBCAoydcXkGQyESzoAAABMBAAAAAAAANQHAAAAAAAAYWRtaW4uJGNtZAAAAAAAAQAAABMAAAAQaXNNYXN0ZXIAAQAAAAA=","pkt_caplen":128,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483737232,"pkt_len":82,"pkt":"ABsXAAEkLGv11hfFgQAAZAgARQAAQB7UQAA6BjnMCgoKEAoKChHInmmJ0eCpcgAAAACwAv\/\/iv8AAAIEBWoBAwMFAQEICj5g2FMAAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483737232,"pkt_len":78,"pkt":"ACKDPxfFABsXAAEkgQAAZAgARQAAPAAAQAAyBmCkCgoKEQoKChBpicie7T3P\/tHgqXOgEkXqkCgAAAIEBbQEAggKAY8GyD5g2FMBAwMI","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483737232,"pkt_len":70,"pkt":"ABsXAAEkLGv11hfFgQAAZAgARQAANFg1QAA6BgB3CgoKEAoKChHInmmJ0eCpc+09z\/+AEBAa9MAAAAEBCAo+YNhYAY8GyA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0711{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483737232,"pkt_len":339,"pkt":"ABsXAAEkLGv11hfFgQAAZAgARQABQQ0wQAA6BkpvCgoKEAoKChHInmmJ0eCpc+09z\/+AGBAaUdAAAAEBCAo+YNhYAY8GyA0BAAAAAAAAAAAAANQHAAAAAAAAYWRtaW4uJGNtZAAAAAAAAQAAAOYAAAAQaXNNYXN0ZXIAAQAAAANjbGllbnQAywAAAANhcHBsaWNhdGlvbgAdAAAAAm5hbWUADgAAAE1vbmdvREIgU2hlbGwAAANkcml2ZXIAOgAAAAJuYW1lABgAAABNb25nb0RCIEludGVybmFsIENsaWVudAACdmVyc2lvbgAGAAAAMy40LjAAAANvcwBWAAAAAnR5cGUABwAAAERhcndpbgACbmFtZQAJAAAATWFjIE9TIFgAAmFyY2hpdGVjdHVyZQAHAAAAeDg2XzY0AAJ2ZXJzaW9uAAcAAAAxNi4zLjAAAAAA","pkt_caplen":339,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0371{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":82,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAAQILYQAA\/BvoMCgoKEgoKChP8NnUwNO8EYwAAAACwAv\/\/CB0AAAIEBVABAwMFAQEICh4cp5sAAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":82,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAAQILYQAA+BvsMCgoKEgoKChP8NnUwNO8EYwAAAACwAv\/\/CB0AAAIEBVABAwMFAQEICh4cp5sAAAAABAIAAA==","pkt_caplen":82,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0360{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":78,"pkt":"LGv11hfMLGv11hfFgQAAMggARQAAPAAAQAA9Bn7pCgoKEwoKChJ1MPw2EZaBKjTvBGSgEjiQwtwAAAIEBbQEAggKUsc3tB4cp5sBAwMJ","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0361{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":78,"pkt":"ABsXAAIwLGv11hfFgQABLAgARQAAPAAAQAA8Bn\/pCgoKEwoKChJ1MPw2EZaBKjTvBGSgEjiQwtwAAAIEBbQEAggKUsc3tB4cp5sBAwMJ","pkt_caplen":78,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":70,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAANJUmQAA\/BufKCgoKEgoKChP8NnUwNO8EZBGWgSuAEBAgGbQAAAEBCAoeHKgCUsc3tA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":70,"pkt":"LGv11hfFLGv11hfMgQAAMggARQAANJUmQAA+BujKCgoKEgoKChP8NnUwNO8EZBGWgSuAEBAgGbQAAAEBCAoeHKgCUsc3tA==","pkt_caplen":70,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0456{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","pkt_oversize":false,"pkt_ts":1483814916,"pkt_len":143,"pkt":"LGv11hfFABsXAAIwgQABLAgARQAAfYoRQAA\/BvKWCgoKEgoKChP8NnUwNO8EZBGWgSuAGBAgykwAAAEBCAoeHKgCUsc3tEkAAACHkQAA\/\/\/\/\/9QHAAAAAAAASW5hY3RpdmVVc2VySWRlbnRpdHkuJGNtZAAAAAAAAQAAABMAAAAQZ2V0bm9uY2UAAQAAAAA=","pkt_caplen":143,"pkt_type":33024,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap","type":33024}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mongodb.pcap"}
diff --git a/tests/result/nDPId_mpeg.pcap.txt b/tests/result/nDPId_mpeg.pcap.txt
new file mode 100644
index 000000000..b99336e03
--- /dev/null
+++ b/tests/result/nDPId_mpeg.pcap.txt
@@ -0,0 +1,21 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1434379491040,"flow_last_seen":1434379491040,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp"}
+0411{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":78,"pkt":"yGyHABajPBXCt3IOCABFAABAOE9AAEAGJUTAqFCgLmWdd9n8AFBP68YoAAAAALAC\/\/\/OTgAAAgQFtAEDAwUBAQgKFSiGAAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":76,"pkt":"PBXCt3IOyGyHABajCABFAAA8AABAADIGa5cuZZ13wKhQoABQ2fyPIjpcT+vGKaAScSAIFwAAAgQFqAQCCAoAu5vaFSiGAAEDAwhf8g==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":66,"pkt":"yGyHABajPBXCt3IOCABFAAA02wVAAEAGgpnAqFCgLmWdd9n8AFBP68YpjyI6XYAQECCXiwAAAQEIChUohk0Au5va","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":214,"pkt":"yGyHABajPBXCt3IOCABFAADI62NAAEAGcafAqFCgLmWdd9n8AFBP68YpjyI6XYAYECBs0gAAAQEIChUohk0Au5vaR0VUIC8wLm1wMyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogV2dldC8xLjE2LjMgKGRhcndpbjE0LjEuMCkNCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGlkZW50aXR5DQpIb3N0OiBsdWNhLm50b3Aub3JnDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1434379491040,"flow_last_seen":1434379491117,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":32,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.ntop","category":"Network"},"http": {"hostname":"luca.ntop.org","url":"luca.ntop.org\/0.mp3","code":0,"content_type":"","user_agent":"Wget\/1.16.3 (darwin14.1.0)"}}
+0396{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":68,"pkt":"PBXCt3IOyGyHABajCABFAAA0obBAADIGye4uZZ13wKhQoABQ2fyPIjpdT+vGvYAQAHamjgAAAQEICgC7m+0VKIZNJ8A=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+2380{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1434379491040,"flow_last_seen":1434379491158,"flow_tot_l4_data_len":1796,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.ntop","category":"Media"},"http": {"hostname":"luca.ntop.org","url":"luca.ntop.org\/0.mp3","code":200,"content_type":"audio\/mpeg","user_agent":"Wget\/1.16.3 (darwin14.1.0)"}}
+2415{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":66,"pkt":"yGyHABajPBXCt3IOCABFAAA0lnBAAEAGxy7AqFCgLmWdd9n8AFBP68a9jyJFlYAQD9OL0AAAAQEIChUohnUAu5vu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2375{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":66,"pkt":"yGyHABajPBXCt3IOCABFAAA0ksVAAEAGytnAqFCgLmWdd9n8AFBP68a9jyJLMYAQEACGBgAAAQEIChUohnYAu5vu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2409{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":1502,"pkt":"PBXCt3IOyGyHABajCABFAAXQobRAADIGxE4uZZ13wKhQoABQ2fyPIksxT+vGvYAQAHY97gAAAQEICgC7m+4VKIZNBZCBy3xxV1Xf\/\/\/\/84jE6EG0EnAC3tbd\/\/\/\/\/\/\/\/9ds+YplbLmUIrimzVW2tkQ6XuirepT+9wW6ONNzxg4UHKCmPC2H5YWUBj0Axadp9U6DDiOBRaTqdEQAAwGKTOA+KyFChYYYLTZYgs0hCoGpuATVOqTPlDZZQx4RQAuC0owIYMaFU6VVWCP6VAxfrbs+EAQYIXGZHoKDnQceAjBwkFDrPa6D6UJaKRO47CrF1O9K4eiTJW2Zu16PK4lSXqlkLlbw1Jc41+CXtdmMr\/YkuyKKruKPxanYB0F9gqROqpC01OpjEQSmPBnUr2dco49WVDVU3nInunj1XeoFULsrUlHujo7CpFYnkU16fop+9j1bGysCeHeLNne72m1anr8Xp\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/84jE9ERT2mwA5t7d\/7\/xjF\/jOLbti2753bWvfFq08JCIGylaapE0wINVFFmev8yMGWBhY6MgTUi9ZgSsb8shgo8T0s+NhKUjmwvCODxojuDk0soqqOihg\/SaIUmEgLZUbDRlgzMMZ83dgAcAjwKyOFITDGDZPtZTAXGLPGHAaAFaSGBgyIYYPgINAgA\/AFCRkARSkOcKVYwZ5GtL7YU40PxZmLkOTFaSStkpqWQ0Sc7EWlxjKje1UEllMhajDC7tppJiruipsjTcstLYtGIcCaUqLRLMY59qJ+4IXBRCXgMKObUSyIc4Ic2HghSjTDGfDYrUupVW+W0bqjAqk88bIrS1MbHnMrLHtLrULL61qarrd\/\/v\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/84jE9USb2mwC3t7d+f\/nOLYpm1d1xjeb1+93vqX7pFiWpKlTkaAExgyqEp+VNYeoc6hsHguH0DwtbES0wJ51FRGSnAhCfcvg0GMwt9Oule0dbJx8uILslLigAqGGga4SnaRpcwIIy9SIByowYLEO6\/2mNyIAADhKpapspSBBcYqAbSViqZLbTG03jxXAMAZPDj3uw\/rKWcsMa4mq30Qe+ovyPMYhyMum5Mpep2HbkMtYQ7DXXpU5VUnntfFh0MxEaBfBnq8uJSj\/T5fRfqtgJmpzYMRSDuHbAXCydSQTp6JMqzhSKdSiULfAVDxyWnJcLtDDVTq5Sqecka4q90fz1sZmxysuVTDhMzjEiTwd0h5186vTGt\/f\/\/\/\/\/\/\/\/\/\/\/\/84jE9UXr+mgC3x7d\/\/87z7+9vvF951PW2LV9IW\/mlfDtTNrVraeJIBs19zoXGzVgiw7nRIKSYyeDkObOCINCNwGAgA+0FLGMbDoMSSfDJy\/ABXgCCy0082mGSbxqIwXlTsLqjyUjSzpazGzFRRymHtYR7KHNcS3YJBoKZKDO4xNMpPYyQZUihlSpeO7HoFXw3VLF8pC60vjklki5LbrzqxFFX5lMCNYn7UPt7SyltGBzK32HtxdiGGp0D8K0P+5LKbqnm5nPw\/RMSSHyWqUOpEMBB5jhNosKsGybxXFzLsYJORN1DSOTA6jRXJ+HWfplnkqDrbtxxuvi3GW\/y3ljb1PCTbUp1Ghk6tqtrWFy5v1JmHBvCrG1iBatPbH\/\/\/\/\/84jE8EcMPmQA5t7c\/\/\/\/\/\/\/\/\/\/8\/Nca3q9MY3DxXV8\/FI+bVh+vzPXOKQft\/W9K21Xv42KTSYk0qjax4ZbAAYsYgADuF\/GlGQRwHKxLNXq2DDKKAQkYM2Ff5i82pwplRQhAO\/Mt48MkZGTQNMZsoMvQa9pE1nGKhbKlTNbhJkClFcKaSpJdzCnuZQ5EtZTJF0syUvfVh0BrXdx1nGYwwResbwghg0Hwl4ZXCVBIadBf7OXBa9AS1JqObhtmrUmlKNYOfLnLedC2w3FAPFTu0WUrOgmJcoovyEJA0EDQ74JlD3X2wp1WVq5OUkKGluIUjTLVDQdaNNJZIwUrSdZ4MeUohy3FiqZkXVW5eZZkwz10=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+2419{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":66,"pkt":"yGyHABajPBXCt3IOCABFAAA0OtBAAEAGIs\/AqFCgLmWdd9n8AFBP68a9jyJWaYAQD9N6+gAAAQEIChUohncAu5vu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2381{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+1207{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","pkt_oversize":false,"pkt_ts":1434379491,"pkt_len":665,"pkt":"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","pkt_caplen":665,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1434379491040,"flow_last_seen":1434379491221,"flow_tot_l4_data_len":9991,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":525,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.80.160","dst_ip":"46.101.157.119","src_port":55804,"dst_port":80,"l4_proto":"tcp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpeg.pcap"}
diff --git a/tests/result/nDPId_mpegts.pcap.txt b/tests/result/nDPId_mpegts.pcap.txt
new file mode 100644
index 000000000..1caecba61
--- /dev/null
+++ b/tests/result/nDPId_mpegts.pcap.txt
@@ -0,0 +1,4 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpegts.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+2595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpegts.pcap","pkt_oversize":false,"pkt_ts":1435209297,"pkt_len":1362,"pkt":"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","pkt_caplen":1362,"pkt_type":33024,"pkt_ipoffset":14}
+0173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpegts.pcap","type":33024}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mpegts.pcap"}
diff --git a/tests/result/nDPId_mssql_tds.pcap.txt b/tests/result/nDPId_mssql_tds.pcap.txt
new file mode 100644
index 000000000..e5fee1315
--- /dev/null
+++ b/tests/result/nDPId_mssql_tds.pcap.txt
@@ -0,0 +1,74 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1240877917888,"flow_last_seen":1240877917888,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":1111,"dst_port":1433,"l4_proto":"tcp"}
+0655{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1240877917,"pkt_len":256,"pkt":"AAwpiUrKAFBWwAABCABFAADynIJAAEAGGaUKb29vCgAAAQRXBZk+5C72WSFQkoAYAFx5qQAAAQEICgQLsN8AAVvMAQEAvgAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAIABzAGUAdAAgAHQAcgBhAG4AcwBhAGMAdABpAG8AbgAgAGkAcwBvAGwAYQB0AGkAbwBuACAAbABlAHYAZQBsACAAIAByAGUAYQBkACAAYwBvAG0AbQBpAHQAdABlAGQAIAAgAHMAZQB0ACAAaQBtAHAAbABpAGMAaQB0AF8AdAByAGEAbgBzAGEAYwB0AGkAbwBuAHMAIABvAGYAZgAgAA==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1240877917888,"flow_last_seen":1240877917888,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":1111,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0449{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1240877917,"pkt_len":100,"pkt":"AFBWwAABAAwpiUrKCABFAABWA25AAIAGc1UKAAABCm9vbwWZBFdZIVCSPuQvtIAYQa2\/wgAAAQEICgABW8wEC7DfBAEAIgA1AQD9AQD5AAAAAAAAAAAA\/QAAugAAAAAAAAAAAA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1240877917,"pkt_len":358,"pkt":"AAwpiUrKAFBWwAABCABFAAFYnINAAEAGGT4Kb29vCgAAAQRXBZk+5C+0WSFQtIAYAFxIvAAAAQEICgQLsOcAAVvMAwEBJAAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANDQAQABQADAAIABuAHYAYQByAGMAaABhAHIAKAA0ADAAMAAwACkALABAAFAAMQAgAGkAbgB0AAAA50AfCQTQADSQAHMAZQBsAGUAYwB0ACAAKgAgAGYAcgBvAG0AIAB0AGUAcwB0AF8AdABhAGIAbABlAF8AMQAgAHcAaABlAHIAZQAgAG4AYQBtAGUAIAA9ACAAQABQADAAIABhAG4AZAAgAGkAZAAgAD0AIABAAFAAMQAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgAAAA50AfCQTQADQGAHoAegB6AAAAJgQEAgAAAA==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0881{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1240877918,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1240877917888,"flow_last_seen":1240877918029,"flow_tot_l4_data_len":1002,"flow_min_l4_data_len":66,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":250,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":1111,"dst_port":1433,"l4_proto":"tcp"}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1259762400004,"flow_last_seen":1259762400004,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":2222,"dst_port":1433,"l4_proto":"tcp"}
+0443{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":98,"pkt":"ABj+dhvGERERERESCABFAABUAAdAAEAGtr4Kb29vCgAAAQiuBZn\/ymPG\/zlOU1AYEAArKgAAAQEALAAAAQBDAE8ATQBNAEkAVAAgAFQAUgBBAE4AUwBBAEMAVABJAE8ATgA=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1259762400004,"flow_last_seen":1259762400004,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":64,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":64,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":2222,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0407{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":71,"pkt":"ABj+dhvGERERERESCABFAAA5AAhAAEAGttgKAAABCm9vbwWZCK7\/OU5T\/8pj8lAYEABYKQAABAEAEQE6AQD9AADVAAAAAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1259762400022,"flow_last_seen":1259762400022,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":3333,"dst_port":1433,"l4_proto":"tcp"}
+0631{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":239,"pkt":"ABj+dhvGERERERESCABFAADhAAlAAEAGti8Kb29vCgAAAQ0FBZmoWe0S76GBTlAYEAB74gAAAwkAuQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAADgBwAF8ARwBlAHQAQgBvAGcAdQBzAEQAYQB0AGEAAAALQABTAGUAYQByAGMAaABUAHkAcABlAAAmAQEBFUAATQBhAHgAVwBhAGkAdABUAGkAbQBlAEkAbgBTAGUAYwBvAG4AZABzAAAmBAQAAAAAE0AAUAByAG8AYwBlAHMAcwBOAGUAZwBhAHQAaQB2AGUAQQBjAGsAACYBAQA=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1259762400022,"flow_last_seen":1259762400022,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":3333,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1259762400033,"flow_last_seen":1259762400033,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":1102,"flow_max_l4_data_len":1102,"flow_avg_l4_data_len":1102,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":4444,"dst_port":1433,"l4_proto":"tcp"}
+1829{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":1136,"pkt":"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","pkt_caplen":1136,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1259762400033,"flow_last_seen":1259762400033,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":1102,"flow_max_l4_data_len":1102,"flow_avg_l4_data_len":1102,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":4444,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1259762400716,"flow_last_seen":1259762400716,"flow_tot_l4_data_len":210,"flow_min_l4_data_len":210,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":5555,"dst_port":1433,"l4_proto":"tcp"}
+0640{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":244,"pkt":"AAwp2\/PSAB3lNE84CABFAADmQ4pAAH8GM6kKb29vCgAAARWzBZmoeiv6Zz8h41AY96R0ygAAAQEAvgAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAIABzAGUAdAAgAHQAcgBhAG4AcwBhAGMAdABpAG8AbgAgAGkAcwBvAGwAYQB0AGkAbwBuACAAbABlAHYAZQBsACAAIAByAGUAYQBkACAAYwBvAG0AbQBpAHQAdABlAGQAIAAgAHMAZQB0ACAAaQBtAHAAbABpAGMAaQB0AF8AdAByAGEAbgBzAGEAYwB0AGkAbwBuAHMAIABvAGYAZgAgAA==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1259762400716,"flow_last_seen":1259762400716,"flow_tot_l4_data_len":210,"flow_min_l4_data_len":210,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":210,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":5555,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0432{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":88,"pkt":"AAAMB6wCAAwp2\/PSCABFAABKJJBAAIAGUj8KAAABCm9vbwWZFbNnPyHjqHosuFAY+DP7pwAABAEAIgAzAQD9AQD5AAAAAAAAAAAA\/QAAugAAAAAAAAAAAA==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762400,"pkt_len":307,"pkt":"AAwp2\/PSAB3lNE84CABFAAElQ4tAAH8GM2kKb29vCgAAARWzBZmoeiy4Zz8iBVAY94KXAwAAAwEA\/QAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANP\/\/AADnQB8JBNAANLgAYwByAGUAYQB0AGUAIAB0AGEAYgBsAGUAIABuAGUAdwBzAHkAYgAgACgAYwBvAGwAdQBtAG4AMQAgAGMAaABhAHIAKAAzADAAKQAgAG4AbwB0ACAAbgB1AGwAbAAsACAAYwBvAGwAdQBtAG4AMgAgAGMAaABhAHIAKAAzADAAKQAgAG4AdQBsAGwALABjAG8AbAB1AG0AbgAzACAAYwBoAGEAcgAoADMAMAApACAAbgB1AGwAbAApAA==","pkt_caplen":307,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762401,"pkt_len":111,"pkt":"AAAMB6wCAAwp2\/PSCABFAABhJJFAAIAGUicKAAABCm9vbwWZFbNnPyIFqHottVAY9zYDBAAABAEAOQAzAQD\/AQDGAAAAAAAAAAAAeQAAAACsAAAAAQAAAAAAACYEBAEAAAD+AADgAAAAAAAAAAAA","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762401,"pkt_len":287,"pkt":"AAwp2\/PSAB3lNE84CABFAAERQ5BAAH8GM3gKb29vCgAAARWzBZmoei21Zz8iPlAY90mahQAAAwEA6QAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANP\/\/AADnQB8JBNAANKQAaQBuAHMAZQByAHQAIABJAE4AVABPACAAbgBlAHcAcwB5AGIAIAAoAGMAbwBsAHUAbQBuADEALAAgAGMAbwBsAHUAbQBuADIALAAgAGMAbwBsAHUAbQBuADMAKQAgAFYAQQBMAFUARQBTACAAKAAnAGYAaQByAHMAdAAnACwAIAAnAHMAZQBjAG8AbgBkACcALAAgACcAdABoAGkAcgBkACcAKQA=","pkt_caplen":287,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762401,"pkt_len":111,"pkt":"AAAMB6wCAAwp2\/PSCABFAABhJJJAAIAGUiYKAAABCm9vbwWZFbNnPyI+qHounlAY9k0BvQAABAEAOQAzAQD\/EQDDAAEAAAAAAAAAeQAAAACsAAAAAQAAAAAAACYEBAIAAAD+AADgAAAAAAAAAAAA","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762401,"pkt_len":115,"pkt":"AAwp2\/PSAB3lNE84CABFAABlQ6BAAH8GNBQKb29vCgAAARWzBZmoei6eZz8id1AY9xAcOwAAAwEAPQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8MAAAAAAAmBAQCAAAA\/\/\/\/DAAAAAAAJgQEAgAAAA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762401,"pkt_len":134,"pkt":"AAAMB6wCAAwp2\/PSCABFAAB4JJNAAIAGUg4KAAABCm9vbwWZFbNnPyJ3qHou21AY9hB+EwAABAEAUAAzAQD\/EQDDAAEAAAAAAAAAeQAAAAB5AAAAAP6BAOAAAAAAAAAAAAD\/EQDDAAEAAAAAAAAAeQAAAAB5AAAAAP4AAOAAAAAAAAAAAAA=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762401,"pkt_len":60,"pkt":"AAwp2\/PSAB3lNE84CABFAAAoQ6FAAH8GNFAKb29vCgAAARWzBZmoei7bZz8ix1AQ9sC4jAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762403,"pkt_len":163,"pkt":"AAwp2\/PSAB3lNE84CABFAACVQ61AAH8GM9cKb29vCgAAARWzBZmoei7bZz8ix1AY9sCuDwAAAwEAbQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8NAAAAAAEmBAQAAAAAAADnQB8JBNAANP\/\/AADnQB8JBNAANCgAcwBlAGwAZQBjAHQAIAAqACAAZgByAG8AbQAgAG4AZQB3AHMAeQBiAA==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0971{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762403,"pkt_len":492,"pkt":"AAAMB6wCAAwp2\/PSCABFAAHeJJRAAIAGUKcKAAABCm9vbwWZFbNnPyLHqHovSFAY9aNzdgAABAEBtgAzAQCBAwAAAAAACACvHgAJBNAANAdjAG8AbAB1AG0AbgAxAAAAAAAJAK8eAAkE0AA0B2MAbwBsAHUAbQBuADIAAAAAAAkArx4ACQTQADQHYwBvAGwAdQBtAG4AMwDRHgBmaXJzdCAgICAgICAgICAgICAgICAgICAgICAgICAeAHNlY29uZCAgICAgICAgICAgICAgICAgICAgICAgIB4AdGhpcmQgICAgICAgICAgICAgICAgICAgICAgICAg0R4AZmlyc3QgICAgICAgICAgICAgICAgICAgICAgICAgHgBzZWNvbmQgICAgICAgICAgICAgICAgICAgICAgICAeAHRoaXJkICAgICAgICAgICAgICAgICAgICAgICAgINEeAGZpcnN0ICAgICAgICAgICAgICAgICAgICAgICAgIB4Ac2Vjb25kICAgICAgICAgICAgICAgICAgICAgICAgHgB0aGlyZCAgICAgICAgICAgICAgICAgICAgICAgICD\/EQDBAAMAAAAAAAAAeQAAAACsAAAAAQAAAAAAACYEBAMAAAD+AADgAAAAAAAAAAAA","pkt_caplen":492,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762403,"pkt_len":60,"pkt":"AAwp2\/PSAB3lNE84CABFAAAoQ7FAAH8GNEAKb29vCgAAARWzBZmoei9IZz8kfVAQ\/ACxKQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762405,"pkt_len":99,"pkt":"AAwp2\/PSAB3lNE84CABFAABVQ\/hAAH8GM8wKb29vCgAAARWzBZmoei9IZz8kfVAY\/ABLvwAAAwEALQAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAA\/\/8MAAAAAAAmBAQDAAAA","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0947{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762405,"pkt_len":474,"pkt":"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","pkt_caplen":474,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762406,"pkt_len":60,"pkt":"AAwp2\/PSAB3lNE84CABFAAAoRAdAAH8GM+oKb29vCgAAARWzBZmoei91Zz8mIVAQ+lyw\/AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1259762474884,"flow_last_seen":1259762474884,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":6666,"dst_port":1433,"l4_proto":"tcp"}
+2341{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1325{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":754,"pkt":"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","pkt_caplen":754,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762474,"pkt_len":393,"pkt":"ABI\/\/61OABI\/\/6f2CABFAAF73nVAAIAGlygKb29vCgAAARoKBZn0dquX83WfcFAY\/vLojgAAAwEBUwAAAgBbAWMAaQAgAG8AZAAgAHcAYQByAHUAbgBrAPMAdwAgAHAAbwBnAG8AZABvAHcAeQBjAGgAKQAuACAAVABhACAAdAByAGEAcwBhACAAbgBpAGUAIAB3AHkAYgBhAGMAegBhACAAYgBCARkBZADzAHcALgAuAC4AIABMAGkAbQBpAHQAIABpAGwAbwBbAWMAaQAgAHoAZQBzAHAAbwBCAfMAdwA6ACAAMgA1AC4ACgAKADUALgAyAC4AIABaAGEAYQB3AGEAbgBzAG8AdwBhAG4AYQAgACgAWgApACAALQAgACgAbwBrAC4AIAAxADQAIABrAG0AKQAgAC0AIAAiAFQAeQBsAGsAbwAgAGQAbABhACAAVAB3AG8AaQBjAGgAIABvAGMAegB1ACIAAAAAAApAAE8AcABlAHIAYQB0AGkAbwBuAAAmBAQBAAAA","pkt_caplen":393,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1259762477536,"flow_last_seen":1259762477536,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":391,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":391,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":7777,"dst_port":1433,"l4_proto":"tcp"}
+0895{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762477,"pkt_len":425,"pkt":"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","pkt_caplen":425,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1259762477536,"flow_last_seen":1259762477536,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":391,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":391,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":7777,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1259762482456,"flow_last_seen":1259762482456,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":8888,"dst_port":1433,"l4_proto":"tcp"}
+0510{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1259762482,"pkt_len":142,"pkt":"ABI\/\/61OABI\/\/6gdCABFAACA6VZAAIAGjUIKb29vCgAAASK4BZmoWq7z77DJrlAY\/kP\/5gAAAwkAWAAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAGwBwAF8ARwBlAHQATQB5AEUAeABhAG0AcABsAGUAVABhAGIAbABlAFIAbwB3AEMAbwB1AG4AdAAAAA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1259762482456,"flow_last_seen":1259762482456,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":8888,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1259762400022,"flow_last_seen":1259762400022,"flow_tot_l4_data_len":205,"flow_min_l4_data_len":205,"flow_max_l4_data_len":205,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":3333,"dst_port":1433,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":4,"flow_packet_id":17,"flow_first_seen":1259762400716,"flow_last_seen":1259762407935,"flow_tot_l4_data_len":2477,"flow_min_l4_data_len":20,"flow_max_l4_data_len":458,"flow_avg_l4_data_len":145,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":5555,"dst_port":1433,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1259762477536,"flow_last_seen":1259762477536,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":391,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":391,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":7777,"dst_port":1433,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1259762400004,"flow_last_seen":1259762400004,"flow_tot_l4_data_len":101,"flow_min_l4_data_len":37,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":50,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":2222,"dst_port":1433,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1259762400033,"flow_last_seen":1259762400033,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":1102,"flow_max_l4_data_len":1102,"flow_avg_l4_data_len":1102,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":4444,"dst_port":1433,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1259762474884,"flow_last_seen":1259762474884,"flow_tot_l4_data_len":8479,"flow_min_l4_data_len":359,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1211,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":6666,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1259762474884,"flow_last_seen":1259762474884,"flow_tot_l4_data_len":8479,"flow_min_l4_data_len":359,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1211,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":6666,"dst_port":1433,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1259762482456,"flow_last_seen":1259762482456,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":8888,"dst_port":1433,"l4_proto":"tcp"}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1278068444584,"flow_last_seen":1278068444584,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":9999,"dst_port":1433,"l4_proto":"tcp"}
+0678{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1278068444,"pkt_len":272,"pkt":"ADAFzckRADAFzck9CABFAAECT7tAAIAGJlwKb29vCgAAAScPBZlFt6JP51MRDlAY+rgBzgAAAwEA2gAAAQAkAHAAcgBvAGMAXwBHAGUAdABNAHkARQB4AGEAbQBwAGwAZQBUAGEAYgBsAGUAUwBhAG0AcABsAGUATQBlAHQAYQBEAGEAdABhAAAAAAAkEBAzIhEAVUR3ZoiZqrvM3e7\/AAAfAADnAAAJBAABMgAAAACnJAAJBAABMiQAQUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVphYmNkZWZnaGlqAAAmBAQBAAAAAAAmCAgtAAAAAAAAAAAApQwADAABI0VniavN7\/7cupgAACYEBGwAAAA=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1278068444584,"flow_last_seen":1278068444584,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":9999,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1278068444614,"flow_last_seen":1278068444614,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":11111,"dst_port":1433,"l4_proto":"tcp"}
+0656{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1278068444,"pkt_len":253,"pkt":"ADAFzckRADAFzck9CABFAADvT85AAIAGJlwKb29vCgAAAStnBZlFt6Pw51OjJ1AY\/N33oQAAAwkAxwAAAQAkAHAAcgBvAGMAXwBHAGUAdABNAHkARQB4AGEAbQBwAGwAZQBUAGEAYgBsAGUAUwBhAG0AcABsAGUATQBlAHQAYQBEAGEAdABhAAAAAAAkEBAAESIzRFVmd4iZqrvM3e7\/AAAfAADnCgAJBAABMgoAQgBvAGcAdQBzAAAAHwAAJgQEAQAAAAAAJggILQAAAAAAAAAAAKUcABwAASNFZ4mrze\/ty6mHZUMhASNFZ4mrze\/ty6mHZQAAJgQEEgAAAA==","pkt_caplen":253,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1278068444614,"flow_last_seen":1278068444614,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":11111,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1278068444650,"flow_last_seen":1278068444650,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":288,"flow_max_l4_data_len":288,"flow_avg_l4_data_len":288,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":22222,"dst_port":1433,"l4_proto":"tcp"}
+0750{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1278068444,"pkt_len":322,"pkt":"ADAFzckRADAFzck9CABFAAE0T9pAAIAGJgsKb29vCgAAAVbOBZn+D2d0K1+fyFAY+5tcOQAAAwkBDAAAAQAXAHAAcgBvAGMAXwBGAGUAdABjAGgATQB5AEUAeABhAG0AcABsAGUARABhAHQAYQAAAAAAJBAQASNFZ4mrze8BI0VniavN7wAA5wAACQQAATIAAAAA5woACQQAATIKAEIATwBHAFUAUwAAAGgBAQAAAG8ICP7\/\/\/8AAAAAAAAmBAQAAAAAAAAmBAQAAAAAAAAmBAAAACQQAAAAaAEAAAAmAQEAAAClHAAcAAEjRWeJq83vASNFZ4mrze8BI0VniavN7wEjRWcAACYEAAAAJgEBAQAAJgQEAABQAAAAJggILQAAAAAAAAAAACYBAQEAAGgBAQAAAOcCAAkEAAEy\/\/8AASYBAA==","pkt_caplen":322,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1278068444650,"flow_last_seen":1278068444650,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":288,"flow_max_l4_data_len":288,"flow_avg_l4_data_len":288,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":22222,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1278068444666,"flow_last_seen":1278068444666,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":33333,"dst_port":1433,"l4_proto":"tcp"}
+0821{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","pkt_oversize":false,"pkt_ts":1278068444,"pkt_len":374,"pkt":"ADAFzckRADAFzck9CABFAAFoT95AAIAGJdMKb29vCgAAAYI1BZl4aO73Gv+xN1AY\/dgFJQAAAwkBQAAAAQAWAAAAEgAAAAIAAAAAAAAAAAABAAAAHQBkAGIAbwAuAHAAcgBvAGMAXwBHAGUAdABNAHkAUwBhAG0AcABsAGUARABhAHQAYQBJAHQAZQBtAHMAAAANQABTAGEAbQBwAGwAZQBJAHQAZQBtAEkAZAAAJBAQZhrDThSiU0infucGD\/\/\/BwdAAEQAYQB0AGEASQBkAADnAgAJBBAAAP\/\/DUAARABhAHQAYQBJAHQAZQBtAFQAeQBwAGUAACQQEJtFubyog2RFsdPp4ZhHj04IQABUAGEAYgBsAGUASQBkAADnAgAJBBAAAP\/\/DUAATQBhAHgARgBlAHQAYwBoAFMAaQB6AGUAACYEBGQAAAASQABTAG8AbQBlAE8AdABoAGUAcgBTAGEAbQBwAGwAZQBJAGQAACYEBAAAAAA=","pkt_caplen":374,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1278068444666,"flow_last_seen":1278068444666,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":33333,"dst_port":1433,"l4_proto":"tcp","ndpi": {"proto":"MsSQL-TDS","category":"Database"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1278068444614,"flow_last_seen":1278068444614,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":11111,"dst_port":1433,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1278068444650,"flow_last_seen":1278068444650,"flow_tot_l4_data_len":288,"flow_min_l4_data_len":288,"flow_max_l4_data_len":288,"flow_avg_l4_data_len":288,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":22222,"dst_port":1433,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1278068444584,"flow_last_seen":1278068444584,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":238,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":238,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":9999,"dst_port":1433,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1278068444666,"flow_last_seen":1278068444666,"flow_tot_l4_data_len":340,"flow_min_l4_data_len":340,"flow_max_l4_data_len":340,"flow_avg_l4_data_len":340,"midstream":1,"l3_proto":"ip4","src_ip":"10.111.111.111","dst_ip":"10.0.0.1","src_port":33333,"dst_port":1433,"l4_proto":"tcp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mssql_tds.pcap"}
diff --git a/tests/result/nDPId_mysql-8.pcap.txt b/tests/result/nDPId_mysql-8.pcap.txt
new file mode 100644
index 000000000..ff6d4db09
--- /dev/null
+++ b/tests/result/nDPId_mysql-8.pcap.txt
@@ -0,0 +1,9 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946708780103,"flow_last_seen":946708780103,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"10.42.18.198","src_port":8738,"dst_port":3306,"l4_proto":"tcp"}
+0406{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","pkt_oversize":false,"pkt_ts":946708780,"pkt_len":74,"pkt":"IiIiIiIiRERERERECABFAAA8OA9AAEAGI6zAqAFpCioSxiIiDOqSBUElAAAAAKACchDH0wAAAgQFtAQCCAoAA3kqAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","pkt_oversize":false,"pkt_ts":946708780,"pkt_len":74,"pkt":"REREREREIiIiIiIiCABFAAA8AABAAD8GXLsKKhLGwKgBaQzqIiISTcRTkgVBJqAScSDgsQAAAgQFtAQCCAoAARFeAAN5KgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","pkt_oversize":false,"pkt_ts":946708780,"pkt_len":66,"pkt":"IiIiIiIiRERERERECABFAAA0OBBAAEAGI7PAqAFpCioSxiIiDOqSBUEmEk3EVIAQAcl+1QAAAQEICgADeSoAARFe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","pkt_oversize":false,"pkt_ts":946708780,"pkt_len":153,"pkt":"REREREREIiIiIiIiCABFCACL1QpAAD8Gh1kKKhLGwKgBaQzqIiISTcRUkgVBJoAYAONr2QAAAQEICgABEV4AA3kqUwAAAAo4LjUuNDQtMCtkZWI4dTEAJgAAADFeaXQqciJNAP\/3CAIAD4AVAAAAAAAAAAAAAEA6PmshXjc2SlA1WABteXNxbF9uYXRpdmVfcGFzc3dvcmQA","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":946708780103,"flow_last_seen":946708780104,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":32,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"10.42.18.198","src_port":8738,"dst_port":3306,"l4_proto":"tcp","ndpi": {"proto":"MySQL","category":"Database"}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":946708780103,"flow_last_seen":946708780104,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":32,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"10.42.18.198","src_port":8738,"dst_port":3306,"l4_proto":"tcp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/mysql-8.pcap"}
diff --git a/tests/result/nDPId_nats.pcap.txt b/tests/result/nDPId_nats.pcap.txt
new file mode 100644
index 000000000..4e42d27b5
--- /dev/null
+++ b/tests/result/nDPId_nats.pcap.txt
@@ -0,0 +1,56 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzTwAAAAAsAL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5iAAAAAAQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAABEH7WJA7LPw3wic09sBL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5iNpSeYgQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzT0Oyz8OgBAx1\/4oAAABAQgKNpSeYjaUnmI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJA7LPw7wic09gBAx1\/4oAAABAQgKNpSeYjaUnmI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0739{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":365,"pkt":"AgAAAEUAAWkAAEAAQAYAAH8AAAF\/AAABEH7WJA7LPw7wic09gBgx1\/9dAAABAQgKNpSeaTaUnmJJTkZPIHsic2VydmVyX2lkIjoiTkFMRzU2SFFaNEM0SUxSSENHWVdNQ1NCVkM1VzJRSFg2V0tHSDdBMkkzNFAzRENFSElTTjcyQjciLCJzZXJ2ZXJfbmFtZSI6Ik5BTEc1NkhRWjRDNElMUkhDR1lXTUNTQlZDNVcyUUhYNldLR0g3QTJJMzRQM0RDRUhJU043MkI3IiwidmVyc2lvbiI6IjIuMS42IiwicHJvdG8iOjEsImdpdF9jb21taXQiOiI4YzhkNmY4IiwiZ28iOiJnbzEuMTMuOSIsImhvc3QiOiIwLjAuMC4wIiwicG9ydCI6NDIyMiwibWF4X3BheWxvYWQiOjEwNDg1NzYsImNsaWVudF9pZCI6MSwiY2xpZW50X2lwIjoiMTI3LjAuMC4xIn0gDQo=","pkt_caplen":365,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0324{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzT0Oy0BDgBAxzf4oAAABAQgKNpSeaTaUnmk=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0506{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":191,"pkt":"AgAAAEUAALsAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzT0Oy0BDgBgxzf6vAAABAQgKNpSeaTaUnmlDT05ORUNUIHsidmVyYm9zZSI6ZmFsc2UsInBlZGFudGljIjpmYWxzZSwidGxzX3JlcXVpcmVkIjpmYWxzZSwibmFtZSI6IiIsImxhbmciOiJDIiwidmVyc2lvbiI6IjIuMS4wIiwicHJvdG9jb2wiOjEsImVjaG8iOnRydWV9DQpQSU5HDQo=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJA7LQEPwic3EgBAx0\/4oAAABAQgKNpSeaTaUnmk=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":62,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAABEH7WJA7LQEPwic3EgBgx0\/4uAAABAQgKNpSebTaUnmlQT05HDQo=","pkt_caplen":62,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzcQOy0BJgBAxzf4oAAABAQgKNpSebTaUnm0=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzcQOy0BJgBExzf4oAAABAQgKNpSebTaUnm0=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJA7LQEnwic3FgBAx0\/4oAAABAQgKNpSebTaUnm0=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAYAAH8AAAF\/AAAB1iQQfvCJzcUOy0BJUBQxzf4cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0kAAAAAsAL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5xAAAAAAQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAABEH7WJfixMBXQ63dKsBL\/\/\/40AAACBD\/YAQMDBQEBCAo2lJ5yNpSecQQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0r4sTAWgBAx1\/4oAAABAQgKNpSecjaUnnI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJfixMBbQ63dKgBAx1\/4oAAABAQgKNpSecjaUnnI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0740{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":365,"pkt":"AgAAAEUAAWkAAEAAQAYAAH8AAAF\/AAABEH7WJfixMBbQ63dKgBgx1\/9dAAABAQgKNpSeczaUnnJJTkZPIHsic2VydmVyX2lkIjoiTkFMRzU2SFFaNEM0SUxSSENHWVdNQ1NCVkM1VzJRSFg2V0tHSDdBMkkzNFAzRENFSElTTjcyQjciLCJzZXJ2ZXJfbmFtZSI6Ik5BTEc1NkhRWjRDNElMUkhDR1lXTUNTQlZDNVcyUUhYNldLR0g3QTJJMzRQM0RDRUhJU043MkI3IiwidmVyc2lvbiI6IjIuMS42IiwicHJvdG8iOjEsImdpdF9jb21taXQiOiI4YzhkNmY4IiwiZ28iOiJnbzEuMTMuOSIsImhvc3QiOiIwLjAuMC4wIiwicG9ydCI6NDIyMiwibWF4X3BheWxvYWQiOjEwNDg1NzYsImNsaWVudF9pZCI6MiwiY2xpZW50X2lwIjoiMTI3LjAuMC4xIn0gDQo=","pkt_caplen":365,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0r4sTFLgBAxzf4oAAABAQgKNpSeczaUnnM=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0507{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":191,"pkt":"AgAAAEUAALsAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd0r4sTFLgBgxzf6vAAABAQgKNpSedjaUnnNDT05ORUNUIHsidmVyYm9zZSI6ZmFsc2UsInBlZGFudGljIjpmYWxzZSwidGxzX3JlcXVpcmVkIjpmYWxzZSwibmFtZSI6IiIsImxhbmciOiJDIiwidmVyc2lvbiI6IjIuMS4wIiwicHJvdG9jb2wiOjEsImVjaG8iOnRydWV9DQpQSU5HDQo=","pkt_caplen":191,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJfixMUvQ63fRgBAx0\/4oAAABAQgKNpSedjaUnnY=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":62,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAABEH7WJfixMUvQ63fRgBgx0\/4uAAABAQgKNpSedzaUnnZQT05HDQo=","pkt_caplen":62,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288040,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd9H4sTFRgBAxzf4oAAABAQgKNpSedzaUnnc=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288042,"pkt_len":62,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAABEH7WJfixMVHQ63fRgBgx0\/4uAAABAQgKNpSm4zaUnndQSU5HDQo=","pkt_caplen":62,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288042,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd9H4sTFXgBAxzf4oAAABAQgKNpSm4zaUpuM=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288042,"pkt_len":62,"pkt":"AgAAAEUAADoAAEAAQAYAAH8AAAF\/AAAB1iUQftDrd9H4sTFXgBgxzf4uAAABAQgKNpSm4zaUpuNQT05HDQo=","pkt_caplen":62,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0325{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","pkt_oversize":false,"pkt_ts":1586288042,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABEH7WJfixMVfQ63fXgBAx0v4oAAABAQgKNpSm4zaUpuM=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap","datalink":0,"header":33554432}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nats.pcap"}
diff --git a/tests/result/nDPId_nest_log_sink.pcap.txt b/tests/result/nDPId_nest_log_sink.pcap.txt
new file mode 100644
index 000000000..4579c7e46
--- /dev/null
+++ b/tests/result/nDPId_nest_log_sink.pcap.txt
@@ -0,0 +1,273 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1536712992228,"flow_last_seen":1536712992228,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63340,"dst_port":11095,"l4_proto":"tcp"}
+0394{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536712992,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2IAAP8GYxrAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536712992,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpRAAC0G7egjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713052,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2MAAP8GYxnAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713052,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpVAAC0G7ecjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713052,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpZAAC0G7eYjrlLtwKjyDytX92zEgGGECKi\/QFAQgdDz\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713052,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2QAAP8GYxjAqPIPI65S7fdsK1cIqL9AxIBhhVAQD+Vl6QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713112,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2UAAP8GYxfAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713112,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNpdAAC0G7eUjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713172,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2YAAP8GYxbAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713172,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNphAAC0G7eQjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713173,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNplAAC0G7eMjrlLtwKjyDytX92zEgGGECKi\/QFAQgdDz\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713173,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2cAAP8GYxXAqPIPI65S7fdsK1cIqL9AxIBhhVAQD+Vl6QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713233,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2gAAP8GYxTAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713233,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoNppAAC0G7eIjrlLtwKjyDytX92zEgGGFCKi\/QFAQgdDz\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536713293,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL2kAAP8GYxPAqPIPI65S7fdsK1cIqL8\/xIBhhVAQD+Vl6gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1536714602587,"flow_last_seen":1536714602587,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714602,"pkt_len":82,"pkt":"AJD7JidrGLQwJjRACABFAABEL4kAAP8RJr3AqPIPwKjyAc5xADUAMKk+CwgBAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1536714602587,"flow_last_seen":1536714602587,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0447{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714602,"pkt_len":98,"pkt":"GLQwJjRAAJD7JidrCABFAABUsrpAAEARInzAqPIBwKjyDwA1znEAQGW0CwiBgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1536714602587,"flow_last_seen":1536714602587,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1536714602612,"flow_last_seen":1536714602612,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63342,"dst_port":11095,"l4_proto":"tcp"}
+0395{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714602,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsL4oAAP8GGxPAqPIPI7yauvduK1cIvyQjAAAAAGACEgDGgwAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714602,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX927RT8zNCL8kJGASbvDKWAAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714602,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL4sAAP8GGxbAqPIPI7yauvduK1cIvyQk0U\/MzlAQEgA+3gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1104{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714603,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714603,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAolUBAADcGPWEjvJq6wKjyDytX927RT8zOCL8mN1AQcRDdugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1309{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714603,"pkt_len":733,"pkt":"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","pkt_caplen":733,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714603,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL40AAP8GGxTAqPIPI7yauvduK1cIvyY30U\/PdVAQD1k8ywAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714604,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcL44AAP8GGt\/AqPIPI7yauvduK1cIvyY30U\/PdVAYD1n0VgAAMgAAEwkDAAA2nicAADC0GAQAAAACMLQYEQyJBgQAAABSDhPagk9XmQBuC4ZSQzWHZRVqOg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":2,"flow_packet_id":8,"flow_first_seen":1536714602612,"flow_last_seen":1536714604778,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63342,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0387{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714604,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAolUJAADcGPV8jvJq6wKjyDytX927RT891CL8ma1AQcRDa3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714604,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuL48AAP8GGszAqPIPI7yauvduK1cIvyZr0U\/PdVAYD1kVPAAARAAQEwAAAAA2nicAADC0GAQAAAACMLQY6iCycpbj9YM8qGb2p6tfYGLfO+vxpb53yieUogkX8401cGq\/HaLsjzCpjScgmg==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714604,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAolUNAADcGPV4jvJq6wKjyDytX927RT891CL8msVAQcRDamQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714604,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABhlURAADcGPSQjvJq6wKjyDytX927RT891CL8msVAYcRByqgAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQY6iC2jHHVd+6Siw1zRFQ1BhRbjeUsJUW1rk\/qyiMgT0qR","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1008{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714604,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714605,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABflUVAADcGPSUjvJq6wKjyDytX927RT8+uCL8oeFAYdUCNTwAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQY6iB\/nMaYKMhAMXFY8tf+nXZnAd+GsL71CIlQg1iAyQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+1006{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714605,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714607,"pkt_len":101,"pkt":"AJD7JidrGLQwJjRACABFAABXL7IAAP8RJoHAqPIPwKjyAc5xADUAQyQGbMYBAAABAAAAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1536714602587,"flow_last_seen":1536714607328,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":48,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0546{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714607,"pkt_len":169,"pkt":"GLQwJjRAAJD7JidrCABFAACbt7BAAEARHT\/AqPIBwKjyDwA1znEAh2X7bMaBgAABAAIAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAHADAAFAAEAAAB4ACgRZWMyLTM1LTE3NC04Mi0yMzcJY29tcHV0ZS0xCWFtYXpvbmF3c8AywEcAAQABAAj0MQAEI65S7Q==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1536714602587,"flow_last_seen":1536714607527,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.174.82.237"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1536714607530,"flow_last_seen":1536714607530,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63343,"dst_port":11095,"l4_proto":"tcp"}
+0395{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714607,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsL7MAAP8GYsXAqPIPI65S7fdvK1cIymiPAAAAAGACEgDJ5gAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714607,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX92+qr\/jxCMpokGASaQPN\/AAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714607,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL7QAAP8GYsjAqPIPI65S7fdvK1cIymiQqq\/48lAQEgA8vQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1101{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714608,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714608,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoshtAAC0GcmEjrlLtwKjyDytX92+qr\/jyCMpqo1AQbODfyQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1302{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714608,"pkt_len":731,"pkt":"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","pkt_caplen":731,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714608,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL7YAAP8GYsbAqPIPI65S7fdvK1cIymqjqq\/7l1AQD1s6qgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcL7cAAP8GYpHAqPIPI65S7fdvK1cIymqjqq\/7l1AYD1vWbQAAMgAAEwsDAAA2nicAADC0GAMAAAACMLQYEQyMBgQAAACLjUe26FhRK2Su+3Sh50H2S\/Id7A==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":3,"flow_packet_id":8,"flow_first_seen":1536714607530,"flow_last_seen":1536714609684,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63343,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","category":"Cloud"}}
+0388{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosh1AAC0Gcl8jrlLtwKjyDytX92+qr\/uXCMpq11AQbODc8AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0944{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":458,"pkt":"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","pkt_caplen":458,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosh5AAC0Gcl4jrlLtwKjyDytX92+qr\/uXCMpsa1AQcRDXLAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":114,"pkt":"GLQwJjRAAJD7JidrCABFAABksh9AAC0GciEjrlLtwKjyDytX92+qr\/uXCMpsa1AYcRD5+gAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQY+yHwbAHdXh8+GNORngSo4bATkEhOQSdgs6InwUgRIkBhuMYj","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":176,"pkt":"AJD7JidrGLQwJjRACABFAACiL7kAAP8GYknAqPIPI65S7fdvK1cIymxrqq\/701AYDx9gXwAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQY+yHq8Hj1RzfgRN3XTu0+CiEKTy6+IzsA+mU6qvgBBUGVq3W78i5YloI79fuBd0YFwMzvdhnYb7vbqINLTsbYAHyNdClS55D32zHd4eHou\/xLB34fZkfI+mh+OB7vzJ\/vTPU=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+1247{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":683,"pkt":"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","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714609,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL7oAAP8GYsLAqPIPI65S7fdvK1cIymzlqq\/+SFAQEgAzEgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1536714610253,"flow_last_seen":1536714610253,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63344,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714610,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsL74AAP8GGt\/AqPIPI7yauvdwK1cI1a0HAAAAAGACEgA9hwAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714610,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93Bcs3xVCNWtCGASbvAGcQAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714610,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL78AAP8GGuLAqPIPI7yauvdwK1cI1a0IXLN8VlAQEgB69gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714610,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714613,"pkt_len":584,"pkt":"AJD7JidrGLQwJjRACABFAAI6L8MAAP8GGMzAqPIPI7yauvdwK1cI1a0IXLN8VlAYEgD6igAAEAIAEwwDAAA2nicAADC0GAQAAAACMLQYEQqSBgQAAACBAAA5+ABtAAEAWiMlAFojiiIEtkbpjQUSHUoTcWkXUWM9lVbNsoOuvfFUxmbNPsGiW\/wq5UMDWDxf2nPoFbYobKpXR6vLhI5RzviVBwA1ATABCGRioUb7JdsYJAIENwMnEwIAAADuMLQYGCYEvBKUGiYFvF68LTcGJxE2nicAADC0GBgkBwImCCUAWiMwCjkEJgNHeyfLyn8+Y4Q3KJESv6T1UZ7ximwyz0BZXSER6iqTRHr3ZzL\/QcomumvZXRQgQXcoi+vhk5Y1gykBGDWCKQEkAgUYNYQpATYCBAIEARgYNYEwAghG1Bj5qiAzNBg1gDACCE3B2i1iGUvgGDUMMAEdAIXDdHE3JrfWlel2eYaefOia8kf6YmRIxz7Xgq0wAh0Aqggyqhbk0\/a8FDNnwqqs7hWaOpuNhfC6EutljBgYGNUAAA4AAQAlAFojJAEFJAILJQMykCwEEDA1Q0EwMkFDNDQxNDAyOEYwBQgYtDAAACeeNjAGBhi0MCYAACwHCU5FU1QtOUUzNicKNp4nAAAwtBgnC4vxg94wk5+2LAkIMy4xLjRyYzMkDAEpZRiVCAAwARwghzo4rL9IB318LIxg\/LAqaKcA4fCuRscnp+mWMAIcBgUkZfHumFcJND3j932Gu2OJyi6\/7A8Wmb\/nLRg=","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714613,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosHFAADcGIjAjvJq6wKjyDytX93Bcs3xWCNWvGlAQcRAZ1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1301{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714613,"pkt_len":732,"pkt":"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","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1536714610253,"flow_last_seen":1536714613730,"flow_tot_l4_data_len":1886,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":269,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63344,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0396{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714613,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL8QAAP8GGt3AqPIPI7yauvdwK1cI1a8aXLN+\/FAQD1p45AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcL8UAAP8GGqjAqPIPI7yauvdwK1cI1a8aXLN+\/FAYD1qDHQAAMgAAEw0DAAA2nicAADC0GAQAAAACMLQYEQySBgQAAABV\/Z6UAgToaUwXoNzLJI2S7W4xGA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosHNAADcGIi4jvJq6wKjyDytX93Bcs378CNWvTlAQcRAW+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuL8YAAP8GGpXAqPIPI7yauvdwK1cI1a9OXLN+\/FAYD1qTSgAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYiiJm4E54PK4eJMUwpWAatNEYbrHr7bdwdYgawkQka8y1Frm005Mo5xRyBbf8bQ==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosHRAADcGIi0jvJq6wKjyDytX93Bcs378CNWvlFAQcRAWtAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABhsHVAADcGIfMjvJq6wKjyDytX93Bcs378CNWvlFAYcRByXQAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYiiJFUuzMNx8DflOVuOBBLLPLGfrP53rbJB3Obto1XgYJ","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1008{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536714615,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABfsHZAADcGIfQjvJq6wKjyDytX93Bcs381CNWxW1AYdUBgWAAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYiiJJQiz+L96IV3SFOxiBSZcbP\/mbp23+qRRvM0Emeg==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":0,"flow_packet_id":83,"flow_first_seen":1536712992228,"flow_last_seen":1536714607385,"flow_tot_l4_data_len":1722,"flow_min_l4_data_len":20,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63340,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","category":"Cloud"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":0,"flow_packet_id":83,"flow_first_seen":1536712992228,"flow_last_seen":1536714607385,"flow_tot_l4_data_len":1722,"flow_min_l4_data_len":20,"flow_max_l4_data_len":82,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63340,"dst_port":11095,"l4_proto":"tcp"}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":2,"flow_packet_id":72,"flow_first_seen":1536714602612,"flow_last_seen":1536714607322,"flow_tot_l4_data_len":16279,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":226,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63342,"dst_port":11095,"l4_proto":"tcp"}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":4,"flow_packet_id":21,"flow_first_seen":1536714610253,"flow_last_seen":1536714615546,"flow_tot_l4_data_len":3214,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":153,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63344,"dst_port":11095,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1536714602587,"flow_last_seen":1536714607527,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1536716402804,"flow_last_seen":1536716402804,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716402,"pkt_len":82,"pkt":"AJD7JidrGLQwJjRACABFAABEL\/cAAP8RJk\/AqPIPwKjyAc5xADUAMDxpd90BAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1536716402804,"flow_last_seen":1536716402804,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0447{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716402,"pkt_len":98,"pkt":"GLQwJjRAAJD7JidrCABFAABUcEtAAEARZOvAqPIBwKjyDwA1znEAQGW0d92BgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1536716402804,"flow_last_seen":1536716402805,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1536716402828,"flow_last_seen":1536716402828,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63345,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716402,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsL\/gAAP8GGqXAqPIPI7yauvdxK1cI4Q21AAAAAGACEgDczAAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716402,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93El8kNOCOENtmASbvAVfwAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716402,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL\/kAAP8GGqjAqPIPI7yauvdxK1cI4Q22JfJDT1AQEgCKBAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716403,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716403,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoksRAADcGP90jvJq6wKjyDytX93El8kNPCOEPyFAQcRAo4gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1302{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716403,"pkt_len":732,"pkt":"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","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716403,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoL\/sAAP8GGqbAqPIPI7yauvdxK1cI4Q\/IJfJF9VAQD1qH8gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716404,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcL\/wAAP8GGnHAqPIPI7yauvdxK1cI4Q\/IJfJF9VAYD1rm7wAAMgAAEw8DAAA2nicAADC0GAQAAAACMLQYEQyVBgQAAACt0l0ZnY6SlM7vjCpSkumsf2CXpA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":6,"flow_packet_id":8,"flow_first_seen":1536716402828,"flow_last_seen":1536716404974,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63345,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0388{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoksZAADcGP9sjvJq6wKjyDytX93El8kX1COEP\/FAQcRAmCAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuL\/0AAP8GGl7AqPIPI7yauvdxK1cI4Q\/8JfJF9VAYD1pqmgAARAAQEwAAAAA2nicAADC0GAQAAAACMLQY1yrQmv5AqlhV6\/eZEU6Z83DQLEb0IYwGPVyY7GVzIqmwdr20i6uJtbyrLETLSw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoksdAADcGP9ojvJq6wKjyDytX93El8kX1COEQQlAQcRAlwgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABhkshAADcGP6AjvJq6wKjyDytX93El8kX1COEQQlAYcRBUmQAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQY1yoJPXeMA2Na2lNb5EJxdMROSUZtrksu8WcrYyRTls\/A","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1007{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABfkslAADcGP6EjvJq6wKjyDytX93El8kYuCOESCVAYdUCWjwAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQY1yrUI1pzYO6El4WvDidxBDCiqep2W0Zbn9KnAb9E6Q==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+1011{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716405,"pkt_len":509,"pkt":"AJD7JidrGLQwJjRACABFAAHvL\/8AAP8GGNvAqPIPI7yauvdxK1cI4RIJJfJGZVAYDuoVUQAAxQEQEwIAAAA2nicAADC0GAQAAAACMLQY1yqABAywxCCA8D3PjjoFOb1Ce0gW1cuNNWbRuYysyr1G2YOIKmwfsanQwM2QeneXd5RmeMU0tOCucHcQb7y+XQTA0DJ7MnNP\/O0UR0qAMb5\/v5FUXV+G\/HCzJc18ar\/uvx5yasHK3PlMOeESls718vo62y8zDNEPqWDWEEONI0gJlHP5MGyeYs+xET0zzNaGW2ykoalJUv8h0CIZPYqYbDSxZfmOjlOmCEmbwAjwM8RoKguQdQqJNU+Df969KbeZgmtBFuOjUvYU93LzESNx8gGw4GQl1y7YHw6ifkpKetqgC35kbdVRsJiw4hZHS0iWY6OMUjt9HZPwwAZz2k9CF7dU+nYX+g2He5iPvO7c1uHx7g0+H4XfeFXu9M6z3+SrP4se\/QtOGUnpsL3O81i\/1j38UK0I+SMoCOhWPvK9X8YYVQwUkrz1hC8lypLCGmT4fpu14Vb3+LLffIbsNDgsvuZVzqQ\/mgyA\/SrShvIL9P\/bnjoQzcALIRGtMtxSYplZLTnaGGZ\/Mpb71srs7Bbt2GTgQJN9OcqkHIQJhTnsX\/nlB\/iEn8j0+TDpir+14EI=","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":101,"pkt":"AJD7JidrGLQwJjRACABFAABXMB8AAP8RJhTAqPIPwKjyAc5xADUAQ16pMiMBAAABAAAAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1536716402804,"flow_last_seen":1536716407003,"flow_tot_l4_data_len":179,"flow_min_l4_data_len":48,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0545{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":169,"pkt":"GLQwJjRAAJD7JidrCABFAACbebVAAEARWzrAqPIBwKjyDwA1znEAh2X7MiOBgAABAAIAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAHADAAFAAEAAAB4ACgRZWMyLTM1LTE3NC04Mi0yMzcJY29tcHV0ZS0xCWFtYXpvbmF3c8AywEcAAQABAAjtKQAEI65S7Q==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1536716402804,"flow_last_seen":1536716407116,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.174.82.237"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1536716407119,"flow_last_seen":1536716407119,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63346,"dst_port":11095,"l4_proto":"tcp"}
+0395{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMCAAAP8GYljAqPIPI65S7fdyK1cI7G5zAAAAAGACEgDD3QAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93Kf6ho7COxudGASaQOxbwAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMCEAAP8GYlvAqPIPI65S7fdyK1cI7G50n+oaPFAQEgAgMAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1100{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoMm9AAC0G8g0jrlLtwKjyDytX93Kf6ho8COxwh1AQbODDPAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1300{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716407,"pkt_len":731,"pkt":"GLQwJjRAAJD7JidrCABFAALNMnBAAC0G72cjrlLtwKjyDytX93Kf6ho8COxwh1AYbOASbQAAowIAExADAAADAAAAAjC0GDaeJwAAMLQYEAuYBgQAAACAOesBAAAEwI77Gs4t7AJyX0AaOxRCiXl+5ccRafKOTShylxtkuktla3QX2f050OgPx3Dp2Wr29hk8pPxdG3bVAAAEAAcANQEwAQgRAGNdWXuZjyQCBDcDJxMDAAAA7jC0GBgmBACuiCMmBf8bcyU3BicSAwAAAAIwtBgYJAcCJgglAFojMAo5BAmqnD2bjDiK3yLVcr2LQ\/iPmlWn\/iDHinq\/pRMoxaNQgTnwimtBL+qTiTQqENL2xrPIWxZjJGeRNYMpARg1gikBJAIFGDWEKQE2AgQCBAEYGDWBMAIISKnh4YvR26oYNYAwAghAMCqAESxXYxg1DDABHG7LEaIGSLUc\/M2D6faSCjZ4yyUajbt6l0larAowAhxg27mtYz94ldNAgb53O7UEnNbhJ3tZG9saSNIDGBg3A9UAAAQAAQAwAQh0U8TzJXXApCQCBDcDJxMBAAAA7jC0GBgmBIRKFhomBYQI+0k3BicTAwAAAO4wtBgYJAcCJgglAFojMAo5BGE4qnve9lbNUGTNwi8LtUdKfuSMTjD7DNvhKAxIglvrJHimTYHTbv0nAD\/mK7\/RNCUG+rTQMUDDNYMpASkCGDWCKQEkAmAYNYEwAghAMCqAESxXYxg1gDACCEM09xLfX5HPGDUMMAEcEurFeVqNP0pdZ4E34\/y4bmkdTprW+aj+LfeYwjACHQCMH3zVX2A9NrWeI9e9nsIN0x+kcP1z7qyH11oYGBgYGNUAAAQACAAwARwWcS9Yv6Hv443lPnlfVVzRjWEZ2bkD2vo+PkvpMAIdAJwkZf72kBRQoO+o9JB3Ec608mV4lMXj65mTdKwYJoptKOP73tAdI4SBj9d3d4DbZ6c=","pkt_caplen":731,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716408,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMCMAAP8GYlnAqPIPI65S7fdyK1cI7HCHn+oc4VAQD1seHQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMCQAAP8GYiTAqPIPI65S7fdyK1cI7HCHn+oc4VAYD1th7gAAMgAAExEDAAA2nicAADC0GAMAAAACMLQYEQyYBgQAAAAVbG26Bq9GdhOyEiBxNPZ1OT1plA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":7,"flow_packet_id":8,"flow_first_seen":1536716407119,"flow_last_seen":1536716409280,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63346,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","category":"Cloud"}}
+0387{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoMnFAAC0G8gsjrlLtwKjyDytX93Kf6hzhCOxwu1AQbODAYwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0939{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":458,"pkt":"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","pkt_caplen":458,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoMnJAAC0G8gojrlLtwKjyDytX93Kf6hzhCOxyT1AQcRC6nwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":114,"pkt":"GLQwJjRAAJD7JidrCABFAABkMnNAAC0G8c0jrlLtwKjyDytX93Kf6hzhCOxyT1AYcRAmrgAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQYzy5TK1FsExeSr9et+8YrN9tCP+igpBMINjSIrI6HjTDHu\/UE","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":176,"pkt":"AJD7JidrGLQwJjRACABFAACiMCYAAP8GYdzAqPIPI65S7fdyK1cI7HJPn+odHVAYDx+\/0QAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQYzy6ryDEujkZ2T+O19ZqyWNx5+FQrxlzTPBdpP9gztpQhKCX5iltTclThZpeFGoN8\/JlPFRlM2BsZDWYQZX1pDRaFiJ6oKEh+8AZIhz0AD9Bd2Fw+dpNEUXaUEa9Y3aWUtTg=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":683,"pkt":"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","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMCcAAP8GYlXAqPIPI65S7fdyK1cI7HLJn+ofklAQEgAWhQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1536716409847,"flow_last_seen":1536716409847,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63347,"dst_port":11095,"l4_proto":"tcp"}
+0395{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMCwAAP8GGnHAqPIPI7yauvdzK1cI9889AAAAAGACEgAbLAAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93M4S\/jECPfPPmASbvCMDgAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716409,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMC0AAP8GGnTAqPIPI7yauvdzK1cI988+OEv4xVAQEgAAlAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716410,"pkt_len":586,"pkt":"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","pkt_caplen":586,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716410,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoKC9AADcGqnIjvJq6wKjyDytX93M4S\/jFCPfRUlAQcRCfbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1308{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716410,"pkt_len":733,"pkt":"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","pkt_caplen":733,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716410,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMC8AAP8GGnLAqPIPI7yauvdzK1cI99FSOEv7bFAQD1n+fwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716411,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMDAAAP8GGj3AqPIPI7yauvdzK1cI99FSOEv7bFAYD1n58wAAMgAAExMDAAA2nicAADC0GAQAAAACMLQYEQyeBgQAAAAzcom9gnJSb94h3\/jQ09uvI9YfcQ==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1536716409847,"flow_last_seen":1536716411997,"flow_tot_l4_data_len":1431,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63347,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0388{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoKDFAADcGqnAjvJq6wKjyDytX93M4S\/tsCPfRhlAQcRCclAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuMDEAAP8GGirAqPIPI7yauvdzK1cI99GGOEv7bFAYD1kmgwAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYpi5bMHfrehw79wCLmAJOuqlVC1AEqC\/wWzgJfnIRBAQHVOUpAiGfWUn6f6OE8Q==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoKDJAADcGqm8jvJq6wKjyDytX93M4S\/tsCPfRzFAQcRCcTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABhKDNAADcGqjUjvJq6wKjyDytX93M4S\/tsCPfRzFAYcRDP2wAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYpi5aE9YY2Z6f\/j7UStKEjwPT9+9GOzI8A2ru9UbxNTR4","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1003{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABfKDRAADcGqjYjvJq6wKjyDytX93M4S\/ulCPfTk1AYdUDbwAAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYpi6RqU1g2fyvZNgqhxRxPNlqKdyGXnoZw6cV\/h9gzA==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536716412,"pkt_len":358,"pkt":"AJD7JidrGLQwJjRACABFAAFYMDMAAP8GGT7AqPIPI7yauvdzK1cI99OTOEv73FAYDulnJwAALgEQEwIAAAA2nicAADC0GAQAAAACMLQYpi4UtiA0Cx13rIj8\/aDtBknj5TpUe+czqdoVD8n6UA7QL+mB0XoM6ch85gGQb4MEAemR4qgbb63DxAQ8hUZN2BayyDPAqHBcr2nupAGGcc6I1zASH0zHmLIg3VBG6EMWnd54NMvCalt+NfLRa5dbK1h\/3AKhkef87gCx5m\/BtBMiu9OQp+Eb8Fyzbv2KhAKsDSHuOGUXHc9Wz\/SqOzD066CW0Ntsua0pkoZYV6ixdfxlvPDDSSLi0xL\/AZOZnQ2pkHxi5gBkPdea\/EUeI9iEafXIfk1SUsg0bskCpy0X15AyUYt2zASNm0LG+EF7JYTugxVX8xZe1AmlbycXRKBuMfyvlHZ1juCzw5L9YRsejkrvAvQ7MG9VyA==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":3,"flow_packet_id":116,"flow_first_seen":1536714607530,"flow_last_seen":1536716407068,"flow_tot_l4_data_len":6397,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63343,"dst_port":11095,"l4_proto":"tcp"}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":6,"flow_packet_id":71,"flow_first_seen":1536716402828,"flow_last_seen":1536716406969,"flow_tot_l4_data_len":16281,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63345,"dst_port":11095,"l4_proto":"tcp"}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":8,"flow_packet_id":20,"flow_first_seen":1536716409847,"flow_last_seen":1536716412657,"flow_tot_l4_data_len":2667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63347,"dst_port":11095,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1536716402804,"flow_last_seen":1536716407116,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1536717427961,"flow_last_seen":1536717427961,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717427,"pkt_len":82,"pkt":"AJD7JidrGLQwJjRACABFAABEME8AAP8RJffAqPIPwKjyAc5xADUAMGWoTp4BAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1536717427961,"flow_last_seen":1536717427961,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0427{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717427,"pkt_len":82,"pkt":"AJD7JidrGLQwJjRACABFAABEMFAAAP8RJfbAqPIPwKjyAc5xADUAMGWoTp4BAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":98,"pkt":"GLQwJjRAAJD7JidrCABFAABUzkdAAEARBu\/AqPIBwKjyDwA1znEAQGW0Tp6BgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":9,"flow_packet_id":3,"flow_first_seen":1536717427961,"flow_last_seen":1536717428084,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1536717428089,"flow_last_seen":1536717428089,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63348,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMFEAAP8GGkzAqPIPI7yauvd0K1cJA0ANAAAAAGACEgCqTwAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93SD5IA7CQNADmASbvBIIgAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMFIAAP8GGk\/AqPIPI7yauvd0K1cJA0AOg+SAPFAQEgC8pwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoS3FAADcGhzAjvJq6wKjyDytX93SD5IA8CQNCIFAQcRBbhQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1305{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717428,"pkt_len":732,"pkt":"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","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717429,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMFQAAP8GGk3AqPIPI7yauvd0K1cJA0Igg+SC4lAQD1q6lQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMFUAAP8GGhjAqPIPI7yauvd0K1cJA0Igg+SC4lAYD1rmagAAMgAAExUDAAA2nicAADC0GAQAAAACMLQYEQyhBgQAAABBQJTDCM9602OiOlnVzsSlIAFYfg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":10,"flow_packet_id":8,"flow_first_seen":1536717428089,"flow_last_seen":1536717430226,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63348,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0388{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoS3NAADcGhy4jvJq6wKjyDytX93SD5ILiCQNCVFAQcRBYqwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuMFYAAP8GGgXAqPIPI7yauvd0K1cJA0JUg+SC4lAYD1rROwAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYHyNbhn9VDoARCCe8rRLztndNaTEIOzGsgKA+4QD+m30GU58L4iJ+h1FBZ0+xig==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoS3RAADcGhy0jvJq6wKjyDytX93SD5ILiCQNCmlAQcRBYZQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABhS3VAADcGhvMjvJq6wKjyDytX93SD5ILiCQNCmlAYcRAVRAAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYHyNUzvcx8vnscz0swl35eAggu6KEVh\/fqHzBUcLVdmvh","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1003{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABfS3ZAADcGhvQjvJq6wKjyDytX93SD5IMbCQNEYVAYdUBdLgAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYHyNzZpXYNZeZdCUgxD2zUDBPIOVRg85SJ3eyC07atQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+1012{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717430,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717449,"pkt_len":101,"pkt":"AJD7JidrGLQwJjRACABFAABXMG4AAP8RJcXAqPIPwKjyAc5xADUAQy+AYUwBAAABAAAAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1536717427961,"flow_last_seen":1536717449934,"flow_tot_l4_data_len":227,"flow_min_l4_data_len":48,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0546{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":169,"pkt":"GLQwJjRAAJD7JidrCABFAACb\/6BAAEAR1U7AqPIBwKjyDwA1znEAh2X7YUyBgAABAAIAAAAAB2N6ZmUxMDUHZnJvbnQwMQVpYWQwMQpwcm9kdWN0aW9uBG5lc3QDY29tAAABAAHADAAFAAEAAAB3ACgRZWMyLTM1LTE3NC04Mi0yMzcJY29tcHV0ZS0xCWFtYXpvbmF3c8AywEcAAQABAAjpFgAEI65S7Q==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":9,"flow_packet_id":5,"flow_first_seen":1536717427961,"flow_last_seen":1536717450088,"flow_tot_l4_data_len":362,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"czfe105.front01.iad01.production.nest.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.174.82.237"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1536717450091,"flow_last_seen":1536717450091,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63349,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMG8AAP8GYgnAqPIPI65S7fd1K1cJDrE1AAAAAGACEgCA9gAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93XProMNCQ6xNmASaQPV8QAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMHAAAP8GYgzAqPIPI65S7fd1K1cJDrE2z66DDlAQEgBEsgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAooddAAC0GgqUjrlLtwKjyDytX93XProMOCQ6zSFAQbODnvwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1304{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":732,"pkt":"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","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717450,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMHIAAP8GYgrAqPIPI65S7fd1K1cJDrNIz66FtFAQD1pCoAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMHMAAP8GYdXAqPIPI65S7fd1K1cJDrNIz66FtFAYD1qYeAAAMgAAExcDAAA2nicAADC0GAMAAAACMLQYEQykBgQAAAAVa3P0RkFW+dlcD7POmwfEvAo6fg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":11,"flow_packet_id":8,"flow_first_seen":1536717450091,"flow_last_seen":1536717452328,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63349,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","category":"Cloud"}}
+0388{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoodlAAC0GgqMjrlLtwKjyDytX93XProW0CQ6zfFAQbODk5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":258,"pkt":"AJD7JidrGLQwJjRACABFAAD0MHQAAP8GYTzAqPIPI65S7fd1K1cJDrN8z66FtFAYD1rV4AAAygAQEwAAAAA2nicAADC0GAMAAAACMLQY2Cfv7HvXPsKFYm+Fvy7t+9lgnc56QGmd\/eVjBVdTXBr35uaTDhN1mS6RWjNOlkbKoXHmoupkyGTs+2ZnMWXYdTpAVAdN4hr1I\/iQAzMeygyY4VcYD3qbsRxap6xEmiyJiVhJM9iaT2bmzxF8MC3Rhdf89KqsbjYwOsv9Ldxwd3+8H9SUOpByMMa6nDTYGi3XX5vk+ugYcYYkbmwzwKinTum5rmGQR51hVuA1UUWRaBiDe7FQ","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAoodpAAC0GgqIjrlLtwKjyDytX93XProW0CQ60SFAQcRDf6QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":114,"pkt":"GLQwJjRAAJD7JidrCABFAABkodtAAC0GgmUjrlLtwKjyDytX93XProW0CQ60SFAYcRDdFQAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQY2CcYw2PrQj4rVuLQFloMCXPSQqZrX+9V7wr29y\/Txs\/GJXG0","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":176,"pkt":"AJD7JidrGLQwJjRACABFAACiMHUAAP8GYY3AqPIPI65S7fd1K1cJDrRIz66F8FAYDx5oWQAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQY2CeHe3fbvWidKfohKuRa7XDuojHzMgZ2OhqIaxSzulmY1XoAGRd4ENFcqyJqh4aNnK3Zk8\/cV+XMiFuh2rYIlEfPQTViL5\/yMAtxrgtaJegSjYVtcSEEHhb64b0qiEWrpM4=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":683,"pkt":"GLQwJjRAAJD7JidrCABFAAKdodxAAC0GgCsjrlLtwKjyDytX93XProXwCQ60wlAYcRC4\/AAAcwIQEwEAAAADAAAAAjC0GDaeJwAAMLQY2CdpgLR76mOJh9OcABZMQZxjd6W+4olkuKICGOoEHYAr7uuNJHp5lmVSQcLnoVMK6Pckncv+NG93Wf7\/UfUStKBidDWVzuoHH+KvDDU\/exXRljKxonJqLcgzfK4KHwxJNq0hmXASfbLaIoekpC8pw\/ZpmgM+ayekgJB+CBAZDzA38Kj3fQEXKdPvKi434t49P11HKag+kNjXJjTiBbhC07ZYHYmfROcH+JGVG+sgYvt0GibOChZF74V\/RvixPDzrVDGmlBzlO9osVBV6D6EUcuUx+xdswEFwFHRCLwD76dncYNAon1ZQRjGBHhjNFX0aL1J7yj85gD6Chnn7Psw808CMGMCl8pYpMpJMMK8ys3tgyl+HtbVElVqeunEW2ya2Y9QoNuNBt1hZkYG0k\/EmOpD7dk6ANgZJOjSXBeloJBYH9rh0mH\/dTZeVQBVZavePeJzrwLN2z12WBU07O0ohB2LeO0Pm0BwjErn4+SkZwg7NWyYY4bZBQ7Nw9OIbUghLGGEUTdewDlIJSEpQCi\/KoH6b2glDONkfdY7DNM7m7h0DU+Oax34IhSt6w9ZNB5t5ocBqoyAXmd+780hynw5Whcwk\/NLvCZIrDT501EBJYcXrQYAvAk3wQJb9NkGyofDKIlNph+RRIR7JJ\/tN\/luzKYeYT3jUAx8+pjaQOfOOQ9uOebNAjCUVr34xlZN5Tdfu4L4BdDbLh3UA+oAWbEak3VBSXfZ+EFCr4RX6Jp4b5G9nWh14E2DYXRY19JnweARqxsVgblB4leYp3YzGMnN5lsK892Gsq\/GT05G0\/dE=","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536717452,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMHYAAP8GYgbAqPIPI65S7fd1K1cJDrTCz66IZVAQEgA7zwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":7,"flow_packet_id":78,"flow_first_seen":1536716407119,"flow_last_seen":1536717449999,"flow_tot_l4_data_len":5476,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63346,"dst_port":11095,"l4_proto":"tcp"}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":10,"flow_packet_id":49,"flow_first_seen":1536717428089,"flow_last_seen":1536717431514,"flow_tot_l4_data_len":10331,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63348,"dst_port":11095,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":9,"flow_packet_id":5,"flow_first_seen":1536717427961,"flow_last_seen":1536717450088,"flow_tot_l4_data_len":362,"flow_min_l4_data_len":48,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1536718052990,"flow_last_seen":1536718052990,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63350,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718052,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMIsAAP8GYe3AqPIPI65S7fd2K1cJGivXAAAAAGACEgAGSAAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718053,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93aQyd5SCRor2GASaQM+4wAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718053,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMIwAAP8GYfDAqPIPI65S7fd2K1cJGivYkMneU1AQEgCtowAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718053,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718053,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosfNAAC0GcokjrlLtwKjyDytX93aQyd5TCRot61AQbOBQsAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1306{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718053,"pkt_len":731,"pkt":"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","pkt_caplen":731,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718053,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMI4AAP8GYe7AqPIPI65S7fd2K1cJGi3rkMng+FAQD1urkAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMI8AAP8GYbnAqPIPI65S7fd2K1cJGi3rkMng+FAYD1sXwwAAMgAAExkDAAA2nicAADC0GAMAAAACMLQYEQyrBgQAAAC91\/p2XARSKlEAE\/UpbfvFYG1sJQ==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":12,"flow_packet_id":8,"flow_first_seen":1536718052990,"flow_last_seen":1536718055162,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63350,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","category":"Cloud"}}
+0388{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosfVAAC0GcocjrlLtwKjyDytX93aQyeD4CRouH1AQbOBN1wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":258,"pkt":"AJD7JidrGLQwJjRACABFAAD0MJAAAP8GYSDAqPIPI65S7fd2K1cJGi4fkMng+FAYD1t2dQAAygAQEwAAAAA2nicAADC0GAMAAAACMLQYuSAnzQlRb5c23McyQuVT3uwhB720rf8l+1tf9TgDr\/Y2s1FAD3GCnmlmFk7Uphom+LvFr+8\/KFpvvGBpyXq4djXJ8AonV9JeIhGMS+mA\/J6VfcfUE93UnL1ZrFEYueFIh0USTCKXQLMVCHIhIWKHVHuxDKC8xejFBE6Xz79Wuy3mMMAFWAT5nOHnk4gJHsmpCR1A4vyXmEE0aN6McmjOPcVxuCV7pMMaEWxnIAHs5kbrxLpr","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAosfZAAC0GcoYjrlLtwKjyDytX93aQyeD4CRou61AQcRBI2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":114,"pkt":"GLQwJjRAAJD7JidrCABFAABksfdAAC0GckkjrlLtwKjyDytX93aQyeD4CRou61AYcRBVAAAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQYuSBpRHQVPFXnn+WQNHzLhjXlez4+ZKtiRL\/xEV2m+kFK28rQ","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":176,"pkt":"AJD7JidrGLQwJjRACABFAACiMJEAAP8GYXHAqPIPI65S7fd2K1cJGi7rkMnhNFAYDx+UvwAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQYuSAYxN7C6\/gO3nX5RyJn6PJ9iRIqn4rDPj7MUvwmK1p8coXxYhvOuHuK39YrcDbHgfSoB9ZDkVTssG3e2d5k\/BxSNjKzvt3DFGIVz+PwYw38jxPyzt2Hi0LvlmNrwVcQGW0=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+1247{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":683,"pkt":"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","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718055,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMJIAAP8GYerAqPIPI65S7fd2K1cJGi9lkMnjqVAQEgCkwAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":11,"flow_packet_id":52,"flow_first_seen":1536717450091,"flow_last_seen":1536718053058,"flow_tot_l4_data_len":4410,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63349,"dst_port":11095,"l4_proto":"tcp"}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1536718202959,"flow_last_seen":1536718202959,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718202,"pkt_len":82,"pkt":"AJD7JidrGLQwJjRACABFAABEMJoAAP8RJazAqPIPwKjyAc5xADUAMPGqwpsBAAABAAAAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1536718202959,"flow_last_seen":1536718202959,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0448{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718202,"pkt_len":98,"pkt":"GLQwJjRAAJD7JidrCABFAABUb5VAAEARZaHAqPIBwKjyDwA1znEAQGW0wpuBgAABAAEAAAAADXdlYXZlLWxvZ3NpbmsEbmVzdANjb20AAAEAAcAMAAEAAQAAAHgABCO8mro=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1536718202959,"flow_last_seen":1536718202959,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weave-logsink.nest.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"35.188.154.186"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1536718202984,"flow_last_seen":1536718202984,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63351,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718202,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMJsAAP8GGgLAqPIPI7yauvd3K1cJJajVAAAAAGACEgBBYgAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718203,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93fElurmCSWo1mASbvAz1wAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718203,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMJwAAP8GGgXAqPIPI7yauvd3K1cJJajWxJbq51AQEgCoXAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1103{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718203,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718203,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAodN5AADcGXcMjvJq6wKjyDytX93fElurnCSWq6FAQcRBHOgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1308{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718203,"pkt_len":733,"pkt":"GLQwJjRAAJD7JidrCABFAALPdN9AADcGWxsjvJq6wKjyDytX93fElurnCSWq6FAYcRAtCAAApQIAE5aex7wEAAAAAjC0GDaeJwAAMLQYEAuxBgQAAACAOewBAAAE+rolzy+PcOFALB3XOjE\/1avQJZsiItI5DiyJBVIPcZITtPZ2XrnN0E3MfjNOspBvZsP5MHI\/arLVAAAEAAcANQEwAQgMb9c+DCmBkiQCBDcDJxMDAAAA7jC0GBgmBACuiCMmBf8bcyU3BicSBAAAAAIwtBgYJAcCJgglAFojMAo5BOmClNa2L\/0sqyhn7IYa235P1xw1ad7owBLnP8rLfG3TPA0dBMXfrzKvqAFyJ47sRlQQr3qOkdAiNYMpARg1gikBJAIFGDWEKQE2AgQCBAEYGDWBMAIIT2JdLEIid9IYNYAwAghAMCqAESxXYxg1DDABHQD2qSsI\/n0hou9Llf5n3GEbVWuc4D0QHq+l2F+wMAIcbFFqzYrI2WIn6D35aDg1LAuu7NZYbZZk\/HdXyxgYNwPVAAAEAAEAMAEIdFPE8yV1wKQkAgQ3AycTAQAAAO4wtBgYJgSEShYaJgWECPtJNwYnEwMAAADuMLQYGCQHAiYIJQBaIzAKOQRhOKp73vZWzVBkzcIvC7VHSn7kjE4w+wzb4SgMSIJb6yR4pk2B0279JwA\/5iu\/0TQlBvq00DFAwzWDKQEpAhg1gikBJAJgGDWBMAIIQDAqgBEsV2MYNYAwAghDNPcS31+Rzxg1DDABHBLqxXlajT9KXWeBN+P8uG5pHU6a1vmo\/i33mMIwAh0AjB981V9gPTa1niPXvZ7CDdMfpHD9c+6sh9daGBgYGBjVAAAEAAgAMAEdAKQ+FOL4Hy\/vAFY0N\/6Fb4IhwL51Reme7+2nNLcwAh0AxpKlk4REdfygt4LErdP64Xw0tzVxuYpvsCsKrhg00tOd8tGpjSpFtyy2jPZ48AQk5g==","pkt_caplen":733,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718203,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMJ4AAP8GGgPAqPIPI7yauvd3K1cJJaroxJbtjlAQD1mmSgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMJ8AAP8GGc7AqPIPI7yauvd3K1cJJaroxJbtjlAYD1k4qAAAMgAAExsDAAA2nicAADC0GAQAAAACMLQYEQyxBgQAAABDvk7v9shaoRVwWNA7hKpxzM+I7w==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":14,"flow_packet_id":8,"flow_first_seen":1536718202984,"flow_last_seen":1536718205132,"flow_tot_l4_data_len":1429,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63351,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0388{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAodOBAADcGXcEjvJq6wKjyDytX93fElu2OCSWrHFAQcRBEXwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuMKAAAP8GGbvAqPIPI7yauvd3K1cJJascxJbtjlAYD1lm9wAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYyShOOcoezN7Yf362RQ73eqRmWfIt67XrBhmJNXUpK3Pc3PMt98c6L1fTQX8u\/w==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAodOFAADcGXcAjvJq6wKjyDytX93fElu2OCSWrYlAQcRBEGQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABhdOJAADcGXYYjvJq6wKjyDytX93fElu2OCSWrYlAYcRAOqwAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYyShARnnNymeUp9e7po6EJfQZYe7ME3Q+GlEnes1SI7V0","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1010{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":509,"pkt":"AJD7JidrGLQwJjRACABFAAHvMKEAAP8GGDnAqPIPI7yauvd3K1cJJatixJbtx1AYDyCARAAAxQEQEwEAAAA2nicAADC0GAQAAAACMLQYySim\/6WfDHyGhiYdkOdlffoUo+Ifpc1p5N2K5+L8oe31Ch6pwdfuUuAwXADSEGtH0AWRKDzXHJQUXtIfsfhk\/dOO\/P8MfUa7yj+4duxp+HzQRSQnbUKMWWJTc68VzUG6DtxH9F3a7neZ8jZnPvu9v9V1OYIY3\/pSKATwhNAM3o+tNJoWdA8sclQpsC0+nbA+qKxcY5GthBmQHi9wYGQrY1tkU2N7BSpvRLFFZENSy63DS1B+qeHaGLGpOK+KZAi1qFlF0DLrBmvYreuNJRrzWcJQmbaN+WhJrborLuntUQxFr99USFjOoG\/iLho1cuo4ncOqXf+Ihdd0TdjoHYMFa0a\/\/AGIWn0rBCW+ZL0L7xEUMnVdQ6O9MHcKTEAaYb7uqDneE6O6V\/yotDZzUKxTW5U4Vxzxa8N4O266kptCnUs0N+\/JeA25LOJkeHazeWdVfb+L5SvW7Xb9VtbwJIgILLYtSP6OIl2f8UpZvj4YXvA8Ucky4GpNjZOFWBrbL10SmY\/txKHJH7bgZUP7HA+gDvUAe4\/PZOW3M81k8M75cZYOAyQHtjCbTkP5EXMfwXQ=","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABfdONAADcGXYcjvJq6wKjyDytX93fElu3HCSWtKVAYdUBzegAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYySigtyBx\/khTQjemURb\/Qs+w7XQP60GdxNpwF6Jvbg==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+1010{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718205,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1536718206572,"flow_last_seen":1536718206572,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63352,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718206,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMLcAAP8GYcHAqPIPI65S7fd4K1cJMSXhAAAAAGACEgAMJQAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718206,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAAC0GJHkjrlLtwKjyDytX93jm8XvxCTEl4mASaQNQ+QAAAgQFtA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718206,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMLgAAP8GYcTAqPIPI65S7fd4K1cJMSXi5vF78lAQEgC\/uQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718207,"pkt_len":586,"pkt":"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","pkt_caplen":586,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718207,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAofmlAAC0GphMjrlLtwKjyDytX93jm8XvyCTEn9lAQbOBixQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1302{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718207,"pkt_len":730,"pkt":"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","pkt_caplen":730,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718207,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMLoAAP8GYcLAqPIPI65S7fd4K1cJMSf25vF+llAQD1y9pQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718208,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMLsAAP8GYY3AqPIPI65S7fd4K1cJMSf25vF+llAYD1x4sQAAMgAAEx0DAAA2nicAADC0GAMAAAACMLQYEQy0BgQAAABlWaDYahuGtY52hurUSkcTEusmsg==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":15,"flow_packet_id":8,"flow_first_seen":1536718206572,"flow_last_seen":1536718208745,"flow_tot_l4_data_len":1428,"flow_min_l4_data_len":20,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63352,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink","category":"Cloud"}}
+0388{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718208,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAofmtAAC0GphEjrlLtwKjyDytX93jm8X6WCTEoKlAQbOBf7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0940{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718208,"pkt_len":458,"pkt":"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","pkt_caplen":458,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718208,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAofmxAAC0GphAjrlLtwKjyDytX93jm8X6WCTEpvlAQcRBaKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718208,"pkt_len":114,"pkt":"GLQwJjRAAJD7JidrCABFAABkfm1AAC0GpdMjrlLtwKjyDytX93jm8X6WCTEpvlAYcRCV2wAAOgAQEwAAAAADAAAAAjC0GDaeJwAAMLQY\/SghadNQO0yhx4tpwAzXo\/koCLQpE3p9+ZW5C3ptO7h0WDoo","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718208,"pkt_len":176,"pkt":"AJD7JidrGLQwJjRACABFAACiML0AAP8GYUXAqPIPI65S7fd4K1cJMSm+5vF+0lAYDyCI4wAAeAAQEwEAAAA2nicAADC0GAMAAAACMLQY\/ShK0JLmziBERUFnGG0cwYT5bCaOFhPKR4uycJ3vJGk8vwstkOwQb+MkapwZeHB+v5UdsgTG+DBzLtOB3L0zWSOlSNeHiCGqolQAqCBhm9+\/qzANLhbJTQB3xKp7uCIvees=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+1245{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718209,"pkt_len":683,"pkt":"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","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718209,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoML4AAP8GYb7AqPIPI65S7fd4K1cJMSo45vGBR1AQEgC2DgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1536718209313,"flow_last_seen":1536718209313,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63353,"dst_port":11095,"l4_proto":"tcp"}
+0396{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718209,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAsMMIAAP8GGdvAqPIPI7yauvd5K1cJPKL3AAAAAGACEgBHJwAAAgQEgAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718209,"pkt_len":58,"pkt":"GLQwJjRAAJD7JidrCABFAAAsAABAADcG0p0jvJq6wKjyDytX93le92HNCTyi+GASbvAoVQAAAgQFjA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718209,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMMQAAP8GGd3AqPIPI7yauvd5K1cJPKL4XvdhzlAQEgCc2gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718210,"pkt_len":586,"pkt":"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","pkt_caplen":586,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718210,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAo1sNAADcG+90jvJq6wKjyDytX93le92HOCTylDFAQcRA7tgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1306{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718210,"pkt_len":732,"pkt":"GLQwJjRAAJD7JidrCABFAALO1sRAADcG+TYjvJq6wKjyDytX93le92HOCTylDFAYcRDStgAApAIAE494s64EAAAAAjC0GDaeJwAAMLQYEAu6BgQAAACAOewBAAAEpdwFTFueXN+EhaRf\/GikvCTcPcKN3q0C5qwEiFaYj76TJKuVxqf0Y6m+cFvy3FOPDgMIy\/9mW2\/VAAAEAAcANQEwAQgMb9c+DCmBkiQCBDcDJxMDAAAA7jC0GBgmBACuiCMmBf8bcyU3BicSBAAAAAIwtBgYJAcCJgglAFojMAo5BOmClNa2L\/0sqyhn7IYa235P1xw1ad7owBLnP8rLfG3TPA0dBMXfrzKvqAFyJ47sRlQQr3qOkdAiNYMpARg1gikBJAIFGDWEKQE2AgQCBAEYGDWBMAIIT2JdLEIid9IYNYAwAghAMCqAESxXYxg1DDABHQD2qSsI\/n0hou9Llf5n3GEbVWuc4D0QHq+l2F+wMAIcbFFqzYrI2WIn6D35aDg1LAuu7NZYbZZk\/HdXyxgYNwPVAAAEAAEAMAEIdFPE8yV1wKQkAgQ3AycTAQAAAO4wtBgYJgSEShYaJgWECPtJNwYnEwMAAADuMLQYGCQHAiYIJQBaIzAKOQRhOKp73vZWzVBkzcIvC7VHSn7kjE4w+wzb4SgMSIJb6yR4pk2B0279JwA\/5iu\/0TQlBvq00DFAwzWDKQEpAhg1gikBJAJgGDWBMAIIQDAqgBEsV2MYNYAwAghDNPcS31+Rzxg1DDABHBLqxXlajT9KXWeBN+P8uG5pHU6a1vmo\/i33mMIwAh0AjB981V9gPTa1niPXvZ7CDdMfpHD9c+6sh9daGBgYGBjVAAAEAAgAMAEdAK\/uKm5gCnX5GPgtQmtyJtdm4by\/nu5rPV3odvEwAhw0T7c01v9Eq80XdECIdIMSPdhmII3Ei4TNKMJeGA7xedIT\/VYSz+GGny2vIXFJEaAp","pkt_caplen":732,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718210,"pkt_len":60,"pkt":"AJD7JidrGLQwJjRACABFAAAoMMYAAP8GGdvAqPIPI7yauvd5K1cJPKUMXvdkdFAQD1qaxgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":106,"pkt":"AJD7JidrGLQwJjRACABFAABcMMcAAP8GGabAqPIPI7yauvd5K1cJPKUMXvdkdFAYD1pFFAAAMgAAEx8DAAA2nicAADC0GAQAAAACMLQYEQy6BgQAAAA9aelf8mf8Tn\/37x8FhSucKJKK0g==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":16,"flow_packet_id":8,"flow_first_seen":1536718209313,"flow_last_seen":1536718211481,"flow_tot_l4_data_len":1430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":178,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63353,"dst_port":11095,"l4_proto":"tcp","ndpi": {"proto":"NestLogSink.Google","category":"Cloud"}}
+0388{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAo1sVAADcG+9sjvJq6wKjyDytX93le92R0CTylQFAQcRA43AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":124,"pkt":"AJD7JidrGLQwJjRACABFAABuMMgAAP8GGZPAqPIPI7yauvd5K1cJPKVAXvdkdFAYD1oY5gAARAAQEwAAAAA2nicAADC0GAQAAAACMLQYciNF2\/rCGXkAU\/GKWBNxFPUOgHv\/N947RBM9x5UH\/ZArfs2InS4vq4FiF0IT5A==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":54,"pkt":"GLQwJjRAAJD7JidrCABFAAAo1sZAADcG+9ojvJq6wKjyDytX93le92R0CTylhlAQcRA4lgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":111,"pkt":"GLQwJjRAAJD7JidrCABFAABh1sdAADcG+6AjvJq6wKjyDytX93le92R0CTylhlAYcRDn0wAANwAQEwAAAAAEAAAAAjC0GDaeJwAAMLQYciPFK5yyroDH2n3UhaRqSOxkK9bk\/gg6GN0Ti2o79wby","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1007{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":109,"pkt":"GLQwJjRAAJD7JidrCABFAABf1shAADcG+6EjvJq6wKjyDytX93le92StCTynTVAYdUDImQAANQAQEwEAAAAEAAAAAjC0GDaeJwAAMLQYciOHPSLYgRLyu2n+U4RoIvtsCto1Vv3MASsILXTa6g==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","pkt_oversize":false,"pkt_ts":1536718211,"pkt_len":358,"pkt":"AJD7JidrGLQwJjRACABFAAFYMMoAAP8GGKfAqPIPI7yauvd5K1cJPKdNXvdk5FAYDupN2gAALgEQEwIAAAA2nicAADC0GAQAAAACMLQYciM5hBC5P4r9dMMg1bQyUdvnQDIgqzj6HyzLhe2nVHL2cZtCIAOy\/i3fp5bdXZf4nb6Z0Hyl3x8mWoq1TQfd6fNd1ksXs5ZtEBswWLadYtb7uhxyiyWy\/RUVIUyPQGm+k87r6rnmlRFnkNbkyTrA2AHngAgY9DPu1UpHpEWRv32WuifaIKE2k8ZpEXx8o3+g\/Fdos7xpGPY93\/5ENN7Q3HGTDs2Ff2eWLiUVELBS6F4aRSCi+W65fQuCFD\/qXEp+oih2Yf+3nrTQXpk0VxOmJDEapa+bT72vNbJAtA19E4jiA2zE4jQ4c\/offjX\/oaZIWGhcOLoEEr4q602246pqE7a\/wTlQ5vTZGy2Qols46ca4DMVeOQDMbQ==","pkt_caplen":358,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":12,"flow_packet_id":32,"flow_first_seen":1536718052990,"flow_last_seen":1536718206634,"flow_tot_l4_data_len":4010,"flow_min_l4_data_len":20,"flow_max_l4_data_len":697,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63350,"dst_port":11095,"l4_proto":"tcp"}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":14,"flow_packet_id":49,"flow_first_seen":1536718202984,"flow_last_seen":1536718206546,"flow_tot_l4_data_len":10447,"flow_min_l4_data_len":20,"flow_max_l4_data_len":699,"flow_avg_l4_data_len":213,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63351,"dst_port":11095,"l4_proto":"tcp"}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":16,"flow_packet_id":20,"flow_first_seen":1536718209313,"flow_last_seen":1536718211968,"flow_tot_l4_data_len":2666,"flow_min_l4_data_len":20,"flow_max_l4_data_len":698,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.188.154.186","src_port":63353,"dst_port":11095,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1536718202959,"flow_last_seen":1536718202959,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"192.168.242.1","src_port":52849,"dst_port":53,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap","flow_id":15,"flow_packet_id":96,"flow_first_seen":1536718206572,"flow_last_seen":1536719715232,"flow_tot_l4_data_len":5774,"flow_min_l4_data_len":20,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.15","dst_ip":"35.174.82.237","src_port":63352,"dst_port":11095,"l4_proto":"tcp"}
+0152{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nest_log_sink.pcap"}
diff --git a/tests/result/nDPId_netbios.pcap.txt b/tests/result/nDPId_netbios.pcap.txt
new file mode 100644
index 000000000..993bac76c
--- /dev/null
+++ b/tests/result/nDPId_netbios.pcap.txt
@@ -0,0 +1,97 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1447772210350,"flow_last_seen":1447772210350,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.131","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0440{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772210,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYvYAAIARuScKAASDCgAF\/wCJAIkAOr8ep0kBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1447772210350,"flow_last_seen":1447772210350,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.131","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0440{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772210,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYvkAAIARuSQKAASDCgAF\/wCJAIkAOr8dp0oBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772210,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYvoAAIARuSMKAASDCgAF\/wCJAIkAOr8fp0gBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772211,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYxMAAIARuQoKAASDCgAF\/wCJAIkAOr8ep0kBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1447772211392,"flow_last_seen":1447772211392,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0440{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772211,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOKuIAAIAR79UKAAXpCgAF\/wCJAIkAOuD1mh4BEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1447772211392,"flow_last_seen":1447772211392,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0440{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772211,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYxQAAIARuQkKAASDCgAF\/wCJAIkAOr8dp0oBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772211,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYxkAAIARuQQKAASDCgAF\/wCJAIkAOr8cp0sBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772211,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYx4AAIARuP8KAASDCgAF\/wCJAIkAOr8bp0wBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772212,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOLrMAAIAR7AQKAAXpCgAF\/wCJAIkAOuD1mh4BEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772212,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYycAAIARuPYKAASDCgAF\/wCJAIkAOr8dp0oBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772212,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYygAAIARuPUKAASDCgAF\/wCJAIkAOr8cp0sBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772212,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYysAAIARuPIKAASDCgAF\/wCJAIkAOr8bp0wBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772212,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYywAAIARuPEKAASDCgAF\/wCJAIkAOr8ap00BEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772212,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOMrEAAIAR6AYKAAXpCgAF\/wCJAIkAOuD1mh4BEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772213,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYzsAAIARuOIKAASDCgAF\/wCJAIkAOr8cp0sBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772213,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYzwAAIARuOEKAASDCgAF\/wCJAIkAOr8bp0wBEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772213,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOYz0AAIARuOAKAASDCgAF\/wCJAIkAOr8ap00BEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772214,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+bLz3CABFAABOY2sAAIARuLIKAASDCgAF\/wCJAIkAOr8ap00BEAABAAAAAAAAIEZJRkRGRUZDRUZFQkVORlBFSUZKQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1447772214344,"flow_last_seen":1447772214344,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.9","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0644{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772214,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/ADBIsLGUCABFAADlUKwAAIARylQKAAUJCgAF\/wCKAIoA0VBGEQ7C9AoABQkAigC7AAAgRU9GR0ZDREpDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZHRUpFSEVKRU1FQkVPRkVGUEVIRkNFUEZGRkFDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoATlZSOQAAAAAAAAAAAAAAAAYBBxABAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1447772214344,"flow_last_seen":1447772214344,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.9","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0441{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772214,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOPwoAAIAR260KAAXpCgAF\/wCJAIkAOuDzmiABEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772215,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOQZcAAIAR2SAKAAXpCgAF\/wCJAIkAOuDzmiABEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772215,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABORE0AAIAR1moKAAXpCgAF\/wCJAIkAOuDzmiABEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1447772216537,"flow_last_seen":1447772216537,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.131","src_port":139,"dst_port":1398,"l4_proto":"tcp"}
+0388{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772216,"pkt_len":60,"pkt":"ABj+bLz3ABzEEHkPCABFAAApQatAAIAGnIkKAAQYCgAEgwCLBXatXRk68Re6KFAQ96kjtgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772216,"pkt_len":60,"pkt":"ABzEEHkPABj+bLz3CABFAAAoY6dAAIAGeo4KAASDCgAEGAV2AIvxF7oorV0ZO1AQ+ycgOAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772217,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOSagAAIAR0Q8KAAXpCgAF\/wCJAIkAOuDxmiIBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772218,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOTFAAAIARzmcKAAXpCgAF\/wCJAIkAOuDxmiIBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772218,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOT7UAAIARywIKAAXpCgAF\/wCJAIkAOuDxmiIBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772220,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOV8oAAIARwu0KAAXpCgAF\/wCJAIkAOuDvmiQBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772221,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOW4sAAIARvywKAAXpCgAF\/wCJAIkAOuDvmiQBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1447772221776,"flow_last_seen":1447772221776,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57836,"dst_port":137,"l4_proto":"udp"}
+0432{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772221,"pkt_len":92,"pkt":"ABzEEHkPACFislxDCABFAABOBFAAAH8RHeEKAAFXCgAEGOHsAIkAOqS0IKgAAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1447772221776,"flow_last_seen":1447772221776,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57836,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0602{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772221,"pkt_len":217,"pkt":"ACFislxDABzEEHkPCABFAADLdA9AAIARbKQKAAQYCgABVwCJ4ewAt5RIIKiEAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1447772221882,"flow_last_seen":1447772221882,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0441{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772221,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBdSQGCABFAABOIosAAIAR+bAKAARlCgAF\/wCJAIkAOuxhlzUBEAABAAAAAAAAIEVORkZFTUVKQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1447772221882,"flow_last_seen":1447772221882,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0442{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772221,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOXlwAAIARvFsKAAXpCgAF\/wCJAIkAOuDvmiQBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772223,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOY9EAAIARtuYKAAXpCgAF\/wCJAIkAOuDtmiYBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772224,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOZnEAAIARtEYKAAXpCgAF\/wCJAIkAOuDtmiYBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772224,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt8asCABFAABOZ4oAAIARsy0KAAXpCgAF\/wCJAIkAOuDtmiYBEAABAAAAAAAAIEVQRktFSkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUJNAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":1447772225411,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.165","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0441{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772225,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBt3SFCABFAABOYEAAAIARu7sKAASlCgAF\/wCJAIkAOvrLhIYBEAABAAAAAAAAIEVIRkZFT0VPRUJGQ0NBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":1447772225411,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.165","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":1447772225411,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.165","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0450{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772225,"pkt_len":104,"pkt":"AOCBt3SFABzEEHkPCABFAABaEmgAAIARC28KAAQYCgAEpQCJAIkARtanhIaFAAAAAAEAAAAAIEVIRkZFT0VPRUJGQ0NBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAEABJPgAAYAAAoABBg=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":1447772225411,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.165","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1447772230221,"flow_last_seen":1447772230221,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.66","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0442{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772230,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABj+KG95CABFAABOBVEAAIARFw4KAARCCgAF\/wCJAIkAOg\/qh84BEAABAAAAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1447772230221,"flow_last_seen":1447772230221,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.66","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":1447772234353,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0442{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772234,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/ABzEEHkPCABFAABOQtEAAIAR2bcKAAQYCgAF\/wCJAIkAOvkLntYBEAABAAAAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":1447772234353,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":1447772234353,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.1","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0452{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772234,"pkt_len":104,"pkt":"ABzEEHkP7Khr9GB3CABFAABaM4kAAIAR6fEKAAUBCgAEGACJAIkARtMVntaFAAAAAAEAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAEABJPgAAYAAAoABQE=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":1447772234353,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.1","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1447772235481,"flow_last_seen":1447772235481,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.93","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0646{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772235,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/ADBIsLGmCABFAADlboAAAIARrCwKAAVdCgAF\/wCKAIoA0eR9EQ7pCQoABV0AigC7AAAgRUNFUEZIRUpFRkNBQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0EAIEZHRUpFSEVKRU1FQkVPRkVGUEVIRkNFUEZGRkFDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoAQk9XSUUAAAAAAAAAAAAAAAYBBxABAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1447772235481,"flow_last_seen":1447772235481,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.93","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1447772238479,"flow_last_seen":1447772238479,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0435{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772238,"pkt_len":92,"pkt":"ABzEEHkPAOCBt8asCABFAABOD1sAAIARDUQKAAXpCgAEGACJAIkAOgf\/mi8AAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1447772238479,"flow_last_seen":1447772238479,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0605{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772238,"pkt_len":217,"pkt":"AOCBt8asABzEEHkPCABFAADLWT8AAIARwuIKAAQYCgAF6QCJAIkAt\/eSmi+EAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1447772238721,"flow_last_seen":1447772238721,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.14","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0443{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772238,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/EGBLoLzrCABFAABOP6wAAIAR3OYKAAQOCgAF\/wCJAIkAOtzbuxABEAABAAAAAAAAIEVIRkZGQ0ZGQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1447772238721,"flow_last_seen":1447772238721,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.14","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0442{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772239,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/AOCBdSQGCABFAABOZPwAAIARtz8KAARlCgAF\/wCJAIkAOvRglzYBEAABAAAAAAAAIEVPRkdGQ0RKQ0FDQUNBQ0FDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772248,"pkt_len":92,"pkt":"ABzEEHkPAOCBt8asCABFAABORZkAAIAR1wUKAAXpCgAEGACJAIkAOgf2mjgAAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0605{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772248,"pkt_len":217,"pkt":"AOCBt8asABzEEHkPCABFAADLJDdAAIARt+oKAAQYCgAF6QCJAIkAt\/eJmjiEAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1447772251795,"flow_last_seen":1447772251795,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57921,"dst_port":137,"l4_proto":"udp"}
+0435{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772251,"pkt_len":92,"pkt":"ABzEEHkPACFislxDCABFAABOJRwAAH8R\/RQKAAFXCgAEGOJBAIkAOqRfIKgAAAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1447772251795,"flow_last_seen":1447772251795,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57921,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0604{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","pkt_oversize":false,"pkt_ts":1447772251,"pkt_len":217,"pkt":"ACFislxDABzEEHkPCABFAADLQERAAIARoG8KAAQYCgABVwCJ4kEAt5PzIKiEAAAAAAEAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAEAAAAAAHcER1VOTkFSICAgICAgICAgAAQAVklHSUxBTlRfR1JPVVAgAIQAR1VOTkFSICAgICAgICAgIAQAVklHSUxBTlRfR1JPVVAgHoQAABzEEHkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":1447772225411,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.165","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1447772225411,"flow_last_seen":1447772225411,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.165","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":1,"flow_packet_id":59,"flow_first_seen":1447772211392,"flow_last_seen":1447772269350,"flow_tot_l4_data_len":3422,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0455{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":1447772234353,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.1","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1447772238721,"flow_last_seen":1447772238721,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.14","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1447772238479,"flow_last_seen":1447772248481,"flow_tot_l4_data_len":482,"flow_min_l4_data_len":58,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.233","dst_ip":"10.0.4.24","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1447772234353,"flow_last_seen":1447772234353,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0456{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1447772230221,"flow_last_seen":1447772230221,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.66","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1447772221882,"flow_last_seen":1447772239929,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.101","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":0,"flow_packet_id":181,"flow_first_seen":1447772210350,"flow_last_seen":1447772269972,"flow_tot_l4_data_len":10498,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.4.131","dst_ip":"10.0.5.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1447772235481,"flow_last_seen":1447772235481,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.93","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1447772214344,"flow_last_seen":1447772214344,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.5.9","dst_ip":"10.0.5.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1447772221776,"flow_last_seen":1447772221776,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":58,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57836,"dst_port":137,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1447772251795,"flow_last_seen":1447772251795,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":58,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.1.87","dst_ip":"10.0.4.24","src_port":57921,"dst_port":137,"l4_proto":"udp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1447772216537,"flow_last_seen":1447772216537,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":20,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.131","src_port":139,"dst_port":1398,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0457{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1447772216537,"flow_last_seen":1447772216537,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":20,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.4.24","dst_ip":"10.0.4.131","src_port":139,"dst_port":1398,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios.pcap"}
diff --git a/tests/result/nDPId_netbios_wildcard_dns_query.pcap.txt b/tests/result/nDPId_netbios_wildcard_dns_query.pcap.txt
new file mode 100644
index 000000000..d2618d9e2
--- /dev/null
+++ b/tests/result/nDPId_netbios_wildcard_dns_query.pcap.txt
@@ -0,0 +1,6 @@
+0378{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios_wildcard_dns_query.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios_wildcard_dns_query.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1597866040493,"flow_last_seen":1597866040493,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.1.67.250","dst_ip":"10.1.66.20","src_port":41335,"dst_port":53,"l4_proto":"udp"}
+0450{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios_wildcard_dns_query.pcap","pkt_oversize":false,"pkt_ts":1597866040,"pkt_len":92,"pkt":"AAkPCQEKAFBWvdjVCABFAABOhIlAAEARHAYKAUP6CgFCFKF3ADUAOgSEgPAAEAABAAAAAAAAIENLQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios_wildcard_dns_query.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1597866040493,"flow_last_seen":1597866040493,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.1.67.250","dst_ip":"10.1.66.20","src_port":41335,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"ckaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":33,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios_wildcard_dns_query.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1597866040493,"flow_last_seen":1597866040493,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.1.67.250","dst_ip":"10.1.66.20","src_port":41335,"dst_port":53,"l4_proto":"udp"}
+0162{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netbios_wildcard_dns_query.pcap"}
diff --git a/tests/result/nDPId_netflix.pcap.txt b/tests/result/nDPId_netflix.pcap.txt
new file mode 100644
index 000000000..a8e9184d9
--- /dev/null
+++ b/tests/result/nDPId_netflix.pcap.txt
@@ -0,0 +1,973 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1484319030789,"flow_last_seen":1484319030789,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319030,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0e0NAAEAGcrPAqAEHNBhXBs7BAbvkIOdkTYzTZoAREADl8AAAAQEICh9kr+C2r\/ET","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1484319032865,"flow_last_seen":1484319032865,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":80,"pkt":"gCqoTGHM5JjWH70UCABFAABCVrgAAEARoJrAqAEHwKgBAclXADUALqX1KVYBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1484319032865,"flow_last_seen":1484319032865,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0415{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":80,"pkt":"gCqoTGHM5JjWH70UCABFAABC8wcAAEARBEvAqAEHwKgBAclXADUALjTPmmEBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1484319032865,"flow_last_seen":1484319032866,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0678{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":275,"pkt":"5JjWH70UgCqoTGHMCABFAAEF4UBAAEAR1U7AqAEBwKgBBwA1yVcA8QwWKVaBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAHADAAFAAEAAABvAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAFrABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AAQABAAAAMgAENr8RM8BNAAEAAQAAADIABDa\/+KzATQABAAEAAAAyAAQ2ummQwE0AAQABAAAAMgAENroXx8BNAAEAAQAAADIABDaVT4rATQABAAEAAAAyAAQ2uopvwE0AAQABAAAAMgAENshkTsBNAAEAAQAAADIABDa6J1c=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1484319032865,"flow_last_seen":1484319032879,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":46,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"54.191.17.51"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1484319032882,"flow_last_seen":1484319032882,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":96,"pkt":"gCqoTGHM5JjWH70UCABFAABSBKEAAP8RM6HAqAEHwKgBAcuUADUAPjWQ0IgBAAABAAAAAAAAB2ljaG5hZWEJdXMtd2VzdC0yBnByb2RhYQduZXRmbGl4A2NvbQAAAQAB","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1484319032882,"flow_last_seen":1484319032882,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ichnaea.us-west-2.prodaa.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0806{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":371,"pkt":"5JjWH70UgCqoTGHMCABFAAFl4UFAAEAR1O3AqAEBwKgBBwA1yVcBUUmUmmGBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAHADAAFAAEAAABvAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAFrABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AHAABAAAACwAQJiABCHAPAAAAAAAANCn+KsBNABwAAQAAAAsAECYgAQhwDwAAAAAAADQq0NvATQAcAAEAAAALABAmIAEIcA8AAAAAAAA0KxQLwE0AHAABAAAACwAQJiABCHAPAAAAAAAANCtvPMBNABwAAQAAAAsAECYgAQhwDwAAAAAAADQpww\/ATQAcAAEAAAALABAmIAEIcA8AAAAAAAA0K1s6wE0AHAABAAAACwAQJiABCHAPAAAAAAAANCqp7MBNABwAAQAAAAsAECYgAQhwDwAAAAAAADQqzFc=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1484319032865,"flow_last_seen":1484319032884,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.32.1.8"}}
+0610{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":224,"pkt":"5JjWH70UgCqoTGHMCABFAADS4UJAAEAR1X\/AqAEBwKgBBwA1y5QAvmn70IiBgAABAAgAAAAAB2ljaG5hZWEJdXMtd2VzdC0yBnByb2RhYQduZXRmbGl4A2NvbQAAAQABwAwAAQABAAAAAQAENkXM8cAMAAEAAQAAAAEABDQqmRbADAABAAEAAAABAAQ2RDCIwAwAAQABAAAAAQAENkQSPsAMAAEAAQAAAAEABDZGuZ3ADAABAAEAAAABAAQ0IoVtwAwAAQABAAAAAQAENpVZIsAMAAEAAQAAAAEABDaUWeg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1484319032882,"flow_last_seen":1484319032884,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":62,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ichnaea.us-west-2.prodaa.netflix.com","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.69.204.241"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1484319032888,"flow_last_seen":1484319032888,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA+AxAAEAGfcXAqAEHNkXM8c9xAbuJGKiDAAAAALAC\/\/+XvgAAAgQFtAEDAwUBAQgKH2S4KwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1484319032896,"flow_last_seen":1484319032896,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABADepAAEAGIy3AqAEHNr8RM896Abu7NDMxAAAAALAC\/\/+WKQAAAgQFtAEDAwUBAQgKH2S4MgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGjLY2RczxwKgBBwG7z3E0MsEbiRiohKASReqX9AAAAgQFtAQCCAqFp0\/bH2S4KwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0mxZAAEAG2sfAqAEHNkXM8c9xAbuJGKiENDLBHIAQEBX8aAAAAQEICh9kuFmFp0\/b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEElg9AAEAG3v7AqAEHNkXM8c9xAbuJGKiENDLBHIAYEBXrWQAAAQEICh9kuFqFp0\/bFgMBAMsBAADHAwNYeOk4DbsWWYY8cJvWjkCo5DadBeFv01+sAqDDmGng8gAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAeAAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQABsAGQhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1484319032888,"flow_last_seen":1484319032938,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"spdy\/3.1,spdy\/3,http\/1.1"}}
+0409{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGR\/s2vxEzwKgBBwG7z3pSqS+duzQzMqASOJAFFAAAAgQFtAQCCAqtijmlH2S4MgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0cYhAAEAGv5rAqAEHNr8RM896Abu7NDMyUqkvnoAQEBVcLgAAAQEICh9kuGCtijml","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1091{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1484319032896,"flow_last_seen":1484319032959,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1484319032984,"flow_last_seen":1484319032984,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAh8JAAEAG+QHAqAEHNCDEJM97AbvHy0puAAAAALAC\/\/\/BrQAAAgQFtAEDAwUBAQgKH2S4hgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1484319032986,"flow_last_seen":1484319032986,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAdf5AAEAGCsbAqAEHNCDEJM98AbvweU0rAAAAALAC\/\/+WPwAAAgQFtAEDAwUBAQgKH2S4iAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0jvtAACkG\/cI2RczxwKgBBwG7z3E0MsEciRipVIAQAEsLVQAAAQEICoWnT+gfZLha","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1484319032888,"flow_last_seen":1484319032990,"flow_tot_l4_data_len":1868,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":311,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"spdy\/3.1,spdy\/3,http\/1.1"}}
+2347{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcjv1AACkG+Bg2RczxwKgBBwG7z3E0MsbEiRipVIAQAEt33wAAAQEICoWnT+kfZLhaAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAUAwggE8MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zASBgNVHRMBAf8ECDAGAQH\/AgEAMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcy5zeW1jYi5jb20vcGNhMy1nMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAuBggrBgEFBQcBAQQiMCAwHgYIKwYBBQUHMAGGEmh0dHA6Ly9zLnN5bWNkLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWxdSvtZWe\/T3NAlLlsrH9iHQaYDv55oZ6CTif9kvYd0T61pl5OFqkMtOKumKFudSjfZDG0cFDYCjqJr+KdO8HSjVpUrUcTwPdcULcz8ASGV5DatqHiUMwALeZqy9SwZrmleKKoF+Z5u6UmBzxBX3u8FQyQiluldKOhsQcxzhe7aUA0uuUbCCQDpaJJzuDVhdrropesoznrKBwi+OwSfPQPAEoT\/1N8LK\/KxTbalTaU\/hdmQMJYGpNwPyOXM00sF8eBgcqGsW5+fgnSmv2ORpOXmVabl7XF0BnNT380hFE2SV1wpuctpDIiRvPlpw3MCS4C3lV\/jkKyfu9f8bswGDehYDAwFNDAABSQMAF0EEoBWe2xDou1PViaKclBP1Ug+NOLCjAaPHzz4+YV2LIxjpcz4u4VnAYYdYYPSHtRsJ+faftfw+yffJZueqjm5ZjAQBAQADSsYIx82mgrDWmf9R0pz9RcvNmgmyVAGP2tIDSkb3tJkCfrpqGTeOoSbuyP\/SPDOYWGhdMvZJqqdSGm913SxGVZ+bYGJP6UbCE1YtG+HnDJmsafnaNo4xvftzFA2JUiQM+wCkUM8=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1228{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":3,"flow_packet_id":7,"flow_first_seen":1484319032888,"flow_last_seen":1484319032991,"flow_tot_l4_data_len":3348,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}}
+0397{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319032,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ZbJAAEAGECzAqAEHNkXM8c9xAbuJGKlUNDLMbIAQD9LwSQAAAQEICh9kuI2Fp0\/p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":229,"pkt":"5JjWH70UgCqoTGHMCABFIADXjv5AACkG\/Rw2RczxwKgBBwG7z3E0MsxsiRipVIAYAEtuwgAAAQEICoWnT+kfZLhaZtSQ+Iyn3A+dB8uX6LOgnuiEKx3vspW0+2IBuM40ZfJxxMWyZM9gti3tYKq1tW53BocDJStQe9AzJUnyRmG3AiRApFdVtk\/ONUBdbo5nuiTJr9FFCfhb5SCskG1P92VA5W25BhDHOI3RoEYVHkXaXNxiDhUaQC+ke2OFznNU3Iu4UOEM+5+Zd63nJxztIloYV3+3eaXhgcPMWxYDAwAEDgAAAA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ExxAAEAGYsLAqAEHNkXM8c9xAbuJGKlUNDLND4AQD\/rvcAAAAQEICh9kuJuFp0\/p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0Fi9AACkGMdQ2vxEzwKgBBwG7z3pSqS+euzQ1N4AQAD1p4wAAAQEICq2KObUfZLhu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcFjBAACkGLCs2vxEzwKgBBwG7z3pSqS+euzQ1N4AQAD10dAAAAQEICq2KObUfZLhuFgMDAFkCAABVAwNYeOk4myS3qxaAtypdvQdItdnmA5VNdxB0OrhpFmplaiA6FIrcdkTGZNSLE2Hp10gV+4u1gzYzFBRCvukpLrdKh8AvAAAN\/wEAAQAACwAEAwABAhYDAwgiCwAIHgAIGwAEIDCCBBwwggMEoAMCAQICAhObMA0GCSqGSIb3DQEBCwUAMIGZMS0wKwYDVQQDEyRQcmltYXJ5IENlcnRpZmljYXRlIEF1dGhvcml0eSAoMjAwOSkxEzARBgNVBAgTCkNhbGlmb3JuaWExCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtOZXRmbGl4IEluYzEcMBoGA1UECxMTRWxlY3Ryb25pYyBEZWxpdmVyeTESMBAGA1UEBxMJTG9zIEdhdG9zMB4XDTAxMDExNzIwMzIwOVoXDTE4MDMyNDIwMzIwOVowgYAxGzAZBgNVBAMMEioubmNjcC5uZXRmbGl4LmNvbTEWMBQGA1UECgwNTmV0ZmxpeCwgSW5jLjETMBEGA1UECwwKT3BlcmF0aW9uczELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCUxvcyBHYXRvczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKCMPKDrRKNlpQYmDci6pMXZdSSUbKrQRkPDz7HhtKtPPugiuJduNExZc6Kdb12vBV\/O+SiPHaVK7mpFvbFGQlMb6qQfwVOi\/aD6FF0wubaBBRmV5soLn6Uml8hcRcy1GwhcE0PciETMHgCKsYz6GRuA022Eqzo18xrMBx0ZwPuRDaRc+aOcYlh2D8wJdLQNpKdgRiYnOzqzb1V73+PIcLBKBaRmuSAMY7T6QAsBvotFYlMY32uWd0vZw9isFDSJCV8w2CSLAAeSkvUEJt3zKqKD5d5h8lWhsfYUg78EDVQMWb3iyTQ+UHy3b4IHtGaB+ybeHo7UkyS4NKYViXGQ4bECAwEAAaOBhDCBgTALBgNVHQ8EBAMCBaAwHwYDVR0jBBgwFoAUgzutabNbHNPaO8lPBXMZwiqK8P8wHQYDVR0OBBYEFH8tt\/b+DoJ\/qUOipuTAuxoaEiJTMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdEQQWMBSCEioubmNjcC5uZXRmbGl4LmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAkveZR7qD\/7\/8qJ4CSsfWHq+Cw0DsuYB9YjDmpMA3gU+yzX9cXxMn8tY3AApgaSjK94LEU1T7O\/bsKsL0uCJuFhSfW4W3+AlTe3UhEOMeILOZwgcMhUPQXGI28idMvibE1zQjX96OSlU9uDL6s8itcycsRGgSP0e+Umi1cijldISAIfgK+QzQIa\/k6kuJZ2i1hk4M6e8JqkqoYRso7uoX2ECQVKzVgRgm0z79wLxOrKXQf5L2Js7s03GHwdt04kQTtyYRh6NEGBmzjgdicV4sXy4g3wbAPPR1+itz5sKT\/vAAteT\/4Ik8+RSfZGNefG8eQxjBkJKvoKV1GyHiH3YYrgAD9TCCA\/EwggLZoAMCAQICAQAwDQYJKoZIhvcNAQEFBQAwgZkxLTArBgNVBAMTJFByaW1hcnkgQ2VydGlmaWNhdGUgQXV0aG9yaXR5ICgyMDA5KTETMBEGA1UECBMKQ2FsaWZvcm5pYTELMAkGA1UEBhMCVVMxFDASBgNVBAoTC05ldGZsaXggSW5jMRwwGgYDVQQLExNFbGVjdHJvbmljIERlbGl2ZXJ5MRIwEAYDVQQHEwlMb3MgR2F0b3MwHhcNMDEwMTAxMTIzMDAwWhcNMjkwMTAxMTIzMDAwWjCBmTEtMCsGA1UEAxMkUHJpbWFyeSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgKDIwMDkpMRMwEQYDVQQIEwo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1484319032896,"flow_last_seen":1484319033008,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0503{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/wQpAAEAGtIjAqAEHNkXM8c9xAbuJGKlUNDLND4AYEABO9QAAAQEICh9kuKOFp0\/pFgMDAEYQAABCQQRGXfM2PQ1mupDNBFEH8j6WAK2zq8WgkYKYMxwTNcPvlN2we7WlKHt\/s7jgF\/EmIzf4sZcCYC49GI1iSb8wh9D7","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6VIZAAEAGIVLAqAEHNkXM8c9xAbuJGKmfNDLND4AYEADXBQAAAQEICh9kuKOFp0\/pFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhX3FAAEAGFkDAqAEHNkXM8c9xAbuJGKmlNDLND4AYEACNxAAAAQEICh9kuKOFp0\/pFgMDACgn42dNpJV+legxgesXmmgFh+L2+LuQoZEeOdDCZEGvW37mfo5zGyng","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1855{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+1157{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1484319032896,"flow_last_seen":1484319033017,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}}
+0396{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA01YhAAEAGW5rAqAEHNr8RM896Abu7NDU3Uqk5foAQD95QKQAAAQEICh9kuKetijm1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGl6g0IMQkwKgBBwG7z3ve3c1cx8tKb6ASRepkbwAAAgQFtAQCCAq2m8VuH2S4hgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":192,"pkt":"gCqoTGHM5JjWH70UCABFAACy3ctAAEAGUtnAqAEHNr8RM896Abu7NDU3Uqk5foAYEACA0wAAAQEICh9kuLCtijm1FgMDAEYQAABCQQSlqr0xNpnacE6ELvDZ+JSxgy1oqaUIb9LpTwTuQb3NX8au0ELwSerfbzVcCfcT1W6ukBuohqc8njeNdQflsylXFAMDAAEBFgMDACjJLG94e4Y1Vf+ycBdcegBzLfyAAsaK+DH8iXm2e5h2XIZJhwqCnPkr","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGlqg0IMQkwKgBBwG7z3xLWYWT8HlNLKASReoUTgAAAgQFtAQCCAq2m8VvH2S4iAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0rMBAAEAG1A\/AqAEHNCDEJM97AbvHy0pv3t3NXYAQEBXI5wAAAQEICh9kuLC2m8Vu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":298,"pkt":"gCqoTGHM5JjWH70UCABFAAEc3y1AAEAGoLrAqAEHNCDEJM97AbvHy0pv3t3NXYAYEBXi\/gAAAQEICh9kuLK2m8VuFgMBAOMBAADfAwNYeOk5dpq52Q92jK0dByt7moyBAevty9H6iponk2lhXQAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAkAAAABsAGQAAFmFwaS1nbG9iYWwubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1484319032984,"flow_last_seen":1484319033033,"flow_tot_l4_data_len":380,"flow_min_l4_data_len":32,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0396{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0iIJAAEAG+E3AqAEHNCDEJM98AbvweU0sS1mFlIAQEBV4xgAAAQEICh9kuLK2m8Vv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":298,"pkt":"gCqoTGHM5JjWH70UCABFAAEcC4pAAEAGdF7AqAEHNCDEJM98AbvweU0sS1mFlIAYEBVXdAAAAQEICh9kuLS2m8VvFgMBAOMBAADfAwNYeOk5CCoWDbSK0ezQ7KNuUeOfkDpWv85W1iHK1VuIfQAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAkAAAABsAGQAAFmFwaS1nbG9iYWwubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1484319032986,"flow_last_seen":1484319033038,"flow_tot_l4_data_len":380,"flow_min_l4_data_len":32,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0399{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0jv9AACkG\/b42RczxwKgBBwG7z3E0Ms0PiRippYAQAEv+tAAAAQEICoWnT\/sfZLij","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnjwBAACkG\/Yo2RczxwKgBBwG7z3E0Ms0PiRip0oAYAEtP4gAAAQEICoWnT\/wfZLijFAMDAAEBFgMDACiFeT4UbktU\/FnZZzeV\/nmTIZwANauoeDfM3VXJTPDJdsacY2okvT1Z","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnFjJAACkGMZ42vxEzwKgBBwG7z3pSqTl+uzQ1tYAYAD2kIQAAAQEICq2KOcYfZLiwFAMDAAEBFgMDACgz4sNc9LlmbMt2PFkOyQvUQufypjjQ5Y9WfiXcGiqT\/8ELdIluxzbA","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0SWNAAEAG57\/AqAEHNr8RM896Abu7NDW1Uqk5sYAQD\/5PEgAAAQEICh9kuNytijnG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":129,"pkt":"gCqoTGHM5JjWH70UCABFAABzIp1AAEAGDkfAqAEHNr8RM896Abu7NDtdUqk5sYAYEAD+cQAAAQEICh9kuN+tijnGVpk9YNxK4YqQ\/n+0u72boo9tMBbsGvzE8F7EB8NFgAStlBdAlGqGOnP7RnQfi3oGwRm+y4OvSPn28fD3lMD0","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0CCZAACkGj4o0IMQkwKgBBwG7z3ve3c1dx8tLV4AQAEvXuQAAAQEICrabxXwfZLiy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1484319032984,"flow_last_seen":1484319033086,"flow_tot_l4_data_len":1892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2349{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcCChAACkGieA0IMQkwKgBBwG7z3ve3dMFx8tLV4AQAEsFpwAAAQEICrabxX0fZLiyAQICECguJ5F5M5LkKPIhp07JN64wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAUAwggE8MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zASBgNVHRMBAf8ECDAGAQH\/AgEAMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcy5zeW1jYi5jb20vcGNhMy1nMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAuBggrBgEFBQcBAQQiMCAwHgYIKwYBBQUHMAGGEmh0dHA6Ly9zLnN5bWNkLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWxdSvtZWe\/T3NAlLlsrH9iHQaYDv55oZ6CTif9kvYd0T61pl5OFqkMtOKumKFudSjfZDG0cFDYCjqJr+KdO8HSjVpUrUcTwPdcULcz8ASGV5DatqHiUMwALeZqy9SwZrmleKKoF+Z5u6UmBzxBX3u8FQyQiluldKOhsQcxzhe7aUA0uuUbCCQDpaJJzuDVhdrropesoznrKBwi+OwSfPQPAEoT\/1N8LK\/KxTbalTaU\/hdmQMJYGpNwPyOXM00sF8eBgcqGsW5+fgnSmv2ORpOXmVabl7XF0BnNT380hFE2SV1wpuctpDIiRvPlpw3MCS4C3lV\/jkKyfu9f8bswGDehYDAwFNDAABSQMAF0EEiRzPwlTkDM7pzmCEjbxZ0dTNANWnimpFL7rKObrHh\/1avNxewMekmIg0PSl8wJmSRrFqV3XnL5LQlwbdboDfXAQBAQBa38lDoF0AcuNl+zpRqBhMyNtiR9ndmFAWRajh\/wqehraL7uzK74TQ\/eVA+7Y3M6zgKg2ReOysRDIfD6ZaT7Hbqj1ogI5CWZQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1278{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1484319032984,"flow_last_seen":1484319033087,"flow_tot_l4_data_len":3372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}}
+0396{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0RaBAAEAGOzDAqAEHNCDEJM97AbvHy0tX3t3YrYAQD9K8rgAAAQEICh9kuOW2m8V9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QOhAACoGVcg0IMQkwKgBBwG7z3xLWYWU8HlOFIAQAEuHmAAAAQEICrabxX0fZLi0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1484319032986,"flow_last_seen":1484319033098,"flow_tot_l4_data_len":1892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":315,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2351{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcQOpAACoGUB40IMQkwKgBBwG7z3xLWYs88HlOFIAQAEsLYwAAAQEICrabxX4fZLi0AQICECguJ5F5M5LkKPIhp07JN64wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAUAwggE8MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zASBgNVHRMBAf8ECDAGAQH\/AgEAMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcy5zeW1jYi5jb20vcGNhMy1nMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAuBggrBgEFBQcBAQQiMCAwHgYIKwYBBQUHMAGGEmh0dHA6Ly9zLnN5bWNkLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWxdSvtZWe\/T3NAlLlsrH9iHQaYDv55oZ6CTif9kvYd0T61pl5OFqkMtOKumKFudSjfZDG0cFDYCjqJr+KdO8HSjVpUrUcTwPdcULcz8ASGV5DatqHiUMwALeZqy9SwZrmleKKoF+Z5u6UmBzxBX3u8FQyQiluldKOhsQcxzhe7aUA0uuUbCCQDpaJJzuDVhdrropesoznrKBwi+OwSfPQPAEoT\/1N8LK\/KxTbalTaU\/hdmQMJYGpNwPyOXM00sF8eBgcqGsW5+fgnSmv2ORpOXmVabl7XF0BnNT380hFE2SV1wpuctpDIiRvPlpw3MCS4C3lV\/jkKyfu9f8bswGDehYDAwFNDAABSQMAF0EEiRzPwlTkDM7pzmCEjbxZ0dTNANWnimpFL7rKObrHh\/1avNxewMekmIg0PSl8wJmSRrFqV3XnL5LQlwbdboDfXAQBAQAitn9kTw3+unW\/ujQfFSe9Oz2ZOcGfrv8U6ks7FNBylKqrpcFr4PPgKC4Ru\/70UoqDFujO07F2q\/Dkj8tk\/pIgteQluMx2hh4=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1278{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":6,"flow_packet_id":7,"flow_first_seen":1484319032986,"flow_last_seen":1484319033112,"flow_tot_l4_data_len":3372,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}}
+0396{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0k5hAAEAG7TfAqAEHNCDEJM98AbvweU4US1mQ5IAQD9JsdgAAAQEICh9kuP62m8V+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0FjNAACkGMdA2vxEzwKgBBwG7z3pSqTmxuzQ7nIAQAElYzwAAAQEICq2KOdQfZLjf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":259,"pkt":"5JjWH70UgCqoTGHMCABFIAD1CClAACkGjsY0IMQkwKgBBwG7z3ve3ditx8tLV4AYAEt0ZQAAAQEICrabxX0fZLiyWQKkNZoSrUszZ4qy7zmILw8VGJ\/NGQgj4Oar7Y1XPyxQfZge5xF8y9306OAC\/RBJ+1kQXkJv0zDJBhz6J9okGy44XOu4xmHehXiTS1Qg3XNbCvmNc0Ey\/akj1K5Oqozmq1kuZm034IjBudqoG27PZVSS4Rj\/hxr89xeOdWbPp6wUr\/ydmIkhPKloKEUikMYMUywCfuRlmmyySytrjAlu4FPNkDMco2\/Hy7l3h83hw5nYG2TWA3FgkRYDAwAEDgAAAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA07ldAAEAGknjAqAEHNCDEJM97AbvHy0tX3t3ZboAQD\/m7lwAAAQEICh9kuRS2m8V9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":259,"pkt":"5JjWH70UgCqoTGHMCABFIAD1QOtAACoGVQQ0IMQkwKgBBwG7z3xLWZDk8HlOFIAYAEsI3QAAAQEICrabxX4fZLi0ol2rvWNvOmgSi8vX8sVicT3YIx9ETqt\/6ApKfujT5pADMbtTIuvwqoOMDAEGPrXGK8sZ+FJYiKGD3lZlcXKoS1q\/ymU1NYpwc0nV\/c3WYtlIOyJTg7MwT3UJP7vnb8HkHI1EY35WWoIbutQT95QGH5MnpR93maiH3VE5AeomKzue2hMVMr0d4\/DoxSJ\/k9lux2BhRU2HzqLKyfMK7KIpD8PITD5PfGCVawoprWKKoWGtoor2RKAqIxYDAwAEDgAAAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ks9AAEAG7gDAqAEHNCDEJM98AbvweU4US1mRpYAQD\/lrdQAAAQEICh9kuRe2m8V+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcFjRAACkGLCc2vxEzwKgBBwG7z3pSqTmxuzQ7nIAQAEnuIAAAAQEICq2KOdcfZLjfFwMDBrkz4sNc9LlmbeXLWSUm0FWCaOn\/hJq+DX19PyVs9nIb0Xb9HsluvgquU0g6ls6q57jcLfD4hPUX+reRTZsdyzNUZ8PnbdSJ1tx4cFHwi9FMDyPXNcZ8hEKhlhr7mfhz4EElpYSSbICC59OnCfNxmnhMAnmpr14QBnMjicHjUYhmppEJfj1fNyTVojh2phwIWoTH804EeGlH8vMwXR3a8PqjH3oo56mzKC37qwKAzC2QQWWDuTWsLuwwxAG6quSyZ7MrNKsyIsOHGCW77ILIbNxtQmcTykKfBv2kZus2KJ95mgSrpX612WlkLa5v7dhdzjSLIAbv87QYMKuQbcuMKvrFZp9lqmJii\/e4s7QowMJzo6qnW1T8jwi20kFjYX903PBniFO+zj7oXVpyh2qeeIU3ViVx2jfGVvLeMBG904YyKjwfWSZ4AKLxIPL0O4UvpQ5HnN+dygBxehsiwMA2ed55805IC38fkE544zHJN0hVR66wLt7GvTJ09ZkxE+q\/rB8olSOg2ZjQA\/Z49KlxQUXggnWILWSCy13AyVB0Ef3cKp6LcMST69UE7TM3L7EfX5i7vpf+lozw8r9ONcq3HjVpOjl+nA7k4zcFjtdP3Acl9K4IXrkcErLEHr\/rYnOD5E19GSO7L7VG4U2JyBBDOYq4V\/2PLc5aBmBiCVW2YE9p+6w6NXhIhGBHM5EGHGwVk5RNcGH4\/CIlZEOHtxN3TzXOrAr7ZR4l3hy0mU4l61rwce55ctoUSJKaRdnnU3HpEdvUfgOS9Haugo4OTu5JlrsE9Jh9XwFrXu7l\/0C0gm22Fq4Q1ZAce2ZdybAQ080aczQuoE\/+7wAZ6XZM\/wImc5iJpj5xebwgLOi1l15iTjztJuAZtRw3yXzomac+xwGNWhEc3kkkKzjaI+ROyxzw5ImgvRXmjeGrxDZ5QW1baSbnmr1TU3LOWhipy8nBn26yg+NdbmxvORnOVG8kC8TjVOcjE5jsamQFalvi+dM40Thy2\/r+LS5rq8jYso\/2GFudhgoy+cJ9dAL9n8W7C8Hh3lVWCPOS8BPY04iXxZ5sM0n9EAbtoPwaaiXltyldVaR5\/JGWmI+Wc6zR\/mGZDHTVT747YB6KuTfdX7cb72PzMKQ1kW\/\/BOXGzBuNC17w12XBl3KGdaw\/dB+oK0V3ssbG7OcT8S9++kwJdtaz8XovY5Dj7u3PLt4Cjv9Kj+7Nh8XmoL06z6lc5wj4LJ3fVnhUg0D0qeWmpbSVV3d3iu8BVTbkxdTReI4yFywc\/KTCrMlMqhZgLe8OqvUXbRuiOM7+wwRFSjmV8iUYeoPj5CiOJ6YwyAdJ7ldavtRrrnZ+rKHprMhImTRa8rP60Kv5taKiitbCauyqUtujlMYiDVBwSIULITCOaDrdLcpFnFvyd6jstT92o2vk6pGlKq7tY1BmSHWt4Ie8sfUdqiL2rDAb2PDNE7eIzSSzoJh9HntPNMAYX8lJQAdkyca\/iK13vAYHov6w1D8ZCHYMsRvHuceJIhaDgeqeKkuU6pVAmFAbzvs1ZWNCjaRfiS6n1oxE4nzBL\/rPEbpNyzpbyFVzpnT58eFDsbRIzLV1lYOX3tmQlyZP7TpmtKshX0cWwqFCB+uJr2eaI8OV3sw400KJ\/Lmp17kZI6sEygw+INbmudVDUAukmQtMdoH9j3\/T5n5m+rK\/jea0akocbB9\/+37kj0QLfEGv9RFkTWfREVcJWacblZ77hqyP9fOwk\/lSf9fL6tV9rj+32ioK4Q2\/kGEZCNo35+fh17PqEeiKj5uyrJm4Hwt8XyPL\/4IQOpqTyv4d1A1zHP2GDQJaNnk9jOwLWjGVEvw0e2zQ1fUPZxj4VVILHL2TlcfEvdAyWOSYucaJLhJbIOsqTOqsY\/0jG8A6p8cHp9lrI8wbQs7nmiBm45hECh3RKwR9h7Q=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/cjBAAEAGDlXAqAEHNCDEJM97AbvHy0tX3t3ZboAYEAA4MgAAAQEICh9kuSC2m8V9FgMDAEYQAABCQQQyJQYAwInFtNlIK+ObsmT7yNb6TMI6+WQnnuD7gjhdT2mUSONMTjE8\/kqR8NTbVlA6O0MgTDumy7hgdIMMu+pO","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6E2ZAAEAGbWTAqAEHNCDEJM97AbvHy0ui3t3ZboAYEACjJwAAAQEICh9kuSC2m8V9FAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABh7bNAAEAGku\/AqAEHNCDEJM97AbvHy0uo3t3ZboAYEACDhwAAAQEICh9kuSC2m8V9FgMDACgK+SAlrj44RWDLuZfK+d7j+eR7EPXutjB5o1oYwdMak5eI1sUoSzZC","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/WuZAAEAGJZ\/AqAEHNCDEJM98AbvweU4US1mRpYAYEABcAAAAAQEICh9kuSS2m8V+FgMDAEYQAABCQQSrnnv1KUnDdGLR3Ev4lP5wydpBAzHpntHEUDqGi9EhNO5Qd+zCZD78sbmGgVlLSx42tity6aH1tKaEX5ATJEiD","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6cE1AAEAGEH3AqAEHNCDEJM98AbvweU5fS1mRpYAYEABTBAAAAQEICh9kuSS2m8V+FAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhsGZAAEAG0DzAqAEHNCDEJM98AbvweU5lS1mRpYAYEADqBQAAAQEICh9kuSS2m8V+FgMDACjlSgAgUYXMsof1DpC5CynTpNAzuyi9sBa3EwhmoZG\/TY6BWCHTz8kM","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0CCpAACkGj4Y0IMQkwKgBBwG7z3ve3dlux8tL1YAQAEvKoAAAAQEICrabxZgfZLkg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnCCtAACkGj1I0IMQkwKgBBwG7z3ve3dlux8tL1YAYAEtrMwAAAQEICrabxZgfZLkgFAMDAAEBFgMDACiZx7iozMcllxX1E3JwBmmUnboKo+I1T\/++gGjtramWR05YssbIHNQG","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QOxAACoGVcQ0IMQkwKgBBwG7z3xLWZGl8HlOkoAQAEt6fQAAAQEICrabxZkfZLkk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnQO1AACoGVZA0IMQkwKgBBwG7z3xLWZGl8HlOkoAYAEuD1wAAAQEICrabxZkfZLkkFAMDAAEBFgMDACjyIC+sdvpS94pBwdWNxLhPGkVOONiqg+nGftLyGpRBV7Na8Z6XYe7o","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1484319033206,"flow_last_seen":1484319033206,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAagpAAEAGFrrAqAEHNCDEJM99AbszkZRgAAAAALAC\/\/8LKQAAAgQFtAEDAwUBAQgKH2S5UQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGlqg0IMQkwKgBBwG7z33SmoRGM5GUYaASReoDCgAAAgQFtAQCCAq2m8WoH2S5UQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0m4FAAEAG5U7AqAEHNCDEJM99AbszkZRh0pqER4AQEBVneAAAAQEICh9kuYW2m8Wo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEEjf5AAEAG8gHAqAEHNCDEJM99AbszkZRh0pqER4AYEBXfdQAAAQEICh9kuYe2m8WoFgMBAMsBAADHAwNYeOk5L\/hvHF8lhL712a\/A3K+7eM0TUzNDC5BydZXwIiBWLEL7mQRMMcaBC1F+lWnOx+fqhp3XmUAyc5sg8zTJFwAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1484319033206,"flow_last_seen":1484319033261,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0397{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QfNAACoGVL00IMQkwKgBBwG7z33SmoRHM5GVMYAQAEt2YwAAAQEICrabxbUfZLmH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":211,"pkt":"5JjWH70UgCqoTGHMCABFIADFQfRAACoGVCs0IMQkwKgBBwG7z33SmoRHM5GVMYAYAEuOnAAAAQEICrabxbUfZLmHFgMDAFkCAABVAwNYeOk5B1WkFxgHC31pvIYeDxaWInHvqR4tWm2ZaAIcFSBWLEL7mQRMMcaBC1F+lWnOx+fqhp3XmUAyc5sg8zTJF8AvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAok9fCDYUPoj52\/7bWkXpubOWKuws2NbqIamQurbKaJlfPfN1Qd4gP1Q==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1484319033206,"flow_last_seen":1484319033312,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0397{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XflAAEAGItfAqAEHNCDEJM99AbszkZUx0pqE2IAQEBFl2QAAAQEICh9kubq2m8W1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6c+RAAEAGDObAqAEHNCDEJM99AbszkZUx0pqE2IAYEBFNxgAAAQEICh9kubu2m8W1FAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABh3lNAAEAGok\/AqAEHNCDEJM99AbszkZU30pqE2IAYEBEFDQAAAQEICh9kubu2m8W1FgMDACgq+RBR8THTcjMRmpcYU6jStsCmqjcV10RMxOYwlzzQAaSL47\/L\/6Qd","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":309,"pkt":"gCqoTGHM5JjWH70UCABFAAEne+pAAEAGA\/PAqAEHNCDEJM99AbszkZVk0pqE2IAYEBGthwAAAQEICh9kub22m8W1FwMDAO4q+RBR8THTczVIHAR47QWihLZkYMeevxjQhcpNgqfifZeOMb577YwzOL1WmGxVk44+ojUGHdb9UBSbaV5B9mWxDR4YseQII3vl9XcRLDW+ongGMo8mM60rHi4zH6PhdEmbbjqEfeWjgsQMfQ0W92y2rsPaleedeHKHI1ut\/rhqMYCl4N2shaqOhM7sxGMTG5sDu8YE89xzSDGoE+gBVLWBx96z4iAbWtgeWPUvHQzgz8CkOG+JOuIMFk4FNSpPepBo6JxqemKl\/+ljTz+ElSeITiqcQaa94RZpeITQysmQTVSgWBneaopglD3iIyUj","pkt_caplen":309,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QfVAACoGVLs0IMQkwKgBBwG7z33SmoTYM5GVZIAQAEt1XgAAAQEICrabxcIfZLm7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1649{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":989,"pkt":"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","pkt_caplen":989,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":154,"pkt":"5JjWH70UgCqoTGHMCABFIACMQfdAACoGVGE0IMQkwKgBBwG7z33SmohzM5GWV4AYAE\/SkQAAAQEICrabxcUfZLm9FwMDAFOT18INhQ+iQOqqD1N1tEAl8lM2OzeUnmIoUkoyqfK36v8V68SxCq4q7xmiuD45rfh9ar4RF04LJ+4MXmY8mKYyZiBlFXiyPIQQxvMLH2jJ1bB6Xw==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0lnxAAEAG6lPAqAEHNCDEJM99AbszkZZX0pqIc4AQD\/Rg6QAAAQEICh9kufa2m8XF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XbdAAEAGIxnAqAEHNCDEJM99AbszkZZX0pqIy4AQD\/FglAAAAQEICh9kufa2m8XF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1484319033631,"flow_last_seen":1484319033631,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAVMpAAEAGIQjAqAEHNkXM8c9+AbvPvqpAAAAAALAC\/\/9MiwAAAgQFtAEDAwUBAQgKH2S67gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGi7Y2RczxwKgBBwG7z36\/HDHnz76qQaASRepQUQAAAgQFtAQCCAqFp1CVH2S67gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0\/p1AAEAGd0DAqAEHNkXM8c9+AbvPvqpBvxwx6IAQEBW0wwAAAQEICh9kux6Fp1CV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0709{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":295,"pkt":"gCqoTGHM5JjWH70UCABFAAEZsrxAAEAGwjzAqAEHNkXM8c9+AbvPvqpBvxwx6IAYEBWxNAAAAQEICh9kux+Fp1CVFgMBAOABAADcAwNYeOk5uUi+rD99Z+Le1911L3kiB9I95LIt9NFo8L\/pTgAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAjQAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":295,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1484319033631,"flow_last_seen":1484319033681,"flow_tot_l4_data_len":377,"flow_min_l4_data_len":32,"flow_max_l4_data_len":261,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0398{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0YUhAACoGKnY2RczxwKgBBwG7z36\/HDHoz76rJoAQAEvDmgAAAQEICoWnUKIfZLsf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":8,"flow_packet_id":6,"flow_first_seen":1484319033631,"flow_last_seen":1484319033734,"flow_tot_l4_data_len":1889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2349{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1250{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":8,"flow_packet_id":7,"flow_first_seen":1484319033631,"flow_last_seen":1484319033735,"flow_tot_l4_data_len":3369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}}
+0397{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XohAAEAGF1bAqAEHNkXM8c9+AbvPvqsmvxw9OIAQD9KoiAAAAQEICh9ku1mFp1Cj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":229,"pkt":"5JjWH70UgCqoTGHMCABFIADXYUtAACoGKdA2RczxwKgBBwG7z36\/HD04z76rJoAYAEvXUAAAAQEICoWnUKMfZLsfPfW2YX2vbjlxOohXB9pjApioj0MFWPkgylbPVopJi2M99iNi5v0RbA\/y7TYrm5QhXEafqimNc8QfQoOWaPTp31BovOhINh8oRPhqWOBpukxsIpfMO5Dqiy7NFbcGEY4HgWnqt0N+ZnxouIdTPZvSSGTqvkhGCC6kuH5gJK8YNUFzx9EAeYeUSBsNa7X1PBlg658Lfh\/1ZoIxYhYDAwAEDgAAAA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA066xAAEAGijHAqAEHNkXM8c9+AbvPvqsmvxw924AQD\/qntgAAAQEICh9ku2CFp1Cj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/pd1AAEAGz7XAqAEHNkXM8c9+AbvPvqsmvxw924AYEAAmcAAAAQEICh9ku2qFp1CjFgMDAEYQAABCQQTxvKv9AuPMhPk9lRSnUYSaj2Msx8bWXxgihe+9JeX1UPFuhiJt8R06FqXEhXzKHmTiLDQZGGFA1jFu1ltBSCZB","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6LwBAAEAGRtjAqAEHNkXM8c9+AbvPvqtxvxw924AYEACPSQAAAQEICh9ku2qFp1CjFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhrXJAAEAGyD7AqAEHNkXM8c9+AbvPvqt3vxw924AYEADSNQAAAQEICh9ku2qFp1CjFgMDACjKOK+sAtd5PswLjYlj+0P45JUuM6LBLH+Rog3b3ZnBWaXBB46ePIQI","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0YUxAACoGKnI2RczxwKgBBwG7z36\/HD3bz76rd4AQAEu2+AAAAQEICoWnULUfZLtq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnYU1AACoGKj42RczxwKgBBwG7z36\/HD3bz76rpIAYAEuv9AAAAQEICoWnULYfZLtqFAMDAAEBFgMDACi6l1EX3Ko6OWfaT4C9ii2vvBLKcrRK0ddk9SR7FN6ZjdgSgXISGx5h","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1484319033886,"flow_last_seen":1484319033886,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":130,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":130,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","src_port":53776,"dst_port":1900,"l4_proto":"udp"}
+0536{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWfwIAAAERiKvAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1484319033886,"flow_last_seen":1484319033886,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":130,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":130,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","src_port":53776,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1484319033943,"flow_last_seen":1484319033943,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAxzpAAEAGrpfAqAEHNkXM8c9\/Abtb3TwWAAAAALAC\/\/8tbQAAAgQFtAEDAwUBAQgKH2S8FwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGjLY2RczxwKgBBwG7z39IJeEpW908F6ASRer4mgAAAgQFtAQCCAqFp1DiH2S8FwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0N8lAAEAGPhXAqAEHNkXM8c9\/Abtb3TwXSCXhKoAQEBVdDAAAAQEICh9kvEiFp1Di","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZ8KEAAAERFwnAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319033,"pkt_len":295,"pkt":"gCqoTGHM5JjWH70UCABFAAEZ\/SBAAEAGd9jAqAEHNkXM8c9\/Abtb3TwXSCXhKoAYEBWh7QAAAQEICh9kvE+Fp1DiFgMBAOABAADcAwNYeOk6Kk2knMSNhioRrvxRb2utqcQBAlus3bTpE7nGoQAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAjQAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":295,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1484319033943,"flow_last_seen":1484319033997,"flow_tot_l4_data_len":377,"flow_min_l4_data_len":32,"flow_max_l4_data_len":261,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0399{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0scVAACkG2vg2RczxwKgBBwG7z39IJeEqW908\/IAQAEtr2wAAAQEICoWnUPEfZLxP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1484319033943,"flow_last_seen":1484319034048,"flow_tot_l4_data_len":1889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2352{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1251{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":10,"flow_packet_id":7,"flow_first_seen":1484319033943,"flow_last_seen":1484319034049,"flow_tot_l4_data_len":3369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}}
+0399{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0HxFAAEAGVs3AqAEHNkXM8c9\/Abtb3Tz8SCXseoAQD9JQzQAAAQEICh9kvIaFp1Dx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0626{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":229,"pkt":"5JjWH70UgCqoTGHMCABFIADXschAACkG2lI2RczxwKgBBwG7z39IJex6W908\/IAYAEsLpwAAAQEICoWnUPEfZLxPmnXETJshDEAvU93gvwU7pPnqa7afklAM\/zHsLlyWP4576BHwZqqmKgw2\/\/QWDPMLCSsX5r8zWJyIQQOv9lKJyJpZjaGWiQqQN\/0aABTiN4CVH1rY9eHcj\/UAtsnzQzCw+JhpdwgGj7Htpnn+7w7G34akyNiv1aUrg7Pr0+MckzcVXdcPXjOas4iPUQwbnbuEua6Q3jwYWaFF1hYDAwAEDgAAAA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA08MhAAEAGhRXAqAEHNkXM8c9\/Abtb3Tz8SCXtHYAQD\/pP+AAAAQEICh9kvJCFp1Dx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/5UJAAEAGkFDAqAEHNkXM8c9\/Abtb3Tz8SCXtHYAYEADMCQAAAQEICh9kvJmFp1DxFgMDAEYQAABCQQTLWxT\/OS9lE08F04jyALi8PNXq1Gnk3YsQzqlRUbPX6w5heKgjLFo26CQbChJSPIJfHr8z+T7Nuzf5Ehj4phqn","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6oJFAAEAG1UbAqAEHNkXM8c9\/Abtb3T1HSCXtHYAYEAA3jAAAAQEICh9kvJmFp1DxFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABh9aRAAEAGgAzAqAEHNkXM8c9\/Abtb3T1NSCXtHYAYEAB4AwAAAQEICh9kvJmFp1DxFgMDACil7XqCoyvwQFuspIPfflkSvCGtd57K5TeCdY4DBpvtbWoTPlxuXmcM","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0sclAACkG2vQ2RczxwKgBBwG7z39IJe0dW909eoAQAEtfDQAAAQEICoWnUQQfZLyZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnscpAACkG2sA2RczxwKgBBwG7z39IJe0dW909eoAYAEtipQAAAQEICoWnUQQfZLyZFAMDAAEBFgMDACh0uCX4sTM68KP8Mcj3yPDXgTDiuRLB7n2zyVaTM14hY69h9UvXcqAA","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1484319034890,"flow_last_seen":1484319034890,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","l4_proto":2}
+0398{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319034,"pkt_len":60,"pkt":"AQBef\/\/65JjWH70UCABGAAAgKLUAAAECSnnAqAEH7\/\/\/+pQEAAAWAPoE7\/\/\/+gAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1484319034890,"flow_last_seen":1484319034890,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1484319035004,"flow_last_seen":1484319035004,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp"}
+0443{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":97,"pkt":"gCqoTGHM5JjWH70UCABFAABT4P4AAP8RV0LAqAEHwKgBAcrtADUAP\/fHGiEBAAABAAAAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1484319035004,"flow_last_seen":1484319035004,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0612{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":225,"pkt":"5JjWH70UgCqoTGHMCABFAADT4UNAAEAR1X3AqAEBwKgBBwA1yu0AvyycGiGBgAABAAgAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAcAMAAEAAQAAADoABDRZJ4vADAABAAEAAAA6AAQ0KHEVwAwAAQABAAAAOgAENrvKVcAMAAEAAQAAADoABDQnzgXADAABAAEAAAA6AAQ2lKPwwAwAAQABAAAAOgAENrujrcAMAAEAAQAAADoABDQoEorADAABAAEAAAA6AAQ0KGy7","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1484319035004,"flow_last_seen":1484319035024,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":63,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.89.39.139"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1484319035079,"flow_last_seen":1484319035079,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAYJ9AAEAGvIXAqAEHNFkni8+MAbsc0sO0AAAAALAC\/\/+HyQAAAgQFtAEDAwUBAQgKH2TAbQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1484319035080,"flow_last_seen":1484319035080,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABASDpAAEAG1OrAqAEHNFkni8+NAbuZGBE+AAAAALAC\/\/+99wAAAgQFtAEDAwUBAQgKH2TAbgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGMwk0WSeLwKgBBwG7z4zl6UHQHNLDtaASReq0kAAAAgQFtAQCCAqtiMj8H2TAbQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0gZlAAEAGm5fAqAEHNFkni8+MAbsc0sO15elB0YAQEBUZAAAAAQEICh9kwKCtiMj8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGNAk0WSeLwKgBBwG7z40HBfk7mRgRP6ASReoSOAAAAgQFtAQCCAqtiMj8H2TAbgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0YNFAAEAGvF\/AqAEHNFkni8+NAbuZGBE\/BwX5PIAQEBV2pwAAAQEICh9kwKGtiMj8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEEsStAAEAGazXAqAEHNFkni8+MAbsc0sO15elB0YAYEBWGUAAAAQEICh9kwKOtiMj8FgMBAMsBAADHAwNYeOk76erORdznXBXvPSpQVtkmxHNGba3wUCSzaRztoSCumkX9HtWv\/974df5VzRYePKjb1+omhktiqBKmGEtDEQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1484319035079,"flow_last_seen":1484319035134,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0684{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEEDNVAAEAGD4zAqAEHNFkni8+NAbuZGBE\/BwX5PIAYEBWJrgAAAQEICh9kwKStiMj8FgMBAMsBAADHAwNYeOk7lPRrg34Uu\/Y+HzZqHJ9SINdd1V+d8fl0kU8rKiCumkX9HtWv\/974df5VzRYePKjb1+omhktiqBKmGEtDEQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1484319035080,"flow_last_seen":1484319035136,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0398{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0iNlAACoGqjc0WSeLwKgBBwG7z4zl6UHRHNLEhYAQAEsn6gAAAQEICq2IyQkfZMCj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1484319035079,"flow_last_seen":1484319035185,"flow_tot_l4_data_len":1868,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":311,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2351{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1278{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":13,"flow_packet_id":7,"flow_first_seen":1484319035079,"flow_last_seen":1484319035186,"flow_tot_l4_data_len":3348,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}}
+0398{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0pq1AAEAGdoPAqAEHNFkni8+MAbsc0sSF5elNIYAQD9IM4AAAAQEICh9kwNWtiMkK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0MDRAACkGA900WSeLwKgBBwG7z40HBfk8mRgSD4AQAEuFjwAAAQEICq2IyQsfZMCk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1484319035080,"flow_last_seen":1484319035200,"flow_tot_l4_data_len":1868,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":311,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2352{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1278{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":14,"flow_packet_id":7,"flow_first_seen":1484319035080,"flow_last_seen":1484319035215,"flow_tot_l4_data_len":3348,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}}
+0398{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0t9hAAEAGZVjAqAEHNFkni8+NAbuZGBIPBwYEjIAQD9JqbAAAAQEICh9kwPCtiMkL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":259,"pkt":"5JjWH70UgCqoTGHMCABFIAD1iNxAACoGqXM0WSeLwKgBBwG7z4zl6U0hHNLEhYAYAEvuqgAAAQEICq2IyQofZMCjpHl4RyQIVLjCE9+5SS7Az0ywQuNw+kAlnFo\/y8e7JW\/QvlkCHK00vYcxf+RdDNW2KR237l7JqlRXjqTmoRt3dOXcFn0rQsGXaPxX2o8ksdV+k3a46A5gwfkE6tUOZ8N04lUrusPBOV29jMwIvliW3kDLXxMaD9Ezv3O4MvjtOJZZcUrIPjvWe1NbVGya+AS8Izn\/OZhdDFkc5nSg9Cr7mG3sOwdjrLfLxKrenm2u\/PBE5F9BNuMdMBYDAwAEDgAAAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0H0hAAEAG\/ejAqAEHNFkni8+MAbsc0sSF5elN4oAQD\/kLzwAAAQEICh9kwP6tiMkK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":259,"pkt":"5JjWH70UgCqoTGHMCABFIAD1MDdAACkGAxk0WSeLwKgBBwG7z40HBgSMmRgSD4AYAEuRcQAAAQEICq2IyQsfZMCkKnBmOpVeoIUTkqp16uNezKIHhMqbg2QP6ioDarGOey+1CfRjWaCkkWiObuc\/hu7T37OjLTm2S47SidRjvqEEsdHZw1jh2M99\/8BML+AkwuULORxCGcPebPFihoi\/Gpkil9MGmitvVEL\/TINtayk\/wvMglRbbmodUav+HC2g0\/wsXQKMf6ULcCO9d2HJcbSUJ2YolxQdSI8Z3baGhWS3ZatQznnJ1wkIXSoy8sMTYRgOd6rywucFWlhYDAwAEDgAAAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0yK5AAEAGVILAqAEHNFkni8+NAbuZGBIPBwYFTYAQD\/lpdAAAAQEICh9kwQCtiMkL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/UoxAAEAGylnAqAEHNFkni8+MAbsc0sSF5elN4oAYEAC6nQAAAQEICh9kwQqtiMkKFgMDAEYQAABCQQQ8EFMiYQukZ8MpPG3pdr9Y0Oc6Pzj8ePm+FPrmy5rC54LjahT0AwLaolHR\/3KJF6r9KJnuo8a2v+nJbmxYU7CB","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6polAAEAGdqHAqAEHNFkni8+MAbsc0sTQ5elN4oAYEADzXgAAAQEICh9kwQqtiMkKFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhpZZAAEAGd23AqAEHNFkni8+MAbsc0sTW5elN4oAYEAD8UwAAAQEICh9kwQqtiMkKFgMDACjxXYpqoMvITpEuTsTwi0vXUz7UcsUMsRsBFdONtt\/qU2h\/YQLS3y2D","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/6D9AAEAGNKbAqAEHNFkni8+NAbuZGBIPBwYFTYAYEACn9AAAAQEICh9kwQ+tiMkLFgMDAEYQAABCQQQqmITQXCwI9mnzrXHKN2Vc7n5ATGHT7iay8AbJ1vHmCJpge77M3bUjbizLwD9QOanpfFnTANE1uGFlFI4oSA4B","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6eTNAAEAGo\/fAqAEHNFkni8+NAbuZGBJaBwYFTYAYEABRAQAAAQEICh9kwQ+tiMkLFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhDM1AAEAGEDfAqAEHNFkni8+NAbuZGBJgBwYFTYAYEADmWAAAAQEICh9kwQ+tiMkLFgMDAChNkegiU+wzjXFCwiHptIQpYy97s96n1DNfAqBugwA8dYlpkScMkqYI","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0iN1AACoGqjM0WSeLwKgBBwG7z4zl6U3iHNLE1oAQAEsbBwAAAQEICq2IySMfZMEK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABniN5AACoGqf80WSeLwKgBBwG7z4zl6U3iHNLFA4AYAEsiiwAAAQEICq2IySUfZMEKFAMDAAEBFgMDACgcPKaKyM4YHqGE1yRMvxcCa5MlFd2+8SOlHOEEihc6JV3bqeLV8ALo","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0MDhAACkGA9k0WSeLwKgBBwG7z40HBgVNmRgSjYAQAEt4egAAAQEICq2IySYfZMEP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnMDlAACkGA6U0WSeLwKgBBwG7z40HBgVNmRgSjYAYAEsbIwAAAQEICq2IySYfZMEPFAMDAAEBFgMDACjXcdBjHjrlGCc6r1xIjnyS4caTVVboDwxir24skvpSSyvvSwA\/aYaY","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1484319035342,"flow_last_seen":1484319035342,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA3CdAAEAGQP3AqAEHNFkni8+OAbvRf5R9AAAAALAC\/\/8BVgAAAgQFtAEDAwUBAQgKH2TBaAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGMwk0WSeLwKgBBwG7z47YAyXj0X+UfqASRepXrQAAAgQFtAQCCAqtiMk\/H2TBaAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0+2BAAEAGIdDAqAEHNFkni8+OAbvRf5R+2AMl5IAQEBW8GgAAAQEICh9kwZ2tiMk\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEE6LNAAEAGM63AqAEHNFkni8+OAbvRf5R+2AMl5IAYEBVXjgAAAQEICh9kwZ6tiMk\/FgMBAMsBAADHAwNYeOk7vNJQcIWTHxOYmxRdvE73iLawThqSAEUf4RBG+yAlPalSNkR1ua99akikzzyiXtlC5nVNfalnaleVK1UZuQAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1484319035342,"flow_last_seen":1484319035401,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0398{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA07K5AACoGRmI0WSeLwKgBBwG7z47YAyXk0X+VToAQAEvLBgAAAQEICq2IyUwfZMGe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":211,"pkt":"5JjWH70UgCqoTGHMCABFIADF7K9AACoGRdA0WSeLwKgBBwG7z47YAyXk0X+VToAYAEvNewAAAQEICq2IyUwfZMGeFgMDAFkCAABVAwNYeOk7VOwhhyggLAhJQBWvhk928q9X9VIa7uiiqr7qKSAlPalSNkR1ua99akikzzyiXtlC5nVNfalnaleVK1UZucAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoXcXoBY4K7rZHdaYvqMg+AqvzJCzgfFm2CZObQbNJ5Ejc26h63\/gPSw==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1484319035342,"flow_last_seen":1484319035449,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0398{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wUpAAEAGW+bAqAEHNFkni8+OAbvRf5VO2AMmdYAQEBG6fwAAAQEICh9kwc6tiMlM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6lW5AAEAGh7zAqAEHNFkni8+OAbvRf5VO2AMmdYAYEBGibAAAAQEICh9kwc+tiMlMFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhncZAAEAGfz3AqAEHNFkni8+OAbvRf5VU2AMmdYAYEBEMGQAAAQEICh9kwdCtiMlMFgMDACiAf4y\/CJrVzrosMHqlvlV0KXoJV02FkcvwiFl0B54Nhk4JLJ6FG+Pk","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":1514,"pkt":"gCqoTGHM5JjWH70UCABFAAXc0MxAAEAGRrzAqAEHNFkni8+OAbvRf5WB2AMmdYAQEBHiwAAAAQEICh9kwdGtiMlMFwMDCTiAf4y\/CJrVz7fAcrCvbGeN0M9GBwk3I1jH6CitoNkfEr4tsK\/JTDRzCNs6LD0MIQH7h28Ohal\/+SiyT+88VBc1LbdyZelfqym8XRrLBiT\/7hNwjwuIoTmtkXC4cIjEoOaH0Q0XdUepXVSeADvBsW6JvZEM7lVkbaO4esE7wEF4borDoeEE5jRIkPN64BOHJ\/aIMx0AxrNYzilHjVS34sIGoAwjz8kd\/3v8l6FSRwi8yttJb3nsg7CkZCHjO+tB+N9JyTdbX0qqmGBg1a2CI3\/0uqIXcXKEcNq2ElIJNszBL\/oozpaIqtAveY+SOpneVUlMKF1B5wCMJAkAfAHMIY3rKqAcVoS+wWZ55KnkXjZM7excfpTMzqgqXhivjc6UOo2n5UhGj8VXI962+5EPKNgMo3X17krliPOxHfdIV40UikT2odx5ui2zBOWU0xETdAPkw++lSq5w6X2kIRRClfRmMxcvg\/m8qgQs2jMuklHcooVGb4SkbqU45N\/MaJ2wrEJ2k4FKPSXRgJlRABC5r5DLYPxW0orK0LJp2c4gpTRxIvGo6L98EFn6Gmsks877MTQhIAWZic5OPMhAr\/qAIPxPjveoMzBcwY+BOUQQ+nYwNOy3rLggwAByJb99YTVCxCb3rAePkLpUv64fNeVRPjXGiu8WP5GHe1SIBuFJBxtEaSXYmrrj4Q52XXqPFTHoklq0p4NoSlJwW\/NghyXbhcA2bS+eR8QrCJJCDLN6DytBd9VwlRznHe+ecYVKf4LRDWwamd+V\/j61nC+lxYR08acQGQV9cQu73JlPh+baQdxh+SoXC5CiFQizS+\/9wYUumXty1Ayq\/4ePLJA77RxtG+NsV9Nw7beYLkhXKW1jSwHXe31ygbCNyQPW39PG6kyRdcqLLC9t3xXMCGipbXdikV0Y7e022\/4IPzLhVslVaRu8suNYfH7y968mqv4YQZpA9L1N9gTpE04zevUEQZhD\/7pHw9BYSEX7ErPXE7+u5x3h0uTW\/4Labwt+mqnyLFtpClu6ewgD+YbqOdDC2rFaYXtasIh6iV5W1LNMlvn199NXOaJCKAFDtBAnIfkoIvpEDdL8aF75BS\/5bzK0Uv3zVVueItIYT6YIDi8RRNqh8y8FRyHuqhpqJh9IjaXnIR82QKW++UTGBw9K7ad8+sKZUEcmbSJTQEh2EBnT997T5wN\/d\/twfTTYvp3FAqqILQKHovyHVlCmk+bvipitL41scGBRV9cN5trCblpe4R+DStQrME7RR4G1MUy\/r\/JVE1elyaKclo+qYvreRzxLrzs1uL2XLFaC8XB61y1DT1TwYjrHWAidsXIW6FpuMsxxcJ3DdGCpMH\/WO27ezvdYjT6mAlyKuTIf2F7A9mg2LxdqfZ51AhhsWGhvH8CiIZ7KXjyB+2gJwIAgp9OspJV5Ph6o5X\/gC11SqAm3ZCbgX6oOy1I6o0O2CSRRIiZDJWRmqjRjVrlDFR+DJvqCaxyAvvhVS7ZfVa8PGV\/SBb7DmJJduyZ97MIj5i6RR\/9G7dAdh5BLt5R1tkcgjFnCYm\/cwkwSeNUAFmDq6kZmceHK1hHtAhRh1g6gJqfAiN3tn1IKwa3+lERWQ6ViYuQtByCMeI3jto7xcR\/H+szt6MQV0LDiOvLJr18UhFbKeHZ1EsofOHj5nWAV\/OgTFm8aO05KZ5inQ4moMj3PcECpPM2c5UmcO1ncM25z24nf7enj\/a0ffAM9uI0ZXTPjoYchw+BY2LBC2JOQnIhyGS\/mle9fmbQGybIw5LJTdr9YTx5PlbcmvdmU\/XfRNEZ72qlRTC3VEE3I4z16TkJMTROLH9lAt3prKRXj7Bsp2YbTWPPmuEFbWjantK1HCCIZkdzuJDKpqK3Oqzribp0u1nSrstgEayHXB9AkbbJDykuwGW8eSv28SzhdQQkCrzU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1644{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":983,"pkt":"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","pkt_caplen":983,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA07LBAACoGRmA0WSeLwKgBBwG7z47YAyZ10X+VgYAQAEvKBQAAAQEICq2IyVgfZMHP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA07LFAACoGRl80WSeLwKgBBwG7z47YAyZ10X+evoAQAGHAqwAAAQEICq2IyV0fZMHR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2369{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXc7LJAACoGQLY0WSeLwKgBBwG7z47YAyZ10X+evoAQAGHRHwAAAQEICq2IyXAfZMHRFwMDCAFdxegFjgrut6eNnpF0cJLnEJRdkwBZNn5oiePn5TUvy36YZo6Fq361b8pOTPVUbfI\/T6sQiUItJKJYrpV\/NG8qYw+WD27sWFldLzp5w7Y+++tbMV37ogijqowzjx4W+\/XS+THyoU9vtOx2\/A2Fusgw\/ediOdDpbXuhDVqvWbB4Fd3J\/Mc3MZmiRhRes6I9rBLX8wLlZVwZ7G4vzGWcsnXXJsskZEcmZJYcFlmFq2SaUJO+Dzd+iQRgETkHMrkvqiw7iNf8T+mkg4RfZGeXIGeooilA0u5HUk8DEhEH8wAOFTTa+r\/JlYNZIhHEWqfGwGe5xpfShO1EJkHu8Sgty0PMoqkLRBgqJff5HzyGPmdQm9vBVN8cWzJga63MNJC2+vSq55ncki\/IewT2n9JL9NOP83XDywN0lu82AB3+fo2pz2ELXJGAp6E35ht3tXUnI\/y2jdm80JkITbeKw\/xoOHFE2l2FrnQ3R8FRqrPc3M54RvcmnWIRJgNsDNkqKiT5831Ud7NmEq1P2+Dezr5QNLDgeOhoziCLNIzt8jmd+H06FfHeF4QIFU15k0\/BvJiCtW\/jfyjTSL91y\/+J4ijSLwhmeBpjJO6Tet18R2x7BsBwL\/x3qBn0nEzs6mWzLwOajFAHTE+L\/gJkTK6qnwLd+hFSMPcx\/koAzMrYO2IY3\/mJatbJoTKxJb0PWJrya37oMkAC3q3tZLE2y4vQngns\/a4LVGeGn4p8pW\/LJ7fEKIluHUFx3qYurudABaIzuhU0AWlDOMtX9glixMsTF8gg\/PvX\/NPgZM7CFP+ZiQbXv82QVCovYjjL73gLaDaKYmYQHP40Q0+P+wtl393+spKcFd8rOu0g0pvMWNAp\/N8XDNlFCGzdsdHQZB8az5YRNXykwlGad\/EKn4A5q9oHDo45SZE8QnWB2yvtaB6t6tHnh61DprzduCavNtJ+aE8e3TQ5BnAXU6gOM5WsolnvRRyo7k3Sau29ob7Yi+BU2kpfyDfizL9HLlAC3z41932xJG3sb5Yv1lDZDdOPo1hQrC+piB1ZU+C2vfJwA7oF2EzTVDQ3NGDR5zi9RbC4+eCCOIGDYU3XuNuVznYE3PfgiXFcoMmQETEzBMBXk6MQW5KMD8HwY\/aMDyod7wiS1ntumDV7peT0T4udg6wrERYR5102afDIToD8bhhvaEMZMkcVx85RCp3iksewOCmQDFQhBTX4n7dq98BqshjRrbMsi+Kx81RgwNRQ9q3Ug9kJSw7zasKvEif2brITVpohy\/tqzEb7DnZ3vE24MGAlfC0Vl2brupws9RTBInHYnk7RBAuSF8j3HzFJ6nNGYH\/WVKEdgmjnqlRchH7EvW6beTsQiRQlREy1QeT7bc\/ZH7S0++vqk1i7YJ+86dHZobkM4q0Q8zrl2JTOjFa6mBGHiOFa9\/Goz9Gu5RtTa5I++qA536kepkK\/3LRh0+YcuoKKEVd7ob\/GXu3IiTy19RoOZvLy92\/ZW4mPPjaMn6IUiccTMtCl6ecrutA\/zSeVhd3BvU+a7XQX2fywgjKbEr6pOdixwQ85exnrgTMZT+Uuuoo9bDmE9owKBCpq9A7s4m4+GgLxVf6Kyy0rIAPLPiKaR4fyRS4t6hYnZvoLNN7GEJ9Xc9MruHK+C4GGxbTZc2HFtOcB0kuZGa+JNL3on3QHy6\/nagMhfn9VH3Rs6Q8bs1ddWQHGyFEo1jnQVOf2pRynv5Ori2iBIjykBGUozGQn8h1XF6BTVExDSkAhsgS4l2lKcQuczKNXWDjoYRic0sq6v11WtGT+ZDgbnNbBwFOKkw+q2Jc893Cgn6xoVEHb+cbv5Lh8iUIKn1vQ2kR4LQ0yCQOk9otBtW4Mo6z2UZ1RoP4ojsfmxXOgWRpvNZ0oZ+6hYMOC9ufBPaquKC6W\/ifiRE7agFmmLxxNARw=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1219{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":672,"pkt":"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","pkt_caplen":672,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACW0KMAAAERNwrAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319035,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZwp8AAAERRQvAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1484319036827,"flow_last_seen":1484319036827,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp"}
+0426{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":85,"pkt":"gCqoTGHM5JjWH70UCABFAABHX6YAAP8R2KbAqAEHwKgBAeF3ADUAM2aFMVgBAAABAAAAAAAABHNoYTIDc2FuBGFrYW0HbmZseGltZwNuZXQAAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1484319036827,"flow_last_seen":1484319036827,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"sha2.san.akam.nflximg.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0496{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":137,"pkt":"5JjWH70UgCqoTGHMCABFAAB74URAAEAR1dTAqAEBwKgBBwA14XcAZ3RRMViBgAABAAIAAAAABHNoYTIDc2FuBGFrYW0HbmZseGltZwNuZXQAAAEAAcAMAAUAAQAAACAAGAVlMzA2NwRkc2NnCmFrYW1haWVkZ2XAIsA3AAEAAQAAABIABGhWYbM=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1484319036827,"flow_last_seen":1484319036847,"flow_tot_l4_data_len":154,"flow_min_l4_data_len":51,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"sha2.san.akam.nflximg.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.86.97.179"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1484319036854,"flow_last_seen":1484319036854,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAqeJAAEAGBR3AqAEHaFZhs8+VAbsXO1WDAAAAALAC\/\/+GqQAAAgQFtAEDAwUBAQgKH2THJwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwGsuNoVmGzwKgBBwG7z5WR\/xaXFztVhKAScSAP4QAAAgQFtAQCCAoCM2vSH2THJwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0UCJAAEAGXunAqAEHaFZhs8+VAbsXO1WEkf8WmIAQEBWfqAAAAQEICh9kxzUCM2vS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0705{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":293,"pkt":"gCqoTGHM5JjWH70UCABFAAEXqU5AAEAGBNrAqAEHaFZhs8+VAbsXO1WEkf8WmIAYEBU64wAAAQEICh9kxzYCM2vSFgMBAN4BAADaAwNYeOk8NZkQnOsfGkUHC3oH4Rk0tFCgXSVuPClH26lOAAAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAiwAAABYAFAAAEWFydC1zLm5mbHhpbWcubmV0AAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAzN0AAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAUABQEAAAAAABIAAAAXAAA=","pkt_caplen":293,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1484319036854,"flow_last_seen":1484319036870,"flow_tot_l4_data_len":375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":259,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"art-s.nflximg.net","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0399{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0fX9AADwGNWxoVmGzwKgBBwG7z5WR\/xaYFztWZ4AQA6urGQAAAQEICgIza+cfZMc2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1484319036854,"flow_last_seen":1484319036889,"flow_tot_l4_data_len":1887,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"art-s.nflximg.net","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"ef6b224ce027c8e21e5a25d8a58255a3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2353{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0EvZAAEAGnBXAqAEHaFZhs8+VAbsXO1Znkf8h6IAQD9KTjgAAAQEICh9kx0kCM2vo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1104{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+1249{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":17,"flow_packet_id":9,"flow_first_seen":1484319036854,"flow_last_seen":1484319036900,"flow_tot_l4_data_len":3949,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":438,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"art-s.nflximg.net","server_names":"secure.cdn.nflximg.net,*.nflxext.com,*.nflxvideo.net,*.nflxsearch.net,*.nrd.nflximg.net,*.nflximg.net","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"ef6b224ce027c8e21e5a25d8a58255a3","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=Los Gatos, O=Netflix, Inc., OU=Content Delivery Operations, CN=secure.cdn.nflximg.net","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"0D:EF:D1:E6:29:11:1A:A5:88:B3:2F:04:65:D6:D7:AD:84:A2:52:26"}}
+0399{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA08BhAAEAGvvLAqAEHaFZhs8+VAbsXO1Znkf8j7oAQD++RYQAAAQEICh9kx1MCM2vo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/lQxAAEAGGbTAqAEHaFZhs8+VAbsXO1Znkf8j7oAYEABdYgAAAQEICh9kx2MCM2voFgMDAEYQAABCQQTUvej9xPWAD5BXDcd9Mm2jsAGMbgejFJsN9p9SRBtz8CmGw\/91ArywvHmIz5\/rwrA9y5wqrVuat\/5bLEDL4w0u","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6JLxAAEAGiknAqAEHaFZhs8+VAbsXO1aykf8j7oAYEAB44wAAAQEICh9kx2MCM2voFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABh\/9NAAEAGrwrAqAEHaFZhs8+VAbsXO1a4kf8j7oAYEAAD7AAAAQEICh9kx2MCM2voFgMDACjAQqP23DwVF4rKq5GugoI3GDRpXntYY6fq6aEsk7B4O65xPiL6OS9F","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0fYNAADwGNWhoVmGzwKgBBwG7z5WR\/yPuFztWuIAQA6udGQAAAQEICgIzbBMfZMdj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319036,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnfYRAADwGNTRoVmGzwKgBBwG7z5WR\/yPuFztW5YAYA6s44wAAAQEICgIzbBgfZMdjFAMDAAEBFgMDACjyM2bDQD2Z0vThgAgGpgbayHThFoX32sxQ35gfbLBsT7pRAXXiHaJl","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319037,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWcF0AAAERl1DAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319038,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZdekAAAERkcHAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1484319042988,"flow_last_seen":1484319042988,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319042,"pkt_len":84,"pkt":"gCqoTGHM5JjWH70UCABFAABGkh4AAP8Rpi\/AqAEHwKgBAecsADUAMtLh8roBAAABAAAAAAAAB2FydHdvcmsEYWthbQduZmx4aW1nA25ldAAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1484319042988,"flow_last_seen":1484319042988,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"artwork.akam.nflximg.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0512{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":148,"pkt":"5JjWH70UgCqoTGHMCABFAACG4UVAAEAR1cjAqAEBwKgBBwA15ywAct6B8rqBgAABAAMAAAAAB2FydHdvcmsEYWthbQduZmx4aW1nA25ldAAAAQABwAwABQABAAAAUwAUBWExOTA3BGRzY2cGYWthbWFpwCHANgABAAEAAAAHAAS4GcwZwDYAAQABAAAABwAEuBnMCg==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1484319042988,"flow_last_seen":1484319043002,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":50,"flow_max_l4_data_len":114,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"artwork.akam.nflximg.net","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.204.25"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1484319043012,"flow_last_seen":1484319043012,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53148,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA10xAAEAGHYnAqAEHuBnMGc+cAFC2IFmCAAAAALAC\/\/8TjwAAAgQFtAEDAwUBAQgKH2TelwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1484319043013,"flow_last_seen":1484319043013,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53149,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAkrpAAEAGYhvAqAEHuBnMGc+dAFDU44WRAAAAALAC\/\/\/IugAAAgQFtAEDAwUBAQgKH2TemAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lm4GcwZwKgBBwBQz5xwDCo3tiBZg6AScSDeBAAAAgQFtAQCCAr\/\/DsdH2TelwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lm4GcwZwKgBBwBQz53Qk2dE1OOFkqAScSD1lgAAAgQFtAQCCAr\/\/DsiH2TemAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0zhNAAEAGJs7AqAEHuBnMGc+cAFC2IFmDcAwqOIAQEBVtuwAAAQEICh9k3rb\/\/Dsd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0UPZAAEAGo+vAqAEHuBnMGc+dAFDU44WS0JNnRYAQEBWFTgAAAQEICh9k3rb\/\/Dsi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":312,"pkt":"gCqoTGHM5JjWH70UCABFAAEq43RAAEAGEHfAqAEHuBnMGc+cAFC2IFmDcAwqOIAYEBUNzAAAAQEICh9k3rv\/\/DsdR0VUIC9hZjdhNS8zNjI2NDM0MjRlNzc1ZDAzOTNkZGI0NmUxNDVjMjM3NTM2N2FmN2E1LndlYnAgSFRUUC8xLjENCkhvc3Q6IGFydC0yLm5mbHhpbWcubmV0DQpBY2NlcHQ6ICovKg0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUztxPTENCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogQXJnby85LjEuMCAoaVBob25lOyBpT1MgMTAuMjsgU2NhbGUvMi4wMCkNCg0K","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1484319043012,"flow_last_seen":1484319043068,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53148,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"art-2.nflximg.net","url":"art-2.nflximg.net\/af7a5\/362643424e775d0393ddb46e145c2375367af7a5.webp","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}}
+0731{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":311,"pkt":"gCqoTGHM5JjWH70UCABFAAEp\/qdAAEAG9UTAqAEHuBnMGc+dAFDU44WS0JNnRYAYEBWe1gAAAQEICh9k3rz\/\/DsiR0VUIC81NzU4Yy9iYjYzNmU0NGI4N2VmODU0YzMzMWVkN2I3YjZlMTU3ZTQ5NDU3NThjLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTIubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1484319043013,"flow_last_seen":1484319043078,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53149,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"art-2.nflximg.net","url":"art-2.nflximg.net\/5758c\/bb636e44b87ef854c331ed7b7b6e157e4945758c.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}}
+0399{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0EWZAADwG51u4GcwZwKgBBwBQz5xwDCo4tiBaeYAQA6t46QAAAQEICv\/8O14fZN67","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2382{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0XCxAADwGnJW4GcwZwKgBBwBQz53Qk2dF1OOGh4AQA6uQdgAAAQEICv\/8O2kfZN68","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2385{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0AVlAAEAG84jAqAEHuBnMGc+cAFC2IFp5cAw1iIAQD9JhOQAAAQEICh9k3vP\/\/Dtf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0dEdAAEAGgJrAqAEHuBnMGc+cAFC2IFp5cAw7MIAQEABbOgAAAQEICh9k3xz\/\/Dtf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XcVAAEAGlxzAqAEHuBnMGc+dAFDU44aH0JNylYAQD9J4iwAAAQEICh9k3x7\/\/Dt7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qGZAAEAGTHvAqAEHuBnMGc+dAFDU44aH0JN4PYAQEABylgAAAQEICh9k3z3\/\/Dt7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcEWtAADwG4a64GcwZwKgBBwBQz5xwDEDYtiBaeYAQA6vDHwAAAQEICv\/8O18fZN67\/EJbUphhCncr3mFyfZ+1YUVmhYm6KiwFNdZNZzswQGHCB5js8gYWpoO5QUi5hDElu2sRB3iHf+ddJF4pWR66HccHOLu00nil+vzf\/uUXBwh\/6\/jUodj6y8M+xK+y7\/IBP6Jg5VlFj1fq8NdLOSpS+KeKlJZs98VlME07PV4lZl2cr3ZsEd7Fw5UlKwFzQ1F1tod53v4n\/xeFyfVHrxtWdKLA7jsshyKTrsdggK11d4PJ\/Ci2mBAv9tAPCsbkUOohtvBmYtGOnwThH2NTNYoT3s10pL2yxytRXp6PnQ4nx5\/JcRA+cLxYu8c0tPBKjjfNI\/yIxztqpMI\/1HD8VihNCgr\/jBSUJIcTjFvbXf+MeR+OV39DeJ+12oyFgjnVZD1nhDm24nSLRmFy5z4lsCD5qdNLhcWgsjPWBBP2Zl1fYFBlB9yTwmQEO7sWCuZEmSuL4e2WHyUqV3hVH9rIwwdYSURDK\/FKPJ3cGK7hgY8dn6336oJXqroMPLTwI7rfdRe8UrK5ZbaFNyl8CjtddwXmvT9lUYB3srukLmCyOLMV5jn9g3ttFKbWratLxYJqfYcTFgQ7fbf2MEDK26+rBgZFcaYNJiR+tI4wORyKMME7vCSiQeCVyr6PdxY+wN4n3U3ileqerpsQB+FDx0H4Wwez0thvBrxS2TMSTvgB2XdpUeGV7Mtm9Bg+K+kg9usec65QZU3k4H3kbuOsgUF5u1j3mGOmv\/yEX6TC1Lo9nKRgQZ7uxmcsB9XfLk4AA2SHid9LmBNN3XAXk0F6vcdZEYyp9rlMfbwjfrQueK2G\/CjvCR9gPa7zBq9EVxZDauNwfOr4cLNV1ajw+nLge\/yIuVFg5wNeyVvGInxeHkc0tBJzLmo9IuB4F7ODxLkNMKf629VOMMfJQ0hljen1qU6VsR5zo2QosRhkkw0UWjBgpclQwaBXF+n6DJNhh4E3NDAnRXltNzbesfuivuH12BSaOYQP8O\/jy4BXY3mT3CZ82brbd88Kr8VFOwl+ZIVrGgeFV+PxGm3xea3tus+kwpwPt5r7nPAuy09sDArGlCgr7XDMsHX3M8tagek1DTAFliM79KxBYDHI24klnGDAuV\/lNxj084m2DJNB\/toRvYQ50ZaVdAhvtoMo7gu8rm6D7eADrChwVCvxajgVXoB3E9xt2hR4JbuyHUIXP+K7VZvjV93xFmp8Xv6wKQvM+\/BcRD7eaW+iVsOgzG4qwAyTv0qTOscU+1BiLEhJilpiOajLyd3AiHcX5Q0M9uvJ2mNCkj1dYbK\/1o6Pt5OXutSOeH07YsfwAd5m1eRS4VX7VG1dvJtKuAqrAa9kflKey\/Aj5251q\/FK6epcJBY+r\/2YZh3mvfle7By807sPLh0MyueD\/4gZ5uk+YrcRU2zDqGBBvtt3zwrLQZyufgwDpMM0vA0w5vG4atfHdND2bniCyfq52zp4O8VbVuJXw+3E7vAR4X10HfBK9tVt2Np4d\/ljhUEovJLHk7PFjxgPUu\/a49VwuTEfn5f7sUuNwJyLpipUyvEutsKNcx5gTOnufAsSzC5Z4U53GabZhtaC5Ui7u7TOsBhUX5Vd7MKAFQa26CWM+e3\/O+UzTAUxL1m1BQzK8thvLbxjp4dnvFK6zc62jw+g5NE7CLwayqIln+Hd1kNan\/Ar8f05CfEjHsQ+VRKv6v+4bN+wrrtbN5lwnHl3ybnnEN5l+XFEpYQxJaq8ChzMLvfWj8lhxDR7t9KwHFnROioGLAZRXIXtcxhwd2FdSAVj4na1Y0aYCnLjwKkGmFNDcRn\/YDxLzF2tmwyvVJN30iG83\/LDCLXEq\/ZSOjbez7y7OK\/wSg5V1sU2fuSkyVDjV92h2f6TUODLBDlqofDRzm5VNMhUWkhFmG7SqK9NZOGd7ipAB4OyKQdYhNl1dxu7h3ElhQQhiTgjmNKhElg=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0GGtAAEAG3HbAqAEHuBnMGc+cAFC2IFp5cAxGgIAQD9JP7wAAAQEICh9k30X\/\/Dtf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0IeJAAEAG0v\/AqAEHuBnMGc+dAFDU44aH0JODjYAQD9JnSAAAAQEICh9k32n\/\/Dt7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcEW5AADwG4au4GcwZwKgBBwBQz5xwDFHQtiBaeYAQA6sSRgAAAQEICv\/8O18fZN67mE\/y01VYDTCtymvZRhyfojYfyNPuwliF2bHHGgFzom80Cwjz796HWQuD4qLtDaaDwjX1MDmUjbRAWBTW1\/W1hUF1PVHKMHveg3cWMCgOV3+H+VRffyeeBwXjf9XOF4bPURt25Gl3YazCt5shEwrmmlvjeBYWgLv18wEGx9PFSzAdtE7FGSbryxDbUFgQZIUb9zrCoDif7DvMHkV7+zQSzPWHW7zCXJIV7nfNVcGwGsvna6zxSapgIG8OF8Iq1m7TnGGyPA0xYf4ZjwKeCxhToirrwMVkkJVumhMMqvIgdhyLwl0nsm8lDI6Xk7vC3JEVptZFwmB3ySIfc0mbe19ce5iWh+fB2dr4JNKwI800IIRVaLdqS5gsn9UWC8Dd+GM7KBgb80w5AcdUkPY367qBQZEdxB1hUfj7pKoVzCld57XrYO7sQDtyVDAmRVkPoYV5JO3f6TEfFcwqXT0f3ZQTPgeVzQfSdBoXwiLMi4OqhTklbxe+wwII7\/yyUzA3nq\/2ihGmgrlxaA8K5kRTaLIJi8K9CzIBg7LIlOMyzF107xQtDA7XkgUWYR5ZnG6CcwfTY3bNur2Fz+LSsCPLhlJUwhpWlPCxGGFM9UXduwEWQPTVP0gYlE\/XUGM6+G7bXWEyPwnfwcIIds5FwOB4vjlrRpi7zRfrScBg91REK8JMetudLxsJ083x1Nse4bNQEQxkzWEohEWczXoohYIxVZ0H7jDMP60frFzBYHfMExfTYT9u8hsMqsuzumdYFNwLNAoJg+J49VeYO7KTLc4w2T4XaxfzyKzkMclHmJZD\/lSuGD5RDQxkWTcqWMW6X5cNTN7OtMYCcGOP90LBmKirXoUc0+Fs4qqBQZmf2BbLwo0D9CNMdudb7GPueBDqsYfJ8tSsLcyjFaQPXi5heqgvBxERPg+X8IksnU6BVdyH+NLDoLyc3R0WQLS38kHBXJ\/f7JATpoLgR249wOBQ5jzCsgj2TgGTsq0bEVmYOfJjWwwwOFRaMIdhHsPHZGhgPv+l8lx8IqqFbSBLpzMW4W4Y8EzAmJJdXrgRFkC8Z1eYHM5F4GM6eBTS2EkYU33ZS9fGslh94d9hcsg1+TZh5ijZypuCwebQBjEjzOPuPwd\/FjAunv+le2T4PISNyTqy5kDDIs46Fu2gYEwNRdP7FhZAckcHmOwP9drFdLi7pM6kgjGZ35TvMCwJZiUpzopgbjjnfozZo3QrTjDZHNqVjXl016tQNAqmm0teuTY+EwuHBrLmQMMibho1HQzKppAcC4DbsR4LmFOiuvUbG9Ph3YdFA4PqerLWWBZ2GLhDB5PDc77yMH\/buzGHyfbQbjjmMf1P7rmSMH741\/GLQ\/hMpRaYI2vu1LCIu\/euIwzKW+msMP\/krFzeDDA3tpVWIcN0BHfBdYDJ48FZY1GQt7bHHgaVaK7NxsbMkRUGfjvAnByrXK0Z5tB27rT6rmC6bw9HZ4vPVQshcXQ0LEEs3PCLgMHhmgUbzD9FG9YoGOxvFXMJk8GcUFuFgDEl2qwMPCyL1U5dFQyOTdlSyDBzbL1TxaBgrstqOJowh+uvoSwaGD\/9rXXXLj4VlQpF3uxoWIJ7cUSFhMHucI19LIDt3fgMk9X3dscwHW7iqX5QMCbL22iFHIuCp1txgMm+0MxlmDu+3fVnBYP1ufM5YQaZvfvC8lHBsGxPf+NbTvhcVXwgzefAhiWcOOCjhDmpq6wJOWafrHTbXWFQ5c\/DA1eYDG\/rNa2CuTE72xHDkiDtrtZDCZP9uY0szN9GdzeYrE5jiln01pt1WcG0arJLmXj4bBI2kDc7CZYItlYOkyKvyGWEuSfmx0HXwpwcq1ytGKbDe\/AuAgbV6eqtsCjIjgKvFTComtOwsRVmjuwkamoYVNkFe8yhk+wCagQMqyE7deQyfDKS8B152iFYItnRURHM9Zc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2369{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcXDRAADwGluW4GcwZwKgBBwBQz53Qk47d1OOGh4AQA6svNQAAAQEICv\/8O3sfZN7HzZAetGy2rqR144fE+e886SjNQU\/u8k5Tm8neSd06SZJM7RUIqMPK8\/2PIGQC+cx9D5Gf6Q76tj4XMYjVUexhYGDZJd6u5u7uvqTU5jdhgEUYM7NrVjwnTysPJwSDA6SkyEc5IPGVV52ps12WRb6YvNirjtdV0Nm5yYeX6HZr3a9vg+p6EuPUiSViZVQOeOPfYteNU2mjBuamXZqWOi3sfm\/OOESZMRvvWc5SeTu6dJMkmiydKEYxQIVfGO\/67OVQfzdW60PmnvXsVLIp4+HlrMfJ5elvDfb19XptbQOZRQawXYCT0KdKsZ6tOhh4eZIIU6SUYWjJTFYozVuJNWnlXep5+pAabe9Co1+Q0MDrqstuuwrOJa14Da7bqyEElHZDPFQZ2qGvWss8N3KPUuHrn1dTc4zzLgWRxffc3k7u7pJMyZosmToIZwCIcAN4Z3vfZ1ap82Tt9lx\/ZfQ2fnwrcNjUq2fxy2tAJtzd2dbQtuwCKoMMioUHBmVahZ0qmZjYFNgjTp4yDKyZmUJ13ld1q+Y1vc5pNIa0fQZ85j3cPqqtK2XfLXy+vp81m7PR2uVHrPX0AVqJGPYp28+M5muxrCr2xSa\/nWbuhv7fnPj+Mv0DeSd3SZNFmaCi0VN1SE7AANkFeER9A6rzLy8twnaa3tdkFHI8u5MVTmbd2\/t2VsdNrS1xgagW5ViKEwupAzqMBwWdlZPNDFCCZ2SGSy6eDuCVvreXqNe2+ac8AqfdANx9ytuYNfd0Z2tFqOtZ6utyhLAcDlTaF19CyXCCpkoa+Y+c3QSwpWI3pZ0dGlcPLquz5jxn7UUnSUWeMYRFJhwdMSEB11EQIjmOJ+Ft9d8rVzEua3W+4ag8vH8u4etgW7mxrduahHQ2rOkoUpCrPClFFR2BHKpoT5WXlczEUWZJRjE9toqLwiTueTpKe\/z8bFqFd+oejj2q3V4lTa05njoHGXodOvmclq6FKjiZ+Pc0AlJdr6GUGYul5w\/Qc4GyrFyZKsJ51O7DXt9\/626TMw3aNcchpwDGKy0ENlBq4ouGwPen4FwFaBj2dP6VLZqZ3Cee54NfpOssa+HVV3TsHhOknrVuQ5qNy7qahIvUqocM\/OweacUGdkmgrB3gotCfbZGMAm3hAsktkr7Y4UZU97Kz93Q2Yld9nbpc9rSFQo6t\/Ooj0ec5LQOZzWI1xQK+hq4egs2nOjWHWkosOUD\/AHKlGMBPELRhCFZDiopmmoM7ABJqs2CPzzkcmo9iY\/pPt6+bl8dj3fQNIJjVsnm3LsWx3qh2nlcj5TgW9Tb3NicrcaTjrUKfNYUGGkzsw5WCyg0SA29XHyhbtfNUnsvcMSlXbTnk69u21jTK3Rb+fy+Xt1zYz3qxMxXLODykOjFFPpVaNiO7zua7hrVgvJhhYsIv9+M0YxrsgNFBSrCgnYbygJWaw2anQsEoVrmT5riVUWn9F9zaiEFhRs08\/aDQ5l47V1WFVzeY4fktXouoYZXtUSyzGQKuXyecJ4PaBCEIEOVmiI4vSePq5ujKhFxEt2ZQjbDK9ytnX6QsI6vXc4fdyQ459etTyx2bKDW07EuW5YWk9gBZ0Lo8k1CE4AeImeDJO3320GFmxMSnN2A8RKtEjQCCKBcjnQsCyC1qU6Wju+X8xWeh7V6zOSg9WF6OBauHBl43Q3AUeW5blsOfqPWW2QAo1apTHAAAY\/K5sWZz1WQ2MckIxBo9bXyMsGrRYMGsHsRWhn0+sxcjdu2deGX2msPjNQxa+PavT5+emCGfpQv1BVMLBt2g1SaW1ydciraOcOupBGkkpfdhRtlAjK5WzdGY2rzjUFROaIabMnhm1damFlKpezNvH8\/o43c\/QJZu46sLRsrJ19i1z3J6NHjefxMyr1XqfRMwpVYEQwUK0hVqmBgZkWaUwMw5FPOLDf0a\/wCZ6ODp1hw=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1484319043665,"flow_last_seen":1484319043665,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53150,"dst_port":80,"l4_proto":"tcp"}
+0416{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAaV9AAEAGi3bAqAEHuBnMGc+eAFByPGEHAAAAALAC\/\/9NegAAAgQFtAEDAwUBAQgKH2ThCQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lm4GcwZwKgBBwBQz57u7DQucjxhCKAScSCMigAAAgQFtAQCCAr\/\/D2rH2ThCQEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0VAZAAEAGoNvAqAEHuBnMGc+eAFByPGEI7uw0L4AQEBUcSAAAAQEICh9k4SH\/\/D2r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":311,"pkt":"gCqoTGHM5JjWH70UCABFAAEpIqVAAEAG0UfAqAEHuBnMGc+eAFByPGEI7uw0L4AYEBW0VgAAAQEICh9k4SL\/\/D2rR0VUIC84N2IzMy9iZWQxMjIzYTAwNDBmZGM5N2JhYzRlOTA2MzMyZTQ2MmM2ZTg3YjMzLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTIubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1484319043665,"flow_last_seen":1484319043691,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53150,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"art-2.nflximg.net","url":"art-2.nflximg.net\/87b33\/bed1223a0040fdc97bac4e906332e462c6e87b33.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}}
+0400{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0CfxAADwG7sW4GcwZwKgBBwBQz57u7DQvcjxh\/YAQA6snlAAAAQEICv\/8PdMfZOEi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0q6FAAEAGSUDAqAEHuBnMGc+eAFByPGH97uw\/f4AQD9IPxQAAAQEICh9k4XP\/\/D3a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0+w9AAEAG+dHAqAEHuBnMGc+eAFByPGH97uxFJ4AQEAAJxAAAAQEICh9k4Z7\/\/D3a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcCgBAADwG6Rm4GcwZwKgBBwBQz57u7EUncjxh\/YAQA6uRwAAAAQEICv\/8PdofZOEiXBEg2yKP79QmWYAe2qVLgJlTtinCdLhTk5xXRKFmVlhNP3kD6Gz4e2hLJWZmLDAQ4oYXanIU+VExXKROOel1B+HOjjSpB2UfaJWh4kJUBAkUN7\/\/AAVLavNxJQluQTp9I9FqbtWq9zZzA7aimah7L6YWcMuV3Uee9Wn8LJa2XfDeF20MSTOTNMerdPYKtY5cwDC8iRg9N6r7RpFuXO+hzzbbHgAPCpLma3Rm1yHUp2jB2NYTTb2Na6C5XTutUh25D31lktPTO3WrqQzXNopRQC24VjypYrXYZG9JfFB2VvzPVGy45giuSXAKSuvUEiu6rb46VxPjcJt+L3cX2ZmH41rhltg0VjtQ7tUkhoZzXSBd8Fi7\/itpFz1yqPxFd6SEAYxXFexMPf8AaewXGQJNXw3rugFcnqpbSNYqyMRjFVtxP9IzIoEY5EdTVudhVRO2UJUA8ulYYtseRUiu4jZxX8HdyJ6OMg9R51z7jXBJLeTDDb6rgbH210HhsltMeJ6u8E0MioVLZ2xkaR0FR3FvFcwskqh1PQ11Rf0R0cdkVoXKOpBFajg3Ghd244deSbkaY5W6\/dP5U7jnAWhywBaL6r9V8jWXkiaCQqwIPjRbizVUzTXML28ulgRg7GgyziYqGIzg0VwniUfEIlsb1sS8opSefkfOkmklsbh7aS1BYHZmHOhv7RUUSPc3NvIjrM+oKORzUseq4AZlGpjyG1CLxCa3lYrEmo8871YQ3ss2jEUeo+Aot3pGiQ7vdM8iyJscgYHWi7NmW4Re7QrzYEYyKdw+5tJNcd1akMT6wHKpYzH84yhKj1ckchSb8jRNclJnKW8ezMAqc9\/Cs928v4rJIeBwsrTKBJduOhI2T8\/hV5xK4l7OcHk4rblZZY3UR611KC22TXK5pp767eWRmlnlcu7E7sTuayk7f4bYoWwy34Xe3ls89pA80aYDlBnT7a13AuBLw8a7lM3R5fcHhRfyZTuvCeNoo1FTGdJ88itPHYq8hZkIYnLVm5O6ZpKVaRFY2wGCRvV1FEFUYqKK2EeMA0bEmRuNqGzBj4Eyc0aq4FRxR46VPWTZDOP9tuHPZ8euHK4WU94p8Qf65FZVhnmK7H244UL7g3zlFzLbHVsNyh9Yfn7q5FLHodlPQ0KVaPQwvnAvux9zMBxCxtiRcvELm2I6Sxbge8Eiq7jE39q3JvRFbRPJu\/dZXJ65BJ3qHhV83C+LWt8mcwyBmA6r1HwzVpxzstPZMl2k0L290Wkj0k5AJzv8aHLdj4pS\/wBM2Y2C6jyzivKpKkjpRLcPkA2dcjpTPmkynA69AarmiuJ6KIkjMefacVs+A3UlyJ55Y41t+HW5htwigASynTnPM8zWOKyxD0i3sq+vpl4Z2JtLWNitze3Jnlwd9KjAH8qV2RkjqgXtBxZb7i8hhb\/ZoVW3gH3E2B95ya0HY3tiLFl4ffufmzH0JD\/ln9K5+WGaliV25A1okmqIlBNUfRAxIoZSCpGQQeYqN02xXNuyXae54XotL0s9mxwCdzH7PLyrpsbJKgkRgysMgjrUbRxTg4ugD5oS2rFSCDSCTzo+mkZFP3GZuJWFisyijY7kM5U0FcaYnLH3UMJzqBHWtePJEXReswVSaQOGGRVUb07x+Iptle51Izbis\/adFcw24fYjNUl5OqZJPKibq4JfY1SXZ15BJJPSunFjoxk7BtffMWyQa9HK2Sqjn4VPa2MlyTtpAGSTVpa2UFu3paS4XOT0raUkjOimliltLT5xLGQpOy53361NDM9zDbqNh6QBPQe2iO0cLDh0zE7aeVAcBXXYh8F9DhfKpu42C7D+P2\/ednSSN4yGGKqezrGfMXpD0gSwPvrT8SiL8BuFwAdGdqyfZ59EzAkjGDSxu0wkbBiVuULsuCcBR4edA3Ci6uhLGwidW9PbOQKfcsZWSQw=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABARnxAAEAGrlnAqAEHuBnMGc+eAFByPGH97uxKz7AQEABJSQAAAQEICh9k4en\/\/D3aAQEFCu7sUHfu7FYf","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcCgRAADwG6RW4GcwZwKgBBwBQz57u7FvHcjxh\/YAQA6sxIQAAAQEICv\/8PdofZOEiwG9TWfEZ0ubZ5QsggwgDD6o\/Os9pmiJOIo8V0rLsCNsUKCPrsFz1q3uZ4bqGd5AQ+pSpOygHOaqryBIZJIWkDKuDqUZ51MjSJMRaRRERy6yeuKliNskmTOdQ2oVIrMWxY3Dh+WCmx\/GllhhEyCC6WddO5KFSD7KjfRqixQWkjJG1yACeeKP+ZW8Dr3c6SLzqk+bxlULkZ8aLs4oBJ\/jKB186TTvso0trG6FmXS0ci4K0G80pL+iQvLFFW1gkc3frOkkajV6J2FF30Ea8NjkR1bXkkjxpE2VVq4BCnOau4WXSCM486zavmYKANWedXEVwYwV6EAnepaKZeQyEpRMcu1UUN3nbcUZFPvjNQ0S0XSPmpVbNVsNxvjNFrJUtENDOLWrXnDpY49Pegao9QyNQ5Vy+XitjPE63lkqTbrrh9HBHivI11pG1CsJ2t7GT3d0b3haKWkOZIi2N\/EVz5cEcjTfZ1+lzrHcZGGtLb59xGC2jB+llVQPaa7RfxwNZfM5HWNZF7tcnHSsn2O7IT8Puvn\/EQqyp\/hRg5x5k1N2o4dxq+4zE1rAZLVEGnDADJO+aMsZKDUezSU45cqV0l9mc7U8OWy4VbxLIjGOR19Eg5BOR7MVhZBh66pxbshMOzs0gJkvQRIUU7ADmB54rl1wjKxyMGqwKUYpS7NXOM0+LsEkND45+2p3NQsa60Ysif1TTOQoiOCS4lWOJGd2OFVRkk1fjsNxNymmW3AYAtljlT1GMb1pFN9GUpJdlfwbgN3xNWnjCJEpxrkOxP51s7GxteFW7CPMsr\/4krfWP5CirfhPzKxitojlYlwemT1PvNeghLyKkh0rmumEUtnLObl\/gM8txJnfCjoDT0hklhzoyB41Y3FukYzENxvjxpIbtH0jIGdsVpZiyFID83GkjJOBTIkWTiJhODjGamMRFwHUgIDlh0oJAEvDL3wDHPup3ZBbyzfMZAwXVATg4+rUNxxeJGwg1sOigmq+8vYkwqK0mfWLnNBXXHAqmKFgiEYJA3NSokhxvJWuO+jiMMbDBJbmfZQV3MVuYkur8nJzpXYKPbVPLcXE2BDHI5zsQDTTw7iV3\/iBY8DILtvSYFv8A2hw2S7JaIZLZMj+kT50+ftSyl4rUJEmMGTG7edUsHBbiSNHlkOpmx3SD0sVc\/s5axQyaogWIAVppfV8dqWySlk4sO8JJLAjfNDia7nb6GKY+GAav4bbhthIuu4txpGdlzvUNx2giSRliIZAdiRzp0Sysfh\/FJcNImjPV23om17OSTf411pH\/AMa5pR2iZZxI8CyqBsCK1\/ZK24l2gl+dTxrb8NQ\/VGDKfAeXiamUoxVsEm9ITs18n1lOUur0SSRKchXOA59nhXRJpYLK1aSRkigiXJPIKBUvoRR9FRB7AAK5D297XtxKY2Nm5FpGdyP8w+Ps8K4vlml+HTSxx\/Sr7a9rpeO3pjhJSziJEaeP3j51iZJMmnzSZJzQrNk13RioqkYN2PXB5717IB2ApAdq9pobAsfnjyvrdiSepNI8wKHwqmW7AHrU43eoYBpJMoOilw+xrfdie1T8IuxHKxa1k2dfDzFc2herK3mKkHOKqcVJUwTo+noZo7iFJYnDxuMqw6is12k7OfOtd5ZkxykYmVR648ceP86x3Yntn8xdbK8cm2c7E\/UPj7K6wrK6B1IZSMgjkRXnSjLFI6E1JHHeJcMzEtpfKCrZMM6jBU+dUV72avLN10qWBAOqPfGa6h2u4W6rHdwoGgR9Uo+x5+yqmHiUTquoDwrTnasVGAju+K2I0CV2TGNL7\/zpo4pICC8ZRh1FbyeKxuHyyj0uYxQb8Jt5V0RSCPB5YBFP3Ckigg4olzAYJMb9c4qFhLnvUDbDbrRlxwIXjztGqxzxnS4HqsfEeFCQ8P4rZSYB0RnYsTlaHNPstR8D4+IzKoY=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319043,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319044,"pkt_len":60,"pkt":"gCqoTGHM5JjWH70UCABFAAAoz5tAAEAGHmfAqAEHNBhXBs7BAbvkIOdlTYzTZlAUEACWDAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1484319048757,"flow_last_seen":1484319048757,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":79,"pkt":"gCqoTGHM5JjWH70UCABFAABBS2MAAP8R7O\/AqAEHwKgBAeL2ADUALZ5c\/mQBAAABAAAAAAAAB2FwcGJvb3QHbmV0ZmxpeANjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1484319048757,"flow_last_seen":1484319048757,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"appboot.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0570{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":192,"pkt":"5JjWH70UgCqoTGHMCABFAACy4UZAAEAR1ZvAqAEBwKgBBwA14vYAnkKZ\/mSBgAABAAUAAAAAB2FwcGJvb3QHbmV0ZmxpeANjb20AAAEAAcAMAAUAAQAAAG0ADgdhcHBib290A2dlb8AUwDEABQABAAABawAbB2FwcGJvb3QJdXMtd2VzdC0yBnByb2RhYcAUwEsAAQABAAAACwAENsm\/hMBLAAEAAQAAAAsABDQr9VrASwABAAEAAAALAAQ0GfQx","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1484319048757,"flow_last_seen":1484319048776,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":45,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"appboot.netflix.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.201.191.132"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1484319048780,"flow_last_seen":1484319048780,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.201.191.132","src_port":53151,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAtrNAAEAGzAfAqAEHNsm\/hM+fAFA6e8d6AAAAALAC\/\/+ZMQAAAgQFtAEDAwUBAQgKH2T0hAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGmJ82yb+EwKgBBwBQz59tgW\/FOnvHe6ASRep1DwAAAgQFtAQCCApXXrqDH2T0hAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0VQxAAEAGLbvAqAEHNsm\/hM+fAFA6e8d7bYFvxoAQEBXZhAAAAQEICh9k9LFXXrqD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":379,"pkt":"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","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1484319048780,"flow_last_seen":1484319048830,"flow_tot_l4_data_len":461,"flow_min_l4_data_len":32,"flow_max_l4_data_len":345,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.201.191.132","src_port":53151,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"appboot.netflix.com","url":"appboot.netflix.com\/appboot\/NFAPPL-02-","code":0,"content_type":"","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}}
+2335{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":1514,"pkt":"gCqoTGHM5JjWH70UCABFAAXc5GhAAEAGmLbAqAEHNsm\/hM+fAFA6e8i0bYFvxoAQEBWdRQAAAQEICh9k9LVXXrqDeyJlbnRpdHlhdXRoZGF0YSI6eyJhdXRoZGF0YSI6eyJpZGVudGl0eSI6Ik5GQVBQTC0wMi1JUEhPTkU2PTEtODc1OUZDM0NFMDgzNjA2M0MyMTA3RDZBMDM1QUY3M0QyMzU2NzlBQ0Q2OUNBOTg4N0JGNjQ1NzBFQTJERkQ5OCJ9LCJzY2hlbWUiOiJNR0sifSwiaGVhZGVyZGF0YSI6ImV5SmphWEJvWlhKMFpYaDBJam9pVUVkVlp6Rk1OazE0TldkVlpXeDRhM2QxU2tkRFpUSmxObFY2Y0N0NUswWjNkVU41WVVKbVJHTnllblZZTVdkTldXcENTVEJ2U2xWVFRUVXZOamM0UldGcWJXVTRUelY0U21oQ01ubE9PWGcwTTJaTlQwNVJSRUkxYzAwME9IUlBRbU5KU2xab1dFWktORFl4TlZsclNsZGtlRVZaVFhSblNVcGtVVm9yWmtaMWQxcHpjek5JTTFJeFREYzRjWGcxU2s5d09IZFVORGRZWjFJMFIyb3lWVVJGZUZObVozRk9TalkwVHpKSE9IRktSVFJaYldGUmFGVnZkbTB4VGxremEyTnVPU3QyVnpGT0t6QjZVR1p1V2pCR1kwdEpSbkZSYjBKVmJDdGlWSFJaTms5dE55dDBRV3cxYUd0SE4xaFNVak5oUldsYVltSm5kMmMyUlhVd1JteHBSSHB2U0U5WFlYVmlkRGdyUmtnMlYyb3phWHBDYVc5bVYwRmhTREI0VkRJNGRuSkJXbW8zTlRsM1dHZHhWamhVVDFndmNFRXZObWtyZEZoSWQwOVpPVlZHUW14UVkxVlRaSFZXU3l0VWQzSTNVMGRqVVRkT1owZE1lRVp5YjFoQ1dHbzRibEl6ZVRGbFYzZHhVMlJVTm0xWllWUkJSbEZRVG1GaGVETmpiM0pSVGxoUFl6ZEtNbVV6VTJwdGVrbElhRlJ6YTBacldsSlNZa1p6ZWxCSFRFNWhMMVZZYnpGWWRtdGxjRnBhWTBzNFEyNHpaVzVCYlVGdk5EWjRMM1ZDYWxoUU5qZFFlR3RpVWtjMmJVOVJSMDlIVVdsSlZqSlRWbHBWTDFkS1NEUk1TbXRyZG1Wd2QwUXZhRmc0ZURKaFVFeDBRVkZPVDFBMVFtNUdiR2d4WmpOWVlVbG1OWG95U0VkRFFUTjVOMDVoYUVaNVZFWjZkV3RhU2tSYVZHc3pSME5KV21wamJrVkNkekJXZUZsbFVETjJhVWh3UzBwT1JTdHhiMWhFVFROb2VFMXdNalIwV25kRk0xbHdSSE42WTA5bWRIWlNOMnMxVTFoalVFZFFjV3ROY1c5YVIyVkNkM2hrVkRCWlNXVnlhR0ZFVEhsRFltRnROa3htTkhKTWVrbFdVbFZhU3pWYVpHWjFSbWMwY1d4dE9VRTlQU0lzSW1sMklqb2laWEZvVFZaak5VaFFiV1ZSZFZSUFYxZHJZemwxZHowOUlpd2lhMlY1YVdRaU9pSk9Sa0ZRVUV3dE1ESXRTVkJJVDA1Rk5qMHhMVGczTlRsR1F6TkRSVEE0TXpZd05qTkRNakV3TjBRMlFUQXpOVUZHTnpORU1qTTFOamM1UVVORU5qbERRVGs0T0RkQ1JqWTBOVGN3UlVFeVJFWkVPVGdpTENKemFHRXlOVFlpT2lKQlFUMDlJbjA9Iiwic2lnbmF0dXJlIjoieWZ5ZkVRQjVpTjVkeCttb1YyU0FhWnliK1NLMDdPVDVjazhPNE9VdjlZWT0ifXsicGF5bG9hZCI6ImV5SmphWEJvWlhKMFpYaDBJam9pUWpSS056SjFXRzQ1VUhRNVJqUmtRbk5ETUhsWVdWVlVRV3hYUVZwb1ptOURURWRETmpWMmJEaFNhbXhhTVZOUGMycDVhVGwwTmxaNVJsVXlNVUZOTWxOVGRVMVlWVXQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1537{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":917,"pkt":"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","pkt_caplen":917,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA01UlAACoGw102yb+EwKgBBwBQz59tgW\/GOnvItIAQAEvoAwAAAQEICldeupIfZPS0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA01UpAACoGw1w2yb+EwKgBBwBQz59tgW\/GOnvOXIAQAFbiTQAAAQEICldeupQfZPS1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319048,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA01UtAACoGw1s2yb+EwKgBBwBQz59tgW\/GOnvRr4AQAGHe7wAAAQEICldeupQfZPS1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1286{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":728,"pkt":"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","pkt_caplen":728,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXc1U1AACoGvbE2yb+EwKgBBwBQz59tgXJcOnvRr4AQAGFl+AAAAQEICldeurYfZPS1MjAwMA0KeyJoZWFkZXJkYXRhIjoiZXlKb1lXNWtjMmhoYTJVaU9tWmhiSE5sTENKdWIyNXlaWEJzWVhsaFlteGxJanBtWVd4elpTd2lZMkZ3WVdKcGJHbDBhV1Z6SWpwN0lteGhibWQxWVdkbGN5STZXMTBzSW1OdmJYQnlaWE56YVc5dVlXeG5iM01pT2x0ZGZTd2ljbVZ1WlhkaFlteGxJanBtWVd4elpTd2liV1Z6YzJGblpXbGtJam96TlRVek1UYzNNRGt6Tmprd01URTVMQ0pyWlhseVpYTndiMjV6WldSaGRHRWlPbnNpYldGemRHVnlkRzlyWlc0aU9uc2lkRzlyWlc1a1lYUmhJam9pWlhsS2VscFlUbnBoVnpsMVdrZEdNRmxUU1RaSmEwcFNVVEJHUWxGVlZrTlNWWE4yVFd4b1NsZEdSbk5PTTJ4VlZGUmtTbUl5WkdsalYyUlpUbGN4UTAxRlduZGpWVkpKVTBSa1dWcFhXak5WTWpWMVZVaHdXbFF6UmpWbFJ6bDZWSGx6ZGxOcldsVmtXRUpUVkVaQmQwOVhXblZWUjFWNlZqQXdORXd5VW5Wa1JWbDRXVlphV0U1RVNtdE5iWFJ6VERKa1NHRnVTbmhpUkU1NVUydFpNMWRIVm1sWFdIQnFWVEowU1ZkR2JFcGphMVpNVmxWV2JWcHJkSFZoYlRRMVZFaHdkV0pWTldGUFdGWTBTekZzYUV3eVNsQlNibHA0Vld4c05rNXNUbXBNTUc4elpFUm9UMVF3V2sxVFYyZ3dZMjVvUldGSGF6RldWR2hVWlZoc2VrOVVSbE5pUnpCNFRERktSRlI2WjNsUmJrNUdVMVZKTVdOVmREUlViRkpvWkc1d01HTnJjR2xUYTNoc1ZURlNVbUpJWkU5VlJHeFVaVzFPV2xvelVrNVJWV1JPWlVVNGRtSkdSbUZVYmtwdlpHNUNRMDFxVFhkV1JVcG9ZVlpHYWs1dE1IZFRSWEJDVGxaYVJsbFRkRE5YVlVaNVlUTldSR0pWU1RGbFJYUkVUMFZTVEV3eWNFOVNNa3A0WTFWb1UwNUZPVzlsUjJ4MllXMXdlbE5IWkdsVVdFb3dUak5HVkZaVVFtNWFiRXBxVDFkNFRtTjVPWFpWTVdoVFZsaG9WVk5yWkVoak1qRlBWbWwwZG1KVmR6Rk5NMlJvVjBSR1NXTXhjRzlOUjBaSlYwUkZNazFJWXpGVVZHUlZUakF4ZUZwc1duWlBWVXBNWld0a1lWTnRWbXRSVldoUFlsZGplRlI1ZEVKak0wNTVWbGRrU2xWRVFuZGtWekZNV25wamQxUnNiM2RWYm05MlRVUkNXRTF0Um5KUk1VNVhUbGM1VWxkV2NEUmphMHBFV1RCb2MyTnFWbUZWUjFZMVlWZHdSMDlIZUhaU01WcEpVMGRhYlZRelFtcFhWM0JyVlRCSk0xVkdWbkZPTWtaTlUyNXNiR0pyVm5CU01sSlFaVmRPVWt4NlpFTmhiV3hHVmpKNFZWUkdhekJqUlZsMlVqSTVNMU14V1ROVWFUbFpWRWhHVWxKVWJERmxiR3cxWWpKYWFGZFlUbGRqTUhoT1l6RkNjRTFyYzNwVlZVWTJVVEJGTUdKR1ZrbFRNbWhOVTBkS1YxZFZVVE5MTTBaUFlrVlNjVXd3V25oWFIxWlRZM3BLTTFwVVFtNWpiRkpYVGxaRmRtTXdXbFpOUld3MFZqTldTVll5YUc5VWJtUlRZVlJTVEdSdGVGQmpiRVozVmtoQ2RsWXlTbGhOU0doVFdXNUtiVTlWU2xaWlZtUnBTM3BPUlU5VlpGQlRla0paVkhwS1RHTXdUbFJoUlZKWVRqSTViVTFXVVhoamJUbDZUa2RXYUZVeVozZFdlVGxKVlRKcmVHTnBkR0ZOTURGS1l6SnNjbHA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA05PVAAEAGndHAqAEHNsm\/hM+fAFA6e9GvbYFyXIAQEAHL0wAAAQEICh9k9XlXXrq2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XOxAAEAGJdvAqAEHNsm\/hM+fAFA6e9GvbYF9rIAQD9LArQAAAQEICh9k9X5XXrq2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXc1U9AACoGva82yb+EwKgBBwBQz59tgX2sOnvRr4AQAGEUCAAAAQEICldeurYfZPS1InNjaGVtZSI6IlJTQSIsImF1dGhkYXRhIjp7ImlkZW50aXR5IjoiQVBQQk9PVCIsInB1YmtleWlkIjoiQVBQQk9PVCJ9fX17InBheWxvYWQiOiJleUpqYVhCb1pYSjBaWGgwSWpvaUt6QmtUbFkwYW5WR2VWUk1SRTk2TkZZeU5FSTNjVmQzYTFoek4ycHpXRXh4ZUV0Wk5uTnNTalIzYzAxbFJ6VllhVXhCTVVzNFkyRjVla2R5Y3pOQlduSm9aR1JyVUc1VEsxaFlWemRyTDBsV1ZtRmFZVlJHYlN0Vkx6aG1kRzExTDB4NlNISTJSbXhzYTJReVNqTkZiVUkxU0ZSMFJIbHdibmRaSzFab2REQlFVMGd2ZUZSRU4ydFZVa1ZpWWxSbWIxaEZaR1pYVmpORVprTkVibXBNZUVKWmEyNUNiREZoVmpsb1prOHpTbmh6SzBveVoxUkZZMkZQU2tSb1NGcDFWVE54Vm5vdlVHVnRVVmRWSzI1WGJUUjJjVXBvVERWa1FqY3dhMHN4WW1KWGEyeDNZazQzVlVsVmVWUjVhbFpUZUZoQmEzZFFPRkpNTlZOTmNVVlFWVXAxYVZsQ2FHZElWamh2TkVWTVkyeDRhek0wYmlzeVozSndhSFpzTlNzeE4zTlBVbnB0YjJsMVZrNTVPSEpWY0dKa1JYWjFaM0ZLYWt4aFZXcDNNVWxhVlZKRVEzQnVZV2R1Tm5kMFVEbFJWV041ZGpFMlNVdzNlVTlwVHpSWGREQkpkMjl4YVZsa00xbFhXVFZhSzBKellteDZVRTFDVTNsWmNWWkNkRlpqZVROU1FqbDVaSEZIVHpWemJqTkJaVFZrTms5Nk5GcFBRa1poTlV0Uk5YcGllV2x1UTA5R2JsTXpTbE40U25wTU16ZDVhWGsxZEVSVlprbHdiQ3RqUjJKSlQxRkJSa0pTUTJkeE9YSlhlbU5tV0ZCcWVuSm5OSGczTkVjclFsSlBSMHBOWlZCWE1tWkdTWFUzWTFsQ1ZVTklWVGhUYjBOaGJqTTBTMnB1Wmt3Mk9GTnplbVZvUTNOSFNFVkdNV0pFTkRBdlZXdFViVWtyVGxKR01HTlFiMUZ6ZUhaV1VFeGxkR3hhTUdKU1ZFc3hWazl6TDFaeGRrWnFWMXBMU0ZWTFpHeGxRV3h0WWxSa1ZUZHFSRTVKVTFsNlpuRkxNbUZaZFZGdGVscEVVWGR2UlVjeVFYRjBNMm8wUjB4cVdIVkdTRWRPZFU4elozTmFRVWRGWlRsMkwwRTVOVW92YVZZME1UUnViM1ptUTNvcloyTnpiMUZ6VmxSQlRYVXlNMHhqWVdNemVrMVZNRWszYVRoNk4wOWFSemgzVGtselRqQXZVMGR3VDBOVVdFZ3dWRGRYUVdkalozb3ZVbEp2Tkd0MlRIbENOSEZzWjNSRVVURTRRbTFpVW5kUmRtRmpWVFpCYm14VVRpdE5hMDFpYVhSdFFrbElSbWx5TlZvcmNDOXBUV1paTkhoSVNGZHhUMjl5UlhCek0wWnVUV3hoU2lzMFYySnBWVGR4ZW1WMVlWSkZlbVpzU21wV2QzbE9XVVJHVVVKSk9IRkRZVzFNWjJkVGJrbHFiRXMwY0hSM1NIcFlVMVl3YkhacVltTnVkelI2TDNoMmEwVktSMWtyVlZCUmFWTm1lR1JVUzBSWmMzVkZZM2xJYlhjM1YzbE1aazVTUmk5S01HTlljVTQxTkRBMFNVRk1lRkpaV0dkVk5ERm1jRU0wYTIwd1NtMVRSWFpQV1hWWlFXMU5VRklyWkM5cFpraExkMHhYYkVkNFZqZFJWelJoTkdGaE5FbDROQ3REYkV4TmRVTllUa3RQVG5CRlMxZE9hbmNyY21vd1lYbGFhMmxKT0VaQkwzRm9jMWxpWlU0MFlXbG9ibWhoVWs5UmQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1484319049465,"flow_last_seen":1484319049465,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53152,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAjtZAAEAGjk7AqAEHNFkni8+gAFCVL\/AiAAAAALAC\/\/+toQAAAgQFtAEDAwUBAQgKH2T3IAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGMwk0WSeLwKgBBwBQz6CC\/YxQlS\/wI6ASRerkyQAAAgQFtAQCCAqtiNcHH2T3IAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0TN5AAEAG0FLAqAEHNFkni8+gAFCVL\/Ajgv2MUYAQEBVJOgAAAQEICh9k91KtiNcH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":715,"pkt":"gCqoTGHM5JjWH70UCABFAAK9sclAAEAGaN7AqAEHNFkni8+gAFCVL\/Ajgv2MUYAYEBXtIwAAAQEICh9k91StiNcHUE9TVCAvbXNsL25yZGpzLzIuMS4yIEhUVFAvMS4xDQpIb3N0OiBhcGktZ2xvYmFsLm5ldGZsaXguY29tDQpYLUdpYmJvbi1DYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQWNjZXB0OiAqLyoNClgtTmV0ZmxpeC5yZXF1ZXN0LmV4cGlyeS50aW1lb3V0OiAxNTAwMA0KWC1BbGxvd0NvbXByZXNzaW9uOiBmYWxzZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLXVzDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZA0KWC1OZXRmbGl4LnJlcXVlc3QuYXR0ZW1wdDogMQ0KQ29udGVudC1MZW5ndGg6IDg0MTYNClgtQ2xpZW50LVJlcXVlc3QtSWQ6IDE4NDQ2MzU2MTMzMDg2MjYxNjEyDQpVc2VyLUFnZW50OiBBcmdvLzkwMCBDRk5ldHdvcmsvODA4LjIuMTYgRGFyd2luLzE2LjMuMA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQ29va2llOiBtZW1jbGlkPTcwMWFkMzEyLTQ4MDEtNDdlNy1hYzAwLWNiMzdhZTJmNGFmZjsgbmZ2ZGlkPUJRRm1BQUVCRUpYJTJGOEFodHlLbFRicmt0TUhUSWRITkFYbUJNMFpuUEY2NDJwZW5HVEhPaXQzeDlyVTBwTG0wS0s3ZDhtb0J5ZDFROW9Fc2FRT1UwNXkxJTJGT1RRWWRPODZVVDFZVlVOTGpxVUR1WEU2V3MzVTdRJTNEJTNEDQoNCg==","pkt_caplen":715,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1484319049465,"flow_last_seen":1484319049518,"flow_tot_l4_data_len":797,"flow_min_l4_data_len":32,"flow_max_l4_data_len":681,"flow_avg_l4_data_len":199,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53152,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"api-global.netflix.com","url":"api-global.netflix.com\/msl\/nrdjs\/2.1.2","code":0,"content_type":"","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}}
+2336{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0dAACoG18k0WSeLwKgBBwBQz6CC\/YxRlS\/yrIAQAEtWaAAAAQEICq2I1xgfZPdU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"gCqoTGHM5JjWH70UCABFAAXciXJAAEAGjhbAqAEHNFkni8+gAFCVL\/38gv2MUYAQEBXZIAAAAQEICh9k95CtiNcYUTBGQlFVVkNSVXN2TWxoSldGRnNOM2xVVFRkSmIyZGljV2RZTlcxQ01FWndjVVJJU0RkWVpXWjNVMjV1VUhwWlQzRjVlRzl6VHlzdlNrWlVkWEJTVEZBd09XWnVVR1V6VjAwNEwyUnVkRVl4WVZaWE5ESmtNbXRzTDJkSGFuSnhiRE55U2tZM1dHVmlXWHBqVTJ0SVdGbEpja1ZMVlVWbVprdHVhbTQ1VEhwdWJVNWFPWFY0SzFsaEwySlBSblp4VWxsNk5sTmpMMG8zZERoT1QwWk1TV2gwY25oRWFHazFWVGhUZVhsek9URlNiRzB4TDFKRFR6Z3lRbk5GU1VJMWNVdDRUbFJoZG5wMGNrcGlTa3hsVTFSUmJIZE9VRGxUZW1OWlozUk5RVWROZUU4dmJGRmFUbkpvZG5CQ01qTXdWRUpoYVZGak5tMHdTRXBCTlZaRllTdDNXVUZ5YTNWRGJVSTFlRXRET0VSTEwycE9SMkp4Y1VoU05FOW9lR2x2YW1welNHZGlUWEowTjNGVFZUQm5abEpqT1d4TmN5OXZVMWhTVlhoVVNrZEhjMjFPVml0dmJVdzFNM2RoV0RGSWMxcG9NR0ZJV0RFMk1IYzFUVGRVTjAxeFpsWnZPVUpMZWtkYVNtVmtRVWhPYldjeFR5dEJjM055VldkSlVEQndkVzFMWnpjd1Rsb3dVbm92TURCWE1tRnJRMU5XTlc5UldWcDRja0pEWTBoc2NqVmFVR1Y1YVdwR09HeHZSMVpJU0dabVQzQmpXV3BrVTBJM1VGVnFOMkZNU25sbGJrVnBSMlJQZVdOUkx6ZENhbWxGVjJ4VVRGazBjRVl2UjI5M1MxWTNUaTlZVEhGUlJUbDFlbGw1YjJaaFdYTldjMHhOYzFCcE1rc3pVVUY2UTBFMGJGVklTMmhNU0dKV1dVUTNLM0ZPYkVScUwwWnhXR1ZTY3pKM1pUQm5jbFJXTlZFdmMwWlZNRWw0VjNWSVYyaG9UbmRTYVRSTGRteFBjbEZ3VkhCdlYySlhNSGhTWW5KbU9VSlZZVmRpS3pORU9VZFBTekJZVHpKTGMwTlRhRVJYTjI5bU1WUXhjbTl6TkdWaFUyZ3dWeTlJVTJreGNpdGFNMDFKYzJsclprOU5VVzFIUnpjaUxDSnlaVzVsZDJGc2QybHVaRzkzSWpveE5EZzBOREExTkRRNExDSnpaWEpwWVd4dWRXMWlaWElpT2pFMU9URXlNVGs1T0RBeE9UWXpOREVzSW1WNGNHbHlZWFJwYjI0aU9qRTBPRFUxTWpnMk5EZ3NJbk5sY1hWbGJtTmxiblZ0WW1WeUlqbzRmUT09In0sInNpZ25hdHVyZSI6IjJNTVNLZ3VKbUtmSlFCRk5hN3Z6bUlaWUdSUHZiL3RaWFBHYytLeWRkZ1U9In17InBheWxvYWQiOiJleUpqYVhCb1pYSjBaWGgwSWpvaU1FTmlkMFJ3YUVseU4yRnNLMVpNVkVKWGFqazFaRWxrZUVkbFFsTnVlRTluZDNSSWFUWnJSelZGUzA1clRrdElZMEZhUVZWRGNqUnlWMUZTWjJFNFEyeFVUa0ZRTVUxV1EwaGphVkkyU0dORmNXVktTMkV4ZVRGa1NsTk5OelJXZDFKdmIwWTFZbmhqY0VGS1FVWmlkRkV5Tkd3M2NYRkllRGQyZW01emIzcFdXRzFDZDFWRGVXVlFia2s0Ym1aVGVITjJNakZMV2pOWlUwWkZRbXRGV2tseWNqSklNamxEWVVKa05GVXJXWGxSV0RkclZHUldTM04zWkdscVNuUnZaMjlITnpVM2VpdFBUak5NSzJsdFFtWXpZV0prU0d0RmIyUlhjbXRGYjFobU5YcHlLemhWVkU1MFJITTBUbTFFUkV4blpERklkRW81Y0ZkSWFuaGtSakpQTjE=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0hAACoG18g0WSeLwKgBBwBQz6CC\/YxRlS\/4VIAQAFdQswAAAQEICq2I1xkfZPdU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0lAACoG18c0WSeLwKgBBwBQz6CC\/YxRlS\/9\/IAQAGJK+gAAAQEICq2I1x8fZPdU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1971{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1242,"pkt":"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","pkt_caplen":1242,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0pAACoG18Y0WSeLwKgBBwBQz6CC\/YxRlTADpIAQAG1FAwAAAQEICq2I1ycfZPeQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1484319049641,"flow_last_seen":1484319049641,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":80,"pkt":"gCqoTGHM5JjWH70UCABFAABCJHQAAP8RE97AqAEHwKgBAcoQADUALkrZBBoBAAABAAAAAAAABGE4MDMEZHNjZwZha2FtYWkDbmV0AAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1484319049641,"flow_last_seen":1484319049641,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"a803.dscg.akamai.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1484319049645,"flow_last_seen":1484319049645,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":80,"pkt":"gCqoTGHM5JjWH70UCABFAABCunsAAEARPNfAqAEHwKgBAcx7ADUALmwlX+cBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1484319049645,"flow_last_seen":1484319049645,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0464{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":112,"pkt":"5JjWH70UgCqoTGHMCABFAABi4UdAAEAR1erAqAEBwKgBBwA1yhAATkFkBBqBgAABAAIAAAAABGE4MDMEZHNjZwZha2FtYWkDbmV0AAABAAHADAABAAEAAAAMAAS4GcwYwAwAAQABAAAADAAEuBnMKA==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1484319049641,"flow_last_seen":1484319049665,"flow_tot_l4_data_len":124,"flow_min_l4_data_len":46,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"a803.dscg.akamai.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.204.24"}}
+0401{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0W0tAACoG18U0WSeLwKgBBwBQz6CC\/YxRlTAJTIAQAHk\/RQAAAQEICq2I1ywfZPeV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1484319049672,"flow_last_seen":1484319049672,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.24","src_port":53153,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAS8NAAEAGqRPAqAEHuBnMGM+hAFBgKjK0AAAAALAC\/\/92\/gAAAgQFtAEDAwUBAQgKH2T36AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0809{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":371,"pkt":"5JjWH70UgCqoTGHMCABFAAFl4UhAAEAR1ObAqAEBwKgBBwA1zHsBUaLnX+eBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAHADAAFAAEAAABiAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAFYABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AHAABAAAAFwAQJiABCHAPAAAAAAAANChyo8BNABwAAQAAABcAECYgAQhwDwAAAAAAADQoMS\/ATQAcAAEAAAAXABAmIAEIcA8AAAAAAAA0KQT4wE0AHAABAAAAFwAQJiABCHAPAAAAAAAANCk7ncBNABwAAQAAABcAECYgAQhwDwAAAAAAADQnRIjATQAcAAEAAAAXABAmIAEIcA8AAAAAAAA0KBwAwE0AHAABAAAAFwAQJiABCHAPAAAAAAAANCh7ccBNABwAAQAAABcAECYgAQhwDwAAAAAAADQoNhw=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1484319049645,"flow_last_seen":1484319049681,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.32.1.8"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1484319049684,"flow_last_seen":1484319049684,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAHF1AAEAGFLrAqAEHNr8RM8+qAbupwyRaAAAAALAC\/\/92fwAAAgQFtAEDAwUBAQgKH2T39AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Lq4GcwYwKgBBwBQz6GV0BcIYCoytaAScSDlwwAAAgQFtAQCCAr\/\/IQ4H2T36AEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0bmdAAEAGhnvAqAEHuBnMGM+hAFBgKjK1ldAXCYAQEBV1gAAAAQEICh9k+AH\/\/IQ4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0690{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":282,"pkt":"gCqoTGHM5JjWH70UCABFAAEMARZAAEAG8vTAqAEHuBnMGM+hAFBgKjK1ldAXCYAYEBWbUgAAAQEICh9k+AP\/\/IQ4R0VUIC90cGEzLzYxNi8yMDQxNzc5NjE2LmJpZiBIVFRQLzEuMQ0KSG9zdDogdHAuYWthbS5uZmx4aW1nLmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogZW4tdXMNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogQXJnby85MDAgQ0ZOZXR3b3JrLzgwOC4yLjE2IERhcndpbi8xNi4zLjANCg0K","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0706{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1484319049672,"flow_last_seen":1484319049703,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":32,"flow_max_l4_data_len":248,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.24","src_port":53153,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"tp.akam.nflximg.com","url":"tp.akam.nflximg.com\/tpa3\/616\/2041779616.bif","code":0,"content_type":"","user_agent":"Argo\/900 CFNetwork\/808.2.16 Darwin\/16.3.0"}}
+0399{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0k1dAADwGZWu4GcwYwKgBBwBQz6GV0BcJYCozjYAQA6uA6gAAAQEICv\/8hF4fZPgD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGRvs2vxEzwKgBBwG7z6pwpjzKqcMkW6ASOJCp2gAAAgQFtAQCCAqtikoKH2T39AEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ddRAAEAGu07AqAEHNr8RM8+qAbupwyRbcKY8y4AQEBUA7QAAAQEICh9k+CqtikoK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1484319049684,"flow_last_seen":1484319049748,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2336{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0v6RAAEAGNT7AqAEHuBnMGM+hAFBgKjONldAiWYAQD9JpFQAAAQEICh9k+E\/\/\/IRw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0dtFAACoG0DE2vxEzwKgBBwG7z6pwpjzLqcMmYIAQAD0OrAAAAQEICq2KShofZPgu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1484319049684,"flow_last_seen":1484319049807,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2374{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wnNAAEAGMm\/AqAEHuBnMGM+hAFBgKjONldAoAYAQEABjBwAAAQEICh9k+If\/\/IRw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1858{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+1159{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":28,"flow_packet_id":7,"flow_first_seen":1484319049684,"flow_last_seen":1484319049850,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}}
+0398{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0gRRAAEAGsA7AqAEHNr8RM8+qAbupwyZgcKZGq4AQD970xAAAAQEICh9k+JOtikob","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":192,"pkt":"gCqoTGHM5JjWH70UCABFAACyH1FAAEAGEVTAqAEHNr8RM8+qAbupwyZgcKZGq4AYEAAQowAAAQEICh9k+KWtikobFgMDAEYQAABCQQQfYD25\/KwRR3+my6lnfom2FqKuJaefw3HGqX7VTIHzTcaXwh+XHlvD1RX0FYZWSNcNtgMj2\/JKNd8kl+d5S+7xFAMDAAEBFgMDACgSOyL7fXv2U5F5ul\/OdforavWhvK4szhiVp1Js34unbcZnZAn9MmEJ","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXck1tAADwGX7+4GcwYwKgBBwBQz6GV0CgBYCozjYAQA6vlEgAAAQEICv\/8hHAfZPgDKD\/qxn0qaJwuaGf3S5u5BEA5LQaR9M79aqtbaO4gku7n7m0VSDIQrMMdwX+FGQ1H8I++5DuXcADbA2NeF44ORMCcdzb0ZLw\/hCQkW1007BWy505H\/wChtSWaWzgnUNBzY8E6on\/XwpqVica9DDf3SgOGYIc7lsfnXv2rOd1dxgbnXXrW+t5ZmwhjAUaVfHQefQmhJrtWeWNYg+ttIbs4YZoyBwVXYWOKzdTNJnyc\/wA6t\/bl4uPv5d9\/jPSqIobS5+7igkaVTjlLGQ2rwJzg+lRuoII2KCyljZPjEmpTuO7yFGaFi\/0Jb2hu9RIupF8g1SX2hvsbXMhHyzR8c0dpweKPlkLErayU7yx+vdSLhzBOM2UbYkKyA5jjPTOd9t\/5Us1V0NwarY3HF+Ki0F1iYwZxzDGCv1qk+012Ohh8sxCreJ8TaKJknR2ViV0ou4BpAptJZQR7wv8Al0D+J601L9QpJrSY8+01wRgpbsfxGL+tdHtNPkZjt8dDmPp+dVPwa0TS0sjJJJHrWHOGVfHYH6Vy89nVtAF95iLkK+JH0nBHhTUkxOE19L29pJtj7raEEbYz+maj9o5Cd7G2Hq386XW9nZS3QtJHMcpzly3YG2Rv4n5UHeWqW0iKsuok9AQcCqUkQ1KrCpmmiljhmSItNlI8Rq2T5DNdU3saAakSQEf7uYwGPn55o9eEyNjiUsja40LBJSGyO4AY7NCsRLPzSmHG4wdqyy+HRiyZuC8mmSzYadmkddJB8MULPxCz4ZL9zmeR2yyrIy\/XbrTawiub2V4o3DS6WZOY2wP8qsn9m1vFNtLeWaXEQAZdJBPf4dOnSi60Jp1aF1lxVLiKYm0IZTnMjN2x3ADPWqZuKqCie7ShnPZwzHVjqMZ6nam8kUdjAsN4trrJOltQbUcbYBonhsTR25kkjg1yjslkBwMfl6Uh1\/TPzGWVhNyYoMgHQVI0eI8CaLLAjGc5qm8knkuZLU2VvmTDSyRP2f8AVg\/D8qoilAvTamVpCp\/cAywPTHjUs0g60F8OFzdTSwW50tGFDgMB16GjrjiUlqsdxatJzn1KURt3IOMn5DP0qpIobS4nEccyzTJpYM6gKPEYO369agIOHwKzSRyiRd9S7fTei0w2kWRXV4lkHeJTCBj3c7kZ3O5HXx376Em4lZy6fc+DQSncMGQjB\/6TV5vrOSOSTTJAEViXjbB09Tt30FJfy28csfDyXjzq67BiBn02ptUTdko77hb\/AOLwl0kXqi3LKP517mWbxmUPdQIuyrF96v1OMGgWQ3Ukc1xyzcooGXcsp69R65qU8lpHDoa3mCaSZkjcqjH8QGdgR45qbS0PGXoU93cJFptw80TgHmNtt5+FKX99a3bDAoWOyvkk5+VTiu7YxaLeUyKgykLQANvv17wMmrNUvEFaDkcshRhuymPPZf608qJe\/pZHb8auGRlspTp6HT\/OiJuE8b0rmynEZG\/LRcjyG9Cxe0vHLe3NlJdyLHsiSbFxg7YbHStVwX2wur+Q2t0ltbzptqdTiQ47vPvxSc2vgRUZasysnCL+Mc73a4iIGoZh3BHjgdKIhvLeDXmZodaA6hER3YOe7rWv4tx654faiYS2kmXC6QjZwc+FXHh0UtqDK9rhlBIEWQM+vnU5Wtmq46ejLWnEQp7cNjeKAdWhcHyJG2PSjZuMwWwXXwWxfPwkSs2PnQNrYRcRaSWGW3geF9K\/Eur0PdQ16r27CO4gjkQuCTG+Djvp\/RU6Ln9oQo0xcFjAX8OCoHkDS244rcz3SzJaOksZDBixBX5bii7W\/wB9AtLQuVxidTuPWrBa6rka7O3thGwdWj1Nv5rnaqtGeLfjBrWeRNdzLbx3EIIUgh+yTsB2SCD1oa9M8j6re1RNbEcuIMDk92DWj4p7T8S4nEIGNuJXZkDJEEaQA4zvt37d\/hQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABndtRAACoGz\/s2vxEzwKgBBwG7z6pwpkarqcMm3oAYAD1KPQAAAQEICq2KSjofZPilFAMDAAEBFgMDACjI6ifN7EnoEJD8HlbkNvF9HHNjPw3kVjPyx0WOTXQpL67Po+a\/gEhL","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0HbdAAEAGE2zAqAEHNr8RM8+qAbupwybecKZG3oAQD\/7ziwAAAQEICh9k+Nytiko6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAur9AAEAGOhfAqAEHuBnMGM+hAFBgKjONldAtqbAQEACPBgAAAQEICh9k+N3\/\/IRwAQEFCpXQM1GV0Dj5","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1756{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1063,"pkt":"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","pkt_caplen":1063,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":120,"pkt":"5JjWH70UgCqoTGHMCABFIABqdtVAACoGz\/c2vxEzwKgBBwG7z6pwpkbeqcMqw4AYAEVLOAAAAQEICq2KSkgfZPjeFwMDADHI6ifN7EnoEZm4ktuCEJnmX+pRIZKFyTV3rO219Ve9as55Z5g6T06DWcfRb3QG9rpP","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Kx5AAEAGBgXAqAEHNr8RM8+qAbupwyrDcKZHFIAQD\/7vLQAAAQEICh9k+RGtikpI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319049,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2378{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1484319050652,"flow_last_seen":1484319050652,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.145","src_port":53163,"dst_port":80,"l4_proto":"tcp"}
+0417{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA2xBAAEAGenHAqAEHF\/YLkc+rAFC8XkCtAAAAALAC\/\/9pzAAAAgQFtAEDAwUBAQgKH2T7jgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmYX9guRwKgBBwBQz6susPTdvF5ArqAS\/\/\/2WQAAAgQFtAEDAwkEAggKRVwbeB9k+44=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0kSxAAEAGxGHAqAEHF\/YLkc+rAFC8XkCuLrD03oAQEBUU+gAAAQEICh9k+6dFXBt4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":422,"pkt":"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","pkt_caplen":422,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1484319050652,"flow_last_seen":1484319050682,"flow_tot_l4_data_len":504,"flow_min_l4_data_len":32,"flow_max_l4_data_len":388,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.145","src_port":53163,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.145\/range\/0-65535?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=5xfYVtna3GdYXL71uNs6DZ-X84Y&random=3930708224","code":0,"content_type":"","user_agent":""}}
+1088{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":581,"pkt":"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","pkt_caplen":581,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wyFAAEAGkmzAqAEHF\/YLkc+rAFC8XkISLrD8iYAQD9gL0wAAAQEICh9k+9RFXBug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0EzFAAEAGQl3AqAEHF\/YLkc+rAFC8XkISLrEH2YAQD9IARwAAAQEICh9k\/BZFXBug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0E\/VAAEAGQZnAqAEHF\/YLkc+rAFC8XkISLrENgYAQEAD6SAAAAQEICh9k\/D5FXBug","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAZAADsGVMAX9guRwKgBBwBQz6susRjRvF5CEoAQCAK59AAAAQEICkVcG6AfZPuqAAAAAABfbAAAvACAAAAAAABc6wAAuACAAAAAAABftgAAvACAAAAAAABgRwAAvACAAAAAAABebgAAvACAAAAAAABgJAAAvACAAAAAAABe+AAAvACAAAAAAABfzgAAvACAAAAAAABfCgAAvACAAAAAAABeIwAAuACAAAAAAABfXwAAvACAAAAAAABffAAAvACAAAAAAABf\/AAAvACAAAAAAABeyAAAvACAAAAAAABfggAAvACAAAAAAABftQAAvACAAAAAAABfyQAAvACAAAAAAABdXwAAuACAAAAAAABfgAAAvACAAAAAAABfjwAAvACAAAAAAABfpAAAvACAAAAAAABfOAAAvACAAAAAAABfnwAAvACAAAAAAABf9AAAvACAAAAAAABfIQAAvACAAAAAAABdtAAAuACAAAAAAABfJwAAvACAAAAAAABgKAAAvACAAAAAAABfaQAAvACAAAAAAABfJAAAvACAAAAAAABfxAAAvACAAAAAAABfUQAAvACAAAAAAABgAwAAvACAAAAAAABc+wAAuACAAAAAAABfqAAAvACAAAAAAABfgwAAvACAAAAAAABfawAAvACAAAAAAABflwAAvACAAAAAAABgPQAAvACAAAAAAABfJAAAvACAAAAAAABfTwAAvACAAAAAAABdmQAAuACAAAAAAABhPQAAvACAAAAAAABeiQAAvACAAAAAAABfAAAAvACAAAAAAABfqgAAvACAAAAAAABfxQAAvACAAAAAAABgigAAvACAAAAAAABdzAAAvACAAAAAAABeJgAAuACAAAAAAABfXgAAvACAAAAAAABfWgAAvACAAAAAAABfsAAAvACAAAAAAABfLAAAvACAAAAAAABfggAAvACAAAAAAABgFQAAvACAAAAAAABfNQAAvACAAAAAAABdcQAAuACAAAAAAABfhAAAvACAAAAAAABgTgAAvACAAAAAAABfHQAAvACAAAAAAABfowAAvACAAAAAAABfIQAAvACAAAAAAABffgAAvACAAAAAAABhqwAAvACAAAAAAABbXQAAuACAAAAAAABfmQAAvACAAAAAAABgWAAAvACAAAAAAABffgAAvACAAAAAAABfDwAAvACAAAAAAABgrQAAvACAAAAAAABeOgAAvACAAAAAAABf7QAAvACAAAAAAABdQgAAuACAAAAAAABfagAAvACAAAAAAABfgwAAvACAAAAAAABfawAAvACAAAAAAABgVwAAvACAAAAAAABgHwAAvACAAAAAAABeeQAAvACAAAAAAABhCwAAvACAAAAAAABcpwAAuACAAAAAAABemQAAvACAAAAAAABgGQAAvACAAAAAAABfVgAAvACAAAAAAABfyAAAvACAAAAAAABfWQAAvACAAAAAAABfSgAAvACAAAAAAABhgAAAvACAAAAAAABbVgAAuACAAAAAAABgBgAAvACAAAAAAABfQwAAvACAAAAAAABf\/wAAvACAAAAAAABfbQAAvACAAAAAAABfUAAAvACAAAAAAABfswAAvACAAAAAAABfGAAAvACAAAAAAABfqQAAuACAAAAAAABeKQAAvACAAAAAAABfrAAAvACAAAAAAABemgAAvACAAAAAAABfhgAAvACAAAAAAABflgAAvACAAAAAAABhHQAAvACAAAAAAABfGAAAvACAAAAAAABdGQAAuACAAAAAAABe5gAAvACAAAAAAABgbQAAvACAAAAAAABeigAAvACAAAAAAABg+QAAvACAAAAAAABfAAAAvACAAAAAAABgSAAAvACAAAAAAABeGgAAvACAAAAAAABdmgAAuACAAAAAAABgKAAAvACAAAAAAABevAAAvACAAAAAAABgFQAAvACAAAAAAABe9gAAvACAAAAAAABfnAAAvACAAAAAAABftQAAvACAAAAAAABf8wA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319050,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAdAADsGVL8X9guRwKgBBwBQz6susR55vF5CEoAQCAK9bwAAAQEICkVcG6AfZPuqALwAgAAAAAAAXP8AALgAgAAAAAAAX3QAALwAgAAAAAAAYLIAALwAgAAAAAAAXlMAALwAgAAAAAAAX6kAALwAgAAAAAAAX9IAALwAgAAAAAAAXyAAALwAgAAAAAAAX7wAALwAgAAAAAAAXeYAALgAgAAAAAAAXxkAALwAgAAAAAAAYZwAALwAgAAAAAAAXjsAALwAgAAAAAAAXrEAALwAgAAAAAAAYXQAALwAgAAAAAAAXkEAALwAgAAAAAAAXv4AALwAgAAAAAAAX0QAALgAgAAAAAAAXeEAALwAgAAAAAAAX6QAALwAgAAAAAAAX1gAALwAgAAAAAAAYKwAALwAgAAAAAAAXtAAALwAgAAAAAAAYB0AALwAgAAAAAAAXpIAALwAgAAAAAAAXlsAALgAgAAAAAAAXvoAALwAgAAAAAAAXzwAALwAgAAAAAAAYHEAALwAgAAAAAAAXysAALwAgAAAAAAAX+sAALwAgAAAAAAAXoQAALwAgAAAAAAAYCoAALwAgAAAAAAAXW8AALgAgAAAAAAAX5gAALwAgAAAAAAAXu8AALwAgAAAAAAAYGYAALwAgAAAAAAAX\/AAALwAgAAAAAAAXpwAALwAgAAAAAAAYEoAALwAgAAAAAAAXqEAALwAgAAAAAAAXVMAALgAgAAAAAAAYAQAALwAgAAAAAAAX+8AALwAgAAAAAAAXsIAALwAgAAAAAAAX80AALwAgAAAAAAAXzMAALwAgAAAAAAAX+oAALwAgAAAAAAAYAQAALwAgAAAAAAAXfcAALgAgAAAAAAAXpwAALwAgAAAAAAAX8MAALwAgAAAAAAAX9gAALwAgAAAAAAAXqwAALwAgAAAAAAAYIAAALwAgAAAAAAAXpUAALwAgAAAAAAAX7oAALwAgAAAAAAAXZgAALgAgAAAAAAAX7gAALwAgAAAAAAAX1wAALwAgAAAAAAAYCIAALwAgAAAAAAAXuQAALwAgAAAAAAAX3QAALwAgAAAAAAAX8IAALwAgAAAAAAAYD0AALwAgAAAAAAAXMYAALgAgAAAAAAAX2QAALwAgAAAAAAAX4UAALwAgAAAAAAAX\/wAALwAgAAAAAAAX5QAALwAgAAAAAAAXvgAALwAgAAAAAAAX30AALwAgAAAAAAAYREAALwAgAAAAAAAXBIAALgAgAAAAAAAX60AALwAgAAAAAAAX0gAALwAgAAAAAAAX5YAALwAgAAAAAAAX8UAALwAgAAAAAAAYNoAALwAgAAAAAAAXgsAALwAgAAAAAAAX88AALwAgAAAAAAAXsEAALgAgAAAAAAAXnIAALwAgAAAAAAAX2kAALwAgAAAAAAAX7QAALwAgAAAAAAAX9gAALwAgAAAAAAAYEIAALwAgAAAAAAAXpYAALwAgAAAAAAAX2IAALwAgAAAAAAAXSAAALgAgAAAAAAAX6kAALwAgAAAAAAAYGEAALwAgAAAAAAAXt8AALwAgAAAAAAAX\/oAALwAgAAAAAAAX8sAALwAgAAAAAAAX4UAALwAgAAAAAAAXxIAALwAgAAAAAAAXcIAALgAgAAAAAAAXwAAALwAgAAAAAAAYBoAALwAgAAAAAAAXvQAALwAgAAAAAAAX\/oAALwAgAAAAAAAYCIAALwAgAAAAAAAXlcAALwAgAAAAAAAYCkAALwAgAAAAAAAXRIAALgAgAAAAAAAX+EAALwAgAAAAAAAXykAALwAgAAAAAAAX90AALwAgAAAAAAAX50AALwAgAAAAAAAYOQAALwAgAAAAAAAXqEAALwAgAAAAAAAXtEAALwAgAAAAAAAXeMAALgAgAAAAAAAX2QAALwAgAAAAAAAX1sAALwAgAAAAAAAX8sAALwAgAAAAAAAXuYAALwAgAAAAAAAYCkAALwAgAAAAAAAX4MAALwAgAAAAAAAX8IAALwAgAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319051,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1484319052216,"flow_last_seen":1484319052216,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.10.139","src_port":53164,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAN3hAAEAGHxDAqAEHF\/YKi8+sAFBgdy0VAAAAALAC\/\/\/UZQAAAgQFtAEDAwUBAQgKH2UBeQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGW2wX9gqLwKgBBwBQz6xlmlqWYHctFqAS\/\/8JBgAAAgQFtAEDAwkEAggKQI7bkB9lAXk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0JFZAAEAGMj7AqAEHF\/YKi8+sAFBgdy0WZZpal4AQEBUnrAAAAQEICh9lAYxAjtuQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0879{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":422,"pkt":"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","pkt_caplen":422,"pkt_type":2048,"pkt_ipoffset":14}
+0890{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1484319052216,"flow_last_seen":1484319052242,"flow_tot_l4_data_len":504,"flow_min_l4_data_len":32,"flow_max_l4_data_len":388,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.10.139","src_port":53164,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.10.139\/range\/0-65535?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=-djGXIcbFBNzyfugqEWcrgtCpyY&random=3407360776","code":0,"content_type":"","user_agent":""}}
+1089{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":582,"pkt":"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","pkt_caplen":582,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0vaRAAEAGmO\/AqAEHF\/YKi8+sAFBgdy56ZZpiQ4AQD9gekAAAAQEICh9lAbJAjtuz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qi5AAEAGrGXAqAEHF\/YKi8+sAFBgdy56ZZptk4AQD9ITOAAAAQEICh9lAb9Ajtu0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0wjVAAEAGlF7AqAEHF\/YKi8+sAFBgdy56ZZpzO4AQEAANTgAAAQEICh9lAdNAjtu0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0\/FRAAEAGWj\/AqAEHF\/YKi8+sAFBgdy56ZZp444AQEAAHNQAAAQEICh9lAkRAjtu0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAdAADsGVcUX9gqLwKgBBwBQz6xlmoQzYHcueoAQCALQIgAAAQEICkCO27QfZQGRALwAgAAAAAAAXP8AALgAgAAAAAAAX3QAALwAgAAAAAAAYLIAALwAgAAAAAAAXlMAALwAgAAAAAAAX6kAALwAgAAAAAAAX9IAALwAgAAAAAAAXyAAALwAgAAAAAAAX7wAALwAgAAAAAAAXeYAALgAgAAAAAAAXxkAALwAgAAAAAAAYZwAALwAgAAAAAAAXjsAALwAgAAAAAAAXrEAALwAgAAAAAAAYXQAALwAgAAAAAAAXkEAALwAgAAAAAAAXv4AALwAgAAAAAAAX0QAALgAgAAAAAAAXeEAALwAgAAAAAAAX6QAALwAgAAAAAAAX1gAALwAgAAAAAAAYKwAALwAgAAAAAAAXtAAALwAgAAAAAAAYB0AALwAgAAAAAAAXpIAALwAgAAAAAAAXlsAALgAgAAAAAAAXvoAALwAgAAAAAAAXzwAALwAgAAAAAAAYHEAALwAgAAAAAAAXysAALwAgAAAAAAAX+sAALwAgAAAAAAAXoQAALwAgAAAAAAAYCoAALwAgAAAAAAAXW8AALgAgAAAAAAAX5gAALwAgAAAAAAAXu8AALwAgAAAAAAAYGYAALwAgAAAAAAAX\/AAALwAgAAAAAAAXpwAALwAgAAAAAAAYEoAALwAgAAAAAAAXqEAALwAgAAAAAAAXVMAALgAgAAAAAAAYAQAALwAgAAAAAAAX+8AALwAgAAAAAAAXsIAALwAgAAAAAAAX80AALwAgAAAAAAAXzMAALwAgAAAAAAAX+oAALwAgAAAAAAAYAQAALwAgAAAAAAAXfcAALgAgAAAAAAAXpwAALwAgAAAAAAAX8MAALwAgAAAAAAAX9gAALwAgAAAAAAAXqwAALwAgAAAAAAAYIAAALwAgAAAAAAAXpUAALwAgAAAAAAAX7oAALwAgAAAAAAAXZgAALgAgAAAAAAAX7gAALwAgAAAAAAAX1wAALwAgAAAAAAAYCIAALwAgAAAAAAAXuQAALwAgAAAAAAAX3QAALwAgAAAAAAAX8IAALwAgAAAAAAAYD0AALwAgAAAAAAAXMYAALgAgAAAAAAAX2QAALwAgAAAAAAAX4UAALwAgAAAAAAAX\/wAALwAgAAAAAAAX5QAALwAgAAAAAAAXvgAALwAgAAAAAAAX30AALwAgAAAAAAAYREAALwAgAAAAAAAXBIAALgAgAAAAAAAX60AALwAgAAAAAAAX0gAALwAgAAAAAAAX5YAALwAgAAAAAAAX8UAALwAgAAAAAAAYNoAALwAgAAAAAAAXgsAALwAgAAAAAAAX88AALwAgAAAAAAAXsEAALgAgAAAAAAAXnIAALwAgAAAAAAAX2kAALwAgAAAAAAAX7QAALwAgAAAAAAAX9gAALwAgAAAAAAAYEIAALwAgAAAAAAAXpYAALwAgAAAAAAAX2IAALwAgAAAAAAAXSAAALgAgAAAAAAAX6kAALwAgAAAAAAAYGEAALwAgAAAAAAAXt8AALwAgAAAAAAAX\/oAALwAgAAAAAAAX8sAALwAgAAAAAAAX4UAALwAgAAAAAAAXxIAALwAgAAAAAAAXcIAALgAgAAAAAAAXwAAALwAgAAAAAAAYBoAALwAgAAAAAAAXvQAALwAgAAAAAAAX\/oAALwAgAAAAAAAYCIAALwAgAAAAAAAXlcAALwAgAAAAAAAYCkAALwAgAAAAAAAXRIAALgAgAAAAAAAX+EAALwAgAAAAAAAXykAALwAgAAAAAAAX90AALwAgAAAAAAAX50AALwAgAAAAAAAYOQAALwAgAAAAAAAXqEAALwAgAAAAAAAXtEAALwAgAAAAAAAXeMAALgAgAAAAAAAX2QAALwAgAAAAAAAX1sAALwAgAAAAAAAX8sAALwAgAAAAAAAXuYAALwAgAAAAAAAYCkAALwAgAAAAAAAX4MAALwAgAAAAAAAX8IAALwAgAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319052,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWRnEAAAERwTzAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319053,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZBpYAAAERARXAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1484319054101,"flow_last_seen":1484319054101,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53171,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA9bFAAEAGZ9XAqAEHF\/YDjM+zAFBtwXYMAAAAALAC\/\/99\/AAAAgQFtAEDAwUBAQgKH2UImQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADgGZWsX9gOMwKgBBwBQz7OFwt93bcF2DaAS\/\/\/aJAAAAgQFtAEDAwkEAggKhKDK7B9lCJk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0mQ1AAEAGxIXAqAEHF\/YDjM+zAFBtwXYNhcLfeIAQEBX4vQAAAQEICh9lCLmEoMrs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0874{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":420,"pkt":"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","pkt_caplen":420,"pkt_type":2048,"pkt_ipoffset":14}
+0887{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":31,"flow_packet_id":4,"flow_first_seen":1484319054101,"flow_last_seen":1484319054139,"flow_tot_l4_data_len":502,"flow_min_l4_data_len":32,"flow_max_l4_data_len":386,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53171,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.3.140\/range\/0-65535?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=-8u4vlcPuFqcOLnLyb9DDtK-bB4&random=357509657","code":0,"content_type":"","user_agent":""}}
+1093{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0QRlAAEAGHHrAqAEHF\/YDjM+zAFBtwXdvhcLnJ4AQD9jvkAAAAQEICh9lCOaEoMsY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0IAtAAEAGPYjAqAEHF\/YDjM+zAFBtwXdvhcLyd4AQD9LkNQAAAQEICh9lCPWEoMsa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0175AAEAGhdTAqAEHF\/YDjM+zAFBtwXdvhcL4H4AQEADeUQAAAQEICh9lCQOEoMsa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":31,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":31,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":31,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319054,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ouxAAEAGuqbAqAEHF\/YDjM+zAFBtwXdvhcMDb4AQD9LTFgAAAQEICh9lCRyEoMsa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1484319056204,"flow_last_seen":1484319056204,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53172,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAfy9AAEAG1l7AqAEHF\/YLhc+0AFDwxwoWAAAAALAC\/\/9XEAAAAgQFtAEDAwUBAQgKH2UQewAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1484319056210,"flow_last_seen":1484319056210,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53173,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAc11AAEAG4jDAqAEHF\/YLhc+1AFCjZhjfAAAAALAC\/\/+VoQAAAgQFtAEDAwUBAQgKH2UQgQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1484319056214,"flow_last_seen":1484319056214,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53174,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAlQtAAEAGwHrAqAEHF\/YLjc+2AFBDrGT6AAAAALAC\/\/+pMwAAAgQFtAEDAwUBAQgKH2UQhQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWnIX9guFwKgBBwBQz7RnATKV8McKF6AS\/\/8JWwAAAgQFtAEDAwkEAggKNWmPpR9lEHs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0oIhAAEAGtRHAqAEHF\/YLhc+0AFDwxwoXZwEyloAQEBUoBwAAAQEICh9lEIg1aY+l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1484319056221,"flow_last_seen":1484319056221,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53175,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAtyBAAEAGnmXAqAEHF\/YLjc+3AFC7qylgAAAAALAC\/\/9syQAAAgQFtAEDAwUBAQgKH2UQiQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1484319056204,"flow_last_seen":1484319056222,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53172,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.133\/range\/0-65535?o=AQEfKq2oMrLRiWL1ouVaJpeQLBWjGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=JfEef80K02ynIjLLoi-HZB1uQ10&random=2473336513","code":0,"content_type":"","user_agent":""}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1484319056232,"flow_last_seen":1484319056232,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53176,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA7BpAAEAGaWvAqAEHF\/YLjc+4AFBql8CVAAAAALAC\/\/8mpAAAAgQFtAEDAwUBAQgKH2UQjAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1484319056233,"flow_last_seen":1484319056233,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53177,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABALEhAAEAGKT7AqAEHF\/YLjc+5AFBMFfUEAAAAALAC\/\/8QsgAAAgQFtAEDAwUBAQgKH2UQkAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1484319056233,"flow_last_seen":1484319056233,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53178,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABACXBAAEAGTBbAqAEHF\/YLjc+6AFDVkM0AAAAAALAC\/\/+vNgAAAgQFtAEDAwUBAQgKH2UQkwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWnIX9guFwKgBBwBQz7VYH\/mqo2YY4KAS\/\/\/lFwAAAgQFtAEDAwkEAggKL5BAHx9lEIE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7YrOmTYQ6xk+6AS\/\/\/4+gAAAgQFtAEDAwkEAggKJ9gJPh9lEIU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1484319056234,"flow_last_seen":1484319056234,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53179,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABATZFAAEAGB\/XAqAEHF\/YLjc+7AFDfu3VVAAAAALAC\/\/\/8sgAAAgQFtAEDAwUBAQgKH2UQlgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA09NVAAEAGYMTAqAEHF\/YLhc+1AFCjZhjgWB\/5q4AQEBUDvAAAAQEICh9lEJYvkEAf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0j6xAAEAGxeXAqAEHF\/YLjc+2AFBDrGT7Kzpk2YAQEBUXoQAAAQEICh9lEJgn2Ak+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7dWBL6lu6spYaAS\/\/\/t4QAAAgQFtAEDAwkEAggKuIfCpR9lEIk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Xt9AAEAG9rLAqAEHF\/YLjc+3AFC7qylhVgS+poAQEBUMigAAAQEICh9lEJq4h8Kl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1484319056241,"flow_last_seen":1484319056241,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53180,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAWzRAAEAG+lHAqAEHF\/YLjc+8AFAt4\/K3AAAAALAC\/\/8xJAAAAgQFtAEDAwUBAQgKH2UQmgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1484319056214,"flow_last_seen":1484319056241,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53174,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJpmQIRekGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThrvnlHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=mQfOf90-RY2Gd2ii20KJpCcYQVk&random=1345646229","code":0,"content_type":"","user_agent":""}}
+0879{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0891{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1484319056210,"flow_last_seen":1484319056253,"flow_tot_l4_data_len":505,"flow_min_l4_data_len":32,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53173,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.133\/range\/0-65535?o=AQEfKq2oMrLRiWL1ouVaJZ2bLBChGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_ngHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=SixKQmLLJNvShj-pfML-2h4QaqQ&random=727666104","code":0,"content_type":"","user_agent":""}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1484319056264,"flow_last_seen":1484319056264,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53181,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAgCRAAEAG1WHAqAEHF\/YLjc+9AFCAerrsAAAAALAC\/\/8WUwAAAgQFtAEDAwUBAQgKH2UQngAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1484319056264,"flow_last_seen":1484319056264,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53182,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA6tRAAEAGarHAqAEHF\/YLjc++AFBtOQm6AAAAALAC\/\/\/axQAAAgQFtAEDAwUBAQgKH2UQngAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0878{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":423,"pkt":"gCqoTGHM5JjWH70UCABFAAGZg0NAAEAG0OnAqAEHF\/YLjc+3AFC7qylhVgS+poAYEBUzwQAAAQEICh9lEJ64h8KlR0VUIC9yYW5nZS8wLTY1NTM1P289QVFFZktxMm9NckxSaVdMMnB1TlFKSjJUTGh1aUdMalNzZXUyM1YySFg2a0lpVTlKcGJDYUJ4eGFJb3oyMXFRTkt1RFVhT0lad2RUbHgyM0RNVnhhYmJDd212RWx1aXBEVzJ0dkZNbGhNUnR3ZGhoVmxidjlLR0ZhYml1NUtIMFNseDBWak9LX3d6VGhwUDdsSGhXQTRrVzlnYXlZRVd0ak5OS2Umdj0zJmU9MTQ4NDM0Nzg1MCZ0PURoMjc4dTJVcEFwT0NHVWo1UnhWOGF6TldYOCZyYW5kb209MzIzNzY1OTUwIEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTQxDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUVuY29kaW5nOiBkZWZsYXRlLCBnemlwDQpVc2VyLUFnZW50OiBuZXRmbGl4LWlvcy1hcHANCg0K","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0891{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1484319056221,"flow_last_seen":1484319056264,"flow_tot_l4_data_len":505,"flow_min_l4_data_len":32,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53175,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJ2TLhuiGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpP7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=Dh278u2UpApOCGUj5RxV8azNWX8&random=323765950","code":0,"content_type":"","user_agent":""}}
+1093{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7vga1YT37t1VqAS\/\/\/ATQAAAgQFtAEDAwkEAggKs1tjeh9lEJY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7h\/u26MapfAlqAS\/\/8KPAAAAgQFtAEDAwkEAggKFFAqwB9lEIw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7qJ1p961ZDNAaAS\/\/87aAAAAgQFtAEDAwkEAggKTYEN7B9lEJM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7nPaH08TBX1BaAS\/\/\/55gAAAgQFtAEDAwkEAggKNK+mZh9lEJA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0QtJAAEAGEsDAqAEHF\/YLjc+7AFDfu3VW4GtWFIAQEBXe3gAAAQEICh9lEL6zW2N6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0gLJAAEAG1N\/AqAEHF\/YLjc+4AFBql8CWf7tujYAQEBUowwAAAQEICh9lEL4UUCrA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0s8BAAEAGodHAqAEHF\/YLjc+6AFDVkM0Bidafe4AQEBVZ9gAAAQEICh9lEL5NgQ3s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0AZpAAEAGU\/jAqAEHF\/YLjc+5AFBMFfUFz2h9PYAQEBUYcgAAAQEICh9lEL40r6Zm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0fi9AAEAG12rAqAEHF\/YLhc+0AFDwxwt9ZwE6RIAQD9ge3AAAAQEICh9lEL81aY\/C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":39,"flow_packet_id":4,"flow_first_seen":1484319056234,"flow_last_seen":1484319056281,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53179,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJiXLBugGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpPflHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=JqTg0NiANIn4-aRwn3uKtWdoQ7M&random=1148970115","code":0,"content_type":"","user_agent":""}}
+0878{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0891{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1484319056233,"flow_last_seen":1484319056292,"flow_tot_l4_data_len":505,"flow_min_l4_data_len":32,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53178,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJmULRajGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpfblHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=zezrDJDQvgO2TiYC1dT3imH4QC8&random=169467304","code":0,"content_type":"","user_agent":""}}
+0882{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":36,"flow_packet_id":4,"flow_first_seen":1484319056232,"flow_last_seen":1484319056292,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53176,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJJqTIRqhGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_vlHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=TnP59JB1wb5UTOCr0m-KQU2kGPo&random=4134731400","code":0,"content_type":"","user_agent":""}}
+0883{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":426,"pkt":"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","pkt_caplen":426,"pkt_type":2048,"pkt_ipoffset":14}
+0894{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1484319056233,"flow_last_seen":1484319056302,"flow_tot_l4_data_len":508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53177,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQIpyTIBGjGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_biCFrUjHWqh5ipQCtzf4OVWQ&v=3&e=1484347850&t=8Z78vL2i9OzihCA3M1LinMYcMY4&random=2386475836","code":0,"content_type":"","user_agent":""}}
+0413{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz7wVYmHmLePyuKAS\/\/9RBgAAAgQFtAEDAwkEAggKED1piB9lEJo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz7YrOmbfQ6xmYYAQCALBcQAAAQEICifYCWMfZRCbAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAARSzwEAAAAAACYloAAAAAGLpHBTQAAAAAAAOd+AAAAABFJ8jsAAAAAAACErQAAYtEAAAAAAAAIDQAAPlxA09pL3VdPKtfkBTJbv6A1AAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAASnV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADSka6sTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4wLgAAAAcbbW9vdgAAAHhtdmhkAQAAAAAAAADSka6xAAAAANKRrrEAmJaAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAr5wc3NoAAAAAJoE8HmYQEKGq5LmW+CIX5UAAAKengIAAAEAAQCUAjwAVwBSAE0ASABFAEEARABFAFIAIAB4AG0AbABuAHMAPQAiAGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBEAFIATQAvADIAMAAwADcALwAwADMALwBQAGwAYQB5AFIAZQBhAGQAeQBIAGUAYQBkAGUAcgAiACAAdgBlAHIAcwBpAG8AbgA9ACIANAAuADAALgAwAC4AMAAiAD4APABEAEEAVABBAD4APABQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsARQBZAEwARQBOAD4AMQA2ADwALwBLAEUAWQBMAEUATgA+ADwAQQBMAEcASQBEAD4AQQBFAFMAQwBUAFIAPAAvAEEATABHAEkARAA+ADwALwBQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsASQBEAD4AQQBBAEEAQQBBAE4AYwBEAG4AUQBFAEEAQQBBAEEAQQBBAEEAQQBBAEEAQQA9AD0APAAvAEsASQBEAD4APABDAEgARQBDAEsAUwBVAE0APgBsAGgAVABwAFkANwBaADIAZABuADgAPQA8AC8AQwBIAEUAQwBLAFMAVQBNAD4APABDAFUAUwBUAE8ATQBBAFQAVABSAEkAQgBVAFQARQBTAD4APABMAGkAdAB0AGwAZQBFAG4AZABpAGEAbgBLAEkARAA+AHQAcgB1AGUAPAAvAEwAaQB0AHQAbABlAEUAbgBkAGkAYQBuAEsASQBEAD4APAAvAEMAVQBTAFQATwBNAEEAVABUAFIASQBCAFUAVABFAFMAPgA8AC8ARABBAFQAQQA+ADwALwBXAFIATQBIAEUAQQBEAEUAUgA+AAAAADRwc3NoAAAAAO3vi6l51krOo8gn3NUdIe0AAAAUCAESEAAAAAAD1wGdAAAAAAAAAAAAAABMcHNzaAAAAAApcB\/kPMdKNIxbrpDHQ5pHAAAALAAAAAQAAAAAA9cBne6+iM7gGgVTeMUcH+S5rk6G\/Iuw0mu4l83ANGhLQQEiAAADIXRyYWsAAABodGtoZAEAAAcAAAAA0pGusQAAAADSka6xAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAACAAAAAYAAAAAAACxlZHRzAAAAJGVsc3QBAAAAAAAAAQAAAAYukcFNAAAAAAAGXTsAAQAAAAAChW1kaWEAAAAsbWRoZAEAAAAAAAAA0pGusQAAAADSka6xAJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"5JjWH70UgCqoTGHMCABFIAI6AABAADsGWHQX9guFwKgBBwBQz7VYH\/mro2YaRYAQCAIXVAAAAQEICi+QQFUfZRCbSFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDEzIEphbiAyMDE3IDE0OjUwOjU2IEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkNvbnRlbnQtTGVuZ3RoOiA2NTUzNg0KTGFzdC1Nb2RpZmllZDogVGh1LCAwNiBBdWcgMjAxNSAwODo0OTo0MiBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQpQcmFnbWE6IG5vLWNhY2hlDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNCkFjY2Vzcy1Db250cm9sLUV4cG9zZS1IZWFkZXJzOiBYLVRDUC1JbmZvLFgtU2Vzc2lvbi1JbmZvDQpYLVRDUC1JbmZvOiBoMD0yMTUyNDYxMTY7aDE9MTQwNDMyNTczMztoMj0xNTU5ODI2NzA0O2gzPTE3MDc5MDAxNTQ7aDQ9MTEwODczNTEzNzsNClgtU2Vzc2lvbi1JbmZvOiBhZGRyPTczLjIwMy4xMDcuMjM7cG9ydD01MzE3MzthcmdwPTYuc05jMERYU2Y4VEhFM2Y0eThWdU5sa1RITHNFblExQ0tja0M3dXN3MnZiQQ0KDQo=","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVNIX9guFwKgBBwBQz7VYH\/uxo2YaRYAQCAIdegAAAQEICi+QQGMfZRCbAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAADlYpdAAAAAACYloAAAAAGLpHBTQAAAAAAAOdTAAAAAAOUQMEAAAAAAACEggAAYtEAAAAAAAAH4gAAPlxtG7SMqnuMzaQWqlbZDdrAAAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAATHV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADR5zCyTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4zNTAuAAAABu5tb292AAAAeG12aGQBAAAAAAAAANHnMLgAAAAA0ecwuACYloAAAAAAAAAAAAABAAABAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAAACvnBzc2gAAAAAmgTweZhAQoarkuZb4IhflQAAAp6eAgAAAQABAJQCPABXAFIATQBIAEUAQQBEAEUAUgAgAHgAbQBsAG4AcwA9ACIAaAB0AHQAcAA6AC8ALwBzAGMAaABlAG0AYQBzAC4AbQBpAGMAcgBvAHMAbwBmAHQALgBjAG8AbQAvAEQAUgBNAC8AMgAwADAANwAvADAAMwAvAFAAbABhAHkAUgBlAGEAZAB5AEgAZQBhAGQAZQByACIAIAB2AGUAcgBzAGkAbwBuAD0AIgA0AC4AMAAuADAALgAwACIAPgA8AEQAQQBUAEEAPgA8AFAAUgBPAFQARQBDAFQASQBOAEYATwA+ADwASwBFAFkATABFAE4APgAxADYAPAAvAEsARQBZAEwARQBOAD4APABBAEwARwBJAEQAPgBBAEUAUwBDAFQAUgA8AC8AQQBMAEcASQBEAD4APAAvAFAAUgBPAFQARQBDAFQASQBOAEYATwA+ADwASwBJAEQAPgBBAEEAQQBBAEEATgBjAEQAbgBRAEUAQQBBAEEAQQBBAEEAQQBBAEEAQQBBAD0APQA8AC8ASwBJAEQAPgA8AEMASABFAEMASwBTAFUATQA+AGwAaABUAHAAWQA3AFoAMgBkAG4AOAA9ADwALwBDAEgARQBDAEsAUwBVAE0APgA8AEMAVQBTAFQATwBNAEEAVABUAFIASQBCAFUAVABFAFMAPgA8AEwAaQB0AHQAbABlAEUAbgBkAGkAYQBuAEsASQBEAD4AdAByAHUAZQA8AC8ATABpAHQAdABsAGUARQBuAGQAaQBhAG4ASwBJAEQAPgA8AC8AQwBVAFMAVABPAE0AQQBUAFQAUgBJAEIAVQBUAEUAUwA+ADwALwBEAEEAVABBAD4APAAvAFcAUgBNAEgARQBBAEQARQBSAD4AAAAATHBzc2gAAAAAKXAf5DzHSjSMW66Qx0OaRwAAACwAAAAEAAAAAAPXAZ3uvojO4BoFU3jFHB\/kua5OhvyLsNJruJfNwDRoS0EBIgAAADRwc3NoAAAAAO3vi6l51krOo8gn3NUdIe0AAAAUCAESEAAAAAAD1wGdAAAAAAAAAAAAAAL0dHJhawAAAGh0a2hkAQAABwAAAADR5zC4AAAAANHnMLgAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAQAAAAAHgAAABaAAAAAAChG1kaWEAAAAsbWRoZAEAAAAAAAAA0ecwuAAAAADR5zC4AJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWVkaWEgSGFuZGxlcgAAAAIcbWluZgAAABR2bWhkAAAAAQAAAAAAAAAAAAA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0DEJAAEAGSVDAqAEHF\/YLjc+8AFAt4\/K4FWJh54AQEBVvgQAAAQEICh9lENgQPWmI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA01TNAAEAGgF7AqAEHF\/YLjc+2AFBDrGZhKzpsh4AQD9gOZQAAAQEICh9lENgn2Alj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0883{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":426,"pkt":"gCqoTGHM5JjWH70UCABFAAGcJw9AAEAGLRvAqAEHF\/YLjc+8AFAt4\/K4FWJh54AYEBUJcgAAAQEICh9lENoQPWmIR0VUIC9yYW5nZS8wLTY1NTM1P289QVFFZktxMm9NckxSaVdMMnB1TlFKNXlUTEJDa0dMalNzZXUyM1YySFg2a0lpVTlKcGJDYUJ4eGFJb3oyMXFRTkt1RFVhT0lad2RUbHgyM0RNVnhhYmJDd212RWx1aXBEVzJ0dkZNbGhNUnR3ZGhoVmxidjlLR0ZhYml1NUtIMFNseDBWak9LX3d6VGhwXzNtQ0ZyVWpIV3FoNWlwUUN0emY0T1ZXUSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9cjVqdG5uRWNSOGhEQ2tQSW1mRWlXcVdBaktrJnJhbmRvbT0xODQ2MjM0NTI0IEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTQxDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUVuY29kaW5nOiBkZWZsYXRlLCBnemlwDQpVc2VyLUFnZW50OiBuZXRmbGl4LWlvcy1hcHANCg0K","pkt_caplen":426,"pkt_type":2048,"pkt_ipoffset":14}
+0894{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1484319056241,"flow_last_seen":1484319056314,"flow_tot_l4_data_len":508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53180,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJ5yTLBCkGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_3mCFrUjHWqh5ipQCtzf4OVWQ&v=3&e=1484347850&t=r5jtnnEcR8hDCkPImfEiWqWAjKk&random=1846234524","code":0,"content_type":"","user_agent":""}}
+0400{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ertAAEAG2t7AqAEHF\/YLhc+1AFCjZhpFWCABWYAQD9j6ZQAAAQEICh9lEOAvkEBV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz72N4Tx+gHq67aAS\/\/8YZwAAAgQFtAEDAwkEAggKc9HQqh9lEJ4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz749DprObTkJu6AS\/\/9Z3AAAAgQFtAEDAwkEAggKxO\/1DB9lEJ4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"5JjWH70UgCqoTGHMCABFIAI6AABAADsGWGwX9guNwKgBBwBQz7dWBL6mu6sqxoAQCAIAPQAAAQEICriHwtgfZRCeSFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDEzIEphbiAyMDE3IDE0OjUwOjU2IEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkNvbnRlbnQtTGVuZ3RoOiA2NTUzNg0KTGFzdC1Nb2RpZmllZDogTW9uLCAxNCBEZWMgMjAxNSAxMDo1OTo1NyBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQpQcmFnbWE6IG5vLWNhY2hlDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNCkFjY2Vzcy1Db250cm9sLUV4cG9zZS1IZWFkZXJzOiBYLVRDUC1JbmZvLFgtU2Vzc2lvbi1JbmZvDQpYLVRDUC1JbmZvOiBoMD0zNDEyNDEzNzk2O2gxPTM3MjM0NTkzOTc7aDI9MjEyNTU1Njc3MztoMz0yNTE0MzMyMzA5O2g0PTMwNjc0Mzg0NzsNClgtU2Vzc2lvbi1JbmZvOiBhZGRyPTczLjIwMy4xMDcuMjM7cG9ydD01MzE3NTthcmdwPTYuc05jMERYU2Y4VEhFM2Y0eThWdU5sa1RITHNFblExQ0tja0M3dXN3MnZiQQ0KDQo=","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BrtAAEAGTtfAqAEHF\/YLjc+9AFCAerrtjeE8f4AQEBU20gAAAQEICh9lEOxz0dCq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Fj1AAEAGP1XAqAEHF\/YLjc++AFBtOQm7PQ6az4AQEBV4RwAAAQEICh9lEOzE7\/UM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":425,"pkt":"gCqoTGHM5JjWH70UCABFAAGbxNdAAEAGj1PAqAEHF\/YLjc+9AFCAerrtjeE8f4AYEBVqrAAAAQEICh9lEO5z0dCqR0VUIC9yYW5nZS8wLTY1NTM1P289QVFFZktxMm9NckxSaVdMMnB1TlFMSjJUSUJlcEdMalNzZXUyM1YySFg2a0lpVTlKcGJDYUJ4eGFJb3oyMXFRTkt1RFVhT0lad2RUbHgyM0RNVnhhYmJDd212RWx1aXBEVzJ0dkZNbGhNUnR3ZGhoVmxidjlLR0ZhYml1NUtIMFNseDBWak9LX3d6VGhwUGJpQ0ZyVWpIV3FoNWlwUUN0emY0T1ZXUSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9dFRYdTNjNkZuSnRmaTZ6MElKcDNodzhlRHY4JnJhbmRvbT0xMjk0NTQwNzYgSFRUUC8xLjENCkhvc3Q6IDIzLjI0Ni4xMS4xNDENCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGRlZmxhdGUsIGd6aXANClVzZXItQWdlbnQ6IG5ldGZsaXgtaW9zLWFwcA0KDQo=","pkt_caplen":425,"pkt_type":2048,"pkt_ipoffset":14}
+0893{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1484319056264,"flow_last_seen":1484319056336,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":32,"flow_max_l4_data_len":391,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53181,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQLJ2TIBepGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpPbiCFrUjHWqh5ipQCtzf4OVWQ&v=3&e=1484347850&t=tTXu3c6FnJtfi6z0IJp3hw8eDv8&random=129454076","code":0,"content_type":"","user_agent":""}}
+0883{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":424,"pkt":"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","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1484319056264,"flow_last_seen":1484319056347,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":32,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53182,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"url":"23.246.11.141\/range\/0-65535?o=AQEfKq2oMrLRiWL2puNQJZ2VKhqgGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzTho_flHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=LQ7LyXSnZaXKEHAHaRRHk-S7dKE&random=4209810633","code":0,"content_type":"","user_agent":""}}
+0400{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0kxxAAEAGwnXAqAEHF\/YLjc+3AFC7qyrGVgTGVIAQD9gDJgAAAQEICh9lEPW4h8LY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz7vga1ga37t2vIAQCAIUmAAAAQEICrNbY8EfZRDBAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAAF2qmWAAAAAACYloAAAAAGLpHBTQAAAAAAAOd9AAAAAAXZX84AAAAAAACErAAAYtEAAAAAAAAIDAAAPlwgjAAes9s20dQ7LcTGRwWqAAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAASnV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADSka2WTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4wLgAAAAcabW9vdgAAAHhtdmhkAQAAAAAAAADSka2cAAAAANKRrZwAmJaAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAExwc3NoAAAAAClwH+Q8x0o0jFuukMdDmkcAAAAsAAAABAAAAAAD1wGd7r6IzuAaBVN4xRwf5LmuTob8i7DSa7iXzcA0aEtBASIAAAK+cHNzaAAAAACaBPB5mEBChquS5lvgiF+VAAACnp4CAAABAAEAlAI8AFcAUgBNAEgARQBBAEQARQBSACAAeABtAGwAbgBzAD0AIgBoAHQAdABwADoALwAvAHMAYwBoAGUAbQBhAHMALgBtAGkAYwByAG8AcwBvAGYAdAAuAGMAbwBtAC8ARABSAE0ALwAyADAAMAA3AC8AMAAzAC8AUABsAGEAeQBSAGUAYQBkAHkASABlAGEAZABlAHIAIgAgAHYAZQByAHMAaQBvAG4APQAiADQALgAwAC4AMAAuADAAIgA+ADwARABBAFQAQQA+ADwAUABSAE8AVABFAEMAVABJAE4ARgBPAD4APABLAEUAWQBMAEUATgA+ADEANgA8AC8ASwBFAFkATABFAE4APgA8AEEATABHAEkARAA+AEEARQBTAEMAVABSADwALwBBAEwARwBJAEQAPgA8AC8AUABSAE8AVABFAEMAVABJAE4ARgBPAD4APABLAEkARAA+AEEAQQBBAEEAQQBOAGMARABuAFEARQBBAEEAQQBBAEEAQQBBAEEAQQBBAEEAPQA9ADwALwBLAEkARAA+ADwAQwBIAEUAQwBLAFMAVQBNAD4AbABoAFQAcABZADcAWgAyAGQAbgA4AD0APAAvAEMASABFAEMASwBTAFUATQA+ADwAQwBVAFMAVABPAE0AQQBUAFQAUgBJAEIAVQBUAEUAUwA+ADwATABpAHQAdABsAGUARQBuAGQAaQBhAG4ASwBJAEQAPgB0AHIAdQBlADwALwBMAGkAdAB0AGwAZQBFAG4AZABpAGEAbgBLAEkARAA+ADwALwBDAFUAUwBUAE8ATQBBAFQAVABSAEkAQgBVAFQARQBTAD4APAAvAEQAQQBUAEEAPgA8AC8AVwBSAE0ASABFAEEARABFAFIAPgAAAAA0cHNzaAAAAADt74upedZKzqPIJ9zVHSHtAAAAFAgBEhAAAAAAA9cBnQAAAAAAAAAAAAADIHRyYWsAAABodGtoZAEAAAcAAAAA0pGtnAAAAADSka2cAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAABQAAAAPAAAAAAACxlZHRzAAAAJGVsc3QBAAAAAAAAAQAAAAYukcFNAAAAAAAGXTsAAQAAAAAChG1kaWEAAAAsbWRoZAEAAAAAAAAA0pGtnAAAAADSka2cAJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0hSxAAEAG0GXAqAEHF\/YLjc+7AFDfu3a84GtdwoAQD9jVdAAAAQEICh9lEQuzW2PA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA04AtAAEAGdYbAqAEHF\/YLjc+4AFBql8H8f7t2OoAQD9gfTQAAAQEICh9lERcUUCsH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0WDJAAEAG\/WfAqAEHF\/YLhc+0AFDwxwt9ZwE\/7IAQEAAYlgAAAQEICh9lESM1aY\/U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BUJAAEAGUFDAqAEHF\/YLjc+6AFDVkM5midanKYAQD9hQcgAAAQEICh9lESVNgQ4z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qY1AAEAGrATAqAEHF\/YLjc+5AFBMFfZtz2iE7IAQD9gOzQAAAQEICh9lETw0r6az","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz7wVYmPtLeP0IIAQCAK7IgAAAQEIChA9adofZRDaAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAAaW0thAAAAAACYloAAAAAGLpHBTQAAAAAAAOeCAAAAABpaAZQAAAAAAACEsQAAYtEAAAAAAAAIEQAAPlzUNQQ7q5JMlqdu4FZFaK3pAAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAASnV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADSka7LTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4wLgAAAAcfbW9vdgAAAHhtdmhkAQAAAAAAAADSka7RAAAAANKRrtEAmJaAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAr5wc3NoAAAAAJoE8HmYQEKGq5LmW+CIX5UAAAKengIAAAEAAQCUAjwAVwBSAE0ASABFAEEARABFAFIAIAB4AG0AbABuAHMAPQAiAGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBEAFIATQAvADIAMAAwADcALwAwADMALwBQAGwAYQB5AFIAZQBhAGQAeQBIAGUAYQBkAGUAcgAiACAAdgBlAHIAcwBpAG8AbgA9ACIANAAuADAALgAwAC4AMAAiAD4APABEAEEAVABBAD4APABQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsARQBZAEwARQBOAD4AMQA2ADwALwBLAEUAWQBMAEUATgA+ADwAQQBMAEcASQBEAD4AQQBFAFMAQwBUAFIAPAAvAEEATABHAEkARAA+ADwALwBQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsASQBEAD4AQQBBAEEAQQBBAE4AYwBEAG4AUQBFAEEAQQBBAEEAQQBBAEEAQQBBAEEAQQA9AD0APAAvAEsASQBEAD4APABDAEgARQBDAEsAUwBVAE0APgBsAGgAVABwAFkANwBaADIAZABuADgAPQA8AC8AQwBIAEUAQwBLAFMAVQBNAD4APABDAFUAUwBUAE8ATQBBAFQAVABSAEkAQgBVAFQARQBTAD4APABMAGkAdAB0AGwAZQBFAG4AZABpAGEAbgBLAEkARAA+AHQAcgB1AGUAPAAvAEwAaQB0AHQAbABlAEUAbgBkAGkAYQBuAEsASQBEAD4APAAvAEMAVQBTAFQATwBNAEEAVABUAFIASQBCAFUAVABFAFMAPgA8AC8ARABBAFQAQQA+ADwALwBXAFIATQBIAEUAQQBEAEUAUgA+AAAAAExwc3NoAAAAAClwH+Q8x0o0jFuukMdDmkcAAAAsAAAABAAAAAAD1wGd7r6IzuAaBVN4xRwf5LmuTob8i7DSa7iXzcA0aEtBASIAAAA0cHNzaAAAAADt74upedZKzqPIJ9zVHSHtAAAAFAgBEhAAAAAAA9cBnQAAAAAAAAAAAAADJXRyYWsAAABodGtoZAEAAAcAAAAA0pGu0QAAAADSka7RAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAAC0AAAAeAAAAAAACxlZHRzAAAAJGVsc3QBAAAAAAAAAQAAAAYukcFNAAAAAAAGXTsAAQAAAAACiW1kaWEAAAAsbWRoZAEAAAAAAAAA0pGu0QAAAADSka7RAJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0hGlAAEAG0SjAqAEHF\/YLjc+8AFAt4\/QgFWJplYAQD9hl2gAAAQEICh9lEVQQPWna","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0kwxAAEAGwoXAqAEHF\/YLjc+9AFCAerxUjeFELIAQD9gtGAAAAQEICh9lEYBz0dD5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0yDtAAEAGjVbAqAEHF\/YLjc++AFBtOQshPQ6ifYAQD9hudAAAAQEICh9lEY\/E7\/Vl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA017ZAAEAGfePAqAEHF\/YLhc+1AFCjZhpFWCAHAYAQEADzlQAAAQEICh9lEdIvkEBj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA03WlAAEAGeDDAqAEHF\/YLhc+0AFDwxwt9ZwFFlIAQEAARxAAAAQEICh9lEk01aY\/U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319056,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIH1NAAEAGNivAqAEHF\/YLjc+2AFBDrGZhKzp319AQD6W3JAAAAQEICh9lEzQn2ArsAQEFEis6mccrOp9vKzqDJys6iM8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIpYNAAEAGr\/rAqAEHF\/YLjc+5AFBMFfZtz2iQPNAQD6XbXQAAAQEICh9lE5w0r6i4AQEFEs9orITPaLIsz2iV5M9om4w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABI+\/lAAEAGWYTAqAEHF\/YLjc+5AFBMFfZtz2ibjNAQD6XCawAAAQEICh9lFEU0r6oxAQEFEs9om6TPaKFMz2ishM9osiw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAt2RAAEAGniHAqAEHF\/YLjc+5AFBMFfZtz2ihTLAQD3e4rAAAAQEICh9lFEU0r6oxAQEFCs9orITPaLIs","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAKkdAAEAGKz\/AqAEHF\/YLjc+5AFBMFfZtz2im0LAQD0uzVAAAAQEICh9lFEU0r6oxAQEFCs9orITPaLIs","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ61tAAEAGaiLAqAEHF\/YLhc+0AFDwxwt9ZwFQ5PAQD6Um1AAAAQEICh9lFFA1aZMJAQEFGmcBiXRnAY8cZwF+JGcBg8xnAW0sZwFy1A==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAFu1AAEAGPpnAqAEHF\/YLjc+5AFBMFfZtz2iseLAQD9Ks5AAAAQEICh9lFG00r6pKAQEFCs9orITPaLIs","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA055BAAEAGbgHAqAEHF\/YLjc+5AFBMFfZtz2iyLIAQD9LapwAAAQEICh9lFJA0r6pK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":102,"pkt":"5JjWH70UgCqoTGHMCABFIABYAABAADsGWk4X9guNwKgBBwBQz7nPaLIsTBX2bYAQCAJm6wAAAQEICjSvqnIfZRRtAAAACPzTATF7IIAAAAAABKghATF7IIAAAAAABeFmATF7IIAA","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":1490,"pkt":"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","pkt_caplen":1490,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIAWRAAEAGVBrAqAEHF\/YLjc+3AFC7qyrGVgTXWNAQD3eGBgAAAQEICh9lFR64h8dEAQEFElYE85RWBPc3VgTinFYE6EQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIypdAAEAGiubAqAEHF\/YLjc+3AFC7qyrGVgTdANAQD9J\/vwAAAQEICh9lFTa4h8dwAQEFElYE85RWBPc3VgTinFYE6EQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIcklAAEAG4zTAqAEHF\/YLjc+3AFC7qyrGVgToRNAQD6V6LwAAAQEICh9lFUu4h8dwAQEFElYE4pxWBOKoVgTzlFYE9zc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABArTdAAEAGqE7AqAEHF\/YLjc+3AFC7qyrGVgToaLAQD\/4K5AAAAQEICh9lFV24h8eLAQEFClYE85RWBPc3","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAUShAAEAGBF7AqAEHF\/YLjc+3AFC7qyrGVgTuELAQD9EFUwAAAQEICh9lFV24h8ehAQEFClYE85RWBPc3","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAj+VAAEAGxaDAqAEHF\/YLjc+3AFC7qyrGVgT3N7AQD7b\/uAAAAQEICh9lFWq4h8ehAQEFClYE85RWBPO4","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIjM1AAEAGyLDAqAEHF\/YLjc+2AFBDrGZhKzp9f9AQD9KrlgAAAQEICh9lFXYn2A5jAQEFEis6mccrOp9vKzqDJys6iM8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ3MJAAEAGeLvAqAEHF\/YLhc+1AFCjZhpFWCA56fAQDmj6nQAAAQEICh9lFYIvkEVRAQEFGlggUIlYIFYxWCBnKVggbNFYIFvZWCBhgQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIoM5AAEAGtK\/AqAEHF\/YLjc+2AFBDrGZhKzp9i9AQD\/+rRAAAAQEICh9lFY8n2A5jAQEFEis6mccrOp9vKzqDJys6iM8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQEXFAAEAGRA3AqAEHF\/YLhc+1AFCjZhpFWCBK4fAQD3joaAAAAQEICh9lFZwvkEVkAQEFGlggUIlYIFYxWCBnKVggbNFYIFvZWCBhgQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ1KJAAEAGgNPAqAEHF\/YLjc+8AFAt4\/QgFWJvPfAQD9LogAAAAQEICh9lFasQPW6tAQEFGhVip80VYq11FWKRLRViltUVYnqNFWKANQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQDwZAAEAGRnDAqAEHF\/YLjc+7AFDfu3a84GtpEvAQD6XROgAAAQEICh9lFbOzW2irAQEFGuBraR7ga3Ri4GuhouBrp0rga4Va4GuLAg==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQxrtAAEAGjrrAqAEHF\/YLjc+4AFBql8H8f7uBivAQD6XMOgAAAQEICh9lFb8UUDAcAQEFGn+7gZZ\/u4zaf7u6Gn+7v8J\/u53Sf7ujeg==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQEgJAAEAGQ3TAqAEHF\/YLjc+9AFCAerxUjeFJ1PAQD9LTvAAAAQEICh9lFcxz0dXzAQEFGo3hgmSN4YgMjeFmHI3ha8SN4U98jeFVJA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQdvFAAEAG3oTAqAEHF\/YLjc++AFBtOQshPQ6oJfAQD9LJsAAAAQEICh9lFeTE7\/pmAQEFGj0OqDE9DrN1PQ7gtT0O5l09DsRtPQ7KFQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQBJNAAEAGUOPAqAEHF\/YLjc+8AFAt4\/QgFWJvSfAQD\/\/oAgAAAQEICh9lFfAQPW6tAQEFGhVip80VYq11FWKRLRViltUVYnqNFWKANQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ+m9AAEAGWwbAqAEHF\/YLjc+8AFAt4\/QgFWJ08fAQD9LiXAAAAQEICh9lFfEQPW7XAQEFGhVip80VYq11FWKRLRViltUVYnqNFWKANQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQaslAAEAG6qzAqAEHF\/YLjc+7AFDfu3a84Gt0YvAQD6XLGgAAAQEICh9lFf2zW2jZAQEFGuBraR7ga2664GuhouBrp0rga4Va4GuLAg==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ\/D1AAEAGWTjAqAEHF\/YLjc+6AFDVkM5midayefAQD6WanQAAAQEICh9lFgxNgROOAQEFGonWsoWJ1r3JidbrCYnW8LGJ1s7BidbUaQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQAghAAEAGU27AqAEHF\/YLjc+4AFBql8H8f7uM2vAQD6XGKgAAAQEICh9lFhcUUDAsAQEFGn+7gZZ\/u4cyf7u6Gn+7v8J\/u53Sf7ujeg==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQOLVAAEAGHMHAqAEHF\/YLjc+9AFCAerxUjeFJ4PAQD\/\/TKwAAAQEICh9lFiRz0dXzAQEFGo3hgmSN4YgMjeFmHI3ha8SN4U98jeFVJA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ8mdAAEAGYw7AqAEHF\/YLjc+9AFCAerxUjeFVJPAQD6XNzAAAAQEICh9lFiRz0dYEAQEFGo3hT3yN4U+IjeGCZI3hiAyN4WYcjeFrxA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIJxNAAEAGLmvAqAEHF\/YLjc++AFBtOQshPQ6zddAQD6W0CQAAAQEICh9lFjzE7\/pmAQEFEj0O4LU9DuZdPQ7EbT0OyhU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIBixAAEAGT1LAqAEHF\/YLjc++AFBtOQshPQ6zgdAQD\/+zhwAAAQEICh9lFj\/E7\/p\/AQEFEj0O4LU9DuZdPQ7EbT0OyhU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIuMlAAEAGnLTAqAEHF\/YLjc++AFBtOQshPQ65KdAQD9KtowAAAQEICh9lFkrE7\/rdAQEFEj0O4LU9DuZdPQ7EbT0OyhU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQDm5AAEAGRwjAqAEHF\/YLjc+6AFDVkM5mida9yfAQD6WUdQAAAQEICh9lFm9NgROrAQEFGonWsoWJ1rghidbrCYnW8LGJ1s7BidbUaQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIOPZAAEAGHIjAqAEHF\/YLjc+7AFDfu3a84Gt0etAQD\/+C6wAAAQEICh9lFnuzW2jZAQEFEuBroaLga6dK4GuFWuBriwI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIOSBAAEAGHF7AqAEHF\/YLjc+7AFDfu3a84Gt6ItAQD9J9HwAAAQEICh9lFnuzW2kqAQEFEuBroaLga6dK4GuFWuBriwI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABILgdAAEAGJ3fAqAEHF\/YLjc+4AFBql8H8f7uM8tAQD\/\/tlwAAAQEICh9lFogUUDAsAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIJ1pAAEAGLiTAqAEHF\/YLjc+4AFBql8H8f7uSmtAQD9LnvgAAAQEICh9lFogUUDCKAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIBidAAEAGT1fAqAEHF\/YLjc++AFBtOQshPQ6+0dAQD9KnmAAAAQEICh9lFq3E7\/rdAQEFEj0O4LU9DuZdPQ7EbT0OyhU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQiwdAAEAGym7AqAEHF\/YLjc+8AFAt4\/QgFWKATfAQD6W+0QAAAQEICh9lFrkQPW+bAQEFGhVihfUVYoudFWKnzRVirXUVYpEtFWKW1Q==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQWo1AAEAG+ujAqAEHF\/YLjc+8AFAt4\/QgFWKAWfAQD\/++XwAAAQEICh9lFsUQPW+bAQEFGhVihfUVYoudFWKnzRVirXUVYpEtFWKW1Q==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIVj5AAEAG\/z\/AqAEHF\/YLjc+6AFDVkM5mida94dAQD\/8yEgAAAQEICh9lFsVNgROrAQEFEonW6wmJ1vCxidbOwYnW1Gk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIkl9AAEAGwx7AqAEHF\/YLjc+6AFDVkM5midbDidAQD9IsMAAAAQEICh9lFsZNgRQRAQEFEonW6wmJ1vCxidbOwYnW1Gk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAO7BAAEAGGdbAqAEHF\/YLjc+3AFC7qyrGVgT\/LLAQD9HjdgAAAQEICh9lFtK4h8krAQEFClYE+YRWBP8I","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIAJVAAEAGVOnAqAEHF\/YLjc++AFBtOQshPQ7KFdAQD6Wh2wAAAQEICh9lFurE7\/riAQEFEj0OxG09DsR5PQ7gtT0O5l0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319057,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQb4FAAEAG5fzAqAEHF\/YLhc+0AFDwxwt9ZwFh3PAQD3ipUgAAAQEICh9lF1A1aZbLAQEFGmcBpbxnAatkZwGD5GcBjxxnAXiIZwGDzA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIT9VAAEAGBanAqAEHF\/YLjc+2AFBDrGZhKzqIz9AQD6Wh9gAAAQEICh9lF3sn2BB3AQEFEis6gycrOoMzKzqZxys6n28=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABI1\/xAAEAGfYnAqAEHF\/YLhc+1AFCjZhpFWCBWMdAQD6VKUAAAAQEICh9lF4YvkEd5AQEFElggZylYIHJ5WCBb2VggYYE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQhuJAAEAGzpvAqAEHF\/YLhc+0AFDwxwt9ZwFy1PAQD3iYBAAAAQEICh9lF5I1aZbfAQEFGmcBpbxnAatkZwGD5GcBjxxnAXiIZwGDzA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAwpBAAEAGkvXAqAEHF\/YLjc+2AFBDrGZhKzqOd7AQD9IYsQAAAQEICh9lF6sn2BCXAQEFCis6mccrOp9v","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAv3dAAEAGlg7AqAEHF\/YLjc+2AFBDrGZhKzqUH7AQD9IS0wAAAQEICh9lF+En2BCXAQEFCis6mccrOp9v","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQt89AAEAGna7AqAEHF\/YLhc+0AFDwxwt9ZwF4fPAQD9KRiwAAAQEICh9lGAk1aZbfAQEFGmcBpbxnAatkZwGD5GcBjxxnAXiIZwGDzA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQ6I1AAEAGbOjAqAEHF\/YLjc+8AFAt4\/QgFWKW1fAQD0yfFAAAAQEICh9lGEoQPXGEAQEFGhVihfUVYoYBFWKXERVinKEVYqfNFWKtdQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":94,"pkt":"gCqoTGHM5JjWH70UCABFAABQrXBAAEAGqAXAqAEHF\/YLjc+9AFCAerxUjeFa5PAQD9KyHwAAAQEICh9lGFZz0diOAQEFGo3hVTCN4VrMjeFmHI3ha9CN4YJkjeGIDA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIOY5AAEAGG\/DAqAEHF\/YLjc+7AFDfu3a84Gt\/ytAQD9JzCQAAAQEICh9lGG6zW2ulAQEFEuBroaLga6dK4GuFWuBriwI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIOb9AAEAGG7\/AqAEHF\/YLjc+4AFBql8H8f7uYQtAQD9LdlQAAAQEICh9lGIwUUDMHAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAErdAAEAGQs\/AqAEHF\/YLjc+8AFAt4\/QgFWKcobAQD9FtoQAAAQEICh9lGKcQPXGcAQEFChVip80VYq11","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAZaNAAEAG7+LAqAEHF\/YLjc+8AFAt4\/QgFWKiSbAQD9Jn9AAAAQEICh9lGKsQPXGcAQEFChVip80VYq11","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABI+SNAAEAGXFrAqAEHF\/YLjc+6AFDVkM5midbJMdAQD9IiTwAAAQEICh9lGLRNgRZcAQEFEonW6wmJ1vCxidbOwYnW1Gk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIlGNAAEAGwRrAqAEHF\/YLjc+9AFCAerxUjeFgjNAQD9KXswAAAQEICh9lGMBz0di4AQEFEo3hZhyN4WvQjeGCZI3hiAw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIeutAAEAG2pLAqAEHF\/YLjc+7AFDfu3a84Gt\/1tAQD\/9ycgAAAQEICh9lGMyzW2ulAQEFEuBroaLga6dK4GuFWuBriwI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIgMVAAEAG1LjAqAEHF\/YLjc+4AFBql8H8f7uYTtAQD\/\/dHAAAAQEICh9lGMwUUDMHAQEFEn+7uhp\/u7\/Cf7ud0n+7o3o=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIQXhAAEAGFAbAqAEHF\/YLjc+6AFDVkM5midbJPdAQD\/8h3gAAAQEICh9lGOxNgRZcAQEFEonW6wmJ1vCxidbOwYnW1Gk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAaFJAAEAG7TPAqAEHF\/YLjc+9AFCAerxUjeF3RLAQD0qOCgAAAQEICh9lGUVz0dlsAQEFCo3hgmSN4YgM","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":33,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAOwVAAEAGGonAqAEHF\/YLhc+1AFCjZhpFWCBhgbAQD6XDOQAAAQEICh9lGWAvkElpAQEFClggZylYIHgh","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIYzxAAEAG8kHAqAEHF\/YLjc++AFBtOQshPQ7P4dAQD9GKmgAAAQEICh9lGWrE7\/4fAQEFEj0Oyjk9Ds+9PQ7bMT0O5l0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA0U5AAEAGhDfAqAEHF\/YLjc+9AFCAerxUjeF3XLAQD\/+M4gAAAQEICh9lGXhz0dmUAQEFCo3hgmSN4YgM","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAXvNAAEAG9pLAqAEHF\/YLjc+9AFCAerxUjeF9BLAQD9KHSgAAAQEICh9lGXhz0dmxAQEFCo3hgmSN4YgM","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":42,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAdS1AAEAG4FjAqAEHF\/YLjc++AFBtOQshPQ7VibAQD9K41AAAAQEICh9lGZLE7\/44AQEFCj0O2zE9DuZd","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIthJAAEAGn2vAqAEHF\/YLjc+2AFBDrGZhKzqfb9AQD6VHgwAAAQEICh9lGhQn2BM9AQEFEis6lDcrOpnHKzqlLys6qtc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAzHBAAEAGiRXAqAEHF\/YLjc+2AFBDrGZhKzqlF7AQD9Ll8gAAAQEICh9lGjsn2BNVAQEFCis6pS8rOqrX","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABI2IhAAEAGfPXAqAEHF\/YLjc+4AFBql8H8f7ujetAQD6bTvwAAAQEICh9lGqMUUDU+AQEFEn+7ndJ\/u532f7u6Gn+7v8I=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319058,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIQyxAAEAGElLAqAEHF\/YLjc+7AFDfu3a84GuLAtAQD6Zo2QAAAQEICh9lGrCzW24LAQEFEuBrhVrga4V+4GuhouBrp0o=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319059,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAZNFAAEAG8LTAqAEHF\/YLjc+4AFBql8H8f7upIrAQD9IldAAAAQEICh9lHIAUUDcpAQEFCn+7uhp\/u7\/C","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319059,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABA\/RlAAEAGWGzAqAEHF\/YLjc+7AFDfu3a84GuQqrAQD9JK3gAAAQEICh9lHJizW3ALAQEFCuBroaLga6dK","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319059,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIB+5AAEAGTZDAqAEHF\/YLjc+6AFDVkM5midbUadAQD6YTiwAAAQEICh9lHTBNgRscAQEFEonWzsGJ1s7lidbrCYnW8LE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319059,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAWJRAAEAG\/PHAqAEHF\/YLjc+6AFDVkM5midbaEbAQD9LeygAAAQEICh9lHWZNgRs3AQEFConW6wmJ1vCx","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1484319064590,"flow_last_seen":1484319064590,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53183,"dst_port":80,"l4_proto":"tcp"}
+0419{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAVptAAEAGBuzAqAEHF\/YDjM+\/AFBrAzOSAAAAALAC\/\/+cMAAAAgQFtAEDAwUBAQgKH2UvkQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1484319064593,"flow_last_seen":1484319064593,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53184,"dst_port":80,"l4_proto":"tcp"}
+0421{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAVrtAAEAG\/srAqAEHF\/YLjc\/AAFDz13keAAAAALAC\/\/\/FywAAAgQFtAEDAwUBAQgKH2UvkwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz8BQi7Oi89d5H6AS\/\/+uwwAAAgQFtAEDAwkEAggKYvDA2R9lL5M=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADgGZWsX9gOMwKgBBwBQz78\/hnHMawMzk6AS\/\/+duQAAAgQFtAEDAwkEAggKbx\/u9B9lL5E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0SOFAAEAGDLHAqAEHF\/YLjc\/AAFDz13kfUIuzo4AQEBXNXwAAAQEICh9lL7Bi8MDZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0y1dAAEAGkjvAqAEHF\/YDjM+\/AFBrAzOTP4ZxzYAQEBW8UwAAAQEICh9lL7BvH+70","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1085{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":575,"pkt":"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","pkt_caplen":575,"pkt_type":2048,"pkt_ipoffset":14}
+0960{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1484319064593,"flow_last_seen":1484319064624,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":541,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53184,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/?o=AQEfKq2oMrLRiWL2puNQJJqTIRqhGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_vlHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=TnP59JB1wb5UTOCr0m-KQU2kGPo","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}}
+1080{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0955{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1484319064590,"flow_last_seen":1484319064634,"flow_tot_l4_data_len":653,"flow_min_l4_data_len":32,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":163,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53183,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"23.246.3.140","url":"23.246.3.140\/?o=AQEfKq2oMrLRiWL-p-VeIZ6WKRq-X6LMvaLqgxWBCuFbh09MpreORUUOO5Tx1683HPnLY6BPjN_9mlDuYihGZoXu9u0ozH8RFioBN_JDNiRscidjvoSdWmlyZgPNansW0lkBr4X81HvloOi8BS_exVSPhMyJQTB5bg&v=3&e=1484347850&t=-8u4vlcPuFqcOLnLyb9DDtK-bB4","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}}
+1161{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":635,"pkt":"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","pkt_caplen":635,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1484319064669,"flow_last_seen":1484319064669,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAhwJAAEAGqhTAqAEHNr8RM8\/JAbsptVYdAAAAALAC\/\/+MwgAAAgQFtAEDAwUBAQgKH2Uv3QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1484319064671,"flow_last_seen":1484319064671,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAbOBAAEAGxDbAqAEHNr8RM8\/SAbtTxg2UAAAAALAC\/\/+rMAAAAgQFtAEDAwUBAQgKH2Uv3gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz8BQi7Xc89d7HIAQCAJTKgAAAQEICmLwwQkfZS+yAAAAJGZ0eXBpc28yAAAAAGlzb21pc28yZGFzaGlzbzZwaWZmAAAAbHV1aWROZXRmbGl4UGlmZlN0cm0hAQAAAAAAAAADFvwoAAAAAACYloAAAAAGLpHBTQAAAAAAAOd8AAAAAAMVsmEAAAAAAACEqwAAYtEAAAAAAAAICwAAPlww7LvEbW3roAPsiM8lAvH1AAAAGGZyZWUAAAAAAAAAAAAAAAAAAAAAAAAASnV1aWTi6QKlfkPiQZDaISEYxWQyAAAAAAAAAADSka2DTmV0ZmxpeCBNZWRpYSBMaWJyYXJ5IFZlcnNpb24gODAuMC4wLgAAAAcZbW9vdgAAAHhtdmhkAQAAAAAAAADSka2JAAAAANKRrYkAmJaAAAAAAAAAAAAAAQAAAQAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAr5wc3NoAAAAAJoE8HmYQEKGq5LmW+CIX5UAAAKengIAAAEAAQCUAjwAVwBSAE0ASABFAEEARABFAFIAIAB4AG0AbABuAHMAPQAiAGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwBEAFIATQAvADIAMAAwADcALwAwADMALwBQAGwAYQB5AFIAZQBhAGQAeQBIAGUAYQBkAGUAcgAiACAAdgBlAHIAcwBpAG8AbgA9ACIANAAuADAALgAwAC4AMAAiAD4APABEAEEAVABBAD4APABQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsARQBZAEwARQBOAD4AMQA2ADwALwBLAEUAWQBMAEUATgA+ADwAQQBMAEcASQBEAD4AQQBFAFMAQwBUAFIAPAAvAEEATABHAEkARAA+ADwALwBQAFIATwBUAEUAQwBUAEkATgBGAE8APgA8AEsASQBEAD4AQQBBAEEAQQBBAE4AYwBEAG4AUQBFAEEAQQBBAEEAQQBBAEEAQQBBAEEAQQA9AD0APAAvAEsASQBEAD4APABDAEgARQBDAEsAUwBVAE0APgBsAGgAVABwAFkANwBaADIAZABuADgAPQA8AC8AQwBIAEUAQwBLAFMAVQBNAD4APABDAFUAUwBUAE8ATQBBAFQAVABSAEkAQgBVAFQARQBTAD4APABMAGkAdAB0AGwAZQBFAG4AZABpAGEAbgBLAEkARAA+AHQAcgB1AGUAPAAvAEwAaQB0AHQAbABlAEUAbgBkAGkAYQBuAEsASQBEAD4APAAvAEMAVQBTAFQATwBNAEEAVABUAFIASQBCAFUAVABFAFMAPgA8AC8ARABBAFQAQQA+ADwALwBXAFIATQBIAEUAQQBEAEUAUgA+AAAAAExwc3NoAAAAAClwH+Q8x0o0jFuukMdDmkcAAAAsAAAABAAAAAAD1wGd7r6IzuAaBVN4xRwf5LmuTob8i7DSa7iXzcA0aEtBASIAAAA0cHNzaAAAAADt74upedZKzqPIJ9zVHSHtAAAAFAgBEhAAAAAAA9cBnQAAAAAAAAAAAAADH3RyYWsAAABodGtoZAEAAAcAAAAA0pGtiQAAAADSka2JAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAEAAAAABQAAAAPAAAAAAACxlZHRzAAAAJGVsc3QBAAAAAAAAAQAAAAYukcFNAAAAAAAGXTsAAQAAAAACg21kaWEAAAAsbWRoZAEAAAAAAAAA0pGtiQAAAADSka2JAJiWgAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAAB2aWRlAAAAAAAAAAAAAAAAVmlkZW8gTWU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0qPNAAEAGrJ7AqAEHF\/YLjc\/AAFDz13scUIu7hIAQD9bDXwAAAQEICh9lL+Fi8MEJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1484319064683,"flow_last_seen":1484319064683,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":83,"pkt":"gCqoTGHM5JjWH70UCABFAABFcJ0AAP8Rx7HAqAEHwKgBAe4iADUAMSObED0BAAABAAAAAAAAB2ljaG5hZWEDZ2VvB25ldGZsaXgDY29tAAABAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1484319064683,"flow_last_seen":1484319064683,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ichnaea.geo.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1158{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":632,"pkt":"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","pkt_caplen":632,"pkt_type":2048,"pkt_ipoffset":14}
+1604{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":965,"pkt":"5JjWH70UgCqoTGHMCABFIAO3AABAADgGYfAX9gOMwKgBBwBQz78\/hnQDawM1jIAYCAJbiAAAAQEICm8f7y8fZS+zAAAAIGZ0eXBtcDQyAAAAAGlzb21pc28yZGFzaGlzbzYAAABsdXVpZE5ldGZsaXhQaWZmU3RybSEBAAAAAAAAAAHvbQsAAAAAAJiWgAAAAAYupEAAAAAAAAAA4x8AAAAAAe4nkAAAAAAAAIA7AABi5AAAAAAAAAODAAA+aP3QyWlgzDIljZh5Z7N\/JK4AAAAYZnJlZQAAAAAAAAAAAAAAAAAAAAAAAABMdXVpZOLpAqV+Q+JBkNohIRjFZDIAAAAAAAAAANKD0PxOZXRmbGl4IE1lZGlhIExpYnJhcnkgVmVyc2lvbiA4MC4wLjM5MC4AAAACk21vb3YAAAB4bXZoZAEAAAAAAAAA0oPRAgAAAADSg9ECAJiWgAAAAAAAAAAAAAEAAAEAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAHXdHJhawAAAGh0a2hkAQAABwAAAADSg9ECAAAAANKD0QIAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAABAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAABZ21kaWEAAAAsbWRoZAEAAAAAAAAA0oPRAgAAAADSg9ECAABdwAAAAAAAAAAAVcQAAAAAADRoZGxyAAAAAAAAAABzb3VuAAAAAAAAAAAAAAAAQXVkaW8gTWVkaWEgSGFuZGxlcgAAAAD\/bWluZgAAABBzbWhkAAAAAAAAAAAAAAAkZGluZgAAABxkcmVmAAAAAAAAAAEAAAAMdXJsIAAAAAEAAADDc3RibAAAABBzdHRzAAAAAAAAAAAAAAAQY3R0cwAAAAAAAAAAAAAAZ3N0c2QAAAAAAAAAAQAAAFdtcDRhAAAAAAAAAAEAAAAAAAAAAAACABAAAAAAXcAAAAAAADNlc2RzAAAAAAOAgIAiAAAABICAgBRAFQADPgACWzIAAX0sBYCAgAITEAaAgIABAgAAABBzdHNjAAAAAAAAAAAAAAAUc3RzegAAAAAAAAAAAAAAAAAAABBzdGNvAAAAAAAAAAAAAAA8bXZleAAAABRtZWhkAQAAAAAAAAYupEAAAAAAIHRyZXgAAAAAAAAAAQAAAAEAAAAAAAAAAAKgAAA=","pkt_caplen":965,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Q4hAAEAGGgvAqAEHF\/YDjM+\/AFBrAzWMP4Z3hoAQD+e0UwAAAQEICh9lL\/FvH+8v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1089{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":578,"pkt":"gCqoTGHM5JjWH70UCABFAAI0e3JAAEAG4CDAqAEHF\/YDjM+\/AFBrAzWMP4Z3hoAYEAC+hwAAAQEICh9lL\/ZvH+8vR0VUIC8\/bz1BUUVmS3Eyb01yTFJpV0wtcC1WZUlaNldLUnEtWDZMTXZhTHFneFdCQ3VGYmgwOU1wcmVPUlVVT081VHgxNjgzSFBuTFk2QlBqTl85bWxEdVlpaEdab1h1OXUwb3pIOFJGaW9CTl9KRE5pUnNjaWRqdm9TZFdtbHlaZ1BOYW5zVzBsa0JyNFg4MUh2bG9PaThCU19leFZTUGhNeUpRVEI1Ymcmdj0zJmU9MTQ4NDM0Nzg1MCZ0PS04dTR2bGNQdUZxY09Mbkx5YjlERHRLLWJCNCBIVFRQLzEuMQ0KSG9zdDogMjMuMjQ2LjMuMTQwDQpYLVBsYXliYWNrLVNlc3Npb24tSWQ6IDQzRERBRkI5LUZFMkYtNEM2RS05QjkxLUFCMERDNDY0ODdBMQ0KUmFuZ2U6IGJ5dGVzPTU4MTQzLTE4MTE5MA0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IEFwcGxlQ29yZU1lZGlhLzEuMC4wLjE0QzkyIChpUGhvbmU7IFU7IENQVSBPUyAxMF8yIGxpa2UgTWFjIE9TIFg7IGVuX3VzKQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cw0KQWNjZXB0LUVuY29kaW5nOiBpZGVudGl0eQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":578,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":248,"pkt":"5JjWH70UgCqoTGHMCABFAADq4UlAAEAR1WDAqAEBwKgBBwA17iIA1plWED2BgAABAAkAAAAAB2ljaG5hZWEDZ2VvB25ldGZsaXgDY29tAAABAAHADAAFAAEAAAAMABkHaWNobmFlYQdsYXRlbmN5BnByb2RhYcAYwDUAAQABAAAAFgAENCUk\/MA1AAEAAQAAABYABDQrZhTANQABAAEAAAAWAAQ0Iv+pwDUAAQABAAAAFgAENBhu0sA1AAEAAQAAABYABDQK7rvANQABAAEAAAAWAAQ2RB9SwDUAAQABAAAAFgAENCdXJMA1AAEAAQAAABYABDQobnM=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1484319064683,"flow_last_seen":1484319064699,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":49,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ichnaea.geo.netflix.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.37.36.252"}}
+1222{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":677,"pkt":"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","pkt_caplen":677,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0bVFAAEAG6EDAqAEHF\/YLjc\/AAFDz13scUIu954AQD+zAzAAAAQEICh9lL\/ti8MEJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":581,"pkt":"gCqoTGHM5JjWH70UCABFAAI3FpFAAEAGPP7AqAEHF\/YLjc\/AAFDz13scUIu954AYEAALvAAAAQEICh9lMAJi8MEJR0VUIC8\/bz1BUUVmS3Eyb01yTFJpV0wycHVOUUpKcVRJUnFoR0xqU3NldTIzVjJIWDZrSWlVOUpwYkNhQnh4YUlvejIxcVFOS3VEVWFPSVp3ZFRseDIzRE1WeGFiYkN3bXZFbHVpcERXMnR2Rk1saE1SdHdkaGhWbGJ2OUtHRmFiaXU1S0gwU2x4MFZqT0tfd3pUaHBfdmxIaFdBNGtXOWdheVlFV3RqTk5LZSZ2PTMmZT0xNDg0MzQ3ODUwJnQ9VG5QNTlKQjF3YjVVVE9DcjBtLUtRVTJrR1BvIEhUVFAvMS4xDQpIb3N0OiAyMy4yNDYuMTEuMTQxDQpYLVBsYXliYWNrLVNlc3Npb24tSWQ6IDQzRERBRkI5LUZFMkYtNEM2RS05QjkxLUFCMERDNDY0ODdBMQ0KUmFuZ2U6IGJ5dGVzPTU5MjYwLTI1Nzk1Mg0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IEFwcGxlQ29yZU1lZGlhLzEuMC4wLjE0QzkyIChpUGhvbmU7IFU7IENQVSBPUyAxMF8yIGxpa2UgTWFjIE9TIFg7IGVuX3VzKQ0KQWNjZXB0LUxhbmd1YWdlOiBlbi11cw0KQWNjZXB0LUVuY29kaW5nOiBpZGVudGl0eQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":581,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1484319064711,"flow_last_seen":1484319064711,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAfOpAAEAGov3AqAEHNCUk\/M\/TAbvE99WSAAAAALAC\/\/9grAAAAgQFtAEDAwUBAQgKH2UwAgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGRvs2vxEzwKgBBwG7z9JcNkhzU8YNlaASOJDYrwAAAgQFtAQCCAqtilitH2Uv3gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGR\/s2vxEzwKgBBwG7z8mqa43KKbVWHqASOJAmtQAAAgQFtAQCCAqtilitH2Uv3QEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA06mxAAEAGRrbAqAEHNr8RM8\/SAbtTxg2VXDZIdIAQEBUvyAAAAQEICh9lMA6tilit","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0RtdAAEAG6kvAqAEHNr8RM8\/JAbsptVYeqmuNy4AQEBV9zAAAAQEICh9lMA6tilit","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":583,"pkt":"gCqoTGHM5JjWH70UCABFAAI52vZAAEAGVCfAqAEHNr8RM8\/JAbsptVYeqmuNy4AYEBU\/AQAAAQEICh9lMBGtilitFgMBAgABAAH8AwOssLX4r6P7GP1cyM+\/QL5jcos5eemrJxEB7qfdYiVRRQAAtsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFAJ0APQA1AITAL8ArwCfAI8ATwAkApACiAKAAngBnAEAAPwA+ADMAMgAxADAAmgCZAJgAlwBFAEQAQwBCwDHALcApwCXADsAEAJwAPAAvAJYAQQAHwBHAB8AMwAIABQAEwBLACAAWABMAEAANwA3AAwAKABUAEgAPAAwACQD\/AQABHQAAABkAFwAAFGlvcy5uY2NwLm5ldGZsaXguY29tAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEBABUAqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1484319064669,"flow_last_seen":1484319064728,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+1096{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1484319064671,"flow_last_seen":1484319064729,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+1174{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":643,"pkt":"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","pkt_caplen":643,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVMoX9guNwKgBBwBQz8BQi8Ao89d9H4AQCAK2EwAAAQEICmLwwVEfZTACAAAHgW1vb2YAAAAQbWZoZAAAAAAAAAABAAAHaXRyYWYAAAAUdGZoZAACACAAAAACAaEAAAAAABR0ZmR0AQAAAAAAAAAAAAAAAAAAQXNhaXoAAAAAAAAAADAiFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYAAAAYc2FpbwEAAAAAAAABAAAAAAAAAxkAAAJYdHJ1bgAACwUAAAAwAAAHiQJgAAAABl07AAADLwAGXTsABl08AAAAGAAGXTsABl07AAAAHAAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsABl07AAAAHQAGXTsABl08AAAAHQAGXTsABl07AAAAHQAGXTsAAARMdXVpZKI5T1Jam08UokRsQnxkjfQAAAACAAAAMAnAMvWrHNgAAAQABQAAAAgABQAAAt4ABQAAAAYABQAAAC8JwDL1qxzYAQACAAUAAAAGAAUAAAAICcAy9asc2AIAAgAFAAAABgAFAAAADAnAMvWrHNgDAAIABQAAAAYABQAAAA0JwDL1qxzYBAACAAUAAAAGAAUAAAANCcAy9asc2AUAAgAFAAAABgAFAAAADQnAMvWrHNgGAAIABQAAAAYABQAAAA0JwDL1qxzYBwACAAUAAAAGAAUAAAANCcAy9asc2AgAAgAFAAAABgAFAAAADQnAMvWrHNgJAAIABQAAAAYABQAAAA0JwDL1qxzYCgACAAUAAAAGAAUAAAANCcAy9asc2AsAAgAFAAAABgAFAAAADQnAMvWrHNgMAAIABQAAAAYABQAAAA0JwDL1qxzYDQACAAUAAAAGAAUAAAANCcAy9asc2A4AAgAFAAAABgAFAAAADQnAMvWrHNgPAAIABQAAAAYABQAAAA0JwDL1qxzYEAACAAUAAAAGAAUAAAANCcAy9asc2BEAAgAFAAAABgAFAAAADQnAMvWrHNgSAAIABQAAAAYABQAAAA0JwDL1qxzYEwACAAUAAAAGAAUAAAANCcAy9asc2BQAAgAFAAAABgAFAAAADQnAMvWrHNgVAAIABQAAAAYABQAAAA0JwDL1qxzYFgACAAUAAAAGAAUAAAANCcAy9asc2BcAAgAFAAAABgAFAAAADQnAMvWrHNgYAAIABQAAAAYABQAAAA0JwDL1qxzYGQACAAUAAAAGAAUAAAANCcAy9asc2BoAAgAFAAAABgAFAAAADQnAMvWrHNgbAAIABQAAAAYABQAAAA0JwDL1qxzYHAACAAUAAAAGAAUAAAANCcAy9as=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0l0ZAAEAGvkvAqAEHF\/YLjc\/AAFDz130fUIvF0IAQD9K2hQAAAQEICh9lMCli8MFQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1171{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":642,"pkt":"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","pkt_caplen":642,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADgGX8sX9gOMwKgBBwBQz78\/hnnGawM3jIAQCAJm8QAAAQEICm8f72cfZS\/2AAAC2G1vb2YAAAAQbWZoZAAAAAAAAAABAAACwHRyYWYAAAAUdGZoZAACACAAAAABAqAAAAAAABR0ZmR0AQAAAAAAAAAAAAAAAAACVHRydW4AAAsBAAAAMAAAAuAAAAQAAAAB+QAAAAAAAAQAAAAB+QAAAAAAAAQAAAACuwAAAAAAAAQAAAACkgAAAAAAAAQAAAACdAAAAAAAAAQAAAACcgAAAAAAAAQAAAACFgAAAAAAAAQAAAAB5AAAAAAAAAQAAAACAwAAAAAAAAQAAAABywAAAAAAAAQAAAABpwAAAAAAAAQAAAAB1wAAAAAAAAQAAAACGAAAAAAAAAQAAAACCAAAAAAAAAQAAAAB0wAAAAAAAAQAAAAB4gAAAAAAAAQAAAABwwAAAAAAAAQAAAACKgAAAAAAAAQAAAACIQAAAAAAAAQAAAAByQAAAAAAAAQAAAAB6wAAAAAAAAQAAAAB7gAAAAAAAAQAAAACKwAAAAAAAAQAAAACGgAAAAAAAAQAAAAB2QAAAAAAAAQAAAACAQAAAAAAAAQAAAAB8AAAAAAAAAQAAAAB8gAAAAAAAAQAAAACFAAAAAAAAAQAAAAB5QAAAAAAAAQAAAABrAAAAAAAAAQAAAAB6wAAAAAAAAQAAAABxAAAAAAAAAQAAAAB\/AAAAAAAAAQAAAACGgAAAAAAAAQAAAAB7gAAAAAAAAQAAAACTAAAAAAAAAQAAAAB8gAAAAAAAAQAAAABxgAAAAAAAAQAAAAB1gAAAAAAAAQAAAAB2gAAAAAAAAQAAAAB4wAAAAAAAAQAAAAB2wAAAAAAAAQAAAACBgAAAAAAAAQAAAAB2wAAAAAAAAQAAAAB8gAAAAAAAAQAAAAB7gAAAAAAAAQAAAAB5wAAAAAAAAA8c2R0cAAAAAAqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioAAF9rbWRhdCEQFQCgG8D37ETwIQAAAAAAAAAAABw4ADf\/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8hG5Pd0Y5EQglAweSXK6bxDnKqFKAAtxJZ8XF4+J+Z+64+z\/2HjyPNEeucaECC8MxSn\/b\/I3Dp2gXxxB9tjLZNarPJujMhA6yB1kIJcrm1NZDq2Rn+N1jP61GCVA96diH1TWuSuQx+1vzMa7MUbONvWZS5djSWzKQWzG4BM7410CsRCwiy2QBqtyCaaLamSTyowWeFGJ\/ULXSwyRx892e+3bk7FcBpvxSvK4fjKDPKB85USn5dMc23fsgZ8029qkSoPbbZXnLVCXAlWFIIZ3o=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0rXFAAEAGsCHAqAEHF\/YDjM+\/AFBrAzeMP4Z\/boAQD9KqAQAAAQEICh9lMDhvH+9n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGNcw0JST8wKgBBwG7z9NfgzodxPfVk6ASRersYQAAAgQFtAQCCAqFpSALH2UwAgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0MmJAAEAG7ZHAqAEHNCUk\/M\/TAbvE99WTX4M6HoAQEBVQwAAAAQEICh9lMEaFpSAL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0EM5AACoGNjU2vxEzwKgBBwG7z9JcNkh0U8YPmoAQAD09hgAAAQEICq2KWL0fZTAT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":295,"pkt":"gCqoTGHM5JjWH70UCABFAAEZfjdAAEAGoNfAqAEHNCUk\/M\/TAbvE99WTX4M6HoAYEBXgSwAAAQEICh9lMEiFpSALFgMBAOABAADcAwNYeOlYxBLS5gM2ky3bQNFyoxLviT91lQxxEizDalFYdwAAJgD\/wCzAK8AkwCPACsAJwDDAL8AowCfAFMATAJ0AnAA9ADwANQAvAQAAjQAAABgAFgAAE2ljaG5hZWEubmV0ZmxpeC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDM3QAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":295,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1484319064711,"flow_last_seen":1484319064785,"flow_tot_l4_data_len":377,"flow_min_l4_data_len":32,"flow_max_l4_data_len":261,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0402{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0JklAAEAGL0nAqAEHF\/YLjc\/AAFDz130fUIvLeIAQEACwjAAAAQEICh9lMEti8MFR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA01XFAACkGcpE2vxEzwKgBBwG7z8mqa43LKbVYI4AQAD2LiwAAAQEICq2KWL4fZTAR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXc1XJAACkGbOg2vxEzwKgBBwG7z8mqa43LKbVYI4AQAD3mwgAAAQEICq2KWL4fZTARFgMDAFkCAABVAwNYeOlYXUx9tEAn\/69kC4b9mi1cW0+vEUQg6DiZzAg\/6yAmL+DzbHULNfloEbqKSe1qhpuImN1PyGFs0gpO0aWuDcAvAAAN\/wEAAQAACwAEAwABAhYDAwgiCwAIHgAIGwAEIDCCBBwwggMEoAMCAQICAhObMA0GCSqGSIb3DQEBCwUAMIGZMS0wKwYDVQQDEyRQcmltYXJ5IENlcnRpZmljYXRlIEF1dGhvcml0eSAoMjAwOSkxEzARBgNVBAgTCkNhbGlmb3JuaWExCzAJBgNVBAYTAlVTMRQwEgYDVQQKEwtOZXRmbGl4IEluYzEcMBoGA1UECxMTRWxlY3Ryb25pYyBEZWxpdmVyeTESMBAGA1UEBxMJTG9zIEdhdG9zMB4XDTAxMDExNzIwMzIwOVoXDTE4MDMyNDIwMzIwOVowgYAxGzAZBgNVBAMMEioubmNjcC5uZXRmbGl4LmNvbTEWMBQGA1UECgwNTmV0ZmxpeCwgSW5jLjETMBEGA1UECwwKT3BlcmF0aW9uczELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExEjAQBgNVBAcMCUxvcyBHYXRvczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKCMPKDrRKNlpQYmDci6pMXZdSSUbKrQRkPDz7HhtKtPPugiuJduNExZc6Kdb12vBV\/O+SiPHaVK7mpFvbFGQlMb6qQfwVOi\/aD6FF0wubaBBRmV5soLn6Uml8hcRcy1GwhcE0PciETMHgCKsYz6GRuA022Eqzo18xrMBx0ZwPuRDaRc+aOcYlh2D8wJdLQNpKdgRiYnOzqzb1V73+PIcLBKBaRmuSAMY7T6QAsBvotFYlMY32uWd0vZw9isFDSJCV8w2CSLAAeSkvUEJt3zKqKD5d5h8lWhsfYUg78EDVQMWb3iyTQ+UHy3b4IHtGaB+ybeHo7UkyS4NKYViXGQ4bECAwEAAaOBhDCBgTALBgNVHQ8EBAMCBaAwHwYDVR0jBBgwFoAUgzutabNbHNPaO8lPBXMZwiqK8P8wHQYDVR0OBBYEFH8tt\/b+DoJ\/qUOipuTAuxoaEiJTMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdEQQWMBSCEioubmNjcC5uZXRmbGl4LmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAkveZR7qD\/7\/8qJ4CSsfWHq+Cw0DsuYB9YjDmpMA3gU+yzX9cXxMn8tY3AApgaSjK94LEU1T7O\/bsKsL0uCJuFhSfW4W3+AlTe3UhEOMeILOZwgcMhUPQXGI28idMvibE1zQjX96OSlU9uDL6s8itcycsRGgSP0e+Umi1cijldISAIfgK+QzQIa\/k6kuJZ2i1hk4M6e8JqkqoYRso7uoX2ECQVKzVgRgm0z79wLxOrKXQf5L2Js7s03GHwdt04kQTtyYRh6NEGBmzjgdicV4sXy4g3wbAPPR1+itz5sKT\/vAAteT\/4Ik8+RSfZGNefG8eQxjBkJKvoKV1GyHiH3YYrgAD9TCCA\/EwggLZoAMCAQICAQAwDQYJKoZIhvcNAQEFBQAwgZkxLTArBgNVBAMTJFByaW1hcnkgQ2VydGlmaWNhdGUgQXV0aG9yaXR5ICgyMDA5KTETMBEGA1UECBMKQ2FsaWZvcm5pYTELMAkGA1UEBhMCVVMxFDASBgNVBAoTC05ldGZsaXggSW5jMRwwGgYDVQQLExNFbGVjdHJvbmljIERlbGl2ZXJ5MRIwEAYDVQQHEwlMb3MgR2F0b3MwHhcNMDEwMTAxMTIzMDAwWhcNMjkwMTAxMTIzMDAwWjCBmTEtMCsGA1UEAxMkUHJpbWFyeSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgKDIwMDkpMRMwEQYDVQQIEwo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1484319064669,"flow_last_seen":1484319064796,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2351{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":46,"flow_packet_id":6,"flow_first_seen":1484319064671,"flow_last_seen":1484319064823,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0399{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0GgVAACoGG880JST8wKgBBwG7z9NfgzoexPfWeIAQAEtfkAAAAQEICoWlIB4fZTBI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1863{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+1160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":45,"flow_packet_id":7,"flow_first_seen":1484319064669,"flow_last_seen":1484319064850,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}}
+0400{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA09oRAAEAGOp7AqAEHNr8RM8\/JAbsptVgjqmuXq4AQD95xkQAAAQEICh9lMIqtili+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":192,"pkt":"gCqoTGHM5JjWH70UCABFAACyY5NAAEAGzRHAqAEHNr8RM8\/JAbsptVgjqmuXq4AYEADbtQAAAQEICh9lMJStili+FgMDAEYQAABCQQRZ2I0MMIOevuB7hJikJpOhgdL8qMi+SfYcTpx3cQMCKaM\/nrM9+e92pdxjq3DiWm8p6TaW50E\/UL2hBqmRGIOaFAMDAAEBFgMDACj4cL4jc0rQ2mfgZeNkgI3iYqK0epYchOu0fU7WHG8H9cz+8iWenQNH","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAANAADgGX8gX9gOMwKgBBwBQz78\/hoq+awM3jIAQCALr0gAAAQEICm8f72cfZS\/2qoloa0YiEdCsE4cAHiEbi\/iv\/D3\/8dcGJYkHYUFAWG4mCoUIRBELpVlBcjCOOzpdN9URQwCMt2QEwRqd80TtSwsrZgh6atW5M\/Sikg0shISjjc0BpOq1bySTi3GhHZIEUVud3MyonYAoS3dZZIRJP3f\/+TFs33oHShwDJhXULx5z\/RfpYzZiPpCRYLH6nvENWeUapxAgDanEN96y6S1SAEiuZzdGsOkwWBKIou6AsRaaxwMxWVJyIwr+T29S5sdfKqZzRcFF0AhixX13cXW0bzULFpAjCorf0\/RS2Flrv2Y6laE8S0augdzfa2ikaKEnZzxaVfpS3GnxS2s5BC722VEJ1MFcEAA4MAhCVeL7VJTncmR1H9HTsxRjUmLkEwERugoi7cxqCpIIpUMJglGCmmndWaaTbVXlgoAIPXajr2Zq6kalU3A4k1yOIC0sb7Vy8wqY4JZqqqdbmmImwUNKGkzjW0VzqBgBSXE5Cc4a8NoPWzH9casQqH0f39lXKVottTI6FcUeEJoFkrFLmBGuSYJjmIPCIoHW0vs6NNoyjBaZzutzTGb134zmNxVq270qqEa3We7d68oZ0PDpb3yebs2iKiDDsWLt+GAOq4vYLvVBHdWhMCmXtq5XZKEWTQFAlsXenXgXxdLaVrXEvhru1REEqIfQSEZJEwsI0snRGFg3K0Qv4bSgmvWoCE8IqN4Jv2IngQgqqKRslYoxLLKInDgB\/SEbjl7D\/Pz\/8hboQg7CxiDI0EKBwvFI7NOq7zq0LrQxooMvBaY5chu1wFK8EcyFjcyZjepxyCGRCfhNnHL0O9O7JAhUg\/1buoK7IFng0UyuWo6wKAFt5PqxXgLXL2WzuEeAwALjdrrq5rv\/MCxWXx2\/yD3emxECpl8ji4wrRixIYBonOBNdeHbe10UkTBMBisQ7gpmR14I3TyZwuGVJ+jI3AuYNT+erR1stWKzThMRKM7i7iUqjndMm4rC1QgLo4JiQ8FBdq5t7DQExacskZZYYV3b6bUSUX\/ekSERCUnKLaC62QolFdEqghZQAgkJkLo458lCYSAFUfbmGorE6EMoxQQkcoWWFXl6q96ppQAWJNJsCaK8gRkuLeS4IwWWtvJ9Qcev3UiHMNU146hyMQgl2t7WBmJFp9PpF2ewi7v6A+MvnG1J9D5E1eCsTEK5GHoZihBOthj770WjOG\/WyLvZlngSziEF4Z97\/wrUh\/2rpkV2PTwM\/f\/qh6rYoH0JbFT9z4L7x7+3X1DFx4BWOodBMqqLZ99XCECLtICwh3ZrJF1iCSFCeRC2bFqljLhPCwysxgq3xaQrOgstEqUNyELWWKgO9BCpdIJXuXVIrbU28E37ETwIQVVE2kEARNWEpCnDgA9whG4haz\/z9\/\/I2+C0GSsdxoIhCYdN1wK2XxdbxqX644y5V0gUGAlRVWMlYUEpjsfbgaFVmsGtmAPn\/668\/slcZbgW7BEUjfTyBFSAcHLGZXx3aIQoMkrkjZoAbKXA3N3\/YPj8ptHrerUmUxhuZeZziENktXfyuL94xrNNaW7Py+6TvsYUrsFIJQScT82uueloE3EqDQiQDhRYAIL6PZcrHUIKxOkNbEMmanG4jqv6vg+i23qXEYpXKZFytljnqdhsym4QhpzXKFinfGnyE7TOSVHt6jsxFieJ36\/2SCPGeoITgjpHtSjRalEHde8AjNFIpC1o49f03wulAwp3Sq8FCyhe6N1SoCgpH29iUJQsOhMFxINRioIvdJe0mrx26tptLQC8MvQ62IwTc2PhFfjo45wczPiwKKKwOPNEPVykrdfRTcnQuCn2nOCh2Q841T9kBAF3CDs5bYEmynlY7zbwM97qBVEVXz3zVsCEbot3yjT+oN1UEmXGTBkaN43OUyUSwsHEzoYDQ7vt+a6yqMoU4uZbiIDM35x82\/ky25IEFirw=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1484319064711,"flow_last_seen":1484319064885,"flow_tot_l4_data_len":1889,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+1855{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+1160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":46,"flow_packet_id":7,"flow_first_seen":1484319064671,"flow_last_seen":1484319064898,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}}
+0400{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0xtZAAEAGakzAqAEHNr8RM8\/SAbtTxg+aXDZSVIAQD94jYQAAAQEICh9lMLetili9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":192,"pkt":"gCqoTGHM5JjWH70UCABFAACy7ZZAAEAGQw7AqAEHNr8RM8\/SAbtTxg+aXDZSVIAYEADVhwAAAQEICh9lMMGtili9FgMDAEYQAABCQQTfCEMwYSUMo8Uy6B5K50NJWMGvGAAQ0EIlegJzbTKhFbxlsfhf5HUDCKLK3QGBvdXrKr91nA32OkZqkuvlFHF6FAMDAAEBFgMDACgkRg\/TLOi\/NQH2P05EpRdVxq9ff1iwTtmeyWu\/4CAsiItUOINazg5W","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABn1XRAACkGcls2vxEzwKgBBwG7z8mqa5erKbVYoYAYAD2BhQAAAQEICq2KWN0fZTCUFAMDAAEBFgMDACj\/sh\/lwwobLg4jG6KP4IW8PBSF7BNm\/qrpAYHuyAYXvrrcXhJSn\/wc","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0rDNAAEAGhO\/AqAEHNr8RM8\/JAbsptVihqmuX3oAQD\/5wXAAAAQEICh9lMM+tiljd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1753{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1058,"pkt":"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","pkt_caplen":1058,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcGgdAACoGFiU0JST8wKgBBwG7z9Nfgz\/GxPfWeIAQAEuoUAAAAQEICoWlIB4fZTBIAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAUAwggE8MB0GA1UdDgQWBBRfYM9hkFXfhEMUimAqsvV69EMY7zASBgNVHRMBAf8ECDAGAQH\/AgEAMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcy5zeW1jYi5jb20vcGNhMy1nMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAuBggrBgEFBQcBAQQiMCAwHgYIKwYBBQUHMAGGEmh0dHA6Ly9zLnN5bWNkLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAWxdSvtZWe\/T3NAlLlsrH9iHQaYDv55oZ6CTif9kvYd0T61pl5OFqkMtOKumKFudSjfZDG0cFDYCjqJr+KdO8HSjVpUrUcTwPdcULcz8ASGV5DatqHiUMwALeZqy9SwZrmleKKoF+Z5u6UmBzxBX3u8FQyQiluldKOhsQcxzhe7aUA0uuUbCCQDpaJJzuDVhdrropesoznrKBwi+OwSfPQPAEoT\/1N8LK\/KxTbalTaU\/hdmQMJYGpNwPyOXM00sF8eBgcqGsW5+fgnSmv2ORpOXmVabl7XF0BnNT380hFE2SV1wpuctpDIiRvPlpw3MCS4C3lV\/jkKyfu9f8bswGDehYDAwFNDAABSQMAF0EEtKQb5kZrHc8HXCFU1gEUTuaMgOCIymfrjOs6OYrf+Py1It3F2GkHx6bSJGT8kH2j0vUz5qKgS+hkJ0XRWlim0AQBAQAM6HZeeWCZWR6nk7pla2FlBXPiJZGBj6tQwfA6Tq2Z2xICK1s3TJmx01s3x9kJLiyo1YpwENiKKGE\/myeVJTK6s5Z6yiK\/tuk\/8EgC0TG+DnwjxGXMEC6skguDiCseteDvC8F2AK0=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1251{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":48,"flow_packet_id":7,"flow_first_seen":1484319064711,"flow_last_seen":1484319064950,"flow_tot_l4_data_len":3369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ichnaea.netflix.com","server_names":"ichnaea.netflix.com,beacon.netflix.com,presentationtracking.netflix.com,nmtracking.netflix.com,customerevents.netflix.com","ja3":"c07cb55f88702033a8f52c046d23e0b2","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=customerevents.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"50:D6:DB:AF:1D:A3:83:52:E6:0E:15:8F:98:78:EE:2F:23:FD:E2:3F"}}
+0401{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0NEFAAEAG67LAqAEHNCUk\/M\/TAbvE99Z4X4NFboAQD9JEGQAAAQEICh9lMOiFpSAe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnENFAACoGNf82vxEzwKgBBwG7z9JcNlJUU8YQGIAYAD3qcQAAAQEICq2KWOsfZTDBFAMDAAEBFgMDACg+2BRXYHRs8uWQw0M0x7seJbudejY5BhKqTsd5HgOSeEvSGfvmpXBl","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":120,"pkt":"5JjWH70UgCqoTGHMCABFIABq1XVAACkGclc2vxEzwKgBBwG7z8mqa5feKbVcgYAYAEXZ2AAAAQEICq2KWO0fZTDQFwMDADH\/sh\/lwwobLw85UC1Uksp7fuu0we\/RHQwNNnFAHfUkNGl7FVoDfYEgXfgyQ\/1yEsPp","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0o+FAAEAGjUHAqAEHNr8RM8\/SAbtTxhAYXDZSh4AQD\/4iGAAAAQEICh9lMQGtiljr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0SiVAAEAG5v3AqAEHNr8RM8\/JAbsptVyBqmuYFIAQD\/5sBAAAAQEICh9lMQGtiljt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1750{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1057,"pkt":"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","pkt_caplen":1057,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":45,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319064,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":120,"pkt":"5JjWH70UgCqoTGHMCABFIABqENJAACoGNfs2vxEzwKgBBwG7z9JcNlKHU8YT94AYAEV4ggAAAQEICq2KWPsfZTECFwMDADE+2BRXYHRs86Z9iZXhMgWB+dYzlbHq7YyBIXhj7U+r8QAuKpnp8eYguRJ5eoMsfM1Z","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0d+NAAEAGuT\/AqAEHNr8RM8\/SAbtTxhP3XDZSvYAQD\/4dvAAAAQEICh9lMTitilj7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":229,"pkt":"5JjWH70UgCqoTGHMCABFIADXGglAACoGGyg0JST8wKgBBwG7z9Nfg0VuxPfWeIAYAEti5AAAAQEICoWlIIsfZTDoejZekFIw14qyQNy\/pfv7Q25vUHOcAULKFoFWfFPkk9lMYMPbCIuI\/yAptzlzvARNOnMmOZdHCQu4hfxhCPptyiF9KLTo5JeZ1TZO8SC1WuZGQ+YOGx26f5CYOBTNVt7xLSq4ebXYxa5hzM7TlMSL9miz50csvVKEYSLQA6S4sXeLcM554Edc\/Ck+L3HnJ9Zpp\/BK2F5u9EOyKxYDAwAEDgAAAA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0dF9AAEAGq5TAqAEHNCUk\/M\/TAbvE99Z4X4NGEYAQD\/pBpAAAAQEICh9lMiWFpSCL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/40NAAEAGPGXAqAEHNCUk\/M\/TAbvE99Z4X4NGEYAYEAD7lAAAAQEICh9lMj2FpSCLFgMDAEYQAABCQQQNwEiH9GFSKUZJdPBqFffc12pApOZ1oRSdSIHCYeWmdsoIIJBS99A8lT7P1xftCPSDBVOgRXX0u+\/m6CHtYl6Z","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6wEpAAEAGX6PAqAEHNCUk\/M\/TAbvE99bDX4NGEYAYEAApKQAAAQEICh9lMj2FpSCLFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABh\/ZNAAEAGIjPAqAEHNCUk\/M\/TAbvE99bJX4NGEYAYEACTnQAAAQEICh9lMj6FpSCLFgMDACjmlkhLrd7mj6EO5NJaxvaFPEwv+VlJFQrOf0Uja8XjcQyBrV2XbjUt","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":43,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":86,"pkt":"gCqoTGHM5JjWH70UCABFAABIxZZAAEAGl+jAqAEHF\/YDjM+\/AFBrAzeMP4abttAQDx1V2QAAAQEICh9lMkxvH\/GtAQEFEj+GvaY\/hsj2P4ahXj+Gt\/4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0GgpAACoGG8o0JST8wKgBBwG7z9Nfg0YRxPfW9oAQAEtQpwAAAQEICoWlIKEfZTI9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319065,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnGgtAACoGG5Y0JST8wKgBBwG7z9Nfg0YRxPfW9oAYAEsqVAAAAQEICoWlIKEfZTI9FAMDAAEBFgMDACh8GKfIir0iVKMA+db38l9hNfigrlqmqm7mpB+AEQbiCR7an7FocU\/A","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319067,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWNg4AAAER0Z\/AqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319068,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZE+4AAAER87zAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1484319070636,"flow_last_seen":1484319070636,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53210,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAs25AAEAGoh\/AqAEHF\/YLhc\/aAFBx1HGxAAAAALAC\/\/84uwAAAgQFtAEDAwUBAQgKH2VGAgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWnIX9guFwKgBBwBQz9pdV1SucdRxsqAS\/\/+\/OwAAAgQFtAEDAwkEAggKgYtW3h9lRgI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0S\/NAAEAGCafAqAEHF\/YLhc\/aAFBx1HGyXVdUr4AQEBXd4QAAAQEICh9lRhWBi1be","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1084{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":575,"pkt":"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","pkt_caplen":575,"pkt_type":2048,"pkt_ipoffset":14}
+0960{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1484319070636,"flow_last_seen":1484319070660,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":541,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53210,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"23.246.11.133","url":"23.246.11.133\/?o=AQEfKq2oMrLRiWL1ouVaJpeQLBWjGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThp_7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=JfEef80K02ynIjLLoi-HZB1uQ10","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}}
+1161{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":634,"pkt":"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","pkt_caplen":634,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0k8NAAEAGwdbAqAEHF\/YLhc\/aAFBx1HOvXVdcj4AQD9bT+gAAAQEICh9lRkGBi1b7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1166{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":635,"pkt":"5JjWH70UgCqoTGHMCABFIAJtAAFAADsGWEAX9guFwKgBBwBQz9pdV1yPcdRzr4AYCAJdNAAAAQEICoGLVwgfZUYYACRkaW5mAAAAHGRyZWYAAAAAAAAAAQAAAAx1cmwgAAAAAQAAAdtzdGJsAAAAEHN0dHMAAAAAAAAAAAAAABBjdHRzAAAAAAAAAAAAAAF\/c3RzZAAAAAAAAAABAAABb2VuY3YAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAB4AFoAEgAAABIAAAAAAAAAAEKQVZDIENvZGluZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY\/\/8AAAA3YXZjQwFCwB7\/4QAgZ0LAHtkB4L\/lw4QAAA+kAALuA4EACScAGGqSjAHixckBAARoy4yyAAAAEHBhc3AAAAAEAAAAAwAAACJ1dWlkTmV0ZmxpeEZyYW1lUmF0ZQAAAAAAAF3AA+kAAABgc2luZgAAAAxmcm1hYXZjMQAAABRzY2htAAAAAHBpZmYAAQABAAAAOHNjaGkAAAAwdXVpZIl0285750xRhPlxSPmIJVQAAAAAAAABCAAAAAAD1wGdAAAAAAAAAAAAAABQc2luZgAAAAxmcm1hYXZjMQAAABRzY2htAAAAAGNlbmMAAQAAAAAAKHNjaGkAAAAgdGVuYwAAAAAAAAEIAAAAAAPXAZ0AAAAAAAAAAAAAABBzdHNjAAAAAAAAAAAAAAAUc3RzegAAAAAAAAAAAAAAAAAAABBzdGNvAAAAAAAAAAAAAAA8bXZleAAAABRtZWhkAQAAAAAAAAYukcFNAAAAIHRyZXgAAAAAAAAAAgAAAAEAAAAAAAAAAAGhAAA=","pkt_caplen":635,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Xf1AAEAG95zAqAEHF\/YLhc\/aAFBx1HOvXVdeyIAQD+7RdAAAAQEICh9lRmmBi1cI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":581,"pkt":"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","pkt_caplen":581,"pkt_type":2048,"pkt_ipoffset":14}
+1174{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":643,"pkt":"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","pkt_caplen":643,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAABAADsGVNIX9guFwKgBBwBQz9pdV2EJcdR1soAQCAJoWAAAAQEICoGLV14fZUZ5AAAHgW1vb2YAAAAQbWZoZAAAAAAAAAABAAAHaXRyYWYAAAAUdGZoZAACACAAAAACAaEAAAAAABR0ZmR0AQAAAAAAAAAAAAAAAAAAQXNhaXoAAAAAAAAAADAiFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYAAAAYc2FpbwEAAAAAAAABAAAAAAAAAxkAAAJYdHJ1bgAACwUAAAAwAAAHiQJgAAAABl07AAAE0gAAAAAABl08AAAAFwAAAAAABl07AAAAFwAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAABl07AAAAFgAAAAAABl08AAAAFgAAAAAABl07AAAAFgAAAAAAAARMdXVpZKI5T1Jam08UokRsQnxkjfQAAAACAAAAMEPVtsyocZAAAAQABQAAAAgABQAAAqAABQAAAAYABQAAAhBD1bbMqHGQAQACAAUAAAAGAAUAAAAHQ9W2zKhxkAIAAgAFAAAABgAFAAAAB0PVtsyocZADAAIABQAAAAYABQAAAAZD1bbMqHGQBAACAAUAAAAGAAUAAAAGQ9W2zKhxkAUAAgAFAAAABgAFAAAABkPVtsyocZAGAAIABQAAAAYABQAAAAZD1bbMqHGQBwACAAUAAAAGAAUAAAAGQ9W2zKhxkAgAAgAFAAAABgAFAAAABkPVtsyocZAJAAIABQAAAAYABQAAAAZD1bbMqHGQCgACAAUAAAAGAAUAAAAGQ9W2zKhxkAsAAgAFAAAABgAFAAAABkPVtsyocZAMAAIABQAAAAYABQAAAAZD1bbMqHGQDQACAAUAAAAGAAUAAAAGQ9W2zKhxkA4AAgAFAAAABgAFAAAABkPVtsyocZAPAAIABQAAAAYABQAAAAZD1bbMqHGQEAACAAUAAAAGAAUAAAAGQ9W2zKhxkBEAAgAFAAAABgAFAAAABkPVtsyocZASAAIABQAAAAYABQAAAAZD1bbMqHGQEwACAAUAAAAGAAUAAAAGQ9W2zKhxkBQAAgAFAAAABgAFAAAABkPVtsyocZAVAAIABQAAAAYABQAAAAZD1bbMqHGQFgACAAUAAAAGAAUAAAAGQ9W2zKhxkBcAAgAFAAAABgAFAAAABkPVtsyocZAYAAIABQAAAAYABQAAAAZD1bbMqHGQGQACAAUAAAAGAAUAAAAGQ9W2zKhxkBoAAgAFAAAABgAFAAAABkPVtsyocZAbAAIABQAAAAYABQAAAAZD1bbMqHGQHAACAAUAAAAGAAUAAAAGQ9W2zKg=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0x8JAAEAGjdfAqAEHF\/YLhc\/aAFBx1HWyXVdmsYAQD9LHHwAAAQEICh9lRpiBi1de","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319070,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0uQZAAEAGnJPAqAEHF\/YLhc\/aAFBx1HWyXVdsWYAQEADBLAAAAQEICh9lRrWBi1de","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319082,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWtkcAAAERUWbAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319083,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZYRMAAAERppfAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1484319091296,"flow_last_seen":1484319091296,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53217,"dst_port":80,"l4_proto":"tcp"}
+0420{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAakNAAEAG60LAqAEHF\/YLjc\/hAFDAgDYQAAAAALAC\/\/\/YUQAAAgQFtAEDAwUBAQgKH2WTUQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADsGWmoX9guNwKgBBwBQz+FsswOfwIA2EaAS\/\/85DQAAAgQFtAEDAwkEAggK\/T5Cox9lk1E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA00UpAAEAGhEfAqAEHF\/YLjc\/hAFDAgDYRbLMDoIAQEBVXuAAAAQEICh9lk1\/9PkKj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1084{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":575,"pkt":"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","pkt_caplen":575,"pkt_type":2048,"pkt_ipoffset":14}
+0960{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1484319091296,"flow_last_seen":1484319091314,"flow_tot_l4_data_len":657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":541,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53217,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"23.246.11.141","url":"23.246.11.141\/?o=AQEfKq2oMrLRiWL2puNQJJ2TLhuiGLjSseu23V2HX6kIiU9JpbCaBxxaIoz21qQNKuDUaOIZwdTlx23DMVxabbCwmvEluipDW2tvFMlhMRtwdhhVlbv9KGFabiu5KH0Slx0VjOK_wzThpP7lHhWA4kW9gayYEWtjNNKe&v=3&e=1484347850&t=Dh278u2UpApOCGUj5RxV8azNWX8","code":0,"content_type":"","user_agent":"AppleCoreMedia\/1.0.0.14C92 (iPhone; U; CPU OS 10_2 like Mac OS X; en_us)"}}
+1161{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":634,"pkt":"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","pkt_caplen":634,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1221{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":677,"pkt":"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","pkt_caplen":677,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Pc5AAEAGF8TAqAEHF\/YLjc\/hAFDAgDgObLMLgIAQD9ZN3wAAAQEICh9lk339PkLA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0yIdAAEAGjQrAqAEHF\/YLjc\/hAFDAgDgObLMN44AQD+xLYgAAAQEICh9lk4D9PkLB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":584,"pkt":"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","pkt_caplen":584,"pkt_type":2048,"pkt_ipoffset":14}
+1174{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":643,"pkt":"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","pkt_caplen":643,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0nAxAAEAGuYXAqAEHF\/YLjc\/hAFDAgDoUbLMVzIAQD9JBQAAAAQEICh9lk6X9PkLp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcAAFAADsGVMkX9guNwKgBBwBQz+FssxXMwIA6FIAQCAIXLQAAAQEICv0+QusfZZOPBQAAAAYABQAACLhEnuRlaI9a7gACAAUAAAAGAAUAAAC9RJ7kZWiPWu8AAgAFAAAABgAFAAAIn0Se5GVoj1rwAAIABQAAAAYABQAAAQJEnuRlaI9a8QACAAUAAAAGAAUAAAkhRJ7kZWiPWvIAAgAFAAAABgAFAAAA8USe5GVoj1rzAAIABQAAAAYABQAACZBEnuRlaI9a9AACAAUAAAAGAAUAAADmRJ7kZWiPWvUAAgAFAAAABgAFAAAI0USe5GVoj1r2AAIABQAAAAYABQAAAQ9EnuRlaI9a9wACAAUAAAAGAAUAAAlgRJ7kZWiPWvgAAgAFAAAABgAFAAABM0Se5GVoj1r5AAIABQAAAAYABQAABilEnuRlaI9a+gACAAUAAAAGAAUAAAD9RJ7kZWiPWvsAAgAFAAAABgAFAAAGyESe5GVoj1r8AAIABQAAAAYABQAAAQBEnuRlaI9a\/QACAAUAAAAGAAUAAAVdRJ7kZWiPWv4AAgAFAAAABgAFAAABs0Se5GVoj1r\/AAIABQAAAAYABQAAAXMAAAA8c2R0cAAAAAAmFhoWGhYaFhoWGhYaFhoWGhYaFhoWGhYaFhoWGhYaFhoWGhYaFhoWGhYaFhoWGhoAAQ5SbWRhdAAAAAkGvdmwxANWquAAAAAHBs+O1LyAkAAANopl\/sKFal4ZPhL+R0Gs6ifNtEPJ0MlfbRCmHSPUKGBiXYpAXLwpY\/aHtGy80zy3VTN8BHNATXdsR+5KpQNu+kOkcSeLEDpwA3u1ApSY2Hszwq+05DQGlAkJVEphl1m8mFQwiLZmYyihE55h3HWu4MREoS1N8s\/\/nLowHZsSEA36NAhNEDZwP27nsw+R9Fcf\/IvYmycibRwuUgHOm+oJOHrch\/Bo2MTDwk9IY7EWYXma+asf5fSBZlfQKKrPMq8Q4TvTxx08qaDlzoaQnT35Y4dPl8Yo1PFK557y\/gvDnTSfFwznOM5w8S8NSX6JudCm52MWEKKL9B7QNJGvxX7AU\/UOTKrTGjB7cmR8AZ5hOxoM5uu2W17FEShBvGqw0jfCfklrKwZfA4ZwZo6nL7nUIv5gxI\/n8cSthoqUuifDA5ZvY5lgtR0h159Ds2bObbD1GY8AJY+3g8Dw6o\/rpNK4TchoKbnmNe+969EmjC7rCZEwdZnPN\/6AyTuv6m5bbwLF\/hW3V04mkpAShx9U2GsmJ233\/9stz1KMAmL7RR7O+QbiHOsyIZCDuX21BRSTpzp4EdSjtCzJClgU2ZzVq8MS8b\/8GCb2hiWJY6DKMAJ\/hxFiPfHqqp1bXGDUAH\/O9BX\/B4EnnJlDi9zp\/ALkQoifsNZ77EqTpi3s3NssZkXHN8sksq+PhKlqrF0cuG7h9og6GcLUX1rt66XUEtzbacxgCaxC7QcENg2IM83OWeZUoKr0bw3yi+\/IKRRHlLZWmIpnBKf0+wcMOnm7jLJNrUeLVhD1MIuQUxgvfLcqu6ykY1AZ+E7AmQraJpxG6U66a82S04\/bHnj7fHQhXkHvj5keNSPliJjEY9g7vlgAy8FZIgCRDbxu3+hM82\/5BjFi1geiMYPp9PQLyypuUtThHizPvYuKnZ8vqdbRwy23jlkfEFCa600peIspAPk0Knlw2L7x7rTJ\/TeQ0WSNnykXHWwAQJ++hqwEvhg8aMXZcbQWHxwJUb7QnazgmOVfveUds5n0VTVYCpxW8ORXuyj9AnGWu1ju7iBZuusI1\/8ocV4Haxy0YYuhs+AkTy3Re3WBH37lPBScZf5FFFaa5IH3RzE5LxrIhp7sAv6EGJBopkXeOBSuU2J5Lxohs8SeyUMuN4VxDV6K0uQSQLQKwa6GVMXPsDaid7kx5d+MfIkVG1rUr1jpCrf6RefmdClDK26Fa8\/KfbAfik3ezPVsTKXH+L2wnUIeGG+eNU36f3PsaU+l6Zrv97A=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319091,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0THtAAEAGCRfAqAEHF\/YLjc\/hAFDAgDoUbLMbdIAQEAA7ZQAAAQEICh9lk6j9PkLr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319097,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWoVQAAAERZlnAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319098,"pkt_len":167,"pkt":"AQBef\/\/65JjWH70UCABFAACZtvoAAAERULDAqAEH7\/\/\/+tIQB2wAhUYzTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":4,"flow_packet_id":25,"flow_first_seen":1484319032896,"flow_last_seen":1484319033215,"flow_tot_l4_data_len":7366,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53114,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":28,"flow_packet_id":31,"flow_first_seen":1484319049684,"flow_last_seen":1484319050696,"flow_tot_l4_data_len":13654,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53162,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":6075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1484319030789,"flow_last_seen":1484319044993,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1484319030789,"flow_last_seen":1484319044993,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.24.87.6","src_port":52929,"dst_port":443,"l4_proto":"tcp"}
+0538{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319112,"pkt_len":164,"pkt":"AQBef\/\/65JjWH70UCABFAACWW90AAAERq9DAqAEH7\/\/\/+tIQB2wAggqVTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMg0KU1Q6IHVybjptZHgtbmV0ZmxpeC1jb206c2VydmljZTp0YXJnZXQ6MA0KDQo=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1484319114365,"flow_last_seen":1484319114365,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":80,"pkt":"gCqoTGHM5JjWH70UCABFAABCZ6UAAEARj63AqAEHwKgBAcmmADUALqajKFkBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1484319114365,"flow_last_seen":1484319114365,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0419{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":80,"pkt":"gCqoTGHM5JjWH70UCABFAABCN7AAAEARv6LAqAEHwKgBAcmmADUALiWYqUkBAAABAAAAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1484319114365,"flow_last_seen":1484319114365,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0681{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":275,"pkt":"5JjWH70UgCqoTGHMCABFAAEF4UpAAEAR1UTAqAEBwKgBBwA1yaYA8aaTKFmBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAABAAHADAAFAAEAAAAhAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAEXABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AAQABAAAALwAENCAW1sBNAAEAAQAAAC8ABDQiMaPATQABAAEAAAAvAAQ0GyTuwE0AAQABAAAALwAENCJwJsBNAAEAAQAAAC8ABDQi04bATQABAAEAAAAvAAQ0GRpcwE0AAQABAAAALwAENCDSq8BNAAEAAQAAAC8ABDQi5lM=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":51,"flow_packet_id":3,"flow_first_seen":1484319114365,"flow_last_seen":1484319114384,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":46,"flow_max_l4_data_len":241,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"52.32.22.214"}}
+0809{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":371,"pkt":"5JjWH70UgCqoTGHMCABFAAFl4UtAAEAR1OPAqAEBwKgBBwA1yaYBUaZKqUmBgAABAAoAAAAAA2lvcwRuY2NwB25ldGZsaXgDY29tAAAcAAHADAAFAAEAAAAdAA8DaW9zBG5jY3ADZ2VvwBXAMgAFAAEAAAEZABwDaW9zBG5jY3AJdXMtd2VzdC0yBnByb2RhYcAVwE0AHAABAAAALQAQJiABCHAPAAAAAAAANpUfRMBNABwAAQAAAC0AECYgAQhwDwAAAAAAADaVT4rATQAcAAEAAAAtABAmIAEIcA8AAAAAAAA2uidXwE0AHAABAAAALQAQJiABCHAPAAAAAAAANroXx8BNABwAAQAAAC0AECYgAQhwDwAAAAAAADZE0xXATQAcAAEAAAAtABAmIAEIcA8AAAAAAAA2ummQwE0AHAABAAAALQAQJiABCHAPAAAAAAAANkTCZ8BNABwAAQAAAC0AECYgAQhwDwAAAAAAADa6im8=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1484319114365,"flow_last_seen":1484319114400,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"ios.nccp.netflix.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"38.32.1.8"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1484319114406,"flow_last_seen":1484319114406,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAaktAAEAGw8fAqAEHNCAW1s\/2Abt+TgYJAAAAALAC\/\/\/LHgAAAgQFtAEDAwUBAQgKH2XpygAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGRPc0IBbWwKgBBwG7z\/ZJSmsOfk4GCqASOJAVRAAAAgQFtAQCCAq2sSMxH2XpygEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA03p5AAEAGT4DAqAEHNCAW1s\/2Abt+TgYKSUprD4AQEBVsWgAAAQEICh9l6fy2sSMx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":52,"flow_packet_id":4,"flow_first_seen":1484319114406,"flow_last_seen":1484319114464,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0401{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0SDFAACkG\/M00IBbWwKgBBwG7z\/ZJSmsPfk4ID4AQAD16GQAAAQEICraxIz8fZeoC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":52,"flow_packet_id":6,"flow_first_seen":1484319114406,"flow_last_seen":1484319114523,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+1861{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+1160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":52,"flow_packet_id":7,"flow_first_seen":1484319114406,"flow_last_seen":1484319114556,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}}
+0400{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0hPlAAEAGqSXAqAEHNCAW1s\/2Abt+TggPSUp074AQD95gPAAAAQEICh9l6l22sSNA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":192,"pkt":"gCqoTGHM5JjWH70UCABFAACydzNAAEAGtm3AqAEHNCAW1s\/2Abt+TggPSUp074AYEABIXQAAAQEICh9l6oe2sSNAFgMDAEYQAABCQQTxDC6Wn6YYEgXIFG6\/SmM39\/GE1TgVz4\/+C3OUePE6pg0RC6ZIHk+Ou6JnsuzO6lgkFZ\/KZ50cfVCGW9ilGsT3FAMDAAEBFgMDACjICEaq1m6jlGDcF6br9XQbdvu0pxOS73tybhOwmQInGcqBWBx\/Ce26","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnSDVAACkG\/JY0IBbWwKgBBwG7z\/ZJSnTvfk4IjYAYAD3H6wAAAQEICraxI44fZeqHFAMDAAEBFgMDACibeyDQe+srS4CZnBNqAJnCGqyZO1sem6ZY8a4UvQoBOFtV9j66ObmX","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0lShAAEAGmPbAqAEHNCAW1s\/2Abt+TgiNSUp1IoAQD\/5eGQAAAQEICh9l62G2sSOO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1749{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":1059,"pkt":"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","pkt_caplen":1059,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0SDdAACkG\/Mc0IBbWwKgBBwG7z\/ZJSnUifk4MboAQAEVp5AAAAQEICraxI5ofZeti","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":120,"pkt":"5JjWH70UgCqoTGHMCABFIABqSDhAACkG\/JA0IBbWwKgBBwG7z\/ZJSnUifk4MboAYAEXD6AAAAQEICraxI5ofZetiFwMDADGbeyDQe+srTFqCvv0jkSPlgmWK67SbF7J62b5JBAvZSwzB91li0XFBZ6u4EQj5F+Pt","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319114,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0YSZAAEAGzPjAqAEHNCAW1s\/2Abt+TgxuSUp1WIAQD\/5ZvgAAAQEICh9l65m2sSOa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1484319117511,"flow_last_seen":1484319117511,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp"}
+0445{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":97,"pkt":"gCqoTGHM5JjWH70UCABFAABT2RsAAP8RXyXAqAEHwKgBAct\/ADUAP5\/hcXUBAAABAAAAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1484319117511,"flow_last_seen":1484319117511,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0613{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":225,"pkt":"5JjWH70UgCqoTGHMCABFAADT4UxAAEAR1XTAqAEBwKgBBwA1y38Av8eGcXWBgAABAAgAAAAACmFwaS1nbG9iYWwHbGF0ZW5jeQZwcm9kYWEHbmV0ZmxpeANjb20AAAEAAcAMAAEAAQAAACsABDQpHgXADAABAAEAAAArAAQ0KVZPwAwAAQABAAAAKwAENCnkd8AMAAEAAQAAACsABDQpn7bADAABAAEAAAArAAQ0J+8jwAwAAQABAAAAKwAENCc7i8AMAAEAAQAAACsABDQo+f3ADAABAAEAAAArAAQ0KRH0","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1484319117511,"flow_last_seen":1484319117538,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":63,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.NetFlix","category":"Video"},"dns": {"query":"api-global.latency.prodaa.netflix.com","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.41.30.5"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1484319117605,"flow_last_seen":1484319117605,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABArFRAAEAGeobAqAEHNCkeBc\/3Abv7qhZTAAAAALAC\/\/8qUQAAAgQFtAEDAwUBAQgKH2X1uAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1484319117651,"flow_last_seen":1484319117651,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAO7RAAEAG8l7AqAEHNCAW1tAAAbtmeMEgAAAAALAC\/\/8btwAAAgQFtAEDAwUBAQgKH2X15gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGPb80KR4FwKgBBwG7z\/fOmYqt+6oWVKASOJB9NwAAAgQFtAQCCAqh\/Yo1H2X1uAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0nQxAAEAGidrAqAEHNCkeBc\/3Abv7qhZUzpmKroAQEBXUQwAAAQEICh9l9fSh\/Yo1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1484319117605,"flow_last_seen":1484319117668,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"d8bfad189bd26664e04570c104ee8418","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0411{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGRPc0IBbWwKgBBwG70ABfA575ZnjBIaASOJAZDQAAAgQFtAQCCAq2sSZcH2X15gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0fsVAAEAGr1nAqAEHNCAW1tAAAbtmeMEhXwOe+oAQEBVwIwAAAQEICh9l9hi2sSZc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":55,"flow_packet_id":4,"flow_first_seen":1484319117651,"flow_last_seen":1484319117713,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0400{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0AOhAACkGPN80KR4FwKgBBwG7z\/fOmYqu+6oYWYAQAD3iAQAAAQEICqH9ikcfZfX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1484319117605,"flow_last_seen":1484319117737,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"d8bfad189bd26664e04570c104ee8418","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2355{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1279{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":54,"flow_packet_id":7,"flow_first_seen":1484319117605,"flow_last_seen":1484319117738,"flow_tot_l4_data_len":3657,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","server_names":"api-latam.netflix.com,htmltvui.netflix.com,api-eu.netflix.com,uiboot.netflix.com,api-global.netflix.com,api-user.netflix.com,api-us.netflix.com,api.netflix.com","ja3":"d8bfad189bd26664e04570c104ee8418","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=US, ST=California, L=los gatos, O=Netflix, Inc., OU=Ops, CN=api.netflix.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"FC:5B:F6:86:AE:E5:22:0D:60:0C:C3:DF:8F:02:80:3F:A3:60:0E:3C"}}
+0402{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0iO9AAEAGnffAqAEHNCkeBc\/3Abv7qhhZzpmV\/oAQD9LG2QAAAQEICh9l9jmh\/YpI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":259,"pkt":"5JjWH70UgCqoTGHMCABFIAD1AOtAACkGPBs0KR4FwKgBBwG7z\/fOmZX++6oYWYAYAD082gAAAQEICqH9ikgfZfX343n8ekW5WtFwiuat3MPIymSR3y0qy\/vs6KzyxHxT0M7HJ2eVg8TbWuZ\/k73CDiepUJIty7M2cpeckPEf3PEDQ6A+b6yfWGSApeKADzVqo\/gONNdP8gk0zeC4os5mpmSKO0AEUQeqggAiQL3tFBY0FmMmxj4VAv\/Z53+JJCGr6LZhCWve8g4F3MV+FBkKyUMtZbO8VNzPAgbyIVIvpr59ETKzVG9n0ZpkeiLZfC\/gWHOpbnvD9L16IRYDAwAEDgAAAA==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0\/MtAAEAGKhvAqAEHNCkeBc\/3Abv7qhhZzpmWv4AQD\/nF5gAAAQEICh9l9kSh\/YpI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":141,"pkt":"gCqoTGHM5JjWH70UCABFAAB\/ok1AAEAGhE7AqAEHNCkeBc\/3Abv7qhhZzpmWv4AYEAAe+gAAAQEICh9l9k+h\/YpIFgMDAEYQAABCQQSKupYYjQStRdGCf4HwqhmEZkGMUBAh0KPnuwi9SZmVBQOGzMp\/Ejv5KI2ULxRIe974P36T7KRV5QNiedV8Ak9q","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6jYtAAEAGmVXAqAEHNCkeBc\/3Abv7qhikzpmWv4AYEACtdwAAAQEICh9l9k+h\/YpIFAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhlNpAAEAGkd\/AqAEHNCkeBc\/3Abv7qhiqzpmWv4AYEABO7wAAAQEICh9l9k+h\/YpIFgMDACgIsqaAt27YcArYI7wohih2+41gRIX\/5tR4vz3Bvttt4yVnrxvUHkkK","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0uJNAACkGjGs0IBbWwKgBBwG70ABfA576ZnjDJoAQAD194wAAAQEICraxJm0fZfYa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":55,"flow_packet_id":6,"flow_first_seen":1484319117651,"flow_last_seen":1484319117770,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+1860{"flow_id":55,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+1160{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":55,"flow_packet_id":7,"flow_first_seen":1484319117651,"flow_last_seen":1484319117771,"flow_tot_l4_data_len":3289,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ios.nccp.netflix.com","server_names":"*.nccp.netflix.com","ja3":"dc67ac8aaf8d7f69ecd6598135448f24","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"CN=Primary Certificate Authority (2009), ST=California, C=US, O=Netflix Inc, OU=Electronic Delivery, L=Los Gatos","issuerDN":"CN=*.nccp.netflix.com, O=Netflix, Inc., OU=Operations, C=US, ST=California, L=Los Gatos","fingerprint":"97:F6:63:95:8F:F2:5E:E0:80:12:5A:FD:BF:B2:EB:FE:A2:FE:72:33"}}
+0399{"flow_id":55,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BPhAAEAGKSfAqAEHNCAW1tAAAbtmeMMmXwOo2oAQD95kJQAAAQEICh9l9le2sSZt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":55,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":192,"pkt":"gCqoTGHM5JjWH70UCABFAACyVqJAAEAG1v7AqAEHNCAW1tAAAbtmeMMmXwOo2oAYEADVWQAAAQEICh9l9mC2sSZtFgMDAEYQAABCQQRW4SqRtHvW1q1mzZsrrs8mojReDLgwFeEIY2OsHixN1K3kho70V7T\/gGZ6kYzMwEv\/41qGKiPo7lD+1AdA36\/9FAMDAAEBFgMDACghZeBhnC3o6ffq0vTU96qYNuzh4mxVd8mDQQq7zCSZeBD5nscZMxzQ","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0AOxAACkGPNs0KR4FwKgBBwG7z\/fOmZa\/+6oY14AQAD3VBgAAAQEICqH9ilsfZfZP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnAO1AACkGPKc0KR4FwKgBBwG7z\/fOmZa\/+6oY14AYAD083gAAAQEICqH9ilwfZfZPFAMDAAEBFgMDACh\/LK6JN0ZD3RkfXIV1XQ7JAljOZpZWgJP4B550eF\/r\/45wBqUx9ZkK","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1484319117826,"flow_last_seen":1484319117826,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAF8hAAEAGDxPAqAEHNCkeBdABAbshc+whAAAAALAC\/\/8t3QAAAgQFtAEDAwUBAQgKH2X2iwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1484319117827,"flow_last_seen":1484319117827,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABADR1AAEAGGb7AqAEHNCkeBdACAbuRqNIFAAAAALAC\/\/\/XwQAAAgQFtAEDAwUBAQgKH2X2jAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":55,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":117,"pkt":"5JjWH70UgCqoTGHMCABFIABnuJZAACkGjDU0IBbWwKgBBwG70ABfA6jaZnjDpIAYAD0jDAAAAQEICraxJn4fZfZgFAMDAAEBFgMDACjMteRz8wyXXElR61k+p9UqwquA\/gjmDYad1auQslmuyUovR8ECQcMU","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":55,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0z45AAEAGXpDAqAEHNCAW1tAAAbtmeMOkXwOpDYAQD\/5jBAAAAQEICh9l9pa2sSZ+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1749{"flow_id":55,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1058,"pkt":"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","pkt_caplen":1058,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACoGPL80KR4FwKgBBwG70AFaPMiyIXPsIqASOJC25AAAAgQFtAQCCAqh\/YpsH2X2iwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0BiRAAEAGIMPAqAEHNCkeBdABAbshc+wiWjzIs4AQEBUN+QAAAQEICh9l9r+h\/Yps","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEEKuFAAEAG+zXAqAEHNCkeBdABAbshc+wiWjzIs4AYEBUAlAAAAQEICh9l9sOh\/YpsFgMBAMsBAADHAwNYeOmNxGxgi8I9EIqk5oJkWnJI9VweKmO\/JyQkao7GaCDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpAAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1484319117826,"flow_last_seen":1484319117885,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0412{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAACkGPb80KR4FwKgBBwG70ALhlhIJkajSBqASOJCQFwAAAgQFtAQCCAqh\/YptH2X2jAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0Pr9AAEAG6CfAqAEHNCkeBdACAbuRqNIG4ZYSCoAQEBXnJgAAAQEICh9l9sWh\/Ypt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":274,"pkt":"gCqoTGHM5JjWH70UCABFAAEEuTxAAEAGbNrAqAEHNCkeBdACAbuRqNIG4ZYSCoAYEBUMGAAAAQEICh9l9seh\/YptFgMBAMsBAADHAwNYeOmNE5tkHrD0G2XjxlOstOMmL3TKkSrM+b+7cNSu7CDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpAAmAP\/ALMArwCTAI8AKwAnAMMAvwCjAJ8AUwBMAnQCcAD0APAA1AC8BAABYAAAAGwAZAAAWYXBpLWdsb2JhbC5uZXRmbGl4LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":57,"flow_packet_id":4,"flow_first_seen":1484319117827,"flow_last_seen":1484319117892,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0474{"flow_id":55,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":120,"pkt":"5JjWH70UgCqoTGHMCABFIABquJdAACkGjDE0IBbWwKgBBwG70ABfA6kNZnjHhIAYAEXPmAAAAQEICraxJo4fZfaXFwMDADHMteRz8wyXXaXd2RcnujIQezZltisNkVOhrLlxwzYR31jYvekblxAEodQ9mpyApjCs","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":55,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0s05AAEAGetDAqAEHNCAW1tAAAbtmeMeEXwOpQ4AQD\/5eoQAAAQEICh9l9tO2sSaO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":55,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QsRAACoG+gI0KR4FwKgBBwG70AFaPMizIXPs8oAQAD0c8QAAAQEICqH9ingfZfbD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":211,"pkt":"5JjWH70UgCqoTGHMCABFIADFQsVAACoG+XA0KR4FwKgBBwG70AFaPMizIXPs8oAYAD1rVwAAAQEICqH9ingfZfbDFgMDAFkCAABVAwNYeOmNPVuURpMb\/fx8yaJA6qP5XzLudCxl+lHk4pO37SDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpMAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoISr6QGNuUwXE3zvP\/hpWdpKQ911Va7M\/7zfUPVeWOAkJZLvZ3ismWQ==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1484319117826,"flow_last_seen":1484319117930,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0400{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0TJBAAEAG2lbAqAEHNCkeBdABAbshc+zyWjzJRIAQEBEMYQAAAQEICh9l9u6h\/Yp4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6kUJAAEAGlZ7AqAEHNCkeBdABAbshc+zyWjzJRIAYEBH0TQAAAQEICh9l9u+h\/Yp4FAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABhhOJAAEAGodfAqAEHNCkeBdABAbshc+z4WjzJRIAYEBFPtAAAAQEICh9l9vCh\/Yp4FgMDACg7GVRz9q7bCs61NasJlVJx2Ycx\/rNf9nrAzt4Php4mYrbW23IFchHS","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1079{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0mHNAACkGpVM0KR4FwKgBBwG70ALhlhIKkajS1oAQAD32HgAAAQEICqH9insfZfbH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":211,"pkt":"5JjWH70UgCqoTGHMCABFIADFmHRAACkGpME0KR4FwKgBBwG70ALhlhIKkajS1oAYAD0r6wAAAQEICqH9insfZfbHFgMDAFkCAABVAwNYeOmNhBa97m16IKYUAyxArJDuRqKzC3VOnigM0fPRMyDcQ+\/FQ45c2bdXzP\/d5vWiRznU+6UwyhdZu7Y2G7JjpMAvAAAN\/wEAAQAACwAEAwABAhQDAwABARYDAwAoFiOeGccWPFfw7qlBE4VkatjS4l\/f33xVU7KB3IBXXk\/K\/lILTfxcQg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":57,"flow_packet_id":6,"flow_first_seen":1484319117827,"flow_last_seen":1484319117942,"flow_tot_l4_data_len":565,"flow_min_l4_data_len":32,"flow_max_l4_data_len":240,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.NetFlix","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api-global.netflix.com","ja3":"7e72698146290dd68239f788a452e7d8","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0400{"flow_id":57,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA06TtAAEAGPavAqAEHNCkeBdACAbuRqNLW4ZYSm4AQEBHliAAAAQEICh9l9vih\/Yp7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":57,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":72,"pkt":"gCqoTGHM5JjWH70UCABFAAA6NeNAAEAG8P3AqAEHNCkeBdACAbuRqNLW4ZYSm4AYEBHNdQAAAQEICh9l9vmh\/Yp7FAMDAAEB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":57,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":111,"pkt":"gCqoTGHM5JjWH70UCABFAABh7KhAAEAGOhHAqAEHNCkeBdACAbuRqNLc4ZYSm4AYEBH7iQAAAQEICh9l9vmh\/Yp7FgMDACjN6QiHlhoi28ptuJ4MF1wIKwWiAPgvNuNc+XNWkQHy\/nrK5+WNoARc","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+2278{"flow_id":57,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":1450,"pkt":"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","pkt_caplen":1450,"pkt_type":2048,"pkt_ipoffset":14}
+1101{"flow_id":57,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":581,"pkt":"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","pkt_caplen":581,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QsZAACoG+gA0KR4FwKgBBwG70AFaPMlEIXPyzYAQAEkWQQAAAQEICqH9ioQfZfbv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":57,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319117,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0mHVAACkGpVE0KR4FwKgBBwG70ALhlhKbkajTCYAQAD31HAAAAQEICqH9iocfZfb5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":57,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0mHZAACkGpVA0KR4FwKgBBwG70ALhlhKbkajadIAQAFPtlgAAAQEICqH9ioofZfb7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0QsdAACoG+f80KR4FwKgBBwG70AFaPMlEIXP0v4AQAFQUOAAAAQEICqH9io4fZfbx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1759{"flow_id":57,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1066,"pkt":"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","pkt_caplen":1066,"pkt_type":2048,"pkt_ipoffset":14}
+1579{"flow_id":57,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":935,"pkt":"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","pkt_caplen":935,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":227,"pkt":"5JjWH70UgCqoTGHMCABFIADVQslAACoG+Vw0KR4FwKgBBwG70AFaPM7sIXP0v4AYAFTtzQAAAQEICqH9ipwfZfbxljv39Mzb4bnJTd\/omBto9\/0x8H8PFYoXhsgpeTnwsmjBOLpkzfVs0Am2t+FCN4qnJz6IZZL\/q7JFM3a6\/s2WyVk3bhNKawBVcAtgdwD4gjJ2Q5zJBQs5pfPUhhmw7qTZQ6Hz3WuSlR91nc73xiUd6dKAVUwrmWtMJzzwlHZZDcTGyRm0EyyxHYxBYnsNQXmnUeBdgBSf5GdlxfrDhf9tyzc=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1484319118629,"flow_last_seen":1484319118629,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":81,"pkt":"gCqoTGHM5JjWH70UCABFAABDkmsAAP8RpeXAqAEHwKgBAd8FADUALzVHkfABAAABAAAAAAAABWExOTA3BGRzY2cGYWthbWFpA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1484319118629,"flow_last_seen":1484319118629,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"a1907.dscg.akamai.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":113,"pkt":"5JjWH70UgCqoTGHMCABFAABj4U1AAEAR1ePAqAEBwKgBBwA13wUATx78kfCBgAABAAIAAAAABWExOTA3BGRzY2cGYWthbWFpA25ldAAAAQABwAwAAQABAAAADAAEuBnMCsAMAAEAAQAAAAwABLgZzBk=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":58,"flow_packet_id":2,"flow_first_seen":1484319118629,"flow_last_seen":1484319118652,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":47,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"a1907.dscg.akamai.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.25.204.10"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1484319118657,"flow_last_seen":1484319118657,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53251,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAL91AAEAGxQfAqAEHuBnMCtADAFAmSxL9AAAAALAC\/\/\/OdwAAAgQFtAEDAwUBAQgKH2X5sAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1484319118658,"flow_last_seen":1484319118658,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53252,"dst_port":80,"l4_proto":"tcp"}
+0418{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAEThAAEAG46zAqAEHuBnMCtAEAFDFgkYhAAAAALAC\/\/\/8GgAAAgQFtAEDAwUBAQgKH2X5sAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Mi4GcwKwKgBBwBQ0APyPQT8JksS\/qAScSAMhgAAAgQFtAQCCAr\/\/WqNH2X5sAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0XA9AAEAGmOHAqAEHuBnMCtADAFAmSxL+8j0E\/YAQEBWcSwAAAQEICh9l+cD\/\/WqN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":74,"pkt":"5JjWH70UgCqoTGHMCABFIAA8AABAADwG+Mi4GcwKwKgBBwBQ0ASr4P0LxYJGIqAScSCIdgAAAgQFtAQCCAr\/\/WqNH2X5sAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0us1AAEAGOiPAqAEHuBnMCtAEAFDFgkYiq+D9DIAQEBUYOwAAAQEICh9l+cH\/\/WqN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":311,"pkt":"gCqoTGHM5JjWH70UCABFAAEppeRAAEAGThfAqAEHuBnMCtADAFAmSxL+8j0E\/YAYEBUliAAAAQEICh9l+cH\/\/WqNR0VUIC80ZTM2ZC82Mjg5ODg5MDIwZDZjYzZkZmIzMDM4YzM1NTY0YTQxZTFjYTRlMzZkLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTEubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":59,"flow_packet_id":4,"flow_first_seen":1484319118657,"flow_last_seen":1484319118676,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53251,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"art-1.nflximg.net","url":"art-1.nflximg.net\/4e36d\/6289889020d6cc6dfb3038c35564a41e1ca4e36d.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}}
+0731{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":311,"pkt":"gCqoTGHM5JjWH70UCABFAAEp1+JAAEAGHBnAqAEHuBnMCtAEAFDFgkYiq+D9DIAYEBXuKgAAAQEICh9l+cj\/\/WqNR0VUIC84YjFmYS9lYWExYjc4Y2Q3MmNhNGRiZGNhYjUyNzY5MWQyZmNhYjM3YzhiMWZhLmpwZyBIVFRQLzEuMQ0KSG9zdDogYXJ0LTEubmZseGltZy5uZXQNCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IGVuLVVTO3E9MQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpVc2VyLUFnZW50OiBBcmdvLzkuMS4wIChpUGhvbmU7IGlPUyAxMC4yOyBTY2FsZS8yLjAwKQ0KDQo=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":60,"flow_packet_id":4,"flow_first_seen":1484319118658,"flow_last_seen":1484319118687,"flow_tot_l4_data_len":393,"flow_min_l4_data_len":32,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53252,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.NetFlix","category":"Video"},"http": {"hostname":"art-1.nflximg.net","url":"art-1.nflximg.net\/8b1fa\/eaa1b78cd72ca4dbdcab527691d2fcab37c8b1fa.jpg","code":0,"content_type":"","user_agent":"Argo\/9.1.0 (iPhone; iOS 10.2; Scale\/2.00)"}}
+0400{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0blRAADwGiny4GcwKwKgBBwBQ0APyPQT9JksT84AQA6unowAAAQEICv\/9aqkfZfnB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2370{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcblVAADwGhNO4GcwKwKgBBwBQ0APyPQT9JksT84AQA6syAQAAAQEICv\/9aqofZfnBSFRUUC8xLjEgMjAwIE9LDQp4LWFtei1pZC0yOiBMU2pOWitNMVdoNm1wa0x6Smt1U1dDVis3S2xRR093ckFsR3UxWHVyczZPTEdjMXIyK3l3em44U0cvK3VTbnlqaEhTaWVsQjdVSTQ9DQp4LWFtei1yZXF1ZXN0LWlkOiAwMTY0ODc5NUY2RUMxMDU2DQpMYXN0LU1vZGlmaWVkOiBTYXQsIDAzIFNlcCAyMDE2IDA4OjMwOjQ0IEdNVA0KRVRhZzogIjA1YWMzZGYwNzgyZDBmY2I1ZTk2YjViMTQ2MGQyZDM0Ig0KeC1hbXotc2VydmVyLXNpZGUtZW5jcnlwdGlvbjogQUVTMjU2DQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1UeXBlOiBpbWFnZS9qcGVnDQpDb250ZW50LUxlbmd0aDogNzM5MA0KU2VydmVyOiBBbWF6b25TMw0KVGltaW5nLUFsbG93LU9yaWdpbjogKg0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0yNTQxOTA0MA0KRXhwaXJlczogRnJpLCAwMyBOb3YgMjAxNyAxOTo0MjozOCBHTVQNCkRhdGU6IEZyaSwgMTMgSmFuIDIwMTcgMTQ6NTE6NTggR01UDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCv\/Y\/+AAEEpGSUYAAQEBAAEAAQAA\/9sAQwAIBgYHBgUIBwcHCQkICgwUDQwLCwwZEhMPFB0aHx4dGhwcICQuJyAiLCMcHCg3KSwwMTQ0NB8nOT04MjwuMzQy\/9sAQwEJCQkMCwwYDQ0YMiEcITIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIy\/8AAEQgA\/AHAAwEiAAIRAQMRAf\/EABwAAAIDAQEBAQAAAAAAAAAAAAECAAMEBQcGCP\/EAD8QAAICAQIEBAQDBQYEBwAAAAABAgMRBBIFITFBBhNRYQcicYEUMpEjQqGxwRUzUnKC0RckU5JUYmOTorLh\/8QAGwEAAwEBAQEBAAAAAAAAAAAAAAECAwQFBgf\/xAAlEQEBAQEAAwEAAgEEAwAAAAAAARECAxIhMQRBUQUTFDIiM2H\/2gAMAwEAAhEDEQA\/AHn8J+HPpSkZrPhHon0g19z2\/wDBeyD+BXojfXL9eCWfCDT\/ALrmvuZbPhB\/hssX3P0N+Aj6In9nQfZBsP6\/Ntvwj1C\/LdP7oxW\/CniMfy25+sT9O\/2XU+yA+EUPqkHtBtfla34Z8Yh+Xa\/sYbfAHG6+lCl9D9avgumfVIR8C0b6xiGw\/bp+P7fCHGquujm\/oY7OCcSp\/Po7l\/pP2PLgHD+8I\/oZ7eAcKSeaq\/0QbB71+OJ0W1\/3lU4f5otFeD9OeKuEcHr0Vjenp6PnhH5z4vXTXxK6Onx5alyx0BXPWudgmAtpdRd8QUOCYEdvsHzF6D0ZTBSBvj6hVkPUqUvp0h0hYyi+kkXRiXEVIxLIxDGJZGJcSCiWxiRRLIxGQKI20dRHUQNWojKI6iNtGRFEO0s2h2gSvaHaWbQ7RhVtDtLNodoBVtJtLdpNoBVtJtJfdVp699stq7e5xtVxa2x4p\/Zx9e7JvUhzm38dWy2ulZsnGP1Zit4tRDlWpWP9Ecac5Tluk3J+rYpnfJWs8c\/t0Z8ZtbeyuKXvzK\/7W1OekP0MWAE+1V6cunDjM0\/nqi17PBuo4jp7uW7ZL0kfPECd2FfHH1mF6h2nzul19uml13R9Gz6HTXw1VSsh916GvPUrPrmwXEVovcRXEpKhxFcS5xF2gSraDBbtBtAiJDOOQpDJAbNKIuDTKBS44YB7N\/xtq\/8ABXfqgf8AG+PbQ2\/qjxfJMnE39Y9lfxv9OH2f9yEl8cLO3D5f96PHcgyGDI9el8Y=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0iMdAAEAGbCnAqAEHuBnMCtADAFAmSxPz8j0QTYAQD9KQEQAAAQEICh9l+dv\/\/Wqq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"5JjWH70UgCqoTGHMCABFIAA0l79AADwGYRG4GcwKwKgBBwBQ0ASr4P0MxYJHF4AQA6sjgwAAAQEICv\/9arMfZfnI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":60,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8FAADwGW2e4GcwKwKgBBwBQ0ASr4QK0xYJHF4AQA6vc1wAAAQEICv\/9arQfZfnI0KApKk+U+yq0kk+6EQc9kUnyhFLug1WeU+6ECQQnWEcIhd0UnWEICkUhCKOyAnyEkDpCEG7QJHZOrKaISSaEC5TTKXCA\/wBkcITUAEvVNGVQuUJoKBIz6KVJUgKQhNAkUE0KBIKK906QII7por9lQe6MFNL2UBSO9porCqlyhOkIhUjsmhAiOyaEIpITQiBCKTCgSEfhAVB+UJoRS4QmgKBcIUkrVTQ7IRSCooQisp0gVJ9kIQJFJoQJFJo7IEmjlCASTQgQ5RSdJoFSOUZQOEAhNCBdkJ82ivdAihMcoCApLunnKECQnSKQCOydUiuEC7opOs2irQKkfhSApOkEKTpSpFfhBGkUoS6rTwNuSaNo9XOC5Gr+LOk6UkCbxnjtGLH7q6rWONy\/pm3apFehXlx8c6MkH5aUD3cF0tH8S9N1bmt8bw3Hs\/Cavw1lxZ497K61BCbSHtDmuDmnggoIUc4VITCRQJNCECQE+E0CQikIaH\/3lCfshAkV+E6RWECpBT+6DwgSE6wg8IDukmjugVFHdSope3qgMpcWmjsgSefRFYT7IF3QnwgcoI+qZQnXsgX4R2TKECr2Rx2TCFAj7p9kHlCoMJUmmgSOyaKUCCE6QgRQmhUKke6aECpL3UkUgSE0IF\/shBGE6QKqQmjhArQnVopAkZTQgXKE0FAJVhNHcIFSaEIBCEfugVfumj3QgKwhOrQgRCEI7IEhP2TpEL8opFYQiikcBCEBlCEUgKQeEd0IjGEJ\/lHZFpYR906RSIVI9U0Io7IQjuEBhFIAQqBCZwlWFAJ0j8I4QKk0IpECEeqKwgEUhMIpITpACIXun+EVSEUJBM\/hGEQIRSeQikEJorKIX+yafol9lQu5TQhRSrHumhCIEV90cp1aBcD3Qn3QgjSfdNCKVITQqAcJUpJICrRWE0fdQL8oTpCBIpCaoXsik0KJ5COyAhFA4RaaWEAEJ8oKBcBLsmhAk0JoEEIpNAIpCOyApCLTQJATr2RSASpOkkD7Jdk0IBCMeiOyACE0kUUhCaISO6aSAQnSECR3TrPKEC54CE6QgRTR3QUUI7oQgK7hKlKqQgVJ8KVZWHqHVINCw2Q6SvpTS4423UbHFrRbnAD3KiZomDcZGAepcF896t1qbVajMlAZDRwuW\/Vyvrc9xHubTce\/D8byZTdun06Xqugh+vVRD\/8AetYpfijpsdgSPkP\/AChfOTNRy5v5Vb9WwcyALPXi9PH+Jt82vdTfGUYsQ6a\/QvcsE3xnq68jIm\/\/ALtrxruoQAEbt32VR6gwimtcb4UvLI9eH4jD5j1EvxZ1J3E+3\/ygBc+brevmsv1UpB7blxTqpCcREfcqEupeGjcwt\/lZ923w9OP47iw\/0xp1GskkJt5WYzbhzhUeI12Q4X6I5ugs9VpeKTtpeJirI9SRkLHakHG1ZWLxx6LpfxBrOnvHhzHaOWnIP\/Ze96R8SaXqYEclRT+hOD9ivkjX1yVr0+ocwgh1e66Y5\/bw8\/osM+87V9rS5Xkvh34n3tbpda++zZD\/ANV6\/BAIIytV8bk48uPLpyRpIqXCSjmXZHZOk0EQE6\/dCO6KK90qUkIFVIpFIQCO6aAgRCKTRSAS7pgUhEIBCaKQIhFeyfdCBJoCaCP3TQnSCNIpOk0CRhFIpAIRwmgSE0JsJGEJopdkd06QiFSK7IKaBITQAgEk0IEhNCBUmhCKCl6po5RCRwmilQkJpqCP3TQikAhCKVAj\/fshFKAQhBQCOyKR3QCEJoEg8IQqBCEIBCEIBCE1AqQhCoKQhCgKQhCDHSaaSpfJJ0hCIEICB6oopHsnXdHoUQkJoPKKVITqkVaISaKRWUCTpATQKkUmhFJHFp890ewQCEH8o7IDsik0rQFZRmk0IEn9keyEAOeUd0DhCFCE0kB3Qn7oQJB9lJLugXKEyilAk6Q=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":60,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0ZAtAAEAGkOXAqAEHuBnMCtAEAFDFgkcXq+EIXIAQD9IL4QAAAQEICh9l+fL\/\/Wq0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0R0lAAEAGrafAqAEHuBnMCtADAFAmSxPz8j0V9YAQEACKFgAAAQEICh9l+gD\/\/Wqq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":60,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8JAADwGW2a4GcwKwKgBBwBQ0ASr4QhcxYJHF4AQA6tOnwAAAQEICv\/9arQfZfnIIVBwUI7poEEUmhAkIRRQFIKfZFWECr900D1T7KBUjsmhUJCfsUfZAueUJoQIITGUfsgXdFeyf4QgSEBNAkZTQgX2QnX8I7oBCdZ4SQOkqTQoBCOfZFWgEexJx6I7eyBjjhAI5Tr0QAgXsjhFUnaBIpOux7IQLujhNCApCEIpJ9gjKEC7ppoQLv8AZAGEDlMohIQeU0UqR91JFIhd1KsIAWLqXUG6DTl2DI7DQjWMuV1FHVuqs0MZZHmY\/wALw+u19B0sr8u9e6nr9a8zEkGSeTgXyuRLCWP3TvD5XduzVm5W9sX6T0XocOLHqz8udNrtQ+QljKB43Kkv1kn6iPsukdo7C1EuAHC53G35fV9yT+nFzflpn8ucVNnT3cuF\/craZGjuoOksKdEW55KRo2CrpWshjZxkqsymxn8KBkcrqRm9d81a+RjRdLM94ebI79ihzrKhV\/TlNuOfZF8bHdqPqq6ewDb5wOxVhFHKQN\/b1U1GZlYiHh2ATfpWQmD+VF0QOQQD6jlV+Lt8snPZyng7Vpa49lbG4nGLWbf\/APYU2k4ym2MsXRglLHA3lfQfhj4gEzG6TUyC+GOP+y+aRv3CiaPb3XR0kzmEHIIN\/Zdscnh9V6fHkx\/b7N2USMri\/D3WRr4BBK7+8wY\/5gu5WVux8HLG43VRyhNCjISTQgSE0KBIpMIVCQU0UgEimjhAUhCaBIRWE6QJJNNRCrCEJqwJCaECQmhFJFJ0kgEJ8oQJCaEQqT7opCKEUhNAklJBQJCEdkQk6Qjsil2QmnWECR2QhECKQirQCVKSO6KVIQiu6ICikJ1fCBIpOkUgSE0IEhOkkAhOkyEEaRVJ8oQJCE1QkJ5RXdQFJVlNCBITrGEUgSKTQgVITQMoBIp0hBiHCY9UIVL5HbmkHgI\/2TQKkcJhBQLhPv7IpCifA\/CKT7oRSCAE0dkCr3QnSFQVSXHCaApsCEUEflAUlSaFQV3Qn9kKaCCE6RSoXdPlCAgEJ90II8pooJpsJGU+EdsqULunwgYwjuqEnVIpCEFIQikAkpULQmwqpHKEwEABgpcplFZUAjlCP3QCSlygYQIJk9kJIDhFJ1hHdAkJopAJUmRhFIAITx6IwUCrCKTQgSSdWE0CQmlSKKKE0IFlP9kAJ16ohcoTpCBITpHdFGLSrv2UqpKkQk\/shNFKsoR2T7IhVwgCk0dlAu9opNCoSK\/dSSKhosorFJoVCPKE00CSpOkIoQgBOlEJMBCYCqoyPbDE6Rx8oFm14TrHU5NROXgby47Y2+i7nxJ1BsbPlw8NDRuef+i8jv8ABadRJmaQeRp\/Q3\/usZZfEfa\/G+m7e7lP7Edmia6WUiTUPyf\/AE9AuXLKXuLibcTlTkdLqZLa10jj6BS\/pmreLdGWAf5Lncpj2focOHX8sr3YnOHY0q3O9f4V80LIh\/clbfpawu1UEbqsFY63aYY+drC6+5+6gXEng\/dUv17BgCkM1Ze6mguPpSdZLx71vum5xIuikSaulMTPdjwzXqpB4ATqMsNMxd5rN\/soBwBJvKvke08V7qkvb2GVZa4ZYypCQOPmClsvLao+qoBZ60VJrqOCtbeXLHXhMtrlRcwPBsWFMPJsHNd08drVTdjESYHUSdnY+i0NIq+ym+PcKNcZWVpdA\/Y76TwfRYvZrzGxp7rSx5JuyFlbdLTCwveAMH3WpdMZT7d7pWvl08zHtebabX0\/RauPXaRk7D9XPsV8ri0ZiAc6VhvszK9x8MSPjaYybY\/ixVLrjnL2fF9bwy\/yxejIQpUo0q+WEIQgVITyhUHCEIUByhCAqBCaECQmhQKrQmgIEhMoQJNCECRSlSXdAJJoq1Qk0UilAITr+UkB3QnSFQqRXZMpV3QFfZFJoUCKE6yhAsfdCYQqFSKTTQRRSdICBITAtFKBUnSEBAsopSR3VEU0wKQ=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":60,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0zlVAAEAGJpvAqAEHuBnMCtAEAFDFgkcXq+EOBIAQEAAF8gAAAQEICh9l+gv\/\/Wq0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":59,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":60,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8NAADwGW2W4GcwKwKgBBwBQ0ASr4Q4ExYJHF4AQA6tqbwAAAQEICv\/9arQfZfnIKISE0IBJNAQIjKaEj9kBafqhBQJGAn+EUqD\/AO+EIpCgSO6aO2ECQeEzwgC1QgMIpMI9UCFoT7oq1AqRR9Uwi0C4Rj0RSdUgRRRTRSDBaEvVCoadqKfCCSBwkOVLsgEUhNAgikxlCASCaECQpVSSA7oqij7IpAIpM\/ZHH3QKkJoIQJCdZQECTRm0IDsisopNAqRSfCPwhokJ\/hFIBIp90+6CKaCMoQCE0kDSrKeEIEjKde6KQIJoqkVhAH1KE0YRSRSaByohITR+VQkKVJcFCCyisp1aKQJCY4S+6gCE82ikd1QD8oRnvlCAQmgqBbaQnXZKvdUJCfKYCBIrKaEBSEJqKXZCO6aIXuhPhHdAkJ9kIo7JJ0hAqTQikBSSaECTR+EIBFJopAkZTQgVITQgVITRSGiQmnSBUlLIIYnyO4aLUxwsHWZNuj8MYLzSrWGPVlI8L1fUGaVzpDfm3Eevp+Fjia2aQv1DvwTSn1KRokcd4sYXHkkPYk+y8+ctftvSYY+3OmPUDq\/TtDBsj27j\/iLXn+pdXn1Ti2IljP8Al5WM7icCkeATyQuPTjHpx4ccbu+XOmgdI03v3Hvazf0x26\/GNV3XaMLQMpBjQPYq70cvFx8v9c25LOnNb9Ty4q5mmDKoVS3llfZRpXZx8PHx\/wBE0zbC0cY9FEsNVS1FpCgcJtus7mWBYVZ8oyArZZBQAq\/dYZZ37iCHX\/ytWpXnzzxnar7xe0ID6yWrIZZTxG+u1qDnTH9B\/dXbyZcuN+L\/AMV0PGx9CYlb\/j\/K5x8a\/oQRPX0q9TjeSf8AxrpNmA5\/kKMrWTMp1eywBs4o8flbIx5BZ8yb2Y5TK9pYshj2MovDq72tcQcCMAjtlcqSWdrzsiJAOE49ZIHNaYyEliXKb1\/4eq0khDhWF7f4enJ1EbXZB4XzCGeRjq3OB+69F0vqfUdOWyxMc9oPdtgLpjcfl5PVcGWePZ9XIwlS81oPi5slN1kBY7uWcL0UGoi1UQkhe17T3C6Ph54ZYXWUSSCmkowSE+wQgVIpNCAHKChCApJNHt3QHdFITQIoIQnlAqyhCAgEu6kgjFoFn8I7J2i0CTCKRwgVFFJ5zhCBcIATTQJHZFJ8IEkmjlAIpOkUgXCKT\/dCBITQgSE\/3QgSDlBq+UwoFlOkIVCQb9VKghERR6p1aKRSQmEUECpPhCfZBEIpNNBEoypJHhEKkEeyaaCNJoQihCaCiFSAmhAqQmhAgEUmkgKRzhHKEBSKQjKARwnSVIBCEIjn9qRSE0Wkgcp9kKgUgo0pBA6pCdYRSBUhP84R62gKRSfZHZQRIymmAhULsik6RjtwoEhOsoVUZRSE0QqRSaKQKkJhFIDCE0KKjm6T7J\/7oVCRn1RWc8p0iFQRwpFL9KiigkmnSIj3TUkkIX7IpNCKVJo5RwUCrCKT9E+6BICK9Ud0QIKaL9kCRafKKpAqCE0IBAwEUmikhCfdEJHdNFIFVITCEUkJopAk6vKKQiBCE0UkJoQJCaECRSdIQHZCEZ4pAIR+EcIBH3QikAhCKQCEJ0gSE0KBUhNFZVCpATQilSDkpoRCTQmikmBZTAXM6z1dnTIC1oDp3iw30HqU2uGNzymOPldruraXprLmdbyPKwcleD638Rz69xaXNhiGA2\/+q4Gv63qNfrXHbJLuNnaax91lfDM+RxaAxhOAcn8n1XLLk+n6b0X47j4bMs51Zf8ARoEkUrzuks96FrQ2KJ8f9p49wWkLFHoSTcmrDAfV9f7LtaHTREOLJhKWisArz5ZV9rqsnean\/wB\/TnFhGPRRyccLdMzY4\/usbjZPZNnVtWePVQaBfAUi4FRJqiCinVlVkdxwp7rNHCi5wvPooRAnsokUm5zfyo7gQtbL4ZpgGG9oJWd2\/kMblbJWb245VHma2nDj3Wo8+VsZHTAEjxWAqB0=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":59,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":59,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":66,"pkt":"gCqoTGHM5JjWH70UCABFAAA0boBAAEAGhnDAqAEHuBnMCtADAFAmSxPz8j0hRYAQD9J+pAAAAQEICh9l+lD\/\/Wqq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":60,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":78,"pkt":"gCqoTGHM5JjWH70UCABFAABAV2ZAAEAGnX7AqAEHuBnMCtAEAFDFgkcXq+ETrLAQEAA5vwAAAQEICh9l+mv\/\/Wq0AQEFCqvhGVSr4R78","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":59,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2362{"flow_id":60,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8ZAADwGW2K4GcwKwKgBBwBQ0ASr4R78xYJHF4AQA6tdEwAAAQEICv\/9arQfZfnI9E0MuqP2Xb1B02lhdLNKGgcLyXUviDcdmmZtB\/U7lbwxt8OefJjjO7d4ETGFzqA91im1GlYSPEb+FzGRy6w7pdU1ocbzZVsXS9K5v93Uu33VV29bXfHCTy82XLlfETdr9MLAsn7Kp3U4B2ctbOjaJ4cGvLi0WdpT\/oWmkHklP72tyRyueTmydQ07hVFYppY5G+UrsydALWlzHNcO25cnVaUwP2PjLHehV1EuVU6Igz7T3WrUxbIq7g2smnG3VNI5tdLVAuY60q41bCxrowe9YWDVSCGUAgmxz6LXBKBo2OP2\/ZZdRcpLgLAwVJO76fqNZce74sZCbcfU5WvSiTwgWnvSxX5ls087o4w0EVzwtz9vl59rqLZnTCJ24YqktBJ4Ti4gnFLZo4v6gZGSSBjGML3ED0Sihh8RrDDbQRabm2bjdNGl1AE8ZDnBzXAgGvVerf8AEnX4PiWLSavX+EbbbW1soi7K4HVunzdDe+SGWBpLQQwi3EH7riabWSanqjZJsucMn8LpvU7VxuMy8x7z431usJ0UcnU4NSx24gQN2kHjOV9D6EH\/AND0fiElxibd\/ZfDmaKfxw+R+4XYs3hfe+ns8PpulZ6RNH8JMt+HLkx6ZIvwkpUkjmSaPspUgjSEzQCW4EYIwiCkVlcrWfEnSdASyfWxteO12f4Xg+v\/APEDUTymHp0ngQj9deZ3\/ZXX2sxt8PqPAUWmgvhb\/i3rD2bP6jqNoPAf\/wBUM+LOrxxtaNW9pH6wcn7p\/H7b9rN92sNaXOIAHe1T85BRcJWbR33ABfC9X8VdV1Gn8GbVyPjd6nP5XHdqZnuJLn0PfBT+P2s4svl9t6j8c9I6fI6LxPHkby2I3\/PC58X\/ABE0k5saUsZ6vlaCvjr5HEX\/ANUCXaPys9c+mvZmvL7loPjXpmtk2O3Qn1f9P7r0UcrJWh0bg4H0K\/NzdQQ7GK912elfE3UOlvDtPqnhoz4ZNtKsyxvnszeHKeH3tOl4ToX\/ABDg1sjINewRSnG9v0n\/ALL28crJmB0brCtjlvvqrEUjunSypIRSdIhUik6RSBITpFJsLKKypITao0ilKk6TZpFLupUjb3Q0SVKVZQgjSadJIBKk6TqsIiNJp0ikCSpSQgVIpOkBAkJo9ECQn2RSBeiE0UgSE6RSBITpCBUik6RSBITRX7IEik6QgjSaaEEcp0n90ZP2TYVIpOkIEhHKdIEik+6KQYPwikyELSFSfZCEAhFJ91Ak0e6FQIpNCAS9k6QgQCCMphCAQhCArKExlKkAik0d0Uq9E0IQKk00YGUCR2QEUgOyP2TpHZEJCdI7KKSOQmmiEKST4RyqoQikICkUik1AkJ0gjCoVIUkflQJCdIpELn8IqwmaR9kUqQmjJRCqwmAn2CKygSKTQgVITRSASyfspDjskgKBHsik0IqKdWEAZTQJClSVIBCaVYQCPymhBGj906TRWUCRSaaCKfoik0CAylSkEqygKQmhQJCfBRSBZQn3RSoSE6RSBITQoBCEKqEJgI4UQdl8e\/4hwhnxLJQoGNp\/7r7EBY4XzL\/iPoyerwTAYfFV\/YpvTpx\/1PnO0nhTEJIu+y3DT2QKCuZpSW12Wbk9cx2w6OP6nW0A4IRp9O6SeaPGASB7hZnF0MojAHleBa6WlBb16IbcPsfkhccvL6vBl1emzxvxpx9dEWSNsVfC6XQ+jt6hOWB21jfM95\/2Cr6rAWeZzhYccd+Vq6FqBDDLe4eYYtXq7bfP6e70buk9M0rGhjHSv7lxJXY6f0np+oi\/u6RrifYqEBgbA2RwB8tgq2DrkDNzGZLeQAvPcrle709Mk7H1H4L6edKZtI+TTvPIDsLw+q6dqdFMWtn2nnJoH8r2\/U\/iZsOlLDGbcLa3uV4vVdSfq5SHsO3sK4XSbjGpWiHq2t0mjeyURSlovc5+f2U=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":60,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":60,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319118,"pkt_len":1514,"pkt":"5JjWH70UgCqoTGHMCABFIAXcl8hAADwGW2C4GcwKwKgBBwBQ0ASr4SpMxYJHF4AQA6twsgAAAQEICv\/9arQfZfnIuB7hex0+u0+rg8SJwN9ryF5spcbuPVx5SzTganp0r3h07iXAUCTwFkfp4mDzfp\/lei1DC8ZJAXnutTw6XTFjMyyYFZKuNta1jjNuZ0lwf1nxskRhxA72RQC9NB0eKPQOjlY0vkFuv1K5vwl0wv1Xjv4Av\/svV6u2Aq597pOPHWO6+YdR0TtHqHxGy2\/KUaGbezwnHzt7leg63D8zdfU04XlXB8L8ggtPIXfG7mq8\/Jj03cjoFrmkBzQQtUXhmrYsDOo0wB7WuJ7g0pf1KvphH3LkuNZmcjpvYxuQBayzysiaS40sj+pTSDaKHsBlVx6TUaqQEg16u5STXkuW\/wCmE\/WPkdtYKHotEGne1heRTj3W3S9NZEAas+pWrwc1SmWX0uOF33ed1OmLTlp5VLGucA0j2XqpdA2VlurlZT0oxyWcrE5G7huuHEAx92b9Ao6qj5rF+ncLqS6UQ6q3\/SMlc\/VNEmpcQ2y7iu61Mt3s7Y8mXHhcfhme01wqSLPqutHonStcH20geX7+6wOhcxxG3Pp6LrK8OktFnVBvAcCFt0DPC1bonCieLWSGJ7ZWvGKNrswFpfJ4\/wDqvADHOHv2Quvh7P4P0rZPiLR7i0Fm6Sq7gYX1IxsJvY3d61leI\/4e9Idp4dXrJSXB0hZGXDkDk\/8ARe5W54ePku8iKSaFXIu6aFyuu9f0XQtE6bUSef8ATGOXH0RdNXUOpaXpenM+qlbGwd3Gr+y+RfF\/xU74hlbAwBmljNj1J9Vy+u9f1fXdU6XUP8pPljvDQuQZGDFF3vdKW\/T08fF80PkjZneL9AFWdYC2tpI+6qfISThoHoAqyXH0H3Cw7f2Sc4SX5ar1VZFBuf8A1TsEZyljdVWfuqnwkC7klXBwFYNqcMTQ3c4FSe4VdKba0qkdYWcm\/wDorZHDsMKsuBIvsiIgX3SIzwT9lI01H5\/hVLvSN3Q7JccKRAOKNhRO4ClUT3AgeWkqF7go7gcFG7acDCCwHuQtmg18+h1DJ9PK9kgOC0\/\/AHhc8Eu7hWA0B7Ky6S6s0+yfDHxL48TZXOa6wPFY3lp9fsvbb2SRtcxwvkL87dK6nP07UiWF3GCDwfYr7H8NdVi1kETg\/fu5s5afRb8x5c8bjXq94TBBKQaTyR+yntAWWCATTpMKLpBOlKkUENI0ilOkqQRRSlQ7IpBEopSpHbhBGkJopEJFJoRSRXunwilUI8oTpCGiRSdIpAkqUqx6o\/dAklI8opQKkKVIooI0nSYCdVlNrpCkUpopDSNIpSr1RSGkaRSlVIrCGkaRSlynhNrpBFKSOybTSOeydJoRSpKlNIqJ2KkUmD6otU7FSKQmg5yKTpFLbJIpOk0EavlP7popQCEFHKBcEpp9rSpUGD2RSdIUCAu7RSfdFIEj7YTrCAgRQnSK9kBSKwaTpCBBCaECQmhAUj3TpFIEj7p0ikC5RSdZTpDSIFopSr0QgVdkqTTpAkUmhFJCaEAhCaISEIpFFo4TRSBUhNCgVJ0ghCoEYKKRSAwhACaBITQoEhNNUKsIpPuikCpCYRSgSE0FAfZFITpUJATrKKUCR7FNMD1QRrCadJ7U2aqCAFPajaU2vTUaRSntPontU2dNV0ilZtRtTZ01XSdKzaltTZ01CkUplpRt9k2aQpACntRtV2aqFIpT2lFKGkKTpSpFK7TSACdKVIUUgE6sVSOFIeqD4V8f9H\/pXxBPtbUMv91hHFHlcvp3w67qOjZOJwJJHlscYFkkBfXvj7oJ6x0N00Lb1Om87fUt7hfE4uoa7p29umnfEMnHY91yzls\/i9nBnjJ3jnyQuZqHRuFFrtv2pbrE0Bj4a0kLnu3GQvuy42SfVTLnC3MPIyFbLZp6+DlnFlbZ2sv\/AFXRPc13h3dGgrpNHLPIxrGlz3cNGSU9Ppm6lhLcvGSFs6dNLoNbHqE=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1306{"flow_id":59,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","pkt_oversize":false,"pkt_ts":1484319119,"pkt_len":733,"pkt":"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","pkt_caplen":733,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":17,"flow_packet_id":230,"flow_first_seen":1484319036854,"flow_last_seen":1484319110632,"flow_tot_l4_data_len":202128,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":878,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"104.86.97.179","src_port":53141,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1484319034890,"flow_last_seen":1484319034890,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","l4_proto":2}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":58,"flow_packet_id":2,"flow_first_seen":1484319118629,"flow_last_seen":1484319118652,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":47,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57093,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1484319042988,"flow_last_seen":1484319043002,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":50,"flow_max_l4_data_len":114,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":59180,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":45,"flow_packet_id":71,"flow_first_seen":1484319064669,"flow_last_seen":1484319117874,"flow_tot_l4_data_len":55747,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":785,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53193,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":46,"flow_packet_id":38,"flow_first_seen":1484319064671,"flow_last_seen":1484319065592,"flow_tot_l4_data_len":17226,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.191.17.51","src_port":53202,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":24,"flow_packet_id":27,"flow_first_seen":1484319049465,"flow_last_seen":1484319081182,"flow_tot_l4_data_len":15587,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":577,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53152,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":23,"flow_packet_id":41,"flow_first_seen":1484319048780,"flow_last_seen":1484319080085,"flow_tot_l4_data_len":31776,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":775,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.201.191.132","src_port":53151,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":5,"flow_packet_id":28,"flow_first_seen":1484319032984,"flow_last_seen":1484319063913,"flow_tot_l4_data_len":5698,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":203,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53115,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":6,"flow_packet_id":148,"flow_first_seen":1484319032986,"flow_last_seen":1484319080084,"flow_tot_l4_data_len":68910,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53116,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":7,"flow_packet_id":20,"flow_first_seen":1484319033206,"flow_last_seen":1484319063914,"flow_tot_l4_data_len":2325,"flow_min_l4_data_len":20,"flow_max_l4_data_len":955,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.196.36","src_port":53117,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":9,"flow_packet_id":16,"flow_first_seen":1484319033886,"flow_last_seen":1484319113019,"flow_tot_l4_data_len":2104,"flow_min_l4_data_len":130,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"239.255.255.250","src_port":53776,"dst_port":1900,"l4_proto":"udp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":19,"flow_packet_id":63,"flow_first_seen":1484319043012,"flow_last_seen":1484319085476,"flow_tot_l4_data_len":44863,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":712,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53148,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":20,"flow_packet_id":126,"flow_first_seen":1484319043013,"flow_last_seen":1484319077933,"flow_tot_l4_data_len":124319,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":986,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53149,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":21,"flow_packet_id":21,"flow_first_seen":1484319043665,"flow_last_seen":1484319075730,"flow_tot_l4_data_len":12545,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":597,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.25","src_port":53150,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":27,"flow_packet_id":637,"flow_first_seen":1484319049672,"flow_last_seen":1484319109285,"flow_tot_l4_data_len":724246,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1136,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.24","src_port":53153,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":52,"flow_packet_id":31,"flow_first_seen":1484319114406,"flow_last_seen":1484319117555,"flow_tot_l4_data_len":9868,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":318,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53238,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":55,"flow_packet_id":22,"flow_first_seen":1484319117651,"flow_last_seen":1484319117994,"flow_tot_l4_data_len":9491,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":431,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.32.22.214","src_port":53248,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":59,"flow_packet_id":41,"flow_first_seen":1484319118657,"flow_last_seen":1484319120726,"flow_tot_l4_data_len":33577,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":818,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53251,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":60,"flow_packet_id":41,"flow_first_seen":1484319118658,"flow_last_seen":1484319120053,"flow_tot_l4_data_len":40845,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":996,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"184.25.204.10","src_port":53252,"dst_port":80,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1484319032865,"flow_last_seen":1484319032884,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51543,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1484319036827,"flow_last_seen":1484319036847,"flow_tot_l4_data_len":154,"flow_min_l4_data_len":51,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":57719,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":13,"flow_packet_id":40,"flow_first_seen":1484319035079,"flow_last_seen":1484319073564,"flow_tot_l4_data_len":12115,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":302,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53132,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":14,"flow_packet_id":69,"flow_first_seen":1484319035080,"flow_last_seen":1484319073578,"flow_tot_l4_data_len":41580,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":602,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53133,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":15,"flow_packet_id":25,"flow_first_seen":1484319035342,"flow_last_seen":1484319066108,"flow_tot_l4_data_len":7339,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":293,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.89.39.139","src_port":53134,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1484319114365,"flow_last_seen":1484319114400,"flow_tot_l4_data_len":670,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51622,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":54,"flow_packet_id":48,"flow_first_seen":1484319117605,"flow_last_seen":1484319119338,"flow_tot_l4_data_len":28029,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":583,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53239,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":56,"flow_packet_id":52,"flow_first_seen":1484319117826,"flow_last_seen":1484319118687,"flow_tot_l4_data_len":24118,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":463,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53249,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":57,"flow_packet_id":17,"flow_first_seen":1484319117827,"flow_last_seen":1484319118041,"flow_tot_l4_data_len":4736,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1416,"flow_avg_l4_data_len":278,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.41.30.5","src_port":53250,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1484319049641,"flow_last_seen":1484319049665,"flow_tot_l4_data_len":124,"flow_min_l4_data_len":46,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51728,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1484319035004,"flow_last_seen":1484319035024,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":63,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":51949,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1484319048757,"flow_last_seen":1484319048776,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":45,"flow_max_l4_data_len":158,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":58102,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1484319117511,"flow_last_seen":1484319117538,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":63,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52095,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1484319032882,"flow_last_seen":1484319032884,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":62,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":126,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52116,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1484319049645,"flow_last_seen":1484319049681,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":46,"flow_max_l4_data_len":337,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":52347,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":29,"flow_packet_id":53,"flow_first_seen":1484319050652,"flow_last_seen":1484319052229,"flow_tot_l4_data_len":43203,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":815,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.145","src_port":53163,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":30,"flow_packet_id":58,"flow_first_seen":1484319052216,"flow_last_seen":1484319054100,"flow_tot_l4_data_len":45204,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":779,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.10.139","src_port":53164,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":31,"flow_packet_id":55,"flow_first_seen":1484319054101,"flow_last_seen":1484319056189,"flow_tot_l4_data_len":45137,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":820,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53171,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":32,"flow_packet_id":50,"flow_first_seen":1484319056204,"flow_last_seen":1484319063297,"flow_tot_l4_data_len":23332,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":466,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53172,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":33,"flow_packet_id":49,"flow_first_seen":1484319056210,"flow_last_seen":1484319062135,"flow_tot_l4_data_len":30439,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":621,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53173,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":34,"flow_packet_id":54,"flow_first_seen":1484319056214,"flow_last_seen":1484319063597,"flow_tot_l4_data_len":23512,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":435,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53174,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":35,"flow_packet_id":53,"flow_first_seen":1484319056221,"flow_last_seen":1484319063369,"flow_tot_l4_data_len":28811,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":543,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53175,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":36,"flow_packet_id":57,"flow_first_seen":1484319056232,"flow_last_seen":1484319064277,"flow_tot_l4_data_len":26547,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53176,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":37,"flow_packet_id":55,"flow_first_seen":1484319056233,"flow_last_seen":1484319063283,"flow_tot_l4_data_len":27363,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":497,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53177,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":38,"flow_packet_id":52,"flow_first_seen":1484319056233,"flow_last_seen":1484319063789,"flow_tot_l4_data_len":26295,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":505,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53178,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":39,"flow_packet_id":60,"flow_first_seen":1484319056234,"flow_last_seen":1484319063566,"flow_tot_l4_data_len":38100,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53179,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":40,"flow_packet_id":55,"flow_first_seen":1484319056241,"flow_last_seen":1484319062003,"flow_tot_l4_data_len":26450,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53180,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":41,"flow_packet_id":54,"flow_first_seen":1484319056264,"flow_last_seen":1484319064524,"flow_tot_l4_data_len":23416,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":433,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53181,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":42,"flow_packet_id":58,"flow_first_seen":1484319056264,"flow_last_seen":1484319063421,"flow_tot_l4_data_len":30824,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":531,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53182,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":43,"flow_packet_id":1307,"flow_first_seen":1484319064590,"flow_last_seen":1484319117695,"flow_tot_l4_data_len":1198312,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":916,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.3.140","src_port":53183,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":44,"flow_packet_id":178,"flow_first_seen":1484319064593,"flow_last_seen":1484319070693,"flow_tot_l4_data_len":151306,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":850,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53184,"dst_port":80,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":49,"flow_packet_id":788,"flow_first_seen":1484319070636,"flow_last_seen":1484319117609,"flow_tot_l4_data_len":732491,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":929,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.133","src_port":53210,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":50,"flow_packet_id":1872,"flow_first_seen":1484319091296,"flow_last_seen":1484319117694,"flow_tot_l4_data_len":1794659,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":958,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"23.246.11.141","src_port":53217,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":3,"flow_packet_id":37,"flow_first_seen":1484319032888,"flow_last_seen":1484319063911,"flow_tot_l4_data_len":8015,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":216,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53105,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":8,"flow_packet_id":34,"flow_first_seen":1484319033631,"flow_last_seen":1484319064012,"flow_tot_l4_data_len":11560,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":340,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53118,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":10,"flow_packet_id":36,"flow_first_seen":1484319033943,"flow_last_seen":1484319064790,"flow_tot_l4_data_len":11638,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":323,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"54.69.204.241","src_port":53119,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":48,"flow_packet_id":45,"flow_first_seen":1484319064711,"flow_last_seen":1484319096924,"flow_tot_l4_data_len":26410,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":586,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"52.37.36.252","src_port":53203,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1484319064683,"flow_last_seen":1484319064699,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":49,"flow_max_l4_data_len":214,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"192.168.1.1","src_port":60962,"dst_port":53,"l4_proto":"udp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":6999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflix.pcap"}
diff --git a/tests/result/nDPId_netflow-fritz.pcap.txt b/tests/result/nDPId_netflow-fritz.pcap.txt
new file mode 100644
index 000000000..ffc69c67f
--- /dev/null
+++ b/tests/result/nDPId_netflow-fritz.pcap.txt
@@ -0,0 +1,6 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflow-fritz.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflow-fritz.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1498072707863,"flow_last_seen":1498072707863,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.1.1","src_port":23384,"dst_port":2055,"l4_proto":"udp"}
+0619{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflow-fritz.pcap","pkt_oversize":false,"pkt_ts":1498072707,"pkt_len":222,"pkt":"AAwRERERAAwRIiIiCABFKADQAABAAD8R1PvAqAABwKgBAVtYCAcAvAAAAAoAtFlKxZ0CWWXEAAQBAAACAHABzQAWAAEABIDPAAQAAGjygMz\/\/wAAaPKAzf\/\/AABo8gAHAAIACwACAAYAAgCxAAEAsAABALQAAgC1AAIAAgAEAM0AAgC5AAQAuAAEAAgABAAMAAQANgAEAFgAAgAEAAEAwAABgAH\/\/wAAaPIAAwA0AdIABwABAI8ABAApAAgAKgAIACgACAEwAAIBMQAEATIABAHTAAIAAQCOAAQAUv\/\/","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflow-fritz.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1498072707863,"flow_last_seen":1498072707863,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.1.1","src_port":23384,"dst_port":2055,"l4_proto":"udp","ndpi": {"proto":"NetFlow","category":"Network"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflow-fritz.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1498072707863,"flow_last_seen":1498072707863,"flow_tot_l4_data_len":188,"flow_min_l4_data_len":188,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"192.168.1.1","src_port":23384,"dst_port":2055,"l4_proto":"udp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflow-fritz.pcap"}
diff --git a/tests/result/nDPId_netflowv9.pcap.txt b/tests/result/nDPId_netflowv9.pcap.txt
new file mode 100644
index 000000000..c714bf3d4
--- /dev/null
+++ b/tests/result/nDPId_netflowv9.pcap.txt
@@ -0,0 +1,15 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1568213026961,"flow_last_seen":1568213026961,"flow_tot_l4_data_len":1384,"flow_min_l4_data_len":1384,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":1384,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.134","dst_ip":"192.168.2.222","src_port":48629,"dst_port":2057,"l4_proto":"udp"}
+2227{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1568213026961,"flow_last_seen":1568213026961,"flow_tot_l4_data_len":1384,"flow_min_l4_data_len":1384,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":1384,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.134","dst_ip":"192.168.2.222","src_port":48629,"dst_port":2057,"l4_proto":"udp","ndpi": {"proto":"NetFlow","category":"Network"}}
+2155{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1366,"pkt":"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","pkt_caplen":1366,"pkt_type":2048,"pkt_ipoffset":14}
+2228{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+2155{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1366,"pkt":"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","pkt_caplen":1366,"pkt_type":2048,"pkt_ipoffset":14}
+2145{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1362,"pkt":"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","pkt_caplen":1362,"pkt_type":2048,"pkt_ipoffset":14}
+2175{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1382,"pkt":"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","pkt_caplen":1382,"pkt_type":2048,"pkt_ipoffset":14}
+2207{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1410,"pkt":"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","pkt_caplen":1410,"pkt_type":2048,"pkt_ipoffset":14}
+2150{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1362,"pkt":"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","pkt_caplen":1362,"pkt_type":2048,"pkt_ipoffset":14}
+2186{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1390,"pkt":"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","pkt_caplen":1390,"pkt_type":2048,"pkt_ipoffset":14}
+2222{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","pkt_oversize":false,"pkt_ts":1568213026,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1568213026961,"flow_last_seen":1568213026962,"flow_tot_l4_data_len":13548,"flow_min_l4_data_len":1328,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":1354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.134","dst_ip":"192.168.2.222","src_port":48629,"dst_port":2057,"l4_proto":"udp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/netflowv9.pcap"}
diff --git a/tests/result/nDPId_nintendo.pcap.txt b/tests/result/nDPId_nintendo.pcap.txt
new file mode 100644
index 000000000..6b1b659d7
--- /dev/null
+++ b/tests/result/nDPId_nintendo.pcap.txt
@@ -0,0 +1,272 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1500731320644,"flow_last_seen":1500731320644,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"91.8.243.35","src_port":52119,"dst_port":49432,"l4_proto":"udp"}
+0447{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEUEAAEARTg7AqAxyWwjzI8uXwRgARM2+MquYZAJWA8uWATPgxkj4NJP7aMnpzfBBRQUJGYsmvR+Tfti6\/9NW0mVVtdYfmAlO0lOZx8+qpE3Q9Qrr","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1500731320644,"flow_last_seen":1500731320644,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"91.8.243.35","src_port":52119,"dst_port":49432,"l4_proto":"udp","ndpi": {"proto":"Nintendo","category":"Game"}}
+0447{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABY97kAADIRdZVbCPMjwKgMcsEYy5cARD+fMquYZAJwBDs0OpYMdoXMEb7z5ADj1gGyYiTWHIsmvR+Tfti6\/9NW0mVVtdYcxe3DWV6ogDbeCRSMhnlF","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1500731320764,"flow_last_seen":1500731320764,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"134.3.248.25","src_port":52119,"dst_port":56955,"l4_proto":"udp"}
+0448{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEUIAAEARHhzAqAxyhgP4GcuX3nsARKmOMquYZAL7A4GWfECoPkHlkau7Ijb2F2MvtOU+dosmvR+Tfti6\/9NW0mVVtday4XIk1NfCl4ZHAO\/1Fxpd","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1500731320764,"flow_last_seen":1500731320764,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"134.3.248.25","src_port":52119,"dst_port":56955,"l4_proto":"udp","ndpi": {"proto":"Nintendo","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1500731320774,"flow_last_seen":1500731320774,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"109.21.255.11","src_port":52119,"dst_port":50251,"l4_proto":"udp"}
+0448{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEUMAAEARMBfAqAxybRX\/C8uXxEsARC8cMquYZAJGA3KWhoRABV3FWfmtjLEwkvqReL4g94smvR+Tfti6\/9NW0mVVtdahZ4Yi8EkEbE+Cf5dTG6Dk","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1500731320774,"flow_last_seen":1500731320774,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"109.21.255.11","src_port":52119,"dst_port":50251,"l4_proto":"udp","ndpi": {"proto":"Nintendo","category":"Game"}}
+0450{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYEicAADMRKjeGA\/gZwKgMct57y5cARE+8MquYZAIZA8hA\/JaGDMK+3tfYvFe22fqmgHrRaYsmvR+Tfti6\/9NW0mVVtdaFuHgj\/oXYMvE1kVZddtPK","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYK0gAADIRJBJtFf8LwKgMcsRLy5cARH7BMquYZAKvA36Er5aJDtEHqQojRhZUoJvCATzcAYsmvR+Tfti6\/9NW0mVVtdYSzDno2v3JjwLx3wkvum1y","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":198,"pkt":"fLuKifuEAA6OGXEMCABFAAC497sAADIRdTNbCPMjwKgMcsEYy5cApCSHMquYZAJwBDw1LZb\/EXOjSMMnhE7iZD46YMnDknY2Toj8H3hexFk8t\/NxtrnGBe7\/azeV+ylrxOZLEJSeqtaVZpj8qkFUmEqDrAokbYC5tpC2hu85m1Gapy+z4MYRc6NIwyeETuJkPjpgycOS4O1pGafPZccfGHcxxjvnUp7EdqfBF4phVhM5G67auDF2qW+tEyxBQPI1F2LvuWv4","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":230,"pkt":"AA6OGXEMfLuKifuECABFAADYEUQAAEARTYvAqAxyWwjzI8uXwRgAxHaWMquYZAJWA8yXVTUzOqIQF5fnryP0+vHGauBkgnpg\/l3JWhoveHmlLmCk\/KlHH91gOginu1SxOibCjwrk2+ZC4vC5gY\/cJZCOG2cKiPYfbWTimYvcrXlaATXGHTc6ohAXl+evI\/T68cZq4GSCisvy8OzizHNXNHNFxvlBnsbz7uTtQY7ezg5TcCLEJZBAKpBfk3wsQEIk5zNSuxO5zLZCRqBYumU4AAcrSi8aIYqU\/JDbmE0nE\/JJNtLfdSo=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":198,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUUAAEARHbnAqAxyhgP4GcuX3nsApFX2MquYZAL7A4KXVkGB7PFoUbxdy4R+OmcG274R5p1cluqPszGtOrY8\/h+Ka07KRMGhZXANoJoSM7n8ukD4QCqQX5N8LEBCJOczUrsTufJdxx5Y+oG3liR0QxxR9Ffs8WhRvF3LhH46ZwbbvhHm7EcDtxNE8JSi4yBs1WWoHG7r\/Cy+MHjWKN4dY\/SnlSlGAKEox5xvXQo9d3RTFT0k","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":198,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUYAAEARL7TAqAxybRX\/C8uXxEsApGfqMquYZAJGA3OXVoUOaa8xKMh3YxOqQfCOROhuZZ1cluqPszGtOrY8\/h+Ka05RJidBwdgpJSzxyPBzPUj\/QCqQX5N8LEBCJOczUrsTufJdxx5Y+oG3liR0QxxR9FdprzEoyHdjE6pB8I5E6G5l7EcDtxNE8JSi4yBs1WWoHG7r\/Cy+MHjWKN4dY\/SnlSlX+kXE8MPCEZprJe3ihEAS","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":198,"pkt":"fLuKifuEAA6OGXEMCABFAAC4EikAADMRKdWGA\/gZwKgMct57y5cApJ0aMquYZAIZA8lBiZcTXnuP8YLs46i4bHraEMq7WjvCBH2PH9u8srP3Iemcufe5sR2M7hVT8nUozJzs8wgZYDqIwJcPluDE\/ybENIDoOC1647d8kRLRyY+rqEfnrOtee4\/xguzjqLhsetoQyrta4dT\/\/03wuHT+DCvmbBycQ3KbNRvsDpQDhx\/N7FMdVBo20M7nFIOPG9j9lUHNI4Pa","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731320,"pkt_len":198,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUcAAEARHbfAqAxyhgP4GcuX3nsApNBIMquYZAL7A4OXZkGN7PFoUbxdy4R+OmcG274R5l0FGNIxfsKSIJTz5qciRm\/ff9uNzGLpIGpi50mWj94Lj7g90ho7eX1wFMCprgdi\/SZYRQziW6hpcB3Yv9zBi6ns8WhRvF3LhH46ZwbbvhHmVHRHJkJ4HTUR84NVWbxnsuEFRnw5yeN\/Me8HCNPYe+gN3wZ3HGL8kMjAlRduxCfI","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":198,"pkt":"fLuKifuEAA6OGXEMCABFAAC4K0wAADIRI65tFf8LwKgMcsRLy5cApDk4MquYZAKvA3+FP5cZ06PmBuoT4b\/Aw0ZRGlVlo3nlao9kUI68RNXRfXaRt8YHjUJIs\/n8RE4Y6fq5SHcKL\/LLQqcLwtEImsT\/hpeuMewv1eTGWrIBdZqsDJbPdmrTo+YG6hPhv8DDRlEaVWWjgwdSsBzNMf6WyQnVmCntogxVzv5tLp\/yxBEayPCivKVZ0LOyvWlQk7gPHpHrUwk2","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":198,"pkt":"AA6OGXEMfLuKifuECABFAAC4EUgAAEARL7LAqAxybRX\/C8uXxEsApH0nMquYZAJGA3SXk4VFaa8xKMh3YxOqQfCOROhuZXoGgfSYSbEX4Tyd3KN4GLkDksvvqaPhN1kwrf35K4VGSj4ChwX8piktCtVlAtleO1\/OQKvrJx4IXd2K6ybMWG9przEoyHdjE6pB8I5E6G5ldYvDEO4+Wbyq6ZHHr6oqd1q4rWg\/azktHfl8pTU\/E58drPW+P2AvMNo06vgWHXoQ","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABo978AADIRdX9bCPMjwKgMcsEYy5cAVLrwMquYZAJwBD01h5dfEXOjSMMnhE7iZD46YMnDkr8jZmjTQglcfQu6zfg6r2JZe7qSyngwDYb9e4yf4CuOQCs6Hv1CZlVtYn7j1CdgDw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":198,"pkt":"fLuKifuEAA6OGXEMCABFAAC4Ei8AADMRKc+GA\/gZwKgMct57y5cApFOTMquYZAIZA8pB15djXnuP8YLs46i4bHraEMq7WrNGXfgZp53G0yrVnu8isp6aHkl3b95IZt84RZ03+fMBO45kgkrCufj8hRfEDXcHFp6uHyeAFcj9aWlsmgmgoodee4\/xguzjqLhsetoQyrtarArw8jzsrsd\/tROzfz6njVl7upLKeDANhv17jJ\/gK44a8acNW+JLA5Sk6\/nPpDSH","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYEjEAADMRKi2GA\/gZwKgMct57y5cARF9lMquYZAIZA8tB55dyB\/N7d5wpvhjgPgZzkuZcfEfUnJWILw9udZacGm2+ydjg43yki3W51bZKxtXCSaUY","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABY98IAADIRdYxbCPMjwKgMcsEYy5cARMRLMquYZAJwBD41opd6\/0Kb7VaJ\/p1Qjpgg9yekdPmCLFKJbYUGPwUBGCSFsM1KLosZXewoiuMnhd+A9PAx","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEUkAAEARHgXAqAxyhgP4GcuX3nsAVFpaMquYZAL7A4SXy0HtL7i7Jcm\/lzr8m+PiWTE32Rl3rr7Xs\/CY8yKgb3gvDy6gbNZm6h8KSCnTFTWIPaXBuCgHZJYDYwZFAITr195o4A==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":198,"pkt":"fLuKifuEAA6OGXEMCABFAAC4K08AADIRI6ttFf8LwKgMcsRLy5cApC2NMquYZAKvA4CFi5dg06PmBuoT4b\/Aw0ZRGlVlo2yFe4AVokH1NxQbE+8JJ4iczWZ2OCn49gOOr+26ikTtYzLtcF5GBnpa5RC5qb02jUIXleO5OQGKm9rQdhhVM+LTo+YG6hPhv8DDRlEaVWWjklxtJELjPaxyJmf+JeSKO0CW4afIuFBZyt0Bu\/o\/4IVpfxhbs4SDmuPGuWcBWN\/v","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":150,"pkt":"AA6OGXEMfLuKifuECABFAACIEUoAAEARTdXAqAxyWwjzI8uXwRgAdCRRMquYZAJWA82X1TWseBOCgsOSIWjbi7dRXM4LS+3UGLEY65uMtx950MoguUw+pPJ1k+LdLCwIwi0xX\/acljMzirhsvnX1meTqnbjHAm\/GV4n6ZoC+Jus5NrXNkRm6\/wiB\/dqjJL0L7HOnjXLe","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEUsAAEARHhPAqAxyhgP4GcuX3nsARH9IMquYZAL7A4WX1kH42MdYDJ91485VDDU9eXDD1HkKbcn8CW+suB2ixIHk+FxAT6rFL5pIcL\/H3k7UcGZ3","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEUwAAEARMA7AqAxybRX\/C8uXxEsARCumMquYZAJGA3WX1oWRSFK5W2kBaLameBB+59QvNnkKbcn8CW+suB2ixIHk+Fyh2Eu1g\/lSTgsYj7KkmVAe","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYK1QAADIRJAZtFf8LwKgMcsRLy5cARA0BMquYZAKvA4GFxJebXnLtV3YBAf\/vVtLqxiPnODdDYEdMVVj5iodRtYhnjX3mvG6edo3ChuSud4WU7Fix","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEU0AAEARL\/3AqAxybRX\/C8uXxEsAVM34MquYZAJGA3aYF4XPr9pQObMZWMx7vsHk4f0uPl4K3lmsPtN0ZnGLyuDbJluLJr0fk37Yuv\/TVtJlVbXW4xLKgGUg3MRxWRDm5unrIg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABoEjUAADMRKhmGA\/gZwKgMct57y5cAVKZFMquYZAIZA8xCWpfg5HluPa7TnBPVFguczjKEtHv1ZoFbMSKbo7E\/89BYqlGLJr0fk37Yuv\/TVtJlVbXW\/LlaOL9EGJ6pqOKVup6MtQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABo98cAADIRdXdbCPMjwKgMcsEYy5cAVAsTMquYZAJwBD82DpfhggB7fXVtR98\/ucOsb8MSfSrT9ZEDUvfAjIhQxVXhpRWrevet2g\/lymPcYVPPPPD9t7df2MoPvtlIVyZSf1UBeQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABoK1UAADIRI\/VtFf8LwKgMcsRLy5cAVGytMquYZAKvA4KGD5fiHtfgLVRfwQg+rgnWdyFxg0R4S5DGc6n\/IthD20WVkKyLJr0fk37Yuv\/TVtJlVbXWvy4Pu8uYjj8m\/wE6yCgXyQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEU4AAEARTgHAqAxyWwjzI8uXwRgARDNOMquYZAJWA86ZyTeptWV7cnWxQbWlMGBhpLanB+rNg3Qf+3zjrFiHKjdHz8GcykzM19gGlEOQY8LML8a3","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYEjkAADMRKiWGA\/gZwKgMct57y5cARFwjMquYZAIZA81D2plgB\/N7d5wpvhjgPgZzkuZcfMqGeWJqpAOWWBo126A70vBUHdDY\/I2hCm6+UOQKkwv7","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEU8AAEARHg\/AqAxyhgP4GcuX3nsARL3dMquYZAL7A4aZzkP6PkHlkau7Ijb2F2MvtOU+dosmvR+Tfti6\/9NW0mVVtdbvKuiCs\/qkC0RBIDYDI6Da","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEVAAAEARHf7AqAxyhgP4GcuX3nsAVPy9MquYZAL7A4eZ2EPfL7i7Jcm\/lzr8m+PiWTE32UK2rnNovQYQYIGbwCO8WV+LJr0fk37Yuv\/TVtJlVbXWAGqVPDkAVqg9Xu+FQUgNbw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEVEAAEARMAnAqAxybRX\/C8uXxEsARKA8MquYZAJGA3eaEIfDBV3FWfmtjLEwkvqReL4g94smvR+Tfti6\/9NW0mVVtdYNzyfArQIArXYvyJR2Os7p","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABo980AADIRdXFbCPMjwKgMcsEYy5cAVI+4MquYZAJwBEA4A5nRggB7fXVtR98\/ucOsb8MSfYVkyWy32CJiiULlviRK0FaLJr0fk37Yuv\/TVtJlVbXWL0wRivjk3n1FU55Y8BhEkg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYK1kAADIRJAFtFf8LwKgMcsRLy5cARDjsMquYZAKvA4OIDJniDtEHqQojRhZUoJvCATzcAYsmvR+Tfti6\/9NW0mVVtdZws6Yj+ibFRfqJTXxPXUHc","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":150,"pkt":"fLuKifuEAA6OGXEMCABFAACI988AADIRdU9bCPMjwKgMcsEYy5cAdMYXMquYZAJwBEE4jZpbYGjxSvXasyH6uMmcmytDe5dDYr0lA7DWZ33rlcBecwzC71uuxg2ywyeOU4+Y56UD03fQzF2jJHkjN\/VpemFPplO4R6XXUnHiFsi7zBib3WSYJN5X7Aaf502ypINo65QR","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":134,"pkt":"AA6OGXEMfLuKifuECABFAAB4EVIAAEARTd3AqAxyWwjzI8uXwRgAZO79MquYZAJWA8+atziXQTwuQp4oE0JOf7A1pcL1UCjBwpP8m\/rnbV0HX9eGEFzMWCgDYdqcu+LC6X12kT8vApDLaygAVMEUe\/ZCnfme3aJSfO\/8oGKXKqYNGuQdJ+U=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABo99EAADIRdW1bCPMjwKgMcsEYy5cAVG2eMquYZAJwBEI4oZpv8OPOSTe1J7joDKlE+tmW5C0Q17ywqshWjWWeGwSk7Fjc5BQd41APuNtWe0zb8wdFQRwfUG4PAj4wGNY7jxXk2w==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEVMAAEARTezAqAxyWwjzI8uXwRgAVHKKMquYZAJWA9CaxzilST5uBb2SkYs\/g3+1D\/YtVic317Wc27N9K\/tiaUWZNxnc5BQd41APuNtWe0zb8wdFEbG16Ag8NzAkFRS1MaZTgA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEVQAAEARTevAqAxyWwjzI8uXwRgAVFLqMquYZAJWA9GazDiqST5uBb2SkYs\/g3+1D\/YtVsvBZIRF8UzXDdEwboAx4tGMVc2hekZUSzShjYoboj263S8r6WdVgxme00TAwUIcDw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYEj8AADMRKh+GA\/gZwKgMct57y5cARC2PMquYZAIZA85FGpqhp3MOkXg+3MVFKsmHUuBXcbrFKfWjv7VMYooAoxzH6491U7Fc0vK2W1Fs5wvaU\/u1","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEVYAAEARHgjAqAxyhgP4GcuX3nsARO0eMquYZAIAAACa+kUeXQllo6hzjt0bSmP+9ilqAe0j+EuRfq6yqnRYv5qxyj5iB53IoOd80US4Ku5hVxoV","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEVkAAEARMAHAqAxybRX\/C8uXxEsARCp7MquYZAJGA3ibI4jb99YLsDqmAjLNDVgTSc+TorrFKfWjv7VMYooAoxzH649q\/XpdvwI\/Wm38uYpG\/NiF","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"fLuKifuEAA6OGXEMCABFAABYK18AADIRI\/ttFf8LwKgMcsRLy5cARLMdMquYZAKvA4SI\/5rY9+HnUE29nZOnpfhh\/CFkqbrFKfWjv7VMYooAoxzH649prouk4LCXYyTtWp6JKaNP","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731321,"pkt_len":102,"pkt":"AA6OGXEMfLuKifuECABFAABYEVoAAEARMADAqAxybRX\/C8uXxEsARJu\/MquYZAIAAACbS4kBXQllo6hzjt0bSmP+9ilqAe0j+EuRfq6yqnRYv5qxyj7NPAM7uYC7PsR3nZfysaf6","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1500731322454,"flow_last_seen":1500731322454,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":1,"l3_proto":"ip4","src_ip":"54.187.10.185","dst_ip":"192.168.12.114","src_port":443,"dst_port":48328,"l4_proto":"tcp"}
+0539{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731322,"pkt_len":166,"pkt":"fLuKifuEAA6OGXEMCABFAACYFZdAAOUGcTo2uwq5wKgMcgG7vMgz\/J5Zi2972IAYALkcKwAAAQEICgQM20EAGkXPFwMDAF\/eldsI13HzPlUjJzvSUWyEIzWGgbOyhWxdkIHfN3lgjdjjc7JiXYu\/ooQ\/gzWIbwSHhgUl7CbzYWzRlB2Fe4u0GxVFMrAIoxb4XR3ehSS5gi8Kq9fYRepj92tegMbl5w==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731322,"pkt_len":117,"pkt":"AA6OGXEMfLuKifuECABFAABnEVxAAEAGGqfAqAxyNrsKubzIAbuLb3vYM\/yevYAYBAhG+gAAAQEICgAaYTYEDNtBFwMDAC4AAAAAAAAAKH6viddQUv6VCP9kwNVv1cM5qFQr1yPk5rVuTEPwOaETSFnM6WhQ","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731322,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZhAAOUGcZ02uwq5wKgMcgG7vMgz\/J69i298C4AQALmNxAAAAQEICgQM25wAGmE2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1500731323269,"flow_last_seen":1500731323269,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":52119,"dst_port":33335,"l4_proto":"udp"}
+0475{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731323,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEV8AAEARLjHAqAxyI55KPcuXgjcAVAoAMquYZAIAAACgRQAAPD+rAYcrvhgZcqXY4tF4R087lVXf\/uabOP7DTtPl\/Z68o2TwyTMiy\/1PT8Q0PYJjfL9\/FaWie4QujpeJZMzmHA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1500731323269,"flow_last_seen":1500731323269,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":52119,"dst_port":33335,"l4_proto":"udp","ndpi": {"proto":"Nintendo.Amazon","category":"Game"}}
+0475{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731323,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEWAAAEARLjDAqAxyI55KPcuXgjcAVAoAMquYZAIAAACgRQAAPD+rAYcrvhgZcqXY4tF4R087lVXf\/uabOP7DTtPl\/Z68o2TwyTMiy\/1PT8Q0PYJjfL9\/FaWie4QujpeJZMzmHA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731323,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEWEAAEARLi\/AqAxyI55KPcuXgjcAVCUqMquYZAIAAACgRgAAPD+rAYcrvhgZcqXY4tF4R087lVXf\/uabOP7DTtPl\/Z68o2TwyTMiy\/1PT8Q0PYJjeofEEG4mAZPKsmIYZ3XQPw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731325,"pkt_len":133,"pkt":"AA6OGXEMfLuKifuECABFAAB3EWxAAEAGGofAqAxyNrsKubzIAbuLb3wLM\/yevYAYBAjCGAAAAQEICgAabugEDNucFwMDAD4AAAAAAAAAKQBLCxbftfuQ6RdPW1NPLnDfWKlfYxHKvtpNvQeweHjnBTZbyCTP7uHKIkCEMYM2kYliMuygZg==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZlAAOUGcZw2uwq5wKgMcgG7vMgz\/J69i298ToAQALl8awAAAQEICgQM3wAAGm7o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":124,"pkt":"fLuKifuEAA6OGXEMCABFAABuFZpAAOUGcWE2uwq5wKgMcgG7vMgz\/J69i298ToAYALndSAAAAQEICgQM3wIAGm7oFwMDADXeldsI13HzP0s2vRCyWSgJqWrL1q0E7hs0QgiwABAs9gNMGr70P9cX\/B5wLRi6VUy78fZThA==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":113,"pkt":"fLuKifuEAA6OGXEMCABFAABjFZtAAOUGcWs2uwq5wKgMcgG7vMgz\/J73i298ToAYALmmxwAAAQEICgQM3wQAGm7oFwMDACreldsI13HzQBqKmagIsIg4+BSbtvWrERw7Cx24NMg6fIn\/vYkSB8K040M=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EW1AAEAGGsnAqAxyNrsKubzIAbuLb3xOM\/yfJoAQBAZ3nQAAAQEICgAab\/4EDN8C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":117,"pkt":"AA6OGXEMfLuKifuECABFAABnEW5AAEAGGpXAqAxyNrsKubzIAbuLb3xOM\/yfJoAYBAi9AAAAAQEICgAacA8EDN8CFwMDAC4AAAAAAAAAKpy5SflBIBu0s2Gi6ZAq+orGZgz7Ja9OqwSZiiV3OPowvNxPY9Kb","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1500731326270,"flow_last_seen":1500731326270,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":52119,"dst_port":34343,"l4_proto":"udp"}
+1325{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":730,"pkt":"AA6OGXEMfLuKifuECABFAALMEW8AAEARl9zAqAxyNArNscuXhicCuLNGMquYZAEAAACsAAAACAICgAAAAAAAZU1IgACGJwAAAAAPAfz\/AmL\/\/\/\/\/\/\/\/\/\/\/\/\/DNhnHrgUDeqh96EJudpqr7HTWmwuyiNXAoN8EJ3L9Q9BYy53b12QoycQBbgF0+MGumCDqya3DRDi\/FgfUDp8jmtF0eLtdJawWMd0Uh7gRi0nJAedvr+L4LDG+1PkKHdQjXkwcc63uSwXLbhZGs5rZ8pLuCki3H7JLOG5CI96WiAzLSOgOT5MmMOkBR9lHnUbly8I57OvnsPjzu2ZoGj750rOuJoq4PDp+HTtcuUkR\/yuCERU5DE5fS3WD79Od2EljENI\/Aj0rbyEoWaVKXUGbMeIN\/PHtUKEKwxkiH\/DZpj\/dOZVZle2A+wpaUtVb5Kkq8m0M0sj8U0Nr8\/f9iy5nCcQHobd29hf9qcfXx\/tCnteI0cP0tyykizOxpnlPK2I0STXsPD0wxOnU\/OOfu8Wm3V94s2PEbCeAbRx8PvXHbjtAm8AnmQMBMeFM6TQwwpijOYTfaXxrgmiFU\/AHPdepp0ILcWD5QSKt4MWDsJ\/eC61SjGvCVRvXn2JW5KB\/4JQcfZHw4S\/auTmIFCllOyidDXFohQ4NU8A9vt0e5qrI\/cou3U09qQhgu6ncsvX+jQusCyJhx1EpdaFLaOseb4xo0IjeHtTg5uKzMiP+l3dg6BJfcICpsS0fKy4Lvcxzq4iHlV\/CkZw5k\/5qPEe1WClYIIYAQ1QuHKqZOMgl0qEP1biit38pQoNuI5A\/WZ4yptUyrSpaVacwxp5yZkU47ddcg7lId\/wkwQjzVN9BmlVIcEupSyiP64T8RypU57m5OsmKDUV8cUXr\/nGnwi\/96TbsG+A6i29VkTJzG6j04DbRd\/2rnSbi4lJUC2\/\/AUQQJGvBPVxZ\/JcWHrRv6UUWsmJyg==","pkt_caplen":730,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":166,"pkt":"fLuKifuEAA6OGXEMCABFAACYFZxAAOUGcTU2uwq5wKgMcgG7vMgz\/J8mi298ToAYALn8TgAAAQEICgQM3xwAGm7oFwMDAF\/eldsI13HzQY+jjeZOG1C3fjYOGMEiqu6JsZOF5\/uiXK7AM2l769TTf154q2v9zbCFNCC6ALlbxvM8pv2XV8yyN4WK8eEyQGzfQDuMxNSh1+Sz2yYJMcSF9ukaE370Xw==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":166,"pkt":"fLuKifuEAA6OGXEMCABFAACYFZ1AAOUGcTQ2uwq5wKgMcgG7vMgz\/J+Ki298ToAYALk+VQAAAQEICgQM3xwAGm7oFwMDAF\/eldsI13HzQqAkxUI0xWa6ij6Lpqhc06Pw1+lVbmXZYyKnR37zc7pvIr0pn1DVXpNbupTsD9YOF1tU5U\/oMCUQTYRsQBKpg3f29mFDNobSkLRQiC8x2ocUYzYJyki+uA==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXBAAEAGGsbAqAxyNrsKubzIAbuLb3yBM\/yf7oAQBAR2UwAAAQEICgAacDUEDN8c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZ5AAOUGcZc2uwq5wKgMcgG7vMgz\/J\/ui298gYAQALl5jgAAAQEICgQM31IAGnAP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":117,"pkt":"AA6OGXEMfLuKifuECABFAABnEXFAAEAGGpLAqAxyNrsKubzIAbuLb3yBM\/yf7oAYBAhFFAAAAQEICgAacQkEDN9SFwMDAC4AAAAAAAAAK0d\/G8p0ni2twbzFitrGOytEAUmtCDahFriKpsYeQObBc0l7VsX\/","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1500731326599,"flow_last_seen":1500731326599,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp"}
+0459{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":110,"pkt":"AA6OGXEMfLuKifuECABFAABgEXIAAEARz1fAqAxywKgMAUm6ADUATBSXAEkBAAABAAAAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAE=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1500731326599,"flow_last_seen":1500731326599,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0688{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":281,"pkt":"fLuKifuEAA6OGXEMCABFAAELMF9AAEARb7\/AqAwBwKgMcgA1SboA95AtAEmBgAABAAkAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAHADAAFAAEAAAAeAB8OZDNmdGhwdnY3Znp4MDAKY2xvdWRmcm9udANuZXQAwFAAAQABAAAAPAAENsAb2cBQAAEAAQAAADwABDbAG8TAUAABAAEAAAA8AAQ2wBsnwFAAAQABAAAAPAAENsAbUcBQAAEAAQAAADwABDbAG0rAUAABAAEAAAA8AAQ2wBuuwFAAAQABAAAAPAAENsAbaMBQAAEAAQAAADwABDbAGwg=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1500731326599,"flow_last_seen":1500731326628,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":76,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.192.27.217"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1500731326644,"flow_last_seen":1500731326644,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":74,"pkt":"AA6OGXEMfLuKifuECABFAAA8EXNAAEAGCZbAqAxyNsAb2aItAbvSLGpEAAAAAKACgABWsQAAAgQFUAEDAwYEAggKABpxjAAAAAA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":74,"pkt":"fLuKifuEAA6OGXEMCABFAAA8AABAAPUGZgg2wBvZwKgMcgG7oi3AHA3T0ixqRaAScSCE4wAAAgQFrAQCCAqn0Wp9ABpxjAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXRAAEAGCZ3AqAxyNsAb2aItAbvSLGpFwBwN1IAQAg4imAAAAQEICgAaca+n0Wp9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":278,"pkt":"AA6OGXEMfLuKifuECABFAAEIEXVAAEAGCMjAqAxyNsAb2aItAbvSLGpFwBwN1IAYAg7fBQAAAQEICgAacbOn0Wp9FgMBAM8BAADLAwPpevzeArLIKOrS51pZ0JeD5YrYSKYz0y0ak5UBe34eswAANMArwC\/MqcyowArACcATwCPAJ8AUAJ7MqgAzADIAZwA5ADgAawAWABMAnAAvADwANQA9AAoBAABuAAAANwA1AAAyZTBkNjdjNTA5ZmIyMDM4NThlYmNiMmZlM2Y4OGMyYWEuYmFhcy5uaW50ZW5kby5jb23\/AQABAAAKAAgABgAXABgAGQALAAIBAAANABgAFgQBBQEGAQIBBAMFAwYDAgMFAgQCAgI=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1500731326644,"flow_last_seen":1500731326686,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0398{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0Z1VAAPUG\/ro2wBvZwKgMcgG7oi3AHA3U0ixrGYAQAHYjVAAAAQEICqfRaoEAGnGz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2210{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1500731326644,"flow_last_seen":1500731326729,"flow_tot_l4_data_len":1768,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2218{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+1169{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":7,"flow_packet_id":7,"flow_first_seen":1500731326644,"flow_last_seen":1500731326731,"flow_tot_l4_data_len":3148,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":449,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","server_names":"*.baas.nintendo.com,baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=JP, ST=Kyoto, L=Minami-ku, O=Nintendo Co., Ltd., CN=*.baas.nintendo.com","fingerprint":"8A:0A:1D:D3:A8:96:7A:55:C5:75:B2:2B:3E:45:15:54:0A:B0:FC:94"}}
+0828{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":383,"pkt":"fLuKifuEAA6OGXEMCABFAAFxZ1hAAPUG\/Xo2wBvZwKgMcgG7oi3AHBhc0ixrGYAYAHZCSwAAAQEICqfRaoIAGnGzvjpED3d+ifl8LPLvHMjwxz4I9wOz3Zmh0ZP\/FJuC78ZWJ9gmBbgzMmf3CYpGxV2HBgEBADeMi9\/3AnRg2KaRXT3XiTtU2Ad\/bbZdFEWsdu3ZDKLNm6PhwKAms+disUUupfCl78O8MgGaLjw8rZL7mqFqYFeON2ga0WR7GF9TwsZGS1YmQqg22Qiyk3hBRt3MkvW3cmOKHMd3KtQ29AB+jGFcHbaF994Unkf1cz1Dn0jX5C0mWJuHJ16BfWG5asCgt7NRhbBM2bbkf7GdfL0j4wxIOsjbgcjvtQ+F3V5kZqLijKowzNCR17QbifBtOx\/J128AeaSC7qb4gdxhl9WaDerxrTEqsp43n6tJLJF2wc4c6FpxLihvm2lEFxFHNAPOvhjRHqAiQcsTt5eqeZTUHafxHv0WAwMABA4AAAA=","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXZAAEAGCZvAqAxyNsAb2aItAbvSLGsZwBwYXIAQAeQXKgAAAQEICgAacean0WqC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0FZ9AAOUGcZY2uwq5wKgMcgG7vMgz\/J\/ui298tIAQALl4IQAAAQEICgQM35IAGnEJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EXdAAEAGCZrAqAxyNsAb2aItAbvSLGsZwBwZmYAQAg4VXwAAAQEICgAackqn0WqC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":192,"pkt":"AA6OGXEMfLuKifuECABFAACyEXhAAEAGCRvAqAxyNsAb2aItAbvSLGsZwBwZmYAYAg7sQgAAAQEICgAack2n0WqCFgMDAEYQAABCQQR5o29VFj+n7MFp84Wp939EPkZBOtS0XXOzA2v0+S9E64N9sAqOGcHfPR9VHdniXcdK8ncGp2eTtEpRK6JdZKIyFAMDAAEBFgMDACgAAAAAAAAAALHEUzW\/8WrV65g6eoD\/nV41rVGtx6jgL6CNZRXp39So","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":117,"pkt":"fLuKifuEAA6OGXEMCABFAABnZ1lAAPUG\/oM2wBvZwKgMcgG7oi3AHBmZ0ixrl4AYAHb0QAAAAQEICqfRapEAGnJNFAMDAAEBFgMDACi2I+ltBsLfZhotCOKFkLh8BwbBGvd2mfSn1lyJxur1xqqA+1+M869\/","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2231{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+1004{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":513,"pkt":"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","pkt_caplen":513,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731326,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0Z1pAAPUG\/rU2wBvZwKgMcgG7oi3AHBnM0ixymoAQAIsO6wAAAQEICqfRapUAGnJ6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1500731329336,"flow_last_seen":1500731329336,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.146.242.74","src_port":11534,"dst_port":443,"l4_proto":"tcp"}
+0382{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731329,"pkt_len":54,"pkt":"AA6OGXEMfLuKifuECABFAAAoEX5AAEAGM1vAqAxyNpLySi0OAbv6FA+Od8xLzVAQEsCrFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731329,"pkt_len":54,"pkt":"fLuKifuEAA6OGXEMCABFAAAo9shAACwGYhA2kvJKwKgMcgG7LQ53zEvN+hQPj1AQn2AedgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1500731340826,"flow_last_seen":1500731340826,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33334,"l4_proto":"udp"}
+0390{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYIAAEARLkrAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYMAAEARLknAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYQAAEARLkjAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYUAAEARLkfAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYYAAEARLkbAqAxyI55KPdprgjYAGGgmAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1500731340831,"flow_last_seen":1500731340831,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":10025,"l4_proto":"udp"}
+0391{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYcAAEARLkXAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYgAAEARLkTAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYkAAEARLkPAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYoAAEARLkLAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"AA6OGXEMfLuKifuECABFAAAsEYsAAEARLkHAqAxyI55KPdprJykAGMLOAAAAZQAAAAAAAAAAAAAAAA==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wVAADURN8Yjnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wZAADURN8Ujnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0whAADURN8Mjnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wlAADURN8Ijnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":58,"pkt":"fLuKifuEAA6OGXEMCABFAAAs0wpAADURN8Ejnko9wKgMcicp2msAGPuAAAAAZQAA2muXNqgQrBMBhw==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1500731340941,"flow_last_seen":1500731340941,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33335,"l4_proto":"udp"}
+0458{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":106,"pkt":"AA6OGXEMfLuKifuECABFAABcEYwAAEARLhDAqAxyI55KPdprgjcASL\/4MquYZAEBAADlTwAACP0AEAAAAAAAZU1IBAAAAwAAAABOQVRUZXN0SWRfRHVtbXkAdr5X4NIRIiw3Gy5kQ0UkeA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":106,"pkt":"AA6OGXEMfLuKifuECABFAABcEY0AAEARLg\/AqAxyI55KPdprgjcASL\/4MquYZAEBAADlTwAACP0AEAAAAAAAZU1IBAAAAwAAAABOQVRUZXN0SWRfRHVtbXkAdr5X4NIRIiw3Gy5kQ0UkeA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":106,"pkt":"AA6OGXEMfLuKifuECABFAABcEY4AAEARLg7AqAxyI55KPdprgjcASL\/4MquYZAEBAADlTwAACP0AEAAAAAAAZU1IBAAAAwAAAABOQVRUZXN0SWRfRHVtbXkAdr5X4NIRIiw3Gy5kQ0UkeA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1500731340951,"flow_last_seen":1500731340951,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":92,"pkt":"AA6OGXEMfLuKifuECABFAABOEY8AAEARz0zAqAxywKgMASfIADUAOkdJMLcBAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1500731340951,"flow_last_seen":1500731340951,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0435{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":92,"pkt":"fLuKifuEAA6OGXEMCABFAABON9pAAEARaQHAqAwBwKgMcgA1J8gAOsbIMLeBgAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1500731340951,"flow_last_seen":1500731340951,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0435{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":92,"pkt":"AA6OGXEMfLuKifuECABFAABOEZAAAEARz0vAqAxywKgMASfIADUAOpTc4z4BAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":3,"flow_first_seen":1500731340951,"flow_last_seen":1500731340956,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0457{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":108,"pkt":"fLuKifuEAA6OGXEMCABFAABeN9tAAEARaPDAqAwBwKgMcgA1J8gASlG34z6BgAABAAEAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAHADAABAAEAAAC1AAQ0Cs2x","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1500731340951,"flow_last_seen":1500731340956,"flow_tot_l4_data_len":248,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.10.205.177"}}
+0435{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":92,"pkt":"AA6OGXEMfLuKifuECABFAABOEZEAAEARz0rAqAxywKgMASfIADUAOtIHpfgBAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":5,"flow_first_seen":1500731340951,"flow_last_seen":1500731340961,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"52.10.205.177"}}
+0436{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":92,"pkt":"fLuKifuEAA6OGXEMCABFAABON9xAAEARaP\/AqAwBwKgMcgA1J8gAOlGHpfiBgAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAAcAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1500731340951,"flow_last_seen":1500731340961,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"g2df33d01-lp1.p.srv.nintendo.net","num_queries":1,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":1,"rsp_addr":"52.10.205.177"}}
+0435{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":92,"pkt":"AA6OGXEMfLuKifuECABFAABOEZIAAEARz0nAqAxywKgMASfIADUAOq1Lys8BAAABAAAAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":108,"pkt":"fLuKifuEAA6OGXEMCABFAABeN91AAEARaO7AqAwBwKgMcgA1J8gASmomys+BgAABAAEAAAAADWcyZGYzM2QwMS1scDEBcANzcnYIbmludGVuZG8DbmV0AAABAAHADAABAAEAAAC1AAQ0Cs2x","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1500731340981,"flow_last_seen":1500731340981,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":264,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":264,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":55915,"dst_port":34343,"l4_proto":"udp"}
+0732{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731340,"pkt_len":298,"pkt":"AA6OGXEMfLuKifuECABFAAEcEZMAAEARmWjAqAxyNArNsdprhicBCL5GMquYZAEAAADlcwAACAAA0AAAAAAAZU1IgACGJwAAAAAPAPz\/AL\/\/\/\/\/\/\/\/\/\/\/\/\/\/DNhnHrgUDeqh96EJudpqr7HTWmwuyiNXAoN8EJ3L9Q9lPi1doyYlmiR\/kIBcOYNG3f6ClDHLwoaKdMh+FYL2YCHItfujH2Z4qGo8CMfrSTput8A2wWQpgkAxBIJe0WvlOjtOpz1+6kpnOg7dok0TGK81\/aeKZUUCJvuan8vMhErLm0XKEN1cWoDxH\/OLKVz5pN4b+BSPCYy59gluv93Pq8HtsFMIvC\/lWp43XhLEF2IUu226gZ0swWlxHUEiaoKOkMwyqhQOw2nawlxv1+4u7w==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1500731341194,"flow_last_seen":1500731341194,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":110,"pkt":"AA6OGXEMfLuKifuECABFAABgEZUAAEARzzTAqAxywKgMAcdbADUATDXVYWkBAAABAAAAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAE=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1500731341194,"flow_last_seen":1500731341194,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0690{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":281,"pkt":"fLuKifuEAA6OGXEMCABFAAELN\/tAAEARaCPAqAwBwKgMcgA1x1sA9yl7YWmBgAABAAkAAAAAIGUwZDY3YzUwOWZiMjAzODU4ZWJjYjJmZTNmODhjMmFhBGJhYXMIbmludGVuZG8DY29tAAABAAHADAAFAAEAAAAPAB8OZDNmdGhwdnY3Znp4MDAKY2xvdWRmcm9udANuZXQAwFAAAQABAAAALQAENsAbCMBQAAEAAQAAAC0ABDbAG2jAUAABAAEAAAAtAAQ2wBuuwFAAAQABAAAALQAENsAbSsBQAAEAAQAAAC0ABDbAG1HAUAABAAEAAAAtAAQ2wBsnwFAAAQABAAAALQAENsAbxMBQAAEAAQAAAC0ABDbAG9k=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1500731341194,"flow_last_seen":1500731341194,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":76,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Nintendo","category":"Game"},"dns": {"query":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.192.27.8"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1500731341201,"flow_last_seen":1500731341201,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":74,"pkt":"AA6OGXEMfLuKifuECABFAAA8EZZAAEAGCkTAqAxyNsAbCHphAbtX9RrxAAAAAKACgAAP+wAAAgQFUAEDAwYEAggKABqqagAAAAA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":74,"pkt":"fLuKifuEAA6OGXEMCABFAAA8AABAAPUGZtk2wBsIwKgMcgG7emF9lpyBV\/Ua8qAScSBo2gAAAgQFrAQCCAqoOPNAABqqagEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EZdAAEAGCkvAqAxyNsAbCHphAbtX9RryfZacgoAQAg4GiQAAAQEICgAaqpOoOPNA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":278,"pkt":"AA6OGXEMfLuKifuECABFAAEIEZhAAEAGCXbAqAxyNsAbCHphAbtX9RryfZacgoAYAg5SDAAAAQEICgAaqpeoOPNAFgMBAM8BAADLAwNvKK+fQ4F0D04V95LMArBCLWBC88S5\/t3m1SoEKefZLwAANMArwC\/MqcyowArACcATwCPAJ8AUAJ7MqgAzADIAZwA5ADgAawAWABMAnAAvADwANQA9AAoBAABuAAAANwA1AAAyZTBkNjdjNTA5ZmIyMDM4NThlYmNiMmZlM2Y4OGMyYWEuYmFhcy5uaW50ZW5kby5jb23\/AQABAAAKAAgABgAXABgAGQALAAIBAAANABgAFgQBBQEGAQIBBAMFAwYDAgMFAgQCAgI=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1500731341201,"flow_last_seen":1500731341246,"flow_tot_l4_data_len":356,"flow_min_l4_data_len":32,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0400{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0b8ZAAPUG9xo2wBsIwKgMcgG7emF9lpyCV\/UbxoAQAHYHRQAAAQEICqg480QAGqqX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2213{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":1414,"pkt":"fLuKifuEAA6OGXEMCABFAAV4b8dAAPUG8dU2wBsIwKgMcgG7emF9lpyCV\/UbxoAQAHbY8QAAAQEICqg480UAGqqXFgMDAD0CAAA5AwPGsxfaTPmNDIPpai2fPswQ2J\/UcKw+2HDRhcyzY86OawDALwAAEQAAAAD\/AQABAAALAAQDAAECFgMDCiMLAAofAAocAAVhMIIFXTCCBEWgAwIBAgIQDLc1747+ClgENzVweZfUazANBgkqhkiG9w0BAQsFADBwMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNzdXJhbmNlIFNlcnZlciBDQTAeFw0xNTA4MTIwMDAwMDBaFw0xODA4MTUxMjAwMDBaMGwxCzAJBgNVBAYTAkpQMQ4wDAYDVQQIEwVLeW90bzESMBAGA1UEBxMJTWluYW1pLWt1MRswGQYDVQQKExJOaW50ZW5kbyBDby4sIEx0ZC4xHDAaBgNVBAMMEyouYmFhcy5uaW50ZW5kby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvHjYnPMnI2ujzXQAv\/sZxCk+hQZpiH3YoETjk178sWENTpRVgts\/jLXVmbHrGT698SwHvquQeXNwWukIrOvm4DAUPCajA\/n4RTGKZuf25A7FJg4QwmPGkNBT5ZnZYSKZ772lzG8kPmd0J24gWhHsMNI0dGJ6erGXqXyKCNvV9YzAQR6s25oxroIexQOJX8an2kNoKqU\/tH4oiV6cwV13ckquhdw5vWG8arhUtkAPx4BGUNGdlWycRarCBNjoBZJa\/doJww7Oy3hYAO1ZzIUNn2LOCagw+nvuonYEMURa3Yu1Lb7wKO7GGgesAIj3vHSHW5YgsE1p6HxpmLHypxKdpAgMBAAGjggH1MIIB8TAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUGvBqzm9IwlKorGDLeRMLmrRo35wwMQYDVR0RBCowKIITKi5iYWFzLm5pbnRlbmRvLmNvbYIRYmFhcy5uaW50ZW5kby5jb20wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzQuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzQuY3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCJth37waS4Si9TQGlnGGn1WoNGtRxjm1QsN0jByiblqEr1PJvHe8vw0GiV\/FkL6BgTU30mhllRJMjXyh7qD6zKzvx3821ERVhWVr3GW6Ldzug1ARTxDCpdgt4B87Jlaw7KQTtJOhBp0SPrUlW8z4JtpunQ5u8gjPeEjAJtfkl5tnZJoR6sZl0W2oPnYLRon1vKEQ==","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1500731341201,"flow_last_seen":1500731341285,"flow_tot_l4_data_len":1768,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2221{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":1414,"pkt":"fLuKifuEAA6OGXEMCABFAAV4b8hAAPUG8dQ2wBsIwKgMcgG7emF9lqHGV\/UbxoAQAHaJ5gAAAQEICqg480UAGqqXwWVN09\/JHkCExegWcqI2X92ZdX4kd4jK9pLC6LVSz7jb4M7TG+rK49YI5tz+s5wIo89iOCp8YIohDwbQ96O4l6gvBuqUMxXSVwQrx3Pv7L2IHcrGK8yWgWnVLBXqgxVvDzIhziar2VoBwrae5tUABLUwggSxMIIDmaADAgECAhAE4eek3Fzy823AK0K4XRWfMA0GCSqGSIb3DQEBCwUAMGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xKzApBgNVBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0EwHhcNMTMxMDIyMTIwMDAwWhcNMjgxMDIyMTIwMDAwWjBwMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNzdXJhbmNlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbgL8IkBshtBF\/X7wpkBrJ9IiZlFq5CQJvO3J+fdgc+wzBVhxm5T5QOWpQfVVa0wgIqr9CY7gtA18TQO3LIFJ7vkLERqa7SyLhDOtkLC9XVlfVAr8gd7U2cX1e3hlBomfWK2tLHBR+ol8ncpLGChC3GraWcxxmCpoUPXkRYKjeP\/TXxCwgnMlr1u4uepL1R0Cfi3TtCM6MFKMS7KMyarCsjDXjGe+ZecbdKPgj7gbcWFqGdIxJN5deSCKx1pJy6zReyHkQ1ZX9TJTnRHAqaYxsZknRoCjfCwlJIyzlaorbhXcHdoCC4IaKTJm8USiFBx+1tm\/JIL\/MD9aJoklMvXuMCAwEAAaOCAUkwggFFMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlRVZSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBRRaP+QrwIHdTzM2WVkYqISuFlyOzAfBgNVHSMEGDAWgBSxPsNpA\/i\/RwHUmCYaCALvY2QrwzANBgkqhkiG9w0BAQsFAAOCAQEAGIqViQPmbd9c\/B1o6kqPg9ZRL41rRBaerGP10m5shJmLqoFxhFvtNE6wt3mSKcwtgGrwjiDheaT+A0cT6vWGyllxffQElmvTWVg9\/tMxJVwYOISj5p+C\/YxbmDFOzXieGv2Fy0mq8ieLmXL8PqrVQQva1TahvxxuR0l\/XtlIfAPZ\/YtJoJgmQkDr1pIRpGQKV1TE9R3WAl5rrO7EgJoScvpWk9f\/vzCFBjC\/C39O\/1cFnSTthcMr+6Z1qKwtFu99eSey68KdCwfqqoXTAaMgKEFZQyjSgeOq9ux7O3e2QGKABUFFAe8XBj7ewDObZ9NhLnKH5Gn8EgBXQB5w9R7JtBYDAwFNDAABSQMAF0EEJKHe3+YY8FHx45IAULvdOw==","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+1169{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":15,"flow_packet_id":7,"flow_first_seen":1500731341201,"flow_last_seen":1500731341285,"flow_tot_l4_data_len":3148,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":449,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Nintendo","category":"Game"},"tls": {"version":"TLSv1.2","client_requested_server_name":"e0d67c509fb203858ebcb2fe3f88c2aa.baas.nintendo.com","server_names":"*.baas.nintendo.com,baas.nintendo.com","ja3":"200a99534ce50d35cf40cc3cce4c69b5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=JP, ST=Kyoto, L=Minami-ku, O=Nintendo Co., Ltd., CN=*.baas.nintendo.com","fingerprint":"8A:0A:1D:D3:A8:96:7A:55:C5:75:B2:2B:3E:45:15:54:0A:B0:FC:94"}}
+0832{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":383,"pkt":"fLuKifuEAA6OGXEMCABFAAFxb8lAAPUG9do2wBsIwKgMcgG7emF9lqcKV\/UbxoAYAHaL6AAAAQEICqg480UAGqqXTNL71iuHyPf\/kLADGDfZjypETISFLIbqgaqpA2DlRwBfvXKFYW\/3mkDDvNMxe9FSBgEBAA5NluTeZyZbhNVs1x5m6fkEN6Ih1b+cv2UeXMEbrbtPQmbLCNeWWIg+VRnMyzqwuLugpmjEEPKppardgBoInUlvw1hfp9Dg6H\/Iw8o6tXLZ5QuWNIzfs7CnYWTQQLLzsq03cWMRubcrUjgQF6DAS1IfjqEQPmb0ef2+wr8u4V2Bu0ETvnmxVw+j4XuZeBNHKHhbzJ31XNP25qgfWMXwKbfcXiL578YS2CTZ29uD3pEjd7yTOuyUKjfZjpUZN5SvtKehtIOQ\/sne2vQ5q4oSzFEituK0k0RzxGTGDlKo\/bYlJNmXtf4bLWbN7W57g\/Rmpj5U43t+0bIkc+lWVXSUyVkWAwMABA4AAAA=","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":66,"pkt":"AA6OGXEMfLuKifuECABFAAA0EZlAAEAGCknAqAxyNsAbCHphAbtX9RvGfZanCoAQAeT7JAAAAQEICgAaqsCoOPNF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":192,"pkt":"AA6OGXEMfLuKifuECABFAACyEZxAAEAGCcjAqAxyNsAbCHphAbtX9RvGfZaoR4AYAg5cDgAAAQEICgAaqxqoOPNFFgMDAEYQAABCQQRdwwnZFu4MmOlLH9Hktc1Qg3T0HR0rTnwEJSxtd4UfCeWE9NamkOBWmWpd2lC1Mu0thZYfqrRVn6bZlvyy3QjHFAMDAAEBFgMDACgAAAAAAAAAAA4KxbpnYpcIwstCINxar2\/0j23j5Pi2QcHWHqM1Dzp6","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":117,"pkt":"fLuKifuEAA6OGXEMCABFAABnb8pAAPUG9uM2wBsIwKgMcgG7emF9lqhHV\/UcRIAYAHb0agAAAQEICqg481IAGqsaFAMDAAEBFgMDACjVsJiTFQHcRjHBLKep+nH5FSbEDnWBXLhROldtLnsLhhlBCjoqpg2L","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2227{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+1012{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":66,"pkt":"fLuKifuEAA6OGXEMCABFAAA0b8tAAPUG9xU2wBsIwKgMcgG7emF9lqh6V\/UjSIAQAIvy7wAAAQEICqg481cAGqtK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1943{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731341,"pkt_len":1200,"pkt":"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","pkt_caplen":1200,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1500731342849,"flow_last_seen":1500731342849,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"185.118.169.65","src_port":55915,"dst_port":27520,"l4_proto":"udp"}
+0474{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731342,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEaUAAAQRdQ7AqAxyuXapQdpra4AAVCIdMquYZAIAAADswAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4rX5hDUY6wfFQBAZE4XnJazusJzbVQnhevgQppjVzdvQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1500731342849,"flow_last_seen":1500731342849,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"185.118.169.65","src_port":55915,"dst_port":27520,"l4_proto":"udp","ndpi": {"proto":"Nintendo","category":"Game"}}
+0475{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731342,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEaYAAAQRdQ3AqAxyuXapQdpra4AAVAI0MquYZAIAAADswQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6gjif1bWs4geU7XixG1qL9vpm\/9BWOrfz2cCbEeSTC5w==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731342,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEacAAAQRdQzAqAxyuXapQdpra4AAVKPSMquYZAIAAADswQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6PDZdQtmr\/jnYvUCnbuXCGD7lHXmsq3069ZX\/zt70P0A==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1500731342860,"flow_last_seen":1500731342860,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.100","dst_ip":"192.168.12.114","l4_proto":"icmp"}
+0407{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731342,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAWRkAAAAARQAAaBGlAAABEXgOwKgMcrl2qUHaa2uAAFRVpg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1500731342860,"flow_last_seen":1500731342860,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.100","dst_ip":"192.168.12.114","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0407{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731342,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAeQIAAAAARQAAaBGmAAABEXgNwKgMcrl2qUHaa2uAAFQ1vQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731342,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsA12MAAAAARQAAaBGnAAABEXgMwKgMcrl2qUHaa2uAAFTXWw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEakAAAQRdQrAqAxyuXapQdpra4AAVHapMquYZAIAAADtlAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4Hc0ryUhsZTl7hgk81YTyPwkwwi1eAZXwUjozo1ieJWw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEaoAAAQRdQnAqAxyuXapQdpra4AAVOw0MquYZAIAAADtlAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4v43Lf+EKImUrhG2nv8WvwCeRPn7wxZdni63dPOdtWwg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEasAAAQRdQjAqAxyuXapQdpra4AAVIGbMquYZAIAAADtlAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6P92OaheHCo+iD5a31NND0BACVpyIT8NMwwnLbRUNQ6g==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1500731343061,"flow_last_seen":1500731343061,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"93.237.131.235","src_port":55915,"dst_port":56066,"l4_proto":"udp"}
+0475{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEawAAAQR9ebAqAxyXe2D69pr2wIAVCbFMquYZAIAAADtlwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4hx\/onxePqCY4SU3xjlxtsTZQnwdACOZdpevYKG6n8bw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1500731343061,"flow_last_seen":1500731343061,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"93.237.131.235","src_port":55915,"dst_port":56066,"l4_proto":"udp","ndpi": {"proto":"Nintendo","category":"Game"}}
+0475{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEa0AAAQR9eXAqAxyXe2D69pr2wIAVEC8MquYZAIAAADtlwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6trKJ4rbcL8S1NPouV27EIOISc3sHWS\/Ay6NZ9dnLpeA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEa4AAAQR9eTAqAxyXe2D69pr2wIAVHIfMquYZAIAAADtmAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4QxoxAISmRWzt9Cf2ANrWvuCF9xJxAb2QUBmXaTP0ETQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsABI0AAAAARQAAaBGpAAABEXgKwKgMcrl2qUHaa2uAAFSqMg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsA5O4AAAAARQAAaBGsAAABEfjmwKgMcl3tg+vaa9sCAFRaTg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAjwEAAAAARQAAaBGqAAABEXgJwKgMcrl2qUHaa2uAAFQfvg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsA+ZoAAAAARQAAaBGrAAABEXgIwKgMcrl2qUHaa2uAAFS1JA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAyvcAAAAARQAAaBGtAAABEfjlwKgMcl3tg+vaa9sCAFR0RQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAmZQAAAAARQAAaBGuAAABEfjkwKgMcl3tg+vaa9sCAFSlqA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEa8AAAQRdQTAqAxyuXapQdpra4AAVNmGMquYZAIAAADuYAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7gHFOAdXBNrLexHr6ki3aO6IAjbccnTaLFOeAa9Lm7Cg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbAAAAQRdQPAqAxyuXapQdpra4AAVGrBMquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6fq9sGai6ikNvjNa9eIuajsva71Bd40IWMDrX+l2i+zw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbEAAAQRdQLAqAxyuXapQdpra4AAVFQnMquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5Z74F81QcINUlgU7J8e2rI\/OoEm747jRmh1KKDBPQQTQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbIAAAQR9eDAqAxyXe2D69pr2wIAVHHgMquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5D1RHR1Efs+fOh1A0yv+IMwTJUhr2kL16RwpCbys\/zyQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbMAAAQR9d\/AqAxyXe2D69pr2wIAVKH3MquYZAIAAADuYQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7AkO1\/I\/EwZfSCtaxr8daeTvyd7B0s5uVMaeFPr4bpng==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbQAAAQR9d7AqAxyXe2D69pr2wIAVH68MquYZAIAAADuYgAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6wUv0E6O6beQCdgKAe8WJf0bONaD7cVAGLvmFd+FO+gg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1500731343266,"flow_last_seen":1500731343266,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"81.61.158.138","src_port":55915,"dst_port":51769,"l4_proto":"udp"}
+0475{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbUAAAQR5+7AqAxyUT2eitpryjkAVFv5MquYZAIAAADuYwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5+fKxnOL+boQLScYxPZys77lNbziI76pb\/g4qlyspVqA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1500731343266,"flow_last_seen":1500731343266,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"81.61.158.138","src_port":55915,"dst_port":51769,"l4_proto":"udp","ndpi": {"proto":"Nintendo","category":"Game"}}
+0475{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbYAAAQR5+3AqAxyUT2eitpryjkAVGj9MquYZAIAAADuYwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7xrfou4fqWjlJQi1c1lm8udR6QM9F6Tte6liKDWkKe\/w==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbcAAAQR5+zAqAxyUT2eitpryjkAVC1TMquYZAIAAADuYwAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5Run8isLISlhuFklysgYAwVdq0TTDfSVfOsDm2ryNz2g==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAoa8AAAAARQAAaBGvAAABEXgEwKgMcrl2qUHaa2uAAFQNEA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAEHUAAAAARQAAaBGwAAABEXgDwKgMcrl2qUHaa2uAAFSeSg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAJw8AAAAARQAAaBGxAAABEXgCwKgMcrl2qUHaa2uAAFSHsA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAmdMAAAAARQAAaBGyAAABEfjgwKgMcl3tg+vaa9sCAFSlaQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAabwAAAAARQAAaBGzAAABEfjfwKgMcl3tg+vaa9sCAFTVgA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBoj+XBrhkwKgMcgsAjPcAAAAARQAAaBG0AAABEfjewKgMcl3tg+vaa9sCAFSyRQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1500731343274,"flow_last_seen":1500731343274,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.98","dst_ip":"192.168.12.114","l4_proto":"icmp"}
+0407{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAwIMAAAAARQAAaBG1AAABEeruwKgMclE9noraa8o5AFSPgg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1500731343274,"flow_last_seen":1500731343274,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.98","dst_ip":"192.168.12.114","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0407{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAs38AAAAARQAAaBG2AAABEertwKgMclE9noraa8o5AFSchg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsA7ykAAAAARQAAaBG3AAABEerswKgMclE9noraa8o5AFRg3A==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbsAAAQRdPjAqAxyuXapQdpra4AAVKbhMquYZAIAAADvmgAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6kbg82UwP7WhoJdFXAPrW7l7kjB4\/DcRED9PA54OD4fw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEbwAAAQRdPfAqAxyuXapQdpra4AAVMi4MquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7aZpLntTU\/CF+B3C2x4+9rIgxAF69WvQVXhJViS24oRw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEb0AAAQRdPbAqAxyuXapQdpra4AAVPYTMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5N4Y3458C8apw7Tt08sp5zRpFdBjv8\/rzF59+kHqhXgg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEb4AAAQR9dTAqAxyXe2D69pr2wIAVPNLMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+5nrdBrqQpwF84\/IzTDb7LlWCnxIyS6oQ0iqGhHvHJE9Q==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEb8AAAQR9dPAqAxyXe2D69pr2wIAVKhQMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+6UmVJH1lJqvRbOqlAGiRgG2S4vJoyAARb\/sDLFe6FTyg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcAAAAQR9dLAqAxyXe2D69pr2wIAVEs8MquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7YFRlSsHGsrHxD2HZP9d0brZf2aWcullEoZHyBUf+TyA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcEAAAQR5+LAqAxyUT2eitpryjkAVMNAMquYZAIAAADvnAAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7cWzkXNBckFifa\/wiF2lu1IbEIJGv2D5glCVnWtV83oA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcIAAAQR5+HAqAxyUT2eitpryjkAVE+3MquYZAIAAADvnQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+7Pmfmmtpp9JCGguMuoLQd+CCaeAvOz1q1lla9ZOKa1pw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcMAAAQR5+DAqAxyUT2eitpryjkAVK0uMquYZAIAAADvnQAAiVxWTHQXYLkMmEhv3TFhCo9D90XwqWXbgOlZDx\/Hd+4BgEvZlxbiRl6y9Xw1kBgBaUb\/5nGYo7inqiYxqUA\/VQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAWTwAAAAARQAAaBHBAAABEeriwKgMclE9noraa8o5AFT2yQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAzMUAAAAARQAAaBHCAAABEerhwKgMclE9noraa8o5AFSDQA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAb04AAAAARQAAaBHDAAABEergwKgMclE9noraa8o5AFTgtw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABolHwAACwRyja5dqlBwKgMcmuA2msAVPcVMquYZAIBAADVhAAAyq1jq72SDh1NYqq8pY4F5g53IATYVWg0Iwiei6qOZ2BY18pgsHVLdf3GBfsHCoeT2nA62vuD8XvHZO+dBHmgbQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABolH0AACwRyjW5dqlBwKgMcmuA2msAVKCPMquYZAIBAADVhQAAyq1jq72SDh1NYqq8pY4F5g53IATYVWg0Iwiei6qOZ2Ccml7T6rStj2Y6vO0ifgyF\/dx9Cngo5DDh+40QiESxzA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcQAAEAROO\/AqAxyuXapQdpra4AAVDtmMquYZAIAAADvu9WIKdUJvCWWmpPUMVRbVSL\/mgPmr\/BUPv2dLAdU4LCgzBJY18pgsHVLdf3GBfsHCoeTWMwDLTLrCcWYCpDzP5KUvA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABoWH8AADMRgBNd7YPrwKgMctsC2msAVJEQMquYZAIBAADJcwAAjv2ggaY6vLvxy83EpymXMzhEw12wG5lAnmm998cXqaE5XQ+uMjD3WooDZj+3X1rqL9xbj710quXdx2Ykj5iUZA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABoWIAAADMRgBJd7YPrwKgMctsC2msAVFToMquYZAIBAADJcwAAjv2ggaY6vLvxy83EpymXMzhEw12wG5lAnmm998cXqaE3rM9T4EKBmroWwUVro4bcqG2VZSXyS3krJPnkrOS1FA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEccAAEARucvAqAxyXe2D69pr2wIAVDXxMquYZAIAAADwk8l2KdUJvCWWmpPUMVRbVSL\/muurNNZ\/EDAaO8G0\/FTi1Es5XQ+uMjD3WooDZj+3X1rq136Cus1Tm4jeqNfLwAfUhA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcgAAEARucrAqAxyXe2D69pr2wIAVJV1MquYZAIAAADwlMl3KdUJvCWWmpPUMVRbVSL\/muurNNZ\/EDAaO8G0\/FTi1Es3rM9T4EKBmroWwUVro4bct7OzSpTNipKx4jXrBt7T7w==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEcwAAEARucbAqAxyXe2D69pr2wIAVH4PMquYZAIAAADwuMmbiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP3MEgpYMffxe3Kuuvgv\/98b4T\/1N64\/eqPu6V7fFFK46g==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEc0AAEARucXAqAxyXe2D69pr2wIAVEK2MquYZAIAAADwuMmbiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP0zRLUG8TKv7FPUIzBRpTEyeuahJEB9SIHi2JLigKJtrA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEc4AAAQR59XAqAxyUT2eitpryjkAVBGfMquYZAIAAADwuAAAiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP0lmkOnazq8M6J4sTxXaqpSqgQt\/SehAX+\/yVutWJAunA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEc8AAAQR59TAqAxyUT2eitpryjkAVIWwMquYZAIAAADwuQAAiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP1578slWad2rt4Nfaoyq\/s8of+vXVpKGl\/OrQSwk0lKGw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEdAAAAQR59PAqAxyUT2eitpryjkAVPV3MquYZAIAAADwuQAAiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP2Qg40LCwob4UNz3J7Ff6TnOcck+zRlrzT3W8xubz1htQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsACt4AAAAARQAAaBHOAAABEerVwKgMclE9noraa8o5AFRFKA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAlswAAAAARQAAaBHPAAABEerUwKgMclE9noraa8o5AFS5OQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":70,"pkt":"fLuKifuEAA6OGXEMCABFAAA4AAAAAPwBokGXBrhiwKgMcgsAJwUAAAAARQAAaBHQAAABEerTwKgMclE9noraa8o5AFQpAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABo638AADIR4CNRPZ6KwKgMcso52msAVLfiMquYZAIBAAC2vQAAPVguOprqOJvxf3KBi5kL9ukwb1wq5dqjFVtgaGaBZqgauEqWk94dmSyed\/xJwlvDAc4uea7aPcJHGJnZpBWDjg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"fLuKifuEAA6OGXEMCABFAABo64AAADIR4CJRPZ6KwKgMcso52msAVHxXMquYZAIBAAC2vgAAPVguOprqOJvxf3KBi5kL9ukwb1wq5dqjFVtgaGaBZqhN10vP0qGmIALU3oiGmRStiOXREDnOgx9wTWh3mvaoPg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEdIAAEARq9HAqAxyUT2eitpryjkAVGITMquYZAIAAADw5rbBKdUJvCWWmpPUMVRbVSL\/ms6fyAPfdbX8V8Af6wGuIogauEqWk94dmSyed\/xJwlvDk0yaFa+gUq8YyDiZSKdjVA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEdMAAEARq9DAqAxyUT2eitpryjkAVAuZMquYZAIAAADw67bGKdUJvCWWmpPUMVRbVSL\/ms6fyAPfdbX8V8Af6wGuIohN10vP0qGmIALU3oiGmRStZydUMdiUu614eU0zknGtnw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEdcAAEARq8zAqAxyUT2eitpryjkAVJ\/GMquYZAIAAADxKbcEiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP0VNDfxB721Ce35pyWVGkhESdXdbwDAoVBGzMqD\/f7vOg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","pkt_oversize":false,"pkt_ts":1500731343,"pkt_len":118,"pkt":"AA6OGXEMfLuKifuECABFAABoEdgAAEARq8vAqAxyUT2eitpryjkAVNzKMquYZAIAAADxKbcEiVxWTHQXYLkMmEhv3TFhCu1eRL0sUh1f7FBB1\/G+YP3LwBCwXe5s\/c9OgLdxBm6BM5UFqxh65snYF+XPEFQpmw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":10,"flow_packet_id":10,"flow_first_seen":1500731340831,"flow_last_seen":1500731340889,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":10025,"l4_proto":"udp","ndpi": {"proto":"Amazon","category":"Web"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":10,"flow_packet_id":10,"flow_first_seen":1500731340831,"flow_last_seen":1500731340889,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":10025,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1500731341194,"flow_last_seen":1500731341194,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":76,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":51035,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":12,"flow_packet_id":8,"flow_first_seen":1500731340951,"flow_last_seen":1500731340966,"flow_tot_l4_data_len":496,"flow_min_l4_data_len":58,"flow_max_l4_data_len":74,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":10184,"dst_port":53,"l4_proto":"udp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1500731329336,"flow_last_seen":1500731329520,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.146.242.74","src_port":11534,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1500731329336,"flow_last_seen":1500731329520,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.146.242.74","src_port":11534,"dst_port":443,"l4_proto":"tcp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":3,"flow_packet_id":54,"flow_first_seen":1500731322454,"flow_last_seen":1500731343995,"flow_tot_l4_data_len":6651,"flow_min_l4_data_len":32,"flow_max_l4_data_len":949,"flow_avg_l4_data_len":123,"midstream":1,"l3_proto":"ip4","src_ip":"54.187.10.185","dst_ip":"192.168.12.114","src_port":443,"dst_port":48328,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":3,"flow_packet_id":54,"flow_first_seen":1500731322454,"flow_last_seen":1500731343995,"flow_tot_l4_data_len":6651,"flow_min_l4_data_len":32,"flow_max_l4_data_len":949,"flow_avg_l4_data_len":123,"midstream":1,"l3_proto":"ip4","src_ip":"54.187.10.185","dst_ip":"192.168.12.114","src_port":443,"dst_port":48328,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":19,"flow_packet_id":160,"flow_first_seen":1500731343266,"flow_last_seen":1500731348756,"flow_tot_l4_data_len":46304,"flow_min_l4_data_len":68,"flow_max_l4_data_len":852,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"81.61.158.138","src_port":55915,"dst_port":51769,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1500731326599,"flow_last_seen":1500731326628,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":76,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"192.168.12.1","src_port":18874,"dst_port":53,"l4_proto":"udp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":9,"flow_packet_id":5,"flow_first_seen":1500731340826,"flow_last_seen":1500731340827,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33334,"l4_proto":"udp","ndpi": {"proto":"Amazon","category":"Web"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":9,"flow_packet_id":5,"flow_first_seen":1500731340826,"flow_last_seen":1500731340827,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":24,"flow_max_l4_data_len":24,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33334,"l4_proto":"udp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":11,"flow_packet_id":3,"flow_first_seen":1500731340941,"flow_last_seen":1500731340946,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33335,"l4_proto":"udp","ndpi": {"proto":"Amazon","category":"Web"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":11,"flow_packet_id":3,"flow_first_seen":1500731340941,"flow_last_seen":1500731340946,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":72,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":55915,"dst_port":33335,"l4_proto":"udp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1500731340981,"flow_last_seen":1500731340981,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":264,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":264,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":55915,"dst_port":34343,"l4_proto":"udp","ndpi": {"proto":"Amazon","category":"Web"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1500731340981,"flow_last_seen":1500731340981,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":264,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":264,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":55915,"dst_port":34343,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":18,"flow_packet_id":157,"flow_first_seen":1500731343061,"flow_last_seen":1500731348745,"flow_tot_l4_data_len":48020,"flow_min_l4_data_len":68,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":305,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"93.237.131.235","src_port":55915,"dst_port":56066,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1500731323269,"flow_last_seen":1500731323270,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":84,"flow_max_l4_data_len":84,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"35.158.74.61","src_port":52119,"dst_port":33335,"l4_proto":"udp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1500731326270,"flow_last_seen":1500731326270,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":52119,"dst_port":34343,"l4_proto":"udp","ndpi": {"proto":"Amazon","category":"Web"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1500731326270,"flow_last_seen":1500731326270,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"52.10.205.177","src_port":52119,"dst_port":34343,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":7,"flow_packet_id":21,"flow_first_seen":1500731326644,"flow_last_seen":1500731327201,"flow_tot_l4_data_len":7049,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":335,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.217","src_port":41517,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":15,"flow_packet_id":20,"flow_first_seen":1500731341201,"flow_last_seen":1500731341710,"flow_tot_l4_data_len":7019,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1380,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"54.192.27.8","src_port":31329,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":16,"flow_packet_id":447,"flow_first_seen":1500731342849,"flow_last_seen":1500731348749,"flow_tot_l4_data_len":172476,"flow_min_l4_data_len":68,"flow_max_l4_data_len":852,"flow_avg_l4_data_len":385,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"185.118.169.65","src_port":55915,"dst_port":27520,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":0,"flow_packet_id":39,"flow_first_seen":1500731320644,"flow_last_seen":1500731325506,"flow_tot_l4_data_len":4764,"flow_min_l4_data_len":68,"flow_max_l4_data_len":820,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"91.8.243.35","src_port":52119,"dst_port":49432,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":2,"flow_packet_id":16,"flow_first_seen":1500731320774,"flow_last_seen":1500731322059,"flow_tot_l4_data_len":1504,"flow_min_l4_data_len":68,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"109.21.255.11","src_port":52119,"dst_port":50251,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":1,"flow_packet_id":15,"flow_first_seen":1500731320764,"flow_last_seen":1500731321914,"flow_tot_l4_data_len":1452,"flow_min_l4_data_len":68,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.12.114","dst_ip":"134.3.248.25","src_port":52119,"dst_port":56955,"l4_proto":"udp"}
+0438{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":20,"flow_packet_id":9,"flow_first_seen":1500731343274,"flow_last_seen":1500731343874,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.98","dst_ip":"192.168.12.114","l4_proto":"icmp"}
+0440{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap","flow_id":17,"flow_packet_id":21,"flow_first_seen":1500731342860,"flow_last_seen":1500731343591,"flow_tot_l4_data_len":756,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"151.6.184.100","dst_ip":"192.168.12.114","l4_proto":"icmp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/nintendo.pcap"}
diff --git a/tests/result/nDPId_no_sni.pcap.txt b/tests/result/nDPId_no_sni.pcap.txt
new file mode 100644
index 000000000..3c071bdad
--- /dev/null
+++ b/tests/result/nDPId_no_sni.pcap.txt
@@ -0,0 +1,147 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1604822444474,"flow_last_seen":1604822444474,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp"}
+0432{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":93,"pkt":"EBMxuRBeeDHBvV4kCABFAABPAABAAEAGFoDAqAF3aBD5+ciDAbvkc0fPNh\/971AYEABWfwAAFwMDACKpSo7n5l1NtXHPvYJ17DEID+iXo6vcSBPbb4QBvLt6N\/RR","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGFo\/AqAF3aBD5+ciDAbvkc0f2Nh\/971AYEAB\/fAAAFwMDABPsQXLhLYpNcnxO3uEm2chWzCNj","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+ciDAbvkc0gONh\/971AREABQ2gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1604822444486,"flow_last_seen":1604822444486,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGFo\/AqAF3aBD5+cmWAbsdU0ZpAAAAALAC\/\/\/IBQAAAgQFtAEDAwYBAQgKKlLxbAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz19AADkGTkdoEPn5wKgBdwG7yIM2H\/3v5HNIDlAQAERglwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz2BAADkGTkZoEPn5wKgBdwG7yIM2H\/3v5HNIDlARAERglgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+ciDAbvkc0gONh\/98FAREABQ2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoz2FAADkGTkVoEPn5wKgBdwG7yIM2H\/3w5HNID1AQAERglQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADkGHZtoEPn5wKgBdwG7yZbnV+zfHVNGaoAS\/\/9HygAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0Zq51fs4FAQEAB4YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1208{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":670,"pkt":"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","pkt_caplen":670,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1604822444486,"flow_last_seen":1604822444629,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":20,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0387{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"EBMxuRBeeDHBvV4kCABFAAAuAABAAEAGFqHAqAF3aBD5+cmWAbsdU0jS51fs4FAYEABd6QAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":224,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGFf3AqAF3aBD5+cmWAbsdU0jY51fs4FAYEACjfwAAFwMDAKW4k2EWcWuc6xL3buCNlVs5ZLZz6Z4Of8vW\/Q3EhCGwprLV2IWTE\/rCr6y\/6WWQf7EsmFisp2W5sIg2Ja\/AdtGmdrmDYN\/dTEF0Ao\/T059mWW6gmzlGAzI++2c8A\/65sCD9UX9YZhdiK9773tvHv\/5XG\/DZJ9HN6hdZyxOazZunT8x9BvEroY\/LUwlfJLcnB0BdL4Gf5SHC06tsrntHkmTkJhKpwgQ=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGhAADkG4T5oEPn5wKgBdwG7yZbnV+zgHVNI0lAQAEKFuQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1306{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":736,"pkt":"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","pkt_caplen":736,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":1,"flow_packet_id":8,"flow_first_seen":1604822444486,"flow_last_seen":1604822444807,"flow_tot_l4_data_len":1670,"flow_min_l4_data_len":20,"flow_max_l4_data_len":702,"flow_avg_l4_data_len":208,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0380{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0mC51fvilAQD\/VyrAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":116,"pkt":"eDHBvV4kEBMxuRBeCABFAABmPGpAADkG4P5oEPn5wKgBdwG7yZbnV++KHVNI0lAYAEIA3gAAFwMDADn2aYj+B\/dXPxUno4kNcPEtkFzqj3LyZFhFk9xNRtVgYgSHAakE2pabNM6LB2JauqyxaikRdlEnoUA=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGtAADkG4TtoEPn5wKgBdwG7yZbnV+\/IHVNI2FAQAEKCywAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGFqfAqAF3aBD5+cmWAbsdU0mC51fvyFAQD\/RybwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":138,"pkt":"EBMxuRBeeDHBvV4kCABFAAB8AABAAEAGFlPAqAF3aBD5+cmWAbsdU0mC51fvyFAYD\/fHUQAAFwMDABVqsaEaWbGiD2hE9eNcKIuJuz+m8k0XAwMANcLgJIApZ4awhY0t9Na9EJgjOzFaDNzQBmzZ8s2kSdoPolqS90HDQsAnKyxNMOmP1r9hxlkm","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoPGxAADkG4TpoEPn5wKgBdwG7yZbnV+\/IHVNJglAQAEOCIAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":85,"pkt":"eDHBvV4kEBMxuRBeCABFAABHPG1AADkG4RpoEPn5wKgBdwG7yZbnV+\/IHVNJglAYAENyQAAAFwMDABqjFXpPjKZYFjKJigkOmBTtUDrQaTxYIYlVHA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1604822444913,"flow_last_seen":1604822444913,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822444,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGlCjAqAF3aBB8YMmcAbs\/DuN6AAAAALAC\/\/+FPgAAAgQFtAEDAwYBAQgKKlLy+gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADkGmzRoEHxgwKgBdwG7yZyEa\/jPPw7je4AS\/\/9djQAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/DuN7hGv40FAQEACOJgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1664{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":1001,"pkt":"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","pkt_caplen":1001,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1604822444913,"flow_last_seen":1604822445039,"flow_tot_l4_data_len":1063,"flow_min_l4_data_len":20,"flow_max_l4_data_len":967,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0388{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0tZAADkGyGloEHxgwKgBdwG7yZyEa\/jQPw7nLlAQAEKaMQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":286,"pkt":"eDHBvV4kEBMxuRBeCABFAAEQ0tdAADkGx4BoEHxgwKgBdwG7yZyEa\/jQPw7nLlAYAEJOTwAAFgMDAIACAAB8AwMPxMHsKBsXvES1IjShtU3FIaPaV3fodKFl182Oe4PZoSDkSSMrT+G4DHKylGZE+9t1xT9Bwk1il4gkdGKmixfHxRMBAAA0ACkAAgAAADMAJAAdACC\/+Us5ZodNdZF2v1icha31caTzrjEo6ocsJu9v6PULSQArAAIDBBQDAwABARcDAwBYTWADwDiPz5haIq\/4ANExQS4rUN8wl\/YZd0kl4RFnF8cEcaXp9PlBN\/35wR8WUVU8aP07eeMzDnxs0HLL7+7teEMfhQPIt4cLWgXltUI2LeR8t5GUBjBrhA==","pkt_caplen":286,"pkt_type":2048,"pkt_ipoffset":14}
+0794{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1604822444913,"flow_last_seen":1604822445135,"flow_tot_l4_data_len":1335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":967,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0381{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/DucuhGv5uFAQD\/yJjwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":118,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGlADAqAF3aBB8YMmcAbs\/DucuhGv5uFAYEABdSQAAFAMDAAEBFwMDADXp5plQAx+zPTYbgfadISqs3V5dZWGPL9F5D\/MmxOtwb9vpa1mthxbGN5C5qk3DeuGuWzrOHQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0613{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":224,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGk5bAqAF3aBB8YMmcAbs\/DuduhGv5uFAYEACXEwAAFwMDAKW0Ld72I4gnpFKbYksb5ZnY3X86o5vc4TAnm6Lnvl28lBTOl\/1ciEJE0tzuICFQLYqLiQAGAvp4JxS8UJbI\/Y8Gf\/7CUY718mdQscYFW3gY3DzMteK+i+683zwJiKyze880SzM9VH3mbqPGbsI6lE3ao5xq8Eld4x669Eu3xp0r7+T29AquWsMi0oz0pA8FQvxoqQ6mNLHE1TJJx9kvHZbBLxdz1ZY=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+1557{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":917,"pkt":"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","pkt_caplen":917,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0thAADkGyGdoEHxgwKgBdwG7yZyEa\/m4Pw7nblAQAEKZCQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":566,"pkt":"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","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGlEDAqAF3aBB8YMmcAbs\/Dut3hGv7uFAQD\/iDSgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo0tpAADkGyGVoEHxgwKgBdwG7yZyEa\/u4Pw7oGFAQAESWXQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822445,"pkt_len":85,"pkt":"eDHBvV4kEBMxuRBeCABFAABH0ttAADkGyEVoEHxgwKgBdwG7yZyEa\/u4Pw7oGFAYAER7YQAAFwMDABpGxdUrLYCuTorkmz+QUVhSrRE535QMtYaa2g==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":2,"flow_packet_id":255,"flow_first_seen":1604822444913,"flow_last_seen":1604822446161,"flow_tot_l4_data_len":149295,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"398991c398d60bfa0e3f00f8782dafc9","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1604822447227,"flow_last_seen":1604822447227,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGSmLAqAF3aBHGJcmzAbtjbUROAAAAALAC\/\/+t4gAAAgQFtAEDAwYBAQgKKlL7RgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1604822447249,"flow_last_seen":1604822447249,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGSmLAqAF3aBHGJcm0AbsYxEgFAAAAALAC\/\/\/0wAAAAgQFtAEDAwYBAQgKKlL7WQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":1604822447287,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm1AbvwpFrxAAAAALAC\/\/+HSQAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":1604822447287,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm2AbtLPosXAAAAALAC\/\/\/8iAAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1604822447287,"flow_last_seen":1604822447287,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm3AbsAL2HpAAAAALAC\/\/9wxQAAAgQFtAEDAwYBAQgKKlL7eQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADcGU25oEcYlwKgBdwG7ybNKGfaqY21ET4AS\/\/\/K9AAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbURPShn2q1AQEAD7jQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1076{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1604822447227,"flow_last_seen":1604822447321,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-cf.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0398{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADcGU25oEcYlwKgBdwG7ybQgqbhsGMRIBoAS\/\/95lAAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxEgGIKm4bVAQEACqLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1076{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1604822447249,"flow_last_seen":1604822447330,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-doh.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0398{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybVDiAdt8KRa8oAS\/\/+aXQAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm1AbvwpFryQ4gHblAQEADK9gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybbraGnySz6LGIAS\/\/8FNwAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPosY62hp81AQEAA10AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":66,"pkt":"eDHBvV4kEBMxuRBeCABFAAA0AABAADQG0+RoFkiqwKgBdwG7ybcBQwC0AC9h6oAS\/\/\/M1wAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2HqAUMAtVAQEAD9cAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1350{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":766,"pkt":"EBMxuRBeeDHBvV4kCABFAALwAABAAEAGxSjAqAF3aBZIqsm1AbvwpFryQ4gHblAYEAByzwAAFgMBAsMBAAK\/AwOo7n9Ps15wBazvRSwP0XknzspI1stxfxt\/UzR\/iTVJEyAC8G++cc8\/RPDfJFBfMKnQnmiwhlHCQVzbLmLhap\/o+wAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAnACdAC8ANQAKAQACUgAXAAD\/AQABAAAKAA4ADAAdABcAGAAZAQABAQALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAAMwBrAGkAHQAgTLq0AqwNou6MGsB1+SYEgJSmTUTOD\/TxJYrSVvP1oDoAFwBBBKeqi+5mZF4FqrZM+Nc98bOF1LLJjzR7iMhqwT8EHpJcTJIoY3Ocwhydzi6GkM5amaGkSUUhnwcxZgCBpYGYspkAKwAFBAMEAwMADQAYABYEAwUDBgMIBAgFCAYEAQUBBgECAwIBAC0AAgEB\/84BbhMBAB0AIFOmheJL4xy5gpY\/yJcKeKS\/9XQSn93DrBI1rxRCLVANACDaMBYEhaJFdPvKA8z4jgTRVaj7hLApJOUFPiWRVXl6mwEkut4Z8rAnlJ\/BQOlO633VmiJBVo0HHpTYKwow\/UrgM4eV1qOMwieMsrNSqM1l6bwtgDOlVaEPC0GRn4aCQtU1XP2X4FcQcEBgB0TQYfr+VqTH9px\/hRvQKbytE9L34VP2TUenG1F8iF0heywb5ZSJNRlrHCwIxo1Q1cFXgSmt+bxqFdr2xk3KCZcGELX4JsHF1xtxipkI9hU2eSqna\/RV\/6OZjs+0xDobkL7dH+C4x8IS+6ZbU9dcdpF1KnVLSsBAwCn4gdmjyqOcJkFmyD9MzJR7Kox31au\/1ccnVPYgJWTBHIf96KJnmFelvEa3Tqt25pUSu5EXfJqkJM4E5MPphlNhuXtutSQatEVfktgwClJtegRW83L4awezF4ogcf6f2s73jwAcAAJAAQ==","pkt_caplen":766,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447374,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":20,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1349{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":766,"pkt":"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","pkt_caplen":766,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447380,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":20,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1347{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":766,"pkt":"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","pkt_caplen":766,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1604822447287,"flow_last_seen":1604822447386,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":20,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0388{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1yZAADcGfFNoEcYlwKgBdwG7ybNKGfarY21GVFAQAEIJRwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0857{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1604822447227,"flow_last_seen":1604822447412,"flow_tot_l4_data_len":2133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-cf.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2018{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1263,"pkt":"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","pkt_caplen":1263,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbUZUShoBGFAQD9jvQwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":118,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGSjrAqAF3aBHGJcmzAbtjbUZUShoBGFAYEABl3AAAFAMDAAEBFwMDADUZqwsLW1MkWOtGmKUtw8ZXCceoyCV0DTl4iQE73N2jzB8KcE69+NyCK\/3rgG9EB0B1hfuvyw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":224,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGSdDAqAF3aBHGJcmzAbtjbUaUShoBGFAYEADLSwAAFwMDAKUYyGk0zcfPiUzkI09Rstvy204oDYTqLT\/0hS9EL1gRuUwZL2uYc3oQEM\/bH8L9P9Yt5PcO\/JtsU6o8KkHsvNl2hWhL0nTr4fZLkMCqNClumKtPvnWOcpce02j77IduStu6pJz3Qwjw2dEjhHiusQdfUdjmZUsjxtrM2XLh14qCSKJsiKY6zwFdsFL5hUhr2MZQ6W5gNAymy71PZbh3v5LiNT4kIYc=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0837{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":385,"pkt":"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","pkt_caplen":385,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NFAADcGeqhoEcYlwKgBdwG7ybQgqbhtGMRKC1AQAEK35gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1604822447249,"flow_last_seen":1604822447447,"flow_tot_l4_data_len":2133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":355,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"951c558a-5e07-47ca-a0c0-225da1b33163.is-doh.help.every1dns.net","ja3":"1fd36067223570569bbf156fece40978","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2017{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1262,"pkt":"eDHBvV4kEBMxuRBeCABFAATg2NNAADcGde5oEcYlwKgBdwG7ybQgqb4hGMRKC1AYAEJ0OgAAWzl5kO9BIXBvC41eaDfdG\/GykLbuGlHEboftcLbdOxDqiBq5aOI3Ijy+fRG6TOTuNC9FBclXUCZmf\/xPuJl4EpijMT\/qyEjxeKvDK9YNaZqIQWs\/XskKqeVzJzh6PhzzQIpu2Tg0dAz6Kel+shW4DDqhItRgsqZ+YAneBWU35XpB5bA5jDMoIUUVvHuK5Sr+7hOXPlt+G\/ATnSyOgdiaRUSvOlGRSipMs4r4dpPvwlSCPzzgSSEQfRssZl+szudeu8i1gzIpRI\/5kPZtjq3+YX4vX3REU1t92UNUB23GUdu0tgIGnMQWYOyJZCwztDYwOPJewFefNpIeDeFZl811+88K7Nee3rX5LZ7Yg2gyl8mpEyCyzCjWqpPB+dVLrUN04DCkhHrfiSkMVQvAew0XtLNsk7e+Pv+PRze21KZ1QQGP9PhD6EID+NAOrSZP+lT9+AGiUNvhp6tLYJoq3z01aHM637giPloxE9RipOMp3mnGHh6tNqwnxccHptW5rp8gbkx1CEAk0ak4em7tZ8sA67HzckjGeFXu1Qo\/S2T88PnmCU5z8HRYxo593y1JWCp7q+TKHtk3ose93EypXg+nAMJmiayn9jvFPsucCyRpcsqHlmC2I9tKi0fVq00RQ5bLUV6mad1AWOQ5Vy\/7OTpemVfg2YMODhcDFZEK6CHz9HqU+YnT\/vanI\/OfrTWkcoPpb8zte8wxLGE205j4CyPQQixzTPHOOvo6qBfzdzWxKbRn+eGH\/hICJ3BEGD8Sj+EBOrP3ElWDqidjrpPxim1eZvQuTbzzZyUHn2Y58nE8\/VCzQOC766Wy7KYRSj1zQ39Y14LmiK8PFA3yd5yA0XzavbjpeXghZNbX52zg9XkmXYSPT11nrXRwsJiaW52LSAzxZQXCH69TayX5Z5AkgeWJHMnzQANtdDxP1TDmknOzhKfMTG37A8Hjov20Gg\/+lZK5F\/NBAOO2usabZduNYvT7vKb6jENxja9QcZEiYaOtrfPkH86LMGS6Je\/YeoOG0RqarIBzyxMRqdJ+POOwigEXUr64cAQBlOBUUi4yKt03uvf5uUhs3+Y7Ovp5dA5A08KlEddDIif5akZWDdyI5FaxhfTww\/reuytyr1hqbsJSfkKDMngUxLeNwQAbvo6y9YNcgg1V1vZ5Kz4XZuRSgLkUxanDF8PYsGxEOXU1Xjq5dNfsn4nDLJZzAR0coBOtbrxoTgMupFDgo13Di4VbKAyJMTn17RUNlMFnn4Wi8DwihLArqtaCGXzH3JabdbNRqJ7fRyM2tKFj71t6J1YEch9UdBYPGb7DJpiUe6+Ib5XEHvKnalLheZ2CgZFpFtJbDZkl\/H6wZwhtRFcU\/OhSSEcHdKt+3KM6hKJB9tw6eFyGluFqSahGsP7cEEXV4MRjS6WwV5xkpt5HtYMGftka22mO1zI3rw9A+4J78FoDnfO3vMB2kVtSnJIxM42x8db\/XJJ6mSKsttWCRp\/5vBTV1XkJf2eRwjq4uf0IpBctAi44G1gKb9b7FKbdcedOsCXYG4VpWIGlg1z4vsp564HVr9huvv2cOBEBcXOesyhiNq8GEksf20XcC+yUVcw4elFS8mlM6\/3cUMvyP0g=","pkt_caplen":1262,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxEoLIKnC2VAQD9ad5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":118,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGSjrAqAF3aBHGJcm0AbsYxEoLIKnC2VAYEAD\/PgAAFAMDAAEBFwMDADVYttBPRczgJAloPBpUJv43CLzx2C6zt4Xiqf2J\/YhsPWHk0Thg\/pVwROSjKdfU9vq9bsa9uA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0612{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":224,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGSdDAqAF3aBHGJcm0AbsYxEpLIKnC2VAYEACD8gAAFwMDAKU7ts+bpvRBRuGHt5ewY669+kmmgJnXw5TC1+1BLlfIY+NdTt5Cuw4Y5rP5GVA3URuXUFAf69U\/UwBj4UaI4lGD5grTUDVOO70KDaKHDZ2gbt3FAh5h0vVa+aFfLxdaSUx0jc0yHT0Edh5Oq4QW9M5zjDg4Op3s7K50vgHZ1XRZIqgW+ms6crNBK0meos+WbqRBAfj03LsqOHCc0XTIAESjCambhSc=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":386,"pkt":"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","pkt_caplen":386,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoH25AADQGtIJoFkiqwKgBdwG7ybVDiAdu8KRdulAQAELX7AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447500,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2185{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1385,"pkt":"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","pkt_caplen":1385,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm1AbvwpF26Q4gSVVAQD9S9cwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAofoRAADQGVWxoFkiqwKgBdwG7ybcBQwC1AC9kslAQAEIKZwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2366{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447506,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2187{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1384,"pkt":"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","pkt_caplen":1384,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2SyAUMLm1AQD9Tv7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoowNAADQGMO1oFkiqwKgBdwG7ybbraGnzSz6N4FAQAEJCxgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1514,"pkt":"eDHBvV4kEBMxuRBeCABFAAXcowRAADQGKzhoFkiqwKgBdwG7ybbraGnzSz6N4FAQAEKAJQAAFgMDAHoCAAB2AwOFGKbgIn4J54EaOx9mqrLeDuaPQa428hp2gLt2etmJeiCr++V7bGNoaO02ERHmP51fO+JZbR4AQQj87xtTZ0QmgxMBAAAuADMAJAAdACD4KgmcywHwbSV8dryUN8lEQI4adX8Omy5zxLb0hIl8UQArAAIDBBQDAwABARcDAwpcgYnREDwmkgdGIkbe\/B+Q7xWJ\/P66CVkR5k\/RXENELTG0fjv09sCnBPALcCLK2FIbU+jhiTFCneiT6rhR3QfdjvX7OXHMM4aiORaEnTRLbQr9zkuY8NqnIFyP+u9yH8xh6BJfNLOykb+ACBcMgm5pNs7xtHorqq9bjEU62Wus0vzk3blpEtr3ACmoHG0q9t9VgTEp5S\/WOqdd1onAwOqg65kYBGuCKG00zLuYMooMF23RYQIbX5+e5eRb3Afm4MxW9JK91CTDCLlsZXa+UO3deCpv+rCMszEaW3LT4i7gX1EjDhuxh9DT7gOPBcjm3gFCE\/WAQliYTRKAhEnjtqQxyiisszRxZeFOGRGldp7vSDjBKpxSC2t9+jm7AAdgHo3wqrraQrAzEXhL0te51oYNumxSNQWOZOLQeknAmzDae\/q1IrGFfDgcNcwwCfPd8x42igm6X1jPDeIpU+5xz1JuzAUkKXqhY3qaU2bRq0efvukjvDYM17ElS8b8Y9ZkH+yoYxZ04k7xHaC8JHFA5G9Ll9VXYWWfFYJq2bz8xLWshDsToW73BX58EBMOtJl5k7BjTRPKw7945Y8d\/GqBVJ8rgPI3iEd61gdx\/CWMWJ5F\/l78OBjq5bAzjLcXFaRfJG9tJolSfld6phJa+MEpSAQT2jCnpRdU3+LN\/86muvuY+yv+LnRKdSr9edHDb7PPVzaEanBWKx6++KV1jnL4C51kHhEPeA5545CgYgdAdhzhg56s00fpb01+59noNSI\/LnrWYuFeKCawt+eApp3n++gDRJhOmaN7fivy\/NE4XN+h9YP8m7jw\/hodTYAMavJlkzZMDbo964A6Otkqjf8oB1v6pQg1KlbrHhGC\/9+h3wPC8FzfRjvADuThOwHspPOvYwLTzYplenkZo8gjwEKEDFabWyII77xnZZhjwL5HbNARqwufQSkpg8ZS6PXAuakORvZB1t1DIwmtX5M0L9agWdpHnJuWg\/V+KtPeJDkG9bALon06fuEcW+DwgQEuVDUuz6H4RrvzE0GC8nqSCFgsalMewnSp95fnq3DBkmBADTF0FvZ01ujtWZZ7UUxc8W6xPwaZ506U621W3uJ5mEUX5p0CLJZu5PGzDFCqy849D3kxPZBRU\/2rMjf3DMwqM8B3c+eq8bINLp0ihgoxm6owti1vnbzobAtinwewca89rdUnDVV5pbPzB3Pb7xbzZQ3h6V1U3bArRRBgO4DxFWUWliYHirE8nQouuednt4GqJ0ZYNG+ISHW8dQ4Lfa5jfNQNZ7bAP4PnYSRm+h2dA4sb5JXXNvQ9h1z3p1xHZFEICasXoVWuHXxnW7AHFsCRDf+fDir3OqksD+HU7fd0hDZpS\/VJvqWrEEcCeEWjHNacvSmZ0x35aKFEJ3+\/ywOCVF552xhyj1+gNaU\/0vdEwN0VBUj2xSzuh\/eMmK0+J7ZIEd11j8mgJJL2uK+SSPwk06BUPkIx+33fzAMZSX2Y8kz5con0dU+6amSg5DaSBvTGKw3IPPdbS+S6jmWuKXiHYiVdwKuBtUj06VMNb6mm1CKpwK71Nb74c1KzSnubLJh3w3YW+2Nbch7ZBubjunye9MAWNhFBnWGH0VCLuLM0TLjJVQ+mTY6jc9dTlZXPl3RQGlKPelxtcVRphd5jG9ZYQnW71HOFIo+YSHvrTmfr42tsC\/bavFBxCol\/MgnDZC\/nQqUImwBfE8Wt\/0XrxLZZMyAacXYkmtn3vzJU2lQYvlQJqGk7ZfoMBCjbnKml95Y=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1604822447287,"flow_last_seen":1604822447515,"flow_tot_l4_data_len":2328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"","ja3":"16fcce72c01e54fab4ddabce048c0f5b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2193{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1384,"pkt":"eDHBvV4kEBMxuRBeCABFAAVaowVAADQGK7loFkiqwKgBdwG7ybbraG+nSz6N4FAYAELfagAA0CLFJHYTH+3f+CoA++wF4BQlNoGke5nMoMWwzUFtBrIkvlwrmgn70bYLSdvcAnqhq3GWNfDrZzt0gjfzOX4fmG7MkZeoDlgKxNg4\/OkdGBJ7CHl2vetDWz7rxFGiPDQ+UhKyBdHpKVBD\/\/\/uGLOE9E2dIPQtf9O5feXFhoOFc\/N6+PAdux2IENxqT\/9N2jVKy2Pk8OidZD9zdueElmMmBCL35i8Xd7X\/Uy8DNfhLK0L\/DPvsIjhvhyLH4ohC0Hi9OY1O\/h2HYrg99W5iFmEyuEIa8mqksjzaA5FAPRMh73c\/z4QFpCJThKRpyQTwFx1P6brLqTWapweMZYEOv+37XH6cw0Z28gvgDExalHPW54xK4lek2USx8Q2dTEOkDlVm493ETLUwBLqQ36rYz2bm1GDmeQ2tiI7eDwIR9rkTTqDV+h5wqFSX6KaOt3HYqdvWf2cQhrqxwfVC+XFAAI4o89QW5iD9BeqQKgdMdwXpMHEtz94uQ1GWEEVMsCoStH8eUi\/uzGlArMrG\/b\/WCA6DPFfHJBel0Z3ScTEPN\/dObagJZa4fM3JU3aknWfFpKG\/9WXMtpv79wrllImc0MkysOqu66Ogi5pw24RNznTluqR7im99OELaOQUvxZQi54pr+gJ2FkIRjK3to68L2fklyYUM2qVuEiV80MBAY0p83kMzLdy8240p\/xuSyQ0Aa+t5C8dH0W8j4R8NYuiTsrnJCh3ecMOepBOX74+17e2xAxGn6eIWlbbF2QuMEzF5Q2Fuy70FgmdnzTl6ewUNEC309bkVVluNUIVfBpobiO0VW66p9efkeQKazjAs1i3HcclPODBrKxzOPCqiA5S5srWlsDuZH2h68qDbYLHbyQApP83dC6\/OMKzQKD3GgsxlUAyan80mxgqPk52btKEeEF24CNzsaR6mPX9pG4g1jOTlSFtu7O7D5IpP1KPDYElihDqRHArOkPTIliTxj29zcPYRnIeQbwNEB+VWRnbWa0hcuZ9CuAYarksYlGgAO7Y+mvvg6QTU1epW+mRQb\/UugFRSBHS5QTzW6oPcDFnue3jOJb6PSlZbbBXDIM\/N12tJI2tMtLP\/fT8KppKGtPGI1XRyeNakAmrnNwuFjJrTpCL\/EN5CgKS+fO4DN9qvNq9968NsHO5d2qQW267VuoGqJ\/5PbywEOcksPSC+\/XuPzXpK4CZyw1qkTlmDm\/bAfbzRoQwqn7hN81+WyC71cVSPQJzKDSDbCWAo\/B3bRRTuv+gTFY4tLSunubhM0y8xWWTuMa1OkZYL8\/pN0G3TxdaReJve6rt15hqBDAi1BLkdUlv5mjP5TrJUJp67kTiAZHKBf5m4poYPWMIVwZOsoBVtQyodnQogiR3seaZcnsRCiGAA3Rmdxji9wLe+389bZioO\/z\/5tjtDJqUd+qyne\/cug9PjC2Zv6QVfFBBcLu0\/ogFF7ilAQXlDV4An2ZLEKTBVnKeaR1afDs3yDV\/jR4VSRoIdRY3t15j0afZT30fiV1s0Bjw+mVMbRshuFgxpXoA6z9lbbZU4GoKtqVbBZ60WjCpK2ZkWyz1+MgzT3+zkW3YnHn5KlGsbhT48k95bdDLYAul\/mB5dGc3ODFz6rrVHYfPZVufwTr6QMGrbTqvnW17H+T9QaRsXCXT2JIup+GrBRT0RerBg9uW5QAM5wnF8VppDgrbbVJeHfJq0D7DZ73Adcce4cGxLu2pC1+6UOqbC37lZslbeQpVy\/mbX1i18vMTK7ZKMOr5f+7yz0LEUTOQn45UPb6A==","pkt_caplen":1384,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo3g62h02VAQD9QoTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1ylAADcGfFBoEcYlwKgBdwG7ybNKGgEYY21GlFAQAEL+mQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1077{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":566,"pkt":"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","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcmzAbtjbUiJShoDGFAQD\/jq7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo1ytAADcGfE5oEcYlwKgBdwG7ybNKGgMYY21HPlAQAEP77gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":118,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm1AbvwpF26Q4gSVVAYEABYzAAAFAMDAAEBFwMDADUYts1avE4O\/xjAg4quC9ocdAptdx\/HZ49h9Z81TsMOdX8JF9asuPVhCsGuKzrtU0LsAfvWJw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":118,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm3AbsAL2SyAUMLm1AYEABEEQAAFAMDAAEBFwMDADWCyBjGVxPnrEDjv2aTiWaCo2JvpNB9Jjo07CQqab8elob\/YcbymnfmOO4TXuYnjMpClUlZBA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":118,"pkt":"EBMxuRBeeDHBvV4kCABFAABoAABAAEAGx7DAqAF3aBZIqsm2AbtLPo3g62h02VAYEADi4AAAFAMDAAEBFwMDADVapio6cUkAs\/KE\/6jKgg86AAH4FqT5R3556znkbqMYM5I0lTN7p+rYCs8X8L9rDh9O6TzEBg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NRAADcGeqVoEcYlwKgBdwG7ybQgqcLZGMRKS1AQAEKtOgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":224,"pkt":"EBMxuRBeeDHBvV4kCABFAADSAABAAEAGx0bAqAF3aBZIqsm1AbvwpF36Q4gSVVAYEADLKQAAFwMDAKWUdOfOvDRKbBedbxzURM+WJgtLdotDKNlHlGabIod7Psyofz1RLc5HTF\/7sdnoirr0fqFpw8YW\/6d9eYQu3iwYpHgEj3szBxfkAqcTlMLLvLcXYlwBDlsUtq77Hc2GmouJ7AXexXi32woCmLSLsM4i2Haefn7lI2W\/iw64xcxrVKQN1BJGXkf+mswPA5yDMnLvUko81B1OMqb3ZjzN+saPlbxJJOA=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0827{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+1075{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":566,"pkt":"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","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGSnrAqAF3aBHGJcm0AbsYxExBIKnE2VAQD\/iZjgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":241,"pkt":"EBMxuRBeeDHBvV4kCABFAADjAABAAEAGxzXAqAF3aBZIqsm3AbsAL2TyAUMLm1AYEAADYAAAFwMDALbXiiwjhSis778XCo1IJT5r3YdPbjlGiGnzW0nyaQIdWbV5Z2OvgUN11bveBAzwphDxChHcg4IEB\/c7cD+cfft0tBGgudKCUVD3dxENXyaSUMDcvIBBEyJ2GyXelJbkYrb3b4TBbGaC\/CoYGZYQnBvlFhuyqOoFvhUgdCtTHM1\/I+raBTgG41daGPiB1WJ5meug2a\/OIKdG4FRA7x7ALfMVq4v8CttaAld1aX7P+LLWThhPXhFU8Q==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":241,"pkt":"EBMxuRBeeDHBvV4kCABFAADjAABAAEAGxzXAqAF3aBZIqsm2AbtLPo4g62h02VAYEABSPAAAFwMDALa6Yi0n012UiaqF2nPtJkxybN6GOKC9Q7H+MtsaeRaDGXuJfIIZ6SpI4jWtrSrkQJvo95EZGurJNir63Td8Xv28qpQhHmupEqosR9fA4vVztAfcNWommZq2jDZGFmcb2EValAJL0RyA7Bz8wYRCA5EGeFXF3ojN2WUqc27JvLNnXp4dPqO2zoUWNCUQPG6ZXPO7NsKng4YIlnc+yF6x56j5ycr8KrtKrwfHbQscEfWEKDB0KwPXQQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAo2NZAADcGeqNoEcYlwKgBdwG7ybQgqcTZGMRK9VAQAEOqjwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":129,"pkt":"EBMxuRBeeDHBvV4kCABFAABzAABAAEAGx6XAqAF3aBZIqsm1AbvwpF\/qQ4gSVVAYEADJQAAAFwMDAEYKWen4fxYX9Oc1dff3jGq9v+9GCQeOmHE\/MR2PaU25X42zBGQLo+zebmXfiPpdmzSQsuKXcL4kSgrnyVHopl8BfX4qVtYz","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":129,"pkt":"EBMxuRBeeDHBvV4kCABFAABzAABAAEAGx6XAqAF3aBZIqsm1AbvwpGA1Q4gSVVAYEADbUwAAFwMDAEZtJVJU4Uz0INQ50wvUWI7YinTsI0j7fKk8SPBagVlOfc4T+IKNs0TrM9PEzMPOizoPq6fgYv6QxQNbvFZR+glaqvfjohSa","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+2186{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":1385,"pkt":"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","pkt_caplen":1385,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":66,"pkt":"EBMxuRBeeDHBvV4kCABFAAA0AABAAEAGx+TAqAF3aBZIqsm1AbvwpGCAQ4gSVYAQEADd4gAAAQEFCkOIDSJDiBJV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAofodAADQGVWloFkiqwKgBdwG7ybcBQwubAC9k8lAQAEL\/QAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1078{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":566,"pkt":"eDHBvV4kEBMxuRBeCABFAAIofohAADQGU2hoFkiqwKgBdwG7ybcBQwubAC9k8lAYAEL0JAAAFwMDAb0k4WFYBIr7s1QFkD1o1eqA9bqB7neBT1u7+\/VDDoaFUM+O+V2fQwrfpzxcqPgYn59NP9r22zW7QAfP6hGwt0FIIEdt7tgMqTFC2g\/JAPbIMhDL62QmI21n9eh4UZySH1xG4A9NehaigRxHt63lgw5cgYCQsU2KzxzdBXtQB8SR9ei50iSAr3P4Eew2uCdSER25NrcMoLIcMKpva1SaldKH8\/G9g+pEreS44pcA0CxCpjqyvjSinmZLMa4u7IftQeiR+Okz1yAS4gCjQFl\/eGpAj36HG3eRWe8BEmVJtD4yEJeyZ+bwe63zFq\/qqpY+wOYMOcAulzw9Cp\/Cz+s9EHFPDQwzIQEUHmvMbaij0jBWLdvKNq\/d0ay\/DWgdsnXoSK9lbGt9lG598QAuGICckWDC8Dvuw7r766Nyok5EEr3PRZgVK8PxSucR8duF1pRf1EXVXTIXyzNCk6ycmMESGbnIKJVWf3ypzUZ4ws3zoSG0+zEvN9k6CZCqiGlkVybD4pb1sODJRyv7KGKxJuB2PVQz79nXXyNo0Kkvrvol03a2DoJb30VDYOMLvIA9upQD\/sXQdg4DxVdXjFabkR6NFwMDADk1nR2rhHzzHruMFDyUUm2LGfvysBfchedL2p7PPMmaN\/wgggSxw+jlIZ5h7xQQz1UKYRzkFvCZggw=","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2WtAUMNm1AQD\/jszwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm3AbsAL2WtAUMNm1AYEAA54QAAFwMDABN+w9Q0zd2EFlfgFZTbEqhbSrXj","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm3AbsAL2XFAUMNm1AREADsrgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":60,"pkt":"eDHBvV4kEBMxuRBeCABFAAAoowZAADQGMOpoFkiqwKgBdwG7ybbraHTZSz6OIFAQAEI3oAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1072{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":566,"pkt":"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","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo7b62h22VAQD\/glLwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":78,"pkt":"EBMxuRBeeDHBvV4kCABFAABAAABAAEAGx9jAqAF3aBZIqsm2AbtLPo7b62h22VAYEAAZDAAAFwMDABNCZtDGQgvXBCNH\/tUJ7EBq2y2E","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","pkt_oversize":false,"pkt_ts":1604822447,"pkt_len":54,"pkt":"EBMxuRBeeDHBvV4kCABFAAAoAABAAEAGx\/DAqAF3aBZIqsm2AbtLPo7z62h22VAREAAlDgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":1,"flow_packet_id":255,"flow_first_seen":1604822444486,"flow_last_seen":1604822448446,"flow_tot_l4_data_len":21567,"flow_min_l4_data_len":20,"flow_max_l4_data_len":702,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.DoH_DoT","category":"Network"},"tls": {"version":"TLSv1.3","client_requested_server_name":"mozilla.cloudflare-dns.com","ja3":"5dd472f5a4060141b8cfd05eecf10d11","ja3s":"2b0648ab686ee45e0e7c35fcfb0eea7e","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":5,"flow_packet_id":35,"flow_first_seen":1604822447287,"flow_last_seen":1604822447869,"flow_tot_l4_data_len":8114,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":231,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51637,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":6,"flow_packet_id":22,"flow_first_seen":1604822447287,"flow_last_seen":1604822447844,"flow_tot_l4_data_len":4796,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51638,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":7,"flow_packet_id":22,"flow_first_seen":1604822447287,"flow_last_seen":1604822447839,"flow_tot_l4_data_len":4796,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.22.72.170","src_port":51639,"dst_port":443,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1604822444474,"flow_last_seen":1604822444595,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":20,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":29,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1604822444474,"flow_last_seen":1604822444595,"flow_tot_l4_data_len":203,"flow_min_l4_data_len":20,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":29,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51331,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":1,"flow_packet_id":268,"flow_first_seen":1604822444486,"flow_last_seen":1604822448523,"flow_tot_l4_data_len":22542,"flow_min_l4_data_len":20,"flow_max_l4_data_len":702,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.249.249","src_port":51606,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":2,"flow_packet_id":785,"flow_first_seen":1604822444913,"flow_last_seen":1604822448604,"flow_tot_l4_data_len":502495,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":640,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.16.124.96","src_port":51612,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":3,"flow_packet_id":23,"flow_first_seen":1604822447227,"flow_last_seen":1604822447785,"flow_tot_l4_data_len":5192,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":225,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51635,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap","flow_id":4,"flow_packet_id":23,"flow_first_seen":1604822447249,"flow_last_seen":1604822447807,"flow_tot_l4_data_len":5192,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":225,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.119","dst_ip":"104.17.198.37","src_port":51636,"dst_port":443,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/no_sni.pcap"}
diff --git a/tests/result/nDPId_ocs.pcap.txt b/tests/result/nDPId_ocs.pcap.txt
new file mode 100644
index 000000000..18f894d29
--- /dev/null
+++ b/tests/result/nDPId_ocs.pcap.txt
@@ -0,0 +1,1894 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652784,"pkt_len":60,"pkt":"RQAAPKbzQABABiV4wKi0AkDpuLy6UxRsAv3YCQAAAACgAjkIdPYAAAIEBbQEAggKADWBtgAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":63,"pkt":"RQAAP4JiQABAETORwKi0AggICAiWSAA1ACtxaqbPAQAAAQAAAAAAAAVvY3UwMwhsYWJnZW5jeQJ3cwAAAQAB","pkt_caplen":63,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0342{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":70,"pkt":"RQAARoJmQABAETOGwKi0AggICAicoQA1ADK8OQlbAQAAAQAAAAAAAAhzZXR0aW5ncwtjcmFzaGx5dGljcwNjb20AAAEAAQ==","pkt_caplen":70,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":67,"pkt":"RQAAQ4JpQABAETOGwKi0AggICAgFCwA1AC+TFZykAQAAAQAAAAAAAANhcGkEZXUwMQhjYXBwdGFpbgNjb20AAAEAAQ==","pkt_caplen":67,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":60,"pkt":"RQAAPJwfQABABqbCwKi0ArL40Da8egBQwI4edgAAAACgAjkI+LAAAAIEBbQEAggKADWCaQAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":60,"pkt":"RQAAPCFLQABABqbpwKi0AhcV5seZXwG7KAKjIAAAAACgAjkIs5MAAAIEBbQEAggKADWCawAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":60,"pkt":"RQAAPOubQABABs8fwKi0AomHgc7QbABQfGRp9gAAAACgAjkIVT4AAAIEBbQEAggKADWCbQAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANJwgQABABqbJwKi0ArL40Da8egBQwI4ed\/tL3mKAEADlQqoAAAEBCAoANYJvRwX8Kg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":824,"pkt":"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","pkt_caplen":824,"pkt_type":0,"pkt_ipoffset":0}
+0172{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANOucQABABs8mwKi0AomHgc7QbABQfGRp97oFwGaAEADlOEAAAAEBCAoANYJ3vXlL7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0533{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":211,"pkt":"RQAA0+udQABABs6GwKi0AomHgc7QbABQfGRp97oFwGaAGADl3TMAAAEBCAoANYJ3vXlL7EdFVCAveG1wcC1kaXNjbz9kZXZpY2VpZD1mMmM5OTNkNjIxOGY1ZTIyZmUyODRiMmU5MGM4MmYzYiZwdXNoX29uX2RldmljZT10cnVlJmFwcGlkPW9jczAwMDAwMyBIVFRQLzEuMQ0KSG9zdDogYXBpLmV1MDEuY2FwcHRhaW4uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":211,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANOueQABABs8kwKi0AomHgc7QbABQfGRqlroFwe2AEAD1NewAAAEBCAoANYJ9vXlMBA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANOufQABABs8jwKi0AomHgc7QbABQfGRqlroFwe2AEQD1NesAAAEBCAoANYJ9vXlMBA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":60,"pkt":"RQAAPGAaQABABlqhwKi0AomHgc6vnwBQfAzimQAAAACgAjkI\/akAAAIEBbQEAggKADWCgwAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANOugQABABs8iwKi0AomHgc7QbABQfGRql7oFwe6AEAD1NdYAAAEBCAoANYKEvXlMEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANJwiQABABqbHwKi0ArL40Da8egBQwI4he\/tL486AEAESObkAAAEBCAoANYKJRwX8ZA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANJwjQABABqbGwKi0ArL40Da8egBQwI4he\/tL5zyAEAE9NiAAAAEBCAoANYKJRwX8ZA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":52,"pkt":"RQAANGAbQABABlqowKi0AomHgc6vnwBQfAzimh3f\/xqAEADlPeYAAAEBCAoANYKOvXlMIw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":136,"pkt":"RQAAiGAcQABABlpTwKi0AomHgc6vnwBQfAzimh3f\/xqAGADlKR0AAAEBCAoANYKOvXlMI0dFVCAvaXAtdG8tY291bnRyeSBIVFRQLzEuMQ0KSG9zdDogYXBpLmV1MDEuY2FwcHRhaW4uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":72,"pkt":"RQAASIK5QABAETMxwKi0AggICAi+ggA1ADS3+1EXAQAAAQAAAAAAAAdhbmRyb2lkB2NsaWVudHMGZ29vZ2xlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652786,"pkt_len":136,"pkt":"RQAAiGAdQABABlpSwKi0AomHgc6vnwBQfAzimh3f\/xqAGADlKO0AAAEBCAoANYK+vXlMI0dFVCAvaXAtdG8tY291bnRyeSBIVFRQLzEuMQ0KSG9zdDogYXBpLmV1MDEuY2FwcHRhaW4uY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":136,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0327{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":60,"pkt":"RQAAPLBhQABABm1GwKi0Atg60C6hBwG7mRQyoQAAAACgAjkIAHcAAAIEBbQEAggKADWCwAAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANLBiQABABm1NwKi0Atg60C6hBwG7mRQyouLMvMiAEADlCc8AAAEBCAoANYLHGASl5Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0566{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":236,"pkt":"RQAA7LBjQABABmyUwKi0Atg60C6hBwG7mRQyouLMvMiAGADlzvUAAAEBCAoANYLKGASl5RYDAQCzAQAArwMBVmhd8vjfjZbbQQM2P+6kSvFiVrQbP+1p3IwwDXzkWPQAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":236,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0327{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":60,"pkt":"RQAAPCFMQABABqbowKi0AhcV5seZXwG7KAKjIAAAAACgAjkIsy4AAAIEBbQEAggKADWC0AAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":64,"pkt":"RQAAQLBkQABABm0\/wKi0Atg60C6hBwG7mRQzWuLMvMiwEADlgxwAAAEBCAoANYLTGASmTQEBBQrizMI04szHoA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":64,"pkt":"RQAAQLBlQABABm0+wKi0Atg60C6hBwG7mRQzWuLMvMiwEADlffQAAAEBCAoANYLTGASmTQEBBQrizMI04szMyA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":64,"pkt":"RQAAQLBmQABABm09wKi0Atg60C6hBwG7mRQzWuLMvMiwEADlfQgAAAEBCAoANYLTGASmTQEBBQrizMI04szNtA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANLBnQABABm1IwKi0Atg60C6hBwG7mRQzWuLMzbSAEAES9ywAAAEBCAoANYLaGASmow==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFNQABABqbvwKi0AhcV5seZXwG7KAKjIVpZIEyAEADl\/h4AAAEBCAoANYLbl2cJ1g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0615{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":273,"pkt":"RQABESFOQABABqYRwKi0AhcV5seZXwG7KAKjIVpZIEyAGADlY\/8AAAEBCAoANYLdl2cJ1hYDAQDYAQAA1AMBVmhd8h0B5s6XDqG2jAg9OuLJnsmZQXwY4InZKY+7bC8AAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAZQAAAB0AGwAAGHNldHRpbmdzLmNyYXNobHl0aWNzLmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABkAIwAA","pkt_caplen":273,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":186,"pkt":"RQAAurBoQABABmzBwKi0Atg60C6hBwG7mRQzWuLMzbSAGAES+5wAAAEBCAoANYLkGASmoxYDAQBGEAAAQkEEtWAMNyT8WKHJF1e4GiSzdqCN0TSkLYwOtSesvtnBVhYkRBeZO\/K8p4LN8s8Jty9T7ZTt1ySHOehqYl4AHTgJxhQDAQABARYDAQAwJqEJMKdFZ9Mms8ZGzC\/cweCNMfBdi4uNKuK5rwKcBTRo9TtFzZzevE7tcMv7cs5J","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFPQABABqbtwKi0AhcV5seZXwG7KAKj\/lpZJECAEAEE+OkAAAEBCAoANYLsl2cKCg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFQQABABqbswKi0AhcV5seZXwG7KAKj\/lpZKDSAEAEk9NUAAAEBCAoANYLsl2cKCg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFRQABABqbrwKi0AhcV5seZXwG7KAKj\/lpZLCiAEAFD8MIAAAEBCAoANYLsl2cKCg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFSQABABqbqwKi0AhcV5seZXwG7KAKj\/lpZMByAEAFj7K4AAAEBCAoANYLsl2cKCg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFTQABABqbpwKi0AhcV5seZXwG7KAKj\/lpZMEyAEAFj7H0AAAEBCAoANYLtl2cKCg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFUQABABqbowKi0AhcV5seZXwG7KAKj\/lpZNECAEAGD6GgAAAEBCAoANYLtl2cKCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANCFVQABABqbnwKi0AhcV5seZXwG7KAKj\/lpZNxqAEAGi5W8AAAEBCAoANYLtl2cKCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANLBpQABABm1GwKi0Atg60C6hBwG7mRQz4OLMze+AEAES9aEAAAEBCAoANYLtGASnWg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":425,"pkt":"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","pkt_caplen":425,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANGAeQABABlqlwKi0AomHgc6vnwBQfAzi7h3gADyAEAD1OwIAAAEBCAoANYLwvXlNHw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANJwkQABABqbFwKi0ArL40Da8egBQwI4he\/tL5z2AEAE9NLsAAAEBCAoANYLyRwX9Xw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANGAfQABABlqkwKi0AomHgc6vnwBQfAzi7h3gADyAEQD1Ov8AAAEBCAoANYLyvXlNHw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":77,"pkt":"RQAATYLzQABAETLywKi0AggICAgOJQA1ADki+CcDAQAAAQAAAAAAAAR4bXBwCGRldmljZTA2BGV1MDEIY2FwcHRhaW4DY29tAAABAAE=","pkt_caplen":77,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":186,"pkt":"RQAAuiFWQABABqZgwKi0AhcV5seZXwG7KAKj\/lpZNxqAGAGiTIQAAAEBCAoANYL5l2cKCxYDAQBGEAAAQkEEQxTBHkOcJZa3UtHJhNGmWjQ4Dx7bFUjVN2PKz\/PauHV01A0axo1JmqhC6rF7p4wUlQv\/SnWqEFr7cFHdR3jTYhQDAQABARYDAQAwxhVM51WGMvU2teIXXp\/bO+aohaPJkVc3IJXZJLC40\/UHxaprojBHy27xbMJEaHjR","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANGAgQABABlqjwKi0AomHgc6vnwBQfAzi7x3gAD2AEAD1Ot8AAAEBCAoANYL6vXlNNg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":60,"pkt":"RQAAPDy4QABABnydwKi0AomHgzS0VhQCr\/++QwAAAACgAjkI08UAAAIEBbQEAggKADWC+wAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0369{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":89,"pkt":"RQAAWbBrQABABm0fwKi0Atg60C6hBwG7mRQ1VeLMz\/SAGAE9BiIAAAEBCAoANYMJGASoRRUDAQAgW2F2BXSJbEV45GAiWlxvAXydyXjCtrAU+3YX\/LIm0J4=","pkt_caplen":89,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANLBsQABABm1DwKi0Atg60C6hBwG7mRQ1euLMz\/SAEQE98M8AAAEBCAoANYMJGASoRQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":52,"pkt":"RQAANLBtQABABm1CwKi0Atg60C6hBwG7mRQ1e+LMz\/WAEAE98FEAAAEBCAoANYMRGASoug==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0502{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":186,"pkt":"RQAAuiFXQABABqZfwKi0AhcV5seZXwG7KAKj\/lpZNxqAGAGiTGMAAAEBCAoANYMal2cKCxYDAQBGEAAAQkEEQxTBHkOcJZa3UtHJhNGmWjQ4Dx7bFUjVN2PKz\/PauHV01A0axo1JmqhC6rF7p4wUlQv\/SnWqEFr7cFHdR3jTYhQDAQABARYDAQAwxhVM51WGMvU2teIXXp\/bO+aohaPJkVc3IJXZJLC40\/UHxaprojBHy27xbMJEaHjR","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0327{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652787,"pkt_len":60,"pkt":"RQAAPMDbQABABoIGwKi0ArL40DbC2QBQ64tD+QAAAACgAjkIoRgAAAIEBbQEAggKADWDIgAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":61,"pkt":"RQAAPYMlQABAETLQwKi0AggICAgKHQA1ACmDzlLQAQAAAQAAAAAAAANvY3MIbGFiZ2VuY3kCd3MAAAEAAQ==","pkt_caplen":61,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANMDcQABABoINwKi0ArL40DbC2QBQ64tD+t7mVuSAEADljSkAAAEBCAoANYMrRwX98w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1205{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":715,"pkt":"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","pkt_caplen":715,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0327{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":60,"pkt":"RQAAPDlmQABABgl8wKi0ArL40DaPSAG7xoy6SQAAAACgAjkIgeAAAAIEBbQEAggKADWDLwAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDlnQABABgmDwKi0ArL40DaPSAG7xoy6Sjpn3PmAEADljD4AAAEBCAoANYM3RwX+EQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":260,"pkt":"RQABBDloQABABgiywKi0ArL40DaPSAG7xoy6Sjpn3PmAGADlDAsAAAEBCAoANYM3RwX+ERYDAQDLAQAAxwMBVmhd83GqZqYQO3oMbwUHPK3VU0gJzqNSdwnP4gncj8QAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAWAAAABQAEgAAD29jcy5sYWJnZW5jeS53cwALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":260,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANCFYQABABqbkwKi0AhcV5seZXwG7KAKkhFpZOBSAEAHC4p8AAAEBCAoANYNEl2cK5A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":64,"pkt":"RQAAQMDeQABABoH\/wKi0ArL40DbC2QBQ64tGkd7mVuSwEADl2G4AAAEBCAoANYNFRwX+CwEBBQre5lxQ3uZhvA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDfQABABoH2wKi0ArL40DbC2QBQ64tGkd7mVuTQEADlJtQAAAEBCAoANYNFRwX+CwEBBRLe5mco3uZslN7mXFDe5mG8","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDgQABABoH1wKi0ArL40DbC2QBQ64tGkd7mVuTQEADlIWgAAAEBCAoANYNFRwX+CwEBBRLe5mco3uZyAN7mXFDe5mG8","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1891{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":1209,"pkt":"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","pkt_caplen":1209,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":80,"pkt":"RQAAUMDhQABABoHswKi0ArL40DbC2QBQ64tGkd7mVuTwEADlLGgAAAEBCAoANYNMRwX+CwEBBRre5ojX3uaOQ97mZyje5nIA3uZcUN7mYbw=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDiQABABoHzwKi0ArL40DbC2QBQ64tGkd7mVuTQEADl0yoAAAEBCAoANYNMRwX+CwEBBRLe5lxQ3uZyAN7miNfe5o5D","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0598{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":260,"pkt":"RQABBDlpQABABgixwKi0ArL40DaPSAG7xoy6Sjpn3PmAGADlC+8AAAEBCAoANYNTRwX+ERYDAQDLAQAAxwMBVmhd83GqZqYQO3oMbwUHPK3VU0gJzqNSdwnP4gncj8QAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAWAAAABQAEgAAD29jcy5sYWJnZW5jeS53cwALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":260,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDjQABABoHywKi0ArL40DbC2QBQ64tGkd7mVuTQEADlzbcAAAEBCAoANYNTRwX+CwEBBRLe5lxQ3uZ3bN7miNfe5o5D","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDkQABABoHxwKi0ArL40DbC2QBQ64tGkd7mVuTQEADlzJAAAAEBCAoANYNTRwX+CwEBBRLe5lxQ3uZ4k97miNfe5o5D","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDlQABABoHwwKi0ArL40DbC2QBQ64tGkd7mVuTQEADlxyMAAAEBCAoANYNURwX+CwEBBRLe5lxQ3uZ9\/97miNfe5o5D","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":72,"pkt":"RQAASMDmQABABoHvwKi0ArL40DbC2QBQ64tGkd7mVuTQEADlwbcAAAEBCAoANYNURwX+CwEBBRLe5lxQ3uaDa97miNfe5o5D","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDlqQABABgmAwKi0ArL40DaPSAG7xoy7Gjpn4mWAEAEShVwAAAEBCAoANYNXRwX+ag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDlrQABABgl\/wKi0ArL40DaPSAG7xoy7Gjpn59GAEAE\/f8MAAAEBCAoANYNXRwX+ag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDlsQABABgl+wKi0ArL40DaPSAG7xoy7Gjpn7T2AEAFseikAAAEBCAoANYNYRwX+ag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDltQABABgl9wKi0ArL40DaPSAG7xoy7Gjpn7\/mAEAGYd0EAAAEBCAoANYNYRwX+ag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":64,"pkt":"RQAAQMDnQABABoH2wKi0ArL40DbC2QBQ64tGkd7mVuSwEADlq9QAAAEBCAoANYNYRwX+CwEBBQre5lxQ3uaOQw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANCFaQABABqbiwKi0AhcV5seZXwG7KAKpCVpZO+mAEAHi2dsAAAEBCAoANYNal2cLGA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":60,"pkt":"RQAAPDy5QABABnycwKi0AomHgzS0VhQCr\/++QwAAAACgAjkI02AAAAIEBbQEAggKADWDYAAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":89,"pkt":"RQAAWSFbQABABqa8wKi0AhcV5seZXwG7KAKpCVpZO+mAGAHi+l8AAAEBCAoANYNgl2cLGBUDAQAgnrF5ZZ6bLaNIscD09wErYOXiKOcK3EQR+1eSLnFX2LU=","pkt_caplen":89,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANCFcQABABqbgwKi0AhcV5seZXwG7KAKpLlpZO+mAEQHi2a8AAAEBCAoANYNgl2cLGA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0741{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":366,"pkt":"RQABbjluQABABghCwKi0ArL40DaPSAG7xoy7Gjpn7\/mAGAGYPNEAAAEBCAoANYNjRwX+ahYDAQEGEAABAgEAMMRmTPsen+2AYa94093E2Vq7hcxeYwMqQEqPqyXCgdPzR6vuUKQz6pVdmHwa79xuMQ8retZcWvvlTKI\/+1N9Gw\/OaFaKf1XNyjpOCZDOqZNC1QfAdJVPLISbx5mvxfQvXpOc3phEJ8CTUkKMOoQ3aJQOpUeTUETGoqRungcuMX0flcpp4eLJBf3TOwuHdOuI3rMCc2MG4Jycx7Z3cRdXP2ZRxnQsrduzGirfTjwCtcfz8aDtqXVLuKvVuhGzRT9h40LMwEboDGuD3+F7F3v0NqpNGHY9wn\/cN+17s3inRcJFU7O9HkHw3yh1R32L3CbW99WKgFGgvhRhnMJ2UVhZWxQDAQABARYDAQAkNvXgz7fHCqM2dlRB6bX8n2EuyIc7MhCF9s2YUBddilHfdTrE","pkt_caplen":366,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANMDoQABABoIBwKi0ArL40DbC2QBQ64tGkd7mjkOAEAESUisAAAEBCAoANYNnRwX+kg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDlvQABABgl7wKi0ArL40DaPSAG7xoy8VDpn8CiAEAGYdZoAAAEBCAoANYNpRwX+lw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1204{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":702,"pkt":"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","pkt_caplen":702,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1160{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":667,"pkt":"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","pkt_caplen":667,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":64,"pkt":"RQAAQMDpQABABoH0wKi0ArL40DbC2QBQ64tGkd7mjkOwEAESMXIAAAEBCAoANYNwRwX+kgEBBQre5pOv3uaZGw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0303{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":40,"pkt":"RQAAKAAAQABABshIwKi0AhcV5seZXwG7KAKpLgAAAABQBAAA0Q0AAA==","pkt_caplen":40,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0303{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":40,"pkt":"RQAAKAAAQABABshIwKi0AhcV5seZXwG7KAKpLwAAAABQBAAA0QwAAA==","pkt_caplen":40,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":64,"pkt":"RQAAQMDqQABABoHzwKi0ArL40DbC2QBQ64tGkd7mjkOwEAESK\/8AAAEBCAoANYN3RwX+kgEBBQre5pOv3uaehw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":64,"pkt":"RQAAQMDrQABABoHywKi0ArL40DbC2QBQ64tGkd7mjkOwEAESJosAAAEBCAoANYN\/RwX+kgEBBQre5pOv3uaj8w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANDlyQABABgl4wKi0ArL40DaPSAG7xozBRTpn8qGAEAHDbb8AAAEBCAoANYN\/RwX+xw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANMDsQABABoH9wKi0ArL40DbC2QBQ64tGkd7mo\/OAEAE\/O+cAAAEBCAoANYOFRwX+2w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652788,"pkt_len":52,"pkt":"RQAANMDtQABABoH8wKi0ArL40DbC2QBQ64tGkd7mqV+AEAFsNk0AAAEBCAoANYOGRwX+2w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":52,"pkt":"RQAANMDuQABABoH7wKi0ArL40DbC2QBQ64tGkd7mrsuAEAGaMJsAAAEBCAoANYOORwX+6w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0319{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":52,"pkt":"RQAANMDvQABABoH6wKi0ArL40DbC2QBQ64tGkd7mtDeAEAHHKwAAAAEBCAoANYOORwX+7Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":64,"pkt":"RQAAQMDwQABABoHtwKi0ArL40DbC2QBQ64tGkd7mtDewEAHHvl8AAAEBCAoANYOWRwX+7QEBBQre5rmj3ua\/Dw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":64,"pkt":"RQAAQMDxQABABoHswKi0ArL40DbC2QBQ64tGkd7mtDewEAHHuPMAAAEBCAoANYOWRwX+7QEBBQre5rmj3ubEew==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":64,"pkt":"RQAAQMDyQABABoHrwKi0ArL40DbC2QBQ64tGkd7mtDewEAHHs4AAAAEBCAoANYOdRwX+7QEBBQre5rmj3ubJ5w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":64,"pkt":"RQAAQMDzQABABoHqwKi0ArL40DbC2QBQ64tGkd7mtDewEAHHrhEAAAEBCAoANYOgRwX+7QEBBQre5rmj3ubPUw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0173{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":52,"pkt":"RQAANMD0QABABoH1wKi0ArL40DbC2QBQ64tGkd7mz1OAEAH0D2UAAAEBCAoANYOlRwX\/KA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":792,"pkt":"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","pkt_caplen":792,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+2201{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":1440,"pkt":"RQAFoDl0QABABgQKwKi0ArL40DaPSAG7xozEKTpn8qGAEAHDQgMAAAEBCAoANYPLRwX+xxcDAQgUoS2Q4xxYqgiBr9VYqCdqLlk9zRLBnJxU97XO3zSo9FBRNExBlmqfxTwXukcVOwyiCnKnFZPokPMB3YYA8MoGsli6UXehe6wcqhjroppMMFSHu79btS6vrPZzIhWaMATGtMvR5rN2sJ09EwFxDrGXOW8aEXPkjJQ+lFxnfVOt5Xh+JJOGnKDH1ZRM+993qH+04sHYPGUQfsVN5keWEoCPMDSrTN\/s78PbUoIHXkFiJHJy8rlMR657aFCY5QH\/aeNaM\/HVBxHs1GFuTwh+Q6JaGHUe\/IFA4+A2KLPZsFMf1jUwkwsE03adAnv596hOZN7x25Xk9c11dbulTwSxuaSPXExHY4d6BRplthTotFuyfkCG0JsG0LOZwZ\/89DH7o3Xd55B3yTqUqVKc1NxxvyHdIYm5tOD\/nAGcBp\/eN77ZhlyJPVNnrniMmgs\/r5IfLoJN5Itt\/dVbTvbgJrqp1BNHIe8NK+KDnxnr8yj3vCIRIUe4\/lZegyp5ETkT8OI9vqQK3UbFnJ0riskolYtv1\/N3eIKsAaLKjOPAN3pHs\/EdEyISypsAimvmLT1oocBzHw540Kd3JTVmOWGv0hnmPfZuP\/4tl9iHKPEtfBH5pbMsaHcdK4GGRRSiCXT7dPwQBqv15khQ4J1xOQlzIyqPqhtKqkkVbOZdxHBT1K\/WSTKvo\/DBW2wJmONU6iPKzbnKmrfMeXjUKvZ+W4BbOh+zJwiOMbF0YRxzeHpmlh8N0gt3s2+cTQEZ4AA6\/suTmnISAB8zBNrWkvLOWgY1GRDf1QX+eFIzGj1RxMS9PMfvRyF5c9R6T66GsxBNTPnJTAGJqU\/NUn2\/skN9txXKk48vktFzQDyFuIzKE4w2i15xqRrHOPKfP72REvXppc7ukOkn4FLux2nnZ6TapR8u1zMnS+6x4SMGR0+frW+093K9IokclZ6V+0HR2kcamJxfnoH3v2CQ3GTMDuYtcaqOuaNeokpH2JIV0Ibfz7Do1PkOHy0RMlOAovHD8Jx4CFp28SXlW1sMw16IS4FsfOMzE3TLzWEeDoERZ8ZwU1zr+8G\/+Y59ZQLrhJZF2dLDsyVfxc6vJoNcGKp1C7XoYSZJocFdY6wNTGy594uWOuiLKkkeWo2i+tiVURgyKLTNRMy08T1A\/GYEQ1NbxbtFpAP\/z\/y3mCXpDveAIn8qz\/Cylxs8n\/ALpHBW13Ff2vh4LvYuOOhQW1ZC6Phe79pvxCwI8Z4mFpiFEaYVs+VrFU2oHqXNWiWERKfStC8uufmoXcTMoxBE2BABdtWD+u0T3dqOrQoafWD3tsc8RU66e6tAAERQ3ua7I2cu1BIWeC26Mnsifhdg8qjyI6hV9dqyveUfA0qLGU7qsnfh5NoWRZwzoZUYOKZ0OJa9JPx83p7PALTBoQnImL1Khd6dUjd3v+H3GJUe7zY2v6NrN5D5v+urG8MMp025IobLutrCgg3Jb0cj1+1MO8bTfNYMBE5qq4VY4sFU7qULKq7kVTEzbZJUNnpOBAe5z\/58bWT3ruriLMpZhBL+rAUU0CzYD87crU4miV\/vPqWEKvetYnz+3GoIhDdBVYxZVJUMbEJfj7g4Lbdv5yiYlvrzq++vHSdaKgWADtaMGOmykB5Q3ksRA9P5WLJ++w\/3gXS4GsVCXk5mmnv4aGzwiJikmbrrYwSG7gLGMq1Specx4cn7iOy8AFI7DiXzieMuLQiqNn+g7NZUoouIyNwNxS1ooaGRFaOZpp2P63rplm++0PY\/9ufZ5AaBlL9i1UJFDxwe5de4BF05CsjlezUnlBe3\/UC4IESYmFKrt1BPheCKRmwWloxgE8NvJTsgi2doK5caAQFUTc4P","pkt_caplen":1440,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1248{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":737,"pkt":"RQAC4Tl1QABABgbIwKi0ArL40DaPSAG7xozJlTpn8qGAGAHD0xcAAAEBCAoANYPLRwX+x2BiVW9BnSX67CTzo6pQwp1Ief7ups6ymrbkGpP+04rT\/1i2UE4rbM2NWWZQlBk3\/Rfoz4aFxomnQrHp\/wUShf4ThTi2LzGlBOkiTLbxHTuUED\/T5yqQDM3C20gUFSiciJpfG1i6lRbiJ2tBEfn2dPKVzI2ZKM3M+kpQ1R357lW+1p+Z+es6EeDvw4ap2V+DQMB7jtaWckVhVlvXqZVliaGtts46A0baED6jzdtjgptgAsX+Fsx5CJH+tzg8Aw2fBfCi167kZBisjSUjENwdoedP0rnz7DQKyQRNtZNrMSZo91kmx7rDs8Xmxu8ThTe5IuuPJcDp6R970P7UDFf8PwLNEKXgdVJ41ZH09u9C0a7CliaViUgGoO38cZl5XgWD1XyL5BBaZqEHg0iKLnx2NAdutg\/fHIeUsk\/ejlaL+fMyB+w30R9H+dJllm6J53Hti9twv6lpEBEHdY+CnAh5wO7jLQwglQFIsOdwnv0p85h9uX0Rj+x0HCWrOlq6RgSKjFm1xpcmfUGB\/1L1fxshCXpJfUg\/6+ABZHRcQv2PkCbl6ASk7jEkPymkG3DHx+ouE4gqkGjAWws5CFbG6TlSyDorDHTMHpftmj6s8FhmQkCPvyM47iBD6vkI\/0ZvZAyfDCbOKfXrapq2ZM3bMu0pourorzlk6NNxV3w9tfurDDU+TzipbFj+mYj3CcBNUI4M6fwvBcGj1PnD8QHCbDvSAsJT4axtF27bF+vnKqVyngnQ8haNr50zHoHyuL\/hTINOIkdncIxxfn+0\/IeZXaPw\/KSG5huA2b+AfgXNqEi7mMNa\/UQYZJv+Kdd3Yqx9B\/TwitpkgVQ9v+Q7GPBYUWPdKFRU6tU1Vt9+Rdg7nPI5ZdbxmJ1u8QjL8Md1+jHnSUVNh6BIaGk7qcpTW+bhl9Y=","pkt_caplen":737,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0636{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":285,"pkt":"RQABHTl2QABABgiLwKi0ArL40DaPSAG7xozMQjpn8qGAGAHDyz8AAAEBCAoANYPLRwX+xxcDAQDkS8zrxTo+LF1AeQl839\/+9ktqk9uWM8efjq5DeUfVWdv6zLt\/ZfFs0\/zPaXapOV3xskonl\/hLl7UiEtxymNkw+nl1gnr1BwMJP4oxm7hURVQxu8sKRwvtF5A3A96ftz7kvvdabVHKDRVyedDA6Xh9tXcUg6eYmIYQN53lENHb1o9TB4aA\/hDy0DlM9F6xN6EweGVSJiuCttpVHdVh1\/qEWEvp1msk0H0eFtrxPlzT1Yx52GlkELDb4j0r+4GDaGB7D2COoxrVCN3U58rnYCYuB5Nbu1a0lCPpFflNAs4FcvJUaiDC","pkt_caplen":285,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":52,"pkt":"RQAANMD1QABABoH0wKi0ArL40DbC2QBQ64tGkd7m1L+AEAIhCU8AAAEBCAoANYPLRwX\/fw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":64,"pkt":"RQAAQMD2QABABoHnwKi0ArL40DbC2QBQ64tGkd7m1L+wEAIhW58AAAEBCAoANYPSRwX\/fwEBBQre5tor3ubflw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652789,"pkt_len":64,"pkt":"RQAAQMD3QABABoHmwKi0ArL40DbC2QBQ64tGkd7m1L+wEAIhVjMAAAEBCAoANYPSRwX\/fwEBBQre5tor3ublAw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANDl3QABABglzwKi0ArL40DaPSAG7xozNKzpn9deAEAHuXPUAAAEBCAoANYPtRwX\/3A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":60,"pkt":"RQAAPDy6QABABnybwKi0AomHgzS0VhQCr\/++QwAAAACgAjkI0pgAAAIEBbQEAggKADWEKAAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMD4QABABoHxwKi0ArL40DbC2QBQ64tGkd7m5QOAEAJP93EAAAEBCAoANYQwRwYAhQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":64,"pkt":"RQAAQMD5QABABoHkwKi0ArL40DbC2QBQ64tGkd7m5QOwEAJPHmYAAAEBCAoANYQzRwYAhQEBBQre5u\/b3ub1Rw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":64,"pkt":"RQAAQMD6QABABoHjwKi0ArL40DbC2QBQ64tGkd7m5QOwEAJPGPoAAAEBCAoANYQzRwYAhQEBBQre5u\/b3ub6sw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":64,"pkt":"RQAAQMD7QABABoHiwKi0ArL40DbC2QBQ64tGkd7m6m+wEAJ8E0gAAAEBCAoANYQ2RwYAmwEBBQre5u\/b3ub6sw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMD8QABABoHtwKi0ArL40DbC2QBQ64tGkd7m+rOAEAKp4UsAAAEBCAoANYQ2RwYAmw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":64,"pkt":"RQAAQMD9QABABoHgwKi0ArL40DbC2QBQ64tGkd7m+rOwEAKp\/WoAAAEBCAoANYQ2RwYAmwEBBQre5vVH3ub6sw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMD+QABABoHrwKi0ArL40DbC2QBQ64tGkd7nAB+AEALW27EAAAEBCAoANYQ3RwYAmw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMD\/QABABoHqwKi0ArL40DbC2QBQ64tGkd7nBYuAEAME1hAAAAEBCAoANYQ4RwYAoQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEAQABABoHpwKi0ArL40DbC2QBQ64tGkd7nCveAEAMx0HcAAAEBCAoANYQ4RwYAoQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEBQABABoHowKi0ArL40DbC2QBQ64tGkd7nEGOAEANeytgAAAEBCAoANYQ6RwYApQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMECQABABoHnwKi0ArL40DbC2QBQ64tGkd7nFc+AEAOLxTwAAAEBCAoANYQ7RwYApw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEDQABABoHmwKi0ArL40DbC2QBQ64tGkd7nGzuAEAO5v58AAAEBCAoANYQ9RwYAqA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEEQABABoHlwKi0ArL40DbC2QBQ64tGkd7nIKeAEAPmugMAAAEBCAoANYQ9RwYAqw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEFQABABoHkwKi0ArL40DbC2QBQ64tGkd7nJhOAEAQTtGoAAAEBCAoANYQ9RwYAqw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEGQABABoHjwKi0ArL40DbC2QBQ64tGkd7nK3+AEARArsUAAAEBCAoANYRARwYAtA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEHQABABoHiwKi0ArL40DbC2QBQ64tGkd7nMOuAEARuqSsAAAEBCAoANYRARwYAtA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEIQABABoHhwKi0ArL40DbC2QBQ64tGkd7nNleAEASbo5AAAAEBCAoANYRBRwYAtQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":52,"pkt":"RQAANMEJQABABoHgwKi0ArL40DbC2QBQ64tGkd7nO8OAEATInfcAAAEBCAoANYRBRwYAtQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":64,"pkt":"RQAAQMEKQABABoHTwKi0ArL40DbC2QBQ64tGkd7nO8OwEATIIkAAAAEBCAoANYRHRwYAtQEBBQre50Ev3udGmw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":64,"pkt":"RQAAQMELQABABoHSwKi0ArL40DbC2QBQ64tGkd7nO8OwEATIHNMAAAEBCAoANYRIRwYAtQEBBQre50Ev3udMBw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":72,"pkt":"RQAASMEMQABABoHJwKi0ArL40DbC2QBQ64tGkd7nO8PQEATIlpoAAAEBCAoANYRORwYAtQEBBRLe51Fz3udW397nQS\/e50wH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652790,"pkt_len":72,"pkt":"RQAASMENQABABoHIwKi0ArL40DbC2QBQ64tGkd7nO8PQEATIkS4AAAEBCAoANYRORwYAtQEBBRLe51Fz3udcS97nQS\/e50wH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANDl4QABABglywKi0ArL40DaPSAG7xozNKzpn9fKAEAHuW3wAAAEBCAoANYRRRwYA1g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEOQABABoHPwKi0ArL40DbC2QBQ64tGkd7nTAewEAT166YAAAEBCAoANYRSRwYA3gEBBQre51Fz3udcSw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEPQABABoHOwKi0ArL40DbC2QBQ64tGkd7nTAewEAT15jcAAAEBCAoANYRVRwYA3gEBBQre51Fz3udhtw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEQQABABoHZwKi0ArL40DbC2QBQ64tGkd7nYbeAEAUjd1cAAAEBCAoANYRXRwYA8A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMERQABABoHYwKi0ArL40DbC2QBQ64tGkd7nZyOAEAVQcb0AAAEBCAoANYRYRwYA8A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMESQABABoHXwKi0ArL40DbC2QBQ64tGkd7nbI+AEAV9bBkAAAEBCAoANYRbRwYA+A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMETQABABoHWwKi0ArL40DbC2QBQ64tGkd7ncfuAEAWqZoAAAAEBCAoANYRbRwYA+A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEUQABABoHVwKi0ArL40DbC2QBQ64tGkd7nd2eAEAXYYOYAAAEBCAoANYRbRwYA+A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEVQABABoHUwKi0ArL40DbC2QBQ64tGkd7nfNOAEAYFW0UAAAEBCAoANYRdRwYA\/g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEWQABABoHTwKi0ArL40DbC2QBQ64tGkd7ngj+AEAYyVaoAAAEBCAoANYReRwYA\/w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEXQABABoHSwKi0ArL40DbC2QBQ64tGkd7nh6uAEAZfUBEAAAEBCAoANYReRwYA\/w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEYQABABoHRwKi0ArL40DbC2QBQ64tGkd7njReAEAaNSmwAAAEBCAoANYRkRwYBBA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEZQABABoHQwKi0ArL40DbC2QBQ64tGkd7nkoOAEAa6RNMAAAEBCAoANYRkRwYBBA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEaQABABoHDwKi0ArL40DbC2QBQ64tGkd7nkoOwEAa6G6EAAAEBCAoANYRkRwYBBAEBBQre55fv3uedWw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEbQABABoHCwKi0ArL40DbC2QBQ64tGkd7nkoOwEAa6Fi4AAAEBCAoANYRrRwYBBAEBBQre55fv3ueixw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":72,"pkt":"RQAASMEcQABABoG5wKi0ArL40DbC2QBQ64tGkd7nkoPQEAa64nkAAAEBCAoANYRsRwYBBAEBBRLe56gz3uetn97nl+\/e56LH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEdQABABoHAwKi0ArL40DbC2QBQ64tGkd7nosewEAbn6nAAAAEBCAoANYR0RwYBKwEBBQre56gz3uetnw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEeQABABoHLwKi0ArL40DbC2QBQ64tGkd7nrZ+AEAcUKK4AAAEBCAoANYSbRwYBfA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEfQABABoG+wKi0ArL40DbC2QBQ64tGkd7nrZ+wEAcUyTwAAAEBCAoANYSiRwYBfAEBBQre57ML3ue4dw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEgQABABoG9wKi0ArL40DbC2QBQ64tGkd7nrZ+wEAcUw9AAAAEBCAoANYSiRwYBfAEBBQre57ML3ue94w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEhQABABoHIwKi0ArL40DbC2QBQ64tGkd7nveOAEAdCF\/4AAAEBCAoANYSlRwYBsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":64,"pkt":"RQAAQMEiQABABoG7wKi0ArL40DbC2QBQ64tGkd7nveOwEAdCrbsAAAEBCAoANYSlRwYBsAEBBQre57h33ue94w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEjQABABoHGwKi0ArL40DbC2QBQ64tGkd7nw0+AEAdvEmUAAAEBCAoANYSlRwYBsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEkQABABoHFwKi0ArL40DbC2QBQ64tGkd7nyLuAEAecDMwAAAEBCAoANYSlRwYBsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMElQABABoHEwKi0ArL40DbC2QBQ64tGkd7nzieAEAfJByQAAAEBCAoANYSsRwYBuA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEmQABABoHDwKi0ArL40DbC2QBQ64tGkd7n05OAEAf3AYgAAAEBCAoANYStRwYBuQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEnQABABoHCwKi0ArL40DbC2QBQ64tGkd7n2P+AEAgk++4AAAEBCAoANYStRwYBuQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANDl5QABABglxwKi0ArL40DaPSAG7xozNKzpn9fOAEAHuWjsAAAEBCAoANYSwRwYBtw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEoQABABoHBwKi0ArL40DbC2QBQ64tGkd7n3muAEAhR9j4AAAEBCAoANYSyRwYByw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEpQABABoHAwKi0ArL40DbC2QBQ64tGkd7n49eAEAh+8KQAAAEBCAoANYSyRwYBzA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652791,"pkt_len":52,"pkt":"RQAANMEqQABABoG\/wKi0ArL40DbC2QBQ64tGkd7n6UOAEAis6wkAAAEBCAoANYSzRwYBzA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANMErQABABoG+wKi0ArL40DbC2QBQ64tGkd7n7q+AEAjZ5V4AAAEBCAoANYS5RwYB2A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANMEsQABABoG9wKi0ArL40DbC2QBQ64tGkd7n9BuAEAkG38UAAAEBCAoANYS5RwYB2A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":64,"pkt":"RQAAQMEtQABABoGwwKi0ArL40DbC2QBQ64tGkd7n9BuwEAkG82IAAAEBCAoANYS5RwYB2AEBBQre5\/mH3uf+8w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":72,"pkt":"RQAASMEuQABABoGnwKi0ArL40DbC2QBQ64tGkd7n9BvQEAkGB1EAAAEBCAoANYS\/RwYB2AEBBRLe6ARf3ugJy97n+Yfe5\/7z","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":72,"pkt":"RQAASMEvQABABoGmwKi0ArL40DbC2QBQ64tGkd7n9BvQEAkGAeUAAAEBCAoANYS\/RwYB2AEBBRLe6ARf3ugPN97n+Yfe5\/7z","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":64,"pkt":"RQAAQMEwQABABoGtwKi0ArL40DbC2QBQ64tGkd7n\/vOwEAkzzRcAAAEBCAoANYTCRwYB+QEBBQre6ARf3ugPNw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":64,"pkt":"RQAAQMExQABABoGswKi0ArL40DbC2QBQ64tGkd7n\/vOwEAkzx6YAAAEBCAoANYTHRwYB+QEBBQre6ARf3ugUow==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANMEyQABABoG3wKi0ArL40DbC2QBQ64tGkd7oFKOAEAlhvpgAAAEBCAoANYTORwYCDQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANMEzQABABoG2wKi0ArL40DbC2QBQ64tGkd7oGg+AEAmOuP8AAAEBCAoANYTORwYCDQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANME0QABABoG1wKi0ArL40DbC2QBQ64tGkd7oH3uAEAm7s08AAAEBCAoANYTURwYCHg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANME1QABABoG0wKi0ArL40DbC2QBQ64tGkd7oJOeAEAnorbUAAAEBCAoANYTVRwYCHg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":52,"pkt":"RQAANME2QABABoGzwKi0ArL40DbC2QBQ64tGkd7oKlOAEAoWqBsAAAEBCAoANYTVRwYCHg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":60,"pkt":"RQAAPKb0QABABiV3wKi0AkDpuLy6UxRsAv3YCQAAAACgAjkIcdQAAAIEBbQEAggKADWE2AAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":64,"pkt":"RQAAQME3QABABoGmwKi0ArL40DbC2QBQ64tGkd7oKlOwEAoWT0EAAAEBCAoANYTcRwYCHgEBBQre6C+\/3ug1Kw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":64,"pkt":"RQAAQME4QABABoGlwKi0ArL40DbC2QBQ64tGkd7oKlOwEAoWSdUAAAEBCAoANYTcRwYCHgEBBQre6C+\/3ug6lw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":72,"pkt":"RQAASME5QABABoGcwKi0ArL40DbC2QBQ64tGkd7oKlPQEAoW258AAAEBCAoANYTlRwYCHgEBBRLe6EVv3uhK297oL7\/e6DqX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652792,"pkt_len":64,"pkt":"RQAAQME6QABABoGjwKi0ArL40DbC2QBQ64tGkd7oOpewEApDEyYAAAEBCAoANYTsRwYCWAEBBQre6EVv3uhK2w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQME7QABABoGiwKi0ArL40DbC2QBQ64tGkd7oQAOwEApwDFkAAAEBCAoANYVJRwYDLwEBBQre6EVv3uhK2w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQME8QABABoGhwKi0ArL40DbC2QBQ64tGkd7oQAOwEApwBuYAAAEBCAoANYVQRwYDLwEBBQre6EVv3uhQRw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":52,"pkt":"RQAANME9QABABoGswKi0ArL40DbC2QBQ64tGkd7oUEeAEAqdf9gAAAEBCAoANYVWRwYDZQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":52,"pkt":"RQAANME+QABABoGrwKi0ArL40DbC2QBQ64tGkd7oVbOAEArLej4AAAEBCAoANYVWRwYDZQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":52,"pkt":"RQAANME\/QABABoGqwKi0ArL40DbC2QBQ64tGkd7oWx+AEAr4dKUAAAEBCAoANYVWRwYDZQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":52,"pkt":"RQAANMFAQABABoGpwKi0ArL40DbC2QBQ64tGkd7oYIuAEAslbvAAAAEBCAoANYVgRwYDdw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQMFBQABABoGcwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslqawAAAEBCAoANYVgRwYDdwEBBQre6GX33uhrYw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQMFCQABABoGbwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslpDkAAAEBCAoANYVnRwYDdwEBBQre6GX33uhwzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQMFDQABABoGawKi0ArL40DbC2QBQ64tGkd7oYIuwEAslnswAAAEBCAoANYVoRwYDdwEBBQre6GX33uh2Ow==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQMFEQABABoGZwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslmVkAAAEBCAoANYVvRwYDdwEBBQre6GX33uh7pw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652793,"pkt_len":64,"pkt":"RQAAQMFFQABABoGYwKi0ArL40DbC2QBQ64tGkd7oYIuwEAslk+QAAAEBCAoANYV4RwYDdwEBBQre6GX33uiBEw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFGQABABoGjwKi0ArL40DbC2QBQ64tGkd7ogROAEAtSTcgAAAEBCAoANYWARwYDyg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFHQABABoGiwKi0ArL40DbC2QBQ64tGkd7ohn+AEAuASC4AAAEBCAoANYWARwYDyg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFIQABABoGhwKi0ArL40DbC2QBQ64tGkd7oi+uAEAutQnkAAAEBCAoANYWIRwYD3g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFJQABABoGUwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutJnUAAAEBCAoANYWIRwYD3gEBBQre6JFX3uiWww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFKQABABoGTwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutIQEAAAEBCAoANYWQRwYD3gEBBQre6JFX3uicLw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFLQABABoGSwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutG5UAAAEBCAoANYWQRwYD3gEBBQre6JFX3uihmw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFMQABABoGRwKi0ArL40DbC2QBQ64tGkd7oi+uwEAutFiQAAAEBCAoANYWVRwYD3gEBBQre6JFX3uinBw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFNQABABoGcwKi0ArL40DbC2QBQ64tGkd7opweAEAvaJvgAAAEBCAoANYWWRwYECA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFOQABABoGbwKi0ArL40DbC2QBQ64tGkd7orHOAEAwHIVAAAAEBCAoANYWcRwYEEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFPQABABoGawKi0ArL40DbC2QBQ64tGkd7osd+AEAw1G7MAAAEBCAoANYWdRwYEEw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFQQABABoGZwKi0ArL40DbC2QBQ64tGkd7ot0uAEAxiFggAAAEBCAoANYWhRwYEIQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFRQABABoGYwKi0ArL40DbC2QBQ64tGkd7ovLeAEAyPEG8AAAEBCAoANYWhRwYEIQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFSQABABoGLwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPkssAAAEBCAoANYWoRwYEIQEBBQre6MIj3ujHjw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFTQABABoGKwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPjV8AAAEBCAoANYWoRwYEIQEBBQre6MIj3ujM+w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFUQABABoGJwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPh+wAAAEBCAoANYWvRwYEIQEBBQre6MIj3ujSZw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFVQABABoGIwKi0ArL40DbC2QBQ64tGkd7ovLewEAyPgn8AAAEBCAoANYWwRwYEIQEBBQre6MIj3ujX0w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFWQABABoGTwKi0ArL40DbC2QBQ64tGkd7o19OAEAy89OEAAAEBCAoANYW1RwYEUQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFXQABABoGSwKi0ArL40DbC2QBQ64tGkd7o3T+AEAzq70UAAAEBCAoANYW2RwYEUg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":60,"pkt":"RQAAPDy7QABABnyawKi0AomHgzS0VhQCr\/++QwAAAACgAjkI0QcAAAIEBbQEAggKADWFuQAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFYQABABoGFwKi0ArL40DbC2QBQ64tGkd7o3T+wEAzqMJEAAAEBCAoANYW+RwYEUgEBBQre6OKr3ujoFw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":72,"pkt":"RQAASMFZQABABoF8wKi0ArL40DbC2QBQ64tGkd7o3T\/QEAzqcjMAAAEBCAoANYXGRwYEUgEBBRLe6O2D3ujy797o4qve6OgX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFaQABABoGDwKi0ArL40DbC2QBQ64tGkd7o6BewEA0XD5YAAAEBCAoANYXKRwYEjAEBBQre6O2D3ujy7w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":64,"pkt":"RQAAQMFbQABABoGCwKi0ArL40DbC2QBQ64tGkd7o6BewEA0XCigAAAEBCAoANYXMRwYEjAEBBQre6O2D3uj4Ww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFcQABABoGNwKi0ArL40DbC2QBQ64tGkd7o+FuAEA1E020AAAEBCAoANYXPRwYEmw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFdQABABoGMwKi0ArL40DbC2QBQ64tGkd7o\/ceAEA1xzdQAAAEBCAoANYXPRwYEmw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFeQABABoGLwKi0ArL40DbC2QBQ64tGkd7pAzOAEA2fyC4AAAEBCAoANYXTRwYEow==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFfQABABoGKwKi0ArL40DbC2QBQ64tGkd7pCJ+AEA3MwpEAAAEBCAoANYXURwYEpg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFgQABABoGJwKi0ArL40DbC2QBQ64tGkd7pDguAEA35vPgAAAEBCAoANYXURwYEpg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652794,"pkt_len":52,"pkt":"RQAANMFhQABABoGIwKi0ArL40DbC2QBQ64tGkd7pE3eAEA4mt00AAAEBCAoANYXcRwYEsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652795,"pkt_len":64,"pkt":"RQAAQMFiQABABoF7wKi0ArL40DbC2QBQ64tGkd7pE3ewEA4mgVIAAAEBCAoANYXiRwYEsAEBBQre6R5P3ukjuw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652795,"pkt_len":64,"pkt":"RQAAQMFjQABABoF6wKi0ArL40DbC2QBQ64tGkd7pE3ewEA4me98AAAEBCAoANYXpRwYEsAEBBQre6R5P3ukpJw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652795,"pkt_len":64,"pkt":"RQAAQMFkQABABoF5wKi0ArL40DbC2QBQ64tGkd7pGOOwEA5UdP8AAAEBCAoANYY8RwYFowEBBQre6R5P3ukpJw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":72,"pkt":"RQAASMFlQABABoFwwKi0ArL40DbC2QBQ64tGkd7pGOPQEA5UNIEAAAEBCAoANYZERwYFowEBBRLe6S6T3ukz\/97pHk\/e6Skn","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":64,"pkt":"RQAAQMFmQABABoF3wKi0ArL40DbC2QBQ64tGkd7pKSewEA6BST0AAAEBCAoANYZNRwYFxwEBBQre6S6T3ukz\/w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":72,"pkt":"RQAASMFnQABABoFuwKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B8w4AAAEBCAoANYZVRwYFxwEBBRLe6Tlr3uk+197pLpPe6TP\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":72,"pkt":"RQAASMFoQABABoFtwKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B7ZsAAAEBCAoANYZcRwYFxwEBBRLe6Tlr3ulEQ97pLpPe6TP\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":72,"pkt":"RQAASMFpQABABoFswKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B6CoAAAEBCAoANYZhRwYFxwEBBRLe6Tlr3ulJr97pLpPe6TP\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":72,"pkt":"RQAASMFqQABABoFrwKi0ArL40DbC2QBQ64tGkd7pKSfQEA6B4rgAAAEBCAoANYZnRwYFxwEBBRLe6Tlr3ulPG97pLpPe6TP\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652796,"pkt_len":64,"pkt":"RQAAQMFrQABABoFywKi0ArL40DbC2QBQ64tGkd7pM\/+wEA6uFw4AAAEBCAoANYalRwYGpQEBBQre6Tlr3ulPGw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":72,"pkt":"RQAASMFsQABABoFpwKi0ArL40DbC2QBQ64tGkd7pM\/\/QEA6uiqgAAAEBCAoANYasRwYGpQEBBRLe6VSH3ulZ897pOWve6U8b","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":72,"pkt":"RQAASMFtQABABoFowKi0ArL40DbC2QBQ64tGkd7pM\/\/QEA6uhTsAAAEBCAoANYatRwYGpQEBBRLe6VSH3ulfX97pOWve6U8b","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMFuQABABoFvwKi0ArL40DbC2QBQ64tGkd7pTxuwEA7b0C0AAAEBCAoANYa1RwYGzAEBBQre6VSH3ulfXw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMFvQABABoF6wKi0ArL40DbC2QBQ64tGkd7pX1+AEA8JZ40AAAEBCAoANYa1RwYGzA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMFwQABABoF5wKi0ArL40DbC2QBQ64tGkd7pZMuAEA82YfQAAAEBCAoANYa1RwYGzA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMFxQABABoF4wKi0ArL40DbC2QBQ64tGkd7pajeAEA9jXD0AAAEBCAoANYa8RwYG4w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMFyQABABoF3wKi0ArL40DbC2QBQ64tGkd7pb6OAEA+QVqMAAAEBCAoANYa9RwYG4w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMFzQABABoF2wKi0ArL40DbC2QBQ64tGkd7pdQ+AEA++UQkAAAEBCAoANYa9RwYG4w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMF0QABABoFpwKi0ArL40DbC2QBQ64tGkd7pdQ+wEA++YrQAAAEBCAoANYbERwYG4wEBBQre6Xp73ul\/5w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMF1QABABoFowKi0ArL40DbC2QBQ64tGkd7pdQ+wEA++XUgAAAEBCAoANYbERwYG4wEBBQre6Xp73umFUw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMF2QABABoFnwKi0ArL40DbC2QBQ64tGkd7pdQ+wEA++V9UAAAEBCAoANYbLRwYG4wEBBQre6Xp73umKvw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":60,"pkt":"RQAAPAMUQABABslXwKi0AkDpuLyAsgG7QZiF2AAAAACgAjkIz8gAAAIEBbQEAggKADWGzAAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMVQABABslewKi0AkDpuLyAsgG7QZiF2aTu9RqAEADl+L8AAAEBCAoANYbSHkOFlA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0617{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":271,"pkt":"RQABDwMWQABABsiCwKi0AkDpuLyAsgG7QZiF2aTu9RqAGADlVfIAAAEBCAoANYbUHkOFlBYDAQDWAQAA0gMD4HuK+eOlMdUOH1cZsMt60He+NukWbTB7f1JNaYrt+NsAACjAK8AswC\/AMACeAJ\/ACcAKwBPAFAAzADnAB8ARAJwAnQAvADUABQD\/AQAAgQAAABUAEwAAEG10YWxrLmdvb2dsZS5jb20ACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAARACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAw==","pkt_caplen":271,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMXQABABslcwKi0AkDpuLyAsgG7QZiGtKTu+oaAEAES8esAAAEBCAoANYbaHkOF7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0323{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMYQABABslbwKi0AkDpuLyAsgG7QZiGtKTu\/\/KAEAE\/7FEAAAEBCAoANYbbHkOF7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMZQABABslawKi0AkDpuLyAsgG7QZiGtKTvBHiAEAFq56AAAAEBCAoANYbbHkOF7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0491{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":178,"pkt":"RQAAsgMaQABABsjbwKi0AkDpuLyAsgG7QZiGtKTvBHiAGAFqNYcAAAEBCAoANYbgHkOF7BYDAwBGEAAAQkEEygA0cs5oyBQUPZsJWy3f3szO8eg6l5VS2eGtEbXrhuValhaBoFT5VOyPsBGiM5YcAWBvsKH5wssaiUW5asI4uBQDAwABARYDAwAo\/EiJwPKZA3acP9qn2s6P7AQ++VRJWrM7uU+CT68BE23E8ejpTzHCVQ==","pkt_caplen":178,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMbQABABslYwKi0AkDpuLyAsgG7QZiHMqTvBW6AEAGW5YgAAAEBCAoANYbjHkOGXA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMF3QABABoFywKi0ArL40DbC2QBQ64tGkd7pir+AEA\/rOocAAAEBCAoANYbpRwYHXA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1993{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":1287,"pkt":"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","pkt_caplen":1287,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMF4QABABoFlwKi0ArL40DbC2QBQ64tGkd7pir+wEA\/rINUAAAEBCAoANYbtRwYHXAEBBQre6ZAr3umVlw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMF5QABABoFkwKi0ArL40DbC2QBQ64tGkd7pir+wEA\/rG2kAAAEBCAoANYbtRwYHXAEBBQre6ZAr3umbAw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMdQABABslWwKi0AkDpuLyAsgG7QZiMBaTvBYyAEAGW4BQAAAEBCAoANYbxHkOG0Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMF6QABABoFvwKi0ArL40DbC2QBQ64tGkd7pmwOAEBAYKfsAAAEBCAoANYbyRwYHbg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMF7QABABoFiwKi0ArL40DbC2QBQ64tGkd7pmwOwEBAYBXUAAAEBCAoANYbyRwYHbgEBBQre6ZWX3umbAw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMF8QABABoFtwKi0ArL40DbC2QBQ64tGkd7poG+AEBBFJGIAAAEBCAoANYbyRwYHbg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMeQABABslVwKi0AkDpuLyAsgG7QZiMBaTvBf2AEAGW348AAAEBCAoANYbyHkOG5A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMF9QABABoFswKi0ArL40DbC2QBQ64tGkd7ppduAEBBzHscAAAEBCAoANYbzRwYHbg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANAMfQABABslUwKi0AkDpuLyAsgG7QZiMBaTvBnqAEAGW3wwAAAEBCAoANYb1HkOG5w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMF+QABABoFrwKi0ArL40DbC2QBQ64tGkd7pq0eAEBCgGR0AAAEBCAoANYb5RwYHeQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMF\/QABABoFqwKi0ArL40DbC2QBQ64tGkd7psLOAEBDNE4MAAAEBCAoANYb5RwYHeg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMGAQABABoFpwKi0ArL40DbC2QBQ64tGkd7pth+AEBD6DekAAAEBCAoANYb5RwYHew==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMGBQABABoFowKi0ArL40DbC2QBQ64tGkd7pu4uAEBEoCDsAAAEBCAoANYb\/RwYHiQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":52,"pkt":"RQAANMGCQABABoFnwKi0ArL40DbC2QBQ64tGkd7pwPeAEBFVAp8AAAEBCAoANYcBRwYHig==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMGDQABABoFawKi0ArL40DbC2QBQ64tGkd7pwPewEBFVfHoAAAEBCAoANYcHRwYHigEBBQre6cZj3unLzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652797,"pkt_len":64,"pkt":"RQAAQMGEQABABoFZwKi0ArL40DbC2QBQ64tGkd7pwPewEBFVdw4AAAEBCAoANYcHRwYHigEBBQre6cZj3unROw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":72,"pkt":"RQAASMGFQABABoFQwKi0ArL40DbC2QBQ64tGkd7pwPfQEBFV248AAAEBCAoANYcORwYHigEBBRLe6dwT3unhf97pxmPe6dE7","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":64,"pkt":"RQAAQMGGQABABoFXwKi0ArL40DbC2QBQ64tGkd7p0TuwEBGCQGcAAAEBCAoANYcVRwYHvgEBBQre6dwT3unhfw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":65,"pkt":"RQAAQYcjQABAES7OwKi0AggICAguEQA1AC1oEnazAQAAAQAAAAAAAARwbGF5Cmdvb2dsZWFwaXMDY29tAAABAAE=","pkt_caplen":65,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":60,"pkt":"RQAAPHAIQABABm7AwKi0AkDppl+6uwG7gNP3IgAAAACgAjkI9zgAAAIEBbQEAggKADWHKgAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":52,"pkt":"RQAANHAJQABABm7HwKi0AkDppl+6uwG7gNP3IxI082eAEADlT7wAAAEBCAoANYczAMsH6w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":236,"pkt":"RQAA7HAKQABABm4OwKi0AkDppl+6uwG7gNP3IxI082eAGADln0MAAAEBCAoANYczAMsH6xYDAQCzAQAArwMBVmhd\/avXwE9Hbo+g4bJoaBoe\/PaQpNdc4O0Q8a7HcbYAAEYABAAFAC8ANcACwATABcAMwA7AD8AHwAnACsARwBPAFAAzADkAMgA4AArAA8ANwAjAEgAWABMACQAVABIAAwAIABQAEQD\/AQAAQAALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":236,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":64,"pkt":"RQAAQHALQABABm65wKi0AkDppl+6uwG7gNP32xI082ewEADl\/WcAAAEBCAoANYc8AMsH6wEBBQoSNPjTEjT+Pw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":64,"pkt":"RQAAQHAMQABABm64wKi0AkDppl+6uwG7gNP32xI082ewEADl+h8AAAEBCAoANYc8AMsH6wEBBQoSNPjTEjUBhw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":52,"pkt":"RQAANHANQABABm7DwKi0AkDppl+6uwG7gNP32xI1AYeAEAESP+YAAAEBCAoANYdEAMsIqw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0499{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":186,"pkt":"RQAAunAOQABABm48wKi0AkDppl+6uwG7gNP32xI1AYeAGAESyy0AAAEBCAoANYdKAMsIqxYDAQBGEAAAQkEERW4InoLmmETsmbq7iNYq\/uNoJjfYZ7GrVbCgL+pMTKvYUbYVc42GhfBm5bJZLifeIScwh0Es60NTSZBLNuKx6hQDAQABARYDAQAwP+gkOxQQZv5+tK2pbv10GSaJPvtkOm9t6GPFVbw4WeGoA4IHJkkluw15ri+Pcw3x","pkt_caplen":186,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":52,"pkt":"RQAANHAPQABABm7BwKi0AkDppl+6uwG7gNP4YRI1AcKAEAESPqMAAAEBCAoANYdOAMsJIw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+1135{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":649,"pkt":"RQACiXAQQABABmxrwKi0AkDppl+6uwG7gNP4YRI1AcKAGAESmlcAAAEBCAoANYdQAMsJIxcDAQJQtYB8KceZcX537qxqxSeHK6h3g94pz350VSgCUaq6kyHRu\/ujOAK44PaoYsIkwvMkPdw\/SInfY\/vx8JrDAidotcWdlNsEJMy9dXo9pMd40Jqbtwq\/LtEfd5PwCyCX2bP+OOBO290j\/3SVrGprv7t+gW4fg1nyKr4WbHMTVahOqWzzDiROFa40b1rNESXI3kDBrleOyVynSWiz9BRu8jM6grVD6EPM9FIVJCaDld4xb2XlNWkdt2tX\/7nYXXrC5bAv1eb\/rBJYwaFY2uf9A0C9+BsIZy4x9XIYr2bwiGw65DWYo+LwdqMH0DXtHhhbrMC80GWY153ZH\/bULV\/hjuOc3lTzjKsSgRMRUqMWCe1ob+dCeLIbhuNO2bICDSK8uoTc53tYtgvn46iMKP1Xgra\/14uoiuHF\/0pKyfwTDYU02kpKOTVYhNy4pYMUMpAR0FK1V1nHL0BrmjJSGytBkPo\/gBON5OC\/Ewt4MOze3uiZf1vqR8ncqxLr6pyPcTO6Hqb9VZxwjtesZRXZUZ+YnE\/LD4MuUjxcckBDmCjSHFM12kx0FN\/lj++BDCdMHTo+2gxh3p3gxdgptwCv5ybFi3t0KGt0wt3eB9jHTbWDvoiVCFposaKUpqKXMqXJe5otBMMJKXCnuabbnJEQOVdtTlsedvkpqA39eVzMfSZ2x4wd45NFW0LmK1iivY3N2ujwGCBXNYs4C\/9+CQGKUpZUdBB\/PjSNu5EwrqhBnb785VOxOuhIe8hU1ynbqL7reEoA9ZJC62UmMRLT8TL9GJPJYtDIEA==","pkt_caplen":649,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":52,"pkt":"RQAANHARQABABm6\/wKi0AkDppl+6uwG7gNP6thI1A7eAEAE9OdwAAAEBCAoANYdcAMsJZw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0370{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":89,"pkt":"RQAAWXASQABABm6ZwKi0AkDppl+6uwG7gNP6thI1A7eAGAE9JTsAAAEBCAoANYdcAMsJZxUDAQAgq\/9CYFvXrcQVyGdxSYtUugliMMXMg2CdqVJvhJ\/MPXc=","pkt_caplen":89,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":52,"pkt":"RQAANHATQABABm69wKi0AkDppl+6uwG7gNP62xI1A7iAEAE9OTYAAAEBCAoANYdlAMsJ3g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652798,"pkt_len":64,"pkt":"RQAAQMGHQABABoFWwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvOZcAAAEBCAoANYduRwYInAEBBQre6dwT3unhfw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGIQABABoFVwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvNCUAAAEBCAoANYd0RwYInAEBBQre6dwT3unm6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGJQABABoFUwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvLrgAAAEBCAoANYd1RwYInAEBBQre6dwT3unsVw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":72,"pkt":"RQAASMGKQABABoFLwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvfYoAAAEBCAoANYd7RwYInAEBBRLe6ebr3unsV97p3BPe6exX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGLQABABoFSwKi0ArL40DbC2QBQ64tGkd7p1qewEBGvKUYAAAEBCAoANYd7RwYInAEBBQre6dwT3unxww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":72,"pkt":"RQAASMGMQABABoFJwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvV40AAAEBCAoANYeERwYInAEBBRLe6fcv3un8m97p3BPe6fHD","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":72,"pkt":"RQAASMGNQABABoFIwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvUhsAAAEBCAoANYeKRwYInAEBBRLe6fcv3uoCB97p3BPe6fHD","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":72,"pkt":"RQAASMGOQABABoFHwKi0ArL40DbC2QBQ64tGkd7p1qfQEBGvTKoAAAEBCAoANYePRwYInAEBBRLe6fcv3uoHc97p3BPe6fHD","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGPQABABoFOwKi0ArL40DbC2QBQ64tGkd7p8cOwEBHd3K8AAAEBCAoANYeWRwYJAQEBBQre6fcv3uoHcw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGQQABABoFZwKi0ArL40DbC2QBQ64tGkd7qB3OAEBIKuUkAAAEBCAoANYedRwYJEg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGRQABABoFYwKi0ArL40DbC2QBQ64tGkd7qDN+AEBI3s7AAAAEBCAoANYedRwYJEg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGSQABABoFLwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3lbsAAAEBCAoANYejRwYJEgEBBQre6hJL3uoXtw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGTQABABoFKwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3kE8AAAEBCAoANYejRwYJEgEBBQre6hJL3uodIw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGUQABABoFJwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3it4AAAEBCAoANYeoRwYJEgEBBQre6hJL3uoijw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGVQABABoFIwKi0ArL40DbC2QBQ64tGkd7qDN+wEBI3hXEAAAEBCAoANYepRwYJEgEBBQre6hJL3uon+w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGWQABABoFTwKi0ArL40DbC2QBQ64tGkd7qJ\/uAEBJkmCcAAAEBCAoANYevRwYJQA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGXQABABoFGwKi0ArL40DbC2QBQ64tGkd7qJ\/uwEBJkQ\/oAAAEBCAoANYe1RwYJQAEBBQre6i1n3uoy0w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGYQABABoFFwKi0ArL40DbC2QBQ64tGkd7qJ\/uwEBJkPokAAAEBCAoANYe6RwYJQAEBBQre6i1n3uo4Pw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":64,"pkt":"RQAAQMGZQABABoFEwKi0ArL40DbC2QBQ64tGkd7qJ\/uwEBJkORoAAAEBCAoANYe9RwYJQAEBBQre6i1n3uo9qw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGaQABABoFPwKi0ArL40DbC2QBQ64tGkd7qPauAEBKSggMAAAEBCAoANYfBRwYJdA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGbQABABoFOwKi0ArL40DbC2QBQ64tGkd7qQxeAEBK\/fGoAAAEBCAoANYfBRwYJdA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGcQABABoFNwKi0ArL40DbC2QBQ64tGkd7qSIOAEBLsdsMAAAEBCAoANYfFRwYJfg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGdQABABoFMwKi0ArL40DbC2QBQ64tGkd7qTe+AEBMZcSkAAAEBCAoANYfFRwYJfw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGeQABABoFLwKi0ArL40DbC2QBQ64tGkd7qU1uAEBNHa48AAAEBCAoANYfFRwYJfw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGfQABABoFKwKi0ArL40DbC2QBQ64tGkd7qWMeAEBN0ZeoAAAEBCAoANYfIRwYJiA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGgQABABoFJwKi0ArL40DbC2QBQ64tGkd7qXjOAEBOhYE4AAAEBCAoANYfJRwYJig==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGhQABABoFIwKi0ArL40DbC2QBQ64tGkd7qY5+AEBPOWrUAAAEBCAoANYfJRwYJig==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGiQABABoFHwKi0ArL40DbC2QBQ64tGkd7qaQuAEBP8VRMAAAEBCAoANYfLRwYJkA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652799,"pkt_len":52,"pkt":"RQAANMGjQABABoFGwKi0ArL40DbC2QBQ64tGkd7qbneAEBQpT3gAAAEBCAoANYfMRwYJkQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGkQABABoFFwKi0ArL40DbC2QBQ64tGkd7qc+OAEBRWSXkAAAEBCAoANYftRwYJ1g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":64,"pkt":"RQAAQMGlQABABoE4wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWUqMAAAEBCAoANYfzRwYJ1gEBBQre6n673uqEJw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":64,"pkt":"RQAAQMGmQABABoE3wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWTTcAAAEBCAoANYfzRwYJ1gEBBQre6n673uqJkw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":64,"pkt":"RQAAQMGnQABABoE2wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWUpsAAAEBCAoANYf7RwYJ1gEBBQre6nlP3uqJkw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":64,"pkt":"RQAAQMGoQABABoE1wKi0ArL40DbC2QBQ64tGkd7qc+OwEBRWTS4AAAEBCAoANYf8RwYJ1gEBBQre6nlP3uqO\/w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":72,"pkt":"RQAASMGpQABABoEswKi0ArL40DbC2QBQ64tGkd7qc+PQEBRWQP4AAAEBCAoANYgDRwYJ1gEBBRLe6pRr3uqZ197qeU\/e6o7\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":72,"pkt":"RQAASMGqQABABoErwKi0ArL40DbC2QBQ64tGkd7qc+PQEBRWO4sAAAEBCAoANYgKRwYJ1gEBBRLe6pRr3uqfQ97qeU\/e6o7\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":72,"pkt":"RQAASMGrQABABoEqwKi0ArL40DbC2QBQ64tGkd7qc+PQEBRWNhcAAAEBCAoANYgSRwYJ1gEBBRLe6pRr3uqkr97qeU\/e6o7\/","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":64,"pkt":"RQAAQMGsQABABoExwKi0ArL40DbC2QBQ64tGkd7qjv+wEBSDAJ0AAAEBCAoANYgURwYKOgEBBQre6pRr3uqkrw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGtQABABoE8wKi0ArL40DbC2QBQ64tGkd7qpK+AEBSxF6cAAAEBCAoANYgcRwYKUg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGuQABABoE7wKi0ArL40DbC2QBQ64tGkd7qqhuAEBTeEg4AAAEBCAoANYgcRwYKUg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGvQABABoE6wKi0ArL40DbC2QBQ64tGkd7qr4eAEBULDF4AAAEBCAoANYgiRwYKYw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGwQABABoE5wKi0ArL40DbC2QBQ64tGkd7qtPOAEBU4BsUAAAEBCAoANYgiRwYKYw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGxQABABoE4wKi0ArL40DbC2QBQ64tGkd7qul+AEBVmASoAAAEBCAoANYgjRwYKYw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGyQABABoE3wKi0ArL40DbC2QBQ64tGkd7qv8uAEBWT+30AAAEBCAoANYgoRwYKcQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMGzQABABoE2wKi0ArL40DbC2QBQ64tGkd7qxTeAEBXA9eMAAAEBCAoANYgoRwYKcg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG0QABABoE1wKi0ArL40DbC2QBQ64tGkd7qyqOAEBXt8EoAAAEBCAoANYgoRwYKcg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG1QABABoE0wKi0ArL40DbC2QBQ64tGkd7q0A+AEBYb6qAAAAEBCAoANYgsRwYKfg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG2QABABoEzwKi0ArL40DbC2QBQ64tGkd7q1XuAEBZI5QcAAAEBCAoANYgsRwYKfg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG3QABABoEywKi0ArL40DbC2QBQ64tGkd7q2ueAEBZ132wAAAEBCAoANYgtRwYKfw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG4QABABoExwKi0ArL40DbC2QBQ64tGkd7q4FOAEBai2cYAAAEBCAoANYgvRwYKig==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG5QABABoEwwKi0ArL40DbC2QBQ64tGkd7q5b+AEBbQ1CwAAAEBCAoANYgvRwYKig==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG6QABABoEvwKi0ArL40DbC2QBQ64tGkd7q6yuAEBb9zpEAAAEBCAoANYgwRwYKiw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG7QABABoEuwKi0ArL40DbC2QBQ64tGkd7q8JeAEBcqyPgAAAEBCAoANYgwRwYKiw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG8QABABoEtwKi0ArL40DbC2QBQ64tGkd7q9gOAEBdXw1YAAAEBCAoANYgyRwYKkg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG9QABABoEswKi0ArL40DbC2QBQ64tGkd7q+2+AEBeFvbwAAAEBCAoANYgyRwYKkg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG+QABABoErwKi0ArL40DbC2QBQ64tGkd7rANuAEBeyuB0AAAEBCAoANYg3RwYKkw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652800,"pkt_len":52,"pkt":"RQAANMG\/QABABoEqwKi0ArL40DbC2QBQ64tGkd7rBkeAEBffsoMAAAEBCAoANYg4RwYKkw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHAQABABoEdwKi0ArL40DbC2QBQ64tGkd7rBkewEBffocEAAAEBCAoANYg5RwYKkwEBBQre6wuz3usRHw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHBQABABoEcwKi0ArL40DbC2QBQ64tGkd7rBkewEBffnFEAAAEBCAoANYg9RwYKkwEBBQre6wuz3usWiw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHCQABABoEbwKi0ArL40DbC2QBQ64tGkd7rBkewEBffluUAAAEBCAoANYg9RwYKkwEBBQre6wuz3usb9w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHDQABABoEawKi0ArL40DbC2QBQ64tGkd7rBkewEBffkXgAAAEBCAoANYg+RwYKkwEBBQre6wuz3ushYw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHEQABABoEZwKi0ArL40DbC2QBQ64tGkd7rBkewEBffjAwAAAEBCAoANYg+RwYKkwEBBQre6wuz3usmzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHFQABABoEYwKi0ArL40DbC2QBQ64tGkd7rBkewEBffhpkAAAEBCAoANYhFRwYKkwEBBQre6wuz3ussOw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":52,"pkt":"RQAANMHGQABABoEjwKi0ArL40DbC2QBQ64tGkd7rLDuAEBgMjC4AAAEBCAoANYhHRwYKuA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHHQABABoEWwKi0ArL40DbC2QBQ64tGkd7rLDuwEBgML34AAAEBCAoANYhORwYKuAEBBQre6zGn3us3Ew==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":72,"pkt":"RQAASMHIQABABoENwKi0ArL40DbC2QBQ64tGkd7rLDvQEBgM0yQAAAEBCAoANYhVRwYKuAEBBRLe6zx\/3utB697rMafe6zcT","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHJQABABoEUwKi0ArL40DbC2QBQ64tGkd7rNxOwEBg6DiIAAAEBCAoANYh8RwYLMAEBBQre6zx\/3utB6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHKQABABoETwKi0ArL40DbC2QBQ64tGkd7rNxOwEBg6CK8AAAEBCAoANYiDRwYLMAEBBQre6zx\/3utHVw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":52,"pkt":"RQAANMHLQABABoEewKi0ArL40DbC2QBQ64tGkd7rR1eAEBhnb8gAAAEBCAoANYiKRwYLZA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":52,"pkt":"RQAANMHMQABABoEdwKi0ArL40DbC2QBQ64tGkd7rTMOAEBiUai8AAAEBCAoANYiKRwYLZA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":52,"pkt":"RQAANMHNQABABoEcwKi0ArL40DbC2QBQ64tGkd7rUi+AEBjBZJYAAAEBCAoANYiKRwYLZA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":64,"pkt":"RQAAQMHOQABABoEPwKi0ArL40DbC2QBQ64tGkd7rUi+wEBjBu\/wAAAEBCAoANYiSRwYLZAEBBQre61eb3utdBw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652801,"pkt_len":72,"pkt":"RQAASMHPQABABoEGwKi0ArL40DbC2QBQ64tGkd7rUi\/QEBjBE7wAAAEBCAoANYiYRwYLZAEBBRLe62Jz3utn397rV5ve610H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHQQABABoENwKi0ArL40DbC2QBQ64tGkd7rXQewEBjvmwgAAAEBCAoANYidRwYLlwEBBQre62Jz3utn3w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHRQABABoEMwKi0ArL40DbC2QBQ64tGkd7rXQewEBjvlZYAAAEBCAoANYijRwYLlwEBBQre62Jz3uttSw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHSQABABoEXwKi0ArL40DbC2QBQ64tGkd7rbUuAEBkcSLEAAAEBCAoANYipRwYLsw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHTQABABoEWwKi0ArL40DbC2QBQ64tGkd7rcreAEBlJQxgAAAEBCAoANYipRwYLsw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHUQABABoEVwKi0ArL40DbC2QBQ64tGkd7reCOAEBl2PWoAAAEBCAoANYivRwYLwg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHVQABABoEIwKi0ArL40DbC2QBQ64tGkd7reCOwEBl2SPAAAAEBCAoANYivRwYLwgEBBQre632P3uuC+w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHWQABABoETwKi0ArL40DbC2QBQ64tGkd7rgvuAEBmkMekAAAEBCAoANYjYRwYMFA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":60,"pkt":"RQAAPDy8QABABnyZwKi0AomHgzS0VhQCr\/++QwAAAACgAjkIzeQAAAIEBbQEAggKADWI3AAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHXQABABoEGwKi0ArL40DbC2QBQ64tGkd7rgvuwEBmkHOAAAAEBCAoANYjfRwYMFAEBBQre643T3uuTPw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHYQABABoEFwKi0ArL40DbC2QBQ64tGkd7rgvuwEBmkF3QAAAEBCAoANYjfRwYMFAEBBQre643T3uuYqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHZQABABoEEwKi0ArL40DbC2QBQ64tGkd7riGewEBnREZ0AAAEBCAoANYjmRwYMSwEBBQre643T3uuYqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHaQABABoEPwKi0ArL40DbC2QBQ64tGkd7rmKuAEBn+G5oAAAEBCAoANYjmRwYMSw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHbQABABoEOwKi0ArL40DbC2QBQ64tGkd7rnheAEBorFgAAAAEBCAoANYjmRwYMTA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHcQABABoENwKi0ArL40DbC2QBQ64tGkd7ro4OAEBpZEFIAAAEBCAoANYjtRwYMWQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHdQABABoEMwKi0ArL40DbC2QBQ64tGkd7rqO+AEBqGCrgAAAEBCAoANYjtRwYMWg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHeQABABoELwKi0ArL40DbC2QBQ64tGkd7rrluAEBqzBR4AAAEBCAoANYjtRwYMWw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHfQABABoEKwKi0ArL40DbC2QBQ64tGkd7rs8eAEBrg\/24AAAEBCAoANYjzRwYMaw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":52,"pkt":"RQAANMHgQABABoEJwKi0ArL40DbC2QBQ64tGkd7ruTOAEBsO+dQAAAEBCAoANYjzRwYMaw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHhQABABoD8wKi0ArL40DbC2QBQ64tGkd7ruTOwEBsOgzQAAAEBCAoANYj5RwYMawEBBQre676f3uvECw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652802,"pkt_len":64,"pkt":"RQAAQMHiQABABoD7wKi0ArL40DbC2QBQ64tGkd7ruTOwEBsOfcgAAAEBCAoANYj5RwYMawEBBQre676f3uvJdw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":52,"pkt":"RQAANMHjQABABoEGwKi0ArL40DbC2QBQ64tGkd7ryXeAEBs76DMAAAEBCAoANYlJRwYNRQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHkQABABoD5wKi0ArL40DbC2QBQ64tGkd7ryXewEBs7O14AAAEBCAoANYlMRwYNRQEBBQre69m73uvfJw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHlQABABoD4wKi0ArL40DbC2QBQ64tGkd7ryXewEBs7NfIAAAEBCAoANYlMRwYNRQEBBQre69m73uvkkw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHmQABABoD3wKi0ArL40DbC2QBQ64tGkd7rzuOwEBtoMDkAAAEBCAoANYlVRwYNXAEBBQre69m73uvkkw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHnQABABoD2wKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVKqAAAAEBCAoANYlVRwYNXAEBBQre69m73uvkkw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHoQABABoD1wKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVJS8AAAEBCAoANYlaRwYNXAEBBQre69m73uvp\/w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHpQABABoD0wKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVH8MAAAEBCAoANYlaRwYNXAEBBQre69m73uvvaw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652803,"pkt_len":64,"pkt":"RQAAQMHqQABABoDzwKi0ArL40DbC2QBQ64tGkd7r1E+wEBuVGlEAAAEBCAoANYlgRwYNXAEBBQre69m73uv01w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652804,"pkt_len":72,"pkt":"RQAASMHrQABABoDqwKi0ArL40DbC2QBQ64tGkd7r1E\/QEBuVQm8AAAEBCAoANYlmRwYNXAEBBRLe6\/pD3uv\/r97r2bve6\/TX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652804,"pkt_len":72,"pkt":"RQAASMHsQABABoDpwKi0ArL40DbC2QBQ64tGkd7r1E\/QEBuVPP0AAAEBCAoANYlsRwYNXAEBBRLe6\/pD3uwFG97r2bve6\/TX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652804,"pkt_len":72,"pkt":"RQAASMHtQABABoDowKi0ArL40DbC2QBQ64tGkd7r1E\/QEBuVN4sAAAEBCAoANYlyRwYNXAEBBRLe6\/pD3uwKh97r2bve6\/TX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652804,"pkt_len":64,"pkt":"RQAAQMHuQABABoDvwKi0ArL40DbC2QBQ64tGkd7r9NewEBvDwvMAAAEBCAoANYl2RwYNtQEBBQre6\/pD3uwKhw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMHvQABABoD6wKi0ArL40DbC2QBQ64tGkd7sCoeAEBvwpJEAAAEBCAoANYnYRwYOkw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":64,"pkt":"RQAAQMHwQABABoDtwKi0ArL40DbC2QBQ64tGkd7sCoewEBvwi0gAAAEBCAoANYneRwYOkwEBBQre7A\/z3uwVXw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":64,"pkt":"RQAAQMHxQABABoDswKi0ArL40DbC2QBQ64tGkd7sCoewEBvwhdwAAAEBCAoANYneRwYOkwEBBQre7A\/z3uwayw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":72,"pkt":"RQAASMHyQABABoDjwKi0ArL40DbC2QBQ64tGkd7sCofQEBvwd8AAAAEBCAoANYnmRwYOkwEBBRLe7BVf3uway97sD\/Pe7BrL","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMHzQABABoD2wKi0ArL40DbC2QBQ64tGkd7sGsuAEBwdk3MAAAEBCAoANYoMRwYPDA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH0QABABoD1wKi0ArL40DbC2QBQ64tGkd7sIDeAEBxKjaUAAAEBCAoANYoSRwYPOw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH1QABABoD0wKi0ArL40DbC2QBQ64tGkd7sJaOAEBx4iAsAAAEBCAoANYoSRwYPOw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH2QABABoDzwKi0ArL40DbC2QBQ64tGkd7sKw+AEBylgl4AAAEBCAoANYoYRwYPSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH3QABABoDywKi0ArL40DbC2QBQ64tGkd7sMHuAEBzSfMUAAAEBCAoANYoYRwYPSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH4QABABoDxwKi0ArL40DbC2QBQ64tGkd7sNeeAEBz\/dywAAAEBCAoANYoYRwYPSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH5QABABoDwwKi0ArL40DbC2QBQ64tGkd7sO1OAEB0tcYEAAAEBCAoANYobRwYPVw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH6QABABoDvwKi0ArL40DbC2QBQ64tGkd7sQL+AEB1aa+gAAAEBCAoANYobRwYPVw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH7QABABoDuwKi0ArL40DbC2QBQ64tGkd7sRiuAEB2HZk4AAAEBCAoANYobRwYPWA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH8QABABoDtwKi0ArL40DbC2QBQ64tGkd7sS5eAEB20YKwAAAEBCAoANYoeRwYPXg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH9QABABoDswKi0ArL40DbC2QBQ64tGkd7sUQOAEB3iWxIAAAEBCAoANYoeRwYPXg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH+QABABoDrwKi0ArL40DbC2QBQ64tGkd7sVm+AEB4PVW4AAAEBCAoANYokRwYPYw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":52,"pkt":"RQAANMH\/QABABoDqwKi0ArL40DbC2QBQ64tGkd7sW9uAEB48T9UAAAEBCAoANYokRwYPYw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652805,"pkt_len":64,"pkt":"RQAAQMIAQABABoDdwKi0ArL40DbC2QBQ64tGkd7sW9uwEB48k+gAAAEBCAoANYolRwYPYwEBBQre7GFH3uxmsw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":72,"pkt":"RQAASMIBQABABoDUwKi0ArL40DbC2QBQ64tGkd7sW9vQEB48zXMAAAEBCAoANYotRwYPYwEBBRLe7HGL3ux2997sYUfe7Gaz","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMICQABABoDbwKi0ArL40DbC2QBQ64tGkd7sZrOwEB5paCIAAAEBCAoANYo1RwYPjAEBBQre7HGL3ux29w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIDQABABoDawKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XYgoAAAEBCAoANYpdRwYP4gEBBQre7HGL3ux29w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIEQABABoDZwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XXJcAAAEBCAoANYpkRwYP4gEBBQre7HGL3ux8Yw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIFQABABoDYwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XVysAAAEBCAoANYpkRwYP4gEBBQre7HGL3uyBzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":72,"pkt":"RQAASMIGQABABoDPwKi0ArL40DbC2QBQ64tGkd7sbB\/QEB6XewcAAAEBCAoANYprRwYP4gEBBRLe7Hxj3uyBz97scYve7IHP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIHQABABoDWwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XUbgAAAEBCAoANYprRwYP4gEBBQre7HGL3uyHOw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIIQABABoDVwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XTEwAAAEBCAoANYprRwYP4gEBBQre7HGL3uyMpw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIJQABABoDUwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XRtsAAAEBCAoANYpwRwYP4gEBBQre7HGL3uySEw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIKQABABoDTwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XQW0AAAEBCAoANYpyRwYP4gEBBQre7HGL3uyXfw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMILQABABoDSwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XO\/8AAAEBCAoANYp0RwYP4gEBBQre7HGL3uyc6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIMQABABoDRwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XNpIAAAEBCAoANYp1RwYP4gEBBQre7HGL3uyiVw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMINQABABoDQwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XMSQAAAEBCAoANYp3RwYP4gEBBQre7HGL3uynww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIOQABABoDPwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XK7cAAAEBCAoANYp4RwYP4gEBBQre7HGL3uytLw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIPQABABoDOwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XJkkAAAEBCAoANYp6RwYP4gEBBQre7HGL3uyymw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIQQABABoDNwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XIN0AAAEBCAoANYp6RwYP4gEBBQre7HGL3uy4Bw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMIRQABABoDMwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XG2oAAAEBCAoANYqBRwYP4gEBBQre7HGL3uy9cw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":64,"pkt":"RQAAQMISQABABoDLwKi0ArL40DbC2QBQ64tGkd7sbB+wEB6XFf4AAAEBCAoANYqBRwYP4gEBBQre7HGL3uzC3w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":52,"pkt":"RQAANMITQABABoDWwKi0ArL40DbC2QBQ64tGkd7swt+AEB7E5vQAAAEBCAoANYqCRwYQWQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":52,"pkt":"RQAANMIUQABABoDVwKi0ArL40DbC2QBQ64tGkd7syEuAEB7x4UsAAAEBCAoANYqKRwYQYQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":52,"pkt":"RQAANMIVQABABoDUwKi0ArL40DbC2QBQ64tGkd7szbeAEB8e27IAAAEBCAoANYqKRwYQYQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":52,"pkt":"RQAANMIWQABABoDTwKi0ArL40DbC2QBQ64tGkd7s0yOAEB9M1gAAAAEBCAoANYqPRwYQdA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":52,"pkt":"RQAANMIXQABABoDSwKi0ArL40DbC2QBQ64tGkd7s2I+AEB950GYAAAEBCAoANYqQRwYQdA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652806,"pkt_len":52,"pkt":"RQAANMIYQABABoDRwKi0ArL40DbC2QBQ64tGkd7s3fuAEB+mys0AAAEBCAoANYqQRwYQdA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIZQABABoDEwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+mCpoAAAEBCAoANYqXRwYQdAEBBQre7ONn3uzo0w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIaQABABoDDwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+mBS4AAAEBCAoANYqXRwYQdAEBBQre7ONn3uzuPw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIbQABABoDCwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+m\/7oAAAEBCAoANYqeRwYQdAEBBQre7ONn3uzzqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIcQABABoDBwKi0ArL40DbC2QBQ64tGkd7s3fuwEB+m+k4AAAEBCAoANYqeRwYQdAEBBQre7ONn3uz5Fw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIdQABABoDMwKi0ArL40DbC2QBQ64tGkd7s+ReAEB\/Trz0AAAEBCAoANYqlRwYQpg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIeQABABoC\/wKi0ArL40DbC2QBQ64tGkd7s+RewEB\/TuNAAAAEBCAoANYqtRwYQpgEBBQre7P6D3u0D7w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIfQABABoC+wKi0ArL40DbC2QBQ64tGkd7s+RewEB\/Ts14AAAEBCAoANYqzRwYQpgEBBQre7P6D3u0JWw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIgQABABoC9wKi0ArL40DbC2QBQ64tGkd7s+RewEB\/TresAAAEBCAoANYq6RwYQpgEBBQre7P6D3u0Oxw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIhQABABoDIwKi0ArL40DbC2QBQ64tGkd7tDseAECABmPsAAAEBCAoANYrCRwYQ7Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIiQABABoDHwKi0ArL40DbC2QBQ64tGkd7tFDOAECAuk2IAAAEBCAoANYrCRwYQ7Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIjQABABoC6wKi0ArL40DbC2QBQ64tGkd7tFDOwECAuW+QAAAEBCAoANYrLRwYQ7QEBBQre7R8L3u0kdw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIkQABABoC5wKi0ArL40DbC2QBQ64tGkd7tFDOwECAuVnEAAAEBCAoANYrSRwYQ7QEBBQre7R8L3u0p4w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMIlQABABoC4wKi0ArL40DbC2QBQ64tGkd7tGZ+wECBbUJYAAAEBCAoANYrZRwYRKAEBBQre7R8L3u0p4w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":64,"pkt":"RQAAQMImQABABoC3wKi0ArL40DbC2QBQ64tGkd7tGZ+wECBbSyYAAAEBCAoANYrdRwYRKAEBBQre7R8L3u0vTw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMInQABABoDCwKi0ArL40DbC2QBQ64tGkd7tL0+AECCId3UAAAEBCAoANYrhRwYRRQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIoQABABoDBwKi0ArL40DbC2QBQ64tGkd7tNLuAECC2cdsAAAEBCAoANYrhRwYRRQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIpQABABoDAwKi0ArL40DbC2QBQ64tGkd7tOieAECDjbDIAAAEBCAoANYrmRwYRUA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIqQABABoC\/wKi0ArL40DbC2QBQ64tGkd7tP5OAECEQZpkAAAEBCAoANYrmRwYRUA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIrQABABoC+wKi0ArL40DbC2QBQ64tGkd7tRP+AECE9YQAAAAEBCAoANYrmRwYRUA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652807,"pkt_len":52,"pkt":"RQAANMIsQABABoC9wKi0ArL40DbC2QBQ64tGkd7tSmuAECFrW1YAAAEBCAoANYrsRwYRWg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":52,"pkt":"RQAANMItQABABoC8wKi0ArL40DbC2QBQ64tGkd7tT9eAECGYVT4AAAEBCAoANYsWRwYRrw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":64,"pkt":"RQAAQMIuQABABoCvwKi0ArL40DbC2QBQ64tGkd7tT9ewECGYpnkAAAEBCAoANYsdRwYRrwEBBQre7Vqv3u1gGw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":64,"pkt":"RQAAQMIvQABABoCuwKi0ArL40DbC2QBQ64tGkd7tT9ewECGYoQ0AAAEBCAoANYsdRwYRrwEBBQre7Vqv3u1lhw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":64,"pkt":"RQAAQMIwQABABoCtwKi0ArL40DbC2QBQ64tGkd7tT9ewECGYpnEAAAEBCAoANYslRwYRrwEBBQre7VVD3u1lhw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":72,"pkt":"RQAASMIxQABABoCkwKi0ArL40DbC2QBQ64tGkd7tT9fQECGYAuMAAAEBCAoANYslRwYRrwEBBRLe7WAb3u1lh97tVUPe7WWH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":72,"pkt":"RQAASMIyQABABoCjwKi0ArL40DbC2QBQ64tGkd7tT9fQECGY7SsAAAEBCAoANYssRwYRrwEBBRLe7Wrz3u1wX97tVUPe7WWH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":64,"pkt":"RQAAQMIzQABABoCqwKi0ArL40DbC2QBQ64tGkd7tZYewECHFb3kAAAEBCAoANYs+RwYSKQEBBQre7Wrz3u1wXw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":52,"pkt":"RQAANMI0QABABoC1wKi0ArL40DbC2QBQ64tGkd7tcF+AECHyM6cAAAEBCAoANYtERwYSNg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":52,"pkt":"RQAANMI1QABABoC0wKi0ArL40DbC2QBQ64tGkd7tdcuAECIgLg0AAAEBCAoANYtERwYSNg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":52,"pkt":"RQAANMI2QABABoCzwKi0ArL40DbC2QBQ64tGkd7tezeAECJNKGEAAAEBCAoANYtJRwYSRA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":52,"pkt":"RQAANMI3QABABoCywKi0ArL40DbC2QBQ64tGkd7tgKOAECJ6IsgAAAEBCAoANYtJRwYSRA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":52,"pkt":"RQAANMI4QABABoCxwKi0ArL40DbC2QBQ64tGkd7thg+AECKnHS4AAAEBCAoANYtJRwYSRQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652808,"pkt_len":64,"pkt":"RQAAQMI5QABABoCkwKi0ArL40DbC2QBQ64tGkd7thg+wECKnDNAAAAEBCAoANYtRRwYSRQEBBQre7Yt73u2Q5w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":72,"pkt":"RQAASMI6QABABoCbwKi0ArL40DbC2QBQ64tGkd7thg\/QECKn\/MkAAAEBCAoANYtYRwYSRQEBBRLe7ZZT3u2bv97ti3ve7ZDn","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":64,"pkt":"RQAAQMI7QABABoCiwKi0ArL40DbC2QBQ64tGkd7tkOewECLV69IAAAEBCAoANYtjRwYSegEBBQre7ZZT3u2bvw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMI8QABABoCtwKi0ArL40DbC2QBQ64tGkd7tm7+AECMCBqsAAAEBCAoANYttRwYSmQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":64,"pkt":"RQAAQMI9QABABoCgwKi0ArL40DbC2QBQ64tGkd7tm7+wECMCyu4AAAEBCAoANYtzRwYSmQEBBQre7aEr3u2mlw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":64,"pkt":"RQAAQMI+QABABoCfwKi0ArL40DbC2QBQ64tGkd7tm7+wECMCxXkAAAEBCAoANYt8RwYSmQEBBQre7aEr3u2sAw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMI\/QABABoCqwKi0ArL40DbC2QBQ64tGkd7trAOAECMv9cEAAAEBCAoANYuPRwYS7w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":64,"pkt":"RQAAQMJAQABABoCdwKi0ArL40DbC2QBQ64tGkd7trAOwECMvjqMAAAEBCAoANYuXRwYS7wEBBQre7bbb3u28Rw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":64,"pkt":"RQAAQMJBQABABoCcwKi0ArL40DbC2QBQ64tGkd7tsW+wECNciN0AAAEBCAoANYueRwYTFQEBBQre7bbb3u28Rw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJCQABABoCnwKi0ArL40DbC2QBQ64tGkd7tvEeAECOK5O0AAAEBCAoANYueRwYTFQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJDQABABoCmwKi0ArL40DbC2QBQ64tGkd7twbOAECO331QAAAEBCAoANYueRwYTFQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJEQABABoClwKi0ArL40DbC2QBQ64tGkd7txx+AECPk2aMAAAEBCAoANYukRwYTJw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJFQABABoCkwKi0ArL40DbC2QBQ64tGkd7tzIuAECQR1AkAAAEBCAoANYulRwYTJw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJGQABABoCjwKi0ArL40DbC2QBQ64tGkd7t0feAECQ\/zm4AAAEBCAoANYulRwYTKA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJHQABABoCiwKi0ArL40DbC2QBQ64tGkd7t12OAECRsyMMAAAEBCAoANYupRwYTNg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJIQABABoChwKi0ArL40DbC2QBQ64tGkd7t3M+AECSZwycAAAEBCAoANYupRwYTOQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJJQABABoCgwKi0ArL40DbC2QBQ64tGkd7t4juAECTGvY4AAAEBCAoANYupRwYTOQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJKQABABoCfwKi0ArL40DbC2QBQ64tGkd7t56eAECT0t+cAAAEBCAoANYuuRwYTQQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJLQABABoCewKi0ArL40DbC2QBQ64tGkd7t7ROAECUhsk4AAAEBCAoANYuuRwYTQQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJMQABABoCdwKi0ArL40DbC2QBQ64tGkd7t8n+AECVOrLEAAAEBCAoANYuvRwYTRA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":52,"pkt":"RQAANMJNQABABoCcwKi0ArL40DbC2QBQ64tGkd7t9+uAECV7pxgAAAEBCAoANYuvRwYTRA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":64,"pkt":"RQAAQMJOQABABoCPwKi0ArL40DbC2QBQ64tGkd7t9+uwECV7swMAAAEBCAoANYu1RwYTRAEBBQre7f1X3u4Cww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652809,"pkt_len":72,"pkt":"RQAASMJPQABABoCGwKi0ArL40DbC2QBQ64tGkd7t9+vQECV7v0cAAAEBCAoANYu5RwYTRAEBBRLe7ggv3u4Nm97t\/Vfe7gLD","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":64,"pkt":"RQAAQMJQQABABoCNwKi0ArL40DbC2QBQ64tGkd7uAsOwECWpkbgAAAEBCAoANYviRwYTrAEBBQre7ggv3u4Nmw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":72,"pkt":"RQAASMJRQABABoCEwKi0ArL40DbC2QBQ64tGkd7uAsPQECWpiEcAAAEBCAoANYvrRwYTrAEBBRLe7hMH3u4Yc97uCC\/e7g2b","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":72,"pkt":"RQAASMJSQABABoCDwKi0ArL40DbC2QBQ64tGkd7uAsPQECWpgtsAAAEBCAoANYvrRwYTrAEBBRLe7hMH3u4d397uCC\/e7g2b","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":64,"pkt":"RQAAQMJTQABABoCKwKi0ArL40DbC2QBQ64tGkd7uDZuwECXWa00AAAEBCAoANYvyRwYT5gEBBQre7hMH3u4d3w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":72,"pkt":"RQAASMJUQABABoCBwKi0ArL40DbC2QBQ64tGkd7uDZvQECXWQVYAAAEBCAoANYv5RwYT5gEBBRLe7iNL3u4ot97uEwfe7h3f","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":72,"pkt":"RQAASMJVQABABoCAwKi0ArL40DbC2QBQ64tGkd7uDZvQECXWO+IAAAEBCAoANYwBRwYT5gEBBRLe7iNL3u4uI97uEwfe7h3f","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":72,"pkt":"RQAASMJWQABABoB\/wKi0ArL40DbC2QBQ64tGkd7uDZvQECXWNnAAAAEBCAoANYwHRwYT5gEBBRLe7iNL3u4zj97uEwfe7h3f","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":72,"pkt":"RQAASMJXQABABoB+wKi0ArL40DbC2QBQ64tGkd7uDZvQECXWMP4AAAEBCAoANYwNRwYT5gEBBRLe7iNL3u44+97uEwfe7h3f","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":64,"pkt":"RQAAQMJYQABABoCFwKi0ArL40DbC2QBQ64tGkd7uHd+wECYDLwYAAAEBCAoANYwSRwYUPAEBBQre7iNL3u44+w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":52,"pkt":"RQAANMJZQABABoCQwKi0ArL40DbC2QBQ64tGkd7uOPuAECYwY+gAAAEBCAoANYwVRwYUSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":52,"pkt":"RQAANMJaQABABoCPwKi0ArL40DbC2QBQ64tGkd7uPmeAECZeXk4AAAEBCAoANYwVRwYUSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":52,"pkt":"RQAANMJbQABABoCOwKi0ArL40DbC2QBQ64tGkd7uQ9OAECaLWKYAAAEBCAoANYwZRwYUVA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":52,"pkt":"RQAANMJcQABABoCNwKi0ArL40DbC2QBQ64tGkd7uST+AECa4UwwAAAEBCAoANYwaRwYUVA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":52,"pkt":"RQAANMJdQABABoCMwKi0ArL40DbC2QBQ64tGkd7uTquAECblTXMAAAEBCAoANYwaRwYUVA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652810,"pkt_len":52,"pkt":"RQAANMJeQABABoCLwKi0ArL40DbC2QBQ64tGkd7uVBeAECcTR8wAAAEBCAoANYwgRwYUWw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652811,"pkt_len":64,"pkt":"RQAAQMJfQABABoB+wKi0ArL40DbC2QBQ64tGkd7uVBewECcTm2IAAAEBCAoANYwiRwYUWwEBBQre7lmD3u5e7w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652811,"pkt_len":64,"pkt":"RQAAQMJgQABABoB9wKi0ArL40DbC2QBQ64tGkd7uVBewECcTlfAAAAEBCAoANYwoRwYUWwEBBQre7lmD3u5kWw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652811,"pkt_len":64,"pkt":"RQAAQMJhQABABoB8wKi0ArL40DbC2QBQ64tGkd7uVBewECcTkHwAAAEBCAoANYwwRwYUWwEBBQre7lmD3u5pxw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652811,"pkt_len":52,"pkt":"RQAANMJiQABABoCHwKi0ArL40DbC2QBQ64tGkd7uaceAECdAMaMAAAEBCAoANYw0RwYUkw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":64,"pkt":"RQAAQMJjQABABoB6wKi0ArL40DbC2QBQ64tGkd7uacewECdAjoMAAAEBCAoANY3ERwYUkwEBBQre7lQX3u5Zgw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":64,"pkt":"RQAAQMJkQABABoB5wKi0ArL40DbC2QBQ64tGkd7uacewECdAWEYAAAEBCAoANY3JRwYUkwEBBQre7m8z3u50nw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":64,"pkt":"RQAAQMJlQABABoB4wKi0ArL40DbC2QBQ64tGkd7uacewECdAUtoAAAEBCAoANY3JRwYUkwEBBQre7m8z3u56Cw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":52,"pkt":"RQAANMJmQABABoCDwKi0ArL40DbC2QBQ64tGkd7ueguAECdtG5YAAAEBCAoANY3QRwYYkw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":64,"pkt":"RQAAQMJnQABABoB2wKi0ArL40DbC2QBQ64tGkd7ueguwECdtOPUAAAEBCAoANY3RRwYYkwEBBQre7nSf3u56Cw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":64,"pkt":"RQAAQMJoQABABoB1wKi0ArL40DbC2QBQ64tGkd7ueguwECdtI0UAAAEBCAoANY3RRwYYkwEBBQre7n933u6E4w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":64,"pkt":"RQAAQMJpQABABoB0wKi0ArL40DbC2QBQ64tGkd7ueguwECdtHdIAAAEBCAoANY3YRwYYkwEBBQre7n933u6KTw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652815,"pkt_len":72,"pkt":"RQAASMJqQABABoBrwKi0ArL40DbC2QBQ64tGkd7uegvQECdtGvoAAAEBCAoANY3fRwYYkwEBBRLe7o+73u6VJ97uf3fe7opP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652818,"pkt_len":60,"pkt":"RQAAPDy9QABABnyYwKi0AomHgzS0VhQCr\/++QwAAAACgAjkIx6AAAAIEBbQEAggKADWPIAAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":64,"pkt":"RQAAQMJrQABABoBywKi0ArL40DbC2QBQ64tGkd7uik+wECea69gAAAEBCAoANY+vRwYdKAEBBQre7o+73u6VJw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":64,"pkt":"RQAAQMJsQABABoBxwKi0ArL40DbC2QBQ64tGkd7uik+wECea5mkAAAEBCAoANY+yRwYdKAEBBQre7o+73u6akw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":64,"pkt":"RQAAQMJtQABABoBwwKi0ArL40DbC2QBQ64tGkd7uik+wECea4P0AAAEBCAoANY+yRwYdKAEBBQre7o+73u6f\/w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":52,"pkt":"RQAANMJuQABABoB7wKi0ArL40DbC2QBQ64tGkd7un\/+AECfI7pwAAAEBCAoANY+1RwYdWA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":64,"pkt":"RQAAQMJvQABABoBuwKi0ArL40DbC2QBQ64tGkd7un\/+wECfIwBQAAAEBCAoANY+1RwYdWAEBBQre7pqT3u6f\/w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":52,"pkt":"RQAANMJwQABABoB5wKi0ArL40DbC2QBQ64tGkd7upWuAECf16QMAAAEBCAoANY+1RwYdWA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":52,"pkt":"RQAANMJxQABABoB4wKi0ArL40DbC2QBQ64tGkd7uqteAECgi42kAAAEBCAoANY+1RwYdWQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":52,"pkt":"RQAANMJyQABABoB3wKi0ArL40DbC2QBQ64tGkd7usEOAEChP3cIAAAEBCAoANY+8RwYdYA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652820,"pkt_len":64,"pkt":"RQAAQMJzQABABoBqwKi0ArL40DbC2QBQ64tGkd7usEOwEChPeQIAAAEBCAoANY+8RwYdYAEBBQre7rWv3u67Gw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":52,"pkt":"RQAANMJ0QABABoB1wKi0ArL40DbC2QBQ64tGkd7uuxuAECh9zeAAAAEBCAoANZEgRwYg2A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":64,"pkt":"RQAAQMJ1QABABoBowKi0ArL40DbC2QBQ64tGkd7uuxuwECh9SJIAAAEBCAoANZEmRwYg2AEBBQre7sXz3u7LXw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":64,"pkt":"RQAAQMJ2QABABoBnwKi0ArL40DbC2QBQ64tGkd7uuxuwECh9QyYAAAEBCAoANZEmRwYg2AEBBQre7sXz3u7Qyw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":64,"pkt":"RQAAQMJ3QABABoBmwKi0ArL40DbC2QBQ64tGkd7uwIewECiqPWMAAAEBCAoANZEtRwYg+wEBBQre7sXz3u7Qyw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":52,"pkt":"RQAANMJ4QABABoBxwKi0ArL40DbC2QBQ64tGkd7u0MuAECjXt6YAAAEBCAoANZEtRwYg+w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":52,"pkt":"RQAANMJ5QABABoBwwKi0ArL40DbC2QBQ64tGkd7u1jeAECkEsgwAAAEBCAoANZEuRwYg+w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":52,"pkt":"RQAANMJ6QABABoBvwKi0ArL40DbC2QBQ64tGkd7u26OAECkyrF0AAAEBCAoANZExRwYhDQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":52,"pkt":"RQAANMJ7QABABoBuwKi0ArL40DbC2QBQ64tGkd7u4Q+AEClfpsQAAAEBCAoANZExRwYhDQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652823,"pkt_len":52,"pkt":"RQAANMJ8QABABoBtwKi0ArL40DbC2QBQ64tGkd7u5nuAECmMoSoAAAEBCAoANZExRwYhDg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMJ9QABABoBswKi0ArL40DbC2QBQ64tGkd7u6+eAECm5m4QAAAEBCAoANZE2RwYhFg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMJ+QABABoBrwKi0ArL40DbC2QBQ64tGkd7u8VOAECnnleoAAAEBCAoANZE2RwYhFg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMJ\/QABABoBqwKi0ArL40DbC2QBQ64tGkd7u9r+AECoUkFAAAAEBCAoANZE2RwYhFw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKAQABABoBpwKi0ArL40DbC2QBQ64tGkd7u\/CuAECpBiqkAAAEBCAoANZE5RwYhIg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKBQABABoBowKi0ArL40DbC2QBQ64tGkd7vAZeAECpuhRAAAAEBCAoANZE5RwYhIg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKCQABABoBnwKi0ArL40DbC2QBQ64tGkd7vBwOAECqcf3YAAAEBCAoANZE5RwYhIg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKDQABABoBmwKi0ArL40DbC2QBQ64tGkd7vDG+AECrJedwAAAEBCAoANZE6RwYhIg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKEQABABoBlwKi0ArL40DbC2QBQ64tGkd7vEduAECr2dDYAAAEBCAoANZE+RwYhKw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKFQABABoBkwKi0ArL40DbC2QBQ64tGkd7vF0eAECsjbp0AAAEBCAoANZE+RwYhKw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKGQABABoBjwKi0ArL40DbC2QBQ64tGkd7vHLOAECtRaQMAAAEBCAoANZE+RwYhKw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKHQABABoBiwKi0ArL40DbC2QBQ64tGkd7vIh+AECt+Y2kAAAEBCAoANZE\/RwYhKw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKIQABABoBhwKi0ArL40DbC2QBQ64tGkd7vJ4uAECurXcEAAAEBCAoANZFCRwYhNw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKJQABABoBgwKi0ArL40DbC2QBQ64tGkd7vLPeAECvYWCgAAAEBCAoANZFCRwYhNw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKKQABABoBfwKi0ArL40DbC2QBQ64tGkd7vMmOAECwGUo4AAAEBCAoANZFCRwYhNw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKLQABABoBewKi0ArL40DbC2QBQ64tGkd7vN8+AECwzTPUAAAEBCAoANZFCRwYhNw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKMQABABoBdwKi0ArL40DbC2QBQ64tGkd7vPTuAECxgR08AAAEBCAoANZFFRwYhQQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKNQABABoBcwKi0ArL40DbC2QBQ64tGkd7vQqeAECyNQbYAAAEBCAoANZFFRwYhQQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKOQABABoBbwKi0ArL40DbC2QBQ64tGkd7vSBOAECy7PBwAAAEBCAoANZFFRwYhQQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKPQABABoBawKi0ArL40DbC2QBQ64tGkd7vTX+AECzoNoIAAAEBCAoANZFGRwYhQQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKQQABABoBZwKi0ArL40DbC2QBQ64tGkd7vUuuAEC0VMN4AAAEBCAoANZFJRwYhSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKRQABABoBYwKi0ArL40DbC2QBQ64tGkd7vWFeAEC1CK0UAAAEBCAoANZFJRwYhSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKSQABABoBXwKi0ArL40DbC2QBQ64tGkd7vXcOAEC1wJasAAAEBCAoANZFJRwYhSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKTQABABoBWwKi0ArL40DbC2QBQ64tGkd7vYy+AEC2dIBEAAAEBCAoANZFJRwYhSg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKUQABABoBVwKi0ArL40DbC2QBQ64tGkd7vaJuAEC3KGngAAAEBCAoANZFJRwYhSg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKVQABABoBUwKi0ArL40DbC2QBQ64tGkd7vbgeAEC33FNEAAAEBCAoANZFORwYhUw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKWQABABoBTwKi0ArL40DbC2QBQ64tGkd7vc3OAEC4lDzcAAAEBCAoANZFORwYhUw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKXQABABoBSwKi0ArL40DbC2QBQ64tGkd7veN+AEC5SCZ4AAAEBCAoANZFORwYhUw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKYQABABoBRwKi0ArL40DbC2QBQ64tGkd7vfkuAEC5\/BAQAAAEBCAoANZFPRwYhUw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKZQABABoBQwKi0ArL40DbC2QBQ64tGkd7vg7eAEC6s\/mkAAAEBCAoANZFPRwYhVA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKaQABABoBPwKi0ArL40DbC2QBQ64tGkd7viSOAEC7a+M8AAAEBCAoANZFPRwYhVA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKbQABABoBCwKi0ArL40DbC2QBQ64tGkd7viSOwEC7a4kgAAAEBCAoANZFURwYhVAEBBQre746P3u+T+w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKcQABABoBBwKi0ArL40DbC2QBQ64tGkd7viSOwEC7a3NsAAAEBCAoANZFVRwYhVAEBBQre746P3u+ZZw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKdQABABoBAwKi0ArL40DbC2QBQ64tGkd7viSOwEC7a128AAAEBCAoANZFVRwYhVAEBBQre746P3u+e0w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":72,"pkt":"RQAASMKeQABABoA3wKi0ArL40DbC2QBQ64tGkd7viSPQEC7aq48AAAEBCAoANZFaRwYhVAEBBRLe76Q\/3u+pq97vjo\/e757T","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":72,"pkt":"RQAASMKfQABABoA2wKi0ArL40DbC2QBQ64tGkd7viSPQEC7apiMAAAEBCAoANZFaRwYhVAEBBRLe76Q\/3u+vF97vjo\/e757T","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":72,"pkt":"RQAASMKgQABABoA1wKi0ArL40DbC2QBQ64tGkd7viSPQEC7aoLYAAAEBCAoANZFbRwYhVAEBBRLe76Q\/3u+0g97vjo\/e757T","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0358{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":80,"pkt":"RQAAUMKhQABABoAswKi0ArL40DbC2QBQ64tGkd7viSPwEC7aSXQAAAEBCAoANZFiRwYhVAEBBRre77nv3u+\/W97vpD\/e77SD3u+Oj97vntM=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0359{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":80,"pkt":"RQAAUMKiQABABoArwKi0ArL40DbC2QBQ64tGkd7viSPwEC7aQ\/8AAAEBCAoANZFrRwYhVAEBBRre77nv3u\/Ex97vpD\/e77SD3u+Oj97vntM=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":72,"pkt":"RQAASMKjQABABoAywKi0ArL40DbC2QBQ64tGkd7vntPQEC8HORsAAAEBCAoANZFyRwYhpwEBBRLe77nv3u\/Ex97vpD\/e77SD","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKkQABABoA5wKi0ArL40DbC2QBQ64tGkd7vtIOwEC80WfEAAAEBCAoANZFyRwYhpwEBBQre77nv3u\/Exw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":72,"pkt":"RQAASMKlQABABoAwwKi0ArL40DbC2QBQ64tGkd7vtIPQEC804iYAAAEBCAoANZF5RwYhpwEBBRLe78oz3u\/Pn97vue\/e78TH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":72,"pkt":"RQAASMKmQABABoAvwKi0ArL40DbC2QBQ64tGkd7vtIPQEC803LoAAAEBCAoANZF5RwYhpwEBBRLe78oz3u\/VC97vue\/e78TH","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKnQABABoA2wKi0ArL40DbC2QBQ64tGkd7vxMewEC9hKMYAAAEBCAoANZGARwYhywEBBQre78oz3u\/VCw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKoQABABoA1wKi0ArL40DbC2QBQ64tGkd7vxMewEC9hI1oAAAEBCAoANZGARwYhywEBBQre78oz3u\/adw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKpQABABoA0wKi0ArL40DbC2QBQ64tGkd7vxMewEC9hHe0AAAEBCAoANZGBRwYhywEBBQre78oz3u\/f4w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKqQABABoA\/wKi0ArL40DbC2QBQ64tGkd7v3+OAEC+PoJkAAAEBCAoANZGHRwYh3Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":64,"pkt":"RQAAQMKrQABABoAywKi0ArL40DbC2QBQ64tGkd7v3+OwEC+P3JEAAAEBCAoANZGMRwYh3QEBBQre7+VP3u\/quw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKsQABABoA9wKi0ArL40DbC2QBQ64tGkd7v6ruAEC+8lW0AAAEBCAoANZGRRwYh+g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKtQABABoA8wKi0ArL40DbC2QBQ64tGkd7v8CeAEC\/Wj+cAAAEBCAoANZGRRwYh+g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKuQABABoA7wKi0ArL40DbC2QBQ64tGkd7v9ZOAEC\/qilYAAAEBCAoANZGURwYiCA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKvQABABoA6wKi0ArL40DbC2QBQ64tGkd7v+v+AEC\/qhOkAAAEBCAoANZGVRwYiCA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652824,"pkt_len":52,"pkt":"RQAANMKwQABABoA5wKi0ArL40DbC2QBQ64tGkd7wAGuAEC\/Wf5EAAAEBCAoANZGVRwYiCA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMKxQABABoA4wKi0ArL40DbC2QBQ64tGkd7wBdeAEC\/qegcAAAEBCAoANZGZRwYiDg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMKyQABABoA3wKi0ArL40DbC2QBQ64tGkd7wC0OAEC\/qdJoAAAEBCAoANZGZRwYiDw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMKzQABABoA2wKi0ArL40DbC2QBQ64tGkd7wEK+AEC\/Wb0IAAAEBCAoANZGZRwYiDw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK0QABABoA1wKi0ArL40DbC2QBQ64tGkd7wFhuAEC\/qabYAAAEBCAoANZGbRwYiGQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK1QABABoA0wKi0ArL40DbC2QBQ64tGkd7wG4eAEC\/WZFwAAAEBCAoANZGcRwYiGg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK2QABABoAzwKi0ArL40DbC2QBQ64tGkd7wIPOAEC\/qXtwAAAEBCAoANZGcRwYiGg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK3QABABoAywKi0ArL40DbC2QBQ64tGkd7wJl+AEC\/qWWgAAAEBCAoANZGeRwYiIA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK4QABABoAxwKi0ArL40DbC2QBQ64tGkd7wK8uAEC\/qU\/kAAAEBCAoANZGgRwYiIQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK5QABABoAwwKi0ArL40DbC2QBQ64tGkd7wMTeAEC\/qTo0AAAEBCAoANZGgRwYiIQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK6QABABoAvwKi0ArL40DbC2QBQ64tGkd7wNqOAEC\/qSRoAAAEBCAoANZGhRwYiJw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK7QABABoAuwKi0ArL40DbC2QBQ64tGkd7wPA+AEC\/qQ64AAAEBCAoANZGhRwYiJw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK8QABABoAtwKi0ArL40DbC2QBQ64tGkd7wQXuAEC\/qPjwAAAEBCAoANZGjRwYiKw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK9QABABoAswKi0ArL40DbC2QBQ64tGkd7wRueAEC\/qOMwAAAEBCAoANZGnRwYiKw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK+QABABoArwKi0ArL40DbC2QBQ64tGkd7wUb+AEC\/qLd8AAAEBCAoANZGqRwYiPQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMK\/QABABoAqwKi0ArL40DbC2QBQ64tGkd7wXJeAEC\/qIwUAAAEBCAoANZGrRwYiPg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLAQABABoApwKi0ArL40DbC2QBQ64tGkd7wZ2+AEC\/qGBMAAAEBCAoANZGyRwYiUQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLBQABABoAowKi0ArL40DbC2QBQ64tGkd7wckeAEC\/qDTsAAAEBCAoANZGyRwYiUQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLCQABABoAnwKi0ArL40DbC2QBQ64tGkd7wd7OAEC\/qB8oAAAEBCAoANZG2RwYiUg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLDQABABoAawKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qFCAAAAEBCAoANZG8RwYiUgEBBQre8H0f3vCCiw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLEQABABoAZwKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qDrQAAAEBCAoANZG8RwYiUgEBBQre8H0f3vCH9w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLFQABABoAYwKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qCUcAAAEBCAoANZG9RwYiUgEBBQre8H0f3vCNYw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLGQABABoAXwKi0ArL40DbC2QBQ64tGkd7wd7OwEC\/qA9MAAAEBCAoANZHFRwYiUgEBBQre8H0f3vCSzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLHQABABoAiwKi0ArL40DbC2QBQ64tGkd7wks+AEC+s7LsAAAEBCAoANZHFRwYicw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLIQABABoAhwKi0ArL40DbC2QBQ64tGkd7wmDuAEC\/q5owAAAEBCAoANZHtRwYi0A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLJQABABoAUwKi0ArL40DbC2QBQ64tGkd7wmDuwEC\/qpvoAAAEBCAoANZHzRwYi0AEBBQre8KMT3vCofw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLKQABABoATwKi0ArL40DbC2QBQ64tGkd7wmDuwEC\/qoY4AAAEBCAoANZHzRwYi0AEBBQre8KMT3vCt6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLLQABABoASwKi0ArL40DbC2QBQ64tGkd7wnaewEC\/WnAUAAAEBCAoANZH4RwYi\/AEBBQre8KMT3vCt6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLMQABABoAdwKi0ArL40DbC2QBQ64tGkd7wreuAEC\/B0M4AAAEBCAoANZH4RwYi\/A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":64,"pkt":"RQAAQMLNQABABoAQwKi0ArL40DbC2QBQ64tGkd7wreuwEC\/BhmoAAAEBCAoANZH4RwYi\/AEBBQre8Kh\/3vCt6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652825,"pkt_len":52,"pkt":"RQAANMLOQABABoAbwKi0ArL40DbC2QBQ64tGkd7ws1eAEC+sy3YAAAEBCAoANZH5RwYi\/A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLPQABABoAawKi0ArL40DbC2QBQ64tGkd7wuMOAEC\/qxbwAAAEBCAoANZH9RwYjCA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLQQABABoAZwKi0ArL40DbC2QBQ64tGkd7wvi+AEC\/qwFAAAAEBCAoANZH9RwYjCA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLRQABABoAYwKi0ArL40DbC2QBQ64tGkd7ww5uAEC\/WuvgAAAEBCAoANZH9RwYjCA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLSQABABoAXwKi0ArL40DbC2QBQ64tGkd7wyQeAEC\/qtXYAAAEBCAoANZH+RwYjCQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLTQABABoAWwKi0ArL40DbC2QBQ64tGkd7wznOAEC\/qr\/gAAAEBCAoANZIDRwYjFg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLUQABABoAVwKi0ArL40DbC2QBQ64tGkd7w09+AEC\/qqowAAAEBCAoANZIDRwYjFg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLVQABABoAUwKi0ArL40DbC2QBQ64tGkd7w2UuAEC\/qpRwAAAEBCAoANZIERwYjGQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLWQABABoATwKi0ArL40DbC2QBQ64tGkd7w3reAEC\/qn7AAAAEBCAoANZIERwYjGQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLXQABABoASwKi0ArL40DbC2QBQ64tGkd7w5COAEC\/qmjMAAAEBCAoANZIJRwYjJQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLYQABABoARwKi0ArL40DbC2QBQ64tGkd7w6Y+AEC\/qlMcAAAEBCAoANZIJRwYjJQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLZQABABoAQwKi0ArL40DbC2QBQ64tGkd7w7vuAEC\/Wj24AAAEBCAoANZIJRwYjJg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLaQABABoAPwKi0ArL40DbC2QBQ64tGkd7w9GeAEC\/BihcAAAEBCAoANZIJRwYjJg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLbQABABoAOwKi0ArL40DbC2QBQ64tGkd7w+dOAEC\/qhHMAAAEBCAoANZIMRwYjMg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLcQABABoANwKi0ArL40DbC2QBQ64tGkd7w\/z+AEC\/qfwYAAAEBCAoANZINRwYjMg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLdQABABoAMwKi0ArL40DbC2QBQ64tGkd7xCheAEC\/qdCwAAAEBCAoANZIORwYjMw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLeQABABoALwKi0ArL40DbC2QBQ64tGkd7xFO+AEC\/qaUoAAAEBCAoANZIQRwYjOw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLfQABABoAKwKi0ArL40DbC2QBQ64tGkd7xH8eAEC\/qXm4AAAEBCAoANZIRRwYjPg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLgQABABoAJwKi0ArL40DbC2QBQ64tGkd7xKp+AEC\/qU5QAAAEBCAoANZITRwYjPg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLhQABABoAIwKi0ArL40DbC2QBQ64tGkd7xNXeAEC\/qSLYAAAEBCAoANZITRwYjRA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLiQABABoAHwKi0ArL40DbC2QBQ64tGkd7xQE+AEC\/qPd0AAAEBCAoANZIURwYjRA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLjQABABoAGwKi0ArL40DbC2QBQ64tGkd7xSyeAEC\/qMvsAAAEBCAoANZIWRwYjTA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":52,"pkt":"RQAANMLkQABABoAFwKi0ArL40DbC2QBQ64tGkd7xVf+AEC\/qKB8AAAEBCAoANZIaRwYjTA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":64,"pkt":"RQAAQMLlQABABn\/4wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qd98AAAEBCAoANZIcRwYjTAEBBQre8Vtr3vFg1w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":64,"pkt":"RQAAQMLmQABABn\/3wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qcnIAAAEBCAoANZIdRwYjTAEBBQre8Vtr3vFmQw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":64,"pkt":"RQAAQMLnQABABn\/2wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qbQYAAAEBCAoANZIdRwYjTAEBBQre8Vtr3vFrrw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":64,"pkt":"RQAAQMLoQABABn\/1wKi0ArL40DbC2QBQ64tGkd7xVf+wEC\/qZ5QAAAEBCAoANZIjRwYjTAEBBQre8Vtr3vFxGw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":72,"pkt":"RQAASMLpQABABn\/swKi0ArL40DbC2QBQ64tGkd7xVf\/QEC\/qjEwAAAEBCAoANZIkRwYjTAEBBRLe8Xvz3vGBX97xW2ve8XEb","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":64,"pkt":"RQAAQMLqQABABn\/zwKi0ArL40DbC2QBQ64tGkd7xcRuwEC+XG34AAAEBCAoANZJKRwYjpgEBBQre8Xvz3vGBXw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":72,"pkt":"RQAASMLrQABABn\/qwKi0ArL40DbC2QBQ64tGkd7xcRvQEC\/WKkAAAAEBCAoANZJSRwYjpgEBBRLe8YbL3vGMN97xe\/Pe8YFf","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652826,"pkt_len":72,"pkt":"RQAASMLsQABABn\/pwKi0ArL40DbC2QBQ64tGkd7xcRvQEC\/WJNQAAAEBCAoANZJSRwYjpgEBBRLe8YbL3vGRo97xe\/Pe8YFf","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":72,"pkt":"RQAASMLtQABABn\/owKi0ArL40DbC2QBQ64tGkd7xdofQEC\/BHrcAAAEBCAoANZJ8RwYkQgEBBRLe8YbL3vGRo97xe\/Pe8YFf","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":72,"pkt":"RQAASMLuQABABn\/nwKi0ArL40DbC2QBQ64tGkd7xdofQEC\/BGUUAAAEBCAoANZKCRwYkQgEBBRLe8YbL3vGXD97xe\/Pe8YFf","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":64,"pkt":"RQAAQMLvQABABn\/uwKi0ArL40DbC2QBQ64tGkd7xgV+wEC+s6TAAAAEBCAoANZKvRwYkrQEBBQre8YbL3vGXDw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":72,"pkt":"RQAASMLwQABABn\/lwKi0ArL40DbC2QBQ64tGkd7xgV\/QEC+szNIAAAEBCAoANZK2RwYkrQEBBRLe8Zx73vGh597xhsve8ZcP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":72,"pkt":"RQAASMLxQABABn\/kwKi0ArL40DbC2QBQ64tGkd7xgV\/QEC+sx2YAAAEBCAoANZK2RwYkrQEBBRLe8Zx73vGnU97xhsve8ZcP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":64,"pkt":"RQAAQMLyQABABn\/rwKi0ArL40DbC2QBQ64tGkd7xlw+wEC+XrVsAAAEBCAoANZK8RwYk5gEBBQre8Zx73vGnUw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":52,"pkt":"RQAANMLzQABABn\/2wKi0ArL40DbC2QBQ64tGkd7xp1OAEC\/W1KEAAAEBCAoANZK9RwYk5g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":64,"pkt":"RQAAQML0QABABn\/pwKi0ArL40DbC2QBQ64tGkd7xp1OwEC\/Wl2sAAAEBCAoANZK9RwYk5gEBBQre8aHn3vGnUw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":52,"pkt":"RQAANML1QABABn\/0wKi0ArL40DbC2QBQ64tGkd7xrL+AEC\/Bz0oAAAEBCAoANZK9RwYk5g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":52,"pkt":"RQAANML2QABABn\/zwKi0ArL40DbC2QBQ64tGkd7xsiuAEC\/qyaYAAAEBCAoANZLBRwYk8Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":52,"pkt":"RQAANML3QABABn\/ywKi0ArL40DbC2QBQ64tGkd7xt5eAEC\/qxDgAAAEBCAoANZLBRwYk8w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652827,"pkt_len":52,"pkt":"RQAANML4QABABn\/xwKi0ArL40DbC2QBQ64tGkd7xvQOAEC\/qvskAAAEBCAoANZLCRwYk9Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML5QABABn\/wwKi0ArL40DbC2QBQ64tGkd7xwm+AEC\/quU0AAAEBCAoANZLFRwYlAg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML6QABABn\/vwKi0ArL40DbC2QBQ64tGkd7xx9uAEC\/qs+EAAAEBCAoANZLFRwYlAg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML7QABABn\/uwKi0ArL40DbC2QBQ64tGkd7xzUeAEC\/WrocAAAEBCAoANZLGRwYlAw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML8QABABn\/twKi0ArL40DbC2QBQ64tGkd7x0rOAEC\/qqPoAAAEBCAoANZLLRwYlCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML9QABABn\/swKi0ArL40DbC2QBQ64tGkd7x2B+AEC\/qo40AAAEBCAoANZLMRwYlCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML+QABABn\/rwKi0ArL40DbC2QBQ64tGkd7x3YuAEC\/WnjMAAAEBCAoANZLMRwYlDQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0323{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANML\/QABABn\/qwKi0ArL40DbC2QBQ64tGkd7x4veAEC\/BmNwAAAEBCAoANZLMRwYlDQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMAQABABn\/pwKi0ArL40DbC2QBQ64tGkd7x6GOAEC\/qkzMAAAEBCAoANZLURwYlGQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMBQABABn\/cwKi0ArL40DbC2QBQ64tGkd7x6GOwEC\/qviwAAAEBCAoANZLURwYlGQEBBQre8e3P3vHzOw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":72,"pkt":"RQAASMMCQABABn\/TwKi0ArL40DbC2QBQ64tGkd7x6GPQEC\/q6XkAAAEBCAoANZLXRwYlGQEBBRLe8fin3vH+E97x7c\/e8fM7","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":72,"pkt":"RQAASMMDQABABn\/SwKi0ArL40DbC2QBQ64tGkd7x6GPQEC\/q5A0AAAEBCAoANZLXRwYlGQEBBRLe8fin3vIDf97x7c\/e8fM7","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":72,"pkt":"RQAASMMEQABABn\/RwKi0ArL40DbC2QBQ64tGkd7x6GPQEC\/q3qEAAAEBCAoANZLXRwYlGQEBBRLe8fin3vII697x7c\/e8fM7","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMFQABABn\/YwKi0ArL40DbC2QBQ64tGkd7x8zuwEC+\/ktcAAAEBCAoANZLZRwYlNAEBBQre8fin3vII6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMGQABABn\/jwKi0ArL40DbC2QBQ64tGkd7yCOuAEC+scscAAAEBCAoANZLaRwYlNQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMHQABABn\/iwKi0ArL40DbC2QBQ64tGkd7yDleAEC+XbXAAAAEBCAoANZLaRwYlNQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMIQABABn\/hwKi0ArL40DbC2QBQ64tGkd7yE8OAEC\/qZ6oAAAEBCAoANZLcRwYlOg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMJQABABn\/gwKi0ArL40DbC2QBQ64tGkd7yGS+AEC\/WYlAAAAEBCAoANZLcRwYlPA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMKQABABn\/fwKi0ArL40DbC2QBQ64tGkd7yHpuAEC\/BXPgAAAEBCAoANZLdRwYlPA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMLQABABn\/ewKi0ArL40DbC2QBQ64tGkd7yJAeAEC\/qV2MAAAEBCAoANZLdRwYlPA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMMQABABn\/RwKi0ArL40DbC2QBQ64tGkd7yJAewEC\/q9VwAAAEBCAoANZLkRwYlPAEBBQre8jRL3vI5tw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMNQABABn\/QwKi0ArL40DbC2QBQ64tGkd7yKXOwEC\/q79IAAAEBCAoANZLpRwYlVQEBBQre8jRL3vI5tw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMOQABABn\/PwKi0ArL40DbC2QBQ64tGkd7yKXOwEC\/q6l8AAAEBCAoANZLwRwYlVQEBBQre8jRL3vI\/Iw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMPQABABn\/OwKi0ArL40DbC2QBQ64tGkd7yLt+wEC\/W5IMAAAEBCAoANZMWRwYlswEBBQre8jRL3vI\/Iw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0348{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":72,"pkt":"RQAASMMQQABABn\/FwKi0ArL40DbC2QBQ64tGkd7yLt\/QEC\/Wd\/0AAAEBCAoANZMcRwYlswEBBRLe8kSP3vJJ+97yNEve8j8j","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":72,"pkt":"RQAASMMRQABABn\/EwKi0ArL40DbC2QBQ64tGkd7yLt\/QEC\/WcpEAAAEBCAoANZMcRwYlswEBBRLe8kSP3vJPZ97yNEve8j8j","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMSQABABn\/LwKi0ArL40DbC2QBQ64tGkd7yPyOwEC+ss6YAAAEBCAoANZMiRwYl4gEBBQre8kSP3vJPZw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMTQABABn\/WwKi0ArL40DbC2QBQ64tGkd7yT2eAEC+XK2sAAAEBCAoANZMiRwYl4g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":64,"pkt":"RQAAQMMUQABABn\/JwKi0ArL40DbC2QBQ64tGkd7yT2ewEC\/qnbgAAAEBCAoANZMiRwYl4gEBBQre8kn73vJPZw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMVQABABn\/UwKi0ArL40DbC2QBQ64tGkd7yVNOAEC\/WJcAAAAEBCAoANZMiRwYl4g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMWQABABn\/TwKi0ArL40DbC2QBQ64tGkd7yWj+AEC\/qICwAAAEBCAoANZMnRwYl8Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMXQABABn\/SwKi0ArL40DbC2QBQ64tGkd7yX6uAEC\/qGr8AAAEBCAoANZMoRwYl8Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMYQABABn\/RwKi0ArL40DbC2QBQ64tGkd7yZReAEC\/WFWcAAAEBCAoANZMoRwYl8Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652828,"pkt_len":52,"pkt":"RQAANMMZQABABn\/QwKi0ArL40DbC2QBQ64tGkd7yaoOAEC\/BEBAAAAEBCAoANZMoRwYl8Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMaQABABn\/PwKi0ArL40DbC2QBQ64tGkd7yb++AEC\/qCmYAAAEBCAoANZMuRwYmAA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMbQABABn\/OwKi0ArL40DbC2QBQ64tGkd7ydVuAEC\/qBPoAAAEBCAoANZMuRwYmAA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0323{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMcQABABn\/NwKi0ArL40DbC2QBQ64tGkd7yeseAEC\/q\/4sAAAEBCAoANZMuRwYmAg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMdQABABn\/MwKi0ArL40DbC2QBQ64tGkd7ygDOAEC\/W+jMAAAEBCAoANZMuRwYmAg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMeQABABn\/LwKi0ArL40DbC2QBQ64tGkd7yhZ+AEC\/q9J8AAAEBCAoANZMzRwYmEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMfQABABn\/KwKi0ArL40DbC2QBQ64tGkd7yiwuAEC\/q7zMAAAEBCAoANZMzRwYmEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMgQABABn\/JwKi0ArL40DbC2QBQ64tGkd7ykHeAEC\/W6dsAAAEBCAoANZMzRwYmEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMhQABABn\/IwKi0ArL40DbC2QBQ64tGkd7yleOAEC\/B5IQAAAEBCAoANZMzRwYmEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMiQABABn\/HwKi0ArL40DbC2QBQ64tGkd7ym0+AEC\/q3tgAAAEBCAoANZM9RwYmHg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMMjQABABn+6wKi0ArL40DbC2QBQ64tGkd7ym0+wEC\/qo\/gAAAEBCAoANZM9RwYmHgEBBQre8qC73vKmJw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMMkQABABn+5wKi0ArL40DbC2QBQ64tGkd7ym0+wEC\/qnowAAAEBCAoANZM9RwYmHgEBBQre8qC73vKrkw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":72,"pkt":"RQAASMMlQABABn+wwKi0ArL40DbC2QBQ64tGkd7ym0\/QEC\/qWSgAAAEBCAoANZNARwYmHgEBBRLe8rD\/3vK2a97yoLve8quT","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":72,"pkt":"RQAASMMmQABABn+vwKi0ArL40DbC2QBQ64tGkd7ym0\/QEC\/qU7wAAAEBCAoANZNARwYmHgEBBRLe8rD\/3vK7197yoLve8quT","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0347{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":72,"pkt":"RQAASMMnQABABn+uwKi0ArL40DbC2QBQ64tGkd7ym0\/QEC\/qTlAAAAEBCAoANZNARwYmHgEBBRLe8rD\/3vLBQ97yoLve8quT","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMMoQABABn+1wKi0ArL40DbC2QBQ64tGkd7yq5OwEC+paHEAAAEBCAoANZNDRwYmPAEBBQre8rD\/3vLBQw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMpQABABn\/AwKi0ArL40DbC2QBQ64tGkd7ywUOAEC\/BuOMAAAEBCAoANZNIRwYmPQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMqQABABn+\/wKi0ArL40DbC2QBQ64tGkd7yxq+AEC\/qs04AAAEBCAoANZNIRwYmPQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMrQABABn++wKi0ArL40DbC2QBQ64tGkd7yzBuAEC\/WrfAAAAEBCAoANZNJRwYmQg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMsQABABn+9wKi0ArL40DbC2QBQ64tGkd7y0YeAEC\/qqF0AAAEBCAoANZNPRwYmTw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMtQABABn+8wKi0ArL40DbC2QBQ64tGkd7y1vOAEC\/qou8AAAEBCAoANZNPRwYmUQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMuQABABn+7wKi0ArL40DbC2QBQ64tGkd7y3F+AEC\/qnYIAAAEBCAoANZNQRwYmUQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMvQABABn+6wKi0ArL40DbC2QBQ64tGkd7y4cuAEC\/qmBQAAAEBCAoANZNQRwYmUw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMwQABABn+5wKi0ArL40DbC2QBQ64tGkd7y5zeAEC\/qkokAAAEBCAoANZNYRwYmag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMxQABABn+4wKi0ArL40DbC2QBQ64tGkd7y7KOAEC\/qjRwAAAEBCAoANZNZRwYmag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMyQABABn+3wKi0ArL40DbC2QBQ64tGkd7y8g+AEC\/qh7AAAAEBCAoANZNZRwYmag==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMMzQABABn+2wKi0ArL40DbC2QBQ64tGkd7y93uAEC\/qgj0AAAEBCAoANZNbRwYmbw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMM0QABABn+1wKi0ArL40DbC2QBQ64tGkd7y\/OeAEC\/WfOUAAAEBCAoANZNbRwYmbw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMM1QABABn+0wKi0ArL40DbC2QBQ64tGkd7zAlOAEC\/qd1UAAAEBCAoANZNhRwYmeQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMM2QABABn+nwKi0ArL40DbC2QBQ64tGkd7zAlOwEC\/qbmsAAAEBCAoANZNiRwYmeQEBBQre8we\/3vMNKw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":72,"pkt":"RQAASMM3QABABn+ewKi0ArL40DbC2QBQ64tGkd7zAlPQEC\/qUCEAAAEBCAoANZNqRwYmeQEBBRLe8x1v3vMi297zB7\/e8w0r","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMM4QABABn+lwKi0ArL40DbC2QBQ64tGkd7zDSuwEC\/WOAsAAAEBCAoANZNyRwYmpQEBBQre8x1v3vMi2w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMM5QABABn+kwKi0ArL40DbC2QBQ64tGkd7zEpewEC\/qMmwAAAEBCAoANZN7RwYmuwEBBQre8x1v3vMi2w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMM6QABABn+jwKi0ArL40DbC2QBQ64tGkd7zEpewEC\/qLPwAAAEBCAoANZN\/RwYmuwEBBQre8x1v3vMoRw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":64,"pkt":"RQAAQMM7QABABn+iwKi0ArL40DbC2QBQ64tGkd7zGAOwEC\/WJ4AAAAEBCAoANZOERwYm2gEBBQre8x1v3vMoRw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMM8QABABn+twKi0ArL40DbC2QBQ64tGkd7zKEeAEC\/WUPEAAAEBCAoANZOERwYm2g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMM9QABABn+swKi0ArL40DbC2QBQ64tGkd7zLbOAEC\/qS2EAAAEBCAoANZOIRwYm5g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMM+QABABn+rwKi0ArL40DbC2QBQ64tGkd7zMx+AEC\/qRfUAAAEBCAoANZOIRwYm5g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMM\/QABABn+qwKi0ArL40DbC2QBQ64tGkd7zOIuAEC\/WQJ0AAAEBCAoANZOIRwYm5g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMNAQABABn+pwKi0ArL40DbC2QBQ64tGkd7zPfeAEC\/qOxAAAAEBCAoANZOLRwYm8A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMNBQABABn+owKi0ArL40DbC2QBQ64tGkd7zQ2OAEC\/qNaQAAAEBCAoANZOLRwYm8A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652829,"pkt_len":52,"pkt":"RQAANMNCQABABn+nwKi0ArL40DbC2QBQ64tGkd7zSM+AEC\/WMEwAAAEBCAoANZOLRwYm8A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNDQABABn+mwKi0ArL40DbC2QBQ64tGkd7zTjuAEC\/qKr8AAAEBCAoANZOPRwYm+Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNEQABABn+lwKi0ArL40DbC2QBQ64tGkd7zU6eAEC\/qJVMAAAEBCAoANZOPRwYm+Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNFQABABn+kwKi0ArL40DbC2QBQ64tGkd7zWROAEC\/WH\/sAAAEBCAoANZOPRwYm+Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNGQABABn+jwKi0ArL40DbC2QBQ64tGkd7zXn+AEC\/qGnsAAAEBCAoANZOPRwYm+Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNHQABABn+iwKi0ArL40DbC2QBQ64tGkd7zY+uAEC\/WFSMAAAEBCAoANZOPRwYm+Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNIQABABn+hwKi0ArL40DbC2QBQ64tGkd7zaVeAEC\/qD5UAAAEBCAoANZOWRwYnAA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":64,"pkt":"RQAAQMNJQABABn+UwKi0ArL40DbC2QBQ64tGkd7zaVewEC\/qOKMAAAEBCAoANZOWRwYnAAEBBQre827D3vN0Lw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":72,"pkt":"RQAASMNKQABABn+LwKi0ArL40DbC2QBQ64tGkd7zaVfQEC\/qYgcAAAEBCAoANZOXRwYnAAEBBRLe83mb3vN\/B97zbsPe83Qv","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":72,"pkt":"RQAASMNLQABABn+KwKi0ArL40DbC2QBQ64tGkd7zaVfQEC\/qXJMAAAEBCAoANZOfRwYnAAEBBRLe83mb3vOEc97zbsPe83Qv","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":64,"pkt":"RQAAQMNMQABABn+RwKi0ArL40DbC2QBQ64tGkd7zdC+wEC\/BEl4AAAEBCAoANZO5RwYnVwEBBQre83mb3vOEcw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":72,"pkt":"RQAASMNNQABABn+IwKi0ArL40DbC2QBQ64tGkd7zdC\/QEC\/BGzcAAAEBCAoANZO9RwYnVwEBBRLe84nf3vOPS97zeZve84Rz","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":72,"pkt":"RQAASMNOQABABn+HwKi0ArL40DbC2QBQ64tGkd7zdC\/QEC\/BFcoAAAEBCAoANZO+RwYnVwEBBRLe84nf3vOUt97zeZve84Rz","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":64,"pkt":"RQAAQMNPQABABn+OwKi0ArL40DbC2QBQ64tGkd7zdC+wEC\/BAg0AAAEBCAoANZPGRwYnVwEBBQre83mb3vOUtw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":72,"pkt":"RQAASMNQQABABn+FwKi0ArL40DbC2QBQ64tGkd7zdC\/QEC\/BABIAAAEBCAoANZPGRwYnVwEBBRLe849L3vOUt97zeZve85S3","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNRQABABn+YwKi0ArL40DbC2QBQ64tGkd7zlLeAEC+X44IAAAEBCAoANZPiRwYnuQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652830,"pkt_len":52,"pkt":"RQAANMNSQABABn+XwKi0ArL40DbC2QBQ64tGkd7zmiOAEC\/q3aEAAAEBCAoANZPpRwYn1A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNTQABABn+KwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qpRAAAAEBCAoANZPwRwYn1AEBBQre85+P3vOk+w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNUQABABn+JwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qn6QAAAEBCAoANZPwRwYn1AEBBQre85+P3vOqZw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNVQABABn+IwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qmjIAAAEBCAoANZP2RwYn1AEBBQre85+P3vOv0w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNWQABABn+HwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qlMUAAAEBCAoANZP3RwYn1AEBBQre85+P3vO1Pw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNXQABABn+GwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qj1UAAAEBCAoANZP7RwYn1AEBBQre85+P3vO6qw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNYQABABn+FwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qiegAAAEBCAoANZP8RwYn1AEBBQre85+P3vPAFw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNZQABABn+EwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qhHcAAAEBCAoANZQBRwYn1AEBBQre85+P3vPFgw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNaQABABn+DwKi0ArL40DbC2QBQ64tGkd7zmiOwEC\/qfwgAAAEBCAoANZQERwYn1AEBBQre85+P3vPK7w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":72,"pkt":"RQAASMNbQABABn96wKi0ArL40DbC2QBQ64tGkd7zmiPQEC\/q+uYAAAEBCAoANZQKRwYn1AEBBRLe89Bb3vPVx97zn4\/e88rv","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNcQABABn+BwKi0ArL40DbC2QBQ64tGkd7zyu+wEC9CEuEAAAEBCAoANZQMRwYoKwEBBQre89Bb3vPVxw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNdQABABn+AwKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/WDNgAAAEBCAoANZQVRwYoKwEBBQre89Bb3vPbMw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNeQABABn9\/wKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/WB2QAAAEBCAoANZQdRwYoKwEBBQre89Bb3vPgnw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNfQABABn9+wKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/WAfIAAAEBCAoANZQjRwYoKwEBBQre89Bb3vPmCw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNgQABABn99wKi0ArL40DbC2QBQ64tGkd7zyu+wEC\/W\/HwAAAEBCAoANZQsRwYoKwEBBQre89Bb3vPrdw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNhQABABn+IwKi0ArL40DbC2QBQ64tGkd7z63eAEC+Xi7AAAAEBCAoANZQuRwYofw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNiQABABn+HwKi0ArL40DbC2QBQ64tGkd7z8OOAEC\/qhdoAAAEBCAoANZQ0RwYokA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNjQABABn+GwKi0ArL40DbC2QBQ64tGkd7z9k+AEC\/qgG4AAAEBCAoANZQ0RwYokA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNkQABABn+FwKi0ArL40DbC2QBQ64tGkd7z+7uAEC\/qeu0AAAEBCAoANZQ7RwYong==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNlQABABn+EwKi0ArL40DbC2QBQ64tGkd70ASeAEC\/qdYEAAAEBCAoANZQ7RwYong==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNmQABABn+DwKi0ArL40DbC2QBQ64tGkd70BpOAEC\/WcCkAAAEBCAoANZQ7RwYong==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNnQABABn+CwKi0ArL40DbC2QBQ64tGkd70C\/+AEC\/qapQAAAEBCAoANZRARwYorg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNoQABABn+BwKi0ArL40DbC2QBQ64tGkd70EWuAEC\/qZSYAAAEBCAoANZRBRwYorw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNpQABABn+AwKi0ArL40DbC2QBQ64tGkd70FteAEC\/qX7oAAAEBCAoANZRBRwYorw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNqQABABn9\/wKi0ArL40DbC2QBQ64tGkd70HEOAEC\/qWjsAAAEBCAoANZRHRwYovA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNrQABABn9ywKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qHW8AAAEBCAoANZRIRwYovAEBBQre9CGv3vQnGw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNsQABABn9xwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qF\/4AAAEBCAoANZRNRwYovAEBBQre9CGv3vQshw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNtQABABn9wwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qEpIAAAEBCAoANZRNRwYovAEBBQre9CGv3vQx8w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNuQABABn9vwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qDSYAAAEBCAoANZRNRwYovAEBBQre9CGv3vQ3Xw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":64,"pkt":"RQAAQMNvQABABn9uwKi0ArL40DbC2QBQ64tGkd70HEOwEC\/qB7QAAAEBCAoANZRTRwYovAEBBQre9CGv3vQ8yw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652831,"pkt_len":52,"pkt":"RQAANMNwQABABn95wKi0ArL40DbC2QBQ64tGkd70PMuAEC+XOdgAAAEBCAoANZRTRwYo3g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMNxQABABn94wKi0ArL40DbC2QBQ64tGkd70QjeAEC\/WNB0AAAEBCAoANZRWRwYo6w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMNyQABABn93wKi0ArL40DbC2QBQ64tGkd70R6OAEC\/BLsQAAAEBCAoANZRXRwYo7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMNzQABABn92wKi0ArL40DbC2QBQ64tGkd70TQ+AEC\/qKSMAAAEBCAoANZRcRwYo8w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMN0QABABn91wKi0ArL40DbC2QBQ64tGkd70UnuAEC\/qI7cAAAEBCAoANZRcRwYo8w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMN1QABABn90wKi0ArL40DbC2QBQ64tGkd70V+eAEC\/WHl4AAAEBCAoANZRcRwYo9A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMN2QABABn9zwKi0ArL40DbC2QBQ64tGkd70XVOAEC\/qGMgAAAEBCAoANZRlRwYpAQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":64,"pkt":"RQAAQMN3QABABn9mwKi0ArL40DbC2QBQ64tGkd70XVOwEC\/qWdwAAAEBCAoANZRlRwYpAQEBBQre9GK\/3vRoKw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":72,"pkt":"RQAASMN4QABABn9dwKi0ArL40DbC2QBQ64tGkd70XVPQEC\/qm0AAAAEBCAoANZRsRwYpAQEBBRLe9G2X3vRzA970Yr\/e9Ggr","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":72,"pkt":"RQAASMN5QABABn9cwKi0ArL40DbC2QBQ64tGkd70XVPQEC\/qldQAAAEBCAoANZRsRwYpAQEBBRLe9G2X3vR4b970Yr\/e9Ggr","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":64,"pkt":"RQAAQMN6QABABn9jwKi0ArL40DbC2QBQ64tGkd70aCuwEC\/BM9wAAAEBCAoANZRyRwYpKQEBBQre9G2X3vR4bw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":52,"pkt":"RQAANMN7QABABn9uwKi0ArL40DbC2QBQ64tGkd70eG+AEC\/W\/Q0AAAEBCAoANZSbRwYpfQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":64,"pkt":"RQAAQMN8QABABn9hwKi0ArL40DbC2QBQ64tGkd70eG+wEC\/qB84AAAEBCAoANZSjRwYpfQEBBQre9H3b3vSDRw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":64,"pkt":"RQAAQMN9QABABn9gwKi0ArL40DbC2QBQ64tGkd70eG+wEC\/qAlsAAAEBCAoANZSqRwYpfQEBBQre9H3b3vSIsw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652832,"pkt_len":64,"pkt":"RQAAQMN+QABABn9fwKi0ArL40DbC2QBQ64tGkd70eG+wEC\/q\/OUAAAEBCAoANZSzRwYpfQEBBQre9H3b3vSOHw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMN\/QABABn9ewKi0ArL40DbC2QBQ64tGkd70eG+wEC\/q93IAAAEBCAoANZS6RwYpfQEBBQre9H3b3vSTiw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":52,"pkt":"RQAANMOAQABABn9pwKi0ArL40DbC2QBQ64tGkd70k4uAEC+s4Y4AAAEBCAoANZS+RwYp5w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":52,"pkt":"RQAANMOBQABABn9owKi0ArL40DbC2QBQ64tGkd70mPeAEC\/q28sAAAEBCAoANZTHRwYp9w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOCQABABn9bwKi0ArL40DbC2QBQ64tGkd70mPewEC\/qpZIAAAEBCAoANZTMRwYp9wEBBQre9J5j3vSjzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMODQABABn9awKi0ArL40DbC2QBQ64tGkd70mPewEC\/qoCYAAAEBCAoANZTMRwYp9wEBBQre9J5j3vSpOw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOEQABABn9ZwKi0ArL40DbC2QBQ64tGkd70mPewEC\/qmrQAAAEBCAoANZTSRwYp9wEBBQre9J5j3vSupw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOFQABABn9YwKi0ArL40DbC2QBQ64tGkd70mPewEC\/qlUgAAAEBCAoANZTSRwYp9wEBBQre9J5j3vS0Ew==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":52,"pkt":"RQAANMOGQABABn9jwKi0ArL40DbC2QBQ64tGkd70tBOAEC+swKUAAAEBCAoANZTYRwYqLg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":52,"pkt":"RQAANMOHQABABn9iwKi0ArL40DbC2QBQ64tGkd70uX+AEC+Xu04AAAEBCAoANZTYRwYqLg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOIQABABn9VwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qQ7AAAAEBCAoANZTfRwYqLgEBBQre9L7r3vTEVw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOJQABABn9UwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qPkMAAAEBCAoANZTgRwYqLgEBBQre9L7r3vTJww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOKQABABn9TwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qONAAAAEBCAoANZTnRwYqLgEBBQre9L7r3vTPLw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOLQABABn9SwKi0ArL40DbC2QBQ64tGkd70uX+wEC\/qM2QAAAEBCAoANZTnRwYqLgEBBQre9L7r3vTUmw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":52,"pkt":"RQAANMOMQABABn9dwKi0ArL40DbC2QBQ64tGkd701JuAEC+sn9cAAAEBCAoANZTvRwYqXQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":52,"pkt":"RQAANMONQABABn9cwKi0ArL40DbC2QBQ64tGkd702geAEC\/qmiwAAAEBCAoANZTvRwYqXg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOOQABABn9PwKi0ArL40DbC2QBQ64tGkd702gewEC\/q1vgAAAEBCAoANZT2RwYqXgEBBQre9OTf3vTqSw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":64,"pkt":"RQAAQMOPQABABn9OwKi0ArL40DbC2QBQ64tGkd7033OwEC\/q0RIAAAEBCAoANZUVRwYquQEBBQre9OTf3vTqSw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":72,"pkt":"RQAASMOQQABABn9FwKi0ArL40DbC2QBQ64tGkd7033PQEC\/qDjcAAAEBCAoANZUbRwYquQEBBRLe9O+33vT1I9705N\/e9OpL","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652833,"pkt_len":72,"pkt":"RQAASMORQABABn9EwKi0ArL40DbC2QBQ64tGkd7033PQEC\/qCMoAAAEBCAoANZUcRwYquQEBBRLe9O+33vT6j9705N\/e9OpL","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652834,"pkt_len":80,"pkt":"RQAAUMOSQABABn87wKi0ArL40DbC2QBQ64tGkd7033PwEC\/qOxcAAAEBCAoANZUhRwYquQEBBRre9PUj3vT6j97077fe9PqP3vTk39706ks=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652834,"pkt_len":64,"pkt":"RQAAQMOTQABABn9KwKi0ArL40DbC2QBQ64tGkd706kuwEC\/BqqUAAAEBCAoANZVJRwYrJwEBBQre9O+33vT6jw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652834,"pkt_len":72,"pkt":"RQAASMOUQABABn9BwKi0ArL40DbC2QBQ64tGkd706kvQEC\/BvGcAAAEBCAoANZVRRwYrJwEBBRLe9QVn3vUK097077fe9PqP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652834,"pkt_len":64,"pkt":"RQAAQMOVQABABn9IwKi0ArL40DbC2QBQ64tGkd70+o+wEC\/Bc7AAAAEBCAoANZV8RwYrsQEBBQre9QVn3vUK0w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652834,"pkt_len":64,"pkt":"RQAAQMOWQABABn9HwKi0ArL40DbC2QBQ64tGkd70+o+wEC\/Wbi0AAAEBCAoANZV+RwYrsQEBBQre9QVn3vUQPw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652834,"pkt_len":64,"pkt":"RQAAQMOXQABABn9GwKi0ArL40DbC2QBQ64tGkd70+o+wEC\/WaMAAAAEBCAoANZV\/RwYrsQEBBQre9QVn3vUVqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0339{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":64,"pkt":"RQAAQMOYQABABn9FwKi0ArL40DbC2QBQ64tGkd70\/\/uwEC\/BY0AAAAEBCAoANZWBRwYr2AEBBQre9QVn3vUVqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOZQABABn9QwKi0ArL40DbC2QBQ64tGkd71FauAEC+sXLoAAAEBCAoANZWBRwYr2A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":64,"pkt":"RQAAQMOaQABABn9DwKi0ArL40DbC2QBQ64tGkd71FauwEC+sQs0AAAEBCAoANZWBRwYr2AEBBQre9RA\/3vUVqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMObQABABn9OwKi0ArL40DbC2QBQ64tGkd71GxeAEC+XV2IAAAEBCAoANZWCRwYr2A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOcQABABn9NwKi0ArL40DbC2QBQ64tGkd71IIOAEC\/qUZkAAAEBCAoANZWERwYr4A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOdQABABn9MwKi0ArL40DbC2QBQ64tGkd71Je+AEC\/WTEEAAAEBCAoANZWERwYr4A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOeQABABn9LwKi0ArL40DbC2QBQ64tGkd71K1uAEC\/BRugAAAEBCAoANZWFRwYr4Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOfQABABn9KwKi0ArL40DbC2QBQ64tGkd71MMeAEC\/qQU0AAAEBCAoANZWHRwYr5Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOgQABABn9JwKi0ArL40DbC2QBQ64tGkd71NjOAEC\/qO+AAAAEBCAoANZWHRwYr5g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOhQABABn9IwKi0ArL40DbC2QBQ64tGkd71O5+AEC\/qNnMAAAEBCAoANZWHRwYr5w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOiQABABn9HwKi0ArL40DbC2QBQ64tGkd71QQuAEC\/qMQAAAAEBCAoANZWJRwYr7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOjQABABn9GwKi0ArL40DbC2QBQ64tGkd71RneAEC\/qK5QAAAEBCAoANZWJRwYr7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOkQABABn9FwKi0ArL40DbC2QBQ64tGkd71S+OAEC\/WJjsAAAEBCAoANZWKRwYr7A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOlQABABn9EwKi0ArL40DbC2QBQ64tGkd71UU+AEC\/BIOMAAAEBCAoANZWKRwYr7Q==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOmQABABn9DwKi0ArL40DbC2QBQ64tGkd71VruAEC\/qG0cAAAEBCAoANZWMRwYr8g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOnQABABn9CwKi0ArL40DbC2QBQ64tGkd71XCeAEC\/WFe4AAAEBCAoANZWMRwYr8w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOoQABABn9BwKi0ArL40DbC2QBQ64tGkd71YZOAEC\/BEJcAAAEBCAoANZWMRwYr8w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOpQABABn9AwKi0ArL40DbC2QBQ64tGkd71Zv+AEC+sCz8AAAEBCAoANZWMRwYr9A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOqQABABn8\/wKi0ArL40DbC2QBQ64tGkd71cdeAEC\/qACYAAAEBCAoANZWPRwYr9A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOrQABABn8+wKi0ArL40DbC2QBQ64tGkd71fK+AEC\/q9UYAAAEBCAoANZWQRwYr+g==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":52,"pkt":"RQAANMOsQABABn89wKi0ArL40DbC2QBQ64tGkd71ghuAEC\/q79UAAAEBCAoANZWURwYr+w==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":64,"pkt":"RQAAQMOtQABABn8wwKi0ArL40DbC2QBQ64tGkd71ghuwEC\/qxssAAAEBCAoANZWYRwYr+wEBBQre9ZfL3vWdNw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":64,"pkt":"RQAAQMOuQABABn8vwKi0ArL40DbC2QBQ64tGkd71h4ewEC\/qwT4AAAEBCAoANZWcRwYsGAEBBQre9ZfL3vWdNw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652835,"pkt_len":64,"pkt":"RQAAQMOvQABABn8uwKi0ArL40DbC2QBQ64tGkd71jPOwEC\/qu8IAAAEBCAoANZWiRwYsIgEBBQre9ZfL3vWdNw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMOwQABABn8twKi0ArL40DbC2QBQ64tGkd71kl+wEC\/qtTMAAAEBCAoANZX3RwYs8AEBBQre9ZfL3vWdNw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":72,"pkt":"RQAASMOxQABABn8kwKi0ArL40DbC2QBQ64tGkd71kl\/QEC\/qjIAAAAEBCAoANZX7RwYs8AEBBRLe9aKj3vWoD971l8ve9Z03","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":72,"pkt":"RQAASMOyQABABn8jwKi0ArL40DbC2QBQ64tGkd71kl\/QEC\/qhxQAAAEBCAoANZX7RwYs8AEBBRLe9aKj3vWte971l8ve9Z03","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMOzQABABn8qwKi0ArL40DbC2QBQ64tGkd71nTewEC\/Bjz8AAAEBCAoANZYCRwYtDgEBBQre9aKj3vWtew==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":72,"pkt":"RQAASMO0QABABn8hwKi0ArL40DbC2QBQ64tGkd71nTfQEC\/BW7gAAAEBCAoANZYCRwYtDgEBBRLe9agP3vWte971oqPe9a17","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMO1QABABn8owKi0ArL40DbC2QBQ64tGkd71nTewEC\/BidMAAAEBCAoANZYCRwYtDgEBBQre9aKj3vWy5w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMO2QABABn8nwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BhGIAAAEBCAoANZYHRwYtDgEBBQre9aKj3vW4Uw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMO3QABABn8mwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BfvYAAAEBCAoANZYHRwYtDgEBBQre9aKj3vW9vw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMO4QABABn8lwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BeYkAAAEBCAoANZYIRwYtDgEBBQre9aKj3vXDKw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":64,"pkt":"RQAAQMO5QABABn8kwKi0ArL40DbC2QBQ64tGkd71nTewEC\/BdBcAAAEBCAoANZYORwYtDgEBBQre9aKj3vXIlw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":72,"pkt":"RQAASMO6QABABn8bwKi0ArL40DbC2QBQ64tGkd71nTfQEC\/B6cgAAAEBCAoANZYVRwYtDgEBBRLe9dNv3vXY2971oqPe9ciX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652836,"pkt_len":72,"pkt":"RQAASMO7QABABn8awKi0ArL40DbC2QBQ64tGkd71nTfQEC\/B5FIAAAEBCAoANZYfRwYtDgEBBRLe9dNv3vXeR971oqPe9ciX","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652837,"pkt_len":64,"pkt":"RQAAQMO8QABABn8hwKi0ArL40DbC2QBQ64tGkd71yJewEC9CAZMAAAEBCAoANZZdRwYt5gEBBQre9dNv3vXeRw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652837,"pkt_len":64,"pkt":"RQAAQMO9QABABn8gwKi0ArL40DbC2QBQ64tGkd71yJewEC+B++QAAAEBCAoANZZgRwYt5gEBBQre9dNv3vXjsw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652837,"pkt_len":64,"pkt":"RQAAQMO+QABABn8fwKi0ArL40DbC2QBQ64tGkd71yJewEC+B9ncAAAEBCAoANZZhRwYt5gEBBQre9dNv3vXpHw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652837,"pkt_len":64,"pkt":"RQAAQMO\/QABABn8ewKi0ArL40DbC2QBQ64tGkd71zgOwEC+s8LMAAAEBCAoANZZoRwYuDAEBBQre9dNv3vXpHw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652837,"pkt_len":64,"pkt":"RQAAQMPAQABABn8dwKi0ArL40DbC2QBQ64tGkd71zgOwEC+s60YAAAEBCAoANZZpRwYuDAEBBQre9dNv3vXuiw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":52,"pkt":"RQAANMPBQABABn8owKi0ArL40DbC2QBQ64tGkd717ouAEC+Xf5MAAAEBCAoANZbERwYu8A==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":64,"pkt":"RQAAQMPCQABABn8bwKi0ArL40DbC2QBQ64tGkd717ouwEC\/qkwQAAAEBCAoANZbJRwYu8AEBBQre9flj3vX+zw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":64,"pkt":"RQAAQMPDQABABn8awKi0ArL40DbC2QBQ64tGkd717ouwEC\/qjZgAAAEBCAoANZbJRwYu8AEBBQre9flj3vYEOw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":64,"pkt":"RQAAQMPEQABABn8ZwKi0ArL40DbC2QBQ64tGkd717ouwEC\/qkvwAAAEBCAoANZbRRwYu8AEBBQre9fP33vYEOw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":52,"pkt":"RQAANMPFQABABn8kwKi0ArL40DbC2QBQ64tGkd72BDuAEC\/BaR4AAAEBCAoANZb3RwYvWA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":52,"pkt":"RQAANMPGQABABn8jwKi0ArL40DbC2QBQ64tGkd72CaeAEC\/qY0QAAAEBCAoANZcARwYvlA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":52,"pkt":"RQAANMPHQABABn8iwKi0ArL40DbC2QBQ64tGkd72DxOAEC\/qXdgAAAEBCAoANZcARwYvlA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652838,"pkt_len":52,"pkt":"RQAANMPIQABABn8hwKi0ArL40DbC2QBQ64tGkd72FH+AEC\/qWE4AAAEBCAoANZcLRwYvpw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652839,"pkt_len":52,"pkt":"RQAANMPJQABABn8gwKi0ArL40DbC2QBQ64tGkd72FkyAES\/qVfQAAAEBCAoANZc1RwYwCQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0324{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":56,"pkt":"RQAAOJhyQABAER2IwKi0AggICAhetQA1ACRtrFcaAQAAAQAAAAAAAAN3d3cDb2NzAmZyAAABAAE=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0328{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":60,"pkt":"RQAAPD8ZQABABgMtwKi0ArL40NKmXgBQrzCnYwAAAACgAjkIgJAAAAIEBbQEAggKADWYegAAAAABAwMG","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":52,"pkt":"RQAAND8aQABABgM0wKi0ArL40NKmXgBQrzCnZDkypeeAEADlhQYAAAEBCAoANZiCGkFpBQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":204,"pkt":"RQAAzD8bQABABgKbwKi0ArL40NKmXgBQrzCnZDkypeeAGADlkB4AAAEBCAoANZiCGkFpBUdFVCAvZGF0YV9wbGF0ZWZvcm1lL3Byb2dyYW0vMTg0OTYvdHZfZGV0YWlsX21vcnRkdW5wb3VydzAwMTIyMzZfNzJmNmMuanBnIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCkhvc3Q6IHd3dy5vY3MuZnINCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCg0K","pkt_caplen":204,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":52,"pkt":"RQAAND8cQABABgMywKi0ArL40NKmXgBQrzCn\/Dkyq1OAEAESfskAAAEBCAoANZiIGkFpCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":52,"pkt":"RQAAND8dQABABgMxwKi0ArL40NKmXgBQrzCn\/DkysL+AEAE\/eTAAAAEBCAoANZiIGkFpCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":52,"pkt":"RQAAND8eQABABgMwwKi0ArL40NKmXgBQrzCn\/DkytiuAEAFsc5cAAAEBCAoANZiIGkFpCw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":52,"pkt":"RQAAND8fQABABgMvwKi0ArL40NKmXgBQrzCn\/Dkyu5eAEAGabfMAAAEBCAoANZiOGkFpDw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":52,"pkt":"RQAAND8gQABABgMuwKi0ArL40NKmXgBQrzCn\/DkywQOAEAHHaFoAAAEBCAoANZiOGkFpDw==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":64,"pkt":"RQAAQD8hQABABgMhwKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHLZMAAAEBCAoANZiOGkFpDwEBBQo5MsZvOTLL2w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":64,"pkt":"RQAAQD8iQABABgMgwKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHKCYAAAEBCAoANZiPGkFpDwEBBQo5MsZvOTLRRw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":64,"pkt":"RQAAQD8jQABABgMfwKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHIrQAAAEBCAoANZiVGkFpDwEBBQo5MsZvOTLWsw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":64,"pkt":"RQAAQD8kQABABgMewKi0ArL40NKmXgBQrzCn\/DkywQOwEAHHHUgAAAEBCAoANZiVGkFpDwEBBQo5MsZvOTLcHw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":72,"pkt":"RQAASD8lQABABgMVwKi0ArL40NKmXgBQrzCn\/DkywQPQEAHHrJ4AAAEBCAoANZiWGkFpDwEBBRI5MuxjOTLxzzkyxm85Mtwf","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":64,"pkt":"RQAAQD8mQABABgMcwKi0ArL40NKmXgBQrzCn\/Dky3B+wEAH0xkQAAAEBCAoANZieGkFpHAEBBQo5MuxjOTLxzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652842,"pkt_len":64,"pkt":"RQAAQD8nQABABgMbwKi0ArL40NKmXgBQrzCn\/Dky4YuwEAIhwKoAAAEBCAoANZieGkFpHQEBBQo5MuxjOTLxzw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD8oQABABgMSwKi0ArL40NKmXgBQrzCn\/Dky4YvQEAIhOkwAAAEBCAoANZikGkFpHQEBBRI5Mvc7OTL8pzky7GM5MvHP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD8pQABABgMRwKi0ArL40NKmXgBQrzCn\/Dky4YvQEAIhNOAAAAEBCAoANZikGkFpHQEBBRI5Mvc7OTMCEzky7GM5MvHP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD8qQABABgMQwKi0ArL40NKmXgBQrzCn\/Dky5vfQEAJPLzEAAAEBCAoANZirGkFpKwEBBRI5Mvc7OTMCEzky7GM5MvHP","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD8rQABABgMXwKi0ArL40NKmXgBQrzCn\/Dky8c+wEAJ8lNQAAAEBCAoANZirGkFpKwEBBQo5Mvc7OTMCEw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD8sQABABgMWwKi0ArL40NKmXgBQrzCn\/Dky8c+wEAJ8j2EAAAEBCAoANZiyGkFpKwEBBQo5Mvc7OTMHfw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD8tQABABgMVwKi0ArL40NKmXgBQrzCn\/Dky8c+wEAJ8ifMAAAEBCAoANZi0GkFpKwEBBQo5Mvc7OTMM6w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND8uQABABgMgwKi0ArL40NKmXgBQrzCn\/DkzDOuAEAKpGzgAAAEBCAoANZi4GkFpPQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND8vQABABgMfwKi0ArL40NKmXgBQrzCn\/DkzEleAEALWFZkAAAEBCAoANZi7GkFpQA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND8wQABABgMewKi0ArL40NKmXgBQrzCn\/DkzF8OAEAMED\/YAAAEBCAoANZjCGkFpQg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND8xQABABgMdwKi0ArL40NKmXgBQrzCn\/DkzHS+AEAMxCl0AAAEBCAoANZjCGkFpQg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND8yQABABgMcwKi0ArL40NKmXgBQrzCn\/DkzIpuAEANeBLgAAAEBCAoANZjHGkFpSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND8zQABABgMbwKi0ArL40NKmXgBQrzCn\/DkzKAeAEAOL\/x4AAAEBCAoANZjHGkFpSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND80QABABgMawKi0ArL40NKmXgBQrzCn\/DkzLXOAEAO5+YQAAAEBCAoANZjHGkFpSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND81QABABgMZwKi0ArL40NKmXgBQrzCn\/DkzMt+AEAPm8+sAAAEBCAoANZjHGkFpSQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":52,"pkt":"RQAAND82QABABgMYwKi0ArL40NKmXgBQrzCn\/DkzOEuAEAQT7kUAAAEBCAoANZjPGkFpTg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD83QABABgMLwKi0ArL40NKmXgBQrzCn\/DkzOEuwEAQTxO0AAAEBCAoANZjPGkFpTgEBBQo5Mz23OTNDIw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD84QABABgMCwKi0ArL40NKmXgBQrzCn\/DkzOEvQEAQTm+wAAAEBCAoANZjPGkFpTgEBBRI5M0iPOTNN+zkzPbc5M0Mj","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0358{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":80,"pkt":"RQAAUD85QABABgL5wKi0ArL40NKmXgBQrzCn\/DkzOEvwEAQTR4QAAAEBCAoANZjWGkFpTgEBBRo5M14\/OTNjqzkzSI85M037OTM9tzkzQyM=","pkt_caplen":80,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD86QABABgMAwKi0ArL40NKmXgBQrzCn\/DkzOEvQEAQTZaYAAAEBCAoANZjdGkFpTgEBBRI5Mz23OTNN+zkzXj85M2Or","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD87QABABgL\/wKi0ArL40NKmXgBQrzCn\/DkzOEvQEAQTYDEAAAEBCAoANZjmGkFpTgEBBRI5Mz23OTNTZzkzXj85M2Or","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0338{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD88QABABgMGwKi0ArL40NKmXgBQrzCn\/DkzU2ewEARAaFIAAAEBCAoANZjvGkFpcAEBBQo5M14\/OTNjqw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD89QABABgL9wKi0ArL40NKmXgBQrzCn\/DkzU2fQEARA\/joAAAEBCAoANZj1GkFpcAEBBRI5M2kXOTNugzkzXj85M2Or","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD8+QABABgL8wKi0ArL40NKmXgBQrzCn\/DkzU2fQEARA+M4AAAEBCAoANZj1GkFpcAEBBRI5M2kXOTNz7zkzXj85M2Or","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":72,"pkt":"RQAASD8\/QABABgL7wKi0ArL40NKmXgBQrzCn\/DkzWNPQEARu8yAAAAEBCAoANZj9GkFpfAEBBRI5M2kXOTNz7zkzXj85M2Or","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD9AQABABgMCwKi0ArL40NKmXgBQrzCn\/DkzY6uwEASbPH0AAAEBCAoANZj9GkFpfAEBBQo5M2kXOTNz7w==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD9BQABABgMBwKi0ArL40NKmXgBQrzCn\/DkzY6uwEASbNwsAAAEBCAoANZkDGkFpfAEBBQo5M2kXOTN5Ww==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652843,"pkt_len":64,"pkt":"RQAAQD9CQABABgMAwKi0ArL40NKmXgBQrzCn\/DkzY6uwEASbMZ8AAAEBCAoANZkDGkFpfAEBBQo5M2kXOTN+xw==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9DQABABgL3wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbhncAAAEBCAoANZkJGkFpfAEBBRI5M4mfOTOPCzkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9EQABABgL2wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbgQoAAAEBCAoANZkKGkFpfAEBBRI5M4mfOTOUdzkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9FQABABgL1wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbe5sAAAEBCAoANZkNGkFpfAEBBRI5M4mfOTOZ4zkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9GQABABgL0wKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbdi4AAAEBCAoANZkOGkFpfAEBBRI5M4mfOTOfTzkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9HQABABgLzwKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbcL8AAAEBCAoANZkRGkFpfAEBBRI5M4mfOTOkuzkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9IQABABgLywKi0ArL40NKmXgBQrzCn\/DkzY6vQEASba1AAAAEBCAoANZkUGkFpfAEBBRI5M4mfOTOqJzkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":72,"pkt":"RQAASD9JQABABgLxwKi0ArL40NKmXgBQrzCn\/DkzY6vQEASbaZcAAAEBCAoANZkYGkFpfAEBBRI5M4mfOTOr3DkzaRc5M37H","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9KQABABgL4wKi0ArL40NKmXgBQrzCn\/DkzfsewEATIyH4AAAEBCAoANZkbGkFpngEBBQo5M4mfOTOr3A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9LQABABgL3wKi0ArL40NKmXgBQrzCn\/DkzhDOwEAT1wtwAAAEBCAoANZkfGkFpowEBBQo5M4mfOTOr3A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9MQABABgMCwKi0ArL40NKmXgBQrzCn\/Dkzq9yAEAUjeP8AAAEBCAoANZkfGkFpow==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0531{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":208,"pkt":"RQAA0D9NQABABgJlwKi0ArL40NKmXgBQrzCn\/Dkzq9yAGAUj5DYAAAEBCAoANZklGkFpo0dFVCAvZGF0YV9wbGF0ZWZvcm1lL3Byb2dyYW0vMjQ2MzgvdHZfZGV0YWlsX2FmdGVyZWFydGh4dzAwNzk2MTVfY3NuX2I0MDljLmpwZyBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpIb3N0OiB3d3cub2NzLmZyDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQoNCg==","pkt_caplen":208,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9OQABABgMAwKi0ArL40NKmXgBQrzComDkzsUiAEAVQcrYAAAEBCAoANZkpGkFprQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9PQABABgL\/wKi0ArL40NKmXgBQrzComDkztrSAEAV9bR0AAAEBCAoANZkpGkFprQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9QQABABgL+wKi0ArL40NKmXgBQrzComDkzvCCAEAWqZ4QAAAEBCAoANZkpGkFprQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9RQABABgL9wKi0ArL40NKmXgBQrzComDkzwYyAEAXYYeQAAAEBCAoANZksGkFpsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9SQABABgL8wKi0ArL40NKmXgBQrzComDkzxviAEAYFXEoAAAEBCAoANZktGkFpsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9TQABABgL7wKi0ArL40NKmXgBQrzComDkzzGSAEAYyVrEAAAEBCAoANZktGkFpsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9UQABABgL6wKi0ArL40NKmXgBQrzComDkz0dCAEAZfURgAAAEBCAoANZktGkFpsA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":52,"pkt":"RQAAND9VQABABgL5wKi0ArL40NKmXgBQrzComDkz1zyAEAaNS0QAAAEBCAoANZlLGkFpzA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9WQABABgLswKi0ArL40NKmXgBQrzComDkz1zywEAaNzlAAAAEBCAoANZlTGkFpzAEBBQo5M+eAOTPs7A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9XQABABgLrwKi0ArL40NKmXgBQrzComDkz3KiwEAa6yKIAAAEBCAoANZlaGkFp2gEBBQo5M+eAOTPs7A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9YQABABgLqwKi0ArL40NKmXgBQrzComDkz4hSwEAbnwwkAAAEBCAoANZlaGkFp2gEBBQo5M+eAOTPs7A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9ZQABABgLpwKi0ArL40NKmXgBQrzComDkz4hSwEAbnvZgAAAEBCAoANZlfGkFp2gEBBQo5M+eAOTPyWA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9aQABABgLowKi0ArL40NKmXgBQrzComDkz4hSwEAbnuCwAAAEBCAoANZlfGkFp2gEBBQo5M+eAOTP3xA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652844,"pkt_len":64,"pkt":"RQAAQD9bQABABgLnwKi0ArL40NKmXgBQrzComDkz4hSwEAbnsrwAAAEBCAoANZljGkFp2gEBBQo5M+eAOTP9MA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":72,"pkt":"RQAASD9cQABABgLewKi0ArL40NKmXgBQrzComDkz4hTQEAbnFZkAAAEBCAoANZlqGkFp2gEBBRI5NAKcOTQICDkz54A5M\/0w","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":72,"pkt":"RQAASD9dQABABgLdwKi0ArL40NKmXgBQrzComDkz4hTQEAbnECYAAAEBCAoANZlxGkFp2gEBBRI5NAKcOTQNdDkz54A5M\/0w","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0345{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":72,"pkt":"RQAASD9eQABABgLcwKi0ArL40NKmXgBQrzComDkz4hTQEAbnCrYAAAEBCAoANZl1GkFp2gEBBRI5NAKcOTQS4Dkz54A5M\/0w","pkt_caplen":72,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":64,"pkt":"RQAAQD9fQABABgLjwKi0ArL40NKmXgBQrzComDkz\/TCwEAcUZnEAAAEBCAoANZl4GkFp+wEBBQo5NAKcOTQS4A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":52,"pkt":"RQAAND9gQABABgLuwKi0ArL40NKmXgBQrzComDk0EuCAEAdCDocAAAEBCAoANZl7GkFqAA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":64,"pkt":"RQAAQD9hQABABgLhwKi0ArL40NKmXgBQrzComDk0EuCwEAdCL\/oAAAEBCAoANZmEGkFqAAEBBQo5NBhMOTQduA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":64,"pkt":"RQAAQD9iQABABgLgwKi0ArL40NKmXgBQrzComDk0EuCwEAdCKo4AAAEBCAoANZmEGkFqAAEBBQo5NBhMOTQjJA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":64,"pkt":"RQAAQD9jQABABgLfwKi0ArL40NKmXgBQrzComDk0EuCwEAdCJR8AAAEBCAoANZmHGkFqAAEBBQo5NBhMOTQokA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0337{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":64,"pkt":"RQAAQD9kQABABgLewKi0ArL40NKmXgBQrzComDk0EuCwEAdCH7MAAAEBCAoANZmHGkFqAAEBBQo5NBhMOTQt\/A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":52,"pkt":"RQAAND9lQABABgLpwKi0ArL40NKmXgBQrzComDk0LfyAEAdv8yAAAAEBCAoANZmKGkFqDg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":52,"pkt":"RQAAND9mQABABgLowKi0ArL40NKmXgBQrzComDk0M2iAEAec7YcAAAEBCAoANZmKGkFqDg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":52,"pkt":"RQAAND9nQABABgLnwKi0ArL40NKmXgBQrzComDk0ONSAEAfJ5+QAAAEBCAoANZmRGkFqEQ==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652845,"pkt_len":52,"pkt":"RQAAND9oQABABgLmwKi0ArL40NKmXgBQrzComDk0PkCAEAf34kkAAAEBCAoANZmRGkFqEg==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0320{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652846,"pkt_len":52,"pkt":"RQAAND9pQABABgLlwKi0ArL40NKmXgBQrzComDk0Q6yAEAgk3AIAAAEBCAoANZntGkFqZA==","pkt_caplen":52,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652846,"pkt_len":64,"pkt":"RQAAQD9qQABABgLYwKi0ArL40NKmXgBQrzComDk0Q6ywEAgkkQkAAAEBCAoANZnyGkFqZAEBBQo5NE6EOTRT8A==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0336{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","pkt_oversize":false,"pkt_ts":1449652846,"pkt_len":64,"pkt":"RQAAQD9rQABABgLXwKi0ArL40NKmXgBQrzComDk0Q6ywEAgki50AAAEBCAoANZnyGkFqZAEBBQo5NE6EOTRZXA==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0174{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap","datalink":12}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ocs.pcap"}
diff --git a/tests/result/nDPId_ookla.pcap.txt b/tests/result/nDPId_ookla.pcap.txt
new file mode 100644
index 000000000..2719db3c4
--- /dev/null
+++ b/tests/result/nDPId_ookla.pcap.txt
@@ -0,0 +1,38 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1491069108756,"flow_last_seen":1491069108756,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51207,"dst_port":80,"l4_proto":"tcp"}
+0412{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":78,"pkt":"gCqojWksxCwDBkn+CABFAABAClpAAEAGAADAqAEHLiz9u8gHAFAHQx4AAAAAALAC\/\/\/tyQAAAgQFtAEDAwUBAQgKDd4HoAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":74,"pkt":"xCwDBkn+gCqojWksCABFAAA8AABAADMGWiUuLP27wKgBBwBQyAdRUNK1B0MeAaASOJAJ5wAAAgQFrAQCCAp\/4XDqDd4HoAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA0s5FAAEAGAADAqAEHLiz9u8gHAFAHQx4BUVDStoAQECztvQAAAQEICg3eB8R\/4XDq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0852{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":408,"pkt":"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","pkt_caplen":408,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1491069108756,"flow_last_seen":1491069108794,"flow_tot_l4_data_len":490,"flow_min_l4_data_len":32,"flow_max_l4_data_len":374,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Ookla","category":"Network"},"http": {}}
+0394{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":66,"pkt":"xCwDBkn+gCqojWksCABFAAA0okFAADMGt+suLP27wKgBBwBQyAdRUNK2B0MfV4AQAeZtzAAAAQEICn\/hcPcN3gfE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1008{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":523,"pkt":"xCwDBkn+gCqojWksCABFAAH9okJAADMGtiEuLP27wKgBBwBQyAdRUNK2B0MfV4AYAeaLBgAAAQEICn\/hcPcN3gfESFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBTYXQsIDAxIEFwciAyMDE3IDE3OjUxOjA4IEdNVA0KU2VydmVyOiBBcGFjaGUvMi4yLjIyIChVYnVudHUpDQpMYXN0LU1vZGlmaWVkOiBTYXQsIDAxIFNlcCAyMDA3IDE3OjM2OjAyIEdNVA0KRVRhZzogIjYzNjdhLWExLTQzOTE2NWY4ZDQ0ODAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1MZW5ndGg6IDE2MQ0KS2VlcC1BbGl2ZTogdGltZW91dD01LCBtYXg9MTAwDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3htbA0KDQo8P3htbCB2ZXJzaW9uPSIxLjAiPz4KPGNyb3NzLWRvbWFpbi1wb2xpY3k+CiAgPGFsbG93LWFjY2Vzcy1mcm9tIGRvbWFpbj0iKi5vb2tsYS5jb20iIC8+CiAgPGFsbG93LWFjY2Vzcy1mcm9tIGRvbWFpbj0iKi5zcGVlZHRlc3QubmV0IiAvPgo8L2Nyb3NzLWRvbWFpbi1wb2xpY3k+Cg==","pkt_caplen":523,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA0AntAAEAGAADAqAEHLiz9u8gHAFAHQx9XUVDUf4AQEB3tvQAAAQEICg3eCBF\/4XD3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0885{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0881{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":429,"pkt":"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","pkt_caplen":429,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA0Bx1AAEAGAADAqAEHLiz9u8gHAFAHQyDDUVDV6oAQEBLtvQAAAQEICg3eCDx\/4XEL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0887{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":429,"pkt":"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","pkt_caplen":429,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069108,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA0UV9AAEAGAADAqAEHLiz9u8gHAFAHQyIvUVDXVYAQEAftvQAAAQEICg3eCGx\/4XEY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0887{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069109,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0882{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069109,"pkt_len":429,"pkt":"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","pkt_caplen":429,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1491069115107,"flow_last_seen":1491069115107,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51215,"dst_port":8080,"l4_proto":"tcp"}
+0413{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":78,"pkt":"gCqojWksxCwDBkn+CABFAABAzJ5AAEAGAADAqAEHLiz9u8gPH5CtI6zKAAAAALAC\/\/\/tyQAAAgQFtAEDAwUBAQgKDd4f9gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1491069115107,"flow_last_seen":1491069115107,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51215,"dst_port":8080,"l4_proto":"tcp","ndpi": {"proto":"Ookla","category":"Network"}}
+0407{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":74,"pkt":"xCwDBkn+gCqojWksCABFAAA8AABAADMGWiUuLP27wKgBBx+QyA8qkdUorSOsy6ASOJC7tQAAAgQFrAQCCAp\/4XceDd4f9gEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA0VElAAEAGAADAqAEHLiz9u8gPH5CtI6zLKpHVKYAQECztvQAAAQEICg3eIBp\/4Xce","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":69,"pkt":"gCqojWksxCwDBkn+CABFAAA3225AAEAGAADAqAEHLiz9u8gPH5CtI6zLKpHVKYAYECztwAAAAQEICg3eIDZ\/4XceSEkK","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":66,"pkt":"xCwDBkn+gCqojWksCABFAAA0og9AADMGuB0uLP27wKgBBx+QyA8qkdUprSOszoAQAcUg8AAAAQEICn\/hdy4N3iA2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":100,"pkt":"xCwDBkn+gCqojWksCABFAABWohBAADMGt\/ouLP27wKgBBx+QyA8qkdUprSOszoAYAcVNWwAAAQEICn\/hdy4N3iA2SEVMTE8gMi40IDIwMTYtMTAtMDYuMTMyNC45OTZhYjkxCg==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA02dFAAEAGAADAqAEHLiz9u8gPH5CtI6zOKpHVS4AQECrtvQAAAQEICg3eIFp\/4Xcu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":85,"pkt":"gCqojWksxCwDBkn+CABFAABHGIVAAEAGAADAqAEHLiz9u8gPH5CtI6zOKpHVS4AYECrt0AAAAQEICg3eIH9\/4XcuUElORyAxNDkxMDY5MTE1MjQ2Cg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":85,"pkt":"xCwDBkn+gCqojWksCABFAABHohFAADMGuAguLP27wKgBBx+QyA8qkdVLrSOs4YAYAcUkPAAAAQEICn\/hd0AN3iB\/UE9ORyAxNDkxMDY5MDc1MDI3Cg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA04q5AAEAGAADAqAEHLiz9u8gPH5CtI6zhKpHVXoAQECrtvQAAAQEICg3eIKF\/4XdA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":85,"pkt":"gCqojWksxCwDBkn+CABFAABHsWZAAEAGAADAqAEHLiz9u8gPH5CtI6zhKpHVXoAYECrt0AAAAQEICg3eILt\/4XdAUElORyAxNDkxMDY5MTE1MzA4Cg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":85,"pkt":"xCwDBkn+gCqojWksCABFAABHohJAADMGuAcuLP27wKgBBx+QyA8qkdVerSOs9IAYAcUdyQAAAQEICn\/hd08N3iC7UE9ORyAxNDkxMDY5MDc1MDg5Cg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":66,"pkt":"gCqojWksxCwDBkn+CABFAAA05IBAAEAGAADAqAEHLiz9u8gPH5CtI6z0KpHVcYAQECntvQAAAQEICg3eIN5\/4XdP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":85,"pkt":"gCqojWksxCwDBkn+CABFAABHO+BAAEAGAADAqAEHLiz9u8gPH5CtI6z0KpHVcYAYECnt0AAAAQEICg3eIT5\/4XdPUElORyAxNDkxMDY5MTE1NDQwCg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","pkt_oversize":false,"pkt_ts":1491069115,"pkt_len":85,"pkt":"xCwDBkn+gCqojWksCABFAABHohNAADMGuAYuLP27wKgBBx+QyA8qkdVxrSOtB4AYAcUjAwAAAQEICn\/hd3EN3iE+UE9ORyAxNDkxMDY5MDc1MjIyCg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","flow_id":1,"flow_packet_id":5066,"flow_first_seen":1491069115107,"flow_last_seen":1491069155251,"flow_tot_l4_data_len":4513181,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":890,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51215,"dst_port":8080,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":5086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1491069108756,"flow_last_seen":1491069114084,"flow_tot_l4_data_len":3640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":489,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"46.44.253.187","src_port":51207,"dst_port":80,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":5086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ookla.pcap"}
diff --git a/tests/result/nDPId_openvpn.pcap.txt b/tests/result/nDPId_openvpn.pcap.txt
new file mode 100644
index 000000000..63d619839
--- /dev/null
+++ b/tests/result/nDPId_openvpn.pcap.txt
@@ -0,0 +1,56 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1467904946700,"flow_last_seen":1467904946700,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"46.101.231.218","src_port":60140,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904946,"pkt_len":74,"pkt":"hCYVLjtSAA6OGXEMCABFAAA8ANVAAEAGYbLAqAFNLmXn2ursAbu+lXueAAAAAKACchBbjAAAAgQFtAQCCAoADXtLAAAAAAEDAwE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904946,"pkt_len":74,"pkt":"AA6OGXEMhCYVLjtSCABFoAA8AABAADQGbecuZefawKgBTQG76uxsxVWWvpV7n6AScSBx2QAAAgQFtAQCCAoANCgCAA17SwEDAwE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904946,"pkt_len":66,"pkt":"hCYVLjtSAA6OGXEMCABFAAA0ANZAAEAGYbnAqAFNLmXn2ursAbu+lXufbMVVl4AQOQjYsgAAAQEICgANe1AANCgC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":110,"pkt":"hCYVLjtSAA6OGXEMCABFAABgANdAAEAGYYzAqAFNLmXn2ursAbu+lXufbMVVl4AYOQicxwAAAQEICgANe68ANCgCACo4krivSnd\/x0J4ECTCdtmhqMIyGHmgImSzzLyAdwAAAAFXfnOzAAAAAAA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":66,"pkt":"AA6OGXEMhCYVLjtSCABFoAA0fZtAADQG8FMuZefawKgBTQG76uxsxVWXvpV7y4AQOJDXpgAAAQEICgA0KPsADXuv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":122,"pkt":"AA6OGXEMhCYVLjtSCABFoABsfZxAADQG8BouZefawKgBTQG76uxsxVWXvpV7y4AYOJArBwAAAQEICgA0KPsADXuvADZA2RbEhgyx2M+jc8\/WYxWfwCU7Upc7GJ9\/bLnfiwAAAAFXfnN9AQAAAACSuK9Kd3\/HQgAAAAA=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1467904946700,"flow_last_seen":1467904947753,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":32,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"46.101.231.218","src_port":60140,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"OpenVPN","category":"VPN"}}
+0395{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":66,"pkt":"hCYVLjtSAA6OGXEMCABFAAA0ANhAAEAGYbfAqAFNLmXn2ursAbu+lXvLbMVVz4AQOQjW8QAAAQEICgANe7QANCj7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":118,"pkt":"hCYVLjtSAA6OGXEMCABFAABoANlAAEAGYYLAqAFNLmXn2ursAbu+lXvLbMVVz4AYOQiyyQAAAQEICgANe7QANCj7ADIokrivSnd\/x0Iouku0o2HkwsWPIfcrIPU7eEbRwgAAAAJXfnOzAQAAAADZFsSGDLHYzw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":66,"pkt":"AA6OGXEMhCYVLjtSCABFoAA0fZ1AADQG8FEuZefawKgBTQG76uxsxVXPvpV7\/4AQOJDXIQAAAQEICgA0KQ8ADXu0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":371,"pkt":"hCYVLjtSAA6OGXEMCABFAAFlANpAAEAGYITAqAFNLmXn2ursAbu+lXv\/bMVVz4AYOQg7hQAAAQEICgANe7wANCkPAS8gkrivSnd\/x0LAXs9fORwHnNBm3BIWsy9PoaXcBAAAAANXfnOzAAAAAAEWAwEBAAEAAPwDA0IIecF+XjVaB5L\/7UNMC6jeab+Ay8pPndKUUlmAtDmJAACCwDDALMAowCTAFMAKAKUAowChAJ8AawBqAGkAaAA5ADgANwA2AIgAhwCGAIXAMsAuwCrAJsAPwAXAL8ArwCfAI8ATwAkApACiAKAAngBnAEAAPwA+ADMAMgAxADAARQBEAEMAQsAxwC3AKcAlwA7ABMASwAgAFgATABAADcANwAMA\/wEAAFEACwAEAwABAgAKABwAGgAXABkAHAAbABgAGgAWAA4ADQALAAwACQAKAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQE=","pkt_caplen":371,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":66,"pkt":"AA6OGXEMhCYVLjtSCABFoAA0fZ5AADQG8FAuZefawKgBTQG76uxsxVXPvpV9MIAQOqjTxgAAAQEICgA0KRkADXu8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":222,"pkt":"AA6OGXEMhCYVLjtSCABFoADQfZ9AADQG77MuZefawKgBTQG76uxsxVXPvpV9MIAYOqiJfwAAAQEICgA0KRoADXu8AJog2RbEhgyx2M+4THL22ajxu9H77yrCRMEHcpM3TwAAAAJXfnN9AQAAAAGSuK9Kd3\/HQgAAAAEWAwEAPgIAADoDAdsv5BfDEKASPdIXpnXLJkucn1XzAVpbrB0OAzb1N7EuAMAUAAAS\/wEAAQAACwAEAwABAgAPAAEBFgMBBZYLAAWSAAWPAALNMIICyTCCAbGgAwIBAgIBATAN","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0591{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":210,"pkt":"AA6OGXEMhCYVLjtSCABFoADEfaBAADQG774uZefawKgBTQG76uxsxVZrvpV9MIAYOqj7QQAAAQEICgA0KRoADXu8AI4g2RbEhgyx2M9Mrzm02EMu2g85pVucEDsbpSzLdgAAAANXfnN9AAAAAAIGCSqGSIb3DQEBCwUAMBUxEzARBgNVBAMMCk9wZW5WUE4gQ0EwHhcNMTYwNjMwMDAyMTUwWhcNMjYwNzA1MDAyMTUwWjAZMRcwFQYDVQQDDA5PcGVuVlBOIFNlcnZlcjCCASIw","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":118,"pkt":"hCYVLjtSAA6OGXEMCABFAABoANtAAEAGYYDAqAFNLmXn2ursAbu+lX0wbMVW+4AYPTjldwAAAQEICgANe8AANCkaADIokrivSnd\/x0IgsSQoBwGaI6j9a4KhIGAHMQGGnAAAAARXfnOzAQAAAAHZFsSGDLHYzw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0593{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1467904947,"pkt_len":210,"pkt":"AA6OGXEMhCYVLjtSCABFoADEfaFAADQG770uZefawKgBTQG76uxsxVb7vpV9MIAYOqhk7QAAAQEICgA0KRoADXu8AI4g2RbEhgyx2M9AUI6Wwxd1JlWPcOIud6mUdCcDfgAAAARXfnN9AAAAAAMNBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59FXmiVGxqnFY02\/6j5Iuqep8iuESkrmw26aLH7qVdJtZT5NihgUqSE1V9mjILMaOWRApR1iiQo1\/QCpZk5AEA7upxWSjy88","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":0,"flow_packet_id":95,"flow_first_seen":1467904946700,"flow_last_seen":1467905010834,"flow_tot_l4_data_len":12150,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":127,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"46.101.231.218","src_port":60140,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1470218591746,"flow_last_seen":1470218591746,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.12","dst_ip":"139.59.151.137","src_port":41507,"dst_port":13680,"l4_proto":"udp"}
+0421{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218591,"pkt_len":84,"pkt":"mAyC0zx8AAjKQoXqCABFAABG3rhAAEARTXXAqCsMizuXiaIjNXAAMosJOLAsz\/G18BdPwJFmbjsSS62jkXMxe5OXItH+Y74AAAABV6HBXwAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218591,"pkt_len":96,"pkt":"AAjKQoXqmAyC0zx8CABFAABSYIhAADIR2ZmLO5eJwKgrDDVwoiMAPhWBQPd\/wu\/b4j9X3sTI1WVNByO\/jAvlQThWMnDPrhMAAAABV6HBXwEAAAAAsCzP8bXwF08AAAAA","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1470218591746,"flow_last_seen":1470218591941,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":50,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.12","dst_ip":"139.59.151.137","src_port":41507,"dst_port":13680,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","category":"VPN"}}
+0435{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218591,"pkt_len":92,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3uZAAEARTT\/AqCsMizuXiaIjNXAAOpZEKLAsz\/G18BdPyDdJemqNaU65YLasCHjnV9mH+DAAAAACV6HBXwEAAAAA93\/C79viP1c=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218591,"pkt_len":345,"pkt":"mAyC0zx8AAjKQoXqCABFAAFL3udAAEARTEHAqCsMizuXiaIjNXABN2YDILAsz\/G18BdPpXrCc4HfKvVooXdu\/RWr9x4wrZ0AAAADV6HBXwAAAAABFgMBAQABAAD8AwNE5fcPgzd79Sso6M19xG8bQl07yo41gslSLfJlFeywdgAAgsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAEUARABDAELAMcAtwCnAJcAOwATAEsAIABYAEwAQAA3ADcADAP8BAABRAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEB","pkt_caplen":345,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":196,"pkt":"AAjKQoXqmAyC0zx8CABFAAC2YKNAADIR2RqLO5eJwKgrDDVwoiMAohzKIPd\/wu\/b4j9X60eERHhjQN5zfeMCAdw3JKHt7ZoAAAACV6HBXwEAAAABsCzP8bXwF08AAAABFgMDAD4CAAA6AwNhg33pw8JOvroEJqnLpGmzYm+g0be9hVzmVAUEjVB5vQDAMAAAEv8BAAEAAAsABAMAAQIADwABARYDAwWWCwAFkgAFjwACzTCCAskwggGxoAMCAQICAQEwDQ==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":92,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vJAAEARTTPAqCsMizuXiaIjNXAAOm63KLAsz\/G18BdPWFv2Y+8tQ0p\/3eUMHRRYDB5\/KYgAAAAEV6HBXwEAAAAB93\/C79viP1c=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":184,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYKRAADIR2SWLO5eJwKgrDDVwoiMAlmNoIPd\/wu\/b4j9XXT+sHaw55y7jT7NqaDC3NTEl1hkAAAADV6HBXwAAAAACBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApPcGVuVlBOIENBMB4XDTE2MDcyNzA5MzE1OFoXDTI2MDgwMTA5MzE1OFowGTEXMBUGA1UEAwwOT3BlblZQTiBTZXJ2ZXIwggEiMA==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":92,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vNAAEARTTLAqCsMizuXiaIjNXAAOmAGKLAsz\/G18BdPzrT\/QvhtqKLQJ7nQahdxQTVnSZYAAAAFV6HBXwEAAAAC93\/C79viP1c=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":184,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYKVAADIR2SSLO5eJwKgrDDVwoiMAlvHuIPd\/wu\/b4j9XFRm9tcXQ8nD21YJvnC0q0080xdAAAAAEV6HBXwAAAAADDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJXS+hGEnAWA1fhvJ6HcpP9aGUCaiB5Xrn0LKMUwbe+iP05Z0kqzLD\/tJGeBLU2b1+gL3GmHVKonTrG\/siAnxhOhEqZbB8Qgw==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":92,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vRAAEARTTHAqCsMizuXiaIjNXAAOjclKLAsz\/G18BdPvHNP2TIA1KSkwwvoQ+sdnNfUNoUAAAAGV6HBXwEAAAAD93\/C79viP1c=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":184,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYKZAADIR2SOLO5eJwKgrDDVwoiMAlmZUIPd\/wu\/b4j9XUieFjG6lxMiNJh0lwTSRtQIYJU8AAAAFV6HBXwAAAAAEESnvtXTC2KmNMf52XQZMT\/ynVaoEa3I9\/AWZx+ZRVMtKTUukC\/HqCjZv+fi\/R5zCagjkN1yj2rlntWK9LJFrUykFCoazdmXISBIDNtA95B\/+ZHNhgqNRrWy2MUDB4ZUseXMEug==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":92,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3vVAAEARTTDAqCsMizuXiaIjNXAAOuiSKLAsz\/G18BdPwlmoUPvYWrId3hvYNMzVOVb4aOIAAAAHV6HBXwEAAAAE93\/C79viP1c=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":184,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYLZAADIR2ROLO5eJwKgrDDVwoiMAlpjJIPd\/wu\/b4j9XC3dhieGw0RzWky5v4Wjy6\/qrTDYAAAAGV6HBXwAAAAAFXs16Z1Oqb5\/NXvcN\/JPmFRsB9Qn433GGYzVrij\/603Hf3x8+jZjnDWISqi+KCm7yOhv+vC+HduaYS8lkNp0MRD+iOTf9JQGGMbbarVk+UP2lQsnNAgMBAAGjIDAeMAkGA1UdEw==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":92,"pkt":"mAyC0zx8AAjKQoXqCABFAABO3v9AAEARTSbAqCsMizuXiaIjNXAAOpGlKLAsz\/G18BdPwZjddyqbnUWZWrEYkLmgwYzKQXgAAAAIV6HBXwEAAAAF93\/C79viP1c=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1470218592,"pkt_len":184,"pkt":"AAjKQoXqmAyC0zx8CABFAACqYLhAADIR2RGLO5eJwKgrDDVwoiMAloyrIPd\/wu\/b4j9XkYG+PPKdRTEE9+qNgRx0WwLTdmQAAAAHV6HBXwAAAAAGBAIwADARBglghkgBhvhCAQEEBAMCBkAwDQYJKoZIhvcNAQELBQADggEBAEjL2n1a+cPIZy3KPNF1msl4ic8D7NZJrAa651IOzRpe23PdDgRUoD05pD38Ly6xZEM0MWrlQHd1WQ==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":1,"flow_packet_id":83,"flow_first_seen":1470218591746,"flow_last_seen":1470218600860,"flow_tot_l4_data_len":10737,"flow_min_l4_data_len":50,"flow_max_l4_data_len":1180,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.12","dst_ip":"139.59.151.137","src_port":41507,"dst_port":13680,"l4_proto":"udp"}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1472334890224,"flow_last_seen":1472334890224,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"139.59.151.137","src_port":13680,"dst_port":13680,"l4_proto":"udp"}
+0421{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334890,"pkt_len":84,"pkt":"mAyC0zx8MFLLbJwbCABFAABGe8pAAEARsF3AqCsSizuXiTVwNXAAMg7DOGYO4pqkkLBZfF5v2e87DGOeGNd7GPORrKCUl+wAAAABV8IMKgAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":84,"pkt":"mAyC0zx8MFLLbJwbCABFAABGfNNAAEARr1TAqCsSizuXiTVwNXAAMg7DOGYO4pqkkLBZptsOrY2Z8Me\/lrzRmp5vsU3x26QAAAACV8IMKgAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":96,"pkt":"MFLLbJwbmAyC0zx8CABFAABSgmRAADERuLeLO5eJwKgrEjVwNXAAPoh1QDWQheTdAi5E5ZNzw1yvtD56Ix7qRbnOSoCURYgAAAABV8IMLQEAAAAAZg7imqSQsFkAAAAA","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":2,"flow_packet_id":3,"flow_first_seen":1472334890224,"flow_last_seen":1472334892467,"flow_tot_l4_data_len":162,"flow_min_l4_data_len":50,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"139.59.151.137","src_port":13680,"dst_port":13680,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","category":"VPN"}}
+0434{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":92,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfN1AAEARr0LAqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZccsCgHbPMustlcqr4N4\/rNnPtukAAAADV8IMKgEAAAAANZCF5N0CLkQ=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":345,"pkt":"mAyC0zx8MFLLbJwbCABFAAFLfN5AAEARrkTAqCsSizuXiTVwNXABNw\/IIGYO4pqkkLBZmyjlNBaAxD3dZ4KkKKFzUtIqpCkAAAAEV8IMKgAAAAABFgMBAQABAAD8AwPWitxhdgXJqtNghCcqHLNlospc\/gDFPYmAVgJE80nHTgAAgsAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAEUARABDAELAMcAtwCnAJcAOwATAEsAIABYAEwAQAA3ADcADAP8BAABRAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEB","pkt_caplen":345,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":92,"pkt":"MFLLbJwbmAyC0zx8CABFAABOgnVAADERuKqLO5eJwKgrEjVwNXAAOufqKDWQheTdAi5ERcnhMU0OXaVp8mkudfeRDM6N9ckAAAACV8IMLQEAAAAAZg7imqSQsFk=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":196,"pkt":"MFLLbJwbmAyC0zx8CABFAAC2godAADERuDCLO5eJwKgrEjVwNXAAoqovIDWQheTdAi5E58YXesu1Rtkag1Jugy5ipV6CWKUAAAADV8IMLQEAAAABZg7imqSQsFkAAAABFgMDAD4CAAA6AwOMdrRPNMGuTPTkFd4pZQ3SA0NWhUdhH9mt3\/kUXYsSDQDAMAAAEv8BAAEAAAsABAMAAQIADwABARYDAwWWCwAFkgAFjwACzTCCAskwggGxoAMCAQICAQEwDQ==","pkt_caplen":196,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":92,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQFAAEARrx7AqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZGpm40vTvooG9M73jePAJtC0tqIoAAAAFV8IMKgEAAAABNZCF5N0CLkQ=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":184,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgohAADERuDuLO5eJwKgrEjVwNXAAli0QIDWQheTdAi5ErrUnNNiayfE7kPhRCAdznoHQefgAAAAEV8IMLQAAAAACBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDDApPcGVuVlBOIENBMB4XDTE2MDcyNzA5MzE1OFoXDTI2MDgwMTA5MzE1OFowGTEXMBUGA1UEAwwOT3BlblZQTiBTZXJ2ZXIwggEiMA==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":92,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQJAAEARrx3AqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZX4HmITAm7HcTcHVTEP+duCwQHb4AAAAGV8IMKgEAAAACNZCF5N0CLkQ=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":184,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgolAADERuDqLO5eJwKgrEjVwNXAAlghDIDWQheTdAi5EjPHVQnyFYQhev3dPdNekXizCoecAAAAFV8IMLQAAAAADDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJXS+hGEnAWA1fhvJ6HcpP9aGUCaiB5Xrn0LKMUwbe+iP05Z0kqzLD\/tJGeBLU2b1+gL3GmHVKonTrG\/siAnxhOhEqZbB8Qgw==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":92,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQNAAEARrxzAqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZN7jXdhjlfUnvfu4Q4rFXmiDjRmYAAAAHV8IMKgEAAAADNZCF5N0CLkQ=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":184,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgopAADERuDmLO5eJwKgrEjVwNXAAlrYaIDWQheTdAi5EsaMKlfbbtjLx3yiNPYco3f3t8tMAAAAGV8IMLQAAAAAEESnvtXTC2KmNMf52XQZMT\/ynVaoEa3I9\/AWZx+ZRVMtKTUukC\/HqCjZv+fi\/R5zCagjkN1yj2rlntWK9LJFrUykFCoazdmXISBIDNtA95B\/+ZHNhgqNRrWy2MUDB4ZUseXMEug==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":92,"pkt":"mAyC0zx8MFLLbJwbCABFAABOfQRAAEARrxvAqCsSizuXiTVwNXAAOg7LKGYO4pqkkLBZaAa3k0FcKmOJijbq3ehJRczebO8AAAAIV8IMKgEAAAAENZCF5N0CLkQ=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","pkt_oversize":false,"pkt_ts":1472334892,"pkt_len":184,"pkt":"MFLLbJwbmAyC0zx8CABFAACqgqFAADERuCKLO5eJwKgrEjVwNXAAloHZIDWQheTdAi5EGn+8Hpjn1EX+kGpde81XFbgwab0AAAAHV8IMLQAAAAAFXs16Z1Oqb5\/NXvcN\/JPmFRsB9Qn433GGYzVrij\/603Hf3x8+jZjnDWISqi+KCm7yOhv+vC+HduaYS8lkNp0MRD+iOTf9JQGGMbbarVk+UP2lQsnNAgMBAAGjIDAeMAkGA1UdEw==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap","flow_id":2,"flow_packet_id":120,"flow_first_seen":1472334890224,"flow_last_seen":1472334909465,"flow_tot_l4_data_len":24092,"flow_min_l4_data_len":50,"flow_max_l4_data_len":1253,"flow_avg_l4_data_len":200,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.18","dst_ip":"139.59.151.137","src_port":13680,"dst_port":13680,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/openvpn.pcap"}
diff --git a/tests/result/nDPId_pinterest.pcap.txt b/tests/result/nDPId_pinterest.pcap.txt
new file mode 100644
index 000000000..439c0c3de
--- /dev/null
+++ b/tests/result/nDPId_pinterest.pcap.txt
@@ -0,0 +1,494 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1605289710318,"flow_last_seen":1605289710318,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33164,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289710,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCMmjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUgYwBu9VDYL21LWgegBAB9TESAAABAQgKz6ojDMK4Yvg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289710,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuBjLUtaB7VQ2C+gBALgY8wAAABAQgKwrkTpM+oCrY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0501{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605289712203,"flow_last_seen":1605289712203,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:807::200a","src_port":40876,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289712,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAqhwACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBwAAAAAAACAKn6wBu\/7xm0eeabeVgBAB9aoLAAABAQgKp4B90cK4Zak=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289712,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgHAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbufrJ5pt5X+8ZtIgBAL8Z94AAABAQgKwrka9Kd\/yRw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605289713743,"flow_last_seen":1605289713743,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8QUAAAAAoAL9IIXGAAACBAWgBAIICs+qMG0AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDGd77q\/EGoBJXgJPPAAACBAV4AQMDAwQCCArCuSBXz6owbQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8QaawxnfgBAB+xfPAAABAQgKz6owf8K5IFc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1605289713743,"flow_last_seen":1605289713761,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0430{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDGd\/7q\/MLgBALMAxuAAABAQgKwrkgfs+qMH8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1839{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0890{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1605289713743,"flow_last_seen":1605289713802,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1830{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1835{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDIg\/7q\/MLgBgLMDGqAAABAQgKwrkggc+qMH8QcGludGVyZXN0LmNvbS5weYISKi5waW50ZXJlc3QuY29tLnB5ghBwaW50ZXJlc3QuY29tLmJvghIqLnBpbnRlcmVzdC5jb20uYm+CEHBpbnRlcmVzdC5jb20uZWOCEioucGludGVyZXN0LmNvbS5lY4IPcGludGVyZXN0LmNvLmlughIqLnBpbnRlcmVzdC5jb20ucGWCEioucGludGVyZXN0LmNvbS5teIIQcGludGVyZXN0LmNvbS52boISKi5waW50ZXJlc3QuY29tLnZughEqLnBpbnRlcmVzdC5jby51a4IRKi5waW50ZXJlc3QuY28ua3KCESoucGludGVyZXN0LmNvLmF0ghcqLnRlc3RpbmcucGludGVyZXN0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFzVeUsqgAABAMARjBEAiBFoq\/xobECVZhZtUc7btC5hoxWOSVrWyon0phReuJy2gIgZksLD3C3g5hs1uN\/fxJ3QdxWeMMC9CJJpCnRKnMCkEoAdQBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXNV5SzaAAAEAwBGMEQCIC4Ov3Wwcsdt6rpQua1N0NI2qcuhMuVxh7v+Q8LLaCfhAiAD5yJvjyGpUx+ANEDut9mpunmM1M1jNcZc4UDYCQKZPTANBgkqhkiG9w0BAQsFAAOCAQEAEaIVgCQWe7xTMHTnJi67o5Gk+JG6z2t79luhUhem28vSmRSty+B9mLbDXrK7kbGA53eU7cBTkq39mkoUUJnGH0E3QSZkxUg5YvcicFqgwA9YzkW8","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawx33gBAB9RFlAAABAQgKz6owqMK5IIE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawyIPgBAB8w1PAAABAQgKz6owqMK5IIE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawyYngBAB6wk\/AAABAQgKz6owqMK5IIE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1844{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1856{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDKj\/7q\/MLgBgLMPD7AAABAQgKwrkggc+qMH8WBBRRaP+QrwIHdTzM2WVkYqISuFlyOzAfBgNVHSMEGDAWgBSxPsNpA\/i\/RwHUmCYaCALvY2QrwzANBgkqhkiG9w0BAQsFAAOCAQEAGIqViQPmbd9c\/B1o6kqPg9ZRL41rRBaerGP10m5shJmLqoFxhFvtNE6wt3mSKcwtgGrwjiDheaT+A0cT6vWGyllxffQElmvTWVg9\/tMxJVwYOISj5p+C\/YxbmDFOzXieGv2Fy0mq8ieLmXL8PqrVQQva1TahvxxuR0l\/XtlIfAPZ\/YtJoJgmQkDr1pIRpGQKV1TE9R3WAl5rrO7EgJoScvpWk9f\/vzCFBjC\/C39O\/1cFnSTthcMr+6Z1qKwtFu99eSey68KdCwfqqoXTAaMgKEFZQyjSgeOq9ux7O3e2QGKABUFFAe8XBj7ewDObZ9NhLnKH5Gn8EgBXQB5w9R7JtBYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFFFo\/5CvAgd1PMzZZWRiohK4WXI7GA8yMDIwMTEwNzExNDQ1MlowczBxMEkwCQYFKw4DAhoFAAQUzyb1GPrJfo+Ms0LgHC9qEJ6OXwoEFFFo\/5CvAgd1PMzZZWRiohK4WXI7AhAEIQzFo4YzQYum6ENydBKbgAAYDzIwMjAxMTA3MTE0NDUyWqARGA8yMDIwMTExNDEwNTk1MlowDQYJKoZIhvcNAQELBQADggEBAIiYG59vb3kC7aO7aUEKdJQp5xDBWD2CQ3r7LrQsBmdscpkS2v4t1r5Rd+gr6XVjFoKpz0kuuyvjJStW5YPBHEfS2hEJOYYZRHUc2VBTkFJGDGOA9WKBGjNMQYPIgba\/Dc1iZEydmNt8\/VStnPCdVnOPkihDIvNtCmXfYttuv9t0MMTAWBAxSfkCah3R\/ExehzwNmNUIixAtuvRm6XF1wnXkJor+q+HykKEuGe8fWf8DA6FwhWVUGlP1XSXu7+4\/WusWvGLw8IQXAomxxJXe9DAUISDYdh9PiRIDmtaF95Uvwvsf2i6pIT71AzWlU05wEjbVcv6LhhXAY3M5Lw1S8EQWAwMBLAwAASgDAB0gtc6g1Jjg3v2Cf7SocgQF1OQx3Pv8ssoSFABhpudMOU8IBAEAp\/Fg\/wQfyutPudvwG52abGrZGX6k+F9DglOslTH68GY2q6NkouQQO1l1jKgJNra\/xmqLHH4JMVYhV38BXIc\/vnz7e7wUCVOMeTMdS5g\/x6OsN+t0cT5SQziLEe\/aw\/4WSQMhWOInZJfPyzOZ94f39ul8oLxN2ZuuiunweVes9\/wrWjv3ifaLZDsWwGu3zZ1XONKkZvv9E7ppFvVi+TmIPbOfiSzDTIx3orP1Ma07MM81j1vawiZA","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+2670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":2,"flow_packet_id":13,"flow_first_seen":1605289713743,"flow_last_seen":1605289713803,"flow_tot_l4_data_len":6189,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":476,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0542{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":168,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAHIGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuB7prDLlf7q\/MLgBgLMHfdAAABAQgKwrkggc+qMH+ts+r2v7JijkNxvoGUGYZYD4lpPjHgIv0QRDoD2VjtCnKERIj7+k8+MGErBYWC\/RXs42rT+XWp0V6FzUfyvY41E46YF7Klda1dFgMDAAQOAAAA","pkt_caplen":168,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289713,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD\/cFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUge4Bu\/ur8wuawyo\/gBAB9QUcAAABAQgKz6owqcK5IIE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":1605289714142,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1R0AAAAAoAL9IJUzAAACBAWgBAIICtZiIAMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":1605289714142,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAzjWACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrMAAAAAAoAL9INluAAACBAWgBAIICtZiIAMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":1605289714142,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFBoQAAAAAoAL9IDStAAACBAWgBAIICtZiIAMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":1605289714142,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMGkAAAAAoAL9INWDAAACBAWgBAIICtZiIAMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":1605289714142,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAI0zACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDE2UAAAAAoAL9IGEKAAACBAWgBAIICtZiIAMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605289714142,"flow_last_seen":1605289714142,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAoQZACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfNsQAAAAAoAL9IJVNAAACBAWgBAIICtZiIAMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWcPSVr2OUKdUeoBJXgLJJAAACBAV4AQMDAwQCCArCuSHy1mIgAw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1R70la9kgBAB+zY+AAABAQgK1mIgIMK5IfI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714172,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDqe34hzBqoBJXgFKZAAACBAV4AQMDAwQCCArCuSH71mIgAw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMGqaA6nugBAB+9aEAAABAQgK1mIgKcK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714180,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8RXbDRQaFoBJXgAyCAAACBAV4AQMDAwQCCArCuSH61mIgAw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTOMV4SazBoBJXgEidAAACBAV4AQMDAwQCCArCuSH71mIgAw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqgAoyXzbFoBJXgIWfAAACBAV4AQMDAwQCCArCuSH71mIgAw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms5zmKAxNmoBJXgFEqAAACBAV4AQMDAwQCCArCuSH71mIgAw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFBoWjvEV3gBAB+5BsAAABAQgK1mIgKsK5Ifo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAzjWACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrMEZEzjGgBAB+8yHAAABAQgK1mIgKsK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAoQZACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfNsVQqoALgBAB+wmKAAABAQgK1mIgKsK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAI0zACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDE2bprOc6gBAB+9UUAAABAQgK1mIgKsK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1118{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714181,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1120{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714182,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1120{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714182,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1120{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1605289714142,"flow_last_seen":1605289714182,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWcPSVr2SUKdcjgBALMCrlAAABAQgKwrkiENZiICE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2292{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1605289714142,"flow_last_seen":1605289714204,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2285{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2300{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1993{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1244,"pkt":"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","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":3,"flow_packet_id":9,"flow_first_seen":1605289714142,"flow_last_seen":1605289714204,"flow_tot_l4_data_len":6143,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":682,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0429{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lbTQgBAB9S6SAAABAQgK1mIgQcK5IhI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lbo8gBAB8CkrAAABAQgK1mIgQcK5IhI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lb+ogBAB6SPGAAABAQgK1mIgQcK5IhI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lcQugBAB4h9HAAABAQgK1mIgQcK5IhI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDqe74hzJvgBALMMstAAABAQgKwrkiGNZiICk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8RXfDRQiKgBALMIUUAAABAQgKwrkiGNZiICo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPAH0GQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp1yP0lcQugBgB9T3MAAABAQgK1mIgSMK5IhIWAwMAJRAAACEggDAZblZrdFv1akGX3C72VLJCZjR6qBmvzAIpI2mZSyMUAwMAAQEWAwMAKAAAAAAAAAAAaALSFKNzYYbDZ3GF0qZ\/3\/ZVQsvPeJuRBbz6aHLkRqo=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0566{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gBvDPAIMGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnABu5Qp14D0lcQugBgB9Xa7AAABAQgK1mIgSMK5IhIXAwMAXgAAAAAAAAAB8uoyIiU813j1HTbfQTZni98Tz0EtIU3bAx3Nkh11TN++7KboqHQ+++Q6RBJ\/wQnpACX\/UPSXwOWKLCsXkucG32ZUQJiv+WlDxlP01c24u8Mz3\/X7GXE=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAzjWACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYZEzjGgBEB+8piAAABAQgK1mIgScK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDFiUACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIqjvEV3gBEB+44pAAABAQgK1mIgScK5Ihg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC2HAACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMm+aA6nugBEB+9RBAAABAQgK1mIgScK5Ihg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAI0zACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWvprOc6gBEB+9LvAAABAQgK1mIgScK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAoQZACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMpQqoALgBEB+wdlAAABAQgK1mIgScK5Ifs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTOMZ4Sa7GgBALMMEtAAABAQgKwrkiG9ZiICo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2294{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDqe74hzJvgBgLMKiBAAABAQgKwrkiG9ZiICkWAwMAUgIAAE4DAzPFjhCNURctCGu9O+QrRUKiBA\/bj2U1VkYDJf\/1h2o3AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMRUAsAEUwAEUkADI4wggyKMIILcqADAgECAhAEIQzFo4YzQYum6ENydBKbMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDcxNjAwMDAwMFoXDTIxMDgwNDEyMDAwMFowbjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAoTD1BpbnRlcmVzdCwgSW5jLjEYMBYGA1UEAwwPKi5waW50ZXJlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAympd0SK2ykpSjuxd34nlkvFt79NjfrXrAqDT6H12U3P3i5RnawC2sGpT\/6L8igmc\/3X18Sc5REbcl7J4nDi75dUMNjYCoDdmCdIylz1v26Y6l3nJdLoUK0cINwgIFCmAGRr7DkrCmqhyvOhxNvzAbzuylSkTgWtjPSRAjjN\/2bAkPY93298nb5tvOK190URc4dJHb\/5bPTOiylnGIQsqMvnw6scjIuGkVLK3DAPguvS5TJIlmKKXqtBe0m9S16b7mph7Txl1AdyMc2IUs6GwZe6AkN5YaDCarW+ZpawPrz0IIXFUfUFL4rsqojOND\/O6fhGo8uaOKRrRqD41672WawIDAQABo4IJIDCCCRwwHwYDVR0jBBgwFoAUUWj\/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFA2E0pErXPYSSEiu6j6AldQTTOO9MIIGSgYDVR0RBIIGQTCCBj2CDyoucGludGVyZXN0LmNvbYIMcGludGVyZXN0Lmlugg4qLnBpbnRlcmVzdC5jb4IMcGludGVyZXN0LmNvgg4qLnBpbnRlcmVzdC5wZYIMcGludGVyZXN0LnBlgg4qLnBpbnRlcmVzdC5iZYIMcGludGVyZXN0LmJlgg4qLnBpbnRlcmVzdC5pboIOKi5waW50ZXJlc3QucGiCDioucGludGVyZXN0LmVjggxwaW50ZXJlc3QucGiCDioucGludGVyZXN0LmNsggwqLnBpbmltZy5jb22CDioucGludGVyZXN0LmVzggxwaW50ZXJlc3QuZXOCDioucGludGVyZXN0Lm56ggxwaW50ZXJlc3QubnqCDHBpbnRlcmVzdC5lY4IMcGludGVyZXN0Lmh1ggxwaW50ZXJlc3QuY2GCDHBpbnRlcmVzdC5pZIIOKi5waW50ZXJlc3QubmyCDHBpbnRlcmVzdC5ubIIOKi5waW50ZXJlc3QudHeCDHBpbnRlcmVzdC50d4IOKi5waW50ZXJlc3QudGiCDHBpbnRlcmVzdC50aIIOKi5waW50ZXJlc3QuaWSCDioucGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC5odYIMcGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC51a4IMcGludGVyZXN0LnVrgg4qLnBpbnRlcmVzdC5ydYIMcGludGVyZXN0LnJ1gg4qLnBpbnRlcmVzdC5pdIIMcGludGVyZXN0Lml0ggxwaW50ZXJlc3QuZnKCDHBpbnRlcmVzdC5jbA==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":6,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2285{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDr1r4hzJvgBgLMHQhAAABAQgKwrkiG9ZiICmCDioucGludGVyZXN0LmZygg4qLnBpbnRlcmVzdC5qcIIOKi5waW50ZXJlc3QuY2GCDXBpbnRlcmVzdC5jb22CBnBpbi5pdIIOKi5waW50ZXJlc3Quc2WCDioucGludGVyZXN0LnB0gg4qLnBpbnRlcmVzdC5teIIOKi5waW50ZXJlc3Qua3KCDioucGludGVyZXN0LmllghVwaW50ZXJlc3QuZW5naW5lZXJpbmeCDioucGludGVyZXN0LmRrgg4qLnBpbnRlcmVzdC5kZYIOKi5waW50ZXJlc3QuY2iCDioucGludGVyZXN0LmF0ghMqLnBpbnRlcmVzdG1haWwuY29tghcqLnBpbnRlcmVzdC5lbmdpbmVlcmluZ4IQKi5waW50ZXJlc3QuaW5mb4IOcGludGVyZXN0LmluZm+CCnBpbmltZy5jb22CEXBpbnRlcmVzdG1haWwuY29tggxwaW50ZXJlc3QuZGWCDHBpbnRlcmVzdC5ka4IMcGludGVyZXN0LmllggxwaW50ZXJlc3QuanCCDHBpbnRlcmVzdC5rcoIMcGludGVyZXN0Lm14ggxwaW50ZXJlc3QucHSCDHBpbnRlcmVzdC5zZYIMcGludGVyZXN0LmF0ggxwaW50ZXJlc3QuY2iCD3BpbnRlcmVzdC5jby5hdIISKi5waW50ZXJlc3QuY29tLnV5gg9waW50ZXJlc3QuY28ua3KCD3BpbnRlcmVzdC5jby51a4ISKi5waW50ZXJlc3QuY29tLmF1ghBwaW50ZXJlc3QuY29tLmF1ghBwaW50ZXJlc3QuY29tLm14ghEqLnBpbnRlcmVzdC5jby5ueoIPcGludGVyZXN0LmNvLm56ghBwaW50ZXJlc3QuY29tLnBlghBwaW50ZXJlc3QuY29tLnV5ghEqLnBpbnRlcmVzdC5jby5pboIQcGludGVyZXN0LmNvbS5weYISKi5waW50ZXJlc3QuY29tLnB5ghBwaW50ZXJlc3QuY29tLmJvghIqLnBpbnRlcmVzdC5jb20uYm+CEHBpbnRlcmVzdC5jb20uZWOCEioucGludGVyZXN0LmNvbS5lY4IPcGludGVyZXN0LmNvLmlughIqLnBpbnRlcmVzdC5jb20ucGWCEioucGludGVyZXN0LmNvbS5teIIQcGludGVyZXN0LmNvbS52boISKi5waW50ZXJlc3QuY29tLnZughEqLnBpbnRlcmVzdC5jby51a4IRKi5waW50ZXJlc3QuY28ua3KCESoucGludGVyZXN0LmNvLmF0ghcqLnRlc3RpbmcucGludGVyZXN0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAg==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2300{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqgAsyXzjKgBALMP4uAAABAQgKwrkiG9ZiICs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1995{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1244,"pkt":"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","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":6175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":617,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0429{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms5zqKAxVrgBALMMm5AAABAQgKwrkiG9ZiICs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCEQNABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMm8AAAAAUAQAAC7RAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+2292{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2292{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqgAsyXzjKgBgLMIITAAABAQgKwrkiHdZiICsWAwMAUgIAAE4DAxaBEV71RnzbmG6wvikn6Zh6RUXudcxWAZWEWYrdTbnSAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMRUAsAEUwAEUkADI4wggyKMIILcqADAgECAhAEIQzFo4YzQYum6ENydBKbMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDcxNjAwMDAwMFoXDTIxMDgwNDEyMDAwMFowbjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAoTD1BpbnRlcmVzdCwgSW5jLjEYMBYGA1UEAwwPKi5waW50ZXJlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAympd0SK2ykpSjuxd34nlkvFt79NjfrXrAqDT6H12U3P3i5RnawC2sGpT\/6L8igmc\/3X18Sc5REbcl7J4nDi75dUMNjYCoDdmCdIylz1v26Y6l3nJdLoUK0cINwgIFCmAGRr7DkrCmqhyvOhxNvzAbzuylSkTgWtjPSRAjjN\/2bAkPY93298nb5tvOK190URc4dJHb\/5bPTOiylnGIQsqMvnw6scjIuGkVLK3DAPguvS5TJIlmKKXqtBe0m9S16b7mph7Txl1AdyMc2IUs6GwZe6AkN5YaDCarW+ZpawPrz0IIXFUfUFL4rsqojOND\/O6fhGo8uaOKRrRqD41672WawIDAQABo4IJIDCCCRwwHwYDVR0jBBgwFoAUUWj\/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFA2E0pErXPYSSEiu6j6AldQTTOO9MIIGSgYDVR0RBIIGQTCCBj2CDyoucGludGVyZXN0LmNvbYIMcGludGVyZXN0Lmlugg4qLnBpbnRlcmVzdC5jb4IMcGludGVyZXN0LmNvgg4qLnBpbnRlcmVzdC5wZYIMcGludGVyZXN0LnBlgg4qLnBpbnRlcmVzdC5iZYIMcGludGVyZXN0LmJlgg4qLnBpbnRlcmVzdC5pboIOKi5waW50ZXJlc3QucGiCDioucGludGVyZXN0LmVjggxwaW50ZXJlc3QucGiCDioucGludGVyZXN0LmNsggwqLnBpbmltZy5jb22CDioucGludGVyZXN0LmVzggxwaW50ZXJlc3QuZXOCDioucGludGVyZXN0Lm56ggxwaW50ZXJlc3QubnqCDHBpbnRlcmVzdC5lY4IMcGludGVyZXN0Lmh1ggxwaW50ZXJlc3QuY2GCDHBpbnRlcmVzdC5pZIIOKi5waW50ZXJlc3QubmyCDHBpbnRlcmVzdC5ubIIOKi5waW50ZXJlc3QudHeCDHBpbnRlcmVzdC50d4IOKi5waW50ZXJlc3QudGiCDHBpbnRlcmVzdC50aIIOKi5waW50ZXJlc3QuaWSCDioucGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC5odYIMcGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC51a4IMcGludGVyZXN0LnVrgg4qLnBpbnRlcmVzdC5ydYIMcGludGVyZXN0LnJ1gg4qLnBpbnRlcmVzdC5pdIIMcGludGVyZXN0Lml0ggxwaW50ZXJlc3QuZnKCDHBpbnRlcmVzdC5jbA==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":8,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2285{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2300{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2000{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1244,"pkt":"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","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":8,"flow_packet_id":10,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":6175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":617,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0412{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCkWGABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMoAAAAAUAQAAO6aAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+2294{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTOMZ4Sa7GgBgLMFxoAAABAQgKwrkiHdZiICoWAwMAUgIAAE4DA4+lo7WaBkSPEIhuYvlME1qRimMyCtmB\/JqWrr\/uGluCAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMRUAsAEUwAEUkADI4wggyKMIILcqADAgECAhAEIQzFo4YzQYum6ENydBKbMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDcxNjAwMDAwMFoXDTIxMDgwNDEyMDAwMFowbjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAoTD1BpbnRlcmVzdCwgSW5jLjEYMBYGA1UEAwwPKi5waW50ZXJlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAympd0SK2ykpSjuxd34nlkvFt79NjfrXrAqDT6H12U3P3i5RnawC2sGpT\/6L8igmc\/3X18Sc5REbcl7J4nDi75dUMNjYCoDdmCdIylz1v26Y6l3nJdLoUK0cINwgIFCmAGRr7DkrCmqhyvOhxNvzAbzuylSkTgWtjPSRAjjN\/2bAkPY93298nb5tvOK190URc4dJHb\/5bPTOiylnGIQsqMvnw6scjIuGkVLK3DAPguvS5TJIlmKKXqtBe0m9S16b7mph7Txl1AdyMc2IUs6GwZe6AkN5YaDCarW+ZpawPrz0IIXFUfUFL4rsqojOND\/O6fhGo8uaOKRrRqD41672WawIDAQABo4IJIDCCCRwwHwYDVR0jBBgwFoAUUWj\/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFA2E0pErXPYSSEiu6j6AldQTTOO9MIIGSgYDVR0RBIIGQTCCBj2CDyoucGludGVyZXN0LmNvbYIMcGludGVyZXN0Lmlugg4qLnBpbnRlcmVzdC5jb4IMcGludGVyZXN0LmNvgg4qLnBpbnRlcmVzdC5wZYIMcGludGVyZXN0LnBlgg4qLnBpbnRlcmVzdC5iZYIMcGludGVyZXN0LmJlgg4qLnBpbnRlcmVzdC5pboIOKi5waW50ZXJlc3QucGiCDioucGludGVyZXN0LmVjggxwaW50ZXJlc3QucGiCDioucGludGVyZXN0LmNsggwqLnBpbmltZy5jb22CDioucGludGVyZXN0LmVzggxwaW50ZXJlc3QuZXOCDioucGludGVyZXN0Lm56ggxwaW50ZXJlc3QubnqCDHBpbnRlcmVzdC5lY4IMcGludGVyZXN0Lmh1ggxwaW50ZXJlc3QuY2GCDHBpbnRlcmVzdC5pZIIOKi5waW50ZXJlc3QubmyCDHBpbnRlcmVzdC5ubIIOKi5waW50ZXJlc3QudHeCDHBpbnRlcmVzdC50d4IOKi5waW50ZXJlc3QudGiCDHBpbnRlcmVzdC50aIIOKi5waW50ZXJlc3QuaWSCDioucGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC5odYIMcGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC51a4IMcGludGVyZXN0LnVrgg4qLnBpbnRlcmVzdC5ydYIMcGludGVyZXN0LnJ1gg4qLnBpbnRlcmVzdC5pdIIMcGludGVyZXN0Lml0ggxwaW50ZXJlc3QuZnKCDHBpbnRlcmVzdC5jbA==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714229,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2285{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2285{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2302{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0412{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYAAAAAUAQAADK8AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+2301{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1995{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1244,"pkt":"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","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":5,"flow_packet_id":13,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":6235,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":479,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+1994{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1244,"pkt":"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","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":4,"flow_packet_id":11,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":6195,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":563,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+2292{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms5zqKAxVrgBgLMMyJAAABAQgKwrkiHdZiICsWAwMAUgIAAE4DA7Q2KSgtYMYaL8rZLqH6WArth+i9EdO62kCph9I2L6cqAMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMRUAsAEUwAEUkADI4wggyKMIILcqADAgECAhAEIQzFo4YzQYum6ENydBKbMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDcxNjAwMDAwMFoXDTIxMDgwNDEyMDAwMFowbjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAoTD1BpbnRlcmVzdCwgSW5jLjEYMBYGA1UEAwwPKi5waW50ZXJlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAympd0SK2ykpSjuxd34nlkvFt79NjfrXrAqDT6H12U3P3i5RnawC2sGpT\/6L8igmc\/3X18Sc5REbcl7J4nDi75dUMNjYCoDdmCdIylz1v26Y6l3nJdLoUK0cINwgIFCmAGRr7DkrCmqhyvOhxNvzAbzuylSkTgWtjPSRAjjN\/2bAkPY93298nb5tvOK190URc4dJHb\/5bPTOiylnGIQsqMvnw6scjIuGkVLK3DAPguvS5TJIlmKKXqtBe0m9S16b7mph7Txl1AdyMc2IUs6GwZe6AkN5YaDCarW+ZpawPrz0IIXFUfUFL4rsqojOND\/O6fhGo8uaOKRrRqD41672WawIDAQABo4IJIDCCCRwwHwYDVR0jBBgwFoAUUWj\/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFA2E0pErXPYSSEiu6j6AldQTTOO9MIIGSgYDVR0RBIIGQTCCBj2CDyoucGludGVyZXN0LmNvbYIMcGludGVyZXN0Lmlugg4qLnBpbnRlcmVzdC5jb4IMcGludGVyZXN0LmNvgg4qLnBpbnRlcmVzdC5wZYIMcGludGVyZXN0LnBlgg4qLnBpbnRlcmVzdC5iZYIMcGludGVyZXN0LmJlgg4qLnBpbnRlcmVzdC5pboIOKi5waW50ZXJlc3QucGiCDioucGludGVyZXN0LmVjggxwaW50ZXJlc3QucGiCDioucGludGVyZXN0LmNsggwqLnBpbmltZy5jb22CDioucGludGVyZXN0LmVzggxwaW50ZXJlc3QuZXOCDioucGludGVyZXN0Lm56ggxwaW50ZXJlc3QubnqCDHBpbnRlcmVzdC5lY4IMcGludGVyZXN0Lmh1ggxwaW50ZXJlc3QuY2GCDHBpbnRlcmVzdC5pZIIOKi5waW50ZXJlc3QubmyCDHBpbnRlcmVzdC5ubIIOKi5waW50ZXJlc3QudHeCDHBpbnRlcmVzdC50d4IOKi5waW50ZXJlc3QudGiCDHBpbnRlcmVzdC50aIIOKi5waW50ZXJlc3QuaWSCDioucGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC5odYIMcGludGVyZXN0LnZugg4qLnBpbnRlcmVzdC51a4IMcGludGVyZXN0LnVrgg4qLnBpbnRlcmVzdC5ydYIMcGludGVyZXN0LnJ1gg4qLnBpbnRlcmVzdC5pdIIMcGludGVyZXN0Lml0ggxwaW50ZXJlc3QuZnKCDHBpbnRlcmVzdC5jbA==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":7,"flow_packet_id":7,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":2145,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2285{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2300{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1994{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1244,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABKYGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms936KAxVrgBgLMPqCAAABAQgKwrkiHdZiICt3d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMDcxMTQ0NTJaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQBCEMxaOGM0GLpuhDcnQSm4AAGA8yMDIwMTEwNzExNDQ1MlqgERgPMjAyMDExMTQxMDU5NTJaMA0GCSqGSIb3DQEBCwUAA4IBAQCImBufb295Au2ju2lBCnSUKecQwVg9gkN6+y60LAZnbHKZEtr+Lda+UXfoK+l1YxaCqc9JLrsr4yUrVuWDwRxH0toRCTmGGUR1HNlQU5BSRgxjgPVigRozTEGDyIG2vw3NYmRMnZjbfP1UrZzwnVZzj5IoQyLzbQpl32Lbbr\/bdDDEwFgQMUn5Amod0fxMXoc8DZjVCIsQLbr0ZulxdcJ15CaK\/qvh8pChLhnvH1n\/AwOhcIVlVBpT9V0l7u\/uP1rrFrxi8PCEFwKJscSV3vQwFCEg2HYfT4kSA5rWhfeVL8L7H9ouqSE+9QM1pVNOcBI21XL+i4YVwGNzOS8NUvBEFgMDASwMAAEoAwAdIP3Bp+xbTlg44tL1u7WyGX5UGOsfbLYaZH3AGmNX1rsvCAQBAGJzP2SmxcyjMMo\/6yP1w57rYTK7VdsPUHCdhg0NNxlzgnz\/TKkisYlYbn9XfkuZ80iiMXVr5bfNwkVj+wuPAzF+GRaJQVlIOW91JKWgReChVeZPbgRPK0SovKU0eUpi8kKV4qM1SSKMsNypC6PeOwvnQon1VqejbCbDw3TE5dpyPFVVDcntyL+tTdqjbq6k5K\/9rlywGF7pxiLvS4b0VSiR+RedqhHsRsGHx0LLezKdYLAVf\/nOWvpStAQupC+2Be2rFKaKobFKce3Aeb0gVxhOiF9blHAJopuqK60RzhbXOW58ZgdapJZpWFJfNDY5\/W4sVcIYUBWg9a39EXHDQoEWAwMABA4AAAA=","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":7,"flow_packet_id":10,"flow_first_seen":1605289714142,"flow_last_seen":1605289714230,"flow_tot_l4_data_len":6175,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":617,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0413{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYAAAAAUAQAADK8AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBmcdABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnQBu8NFCIoAAAAAUAQAAI36AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrsYAAAAAUAQAADK8AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCZxWABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWsAAAAAUAQAALpXAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605289714250,"flow_last_seen":1605289714250,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33156,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA+BkACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUgYQBu4mXWd7qkQRvgBAJlouHAAABAQgKz6oyaMK4cmQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605289714250,"flow_last_seen":1605289714250,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":58726,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCIReACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC5WYBu2PBi7kDA7Y3gBAB9bhLAAABAQgKDEf\/5cK4cls=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605289714251,"flow_last_seen":1605289714251,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:13e2","src_port":34626,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQO3ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RPih0IBu\/o5BzSfc9\/MgBAB9chlAAABAQgK4ziLg8K4a4Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms\/ASKAxVsgBALMLSrAAABAQgKwrkiQNZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDvrj4hzJwgBALMLYaAAABAQgKwrkiQNZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdKO8WkHDRQiLgBALMHACAAABAQgKwrkiQNZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWdpoDvrj4hzJwgBELMLYYAAABAQgKwrkiQdZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWchkTTZB4Sa7HgBALMKwdAAABAQgKwrkiQdZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCZxWABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWwAAAAAUAQAALpWAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCEQNABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMnAAAAAAUAQAAC7QAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCEQNABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnYBu\/iHMnAAAAAAUAQAAC7QAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDob5ABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnIBu3hJrscAAAAAUAQAADK7AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqlNUyXzjLgBALMOkfAAABAQgKwrkiQdZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCkWGABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMsAAAAAUAQAAO6ZAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWeOms\/ASKAxVsgBELMLSpAAABAQgKwrkiQdZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCZxWABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElngBu4oDFWwAAAAAUAQAALpWAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWelCqlNUyXzjLgBELMOkdAAABAQgKwrkiQtZiIEk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCkWGABQGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElnoBuzJfOMsAAAAAUAQAAO6ZAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuBhOqRBG+Jl1nfgBAm9NLhAAABAQgKwrkiYM+oHbQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvlZgMDtjdjwYu6gBAMIRHEAAABAQgKwrkiZwxF7DU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZE+IqAcsBIEmLB5kd7IUo3\/YpAbuHQp9z38z6OQc1gBALjSOBAAABAQgKwrkiaOM2b+4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":3,"flow_packet_id":255,"flow_first_seen":1605289714142,"flow_last_seen":1605289714413,"flow_tot_l4_data_len":352160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":8360,"flow_avg_l4_data_len":1381,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"s.pinimg.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605289714558,"flow_last_seen":1605289714558,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp"}
+0442{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACgGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnOX0AAAAAoAL9IDgIAAACBAWgBAIICpXXZO8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3uEYmtpAnJzl+oBJXgPrGAAACBAV4AQMDAwQCCArCuSOMlddk7w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnOX5GJraRgBAB+37BAAABAQgKlddlBsK5I4w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0819{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1605289714558,"flow_last_seen":1605289714581,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sessions.bugsnag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0504{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605289714590,"flow_last_seen":1605289714590,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp"}
+0442{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRGoAAAAAoAL9IGNfAAACBAWgBAIICskVTwYAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3uEYmtpEnJzuDgBALMHNnAAABAQgKwrkjrJXXZQY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0860{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1605289714558,"flow_last_seen":1605289714615,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sessions.bugsnag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2065{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJrtJgBAB9XfGAAABAQgKlddlKMK5I64=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJsABgBAB8nMRAAABAQgKlddlKMK5I64=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJsS5gBAB6W5iAAABAQgKlddlKMK5I64=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0571{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":187,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIUGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3uEYmyXEnJzuDgBgLMEiyAAABAQgKwrkjrpXXZQbjgwmhpuGHO8aKOvW5G6nyNUWAGkQ1Xg20GMLEaXvDQF9KZik9+TxSbeUOsRi\/Pv+SiEpb8\/F1jZeySuLGgp02TodaXXnP87TAh9EB9RGJ1WofxaYMWSBWHmG9HF48p92w5KTHQQ==","pkt_caplen":187,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJslxgBAB9WmdAAABAQgKlddlKcK5I64=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA76\/ACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt7gBuycnO4NGJsnWgBAB9Wk4AAABAQgKlddlKcK5I64=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+eGX+6kRroBJXgA2NAAACBAV4AQMDAwQCCArCuSOwyRVPBg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRGucvnhmgBAB+5GEAAABAQgKyRVPIMK5I7A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1127{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRGucvnhmgBgB+6l5AAABAQgKyRVPIMK5I7AWAwECAAEAAfwDA\/Gk\/9Vg1\/Yj6dUUpOb5DX8WmaenXohw9y+Qd4DnqktzIAb2YuarrlKbgL6YLTJZPQe97f1AtvLN8fLaoxVIuyFiACAqKhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZO6ugAAAAAAEwARAAAOd3d3Lmdvb2dsZS5jb20AFwAA\/wEAAQAACgAKAAjq6gAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKerqAAEAAB0AIJML4p8NHh5Io\/9KcRl6BBOqQlWgp4uJ9mxBuu8Y\/4wPAC0AAgEBACsACwrq6gMEAwMDAgMBABsAAwIAAlpaAAEAABUAzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1605289714590,"flow_last_seen":1605289714617,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0430{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+eGb+6kZwgBALMIYoAAABAQgKwrkj0skVTyA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605289714658,"flow_last_seen":1605289714658,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp"}
+0442{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDSXwAAAAAoAL9ILsUAAACBAWgBAIICs+qM\/8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+2072{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0868{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1605289714590,"flow_last_seen":1605289714660,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2068{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+fR7+6kZwgBgLMOrZAAABAQgKwrkj2MkVTyDaJxII2vuR+5v7lvHLCQUln2HabYhku3B4YoNU5Py7pD6OvHjar29MikxcVDvwD9NusBRz\/QtiaXuUdasxuF9TDuCosbd1QXqKXK7z6RGr48EqaZFGhUPxxo2cTjg5nEhtD6ebIGFHfDUoRCcKhfNkgj+zPxVOoRcK6KXI92ocji9i2DMLkmFgh0EK61UJPlEnyesc1I7skdEyxZA+oCi\/\/eg+9vMXDT0wwGewKM2B5B60Piu+zCDfSzShWqspxClEWiMAGmaI76461pY8xr40ctkhFaoWfWDKKQmwnmvk0gINPYwN100JLLFys5aKlcIdBmdYoWQD6WwU7Ic4U4Cj27SrEFQ7t4hVk1qvuXvWT72oGR83qqGtHxd0H2W1HS7MqRh+qm1szBBTNm1oVyKhXqU5ROcS6wN276WxXCmLBvCnq9mgJR1LQmSN2yeH8M0RnqmwMkKIL5beU+oDd+YsPE+E03NUxsuX2HTZiTlpNSErSXRejxdRHTvc1ak+CedRJx37UE9W3oZmMEOdk8wE6XP6Y0N2vOSVdwjXY2tgcpb0JD1KhltaigKl12MQC\/657ZO9mS0eznr0Q0akut4sODwRzcV5+yPJnpB5uw8jnYddPABVW\/P1Dop85x4aWMHqUxo1wvT9KzRLtszWYvlileZyaX1v591hYfB6dqcpI\/IRZY5tSLb+6jvbmPlCq6LUmKJFSXPeWi1VMJIpCtkLn9iSe7ehds37taFBTXPkyF2YnbVb42m9may+moLdl9MuLcgKYE6LZ\/8ycQMPqXkDRKKp3iJUA+S1OuDBkBKYIfxsOhxvyWZRNm30Cia8BdEnbKNJjnh8\/nqGh9zSMsAZxEruElqTwhHT3ZPXkm9YI0HSPDR3JRaEHdlX9qUnFwIjyCxUNNc\/f2hyQk\/sM75pd3YlDqkFbB510FD+l3LuvWym2DP9uNtgm6YeaAm60UgHRG+hp8s0AHHaFk57cNwy3Ao3Rj07+n\/I9NZJyuyIO6QdgNH1iOj2eIinq3UOI8Z0elPmyaODDE0o0EBQyM\/PwcnY5LJMMttxhDFp5VkFsubl+Eq+KnugjgUakSLQ5ZuH\/ap37eTn7HQFdF7lMTH1FiGc7ajmkwF\/WZZTApn+iCN9Al87ubRFLbnOwCp7cYqdx2Uji7xrT5Er\/Q0c2Ng5zPIgWmY+HDUYmZB1Zz+z1k\/hxoFJ5mXQstYut4V+H8wNOQmriC3cfOEuXDOcNAhr4itKgViZ5nop2ZZd1iqKf8InlD6k5koY+fJv\/mWIIjxYRg\/6GYFcxhB+kazDe5vm1oxzQlANcasEfvSFt62rYBx4+b7Ye6CvGlFJLCMSgwPJDPGtHrJtVhvsc4oEUDEcJXoCa76SkclaH+o2ynX5JEzEni4jYdisFsuSt2WvS2R2ZyqQuqWeit4BWX9cuCmWqJq3CehQKcjU+LlMkatTEMtbSlTtK9rK6I78UWpMuvcZLUBb4j\/SGdC7mRyQ6uPZhIHSz\/5vFDyrcFh3ikw\/K6Mzlw6SLP2PSuk6W929+S2cgAYDpgyxKkkW2ftQ6kJ3nQwH+xdAr3o2lsyYON\/R8nDWHVY5qlBXtMHP+s80TOUkKqoPAxv6Tw==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvn0egBAB9Yp5AAABAQgKyRVPTMK5I9g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvoHWgBAB8oXEAAABAQgKyRVPTMK5I9g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0725{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":303,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPkGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+gdb+6kZwgBgLMPXcAAABAQgKwrkj2MkVTyBKFrJZLFHvJ5f+UFD7ilsPjV2yNHFXSwn6uu58yQn7u0Or0MIflVMXgz6jX\/kOj1amhZH8g\/1XwSn8NOmGG9HJRnoeuyO1K+sPZX8Fohpzwy9MXKovIur8qVQQ8SSDenDmeHZMXyBGmX0DFIhuSkv86pdeFRuZe1yKTYrrJu\/d6JtQmXHkIv+RZSWvB1E3ZczyTVxNqgP89m6eOwZdI3b0PTW1bxmc3RyCbE8DSl0feJkihTEQxKSo97D4ZkMk2\/Z9spON0GyGlU7oRu9Qx7wzLdOISnBDZozt","pkt_caplen":303,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvoKvgBAB8YTsAAABAQgKyRVPTMK5I9g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRnCcvoKvgBgB9RTTAAABAQgKyRVPT8K5I9gUAwMAAQEXAwMANSmk5A8eakPxSKCxLdL613ENqRg6g2cLAUTIz1VlEFUVV\/n8Gt0CAER41S+EV8hpe6Hcell1","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0558{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRrCcvoKvgBgB9UITAAABAQgKyRVPT8K5I9gXAwMAV4uOVLiygKJ7jhCKunCRybi24hhdNAT68p6zvdN0nWXMix7UWqBX5ZuiCp6bIbslzSVVcvh9FI\/IUhpb3e1z50X4PH0X2nuaw+JGkCHx1msjktzrAY8DEQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0872{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":409,"pkt":"qtsDr8lk5EKm5WPyht1gDTn6AWMGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnvYBu\/7qRwycvoKvgBgB9XNQAAABAQgKyRVPT8K5I9gXAwMBPn9UMViBbnPfnS\/HlD4vWF7eP9Ah0BbrPoSIiitNghj03x001Px3bCsM\/qMB66m2oP4R64AI41vS\/2owjcm+KieT9cS8Z3ghd4Tao50cyZOYEylQ6230q+eiQx41PkJTL78iusJEAoMCMS5YCRAd0rJFYIZpMazjPNgjjitV7JjH+X2r5Nw5flmPTSg1WjC8YbFlArPGULqudK+7uYIDt8xEIskac4MYdHo1b0my\/wFyaoJ+bHTXyuWnXsIwS7ZCQM\/YgjvSRTh7wAe1EfrW+e\/JHSXozkDkZRE0uYjp\/rsuHPthZibRGcz3dqvhXcxTCy4mz34iaLnOFG7Giw+bCKbqn560yNUHEwdEoENVxdMYAycVOuyjPViclAF+ZCXqrE3E4eRFWtXDMIbSo+lE2KEEpHv0TZscG7280xcaXQ==","pkt_caplen":409,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx4c9qQ0l9oBJXgI0UAAACBAV4AQMDAwQCCArCuSQBz6oz\/w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDSX0LMeHQgBAB+xD+AAABAQgKz6o0J8K5JAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gCBesAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDSX0LMeHQgBgB++hnAAABAQgKz6o0KMK5JAEWAwECAAEAAfwDA9jVKfntEh25nXj1BFZE6ZFc6lyzI+CshbYOPn0Jce38IK9kDSD6\/4FSA\/aOBvpuajY1lLZq5tukFPFFFO\/eMmwPACBKShMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPa2gAAAAAAGwAZAAAWYWNjb3VudHMucGludGVyZXN0LmNvbQAXAAD\/AQABAAAKAAoACEpKAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApSkoAAQAAHQAgyukN47oVi6AebwU11bCozo+bX5ZAWB5eRNnx4Nhm1GIALQACAQEAKwALCoqKAwQDAwMCAwEAGwADAgACamoAAQAAFQDGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1605289714658,"flow_last_seen":1605289714698,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0432{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbue9py+gq\/+6kawgBALOHs4AAABAQgKwrkkAskVT08=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx4dBqQ0uCgBALMAWbAAABAQgKwrkkKc+qNCg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1839{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0898{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1605289714658,"flow_last_seen":1605289714739,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1831{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx5ehqQ0uCgBgLMCmZAAABAQgKwrkkK8+qNCiCDHBpbnRlcmVzdC5ueoIMcGludGVyZXN0LmVjggxwaW50ZXJlc3QuaHWCDHBpbnRlcmVzdC5jYYIMcGludGVyZXN0Lmlkgg4qLnBpbnRlcmVzdC5ubIIMcGludGVyZXN0Lm5sgg4qLnBpbnRlcmVzdC50d4IMcGludGVyZXN0LnR3gg4qLnBpbnRlcmVzdC50aIIMcGludGVyZXN0LnRogg4qLnBpbnRlcmVzdC5pZIIOKi5waW50ZXJlc3Qudm6CDioucGludGVyZXN0Lmh1ggxwaW50ZXJlc3Qudm6CDioucGludGVyZXN0LnVrggxwaW50ZXJlc3QudWuCDioucGludGVyZXN0LnJ1ggxwaW50ZXJlc3QucnWCDioucGludGVyZXN0Lml0ggxwaW50ZXJlc3QuaXSCDHBpbnRlcmVzdC5mcoIMcGludGVyZXN0LmNsgg4qLnBpbnRlcmVzdC5mcoIOKi5waW50ZXJlc3QuanCCDioucGludGVyZXN0LmNhgg1waW50ZXJlc3QuY29tggZwaW4uaXSCDioucGludGVyZXN0LnNlgg4qLnBpbnRlcmVzdC5wdIIOKi5waW50ZXJlc3QubXiCDioucGludGVyZXN0Lmtygg4qLnBpbnRlcmVzdC5pZYIVcGludGVyZXN0LmVuZ2luZWVyaW5ngg4qLnBpbnRlcmVzdC5ka4IOKi5waW50ZXJlc3QuZGWCDioucGludGVyZXN0LmNogg4qLnBpbnRlcmVzdC5hdIITKi5waW50ZXJlc3RtYWlsLmNvbYIXKi5waW50ZXJlc3QuZW5naW5lZXJpbmeCECoucGludGVyZXN0LmluZm+CDnBpbnRlcmVzdC5pbmZvggpwaW5pbWcuY29tghFwaW50ZXJlc3RtYWlsLmNvbYIMcGludGVyZXN0LmRlggxwaW50ZXJlc3QuZGuCDHBpbnRlcmVzdC5pZYIMcGludGVyZXN0LmpwggxwaW50ZXJlc3Qua3KCDHBpbnRlcmVzdC5teIIMcGludGVyZXN0LnB0ggxwaW50ZXJlc3Quc2WCDHBpbnRlcmVzdC5hdIIMcGludGVyZXN0LmNogg9waW50ZXJlc3QuY28uYXSCEioucGludGVyZXN0LmNvbS51eYIPcGludGVyZXN0LmNvLmtygg9waW50ZXJlc3QuY28udWuCEioucGludGVyZXN0LmNvbS5hdYIQcGludGVyZXN0LmNvbS5hdYIQcGludGVyZXN0LmNvbS5teIIRKi5waW50ZXJlc3QuY28ubnqCD3BpbnRlcmVzdC5jby5ueoIQcGludGVyZXN0LmNvbS5wZYIQcGludGVyZXN0LmNvbS51eYIRKi5waW50ZXJlc3QuY28uaW6C","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMeXogBAB9QqTAAABAQgKz6o0UcK5JCs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMeoAgBAB8wZ9AAABAQgKz6o0UcK5JCs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1836{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1845{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMe4YgBAB7QJrAAABAQgKz6o0UcK5JCs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCBesACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXhUggABu2pDS4ILMfIwgBAB5\/5YAAABAQgKz6o0UcK5JCs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1853{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+2678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":14,"flow_packet_id":14,"flow_first_seen":1605289714658,"flow_last_seen":1605289714740,"flow_tot_l4_data_len":6221,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":444,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.pinterest.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0543{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":168,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAHIGPQBk\/5sAAAAAAAAAAJdleFQqAcsBIEmLB5kd7IUo3\/YpAbuCAAsx9khqQ0uCgBgLMDH+AAABAQgKwrkkK8+qNCg42GRMGPNWiLgl1y4rLngGB86u8oYTAZggfOxwErNBea0dRl6DIzGKiYPD2g\/W+dBrdSgRKgi2GNeFYpM9VMP6pf8KCHxpIEzUFgMDAAQOAAAA","pkt_caplen":168,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605289714782,"flow_last_seen":1605289714782,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp"}
+0441{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LuqIAAAAAoAL9IEOtAAACBAWgBAIICnRgZN4AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbve2qyyOFrOS7qjoBJXgB0bAAACBAV4AQMDAwQCCArCuSSHdGBk3g==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LuqOssjhbgBAB+6D6AAABAQgKdGBlEMK5JIc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0818{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1605289714782,"flow_last_seen":1605289714833,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0430{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbve2qyyOFvOS7yogBALMJWfAAABAQgKwrkkp3RgZRE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2294{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0874{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1605289714782,"flow_last_seen":1605289714867,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2286{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKissj3HgBAB9ZlJAAABAQgKdGBlM8K5JKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKisskMzgBAB8JPiAAABAQgKdGBlM8K5JKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2303{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKisskifgBAB7Y54AAABAQgKdGBlNMK5JKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2302{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+3099{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":15,"flow_packet_id":12,"flow_first_seen":1605289714782,"flow_last_seen":1605289714869,"flow_tot_l4_data_len":6469,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","server_names":"imgix2.map.fastly.net,*.camp-fire.jp,*.carwow.co.uk,*.carwow.de,*.carwow.es,*.catchandrelease.com,*.dorothee-schumacher.com,*.footway.com,*.img-ikyu.com,*.imgix.drizly.com,*.instamotor.com,*.microdinc.com,*.msastaging.com,*.peddle.com,*.remax.ca,*.ustudio.com,*.vaping360.com,*.weber.com,article-image-ix.nikkei.com,assets.eberhardt-travel.de,assets.verishop.com,assets.verishop.xyz,cdn.airstream.com,cdn.elementthree.com,cdn.hashnode.com,cdn.naturalhealthyconcepts.com,cdn.parent.eu,cdn.phonehouse.es,cdn.shiplus.co.il,i.drop-cdn.com,i.upworthy.com,image.volunteerworld.com,imageproxy.themaven.net,images-dev.takeshape.io,images.101cookbooks.com,images.beano.com,images.businessoffashion.com,images.congstar.de,images.diesdas.digital,images.fandor.com,images.greetingsisland.com,images.malaecuia.com.br,images.omaze.com,images.roulottesgagnon.com,images.takeshape.io,images.thewanderful.co,images.unsplash.com,images.victoriaplum.com,images.vraiandoro.com,img-1.homely.com.au,img-stack.imagereflow.com,img.badshop.se,img.bernieandphyls.com,img.bioopticsworld.com,img.broadbandtechreport.com,img.broadwaybox.com,img.bygghemma.se,img.bygghjemme.no,img.byggshop.se,img.cablinginstall.com,img.dentaleconomics.com,img.dentistryiq.com,img.evaluationengineering.com,img.golvshop.se,img.grudado.com.br,img.industrial-lasers.com,img.induux.de,img.intelligent-aerospace.com,img.inturn.co,img.laserfocusworld.com,img.ledsmagazine.com,img.lightwaveonline.com,img.militaryaerospace.com,img.mychannels.video,img.officer.com,img.offshore-mag.com,img.ogj.com,img.perioimplantadvisory.com,img.plasticsmachinerymagazine.com,img.prevu.com,img.rdhmag.com,img.speedcurve.com,img.strategies-u.com,img.utilityproducts.com,img.vision-systems.com,img.waterworld.com,img.workbook.com,img.xlhemma.se,img1.nowpurchase.com,iw.induux.de,m.22slides.com,media.sailrace.com,media.useyourlocal.com,pictures.hideaways.dk,raven.contrado.com,resources.intuitive.com,static.doorsuperstore.co.uk","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=imgix2.map.fastly.net","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1F:BC:A1:79:48:96:70:32:B8:08:C1:38:D4:20:12:BE:D9:6F:14:B6"}}
+1965{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":1219,"pkt":"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","pkt_caplen":1219,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKissk4LgBAB9YkDAAABAQgKdGBlNcK5JKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289714,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCp8uACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3toBu85LvKisslJ4gBAB8YSaAAABAQgKdGBlNcK5JKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+3096{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":15,"flow_packet_id":255,"flow_first_seen":1605289714782,"flow_last_seen":1605289715109,"flow_tot_l4_data_len":398036,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6972,"flow_avg_l4_data_len":1560,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"images.unsplash.com","server_names":"imgix2.map.fastly.net,*.camp-fire.jp,*.carwow.co.uk,*.carwow.de,*.carwow.es,*.catchandrelease.com,*.dorothee-schumacher.com,*.footway.com,*.img-ikyu.com,*.imgix.drizly.com,*.instamotor.com,*.microdinc.com,*.msastaging.com,*.peddle.com,*.remax.ca,*.ustudio.com,*.vaping360.com,*.weber.com,article-image-ix.nikkei.com,assets.eberhardt-travel.de,assets.verishop.com,assets.verishop.xyz,cdn.airstream.com,cdn.elementthree.com,cdn.hashnode.com,cdn.naturalhealthyconcepts.com,cdn.parent.eu,cdn.phonehouse.es,cdn.shiplus.co.il,i.drop-cdn.com,i.upworthy.com,image.volunteerworld.com,imageproxy.themaven.net,images-dev.takeshape.io,images.101cookbooks.com,images.beano.com,images.businessoffashion.com,images.congstar.de,images.diesdas.digital,images.fandor.com,images.greetingsisland.com,images.malaecuia.com.br,images.omaze.com,images.roulottesgagnon.com,images.takeshape.io,images.thewanderful.co,images.unsplash.com,images.victoriaplum.com,images.vraiandoro.com,img-1.homely.com.au,img-stack.imagereflow.com,img.badshop.se,img.bernieandphyls.com,img.bioopticsworld.com,img.broadbandtechreport.com,img.broadwaybox.com,img.bygghemma.se,img.bygghjemme.no,img.byggshop.se,img.cablinginstall.com,img.dentaleconomics.com,img.dentistryiq.com,img.evaluationengineering.com,img.golvshop.se,img.grudado.com.br,img.industrial-lasers.com,img.induux.de,img.intelligent-aerospace.com,img.inturn.co,img.laserfocusworld.com,img.ledsmagazine.com,img.lightwaveonline.com,img.militaryaerospace.com,img.mychannels.video,img.officer.com,img.offshore-mag.com,img.ogj.com,img.perioimplantadvisory.com,img.plasticsmachinerymagazine.com,img.prevu.com,img.rdhmag.com,img.speedcurve.com,img.strategies-u.com,img.utilityproducts.com,img.vision-systems.com,img.waterworld.com,img.workbook.com,img.xlhemma.se,img1.nowpurchase.com,iw.induux.de,m.22slides.com,media.sailrace.com,media.useyourlocal.com,pictures.hideaways.dk,raven.contrado.com,resources.intuitive.com,static.doorsuperstore.co.uk","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=imgix2.map.fastly.net","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1F:BC:A1:79:48:96:70:32:B8:08:C1:38:D4:20:12:BE:D9:6F:14:B6"}}
+0505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605289715133,"flow_last_seen":1605289715133,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp"}
+0442{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPmfcAAAAAoAL9IJHxAAACBAWgBAIICjiITggAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpGV7hz5n4oBJXgLSTAAACBAV4AQMDAwQCCArCuSXYOIhOCA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPmfiBKRlfgBAB+zhYAAABAQgKOIhOVcK5Jdg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1605289715133,"flow_last_seen":1605289715212,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605289715221,"flow_last_seen":1605289715221,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp"}
+0442{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0CzwAAAAAoAL9ILgWAAACBAWgBAIICnB0noAAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpGV\/hz5v9gBALMCzUAAABAQgKwrkmIDiITlc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqBSe29As9oBJXgJmfAAACBAV4AQMDAwQCCArCuSYncHSegA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0Cz3WKgUogBAB+x19AAABAQgKcHSetMK5Jic=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1123{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1605289715221,"flow_last_seen":1605289715274,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0511{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605289715274,"flow_last_seen":1605289715274,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACgGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vIYAAAAAoAL9IIqeAAACBAWgBAIICrhM3AoAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+2072{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":16,"flow_packet_id":6,"flow_first_seen":1605289715133,"flow_last_seen":1605289715287,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2064{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0803{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":356,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS4GPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpIs\/hz5v9gBgLMFpYAAABAQgKwrkmKDiITleJJNP\/oxaYBt8C5jsvVNIfMpB25\/w+YzUKrapMlVZbDQwylrG2pBgCPCghfHhset3jvV+DDf6jJebPmFOHFE\/8EC\/fWupIcvqWllrHdAro7EdltndKYcT6WpToaUtPicAvDtbU0GrelvJAloWstPRofb0n+NGjNz8lr3eQddIKsFCMe5qY3QggpcCAt\/uKZahD7z4TOINNqtrr2f6gkD0Wm+CVS89JDmp5A8PdLq6hb\/bvOGFfC1NncmeBX1A3jf\/aNDp88ZY\/ZQJYJ3ftYThrSEdRZcs0SdL3ckWZ04R2n8cX88+AZE2KG7QwmzCr2g\/I3dqOqsPXIZPnUV481NuR7onLj2QLCpUlELGnFV8=","pkt_caplen":356,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKR4XgBAB8jEHAAABAQgKOIhOosK5Jig=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKSLPgBAB6SxYAAABAQgKOIhOosK5Jig=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKSPdgBAB5ytMAAABAQgKOIhOosK5Jig=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPm\/2BKSPdgBgB9epxAAABAQgKOIhOpMK5JigUAwMAAQEXAwMANWCi9ROjTy+fQr39paPtxzeUgRvKTnLDMHFxfaVlGDS8h2Zji7023fksYxDF78c0E9e9+eyj","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gAUyOAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyX4Bu+HPnD2BKSPdgBgB9cWkAAABAQgKOIhOpcK5JigXAwMAV+QHUSuqz\/ajE70\/8PpdIEDlb80X31IgZ8JYZm\/qLWGMc6UGiusoxVzyrbcceWQ1hHQoDarZ8WmX9Y\/bSCY\/GSvJ+MT2CTn+EVLERgcCzHMKNH2OaFpzaA==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0859{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtCi5yubyHoBJXgCqsAAACBAV4AQMDAwQCCArCuSZZuEzcCg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqBSi29A1CgBALMBIOAAABAQgKwrkmW3B0nrU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vIcSbQovgBAB+66iAAABAQgKuEzcJcK5Jlk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1126{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuAiUGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vIcSbQovgBgB+0gHAAABAQgKuEzcJcK5JlkWAwECAAEAAfwDA5gekqpKhlC2ipL2zI8L5\/kv3e0nxnbXEmgavka1LHWVIBeXyfu8UN0TfZ\/W27lJZzaKDZAJHcd7oBhNLgsTwfr\/ACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNKSgAAAAAAGQAXAAAUY29ubmVjdC5mYWNlYm9vay5uZXQAFwAA\/wEAAQAACgAKAAi6ugAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKbq6AAEAAB0AIGc+3YDJXOpck3uyogqFw1bonkkYAWZ3xkO5tRdYSBRhAC0AAgEBACsACwoaGgMEAwMDAgMBABsAAwIAAurqAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0852{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1605289715274,"flow_last_seen":1605289715301,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"connect.facebook.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2074{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqBSi29A1CgBgLMNhcAAABAQgKwrkmYXB0nrUWAwMAegIAAHYDA4sZiB459qWF\/PHwfNqbJKTkMFgLqA7ZYyeATNloHO5aIJABGD2ndVeTf+odvyDjSMzv7BNGBBHaaAJBgxYc9sAYEwEAAC4AMwAkAB0AIDvPbOxW0+HAD\/cpkETnJFbuMP\/D\/41mS6DiCYn0OA8yACsAAgMEFAMDAAEBFwMDCdYi4qbW+gcv6snP1uLW9DrXNnZg6SNprBV\/05woDwBmNfZu5vFj\/aZ0Y4KFsvewaw4slvHR6E+eDAdS8qp\/55B9D0SoIR8xXW4mHMDLM4qNUngqUtjc07iIzKUqgMnMSyiJr+f6b0on5MmxUIY7OBYN3C\/TbVxRi92LjS2FQ1Pyf2DbLB7VBCbqMwuU5kWr\/ZDj1H12FEK3LRlAQk3THoRIV43ZkREPe6wKUZBkpu5rNQkOGLpJ6BAuC\/05O6pJNlglLbr41CzTmwiQ2fJyij8dnG8e\/8FbTboFul6RNUpf935uA45i20d92t8vQv6rEpkg2ACLy+XE9Q3scUa56WwU3DHZ+maCEvzeoshPlfRzwg\/pLv9vw01VufAIXJji8FnwgXeAQMhE7cxmaMnlClIYtXqnSyirVT1kIoPnEW0WvhgoPxo3BOJsfphiKGaIAIQeW1VUwicVGOMrCB9QSFdFLjKl3ClvsUgZWMApPDcKgAI4S5LzOlZ0eVHYOnxGVGXTai5z11hlz9iGN1YZq+dX51RPhMUkfz1CZ7i689CzsM7Q+mVeXUwuSVqLOKuR\/0GZ8fmqq5UFBLMc0hOBlNfCtD8wyBp8IpQnA\/kmfl4v2r7McbXtexTg4KvS5+pJimkT9ckFZXnkrl2o4LOftS+HA57\/AZUY2FM67fcGfGeqjhh6Qr1dHjsc\/qNbJh3DUDmzPyHomjDg6nbWKPvp44L8ujIyI7T3an5nko2O27MrJ50NjoRARpwgMzh2pr5lS1pnD\/Tfdnt33OtlqIekIvqwD+dpsyJKE5b\/un37uhn6MX8L7v\/68vG9iZMkplMikgZaqtIgzNinT62vF7Nl1aYlhzLnPrDWoalbo\/lDrvkSp8Rz1eGVnT5W60J\/mi\/Q+ShUsujTInpEnQQcKpZT8fM6RTdYGXiwk1ydsWwV4jeT0TtxQzBVZwhh1WS5Ieb65BHXxSjebu5holN8ALKSHIwAY1Xk\/NhwcxpV79+gi8OsZQdeBkxl8AON+KgPLob+fdos5KXGXJ+pgOYEKy0yLkwAMN+tBB9b7n24qRx1CKPkvkoFswF2fpB55CJzDoMJLS+RizHV10Hhtqz4cxez\/CfuEkLTcyNHmCtG5hYJCaq2NwhGkwLpPiZv2bB8UukRX33r5NEQ1MVzXeG0g\/tT+8XrZGImqjPbcMrAr1\/UFgEpQ9V4kixxkewc7tx+CF80EHHJBEwIGeOx22fTIsOkuZGUoWyQ\/UXWZheXAdB+pEFZdy8Flysnzt3AUnt7VFKslDFRSC7NRJGQ35PNjMxsBvJWCcrSigXvlRjMieQw5ht+wcLgNnEeQMFTiDbKoC3yiBLeCnrfgWbuiGBp+YQZSy6SR37BDvSrGdCmq2v0fPfbeLARgv2CV1ckAIKMfyACJgLPxRUJf7nv2dJK2FHjsg==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1605289715221,"flow_last_seen":1605289715321,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2074{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0756{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":326,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqDpi29A1CgBgLMKBtAAABAQgKwrkmYXB0nrUaotaQZmueURjb4mxm8bgKUsgOQIE+Gyt1YyxZtP4QfBPISh+JSmaI0cZjuTBPiwDs5Gfj5t\/hDdWIVTgfO9oPD\/qG3WKYbvDtPPp+KshnNvU4o5IuzUrun+JykDfleimcuawHuP0QeCZYmYwyMn\/LvnbIZZ5VTJLrRxZ1QklQEnTghz8Lx0oqCNqXfql4LByW+gl8WdDtbSss9Dmb2ZhESyeVBvhaMhknQ0Tv72Qgvuj5IxQL37IWx2RNDfMXPJ1azajuskGNEi5gNRev3sCqxSompohVWsHolBVAQeo1uPcMDqzE0P6BrslQWgylZ04=","pkt_caplen":326,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKgnggBAB9RZcAAABAQgKcHSe5MK5JmE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKg6YgBAB8hGnAAABAQgKcHSe5MK5JmE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKg+IgBAB8RC4AAABAQgKcHSe5MK5JmE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DULWKg+IgBgB9bchAAABAQgKcHSe6MK5JmEUAwMAAQEXAwMANVQ3WsnveM2tuNGJDAqkutEFOwzQsNPSxYOkVMblq5HZoB2K8faFvwur\/6bV565552EsBKjr","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0559{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0DYLWKg+IgBgB9fNTAAABAQgKcHSe6MK5JmEXAwMAV89UmuQf37ysIxYO\/Dt7HNvJ7Wkzp3mt1lf515z+0zRC+l8Cfu9aDjicb1iEwiRrTAJULks3ZqHr8xwcfQu3OyeWCNok165xtQzlMLRR3\/V4xNTDWXVuPw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0786{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":347,"pkt":"qtsDr8lk5EKm5WPyht1gDRmqASUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1JABu7b0Dd7WKg+IgBgB9YqEAAABAQgKcHSe6MK5JmEXAwMBALQj+Mj8F6TQf+yKp\/YXJo4mJONRlausStG6p1mUjBW5ABgkEIpbrscCgruxfEGAcGXg9xxVK4FhFT9pD7LhFQ\/UM+u5G4JYeGTWtT7REsguTlvjmevM+yINiwXXX4jip+kjeyVl8iaUksaMug1+zoFZ7QuWQOymo4jDbGuJANuxO\/1EXs78rLl2mzc0LY37oELOhYB4NN6xxZqbKGdD4V9ACFjhBb7DnLERiUs8QOhUIu\/TLqzIIWco835uYAgnPI6SB7gxcnjeQ1A2JcQdCZsKOiuycQlguFgjr9XrmALIViL\/caiy+m2gb5gd44u0rFFQpiFIKXtvrjNZwUu5ccI=","pkt_caplen":347,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtCi9yub6MgBALMKNIAAABAQgKwrkmebhM3CU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2309{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":1466,"pkt":"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","pkt_caplen":1466,"pkt_type":34525,"pkt_ipoffset":14}
+0893{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1605289715274,"flow_last_seen":1605289715333,"flow_tot_l4_data_len":2105,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1412,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"connect.facebook.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1659{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":993,"pkt":"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","pkt_caplen":993,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vowSbQ+TgBAB9ab9AAABAQgKuEzcRcK5Jns=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vowSbRMegBAB8qN1AAABAQgKuEzcRcK5Jns=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJfoEpI93hz5w9gBALOCFtAAABAQgKwrkmdDiITqQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuAGAGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vowSbRMegBgB9ar7AAABAQgKuEzcScK5JnsUAwMAAQEXAwMANeTuYHCau77p+TQl5mUr7ixBdVbzM344kNOIxSpITkCEFwpcTRLFaQgn2weF5lLAt5KqZuEt","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0561{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuAHwGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vswSbRMegBgB9YCwAAABAQgKuEzcScK5JnsXAwMAVyNq7dyoZKEk+QG8WlzcEIuBWqm8MVD+8NQuoEQ7cvc0BxrjNa8\/9YIYv6o6YQglem\/j\/nJwQJvUw98pony103hNsAiwgP323l4GpaMF3D03XLBH+vxZUA==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0784{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":344,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuASIGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vygSbRMegBgB9bEoAAABAQgKuEzcSsK5JnsXAwMA\/WHez4HjgzpR+e0AT0snmcB7El9raCPaLqEeDVY\/F5+bjnp+tssVmfY+NdrywuJT6vqyQEOix0E20kX2zKcc1U6COVb1CMoPn9qghUiex9CkxJV2w+6njOoTbdZrprDciPLl8z7GKmz63bfuM75dNvy3taXwDRc24yb5\/C82hfmuxHz4AXjYS\/CH9\/wQWJQE2sRcSzhzHwlcyy0wTZGY18TNfU9bj\/2XOEl6TJdw8uYl00Tos12x+h7zqVgyiQVb1rxQRKaoPlfNBCQ9RTki2fKbYjOFNz2ZHlZRtJVugfJKHveMcHFxp6peomxXyQTfa6ktIRmTllroRFk9gWs=","pkt_caplen":344,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUkNYqD4i29A2CgBALOAb2AAABAQgKwrkmmHB0nug=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0784{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":344,"pkt":"qtsDr8lk5EKm5WPyht1gCiKuASIGQCoBywEgSYsHmR3shSjf9ikqAyiA8DAAE\/rOsAwAAAADyFwBu3K5vygSbRMegBgB9bDoAAABAQgKuEzcisK5JnsXAwMA\/WHez4HjgzpR+e0AT0snmcB7El9raCPaLqEeDVY\/F5+bjnp+tssVmfY+NdrywuJT6vqyQEOix0E20kX2zKcc1U6COVb1CMoPn9qghUiex9CkxJV2w+6njOoTbdZrprDciPLl8z7GKmz63bfuM75dNvy3taXwDRc24yb5\/C82hfmuxHz4AXjYS\/CH9\/wQWJQE2sRcSzhzHwlcyy0wTZGY18TNfU9bj\/2XOEl6TJdw8uYl00Tos12x+h7zqVgyiQVb1rxQRKaoPlfNBCQ9RTki2fKbYjOFNz2ZHlZRtJVugfJKHveMcHFxp6peomxXyQTfa6ktIRmTllroRFk9gWs=","pkt_caplen":344,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtEx5yub7MgBALOJnIAAABAQgKwrkmnrhM3Ek=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDwMAAT+s6wDAAAAAMqAcsBIEmLB5kd7IUo3\/YpAbvIXBJtEx5yub8ogBALRJlgAAABAQgKwrkmnrhM3Ek=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605289715782,"flow_last_seen":1605289715782,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACgGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2RbtWoAAAAAoAL9IBbyAAACBAWgBAIICmcfa8wAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAp+EJkW7VroBJXgNkoAAACBAV4AQMDAwQCCArCuShfZx9rzA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2RbtWsAKfhDgBAB+10HAAABAQgKZx9r\/8K5KF8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1125{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0851{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1605289715782,"flow_last_seen":1605289715834,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.facebook.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605289715966,"flow_last_seen":1605289715966,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289715,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7B4AAAAAoAL9IFQFAAACBAWgBAIICqkvSd0AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAp+ENkW7dwgBALMFGYAAABAQgKwrkok2cfbAA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2307{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1466,"pkt":"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","pkt_caplen":1466,"pkt_type":34525,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1605289715782,"flow_last_seen":1605289716018,"flow_tot_l4_data_len":2105,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1412,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Facebook","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.facebook.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1668{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":994,"pkt":"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","pkt_caplen":994,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt3AAKf2ngBAB9VS1AAABAQgKZx9suMK5KJU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEACAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt3AAKgEzgBAB8lEsAAABAQgKZx9suMK5KJU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6rg79HT9v4ewfoBJXgOHBAAACBAV4AQMDAwQCCArCuSkJqS9J3Q==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7B8O\/R1AgBAB+2WcAAABAQgKqS9KFMK5KQk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7B8O\/R1AgBgB+960AAABAQgKqS9KF8K5KQkWAwECAAEAAfwDAz7PSjjgfHJf+nCfn3DPMxydUwVUjvYQFiNHK08caRmgIChBHphlkCrDONZuzjKATga3CNpgPdLG1nC8FJaIcfu7ACDa2hMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNKSgAAAAAAJAAiAAAfY29udGVudC1hdXRvZmlsbC5nb29nbGVhcGlzLmNvbQAXAAD\/AQABAAAKAAoACGpqAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApamoAAQAAHQAgphW3bcEnLefm+sIpksFu2OouFtq8r6bigf0SizCebCQALQACAQEAKwALCpqaAwQDAwMCAwEAGwADAgACCgoAAQAAFQC9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0853{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1605289715966,"flow_last_seen":1605289716024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"content-autofill.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0518{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEAGAGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt3AAKgEzgBgB9eN7AAABAQgKZx9sv8K5KJUUAwMAAQEXAwMANaH9kE70EVJtV1DDSBkEQx3iDCkWHzmcOn6XCYT5TkWq2Y02DcjUNtb2n0tU2GKt8EIZui0G","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0558{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gAWIEAHwGQCoBywEgSYsHmR3shSjf9ikqAyiA8R8Ag\/rOsAwAACXe67QBu2Rbt7AAKgEzgBgB9QrTAAABAQgKZx9syMK5KJUXAwMAV4668ZbiYffDBt++pTTpcgIdJqL5yB9rmBga9TuRIpkPti6ML50lrXGs6k2M+FsTO55gA5WdB3fLulP7A3+ty2OkaWTeJgp9kcoViDG2WV5NRFgtHSMPug==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0935{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":456,"pkt":"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","pkt_caplen":456,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAqATNkW7ewgBALOEbbAAABAQgKwrkpWWcfbL8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6rg79HUBv4e4kgBALMFoOAAABAQgKwrkpWqkvShc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAqATNkW7gMgBALREZqAAABAQgKwrkpWWcfbMg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoDKIDxHwCD+s6wDAAAJd4qAcsBIEmLB5kd7IUo3\/YpAbvrtAAqATNkW7l+gBALckTEAAABAQgKwrkpW2cfbMw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0894{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1605289715966,"flow_last_seen":1605289716084,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"content-autofill.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2071{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SH4gBAB9V5OAAABAQgKqS9KU8K5KWE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SawgBAB7FmfAAABAQgKqS9KU8K5KWE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1113{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":587,"pkt":"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","pkt_caplen":587,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SilgBAB6VetAAABAQgKqS9KU8K5KWE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0521{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7iQO\/SilgBgB9Q8UAAABAQgKqS9KXcK5KWEUAwMAAQEXAwMANf5npFq9zc9O6TvwXwmyAx2aEmjIbHnzCFkhRvzlplak9nE\/4VbH\/qauainJA3rMt5tLpl1p","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDvs7AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKuq4Bu2\/h7mQO\/SilgBgB9QjYAAABAQgKqS9KX8K5KWEXAwMAV4wi95mHQO3oqT5eaTeMDqyxuf1D6Qqc\/Rqvy1OYHBiLxtW+Ge\/zIgGYwV17hKcj\/Fdznb8gKqUOEHhEyXT9IbjARyD4aDFB9T\/Yw+hLh4b4LSEV6vWKjQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0937{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":458,"pkt":"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","pkt_caplen":458,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6rg79KKVv4e5kgBALOE3gAAABAQgKwrkplakvSl0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605289716168,"flow_last_seen":1605289716168,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":190,"flow_max_l4_data_len":190,"flow_avg_l4_data_len":190,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":43562,"dst_port":443,"l4_proto":"tcp"}
+0651{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":244,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/AL4GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lam\/a\/4e68gBgE1TyJAAABAQgKZPSVcMK4jAQXAwMAmbA2YtBqXOwsPZhf0xplQUhs5uebiQ6HrXX0rQcB3CzDNqt6KEFEtOrnLbiyKoAl0\/PfpLU5lSyfN4b6GWAPMuxRzKK1mYHeU6cm19ssJsGj28uoKpDNJuLbc68jHie5jcE8\/swMHjb\/rsshDlUuBkbS0PBg+fBq\/uDg8aBU7dQCoscpqfDhz7OaLw8PBcid6Woaoneonk0XRQ==","pkt_caplen":244,"pkt_type":34525,"pkt_ipoffset":14}
+0600{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":209,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/AJsGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanJS\/4e68gBgE1YEBAAABAQgKZPSVcMK4jAQXAwMAT0+KQ56NjlMHGW+d6G5ddduewRHnDyQJNOhFGSBeS16m4KVAja7XHlyuQrxKoq24Sn8bLVvUYgiRl0ogV926yAF+\/eBnK0DefdFCPgWpP6kXAwMAIh\/Eke2gVwnwKuWIWa9HbFAoJdRk5f1TigycRztSwvhmbFo=","pkt_caplen":209,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h7rzZWpyUgBALf8h0AAABAQgKwrkp2GT0lXA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h7rzZWp0PgBALj8fpAAABAQgKwrkp2GT0lXA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0694{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":277,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAN8GPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h7rzZWp0PgBgLjwvfAAABAQgKwrkp2WT0lXAXAwMAuvbpCprhIHZOm+s71xjln8W5wRXAEZMMYHzFfgrc8Qz4ihOFNdXXrcK7V3sZoCmBJ+9UP9pq7hG1hJyCeP+MFNZTxO2gaK55QvARJT791YHr2a9N\/48L6BIqY0g9tYfn4yZI8zlroZ226D4je2OGOYeBFXAt\/SWtduBHYRboL2SojJhXdPVjX\/gNGYSfvf2cQ4Gmy4NkAXucZYn6wYVA\/ALz1WSrztJHvD8qTVY2ZZ3gbVGKtvonmOvlwA==","pkt_caplen":277,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanQ+\/4fQzgBAE+8joAAABAQgKZPSVjcK5Kdk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2076{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbuqKr\/h\/aPZWp0PgBgLj5wNAAABAQgKwrkp2WT0lXAXAwMEs4xJrVzn3Q6AhrkKyNwQrOHMt4bRFYr4sACAMylt8icreiuTpKVtX5jz3k7PXfj9u6SV1qcVv\/70ITEEFgqeeF+uSB5TpNp0hsRcBvaU6\/n9GoOLBZ\/2ixS1qWPj0z4Vd8DLutO5+UsUUEeDI+9rq0mg8Y0b1p28F2aBUbgXGLDD2tevK3HvRUOiN90EsEj\/kC+ye7pqzMy6pIobquQn7nMW\/s7LcDSVi6uUQYDtSkPDlbzfars0WQvPzieE8EPOoZioR9fGGieI7j7N2+e26Z9uYsBhuTUcTvnpr+nwWygQim0qTCW13cexl8u6iukMeDUqdWWO4nh9+TAmO\/gHjDZq8toN1p2IrGonJ03LFcij8BXeYrVyXk\/MDEYee+ci3EQzCsZCNZnQlsVL4Dzp4ex1st\/hyCiA0I52Q08KCaomDXiusVPl3tzFgzbeV9ZxnHVXwcBAd2Jd79mY5QhjM\/LlYZ0u3mfzCQeQ8Aj3X2qSEo6cEwO3yq2q9zOHxcAs47hTjHu0ny4JdSaK36KvVMzI\/uhGkfy3B158UxTzke6NQteOpCq3qC5IYqrRVeqp3ntyMuj+pPP1M64hlh471j5B1TR1Ct88tV9ki4tiRIHM0B65XZ\/p2pJTyXK4ifXOih1mih\/QFT+wLG4j739mdWweGToDw4bSaJA1OvlPEws750XSCRwsmBP677lkQ2Dv2T3H6Nlnh6uqKAXkzRXZ6PlS92toOqcQXHWBTRidG7XuYmfukgn50qCzn5MGdqaCO2OlWOTx53deJibYLQqOJ+\/dT8m68FvzIcgtfBJgVI+3ApMhoqCdmlyFIMSYC9ZqAA2VD49vnY\/27Fd9lrlrTDHQpwk4u7Gklhcr1YaA4fo+K41KdpGL20bGaXJWF6akF+FKmhcT+UfqO9gLnnG+hojUi+M8vi5NtyrGW87+OHjX7gZNQgoRlnh1p4uRVf47VT7nZ7lSxIVS\/vtD9bw5vUoaylu3ISGnXNPqac6C7R+sTNBiMdhhNPdpiOP7Z8u2nl4d86ShBCrLE\/xc9H2fzhXUu8p1vrG9ysU7LobX1J+VQXSjyGTsMWEXsR9bQk+6Wnwt8OIS1TVQ57yHvHWatS07PhHxWOz3sxiBKfWBjwm2FwQAJFJVW4a+N6GsId2r\/gJ0+dcO4UJg2fSGy2iUS8LSBR2+KPllgJ6+y24T0KvT7xxwju6ORSuVdMY\/xq68IJStFisFLaPDM7+eS4zZPVX6OlgH6NDzLq69WQp32UkoqhC2dNdL\/MjlXWXVrRATs2Zl6M25+c0EMF8iH08W8EztXmyNtYzDuFuLLWJuTBrkzBCAD97g1fO7kKh898MrHYJwG\/P+qHRhXCfi4ULDUGNsfe4jz5pkigQyL6dft5D8KGWJ7HFJLJGlH4dsaeNbmJ8znq3NqjvHpArqlCopVsGX2ZGmz9thNu\/V1gr+ffFKryKM9AMB1V5IIBVWQAIYIUBXXyloTrmqVWkLwGQYtvpKscMEsnnNCjJOfwYr\/uLTbz3hcG\/ZerVyBxG4IkkiEmoUwUEGATar69plggfxn9oMysPnMPAy4mH36bPhMMPgtf6Dt4GIjXZX4WV+LAoo1R1jMg==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanQ+\/4f2jgBAFKL9LAAABAQgKZPSVjcK5Kdk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB32\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADqioBu9lanQ+\/4gcTgBAFVLWvAAABAQgKZPSVjcK5Kdk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289716,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605289717548,"flow_last_seen":1605289717548,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PaD4AAAAAoAL9ID+FAAACBAWgBAIICjGG9eUAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0445{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR75juz2g\/oBJXgHfiAAACBAV4AQMDAwQCCArCuS86MYb15Q==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PaD+L0e+ZgBAB+\/vbAAABAQgKMYb1\/cK5Lzo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1605289717548,"flow_last_seen":1605289717572,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"accounts.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0432{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR75nuz2pEgBALMPCFAAABAQgKwrkvVjGG9f0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2072{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":14617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1605289717548,"flow_last_seen":1605289717605,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"accounts.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2070{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR9FHuz2pEgBgLMNV7AAABAQgKwrkvXDGG9f2KGEnWFX\/fb5ERNscdU+CA8ZwYa1UuXrEFIwM8wmiHsWcEPYeoimiCYJNKr\/OwZ19JOQQ\/A8cu2kTcAo43fKLUNKUKXYXjXEaHWTpBvhchXb9WhjoJxUUP4+tR1kT1VHE4lWXjIHQtzswVwV6++5klLrjcOMRnT7H2sr8r7GItC4HpkBFd6EHxY4SKZy9kaYPgiyyPWkKzq4z\/ObdLl8VaV0a8ChbGmgILW4HXwly6Qu3u8SggY2n0r1Zt2VlxnzCbIIY1wQpADQBMOpfAMKjmpOg2Th7ndHNf8qj8mNJsq8Xbm0XJG+QbHfNfyro4r0DHtTrHXa5eOeV7tnxnBhAaRy4clhDmqceds8hrgnM3qaU1dZx1lJnherBjWYhkCNPojRyCxR\/N8Jkm7uYEHdLNIeJjoWZRAfPCTnrLsy6JMlSmHsNhDQvDbbGrZbafApVWXXFchAUY4rr03l9nXo0L6XwwXBSKlK81Z5MXNHe512xDpc7Gte7whuEUOCSlb\/JWcXxX7qHn1OGLWcJP+gMxF2HTh59\/TbOC\/exOy0lpP66YlYIryjBePG2q7eIYBDJNOTDZkKd+1YSe0QqbQxgAtU9mDa79\/AIgoyI4Y\/+8y1IHeIedGlV4GGD9SFjmOOrr3gyIAb0dt9NG8ejD6PLuYcn+5obgFSBZcXvfgZEon3gEqfzlNlDqD5ZlCGwog+8bpyajFN1CugPYQDdep5hH1oSgvnT7hxvWpXwldijwTlwM+th6imXQIMQp1MO9iXZVoJu84loL0DbQOiQ1jqmO34yuYrecqr6DmyH97W5g\/Y9Y+H2eY4af2bBiYvaG81xCwjvynaJYtvNDPF5I1tCt5qea22J8ZLA3RsIlBYpDkA4dgErTwSUEg5xBKrb6sUTRtOxKitfhvfbDhcibeWLOIGoOi6aw2oY\/cfpjpA4fkHZdI4kJJOPPfZ\/\/DU+sOsLwH0+V+s46kVVB5gh0PH4BnAjIOupKeofDO23Rrtx75ZuqCJDLwKCdA4kQmzXL9lOZkEJNlCduZuxU9To30NgZRtHw9SxE1QSB54QFQLURAzA3UsAk8o2VjwLurmfmQZRvom0yT0s9QUPo2THFcAmd0oHHQCh6+TdsERhDORXnEp4TggVLBMguvJ1h5hVMsw\/635lsJQ2QdsgqtbhNbsgCIb5frOwouMEttpCHIqS+rVUWuYdUwHfjqleiraCHHzjPV4ixYGw2YR\/Z2\/8NozR8bfcY8hioD4q0X\/\/42NYqOhaUoSDXPz7ZlSSeA+6vP7NQFtql2mfo5DHqcTqIZPtNO+WA3NHRzsP1P7bG3wbWtt1y44zHDRLPwjLHsvff12wY4jc\/mE6w2sjA+my8quOI7bZdMxpZdlyChknfsjrYQvAfg40mw6\/ftGsfwvKwLouJ6Xe81LZEll2lswt95FyCWwa3e1DKbYQdrfIEkkYKLvxiJ9B5GHXNxqCS7IJqgW2XXgLlleADLo838jlWB6tdh0jNu\/qFdPuxsZfccCdH7aErcgW0OfY2aZa+WMhVaopoekBQ1c6DYxYG8cuoFf8lokwizw7cS0I0b1P4TBqQoaQQ8E1Gixt5CxbCYp+UFbrLYvZQfzoTaQ==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0774{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":336,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARoGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR+Qnuz2pEgBgLMAQBAAABAQgKwrkvXDGG9f3rIB3eEKckLMvhY+GHUrI4sgmYD2Q+RodpdU+tNu9cwZYPRbhe4Bo2\/\/GYoNVg3ly1baRJdl2Vvs9Doq42cHc\/8hoDo\/7SFtuF7sah5e6xixjx4DdyEg2gb\/7sy8LyQwSnZC9\/butLHfcwqTwmcWUHhMjxyHdMu7lIzUwhmNSfjPmPcgZHRLvcDK4rguu3vJK2USqOFct5VVXw4ID+DDTCPoZggX8SWMHiS+IiDB\/GcIAUvpxP1Ven4f5IAweDqYWFGkaxgsrAMoR98Z+LHy+3wiD1v5JiB4oXAZjIeshEUJfzycqdK\/reau+RJkE9Wem2bZIt4qmIkZb4","pkt_caplen":336,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0fRRgBAB9fThAAABAQgKMYb2HsK5L1w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0fkJgBAB8vAsAAABAQgKMYb2HsK5L1w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD67DACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0foDgBAB8e8zAAABAQgKMYb2HsK5L1w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0520{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gD67DAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PakSL0foDgBgB9SuvAAABAQgKMYb2IcK5L1wUAwMAAQEXAwMANfiBBIBSlZbpTkN3wFzubDjNT\/1Stup\/aH9EwiUEsf9up73pSLBJ1cyFh32shP6OD207NpWh","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0560{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gD67DAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PaoSL0foDgBgB9UcHAAABAQgKMYb2IcK5L1wXAwMAV1WIaxghzxNYBkinkrknNbKyqJQUkpxk8lmnVdxr3E4WPSq3kbgrnUA8kdcN4iUgJ65YPDDZTmsAOAuLiPA0PjBQnII8W2p\/JHT2ER73JU\/mYR22sxy4FA==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0779{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":341,"pkt":"qtsDr8lk5EKm5WPyht1gD67DAR8GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACANn74Bu+7PauCL0foDgBgB9fDhAAABAQgKMYb2IcK5L1wXAwMA+iPXjhZgajtg6cR4ETNhplUt2+GyGWg1BhCAKH1zP2l\/ig81VnxAABGuRHflraOatzn50zVQcLJTAajeJ6jjQdgcm+cqP4EQN3UvhPM9tZ\/TXAHZwXJL0e\/zSbsjtAFjx3OS9QjJq7l1Egg1FDsqOzu+Rf1DF+UXwPpsbze3Wqe6wNdslSGWjK+lbgQ7JcmLxJKMj\/B6djIMPCo1GVw4NL9EL6eBLXfQybYV3h6x61WOJkXLxv1ssahTxgsua420mJ3K3BczgLcWcgh1WjAsLGC9JditEI2nj1USFubnFD91QRGUF\/DEICuynGGgLV02MPpg9EdKjkbaRNY=","pkt_caplen":341,"pkt_type":34525,"pkt_ipoffset":14}
+0434{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289717,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIA0qAcsBIEmLB5kd7IUo3\/YpAbufvovR+gPuz2qEgBALOOV\/AAABAQgKwrkvhjGG9iE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605289718346,"flow_last_seen":1605289718346,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":56940,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDn7LACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAAcg3mwBu1MbKQQ2nwhTgBBf5ZGnAAABAQgKdGByysK4e5A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605289718347,"flow_last_seen":1605289718347,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51472,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAqmhACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyRABu5dQgwPxqZaUgBAHqUTfAAABAQgKOIhalcK4e5A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605289718347,"flow_last_seen":1605289718347,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54308,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA2s5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1CQBu69kJZnLb6S2gBAFvhEdAAABAQgKcHSqtcK4e5A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605289718347,"flow_last_seen":1605289718347,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::200a","src_port":57130,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAtTRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACAK3yoBu80FVZetwjn1gBAB9Q24AAABAQgKVxL7HMK4e4A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAByAqAcsBIEmLB5kd7IUo3\/YpAbvebDafCFNTGykFgBALfUzsAAABAQgKwrkyWnReVSQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvfKq3COfXNBVWYgBALvWWfAAABAQgKwrkyYVcQ4ow=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvJEPGplpSXUIMEgBALh6bdAAABAQgKwrkyYTiGPeg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289718,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvUJMtvpLavZCWagBAL1W6tAAABAQgKwrkyYnBykDw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":2,"flow_packet_id":255,"flow_first_seen":1605289713743,"flow_last_seen":1605289719719,"flow_tot_l4_data_len":153429,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":601,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.pinterest.fr","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605289720502,"flow_last_seen":1605289720502,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38402,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289720,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDE+lACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElgIBuwZ3AS1n9K5wgBAD7qJGAAABAQgK1mI428K4iuQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289720,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWAmf0rnAGdwEugBAMdPzqAAABAQgKwrk63tZgJbc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605289722442,"flow_last_seen":1605289722442,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":46918,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289722,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCa8jACAGQCoBywEgSYsHmR3shSjf9ikmABkBAAB6CwAAAAAAAAAAt0YBu4XaMRXguiMogBAB9ZuaAAABAQgKldeDu8K4iwE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605289722610,"flow_last_seen":1605289722610,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38406,"dst_port":443,"l4_proto":"tcp"}
+0434{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289722,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDvD\/ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElgYBu\/ADYY+SLdnAgBBf+pZ\/AAABAQgK1mJBF8K4kuY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289722,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAGQEAAHoLAAAAAAAAAAAqAcsBIEmLB5kd7IUo3\/YpAbu3RuC6IyiF2jEWgBAM4PFAAAABAQgKwrlC85XVazg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289722,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWBpIt2cDwA2GQgBAQS035AAABAQgKwrlDCNZgKSs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605289726574,"flow_last_seen":1605289726574,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51446,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289726,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD7DqACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACADyPYBuy7xct5PemhygBASWTvxAAABAQgKOIh6ucK4opo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605289726582,"flow_last_seen":1605289726582,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47682,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289726,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBy5HACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAKukIBu0Ah3sUn+OyVgBAB9Rf+AAABAQgKqS9zVcK4oqI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289726,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvI9k96aHIu8XLfgBAL06eYAAABAQgKwrlSlDiGZZ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289726,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbu6Qif47JVAId7GgBALvHMdAAABAQgKwrlSpKktXm0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605289728586,"flow_last_seen":1605289728586,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":48890,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289728,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDHlsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACADvvoBu4vV8Grv31OMgBACdmBfAAABAQgK5dFc6cK4oqI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605289728586,"flow_last_seen":1605289728586,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40560,"dst_port":443,"l4_proto":"tcp"}
+0432{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289728,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCU2wACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAEnnABu1oBJQ4\/rrWNgBAQLrKDAAABAQgKyRWFssK4oqI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289728,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu++u\/fU4yL1fBrgBALkLtnAAABAQgKwrla3eXPQIw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289728,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbuecD+utY1aASUPgBAZXAuxAAABAQgKwrla48kTaxY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605289732959,"flow_last_seen":1605289732959,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289732,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACgGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNp7gAAAAAoAL9IOnRAAACBAWgBAIICtZiaYQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605289732972,"flow_last_seen":1605289732972,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp"}
+0444{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289732,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HIoAAAAAoAL9IMybAAACBAWgBAIIClhuYDIAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWkkELYhojTae5oBJXgL46AAACBAV4AQMDAwQCCArCuWtz1mJphA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNp7lBC2IbgBAB+0IeAAABAQgK1mJpssK5a3M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1125{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4AiUGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNp7lBC2IbgBgB+9rPAAABAQgK1mJps8K5a3MWAwECAAEAAfwDA+FylCmx+RqDY+2Dyo1rIa8zFwFxgekrVpZ57dzQTQpcIGR5x9GwiLhejRSyDSJCULhaEPuWcuSSd\/4qtnhsMGhMACAqKhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOKigAAAAAAGQAXAAAUYXNzZXRzLnBpbnRlcmVzdC5jb20AFwAA\/wEAAQAACgAKAAiKigAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKYqKAAEAAB0AIL6rS5lo+mbnIbk9M9oSvrL6u11X7ZgUutxoF0rBS5t\/AC0AAgEBACsACwpqagMEAwMDAgMBABsAAwIAApqaAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0840{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1605289732959,"flow_last_seen":1605289733006,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"assets.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0445{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgG99MLvByLoBJXgOQ\/AAACBAV4AQMDAwQCCArCuWuDWG5gMg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HItoBvfUgBAB+2giAAABAQgKWG5gYcK5a4M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1125{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HItoBvfUgBgB+1dmAAABAQgKWG5gYcK5a4MWAwECAAEAAfwDA\/e7AWI4IOqe24e3Dy8GtjgX\/HGd3ql+YvtlwSVKxHHMIG0UA7UP8cWM1+OIpoJabPxwYFuj3vVPyVClxgciYoq4ACAqKhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZM6OgAAAAAAHQAbAAAYd3d3Lmdvb2dsZS1hbmFseXRpY3MuY29tABcAAP8BAAEAAAoACgAISkoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArAClKSgABAAAdACB3ZVhMGdknHjr8mYsq4A0iDM3P9MVWSPmKERKJV0rOKQAtAAIBAQArAAsKuroDBAMDAwIDAQAbAAMCAAL6+gABAAAVAMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1605289732972,"flow_last_seen":1605289733019,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google-analytics.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0432{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWkkELYhsjTam+gBALMDa6AAABAQgKwrlrnNZiabM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2296{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0896{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":34,"flow_packet_id":6,"flow_first_seen":1605289732959,"flow_last_seen":1605289733059,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"assets.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2288{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC2eHgBAB9TpSAAABAQgK1mJp58K5a58=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC2zzgBAB8DTrAAABAQgK1mJp58K5a58=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2304{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1999{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1244,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABKYGPSoETkIAHQAAAAAAAAAAAIQqAcsBIEmLB5kd7IUo3\/YpAbuWkkELcl8jTam+gBgLMCwPAAABAQgKwrlrn9ZiabN3d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMDcxMTQ0NTJaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQBCEMxaOGM0GLpuhDcnQSm4AAGA8yMDIwMTEwNzExNDQ1MlqgERgPMjAyMDExMTQxMDU5NTJaMA0GCSqGSIb3DQEBCwUAA4IBAQCImBufb295Au2ju2lBCnSUKecQwVg9gkN6+y60LAZnbHKZEtr+Lda+UXfoK+l1YxaCqc9JLrsr4yUrVuWDwRxH0toRCTmGGUR1HNlQU5BSRgxjgPVigRozTEGDyIG2vw3NYmRMnZjbfP1UrZzwnVZzj5IoQyLzbQpl32Lbbr\/bdDDEwFgQMUn5Amod0fxMXoc8DZjVCIsQLbr0ZulxdcJ15CaK\/qvh8pChLhnvH1n\/AwOhcIVlVBpT9V0l7u\/uP1rrFrxi8PCEFwKJscSV3vQwFCEg2HYfT4kSA5rWhfeVL8L7H9ouqSE+9QM1pVNOcBI21XL+i4YVwGNzOS8NUvBEFgMDASwMAAEoAwAdIBvo4IXnMESClBPBkpeIDsmAf6cIcsXcbDqb0qa7UDR4CAQBAIgt2m8ZIO8W\/A+1pUtKFDcCxG3GZoIT370SqWb3YXDiBIN4XzhNFN6u6GgyWB\/n6yWtk2gZfYIXuc7jqb5pwViO93A7ELj1dhOnR\/Iw4qUfkhNqwDnllUbqEsKYa+brudlTRn9\/Ruepu3ZoUcts7cn3tdHwScP1TfuKHUHpJXKBjrEFsjJu+7rg+weLnHUMrNIk5tNBIprZJS4d+lzX2nWkzp35AKYoh7R5PUV2GdmYfnIcw+nEZTf2O43LhBAEtbv1pxOwXdQBGK6N5HpQn\/dhZO8eSgEwsh778H\/M0H7I0X3sfByTw7cznGWVGtM3lYJr5c9KEX\/Li+mY6olzzTQWAwMABA4AAAA=","pkt_caplen":1244,"pkt_type":34525,"pkt_ipoffset":14}
+2676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":34,"flow_packet_id":11,"flow_first_seen":1605289732959,"flow_last_seen":1605289733060,"flow_tot_l4_data_len":6207,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":564,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Pinterest","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"assets.pinterest.com","server_names":"*.pinterest.com,pinterest.in,*.pinterest.co,pinterest.co,*.pinterest.pe,pinterest.pe,*.pinterest.be,pinterest.be,*.pinterest.in,*.pinterest.ph,*.pinterest.ec,pinterest.ph,*.pinterest.cl,*.pinimg.com,*.pinterest.es,pinterest.es,*.pinterest.nz,pinterest.nz,pinterest.ec,pinterest.hu,pinterest.ca,pinterest.id,*.pinterest.nl,pinterest.nl,*.pinterest.tw,pinterest.tw,*.pinterest.th,pinterest.th,*.pinterest.id,*.pinterest.vn,*.pinterest.hu,pinterest.vn,*.pinterest.uk,pinterest.uk,*.pinterest.ru,pinterest.ru,*.pinterest.it,pinterest.it,pinterest.fr,pinterest.cl,*.pinterest.fr,*.pinterest.jp,*.pinterest.ca,pinterest.com,pin.it,*.pinterest.se,*.pinterest.pt,*.pinterest.mx,*.pinterest.kr,*.pinterest.ie,pinterest.engineering,*.pinterest.dk,*.pinterest.de,*.pinterest.ch,*.pinterest.at,*.pinterestmail.com,*.pinterest.engineering,*.pinterest.info,pinterest.info,pinimg.com,pinterestmail.com,pinterest.de,pinterest.dk,pinterest.ie,pinterest.jp,pinterest.kr,pinterest.mx,pinterest.pt,pinterest.se,pinterest.at,pinterest.ch,pinterest.co.at,*.pinterest.com.uy,pinterest.co.kr,pinterest.co.uk,*.pinterest.com.au,pinterest.com.au,pinterest.com.mx,*.pinterest.co.nz,pinterest.co.nz,pinterest.com.pe,pinterest.com.uy,*.pinterest.co.in,pinterest.com.py,*.pinterest.com.py,pinterest.com.bo,*.pinterest.com.bo,pinterest.com.ec,*.pinterest.com.ec,pinterest.co.in,*.pinterest.com.pe,*.pinterest.com.mx,pinterest.com.vn,*.pinterest.com.vn,*.pinterest.co.uk,*.pinterest.co.kr,*.pinterest.co.at,*.testing.pinterest.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Pinterest, Inc., CN=*.pinterest.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"1E:D0:5D:9F:0D:82:46:B3:60:5F:11:FB:64:D5:28:35:37:40:7A:4E"}}
+0432{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC3JfgBAB9S94AAABAQgK1mJp6cK5a58=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4ACAGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC3blgBAB8Sr2AAABAQgK1mJp6cK5a58=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0559{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4AH0GQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqb5BC3blgBgB9RELAAABAQgK1mJp68K5a58WAwMAJRAAACEgaNang8FK8LSdyojqq4y5YGlQGQm\/5cxwIraPyaVriXQUAwMAAQEWAwMAKAAAAAAAAAAAdgfoh8okYLu+jzSq3JT4o3gSx7unHK4nzromGNrNgo0=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0568{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gBE+4AIMGQCoBywEgSYsHmR3shSjf9ikqBE5CAB0AAAAAAAAAAACElpIBuyNNqhtBC3blgBgB9embAAABAQgK1mJp68K5a58XAwMAXgAAAAAAAAABzSSRAhr6zN1XdBsxJuzM7OCTixqzxoOHEHgN1hvKuwiWkto2bbBMsRVIJPJEirmTRf8QBvD3g\/IQ2xHTw+hZ42+KacKOLmz\/pKM3kboYI7GDQImdOec=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgG99QLvB6QgBALMFy2AAABAQgKwrlrtVhuYGE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1605289732972,"flow_last_seen":1605289733177,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google-analytics.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2075{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1080{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":563,"pkt":"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","pkt_caplen":563,"pkt_type":34525,"pkt_ipoffset":14}
+0433{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBvyMgBAB9WCUAAABAQgKWG5g\/8K5a7w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0434{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBwFEgBAB8lvfAAABAQgKWG5g\/8K5a7w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0434{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBwMhgBAB71oFAAABAQgKWG5g\/8K5a7w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0519{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HpBoBwMhgBgB9ZZlAAABAQgKWG5hAcK5a7wUAwMAAQEXAwMANSBkGOciRxn+DhoEuKPUPdeMDaN2FoclInMhiw86+q9tA94z7O4GEfyuGpUa4EF5CUzM+Gxx","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HtBoBwMhgBgB9YHrAAABAQgKWG5hAsK5a7wXAwMAV9Z0f\/aTIkJ\/8J9g6vFBI7bMcWLX+ScKw5ipxNKorRXzbm2lIJhhiKr1X0WW94xQUQ41grlgvgHY9RYV50x4Jd\/0HE1zd0yOV\/vwg+YZc9nl4K2npl2Cvw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0792{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":351,"pkt":"qtsDr8lk5EKm5WPyht1gD7s\/ASkGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsEYBuwu8HyxoBwMhgBgB9YFKAAABAQgKWG5hBcK5a7wXAwMBBE6c5eFodxV47c0sCu2TMFuLlXpjC3JpEKOiKXyV9XL3nd\/hGeW5lWO+C2cchhQxGq0n3DqgdNC1VPVVabt\/T2PxuK4JN+5pxPggU8ZMtAdU4SkkKMXk0I7gHOTbovaOvzpdtrD10TJfA1HT0nh5LU0wnCBSWO7WUh+XjMR57g7DvriR1GGimqCWehg93jLkGOViVXX8IEgCjWujKvYxn2Y9upJ9HsKLuLTeBI+Y5pwUDMRwI+bVFqhRrg3DnE\/iqcU\/FdD2\/N1McpvsGtpNOLuQRy1j7ghA3XTz36WxjuwGCEM4bOPBNhaqEN1MBRznFDQn7l1rRb2lxgUMey8pOU5t4vZc","pkt_caplen":351,"pkt_type":34525,"pkt_ipoffset":14}
+0434{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuwRmgHAyELvB7QgBALOE\/hAAABAQgKwrlsVVhuYQE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605289733399,"flow_last_seen":1605289733399,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp"}
+0443{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxlgkAAAAAoAL9IKzvAAACBAWgBAIICsW6TI0AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0445{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdlem4qAcsBIEmLB5kd7IUo3\/YpAbucsmOjoioAcZYKoBJXgB0AAAACBAV4AQMDAwQCCArCuW0jxbpMjQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxlgpjo6IrgBAB+6D8AAABAQgKxbpMosK5bSM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":36,"flow_packet_id":4,"flow_first_seen":1605289733399,"flow_last_seen":1605289733421,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"js-agent.newrelic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0433{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdlem4qAcsBIEmLB5kd7IUo3\/YpAbucsmOjoisAcZgPgBALMJWdAAABAQgKwrltR8W6TKM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1843{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0879{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1605289733399,"flow_last_seen":1605289733466,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"js-agent.newrelic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1833{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo6ZDgBAB9ZqRAAABAQgKxbpM0MK5bUk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo6pbgBAB85Z7AAABAQgKxbpM0MK5bUk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1838{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1847{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1844{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdlem4qAcsBIEmLB5kd7IUo3\/YpAbucsmOjsosAcZgPgBgLMFjYAAABAQgKwrltScW6TKMNAQELBQADggEBAKIdaYoKjsQUgyoqEk05J5BO8I2s0pZiRzZektH6xZO1NwdlKdL0U1BryfT+NPXduB36\/NwUrFaUJ5xCqgRNt+1Y2ZnSSeYgL9Ond7gqiRrvp8+GLdZT6QuTnE6r2UXupISF\/zTkDsC7pc5flYmFcKrBXezPK9PZg98DyoGnAjK3d2EQJU7ZdPPZeYK1JnC0UryPM9eKrhnQ\/JKtL7o8oEhYR179IFaVIMFyHatmmaTVeDdIG5+yTDdnev1C0tNWntMdjsQMaJa2R1EQ93vrFQlk9fnwYxYtPd8jQjqTY8yrr09XBsf+FFVizicRGeH0Qu0iMGs1GkoFgKRl38zLb9AWAwMGDxYABgsBAAYHMIIGAwoBAKCCBfwwggX4BgkrBgEFBQcwAQEEggXpMIIF5TCBnqIWBBQnN6sZ+rEF+sP3dIHQ5lzluT6oixgPMjAyMDExMTEwMDA3MDJaMHMwcTBFMAkGBSsOAwIaBQAEFBLq30bMCIA4c2C2WmkWAcwMteniBBSpK4fhziRHOxu\/z4U3AlWdDZRY5gIMRcWik9P0NjekLTBzgAAYDzIwMjAxMTExMDAwNzAyWqARGA8yMDIwMTExNTAwMDcwMlqhAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQACvM7doTFvMiUjx5TizkeeqQLvGfWJq7tTztQuAKWB0txlI0s1blrKdkuRGwB9sJ0L6QjRZ7k\/WKyA9XfPA7fmQsgxxdGTdLtaxhjbCy9eNlalFeuZKdfpTF4+edjYlEH994CXdlecf+mDR\/tj+GmNuRT1\/fsRRIgn+pl4FdMQ8fZNLdYZ1s7XaX9NZjdlNRViuTII7\/A\/Zqn2cyzxhc\/1zcEMIr0z6FA4v2COl8J2+8fXYZO2PWSjfqpMIYGgSykMRAC0pLef3bwABzSiyaY4e1PFAx4lnkc7ei8IVqfF90vksLZz1TeWs8C0z3qOOfjScFpZVQCOSB4QTmIToyVeoIIELDCCBCgwggQkMIIDDKADAgECAgwQF9wx7V3hFNRFqzswDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExLTArBgNVBAMTJEdsb2JhbFNpZ24gQ2xvdWRTU0wgQ0EgLSBTSEEyNTYgLSBHMzAeFw0yMDEwMjYwNjQ4MjJaFw0yMTAxMjYwNjQ4MjJaMH8xCzAJBgNVBAYTAlNHMRswGQYDVQQKExJHbG9iYWxTaWduIFB0ZSBMdGQxFTATBgNVBAUTDDIwMTkwNTE3MDA0NjE8MDoGA1UEAxMzR2xvYmFsU2lnbiBDbG91ZFNTTCBDQSAtIFNIQTI1NiAtIEczIE9DU1AgUmVzcG9u","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+2743{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":36,"flow_packet_id":12,"flow_first_seen":1605289733399,"flow_last_seen":1605289733468,"flow_tot_l4_data_len":6157,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":513,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"js-agent.newrelic.com","server_names":"f4.shared.global.fastly.net,*.500px.com,*.500px.net,*.500px.org,*.acceptance.habitat.sh,*.api.swiftype.com,*.art19.com,*.brave.com,*.chef.co,*.chef.io,*.cookpad.com,*.evbstatic.com,*.eventbrite.com,*.experiencepoint.com,*.fs.pastbook.com,*.fs.quploads.com,*.ftcdn.net,*.fubo.tv,*.getchef.com,*.githash.fubo.tv,*.habitat.sh,*.inspec.io,*.issuu.com,*.isu.pub,*.jimdo-dev-staging.com,*.jimdo-stable-staging.com,*.lulus.com,*.mansion-market.com,*.marfeel.com,*.massrel.io,*.meetu.ps,*.meetup.com,*.meetupstatic.com,*.newrelic.com,*.opscode.com,*.perimeterx.net,*.production.cdn.art19.com,*.staging.art19.com,*.staging.cdn.art19.com,*.swiftype.com,*.tissuu.com,*.video.franklyinc.com,*.wikihow.com,*.worldnow.com,500px.com,500px.net,500px.org,a1.awin1.com,acceptance.habitat.sh,api.swiftype.com,app.birchbox.com,app.staging.birchbox.com,app.staging.birchbox.es,art19.com,brave.com,cdn-f.adsmoloco.com,cdn.evbuc.com,cdn.polyfills.io,chef.co,chef.io,content.gamefuel.info,evbuc.com,experiencepoint.com,fast.appcues.com,fast.wistia.com,fast.wistia.net,fast.wistia.st,fubo.tv,getchef.com,githash.fubo.tv,habitat.sh,hbbtv.6play.fr,houstontexans.com,insight.atpi.com,inspec.io,jimdo-dev-staging.com,jimdo-stable-staging.com,link.sg.booking.com,mansion-market.com,media.bunited.com,meetu.ps,meetup.com,meetupstatic.com,onairhls.malimarcdn.net,opscode.com,perimeterx.net,polyfill.webservices.ft.com,qa.polyfills.io,raiders.com,s.sg.booking.com,s.swiftypecdn.com,static.birchbox.com,swiftype.com,viverepiusani.it,wikihow.com,wistia.com,www.dwin2.com,www.houstontexans.com,www.raiders.com,www.wada-ama.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=f4.shared.global.fastly.net","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"BE:28:82:77:5B:06:41:1F:70:84:BD:A4:B9:FB:F0:BC:B1:B5:E3:A0"}}
+1847{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo65zgBAB9ZJfAAABAQgKxbpM0sK5bUk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","pkt_oversize":false,"pkt_ts":1605289733,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBe6sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXpunLIBuwBxmA9jo7KLgBAB845JAAABAQgKxbpM0sK5bUk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0550{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1605289712203,"flow_last_seen":1605289712420,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:807::200a","src_port":40876,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1605289712203,"flow_last_seen":1605289712420,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:807::200a","src_port":40876,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":12,"flow_packet_id":41,"flow_first_seen":1605289714558,"flow_last_seen":1605289715083,"flow_tot_l4_data_len":9192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":224,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":47032,"dst_port":443,"l4_proto":"tcp"}
+0515{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":22,"flow_packet_id":126,"flow_first_seen":1605289717548,"flow_last_seen":1605289731068,"flow_tot_l4_data_len":53771,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2482,"flow_avg_l4_data_len":426,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200d","src_port":40894,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":35,"flow_packet_id":61,"flow_first_seen":1605289732972,"flow_last_seen":1605289733399,"flow_tot_l4_data_len":26817,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45126,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":36,"flow_packet_id":48,"flow_first_seen":1605289733399,"flow_last_seen":1605289733529,"flow_tot_l4_data_len":20483,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":426,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7a6e","src_port":40114,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1605289726574,"flow_last_seen":1605289726621,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51446,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1605289726574,"flow_last_seen":1605289726621,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51446,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1605289718347,"flow_last_seen":1605289718378,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51472,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1605289718347,"flow_last_seen":1605289718378,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51472,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":16,"flow_packet_id":224,"flow_first_seen":1605289715133,"flow_last_seen":1605289716126,"flow_tot_l4_data_len":313269,"flow_min_l4_data_len":32,"flow_max_l4_data_len":31440,"flow_avg_l4_data_len":1398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2003","src_port":51582,"dst_port":443,"l4_proto":"tcp"}
+0543{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1605289720502,"flow_last_seen":1605289720592,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38402,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1605289720502,"flow_last_seen":1605289720592,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38402,"dst_port":443,"l4_proto":"tcp"}
+0543{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1605289722610,"flow_last_seen":1605289722642,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38406,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0499{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1605289722610,"flow_last_seen":1605289722642,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38406,"dst_port":443,"l4_proto":"tcp"}
+0558{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":21,"flow_packet_id":50,"flow_first_seen":1605289716168,"flow_last_seen":1605289716373,"flow_tot_l4_data_len":33785,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":675,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":43562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0514{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":21,"flow_packet_id":50,"flow_first_seen":1605289716168,"flow_last_seen":1605289716373,"flow_tot_l4_data_len":33785,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":675,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":43562,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1605289726582,"flow_last_seen":1605289726637,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47682,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1605289726582,"flow_last_seen":1605289726637,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47682,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":18,"flow_packet_id":71,"flow_first_seen":1605289715274,"flow_last_seen":1605289715612,"flow_tot_l4_data_len":69305,"flow_min_l4_data_len":32,"flow_max_l4_data_len":12452,"flow_avg_l4_data_len":976,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f030:13:face:b00c::3","src_port":51292,"dst_port":443,"l4_proto":"tcp"}
+0544{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1605289718346,"flow_last_seen":1605289718372,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":56940,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1605289718346,"flow_last_seen":1605289718372,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":56940,"dst_port":443,"l4_proto":"tcp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":3,"flow_packet_id":12778,"flow_first_seen":1605289714142,"flow_last_seen":1605289717307,"flow_tot_l4_data_len":20547303,"flow_min_l4_data_len":32,"flow_max_l4_data_len":65268,"flow_avg_l4_data_len":1608,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38512,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":4,"flow_packet_id":17,"flow_first_seen":1605289714142,"flow_last_seen":1605289714258,"flow_tot_l4_data_len":6339,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":372,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38514,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":5,"flow_packet_id":18,"flow_first_seen":1605289714142,"flow_last_seen":1605289714259,"flow_tot_l4_data_len":6359,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":353,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38516,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":6,"flow_packet_id":15,"flow_first_seen":1605289714142,"flow_last_seen":1605289714258,"flow_tot_l4_data_len":6299,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38518,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":7,"flow_packet_id":15,"flow_first_seen":1605289714142,"flow_last_seen":1605289714258,"flow_tot_l4_data_len":6299,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38520,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":8,"flow_packet_id":15,"flow_first_seen":1605289714142,"flow_last_seen":1605289714259,"flow_tot_l4_data_len":6299,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38522,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":34,"flow_packet_id":52,"flow_first_seen":1605289732959,"flow_last_seen":1605289733342,"flow_tot_l4_data_len":28658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":551,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::84","src_port":38546,"dst_port":443,"l4_proto":"tcp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":20,"flow_packet_id":55,"flow_first_seen":1605289715966,"flow_last_seen":1605289733391,"flow_tot_l4_data_len":8134,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::200a","src_port":47790,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":15,"flow_packet_id":808,"flow_first_seen":1605289714782,"flow_last_seen":1605289715303,"flow_tot_l4_data_len":1807508,"flow_min_l4_data_len":32,"flow_max_l4_data_len":16688,"flow_avg_l4_data_len":2237,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a04:4e42:1d::720","src_port":57050,"dst_port":443,"l4_proto":"tcp"}
+0545{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1605289714251,"flow_last_seen":1605289714288,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:13e2","src_port":34626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0501{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1605289714251,"flow_last_seen":1605289714288,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:13e2","src_port":34626,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1605289718347,"flow_last_seen":1605289718378,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54308,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1605289718347,"flow_last_seen":1605289718378,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54308,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":17,"flow_packet_id":116,"flow_first_seen":1605289715221,"flow_last_seen":1605289715740,"flow_tot_l4_data_len":136730,"flow_min_l4_data_len":32,"flow_max_l4_data_len":16944,"flow_avg_l4_data_len":1178,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54416,"dst_port":443,"l4_proto":"tcp"}
+0544{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1605289714250,"flow_last_seen":1605289714281,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33156,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1605289714250,"flow_last_seen":1605289714281,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33156,"dst_port":443,"l4_proto":"tcp"}
+0544{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1605289710318,"flow_last_seen":1605289710576,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1605289710318,"flow_last_seen":1605289710576,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33164,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1605289714250,"flow_last_seen":1605289714288,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":58726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1605289714250,"flow_last_seen":1605289714288,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":58726,"dst_port":443,"l4_proto":"tcp"}
+0526{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":19,"flow_packet_id":171,"flow_first_seen":1605289715782,"flow_last_seen":1605289724655,"flow_tot_l4_data_len":155615,"flow_min_l4_data_len":32,"flow_max_l4_data_len":12452,"flow_avg_l4_data_len":910,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a03:2880:f11f:83:face:b00c::25de","src_port":60340,"dst_port":443,"l4_proto":"tcp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":2,"flow_packet_id":2804,"flow_first_seen":1605289713743,"flow_last_seen":1605289734948,"flow_tot_l4_data_len":3761459,"flow_min_l4_data_len":32,"flow_max_l4_data_len":13656,"flow_avg_l4_data_len":1341,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33262,"dst_port":443,"l4_proto":"tcp"}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":14,"flow_packet_id":33,"flow_first_seen":1605289714658,"flow_last_seen":1605289714873,"flow_tot_l4_data_len":8379,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":253,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:7854","src_port":33280,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1605289728586,"flow_last_seen":1605289728804,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1605289728586,"flow_last_seen":1605289728804,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40560,"dst_port":443,"l4_proto":"tcp"}
+0515{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":13,"flow_packet_id":107,"flow_first_seen":1605289714590,"flow_last_seen":1605289716476,"flow_tot_l4_data_len":42420,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":396,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2004","src_port":40694,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1605289728586,"flow_last_seen":1605289728804,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":48890,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1605289728586,"flow_last_seen":1605289728804,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":48890,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1605289718347,"flow_last_seen":1605289718378,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::200a","src_port":57130,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1605289718347,"flow_last_seen":1605289718378,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::200a","src_port":57130,"dst_port":443,"l4_proto":"tcp"}
+0544{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1605289722442,"flow_last_seen":1605289722621,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":46918,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1605289722442,"flow_last_seen":1605289722621,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:1901::7a0b::","src_port":46918,"dst_port":443,"l4_proto":"tcp"}
+0149{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":17657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pinterest.pcap"}
diff --git a/tests/result/nDPId_pps.pcap.txt b/tests/result/nDPId_pps.pcap.txt
new file mode 100644
index 000000000..f4ff313c5
--- /dev/null
+++ b/tests/result/nDPId_pps.pcap.txt
@@ -0,0 +1,736 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1467353136432,"flow_last_seen":1467353136432,"flow_tot_l4_data_len":1073,"flow_min_l4_data_len":1073,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":1073,"midstream":0,"l3_proto":"ip4","src_ip":"1.173.5.226","dst_ip":"192.168.115.8","src_port":22636,"dst_port":22793,"l4_proto":"udp"}
+1808{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzYAAIARgDbAqHMIAa0F4lkJWGwALVw+2oCeu7uZyeHbHHqdq6urqq6n\/nt+fn5+wr+\/v7+\/v7+7W6Rb\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzYAAIARgDbAqHMIAa0F4lkJWGwALVw+2oCeu7uZyeHbHHqdq6urqq6n\/nt+fn5+wr+\/v7+\/v7+7W6Rb\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1467353136433,"flow_last_seen":1467353136433,"flow_tot_l4_data_len":1073,"flow_min_l4_data_len":1073,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":1073,"midstream":0,"l3_proto":"ip4","src_ip":"118.171.15.56","dst_ip":"192.168.115.8","src_port":5544,"dst_port":22793,"l4_proto":"udp"}
+1804{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzcAAIARAeHAqHMIdqsPOFkJFagALVmD2oCeu7uZyeHbHHqdq6urqq6n\/qGioqKiYh8fHx8fHx8b+wT7\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzcAAIARAeHAqHMIdqsPOFkJFagALVmD2oCeu7uZyeHbHHqdq6urqq6n\/qGioqKiYh8fHx8fHx8b+wT7\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1808{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"ABxCjnAxTF4M6gNlCABFAARFnuIAAHkRY4YBrQXiwKhzCFhsWQkEMSx7t4TixMTmtp6kYwXi1NTQkZP\/pyYF6tRUUVFRUdGsrKysrKysqELqifDi9rh+7y1Xi9OvfLeSZYAy1w\/EUr9uLg0e9CnaROX57XN+rG2PsbV3b1WzhrPSgWVxvpzt20ZHwJCnUxVQGLqX9Srw7HEgtEU2dss5WedhlUCoLWgM\/J42MGKRHvT9iE\/43N5GpoNw1PotNSu\/hb48rrtlRvibDLZcPu2IRLQEAB8oYdIGOv31g4J+B+EtqnviNm6IhQ0TjgxrWRIn5VqPMk9UReGmopuI7Cv004tbXE827GJdTI48e6Nw+DslKpviFgeS0vXVOqNB06oAEhrY73qZ035jrk951u93O1uwzIFH6DkbY1p8o26kOkFfBeMUKuQit1B9wdyqBlRSyRqAvEWsdcVBherE18xMdiky1xTawadCiJB4HIE7L\/0KSe5dxsH4SH\/mpnesCcOn2g6tBfAwIrQXM5kXUP5\/ENr7vQ8t3\/NK+6P4n7amQY9on6leXGb+f4iU\/MLDIWMJLipnHbhrmlS4lj5u9Z93zb0uLHWgyZ+xN1nfG2fKmxAhdKBDLnm36CUOHTnyvdVBwhNfAuDhPrvTdHRtl9DdH2mJ4SFdi4y2aJTMvGEC4j00tIyGBowULuoHdpzJxSybx\/h6o49flw7oFd3uQbd2isPEeao7VwZGs4++DrupeZPZ6p2u5ekPl1vVtOXf5amV282NxdjCep4qAUG4BBMw7ZgbAJg\/YW4ccZkYxkkR6yIqXtkL0tuzKxCrt2fIbEJy3Q6OqJ75UQM\/8dZ+GrUzB\/CHM0NoxkXiaq+eIRgktecvA2BVyZr69Covy2ZPw4E3HLT1Uhyu5KA3hcVE5gV2CN061HKFQv8vPZW9pK2JM0zpOj3ksbu6W7t4dOV6eWuq5uj7wIvSO3oBgZ9AH9m40amTDqxZfqmYuIuD077zOXj6G72NkXTuwY0of3mT5T2Tdg3so9fxNLYwc5kiKVXVg8Zk1INOQSjwm3IuUQdmnwcYI6pbSfj2WyniNYG8PNQUNVYFr2u4feS6nxmL8oxR\/fQmYBEmVnDTaiMOslCu\/PSKz3DAWaU\/WOvFBvv5RAj0WlmtyvCTmxeWSzbSNJJekd+XcbnaL3EztHErETZaz1n4+KkZnIzN1BNgokE7gd7lJ44zkpw2yJOrShE1bGG2S7L08H0qbss+RFgLN4d5q7OpM4+Zgcw5bs\/yHg4d5468EJ6+3g8rKk9VFqduSwGphnWYPMsQ9O5z6l5c+iG4ZgUR1\/rkxb1vPlaJXaBbhX0qU51\/Sxv\/CrCSjKHbPLRF9Rtkx\/DFz\/tooQowlYyRdZxCDwGycTy\/Ejjl1FEonPgprfFLQJU\/vLfY2CRec13IUjNaQHC4L+kvUtReyvuIMXuErRhndO3CGcwkNQqYMHoAAAAA","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+1812{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzgAAIARgDTAqHMIAa0F4lkJWGwALRil2oCeu7uZyeHbHHqdq6urqq6n\/nh9fX19ucTExMTExMTAIN8g\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzkAAIARgDPAqHMIAa0F4lkJWGwALRB42oCeu7uZyeHbHHqdq6urqq6n\/nl8fHx8tMnJycnJycnNLdIt\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzgAAIARgDTAqHMIAa0F4lkJWGwALRil2oCeu7uZyeHbHHqdq6urqq6n\/nh9fX19ucTExMTExMTAIN8g\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzkAAIARgDPAqHMIAa0F4lkJWGwALRB42oCeu7uZyeHbHHqdq6urqq6n\/nl8fHx8tMnJycnJycnNLdIt\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzoAAIARgDLAqHMIAa0F4lkJWGwALQz32oCeu7uZyeHbHHqdq6urqq6n\/nZzc3Nzv8LCwsLCwsLGBvkG\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":1467353136439,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.42.0.158","src_port":22793,"dst_port":7716,"l4_proto":"udp"}
+0415{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzsAAIARFPjAqHMIcioAnlkJHiQALSPV2oCeu7uZyeHbHHqdq6urqq6n\/pKXl5eXRzo6Ojo6Ojo+\/gH+\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzwAAIARAdzAqHMIdqsPOFkJFagALR1S2oCeu7uZyeHbHHqdq6urqq6n\/p6dnZ2dSTQ0NDQ0NDQw8A\/w\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzoAAIARgDLAqHMIAa0F4lkJWGwALQz32oCeu7uZyeHbHHqdq6urqq6n\/nZzc3Nzv8LCwsLCwsLGBvkG\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1815{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzsAAIARFPjAqHMIcioAnlkJHiQALSPV2oCeu7uZyeHbHHqdq6urqq6n\/pKXl5eXRzo6Ojo6Ojo+\/gH+\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfzwAAIARAdzAqHMIdqsPOFkJFagALR1S2oCeu7uZyeHbHHqdq6urqq6n\/p6dnZ2dSTQ0NDQ0NDQw8A\/w\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":1467353136439,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.197.138.12","src_port":22793,"dst_port":6956,"l4_proto":"udp"}
+0414{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz0AAIARHuzAqHMI3sWKDFkJGywALewn2oCeu7uZyeHbHHqdq6urqq6n\/szNzc3NFWhoaGhoaGhsrFOM\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":1467353136439,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.198.7.89","src_port":22793,"dst_port":16039,"l4_proto":"udp"}
+0412{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz4AAIARtZ3AqHMIysYHWVkJPqcALR44JYBhRERmNh4k44ViVFRUVVFYARgYGBgYxLm5ubm5ubm9vb1dAA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1467353136439,"flow_last_seen":1467353136439,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.249.53.196","src_port":22793,"dst_port":32443,"l4_proto":"udp"}
+0414{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz8AAIAR4f7AqHMIb\/k1xFkJfrsALR1E2oCeu7tQQPUjL7WiHx8fHhoTShYWFhYWfjIyMjIyMjI2Nso1\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1467353136440,"flow_last_seen":1467353136440,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"219.228.107.156","src_port":22793,"dst_port":1250,"l4_proto":"udp"}
+0424{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0AAAIARQDrAqHMI2+RrnFkJBOIALQK82oCeu7tQQPUjL7WiHx8fHhoTSt7f39\/fs\/\/\/\/\/\/\/\/\/\/7O8Q7\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0EAAIARgCvAqHMIAa0F4lkJWGwALbP52oCeu7uZyeHbHHqdq6urqq6n\/ndycnJyku\/v7+\/v7+\/rK9Qr\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz0AAIARHuzAqHMI3sWKDFkJGywALewn2oCeu7uZyeHbHHqdq6urqq6n\/szNzc3NFWhoaGhoaGhsrFOM\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz4AAIARtZ3AqHMIysYHWVkJPqcALR44JYBhRERmNh4k44ViVFRUVVFYARgYGBgYxLm5ubm5ubm9vb1dAA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBfz8AAIAR4f7AqHMIb\/k1xFkJfrsALR1E2oCeu7tQQPUjL7WiHx8fHhoTShYWFhYWfjIyMjIyMjI2Nso1\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0AAAIARQDrAqHMI2+RrnFkJBOIALQK82oCeu7tQQPUjL7WiHx8fHhoTSt7f39\/fs\/\/\/\/\/\/\/\/\/\/7O8Q7\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0EAAIARgCvAqHMIAa0F4lkJWGwALbP52oCeu7uZyeHbHHqdq6urqq6n\/ndycnJyku\/v7+\/v7+\/rK9Qr\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1808{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+1800{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0MAAIARFPDAqHMIcioAnlkJHiQALZUg2oCeu7uZyeHbHHqdq6urqq6n\/pOWlpaWfgMDAwMDAwMHxzjH\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0MAAIARFPDAqHMIcioAnlkJHiQALZUg2oCeu7uZyeHbHHqdq6urqq6n\/pOWlpaWfgMDAwMDAwMHxzjH\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1810{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0QAAIARFO\/AqHMIcioAnlkJHiQALZkv2oCeu7uZyeHbHHqdq6urqq6n\/pCVlZWVeQQEBAQEBAQAwD\/A\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0QAAIARFO\/AqHMIcioAnlkJHiQALZkv2oCeu7uZyeHbHHqdq6urqq6n\/pCVlZWVeQQEBAQEBAQAwD\/A\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1809{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0YAAIARFO3AqHMIcioAnlkJHiQALWia2oCeu7uZyeHbHHqdq6urqq6n\/pGUlJSUYB0dHR0dHR0Z2SbZ\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0YAAIARFO3AqHMIcioAnlkJHiQALWia2oCeu7uZyeHbHHqdq6urqq6n\/pGUlJSUYB0dHR0dHR0Z2SbZ\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1809{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0cAAIARFOzAqHMIcioAnlkJHiQALZUJ2oCeu7uZyeHbHHqdq6urqq6n\/o6Li4uLcw4ODg4ODg4KyjXK\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0cAAIARFOzAqHMIcioAnlkJHiQALZUJ2oCeu7uZyeHbHHqdq6urqq6n\/o6Li4uLcw4ODg4ODg4KyjXK\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1801{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+1807{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"ABxCjnAxTF4M6gNlCABFAARFhzUAAHkR\/N52qw84wKhzCBWoWQkEMRGg+YSsioqo+NDqLUusmpqe3911YOnsA57Ex8fHx+uWlpaWlpaWkoE08dKZn7GWt9p12AyKe4JmaLmOS7Smuia+BWQBF1phg3WmnvX0OzWHMjJALEWTdM2i3eU2S1av2pXEHsbzeG7p0bXwZ6AilYBWxN793TB59AY7rkGBrQyG9NBeSqMYEIgWEMt4Zz7LSdr04YI9HcO+S5p5YreU2pqB9GA4eZyTtSJPPK4mgPG7siUBrM62nsMGUQynY5uassyj97\/9v\/aN4VZoKkrUlKtYOToh\/LN5S4iCoSqNcAfwFANKFRVz4L37ySjiuWFCIuiQiv1qWtgWmZ3FpzkuAaKf7M2hi+Mq73XqIPdccCkfDa3O9f+MJ3rmcWrQzoNv450WwWett6g1AZv1ATBgRUXjaonW6zbWhtp8OsJf1enYyKK+FW\/Y7fj6hP+rWFLueC\/afNVXkXgg7exdEhUStA8CTq1clpH2wlXkjBVNwemTwH14t\/1lZWv8f9pjmnL3IA5w+VRGQb1s7P+\/E2t5tXGAvXDxELpZHTXcI5fFww305k0Mr41GURF4K9YlaP91Hvhnfu1v4npRcdSfMnHR2QTn1lJsyXYNdH\/tJxkImBsF34ZVstsLyeCuDZlRwE1kRP91sw\/68SgWc6ibUYbxWMGAWYYDsc196maOPW+we+EQcPqSFgmWFqaAPxONMu9ZbERFA824QkGalgc39vVrWEqTNwpr4+XtfvlAvFhhXuLXHBnUPiJ9lD3TAIsWuP\/+5xnicE8rl6lobvrf1BhxEeYmn2kFwPWwFtmDEbDzkKPlCmkDs0SGQFMZzwjrYUkhMWKVigCZTtg2u1xwsRN2VO3AHQTwVPBg37yAdHPAjjOEl9V1g2\/jFWUMW4xFLloQJBVVQ7+gDP1gdoQCgKmemVG9jbCzumcKy2tqt7hShMAqh1zPNjtV5RA+jO+8Z3LbpiQWggyseOB6ihUx2ZekZcqde1eRlmRWaASQaKK43ogPbh5abR18pJ7S2DmF0tGgmcTr8oGmgN92yCyf\/u+CLdZ3JvtBvbp1cogB\/eRYbHa5OtOwwA0KdS+Xkl7rk7ZLwDleb7outDb1Q0MAA2v4gVAMjDmtsLFvM8QF5df8ayDzeFP52QXrErP9MM+pigzNF+kcQqyeztfYJYHip3IPTW1L4Bo\/HX6e\/WtRWh5EfV7aDVie1F+gQWcv5XU4\/yG\/ZpztD4K0Em7gCyK1kXwy+i14hrHk0s\/EcL8IEcx2tqY5ajxfpjq6y89WOIFjygO5t8dnc5MJ8jrH6nLtp\/0tv3e5v5ONL4EA5K+qcw5z3\/niU6MAXBveVkOzdVd2SAHYlZTPV\/QxEvJi+Msfv4AAAA0\/CAABbQDzRAAAAACvASEbVQ3WD0FhUJjqRAk2ys10BVYLqyhZqIoAAAAA","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0kAAIARAc\/AqHMIdqsPOFkJFagALUEr2oCeu7uZyeHbHHqdq6urqq6n\/p+cnJycnOLi4uLi4uLmJtkm\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0kAAIARAc\/AqHMIdqsPOFkJFagALUEr2oCeu7uZyeHbHHqdq6urqq6n\/p+cnJycnOLi4uLi4uLmJtkm\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1811{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0wAAIARAczAqHMIdqsPOFkJFagALSL22oCeu7uZyeHbHHqdq6urqq6n\/pyfn5+fk+3t7e3t7e3pKdYp\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf0wAAIARAczAqHMIdqsPOFkJFagALSL22oCeu7uZyeHbHHqdq6urqq6n\/pyfn5+fk+3t7e3t7e3pKdYp\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1811{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf08AAIARQCvAqHMI2+RrnFkJBOIALWFb2oCeu7tQQPUjL7WiHx8fHhoTSt\/e3t7eruLi4uLi4uLmJtkm\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf08AAIARQCvAqHMI2+RrnFkJBOIALWFb2oCeu7tQQPUjL7WiHx8fHhoTSt\/e3t7eruLi4uLi4uLmJtkm\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1814{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf1oAAIARAb7AqHMIdqsPOFkJFagALUG22oCeu7uZyeHbHHqdq6urqq6n\/p2enp6e3qCgoKCgoKCkZJtk\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1467353136483,"flow_last_seen":1467353136483,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"183.228.182.44","dst_ip":"192.168.115.8","src_port":13913,"dst_port":22793,"l4_proto":"udp"}
+0422{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":87,"pkt":"ABxCjnAxTF4M6gNlCABFAABJGboAAG4RkSi35LYswKhzCDZZWQkANUuZLYBpf39e0v7fca+OwsfHOTl\/IikLCQkWAAkJKytvb9HBysr2yjYJCAYGBiUA","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf1oAAIARAb7AqHMIdqsPOFkJFagALUG22oCeu7uZyeHbHHqdq6urqq6n\/p2enp6e3qCgoKCgoKCkZJtk\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":85,"pkt":"TF4M6gNlABxCjnAxCABFAABHf1sAAIARGYnAqHMIt+S2LFkJNlkAMzZRK4B+aGhJxenIZriZ1dfXqamg+fjwxMU1UFBQXFw8PHdzc3Nzc\/PMztbWAA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":85,"pkt":"TF4M6gNlABxCjnAxCABFAABHf1sAAIARGYnAqHMIt+S2LFkJNlkAMzZRK4B+aGhJxenIZriZ1dfXqamg+fjwxMU1UFBQXFw8PHdzc3Nzc\/PMztbWAA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1801{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf14AAIARHsvAqHMI3sWKDFkJGywALUhi2oCeu7uZyeHbHHqdq5OTkpafxvX09PT0uMbGxsbGxsbCAv1C\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf14AAIARHsvAqHMI3sWKDFkJGywALUhi2oCeu7uZyeHbHHqdq5OTkpafxvX09PT0uMbGxsbGxsbCAv1C\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1817{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"ABxCjnAxTF4M6gNlCABFAARFhzgAAHkR\/Nt2qw84wKhzCBWoWQkEMb9u1oSDpaWH1\/\/FAmSDtbWx8PJaT8sb70EcHx8fH3sGBgYGBgYGAtGQQfMg39X4yBEJjScRfYMq7ublQiPitKjFoMhPr7W3prkg0ciNxcrW+oFFr1mSwBrlSmpjMj7t3xbLl18JTFjkUV\/7K+GCEDXHr3vQ6nhLZ1Ce1C0+t5QAcf9ieQ4e7oAS\/PxKzVME978jxr1BvOHeuLra8DKKjMgiPrpPfUp6T7JjSGrbo3x+tKDHzVE6kDaEvviFVH5mo5obIY3wXl75UD1+\/2mUVttV\/zdWyCYydzl6pPsJg1EWvtErlTTLkAXyI2z+HQg9agfWG6vJ3lzGt\/QMT6ysfRX9AMNu+nzDEJtBCbSkxaFGlUFDZxDshAEKgfagAAsqcJ0GdfKMdLC125jHq6sRsAoXAlescffXIs9DZJZ1sJXn3jl7wH\/TmQNe6d7zfQnNUxZnKsCC4yxvoFgVkQC+rf\/62R6oFv29Ri3PKo4boMLwqZXZdUTgX\/53ADsbm7BnWQW7d55z37D8uX1CnnUlpw8\/fhwIE8tOurlHTqIQU7lF1oPf6+rVmytnyp+fIyEf1E9SVKKLcDj\/8EcOA\/5WkH\/bTrFKtE0dxeYQ\/IxzpYQY8hsK8OphfGIldMp5KbXnF84+B\/uJpPnaxI7EczpTwYYx3E3JLWCefY4w2owugLgapcAkqY3b\/\/Qsqe7EKRgO0yrEk4X5KWO2zg3wB4dfPiuMbTWslKCwJWT23TLavAXK+0mGFehE9oGY0aOlhlPgo7bVnAj9mg7f+e7GmT0IqgiLaEn903ciIj7etGAIkbyBJS\/+0z6B6\/frr94kLpIZ3Pnqq4PAdY\/\/536Oeb642YtYjcUZzUVQzXgny7NCnxEFwcRYGydB0rLOjMuAL0E2lhFtXEzKemL4c01fxgZ7aqXbgN9FLTKMxoDxx4R4YY3EBEEluVbQee1nXtQt32ncSuFt\/LXFPa1X+CbyHZsf9fw+xQ0kedHJTWs2BjOssZBdQz\/ACHbidiyUjXVq7M47EKKEWEptZkAlaAGQUCfJTTAVR9IvgVprZdjiMnUQMlAKLPOKKGUZ\/wMhGHtaH8UoJIOQhu7S3L+DEjFFm54gK8Co8H04nazoVETsHTWKbTplRhb1ikYxRwYvxJN6t1SnrHBKq\/APJMFqaTTQ+HNirluCJGVVD+1TabwAzlKCZcewTLDgntjQ\/+yYDTavbOEiLjsR5J9xX3lwqp63M9mm\/hDQv1J51X7i2rfgsD6a+8hAfc+eo0BIJn3VueaUDjG+g4rGlXFoTl2ZJumxNLPJL0xTarFSsoiNgn6qS1mjxe0WSJCKY\/bn4pDLCWQlfocV+HSW8pKH69CwDqKyslADFb7BOs1oCmeMb4U0vZRHQtx2uZVfuPdUESLh5vSUUDRXSW\/PFHa+uRIAAAAA","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+1805{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf2MAAIARQBfAqHMI2+RrnFkJBOIALV9e2oCeu7tQQPUjL7WiHx8fHhoTStzd3d3dqeXl5eXl5eXhId4h\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf2MAAIARQBfAqHMI2+RrnFkJBOIALV9e2oCeu7tQQPUjL7WiHx8fHhoTStzd3d3dqeXl5eXl5eXhId4h\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf30AAIARHqzAqHMI3sWKDFkJGywALRrY2oCeu7uZyeHbHHqdq6urqq6n\/srLy8vLD3FxcXFxcXF19Qp1\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf30AAIARHqzAqHMI3sWKDFkJGywALRrY2oCeu7uZyeHbHHqdq6urqq6n\/srLy8vLD3FxcXFxcXF19Qp1\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf34AAIARP\/zAqHMI2+RrnFkJBOIALZy92oCeu7tQQPUjL7WiHx8fHhoTSt3c3NzcpOjo6Ojo6OjsbJNs\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf34AAIARP\/zAqHMI2+RrnFkJBOIALZy92oCeu7tQQPUjL7WiHx8fHhoTSt3c3NzcpOjo6Ojo6OjsbJNs\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1807{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf44AAIARHpvAqHMI3sWKDFkJGywALZ7f24CfurqYyODaHXucqqqqq6+m\/8rLy8vLz7CwsLCwsLC0NMs0\/g==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf44AAIARHpvAqHMI3sWKDFkJGywALZ7f24CfurqYyODaHXucqqqqq6+m\/8rLy8vLz7CwsLCwsLC0NMs0\/g==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1805{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf5EAAIARP+nAqHMI2+RrnFkJBOIALbL42oCeu7tQQPUjL7WiHx8fHhoTStLT09PTr+Pj4+Pj4+PnZ5hn\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf5EAAIARP+nAqHMI2+RrnFkJBOIALbL42oCeu7tQQPUjL7WiHx8fHhoTStLT09PTr+Pj4+Pj4+PnZ5hn\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1800{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf6gAAIARP9LAqHMI2+RrnFkJBOIALWOr2oCeu7tQQPUjL7WiHx8fHhoTStPS0tLSUh4eHh4eHh4ammWa\/w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1467353136616,"flow_last_seen":1467353136616,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50462,"dst_port":80,"l4_proto":"tcp"}
+0377{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAof6tAAIAGbhvAqHMIymwO7MUeAFC+iLxRSK1JylAQQRKO+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":54,"pkt":"TF4M6gNlABxCjnAxCABFAAAof6tAAIAGbhvAqHMIymwO7MUeAFC+iLxRSK1JylAQQRKO+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1813{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1109,"pkt":"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","pkt_caplen":1109,"pkt_type":2048,"pkt_ipoffset":14}
+1811{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+1812{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"ABxCjnAxTF4M6gNlCABFKARFCXcAAGcRqYbexYoMwKhzCBssWQkEMW9XG4ROaGhKGjIIz6lOeHh8PT8TCKSikg4gISEhIY3x8fHx8fHx9Q6f4VybTHFWwJUwFCS6o4PdNQyyPpES3HMQW9AiP\/CUqIYTYoF3tif0qD5LGpGfj9DdbSsAKwJoJlNW2R46stK4LO9wKHHSzsnNIDhO9PiwOykT8x0Nc9lfBzLRh\/AOajBiRI78VWqKSc5f6gKe\/fZCYWJjROQS85KSPO0jSeVZWVs5xPCNxIRCB\/tGqSt3eEaltxnvGtoUuJzkusG0rZnl2etT4a96XU0Bu\/AhyIhfxl8RMu7yerkHS4wYJnjoLExH0nXAJGVp8SSlVBb6zGDEWjnGmED3A5PiwMKi966xI23UAJQHTAzHRQz9EKCsR7P+Z+aUcDZY\/wMngufr2JL5aAAwfpAGJbiy+D2F7FyBkqxGgWG0DulwGGm\/6eM9TpyK+4ZyjBXmmzafKZIZA\/3E+6rpaNAiGYCy++Frycv8TLlMKcG57FpIn3xlUeZu1JxBcR6oHlFWeYA\/uFjqP4DocFM5J13xL9KPbtkAxGczXoP2H\/S2Hf687iUE0pgXELHKqC4VnCAGYiGYA1h\/yu0wJqccsCAD54GhovhxQlpn4GA+mxfmv0IBYLbgihn8LS1UgHn2ZYKj8rvxbVVj\/2WnhrXnKxFOPm4yKSK0PO5FEAsBnTu6EeWMAPgWANxksu7TlcBaKIPQDduLTWhsiDbG14O0TWoZJAZBZXWmEjPqEi8zRzQW1J8tGsYLZl9nVMd\/IDT0v7H7k9cY7uoxkayXr6CZxVrWaTdb3bMs0f1TLQ3zqVGO5Y0W6slPtpyVqMEuE0BHKDnJ44hU6pRUk50tNYji3bUbfqsHk1\/ObQBTTC7hauYtU\/mkbCyITKp31lcbcrzd3csQ1hKy5nVvss2sGT5q0lqcJJ+AB9ttXWh\/dXToJfOlL6uF2lCLPxZX9+8tL8yzmaGCv5vMOY0HfFsUpaxXYM32lhIHh54MbxmOrmpdECIsEYhHWJgGgYV2yZymSKQX8\/BzdKoURQzz3Z+IqXne3lU6C1M1e76Q1MvKDlKrPj3nSO69\/h2q\/jLx6jJAhdkYCrEZN81J5lHYyvqGnAl+HxMuVKJuKWxv+DjmxVcc3MtYKoME7sQq4O4AkHu8HM22ZnfgbmzpsJxVyyMYm5QfGUDzZwYytBb6IeFiJazoMeYNwwFWJnTA0k1YddgI6xPR+DA5WDvJytBI37bsCZQKsMCCXSFFGJ\/Zz1wCiqgevBgzGSNp\/cwCFT94V1V2D4yEDMbHieK1eUxQlWk8ww3MhQVF6I7sGq1UmQUDuAIbS+Sv6Dl\/zQWpgan+gMZJNmbXOnHmuoKk15n\/iCEfNh9yX9lHL4agxSOqpglEeE\/kJvcNXTNXjZ7xQ\/ZvhHd39ypy\/+QlyAYf8YXRolgAAAIA","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf78AAIARHmrAqHMI3sWKDFkJGywALYLO2ICcubmby+PZHnifqampqKyl\/MrLy8vLdwgICAgICAgMDPMM\/Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf78AAIARHmrAqHMI3sWKDFkJGywALYLO2ICcubmby+PZHnifqampqKyl\/MrLy8vLdwgICAgICAgMDPMM\/Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf8MAAIARHmbAqHMI3sWKDFkJGywALXoO3oCav7+dzeXfGH6Zr6+vrqqj+s3MzMzMBHt7e3t7e3t\/f4B\/+w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":79,"pkt":"TF4M6gNlABxCjnAxCABFAABBf8MAAIARHmbAqHMI3sWKDFkJGywALXoO3oCav7+dzeXfGH6Zr6+vrqqj+s3MzMzMBHt7e3t7e3t\/f4B\/+w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1809{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":1107,"pkt":"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","pkt_caplen":1107,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1467353136757,"flow_last_seen":1467353136757,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65125,"dst_port":80,"l4_proto":"tcp"}
+0393{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlKDc3Alz6CABFAAA0AHFAAEAGMi3AqAUPROn9hf5lAFBsGPTh5ZgTx4AREAFu8AAAAQEICiYbPvkrIgZe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":116,"flow_max_l4_data_len":116,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.103","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0509{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":150,"pkt":"TF4M6gNlABxCjnAxCABFAACIADsAAIARBNXAqHMI2j0nZ1kJRXwAdM6LbABEsXEiUCg6x2bnNgAAAQADAAAAwKhzCAlZCtIsqwEGdAZ0b\/pmQpw8UwQ938xDXiteKyTtmkXcENwQJOknUZ5InkhvdWVRsieyJz3jqlgDTwNPynAfWaJVkHF5+IVd1THVMQGvgGhBFEEU","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.171.1","src_port":22793,"dst_port":29702,"l4_proto":"udp"}
+0394{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0ADwAAIARiZ7AqHMI0iyrAVkJdAYAIJjSFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.250.102.66","src_port":22793,"dst_port":1107,"l4_proto":"udp"}
+0396{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD0AAIARMI\/AqHMIb\/pmQlkJBFMAIK93FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.223.204.67","src_port":22793,"dst_port":11102,"l4_proto":"udp"}
+0396{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD4AAIAR\/KfAqHMIPd\/MQ1kJK14AIFSGFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":150,"pkt":"TF4M6gNlABxCjnAxCABFAACIADsAAIARBNXAqHMI2j0nZ1kJRXwAdM6LbABEsXEiUCg6x2bnNgAAAQADAAAAwKhzCAlZCtIsqwEGdAZ0b\/pmQpw8UwQ938xDXiteKyTtmkXcENwQJOknUZ5InkhvdWVRsieyJz3jqlgDTwNPynAfWaJVkHF5+IVd1THVMQGvgGhBFEEU","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0ADwAAIARiZ7AqHMI0iyrAVkJdAYAIJjSFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD0AAIARMI\/AqHMIb\/pmQlkJBFMAIK93FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD4AAIAR\/KfAqHMIPd\/MQ1kJK14AIFSGFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.237.154.69","src_port":22793,"dst_port":4316,"l4_proto":"udp"}
+0394{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD8AAIARR5fAqHMIJO2aRVkJENwAILn4FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.233.39.81","src_port":22793,"dst_port":18590,"l4_proto":"udp"}
+0394{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEAAAIARuo7AqHMIJOknUVkJSJ4AIPUuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.117.101.81","src_port":22793,"dst_port":10162,"l4_proto":"udp"}
+0394{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEEAAIARMgHAqHMIb3VlUVkJJ7IAII2OFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.227.170.88","src_port":22793,"dst_port":20227,"l4_proto":"udp"}
+0394{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEIAAIARHovAqHMIPeOqWFkJTwMAIFLIFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.112.31.89","src_port":22793,"dst_port":29072,"l4_proto":"udp"}
+0394{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEMAAIARHPzAqHMIynAfWVkJcZAAIC6tFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"121.248.133.93","src_port":22793,"dst_port":12757,"l4_proto":"udp"}
+0395{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEQAAIARB2\/AqHMIefiFXVkJMdUAIFjcFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.175.128.104","src_port":22793,"dst_port":5185,"l4_proto":"udp"}
+0394{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEUAAIARhKzAqHMIAa+AaFkJFEEAIPOuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.193.119","src_port":22793,"dst_port":7133,"l4_proto":"udp"}
+0394{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEYAAIARZzDAqHMI3hrBd1kJG90AIM6XFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AD8AAIARR5fAqHMIJO2aRVkJENwAILn4FYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEAAAIARuo7AqHMIJOknUVkJSJ4AIPUuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEEAAIARMgHAqHMIb3VlUVkJJ7IAII2OFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEIAAIARHovAqHMIPeOqWFkJTwMAIFLIFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEMAAIARHPzAqHMIynAfWVkJcZAAIC6tFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEQAAIARB2\/AqHMIefiFXVkJMdUAIFjcFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEUAAIARhKzAqHMIAa+AaFkJFEEAIPOuFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEYAAIARZzDAqHMI3hrBd1kJG90AIM6XFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.37.142.173","src_port":22793,"dst_port":1074,"l4_proto":"udp"}
+0395{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEcAAIARBe\/AqHMIciWOrVkJBDIAIIUCFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.74.190","src_port":22793,"dst_port":1037,"l4_proto":"udp"}
+0394{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEgAAIAR3efAqHMI3hpKvlkJBA0AIF0hFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"115.157.62.243","src_port":22793,"dst_port":29006,"l4_proto":"udp"}
+0395{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEkAAIARVC\/AqHMIc50+81kJcU4AIGYoFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.232.243","src_port":22793,"dst_port":21044,"l4_proto":"udp"}
+0394{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEoAAIARS57AqHMI0izo81kJUjQAIHyyFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.169.136.116","src_port":22793,"dst_port":17951,"l4_proto":"udp"}
+0394{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEsAAIARfKDAqHMIAamIdFkJRh8AIK3KFYBREhIwYEhytdM0AgICAwMKU5M7SEAN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.41.144.153","src_port":22793,"dst_port":10492,"l4_proto":"udp"}
+0395{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEwAAIARA\/rAqHMIcimQmVkJKPwAIFJIFYBREhIwYEhytdM0AgICAwMKU5M7SEAN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEcAAIARBe\/AqHMIciWOrVkJBDIAIIUCFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEgAAIAR3efAqHMI3hpKvlkJBA0AIF0hFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEkAAIARVC\/AqHMIc50+81kJcU4AIGYoFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEoAAIARS57AqHMI0izo81kJUjQAIHyyFYBREBAyYkpwt9E2AAAAAQEIUZE5SkIN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEsAAIARfKDAqHMIAamIdFkJRh8AIK3KFYBREhIwYEhytdM0AgICAwMKU5M7SEAN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AEwAAIARA\/rAqHMIcimQmVkJKPwAIFJIFYBREhIwYEhytdM0AgICAwMKU5M7SEAN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":190,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE0AAIARfCLAqHMIAamIdFkJRh8AnAFgWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":190,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE0AAIARfCLAqHMIAamIdFkJRh8AnAFgWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":190,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE4AAIARA3zAqHMIcimQmVkJKPwAnKXdWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1467353136836,"flow_last_seen":1467353136836,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.82","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0434{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":94,"pkt":"TF4M6gNlABxCjnAxCABFAABQAE8AAIARqA3AqHMItz2nUlkJRXwAPIb+NABEsXHrELXWDJoXvQAAAQACAAAAwKhzCAlZA9IvDBPKg8qD0i8MFMqDyoNyL1uBMFgwWA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.19","src_port":22793,"dst_port":33738,"l4_proto":"udp"}
+0395{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFAAAIARKHbAqHMI0i8ME1kJg8oAIH8VFYBREBD7616IhB4JtLS0tbW85SWN\/vYN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.20","src_port":22793,"dst_port":33738,"l4_proto":"udp"}
+0395{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFEAAIARKHTAqHMI0i8MFFkJg8oAIH8UFYBREBD7616IhB4JtLS0tbW85SWN\/vYN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.47.91.129","src_port":22793,"dst_port":22576,"l4_proto":"udp"}
+0395{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFIAAIAROQbAqHMIci9bgVkJWDAAILtBFYBREBD7616IhB4JtLS0tbW85SWN\/vYN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":190,"pkt":"TF4M6gNlABxCjnAxCABFAACwAE4AAIARA3zAqHMIcimQmVkJKPwAnKXdWYAdDAwuflZsq80qHB0d4ujhuC\/oo6FIkiga8TBMVS4Tp83Nzc3NwMDDw8PDwsLC+Pj4+NjY2JiMjJDSXCwdWxzAmgFq3X\/9zU6MtBnZcQIKHhw9Oj4+NDQ0NDQ0ERAK8vLy8vDw8PDw8PPzJfVMtrYO1WWhbcXFCaFsiYlF7c3lANbQu6q159DFAFA7BwEAAAAAAA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":94,"pkt":"TF4M6gNlABxCjnAxCABFAABQAE8AAIARqA3AqHMItz2nUlkJRXwAPIb+NABEsXHrELXWDJoXvQAAAQACAAAAwKhzCAlZA9IvDBPKg8qD0i8MFMqDyoNyL1uBMFgwWA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFAAAIARKHbAqHMI0i8ME1kJg8oAIH8VFYBREBD7616IhB4JtLS0tbW85SWN\/vYN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFEAAIARKHTAqHMI0i8MFFkJg8oAIH8UFYBREBD7616IhB4JtLS0tbW85SWN\/vYN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":66,"pkt":"TF4M6gNlABxCjnAxCABFAAA0AFIAAIAROQbAqHMIci9bgVkJWDAAILtBFYBREBD7616IhB4JtLS0tbW85SWN\/vYN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"220.130.154.23","src_port":22793,"dst_port":35941,"l4_proto":"udp"}
+0425{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":87,"pkt":"TF4M6gNlABxCjnAxCABFAABJAFMAAIARkAbAqHMI3IKaF1kJjGUANbV3LYBpf3+UhDHn63Fm29raJCQtdHV9SUi43d3d0dGxsfr+\/v5V\/5XV18\/Pz6cA","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.87","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0484{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":130,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFQAAIARBODAqHMI2j0nV1kJRXwAYC8EWABVcnEAAAAAx2bnNgcAAAAAAAAAFJfHSwLp2roy68F8GXs9tGoAAAAAGAAAAAYAAAANKAICAAAAAwAYAMCocwgJWRcAAAsKAAAAAAAlAfAI8dQdAAAAAA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1467353136838,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.133.182","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0485{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":130,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFUAAIARCQHAqHMId7yFtlkJRXwAYCbMWABVcnEAAAAA4pCy\/AcAAAAAAAAAFAQbslmKl2DoSDdZBZ9sSucAAAAAAAAAAAYIAAANKAICAAAADQAYAMCocwgJWRcAABIKAAAAAAAlAcgIZPMJAAAAAA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1467353136838,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.104","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0485{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":130,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFYAAIARp8zAqHMItz2naFkJRXwAYEeGWABVcnEAAAAAyMXU\/wcAAAAAAAAAFADpSP+bPHc9KoW3YGEXtKMAAAAAAAAAAAYIAAANKAIBAAAACAAYAMCocwgJWRcAACUKAAAAAAAlActw35cdAAAAAA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":87,"pkt":"TF4M6gNlABxCjnAxCABFAABJAFMAAIARkAbAqHMI3IKaF1kJjGUANbV3LYBpf3+UhDHn63Fm29raJCQtdHV9SUi43d3d0dGxsfr+\/v5V\/5XV18\/Pz6cA","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":130,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFQAAIARBODAqHMI2j0nV1kJRXwAYC8EWABVcnEAAAAAx2bnNgcAAAAAAAAAFJfHSwLp2roy68F8GXs9tGoAAAAAGAAAAAYAAAANKAICAAAAAwAYAMCocwgJWRcAAAsKAAAAAAAlAfAI8dQdAAAAAA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":130,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFUAAIARCQHAqHMId7yFtlkJRXwAYCbMWABVcnEAAAAA4pCy\/AcAAAAAAAAAFAQbslmKl2DoSDdZBZ9sSucAAAAAAAAAAAYIAAANKAICAAAADQAYAMCocwgJWRcAABIKAAAAAAAlAcgIZPMJAAAAAA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353136,"pkt_len":130,"pkt":"TF4M6gNlABxCjnAxCABFAAB0AFYAAIARp8zAqHMItz2naFkJRXwAYEeGWABVcnEAAAAAyMXU\/wcAAAAAAAAAFADpSP+bPHc9KoW3YGEXtKMAAAAAAAAAAAYIAAANKAIBAAAACAAYAMCocwgJWRcAACUKAAAAAAAlActw35cdAAAAAA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1467353138757,"flow_last_seen":1467353138757,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50463,"dst_port":80,"l4_proto":"tcp"}
+2065{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353138,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1267{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1467353138757,"flow_last_seen":1467353138757,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50463,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"api.cupid.iqiyi.com","url":"api.cupid.iqiyi.com\/track2?a=1&as=1;2,3;4,5&b=1467353138&c=ae87cb3cfdf494aa48dc608909f69250&cv=5.2.15.2240&d=5000000858874&dr=2175&f=4e3ae415a584748ac9aa31628f39d1e8&g=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&h=&i=qc_100001_100140&iv=0&j=31&k=180932301&kp=4e3ae415a584748ac9aa31628f39d1e8&n=479531000&o=1&p=1000000000381&q=5000000927558&r=c4889e64ad9d9eeb9ff438910850c442&rt=1467353113&s=aea56a808fc92ef360519121948e0f27&sv=4.10.004&u=1&up=&v=5000000859124&ve=1&w=2,3","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0634{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353138,"pkt_len":241,"pkt":"TF4M6gNlABxCjnAxCABFAADjA1pAAIAGlRvAqHMIZePIC8UfAFBKp6XxWDmKmFAY\/\/B4OwAAc2RuVjRiR2N1YUhSdGJBPT07IFFDMDA2PXU1NDl2cHoxMGw5ZmthdHVtNGFsdzRicDsgUUMwMDg9MTQ2NjY0NTgxNi4xNDY2NjQ1ODE2LjE0NjY2NDU4MTYuMTsgSG1fbHZ0XzUzYjczNzRhNjNjMzc0ODNlNWRkOTdkNzhkOWJiMzZlPTE0NjY2NDU4MTc7IFFDMDA1PWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQoNCg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0716{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353138,"pkt_len":306,"pkt":"ABxCjnAxTF4M6gNlCABFAAEkTcBAAC8Gm3Rl48gLwKhzCABQxR9YOYqYSqemrFAYSdTGUAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM4IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgNCkNvbnRlbnQtTGVuZ3RoOiAyDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCm9r","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1467353138931,"flow_last_seen":1467353138931,"flow_tot_l4_data_len":673,"flow_min_l4_data_len":673,"flow_max_l4_data_len":673,"flow_avg_l4_data_len":673,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50464,"dst_port":80,"l4_proto":"tcp"}
+1253{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353138,"pkt_len":707,"pkt":"TF4M6gNlABxCjnAxCABFAAK1A3VAAIAG1W7AqHMIe31wMcUgAFAUdsqc+xrYh1AYQTe7PAAAR0VUIC9jbGs\/NTNlMjVlMzNlMDY0YzY1N2MwNmI1NThlNWMzYzMzZmQgSFRUUC8xLjENCkFjY2VwdC1MYW5ndWFnZTogemgtQ04NClJlZmVyZXI6IGh0dHA6Ly93d3cuaXFpeWkuY29tL2NvbW1vbi9mbGFzaHBsYXllci8yMDE0MDkyNC9NYWluUGxheWVyXzVfMl8zX2MzXzJfMV82LnN3Zg0KcXlpZDogYWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOiBfMjAxMg0KcXlwbGF0Zm9ybTogMC0yDQp4LWZsYXNoLXZlcnNpb246IDEyLDAsMCw3MA0KQWNjZXB0OiAqLyoNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzQuMCAoY29tcGF0aWJsZTsgTVNJRSA4LjA7IFdpbmRvd3MgTlQgNi4xOyBXT1c2NDsgVHJpZGVudC80LjA7IFNMQ0MyOyAuTkVUIENMUiAyLjAuNTA3Mjc7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wKS9RWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBjbGljay5obS5iYWlkdS5jb20NCkNvb2tpZTogSE1BQ0NPVU5UPTg4Q0M2OUIwNEM5RDYyOUE7IEJBSURVSUQ9MjEwMkRDNzUxRUQwREYzNkUzRDZDRjZDMjEwRkFCNzk6Rkc9MQ0KDQo=","pkt_caplen":707,"pkt_type":2048,"pkt_ipoffset":14}
+0850{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1467353138931,"flow_last_seen":1467353138931,"flow_tot_l4_data_len":673,"flow_min_l4_data_len":673,"flow_max_l4_data_len":673,"flow_avg_l4_data_len":673,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50464,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"click.hm.baidu.com","url":"click.hm.baidu.com\/clk?53e25e33e064c657c06b558e5c3c33fd","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+1300{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":744,"pkt":"ABxCjnAxTF4M6gNlCABFAALaH2hAAC0GDFd7fXAxwKhzCABQxSD7GtiHFHbNKVAYADhuxwAASFRUUC8xLjEgMzAyIEZvdW5kDQpMb2NhdGlvbjogaHR0cHM6Ly95b3V0dS5iZS85b3ZjSndDN0FFYw0KU2V0LUNvb2tpZTogSF9NS1RfQ0xLSUQ9MDAwMDAwMDE1OWRhMTZiODU3NzYwODMyNWEwOGEzNzYwMDAwMDAyMDM1MzM2NTMyMzU2NTMzMzM2NTMwMzYzNDYzMzYzNTM3NjMzMDM2NjIzNTM1Mzg2NTM1NjMzMzYzMzMzMzY2NjQwMDAwMDAwODc5NmY3NTc0NzUyZTYyNjU7IFBhdGg9LzsgRG9tYWluPWhtLmJhaWR1LmNvbTsgRXhwaXJlcz1GcmksIDAxIEp1bCAyMDE2IDA2OjM1OjM4IEdNVA0KU2V0LUNvb2tpZTogSF9NS1RfQ0xLTE9HPTAwMDAwMDAxNTlkYTE2Yjg1Nzc2MDgzMjVhMDhhMzc2MDAwMDAwMjAzNTMzNjUzMjM1NjUzMzMzNjUzMDM2MzQ2MzM2MzUzNzYzMzAzNjYyMzUzNTM4NjUzNTYzMzM2MzMzMzM2NjY0MDAwMDAwMDg3OTZmNzU3NDc1MmU2MjY1OyBQYXRoPS87IERvbWFpbj1obS5iYWlkdS5jb207IEV4cGlyZXM9RnJpLCAwMSBKdWwgMjAxNiAwNjozNTozOCBHTVQNClAzUDogQ1A9IkNVUmEgQURNYSBERVZhIFBTQW8gUFNEbyBPVVIgQlVTIFVOSSBQVVIgSU5UIERFTSBTVEEgUFJFIENPTSBOQVYgT1RDIE5PSSBEU1AgQ09SIg0KQ29ubmVjdGlvbjogY2xvc2UNCkNvbnRlbnQtTGVuZ3RoOiAwDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM4IEdNVA0KU2VydmVyOiBhcGFjaGUNCg0K","pkt_caplen":744,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1467353139305,"flow_last_seen":1467353139305,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.24","src_port":50466,"dst_port":80,"l4_proto":"tcp"}
+0684{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":280,"pkt":"TF4M6gNlABxCjnAxCABFAAEKA4dAAIAGQVvAqHMIy0K2GMUiAFDWCs3i1IWCxVAYAQQdEwAAR0VUIC9vY3NwL01Fa3dSekJGTUVNd1FUQUpCZ1VyRGdNQ0dnVUFCQlR5NEdyNWhZb2RqWENiU1JramVxbTFHaWglMkJaQVFVU3QwR0ZodTg5bWkxZHZXQnRydGlHcnBhZ1M4Q0NFWXJGWGtxMnVneiBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0OiAqLyoNClVzZXItQWdlbnQ6IE1pY3Jvc29mdC1DcnlwdG9BUEkvNi4xDQpIb3N0OiBjbGllbnRzMS5nb29nbGUuY29tDQoNCg==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1467353139305,"flow_last_seen":1467353139305,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":246,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":246,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.24","src_port":50466,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"Web"},"http": {"hostname":"clients1.google.com","url":"clients1.google.com\/ocsp\/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hYodjXCbSRkjeqm1Gih%2BZAQUSt0GFhu89mi1dvWBtrtiGrpagS8CCEYrFXkq2ugz","code":0,"content_type":"","user_agent":"Microsoft-CryptoAPI\/6.1"}}
+1395{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":813,"pkt":"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","pkt_caplen":813,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1467353139505,"flow_last_seen":1467353139505,"flow_tot_l4_data_len":595,"flow_min_l4_data_len":595,"flow_max_l4_data_len":595,"flow_avg_l4_data_len":595,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50467,"dst_port":80,"l4_proto":"tcp"}
+1149{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":629,"pkt":"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","pkt_caplen":629,"pkt_type":2048,"pkt_ipoffset":14}
+1029{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1467353139505,"flow_last_seen":1467353139505,"flow_tot_l4_data_len":595,"flow_min_l4_data_len":595,"flow_max_l4_data_len":595,"flow_avg_l4_data_len":595,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50467,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=11&ct=adstart&starttm=1097&reset=1&ra=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353119&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5uuZAADMGf2DKbA7bwKhzCABQxSNvujzlVGWtklAYADcmHAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1467353139627,"flow_last_seen":1467353139627,"flow_tot_l4_data_len":539,"flow_min_l4_data_len":539,"flow_max_l4_data_len":539,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50469,"dst_port":80,"l4_proto":"tcp"}
+1073{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":573,"pkt":"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","pkt_caplen":573,"pkt_type":2048,"pkt_ipoffset":14}
+0973{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1467353139627,"flow_last_seen":1467353139627,"flow_tot_l4_data_len":539,"flow_min_l4_data_len":539,"flow_max_l4_data_len":539,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50469,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=5&a=2&ra=1&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=31&r=479531000&aid=180932301&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=Windows%207&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353139&islocal=0&as=0311c5a0d5596063db5944bd76b6cbff&ve=b1f90f8da6fe0258d13616a8070cb997&pe=&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1467353139662,"flow_last_seen":1467353139662,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":390,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":390,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50470,"dst_port":80,"l4_proto":"tcp"}
+0877{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":424,"pkt":"TF4M6gNlABxCjnAxCABFAAGaA59AAIAG6LXAqHMIymwO7MUmAFBtzkRVA7NFyFAYAQQzoQAAR0VUIC9iP3Q9NSZwZj0yMDEmcD0xMSZwMT0xMTQmYT0zNCZjdD1vbmNsaWNrJnR5cGU9cGMmYXM9JmNsdD1wY19wbGF5X3BsYXllcl9jbGljayZtdj01LjIuMTUuMjI0MCZwdT0mcm49MEZFMTcyRUM0NEM0NEI4NkFFRURFNTRBQTAwNTQxQzQ1NzQwNiZ1PWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuJnY9Mi4wLjEwMi4zMDE0NyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogbXNnLmlxaXlpLmNvbQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpQcmFnbWE6IG5vLWNhY2hlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjogY2xvc2UNCkFjY2VwdDogKi8qDQoNCg==","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1467353139662,"flow_last_seen":1467353139662,"flow_tot_l4_data_len":390,"flow_min_l4_data_len":390,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":390,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50470,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?t=5&pf=201&p=11&p1=114&a=34&ct=onclick&type=pc&as=&clt=pc_play_player_click&mv=5.2.15.2240&pu=&rn=0FE172EC44C44B86AEEDE54AA00541C457406&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=2.0.102.30147","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+0570{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":194,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0y0pAADMGbvDKbA7swKhzCABQxSYDs0XIbc5Fx1AYAB\/3XQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC58h9AADMGSCfKbA7bwKhzCABQxSVwL3Su+7knHVAYADbM\/QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1467353139819,"flow_last_seen":1467353139819,"flow_tot_l4_data_len":918,"flow_min_l4_data_len":918,"flow_max_l4_data_len":918,"flow_avg_l4_data_len":918,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50471,"dst_port":80,"l4_proto":"tcp"}
+1581{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":952,"pkt":"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","pkt_caplen":952,"pkt_type":2048,"pkt_ipoffset":14}
+1176{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1467353139819,"flow_last_seen":1467353139819,"flow_tot_l4_data_len":918,"flow_min_l4_data_len":918,"flow_max_l4_data_len":918,"flow_avg_l4_data_len":918,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50471,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=1||71000001||5000000858874||5000000927558||roll&as=&av=4.10.004&b=180932301&c=31&ct=&d=2175&di=&dp=&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=&oi=&p=t&pp=&rc=-1&rd=92&ri=&s=1467353138043&sh=&sq=&sw=&t=s&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0578{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353139,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5KWZAADMGENDKbA7swKhzCABQxSeRl6ZqgeuX\/1AYACHEyQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1467353140628,"flow_last_seen":1467353140628,"flow_tot_l4_data_len":1066,"flow_min_l4_data_len":1066,"flow_max_l4_data_len":1066,"flow_avg_l4_data_len":1066,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50474,"dst_port":80,"l4_proto":"tcp"}
+1779{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":1100,"pkt":"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","pkt_caplen":1100,"pkt_type":2048,"pkt_ipoffset":14}
+1513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1467353140628,"flow_last_seen":1467353140628,"flow_tot_l4_data_len":1066,"flow_min_l4_data_len":1066,"flow_max_l4_data_len":1066,"flow_avg_l4_data_len":1066,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50474,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?c1=6&s1=1&macid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&channelid=000&nu=&e=1352528&se=1253811&r=500494600&aduid=d07dfd30f0ee4e48bbcaf1208c758471&ctm=1375211&playsource=001004000&vid=562e26caed5695900212eb3259070f8a&albumid=500494600&ra=2&td=22652&succession=4&type=1&vfrm=3-001004000-c_corgi-0&bucket=c_corgi_main&ratp=1&playmode=1&hu=-1&ht=0&ap=0&t=201&ct=clt__pl_play&ve=1352528&pf=201&p=11&p1=114&p2=1011&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&v=2.0.102.30147&de=a0ee77a5638897bebfd8555b3270bef6&mv=5.2.15.2240&kv=10.0.0.293&source1=miniplayer&source2=miniplayer&source3=%e5%b0%8f%e6%92%ad%e6%94%be%e5%99%a8&source4=%e5%b0%8f%e6%92%ad%e6%94%be&play_source=1&opt=0&clt=homedl&scene=1&rn=00000001467353140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; CIBA; Alexa Toolbar; Zune 4.7)"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1467353140655,"flow_last_seen":1467353140655,"flow_tot_l4_data_len":907,"flow_min_l4_data_len":907,"flow_max_l4_data_len":907,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50475,"dst_port":80,"l4_proto":"tcp"}
+1565{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":941,"pkt":"TF4M6gNlABxCjnAxCABFAAOfA+lAAIAG5mbAqHMIymwO7MUrAFDgGmOz15qFMlAYQTe3tgAAR0VUIC9jcDIuZ2lmP2E9NGUzYWU0MTVhNTg0NzQ4YWM5YWEzMTYyOGYzOWQxZTgmYWk9JmFzPTE6MjoxfDImYXY9NC4xMC4wMDQmYj0yMDQwNzY3MDEmYz02JmN0PTUwMDAwMDA5MjY3OTUmZD0xNTgmZGk9JmRwPTcxMDAwMDAxJmU9NTEyYWI3N2RlN2Y2N2Q0OWYyNGQzNTExNzc4MjIwZDAmZWM9JmVtPSZmaT0mZz0wJmw9TVRFNExqRTJNeTQ0TGprdyZtaz0mbnc9Jm9kPTUwMDAwMDA4NTYzNDQmb2k9JnA9YSZwcD0mcmM9JnJkPSZyaT0mcz0xNDY3MzUzMTM5MDU3JnNoPSZzcT0mc3c9JnQ9c3AmdT0wX2Fhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuJnY9NTAwNDk0NjAwJnZ2PTUuMi4xNS4yMjQwJng9Jnk9cWNfMTAwMDAxXzEwMDE0MCBIVFRQLzEuMQ0KQWNjZXB0LUxhbmd1YWdlOiB6aC1DTg0KUmVmZXJlcjogaHR0cDovL3d3dy5pcWl5aS5jb20vY29tbW9uL2ZsYXNocGxheWVyLzIwMTQwOTI0L01haW5QbGF5ZXJfNV8yXzNfYzNfMl8xXzYuc3dmDQpxeWlkOiBhYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbg0KcXlwaWQ6IF8yMDEyDQpxeXBsYXRmb3JtOiAwLTINCngtZmxhc2gtdmVyc2lvbjogMTIsMCwwLDcwDQpBY2NlcHQ6ICovKg0KUHJhZ21hOiBuby1jYWNoZQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNC4wIChjb21wYXRpYmxlOyBNU0lFIDguMDsgV2luZG93cyBOVCA2LjE7IFdPVzY0OyBUcmlkZW50LzQuMDsgU0xDQzI7IC5ORVQgQ0xSIDIuMC41MDcyNzsgLk5FVCBDTFIgMy41LjMwNzI5OyAuTkVUIENMUiAzLjAuMzA3Mjk7IE1lZGlhIENlbnRlciBQQyA2LjApL1FZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IG1zZy43MS5hbQ0KDQo=","pkt_caplen":941,"pkt_type":2048,"pkt_ipoffset":14}
+1165{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1467353140655,"flow_last_seen":1467353140655,"flow_tot_l4_data_len":907,"flow_min_l4_data_len":907,"flow_max_l4_data_len":907,"flow_avg_l4_data_len":907,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50475,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:2:1|2&av=4.10.004&b=204076701&c=6&ct=5000000926795&d=158&di=&dp=71000001&e=512ab77de7f67d49f24d3511778220d0&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000856344&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353139057&sh=&sq=&sw=&t=sp&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=500494600&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0569{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":194,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0b19AADMGyurKbA7dwKhzCABQxSpsAhW90liKZlAYABAfBgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1467353140709,"flow_last_seen":1467353140709,"flow_tot_l4_data_len":910,"flow_min_l4_data_len":910,"flow_max_l4_data_len":910,"flow_avg_l4_data_len":910,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50473,"dst_port":80,"l4_proto":"tcp"}
+1570{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":944,"pkt":"TF4M6gNlABxCjnAxCABFAAOiA\/BAAIAG5m3AqHMIymwO28UpAFCvhj83b730NFAYAQRULwAAR0VUIC9jb3JlP3Q9MSZyZXNldD0wJnZmcm10cD0xJnRtMT0mdG0yPTAmdG0yMT0wJnRtMjI9MCZ0bTIzPTAmdG0yND0wJnRtMz0xMTcmdG0zMT0wJnRtMzI9NDcmdG0zMz03OCZ0bTM0PTEmdG00PTEzNyZ0bTQxPTAmdG00Mj0xNiZ0bTQzPTEyNSZ0bTQ0PTImdG01PTE2NSZ0bTUxPTAmdG01Mj0wJnRtNTM9MCZ0bTU0PTEwJnRtNj0mdG02Mj0wJnRtNjM9MCZ0bTc9MCZ0bTcxPTAmdG03Mj0wJnRtNzM9MCZ0bTg9MCZ0bTgxPTAmdG04Mj0wJnRtODM9MCZ0bTk9OTE2JnRtOTI9MTYmdG05Mz02MiZjaGlwaWQ9SW50ZWwlMjhSJTI5JTIwQ29yZSUyOFRNJTI5JTIwaTUlMkQyNTU3TSUyMENQVSUyMCU0MCUyMDElMkU3MEdIeiZyYT0yJmlzaGNkbj0yJnBmPTIwMSZwPTExJnAxPTExNCZwMj0zMDAwJnNka3RwPTEmYzE9NiZyPTUwMDQ5NDYwMCZhaWQ9NTAyOTU5OTAwJnU9YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mcHU9Jm9zPXdpbmRvd3Mmdj01JTJFMiUyRTE1JTJFMjI0MCZrcnY9MiUyRTAlMkUxMDImZHQ9Jmh1PS0xJnJuPTE0NjczNTMxNDAmaXNsb2NhbD0wJmFzPWQxOWY2NDA0N2I2NDFjZDZmZjA5NmIwNGZiMmEzMGI1JnZlPTNjYzBjOGZhMzcyNjI1ZTY0MTQzMTQ0ODE2ZjNlOTY4JnBlPWM5NWQ5OTJlMjk4NTZkYzg0ZjJlOTkwN2EyZTRiMjgyJnZmcm09JmNobD0maGNkbnY9MTAuMC4wLjI5MyZ0cGNkPTAmaXNkcm09MSZodD0wIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBtc2cuNzEuYW0NCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCnF5aWQ6YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOl8yMDEyDQpxeXBsYXRmb3JtOjAtMg0KDQo=","pkt_caplen":944,"pkt_type":2048,"pkt_ipoffset":14}
+1344{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1467353140709,"flow_last_seen":1467353140709,"flow_tot_l4_data_len":910,"flow_min_l4_data_len":910,"flow_max_l4_data_len":910,"flow_avg_l4_data_len":910,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50473,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=1&reset=0&vfrmtp=1&tm1=&tm2=0&tm21=0&tm22=0&tm23=0&tm24=0&tm3=117&tm31=0&tm32=47&tm33=78&tm34=1&tm4=137&tm41=0&tm42=16&tm43=125&tm44=2&tm5=165&tm51=0&tm52=0&tm53=0&tm54=10&tm6=&tm62=0&tm63=0&tm7=0&tm71=0&tm72=0&tm73=0&tm8=0&tm81=0&tm82=0&tm83=0&tm9=916&tm92=16&tm93=62&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&ra=2&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353140&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5F1lAADMGIt3KbA7swKhzCABQxSvXmoUy4BpnKlAYACB7oAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1467353140755,"flow_last_seen":1467353140755,"flow_tot_l4_data_len":622,"flow_min_l4_data_len":622,"flow_max_l4_data_len":622,"flow_avg_l4_data_len":622,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.32.39","src_port":50476,"dst_port":80,"l4_proto":"tcp"}
+1188{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":656,"pkt":"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","pkt_caplen":656,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1467353140755,"flow_last_seen":1467353140755,"flow_tot_l4_data_len":622,"flow_min_l4_data_len":622,"flow_max_l4_data_len":622,"flow_avg_l4_data_len":622,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.32.39","src_port":50476,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"cache.video.iqiyi.com","url":"cache.video.iqiyi.com\/vi\/500494600\/562e26caed5695900212eb3259070f8a\/?src=1_11_114","code":0,"content_type":"","user_agent":""}}
+1752{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":1078,"pkt":"ABxCjnAxTF4M6gNlCABFAAQovhBAADEGzgRl4yAnwKhzCABQxSw8z6ul3crbd1AQPSRKcgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFeHBpcmVzOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjM5IEdNVA0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkFjY2Vzcy1Db250cm9sLUFsbG93LUNyZWRlbnRpYWxzOiB0cnVlDQoNCmQ0OQ0KeyJjblByZW1UaW1lIjowLCJlZGl0b3JJbmZvIjoiIiwidmlkZW9RaXB1SWQiOjUwMDQ5NDYwMCwicmV3YXJkQWxsb3dlZCI6MCwibnVybCI6IiIsInN1cElkIjowLCJvbmxpbmVTdGF0dXMiOjEsImR0eXBlIjozLCJwdnUiOiIiLCJpc3N1ZVRpbWUiOjIwMTYwNjI1LCJ3cml0ZXIiOiIiLCJpc1RvcENoYXJ0IjowLCJxaXlpUGxheVN0cmF0ZWd5Ijoi5q+P5ZGo5LqU5ZGo5YWtMjA6MDAiLCJ1cCI6IjIwMTYtMDYtMjkgMTk6NDc6MDIiLCJpcExpbWl0IjowLCJ1biI6IiIsImV4Y2x1c2l2ZSI6MSwidm4iOiLjgIrkuIDmtL7mlrnoqIDjgItDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLIiwicHR1cmwiOiIiLCJzdGFydFRpbWUiOi0xLCJzdCI6MjAwLCJ0eSI6MjAxNjA2MjUsInNtIjowLCJzaG93Q2hhbm5lbElkIjo2LCJwb3Z1IjoiIiwicHJvZHVjZXJzIjoiIiwiZXRtIjoiIiwic3VwTmFtZSI6IiIsInR2RW5hbWUiOiIiLCJzYyI6MCwiY2MiOjAsIm1kb3duIjowLCJwYW5vIjp7InR5cGUiOjF9LCJtYWluQWN0b3JSb2xlcyI6W10sInN1YktleSI6IjIwNDA3NjcwMSIsImFwaWMiOiJodHRwOlwvXC9waWM1LnFpeWlwaWMuY29tXC9pbWFnZVwvMjAxNjA2MjVcL2Q3XC81OVwvdl8xMTA1ODM2NjZfbV82MDEuanBnIiwiZXMiOjEsInByb2R1Y2VyIjoiIiwiZW5kVGltZSI6LTEsImF1IjoiaHR0cDpcL1wvd3d3LmlxaXlpLmNvbVwvdl8xOXJybGpmM2hnLmh0bWwiLCJjaXJjbGUiOnsidHlwZSI6MiwiaWQiOjIwNQ==","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+1752{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":1078,"pkt":"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","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+1757{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":1078,"pkt":"ABxCjnAxTF4M6gNlCABFAAQovhJAADEGzgJl4yAnwKhzCABQxSw8z7Ol3crbd1AQPSQ64AAALS0tLS0uaHRtbCIsImlkbCI6MSwic3RtIjoiIiwiYXN1YnQiOiLkuKrmgKfnlLflrannu4TlkIhDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLIiwiZm9sbG93ZXJDb3VudCI6MCwiY29hIjowLCJrZXl3b3JkIjoi5Y2B5LiJ5Lq\/5YiG6LSd5LmL5LiA5rS+5pa56KiAIiwiYXV0aG9ycyI6IiIsInNpZCI6MjA0MDc2NzAxLCJudmlkIjoiIiwidWlkIjo0NjMzNzI2NzkwLCJhaWQiOjUwMDQ5NDYwMCwiZCI6IiIsInZpZCI6IjU2MmUyNmNhZWQ1Njk1OTAwMjEyZWIzMjU5MDcwZjhhIiwiZHRzIjoiMjAxNjA2MjkxOTQ3MDIiLCJlIjoiIiwiYW4iOiLjgIrkuIDmtL7mlrnoqIDjgItDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLIiwic3RsIjp7ImQiOiJodHRwOlwvXC9tZXRhLnZpZGVvLnFpeWkuY29tIiwic3RsIjpbXX0sImluZm8iOiLjgIrkuIDmtL7mlrnoqIDjgItDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLIiwiaXMzRCI6MCwiaXMiOjEsInRwbCI6W10sImZscHBzIjpbXSwiZmwiOltdLCJxdElkIjoxMzYxNjkxNSwiYXIiOiLlhoXlnLAiLCJzIjoi5Y2B5LiJ5Lq\/5YiG6LSd5LmL5LiA5rS+5pa56KiAIiwiYSI6IiIsInBwc3VwbG9hZGlkIjowLCJ0dmlkIjo1MDA0OTQ2MDAsImFjdG9ycyI6W10sInVzZXJWaWRlb2NvdW50IjowLCJtYSI6IiIsInJld2FyZE1lc3NhZ2UiOiIiLCJ2VHlwZSI6MSwiYyI6NiwidnUiOiJodHRwOlwvXC93d3cuaXFpeWkuY29tXC92XzE5cnJsamYzaGcuaHRtbCIsInZwaWMiOiJodHRwOlwvXC9waWM1LnFpeWlwaWMuY29tXC9pbWFnZVwvMjAxNjA2MjVcL2Q3XC81OVwvdl8xMTA1ODM2NjZfbV82MDEuanBnIiwicHJldmlld0ltYWdlVXJsIjoiIiwidHZTZWFzb24iOjAsInBwc0luZm8iOnsibmFtZSI6IjE2MDYyNS3oirHnta7vvJrkuKrmgKfnlLflrannu4TlkIhDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLLeWNgeS4ieS6v+WIhui0neS5i+S4gOa0vuaWueiogCIsInNob3J0VGl0bGUiOiIxNjA2MjUt6Iqx57Wu7w==","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+1195{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":663,"pkt":"ABxCjnAxTF4M6gNlCABFAAKJvhNAADEGz6Bl4yAnwKhzCABQxSw8z7el3crbd1AYPSR27QAAvJrkuKrmgKfnlLflrannu4TlkIhDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLLeWNgeS4ieS6v+WIhui0neS5i+S4gOa0vuaWueiogCJ9LCJhbGJ1bUFsaWFzIjoi5Liq5oCn55S35a2p57uE5ZCIQy1CbG9ja+mVv+aymeivneOAiuiAgeihl+eahOWRs+OAiyIsImFsbG93RWRpdFZWSXFpeWkiOjAsImFjdG9yUm9sZXMiOltdLCJ0YWdzIjpbXSwiaXNQb3B1cCI6MSwicGQiOjEsInBsZyI6MTU4LCJsZyI6Miwic3ViVHlwZSI6MiwidXBPcmRlciI6MSwic2hvcnRUaXRsZSI6IkMtQmxvY2vjgIrogIHooZfnmoTlkbPjgIsiLCJwcmVzZW50b3IiOltdLCJwdWJUaW1lIjoiMTQ2Njg1MzYyMTAwMCIsImlmcyI6MSwiYm9zc1N0YXR1cyI6MCwidGciOiLlhoXlnLAg5YW25a6DIOatjOiIniIsImNvbW1lbnRBbGxvd2VkIjoxLCJwbGF0Zm9ybXMiOlsiUEhPTkUiLCJQQUQiLCJQQyIsIlBDX0FQUCIsIlRWIiwiUEhPTkVfV0VCX0lRSVlJIiwiUEFEX1dFQl9JUUlZSSJdLCJpc1ZpcCI6IiIsInN1cFR5cGUiOiIiLCJjcGEiOjEsInN1YnQiOiLkuKrmgKfnlLflrannu4TlkIhDLUJsb2Nr6ZW\/5rKZ6K+d44CK6ICB6KGX55qE5ZGz44CLIiwidHZQaGFzZSI6MH0NCjANCg0K","pkt_caplen":663,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353140,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5fz1AADMGuwnKbA7bwKhzCABQxSlvvfQ0r4ZCsVAYADyHfQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1467353141138,"flow_last_seen":1467353141138,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":580,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":580,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50477,"dst_port":80,"l4_proto":"tcp"}
+1130{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353141,"pkt_len":614,"pkt":"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","pkt_caplen":614,"pkt_type":2048,"pkt_ipoffset":14}
+1014{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1467353141138,"flow_last_seen":1467353141138,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":580,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":580,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50477,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=11&ct=adend&reset=0&ra=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353140&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353141,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5uEFAADMGggXKbA7bwKhzCABQxS1wKzTY7Tl5ilAYADfR4AAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+1574{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353142,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353142,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5KWdAADMGEM\/KbA7swKhzCABQxSeRl6b7geube1AYACTHuAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQyIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1467353144633,"flow_last_seen":1467353144633,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"117.79.81.135","dst_ip":"192.168.115.8","src_port":80,"dst_port":50443,"l4_proto":"tcp"}
+0773{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353144,"pkt_len":347,"pkt":"ABxCjnAxTF4M6gNlCABFAAFNZb1AADAG6WZ1T1GHwKhzCABQxQsUvd5l87WhOFAYAA4qLgAASFRUUC8xLjEgMzAyIEZvdW5kDQpTZXJ2ZXI6IG5naW54DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjMzIEdNVA0KQ29udGVudC1MZW5ndGg6IDANCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClNldC1Db29raWU6IFY9NjY5Mzg1MTYxNTg4NTA0OTAxMTsgRG9tYWluPW1sdDAxLmNvbTsgRXhwaXJlcz1TYXQsIDAxLUp1bC0yMDE3IDA2OjA1OjM3IEdNVDsgUGF0aD0vDQpMb2NhdGlvbjogaHR0cDovL2NtYy50YW54LmNvbS9hbmRjP2FuZGNfdWlkPTY2OTM4NTE2MTU4ODUwNDkwMTEmYW5kY192ZXI9MQ0KDQo=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1467353144633,"flow_last_seen":1467353144633,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"117.79.81.135","dst_ip":"192.168.115.8","src_port":80,"dst_port":50443,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1467353144819,"flow_last_seen":1467353144819,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":410,"flow_max_l4_data_len":410,"flow_avg_l4_data_len":410,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"140.205.243.64","src_port":50482,"dst_port":80,"l4_proto":"tcp"}
+0901{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353144,"pkt_len":444,"pkt":"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","pkt_caplen":444,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1467353144819,"flow_last_seen":1467353144819,"flow_tot_l4_data_len":410,"flow_min_l4_data_len":410,"flow_max_l4_data_len":410,"flow_avg_l4_data_len":410,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"140.205.243.64","src_port":50482,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"cmc.tanx.com","url":"cmc.tanx.com\/andc?andc_uid=6693851615885049011&andc_ver=1","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident\/5.0)"}}
+0697{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353144,"pkt_len":283,"pkt":"ABxCjnAxTF4M6gNlCABFAAENPiNAACwGXAmMzfNAwKhzCABQxTJRex+WQrUJ5lAYFg2SoAAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ0IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBjbG9zZQ0KU2VydmVyOiBUZW5naW5lDQpUaW1pbmctQWxsb3ctT3JpZ2luOiAqDQoNCjMxDQpHSUY4OWEBAAEAkQAAAAAA\/\/\/\/\/\/\/\/AAAAIfkEAQAAAgAsAAAAAAEAAQAAAgJUAQA7DQowDQoNCg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1467353147705,"flow_last_seen":1467353147705,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50483,"dst_port":80,"l4_proto":"tcp"}
+0865{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353147,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1467353147705,"flow_last_seen":1467353147705,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":383,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":383,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50483,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=1503291&type=vs&uuid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&area=OVERSEA|TW_HiNet&from=BS_High&to=BS_Standard&player_switch_bs_time=41714&average_download_speed_=158515.200000","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353147,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FnZAADMGI9HKbA7bwKhzCABQxTNxA7Ax9m8I11AYADa2JwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1467353147927,"flow_last_seen":1467353147927,"flow_tot_l4_data_len":588,"flow_min_l4_data_len":588,"flow_max_l4_data_len":588,"flow_avg_l4_data_len":588,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50484,"dst_port":80,"l4_proto":"tcp"}
+1141{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353147,"pkt_len":622,"pkt":"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","pkt_caplen":622,"pkt_type":2048,"pkt_ipoffset":14}
+1022{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1467353147927,"flow_last_seen":1467353147927,"flow_tot_l4_data_len":588,"flow_min_l4_data_len":588,"flow_max_l4_data_len":588,"flow_avg_l4_data_len":588,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50484,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=5&a=4&isfinish=2&tm=7&ra=2&tra=1&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353147&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353148,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5kRtAADMGqSvKbA7bwKhzCABQxTRwkDYOpVBfVlAYADcrXAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1467353150114,"flow_last_seen":1467353150114,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50485,"dst_port":80,"l4_proto":"tcp"}
+1574{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353150,"pkt_len":947,"pkt":"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","pkt_caplen":947,"pkt_type":2048,"pkt_ipoffset":14}
+1171{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1467353150114,"flow_last_seen":1467353150114,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50485,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:23:23|45&av=4.10.004&b=180932301&c=31&ct=5000000927558&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000858874&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353149045&sh=&sq=&sw=&t=mid&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0578{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353150,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5A3BAADMGNsbKbA7swKhzCABQxTUn\/rQSUIG5k1AYACEwggAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjQ5IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1467353151975,"flow_last_seen":1467353151975,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"77.234.40.96","src_port":50486,"dst_port":80,"l4_proto":"tcp"}
+0617{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353151,"pkt_len":231,"pkt":"TF4M6gNlABxCjnAxCABFAADZC01AAIAGRNfAqHMITeooYMU2AFCms6ewkbp6GVAYAQQ6hQAAUE9TVCAvYmMyIEhUVFAvMS4xDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtZW5jDQpVc2VyLUFnZW50OiB7RDY5OTA1NEQtMTY5OS00N0QyLTlCMkItRTk2RjQzOEMxMTYwfQ0KQ29udGVudC1MZW5ndGg6IDU2NzANCkhvc3Q6IGJjdS5mZi5hdmFzdC5jb20NCg0K","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1467353151975,"flow_last_seen":1467353151975,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":197,"flow_max_l4_data_len":197,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"77.234.40.96","src_port":50486,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP","category":"Web"},"http": {"hostname":"bcu.ff.avast.com","url":"bcu.ff.avast.com\/bc2","code":0,"content_type":"application\/x-enc","user_agent":"{D699054D-1699-47D2-9B2B-E96F438C1160}"}}
+2092{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353151,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2098{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2098{"flow_id":53,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1238{"flow_id":53,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":684,"pkt":"TF4M6gNlABxCjnAxCABFAAKeC9pAAIAGQoXAqHMITeooYMU2AFCms7wRkbp6GVAYAQTyKQAA7eVpFrD2Zu2EI78FtkBM3jEoDQCIa14mJVy1dG8nFitBKFNDxTt031KmXckMdxStHEGnAZEDTRy81CV87wwWQpkPnufZzKu7AQ4P7SvwNw7yzYLi4iLldEyhBj45V5eOWlvP0z3AMXP074IqJFywSjCySyiFcI4PRDElNg+TZp5bE384fWOV2qStbKI2Wb+egzlLt1M7CqR\/WL\/5jWmY6cx1BU1dodciv9csLG5vBaimf3jEuAdoHR1Xa0axvDgwa1wPm2+xEAOEPPLQLuJN7+IhNIYUgHrVQ73E8f9iSbKMwWuoQjn9PwypiG7qe7yo7sbieqoE\/eYYYrT1Jw2hvbYFBQCwCmsfMf1XNrNzjQ+RndXQSApR++c\/LzZfOKMKNl11psoG\/DFcghcqFD2u08rpBOK\/VR4jv\/fiY6QGDjo8f0aJH+LNOmQ0uGlj\/LzUp\/VRtb5IUwyT9qqA+ELR0UJMHhU8Fcm8s\/l2bwcF59DS3FLWQyYm52yYRUFx6fsMlB6c4OVvc\/\/gFsBBwtcyD0hKgchZbgG5KGiQ13hHM6DLQ3n3so7vtyty8PAZFIG8JVJNiUT9yk\/KEJt8W4Sad80+OTK3gAJli4TOrPLmLs\/kkUwb319MfVRjWqvL54bGoCS1CL9TPc7dH8XEQSGUHFq7Gbm\/B1nSWjXwQMZyiDT0De48VIRd88pZE2ULceUGkAX9mjwMJ+jCy48ysq1SN9jYApJsR4kozmtYWldAHeqy7jNyoN9epQXhjW\/AuoSCi2D\/50BvY+61yuzlBhp1ViXwqooA0sA04V53f6ZK2ZoaDSGaSKEDEmtr8dDYbImtQBSasNKR","pkt_caplen":684,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1467353152692,"flow_last_seen":1467353152692,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":59648,"dst_port":1900,"l4_proto":"udp"}
+0550{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLGwAAAER1wTAqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1467353152692,"flow_last_seen":1467353152692,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":59648,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+2086{"flow_id":53,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUNKlAADYGYUBN6ihgwKhzCABQxTaRunoZprO+h1AQAAIjzAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjUyIEdNVA0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NCkNvbnRlbnQtTGVuZ3RoOiAyMjM2DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCn1Umady4sbDsD9tRTNsP1C6FsAokaxgc7SL6ZLrE25BG0+yUZu+PVy1H\/J9K0cErRrc\/\/HdTmUobC22C7Oh+QeUvPOvQiF1QcpqN16lRlvZBKeo06G9VcHf\/MYvbG5tm2JC\/BBCnwkxZOS97njKz7SSmXsma6Np2UXwnpag8\/cGFMPG2xUoyylb5zLKzCgM95pdkLxNu3Eza4JI0\/iOlM7QWm2jyDPNTbT+AtqtaAC7x9aTRsJFkI8XzVZ48AAWSSq5PkpdPVuk1zPMre486j3fGY9CEQrCxhx81SYOzbcDyS\/9taiHjo91MJ6DtpdB+UnIbdqCNeZqBzW6lYYMCR+oh0E4YMUVOFwPfPYsxc2\/B1gjZhqXvFChTfPDp5E0TUrSJhE2iZBhLzB+dPVy3wsNmHBJbYFOCi854HfIrwqdA72jFLWqL409Dd6IlQPW1Q6Y1DAu4IqLY+s4xJliR40kKWjT+0tqGst\/jlLcTlzjUyb5J+NKxC6obBSnhlOM\/42sXpKeHbYz0hAbKfbQLQFjmwxZhDH4pfE4Yheb5aenMWBwaKgUCM8qjcuT4PrptsrAS51bDcqL15z6cLvameyyAXNDgyNerGgUYm85RIWH+33r0MZz7e6TsphluEAOWd8aWowma36kji+H\/hBxhJM9HoDQoFyFsnHTmIZSRSRxs+jQDFr2HP5PgdclHMJ6eLziIX+epCYbtCLmzuRV3gKYH8L\/mTiU8PETTw\/FJiRdvPkiQL8MFvRgMX\/7TkbwaJyeCSkxW0KaPnoJsAEMNIoVLr0V5s6rcYmnCq829uBurSKPLf3FguVhOD+EyR33hkzz4bDPLkgXy\/tPmB2eN8c8dfjy899+pJtcXrdDKM9QPjHrTysJtNb4j6Ta9YgMq4CtAv68bEKd6dd7r9hTSvgI2qRzjVlcXNOmCIgA6k9GqX3xt5KRuvjig93RXHPWa1RWw\/zwDrpmyUkeURzbiDH2oMYiqbBG9sMwVZ+rjWqzTxruDObPkAoRj0\/oDIbVBGVx6i\/bi6niM04OMCf0lXlHj3Onf6hj\/gISSBYpdf4StInu4UysKccQRD8a6oJBKrSZgvjO3B3tmyroq8F45N49mzLGxHSQRB8k43UW8EyjNVk4+IPCMFf8v2Ex9hjb7bT7bH0VlW+1ZkBybIbFVKJMdQnJo6lYC3aezxeGWAj1gKdTmx2VQHk\/41yY+DNGjoWg+LTVpFacjONdIG+TJJlh3hSc3DKPhrPmBpDHXELHVxo\/1o5hqaCDoiCGXIAa6smDdVp9XNkBN2PIHSHmY0IHDtpb+kBBoiNgbKBPuiZBjaUpybC8PUMOQtyTQtyhKHowD43Hcd1DIyb7ro9BHT+sUHUP5W0L7Vs0tGhCxRyNb4FPVYMR2LCi5vu2+TI9qaHVXXgc0nOU9AC\/TWupzVoY4Hhc2XEtUKgXEPagTLJJAPFDDHIOKbmZ","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1930{"flow_id":53,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353152,"pkt_len":1193,"pkt":"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","pkt_caplen":1193,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353155,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLG0AAAER1wPAqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1467353155790,"flow_last_seen":1467353155790,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50487,"dst_port":80,"l4_proto":"tcp"}
+1221{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353155,"pkt_len":683,"pkt":"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","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1467353155790,"flow_last_seen":1467353155790,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50487,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=2&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&tm=15&ra=1&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353155&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1467353156641,"flow_last_seen":1467353156641,"flow_tot_l4_data_len":277,"flow_min_l4_data_len":277,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":277,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50488,"dst_port":80,"l4_proto":"tcp"}
+0725{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353156,"pkt_len":311,"pkt":"TF4M6gNlABxCjnAxCABFAAEpDsFAAIAGbi7AqHMI3xpqFMU4AFDYI3WbArNbVVAYAQSIDAAAR0VUIC8yMDE2MDYyNS9hNS9iZi80MTNmOTFhZDEwMWU3ODBhNmI2M2Y4MjZlMjhiOTkyMC54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IFFZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IG1ldGEudmlkZW8ucWl5aS5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNCnF5aWQ6YWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOjUwMDQ5NDYwMF8yMDEyDQpxeXBsYXRmb3JtOjAtMg0KDQo=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1467353156641,"flow_last_seen":1467353156641,"flow_tot_l4_data_len":277,"flow_min_l4_data_len":277,"flow_max_l4_data_len":277,"flow_avg_l4_data_len":277,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50488,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"meta.video.qiyi.com","url":"meta.video.qiyi.com\/20160625\/a5\/bf\/413f91ad101e780a6b63f826e28b9920.xml","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+2084{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353156,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1283{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353156,"pkt_len":721,"pkt":"ABxCjnAxTF4M6gNlCABFAALD\/f5AADgGxVbfGmoUwKhzCABQxTgCs2BB2CN2nFAYAB9NTQAAeAj6KkVzGFgBGjLKoHgWsNDOg9EyBWMg4qw3sngWxFvTJslqEW1dOtsIZ\/G2YAiauUTisVZE0efGwzjXWg05LdZ4rAky0eBYc4m1ISOZy2PN0IHWZC6PtYYzQuJG8j0ND\/TECQTGtXRrmc2gXLGqInHIeH+AZh3hH4eENwhVsfKSjAPO1cTSYzk4VwRGT0LHe4TarWqyLm8S6mgVURj6q4IzFzPKNODMJE042ZbgzNQZongucObqtx3iTeOdAgtOFElsMDiz4j7IiGOewZkNmDWZyzNFp1ZHvEUZnLk3hGq8dm8XeCg2YczZ+wUeo3ON9wWDs+AA03qiAWdBguyZBpyFEaoU8\/GeQWCxJqlYwFm0ElwW+tS7BtGB8In5eNsgxoYYisfxnNwQiUliF8\/KHRWxxZwFnLGTCyWxIc55GI5LybrAWQsivsW+EHBWpMMucU7w7kGRWyyJeW8flHELMtOAswKQchyrCs6qvbWEs4Kz2mjW4n2q4IzsMyyJDQVn3LPtqKOhTxWcdXQc7RMNOFtBRUl84T0EvFVRbcO5vIcwFIPOsU8NnJExccMztsd7CARqqdlc4IxwNkRibA84m1Rl7rEGnA1No1kcPwbOptwRi\/E44GyK5JL0auaczVRLvE\/NOTdmsdhm7yG8mHJSC5pz7grS8T5tznl40Y3X3pwzVoX9E669gXMrSszJXODcCF1fS8YBZ9yrRE6I97v3EKimuN8fx2ED54ZUh6iPbQbnJlpQLEON9xDNzxJJTvAeopn2mnDu4Nya74w45js4t45NmNQ47yFa70xJ7u3OefiZN1kXOHesvIxf4\/Dy8OXXvmF7+\/b4wXuLdx\/fPY3AD+9f8Jzp8vDGHzT9Byu2GoeKGgAADQowDQoNCg==","pkt_caplen":721,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1467353156959,"flow_last_seen":1467353156959,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50489,"dst_port":80,"l4_proto":"tcp"}
+0649{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353156,"pkt_len":253,"pkt":"TF4M6gNlABxCjnAxCABFAADvDvNAAIAGMe3AqHMId7wNvMU5AFAa+1ILYx41VVAYAQTDtAAAR0VUIC9rIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBwZGF0YS52aWRlby5xaXlpLmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KcXlpZDphYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbg0KcXlwaWQ6XzIwMTINCnF5cGxhdGZvcm06MC0yDQoNCg==","pkt_caplen":253,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1467353156959,"flow_last_seen":1467353156959,"flow_tot_l4_data_len":219,"flow_min_l4_data_len":219,"flow_max_l4_data_len":219,"flow_avg_l4_data_len":219,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50489,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pdata.video.qiyi.com","url":"pdata.video.qiyi.com\/k","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0885{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353156,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1467353157063,"flow_last_seen":1467353157063,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50490,"dst_port":80,"l4_proto":"tcp"}
+0785{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":357,"pkt":"TF4M6gNlABxCjnAxCABFAAFXDwhAAIAGMXDAqHMId7wNvMU6AFAWZyP1RIzmWFAYAQR4owAAR0VUIC8yZWZjOGNkNWZiZTBmNGVlNDk4ZmIxYzJmYzFkZThiNi92aWRlb3MvdjAvMjAxNjA2MjUvYTUvYmYvOGRlOWJiOTQ2OTcyYTg4NTg5ZDE2Njc4NjIyOTIxMzAuZjR2PyZ0bj0xMzc3MTkgSFRUUC8xLjENClVzZXItQWdlbnQ6IFFZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IHBkYXRhLnZpZGVvLnFpeWkuY29tDQpBY2NlcHQ6ICovKg0KQWNjZXB0LUVuY29kaW5nOiBnemlwLCBkZWZsYXRlDQpxeWlkOmFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQpxeXBpZDpfMjAxMg0KcXlwbGF0Zm9ybTowLTINCg0K","pkt_caplen":357,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1467353157063,"flow_last_seen":1467353157063,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":323,"flow_max_l4_data_len":323,"flow_avg_l4_data_len":323,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50490,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pdata.video.qiyi.com","url":"pdata.video.qiyi.com\/2efc8cd5fbe0f4ee498fb1c2fc1de8b6\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?&tn=137719","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0951{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":479,"pkt":"ABxCjnAxTF4M6gNlCABFAAHRefhAADQGEgZ3vA28wKhzCABQxTpEjOZYFmclJFAYAB\/Y6wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOS40DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjU2IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDb250ZW50LUxlbmd0aDogMjUyDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KDQp7InQiOiJPVkVSU0VBfFRXX0hpTmV0LTExOC4xNjMuOC45MCIsInoiOiJ0YWliZWlfb3RoZXIiLCJoIjoiLTcyIiwibCI6Imh0dHA6Ly8yMjMuMjYuMTA2LjY2L3ZpZGVvcy92MC8yMDE2MDYyNS9hNS9iZi84ZGU5YmI5NDY5NzJhODg1ODlkMTY2Nzg2MjI5MjEzMC5mNHY\/a2V5PTA3ZWVmMTgyMWUyMzc5ZDMxMzZmZmUxNjA4MjE4NWJhMiZzcmM9aXFpeWkuY29tJiZ0bj0xMzc3MTkmdXVpZD03NmEzMDg1YS01Nzc2MDg0NC1kZSIsImUiOiIwIn0=","pkt_caplen":479,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1467353157138,"flow_last_seen":1467353157138,"flow_tot_l4_data_len":392,"flow_min_l4_data_len":392,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":392,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50491,"dst_port":80,"l4_proto":"tcp"}
+0877{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":426,"pkt":"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","pkt_caplen":426,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1467353157138,"flow_last_seen":1467353157138,"flow_tot_l4_data_len":392,"flow_min_l4_data_len":392,"flow_max_l4_data_len":392,"flow_avg_l4_data_len":392,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50491,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"223.26.106.66","url":"223.26.106.66\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?key=07eef1821e2379d3136ffe16082185ba2&src=iqiyi.com&&tn=137719&uuid=76a3085a-57760844-de","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+2106{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUui9AADgGBqffGmpCwKhzCABQxTtKZselLgIykFAQAB\/aLgAAopnkFb6w\/Gf9wcd\/TnuexQBjLwWa0uCe9TPr4qE3jsphraOf\/lM4Hhi9NJILTNUPpkUh0lJVsTBg0+IryxSW3IwYySV6wkzB0\/tYDwbO6SOx\/W5mmrffIH5hc9hR+iJYkdxSMJyhs5tL+JX3Z4urkWLC21HQmnbWWhKwwr3IOESy8lC4QLT5bzgZZwV6aylc3BKRGmkWqvo3gveBLOrAMA4JoqHhbMBYA7GEB3n5XVRePARG35OUMCE\/8TDQo0+dLC24GKANopCzYZkvfPVaY0dRDrv50emXg1Cs9WSfVu50aDF7YYVdx5mx545GrUAMEsqIjDQ\/4DCox7xS+Ws\/dwFhUTJ0P8Dx\/xK2lp12JPYf\/zG6tdTYMt3AacBTBvLHFFde\/reBoQaTbZB\/vJdywKaKtIzwqCOs4Q9YPbL8+Pq1VE1FdEBeuONtnWPx9wNuAvH6U\/JENWXsD\/bsjom76483YU\/XZIQUgj30cOEgQwuDamiBln+90aAngeN2nOL6ntmgjdG66Xp5PKfwQlwuGdvacgApEFyIvnfxUhm77eXRcDexRzOKtayXJEIXZt52rm2WbDXx+l2L+n6mDI5HPlSGKuvP84rwmMwhT7yEvzQKbivh5sn9I8EjZx6KaukURUZTKe54jHmLC3Jmf2BKkUKfD+otim\/knbUQxDjsPRmRG1Nf5oF86K6KEl\/nFEI9A5kcjFcko+VuDqw9SWzSXgKad5EYc4r+hlUwt3uzj59viQUjCCWYguaIGZ8C5ZjdSExE6IsY1BXoMFqHoRzfJaDg6uSsFAjJS92cQgN0nWwTaQFWx1m2slB35iQ1wft22PbPDl49icFcTFpAz2oY5Pp3lfvj5IUJyUTHt3u8v74exA53o9ooOtbqs2j42om\/zaB3iyhBCsOikAKzbr0K6CxGSwBAWdloUe96BLdalzPNcqhIK0c0YJvH4tBdmDh+5ufseEBw7BGI2ipV6yVNpFO0kDqCajN7YsN05JDg13dAXzY2SAQ5QfKni3cz7N9WhYMt7COKUvI+C0iwIaEB32bniucRrN4HsPO11eCbWDnltN\/+kP2qhoa5r1DcSUAZq6JPm51\/USDg6qO4x\/Vapf6ZVCWehE+KdgGpX4qBTKeA+bV7qois7qvnsCmBXUWPo21DtRYTVMizQCWWQqH0CGGSEtoZ24ZE8Em+sX59yNgKKKnBzY4rxhy1pF8qyBkoHpDm9lBx3JEleYOnrbk5vilJTiHsG0C7im31hM5hXvKl2rEhKIpc+QgsAwc8xEkz7398lWjZRYNmVmvhEG3GTaIjL7zuDYVBFnz\/Ep+CquTSroYI\/KVwc+2ze3Q+yBDcODi+bFdRr\/qJ\/RfL4FgeDb9sduAkPb3xQiixfjLzyzTazf6dzG3+S06aSi8zpu2nZ2pA6Ukh\/FodlR311cw8YfsxYuiSFyYqZDzpce1Qm0XZXnys8qlDnUmjILug1tlJBa1UzH74juRDwgD0Fnwh1MLjNAsmUIrgA0GSsiEjUBU047yfXV\/qzyvQus+1BXKIiklyV0Xin7L0ua0Yj38t6gGn+ytwXAmSh71WYg7o3suhEh2DpzfHKZ9IBKf8gIvOvhTvSepAfXGEaca4phlMY6YIuwsde9HzRk9q6m3wLv6MKf1l9nyMKAHgaDMdK68E7LAU50IjtX2yCF8K","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2080{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2100{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2088{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2089{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2086{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUujdAADgGBp\/fGmpCwKhzCABQxTtKZu8FLgIykFAYAB98CAAAQ1MzBNUboRGy7bA0lEplmRAq0THH4AOtg9a7+p0JmG6Ddt7fhRhk+xXnRiw7P1W059HgEDzqf\/3KRtosswcF4x8JWl1tQIHfeeu+GWTI8AN3m47wSqipDkevF88ToZoH4IUNffbCKZ\/aonvGwQrKV0XF2zF5kABRquSEXnruOUe2vmOxaUFj7SA7amxrgb\/PWnncxhPIkHwQCBRFSv1KcH19GYsbNq2zkJxzaeiK7EUh6SneC1MwJxJmF3zbPKnVKnGtueVuSEulWZEGDzCdTy9D172FEdBcHvQWszPnhuRASzwyTV24NBjlb4sjuNyh6I2PNc1UFrA73FsoSZc0tRioenmAmu4IsbzoJZ4b7ed5q4bVeyJvQInzrV6gNtFt9W1qaxl6kkVXs1NFr3jiVjYWkNn2wBH9YYuWNetXNuGzhfi6h+120VRdmSvbsWocblmZOfen1LBkUtgTCE8j4st5i6T15HXzIUt15W1Vd1d3kXC1rZGdKulsvNbrGP2SE6aHtcXoIqEHh42t8n0OYtkMunYCPCjEMTiZTZoC0HOmQhROHt2c+v3xJUQpADEtz56w3Tg8gIeZ3skppdkKSVpwsMxGoXOvvMOLbvOQxTc2gf4+LOuBhLW86+mSdRBtWBCSfeRkV0Bib7TMEuJXAk2gcIj0V3y7mG+nOBYJUI20gO89SMCInNhaZJPvTsy4aO8TTHIAj\/XM9C9ZAB8ivzFDnFZ2qs+5n4cY7dpT\/lsMyTMj3zuj4JFMmUkdGr7R+enM1RQzPWrPB9VQ9eGJqMb0O3ZJ7yoQdrQY8ixnt6DcHQJeYiSmrnsV0hue25xsOaAlK5BgT0O16xwAT9vHIdVRc7H9u3JYnHoZ2EaO1WiIOdnbQDDy0+FKC2fzTCx+ygBccNdXJrfwgNZt9hUBylUZK1et2n5oifTQAq2F4dY3c7tdUmWsw7Fu\/0wGt1194TrWf1VbKexsJclt3t+FR\/YwjdjAodXMtElqOq7a5kVyMTaSTPItSFKPxqsjhKmMw\/jyEkkwIkG0LCGbX5TkzIgOX97FSbZL3OkwHUyFhYylUUu1fGdtdtQS\/WjPh1DLoyUvVvkj3ZnT9yRJnep95jLFnrP\/QADC42M4MH5WCz6v1jleBaM2\/7RpXfHPs+ZPtezAHCE1UhvbWXXfyxgNIOn+bLoopNcHFZGpQbLWGuHAuHlNtvrEvnJ62N4A1sVPPBPRuyivWqL\/vOMUzfAPtd+xndG890R6Bvpx4fJXynYa0b2odotJfaZhgjCOuG45N7M9M1Q4cFu7j1xWQWh6ucHx2FlOCD8cv\/X+kWgDtffZeCkZzXGOy6h9GM+pSJF4wmQR4HW6j2lmXfqVhFJClnHmavD\/DDG+cFfutq8G8aF0f6r2imhk6+G+95eLdHF5tHMx3nkD8NP3z7qPUb8lE3yuuNVrHHekUI0D1xLDRpIatpdKXQWPp\/wTyJFXpEAd8601oFU1IPvSpIH7sJil0aNz9m3ImJQZtSA73dTNDzPOST\/PKJrXaDnpUR\/QpkpIRfq8taYoOnLD4A3tpKD9mvHmObDBNCCvyszRwgw\/lSzNyRGiWES\/O7nfNxE\/uCbPV\/QPNAnGsHktIsMiOgyKaZlejaHlnkVSRs0sP2gHNvZAg3Kr94X+ezZk8SPGyAZHLLzuVTF6zVusNtsG","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2098{"flow_id":59,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":59,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUujlAADgGBp3fGmpCwKhzCABQxTtKZvjdLgIykFAQAB+YnAAAvqYI4AOylCz5yQ3foOKxjDbmv9\/+2HRuWjxcihIR0XK+pdLoLoBKuTPocg6Qf0mdczhbcRxec1cOF7UPMD1dxR3Swrusd6dYWVTWqk3qrYBw3CHxuADkzUNJXp4QFp\/pu4KXEQBV6VKdkB0a\/ZyA9IbaZVK6wbdQSXCqtuOrx5TELIw13RItZWLPr6HslGfF\/nv7tnryVy34Krh6x6kK\/E\/rFEU2JePyn3LjsApkpHQYQlAuo7E7gz6fbCTJqVcrwT\/LJvTIf\/T1jVnmOID7Vkqmg2p5Hc3e5bpDU6axc9jVA6OQVDN8eR0QubiZjtpoj2ay4Jad9OePtiODGLGD46+Z4ClX2Mg+MA2Z8m3f6pMXcFMQNo4VkDSt7ESW4tElDnvZHGPdKki\/zgP0kSLK4ms9YLJ8oew67nfgUJKbxeT9R69q48wU+4jTbpf5bAdzpbMEKcL8D+vOS8r4OzHcL1GhqkFjIcdGXzqP\/KtUq3FUXHgf7zAUn9uM7utTAe4ZMIrW5VMa3yIdHbv4GA1qnyd6POv\/B6CKzhB+1NS1ngl8J2cOUaOXvQaKwwtHmulPipuEJv0hdCcjMrNQ8aorzYwJB6tZvJkHGbAvopSIfuXNdScu0MSxPD6txzPIrmuQmzDEQ1PGuvlGPaViV\/syRzbeAqsOoFZGRw\/wV0Z3D6s8ysMP5rtYcy9o9hBwcN5dcL7Wu6dX594K6D+6bMQmPYEfQDal\/jMEq+FqFCuqRqjq+YqPyaK5gfQqx2eagNu7e1QAQg\/3vVdJOdHN6TM7EyVwT7nTOjwdb\/VNcBI0W2UeqfMkxLmrNpsLc8OnQV1SApEuvUl9zXsi9b3jbtHPJzK0PIqy2PgsaxEGH4IUmO1f0g77HGoqkd8G+Rg+7M6aVUehIBJ1XaCF0jtoz9AZ3zAbMSY12BkQUURDM+O0Od28PDrTbJGUpwdPw6+H4nTd\/GnKHSsBCrDTVARi56NDktPrmwWqcPBor7lVizGauW9N7f8j8v3aVCKhzf0jC01oSEY4aucf19iGdgOXZxPqhvl07\/1IXutZ0NdP1ura2eKGhJYlGredkJdB2WJ1iRne2k3MwOuCvVEr0n9SzWsQBnkCKtUgjhnYNu5SqSVpAqjLBFDOUbO77we\/7XHO8ptbHsMEikgQJyWVzw6ZlJx4p1cS32YvBMLhp5QSiRzZ6w3jgNev5cGWDBbadDEHE9QbCL4pq+f8afu2cH7gZEUNrTxfmdrLCv0wtwmjOv01S7S7La1j3ZrN5mloI4U\/M00BsBr9t1+DpcxmgoV7nxlsDxvHfIRVnEWYCo3V38HOLiF8RvexCsuWcD3o90mYXe4tjTF55VvRtr4tQzDlNjSf3r2jrQtTZztN7YMVuDIeMwPNMHmN9n5R6ETY3cXG1KviisKE1uqiYHWl6yXjGlSXer9BH85iSVc6QzkQ3x\/w1FMdLN8xUThxVrC5iUfLzayYMq7T4iUqE2G1biKkEH8OHLh1\/Y8aDJELcI\/ZBReEAG7jBmW93\/l1rZsLJfdD9vROVJkmTLIs+++AuJruiYWT1bGecaN6tx0miAZlxj9iN+Il0xFTZyL5LKDie92+jYXufD6ND0GWtEHIB3bE0\/r8wTC1LQNeSpV8AtPd1bq7wEujX5+CYzmVCrj9+jc3ggW887oq\/hUt9EmhxtTO","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2092{"flow_id":59,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUujtAADgGBpvfGmpCwKhzCABQxTtKZwK1LgIykFAQAB\/7cQAAWoM3RfFe7\/6nJJLoAyAPlkOUUKQgnCJGKTTT9eItOdGfuVLXa6lpi5p26R3VdHV8CrxhNmEGq\/qvGEgGxrvliVchyJ09Avg8a0KJmfXEvdXq95RuJ7A\/CX4LBSj6L96UENB8nkhnIQwuVsOR05\/0\/ylDkFdInlFBmnIzB4i4sSG1Q8NnhNeNxAnefOmnf8EZR1l1kY4lruW16kFVzEZHlhUeH3w55mczcYyE\/+8GucLXJXm+juoFAg3WMDcRJhCP0crq3hANgkgNhmrB\/fMWrjtm+zditBt\/YSewZP1Ex1FhjpEZJThEJH89zv3C+sDh1JELXbYbP\/3HO+jRi9RZvcuB7DU6IPYhQ+qvscUXJsrRGy5TovaLMq3d9Z3pE6dklZ11FoJgGHByfWAeyiCmC9mkeCJcjEiTYUgid4tend\/GI\/yMKr0rtooNXvfNgrV7QOH3rd2NbXtqlugVzAk\/h\/tuzszMJ+z8mfg5KNFb6F9mlsXlftM8oYfYAVzASAPQVnaCuqWA0GpZDpDIwOLsSDel50OyUpfvYoQOLIY6iutGj5IjIH4\/rNLqmIwmFXOXeYtvbWMjMZJc7c+OXeSCzGgLIFms9hxich8sdJskJaE3sGRK+KZjD8psqDVmrA4BWK6TdLAdgGd6JMEd\/8XvQnlrfmyMibdkPbJ5RsOQk0Dd5Hjd30xSkPXupSQL10DGY9zCdABLXUrCYNbunhREy8LrnWJ9DPV5gScId8YvPr\/REZnem2MXkNk1ByLuCoHTaPK1GzNQTddD4A+NqEvEtKqPeVFx0qmmvt4DPe+rbLcda3MBV2ih9qbcN9w1jzYPpunTaqiF9eA8zBYZaIK8kf1g8\/OHc6S065vaMpZthu7HcblcIkvmegzM8vZcqwc\/DieINGxDShWRtJuwi31HrVEqhbOXPgNedfij5BfGWgu\/F\/8+ZSgVhF570NuBgnr7IMGZkiGbBKFAEhd6hB7\/w0FO4oDgxZ0GdM1+SAW+vX+Nj0C+HgzqPbd9LzbhCKMmktUjE6AFpql3T00LRvOfFuqE70iOZj+qW6Vc2sEAvtJp\/qnfRGewG9EdZHmiIRQ9Xmc1FBfoM7gSQ7W1xFg3WCGVudOnLDlS5yWTwD62bBDvbYbfnTRC2GRtsLsefcuhIgeV7if+Y0\/c8jBSXLW+4N4iFuosOJlMsXhCS2zIecDJ44YNpoqqMInswi98rCBF6Qth8VWQsQYAH+CZtdDexlMpjOCaPM5OOhnd3SseZ01uVP0wjXUb5gNmnuIOteAJgLA02tf+VnjhYWlhvY1TVeHfIu6QLWQrHvhpz9JLoUh\/pwPpUvoppeUvjctwOVuV+NwMOpX9HWXhAKQov41w7ggk+NaTatfLoFc777BC2lmWRrjmhx9moxhUGPw8lqw5O8QWehphoLv6w96t+Q3bZktKHo1HMpbbnm624Z5l9BmnqtqzbuW4hHtIU32mVGSuKMDfquzMFZP1I+xci\/V\/3O2kqvTWQAWT5j1dzvCP\/5V5rd0m1e1Fr2531Tq72C7XF+XuamqIjh5Y0i72Opai2wE3N6PoYwVd08Kz8B79Bpv4mxIffzaAGymt1CdXnI+3iVzpHibFS6T29PusRPo8Iwu98gAqlywZMAFKJS7rzyX8N4CoZlRN1h6dcgr1i7oKiYPcKkg6cCITKnnO","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2089{"flow_id":59,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":59,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUuj1AADgGBpnfGmpCwKhzCABQxTtKZwyNLgIykFAQAB+naQAAYU84k7x7ndUTNRYwxzzC+8AwF+DC2A9Z\/HWG9YnLUmuxXOeFSnSKV9PNy\/vuudcnT+5mgJxvcQVIDWx17UKgL9\/ED75DX8R56XqPJUv8WOoxFk3CIGU3JD7pllvjFTUrKYwmZmYibcB0BeG+h+zFJ8pSgomuDFmOmEmLD2piCh10AdeAPUgrcq61VM+j9JrjS92oaJ6Dbp8xhdxs2cQrSV3YNGUWa7+RXtP3rjE3Tp46NYSZuHpY2rCArlskC8pfZNbEJbAg7lfWT5ZLDrHXYiepq59Wqr58QSiWsyIH2yKICz1FdguQdNAr3JIEFKLLlV5v4oXHlWuwyeSmr3sVFeWr7toMS+hwbbv0J2AzSnUq+atYLOY+anYH9NdlpXY3TdkKJZ4daQwjArmz7Jsh6AJ7zjJxVZ6lv+36Nud1EUewwUMYHO3GjfX9KCN+CAQJRI1oSjwkZiKcj4KNSgxJpy0\/6oOkeHNJ+LwJlgWzMfSFCG3nGfJJlAFC1DZiGfuAIghMz6Z\/\/cEcEhyzEu76QXKlqlP\/\/xsoZ\/9nMItBD6DsM5kRZQKVIvczDCCoAzby9fVo3uhw7liCu0bW62wOhtUpK8frj5gEeHTr00lR2gk8\/pldg3an9YpexK4O09C7E1N9DA4FE6xgQCE3tmzwVvz015DtjA1I5ZBNy1j3YMAuLk4exIyEGfeQaLN3BiCg1ueAZU74q5b2FARENEFzHONHke6E+SSZnR5l4JHP4jNjCFTVBUinLS5YlU3cqn0G9XkoUKQoBYH2id0lg8HbJNOXwS4jguR9P72chRy7bEjgcQwMo+8o6jXHD5DsTrDYRaHVzLjDtR9cEyB5geg4czbsSZU\/+FRx+yTSvxJWcic+1EuH7CNpT1voYrL55UaM+eLdPzz9G1uPgAtkAWuUt5\/3P8J\/KZodJzZSc+HisCSi0674GM2U5DIa\/hJLSi5qVuv8CZyBHNDBTMM5xGFhw\/rWX1ALDKjX2o+QKrXk9oJdzGh4+0ZWd233npUeRtyZ1Y2PspWOBdGaObqAT84bfFBPk9MDIy41kqmjpxUgl\/AV34kT\/4PpRlCw+kSojMC9c5I\/AkOLS8BmsJAHfNs+5SVWAWSfg123K8RGHIiLW8MpVs\/hZiglehLddK4qlTUKsZuhvFbGvy9463zGfodOjxqRWKv2pUH\/e4JofIhj\/58LG2n0Tj5a3+naBBPG0Z3CxDHa+UevoxY47Mtm31KFo+Ju75jCZmTK+vLKSxIp3DhXByBo6SBb5wqH7pH1XiB4E5pk9kROpjWnPZokVK5BL3MKu9k4zPx6PYY8gYFX0cVpPsRExtgCfaGVSFijYhrkPKRVi3XdhQap0x082cmQcZhNH+3gAUyF0zS\/ra4xAZPL8cIy4xMakcPrjcdv5c9bfZYz5ZCIEvBqEefyLesgjhMia35KUf0D35QDNapwfhqSKdrhFZuQyMIfyB6VY\/F1bWCXN\/NMO+tWIR+ri69IlSkmUpuhFsNY83+O51CdYbz45dERgKHUFK8DLLeeJ\/7G1Kl4C6CHsrMXS4dgfVF8848ibDed\/kVrUl38MtmIaY86EtWuX5gJ3KD0MCHT8RZKU3ZpYMoMCgRzgPJbxnxtpsQdesjngxo2ldjR90vXRAgr0iU6polMy4NGLWtM2aiWpRntd\/q7OA2YYTue","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1467353157433,"flow_last_seen":1467353157433,"flow_tot_l4_data_len":355,"flow_min_l4_data_len":355,"flow_max_l4_data_len":355,"flow_avg_l4_data_len":355,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.13.3","src_port":50492,"dst_port":80,"l4_proto":"tcp"}
+0830{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1467353157433,"flow_last_seen":1467353157433,"flow_tot_l4_data_len":355,"flow_min_l4_data_len":355,"flow_max_l4_data_len":355,"flow_avg_l4_data_len":355,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.13.3","src_port":50492,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"pdata.video.qiyi.com","url":"pdata.video.qiyi.com\/2efc8cd5fbe0f4ee498fb1c2fc1de8b6\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?qyid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&qypid=2012","code":0,"content_type":"","user_agent":"HCDNClient_WINPC;libcurl\/7.26.0 OpenSSL\/1.0.1g zlib\/1.2.5;QK\/10.0.0.293"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1467353157468,"flow_last_seen":1467353157468,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50493,"dst_port":80,"l4_proto":"tcp"}
+1573{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1467353157468,"flow_last_seen":1467353157468,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50493,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:23:23|45&av=4.10.004&b=180932301&c=31&ct=5000000927558&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000858874&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353157046&sh=&sq=&sw=&t=3q&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+1004{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":517,"pkt":"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","pkt_caplen":517,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1467353157509,"flow_last_seen":1467353157509,"flow_tot_l4_data_len":423,"flow_min_l4_data_len":423,"flow_max_l4_data_len":423,"flow_avg_l4_data_len":423,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp"}
+0922{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":457,"pkt":"TF4M6gNlABxCjnAxCABFAAG7D3xAAIAGbLPAqHMI3xpqQsU+AFB482xgj\/e7VVAYAQRcuQAAR0VUIC92aWRlb3MvdjAvMjAxNjA2MjUvYTUvYmYvOGRlOWJiOTQ2OTcyYTg4NTg5ZDE2Njc4NjIyOTIxMzAuZjR2P2tleT0wN2VlZjE4MjFlMjM3OWQzMTM2ZmZlMTYwODIxODViYTImc3JjPWlxaXlpLmNvbSZxeWlkPWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuJnF5cGlkPTIwMTImdXVpZD03NmEzMDg1YS01Nzc2MDg0NC04YiBIVFRQLzEuMQ0KSG9zdDogMjIzLjI2LjEwNi42Ng0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogemgtY24NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IEhDRE5DbGllbnRfV0lOUEM7bGliY3VybC83LjI2LjAgT3BlblNTTC8xLjAuMWcgemxpYi8xLjIuNTtRSy8xMC4wLjAuMjkzDQpSYW5nZTogYnl0ZXM9MzQyNDI1Ni04MDU3MDIzDQoNCg==","pkt_caplen":457,"pkt_type":2048,"pkt_ipoffset":14}
+0930{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1467353157509,"flow_last_seen":1467353157509,"flow_tot_l4_data_len":423,"flow_min_l4_data_len":423,"flow_max_l4_data_len":423,"flow_avg_l4_data_len":423,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"12":"HTTP Numeric IP Address"},"proto":"HTTP","category":"Web"},"http": {"hostname":"223.26.106.66","url":"223.26.106.66\/videos\/v0\/20160625\/a5\/bf\/8de9bb946972a88589d1667862292130.f4v?key=07eef1821e2379d3136ffe16082185ba2&src=iqiyi.com&qyid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&qypid=2012&uuid=76a3085a-57760844-8b","code":0,"content_type":"","user_agent":"HCDNClient_WINPC;libcurl\/7.26.0 OpenSSL\/1.0.1g zlib\/1.2.5;QK\/10.0.0.293"}}
+0577{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5zsFAADMGa3TKbA7swKhzCABQxT0x8BrOPOASCFAYACB8+QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA1OjU3IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+1004{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353157,"pkt_len":517,"pkt":"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","pkt_caplen":517,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353158,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLHIAAAER1v7AqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1467353159222,"flow_last_seen":1467353159222,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65127,"dst_port":80,"l4_proto":"tcp"}
+0741{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353159,"pkt_len":323,"pkt":"TF4M6gNlKDc3Alz6CABFAAE1+vRAAEAGNqjAqAUPROn9hf5nAFAhJnFt6cGPtIAYEBWfeAAAAQEICiYbloUrIzeaR0VUIC9jb21NYWdpY2FuQXBpL2luZGV4LnBocC9Ub29sQm94L3ZlcnNpb24gSFRUUC8xLjENCkhvc3Q6IGFwaS5tYWdpY2Fuc29mdC5jb20NCkFjY2VwdDogKi8qDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLXR3DQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUNClVzZXItQWdlbnQ6IE1hZ2ljYW4gKHVua25vd24gdmVyc2lvbikgQ0ZOZXR3b3JrLzcyMC41LjcgRGFyd2luLzE0LjUuMCAoeDg2XzY0KQ0KDQo=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1467353159222,"flow_last_seen":1467353159222,"flow_tot_l4_data_len":289,"flow_min_l4_data_len":289,"flow_max_l4_data_len":289,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65127,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/index.php\/ToolBox\/version","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}}
+0831{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353159,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0885{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353159,"pkt_len":430,"pkt":"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","pkt_caplen":430,"pkt_type":2048,"pkt_ipoffset":14}
+0901{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353159,"pkt_len":443,"pkt":"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","pkt_caplen":443,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1467353160157,"flow_last_seen":1467353160157,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":63930,"dst_port":1900,"l4_proto":"udp"}
+0554{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353160,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAAClHaUAAAER5dDAqAUw7\/\/\/+vm6B2wAkVW0TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1467353160157,"flow_last_seen":1467353160157,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":63930,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0550{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353161,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLHMAAAER1v3AqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353163,"pkt_len":179,"pkt":"AQBef\/\/6bEAIlAI6CABFAACljZ0AAAERddjAqAUw7\/\/\/+vm6B2wAkVW0TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":53,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353164,"pkt_len":238,"pkt":"TF4M6gNlABxCjnAxCABFAADgGWBAAIAGNr3AqHMITeooYMU2AFCms76HkbqDeFAYAQQ1xQAAUE9TVCAvcHJvdGVjdG9ycyBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LWVuYw0KVXNlci1BZ2VudDoge0Q2OTkwNTRELTE2OTktNDdEMi05QjJCLUU5NkY0MzhDMTE2MH0NCkNvbnRlbnQtTGVuZ3RoOiAxODc4DQpIb3N0OiBiY3UuZmYuYXZhc3QuY29tDQoNCg==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":53,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353164,"pkt_len":1314,"pkt":"TF4M6gNlABxCjnAxCABFAAUUGWFAAIAGMojAqHMITeooYMU2AFCms78\/kbqDeFAQAQT7iAAAfR2Spx\/Qo+fkfzQSETNuA5NB73a8jE5Y7Kuz18xKNBo3H+8CxutmDfQyXEI6AR6cE+i2neYoQn4zeZtVn\/enKL6brIxvXfYj1gt0F+8KbtUavqrRr6tn4f00ugVMZk2LQmjzbgCKCT5087+gPJ6Nq\/baOGom5C2aC7PTvrXl9hMU1tjTClbpEYnAMCN8l9VwHJUtKM9jqLOPYsglBwhBFVmWhiss90i\/XH7vEuolafmDm9gP8mWoRzKpPyOAXHcgZMBRDccfa4KyKMG55zqL5r5AxCdeTY6DBj6UdUu6oybYOdG6vIvEkD4tnvrz1hO6AbwoiM9mu2xeEbqXkQECXLSqdiA5gkB3GSJ1pSHWxrlOHgFiIoy4C\/hI85\/YxB9+a49yOTWLzWghOHln6jeXDw2Oa0x8gAR5dlayLrv7S8lQ4PhT+uVqpzFbyKmRAtbPIYHFNSX62sI4p0rkh2pIiTItOu\/uWGxY3HuCG91oYdcWFO42\/W\/GJe01f+DDDte4wuMZ3tsH5XT1CxQk49k2F2SAHwDDZLfgrHNoSsS+4+Z4IzQ181NHgG3BjomptLiSytpX+gNDj8fQw8JppcmU56UETgKXK1+sby1MZiNMiInzYfyF0Xng7qqWmHKqST5PyAsXgQhrLvvtYMmjWTSZyHRQ0IX0O7ujcdOEi0FuS6rCi5tob7MX7h7ClnlenSE63qNEJdfoalq6bbSJ1HHmmKJXo+WsPrba6Tl4WugQcA+Rw1Vh6UsirDsfX7xSFdtGzqpSojs\/AYV4cjyNWjUd00IAjBC9lOEgpokouG\/FwTjqe2Vf6YaYoWENDb\/JMaTWLLK38Zx6G36Etn+9JRxl7Rx92L\/f30eOtgleoW0n0F8qFbdDJwHXoMKuvvqmghyLqr4o+OV8QozuhznvjFAZ5VXJqX2dEjBRkeROzA2oC16yDK\/t0MaytJ6foLFmk9Jrdj+vpZJ\/2B\/oQxIzc\/KGd7GPzB7A+H7W921P8eiWPbYIGukX8oOHQQGFULEKjZZWJR6+atTY7KNhDUYtAvGQeW2ePaJks3bsBAUARTQ0rVWUl+Treas6iiJXQdPO+BpJ4Yrbrs3Jf7qNbqz\/wGP\/+SneINTJNocAXSudLk2sK\/d3HDKn1dZtfdmFkCHmNsPDstlKRD+TNKQjUDYqwIRi7goqTY+0vU9feO+rU81VQrLU+kPKR80cbAbbSYSHVD8hy\/KX6LD3IsrjnRkoO5Y2jjLGQoaUcsW6p+sShoFMT4VBCVqJ1GS5pceWdMAY0RTilrNPYp9T1zExU9YrCfljRFwczBjpBlngMT4080y4PVeb\/jjG4ppLFhdhr8Yw1qYJejl++MY+\/QJ4pPXNvCpZTJscfjD0UAzkDT\/CSzGQBNll9T47jhb8xMmdi8KNKx+o1t0LIlq6YYHmGOJ9E7s9UhidWiHje65nqHEtga1E4U139UNleXgjufDw7Yq2vIIZqGo5w++kJhenfrWlVUeISfyIhWGx1e45gSMYpm6h9D4ehGojlkJwl46iZkVPdrjzOCdmrvpYYbt5gqWT8lT4\/DhHX2+g05nlxOApJlmrEvBjkEDQeQIRYcDEAFwXD+AENkmAshaRlcUT409v1qwgYFzmUPQ50PZsULQ5G+k94I3YNLcQhhDz4VJ6N7Dus8hU\/vEzsdedcrV2uh4w","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1224{"flow_id":53,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353164,"pkt_len":672,"pkt":"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","pkt_caplen":672,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353164,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLHoAAAER1vbAqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":53,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2095{"flow_id":53,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1467353165300,"flow_last_seen":1467353165300,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50495,"dst_port":80,"l4_proto":"tcp"}
+1574{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1467353165300,"flow_last_seen":1467353165300,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50495,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:23:23|45&av=4.10.004&b=180932301&c=31&ct=5000000927558&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000858874&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353165047&sh=&sq=&sw=&t=sp&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5NehAADMGBE7KbA7swKhzCABQxT9xQcd9Us+DmFAYACAMewAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA0IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1467353165456,"flow_last_seen":1467353165456,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50496,"dst_port":80,"l4_proto":"tcp"}
+2066{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":1314,"pkt":"TF4M6gNlABxCjnAxCABFAAUUGh1AAIAGeifAqHMIZePIC8VAAFBgEsEemWlGj1AQ\/\/DZSAAAR0VUIC90cmFjazI\/YT0wJmFzPTE7MiwzOzQsNSZiPTE0NjczNTMxNjUmYz05NjY1NDJjODJhNTY5NGQwZTk0M2Q1MGQ1ZmNmNWE1NSZjdj01LjIuMTUuMjI0MCZkPTUwMDAwMDA4NTQ5MzQmZHI9MjE3NSZmPTRlM2FlNDE1YTU4NDc0OGFjOWFhMzE2MjhmMzlkMWU4Jmc9MF9hYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbiZoPSZpPXFjXzEwMDAwMV8xMDAxNDAmaXY9MCZqPTMxJms9MTgwOTMyMzAxJmtwPTRlM2FlNDE1YTU4NDc0OGFjOWFhMzE2MjhmMzlkMWU4Jm49NDc5NTMxMDAwJm89MSZwPTEwMDAwMDAwMDAzODEmcT01MDAwMDAwOTIzNDQ3JnI9YzQ4ODllNjRhZDlkOWVlYjlmZjQzODkxMDg1MGM0NDImcnQ9MTQ2NzM1MzExMyZzPThlZGI2OTRjOGM4Y2NhOTIzZDNlYWU2NjIyZjlhZWU2JnN2PTQuMTAuMDA0JnU9MSZ1cD0mdj01MDAwMDAwODU0ODU4JnZlPTEmdz00LDUgSFRUUC8xLjENCkFjY2VwdC1MYW5ndWFnZTogemgtQ04NClJlZmVyZXI6IGh0dHA6Ly93d3cuaXFpeWkuY29tL2NvbW1vbi9mbGFzaHBsYXllci8yMDE0MDkyNC9NYWluUGxheWVyXzVfMl8zX2MzXzJfMV82LnN3Zg0KcXlpZDogYWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4NCnF5cGlkOiBfMjAxMg0KcXlwbGF0Zm9ybTogMC0yDQp4LWZsYXNoLXZlcnNpb246IDEyLDAsMCw3MA0KQWNjZXB0OiAqLyoNClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzQuMCAoY29tcGF0aWJsZTsgTVNJRSA4LjA7IFdpbmRvd3MgTlQgNi4xOyBXT1c2NDsgVHJpZGVudC80LjA7IFNMQ0MyOyAuTkVUIENMUiAyLjAuNTA3Mjc7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wKS9RWS1QbGF5ZXItV2luZG93cy8yLjAuMTAyDQpIb3N0OiBhcGkuY3VwaWQuaXFpeWkuY29tDQpDb29raWU6IHBwc19jbGllbnRfdmVyMj01LjIuMTUuMjI0MDsgVDAwNDA0PTRlM2FlNDE1YTU4NDc0OGFjOWFhMzE2MjhmMzlkMWU4OyBfcHBzX2l2aT1WazQ5TVRZd05UQTFMYVcvcFBtaFJ6OC9QNlRhcEVlbXVEOC9wTSt3Wmo4dHBMV3gzemd3cGxvL3BHYW9jU1pXVUQweEpsWkRQVDgvUHo4K3BMV3gzemd3cGxvL3BHYW9jU1pXU2owdE1TWldVejFXSmxaRVBTWldWRnRCWFQweU1UYzFKbFpOUFNaV1ZqMDFMakl1TVRVdU1qSTBNQ1pXVlQxb2RIUndPaTh2ZDNkM0xtbHhhWGxwTG1OdmJTOTJYekU1Y25K","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1268{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1467353165456,"flow_last_seen":1467353165456,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50496,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"api.cupid.iqiyi.com","url":"api.cupid.iqiyi.com\/track2?a=0&as=1;2,3;4,5&b=1467353165&c=966542c82a5694d0e943d50d5fcf5a55&cv=5.2.15.2240&d=5000000854934&dr=2175&f=4e3ae415a584748ac9aa31628f39d1e8&g=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&h=&i=qc_100001_100140&iv=0&j=31&k=180932301&kp=4e3ae415a584748ac9aa31628f39d1e8&n=479531000&o=1&p=1000000000381&q=5000000923447&r=c4889e64ad9d9eeb9ff438910850c442&rt=1467353113&s=8edb694c8c8cca923d3eae6622f9aee6&sv=4.10.004&u=1&up=&v=5000000854858&ve=1&w=4,5","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0635{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":241,"pkt":"TF4M6gNlABxCjnAxCABFAADjGh5AAIAGflfAqHMIZePIC8VAAFBgEsYKmWlGj1AY\/\/BFbwAAc2RuVjRiR2N1YUhSdGJBPT07IFFDMDA2PXU1NDl2cHoxMGw5ZmthdHVtNGFsdzRicDsgUUMwMDg9MTQ2NjY0NTgxNi4xNDY2NjQ1ODE2LjE0NjY2NDU4MTYuMTsgSG1fbHZ0XzUzYjczNzRhNjNjMzc0ODNlNWRkOTdkNzhkOWJiMzZlPTE0NjY2NDU4MTc7IFFDMDA1PWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQoNCg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":306,"pkt":"ABxCjnAxTF4M6gNlCABFAAEkdU5AAC8Gc+Zl48gLwKhzCABQxUCZaUaPYBLGxVAYP\/ygXgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgNCkNvbnRlbnQtTGVuZ3RoOiAyDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCm9r","pkt_caplen":306,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1467353165563,"flow_last_seen":1467353165563,"flow_tot_l4_data_len":970,"flow_min_l4_data_len":970,"flow_max_l4_data_len":970,"flow_avg_l4_data_len":970,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50497,"dst_port":80,"l4_proto":"tcp"}
+1651{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":1004,"pkt":"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","pkt_caplen":1004,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1467353165563,"flow_last_seen":1467353165563,"flow_tot_l4_data_len":970,"flow_min_l4_data_len":970,"flow_max_l4_data_len":970,"flow_avg_l4_data_len":970,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50497,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"click.hm.baidu.com","url":"click.hm.baidu.com\/mkt.gif?ai=8452891900c903ae7a876447923a5aec&et=0","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0633{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":241,"pkt":"ABxCjnAxTF4M6gNlCABFAADj3khAAC0GT217fXAxwKhzCABQxUHmpXH1I+1Zk1AYAIIWkgAASFRUUC8xLjEgMjA0IE5vIENvbnRlbnQNCkNvbnRlbnQtVHlwZTogaW1hZ2UvZ2lmDQpDYWNoZS1Db250cm9sOiBwcml2YXRlLCBtYXgtYWdlPTAsIG5vLWNhY2hlDQpQcmFnbWE6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjowNSBHTVQNClNlcnZlcjogYXBhY2hlDQoNCg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+1574{"flow_id":65,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":67,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAo3kpAAC0GUCZ7fXAxwKhzCABQxUHmpXKwI+1ZlFARAILziAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":65,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5NelAADMGBE3KbA7swKhzCABQxT9xQcgOUs+HFFAYACQHagAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA1IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+1582{"flow_id":65,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":952,"pkt":"TF4M6gNlABxCjnAxCABFAAOqGl9AAIAGz+XAqHMIymwO7MU\/AFBSz4cUcUHIn1AYQO6GIwAAR0VUIC9jcDIuZ2lmP2E9NGUzYWU0MTVhNTg0NzQ4YWM5YWEzMTYyOGYzOWQxZTgmYWk9MXx8NzEwMDAwMDF8fDUwMDAwMDA4NTQ5MzR8fDUwMDAwMDA5MjM0NDd8fHJvbGwmYXM9JmF2PTQuMTAuMDA0JmI9MTgwOTMyMzAxJmM9MzEmY3Q9JmQ9MjE3NSZkaT0mZHA9JmU9YzQ4ODllNjRhZDlkOWVlYjlmZjQzODkxMDg1MGM0NDImZWM9JmVtPSZmaT0mZz0wJmw9TVRFNExqRTJNeTQ0TGprdyZtaz0mbnc9Jm9kPSZvaT0mcD10JnBwPSZyYz0tMSZyZD04NSZyaT0mcz0xNDY3MzUzMTY1MDUwJnNoPSZzcT0mc3c9JnQ9cyZ1PTBfYWFvZWZkdHFnZmRlcHhjMnRudjNwaXVjZ2NiNGVvZm4mdj00Nzk1MzEwMDAmdnY9NS4yLjE1LjIyNDAmeD0meT1xY18xMDAwMDFfMTAwMTQwIEhUVFAvMS4xDQpBY2NlcHQtTGFuZ3VhZ2U6IHpoLUNODQpSZWZlcmVyOiBodHRwOi8vd3d3LmlxaXlpLmNvbS9jb21tb24vZmxhc2hwbGF5ZXIvMjAxNDA5MjQvTWFpblBsYXllcl81XzJfM19jM18yXzFfNi5zd2YNCnF5aWQ6IGFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQpxeXBpZDogXzIwMTINCnF5cGxhdGZvcm06IDAtMg0KeC1mbGFzaC12ZXJzaW9uOiAxMiwwLDAsNzANCkFjY2VwdDogKi8qDQpQcmFnbWE6IG5vLWNhY2hlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgOC4wOyBXaW5kb3dzIE5UIDYuMTsgV09XNjQ7IFRyaWRlbnQvNC4wOyBTTENDMjsgLk5FVCBDTFIgMi4wLjUwNzI3OyAuTkVUIENMUiAzLjUuMzA3Mjk7IC5ORVQgQ0xSIDMuMC4zMDcyOTsgTWVkaWEgQ2VudGVyIFBDIDYuMCkvUVktUGxheWVyLVdpbmRvd3MvMi4wLjEwMg0KSG9zdDogbXNnLjcxLmFtDQoNCg==","pkt_caplen":952,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":65,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353165,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5NepAADMGBEzKbA7swKhzCABQxT9xQcifUs+KllAYACcDVAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA1IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":1467353166729,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":39383,"dst_port":1900,"l4_proto":"udp"}
+0491{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353166,"pkt_len":130,"pkt":"AQBef\/\/69AnYH69kCABFAAB0AABAAAERw5fAqAU\/7\/\/\/+pnXB2wAYBOHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KTWFuOnNzZHA6ZGlzY292ZXINCnN0OnNzZHA6YWxsDQpNWDozDQoNCg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":1467353166729,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":39383,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":1467353166729,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":60976,"dst_port":1900,"l4_proto":"udp"}
+0535{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353166,"pkt_len":165,"pkt":"AQBef\/\/69AnYH69kCABFAACXAABAAAERw3TAqAU\/7\/\/\/+u4wB2wAg73KTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KTWFuOnNzZHA6ZGlzY292ZXINCnN0OnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVJlbmRlcmVyOjENCk1YOjMNCg0K","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":1467353166729,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":60976,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1467353167288,"flow_last_seen":1467353167288,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":660,"flow_max_l4_data_len":660,"flow_avg_l4_data_len":660,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50498,"dst_port":80,"l4_proto":"tcp"}
+1241{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353167,"pkt_len":694,"pkt":"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","pkt_caplen":694,"pkt_type":2048,"pkt_ipoffset":14}
+1054{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1467353167288,"flow_last_seen":1467353167288,"flow_tot_l4_data_len":660,"flow_min_l4_data_len":660,"flow_max_l4_data_len":660,"flow_avg_l4_data_len":660,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50498,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.video.qiyi.com","url":"msg.video.qiyi.com\/tmpstats.gif?type=recctplay20121226&usract=show&ppuid=-1&uid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&event_id=4b0868920b0f8285320a9e00ee0369e5&cid=31&bkt=pps_c_zebra_main_default&area=pps_c_zebra&platform=2012&albumlist=470694500,471591300,465641000,472887100,471788100,473746300,471948300,473694600,472189500&aid=479531000&source=0,1,1,1,1,1,1,1,1&_=1467353167087","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident\/5.0)"}}
+0577{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353167,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5WoJAAC4GvY4kbtwPwKhzCABQxUI6Bo8kfalyYFAYPAD9ZAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjA2IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353167,"pkt_len":175,"pkt":"AQBef\/\/6GF4PUugBCABFAAChLIIAAAER1u7AqAU57\/\/\/+ukAB2wAjbKhTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1467353170523,"flow_last_seen":1467353170523,"flow_tot_l4_data_len":1063,"flow_min_l4_data_len":1063,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":1063,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.76","src_port":50499,"dst_port":80,"l4_proto":"tcp"}
+1775{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353170,"pkt_len":1097,"pkt":"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","pkt_caplen":1097,"pkt_type":2048,"pkt_ipoffset":14}
+0988{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1467353170523,"flow_last_seen":1467353170523,"flow_tot_l4_data_len":1063,"flow_min_l4_data_len":1063,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":1063,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.76","src_port":50499,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?t=5&pf=201&p=11&p1=114&rn=1467353167221&a=34&clt=tvg2015_baikeB_comment_show&type=pc&ref=noref&url=http%3A\/\/vodguide.pps.iqiyi.com\/page.php%3Fversion%3D5.2.15.2240%23class%3D200003719%2524%2524%2524%2524180932301%26entityid%3D479531000%26baikeid%3D203229490&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident\/5.0)"}}
+0578{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353171,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FgtAADMGd2lvzhZMwKhzCABQxUNAfXm33UKQZVAYACEI\/gAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjEwIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1467353172446,"flow_last_seen":1467353172446,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"23.41.133.163","src_port":50500,"dst_port":80,"l4_proto":"tcp"}
+0697{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353172,"pkt_len":289,"pkt":"TF4M6gNlABxCjnAxCABFAAETH7ZAAIAGCbLAqHMIFymFo8VEAFBenvyU0fNBYlAYAQQxqAAAR0VUIC9wY2EzLWc1LmNybCBIVFRQLzEuMQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0OiAqLyoNCklmLU1vZGlmaWVkLVNpbmNlOiBUaHUsIDI0IE1hciAyMDE2IDE3OjQwOjA1IEdNVA0KSWYtTm9uZS1NYXRjaDogIjE3MjE5NjllNzMyYmNmZGRhNGQ4NWMxNjM5MGViYTcwOjE0NTg4NDI1OTciDQpVc2VyLUFnZW50OiBNaWNyb3NvZnQtQ3J5cHRvQVBJLzYuMQ0KSG9zdDogczEuc3ltY2IuY29tDQoNCg==","pkt_caplen":289,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1467353172446,"flow_last_seen":1467353172446,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":255,"flow_max_l4_data_len":255,"flow_avg_l4_data_len":255,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"23.41.133.163","src_port":50500,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"s1.symcb.com","url":"s1.symcb.com\/pca3-g5.crl","code":0,"content_type":"","user_agent":"Microsoft-CryptoAPI\/6.1"}}
+1436{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353172,"pkt_len":839,"pkt":"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","pkt_caplen":839,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1467353172912,"flow_last_seen":1467353172912,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50501,"dst_port":80,"l4_proto":"tcp"}
+1574{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353172,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1467353172912,"flow_last_seen":1467353172912,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50501,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353172051&sh=&sq=&sw=&t=1q&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353173,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5BZNAADMGNKPKbA7swKhzCABQxUX+SRXJ6QOJeVAYACCXCgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjEyIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1467353179045,"flow_last_seen":1467353179045,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":58897,"dst_port":1900,"l4_proto":"udp"}
+0550{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353179,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6EAAAER3+LAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1467353179045,"flow_last_seen":1467353179045,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":58897,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+1574{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353180,"pkt_len":947,"pkt":"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","pkt_caplen":947,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1467353180357,"flow_last_seen":1467353180357,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50502,"dst_port":80,"l4_proto":"tcp"}
+1573{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353180,"pkt_len":947,"pkt":"TF4M6gNlABxCjnAxCABFAAOlJglAAIAGxEDAqHMIymwO7MVGAFChhpBHZLD+y1AYQTfUEAAAR0VUIC9jcDIuZ2lmP2E9NGUzYWU0MTVhNTg0NzQ4YWM5YWEzMTYyOGYzOWQxZTgmYWk9JmFzPTE6NDU6MjN8NDUmYXY9NC4xMC4wMDQmYj0xODA5MzIzMDEmYz0zMSZjdD01MDAwMDAwOTIzNDQ3JmQ9MjE3NSZkaT0mZHA9NzEwMDAwMDEmZT1jNDg4OWU2NGFkOWQ5ZWViOWZmNDM4OTEwODUwYzQ0MiZlYz0mZW09JmZpPSZnPTAmbD1NVEU0TGpFMk15NDRMamt3Jm1rPSZudz0mb2Q9NTAwMDAwMDg1NDkzNCZvaT0mcD1hJnBwPSZyYz0mcmQ9JnJpPSZzPTE0NjczNTMxODAwNTImc2g9JnNxPSZzdz0mdD1taWQmdT0wX2Fhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuJnY9NDc5NTMxMDAwJnZ2PTUuMi4xNS4yMjQwJng9Jnk9cWNfMTAwMDAxXzEwMDE0MCBIVFRQLzEuMQ0KQWNjZXB0LUxhbmd1YWdlOiB6aC1DTg0KUmVmZXJlcjogaHR0cDovL3d3dy5pcWl5aS5jb20vY29tbW9uL2ZsYXNocGxheWVyLzIwMTQwOTI0L01haW5QbGF5ZXJfNV8yXzNfYzNfMl8xXzYuc3dmDQpxeWlkOiBhYW9lZmR0cWdmZGVweGMydG52M3BpdWNnY2I0ZW9mbg0KcXlwaWQ6IF8yMDEyDQpxeXBsYXRmb3JtOiAwLTINCngtZmxhc2gtdmVyc2lvbjogMTIsMCwwLDcwDQpBY2NlcHQ6ICovKg0KUHJhZ21hOiBuby1jYWNoZQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNClVzZXItQWdlbnQ6IE1vemlsbGEvNC4wIChjb21wYXRpYmxlOyBNU0lFIDguMDsgV2luZG93cyBOVCA2LjE7IFdPVzY0OyBUcmlkZW50LzQuMDsgU0xDQzI7IC5ORVQgQ0xSIDIuMC41MDcyNzsgLk5FVCBDTFIgMy41LjMwNzI5OyAuTkVUIENMUiAzLjAuMzA3Mjk7IE1lZGlhIENlbnRlciBQQyA2LjApL1FZLVBsYXllci1XaW5kb3dzLzIuMC4xMDINCkhvc3Q6IG1zZy43MS5hbQ0KDQo=","pkt_caplen":947,"pkt_type":2048,"pkt_ipoffset":14}
+1171{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1467353180357,"flow_last_seen":1467353180357,"flow_tot_l4_data_len":913,"flow_min_l4_data_len":913,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":913,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50502,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353180052&sh=&sq=&sw=&t=mid&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0577{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353180,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC501VAADMGZuDKbA7swKhzCABQxUZksP7LoYaTxFAYACF90QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjE5IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1467353180830,"flow_last_seen":1467353180830,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":52529,"dst_port":1900,"l4_proto":"udp"}
+0554{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353180,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUgAAAQRyyvAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1467353180830,"flow_last_seen":1467353180830,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":52529,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1467353181295,"flow_last_seen":1467353181295,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65128,"dst_port":80,"l4_proto":"tcp"}
+0754{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353181,"pkt_len":331,"pkt":"TF4M6gNlKDc3Alz6CABFAAE99F1AAEAGPTfAqAUPROn9hf5oAFDPYUlYxJOK\/oAYEBX74gAAAQEICiYb7H8rI43TR0VUIC9jb21NYWdpY2FuQXBpL2NvbXBvc2l0ZS9hcHAucGhwL0dsb2JhbC9JbmRleC9pcCBIVFRQLzEuMQ0KSG9zdDogYXBpLm1hZ2ljYW5zb2Z0LmNvbQ0KQWNjZXB0OiAqLyoNCkFjY2VwdC1MYW5ndWFnZTogemgtdHcNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZQ0KVXNlci1BZ2VudDogTWFnaWNhbiAodW5rbm93biB2ZXJzaW9uKSBDRk5ldHdvcmsvNzIwLjUuNyBEYXJ3aW4vMTQuNS4wICh4ODZfNjQpDQoNCg==","pkt_caplen":331,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1467353181295,"flow_last_seen":1467353181295,"flow_tot_l4_data_len":297,"flow_min_l4_data_len":297,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":297,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65128,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"api.magicansoft.com","url":"api.magicansoft.com\/comMagicanApi\/composite\/app.php\/Global\/Index\/ip","code":0,"content_type":"","user_agent":"Magican (unknown version) CFNetwork\/720.5.7 Darwin\/14.5.0 (x86_64)"}}
+0831{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353181,"pkt_len":390,"pkt":"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","pkt_caplen":390,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353182,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6IAAAER3+HAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353183,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUkAAAQRyyrAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353185,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6MAAAER3+DAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1467353185940,"flow_last_seen":1467353185940,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50503,"dst_port":80,"l4_proto":"tcp"}
+1221{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353185,"pkt_len":683,"pkt":"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","pkt_caplen":683,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1467353185940,"flow_last_seen":1467353185940,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50503,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=2&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&tm=30&ra=1&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=6&r=500494600&aid=502959900&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=windows&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353185&islocal=0&as=d19f64047b641cd6ff096b04fb2a30b5&ve=3cc0c8fa372625e64143144816f3e968&pe=c95d992e29856dc84f2e9907a2e4b282&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0578{"flow_id":78,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353186,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5ehdAADMGwC\/KbA7bwKhzCABQxUdzEkFurBLg+VAYADiXAQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":76,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353186,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUoAAAQRyynAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1467353187172,"flow_last_seen":1467353187172,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp"}
+0550{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353187,"pkt_len":175,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAgsAAAERAYPAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1467353187172,"flow_last_seen":1467353187172,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0551{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353188,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6QAAAER39\/AqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1467353189325,"flow_last_seen":1467353189325,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50505,"dst_port":80,"l4_proto":"tcp"}
+0573{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":198,"pkt":"TF4M6gNlABxCjnAxCABFAAC4LaNAAIAGT77AqHMI3xpqE8VJAFB9cer6SbS1WFAYQTc4sgAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL2Rvd25sb2FkZXIuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IERvd25sb2FkZXINCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1467353189325,"flow_last_seen":1467353189325,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50505,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/downloader.ini","code":0,"content_type":"","user_agent":"Downloader"}}
+1065{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":566,"pkt":"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","pkt_caplen":566,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":80,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":202,"pkt":"TF4M6gNlABxCjnAxCABFAAC8LbBAAIAGT63AqHMI3xpqE8VJAFB9ceuKSbS3WFAYQLejygAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL0Rvd25sb2FkSGVscGVyLmRsbCBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBEb3dubG9hZGVyDQpIb3N0OiBzdGF0aWMucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1467353189363,"flow_last_seen":1467353189363,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50504,"dst_port":80,"l4_proto":"tcp"}
+1573{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1467353189363,"flow_last_seen":1467353189363,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50504,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353187053&sh=&sq=&sw=&t=3q&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+2067{"flow_id":80,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2063{"flow_id":80,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNhAADgGLC3fGmoTwKhzCABQxUlJtLxEfXHsHlAQACH4xQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2063{"flow_id":80,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNlAADgGLCzfGmoTwKhzCABQxUlJtMEwfXHsHlAQACHz2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2094{"flow_id":80,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNpAADgGLCvfGmoTwKhzCABQxUlJtMYcfXHsHlAQACEZMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgETQMQw8zMzMzMzMzMzMxWi\/Ho658AAPZEJAgBdAlW6KiIAACDxASLxl7CBADMzOh9mgAAuAEAAADDzMzMzMxq\/2io\/AIQZKEAAAAAUIPsCFNVVqEwzQMQM8RQjUQkGGSjAAAAAMdEJCAAAAAAi1wkKIXbD4QcAQAAiweDePQAD4wQAQAAU1Do2HABAIPECIXAD4T+AAAAKwfR+Ivwg\/7\/D4TvAAAAVo1EJBRQi8\/ojBkAAMZEJCABi0wkEIN59AB+EotMJCyLQQiNVCQQUlDoF6YAAIsHi0D0K0P0jUwkFCvGUFGLz+jUGAAAxkQkIAKLCIs3jUHwg+4QO8Z0RIN+DACNbgx8L4sQOxZ1KVDo7CgAAIvYg8QEg8j\/8A\/BRQBIhcB\/CosOixGLQgRW\/9CDwxCJH+sMi0H0UFGLz+i9IwAAxkQkIAGLRCQUg8DwjUgMg8r\/8A\/BEUqF0n8KiwiLEVCLQgT\/0MZEJCAAi0QkEIPA8I1IDIPK\/\/APwRFKhdIPj+f+\/\/+LCIsRUItCBP\/Q6dj+\/\/+LD4N59AB+DotMJCyLQQhXUOhApQAAjUPwx0QkIP\/\/\/\/+NUAyDyf\/wD8EKSYXJfwqLCIsRUItCBP\/Qi0wkGGSJDQAAAABZXl1bg8QUwggAzMzMzMzMzMzMzMxVjawk7Pf\/\/4HsFAgAAGr\/aIP+AhBkoQAAAABQgezYAAAAoTDNAxAzxYmFEAgAAFNWV1CNRfRkowAAAACJZfAz\/4l9\/GgMTQMQjU2IxkX8AejrIwAAalBRxkX8AovMiWWsaBxNAxDo","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2151{"flow_id":80,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2139{"flow_id":80,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUlNxAADgGLCnfGmoTwKhzCABQxUlJtM\/0fXHsHlAQACFJ0QAAtAAAg32AAw+EuAAAAMZF\/BGLRdSDwPCNUAyDyf\/wD8EKSYXJfwqLCIsRUItCBP\/QxkX8EItF2IPA8I1IDIPK\/\/APwRFKhdJ\/CosIixFQi0IE\/9CNR\/DGRfwPjUgMg8r\/8A\/BEUqF0n8KiwiLEVCLQgT\/0MZF\/A6LRcSDwPCNSAyDyv\/wD8ERSoXSfwqLCIsRUItCBP\/QxkX8DYtF6IPA8I1IDIPK\/\/APwRFKhdJ\/CosIixFQi0IE\/9DGRfwMjUbw6YoFAACNTdxRjVWwUo1FjFCzAeglEwAAg8QMaNxNAxBQjU3sUcZF\/BPozxMAAIPEDMZF\/BWLRYyDwPCNUAyDyf\/wD8EKSYXJfwqLCIsRUItCBP\/Qg3\/0AA+EFgEAAItN7Is12BIDEFH\/1oXAdEhRjUfwiWWki\/RQ6IAhAACDwBCDxASJBsZF\/BaLRexRg8DwiWXAi\/RQ6GIhAACDwBCJBoPEBMZF\/BXogQoAAITAD5TD6bYAAABo8E0DEI1V7FKNRbxQ6DUTAACDxAzGRfwXi028Uf\/WhcB0cItF7IN4\/AF+D4tQ9FKNTezobxoAAItF7Ivwi0W8g3j8AX4Pi0D0UI1NvOhVGgAAi0W8VlDoImgBAIPECIXAdTBRjVW0i8yJZcBS6JUhAABRxkX8GI1F7IvMiWWkUOiCIQAAxkX8F+jpCQAAhMAPlMPGRfwVi0W8g8DwjUgMg8r\/8A\/BEUqF0n8KiwiLEVCLQgT\/0ITbD4ScAQAAi0XYalBRg8DwiWXAi\/RQ6HUgAACDxASNjRz\/\/\/+DwBBRiQbogSEAAI21HP\/\/\/8ZF\/Bno4iIAAI1V3FKNRbBQjU2sUeiBEQAAg8QMaPxNAxBQjVW4UsZF\/BroKxIAAIPEDMZF\/ByLRayDwPCNSAyDyv\/wD8ERSoXSfwqLCIsRUItCBP\/Qi0W4agFRg8DwiWXAi\/RQ6PEfAACDwBCDxASJBsZF\/B2LRdRRg8DwiWWki\/RQ6NMfAACDwBCJBoPEBI2NHP\/\/\/8ZF\/BzoLCMAAITAdU\/GRfwZi0W4g8r\/g8DwjUgM8A\/BEUqF0n8KiwiLEVCLQgT\/0I2NHP\/\/\/1HGRfwV6IUhAADGRfwSi0Xsg8DwjVAMg8n\/8A\/BCkmFyek5AgAAi0XsUYPA8IllwIv0UOhXHwAAg8AQg8QEiQbGRfwei0W4UYPA8IllpIv0UOg5HwAAg8AQiQaDxATGRfwc6NgKAACDyv\/GRfwZhMCLRbgPhGj\/\/\/+DwPCNSAzwD8ERSoXSfwqLCIsRUItCBP\/QjY0c\/\/\/\/UcZF\/BXo7SAAAItF6FGDwPCJZcCL9FDo2x4AAIPAEIPEBIkGxkX8H4tF7FGDwPCJZaSL9FDovR4AAIPAEIkGg8QExkX8FehcBgAAhMAPhB\/\/\/\/9oCE4DEI1N4OjHGgAAxkX8IItF7ItI9FFQjU3g6PMUAABqAmgMTgMQjU3g6OQUAACLReiLSPRRUI1N4OjUFAAAi3XEg370AHQaaBROAxCNTeDoHg0AAItG9FBWjU3g6LEUAACNTdxoGE4DEFHoExEAAIPECITAD4SkAAAAaAYCAACNlQIEAABqAFJmx4UABAAAAADoPHwBAIPEDGgEAQAAjYUABAAAUP8VoBIDEI2NAAQAAFGNTdDoGBoAAGgoTgMQjU3QxkX8IeinDAAAi0Xgi0j0","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2142{"flow_id":80,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2172{"flow_id":80,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2111{"flow_id":80,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":80,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2094{"flow_id":80,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2115{"flow_id":80,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1467353189784,"flow_last_seen":1467353189784,"flow_tot_l4_data_len":439,"flow_min_l4_data_len":439,"flow_max_l4_data_len":439,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp"}
+0947{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":473,"pkt":"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","pkt_caplen":473,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1467353189784,"flow_last_seen":1467353189784,"flow_tot_l4_data_len":439,"flow_min_l4_data_len":439,"flow_max_l4_data_len":439,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1467353189820,"flow_last_seen":1467353189820,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":50374,"dst_port":1900,"l4_proto":"udp"}
+0550{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDksAAAER9TXAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1467353189820,"flow_last_seen":1467353189820,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":50374,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0958{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":482,"pkt":"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","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":76,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUsAAAQRyyjAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1015{"flow_id":82,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":525,"pkt":"AQBef\/\/6cBiLE+IdCABFAAH\/I6cAAAER3n7AqAUm7\/\/\/+gdsB2wB6x3GTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVNlcnZlcjoxDQpOVFM6c3NkcDphbGl2ZQ0KTG9jYXRpb246aHR0cDovLzE5Mi4xNjguNS4zODoyODY5L3VwbnBob3N0L3VkaGlzYXBpLmRsbD9jb250ZW50PXV1aWQ6MmY2ODhlY2UtYzBiMS00MTA0LWI5ZTUtY2JjZWU1MDNlNmI0DQpVU046dXVpZDoyZjY4OGVjZS1jMGIxLTQxMDQtYjllNS1jYmNlZTUwM2U2YjQ6OnVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpNZWRpYVNlcnZlcjoxDQpDYWNoZS1Db250cm9sOm1heC1hZ2U9OTAwDQpTZXJ2ZXI6TWljcm9zb2Z0LVdpbmRvd3MvNi4yIFVQblAvMS4wIFVQblAtRGV2aWNlLUhvc3QvMS4wDQpPUFQ6Imh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7IG5zPTAxDQowMS1OTFM6MDAyODViYzNjM2JhMjA3MDA3ZTFjM2I3NjIxYzg0NzYNCg0K","pkt_caplen":525,"pkt_type":2048,"pkt_ipoffset":14}
+1036{"flow_id":82,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353189,"pkt_len":539,"pkt":"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","pkt_caplen":539,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1467353190040,"flow_last_seen":1467353190040,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50507,"dst_port":80,"l4_proto":"tcp"}
+0594{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":212,"pkt":"TF4M6gNlABxCjnAxCABFAADGLkBAAIAGTxPAqHMI3xpqE8VLAFDaxGl\/7FKS9VAYQTcFigAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL2Rvd25sb2FkaGVscGVyLmluaSBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBEb3dubG9hZEhlbHBlcl9ydW54eA0KSG9zdDogc3RhdGljLnFpeWkuY29tDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KDQo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1467353190040,"flow_last_seen":1467353190040,"flow_tot_l4_data_len":178,"flow_min_l4_data_len":178,"flow_max_l4_data_len":178,"flow_avg_l4_data_len":178,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50507,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/downloadhelper.ini","code":0,"content_type":"","user_agent":"DownloadHelper_runxx"}}
+1731{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":1063,"pkt":"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","pkt_caplen":1063,"pkt_type":2048,"pkt_ipoffset":14}
+1030{"flow_id":82,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":537,"pkt":"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","pkt_caplen":537,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1467353190110,"flow_last_seen":1467353190110,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50506,"l4_proto":"tcp"}
+0577{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5kJVAADMGqbHKbA7bwKhzCABQxUpzStvEq5YvP1AYADaqqAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1467353190110,"flow_last_seen":1467353190110,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50506,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+1055{"flow_id":82,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":553,"pkt":"AQBef\/\/6cBiLE+IdCABFAAIbI6oAAAER3l\/AqAUm7\/\/\/+gdsB2wCB3XmTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjptaWNyb3NvZnQuY29tOnNlcnZpY2U6WF9NU19NZWRpYVJlY2VpdmVyUmVnaXN0cmFyOjENCk5UUzpzc2RwOmFsaXZlDQpMb2NhdGlvbjpodHRwOi8vMTkyLjE2OC41LjM4OjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDoyZjY4OGVjZS1jMGIxLTQxMDQtYjllNS1jYmNlZTUwM2U2YjQNClVTTjp1dWlkOjJmNjg4ZWNlLWMwYjEtNDEwNC1iOWU1LWNiY2VlNTAzZTZiNDo6dXJuOm1pY3Jvc29mdC5jb206c2VydmljZTpYX01TX01lZGlhUmVjZWl2ZXJSZWdpc3RyYXI6MQ0KQ2FjaGUtQ29udHJvbDptYXgtYWdlPTkwMA0KU2VydmVyOk1pY3Jvc29mdC1XaW5kb3dzLzYuMiBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOjAwMjg1YmMzYzNiYTIwNzAwN2UxYzNiNzYyMWM4NDc2DQoNCg==","pkt_caplen":553,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1467353190168,"flow_last_seen":1467353190168,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50295,"l4_proto":"tcp"}
+0577{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FPRAADMGJVPKbA7bwKhzCABQxHdtLPipvNGQx1AYAMQhYwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1467353190168,"flow_last_seen":1467353190168,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50295,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0550{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":175,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAlEAAAERAT3AqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5FPVAADMGJVLKbA7bwKhzCABQxHdtLPk6vNGSM1AYANYfVAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjI5IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1467353190634,"flow_last_seen":1467353190634,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50508,"dst_port":80,"l4_proto":"tcp"}
+0574{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":198,"pkt":"TF4M6gNlABxCjnAxCABFAAC4LnBAAIAGTvHAqHMI3xpqE8VMAFCjClS\/APxWfFAYQTf8ogAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL1FZQWdlbnQuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IFFZQWdlbnRfcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1467353190634,"flow_last_seen":1467353190634,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50508,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/QYAgent.ini","code":0,"content_type":"","user_agent":"QYAgent_runxx"}}
+0870{"flow_id":87,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":420,"pkt":"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","pkt_caplen":420,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1467353190892,"flow_last_seen":1467353190892,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.38.219.107","src_port":50509,"dst_port":80,"l4_proto":"tcp"}
+0530{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":163,"pkt":"TF4M6gNlABxCjnAxCABFAACVLoRAAIAGUpzAqHMIaibba8VNAFAdei0\/k1iI9FAYQTd0xwAAR0VUIC9jaXR5anNvbiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUVlBZ2VudF9ydW54eA0KSG9zdDogaXBsb2NhdGlvbi5nZW8ucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1467353190892,"flow_last_seen":1467353190892,"flow_tot_l4_data_len":129,"flow_min_l4_data_len":129,"flow_max_l4_data_len":129,"flow_avg_l4_data_len":129,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.38.219.107","src_port":50509,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"11":"HTTP Suspicious User-Agent"},"proto":"HTTP","category":"Streaming"},"http": {"hostname":"iplocation.geo.qiyi.com","url":"iplocation.geo.qiyi.com\/cityjson","code":0,"content_type":"","user_agent":"QYAgent_runxx"}}
+0973{"flow_id":88,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":497,"pkt":"ABxCjnAxTF4M6gNlCABFAAHjK+5AADIGoeRqJttrwKhzCABQxU2TWIj0HXotrFAYAOXEmAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG9wZW5yZXN0eQ0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjozMCBHTVQNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sO2NoYXJzZXQ9dXRmLTgNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpDb250ZW50LVR5cGU6IGNoYXJzZXQ9dXRmLTgNCg0KZjINCnZhciByZXR1cm5JcENpdHkgPXsiY29kZSI6IkEwMDAwMCIsICJkYXRhIjogeyJpcCI6IjExOC4xNjMuOC45MCIsICJpc3AiOiLkuK3ljY7nlLXkv6EiLCAiY291bnRyeSI6IuS4reWbveWkp+mZhiIsICJwcm92aW5jZSI6IuWPsOa5viIsICJjaXR5IjoiTm9uZSIsICJpc3BfaWQiOjY5LCAiY291bnRyeV9pZCI6NDgsICJwcm92aW5jZV9pZCI6MjI4LCAiY2l0eV9pZCI6MjI4MDAwLCAibG9jYXRpb25faWQiOjY5MjI4MDAwfX0KDQo=","pkt_caplen":497,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":88,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353190,"pkt_len":60,"pkt":"ABxCjnAxTF4M6gNlCABFAAAtK+9AADIGo5lqJttrwKhzCABQxU2TWIqvHXotrFAYAOXCuQAAMA0KDQoA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI6sAAAER39jAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1467353191500,"flow_last_seen":1467353191500,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50766,"dst_port":80,"l4_proto":"tcp"}
+0573{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":198,"pkt":"TF4M6gNlABxCjnAxCABFAAC4L9BAAIAGTZDAqHMI3xpqFMZOAFCUEYDiYZCIJlAYQTcJ9QAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc2ZsYWcuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2ZsYWdfcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1467353191500,"flow_last_seen":1467353191500,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50766,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/masflag.ini","code":0,"content_type":"","user_agent":"masflag_runxx"}}
+0970{"flow_id":89,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":493,"pkt":"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","pkt_caplen":493,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1467353191521,"flow_last_seen":1467353191521,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50767,"dst_port":80,"l4_proto":"tcp"}
+0573{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":198,"pkt":"TF4M6gNlABxCjnAxCABFAAC4L9RAAIAGTYzAqHMI3xpqFMZPAFCekgJEnvl6klAYQTcvHQAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc2F1dG8uaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2F1dG9fcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1467353191521,"flow_last_seen":1467353191521,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50767,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/masauto.ini","code":0,"content_type":"","user_agent":"masauto_runxx"}}
+1016{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":526,"pkt":"ABxCjnAxTF4M6gNlCABFAAIAVHFAADgGb6ffGmoUwKhzCABQxk+e+XqSnpIC1FAYAB\/e1QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFFXUw0KRGF0ZTogRnJpLCAwMSBKdWwgMjAxNiAwNjowNjozMSBHTVQNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vb2N0ZXQtc3RyZWFtDQpDb250ZW50LUxlbmd0aDogMTMwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpFeHBpcmVzOiBGcmksIDAxIEp1bCAyMDE2IDA2OjUwOjIzIEdNVA0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0zNjAwDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1PcmlnaW46ICoNClgtQ2FjaGU6IEhJVCBmcm9tIDEwLjEyMS4zMy45Nw0KWC1DYWNoZTogSElUIGZyb20gMjIzLjI2LjEwNi4yMA0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCg0KW21hc2F1dG9dDQp2PTENCnA9MQ0KZT2xsb6pL8nPuqMvuePW3S\/J7tvaDQpzPb2ty9Uv1eO9rS\/JvbarL7rTxM8NCmFwcD1maWRkbGVyLHdpcmVzaGFyayxIdHRwV2F0Y2gsSHR0cFdhdGNoIFN0dWRpbyxIdHRwQW5hbHl6ZXINCg==","pkt_caplen":526,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1467353191538,"flow_last_seen":1467353191538,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50765,"dst_port":80,"l4_proto":"tcp"}
+0664{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":264,"pkt":"TF4M6gNlABxCjnAxCABFAAD6L9ZAAIAGlfnAqHMIJG7cD8ZNAFCivUMktEgQ8FAY\/\/DARAAAR0VUIC90bXBzdGF0cy5naWY\/bWV0aG9kPXFpdWJpdGVyJm9zPXdpbmRvd3MtNi4xLjc2MDFfc3AxJnV1aWQ9MzUwQzNGMUFDNzVENDBiYzkwRDYwMkRBNEU2N0E3MkQmc29mdHZlcnNpb249MS4wLjAuMSZzb3VyY2U9cHBzJnRhc2t0eXBlPWdldHRhc2tpbmZvIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBRSVlpQW5nZW50DQpIb3N0OiBtc2cudmlkZW8ucWl5aS5jb20NCg0K","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1467353191538,"flow_last_seen":1467353191538,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50765,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.video.qiyi.com","url":"msg.video.qiyi.com\/tmpstats.gif?method=qiubiter&os=windows-6.1.7601_sp1&uuid=350C3F1AC75D40bc90D602DA4E67A72D&softversion=1.0.0.1&source=pps&tasktype=gettaskinfo","code":0,"content_type":"","user_agent":"QIYiAngent"}}
+0577{"flow_id":90,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":199,"pkt":"TF4M6gNlABxCjnAxCABFAAC5L9hAAIAGTYfAqHMI3xpqFMZPAFCekgLUnvl8alAYQMHSJwAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc3JlY29tLmluaSBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBtYXNhdXRvX3J1bnh4DQpIb3N0OiBzdGF0aWMucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+1014{"flow_id":90,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":90,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":201,"pkt":"TF4M6gNlABxCjnAxCABFAAC7L99AAIAGTX7AqHMI3xpqFMZPAFCekgNlnvl+Q1AYQEpbxAAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc3JlY29tdG4uaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2F1dG9fcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K","pkt_caplen":201,"pkt_type":2048,"pkt_ipoffset":14}
+1019{"flow_id":90,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":529,"pkt":"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","pkt_caplen":529,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":90,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":202,"pkt":"TF4M6gNlABxCjnAxCABFAAC8L+dAAIAGTXXAqHMI3xpqFMZPAFCekgP4nvmAHlAYQTeOdQAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hczM2MHNjb3JlLmluaSBIVFRQLzEuMQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQpVc2VyLUFnZW50OiBtYXNhdXRvX3J1bnh4DQpIb3N0OiBzdGF0aWMucWl5aS5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1467353191604,"flow_last_seen":1467353191604,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50768,"dst_port":80,"l4_proto":"tcp"}
+0573{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":198,"pkt":"TF4M6gNlABxCjnAxCABFAAC4L+lAAIAGTXjAqHMI3xpqE8ZQAFAEnujgm7SOJVAYQTfnOwAAR0VUIC9leHQvY29tbW9uL3Fpc3UyL21hc2Jsb2cuaW5pIEhUVFAvMS4xDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClVzZXItQWdlbnQ6IG1hc2Jsb2dfcnVueHgNCkhvc3Q6IHN0YXRpYy5xaXlpLmNvbQ0KQ2FjaGUtQ29udHJvbDogbm8tY2FjaGUNCg0K","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1467353191604,"flow_last_seen":1467353191604,"flow_tot_l4_data_len":164,"flow_min_l4_data_len":164,"flow_max_l4_data_len":164,"flow_avg_l4_data_len":164,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50768,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"static.qiyi.com","url":"static.qiyi.com\/ext\/common\/qisu2\/masblog.ini","code":0,"content_type":"","user_agent":"masblog_runxx"}}
+0578{"flow_id":91,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5GMJAAC4G\/04kbtwPwKhzCABQxk20SBDwor1D9lAYPLgN5wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjMxIEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+1018{"flow_id":90,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":530,"pkt":"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","pkt_caplen":530,"pkt_type":2048,"pkt_ipoffset":14}
+1015{"flow_id":92,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":526,"pkt":"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","pkt_caplen":526,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1467353191688,"flow_last_seen":1467353191688,"flow_tot_l4_data_len":570,"flow_min_l4_data_len":570,"flow_max_l4_data_len":570,"flow_avg_l4_data_len":570,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50769,"dst_port":80,"l4_proto":"tcp"}
+1120{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":604,"pkt":"TF4M6gNlABxCjnAxCABFAAJOL\/RAAIAGZxbAqHMIZePIC8ZRAFCkQ4vBOJoXClAY\/\/Dn4QAAR0VUIC9jY3MgSFRUUC8xLjENClVzZXItQWdlbnQ6IENvb2tpZUNsZWFyX3J1bnh4DQpIb3N0OiBhcGkuY3VwaWQuaXFpeWkuY29tDQpDb29raWU6IHBwc19jbGllbnRfdmVyMj01LjIuMTUuMjI0MDsgVDAwNDA0PTRlM2FlNDE1YTU4NDc0OGFjOWFhMzE2MjhmMzlkMWU4OyBfcHBzX2l2aT1WazQ5TVRZd05UQTFMYVcvcFBtaFJ6OC9QNlRhcEVlbXVEOC9wTSt3Wmo4dHBMV3gzemd3cGxvL3BHYW9jU1pXVUQweEpsWkRQVDgvUHo4K3BMV3gzemd3cGxvL3BHYW9jU1pXU2owdE1TWldVejFXSmxaRVBTWldWRnRCWFQweU1UYzFKbFpOUFNaV1ZqMDFMakl1TVRVdU1qSTBNQ1pXVlQxb2RIUndPaTh2ZDNkM0xtbHhhWGxwTG1OdmJTOTJYekU1Y25Kc2RuVjRiR2N1YUhSdGJBPT07IFFDMDA2PXU1NDl2cHoxMGw5ZmthdHVtNGFsdzRicDsgUUMwMDg9MTQ2NjY0NTgxNi4xNDY2NjQ1ODE2LjE0NjY2NDU4MTYuMTsgSG1fbHZ0XzUzYjczNzRhNjNjMzc0ODNlNWRkOTdkNzhkOWJiMzZlPTE0NjY2NDU4MTc7IFFDMDA1PWFhb2VmZHRxZ2ZkZXB4YzJ0bnYzcGl1Y2djYjRlb2ZuDQoNCg==","pkt_caplen":604,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1467353191688,"flow_last_seen":1467353191688,"flow_tot_l4_data_len":570,"flow_min_l4_data_len":570,"flow_max_l4_data_len":570,"flow_avg_l4_data_len":570,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50769,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"api.cupid.iqiyi.com","url":"api.cupid.iqiyi.com\/ccs","code":0,"content_type":"","user_agent":"CookieClear_runxx"}}
+0697{"flow_id":93,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353191,"pkt_len":291,"pkt":"ABxCjnAxTF4M6gNlCABFAAEVyyVAAC8GHh5l48gLwKhzCABQxlE4mhcKpEON51AYPCgsNwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjMxIEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2pzb247IGNoYXJzZXQ9dXRmLTgNCkNvbnRlbnQtTGVuZ3RoOiAxMQ0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCnsiciI6ZmFsc2V9","pkt_caplen":291,"pkt_type":2048,"pkt_ipoffset":14}
+0947{"flow_id":82,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353192,"pkt_len":473,"pkt":"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","pkt_caplen":473,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":83,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353192,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDkwAAAER9TTAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0958{"flow_id":82,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353192,"pkt_len":482,"pkt":"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","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":76,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353192,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNUwAAAQRyyfAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+1015{"flow_id":82,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353192,"pkt_len":525,"pkt":"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","pkt_caplen":525,"pkt_type":2048,"pkt_ipoffset":14}
+1036{"flow_id":82,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353192,"pkt_len":539,"pkt":"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","pkt_caplen":539,"pkt_type":2048,"pkt_ipoffset":14}
+1031{"flow_id":82,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353193,"pkt_len":537,"pkt":"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","pkt_caplen":537,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_id":82,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353193,"pkt_len":553,"pkt":"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","pkt_caplen":553,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":79,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353193,"pkt_len":175,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAo0AAAERAQHAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353194,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7IAAAER39HAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0948{"flow_id":82,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":473,"pkt":"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","pkt_caplen":473,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":83,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDk8AAAER9THAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0959{"flow_id":82,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":482,"pkt":"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","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":76,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":179,"pkt":"AQBef\/\/6uKxv2MGbCABFAAClNU0AAAQRyybAqAUy7\/\/\/+s0xB2wAkYI7TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1hbjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1467353195852,"flow_last_seen":1467353195852,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50771,"dst_port":80,"l4_proto":"tcp"}
+1573{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":946,"pkt":"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","pkt_caplen":946,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1467353195852,"flow_last_seen":1467353195852,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50771,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/cp2.gif?a=4e3ae415a584748ac9aa31628f39d1e8&ai=&as=1:45:23|45&av=4.10.004&b=180932301&c=31&ct=5000000923447&d=2175&di=&dp=71000001&e=c4889e64ad9d9eeb9ff438910850c442&ec=&em=&fi=&g=0&l=MTE4LjE2My44Ljkw&mk=&nw=&od=5000000854934&oi=&p=a&pp=&rc=&rd=&ri=&s=1467353195054&sh=&sq=&sw=&t=sp&u=0_aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=479531000&vv=5.2.15.2240&x=&y=qc_100001_100140","code":0,"content_type":"","user_agent":"Mozilla\/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident\/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)\/QY-Player-Windows\/2.0.102"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1467353195855,"flow_last_seen":1467353195855,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50772,"dst_port":80,"l4_proto":"tcp"}
+0843{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1467353195855,"flow_last_seen":1467353195855,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50772,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"nl.rcd.iqiyi.com","url":"nl.rcd.iqiyi.com\/apis\/urc\/setrc?ckuid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&tvId=479531000&videoPlayTime=-1&addtime=1467353195&terminalId=12&vType=0&com=2&ppsTvidType=2&agent_type=30","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+1016{"flow_id":82,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":525,"pkt":"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","pkt_caplen":525,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":94,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5xWxAADMGdMnKbA7swKhzCABQxlNWUKyA6k+aDlAYACCSWwAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM1IEdNVA0KQ29udGVudC1UeXBlOiBpbWFnZS9naWYNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":95,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353195,"pkt_len":275,"pkt":"ABxCjnAxTF4M6gNlCABFAAEFPIVAAC8G7\/l7fW9GwKhzCABQxlTC4jhty\/q1U1AYPLjA5wAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFRlbmdpbmUNCkRhdGU6IEZyaSwgMDEgSnVsIDIwMTYgMDY6MDY6MzUgR01UDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW47Y2hhcnNldD1VVEYtOA0KQ29udGVudC1MZW5ndGg6IDI5DQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCg0KeyJkYXRhIjp0cnVlLCJjb2RlIjoiQTAwMDAwIn0=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1467353196104,"flow_last_seen":1467353196104,"flow_tot_l4_data_len":885,"flow_min_l4_data_len":885,"flow_max_l4_data_len":885,"flow_avg_l4_data_len":885,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50773,"dst_port":80,"l4_proto":"tcp"}
+1537{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":919,"pkt":"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","pkt_caplen":919,"pkt_type":2048,"pkt_ipoffset":14}
+1319{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1467353196104,"flow_last_seen":1467353196104,"flow_tot_l4_data_len":885,"flow_min_l4_data_len":885,"flow_max_l4_data_len":885,"flow_avg_l4_data_len":885,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50773,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=1&reset=0&vfrmtp=1&tm1=&tm2=0&tm21=0&tm22=0&tm23=0&tm24=0&tm3=209&tm31=94&tm32=31&tm33=78&tm34=1&tm4=176&tm41=47&tm42=16&tm43=78&tm44=7&tm5=328&tm51=0&tm52=0&tm53=0&tm54=63&tm6=&tm62=0&tm63=0&tm7=0&tm71=0&tm72=0&tm73=0&tm8=0&tm81=0&tm82=0&tm83=0&tm9=962&tm92=15&tm93=297&chipid=Intel%28R%29%20Core%28TM%29%20i5%2D2557M%20CPU%20%40%201%2E70GHz&ra=1&ishcdn=2&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=31&r=479531000&aid=180932301&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=Windows%207&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353195&islocal=0&as=0311c5a0d5596063db5944bd76b6cbff&ve=b1f90f8da6fe0258d13616a8070cb997&pe=&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0550{"flow_id":79,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":175,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAqQAAAERAOrAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC53kZAADMGW\/7KbA7dwKhzCABQxlVvFI02dnYq8FAYAA859QAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1467353196348,"flow_last_seen":1467353196348,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50775,"dst_port":80,"l4_proto":"tcp"}
+0844{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1467353196348,"flow_last_seen":1467353196348,"flow_tot_l4_data_len":365,"flow_min_l4_data_len":365,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":365,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50775,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"nl.rcd.iqiyi.com","url":"nl.rcd.iqiyi.com\/apis\/urc\/setrc?ckuid=aaoefdtqgfdepxc2tnv3piucgcb4eofn&tvId=479531000&videoPlayTime=-1&addtime=1467353195&terminalId=12&vType=0&com=2&ppsTvidType=2&agent_type=30","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1467353196393,"flow_last_seen":1467353196393,"flow_tot_l4_data_len":553,"flow_min_l4_data_len":553,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":553,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50774,"dst_port":80,"l4_proto":"tcp"}
+1095{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":587,"pkt":"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","pkt_caplen":587,"pkt_type":2048,"pkt_ipoffset":14}
+0987{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1467353196393,"flow_last_seen":1467353196393,"flow_tot_l4_data_len":553,"flow_min_l4_data_len":553,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":553,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50774,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.71.am","url":"msg.71.am\/core?t=11&ct=adend&reset=0&ra=1&pf=201&p=11&p1=114&p2=3000&sdktp=1&c1=31&r=479531000&aid=180932301&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&pu=&os=Windows%207&v=5%2E2%2E15%2E2240&krv=2%2E0%2E102&dt=&hu=-1&rn=1467353195&islocal=0&as=0311c5a0d5596063db5944bd76b6cbff&ve=b1f90f8da6fe0258d13616a8070cb997&pe=&vfrm=&chl=&hcdnv=10.0.0.293&tpcd=0&isdrm=1&ht=0","code":0,"content_type":"","user_agent":"QY-Player-Windows\/2.0.102"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1467353196441,"flow_last_seen":1467353196441,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":360,"flow_max_l4_data_len":360,"flow_avg_l4_data_len":360,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50776,"dst_port":80,"l4_proto":"tcp"}
+0837{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":394,"pkt":"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","pkt_caplen":394,"pkt_type":2048,"pkt_ipoffset":14}
+0811{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1467353196441,"flow_last_seen":1467353196441,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":360,"flow_max_l4_data_len":360,"flow_avg_l4_data_len":360,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50776,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?t=11&pf=201&p=11&p1=114&s1=0&ct=140819_adsyn&adsyn=1&brinfo=IE_IE9_9.0.8112.16421_1&os=Windows%207&rn=19252&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&v=5.2.15.2240","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+0578{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":199,"pkt":"ABxCjnAxTF4M6gNlCABFAAC5bd1AADMGzGnKbA7bwKhzCABQxlZz\/QmHa0ch+1AYADbMuQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuNC43DQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM1IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":99,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":194,"pkt":"ABxCjnAxTF4M6gNlCABFAAC07BRAADMGoWNvzhZNwKhzCABQxlgyP4sgB6+8WFAYAB\/IEQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM2IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1467353196740,"flow_last_seen":1467353196740,"flow_tot_l4_data_len":1152,"flow_min_l4_data_len":1152,"flow_max_l4_data_len":1152,"flow_avg_l4_data_len":1152,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50777,"dst_port":80,"l4_proto":"tcp"}
+1896{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1186,"pkt":"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","pkt_caplen":1186,"pkt_type":2048,"pkt_ipoffset":14}
+1608{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1467353196740,"flow_last_seen":1467353196740,"flow_tot_l4_data_len":1152,"flow_min_l4_data_len":1152,"flow_max_l4_data_len":1152,"flow_avg_l4_data_len":1152,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50777,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?pf=201&p=11&p1=114&ap=0&source1=list&source2=online_l&t=11&ct=pc__ad_play&album_id=180932301&c1=479531000&clt=homedl&cn=160505-%E6%AD%A3%E7%89%87%EF%BC%9A%E9%83%91%E6%81%BA%E6%AC%A7%E5%B7%B4%E4%BA%8C%E6%AC%A1%E5%BD%92%E6%9D%A5%E5%8F%8D%E9%80%86%E8%A2%AD-%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&cpuuse=32.8&de=32e654fa57be90ec638c46ddfdd66757&dllv=appv%3D5.0.0.1003%7Colv%3D5.0.0.1101&et=0&ft=2175&ht=0&hu=-1&kv=10.0.0.293&lang=&memphy=65&memvir=120&mt=0&mv=5.2.15.2240&p2=1011&pe=&popt=0&pt=0&ptype=1&pu=&r=479531000&r_id=479531000&ra=1&rn=20526&schn_id=200003719%24%24%24%24180932301&schn_name=%E7%BB%BC%E8%89%BA%E5%A8%B1%E4%B9%90%24%24%24%24%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&spt=1467353196&stage=2&stime=0&tvid=479531000&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&upload_id=&url=http%3A%2F%2Fwww.iqiyi.com%2Fv_19rrlvuxlg.html&v=2.0.102.30147&ve=333825cdf486cc94b6d2956f4de6d4cb&vid=2b94729e3a920b2119886c5c677ae9db","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+0570{"flow_id":100,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":194,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0DHtAADMGgP1vzhZNwKhzCABQxlmEGWQaCfXSE1AYACGFOQAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM2IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1467353196856,"flow_last_seen":1467353196856,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50778,"dst_port":80,"l4_proto":"tcp"}
+0715{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":303,"pkt":"TF4M6gNlABxCjnAxCABFAAEhMu5AAIAGSgnAqHMI3xpqFMZaAFCbMnrue8hN51AYAQSXSQAAR0VUIC9wcmVpbWFnZS8yMDE2MDUwNi9mMC8xZi92XzExMDM1OTk5OF9tXzYxMV8xNjBfOTBfMS5qcGc\/bm89MSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogcHJlaW1hZ2UxLnFpeWlwaWMuY29tDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXB0OiAqLyoNCg0K","pkt_caplen":303,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1467353196856,"flow_last_seen":1467353196856,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50778,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"preimage1.qiyipic.com","url":"preimage1.qiyipic.com\/preimage\/20160506\/f0\/1f\/v_110359998_m_611_160_90_1.jpg?no=1","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+2083{"flow_id":101,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":101,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2086{"flow_id":101,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":101,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":101,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2096{"flow_id":101,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDjpAADgGssrfGmoUwKhzCABQxlp7yGaDmzJ751AQAB\/NDgAA9ZHge1DhNg\/WqRD+5Olu1v5XYbx5E0Eu9FtbZnSPGQ2MjHn5Z+2iLrR0jcoG5Ftq98p8l1qW7TZSIz0+GSghtSJTOUyY6xkJcaVtKk+ZCFbcrRmy3YdKqb1YjVenzG0oMJCaeVNPK3gLDiypJQAnJBSFZIAPx0XdP35NK6MXhKioaVIqFcpFMR4zKXUqSW5jqxtWCPxNNfs1IVX3Lcq77RioZCHVNhyO2WjgKOM+C4jnHp+WmKw0yy1NTK5Ibz8xzU4lmgXu+uKr7O6W1Od04um9Y7kdUGlJbhLBfSHQt9W1O1vO4+UKzjtkaW\/u7kiUlCE7nFqCQBxk54+nOtF0S6Ga\/GcYWtVRKv8A3nW\/uX+aJDL\/AMuytUNyRqCqO3FmQFNsNuLUhoslrYpQAUR4bpGTtT2Z9Bxq7edlEdAIZAMVFDqJDlZF60j3orkd5xpxO1xB2kfAj01zciuMubXWloUoZG8bePj9NGM+3YMJBkU2QqQratSkeLuKQASTkpQocf1fz084vRawL1tlC7avZVs3Dl1T9n3fHXsCQ2Fp93cIyoqUFpG3cSSntnSXNojW0vdTHmiwuFxu8qywFeHvT5VbuN2Pn6a+07Oo3s13J0uptSdui3qlTlAhMKpQ8SqaVhX3iVuJBKcpUnaT6j4dlBTEpD62nSWw6nwyoJKtnPfHrgjQqS0kjlEZqZZVZcg1Hac8pTt\/1tMa0Oi9euSwqpe0ZqO\/QqQpKpyVP+G4R3KUDaScJ5J\/RBB5JA0BTKeqG6QoKGfwqUkp3fkdNi1utdy2d0OqVnx4DpoVYkOtGe7kIzgFTTZ4GQFZIJON\/wAxqtPBcJwg5FWrYwO30h4oikdLLqsKvU2RUaQzb8WfuehIjyQ7hABc2lRUVZAB\/ER2PGtws+2LXqP0VYsWNbjbVQREbpyKjIfYX4jhKQd7ecAKBxuJPfOsF9UutNU6k27bSpq2lRYDQYbR76lyUpaU7FOOo4IKtmeBjnk86qrdvajV5sU64pUW3KdGiYROiUxcqQ8pCwpKNqVJ86snzqUBwfkNQK93tAcDijyRaWVyzHNMu\/OgF\/V6Y\/MXTqWjeo5QzNQTndg4T\/rA8fP4az\/d1uzLSr02j1FKEzIiyl1KFbkgj4H4fTRBUeqiZDdQb\/i\/S2vemvC3oa2qb\/EApJ+OFc8+mqGj3w7R25yG2PF97CUq3OHgDcMfrVnPy1+MsjN46qXKWqx5hPNDrij\/AKuoilaI513OSrWj0TwE+GyUHxd2SSM84x65+PpocV668DHIoTu4pxypCJFJDa\/xf36qbKjyHnpyGUlSkqz\/AJOpdWimPHG79EjRJ0TvGZZtWmTKZUHqTVQvdHmsHapHB9ee+f2a1O\/nlgiEkK7mAqlpVtDdziGZ9qnzqH1I6f3T06u6lw7roM2hyluBTSZjJSh4DHmbX2cHmTyknuM6qqIn\/wALa+n+lFX\/AM4adXtge0hO661S2Gp0djbRHMRJO3EnYpptLgcUDtVuWjxMADb2ydJKhObrxqqv6cNX\/OGqdpcSXCK8gwa\/X9strIYlOQPtq4lQfEtt9af0UnQu1vbodIX+j\/8A3K0Zo81vzk\/+bOhwxfEtOh\/0lbv+erRRvrUJjOBVhLlhUGWn+krI\/VjVfbyXHPednZOz951Z1SnlMUfT9wGuFnYbkTUq\/SCP","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2087{"flow_id":101,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2101{"flow_id":101,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2103{"flow_id":101,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":101,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDj5AADgGssbfGmoUwKhzCABQxlp7yHozmzJ751AQAB+sOwAAxpXhvfmodz\/aB1wtS8fti3CiR4aJ7X4ltcIcT\/STyfzGudVrHu0FpDX88te5xWpdkc64cZqk8Zico1Jq9vZZqfndtyoM1D\/6UmYZe+gV+FX5lOs7XVY1ctycuJVqPMpUnwy5tnMqbykdykkeYfNOdb5YraqlLhREfjcc2pSn8SvmdHt89J6H1BtxNErsVMhCm1Jjvp8r0YlOCptXoeBn445GhsmmBQWgqI15dRZ8W2IkuPI8SQuTsUnwuwxz66F6xJYrdRT4W5rclLfnT8PXTA9oHptVek18PW\/VvOtptLkeSn8Epg8JcT9cEEehBGlfC\/8AGUf+2NCojtJ3da6dyw2+VEVv9Fps5sSKk6UcZ2DWo4fsJ3BRbNptwNVinCDMjNSm2mfGW\/sWE7fIG+\/nGcE9vlpNXN1Mh0iOpPioU9t\/DpvUv+EWoTFqQaJOo9bltxGGmMKbjqbIQkAAJKhwAngk5zz341W7QSX1vbr+7l3OaVrbfKT3vApHXoqBZ9WqdMmVBb8qBKdiObFeUqbWpCsdjjKfUaVlZvJchSkxVOJT6c6r7xuP+NN21ysfeBNQnPy0h45UA44pWD6Z83OPXVL4nGjNuMxKZfrYGfjUywAHJNSXBKlqKlqUf7R1JiUny7lqGoTanP62paPFV+gf16lJUdK7IYcCpHuoSryqGjbp5Zol+Fca2oNXhUmoMIqFMmh0NBtw4bW6UEHwlL+7JSRglOfxaHrKoMa4rkhQarVmreprisyak40t7wGx+IpbTytRHZORk4yRydMSHdDHTbqPJkUC3ii3lxV0moUOsSVPLqEVSdrheWAnatflcSUABCggp\/DzWMiyP3IFXraMg96\/1aN6l7QbkpSo38QbWpcdEd6H7tGjOqU3u4UfvnHEbxt7qQcZOMZ0pKzXffqw5Mjw41LeUUeG3AaDSE4AAIA4ycZOAOSdMC2rMaeb+06spEyYsJUEKIUEf1l\/1jjnPwOedfX5abj1suyo8RKI8Yh3eG9qfgrHb054+GikWjC2gM+QM+VeXGspJJ3X30L1jqvW5imlNKRA2NJbX7m2EBYQnA3fX4fM5zqotqBTn4Cn6tATNVJC3TtVsUFHO0hQ9AcEgY0wrI6Uv1a26i6tth+QiWuOlp3KRlHl3A8eqld8dtRKxQ1stux58VNLqjKMtukbGn0pHYgYGT6EDnUotN8e9WqvbalB3xUnOKCLi6bVBigO1qjSWatRYzSXp7Udxe+mFSkpSl0OJT+IrwkpyDsXgkJJ0Atq3Z0w2yZDvhvI8WN4iX3mV5KFqTnaCPlk\/wDKPxOiDrbZS6NPTV3acxEcfdabcMd5nYpS4rT6ctNqIQra6gnBIyrnaeNBGdo22MaNm2WRTIppTN+XXdvP9I65OJQpXl2oTr5LLX6S9dpnPNUnBUbQa5sOFWdSmM7tdTHgJ+erOIpgfhRorCoPU1VJxVhTmzzoztyOXnEp\/R0MwXkcbUDTAtpwNtqVtH4dMNsoweahJ91ZlUraletZtfwbt9qsmk3Sq5qB9n1KIxMaZaTJcfCHUpKQUBo8jcM4J7HnjWSVp3AnW76B\/CGUODZNIt+ZSK3KbgxGIuFtx1NkNoSkDBWOwTwc5zg8dtYlq8t5HD\/BLl\/s\/OpVIJO6sTXRbr9qXNWKHJWh2RTZb0J1bOdilNuFCinIHBKS","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":101,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDj9AADgGssXfGmoUwKhzCABQxlp7yH8fmzJ751AQAB\/4BwAARkDVc0ytxWEpKlauburYui763WEocT9oT35YQ6cqHiOKUM49Rn01ZUOCiEfFUn77\/m\/TWk9k+zNz2jnWMcKPrH0qpLL3YNNLpFdESw6UiG3Tmp8mfTZFZTLUzG8QBlDviMblsLXtJjKxhaQN2SnOj+P1hpN0W5a5mWyh5y5Kk\/Sm2nExChrYpo7ipuM26dypbhwl1PO458x0pbVQifUaFggqWazSOP0UuRTt\/WqS5+rXdaALVs9KX8+SNWKrMP0aTFcJ\/wDueiszyafO1tEeEOM\/A0uTWcEr9645+J9D+lVLFdq9TLnujbZSlovpQ2Vr3ICynstSu+M\/TX61etTZjlJgMqbJxvbhMuEf+iD+3X1pVSbRnlvU9QZkuRUQxIzlTSVNpS5s+BUFEE98FWNFs+lW8l1ZnwpjchKtvjQJYZC\/Lk7wpChng+ZJHzGdala291c2XtCNyK4kaON9rLkULVSmzqnEjMvMvxEvJLu6U34aSn+kEAcJHfJ\/LVZbN1VC3bhhVVqkUCoOwHfFESdSWXGHcpUnDjeBuT5s4V6gH01bXNVvtNDrMFj7PjgA+Gt9Uh14BORvdV3x8EgD5aE3pjkd5SVoS\/4TihhJKHEAH0UPT9elXUVtp2Vps7h51etwwQ+npTZtL2g5NCYTFesqwJmHlPbplI2rVuVnaVIcTwCMgemTj4a5VetV24KrIqiI0CjRnCmcI9NflMsQ0cJCmWkPZSCU5GTyonnHZQuVhD0pLuJZSn9Hcnd\/ygP241Z1e9ZdWjMU9phFOpiXAsxY+fvV\/wBNxRJLivgSTjsnA1HaiyRTvGa\/PDIWBTim3Yk+pM28KPBYcVHYCvvE5SUjk5WEKCs\/EAn640G0tb92V9yAKbDluLcKE7juycnHmd3kZ9NWVkdR4tHYUqo01c95tPhoejyyw6tOOyzg5xn4Dtzrqs+pU\/8AjHMqE6NNTFLhdKadKDcptXO1aHFJIJ+IKcEZ7afxHHOUW3Hgx0oIkckTyMy1b9P37Nt+kXHUqw3KhYUhmRT4r5ADTiSG3MBpSV5JWPxI28cHVx1ENgVek1WnvwpzciHAZrXjocUhKQ9HZU0CVKc3Eh1lJTtTznzADOlvLbEm07lcCSlDlIjPAnnGypBrn8j6avLzbbduW446wTHSxQ6OU47fcMKWT9BDOspvJJDctEVA8unXrVtbUPKJSxz8fh+tJ65JC3qo6wpKWExSWEsA5S2AcEA\/HOcnVTs+WrSs01xch6UjK\/FUXFD9IEnn9+qnSXq+m3lhOUu4yCaa4ipXir6za83QaiVutoU24AnxMeZs54\/I\/wDs7aaD1eUr71ahtIBJCv1Ennv8SCn6aSaE99ElArjiUIhuuEIT\/Mu4\/m890n+qfX4fr0y9mtae2Q2cinaehxQy9s1lPeDqKFN20nWt0fwb99\/xKpd1KuWgGn1GGxNaZZTJdkBDiUlIKA13G8DgnsfhrJqmQpCtbsof8IVRYFk0ugzKPW5LcCGzF8zcZbZShCUAAFfoE8HOc4PfjWYau99FF\/29cuTRgEedL9fsSW1SH3Ilc9oPp1T5jCi2+wxJdkLaWkkKSoYHmBBBHx1Ijexn08lhXge0hZy1pGSn3J8D88nR1cvtO\/Y1gm8Kf0h6WSXXLgl0x5U62g8+sJZZfakLcLvmW6HXCo9sp476t+pn","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2098{"flow_id":101,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2093{"flow_id":101,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2116{"flow_id":101,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353196,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUDkJAADgGssLfGmoUwKhzCABQxlp7yI3jmzJ751AQAB\/erwAAWtiZNplOcixVy4rlTEyPHDknCU48DJ7DI7YPf56vehfU+ht9Y01OvJVS6BKC23FLQZakhSVAqdGPvNwyDhOBxhOBjXVUqvJ6f0VNQtmoNtTpFBJW\/HfS8colo7oP82fDWryKHYBWOQdVLq1sUg9ogB8P9aE95OZGtZF6gYPl\/Yql633fc0AGgVibIm0yY2lShJittrSUufibISn1T3Oe50nRWJDkJFOU+77mhzxUslwlCVngqCe2SABkD0Hw05Or90VKv02txKjKL8ONWJZjteGEhCW2gG8bR6F8d\/z0i1eus01OZmm3KeDTHp6lYQGAyKniNJbiCT4LgjlWwPbTsJHOM9s\/nroEg\/pabnTe\/hMt\/wCwJqGdrCTtaUkbXkc5yORn1OR8\/idRKpYVv1JTikLdoz39JseIyDnHKSdw\/X+3jR3\/AKca5s1urJ93HI6Gohf93K0cy499KtTn+tripWra4LSqFuLV7y2HI+cJkM+ZtXyzgYPyIB+WqbSVPBLbsUlXBoujhxuU19rgr11z10n8Wq69RXVPu5Gw5SXHU+bAzpzUL2D75plo0+6nbgojtPqUVmY2ywJK5AS4ElOUBrkjeOxPb5aQ7shblP8AA+IxrVFse2vAVatPt2RSatKZgsNxB4jcdbRS2hKR5d4OBjg8HIB+Wm\/tPc6rBBGdJTc59w\/M0Itlj8QlNZU6gUl+l3BJpj60LkQJjkN1bXKSptxSFEcDglJ741VU5wxLqd\/998ft1dXtUDV7mqdR2qT73OdlbV8qG9xSufn5ucar2o\/jXk8n\/wClM\/nu0ciMpjQzcMQM\/GujjbgUQNK3Ued\/xZ1AjJ\/8GaB27q\/+WK1yS4tmPJQr9JONcIjn\/g\/Rk\/0FK\/56tEN3NVyuBV9XGR4I\/tDVJSG1Nznyn+r+86vax9421n4\/uGo9uRfeFSvkE\/36tnpUScIaF74c2yGHUpypKk+X4kHt+evSDpJ01odldJ3YLPRtm4JS\/CZlSqlAQ7KmOqTlxzKmipQzuI2kpx68a85b6SYrwdT\/ADjakuD4ZCsj92tW2t1tRKbZr0ir+61iBDXDbgIYWpxZBXt8NzG3adwySQRhWO+kjWY3dht6U06Pswd3Wkl1ioMS0+sNw0ul0ZmkUhBbdjx4yTsYKkbnGc9jtUc\/LsOMDS\/lRS5KcV8\/79HvUKv1asV5CKkwhhKd8prY2U+MXFYUskk7sbAgYwBsPrnQi1\/PSfz\/AOdpysVKacik55oNd4W4bb0qiqSdqin5jUeP\/wCMJf0T+4asKqyfE\/1hqFGTumSz8k\/u1Of8aof5K4TUhT1N2\/h8Yf36uJTIVlP9HVJI\/wDyf\/xw\/dq+e83m17b\/AF3+yon4AoPnMn3o6iSlbZqU\/wBnRNJghSkq0OTm\/wDTG3+iR+7VWcFST76sId1WqnMKRqPVGS4o6\/Xf5wflrtlq2Z+mrzHMUlcjg1ZRk7t301pP\/wBwRvNNn0u5\/t2i\/Z8+KzLaZbEh18JcCduUBvuNwzgnsfhrNsRXdPxGNbCovtpQItn02iTKbVJjcOOzGCVtsKaIQlKQNpV6be+c5weDxrLe0M+pwQL+7E3OT6D86uR93k76yE\/SXLbv+oUuS4lcinS5EN1bX4VKbUttRGQOCUkjjVlKcC6Sz8v8dU9xVgVS\/KtVkpWPfp0iXhfKh4ji","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7kAAAER38rAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1467353197131,"flow_last_seen":1467353197131,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.1","dst_ip":"239.255.255.250","src_port":50945,"dst_port":1900,"l4_proto":"udp"}
+0552{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":175,"pkt":"AQBef\/\/6dNArkea6CABFAAChc\/sAAAERIa3AqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1467353197131,"flow_last_seen":1467353197131,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.1","dst_ip":"239.255.255.250","src_port":50945,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0536{"flow_id":102,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":165,"pkt":"AQBef\/\/6dNArkea6CABFAACXc\/0AAAERIbXAqHMB7\/\/\/+scBB2wAg2oBTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCk1hbjoic3NkcDpkaXNjb3ZlciINCk1YOjMNCg0K","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":102,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":167,"pkt":"AQBef\/\/6dNArkea6CABFAACZc\/4AAAERIbLAqHMB7\/\/\/+scBB2wAhQmdTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhUmVuZGVyZXI6MQ0KTWFuOiJzc2RwOmRpc2NvdmVyIg0KTVg6Mw0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":102,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":175,"pkt":"AQBef\/\/6dNArkea6CABFAAChc\/8AAAERIanAqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1467353197951,"flow_last_seen":1467353197951,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50779,"dst_port":80,"l4_proto":"tcp"}
+2065{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+1806{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1467353197951,"flow_last_seen":1467353197951,"flow_tot_l4_data_len":1280,"flow_min_l4_data_len":1280,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1280,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50779,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"msg.iqiyi.com","url":"msg.iqiyi.com\/b?pf=201&p=11&p1=114&ap=0&source1=list&source2=online_l&t=201&ct=clt__pl_play&album_id=180932301&c1=479531000&clt=homedl&cn=160505-%E6%AD%A3%E7%89%87%EF%BC%9A%E9%83%91%E6%81%BA%E6%AC%A7%E5%B7%B4%E4%BA%8C%E6%AC%A1%E5%BD%92%E6%9D%A5%E5%8F%8D%E9%80%86%E8%A2%AD-%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&cpuuse=14.1&de=32e654fa57be90ec638c46ddfdd66757&dllv=appv%3D5.0.0.1003%7Colv%3D5.0.0.1101&et=0&ft=2175&ht=0&hu=-1&isdm=0&islocal=0&kv=10.0.0.293&lang=&memphy=67&memvir=121&mt=0&mv=5.2.15.2240&p2=1011&pe=&popt=0&pt=2&ptype=1&pu=&r=479531000&r_id=479531000&ra=1&rn=23987&schn_id=200003719%24%24%24%24180932301&schn_name=%E7%BB%BC%E8%89%BA%E5%A8%B1%E4%B9%90%24%24%24%24%E4%BB%8A%E6%99%9A80%E5%90%8E%E8%84%B1%E5%8F%A3%E7%A7%80&spt=1467353197&stime=0&tvid=479531000&u=aaoefdtqgfdepxc2tnv3piucgcb4eofn&upload_id=&url=http%3A%2F%2Fwww.iqiyi.com%2Fv_19rrlvuxlg.html&v=2.0.102.30147&ve=333825cdf486cc94b6d2956f4de6d4cb&vid=2b94729e3a920b2119886c5c677ae9db&msg=MXw0fAdQAFIDUgFRSAB6dwNkBQJmfXV3dnlhYnlIBXTVxy4aOL0AdC6QWRaDSKB1coddi1OrtiAzNf3H8peCv1L%2FR2%2B6TYFDUzmIp9ooS%2FsqQ0NthJKT3AHtCJH6JaKHd1KdpL6pERym0J3ANQlVS9nAlwll6r%2B3LW9imuGwfh4%3D","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+0479{"flow_id":103,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353197,"pkt_len":124,"pkt":"TF4M6gNlABxCjnAxCABFAABuM2xAAIAGDVLAqHMIb84WTcZbAFDJCjUMTd\/tYVAYAQQaAAAAIG5vLWNhY2hlDQpDYWNoZS1Db250cm9sOiBuby1jYWNoZQ0KQ29ubmVjdGlvbjogY2xvc2UNCkFjY2VwdDogKi8qDQoNCg==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":103,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":194,"pkt":"ABxCjnAxTF4M6gNlCABFAAC0gHZAADMGDQJvzhZNwKhzCABQxltN3+1hyQo1UlAYACMO1AAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IG5naW54LzEuOC4wDQpEYXRlOiBGcmksIDAxIEp1bCAyMDE2IDA2OjA2OjM3IEdNVA0KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWwNCkNvbnRlbnQtTGVuZ3RoOiAwDQpDb25uZWN0aW9uOiBjbG9zZQ0KDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1467353198532,"flow_last_seen":1467353198532,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50780,"dst_port":80,"l4_proto":"tcp"}
+0716{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":303,"pkt":"TF4M6gNlABxCjnAxCABFAAEhM5pAAIAGSV3AqHMI3xpqFMZcAFDCryK2CgBK\/VAYAQQ7tAAAR0VUIC9wcmVpbWFnZS8yMDE2MDUwNi9mMC8xZi92XzExMDM1OTk5OF9tXzYxMV8xNjBfOTBfMi5qcGc\/bm89MiBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogcHJlaW1hZ2UxLnFpeWlwaWMuY29tDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXB0OiAqLyoNCg0K","pkt_caplen":303,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1467353198532,"flow_last_seen":1467353198532,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50780,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"preimage1.qiyipic.com","url":"preimage1.qiyipic.com\/preimage\/20160506\/f0\/1f\/v_110359998_m_611_160_90_2.jpg?no=2","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+2095{"flow_id":104,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2104{"flow_id":104,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUAJZAADgGwG7fGmoUwKhzCABQxlwKAE\/pwq8jr1AQAB8TPwAAQtiP\/X8fofczLJZRL\/v\/AJ10rgMaH2Gf0Z1VVRnTPjUywEtnbclzqH\/4txv+36rp9H6bKz5tz3WP6Nsxj\/0\/TXrE0cmn7QD09DVaNjvoBpjfp1znU2VIcOxhxTO3cpxDZUEjnvgfQ9\/kdMGm0bpqlI2XLdrn\/o5FH\/T9HQ6yUG2uklRsGHVriXDly3XBJfo0UFplaUZbSBKJGVpWo+rH6Q8ZJ0lao8w0NVtwc5GeOMfOiVqYmnxKcCg6odBbrtWm0V+ox2Gm6o0XGFCU2spISpRQ4kEqaWEDdtWEn8+Nc5fQi6E7EFMNCluIaAMtGQpRwnPJ4ORydHnUzrNSes\/2KupyKzGZp0NDO+PSY6nZDqRtLrizKHcfvJ1Uzn6DNoUaGmnXP5aWkJakx7dYSp1KVbgorEkhWT3Iz31Qgve0ENiqumF8sjyo+kejk5Lkmq1fhC6hU9DqlM0xzccFLc9ClcKAPGP8odtLOv2vPs6vzKPUUoTMiq2u+UrekH6Ht+zTeVVqHU0T0NWpcm6WzjezbzSVoHqTvQQ7nPqwT+3Vr0XtGkXqK5FtuDc9TktNIVML8unxEoQd4QEl1RGSQc89wNRaRfTWzCa7P2a+f1qneLaFMW2S1Z3nt418lHoT+Gtf0\/wxVG94D1sU62a09IhOtMeWu5qQlYdU0h0cc7glDyCvafzJ1lao0ldLnTYT6C29FecYcRuC9qkKKVDI4OCDyANaFpeo2mrXEq27ZIFBGR41BcYodQCY6tSKJSJlZnCPBjqfe+8Up9h+P9+rC3GqUufH+2lzG6Zk+caelCnsYONoUQO+O5+em50yvu0umdZVMs64rip1Wd5TOqMNmP5GAcbVNuuHnPO4AfXSjqxlggSSJcsBRTTYYrq5EMzbQfOlb1E6TXh0kryKbeFuz7flPArZ+MaKUPp49Ta\/uuD1J5ST351UJb9OtW+KrxO2z4lKjR4d0TZzTVCTtp02jU5qTIUFtoS8l5a32knctsLG1JxuxnSURR+mpSn\/AA\/d6f8A5QxD\/wBN1x2ZlLJIzqck+lQ6hCLeXuwQcenNLCop241wgJ3uaZU2i9MDjfct3J\/9HIh\/6frpi0bpilz0XPdh\/G2ov\/b9cygfxbd5VSD+DFA0xH6PUijJ\/krn46NplG6cKbO66LpH4WzGP\/T9cqZSOnaWHPKue6Fc\/wD7Mxh\/0\/R8TKmqB8H7p8jUJbKYoCpbf6RzPz\/t1Ekt\/wCESPqNMaDRunO9zy7nuhfz\/wBrMf8A7frpfofTb4w7rqugOZ7fxZjH9\/x+hlzMr2US\/wC\/+ddK\/iPFDjDPp1VVNs86aLFM6fBO1Nx3Qf8A0cjf9v1XzaN02P8Ajbmuwf0bai\/9v026vPFLp+1c9PQ1DGWDcil9SmztPOu6bTZMhYUhhxTIG5TiW1KCRz3wD\/qNHtOpHTNI\/RXDdzv\/AKOxU\/8ATjo5HWShW10lqVgw6ncTkOXLecTJk0mNlthaEZbAEknJWlajzj1n3J0l6o8x0RVtwc5GeOMfOiFr3bT4mOBQhUOgl1WpTaK\/UY0dpuqtFxgolNrUkhKlFDiAoqaVtGcLA\/brnK6FXQnCFIhoUtxLQCpSM7lHCQRk98jv20ddTes1M60fYqqm9WIrNOhts741LjqdkOgbS64syR3H7yc6qZ0mhzKDFi\/ZdylkMIQ1","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":104,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":104,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2091{"flow_id":104,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2096{"flow_id":104,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2100{"flow_id":104,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2105{"flow_id":104,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2075{"flow_id":104,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2075{"flow_id":104,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2083{"flow_id":104,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2078{"flow_id":104,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2086{"flow_id":104,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"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","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":104,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFAAUUAKJAADgGwGLfGmoUwKhzCABQxlwKAIr5wq8jr1AQAB8xRgAAxPJk2ln\/AIikI\/0Wr+gNm2bPjW9JdSupvRpMtbSHcfCtlOS060pAIcKkoOd33ce3c5aW1pp1yDCmC4I\/MVylu93G7u2FTn+n1rq8NfSml9Yus1u2tW5T0KkSSt2W5HUlDnloQVFKVK4SVYA3EHGSeTrc11eB3o4LBfnwLfuKjOTI++HLi1oznG1HAQpTJRhacqG5IPYKwffWWvABGlzvFFbkKLF+JTJhT2H1kpAYaMZWXSD94AhPHvnjXovTun1zzaI5RV1umT5EENsfZeQ4pAUgqZQ4jH6PcE+lSinnarI0F7cahq2nyj+FZ34HT0PrzQtWiD4lbArHnSDwV9NbV6JzOofVpdXqLCapNhLeoszyo8REeSuOFcIJO9xtfqUpIHpGM5yM9WugnSmxOrlh+Qa43YdcUtEuO7L3Pg+WS35b3l5G5RSCkgkexwrh2yortx\/wdlbmOsSWnJLFbq7gfUf0SxWZGUHHG7kfsUfloT\/hDbdfpNl2c7s8pNOqQgMuIX6v9zFzPAHueDnRDQGu5CiF8F+D88VQeRmlJ3cZNZY63dKaXJ64LtHpZSKrMjONNhiJLfD75XzvUVYSEj7p9XbPfVdfvhh6hdIaWuqXTSo9OioUhtaROZccBWTtylJJ75\/ZpqeB+9LfpPVa4KXcjzTdVuOnpg0qpTHORJDqVBrzFHCS6BhKlHG5KB76vfGP0a6mdNxMnG4ajcvTibKSlwPDDtLkKVvTHlIOSk84S4DtX8wTjXRgmttVWNm3NkAk1cWVgRHWc+mFPs+o9R6FHv5+TGtBx1f2i7CcDbyU+Wsp2KIIGVBHse+NbXqPh18KtE6cUe6ZNYuqNCqyd0QP1LY2sc91mP8AsOMEnAPfHn5Um\/0afTrcPWi0pkbwM9PZD7i1wY1KpcuOCsqCDII3DH6vKfzz89ENYjkXUtkbbdwHSvJSdqnPnQn0n8O3Sdvow1f15yK84zUqg7HhKYmiOykecpDTXDCypakjeVEpHqAA9zWXr4cOnVoeINuhOyarUbSfoj9QLceckuxZDaMlPn+UPMQk4P3EnuM8ZL56b9MKRePhY6aUqrvVGLTzT49TdeaktMNB0z3EtgF30qUsgJwPVyOTkav+pnSGTVuvVnwpDSWxMtav4iod4SG0thbYVkHOVLycg\/XSjcyzrBt39DXlvL\/ecMaDad4dna9arbVDsOzIVLZSfLRVX3FVB5vbhLjigjckq+8cr9xwDrPds9E7durrnSbaq1EqVv0SnRVv3GlE7zMqStYStp0oOxte5lPO7HqOflqKdbdqUWm0liK04048pJS83UZjS1pK+ULdSlYUNvG1aucJyOOb2F0lVROidwXTSqbIq1y1eLPdiJ8wueZHYadU2wpY53EKWoJI5HHJ1QsL66YsjuSp9aZdUlCwghQDWbLV6DdK73vu4avTWq5SemFtMNszg7UG1ypMo7lKIWUZbbAUhJAQpWSNvckQbjs7w+XL1F6dUSyoVdmxp8sIrTblVCipKm1KS22rblO1QTlRH878dfngq6l0huo1mwrmkx48W6VlUefMbCm3JKk7Sw6SfQl70jeDwrg98hlU7wkVDo94sOm02m73bPqdTfRFdkJ3uQJDcZ5wxH0qHJwnKVH76QT3B03TCZYzFO5AwNvoaVtxWQ5OOKpbQ6C9J5HV3qFR3req","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":83,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353198,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDlAAAAER9TDAqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":79,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353199,"pkt_len":175,"pkt":"AQBef\/\/6jHNut5ODCABFAAChArUAAAERANnAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1467353136757,"flow_last_seen":1467353136757,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65125,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1467353136757,"flow_last_seen":1467353136757,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65125,"dst_port":80,"l4_proto":"tcp"}
+0677{"flow_id":97,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353199,"pkt_len":275,"pkt":"ABxCjnAxTF4M6gNlCABFAAEF4D5AADEGSkB7fW9GwKhzCABQxlcB794psg4Z21AYPLiOgAAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IFRlbmdpbmUNCkRhdGU6IEZyaSwgMDEgSnVsIDIwMTYgMDY6MDY6MzggR01UDQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW47Y2hhcnNldD1VVEYtOA0KQ29udGVudC1MZW5ndGg6IDI5DQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctQ3JlZGVudGlhbHM6IHRydWUNCg0KeyJkYXRhIjp0cnVlLCJjb2RlIjoiQTAwMDAwIn0=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353200,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7oAAAER38nAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":102,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353200,"pkt_len":175,"pkt":"AQBef\/\/6dNArkea6CABFAAChdIcAAAERISHAqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1467353200271,"flow_last_seen":1467353200271,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50781,"dst_port":80,"l4_proto":"tcp"}
+0715{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353200,"pkt_len":303,"pkt":"TF4M6gNlABxCjnAxCABFAAEhNFdAAIAGSKDAqHMI3xpqFMZdAFCAFVM2Sak8SVAYAQQb1wAAR0VUIC9wcmVpbWFnZS8yMDE2MDUwNi9mMC8xZi92XzExMDM1OTk5OF9tXzYxMV8xNjBfOTBfMy5qcGc\/bm89MyBIVFRQLzEuMQ0KVXNlci1BZ2VudDogUWl5aSBMaXN0IENsaWVudCBQQyA1LjIuMTUuMjI0MA0KSG9zdDogcHJlaW1hZ2UxLnFpeWlwaWMuY29tDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANClByYWdtYTogbm8tY2FjaGUNCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQpDb25uZWN0aW9uOiBjbG9zZQ0KQWNjZXB0OiAqLyoNCg0K","pkt_caplen":303,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1467353200271,"flow_last_seen":1467353200271,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50781,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Streaming"},"http": {"hostname":"preimage1.qiyipic.com","url":"preimage1.qiyipic.com\/preimage\/20160506\/f0\/1f\/v_110359998_m_611_160_90_3.jpg?no=3","code":0,"content_type":"","user_agent":"Qiyi List Client PC 5.2.15.2240"}}
+0535{"flow_id":102,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353200,"pkt_len":165,"pkt":"AQBef\/\/6dNArkea6CABFAACXdIkAAAERISnAqHMB7\/\/\/+scBB2wAg2oBTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhU2VydmVyOjENCk1hbjoic3NkcDpkaXNjb3ZlciINCk1YOjMNCg0K","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":102,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353200,"pkt_len":167,"pkt":"AQBef\/\/6dNArkea6CABFAACZdIoAAAERISbAqHMB7\/\/\/+scBB2wAhQmdTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOk1lZGlhUmVuZGVyZXI6MQ0KTWFuOiJzc2RwOmRpc2NvdmVyIg0KTVg6Mw0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":102,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353200,"pkt_len":175,"pkt":"AQBef\/\/6dNArkea6CABFAAChdIsAAAERIR3AqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":83,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353201,"pkt_len":175,"pkt":"AQBef\/\/6SNIkYwreCABFAAChDlEAAAER9S\/AqAUp7\/\/\/+sTGB2wAjdbrTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1467353202192,"flow_last_seen":1467353202192,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"77.234.41.35","dst_ip":"192.168.115.8","src_port":80,"dst_port":49174,"l4_proto":"tcp"}
+0591{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353202,"pkt_len":208,"pkt":"ABxCjnAxTF4M6gNlCABFKADCuCpAADIG5SVN6ikjwKhzCABQwBY\/zyZ9xn1A6VAYAAIAJQAASFRUUC8xLjEgMjAwIE9LDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KUHJhZ21hOiBuby1jYWNoZQ0KQ2FjaGUtY29udHJvbDogbm8tY2FjaGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNClRyYW5zZmVyLUVuY29kaW5nOiBjaHVua2VkDQoNCg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0602{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1467353202192,"flow_last_seen":1467353202192,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":174,"flow_max_l4_data_len":174,"flow_avg_l4_data_len":174,"midstream":1,"l3_proto":"ip4","src_ip":"77.234.41.35","dst_ip":"192.168.115.8","src_port":80,"dst_port":49174,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer"},"proto":"HTTP","category":"Download-FileTransfer-FileSharing"},"http": {}}
+2087{"flow_id":106,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353202,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFKAUUuCtAADIG4NJN6ikjwKhzCABQwBY\/zycXxn1A6VAQAAL1DgAAMjINCgMgCKAEEgH\/MhgIBBDmzNlDGIAKIJuhw6jaKiibocOo2ioNCjllMw0KCuATQVNVIVZQU3oDMAYWRgAAAIAJAACTCQAAeNolVXk01V0bfe51iZApMpZ5zjznco0JmeKSIVNeQzKWkDi4Ggwp6UWG1xCxylQRmd6EyCykZKZ0QwiR4vt933fWOuv8cdbZZ5\/9PPvsM3aGIkkMAEZWqjKV8P\/xCJtSB\/NfKOBwomAIFoTLeF+yLcHOykHRDpzBBXxpwIr2Eh5YEZ6EJCLl8EBQxQO\/OhBpYJqkQwMkvZMEQQA3f4Kc7yWvi\/jwS+HAHykF2jRQpasDRv9DcaOBVd0wDIWCO8DvhxfF8YuBBJwikABIjuCE3RKUjAuHSOCNFAIREAUxUMADmUQDQIgCRPgvVUt9JRlWbNXtK5OpsKHJ8J4LK+EyngYrIxUZVhyAmg4FaJkIoGZU33trc5hjTzGJTtUKB9Mx+T3dfmPXIoQ26EABICX6SsW7hX2KlFgnEwnwoJmVWZtN5T3KOpChrYrh213iQtqdReQAD1v9dk08JJYJFluOWyXS+Qf73GcByDko2exVaBzzKIPoSxuJ8RHb72m1UeUvkD\/v216FhyZVmZihHr7WtrYrgarCACFHcqOl7rTojtTlpFlxAKROdfbFzNGM6rxNqVIdOAHcm\/os5hLXL+tKfHtGi\/HbMZpYdZhMeKP9e3jCaJoGjosfkQ4ZHy19+LLw84guwJwa\/9Ktlu8KY6999xP+Bvj4dedshtyDydKvvvvtpgAl+bo9Df8UGtubKMnkHACwN1E2f0AHkBWdSfPUPXvgqln2dD492SUvokzyVkXQIUBlzVcPHCnc7RZ\/tc8u9KmS7DE4xX62EnoAvc5NZI7V3LhTODiXlfWPiUHKvIWIfwP\/LqADGZnMJDNldpH+uBjbrQapZK+fuOPzW+aAnhW3HhZM585sijetOXliLoa9gCkh9INHCiDXhzXcg\/vpxYIPjRXXRxNKvaI6lu226l8Aivkzy1Ny9ARfXWBlelnoZGwRfmfLmmgZCuiCsz3fuI3zBPjtp6Y5lCjP3ys3qsjmcAREVeoX6HcvcPN3UBngDBwvrmf8LWboGH0E0E1SidB66fcT7RcuptRH0x5\/e5snTfjJ4EFA9CrukkQG\/FZos0p8y8x54czaQvEPHMEPAZX7h0tZs\/DkN\/ReyGJTEQpxaNV6fq6+3gxQd2+SVJO7aPbhn8hRvPDN9bpqNOJ7Zgc7I3K66njSmiFz+dSVFIc2\/1k3fB1jp3XQGqBzSntyXs0dPjnRN5uEu40PrYonyiv7LxhgDJ581+h9hajeR9umb6y\/G1bO8f76fQrKANF5s2vWH3Y1ZL49Vi2gxO84af44zk3gWjsg6clhTdn0aCuv5o1+fJ7HejOvlq9wH7kIM8ZPYWKs58nIykrZmgKpkmDDFgj469W6KSD1DorOyspuG9lyxTo4uS39nIpy1TktrmBA\/sRvhvNBg5FmYRnatdE5Od0m5gLOZ70ogIxyF43qD947ySc4pJOCU6qq7JceMxy26QVEyeI0\/lNvcrsugiCyJrtE\/dIvwhSyroxZcyUhkdxI+4ffajndOqztX68qz1fum6uW2EtV17fJf9FTeneF2Mqb71b7Sm6WLVC5O5MxtNRFe86f6Z1f1L29jwXXUVhj","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+2097{"flow_id":106,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353202,"pkt_len":1314,"pkt":"ABxCjnAxTF4M6gNlCABFKAUUuCxAADIG4NFN6ikjwKhzCABQwBY\/zywDxn1A6VAQAALrNgAALT11Li5gWvs4BXi1xLjmvfKMj0peVQo7lKJXGpIXNwaIVVnV50PDXh\/nhoec299vHndpLUua\/bqpCOjp7McAoWKOkJJNwfqArWbPME9b6btDGVgV0uzbgys3HrUPZGuULZqVvC9cfPh7y1VrCRATr2jIquLGEs7NUuTFUS2\/94Q2D+b6OEydZRO9cPMEkga3a+5FSfXnzkWP45N4tdwDAY3rKF71DNh9qyHNw3zq0kfntg59U62XHN6AJpW5oqhpNP\/KXicl+wTn90pd\/Ux5pxaNuaTtiVisjsDdqJGttkpWFmkIvcN4O3H7Nh+g88QCys9WSrOYR9T1WklqZUIXO2KozevHqrDRk3FhsvxtYk4AY5OTxXPHL2qjoy\/5\/LCO7z9Q0I1UDJ6H3s55a0u\/YyMnFnPMluUDID6DqRJHSb6OUS7lT\/EU7rwQMeL0oaEabUBfFS+XanJaGDL1BZSIyNomFf0DPsUe3djOS8nPpXOhOL\/zzo0NjXvFjylWLV5uSrIEQBYM8WUnB+X2Q2Wcez+wiFByuVMleIMfXAFk2nK\/2ntwKLyC0FBADi6XZL3qNrjHMTQHSC+dvnacGjv84sTgyPra7k8ik3DBtc1vCpiDd8xq36vyCP\/Ys2QYll2fN6Xbf+94Si8B0K0uar09Ty6DviDBYXt5\/8XpJtEJWzUaGUBbbCEtHIzhk3G2p2itRnzSyt10DUes\/e9jLtGO\/lchukfEfGu5+Y3TxFhX7Hv333wv7QEFPFBprU3t6V4dIS250PFtx3UWkJ\/KX1vB3GhaMaxBrDbzvjhV2WKQ\/Nnv8ZBY9VdRfkCLJV\/HblSMFcUwHxo4IG2hrHP6TmVmYZ8nIHO7sPEv51L3RYhnBGODsvT6Nl8\/uUNtzAC0mRAznmk7IsUW9cl71zuY0pjDL21g4bID6MrMuZm1Md9NHvU392TiT0doM\/mcbpr5kwNIJ4xpVq6TbrnGRECU65QT+3b\/mxQ15tdSgLRxavOq35PnNQqYK5ZOBDF9u2L\/jTZsE\/v5\/BjNF7aLpx8Nx9Ddl+8avs92OeLW3xatFRgatYsqSPdDSCWt\/7DKoHeOQNGej+4sPaab2IT40o+lWkNrHHFVKhXd8C8SlbnU3Y75R26q+3sGFS+RyE6QyJ\/9EgUPSerMv2RjAJ0haqzfaWTRZ1ZgTOEuLBSeWyw\/5ab4eQDQi0DSVpRkK9n7z6c0f+4O2vunGdSrnv5FBBQxLbrd8yHz3RejyafRygtcHHU3GotYO\/8AGow33n2mzZuLfvvluwSNjTr7s9+t1mvnBDTAJ\/w70fY1Tmwt8AmO+R4XaV\/P8kj5BSwxsIQ6s44lL2edfFiPzVM2v9TOk+F5lYNtoawNgI43Hns0wnw00qQhKTaOTYk+\/7rXY0Dy57cX2LbiFl0dMrMNwkSmzc5OOQEillNkcjpMP\/us+nfs+bmsUceWf2FdKzv2OlHy5srMsxLZZ64aGceMbX4ACl2x0Ow5nsH0a2jCfohcp78SJIn9dHE3evNd2nn4FwNTdYtr8pjqtj6OYulAm5wuv5my4xx1pmVWIbK7w519BlDX6tBN7SDWo4cCZLo7HGPFpXlKMdV6PWa68yPUlNYrLHFOnDpF5xk8sJqNdF2omWAwtrP65WUrU3KZ8D62RRrQfwB0KLK2eRd5P3m9hXVnQ6Nq","pkt_caplen":1314,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":79,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353202,"pkt_len":175,"pkt":"AQBef\/\/6jHNut5ODCABFAAChAzQAAAERAFrAqAUc7\/\/\/+up3B2wAjbFHTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":106,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353202,"pkt_len":117,"pkt":"ABxCjnAxTF4M6gNlCABFKABnuC1AADIG5X1N6ikjwKhzCABQwBY\/zzDvxn1A6VAYAAK2BwAAGHlgf4CvXzDNyxhLrqYUmmf6SBgwHBuCF2rQFuhe9Y1hgbwLb15JZ+tTfmuYp\/S8QVNXU2lnMkINCjANCg0K","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_id":106,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353202,"pkt_len":356,"pkt":"TF4M6gNlABxCjnAxCABFAAFWNPFAAIAGGfPAqHMITeopI8AWAFDGfUDpP88xLlAYAfC3\/AAAR0VUIC9SL0EzZ0tJRGxqWTJJM09Ea3lNMk5pTVRSbE1UQmlOelJtWkdRM09URTRPRGRoTkRabEVnUUNNQVlXR0tBRUlnSF9LZ2NJQkJEbXpObERLZ2NJQXhDcm5fdEJNZ29JQkJEbXpObERHSUFLT00yUmhGaENJQ3NCNTkzdkt4UTZjVnpBZ0NMX2I5WFdsc0ZRVng3NTRaZ0NIdjFYYVZwMVNJQ0NtQWc9IEhUVFAvMS4xDQpBY2NlcHQ6ICovKg0KQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0NClByYWdtYTogbm8tY2FjaGUNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkhvc3Q6IHN1LmZmLmF2YXN0LmNvbQ0KDQo=","pkt_caplen":356,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":74,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353203,"pkt_len":175,"pkt":"AQBef\/\/6cBiLE+IdCABFAAChI7sAAAER38jAqAUm7\/\/\/+uYRB2wAjbWjTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":102,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","pkt_oversize":false,"pkt_ts":1467353203,"pkt_len":175,"pkt":"AQBef\/\/6dNArkea6CABFAAChdKwAAAERIPzAqHMB7\/\/\/+scBB2wAjWbYTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSG9zdDoyMzkuMjU1LjI1NS4yNTA6MTkwMA0KU1Q6dXJuOnNjaGVtYXMtdXBucC1vcmc6ZGV2aWNlOkludGVybmV0R2F0ZXdheURldmljZToxDQpNYW46InNzZHA6ZGlzY292ZXIiDQpNWDozDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.193.119","src_port":22793,"dst_port":7133,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.193.119","src_port":22793,"dst_port":7133,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":53,"flow_packet_id":23,"flow_first_seen":1467353151975,"flow_last_seen":1467353165019,"flow_tot_l4_data_len":25110,"flow_min_l4_data_len":197,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1091,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"77.234.40.96","src_port":50486,"dst_port":80,"l4_proto":"tcp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"115.157.62.243","src_port":22793,"dst_port":29006,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"115.157.62.243","src_port":22793,"dst_port":29006,"l4_proto":"udp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.250.102.66","src_port":22793,"dst_port":1107,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.250.102.66","src_port":22793,"dst_port":1107,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":63,"flow_packet_id":2,"flow_first_seen":1467353159222,"flow_last_seen":1467353159428,"flow_tot_l4_data_len":645,"flow_min_l4_data_len":289,"flow_max_l4_data_len":356,"flow_avg_l4_data_len":322,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65127,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":77,"flow_packet_id":2,"flow_first_seen":1467353181295,"flow_last_seen":1467353181515,"flow_tot_l4_data_len":653,"flow_min_l4_data_len":297,"flow_max_l4_data_len":356,"flow_avg_l4_data_len":326,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.5.15","dst_ip":"68.233.253.133","src_port":65128,"dst_port":80,"l4_proto":"tcp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.74.190","src_port":22793,"dst_port":1037,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.26.74.190","src_port":22793,"dst_port":1037,"l4_proto":"udp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.232.243","src_port":22793,"dst_port":21044,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1467353136835,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.232.243","src_port":22793,"dst_port":21044,"l4_proto":"udp"}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1467353136835,"flow_last_seen":1467353136836,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.169.136.116","src_port":22793,"dst_port":17951,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1467353136835,"flow_last_seen":1467353136836,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.169.136.116","src_port":22793,"dst_port":17951,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":38,"flow_packet_id":2,"flow_first_seen":1467353139305,"flow_last_seen":1467353139309,"flow_tot_l4_data_len":1025,"flow_min_l4_data_len":246,"flow_max_l4_data_len":779,"flow_avg_l4_data_len":512,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"203.66.182.24","src_port":50466,"dst_port":80,"l4_proto":"tcp"}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"220.130.154.23","src_port":22793,"dst_port":35941,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"220.130.154.23","src_port":22793,"dst_port":35941,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1467353152692,"flow_last_seen":1467353167734,"flow_tot_l4_data_len":846,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.57","dst_ip":"239.255.255.250","src_port":59648,"dst_port":1900,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":56,"flow_packet_id":3,"flow_first_seen":1467353156641,"flow_last_seen":1467353156700,"flow_tot_l4_data_len":2244,"flow_min_l4_data_len":277,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":748,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50488,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":59,"flow_packet_id":27,"flow_first_seen":1467353157138,"flow_last_seen":1467353157157,"flow_tot_l4_data_len":33380,"flow_min_l4_data_len":392,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1236,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50491,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":62,"flow_packet_id":3,"flow_first_seen":1467353157509,"flow_last_seen":1467353159746,"flow_tot_l4_data_len":1228,"flow_min_l4_data_len":396,"flow_max_l4_data_len":423,"flow_avg_l4_data_len":409,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.66","src_port":50494,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":80,"flow_packet_id":246,"flow_first_seen":1467353189325,"flow_last_seen":1467353189439,"flow_tot_l4_data_len":311669,"flow_min_l4_data_len":164,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1266,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50505,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":84,"flow_packet_id":2,"flow_first_seen":1467353190040,"flow_last_seen":1467353190044,"flow_tot_l4_data_len":1207,"flow_min_l4_data_len":178,"flow_max_l4_data_len":1029,"flow_avg_l4_data_len":603,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50507,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":87,"flow_packet_id":2,"flow_first_seen":1467353190634,"flow_last_seen":1467353190638,"flow_tot_l4_data_len":550,"flow_min_l4_data_len":164,"flow_max_l4_data_len":386,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50508,"dst_port":80,"l4_proto":"tcp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.47.91.129","src_port":22793,"dst_port":22576,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.47.91.129","src_port":22793,"dst_port":22576,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":36,"flow_packet_id":3,"flow_first_seen":1467353138757,"flow_last_seen":1467353138794,"flow_tot_l4_data_len":1759,"flow_min_l4_data_len":207,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":586,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50463,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":46,"flow_packet_id":5,"flow_first_seen":1467353140755,"flow_last_seen":1467353140794,"flow_tot_l4_data_len":4383,"flow_min_l4_data_len":622,"flow_max_l4_data_len":1044,"flow_avg_l4_data_len":876,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.32.39","src_port":50476,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":66,"flow_packet_id":3,"flow_first_seen":1467353165456,"flow_last_seen":1467353165492,"flow_tot_l4_data_len":1759,"flow_min_l4_data_len":207,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":586,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50496,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":64,"flow_packet_id":2,"flow_first_seen":1467353160157,"flow_last_seen":1467353163154,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.48","dst_ip":"239.255.255.250","src_port":63930,"dst_port":1900,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":1467353166729,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":39383,"dst_port":1900,"l4_proto":"udp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1467353136439,"flow_last_seen":1467353136440,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.249.53.196","src_port":22793,"dst_port":32443,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1467353136439,"flow_last_seen":1467353136440,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.249.53.196","src_port":22793,"dst_port":32443,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":89,"flow_packet_id":2,"flow_first_seen":1467353191500,"flow_last_seen":1467353191505,"flow_tot_l4_data_len":623,"flow_min_l4_data_len":164,"flow_max_l4_data_len":459,"flow_avg_l4_data_len":311,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50766,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":90,"flow_packet_id":8,"flow_first_seen":1467353191521,"flow_last_seen":1467353191606,"flow_tot_l4_data_len":2640,"flow_min_l4_data_len":164,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":330,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50767,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":92,"flow_packet_id":2,"flow_first_seen":1467353191604,"flow_last_seen":1467353191608,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":164,"flow_max_l4_data_len":492,"flow_avg_l4_data_len":328,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.19","src_port":50768,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":101,"flow_packet_id":529,"flow_first_seen":1467353196856,"flow_last_seen":1467353197680,"flow_tot_l4_data_len":674975,"flow_min_l4_data_len":146,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1275,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50778,"dst_port":80,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":104,"flow_packet_id":542,"flow_first_seen":1467353198532,"flow_last_seen":1467353199507,"flow_tot_l4_data_len":691957,"flow_min_l4_data_len":269,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":1276,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50780,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1467353200271,"flow_last_seen":1467353200271,"flow_tot_l4_data_len":269,"flow_min_l4_data_len":269,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":269,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"223.26.106.20","src_port":50781,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":86,"flow_packet_id":2,"flow_first_seen":1467353190168,"flow_last_seen":1467353190235,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50295,"l4_proto":"tcp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":2,"flow_packet_id":338,"flow_first_seen":1467353136439,"flow_last_seen":1467353136982,"flow_tot_l4_data_len":127262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.42.0.158","src_port":22793,"dst_port":7716,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":2,"flow_packet_id":338,"flow_first_seen":1467353136439,"flow_last_seen":1467353136982,"flow_tot_l4_data_len":127262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":376,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.42.0.158","src_port":22793,"dst_port":7716,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":79,"flow_packet_id":6,"flow_first_seen":1467353187172,"flow_last_seen":1467353202194,"flow_tot_l4_data_len":846,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.28","dst_ip":"239.255.255.250","src_port":60023,"dst_port":1900,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.171.1","src_port":22793,"dst_port":29702,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.44.171.1","src_port":22793,"dst_port":29702,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":57,"flow_packet_id":2,"flow_first_seen":1467353156959,"flow_last_seen":1467353156998,"flow_tot_l4_data_len":615,"flow_min_l4_data_len":219,"flow_max_l4_data_len":396,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50489,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":58,"flow_packet_id":2,"flow_first_seen":1467353157063,"flow_last_seen":1467353157103,"flow_tot_l4_data_len":768,"flow_min_l4_data_len":323,"flow_max_l4_data_len":445,"flow_avg_l4_data_len":384,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.13.188","src_port":50490,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":93,"flow_packet_id":2,"flow_first_seen":1467353191688,"flow_last_seen":1467353191722,"flow_tot_l4_data_len":827,"flow_min_l4_data_len":257,"flow_max_l4_data_len":570,"flow_avg_l4_data_len":413,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"101.227.200.11","src_port":50769,"dst_port":80,"l4_proto":"tcp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":3,"flow_packet_id":40,"flow_first_seen":1467353136439,"flow_last_seen":1467353136982,"flow_tot_l4_data_len":11052,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1091,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.197.138.12","src_port":22793,"dst_port":6956,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":3,"flow_packet_id":40,"flow_first_seen":1467353136439,"flow_last_seen":1467353136982,"flow_tot_l4_data_len":11052,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1091,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"222.197.138.12","src_port":22793,"dst_port":6956,"l4_proto":"udp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":1,"flow_packet_id":101,"flow_first_seen":1467353136433,"flow_last_seen":1467353136982,"flow_tot_l4_data_len":35385,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip4","src_ip":"118.171.15.56","dst_ip":"192.168.115.8","src_port":5544,"dst_port":22793,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":1,"flow_packet_id":101,"flow_first_seen":1467353136433,"flow_last_seen":1467353136982,"flow_tot_l4_data_len":35385,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":350,"midstream":0,"l3_proto":"ip4","src_ip":"118.171.15.56","dst_ip":"192.168.115.8","src_port":5544,"dst_port":22793,"l4_proto":"udp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1467353136616,"flow_last_seen":1467353136617,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50462,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1467353136616,"flow_last_seen":1467353136617,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50462,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":39,"flow_packet_id":2,"flow_first_seen":1467353139505,"flow_last_seen":1467353139595,"flow_tot_l4_data_len":760,"flow_min_l4_data_len":165,"flow_max_l4_data_len":595,"flow_avg_l4_data_len":380,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50467,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1467353139627,"flow_last_seen":1467353139779,"flow_tot_l4_data_len":704,"flow_min_l4_data_len":165,"flow_max_l4_data_len":539,"flow_avg_l4_data_len":352,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50469,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":1467353139662,"flow_last_seen":1467353139771,"flow_tot_l4_data_len":550,"flow_min_l4_data_len":160,"flow_max_l4_data_len":390,"flow_avg_l4_data_len":275,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50470,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1467353139819,"flow_last_seen":1467353142600,"flow_tot_l4_data_len":2160,"flow_min_l4_data_len":165,"flow_max_l4_data_len":918,"flow_avg_l4_data_len":540,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50471,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1467353140709,"flow_last_seen":1467353140888,"flow_tot_l4_data_len":1075,"flow_min_l4_data_len":165,"flow_max_l4_data_len":910,"flow_avg_l4_data_len":537,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50473,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1467353140628,"flow_last_seen":1467353140677,"flow_tot_l4_data_len":1226,"flow_min_l4_data_len":160,"flow_max_l4_data_len":1066,"flow_avg_l4_data_len":613,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50474,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1467353140655,"flow_last_seen":1467353140720,"flow_tot_l4_data_len":1072,"flow_min_l4_data_len":165,"flow_max_l4_data_len":907,"flow_avg_l4_data_len":536,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50475,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1467353141138,"flow_last_seen":1467353141308,"flow_tot_l4_data_len":745,"flow_min_l4_data_len":165,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":372,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50477,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":50,"flow_packet_id":2,"flow_first_seen":1467353147705,"flow_last_seen":1467353147794,"flow_tot_l4_data_len":548,"flow_min_l4_data_len":165,"flow_max_l4_data_len":383,"flow_avg_l4_data_len":274,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50483,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1467353147927,"flow_last_seen":1467353148016,"flow_tot_l4_data_len":753,"flow_min_l4_data_len":165,"flow_max_l4_data_len":588,"flow_avg_l4_data_len":376,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50484,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1467353150114,"flow_last_seen":1467353150272,"flow_tot_l4_data_len":1078,"flow_min_l4_data_len":165,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50485,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1467353155790,"flow_last_seen":1467353155790,"flow_tot_l4_data_len":649,"flow_min_l4_data_len":649,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":649,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50487,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1467353157468,"flow_last_seen":1467353157533,"flow_tot_l4_data_len":1077,"flow_min_l4_data_len":165,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":538,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50493,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":65,"flow_packet_id":6,"flow_first_seen":1467353165300,"flow_last_seen":1467353165845,"flow_tot_l4_data_len":3237,"flow_min_l4_data_len":165,"flow_max_l4_data_len":918,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50495,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":73,"flow_packet_id":3,"flow_first_seen":1467353172912,"flow_last_seen":1467353180202,"flow_tot_l4_data_len":1990,"flow_min_l4_data_len":165,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":663,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50501,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":75,"flow_packet_id":2,"flow_first_seen":1467353180357,"flow_last_seen":1467353180443,"flow_tot_l4_data_len":1078,"flow_min_l4_data_len":165,"flow_max_l4_data_len":913,"flow_avg_l4_data_len":539,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50502,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":78,"flow_packet_id":2,"flow_first_seen":1467353185940,"flow_last_seen":1467353186002,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":165,"flow_max_l4_data_len":649,"flow_avg_l4_data_len":407,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50503,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1467353189363,"flow_last_seen":1467353189363,"flow_tot_l4_data_len":912,"flow_min_l4_data_len":912,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":912,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50504,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1467353190110,"flow_last_seen":1467353190110,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":165,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip4","src_ip":"202.108.14.219","dst_ip":"192.168.115.8","src_port":80,"dst_port":50506,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":106,"flow_packet_id":5,"flow_first_seen":1467353202192,"flow_last_seen":1467353202428,"flow_tot_l4_data_len":3139,"flow_min_l4_data_len":83,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":627,"midstream":1,"l3_proto":"ip4","src_ip":"77.234.41.35","dst_ip":"192.168.115.8","src_port":80,"dst_port":49174,"l4_proto":"tcp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.37.142.173","src_port":22793,"dst_port":1074,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136835,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.37.142.173","src_port":22793,"dst_port":1074,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":6,"flow_packet_id":45,"flow_first_seen":1467353136440,"flow_last_seen":1467353136952,"flow_tot_l4_data_len":13333,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"219.228.107.156","src_port":22793,"dst_port":1250,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":6,"flow_packet_id":45,"flow_first_seen":1467353136440,"flow_last_seen":1467353136952,"flow_tot_l4_data_len":13333,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1073,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"219.228.107.156","src_port":22793,"dst_port":1250,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.233.39.81","src_port":22793,"dst_port":18590,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.233.39.81","src_port":22793,"dst_port":18590,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1467353138931,"flow_last_seen":1467353139050,"flow_tot_l4_data_len":1383,"flow_min_l4_data_len":673,"flow_max_l4_data_len":710,"flow_avg_l4_data_len":691,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50464,"dst_port":80,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1467353136838,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.133.182","src_port":22793,"dst_port":17788,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1467353136838,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"119.188.133.182","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":67,"flow_packet_id":3,"flow_first_seen":1467353165563,"flow_last_seen":1467353165659,"flow_tot_l4_data_len":1197,"flow_min_l4_data_len":20,"flow_max_l4_data_len":970,"flow_avg_l4_data_len":399,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.112.49","src_port":50497,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":49,"flow_packet_id":2,"flow_first_seen":1467353144819,"flow_last_seen":1467353144913,"flow_tot_l4_data_len":659,"flow_min_l4_data_len":249,"flow_max_l4_data_len":410,"flow_avg_l4_data_len":329,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"140.205.243.64","src_port":50482,"dst_port":80,"l4_proto":"tcp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.227.170.88","src_port":22793,"dst_port":20227,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.227.170.88","src_port":22793,"dst_port":20227,"l4_proto":"udp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"121.248.133.93","src_port":22793,"dst_port":12757,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"121.248.133.93","src_port":22793,"dst_port":12757,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":94,"flow_packet_id":2,"flow_first_seen":1467353195852,"flow_last_seen":1467353195956,"flow_tot_l4_data_len":1077,"flow_min_l4_data_len":165,"flow_max_l4_data_len":912,"flow_avg_l4_data_len":538,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.236","src_port":50771,"dst_port":80,"l4_proto":"tcp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.112.31.89","src_port":22793,"dst_port":29072,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.112.31.89","src_port":22793,"dst_port":29072,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":96,"flow_packet_id":2,"flow_first_seen":1467353196104,"flow_last_seen":1467353196204,"flow_tot_l4_data_len":1050,"flow_min_l4_data_len":165,"flow_max_l4_data_len":885,"flow_avg_l4_data_len":525,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.221","src_port":50773,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":98,"flow_packet_id":2,"flow_first_seen":1467353196393,"flow_last_seen":1467353196523,"flow_tot_l4_data_len":718,"flow_min_l4_data_len":165,"flow_max_l4_data_len":553,"flow_avg_l4_data_len":359,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.108.14.219","src_port":50774,"dst_port":80,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1467353136835,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.41.144.153","src_port":22793,"dst_port":10492,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1467353136835,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":32,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"114.41.144.153","src_port":22793,"dst_port":10492,"l4_proto":"udp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.223.204.67","src_port":22793,"dst_port":11102,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"61.223.204.67","src_port":22793,"dst_port":11102,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":70,"flow_packet_id":2,"flow_first_seen":1467353167288,"flow_last_seen":1467353167373,"flow_tot_l4_data_len":825,"flow_min_l4_data_len":165,"flow_max_l4_data_len":660,"flow_avg_l4_data_len":412,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50498,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":60,"flow_packet_id":3,"flow_first_seen":1467353157433,"flow_last_seen":1467353157718,"flow_tot_l4_data_len":1321,"flow_min_l4_data_len":355,"flow_max_l4_data_len":483,"flow_avg_l4_data_len":440,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.13.3","src_port":50492,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":71,"flow_packet_id":2,"flow_first_seen":1467353170523,"flow_last_seen":1467353171307,"flow_tot_l4_data_len":1228,"flow_min_l4_data_len":165,"flow_max_l4_data_len":1063,"flow_avg_l4_data_len":614,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.76","src_port":50499,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":88,"flow_packet_id":3,"flow_first_seen":1467353190892,"flow_last_seen":1467353190978,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":25,"flow_max_l4_data_len":463,"flow_avg_l4_data_len":205,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"106.38.219.107","src_port":50509,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":95,"flow_packet_id":2,"flow_first_seen":1467353195855,"flow_last_seen":1467353195998,"flow_tot_l4_data_len":606,"flow_min_l4_data_len":241,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50772,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":97,"flow_packet_id":2,"flow_first_seen":1467353196348,"flow_last_seen":1467353199417,"flow_tot_l4_data_len":606,"flow_min_l4_data_len":241,"flow_max_l4_data_len":365,"flow_avg_l4_data_len":303,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"123.125.111.70","src_port":50775,"dst_port":80,"l4_proto":"tcp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1467353136483,"flow_last_seen":1467353136483,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":51,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"183.228.182.44","dst_ip":"192.168.115.8","src_port":13913,"dst_port":22793,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1467353136483,"flow_last_seen":1467353136483,"flow_tot_l4_data_len":155,"flow_min_l4_data_len":51,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"183.228.182.44","dst_ip":"192.168.115.8","src_port":13913,"dst_port":22793,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":83,"flow_packet_id":5,"flow_first_seen":1467353189820,"flow_last_seen":1467353201861,"flow_tot_l4_data_len":705,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.41","dst_ip":"239.255.255.250","src_port":50374,"dst_port":1900,"l4_proto":"udp"}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1467353136838,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.104","src_port":22793,"dst_port":17788,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1467353136838,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.104","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1467353136836,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.82","src_port":22793,"dst_port":17788,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1467353136836,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"183.61.167.82","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.175.128.104","src_port":22793,"dst_port":5185,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"1.175.128.104","src_port":22793,"dst_port":5185,"l4_proto":"udp"}
+0501{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.87","src_port":22793,"dst_port":17788,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136838,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":96,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.87","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":116,"flow_max_l4_data_len":116,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.103","src_port":22793,"dst_port":17788,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136833,"flow_tot_l4_data_len":232,"flow_min_l4_data_len":116,"flow_max_l4_data_len":116,"flow_avg_l4_data_len":116,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"218.61.39.103","src_port":22793,"dst_port":17788,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":76,"flow_packet_id":6,"flow_first_seen":1467353180830,"flow_last_seen":1467353195837,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.50","dst_ip":"239.255.255.250","src_port":52529,"dst_port":1900,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.20","src_port":22793,"dst_port":33738,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.20","src_port":22793,"dst_port":33738,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.19","src_port":22793,"dst_port":33738,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1467353136837,"flow_last_seen":1467353136837,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"210.47.12.19","src_port":22793,"dst_port":33738,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":91,"flow_packet_id":2,"flow_first_seen":1467353191538,"flow_last_seen":1467353191606,"flow_tot_l4_data_len":395,"flow_min_l4_data_len":165,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":197,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.110.220.15","src_port":50765,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1467353144633,"flow_last_seen":1467353144633,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":313,"flow_max_l4_data_len":313,"flow_avg_l4_data_len":313,"midstream":1,"l3_proto":"ip4","src_ip":"117.79.81.135","dst_ip":"192.168.115.8","src_port":80,"dst_port":50443,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":99,"flow_packet_id":2,"flow_first_seen":1467353196441,"flow_last_seen":1467353196535,"flow_tot_l4_data_len":520,"flow_min_l4_data_len":160,"flow_max_l4_data_len":360,"flow_avg_l4_data_len":260,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50776,"dst_port":80,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":100,"flow_packet_id":2,"flow_first_seen":1467353196740,"flow_last_seen":1467353196835,"flow_tot_l4_data_len":1312,"flow_min_l4_data_len":160,"flow_max_l4_data_len":1152,"flow_avg_l4_data_len":656,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50777,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":103,"flow_packet_id":3,"flow_first_seen":1467353197951,"flow_last_seen":1467353198052,"flow_tot_l4_data_len":1530,"flow_min_l4_data_len":90,"flow_max_l4_data_len":1280,"flow_avg_l4_data_len":510,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.206.22.77","src_port":50779,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":74,"flow_packet_id":9,"flow_first_seen":1467353179045,"flow_last_seen":1467353203065,"flow_tot_l4_data_len":1269,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":58897,"dst_port":1900,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1467353166729,"flow_last_seen":1467353166729,"flow_tot_l4_data_len":131,"flow_min_l4_data_len":131,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.63","dst_ip":"239.255.255.250","src_port":60976,"dst_port":1900,"l4_proto":"udp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.117.101.81","src_port":22793,"dst_port":10162,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1467353136834,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"111.117.101.81","src_port":22793,"dst_port":10162,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":102,"flow_packet_id":9,"flow_first_seen":1467353197131,"flow_last_seen":1467353203157,"flow_tot_l4_data_len":1233,"flow_min_l4_data_len":131,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.1","dst_ip":"239.255.255.250","src_port":50945,"dst_port":1900,"l4_proto":"udp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":0,"flow_packet_id":400,"flow_first_seen":1467353136432,"flow_last_seen":1467353136981,"flow_tot_l4_data_len":151646,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1075,"flow_avg_l4_data_len":379,"midstream":0,"l3_proto":"ip4","src_ip":"1.173.5.226","dst_ip":"192.168.115.8","src_port":22636,"dst_port":22793,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":0,"flow_packet_id":400,"flow_first_seen":1467353136432,"flow_last_seen":1467353136981,"flow_tot_l4_data_len":151646,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1075,"flow_avg_l4_data_len":379,"midstream":0,"l3_proto":"ip4","src_ip":"1.173.5.226","dst_ip":"192.168.115.8","src_port":22636,"dst_port":22793,"l4_proto":"udp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":4,"flow_packet_id":5,"flow_first_seen":1467353136439,"flow_last_seen":1467353136660,"flow_tot_l4_data_len":3311,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1075,"flow_avg_l4_data_len":662,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.198.7.89","src_port":22793,"dst_port":16039,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":4,"flow_packet_id":5,"flow_first_seen":1467353136439,"flow_last_seen":1467353136660,"flow_tot_l4_data_len":3311,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1075,"flow_avg_l4_data_len":662,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"202.198.7.89","src_port":22793,"dst_port":16039,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":72,"flow_packet_id":2,"flow_first_seen":1467353172446,"flow_last_seen":1467353172450,"flow_tot_l4_data_len":1060,"flow_min_l4_data_len":255,"flow_max_l4_data_len":805,"flow_avg_l4_data_len":530,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"23.41.133.163","src_port":50500,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":82,"flow_packet_id":18,"flow_first_seen":1467353189784,"flow_last_seen":1467353196145,"flow_tot_l4_data_len":8715,"flow_min_l4_data_len":439,"flow_max_l4_data_len":519,"flow_avg_l4_data_len":484,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.5.38","dst_ip":"239.255.255.250","src_port":1900,"dst_port":1900,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.237.154.69","src_port":22793,"dst_port":4316,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1467353136833,"flow_last_seen":1467353136834,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.115.8","dst_ip":"36.237.154.69","src_port":22793,"dst_port":4316,"l4_proto":"udp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/pps.pcap"}
diff --git a/tests/result/nDPId_ps_vue.pcap.txt b/tests/result/nDPId_ps_vue.pcap.txt
new file mode 100644
index 000000000..0e0de6c0d
--- /dev/null
+++ b/tests/result/nDPId_ps_vue.pcap.txt
@@ -0,0 +1,58 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1568831054386,"flow_last_seen":1568831054386,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp"}
+2173{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2182{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2173{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+1396{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":796,"pkt":"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","pkt_caplen":796,"pkt_type":2048,"pkt_ipoffset":14}
+1201{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":662,"pkt":"QJkivOG5AKC8brI7CABFaAKIJf0AADQGkFgI\/AKLwKgBhABQ5z6u3xiMAy5J4VAYgjJZYQAATGO7RGirQNcpv4UwxDz093zL13znHzaLiqebsPchDWHZBOiidYA3Y8LCNOnnayC4Z1BBU0sWdxDn1B3\/x6vswSihy+rtgp\/EJhbuBz7M6U9nVFJY0myh0yRZ60kA3XTZ\/+W0qaQRuucc3eahnZZ32yZGbX8y4NpdeyPLxOcRwItG\/QrQLFOO4LFz2Lzx7vo8RD9PQ8uJnjOl0MYY4CnbxrM8vBxUFsrMk7WSjjo4E+9QPODV51YNtK1mSug3EFg9fhIhfPhXs9hI3PBIqNsjAk4G2m+ZAI0qX3vPPWu650KuFm0MWVzjGg9ZilIcf01BcxvNZlevbCI46nn9QOAZEy3c5M\/76C\/nVghbctVdeGqT5ss6xHk4hLZb+QuCPg728Xtpo4ZSOO2crFmbIv0jnuW6ggHLaDE0IVYlkBLLGc1YujN8lsCPV4bq6SlTcn6NcUYx\/MVs+BengKwQfU4ql2M2BeKEn5ovekSGVqA6+cwlDTCLPKsyAy05HnqdNBMRmRec93URUMsaCLtEFDHBlmRagIBJcic8RU8aHcwwb5rzB6FJaSmu0oLzTOkq7WV00WgiVptXLcLTg4M3CmdLCYlPzT17jgYb4kw55AsvEgDkJA3RjL7HRJKJAhQIUj+8+qHsCQIqFdv1Mg3l2WGNXytDYV8W1GAMdvFLLE5AeUj5Ur6\/wNqIvF9wCsda4CXOAO4Uo4tPd1WQ0942Ze4OXB2bD1fbkPhV1j5TLiOviB6lLljUvVchX6+QeAtPjbAsaxanytjA4pCYHNOyHWhzR0Puma3mYJQmBgq1WcXi0Hg=","pkt_caplen":662,"pkt_type":2048,"pkt_ipoffset":14}
+2167{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2168{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2171{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2165{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2160{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2172{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"QJkivOG5AKC8brI7CABFaAVOJkQAADQGjUsI\/AKLwKgBhABQ5z6u3zSqAy5J4VAQgjK8tgAAEkK1mXUp8V7Z5d9PHVziwx5XlgpfR4roBWk7X1hsCFzFu2wuiRPlqaGsAMkmgRMrCuSf7Is8gyh+LRAzp+9dp1s\/qhDJQevWuX1pXvhqyX5w2q63PrPeBGL8B3tnaWudiYxlYR5aQHe37oUMKu2pwUHl1aq8wMdJxmuD2vYSCh85Jja4XE5ayTqtSSpHllh1muWq9dXiRON0TBbcS7h72VPuKJ1eFkxuFe88iR9FT6NM7H4ipLW6jcgPcQMWv4KTbkpyUthyI98yHEa2\/LnEnPrr54MbjQTQZ2W4ZVGD39ctIMN54MMwFtYlSgVkm6qeutFNlb2Nw7y+SFPvBSpBgr1VXSgtbMZC3rsyWr42QPNH0sVQpHVefVpJ0aypBJHtLcDmhGrdTg+h43\/8rQfNQ1Pgu4bb4BeBuL7JSDhQ97AbG654KiE72l7Jj3G\/bFGU4GTe0Kt05HP5khkuwvh4qt4imwtuqjMiZzR8Cikuuc1A+uXNC13Qh9vdeP0B5waooVJAkXk2vZy4fakC9LcFR\/FVhU6TcRLP2sNLYHLiIYs5VrLgtS21hxZ1hntNcbMc9HNzZkxt0n5PiD8SxCG7QAZJa14hMj6KU\/Lz36qrpN4FIhx+DIfWEcxwcYLgHcl\/xgLDb0AvcfCaFl3pyncJ4BKgmenDg8cQnObPwak6ibUz6LHV\/xayFQ0CU\/Cg\/qklFB05jVWpncY67t3XvbtYtY26rWMxyObIYoE2pXFi31oKPYWkCPdjEKB8J46jCx1slWjH+wQlqCvp1dALZpERVbjNvp7n4mXTp\/EYIqo4GfBQ4phA6P07sC8smZ9F4eJnYobdMe5fYJghqrxa8\/RS4YI\/GHRYIKLHM3UinjgOJAog7Kv+dm\/VaGPUjN\/T405GYcOHNbaozo1Ayfh2AqKIT6y9DQhmD2+gOf9YOhrOIIMAiuzQUeDxz3OR+RHCuNielwAIzj\/hLOafYuY0fS0NHWbtXuD57e07khOSYYJvLH9tOb6jiLWhrYpNY7OYd729HsS\/lgDU6iJYj7YSPCDKGJVY2UlxtuBoLQJSxdxAKd6WDAOhLzBaXWRpTmdG5qK\/pP+JC2BggpMSncytU\/IxTHDjFLAuxa52baL23dZPpMzkwX+xHBNpj1eqxelPL9WRHGSmjWvpr2P0bd58HGY9k4dXzHiV+NkkMi1X1qxJP5pDfUe+\/FQxb1+PDNd5GIprCKA3pOhWKess1NWhndA0KG+W6Aem1T+VcDByzMoeJwg1hmQc3NfIXpaamSlOefVPAIV04vo0VSfUuYl2anQGXtMI2pqSzrYxSA5Xk6T9KcfT0X6vKVB\/csg8DkMxGnFWdbeKxdV0UoK9cmv3oP1XSvIlN4XEP7Xj81Hb1P0\/JxZHRtYmSeGzk9z5S3J2Ebk5QJPrBUSNVVI2LyT6mLrz5Jw4L6\/Ms7MY6oN5Sozp3X4MKRo0Vw23J7QaGV21lgfKeOzlDPqFWCzWfT0P7wnlW4ql1B4EKujQpJx1Gi1\/9wN6lFheUsIGfr70g7QQxg+W0LxXY2bQ4Mrt8lascQ6JWOhPqYrL2TyqBJTaobImqKjo3Z6qASv48yjbGECzlGjDh4A8Z9ooPQKgHDCXYUBk4AHHF2M0LniYJM86IFZT8CEl8iZFMsl1UbKOqTwk\/IXx+FdecsKWpaMC5ICV\/\/5qusBNGDcT8Equtd+CEFZB+VGmBGvCQZTWr+rIzfNEtPdWqt1MiwmdtcVdPfCRcPsA217RawbLhg==","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2171{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+2179{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":70,"pkt":"QJkivOG5AKC8brI7CABFaAA4JkcAADQGkl4I\/AKLwKgBhABQ5z6u30QcAy5J4VAQgjJN+QAAs0edR6lCBoXgo4HYg6cD0Q==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+2172{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831054,"pkt_len":1372,"pkt":"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","pkt_caplen":1372,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1568831055576,"flow_last_seen":1568831055576,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"209.102.209.13","dst_ip":"192.168.1.132","src_port":443,"dst_port":65112,"l4_proto":"tcp"}
+0426{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831055,"pkt_len":85,"pkt":"QJkivOG5AKC8brI7CABFSABHBlJAAO8GIHbRZtENwKgBhAG7\/li+HZhYblTGsFAQfqWgYQAAFQMDABr4Hh7jQY7SKbwko9LFlX\/KNQ3S+SkGYTwZEw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831055,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFSAAowh4AAO8GpMjRZtENwKgBhAG7\/li+HZh3blTGsFARfqVA3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":0,"flow_packet_id":255,"flow_first_seen":1568831054386,"flow_last_seen":1568831056144,"flow_tot_l4_data_len":318190,"flow_min_l4_data_len":22,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1247,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp","ndpi": {"proto":"HTTP.PS_VUE","category":"Video"},"http": {}}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":0,"flow_packet_id":255,"flow_first_seen":1568831054386,"flow_last_seen":1568831056144,"flow_tot_l4_data_len":318190,"flow_min_l4_data_len":22,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1247,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp","ndpi": {"proto":"HTTP.PS_VUE","category":"Video"},"http": {}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1568831058486,"flow_last_seen":1568831058486,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"13.33.255.96","dst_ip":"192.168.1.132","src_port":443,"dst_port":55076,"l4_proto":"tcp"}
+0380{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831058,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFSAAownEAAO4GO2gNIf9gwKgBhAG71yS9fOmKSelcQFAQgjI44wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1115{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831058,"pkt_len":593,"pkt":"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","pkt_caplen":593,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1568831062289,"flow_last_seen":1568831062289,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"34.217.165.102","dst_ip":"192.168.1.132","src_port":443,"dst_port":63577,"l4_proto":"tcp"}
+0425{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831062,"pkt_len":86,"pkt":"QJkivOG5AKC8brI7CABFCABImQxAACkGLjAi2aVmwKgBhAG7+FlRo0j5C6Rn21AYgjJ23AAAFwMDABtaN0V5Aa+aB6dvvTVw7le63zELX9T\/544IGeY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1568831063571,"flow_last_seen":1568831063571,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"63.140.57.73","dst_ip":"192.168.1.132","src_port":443,"dst_port":61267,"l4_proto":"tcp"}
+0381{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFCAAowxcAAO8Gza4\/jDlJwKgBhAG771P3p6tQM3A6VVAQgjLw0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFAAAowxgAAO8GpBbRZtENwKgBhAG7\/li+HZh4blTGsVAQfqRA3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1309{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":737,"pkt":"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","pkt_caplen":737,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1568831063828,"flow_last_seen":1568831063828,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":55648,"l4_proto":"tcp"}
+0425{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":85,"pkt":"QJkivOG5AKC8brI7CABFCABHowhAADEGc8AXOVl7wKgBhAG72WDabivvm96\/y1AYgjJsJQAAFQMDABqR742fBpyPZjtEfbqDeBewXB+uHjYt8SUS1Q==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFCAAowxsAADEGk8wXOVl7wKgBhAG72WDabiwOm96\/y1ARgjK9fQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1568831063948,"flow_last_seen":1568831063948,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":62694,"l4_proto":"tcp"}
+0425{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":85,"pkt":"QJkivOG5AKC8brI7CABFCABHpH1AADEGcksXOVl7wKgBhAG79ObaKuoS0SNuMlAYgjIMvwAAFQMDABp\/k9+fmQYVGf3Hut7mHezJW979dzhuHOFbOg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831063,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFCAAowx0AADEGk8oXOVl7wKgBhAG79ObaKuox0SNuMlARgjIAbAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1568831064128,"flow_last_seen":1568831064128,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":52217,"l4_proto":"tcp"}
+0426{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831064,"pkt_len":85,"pkt":"QJkivOG5AKC8brI7CABFCABH4exAADEGNNwXOVl7wKgBhAG7y\/nZ6b0aK\/hlyVAYgjIsbgAAFQMDABqvyMBTvXIi2chxG9Ya8G+SxcFk923Cg7zTOg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831064,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFCAAowx8AADEGk8gXOVl7wKgBhAG7y\/nZ6b05K\/hlyVARgjIEJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831068,"pkt_len":54,"pkt":"QJkivOG5AKC8brI7CABFSAAow6oAAO4GOi8NIf9gwKgBhAG71yS9fOulSelfaVAQgjIznwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1113{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","pkt_oversize":false,"pkt_ts":1568831068,"pkt_len":593,"pkt":"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","pkt_caplen":593,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1568831063948,"flow_last_seen":1568831063948,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":62694,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1568831063948,"flow_last_seen":1568831063948,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":62694,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1568831058486,"flow_last_seen":1568831068662,"flow_tot_l4_data_len":1158,"flow_min_l4_data_len":20,"flow_max_l4_data_len":559,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"13.33.255.96","dst_ip":"192.168.1.132","src_port":443,"dst_port":55076,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1568831058486,"flow_last_seen":1568831068662,"flow_tot_l4_data_len":1158,"flow_min_l4_data_len":20,"flow_max_l4_data_len":559,"flow_avg_l4_data_len":289,"midstream":1,"l3_proto":"ip4","src_ip":"13.33.255.96","dst_ip":"192.168.1.132","src_port":443,"dst_port":55076,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1568831062289,"flow_last_seen":1568831062289,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"34.217.165.102","dst_ip":"192.168.1.132","src_port":443,"dst_port":63577,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1568831062289,"flow_last_seen":1568831062289,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":1,"l3_proto":"ip4","src_ip":"34.217.165.102","dst_ip":"192.168.1.132","src_port":443,"dst_port":63577,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":0,"flow_packet_id":1724,"flow_first_seen":1568831054386,"flow_last_seen":1568831070533,"flow_tot_l4_data_len":2139553,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1241,"midstream":1,"l3_proto":"ip4","src_ip":"8.252.2.139","dst_ip":"192.168.1.132","src_port":80,"dst_port":59198,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1568831063828,"flow_last_seen":1568831063828,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":55648,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1568831063828,"flow_last_seen":1568831063828,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":55648,"l4_proto":"tcp"}
+0511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1568831063571,"flow_last_seen":1568831063589,"flow_tot_l4_data_len":723,"flow_min_l4_data_len":20,"flow_max_l4_data_len":703,"flow_avg_l4_data_len":361,"midstream":1,"l3_proto":"ip4","src_ip":"63.140.57.73","dst_ip":"192.168.1.132","src_port":443,"dst_port":61267,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1568831063571,"flow_last_seen":1568831063589,"flow_tot_l4_data_len":723,"flow_min_l4_data_len":20,"flow_max_l4_data_len":703,"flow_avg_l4_data_len":361,"midstream":1,"l3_proto":"ip4","src_ip":"63.140.57.73","dst_ip":"192.168.1.132","src_port":443,"dst_port":61267,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1568831064128,"flow_last_seen":1568831064128,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":52217,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1568831064128,"flow_last_seen":1568831064128,"flow_tot_l4_data_len":71,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.89.123","dst_ip":"192.168.1.132","src_port":443,"dst_port":52217,"l4_proto":"tcp"}
+0510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1568831055576,"flow_last_seen":1568831063575,"flow_tot_l4_data_len":91,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":30,"midstream":1,"l3_proto":"ip4","src_ip":"209.102.209.13","dst_ip":"192.168.1.132","src_port":443,"dst_port":65112,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1568831055576,"flow_last_seen":1568831063575,"flow_tot_l4_data_len":91,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":30,"midstream":1,"l3_proto":"ip4","src_ip":"209.102.209.13","dst_ip":"192.168.1.132","src_port":443,"dst_port":65112,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ps_vue.pcap"}
diff --git a/tests/result/nDPId_quic-23.pcap.txt b/tests/result/nDPId_quic-23.pcap.txt
new file mode 100644
index 000000000..0b20ffc0f
--- /dev/null
+++ b/tests/result/nDPId_quic-23.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0522{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1568282515655,"flow_last_seen":1568282515655,"flow_tot_l4_data_len":1288,"flow_min_l4_data_len":1288,"flow_max_l4_data_len":1288,"flow_avg_l4_data_len":1288,"midstream":0,"l3_proto":"ip6","src_ip":"2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7","dst_ip":"3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab","src_port":50339,"dst_port":443,"l4_proto":"udp"}
+2131{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":1342,"pkt":"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","pkt_caplen":1342,"pkt_type":34525,"pkt_ipoffset":14}
+0580{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1568282515655,"flow_last_seen":1568282515655,"flow_tot_l4_data_len":1288,"flow_min_l4_data_len":1288,"flow_max_l4_data_len":1288,"flow_avg_l4_data_len":1288,"midstream":0,"l3_proto":"ip6","src_ip":"2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7","dst_ip":"3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab","src_port":50339,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2127{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":1342,"pkt":"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","pkt_caplen":1342,"pkt_type":34525,"pkt_ipoffset":14}
+1695{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":1017,"pkt":"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","pkt_caplen":1017,"pkt_type":34525,"pkt_ipoffset":14}
+0525{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":159,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5AGkRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwBp0e\/G\/wAAFwhFc8YEuuNHtAjcZWkdxzWqcwBAF6fDAMMAJhGASeFDmt2B3PV5oRmlcgvC6v8AABcIRXPGBLrjR7QI3GVpHcc1qnNAF9ROAvn0lqrzo1vnuX+cMCbpFjsj7q4P","pkt_caplen":159,"pkt_type":34525,"pkt_ipoffset":14}
+0883{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":422,"pkt":"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","pkt_caplen":422,"pkt_type":34525,"pkt_ipoffset":14}
+0484{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":127,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5AEkRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwBJFkpiRXPGBLrjR7QsHYDHJzJtjcJg8JhvMi5imKA8\/toQUjiETm8cYBoF90tZQTyQt2ohQhsojF1xgJtntSat9vLdRw==","pkt_caplen":127,"pkt_type":34525,"pkt_ipoffset":14}
+0716{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":298,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAPQRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowD0rB113GVpHcc1qnNjKmwBeOAGN2OgejSVI4++yp6BDQZz6M03yokXbLK\/Yq8Y8+QSrTar9FI4Rc3kmVG6eUMw7GWc3mDhuXyo\/5ETBKO8Ycj1xTP9VKFNsVpv4HjC9+J9XL3C5NQ3wCEFhxLb+BTolHN0OL62VakGs1LJfAOo8HMWwjuPA3AxsSB8oVdbLRvVIqSNggkVnPbNb\/T4ed76NNux61Hxz5C8oVMw\/3WckVf8ODYSnk0clEfQrFIG0aqIX4DZcLUk5WkkvIOEb0yYiam3deQE0ylRS7XFEtqNPmLZ47UxF5nWOPDliiZcfg==","pkt_caplen":298,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":140,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAFYRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowBW6JVk3GVpHcc1qnPvtBf6ag+Lu09UXC1xV8Q58U\/2NXHIv3N5yh\/hmxWtwNPTNb56K6vuNNh1cZ6QWWd5RCEO0YZ1DcCJovH5enxZlxOwXGM=","pkt_caplen":140,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":137,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAFMRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowBTHm593GVpHcc1qnOy+J3ztjMWSTlSeFaOe3tbAqYXS9opEWbtLyrd0nurcrRzpEOnXpPFlvCo2crpAHKxbZst0RqPO\/2JYXMf+BcP57k=","pkt_caplen":137,"pkt_type":34525,"pkt_ipoffset":14}
+1756{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":1064,"pkt":"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","pkt_caplen":1064,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":94,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5ACgRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwAoM21ZRXPGBLrjR7QY9y3kJOd65lFC+l5AQlNOwEX50LtRBA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":94,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNACgRKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowAo\/c1+3GVpHcc1qnN0Ds42DxgBYQ82Msd7ZGoSqN66ENYUgQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0602{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":212,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAJ4RKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowCeTupg3GVpHcc1qnMC97qQLALpHRH9g5VkkV84+ZGr\/B23m4txM5qcs\/TUYt+7VjrD8sG3eTIYvK2yUPG0u3+m3aXmzQ8t1rb4GVFKW3GipGc+9f+cQIsrMoj1qdhUI54DW1qjhlWeXHFwz\/mNBQ8bkkA\/ugvgtTABvTfxcwa+XCMT3qmgbQsNKvFnYayUHn+tLvv7O+BCzWE=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":180,"pkt":"nLbQWTW8nJcmWLFfht1jg4MNAH4RKzvMmZH6urrhzSri\/bO+xasuSndNJv1\/m3hbLRtPimPHAbvEowB+Mb5s3GVpHcc1qnPVz8xc9o6RIS2AjHhtHQE2r1rHEdUzCcoOwGvvKVzABDAx0KvRZaIBIpxSb4lmHh3Al38WGs5GCTly3xPKPXS8D4CyH8Q4bP5dENC5CuAagi15\/TVcxc7eCqv5gMEP8L9V\/st9GkbNC7L5KHzN","pkt_caplen":180,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","pkt_oversize":false,"pkt_ts":1568282515,"pkt_len":94,"pkt":"nJcmWLFfnLbQWTW8ht1gDdl5ACgRQC5Kd00m\/X+beFstG0+KY8c7zJmR+rq64c0q4v2zvsWrxKMBuwAoDs1PRXPGBLrjR7TqLABTK+TsP5wNYWccDpmpF\/I4\/Gqybg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0522{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1568282515655,"flow_last_seen":1568282515762,"flow_tot_l4_data_len":6111,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1288,"flow_avg_l4_data_len":305,"midstream":0,"l3_proto":"ip6","src_ip":"2e4a:774d:26fd:7f9b:785b:2d1b:4f8a:63c7","dst_ip":"3bcc:9991:faba:bae1:cd2a:e2fd:b3be:c5ab","src_port":50339,"dst_port":443,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-23.pcap"}
diff --git a/tests/result/nDPId_quic-24.pcap.txt b/tests/result/nDPId_quic-24.pcap.txt
new file mode 100644
index 000000000..8730b09b9
--- /dev/null
+++ b/tests/result/nDPId_quic-24.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1574209133040,"flow_last_seen":1574209133040,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":41436,"dst_port":443,"l4_proto":"udp"}
+2060{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1574209133040,"flow_last_seen":1574209133040,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":41436,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0546{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":177,"pkt":"zivom94WClnTQ78JCABFAACjQSNAAEAR5RIKCQACCgkAAQG7odwAjxS18P8AABgR9cNSVpuO+PfYTEePbwr8vNYSuDzEUSnLqX7jSNZH88cG3IWnEimaskmn9Y1GfWhcqSCJTOvPGgt6q75e4Qn+zUFJSyFY0SIiHRpQLjIDBESVGuKc8OTad8PhKZ1BA74OASFH4nOmQVGBciF1MYu4zBXJkM1rI\/zCp6CTKJAyA9IF","pkt_caplen":177,"pkt_type":2048,"pkt_ipoffset":14}
+2064{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":168,"pkt":"zivom94WClnTQ78JCABFAACaQSRAAEAR5RoKCQACCgkAAQG7odwAhhSswv8AABgR9cNSVpuO+PfYTEePbwr8vNYS4JjP5xnPhXULMwsGez9pmn\/bAEBR7JWFbqBk4i5AJ7l7qSlE+tX2yrubmhFzRlx21yBiPVDLnRsXzX9MvNztVp29bxmR1P08S3NdkCTmJvy4iWq\/7WRG5bc9bbtXoIExxVobW\/gF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+2056{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":1294,"pkt":"ClnTQ78Jzivom94WCABFAAUA041AAEARTksKCQABCgkAAqHcAbsE7BkSzf8AABgS4JjP5xnPhXULMwsGez9pmn\/bEfXDUlabjvj32ExHj28K\/LzWQEoLequ+XuEJ\/s1BSUshWNEiIh0aUC4yAwRElRrinPDk2nfD4SmdQQO+DgEhR+JzpkFRgXIhdTGLuMwVyZDNayP8wqegkyiQMgPSBURsHHBv+mMkgMKbL1L8HaaigAV7t4eD5XPruskWTZTpFm1h9Cm3DzPxeQvTSEwHtDrEOpz6YFy82UDJYYLzV8itjsSuAl3BN2XPA7e06ZEWotlL9Br9TZWw4p83NDVQGkChBgIL6f1nIN2ojZvrHvpzk0MfCiu\/boqXdpIsBERYdwXRPlbEhxdUMcMYA7eh8N4TKuC9HmChlfkHaTI9GkWRyMAMzxtZMhCl3LoimMkhWCfqmVgDVhtz4Dif9R3RkIY9hzuUCMKU7oaOOUiDfZuxIU3WloNXp8o12YBXza0fzRQpYGqa7piZ7PVUXOGcUM\/cFuqscmeLVQOsoy4i4CGC+MSSW43OpT+j2aHawId4E4DeDRugsomOlKszLuMP4ykA2XzxEcbZMu330eInLeApkaX+snpful9w18f09BHmkH10HjWW+o+8oFuEG0J2hwlJ3TmZuH+IBwCzohntVbymn7aQKhoP0MV8t5fXtaD3vzu3igqOoz64Q+7\/Sx9TpI8jZHMY5bI6Kx+leY4ybxXsUaY9q0gvlZcgyTiYn8SSRvRZMXNcQW2xksYLy8WttjxWgRkmFmsQrwrmI+8rN1prhvjqtq9svG38UVICHD+O9YB6LgA6f2DnN5DLokrYt0c0SwvSqZm2zBXMqoCDF3Mvxf5duIyZR8amJWjBMoLkZN+I+jb+DRrnFUITzuCvlxJQBLZbBvmXcpD7KXKyeyqlEx5yPFydiu3Ptcszr+5KTMkbP82kPXV\/bjI4L9oBErJhJCans3wo72EkAcuKLd6CCThJXE7Eh\/LDUjZHt\/8eNb7S3jzPF8xwguDIHq5S3aAjhS3QICFDHNn54BjdvvO5iW7zqJCZLSz3CwZ1+MRXms7+nxM12o9227S7LvP9CKQt3pRuzfLorLdpjg9GKs8caLZS\/zPBPaxxYsAkVs\/TxyqkBKa+anVJ99dxXNbDJQmTbQiadhbUe5CTXS5up1QYApDHCBfC0uOVL5lGIcrbl3PMnI1Dz2NdmW84pfg6c+eP0VFTKo0ia+JMYIRzTujqTSk0FE2waqFp3fDr8Hyu8mFx9hmtHgkYMyRj0Bt4LlwBJ79sxjVaEgTqHIx9xF9TjPLkAQXWiLTUTtZO41N3FxjyHC7iUvDol\/CotNpvZxVVNzqh35++58kx3dGzWg7RNObbhbgYckZgts8lfGtJHdaWCmm68Pkjb25Blv1HmPokRC5N98vgYvduuuS7fDGGlvtjz\/JIS10RWkuAlJb\/TeU30L5OeUDpr4zmcBbCs18tprlmixC6jVnlsoejFSyGESEQ56JY+Y6YELlJh011Icv+\/BxJXul2kP65qokwiQy6MoaIpxYelTFp5PRef54cjqcJi3DU8ahYYjMd+pFAh\/vGQ66+sQubQDPeRB01N5+3eG5Zyh2ZkNxzZLSsfMGkHSVTT3SqZ+mT2IOgPbQy8Y2nObPD5adavrO8MXO+JeqH6a5Ct3KlMPOBt4e134vezowr\/x2Ai2BFLL0Buw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2066{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":298,"pkt":"zivom94WClnTQ78JCABFAAEcQSZAAEAR5JYKCQACCgkAAQG7odwBCBUu6f8AABgR9cNSVpuO+PfYTEePbwr8vNYS4JjP5xnPhXULMwsGez9pmn\/bQNTy6AzjD4+wGeZHkmyjJ21sOfVJHi9cE0fqtaLugQr6vrCOZSP41c8HlqGKNHxfKbZitK+HVtQ4s9fN5OHLq0jww3s9QUY5cIkLxVjQwCcGMJpx73hDUyuBlcnPmpSkkEY7nsbHkr9CZKXNywN6c+n+ILwzKxnhuIMxBnlNfXTSAjXlFpFjhJlpIssQpeAFZ1GUw3HtjRpjofuvB\/DBbFMvryhOKdzcrqvU7HWZ2r\/+mtKCw6z29gKwna79b29tiacY4lgIZ+ojwgYJPFEXG+lF0BPzpg==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":372,"pkt":"zivom94WClnTQ78JCABFAAFmQSdAAEAR5EsKCQACCgkAAQG7odwBUhV4XPXDUlabjvj32ExHj28K\/LzWQm\/gDm6bCpn4Yw3JnkhMrwDKMcNjFge0YVq\/o4JBEhP0+IioxxaZ+xPIgo9\/YhzDfQ1OgMs1E9ju4BMSe7Blx4vKvpUHBcv\/4ZdodwA8ICDlNpgZ8OcvlPb+usVHXNo3zb4sSuRardOiTUzd\/RKLcP5GBY9wD7AILuyTOj4jiPOx+qgH0WkQLioEnJS9Gc6\/jF4Nh04oTNV5DrJr\/olKqatia2Fya635KyiQFeUm13MYHRzuFVTPMs60Jl57yi4Nt53FeaOyUcAGIv0NPelX7SJn+KtA7W6PsCbW5wn9GcTDpPhz\/O\/o1yfvy7G+61QYWAU\/4\/LHHgfr0T1oIwIzJcVxD7uUFHeDg\/jnqG1V5+3ZgRhs32SL1sFqshpiQnuxlfJPUqthz38Nee19es1lnW8g0VPKXdTY","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+1028{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":530,"pkt":"ClnTQ78Jzivom94WCABFAAIE05JAAEARUUIKCQABCgkAAqHcAbsB8BYW5v8AABgS4JjP5xnPhXULMwsGez9pmn\/bEfXDUlabjvj32ExHj28K\/LzWQD0FyjxXFtRYwm7QmmxIp9hdhXeg9GR5oRHQwFYBMHiN1jseaJkG1QbSwO7cH0TTRB1CxbV28PC11S1z5dvjSuCYz+cZz4V1CzMLBns\/aZp\/278jjkiWNL\/SSVBvz+cyIXwEo364Y2w0nXcA6oTgSJioOeo5+zcFwF65MuSdmP+OXYRzZgSztedpDdNrzTgduG5PQEhOXO3ruq3BJagRjc0hNd6QkRYuOynDfBJ3m0fXmvzjgvq\/R5IDWJMin2pm46t11V8iYTsPLRj7AGwvsn8Rhc9PLAEqZJf\/Ju2KJDrLtwjw5umGEN4yHj+TC62Le\/9pOd0kDnZ1JNEPqoPvg8kKjIygv7DmrCPxPlrdh4lf6HQh3Ke6bIb\/jydoRrXIHl6Zc52bgBOoL9GyjAKi8zIf3D0PbxzicvBIoS0VhSSOAEAUGh43pGIaTgjAjZ8MI9C56kyZ5J0voytbS7kSDXZnTlM6xG5kzhf6xQYThIxC14ucRU5vT8uElL3lFBOEh+J9POXVpLvnK9Fdd5py6+rfVT\/2Cxl0dhZgCsbj4+2aPEzxc6BX9LO7\/yQG8DYbuzPXTdtNiPcgAma6fbY=","pkt_caplen":530,"pkt_type":2048,"pkt_ipoffset":14}
+1475{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":855,"pkt":"zivom94WClnTQ78JCABFAANJQSlAAEAR4mYKCQACCgkAAQG7odwDNRdb6f8AABgR9cNSVpuO+PfYTEePbwr8vNYS4JjP5xnPhXULMwsGez9pmn\/bQBZLI2HIvWnmMnhWnkmyJmobRsr6WnJBU\/XDUlabjvj32ExHj28K\/LzW1MQsXWxyC8mDJofBrzWdNwVtwX9ysSqM20g5HX1oOihVKIlfc9rUHhAhipuuZaT00Q6so1gRkxQwyzbkaZqoDhSOEAg3rbyIIue8aHnJdzk6GY7hVZMtTj+nqv9O433sk+4WLizhgSdRnF1UscrI2m87Ls6O3w4o+vVYHyQY+mrjD448uwJR76MWvpcJtKbZbHbHT6cHmbWRjv\/zT\/vbRtI\/PuIuhs0WDXB7FdAgUwJyYk\/2Y6NpTAu6Cu5tBXqjj\/eDNxzvKvlK2N7e8pnRpLJVZHduLndmvLVQTG+EldDkseBpj4ZASswDZDzmj1zSeRRbYXwPUPKmmuHSOBPZssM8bw30sTkSqVICoxzZRMn\/BsI856Nci2WY\/k3\/Vz6sh6YhqsaPs96TYaZpyTbCOrN0EcEinQ5j1an0G92ashmvus16XNAk5Ke5bPOyKXKPTdg54O0Dp7ORYyEDgmyzQZISMVHia5fzXcwiiGSIcWcGnhzsh6i7AhOln+xCvPsXwRs+pwyBK\/RBGamqEvLiEGii9Xp3o3K5uJhVJtLKAwr1gCEHoQuwA4DVUE\/Vu3+\/6P1r031f5eZtRJix16d\/nPGSuQXeSgFE4dtSDll\/5Y16yUNEGuWsIdfL+u7Uz2SENF0nLOEuJBm1wWIuK2otHkb+QG\/HBF9vbZb1HGk5S3WV5TLy\/P9ZZ4Vsfl6uB2EuNIgPaKnfe3o7r7oYo8ypBUuNwDyMgfjPEYjhARt7Ukt84zFDQFYc7YtEXrthljKt6Ky1tCI+OAfXUN2LQ5npYPOgvLCAOJz0XhBTitvGqoOLdKcly4b67fQZJIaGhavIuGVRT\/zmtxFOH8xarrI9\/HpuhbTFJIha+IlAcE5Ghn+ptK+Vt0hafnEMF4waN2rIEntK\/d\/zL\/Sntob7MgTX0Jcg2OG6sRvbUlCD5r1dJ7\/SvvFy6f9WMOWCxrA+UWNUMsQYH2InzU3f","pkt_caplen":855,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":94,"pkt":"ClnTQ78Jzivom94WCABFAABQ05NAAEARUvUKCQABCgkAAqHcAbsAPBRiSOCYz+cZz4V1CzMLBns\/aZp\/23EVjz0imCXx8OYnKXctvb8rLzZbAbFez4ju92jFoQcQxA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":81,"pkt":"zivom94WClnTQ78JCABFAABDQSpAAEAR5WsKCQACCgkAAQG7odwALxRVUPXDUlabjvj32ExHj28K\/LzWBC4PA+g7YiXkfiUbWdK7J3eG7xoN","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":84,"pkt":"ClnTQ78Jzivom94WCABFAABG05RAAEARUv4KCQABCgkAAqHcAbsAMhRYUOCYz+cZz4V1CzMLBns\/aZp\/2z7zc0vp3+LcUiaJlNWy50Jlz5CiYB1w","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209133,"pkt_len":83,"pkt":"zivom94WClnTQ78JCABFAABFQStAAEAR5WgKCQACCgkAAQG7odwAMRRXRvXDUlabjvj32ExHj28K\/LzW6q1Ilbkulx8QpPDfCg0ahlH9hGpsv1U=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","pkt_oversize":false,"pkt_ts":1574209163,"pkt_len":82,"pkt":"ClnTQ78Jzivom94WCABFAABE3IZAAEARSg4KCQABCgkAAqHcAbsAMBRWReCYz+cZz4V1CzMLBns\/aZp\/25sTROHCqKYw+n6Ol0QxqpRmDt2U2w==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap","flow_id":0,"flow_packet_id":15,"flow_first_seen":1574209133040,"flow_last_seen":1574209163081,"flow_tot_l4_data_len":7490,"flow_min_l4_data_len":47,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":499,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":41436,"dst_port":443,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-24.pcap"}
diff --git a/tests/result/nDPId_quic-27.pcap.txt b/tests/result/nDPId_quic-27.pcap.txt
new file mode 100644
index 000000000..134b09134
--- /dev/null
+++ b/tests/result/nDPId_quic-27.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0505{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388075915,"flow_last_seen":1592388075915,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp"}
+2204{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388075,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+0570{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388075915,"flow_last_seen":1592388075915,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {}}
+2201{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388075,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2197{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388075,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2191{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2199{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2089{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":1315,"pkt":"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","pkt_caplen":1315,"pkt_type":34525,"pkt_ipoffset":14}
+0480{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":124,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAAEYROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QBGCwVNVfJEQr8PYIPW8xVqQwL+A4\/9lcyL7CaCZo3XOpazU5oCKTa4lyLLJZqjonJIBUQP08iwa3FBaE7\/EprGGA==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0452{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":103,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkADERPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwAxDynv\/wAAGwh7p3UKjzv1VgBAGDPPs+isf\/pDP7lbKeS0aM7l7qFpToqIWQ==","pkt_caplen":103,"pkt_type":34525,"pkt_ipoffset":14}
+0452{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":103,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAADEROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAxhkDo\/wAAGwAIe6d1Co879VZAGPWVoSvwBI9j6QqjI2gqzievNYK3wy\/HDg==","pkt_caplen":103,"pkt_type":34525,"pkt_ipoffset":14}
+0589{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":204,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkAJYRPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwCWbcHi\/wAAGwh7p3UKjzv1VgBAOFZmIX\/r6LfgDKBdfVa\/S7KfYoYfpfolLKzOfDVzXDwy5xIal+1hy+C4sNMlwXCuAOsuNi+vVKFIQ3undQqPO\/VWCT1ZhUusQNVFwW2DAvvlQetTcH5KWOREf1TdLA93Xn3H\/SbuubMnbX0ymnObeAGA6fUx+Qst8wm1yFeM","pkt_caplen":204,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":87,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAACEROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAhxJtJ0vlePwp3\/Dr90t4sO0RgS2+\/37G\/clBZ","pkt_caplen":87,"pkt_type":34525,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":103,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkADERPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwAxntDj\/wAAGwh7p3UKjzv1VgBAGPtLGuYFc7WdcnTy8L\/E29xsFasMXlnl1A==","pkt_caplen":103,"pkt_type":34525,"pkt_ipoffset":14}
+0438{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":95,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkACkRPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwApFwNce6d1Co879VabwAwUTyXQnR3t5SGvwZQ4CIrfkFTg1nE=","pkt_caplen":95,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":88,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAACIROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAixvJT4nwLs2JbuGwUn2PwacyNosM6UeSAkNAE1w==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+2192{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","pkt_oversize":false,"pkt_ts":1592388084,"pkt_len":1388,"pkt":"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","pkt_caplen":1388,"pkt_type":34525,"pkt_ipoffset":14}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1592388075915,"flow_last_seen":1592388084373,"flow_tot_l4_data_len":11807,"flow_min_l4_data_len":33,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":590,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-27.pcap"}
diff --git a/tests/result/nDPId_quic-28.pcap.txt b/tests/result/nDPId_quic-28.pcap.txt
new file mode 100644
index 000000000..0d577b699
--- /dev/null
+++ b/tests/result/nDPId_quic-28.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591267474847,"flow_last_seen":1591267474847,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":1208,"flow_max_l4_data_len":1208,"flow_avg_l4_data_len":1208,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.2","dst_ip":"104.26.11.240","src_port":60106,"dst_port":443,"l4_proto":"udp"}
+1993{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":1242,"pkt":"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","pkt_caplen":1242,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1591267474847,"flow_last_seen":1591267474847,"flow_tot_l4_data_len":1208,"flow_min_l4_data_len":1208,"flow_max_l4_data_len":1208,"flow_avg_l4_data_len":1208,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.2","dst_ip":"104.26.11.240","src_port":60106,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Cloudflare","category":"Web"},"quic": {}}
+0429{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":89,"pkt":"bmImQfCg7jdRvai\/CABFAABL8YhAADkR0gRoGgvwCgkAAgG76soANzParQAAAAAUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwQgoOBp4aIL+MPCXOdR4KiF\/8AABs=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+1993{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":1242,"pkt":"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","pkt_caplen":1242,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":113,"pkt":"bmImQfCg7jdRvai\/CABFAABj8Y9AADkR0eVoGgvwCgkAAgG76soAT+eKyv8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TAAFv5HsDxxmd5VEpKl2hES\/adSPHMDBUM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0585{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":203,"pkt":"bmImQfCg7jdRvai\/CABFAAC98ZBAADkR0YpoGgvwCgkAAgG76soAqc9DwP8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TAAQG\/1pyxQuqr\/rtpFC2WVmtFOhv9JrpeHuopL7hMPE9fxl6sTSmvxfRAUwl+0yU2EdY5OnjwmP8hll9t175YCQMzKJKMegfWSiSk2V1nk0gFVDaY\/3+57WXWRq1p2wGvEOZh04iEYFueX23hrwDr59zo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+1990{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":1242,"pkt":"7jdRvai\/bmImQfCgCABFAATMbsVAAEARSUcKCQACaBoL8OrKAbsEuILeyP8AABsU0rPlqKVxohC0BrmDOppdYLs59TAUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwARH6e4RSR9Q\/LoYaYHcxSUvLWraCl7jq3kHYnQZtkjoDgJcFSWcllJnLkHnJiyBog603FKvFwI0ewZXwI7dFSeyYyQnD5k7pzrQCiY+DVZNY1DbsgnD9rK9LmzFNAzGpBHWvEgdREke0BJFtPS6hdWCAVXXuZ4Un\/Uy9AZqGfDpmPDJ4zTU33ySbFNsEMlSqEWODppeHee5zZqkfRtyaDN3C6pDrcXdvCISF7pWrLvGhGNOK4c+HMKu2vppjtLPOsdv2f253W0vjD\/TRt0M2IIKcHpWsVTPlb6ENyzpIMFQh5BUBUvZzaLd5vpDa79GqeYxR5IZriz7f3ExgcUNQSxRJH1qHWqAgDSRDWfBh5DPDncSYJw7nxBwfMRmFteWgShkC\/baj++cA0bjBjTS+vlVQadvdct+uK3JbP0QiXgrPGgYtJZ7s4xxLuX9uIMTjYvITi2bfAMqAaFdKE4LxhhdnBb5uT4h71bAX6zSaTpmqOcOdNgRrHZUzTsXY+DSGrs+vItwxP9X4Ekq5O7nBxftERsafzzUoZ4j3+4rcWBkqCD+s5RhoRjV+3bvScY6VeVRzu78s85qnjzHgOM7WXqP\/mkuGsXiaWDXruOov6tsqYY\/1u4SRciJUoSH2fjFlXB1mp51kzOFKJ1xovu3x4SMqweeRLCP7oZkmZjg9qi7TaaFS3oCE31Y7f7jCFUfb8rNpdwpOKEZrFCd7jFxzw0wnNUoWNZm4TE+iul656uWBnos+cOPL\/S6N\/bFdp5IEG+xYvdP3MPoumcCRPC40Odwfg9OcS\/SC0iHIZkFK7dmp+zuOuVO9NonPQfM7qbBMXwXlrfBR0gFrKZ+A4QWHaHId9cSGfq2D3LCwkoI9s+K\/ktGGqSFROhP7rYDkiPi9n5Mu+FhXxSkPUuqNIOe\/lbN3aF\/lFGMASz\/0iy0xlUTUqQuk0U7hFNq5QIS1K\/UJUqeCdkUbPLKxOU7onSmA3tYqc1UPOuBnYG+tICUIhSQZQmJ725qNuvGwEcpDyvhrD6pEohLloRZYdIjl5BGcX6HObj\/RIowXuzcphHFgPv0xrrTsXvTa1xb6VNGPfmdNxyTjabMA355qHas8Xjd2jFn3l\/\/5wkmWpbgaVZBN3TJ4q3+DdQ9+zCVYvRKsU2YNEoa\/JZo8L7kf51+N6ZLOk5TEbowkdyiEVOt3ARTiyjPoZeZVbLebvt+HONWcmTdAwEZLtORfE8tTUwHt3DatsuzEZZ6fWGPc0tC0DELp4brR1rb5Isi57dsYlYVRWGvGcCD9UmGR32nJHgcuAnoo6mKCYWgs7ktG3Bt6RSeyQt\/Fpi4xUg4fbfacrWmc\/gu1VY6dyXVxarzDNHwfEyusGSVSe5JdCmdiOssCenGQF907O4TSNhxMqLb5Oz2g3OMMCk5e1imqfB7vEeHV5HLR9fRDypLFolJDywoq55C+pkQRLIE\/qHMySMcBeYSqsp8Bkg+A59Gc8qDoZ6nWMWm4TwnaNzxmWjskN6OzmB08boB\/XY2jV4hTMIEbSJuQJbE7H","pkt_caplen":1242,"pkt_type":2048,"pkt_ipoffset":14}
+1991{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":1238,"pkt":"bmImQfCg7jdRvai\/CABFAATI8ZFAADkRzX5oGgvwCgkAAgG76soEtLvl7f8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TBEe9Fdn64ewHb1rS12ll27MD4zfyiNoro\/bVtPmXAYDCF3ExgU7yekna5aQJZJ6D7weJN5PKE0V+F\/IUSgipMepr7jFhVtFU6GInfobFv1oeNtHAeyuiit3NLJibRW6BAL0aSOlVGbplarYKe\/KfjJ6BPKe65ygJBAbCRsedsKcwzdJoIpp92qLnX1TGcAYYfmYJbOIwy5UM8ke3ByXbogbDFyDD5LbjXD1IlsOT+vOm5vpbALPXM2L8x2wp90U8w0XvGTP+nHdVoYu+4uWxpxFHNS+nKQyThNfcMCMruNyAdjYLp5Bi3eDA2\/ylDj+tBgnc+KMmUmFZ6Ze1we0C7v\/9Tc5d5n\/6PlI3u2XU5nlG66uB1LoWUEon1g9QuZEcJ604AyZ11BQiyUl2FV210LG3A57lNddKffp3vr1linj5yra8+E\/Bh9zy4TdYEDNiYM6\/4brWRbK284PlMpu3v2bt9aa7XaZqwe2fC8tje5cHx7S23eQxXPtJFNHa0tLWzexY0ac8HEFl2g+jCTU2AFRW0emfvO\/\/VMDVg4t4kvparykeiXxBKm\/RGJ4uUVqwdc16mH7mXuMMGKaOgHOyJdzbujdCxp9iEXj+dt9JdCILW0zbK+WaBRCoJDuN8kRIwGpFKXeKhU8HUlqEb7j2HNQC0g6B57NIbHapMBdetm4Dl8YxyzIYR97c8vUmhnyzAvI+5bPbplA2AvTCJzM44gIfMw4VEvmgQ1xR2+qCwz25b5w4htasAN1OPecRHtf0b25rjygkKIugeXFJfJLgyTU1AELbk3ITFJJ0GySECfMi\/WNHbZNe717GO55GCq3z3R\/BHKmlxZri0M+rU1Sfqfbe+CsjmbEDh7Xk5dC2cYvBqUkYFS1MOcaRK3HP5tyrj8A1xLXOe9jTHcDdalO7OByCUo7IN1UJ9ekDxac5ks9r7rQzN9dKFkay4e\/\/n4hgUen49T6yVkojWsNMN2qT9dZQtu4lNSV1TlYbTCHt0esoJ7nmOlabyNkftOwy+fn2pck93dl2be69jsuAt1k1t01CiXftEg6j3MI8WLvA4DcWsa0\/xUGgglbh7cBU5KpNx\/XwZMFPO07dH\/vApQh0AMK1qhqmUAyqT+X+uPViOEHnFQ2k+p\/c3\/UnYurSl3ZjkaX2zGx5u4qZKwuLXUdauRPK\/l0lLaLWTeisjphaAD7B1hYFNck9VWYu9EgapJnSHe6bDUA2V97fBVq8g+qMvVOGu8t0TOUE\/Eu4ZVuXEorHJhMfOHvY9oI5hINvKMjqzQThVSvCvVBfLQsyq7dPL9PBp3Sfuh3DnWNDJBxrsBsps6ddLkT4ONxIH1ujFcaIoRjSQq3CK4uaFL881D3ggVpe4isDkMH\/tokQ\/QrRieKwCe09tz\/ldwPM9UAIBu\/y7LLxPR6+dh2YAQFCKKUx5RXhu+2uHcweZrsMdZ4W5+mt6cTVMUc\/kg42Tcyxl2oK4OUsQVDZetNfon7kcGg6lxOkDUyMCbpshtFrFjHVurexEOV4LzHlHzAhZk5mo=","pkt_caplen":1238,"pkt_type":2048,"pkt_ipoffset":14}
+1988{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":1239,"pkt":"bmImQfCg7jdRvai\/CABFAATJ8ZJAADkRzXxoGgvwCgkAAgG76soEtcwS7P8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TBEfCGFOBBL3Mcx3rWJIBPxGap1H1QuPpueqarvI1YPB88JaNnkt1YTy1xMdFZHet0mkGxBTTNDEpvzdyXC2gCGcBTNgf6JLLLKN0OX2WW\/AX8dQbC3cW89SJmmzxKb3lWHHgCdV4RfzYLAcjvn2IBK40lZoYMncF4LtGMuEKkYjjT6K9RvINkXymQn9p4d88idpv1SufjSaGTpDGfcLvVTMOjMObNwwq4sKw8\/o\/JDZQjdV3Kmsj\/QlXdHc19L76N1D5x3LrduULMF2ADDp1G3M05YcFjTury383aLiCmGG3v+OtAOtGUDSeOf3nPLlDvINFWrTl9R\/RWlur8TtfSsZSCiQS8\/+lxWPkgN9VutLeUyNrKoM\/GqtzQz6vnZKW5uMqsEz+4fIIznzTCjHyVcYuBmc\/mkKc7n3iA7IKRcP\/YZcWaIO12Jy5WqUvbCMIHdcyWF63aeUmOjoquUAIThQD2Gceyx2b8GqbDbZ79ejoQVzIbnUq8ciKOxCeZ+YRt+NIfO\/OfJwypwhmDRDvpGFs9\/Z4TdMLFIA5NuZ5V2kyZTP0U7NFM3qVczkLyy9IcKur8qoA1mPfkz8IU2hmdK5CTMXcWW3BraFRj6Y+msPyqHdrcF4t+7xE44q2Xv7Ism1r4Si5ZmytCwZWWlGnK4crqXJ2kHFdzrV48HMskxnXAAlSAE8F0fv0+3GAxOhSawBnq0j3qZqbcyWUEdfod15rnTNB\/aqIocYWiwCWqok5liamBReOs2viFIbOPQXlQ+cwyiZse1WBcp\/JLWynT7llA4XA4yzvHmS2joh4vOLw9WdIylJz+div033weMojpw6tnsCklOfcQsZm\/eF44zZkDSigvPyO2xh5x0rA12K9crO9V02z28Rjygorxpqn7E3F\/xLK8wpMpv9GNd7e7vva55KEcYzH\/ewlBG+Ks16McPrXrjdWgBqffGRWIX\/ytx7s8CNxqn+GSbjyhe5Wm4GyyDpE+\/eWFqdsBSq+FrgPeHMbrwIc47DmLo0YId8XoJHGn7fRqzy4+7Tk49kqUcKL8IoXokXYGG6sV+xGRm\/pkHu4hdaKIqxdkrCXEkDdn\/ItVLqoWRExMKPu5cLPOU8gJm\/4n3+EScFzardZB2pCax6eOSA9gXn1tSugUfFoUkHTyo+AXeAgiPEh2kQ0WWPsdCXugGpXbho1Jdscd8kTVVsS5jubbaM9VXBWUhchZeT0YXW5GhC0G9LzNaPUSqjseV+LnIEN+fdo9g+aVTJkE\/qYtomuK7l6OR9Uv+P29VhqQDhn\/mVwUtCxo4gNLWJXOlBpnTRnRimpgSgVmioQJBmZTrvxTtFcrpBjBTcJhT6MTmvW27vKIVs0C1f3800Q02+05ZI+qYOOLmzawyZIgn5Y5J0gy1fs9FwhqyknaKurWMXO82cUqUFJiGoHOQpLzOHGhPh5VJqFBLIx8ilThKKxmRGCRgayFmLomYg8RTqYgCBbFkivQ48QJ1uc5Vbrz34UR9twRQ1ocdREwtCv1n\/8tHj+hv631NM0bk","pkt_caplen":1239,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":259,"pkt":"bmImQfCg7jdRvai\/CABFAAD18ZNAADkR0U9oGgvwCgkAAgG76soA4XB\/7v8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TBAqKus6kSO1e9+v\/ngqsrs1Y3Lu6blGqR\/LpCkIs7NY8rTB0HdLIfoGeoApOUcXxdnA2FhJVsM6m\/lHJK\/nWtY1Ezwiz0L9eSNgNKUPuWiW4x3CJWt88ibvcE+k7jrQgWkbR8u8ymUldP4X7tdqBJBZR4EtiGbPp5AwnyVvtiXa977vgPaCt5S1gGgz9lFzF7m\/8xQuUJzewKXF9KbFk25sCNa3ZTe8GAeKQ==","pkt_caplen":259,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":152,"pkt":"7jdRvai\/bmImQfCgCABFAACKbsZAAEARTYgKCQACaBoL8OrKAbsAdn6c4P8AABsU0rPlqKVxohC0BrmDOppdYLs59TAUQMS6Zy9FF9Xn7IIP1UsQeHX9qMw+nuak4oHGZEYELPSVCCQOnlSoXU7rLOB619i\/8K4+AVJ9zCr00UuGIfVsJcNsbAPpK3mrbRe0hvkciC5hEjo=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":103,"pkt":"7jdRvai\/bmImQfCgCABFAABZbsdAAEARTbgKCQACaBoL8OrKAbsARX5rVtKz5ailcaIQtAa5gzqaXWC7OfUwN4sKivUlyo5rErLjt5A\/T9p6qhyfht67\/HkYut6PPkJ9SQ+OEnrMzw==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":85,"pkt":"7jdRvai\/bmImQfCgCABFAABHbshAAEARTckKCQACaBoL8OrKAbsAM35ZX9Kz5ailcaIQtAa5gzqaXWC7OfUwGIZ9P8u1Kzb6RcLD891Twr2gdTwouA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":85,"pkt":"7jdRvai\/bmImQfCgCABFAABHbslAAEARTcgKCQACaBoL8OrKAbsAM35ZW9Kz5ailcaIQtAa5gzqaXWC7OfUwXJ6VLRyKaTyz6VcnmNQFy8EoKn8anQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":168,"pkt":"7jdRvai\/bmImQfCgCABFAACabspAAEARTXQKCQACaBoL8OrKAbsAhn6sVdKz5ailcaIQtAa5gzqaXWC7OfUwfNrDJ9FUz7BbKMSk23g0f9C997D0tLAXYe+EfonSiyzkaksBoT3HwiNCgBof9\/w8PmqbAoJLS8yu42Ztsv5uMepcczJWBDOO+j9p9c5c2hfgENNoN6RdSpUcfcK291dLJxXOj1kWkm7z","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","pkt_oversize":false,"pkt_ts":1591267474,"pkt_len":112,"pkt":"bmImQfCg7jdRvai\/CABFAABi8ZpAADkR0dtoGgvwCgkAAgG76soATqcp7\/8AABsUQMS6Zy9FF9Xn7IIP1UsQeHX9qMwU0rPlqKVxohC0BrmDOppdYLs59TAWLgmItzxBSvZiKyQnISBjChlAVjqW7Q==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap","flow_id":0,"flow_packet_id":253,"flow_first_seen":1591267474847,"flow_last_seen":1591267477602,"flow_tot_l4_data_len":238191,"flow_min_l4_data_len":50,"flow_max_l4_data_len":1208,"flow_avg_l4_data_len":941,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.2","dst_ip":"104.26.11.240","src_port":60106,"dst_port":443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-28.pcap"}
diff --git a/tests/result/nDPId_quic-29.pcap.txt b/tests/result/nDPId_quic-29.pcap.txt
new file mode 100644
index 000000000..276961d07
--- /dev/null
+++ b/tests/result/nDPId_quic-29.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592171671664,"flow_last_seen":1592171671664,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":36588,"dst_port":443,"l4_proto":"udp"}
+2060{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":1294,"pkt":"bmImQfCg7jdRvai\/CABFAAUA8Z1AAEARMDsKCQABCgkAAo7sAbsE7BkSwv8AAB0S824HvwtwiO8oxx1Iisqv85\/8EUOUTtoYvrflSLONN1vzwqO8AES3Q7WQp5eFbP47Q12xYKXOiuR8OKc8Zd+z5\/wDTiaB2gylmmpfXoWWnW9m4cfo29uCTrqUeoQcDlNjFKjOZThrp+QrfaDvzF+TP2mbdVAn5DVFyc3TGw9yc6eNagzixiAUYroBLFYv1DYB54ctmkUUCF38C+LrP5XSP2Zcs3QEOQDdiNvhWKUx+vneyJD2Ddv1Of313oIRItyeXVn2LxKac2RjP4PRAhodOpWDrnkB66u8HOFxUv4Q9HU8anll\/ZatcRtN\/kzzFFzf5YoYXwbtiynEhfyRDYp9NIa5aU5ngHDoeAIY8EqAjkZzDBZrpJEN70XKdgxbZ09x248vkii\/BYPsm8gwjS+Z+NMDUp5BndSqJan6LYduiBKS1FQ2ECMHPifIAeRkFfGsYIjcHELHJvd3bjIuQ5jcLDQ11GM29Aqw0CMdlCZ0GZUFJPoOBYtbWkB+AArzMv7l1fpdC85LE6kYaNSupy\/kxn4q0Fd9nlOil4czF7np40hmUQT5zuUOIMe57G4ak0l7jLPPFgnjPcuJ5+bhZHgxqEou6YPiVeaRUocITEWkE47FVdJ4XctN7CMWrbtrVTRyiKoG5jKjipRDy+FAnWpWY5dsQU4VKty4nhdiXpcyaazCMiTBlzAZlJ+9vVzyUo2gVZTdT1AmyQCJjmCzYg+wq4NqxE5hDx4BVlFY7VlIfT+LOXZeM++nsIOJaY7JaSW2i+1ji7jGvwvZ+l6xB5JTnisqnUTdF8GRkRAiTg25HBspHwtWrq\/Po4lqvzDZYM3JiaCh5C8UbvK9JJyDT8vEGu5LZu4vyW+zCsCEy6HtYm+Tl+y0wBH9TYuhybK9k4L\/MkebKAkQQeZPvBNwHsBWnmGK44Fke47qlm10TFPJJuYjv3s2WkxpofqtAF0qtGkvoZjB6BMweDMLBzljRd+MpcpgKx6R7LMPjs6dfEoyR\/++4fMZPmZ5nKh9L2NomKnJgnI\/Q7cjkj8+4G7DpTq\/5CiPCn768EbsWDr31eOflbsg2q5K0cAqBbvuSWrrcKEWWT9pbchcsh+CF4s8+eUg6FJomv69IBBZDRAHTYWn3VGlccxntEoW7HpxMfIbSnMt1P6bfNeHK9ADAu1LaTZlKkjjmK+gbjyes7l1CGt0SYwE5uDE0ieZjOn+NT2n96TJjl6343hGsZGGMospEVXz6DJx68jscskAGRLftunAK4Wcrbm0MVyZUbf68HXckrAHSl5ZN\/gbwXjHwC\/6kW\/aiMNhQdY8NhboJQcKwTMbOAeVwKF1KGzLGKNIqA8cRIBh1T1WLCqei3k8gd\/C7bxKNgXzYeJGw\/scGAKCWrce0B8GF8XORgu1hVv6Mwd\/suBo\/oG9g9Uq0JP+2Gj4EQHkZYzIbeC00Rkd0VLJzec5p8sOl7k1oJ2JxQnDqWq6c8EgrVrSv8x08C46hCl\/izdOK7GvwGEQaUkOOkL0AriEREHoeCFJRFtP85AqwidJch8tbK+7ugQPN0bUklhiKNfnQ3Ch72i6f0K8Dx8w3Oub6KBk7WsmEtFBIijRDgwb5rVjtiIuJyF+6hegy2WW6xf3iWQ7NMMjWxMe231j5YtMgDPBTVbFARaKzxZnq\/YZAw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592171671664,"flow_last_seen":1592171671664,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":36588,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0525{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":159,"pkt":"7jdRvai\/bmImQfCgCABFAACRmvtAAEARi0wKCQACCgkAAQG7juwAfRSj8P8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSLpoy7UXJBmrU+awywdI8GeSAtpBzddspmsO4wBFhAc+lOZRs3AvW96rBMIqSb8d5pE1izlVnQvJ\/MknH+txz1mHxROZRbUIezbGG599\/tfDcAoDEnt9M4O+IUzLE","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+2065{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":168,"pkt":"7jdRvai\/bmImQfCgCABFAACamvxAAEARi0IKCQACCgkAAQG7juwAhhSsyf8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/AEBRPcuzOLEauCutm8Cg9Aw7MEJCqo0x9rzS4t7RXw9ZHJwjm4cjcaToOiMOaFfu+VVWYB5tVycdZGiAgFBsUfDxzpzoGAp5IeyX8RBhrIPQ+UnY","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+2069{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2069{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":1294,"pkt":"7jdRvai\/bmImQfCgCABFAAUAmv8AAEARxtkKCQACCgkAAQG7juwE7BkSyv8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/AEB05E7zam4KrOCCpL6PIIfgRdUbzpyVHBn4x79IqupqtuH42fvHd593lMAaeSV3f3ntkUM4uh0HoAgIkqZdvpMxFwlhXIafsdYpnXRA3MoA9SAW8uxZlEmC1oHsZmhvziyqz2Qg3vhhNWTnIMfiJoCZ2nihjOvn\/wAAHRFDlE7aGL635UizjTdb88KjvBK46ESlnbobVqnBNiZvzIK9qX9EF7YoczHgHXel6sKdMl+FW54qW9n4rsITMUv6fDNhpUwdkM272wWBpPMyj0qE5sC46NDsByFP0ogY15tIqCo5PQPoVgx4vL71QsLVr7g+oQnBRC1lgd2H7bpj4rGbKK6JYR6I7yqQc\/9nFmnqN6eGmJxBSRRU2ZScCNgc7W7v\/VPqF+M1Ixwh09AKgjibJqnc\/0qTwuOWoWmDPj7q2OIKWuiba6ibyfM0l2adRHKu9bpj92jUA4nZX\/snvw4E+uN+rsQsBhItdOR7aSvDCuq2ONeqqr91N9yfv7g+kWz4zbUnueT6YkWZIH\/q8F4OsVxcqSoL51hKYg4+JSXvlt5sIWufE\/v5\/F2CS0CxeUDemo2BDtjY3dR1JfMqnP0h94jD5J13hvRMqEw\/aXjqOkoiAYUT5kQzjMQhcAE7ceu24cbnogUeE005WQf8549jmJlazZcYA\/utGrLiQrB5HWyVg1DrCQ8FskSZ\/IIpxJbCpmP5\/DdUvQE574G1gxzgIOONjt6eIdjvRkFOG+cfgPbp7DAmE4f6eh8lrX6KkP2XsmFGySTTVuV+Lm+gucNeAnzd7st9jivsT4cJql3SEoM5125X4\/M2jZW8SCntg3CEF+CZP9iS5jB\/QaCZRoJsK\/Hyr5jDmn\/QAoDSMQMjvsB+qy\/KtvPgQIS82ZWSsLfTQcikY+p40W6kMQDNaF+Yh6uiLkw1Sx6I92Z5VDB65GER8s4Slx5VQlGG2y1AhnOpxVVH2mROhpLUZ7MdrAU0hyMsCNvwBEenVBOVQnH2+MJJQ2WP+\/eEY+ihtYhYAV7sVwinsau6HpChEBRsiApwudR+JWl\/My8A8wA48dwyw5WRRtjLe2ajg+o+cdehHNnmJwXHADfGVQOKjhi54NauDAvXZKMHwPL0IV5deVNh1tMxptLwP5aeulbeYwkc+4suD\/qqaVCtec6b\/VvTAF0Jcv8Y34aUQXHQbJiWWfs9WgpiD1XR4LkM06g9H+X8Q2ED3aC83qEDo6VcV46oDRxCpg6aGk+xaBXiCCgSlxoQk0S1\/cGWTmFdE8d9xQCTCCItR+4T+K\/iRh78JnuPW75GQU3ZAr2jU3VaaSk\/ezlJuDlTDH2zHd7I0I+EW\/M4Uwy0bl3qOEAJinV79XWSP9yHIjQ8JlYlO7An1pZvMM2gIDX2xIk\/2R1BN3J+b14xxbUtVIqcBcslQgsnB6EN9oqSINrB13oYpbrvWL5pDxWHuSydJTW6DqFMTqVr0hs8ZRPOD1nMKjMJBxPxbfiFP7177JENEWmmWvJkQ5B9s2hdVGHB1Xn6cSqOFUZUd1z3H66BJWVEX0lxHnx2vqzVaDoUAGKMR0vF1mRkwTng\/Qqh0bzA6ciHGHGgOzPjy6P+ZSUNl3DA2iLeRd6oHw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":380,"pkt":"7jdRvai\/bmImQfCgCABFAAFumwAAAEARymoKCQACCgkAAQG7juwBWhWA5v8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/QOZ+wK\/hFsbZvgiJNSS82e0rZThjnAKyCMj+l00mW2dwcbuXpdGzPuwTe4Btet\/vGKL60Ad6Oxoq3SZQ05MwGTYiLAcTqjzseiSF+CnfaJ20gZL9yMOe1svxUxT9QkAbGhmBg6Hm7+AwZIE52hL9hbFsJ+XMht61iVUHCzR8N4qEFGkDhU8ZzUrZC5dk02wbGqA9u1GXprvYk+IAVn7I+lWttZBzAnQ+SwrC\/S+wLz2j2BbJFkC\/Yp6U1a++\/lLxOLNXUvTMDRBRuUyGRJJ1dboV9qXxj6YSTBbbhslJBALpMjtwkKKVv1hDlE7aGL635UizjTdb88KjvNnmiJazbAgAvFZWVscNZdL\/g60ABZMZfjPu8X0YzUuaCxRajL8e3kttGIkdQNQ=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+2068{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":1294,"pkt":"7jdRvai\/bmImQfCgCABFAAUAmwAAAEARxtgKCQACCgkAAQG7juwE7BkSw\/8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/AEBvekMzWFipN2LQfSGuD32T0xoPCfUYHrpe6d+BxHgZUqtOCa0gVPnnNArSRv21TG5NTo4jlHb67RUdlHZioeCGQ3aQmmv1T0GY7ss59n4UV4rntk6L8k3aIKLGrP6sUcqK6v3VKpO0eImLTwPXSAjm7\/8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/RBwHroGUAHSnL6Z6\/TvwTVshJdfxfbfJ+MiNb5M42ugHmqyYhSXF2uvfRI9k2Ysjxi1IfEcM534BaxTwwOBVRjqeHw0eVCuQ9QD4d5d4yDJVPKwquvZ7j6HRHyPRk5c6lvVnf+TjA2XGREbBUe1d13PTC6v4TY1ZgjZMDSjrcRruRt5AKnEt3kS2HJCvrS82dzblgV6bOhLcdbAaMs\/\/0aubQiT6LCSP+M4puMeywLv\/gt+gU17au1c8H3gwfkhBNIcAu\/ChyqAZ5lZr0WJmikzrR4nKtLYna4kLiSvczSO1lG5Cg+576tOfPDTgHSTB8tryZQfU41CzoOZAGMdsYIHYfS9ckd4JTTSxZCelh7ZL86hI157Zibg4Bekgc\/PMkPMJy3A8PKYvxRtdglVCSg+eIwvevATbfZ1qZnF6HIxu+wWYGbaK1HZj9wH+C7xw2vob0ufVYUKDutIpzqq\/EtJfllEkYiFCf8uQtm0IASO9Z1PTunWRBoe37Ss+YT0FFljmsN\/7DIPXhKBn\/V\/vOLBo20vH4XUA+EIi5s04HuTwCORn0cAc5oyoYO2NtTOE+bYnIceZxSsB0wRcu8lnt89+sZ\/dzRYefO0S7Vu2U7UJXATmFtYyJ1ueGv3iDw9naQyJ83Zp+9ruEvUTrCf5eZcF8VcOYhYS3lcL\/cJh9wRBN9nz1i\/+gv0uVGedL8l2HPFZuZddyCLY9daKhw3xLaHqvle4EGtLJELw+slCZ53OkdTIXDObGrknocAhFHuXmFvPDXq26AxqD9oLVcxhugFodU0n2k3EQrWj6lultTQXJvzQ5EhR1EBrZZ2v4udZSCk6l4WMJfcCFBwuV+rj\/0W86Qx6bD2BSuhMTrPmcBjRoMlgD4z+rFQmRGvNhHpAqi63SrvMGvUNFD1sb1r0br9XAWmmxB7K4WDhufF6BAnlc46oIc\/JXOrADrS9ojnaCUZPnGY8SwYj\/ZYRxf7b8HPZAAyShKPaZV3N4JV+0ej\/PmPNidsCuok6BuFwWspG+zeY0ME0wIqqYwodhDGYyJSK4Sb9vf0iWX6wIXl3gE5E\/+akqBeMK3ojsF9SSN5moh1iV6Nt6\/PMAfjHsGxpKhEF6PGH7tpLlAV7bC6ovV6bH8vBQP5QBcdLpH+MSCjtIMicvBjKDocObyxHi4aBl3JX0pAetBGPXIWTR2+lsvFskK466+cWVOsSeCJEB3TQbGr82QzPuvF3PecondqOSkXwmxi+bhaUqjnvlqoQFa\/ZPu8TzgFgseg7d1UDx4yZizLSsP3IxGLJliRPV9HqZ84z3gW0sxmxsWq37km1KNb9JewpSPJWJSZWABxslE\/kyLoEvdZz+OagDOXI\/J9HhvFpkcVxDwwC2JPDxtVVeKzoecw8IkzbsxpNcgelXg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0735{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":311,"pkt":"7jdRvai\/bmImQfCgCABFAAEpmwEAAEARyq4KCQACCgkAAQG7juwBFRU74P8AAB0RQ5RO2hi+t+VIs403W\/PCo7wSuOhEpZ26G1apwTYmb8yCval\/QOHmUXSXopzYbIjqUSAxnni3V5i+DUVIAGsX3IxxwtsEKNBknFp1419CVpzYg6M5MiPtWSGTHKoSX5IpxX4VMZKR\/0VRKxnEMLqLZ9jJWGvvvOSoQxj8AR9kVblIzw2GtPlm73EBhWZIS7ND8Gf\/brjHOyBuGrJbN6inoyxRkYFHBXDrRrAGbj\/t8\/5lKWahAJ5i7YjhXawLtrtyDnqZRvYefXpD\/bT+\/Rz7nsceEAIhlkkbO1qmLfCm2C\/G0+eIfXl2lR5qbFUiFauUbBRrwmbYZjIFVrZZmbt1dqT+6AevI70=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0987{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":494,"pkt":"bmImQfCg7jdRvai\/CABFAAHg8aNAAEARM1UKCQABCgkAAo7sAbsBzBXy5\/8AAB0SuOhEpZ26G1apwTYmb8yCval\/EUOUTtoYvrflSLONN1vzwqO8QD2THbL\/8hXZVLfurLBAwE+F3hEACfHqfHOuHMQwKJ8nNfRrx0J6fZD\/tlKhNpLL0uj03uVDjNhOofM81d0EXbjoRKWduhtWqcE2Jm\/Mgr2pf\/hmao3i2v0eAIFEfbrBdVT9vISU8dVPX2eGpY5oMN6jvvk9AXuBnuo\/W\/4EMf4RWllLPotAXL634f3fUJpeNuKta9dYLb6q0W0YxhALeyPymnloS4f5MtYCDdrua+ex\/1ezQy5vPRiOUpeU2C1qGwwV37ryfxK\/ELwEz7TQ+i44FtJ\/AgDYUnHctZTsi+ffyUSTt9FZ\/f6j1m3LavfI4PBTom9Q8IUodauWFuNI0iTLr7cF5jzZcQiJuIpgH0l8fWL9scjCx27NQI5MYBPezX0Wef+XYB80fctZ\/MR2ziRe97ywhVvvI0APVyH1BDlJSeFeJTSBy\/J2xWGwwp\/odr5oGgQuOyj2sw610tR5zixFwaoauCj9ytuA6O5JQsdlnp1lsOxzWg4eD9YUGBbPbzdqVcJvh6zorVaDhv4oMWTn7Tcpr5KkC98=","pkt_caplen":494,"pkt_type":2048,"pkt_ipoffset":14}
+1747{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":1062,"pkt":"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","pkt_caplen":1062,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":95,"pkt":"bmImQfCg7jdRvai\/CABFAABR8aRAAEARNOMKCQABCgkAAo7sAbsAPRRjTbjoRKWduhtWqcE2Jm\/Mgr2pf3emTwexFPPk9CYvW4Chgu7gh0s7cwICmO9U1Mk13NwCLaI=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":81,"pkt":"7jdRvai\/bmImQfCgCABFAABDmwNAAEARi5IKCQACCgkAAQG7juwALxRVW0OUTtoYvrflSLONN1vzwqO8qoI0h6uPmj71ohDazgvrBpeEXxty","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":82,"pkt":"7jdRvai\/bmImQfCgCABFAABEmwRAAEARi5AKCQACCgkAAQG7juwAMBRWXUOUTtoYvrflSLONN1vzwqO8Bw2tbG272BFwPsChAYR5CNKZBI\/ZEg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","pkt_oversize":false,"pkt_ts":1592171671,"pkt_len":84,"pkt":"bmImQfCg7jdRvai\/CABFAABG8aVAAEARNO0KCQABCgkAAo7sAbsAMhRYRLjoRKWduhtWqcE2Jm\/Mgr2pfyylxXskvsjmut\/j6WYYiwt6b+RVGzFH","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap","flow_id":0,"flow_packet_id":15,"flow_first_seen":1592171671664,"flow_last_seen":1592171671699,"flow_tot_l4_data_len":8876,"flow_min_l4_data_len":47,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":591,"midstream":0,"l3_proto":"ip4","src_ip":"10.9.0.1","dst_ip":"10.9.0.2","src_port":36588,"dst_port":443,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-29.pcap"}
diff --git a/tests/result/nDPId_quic-mvfst-22.pcap.txt b/tests/result/nDPId_quic-mvfst-22.pcap.txt
new file mode 100644
index 000000000..17727ec06
--- /dev/null
+++ b/tests/result/nDPId_quic-mvfst-22.pcap.txt
@@ -0,0 +1,20 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":24710,"flow_last_seen":24710,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"31.13.86.8","src_port":35601,"dst_port":443,"l4_proto":"udp"}
+2024{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":1274,"pkt":"UlQAEjUCCAAnANMtCABFAATsAABAAEARtN0KAAIPHw1WCIsRAbsE2LapyfrOsAEIVt4FS0mAWdwAAES+glHsK6O\/Oq7IqxunKa1n3XFv8eVEdrO\/buZ2LMAVEB2NyWCg6hfO6EP+vLVLmftkS1PJQqVl7L+7l7BI482Kpj4ofT9JnOQ0xEE4Vys3R4pwXiPc1lMJx32RX9zKYm+Z1fbMOyayi7zU0q+i63OayYrYD3jSt+Vvv7BMyIgMJ2yBRML4Cvl27dkQOy02PKy9hJb4U9IakyZ9jxJvJUG6tfB\/LJZUaX2z8xaFt+J6lEY3AOj1WgBxHOY78xSQcl0cfAaJSIKcA9Vn4sv\/fiPAKil0a5hIx6QXM2jiv4vFSqcgQHPhjbxlmksCUD71+BcElvTx09somsejpTEXOX5DumiTu+RmoxzAPxad\/yoHUmpVtJwSnjk0zwlToGO6SDPnEODnYt3LIvHRsx7mnFExLWnr+yQHfYFCeLNMctGGZBMubCx4gjt048OWguRvM18ud1xw3iRiS5rez8OMJIfcMnRlbnJA4MyOhWSWUbuYwKHXBZjNJSArgDpEssUAVBEOZQpnBVnXDGsqdTXz0eM1y7mnenMoiYqQeMnNMBDyturRKjEAiVgPEzOZ8CufggYEMfnAHCuOwF04gvqplTrrZWKOSNpdQNeFrRsWk7y1RbIKw3b8jWOTzA\/3wnocU7LCIqLpjBDheYw+YKL\/QStNjvcf462QDT2fMTEzd2qFUE5\/HIdvgFCjr11QAYfzSa9caF4orrxStMFBMwLrngiPEoNK2oL1ixSvqcDH1eCryay+ufbCfgtp9mN21cP9bS1fp+KOtJdRjk+WwIrnLE7yFL2kPl4Y1ub8Ic+0DgBOwxUrYa0lSq611ixLqvgBVVHqkVlsmy5FzYlt4nKwAzaE+UMlVSse0y5ciP9QYj7PgUOQsYRJLOdnUB1nb1cLIVzISsr9mEOc4Z\/V5yQfx0Je4KZnrBbnTxqzPJmczioPnEqWI3SSJQvibzfqftopphp69YYIvmngwQ9boqS8nu\/0Z90F4tXrXlEqVlkyt8z345OCJheKM35O3g1+gtDgXes9IlOq0VZHWc1xWYAyu3e5lYps9GawHgztTKd5Dh6phItAr7WJdjC7E5+Hw0Djk+jR2QPNAEyXNvBFWYdDCSKqCL0EW4k8u46MkhLkYoD\/U5LiEaiB5YSuGX8HZDJEwdOPPEWcT2hknjUDiQIy7tuEeBHkZxly3y9r8TtSEnAlDGbBVFAT+DI1sU7ifZHKOelnaNbzJX29JqcLfJH6OdFC035GL8QU1vvk19qbGftY3DBf6EJAhrCyEG8T68nr4mpyNVonkDSzrMh1qFjIZcwFXjgWWM6+wxfrI7EB5HOgW0H2RU+8jBV8bTAp0cYUEIW83AlhSIGJhaN4hzo4QbiQ\/NEKSL4V6HA7r2y3QQu7WQiGeuhWzieHC\/re+NOqmY8UZ2Nbtc52d9K25gQKE7BXNhq2zsjuIhLJme7BBI75RlEqF\/camjLVcquotPgLUp7uXIyomz0zmkrCGiGxy4HlklTCcE1ashYaXZA\/9HX39Pj6qB+WKglzfibh+ldNWXcB79RaHBC3E7rGwoRJM5jkaMEkWLJVppPuZZUXD0CLZZ5SItvsTmJ1D5A5i3llXNLFE2q4czLsPbe5Ft7r2t0=","pkt_caplen":1274,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":24710,"flow_last_seen":24710,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"31.13.86.8","src_port":35601,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Facebook","category":"SocialNetwork"},"quic": {}}
+2067{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":1294,"pkt":"CAAnANMtUlQAEjUCCABFAAUAAAYAAEAR9MMfDVYICgACDwG7ixEE7JMhzPrOsAEACEhjA85S+SrVAETSp3xd4I3jcnRue9L34hUuKLzlfpPUk0DMF1\/VFxThZTibHyGTQPaeM6iOotElwwAC1lRX5vIn9ya6YsAZzR1T20xEKAiW3eJkBYrfQ3apmceqTTBCX0bJxPnVeRIzBODDHWoJM4cXlDC\/p3lohjBDIh+3Pmk8tNap58UqGgjHnaigatc5CgFJHJWL+Kd1f9qcpuyZT1uB\/ns\/WT+PLudF\/jQ9707j1mFbnqiURY6nhTe97ZArhq7t1JVJAsO33k150ABBjgVdT\/6wgI8ik0OKmmJMbfb2L+7Ixq0YAACyySDSzQt+wcslS6ksj5zkeJG1dT9Y35jxFQSLUO32yxmbwQFG+b4QvZMRJyJvqfQ7oSMncZe7gs3wgTuaXe5geZfkx17MmRYXTYrf9pvAukh+MM4Q8hjt2gZyy+8MqEokO31Taq32iXjDeFgjn7q\/sQ6rvlxCVyZt8Ccaw1VxzzUAQNXg6QrtjGJsnqKEgZqyevLn4vgbCyEPYSqzUTMTMLMrTP+YLSeAUyD\/0KlFtPE0vwwFCXwILzsVlF8Hrkegr6zVR+h\/fNZFiUKr8jA4htexop3\/TtMjF2PSObMi\/B\/O4yOQK7dMjsb7j6HNoUatgqnfa\/Ep22MPaFjhmHCE5j8WrQYwGpwTuF1k+FX+IBnWV4aUFnYpvfr221AiaeRWseWythbDWPKdPOoQEd\/nzlYGC5Oxk\/91qMZSP6Qi8tEzsAHdyiB9WngqFXo1pqCT6\/T6hHvEqNor+wZ910MK6fQ\/Z\/7idL3\/nnBnU9m8lqNNZM0XegQQnU8+PD\/XZhQjxUwoqqNWAXTx+KKl5uQmMcpN8TieU3aBwrb2x1xcZVNXnjwFxiEsI7kDQg0bAdgGrjrWKUk4cVimEMb0EC3L3V2ZK9Ef+8sswkJ6ekYpwvMTIYU4ZOYeN6c9agkkoqzbCCHeRQql9R0YriJFUFgYENUK5b9nwRNBW+A+lZE8ptuzw5xsFcuyBXpjCKYIgsmKcLlQPkBkV4L5QGZQzzBmN2GgfUAEzN8WWVN0hJqYa9YhcX7zxmRv9gsMitNksaFnr6AlihFLFZqlT9Y648AprztjF7njBZZ3u+CXpZkG7Px2yrrdTouwjAToPn\/AdVmPPTHV6xKp99fDbwaMyfL+yOcnJ2plbK+wkS1jsiP\/yDk9VzA04xL0657ViUEAuv3t4Pev7pI\/DIFdRVSmTSWKvywkuBVJ\/VJOp\/6cO+Cy5FlDhTQR7H8evMXUaEHp69QHfF8fPUAjUyJ7IMeXXtuK3UkzI7UvsOqWVYGkA2OumbWmFRfgS9XBGi3DmR5otgit5Y81MAvHsCQ0V0IB2P\/yq9sRuL6R8TwF63sAvaPwfsPjICjHyZ2krnIlWXUbArKvncQeHm1H6y9ztqgfn+NTwpQWRfi71aj5FP2C+U3RB9l5HqGgyZJ9tt\/Xiom3MonkmdTNfE9C0G+zTKbgAzuir0+laGJim+TV37+wtcreN2P4GKPPo2goOCnc140xbDBLn4BL2axie9RcUyuxXK9wAWvijAfXal3f1DydwVZ8LxwK8o06yHcTKFQ\/sXJaHnxv2HTtF\/v0IBQjQRHILVxnhCjAh73MlFUFSG3zJQ2aU164W5cGJFQS3\/OOJsBbuI1J+KjSFQ==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2064{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":1294,"pkt":"CAAnANMtUlQAEjUCCABFAAUAAAgAAEAR9MEfDVYICgACDwG7ixEE7GUmy\/rOsAEACEhjA85S+SrVAETSuH7quCgS8Qh0D\/bDO3gFDyLADGIuWnyCygbJxoXjp96KXvspho+865YDAISOGlOK6zOTsHDQAebkiFhwjAE3CGShccg0NcaDyS5u33R8Osm0onTcQUcavm+SMZHNxND0mAg59a7z7rYhXIsBKLYSznCIFNmBhvnQ+54HWzq4kDWVLL0ptfvb3giThFXk1AIMtBbaQwMGxHg\/8x0s7Ppw1zOCvbNuFb2SaGK8woqt2broJB\/xJJE2S1FwZCmQqqrE1mHTwDi+8M\/OC1IyVNxKVB8saqcFSbFe3BJEULgEgbvBwmfmNN7Wau\/J6gJxg5w745\/ujGtOLBoEAnkzp3XoTJN0Y42xyNe7RF+e2AS8staHpKBMbgG4b2fukqv0W5QWMOb9XdlK5lappO8kEpmoLvACo9Sy1bI0dfdz52edGlrvLjFy2h3zOMrwDHWDRiYmPSAbJ9pyo+VCqFMWVDhQI4ZmsKudQZcU+vReqpUp36fwM5gOtsh2Hk\/S0k+EHqDAZZLNzSF4Yr5ZabIDN\/R6biJU+FbtoUG+RJBpWcvmHAUftMbmErNWLgTpRpllj3nUl2F8eMASJGjRK8oYFrTV1fl7xjdeBam93XysGVWS92VND4SDvDULI6TRr\/337rNSj3EREqThlcSaMocH0kz+\/upNhJQxDeelV1RY26qv9bW8VdFma6p7uhfRK2roH3G5uc\/+tiG6qdmRct7WQoGsbTeaFFwB7Ji7Wtb9Amekof3OVUrPd+6iV+W3mM4hQL9kRTkFzHEd\/WA\/+8ZmZ+0XzQrpy3WwRvRc4DmvV7nvOYs8y+909LdGLV6CpRLEK1604OVZbyXxVxq8+mD19ElUn1g8QnbzGBFa3Eif7B0cGdFF8WqgYvqe7ufF46ZJs8QD63+SQv8gGxmUo3SJWQ3Yfj1uYEYSEfqi43AQxOFbKmd5oqszRdikvUk0Zh8XMjntw3CR4tWh1lqTR3LIN8Lt7A9gIRX8+3G76YoaDY2JIMjxOuLYIRBVe\/VWBuKPMLqRCv4wvIDach8GKJmbI9PTQ01q1Z5kL\/zM7jTdFAlentpckr6+ua\/D6t6rLd0nkkL8d+15pg8\/FKhrDBHA4Ml4BRHizjz4SpRJ2QEiV\/niWkbX1e0hkpcbZ2xmOFDZW\/9O8RjAOdM08kiCSbKZTUpnl9P0qLKtjystpZa5q8OrBMgSHUgHM1S7geU06smT7+czbBGnnd5A+6PV0mPwqueT\/OUV15fL2NUOxgfqhC8iKqRfJcjzm8CssrkrLVEfaPmw7D7KOm7\/2J64iyqOubriFO6KrbjP+1qKiLmCaqNeEy3JTylMKWsH5UVovtnGGCKeolJjanKSFdzQ0naGenN7GlArcfV78Zclt+QC9mK2mtHkEiOwhoeprg\/zQujUyWH4lxZTrhtEFhlJUvQKpPst4HYEqZgxQPGS5nmr51v1f2cwzcaORxf3cXeVVh\/GKwiwMjI8VaKzhRxAoKZZ3g1TUl61dqF4liU6GnZkX+YBlPJ80vXLVfIDc4zwsjaBUxk1pJO\/LOLCp5buKJ87EbzIoejsqFXfFarTVLwKw\/2KUHEIwDL1x1rU0t6Q+Ap29yyER+brp4OyVHhD6T7u9LrfjXexdQfUgnSNX1Ib4LZ7OO\/KrQ==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0626{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":235,"pkt":"CAAnANMtUlQAEjUCCABFAADdAAkAAEAR+OMfDVYICgACDwG7ixEAyZUL7\/rOsAEACEhjA85S+SrVQLDZmqvdE4MW8rOoM9w1rs1Ve9xUoq2hsNz4FSoH+8IX1y4OMQxrypqkjJmRSoxWAG4K1BtToT05DqZDXPA37W+oiuzYsAIvdZTBfcaW6sfsKLCaOVSC5AxtXemXyvLz4KBgZJ2jBsRg2KsMK\/6hkk97+qIGO71thTOTR2Uxubh0E8pSeU\/BRpDPuhyvo23drRHiiQm7fVAfdcFggcOmmrpSxhmnVdz7bvCj8OeBJ0wnOg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":95,"pkt":"CAAnANMtUlQAEjUCCABFAABRAAoAAEAR+W4fDVYICgACDwG7ixEAPc+eTba1WeBVT8v\/1jeyyM0xr1m+u5EZLD2ceOv9P7n5p87H9BYMGSjcdl9CHngv\/xzJ9bswwrQ=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+2036{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":1274,"pkt":"UlQAEjUCCAAnANMtCABFAATsAABAAEARtN0KAAIPHw1WCIsRAbsE2JWRxfrOsAEISGMDzlL5KtUAAES+XaOQYa\/KU28k88zGj2LhJbsR3BIHJIA8BSBlEIP1WSh2w8TMVhfGg\/H81omKRwrWK2ZN8XlLnLRO02973GQv3bkM6jq6Kii\/PVvNppRuhPiKVs46Hrs+B0YYzyP4d1GL8\/YkrzPS6\/B\/WcwhS6AeieEzLrQC57i8alz0hkgPCq0cef5qYxQYVFtcRKP+uMprNLxz+R5F4X1a6yCZf0oI+UIQbaciGetBAcQS5smzh0oFspnDR+0IPu5UFv\/JAtphTrOEIr26H2HnJEujGbCmQG3\/YjNXMnM482PqNo6SVFhnVT\/SoOlnTusd3pY6E2awKtKs8p08SovbNydF8gduydT+aR+\/IeMHOibxeJ03C1RxbUaK9QRDzZ8GEwFRK8LPwkfNy7B1CdgVfrkRLU6rKgQC\/D7HWVAaxcXjWkFTR2GWWMtWwusSkRX1P7ZVHZoB62hP4rizwQuJhHZk43WdaqxArGOQATl2uuhF6zczk9Vb4U12eTDiR6EIzgIice0FXt2XU4K8hkav+tdJkRvaVpALK+vZzaPVU3vc8hRM02zis+bG8bzNyRvV1pCBykG9b7SfjiUPMW950qe0UauTk+6AUbDmwkNbMbOPRhbSOLHjWOR4NvnGADFJ2unCEH2V41Gpcr+aYzMJIcdMhdQtA+XiqU6YetO1lEhiovsyKWGxiEZMD9o6srdR1aR9zeag2CY6lrS9fcitwO8Ex18pVnLrtptksKkMNXE4cjM0TR9TY95nA8k\/dTHtORTrx2+sJzofotPQnXR7iARPLn\/\/zq2LOzqepRkqGw90xXOwTBErD2iGirA66vnsdudqMDaLgUF32Hnsbuw\/6ZvoCmHx4LCkoE33xufJqtMXSr4fj956+Svbou+SLMJ2d3HwvjnFdvoWvpnADXShxkTYn+CMqRWbBxfR\/h5No5IPwngzi9PlWKzZoWitrJ81G\/Jm4l72os4k4EzBwY3WSBT7NXVBBOtzZCfESSsq4LfHgEFb\/BGbuerS3YvTq1A0qQGDf7Bp1Lr+\/muz7h5NqzW6juvHGkms7OIKGCmdKhPNtfcWGFilIQcg0UN2t8zWKCso+onXXaKFwdgffXBSZmydK5g7jcHk9elrC24n8fpei7sq\/82JFCmqdchFLEcvVVmW0mbIUpR7T4f3TyHfv0bw6d5ll8XJHcZhz\/M+FUK+bWUGJ5FH1hKj\/W3V6CNsWEvTCoZojunkAELHx8lqApPd6R2zZh7nxfpZEVyWJz65hhbd814RbAJANJrAhMUaNCQtNtvpK8VJdwK6qjTKqXiSV7q\/kyQZuR273hZfeYOPYxgW2AgCgJKGhBbKvG\/IsgXMup2w4VRDPJVa+aMv0xFDugLUrxqqo20wlIPuMmb\/VbikI8BgSabJDbe51S3Vv+hSuru3wNcsPgJRcQvn9QQTJINg9ogqusgcxS5zT5PTufuxYf44b9xHCG1nHeePJJQEQFytRNDsR1bh5vImefZCCn+6l5PeBJnLINegpMSBA2bPpptUGxEv+DopjGyQmZ80+D+USu2iSn4bTfm4q4X4XocAYkv0cerEl2t14TTo2jlq764+B9\/mekhF\/stp22pYy7W8nSEi+CvFOW64LfpD5dA=","pkt_caplen":1274,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":120,"pkt":"UlQAEjUCCAAnANMtCABFAABqAABAAEARuV8KAAIPHw1WCIsRAbsAVmOQ5vrOsAEISGMDzlL5KtUAPlQPaVci5zGWnAhgnW5JPVSK91XSw0CasCNg46lrI1epL5jC1f\/6goPaEQk6RN28aZw7uZpvlFM2glR\/39XB","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":109,"pkt":"UlQAEjUCCAAnANMtCABFAABfAABAAEARuWoKAAIPHw1WCIsRAbsAS40jVEhjA85S+SrVdF01B7Wa2L8KViMOZa+Ff5+NvMt0VJtfWAljJWmahagkppEsIb0aW0EzyIYmbHKBF3mMPfLOru05OQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":80,"pkt":"CAAnANMtUlQAEjUCCABFAABCABIAAEAR+XUfDVYICgACDwG7ixEALvFE7frOsAEACEhjA85S+SrVFjIDnMXQgzQ0nS4dO7RnleKuhQXwriY=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":275,"pkt":"CAAnANMtUlQAEjUCCABFAAEFABMAAEAR+LEfDVYICgACDwG7ixEA8YNVUlKG6xtFsnHNOmeiGqQDmgSdwdn5gbKGl7W\/QANRxEIR01vPy3viYCvYXxKSIIEHvONQoEXRLq5MY8A2bq4MUK1E5GMFgMQSlU+q3vu231OWkv7tav5hXeJ3vYi5m4IkCBDGKShkH9iZD9t8HU4vj\/uH9pVsTSD2Eb+97k+B9ySWTdecmXTJ1z28QY+h8PxBCnefgwmspCEpfnyGRYM6bI0Xq7VWBkaia0i4Yysxrm5P+sdo2czGhH53Eg0MjKorjwlGw6KiEhEHWiBQxdss3BncGtL2Xbtn6JbEzRAabxdkWjIsH0Vi+u4=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":73,"pkt":"UlQAEjUCCAAnANMtCABFAAA7AABAAEARuY4KAAIPHw1WCIsRAbsAJ9qWVUhjA85S+SrVqSXaFsAL6gEQLoDxk34syg5w7+vRsw==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":24,"pkt_len":66,"pkt":"CAAnANMtUlQAEjUCCABFAAA0ACAAAEAR+XUfDVYICgACDwG7ixEAIBc\/VIiH5LV8qeL3N9dTzz\/bRJAUTRJbF+1j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1861{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":26,"pkt_len":1142,"pkt":"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","pkt_caplen":1142,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":26,"pkt_len":70,"pkt":"CAAnANMtUlQAEjUCCABFAAA4ADIAAEAR+V8fDVYICgACDwG7ixEAJG\/EX4TLOAKrs2dYIXyaoMAVOW1pFSg0o2kLbbCIew==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","pkt_oversize":false,"pkt_ts":26,"pkt_len":74,"pkt":"UlQAEjUCCAAnANMtCABFAAA8AABAAEARuY0KAAIPHw1WCIsRAbsAKPiYQ0hjA85S+SrV7ZXz\/rdFh3Bql8c0WhU1o790KTEFQHs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap","flow_id":0,"flow_packet_id":490,"flow_first_seen":24710,"flow_last_seen":139922,"flow_tot_l4_data_len":271643,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":554,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.2.15","dst_ip":"31.13.86.8","src_port":35601,"dst_port":443,"l4_proto":"udp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22.pcap"}
diff --git a/tests/result/nDPId_quic-mvfst-22_decryption_error.pcap.txt b/tests/result/nDPId_quic-mvfst-22_decryption_error.pcap.txt
new file mode 100644
index 000000000..b0ace9059
--- /dev/null
+++ b/tests/result/nDPId_quic-mvfst-22_decryption_error.pcap.txt
@@ -0,0 +1,708 @@
+0382{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+1979{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":106,"pkt":"RQAAapbBAABAEXBACuYoqF5h4ZLy9AG7AFbkKub6zrABCEACR1YBz3h7AD4ztLOg+8\/NWUDesKp0sDyq9wl\/qnK\/iaP4qknLwsMfEkvd24lrwL0JnOo2eK80vHLhCKIp2AiTqDI94jB8\/Q==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":106,"pkt":"RQAAapbBAABAEXBACuYoqF5h4ZLy9AG7AFbkKub6zrABCEACR1YBz3h7AD4ztLOg+8\/NWUDesKp0sDyq9wl\/qnK\/iaP4qknLwsMfEkvd24lrwL0JnOo2eK80vHLhCKIp2AiTqDI94jB8\/Q==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":106,"pkt":"RTgAapbBAABAEXAICuYoqF5h4ZLy9AG7AFbkKub6zrABCEACR1YBz3h7AD4ztLOg+8\/NWUDesKp0sDyq9wl\/qnK\/iaP4qknLwsMfEkvd24lrwL0JnOo2eK80vHLhCKIp2AiTqDI94jB8\/Q==","pkt_caplen":106,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1220{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1220{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1220{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":60,"pkt":"RQAAPMFEAABAEUXrCuYoqF5h4ZLy9AG7ACgqG1dAAkdWAc94ex6CBM47\/CV4XqtIbZ\/afHzzTKnWtxqz","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":60,"pkt":"RQAAPMFEAABAEUXrCuYoqF5h4ZLy9AG7ACgqG1dAAkdWAc94ex6CBM47\/CV4XqtIbZ\/afHzzTKnWtxqz","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0199{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":60,"pkt":"RTgAPMFEAABAEUWzCuYoqF5h4ZLy9AG7ACgqG1dAAkdWAc94ex6CBM47\/CV4XqtIbZ\/afHzzTKnWtxqz","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":66,"pkt":"RQAAQgAAQABZEa4pXmHhkgrmKKgBu\/L0AC4pSOn6zrABAAhAAkdWAc94exZf29munF1o22y56+s7Aah0Yij2KjYj","pkt_caplen":66,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":66,"pkt":"RQAAQgAAQABZEa4pXmHhkgrmKKgBu\/L0AC4pSOn6zrABAAhAAkdWAc94exZf29munF1o22y56+s7Aah0Yij2KjYj","pkt_caplen":66,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":66,"pkt":"RTgAQgAAQABZEa3xXmHhkgrmKKgBu\/L0AC4pSOn6zrABAAhAAkdWAc94exZf29munF1o22y56+s7Aah0Yij2KjYj","pkt_caplen":66,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":261,"pkt":"RQABBQAAQABZEa1mXmHhkgrmKKgBu\/L0APEMrE6UCSZQDbJOgdDzeYjdZTzt28vu6tjCHRAj90vp91qnykc+3x6Wmg+5e8PGhICcLNK826JzWbITYr4zGiRbhVyaR1Cqs2hEHmmorVQ4cCwdNiZbo6gjP+4NUekWz2YVtTsUv6IhLCm\/m3BSa46uguGSP2Ak\/FojN5NNq1dauw2GMywwt9bqF8j4CBcebgCepo0Inwgc+ITNx6Sp5irNnG44wEYamr\/uPL4yH1lYT3E50aeLYmlhDxuwbruEL7BuL2jidbNtZ7LiRPj7pZEwuKVWMatXBRXhDVGy21BuqENcxjI6amSJiAW0","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":261,"pkt":"RQABBQAAQABZEa1mXmHhkgrmKKgBu\/L0APEMrE6UCSZQDbJOgdDzeYjdZTzt28vu6tjCHRAj90vp91qnykc+3x6Wmg+5e8PGhICcLNK826JzWbITYr4zGiRbhVyaR1Cqs2hEHmmorVQ4cCwdNiZbo6gjP+4NUekWz2YVtTsUv6IhLCm\/m3BSa46uguGSP2Ak\/FojN5NNq1dauw2GMywwt9bqF8j4CBcebgCepo0Inwgc+ITNx6Sp5irNnG44wEYamr\/uPL4yH1lYT3E50aeLYmlhDxuwbruEL7BuL2jidbNtZ7LiRPj7pZEwuKVWMatXBRXhDVGy21BuqENcxjI6amSJiAW0","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0628{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":261,"pkt":"RTgBBQAAQABZEa0uXmHhkgrmKKgBu\/L0APEMrE6UCSZQDbJOgdDzeYjdZTzt28vu6tjCHRAj90vp91qnykc+3x6Wmg+5e8PGhICcLNK826JzWbITYr4zGiRbhVyaR1Cqs2hEHmmorVQ4cCwdNiZbo6gjP+4NUekWz2YVtTsUv6IhLCm\/m3BSa46uguGSP2Ak\/FojN5NNq1dauw2GMywwt9bqF8j4CBcebgCepo0Inwgc+ITNx6Sp5irNnG44wEYamr\/uPL4yH1lYT3E50aeLYmlhDxuwbruEL7BuL2jidbNtZ7LiRPj7pZEwuKVWMatXBRXhDVGy21BuqENcxjI6amSJiAW0","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":400,"pkt":"RQABkAAAQABZEazbXmHhkgrmKKgBu\/L0AXw4VUpenDYKmMFlrKRSE15lFY3biZ2eMy+uyH5UepH60Yt2Jf1mTUSYfDKUVQ3gDUOAZ\/xMDnhYoNmau0f0jtGlkobJChku3evSqaC7QzyC\/rROKscJpzEPLaInwo21XrZ40qSKPswlEApXsDF5w+AbwNhP1rKjmb2E9L4ubCiowBurJkvwGbx0Nb92elunipt7mUleKdsSsPB+yh\/sflWOQLRKrDahcPu2Z2eyuo3Ij3Z7O4MmIncrNQazptfV2fxcp5TYZ8IfHfnM+pUESfBzXVgWYmh7Fa5+mMOF0elRR4X\/MqknDcAD8iSLZWd8ohLu\/XcZm3gipFxTzubMDR22PbeDtrYeYV+vgkFXhmchbP3jhU9m2SFqZ\/YfoCOcCqfqzTykRvyZXRgbFgUXF4kjAbU42V6nYOXc5ZekrySKmPJ5iG4nHduW8IOwJpA3x4gq8gIScwBrrmfpyOOp6q6IPCmUx+vZCuzCOQ+Yz76r+rbVw0FNGQ==","pkt_caplen":400,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOzlvUs2LKS6VbI6Yos20HUrGB6vx+CEnjjXS4+Y41TizrAVUIfw10ltVj77AliaLJBQ4OsgTMfUy\/QnmDcFrtnLCEIttLx5aKmINnBKIfm\/FaCK1uejeK0kQfqNagnTpjmDtPTuWEdYiGmawQBQqNbBjGWjSO46VSS3Rhs6G2d5cUR3TzvS7wI9BSS8HB5TEsGIJjrl3nQHRzMuZ0i\/BGKQ11j5+eg4Rkv6RW6UcwYiDRYVLEXeT\/ItFYIpx61rVloQka+reNTAAjOOYrT7OH6Vmoc0vmAj26UP4fNlXZB8Y5eUseRe6TcD3v9Blw1ChxwdfwilpSWZZ46rb\/sWOSF8LWqVKdgO66+R2Lbd1qQTzdPweTn3c0vTNdG4wmL7FOHdgeumScsDD+Rg2ouP7tkdgQY4HXafk\/5UL6DqI7gp0LyzWN5jr8LTbAC2lVfcDs0wTB8ID+XPfpm01mE2GloAFhTZXO5lb1ZMfpY4sqUskWcX0ZWJ7U\/eoSJl3PgNsRM7uFujWFsIIRLmwMLp9EzAxNG3s7D4oKBD0l1COgUqDIS7HZTnQgNuyxWQvL0RUlgmt\/rxxoy1DtqnQhyVzVlIrihIGkVxF4RHW3cf9IEkiBs2AoinIEy5x1us2XsusnR08u\/gRf\/LjCXu3QVI\/xX3Qy\/i6EZTYm9lU\/TH+MDIa1DEhFTHNXbyPOxajZrbC6a23tOBPc4TlrSicJN5AjTiFr9+v0f7wNefjQ3rEfPdHf1\/+SjTBmebatq1v0lw++onn9mAdkdpDRXuGiuABP7pEiRwKYnZNdGylU1DS\/8sggcPLyOZStZl5kXVaTW9Cht0lh6rfp2lbEXgtUmM48q6Ww+Y06MgT6bcKoI0me6DSikfRCna7D2SJuDxKAlFxpBbOPpqcOuhRd3SxgaEPK0n6In8xKNkAPI9ybAlwXqsq3BwvzvUvVDCOtbBvMrfBvG+c2ma+cz2Yhj\/QZfB6svTtQ3AClOAT1qZbfYvpLd5YgmQBgnCE65n42qQFmOsuucpfNUKzkgTTQNAwNMWLSPpd\/0zrAE4vnhFUC2GYo9r4mPjNTmMBMLcHV93d5Av\/l2DNHFzAdZBRNSL\/qwuHf6yGjvCJVvUgd2PMkm2062UCnNHMF+WEXXO3eeGQdhvTaK2QJx7B6XHR5iN0FlV2Nc5vqfKHJlBiNCh29yPj3oagmJ2HibblfUrvhYykI+olsRTmBrAdLXm77mykxIZ\/V0+yZfLG2gEc\/iYEen342I2XnVJ8k8njBBGL3wscUMwBz6iUL2\/We3U1m9vo1Q7D3ijbbhPHLLfTJgV0Lpk1ZA6R6qRMgk7myzj7bLN5NEG2rbYNNhlc751i0klZm6Q0taw4V6HJaQ9e8CBOj6Zb9l+f+Slatz\/lq4lw4UjZdPxH2njV5IWfpvjzoJczFp6EUgPXinbLgJHsofhqKsdLLtCE0Hd2bYClPdP5FVfhF3LJ9yE8Rr8KRSAXo1Yrz7OB0WC+gEkqxVTVR\/Ygd2jSIfNvm2\/ZjuSRbFHKNKHUddqXptQx4KEIpyPfGeU1OqP7PmWoqMUh76lblfYrlwCLKB3aF1cWYFJ9a1Q\/K+HunBDGf+lLntTgcslGzn7HHyTmUVBZ0BH+cVEs+UrGieSzge\/51\/oOyEjFQfMjzuUSCyBT6DQX3+KjAg=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOyD+FaBH8FE2VVIDfW5XLKQZ+GfKYQjPugSK6RjOngTj9sU0b0qMDO+Cy+hvels8wYsjppMN12zJFqpo99T0Hd8CfTEMOuidAFX0OfxEsUh27GiYn0F+xgx02iITRCL3KfcQ1VVsDNqCA9thst+5\/p1etCvfSTJNnwrqZqM19me0oDed16TzXFaUURSuPW4Ncx1\/MaT2hnOUgR29pLw+rXBAn0ryax7cDd86sUbmAQo7FEAp1dWOFsf6FiwKq6NewHiFA2WiWRW6MaqV9PMeshYqj6kMO\/807PVJhZBrJ2eCZaJvtGnL5adkmegvUwfkYL05ENPStfqqoQ9ljwlhXVZhWV2I6xSL1hbGf7QBi0YePc1a9g8VytuECI4QZSSZbxQqXZNilRDn6vqOcaRqo3MgFS1TEf90JnXL7c6Gqu4ojuWLNwxtHDoi6LDJ+\/WSWouuA\/j\/6b1AOGwVVoJzFcQIA6uVpynPzWLP57xPE54Sk2olO8nsJVp2jZNMDj4uLcDt3XjmWFmR+AS8mBrNkBcRE2jOWTWnZNK6ZkCqg+01CtXarz09n0zBXiKrXtJlr437X5h3yWH+Gp2Xl0phxzKBFBubNbeTe540+7xf4Biw+2nXrRC4r9CXHROauB42izSKZDPg09sNovvqGjbays6BCrs9KPPfyXi4CyLiF2SkGUbwY8omu6Nj9KiBTrswXCxvXiMfxr3IMEYFio+csyMjo+YEqcYtd2wS2rOSagFdy790Gmz42PCCqRU8kVC43XlcPXrEjCkrojAbp+Ytp\/aXK6ByEq4UK53CRX7zp0vGJSSsN6OO7gD9rbPGstRZKdhqSqge4Emk1aYpk8FrbHEttrykGfKnW1GGnsk1RLvxUXRpH3rO9TSXN8PqGFx7cjWYEraRJrVIOejKntsRwL0cYXSBXoCyqRuJiYL3K\/v9WGIdw5BE84lD6iiSVTtjqDFnQLv6uEhzueIRFmG9IA2Oju2yD\/+x+xi\/6o5iZ15bTVXovRRbTQsoG2tOuctg79BdsCH5\/\/VBkvonEVvdpC8i+igFJEY\/uMYETsSPcIpvBzRCkfHo+1caD0bXu73S263abSexy2FoSKeNDzc2pOePXA3VvT+jPjZZOnhVHhvK4yr3rGS062QH+n9W4gEgOltocP88CFAqsjGFK7ZE2f9+EhXBz0+46RAVO4KLNahrDq\/O85TTdl4ry8oR+BqfHMoDSnt9RWaKJXoR0L4QIu1J0ZLTvEouHvB1Gxq92mIap8T\/Jac2MUeusvEhSbrIcsiLuE0jjpQen+gQ3RWaCmECdlYu+C3NNpBwXCm8mFMTFhRyEQ\/I8VhA2BoFVw2eu\/uO\/0sEMxMXnLOQ4VTCZKORyGgTxEcI6Gp\/8O9pEeDPz\/BRgcLLfHibuwhQvmxG0OPMV9HTEwM9DbpvfveJ5XSqdlAw0lwz7GsgTGxoMmMmvy4sPAcqpux6eoBINtjO2RZPMngDmhInc\/\/36afKRwiYokvjn2IPC+d3tq2tRu8S+ohdKi\/hHfu+gQyx2ehb6LAVQ7oL9vNyG7lVZwOMipNAB6c1LiSk1uhLZ\/vpQa1HOfJz+RFvWDHeM9lk141PV0\/oShfORqlKuHoof2EBC1xn2fK2jh3X\/1V7WLkWiHrsTl9BibwR42WC+H8XxAULo+pdVmwOp4=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2008{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOydb0goEMGsGPLbT6pS8eCS\/sQ5Dmx73F5Pvdlf4bATzncEDRrifTEk8st4feCp5cvuzQ7y0WHb75m5A5YCGv2JBnwagXJRBGuGU9YzGb0p67BA9WNKnmi8ACP93gSpdbixoHcl4tvYkoNEIa3UQdt\/MNJpzDHb300MUr85Hx+uaCrb1g+OfNz\/3XNsSAPmnIJMMeCS2aD3tcYold2v0BPuWmjI+nki6XAiYKS4\/O1LOWjPiwspd7FrzcpBa24CbS8Ye4Q5goxGQNxuAQznY21m0OY7o6mXIztBiUqgpcgt58pT1y7ATt7zH21QwCcHoNr\/hcliitV6QdCfjprkQQbZGZjsXXV\/yHxZ77i3Jdh94INoeW9kLnClkD7O9xkc+rP4UWZaIW6PhHjA4wTK4qJ+H1xnW8\/vWXqZdAWJFrHYuffLX5ThI23WAF9wag5DYIzj9Cf7eYUoo7Lj\/8Uhq0NNkc0ET6Euokd6r9hKMRDS2uYqliml4apVZoTVlfqwB9D4kg0LQ5iLqbghqiOrPZzNbY93VsVPQVKPFe97rrdiBhdM8t4YxpzwVTgqez8FZfk2F6zMjvFpkQM8jNH0EU1k0eQfmQnWgh6mPkHpgk6vAypEXj4\/HCRmbtX52fMeXuWeQpk3AUjSN2STxg58ThX1m+X5z0y3MCt6EFZas9DkXx5\/yO6BEmhjrc3G7tQGFku811rfRgCJTUAS++jhVkdmgHyNjH56mVu9+EUtnBlyEttu1Ue3AKgXSJC5MpLzM05xPHuMjCrZTkE5LDgUY2TmeWLQ8qMc+9gludhHN3L+k\/gikwaKmVUoDxHxeD3Lp\/oaWCrXiEZ38iPIsiIBvRcMRnw+Xm40qbWIgSIz8XPYjXUudx4nD2yZmKv2wnj6zdUK8UN38J8v8BulQNBi9YftRJtpVlj18LPeugikQHveC1gjVsDDKkhshl4VE4qE47LFLvBncE1Ct59\/HoOkLo4WpAg8w671eW407C5GSVQLVOHj9wuvIB4pg4yeEgn4Dz07uQHVmlih3Vrv6lqa2MUKY8W1al2YJPJFb4JUoV0vVSJt2jvPVG7lC74vYiDY23KspvzjtYe3ig7dzGa5ex5qeIUC0EIkzV3SXb9J0VD001rT5Drdkgc3iAtWcIS1zVdphXDxILkDDKgkt4Aa18\/1NmX37zOm1RzTGZf6Eyo7ezHu43T0f0tBlQ4QBuAO1rMyENJN3SyM1QDaxV7tMR0MVssEC7lmG2nZA8n8IajQD6obCNGd8PgLtlsDCrkP26vOQhYlhxLY16NVVjv6nmg+Cc4fG7j\/lGeoaVH20dI2owNX0vmQ4H7K3mXwHyb5CJzGwa7O\/rzxYfDgPFVYoKWBbN70y2nW5MmhW5uOt37z02X2kewoy6j\/C3mFcw9OZ1uComh36VHv04g+hDri4Kt9+csn6g97lI1AeK\/HqcmxTSStvYHjY28+Xn9aL2bR055+fQQ3E5IQIh9DRm0Jf6yM2s5cJBjPDAgP\/gNBHskoV2QK9qKQETOVv2H+ZuMi4p+i3grl5Zzho\/2iQ+w1bkKuqY7iYz+OksnJm49oL5M6\/G5ZfjQi5TpiVTh8MALL7bCchvia1Y1B6qFMufPKKNoWuqqjFtKtTclJaKNxQmCq9SzlkLJ8MA71RnEnJMAU6HZjPZq0Ogw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2008{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2008{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOwSPEenoaK7P9QQmmaYaA6V8ZcrHQNPaftJn9j346dC63DrIcUsMbnVf5llN\/BWTz2mTNjkI6oiq\/NLEYuTwHr80n8gfPfuEYe3XK\/jtyLC4Ce1NyVnwLeSbMZd5lRoOhPewFONa6Vi4Dsf69k+zE+cNOGCorEcGtKbOr7Qn\/l3Uk1hh\/b7UzkUeEQwt2pbgorICAaYZ\/9yCbx9dCdyGxZ+YMP3DmGAR5D7cBlmiuFogo1jLA\/TmoVCozZ1J8vFcOv8lU4eEfatCy7wx35e\/ztYoy5OB3bPJ8hqZUMhXncfWfGi6XFExjl\/3Qx4NSdFba4wbsWFUuEm6KCPnSBgGEpIkEqBEKJK2JnmgiHeks1ucM9Ot0bteEJ9XkcrTMReeHHL0hn5jwVnqRndnxiSI9WI7WpF1dfS+CHc4PP5viQis33Dbchz3Si1dZVx0EpchAhE03aAAITU71oGC+c38e9XZ5zMwZYU1qJATq69cbaD9WJ9N8tgfDFnNkCwbfXxHrqEDLRhxCvp6L55dnEsnL2O828+zVTkJfrBi4k+wUKjUT+jwl7J1P2Aj5xKrxb+Tn4n+fPSFpQZefy1xoeKyY1Q9MSd6DvWzcQ\/Bg6Bi6A3l7lcm\/ZnNtdPfsQ1ByuOLF7ngEAyQcedHUpz6wQi11qripq0qKYtGk\/2DXGxIh3Ze0TMXEff\/KUSt0\/QpC9XOKKRXct54p72LJ+9DLMXMWMO1gzIIejbHF7g9BlI1wJfJn3dG2GfxuH3vFjsFhLhSinyaaCjfdv7joatdMhZB6yCLni\/xPBdoyAp9tVkwkNxiSiPQ1BV1kTZEft\/yfYlwf8HRp\/ZEAFrlUTZP5evOkqIxYC503970VjuGLYKZ9GSCw2I4EV2xPmXjhA\/AZGq9YyposeN6CjwALP3HHj\/hIb3xPZfC\/oQTvr\/PHMNd+onbmyRRVjFDQyT\/dlEpHu\/+gxJ8kcnLw33KUGkoMnoM3ngWvsZOfk+WxvhaoKYcqMiWbeECYdlnEG1Ga1tT314lanWHWMdz6T5sZfQA0bsYA+kYE+kp+wqE3puH1O9K6NzbdHIg\/mSCs4EV9UmG1KS87pUKlDRwVLRBo65MyOAGU2kEMNIna3M8DvOOZr2vii2WEZmJdLrHXycoL4jA2apeMphXHSwteg7fpzp2uTba5Z\/fwmo1YzfXIwUJPxBzN1WFhhD3fFh3Vo7SOx4I\/9NpkEAD\/Uc9xMYzPWFP5Kocqyk1DtVuMr45mPu5xvO66e1LJkaKuaXBNHGBWfp0ZjTHbjURXi9wMbCdDJhIFd6NhYQuosNjTcdXjFfvapzwIP9EFMldoxgdCkB0uz0NTpyzUOuCu6L\/mU3yMFvuFEckjdvLe0r8iE64hqUWiHkfNdUZ\/D+\/oT78pDd0zDEQDq7+HbN8f3tki6bCDOP1dLDVMSLSNiPTyVwCO2URc1yJA1ocTQrVY8SQDNI\/8Eq9asc4AQdS3n6cdCCwAwhnHKg1VeBFciUa+bEBYlGNzt5tFraWSoLU2GfbBSALWa7xpcKlg51JpFwCzi7ZpJDJqJZafhXNMurjDBkjGnUOjLzm9oEhvs+dIYPfTrmfTuyaiE8FscFLIrwq+aFIVlN0N9Nassfk0oPFNwP9rLA9tyiZ4x7r3I20nAYwqUa4KItjdWQeI9kVv\/MMKo=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOx60kd1timbUuSRzrfhM7DRmDomN0iPU+EjRnWtZOZsPhM1NVrBHgeUTwJtn71UBfsqFXQ+9A44q1QxsFxQtpoaK2QJZ55lzPPV3tZyz\/P22nTFC4y7feR\/vg8Aqgcw\/6Gch9evKaOzVuiFJFUetH1hngbWK1VFzJNIRnB78Fdhl1vjl9LaOB752UW+RxZhys3VaOqKgGa\/2ZCaZXxxyddVP8\/i0nf+iBtyA1uzoWVhal1K\/HzPUT5UelWVJlSu0AgK76qSYfOskYKRTlB0Pk04I7lgT9funmCOdXPynl4zu\/v8H32VytxWysuC7YXcfJdexvvqVkJJVrXnTuObh0VhzkQkhKnN0AOgsgiH0eCcEnHbimMwRTEcumifQ96Mv0jruXZ\/jXP1Cr\/8r6qUhYpVq0V7hzsC0m4T1MqmdjRo+zxQLDEgSftC9RcZ6D\/LQMuWJ43CjAOYNzPe668Nwp\/B8OCBbXBESsQ9bnUihNf127noIopcBmVM+D5MxUfILFnPKm\/8YrOT0X0gATApYTxyvtsiHapgoREO9Dypo13HSJxvvyVugWZEygF+k1UacGMRs3ny2ajzY\/CiUpbKcKkzefX+LkJlgGYl0CSThCQo39gExdwn0j3xnqXA57XEMSGAyAwXMY\/2n2faGAOBieuD8y+nLq3xo+hcUm8mnWQOjXJ+KrgVeBtI3fAXi3QxygyO2i6kJhlP28euoBxpOMwCSJDLqlaa3+\/nOsG\/DH7VqMmD7cJ5OJ7exmvk9\/ibuWHLi6ydGykWlnS\/lRxFs48\/65EnXtibj8kHBxlBdWPyd0wcE8ENhs\/V2UbV75Os7h2QfpT9Esn9oFxoPX8NXWdSxakEAb6VKOSY\/TlXkIbCx2AIuB3m+oa59WTiRxWA9fhcDxfWCPsorbTkdM2joiAq3q\/vMVtCeorTFMG6KlLsCKpky\/8vZ9w+UmxLQwVPm+D9fmiWO9yj7ALpfDG9zceZ3HK3FlJW6Bpze055A50Vq\/guvndI5UdqFbW3GVGXeyWxSE1cO295Q59PAA4D1SBgUTIEW\/c7Mkkeftt7ElsYSzBlDSqR+vocpd3S\/V4XFP9xiRHlO5OHHiic3pt\/nqJZLk\/4C4W4oa5XiAPaj85zz3uNMAqnJ835ieRHdYKYu5fEBe7ATmOtvPwFcM6ISN1KHYn6f9N5w7B7M1zInLZP5jRPdEKh+1R6nAnuIFq3blKDg4EQRQY+QPYg1CJW8\/VGLla0ujB1FAKAIycCP\/ix2lPLtvTwS8ZwPhaCy4jAELbgwjUo4GeHdGmH60nns+NQvXZDuvbBloTKckn23snBCf\/l2KARX1XpZ+xeii75Ru5Zrsp4yXl+1qqqnUX\/9NXiW6xNI4eY4Tribmo\/hQcjVf8Nsm8keM6e15kUKMPq44Rde4qBZWyF+KwTZ9VrV5T+LkgV6amHfr6iAGZ\/9NHTwaDBTMjqnEnyqWH+DwoMda0Z7oo9ExOqN18j+PB6EsKgUayU1djzNDt4qOOLsbCAhzncXElWQO671CBITsHcFvEiLGYi56QG80CiZ3Q6UKdnqtUuR0WnW\/OqVTHV2JdZPkJx8sDdg\/hWOXPDa2ocfivybkON4jzsRXt5nOKQeXgK5dNlDfFYCYxPqZUMOZ\/g+ZWn\/N6Gz4pOXuBwuzGllqQczS0HBX4=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAADQABZEakwXmHhkgrmKKgBu\/L0BOzAnVSPIqJ3XG6YKqEVI1aWStUsp0ZrG141hgxUgz0L8shPOZRnuQvqvgaq1Mw2ZBJx4DLyY00yxtPcJLT05tLjOKrZhpU\/N\/ZiUzJtZLagiiYxnDqz1K\/fGBNAk7zA1Lom2h09qnf2NK4pjCSeU1e7OP8UUQmdldDP4xNer+o4m4eNOc7WNLWZZuESfgAVeCa\/fN7qoQNIowCmK1VQIw39riIq2bRDil4BjOisclRIkpjIVpCJXZDcS3B2iD7ZEQYmgM1NJM3HfSA0VqGrwM2A29ZpNRhTfOoV7wGXCHjK4TZ+eiK10DJb4jziThmlKxD6d9F+OY6JKQNqBP\/Dz0rNXYNioRGZO+lLgrNr8mc6547q66iv692txN6bz\/YuRD0MmOACSK9eNyCJLS9pJq6xBeskm+vc9fV7JBHbV\/tjiJkwsOF0wM3aayGJ2UeJyuCELRXENAzod26lc0PU7r\/MoecOyWn1po+ZIUq4760pOYVLoRM77y+a\/WL\/oty32azL\/33\/MrY4il+cN1eQWKMrXx3cF5f2oxxVj86gXHHdeLg7Sloc0gV7GY2o0Pshct14KPfO2tMdv5Py+Vw4Kf1+qOMGfpOnhFtHJhBLXczj9iHTyrOzyPegCophdz73SMg9MAmyuQcQ85N1pZc67FiPKUv\/hWUOBTmFfO9i6Aos4sHfgdAMj+Vh7wwymr4ELfRkXNfs2nbG2DnfqTfSXghTvMz37bXeYL9hRMHJHVOv6PMOfZ\/rcYME5ssShY0DnzfRJ5DIZ3Ys242KVJoCYKwVpcg6SkUnh\/WFmOaClUWzyKqnIz02NB9Uut2mL17J6kHnvlJvfC2B+V1EcDUHe2r3vth7x3ZgtwuPvW2HmWFysdT4WaGDMasx+4\/v87VdS\/ZGRG0GMfDrV2gCKKEgRKbkksNqoubTdH0cToxGlCGkR9MgzUqCJLnPGEofRqdikOHKxYyy2aNET1C1MMojj\/IhUg3Qcu+U18O09N+URRy2ZGH9tMn+WpLoV6EGss8FFPVakP26aiZvODm\/BO4rJP2Y1+\/0ZBVkHpfXYqFTV7Rpwr\/HPHc1HzamuQqCiRamCkECdc4bdg0gybfASZVfH7ej3IHYyU+Xdo\/FftEUDb9zuBn47sUo2tLmtCymLaPreo\/KGfEoe7OOiU48k4WlF24odlNfqS9VsVVJjDRJI28ucUp2pXfGh6v8WsRnARzU7+tlxlMlB2VC7K7GYgP6ETj3fbbmuj1t4Xfmc3y091Q3xCCh24qljZKEgNixazfD5rao1nklzn7FN461ZJabfTLayAt1DD61ePszbvHLqPQ1KrE8A\/qz48crv4iBIBaI8uPbXRhSREpPETE4vWzsIY8ZE2ObxB33k9nnjKaXSD6BgdV346mkQ87R0IWLWBG+WOwTSzk41+aOEajrkea\/zysk\/xooVh3orxLhxQbVR6fuyp7Uv0tzbTCcIHgZg1lRjOSPymmQYTvE+vFT7yolrEIYjADFAP5rPUbVNDVNlIQto4fRoq+f2PEuAkJ9N3X6vti5R2eUq7PNfJurt9vqN\/B3GgHbtlkQo9YQjHLytFcHENMI28FfrupVGJUQXnFeLc9Rsq1tSBrIR7Hm\/O5RUURV1b+j+r3x6ItFTSnjAYNGoS3RITg1eNunIWl5fHkSE\/ndbFemj+Q=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1985{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1985{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1984{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1988{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1988{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+1988{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1260,"pkt":"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","pkt_caplen":1260,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOxaxFj59D\/GRbSSGN0nSQselU+b5Ph8S7tjHckPXHQRe2+9wTcgVgc2QI06u+UfYW+RzmuZ5dX70Qs62EO7HCiRwAUy61vtlmwQat4xHP0vzYlnMeN05uUY1oJepsLEsYnMvt8ydtnF7SoChL5y+tJLS9f5jfo3nZbeCvPs5gRPezEdTuNsWspHipSXzbCRcF0kYJuhakFLxuLhg1lAXto+8vTIJ3TNoAOQsdTeB+F1C8eDDJ5XwNzrRmqCBvTiOlDlCxZqo4FV\/Fj3xopMkt6zRV\/uf30bvOez27ZfmDx9xnPVH6LJzZgNi5NrRmE9\/gRBpSzroiv1\/JjvWt4QTY\/QZHS7xB6GMgicFByYNxKMFDlf\/v6qS9M6etVuj9JwRrYiAQStuMsOAQrPWlzRi9RINS47BB3QTBWvQFjIZnqieWH2JX2+sSp1EBxdnHH3T1hcDi0aaQslcUh0Df5Tux5xjk3HaNvoczZsXDXF48\/Wl1FD6toLVt10tWLau6tPdL6\/praPWAHBss6tH00wA3oZjUo7NFloFSEFfghVj92Qx7AZ5LWuUTTnZVOsqidtSJGCuUpyC+w1t4aR29DEGS0pQdV\/Vjxwbynwd9YFpDTid46\/wHuMFc2yO\/6MB44gVF9PRXoMcEQxktDbRcyYHOpCgWgGeMlnczXXSjI1245Ge4N\/10PlgG\/czz1nwVTfwjfKvTam\/jnHGTTCx68\/sf7DXPMweY0\/WpVq3OPRhct8ieQpmQ0MMe0Yj5WmoR5B7wCUkIdFvOfGiq1TbwknKb9APkd7jz1qWRx4UTcrLmfYj6v2P2xbZPt66sNXKck\/MN+3J38h46MVlXSooeAhXANO5jWQmPgvrMz5PXRuSJvrsbcXNyRH76\/gkd+\/DwibLYu\/fLf6Pz\/gE0XYnEfRBxqpKp7yeszDD\/Fq8wnBDYobt86VEB9SDYHt\/DbsazxeCJXKyVZl18Ai6+xSbrJpc8Rd6pHcRmef2Erl\/JlwO9boS1oAO\/zFIW\/i2yHdE0gRT05PlKVSy\/\/BrWZadqUF+icgJxITSNBZEuUzeSN8cEln8tWuUU3LvdB86O9tBMbkVzYuXVjDu43UcQjrb9N+LEZpAMMWgdwzyfbq\/QDtI\/1CrdmXe171yDgraP3\/tXQ+Q0Gim44oFnblRf6R6s0U8pW16W09eUZsrwCxZmloxW0JtSqMRH9MfNbKOolKWT2lLhIu1LoW8aaAl5dyLmQ2Dqjdu3\/1Gcxd4YoPAApeH85OqCHiGkazLo1itp+x61K9GtstTrtMp4aCxKJDjbE+OIY3QNg\/FTDFgwLPLKFJnVCdIcl3m7laodHcGSe4n9jsK6VvFFaSuKN4UCJd+eXT\/tpJroW9gn6xEwIR5RsEn+2aDMhKgF1IiS\/7nlTlCt8WknUKPHv1Hv0u1XAN1aje+aEgprPwUAXWZDheYI0sJUoqhcJqDm1EOOXN2IT9pxqKqm6ksJuR5M\/Fvf06gJ1w\/UklMLmbc26sL1nkF0zD6gAhGwxyqHJaE9AeMlTaStSgWGTXJq6GyDeoiuZ9hgFZ+lDDpPs44kwSX5qh7p+0uTlEPH9nGyPniYLKACxM5pGzpTMOpgll\/jPYdbNEGWtkeGCVJX2MlFYlW4ewBGFScUXIINhdwKJaSHtGCUz3cunO8j+z1JK5dmw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAABQABZEakyXmHhkgrmKKgBu\/L0BOwxnkk1RbFdZXZ6uu8EweFGityHeZm\/uaKqdc6hGGbmAyfgFCgoND9qVhTDnsZfFMj0xQ36cpQ1+\/cVUqZCv6zbdbXZ93uUxVRzJs7L89\/09BwiaydSuh+q6MzZBsI3dKK8n1UIybHa2CHfEaxuW5\/HVmeFmlz5jKLHNIctG8wl3KaYeZh\/oz0XNE7t0kqIkdkNJYQrpJNaiR6Z3pDCWGkjmEQHonIVXSxO0W58rSyetzytjn8T\/Q3PMVBmKLCpzn8LIm5NFKi9NQjF3OnNrWLyXX6MbgkpmUhXyM+5WSScAu8Hl5FUH8MuYPw3+jvi4a7BoCYsTLmT2eTxw8lG8\/XkvKWZpVm2h0WefF56ypBmdSWggewVAcuW+UvqCV1SsVJ84pZTQPBLpAUEG4YpVrIIhPpj8hk6lhRI8FVy\/ZztS3uzSus544VKsvJ8p23UnDVcKzOefgyeoeXrgodFFG3fRCrf0aDrPRhbDgcOmm\/D8Xw44aZLabllAhQ3pH8z+UZpCto+Wt0eUkx1gRfA\/KGrkU2FCpetDEwTF5PuuruAEyLS4luteKto7vD20V3KOCTUwgJ0d3GYYhib7BRP10b\/uH2F3kDXPcmTdjQwG1Y\/1iQ3iNN8pwm86iCy4Y7e+9L3aJ7vq0tFuNIx65Uh22i\/paZDsV1zLZGCf0gbzX\/kGZKtbohna73uTLI8f5DTKYzjRZlWN7byw+0r98rK\/BcXPi4\/W+BqrVhrYG2NH6H6jnZlskMnb7zTA1nIShNR4DYmaYwKqglByJ8535zVX0CS6JLUEqKG+JJTqCjDfmTxqqPDTUcWLa9fgSN123yaBmRhKvSJhvnfL6KXM6+zqvsoUyUzz7sEsiBt\/x4BW4W7WW7gGpKS\/eaJFuncMaBrBB5HGTbh9oH8xcQZFJoEF+eWVyvXFWJV2QMp96j2yNJ8KETuvJYOKLe\/H5SvXH8lhbyER5ysxM87sDRYZowx8FXhdwUccnc2\/yCzJL02GsdsyfbNIHZk9mxiRaMcobmF1A53wEo6KVqQ6fq\/YcjvC4SgSFWjIJNt1s9dpLuWPZAJ8wk0tuPjLEiDOQmOg4UNbiEyRTWrNcItpKKzq8GGS23QofzF0tv96vkA9RqAurQx9v\/0PPxG0l+egQqmUckTnqwQFRalHQ6C8GHKtRpW7zlDtr6PbEOvnCMW9SO96y7o52xCVji0U06MBDYEPZbEOEC80sFf631UQuch0QrwzasJBaUKr\/TNB83Z3eZzhVC1OAtGKwsZMwMEraqj6kKhOuJ1sSkkXfFLHYH9ISAjhD4+YQPm9RxAXpduapB+ZEzVyDiLLVwDPQDU48mT2isxWzhdg5GkL2za0Oebv8OppHczr5KHilkQkyO80IfFR70Gbn0v3wOOgUYPK2VqMBMsFK2ccPlLAC8akRbtXs88bAvL4e8xYwcTRN\/ot5+i69hn13o7PqlN+gBlSfYzY\/yufxQtitc1RLgBOOZCzHFDao9IfN5WDnhcHLhbbP8VQ8sj4ycVfeZGJUQsQ9w+ukPlDIvGM5oL4102mbgtx0sgUXKfH3EfFbIBzXQDOFROBJBTMvSTaaOsaDUFso1salJssXcExfsQQrjnSizAOu87wyAqcgiI8JXbVJzTYkZP4pI0Hxi\/UM3gJK9KD+hNaIHp+niwqhjxRvw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAABQABZEakyXmHhkgrmKKgBu\/L0BOwUGU6voDyJiha6HEkeatQhhFkWB5GV8dNHintVctx2RL6GKffBAGEKea2qkNpQ\/piTvOV80VZo8JH2FvxOFg40S\/3Ysq\/GB37oSGbjTfw3xJckWuccjKe9ICFXNB7rRLmqM05wC726ZCHvzUGtZVm4AaWa\/\/TaF3d+C39SQSJ7rpm5r5WZef+VPEnSZEcC9E5eH1aBnMEweo1Gvz+wi3UG\/3OKAF2yG7C1ZLvJDAZdC7zWa\/5hB4d9rR+DMt86e\/c6LwIuu8IOi4mHeB8jf5JMSB05vA2Gz3ggq\/dqj4WShVC\/BzwrkxYJ\/tC2YS8pXS3HtzKQHVQAog3tdzv9W41nAoK4IAxMzmRS\/zaP1oEM3W4YTHPbnzSNf0lfovw7e1kQJ81BmEbUHHgPAH0AE71rB0tD9W3Srmn2+mJn8\/1jMlvBdJrZiF8pwG1RiWfrmB6S0SeHnS3JBD9pnVLEE0EC9rpzv0HOwgmfIEZ2e91rUGeNQWa2ZdmyL2moYYmUY07FeeAJg\/VoZocP6wlZf9GIB0poFd9s6uzAHgzwyuuPOi+K\/E6Thb\/bj0dUUkmJSiAWvqvsyG\/viZePH1a7Y5LlatLrkBseK+fIHF2IeXcHYw1RRoaZk31jvao1bT9SG3be1BEYMmRzVmgoZ9uMApjPk4MJBosCB\/GdPnpYv5TGTtVYwcwUq2KOTXQGMUEhXek2H26046HyBM8QM8\/SCVF+DzzW9kmCcSXV5KM38r2QMylsdZl7wNg6bwldr5zP5L9qv38CNlKcdYT+yB70BFHvTo37Wgrs20s0mHt4ewulsBhOOGPPfHQMNxvcWc7uAJLooszqRF7J6l+IqeCnFE43NXXLX7OvHkzewfl8Ft0TNxRdvatOMKJFyCIrK6jPyUo8aJ7f9XsxmZSVE8SWljrKSyed6CB7bd8hr29T93KTUMOhN\/MhNLjG4j9c4Jw4JrLFQdLC3eLhokCoF9QG2MQmCdfrSSdUDmbeGEAPJA2YiLgpNg5\/2WSTs+1A7vkuTwCZENtx0VwEmlZmKbcL2S5Y1kCG4Tb2dujIYZflBJieBpy+Ig4qUMAkhXn281uwu\/u2KoqVY4r2FqsEBSpKRrhNgU24OI9\/\/Lmi9otouSi99KWfiN0Dftj23M1DeFPm\/TYfSfZZNDXMl5sIOHfKBlGxE\/4oJA+No2ohJW6llEwaxOj1bMe6BIHQplpRrKrWLkzD9wrNOc+L0VndBSuFub1YuUON86BbmvDYFPYVVHT61PyAhSOUznddrHvJLxe+XeHeeAOgiZltYBKrVgvVqqaszO\/GNEfYB\/H1e0FZxGGtLo67RsKmVjm2eGg2nhTtTy+9Am\/HUIlcW8qOqZYHvdy6wih6ywSb9hS2QYk1sOVxQBWBk9S78lrEZCqczNdpaRV\/6JFwOgtQ0mW0ipYHj89bKxNkZS70lMqo+wvX4hn2E7sZjRZiLCvVZdXH0SJgB96w5aatwV+s6N8G2jyivx0J6eSd8oaQa\/xqNUbMZjYh9DuEe95PYj3TS0M6a7xD2hGh2BCkdIYc\/gBW8GtnAYpnqFYvf4JJywPC3s\/sb75drDFNyHQzWVAyqQa8RR4jO7oFewaeNG1KLgteLvXIcQ0VPmSg9xsbcHBSOW0t0GneypiO2SBMhC8roPFdwiPod0xVTfed2PI=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAOwZ4AABAEQC5CuYoqF5h4ZLy9AG7ACdP+llAAkdWAc94e8S4xAIqpLUtObS1mewsVqAU\/Q3btMo=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAOwZ4AABAEQC5CuYoqF5h4ZLy9AG7ACdP+llAAkdWAc94e8S4xAIqpLUtObS1mewsVqAU\/Q3btMo=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RTgAOwZ4AABAEQCBCuYoqF5h4ZLy9AG7ACdP+llAAkdWAc94e8S4xAIqpLUtObS1mewsVqAU\/Q3btMo=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":64,"pkt":"RQAAQAzFAABAEfpmCuYoqF5h4ZLy9AG7ACyU00JAAkdWAc94e8lF8bV8vJZQtf3Pzp7jcd4UtooMYMN3HiXhjg==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":64,"pkt":"RQAAQAzFAABAEfpmCuYoqF5h4ZLy9AG7ACyU00JAAkdWAc94e8lF8bV8vJZQtf3Pzp7jcd4UtooMYMN3HiXhjg==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":64,"pkt":"RTgAQAzFAABAEfouCuYoqF5h4ZLy9AG7ACyU00JAAkdWAc94e8lF8bV8vJZQtf3Pzp7jcd4UtooMYMN3HiXhjg==","pkt_caplen":64,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAO3ZmAABAEZDKCuYoqF5h4ZLy9AG7ACeNg0JAAkdWAc94e7tU\/REFNVwMVrtyTysMFRZq3aFvugI=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAO3ZmAABAEZDKCuYoqF5h4ZLy9AG7ACeNg0JAAkdWAc94e7tU\/REFNVwMVrtyTysMFRZq3aFvugI=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RTgAO3ZmAABAEZCSCuYoqF5h4ZLy9AG7ACeNg0JAAkdWAc94e7tU\/REFNVwMVrtyTysMFRZq3aFvugI=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOxTck0RbRMAY7MLrV782PL5vFtS1n0ArFkj3jC1RQTMo5lkLTdbYZ4fx+4MKlBNo4HRyYQr19BRJtjkAtnEhE0khWZBCUcuztvoS3ULAwG3gqw+Su3FC5IV\/rT98UziWpFvnqswP7HT1FQXbt\/53SOdspEx03BVTgEv3zM+WYj5PGBHWdkcNZIIGDHrfHwsYFq0pIkf7ANpw46hMWGUHkKPloJpXFXOlgi1\/1VT2dZ7JM4r9Q3s4XE4BApoN2p+QOJWjyS2QkspSvgcYUJjg4mRaLerxCZV4x7nNjm5bGiBI8fd8TElJPxY9je8OG0\/05zYX0pABY3xP1n22i2dk89AM8H9SYgiQPC6f3+dCGX4CZcwQrUs\/3noQV8E\/y12n8BHHLC4GRpt+kJpgiRbcR31g9YIDkThIlAm0Y+C\/1woawbwj6xL9pMbJv3AXpCSytjKHU5uWC+WmekbzJ9LlqxXwOF5KiEktAoNaZ7t7\/xXDwS+EY0icEw7qBvd7ImnGKIhHgQ6XWmpWi4Ix1kKTJ6sOc+lCL5MIONU3t9bgscJVDMynSBvpM0K07\/jO52fq8CMfV7w9sxwuDBAxsgvzuTzH7EJ\/fQY1MvA6Wc+8wCNAG5TEk7oa11c92\/+eirMPO0A+nYVihGs3xaM9b4i5tUNy5kp93TYYO36uC6zSAjzHn6awUHeL\/XnpvZQ2vhxRkc0P\/eFShn4LRBuTYTzWUMn64UVkLZasyDhbSEYrN+ZyM0VzT8Lvn5h6Zl+sGiAE+caKk2Dy22lEVFfBf5z41whoe6fLK6rNp\/NVSk0hDg75OCPSELLvDMANPXXCsxtQs0OXeOZvrGRIxV\/lRR4yMPbsNSX0kyzrmz3kzyZecEPjYPBabyeKAbxPY\/RDJlK+qKa7q+w75+ZPyhQ9ozz\/WK3ePm3CffR9DZIc3Ae1r9KAB+ffui9BAVGFnx2n5LOC+m8g4tvlbwCeYuL9jlScxtJY\/OGnvHECUg+9t4CeP8LDoaEQJ3Ztzf6x+oKQkmu6bAqa7Ry\/gIepYceJEr4exT4+4VVAOsuMnToTcPqCCM38+5u3u60FQjjG3l5eaH2yHOohsImhcUJjkAU3d4UamjwMGkj6zKTccGWrW7mxUYDzD9W+LgNECRr4F3R3Wb4uwT5hbEobhcJESOC5lMRU9kO2HxgzK\/E3Qms5P3dDV7hdwwCTySevDGJoLNicifc+uGzg+FK9mWWb0sYz1r2nQDGZy7YJF9\/N2xn9wQcSyZ+3IbfY+Sf7XnetJMzJ5Y2RjgHQpUN\/HVY5A\/\/cwH7Q46181JvdaYzyk\/MWcvRAVaveFLZOljyBUgIyPwZouPGBG1ZPlqC1nZLAuJ+xvSgXdjRvUln3T76wITEDqV0oaz7bViSNx6FXFAW3Hf7tHJxxcRGQOCplnvunCUxSWhip1zUBnNr8sP84ChFcpc0BQBrmrxHOnkDycev\/xxHR4Up1CiU7u3HON1ngFJEdEMkVRDB2tPFw4X1L9elj\/I6TBAWxcw5PGYBIAl56v5Q7IMO2PyVfx2Xa\/siEV5Axfvhr35x31OHyD5yqFTv85jle6IzSrpMWjOH2MKKS9y6qqMoRF35xznhCf9ri3+Ncjo3G0Js3Bw2wzPkU3X3pUPhlzku2j8G3SU571wbCwj5Jyo\/f4s04GAi4UE=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0200{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAJQABZEaliXmHhkgrmKKgBu\/L0BOxpGF532tPXrseocQ\/KKQSUH6hU\/0GFXhQioXNBBZ4WzpGL4I5a0bPfFK3oRMAlOorJZ\/GOonWfpcYTRjbmvEk8lDZj0Ty5111nMZHglxFIwQ\/mZ1ArchgXur2GPRIBi3nxF5EZTBb7vTDMo\/ViTJjrx3XIDh2TDgZ\/wfx2P2su6vSoyxXn6yQ8COajKLxlO75wSX82s78X4bJm62HNIMFASmC\/pIKTjA\/WbZtCQg8+JchoVTsZwK0SklfKRYXhvm\/41o4ZAZL+T6sKdejQbVCacqog+0dDd3kwgR3Z6YjwaBbw0Ed08IVWmjcd7XWU6C53AN7xsOsRnYAhW1+yf1Ig83HUN9s1VR21dzVsqSEgWK122IwlMlqnOnq\/lVU8M5Dffs6ydsqeEvSlBLExU025d\/SrbY7XOJ8eoJgmOKU5AvHWOR3drn02g3DAc6UaM5+ODeMMm68chwo8FpWaRXpQOln7ZCCNdjdtb77+qfo7zTbSwjH9z0U61SQ6gfZupiSvmvWlrQ+MUyFPVJV1W1Voj16kcye6Ms3Dcg1mKyoupl6fcAtkw6eBD6Twrae4SO++Tr9QgpN1O6iknS6KOfcWY5OSQ1gK3o\/O8EIwv70++boA1+fdcfKTJtWOU9Rdf8wSYHQmG6Mwi4RYCXGd+DsKQuojiEIqab0M0zDdVniWyMxhwAQgptayj1ru+5F2wwuxETF6z6IrwqpoaU6nqfxfDVXQVdyQDn\/EB+GVi\/A4DYotVAFx6J0T+\/l411K1q1kvY89iFjvJkFrJ8zjpdqMUMNsYSaxKYCAr7kVFS+qLehrHJjqvd80z9q3n+iNubmwwnGZZgD9hvZUReLl9tJiUpQNc2YYAGv0wCFh3xHrbyb6a4\/D\/\/oA0nMwNXmH8CeBalhE7Agmkw87dSPgDHbfm2Yhv9SE+FSjmMFszZ2S4qiyXztKRm6aSQ2kMdkEF49Mew2cB7Tl7YZMZUGmf4HQGkPR1Q6yig97pW1CrYIIzG+CoEgmIpJ835ZquVwO42YQmfCcHtxBhBAhJSIXC\/qLv3thsWujOwKHg5zz5oM73h3ajORoNeW+BQIcwH3xbo+9\/XNiZHc6CLkTxA9C5ZXO6lnCSuS2qR4uyn5nD3l2\/dnU\/EX9xZAzmxttsUOG65vgakM8\/reagdr8Q8D3xYYwjA2LyoeysZA2UlHRyjdObOdGWlGs7wZ1L7dy2qZy6rN0f0MKPNQHhA2C22HWGVc8j5tgIkI3OlGYlNwvc1MjjKiD7VseLplRjrOHaqWOlfylSDBSxiBPJkN\/Mv785jv+z+vNqlS6sYFSkH5FpT4fZhPC9hm4olgL2X6pgLJCSZ13X9o3kpJrfeFgHDAjb9io9Qwo46ENecDNiks1iRWnyleVyExyGJyIF0hVSDheVZTGdusUdx1lBMISoVMOfJC83+TwQ78P6VTWatVlbDfkQVLXlNeeJqGzSUiNikxPnK\/dqnPoLoAThDLAox7UpyikdL5TWN4GAzhXdc2\/Tpw2F74S+nZIAfckqJOK\/yGG+ChJxhg2cnQn6xPYkAUVPx7QhM9+vMJJyPCse7JcO6dzBV+ajwbraFw7EOPAbvXDlME8C09TbfQG7Jtgh4JZRn1Pm0r7LLZFr\/6TfdKxd55rye55GO+umDzWCkn8W\/vxuNFAkaW8v\/0I=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAANQABZEakmXmHhkgrmKKgBu\/L0BOz1hEydOE6MclJU3RBWf4RDxtEjnVbbD4J1+wAVfwukEuOrK+LsOiEyJiC151OVz\/NJYpesa6syu7SR8\/gVQjQskFK1MgPHLv\/42ypl81CLZWzTYzIMxbyb8jQNJcn3f5x2PSxcn+oIa5XEYbv+2hADnROgN9fzi2iyHfvxfKT1WkA9ITpLJP4e254TKU42+U6IPDiEkhGWaiNtW7KPDGvD93KQ0H35wnVyy+mtIyoW\/mQ82+DpCnKMnaNj8GaPelEjSzyYOg+5WMVGV4E7HyfM8Bw0OlqOVMIc1tXtLJUMD38F5D4MdZwpZk1g\/jxftkHtr8IzfzObeo5pK7Ta+v6Inxt\/y\/IfQBidteIkS4KogH10jzwof+QnQd8VcLdOAZ12NMGJFBJ9AJZIVAqbifZAVpI4JbjQI8t2+GyqXX9XHx4f1MSFR0TgxbmQg2PfOfKeTp\/wqsO\/F6JISfg0atAIf6N4eTiPX9zFcLHjl5QvXVP7rbEaHm95RjzJ865JEjW0eG84YioF64kIyd8bzImd97hv+UPzoVSrUt7wu22987HEM\/FM0X9Y1wGU0upl4uusM2pj+74PD2LCcxaLqVtfN7bpqJhzSFNHcLB0fuhrjH7zVV1UYDzHqtDOVbALYBgJHS9v0\/yRSqF3ahzi2LKPu9x2l+Iww095nt40P2\/Ey9SSTcrmBJYqNe8sfI7JK0hAMEloWyvIiz5bI3EvQiVj+haLMP8enPA2baBwxex3t4ko5yOhQXwL2LCqlbop6Y3KblcAdF5PQc35FjiE3vguaGDWxZXM6bKtW83lxkV4C0deiOLy7ei+GYm8IZ2DCiyYk79uNFkF4AFQprNcTXkBvS6f5wsNrBd08jchNFVOpJX71yy5bBouXI\/DRV5mN+222dS1ejnWwJu\/TiXC16rIRa0\/D8YTQBJUOTj7JrldRtUcxvq6Y5vKi7SOgB0whHfw8QWLEmav9qEb\/y5jG+j7Hvk9io9gz\/lN8QVdu4Qdun9B56Cr7PCIORIo\/CfDwfW0EGIv7wiXikJCZ7WYvH4afpVTPN0QdX4bhXn5j8kojz+tRU0FcnbcINQp8d1cIDklr3CTEH+Q9gUeb5cWNGC6\/2xuicR1ktalLy41EQm0r+ZG2XrD4CFrl0ocjDd98MwldvYi3Lw5aIG6VjAehNsH7hjYloqc2d9TZDOnKbh5e8HroKuem3UkGxMaPzPdD3burFt8LaO7vRxlT\/kabog9OIQ3xJlRmY3ED7lc5ABZiL0pwU43bxbzaGBMFWjFDnlzpE7GBcTIVvJ2kNr1I80bp2edAqy9N1QYiRd78VkIGrrNgu8q4FyOSaleg0qTvBbqUdV48iTFpFJ2jiimAi7c1Ik5cSILke1zhc1KCnU9W1IbU8gz3v+0feFL7FULZEOd7QePT2jY2y8i2fKt7YlEBFLYaiaro6l8d2nxetIsyDpehSBFunQbQ9YK6wcSqBErR36n\/jnWXskA3\/jXF7pYU8NTjo3Da+vvLIg0FRXjdStwNCGMy5EJdBJQVwJgSbkxq4uRkfIHZJ540Sdbc7rQXVUAJaPqUxTzMrSSlj7pa6IPEjFZDXpFmkvhak5UJIrikRi51GIjiJY7kL4yzCxlxpxG4UATy+S6HNJaATlvTWXdW5je+Qe7yBWbY+B4CbgU4fAq398=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOy\/1lno2J4iM8imCVbmes9aVtTch+Ec334h0cf6jI7mprN\/cFC8yVtD7lzv015Uv5p9W4lgTSg\/iHRI3TfwvdqONqfzpBnm3qbdemxRAUn3gGLQsoe7fcN57CqLcztwqXkWOSQVILGGHeh4MnhQ4OFWi2PXQMz3bm5uJCZ\/Lu+\/eB62kh2xEBIA0Mt3s3+eZgil8VWGbpLIFtCY8KIrQMNPxs7ZymEuP8tS8GWB1DKLuYEvvlMVfdQKEyphf\/lNU3lXNqzif0wxPa+2BkvsYZMiNqtmoeHXRX21JNcbkjADNUhqKRUqx4XACufmaTuHwIlZKlaGCixko9VddmjWKb3JiGvp0JrHzPKcmhWjmHW2ejRHpoZ54vZ6tpWCd8+UJoT7iV9asIPLMGMASpMsJ7GfPdKsyKbhe5yRhGvK\/BNoASpyiONJjXzIp3kP1dMt3ZJDkX0AE06jx8V1dmBXqRitDfl962NPxBGyJ5m6L0BOXYcfz8jHMfwdW12XDTFzsDyoq9HsGGplXJs+TsbF4gbWQu715goABeAgyuAgmSh7L+zZ2azyyrJPrSbZtAVwgcN17bwjfO5+DeN+jsGXl+0MwwBbrU8Onkw5bs2Ulo2MfaaP\/grRkTVhOADvicmsPB383CecaCfBdl3dS5onNXNfGc63VlK2vd9W0lBH5arcqShX4O6cy3olN+Y8yDYQ\/6JpK8d5qtTu54XaEor36thWijpMTXbJmRpKN6jylG+EGklxjteUUl\/w1HE1pLNq2Ha6Dr4V7nZOevmgdeG\/i3TpZkMolgDrDt9vLhR6e6ORHeSBA6eRXOT5gQxuxHmr51epUPOnV7G+U\/Nw1mfe2I9gpnTaakMOy9DRV9hAx\/Bqz+IdLCVlMEF0yGY72auy8Qkw9aqET0ZVAYn5n\/34wQcfuAaEuutMz44kc7UCjLjXxKzJIYULETSMqV\/ASqkPwLXe6ra9rNCjGLxm4KEgGpLyADm29y+HfH8QdMYQbKadyy04jJsRzFqQSxSwBjMEPlpOGS7mkxAslOsGiALAAumpGSS+7hXSPXqIzjkGpO8EfbffyZuEc0JD0pzpKwgIE9Glp8kKBMw1ES1fgffglBEesLvA5yKhhoyYtwoFQ738Jec0cA5aFrcFAbVizRL5qFqjKzmWoC7KVeZjBXrKYtCnjsbkPMJBLvJZZuH9nC9Kl65QgMP25d88cs7LOoi5Si0BOTIJgetmgbC1Hfb\/7hY6Kz8XTG+k7\/HGngOkRL+m8qHqiPWqAY\/wo\/RWUVKxgkFHyk0R8ZQzo\/T+IH96GxC\/0R+OGZZoIP6m+FqdVUsz3CH6bU2x8++zpJUsutdMI6ZH9zr4evQTCG\/kti0\/jvwhh\/khrcFHGScY3mFXNu4qU0WE3w3OAc4jUBofWU0KcnaIFddx7D85BqYEEC8fRRJfFgxJLoamAYkzRtgNlRB2qTOyhJL3lMKqUi33s2hQvCZE9HIUhe92jMm5GVOqu1PlyfyHhoPbEF4UqGgMkZB9d2xqL9lRFYqgzT3KUAUsrljVM\/8paISaC50eqRAi3ptqguh7nORnE8bAXnyshsN2MlmdBWd8cXwu5DrKdxWsMuLoJrIYPApKhcJy7xqRcfMkWcdl5XJXSs6jr94mDZnI3lBmZRlfYdH988r82zW8t0IPFYp0rsE=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOwbY0+2x53TIfUHbY4tkV3DoGv2xJI6oo0P+8R74Zf2m1Gy9kJcNFMsNP+tV3Io6tn0MAxdt7boSmAwXmMJuLkBifYtsTL7UcLimXIvigVzvg99daMdHlskOrkfM0A5Q\/cWyGdPUAKcZqn2CDJYPC1P\/zuBkR+NSSyhr5stpbmd1oQz7h4PRpChhiEzclItrnjtK7B7L6bN9Q\/nkP5bvsTb\/WDdHhuNqAW+9oh2QZoW4fRq4SfJS3kx4aIBkWpQdO3hNlfzO2aZm2KiH9FQ54iFXuIPHYuk2xIaDvE8OFyJe1eebmFzfBcVIQ7alB7fNFwB55Vcd5Z3cBJetMdwc1dJE9ntEAVP27DVyfV1xmckvAPv+zez90K6ZQYxBoEFXPmiXcmaG4dwbTXDaqCUb3Fi+w+eAK8P65TyazAC7Pu2nff+9WxO2SXMig81frJA4+ja\/5NzvZqrCZBtSQsunEuP+2uprrpOhXwtaxmrhxvNdHcEAD\/qgegdi8d\/T353e5aot7f4\/Wn\/\/8iFFBnuR4OGqtY12w6KO6YFLPWiBpkfJMFe1gDqvsAT5Uw0YS3qJFiJC93V3dvxyu+7lN+TiF5EUU6hYy+8TOZ825QAUO6XBmC7dzHAOugWcXEVS3ylMQJQ+7JWrKHxEY4YDIpbuRjHIH0Y6kE1kwMQWH3pT1XECp6X4wD1lIAkDxgV7vRW4GuIQUQOurb0QcVjUdjzZWKhiH14a1feYYlS9MAxP7Mqsmp\/rNn7MG3Zl9YCh7NmucyqK+Y9tb913EpZTgxmTkktCxfB+zfw89VaqarPMELVYAxgrqyzCEhd6I\/O+L0zI9a+i0Nv8j8Q2KQGyUtXJl21LHvjrITIX9tCFyc6oExPoIX8uAfbCJ+Kgc3YkTc2B4H67g6npjPn\/XVDsvi5poflSGgD3hKyKBmb44U0bngvxYZk03kwM6HLOGkhTfVDxO5oqOE8iueVrPuyn0+fIbSFSeWeyL8Zwk+kzoXrL67p364adZtqE0p0WQ026qrt5w\/dOm7\/5F4\/MO6uymVJqziDirDv6s7xQUMOP5RhkIPC6Y+o3TVZudAO0t5s6P1zxOMgWXuaik7Ow6an9I00Wf6e\/UxwhVTP2IN+hbh281jFpYmA1iy4oBz5bKiQLN9g1Eu0x\/rAioNLuFMOvCiHiWUvbabHddIX1Q4BOsXwSPgb4bmZHZ7k71BrLL9Cvvu1jH9M1UnIHkT76EVfjThr8lOEFV32cMIMZ\/OGxnOdzdepHr3teX6BY+4tOBfZ1\/LOtRwbv5oLoW44AXg9LOzUlmcHA9ARBXDut5v5Vvo3GIRFnZuMsSc2XysKZVJQmXBf7ttoq0MdTnqojVfwB6+lDX4Jq5aqpz4W9jEP2VUoOHQnXf+8vY\/T3MT5jQNknPCvvHWfdzyMYL1tUrs8FIKaDU3ghkClmlJguTOBwSyARC2JixFhnXE+n5sPJUMfoE4xKSlZbcCA4WEbEfTX9WDvT1etoMz2w5FmJvZr2lSFm13ZBxPvJOThe2zoOvrp5U1oYerFWjmSOVzptV23ahENYTqU1srbmA0Ywr2yg5oXhNiLlwKDF+a5+QdEbXR9QU\/cvmvOa4S\/H64cOkJHRTxr5PMgA83Y5nQEDM316uVOUAQ6dOcStSc5Hr66TU2fGfGrlMdJS1z8qJg=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOwiNlA1FJKoaFx+xJKdusPiLw61ZUrMPriXQXNd5KCwN02vWmUv0f578YHAAQ3ptqEYwStyWrmfogQnNxj864mZI5lW9N+uUD7MUjd5dq86lUz2gY4L9qN6\/z++1EBsvka7pgkm5Rh1GVHm26HH5Rlm57jWqI120RUyJx2dWACfPCcuEoPETvg0ZHZQImDdaLP6BFv2NiduTEOIrhsiL8Q\/+KDsiltchSiotGOyhKkQ5xtIIXOqG0A2I4Ud7dC4uo\/eZ07oRp8eGAqxDkD3t12lL9wiE7meMUdQ47uvD7cWyilCHQt\/aul6RgrMgb0uoTg7SpmmSmLZcH8pvT4xKNDq\/FvYyP4E26VSxXa\/8yCIatpdwvtQXk59xPAXDDWNGjK8XSVUCY7kQObl\/P1If8Z0ZP66OhN4Isg1XqIyvdQ8L1yPS8teklM20A6wTlE3+Widl9Tj3nIplzpRVUamE0K5IdJq6J0QmO+kSD9WH3YV6x7GPx9L3igg6Mr4Ivu6f4kDa1q\/v\/Ki7dFWCDB5j5YY3vn4LGAn7\/gpchdRJExBV5B5E7iEWAE2XYNtU5yWKq6XGCvuE+IiYpN64MTnPE1G5vBjVMgf3dI26j1SYVNuMG8RKuybVheswIO3UGuVyS0v2+IhMGKHGAxZD\/ctH\/IC6w9nVwKBo2iodmTgsMz4zOR7FwZa2LaCkB5y7bzAKGvqNd0BDVGonphUKHE\/LJd1d5ng3CiD\/Sx4XXJC1n9pW\/WMIcKUH81JAa4sn+fsyoqG0XziNO6n9hS2mHqc6OjtrGj5eALm4InHfVRRlSxMFnnL2MFvYqk\/M4NBC5aN6i+jBT6a\/GnqYxf2tqBmiZ2n3dULu3fg2LbuFaezLuAe62diXM7q+FMDkUVtI816veLSPhwK+pbSfN\/Fgg6YDBy1Y2bVPMYfJh3baGxUGkv4vzxx6kNlbK6t5JLPj25SBYIeg2FcR+OBSJYZYnHbOvlYpN2pao07pU8P5pLTOizbTJGwFyqNb3jMBAYiJD2hClEGqCs0d3drroHTJvgJDKb1r4ajarcGgPJeT1y45JUANfsofFi+cfRLUMvu5hfFQN6orq0OXyYh6aT+kTGIyBs7B34YhquH\/DtzhbRF+fubl7POeeSfz5anGyOAOgCC\/BS\/8Jj\/gOBq9NUeSRuIu2nMzSap7MITB7Rn7VkgLFVkyMqUdVHCzzC8YTRmLpIMbL90q2O6NEDvYuFIYTz54nlH0IuJ5CzJG51hVX8MD7i+HL7dOYBNkoxzWHigSAidO6U2ZsMpMTonQxpD\/ASlLIg4d1cX2PJ\/v9g6wEPhXbWBIMPtJlvTX4PqjaUIpLELs+CrYd\/kiVT+rUD5LCwqUkZxr67ckjgWQ8GUvWXY3UEfb6UseciLofzO4guqt79+FQAmQfJN7zS2\/z44oRSpyaJb49R+bY4M6oEOPxoAsFVR39O6IxgL1UUZsOuj5zQ19E5VtABa0NwOpRIT\/Y2fxJNdu3IMVdUuU13bgtzYGsz86kR0N5aQwNhmxzST2De4YGTviIjN5\/7355OFp+H2ENhV08zZ9LFZCJsMg8U6e7T+6G0g29xP3yF4+zoBwi927zgmDPp12lVhdHj8jXxkFH8HG6WJIceR\/zdJQiuUZXRYtD8ozki7nRKvVnl\/88qN3BtZQcvHYHU=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":60,"pkt":"RQAAPCkTAABAEd4cCuYoqF5h4ZLy9AG7ACgYGFhAAkdWAc94e4Ci00EB+4ti2OaikwuXbsTpfuyH3mTH","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":60,"pkt":"RQAAPCkTAABAEd4cCuYoqF5h4ZLy9AG7ACgYGFhAAkdWAc94e4Ci00EB+4ti2OaikwuXbsTpfuyH3mTH","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":60,"pkt":"RTgAPCkTAABAEd3kCuYoqF5h4ZLy9AG7ACgYGFhAAkdWAc94e4Ci00EB+4ti2OaikwuXbsTpfuyH3mTH","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAAQABZEakzXmHhkgrmKKgBu\/L0BOyr7V\/q2joMPPselBjWDuSMAeVOIkoJ\/NlsrvxM4i30MeudeJiQlRZRGMklB0qq+tT0S1yCghXgqJLnv1lyAVqw2uWcf82IOThtOBTUleEZp1TpJtw7WLfCVTRufS3ppyyRxC5BrkBasveOVtQdzmagdS6cU4jRS++gg8HLDsxdo1XH2U7uJDQv0wKEtYJwXVmHT0mhk1mWRjohpABa5vu+vbhwPBmK+SXxmT6Fvp\/3fFvrTQ7UcDs0BXRUyRxPmMKuI\/N7kiLZ3SNHG+gciJrg\/aGuZ\/YLmfDWJ6vZMCdTLPZjH0bZBqL3XItXXh9JZ70c7B0WnxzbjUpijz\/Le266chRZw0LIoEMxeOJGoOB4LwIv0VZNRQkZ78UNXJYCgdKU6sWxgsWmkHW3JRMkYYeZ2Pbia8C2GfvbGqQXmrJHj1s6dU6OViEyevrhl\/VRK6NjavIdlJHJJ9K4MY1s1tNqbNhQgyRBUIOU52NlR9fFQ7iZhhz16yaZBtMNM9Ku11gFxSdLjycpq15AjDXpMsRs60qcPdEmVlaelykkrHWn1IiwubGMNpzZlMobE\/Y+frUl8eD9YkIR6h6nKUUUPO\/WIR1V35PXMpKgmeBN213D0ZZovdQDRX0gwBvUVARm9sGb1doKg9r39DEWQnkhCJ2yFTCkD37MV62LgJJ2lxyknnomkux0g6aQnDF4c4bcFioQEhG6Q7Shr4ABlQeXTbaHjVJyhsNFOeFk7O5CXbguMQst1hG+csJzX6\/Tfc6ElX\/F2Ao7tHrqg\/fh3gNljNW+hFno87bmNk5INDNT7DHeJhGecKza1O7OiOQ11NNItLM84dlkCwiQhSjHpj\/1G63bHrBsn+9ZekuaDK2jQIXOQQdO2nAUI8XJWW6YVpnzjZCg1tWzumrCrOKFY2vEjQtbqVN2eI8JucFTQwmtCqJjPnwRY7pUV2Bz7zYthI74dHCkiooRrAaNl1AbuO+Vacdbdu0mPB51wKJA620PTgSdQIUbouRcyNpZ0DWIpGoFDEiOz\/lY81eAjyPmIuqL8OH6p0gaeAMHRQSBXXh26uJ9CWflG\/yb9lz4ybix6pfFptxq7BlM015TlqIlliP935WMcINkS3mygJDmm90GeVYbibFM+sBqL\/ix7UJTq29vgZIep509HizkY7jOZt4iauVIL4UO+zRTNu3nWoTGoI0n61A9HMOWEPdkuces06Fx35GJNGe2cTsS3H3O4dXrbvwbqSUlBUiUZYgN9tIYHNjIhz\/RLuf3gcPAvVY904SLLmypfrBeIdg140wklCpP1Oz5zZ8EsSorAdfjyjNepGcZLpEuDx9sgI\/LarH4rQd8t0wIfD0YqanfGcT2nZXb3iHJd5JYaAm5medurfw\/9SQUEgPQd\/SwC8SVKvutFhGGIvQ1Z4MvZ3\/n6kt+gG8OSOH+qzdOunifE+WK+GsOMPuxlJhVA9bQCBciluxfd+Y8JafzT1ANvP4XyPcrwtWSUbKWvHTEX+DIddBIgPL1sZNMTAimP3s0BElgOnc8sBoU\/lgYnD2zZoOkshlAiBGfEg59O279qJSZxUbjlY7aVF4pJoiqdGECY5TB69kQ3CAillQ7ZQwTOFLZOSDDD0tK1kZ9jvvCedjvEroElwFXXqB3tPM8VydMzMNXTEpOKQ35EX4zMxRJlsc=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOzZ0k6CM3+vz7c51vwZZfabQ9rYWLxrZT4mTe7Z4WMa8lCmadpBzhtNH6G\/U7x\/Ule4r4FoHp0egotzwV8tVwT5FqL0SkVJOk78uSB0gwchUiIsG4iU6katTwYgs3mXhMBKOA6Hba6mAwIqpFu0dmTtXiJBorVjHjUzOMGV30LVOOt4dgTCqkDgym7ulhcfC4GhUiuJl190cdvVAZHsaa\/EDB4+VYyq9Y2z+Ip6oIxypyuHgiBTKdXsRmdb8bX1UxjFSbL2my\/XfYROsRjbHWlMRz+0cI+NG5NTBoZ9r6mxr0LBKYJxMDl7nOb+L2ETxOqIspwifRySqCTYHm67XdkiJuslcYR5AETSQddv\/YwFM+zbKP8MCRTEx7Y9ZUmWSM4V6VUhT8mBXnfO5T+BncPLLjobNFBYRAGo9UVNbZnycF16WvatnipIhTh4MDsXPYaT5Hij8fOA18+nLC2LKvCZqd7g7d05ZHmkdC+Xey6TxgXZ0ZDWoy5r02GoMFfmGm6PH3C0cnw\/M8yZNztIhV16Do6C2n+b2X0kdcskJE1PPzVPyjb6Rl9dWR5KnNpfc9CAn5\/p1NqcHwHNh3g5nW4jqTkwvJX4t+0fM9mXD8+Gi37CMQggGqkpIseVUdby+t4d\/dH\/BDjpRFCpIRuEse4AJp+r10w6aoK8uo+wEC9ZB78A6\/yBgpIM35kq062M4wov+kPK\/srf09vRMIIRwsmse9aslOKq\/KNA1cdXKXuHj0LcpbPticRDUn\/egO98AbmYa8JGH\/JOK49Tq5Ru6mSptPFbWxDR\/GKVVwaW1FbsPXywfgYwNGSXXQ+oZcnyAzd4+SYUK1N\/wVwcUI1Zg2bwah2qlx5ybN+wa6zmb3LqfXmtGkrItMR3oQjvjKG9UoCNKnFfXHsqUg1QQtf8dHhnAT61WmrwcCMdzXCluAyOKX0QexOZX5ccmn7z35nTcd7Kjp32menJNjWZMGUUwSDoWl4OzQk+K0\/y\/4aCHNBy4mRwFs30mztr8u90+7xAFPKTEvNA4qMrLLsyoP0hMHX9FEkYmrp5Ah10DLPy4TSpZ4tfnIqnWOcqtNE60606l1F2LURruFpQqwqO8jnwHPwM0ynf0\/5X21S7AQN99sVt\/2SsZWpGf+HDvgnYIM0mFmoIBqbDSUrwvldsWwPvSz7NMsK0N2u1Ay6rfFx286R2sF48E79LqhjbMFRdFKQ2Ko+s6JoZUE\/c2gNnZxaDTUpWWu3SnqwKquiGNp5F+sbi9RcxE9UdfNP7nosNAk+5t4zceB0GkoE\/AkDgminWM1xeWo\/qFORuNX7XYIr+3N4Ci0JRTyb8+HKifMULDWIqVWbxo4svfXb90VnZDR39dwUbWTVdJbC3jATy0YvvxrGJJMQLrNmQtCmBAXLRQo6Ve9sax3BXs9fcyP2Cej8u5VBXRZsUQqvzaS77OA0JpaANWhBxunqa2Bhti+eeLgVsp+bUCcoJzvgh+9KKUkUTXIoElQL2V9go+osBypjeguK9waDzwKILmc+2f1lhR9Q40e3FTMCjtg7chgu5T9i2xkZKs+Sp8zk9r5N1fPYJgut1gPl5l3tGf6Sbeb+g14jZptrpKQI3G7V9DBSvUb7JcNoxCHvI18Jg9F0gxYYNII8XE2C4Ja20h15oPlGKGFKctXNZaTuUx0I=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2001{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2001{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOyC\/kf9eHNQLt\/ivCNm7Sp+72T3NhfJHD0mrVxotbQolYMjBaM902Xblzo5USkgWuUJObzGzwtzdA1evCn5l9R\/xRBJvHfD2h+fRPafAXFbR2+edrOG2zFKzeFgftHjDkhKIkn8Osq9q+tPydc58xLAL6TDFFWKvm1PQ8\/GoAHDWVCWL5Vmxza+TwXZbKSP37id7y1eoi70AJeI+vjndKwHRcf9wOqAgWLdJnr4POY6PgVcKX2crVR3SNnYMU054YahGfyf1vEvvET2zMlTsn+z087nTloDVxeyalSI3ZsVH9cQATWULmVqWjhADWFKuGmu\/SqXyzlddwBjJnQb6gnbN9BkZlfQYHT59i3jJRjv\/1Arrhjh7JdDcweURKlF0wOAm8R8W3dnznt9dM401yrsFs\/DlW3rKb6w88vudRo0oCRu\/NaQPPRrBTZHnH6iE3RPFatB2kGE73M43LKVjocZiOXBoTJSdEA72F19zvlu+UPb99SsrscZncRMgXznPDUpD0Afy2DasOya2GuxEmRaEUxna6l4affRRF3arUjhbriwhGqKH2k+uaB19O\/8uSz47zG0Qnkt0MTDvAo1VtXYnh+nvZGDJlrk8OO2VB1Bam7BvMINz2m1DY3dAuBP1Iw9nceUYLqaDMEOHsAQSpKguVvNgWaawrr8UeJECWE14kQXb7YLdm31H6Qq2jeeLHG4C74meMn810jbdJgNEA5SQFl4HX50++e+xvipPxgmhnGGp9JfIGvf73q062r+ObpqPVY94KbNxI+BgBX0TvVZqQ8NOBVx+1WrgwTeMKfRq7DpE2IyHm7hHZHTcOhf+TyafQ91gFPCzFXk7lVMKOHtjMLGMPsPPLd4xNB+g1Hn5kmYxQZZYub8KbFhCgjtG0WSC1R+WPzRaonGBxKGvvwwOYeMY5Ee4OhF2sJ8iBd5PB11+Pqbdm9r\/Kx5n8aDquPXWAeA1HsQunRvPInE83CDbdpi5N7+ffbv8tYWgTPy3tOkja7AFRttDXlJH1ck4XZ85CaFwjCbPEV7c6P9mW7IJuQWjw277k8X7tJswAtmjHd76pG5DG2XYHFqg1B0q+DrRrG61Gn3obfUx4+bdxhDNYLGUkjxcH\/9h58soyehXX5tEzdQrA5jhVOPGnR3J68sVxCRz9RNhY2IgUDd+hz55KhsVqkj5vXdG9iGLbLUMUEwkuClBg4jmv9FsgV6XioWXSUBCCyBDtUPpMorQwYM1qzOyYFYiXzB39A3PANYkBjGj5yxMHbk80PUpSAIjWHbXkdOa0ukec+GW+8ln1iZ8BX74O4\/qcgZlbCUn30OV3gXXBuSovDGKxtjPXveaJL4QWpfT0y18aQDB0f4BQKbeZUBJuMTylxHCwq6NlLV6fhFyZyHn4pUMkyg4nj06I+q4tUN67Gt2X7tl6slFygjAPW0e45it+7MI3d35NVtIdW8ngXDxr9lTCU449PTIDuozJErjgpsKv+4XKlHqGZWdhGQh1vMW7hbBv5xHBNMKovz5P43eErsG1zXjs+iTOkCTvz0xyxdUQYO+td4\/qPveHUaZXKNmK+vHaYl1fiaVlyVjN23LTz0j7cPOm7NYZEo+HbEOsGkL9R7lNXnJI4DyyVhL1GxVcMpaxESdjYoVzjpku9MTu8La6ORmu67WeiBAxbecVA=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2001{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAABQABZEakyXmHhkgrmKKgBu\/L0BOyq40g80UgBe82hIL09Qt1bJq5ARVSdmAu+Gibnox06CNN7T2HwLhU1\/\/HdtXJAPwk8rFW7DO9M8BFwN+eg6ESMirxryd++J6RQ\/NWc89mk9Q0eEGD13f4SQCzSx4S+jUeHd\/icDGzcHAENdMcm0cVgKRSJvU5jRCuANiERKQU49c8b74qg3o9+wL\/0jjh2fg8V5gxb6xXlOjoR35zKdbDysxPhcRKwl86bidT+4aRsIZXnMYBQNAyAffnXNzy5yhAueitlpOgYEYj4\/8pjRo5Nkx0ULcu0SbyUYfc2nhL7K7h1vtFh5zNFEgD53SEuZK\/d\/6KBp2eekin3Ac6DlR5A5\/fHyFjuSCkUOi4QdM0ewIoDIWSJeOvXw8yJ0QLK2MFW+TUsVG2nEnpsSfuWLSruZX\/kqiCKuEiLLwYMRXLcmFcCfAd59CS\/84xh\/WwKPesDRkwQzdQmXSuMjRYMVNEVpe8a+pSZ4dHTwP16ghcQknkeYD8fUfUv48IUeNkabSzld+Bv4KyBdsEGoKXge8i5zz2LnEJhEmbc9V\/3tkAzNdPEvgdhgZHXtRPlodHSBR9hamv7UooIbqeKJawT9wePImSJxXhg5uow7nVr6NSEehlDOg6Tmg+IM6+QME23OFyqg\/glmABdBY3QN3yFb+sk3txzukO+DkJeWxMB5j5tIcoinkKg5T9UaRrCYwpz0BczkWNOeuInYNuCL1HyTMMn46xeaNRz5ehE8g5vd7Y98CR9+mysBqQ\/0XxkKIaXU+\/AQor7xg1Xra0ZO\/ZhbfTBW\/W+1fEkMfTIDDIL\/qI\/G8KkH2VEuDRnY6hcyLuQnxmdq3qr9STHD12HU2M8DE+yK7arglLkWPoAOGLLmZMhnkeymdRvfVHwDs87uLL1fek6iCE0wqEXf8fIkp7jQ2VHwDUk246Mt\/oKXVQJk4iCGKf9ODF9NE0QdsUpucHBSYMc5eEdkY\/GjDxJWWtVndRa3B31vEoapYZwUtvMRCzeK+DUeszKfar6O8u6nLkUnRA1fBro\/H4I634R99rn5kTq7eFlGdsCFpyeuexOfDFuzE2m1+F+f55uWYm0OZbJo1Zv33jfqScyHjs05it+8amMKlaAwiD6eWGYNX8udt1ckQczamLqgU\/eHWxDAZIZMIg2RS9LdXAb+gtMHe\/p5b4PKN7KkW3ioYDzK\/7G57s7oPS9kshUF\/R5lYKvo+D3O1jtIWUl5\/yYDRCD8GwiYwlrUkttvTfSYogWLkF1KaZr0VrRC1YRGPejGGQvXqveVP\/mO7pFleKYCowtZi\/Whz05PjHRj1K7kvNhQiA0hEfdbTWlm6K\/xRBnHpJtIzHTEgC57L3EZe4739\/Q89eJqZu18GE415kHEdZ5ABQ0agux7DW0Y9zsi96YkuE2DuuGcyYBR5r3Xvz+3WJVp\/vGXn5dI1HB2mlv\/Zulg5zSC8nesDaKvXGW2IGSAa\/e\/9qxSfZA2lspZCsESbpbQpam9RsgiG9Amm77c7bz73W+lI8\/eKn4taqYmaQogfi2ejd3knypJbfHQcfnd1rSxmWKM6MV8Z3CqQoFioL8wzoUtqVkdySYBcxavlEp3hoZuclGCDSn+QIO6IBWMvim2PtOOeve4t67bnVYi2fKdA9fvGXyECe+EcFckARxOzVBaW8Z4mrIeF825Yc=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOw420tns3JQ1eh2Vgwe73hVEjmmNGaTAFv6yeAhkZ7uxRd6ds\/oZlJQONh+XFHnzhT1kiFikhJ1lB4JxiSKba1n1KWKWVrWxbtZVA5bjOXNcsz6Hr42TVkzd7DPZCmifvkJhMUqyse7OLdCkP5GPv6lHsAw2O1GjYZI352pgkSEZ4HIFO6P+y7Zpeix5I1Pj\/oy6KCIn3CHWc2B4BxD3+75uiI9SbEGPVrCbvGetvriATHM2cj1lNBXmiehQPeSgVJwRGFlxgsYcc5ydbjv9mSKsfiCZDEI5DQcn5fXtKaDgopRv7iy6SgWtVZIjyPSeTZIQElQc\/c1zkK1owV2tZHoApsOEe9N8+ACHRPdEal7f3XH\/079KJ4ubzRVPIxzP8k3mTx1oMt9fWxf+ZxWyED1qoP8KrIQKeLrbfhAKi6kinmT4qRl\/q0sBaaovx3dbxJmKLnOLwdcRJPlXVKLEvHD0HHJ0CVg0ZDzNr\/B8LxMs2ho95gNjfnr5wI56lO585c7yxKyyma0txT\/pfP5atN4Ku643odb8pdsPUFzyABO48Q3Jhvx8z4JAivpKEgeehEL7CzzHKysMnVRDefM5itHFSxoYJJgZkARVJHeKVrlgAzgC\/+V\/8K12taYYM8vIQXO9JEHLlrlCLczuGuG+1IpW+gHCCMyOkLM1oF09VLms2Y3rpqbIg7j5yxKTicDV2fJxFHGXPrtXhDgedYIwvX8RRWynnjhRivmOFe9ZDQTRL6KsBuIzi3aBAUeOH56KsqqILrFdivxxF68QOAf0o4gXA+sOCi3LVoeeUrabnImYBpwxpPF2I8V+sBx0HglQIhT6aEMrD6YPJP0PvTSXbDdMAHp\/AMmS+1VSMvJWNPsQ9oJOWuFYqjSU52l1lHgwBbvWNK1B8K\/FTOHL7\/WCl6uObv97F\/Wf2iDIT7XYjtWQDrB3bmPCBa6L29rvnWBj1NuTPxCZh4vl6pmFK+34W\/P\/d\/rpMChg12YyGekFXEq7cidkH4csghCeVf3uX7v57cq2LbpWxjPG77dqfHrqThRpr58K71XumNSXiolg96UJ1Z4i+N1zmhTdzxu58U8NY7vyJZMaAzuI2VMNi4ivIQHL2OzO0ixIdKmgNrtUUe0vp0BG0WHd3rc\/IBLkzys6vvvcGQN8IlG9Wavv5X+7gMxg157pEnxkRTEB\/K3AnoJccoFT\/8jHccAWIxHv4LC9JLeJXAQC+fEcNfxNWKaXl3bgoq+8lkP9NdBBuTP0wgYA73h7sjd7ByM5l3KzPod7DZmJZGRd+GhUZwkmdtdRGHSNpx8ZnhZD3oZn63A2VSqR38aF6Beex4bf0qUKhQ87zDYudqj5R1J4O7nlozMaBYFcwc5wyXhgiE8X43LJoUEM\/jHpUca\/UQhcKXzlg5f2HKiG9llcAweWTi\/sicjAclgdYGL\/e6rq2OzfJj+Qgep5kMZBT+WVQKgM81rDnY7v0xa\/S19KL10amgj\/1yidx9DclAVHZGw\/3yjtiQmpfAUf5Qid9T8+p6P\/JISV0tU6GVDE0\/rIX+PrW5BWBBTSJf+dQEhGWmmW+14SFOO1UlhVBCSlJ7hD6kQH+hpjUQZOxAQFAzt\/azYMxatYmCylsMk\/Pm9kV9tMmbWF6JEo2NQG8BQ+d2NMMC4HoBpdSo8wtYcV2mmdcs=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAOyIBAABAEeUvCuYoqF5h4ZLy9AG7ACcRzEdAAkdWAc94e525ij15KaLTaYnu\/B12PYfspGutUNE=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAOyIBAABAEeUvCuYoqF5h4ZLy9AG7ACcRzEdAAkdWAc94e525ij15KaLTaYnu\/B12PYfspGutUNE=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RTgAOyIBAABAEeT3CuYoqF5h4ZLy9AG7ACcRzEdAAkdWAc94e525ij15KaLTaYnu\/B12PYfspGutUNE=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2003{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOzRd0JqIItavBEtx+VC8goyWQVjlcgfHXolMwAXmdmr+kGV45WiUWfDhh39xYoH6+DOam+RFT3uBR2Jr6GXMVmiwzaU9sD3m\/ogk17rv+qwL4CL0ye3HJcq+DeN8cb6UlRwVVu9XNCfhKCm0X2nqtiSWOYjsGG15qe\/MGf35WaO2ZoPBZycSSFjQESZGp\/N1BquOeieJ8inN951Qmv7Jnbqt4nwICcmu3oG9dz15HZE8ukna63exMVPanjFGzMLhmYiop1Dx37EjqE78T8imdV9HR9+3exeV7TPyCdM5k5htBjCSh6M4KKSPlI2DUamCKl77q8XRcEr\/py39k3vl2ZhCzun91dodNbwe7cTAhFm3DOJMryiCZAoDwgEv0ZgyRTEkOGEnLPHnyINonSVNYFSwe7mzIMNTl752v6PJQ2bi3rDIE6gCWGEkJo89XDHYcoFyq3pg7M\/F\/I9xU9b4w3kaSUbLDJIYgyCoiCIQc2APpB9ZXEatzKhK9ky4tKkKFKeMEZbV\/iNs23ezgurb16ebx72lEnZ3BwEeV\/v4mbdddbXFeXZiCsk63R94ehQvEXcR5RRWAk8QyYAq0utq0N2cwdDA+mSskxpeZR5UC6BMCAmd81chIGvbRKOseaswIz5ctkcMAqXLvjzSfrfvz1FuLHUfjdJbk89aUO+HvDmeloUxS+jTbaICRwjr51Y5fdWBLAAfYo8G7Pqv70U9QL4hDD5YxQD0gP2dDD4SmkjqjEAqzSpEMehy7Oo2DSvRp5+iuJiQ8OaKfvCxxXasWh6izXuGPIqCkLTdb0o7ChPHZLHq42nZjbWoyF56MqZZJRTCFLPQxovboetxtwPtrXjGacU+Xx4dhl53yeNRvZ+rbYUF64jeoQrsFSPbz7yfE6sm6BNjqqccABrcz4yw+8xqyUAIHW0ctc4pyhb3DdKVEFkcEU3\/Zc8Vli7FGM81+MNkiQJaA8Vnt+dZj8GhVQez0sG7D5LETGAe8jpNZ6EwKPOSE0b\/dJGzjYH8g+QzP5uoQCy4YD4GzvmFGbCETkdRmpLz8enqgY5nQxomRT9DGFuDL9WIA1kqCoCdjqbWYZ0\/w+eWy3mWkXhVAbcRXeDLHO8Zksji3gI7o1a9ea4FJYbkreiwUElcINRbxEF1nDuANbHLp4TeUsHA7GrEXn9abjpqlZrKRFaTAjfiNInzr22+pxUlK58C0tzl5SJtrK75awMv\/Wrlg9iESQBE6IBzpULDFLmm00mHQXnIbkXAh460TYrzsjtluc9YvryEgg83klKtzJHie745m4f2G7NaLCp5Bh72xPOg9cgkpJHnhRVdVj2c+h3XidYMBIWtlbuKhg2vnrj+JhIgke6fTsFEazSYs6yWKmn2fp1kGzzSKGZRAeIFOC4vzG7DEk2xL2S5ulSyPMBxzzO2vf0547wsfugIe1f7thFr2hjgHKuBUboTFzV38YuEGPhANFUikRs35UvOrlGU\/kZhO3yei69wfsC2TxTikJCFzqvZycrZuaKaO6xmEK88UVcWOqgaW0cWRYQBDoTWQ\/zkSIrMbAUQyZNcdekIR5bit+ug6Daisq9bLSzXearwqzWVNPhqgc\/3HedkgNZvGVbn8+nIi88Wt4iaNNbJ1iZb0PkaMIpaKT5yzHF8WvO2tQLNAJZatFeGUL223s=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2003{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOzRd0JqIItavBEtx+VC8goyWQVjlcgfHXolMwAXmdmr+kGV45WiUWfDhh39xYoH6+DOam+RFT3uBR2Jr6GXMVmiwzaU9sD3m\/ogk17rv+qwL4CL0ye3HJcq+DeN8cb6UlRwVVu9XNCfhKCm0X2nqtiSWOYjsGG15qe\/MGf35WaO2ZoPBZycSSFjQESZGp\/N1BquOeieJ8inN951Qmv7Jnbqt4nwICcmu3oG9dz15HZE8ukna63exMVPanjFGzMLhmYiop1Dx37EjqE78T8imdV9HR9+3exeV7TPyCdM5k5htBjCSh6M4KKSPlI2DUamCKl77q8XRcEr\/py39k3vl2ZhCzun91dodNbwe7cTAhFm3DOJMryiCZAoDwgEv0ZgyRTEkOGEnLPHnyINonSVNYFSwe7mzIMNTl752v6PJQ2bi3rDIE6gCWGEkJo89XDHYcoFyq3pg7M\/F\/I9xU9b4w3kaSUbLDJIYgyCoiCIQc2APpB9ZXEatzKhK9ky4tKkKFKeMEZbV\/iNs23ezgurb16ebx72lEnZ3BwEeV\/v4mbdddbXFeXZiCsk63R94ehQvEXcR5RRWAk8QyYAq0utq0N2cwdDA+mSskxpeZR5UC6BMCAmd81chIGvbRKOseaswIz5ctkcMAqXLvjzSfrfvz1FuLHUfjdJbk89aUO+HvDmeloUxS+jTbaICRwjr51Y5fdWBLAAfYo8G7Pqv70U9QL4hDD5YxQD0gP2dDD4SmkjqjEAqzSpEMehy7Oo2DSvRp5+iuJiQ8OaKfvCxxXasWh6izXuGPIqCkLTdb0o7ChPHZLHq42nZjbWoyF56MqZZJRTCFLPQxovboetxtwPtrXjGacU+Xx4dhl53yeNRvZ+rbYUF64jeoQrsFSPbz7yfE6sm6BNjqqccABrcz4yw+8xqyUAIHW0ctc4pyhb3DdKVEFkcEU3\/Zc8Vli7FGM81+MNkiQJaA8Vnt+dZj8GhVQez0sG7D5LETGAe8jpNZ6EwKPOSE0b\/dJGzjYH8g+QzP5uoQCy4YD4GzvmFGbCETkdRmpLz8enqgY5nQxomRT9DGFuDL9WIA1kqCoCdjqbWYZ0\/w+eWy3mWkXhVAbcRXeDLHO8Zksji3gI7o1a9ea4FJYbkreiwUElcINRbxEF1nDuANbHLp4TeUsHA7GrEXn9abjpqlZrKRFaTAjfiNInzr22+pxUlK58C0tzl5SJtrK75awMv\/Wrlg9iESQBE6IBzpULDFLmm00mHQXnIbkXAh460TYrzsjtluc9YvryEgg83klKtzJHie745m4f2G7NaLCp5Bh72xPOg9cgkpJHnhRVdVj2c+h3XidYMBIWtlbuKhg2vnrj+JhIgke6fTsFEazSYs6yWKmn2fp1kGzzSKGZRAeIFOC4vzG7DEk2xL2S5ulSyPMBxzzO2vf0547wsfugIe1f7thFr2hjgHKuBUboTFzV38YuEGPhANFUikRs35UvOrlGU\/kZhO3yei69wfsC2TxTikJCFzqvZycrZuaKaO6xmEK88UVcWOqgaW0cWRYQBDoTWQ\/zkSIrMbAUQyZNcdekIR5bit+ug6Daisq9bLSzXearwqzWVNPhqgc\/3HedkgNZvGVbn8+nIi88Wt4iaNNbJ1iZb0PkaMIpaKT5yzHF8WvO2tQLNAJZatFeGUL223s=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2003{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2008{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2008{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2008{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOyy+0stsdsChBir1eNxnkqpp00cPp8anUwi6rajYUqZHaPxmRz3Dw2DklQVQFuHpj1TghBKGa40nXOTJapKed+t1zSqtgD8W916d3sW3WMpCH7MhhILL0AZH5E3+Ilo9oAl3jHlj6Q9uUK+a9kSJ85mNXB6e6wuaR9z03h3Ghirzquhk3bumF+EoYZeHK34zH014eiVhSibhdcyJPHx3k+8QB5gJwCZpn6ye0fSjIJON2E1qLtXG67Z3tIx1YMAJhiRXgggwuXxGlh27bnIPrRJcqEzpKiPe1Ww+Bv5AMkRk1b6PneXFU1LBMJLTyWiStqQPQr9KtGkXYvTDDG7wiaMK6S5KTZSXIb\/qaqOPMIaGwdxnQA2Mx5HOWd2iofcBILFmpUXeEad2L+ji22PPBp5L+XE3krToEFAoaqMavTVTc0wjGv8mJJWcxuU\/dLvM\/SQCdl99IBiH2LThoBXkgdGF9FAP9kQdXhpzJOHNvgIL\/QuBYHzsdWODJ6VWqNcRl3rQm2JJAwZLN3A9mjy+CF8Kv3diZW9fKnxyzNUr0iQb+e+CCbsm07jMhWIHvC\/1Gu7FWmVbGgcnIwA7rwKMgFv1o4VE3BEMCLKZSUPPy0y2K\/vtVK+n5Y832\/aALLtK2KNTxLYq0MAdDfhZICV0dJah2ekNfa1BhUHZsImTS7qcvtWGBYvsGOdkZIJEIoCPZdSOP0qFTCT5pCQQkMcYE17F2lrIP97lsFwhrvDxEO4BLdh8TywUVcU4crRtQ40bo9ShCVUs1F4OPvxlFljySznU9oTGlKJp1rsI3g1tXAx4JDQUQ5gOpMxpplXV2xUWiBR\/PDDdDSrYgzUgUH15dSGSsr0isCNqqlsiGpcmdBPnQ\/cvVH1eL+z9rrFXEBXvr0vlb93xePZd82+bCwM\/rqcdAskzG32YjYL41Vb+p75KsLSlrEzOdDd+V0lLa5DWYqeUPi5BpjR6v\/2ihVAIiiZHxjKkaV6nXY3zjQ31BxET\/tBgPIsvyXR8G4Diyzp4jg8Ke9JoqiIbA0Rzq6TBO+XBFp4yN53y8LwdGqUTz7bClX5kNSs5FFoEN9vzOacgV9MyptI1q11BF2wQCvkdX9JUo\/r9OPlA7wLCKjC\/uCKRPWFNrvCNTdOpIXQZb1AlG6qjtL7tqVh68zKO3LsNlRYK7VwjHvQXirP8YcTo2TVPHa70AjqiFhvIjAa1Np449rbFZN\/+kTbc2Z2WD3FgF8y\/Q+LLb5q9YGyc5APMp\/vFnV1q3xzqrOQ2SpHhe0tLsL8zM43ZEf6Zgg7Uo0HMr9qA+xHKnpxlSNPKTV42\/dspfYXjG0\/UlYbK4q5ypvFwibptJHFtDGftDAGayJRx0q6wzb9Ne5+gOccwIbLtnYQF0Z2pylX1n+DYKfbKWMTkAVrhQSrHSTryr2Wv+OIOgNqL+WktZlMXjJElgidl1lDV1qjlLSgQ2EpnmutofrNHLGiqirA7+Kul4c7qIfBIKGKg6jF7SWCXdFt6F3XnQSuTdkSndNeULuv+4fusAD86OsmCz8Lpi+aSXP57RJtNpK8zSoh6kaQgHm1kus+l7IWP17R0BjqvADFWZHZsQ3dcIBql9ck1ITK981hWNEA2bwFKmkmZQc+jOHCvfkx905e8\/3sNkb2Nw1lEVhGTYxONytMAy5kHwk=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAO0Y5AABAEcD3CuYoqF5h4ZLy9AG7ACf9w15AAkdWAc94e3MQa2LoXut0WlNwolOnWEAqmyOwMSk=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RQAAO0Y5AABAEcD3CuYoqF5h4ZLy9AG7ACf9w15AAkdWAc94e3MQa2LoXut0WlNwolOnWEAqmyOwMSk=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":59,"pkt":"RTgAO0Y5AABAEcC\/CuYoqF5h4ZLy9AG7ACf9w15AAkdWAc94e3MQa2LoXut0WlNwolOnWEAqmyOwMSk=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOxp1UbmjKo1gY4xXFKCwtD0cvlfy3WSqxZI+4d4LgVKAbZ\/49b4pTEeHbaorCu9oU1dfRxQ9kez576ifHf9fSELbvMNkpfHoeJu5eBJcFmvkCK\/hq12d\/xW0IJ0YHIp6sJAt8FQ1sn60HDmvfIhGNk69IGpR\/ToTWpP+ZL6kflu94RVS4GfVr6oKzyCZZBAZIhLBV6HqjpV8eJpItLZ9MJc\/3MQYk2fXUwtX0dYtgHvciC1oRKorHTnSNnodz+fk6Xc5orxeFrfEMqNWhWyYqKyafI0gavcnMOBmUlAyf\/1O99OR6pPn6owmoV21Ez2tfoZjzcR3YfcNeweLvzusZqolFeMArFfZ\/v07q1De8Y2JdK2bIrsDfpwVBYzNKEkQZsYpJKMMrI6iz04iSp33YA+KfGBZdxVG7vSykxDAjnzjgE6KDonatRdaK9q13pezJT4QLDREjswp4q1DpMXK1tcgmNadGjnY7AKP0rwJbqdVeTOhIa2rn8rZg4zYIs7OgMVap6f5WoTWAc0V1ZpDWH39dPYyVHCMbgzQQZzPMC\/9+MkjfQkHQoPi4kW1B9ca18xNj+yrM4z+JK0a\/bQF1HCKwAMey3nbYyBvLm0MicSmKF2G0oRTKylEDylnYY2CiygfQvS4RofaafTKYhTgOkTbUijwS\/yl1EhNlAWvxpwG5DcoPhPqS\/6ajfA9sznZEZVEVixWWCONzCHSl0LfqW4sX4yet3WiAescFR3maT9gMs8zQ4q6a4W2B+\/aMWhEky8pnClyteSlYo6lQIFFYsWsnhGXludKrV2dFOatZBWwx1wdE4Aa+98uO6R0bp1rWrvxCoWrp21cl35WwKI8OdJhm5QikwzPbxYzwvaTPDi3bEZeqjqeGZ9wUYATFeyo83blXoiM0w5M+rJH5i2h29NH9Nl7M5376gn2kOpyD1zxgZRU5CX2w7YBKHE\/XO\/8K2GTCf9Jo2+TojmN0RjTj8LmCpEwQrrf8pTT+bkNdBxzVarBioedZebEJvrEZDitM7fJofXD1poh8MpJXZJ3qU6SauatSFcva2D62z\/ICxKREiQ4e0MyiiCUnAKt95jVfX2lQoMMO2OZS3hcke5QS\/Y5bYANMXOpdBzBlpUN6mt9fN9hwEUyq6Ku9LkQwd3KQI5T82+vFM2uHGVK18RMLnZlNXfZPeqkon\/fK3myj3\/6LYcgkl7GsIEFektoJdsKOkG1SJrIeIY443b48J4WnKgOI8JHmp\/3BJIGLCCueDSss3xlsZVZGMkHDTuYcNKMkJw0m1g3l+m875fGzVdouKHkOdDCtDqfZJFW5K+tQYRbR0SGH8fwttlhZ+U7EzzFRkx0F9kXR\/koJVjTlxC6DrLlTfraRHQJbMMqPGvnFUjopXqMzMPx2joK\/ANfkuqmmEAwfjfUyG7LoiYfZeZf\/6TMegttmZeAtrV6UmUigHfM4P3PzHYm9O6C1LfO3Bm4b9P54UzCdK\/7Fwgvaw5RPdqd2h1jAOph9ESQabio99Xxd7NqzbuP\/U+9aQUrLI7ip90qmLcOYJMxJkElZciyRJDWgnvk9nQjgZtnMcHFWQ8PQ8nVMK58QlVviX9cOAC\/auHg6aZfYB0vca2ggGm\/7QB3pVdOHz2Z5hS0RpE5+YfaHArxObOIQXXlQb8F6b0bYcKJ6ANPjU=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOzuXVG1NguexXnaQEi7E\/A8o9\/qY9Bbjup7u\/u4DNCFgvQDECUeG9Y9kGk42UqNA8cqLXBRYppx\/iqLnjkPH7mqU1ZJqOuYIGmDoPf1fR8IMoxRW+eakO02GEhnM\/tysIPVTeafki0MvQr0RXaM\/U4Dc\/u4Rvrm1lL3o+w2yZv+Ckf85Si+NH91im2PgN+6bdlFUqbxjZFuvvT0udF9TrpQ+oBATnjfgy4pthrbWSkwm3Psk\/OveqP4725nVkS1hG2tLHJ33PGhsNgoUQL1cPPWVEDTpar9Vg7675MFC2QvcXyvleIlscuvrzciedUs2bA+aBRcDKuxfxlDSIYP2hhGMOW\/yVGcmPSg0hHw9n4xXfxRp9Z\/Xo0MmrTkgH1EykiDz+T88A6zIJnx\/XO5Mnp5rJyq45FYUvPVYaW23f1fkWd9llW3d\/IF55zloo7FecrTykIB8gMjg81E8lZt1qceg+Q9JrQigUnrJLxXHulQcryH3c4xp95i4yzUjE+WOQu2pvRRtY\/hVhEWkv5pJ4EwNTqrsQcf+JByt7z5r5fla+2n45EYLN0p+3Y8IHUVw+GYVvR+sj5E7XEWQDrpctSaIKzXjN2c2QNNW8py1FhIq9G9KPlipU\/aMl7hCZrAHxg+jiwYDUcZxt6i3CLLkqkArSZjWOPcktSSpx96mdmtx1dnJxk3tELuKuM8dXpYzUdAPY5MDJ9nAyA\/PllF+x9MUVxBWHLDymfALNkminox1itIgBArgPHVDrzmMn3v3tkxiFlalX2yZj3\/fdJmp+X9\/BekexrU3WfEaJBUUw6+wNOyPWLog35k2r0yzRhLFr+iJLHIjG1vxKhWU3+sqpB3czbBWMwou6nXfVdZB5YxnPni52\/JQBy6vBLQlsE7lb9w27H58MkHo5r2Cz37VeHJ1Y9D39+XFqnVBQTmFYYtLCyWvNfMxi8Ilht0ay7EyP1PU63rSZzvsQ+2gIpob3qlYbxXwEI93MQtF7nIdl3UnmHmALZL5XtjAGPJC8ptmIy\/dgmdLgL0FUEP0MFLT6aphNaCaPojZXCO8gcIyCB+HwOgV8+v5NM+fK5DbP19JJUYMdBuvPPZCitxZWsxDQJfrTBAg2gsericicpfPtiKnCuUPaDXVqm9tHymszE3oalsIDnZymXt51\/1wUpce0Xl4DZxHI1fmtMGA81zp8F17CgaxNEgDEXApg6b9oAJJgCrduPwcj6NbDEUjCiQXrdYAcYk2IAZERCvEKgnCdPPGZ1sLDnBNorJ\/ltTCpJC+g1qHb056bnPkHHp5YtnK+h3Hnhm1Y1opplHbPJPMm47N\/bXlI4X2qTro7fHfJrkLcS4Nf9rvfOBARWsOjP\/RON7fUryOZsVIoToE31Wvyc0zSQkDFkjtdRr9lEg8L5ajpz2zSfkovA1IDsDgxtFxVyC1chLsQlDAXbdnpJgwhEj4FbyzTZ+0ZK9a061fa4XNWdG0kdXsF35DgdUGZFzkuAMyMhEa1nq73hn2fsCFUvlXOVhRxbftzJo1mgeqDrJWi+UAFgyLMhfFP2wx9qNY38paHVoMEJVZ65khyIc85\/CIifDnYRGA1OoayTS4hOoMzdYiVCSYbr3ptCszferPpGo8sGM40N55VwvW40uPUqv8RWInY72gaTN4LCGVsRYthe58W3kosI=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOwu2lnjqVfK9CGtLtSj9FX\/BFW6mBmp6PTQnSSYs\/AZ7eE\/oVm5bARO6n61FAONo1Xsnwk5Ov5GHm87IZyOWJj6YEGPE4aQc2s2ez1itgiIdM8rLsNUXZJhWwr7XGVyiJI5j839VGvfTHP\/ueLEsI0HApJFe1EV4mrIIQZYMV2s+IJIL5qOPBn6NhZxDDBpa3TJV0HIYDrpbp7lc+XU+6vmE3m\/7zEOvFbuFJSVVRn0EI4eMc1n09kUyJDF0uHv94bD8daVJt3frsPjrKDmKnyjPWtu9bGsRH1\/IKGZmm0r9JluJlJd4RI9FZfXNsFVoWKdNeprCATAZjZ6\/X\/dLsJisRREK2bqhsp5etT91GXo2dVnCp7EnizQgOn7Uc0lDZPI18unCwiuETjVUgZeukuskCkNXgVbSgSDgie8GL+I\/4OaVlJOBlLcMmXFhNCOyHemijuc\/YYdDpTkZr2QJjIoNfSZxKCW\/k\/63UsWZvl1OteL0g40Fj0kCpImfQlyBt0QGQdFpy9U4gnktY4pswoDIp7OgmqlWfufEAum6O5B7emj1nMk7gFymcHeozFiZpJ5WKoP2bB0oY2SuKMGUDOpvBijGNvMqL0Edkadp7EvUTNEvekrLLPZ5eCJPJLp5zUHUI6gAqrWslJ5qZPyPN5gxYhbi5DF1ZjJ2n9+iC4OFDf\/w8cAGCvTFYuDZBjeoMtrVmIXoqf4QrtrjsuGMKzcq02LAixa4GFGiLvCFOL\/92BsTQVQoIFJxK2BPPRCK+rk1yY9QnM3qm\/PTmeTwz8bhC\/vRHt1KtJUSEsJMPq40XG+2jk3bjSHkZ86Z4Ii+p8ULrojEmRAyGq8jcU+8fv3LEQEfTo7VltJ9teHqJ97Z4RyjCtoB33ryavSDf3yLsNDLzPw9h7qMsyEeZMmfqDVMm2U1eg03kEIx9NoNB8mLtsNGho0Vitt\/8hA1Mh2k428\/FTc9c6qluZGQ3bNT1OGEoqivfkhGmOXBkUa9Vnm5Qd3UbMZu8CnKO5wyLtMjkpEN0wlCVcLwvT5OOM7lP0zIS7FSx2RSz0otz0E+RxnUqlzHIul86aqNHfWpkpNslqYLnG5FTAoFj86d2Y+jJTpHKWS68+4tsv5tqNZIbH6oI8cduz9wpSiRr+js6SB+8vgah0E+so6tEJHNYJDvUN5NUtade1JMg4UH6gKopz1m1weqUKGrSVEF3a+sPLnQZ4jVnJbZoWv3rv9Z9RpC7aYe0bnZ3jZJ88OmuaCW9pZTT1NJ8tzFovnT1vT\/0rXP8SvejV8\/yPKDNHNufBnQGEYnba0nnDm93AthK1jOEcEncvodVJ+ZXSgCspoxEKQFZKrpaPzD1vlnsUcvU3rITZMhC0PlBBzI2TV8804w36xXCdROkyN7hMDW5uFtDSdSRd9jp0LQlZhuC9M6RTwe\/XSSqEkloffcfD+6yjLBdGorlomOIcKi5kk8OQyXXqf4MwBr0yvAfUEZL6gwP0zMGCZxGoVY33Yx1cJXNOtbLjyvoEGx3LOdRDtc80U9zJjtOEXwJ4q4Jy9\/yaCrx8tZcLGa2imYTnu48bUDDA7qx+Lj69G5HDd7HLkpTMZPquu4d5ej4wAQM6IRau9IO442vjfjtIYlf1YIIJqhPBUMLYjI8WshRsdn\/nQz0UTW7APHiZjQ51vBRM=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOwu2lnjqVfK9CGtLtSj9FX\/BFW6mBmp6PTQnSSYs\/AZ7eE\/oVm5bARO6n61FAONo1Xsnwk5Ov5GHm87IZyOWJj6YEGPE4aQc2s2ez1itgiIdM8rLsNUXZJhWwr7XGVyiJI5j839VGvfTHP\/ueLEsI0HApJFe1EV4mrIIQZYMV2s+IJIL5qOPBn6NhZxDDBpa3TJV0HIYDrpbp7lc+XU+6vmE3m\/7zEOvFbuFJSVVRn0EI4eMc1n09kUyJDF0uHv94bD8daVJt3frsPjrKDmKnyjPWtu9bGsRH1\/IKGZmm0r9JluJlJd4RI9FZfXNsFVoWKdNeprCATAZjZ6\/X\/dLsJisRREK2bqhsp5etT91GXo2dVnCp7EnizQgOn7Uc0lDZPI18unCwiuETjVUgZeukuskCkNXgVbSgSDgie8GL+I\/4OaVlJOBlLcMmXFhNCOyHemijuc\/YYdDpTkZr2QJjIoNfSZxKCW\/k\/63UsWZvl1OteL0g40Fj0kCpImfQlyBt0QGQdFpy9U4gnktY4pswoDIp7OgmqlWfufEAum6O5B7emj1nMk7gFymcHeozFiZpJ5WKoP2bB0oY2SuKMGUDOpvBijGNvMqL0Edkadp7EvUTNEvekrLLPZ5eCJPJLp5zUHUI6gAqrWslJ5qZPyPN5gxYhbi5DF1ZjJ2n9+iC4OFDf\/w8cAGCvTFYuDZBjeoMtrVmIXoqf4QrtrjsuGMKzcq02LAixa4GFGiLvCFOL\/92BsTQVQoIFJxK2BPPRCK+rk1yY9QnM3qm\/PTmeTwz8bhC\/vRHt1KtJUSEsJMPq40XG+2jk3bjSHkZ86Z4Ii+p8ULrojEmRAyGq8jcU+8fv3LEQEfTo7VltJ9teHqJ97Z4RyjCtoB33ryavSDf3yLsNDLzPw9h7qMsyEeZMmfqDVMm2U1eg03kEIx9NoNB8mLtsNGho0Vitt\/8hA1Mh2k428\/FTc9c6qluZGQ3bNT1OGEoqivfkhGmOXBkUa9Vnm5Qd3UbMZu8CnKO5wyLtMjkpEN0wlCVcLwvT5OOM7lP0zIS7FSx2RSz0otz0E+RxnUqlzHIul86aqNHfWpkpNslqYLnG5FTAoFj86d2Y+jJTpHKWS68+4tsv5tqNZIbH6oI8cduz9wpSiRr+js6SB+8vgah0E+so6tEJHNYJDvUN5NUtade1JMg4UH6gKopz1m1weqUKGrSVEF3a+sPLnQZ4jVnJbZoWv3rv9Z9RpC7aYe0bnZ3jZJ88OmuaCW9pZTT1NJ8tzFovnT1vT\/0rXP8SvejV8\/yPKDNHNufBnQGEYnba0nnDm93AthK1jOEcEncvodVJ+ZXSgCspoxEKQFZKrpaPzD1vlnsUcvU3rITZMhC0PlBBzI2TV8804w36xXCdROkyN7hMDW5uFtDSdSRd9jp0LQlZhuC9M6RTwe\/XSSqEkloffcfD+6yjLBdGorlomOIcKi5kk8OQyXXqf4MwBr0yvAfUEZL6gwP0zMGCZxGoVY33Yx1cJXNOtbLjyvoEGx3LOdRDtc80U9zJjtOEXwJ4q4Jy9\/yaCrx8tZcLGa2imYTnu48bUDDA7qx+Lj69G5HDd7HLkpTMZPquu4d5ej4wAQM6IRau9IO442vjfjtIYlf1YIIJqhPBUMLYjI8WshRsdn\/nQz0UTW7APHiZjQ51vBRM=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAGQABZEallXmHhkgrmKKgBu\/L0BOy3QF7Ogn0gWgj92uQQmXN5hS\/QiVyaE+r1E6ysnNOvJPQ4A8E1EdRQkjFZsaZb41LM72rXyxKGX1bpeXUQgIHIpL6caOVgvm5QbkK2oREx\/Zq1RbqLgDpix7DWdYvgfJhtfW8NUFmCxohylPSjEpP7IaDaHHi+Ns0rmfokqEE3v8bh3jZNdcM\/y\/3+mDTDrMpS3uJbyuwjx\/JauXs1jyttvaRVMfS18ZxKkwRNLjXd\/982PZB0lwa17Ti8TCi2LS8pE5\/Muhhf1HwtCNImnn7i2ShsIEnUaeYTzykf70vx6A17PHu91AUnRQSPkBDix8csDnixzEz837LKLXiu1ubFdCgO55tZcAjtRaFcDj9YDJWDisga\/04j3rtZw7KOYmA\/TUtOqJvP8vTKKMAJgI1WiIFNFm1ynDzWOKvIR3\/rV+hoZeqvxXp4qs0Hr4ZN+JGebfzDV1B4HBD4DNyb4FYSsYXMLAKYkl3bLg9glanSESHj5cH5BB2cCoOmnzgvRMSfhzATK6WNO3XgQEwrs7fxIAYLIxysDPdL8ByIPwP\/5YoTGOxED0lrWksN7bHeJ29zVnGo8EUubiH0T6X8M+m9DzcIHDGgyWJkDyTAd92\/CRf9YaGVgcTjqfRYDsp+YmNR6PL2rO6TYkq99GiHJDltGdfCPklSl8eZSBBnydwM4afJOFpd8xnY5C2xcRJ01P7yu68gLQZg21e1EdTRiL1cpnl5otGrWg+nZZ0KytgM2eGCacFYnCp8nPse\/X6niqqcgL1sXV+IeM\/eND1od9CXXcBrT8hkD4yx1+rCp5KsDKsk0sPfTuPo+OYxGQZa4iOV3mbFX3PQiv5Rs3CgemKgBVtv4atIBC8LVPjVpt6tYnQzxj1zhX8Z2+RLAAFL0mogKhqQMzyoFJ40oqtwcOkOFhSVqfsj3Yx7n3+G6+Uj2C\/SIGCE13gfw\/CR5B+aG\/bHtrCbAvQ2seE7aij4seO+cD+DkU+SehJDH1xUoywrc4jgkC\/nqAUle17SzFrKLDUVtcBIbaEwVZatr3zv24fxhgCQ\/csOtTmTY57TLQ\/80AB0fqxPWGNyyXr6RP9RrGVvRhgAIj8qCWi547mbTzQo4PBdYFQ12Y2UL2QA2n6DJ+MhP8g12d7mHmQREUk1o+\/9XxCUx\/vJB401Q22QkjNdiC9bJcuM1UjC+JPLp5OsjuyqgN8tNlpcxrhpbuHSOB0IoRu0jI9+wWqi3DXyRJvwtKFqcWdhwBuguXfOuXhWSMnd8QEw+hwZyh+qlFy\/P9QPxctenWhcry10tpx\/0Ovz00hNsEnD7pcMh0yYls5zR5j\/WkNeanCeMrtwA8skgxAVy1EP5eXLLJfUce4ueD0C8GFd1ZXpEBH3Nk4\/tCNarKbthwJ+qHqlDhrTTqWHPJf6\/rjGfCXFiJlUKivYDmoQMGdwqrVGPwJY6JvD8pAz3fi8mrDrpikvgRSHf\/sKwY8MgzwTsjHWDRhY9Trpv2kL7v2019tBgQ9FFCjZtHTWrFPZ0604JaKVzOORA1SVh\/On8QLyRCpLLySq6TZo7x5FBEzDYXLAwVt5j1Q7KD1hbJ76nfXOS\/YjCrqNFaswd+A6xdVzUUyl3Sh7l2bi57xGR26hfTBh\/MtWSTLGkDE6nIw+8nMvXXwzwWthAB1knwGNN7vvGBE=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAHQABZEalkXmHhkgrmKKgBu\/L0BOyKa1W0CRZvpx9VWXDGxbJybGwm1GS17L+XidpemeJdTGh3uRIsTCxiChDAHO+\/9d5K7f45P\/skOFU8V1IQ6d89P2Xpm0bT0eM6EnEwyno+CJRALcuLvvpWWfhtEqdWwYO5nQGePHEe+geg5EZGC6l0HIbS07chb4pheg\/3Wxfo\/\/m+XK\/1HQl9Bmaq72StUS+YPXeGJp8YrK602em9o9lbJ84Oxz5NW36b5Il2Klf3ndZxzVSaFQOWMZGpjFuE8SMOaVvY9uTLNp3TH\/rFoMMNOVrxnKZjDMF9fxdMjxUcp07pJ1FvPVJC\/RJ4PdA9\/cyVG5HuK0EMCYcmo56dToffszqQrptkYj9KexLxQIFLwgINkQAUky70rk2\/X5BpsORXte1LvofuYnejBRvN0\/7JenHmHyNdjrxpu8coc1iOj6JEb4yqEpMJIbGDeC3EXKqP2wgJEGEou36WiahJoPtssPpUbtcHILkdJOWJbmxZRyNI9x4+++nSru7RqII2Hpsr9ilzcC+\/3ENSi7qrmcUv0MwQEIofj+8alQ2mvNtyzpA1E7MR6O6lbzQKFtwMpg4ShAanv4qp1wHU10NLxVXQSgJf55KeW1YzveFkNREPcRUHpGmK90sP72krvcn1a\/gReLLWxynYWFhpzd4SoMZL9lRcxrix+wjmRrROpViYlO+c4uK3ARowr4xuGK7oa8o7OH2mLpaF+G03TRGRkpi+G4jzJf\/Ko38\/Q0MqDpExkPYb9XnH9XJGruP5+2Jt3GXHRyjQ\/D2PrFTVzAP1c0d5E3fHfzNPQ85POo+MAShC+7ak0\/ipySzwdPZgEva+OQFl7CeQw3rFwDCBc7NDDtQjc2p\/WvXUKE9OxzmZCSGsIfxUYK1cmhqWArUJY8B\/+AohCSfQ3Gbytn0Qw9paTedjywDKcnB667Qi2UYhyEWyh+yBNbVnfknwQBj4MAzyFb4+iM9Grw7CdxAfBPQlJh3pHLvUNMr9gfBiilMTjBl8hj1E7o+\/7oqtB5B28e0aAPBar5oT3PBuaByTK5qAMyVxBFwo6j2X3zMmVr8jq5kZh49Ffy0jCPsbFgKGDicWziXx7WSddiE0Ob49bn4VrTmYSz+pnRpsRaFbQr2jaCjSWrF+9YnHXTg2l+0LQnJeJwbwTs4DzWBNLrbozNSHXCCoDjIc96G0zXP6tDZ98U8Bl2X5+J33oAwbEb4XJp4i3y8by28yc92kSGI3sYOU7JMyqdItgfG24bziU97\/wudEU7BNbJJzQ80eocf0XR4NmXCbY8lspu4DnXZIQ63SW9aEE+XmLZD7g8A3xJbTYqj1+0b2mD0YEo1NlIU1rTzHIN063wjPb9t2siJb6VQ4Fy5lXmx4aqAgR9auF4CMJi+BDsnmBpy7WUvOKY0QBbNV9gSBvgJtj2d12Es0UXOwb5YSgAzr7ktZ5Qo\/qnvExTEDXfn34SwpW\/SIFM\/NRwvhNqsLcVlvWftozLPJCWLmGBTVx\/7fsQnOh+Ha0WOs83ptIetcnmWDanVDxhZT\/Yd2OLsYb8DiR8+rkNuu9TOky3vpjz8qJOKzW166itdy1Qho6JahwYwJSUCVQH6xmjZ1Gf81nLzy9pVFKzay\/4sMdaHEv\/85RSa23I089S16vPDSlBTDsic547pvUPqOdVMkUQ0\/yARfDzw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAKQABZEalhXmHhkgrmKKgBu\/L0BOyA6E6FBr+8ZZwIyrY4bqbWQVWR5wrtwICEbWMyMjbrsFiwHkMtz3yyWsvw\/74YfdqI3cSaFxrkdlEkOYe+ubkgFkvzmRv428NvyAUhJUCJZKkB80wUSQVuwlnfSxI7O306lRpHe4\/GejALosC+lnPF0I83w7bsTAYQse3e1EIqXbdWzRXJNvQXFMQGy0RSMNcjy0LwQe8\/VUf293GQXnipsvM8mp2k5CF2HRXZSChso7n135GAoU3e6mBTGzvEg8u0HQFacBlT8WxjZD+ovlV22YAON57+0wZ7ezJiXExnfn\/CtAWnFKYdQF5i4gQJ93Sp75W1BH9P+2qeDEURS63cY7XtW5THe3tpO7ejcKD+mD4joZz6xuT25ief132BYsYE0EvW6ZnLo\/7ZzFxHv8iT0A2DNf+FykQvuoxzeMe6hh0w+0v\/2sC740FfzSzQ0JYe7GJg7UY33jiUeuA+8sBn7BhYoQ5CDOAGFHUz4I7zVtEnS7W6Z01RvnGLwuyzx1A7\/CLqqrvRhsdLUeIKuMf20C6WPbuBz1j8gD8OHHa9akXeLrVaFKRT+B6PvyvNHV4kZ6rEP39NI82bZBtemzfWM19BdDVrHP2M0yp7\/WtpsGEOL9YpavcDajlCnASE1fqNmkKZUILWfPdv2xpkjK2ZPzZyaq72ER1BesvHZgueZ8BkX3KSAeA796nr7gv2Hz7LoJvu9tuTXXZpz+zZGfqhkD6xdOBMNoFX+Ydsqf6Pm8SNBqjMjICktSNRntaqQZWgI17vGnleToISQJKZdND2R20R7GNQdvuJBpwXbW4fWb4mD87EYi\/MFhLppXh+LLSuXeEz0yDaPIlezAG3McGWzrQKkTinFrZ2hdL\/ivVIjKUakJ09by4u1y0Jbz2n9n5zwDgvuEQ6fjSLc4v3th4B\/yz28vi7ZaEvwC5zAeaf+PRtdn0iG9qKKC6pqQ\/7BMCHzrXgVxIHAKAsrP8uPz1hlI\/isjfXsEf4DWpR2yXPcUbzaoPVAfImOgNGc2EZhcm4t0Z4n+fJQ\/s872luyYIfkH9KCxhjH57HcRwycRQJhZTJDClSSq1Jm3AEXZYJVb4obEQ0\/UU+4jQuvB6lALnx2AFSHMxoSjHPPYjWeuColGgDYWGM+Mof0FjzH+HES3XvfRLmjCgopxbdABWSmgBWhTyOPHzdmsFL45BdL4BjUppnmdFqKlehKuSawvnaSTk0OZ4Ybir5s\/DxSW8Yp0hFATxfCjt0QfSN53CaRKYR2HaMbMMqGTflAnZYIBhd043wvRLHs1\/hoKpNOAsl4S1cjFOAdAtbxHnHZzOxY61c9K\/3oxTdzKTev11byzdEzVjONW6kTeMvREEGvklNJtSwbt4Y71ICxJIL3mzWvw7DX86V6yKB4sObP+r9E5HOAnYPEG+Td182Dd8NsWl82pfVEdanejwNidrwwGi2NdtYQSp++bBJkWKEdMW2\/9HWMvPdt\/q8v+yWDkz5kx6KqfO+hIrf+0cwIxbzL+YBYDUQLaKvfg\/2CT6nhZGDRE82oQtn1n+rK3NdST9qW43buPTUD9CnIArlvGYNXuETKqzrQyV5VBrdR7+ZOoFD5yI8Slrs66iSjgKAdhFcsLBXIqRy6fKKOYxa1MJPg4tuQtpp5AiWpOpQAWCghfSxYB8ocezqJTWDQ58=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2014{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOxlQkz7Us4iIfkVFuOCp0wPup\/y9Znr9aWYjKzLVCpZ6qU2jKPYakga7DfX5klZFW4Fpe4YYgBto5VPXOc\/Zjey0jnc6IG82vo2gMsQR0E8+mJbUvUiOMjvSTBwROXM4bPjoxWBBHcEdzTJk9IMaa9bSteeNekUgMH8u9und4TSs7i86mpdxs3DLAPN5GF6vysXRzD9Wo1Vqq3AxqKGid7HpresPK9ZH0YVNz1P0ctEeJhQZowzYxJkgYZK3XW0\/l\/04D149KYPJM944L\/s4rFnWRrtHxg9PLw9pa3E0\/A3eLUHxoWvsZcC8H6mKw5VilIoOp5mn7QFqNLxORuXjMs2oYYz4zEwJ5cpUcE18vJkm6RLJkWmYlm7xhJvEvCELPATQAc+pMo1ZZD\/akzak1zPP+agJ7DaY59t74eL1geab37ghyj7U4EApvmQ8viO8hIx1pVptrOFWcVIyImRsNNSXkPIUfDASiXcNJVluKTPlldTdlaRmIB\/KTucADSqNhn2MlGX+M9885WNAHflG2Yt82bIkyTzDmv0sP3\/6arMR7pjRhFJHDAYDDRYqzrE2BJATxm5fHCgNS5BfJqOCupwdiLO5Xo52F9Q8Vo9Xh+GbzokIiWeSuC5\/oXL95EQXiIBmndnUTim6imJSYq9BiFsjqIXrMQpKMXHlvyWtU1RahKep5wocjnWcCr4uUGj7I5ThrxZ3V2LD5HOZgckYknsnAQwgWU3Xk8lL0LQ49b4ZcM3DckK+vfckFTr3BZ8CQn0Ip+Tx8NhYaVoJo11hoODyYySuxereGkAP2m246WJhsNwwIjCzZ+hR5GPnN5u2QscnUv\/EBE4dN94mGHBuQ5IKoyBhOhONvk3jLQ2QeWqGbZN4u3PtAg56sNahfm3UtJn7+ktzVe+n5N3qS3\/ljhSJXuhxT5WcIOOYdP5nTV+zBDChDDhqrM3CxKBOgXEUv9YcgiLFfWSZQYC73xIh+vIkFjSph5krKsqTmYaGx2VTHJImBbbSF5UFIGb9kVvuk+uCUtamf9FsrbjHL1FG3kJZoMh7L6sUdEGfihrfXwtyUOWV6p6LW2C2hVq3PvWVR8GGASLUb+F9Ot7d5sr+Q36BgyL\/DxlRCXjzvFej5qYAvPI0yLqpSgGvp+4abTmyGYXdQ5zGaMWLfiXoQuNkPlOAtT3mXVqtJlijLcOiIRvuyarFNUwB0rzz0V7npNF3aKz12kDGhFi9yiRfhwoiJaHpxGmIcj23gA1UzKquihn8GBKuKXjqN2kFC2LtQC8b834OW\/9WPpkfzbw82\/\/\/t1K+htRQYr+Mjiij1dVTEQe8udHZCxvD9EiPqD0Q3PmIUeYadDHdQQ608JJAr\/NRomh8mk5f7+GvFFlNpqHvBQhgqJxm5BWL5aLCexaWn9NlNFUjOh0ROs86YKNWmzcS4gxx\/5TofY9kUdRfn+iP6IYkLw6Kj8F3GuEO2V61JINcxNNAn7l\/gUbebHoHL5hZITM9qTonddmZOJmOLEoBHCo2nQ2T50mLOTK03q4Y0CvMhs3aA60JZPe74L2VnD7Vv1gSVSiF3Lh4CqltsepSt6tHQErdv7NrrMrBXNma7B7yAdtJhfrLEjJzHLj4lId+gCd4cq3lLcW6gMbDKpnWymk7Pq+z8U\/D\/TKJMbPN0wGDXWcTwliu7U=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOyF4V2sLGe5zWU3dw52IRHuHEFt4Rx7F0xzRgxuy0HwcYgKSpiGFNkjwys+L4SQhEuCpfVDhAy1GRKKC8nM4N0DLXwcOBA4WkLyxASHMfJlkGGGMucwl1N23Xq6nSmrZ5GQEOIr5th+9lS+7zbFYkK5iodiOC6idXQHM2DWkE1cBrF+ke6lJL42bzvUhejej9POstJiY2bqLnM7oj8K2B+pNLHNbI9a4Szn4jswPBOy+A0geAnfx2ndI1qyM6iLqRhNjxGxB7mgPQ9A\/yKvT7ovSoFh0SY2+4pEhJx0FonvFhX1hageZtws+7jE7TLfe3IMAePOv5nzauKuTB5h4NVJ7P9sgimbyIL8GvnaYy3euAMKc3S4ZAC\/DhJOe2udAQkB1XBT9FYH7uZtTya60sNkoq8uG9m9MUBH9f19Wp13LfHoVoZY+KemYPj54NhYSI8rehxfIkHKeKaKzlzVeWh8t0ghxXKzqMpI3UzYdwne9v8Q\/qzFPb9HKtgLplad59u1kHJfYWN0B3qGhsuPwvj7iExmpXeZoukoXTC\/8vBJiedr+xriUsvMnj4oiS\/uh120c\/kyIZATERHNO9jpnMWx84CQjaCi3TQ47Sxaza88z46dPESGNpFrGSFnxdw7toFe9QWs5zNxrPTHhVdLbJsqMnBLOsffxw4TRENGonzgn9zjvP8DsNbRJnb2eJgPK21e6NM86KFl+va4NcFAE69blo3oNJN0FDpMdlyMqdSyXZRVYSwYEkL0SU6Gtm5FEP4kOA6jML7rwpNy5A8JaKfbosdf1Yu2wgTpN+jyL0yCVpXiWwEFQICLZ7iIx0EFVxS+G\/yJz6uaWznDnax2uQvwMm+HPgFkE9xHKFNBtVLyyLOZY4wg3lVOYbhvVlh+OFBWrhweROUbbopzJ1vxl296GMyNNITT8KBfyMSMmbvvB6h4PNLqYMpdrq2mE9fBH92kH18w+Y\/+g1fFuF04dIlg6szpex8bPaaKaLLSXqWTQY+RopJqjIJgDDxxCR6L8yEN6YAtwQorwBsgWQcopGl3sqixL96gVuufwRRUVwZSxZQdf9PlbGxGaY97Pp4rQtO5nDrGGTkw8eJQvdtCBVLaGSLFs\/KjPWD9oQkaYPco98uhE7BYfeGcCy4BLVS9lVS\/wOxUVwQQHX4j2tzQ2i15uazBl0rv1Zuk7vRr1FGeAHFf2oLCvMXlx9ep19GCuP+5bu3zfCR6onTx96qNEDMYN4yDp3mDb81Ug3MsZLCBZ\/hr\/\/k\/89VBuhtWl\/pvT8c1oYnkNvxil1jfSuvs0unRywgb+2uwpLduMDwDAaXqxBERJfr4N7wFM8tMEiUSHoGy+JUXoyzLhqPYcdwyhDWkvFnbvSi5a0+dScPvZKVKqEDNlCRNsFHAHT8bH46bgXlLm4iRVVQ0RFc08boNEocMcYGc5VgrVWw6+RKNGlSCku6iHKApWdqzt\/hSH1QeaabxV3nBcp0zmE0NqtzlSidfSs7AIXC\/5awDhzcYAawWA4lWfg6j5JksPgoKwyx+MzQlc0+YbCX4GsXoMosBHUyuv3TZH9AV5E+STWttn30bztlRc\/2LGZyyw3pjQKg3fk4Y1uL7\/jvgDQ+M7cU9557FoyOzwUryO\/9PcPDz20pvYMzG\/o7kjnDYA0lCvet0u4Ol2adjCZM=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2010{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOylz0t\/oFFr1tsbgwwBgnDJkMzGnHWMLl6XPd4Np9EExdYxd3EBlY8HwA47b1J4Q+\/K5BL7LGBjkQuJUeuHGxaK61mxFFE7nQqHYgWluhKd1ipRYsWoFkbY9jgfxpI9rnikDd5rvc5sSpU2E9rJvN8vLrvdhlQ3V77nhC4Zmt208+1NxvmxdeF2YQf4bhqesKQq4Q\/lURhKagCc1fhnGsQ\/o9M62uP5A072DqsNdPLhNH1xDaXtyrAQvY78uIbxD4\/yk761Ypz8l0qiplOIFQ6bxm4wLZQDY8aeXe9FEq0oVVki6rWkQnH7VFGqZtL0xCjGNPG8c2cDyZk1I4vuaRgOoEKMlPIZSkFVnDs28lCApTr1ptjMo4k+NpNQzKcMg+YYY+PRSsR2BH9d7rqp2XccdE09FQuni+NvUow2ZSJWD+PP0TdCiwGl6FOS\/MhAZdhyyW1TVlUyvmMOxR7+xNBmxPU80Igjd5CsTB5N6rPGo3+ywezof2dhocbQeILHiwZ\/Hya0l3ewKNGbWBueNitwLWs10\/rdN2GoOnBoQ\/SmBmQa9MC7zBI1CJEEJRLpNL0Xsb+L6CNguLhmwkf9Qb2jWdEFl24SRYpAfSvSr0xb+JeH4xlTeg0otDAwwoXtTXGys3wyY48JtwVvLuLpp0vOCLfmAAZpSE9K9bgyhIfNjWCVjMyst0RVyUYpLNOguLAhMIVtSbY7NbOlfOWRIBmRZ4YpMTuTlHgfjNlTDGmHpuABwYYdEPzYlhQCEeXuXivS3Np+7OPWwYMNz7s6L2YPuUtD\/uettE89Hy0qFypQmRc4AY4pnI+19dnMWxF1wZZ2N65yGCvXu4ftC7IXAf\/6TlZv\/QKLc\/P34zNizSnLgcTbYA9rqbvxCkF4jJgH7p\/B6BiLoov6rxyViu8l4Z3tvIBt8A\/SnphdVUySW32cnfQceqyhi+0OHKRBOubzowhDglORRzNsvPEJyH\/iG71p49cSLuJk6U\/FLWkbJHH4fuxykYC7EJ50uA6oBLvBW8O4CU2AQltVIK4OD0eSuFC5+B\/KQrdZRJCzo8WnHx2EeF2QvY9FAyXSJ9oqY3+d8kR9gChbGvmcCJUlgVK02h2rYUeynjEHu01b7mNg2PFcGEHCJ6eoDK2EXXFNlLjSvVhEgTtQY0oe8aAQtxBKzTdzAih50bEU\/3bHi8VZX4OLrOfrp7ef68+SSjN\/NTP4mMbpab6M751o2BOshfax1cKSlrkJnNqUyo6Db9FKITgJidg7OM0i2tYIC8CTzkKu99pIwuK2Qg9uakpwnudB79SQa5a9aspBgcPd+eeopsJrzXEb2ffKMWNQlSlYBZCnUDU2vVhkAQoYvzQQCOrJLFhnmniJkve90A7FQpdghSvpBP5YKgxVMPzDuMoncIa2MDiKNfwSbV+ctY9dGY835cXp5YEOBGIU09Mcyf0l7whqoLYSTRreMtrXLdtm23juZXWrNW0onRcsiWP3QlMwtrg01JErlUPgUHo9jbsVbuIgwJUY5DPFQrrstPHeXcsPoshtJ21Ur\/Nn4c\/VVUc2in0CAWTGGmwXvVi0+yEVc7qoEDc50s+np1daKhkVA6nrMljJmnCjKjUfqMO5pr1Q+dwOQeAfvihpZ81fVwTP3toHPQbSfIpBxi4JxvEbFTqnfwbOztH7qHw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOyqgErFg9qPvf\/eoGp0Ju+cL+NPlskVvGLHkV192cnvnlEV1MPxQd9MgS0j9vf1X1fvxQPZUH+hIBqFjGm7EaNdA8DvVUcfQVURxGm7TJ+6H4CFXWrPvNNNDcQGO3DgNPvAKlc1z0kwxpnTSco3xaR7Tfq2JaMpJUGECVgOiQoApUdZvLh3VH11Dr\/sGXX7B7n1UurvSvv8H3MTd7ZGjhS7M4uaSMlZcK5FRdEvAmsMdU8q1JdWlUSoArWfNS\/yAruPQfNpdHUSDxgVwH5lTnqgZw\/r2n5R5Uj717OkhIVavGt6mODpIk8vbUffYZVACrAdesxaugfWbo\/G2qsyLNHix1RQQEm1j\/brgOVhmvekAqla5ZMaM67KjqgeiLH7WEQ9mTgNSS6N7M8tm5KRA0Tcy\/EPHxdqNmeYW2opLXiED4n\/BbIcj8efgInmvQvD+b3\/DDwlDpsYVr1CxpzQ\/aGH5naaaVGj7TgdYUlCb\/DpjMllaxpNF\/Mh\/nzqx0g+kHD2ZBwC\/k5iVuVFWloYqlwTxrFsR42muiYrG71\/xrEr6mMnM0Axrq36M6nVcX6CZVZbJM3WFiqdrpeoLBZrQJbuuuUOQTV3ahVbOkDDIi7mfCiWhXpU3Zui4U2C9ozqB2fZiVtp7uUndCOwn4k2SVvpayCriwbW2zqDf+TH46qxf9IvyXZp96MiVnpwgj1e9tjoldHYuzy9GmH0kWHQH8MK\/1elQiuvyOx8K+XJR7t7+hr2XwPBk5XuzXKNj2MKo4fp\/kVg6PGffTlyz7mYWpmnRT4GiVCCeyHewrWseVyYP\/KsuhojIyB1sKbbcDg1R6gOI1J2Y4PtEPw3VWq2yfcqZxej88dKOPLTSK7J1fnVm4FGrK6wdvOW6ZIeNvswtjIlpLC3\/JWLA4N89OVZZW5BE+X7wzn6\/il5HoR+vZqfJ24RZ9yM2W9OfQslmm8xYWd2N2jatZJaVAiGZY8sZos9AhOYmdli8ccTs5\/A0kJrlTsJqsb606IlVDF1Om+YlcdLRHUmzMV5zFV+o7DIJHwveFO3PwjNh6FH4Na4OH1he6Vi+yRamrYh3F5YiWs3YQPgQGvEy9kcrSH1lHCbOI5NLzRoLzVMHFyHoQAjh8rXOcAapg9u4nz2zySskhXwx7e7580v+M5t\/AdImualb0\/wYFg\/Rr1qdpBaPgddXhKVRCwDs7gHi1ojDTdfXNY6STq7IYEqRqTwe3oLenfD6nj+ms80Mj+Z0wVOh7Zn\/qNT8kuL8ceaIczPNIxPZLzkQJhYmaDa5ioBxTyX1XRgZYOwbqL95v1c7wel6c2NBw314I5CvNJrZrIMKlyFNoOxdtGMCzTzQ2xfDGX99N756bSJHULGNd\/bKcsrodP6H3\/u0E0g86AQ2f44wJaZS6idIsVxKhM5CiybzdPskUVUUFSh5sf2xtG11GL97ZQm3yPYKQgmFsJ63aYQZiNc0GTVS5lUyxutOtFwEf8e6c8fLrugsyFAlLAGL9v7qR\/g7A3KltUGy9iJ4a2YrF4e3WA5li6FthGIDEw70abPCl6\/iWc1SrdLkla5VBleUicaFbh1L5tMdiVkX2j+spxlTwVxscbf8i5AmYRCYpcytEDw6IOxJIhDfUORgus\/7WJSM2YH5PtF2KPmtq8gOGH1\/+iPoMjUGnKmGtw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOzMO0rpWSTkWhuC4Np19LWd6oP1qEy30fFHESDBJWuUA1FaX+tBJj6gm5kuxGEmVGxFiIVh3rslclUJBjLOZ2RFaq129+hfTiym73W7O98UpqNgsvxzWi24WLfY76s\/zQN0kvs7t2zdc2wUSYX2cTZ7sgC8LtSDDcqvQVIJBx2WGZ5\/aHUnjg88L8Z59anP3fCbweP75iwjRS19L1bkiI2ejFAW5y3xi831lALGu4zbTLCk24Tw5\/GKJ2xiQlQCiZ9rbg0Wh3qkL8NkX93KXdIxf4KPi00PYcJ3NKceFewLaKKmmgGBA1gcNnuS8VKgkvJnZSoEIInFe+pMJE+W7CkVdzzsVyToozCC2B5sN8TJq3tt\/ZBz5bqRcuU3dD7xrNWmAFLsROQPw67g34RX3pJII7fIr4asI7xm9MUZOiNmM5Ou5DcyRUatsC05ZKXZNXsw4AqMlnYUWApm3qOXLKM8BRPypOrHoNu1mTM2T51loiqJSK0ud4+4KtMsPsljNIGEDxKoObbmjag1stmoThfLnNleXonGEZaC9EOstV8n8VUYhcfpqAQEWhTY6Ads5RCcGz+xuEg+wPsLOhEUqh6DZGfs0etxigZjfhVKgVAjtpB4OTQBosSx90Brj3C+m7mrt5Ux2IIisjQhoJXopHnsbOyu4e7pRZZNO8O9l1ejhKxNaPrf0bnYaiTA6gSl++bJNQppFtuDc+fHrldECJ0C01e6wXu+FpTWAFiE4SPQyienHZnP\/aG937j71bvYcrYzlo+RdPn1CAA1Zivd5inTw4j1RcFgOtd1Bw2GM3isq6E7A3jVqegmbZPk2He1TxRgI7ifM5MZofQBE0QsR3b5BQZ\/ZKMv5FJaiell\/nI+BLtuQiHJ5c81D4Y46XMO0IvLbSB6R0stxYypwod01Gd0HLXPCYErD5m19zd\/zV66sLaZv6TAJA60SghQc0hGe1BRqcVXijBcj\/7Ahvb81az56GcP0GOsaQyAOREI58bnBT3MamTJV7gvvLKDjEyV3F7ew9boq3eRUGLt5Wtw3J0uPKLTIeSZo\/C1Fb+L4UR\/9ed+IYcQxazWOVKb7p1gII8fXPIlPkWu749EnrarRdLslaOuQDCSZn1VVNQF1K1axy3M08Rk9\/yl9GU1exh2cwxVmsH0rchw9WOBFqAnjYhEqjWoHSzQF51E5UTAo6oYhmOy3lD1cgn4kC4JjDPe3dWuYxL\/c+wZ2YXbQLYY3NJC5ZyEjVhGRbr4IwNiKkXXgz8XnjD6yCVN016lTVGrTKrWzGYceViRt3w0YagHsUDkkr6ss37\/JouIIOfwBTBzodMj+zYWJP6Ryoh7QgwnuoEynQY1u93T7opx2x9y68\/ZN7GDs0pnGzDfkz02OGlL9xU3AuNLglt8rHJgwr5+b9RvJoHh4tq7n5uTnXVGKfZ3qYudGoc4YBw5Ccq5oRWyw7J\/E8ndIYceZQaFRzuGE+A1ISrwWXhsL+QR7ecU2AnMWNwEaV\/2SEz0AO08XS1IUOu3mFi7XN4j+\/kXpyWNN4VP9tTnKJ6XCQg0T+vLxjPfWNCMMw24SNemgS1CmywtMvhzL5cJEHER2H5C+7l23Vkiu0uWxb1eYdlVYhmUE3\/j\/Z2vVQPHL5CYck3uwZiHx83t9pKQvoP5zPC5d\/BTB2nVOAFoa9M=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOyiQUnB\/l4iz84y2E1+wQVocorvp7AwMCMMkX2TqYqMea0YoRV27bwdTVKsqpxX\/fIXFY\/tv9oEmMCNU9AylvWdjcf4QR744sa5b6mQCy791Tyatc63ojuFfHMA9iRBXGYbVm7ryIh4y31wTI8SSXF1Rdwj3Wt3YyRbLBVvaYtsa5fHdfGE8LXo845UrFAN6mFhuRZdoaZx0gza3j2Oyc2Xx7d85fI6e\/VRKHXbIzl060MTFohq5cgr3qSPUFYzzGzAlkbhUEKJlTls7EMMK19yNW6ywGw\/Oc+dHPz03L5fXZuGWm0FuVUByCoeXiepCbPxb5fZGFzXSdNC2R\/YLXQdoSFc9J2ez56Qd84hSfpz5zDz4VcKV3\/ZMzZXpq8003XBoFt2GpSdadfsjFUfaAkP4Y3VyHHbB3lu1TYdB41hBKL58JUR\/m+hkffGYIAtIK5Da6JHUQi0w4SurOMSBXnQpB3Te4a3A7EJ\/HkR3kDedBnatbBOcorJFor3JaEiZGm\/Qulp+10njTZyD\/gVIl\/2uR5ygWYh\/isM2CbUFZn4FOj6ED+QqEP2nXFmzru66ez1oW+uRqzDnlF\/pHgAjeVhvJeb1B38BleB2XDKAAY7+qTM0TC0p5QvLqhzrrZGJBceslw55ibWmagIHuThlRZN5f+Hy6OWQEM+4GXPUmWxB2TJ+RfJWvqxAT4GUf516ew142dL6KrhTkNoKlKiovsLAKZeLAXzwAMCjm70NcIY\/9OQ+QE5gpCYs+KZOMMw2krDIaO9bJmlQHPvd0PrpxVYS5By\/zRaCVmrrg8ExQjNcDr3dQ+Q7rfG\/+kG2u9X2fP3P+fu3MTtqY2BnZUFHs0ZTUnh2Dt9SurbiWLxuEw4Xtyy6Pbb9Evp\/SR6nxMEuHaj2y1ShOdbgV5ZxodFRkpddZSEPP0kqLmMEhY6YmY1ZCaaPfY+pef14Wf+53HteEyOiQ1h+llHAF8zDZeaJmq4Rq41uroj3MHEI4HILC+ABS+TllgkgJIpGl0GIaYBHPLOGyhPuaqXIcpZFhm5N5RfnMcDYy5\/rG4CHMrqtV+V+GFqbYq88+hf6Dvnhy6ZiTlSMf6grA\/eA\/1w5bPFY7uUbPQu51PtdGkkODhF01KYODl55muobq63jzi3jo0gUYvOI1wigAPcOHBhupvw10arPzkNh6e18oMwH8KfIW\/TE8Bfw5oEnN\/ook3DkaZlrnQwudluZ9t\/8xCEvWQu0hFLcBm\/yzGXSbeL6jOH+vnTh6Wgi96x4MMTf+fs8PBlu\/enCk42WlLUzUeMrFAuaGsReps676b8tul18qRM6+RC5nQqjNW5t\/5K6mshHgXG2F1voJjGNtX79ZSTK7nWjK7BCY9QD6XMO0KX3zOi0r9fMFyaIL7V\/4+5lyJnpuVvay9d1amrMFfdeq+RNCXMgFkMnoJGis2dTbFYr+zdQHnn0EwGSG\/ZIZBVogjuSPm6\/7X+xrvAYf+pOYDhj1tw2rl+V8TDdJvgYlmipMGRINsQiSRnbHEZBswM3PDEdnXeX++S+3KIfOdvF3k3ExeGmz6VUAv4AdBzgRMUrhPZQObcYIQ\/s\/pAZVA91Egh2jXo55BQQGSdc9RsX+pYtImdDbMb7O7xng7UYblkJnf6tdLL1dcYwQWKuhtCgSVqUSKDWQnJxK\/4SdM=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAACQABZEalpXmHhkgrmKKgBu\/L0BOySq1IvKrm+E7X\/T9abubB2v8NhaWboycGAU29o3qyGekZubQ5GG4GoZFXwpKSXGclgQ9Pa72x2+g2rJPjWCDKTXWEJQK7NGQVILfAo45eYfLjgqtll+RUwg\/f+31Ha+Q7diwHjdTDjAqJJIXzLa27eZbxP6mPYgS0Z8M+3h9KZxrpoQDbJcDrGHc2HotcpBOD1jMaHv2dVTFhu5ok0tDo5tiw0iwarfg6uWFvvDAhEooxQU4sZhz86U8efSQDhT7rnTfqgr+L3gYXzirQpEvQIuAhDX5t1qzDBNs4XsckgOA0r9xAwLA2cZKK+UdDeEUrOgqJrf+xgJGJJRFWjpWisgw6LoQeGQvCpAH\/93i+6ZHmKXvsKJef6JaAd2yQJ1c6Tt002YW\/BX\/Rl895dfgaIIeQcqXDjs57l56\/0Uy1O7XN3VEGtWHaHOWOQO5zVHQZ1nGotJLk20UhGf5\/qXChJRbAL7eVDdjgdd8UwEoO40688Mxx9Bd8QgwpFxGkvDW7TDh+4TxsWkIsCicFVxGr2tT\/HEexX9CCkGDiLbUI8VOQEQjD6wtmcLO8aUx9o5yezXnnuU6W6ohUf770NWtccLASQHV58pliVQzc53YdVCTtKrfFjCQZLbaabx7NV\/9k2gV+MFBRSR+ctRZx1oRZGRj7fua+H65JjNjBe\/wAMOB+qm4arcolMOx2vshja8BXTkUxOTln4HEm8v\/lTnjcE9jb8Ti3fANfbv9xrAyUH8p7z4a51sezz+G23UAi\/17vq87FLNou\/G9lzBnaC2cF7RSlWczVOyzjOse6lhqzWvMltb7Ii9TYSRp2z8xTTrbIm+Dq7jHqxay5T6vAuIzIZT6On\/vHmn38TmmrEUCrWKhkOb2UTQ5lcj+enmqs1zUELDt5fhE21g8FYq2C0QLuIBs+t8q\/QWIJI5X+LhOXyN1mMr2sWYGlzsV1zTCp0yD1b7Yf4FJHT48+28Q0RGY7A+ta5ZptJRqXskv0Fd3d7LXWzcJCACbB7X4dDpVc7vPu2eidPEkU9mtRY5ys\/4AK0SkTmssv5PJSe7sgts81xSLEWi7\/bTt13Cc1AnUXUfSIWldDUwNO9Df9VBpQ5bImSme5VdIUd7nx0Ho1+CSCQz7vdOwD+6TYbBgArYLVWW9WubuelklbGxkPpjkCuDfLHRXzzKczee5uICNlXNaQuPFW4kAhD7W6XPAqqfk30dbSLEN4twW8qZxmde1No7SJvrncU45mP0YozKPdkBU\/MhhAecZ3xfkcGw1vlMoqBZL5y61h0zHpyLbO6hRaUO3e1nYcYp2oXyAGs+RHsz+cVkk9n6Hf7gwsnTAOrsBERnZgQdomCK9w4bbL2gmAZnMoZ1oi\/9UbTbTYvIc\/ddhb7BmQ5f\/hEhLjc\/mAkBbOYJWtYrszGMHsW0m5UbuC6gh02N7YXjMyLf3LrjSGwFBcKwLPwTO8OeLZtsaixi2qGd+tJbOHd9OXGs05l63TiXiT9wX6ZaaSzDldp9YiY9yfy+hsDQ375WOkZl3HBtKDuZi624XPY7QCHmu0fZ+cGxOqJQRkW+syUmaR512pcynbMamm4ileDyu0j\/wc9KhPgaox7+TN7djrb43L9JZXN9j8wrhwVcwIliqzA2vkjJqJEhJlKKXuYZ7HP3rJK4bZIYAc3erF7AAE=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOx0b0Oad8iCyd+zZo7is7LEZdoPZIf0EPZ8gvXKMqV+4nXU0Qq145WInGYEVNaZMzWdaVagEs8jhXSbchKA2QoOITm44I9ilWP+n0OkHHNqdEYHzbeivXmz3jSiFxSreLFtrAiurp3+pTERZKFLILJHPt3RkoZd9B1Zhz+CyZ9VekAD8pg\/Ha8yBUf8dDKpgFva+JdO0PG8v0qaHEnn6QDKVMvpgHbuNt\/j3qV8oBIkitVel6fXVAVD2BgdzR\/U0nwAd1+AFetp9LeL8UXd6o48937HdNpEYDWhXwx4X4AJTXdaQiEyO8sEEtMEKUk2hkRTV1BBaIs1CoEQLFraEYQenf8+Eoxcbfmg2hwHU2myKra2YBELeAjGBVCavyTysuQZFYT1KizbvXJq6GE7IUxz5u8SDwJhFMmxTf\/BePBHj9ZYzdNg+gKgcL22Hq6zRSydyF8MDtS9heWyVDXxYH8M2rF5wEF4YKeOTlzWd5RfQzFAAHrsD1vhXhE3NV8T4ZkJTLUzF4Y9L9Fn4DoK6eFBqVTyIRLPRH63PZOhbmlzxzZO9btyjAt9bUeIGrFpL2mKYr\/nD+3TJmHmrwCzlkb7afXqA\/3j76xORy9X9IuSA1R6TnGQyzwKo2iwoVRjrDbbGNQrF7y+XlAHMhpTfnFMmPQEy3VknYSu1BvhD23P\/93C\/marJNsnEPxIIl3JuHMh2j18rIKrIpWZfe11fGke9pPgUF5mAA6OR\/RPrXjqwGOuKSyUb4+YhuOmDeUPGz2HEriQPTFHAqhRhqHcnlGQTtek8lxkjcOes7bLJ\/u7vCt3YTqHsfSeq+lWngw1hdgJ8ZeXQUf4+S6m0tNffHVdDCR16cvo4bIySv5pcCJc8F+G24s0InICPHjyOOggxJ8LvUk+yJHww54\/niD4Vm55FpY+SQp\/b1\/o+DjS70Z52qTFZal0wXT0SUQ2BOYcL999PaCrHSwAhVlYuXIuG+\/DQ1gyK2GjhQusfiuVMNY6ccW66ldhc\/NRjW05o056KhEL43YUW\/1FGD045BPZEcLo0HfdhNxT9MX3DE4PugXbcAO9tmrJWKqJc6Rr8CQvyv1KcLQPdr1h5Rmg3Kc1pKAMd3LKKDQpaQtP8\/FWcrUabwvhvH38q9GLpAGYWxSPEuRoP\/VLJmlZZik9R5ZQOxF+QuhVOrjpqgLIcrrZtDnslNq\/6hSY8rFE8I9XgU0JWIStXTxTZh57cTQfQS0ULobtBw1uuT7UB3cYez+ajx4gU4dNno+G1efFVp9Z+nAbUjcy9rz5VDxng0XcGbQ6AZFTrbaNZaAfgby38XeOP9Lwl9DiVaFNeJxfVAyAeY\/ggeaYUqu2oxmS4Z+T75rCAEhlJO2eSKYfgsO5eUu6SKeaGgH5jG+6rICuBPp3dCzVTqzc6xlsnnNwY4lgU6xmmfSqE6P4SFUtW6wNI9jKlJtV6YdBb9SC0BOOuNk07UDnb7n2lSDkXolOwlICsYcG95qo2TgyPOUtgtwrUGSjJV89sncMXrhnlTcNaAWqwowjhpKD2UMwaEbnQ9iErMbZAhPgGrc05fUfA\/RmZqp0goC2D3WOg+bXEFBrwgfUmnDxKRGI5YS5PwIUhcdA15mFySXJxHyNk\/\/G\/CIJPLNkwqYbR8KeFOFu4BGDeD\/c193xDOJ6EBg9JNA=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2020{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOwy6laUjTYewq2Spk+Y3e2yDYMKLalTD2TDtdNS3pSMlbab3+7a6NSSNHvax6I0YLV3DpJTGtqhvyUZDGedUghgAYkE+uQ6NNuTtnxQEZvashFrqcVYpdGF70JZzHWptCLI9bb\/X7uMNT7jzxmucOlQ\/38AvE36+Yk1lYOmmma6+GBQizC0IIvPGpT3OPtCXjXWeRJvajD3KIlBlnQtV+v+gU9aLM7Mul6Tiws7X5yqqU6ZLb0i84kbP\/IpgjzfeiCPf\/vBkCvH5SuoItBslOwwLrCQ7Yc\/8oj93ls8F1n0glzoKMeQCjhfs3bBYBMeLV6mbA8dM4ZFzR86XF2mtNhKAK\/O07cVcjqILtGxAowEqwPa7BRNkVmeyaH+GLmAxooUwATTKdX6HQ5VXV4cVWtjbFB\/We3PFzTM\/wjyhL4tY2SF+Gb2Tuwen5RTIFcztYXIIpSsarArTaH5WlLZU6+EFmQSNKqiNfQBPA5\/xGIWqWSql8srvwWS0CLubzrJiOww67LP4UuGfMirVR0P+U22Tq59SMdo2Txe8rG0rRoOLEJeCXVmfAVTtpjnVMZDdg8\/fAe54v8BChpSnWwCSQqCICEdYJcrKCkfFcXv6YqexKJNWhi6f4KL0IficoZotw\/nfPDQZsJ+7TlCwQL0A+vgRiXmsQY0moYX7qXKfJQFLj\/Fh63pasZThjm7ZRTKMwMxBeNuSTyPTgHo7ihFWjyu5fa6OjZKZYP2C\/bwYK6S2vyTjfHulg\/VrnAsmETMCxlUswrPz\/yuciN2Pfh63EJQWDwDs+VDEJ96KEsrEOjDQ4KnNK6C8SrrNtwY1qU3wJzE5coLd3i8KoB7SW\/uO13Cndd\/LvqfRyTB9VjkjELZmx02NKy5mbkX2yMjUVCTrWQNR\/3kC+ooWDzdCd\/+19CjbSadADCSzoeeANaBOYsF57BsqrTdtYdRZTa0lYWRobUKGxeZGxV04TNq+YxamS1vG2SDVMPNTD5\/5eoB7D1UMCkybtD1O69PfsfSsfv9lQzN8k73l664Jp81ern8ebHRjBFgNpUyPLPddHgbj\/hvxnM9lPtFfjF\/9IIiVG2Ntqx5tjB\/8uZfpUkHnDmacv6AO202B7m6GxEmQV9fSjTundcnyriA6rzeDiCgsElWfoAuh1JFjpbE+l+ZlW08pRTDoGd+3Xld++D3GrhdkH1lFvNSvTZx3gt2hHJlrjLdkJqo+3MO2Yuo\/hDycZu27A0gmb6N9eGKx2mgBv+4taKGD2GT1AjYCXyQqKhoixhAaSGp4sPn3t7NW1M5vmCrfD0sKts+jdjepQxXzGWAy1ZdWOGJIyU5WQJmpf95IjDp0GUmL3aCtmttEDDAyc\/uapTJp1QL76z0TejT0VdWsySdeO3jSKRnNu0fmJeRwLr3qWjemM1FxcXyxvt\/6JubG0PvSlp\/\/NJ1cJ0u98n\/mUs1Jb2+aOS+\/kzR4iRZv1IV\/RoplbRWK1wddiktmxgpNySv4\/oEwwuOp76N6Cz7GsGTlXV4xBlX8h4YAAb71BTxYrK2HaaXn8P+EzHIHTROo9ensnqa3oI1CtghCtQvdK+PfHg1q5seykuamoX8GVaxDVNP6UDDc11olRcIhxlhxkSRa7tZ+61aPLdhOOexy0wkeAOygFVU2R01L4fwEX6ItQP5f4K7u9c=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2009{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2022{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOweeFO0dCcjX\/yITzOw0To6FagKdzI6dv1CBp0wllLgc2Da00m4Kt+\/GmvBtmB3W8tZJGQ6KqnrA2EX6dDHi\/PmjTVCsiR4EtceS0BYNPacW268QzM5uYDmvIz2M9+QLnWkNgYdmltQ0nNWKia2A\/EYnXh7jGW9vYWZ3Zr120nZ9mGQ+SmkoYNavI2KBKrAL3TgXJHDYMgfzSiA+LBKiYeT4Is1pzz7iwPyyXvnaalnf9INUrfvrbDdp4c4FWybbhhs1JSUNY5exbI2EMRR3kAAz5GsUG7lbm7FNbX4YQTA7HyYG\/J5iQvjzXEExK7pZwMw7EsKrOp+SvriI0u7tlKViCpCW0gLwHNU+zPWDTv4sI5+KLNH9wISPART7yJTnBBUAUmkke41TGUVD+vfPz+\/Brx\/qdrW9Pka\/ILpLgisewDWwYjZYPVLzBTUkEeLSHBkvFDkZ40TV2zrHfW6kUmRMVlZOX4XO2cwkHSUEKPgUjz769a0cTt+sctQOF5rdUPeNvawUaw8Bc1cHm4y86n+rtOGCDAE7g4dpUs3hRwVUtbM68XPEThdpi+TVmo0omxRGSzJuqAhFCUx78FaAq9WBjKAUC3Bi+UFfHi+8i2q74+D3Mm9pmf2tvETneGCXmUOfVhLy6k8gETBDKWGsDl0YwmR7\/L5+XnMBzSjrMY2P6qaljNxKgR6JsnHQbHrpj6EPiodUZ0ZwVn6OQa+Gi7k75UiSjeLf6GOYGcDvR9xxsY8DGhPHejMZunTjwXzbn5cK6k9CfUtzmt76q42bxr770wuWNHEX9LpyBs0JDBF+JPXswOKYaYgSEkMIKThLnHNTvi0h8mlJwxCIMYpdAqA0gEMsETbsszxc9hVtZPU9ScehQm33tSmSBdT3DZZIKHYhFwns0CrfylmYktmJkQij5CgK\/Pd87+2KMabkHvY7ebOR+uDvYoeG7kLw\/pFDiEXX\/vufyZlbjDmKSYa7jJ47FR2ecESDCF2OlBK0PISjI5PNx+xVhCpG\/g0ohPzk1nqN7LEk3e04ajKss0lkGpd1SvSeaH9lNVeEtZ8RMWAfP34m3zxTE65fW5yMurhx7rRpaz9gsspfVn7bhoSUa\/MOEXHBz+BmGcDjUTZFZB+fDOWPRYhSleEgOXawmW5Xg\/HaYA96as8bSU6yUlavIk367m+\/O\/1ChlxSSUqe8F2LqQCTGQ9VcwQitWG91LivlKetmsKSaf79c2EoJGJLslnj\/zAJXSEdnMKH+2OfdtmVfvCeXDrIsndCJYpA9JK6M6ORPnaaqJMVqXC+bFKcCN2dU\/etYTxRDyZ50DNtgp950sZ1ClaS7fel1wrfS3x\/uKs\/iMIjv+nC8BTW97n1HhttBLLOGNeAieuD4JCpan1qOsAPinLbsssibNbRKmLDNnzOsxwFPvjfLntcbxT20WSyqTN2YPNe8pvvpNo5yO\/Nevxp8\/VzApLStzhfIz9wfiZrfe41Ew5XbRmRW5FjUqMUQOKOh8LjchfUlAI\/YhWReYpak+0ECIeSHHR\/92lbNDmxm\/reULgB\/cTAmNrE7749Ad\/oICFb+Pp5SD8mNMzTlvG6p9n4cxwdp3dG8iEPsvym3e\/cuS52SPfY\/Q7m4Ig8Y\/So7O15GnT5mBd+njRAinvYn8D4YJd9W+FaqoQCdTuBM7cuoI=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOweeFO0dCcjX\/yITzOw0To6FagKdzI6dv1CBp0wllLgc2Da00m4Kt+\/GmvBtmB3W8tZJGQ6KqnrA2EX6dDHi\/PmjTVCsiR4EtceS0BYNPacW268QzM5uYDmvIz2M9+QLnWkNgYdmltQ0nNWKia2A\/EYnXh7jGW9vYWZ3Zr120nZ9mGQ+SmkoYNavI2KBKrAL3TgXJHDYMgfzSiA+LBKiYeT4Is1pzz7iwPyyXvnaalnf9INUrfvrbDdp4c4FWybbhhs1JSUNY5exbI2EMRR3kAAz5GsUG7lbm7FNbX4YQTA7HyYG\/J5iQvjzXEExK7pZwMw7EsKrOp+SvriI0u7tlKViCpCW0gLwHNU+zPWDTv4sI5+KLNH9wISPART7yJTnBBUAUmkke41TGUVD+vfPz+\/Brx\/qdrW9Pka\/ILpLgisewDWwYjZYPVLzBTUkEeLSHBkvFDkZ40TV2zrHfW6kUmRMVlZOX4XO2cwkHSUEKPgUjz769a0cTt+sctQOF5rdUPeNvawUaw8Bc1cHm4y86n+rtOGCDAE7g4dpUs3hRwVUtbM68XPEThdpi+TVmo0omxRGSzJuqAhFCUx78FaAq9WBjKAUC3Bi+UFfHi+8i2q74+D3Mm9pmf2tvETneGCXmUOfVhLy6k8gETBDKWGsDl0YwmR7\/L5+XnMBzSjrMY2P6qaljNxKgR6JsnHQbHrpj6EPiodUZ0ZwVn6OQa+Gi7k75UiSjeLf6GOYGcDvR9xxsY8DGhPHejMZunTjwXzbn5cK6k9CfUtzmt76q42bxr770wuWNHEX9LpyBs0JDBF+JPXswOKYaYgSEkMIKThLnHNTvi0h8mlJwxCIMYpdAqA0gEMsETbsszxc9hVtZPU9ScehQm33tSmSBdT3DZZIKHYhFwns0CrfylmYktmJkQij5CgK\/Pd87+2KMabkHvY7ebOR+uDvYoeG7kLw\/pFDiEXX\/vufyZlbjDmKSYa7jJ47FR2ecESDCF2OlBK0PISjI5PNx+xVhCpG\/g0ohPzk1nqN7LEk3e04ajKss0lkGpd1SvSeaH9lNVeEtZ8RMWAfP34m3zxTE65fW5yMurhx7rRpaz9gsspfVn7bhoSUa\/MOEXHBz+BmGcDjUTZFZB+fDOWPRYhSleEgOXawmW5Xg\/HaYA96as8bSU6yUlavIk367m+\/O\/1ChlxSSUqe8F2LqQCTGQ9VcwQitWG91LivlKetmsKSaf79c2EoJGJLslnj\/zAJXSEdnMKH+2OfdtmVfvCeXDrIsndCJYpA9JK6M6ORPnaaqJMVqXC+bFKcCN2dU\/etYTxRDyZ50DNtgp950sZ1ClaS7fel1wrfS3x\/uKs\/iMIjv+nC8BTW97n1HhttBLLOGNeAieuD4JCpan1qOsAPinLbsssibNbRKmLDNnzOsxwFPvjfLntcbxT20WSyqTN2YPNe8pvvpNo5yO\/Nevxp8\/VzApLStzhfIz9wfiZrfe41Ew5XbRmRW5FjUqMUQOKOh8LjchfUlAI\/YhWReYpak+0ECIeSHHR\/92lbNDmxm\/reULgB\/cTAmNrE7749Ad\/oICFb+Pp5SD8mNMzTlvG6p9n4cxwdp3dG8iEPsvym3e\/cuS52SPfY\/Q7m4Ig8Y\/So7O15GnT5mBd+njRAinvYn8D4YJd9W+FaqoQCdTuBM7cuoI=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RTgFAAAFQABZEakuXmHhkgrmKKgBu\/L0BOylR1UpcUDbGFbmzbnUfNxFNjiYTOvxLeF1Szf3qYWkQDxT25KhVHxYyZJwjW\/39On\/ouWU1QasZEYdfsHCqmZ4g\/6v7sjy6zSDx1SL9oNDVz+osj5H7wyFA8+JnR4qYjBGlZmU1EPBOHFZ27qCIGgo2QHf3BLiCfaotEZq\/yNRu\/qrHK1fxiYSAFdnSoz+i25faiNmLJI19zsd5XsMBdFoYEN\/QMM5G19Sj83DNi+olUnHCyUPBjUO12n6G\/ptANm21DTfg9krLLOAr5WXB0nZOSnwZND32Ar3jKr\/NrScRcbXs1Yd7RMatrPMAtror+ef01nbW2cKUzdZcIVqnNygnJ3t03MPXqlETRftrQPmEXJI9OkWeonuUjMoiGLCie3RPD8MFIf3DdBbOdHoPgd6dK\/+0yQlxks5PHkXfYCIHSwSteivoxG7EpCKmNLtmtpimtMMTnsalaXzr8wYIQ\/KRxIcVFoaf7iCcbnv4bAXTZnkNA\/d6IjIRVdq4Fc79f5UGME\/UTh0Wk2Lp6gA2spilxTB9odQOErQEOUFmuviuTxVlT91tSZMsk6gdgc+OTI2XEFdL8dacFqu9E\/dW9a2zdYxO9XUeiWbV+vnnTed7+JNLqi8tIptFsFJ34MuRSi+rciUmB3ptow9LLDGSMxhPWpED6YNe3c9Mz3wpabD0lQJpq5lBhUw3LkLspiwJvfE4JG+bxrIrZuKrpkk9fx+lgpoimkhowrfS77j5Rhj298O+yGnQjw9LVQoT8EmzmQyx5xdWvRxQx9yuBd6QFBKE+sOHa98HwQswYX2+HZORGm0EuVVuRkbbU5Yemb7RQ1YoFULXKzVjw9IQlXB91zOOzSCG+dwetB9U6gviKdxVJ47B5USZOTNscvjk41hss3XIyvu19CZmknpwq+sYVaETVwQTHRsRe+CGPkVx4O4Ymif06VxgKHW9BZ\/oBMI93yeeqjPrx7ySKDJGFoJsOhKVaHgPM2KLtKBx+A+H2tYbVnul2kbk+Y03URXpETSfJfx4eJcS+4fybPY24YiVByqZC9XqEkf1m7dzYP1Njbg8YQbZYiv\/3jd\/MYjRJaIMLpQSyUHN5IVgrRDr1SKCmyxkqE3RF50Q+StiZg7gewoGIFWSoLf9m+MfTsmWXZHrVrcmkwv9pViUMHpJy1B0rWL4DJ6TFTXt5GlvQC2P4izbtiLSMdWNbhlxKkYEaNKN6KBxe\/DXVT7Q5Ffreq\/azQGgdqQIK+2SdU1AcKkj9TMns514dUZWw1+m79aFc0cjzEdJD4vy8zr9tdH+tIBnogUB+AvjYOejMs7eplYnVqvRYVakGRBUD3k\/AxoElQcPzc1xdiUIskzzk+u1BLcXnNtIh4MkYJl+X1JEzYCyCQS9fYmOki06\/\/GhyNRvuR\/lf3JLhdnU0veBQ\/suzV4338bo3Iyp8nFyTp64Dj\/XYmJ2Q1cbPaTXsSs07pQTp0TDz0OmbDtGiakI+lFMAL\/vzSSJlH7l6IbbcyaWecbpqxAIeq5r96eRJjJn\/N1yy\/N9klEi1ae7nzRmpBZepmDN2Y0e+isWxJy7jVuEeKwPnNBfpHiyaEcVl+OpU+K29lskxVpKH3m9d9kiqySKH\/2GbC1rWV\/7K\/mJw1riDg6Jmlo0DlfrtTssz0ST8BuU5Kho\/aGgKHNXs8=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOx9L1ekf9afdpdKBSMLoM+LlkckcFaKrAuYcI\/me3jYonzhXXwNOldj3RQsFJHBhf6W\/GV9WqrH6v5kuq0KtUsJFMcjxveAfz8OSOCnVwfe9jJOwLYYyInMELfHh09w6s2MUDCgKEJDjHixocVggeXeRttFkyMiUMucxSmi9Ji\/dja1Su2fh0ukAdhia1jQqF7r7b59SdNZlrbN8qDJgVXTUKGuBFOJv66PXXVSrW\/s2yYtuleLybYSshyOCdArKQtuT90oPIxTtexAuj8a4TwXu4Xtvt5MYR9JEvwJpnrRduxwFCLaXQuJ9bDLBhrpjSpXsqT4fT\/ykCyRLojUQ\/xWrh5dFcSOxVIY0D+wQ3fcIv8WWKJLvHGnBPTk4iwEXLshb03rqorLBjA1CVKVJTFQKaCOIBtffs6NZTkI5X8T2WjLqrAH18e0oPA32TOfdhjZdWpM8462jfI4xn1ZEdi3yW0kqxXEn6E4v3l87HH9hSnBh9DtxpD8sdzw6rW8YUAa1NTrlKQEj3iheaqkjun4TiG8Pa\/mS\/AIKqIUS8IZvpYE+rJ4l8Wf4nLDJ4GxdQJfkVN2agf+hUn+QROiGxcUodTV\/jULRN6BZIoZQSO098eSlTDoJnXkMv+zf0ADMdR1Dmi6lqGsR3uJh+92kO0abBdNeXY2ddIYrmihy0ykRKty7igy9swVT1+dtLj83F7o0XSpSfM1m5d2poiFeD7VPezaEgSFwmUiSL1AdKbjHgbSfBP2nVkSmWb8uy4YR8nFlavHyOOCYyZXSsi4rNEBifRHwInkq7oFwK+w3gUSdFlazw6lghRkR725nNbmnCxKvJcZ1C5GK4D51BR9h8wWeJA3dZeFh5ojNU1Dq3Wgyh29bRSHWyABrEKHjzT8VFnix0tCyjP7Mob\/fNR\/22O9Anl1RCFi\/gC0ORUQm7++0tlPt5mV85ICrNcjbYU6UXSKWK60nybNQ+K9qElxF11x\/2ZNarKXOfVgIenFRqwkCwfyBqiZSEJ8bLHMS7\/yK6MqHsUcGMS5JdKiq3peNko2GYFUjsq6g\/3YyTct624tZjPbZNPzG\/XWXuFgrYaKer3vrQExNav2nn2O2E2EkuI2QuoY97sO2iVWO4armf2czw6ScFgsSFC70bESL8XQkGRE+hQCkLYotmiLncdsmJ3s2lRjqm9wJ\/wbGUop2nCS16FfaNRN\/MR1WzepZ1Ky95miBF3gI7chcTToDJqRt\/2clPYP\/6IiumjWlnR3dnh3CRK3P76gOHFYYRz5OluHNTPPcZNlki116zr9qxHQ6yDEagg3GwyLMWDkdOFNDmL\/w+Tcjh4tmGAug6Lwx\/nFtFdjDddImArImh2Lbf6+EU1pw8cwfV7N3gBLX51ek2\/ccZLqObtwjXQnIfhI8z2Taea5NuQawtZilCW6ezMIetsXt0Q0Tne9\/bsr7TgFBeiqoVFUXBMI+9U9Q7O5H78kL6IJJuRxff7ts9JUPb\/PKFCXej24hzB9QwKD83ByACf8O3dmNC\/M1IsNeedJFfPXCtc7kS2oH2CmnKhKPJ\/hYud9DBD+XadZkyOrPqb2PN04dmAXLvOaJJcSGVsWkZoxX41Zrp7+JSGxhqDQMb+AgXgQjjEckPMgt7htJGdIWhNCZPxf9HLxX6okc0NNQvGIbL3af8nWmSU=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498296,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":60,"pkt":"RQAAPLkSAABAEU4dCuYoqF5h4ZLy9AG7AChhPFhAAkdWAc94e6TDudziYtYpuZF+PWMMWjpz2v1+QZ5v","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":60,"pkt":"RQAAPLkSAABAEU4dCuYoqF5h4ZLy9AG7AChhPFhAAkdWAc94e6TDudziYtYpuZF+PWMMWjpz2v1+QZ5v","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":60,"pkt":"RTgAPLkSAABAEU3lCuYoqF5h4ZLy9AG7AChhPFhAAkdWAc94e6TDudziYtYpuZF+PWMMWjpz2v1+QZ5v","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2023{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOylvkvF3BikKEyic3NGyGiqOcFwwliwH\/CnDTOqYWdgO87OSeeZNNrKq+AT0F7ecFqdMq9vCoufjw3wkPImuTAVY6ZqxlVcfzseDgFJa\/yPaI\/VSDIz8uH0G0K+e9qg7nzEgPx4Gqz7TokCeGQqmQzbaVJXBXxkMiu+pVaWijpHnv5XE1fmOzvEk0FKpSNJDGfupp\/urkYfqi8gejQM5A4N\/7czJ2Vu9d\/ocGKo\/nHABhcnr6iC2bwiXnjgVzN02UTSb7WQtMH3cLAeUDR2qANW15YLuM49xBBOiq7MzHudiwF0gbGxZjLPIKO+mJUpuYNwYFwiYb5\/Vm+Aecb9CzXjfWp5CCh3I\/+0mzQYYLOEhCXncuXz06DRi0gkPnUVdu7BrJQ2DzDhMlykO0CTGBAc0sAncbwX\/bNv\/eY9\/MxHb3UBdUUGjdgIe0COPwecC\/s9GYSXPY+rPPwV7VYvEQb3RdQlPxPWw71YZ4C9xqbqZ1lh5Rz\/JxOovSSLtEaaQo35yHV1sVX5DutcwDHAB00zvaJTe0Nk73uIc2ZNgYKC4Z2vGEjGYuQ8kEh+D\/236kjR35N5uwGEUUeKJDnEdOtSOYCM1fQKaYE90Uq8oIUuCNW6bPv\/wA+dPESQ8PiliLH5uzrto8z46cgl1ku72Q5MYKVF3S9vsnXmzo7o\/RTDIp0uDIORTgOwzZhUM5GSz7mKeL6w2VNKMsO\/IyNtERzbUelB+guDgiFd2pci2JMmE5FPHl7fzCTEdH1u5yYQFT6KgIFnBBZogrHJ\/N6OqO5R8XvscOrieYiA73cbQDp75rHStB+w8rijfPTbFpYQrnKEfhtbzKWOUknHjsL447zxyUts67gny75ITs1lrjW4FzC4xddw2ktg2aimW6ye3Pxv7BaGyzr4U\/Qq5112VDW8DrQ0Inj\/HH1a5dO8RrO3c3BI550jZgzrOZstQGShdQQKrU3AQRmudyCD0P7pZjStydtJCydKCyyBIxDA+FwwXq+kxWGKa6zIha7e3\/qvMoWK3Bwv8JRS6NExOEgzGA75YpEqvLVCBODqkA7NwKScuc9fKb2On4eqfHWu5oIOO+o0lguRyareOniBZbgINAICh2hO8MwuIOS7oEqea73ExD9q4YAwI5yKamjT4YBhCggFFtps0fUMlAzKW5B9jDfyJjdtYY\/E72j88VOkXACULbAhQ\/WD7D82Ryl8TRrMnEf5GB3IGaAwwfWvl32gaJ2GvfcKh0pGCHt2sDJTWU\/dfeoJgHm8mVuIVMrOGoaKOGAqtHetoIDwPec7mJum4S+GSL0N7MlLyrRdp\/JGRBh+b8w6D37LN5ILAeb4tj6Udw3\/44+RWwlKG5xyt\/vAoODsJJYIAFIL8+4QZOnFI1SZRZTfI2eaTJlqAtbga1tpkLgXXRqVdOtSfu4O\/CYFfVP161xZDWEgRm+kePmR+\/2PxmT5FZXHHx+qi+jUOOJMkbECzeoBSjJieEkyKcvBDsmeArHmCjSrZ0ukUNy6Sdwdb0pvQQZu9ZQndKGKX78A\/qbCFh3Hk5q4PMNlMHk5EnVBO9hIXxpJXy00YqZZsqyRvlrxwO\/zCopiTl0bAthOe0ppWgKTEbJTBOd+Qa2vNjR\/2DbMd12zMvoGrFCor\/tcb1sNgbTtJeZy\/WgJXZzF36KJEEqG7Tc=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2023{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOylvkvF3BikKEyic3NGyGiqOcFwwliwH\/CnDTOqYWdgO87OSeeZNNrKq+AT0F7ecFqdMq9vCoufjw3wkPImuTAVY6ZqxlVcfzseDgFJa\/yPaI\/VSDIz8uH0G0K+e9qg7nzEgPx4Gqz7TokCeGQqmQzbaVJXBXxkMiu+pVaWijpHnv5XE1fmOzvEk0FKpSNJDGfupp\/urkYfqi8gejQM5A4N\/7czJ2Vu9d\/ocGKo\/nHABhcnr6iC2bwiXnjgVzN02UTSb7WQtMH3cLAeUDR2qANW15YLuM49xBBOiq7MzHudiwF0gbGxZjLPIKO+mJUpuYNwYFwiYb5\/Vm+Aecb9CzXjfWp5CCh3I\/+0mzQYYLOEhCXncuXz06DRi0gkPnUVdu7BrJQ2DzDhMlykO0CTGBAc0sAncbwX\/bNv\/eY9\/MxHb3UBdUUGjdgIe0COPwecC\/s9GYSXPY+rPPwV7VYvEQb3RdQlPxPWw71YZ4C9xqbqZ1lh5Rz\/JxOovSSLtEaaQo35yHV1sVX5DutcwDHAB00zvaJTe0Nk73uIc2ZNgYKC4Z2vGEjGYuQ8kEh+D\/236kjR35N5uwGEUUeKJDnEdOtSOYCM1fQKaYE90Uq8oIUuCNW6bPv\/wA+dPESQ8PiliLH5uzrto8z46cgl1ku72Q5MYKVF3S9vsnXmzo7o\/RTDIp0uDIORTgOwzZhUM5GSz7mKeL6w2VNKMsO\/IyNtERzbUelB+guDgiFd2pci2JMmE5FPHl7fzCTEdH1u5yYQFT6KgIFnBBZogrHJ\/N6OqO5R8XvscOrieYiA73cbQDp75rHStB+w8rijfPTbFpYQrnKEfhtbzKWOUknHjsL447zxyUts67gny75ITs1lrjW4FzC4xddw2ktg2aimW6ye3Pxv7BaGyzr4U\/Qq5112VDW8DrQ0Inj\/HH1a5dO8RrO3c3BI550jZgzrOZstQGShdQQKrU3AQRmudyCD0P7pZjStydtJCydKCyyBIxDA+FwwXq+kxWGKa6zIha7e3\/qvMoWK3Bwv8JRS6NExOEgzGA75YpEqvLVCBODqkA7NwKScuc9fKb2On4eqfHWu5oIOO+o0lguRyareOniBZbgINAICh2hO8MwuIOS7oEqea73ExD9q4YAwI5yKamjT4YBhCggFFtps0fUMlAzKW5B9jDfyJjdtYY\/E72j88VOkXACULbAhQ\/WD7D82Ryl8TRrMnEf5GB3IGaAwwfWvl32gaJ2GvfcKh0pGCHt2sDJTWU\/dfeoJgHm8mVuIVMrOGoaKOGAqtHetoIDwPec7mJum4S+GSL0N7MlLyrRdp\/JGRBh+b8w6D37LN5ILAeb4tj6Udw3\/44+RWwlKG5xyt\/vAoODsJJYIAFIL8+4QZOnFI1SZRZTfI2eaTJlqAtbga1tpkLgXXRqVdOtSfu4O\/CYFfVP161xZDWEgRm+kePmR+\/2PxmT5FZXHHx+qi+jUOOJMkbECzeoBSjJieEkyKcvBDsmeArHmCjSrZ0ukUNy6Sdwdb0pvQQZu9ZQndKGKX78A\/qbCFh3Hk5q4PMNlMHk5EnVBO9hIXxpJXy00YqZZsqyRvlrxwO\/zCopiTl0bAthOe0ppWgKTEbJTBOd+Qa2vNjR\/2DbMd12zMvoGrFCor\/tcb1sNgbTtJeZy\/WgJXZzF36KJEEqG7Tc=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2023{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOz+1UE7a4Zqpstu9xSOnpK+DlYckXt+j+3xLUFCoNJbwFK51EAfqMABm\/RKu1hAPJiXrnPAw8PCd48DWqIoercFkiB8fvYDsOa7+WvmIkm9+NuRLzG\/hXaL4\/uxLP93fjucVROen6dHKYlJjfXpfm2PvIL2pLSLa34\/I0AFVpfK0bjvvJpTpDP\/dZwRa+wHCZkeb0vcXNZZOqboYwRATvYlxJy8GJ0Q4JUCCp2D9cuMIkoxFpHOjjz9KKFG9w48ImfXU2M\/GowoGOBjAYcSm3frM0Na58nIadgNOJc\/vGH8jAdcUiqLX\/F\/TIe29\/YUwuCA4luZHs6KM1g5qg\/EJIyA\/vnzKyBhY1TwtWHiiL2iELOkxj4PvjRBKLbrL1b1RImF4pY7kMuNcRG5L95UiE+MGMfzFbgMBIyT9FCcXacBtt6BGEUtiC9U7tciiGG1+lcRHp6AJZ7CDNDDxaA3L4ON9jlJJt\/mxL8jJUF7p+ilDgPYIgag5f4ZcFtIYEDLLuC9bRB0jE67ZReGlqcT1U1qFLs1psKtQq623qkikTCZCsXV20XmGvoLtfRndI932+1pmqrS68HM9Ag\/eq1KN6Ni35fd8JgIrTRSUxJLm8QAAgQCG36GVjEzDodWFK3v2106JZdqW4KNyFUbDH475teRfZ9RB8nkgW9ol+A95Jz25TSCknc1J3JdQm3hZspmKy0SbmU3RgZe+mfwCxV7us6E1ZRjJNRrHuwX1r+bRBEzM5w9Ul7U5Ux3yQBuYZVrJDVtDqd9QJaQflh0LUmP+gkFy4\/ycxax1awbPfpjJJw3i40YS8E9FEhqB3Jbl3B8JEh3yqcYwrENGst0wwf36zo2+CqrvqizcwKY0xtjc2Xcmmdp25GvhQvdNdmXrrffeMvQ1sjNrcfvwatC8rlzFraKo1a1e3wi6VoarNHps5TQbrUVKev9SVvJMtF\/+YFnpPlYbolLztHjLVvFrcIlGikonuvIYaTildsr8qAPcife0iTpTMGzx+b40HJ1RHAksbds7gQ1NMm4+UxaekEeB68PxhCDP3yhd1ij9DUDxH1EzTVLN4vjEa68R0e\/UYj0TCdPABKUmv1EXCT1S+Q48JY+wn3gocItwBasKzzeePp4xvJxCu6Nz7PCrjlDYNRKq6SsKyWTFaTHlJtYnQqJJsQR13YIGAU+fO7B6Y\/GuZ\/KUOuIPrgf4kro88ad0qUfW+aPkengz+ke7D33jPj\/PMxL\/wa3VkJg9ytzDP9AG90RmF1SJh91aYbQ2iPTeZm4P2xtayyCayQvpG+jgo7IoyQ6biZ5WToyss5n8fu0brpFg59xatUe2E0SQ8LieZBiQj\/3KldWbeU8rVmPAKWmmEz3UuNEFj6TAmUUqKhhLeDJ+PKGyclK7i3ZgObZKqQDZ8b4DQ\/cyGYNaBXnjrMh\/9M+zMKaSOea4meg021AGf7+O95iQdHWYPI96Y6EmDZmZyIBe2LTfNov25M1k96YxJWR8huUGISvpHWFn68yKWJqkgzPeJep8QxAsKqBneQ+S3fQ\/vtZazMHETZ43MxLDhFS\/acr1csyRfMQ4KNZ+8Sa07CDorsVwOq6i+W2JYJCgXDwDFISOZFuOmFa86UCaYsrPq5Y\/Rq0+gyEVCMSWYOaUupuCW5BRJp3CQUX33bxf2vi7sP2ISY=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RTgFAAABQABZEakyXmHhkgrmKKgBu\/L0BOz+1UE7a4Zqpstu9xSOnpK+DlYckXt+j+3xLUFCoNJbwFK51EAfqMABm\/RKu1hAPJiXrnPAw8PCd48DWqIoercFkiB8fvYDsOa7+WvmIkm9+NuRLzG\/hXaL4\/uxLP93fjucVROen6dHKYlJjfXpfm2PvIL2pLSLa34\/I0AFVpfK0bjvvJpTpDP\/dZwRa+wHCZkeb0vcXNZZOqboYwRATvYlxJy8GJ0Q4JUCCp2D9cuMIkoxFpHOjjz9KKFG9w48ImfXU2M\/GowoGOBjAYcSm3frM0Na58nIadgNOJc\/vGH8jAdcUiqLX\/F\/TIe29\/YUwuCA4luZHs6KM1g5qg\/EJIyA\/vnzKyBhY1TwtWHiiL2iELOkxj4PvjRBKLbrL1b1RImF4pY7kMuNcRG5L95UiE+MGMfzFbgMBIyT9FCcXacBtt6BGEUtiC9U7tciiGG1+lcRHp6AJZ7CDNDDxaA3L4ON9jlJJt\/mxL8jJUF7p+ilDgPYIgag5f4ZcFtIYEDLLuC9bRB0jE67ZReGlqcT1U1qFLs1psKtQq623qkikTCZCsXV20XmGvoLtfRndI932+1pmqrS68HM9Ag\/eq1KN6Ni35fd8JgIrTRSUxJLm8QAAgQCG36GVjEzDodWFK3v2106JZdqW4KNyFUbDH475teRfZ9RB8nkgW9ol+A95Jz25TSCknc1J3JdQm3hZspmKy0SbmU3RgZe+mfwCxV7us6E1ZRjJNRrHuwX1r+bRBEzM5w9Ul7U5Ux3yQBuYZVrJDVtDqd9QJaQflh0LUmP+gkFy4\/ycxax1awbPfpjJJw3i40YS8E9FEhqB3Jbl3B8JEh3yqcYwrENGst0wwf36zo2+CqrvqizcwKY0xtjc2Xcmmdp25GvhQvdNdmXrrffeMvQ1sjNrcfvwatC8rlzFraKo1a1e3wi6VoarNHps5TQbrUVKev9SVvJMtF\/+YFnpPlYbolLztHjLVvFrcIlGikonuvIYaTildsr8qAPcife0iTpTMGzx+b40HJ1RHAksbds7gQ1NMm4+UxaekEeB68PxhCDP3yhd1ij9DUDxH1EzTVLN4vjEa68R0e\/UYj0TCdPABKUmv1EXCT1S+Q48JY+wn3gocItwBasKzzeePp4xvJxCu6Nz7PCrjlDYNRKq6SsKyWTFaTHlJtYnQqJJsQR13YIGAU+fO7B6Y\/GuZ\/KUOuIPrgf4kro88ad0qUfW+aPkengz+ke7D33jPj\/PMxL\/wa3VkJg9ytzDP9AG90RmF1SJh91aYbQ2iPTeZm4P2xtayyCayQvpG+jgo7IoyQ6biZ5WToyss5n8fu0brpFg59xatUe2E0SQ8LieZBiQj\/3KldWbeU8rVmPAKWmmEz3UuNEFj6TAmUUqKhhLeDJ+PKGyclK7i3ZgObZKqQDZ8b4DQ\/cyGYNaBXnjrMh\/9M+zMKaSOea4meg021AGf7+O95iQdHWYPI96Y6EmDZmZyIBe2LTfNov25M1k96YxJWR8huUGISvpHWFn68yKWJqkgzPeJep8QxAsKqBneQ+S3fQ\/vtZazMHETZ43MxLDhFS\/acr1csyRfMQ4KNZ+8Sa07CDorsVwOq6i+W2JYJCgXDwDFISOZFuOmFa86UCaYsrPq5Y\/Rq0+gyEVCMSWYOaUupuCW5BRJp3CQUX33bxf2vi7sP2ISY=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2015{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAGQABZEallXmHhkgrmKKgBu\/L0BOyOMFFhXGEFlPIa7m1nUPmntUxv2qDpN+XgN6nlIS4t4t9b39Hf\/AJ9e+\/YLb4YbiQCCd9AiqZfthHQ9W4mm9Nq5pGNITuhaZnTL3Z8XIhNj9Z\/3vTl+YZJm1PQekOrC2ENoI\/wzyMTj5ULjvfa1wrOsytT6XFqng+ds72\/we0iG5RLS+QHMeaTPA2JUixBLHZ1cDe7M\/VAzhNOFBXLhkz77JF7C4q2uwlRet\/aOBym7QH32ag\/YqkrYJNLxqKQPBtTx20dESmV7O6C3ZRKeJXjVAssB612QkcSmIgz2cNeU6+k6ppJrMUs9v4ZQ0JH89CscSgopGd1GHQk1Xqfk2phYE+i0Q0OdN3RyIpH8WgCpmX+iJUY7vFAr21\/UFhJCJshxtZ1IFzL6oUyDc2tcd4f+EIdRQrZi02nnsgu5hPtgGor9LysYYKMXGSb+sailEBQ0ZCqRiI+9lUC3pXXM6CwQFWa8XtAjxpKiSjXsXYy0QAts3v+BE9AhGg2FR89yCpMMwsRb3UdtWVcQ6Qp8o0J35i24\/N14hfFFuodT9xqjUFPjouFhUaKP2vQjWT+3Zv5VYkgxPbMRDRG+bUuuBi+VgV0pWBSzXsdYmOsQb7QM1ACZgPKnKokzra\/PgDJQP9g+Xtw2Qan58GihhJLEizaX6bfN+jTwCBiavXfzT\/JtV0BrqhUqtJb0dPsnAi87tUkRQv+rmVTDTItImc1o\/XwyaWIz6wWezMCKVaWAcZHgzlwOcqbLnd5ifk1v7PeEtTsYj7QLAD9E5swLbipFQf2sYgRMgbHcL2g2QFQYLop5nrC5\/w3BzCLyN4p+QLKSi8YfIA5xaTuCL2\/Z52s91lNOb4Zt5RqbsN7xQyYMSESPNFwoAnjmGWZavgCrtRfVR4KnJzF11B0ArUp4qZ4eSteazGyhgTDtC3A1N0jjDV8xWIJqvLwKNue6SqOEaHuKVAxQvBmYbdc8BVVQQwSLE+8np22VJe9hegaTnd\/8gIiSjL1yd67RnbVIGk4TFc7vaBX5P9pRnpglOT2n\/LDsKA1Ne+9xJaJZgI9i\/J4ps+rECSe0QlBCdVHLCPrNFLYzgjHbRb6t\/wXZ5KDD3p6DNtUvg+m7tYjQzAOwljCvF035URY63PlJLJTYpT8nxH275IkHI2T8LNjp+w7+JCZtSFaHAz\/1191X8byzY79xkh3vsP2Fo1frVoWF2VgARthtOdUMozv14CfhWteRvWKS25Y7fV81iO38+hB1kEOjDC07oay3eKdlPhcJlLX9tPe2HPIyD3dJBjF6v+g3lcWCv5tUyGY37+YDqAEuOe3rjS6w667p1sKyLqmViOm+79cgRTXxqrOMcLD1sDd+C3MTAbmRDz18ftATpCVz3SkOmQ9ZwyOuA0tjWE1X2IygNxN1KhUPjBLGlOXkpOSp8VWaFSMpO8yimYI++lERcAfm14XH448w5OnuYIZpEZA\/rMoPZfi5oCze2qL1NL\/gc5th2aaepr6myBuEqTfXVHf1UqpFu7LjJ06K2Z59X6YjEdD5jtraIl43YGH4rLyF5cDECkvRhX4ifmZkJbRtJ72FK9c7PY\/JDeqacG1\/rGZc6BuIdhJ09om285bu1IbfYUsbxmMqyCQ7guQW6trQK96HOw9gVcwtYuSc1n3F8s93UgZDr+t3dT2eDQ=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAIQABZEaljXmHhkgrmKKgBu\/L0BOwm81qLaqeVi3zGHiapEzUdnVMC6H3yimRedijCEjLLwfGpCXequpchxDB606JL18yrQ3kHOK4fKxF49gfBCzAapnxbDuoDjDIdryXcZDXxl2FCrqFA5PejzwxaHWrl0qDWWo+V1jAVEPh9M4NOKkigqfWYo35Fo6Bs3vqj3LPzcZyo4im9WOczzMd6uK02Bg56m2NcPiSNyBGGnK42ELzzfR4jyro4o46xOc+V74VquYMCq4Y59mMOATALzuJ2afog9iXoW2YdE6gzVLGVbqYzCX+XbVn7DV0fBt1NvgBHP6ZYEEPylWYUqqbQE2LBHLGPVl+5WGg7OcmD7PZB+O+MLQ\/zHQ98WVV9KiVD5Y\/+Uy+nv+EyBpe3ENSMs5JyABNmn\/eR4+q02ert4ctUvxdxQzPWJx2d1pZHSMmslOPriUhMPdGcRZShekFqpnNWlmPg83zPYrgWqeKNlKc5PNgutCu3gRBDkekccBnWEcvh3\/CQUUQOipQy2MAXPalHAEythT2BvISx4S4dQ+6jR1DVSohhD8mZyDJezJF9\/pyu7JT92pUXAXFkFVTc9dOPkQgxtyLPptkOktL01pix0lTD6qgA\/i4uZ7h80VKQQoYXffkmOHRM3U3R9heU6g1KrdJpEOEu6CN+2bmd\/vtfz+yI9a83CInRgkKDpjj0MbERY7DScinRmNA1JAgnXFlpvrNTudhuAYmcI89lZNfoN9InGEaEubdAmpwB5zfOG\/LAHO6BqhDGA6k3Ga08WuVytUxR0j1Bf3r4KpIvQsfrsSDy2fptCSdW7Tdr0hGI8UL63NGEw3eaR6+xzRGSQV1O5LrNfU4QbqZ7g58ryflmUk0KTbij+y2sdQtm0LuFf9URvfmQAPbLzFQvdcVmPYgpv8q0Kk2if4mTBEKOBFQfTckcb1Leo8ki0UGomZ1TgIrpkdfFCermGGsX4v9yTCTfWpRtNaGUiPxg5lP8J7vJIvZXloe5zVRxejibhck8knwODq06z\/op1\/P3VUARAKrySHvMn5AuoLziHzfdQ3hQJNmwbfup+jFY6amAB5yQnTUejwGcEevexrZtqlCsK7\/m2Qd+zVo8D0g31fnvdfFr1KXkAkwMXdklcA6k2NpQsTYOeuv94p0yy5Y8yVwotLHWvwfaVZfYnRen0Kho4Jkz3cNDwfRY8oUZvIZHDUOhhpOlOj7j\/Qkog9YsVgxt0mXVsT7nrjDIVGGPalA3WQ9pe+mxCc0RbTTuymms5z04wlYHNbpo85qNuqGunp2shp6L2DflwS8fZ\/fjSQABywoRsR23FgAWkEdrpkgsZ8c2joBZrUGj1CgsXUSwseZUo9y6LBh1gxhNb6G4lntdGGNXyNg+b6psDPTK7WCigpmoWYUJomur9XS\/sDh6+Ssc49pbKuI3aFBAOfYWsvxW9W3ahJrUCBu08VHeAJIubJNhHU3uADLlybjvI+0qXk4X2KErJLxtzjECepJtHHKRbi42ksB8V9ohgNFfoGs48INuh7pWf3nHX4xL6P5AHUtmII7hJy\/4yIsYCAVy2bgFyw7NMj2TYLxjHZUxUyRQ\/dIr78imKTs\/7SOoyrI4Y7eWy7V4QKBStRVDDBQ7CC3forHMT63b6IbLPa4oVMpzt5lS9\/WiSbnrqPTTU4VcBrW8sFk1yZG\/Wp4fkYE=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2007{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2004{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAJQABZEaliXmHhkgrmKKgBu\/L0BOyKjlaEWB7sVCbp3IlCqh3FqSDSTU4lUztoWduFxel7I4m+7ibPAIaITHM9eslqMhgtmdO6Sx2G9P7X\/hOBKSxDX5UNYhRofoR6VLWvB8134emkJW5alVPMZu7bwy7ceQZNklP\/8Grs6b+sZpFkngqsKG0RhmpPAopeATkB2pdmTHlFN8knPRrnm+Osc7SZUcoQNPJx85ZIrxJaWeMZccBd72ZS6flmSm71TdX5lAd3Jp+DliVG4wGCf2ZL7hHptOkQX7FoXUB6UDZjBpyszkDRBQrzZgQ3sbeTqdBB9OMUpG82Y1GoDohxowmfpKeowqIBQvo671YPkNZq8CcKVuO1xHO803le+ceXZzdbMOqxJFg6v4lLnaaeUJdmGFYHLCo1mZpIBY5l\/ONlcwd1+s7r40sl8pCtD6le18tst8QDBy4srZumDeUKT\/sMa2HVibfEv3Uo7QT7Me9jHtZ0C0WsAAhNKbDEBiTdeeLmhZIhRclKKU1w6PLKMY9fDI5KfjCQg8ZLxaUHOfOjZ1tUVU8PBrxRn5yS2f3xvlmBRo2R2dPeN+yDCIS33ufcEjCrgUTueJ275oN\/ditKniEbRRMsKkSSA3jD7yn9k2rW2b16Vtb40Pz4KAw0NUJm7sDKsX\/GqsdXiMbUai5dcfaK13vfEIET5OyOptWT5k9AHgd7idqj0VC4M81rc3Z5X795yNi4RgA2dMqSsJlul6WVyVENCRDLm0qmtOXY+MQbe75O83Y6pO4b8e3w68+L8wphltNwWlnGWN0lshIClad5RYB+vXdEJ1w9YhUjfkxJ7fjj+TAdD8GqHapLoUzS9JxcesD41VlhVAds8G047kfo7wiJ2QGOYgMJHa2XAWpdAz2O6WEF5mMatEeTpknTWjK4t9VgN3huhBloUM8u7kasBN7D6UIl23zb73Nn1zGl7oBUx1P7PtCOiCSNVq0Q0vamEpLOnQLKWM7FkR8+LqkxWUeJu414xXR5qXHZxcN1Of0BtVXWximwBewfCIaE0KO+vNlD5Mzbg48IB5oS06iKJyvwosYCElUjdtc42YFqK\/TEClgpd4TirgYi3LUMTSPhQo21ur4qP9og6GXZrgO4U4OaIGB5U25xDKsuGtSY\/Od7FacfCZlwJtpvvQuGOH0cv1brqSTMPDmRBzalwDMmlYAAUWoJtWUPln+nZXo8riaW7qkjlqmw4KvrQFFwVaYlkNovVojA2dhuqc9kbvGrFfL1J+uPB0\/ZNVUggKgQz53QH8dLOSQ6hl7\/pHZVDvUDoYu11G2WXWgjApVZGSz+LePWVBEWWMlonz7eSWsqdE7vNYIx23DQ6cos8pb16OEht68u2OB8pGnUawnbbszaUWTgn8RG9SQIzpgUDtpYEjZ7kEPTUdHyQz4aR\/fB5daxY49O2k34McLjsXADnlyh9NsL5tEkZ0BL82Zse\/1fpIOt9V\/f194x2G1bYm2TYQD2k6idohKpU0Ee\/0JO+qQ2r2MTMOBGs8HeC6X5nTc4+PLentTJRIekZdnFQbRR30IG7WCXgPEoE+AvFXMM0SpbEDwkYDINmSVUz6O97ylw24bpxCt7KiNPAF3g5\/mw6GO+IAP7VGcInxZnF\/AldReRixvo8ampugERVZV3cfR4Hy84w8Fbb3xfEoQjLYIG1FHXpkMQAeJ0Huc=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2004{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAJQABZEaliXmHhkgrmKKgBu\/L0BOyKjlaEWB7sVCbp3IlCqh3FqSDSTU4lUztoWduFxel7I4m+7ibPAIaITHM9eslqMhgtmdO6Sx2G9P7X\/hOBKSxDX5UNYhRofoR6VLWvB8134emkJW5alVPMZu7bwy7ceQZNklP\/8Grs6b+sZpFkngqsKG0RhmpPAopeATkB2pdmTHlFN8knPRrnm+Osc7SZUcoQNPJx85ZIrxJaWeMZccBd72ZS6flmSm71TdX5lAd3Jp+DliVG4wGCf2ZL7hHptOkQX7FoXUB6UDZjBpyszkDRBQrzZgQ3sbeTqdBB9OMUpG82Y1GoDohxowmfpKeowqIBQvo671YPkNZq8CcKVuO1xHO803le+ceXZzdbMOqxJFg6v4lLnaaeUJdmGFYHLCo1mZpIBY5l\/ONlcwd1+s7r40sl8pCtD6le18tst8QDBy4srZumDeUKT\/sMa2HVibfEv3Uo7QT7Me9jHtZ0C0WsAAhNKbDEBiTdeeLmhZIhRclKKU1w6PLKMY9fDI5KfjCQg8ZLxaUHOfOjZ1tUVU8PBrxRn5yS2f3xvlmBRo2R2dPeN+yDCIS33ufcEjCrgUTueJ275oN\/ditKniEbRRMsKkSSA3jD7yn9k2rW2b16Vtb40Pz4KAw0NUJm7sDKsX\/GqsdXiMbUai5dcfaK13vfEIET5OyOptWT5k9AHgd7idqj0VC4M81rc3Z5X795yNi4RgA2dMqSsJlul6WVyVENCRDLm0qmtOXY+MQbe75O83Y6pO4b8e3w68+L8wphltNwWlnGWN0lshIClad5RYB+vXdEJ1w9YhUjfkxJ7fjj+TAdD8GqHapLoUzS9JxcesD41VlhVAds8G047kfo7wiJ2QGOYgMJHa2XAWpdAz2O6WEF5mMatEeTpknTWjK4t9VgN3huhBloUM8u7kasBN7D6UIl23zb73Nn1zGl7oBUx1P7PtCOiCSNVq0Q0vamEpLOnQLKWM7FkR8+LqkxWUeJu414xXR5qXHZxcN1Of0BtVXWximwBewfCIaE0KO+vNlD5Mzbg48IB5oS06iKJyvwosYCElUjdtc42YFqK\/TEClgpd4TirgYi3LUMTSPhQo21ur4qP9og6GXZrgO4U4OaIGB5U25xDKsuGtSY\/Od7FacfCZlwJtpvvQuGOH0cv1brqSTMPDmRBzalwDMmlYAAUWoJtWUPln+nZXo8riaW7qkjlqmw4KvrQFFwVaYlkNovVojA2dhuqc9kbvGrFfL1J+uPB0\/ZNVUggKgQz53QH8dLOSQ6hl7\/pHZVDvUDoYu11G2WXWgjApVZGSz+LePWVBEWWMlonz7eSWsqdE7vNYIx23DQ6cos8pb16OEht68u2OB8pGnUawnbbszaUWTgn8RG9SQIzpgUDtpYEjZ7kEPTUdHyQz4aR\/fB5daxY49O2k34McLjsXADnlyh9NsL5tEkZ0BL82Zse\/1fpIOt9V\/f194x2G1bYm2TYQD2k6idohKpU0Ee\/0JO+qQ2r2MTMOBGs8HeC6X5nTc4+PLentTJRIekZdnFQbRR30IG7WCXgPEoE+AvFXMM0SpbEDwkYDINmSVUz6O97ylw24bpxCt7KiNPAF3g5\/mw6GO+IAP7VGcInxZnF\/AldReRixvo8ampugERVZV3cfR4Hy84w8Fbb3xfEoQjLYIG1FHXpkMQAeJ0Huc=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2004{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOySr0YvPtnEZieWL7taisfyCBgs9Oq3nfriJuVlEVydo1gV8eL8GkuRP8bSgGktq6MGzwsZ25YvpSd2ZOc0B2seCgELsOb4nG0C4YB4FGfTDUHLVjn8JbP5WDnW3oksEKJCoRoWlM7i\/hifXJuOdPZLQTqYLEGUGkb9cS+ZeyciAWoWKHzxKEhayYx+jLZbLqwKJ8fDKeFNxI6MD0gaBDZifpIwshG02TQA\/lRhU2o1kefPKgbqh+D\/bBraLGi8AqAQA4xrp7RSkIaORW9IrHeFvrfy4fHdlGwoBXIWGNN2\/xQ\/2uPBPGyM0TPX4fuQvJeASXOLvwH0iVzGhvmXqdlGqPnwGBPAB7LfGOu2CIb3ObGMc46zhqoA\/bnDH1RsUBwg+PTgA7sHVcheiB3etrS3pTsHqMwmSTfhbWsfQH0p9\/Rw9i+FCBz+FbM8HR+r7EOLE8iCTSElojN747eIeXq9lZp\/4D3wXFN4+rPiDa+CNJkdFMz7o90nto2paE5yTdVarnZZt6BpSYwB+DhsVeFOcMPopFfp25MrwSm9HzBMNsvNy\/HruMkFTpYMjVvz0e\/1D9fauvZ5bhPHzqhQsGY6u2D6FufVJFZVDdiNwQOnm3xm5iompVCsmWV2V7VF9lucF0ydaxotHp5YT3RbcoHaKKigDVu5O62nDffkPwCsfOIPwiDZJy\/6cZNn88+suJsjc7Q1OaSmIHddE7CF3IOwTjdmVpSGUm6cQNh75zNJsPssrhTi3a8im6MHK1dN8ib6p1cvMPBZizXZYlnBCsss7q5OrGvbUDz\/ERcCePzJLhgVkTkx1d4Qrfe0gIjjmPYAB8eaSG3BxvD+4npXGy0+zIInYixJuaR3P+rkWNBtMezYcyjxN5imP8U7nvmYQbkp41J+wKZXs1grDCiN3e4Z9UGr0BFuXfZOH34DX1An0JOrNT5xunMETw1A9h6FXV5xT\/f+A\/PE61GTCnI4gUo2jU66GwnpLYVJerY5V31mWGM6HCY3unk3OruzUdqBIzWMNSoY1PemtGfG63RSTzNhm7k1I1I970bB8hUESxvbn6rVgN680QJ\/GpSCBbUcBFHVgyWcCNfcvWnV7GnvhlbCPk4JTjCP0Kjx9dBNQWSjQ767EML6HXfdqvYGZYd0pLSeUuW\/3qjN9KWxgW62vk3YmQbFapJCIm6giZ\/8Tm89tNJnbRQLi7phNoJIHlnnU6667k8bI2yzLXKhFFGs9ztb9\/E+Nf2w8CyXnRdtGeDElzxP5nWqzhzlBnaE\/EjI+jrL+4JFduae2Sv+yBTv4SO0SfPieJdUo7uJmF5nL7vcCgKI3MDvQEk6YWqzuPZYPzO6cX+QrylzOzhE\/8zKY\/6dcDhImKOk+UYk2zrqi3aBsAKlPdKPKTil7muOuZJt5CBSx3jR7EdzlJIFd3oMdNACx2K626rHU5sIApXgoKbMQXmIA\/hTRBi\/0z4yxQSenunVCWr+WhCq\/Nngd6Ib\/CgGtJwTjV8ytMCF5yl0o1mtec9q9sUQIu+RDt+Tkpz+Z6ahIhRiIcVmAxbkeotUgZ+qW14V1KS6C4Hn8BILm+AZy0yqJ7Hfmydud5IT9OZKYvwUdc0yjowi9MXI1fjwqQM81QAkX15hSL8QYAOL\/tgxcSJyqHqQv8Hcc0oB6YR\/uYc\/zxqBxp0=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOytElUfpbZTAfXwnNIn36jINQ29rC8lkLyD+Ym2IjmKN\/tOYyXGqOaonr5nittWAiBd43IvKYLsDKBCh5zzlznnhA0GNF3WOTyVAjANM6paxxLneVPIlKs9tXo37byMeb4t0PGWMkuR8LiliJ0IMLlloJ7lj2ogB5NoGsoUR7RV7cGlBJNYsHrTOBBaUxAjdut1txoisIPt4FXv6lsl8HZPSCcoKpx228bTGKYkz6dhByqJiuoRdyhjnBgLmZ9n4VxT0f7Aqw+W0irKKE+nNRL9N6FyuMAegZrgLK99aLtKERg08mdWGVwvA6107Lyq5ndVZGoQbi+LlAAvXybnBys\/HNFs9nK5sPqEmxSYOMwnzprtm983igvthkWwHAWTsvLGsTXr3wrYEaE0F+OoXvzzDv134Bbd3gw1Zaq1XU5k+096bUQaal0gt5AzzOTcqixc7ZHMo2IT8Gw\/7aG17W3sy\/iORsYzCMo+kSjog8dYdJ1AS3pmdhdeGVyjuxVyta8ZGThygd3d7VnbkyiqEWcXJPS\/5dtuKCEt7JVvESJiIqDraCwFENbxol4JiOj6gQPgQEwdBBnI6t1oGv+N6m+FkFany31Ih\/WLqNEf2Yz4SqQHJRnSvPdavlQJPcQnlxHZJmsrjbpvWgO+7B4x3AiBRfPeKW7Wd8wyaVv3szH4TGqvwx20xvXhUwZyYRCN6IwTm\/esbuG19VMEoOiE4QViO41lT8bDEvd10M27an1qQdfdWRD+Q0lAd4RnG5S8X33glT84mb3w3SrJQfwgvvZKI9EqrzBdW2v1W5omJkE2IPaLbEj+YTQfzH+4l2R8tLQnBVqYTMXd39SIeKbDuE5KPL+lKYFvFJ\/XqqO6JofFLrfz6z6ihONPdxb0AYZgb6Bkwab4L2zC1+uwBP27g\/qFiZejjfvlZfLV05RFPqiyS4ssF5vOPeRY9NWV0mtk9\/H5hoocQd+P4vc2HnFdp0hHJ1nKEvIq0DrOrz3umbIb20SeaxjsqeFNJ7O5QnuULCeDhoxXe\/cQvEW3rBPXsUqnUX6C5QcsuGgyJF0HXCeEK10GSrs4cegkdLFOq6pw3C0VSDJ8rHfgkq\/UXExUtJZdDK4lHD8cboX67ZK6SqJ9pIM22lsgcsWSg4\/WNsjO3yEHbIGvuWflc2B+9PiZi7TzxCMnsNWuHPavO9c216fQ0xUvyWimC7zxZ+ZHeGEgmjS4G+BzCvNAkwVmbbPq\/AOvxacovL\/oSqV7oSlKYFq1bkiFdc5YmAkORXVMUXJH0gsgfv0f02iouiWYnRfg3YEseSzNAUJ\/4QlYf73HwYMkE5j5RL7eq9rHYf9dSbE3h3MmSIrJ0dO4Ta4QmpBd2AKg2Yk9JhPfn02CtX8grK95Xwhd4TNrjik7sK\/idQ1lFBzIiJ7mbg0jzaxOpqlI62bFR\/Wj0mej6USyFk\/ouLpQ7s3pIVC0IphYj1Q3k4m66H\/\/Owg6L04CT5gfvVKAdS3V8csyvCRU37ODJfTnSqVoFqzg6zuT38v80izs2rKPg7\/bUzCeCe7QQPDNjCWVFO7U2zL9ryBYIZ61Tw3OtoLssDlEoiT4Trp9oyrHWlT0fEl4ogOMF9xU3c1K95jKAqEYgsql5NcP5IPUNO2jFpy\/cv7FqbGItgxeEj8G8O2utl42UTUrGT4=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2011{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOysBEaXLGziJJb12BkgzS5UCwkfqAN5naPvalalzfvDw43njParK3\/l53yQqS5HTuUGY\/7QVARm5ghzahQ5Er1D8dyfUfLv1wPys9k2fCnn56Fm\/8VDazeymnw3JvN4hGGu3Me7BJ655hRKY7dajO0tWM0zofigc5ceCxGcuLthUDCzVTr5Pg8uZjmTQOKIJ\/xYtmcg1iUbwIDPSOyn6mMRW4Uv7eks3MKlyVwo58+4Il9nyYkTdSGSeYmhA7ibukntCfJuFjmxHlzJW5gnJmv7axW0R1c\/xfBYljO7xv9dhoqyFrgglvrSenX1xtjf4lCXKxQz6WMukszOFFDC81zAE4vohFBGOf8dXP25ev7tD2y04iWynFKmNqpR1k895gdH+jSX8WjP1cxSrPCk0lIrX8l6UfL8x1kZWLibPfZfrt87WZZ2wkiTl5VC6lsTwSCUiOtmWkdK8IP1QhvZE7AiILjraOPNW\/qs4bTB2tR54D7RGwZfSedVVm\/ZD5hK+acQOASQ4szk6NEGKq4iZGL7EzSHMQM2PBCQZTfzQSxL4qCQ377ph5v\/PZ1NTXDyF0AXfmBCAWv6EdVJLQibkK8Ic\/uQ9ZheKP8n9\/Iexus4q8M81NQrb2\/47KDAoZvtNbQijJgFWJB2b6zod00NIVa5YCXSw9JFm\/Rg+HFOEBJl1dtK1rkHhn37VVfIbBHSfdHpvx6oahXNTf56LxqkeSb5cYhy6mCoHWigwyzLjV9Oq3CYQQqEZTxHarQFi109DK38z1FentuS7N8M+rJLF4lPX8RiQB0OWEH30Cjkqhkd0JsdtU8RABR6RAe1hwFBUK9l4PfZqvcuNINUUA0LX\/5ntW+UAN4hb8VsAEP7LBBMn6vALAQO75kKzUwGTi285ih\/1oEKpma7IyKVNp9bqJwPmSkGIfeJ5tQCCvTdfaehr2vCaFlOdDkNE1tBw8cGJ5sj37BT6Pmj8uSPAhDit32MIQL9hzu+ojNQ5vRKiZ70xY5kLkbDHJCv+P9Jy9+YVUfjoI1c3pbza7iCAMdw411cfzARv6RjFrrC29TB5\/cOjOEPGm0v5Va5Qzcv75VSwCfkKFPD5igSbiE1t6tVtZoRaBeI40FofDHODJQ8BzkI5KAz0oiPADUV5yVyicixO0YbzKOJXIQPv+ybHOZ\/L\/OhrG7mISF3mHu25GiVIKANN47WN8\/VMRDm5QOQ0qIBdxlG\/wrKCo77ewlNNs452t7rlVbNM+dRFswBu5VXd7bLhxXfByQVKaEr9ifyIVWAjfQLqoab5MgB8hC5PPt5KPGwDJqtvFI0nUCvv3fu1VTQ7ZYtkotE8Qv5tW+TisFQrnpCUi9aZdRacRzS\/12\/shro8awCP\/2VeZSrMYjLK81QlCHzAQilinM0FHcCoLMPwjZiwFjJdubSVSzaohEDboHORkeCL1co1pbsU5Mp9vL5vVrYjEdm9TKKeDbN2Usx31GgtVVWs+9VPfZkEEWM+wPGQPmaV0ZQKoyEk+cHKFcMglYoS2w1sKmMb6mfl4I3KdhMXibaNXxf\/7U0j6yZjZF4zkU34pmjrg5tnpaCb2+sgZ7xw+6CubBkBM8ytVzdvWH6az3llSayjkFk2ZkyqL4GBCEFuFcbJvf9s3OcFLhPf2FuwWP1FVWgCtDziWSzPH\/RwqZSwCw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAADQABZEaloXmHhkgrmKKgBu\/L0BOysBEaXLGziJJb12BkgzS5UCwkfqAN5naPvalalzfvDw43njParK3\/l53yQqS5HTuUGY\/7QVARm5ghzahQ5Er1D8dyfUfLv1wPys9k2fCnn56Fm\/8VDazeymnw3JvN4hGGu3Me7BJ655hRKY7dajO0tWM0zofigc5ceCxGcuLthUDCzVTr5Pg8uZjmTQOKIJ\/xYtmcg1iUbwIDPSOyn6mMRW4Uv7eks3MKlyVwo58+4Il9nyYkTdSGSeYmhA7ibukntCfJuFjmxHlzJW5gnJmv7axW0R1c\/xfBYljO7xv9dhoqyFrgglvrSenX1xtjf4lCXKxQz6WMukszOFFDC81zAE4vohFBGOf8dXP25ev7tD2y04iWynFKmNqpR1k895gdH+jSX8WjP1cxSrPCk0lIrX8l6UfL8x1kZWLibPfZfrt87WZZ2wkiTl5VC6lsTwSCUiOtmWkdK8IP1QhvZE7AiILjraOPNW\/qs4bTB2tR54D7RGwZfSedVVm\/ZD5hK+acQOASQ4szk6NEGKq4iZGL7EzSHMQM2PBCQZTfzQSxL4qCQ377ph5v\/PZ1NTXDyF0AXfmBCAWv6EdVJLQibkK8Ic\/uQ9ZheKP8n9\/Iexus4q8M81NQrb2\/47KDAoZvtNbQijJgFWJB2b6zod00NIVa5YCXSw9JFm\/Rg+HFOEBJl1dtK1rkHhn37VVfIbBHSfdHpvx6oahXNTf56LxqkeSb5cYhy6mCoHWigwyzLjV9Oq3CYQQqEZTxHarQFi109DK38z1FentuS7N8M+rJLF4lPX8RiQB0OWEH30Cjkqhkd0JsdtU8RABR6RAe1hwFBUK9l4PfZqvcuNINUUA0LX\/5ntW+UAN4hb8VsAEP7LBBMn6vALAQO75kKzUwGTi285ih\/1oEKpma7IyKVNp9bqJwPmSkGIfeJ5tQCCvTdfaehr2vCaFlOdDkNE1tBw8cGJ5sj37BT6Pmj8uSPAhDit32MIQL9hzu+ojNQ5vRKiZ70xY5kLkbDHJCv+P9Jy9+YVUfjoI1c3pbza7iCAMdw411cfzARv6RjFrrC29TB5\/cOjOEPGm0v5Va5Qzcv75VSwCfkKFPD5igSbiE1t6tVtZoRaBeI40FofDHODJQ8BzkI5KAz0oiPADUV5yVyicixO0YbzKOJXIQPv+ybHOZ\/L\/OhrG7mISF3mHu25GiVIKANN47WN8\/VMRDm5QOQ0qIBdxlG\/wrKCo77ewlNNs452t7rlVbNM+dRFswBu5VXd7bLhxXfByQVKaEr9ifyIVWAjfQLqoab5MgB8hC5PPt5KPGwDJqtvFI0nUCvv3fu1VTQ7ZYtkotE8Qv5tW+TisFQrnpCUi9aZdRacRzS\/12\/shro8awCP\/2VeZSrMYjLK81QlCHzAQilinM0FHcCoLMPwjZiwFjJdubSVSzaohEDboHORkeCL1co1pbsU5Mp9vL5vVrYjEdm9TKKeDbN2Usx31GgtVVWs+9VPfZkEEWM+wPGQPmaV0ZQKoyEk+cHKFcMglYoS2w1sKmMb6mfl4I3KdhMXibaNXxf\/7U0j6yZjZF4zkU34pmjrg5tnpaCb2+sgZ7xw+6CubBkBM8ytVzdvWH6az3llSayjkFk2ZkyqL4GBCEFuFcbJvf9s3OcFLhPf2FuwWP1FVWgCtDziWSzPH\/RwqZSwCw=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2012{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAEQABZEalnXmHhkgrmKKgBu\/L0BOyFBkZIh98oeFlbVH\/Q\/oVRdY2EXp+Wme95D4DuSQW14gsH1KemA8kfA+LpjJh\/7e0puLTQ3bxcnHB1HQTI7TM0S3zUxmRFUDEAAWbog3Dp9QbmWp8ytvXp6+O0ZpuqTHfXV4dACuwtgm2paZmaHaFcOyaoV6fUDArhvlZURonk9cCuO3aJvIjzys0Vwcx5jGhdY\/1kneliETd57SMUC\/d3rE7XH2IzqAq90QdTN6TkFqELhUm2PMNJdmZ+7lun6dXsOouhRBTOSRzeHDaFc4C2mCjI2b5M7Fu6IPujattPF5HU73Ovlb3WoWtjGuyoDI7YBLQyBFEaA2pENIcI5Zzy4AG7dTJ4\/5M5dAjz0birgYghXpLs80raOR2LQ\/fh6+\/2wcn5BiYO8DMxpnnkVmWDDs5F2c2lT9z7TzmBR6\/LYgidXBSYlm1UEdLBK14pCX9BG7ZRaEo1UPCpX5YFw207EGwx\/Ja9bXrNDaKVEHoYnzrJPr502DueOLWp42d76\/WHTdiFezWIBePmXNNY8HY2Xs3qcrwE\/h1X7o83IEgB9heTbDaQH8klvWFRUTN7PkD2\/BrwXA9yADFMMD1sbQYYpvVX9pNal\/CnlRwoCp0SFxP4PfDmKvHhVXfIxHirEbuBvKT9nJYqVeWbPcUVAaZ2lXbA\/i6WbCQB1DQkZ8VGo72Rguz5\/zvy3CpPpRAsoTxqW0HUBVhUKXxZTNSQmOtX7vA4K87IZVgSd7ly6Xq8VyRd3CULEAIsyEtPf07+qdipKpBL9X\/YYp\/M5d4EA\/95qhwc5T1rnHPDspXJ\/nIZ1UEHDpxYVWz\/VvXXiaA2PuPZmOmeIUhK4HUDii8Mye2uNRZkJjrOVXQ6NzbnUOEHlFHPIk54qx\/ruTqFYoIWqTrHs87d+XGqdUP4WjIzdzfsAcAtnhxaY3kjALz0EFUYjzXri08zdnnRhrmg+lT3c1jtFRuxdn+ulLW2YA8q2yPrO3TXEhTvhIwn7I0HakfiKVgKtuC1ZrV5HbZDXqOJrY1ARsds6Ob2Z9x\/8UnBxzmJNst9cFjp9BcqzrPwT4YznrVRGMq9OD+VexpshsknsTNHJU8xdXcETcH7Orm7RLW+Z7c7JI1rFjohj0U3\/iUVjoQ0VUvEMoY7KK5u7g0nSsFR3onSTMC5b+4Vz743mmjmAchMEP03T+Ahr0tduQLAOfpYaMURQbTNCyd7dJQ3joG3VVJvUHnsvKAQycxtDre5C7PHxFK5J7kXBKGhbdkHP5rgcfEXP7+Jw8jbipwRBmOSxNrRULKnuOwwaWWDQtzskOfNgdJ9TajtruXHVHFgNaqf3FiWcqYsNdKbpWO2mpdxn8ohxqbT2Mo1yeVzl7M3vUS+yw\/IbuzyrPjmF8c7Lu80xp+IRsagNGiZby5+y5l2P2U4IWRbTE9wOyf34AHaqXUYK2YoqtPhX89+rGspB4P3n9XiKnJx4eZ48DEI+ugbEgr6J8mqdv\/6WCBXcPlOWj7Wtugjmpzju1RPLr3pYwTPLwJl0itK27nHcQUIa4xfPA8UvcN9c4Fjo1UuBpxFLHzqtcLDMN60mdQ7BBzE3Za4VFkXf6uc077fAvPIIwFEnbuJhl+8xim6b2WYT2uEar9tw9xT3nvND\/sBRbbrosTeb1FaB0iKs7CVD\/Dnk9W3VVRVu9k=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2016{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RTgFAAAEQABZEakvXmHhkgrmKKgBu\/L0BOyFBkZIh98oeFlbVH\/Q\/oVRdY2EXp+Wme95D4DuSQW14gsH1KemA8kfA+LpjJh\/7e0puLTQ3bxcnHB1HQTI7TM0S3zUxmRFUDEAAWbog3Dp9QbmWp8ytvXp6+O0ZpuqTHfXV4dACuwtgm2paZmaHaFcOyaoV6fUDArhvlZURonk9cCuO3aJvIjzys0Vwcx5jGhdY\/1kneliETd57SMUC\/d3rE7XH2IzqAq90QdTN6TkFqELhUm2PMNJdmZ+7lun6dXsOouhRBTOSRzeHDaFc4C2mCjI2b5M7Fu6IPujattPF5HU73Ovlb3WoWtjGuyoDI7YBLQyBFEaA2pENIcI5Zzy4AG7dTJ4\/5M5dAjz0birgYghXpLs80raOR2LQ\/fh6+\/2wcn5BiYO8DMxpnnkVmWDDs5F2c2lT9z7TzmBR6\/LYgidXBSYlm1UEdLBK14pCX9BG7ZRaEo1UPCpX5YFw207EGwx\/Ja9bXrNDaKVEHoYnzrJPr502DueOLWp42d76\/WHTdiFezWIBePmXNNY8HY2Xs3qcrwE\/h1X7o83IEgB9heTbDaQH8klvWFRUTN7PkD2\/BrwXA9yADFMMD1sbQYYpvVX9pNal\/CnlRwoCp0SFxP4PfDmKvHhVXfIxHirEbuBvKT9nJYqVeWbPcUVAaZ2lXbA\/i6WbCQB1DQkZ8VGo72Rguz5\/zvy3CpPpRAsoTxqW0HUBVhUKXxZTNSQmOtX7vA4K87IZVgSd7ly6Xq8VyRd3CULEAIsyEtPf07+qdipKpBL9X\/YYp\/M5d4EA\/95qhwc5T1rnHPDspXJ\/nIZ1UEHDpxYVWz\/VvXXiaA2PuPZmOmeIUhK4HUDii8Mye2uNRZkJjrOVXQ6NzbnUOEHlFHPIk54qx\/ruTqFYoIWqTrHs87d+XGqdUP4WjIzdzfsAcAtnhxaY3kjALz0EFUYjzXri08zdnnRhrmg+lT3c1jtFRuxdn+ulLW2YA8q2yPrO3TXEhTvhIwn7I0HakfiKVgKtuC1ZrV5HbZDXqOJrY1ARsds6Ob2Z9x\/8UnBxzmJNst9cFjp9BcqzrPwT4YznrVRGMq9OD+VexpshsknsTNHJU8xdXcETcH7Orm7RLW+Z7c7JI1rFjohj0U3\/iUVjoQ0VUvEMoY7KK5u7g0nSsFR3onSTMC5b+4Vz743mmjmAchMEP03T+Ahr0tduQLAOfpYaMURQbTNCyd7dJQ3joG3VVJvUHnsvKAQycxtDre5C7PHxFK5J7kXBKGhbdkHP5rgcfEXP7+Jw8jbipwRBmOSxNrRULKnuOwwaWWDQtzskOfNgdJ9TajtruXHVHFgNaqf3FiWcqYsNdKbpWO2mpdxn8ohxqbT2Mo1yeVzl7M3vUS+yw\/IbuzyrPjmF8c7Lu80xp+IRsagNGiZby5+y5l2P2U4IWRbTE9wOyf34AHaqXUYK2YoqtPhX89+rGspB4P3n9XiKnJx4eZ48DEI+ugbEgr6J8mqdv\/6WCBXcPlOWj7Wtugjmpzju1RPLr3pYwTPLwJl0itK27nHcQUIa4xfPA8UvcN9c4Fjo1UuBpxFLHzqtcLDMN60mdQ7BBzE3Za4VFkXf6uc077fAvPIIwFEnbuJhl+8xim6b2WYT2uEar9tw9xT3nvND\/sBRbbrosTeb1FaB0iKs7CVD\/Dnk9W3VVRVu9k=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2018{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":59,"pkt":"RQAAO8J7AABAEUS1CuYoqF5h4ZLy9AG7ACdJ1lpAAkdWAc94e2jRUX5AGTYu7YrLiSQHm19DZZt5Dl8=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":59,"pkt":"RQAAO8J7AABAEUS1CuYoqF5h4ZLy9AG7ACdJ1lpAAkdWAc94e2jRUX5AGTYu7YrLiSQHm19DZZt5Dl8=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":59,"pkt":"RTgAO8J7AABAEUR9CuYoqF5h4ZLy9AG7ACdJ1lpAAkdWAc94e2jRUX5AGTYu7YrLiSQHm19DZZt5Dl8=","pkt_caplen":59,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":60,"pkt":"RQAAPHlTAABAEY3cCuYoqF5h4ZLy9AG7ACjnyklAAkdWAc94e94r8MnXowMQmr92EazX5UMXOX8SmOEk","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":60,"pkt":"RQAAPHlTAABAEY3cCuYoqF5h4ZLy9AG7ACjnyklAAkdWAc94e94r8MnXowMQmr92EazX5UMXOX8SmOEk","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":60,"pkt":"RTgAPHlTAABAEY2kCuYoqF5h4ZLy9AG7ACjnyklAAkdWAc94e94r8MnXowMQmr92EazX5UMXOX8SmOEk","pkt_caplen":60,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAAAQABZEalrXmHhkgrmKKgBu\/L0BOzHc0XB5dtGDPWWdor+v7WYIEsIskFDLr2mbpTKerwSdrzVPd\/1QS6yzCDnuunxHqHmWphY0fkYbixrLKgSk3yTR\/ozQ05sbIg5ez2CxAeemwqnV8eJ76PXGZUJD3Wfguie6UNTy0dmkcyoMJd31dHOI3TVrk8enu4VAXxNcYWmUTWNoURH06j41bIEME798KMqr3qw77Vx8+CzwfGABgDJK7kSNf1qrg1yjCAOwQl2d4Uleaw4BuKN7TbAV4XoRoNk0f2Jvn6cuipqOe0O2OW7r1M1og7J5bdLwIvqxS+bXTVL5EwiOst1kb\/CU3ccFZEtQmUQAnsOleOT6+MacWCPbbjbHVnx2nRwL2\/AqjWPXV3e3fxvdhrGIi6kNgH0+uW4LJsYFgAXFGGjd64Q98W2laYgFwTcHX2Ld+b2lu8ezwF\/YzZ3c0JLKX+u4NDaMKjiuAaB0OLHOABpyoDD8sjT2jdOFVzdBA5ARj54ur5DoPnCKS1ipegfqtO6PYLpHUU6Fhsqhk\/T5u5UvuEpqBjFuUHZqr\/n44HZdYpSX8wkuYEGZsdPEcXSGIiSx8CluniDEylvMl5tKVNfzb3HvXcUx1SGS16yi3shkSz0gpV6IcbKIhnqUCzGEjdiyWnpBlciK6HeXfjr9dd5NP+h4mFUAAOU5nSGIB57r1sNrH9OLmtoA6ur3yraqth4hjJts97VIkdYNQdciJrYop2gyAdhNkfBkbvEFohoCBpXAZ+gDsV9xqKzVhzrusSR5NAVoWHd8RK0P\/IuYUOOoudt\/GE6TneyNwSwT0acYcpPRbPCPtoi2G7PDwMurF4Zsr7HbCtbuqxns9UhKvwkTGP6y3PZDSDYEENLCI1JFRbNwuVgn8jclWdDDpurFaOT6xkHdHCUJgGe6ZthDoCpe2b5s\/L5jOprI4sRZGabIkxU0VIdLdCDzZ3tQrgvzv\/N\/PCT959NFhwo0NskqYDZNConXLBCHCAXJuUG4ZstajnKeFiK\/wQI84hvt3rbQF0NGhGBfWj3bOJ5lvsvF2NIrAq2m\/+m3Wy\/e\/APiC\/uKXDGM6AbXsV5y1LLe8kdZLT4vwbT1+eec5qB4QTpzUA4uI\/iVQ6V+n5tEoygnim0rrXYARaSBHRibfR0mV\/5yCfeqe8IXSse5fURR1IdZlmJDat6\/RzqxBa5Vx5PoEXwVk5h9BKU0PQxl25tHRm2XXYvf6WOxT71zylAljO2h3trBowSPsz\/8cl2y85BXaAMwi0GnDYfXdMX2YGtUsx5pdxlXMMunadtU6yzGWK26I9+q+Qd63FBhmupg2GE5yzHe+JZwI9Eb7VbvPb\/O12oTNBjP67xqEXILVGKZeKBPu3OM8qK51tOzHPAuEOePEVe63ju88LW+65DRgk1tfF\/pkkYqljtIVyyKK49u0GAhS7Uj0GkBsqqZnGeU\/s7O7mvb0a\/jqxu98ep6nsYRs2o5JV1owme5toCH53X67hVClpihczOpfGg3ErKGziMSk9AHOzGwCQdr7D\/dziuScyCr0o3+GTxYh\/++0ZqwY0YbjfdkshWg+P01Qa+nDHQfp3FPdH1ZUoctxZ3JKKuMqJQlpzRI68Mb\/xAyYlncmqFJ3qDQU9iAgtlEsjuyDzekAcPbEjHOhzwjexhAKGobFkpu1Uq0CN5CIkg\/ZKlavI=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"RQAFAAABQABZEalqXmHhkgrmKKgBu\/L0BOz\/LUEKQ\/69OwU7YOoEjfCU6PYIxZC0bpOhRpIoJJm+nxm46Oz7TPDsxFM7UHGJ5QaLSAhKzf2tpv2a5HzpBrqxZkSiLpkvtW4REvRhAhMuGxbt9FhZxZhIHGF10o7mZCkliyT+CXM+wsY5COnoW+BioHtzhcAIc1SFAJXC1KaM4VSZ8ASaGOMzV5qkDoWkMVkVXkOQ6Yl0LTSr13A63bczUxZ4x\/9td8rT9Hih4juaIs3wtx9OzII0pSe3pRJ8v5nPbycL23JcZMUYkOHwsu6clqBLaiq9uzdv\/UkVQvFLr6BSmz4hV8TUAuFVhlk3oYZs2jy6Lnt6JtjR5ON6UxO+amg\/oXRpYjT7\/s\/82ystuT3XOoq+c2sx+PqlbFaAug8yBeIXxzjgp2lJo8Dn7cBzcAWmBsn20IcWplQu\/4hhDQmNTcs9lGvcgAxJnM2csmvsuDDIgjoxXBsAJnRdBG4F9LcE1hvwc+6XBsAWPKCOhWZx77O45loQ1gYuo+R3lDHAKf90QLuXSeqS7ySxVsrZ+L7a1\/2Tl73hPIILFiYSrVVCHzHYbgEUR2FnZ4qJgdQANm6k7VQ0rAPZS4Ff7rLCFjiBY2VdunBzvH6VM\/NX+cTlx1jb7f7Wh6sAmS0N0688HZF+ZdGgNb1St2MKd3xCgefqsoo9gdXG2luGBB8uIrpDx8vlKjebGmswm82uvSnkBm88PHSXeyNp1Ioepnm4O68qayYBVG+iAtGK\/h2X8G6Wg+5WHs2CPDKp010y+tL4bXI\/jK\/L89DvTSjGtCgSvLSk26jjus8LpnO9B\/aHf6B01+\/SmQOwjduO6DVQTR6pMffT98puv41RE2MWaIXsUJ3OateqyC7GqFBCr9HOvE5\/NIl6bGlJXUzDzbdQLmwoz9sYVr6PF6GsR1JU2ugkt3UmReS2wXdOSS9hXah6T42MrRWMXe\/ARn13rDog1mp9T6XY8r0PSZfoQyBd2qN5kdphBGqJIpIMqN5J4YQPdQczKr5yScja69FMzXUv3N7x5BcJ8byhRJO6AE6UTdr30x\/vsJ1+Loriv8M8xjI3b2XXY6HpYOirlmqm5b69wcLMv2kF4rqgcmgYFz11w4Pqsb5ucrmsiLJ0fFoUoiv8B22nMAg3lMihc214tPUWdMLyVUp0SBD+8AedmwVe8ClnTE+67lkrkpE5ZoIiAmqghJWQAsp\/3+zrUNinfvOtmp5KRe7g+ixZkqfSbN3\/O7\/rrF8qj03MiOryAEcKIDOVs0otnfjQQDIcHrixxFrXIPPdGeo\/XNXdT3rturTw5WbN\/T7ZNRDVoUCZkojyCHGSq+6jEEoijN1F2WOeBaQk\/9OE5UvfkN\/r3ew5dBxJn7UeNtS6rQ6gpPlYGbk8rUIIk2X5DqTqywbIe+RRiAuXYogwHvBaICuBnHfCM4wLTs7WZY+xJ7wiOlrjzYZvWZ9+r8Vip7nUVupQLi7sKHDfUAs9w8qngy9zGa5N55ILdyVFSStLbilI\/iUXT7Tr9z+Cx4eECmVq3sUzbveAsOaoWqQkCuLcGZ\/r3b9\/045kgK0m5LNouE+KaDM6gbEl25MY6AnLD8wZtHVXWVADD+fBzWPy+iywEnphzQirOW\/3upT7dSCactXPxZrNxFWfPymhPYu0Krc2ivZ465hUCU0ekKodOQt6rIA=","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2017{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+2013{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","pkt_oversize":false,"pkt_ts":1593498297,"pkt_len":1280,"pkt":"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","pkt_caplen":1280,"pkt_type":0,"pkt_ipoffset":0}
+0201{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap","datalink":12}
+0168{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-22_decryption_error.pcap"}
diff --git a/tests/result/nDPId_quic-mvfst-27.pcap.txt b/tests/result/nDPId_quic-mvfst-27.pcap.txt
new file mode 100644
index 000000000..1c44b6169
--- /dev/null
+++ b/tests/result/nDPId_quic-mvfst-27.pcap.txt
@@ -0,0 +1,20 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0511{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388075915,"flow_last_seen":1592388075915,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp"}
+2210{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388075,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+0576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388075915,"flow_last_seen":1592388075915,"flow_tot_l4_data_len":1338,"flow_min_l4_data_len":1338,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":1338,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {}}
+2207{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388075,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2203{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388075,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2197{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2205{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":34525,"pkt_ipoffset":14}
+2095{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":1315,"pkt":"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","pkt_caplen":1315,"pkt_type":34525,"pkt_ipoffset":14}
+0486{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":124,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAAEYROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QBGCwVNVfJEQr8PYIPW8xVqQwL+A4\/9lcyL7CaCZo3XOpazU5oCKTa4lyLLJZqjonJIBUQP08iwa3FBaE7\/EprGGA==","pkt_caplen":124,"pkt_type":34525,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":103,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkADERPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwAxDynv\/wAAGwh7p3UKjzv1VgBAGDPPs+isf\/pDP7lbKeS0aM7l7qFpToqIWQ==","pkt_caplen":103,"pkt_type":34525,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":103,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAADEROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAxhkDo\/wAAGwAIe6d1Co879VZAGPWVoSvwBI9j6QqjI2gqzievNYK3wy\/HDg==","pkt_caplen":103,"pkt_type":34525,"pkt_ipoffset":14}
+0595{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":204,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkAJYRPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwCWbcHi\/wAAGwh7p3UKjzv1VgBAOFZmIX\/r6LfgDKBdfVa\/S7KfYoYfpfolLKzOfDVzXDwy5xIal+1hy+C4sNMlwXCuAOsuNi+vVKFIQ3undQqPO\/VWCT1ZhUusQNVFwW2DAvvlQetTcH5KWOREf1TdLA93Xn3H\/SbuubMnbX0ymnObeAGA6fUx+Qst8wm1yFeM","pkt_caplen":204,"pkt_type":34525,"pkt_ipoffset":14}
+0435{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":87,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAACEROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAhxJtJ0vlePwp3\/Dr90t4sO0RgS2+\/37G\/clBZ","pkt_caplen":87,"pkt_type":34525,"pkt_ipoffset":14}
+0460{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":103,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkADERPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwAxntDj\/wAAGwh7p3UKjzv1VgBAGPtLGuYFc7WdcnTy8L\/E29xsFasMXlnl1A==","pkt_caplen":103,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":95,"pkt":"AAAAAAAAAAgA1Oceht1gA0UkACkRPz70IZT0pjUDQM0HFABXxOQvPWTRnVlUmwAAAAAAACAO+uUBuwApFwNce6d1Co879VabwAwUTyXQnR3t5SGvwZQ4CIrfkFTg1nE=","pkt_caplen":95,"pkt_type":34525,"pkt_ipoffset":14}
+0436{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388076,"pkt_len":88,"pkt":"AAAAAAAAAAIA6W2Tht1gAAAAACIROC89ZNGdWVSbAAAAAAAAIA4+9CGU9KY1A0DNBxQAV8TkAbv65QAixvJT4nwLs2JbuGwUn2PwacyNosM6UeSAkNAE1w==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+2198{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","pkt_oversize":false,"pkt_ts":1592388084,"pkt_len":1388,"pkt":"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","pkt_caplen":1388,"pkt_type":34525,"pkt_ipoffset":14}
+0512{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1592388075915,"flow_last_seen":1592388084373,"flow_tot_l4_data_len":11807,"flow_min_l4_data_len":33,"flow_max_l4_data_len":1338,"flow_avg_l4_data_len":590,"midstream":0,"l3_proto":"ip6","src_ip":"3ef4:2194:f4a6:3503:40cd:714:57:c4e4","dst_ip":"2f3d:64d1:9d59:549b::200e","src_port":64229,"dst_port":443,"l4_proto":"udp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-27.pcap"}
diff --git a/tests/result/nDPId_quic-mvfst-exp.pcap.txt b/tests/result/nDPId_quic-mvfst-exp.pcap.txt
new file mode 100644
index 000000000..0980685b0
--- /dev/null
+++ b/tests/result/nDPId_quic-mvfst-exp.pcap.txt
@@ -0,0 +1,20 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0524{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1600365863681,"flow_last_seen":1600365863681,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2aac:cdf7:d506:7807:9092:75f:a963:f4ab","dst_ip":"3f65:ece9:fe71:6e2a:face:b00c::358e","src_port":57587,"dst_port":443,"l4_proto":"udp"}
+2078{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0601{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1600365863681,"flow_last_seen":1600365863681,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2aac:cdf7:d506:7807:9092:75f:a963:f4ab","dst_ip":"3f65:ece9:fe71:6e2a:face:b00c::358e","src_port":57587,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Facebook","category":"SocialNetwork"},"quic": {}}
+2067{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1155{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":34525,"pkt_ipoffset":14}
+0475{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":115,"pkt":"AAAAAAAAAAoAaIxPht1gAAAAAD0ROz9l7On+cW4q+s6wDAAANY4qrM331QZ4B5CSB1+pY\/SrAbvg8wA941lZ2OYOh4pLcvU+y\/vzMPNhj+Pqrnv7xyNAmkKQwdQ+mvjackAQuYz1mRZqRzkN8LZUHxNaqw==","pkt_caplen":115,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0455{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":100,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIAC4RPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwAuCqnm+s6wDghABcmEVyEuTwAWzx+HksBVoTjuweI22d48FVcKc2tgyg==","pkt_caplen":100,"pkt_type":34525,"pkt_ipoffset":14}
+0457{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":100,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIAC4RPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwAubirv+s6wDghABcmEVyEuTwAWSyHxadPrYjxxhWVG9ooAS\/SP6aE\/ZQ==","pkt_caplen":100,"pkt_type":34525,"pkt_ipoffset":14}
+0512{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":140,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIAFYRPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwBWJGru+s6wDghABcmEVyEuTwA+fugQVorCp25HV6uHC07U14\/d8At1Ix+83AX\/+IjBGVeo93BZGueQni\/eaf9fY0GD59CGpvmM6gGGbHpwLmE=","pkt_caplen":140,"pkt_type":34525,"pkt_ipoffset":14}
+1460{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":840,"pkt":"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","pkt_caplen":840,"pkt_type":34525,"pkt_ipoffset":14}
+0461{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":105,"pkt":"AAAAAAAAAAoAaIxPht1gAAAAADMROz9l7On+cW4q+s6wDAAANY4qrM331QZ4B5CSB1+pY\/SrAbvg8wAztZrg+s6wDgAIQAXJhFchLk9AGrmQKJkLBQOLrYgFEUIJDDmF\/MWUVtF16rG0","pkt_caplen":105,"pkt_type":34525,"pkt_ipoffset":14}
+0771{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":331,"pkt":"AAAAAAAAAAoAaIxPht1gAAAAARUROz9l7On+cW4q+s6wDAAANY4qrM331QZ4B5CSB1+pY\/SrAbvg8wEVuTVIscMlcwCs1m1BUJrKtWnOgHqeDT\/l0P5tRe3mjlswsJWk7ZHBihFcDAJ4WBNoI2+1WSXiaGMiJPk6HNHhBMYac7zhUP1ea20\/XBC14rICg3JIceCztDYghuz4mkH6hPCy74wirZ1q+hfFTFWvpnozzlb\/xWXtR3XR8AA1dsX7n\/IBTtRBREWCwQd9xUw+\/2Kq6q9SHXC5f2Q9LmSMloOP8OfRHPG1tM5ATfAMZ6as6sQAxJBHV6Sgw3VpDcZOvVbqLPjejZDyBIUmIYDXBfY4zr4VtffDWsY0pq4CUvECflTPEMh2+G\/GzrTBnEUu+nE2NB5b44N87WjMW2g2fVs6iTn6F\/zmTI4RgaZqOg==","pkt_caplen":331,"pkt_type":34525,"pkt_ipoffset":14}
+0447{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":94,"pkt":"AAAAAAAAAAsAUu6Rht1gBpyIACgRPyqszffVBngHkJIHX6lj9Ks\/Zezp\/nFuKvrOsAwAADWO4PMBuwAo+r9RQAXJhFchLk8G3cLHlf2GuudTHhv6RGa4bNp9y2px9g==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0845{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","pkt_oversize":false,"pkt_ts":1600365863,"pkt_len":387,"pkt":"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","pkt_caplen":387,"pkt_type":34525,"pkt_ipoffset":14}
+0525{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap","flow_id":0,"flow_packet_id":30,"flow_first_seen":1600365863681,"flow_last_seen":1600365863839,"flow_tot_l4_data_len":24689,"flow_min_l4_data_len":39,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":822,"midstream":0,"l3_proto":"ip6","src_ip":"2aac:cdf7:d506:7807:9092:75f:a963:f4ab","dst_ip":"3f65:ece9:fe71:6e2a:face:b00c::358e","src_port":57587,"dst_port":443,"l4_proto":"udp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic-mvfst-exp.pcap"}
diff --git a/tests/result/nDPId_quic.pcap.txt b/tests/result/nDPId_quic.pcap.txt
new file mode 100644
index 000000000..1cc5c82e7
--- /dev/null
+++ b/tests/result/nDPId_quic.pcap.txt
@@ -0,0 +1,98 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431155536815,"flow_last_seen":1431155536815,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.212.101","src_port":57833,"dst_port":443,"l4_proto":"udp"}
+2171{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431155536815,"flow_last_seen":1431155536815,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.212.101","src_port":57833,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.GMail","category":"Email"},"quic": {"hostname":"mail.google.com"}}
+0960{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":478,"pkt":"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","pkt_caplen":478,"pkt_type":2048,"pkt_ipoffset":14}
+2191{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":79,"pkt":"ZHACjT05eJKcD6iOCABFAABBHZJAAEARrmTAqAFt2DrUZeHpAbsALSjiDLLeXfFPVUXrA67v5IKthu5daKgPQycb1I+P+X02zD7nMJ4gZg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":74,"pkt":"eJKcD6iOZHACjT05CABFAAA8+xkAADYRGuLYOtRlwKgBbQG74ekAKOqdAAIPpl2KFMpJfDQ+pZaM0w+K\/5VnEsUISIlT4r5r+nE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1287{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155536,"pkt_len":82,"pkt":"ZHACjT05eJKcD6iOCABFAABEHZ5AAEARrlXAqAFt2DrUZeHpAbsAMGtUDLLeXfFPVUXrBFPuow9qWmH4gcu4wlmbcaiZYhRnY1MVwra5\/SSBVA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+1286{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155537,"pkt_len":725,"pkt":"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","pkt_caplen":725,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155537,"pkt_len":79,"pkt":"ZHACjT05eJKcD6iOCABFAABBHaRAAEARrlLAqAFt2DrUZeHpAbsALUG6DLLeXfFPVUXrBQtojvCUMbKWGzPfg8oU9G48R2nW5TFGLPf76w==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155537,"pkt_len":214,"pkt":"ZHACjT05eJKcD6iOCABFAADIHbJAAEARrb3AqAFt2DrUZeHpAbsAtPJrDLLeXfFPVUXrBtpIy+cMAPfm7MHwHEfCJSbnTvNnPZtElz223VgRfkAws\/lM4yCq7edqHQp2NmBbgFkvnUpWU5XSsz\/QyPebA8FrjJkETnyK34fMhjPjPmsXtGjYbvF3ltAQBe5RFW+i0G\/j0QwyKeUSdBcSgkjbQGR0n9Q+V9CAyW7UetQFB6xlpEg97o3WtofDPvJEWNxjM30w7C+sfe8Fpkt87vro\/AaF4Q==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+1001{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155537,"pkt_len":508,"pkt":"eJKcD6iOZHACjT05CABFAAHu\/PgAADYRF1HYOtRlwKgBbQG74ekB2sGMAAWXoT+ChrB0HA0+Q1neb3g38pZy0TdnwedD1FE6b9CM4bFYeDPzBslmot12nGlLdIujODr\/sERgMwODHgkfmsRJ56pZvQQxx\/8aWoDvnKOHNOhdj0Ac2ppXPRRicUGH9leNNbSg2m2W22SWbAnpN1CEC95s4+BLLuQr\/TbuBikDHyh05G2ZMaM+74DWvPsa3JDckxOdbAwKZ4R\/nDGCZwjHNqMN66OGeTa2dHiSIitogIdtYgiDeIgnqQuLxtbaeQQTxJBk11ElX1dggHf36ImlQtAViwRxOS6z\/eg1xu1kTG5TNEjJD6Jfdfd+oMt3ixnQEt7RaAJi1ef0ioJU90pxlxjwlwiRs3s4WCQg8tVW6yzRDgnaSc8q0l0FD\/8B7QDQXKzFz4oFqwBMnniZhep7wb7N9lRivXjxUy4Ybqcxs5Nsu7qrv5rYu3Ev6yIWfYS8+5g+h3t\/Z6vM3yZKNBCyFUi4CTpZ\/vMWTEdjSlh\/hoX9iAmieKp8Cqcz20pFSkQ\/NpJlmYzluLtdzULnf\/Mc8k6G216FgWAy59FpgQ8faLXTzIgO+U+ybV2HQsuVBWDXeUWnRHCS6tyqMwUKRZZYAhVAilVZ\/kuuRUUYcVc+RA==","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155537,"pkt_len":70,"pkt":"eJKcD6iOZHACjT05CABFAAA4\/PkAADYRGQbYOtRlwKgBbQG74ekAJE1WAAa\/Qp1zrd5u+JPijL6b\/\/wqisjcvdn2t9I0Rg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155537,"pkt_len":82,"pkt":"ZHACjT05eJKcD6iOCABFAABEHbhAAEARrjvAqAFt2DrUZeHpAbsAMIpKDLLeXfFPVUXrB2XGEJP9\/x\/dpEjZgXF6tI5h66OYJF9zHNLajuLPdA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155540,"pkt_len":194,"pkt":"ZHACjT05eJKcD6iOCABFAAC0H3JAAEARrBHAqAFt2DrUZeHpAbsAoJcMDLLeXfFPVUXrCNk+Wkv72vmVDQX\/353NmdXyBHMZ21qEUqbHryHEid2LGNVuOmekL2sN6JZrGf36BcrcJn0q1HnCFMUN3zw20FtxwuXwoNBveurL2CVkYF03BrbRGDzdPyC2uozYyq8Zx5YwRHRC+ySWptvLT5idyQYD9gRq4q0aXz2ILQFnFJXzLB1KhCuwZrvy1lvv73c=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1431155540,"pkt_len":170,"pkt":"eJKcD6iOZHACjT05CABFAACcAs0AADYREs\/YOtRlwKgBbQG74ekAiGyrAAegr6Vh4hkXr2y4tmkJNW72u1rlC4LxAa0sEmGx+ZotLWpiDoBRM0zOZOsBdVEqWonUuM9y3q1ycMpXk0d5e4of\/qLauGHWK23H+XQ8+ruz2y3H59egPCzssO+TR6\/ImbemzZRiC+VcGigbOgvuVLoTvuS1DW9IBfDe1mxkZ4o=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":0,"flow_packet_id":413,"flow_first_seen":1431155536815,"flow_last_seen":1431155574747,"flow_tot_l4_data_len":240832,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":583,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.212.101","src_port":57833,"dst_port":443,"l4_proto":"udp"}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1461850699450,"flow_last_seen":1461850699450,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.4","dst_ip":"10.0.0.3","src_port":40134,"dst_port":6121,"l4_proto":"udp"}
+2168{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1461850699,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1461850699450,"flow_last_seen":1461850699450,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.4","dst_ip":"10.0.0.3","src_port":40134,"dst_port":6121,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2168{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1461850699,"pkt_len":1392,"pkt":"OGO7P47K7LHXhMJyCABFAAViIotAAEAR\/vkKAAAECgAAA5zGF+kFThlmCfresOVX5pKgUTAzMwKbXvfkbQpZgkUtS3wAoAEUBUNITE8NAAAAUEFEAEwEAABWRVIAUAQAAENDUwBgBAAATVNQQ2QEAABQRE1EaAQAAElDU0xsBAAAQ1RJTXQEAABOT05QlAQAAFNDTFOYBAAAQ1NDVJgEAABDT1BUnAQAAENGQ1egBAAAU0ZDV6QEAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVEwMzN7Junn5Fxx\/wHogWCSkhroZAAAAFg1MDlYAgAASxIiVwAAAADS+1vXZRZzJ1+rqmPJtznpSW1g7BCg2rfC01sXLNMkHQEAAABGSVhEAEAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2168{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1461850699,"pkt_len":1392,"pkt":"OGO7P47K7LHXhMJyCABFAAViIsFAAEAR\/sMKAAAECgAAA5zGF+kFThlmCfresOVX5pKgUTAzMwNQcq6EZWnphcq9nqEAoAEUBUNITE8NAAAAUEFEAEwEAABWRVIAUAQAAENDUwBgBAAATVNQQ2QEAABQRE1EaAQAAElDU0xsBAAAQ1RJTXQEAABOT05QlAQAAFNDTFOYBAAAQ1NDVJgEAABDT1BUnAQAAENGQ1egBAAAU0ZDV6QEAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVEwMzN7Junn5Fxx\/wHogWCSkhroZAAAAFg1MDlYAgAASxIiVwAAAADS+1vXZRZzJ1+rqmPJtznpSW1g7BCg2rfC01sXLNMkHQEAAABGSVhEAEAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2168{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1461850700,"pkt_len":1392,"pkt":"OGO7P47K7LHXhMJyCABFAAViI1JAAEAR\/jIKAAAECgAAA5zGF+kFThlmCfresOVX5pKgUTAzMwSJFGwp3LQh28QKtVwAoAEUBUNITE8NAAAAUEFEAEwEAABWRVIAUAQAAENDUwBgBAAATVNQQ2QEAABQRE1EaAQAAElDU0xsBAAAQ1RJTXQEAABOT05QlAQAAFNDTFOYBAAAQ1NDVJgEAABDT1BUnAQAAENGQ1egBAAAU0ZDV6QEAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVEwMzN7Junn5Fxx\/wHogWCSkhroZAAAAFg1MDlYAgAASxIiVwAAAADS+1vXZRZzJ1+rqmPJtznpSW1g7BCg2rfC01sXLNMkHQEAAABGSVhEAEAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2168{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1461850701,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1461850703,"pkt_len":112,"pkt":"OGO7P47K7LHXhMJyCABFAABiJGxAAEARAhkKAAAECgAAA5zGF+kAThRmCfresOVX5pKgUTAzMwaAhw\/mLm+8ph8qV+4BQAAA\/\/8ABgAFAhkAAAAbAE5vIHJlY2VudCBuZXR3b3JrIGFjdGl2aXR5Lg==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1461850699450,"flow_last_seen":1461850703450,"flow_tot_l4_data_len":6868,"flow_min_l4_data_len":78,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1144,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.4","dst_ip":"10.0.0.3","src_port":40134,"dst_port":6121,"l4_proto":"udp"}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1463060980301,"flow_last_seen":1463060980301,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.4","src_port":45669,"dst_port":443,"l4_proto":"udp"}
+2177{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1463060980301,"flow_last_seen":1463060980301,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.4","src_port":45669,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.google.com"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1463060980313,"flow_last_seen":1463060980313,"flow_tot_l4_data_len":128,"flow_min_l4_data_len":128,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.3","src_port":40461,"dst_port":443,"l4_proto":"udp"}
+0527{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":162,"pkt":"8IQvSpdgeJKcD6iOCABFAACUtgVAAEARBWbAqAFprNkQA54NAbsAgHEsDKM2rKXAEd7wIt3qCq5m3TavpAsTDbAsFGxmQjrMNGgPLp5\/67eBvHP3BJ3FiMAS4anKHt6qD2LZa9lkPD+xi9VHkCY0QuwL2qSbKNzU+YmHNEsRyVDptUSV5HeCE\/peVLnXWfr\/zBYlTVvhdUjE1rsevsCPj6RN","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463060980336,"flow_last_seen":1463060980336,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.238","src_port":34438,"dst_port":443,"l4_proto":"udp"}
+2173{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463060980336,"flow_last_seen":1463060980336,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.238","src_port":34438,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"www.youtube.com"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463060980349,"flow_last_seen":1463060980349,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.110","src_port":48445,"dst_port":443,"l4_proto":"udp"}
+2174{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463060980349,"flow_last_seen":1463060980349,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.110","src_port":48445,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"i.ytimg.com"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463060980356,"flow_last_seen":1463060980356,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.227","src_port":40030,"dst_port":443,"l4_proto":"udp"}
+2167{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463060980356,"flow_last_seen":1463060980356,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.227","src_port":40030,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"fonts.gstatic.com"}}
+1413{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":816,"pkt":"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","pkt_caplen":816,"pkt_type":2048,"pkt_ipoffset":14}
+2193{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463060980364,"flow_last_seen":1463060980364,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.238","src_port":55934,"dst_port":443,"l4_proto":"udp"}
+2172{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"8IQvSpdgeJKcD6iOCABFAAViJrhAAEARqpjAqAFp2DrJ7tp+AbsFTrs0DdvEpLUMteNnUTAyNQF\/L3UOAoUxuEbp+7YBoAEABENITE8XAAAAUEFEAFcBAABTTkkAYgEAAFNUSwDQAQAAVkVSANQBAABDQ1MA5AEAAE5PTkMEAgAATVNQQwgCAABBRUFEDAIAAFVBSUQsAgAAU0NJRDwCAABUQ0lEQAIAAFBETUREAgAAU1JCRkgCAABJQ1NMTAIAAFBVQlNsAgAAU0NMU3ACAABLRVhTdAIAAENPUFR4AgAAQ0NSVJACAABJUlRUlAIAAENFVFY4AwAAQ0ZDVzwDAABTRkNXQAMAAC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1zLnl0aW1nLmNvbbTKJy3aOx+44evN5g4\/bhdbtR7MQzwZCntatSQ+G8ewpnq2IX6bmQGJ6u0gPE\/alKxhVCh5gNqzZa48ANz\/fzn8t\/OZMVjaOBqhnSl8gs5MAKWKvx2rs4aeJgBO0M1ar5HmEtqD1e+f9L6rfh+tUTAyNXsm6efkXHH\/AeiBYJKSGuhXNIn0S2TVLqHgVarrziXF9vRgZfRbyyeop0hCtvyBkGQAAABDQzIwQ2hyb21lLzQ5LjAuMjYyMy44NyBMaW51eCB4ODZfNjSnz1A5VQjBXngqx54WDpGpAAAAAFg1MDkAABAAHgAAAAEtDDoRyfLDyY7FDWPOtGGCrqeP59Ev12tUbO63fzUkAQAAAEMyNTVGSVhEVe9eTSHF9WXiYxqCfXGFX0ALe5CprnnrhREBANWx00HuRXMG0vkL7viDDbkIpOBViFNO6g+NNdysNjd851pEDUZpbHOuJYtW0iX4hBg5fY5j3AROZ3LGqn4GtUunxLSKIjTGQCqElPyRHXp8aZanMkwEPAt6EM7grDPd5Xwii1XuJA6M67q0oAq4SWvvMG1sUGL2sjhrCJT2dHXvhq+Y03p2EXtsBsu4SwWblRpFN82TNjK4JK6xcJx5X0VS7I5kAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463060980364,"flow_last_seen":1463060980364,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.238","src_port":55934,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"s.ytimg.com"}}
+0475{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":123,"pkt":"eJKcD6iO8IQvSpdgCABFAABtTPkAADMRu5ms2RADwKgBaQG7ng0AWd\/uADd2O2oBZL+pVdP7tzva+fHvZhkEEtFfk705wPfWHPtzaQLZxSHnInASbTD2097V+S960VCK+SG68+SzP6VbXn8\/e\/F4Y7OlxWw39RE6om32","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463060980378,"flow_last_seen":1463060980378,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.225","src_port":53817,"dst_port":443,"l4_proto":"udp"}
+2172{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463060980378,"flow_last_seen":1463060980378,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.225","src_port":53817,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"yt3.ggpht.com"}}
+0415{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBHBJAAEARn6vAqAFprNkQBLJlAbsALZ9GDEPl1BjSnP0KAohkBW4mjqf+lWrwMPohYA0CsIfpCV\/yUKbgEg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBthxAAEARBaLAqAFprNkQA54NAbsALeHSDKM2rKXAEd7wI3gnMNVg\/Bju+TzyuAKq97AJFlbG89vA9kIRtA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+2187{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2170{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2174{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"8IQvSpdgeJKcD6iOCABFAAVieq5AAEARTaLAqAFp2DrS7oaGAbsFTnAHDKSWOQdzcSypA\/c4ziDhTbajyErtRgBAAAHzDgEAjDIBAAYAAqQBAAQABENITE8YAAAAUEFEAA8BAABTTkkAHgEAAFNUSwCQAQAAU05PAMgBAABWRVIAzAEAAENDUwDcAQAATk9OQ\/wBAABNU1BDAAIAAEFFQUQEAgAAVUFJRCQCAABTQ0lENAIAAFRDSUQ4AgAAUERNRDwCAABTUkJGQAIAAElDU0xEAgAAUFVCU2QCAABTQ0xTaAIAAEtFWFNsAgAAQ09QVHACAABDQ1JUiAIAAElSVFSMAgAAQ0VUVjADAABDRkNXNAMAAFNGQ1c4AwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXd3dy55b3V0dWJlLmNvbdalm2WihhjDbuJ9CBXear6FE830nDK0DOtheSpcqMv4K9dyp89bYoH3dGaja08ECsbIdBNz3jrEnHVy2Co7PKsohLjstWuwuM4Ot37lLRyWIB+6pCeTT1Ql\/dlK0RI1QmPXVgERvi+3G2U+wIGmoRRNfg3PcalK2tFt2TRm5nJGukhzGMCRzHltwe3lR97hC163SifkC6W4+G9PbQ0P1zSU5mrGinKnB0EJUTAyNXsm6efkXHH\/AeiBYJKSGuhXNIn0eOLS2hoopbY+CsICIaFONi\/NZ85sYfbNv\/zzGWQAAABDQzIwQ2hyb21lLzQ5LjAuMjYyMy44NyBMaW51eCB4ODZfNjTuMTWsyMcOdQj4fdjaM8oxAAAAAFg1MDkAABAAHgAAAIUsUJ9lAOf4774DPfSfkv5VptnZVMPtbMGvyrUL80FyAQAAAEMyNTVGSVhEVe9eTSHF9WXiYxqCfXGFX0ALe5CprnnrcNABADDHX0+GqS3UOm1La2ERlwR0hUAJS9h7fJsCshJyxls2X48hX+r5jL71vXKkXGvfqji+sAwL+Poyi+iT\/cF+U4+4flxdXYZHdN9gWq2IJXF9mPOmE2F\/hVo6vICxPOsSyFkQMbSK0uAdfTbMY27+jk3WFR9xyWJvLia0VUfh4MRFYebwiCNS4cpj40wiXK9vvFVoIepwMwUCI55NALk8fLIbGEhDAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2196{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2189{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"eJKcD6iO8IQvSpdgCABFAAVikiMAADERjjjYOsnjwKgBaQG7nF4FTh5vDCo6NO9En0amAZEfQ5vl5ZylLctOrwGAAVJFSgAGAAAAU1RLADwAAABTTk8AdAAAAFBST0a7AAAAU0NGR04BAABSUkVKUgEAAENSVP8eBQAAaRAHFCrfxIhXcbs59GLqTNLAzQKlJSxYc8PnhM1v4GJftBATUnQvGmqz6Y2IJtVDNNzmjrYkw\/BVo9S+9GLAIhq3vZVgLF0PVtrxOsfmVHEVsGvSxKruvVLY30hAc6zfYzlUWDXc2oUm7w1Csm6Z35qZwNMwRQIgf3amssQwsr3mVLSVz+H1\/nL7KlH45J4RL7G40WVh\/zUCIQDV8l8hVR93qsyvbI2Z\/B+BlTnzXk4aeVae7OCNo6PC6lNDRkcHAAAAQUVBRAgAAABTQ0lEGAAAAFBETUQcAAAAUFVCUz8AAABLRVhTQwAAAE9CSVRLAAAARVhQWVMAAABBRVNHQ0MyMLMfJ7E+jZP1YJkPhTqbxqVDSElEIAAA3l2vKLLFreuBSUwxyN+74G\/4WZe9QxPpXjOtlEywHwtDMjU1IqnIQgaTDzSAajZXAAAAAAwAAAABAwHogWCSkhroAwAAAAN7Junn5Fxx\/wAAAAAA\/wYAAHi7c1AtxPvNxgAsudi+GzSx3oe04Tic2NatWf922kf0hhwVG1mgwsAMmIdMgPkF1p4zMDcyN7AwtgR1otKwWsXBw+UMTDdp+UV5mYmwBMnOw+ubX5pXAkpdYZmp5XB38SC7S9RAGOwuHh4tYJiChMGRGwkUZgf68ZwtsPnBAWYwM7IzOzGwvF91fdMNT2Ud1a7MlSledVlybaZOW\/IT25eYrq8qUp7OLmq33YHB9tcRfpb4rOn2rfYyM5bOl9xpdepuGi\/LiYsHpi9uYuk3aGLpJlSANTGD+wiCLE3MrkCOYxOKA5t4tfQS81KK8jPBDZ4mMSC3oCA1Lz0zLxVZmZCWXnJOfmkKspgYzCDdxLzEnMqSzORisDg3woJEZE5OEx+S1XqZeaj8rAJUfml2Ez+yU\/USi9AFStEEktBVJOejCeRWoAmUoGspy0Nyc0oqEie1GImTVoTEyShF4mSWIHHycpA4BSicElCgQjiJKcAiABJ4cMdARPKaRGACQNncVGCLAqxMECZalpmSmg8WAsVrcQmwYEwGaeNF4gEluYDcshJDJLYRmA00PTe1pAioClk10Chg2yUjE1xANQmAeDloMV+ZX1pSmpSqm5efnJ+fnQlPTFBxNGWpKaWQKhyWQICpJTcdzJGCJ7+czNS8kmJke7iRkyYLSH0TG1Aa2MZpEsGa9LiQkyyWYONC8hYXuGiGmMYBdqdeEjC6kT0ggs35SA0q9gaDDKRiOQZYsGgjFbjy0DKwIDsTyVf67p6O7kbgElUbqQyHKYYGgyGyDlC5jtTI273NV8E2Yd+C1ye2dnFOb2eeVW6ug9bQQS6rsfaMFCEtB2DVhdYd4WBjS2\/kARbTBgaQpo6mgbqB6gLlBYqE\/JODrSszjftYydWvQWHrJl8LaGcoCDtX+zF57w+1k7kVtnVpynvVDocqpnI0GGrun+excBbbk\/WtwdM1pruv4DC9rbrjjuzUh5nbWX\/pvc8t5nyiovfjwmtmI4UJXPKZTu5BF9\/Zcy1\/ucu1+fj1my\/1QiLLjwa6eC40ny7X1+yaMeXv6+AnN8+Hscy0b3aWiM\/4f24pi0LZ9UUc95\/XzHjyptDwc\/Gl7CxFnY+ZRZOXZM9a4Our\/25u0meLsNsKswVSG3lP+qzvmF246uDhGtUyFwaTzRJRxS8XOFxmLluatV\/uy7O6p0+N2bQ\/+Zrt","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2168{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"eJKcD6iO8IQvSpdgCABFAAVikiQAADERjjfYOsnjwKgBaQG7nF4FToIdDCo6NO9En0amAke0HJrC9wgLV+6ErgCkAS0FKQDV+ll5brrjxuk3J31gMTd4kny\/\/2W8wqGSvKd39b5MWp26xxgAOnpZFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":79,"pkt":"eJKcD6iO8IQvSpdgCABFAABB+YUAADIRIezYOtLuwKgBaQG7hoYALYHoDKSWOQdzcSypA8ozx2yPMyUELEnlNABAAgERJgEAT\/H\/\/wYAAg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+2172{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2197{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABEerFAAEARUr3AqAFp2DrS7oaGAbsAMNFuDKSWOQdzcSypBN5dy4jG830pw08Es7Wn9FjSGT4MAs3qI+qpNHD36A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBOXBAAEARkIHAqAFp2DrWbr09AbsALc8CDJgh\/ntZ+3x4Ah13YQnq1RtTi\/NVT\/M8PU6bEbi3He17LuERfw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+2179{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2170{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"eJKcD6iO8IQvSpdgCABFAAVi7JsAADERM7XYOsnuwKgBaQG72n4FTodMDNvEpLUMteNnAjCUFcdtv6XHZbkQxgCkAS0FXQCLsNsKswVSG3lP+qzvmF246uDhGtUyFwaTzRJRxS8XOFxmLluatV\/uy7O6p0+N2bQ\/+Zrt1fpZeW6648bpNyd9YDE3eJJ8v\/9lvMKhkrynd\/W+TFqduscYADp6WRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":79,"pkt":"eJKcD6iO8IQvSpdgCABFAABBki8AADERk03YOsnjwKgBaQG7nF4ALZpeDCo6NO9En0amAyq\/6miD++87XF5t3ABAAgFQJAEAOf\/\/\/wYAAg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+2174{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"8IQvSpdgeJKcD6iOCABFAAViJr5AAEARqpLAqAFp2DrJ7tp+AbsFTmNfDNvEpLUMteNnAkK6EhGkWzsY+0mYWwFAAAGICgEAC08BAAYAAaQBAAQABENITE8YAAAAUEFEABUBAABTTkkAIAEAAFNUSwCQAQAAU05PAMgBAABWRVIAzAEAAENDUwDcAQAATk9OQ\/wBAABNU1BDAAIAAEFFQUQEAgAAVUFJRCQCAABTQ0lENAIAAFRDSUQ4AgAAUERNRDwCAABTUkJGQAIAAElDU0xEAgAAUFVCU2QCAABTQ0xTaAIAAEtFWFNsAgAAQ09QVHACAABDQ1JUiAIAAElSVFSMAgAAQ0VUVjADAABDRkNXNAMAAFNGQ1c4AwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXMueXRpbWcuY29tJy7nP96y9QV42MKrzfRCPLT87WDRH7Fd5bV2IYJV5uerSuKcuz27mxBT4+gnyC4BMUrik01sKIil0iRgGwZXZriX2eqvjy0wvoZPR2mR64H2U8+GZaQSd+4vVoONHW5kMsgcr5Q\/br7AM9doxRgjn+8O22aMyRRKIbkIgECxfZ+3gPhZwCGzY3E1Vh0YGcUrXggtX0cSYrBSP4FN90wRk2Ud5VnIkrPbUTAyNXsm6efkXHH\/AeiBYJKSGuhXNIn0IqnIQgaTDzRtelxL0+7hjxauiGCNLupeJpOhHmQAAABDQzIwQ2hyb21lLzQ5LjAuMjYyMy44NyBMaW51eCB4ODZfNjSzHyexPo2T9WCZD4U6m8alAAAAAFg1MDkAABAAHgAAAEiyOniywzTGSMTKib7g31ZOwdWecrzRuYyXGwDlFjJ0AQAAAEMyNTVGSVhEVe9eTSHF9WXiYxqCfXGFX0ALe5CprnnrhREBANJxdf4Wd9FFW8AQoXCIXXgv2zEDqFp\/egW+DVGMyE09vxgZmlpnWzxY3Z57Ap1iGjKvYRqcB1Pc2wyfCKya+SKTTLxWUeVHKGc7wCkBIDZDIk18GkO4qEYo\/SGY+S73FxunU\/0XS39XYFv6kf0\/sNSKLyHyf6nXLT+fVCszn5F+ZG8qD17xGf7C+ufst7A7A3aNErJOiPxAkPjLJnObbm\/F9EfGAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABEY\/ZAAEARcoPAqAFp2DrJ45xeAbsAML5wDCo6NO9En0amA1Q7\/sWx3BcMDqA8bo4ViNBU0n79W7TT2LrcIn1lUQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBHB5AAEARn5\/AqAFprNkQBLJlAbsALTJ2DEPl1BjSnP0KAzjJULyfLco0lkyo8NxPEjOmoNDcdH7jUMYuMg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+2184{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463060980,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1463060980356,"flow_last_seen":1463060980457,"flow_tot_l4_data_len":5525,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":920,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.227","src_port":40030,"dst_port":443,"l4_proto":"udp"}
+0510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1463060980313,"flow_last_seen":1463060980404,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.3","src_port":40461,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"Google","category":"Web"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1463060980313,"flow_last_seen":1463060980404,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.3","src_port":40461,"dst_port":443,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1463060980349,"flow_last_seen":1463060980446,"flow_tot_l4_data_len":2761,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":920,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.110","src_port":48445,"dst_port":443,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1463060980336,"flow_last_seen":1463060980436,"flow_tot_l4_data_len":6307,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":901,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.238","src_port":34438,"dst_port":443,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":2,"flow_packet_id":5,"flow_first_seen":1463060980301,"flow_last_seen":1463060980460,"flow_tot_l4_data_len":4164,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":832,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"172.217.16.4","src_port":45669,"dst_port":443,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1463060980378,"flow_last_seen":1463060980460,"flow_tot_l4_data_len":2716,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.225","src_port":53817,"dst_port":443,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1463060980364,"flow_last_seen":1463060980449,"flow_tot_l4_data_len":5432,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.201.238","src_port":55934,"dst_port":443,"l4_proto":"udp"}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463075953299,"flow_last_seen":1463075953299,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.210.206","src_port":35236,"dst_port":443,"l4_proto":"udp"}
+2170{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463075953299,"flow_last_seen":1463075953299,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.210.206","src_port":35236,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"www.youtube.com"}}
+0831{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":387,"pkt":"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","pkt_caplen":387,"pkt_type":2048,"pkt_ipoffset":14}
+2180{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2176{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2182{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":383,"pkt":"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","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":79,"pkt":"ABlmWmaM6HTmLPTkCABFAABBGykAADQR\/mTYOtLOwKgBbQG7iaQALY6yDLy767UFbXetA3zojFew7R4dLu2UnQFAAAFTJAEA5v\/\/\/wYAAg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":82,"pkt":"6HTmLPTkABlmWmaMCABFAABEaUZAAEARZETAqAFt2DrSzomkAbsAMFyXDLy767UFbXetBV\/Y7Ul5oQwe9Lv9muLimrGtMuB09oWkLc0AHLG9cw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+2193{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"ABlmWmaM6HTmLPTkCABFAAViGzYAADQR+TbYOtLOwKgBbQG7iaQFTsZlAASWtj9YnykbY5sBtxIP+5DRkbaWczK8TvU2B\/SQWWTYGKamP7O5HmWaiLp\/YdB4SNUSbIf5W74zN6NHV7UcGkr2Yrg33gzpBw6REFaJAJAmKPqZcEv3goC4vCeOW+VCjAuXZr3gljp2oqo7noRfZGWstuIVsQDlrz5GVGVqgiU82\/T\/2uTPcU2O7LRk0l6kqp2qMEKMNt8moBBXVMiTwtboxn40bWGIznK0xa7dMuN21jsJO9Sm5B7NhegHUcLU8Bu99\/XqYYGSGXtEb5XbISzp8l9sf9zxZtYSf3D4XNH9xlNHuRLJ7Q4BSCYv1QXr0Q5p8+I11snVS84ZtncLfFfYRFkLDLOy+LLAZny8\/\/y8gm61wbavSBr1e\/VGMqmBOuOXMo3thac8Y+8BgX8IBssxz5zQI\/y8uEqe1wrDBlODHxOvnSAZNIQ7zTEaU0eYI59CPc797\/Z7ZNf\/r9AvqKjKUDE2hSlUMUCZpXk1b+2\/sGleIonkb5WKJ857sK8WDmOjh4GMkhh0IwNHOnYfP2idd44KYUkJTmt52oh70eN2zu4dz4TqLkqxOl6+v8RIL0VS2XU2M2APueLlnsv13tVtz0ILO3kfZrj11fTEmJB4MsGWr8+gq4sFuo7+0Ka1laiSwtrqKsbiL7Wzq9usDkqaQzB0yVhwVGmwbqrDtI6mfTh0xleRkReAg3INVC6YUqzO3Kc4yXSThme+2G+QlIFcsNiSUtHkU+L4qXfmopQc\/PKDiWgALJnQioqOar2DCvrFRhXqGqLQjQFASkvMsbAhYmzvzCbYQmvv6LEJzdmmSPHE4kzBfXJrCZhEvlgvc3g5UXeb1tgk7r2g3l9z43ZknaA7vUN8mFfuqu4N02PbeoHKRs9MDny9ZCwpst2CiYfnBSC8GH83UcTVpbS9VczcvRq5yG5vSrqLTlBfc8YTmBQ10KXB2lxnkxKhsPm4zd8pzCnmVmllqDZfN\/O25+HU8NW9wpUFANGRZdPbnGLlFn1CODGEEr9uz\/yUKzVXsy2D9r45WpH2aD8goCDukhLWvUZjOQ6V16yIeao+3Ju+FIV6lxcVkW7fF0FgmOzn7Q3XyhXnRhIqRBE13mGQ0O6pgpALZQLKCUGJnqBE4RVCjdPDn2cAUqvY0mMalRd+hOIOZQ1O1B+JTmSBqTRZ+lQ7parmmSp2IwcH4K+cOLz2M9MFxGyCIFxfdV+ZcsvqOS46\/yAIvKMyCXffkNdsOjp3J1hA\/ZxYVhdUhdWfqdWf8Z57roWUj1Kb0PG9jB3hxflfIc\/ezEmRK2F5L4AFs1Y2tHdp0P9ekVnAv9Cr47t5nMc+P7sfo0jhHmBGl78\/bvMBIDVRJEXWT1+DyZkP7Lx+u3LRCvJkp6QW\/7V\/jDyg3BSk23E\/mcnxK6Ox+MclUI4N61vd8JXNt474YaII3F+qJw7zK3+UfZZmNT1td+6FD05AIjwYN2FU8CvVtsG3YGUuKOdv1tZKxpNazfuSpWxFBXXTysKdO5SBOqdGe+kBc0ppMGulJz7VOz4nRHaOGUpI\/gjd0K6RarmScjpKgUhUiFAFebW2k4zeW5WcLH\/MDljos\/EtubwGbqhPzO2F37mc3DhVhRXF9v5mD7Jcb2eDBlYJPw\/nBE6XtRHI2ZvtQcjRANi1aIW4GRdCoRc1k9v8p\/x9UTKJoL8K8rHmGM6qxNxVU8Bcl3kh19bqy6xq7n01NpkFrzvUB34VxzXc1j52SPEVHPXQvyFUreHsICUUwjykqnoTXeSLvTjZ5pq79wmf5SaRHobMi6WrsuImsgGQdVLk","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":75,"pkt":"ABlmWmaM6HTmLPTkCABFAAA9GzcAADQR\/lrYOtLOwKgBbQG7iaQAKUF3AAXpEna\/1bsyV2UQHGn\/WgMXYkyG+BOvL+ELY+mSKwWN","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":75,"pkt":"ABlmWmaM6HTmLPTkCABFAAA9GzgAADQR\/lnYOtLOwKgBbQG7iaQAKbdNAAb6THm387WL8oM\/s18Dn2gGU35xzD6QbukfJp1OJZ9l","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":85,"pkt":"6HTmLPTkABlmWmaMCABFAABHaU9AAEARZDjAqAFt2DrSzomkAbsAM8DkDLy767UFbXetBnnzZOEdEf3uWTpR0NMk3sHOENsD6bt3rPyqS4t1oF\/fLw==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+2196{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"ABlmWmaM6HTmLPTkCABFAAViG1QAADQR+RjYOtLOwKgBbQG7iaQFTg9DAAdNVYQf+iC\/\/853DRLv9axgfYBjztrhLSg1s8tnb+0mxaeHezcc8sEddrmKsZSRYWcrYF9VCqiHXDNKY7dY1PB7CJYNS5aD\/r21wISS9hMPwdB21G0Hcu+EwnECvwvM\/0xR9AM4oKNl\/3Fe9H0H4yUBO+KpL02GhxngHzlMTv97MiyJNHcU5XwZRgKsobi246ls5nyH3OCZxd\/WriGpW2D6YWBfhEru0wVQ+nFW5usrHs+808xWtp9abq2fIE8jKQM9AUn07ujtqFyYYp7H6GsqZ2djyBzhplSARzFL7u8xxm+xJ35T+W5\/3hR97w6FY+61zAgwk\/S\/3EuUyCgVQFfmkHLxa6ffAEzwOTYE6NluPvfUV0vaIfE520EylO59UTrD6SOhmFdEOPU0sTo3an5mnvGPF0OObkkn6zPg8lGg\/Xk9uTv6kXKi18HEk3FdChYdgWoLPdR8RpexHHhk\/KYCZeLsFkh8eQabTnrsLoxUB0M1cdHt3S0K4onDVqG4JaGdOeCx8ckepZs+FRor1WlvquFD\/IYEYz9n1WLSGD1C8PAGI1w9AtK8khS5UtdPZPtePvZ3UhiZviplzXovmyqN7iGfs+7OBMKQ+v+fJgg31saWnMURKaB3mzV7wylK2vPSxK7Iq7AUQ3FLWKc\/D34uZL3FdKdeQAxj+fmF2IXJNSY4TxrLZm1Pz8Ot9ccSpLzARv7TWoXwWYw+V9iO1HONycd4WPSVV6pvGAzZELYGSsJLiQJCMrMCGhXkFA6skX5RdZyRfJde+raE8ky162\/k+onPLGYaZSA5H+DU8coiAQ+7SS+pMoZbHIXREskFi3GgirDbcEc3S51yo7dGJwmt1DxJcpvtMIPYhsv+9iK5hN30QQhogta+eeJMk0oDeG\/zTwwAgZB0i04J\/LAbx9IqWhahgOgjWQTAVzkAZ4qFtnNgLQhQFsU\/EoOVwH\/CQOHRF9NWLW3zLjLAB2Q6cru\/cATFHBFbG7lpIxZaHXMRhMgRTPMPqUdk6ZSthg+ZtlB8VOTykzthfFzwa9eNEbOQF5LdqraJbWq9yQhYRvvt3Fqrys39jzAHeCuynF2lRcI1vJjQWoeaQN\/2e0KkJEunqTGdkXfw+mgJdEvWZYi8+p4iGujkl9OViO0hLMmbX1IiYinomNW6RcuMWUkHc\/N6Gkf9x47XwRy5bF7i3AysneHT0NXiKScMqzQVzAZMmJMfcGL5JbR\/H\/Wm1ZrLc1AAVot4upxeIGzzckokXpU9TRMFJWZIijs+urWA9aAgjBWTCh3THScrEgL6pJVhU3VYARS3mfGP5HLAc6C33xhvYf9m15dTcFn+nCmsQf+oYlReM4o+dZi16U1hDDlnYctSQnRdyuomM5Cv5lG+9ZIEGCbCpmUpC36bVLhK1dOOl1z43aDZL02uWMtOdwTlTXw8zTgKle1Qpq7MRETMxTvFWWO5UGb7dMrK0+6uK6z9GCWNsPBv1QI3UOSckN88QmdpxB5Zm0OgrNSBQ\/QfUKjp1aUPiJdx1CUOaMb4EvAQgUVnc+b6f0pS5eyfiwmzd\/fCfIEdPACHCrZVZR7MOe0wcQUTnsUk12JTBMut+jzUQ8PAsH56VvuhvVc+CzBC\/a7HaXhb153HKPnZGVYvtheUnb51Phx1AOdOTUy6mbYJTr8ztC8UUfebEUiRJf7mveK8IP2PLTb1k\/fi6C2QvpDL\/c602MwBIC8TEJ3tTJ763IFx3cn4NRzl2mbKI24Fubuvhc2UMlR9hQPX4rX0esWexvKpDui+X3OzHWrlV5pGYL5pD\/tM","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2198{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+1926{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","pkt_oversize":false,"pkt_ts":1463075953,"pkt_len":1188,"pkt":"ABlmWmaM6HTmLPTkCABFAASWG1YAADQR+eLYOtLOwKgBbQG7iaQEgrfkAAnf4DCMrsUbO\/ngChm3BUxvj6ihF711mBPSXPVFdDhpSOtcrbvY1KsY0f4vCqIi1MXzoSbEcl8CFyGdECH08WWlYgy6GmXJ+IpdKgMRIunQ0WNk82BxUlyvqQQzyafpjH4+5Y814Kb4YgqBF\/zJ7AWokLdMqZd2sh5fS4lv7RgAT+IwyMSp23pRzGxvNPTD\/VBqoMIIcR0xsXYQ7cIRDkEghEXLz\/miWktIBLJB+76uq2WcJL1iRBTB7BrhW3xzrub2U\/qksP\/rNCTPyoRaGvkcD6kS+cZjUHuSBrbBFfY\/kFvtiyzOt+1dUS2H5WvK\/e9cdd4hZTdVW8z0+NuWpQ650nDVcLNHwpcvT8Y7kFGRH1aJWlNwYnCjjhjFGL4WJ0nGves2K55q9L1NWMo60zkIPt2gSkDN7ic5vrsZJo2pbLNjLoHl26mIrU9iwWWlSyPBJw0zLkVPJRtg6rCHPZRO8DI39uhPGktSe6PgYTZq3cvhG3I+WHymsGbmr3SWPKy2nJ5Icb5lItEcNjwBHM8VuWWpEFkLmCY1DSf0YTyNPXH0ray\/Zb9BueH0uIEmJpW9lIgxkUn8Fne\/+5B8hXt+Fn3ULzd4BLoKH5WoQuZW4dB0BAizlUCv7XkBpKL1jJ\/Xa0ynkC0\/GM+6y6rPY\/N2RBKBls946wbH1MamdLsvuDy0J+CIMnAU1VbKQfcuzVTDU6PyCd5vjc6L39DK9LfYRwahFhdDInWWn6Z1liwAY0utnhWQfYKSQJW3tgH6I3sxruO6UxMDcvLVAywZuAtwP5usEfc9neWEWSGAS94nId1TSYp\/UnV2jfx6M+\/eMtUpc3UoXcMVDvYRCMagfHcjPYbOvaBXufrlERvzBra4C62\/8Z8sz6eWaljp7aAzDuKzSv31lgrX9j0JQF5yFUGWET+shJydWdq9Y9lg4eDmqzM1DwA7N9pEuyM\/BI9BypXeQmpVKTaerJ\/uedM64ldi40vJlWQi\/6fsYMZjeCnF7d2WXDVfBiu\/EtHx5p7cDiKTY6u3IcWJP+WvWIfbyrSDxy8ul9ZxbCK2KP2dJslbz5i10BRktzGiNojUoZji5U6mCs9XEQk6Veq09SpgVmPX1kSE+3SW8D\/uGNOm1fmyOP\/xKDgMBCTeFDgZZgVZV1oq\/p2X0qeAs+5fQFsMMtl6tY4Bt5P3ohcc0Oxg8FEqUHyM6zRnP15PIOpxxlN\/\/s4SZSt\/aMq\/IPg2lPmc9CpcJMS0L8LVIyaDXcScO1DvsyEALATmTDycfe2+tthjTeQnxlEsN5sjob5ccENZo1PjR6HhP2LlJJ2bD4T5tGRBb1rdnIqtT8v8ksY+Yc0uO63TLrkRWlws+y6ccPBHNJzsgcal11JK8nMhJeJlFRIt2rf3Hapg5hwia\/UuQUfF+4cWZc9DvUL3MSuO2Ox\/iCroKvXeyNPw3CVhgyihJPqrOqtB4BuzMAouyKKIjCC2KhyXI+JgP1S2E9CCp7Lj\/eDne2tDHDryZxZ1lwQJntiYx7Y32qZi\/GVd","pkt_caplen":1188,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap","flow_id":9,"flow_packet_id":69,"flow_first_seen":1463075953299,"flow_last_seen":1463075954300,"flow_tot_l4_data_len":56087,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":812,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.109","dst_ip":"216.58.210.206","src_port":35236,"dst_port":443,"l4_proto":"udp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic.pcap"}
diff --git a/tests/result/nDPId_quic046.pcap.txt b/tests/result/nDPId_quic046.pcap.txt
new file mode 100644
index 000000000..a9d0cdeaf
--- /dev/null
+++ b/tests/result/nDPId_quic046.pcap.txt
@@ -0,0 +1,20 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1584456191933,"flow_last_seen":1584456191933,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.236","dst_ip":"216.58.206.86","src_port":50587,"dst_port":443,"l4_proto":"udp"}
+2173{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1584456191933,"flow_last_seen":1584456191933,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.236","dst_ip":"216.58.206.86","src_port":50587,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"i.ytimg.com"}}
+1085{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":574,"pkt":"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","pkt_caplen":574,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":128,"pkt":"ILABHGh4AJqdnpsZCABFAAByVxFAAIAROkTAqAHs2DrOVsWbAbsAXuOl01EwNDZQtKT59fQu3TkAAAADQ7oFqOGvWa6mhIUAfFpbpAofPEreEA\/GGklYOasxEedYwPIHZE9zXMBgbnX+9bPuSN5MQzRW31QsSe2iJHxiKYqGbP8=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0583{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":201,"pkt":"ILABHGh4AJqdnpsZCABFAAC7VxJAAIAROfrAqAHs2DrOVsWbAbsApysy01EwNDZQtKT59fQu3TkAAAAEGoZh\/DwxLtrSzyqJ854Roncx5Gs7D0zANVDYJDSq9ZjYOSmqwn64xE\/98TQx5UDzJnhlqKbtmmx9GdNWBnvHPQrhtlm4nc0GLmpl3475rXaAwmI8156+n7Ch4C0\/lA4\/34ra3CYyszqi2R+muQnBfwOAYH3\/4zLKmFK11tcYmY3Yy+jQ\/7Jp25HEdC4A","pkt_caplen":201,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":199,"pkt":"ILABHGh4AJqdnpsZCABFAAC5VxNAAIAROfvAqAHs2DrOVsWbAbsApRlJ01EwNDZQtKT59fQu3TkAAAAFpShUaKLmTN2T3Ey7BEBxhhlPz\/mI42X6i3+zIvnvGPOAlaAMy0sQAcxegKQRA1QQwNG9N\/8cy92QCI0CXWZ1odCXSax157XF7S\/xa+HfI8d71opbqWvA7umD5My\/CObMYgq6GFbFgtUgONNyTSlCdXpaygRYfMn++j4RkGiGTRdqEUPLH8obgjwk1Q==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":199,"pkt":"ILABHGh4AJqdnpsZCABFAAC5VxRAAIAROfrAqAHs2DrOVsWbAbsApdPk01EwNDZQtKT59fQu3TkAAAAGIPeAiZm0TRMrGAST9thHsWc9UL9IJkp2umlnUQCCw0QHFEP8w0167dP8QkdecMpcCv5H41qfUfxopmrL5LmQSLRq8TSO12ukC6jtYXervASPtZRz6yKXYPaTAKBHIGtKIb7Z9SwnomSSaCSzdYic5oW34pqe7z4mrO60TvD2TadrhJYrQsYK80Xi3g==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":200,"pkt":"ILABHGh4AJqdnpsZCABFAAC6VxVAAIAROfjAqAHs2DrOVsWbAbsApl7C01EwNDZQtKT59fQu3TkAAAAHaRG+H8zt\/Q56A5+blzCESuLZedI84prNcnBFDuGPHXxe4EDs3altQ+2reMHbIzy2ZXA2tJ9b4eYF+TBwhof7hqVDnQiIrzfHPGcDKOjGPszc7hgTtrzNLTjP8YzpZ3oLwl+e2EDQiSr\/RpNjP77yeb\/YckQ334P5AAXcGvPrnGR9EblqT726UCgqQaE=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":199,"pkt":"ILABHGh4AJqdnpsZCABFAAC5VxZAAIAROfjAqAHs2DrOVsWbAbsApUHQ01EwNDZQtKT59fQu3TkAAAAIN1YykhG6PpDIIC2tqjMV+4SaiMjViMw235cn4BAOx+aQyOU1ekGdt1hWlvcqDx6Xnb7lYEuIlAwJMyg\/wrc4D54Ge+e5+\/mwC+I9epq6RFNofqSKMGmGzOtnYglnIW690RDTzwhCIvD08s2q5bGYp10xBwL8G14bIWoKFMxNOT9XgVxu04PYTx0GJA==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":205,"pkt":"ILABHGh4AJqdnpsZCABFAAC\/VxdAAIAROfHAqAHs2DrOVsWbAbsAqwii01EwNDZQtKT59fQu3TkAAAAJcm4lhOVp0g8NaOQxyT9XtH5tjvYBDfIqVPdiPRnorb5PDHBeItWO9O2oNwpcjaIYcaPXkrvGUurk7gKh4936UL8g2lBVr4usdZlKRQqw7zkrNDIJAzzNli9JIl\/ALXigyo8DiNjHJItR221ob4jQ3NUU15d\/\/p3XgqAQNbqE+wt8K+hXWoCspOkXagjORrvHZA==","pkt_caplen":205,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":202,"pkt":"ILABHGh4AJqdnpsZCABFAAC8VxhAAIAROfPAqAHs2DrOVsWbAbsAqLZe01EwNDZQtKT59fQu3TkAAAAKUQ7imkleUDHLt+ZwddvXR+uJ7LT1gCqELAMx0BUJTVePtovvbbj\/PzLrkphuOCQBgXzy2Af3TZ1A2pra80MVYlVZFLzckmkQkYlNPZK0mEFxRXocD7XNPbmiNiaUv1opexKLAgHbf1ay1j1+OFgMGIhqvvhJyfIF+VNUTAKBo6pjdMAyO2luOnCm5vqRzw==","pkt_caplen":202,"pkt_type":2048,"pkt_ipoffset":14}
+2175{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2198{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":269,"pkt":"AJqdnpsZILABHGh4CABFAAD\/AABAADgR2MjYOs5WwKgB7AG7xZsA6x+iQAIyyA8Hh0m4bZdW42gZxuJGjnC1NVNo019gw246djPBq+O1rkBSBlV47fUDNFoD1rcyW3VA2Jwm277ag1xX1aphBr+2VmvzfrZi9Yd+oW\/hpNmzYiTyxMPLBgyrS\/yUtwO0olISYQ3Sx83\/a9UJNp3n\/w7f0omy2ENTYMfvjgjmxj1FxS7UFmbk4Jkp0afE47UqGDLnxprAweKcbd+cUyhHjjW6AZzubY3H+Q7MaCWDLYH+udDVK8w\/6Qe7I354uH4J9P2N5gzVfj9wWBS3t03Jdj222Z4OFIbKRyC2I0UMcnA=","pkt_caplen":269,"pkt_type":2048,"pkt_ipoffset":14}
+2191{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2194{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","pkt_oversize":false,"pkt_ts":1584456191,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap","flow_id":0,"flow_packet_id":100,"flow_first_seen":1584456191933,"flow_last_seen":1584456191986,"flow_tot_l4_data_len":87897,"flow_min_l4_data_len":28,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":878,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.236","dst_ip":"216.58.206.86","src_port":50587,"dst_port":443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic046.pcap"}
diff --git a/tests/result/nDPId_quic_0RTT.pcap.txt b/tests/result/nDPId_quic_0RTT.pcap.txt
new file mode 100644
index 000000000..21b9fead0
--- /dev/null
+++ b/tests/result/nDPId_quic_0RTT.pcap.txt
@@ -0,0 +1,7 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1603888789791,"flow_last_seen":1603888789791,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":60459,"dst_port":4443,"l4_proto":"udp"}
+2064{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap","pkt_oversize":false,"pkt_ts":1603888789,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1603888789791,"flow_last_seen":1603888789791,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":60459,"dst_port":4443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2064{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap","pkt_oversize":false,"pkt_ts":1603888789,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0454{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1603888789791,"flow_last_seen":1603888789792,"flow_tot_l4_data_len":2480,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"::1","dst_ip":"::1","src_port":60459,"dst_port":4443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_0RTT.pcap"}
diff --git a/tests/result/nDPId_quic_interop_V.pcapng.txt b/tests/result/nDPId_quic_interop_V.pcapng.txt
new file mode 100644
index 000000000..b59216360
--- /dev/null
+++ b/tests/result/nDPId_quic_interop_V.pcapng.txt
@@ -0,0 +1,479 @@
+0368{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0520{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":0,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":1603816434507,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":38077,"dst_port":443,"l4_proto":"udp"}
+2086{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0578{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":0,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":1603816434507,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":38077,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":1,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":1603816434507,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37643,"dst_port":443,"l4_proto":"udp"}
+2076{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":1,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":1603816434507,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37643,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0528{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":2,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":1603816434507,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":37876,"dst_port":443,"l4_proto":"udp"}
+2077{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":2,"flow_packet_id":1,"flow_first_seen":1603816434507,"flow_last_seen":1603816434507,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":37876,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0528{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":3,"flow_packet_id":1,"flow_first_seen":1603816434509,"flow_last_seen":1603816434509,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":34442,"dst_port":443,"l4_proto":"udp"}
+2066{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0586{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":3,"flow_packet_id":1,"flow_first_seen":1603816434509,"flow_last_seen":1603816434509,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":34442,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":4,"flow_packet_id":1,"flow_first_seen":1603816434512,"flow_last_seen":1603816434512,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":47010,"dst_port":443,"l4_proto":"udp"}
+2072{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAtF1AAEARybfAqAGAA3nyNreiAbsE7OwqxgoKCgoIdQnXg0rBLY8AAETSdSNeqCjc+r6H8HOL2nfX9Nl4bt2\/tch\/k3WGu45v6swQRKEZjB5cL5PwQRNSezjETWlwl9x31DElYvPiaTjwEzV3uzPoPSD3RDsDoNIOdJfzM8eeT+YF8HtZxPxl8JfMcAWEYacVzCIRBiKkRKZDpR5dR0ouRtlV3GGe7kt0DtTyh+sL3vELhV2kHz6ly30R\/jiT47NHUtkHKuInrvyxjGqVvAYH34n7tXCBQ6D+AfZH11fptBBQ7utMKjJQetgZnmiyn4jfUks45DQLptmzmM7vacgVM1UXfvDRMiXWFLlgc2aMseReas3HNr0PU1Ye1gi1puLSN2a9gpcRb+O0YMFs0jlKm38N1LBqGTBpyiDu8QECyVyUyl5oER0iWXuG3TbvkN2QQTnAKlJqm0eLVl\/NYu3z\/fNWg32CWUDT2152nd1+esKzcxvEOyGhXuUWhYZ2f900yvrQLHcBQy2bY\/c28n\/CX4U8pxI6NyIasmjHd4xMKoES4DMmjTKarxqquM7dXQbXZLB8En20kKfdQRYHHg+reqWqS2rb8XL4IMSIg8+UsaueMDmzrfUZd\/56R7cXjRlq+VUmt81q5nNnKCMBQ\/7rvr4qOGOZ2CHm9V+uADTNbhvve0l68irgd7nnxQpElTgIyjHyFhvd8KPoLd2HsWPDEewjah\/d5eFL2o2JGexda6drG5JkIeHDe6OWKoobO2FfYrFha9u0nzvL0Czf21A7G+Hktz+GtzDop6GmMw9wX0x7PAWZ9MWVDxJhZqMOzlDofB1A88ZWDukm1Hm6PVA8JMNdUp3UJt5LtDBJLLAEOUN0BNEg9pXHjjKOVZeJN8ZQvkURagzOCo3aTho10tRkW\/\/buLsCCgS9oRh18BVjsveR+UkY4XmNAimeDQhBeVIZNQAbv63kh8fikt2GCen13aqn\/akV6vyA3xP9zH8BrXE0pnxbTdVJRyKZmPMfH+2L5gdn4Inm\/u2BD5yUOdsZkjyDYog2dorLJX+t+PSQ9uXuCwdbDKjjZw9L8++g9YMCmG+DuNoxchSfm4TcUkVs0SgbA\/r\/65YZBCmO6TdtJWtU8H5XFhYFiz1Q78xobCBsvaSvzLLye5aeCDzi6qFTLk0yIv3EAu91rP\/6ul6HmTBVTtG3x8oOLW5WVDEqHHQcQF2G5KsSqr4MhwRqiW0iF9\/6ruIt5OM0L8g5QVUhLrV+wAUx9TrMv+LPDrsvG+Dx5k4p3UodhKDHRb\/7ijQM2ozG8RHNrTry6RrGZAsgdT3BTj1sf\/spjmdgzIF2pwahJa8xi9tbBXrUI1dyXG3+uu21VtbunHyZrZPu9Lqmex5yNEoIMYh8ALvFMBlRu18WIDIANDkgo6akaO98LoftutjwPgqclkRUkaNJO1Z4mpP+D3JcJ7AwJfHttUsGFLMXeHC0rS3Jx8xlGehlDG8Gjx6MbqsW4FVSy5EnAw4UdsWYMoAQZhCtB79ozmulqNFitQkW9QOF9WX6McnEdk8YyUFeo+qc1Fhx\/ki2cnpObQM3wblVzck3qttvXup8w\/1\/pw0ra8kGRFKBe8QDkHMzVAmkeyW7Mq2NBPRoMSnnA3XB4x1u8DQAzActQ0v3Mr5WeVLSgCf9kg2BakZtD12MZbxnzu5AN97akX7cpg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":4,"flow_packet_id":1,"flow_first_seen":1603816434512,"flow_last_seen":1603816434512,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":47010,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0527{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":5,"flow_packet_id":1,"flow_first_seen":1603816434518,"flow_last_seen":1603816434518,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":48707,"dst_port":443,"l4_proto":"udp"}
+2069{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0585{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":5,"flow_packet_id":1,"flow_first_seen":1603816434518,"flow_last_seen":1603816434518,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":48707,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0511{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":6,"flow_packet_id":1,"flow_first_seen":1603816434519,"flow_last_seen":1603816434519,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":60346,"dst_port":443,"l4_proto":"udp"}
+2077{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0569{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":6,"flow_packet_id":1,"flow_first_seen":1603816434519,"flow_last_seen":1603816434519,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":60346,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":7,"flow_packet_id":1,"flow_first_seen":1603816434523,"flow_last_seen":1603816434523,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46576,"dst_port":4433,"l4_proto":"udp"}
+2079{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":7,"flow_packet_id":1,"flow_first_seen":1603816434523,"flow_last_seen":1603816434523,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46576,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":8,"flow_packet_id":1,"flow_first_seen":1603816434524,"flow_last_seen":1603816434524,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46334,"dst_port":443,"l4_proto":"udp"}
+2073{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAgmJAAEARCbbAqAGAKHC\/PLT+AbsE7KwIwQoKCgoIe34skUb\/aLsAAETSb8uSUd6EB7gNq4gf6KDxkhY+y87q3CLci6x1EsNvv80WGJPIpKwhzC8+vg4NXuO4unafv2NMJkJjRI6OL98YRtdvYGXB+F3JwCowCuwGqw6jTxikMXRPpRCAgRKO5X\/KxcEwJRdTBT2rlOzU+hO0yWkEtT4rCwTG1V9X6PEAkb8zWYSIsTTFWdbuo8+Hsr3EHPqfyeXbsSzOoMiqiG28CC1UB7fjZJ0W3T0asAlOYWGl8MIKuqHYSMDCaz5\/KR7GxLTjjCeuvA71YVTfkU0Gf1f4xW0HKl3ycj89fZPIImHw1dOmlLMZdNJPHN3oMEV1WzgH15lz2HPaXv7a5Th+I9CCo7LropS0BbFADYctmnMsqGggv3K7uKbyNnulVBXm7b\/tIGeDPKbxhMVyVFX\/OFstaFoYOfWt41Qv0Uz+5xguURoeuY7TUkuJQ2TlXG1IxX6EbnM98toW72ernv2vm8GcA06P94MCodt6GnFnJdalXwd3Z0Zgu8r3434Yhg444uk2HEryaQG3hHsq9RRP13JfK3yZ+q3HWXP97pXxl06amatIARReotx2af2MAxWD4J\/9LErkYyTqlEr6EnBC+7r1cV9IP3w6nfwYEb0VMSsQMzOKiqBofCNQtvNgMmkH5GMWZlDP0T3k9d+0l3FMevNqVwb+iznRosmDKbOnAOsNl2nNjXZYQXWhQqAThjmx79k1nVXVH\/HuAezLxegqma45cG67rPyGRqN3q1h5El6PYgtdZyE5yz+oVR6XOIkyz168X\/Rv7t73N+i0n+IFHPvHuQ+EK3e1BGUIifpyEElK5RsbL4HGjtaWcevK45MDQ3axvbDUEW\/w2lJrfPlXa\/XZ94sTcZvgd9dy1K9MAJdUT1E0ufvAhjda4LLkNYkdVZjhePaG\/OIP0+\/2yjL6i\/866d9NM8o49WaX\/O9Pd296qB4TZaRNaKuBx+CTsP+biUuW\/9YibPEOQBdFkjBprbbH1nXMOpEF6QqyTSSWy1mOqWI7NTc8ioxMC\/07KPAh6S5NvmgDw9rb7lm4u9afeFEO\/2Y2F04NKOOTYQjedcDqmY1izosf6wgBTRlHezP6uNhrQcmJzYaSn3Fg99mguDGzeymhTX46iCjpPSI\/wUScS13iOhxccWK+52NCIsSS1ArhMq7x5GIHJngmyLap8JYRZLzZek50uDc+cvlWv5aWpLq4oeFbzb2UpThvb0S8TbvXwHNE0GcN9NQ47Cz0xMuSlHF7VEKoW\/ldk\/T1mzEivHu6X4HhGg8NuDcJj6aZIVaJae1NxSt5gLl8MTFDp8u0m2DXTpjwFCV3AX\/hN8OLAAu3WZ+A6sHLc1Laby2OYoClrb6PAbfK8O93b7DnY1GdxskJ1zN2DGmXMfzpZYEvO6KwGvo9tWt5MopqXQ2LZWUoyLrLoGDkaMoRzTKI\/QFULy6GKZQuGdZK8BHoqiDwJoTG\/iTyF1KYSQbibwt0sOyty8uw9tMbzTSnr+UrS3c6KjbJG3GNT+Hel2hrgKBCTL1FLUatdsWvxb3xr1uQGvayWgC4e8BQxZ9J4DVcI4Jl9RFSGru0ncBQHVlkznYPLGR5hwEuTrIrbhESI0fIBtr8gRxzc5NuTahe+uchbMgzGi7qkmDsOQtGYpMw30QbIQ==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":8,"flow_packet_id":1,"flow_first_seen":1603816434524,"flow_last_seen":1603816434524,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46334,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":9,"flow_packet_id":1,"flow_first_seen":1603816434528,"flow_last_seen":1603816434528,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38366,"dst_port":4433,"l4_proto":"udp"}
+2064{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":9,"flow_packet_id":1,"flow_first_seen":1603816434528,"flow_last_seen":1603816434528,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38366,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0445{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":10,"flow_packet_id":1,"flow_first_seen":1603816434530,"flow_last_seen":1603816434530,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"3.121.242.54","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+1119{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":10,"flow_packet_id":1,"flow_first_seen":1603816434530,"flow_last_seen":1603816434530,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"3.121.242.54","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0515{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":11,"flow_packet_id":1,"flow_first_seen":1603816434535,"flow_last_seen":1603816434535,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":32957,"dst_port":4433,"l4_proto":"udp"}
+2081{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":11,"flow_packet_id":1,"flow_first_seen":1603816434535,"flow_last_seen":1603816434535,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":32957,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":12,"flow_packet_id":1,"flow_first_seen":1603816434542,"flow_last_seen":1603816434542,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":60784,"dst_port":4433,"l4_proto":"udp"}
+2071{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":12,"flow_packet_id":1,"flow_first_seen":1603816434542,"flow_last_seen":1603816434542,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":60784,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0444{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gAW9\/ACMR7CoF0BgM6YEAzSri\/bO+xasgAQsHCsnVrqTT\/kdpHoB9AbuT9AAjezDGAAAAAAAIlGmXKMyAAG3\/AAAd\/wAAHP8AABs=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0438{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":85,"pkt":"PKn0qB\/spJGxgjQ5ht1gCVbMAB8RNSABC8hHpBwlAAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9AbvrugAfxC\/CAAAAAAAI4QMvVRUj5m0KGio6\/wAAHQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0459{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gC985ACsRNCoArABAAAQAAuBM\/\/5oGZ0gAQsHCsnVrqTT\/kdpHoB9Abu+QwArPVvlAAAAAAAIhDy+8x\/DNCJFR0cg\/wAAIP8AAB\/\/AAAe\/wAAHQ==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":13,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":1603816434569,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":51185,"dst_port":4433,"l4_proto":"udp"}
+2072{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":13,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":1603816434569,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":51185,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":14,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":1603816434569,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":34511,"dst_port":443,"l4_proto":"udp"}
+2078{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":14,"flow_packet_id":1,"flow_first_seen":1603816434569,"flow_last_seen":1603816434569,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":34511,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":15,"flow_packet_id":1,"flow_first_seen":1603816434582,"flow_last_seen":1603816434582,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":51887,"dst_port":443,"l4_proto":"udp"}
+2080{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":15,"flow_packet_id":1,"flow_first_seen":1603816434582,"flow_last_seen":1603816434582,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":51887,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":16,"flow_packet_id":1,"flow_first_seen":1603816434584,"flow_last_seen":1603816434584,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":43475,"dst_port":4433,"l4_proto":"udp"}
+2077{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":16,"flow_packet_id":1,"flow_first_seen":1603816434584,"flow_last_seen":1603816434584,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":43475,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":17,"flow_packet_id":1,"flow_first_seen":1603816434585,"flow_last_seen":1603816434585,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":49151,"dst_port":4433,"l4_proto":"udp"}
+2080{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":17,"flow_packet_id":1,"flow_first_seen":1603816434585,"flow_last_seen":1603816434585,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":49151,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":18,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":1603816434586,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":39945,"dst_port":4433,"l4_proto":"udp"}
+2080{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0589{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":18,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":1603816434586,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":39945,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0526{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":19,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":1603816434586,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":39624,"dst_port":443,"l4_proto":"udp"}
+2077{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gAlC2BNgRQCABCwcKydWupNP+R2kegH0gARnwAAUMIVQAAf\/+MzuWmsgBuwTYjDrICgoKCgjzgkejWnQFTwAARL7AEcGzrGiFbLDVVitPMjpX6T6us8klH0LZdsk33gK4kca790hWc9lEqiHw2zuG3cvmTx4edwCefhx9uVFQHbwCX7OdVaAKALQsTDf2esUnZnHqAVwqfHs0alGH87lg8LOQYMLCyJ5o4796Hi54oLNHvp1iBOlawAP1QQwkOrhTac81Z\/3lqw5txy4fqI2ulRUcc8HMVbAvriqgCRBafLPQysmCOVqjinACocPdi0ZP1pUx0qn0+kKcTF+7gFuANdSw5ZrXDF5v6YKUxiJ6vSw8Hy7vrpHpUiN+5fprlESKduOvuve2w8S0Rn1T\/QCLnqgsvW4zVX2obPqKMBoLM0FaRFm0tupv3jD2Bo6wMhEP7UVS6LQVCbX\/F5hZ42FQPL174ha0Yjp7fot\/ow92n0s8sDYpXdyVzzUtmI9H59mtClZBkXIm4hCy5YwKUBE5Htf0HL6v7tX\/C56I4bHgjD1kXDqKwEusnGxfxLkbm5cB84\/UPVfX54l5AlcUWrKt\/sWPHXza3lrXmjl3iKLayJGvSvxgwAyLdj+1dAf2mHjT3T9ZeLg4TPyNz17SLyKDROZpbuZtC2zCbnl+NoReuXxIIu553FeA7K1Fq06E+HYHhMw9+fWseAQfiQhoIBqlHGL+6zzFwJx8LqsX2kF9IlqJJkfGxh2dCK8J4o5uVhtnU3J2xj0GDXLtBrNSCk7DDd67hChkNkJ\/zra77RGExcKdo9KUDUUYykOLFAbdNAsP9djZJfE2+FIW26Q0ve6PvxjGma3cI1DAbfodw3x7gmpMenGXbAesto3GigfY8Dqk5DyVN2us4Q8jxijjrwa1uGb6WCWFIbPGsRxa2EtoUIAHsP\/pagnvZR1tK2myhxOFZczPeNlpxk1o3SOIXdZrMfCNqe8UgV89dZHklMi3hgQCyoO5n2p9n2UNtckDsulzdkWAkN7ELjfKSw3xLKX8QYYwRNZkrnslYV\/gNUyPn\/DAHxcrYsCggnVPpcMfjQHnjiySyU7agWUfxfnrK5KR0Hz1uxcerQD9r2dHrU5GwRgAJqiERgTrm61j0\/9g6EnJzaJxnY2YL\/8StPHOT4TbswEzgPxmOMhq3B3NyVJmRRvGKyoWosF33+eeRJZtqDmGzt7Y\/QslvmPGsoNyGhIfWD4qHCWm8JN2zWi8NKuiyFpgsC\/gseqp2COjYeHLzTsHE8Lb24ziOBbxiS8nhlUeyvkTXTnPgtpZev\/ducm+wW0A+YY2gp+9vovT+lMYKPoIIeW89qmvsTK34QrhAHBV8Gdi7IG6oE67NdkIrFleG4EtBQyuNTVG\/Hni6IlsFEhmcMOi9gtqRQF0bots7U2r2su6TX5cs\/tWsUtfcKDq01p1Oi+UeZRz\/V+lKX5GfCRE\/JIN8wqGMoYFzwTiwgXQFJuV\/tc8U4uoRYgnau5MAB9+BYOU44CnqwsIla5AaVfMisOMnVZhANbfOkDwWOMuBcFcvM4iPJEdLrpJXtiL7lozz\/DNjHrb6qIdiWBMUyCod\/1w5XY81jvBVw6EPdS52X\/61VYwnM6etnlrj2efLI9zOedaqcKmUUuU5hMhqfCCW6Ds62KH8dV8j+mD8L1skbcaPGiQBq8L77krzCDv+w==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0584{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":19,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":1603816434586,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":39624,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":20,"flow_packet_id":1,"flow_first_seen":1603816434587,"flow_last_seen":1603816434587,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59171,"dst_port":4433,"l4_proto":"udp"}
+2085{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":20,"flow_packet_id":1,"flow_first_seen":1603816434587,"flow_last_seen":1603816434587,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59171,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":21,"flow_packet_id":1,"flow_first_seen":1603816434590,"flow_last_seen":1603816434590,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":35643,"dst_port":4433,"l4_proto":"udp"}
+2076{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":21,"flow_packet_id":1,"flow_first_seen":1603816434590,"flow_last_seen":1603816434590,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":35643,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0523{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":22,"flow_packet_id":1,"flow_first_seen":1603816434595,"flow_last_seen":1603816434595,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":56213,"dst_port":4433,"l4_proto":"udp"}
+2076{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gBnpkBNgRQCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRU25URUQTYvvrACgoKCgj9UoceU8iiQAAARL7az3aryiG\/WW4QSFw5q8b+\/qI9una68JfIBN5RDAlSWxI5aN9NrGnm63U\/Z5hZqT855BEAbzFsnSq9T5UoQJSQWJO+OxKLmuziQZO7srez1fkkDupTN1wkkdnmywDXZcMkFQ4tXNVtGsfMIyPoMOjkuNgYuL+TrFwg96COI8IOfhzUGRFJf8K8t+t3YLfMWc5IM3WJ\/phaCjLWvabCUhYVrFgZVTenSIvn8FoTPxqo1m1xa4G3n8d3o2zFUc4XDalUQSYfIsGCZ\/3VGNAlkjuVi1uuzvCOp0qJEHMlsJ6OjaNJzjSj1b5X311lbaXLxEgAACVJ7mOpBMH2eUKlimPQIRjgO8DFiVT1VtetHEHo7XxD9z9DaojFHhQILu9Ndy7QJYx+8OxPwi0k7EQtFKIeO3QhbI3teT8NwQXlJnQv\/J7yzTNnMCu3L9LWIn6C92d5qUB+1utWZXR28cNynLbRjuRNINQIzfTFmS9iOpbZglrT\/GnsqhcaOJm2t9XrSu4yCE5z0c4wHo6GnMAN05DOXBY0yYPljkh7vr4aKEDxXsaCMcwmcWxYnUlFep8Gex3JVoSlUGz95+zuvHb46+MC+XDiipznc431Qn7rrxOB6lgYcTG7kLf\/ZmPHxmDGAINfIYtZO7xiSc5JWwhUA4ikdzTJaE0uo\/HCIsdSFQFJJlEXfiQ6f+9Lg4o4oHt\/v4TQTOThiS8hA3g+cEIozsYToLOF02tEqrwi5BbfszIjeKKW+XlfuQgTXnd+fgE5dAu5Oc7BakCjmnGBb3Uz3ugNj5DTo6+ojP6UY2IU771P\/fqTADAKhT3onheWYJvxAkrQZHLnIxcgu5DA\/5Es1ztGUo\/es0BosHYusWos2FbBdJpxb+gu5rvMEmPCkuCIpZpBZLLug0rWMitGXgJfX9MWvPAjBWdKWTbvcBzKFwh5+\/1ocEXw0VaT+NsU2weQMCO1YYpPIlc+42jUQfCx0zKYejhkxNEoAo38Q29iwZcFALT5rf0jYyMQpMUMcNFQQqqzbrcaHvvgWQzH+lUkFSqbhBqtX5WCPuLWxkDb\/9GhQLNx0Q1IujSYwA1SIvLeb9bsrMAWKENc82M+Wwn3RcXpJ4cDa0hrN+3NcY\/5t1ve6RDek\/0oY6QGGW1JE\/CmiO8t+4Q02FuHroDarDyPM4tHJeLOT2NE6bUo4WRjaSNVu5ng0Eq9X3XBmx0Ikdv91XlzFM87UC5R3r52ZTZNTnO+xLkNyA4Cub32cJnhUFmGLoaAmiMCxezGxr9YUy9YTVqutoTlfA5jfzAmMWcvfXhM8IAoJ7O2szD5hCSuJ8MX3ML7TFR9jrMTogwqPbeDECUgOiFmruVR0+GuDJb2riqtAhc7PvwbnCVPAYbBoyaoy31mi2TG71Wi\/w4IaZaos63DgLgXPzRaSbjG1c2zVPlGYLiTfXzEyhvOk3Mv8aR0DqJ\/gqVm0SvfiOZnBGk5gzICSopKt52HHnW1EwSPCiNSbMh18YFppr0G1bbAe15xP1\/\/Pk0jzR\/wXBG5JS37im5z+jqUQpnV5dcnvgYoRjpgGuTxRGXLjRfoOGzSlFstUpRTF+iEOL+rt3XO56SlECJkrsnzQoo2ccoM5Hgg7A==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":22,"flow_packet_id":1,"flow_first_seen":1603816434595,"flow_last_seen":1603816434595,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":56213,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0532{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":23,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":1603816434599,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":52080,"dst_port":4434,"l4_proto":"udp"}
+2077{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0590{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":23,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":1603816434599,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":52080,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":24,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":1603816434599,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37661,"dst_port":4433,"l4_proto":"udp"}
+2081{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":24,"flow_packet_id":1,"flow_first_seen":1603816434599,"flow_last_seen":1603816434599,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37661,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0438{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":85,"pkt":"PKn0qB\/spJGxgjQ5ht1gCaFmAB8RNSABC8hHpBwlAAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9EVHH8QAfHOHYAAAAAAAIMG1gGePLGT0KGio6\/wAAHQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":25,"flow_packet_id":1,"flow_first_seen":1603816434601,"flow_last_seen":1603816434601,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":37784,"dst_port":443,"l4_proto":"udp"}
+2076{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":25,"flow_packet_id":1,"flow_first_seen":1603816434601,"flow_last_seen":1603816434601,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":37784,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0530{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":26,"flow_packet_id":1,"flow_first_seen":1603816434602,"flow_last_seen":1603816434602,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":60983,"dst_port":4433,"l4_proto":"udp"}
+2089{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0588{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":26,"flow_packet_id":1,"flow_first_seen":1603816434602,"flow_last_seen":1603816434602,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":60983,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":27,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":1603816434606,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":49658,"dst_port":443,"l4_proto":"udp"}
+2083{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":27,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":1603816434606,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":49658,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":28,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":1603816434606,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":41587,"dst_port":4433,"l4_proto":"udp"}
+2076{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":28,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":1603816434606,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":41587,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0446{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":29,"flow_packet_id":1,"flow_first_seen":1603816434609,"flow_last_seen":1603816434609,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"51.158.105.98","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+1121{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":29,"flow_packet_id":1,"flow_first_seen":1603816434609,"flow_last_seen":1603816434609,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"51.158.105.98","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0445{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gDsWjACMR8CoF0BgM6YEAzSri\/bO+xasgAQsHCsnVrqTT\/kdpHoB9EVGcCQAjCvHgAAAAAAAIawwAN\/DoMJL\/AAAd\/wAAHP8AABs=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":30,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":1603816434628,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38933,"dst_port":443,"l4_proto":"udp"}
+2071{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":30,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":1603816434628,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38933,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0530{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":31,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":1603816434628,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":52271,"dst_port":4434,"l4_proto":"udp"}
+2072{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gCIsNBNgRQCABCwcKydWupNP+R2kegH0qAKwAQAAEAALgTP\/+aBmdzC8RUgTYW27FCgoKCgiOjC+QJeVzXQAARL7JSt9fXYbHm89vAcaC3zVPl3CRJrP6TUqyl19zIq90T7T2NXCDcXHJobasDcuXuTxPvCCLEvFASvzCuAXXUk3HWjKo77c+LloXAI84Zwqo8KPwvyzsluIwpPaCQQSGiuEyjDniWlSc55j3zHtvxBYI+7qs\/+m2E9Qo9cHvaYLyJZyEsYiKOdymD9qvtzbmDAszHuIEjcfE2JjV4l3DJqKhapzLQbS9PctxujyF1VUI2ACV8ytLLBKZMFRXoJlO+bWzOXqbJSZ6o5mClNhR1vsaR6skwjkGqVgCBLklKilA+9\/6l4ZG3WIaUFiUoM7SgIxwWF8oyiKV7zmkaclu4f5\/3yzgGms+jvNfvtwGzb3Fgy2XF4aZ5O5HDcLbhvsSrvGKNU1KYKAXZ4nH8RB1\/jFqFn4mCqeFIiG1sLtiDLSix9f1+6LcFT10dfWo8qUHWrWQKOTbIY9nDBXTCntoa14qK3CE8mecM2VJ7ggYOHeAYHiK\/KSjuFeEFZdZUdhlNNgz9SYFL52F6XzgaZRwl5PM1sfRI+PVfN3H8HWyDW3URl12iKPr73MNCK5qktammCheXnaJBQPkIp2os8caGwd0tnC6YXcJ6lRUUduYnFyZK+vu28T7Dz\/LrOOfuQtWldYrGOIU6j6+ccDKu9WWuVGuX87kKb6hFa\/0Hcn3qf5Lj8lhGc0veQe668VrdjsW9Dbg+kfK24zU3dHzbLq\/XM+CIHEV0Yi\/cWiNNyuRa7ulzdTCAyRs9gYlEY9PmbmMmVnZTQWIYxLrJJXunKhqYDK1mFGTl5IvfBZY7XkX4mf2dHPjv4NDEk1QrCa1hHmGBMvl396\/dwaT6SqqWUBPCDC6vSElGrAMRRGJq9LvfuTt+lbz304CY2d8TLKimJoo6M2hj9FCUJij7LzuvBHoekrCNTyCpGkXK+6f28WuMzCkJmtH+2+vwCZ0cKmQ7CrGhhaebnvQZwlEFUK4HQuJy5pSXRkTWfe3guDQnvG2+9SrouXEZwHBxw4mhOlu4pZjXEqExMqWvswlRLClP4rnliDXpHH40rXKEVBoT8v\/j3qP19acEvtZNPaR+ixqYrvXUyjrT2RlXNw57\/diViUriBwdc6BZan7TmLF2I9JRDJyDmqg737XOiOdNXmktfhguZlHvtu8BzXOxe9QBMRua9UDc+uCEMwFmlIsRXS+UZdgutMlJZ1Lbmq8+H9dnSORxZcpeFndW83URbDqnqh3rTxU46PizBvjU3UUHxGcviHiAab4O\/xs7Wgwm5afjOM4HWTr2GZZohe06rmbLxZYWQRT95qnnPQz6O3YXVkngtM49zsYfYtwWc\/15r8OVdncTVWq9tmcsY+IComKrHlZhTs92vAihW5Z6kvjaWc9ntG7+kh9ebleS75pVIAPP3qfgdh\/HVMZQrPcJuQH8Y\/E2UgruG3vXoC9MYlyYHSvs\/p0NoudzrUECbg4P227GFsxLEbPUVjR8LlC7rVNTvhNIZWwC\/QrTxuvgRdHhiNNC8M2PCOHRg+GtiTF2\/CGbeBUpGmKvLPodeqZZylHTZhjgU1MkqVoyyY00fBkWduQkCMwlkuamhmTtYdY4kHKiR0ij2DmQLnLbFkclRCdK5g1smA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0588{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":31,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":1603816434628,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":52271,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0520{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":32,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":1603816434628,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":51040,"dst_port":4433,"l4_proto":"udp"}
+2074{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0578{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":32,"flow_packet_id":1,"flow_first_seen":1603816434628,"flow_last_seen":1603816434628,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":51040,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0447{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":33,"flow_packet_id":1,"flow_first_seen":1603816434629,"flow_last_seen":1603816434629,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"131.159.24.198","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+1118{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":33,"flow_packet_id":1,"flow_first_seen":1603816434629,"flow_last_seen":1603816434629,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"131.159.24.198","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":34,"flow_packet_id":1,"flow_first_seen":1603816434640,"flow_last_seen":1603816434640,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":45250,"dst_port":4433,"l4_proto":"udp"}
+2077{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":34,"flow_packet_id":1,"flow_first_seen":1603816434640,"flow_last_seen":1603816434640,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":45250,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":35,"flow_packet_id":1,"flow_first_seen":1603816434641,"flow_last_seen":1603816434641,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":42456,"dst_port":443,"l4_proto":"udp"}
+2081{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":35,"flow_packet_id":1,"flow_first_seen":1603816434641,"flow_last_seen":1603816434641,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":42456,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0500{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":36,"flow_packet_id":1,"flow_first_seen":1603816434642,"flow_last_seen":1603816434642,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+2071{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":36,"flow_packet_id":1,"flow_first_seen":1603816434642,"flow_last_seen":1603816434642,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":37,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":1603816434643,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":50289,"dst_port":4434,"l4_proto":"udp"}
+2074{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":37,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":1603816434643,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":50289,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":38,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":1603816434643,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":49270,"dst_port":4434,"l4_proto":"udp"}
+2074{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":38,"flow_packet_id":1,"flow_first_seen":1603816434643,"flow_last_seen":1603816434643,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":49270,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":39,"flow_packet_id":1,"flow_first_seen":1603816434648,"flow_last_seen":1603816434648,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":34903,"dst_port":443,"l4_proto":"udp"}
+2076{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAVWdAAEARtqvAqAGAEr1U9YhXAbsE7B\/jxQoKCgoI8ujrluq3MPgAAETSSw3nndZy2B\/JR\/aFheBm1Am1dhHdGKFX4rQi398jOJ+Jn+ueiHb2+ayhrixzGiiTN9ufhk4Lx76CWjuYMe1esceEF2U0qEsZzm5HKOUSMwSJ5RaG7eBb\/NGtId7Q6oJPV32C4GXJOjD2zUmbaepzk+oaGFaN7rBeaveWtYLwkm3MCtZ9ixGvt1GVcZjsd3UxnGM0OVZjCX0r80DcWyuTZ+venG\/PF8dpMDihqsZpbR3kCGTkK2uMnVKt5rsbq8Q3DZ4G5gYRlETl0tKNNk\/HmutyUjflzkkuvzr4zZfbMn0fPfDD0j7mcNxEYvvd0jng9gG7f2g5c2cWdEOeL32TJuGaUD4LxEgTmtQ74vLlqJ2jtPbB5cHftJfgjUFjPeNm\/TPJhWl+3\/2FaFh7UtvKIQZYWOKggBRpbC9DfYZGBlcBdT4cVCcoYVYvdnofibyJj7qvtk9aBhQ8X8haBJHnwUiu9Fh6LP38l6DOudy0wo3ZglGsYmVQyJ13TOTkHezaV+ftjH2Ic2\/kdq8i3gBc5XmSKkmTiDbR3CJC6bVKLX4YKbycr7PwvmeAgaIww6YUv5UVh+vhnxqslyCYJ54KMPJqDqUt8WhJ8Cyji43HCRRNG5kipptq8jUrAU8gnwzNfotH5yFDF+SAJ3QrzY\/5UXiv\/luWN+jwEASOuxa49aAiqVUa6A2J9z+IULgzW9aUufnh8e6ojNPCROl0NOCqRnl5cZCiCryKj\/+UTBEx39zm8tG1rMtKw8QCLVg0thBdHS0CguNqIcZrFjoob99Ht9nweYVHyIifEGHrneZFx6IaFg2N2+vqZttN1BPnlJwB5SkjsSGnctAq0WWDJg53X0egLh7DxbpeFvo\/PmlH\/qw8mjFt+NYPN0Ckt589t68fWjAbTRqz6xR6iPzgtt26G5g9GSc+owtcPOoKDSY+FtfvQEy2FDAKor8oRuyToRIFoS3GHrsVAzOLHHMrzcmpnrq0hajchpZRX9\/japhKPdmJTqsBb+ql5oZkXtBdENW3VUtixBzrUWiVbOkyqYBTjYwbASaX1s4B0v9Dw3fdaQktg0huYIDe3RIztuWGLVXFqL3kiPstObyRA8wmGdfn5WqodpZ8U9Vfz6QFfvCBcYE1\/TFuOxsVuCGHj1fKdzqDxFgpT\/6zI3IgHHNl0RstA3RkolWL6H0I5f1KqOUjo7bKGh\/fgABUsvMtkL2jljWloerb\/OyZ8cMJbX4NbVoNGdWP6RjJXhmtbLlmGjr\/nG9lw0JPerfXWXztQQ84uR0ZUAsCJbt6PCEcektnL94QlE49op9jLT5v5WzhOshdDsHI9kPLgiBlXhxtuB\/4fh64dFKwIV\/bkeadS+6vx09Jc7DjJDplds16bxuhHniXD1+VLQYqMNvLfkmfXTcvt+DCDI5+MtT64WEYlvBN\/oRfvKNXOlpG0nbSIxax56Y8i7ywQwgVXRD\/tgIY5hSIvokl8C2Vtnw0ocpu1kRHmBam5VO2gvUlslhf1v2Z1lhZ3ZHKYC+go+hJTIN8eMiQlcB94ueuvx1ZXgPZAWpEgcGBa59R7aGipRkAIOU7VFYiFm+JgHn0wlJi1ePUMn2SyyfRo+5s5CeNkA7rfixGxD37LoDcJtDM1uCusOgWzzaoPX\/WMg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":39,"flow_packet_id":1,"flow_first_seen":1603816434648,"flow_last_seen":1603816434648,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":34903,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0459{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gDoRdACsRNCoArABAAAQAAuBM\/\/5oGZ0gAQsHCsnVrqTT\/kdpHoB9EVHuNwArYcCQAAAAAAAIF6TDw+yG4BdFR0cg\/wAAIP8AAB\/\/AAAe\/wAAHQ==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0527{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":40,"flow_packet_id":1,"flow_first_seen":1603816434652,"flow_last_seen":1603816434652,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":45852,"dst_port":4433,"l4_proto":"udp"}
+2075{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0585{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":40,"flow_packet_id":1,"flow_first_seen":1603816434652,"flow_last_seen":1603816434652,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":45852,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0484{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":41,"flow_packet_id":1,"flow_first_seen":1603816434656,"flow_last_seen":1603816434656,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":45855,"dst_port":4434,"l4_proto":"udp"}
+2080{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":41,"flow_packet_id":1,"flow_first_seen":1603816434656,"flow_last_seen":1603816434656,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":45855,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2085{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":42,"flow_packet_id":1,"flow_first_seen":1603816434659,"flow_last_seen":1603816434659,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":46353,"dst_port":443,"l4_proto":"udp"}
+2076{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":42,"flow_packet_id":1,"flow_first_seen":1603816434659,"flow_last_seen":1603816434659,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":46353,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":43,"flow_packet_id":1,"flow_first_seen":1603816434661,"flow_last_seen":1603816434661,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":53791,"dst_port":4434,"l4_proto":"udp"}
+2081{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":43,"flow_packet_id":1,"flow_first_seen":1603816434661,"flow_last_seen":1603816434661,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":53791,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":44,"flow_packet_id":1,"flow_first_seen":1603816434664,"flow_last_seen":1603816434664,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59515,"dst_port":4434,"l4_proto":"udp"}
+2084{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA4mFAAEARxULAqAGAwb4KYuh7EVIE7MZSwQoKCgoIhDOd38iF14kAAETS+DrcKxcR6weCAMpXP0WCjIu9ZBcpWi0OIwLjGToed\/giv9qrtDo9ivnhToDBOwIFut7lx8oGofCTHgF7Bu0VwbCafc3NxbT0fVzbuULC9eYaVRWQHPCUD3HNkinLSEKLzkqEotl3g646wEpRi\/ugoezcuEqO2y6FIB5R6lgny7Nkkc+zMDGl\/vVsq9D4yR\/HW1d+8htwfQLJRpA9hzqrxRXBKybzFVVjhg+KSz67S75CNguDyG4FD4d5JXshyl\/M4INjh32wAMrYFGa8t+2d68fOM2TsdLASGnjmnLNA7\/Pf8UMA6n7BdmW2IJneYpplOs2JDLXzJklKXNuJdllZWQX88VAVkIZdlhRUIxXv\/f7UmxqAgBcsb65UxpALzeD9UOYFX7eXnFX3CBNctLx4OV4vy5qTojgYXWndnvZWDyo9r1nMBp8D6VlFL3WOfCfGoqwqeHusn5C43hBSHrku\/bXz9iJXIhkW2exazvoHN691IPr0B73C3NnmhicLFxNH7FU7WO\/4IL+6sD9DZXTIjSg6oTpPZcbUD6nL7y5Da7hPow3PhI\/sdvRXmbzab8jO1EGiZZHwGfa4q6m9yRM\/TXA5uhhLvU2EfXT91420relOj408ZVI6EUSGceNLMighOPfPAfp0WOhbMCbd98H61M55hJNktUMuazO1d0gcsWhNN7ihq3R6vEE9ycG3wWK4AZXs7o9pNpiOjFyi\/1mC6Ku8u1sBA1oNJJOJnGURm0YtMoufHAuKV2LJVu2OeQAP\/A2\/w5vSvzrQLOGEBdMHP3rIjZlGA4ez8O3T8wl88X4DTz9tphYgqFCKVqs8At9jd7jId653CvC+xEYdEiNG9bQtgVNzXeRz5DgAY\/Rramv\/s0Mz9eqNUZ5kDg4J0SUVs70edYwUxeTQM\/DGMsrfTyMpxJinyaJ+lIbkswjz4fLDe6hTAtCperVOSIVU7PFEEJNopz\/TdPDhB\/\/OU+mjuGnm9dVJqiOBsKq6hwakuMJMeEbqZ4oR6\/2tTEOQMV7c3m8hAgBlfCT+et0oHj0In1XsO41lgeBhcmsxfgpL0+MgrRWpX3hNlmOw2YFL7IPahaVoqqwt+hlD2GAaUYWeZHKQIID8JZod24qH7\/lYJ76jofC+JdWXEJ7R4KLVHjma\/RdasqECMSrg4m7keaHTZDKrBR35ahliIHV+sND3+6E5IN\/2QdoUlOi4\/UYlyycPYl2QrEjCc4E8TPnrA7HhR8cbOqvr2NJUiO3vmvNIk9u905r1d+yKr0KSvjEMW4aoGs1cnkqp7BFwfwUFTFXE57dIo29rq+a60tDyag9gqUpuo7QsXjOi2fVAkTyRGrjCd9eSs5MDoGygOvvn\/yw4ZAA3XpTxroAMLQ9Sj\/92T0qxoDCFA5OG7E8A7GbyiO5B2nEiMAOZpw+5PZXL4BrU03Z37oc83D+zHRg9XCBGkB3eyfyP2\/ya8kSOgnWI5DRzDtrL+axTWaV4naIX3w78wYegwyfuMaorTISN4Ye+UzmrsF4ld5d7Pp68ZmvyPCebtO\/KSElf\/sucwWTuBzbcyui8aFCG0Vq9OlG0\/qaPlP1qL9A8E8F37BOHLRzvh\/sbn8ks0BPPWFNRGNxMVhkFaWjx9NYOtOhnexATQq7v4e\/jeA==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":44,"flow_packet_id":1,"flow_first_seen":1603816434664,"flow_last_seen":1603816434664,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59515,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":45,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":1603816434670,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":49788,"dst_port":4434,"l4_proto":"udp"}
+2076{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0589{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":45,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":1603816434670,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":49788,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":46,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":1603816434670,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":46242,"dst_port":443,"l4_proto":"udp"}
+2073{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0589{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":46,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":1603816434670,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":46242,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":47,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":1603816434670,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":44619,"dst_port":4433,"l4_proto":"udp"}
+2086{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":47,"flow_packet_id":1,"flow_first_seen":1603816434670,"flow_last_seen":1603816434670,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":44619,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2069{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gBwV2ACsRNCoArABAAAQAAuBM\/\/5oGZ0gAQsHCsnVrqTT\/kdpHoB9EVLMLwArOxiAAAAAAAAIjowvkCXlc11FR0cg\/wAAIP8AAB\/\/AAAe\/wAAHQ==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0510{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":48,"flow_packet_id":1,"flow_first_seen":1603816434677,"flow_last_seen":1603816434677,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":44243,"dst_port":4434,"l4_proto":"udp"}
+2071{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":48,"flow_packet_id":1,"flow_first_seen":1603816434677,"flow_last_seen":1603816434677,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":44243,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0532{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":49,"flow_packet_id":1,"flow_first_seen":1603816434678,"flow_last_seen":1603816434678,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":38394,"dst_port":4433,"l4_proto":"udp"}
+2069{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gAjrXBNgRQCABCwcKydWupNP+R2kegH0mAB8YIxDSMFEDfZ59dTdPlfoRUQTYrGTHCgoKCghDKzGtBgOvzAAARL61MEV7YMQkWdmZghiuiQz1o5QNdpzYuutf\/wdJhEZL1cudV76JEdjtP0Y3OyHIvIbsmMmNX4mYnmIsf1njial3e905frw0uHyw4\/f+5H0ef2WAdacdKOP40DoDeuCFxQz4bIKDgm8hBJ7vkD1IMm7AaEpvUQhSLgN8f+x+sA9RH+TmObL9fghOs+eNxWf96HoP4pMWR3XqHFfSqIk5FX3TNVvr+riiEz6IuctzVwm\/zqWSmC9dmXci8Fui7Q8OxkH6gLCU+aYM9wrrVZJ9j5ya5VCMnDAttNuuPdq5z4cDdXloIyyGypYPGlULxwG65oqg8RxhEo29up9ffJVpEaQX8UGyxOt3ZFGPweILYH6rNyUpje\/uB9d\/2Tqi9fZfaLpagN9mrVHJYMlLvkjpSaeasCrG6FDs+Nh7j2i5xAxuAkQ0xK7QS1Hlggg20h5t9cMg6O780ayQOD4SQCU+0AR1BtVV6iTy8Q0dm9tIpKWeNO7CSURoIrvTXKHBx5OXHuDteNJNabHxEW6\/e\/OGRw8IMWO65lgJPUK\/p\/99LM38gOa9gV2dzOdfDcRMvpSWbp3E44GpcUzlsSO+wF7JBY6P9esQ3iafS\/xZ5rdGYm06lyYTCDffm6X4KxkSuGJfTJKvPfMGPtO7M1PMG\/4y9kmbFwotO70O3qzn76AeIsqparz4gqE2VEl8QpfdxQliRyqZUZsoWB5UziEcGYDOQAbZw0c82QzSgLib58kPXBug4vmPNM71D9PmG+ZxduAFDFdu7EkUfNSxMfR6hOQumdYRVQ+J+QuJvYZ4r8AlRlJcX6HQpLdQXTOStQMDY7ErsX3+lkhbFCkOUvVD1zPSZ3X9i\/Jl3XL5dbrTO0oYnJiNAJHokvd9x91UJlo5E9+m85+BWm+iMzm3+6bNRAaSQKQrjdjennHLWo7GXNi4AtuurC53Pep+V5GsYHEa33KdpNHgca7X0HexhNHc2ElVJlmKiO9osCGww9ceX9y1pVU1v4UF5cspUvQ5RkcxirKgmOqDN1dbnXmgpQwLWcEgtJk0m+iyn9xNTJhEsJCf4M2GThouE0XLF3rBbGR8AaMV8IgL1g4CrqnSeTXeC0TiPef5r0N5Ew0ni6DodVZqUqNOv+QdCVcZaIWofYvBzMdvqE6zhO4AzOTz4GAPej5UV34aUDRCl13vR0NWFf5GvaZquOIg2EYE\/YyJl2nILl86w\/YT7aCfJJltdrHwSxGGAm2JodfqLx42fCKG98UlucLIjp39SZj8UGSr\/xymfE+UQrmVP\/eIDKUfQ\/F9RzSEtE4Gywjiw+VYseozSQwwkW8vYlep8AwdQshSEv4BOVgTV1jTbJ7jHDu3x3W7Ka2SYTSb3Yt+KkdDWxpTmyTJioeUboa1C8BSpZMyhJwlf1bmECMTVdLKtJOVuXslMtlUCVIAqqT9OTre4ouFYJNjliLNU9F808vVjFTZqlwwQjwIeKMK9tlRJNZxnWX+u5Tmaz0QgLbCP6pKnk6GGff9hBXEoVtopyfSJnogk4UBU3qLzTqqNWTse2gikbJRX2feLSYh9ICdhs0jcaXO512YMcM3tN6524plEU+japLcwChj4baYrOQTz7NVY1HU6hrUlA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0590{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":49,"flow_packet_id":1,"flow_first_seen":1603816434678,"flow_last_seen":1603816434678,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":38394,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2080{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUArn9AAEARHfrAqAGAyu7cXJXeEVEE7GpTygoKCgoIN5KvB9nft6kAAETSd859O5gTcUYdl0d8aIlRj3zx4AjuKGa4ASMymO7vXZjT6sVM6pCw7HvmCO7cFlITvmBGM4kZgYz2DWfjjS2UhT8z6S+u4ZuqQnP6sPmHL0WtgrbFimoDsZXEWh5x4WsY15wAJFswtYDmxQkwEBAjgyKuyRv6VywYakyk9BNgIHVKy7BfjK1rPoWZ5w5I2hl2yWFdZ1\/dE9wNP5q3XxjhqAOQa4bzoBKefCRP60vRescDr5A1q9Gh9rEI1UxmIZexsLIorUS6jw27c7X3IRHEFYnp7damMbgudCUNTZ0D5\/x2EYQKzoV23CePPHf7CWo9eYf6XRWEJIBGs5xS8ziNV5+H6hYANEPNNnvMqWmg1CtTp6rU+5R3i7\/FA2u3qMYhl9YXtwck1Tx2THWWJnPTlV31JToDh9hcEx6ePHf\/HDVkBKTcysw+7WUh4g1S4U\/E6GwOzJUSl1j4FyQSA72MFR1nukBmK5l3E7lnPPMHE0UwlBbgRRjJIWWWMjukOyYVX7HOM8mWhaZJs8eEj1aINh\/eg4bAf1JY\/ufLTloR31S7y6OReDYCA\/J8a\/ZHMCpyo\/cgCYZnXroSqO5eUMiOd6mWZMV3WlojmNGGqUwidDXDOOAZnauH05acuiWNjN1drZ9uLl7kCD3klbBaB69xmhwOXqhlY+ov6Mo3v8dkwR3EXQE3Cj\/lQ4KJ2OrXiOlAmz\/GweVF9wuMVbg+hyvL7DdfTfw2qYLKgSNqwlGvO5T2f1lglyHLXCucOL7n\/zNjX0\/xlVOCxhUkQhgX\/XGJbbA7qxh9UXxvdZ3egx7Bshhqr1n6BUMoFOpjvUuGdgO0OjUEdRk5Gyk2HkFljHDaGm4ht4bH9hDtZ6HYm7nqyUay+Gd+WMBexYGDLQ2kaYG8GnHD4PrlcFbEvk3ju9rGX1R2QtLYbACEJdNJ\/zEc2GzZDjRz1o1gvI2iG\/x96iCGyzUz1N\/+nAKV+q5s2K22NkRxb1jIgd\/41FenkfbgFmpz0CA\/DQCyiLHlX2lw10drz3XG0f8LJfTp2vzPq\/+gH2c2gRSj2YcaBCyDTY5AKtyDkOEZKSL3C2C8JmYr4iJS8RMpB0jL35JgLPvSFgcoNymNWAjCjfeRN9n7RfdzVEX72bqAPdPKtdKHRkZOWGqcrp9n5GGjnQWG\/Jwx6RR+qXT6KecYDU2tCsKg\/XBFBnLfBCe2RP1K2zPx4D0wUdqR6tPZpisKmvW9Y3UI2tmUo9tLMaYgnRgRJ8M4\/14reEvtbK2a7xa1D+9b4yQoAoVStwjeuCruASzB76vQ7Oikq\/y28NWNAE6l7JAxtLpbUGRtWL7EwfR3329LDfnglJf6znmUiNxo5AmhhQH2+XGsnwv7e2QwJKwUtxfbSP6qjjAq\/IHu8Ph2sxgzDmxzqJS6NBD5\/rREJkwIRDPsPQN1aQTeYN2N94Pv5crstjdG+7f9DC85NWJZAJRxBLehoQTlbi\/SnUmr9i8puHfTCKc8NDOGVlMiWSfVcSKswlSyz9AjvXr\/Y+TehMUjsxQeL0lUqcIXfqPcJlum33ICV492562h19036aZai6yQ0yHgw3hE7aGMjyObE+Uh9o51GqJfXzYJ\/J3E7ReivOwkmjMio6pMVZIlFMAmLX7M2ggGLe5cHg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":85,"pkt":"PKn0qB\/spJGxgjQ5ht1gAQBvAB8RNSABC8hHpBwlAAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9EVLAdgAfFkT+AAAAAAAIs6FDVD5jbx4KGio6\/wAAHQ==","pkt_caplen":85,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":50,"flow_packet_id":1,"flow_first_seen":1603816434680,"flow_last_seen":1603816434680,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+2080{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":50,"flow_packet_id":1,"flow_first_seen":1603816434680,"flow_last_seen":1603816434680,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0443{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gCzKCACMROyYGRwAAEAAAAAAAAGgWCCYgAQsHCsnVrqTT\/kdpHoB9Abu1EQAj2NGpAAAAAAAI+gzxyVlrPLD\/AAAd\/wAAHP8AABs=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":51,"flow_packet_id":1,"flow_first_seen":1603816434684,"flow_last_seen":1603816434684,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":35263,"dst_port":4434,"l4_proto":"udp"}
+2080{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAiNhAAEARQ6HAqAGAyu7cXIm\/EVIE7DIpzgoKCgoIV4qr8UTBK3QAAETSh\/17BQebdhKt5N8exOyNj+uiOYMPWvj6jDz\/XRUXpazLTuGIaL+gAsTmd0\/ny+0FgJZmR3W9tTl2uiHStd0rHjDhZZpjA+Vv70KyXaIxYALOy77NR4C4EhjQ7Woy4Z1XktOMuzY1G1wK+\/m8WHSuXiS0ZJH0FyTMGjp1ybnyu6MTC\/32FsQ4+KBXvfT1hZaE3FEFqOfGH728c4f7jwV39sXMvsF\/koxt7XF+OaEoT44gruD3j1M3Pn+2KBK+MAfr0VIJTB\/qx0CUwI+AOjfOrOEwPlBTKV\/RpKd6AM0mgPkKYfiJQlRit614p6k0X9lbx\/f6ahWLCq72n2YzUVWYWdT5J7gjttfn3tAoB7zUzS53IQUv1B2zhYj8uYWCPv5E8X1+\/TvDaDXt2s1yt3mYps645wMsjGX9jfYnekRT\/suzL4Jvq5T+oMyQFpalloUrRQHYgV03PgJRooTK2iTJSDezMo3Sabn4X3VQSLr6CnIqGTTH4TZdTS1EPTMj1g2xj\/dIUvvG\/pFUdjLNu0inX1PgBZ1cWwdYMDOvaetqYINrUUAYfMt0S6ZnZpx8OdfUPc+mujDPZthVujZlugXTs5\/Mi1arhb7RDdu56QF0HkACvwfN4y6hPV9GkFI7UUzwkjbNgS+SVTyZpwJf1vfOY3NxgRH+ySFpHqqy7QQrR1g1b3fzph2N6Zo2yzEoxr3cQcaq6oirf5SKGC3qVOfI2XVtorskDTjDPZugOVkY\/anHMfrVansEFGxUEN\/DC\/sCrdnQCX2T0SNbs6Z3vWghQ\/Ttglq6nwriBypoi1GkgpMWRpNQC1+tftj6Y6qDc8PUt47spNcYJ0VauEV18MYpeZpOQrwmNsvWkYDeiXS3LX6E8xtGwpF4W5EfDLclRZBbPNPUZexMZprIpblVxLNvXkp38hv3mKP9juEW+w1x9u0\/FE+PXNXqQt+cpccucng\/siXW8dIomIy+1Vr2PrUvdyaaKk0C6UQxd5P55nB9LiOhbpyhKVQTsv\/+44XghuC1pJ3FXt2NjQe+CUcHyg\/CStdVZ77sBr3jEHJD5WyRhPOE0PHrKjEkwO61egIk2dYxhBIp8OCkst22lv5y0ZwcT34lkkTv5u3Z+PpFSID1U+kLTu+5h8UIdmdChB8Ic1cG4AQYLHLWNXQ2dMqc9hc5mVaWGdqVsXAgEZ8PmUGN1\/+K9d7hwED1E+zAtc4tOBuE\/zS269MNpdYACOTcy9RHUvjlSspQylJjubyYwnj40H3orsiMgpv6tA2AxST8dUKpvzYljGrSAdakZ46qVrbuEBiCGMTCs+\/UNgvM2e6Fe+6gqDCfOY\/zXSUtlduoc3jid15XCt88k2M9Kq40sh6m+8eKjtvlwD7XYwfSnLxwxhEyeUkGT+13FX++6oG59AfysFjC5iJYSscA+YXyA0hYuJ9OTtOQZg32pXfl5BmrmRqnRAIwBXmzbGgXzEsXtx+lmlWCK421d8ePwyDwI8wnHfI\/90mFIe34gGT+WMlq4ZgFubtwTSjzidVFs7GoczF7Lrr2uW4jA9qjpqY0sj9p\/VVph1PRzTPVNMdHm+sMkD3+hhI82joYjOeoRxcWEO0C7MjWGcq92hfnKcQSy875okSAGULGntKS3GeTR0gVMj+6KA==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":51,"flow_packet_id":1,"flow_first_seen":1603816434684,"flow_last_seen":1603816434684,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":35263,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2080{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gD105BNgRQCABCwcKydWupNP+R2kegH0mBkcAABAAAAAAAABoFggmgL0RUQTYZ0HNCgoKCggKh53oSKcUIwAARL7gnbCt\/i9esljBwsmPvsojrH1nHZVBY0xSwfKH3XUIijCNgd7Dz8vI4xY\/GVgHV60CIRICp6Kjnr0zMRCxb3nrCucJOyP18UJ2XfpoAWpzvs2pUT\/u95vGBd8XvGhGtYoLqIrMkwYTUuZWsLPdt9\/gzvA15FlJOa7ugVzGXmi7RWK2tRS2hGORcD238yWdl10gYN8ZAvJb8s0UeahNz4nqOB1o1ewm+JfW47bFEqheid7sAMQL3N59\/ISUhkQ8vC1I4dVehQTYmG2zs3sj46oOz5lAFlK26vOv5VRV5IPztRMlciR7V6Adse5xtWtlpuIXzn5\/UDxzj9dah7+yAdZOHeT0zLvwsIoGcoPRxB0MH96VRzKARwz+S7KKOKG8cm2If62RiaOWfmxkaI06NFuh2TWyOGI\/smeYiBlrsSEsSPLBOsy9YKqIRy2SnU5fpV0QIrpOULNF15tvg64kCSUJEHN7hq8wuLHUYVeVMfUb150XuMPRFaeDc+hRLxIgkKsegq\/1GMLnU3cw+YqqtGx9Y3AG3jCsYvczhQt97g+bEAD3lWpSQqlnbIPVaRxSBb\/m++vYk0m7W88TjbXZd39\/H0cIlTvJ\/Z0SYJpuIBWlYvloAhW8wQNQxVyWnDT8EGTCZMIdSLrubgSgxklIcQghvYxGjlenv1U\/xWA4GVcvaRa3KIrmqe9Suq7Jbom9YtFec\/KcUQuypqb9vLHQd\/Slh\/IgOY2LIPbfGrFqtZ5IZSSAFLezKKTHeEUDMMIvjY6nNjfQvhye7w\/iK57ylN1XmmiCsHB2UUISWzLgrbBn+zFoD8q39CqH1PUlQIwDNgZ6s2PfqPEu+x2StileWyY9B4yefqdiNXFJ7u0v6qBj8LUR9\/ZHKs9wt4Es5WiMRZRGcohtyH5Q2qGSEuh57YGdY2plV0kqxOJJg8WuHGwG80hM4Tuuqa2qTyvzRzxBzkkv7jnWbsOt8w6eogTolB5Yq2lNlcox1ozX09J\/4y2Mgjm9fxydUta2PLhNKNF24FGjs9TlXrGvWStOf+FVD0GqXkj4kfvlc5hUlqiu\/hxYQyz7qNm\/6LH0VCx9ePdDf6W4APXGgkkBgu34ndfqUtg0Sa2fWK+OElqxxZw1+Hjyk43LjolIsRbpcWkcSLKwQP4O5jLw4EENRtGoAdziVGhmLWY7AyDGDqDXD+zk0FkOZMfIjeyouDPo8iAsGYm9Ha0mLEq8OysomYrCzakDZNst43uj50cSwd\/VS+ATJsBvZ7N7sRLvBamrC1umCD7i4s16sQmoEu\/PSvNXlSeypCfAg2hJAeLhcz4\/B0WcrTcIC8sTScPAH3uwzv2dtb+6AkA7ey192Tem0ngjhVi9gaWtU5sFQIbMZEgPIufNBRz0zG92jR202hKnv2tVs8fpah1QPJuf+kSUD28xqWVBySjEINK1zyjumcct4vfD2Rv2hsFuDdEnRtRcJ\/VHoB5zsNZ72V1mw1n3OOM3pVkY4\/rmTj\/xZxixYjGJ4hQmi3ZfkZHdBqMDfT25BKOJoR4wohoVf2vU49x7VJnCxuwjZ+PxxTyZPpwTwZZg9+9l1NkFrr1xb3oTJlb1ej2KIFSLLbYLLG40yc\/N4lOiLv0z\/w==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0520{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":52,"flow_packet_id":1,"flow_first_seen":1603816434685,"flow_last_seen":1603816434685,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":53760,"dst_port":4434,"l4_proto":"udp"}
+2076{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0578{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":52,"flow_packet_id":1,"flow_first_seen":1603816434685,"flow_last_seen":1603816434685,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":53760,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+1121{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gAY5iACMRNCABGfAABAA0AAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9EVGLOwAj7QnAAAAAAAAINUX0m0oVmLXKOtq6\/wAAHf8AABs=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+2077{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":53,"flow_packet_id":1,"flow_first_seen":1603816434699,"flow_last_seen":1603816434699,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":54570,"dst_port":4434,"l4_proto":"udp"}
+2080{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":53,"flow_packet_id":1,"flow_first_seen":1603816434699,"flow_last_seen":1603816434699,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":54570,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0412{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3PkpAAOIRsJYocL88wKgBgBFRtfAAI3\/u0QAAAAAACFIdWLoQ6nMg\/wAAIP8AAB06SjrK","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":54,"flow_packet_id":1,"flow_first_seen":1603816434707,"flow_last_seen":1603816434707,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":44924,"dst_port":4434,"l4_proto":"udp"}
+2082{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":54,"flow_packet_id":1,"flow_first_seen":1603816434707,"flow_last_seen":1603816434707,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":44924,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0421{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":73,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA7AABAABwRNNgSvVT1wKgBgBFRqdMAJz2HgAAAAAAACN6xPRoCi6ch+s6wAvrOsAH\/AAAd\/wAAGw==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":55,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":1603816434721,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":39975,"dst_port":443,"l4_proto":"udp"}
+2083{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":55,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":1603816434721,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":39975,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Microsoft","category":"Cloud"},"quic": {}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":56,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":1603816434721,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":50705,"dst_port":4434,"l4_proto":"udp"}
+2075{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":56,"flow_packet_id":1,"flow_first_seen":1603816434721,"flow_last_seen":1603816434721,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":50705,"dst_port":4434,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"QUIC.Microsoft","category":"Cloud"},"quic": {}}
+0475{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":109,"pkt":"PKn0qB\/spJGxgjQ5ht1gDhB1ADcRMiYEqIAIAAChAAAAABJ5MAEgAQsHCsnVrqTT\/kdpHoB9EVHHYAA38EDMAAAAAAAIJzYQ4GSWjENRMDQzUTA0NlEwNTD\/AAAb\/wAAHP8AAB3\/AAAe\/wAAHw==","pkt_caplen":109,"pkt_type":34525,"pkt_ipoffset":14}
+0481{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":113,"pkt":"PKn0qB\/spJGxgjQ5ht1gBLlEADsRMSYAHxgjENIwUQN9nn11N08gAQsHCsnVrqTT\/kdpHoB9EVLLcAA7grWbAAAAAAAI85\/7s6OU42n\/AAAg\/wAAH\/8AAB3\/AAAe\/wAAHP8AABtQQ1ExUENRMMoKiqo=","pkt_caplen":113,"pkt_type":34525,"pkt_ipoffset":14}
+0515{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":57,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":1603816434729,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":41857,"dst_port":4434,"l4_proto":"udp"}
+2072{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0573{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":57,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":1603816434729,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":41857,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0519{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":58,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":1603816434729,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":56073,"dst_port":443,"l4_proto":"udp"}
+2078{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0577{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":58,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":1603816434729,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":56073,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0509{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":59,"flow_packet_id":1,"flow_first_seen":1603816434736,"flow_last_seen":1603816434736,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":43645,"dst_port":443,"l4_proto":"udp"}
+2080{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gDJNoBNgRQCABCwcKydWupNP+R2kegH0gARnwAAQANAAAAAAAAAABqn0BuwTYttHMCgoKCgiHmjxz9S5+NQAARL60MndZKQNzXHuWbuWII8yYjx1QNcGEa3n\/tA\/kZwZdo0+NMbEhrCvw4fqUesktNwPhDHylUS4gcbEvHHb8Knr61qY95Pm5VKwq10YKtyHKrPUvOt6FFf4EaXlhbjCjP5PNGMuBPWvET6CR\/DNJ3amwoZ8AEiUkCCce2IA0+qLjflDvOu19oZVQSJhyk0ID2QUVFxDX+RIo\/BCEiyqGwrxxtUHNgSlpQhvXLPkd7gs0O8q\/1O3MXjjXw3VV1HTEIvgh9CIZHImqbItBAkHFYhj85297ojhzntlLLEMQUeWyYcLZaQRQLAnNxNHIfLFBwCs6Cttccxk8XUgObPlTQVTnnGvEYXJadvbFnkb5nj0E7bmqr23E\/kns4IXbYRFlEjJZfAc6UWDdSOXBoZHXMIAY\/dztkylxbqayCWGkn8v3wQJvR2xFoTyKE+Pp5saXn2uSt4EYi00Uf6fCGbypDRgDr6HED25efO5iFC99NJvuET7V90ObiIxoji+jOYwIL0BCHSm+uFeO8i7r3GmYR0Qg2iAiX6ZmlOl5gmCd40kAXe9Lo\/pKr3+r853YnPdtRNoIckFL+PsGubjlWj714eDNDRnoSoHs8UNwnNN8sF12pzQsAVr7qLBt4e8KWXFMXfkfIKWSnJhvivGIVrhMeN4RiaQ\/jippacCl0CUjlR9AUDC7DyDOswJ0+eP9X+z1Kkt7EaP13RXwGDeKbPLk\/tVc3ZXQShkobo74qelkPT7nbFmTZB78n2grmfmy0C6HMQ+qUHKH\/MfqCCK2ZnmHVM8veaHwzWHFJ4gVd2h5wLXlBRQqCB2AZzoyKpcMZFNpfGh+rTCIwQTyVZzycWPvtrbHzPNg+tUe1i\/foBt0+XApuoCCwHOsgf9nS7IFS3h97hfCh2TYTKBM6t9C3VPFYDuKYfUjriuP3G2Eq7sMAiqBDef1fYGxLN\/Dys1ZS2B2n+Zqt6K1diQtrzsIwKlRRg+XjfSSzPOVrKeXYenyNePWIMOs4YVAyvkFPV4RM\/osDQvZvShUA0iRuuMPCsj024c7WYx9lDihj4EJBymWsIkTQg0x6rfvVrFojeVlS8zgiytvfAIJsOr+k34t3NbLaK0YyfFcVKBnFDiEC5OcAMd0yi6ouvtE9rJyb\/CiH+Vtx9OSGkbowLLyCHtZ1EUgA0\/vr\/mU+ea4hE\/dLdDDjWwxrJg1oKjnYeHQvIDUT0MVaXTlMXS7\/F6HA7\/5QTayU5MU3hKtpwhACAx5gHHhue3iTscqXigKQ7oiaLOdxRIJ2wKmzNzvQPCG5UmOLnsbM\/3lI+SzzLjMM5HxKsnb7yJmS6z2+tdEoxPOa5ZNm7Wc1LoGgLZd+x+V88MeQDFaBDMQHNWCS8z7Ruv7Q8Jc\/JKShee1avRiWD+QjKfpjPULJzGhq8IhO+3xUZoq\/xSnX5PQ7xqYQY3oim9xsL+ADJPPe0oE2O\/lbNfbGhouInwUUVqUmdk\/fion2o\/ylxCHaGoB6j8tJgJq8ystdV8ErJCcEhkKohD7qeUu1YL\/exHAdFqCo5yGAJyVZFmJD6CkMOCvG195MdsDa2WfPCN+fs1Twy5bRnpAdq\/aOqOWkb9sVtpRcByoK+nPaUgcYcmBQw==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0567{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":59,"flow_packet_id":1,"flow_first_seen":1603816434736,"flow_last_seen":1603816434736,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":43645,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2071{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA8ydAAEARtHzAqAGAwb4KYucjEVEE7P8dwwoKCgoIOPxKwZ+D2JAAAETSb9UlQE89ABeQeI\/QpsT81kvbf+yGJkDFJiGPzWvy81KCH2cJiDSPisJ1QnX5xtmzBkvUHRp2FuQGYa\/pilZqNP70VReX07WlD\/pZQJVCbigdcxMaEYZASHVRfutuRBKJAqHBAwLkNLD3Z3I0ZaHCqcS9KYzw98tkCokzq6mDpHzHtf6ExbYo4N0cIacCNvdP+KsCtrUQL5WlJ9CyKBD242cIc5CKdLYQTld3qevU3UaqfhVdl5eNkntpOfIkomDk06sEpzJqxU7qHCvJeRN5m5L79zL+gTeIyE9Asm2jjoxtsNgfImDjEtUQxGhWbcpzrh3DpfCal+\/Lh3\/9pzSQhk5oc7WisaXX4PMLYNl+D\/m52ZU0UFUhE0+l9n3VSr0dkOaUEe35MHeuokXZgwXZNMBFC5igXXlE8UTLsi0ue8JTTCNLCTt+A2z1dpM8DEqH3biH+qPKj7JaqT0dHO+FKOdg2AM+f4RwN8QCF26RT62FuMBNmyc7aD4PDQPxUCYmRi0UGMYomOoMy8hZ\/jdhA0wX+8Om3VVga0TGy7NSDrerhKL7+YEsof035rdtPH0Y3j599QoVaO64ZA3v+T3u\/PfqnGSNilFgI9flDp09Oakd9oM2lrpaAWLKUI\/yiWEn06khwuxYpdaA+jHlJRUxbcAtBcEA7Cj1DsLuovsIWklWe2vDb5Co0vAUw5gsM+5gFIyui6IYAnMYEgYAo0c5k8aJzc1BMlQVQ3DaV0O66JJgt45uH5jizP8oxu2Wh52E9LT2KVQJhcHClILWv+P8RGxhrIU6t17U1LVUVBWrmKV60at1NW+rS5XSlF37anegq12p4\/NuoM\/YA2qu2AGPkJxiKmaQkbUvxD27zSetz4qW8RHM7iubRGqfzIBqjSpWnrxid4CaaVVEodx37MBRM60oKdEd8diMaexoLpCHpXy9\/9K2ILLllW9BNa9VJqdBFl\/PG2+3KXrSPTzMih\/0LgFxzrGSKn0cLTERd6NQOkq4kYFwu05o3XKSFMJCrrKttzDQOD0Xxkg+EwHHOHzZmUPRCHUL9xhPxEJdnU1P\/3DLDZMnviROzqkxPMEGYvrPbBWkCovwDH0\/6kXKJUwTNn4cbIQkW\/t2p9CS7lBLRdj+DcuKY4rzac0WcEfT58KRBSZN+EEOJ8ox4ywybHsEVQIhRgiC6M8tZ0Xtu+jwmRkD7RXtD4ivQRzZZrdRaM7+tfWpzYQViq1cUl0HobKvf8BQLMQNaUHuCe2x0spprn6wrhwmhtFLZM\/3JUQaheNThydzrhRsBxsueLLPS2wSHRf5YbXUOfqKT8x1ZUxl1Cu9Q2MBtIfuiHdJowbL58DK14UHd5YMvnZi5fDRxVUztKDIVYQMqMKH8yV9xD3VGPyIiH8IGHHs5mHayhzBKpOTDNSJvoWCwUSiT09RuRXMK392nYlXWcB1GHTIFJkC8XToE5ImQ07hzYbIBq2ramFYEZ541ak4WuKuC31\/KEs2j8jC9NQ9YUqFgEBERIZrXwnuyNqHXFfcqkiJHQ96OMVEUoO+dD1RwDoPZlAiSL6Y0xKWblqIJeilsDd4MRdVKt2kHPj3frisO3sEnc1o4dW8rgPCUUWuyR+3XiwvLjWNq9104NxX8nzAm\/FnVOMJuAoC5Q==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":60,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":1603816434743,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":48644,"dst_port":4434,"l4_proto":"udp"}
+2082{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAbxtAAEARaETAqAGAg58Yxr4EEVIE7BzKwgoKCgoIBzLrVZ9ibJ4AAETSpSIYhDhoiEFvP1qBCfMoU\/4qjpQbb9U7jdmFrc8viSpjQA7eDSIQICGT\/pnAELg3vnpeBC5hTrSAg5y0v3Nvj85YCDRYDUNtZg\/gqc9lMinrr2qy\/+tACJsh9TULiMkhVXBS\/DnqCBfVla2xKSlWGVYDfxfjWPLOnhjK4tuRvdsBg38QhZovgQwbE74gpeM+C0l1yFZQr\/3HZtCstNCtOu3UtW84W17PI7FfcdTn2s7KMsKWIseHKaKkB14DaKKUlr8b+M0Keb3aJipD33LW0ttcYvVI7edW5O9HmyMTEHHmLBoOENtgq1qxmaA8dcVwULmdz7v7A89bnJ9YPWVoQT\/AY3vPa9CPc7aXzzjpQHzXvLmR1Cp8lyfevJQBBugOzD1EFG+6ORqgxwy\/t3AMVq6UiTAqOHk10YiYfoOWp0mc0l792MEYihPH4U0Q4J\/xWCQfYBLc2RwO5JS8\/rBGN\/OkQMwq3X5t9nFOjPPZBRc\/+vV3l78KFWTME722BMgiyt1PB0IMcr\/wY9oB71n3944uqDUTQxh283ZrXbfA6w8v7iNeB1nvtIkfZTo5\/9dY9NpiV9qF4AHCmIy\/ojTRgA9UIdX8hEx5O0FmtvynQ+mLeozICBFeXAnpoY8U5dl0a8wlaBpakWQutMPrk\/nAriiy1jFsR5LnosEI4Yz6\/MFOg7bYZIyHPK\/xf+9zlkY7T4qEj6ycOajZ1TYCeHMIlwhBWcOIPbgRWdOWETBlCd6sWgfOMwJCAXcjFu88KLuQ+pCjd31kktdw1RVYXCTbQod3cSDHFSoD6z7zQZ32UQ\/kR6M7QstvWKuGXKrevWSqUPnQ7HrYNQDFIBkklqFkxbVZcSnT4UUB7KQmwYtQUc3FO7o6Sx9BRuD68Yg\/gcvk3BApsJtzmbS7xsNHmaRwAqrqaj4+m2ULPGLQS80yS6mffzxUsj35+UHRRyp7PYmh1cC9qTzCEsRA7CjRwHLjqXJ\/bFB2ydqN23sLpT9nS4qU4QS\/HV6Wwrx0WtQFBbsfAW3fUZkAAZCl13hpQUwFlYp1jVMEWAMYBq5YiQtqre2ANV2GA425sm0cmnAEoAPOvqCelpE6WxYBAjJ6Ob9xQn5fw5KtiH1vTt2jIzGqg7h7x+eEG7EtskR3WXy2ULpj8avtEHxoIAYNFuma3Kw1Q5I+yp3gZXvCg80hvQ5yvTMTRFEFLv7e3AI9MWK1ez\/Gs92MjqKDjcFapzN8J0ncdbpf7VMM\/SAAAyn39VVA2B0eImPwbFAkVPm6q7XMvwTw43gkYyH+tIZCaiByTp2fz7f13zt5uWkHJ\/xdDxZ0QWMsgr23LTh8uX0dAi+gTSxGMdGZ+JMlIsaX0oCPfGb0HHLtAsXQYqZ0ZWPw28mWBYTpruOoNFb3DlX+6qExjK8WSy1ooe5+wJKkueb4Xmv\/UjHpZRrauceITr70pDmM\/h\/qmPnCS6hmsP17czX\/4rm35DUjFnD5mDlo+Qvw14FGc0FaI4S4lHwDgjoDtx1uxn3T6ZBIvh7IG+k1Jkwrdejn5+rYQQ7D+n0F6ra8Kary+Yp6IxTLgWMA39l4flYecvLvLbyaihe+bxuZ\/sXW44m\/I+rkIqDYksSpmtNCQoAiuTEaO8+G9TYcOPSiueZiWcspgw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":60,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":1603816434743,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":48644,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":61,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":1603816434743,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":42468,"dst_port":4433,"l4_proto":"udp"}
+2085{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":61,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":1603816434743,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":42468,"dst_port":4433,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"QUIC.Microsoft","category":"Cloud"},"quic": {}}
+2077{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0446{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gCsonACMRMSABGfAABQwhVAAB\/\/4zO5YgAQsHCsnVrqTT\/kdpHoB9EVGzHAAjCaG2AAAAAAAI2i99jGY\/xbL\/AAAd\/wAAHP8AABs=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+2082{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":62,"flow_packet_id":1,"flow_first_seen":1603816434750,"flow_last_seen":1603816434750,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":38689,"dst_port":4434,"l4_proto":"udp"}
+2077{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0585{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":62,"flow_packet_id":1,"flow_first_seen":1603816434750,"flow_last_seen":1603816434750,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":38689,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2078{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":63,"flow_packet_id":1,"flow_first_seen":1603816434756,"flow_last_seen":1603816434756,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":53402,"dst_port":4434,"l4_proto":"udp"}
+2085{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":63,"flow_packet_id":1,"flow_first_seen":1603816434756,"flow_last_seen":1603816434756,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":53402,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2082{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":64,"flow_packet_id":1,"flow_first_seen":1603816434764,"flow_last_seen":1603816434764,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":53140,"dst_port":4433,"l4_proto":"udp"}
+2080{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0589{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":64,"flow_packet_id":1,"flow_first_seen":1603816434764,"flow_last_seen":1603816434764,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":53140,"dst_port":4433,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":65,"flow_packet_id":1,"flow_first_seen":1603816434765,"flow_last_seen":1603816434765,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":57926,"dst_port":4434,"l4_proto":"udp"}
+2087{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAU3xAAEARXwnAqAGAjOM0XOJGEVIE7OZyxwoKCgoIVNEfWrpr6t8AAETShzjiz2D78m1qpQ+wdRdnpG0LI97NN9w\/zKLTNwbycXDRt9x16mx5gVIiYU9my7Ewd3ZQMG74RKzp5yqjf1swV34ZhT\/6a6RECEeuXIhfq5HIaUvnylxvuq5Ar2tLEHKFSp+lL3+2mCGKG\/aNYIIMA9OUhG2opUeuB2l5mNW6BfknYi6bDFHQDD1kdTaXvzq60RpfCfERji\/a12lQL6ybflc1AUHJdy355ohjy1PIdK24siM83Pzy3WhuqqXhu48NlkiWBwzRIc3QwNG05XWtibPZpt+rnEgQ+dX5n3b+VdVkbT1SCRuZXy4KNB1O35Lr9kd9\/8w+iJRgvFGDJ1gPEsh0qR0CocMn8hmur7qxG29GbjVMp7R1NSj2eAOtmvYpLRwpEXgHuZyaQ1wjCTKff2\/madFWTA4XUYv4fZGglZSmwIF\/drNbz5S3P\/iWcoMFEHkI4sVFj9ZYFd4B3L8Ih2KOMfq0bJT\/WfJrXj4M4zI4ZrVBE7HjqFO+Xl4tQchegf9m36aJmP9rCIyTgms9JLdAWw4p9HwzAtYzEsN7etsiFMbBGYxWytAD85x3V9BiLZ0tRaEDbZVSI3dKqLBjOACNgGbIysz\/M5PX6bbnVEJL+rpXP4dfmzf\/vyIoXSLGK\/35Ot0RpvgHsUdk1M1JiJ\/w0LW\/ca8oRdqHyGl\/0OHcNoRXWU9uCpfJhoCR17fY7d\/8uGaioJukkywUyDy4lEoJon8wuutdoFaZ2G1NQYMqLk2L9BSwK6uXlh\/KFqoktCfkCzS\/xf+XdyqvzCmUAccDyVcTW2Lvm6Iydjjcz17WgP2sboaA9M+jrUXfYeNBGU+gooCH\/ra1qqj6hZV+ycQaUnNe1GLXG68adoCLMAH3j+oxneUkPOBiO5E\/EF5WMPYRqDPOKxnvKYyV0lEoyBg27SjzbmIsvSP3tH7+YEc5r+OkK5iuBgQnkGchz2TXPmjupTCg7Xojg+c2Vl21XIeYUg5zp5dqk+Dg1R9d\/NVFrsh0doLMsqN8QHWUOatOJlm\/\/hWn7+iCSCBW1hRFoljw2OaG0E\/WHGtKJCH2ZhTW\/OlsWDZ1I6a9AalNu2a3QLqufVsas9PvBAL98YjcgSJ2vBIk\/BVRBpG1Q\/rHLLGdBQB\/\/fZj9y5wySLqEy0sx93+y3Y1YIBdxSNqeVQx\/fJpwJre6YpAYG9B9bZ\/BhXdwe1PHHhhhh+Tc0H6ljXzAZf5EDPA4QtQAjr8TpYSQuwb\/souaXFbGTPfik1Mu8mHXJ7chWN7BzwY6WVcDvctTf5wcun\/ot9mUzugsNNaZfRJbJao7Y6eGCUXHAEDWUWwm6eFYQim4\/i3o6CdH9tbSa5KMv36T6nVCkpY+qDyBJdXUmrtiozwIoULbVWC7vKc4k21qmL36sDhhn10y6PN4bIg1\/diWwWYCyWvERVVVw+kY2BYCLC6p8eQ4ktUYbvTDjH7p17NqO7ef3HSSFWp67hCGKfd+ge3gy9+0Ke6znAKoZn3gft7e4Qngv6MCc\/8gqKo6NfPX0NUiWvPO5U1BDl2yWaNt0QFBBfKLxj+uxMZfebHky9N1aDOeVaIQ9eYOanbE2+OeMk1d8+h4d5hGTbyyYZ3xpCnfIP7rR2Q8OBY5Js9LjU+ch2BSmUmNfrrjQ==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":65,"flow_packet_id":1,"flow_first_seen":1603816434765,"flow_last_seen":1603816434765,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":57926,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2084{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUApalAAEAReTTAqAGAhfLO9L\/\/EVEE7ON5xgoKCgoIFbSGVwPjC1AAAETSB6nk7BQZ0n6OtRMgfqRMKv0mmF2ZCcJpOh5y0A\/toFlOz1fz5pBGD1YqR4r423K3bLjZPtU8zEdGrInkcNVS7Z9ZXa9KjSFkO6ZkCM+bgjrlPSYegWgr+lf8Seik\/OAa+9m4F+SKC3n3FYnChgcugjttcabtxcQG9UUmURCrO7eKZHimNrioYr36+LduCnNt9LNd\/zB6gPQej59n1H2PIibmagW\/fM66aVsVaR7zVHUCiH\/Qk70XwReQUNqQdtSK1o3x5foHfXLA3D5kXGSVsWki0olqZxxN4FQAu5\/vbJypl6cmZI9OG9mEaVsP3cQN5V6DcyMwwFq92zydNBh3eUgEPN9OuCoA1RCaRF2MY0ZRrUi4a0NGDiLUCV+G4SlLziz9xOJyHgGzjLPAE4BCeRh\/v6+wEZ8mgKyLD1EAVDV3zN30JJ6M0Me3hNHEEbe3VogRVZ0JV6CPYSKozfqmRIa1OO7TLbpqRx6m0yU\/HDbQvXQVvGPqTESIeDN9OWt+hRw0H3fhD\/0jWSUXeT5zzK0QccSYs9OMt6xct2EsrhYBO1aPATDoyaZAvzwTNWt8Eo\/XQktNf5jtBBlktbQBo67n4yyIo5rxgyPWJpQuRO297O7Mat4F1YWbTtTthkWIST5XlLQDR9sjWJQZoLrrVPuOGNaGgLiWbJpKZkPAmpkeoL2fbBEubmo\/7AK73pscjnUsQfmTU2Lhlzk7lE5KZzfdO6Ojycq4INOAlTRsxjE9Zej3obzZ+qt62gpD1eMqQQ4pmr3v0LhMGBrSM5EJ3Lmee9+dMb\/4XFUcIqSZvmCu1M+oA1IifmzxY0YneJ0hq33tjmK17Y6LsqmZvgvIsEtHUfp0429tqiTnJ7jEj9nv1Qws03vEaDx+VL91DFUBUZJsS2cGo6zH4U5+3ALd1d9yNs8qALm9NC2sFDyPeFu+wcrail+CekPau3rfVm\/\/BKg6uu98kDdJCbd1K4G6Sqm\/PNtzcVB3Yj4nmpQutpeBoYu\/N\/9zeylcHDDY+njAE8iIJji89hsMpr06VVSWYUsxYktuKVqxiBHUsyn1Qm+B+LGljetv1Jxr8cQu2ysaGbDgZRBSueKSbvXGNWhWLq7YBfLNgLfLQd6u0Si9aGjm8Is9C7byUaZ2JPKY6uJyDHXlNjc8po\/+0JxVFx+TI9y4r8FR94PIlv+t0snjZMMmWVUUkN9jPEM8reQ6rFbrOw2FyLxYpr7e6DBlYpr1rXi3y2AXbHOBjn\/yzFASJZWgEwjT9kc8\/kszRPabFnemr71tJxRnqsT7Z8rLpEDPHd34XFyRMJy5FhlpGRF5xBBWEPcYiNM4ACXS2zaqVvc4Ob6UONNiC5nq2MkrUel7u0fH3y+QFu5zcqtdETTA0rau+rX839r2M0xAous9B\/DzSAmhABN55MwenMuZXqKqO87\/SWuW3bCHCwmA4YTm0Y3MW31xmUfWCARViMQoMKL4e47lsZJmCw0S76EdXYT\/tkaU\/XJ34K+CTAC9yoTmJCAO9jIFpf2oBzdts69jtTj6Cw9qgKbQnkEP\/wuWHtVAcedrnVjSQu7O6Hr86jboN5XBirNkD\/k3Zb0R5f1hF1X5cR6OxDuouIjIFrBbnyzMLcWJq+pJzxbnTW8A+JnK8lKA7Q==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":66,"flow_packet_id":1,"flow_first_seen":1603816434766,"flow_last_seen":1603816434766,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2400:8902::f03c:91ff:fe69:a454","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+2089{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0545{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":66,"flow_packet_id":1,"flow_first_seen":1603816434766,"flow_last_seen":1603816434766,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2400:8902::f03c:91ff:fe69:a454","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+1125{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":67,"flow_packet_id":1,"flow_first_seen":1603816434772,"flow_last_seen":1603816434772,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:4:34::1","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+2072{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":67,"flow_packet_id":1,"flow_first_seen":1603816434772,"flow_last_seen":1603816434772,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:4:34::1","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":68,"flow_packet_id":1,"flow_first_seen":1603816434776,"flow_last_seen":1603816434776,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":43735,"dst_port":4434,"l4_proto":"udp"}
+2076{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":68,"flow_packet_id":1,"flow_first_seen":1603816434776,"flow_last_seen":1603816434776,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":43735,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+0476{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":109,"pkt":"PKn0qB\/spJGxgjQ5ht1gC0dvADcRMSYEqIAIAAChAAAAABJ5MAEgAQsHCsnVrqTT\/kdpHoB9EVLSAAA3EH3TAAAAAAAI6BdjXmXwmldRMDQzUTA0NlEwNTD\/AAAb\/wAAHP8AAB3\/AAAe\/wAAHw==","pkt_caplen":109,"pkt_type":34525,"pkt_ipoffset":14}
+2083{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA7X9AAEAR3vnAqAGAyu7cXJgVAbsE7F0\/xwoKCgoISaS\/HP4FIE0AAETSs+MVmuG4wpmNcPXwiwbgkyhiThvn0LHBRqHfn+gXOdfthzxlp0ltI03pZKw9vyqEYoBiUoMOALn8iwjEM1bBG0sKOHNmuafb9yKJq5CpXdfVW9fnnip2p1tWnGQZccSpOc1uq0bHiGjb10mg3cqpILSGktAMKwPjSF47KMJxZp\/l9ao1+O97nqhSrQZgHoEMImlI7ZCND\/wyqspL+eu6NAWz3rU9vba3BnFw354DNfuXu8HOGbC3Guvt9ytqxi0Yz5DSI1kvCcdc1n7wT0BoaLVFB\/yV1s2y5v5nH3DzJd2ACj9o\/zmaZyMpvWCTRg29elBjIR6fiI98dZm7sRE0VcNIEEqTNqSeoXcWt5unTNHBRYj7lwzoPoXK2TUjG515g9q9fHLJbLWr6\/hB+vEJG6S7dsFN6dIXdTpgqWHu81xJ1m9hfY7AkYBIllm4leEOWu1SRr5c\/AEsknAD+6XbQas8XXqJRRnDaBD1csMJtZvxoVWNSuOHBfOUyiZ4hDYxHjMLTLGygYFsDHCP93SCma0J1PrsKV4mBTWbhdzxAD3aoMxgjoxla8DQxuClSD4NOC96GJ+rdubJmMLxnEpF5JDa1IKuYrUXV3w\/4wQZqtP7g6zDf2GhddDBCDNr7yc+hg+5ilxcgcb2MVoLkgX1OkizCx2RSfRb0eK8thsruCLFSby4jO8bsuNj\/DwRHrD9ALa9P\/tMKNqD\/QB3PCX6uMJrfyT324LeetrVxPvOBvrQpiJegaN9JcarJLQiUBPGBrK+q6yGhmqia+H4CTzm98FspAgFJ3pIDJit2uCN0awhg2fUthbI0kXrjD+YpQbOi0QPuM2dRjqPXjXqrT+X2FbVUvVA37Xe2HlgHJQb01jyc3xry22J8\/uMKksqV4OfH9xACygHSWKGL7403rhhUIh\/1OKDuete+v6YGMI6HZHwxepcu1MBc8\/3NDyIJT7pGaR74MXwks5nUPSMbWXdz5gpe86RgRisPos\/HQNeweIwtPmU7vDULxHYQYbZJm932INOf+U0JuYM9\/0yyF82eovZ0gS\/AOY09vwKYKSps2BcZpcxKZJ6olMmG8Bd8RL\/TLXZh8OzsalyvubiZwDWuVVt1AZfvz8bSBiibxOi0oZJkb4Skel7UVJq4ZUt\/AwshUTtNvBmdhQCuqFbi+vqgJQibSCoN9R4ZSyuDwh4LgKfjp+jo8uQyFbtI8t7MPDA2gEjE9qSW351YU9i5A\/s6I\/H0QY4qaYHU6kmhNbmIKATtEXjZl9SsVnMQ++X3XZU09ZdvRROedhNjBpUePUF2+I+GgpQe9uXNKuTX5eintxBFe\/K9\/CrJuH447MCSJbL3kP6Bf4Qg2eo6fEs5dY6Gxdja3GF51OjnRG43ifui\/tVzaMUi324TS\/XRgkk6p17f60JC6V4Gg40mbPu0O21JxeTFWtWMYV6jinEN5pHS5s61dr9fU3vtxIOEN\/xMZjMROyRyCA55e\/0gx+GVjszIFs+UXq\/SyGgMEveU6gGW5EAZ3dCbJv6R+xa9kprk+rkDzgIuFc+I5Eg81JJd+kRHZiTfuhJaM8VwpyTDR71\/6\/lU7nCHcQiW3bXtU47eJyWza+vS4JMmYpHRxlNVbyyHp66eitmqcsnzcAlPI7xtrqCvg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":77,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA\/AABAABwRNNQSvVT1wKgBgAG7iFcAK9mxgAAAAAAACPLo65bqtzD4+s6wDvrOsAH6zrAC\/wAAHf8AABs=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":69,"flow_packet_id":1,"flow_first_seen":1603816434784,"flow_last_seen":1603816434784,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":44605,"dst_port":4434,"l4_proto":"udp"}
+2078{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0590{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":69,"flow_packet_id":1,"flow_first_seen":1603816434784,"flow_last_seen":1603816434784,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":44605,"dst_port":4434,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {}}
+2086{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gDen3ACMRMCABSAB4FwEBvnZO\/\/4EYx0gAQsHCsnVrqTT\/kdpHoB9EVLCfAAjD9qPAAAAAAAIIsGdLtPZLyX\/AAAd\/wAAGxoqOko=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0448{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":70,"flow_packet_id":1,"flow_first_seen":1603816434806,"flow_last_seen":1603816434806,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"202.238.220.92","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+1119{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":70,"flow_packet_id":1,"flow_first_seen":1603816434806,"flow_last_seen":1603816434806,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"202.238.220.92","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+1128{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2069{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":71,"flow_packet_id":1,"flow_first_seen":1603816434818,"flow_last_seen":1603816434818,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"18.189.84.245","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+1126{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":71,"flow_packet_id":1,"flow_first_seen":1603816434818,"flow_last_seen":1603816434818,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"18.189.84.245","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+2083{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUApCNAAEARDmLAqAGAjOM0XK5LEVEE7GREwQoKCgoIlk3\/sw8\/b8wAAETS7HTMpNcxINQW3ZN+iCGS1z1IAElwdp\/JkpB1113BzMoCCRTe4FQcqzRNlPfFUuL337y9c\/m0xOQ2BSNabPaJGHp30QAKNdTWLRiE0u0lhDN37WkJ3a18g080qiPj3NOKBzBb6Q2R2eP+Tu5VAgK0JBnSSQxscnBGZYx8erjfdk\/KfB+k80tJ23vgNCBrw5\/QJHyIKFr6T5gcmaoduB6MP68CbMsVTh+UudjvNuCb47BBuKD37H0qZ3vrzszhEdCnaBPaTgDC+BRg\/7zjd8y+\/IMXoc4lcJ6yCEUNd5PMsCArc8JfRjxmtTjKsNnWLKbOCz7De91KYHmwGYzaF+m0hYb600XnI1+GfBH+Yt7Rmih6ZJFb61s4n\/p947s86kVOIDjkRzXFc5rj\/5TsZlNwMgHK1trFOYKfIQD\/nGNPAy3b1yszE1t6bon4A+5+sfdvgO3Pb0vQv7a2RjiEoNWsOgLHHYRaOns5wLvhGDh7p2oiwYoA0dOQULiPA3oPFIYn3l5BexqjNtcP9rDwal7aPEC5NULq7Zmi8SqPrNQKrHxduW\/ejURdhLL6oGYtylwTjf6fFdLzV74euKvQMJtzqOmUVsGs7ytHwIW0zUSVdcXZXNdfHTIBhQmt1LEXywwM9sEku5ONFT5vw3iqnJaeuQ3Z9RVWM6JVZBIIyhtRHSHLMWoMYyVHbzNHU6KHtgRqx4XiFpODAS4ZKLu+YaxH\/jgJPdH9GCKqWFOo09L\/MFa9JOyzZTBHgPL9\/n6dV\/AjYlz2WHUbgl4B47TvtoGesKFiqCifWwa9T\/QAs6VqSsxDxakmj9BwRcyJY9Fh+S0GJgfOD3vdFv7r+qe3nnZPXIMdHvVuagTE0AYBONNrKgYdX4Ky4qhLEEd5cE9ERtsD2WvjOGP2X1nIyl6Z5fwtC4lFzD4HiYxcWYOwEoRb4XOLMLjHU1VRqf56Q7VOoNVljrqpfUTD3\/kymwOaOw9lLI9P78KYSDd0ItN84RFi9m1ZATEA4B8xDEQ0xgm7gZL75Bj+DcL6tIj3M5q5t+D3grLTkPWXTTA36Ac5nJ553GrmMeyNqRY+oz7\/jmpae2pHhn5y5a\/JNHh99ySrjiURwgTDidnXFv\/avhfUTEIKYf9vmF1mBR2BjGIWblU\/xSsHPpQooMBCE1pv+edhptbedN01raww3dKDhm8PKg0\/39zcyjrIDUoGuCyt7fcWYxL1rSfHDWFvTo3rOPuLREGMhWKH0rTw1rfsvP7pj9wRWFuq+5bjg1YEYzOa+4ow\/G36iMyOEYXSETkFxk1k9PKRQcdv+hmZ7Yysh6jGqSQYubSckYOn7rzqjXzTbZJ4cVerQWc6vzgu\/f8kKoOJaHeHCNS3S8Ih7LoFy\/3HhVH9BOwbPs1b8AjTnrabB9wJd2L4xt25UkVcDS6dONKmrmw3h\/i2PdMTiY3wE4W1wVKTbunysVPKp2ppBpsra6Hdm1iIJV6HfCSSXwO8AyqeAGhx5QFqNqN2LYiejuoyXFW2FmijSjtLOK+Ec8dkYkpgamnxA4iCyf\/yyvNIxQuF3Qi\/hZNj\/3Ane7tlBEi6cG9xsu3lWfzaAh0Qz\/MZBLCWHCiMGpcbinSxoJxeieJR4hwsH6aIGBBARlcM87JIeY9evAugxQ==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0446{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gCEs0ACMR8CoF0BgM6YEAzSri\/bO+xasgAQsHCsnVrqTT\/kdpHoB9EVKuPQAj8mT+AAAAAAAIITUj3tZzyB\/\/AAAd\/wAAHP8AABs=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0481{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":113,"pkt":"PKn0qB\/spJGxgjQ5ht1gAGSQADsRMCYAHxgjENIwUQN9nn11N08gAQsHCsnVrqTT\/kdpHoB9EVGV+gA7uJfFAAAAAAAIQysxrQYDr8z\/AAAg\/wAAH\/8AAB3\/AAAe\/wAAHP8AABtQQ1ExUENRMDpa+to=","pkt_caplen":113,"pkt_type":34525,"pkt_ipoffset":14}
+0490{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":72,"flow_packet_id":1,"flow_first_seen":1603816434822,"flow_last_seen":1603816434822,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2604:a880:800:a1::1279:3001","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+2080{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":72,"flow_packet_id":1,"flow_first_seen":1603816434822,"flow_last_seen":1603816434822,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2604:a880:800:a1::1279:3001","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+2081{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"PKn0qB\/spJGxgjQ5ht1gDK7JBNg6MyABGfAABAA0AAAAAAAAAAEgAQsHCsnVrqTT\/kdpHoB9AQRVHgAAAABgDJNoBNgRMiABCwcKydWupNP+R2kegH0gARnwAAQANAAAAAAAAAABqn0BuwTYttHMCgoKCgiHmjxz9S5+NQAARL60MndZKQNzXHuWbuWII8yYjx1QNcGEa3n\/tA\/kZwZdo0+NMbEhrCvw4fqUesktNwPhDHylUS4gcbEvHHb8Knr61qY95Pm5VKwq10YKtyHKrPUvOt6FFf4EaXlhbjCjP5PNGMuBPWvET6CR\/DNJ3amwoZ8AEiUkCCce2IA0+qLjflDvOu19oZVQSJhyk0ID2QUVFxDX+RIo\/BCEiyqGwrxxtUHNgSlpQhvXLPkd7gs0O8q\/1O3MXjjXw3VV1HTEIvgh9CIZHImqbItBAkHFYhj85297ojhzntlLLEMQUeWyYcLZaQRQLAnNxNHIfLFBwCs6Cttccxk8XUgObPlTQVTnnGvEYXJadvbFnkb5nj0E7bmqr23E\/kns4IXbYRFlEjJZfAc6UWDdSOXBoZHXMIAY\/dztkylxbqayCWGkn8v3wQJvR2xFoTyKE+Pp5saXn2uSt4EYi00Uf6fCGbypDRgDr6HED25efO5iFC99NJvuET7V90ObiIxoji+jOYwIL0BCHSm+uFeO8i7r3GmYR0Qg2iAiX6ZmlOl5gmCd40kAXe9Lo\/pKr3+r853YnPdtRNoIckFL+PsGubjlWj714eDNDRnoSoHs8UNwnNN8sF12pzQsAVr7qLBt4e8KWXFMXfkfIKWSnJhvivGIVrhMeN4RiaQ\/jippacCl0CUjlR9AUDC7DyDOswJ0+eP9X+z1Kkt7EaP13RXwGDeKbPLk\/tVc3ZXQShkobo74qelkPT7nbFmTZB78n2grmfmy0C6HMQ+qUHKH\/MfqCCK2ZnmHVM8veaHwzWHFJ4gVd2h5wLXlBRQqCB2AZzoyKpcMZFNpfGh+rTCIwQTyVZzycWPvtrbHzPNg+tUe1i\/foBt0+XApuoCCwHOsgf9nS7IFS3h97hfCh2TYTKBM6t9C3VPFYDuKYfUjriuP3G2Eq7sMAiqBDef1fYGxLN\/Dys1ZS2B2n+Zqt6K1diQtrzsIwKlRRg+XjfSSzPOVrKeXYenyNePWIMOs4YVAyvkFPV4RM\/osDQvZvShUA0iRuuMPCsj024c7WYx9lDihj4EJBymWsIkTQg0x6rfvVrFojeVlS8zgiytvfAIJsOr+k34t3NbLaK0YyfFcVKBnFDiEC5OcAMd0yi6ouvtE9rJyb\/CiH+Vtx9OSGkbowLLyCHtZ1EUgA0\/vr\/mU+ea4hE\/dLdDDjWwxrJg1oKjnYeHQvIDUT0MVaXTlMXS7\/F6HA7\/5QTayU5MU3hKtpwhACAx5gHHhue3iTscqXigKQ7oiaLOdxRIJ2wKmzNzvQPCG5UmOLnsbM\/3lI+SzzLjMM5HxKsnb7yJmS6z2+tdEoxPOa5ZNm7Wc1LoGgLZd+x+V88MeQDFaBDMQHNWCS8z7Ruv7Q8Jc\/JKShee1avRiWD+QjKfpjPULJzGhq8IhO+3xUZoq\/xSnX5PQ7xqYQY3oim9xsL+ADJPPe0oE2O\/lbNfbGhouInwUUVqUmdk\/fion2o\/ylxCHaGoB6j8tJgJq8ystdV8ErJCcEhkKohD7qeUu1YL\/exHAdFqCo5yGAJyVZFmJD6CkMA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2078{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAiNlAAEARQ6DAqAGAyu7cXIm\/EVIE7N5MyAoKCgoIV4qr8UTBK3QAAETSZYQqq5\/hhyGtCz3Zmoi9jrKsnf3wjCZq1mxPTTEfXwdslpFlNBBYDqBuOo+QKDkWn4ZFD\/5qQ8sD8A+lBYGJV+nw5hbll6er2441gO5dAvGVUTjoFTcs61bhJdzOUrux599yFBfTAFDZKYhyBebkHPNDrNvPvVpxfBpxhEGHEq59jbH7Kx56FJtjtSZa9HQG\/OGEFc4JVYBfZDPBXIhzLUdX2JND3qWMQuwP2Xy5LdfjKHYwwsqNQgrtYOT1t6v+Zvqju\/oAictN1dRCuNXP91Pwy5MQysbtofZHqB7e2yb+jFxm4ZMqy+00qpKT7ne5IWIOVRZxjqMikenSsN73RG+rLd\/uLSPXcSlufRT\/qpMuPbNQ6s7DEcokvc85KmowVE9PiWIPrZuSb0oRHuoTyejJTscJK3si7Et7GQNCLhwsIS2k6fsRMPFVceoIZZfXs2PzKq3\/O9EH2D79eeGzP8A5iwmMT7Aab8l3\/6R8LVM6+3PQfPi4jLK+XHWMQbg41\/J9uEQZI5HuTWWQzwcn9UAcG0g4gwcOPmZDzviupQ5tg+\/9eADTReJpa4xS3oYZdywwA3VZsNHvhQf4dL7aplXzKSWQO9B68xf5V1q4gM+CvIJUrE82UCwH8VaOoe1AoHNWtyDW0Ap5d2vSy04x+4EyhLNBj26v3fhqsQcn6Z6a4KwdLKikQaoiVxarNgN+CFr1yDWsPRCqJMe40bhwuS4sWkiGWh8Cv9gLXeNDdRPqaqgBh82GLE7iFA\/U5vdRjLNfTPPFimOZbexduSJLGwwVJejCCwbDdk7Vba1zDnWr6vIMpidFE15bqu1CaUX4wOlMw+UlJ\/Rck\/7v\/g8MgCArdyT52lbEFkxfiUbz9r7dzxe9yAYfnvExfNJocGmNo8cp9UGEZb+Z+fpXkVwNrnTpe82QFjYekWIeghnThVtpzRW6HVEFowML2gXzrgBYWnXVabb+z8NJa9KhgDfRxGY6Qmo7vTY41l2P1aqPcxNOTuIr8rCBIdn5egFmlP6+j3I3zePWc7fsh+HpzbSu2qNxOPfDHrqGgaMf65DyMBQwQD\/2tXTWsn7Vrz+vyWwxpeVt4t+pbwKmIHhkkdrbIJF9mTZzSgQFhOrxmOkT\/t3tmzM4BHRcRs6UQmLnryAbmkEWPDFwWiKG5ro9OVh\/yjexJN4pRIEK9lXHUYCFUgWFM5ofQyZB+jTZyWZLMauwYFWJOs0N1nGD9gUKucMB7p6NqaNEaiwlEG2gf0v2FH9hCslV4oko7fHx3ROpToSYQVimVoCtR9PaGonSHaeqACfo9ua\/Zgtv4cLK6ZiV6DBCf0hDnXZRBh+AaUTWPTe3zcHlDnUHvaFFceiOwKcHKvhC9KWiF3Ddru0uKWSUsFip88BcKpuEabKb0ahOEuMl5XsFJ1\/uDvSVIy33izzMs6n7C\/k4CysougNKX7DiugyzF6BQFi\/VUl9waPfDhomR8hH1euFy1YjY4M2JXUuQh5HV1TzlO4okmnDSo4ios5+eDuKBV4YUuJtBgKFC+X0w\/PUhCXpFy4X3vOqtG4h5S8jL30h+8K84dZjAHTEkJGOvPZIghuHCBB\/bpEvq6Mbt2MCtL\/lIRUUPwjkSauaRIiWSBq1YTOD6X9dULjF3V\/Ewiw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"PKn0qB\/spJGxgjQ5ht1gCSIhBNg6MSABGfAABQwhVAAB\/\/4zO5YgAQsHCsnVrqTT\/kdpHoB9AQTZbQAAAABgAfkDBNgRMiABCwcKydWupNP+R2kegH0gARnwAAUMIVQAAf\/+MzuWlyERUgTYFmvNCgoKCgjw7KzpNo8oeAAARL4tqmRQ5KPAPbdPUnedDn077kKWSLkPygVEwdGpIVFWcp2en9F3ERED+OnUg3d8i8AAkr44lz5aAq3LC+Q212cavhgupcuDcqNoIGhnCIfm+QSZcdNZ4zXfagNI0pLJoRsvOsL\/uXGYxbmgqR94yTDxQ0eUCVIZASIUeRZjEvJCthWVFT2rgBlBR7LYtLcvCmtn0DIMTAiPE\/xh01OGF5bAJQ2pznCPuONfdxbRDf26\/K7Vorl6tUQm\/NY5ROm8iHLzI4aMVUF0HjSu3+YUC1uhFUVddfTvpusRwaZ7kJNAa7P\/Vy96rw+N1QmHoKrViF3SiU98y7yZQbZlWxDFuBm3kfHuLnWeUnH4lwkgdmjgDw\/tGYT9JNO+a4WXT0WG+E149U5CDNgHVyClW14kVzq2L5mwgYWZMAo+lEamoeJB5h9+NMm0nQlLQivIZYDxop0vohOxK5n93lmaDplwC7Jat5ImroXJjGBA1i\/wWMXgstJIth+GejqRDCbbbeG7NxvZ9rVNx+l6f970K8CtZlugC3GRbFE9tMsDJl5zdBgPz83kXeLW4WfxGljbZ2I1\/Fsv5Dj9XTubdhAYt4ThM0knFSb5aX6Ff26rVq4Lfqy9HtKxEerRRn\/GPQ4yjlBfNoPdWIbjRC7TEbcUSnLf\/aCaXXZvuxf7r562GmcMeGxyHBQBVeTMDY1abEs7sWm\/+SOMgorJmIj9ISqcpplInrkBzayKhF83lHHurhCA1lrKNlSdpeepOLCf\/jMxhKTDSGOt6PuvUNMjvuJNj7JdWjB1qgt+7yg6GfadVoLlc7oKEmP2EZkbg1reAwAQOQU0SIVyNqN7R8++hQVFb9WO4t2FPgkjCkOeg8PKyC0+NKn6ths3s033xQ7XDByeP8Nn2kj5mf2ZY2gISmQLZEcrz0CUqG\/ia+5tqLKj4+\/Cndt6cFxpPnK+zzcl+5uVQbgnRXQJmrxZO\/AIu15jMIC2BXo7iG1s9T31lFVuK8ZWVw0cL8LlBKwlz8kc+VhdGPCJrGwt3wYzDhn2EetnDAIMnbnceC6ASm4ceWPn7zfseGSdZHnqg2ItW2chn2XlcQp4yI6MIqqKBep7wjkYIzq1Xg27JeDrqOB5eSz5nPdiU3VaODgQWCUUbg9ghrJZfwLkGvswGRALf+EzPBVkuJnFi0tcoasUB17bL2uvxmMJsQHWFO1QguLm7aeVi4DCA7LeprVfnREJzlwtTcq1k5DYJjUcopXIzceZ1RbGyvZp4+Cg3kMpFGVYKly62GUic6\/xL1lutLalr\/JjiJp45zRjU0jch7XG6sx+An4xZJK0US\/g0Kv\/HVtYynUrwZXu\/woHqvI9+NK8siaNZbHMUKRkIGOXCg9aT\/yvWLUSR9BuvtiEH\/8yVs7NtMMrdgpTQTivJT44BZN6SO0WXldGZUkYPP9OVZchj36EQYpACosyteNK+R\/3v7MWWO4pEsgkp64XBxw2OWJLRgsbR2Yz5fH7LkIbs0gEHDj7\/gcfuV5kb5ePRim1rmsSUQI+hvJlOF3Hyyb3A9HUl2d7fhX4v+4KZA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0413{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3DrxAAOER4SQocL88wKgBgBFS0h8AI+oo4AAAAAAACHAbjQjU2gF9\/wAAIP8AAB2a+srq","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3PlRAAOIRsIwocL88wKgBgBFRtfAAIx4f8gAAAAAACFIdWLoQ6nMg\/wAAIP8AAB26Oooa","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":73,"flow_packet_id":1,"flow_first_seen":1603816434855,"flow_last_seen":1603816434855,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","l4_proto":"icmp"}
+0456{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTzwsAAEABAQrAqAGAKHC\/PAMDpwYAAAAARQAANz5UQADiEbCMKHC\/PMCoAYARUbXwACMeH\/IAAAAAAAhSHVi6EOpzIP8AACD\/AAAdujqKGg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":73,"flow_packet_id":1,"flow_first_seen":1603816434855,"flow_last_seen":1603816434855,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+2079{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0460{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gCRGvACsRNCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVHblQArGxDIAAAAAAAI\/VKHHlPIokDaehpK\/wAAHf8AAB7\/AAAf\/wAAIA==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0405{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPS1AACoRkCmM4zRcwKgBgAG7k5gAGycshAAAAAAACPBGL7QnI4n3\/wAAHQ==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2080{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2075{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0449{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":74,"flow_packet_id":1,"flow_first_seen":1603816434886,"flow_last_seen":1603816434886,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"133.242.206.244","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+1123{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":74,"flow_packet_id":1,"flow_first_seen":1603816434886,"flow_last_seen":1603816434886,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"133.242.206.244","dst_ip":"192.168.1.128","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0413{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dApAADIRazjK7txcwKgBgAG7mBUAI5npkwAAAAAACEmkvxz+BSBNGio6Sv8AACD\/AAAd","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":89,"pkt":"PKn0qB\/spJGxgjQ5ht1gCwDeACMRMCABSAB4FwEBvnZO\/\/4EYx0gAQsHCsnVrqTT\/kdpHoB9EVHPlAAjX2HlAAAAAAAIQNHw6Rif2eH\/AAAd\/wAAGxoqOko=","pkt_caplen":89,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":85,"pkt":"PKn0qB\/spJGxgjQ5CABFAABHK1BAAGER5T6KW7yTwKgBgAG7nCcAMyiZ0gAAAAAACIcn2n\/RE+TiKroKmv8AAB\/\/AAAe\/wAAHf8AABz\/AAAbq80AAA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+2076{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2069{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAqvFAAEARB5TAqAGAjOM0XOJGEVIE7Nl7zwoKCgoIVNEfWrpr6t8AAETShrfNzo+9qnp+G1BNr+NPqmFaUkM\/h55Ql4tGCbbsST4ZsCOJH3iZ7JYO3P49peChePaLXVKdLK0YYrWQg8t7GmhaxB2CD0+epzIPZ66VD7rwq7OnkuE0fTw+H+5DGN6C4OOaKSyCoq+NFx3IU1x8euebBttPq2OSGkdu\/7D4j4Twv1xRu+oxQ8ZrSg\/kIQ2o7Lek57FPo3RdQMWtxO4D50KI6aMOX\/4vQJ0YhEvEZTDLL7P0zEYBS3FkfG5BRMnNM8OS2xFuAGNP8egA0odaLPbu7hnKK6dqMsWCHXaL4z1ts4rvHfV0qtZtYuT6HVeSDg+CFgq5ceN4wJte46d7MKuBURz7EzbVM2nIWikcCm+z5g\/TKbq+4EUu0UPWCrnCi2R0y4zlSgA8otElFMwv4eRVPM5DIi+4mgq4QZXLRxSncdM+e8i1FKdabyKf\/fgPnNPiqktWD2i\/Ytn6hwb0PT829KyNV8w8qQuINiVRNK8v6z4uDo1gpRHQGoEWEPzQmF66aZKhJUDALz0aLvuNs6E5DxkA7evDnMKx23ZgpplW0LpXvfZBf6sTpkqYA5bTCnoN77HxsbMVqIiyOi7BUt81Gm3oiul4eLOGeaupfnDtOFEmieChpFRV7QqpHR1gtfSZKcjqWsbj6yWSBfhj2IsVhoJ71A5dF9pMnHo7jzgI0QSId4q\/oBYeRhid4bbmPnOC8PfYUnLIeUTOc93iRQWwFW46ErsHgYcXsi8Kn65IE59H4qd2EfKOfDVq2FLXmwJm7OvBihgIS+X7vExDef2swcqSsItTKC2AEzOO48HPyOwQptpPwgdGzJZs10c50pg+LjPS4cC2KJBhPCVxFp+H1hQ12K7OIw6JRpTBgkRJyc5I2q\/VVKCZMXHjaqpVvycgRI08WMg+udiVEO6h+zKcZyNwJWwzUereDujzJy4kiGd5Q9nfNls85HhBiVfiWtWQA2IPq7ByLuONs6slYcfWmUoR5FOT4bTXkFSaONzDzhyg4gHbKvl7ndeHBoZA0iJ9K+n3W+hXA6WXw6uxieTqhbMdOQWxtLpMj4kyapDXQK7oZhuWyn1DF42N3y8jGmDuPxu2ETw5a49l2G37BVIw3scgJ0nddPhrj0zP7oEo+ekUENWF4pWlUP5Vx2CoiUpES577jZtdF+tdrAOeLVZkjD8eutborUoKEL\/vOt4yhj3o57GKGA9\/ybf5hbjojtdUNQqxQG55Acf5EMCz988WMxUNz8xCYM03n2C3QkOCdeodEEdHE\/QuIGQTlKt3nx1a7RfKBqe+h2OsJeSBzTqY3F35YiHnZvMCL1V70Hvo3moBF54RZwYiX0MROTBa8aTc+Fxl9EMhE+Pl\/rompnMpyNpDSyVm4UHe62Qx+QRaDkwtDoMxO+P64lmUE4zOarR\/nNH5j1TlIuE0TIjB8RiMvS7syyMZMp0+\/XnqsjuP5dy6Jm3KaUwMqJ8F3AWAoZvvcHPgwyOZoalFKfDP\/GAH5cw+fi21jidpbIXLmrk6IfSGScy3yq15JRb+cF3rRexx4pxdq9Hf2YRvE7vSiJocrJzQsagheeOZEsExtdqpMmUp8kXzR8YYYVfrEAPxvjiuO6w91xT5BhuCWvCmY8AlF06a8Pc+PpRpMSQ8Pd\/Wkw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2090{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0407{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPTpAACoRkByM4zRcwKgBgBFRrksAG92erQAAAAAACJZN\/7MPP2\/M\/wAAHA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+1114{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dBtAADIRayfK7txcwKgBgBFSib8AI+xbogAAAAAACFeKq\/FEwSt0Gio6Sv8AAB3\/AAAg","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gCeH9ACsRMCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVKvfAArQwadAAAAAAAIvt5vtMKFu8B6SmpK\/wAAHf8AAB7\/AAAf\/wAAIA==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0405{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhR5AAC4RsJCF8s70wKgBgAG7pdgAGya42AAAAAAACPkLBqrRWIwP\/wAAGw==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhR9AAC0RsY+F8s70wKgBgBFSsx8AG6SakAAAAAAACCdOUNOt5HbF\/wAAGw==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+2071{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2077{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3DspAAOER4RYocL88wKgBgBFS0h8AI5NpxwAAAAAACHAbjQjU2gF9\/wAAIP8AAB0qivrK","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816434,"pkt_len":97,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTzw4AAEABAQfAqAGAKHC\/PAMDpwYAAAAARQAANw7KQADhEeEWKHC\/PMCoAYARUtIfACOTaccAAAAAAAhwG40I1NoBff8AACD\/AAAdKor6yg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gCRGvACsRNCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVHblQArPxCkAAAAAAAI\/VKHHlPIokDaehpK\/wAAHf8AAB7\/AAAf\/wAAIA==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0527{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":145,"pkt":"pJGxgjQ5PKn0qB\/sht1gCTD0AFs6QCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRUAQQRVgAAAABgCRGvACsRNCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVHblQArPxCkAAAAAAAI\/VKHHlPIokDaehpK\/wAAHf8AAB7\/AAAf\/wAAIA==","pkt_caplen":145,"pkt_type":34525,"pkt_ipoffset":14}
+0405{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPUdAACoRkA+M4zRcwKgBgAG7k5gAG+grwwAAAAAACPBGL7QnI4n3\/wAAHQ==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":75,"flow_packet_id":1,"flow_first_seen":1603816435020,"flow_last_seen":1603816435020,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","l4_proto":"icmp"}
+0441{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":89,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLWwEAAEABm4nAqAGAjOM0XAMDgJEAAAAARQAALz1HQAAqEZAPjOM0XMCoAYABu5OYABvoK8MAAAAAAAjwRi+0JyOJ9\/8AAB0=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":75,"flow_packet_id":1,"flow_first_seen":1603816435020,"flow_last_seen":1603816435020,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+2083{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAaXxAAEARbePAqAGAg58YxobPAbsE7CCRywoKCgoIJv2XczUh4RIAAETSbCxdVvXUX9XjSdEekuKYBaaXvtdleeAoC7w0t1zysEAi8tmmk\/irguMUfevsR+4Ix3ykT3XI5ywdd9iZ2jEEpXdKcBNTILwVo9RsE2t9EwWhoq5\/2T\/d0RKrFr8WtXqw8R81Lc9NfiQcl+03MG9MvRdcSultVc\/J1\/ZsUKnUEchEiSxzxC+Bh9AJTZqdlAjdxHnzTMm8xi3GQm6bMwAMTxvoRcjoGFuP\/jsOpyTpax0np5jI5wvAneUYSZi\/TgHF\/m8zKEHvyg7GMb3qHu7n\/RSycakCUo6vcofHTkxeQVCCRngbPUJ9tSzw1NtS2gM31yeDwbXURmAo9cCWFob2vDSUwjpS5E4Bzmlgq4msvVlsTMrZEpAhNoUHdjHy4QjtukGArqr5ysTKErAC4Awr5rI3yHlLGqm+45AjHIVXYBIC02L4V+2\/NakDwhKYWvsC8fxBwr7XFo9wng0iEMUuvvwpf3rRyeyquDhJCKiPgZqbE4vibuLP3YjbRmkwnzwoxp4JbGmV6sCYODAB+6uR9yWT2DvYh2Rb\/rOtm0wd1MTHRHgjq65\/Q9ZAV73R3b3X9eYSSjZWx+KotHN704t02EkkPjksNKXNye16bccDD5IXgwJUTDiyc6d0LRseUDRuGQDw0kuZ+ll0kG2i4WlqtUdTnp8918DucjmW2VDKzNjeIA39VHQWqziQ1ddqPEX2hN++O4sXWiPb63hxUkBl\/1utZAUStyF7eS3pGlLVhZF\/znUUZa3M+0DGGywvSBI2oj4pSimzVz7N20pvszlriqxtYYleocY\/YE3jUUemgCpo75mWgtJOBRyLbyK9A6hraxh7Olf0MRas13AcLep+ICMnSJfWbjp\/GkdnPkR\/C5xIcrNwENdzdFsACnHqaoD2O6863JhZYdMEnWVSkYIq+Qo3evifk+os89mbDYj7FZGfwtqfdt3rABEss73A7ji44N9TcuujgLAvCHsKuJvwI7zuwPeUe9hxI\/RPeoFnolmIFjlDPLJQoIkxVdnaINbjrLTY2LfZda6\/LCv8sM\/bd\/AmWDDDh73GxJl1z703OS5uL1l7MQlkB\/g4ilEAjMQXXXHecuH\/deyjep8GWLhkSiTJ4HHr+05f4SIdPiicarLt9LEk2eLRpP+UFPHooao1g8mjZx0KcuHnQr0iaMhZmOeSp7JakH1ow9hqHE6Ef3Xm3Pc4cZx4QtZl7vmWkwcxpbDzsE83GDarD6V2tKvmXQhxD9\/w2J7v63jI+9Lb+ZNkqXvr7OsDvbbvf2VuKSQhAY47DGEam5DlA7ysmY73v2mnyh5eWPe3e\/N+mJaLUlQ6UUxA2gOWmJj17O3Q2\/OSuoxzzA\/RzjfOOrzblYj\/gviQOtnjWavb6c7C2hqIBHAiEqk9l7GIM9LKnUeZw2+IvAmVQbKf1z8qvly8H0RJkDAyVeMEDY4Oueq1xKRIhCACrJcwvC8lIz\/kBgPhANKqur60SDXAg6fF5Jr+WTWixT3BBTygw1VtL5D2yCH07\/ZeeZ6+sIIJRb0PchDdQH+b86Sz3C6rgJrYhidtZTL8xu0okPJOirpfLuxNgzMoFYlSLzK2q+LfyeGhBlFnlOErJr7Z3kyibZ8CPOcYiSJxmJmJS2Sz\/7dQIIdrxSXIOJ44rg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dB9AADIRayPK7txcwKgBgAG7mBUAI3bptgAAAAAACEmkvxz+BSBNGio6Sv8AACD\/AAAd","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":97,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTFFcAAEAB\/B\/AqAGAyu7cXAMDZqUAAAAARQAAN3QfQAAyEWsjyu7cXMCoAYABu5gVACN26bYAAAAAAAhJpL8c\/gUgTRoqOkr\/AAAg\/wAAHQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":65,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPUpAACoRkAyM4zRcwKgBgBFS4kYAG1aelgAAAAAACFTRH1q6a+rf\/wAAHA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+2070{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":85,"pkt":"PKn0qB\/spJGxgjQ5CABFAABHK1FAAGER5T2KW7yTwKgBgAG7nCcAM2GZmQAAAAAACIcn2n\/RE+TiKroKmv8AAB\/\/AAAe\/wAAHf8AABz\/AAAbq80AAA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":76,"flow_packet_id":1,"flow_first_seen":1603816435054,"flow_last_seen":1603816435054,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","l4_proto":"icmp"}
+0480{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":113,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABjzKMAAEABpB\/AqAGAilu8kwMDBlkAAAAARQAARytRQABhEeU9ilu8k8CoAYABu5wnADNhmZkAAAAAAAiHJ9p\/0RPk4iq6Cpr\/AAAf\/wAAHv8AAB3\/AAAc\/wAAG6vNAAA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":76,"flow_packet_id":1,"flow_first_seen":1603816435054,"flow_last_seen":1603816435054,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+2079{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+1117{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPVVAACoRkAGM4zRcwKgBgBFRrksAG66e3AAAAAAACJZN\/7MPP2\/M\/wAAHA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":89,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLWwkAAEABm4HAqAGAjOM0XAMDgJEAAAAARQAALz1VQAAqEZABjOM0XMCoAYARUa5LABuuntwAAAAAAAiWTf+zDz9vzP8AABw=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":69,"pkt":"PKn0qB\/spJGxgjQ5CABFAAA3dEJAADIRawDK7txcwKgBgBFSib8AI\/xbkgAAAAAACFeKq\/FEwSt0Gio6Sv8AAB3\/AAAg","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":97,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABTFFwAAEAB\/BrAqAGAyu7cXAMDZqUAAAAARQAAN3RCQAAyEWsAyu7cXMCoAYARUom\/ACP8W5IAAAAAAAhXiqvxRMErdBoqOkr\/AAAd\/wAAIA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":97,"pkt":"PKn0qB\/spJGxgjQ5ht1gCeH9ACsRMCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVKvfAAr\/AXkAAAAAAAIvt5vtMKFu8B6SmpK\/wAAHf8AAB7\/AAAf\/wAAIA==","pkt_caplen":97,"pkt_type":34525,"pkt_ipoffset":14}
+0527{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":145,"pkt":"pJGxgjQ5PKn0qB\/sht1gCTD0AFs6QCABCwcKydWupNP+R2kegH0kAIkCAAAAAPA8kf\/+aaRUAQRBCwAAAABgCeH9ACsRMCQAiQIAAAAA8DyR\/\/5ppFQgAQsHCsnVrqTT\/kdpHoB9EVKvfAAr\/AXkAAAAAAAIvt5vtMKFu8B6SmpK\/wAAHf8AAB7\/AAAf\/wAAIA==","pkt_caplen":145,"pkt_type":34525,"pkt_ipoffset":14}
+0405{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhT9AAC4RsG+F8s70wKgBgAG7pdgAG2C4ngAAAAAACPkLBqrRWIwP\/wAAGw==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":89,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLAScAAEABYbzAqAGAhfLO9AMDFDkAAAAARQAAL4U\/QAAuEbBvhfLO9MCoAYABu6XYABtguJ4AAAAAAAj5Cwaq0ViMD\/8AABs=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvhUNAAC0RsWuF8s70wKgBgBFSsx8AG5+alQAAAAAACCdOUNOt5HbF\/wAAGw==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":89,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLASkAAEABYbrAqAGAhfLO9AMDFDkAAAAARQAAL4VDQAAtEbFrhfLO9MCoAYARUrMfABufmpUAAAAAAAgnTlDTreR2xf8AABs=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2080{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2079{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUADmxAAEARHmrAqAGAilu8k8YREVIE7EFDwAoKCgoI6izyia7+eS8AAETSWsoKRSbbMcXlJ9i2n\/ypQy5swxT1x\/B7j39ib\/Fr98Qv3tBvSqJwqG1o6aVHKFHduWidlhn2\/wG\/\/vgp98KAtdB4breKaLxrdf4AsPwDFdxQXqudHiDwX00FdRkgAHCx3KUdfhKpkv6Vh5mjf99SXjKTd5DMOYikmP3PwgWmQbtSBzMEidzHP6aVzOzUslJkA3JERLYTw9X8kVVMN+ffenp8oU5vG4ecY07PgtHi1qruP4WlDQzMw0ai7MqVJZuUaoV+1LcUCg+mIB+c7hiShXEL6cbhXCFEYl\/7Mr7f1MSUcI5VlBsIyqBKxm4EKW87jgHFO9KlSrUhUJFTkLHsP04Ik80egy3\/\/yU16m7DsNaXoCOyerhhAC9qpr2+bjlB1y31vvuM3jdSHyU1fCUiTLmmj1Uq\/iaq1fu\/Wot0UYnbkSWZOIukImwV0WzXLwzw2tzHIxdme0QskCK7s5ne1cEsFAusJY18Xn1jylNVmR4WJC57vHuJToFcgK5oKfE5PMyK7JRklLJ3rglLEtHvud9WwL7Vo3Pze8fu0xawLU3AAfCwIQOLYDN7kmyJl6+UjNaGgcZYryrRJk3QyDHKihdXV+RnXlvjuq9H7Ybtgivecb9KI7wiOrsMm3aeT4kz5OFfBvE+pkPj6ytetYvQmll91dY3mSjUTyeC+Z250qrQPWfDe2zWOJr4AorHiSx47oXg\/JCs543TQevvKbqGV0HRwep7QbzxmE6wxqph+9BNyCj6\/IIkdOfhBpQKdF3u\/1U4myJA9CuAX1BLuMKxqmU3PncQ9EBLgnv3wBHcszWjdK7gtKwite\/GJ7iBhQbvfpj041Go4D+18ng0QlSEkzPrDW82OlsPDrFhW72I\/Y\/J0rqQAd8bDglhYUfzKjf2d1pNSeOfV3p40jHQajLAAQ88cKoTBTHvmZDxvYX8iFJhw3oz1HCs1\/+27aic62Z2gvwiAk+Jo56JDooB+y\/f9nS\/ZDIrge5JrYH0WemZhswEUIDjnnPL8kDaOQBZ\/I+5XeyYF3Id505R0CaeeVCQ89tQgTDDMR0Ct3j4wiBbvgamF9eqbl3tEGK9olKd2H8ipKh5uHj3uS54eLIyWBNuiqnzAXTYN+xWdWiEBPX+3m2hqAg0Vg9d++Vf10gPIZA6goB85\/12+O5G0U\/6mrSoZGRT3UKparbXhexz7+XYJmebPvG+IkIUAPnTrVtwlwVRtXGEoBYAfCpdULr6v4mP7rnlIMWdKd56Gv951ILcRDwO2Pztigm+q9Dxx2WoRMvgxTRo9Z8Eehp8tmYccZk1Glu1jEcwai0jPE9rxGVqJKwhG\/L+5ya4mUvOrzFe6HhLbgQWP2gER2uRJNk\/9WCwZl0lo8JHrGyw8IAMj54iNfkHidgd8NW2qefGSJJ3e4LLTa6C9dFXA3W1EMhLPam5itKf7ND061JNW3a8iCmK50IhEIvnhZgLgU7CHErH+TwqucALnIxkSx1jiRNRHpgqSr982hm0t55S08KcPWIfTp5gq0DuPr4Gw+UoF4xfKwY04wUvGCHcyvfZ769tDWvMykyKr6On0n57cGNT0XfoYTkJu7hpsMZvG5kEGFwhypi9mYImxMMz+TR1eixH3wWCMAC\/emra\/2dC74LwXfgAuIRKdA==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0407{"flow_id":65,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":61,"pkt":"PKn0qB\/spJGxgjQ5CABFAAAvPV1AACoRj\/mM4zRcwKgBgBFS4kYAG\/md8wAAAAAACFTRH1q6a+rf\/wAAHA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":75,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":89,"pkt":"pJGxgjQ5PKn0qB\/sCABFwABLWw0AAEABm33AqAGAjOM0XAMDgJEAAAAARQAALz1dQAAqEY\/5jOM0XMCoAYARUuJGABv5nfMAAAAAAAhU0R9aumvq3\/8AABw=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":61,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":63,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2070{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2073{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2076{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2083{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2075{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAv\/dAAEAR56zAqAGAwb4KYuh7EVIE7M2kyAoKCgoIhDOd38iF14kAAETSAN7UFQ2IlKoILOHUmeINnn4Qq2savsj9hw8gE5EiGsdSshCAQwWImOn7T9184jnFEiIFpNuiYB5XFNPOPFBl0e1GnF37PXMX29TfoYB1P4hCxS5rlDW7KKQIqdzlYFurFdhQLl6VvepRCz4h37pLJGEDp8sjeuu3pto7V8zQeFExUNNZEiRBdsIuc7BjIukiS9yW2j4H8ZWRtAkkOauLn5IbK+GUsoAaaRtQPnJvKYRQ36JZjsc5Os\/iUMv8GgzJ8\/Rf6k+iCYI5ChjJiMJKAp+cUGf+Qc7iLjbH0sOpjwKqgriNLJvCYC3LDdQh7EVYNyT4OUPYjBLq6NtZZLbvLZTzuM8PeAHds1Jf1AKvj4zV1zhyWvu9yRkh38NNFPm5q6RxrUofh4ulRrwDUOtSzvr84IVzwZ06dCavE3X9XYV4AQAud22BAmK+K\/Qek4Kt6CTvBlO1lj+1RGxN8Ky4c747tVF7DtzsRXUU7LWyy6X1rRd2wFmF2JeLI1TwxnvwBNPa2HEg\/Oz7A9YhiflQG7YAIA3mma9sFiwVVrZprdE7syucn\/MueKU1g7JethXFvZa2KhLVIcCzSPMiqABO7e6iZ3Jp3k2OX35\/JBdLTKVl4+KHz7gyvMQI3E\/\/ea4jLg6BbSA\/wLncLgQniUFco8LSjz3W7jTJ1xALzFWouhv\/xHusZKEPl9+2mzRmJVT7R9IxTrSnBZWa3aOXJ2LLZGd8wsWol3BmCfFKcO8sQtMOxwWE1rgJvyjjODpzUojo50KLcHUu7JnJYaaNWwLdYT5n2z\/gxvdYv+a396sm28cTWlbTHUBSrNgcsZyFFQtRZ+OVRrZkugtYClVo1isGfJWO\/yaWZpkSGMuFIAOq6xAhwbuM2Ag4HX+YvXlFgZ+Y9nbEsXF\/BR2U4WnkN9MNhptiwwG\/viIJvKLWQ+bGXnfsgSDrL91zP+CifDwmyqCLnaM6UxEkpuCEq9AYZoavfyGi1yMVcAExmhNZBWWpViZjgqzLi5NW78Lr7a5tHwUtXrWLplRNJi0NtM8v79y0FXMG3r91eSSS5ZIJRsLXSXA73hwrwAzTttz55nhYigO5paPo5O6MNXRPBBf1CQIMrVPTlWp6t0QM3hzAFvX1FTgQ2LnEhbKiL\/Yb6vZ3D9zZAHMBEu1FG374l1Q9fn\/i7uKnOjZQIfVBTLzsCsjt7BfKz\/uTZUKvGU+ydi1kr2fbRVxQQ3N6l913YPjHYl7wSlYEZvZ4rlLTw6U4Ky7EcsPoq9jIAKIsKb6sLPqQnkirEAzuTGYKCtUgA5TmHlqkfkIJnIrrdyfirEOIPgeEZ+\/XmLU7fCtlSxC+YS7HumB5eUeEGYbbO2Qaf8zNRhPwhqyBvE+t9znK0xllTMKa8tcZ7HSh9GXZOiCWVd68xdkJcvf6+i4FYPAOD1SE3hmMOHbfySRWDWGjmzlXUJUJBSZl4hgcT5P4pe6sy9mQI74ZNNa5LINXzIv2YQjwIcSR0eEE3h6JBi2dQvO7ZJAOed4MHs\/4bdKHFdQIdQIo8S\/uEzvqhY7Dx7C1c0zjqYxnUn\/v9+y4txErE7Gsr9Aa9vq4tU3Sd0wcQ1TkQmw4y6ofg3G4vwQZH5wnNtggMr\/pA9XHdADIft9wl+P1lqVyvkj3cQ==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2068{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2081{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":61,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2088{"flow_id":63,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816435,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2086{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2083{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2078{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2078{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2087{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gBrqBBNgRQCABCwcKydWupNP+R2kegH0mAB8YIxDSMFEDfZ59dTdPtKIBuwTYQ\/3ACgoKCgiO5tu+VRPaUgAARL6a\/oQKHaQlP5eYVyz2zSTs3U7ow9uu37981\/emzOPow1lk\/CiXIjgQJh6PSnYA\/oC1JtgAwQQH9lfyYNvt9ziFUZspFe3a0zwsRl41JSv7zTbeyiRIgP2ZaIoF5DMBNsI6UgcqMbgd\/7rgJHTMiZn8qF2GidyIBSfgu6ULd\/uBioD1vij\/++UESrYKbjEYp84hc\/UGBq6LqbZIzBAGdT6gszXTbyGc7I7bCGk3mhE4prPwRa6pi2K9DePHmt+OeIcfKDkqFtHW9aNWvfaC5MxlBn94TXCiqNJVOjB3SQlCwS7AvA1sRNnP7\/+4JMPAiTuQrMPZGLhOS6j4qg08wC55lUjXxzeof0aqyttOBsLxyIqvpeCiT5Qp2cy959OM+bmws0Nlb\/d8LcC\/1rQIOmBSQmNiRF6CbSnMpBeuOmeVHIqPtikd5UQCqO1dU\/vhoTGTWnYw8qE4lLdO1AqN2M8USmdoHTJFHR27Pv+qEaZXcdBWscb6K3OOzfLSDWHWy0TkBf\/F5Yjq6s5Nt99LyBndSVpBZvNgFZspc6fVJwlpnIikf\/yJeYuxSRHg8WvXYOE33aTA\/U5PyxWx5U0wYL0U3rsPFtjXeGLX1ZN\/8kwOvxKNUK+sV61dM7vbuHv6CyctaQKC4D43oj6is2Q88oMjuVKZfTRmBDX0XC254isDEP8PMCov61vLd3U98Cvc9hYM3LlGzuyYgfSdySKhw0fjbdNPeTJ+iBRXYMa84qsjdWZ5fmzTEhNif8W3jM7KbM6SeUXlmdtbZu\/wz+AW253RuEBjnax6UzFNTxbQqQrxy2WbH3iKtfZyPm6\/ozJnQNQ3r8uiC2s4u3hbAGmdZuxcJywHDGP\/Jw7jaF6EBgGrzSga0l5D7Acn6qeWGW7h4kCtNOgEfQQ\/yjY2TEmjw9V8NkC92p3RO5rsTWaqlBB2e+TOnqxGosm7Bu5wWkE4aZ3pdf5nQt6brKpocBI1mP+55B0rcaSdmwEhmTgKeDwoNeLnY0mnlYXZu9DnI\/Te1trGSUN1Ghe\/oEMAUujzLAlcN+x9ao2+CpUUAE9mC7R3TJsVkDQpYvBLVcQGJqlzkL0\/UG0DIILYIF\/jhna7b4PeKRyj8FUpsXPBU8xm8IRDlhrB5x+TM82cIOHZ8Zna6C0kL0dfACzfIo8Ktqn0C2l72Ti7qbp6w78a4oT\/tcICHkDx9AdHxzeeKgItrchiVcGDhax1xohWEr3AlpmfxezmiGIR0unXpFy37B+7pohRfpfpA4I61qTdc3B0rpqEcqsmyTIFXZHbI1\/p3Lyc2PsK5cV2Ja05mXR+d7bPIThBPIDqOrWc47viMtg\/ER1V8tGRYnypquPxzNBqmyIJWo3U\/W3N+qkaGRs6hg\/bPmGDWU0ACuWKvijiXNucunoq1ElKVpRkS44DQljilWSs7xAvSxCZrBgciVR1b3fDpxRjHyjRNl3S1crFrHy1R6xm12KwMP37WoB3S4GERxHc6iQ5MkITlZJV05uI7\/gzHdND2vBngpaZdt4Sak0Z97V81nCCxh1pI2c+3rdnl0HE9yYcmjqthTpZFrILa3OicjVHk\/90aCG1kCJUtzHoUR+LDODcY6phVlI9lyo8JwMw8Q==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gAgKbBNgRQCABCwcKydWupNP+R2kegH0mBkcAABAAAAAAAABoFggmo4ERUgTYgenLCgoKCghziEmCXfFrHwAARL4jeYY6M8aH\/zn3ercXRLnmg\/d43ZAo81lLn2q+OGzthM7UYj85WoVmfbcKHdhYAa1cgKnlrYasMQYAgGv5ALC00TQ0\/jLYOBguAHLRNZgSaGGheUgL2UIMaTM5IkLoNeV4pcfDEdrIi\/GIxyIkkbHLIczgbJvOBkqRBrKxDt93TXunVrx280I2hPZu8N+FUprg3hJ4pp1kYgyDHjPYPWXFa3qvktXZGlHUnVeVp\/3p3NODhNBXShhL6BiaSJNUQXYGOP13nePip8yhFPhWa0Ouqk+VbdHPkDE\/G52Zl0sJacZI6rsMuTZ4yfdA2P8uwCZs72IfxkRIkckIGQ8nULvCekPbWexNK9J173RMNoF1tzncTpr1EPxIjSMfXpXqfUeumrOji8uQZfgEgEyLhxIiXKgk9b84qQzXj+KroVdChvEi3uaFmG3hgGUE2SbFg3EeyRy\/YB5XdJ\/8XJfm3gO\/ipzMAmFaQNglI0EgGcoQog9hG3VNBCskcVIfs0RFrf\/LCZt5Kfur+Ok1Gf+8wRzhd7WyMlreZeuMzLT0FVfmyA1wA3Q8Fg+8QP8eV135oyDBXDewd0cJFXJTPe0esuyRY7NrswDai5qOZFPXYHQhgHQYoJuUwo1OT7zVi7X9yVbc4jdqkhDQ04RRWD7oMSW2MiqLBtCSzi\/fi9FwJM5tCQkcOY5mHLDphXM\/aevOTzkgXaCCia2WNxQDvmcvhg2LLAwa0C+c2B2DzUl1Q8BXtbciEVIKNldH33DrWMS70ubipjHeZXbK6ZCi5WgyB6162Av1RM4t3z4XSBmcmIbasWbHcDWpQRgaLRCq20Q0A4jSkEnde9f\/0KSGnJrZHcLXIa9ABwrtmCjpulGRnD0Sb0cYkyBpwKGRhJG+WIdYRTt7YXQXvDeBXqcd\/Q1kZqsVy+FQbP3MszYvkZtk2F9t9X02milTINKEN9Co2gbGMbtF9egV279ZQ2gC5R49VHjd9q\/hYZBNi\/YMVMLxyiM1q2oY\/VMRSffQIbgdoiLckS+ezJTSlLkWAnTbEFsrBCqemUgf2NuQck07zvx++MGoHEKnxAfYyoAOVL6ML1XvrvJ6Y0R06nclF\/A1N1kceGa4OW\/HA9AclWO\/zKf1ybnyY9cX13MgVQ8bGumh+Fk8WgH1qNc1M6POYN8cf7YlZd79kuSq2h3Uxy2qilkq9z9qm\/4jiMdx8aPDb4420sJvPRP4TZpMTHHXErvoLTH5gEWukkIEjNWuhDQhVIfxkPvfpZF7Op72nf9QmJTViYkj9gDJYCQjOgEObkBbKnxi4ywe1suxbM\/2hs3b55f1r8T55uPjBL2xouPWjV29exw++GwYbaHTL\/sHUSN212fmZ6MIaeZCyUVftsKIQINoULR8Jfbui2B3A7\/NicuzVoXnC6PSvdVucXU9VV\/b8tQ9t5jeERkKNbMWu7IWjPN5p37VarrdBUpotqg\/EQdECIZtovY7fQpYkj7BO6Gl2j78akYbDGzj2zB9L5sR9hOxDgCcZchskWWmL6gaYamh9hmC+dYBOcCxdh0KMkLny59QWZiNM5thnVjvPSXGrThqD6R0IJBaA2DEnvF8lYpxAIoB+k78vKAyoLiL27Q2XRifMQ==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2075{"flow_id":61,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816436,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":63,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816437,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA3mtAAEARn6nAqAGAA3nyNtCaEVIE7BjqxAoKCgoILW5Ke\/Z2fngAAETS0wj5TYFweH+dUy5g1DAdjf9oKoUCQXK8bmP8CM\/pmnnKrwDJIaWt2iQRu9e1L0kCprXVSzTdVFH4i27FMskNVsFHCMTbWtlo6EAtCgXkSqHJiyT9o8JYd28EqGzdjJ0bdIywY7UgAxdFy6C1DEor3bVFFMrn5Arl9W07z7CTOag83Z15ArMOSSAE\/6sKvxXjQQc9QZmZnNwPQYNXiABAWyvW16ySZiWt8VQN5eTgk8n4CyfLsQmbBx8CJFsJT7XQuY8h\/bUEANENxCzc9+3d3dQVXVAcNuiV0Tce\/d6OBVMnO9bjuPIjUzWQGiL0ePPqtgy0bcNP9Mqlnrc9g2UatwRJd8g3DxXWDkOrzj6v1+TaeBtrn6NAzz6m45jGolWSOl9oszhqvlOiJxM7+0dxtANGsxJHLWWJz6Xi6O7i2IsHgoM1R8p35stEa0J1II2MvvcBdOBWIEdEvLfuLvdxD2tdSWZAYbABTI4G6BVI\/GrZi+JVOPE7LzdMKXuyAyCIXBegS3ugRBoxk4kVpeyRLAKkx98fEnsCyMOYSf9txBLjdIqHBeL1FKF15WY68SMCZM0ZZpHfHjnErnT2W+s7JDxtX9K96tXdatavL5jyJBjmLqWcfSaefoL0XFlv6xo3YbcLrda9ONNYIY93vGF84EOD2aTRahc22IIuPyQBLpTt5snP9fT1ZfadSSznr2ddd43y6K\/VsUk0bM2WLGAABJLdXxWom89Q3k462jYDfa61TBGWJ9rLvsBCFfwTiY31tCmB6lElAsDEjlOPbqnhvJtqLiy2FYTwNvNZQ83CFR0bSEUhftRgeVv\/OdajOJEmIVXX1ptvA2n0rB+iW\/F3WAgt0GhxVbON\/O40SO+JR2DRqwWtOUaHCa204g6puFFot6Zf05zRSRojZUGTvgmJhMegNaW16KsKWAHVBYiI3SqkWGWPrEhMMB+jQp994uYuZG7ZR0D+EAYwQxydr9UH8EyDlCWYgJ7dc6NhnO\/3nynrvy428ddSxIamAA3VBguRRXvtP7xTCDivn23qW49hHvu0Q5SAUnzShQXVs1I0HEzKPJW7cxBkK9OSZeZOHcjXD9MAB\/\/cufOrt3w1++oRtRf27eggQ3N48FsUEVXno2Zc1KLCSvO7jSdxxYSV3GGtdvyN\/+B3rxIFxOlIbhah3spVagftVOVLwzEjgltFIQxaDz2IDejfsRvtNrZ1wb74Mxlxn4Xoaty\/Qkp+Ij\/C2ANqDahEV4ogM\/KzcKzjcBLc7yfU1tYckm8KOXkTi5+382xA2GXv6uAu7VG3vMGymYzo4WYqcBUs79NOaRzuwxcuhH3ulI05NALrTEu4opmmXEH\/zdx9hNMv\/P8NcOkZAhipdP1nfveDyNWtKwIgTDncelLbfZhqvDTKb6JMocGx+Sdod2muZ8FDStAjegpOE34z68BReG66l7o8F30g1LMSNBzaxuSxnDF3c4g2w9rxoBGVgV+gf\/46dSDtAh+RxhlYFryABZXx5KfLajiHafHeeg\/Jp41CW4uXtfXb63YR+F\/8SDLo1uKAZWR4MnVbBf1Zlfkz87HR3Xoe1Apjuz1cSrsMrX0Wf6is8xZxTrKKObtiUqBqI3YsnkjQN5V8ahE+dGER3BhsvgNABXqapTBb6A==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2082{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2071{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2071{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2076{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2078{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUADm9AAEARHmfAqAGAilu8k8YREVIE7BiHzgoKCgoI6izyia7+eS8AAETSDxOwpQStwnSWk2BSkCk5lAAqsbUrCb5jeaXmkua57hBsUauZf7U9CDC248n\/AhJnuEgcv7wBVQ4h8y360lQmiACg+yMMKhE3CWz\/WwqMui\/QgwdOh8bbu0QZ0DjomeBD3kSPOrfOs\/R6ounUn2Jxh8MeJoa0CpxNOMdHQdGp50V8siq+6457SjpGgRYTm0FUWVRahHfL93c0e6js0u1gr5fY9CMmpMigOFJMgTui4iZ+R0SITHsPtFu49y8ICNfj4NJjNmAlNIJL6lYB9E1PPiE2zxmxKN+X40GX9IlCbsowY58ZjrpBdo+qgkqWB5ao27JtVDSY6dYtpQhXe2yHwX6eU9hoy91boh8nenKipnQfYgO5xxUZbkhgvsP0jUXwSs+bZgeL95ar8iQWrzrWME6EqS5BVJt70XAWy3rJ5KA8kXcDjqs+twLl16Qu68zyJX8GNELn53hF7DvQqbx07LOUCNAmBXcRLxD8WnuywfjfLgR6lGjLsH53iK5xSvpuIW\/A7X33o9fv6aK3DmQwZbi8gZTqTW5apCTYUAJF657KiRtHll8HMv7+fnV308EasKdhoa90g3ZDF3ZfgpTw66QG9JtyM7rGIhR+VrqQYKWBwLRwNK4OY90RSaiiTKSaebO+AHpGzHp+OnR1KE8uBr5T7TnmWrq0bC42W\/0L7fVe+2CSxFw099f3Jcrr6K6a4gjHt1CQ9UsuNSiABlU5XZMatIhTxF2lvX7E7irnQss4\/1cYXCo3YqvtncV\/BsoY6Bp1F1WoBlfPtilSHGF58BQywrHtLXCCYcsncuMlRtsgeI8\/S\/8Ce\/yeno93zf1ex9yRwN+fgzrXfh9\/gct+z0UMI222aULJslFQgKrUpoN\/dhrDNUu4ZdRw1qVxpDPcOzGenb77rq\/Om6tpNnHRxoulma+KMWRXj2PrPnl8VenZwzbxrh\/EaQo4FA7JdyoblkUAafc9P5TgEdK7VFbUOjxpMavclI\/ADAAV\/KAa2+F2V+4\/4DFxnL8chiRifnC89\/LSomH2mXVyyXSGz7vYvnFggQtBr9Q49+YAObLwWDqsWTacjPU8wxIM7Ph+fxZU2X\/e0+aVYSO1S66eNklOiT29fBDtgPKAqh37LXljXr4rHbekC4IWOiG04n0Omh4aO77y5KwhijQxv6cBRmma1Vu+3D87Uucm\/p+A3QydfmOBn4yJ08D8hlL6AbGSGrkdChyDKOMGg71pGZAT70HeWNxTNKcR3fIqIkjjnnLeXlTc1HXpw4rJC5UW1PwJA78QknHDzxGNuN5RQlO9fMoUhfdN9s91pgFnK4Bvjl57wUFAZVeTxHHNzt3ndmy7yibDb11g8x+uw0NvpAWh2Vb\/SrEAFSVAHR1fdr2Ezb\/vuJG0sNd7ajfujW6PJ1tq7znmtUkwEJ\/Wf7fsUMMLLA71iLoXwHFtlQgafifT+qd\/Wy4U4pdAiOfdNlzLjmkT7ooqoFfhP9NonuDNoO65NKofufmuj9BBLzSVLTtg9qbDajOid+TvAjnGh8tfFVunRvpDgWoV+0a9jkzagxy3CO99NMmmjrdIWgcgVvzkqyd59f1LCWJA\/zJyspYRBjValGLJ+4gY9+UaNshSm86DbbyCUv4DMxa1msaua7a9CM8x3cfYVA==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":61,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":63,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816439,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUA3mxAAEARn6jAqAGAA3nyNtCaEVIE7Dv3xAoKCgoILW5Ke\/Z2fngAAETSqriGwwU1ZPHvDY9IANf9Ku5K5wjbXsROkg37mxZM\/fUf+ae1+IMs5\/e8VHrPHdz8B0tN1JhNExx3PpZqqhqqEO8dHq48y32Y525KD9nDpxHNfXtF3cCy2VLTvIkt5fSy7mdfV9G\/lV417zcDXz3ofkqTYZQJU9JmYoKgpX\/Z9Fv21eTcHtm84hs\/CF2yfwOqODjJkrRzAuKlZZYEBvKorcRlEMIoivEgco289\/zuj6jllLa+uWl0hpCKFybjQAIjm0mtog+HFYJho8hMNiXYO8gZBWlywbfu5d7rctjK7F7qIVosrixeUAjq9eZGviAeBdbh5\/uUvU7XHj2kNnVZkNOBPcBa8dzo4Cu2EunqBOnGz1Zl+WDwELbYZf7FOjNQUAjhk1fINgZtiUpYxD+aZVbYaZTFhSHYBygFblXL0CBuzsEPRtBctAk6fxNRQ0dchyHDw04XB+vUHb8JRl6DBeueAgOFMuyvU4rPiUwgzHqc3KSC9zj1kcm0BsmTsG1EfQ\/EaqIwCsbwG6Utgle7OJOLuOcwUYsbpIXwCw47nixMUR60bfFEgwgyCFe\/v9KZSOvFZk5mdADSzdZnAHa5MFUJQRk9A0z2O8tCH5dWjug8eexgQ+\/B1wi+kA0UvlGVZg6FDXmTmE3l3rk0LnlnUOawriR16ebqsekxRb06H+epk4vSk0RmAelOQbkqRsLHTRodWoWocvF+lLrYf3kjSbRbsabwgZYu6q1U4+h+mIDWiwElhcKUSp9Vbj42Uxmx1ihESE7qO2+WgYN1ffw+K3EMzUDguCiutrbfYPQ9QzuIZ1zQ96MYAVFtEU+AnnDpWmCPpdQzt4Rf0tGxSHQlQ0Xt9N8banI+BImoi+Y3ILmcSAzul\/\/SoXQ06fdzi8Cuu6iQhJRx7s+bzJYcZPI46JdtoLc5ECO16r1D1F60KNHGKPOg7A+SiITOEKpYmKsxnGmWM9uMk8Vs9sg5mopiDYYagtc\/pwAc8NNHcMERpGgpQv1jG\/9d0WtvMYiKFV88Zdl7HiWIJ2rQvlrLCF1W0ZFfxwrpfKduI8xArWXI6M9X+aOEobPjvIpLpiKy8JvU+vbrO6OvbEOALsGOYbFsVGBdCZI8Y4XI\/lOQRy8WIdjGfVheSAJCq6KidcegV55Awot65GsZ2KRAEDERKIYU8uQA4UNUYXj3rXVfvrtx9acwRyJccTHROBMq2lck5x\/7nmvDx1V6bJvtpPiUAA44LG9vXaLfN92PWTLAuoOB6RnalZxjtzuDX6PI3U3mty5y0yU8wjpy+Z2Vpd6XTwqmVacbiusbSPeNBru949jCQ3FYcGK7m7wXAVhf206sBJVuHuf+O2d6R5MWUHGCNk1A\/P+pmcOGl8AwHH2ssezaKkYCOUHBheH22wOhvvGROR5308B7fVytgfBkXAO0kgtqxpgl8GUlz7PPc6mT0t1GehZWyfwLzIseHNpWMWtA\/TeVtkkv5YZktCVGzpjfWCJV7OCclCUavwpXsV7WqF\/HD\/CGNKZKhhmSn111GB9OPmOU9ER4YTwdw6n80bK\/Oo48tV6MCNK4CiLDO7uQCOgkVshnK4KSI5ivI0wTZzHr2O4vCifZHIgC79Aq9lkUHPOUu6JchAQvIJBwybZBntyg7dQlLA==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816443,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2077{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816443,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2076{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAaYBAAEARbd\/AqAGAg58YxobPAbsE7JFKzAoKCgoIJv2XczUh4RIAAETSwGAf1H4qwtNVNpijzUPdP855Xm8gNQiM4xtYENKrcBUOlapegyrqQP5trwg1yxxxc5gxuoPT\/Q7IUYI583yGwpdX3z7pG2GkuuzFbAYuXocv2c8m8Vp3frzoWZhejCzczaXUJl5GbY36KLl0kaWX8+fyiBx2d\/anfCmdDMOGgjctAzzzwOui8oB99SHGzJekM90VZqef2gRCvc6obdH6+meZR9tZQ\/9c\/ujjT08SGpoMyaYh7ackRSWgtEtae1kf8K7CCEyuwQJIzCYyyqocZpiLayPJJvCCCEgA3TeNcZQiIVNgJ7HVbHCLqgGDGe5n9CEjPCsZPG8DBF3TDlOuyzyV3bEErcPUEvjF7iVwq5SY\/ASPiYy2XOQ8T4nH0woJ8\/LfZrBhBiVM+6xsFCQfQSn37aT2kf9stM3QFHwnCQZ2cN+W7A4WLGG8Jc\/7Iz7zHcac6mGG7KgC3n0G0m6cSxnHQNeiOkhBYP+hI4hC\/3vtNMYC7B0ptFMnOQyndT+js3+7Nt3roL1LFgUTia3k71weImWcp1vHnurCuKr3ZoFtNat8vJWCp7ljMLKj6PJaGema0ot6FrRzgkbq5v2L7m1KQY1GbzYXN5wyeLoh5d19K9sB7SFA4MrEYpvybMboYynEy8OiL3w3HSDubafPdrz7HD1RqZ2XYPnl0cIuRZ5lYZM9pIVATBx65FF\/LL4tyes7G9N6V775wULSTeN975PRIhvBBAfK\/kSocTQXEh1HLz2HzZZBj3CKV4\/1pytdG1ERn1T8nCIbHU42YM5G5vikx\/VdWoy58VPBllU5+H2FtP22fNIwjSpYd7XdHwOKF7KS7hKqVmKMkyxPQ4dfGmTv8D8K\/1gvOsbHDg7qq2A8gPDH6DuPNDY4TBytt7xzZCSKLyI3SKOKu9uE1ci4bupElLnISO3S\/1EF8wFAzrHCnPwkFipm6m3rHDDldW\/nFK2\/z62KmkvP2z52fzyEM8\/IvYXc1FYXDnbt1l4pCuhfPwMRz9r3fXpOGcq+bTMLw6QjPiWWgl69g+SxM6dSN3ZvrXLBXC+ANZvQ6isUavvUI\/fI4WdpqcAswzMe1dqnk7ofLlUW9SqdktIDandoFucSPgwwMiQ9Eqf4mX4iHvhQxDmKY1xl4i3yZ+UKthtPsvin2B4K\/fDectZE5RgBtnN4insvegjLISPKiGePh+91K7iKWb\/h9AloE9dtwu7Qh0LZ1f3s7iDvStLQYLiVVBfDc1r94lKc2rjjyC5LbCGpz38Gea+d8Ct5PyVkBqzxE+d86\/rpf0dWea3xjyWmZaZw2+4fnD4eBE7LoyLMg0+D4Wq9Lrfqj45vaX1OyK8tRlQOR9umH3BopP+cHJyrYQ8Hpj9Dvp03GhS8dhXHvnHCfhrx17vRGWeOn4BkrVnT7bg4nuL8EHr8W78yfbjP6KT\/9CbH8st5XZYebG3T+eptCz8ZI209kpxcLM3583h2xZ5Kxun0IT6qsv5rYhvdEKrfQrXisiXIuDEpeBCdxzLvHKE+vU3AGlp0xzmKzMvb0T2CaObRHfQ2QHAz65uLb3V5jjSmjUiVbapo58eLAPxDr583vcMqg09QHcynL9f4A7MlQ1CcRj8k63LiSpDBFotomudD3Q1gs8L1QFYkak\/KLw==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2083{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2089{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2078{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gBrqBBNgRQCABCwcKydWupNP+R2kegH0mAB8YIxDSMFEDfZ59dTdPtKIBuwTYyHnLCgoKCgiO5tu+VRPaUgAARL7b5uRHpco1v4rsJvQO6URerS\/XYwHUIme7OsLIq7c+BH7QkOL+FWIMwb2dcUKjLboeZNPPvWk1vWJwKFuKmo\/2BaPxgl7uCuuodIhB4HA4+gAp9AiCDMMVBg7KDxVg0UJvJV6kniuPqYnzNSttnxGcZFD1\/FDizgHnflgH2ehx97zguLiICppI98HOOLmRo0+Z8aOsOckCMD7xCVsHWlHh1bI5akSZvmO+Dj82KjY7Avi5OImY44RnGjaBucdBbS4V6f5Xkn4QyVQLB+q5hQwpNERRyV7oLRfwdIN61n\/gX68BW6Hjd19zzzXJq4ppWVFRL283NDYkCOWTQied1Nm88o\/jxTQcKdeC+nE8BjgTQsE1hQuw3YjcGakj5358FUY\/47qbefdw8bUtH8RnOwzoLI9HrdXdhm6JWK+379rA8wTHzaIaw64BfZnSOVQqUMyxWX7bWXfIa5Fi7AZbHjQyun7k0sSYeTeBvVYqT2x6VPeXnGdNXoeJ3wis9mNFWWc+57o8auQ6HG0prLjq5gHWn3+0\/fg4XBo34U9UgVsSYCPe8IZ13bYt\/aXuPVsXknGFWE05KB70o1KDwPGj1++AVvlSOjs3VuNE57pGhRV7luuEiHEnAbDuRfD7W3AEsSEBzBNlGzWmbk1+9ewToY02MfIokl6CFgztlzxWXb\/qfbBMiaH6O9wSsHGsY177jxkldB5FmGUPYPkMSCBy9E+XEgUvCNNsTmmegOmHImfB7jq8z8flSDUfKqugVhMNB4afcf7pSbfN9fYw2um1tn8t9zYFr4eZfjraW+9BW8K2w25393PZ9EGqLiNmiJEYFkCXj6Vjmn5fGdeguHRUNsf9lhUjqo+R4u7PodV4MjJoTzUdKqTyhN7Jf7\/P8ME6ch1gte+JJYNCGuo2PSJaQ8UuFd9cObSnv0uUcsPvm1wUq0kZiegnJzh3Beh3AOoBVFFfvb7HrMQRTuYeUr55MSntMPBhuBDSRIEMJdCmZITPRMkyWNN20VIHa\/dy6Rf9WGNlqJj9bK7p0JcRuC9l4aOC4CgLHE0aOHfyfQAKJg4DCNY9+d+zV+D0AQpjnOb0DJYWG9LYPZ5tGOv\/vw7fIy9ItasZnoVwVXXT\/X2TMKZiyXb17ED6KE8+0YPRqRcbssb6k63CoWI53OVEfZDhJjcMTbiYA7UgaLZQ9IIQ9Xn5aNhuOhBSFG1E+1LjmpRb4cj\/5MvoucE1Chm75lnCBCwpkGJ\/r+GVXgdjoc4GMEhJ4joiQPuSNtP86wkkwfVFAcC6ou5mDEgdzA\/Lqwn7MxG894DF0ffSWy7HhPHGV2Ps5rULECCTSVXaDO1YHxNO7xZkD6aP8Jb\/FEObhztRNlEK0DZMGxiIIxDwfz4Ku9bv9WGuHcNwwugqGAwqVUyDxRfIyHlAeijmud\/J0Bjo5KCFVmFH5ymGcK8\/U\/2eVqZa6g+8gn4PBkOMbl4SSgnWUYCWhWNQBrl9bquCH0WO1sTqv8DtOVmoop+OcYmB3lJpiVjOYB1P5SVmgSBO8KsYUR18FEhWwSOst5lCd+NHkmcAGG+AY75RxzhE\/UuaPSAebQsu\/\/+eJKx0\/8NKIVfVsxXc8W2sdbOK2vzPdKF8lQ==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2079{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":57,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":61,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sCABFAAUAdDtAAEARuJrAqAGAilu8k6XkEVEE7DEbxgoKCgoIR0aH1pvahxkAAETSROn4ORBQ1R51ZLe9eYzvOiMPngOX3K5dSJIuZ+bLBafaH9s8\/LkewIUcq19Gdvy4KV\/6Vc4KFTvley798C+NZm58qoE24tGKZZzWO74HKFBW1ppxeRs9Obu2j4Ra6e95WphdbJTYm0sJZQeK6fKlpulqDHUVUFb9W+Bs1b0Fi85zA9vprUuyOfWykGrjHF1BvtINtVOOrYAonLltqiFAcN68DWRN\/7lcQwHRjvEP2kFnVFA\/RUIEjxzkvEd8API42Gs8286rY9xA32qCuOmvc4Jt+JGVhydtJTjQc3IIDymDbUbfFKMoqHUkXp3S\/3XemdekNmG1sTTjXOJcOiAkh6\/WOPj0SvNFbM2fQTbunQXnvI+6caUc2inf79GNecOLm8+1jc3IDVuvoaJVYr6YJ2XFYJzFwAC713eMW6j7QM8qNx3BlNtqyh3w8u3A7Ab1ubSSB6fTTck2SnI74s9m2a1LwMXymxQzWeHgM+teaRIxjTjUWlHpi1OGMRYAQ+\/ROBivPfUBwNSh3WrnQVia5y9qbQvZu6P6GUlMbeaEcu7EqhUyI+yiWEW47Mu3cYgKhopiUZHoUHYloFEoFtuxXzGvJGpYCdeiRjNMXp+5hyG2t8Qa1Ov23e30dv4bozhlU23ccct3Mzeos8f++F1kRLkX7522rXbW3pDQvzqaFgkcuh5nJqIA+elIYPVGtuCwUya9PJkk8tjRp8mO6ujGO1yYSp0mfHBVOqJ7Xu+Qznyr4oQhqcgQ\/d4gViu7BY10GuGgP3E4DfnWs9WT4gMV+Wu57DXBe7oedEM4dgSvxpOI1Vv1cP7zYOIeQ5F4SHiegjszstYb+WGs03C0hv6dY7jPfIz+myGAerTrKifLMUJ2tE0hOEkZYRcUbcPjvvpJEsi9auT6apeinFGnXUOhjnR2dc\/HvW9i9bGHIekDviWxYLrVQLL\/Fg7Uko0Zwxxw\/oXCXNrPrMQRJLnW25knS17aQ57ld5LsOGL3oL60ZMbV274by\/qeKHt5ih8k600Awv+d7e6X+P3sUKaacjdlTZpS8ELTPgxrfuAFXk6p0iBRMziTHmxiHMO+uXhTX5kCpTT46Q1efTa\/jaT+GG8er319a7p4nj2I4RYNCMyh2zdaF7qEREoMjdndbTQw\/eNmMeNr2+3PE+VuUFEUZ7NvFB2S6jioG9OsAB0Ag1vdIUwebS7sbB+HH4MgqQkzSv3HLCU4+\/wqe\/Sgx0arNoNsPGsQx+KaOe6zut\/kf46Zt92NBDi6xMGLWR6xOiaX09sRJ7TAqNBkhELJH61qLPo6gTvuiQveOMIwU133HtYiTouO7KIiDn5Eu\/qo2pKFR7SIhcP1XY558WAUb\/FcvbjCiUxAqBotQmShtjznwHaIKFiEw73sNXSXqc8H16IRwCJjoC\/ejA3Rrn3JvFXC4lrFxQHQR84r46DbKxDphvNLEvw56Csvtz28M9hOxM9dfnthkFcDNxdxeAmguAQLH3n0ggTlzR3UpejggZmA02HWR6xt5LDtZPUF+Xdo0Ag1o21qiJ9mNK17VaBIFi3yncH674uWPFH+WvRv0lugDKLolxU9Rq81Q9ONLE0vJV+XzxOZEG3CTysivkgSMCZlon3kz3GPkkvYjT3iX4N3h\/+KHgZhhg==","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":63,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2080{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2083{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2075{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2082{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2080{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"pJGxgjQ5PKn0qB\/sht1gBrqBBNgRQCABCwcKydWupNP+R2kegH0mAB8YIxDSMFEDfZ59dTdPtKIBuwTYgLnACgoKCgiO5tu+VRPaUgAARL4iLn5z3Oq6OtUJ9Z4FtH93aTJPi4zlbm\/F8S3DAMXzYyYWD7DsDfbO7ns+QXTVKmy6iEeb+YqVFSsr5rTh4VOFRsViR3aUhdYodv+4XOUCOMpbcgMc5GSjQ\/tn51BRzDB5ZTOr0t88XXwZ5T3UfAN+eGzP7dp+KpPhaFjLlN+LVCy1GPW7G4Q5y3LBTdCHwkq6OQwQw3p351ZQ8ER2Bk6xZeGc5mD1b03ITM9a9ScwgnwTK3SdXeNM7dbBNDDaH\/M2gQ6WJjg7TJRhQQXz1jXScC\/2rz5qJd\/RxCVtUWiX\/sKLc3RE+yNhg0Qqny9QO14QMUsXkMpDGcX6WaeQ6QuIAEGPD9m4qdW2EBrYXp9tYNMMiOFG+uof4qv7hs6WqDodtrr87q2RhgrthkxA+n\/YPJn44w+imPcnoQyhj1ZYnuP8sMqiYBL1tRTva1xvoQ3OxIWYkJQ8DI\/UaZPYjLJ0HTKV9Rt+zHtW4Q4aW9mtl8sKFIzwcd\/qOG9YcGaVSneeqvkHbIt+bkx4CCUEYMhxCPqnqyg2NWV9Dm0iuG9JJhVu+n\/YvuSrvITlU82N30jwHM0pFFHwje4cIwXn984pbygM3YWW9wTULnf9idoYFHus6NmORwxevEyH+daFl7xJMf2U0sCZlLly5j4SaXNpejVz4Q4ft5VFFQiebcnLYbo8JXDfCCe6s\/2gkNMqwqhOru8AUVsZ2FvALKqvwPawQVKd4mV\/QqRslIPmPSZpeLyAERI9FW+NLMyciu19w1XaJcT64iGSZrkXzWzEUYE5\/c4wz1jCYlu7l\/cUaCfl\/xfE3vDPaLMvtxkTvHR5OYrPHa9c7pj5P1KBcr4PYxs7UB1ZshQb+SK896aAsURiU0ES1THwOCMaSqLHJguIDImw18Mlnaf2Iplo413vEuQhA\/dnNITgxvg6WkPOKnG\/4mKfYg80Q+wwhAiaZgkQy4wxbR9VYBmprWYSsw6FzOEOuFtVm9i1xafh66uxxNTpeUUfgkct+Rp\/g6\/7k95ND6DvYsM4Ge88PGEtSfOZLAMuiKNTSIYsE5pgD+Fph\/fHiKiokoOjx4k2UcCoPuPZibEit9g6cFCTeQuxV52MUidYAe7AoJ3WFxXPjxzFyaSDwX6zqJVbAHl8bfYumj4asqTe7W0TBe1n67EnVN90REOjbj8\/dhIVElRvCP+nImSOrjv8i\/yGOxg00VjYFE4hWvO4a9h\/gmxEhNHNGZmUJUDiiqwUQz7vGEoxJuyyhBX6QoU4HA3s9fgd0r6BNXTczUJpNH0SBpMnTS4ZNtclpJ5ptzQ0xAZbC3wFsQvPD+lBYlfY9MwZN9jzc4T7FCsYCm1QDBcvsow9H\/OLw86PcFbfbR0pQPAql4EX1avFr7\/wA5JRhvIySeTSvWMRSawHpcxAXJh4fcU5ANiwd8F\/FxcIPyBMiT37b1IOxYigOEG8mHpNTMOCTYZbwC+mxRXnft4gjm+Dv3ZpQONNk740DpMWhzVqGN4wFelgUAAVdO07z67aDIX95h976dT2kl13+jZpgXf4LoHG3bIhIK2vCMdH4j6yWdr38NEjXLE2ni2v2auOn\/VtdmsjwOgpTqVtiqNQstid6mXtrQZNG+Xjyw==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2082{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2077{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2074{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":57,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2080{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":61,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+2065{"flow_id":63,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","pkt_oversize":false,"pkt_ts":1603816444,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":20,"flow_packet_id":8,"flow_first_seen":1603816434587,"flow_last_seen":1603816444528,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59171,"dst_port":4433,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":7,"flow_packet_id":4,"flow_first_seen":1603816434523,"flow_last_seen":1603816434855,"flow_tot_l4_data_len":2590,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":647,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46576,"dst_port":4433,"l4_proto":"udp"}
+0450{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":33,"flow_packet_id":2,"flow_first_seen":1603816434629,"flow_last_seen":1603816434766,"flow_tot_l4_data_len":1112,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"131.159.24.198","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+0523{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":0,"flow_packet_id":2,"flow_first_seen":1603816434507,"flow_last_seen":1603816434657,"flow_tot_l4_data_len":2480,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":38077,"dst_port":443,"l4_proto":"udp"}
+0530{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":45,"flow_packet_id":2,"flow_first_seen":1603816434670,"flow_last_seen":1603816434802,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":49788,"dst_port":4434,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":12,"flow_packet_id":8,"flow_first_seen":1603816434542,"flow_last_seen":1603816444513,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":60784,"dst_port":4433,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":37,"flow_packet_id":2,"flow_first_seen":1603816434643,"flow_last_seen":1603816434794,"flow_tot_l4_data_len":2520,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":50289,"dst_port":4434,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":14,"flow_packet_id":8,"flow_first_seen":1603816434569,"flow_last_seen":1603816444507,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":34511,"dst_port":443,"l4_proto":"udp"}
+0445{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":73,"flow_packet_id":2,"flow_first_seen":1603816434855,"flow_last_seen":1603816434997,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","l4_proto":"icmp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":16,"flow_packet_id":2,"flow_first_seen":1603816434584,"flow_last_seen":1603816434709,"flow_tot_l4_data_len":1299,"flow_min_l4_data_len":39,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":649,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":43475,"dst_port":4433,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":34,"flow_packet_id":1,"flow_first_seen":1603816434640,"flow_last_seen":1603816434640,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":45250,"dst_port":4433,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":72,"flow_packet_id":1,"flow_first_seen":1603816434822,"flow_last_seen":1603816434822,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2604:a880:800:a1::1279:3001","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":44,"flow_packet_id":8,"flow_first_seen":1603816434664,"flow_last_seen":1603816444508,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":59515,"dst_port":4434,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":30,"flow_packet_id":4,"flow_first_seen":1603816434628,"flow_last_seen":1603816435041,"flow_tot_l4_data_len":2590,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":647,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38933,"dst_port":443,"l4_proto":"udp"}
+0519{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":32,"flow_packet_id":2,"flow_first_seen":1603816434628,"flow_last_seen":1603816434722,"flow_tot_l4_data_len":1295,"flow_min_l4_data_len":55,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":647,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":51040,"dst_port":4433,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":25,"flow_packet_id":4,"flow_first_seen":1603816434601,"flow_last_seen":1603816435020,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":643,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":37784,"dst_port":443,"l4_proto":"udp"}
+0447{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":10,"flow_packet_id":1,"flow_first_seen":1603816434530,"flow_last_seen":1603816434530,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"3.121.242.54","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":42,"flow_packet_id":2,"flow_first_seen":1603816434659,"flow_last_seen":1603816434682,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":46353,"dst_port":443,"l4_proto":"udp"}
+0491{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":66,"flow_packet_id":4,"flow_first_seen":1603816434766,"flow_last_seen":1603816435089,"flow_tot_l4_data_len":2662,"flow_min_l4_data_len":91,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":665,"midstream":0,"l3_proto":"ip6","src_ip":"2400:8902::f03c:91ff:fe69:a454","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+0530{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":18,"flow_packet_id":2,"flow_first_seen":1603816434586,"flow_last_seen":1603816434622,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":39945,"dst_port":4433,"l4_proto":"udp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":59,"flow_packet_id":1,"flow_first_seen":1603816434736,"flow_last_seen":1603816434736,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":43645,"dst_port":443,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":55,"flow_packet_id":4,"flow_first_seen":1603816434721,"flow_last_seen":1603816435054,"flow_tot_l4_data_len":2622,"flow_min_l4_data_len":51,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":655,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":39975,"dst_port":443,"l4_proto":"udp"}
+0528{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":2,"flow_packet_id":2,"flow_first_seen":1603816434507,"flow_last_seen":1603816434548,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":37876,"dst_port":443,"l4_proto":"udp"}
+0509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":21,"flow_packet_id":2,"flow_first_seen":1603816434590,"flow_last_seen":1603816434688,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":35643,"dst_port":4433,"l4_proto":"udp"}
+0529{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":31,"flow_packet_id":2,"flow_first_seen":1603816434628,"flow_last_seen":1603816434677,"flow_tot_l4_data_len":1283,"flow_min_l4_data_len":43,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":52271,"dst_port":4434,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":51,"flow_packet_id":4,"flow_first_seen":1603816434684,"flow_last_seen":1603816435089,"flow_tot_l4_data_len":2590,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":647,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":35263,"dst_port":4434,"l4_proto":"udp"}
+0526{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":40,"flow_packet_id":2,"flow_first_seen":1603816434652,"flow_last_seen":1603816434749,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":45852,"dst_port":4433,"l4_proto":"udp"}
+0522{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":54,"flow_packet_id":4,"flow_first_seen":1603816434707,"flow_last_seen":1603816435089,"flow_tot_l4_data_len":2566,"flow_min_l4_data_len":43,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":44924,"dst_port":4434,"l4_proto":"udp"}
+0528{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":19,"flow_packet_id":1,"flow_first_seen":1603816434586,"flow_last_seen":1603816434586,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":39624,"dst_port":443,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":35,"flow_packet_id":4,"flow_first_seen":1603816434641,"flow_last_seen":1603816435089,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":643,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":42456,"dst_port":443,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":68,"flow_packet_id":1,"flow_first_seen":1603816434776,"flow_last_seen":1603816434776,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":43735,"dst_port":4434,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":4,"flow_packet_id":1,"flow_first_seen":1603816434512,"flow_last_seen":1603816434512,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":47010,"dst_port":443,"l4_proto":"udp"}
+0450{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":74,"flow_packet_id":4,"flow_first_seen":1603816434886,"flow_last_seen":1603816435111,"flow_tot_l4_data_len":1222,"flow_min_l4_data_len":55,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":305,"midstream":0,"l3_proto":"ip4","src_ip":"133.242.206.244","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":27,"flow_packet_id":8,"flow_first_seen":1603816434606,"flow_last_seen":1603816444569,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"193.190.10.98","src_port":49658,"dst_port":443,"l4_proto":"udp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":6,"flow_packet_id":2,"flow_first_seen":1603816434519,"flow_last_seen":1603816434551,"flow_tot_l4_data_len":1271,"flow_min_l4_data_len":31,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":60346,"dst_port":443,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":15,"flow_packet_id":1,"flow_first_seen":1603816434582,"flow_last_seen":1603816434582,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"51.158.105.98","src_port":51887,"dst_port":443,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":61,"flow_packet_id":8,"flow_first_seen":1603816434743,"flow_last_seen":1603816444721,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":42468,"dst_port":4433,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":56,"flow_packet_id":8,"flow_first_seen":1603816434721,"flow_last_seen":1603816444586,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","src_port":50705,"dst_port":4434,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":63,"flow_packet_id":8,"flow_first_seen":1603816434756,"flow_last_seen":1603816444721,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"3.121.242.54","src_port":53402,"dst_port":4434,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":47,"flow_packet_id":4,"flow_first_seen":1603816434670,"flow_last_seen":1603816435086,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":643,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":44619,"dst_port":4433,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":28,"flow_packet_id":1,"flow_first_seen":1603816434606,"flow_last_seen":1603816434606,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":41587,"dst_port":4433,"l4_proto":"udp"}
+0512{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":48,"flow_packet_id":1,"flow_first_seen":1603816434677,"flow_last_seen":1603816434677,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:4:34::1","src_port":44243,"dst_port":4434,"l4_proto":"udp"}
+0445{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":76,"flow_packet_id":1,"flow_first_seen":1603816435054,"flow_last_seen":1603816435054,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"138.91.188.147","l4_proto":"icmp"}
+0445{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":75,"flow_packet_id":3,"flow_first_seen":1603816435020,"flow_last_seen":1603816435194,"flow_tot_l4_data_len":165,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","l4_proto":"icmp"}
+0519{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":52,"flow_packet_id":2,"flow_first_seen":1603816434685,"flow_last_seen":1603816434779,"flow_tot_l4_data_len":1295,"flow_min_l4_data_len":55,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":647,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":53760,"dst_port":4434,"l4_proto":"udp"}
+0530{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":69,"flow_packet_id":2,"flow_first_seen":1603816434784,"flow_last_seen":1603816434822,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a05:d018:ce9:8100:cd2a:e2fd:b3be:c5ab","src_port":44605,"dst_port":4434,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":53,"flow_packet_id":1,"flow_first_seen":1603816434699,"flow_last_seen":1603816434699,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":54570,"dst_port":4434,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":43,"flow_packet_id":4,"flow_first_seen":1603816434661,"flow_last_seen":1603816434997,"flow_tot_l4_data_len":2590,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":647,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":53791,"dst_port":4434,"l4_proto":"udp"}
+0529{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":26,"flow_packet_id":2,"flow_first_seen":1603816434602,"flow_last_seen":1603816434650,"flow_tot_l4_data_len":1283,"flow_min_l4_data_len":43,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":60983,"dst_port":4433,"l4_proto":"udp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":17,"flow_packet_id":2,"flow_first_seen":1603816434585,"flow_last_seen":1603816434765,"flow_tot_l4_data_len":2520,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":49151,"dst_port":4433,"l4_proto":"udp"}
+0502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":36,"flow_packet_id":1,"flow_first_seen":1603816434642,"flow_last_seen":1603816434642,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+0531{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":3,"flow_packet_id":1,"flow_first_seen":1603816434509,"flow_last_seen":1603816434509,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":34442,"dst_port":443,"l4_proto":"udp"}
+0527{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":5,"flow_packet_id":2,"flow_first_seen":1603816434518,"flow_last_seen":1603816434566,"flow_tot_l4_data_len":1283,"flow_min_l4_data_len":43,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2a00:ac00:4000:400:2e0:4cff:fe68:199d","src_port":48707,"dst_port":443,"l4_proto":"udp"}
+0517{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":11,"flow_packet_id":8,"flow_first_seen":1603816434535,"flow_last_seen":1603816444528,"flow_tot_l4_data_len":9920,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":32957,"dst_port":4433,"l4_proto":"udp"}
+0531{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":23,"flow_packet_id":2,"flow_first_seen":1603816434599,"flow_last_seen":1603816434725,"flow_tot_l4_data_len":1299,"flow_min_l4_data_len":59,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":649,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":52080,"dst_port":4434,"l4_proto":"udp"}
+0530{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":64,"flow_packet_id":2,"flow_first_seen":1603816434764,"flow_last_seen":1603816434897,"flow_tot_l4_data_len":1275,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:4800:7817:101:be76:4eff:fe04:631d","src_port":53140,"dst_port":4433,"l4_proto":"udp"}
+0521{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":58,"flow_packet_id":1,"flow_first_seen":1603816434729,"flow_last_seen":1603816434729,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2604:a880:800:a1::1279:3001","src_port":56073,"dst_port":443,"l4_proto":"udp"}
+0448{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":71,"flow_packet_id":1,"flow_first_seen":1603816434818,"flow_last_seen":1603816434818,"flow_tot_l4_data_len":556,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"18.189.84.245","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":67,"flow_packet_id":2,"flow_first_seen":1603816434772,"flow_last_seen":1603816434831,"flow_tot_l4_data_len":2480,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:4:34::1","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":50,"flow_packet_id":2,"flow_first_seen":1603816434680,"flow_last_seen":1603816434845,"flow_tot_l4_data_len":2480,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","dst_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","l4_proto":"icmp6"}
+0533{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":46,"flow_packet_id":8,"flow_first_seen":1603816434670,"flow_last_seen":1603816444524,"flow_tot_l4_data_len":9920,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":46242,"dst_port":443,"l4_proto":"udp"}
+0529{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":62,"flow_packet_id":1,"flow_first_seen":1603816434750,"flow_last_seen":1603816434750,"flow_tot_l4_data_len":1240,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:19f0:5:c21:5400:1ff:fe33:3b96","src_port":38689,"dst_port":4434,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":9,"flow_packet_id":2,"flow_first_seen":1603816434528,"flow_last_seen":1603816434679,"flow_tot_l4_data_len":2520,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"202.238.220.92","src_port":38366,"dst_port":4433,"l4_proto":"udp"}
+0522{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":22,"flow_packet_id":4,"flow_first_seen":1603816434595,"flow_last_seen":1603816435011,"flow_tot_l4_data_len":2566,"flow_min_l4_data_len":43,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2400:8902::f03c:91ff:fe69:a454","src_port":56213,"dst_port":4433,"l4_proto":"udp"}
+0449{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":29,"flow_packet_id":3,"flow_first_seen":1603816434609,"flow_last_seen":1603816434806,"flow_tot_l4_data_len":1668,"flow_min_l4_data_len":556,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":556,"midstream":0,"l3_proto":"ip4","src_ip":"51.158.105.98","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":13,"flow_packet_id":2,"flow_first_seen":1603816434569,"flow_last_seen":1603816434601,"flow_tot_l4_data_len":1271,"flow_min_l4_data_len":31,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":51185,"dst_port":4433,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":24,"flow_packet_id":2,"flow_first_seen":1603816434599,"flow_last_seen":1603816434750,"flow_tot_l4_data_len":2520,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37661,"dst_port":4433,"l4_proto":"udp"}
+0449{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":70,"flow_packet_id":4,"flow_first_seen":1603816434806,"flow_last_seen":1603816435089,"flow_tot_l4_data_len":1238,"flow_min_l4_data_len":63,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip4","src_ip":"202.238.220.92","dst_ip":"192.168.1.128","l4_proto":"icmp"}
+0531{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":49,"flow_packet_id":2,"flow_first_seen":1603816434678,"flow_last_seen":1603816434822,"flow_tot_l4_data_len":1299,"flow_min_l4_data_len":59,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":649,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2600:1f18:2310:d230:5103:7d9e:7d75:374f","src_port":38394,"dst_port":4433,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":60,"flow_packet_id":1,"flow_first_seen":1603816434743,"flow_last_seen":1603816434743,"flow_tot_l4_data_len":1260,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"131.159.24.198","src_port":48644,"dst_port":4434,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":8,"flow_packet_id":8,"flow_first_seen":1603816434524,"flow_last_seen":1603816444507,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"40.112.191.60","src_port":46334,"dst_port":443,"l4_proto":"udp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":38,"flow_packet_id":2,"flow_first_seen":1603816434643,"flow_last_seen":1603816434680,"flow_tot_l4_data_len":1271,"flow_min_l4_data_len":31,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2001:bc8:47a4:1c25::1","src_port":49270,"dst_port":4434,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":41,"flow_packet_id":4,"flow_first_seen":1603816434656,"flow_last_seen":1603816435111,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":643,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"133.242.206.244","src_port":45855,"dst_port":4434,"l4_proto":"udp"}
+0517{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":57,"flow_packet_id":8,"flow_first_seen":1603816434729,"flow_last_seen":1603816444586,"flow_tot_l4_data_len":9920,"flow_min_l4_data_len":1240,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":1240,"midstream":0,"l3_proto":"ip6","src_ip":"2001:b07:ac9:d5ae:a4d3:fe47:691e:807d","dst_ip":"2606:4700:10::6816:826","src_port":41857,"dst_port":4434,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":1,"flow_packet_id":8,"flow_first_seen":1603816434507,"flow_last_seen":1603816444490,"flow_tot_l4_data_len":10080,"flow_min_l4_data_len":1260,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":1260,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"71.202.41.169","src_port":37643,"dst_port":443,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":65,"flow_packet_id":4,"flow_first_seen":1603816434765,"flow_last_seen":1603816435194,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":27,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":643,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"140.227.52.92","src_port":57926,"dst_port":4434,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng","flow_id":39,"flow_packet_id":2,"flow_first_seen":1603816434648,"flow_last_seen":1603816434782,"flow_tot_l4_data_len":1303,"flow_min_l4_data_len":43,"flow_max_l4_data_len":1260,"flow_avg_l4_data_len":651,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.128","dst_ip":"18.189.84.245","src_port":34903,"dst_port":443,"l4_proto":"udp"}
+0154{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_interop_V.pcapng"}
diff --git a/tests/result/nDPId_quic_q39.pcap.txt b/tests/result/nDPId_quic_q39.pcap.txt
new file mode 100644
index 000000000..f39765e99
--- /dev/null
+++ b/tests/result/nDPId_quic_q39.pcap.txt
@@ -0,0 +1,20 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1509098995610,"flow_last_seen":1509098995610,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"170.216.16.209","dst_ip":"21.157.183.227","src_port":38620,"dst_port":443,"l4_proto":"udp"}
+2172{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098995,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1509098995610,"flow_last_seen":1509098995610,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"170.216.16.209","dst_ip":"21.157.183.227","src_port":38620,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"s.youtube.com"}}
+1909{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098995,"pkt_len":1174,"pkt":"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","pkt_caplen":1174,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098995,"pkt_len":77,"pkt":"AAAAPJ7rSEb7OSWDCABFAAA\/AABAADgRuYQVnbfjqtgQ0QG7ltwAKyQ\/COca1dd1bE1NATKbKH1UbNEn\/TIU5EABJEsBAQAAAAANBgA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+2196{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098995,"pkt_len":1392,"pkt":"AAAAPJ7rSEb7OSWDCABFAAViAABAADgRtGEVnbfjqtgQ0QG7ltwFTuA6BB7VA3w2dE7ZqQu\/HA9+aSHkQAacyJMtou\/Ld+GIcjTwAhOnbZl1DccdsXKM9X+aGBaaEp2k+gMriAxw7XUSiNYtQZBUSBNLFOTdb1hYpN8c7IZOsaDblarfxUPQxJ0gnkUeqkr4fuRbUc3rNSCo1QMBgMypO2NvSL5l22mGXYSmNX3toGT7ULzZsB61Qo3VdWUFY0IjS2GhkCgN+m+wvx9GGU9V5L0IHzmROUCwSwmxHH1ErMsKb5C0SPh8Moiuuma+1VPhe\/4G2icjKqB05ASgsiwkrwe4SR8d3GFtuFbHeuQE6CX\/fbhRn85iCZ81UU0O0DtLEzTpnpEMp\/HcwAW3wA0AsKtudDGHnSOUULPkFVRBhVhpeLqS2Li0YMUrWjkhCHDN9UoHpPxrqdDBOs6cnSVYtFl87oKhCwSDMwSNx1tbGBLcoib6tTeCM4ikOzQpKXL\/lxnGVpm2twrSoh9tDYCOMzC8iEwjRh8w8znhREm8bviBNUYoIfHaNCNbITO03cVWyavFVXmYqlGo+ZASq8dcX96Cx1fYD2dNrv4jvEfzhZHi9j3aqseDNoE+cm3+PWctSwnMNfg\/cAZ6+izl22P83dYaovKhaYXtYVtRaEh1uryXKQuvrbxgzqoMuHHkrg7QEJUZ5gmgRTEecPSWIb8SUwZxdqcpLdU2L\/gN+0XORpCHTJoVoXg6Lvf7E\/f\/bT1pGfsk0tHNVABNBD6SIl1dnyG5O14yJfWoVmTI2+G7UprA72A7KqcWm\/Y9PRilKUqk0W23OKWXwmQihG5TnwqOI1ASAfZdL\/efwkHmsUuwXwuaJv3FGekCSnevBUaUlKAb3RLPfFDu91ImNXm9aoyBuraDr8zBZ9bqaHnt+JcnWMwjFSOpYRdAjWYbEr13AgYr52pgu\/XfErhcDNHbPXjSUwKIzgcTnM8QTMujWWFjUns5aLY\/Mv0qOvbYcFGwXDlw8OQM5Q9vAraMzp0pOrSxRQJyeSoZ66v\/2PjjGS0ghqZ5wQB3xtFoLAlr2HDEgPgkAvO2RItTesAv\/vsh7iK4WvlZWfptfy9Gni9zKT+BCJpVckSsMJNJa9QOIqDZGcD7WdvqPZ\/+gs8I2oZlbXo5frTZi1mSER\/Qjm4utM3efHWXJNIk2goUh46mzxek43peBjGUnwswHlZbLnqUTKXJel3ddyov8qXphMbEnQYip6mhFYg367RZ8YRU4EKrwLm6Xcw9FNoa6Z5lJKJijsH5vSnEkZ0v8YX0MjTBReOeuoFmSr+AJVjpSlg\/7643dClWP4cXx3jdn+gn82y3LOeYLD2p8lV3aWTEv0GVmHGW+Hm9xJDl2bHgxIBcRhyDRGQFOC\/Z7+ehu0MP0\/0K5CKWxMw6rUTxM3JDgsEv2bV8wJzw544w3P4lqj\/UGLv3pSXxIfWP\/1WvqksJ+oY1kY5SVPXHla+pr7Q4eBAjdUPT41ziSFsQn5NBuGGWEuFCF\/QbEKcOu1F8TZ\/1M4MdpRIdqR8tFYEo+Vg9m6TwjRMK66fE6Mb60JRytY107EKpRJxBagZcwKIXCY2mZAsGOuehm5fQ1M5eVsO+apeXG3c9KMIURyf9ctvuQNWeWR2FIFfoH98C+ht+\/SSxjmFeV\/+d0QtrQ1HpAJKWfFcOZ2e+SesZS6k9AGyJLmN0367Nn6pJG6hN5CQDPLk+C3kOYs46LBkhHg0plOlFrwwdKcByjY68Z2VuRM7vrTmQWs6\/Tsdq8ti5cqSfOmHnALup6x5Ipr3zDykeMyuckk03bWXQ7Vwm7LKwDjsFd1vGiyvmKkwy","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098995,"pkt_len":73,"pkt":"AAAAPJ7rSEb7OSWDCABFAAA7AABAADgRuYgVnbfjqtgQ0QG7ltwAJ9O+AAM4OmALOTw1M50FdwtLmPXhOu9ZZKxYgqiuY5AjrA==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098996,"pkt_len":83,"pkt":"AAAAPJ7rSEb7OSWDCABFAABFpytAAD8RC1Oq2BDRFZ2345bcAbsAMfPnDOca1dd1bE1NA3h4HeBMTXQOayalF\/QaAJiQwR\/6Djv+UE9aACC4+BA=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098996,"pkt_len":83,"pkt":"AAAAPJ7rSEb7OSWDCABFAABFpyxAAD8RC1Kq2BDRFZ2345bcAbsAMUzFDOca1dd1bE1NBK3363QEAdAHzIGVJUE49YkvwEC+uRoauYMJCKMjo98=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098996,"pkt_len":72,"pkt":"AAAAPJ7rSEb7OSWDCABFAAA6AABAADgRuYkVnbfjqtgQ0QG7ltwAJui8AAQYElnH+hWbHkQ86hXYP3uGXC\/gDALIe5xMvGSc","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098996,"pkt_len":305,"pkt":"AAAAPJ7rSEb7OSWDCABFAAEjAABAADgRuKAVnbfjqtgQ0QG7ltwBD0sjAAVTBeiAl7ntS5NykPdurSWiF\/Pq256thJd6OWCLNlkAz1h7Lend+e7DS2G9s4wZD5yy2vudpPrrlsh7FYV1PASmjKNvCqMMmaIDvM0KGV34CSM8gOVZK2CN3r2b0Gf99ra2rAUd5d4K6E3s5qcf3PvKNZYvSnOdMX4lMX15pc3dKTlU6wtmArfh54PtheVKBu4iPYcY1dt\/Vo20m+t0w2I4fVGxx6TMJz2VmyjGUe86tcZAmjTxl0NepLiG6AXqV3Nj2GnqLTMY1BE3977fAG55M1X+ojk+EdlwjzVsge774iA8Kf+zkWt8expHP+fHfU\/jOxXIfcB1Qv1jctg1Oyr\/1I6flZ8=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098996,"pkt_len":60,"pkt":"AAAAPJ7rSEb7OSWDCABFAAAsAABAADgRuZcVnbfjqtgQ0QG7ltwAGBKCAAZn7CMV8qbL0fWn6oOhzgAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509098996,"pkt_len":83,"pkt":"AAAAPJ7rSEb7OSWDCABFAABFpy1AAD8RC1Gq2BDRFZ2345bcAbsAMTXODOca1dd1bE1NBR2XsPNLaaAz17Xgg2vx1O\/aNX9HhEB0OS4draxwc54=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509099002,"pkt_len":270,"pkt":"AAAAPJ7rSEb7OSWDCABFAAEApy5AAD8RCpWq2BDRFZ2345bcAbsA7P4vDOca1dd1bE1NBkjrsEYID7te43Xl7gQHp417fhXLMrmwG6QcoSWIfV2E843bE38Wtjm0xPiGFaJO3sqnW9cWbIvxUaAby68s0ZcNPEWtJDuJl0qIXX1Klm0O5Kpu\/+0HdqN6ebawlrB8V9Snsnaks4lxJkKjdu6\/w0GgTvmxqbgzW8rimML9yE\/lzFWPfKuh1BxNCtgFcU4GeY8bup+WQgSWO+cJC9Gd+B+UR36Cjsvfe9ASg41+e5pm4kgO\/JU\/N\/xXTEdF5w5PjLhVCbxX3HXsKrCtYufsws05yA5oy3vwR875","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+2196{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509099002,"pkt_len":1392,"pkt":"AAAAPJ7rSEb7OSWDCABFAAVipy9AAD8RBjKq2BDRFZ2345bcAbsFTok4DOca1dd1bE1NB7n\/rpIFgHtUM96xZF0GVfYPWRwkZ4yP60AZq1GHb2QAF7rjwFpSfz1mj\/EjuaEhYizFTmGKt+91IIo4G5AVRNyMWWITa1+O6mILjEhpLETYoIoWTFfErxi2z6NsrSzzpd29SL7Cnquc0W3z8omOIMtlB0rvgX04jKKgT32hlpVFK0sazG\/3WEgWEKoZ57DQCO9WERU\/GNcYGxhFH3Un2mFD\/WyTLohtkpFjtTYf3a8s4X4qlPJFPuwcThJ\/BoazlhaMbmCj+8T4mSqhW5EDv1D\/gzwF9YBx+uyYmBx2XKJUO5wojo+1jz8ll9Y7agZ2dvomnEdhK\/glxh+M2DwHeo8bv6DM7gMG0SHAEwQ4ME2mQA0FvxGP6EZH9OJ+6ss6deSKDzsUoYgF0lQQBVV4Jc8zUjRcZ170PK7jkTgizBbHElUuDjecZU7FjrlIsNMeWAplvUulCYEawFc6k3ABAsIbzi2Qw6A884B3kzhbjGSJECuncxhjYuJnXzI7sDwP2ghXTkyA+kimHL5766qGwFqeaMTMqBUhvtN+aiIsYLfvcrKn1QslWdEgXuXUnDQzgd4PpHXGpcFnFgm2tBb9tIGrObkeSxVvqtHcE6xhLAhvXcVrNTJWwnXp80idCzE0nlrameiH9BxweegI7AleU29QRp2e+9ygPdL3\/IVTRuar+bVlU3MAPUmzp7EfXKncnxansGPswBE68l1kx0uQH+LzrJATDUZnodrnSBYjKHAQGs9Rfb6Wlz4VuBtSq6Rla0sx\/nIvVUQ6m0HRxvF46NDFVwajCWChs+dJMLKi3TetsbUwbtLawOTlEDenA5144T4lt64q3dtzd4VVnhFthY3qCpdCxEtQMoWRYA9gCSA7rCFLiPmQmy4HAQ7rsXkw3C9629mSxM9HCbIcf9jymgYoKbTwUNPyXh4FAB8p4lSxWSZIjrWNrnZ73Nhy7P2m3DYcpW6XJa152Hayr3pbOJW5Kj0j2ug1elYfi\/NLpbHbFyJlUNYGXsMMbmjfygwucIQ2ynpgpyNvxt8XAS\/sI4l1GIIG6MtxOucYEDtavEWjWGpgSiKedS1fvTxBvADquDHg\/ux20iYHbks\/\/p2WGriTQoeWEv1kSlSdT\/gEfbgS5IR8S4E2ncu9qlexOuGA1EpTRkQ9SgSVOMDxtOmDMI6Fex1Bi0vp08RpTSvDbzW1l1QiNivixatyGJl1FF46DjtY7q4OYHlGhwQXf2gA2HJeqUWZ3XFjxpJAwQ8xoKY9nelCdYBsBgAgbZM\/zMO09cj+Vzcn8Wg54UkmIc22VNoKzGB89lH1\/51gA4UN+wZrdYSvaLjPWWmrlheua2aQUk4xdVlxjE\/Yh74tM3BWCMDegflbfLLX4MdA\/nbOGKabWYCbniNuCsgmimf3+guIhzVspib6f+yR6\/6LleVb8gfNcwO4NS6CruaVil7mo0qoqrGaNXKBeP7dUnP11VGpvOBvS\/eu3BHQIqbkNr4T\/2rAM66eOELs0\/cvK3Ag4Luxy\/jMEXDVXr1Xuz0jl3CImg4gEBjlT1ur51Crko6QVANt0b7VSyiv3x2dk+pAwN8fdbvhXHHdUMj43SdWJqiTKaPqk1WAutn1S4DZ9oUMHTZVRVApAuwSTj6Ieo\/KdMnO9SoiZPva9AhsU2bDvsjxCOOdD+yYAmOJTqwkbQzSwVLbgL2uMGtTM458RyKe1i5GuOa6L+JyeOfebUifLHADasrdy6Nl2+Linzu7yIK0AyA67FdYEoOL4Uju2WRndCx8UAIvXrOeAAXyCZl1","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509099002,"pkt_len":78,"pkt":"AAAAPJ7rSEb7OSWDCABFAABAAABAADgRuYMVnbfjqtgQ0QG7ltwALBnVAAdiKdDVFsewFUV9tQMV4S7VXC08w2rtkQj+4PK61Zm2gXhH","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2204{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","pkt_oversize":false,"pkt_ts":1509099002,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap","flow_id":0,"flow_packet_id":60,"flow_first_seen":1509098995610,"flow_last_seen":1509099044559,"flow_tot_l4_data_len":22131,"flow_min_l4_data_len":24,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":368,"midstream":0,"l3_proto":"ip4","src_ip":"170.216.16.209","dst_ip":"21.157.183.227","src_port":38620,"dst_port":443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q39.pcap"}
diff --git a/tests/result/nDPId_quic_q43.pcap.txt b/tests/result/nDPId_quic_q43.pcap.txt
new file mode 100644
index 000000000..9630417ef
--- /dev/null
+++ b/tests/result/nDPId_quic_q43.pcap.txt
@@ -0,0 +1,7 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388060203,"flow_last_seen":1592388060203,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"51.120.20.202","dst_ip":"72.119.217.29","src_port":49241,"dst_port":443,"l4_proto":"udp"}
+2172{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap","pkt_oversize":false,"pkt_ts":1592388060,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388060203,"flow_last_seen":1592388060203,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"51.120.20.202","dst_ip":"72.119.217.29","src_port":49241,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.DoH_DoT","category":"Network"},"quic": {"hostname":"dns.google.com"}}
+0405{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap","pkt_oversize":false,"pkt_ts":1592388060,"pkt_len":72,"pkt":"AAAAAAAAAAoAtmi7CABFAAA6AABAADsR1dxId9kdM3gUygG7wFkAJsU\/COg8d72PiRX5AdVtByTcf3A7ZqGOSkABJDYBAAYA","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1592388060203,"flow_last_seen":1592388060251,"flow_tot_l4_data_len":1396,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":698,"midstream":0,"l3_proto":"ip4","src_ip":"51.120.20.202","dst_ip":"72.119.217.29","src_port":49241,"dst_port":443,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q43.pcap"}
diff --git a/tests/result/nDPId_quic_q46.pcap.txt b/tests/result/nDPId_quic_q46.pcap.txt
new file mode 100644
index 000000000..8430a6399
--- /dev/null
+++ b/tests/result/nDPId_quic_q46.pcap.txt
@@ -0,0 +1,20 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1559632338055,"flow_last_seen":1559632338055,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.29.42.236","dst_ip":"153.20.183.203","src_port":38292,"dst_port":443,"l4_proto":"udp"}
+2177{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"AAAAAAAAAAAA4JDHCABFAAVic3hAAD8RmymsHSrsmRS3y5WUAbsFTk\/Qw1EwNDZQ6s\/m5wbfJy0AAAAEYNpYkp9oOdCGDvxYpAEEAAQAQ0hMTxoAAABQQUQAtgEAAFNOSQDFAQAAU1RLAP0BAABTTk8AMQIAAFZFUgA1AgAAQ0NTAEUCAABOT05DZQIAAEFFQURpAgAAVUFJRJQCAABTQ0lEpAIAAFRDSUSoAgAAUERNRKwCAABTTUhMsAIAAElDU0y0AgAATk9OUNQCAABQVUJT9AIAAE1JRFP4AgAAU0NMU\/wCAABLRVhTAAMAAFhMQ1QIAwAAQ1NDVAgDAABDT1BUDAMAAENDUlQcAwAASVJUVCADAABDRkNXJAMAAFNGQ1coAwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tcGxheS5nb29nbGUuY29tTF5QaJRKaTNoSpJ2byVw\/n2jR\/SXiDAUaxRXCyDlaH13oYGRvmmLh5UfnwV+qkP8rBLql6P0cVhpCGDXJyou7qdg+dnByWJAkTSY+CUh8yfYOYMRdIFYIeO6ZKEQGzvhOWxsGdkkbQk0joNdUTA0NgHogWCSkhrofu2AhqIVgpFc9hnRMDAwMDAwMDAg1WpdFEihkws6cxoJh1cnEudv5EFFU0dDaHJvbWUvNzQuMC4zNzI5LjE1NyBBbmRyb2lkIDguMC4wOyBCTkQtTDIxqZ2LiTEPPlI5bOtRl2sWwwAAAABYNTA5AQAAAB4AAAA+5+ExAY9KZ43WAi5gboQGad\/XZY9NgsCyvAvlen24imYZuixux5QJ4+eD6hkpSGJfDn9+XBFyJ61rFG0t2MkrZAAAAAEAAABDMjU1M\/in8FpHdkpOU1RQM\/in8FpHdkpn+K3FgBXj\/3u4AAAAAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1559632338055,"flow_last_seen":1559632338055,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.29.42.236","dst_ip":"153.20.183.203","src_port":38292,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"play.google.com"}}
+0413{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":78,"pkt":"AAAAAAAAAAAA4JDHCABFAABAAABAADQRHsSZFLfLrB0q7AG7lZQALNrDw1EwNDYF6s\/m5wbfJy0AAAAFbGsm7eq1vsQbMX0cQAQkIAMA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2187{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"AAAAAAAAAAAA4JDHCABFgAViAABAADURGCKZFLfLrB0q7AG7lZQFTrzqQArMTUQF+qfZl\/j6GDEC\/I+tHha\/dgY9YrBnIQRh7ycTzuKlQRveBbgIPaLRsi0ExNkrNV7kEMqhWFB8DVw3+iXp7Q0SPR4wk2prQv0Z9EAI0pujRDgT83qm1mSoLM4iQy0bz0Gm96wSsATMKmUKyFyFBnpTsLUf9Xvid5CkSvVYq5IyCOuKfH87rCz5QTkBH6YTC+QDCSrAGsbffYz9bMQO0R4i01YSA9\/I4aHEs98s23RNpdZor+Q4Oguj04Ui1Bg8f3CMHs0B1wKZWu7IF605ju+my8Ex28FSM3yemKCvdolaLftpnKyeHoId\/QpIb8iwutFlbt0BwhTCDewVFpV7BQBJRHSzzcqF3KHmxfGeJEz8HgPupbuU58vn9Kst3qPAnRfWPM9Y\/xuqQrVroUhIzD2KcGL44idNWqzV9MuP5s0aD\/0n00A8OknoaT1Z0nD6uS7MwoMEp3hjaZrYh1FVS6ZqzuhHdMfQUCymEejFbSmXbd58wxV444MjFUEdTCH9C5nplkg2PrEbadm\/t1\/rEMeg\/JOLjOqZeL3RVNZnVu+64GiTXTooYqjnh40z9xHOOmQOZyfle2iCVO8R\/ivXtUThQIVkJxvD+lByIAMuKs19fjh7OTQuW6brcmUpLLxNTED3sSOJ1MHHkPoWBfdRuMlOs0Ryz0ZCwxjKB2QykP3nGHn+U9cQJjEEK5qvkEMPYypV1+HtjqlPnl6iu5Sd3xNKaZ9FcaL83oG6RIF4zjJ6ihumZijejW+\/cRyoX2\/M6YpKMTtn1WRn9rhtQry3eVZPeQNVSd7XZL0VdvQ5vu1ggAQn5TQ5togK+G+4pXqF5jfiQ6DBFgLpBhWv\/UFK7aVWxuJrDA5S4u1lGTu45kd+19qZi53LcaXhMl0qJBJJF3oCyKeyoTTUDuHU27jmLWrpsAktKlqGf+4TuB3lSO\/EPFyrp8KLENcsfa5\/l+B8TZFRRUwAQv7YeB+SquPT+XySpsyvSWPmJ1OkgDGN40H8aBclc9K0qdDBg5M2dE8QYwGrrNKoCeKgtW9TnOyhkw6iCeSMxUnEz7I72YmaU3B4Qdh4i1suSJJS\/Is5YBD0LYW9RGca2psLfKVVQ3pVzCNm+8iuLUD\/+N5dsKBm97UDJJu9QZbvh\/17ADMdqmqjGV7a\/KL1diOzof+kNEM6D63PNaEqTcdTJU679aUQuDA36PwnjOfPQ326RaECpj7agr5AR7cT1hl7xR6U2rhzkl0Kz5J\/fIaAVikO2T1YDzpEa6ViQoL96Re5TbD3QjIjfR4Gp0AjyScTnvjlkaS0KPbZ3dZO0yuuI8K2w5rv+O9wTz\/j3JIVxILrgv+nrmo9uCpzcwBNXvDg5SBwN8NZxMqNH+W5G7d95IPrVS2zW\/4pG\/B+zxKwHjBFjH1xLbTp7hfN1GljHGDpVEQpGi4OAY8li971mNtDTBydQJmQ7gQlhjFgMlfgoeRtSHU+o01scTey2+WUdu3zYtDsTDdxFIAdmHZbOrHyzRES5q\/KmutL7eczEoW1LzE4ioLwIH\/g4j5+nlj4cThgEcmecZB7Bt1chmjIYfJVOi0zwKH0\/NJvwsPzAtyn1PIZKiwEc\/CbD40rT48BToIWSWBLXxWuohMPnE3FrkoivOd4Gpa\/0yzU1wMDSMH+mbgsZhX5zYEoGglp3CbY5FVv9cUPm5sCy1UpjiUb\/pbUisccf6scx\/oiXxAimL5KCP061NTFY85qjPvir2+lXCW2MH9mnIP3P3l0xfA0+tgQ+tN730D7+w1UgNyI6x8+Gr2OtccMTyA1EwS8","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2197{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2194{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2189{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2200{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2200{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2198{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2196{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2200{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2200{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"AAAAAAAAAAAA4JDHCABFgAViAABAADURGCKZFLfLrB0q7AG7lZQFTtgRQC0JTGzsSSfYHzP1PXWgALe4t807BCb1pJ8OtHMred3ifs8lCxeen+k1HTK67t89Xh4IyU23v3zzGs\/vt\/l1KGzBejYwn3+KPgeJHTRiT2p8R7eWw80f3J0Av2vF1D5oHm4UWxXptodklomg9qq\/8jr2USOiFYQzo3adzMeinycSNmf17oLVHN65ksNW2MCSAdWUzouy+6knG3Q3RlUFGalVRJPLzsCLgA5me1zDTsBrC6+9OydLmIH\/\/GcllqACjP0ynheBL8Qqki\/SpyYnhRUGx6qf5Q3B7Auv+M9BKaUnG0WGpOVrXyv6exClL5nir0aXgIBVub3hoMIjlojZ8nnY+k2\/yx8jMdxDZjMiMH2LTL7kWuzZu2AHucyXCk7O65Wa4qztLYwnvu+KPkyyj3KyFKj3MkFO8WXfPRMVPFnUv6GWyzXRs4o5x\/y9IGW71H4C0+dutoeFmkCjnj9\/+1zubdqJ1aM3zdNK\/zUGMjwv33OMsbtLJgB5moNpFFfo1iBNS+Ys04x7R7slgWGF\/Lq+ZRnacAXWIbECyAxZUZwGNGvH0wIsJGX+5asIO+fzKNkhZanHeZm+XstrNaq2cl7UEy21PZHfIZNocs5P0aTp\/ynxPP\/hEl\/REEYrlgYCNyMZUCkglxeKl4MSJnMZCjiOlF6ay\/h6\/KpUa\/57z+604bmmNGorxk6\/e\/7a4UKpIwoOiUm+5AioA8Wi27msHfzUBiFsYVZLGVHyCxDtVz2Bj7y4nYohP2nkLWPVzCyUExgBB3CaMxi2Lou\/oDZ\/JJIPtu4\/F3sD1+cDyd2urf9Q82E0bQVddlXFr0erQYI9LuNI99bh4xjcXor8gNYDtMtDGxTuerTXXAlkVBbuVr2Fu7Cq7tpn2Yhm2nBbWh0JHSWTU4oc\/3z3hLxYtx9dqNICPf5n2woKdabnPgwPZBWJmn8Hj8lCpMk1j9qvYZ9HwsY4OGVKBl6E4se8\/kZZfnf6hozqLYdTA6OCsOHGqct1Ygc4ZKHRcnp0fyqFGXnM5WV5Mq64qKX+2Sk5jqrcd62OqfvAItRDyqc0VngUWmbsZWNd1ukwCBOsZYK+ER2kZljep2IdkvDHh8EttBGiZWwjS2xskQwzPyQFUIcEylowaqHnbG1leuX6G2Bih907hkuthTe4r9cfFIL33856R7Q31tuy8ZCFERUUzpJ5jKauZVv2Rzr2N03rc6giYsQ8MZYu2pKmfDIi31jlEY7cNKwl0Lh\/kvlM\/RAeuknFCDVDW8SlliC0UMyXISImeCsetAFr1ASL\/iYy+Rh\/aF0R6yzmRAZuTBW1zsOo3vLeQ4Lawe8yOOqcQdL4L9313Afkgz6kLIQ0V2GgV\/MM2r7Gi2iyX8UIrCA+KfofYyCoR7qdwR7YRFsXSYqmZiNAKD4TAsryPdbxIO5z05OmZx8YHcBy2S7qTFo2tT4K2kmL8DH7G0w9uqUeidJgQQgzNp0b5sB9M6VcC6YsKj8id9OBnfNlPsNHJt4UynPZUlnwpAlNgEuPaJ0fhjBxw4w+ruaRVv0ZxvStphtTiuR67VSybpixYhkJW8wfWklb6vRz1faeZps6i7LigZspWX93Xxi1URT0T+9rPhnbWiBzF7SoiEZWbfPTGDnJCuQmg4Q\/sRDWfebexQmJTgCmkMx3YaILcGvdnfZGsPj9bjh8Wh+c1yqEwfHZOT4vcUs2+0KJV6gMNs7vmNVaTtilGUm+n45TEjckEJm6Tg56MEsR2FNkNsVfM5aIxY9uOZFdgU+Oq3efzGBTLFZXdmZMtsx+acYNQlQZkA3J","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","pkt_oversize":false,"pkt_ts":1559632338,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1559632338055,"flow_last_seen":1559632338367,"flow_tot_l4_data_len":20561,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1028,"midstream":0,"l3_proto":"ip4","src_ip":"172.29.42.236","dst_ip":"153.20.183.203","src_port":38292,"dst_port":443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46.pcap"}
diff --git a/tests/result/nDPId_quic_q46_b.pcap.txt b/tests/result/nDPId_quic_q46_b.pcap.txt
new file mode 100644
index 000000000..c8aa73d6a
--- /dev/null
+++ b/tests/result/nDPId_quic_q46_b.pcap.txt
@@ -0,0 +1,20 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561708873328,"flow_last_seen":1561708873328,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.69.216","dst_ip":"110.231.134.35","src_port":45530,"dst_port":443,"l4_proto":"udp"}
+2243{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":1440,"pkt":"AAAAAAAAAAIAGNwmCABFAAViWnxAAD0R9xCsG0XYbueGI7HaAbsFTnXjw1EwNDZQ0aOrrPYcbNEAAAABZ49NM0tlJ\/QWOEX0oAEEAENITE8ZAAAAUEFEAOsBAABTTkkA\/QEAAFNUSwAzAgAAVkVSADcCAABDQ1MARwIAAE5PTkNnAgAAQUVBRGsCAABVQUlEmAIAAFNDSUSoAgAAVENJRKwCAABQRE1EsAIAAFNNSEy0AgAASUNTTLgCAABOT05Q2AIAAFBVQlP4AgAATUlEU\/wCAABTQ0xTAAMAAEtFWFMEAwAAWExDVAwDAABDU0NUDAMAAENPUFQUAwAAQ0NSVCQDAABJUlRUKAMAAENGQ1csAwAAU0ZDVzADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLXVwbG9hZC55b3V0dWJlLmNvbXgDMRgyNKjZnbeNIexiej4o7qx+V929kxA9dDLsNr49+J4e7Bxt\/tr6btXxr2ajG15fa3Ruq1EwNDYB6IFgkpIa6H7tgIaiFYKRXRXJTjAwMDAwMDAw6FYYVlvjBaujP6e+o70a5ZenNg5BRVNHY29tLmdvb2dsZS5hbmRyb2lkLnlvdXR1YmUgQ3JvbmV0Lzc2LjAuMzgwOS4w1Y68K3sgywV7JQccxBohdQAAAABYNTA5AQAAAB4AAACrpFnJA5r+YO5RcQGpd1l4yFvK+8akrX8Ivr05rqkgauMBpMQ6cwQFDJS6sLs7Du5\/2eIOY7vG9b+CMCy0OZxEZAAAAAEAAABDMjU1jtxYjsj\/DkhJRldhQUtEM47cWI7I\/w5IZ\/itxYAV4\/+8OAwAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1440,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561708873328,"flow_last_seen":1561708873328,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.69.216","dst_ip":"110.231.134.35","src_port":45530,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTubeUpload","category":"Media"},"quic": {"hostname":"upload.youtube.com"}}
+0480{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":126,"pkt":"AAAAAAAAAAIAGNwmCABFAABAAABAADgRW69u54YjrBtF2AG7sdoALCZ3w1EwNDYF0aOrrPYcbNEAAAABKUO4TMFStZdbdRt4QAEkVwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+2268{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":1440,"pkt":"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","pkt_caplen":1440,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":121,"pkt":"AAAAAAAAAAIAGNwmCABFAAA7AABAADgRW7Ru54YjrBtF2AG7sdoAJ2svQANZ0BQdTteTPGKYB0T\/Suu7ddNWywm\/bYiMAK8NlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":137,"pkt":"AAAAAAAAAAIAGNwmCABFAABLWn1AAD0R\/CasG0XYbueGI7HaAbsAN3hoQNGjq6z2HGzRAkZgauR6jC2QY2hinAIQJlFz8Em5XwagPo8YW85xltrq2ilzWOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+1047{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":546,"pkt":"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","pkt_caplen":546,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":110,"pkt":"AAAAAAAAAAIAGNwmCABFAAAwAABAADkRWr9u54YjrBtF2AG7sdoAHHT4QATnuTX72gvUmquNEkVb5zg7kdQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":121,"pkt":"AAAAAAAAAAIAGNwmCABFAAA7AABAADkRWrRu54YjrBtF2AG7sdoAJ\/kaQAX60zUSbFtiMY\/e59ooA3\/LcO2qX1MenZQ4nVpTbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":129,"pkt":"AAAAAAAAAAIAGNwmCABFAABDWn9AAD0R\/CysG0XYbueGI7HaAbsAL8rAQNGjq6z2HGzRBEFWQIvQWUIMR3liZaVQf\/OZzSZLXdBDHn9+bWZqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":110,"pkt":"AAAAAAAAAAIAGNwmCABFAAAwAABAADkRWr9u54YjrBtF2AG7sdoAHNVXQAZYrL\/P\/Fx32mXnPvKVJ9YXsvcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708873,"pkt_len":118,"pkt":"AAAAAAAAAAIAGNwmCABFAAA4WoBAAD0R\/DasG0XYbueGI7HaAbsAJPDaQNGjq6z2HGzRBYRpBYT1xMAPa5Hot2vsvIk40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708874,"pkt_len":546,"pkt":"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","pkt_caplen":546,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708874,"pkt_len":110,"pkt":"AAAAAAAAAAIAGNwmCABFAAAwAABAADkRWr9u54YjrBtF2AG7sdoAHNKWQAciM2TV1kQiE1qM1Kw6R5Tr1LcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0874{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708874,"pkt_len":412,"pkt":"AAAAAAAAAAIAGNwmCABFAAFeAABAADkRWZFu54YjrBtF2AG7sdoBSqgFQAiaRoBhm4qKJVTpkA3mDdIBfkdOkRvPi+OiQ2f6ebmI1YwBlsY02KFPc0pkrRO0ovTlT0Lcre6Tsq1rGTZntLXdoAc5wlMtHMQO9b0N47QPiGMudRCFZvQ7xo4\/Oqb3JkD75KqXjqoA\/dl+h9qdDqMp0Uq8fkl0Ttwpc8qUhpNe2xry9oglOOPazua4Wvo3lLHIvuzNtIlrBCh\/HJSZNYATUyofFp6qNulSMmakhMBq9G\/XApD\/AN5xqFUCGBrmAvJrztu9HLfavKHt3gexWo5NtTQrLCfNJez4pKYUotcM\/44wDEwwDyQZkIi2pkOyDhlqkIYgFnhZDvk4n+fQoH\/44Z3yc7giiqCxjERspi+JlpXHZUasYidNtuB5\/yIfpccbo0mgNeTKaktZ7VbQcDEhl1jOUJRTUX2eKXFmYosmPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":412,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","pkt_oversize":false,"pkt_ts":1561708874,"pkt_len":106,"pkt":"AAAAAAAAAAIAGNwmCABFAAAsAABAADkRWsNu54YjrBtF2AG7sdoAGCfVQAmmRyNJwJ7Eza+L+zYDjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1561708873328,"flow_last_seen":1561708876422,"flow_tot_l4_data_len":5380,"flow_min_l4_data_len":24,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":269,"midstream":0,"l3_proto":"ip4","src_ip":"172.27.69.216","dst_ip":"110.231.134.35","src_port":45530,"dst_port":443,"l4_proto":"udp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q46_b.pcap"}
diff --git a/tests/result/nDPId_quic_q50.pcap.txt b/tests/result/nDPId_quic_q50.pcap.txt
new file mode 100644
index 000000000..80da05e37
--- /dev/null
+++ b/tests/result/nDPId_quic_q50.pcap.txt
@@ -0,0 +1,20 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388088469,"flow_last_seen":1592388088469,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"248.144.129.147","dst_ip":"184.151.193.237","src_port":39203,"dst_port":443,"l4_proto":"udp"}
+2191{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"AAAAAAAAAAUAeJuECABFAAVi6fZAAD8RV+v4kIGTuJfB7ZkjAbsFTkJ3y1EwNTAI30oInk7\/XnoAAEU0Sh+G6jJaQ+WVeKqfVhwekyVcdAg3VVt4yXAoIvukSElad3ZdF7cP3aK8QwnOEdppZZL4NlS1J14QMkJkSKLH7KTs\/J1g5Qy7Td2oJivMgU4heBjsrEKX+Kl+zumCGj7r3rx\/PiGGoerDCuUYVs8\/3DPxrp05vPpL4oM6Ym20RL14LkdkclpZEotPzAVfKrp+bORIrEsOakCOFcnmRLxpaPe+skuFxQ7e+No86i++ZXUpHINRIOrrAKO6MnqhHg136TH30JRy5V1vvrx9mRvozkvzR4RrmmOWFYy9MHcYvR9ozsenVMRZ7mYRkPWmCIPXpnhEE4otBm+PYFJSnVZnoQYn2HvDgKZX+IG0tDtVasnvuIWtUyehZMOA3Auz2JN+nSjxfDEV9Q5eGeh8ZL7tXInICXQpmTBohUGs0nyUi\/EfxDhlCRPETyBYxPytgznwCOTRnGV6yUDNYNW6V2twpvbbFw15F57Y24i98N43glYYJUVqHmVwrosseQvdWLtOLEXpAKvwYCJ3nJpSVOyBYXd8okAO08VeVbydpen0iUOESN83ACwm402annjMIqbJEkKbZr1E\/bWLUE9ayryc3t4SI0rfAV3P7Bzoh+ePS0lFG2mEbR3Stl4jejVA5bbBNdQAl2XVCvlfkMcgN6wNzkaUtoY\/V5wJqcqWfzxU\/7CxIyuqjs2t5GkAirbR6GD1vSMG8A49cBdJIe0YUwOEL94vJZZ6kgFxLSzbkqIb\/JGeunCp3ImPtw51lpSKmOzgu+aiRAw0072bcZedmowvyNmMZ6ZwF9G2\/T1BzTiaxUQiuwph0MpDNq0KE8ZLx7252+rHJYkpatjHePpFvOb3XaUfP7KqMGQXysXzDurgMN+iUJmRB27gfV7BceLcaKv4JsOEla7D\/ujhuQ0U6YFyo2O4mZUs06yMlW36Jh9WkejggHA6SE58C6aM0tZVAq4PzUVmlUFs52p22qgRq5vex74TEu58hdkCQjr1pQ94XFmXqgk+AVK0nXtqdM4JYhPeaV0edHucrnphtrDalQIUwHX7zoFqP\/AzYEoeCztqDi\/kawodxc4PmEb6NM25k\/CXUeCX4uUwv5+p46bN3O1M+xvlb2rRRFG9UZ157Oh+jebOu+0rTdiK67yyDJDMe2VTvGsXi+\/G2gN2zIWwGydc\/InHPRNNQKfHhC2jggd6wv4d71pPOaI+XNe1l7JNMzHwfbkZBDlCbcSj+rryXRGPQIhCscDZiFFGrGBnyyH57ea6sGM\/d37gVVa+ukJTnovNq\/9LafSrWBaF2RrNYGE+TcplNYI0Sq5eb9DrfHpoz4HPjO4w6uwZIeHQjlw00+daMYbUpNYvzBru4JYoG4+FnfLnaJ2RX6rVgfBQIqnPe+8ho+oVfDUJnsA6e5JTlC5uDUaaRcrC0+Ji\/wYvhpr9KixWcINr\/Q6IJf8RuaNMWGUoYQRmSfJSGr9d2O1TlO6mLpi0PyY9rao+oramJEZVMS9CvaFzYMM4ekODEtI9lvm8GVMwUuwhbqucZBCNIlAueuvDA9mFax9H3Da0FnXF80HbkF0G0pCqtWSLbDFAFtV9SICp3zwHTJ2IckUyzfK6paD68rLKFhUUBI7WeX4+s0d4Jr10hLHheThooXnr5xOHtBeSEaQFC9zlGwwIuoXzDqApq3BbVKodu6HoOITstmadm3\/MIc7\/KuaqI9NjMgaFSVmEVWOH4WbQci9HsoHbnpJWe8KeP3p1LSqGOSM6yXozbpkk0hMRvAJ\/Gnzq8KxN6H6U","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1592388088469,"flow_last_seen":1592388088469,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"248.144.129.147","dst_ip":"184.151.193.237","src_port":39203,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC","category":"Web"},"quic": {"hostname":"www.googletagmanager.com"}}
+0423{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":84,"pkt":"AAAAAAAAABAAH2tiCABFAABGAABAADgRTf64l8Ht+JCBkwG7mSMAMgZJwVEwNTAACN9KCJ5O\/156AEAYUqG2lTe2LeIe+Cm8S2sDMjR\/1C7uy5\/p","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+2195{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":84,"pkt":"AAAAAAAAAAUAeJuECABFAABG6fdAAD8RXQb4kIGTuJfB7ZkjAbsAMoiixFEwNTAI30oInk7\/XnoAAEAYRBPMrp71zr2EFj5wmqAqmjc3agH4W02K","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+2187{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+1067{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":561,"pkt":"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","pkt_caplen":561,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":67,"pkt":"AAAAAAAAABAAH2tiCABFAAA1AABAADkRTQ+4l8Ht+JCBkwG7mSMAIQZbXmmAvMm0v8PRAIAQwtThTZQgZ1sufRP9zg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":75,"pkt":"AAAAAAAAAAUAeJuECABFAAA96fpAAD8RXQz4kIGTuJfB7ZkjAbsAKT1MRN9KCJ5O\/1563AtKVd2wpD54tb04a4BNn11poIgffn29","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":75,"pkt":"AAAAAAAAAAUAeJuECABFAAA96ftAAD8RXQv4kIGTuJfB7ZkjAbsAKeV9W99KCJ5O\/156ar7wqx8lesgDZBDdC6tzmtbUDJsBbZMR","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+2202{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2205{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2185{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","pkt_oversize":false,"pkt_ts":1592388088,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1592388088469,"flow_last_seen":1592388088935,"flow_tot_l4_data_len":19754,"flow_min_l4_data_len":33,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":987,"midstream":0,"l3_proto":"ip4","src_ip":"248.144.129.147","dst_ip":"184.151.193.237","src_port":39203,"dst_port":443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_q50.pcap"}
diff --git a/tests/result/nDPId_quic_t50.pcap.txt b/tests/result/nDPId_quic_t50.pcap.txt
new file mode 100644
index 000000000..b9347ece1
--- /dev/null
+++ b/tests/result/nDPId_quic_t50.pcap.txt
@@ -0,0 +1,17 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1598618820564,"flow_last_seen":1598618820564,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"40.154.127.200","dst_ip":"166.240.188.209","src_port":49836,"dst_port":443,"l4_proto":"udp"}
+2196{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1598618820564,"flow_last_seen":1598618820564,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"40.154.127.200","dst_ip":"166.240.188.209","src_port":49836,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.GoogleServices","category":"Web"},"quic": {}}
+2204{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2200{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2193{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":1392,"pkt":"AAAAAAAAAAEA4e3RCABFAAViAABAADURNGem8LzRKJp\/yAG7wqwFTsI14VQwNTAACFVfMtNfKdhjRTV+TZdrbCv33x6iH690PyehJilsagoNTR5bonnLL0dBgoMc3YX6O7TqPoYEmBQhBo9qpBXyGoeAWGhcJFKsYDc7\/u4ZX2hLTAloQ+a\/pdH22A8suHezIhbLeb5134q2RA5HFoZzTMTZSBCIhgTstv9PXQCwumfychHJYHs0Ft6yq7RAocqUEq1\/LWFpsGhK1ImBcJ8BnDM5dxDKgRMGlmxspqHoB9\/LPeslqcwLzWl9OQB\/VcpU8C8sGBntQaRgPwf94pa0UqHMz\/2obpKwKjbwwgbEskSQbqBuFooA5L9rz6S2jrVdw6PE85FWIxp4KWk1jQusgYQi5jN8GLyCPIvXHA53qb7OcsTkg4Ww7b64NWwW9ifQuXd+Gqe+UisPjifLIntlpGXlYNIY7BnAWTPSpwUdXy6Qtqrk8X\/ruvgOsv6aDjOLl4Ge8zEim8Amf5sqpEA8LJyB8Sv5O66dtJK+I50u7YFLUA7h\/tgVP1iPhpJTEnCH16DKyMXZFkbh9DilxI7c0pOAZLYJr48QuJox4RoLFZ9lMTvsKjVku\/fWAMDXEQvaFNwvlBvlnQb9JbaVASSjOzlsBofk50BdO9mypm2dSeER4kNd6Y3YDYqrbu2dewaFT5S3EXYNt0lT5NZS8OaF9O08WAiSZmR5vmuAfuLO1zLgGQ1Euwq86NKKfd7X3h+4ViguppZQrMcNF2YojGrt5MMBgpSYR9Hb3pj7xTb0uSkVCu72ZrfL98amuFAUy7Fx+treVOyYo3k4jCPb2dH2G7olLbbzBoDbI3iNF6Ekqomn+sjkEDznbOBqf5f+SFEITZLVshGDkaECMNIlb08WSbhHUCFxGcOQ3UPyKpjOEVlwdNr04Te9hF0D8k4p+KIgi1A+waaYVHLFETZeT8YPT8ZDHf6kMrYR4r7+vw1sGIhuXD7dlP3xV7QBWhPLWn09Zzf+Fjtn\/rGO7M7jIytdlLNCA7WWcqkE38zytO4rGXwn4Db\/WD3qNvU2vCguVZQJh7TYQjHrvQ1m\/kei6U2kUJxRU9pZY4RgTao34mbxevGfXtL4ZcIwdhIqpGsExlSBqASylYBW8VtVsRikCdpzuCR29+fKrJ5GQKsbKq67MSom7g1SPuKRUVpcCxxtEonsShqkNxNzZ\/KxLmT8v5MWSqqjE373M3Qtz+UlarcxgwlqXMcKkepFzis88I4xRmO9NUhDQaOshdj35UPLk\/InvvlEsTluejP7p5FAbc8LG6s0arB0tweHuxaedQ3ZSCoivRmpoiifHNeSVAt5G5yOhX3uHflkqbYAvXXJvJz\/9ghC6SZTst4VCRHHiBQrVKQogZkzh\/ykPsgutAYqQ0MMye7j5zhBayUaElfmpZhnfHZOgPfYCxTTc\/RtMexJr3LPcYh5ge32zWBwHlWorfSgmJcAhbebG7\/n9y6h\/ty\/9E6FoWOluyMMDQ7gv2jL3WXLU+cqEBJmMDsz\/0XHB8yjYAMFXAREmTS0tJ32G3QTeLJYyzJ7BvLKslWQtK1WmiJD+z\/wfOk5auh4iSdzg1KQ669g2tPVS4uwbx16g0jlqJL3MH78oeMHfTePuvb550Dwg8s3yCO8hnNoYt3ZDALl0JQkpBdmXoMEdlyv12lpf7U0iRGf\/4pr0CE0SG8rDso+ecL+ggGjpdwPWgfQ8nk+lOeLsTXddVYv03OgnFqwhUvd21zzUyTUY4mKGWFoQ1WIUFHdZw7rjCzG6mB\/mAXdXyriXrRQk3wIAGulMvV8xiE03NCdGQQ5kPv7nYJRK7sO","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0814{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":372,"pkt":"AAAAAAAAAAEA4e3RCABFAAFmAABAADUROGOm8LzRKJp\/yAG7wqwBUiB24FQwNTAACFVfMtNfKdhjQTkel0q94ZItOeKbj6OxbcFJoQQVaZZak0Bh1BLF\/\/NZ4vK9O0\/Iy6KVVmpDncSZrSRwHvcZHSWbwZiCstsEDdWrPtcbInQbWLg22euJTVfuU5XsciFULUWeQPLAOQqZdm4TGL1RYGogRCrzgy1YIhzTA\/sljiH\/YgFkGkv55prkYaQZ0L3X+SHIw3ScFYOOfEaTKZ9UZsO3Pvc\/FFafyEjWlGZWGLfwpFNh2DMcKPiZNzTcUxqJpYEehuKjdd3uPDmJPzfrMlq9RlSvd1c7GpiMmPJM7M1+8CxZcfUFGSEw4zxFM4YKu39AIJ8LU\/VWvgMbS5kedIXCxCBRacLcGxpZA9djAjOLWYiPP6gwUSpIvz7Pr2cVDzE29sJajeCR2+5l7nzkQtdzjYwH+dxZXr47q1lihmuSWcEW","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+2198{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":1392,"pkt":"AAAAAAAAAAQAMt+PCABFAAViUWVAAH8RmQEomn\/IpvC80cKsAbsFTgQ8yVQwNTAIVV8y018p2GMAAEU0tKbG9TqPyUnh17\/4VzzFc1+LW9gcSZ\/alCvN4Rn5P85K8nRiZZvmLtEe4JHw59+6+YLwxUOMtQnTOSB2dJ9MOaxHGgqt7H20SvCNySTWziIZFNwAGtT7q9FZfoL1zA6TCiU44VEzhHptVvu5MYK\/RkV1rjTjpsU0U47pV5umGRCbikv2CtrLG3SjwtO7rJp6KKDMYh2E4uq5bwlhWAdeW7HUFQHEPg6QE4gNONCRQtZ+UjAH0PwZxWLUoWmDhKOv8N6RcmuncQ+x6qAalQV9iJ8fwWhJ+6zrHNluj18T5v0+E4LRTt08yk1h766jirR0m18HYJ+bzmuzNVxqKH0dTSHpTjKDzDV7GE6UAjOgS1NCdLGpF24McCStpsznky+JlUmaKRSLzaYG+i8AKu3Xf8uFADaSLjS4PYP\/bjGSolRcd\/E6HPEdTXCBblIWj4BafTZoWvfKYxGlYSS+LSBq1k1Up+V\/khfMqDWqE1Qre+Dr\/EHQ0S6O7patAkQsk82Fd4cStIB643hadPDVKGsyaOZrVi1OaBsOsLDzBEu0PgdFTw6SCXhiRAvuat9MEDwTXYu\/+vZZk\/QXHBGnL\/EABcJhw4c8dTVrHlLnJAFLbAF3ifeMqrJimm\/06\/yfZlqNhVKPrtNqCKDgjClGMIT\/qOTSXoIxhXwBgN5iiBJA8YWSxDv0aVDf7RLBs+D+3V6r9ncXGYjXIuz0AJYC7CxP7b8ytMU7Ld77kdF++fSJ2YNa+r6wFi\/w04TOH86UEwifzvIkv7NARW664E\/FJ9JO9JMHy5fylvg9P\/n90L+NcrL5M9x4jUnLav2ltcvJ4oWws2XjKNJoX3Xxt5aJw7qt16k454WVxg75V15cKjdWArUIGbk4rP\/QpAW+62hkDcAhve\/zpooCjQai3i3oOSRE9v\/atXpOVuLkdxTHwgaxJGFzUO0bUrqX88bFY\/wGwSAzyJr2OOcTbjEQ5glWLB4aNoVoROn9sAOwSAuWBeAr5ewXlmb2dNOF\/Oid+qjKrGGo+jv1u5+RjETtLz\/\/HfDRsOabHqqS7yoz5h4AsHdtrtit6qsEwV7rDnQKACI5LLVtOpvRJqKC\/Ew1e2yzvdrr6dwf7xC9mESdqml+wgTMANl7PruMWr+kmNk306O4Y3waSpqNqIdFqZnSqkeSoxMIxKRq1JmZwQwo257VMb91bOwWE0AF9gy37kK5am3bVDC+AJKnRtw6aUB02mvlhMeA4uhNg15YuxgtiSjDTtz0yTCKkM\/3B0DKcXgGAxlB2XllBEsZWbMEjyCAG9r0HQtzXH9sLMHVYbR2tyjRYUQXnCbJGWg7gGi\/OJbeQgKpp4gnjjMAp27SNmv6XIgfAHnpWpTClta2U+NETz1bwA0zmTjHDSzAqzVxcx2v\/ysin0Bk+8v5Wf2KvpEfyJA6kxmRuJEe6lT9bpkZWu13QhV2MKYdBiG1\/PnkOCCE2Lk4dwkiXJ4zG7IOGomfpZcujlQPssVq475lDyGrxSc6u4SCa\/yeR53wGru6yPi4GePZcl8cVgfmGCDHTTC2rG+XFtMyM9z7Wolc1gV1pt6q6mo++7h7pfwAJZT+W87MxqbHst4VJU9ToiWeBH6g0O8Qq7iJuK3CKDHsIBrJEcgdMdHiYVgJjuGfFAXTfxVA8M3lsZMLOvXqTYG9i3Anq3pd5mEn9NQqm9Lj4QubECnAqKa9qfmOVNwFhsMPTGsLz690gXC5nhO6H0fdxmlo9vGrzUvwuSPw4MqoDc2RopXxMZGJ4fxuS309","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":83,"pkt":"AAAAAAAAAAQAMt+PCABFAABFUWdAAH8Rnhwomn\/IpvC80cKsAbsAMbR+5VQwNTAIVV8y018p2GMAQBgWn7XLlY\/MBqqxlL7IueYHcN6x8N7X0YI=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":83,"pkt":"AAAAAAAAAAQAMt+PCABFAABFUWhAAH8Rnhsomn\/IpvC80cKsAbsAMR3d6VQwNTAIVV8y018p2GMAQBilVbNC+3iMfh61B0UQ47z0a4SEwfKk2aI=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":121,"pkt":"AAAAAAAAAAQAMt+PCABFAABrUWlAAH8RnfQomn\/IpvC80cKsAbsAV39w4FQwNTAIVV8y018p2GMAQD7kH3pewuuzUo\/OFt0GnFO16txKcnrRkY0vUJv+Y9c0kwE0Rc5XIrmHxEDK0BKZamSfPpMufUvfmMm2GpJe+Q==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":68,"pkt":"AAAAAAAAAAEA4e3RCABFAAA2AABAADUROZOm8LzRKJp\/yAG7wqwAIp3EV0N37QF7+ve9GD8kIKkK\/eEyjXLMkZGC0Rg=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+1204{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":658,"pkt":"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","pkt_caplen":658,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","pkt_oversize":false,"pkt_ts":1598618820,"pkt_len":75,"pkt":"AAAAAAAAAAQAMt+PCABFAAA9UXFAAH8Rnhoomn\/IpvC80cKsAbsAKbCuQFVfMtNfKdhjvCDG5lHY2Vep\/b8otkMpD\/Eek8ZQl9VQ","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap","flow_id":0,"flow_packet_id":12,"flow_first_seen":1598618820564,"flow_last_seen":1598618820984,"flow_tot_l4_data_len":8012,"flow_min_l4_data_len":34,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":667,"midstream":0,"l3_proto":"ip4","src_ip":"40.154.127.200","dst_ip":"166.240.188.209","src_port":49836,"dst_port":443,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t50.pcap"}
diff --git a/tests/result/nDPId_quic_t51.pcap.txt b/tests/result/nDPId_quic_t51.pcap.txt
new file mode 100644
index 000000000..63331b302
--- /dev/null
+++ b/tests/result/nDPId_quic_t51.pcap.txt
@@ -0,0 +1,20 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1598620434413,"flow_last_seen":1598620434413,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"187.227.136.152","dst_ip":"211.247.147.90","src_port":55356,"dst_port":443,"l4_proto":"udp"}
+2190{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":1392,"pkt":"AAAAAAAAAAgAH83gCABFAAViXjpAAH8R7IK744iY0\/eTWtg8AbsFTvswwVQwNTEI\/5QVtbAFhg0AAEU0lc1seKsogM0xJ2my4Aiqph+R\/2N2Tlopv6L1CTJ74mgIopdeTMsbdYmmZHP80OXizzota6YFHVZ9VeAcEZo8pgEgiYZUg70bNed022uBY2n4AIBJaoTaZc4dlK\/B4TiUFC+WiYMdxcvH3S2VlmhK+Rc2gUQHqAYLkzqvz5M6NYLldilKxcCw\/ToJ+zu5fHTAbQipFFqbD95GLa7oBCU7jPE\/wj2QE1M9Wk52+SrgbNiKCHm0Oi8\/\/aC+8QR8oPQVWsQzjkcyagMWDaycHo+Z2gh2YqGCJoepFNsqgtO8uWWNDiaisHNHQDCPrCt5EDVvLMLkZZQTcE9bxIhJucB4CNr926kRAjaB4Y5CqDAEear5TtCJ3Iu0C2bzBjoi5J9LPiwVBQYhfxtqGdX9O3nANKjdbMVqvYl742MGo2YFm2J507oPMBXLqPJW2a2j\/XlrdIcqLJLXy1ruiet2Yfof5cTaMXQp6wyOq8s2kLEeb0RqG380zHAhUvwTfCiEYvwSN8+LPb7d1HKu3JRvbfM4A2u6D3\/ccc40B8jpt6t8mVTCa92M7s8hgVfDHCvoiaTxRF07ULZWTbuRFjLXA3G\/QLzl0b2QQA3PRqMO1r4YLM9IhL+9TjIm9kskk81nFsbcqeUPPCIl5SvakooZ1Ne4vlHJM7vcPwHkRJHa+PMjtknf1D9FmcaRoK2gywFTRk2j2RKXeNNGP3fOGBMRmVstntMO9HlCQR0pqWkIJ+jw+vDqFHMVZBwco3px5tJKsYik1W4I7vDVokn8tYkCXuWkDqmw9KvnktOeNU+eoLbnbQi\/AJnaCX22\/pOnvMBDUqcAEyxhhPUDxacTTuyCy01g9D7qNJmAhz3k5MC2zTm67IILY1heZ2AuYvQwYQOss3bJtjPNa+uV1pVbQiVw6S2nvxKgtq5Z9DSuXhvsbTOp5GSq1YV0eewMUT6nB6ejScFWGv+XM50Rf10iuSgO6pXznyY29qMMOcdfxFMWk8ZhEALkKLXeqjM+FjHgPqVYhtjd0Mxa3xCi4pEnff1YF4nj78KYHZrV2zxl6ihclVVh4iHXNFGI+s63vsFXEOTBejfPsr6+VmTDJ1+o1kNk93XUE\/bQ82a18NJPdXQ6kf26Qjcc4RqnTvAmrWh\/6fmG4zIriY7A9z8t4eO9Qfr9TLO3k0B5JOVnWVTqlbOvrJgEzV95Hv0ioO0xIj5BnxrbLnlwbNfPjVGTcRNAh71gU32J8rr6rCxxCaTv4RU7KdiQ+zigC0LKK7x4OPs9n2Ka2KUPy25mrLQ\/hk5IjtzsrqqQ2MzNcZhxb0kkNCxELzOQUMbpkFnw3XGvEDCJVplyR1UqjiDFOL8\/JfuephE1oyHWeOYVwVd2Cwv2PGGx05T5JJWiwFxWUNPRdBpTvDS0w\/p4Nd\/c2GPaorYCv1rEFAbYJpF4F6I30H8WeSXKzzhCDJKK0+cDwsUjqsSRJxU4ftS+uYB0XeJmKhKFuSfMEVI0q1YpMQZE\/G2MC4zAighNsEoUwNwWYS2545Iu3+Eegoe47B\/k8tCSheavZoHCQ6GLnzYKEdctMGvZqMVOXsPQnYlobmVfhCoHYAqTL++rI+V2XgKmzpdEDycwwsSLkVWoYU4lGAoPMP3kxasfCnUHU\/V6gkc7C3bskka9cplZd3pC0DtI8Ams8W1VIknYpHJDhbirGSRTc6oJbJQK8NbF0mBg+7QAzF7Cg20VSPH1oCq1EEodwhHlQBTHEkDIUOOWm8A2kePv2bx2BTxVuCDz2D78zh51","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1598620434413,"flow_last_seen":1598620434413,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"187.227.136.152","dst_ip":"211.247.147.90","src_port":55356,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {}}
+2196{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":1392,"pkt":"AAAAAAAAAAIA\/tPQCABFAAViAABAADcRkr3T95Nau+OImAG72DwFTvx1wFQwNTEACP+UFbWwBYYNAEU0cA7ob5DRu6SNsqDMEz7qri8UnfijZV8Hhw\/oxky0x+Zt0s6erWm7kWn2+1owrYTdI9p89OpW\/6ptpwv9v0J5BjJyyLuuQ7qMgzGXDs2ur++juUsUpOdkAs5K5BYVfQAmPmXEGyVgmyCeUg1T7Vj6FslmnDV909IngQqr2X3bAL3as4fB8O0bAq64I2nnjXRSsXtOF+WecFDOIkhsUozc+8M2nJh6kczAN6BO7Q6B24T4pTF7f\/SWotAh0wmioZGWvmsK3tbjrCGONmSc7G6EA+eCMtEUY\/yq8VyKOSmIHald\/L7JGCPyNYCQuoSWiWNaW\/I+iZ2Tm83YJ0ULZZc8urwFDYH3aj1AkglwflqENARW1+\/0Wgf8CdNT18FiabAis+X7vPL\/K0rfVmIy72rlRNRfOG7y7nzx1KwQOQc8aCVF3CWYU+Lmd10cKRMsTRDen+t7CfJT6D6czKmRS9zHy8defw2VL+sr4ea6knMol1lydS5om9MxXCYpqegXuWZiFTSbzJvhE4RaqOqWqlC3CyDO4ySp0wcYRr6Xiz\/ypHsBLBgujZNocUdxB92srmLhWvU+EKXNqnvn4sN9tP\/B4VI81UNJfpKqafd5TbC3xVerPG2FpOE4rg1k2rQi9r6v1+PQ\/d3R0LlFcbJ1hI9fgnNKZUfeIejFNzw84ZCPAGKEZF9DRij\/q7+ynKTHsKprl5SyrzqmDatgR6jPni4YdUIipVxz2xAMDSfgGHJudxWet0g70XvUgRUnZwnINCVHKug\/Cwaar4s1XCM8uhzoEef40bHIf\/1cPPikcn5BGvUj0yq5vKOgKlUAn1Pgd3RmxD4udRVK4hr3Qq2qz0yzGHjPkF5V31PdO+LbljCDil0atM9nNzYRQDTxXIy4ROBhbRF0GC5xxy\/5G1Z3EVEXnUgV7cKAoSoRYsJk+ehBddHi\/2\/aZLTP9GUgaj03e1ZAUqg\/pLbgzkOggtkBYwlEystem00J3RiW59azSXPWDzpQD37GvUqWpvchJjuAPROhp0eQOeyP6Sm5m8Ha1f9MDT\/mDWqN\/iBuFORPOJebKiYDmtBTotFqfXW1txgynw6EHUJzSE+pl4MdTTWGiKeLLjK6VcgkjK3QCvZi2YAV34jHwjHZGw2P\/U6KrMCfYoKLgcta7eGwEJgt1TEOATVA86YdSNrUK8Cm6qplxo7u2vCTdHfHERZHXlWiV5V+M6yg8jJ+w71hYe+9QRnWDWxxhFwqS3Rom5NgfL3qyZPAg7B0TvVcGC3k1t2hVxdIBJT1YLB9P8xcq205KojLAkrnJ6A03YtC2cE+\/GfTI6rrSdcn22uQHH1uwQgPFlvo5F8SRGnmtqbBCoQkhDA10opFpEUHAKVRysF1xT\/NgfiMQHD+An4IrPRfuv9gDg0rUkwJww22wh5gLlRkZ\/Syy5BClTzH9Eje2q1QlkG4NyNIdxlgTeTWfrV+owYm4Q+FXDFSqiziTTjYt929oBaNekN7DaLZNKBHzE9aRpnZjKaGJOIkilbSRnfMsOP+KhOdyxkYqJB7lgyVuE7zA+Cs6QfiNfeFBdysqGJcMLaCJe1XQZYseYZCHv9I1fYRd7rHJDJ5TLxG9ZoKBvyy9qAFruCnQdJM3kRJUF0ZdxtTsL1YtSrJYqn3hcGRfsN64Wu2ioNCdgwzJ\/IOr225URP0O\/yfvAjNTo393KgekGIplrSAr2vqB7j6oyQmlBJgPRuYDzTKmIMBKNHRY+Gk4U31TV\/ldcN5g5htDYX20DA3i7tEfKzfbUYY","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2197{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":1392,"pkt":"AAAAAAAAAAIA\/tPQCABFAAViAABAADcRkr3T95Nau+OImAG72DwFTube4VQwNTEACP+UFbWwBYYNRTU7ePJ1K+FSjOzh8I+88Xo3glhGN\/ISVgfZLjon36o\/Ic8wElvtdYWOln5kitImSZYvUwk1fG0vvw0gN4Ua6Bk3jF4z2+DlEmg31OHq+boraULEIZuAwjhjODmyz5ftYwgYtTSwoERmJiUKmhlyGLqx3S+tX8EjcRIqYjSOyHMu2jndr\/C7BAPP7JVT9ieYljjMWtEQ72Flay2RpFT4RImtEH0\/RK6iWf3t7LgbxjhC97n0j1DDD4P\/sZZ0bVIicKPYmXAEngVSoh3oIH6poziu1qlEA556yxALTbdx8jtmJX0Z9ooraLIBrb+pueGEs6xQAtF7up+LVAjymIfJeMB5q1EfGiD2ya\/Jh+zUG10j5iOvBK28sWnXxVEamKBupu9qXaXG0OjhurIE3b2Aod2vtsJ1NalOos0dYc\/g5+XXDK8tcQHad8aZpGNSUiRyAtmWcaYe8vO\/\/qYA5pPey63z\/sGlL7Ey0S9M9ZT2ZRHnqlxrqhQIy7XXexnza+a3DNLwUI04v3Ks1B1peq0gsFraKmD\/6yO0vbt0fXLwVt2hr3SDHm0oGrN74iZrIwUWQiIQl22WxQHTTjtYOTcvqWfO7uam1Ph5DVbFaDddigRvWdhF73OvmxThMwCc9l6X3P\/tUIdb8CggvQWiMRN5Vhy4Rljya+ZIOcdjbzMw68oRgdgPhct14QVofXpMjJfC3oqi\/nNbGLQ5rYKneQ7CWh9RSv34L3R5RDGC\/pHwyv6PGgI8KRf9+QUC+7gYPb+kZQquYvru8Z0knElk\/9u3Xyd8knK1jpgFTg1HNdqhCD3oyFIuAFRWqcgNxU6wz1LaRi24VFE+eJ0o+rsi\/pnfI0su+wrGhXYRbyyiy4ZzbqahkZoPZ2zQGAKW1nnvD6p\/zaLVXZsU4jxLWam2WqckX1QTbgPxB0wawYNhyf2CAAhEQ29\/cwWUpxFyoXDPB+hK4kW7liS10zysc5bs+sslvGCpqRb0Lis637gfgiMEACVosS5TN56wDxHV6753I9W1zSBCNXxUKOAdDNb1MGhBZT\/uUW49hJ6JXcGEhfw+P+5AzMdiqKpUSFKgaiqJSf3iiv2\/RtnFbJ1FaRBOTOgw3ARkcPvJN0sfzLk7RKlSqTCXk8peiPFwt5uzAbWqrhfe\/Yen8D2DWvWSruKHIC7o+GazJ+\/eyppnocCPGQQZ2lonOQT2qyNSZ9COW8HeAaqf7QCJhvb8S9SVVml5KBhnwRNbnuZICaxg9vyFjeBwKI7SstbJ3b7slReERnG3DvEqM+ouROXRlpGgUREXlGwb7N2UJ1jjo460vUe38pW2vZ1XnXYGDBL3642Nhsv8\/xSPSuRmLvvooBVMWLWW5v+LMlMcoNIIM6xibupcxuyIqKDqNmsScanfhq83xCw4xKptGbS9bu\/A0yrmv3Atgn3WXnx2khAoVngZCR0MbqmA7T5k\/rUKhB49pS3ip3KT03PKvjuwDr50ynUXfZOYJ3+OmI37LBmqEhKgv5YHHEjRB8VHHXAh8Aok+ht+KljGfYLx0rx0y2IXVcxRnvPFVtHn6kBareUX1Lz56co6YIb9788QnPlkfq1D0P\/\/4uwz67uvdUChfS0JSNQ18zYOyJ360r3AVfKXmyQ19aUMj\/EcNueVwU0nbl2KSsYn1Gfl7zj0ewbm+BiPQNHMgAkoRMw02Osi\/TmhB+pfcq61IRV5796uYYuP\/e1+49LMsN6JtJapar+\/bfHd+ip7c\/\/L52jGcE3Fey3bVNYI8YmxgiEd0S1usipgR\/OJ","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2190{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2003{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":83,"pkt":"AAAAAAAAAAgAH83gCABFAABFXsNAAH8R8Ra744iY0\/eTWtg8AbsAMSNX41QwNTEI\/5QVtbAFhg0AQBh9rtadI3ganbvAnx5ccDKOIKuYSWu2nsM=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":83,"pkt":"AAAAAAAAAAgAH83gCABFAABFXsVAAH8R8RS744iY0\/eTWtg8AbsAMQxC5VQwNTEI\/5QVtbAFhg0AQBhAJlUqBNbDHLc2xPldLvOQxb8CRv8WY3M=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":115,"pkt":"AAAAAAAAAAgAH83gCABFAABlXsxAAH8R8O2744iY0\/eTWtg8AbsAUeG04FQwNTEI\/5QVtbAFhg0AQDhOdT9BfGn3pgxttozTGdte25pdlwMxNjeT8RTzbSVPQ2s2zKzmtJPCnBGxF2gcrVqkJysP3L+Vvw==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":68,"pkt":"AAAAAAAAAAIA\/tPQCABFAAA2AABAADcRl+nT95Nau+OImAG72DwAIq39R6uuCjxHGkBJStQaHqeeubIHjjaMZeIi9hw=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+1206{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":658,"pkt":"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","pkt_caplen":658,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620434,"pkt_len":75,"pkt":"AAAAAAAAAAgAH83gCABFAAA9XvFAAH8R8PC744iY0\/eTWtg8AbsAKSGnV\/+UFbWwBYYNEnSd3Y5RBhW4pf4JeCz7Hm8B+kilTWZY","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+1675{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620444,"pkt_len":1003,"pkt":"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","pkt_caplen":1003,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620444,"pkt_len":67,"pkt":"AAAAAAAAAAIA\/tPQCABFAAA1AABAADkRlerT95Nau+OImAG72DwAIUhtTWVlkzIZ1l5MiO32g9qa7cckVPUetSXxvA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+1238{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","pkt_oversize":false,"pkt_ts":1598620445,"pkt_len":682,"pkt":"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","pkt_caplen":682,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap","flow_id":0,"flow_packet_id":642,"flow_first_seen":1598620434413,"flow_last_seen":1598620524479,"flow_tot_l4_data_len":551890,"flow_min_l4_data_len":33,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":859,"midstream":0,"l3_proto":"ip4","src_ip":"187.227.136.152","dst_ip":"211.247.147.90","src_port":55356,"dst_port":443,"l4_proto":"udp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quic_t51.pcap"}
diff --git a/tests/result/nDPId_quickplay.pcap.txt b/tests/result/nDPId_quickplay.pcap.txt
new file mode 100644
index 000000000..48357c30c
--- /dev/null
+++ b/tests/result/nDPId_quickplay.pcap.txt
@@ -0,0 +1,312 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0746{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000030,"pkt_len":368,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAWBDAUAAPwaoIQo2qfp4HCMpxewAUEHDiNf6xwiBUBgAc22rAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9jYXRlZ29yaWVzL0hVRD9hcGlLZXk9cXdlcnR5JmRldmljZT1hbmRyb2lkbW9iaWxlJmxvY2FsZT1lbmcmbmV0d29yaz1XSUZJJnBhZ2VOdW1iZXI9MSZwYWdlU2l6ZT01MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogYXBpLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo=","pkt_caplen":368,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2109{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000030,"pkt_len":1380,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBVSmuUAArQbSWHgcIykKNqn6AFDF7PrHCIFBw4oPUBgIIgJuAABIVFRQLzEuMSAyMDAgT0sNClNlcnZlcjogQXBhY2hlLUNveW90ZS8xLjENCkxhc3QtTW9kaWZpZWQ6IFR1ZSwgMTQgQXByIDIwMTUgMDc6MTg6NTQgR01UDQpFVGFnOiAiWW1JNE1EQXdNREF3TURBd01EQXdNRk52YkhJPSINCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1IZWFkZXJzOiB4LXJlcXVlc3RlZC13aXRoDQpBY2Nlc3MtQ29udHJvbC1BbGxvdy1NZXRob2RzOiBQT1NULCBHRVQsIE9QVElPTlMsIERFTEVURQ0KWC1DbmVjdGlvbjogY2xvc2UNCkNhY2hlLUNvbnRyb2w6IHB1YmxpYywgbWF4LWFnZT0xMzg2DQpFeHBpcmVzOiBUdWUsIDE0IEFwciAyMDE1IDA4OjUwOjE2IEdNVA0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxMCBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04DQpDb250ZW50LUxlbmd0aDogNzg1DQoNCh+LCAAAAAAAAADkV89v0zAYve+vsHrgNFDbgUDcyrpuYoyhtfSCOHxNvqZmjh35x0ap+r9jp2mXNIlbzRwQXCr1+17ynv3s+Hl1QgjpLBBilJ33ZOX+uorSoI2ylY4yUYRKdU63rQwS\/GzSWf5Ar1Ie019oi2+6u6oWGtgFwxS5dq87q3a+2Idcueeq67zXSYHyO1TCyAjLkmS95so0diqvvg53CsvgyTJzD3Qi0JgIuayAmIiA5W3kSaUDWssJJK4VowbKVKXNIcUm1hhVJGmmqeB528TkvIn4HpePQsZu5N+eyq7j3vhU+V5+CDnMGA6lyIbikd8gz\/3R0mBVwhwM07dyY2j3Vbf+jkvkEkeU6RwyB6awDvoEPDHWHg\/up0YeYzywk0VnRudOrtYFYr1zeg4R5uaXbUuchtr4V5V\/xVS5qRxEblIH8YNdR8Y+eFoDbj3ZIMkL4gNHwnBt0f1KZ316pBhOU8hN9sjwYMLYz0WK8dJD3QoI4x2KyLhtDNJH7kcFKpCQgo+7pR\/GemnfPl6IR+VhdhjSBgqjvxJSCunhbgWE8V7TWI0gpczntgPZrdaKC5NwA1JTYAOp1TgT9tejpMASB7aKWvFhiu4QGNXLydSjpMCQRlAgvUiBR76vXzsijHkc0REdgd3XyrceLOzliJJ2YJiKyUJSxtC3GzyQMO4pSIp6ecHtaWgTAXcfOY+OAk4O4beielVRLRmAFYfy8QfnXrLZU3nBE0bVwqOr+6zJSmTPw\/pBMGYDkIj\/OO+PzHcmf4QMOCrf7ngerU6Yb0lCAkw02RDGeu89Fq6FRPClj27rijsplYpQbtM95TbKxttkXs6u9Th+Ix4oVjNzYCLPQBZXiEML\/xiiithq5ibtu690K7C7RtM9ibujqD7447J7UzpvxtTC+T6Mm\/R2Pjazsl391\/3tp2+3xOrWTaa1HPMfeTeZkjHKv9K+3tuzw+65QOa1TmUY2Zz07zlXG3mzaS233eddiY+yrf+u\/D3dDK0zF2LzCntfXv8GAAD\/\/wIMAEf8Fz+FEQAA","pkt_caplen":1380,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0747{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000030,"pkt_len":368,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAWA50EAAPwaxUgo2qfp4HCMpxe0AUOei8\/4RmPGFUBgAc1zOAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9jYXRlZ29yaWVzL0hVRD9hcGlLZXk9cXdlcnR5JmRldmljZT1hbmRyb2lkbW9iaWxlJmxvY2FsZT1lbmcmbmV0d29yaz1XSUZJJnBhZ2VOdW1iZXI9MSZwYWdlU2l6ZT01MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogYXBpLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo=","pkt_caplen":368,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2109{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000030,"pkt_len":1380,"pkt":"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","pkt_caplen":1380,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0734{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000031,"pkt_len":358,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAVYEaUAAPwYE2wo2qfp4HAUSgSgAUG4ezi+GqNXzUBgAc8tUAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9ob21lP2FwaUtleT1xd2VydHkmZGV2aWNlPWFuZHJvaWRtb2JpbGUmbG9jYWxlPWVuZyZuZXR3b3JrPVdJRkkmcGFnZU51bWJlcj0xJnBhZ2VTaXplPTUwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMi4wLktYRE1JQ0IpDQpIb3N0OiBhcGktc2luZ3RlbGhhd2sucXVpY2twbGF5LmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg==","pkt_caplen":358,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000031,"pkt_len":109,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAF1lCkAArQY3FngcBRIKNqn6AFCBKIapX\/duHs9dUBgIImd7AAD+6U1rdHX+8GWHmWHKf1z0+O1Nfp++87\/dVNV0wP\/9v\/+n\/\/6\/AAAA\/\/8CDAD1QSSgppQFAA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000031,"pkt_len":243,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOOYfEAAPwb2VQo2qfqt\/EoWzD0AUOQgUs9KX9ElUBgAc0k5AABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMi4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K","pkt_caplen":243,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0707{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000032,"pkt_len":339,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUNiNkAArAa\/H638ShYKNqn6AFDMPUpf0SXkIFOKUBgIIjgwAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogK2R4S1lRRnpNRHhKdjZkUXFVLyt4Yzd1VXVxaHpOK3BWYXpxSzdCUmswUW1oSWIxVEp3YXZ4SDRpUUV1TUVFSDVZdU80TU11R3ErWHlyOGUveHZqV2c9PQ0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxMiBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":339,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000037,"pkt_len":243,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAONYlEAAPwY2Pgo2qfqt\/EoWzEAAUKq8lHZkd0MeUBg5CHxNAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC40OyBNSSAzVyBNSVVJL1Y2LjQuMi4wLktYRE1JQ0IpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K","pkt_caplen":243,"pkt_type":0,"pkt_ipoffset":0}
+0179{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0579{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000037,"pkt_len":241,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAOEBz0AAPwbyFAo2qfp4HBrngf0AUJlyzTdc8IHSUBgAc3meAABHRVQgL2dlbmVyYXRlXzIwNCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogY2xpZW50czMuZ29vZ2xlLmNvbQ0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KQWNjZXB0LUVuY29kaW5nOiBnemlwDQoNCg==","pkt_caplen":241,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000037,"pkt_len":137,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAHlLmEAArQY6l3gcGucKNqn6AFCB\/VzwgdKZcs3wUBgIIqKRAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxNyBHTVQNClNlcnZlcjogR0ZFLzIuMA0KDQo=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0709{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000037,"pkt_len":339,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUMgAkAArQYAVK38ShYKNqn6AFDMQGR3Qx6qvJUxUBj\/\/2USAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogSENQcUMxYW5HZGxXZUVqMEIwU3F1MHVIQzU2N3BTRzJERlZvSXdHYmRXNFovN1dydjVhM0ZQZEY5V1FIMDUrNFREZVFXV3FiZjA4djA4c1RURE81VWc9PQ0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoxNyBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":339,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0744{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000039,"pkt_len":365,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAV1DA0AAPwaoIgo2qfp4HCMpxewAUEHDig\/6xw2tUBgAhzcPAABHRVQgL3NvbHIvUmVzdEFwaVNpbmdUZWxfUEgvcmVzdGFwaS9tb3ZpZXMvNjI0MT9hcGlLZXk9cXdlcnR5JmRldmljZT1hbmRyb2lkbW9iaWxlJmxvY2FsZT1lbmcmbmV0d29yaz1XSUZJJnBhZ2VOdW1iZXI9MSZwYWdlU2l6ZT01MCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogRGFsdmlrLzEuNi4wIChMaW51eDsgVTsgQW5kcm9pZCA0LjQuNDsgTUkgM1cgTUlVSS9WNi40LjIuMC5LWERNSUNCKQ0KSG9zdDogYXBpLXNpbmd0ZWxoYXdrLnF1aWNrcGxheS5jb20NCkNvbm5lY3Rpb246IEtlZXAtQWxpdmUNCkFjY2VwdC1FbmNvZGluZzogZ3ppcA0KDQo=","pkt_caplen":365,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1942{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000039,"pkt_len":1247,"pkt":"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","pkt_caplen":1247,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0892{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000039,"pkt_len":476,"pkt":"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","pkt_caplen":476,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2232{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000040,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0571{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000041,"pkt_len":237,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAN24s0AAQAZp+Qo2qfofDUQxrvkAUHO25ZtSV776UBgBtoUeAABHRVQgL21vYmlsZS9zdGF0dXMucGhwIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBEYWx2aWsvMS42LjAgKExpbnV4OyBVOyBBbmRyb2lkIDQuNC4yOyBHVC1JOTUwNSBCdWlsZC9LT1Q0OUgpDQpIb3N0OiB3d3cuZmFjZWJvb2suY29tDQpDb25uZWN0aW9uOiBLZWVwLUFsaXZlDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXANCg0K","pkt_caplen":237,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0707{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000041,"pkt_len":339,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUNnpEAArQZNhh8NRDEKNqn6AFCu+VJXvvpztuZQUBgIIrdJAABIVFRQLzEuMSAyMDQgTm8gQ29udGVudA0KQ2FjaGUtQ29udHJvbDogcHJpdmF0ZSwgbm8tc3RvcmUsIG5vLWNhY2hlLCBtdXN0LXJldmFsaWRhdGUNCkVkZ2UtY29udHJvbDogY2FjaGUtbWF4YWdlPTI4ZA0KWC1GQi1EZWJ1ZzogajRyR1VwRDFrR0J2VWIvajBNRVhMMnlyRzg0NlVLcDBDV2hLNFFWcTB4K0hLUDR5UVIxR09sVWtXUFkvRGJKNnNKU1pTSWdIdGF1L04xQjF2cTNteXc9PQ0KRGF0ZTogVHVlLCAxNCBBcHIgMjAxNSAwODoyNzoyMSBHTVQNCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCg0K","pkt_caplen":339,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0981{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000048,"pkt_len":543,"pkt":"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","pkt_caplen":543,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0981{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000048,"pkt_len":543,"pkt":"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","pkt_caplen":543,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1897{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000048,"pkt_len":1225,"pkt":"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","pkt_caplen":1225,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000049,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0923{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000049,"pkt_len":500,"pkt":"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","pkt_caplen":500,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000050,"pkt_len":596,"pkt":"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","pkt_caplen":596,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1810{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000051,"pkt_len":1152,"pkt":"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","pkt_caplen":1152,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1056{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000051,"pkt_len":596,"pkt":"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","pkt_caplen":596,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0923{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000051,"pkt_len":500,"pkt":"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","pkt_caplen":500,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000052,"pkt_len":145,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAIFK0UAArQZq68vNl6AKNqn6AFDWY3uzUB\/LAXbFUBgIIl2QAADLSVkFxdhO01jGkqqir\/4Pe\/qItPtTf6ajYud7yQvoMcf18CvkFV3iH59UBVcusMzzLrB7pfuUH4Sme9ekIxa0n3Xkcqj9Zb8GTsGgT4pSgGI1jIGtnmYZvw==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0923{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000052,"pkt_len":500,"pkt":"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","pkt_caplen":500,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0763{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000052,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0873{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000052,"pkt_len":461,"pkt":"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","pkt_caplen":461,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0603{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000052,"pkt_len":261,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPWIBEAArAZEf8vNgWUKNqn6AFCnCZFyi8YwPunGUBgIIppgAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwC5BQwMAADES8+zVe2SBL6tUVxA2Vh6","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000053,"pkt_len":261,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPUJYEAArQar6MvNl6AKNqn6AFDWZdcfCppPknoiUBgIIrzYAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwD\/BAgIAACTADJ0e1hwz8xBqPPud44t","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2233{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000054,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1084{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000054,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0924{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000054,"pkt_len":500,"pkt":"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","pkt_caplen":500,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0605{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000054,"pkt_len":261,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPUEEkAArQbHccvNgWUKNqn6AFCnCorJCJ8MOwSFUBgII8UCAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwDvBAYGAAAXudj2eCNNjv4Uv\/n42\/lx","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0604{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000055,"pkt_len":261,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPUJYkAArAas5svNl6AKNqn6AFDWZdcfCppPknoiUBkIIrzXAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ3DQoNCn5fAAAAAFUr0H3fAhACF0hkbD5sDN+EgwD\/BAgIAACTADJ0e1hwz8xBqPPud44t","pkt_caplen":261,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0580{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000060,"pkt_len":240,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAOBsF0AArQYRcHgcIygKNqn6AFDLKctUXpxwAbVfUBgIQ3alAADeuoa1+jA5Ry0mXbQk51nloyMd3bnpaoAhLaFrs1GxxS6MStN1DNXgV3PyV9xWtS4Bq7eqDyJDn7AJDstUGJi0\/pfjbHRxURqqSWq2lLCGNr8PC4\/zdGcQgXAhvJ4k342DAqdcv25jjD\/DCZL0NGZhuQtQ9EC0TG+Yxyi57FXdRjFSsIxVH3fsgYrcB9Qagjzg2cKnxCjR\/HkaVIYK1NtKzAhNksrWNnXwbZRgh55QgVjqectjQo\/f","pkt_caplen":240,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000060,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000060,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1948{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000062,"pkt_len":1248,"pkt":"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","pkt_caplen":1248,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000062,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000062,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1418{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000064,"pkt_len":854,"pkt":"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","pkt_caplen":854,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000064,"pkt_len":587,"pkt":"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","pkt_caplen":587,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0358{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000065,"pkt_len":76,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcADxuLUAArQYP\/ngcIygKNqn6AFDLKctenf9wAb8QUBgIK3ArAABhDQoDADSvxjSmEAEADQowDQoNCg==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000065,"pkt_len":504,"pkt":"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","pkt_caplen":504,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1968{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000067,"pkt_len":1268,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBORvoEAArQYJ43gcIygKNqn6AFDLKctmcwtwAcDQUBgIHbLGAAAzrZwe2jLl5myBZes+LkW6E8ZkkwElpSl2uVG8PTz4MnutAvmbcP2G9EPTEMQhRXdJfTPFHPw6SAEAYgzuN1i2hkD4mMciG0q871nue6dsblhSyA4M5Mq4es2z2uqkUqnQXKJpEnGHDdhB6ZL6N\/5ioC2od5tDXti10hDqPmnnc\/USwmTN9KCKYAv+pa6YBUq6WVapRBQ6IYZLNrjtv8N8gT95Etz+SEzucaoM\/3GPNys5sog\/bDQhV42Mf4j4HEpkMvH+viQF1+iz0Dp4kveCXsoHBQx3gkSRxyrf25XjCS3NlxQMxh8b+BF2aHM75ezSsKv7h8hrf4pnAOrUTmQK2X\/sZM86ied9Q\/rJ4X39I5HcFoP07dTtGXZkCMIP2JbUwSh\/+76i+SsrjppIfgz7AMitMHijzG4dqBEClfO2s5gpPMIaaxW0UdUFer6qYZ6XF1mf2lLP0tAcYhwHA63A0DVZYWwgB4NjE0TIIDRXoF7Yv682y+MXgKcqsOJVbvu7VmQOl+VKydKAf3RBDcNvaXLMU66HmAoIrDgYul\/irpKmvwBBGQJv1Qe36VmEO72c\/z0orWp7FRA1mnUiG2wXTax9zHijUvYSJPdZ6jgc3cd0KnoPjPmjKnq3J4DMVJS2OUBeehDnnCgCLjInDB9hdtw7Gt\/nrp3uSETiMQ\/4ZJSQ3SWSzNsYupjFH4BNlbwwCQQzlIwQk44AF4nOLzHzPHzCbIcXOlSL3nqwHONqwBf35AX8uj04Ao53WrLUqwrXRgI1WL2vgXBZNrXpnjgqJKyMOAML2GQYUChXvskjDSFOFrxSAbDYPezdqIqHbZcss5YMW2k3X10YufK2elLRaoBZWAMclFc9GlDHtIhirVSE6NhQZd8nUlCDJIPR\/kavyphXH2FA7qmsZwUUNoEoWtfaF10W332XReBRsB4bQ9c3N6YPAjoNPyT4h47aI\/qSgbXka4y9acntGnph3+Sj14X5oWAZvMvT1g6IVPGqA3RjB4IpketiFoZk3ga5oXOonHCTX90UOHIZQXUDezzZy34Q8I2wPcqSOCgSgXimmlhymg4MQQhY1AWsw+bmYl15Kv5rbWA7YLW7vVRQe7srLTCekjF1GXVmSkMEp30pXqPZGZhd4kP4g6XSV+vNAIxCGAHkoz4yeGuCfMFt26xA7OMaJ3Jt7qC9HlUZiTBNYeMTGS4RWTpA5bmP80YakrH6S\/siyTOZWVbIUH3zyKebeFkeRggxuRlPzSGUOHYMZuwvJcZg0nG62mNPQkPa\/b4v018MpzMpVjFX8wtiEo\/Nb43c\/9nLcOFRbSWWPBlfgqYQ+PWRAjRSuxDNSULblQmLN3Qsksm2cbYMc0rFhBotjY7Go6wkzDaVz9AS4IbtQDLoOnQtZw1OfRUyvei4DnjPkTMfVfmeaC\/HlxkDfLPcP5nVl\/QLHE++3QNAr1P6HCBGPV1yfY2NH19o75HJFrRWEPSAxir4QL9ExlMNMrM3gxwIh9retemEuz0KWmzu9hK3Ezix0x1jJ+6iNmkMz3jOY14CIhUI5yzL2czzCjpgnOsxmyZFLBhca5GUtI0ioW8wiPdCD5iQkAvD+XHUJAJQroy9Ovl9OuWmOU0=","pkt_caplen":1268,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000067,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000068,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000071,"pkt_len":158,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAI5x2EAArQYMAXgcIygKNqn6AFDLKctyIYFwAcSfUBgIAJPlAADosgHnKmB6qhG4jxSKH6z52BzoI4juszt7kCfJeKOkdOWo1HC\/0zMOWxdtJxBOsYVAmy04Knmq5LtE8ULU6yfsg1BtGhQk\/bipeowPm7hl2SYTO6wWe6a9rGO9PUfOWscXXiz85gk=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000072,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZod0AAPwaCJgo2qfp4HCMoyykAUHABxJ\/LciHnUBhgH4+uAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMjQudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1144{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000075,"pkt_len":658,"pkt":"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","pkt_caplen":658,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000075,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1774{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000078,"pkt_len":1124,"pkt":"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","pkt_caplen":1124,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000078,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1899{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000080,"pkt_len":1208,"pkt":"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","pkt_caplen":1208,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000080,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZt2EAAPwZ8xQo2qfp4HCMoyykAUHABydnLl59RUBhgHwnlAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMjcudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0726{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000083,"pkt_len":348,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAUx7JUAArQYB9ngcIygKNqn6AFDLKcukEc9wAcuXUBgHzAP9AABXPbeJnXMvdBLkrc0XMtRBQyRvFcCA\/dVT5eFOWlD+BJRmMQsFZc2GNXeP1XVmW7Gw5jRTSovWK+JDsUHBd57Nkvj5aW3FW6i0bmlk+yOC4iykbgdR3HQnkKkP75uMKkyU3uVqOODk6naLPCjRQjrWhL8v0bMDQMBwmS6pqd6zcA\/qKNeckQuj3bcEPk4xHdsMWaZF7Vmno6ndJexqu0e0jDdLLMDhkgdR\/pJCC\/ZMaljfJ1JKevZg8TUQSqviVAYrdPLEnYtYI4To\/cu+2IwJVOeArxXEYfIiK0EtwdePd\/HWaG+yWeLrh4TuQGooJIVD1JPo6HjdFu+sgj5nEz\/+1icqfVWmIhBOmiNOy9Ksqj0UvsxHo2fpDTwfAE0JJdA39na7","pkt_caplen":348,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000083,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2226{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000085,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000085,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1569{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000088,"pkt_len":962,"pkt":"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","pkt_caplen":962,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000088,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000090,"pkt_len":580,"pkt":"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","pkt_caplen":580,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000090,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1933{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000092,"pkt_len":1236,"pkt":"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","pkt_caplen":1236,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000092,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2222{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000094,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000094,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZ3VkAAPwZzRwo2qfp4HCMoyykAUHAB1E3L4AXxUBhgH5yHAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMzMudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000097,"pkt_len":840,"pkt":"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","pkt_caplen":840,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000097,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeZ5DEAAPwZxkQo2qfp4HCMoyykAUHAB1gvL7O5XUBhgH7FWAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwMzQudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000100,"pkt_len":1156,"pkt":"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","pkt_caplen":1156,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000100,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2232{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000102,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000102,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2231{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000105,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000105,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1541{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000107,"pkt_len":954,"pkt":"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","pkt_caplen":954,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000108,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0537{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000110,"pkt_len":206,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAL6Td0AArQbqMXgcIygKNqn6AFDLKcwoPy9wAd7BUBgHPZ\/NAACPhn1JG\/ZK5bC6WiIkNydUcgqpFcJVT+g+HU3aLk0rVpz1HstVx5TlwH58T2LSiNZSttzvmqrTpNODofkd2ofUYLRRIW24e8Eli1W+t4Fy+Bjq5THq9C7r\/swL5r+vsh\/RryMtcKcpEA6LUi\/uiy5rgWuzjc83AR5Tu4upMR2sVvAfiMCvfSBqSjSx7Mo\/lA+cR7VflS8=","pkt_caplen":206,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1169{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000110,"pkt_len":681,"pkt":"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","pkt_caplen":681,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0608{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000110,"pkt_len":262,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAPYrhEAArQaNjMvNk9cKNqn6AFCLVl6azfAZGFZbUBgIKKjyAABIVFRQLzEuMSAyMDAgT0sNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL29jdGV0LXN0cmVhbQ0KQ29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9bWljcm9tc2dyZXNwLmRhdA0KQ29udGVudC1MZW5ndGg6IDQ4DQoNCoJfAAAAAFUr0H3fAhACF0hkbD5sDN+EgwDMBQYGAIBAF7nY9ngjTY7+FL\/5+Nv5cQ==","pkt_caplen":262,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000110,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000112,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0993{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000115,"pkt_len":538,"pkt":"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","pkt_caplen":538,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000115,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2228{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000117,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1107{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000117,"pkt_len":638,"pkt":"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","pkt_caplen":638,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000117,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000118,"pkt_len":831,"pkt":"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","pkt_caplen":831,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0468{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000120,"pkt_len":158,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAI6c0UAArQbhB3gcIygKNqn6AFDLKcxa6vNwAeW5UBgHCZ5tAAAZiUjnPYgtigeXjuRmAqfEHKwHxZkbMX1uGBYELU8XWdRdxUdmZSmO4bbqH2UDhsOQ1Wl2Bhkb5sHRFCEvGiMvMut1rS1CMuBkN\/qxSDH+9igO94LHVSEUpwD+YmqfAicgkmeFQZw=","pkt_caplen":158,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000120,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2226{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000123,"pkt_len":1456,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBaCfHEAArQbZqngcIygKNqn6AFDLKcxnWZ1wAed3UBAG\/BxpAADdXDXb1ki75cKElFI+NdIWjc3ijKD2QRAm25s1EtEMPhNn+eoZz+GRrP3hJI6+5tpiCcGqokeF7Qgb7tlNlWaeeVTKx4NIiHIosLcTvP+kFOtL22pcD1fZjOmd2IpOKuZLjt6dIv2Ou5GaD2cTLeYA89sdd50YvvzGHO47k59Wz4F0Zi1e31y\/59FB43zNmWetVih8U3rJyS5HHVJoeiC5R4VPfc8dBwfzjSPNLQertj6EOWU02x2j6zfsIfFLOlnAVObfcyQOUPyHfFnRcheZGOjmKEtm\/+sn0ckf5XiRd0M4swtliIHTvm0OfPudKEORkq5SS6bmRj+K+GqaTJ0eDM\/q6aF1E9zfuggBQKA9+SyXs91Znngu0hn2pVqg3PZFruL\/p0lz4fjBYUivjL7IOt2vUq93OziAhwl1KyKDy4QGVuTyA9ZduzBYYI1jcyTp5cyPLUz2wRYBeb8\/dNJfVRsU6RCcilX1VI06Na5DGqk9DVeYSSaycjMj37FE7m6HtSrRJEIIoLAKBMf1rTyh5rqCjnytTbKn3GvzCMX0+h5uFWytQ4CO+Z\/vp7HOQVa5oGV\/lhIMdO\/myi4AAq4LSLCyBwQU42+6rw4qcdjqqqKeyODzaqj51M0frkpb54PRoB14R6y7Ge2DkwgAHNXY1gt9rwHuLiTTL0XC5iBNJcu7njOYDCQCPpwu6PVX8QJ954efcwmeB9hA9cuDac\/cmGYG1CeiKXmjTU9RxeW9+sk6GF62w3wc+QHsiHKkbMM4DfnaLRLiOulWLjLSTfZm0QZxwqTSi7leYoJs0hAMg7KqmmOy7DpJQnFTBvcM6zqUt9X8Asuqfy986koc89OHqkKuV7PSThzF8DATf6kQli7o8mCZsHUpRyoMYFNe+Vn5HcFn++aFUpdFqqV+PY85l0Ilqp1sU1bt9y1y4xVAetj8rVJ1R6A+YH6cZcerie5ody2g5iuIS3XKU\/iRmUvwm8iBSJ8CKxhOKDGi6GjjQ1gqi\/BNZHtAbfMLZZ3cjZjrSSHdVg4d99dRfnBj5TaRgeATZa1qhvqUkJIqL9iSvkzuVdT\/GD7fZZjZ+kf5rYRxwksMDUp4UgbjE9CTOppFAmbcYKcij2L93JFG1WvA2HkFsLHC8nhBkmroi9IhFRYTl3\/NKoQRDkbcHfwJnRT3Razg0dLwqPdB3HN5q9FdUYCTKoMQ41bcb186DOb1PdPriqXr4dSeM6\/AoBh9ZaaZ0NrMKc8m9n1BIxcuHDJTkNjgnuI0DfZH67ApIKMCfTbt5GERc7+ZQ85+RccvS7AzsZN911m61\/6Ii2b04VoTVyUNoVrP5beQrv+YDazbSJxWQH\/B9wJCeNlh7yEjzFzbNvZ9j86tsEZ+egwRON0tTSCv8Xj7pgyJUvYfH0ly8ffBaCSYyKbm5E6egKqyzk64MY9Uf4T6ILsNQRGWw284JOHIr5wCFZjFNvKJhUUpeen7TtpsLW513HWpKSLPMcJopyiWOwjHL8gyo89bNJbYQUUaigq5k1s3IsjLBIu4rJ4\/V03Zra0kx6OjIcDqDzb\/9vSD93UoqJiSygQp+YsP30DmFlVwCyDkyC0aiaXzQeIsQkcEfXVpcVYs0Ps1ibCHqgIz3cnKIK67HaFBqSwvnZdFcoBm0Mf\/TAOfemCpSfA4K5cx3cSpyYMMJtKdt5EZCxDwxdgJBvLwRp9ez0jLABgXgKuqyuO5nHP\/pjllakF5vpt\/1+AGLFYT7rDmT5rQQgwAnyJXzVjEtLSmiS72dx\/Rnm0pk5835+pe8B7nkjirlI5UQ\/fG6cZmxyqoAfBOwF5rOG2m\/EQrvomXY17n8+6NHNA2Z9kT+T8Q7r6POoUtH0DksIYjmg==","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000123,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1615{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000125,"pkt_len":1002,"pkt":"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","pkt_caplen":1002,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0927{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000125,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000127,"pkt_len":82,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAEKjFkAArQbbDngcIygKNqn6AFDLKcx83bVwAerzUBgG4neVAABv6T8scduHdx8XFoC8CKpb6HFOkGw8eFGxMA==","pkt_caplen":82,"pkt_type":0,"pkt_ipoffset":0}
+0180{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000127,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2228{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000130,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000130,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeaNTkAAPwZdTwo2qfp4HCMoyykAUHAB7LHMiS4xUBhgH1c5AABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNDcudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2236{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000132,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000153,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000153,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2227{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000156,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000156,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1372{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000159,"pkt_len":822,"pkt":"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","pkt_caplen":822,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000179,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1955{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000184,"pkt_len":1244,"pkt":"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","pkt_caplen":1244,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000184,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000207,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000207,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0429{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000210,"pkt_len":128,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAHCiFUAArQbb4XgcIygKNqn6AFDLMuSI3uA89RK8UBgIIiZoAAA7o06lOUMR9b0tN4NqWqjYHmUkbAcezqY5k1Ckm0MtYSmllf\/mEyyNorAHBlAKlc3tlqWmVMYy6YLe45g7yxi7BP1GlteorxU=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000210,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYhUEAAPwbJTQo2qfp4HCMoyzIAUDz1ErzkiN8oUBhgH586AABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTMudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2226{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000212,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000212,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYid0AAPwbIJgo2qfp4HCMoyzIAUDz1FHrkkt+iUBhgH5v4AABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTQudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2226{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000216,"pkt_len":1456,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBaCmOkAArQbSjHgcIygKNqn6AFDLMuSfZFI89RY4UBAIZTGDAAAFXea3fKZUpdH3giNSW37PFRooGJMkJo2SgtfXAFuohAb2ckEbnACbz04LlUkR87pO3R16eFU59IKbz04UxW2\/6TCFlbfbxeZq31B\/t8aqtvMUvSnwZLmwnzrXmxbCbLD3RRDiYmG94Xa3OT0oe7KDZk8j46ZnsfNwIATbYOr4j7UEwhzY4mUb0fMcmIFlcZ+bMMe10S648pcw4BWb4EICvjRlRGB5sMDpfNrWcD4HUy784PLWK4RFvK1N\/fDDuJsvg36IM0d8emjCdVno3palYI9IzrPnrkIik5+6ye\/kpZ2S0ozFLJxlpphgIeMgJqmZn1M8S7YVATeeE+OceCFzdVECLUlMK2+aSkCZje5OOyOysn\/s5O\/yZqYN73tSGAxe4B\/gnXX0xbL0mK8fKrcEKrqwzsnyDFGFmA5fxJ3l7suLAGNL67EkArWH3akK0Joo5Zp9BzQAFwOkkzNAHwhH2cBVLuGr9mIZb2m8S\/yEY4YBuz4PdkDuvp6Tn1eaHV6JSc9nnrKPeXJlrDtPCIt91SzGOOPggQYJZqi1P78DG2QkjBXN97bTYI9zRA4FUa+8MlaCXPffb5yDIV9n9m6Qb54HKVKV2Z8HJCkIRg3iKAE2g7Tygjf1\/57GzIN+tMycgDT4yaMFqSe3Z3KU6wgH9cFrNETvwTNl6YCAhXFR5j0b+YhD2Hg3wgxM3HecIXy0L3K+qfezkwVcpOCEgmYcwmMmUx8+04V\/uV\/qZNWuM+LG9XINwE060VuNkEWN1jYXfinDqKkhxBmYCcuj+bEFLEwrMM+woZ9D6ik3B7g4ZpagEax4XLu+k466mymfyGzBKCLbqU9hckpatA++PRoOGUqZmIVFwki0VLbZPe\/4KTTal3uRchiLiYh77Keha20QW9\/5iMU8rgqSYvb07tFYgHf+iLF2hDCQAcOfquJdzxYzPozv\/bBwOA8wEzYdyaM1p9rLo\/XQh5xGx\/VUZ6DcOvMq76GXMj66AmAotlha+UhHJzh7h7Otw1slm0T6PiGT3I091whveIzpdYlvZsYkPpXnaInD1H12pmZtqLx8NHk+gxEZXPi3Oq2QNzw+p5fbCithjHqsQbz0g4DrtYwFmfA8ZlzsKivLY7NDPBuWCgxn7a8byxUrzElWDE07dpV7hENxfQjShGYeSTzbot5kxtIcoTHi8vQrdumimPmHSA3DDmo4mtEaS15N2X7TImR3HyoxbnOW2kEbaqeUmWlT18neBTHSlPtrImLC5tJKwN8Zp5ILXI9far9zbRmKHt0RzhtME8CRPXk5zzx7QSmnOlaDksLqTR1S5jnNnWn6yp7Un1o1fRo6kGay+VCksyDT9Pq00nRc+sxzd5s++JmfmCBijtIUHwAluTmio9NHTud1NNJ21XDiJpHPh7nMUgq0xQH6SwcwswVGUY\/Bopvz1aHXNJDiZtZzwxu4vl09iU5Ltwlil8+X58Md4PvRQPb71exXa\/DfeCHEZGhL2WQnRRGF9ICcenPOQs+iyFxq1PiF91tOuhSc13xLGWeStoj9mx2eGZWQyM9NcealXWl6M\/KTC6pd1r+J6y7tueL\/fx0wZQW2fluT24agsj77yeyfl3F0vZBaN5uvMJxe+PSy8i1+j1QNO77N1m7N\/k2x18oiS\/A\/a6tik6Y6oXC2VEIjxFooeGIAoSJt98zThYFklokAkPqMrIWuZBiA2FUu1W7ns+OF\/6k+Dd4uvE2WQL58YvlKTBWx+Pc73xfTTGD59ORfMqqM2BRKSdRD6+SuVBdjfxKgrF6tsa08zYb0Y3RaF1YKBK93FBmw45lOFTBhMHRffGpADFVRiiMIl2g18t9WfBkyJLorGrlsYJG5nc7APH0DgAxHcg==","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000236,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000237,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1143{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000239,"pkt_len":652,"pkt":"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","pkt_caplen":652,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000240,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1335{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000242,"pkt_len":796,"pkt":"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","pkt_caplen":796,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000242,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYWc0AAPwbUKgo2qfp4HCMoyzMAUBi\/C9f79R6pUBhgH29nAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTcudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2238{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000244,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000264,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000265,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1492{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000267,"pkt_len":914,"pkt":"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","pkt_caplen":914,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000267,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYZxkAAPwbQ1wo2qfp4HCMoyzMAUBi\/D1P8DBnlUBhgH26YAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNTkudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2239{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000270,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000290,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYbGUAAPwbPhAo2qfp4HCMoyzMAUBi\/ERH8GFljUBhgHzZPAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNjAudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000293,"pkt_len":1154,"pkt":"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","pkt_caplen":1154,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0930{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000293,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2200{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000295,"pkt_len":1432,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBYg4wUAArQZAHngcIygKNqn6AFDLM\/ww9AsYvxSNUBgIMb+1AAA6BRMG+gGwadlGwnkwz5IoCoUgFZP3Tr5SHNCi6T0cM7Bz\/k5JMv31FN6oaGAD8ak3mZEoP4XYkeP8j9aBK9R1hewQnfGaU9dB0sSIJDsEaiwe45936V5VCYRVzlJc6h5w2KC7DnaKqMKMCqSu1N0wkF7koMJOBNXqKZOhGzo+6IvGsjRN2ctAlGIU8ZEB+OoDpdB2ETHlnQn9y+sx2PGlXMOF4tW4T2mKoEcGpXilufTVm8fwWTUIRxw7EMehCPoO8uQCUri8PKbAONurlXFpMBIKSa640tfVlmfekHgJVBHFgBz3RuD2y5A4lK1n3LaNwCVog7oL3\/Cv3RzjJoM9EZhqr4GFm1uNj1iNlTzqI3WGc7vNjboMYRu\/ngFPrUDq8O0J0N1WqjEKnAF5nBYnLwo85pvgHpUFgFugNAQJJbGb1YMTmYc38AYtTKESHgHAdNKb3cpN3oovXR2VUgPwLSKEfKtKTYkXadGzVf1BWTax1h3EskJ2XAz2JRPcvzQyraSl2u5v9jGFeWo7QjZ3QHqFI+3EacIwmWrE+xHMQ1Ty1gGWcCNW8sk9eNqf9qh+lvjl9p4l8+TLhaTpDQlOSXD18fudhJFwUtiTa\/cGz\/AJxp\/cftpFA7GzVW9KD\/q72PClbmkIwPwJT9meR+s82sqv+4WGQ5cpvyskwUY5zizclBZuo6QMUkoDw4joLRvVbWOC2uPXYvbyPGWLlJ2vbtlIehCPQbjsfkhzZjPmnusWbRgaXz1a27ImNl4ABTGAZEA2m9Qzl62E\/7GlLyiEnyS0DyVcIjFs3b3cgUFxMyLTF1XwPlgBTDXkhEQztSoFNJkOmiiFppTZuPJcYZZ7uuMmR\/cM7gb1bXACVhlMFczLK2GmMmUV\/ZCPxArkeW7YLlePxXXEu0buW7nR31HWIy1qhuOzfeON56zgkHCX6f3OzGq5xwgdSEw7KFl\/Y9mDxtJL9PcTxLkJKIlBuPByh25BySIQRUgGyCJvCVNPmq9gMKL3fC6OnVLYPufXgUrAqNKqXZ49OSNr3sN31KGRxmHk0rFKtUDuHSh\/s1\/ajCKip5tsjxJ9SZ9Rn\/PJyPeMeXfNDpDdfl3EF69RzNtBRrJmaQqPjVXWBGLtkDqcZAy\/\/kbgDSWP\/o1vsgwldKrjio1xwSxU7Oub4HimUPgoQU927557bhNXDBUb\/0QZ4iIS+BpAzW5urNR2s9CtmlanA9hw86N81P8WenhNiiEWIDUfSizNauq8ZW+\/SaMOBettwRDh\/0OWMp8y9IrtiDIV4uzcXwbgreoxggmlEzHniLjb0XndHzR+qTXIfbprW+78\/1xYk0xsduPtSS0FApbuxmkF7uop8Bcn1syZqc8Te5W4ztUji1HvdDxHHgaG92O2soCw00pVCc\/oBLR5Nuk64dXc1TC\/O7\/7T89l\/kFwPKHY1gcSKWJTLaWI8P6AQw2uxqTbgs5l6KJrlbimMbpag6xrxAe8Kq\/u78ESEv4wYcEJbPV9A5tvXZmoAr7UYwxICYiMUoi6bEu\/90JcE9+UCDe5kRz18XgvzVfYFm4djQtdwstaFuz7Yal+iSgevzthwT85hBbUDRVLPoWyae+DYzhNmY8NTG4zP7Kgf6Z+Odb2ujBLLRDXPX7JSSJpbHZ5amyRVImW32lAsykoB9O1+PrLmjsj+ODZwmIeNSlztxAzJUrx83MlVYHzIQvTyd2g8uOFV+nCauKF29ExXOelzp8YQs0yOi+h9r3e3aBACzJT1BFIdKCzmLBYKAEm9sbACWLEzwkx3\/vLlAMdS35I9JsGiwEU14ZfoBjdx6Hr6bhP\/ejLYK3ZRToUD3VNAg==","pkt_caplen":1432,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000295,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2071{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000297,"pkt_len":1334,"pkt":"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","pkt_caplen":1334,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000297,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2151{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000299,"pkt_len":1396,"pkt":"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","pkt_caplen":1396,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000320,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1870{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000322,"pkt_len":1186,"pkt":"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","pkt_caplen":1186,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000322,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000326,"pkt_len":802,"pkt":"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","pkt_caplen":802,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000346,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000347,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0929{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000347,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1948{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000350,"pkt_len":1248,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcBNBb\/EAArQYdm3gcIygKNqn6AFDLNbdZW8fM\/d9rUBgIIqcYAAD+T5O3IPZmBv71L8WfkixgJr\/jAt3\/6kLgAlGb+bz0ykowoo+NPkYJoM9UpoIVOvy80c0V1g1txC7AgybX1gMQCPuO2tL7\/YFSRxMejmWc4iVxTJSsqhfOA46142Bs1WbBta5O\/SisV8I6pVbO3GCxSbhFLwGr\/WZMUvJFa03S2huv7nozg+bdD4ixlKAFqDdBblAS5LqKSvj+fOg7qedCUtEMdl2BX1M92lt5m6MQhdflPtDytEcZ0QkUCdMH9OHvhlDAvSTeyAtHyfYMIr7y2wFDjfyFOM32EeqMcgEsS0MQwjTKiEkzEJ8uGfrxRfO5oVpc6VJ+xU5oxB5UzhG8pmTwc93Y2+GfYxPPy6ggTaHy\/d8I7FePvcMuO0KR+65nFfpCrRJnDXWI0WHUQIZcOwglbU1AfE\/G0U1NohfpkoAAnwPGa2AwV3oZoMhAulbVmnnznep4SXoywe87c2ocX2ggVFcYGvjslls5jM+9Mb9jAiJUQob+ptDy09gH34DekuerUkd5kD0BHNFL1qJxKuT2KFfpVgoJcv7HmFi278ssvmuhcKYTndrOnym+1tTrX4yHchzxBIO6GaHA8tKeIbQel4TL1v3Z16t\/5xrJ+Q3\/dZxmuZuNaR\/mbOEVBLzpZG7JjcrFSlppStGfqcXspmqu2LVEQvyEoz7nD3cdIKrnhCpQD85sNyvZh8JPCYo865M5+VSfDtodRJdJU1Nl6DW0MAcLqRvHQY9JW8lvPNvqOY2adRWmAKu7tqvblHXcRcfi1rVtS37DAzU+CITvUZ7K30LaIGtCPuD1JyxuUKBexT3QohOr8Lhst8RR1CzAUG3EjerjlJS4KtFHtNg7GoK88LreN47H4SdxDkAmboeyFID9kUTvhDEEqXlfFOEyBf9Hwqltx9X6rJI\/aCSw0l3eGOtTl3BrAC\/PZaQloz6cS6y\/rAG\/nTUo2JYn9FxvYyn46cJ+Dvj0skCnbuZGkNTSODQ8OYRf91rdXgsLkXz7SvGaVdHhOR9kAXFpWZO7NlKFm7iCcjRGcikx0R+JzsCdgGKw769t40JLLZ2Q7I1fg8xfNUu24vDeA30lrnpOU4r2\/wzGdHdMyj3aW37T\/Pa6QQtQ1KDPtl9xaYHV7eAXl7B\/PrlRzNCxrvA6rIktFl32wWbaV4UONT7uV+4MsIL+HjkWP1O8dgLKVVeYmic1ZUfE8n13QHUcKgu1wZjEhZIqzgLo+waSjiNdfhALL5AB0EpMQXn5\/7OVD3m88BGmhRFUOC2MbYjnNMzH8wAwic5A3Qvz2AIrONrzFcniz\/ItQB42w6KG1uQ+E3nY7gSAkYQOrbzozKOWRZnp2uAnHe4PHe\/OVrr8C50\/kt0TKX5CZ2FJOOqCL0f72chb\/rBb5J0abgAXFRf0RhFz8NBfmLRVAS8iJvF+ExsNR3UUz7Uik5Fcuqlhq\/2+nOX6Vo3ZiRGJ8ebb8KS1vBD76QQNsXfNVIC2g\/pLfmhdq8Adxob5YnXButMrysl7iAokGOqWwh8nWfQCWcnR9MCedQ9mTBrHLXrhSeAVZOjGNYrbH8nHmLOBBy1qB3E4YD0wwrTIH9U0Sgt1","pkt_caplen":1248,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000350,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000374,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeabz0AAPwZOzgo2qfp4HCMoyzUAUMz94Sm3ZOkRUBhgH177AABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNjgudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000375,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYAQEAAPwbqXQo2qfp4HCMoyzYAUPnxUPbwb7kUUBgByReCAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNjgudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+1116{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000378,"pkt_len":632,"pkt":"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","pkt_caplen":632,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000378,"pkt_len":502,"pkt":"AAQCEgAAAAAAAAAAAAAIAEUAAeYCSkAAPwboUwo2qfp4HCMoyzYAUPnxUrTwfKXiUBhgH8mSAABHRVQgL3NlZy92b2wxL3MvV2FybmVyL3FwbWV6emhhd2tkaWdpdGFsY29udGFnaW9uMjA1NDAzM2ZlYXR1cmVlbmdsaXNoMjBsdHJ0MjM5NzZmcHM3ODM0MTkyLzIwMTUtMDItMDIvU1RWNTEwUjM2MC9xcG1lenotSGF3a19EaWdpdGFsX0NPTlRBR0lPTl8yMDU0MDMzX0ZFQVRVUkVfRU5HTElTSF8yXzBfTFRSVF8yMzk3NmZwc183ODM0MTkyLm0ydF9TVFY1MTBSMzYwLTAwNjkudHMgSFRUUC8xLjENCkhvc3Q6IHZvZC1zaW5ndGVsaGF3ay5xdWlja3BsYXkuY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoTGludXg7IEFuZHJvaWQgNC40LjQ7IE1JIDNXIEJ1aWxkL0tUVTg0UCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgVmVyc2lvbi80LjAgQ2hyb21lLzMzLjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2DQoNCg==","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0511{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000381,"pkt_len":188,"pkt":"AAACEgAAAAAAAAAAAAAIAEUcAKxOfUAArAYwPngcIygKNqn6AFDLNvCIzKD58VRyUBgIQ+UQAADfzhMvY9knKLd3WdSlIwNSJ\/8y7+r7Sq123HOTqh2Hu+B8Di9cxcoWasDMrFDi0OP08Ux+dwWtodjPOApM8Zs+\/K\/hxXllXzFA0zt79voFKS3ykKSL1NmG3zGp6PnWizqTiSO0nGR4jVws2JlqVc+MwpdC3d4p1hEFwemHjINstt0TzS8=","pkt_caplen":188,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000382,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+2239{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000385,"pkt_len":1456,"pkt":"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","pkt_caplen":1456,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0928{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","pkt_oversize":false,"pkt_ts":1429000385,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":0,"pkt_ipoffset":0}
+0181{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap","datalink":113}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/quickplay.pcap"}
diff --git a/tests/result/nDPId_rdp.pcap.txt b/tests/result/nDPId_rdp.pcap.txt
new file mode 100644
index 000000000..bee66f604
--- /dev/null
+++ b/tests/result/nDPId_rdp.pcap.txt
@@ -0,0 +1,4022 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0340{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAbIuKwQArnAqAKOzQ4NPfm84lgAAAAAsML\/\/7iqAAACBAT5AQMDBQEBCAoLUEqcAAAAAAQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0322{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":56,"pkt":"AgAAAEUAADRflEAAfwYqMMCoAo6sEAK5DT3NDkeav7z5vOJZgBL6AEVOAAACBAW0AQMDAAEBBAI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0306{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84llHmr+9UBAgAGAaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":63,"pkt":"AgAAAEUAADsAAEAAQAbIvawQArnAqAKOzQ4NPfm84llHmr+9UBggAE34AAADAAATDuAAAAAAAAEACAALAAAA","pkt_caplen":63,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":63,"pkt":"AgAAAEUAADtflUAAfwYqKMCoAo6sEAK5DT3NDkeav735vOJsUBj57ULVAAADAAATDtAAABI0AAIfCAAIAAAA","pkt_caplen":63,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84mxHmr\/QUBAf\/1\/1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0543{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":217,"pkt":"AgAAAEUAANUAAEAAQAbII6wQArnAqAKOzQ4NPfm84mxHmr\/QUBggABKnAAAWAwEAqAEAAKQDA1zvnin3BQ0WoaI5HWRiVoHjQlpwvdUEXbCiPT2yUNvnAAAsAP\/ALMArwCTAI8AKwAnACMAwwC\/AKMAnwBTAE8ASAJ0AnAA9ADwANQAvAAoBAABPAAAAEgAQAAANMTkyLjE2OC4yLjE0MgAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":217,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1903{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":1223,"pkt":"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","pkt_caplen":1223,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0306{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84xlHmsRrUBAf21rRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0189{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0478{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":170,"pkt":"AgAAAEUAAKYAAEAAQAbIUqwQArnAqAKOzQ4NPfm84xlHmsRrUBggADa4AAAWAwMARhAAAEJBBNsJkY70ynR9zLyFtbbpXp3Se8eHP578FfFGuMG6XtqEsC1VOnanqA+Mbal3ZRKGmYHNvruMhg9vAN\/1vTL6QYIUAwMAAQEWAwMAKOAIO32NJwtB1R+IR8ZGg4W1B9xNzr1dfjy2U2K4JbSVXfPDwsrxrbA=","pkt_caplen":170,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0376{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":95,"pkt":"AgAAAEUAAFtfl0AAfwYqBsCoAo6sEAK5DT3NDkeaxGv5vOOXUBj4wkgxAAAUAwMAAQEWAwMAKAAAAAAAAAAAd+QoLo8iv3xS472eDSMCvzp\/RhtT1o2Famve+jDADK0=","pkt_caplen":95,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm845dHmsSeUBAf\/ln9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":130,"pkt":"AgAAAEUAAH4AAEAAQAbIeqwQArnAqAKOzQ4NPfm845dHmsSeUBggAEHjAAAXAwMAUeAIO32NJwtCbwf24aIUyDywi3mxc3B+r4F8a+fXQO3kdUPLZbR97ytm+YP6YOIORhLskIbGgI8tyWuJu1au9XGQW0YjANNgeAHN9MaSZfP+2A==","pkt_caplen":130,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0699{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":335,"pkt":"AgAAAEUAAUtfmEAAfwYpFcCoAo6sEAK5DT3NDkeaxJ75vOPtUBj4bIR8AAAXAwMBHgAAAAAAAAAB7zVEuKpz75sHB7C8fehvuQjcGumLY3N\/Sru6fo4qls5T3z5ueS0w0eAArKxHCOE1vXcc7iueWwH44ZVsAXSVBmg5AQsTvIwPqOKrBmtTNSqAHX5ZFz+30LB0z5+KteCJ8nmXgS9LPup8lkkZ4kGaMixOY3a41oQcTuwDD7sR6Uc7JzGCPYzKAUcFDPYIoNxuNUxOhQjoHtEe4lQzXwp5Vhrousl0DvU3wS3RrPgy0fYHrnXcjsojt6zzJ6fOVA9UTnJj+I9h38M6Tmwe85C411rDaQsQsopVBzfsU+EH5NQrwZRvEQ\/WEvBrJ4L2HvC6nzUOELT99nqHnhzYusCTvc1+JMZVKFs+E+jfPpccvj1OkXfzTxc=","pkt_caplen":335,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm84+1HmsXBUBAf9liMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1088{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0425{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":132,"pkt":"AgAAAEUAAIBfmUAAfwYp38CoAo6sEAK5DT3NDkeaxcH5vOYpUBj2MAWYAAAXAwMAUwAAAAAAAAAC6+DQPjDe0JDeHk5N3kKXeJCzKCcqiptCDVcMVjsBXjlX7r92zWrLiVq0bihKXnb8EzMmAcJl0mVweLgRv6hqzmIN5Ir2lEw1+M+r","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm85ilHmsYZUBAf\/VXxAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0452{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":149,"pkt":"AgAAAEUAAJEAAEAAQAbIZ6wQArnAqAKOzQ4NPfm85ilHmsYZUBggAKp8AAAXAwMAZOAIO32NJwtEB+x3hlOwjKH\/ZNEm7jC3r30iogNB9XHdVsncQt9CluVkp65ZiTFSzJUYro3z\/Ypv5xgm1\/QMQzPnHsOUJbGi9COFpLGCFPVGZYybdflNVIef09dVzrm6aNIHLIM=","pkt_caplen":149,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":77,"pkt":"AgAAAEUAAElfmkAAfwYqFcCoAo6sEAK5DT3NDkeaxhn5vOaSUBj1x3CFAAAXAwMAHAAAAAAAAAADtbmk7PlOUrzMRT4kxtWQJSC14wk=","pkt_caplen":77,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm85pJHmsY6UBAf\/lVmAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0972{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":535,"pkt":"AgAAAEUAAhMAAEAAQAbG5awQArnAqAKOzQ4NPfm85pJHmsY6UBggAPJoAAAXAwMB5uAIO32NJwtFPPrNgn0nJB8y3SFl\/8lRVlEFeKO90AaZakwdaxO7UAC5E46JOoQewFx1ltZznWZ40ItTI03JNMZY6NgsTGEwUqrhUFJsnMNrhyziM0bzKrMQWnVUtCOitH6V2GX0vKN9n1XVaeUW0T1FYn2Fcy2G1OVCyPhdQnq4KG1sy+NXeja1dEs4aoHQjFKeT4mBlk0WuJhPGRYwxl64BZAT5QMdpgpOUT1POsvDwtC75RFl54kKpeqm\/vWjKhpsgyMr4fBCY3u7R5XpWVDFi8grHO6l6cUQF4AnQf8Fxx2\/9ABm98sbVUzm2oqQaJaXgF0CRzfw6cXUHFo80K9bcvasYJxaJCwihwkIJwcGxkYwIleIN8JZ\/bNsoOa45Yo8F5fOxygW2YKy1aBjdin2UAnjytwSjGt3potC2uUicmb2Ge2f3jdXfphCK5kxXvZkMJ+zUDgekFpXyTQnhc\/jaPNEl\/Dyc9temlvqgNQXNZBy\/gCl+q5+UnpWy2AgBifDIVIKUprerOTYflBoDkpmwUyPu9MbdfQDZM94Ycr3NeA25D1BCIUt3rFcn5IbiedgKSMcUjILNNAGlY7C8dJVKCtBwcKIv9ELVW7tJtnBpWFjuhnf0XE1dmjAosIXrLwzLKTVYA==","pkt_caplen":535,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0521{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":199,"pkt":"AgAAAEUAAMNfm0AAfwYpmsCoAo6sEAK5DT3NDkeaxjr5vOh9UBj6AImqAAAXAwMAlgAAAAAAAAAEPVjcPlM1gILtnxKHTfFvl4WYYEhxysBzgr6A3\/LqMEcsagcBq0Azi\/7vHBeUaFho4iKskkmFo1EKxjP+EzWGYWXSmi7Bv71g\/E7+kq4PxOLv7iVEP3En6Dq9UYUEILm67vRBKIzuKSMFA+0\/bC3oLSBycCjA9taCP9Lv0jwiiQXKFvB+nKGVtgx37HTsLg==","pkt_caplen":199,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86H1HmsbVUBAf+1LjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86H1HmsbVUBggAOl8AAAXAwMAJOAIO32NJwtGmOP9aWI\/zYdkqKhMEJQHbfDHyttZbu8dPEVNtw==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0355{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":81,"pkt":"AgAAAEUAAE0AAEAAQAbIq6wQArnAqAKOzQ4NPfm86KZHmsbVUBggAHASAAAXAwMAIOAIO32NJwtHXRGKnq1P8zc7qbpw8ts8Pl4DkcMudfML","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAAChfnEAAfwYqNMCoAo6sEAK5DT3NDkeaxtX5vOjLUBD5snjdAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0359{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":84,"pkt":"AgAAAEUAAFBfnUAAfwYqC8CoAo6sEAK5DT3NDkeaxtX5vOjLUBj5smGGAAAXAwMAIwAAAAAAAAAFicqsUvKE7d3sZoGdTCPGWQfAOkhsTm5OSC4o","pkt_caplen":84,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86MtHmsb9UBAf\/lJqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86MtHmsb9UBggAEqNAAAXAwMAJOAIO32NJwtIG0SrXLh2AlXWwfR\/F\/D+13UweF4AWMDqWKKH6Q==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfnkAAfwYqBsCoAo6sEAK5DT3NDkeaxv35vOj0UBj5iQ4cAAAXAwMAJwAAAAAAAAAGhERfJaxfEN25F1ObimP+Q8+LkO+TIArKjsUtAfb0ew==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86PRHmscpUBAf\/lIVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86PRHmscpUBggAJ8DAAAXAwMAJOAIO32NJwtJtTUzHkvmY74KOzrC71XXMs0hRYX0jhR71MSTiQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfn0AAfwYqBcCoAo6sEAK5DT3NDkeaxyn5vOkdUBj5YKWnAAAXAwMAJwAAAAAAAAAHKRHs9hWTdYzjxsS88MYrufRU2EIrJMlhdKR4W8pAzA==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86R1HmsdVUBAf\/lHAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86R1HmsdVUBggAI1hAAAXAwMAJOAIO32NJwtKrm3nlKbe0SRex2b3d4qvHpTAdUrovqP4d79rng==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfoEAAfwYqBMCoAo6sEAK5DT3NDkeax1X5vOlGUBj5Ny++AAAXAwMAJwAAAAAAAAAIfRlnA4luMA\/3430xfWLkqVCgmVK4pHTRABh10+Ptgg==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86UZHmseBUBAf\/lFrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86UZHmseBUBggAIb\/AAAXAwMAJOAIO32NJwtLL6Rg03Sa+kdKeYSJcKGqhivObf4WN0R+otsAsQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfoUAAfwYqA8CoAo6sEAK5DT3NDkeax4H5vOlvUBj5DvUDAAAXAwMAJwAAAAAAAAAJgKPjuNKG8oCpm51y59fPMCqarllOUYfnWA+h5B6dBw==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86W9HmsetUBAf\/lEWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86W9HmsetUBggAKlFAAAXAwMAJOAIO32NJwtMMMmZzCAFwAczEQkJdaEWwsU7oQ2O6lyKxFNdPQ==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfokAAfwYqAsCoAo6sEAK5DT3NDkeax635vOmYUBj45TB+AAAXAwMAJwAAAAAAAAAKipzqHCvNdxKAgbfVEfca4EsNp8w0KjbJBRN+jJjHWQ==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86ZhHmsfZUBAf\/lDBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86ZhHmsfZUBggAIXAAAAXAwMAJOAIO32NJwtNMKhkYlKkpmO5eNLFmd5Rpcq7AuKxxdVdB4G0eg==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfo0AAfwYqAcCoAo6sEAK5DT3NDkeax9n5vOnBUBj4vKqnAAAXAwMAJwAAAAAAAAALTWU5gCq00KIbbGQtYgmjxgRhuuMCf4S8AmgtKinIUw==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86cFHmsgFUBAf\/lBsAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0363{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":85,"pkt":"AgAAAEUAAFEAAEAAQAbIp6wQArnAqAKOzQ4NPfm86cFHmsgFUBggALntAAAXAwMAJOAIO32NJwtOtaCw9IM0p76VTNoISGAB4im7odPJcHOwqFSYNw==","pkt_caplen":85,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":88,"pkt":"AgAAAEUAAFRfpEAAfwYqAMCoAo6sEAK5DT3NDkeayAX5vOnqUBj4kwSfAAAXAwMAJwAAAAAAAAAM3fGRxkP3+dewkZDywDiMxk2kc718ZRjGsDiOWu35GA==","pkt_caplen":88,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm86epHmsgxUBAf\/lAXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1087{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":622,"pkt":"AgAAAEUAAmoAAEAAQAbGjqwQArnAqAKOzQ4NPfm86epHmsgxUBggAGKJAAAXAwMCPeAIO32NJwtPwN3NWBDMTThM+6Uypfr4znH121KVTc+XoO8ryjnuyzAbvoa24Gy1oJ0aB37ZL+fcDENa8MBJLwtjRD32DzJbvrXzK58ZRN6krNQ+CLOrYH7wsZ3A\/0QAItaVeThP35dW2UumMyxbd8L2fVitWfskX1OC7UZHAM3XjpwUQuyUUyaJ8aOY9EwpUBwNeVR8NgTiKv+FmASotOo9OT0+op7XqyxPSZLiUAapRloRqQgI4bH64OAteQjIMhZaDw0iLjRlX909edvK0fqRdCHiizbLPd2zuU6hVk5bZ3r0ATnMllfM\/coU0NAgF8BwBWgEQqay7IGgrl2SPMyNQZrfBMvFeHPUMGsz+lW1o4Kcr1hQCT1VXcEGMX0zBFd9XbgOJyMXnfYVaDsANev5YMoo9thR2SiRrnruYTrAExnVk5g58e2yNWzH6EXqIypH+vafzQbV0ObXvRIVVX5reRccYIwbdu5MGIlXeOq7sSTVP3XaVBpbzu4k3cyEL8KWrWV5iL2MXXCXjkQadCrGn8f3mp7MdWjHC8EAcNNOILwz\/xBuOf+6Th8WJavHyLIEMVP1U9PRaFZuXUqNO77Sh6IBUwj9Uy26LaeiOIgsnEndQe\/\/opbSP7B5toAFgRBLErFyTzXR0JqE1MGJBkzVHen06n2ufbbv2MNnaLdkZf6MAF0NNrs9NFp11B41zQ+OcdZ3cUQAsJe8OQCSyfmYyAxTJ3cmpq\/Ys+JYtEsQ307JOFIvBTdASZSi1Q==","pkt_caplen":622,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":107,"pkt":"AgAAAEUAAGdfpUAAfwYp7MCoAo6sEAK5DT3NDkeayDH5vOwsUBj2Ubm3AAAXAwMAOgAAAAAAAAANrZiBJfwnM0xtyahHpC\/hhOiCxuwBOiPE+J88inF8AfQTXS+PfVcbq5CGG6j+Ascwuwo=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207465,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87CxHmshwUBAf\/k2WAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0981{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":545,"pkt":"AgAAAEUAAh1fpkAAfwYoNcCoAo6sEAK5DT3NDkeayHD5vOwsUBj2Uf\/xAAAXAwMB8AAAAAAAAAAOJA7EOu0Zg5PAAo3PcB83cJEhQyc1L4uslMQ1M1Xp8XCUTzHBSjXmqfSjX2o15DkQsVAeO996hHOKjCvMKUONTKQ4a4eJUAsjBCQVp1Oa4MKHqfqNoF1bOFHq6WJ7G4sBfHLw5u++XMRwdq\/VzSoR3SQBHAbzGRhsfWgMf7roa7EtVFyLP4nt\/XiK6VLRYHYEQHW5GbpRch+nN7Bc+qHgI001mY0VrUG2nhrcjxWrZdXXJtTHrHvnLrCW01vF4Vj0YnSDfr5c6VaZ6gDFPeiFcrRjb7PrmejmHiL4DYtJUmEEfhsLfIPFzBk0OzY70IWOpd611JY8m8bY3XZWZNiIWprL7bUsWD43TyT6SBHgnnGXSzoBSnTexWuA51FzwBrskALtxtmFmFexE+5tuVyZp3mko7bYs56tL77Q+43ZNiVRGHFpRBR4XcPXEIlVElV+X3Oi\/Zz+bmyJYrfWtyaneeq4ZxWsiMJFZndHHZxA8+5ZqRYHryCz+iPD8XA4ECxPRey19xk6l0E6Bno1YvqHkw6zSmyNMdBsIow37L12nXsAfw34RXrMrxB+xFVIRzQl2nQsnWjarOpWOoA7WkPHkgs4R67jEqQ50D2pwM+cmyoOYlDWEp9GwFzV5ZCVZcmTrdEROEvGUeE=","pkt_caplen":545,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87CxHmsplUBAf8EuvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1088{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":109,"pkt":"AgAAAEUAAGkAAEAAQAbIj6wQArnAqAKOzQ4NPfm87mhHmsplUBggAMTnAAAXAwMAPOAIO32NJwtRO5r6T\/rMP+oU4JmkdFY0xxiTqtXXGVELGJkojIQarHSkWjGpYjgojQIeN7vaAabWHTAc\/g==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":113,"pkt":"AgAAAEUAAG0AAEAAQAbIi6wQArnAqAKOzQ4NPfm87qlHmsplUBggAJRJAAAXAwMAQOAIO32NJwtSrtfo3wOL6TncCEk5anjLfoYfDTbiK8o2jUzIivQd0QyTwD9no9nHntVoQPifsjNZHv9+YTWJnvM=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":113,"pkt":"AgAAAEUAAG0AAEAAQAbIi6wQArnAqAKOzQ4NPfm87u5HmsplUBggAIY3AAAXAwMAQOAIO32NJwtTIHuRP3LaaIzQ+ZqWZEo4ciH6a4JfTgr3xzu83\/RZI+jOspUcbY0cFv3HRofUnLWfq+iz+ZGNymo=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":113,"pkt":"AgAAAEUAAG0AAEAAQAbIi6wQArnAqAKOzQ4NPfm87zNHmsplUBggAK\/PAAAXAwMAQOAIO32NJwtU+DFWiqhD6\/WN4915R8r5JlldFx1RLFoTCiKEgJOgTe+tWkSpXbywgPBqkbeXbo38HJgmZvYryBI=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfp0AAfwYqKcCoAo6sEAK5DT3NDkeaymX5vO94UBD6AG5SAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":109,"pkt":"AgAAAEUAAGlfqEAAfwYp58CoAo6sEAK5DT3NDkeaymX5vO94UBj6AGJmAAAXAwMAPAAAAAAAAAAPXGvqPPQ0+SUZZ25jodkTcZFMzcR3qtcqfG51geu95n3i\/9+LII7W6PnIO8z715aSJVIVJw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsqmUBAf\/UgVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":113,"pkt":"AgAAAEUAAG1fqUAAfwYp4sCoAo6sEAK5DT3NDkeayqb5vO94UBj6AOfpAAAXAwMAQAAAAAAAAAAQu\/d1Uq8OgSAzMJ+R0fgJAt3hhgVhrpGvJLkpcjEkAlW7jHXIX9kG6PuUatycD9z\/YZlsG9L71rM=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":113,"pkt":"AgAAAEUAAG1fqkAAfwYp4cCoAo6sEAK5DT3NDkeayuv5vO94UBj6AOvlAAAXAwMAQAAAAAAAAAARtqbeTr378yhkm\/vJVypD2Mql0kYiG6RfeXeRwXvLVWObVQVHRcaj4L+j1wXoMpcg8WHMilgiXnU=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsrrUBAf\/UfQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0401{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":113,"pkt":"AgAAAEUAAG1fq0AAfwYp4MCoAo6sEAK5DT3NDkeayzD5vO94UBj6ALJjAAAXAwMAQAAAAAAAAAASjpMERpMLs1kJpWGTriT64vjWkBevuzzfqHNT5JBEW8VWsmxlcZEMdWKkx2ZrPmmh4UrQN3wCGlY=","pkt_caplen":113,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsswUBAf\/UeLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":107,"pkt":"AgAAAEUAAGdfrEAAfwYp5cCoAo6sEAK5DT3NDkeay3X5vO94UBj6AMhTAAAXAwMAOgAAAAAAAAATXugY39V3haL5OujeYmiCZvzv0lRxqNiY3KqgR31njCtzCdRuT1cuRs3sfmkYKuMCXc4=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmst1UBAf\/UdGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0427{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":132,"pkt":"AgAAAEUAAIBfrUAAfwYpy8CoAo6sEAK5DT3NDkeay7T5vO94UBj6AOh+AAAXAwMAUwAAAAAAAAAUOsSVO7ufR1\/qtcqilW4r+BMj1bN+Xmf1R595E\/VnCMHTUOBL56hcowYqtZtyfS287hGOlaiLkpcoEHCUcsV4J95CJOu7YSzYs5Eb","pkt_caplen":132,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0375{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":95,"pkt":"AgAAAEUAAFtfrkAAfwYp78CoAo6sEAK5DT3NDkeazAz5vO94UBj6AM5cAAAXAwMALgAAAAAAAAAV4PGVY6ZORi3y8+jVSsJvE4+l9192u2VTgg6cfhSYypdM4shsoa8=","pkt_caplen":95,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0428{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":131,"pkt":"AgAAAEUAAH9fr0AAfwYpysCoAo6sEAK5DT3NDkeazD\/5vO94UBj6ADVvAAAXAwMAUgAAAAAAAAAWRhIq3xgJuuB2HCY03HaQq3a9B8MTBAS1aSIAd4c+uNM0iAMOC1\/SBsSyz7QXePqw2xekJaQGzV655iwX3j1dXgOWsbGVIsVXO\/U=","pkt_caplen":131,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmsu0UBAf\/kcGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm873hHmswMUBAf\/UavAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0379{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":99,"pkt":"AgAAAEUAAF8AAEAAQAbImawQArnAqAKOzQ4NPfm873hHmswMUBggAHL3AAAXAwMAMuAIO32NJwtVXbzRTXO8f6KAFI7+y14cU4+BWJ1DrIchu9h6oVjDmmfAVMJchAfV4uwo","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8769HmswMUBggAOl3AAAXAwMAOOAIO32NJwtWYSLoWgAtZS+ja4Xj8\/B4YGRXeJwdn01wzG+Vtht1m3SMAUhhEzbJ34elg0m\/798h","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87+xHmsw\/UBAf\/kYHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm87+xHmsyWUBAf\/UWxAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm87+xHmsyWUBggAB3YAAAXAwMAOOAIO32NJwtX+3YDLHQ9LeTFWLVhRcLncVmxIjDFMNdS2Of0kBhyE7r2WPKartc6r4u0qhC\/b7dj","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0437{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":141,"pkt":"AgAAAEUAAIkAAEAAQAbIb6wQArnAqAKOzQ4NPfm88ClHmsyWUBggANFWAAAXAwMAXOAIO32NJwtY0ZW9SnSDtwGXHCoY6VnP1jiQ2GVs8xqoEfieaZO18QuLfCkxrQO1xjuCqCm3kMghfBh4wqv7PXw+Zh6ywmPbNVUM7ZKfggjOrxSKqZOFI+4K57yT","pkt_caplen":141,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfsEAAfwYqIMCoAo6sEAK5DT3NDkeazJb5vO\/sUBD5jGwhAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0522{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":202,"pkt":"AgAAAEUAAMYAAEAAQAbIMqwQArnAqAKOzQ4NPfm87+xHmsyWUBggAGwDAAAXAwMAOOAIO32NJwtX+3YDLHQ9LeTFWLVhRcLncVmxIjDFMNdS2Of0kBhyE7r2WPKartc6r4u0qhC\/b7djFwMDAFzgCDt9jScLWNGVvUp0g7cBlxwqGOlZz9Y4kNhlbPMaqBH4nmmTtfELi3wpMa0DtcY7gqgpt5DIIXwYeMKr+z18PmYessJj2zVVDO2Sn4IIzq8UiqmThSPuCue8kw==","pkt_caplen":202,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0307{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfsUAAfwYqH8CoAo6sEAK5DT3NDkeazJb5vPCKUBD47mwhAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":114,"pkt":"AgAAAEUAAG5fskAAfwYp2MCoAo6sEAK5DT3NDkeazJb5vPCKUBj47kqNAAAXAwMAQQAAAAAAAAAX7ISPFKZiBvMPtTsgQ0UK0c893uIaXpWyXY5+be0anIZzuChLQWrZrsd8PqbZyy\/1KrUl3FlBRDII","pkt_caplen":114,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88IpHmszcUBAf\/UTNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0447{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":145,"pkt":"AgAAAEUAAI1fs0AAfwYpuMCoAo6sEAK5DT3NDkeazNz5vPCKUBj47io1AAAXAwMAYAAAAAAAAAAYTl8PUQZvbHnOI6vWdICJYkO5Jpcf4\/yTCcNYrpwa\/JSGNo1lcKGbQzlMAPK8p0tJMmQ7GgJ8abp50XHv5UZ3P5X+7L1pS+FiZWyP6BEPTYbMtE0v9ii2QQ==","pkt_caplen":145,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0443{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":142,"pkt":"AgAAAEUAAIpftEAAfwYpusCoAo6sEAK5DT3NDkeazUH5vPCKUBj47ma8AAAXAwMAXQAAAAAAAAAZASORliUYUGgLDZ0308DRdybCwDFubTIY7w0hd0uwBpf5kj\/y9qkCcQ0ua3sivM+ybk2xEZ3FosIb\/pzItU5zMXWcoYxXUejOQqenWoYaXCny5Csb7A==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88IpHms1BUBAf\/ERpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":139,"pkt":"AgAAAEUAAIdftUAAfwYpvMCoAo6sEAK5DT3NDkeazaP5vPCKUBj47jbQAAAXAwMAWgAAAAAAAAAaqa7fzYlf\/O\/UuXi95Iwy33dQjd6654ArTp0PyOm+ri4MrJJY6cLN6Wl28j3kUS4EbC\/MrnDnjtV\/7Y5\/lGFkKR7pE2YURtJyLscGp61WdSa5Hg==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88IpHms2jUBAf\/EQHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0442{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":142,"pkt":"AgAAAEUAAIpftkAAfwYpuMCoAo6sEAK5DT3NDkeazgL5vPCKUBj47rERAAAXAwMAXQAAAAAAAAAbC64EXqCuwnfNMyHX+PBDR7aLp39rA12cZS+nQVav4wFVXxHiN7Bfs+0t552fDl0193abxtRj3JeLhJZPcpWfpZeGrlxZRnJb7rpZrsyP3\/+QAAloQw==","pkt_caplen":142,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88IpHms2jUBggAIG7AAAXAwMAOOAIO32NJwtZJekF7AVT3xpbGC1r7Te9rKvC8u2snYCPLstaAC3pz9dI0\/i1yHkFh4YSEGkoyOaF","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88MdHms2jUBggAAb6AAAXAwMAOOAIO32NJwtaZzr7Bnqfxnh6iD\/KuJq9nsMXANnffDZNKQ9Nqw\/6jbL4HTYF9QsXwkFzL5FPrBI5","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88QRHms4CUBAf\/UMtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0389{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88QRHms4CUBggAC3zAAAXAwMAOOAIO32NJwtbscPy98INEiS8Yigso+2c0E+wLggQQpzHPAgZg95OEH8NGBDMao9Yfha2RFPrVwYR","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88UFHms5kUBAf\/EKPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0405{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88UFHms5kUBggAPPRAAAXAwMAROAIO32NJwtcaPbevb5VVfp+MmLnrpv7HBoBFW6lvGRdAJSCjv8qnDzjKYyT9wvWxGZaHDGG2bBnZhuxQ944u7WXtTGe","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88YpHms5kUBggAJKwAAAXAwMAROAIO32NJwtdjgVvp1Di5jhu5xw8PUt3X8uHtBN8jbOUnud1j9\/FnRIkJwhQAOOHtWePczuFfFRqd8674twxJ\/bynT9q","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0190{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0324{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":56,"pkt":"AgAAAEUAADRft0AAfwYqDcCoAo6sEAK5DT3NDkeazmT5vPCKgBD47mBKAAABAQUK+bzv7Pm88Io=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfuEAAfwYqGMCoAo6sEAK5DT3NDkeazmT5vPEEUBD4dGpTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfuUAAfwYqF8CoAo6sEAK5DT3NDkeazmT5vPGKUBD37mpTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88YpHms5kUBggAJKwAAAXAwMAROAIO32NJwtdjgVvp1Di5jhu5xw8PUt3X8uHtBN8jbOUnud1j9\/FnRIkJwhQAOOHtWePczuFfFRqd8674twxJ\/bynT9q","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfukAAfwYqFsCoAo6sEAK5DT3NDkeazmT5vPHTUBD3pWpTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1232{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":728,"pkt":"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","pkt_caplen":728,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtEQUBAf6j9jAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1220{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtOyUBAf6jzBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fvUAAfwYp3sCoAo6sEAK5DT3NDkea07L5vPHTUBj3pdYYAAAXAwMAMAAAAAAAAAAe6jPMy\/1CwxVPjSPcziew7EmvaRwHiMaye1FBsp0HlhgzvxI35NCmXg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0939{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":511,"pkt":"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","pkt_caplen":511,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtPnUBAf\/jx4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fv0AAfwYp3MCoAo6sEAK5DT3NDkea1br5vPHTUBj3pUZdAAAXAwMAMAAAAAAAAAAg1Z4\/pfvjSuhdMnu9fmYzbYzLFSUA+rbVT7l0fbuv21qYk87xiVTTAg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtW6UBAf8TqyAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88dNHmtXvUBAf\/jpwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88dNHmtXvUBggADl9AAAXAwMAOOAIO32NJwtebLQ4qgL7VqABUpmiTE8Qq3fWKIgYfrZWC3N0V\/TIKg6Gi+g9V69mPRMC\/xAa7JYv","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fwEAAfwYp28CoAo6sEAK5DT3NDkea1e\/5vPHTUBj3pY8qAAAXAwMAMAAAAAAAAAAhJDfdMR8V12OzDzGBAgSobJB9\/A0u82hwdiUb++f3r\/0EYW2huslbsw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":109,"pkt":"AgAAAEUAAGlfwUAAfwYpzsCoAo6sEAK5DT3NDkea1iT5vPHTUBj3pYADAAAXAwMAPAAAAAAAAAAix2zGEp3VpQps9B0g+EM3MADqUa4eFneNsscdigSnqWZl0MkDSGDzcfxcSypvl+WASmwBNA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88hBHmtYkUBAf\/jn+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fwkAAfwYp2cCoAo6sEAK5DT3NDkea1mX5vPHTUBj3pSysAAAXAwMAMAAAAAAAAAAjQTeV6LUomvp38t0qKzXBExC7CCZdoDz0imzjF63Ffk2EKLap7hSHKg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88hBHmtZlUBAf\/Dm\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":1317,"pkt":"AgAAAEUABSFfw0AAfwYlFMCoAo6sEAK5DT3NDkea1pr5vPHTUBD3pbWZAAAXAwMGbwAAAAAAAAAkGHv\/pgc5vC2\/6j1FwkgIncn0O4luSk4WpAEB28UUz+WKLt+TEXWErsuISmBFl9I8YVCYOeS2tO4EmyG5zX78JVAjY4yIbYDHyuo6gaJ4ksz075FF\/jG19CNzBaF2x\/lh7NZQ3cpKhiEI++0i\/szWcsJvrvNdTVamF23jC0QNwPdSNp5FEp6KGq10MN+kqLp9e\/6GpBgFdHy0gf6ItIPEODsdnUn31eYI9gbbPIV3MdxoxEo5+HrEEl67ryAbCFfISfObIlsY9LCzvSwunS11yyhWMPyqu0\/TCHxtkpFF8jnICzT5GFJv0oanGHhC7MvDGOoJBEt8xHTIoEtaKoP93H0waBaKty1g7kUu47neYU09NPvY13GRQvo9GcTBNqpT7Ri3MlXQLuYHphJuWXjqn3pNVJuwN4L9x6m7yXJc1MoOkw2jiILSbIK7V5VH93Y0Gw1Cfhv2VW8eyFGynSUBeun9Hfh7SgnE+YxDE05TP7oWcbAQ8ricT1R01xIv2X6AZ7vscqHA3gXXn5yvP9N8eMf22b5tL0lNuTxb6NzWZmfrYPxgVfAJJ2ZpxpBa5oiW9fp8Nu1TDEzeO63Neia8tMwRE3BUQrCuPRvJqPynQE1g6A1CG3vzeZGpvFwWXB7dhifLCggeLj4IXyujz8SWkPFzLOjkLrqj5QGc4b9LMhDtDSCFEZavAXhrgA15cy0omRVP1EZy3FoTNHSu+1o080Y8av4aSzJ1YOHgK6HqlHkgaZcREStqaJNb0LihyQQkmfjIvj4lGGl+Mkc5AgLWifWXQYMGgeOB7aK0pMbD94PL18kDpKsF+\/WU\/ivybS4msMe75sruxaOqlMcKoG0jBxvrw3IoLVe9gBOe+X1a1k2KtP1v90qVTaCjQDcjVdF6\/h9NSZuxTi5WNrXncEMQD8f76LZP7aB9SPXnyg+o7ZFQiHs3T8F8Ik\/4ddeEF3DzLkDWw0uUNBpneeycZSYmL979xWNnNIFGSekTLVO\/SvAEursegNpqFzV2Hi+yp0M85btEkDjrmqj55\/cxrimQeddWnbHw39iXIaDF\/jerhnmkTmVHTyi1WDOYifrlWc6u7uWA7PNJTjUGrHvqmcqzOwkKJKiA55mN1ovryEU0X3RJFmuThOxNnAnXpN8bj8xcApTStXJJI6HCgGW9OgZjOnOLkq767lbYU3uutT5qVyQSeQXeR3W78vyTypxsKi+cOxOyMmc291mfafJXGJpebBfw7AcAfJ4255hi1Omj0nSDNE60zQI6YG\/9xpcP8P3VbuV\/eDR+lXAFcEWWxVPi4L2fz+TPlJPDmk4RjtatdSK5\/HXG\/N0z6JyK9zDX8SaYkUAB8872++kBqCKrw3S2OG9dCOfCbLmodXxmeRvYeh2blvgW07hPPHVVxgE6VbpEjsaKs1kX90M7q53xtOAIu56gfQSI+7EqIU0wlRAEABJADJhLzMBITyGUJ3KdBfbniwjDLEtoHLHuznwzq149yF87psy0kpmSY7D\/W0cjc+0CBulfJp7ymcrBRY7d5kUlq2cWoSOJnCPu3cQxBHdZd2cfXf5H9XWO0595abPJxRp8gClRu6K0NVaH6TdlRU0NFWs7W5jGkXkhgNNw80ceErk+bnBW\/cthJU9Q\/GUdGm2RzEuDQr+g+s5jtwP3I\/pvE9X563tVLR9txz\/u","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88hBHmtaaUBAf\/jmIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm88hBHmtaaUBggAC7EAAAXAwMAMOAIO32NJwtfoLeCUqUDuZSiNlpxMSYdvlHAu\/qbUCx3t\/MR3PVkDsFOw4QrdDoV4w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fxUAAfwYp1sCoAo6sEAK5DT3NDkea3Q75vPHTUBj3pUrbAAAXAwMAMAAAAAAAAAAlQft+EG6RNixijxqYICG4uj4x+Zewkdb5SqqV2ci4g9+ErcDnugTmyQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88kVHmt0OUBAf9DLpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88kVHmt1DUBAf\/jKqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm88kVHmt1DUBggACIEAAAXAwMAMOAIO32NJwtg+kV3nPTDsZTWefOBHRqIcnCIlta7jJyxx943fyiKLp1+7viUJJfVtw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuO3UBAf9CwLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0941{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":513,"pkt":"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","pkt_caplen":513,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuWMUBAf8So5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fyUAAfwYp0sCoAo6sEAK5DT3NDkea5Yz5vPHTUBj3pVZQAAAXAwMAMAAAAAAAAAAo4D5XG2Cm6oiEmejIQ4g4\/UkgjFR6rQDJUK2BpW2rs+ZBUBuRo3To8g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0483{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":171,"pkt":"AgAAAEUAAKdfykAAfwYph8CoAo6sEAK5DT3NDkea5cH5vPHTUBj3pSfhAAAXAwMAegAAAAAAAAAp+\/JoXuBXoYDvcNlUQzHNX1S7c663ySG5V8DiG+xzqMnhf+WU+khBjOg1QOQP7BqAZJLyO\/7f5q9adA4TXqm\/JZkVbPSy0eHWdZ7gN8A+C1I6e\/+UA5kyCd1H\/eQZT6ZXAUdlESQyYNw4jY7NxwkCPv4X","pkt_caplen":171,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuXBUBAf\/in3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0324{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":56,"pkt":"AgAAAEUAADRfy0AAfwYp+cCoAo6sEAK5DT3NDkea5kD5vPHTgBD3pUWHAAABAQUK+bzxivm88dM=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm88npHmuZAUBAf\/Cl6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm88npHmuZAUBggAPrWAAAXAwMAOOAIO32NJwthHvyPVGkMV9vhXqGkMh0fREVfAWvabEfjiX4Gz0e7AJZzIbNYPG3ClwtC1rHF21Ao","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfzEAAfwYqBMCoAo6sEAK5DT3NDkea5kD5vPJFUBD3M1J3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88rdHmuZAUBggAMJmAAAXAwMAROAIO32NJwti9kuJAkLF0+CWjUK39YafKTiS\/NmiQtNU63I1KtrBSg\/G7dmPzKNs2QT2t4fLI4PHNaM7gvk5wksSTLFB","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm88wBHmuZAUBggAPlkAAAXAwMAROAIO32NJwtj95FPxBa3hB8YnHFVrQEO0ISLXIXgvl4ll9u9LYxLMcW6wqn2L1y1x1Edm2O3trERGpebWlYNosrPegpW","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfzUAAfwYqA8CoAo6sEAK5DT3NDkea5kD5vPJ6UBD2\/lJ3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChfzkAAfwYqAsCoAo6sEAK5DT3NDkea5kD5vPNJUBD2L1J3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1fz0AAfwYpzMCoAo6sEAK5DT3NDkea5kD5vPNJUBj2L3G9AAAXAwMAMAAAAAAAAAAqipUgJI0JRIMUbsJq52+MELHYxcIS9pczUKhSl21587WztjlgznnRBw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm880lHmuZ1UBAf\/ih0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1326{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":795,"pkt":"AgAAAEUAAxdf0EAAfwYnEcCoAo6sEAK5DT3NDkea5nX5vPNJUBj2L3t6AAAXAwMC6gAAAAAAAAArXy7lcQIVPhfKJvi+M57dKqslryT8CrxBmHT1uYs731N\/EFVsBr39yoJEj7ckE\/6yx54BpVeY31FSvS54\/hvw\/7ZQnuQt5hIjFrQNl7wXLjZd3Muyi2TrRrGxyrJBGeFM\/SqVpemMHeEf6kdNw5JuBvaH3Y1tlq6dKVY72J22OtqCJQhF410EBHiJXZlSDfjYEF\/29eHdT8yOnyMjeayu9gGbOcxs3Ep4T9CzLuJjuZV8qTm81gZCP5KxOblCGW8yQAxWwrhNdVUTfHSjlgSp7vddZMeA\/Gdz\/K7abeRs6EJmosTN0Q+XvjUgsCk8buB7SzqMCUQ14YAVVZhnNzgGSs3MnTHAwijgevlSrpZgyk6gtOPa0jj4+SMh8fqKVPX5lGEM\/DtyecU+2SSGYS35CPSgoppBQM6ZnAo\/DB4YCw03TgwT2semqaV8F81SbhgR6gmpzBTv43rTvw4crx72HuFSsZFIHkzhJ0uCDvw94nQq2eOdY1yeg9gmw5C\/91t3Fc5aipzQTM44P2NHXCTn2N7bmX8Tm3yjjjw2dBIG9inBy2jXq7ygz1O5OL7DJKaJuapzeCobFe0A4UPNmJCC1zDlcx2OMnz9sqRRbFxgyWj\/8LvpKpdv+MJa08eaRXOZ3Djyac+7OQliERcZk\/hR8g4llfCccKCbTLKY8bre8698mDYK7TNuY\/gZWbsXTUeKKhheC3s6LPEy3madAuebW0pouTUag19brulYS4sB4HAxilVAyniCLgHL7\/4D9YRP2gkFJcbVx9IFzGAhID8F7NAZwbxir9zOAVU1J2XzhLWOwG2SrzdVrcnmvB6favjo7UOpPj8I4qQw6lfqepQxjxFhsiCGRczfqg32XjsSUNmtx4+7ctZbZ6JP71fVjrGCJuuRD8\/IAFwR9bXr9Ueob7++yEvojm9TV1ykdqIcSJ9STBcacDU3jRm+GxuQwStGV0tjhjb1d+1gLh36apMwZ8aM","pkt_caplen":795,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":97,"pkt":"AgAAAEUAAF1f0UAAfwYpysCoAo6sEAK5DT3NDkea6WT5vPNJUBj2L+h+AAAXAwMAMAAAAAAAAAAsFQqYTwGtQk1Lw+Qe5ENaQm7X\/RhEOg2Nfy\/JI9usFXRkqPLsOzyqNg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm880lHmulkUBAf6CWbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm880lHmumZUBAf\/iVQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm880lHmumZUBggADJ\/AAAXAwMAOOAIO32NJwtkfhGpeovalZJ3NFzpv9k7mEceTY5B+6QHLdWJejrnBpJ9obkTEyd2huDDHiCCpgSg","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0356{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":81,"pkt":"AgAAAEUAAE1f0kAAfwYp2cCoAo6sEAK5DT3NDkea6Zn5vPNJUBj2LzIcAAAXAwMAIAAAAAAAAAAt5gcCz8g2odrYb9U32GZKCQHca1Y3UQoy","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0423{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":128,"pkt":"AgAAAEUAAHxf00AAfwYpqcCoAo6sEAK5DT3NDkea6b75vPNJUBj2LzaoAAAXAwMATwAAAAAAAAAu9bUtclBmyMwMYPD2JrFsrHZZo0wtxoNjN5XP2iTqkeeUC8DWjrfnj2NMwsAZ8VrUUyijovQ7bB0W7m\/cgXXjdaQr4TNiKQs=","pkt_caplen":128,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmum+UBAf\/iTuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":119,"pkt":"AgAAAEUAAHNf1EAAfwYpscCoAo6sEAK5DT3NDkea6hL5vPNJUBj2LzxbAAAXAwMARgAAAAAAAAAvCwCNqwY5dWRvC3CaL8rtCm0jbJo0D3xQZSQ1rSZT96dnUqHPnrEkrfddq5BemeOgUdmXfkf\/wjl5dUpuNrY=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":103,"pkt":"AgAAAEUAAGNf1UAAfwYpwMCoAo6sEAK5DT3NDkea6l35vPNJUBj2Lw9ZAAAXAwMANgAAAAAAAAAwBI9\/W1MIYtsvIZCmgVHsHMMJ00voTtMZ++AlFGbjN\/Oi4IhUj0f+LS09YUL7BQ==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmuoSUBAf\/CScAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":116,"pkt":"AgAAAEUAAHBf1kAAfwYpssCoAo6sEAK5DT3NDkea6pj5vPNJUBj2L+p1AAAXAwMAQwAAAAAAAAAx3lXJ0oYYySrA4rutwxZ0WnPjtpO+gez2syxHcAQtWeuS7qujCCpXIJobNU451v6zCJAhcxjePcNiTPM=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmupdUBAf\/SRQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmuqYUBAf\/iQUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm884ZHmurgUBAf\/SPNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm884ZHmurgUBggAEwbAAAXAwMAOOAIO32NJwtlnPl\/7SYMut5BgAlf6xKWKzIADWmQVFZNFqNseIMQqzH9fMUAzAp9qucApbq0esOw","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0411{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":119,"pkt":"AgAAAEUAAHMAAEAAQAbIhawQArnAqAKOzQ4NPfm888NHmurgUBggAPs\/AAAXAwMARuAIO32NJwtmdYGtDDbVsp4Gx23qFaxMQTZliEYFSMrOcttukWDRpw8Bh5Bcsj4JEz1OX7CqWFKZxIKHsj8dnWwL9+Nt6Lg=","pkt_caplen":119,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":109,"pkt":"AgAAAEUAAGkAAEAAQAbIj6wQArnAqAKOzQ4NPfm89A5HmurgUBggAIXUAAAXAwMAPOAIO32NJwtn4cLoGy3iylPdey4STyW5bgeMxqXOhJP8JF3gcJ4CDprnBt0Dsa5KH\/6WQ0xhGmXnhm5lsQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89E9HmurgUBggAGQjAAAXAwMAOOAIO32NJwtor8y04N364Y4dE5+6gKQ5HqFJBHogPHGWmLETzp4qcF\/H+rUp3qllPsJzmyDLAmpL","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0440{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":139,"pkt":"AgAAAEUAAIdf10AAfwYpmsCoAo6sEAK5DT3NDkea6uD5vPOGUBj18r0xAAAXAwMAWgAAAAAAAAAyKucyv7GzINZNMBv3UVVuSuE9Kre71e4L6R44sif1kzaxVARNZLz0HVk2XPi8jxdWb9cMsIcfMH\/ngHqNRcHOlXQuxbiQQhNvv3Ey6U6D\/QnwgQ==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89IxHmus\/UBAf\/SJoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89IxHmus\/UBggALNhAAAXAwMAOOAIO32NJwtp6xYHvpDKvcifIPkwaywrYLrWBz1hIdWbXp\/6LPgkUnpQ\/UzpbYZP65JvasVaTUeo","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChf2EAAfwYp+MCoAo6sEAK5DT3NDkea6z\/5vPQOUBD1ak14AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChf2UAAfwYp98CoAo6sEAK5DT3NDkea6z\/5vPSMUBD6AEhkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":103,"pkt":"AgAAAEUAAGNf2kAAfwYpu8CoAo6sEAK5DT3NDkea6z\/5vPSMUBj6AE3zAAAXAwMANgAAAAAAAAAzcNqCXTFBXvtYE1XBGdYqhwbPS98a3nxpj6JhqH47znbR\/B0zLoNY1CrvzwgcXg==","pkt_caplen":103,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89MlHmut6UBAf\/iHvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":116,"pkt":"AgAAAEUAAHBf20AAfwYprcCoAo6sEAK5DT3NDkea63r5vPSMUBj6AGIyAAAXAwMAQwAAAAAAAAA0uNuR\/o1oSPWh8Fx0kKz6piUN8DyUXSVl1aIQFGt26M\/2GIgaW5urAepXHt++euOrPirPSAJq0ksUAsk=","pkt_caplen":116,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0441{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":139,"pkt":"AgAAAEUAAIdf3EAAfwYplcCoAo6sEAK5DT3NDkea68L5vPSMUBj6AK3zAAAXAwMAWgAAAAAAAAA1vgu12Aph+vUKDhW0bLgao7f8Jj8\/8EMNKVKEp\/Kwg62qr6A0pqqXpE21Y6Wcp+QQhnfEuI5\/lDDCzEbQaqtDkXTzfQrlF5vTfFLTDDTJSe+7Aw==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89MlHmuvCUBAf\/SGoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89MlHmuwhUBAf\/SFJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89MlHmuwhUBggAFGbAAAXAwMAOOAIO32NJwtqfivI3Cpv+fJrZyjMi3KFFMUSh5W79iFGmhNQegm4zUHfKs9A4VvPnnf8La4Bm6wn","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89QZHmuwhUBggALWUAAAXAwMAOOAIO32NJwtrSCExLJrwr+ZeRKAjxPKSKsawBVSKn1gfFTYUnROSwaYLk79HiHy5DRto222Pgx3I","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChf3UAAfwYp88CoAo6sEAK5DT3NDkea7CH5vPUGUBD5hkeCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":107,"pkt":"AgAAAEUAAGdf3kAAfwYps8CoAo6sEAK5DT3NDkea7CH5vPVDUBj5SUaGAAAXAwMAOgAAAAAAAAA2UbQrWIDAHzFUYPej1CWsYqqBEmsiD8zwNzwfEn63j7Fj4Qfhgkdz1I37NNG2S+bR9X4=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89UNHmuxgUBAf\/iCPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":137,"pkt":"AgAAAEUAAIVf30AAfwYplMCoAo6sEAK5DT3NDkea7GD5vPVDUBj5SQlsAAAXAwMAWAAAAAAAAAA3DtgKdk57VeSrAUchhe5yCqRhn17K0Nc1GkxQ1dc54qqMBdNOAE4oAeuwJrS1MbJYPODGkTojjF0o5RHk92xQJItP8kv4z+ixVvI9SEf5Msw=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0419{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":124,"pkt":"AgAAAEUAAHhf4EAAfwYpoMCoAo6sEAK5DT3NDkea7L35vPVDUBj5SdYOAAAXAwMASwAAAAAAAAA4MBmo04b40Q8fNDiv07C51aqFjlI2VIoEDYnaMbMlKp\/ApTAZxZbJI7dGOKdeDnkQQfsHNAiEoCKqYz3k5js4x3Yb8Q==","pkt_caplen":124,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89UNHmuy9UBAf\/SAzAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89UNHmu0NUBAf\/R\/jAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":107,"pkt":"AgAAAEUAAGcAAEAAQAbIkawQArnAqAKOzQ4NPfm89UNHmu0NUBggAMtFAAAXAwMAOuAIO32NJwts66aRB8CRdNCcyY6qzQSGfu6jN7wBp9SRa7HJ6H1ZERJdVH9u\/6GeTrSnMUa5uAtthHg=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0434{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":135,"pkt":"AgAAAEUAAIMAAEAAQAbIdawQArnAqAKOzQ4NPfm89YJHmu0NUBggAIaWAAAXAwMAVuAIO32NJwtt0F3lgR+fc8cJNjwdCtBsi7Qwz\/W1DB+eMy8+GW\/ZDtJNW2vM+4BAe9DkgvDDgbdcibJ9y\/4\/YSkjXVyFr9wsf0GSB1zTsiDw6JHJKCsK","pkt_caplen":135,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89d1Hmu0NUBggAN9KAAAXAwMAOOAIO32NJwtuCdnpHNRhJf\/L0rz4VVJ05wVgy7YMGVtymQj52OTdNVZOD0gAc4ZuPWYdEY5sf3y\/","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm89hpHmu0NUBggAHtmAAAXAwMAOOAIO32NJwtvilshfpDh6vvBZoux7Kxd0vshiUfp7YHsrAnQTzOpaalMUEDZPjt+ZwQ73+vMZuKb","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChf4UAAfwYp78CoAo6sEAK5DT3NDkea7Q35vPYaUBD4ckaWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAAChf4kAAfwYp7sCoAo6sEAK5DT3NDkea7Q35vPZXUBD4NUaWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0454{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":148,"pkt":"AgAAAEUAAJBf40AAfwYphcCoAo6sEAK5DT3NDkea7Q35vPZXUBj4NWpQAAAXAwMAYwAAAAAAAAA5XDiCbspzWA6cb4ge7m\/rXnMSITQ9FOSQxQL9S7uEgHIsMMjFnhsl9XyoBIQQrE6fp31ZUpePkwbJI+4qP7pSNl8VXfEQlPdhS8\/cZ\/gpm2rWxCziu3Pq\/qFnRA==","pkt_caplen":148,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89ldHmu11UBAf\/B5oAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":107,"pkt":"AgAAAEUAAGdf5EAAfwYprcCoAo6sEAK5DT3NDkea7XX5vPZXUBj4NZsxAAAXAwMAOgAAAAAAAAA6b4dzjnITGBpX3L7kv8SHUxYcusoCZ92GQUw2oWhWvHDmulKSkecxCxTpyn90VAq1PsQ=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":117,"pkt":"AgAAAEUAAHFf5UAAfwYposCoAo6sEAK5DT3NDkea7bT5vPZXUBj4NSRlAAAXAwMARAAAAAAAAAA7HMHvYAoIw4l+F4CtQcX5rdD4AhWfrGw0MpJN9kKcK5GnzMzgtOyktbKBhdH4iBv4vwrAg9GExouOmJKb","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89ldHmu20UBAf\/h4nAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89ldHmu39UBAf+x3hAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0435{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":137,"pkt":"AgAAAEUAAIUAAEAAQAbIc6wQArnAqAKOzQ4NPfm89ldHmu39UBggADGvAAAXAwMAWOAIO32NJwtwF7X7y8gwnRGrXdPDHDmxtyyGSmTVAndd1GvAu2HBYpUc6NLp7yerbiidDeMnU\/drf9U093cD3z+IK7IAXXfOp1WVdtPWCNOTfjuGTHQn7gQ=","pkt_caplen":137,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":99,"pkt":"AgAAAEUAAF9f5kAAfwYps8CoAo6sEAK5DT3NDkea7f35vPa0UBj32D7kAAAXAwMAMgAAAAAAAAA8TxgpTLzpqFdE0DMUT82w8\/siSfW4KrAJIernT+pKE3apPyxiIas\/4T29","pkt_caplen":99,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207466,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89rRHmu40UBAf\/h1KAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0352{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207467,"pkt_len":76,"pkt":"AgAAAEUAAEgAAEAAQAbIsKwQArnAqAKOzQ4NPfm89rRHmu40UBggAFZRAAAXAwMAG+AIO32NJwtxTxpWCAXvnzFOtVEYn5Qd947V4Q==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207467,"pkt_len":44,"pkt":"AgAAAEUAAChf50AAfwYp6cCoAo6sEAK5DT3NDkea7jT5vPbUUBD3uEVvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207467,"pkt_len":95,"pkt":"AgAAAEUAAFtf6EAAfwYptcCoAo6sEAK5DT3NDkea7jT5vPbUUBj3uIGfAAAXAwMALgAAAAAAAAA92wRtTQx+AmanyNXIVvAxvZgahQA+8tqXIAoVEfeer0onG94GG\/0=","pkt_caplen":95,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207467,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm89tRHmu5nUBAf\/hz3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm89tRHmu5nUBggACv8AAAXAwMAJuAIO32NJwtycO3O6El+kQhdNxtszuB8CMF4ENmZyicW4uMU3qWy","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm89v9Hmu5nUBggAI6LAAAXAwMAJuAIO32NJwtztZnaN+m+gS3BHgKjgfdARaiTWbWqsy5\/Nr3pq9eL","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm89ypHmu5nUBggAP+JAAAXAwMAJuAIO32NJwt0zNWtI9GiGuQbMRjWM7NIR0AYBXDaQgv+4rlOkbck","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm891VHmu5nUBggALnBAAAXAwMAJuAIO32NJwt1GrYiC78vPceYE8TwDluOMx0D2CD\/fvitxa5knn0W","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm894BHmu5nUBggAPzeAAAXAwMAJuAIO32NJwt2rsLA8JGCeNzQL9ip\/mdEM+g3WuSO8Z3U\/4q9wO0F","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm896tHmu5nUBggAFgMAAAXAwMAJuAIO32NJwt3hl03pfQ\/SEWGR8aVRiZWjKEMe+MMs\/c3Ibwjjt0h","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm899ZHmu5nUBggAGOvAAAXAwMAJuAIO32NJwt4NdelT0f5Nbblz63SIxOvEBuoUu1zbJYlSgAIEdB8","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf6UAAfwYp58CoAo6sEAK5DT3NDkea7mf5vPcqUBD3YkU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+AFHmu5nUBggABA6AAAXAwMAJuAIO32NJwt5m4eRgNWHwCIJ\/qHEnENvQGlU8ymZDRa7E27ogCF1","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+CxHmu5nUBggAA0vAAAXAwMAJuAIO32NJwt6jJdIMDQijSYGBWnPJtd0tdOHaoLyNZ\/\/w18JfEUZ","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+FdHmu5nUBggAHYfAAAXAwMAJuAIO32NJwt77jHdOi2HMSqqO7BQNXjI3mQu91XezRpIQMKMOcOk","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+IJHmu5nUBggAHAXAAAXAwMAJuAIO32NJwt8lceaC22alQw9YP7dNvsHQsW74ni4so2eWTvRVX80","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+K1Hmu5nUBggAKxcAAAXAwMAJuAIO32NJwt9JCyFY0r\/+O+ww2nbIlA8+r\/A+x1voDnav\/mu4Zpm","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf6kAAfwYp5sCoAo6sEAK5DT3NDkea7mf5vPeAUBD3DEU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf60AAfwYp5cCoAo6sEAK5DT3NDkea7mf5vPfWUBD2tkU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+NhHmu5nUBggANyDAAAXAwMAJuAIO32NJwt+Bdi2z6XscG9o4biGD1YRKG0BuIiLxhVIVk70y1w1","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0368{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+QNHmu5nUBggAHJoAAAXAwMAJuAIO32NJwt\/3\/EMRTLYeNRSR0uvZxN5MDNEF6\/7l5lnSY+k246\/","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+S5Hmu5nUBggAA4IAAAXAwMAJuAIO32NJwuACZR4sTAvBZa6NjvXCik2XX3gg+2fvGSoKAe1NNaQ","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+VlHmu5nUBggAOp8AAAXAwMAJuAIO32NJwuBtt4n9PiratwV+YC1Rq5z2W8KPq\/WvyHAYouvMr03","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+YRHmu5nUBggAB06AAAXAwMAJuAIO32NJwuC4dW\/0Q9s1SDpwWt7J7FhfoFfRyHoyqYeLLKHlbA5","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf7EAAfwYp5MCoAo6sEAK5DT3NDkea7mf5vPgsUBD2YEU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf7UAAfwYp48CoAo6sEAK5DT3NDkea7mf5vPiCUBD2CkU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf7kAAfwYp4sCoAo6sEAK5DT3NDkea7mf5vPjYUBD1tEU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+a9Hmu5nUBggALerAAAXAwMAJuAIO32NJwuDe8s9YXaqjLwyREhVI0boEnPOQ96Y7RysmhSmOpPV","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+dpHmu5nUBggAHm8AAAXAwMAJuAIO32NJwuEV0GaaDSif0x4FFAfcEfPAlVZMI+pqNmlbqHUS07z","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+gVHmu5nUBggACC9AAAXAwMAJuAIO32NJwuF54AtRTdepENF1kP+L0zBia2U4dPNSDGmfGqmlwAa","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+jBHmu5nUBggAKGwAAAXAwMAJuAIO32NJwuGl980Zd8MVCxDH3OcBtCOnNTysFT3vTTP8uSsFGGP","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+ltHmu5nUBggAM8LAAAXAwMAJuAIO32NJwuH1lmpKrrn5\/dTvJeIGbAnRcMfvag\/ScC+kHWLkIxg","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+oZHmu5nUBggADuwAAAXAwMAJuAIO32NJwuIYiWK4Ifl2KesQrYhKYsy3x\/S3NYwS3rwvvwCLTL3","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf70AAfwYp4cCoAo6sEAK5DT3NDkea7mf5vPkuUBD1XkU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf8EAAfwYp4MCoAo6sEAK5DT3NDkea7mf5vPmEUBD1CEU8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+rFHmu5nUBggAJvPAAAXAwMAJuAIO32NJwuJQErzOEOLwzoo\/8\/A0agxYfbsxxfgukwueVU4yorl","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+txHmu5nUBggADWWAAAXAwMAJuAIO32NJwuKP+vfSyBAk8eRS13G+zVZ5cpsJHDb5eEz1RSyTCGn","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0366{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+wdHmu5nUBggAHnaAAAXAwMAJuAIO32NJwuLNm\/02NtE+l6zL3nEZ7M\/DzurOCyYcD7MvU3erUFz","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+zJHmu5nUBggAPrhAAAXAwMAJuAIO32NJwuM7X7Rwq1+3a5H5vqR7+fWTXwRd5vLStqzwfAejf1c","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0367{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+11Hmu5nUBggAHPtAAAXAwMAJuAIO32NJwuNXIknf6v\/kxfhYX7zK56bNZu3O6X\/5oSxyHHPebX\/","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf8UAAfwYp38CoAo6sEAK5DT3NDkea7mf5vPnaUBD6AD\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf8kAAfwYp3sCoAo6sEAK5DT3NDkea7mf5vPowUBD5qj\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf80AAfwYp3cCoAo6sEAK5DT3NDkea7mf5vPqGUBD5VD\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+4hHmu5nUBggAIltAAAXAwMAJuAIO32NJwuOUy2nBim+K2RtkbLebhMnrQZOvp0dQgODFD8tUrxJ","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+7NHmu5nUBggAE67AAAXAwMAJuAIO32NJwuPy6FWSubsfgXHf4BlQ+kJdp3iTa78lBAjYOcguNpA","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0364{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8+95Hmu5nUBggAMLJAAAXAwMAJuAIO32NJwuQo2PDYZXq8024t15X3+rY6QRzZRgRMvX24iiGOZ3e","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0365{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAbIpawQArnAqAKOzQ4NPfm8\/AlHmu5nUBggAEvOAAAXAwMAJuAIO32NJwuRqFtUuFsXAajmjJay3xbLbeUsWPtV2SCuhhYMeD53","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf9EAAfwYp3MCoAo6sEAK5DT3NDkea7mf5vPrcUBD4\/j\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf9UAAfwYp28CoAo6sEAK5DT3NDkea7mf5vPsyUBD4qD\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf9kAAfwYp2sCoAo6sEAK5DT3NDkea7mf5vPuIUBD4Uj\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf90AAfwYp2cCoAo6sEAK5DT3NDkea7mf5vPveUBD3\/D\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAAChf+EAAfwYp2MCoAo6sEAK5DT3NDkea7mf5vPw0UBD3pj\/uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":95,"pkt":"AgAAAEUAAFtf+UAAfwYppMCoAo6sEAK5DT3NDkea7mf5vPw0UBj3psf5AAAXAwMALgAAAAAAAAA+i53Va\/jj2CosuxQucQcY2id2mITvvc9ea51fTrhAcM1cUg1W3FQ=","pkt_caplen":95,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207468,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmu6aUBAf\/hdkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0359{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":81,"pkt":"AgAAAEUAAE1f+kAAfwYpscCoAo6sEAK5DT3NDkea7pr5vPw0UBj3plovAAAXAwMAIAAAAAAAAAA\/lAA6iIiK8ZnI1y\/6x\/71JGzWPywHyKj+","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0312{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmu6\/UBAf\/hc\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":97,"pkt":"AgAAAEUAAF1f+0AAfwYpoMCoAo6sEAK5DT3NDkea7r\/5vPw0UBj3prlhAAAXAwMAMAAAAAAAAABApEZxvUyk4gf223XImCNvCOrS+PHqaM62snBP3wnTOMzemIXzyEgs0g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmu70UBAf\/hcKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0733{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":357,"pkt":"AgAAAEUAAWFf\/EAAfwYom8CoAo6sEAK5DT3NDkea7vT5vPw0UBj3pmGEAAAXAwMBNAAAAAAAAABBHG4l+fOGCcF1y7LuBPPW+2Mmw7aG0K5yxSA36gIC8053hpmZi\/zRj5r8kKoCj+D0b+FnlzKYwyKDxb08oXDyj2uvD\/Mt\/ch0Q7pcTaBkut9PqeMzUMpUTF5xXmEGd2qZo5oOy1KF9xLEtAZMHaa8EAIkqd3YoXediFQ4Q6IOnjVuX5ssD3Ibd+otnpbxtyQBp+JiIvl1JWJ0tiFxBRHFW51x3iBaMU7qf3NHxeaw1lDqnFCmoMU\/4NGIcEgGr5yaAsH0JX1BQ1D1JreQXYi2d5cRz2W7wYIZn40dS8iDoS3m2srB0c\/jpSryE+bhh0m7Hdvn2lhvm7+ilu0qrCS70QP34H04vlTJDBTRaXITD3DnMKyHcrjK1a\/7LbLr2WOP322D1Oa7MX0110aJ","pkt_caplen":357,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmvAtUBAf9hXZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":97,"pkt":"AgAAAEUAAF1f\/UAAfwYpnsCoAo6sEAK5DT3NDkea8C35vPw0UBj3pgcGAAAXAwMAMAAAAAAAAABCLskU0gMhzSx\/EQaw7I++n8ZkBggP1CykH2j4fhimllHBst5J8R078g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0359{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":81,"pkt":"AgAAAEUAAE1f\/kAAfwYprcCoAo6sEAK5DT3NDkea8GL5vPw0UBj3pvk0AAAXAwMAIAAAAAAAAABDjFVYS9L\/EcYrM3m+dGmOnzcDwqXC0F\/s","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmvBiUBAf\/hWcAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/DRHmvCHUBAf\/hV3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/DRHmvCHUBggAJc1AAAXAwMAOOAIO32NJwuSBamCQ7avXWMaKsWePcy53hAZbihRUFKFDMBK7Za8vtBwt31senQ5jsjEArAX6Xqi","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0358{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":81,"pkt":"AgAAAEUAAE1f\/0AAfwYprMCoAo6sEAK5DT3NDkea8If5vPw0UBj3pmmcAAAXAwMAIAAAAAAAAABEvsdlYPEapF8az\/ovRPYbjkiVBnD1SI3h","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvCsUBAf\/hUVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":97,"pkt":"AgAAAEUAAF1gAEAAfwYpm8CoAo6sEAK5DT3NDkea8Kz5vPw0UBj3ps\/tAAAXAwMAMAAAAAAAAABFtbDgAx1hmGj1Iz9GPGuopdKDziSVW\/PELJFt9ZQhXSlCRGqPwkDxNQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":807,"pkt":"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","pkt_caplen":807,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvDhUBAf\/RThAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":97,"pkt":"AgAAAEUAAF1gAkAAfwYpmcCoAo6sEAK5DT3NDkea89z5vPw0UBj3ple9AAAXAwMAMAAAAAAAAABHQhKoBxZeh3VVoU62FeF\/FhHUuwXjycloxLY4WqOxekfcn8HVeHYOEg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvPcUBAf6BH7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/HFHmvQRUBAf\/hGwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207469,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/HFHmvQRUBggALOQAAAXAwMAOOAIO32NJwuTAxfVXIJ5P10c0KvCnSclBMNIf434fl6Nr3Sr6ctUvY1h4RxQdOjXa\/RCpwhLlMw4","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgA0AAfwYpzcCoAo6sEAK5DT3NDkea9BH5vPyuUBD3LDpEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":81,"pkt":"AgAAAEUAAE1gBEAAfwYpp8CoAo6sEAK5DT3NDkea9BH5vPyuUBj3LN89AAAXAwMAIAAAAAAAAABI8NAHSoJjq24v7+DG\/Q3YuvW4+8IlO7K1","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0377{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":95,"pkt":"AgAAAEUAAFtgBUAAfwYpmMCoAo6sEAK5DT3NDkea9Db5vPyuUBj3LG1VAAAXAwMALgAAAAAAAABJvv9VJrvQrx2FqDKJDUsYWDz37C6VE\/YkgSPAXnYXGet7yEBV7FA=","pkt_caplen":95,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvQ2UBAf\/hFOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":81,"pkt":"AgAAAEUAAE1gBkAAfwYppcCoAo6sEAK5DT3NDkea9Gn5vPyuUBj3LG9WAAAXAwMAIAAAAAAAAABKr8Dvapfd+nSGCU80vFzz92rI4b0U8Ey\/","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvRpUBAf\/REcAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvSOUBAf\/hD2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gB0AAfwYplMCoAo6sEAK5DT3NDkea9I75vPyuUBj3LIG4AAAXAwMAMAAAAAAAAABLmWujUjHHKGkq\/CsFjmEyC8xCTKTRaDmfOc+02SjZxO+ynUnRjjSVwQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvTDUBAf\/hDBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":109,"pkt":"AgAAAEUAAGlgCEAAfwYph8CoAo6sEAK5DT3NDkea9MP5vPyuUBj3LG0qAAAXAwMAPAAAAAAAAABMBVaXkjLeRk4uLy7oWOAsMLWGyP73qZ3xsvvMQv5sIQkNUQ6PN9HpZyVXvRL2QNeQuCvKlg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gCUAAfwYpksCoAo6sEAK5DT3NDkea9QT5vPyuUBj3LNz0AAAXAwMAMAAAAAAAAABNYE1wBt8zmZv5fiDvzaxmI6yUzutJXKuEB1nRBl43UG1Dirobg4oLzQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvUEUBAf\/RCBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/K5HmvU5UBAf\/BBNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/K5HmvU5UBggANWuAAAXAwMAMOAIO32NJwuUVwLywjbo3rswOWlt2p7i3xlvubib2dSkRFKBNcJjni5sF0eYAFDRXw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gDEAAfwYpj8CoAo6sEAK5DT3NDkea+635vPyuUBj3LAVAAAAXAwMAMAAAAAAAAABPud6oPSIYl\/ndZQp18JJj6sZRD3kkZIKKKkjUgbc0+znmrWBkk57Gag==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/ONHmvutUBAf9AmsAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/ONHmvviUBAf\/gltAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/ONHmvviUBggAOqtAAAXAwMAMOAIO32NJwuVVpK4UKIAuoHb7JEh+RNEtxx+7J\/ShL08DfwELD++beCHTtGvWUSnaQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gD0AAfwYpjMCoAo6sEAK5DT3NDkebAlb5vPyuUBj3LHNvAAAXAwMAMAAAAAAAAABRyflFNTDpSmgxmpq9Epx\/lsKJY7RgGtmihVHfK9ySxvt\/wdqFdYMuQA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/RhHmwJWUBAf9ALOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/RhHmwKLUBAf\/gKPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1925{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1236,"pkt":"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","pkt_caplen":1236,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/RhHmwKLUBggAL25AAAXAwMAMOAIO32NJwuW4RALENWjp5l+4pTXJQw2Tud99jHyQLf1VsXufufJ+1SXYKWHermeWA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/U1HmwczUBAf2v3VAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0918{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":494,"pkt":"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","pkt_caplen":494,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gEkAAfwYpicCoAo6sEAK5DT3NDkebCPX5vPyuUBj3LN2PAAAXAwMAMAAAAAAAAABUz0TkKInZexAt4z3lYzqrzucQUMYeFF4otgO2RZq09G6Qpv0aHycAFw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/U1Hmwj1UBAf8fv8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/U1HmwkqUBAf8PvIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm8\/U1HmwkqUBggAMWsAAAXAwMAROAIO32NJwuXlpHxIAM3dI8nGUlLjdrxZAbCE1taWW5cLLPia9YWSvI9o22z8u1MdBlz1sb1M0RS5kG19rnFfiJNwcsf","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/ZZHmwkqUBggAGMeAAAXAwMAOOAIO32NJwuYj50j3RzUjsWd392OVJaTVif5ogMgpPpa0wNevBzuoffh4xbkGa2sD7IIGTJ0ur50","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm8\/dNHmwkqUBggANG8AAAXAwMAROAIO32NJwuZdbBJ9ffw8F4ulIerqQuHfT\/8fiIYTRQXwFfshHOpKEKsbv2gIIpX0zNOPBlnounp2pGxcojy0YuVf0wX","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgE0AAfwYpvcCoAo6sEAK5DT3NDkebCSr5vP0YUBD2wiUrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgFEAAfwYpvMCoAo6sEAK5DT3NDkebCSr5vP2WUBD2RCUrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgFUAAfwYpu8CoAo6sEAK5DT3NDkebCSr5vP4cUBD1viUrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":110,"pkt":"AgAAAEUAAGpgFkAAfwYpeMCoAo6sEAK5DT3NDkebCSr5vP4cUBj1vvmoAAAXAwMAPQAAAAAAAABVBaCs7rS6kUIrF4zYgi0L6mIw2J\/d\/JqkPGOiXQrVgCTlAOUSceHfRw1ATgSeGwszedEuHhE=","pkt_caplen":110,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gF0AAfwYphMCoAo6sEAK5DT3NDkebCWz5vP4cUBj1voMjAAAXAwMAMAAAAAAAAABWv8RAgMROQ5jYxgZT2GFnmjnjzPeS6U6WbjpgsZPMOedIZcgKwGoH6g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwlsUBAf\/fqqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVgGEAAfwYpe8CoAo6sEAK5DT3NDkebCaH5vP4cUBj1vutwAAAXAwMAOAAAAAAAAABX2X7ygiWRrByFTalHmrjxip9iae9CapJ1Japazl1+y4tExqBGbYZDS+E769AR5KWD","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwmhUBAf\/vp0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gGUAAfwYpgsCoAo6sEAK5DT3NDkebCd75vP4cUBj1vsyiAAAXAwMAMAAAAAAAAABY56x0GVSnBYR9rZnDOCy+N3HMNgmXEp4ZYAj1ASnUsG6DII5MrWMEzw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwneUBAf\/vo3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/hxHmwoTUBAf\/voCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/hxHmwoTUBggAABZAAAXAwMAMOAIO32NJwuaobErJ6BfdxWsacZTcFDIZHRs0KmBB4TCTt9F4ioFozqUCfXaqy5Bsg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gHEAAfwYpf8CoAo6sEAK5DT3NDkebEIf5vP4cUBj1vhHuAAAXAwMAMAAAAAAAAABaFLH0wf\/QpNU4yu8wrfZ+Ttiz0+yUsn55qPqmUERVcxmil76rZakPmg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/lFHmxCHUBAf9PNjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/lFHmxC8UBAf\/vMkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/lFHmxW1UBggAOTrAAAXAwMAMOAIO32NJwubs91+zQUUc7c28O4zpfENbGZ7afdaRjNIVJtNN\/HHYIHPEXkQ4nJIyw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gH0AAfwYpfMCoAo6sEAK5DT3NDkebFzD5vP4cUBj1vmqNAAAXAwMAMAAAAAAAAABc6GcGUObQG\/zaBRii7phMfCuqPQjh\/r7EMqLH+Uchq7taKchBZSa5Qw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/oZHmxcwUBAf9OyFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gIEAAfwYpe8CoAo6sEAK5DT3NDkebF2X5vP4cUBj1vs9nAAAXAwMAMAAAAAAAAABdDhU9DDnpjMp+tE\/R9swXi3TwPTCrk+5MApg2\/YWz+r8H3rk7NHxdTQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/oZHmxdlUBAf\/uxGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gIUAAfwYpesCoAo6sEAK5DT3NDkebF5r5vP4cUBj1vvjWAAAXAwMAMAAAAAAAAABehS6HLZDQZDD41vgdj8SzDymjJQF5yjQ3Wqz5rf9jfCq0ty+k4qLawQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/oZHmxeaUBAf\/uwRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/oZHmxeaUBggAIgqAAAXAwMAOOAIO32NJwuc4vy\/vxi1zCOwVpDlmyUGPDdfRIMB+trFBc5N+vL53pYnjYylPldPUov8z6XoE3sG","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/sNHmxfPUBAf\/uufAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgI0AAfwYoMsCoAo6sEAK5DT3NDkebHMj5vP4cUBj1vnLwAAAQxOkzcgCx+u7ayvVkWGUN4IJgGOA2BuZvf4vW+31rkTPfhZ+n5w1mUhYLCLOmOESlX801MST2ymw\/usGxD2HdRr\/CtXuhGk32D7HO4IddwsXsRQXgcg8TBBVu09VBVCqS\/3M0ZCoBNp1ELxI24YOy9Th0YFnoIUjJ9EAYjyjSSdIs7JKwzoir5wczsLnybLu+0VRm2H\/wkAEO0OthfSUwjEuTaL5K67NVGDy\/yVkPpU7L2TZAfJJAD\/f1g9tOOJvrEbIrmzWgE50HAcjODDiGnzu9rtQrkpbvrGQC\/enbNaY8B7Z9jJXqHi4Xlg52iu\/xAf0DGZhxiOBd\/C2RJV\/HCba8MGoziN5HM71IQapqMcEqWciZc00mRdfqgigKZS4rqhLqJN43\/Pf8saIxIl0XD0k83\/yrItCDvIeu150YgonDPcgt2D4FCYGzxPvaELIK15NZCAj5wagMwkyiC\/yB8K4jkh4ogru84KPNby+mJmBCwcL6GEsM9Dj6","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gJEAAfwYpd8CoAo6sEAK5DT3NDkebHkP5vP4cUBj1vqbLAAAXAwMAMAAAAAAAAABgaA6DA7JAlybIHOZyvTMkicuoHv++i4mWrOgAgFcKD5+rAF0n+eD4Ew==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/sNHmxzIUBggAI3mAAAXAwMAMOAIO32NJwudCs53Dz5C5Ypu2hoYmxJjIFGjJkib3Cdrejvl2drF7l6USRdNVUo3pQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/vhHmx5DUBAf9OUAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/vhHmx54UBAf\/uTBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/vhHmx54UBggAL4WAAAXAwMAMOAIO32NJwueLHjHo1cv\/FN9qTynoX2ZkL+nCZZJVP0fTkl2YNd4YdXobCcwciLoKA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/y1HmyTsUBAfzN5KAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gJ0AAfwYpdMCoAo6sEAK5DT3NDkebJOz5vP4cUBj1vi6hAAAXAwMAMAAAAAAAAABifZj3\/NjfgdnHHJAJUJ+0knvaCr7iRKDGfA7uDM8ja6tKQ6wVxDjxZg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/y1HmyUhUBAf\/t3jAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/y1HmyUhUBggAFlvAAAXAwMAOOAIO32NJwuf2U3QFui979hL1Z6aU719SAzemNaMeImjs8i\/kwLRS0XzlNfEhODqFJdsfzw6ni+a","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgKEAAfwYpqMCoAo6sEAK5DT3NDkebJSH5vP6GUBD1VAk0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgKUAAfwYpp8CoAo6sEAK5DT3NDkebJSH5vP74UBD6AAQWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgKkAAfwYppsCoAo6sEAK5DT3NDkebJSH5vP9qUBD5jgQWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gK0AAfwYpcMCoAo6sEAK5DT3NDkebJSH5vP9qUBj5jtgiAAAXAwMAMAAAAAAAAABjvHalimbWaAxCvOlcmUvBLc+SdaoIMPH0ZY2c\/Kbjc+\/shF8jahjohw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyVWUBAf\/t1xAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":109,"pkt":"AgAAAEUAAGlgLEAAfwYpY8CoAo6sEAK5DT3NDkebJVb5vP9qUBj5jviYAAAXAwMAPAAAAAAAAABkRVQVE\/8lKIThvaswC6DIx0axx26ExSOHhrQBXZYaVsmJ3iKNXop80pCS+FAZTLpbdi+SAw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gLUAAfwYpbsCoAo6sEAK5DT3NDkebJZf5vP9qUBj5jmqzAAAXAwMAMAAAAAAAAABlfan3xi+l725Sk11\/xWg7HiDyELEIl81B3NH7MZVPksXtfdlTgtsViQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyWXUBAf\/d0xAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyXMUBAf\/tz7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgLkAAfwYkqcCoAo6sEAK5DT3NDkebJcz5vP9qUBD5jiI0AAAXAwMGbwAAAAAAAABmt8Xpu6vzV57zw5ByJcjQ7NewXZKHXUfWhYbFY3MuysXLDXfIi7tCDl8BYJXevZztTsDwn\/z4vqBcMOYST3eYfNWX7POshplP31JcRBCsdPYNWAp4LSjr500pHO0CoxHr9cyHm3kXBcOVv0BpuqAi2RNiVYaMz2SiAKzjcM9stVtW149tesFsfCwlkuisXOv\/uVDHfZdKtlSBcaNzoZyaLvTZs01pdTMmYyz0U7mx\/qCLhI+q\/Lfn8dyaOr6bYqwFnMwP71DRTMo972t+eKpbJxzYPpIiU2NM+HLGd0\/cE1Ng1JNAfJjSiWbupEp\/74BIBdEpn\/TstfHBP9+GP+g\/AfhNf886kx+SihR404+gp7nKKdF2vmkwwT3RPIn4exCYIsfNpjdc\/FrvYcH\/OQ3dfPT7+aJes3y9FhsI3LD1kjzQPYaweuvEfc74Ny475GXjx2q+NCujZEQTLHZuKvRcZQjHeix0wPga3a7kee4JyjvCcI3Bwbj0BvMzMrasqu31HiyLoRkiUbqBmOlxUiqARN344d62+Q9rhMWEZy5ZpF+ViOpmjjP+FFONdtxLpFABjdQFvkSMvXHZ3E4sm2vGMmVurKSrvoq2CaCgAcOWwtmK5Tls2KCMKmESlf04vwBXfl1xU0aEzxxqIaVFf2EIFAJMuFc3DkWXjvoMkk+DmHn89OowciyVK+H0TKu2j+BX29q7xPrijvzwhH5a\/vk5w49Ld\/EMy\/M5hubGqjQpcvD\/Rio4wNxw5\/OIQm2mOEMV1lFZP4yVkn0N+DPC53Oez09\/zH2sng5WhRmqv6Fkn4u950i\/6pEFjVi51RPwvBhUeHQa0LFjR35q7z3K7tKcYvKl29F35jy8BGpaLdyLo4dpPR7vDdI8HqSrLqlEeJXGfMXrlWRucCb+uri9K2Y3RZHx7X0qjbYIV2k9jYzhOzsaItuzdFyuX70rOl6VinKIy1PpTwU4g1AL3tBizgG5k44+32uAaGFCBr4VbQrYLnzYmdvDmNjN3Tn\/YRhlTIVIJSztXTW5GVc4xu6pEnw68\/8q02JyZlcn+V+ltYxreT9LunIT0BOfTXwCD369RnJqgtr6Wno5+092378ui88aiNmFV8f8m25SfcIDVeHmc34Dyrx8e\/JjlJ45s25Zlu3npssnqg7mhCcwOgTx\/wCJFSZssuVaXrWHw2VsLI5NogYulk+Mnr7wA7qCYIGTWDekTrGLLdzd+5Skosz5W4DmJ9qD0zUfPre8MDAvP1KZ9I47yJ2rLbPlBL9jeqF\/SHhrooWX1LKDCmlRhTwGArKYCOY+iq9gizW54U0gSD\/9cYuJCNZssuPZ\/c0z5W+nkZd+MCzm2GLrfi1+SjQ8VKTL3wjZEVMQggCHZ8du9\/dVv1f5HvhwWzPJpqXEGkzcPAwKKInvzRxc6WY1hSt1CEB5srI9LaWTzb5ZBfm0V7nH0c4mYNkjchTCndftakYwAKDLDpBdTumvEpxIW9e0ZVKShMyIYflKPCyi70IltxVWXl385Z5\/vyqZXkj1zjL30LaHpscIqsS3NmA\/ECAv7\/7bGKBv4GHjbt6w23Dp\/u0+9cvUYAE69Gb\/lUeKLjt8djhy+TeSWPJZzaKZUVxNvO9lbTpzA0xuyVa9LhFDV4Sp5bU29mK\/fXl2mbBNhllADyeSmbNHXDW8tze\/4Uvy","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/2pHmyxAUBAf9NaRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0438{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":139,"pkt":"AgAAAEUAAIdgMEAAfwYpQcCoAo6sEAK5DT3NDkebLED5vP9qUBj5jvwKAAAXAwMAWgAAAAAAAABnIscYpP+FcJd4fv05XsWHFVGL0+A0MtL9PTkSTeF+mZVvJEYB6xZJpKn6yrMtNrKS39nJ5eWKJ4iClvAcyz4cFeXVk4QfUXVQnHdCejMUj0GEXA==","pkt_caplen":139,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm8\/2pHmyxAUBggAPZZAAAXAwMAMOAIO32NJwug7\/glRx461HaZG4xz28C4RNmPjKpKC6mbegejkeMFpwRe6AdRjeWAHg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gMUAAfwYpasCoAo6sEAK5DT3NDkebLJ\/5vP9qUBj5jhGyAAAXAwMAMAAAAAAAAABoZPu2V7WZbgBcgTXHSxDvhnT4CZYsqCZugOdyTJha964cL8vm5Rh3Wg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/59HmyyfUBAf\/dX0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm8\/59HmyzUUBAf\/tW+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/59HmyzUUBggAJnUAAAXAwMAOOAIO32NJwuhLQxdqLAcxie3DUuBra\/rmpYcaboDiKmwwmdzvIP21Zl5iVweYr1cudT80e9CdpOC","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm8\/9xHmyzUUBggAJ7uAAAXAwMAOOAIO32NJwuicr4vYC4h1UYUX0o48Dcx3RhWEHDjGP9QqvrWmOzUrChpWj+c9j\/oyLoaB\/MYM+Zf","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gMkAAfwYpacCoAo6sEAK5DT3NDkebLNT5vP9qUBj5jtv0AAAXAwMAMAAAAAAAAABpTXrvlY0uZGP2gpbpFxBJpyLpSFcPA+htM2NrXzBXUwVX3EOYUJ2fxA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ABlHmy0JUBAf\/tUPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gM0AAfwYpaMCoAo6sEAK5DT3NDkebLQn5vP9qUBj5joBHAAAXAwMAMAAAAAAAAABqtxtVfwv0yGSHVyJ2V63eCyCFhsNRknRZobT2KPHoBY7a3tWxWpzdlg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgNEAAfwYko8CoAo6sEAK5DT3NDkebLT75vP9qUBD5jnKlAAAXAwMGbwAAAAAAAABrNRMsVaDkxiYNSFvl8BVpNIzq1yUxOnB6AYOpwkyKHp8mYbKs43hXbT2i\/6OeNuv5zuQbzW0LFskaVwz6hmQJEzaoc2aMPOANP35mJnuZUSEp5jSdl3t001BtGjEnVfWczJXeZFAyZZtqBuLRezJ8ICsFqnYQYv8IWMKbzhM4aT4fJt18fjFGpS+53bAJDV1yNCaE1BxbKEoFahfhRjnscJqmgQSZcbBTUTTAOgwpcijDkKx\/XKqYsc36\/PD3FE4QLOCdXoz\/OqcRydsIGuhy2ZKLNDl\/pW6a+l1FZHGy+gxwWepT5pWP9fzx6xt9ZCbh\/wilNoEsatgZynFBqDDXTVCCO29OdAVZE4QSAPtyRv4EIk8Gg78uWnuV9ctp0eyIWhWFE05k+abwPbSe+cgPQEfxHwF0fwA3uH9+Ii7mK94NOO+Lyr7W8qGbcdDzwaKYAIP6H+vf4szT7dMjOiRj3mDh+JuB5BbHtAIabl2EOyHh2OAHESSk4VHGfKEBAgPlgKHp5QWU2szUiLh+memGgW2WgSahZFpFTquyIUXFgO2o5F3Q3J+bfey\/e6RXP6jlq\/sIN5kijSdM\/ddU6mI2avnc+8Qu6AqDl4Wd2O1QXkfwRsw47YyHdscDn77IVBkLPLWyoKzh9avjwq5Ldq0JWFCFW+FajWeQ5s1IRe9eYdkWPKhwip6BbB0c+4O7B71APvJ6whTPZb0oOK8o5M3SixY8nIEehr02\/SjkJy6Sa+Yv4HHZHR+A9u\/xDRuCs4yMsM7JWXK0d3ZKTLA+IOAwG3Ez0oC664J\/qtJ\/3rfZhVbLtnAv6jZdLjUy5XssyfXuYUEwO+iKsTZ6KhyB5b2deWHSDzX+cfcHSrRwU67pR0APBr5QJL8kc2RHI2htEMAl\/Ws\/F6iU4HfA5+czQucURUHINxnKwJJzllXFMo28aS23zJjdW4AxAsWXyNmOQBiPCb+GF1tKR872LKCJwySFWCpgmbgpHABUff2iOV9SD9KrMEuEVSyZTKOHG3+edS9lJ5EGIkQaGx5KJpRbv58zCUbLJp8bDVKtWGw9Stpf24o7tQy6jisWLsECgsu8K+hRWZkseUHj1fGWZtzOvKSDzyvkcUAHKGzgFz9dDzgAuCmYHXtAaIND9Vxk0nAK20DEmbR0hNFGIqFK33nMsyjN4akqvlTKjBuQnfjxPlv4GK3sjuE1UpGk3i40r8aj0gQxy\/AXHDf2UWWiiOEO4q+natC7MA3mHYvPwCK+ewHBTtmiYMX5IXHQ0QHSnNZIZiSiibosEhZJjZuKlNfepXEfTZ3KARhWOO\/DOeATdDcn4MW5EaEfUMPP5+dBwWfE7sRdxakUWGBb28V3B2N2FFpX9dlF8gL3gj9jHSpkXCl75Fe9MV8D39qJNSIcYroj8o1brx9SqhtPDBpoldIzfcPb6pAlu4AHnPJlw1hqKv81MzUjXkw0fKO16mhKvUMwVM1Ki5VDql0qPCKDLKQqFyAtfbh7pSyYECH+MnyKkEuYBkBpXcwg764TGULgwjshx+JMOBHzFdJAJlOLaRllHbzvdmrgLyU2KegUh2oomCqWKFZA0BeO3RnFey35qMkG+F\/2pCA3WrzJrH0nLPGPBIJgKVJQSe7SEcwDJ4zOCM4qM4uZ2FKzj3o+l8Ge8DHF2v8\/qCi\/3mqpk7sQ9tj3","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ABlHmy0+UBAf\/tTaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9ABlHmzI3UBgf2HCvAAAXAwMAMOAIO32NJwujYKt0Ib5oYSLC06vS0pfRwrSek1mMRwBOK75lu\/2gUMQvH+M9Vlw\/RQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgNUAAfwYoIMCoAo6sEAK5DT3NDkebMjf5vP9qUBj5jnboAAAcoU1zZMrCIuC\/\/DSpF1\/icUIHfxV017kAg4AmDKDYqXiXp5s8DY6PRgSV5xEeZbv4c8TTeh\/+JJBn\/oogsXwQefxnjfelVHJ\/GsYlubFBEh8hX9bCoLkhPTNyskXoPSFulhoNt8Fv9u7pSVWutWZMt5WBPGi1eLJzLXFBoNAs+sIvCJJMZiCSsEMBwiEePzFRzU5K\/+pKLri+1Qa7qsUC7Y34SghUYGZU0U06+cuqK7sSb58hppNL\/Ybvv9V2wgxaF2NCm3xhGcn3N7VtOAmTeZ15QyU+7XhtP8AxXKf3SREw+QjCYeftSfTTO0Dp3yrSKS\/TQpTbDbV34dIAi+QHA8VHCmlq3GkYQoHVQVdlfOXa9LSGgSCgyu5kvduZjoZR15yaAJflyozNq0X\/x+PQRDYKfQt37QYtWkDz+3YXJH9M7AsBQm6rDuPrwSKoCusA46YB3WnVbXNaOlH2aeiJxreXekQnRcajMoHvCh9GiCWmbnHev6SCP2Jx","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gNkAAfwYpZcCoAo6sEAK5DT3NDkebM7L5vP9qUBj5jjzKAAAXAwMAMAAAAAAAAABs4V1UuVlavY+hGApPsUEsK32PKv0Iyu6E6woF1C0AmixXupgipRW3Ug==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AE5HmzOyUBAf9M47AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgN0AAfwYkoMCoAo6sEAK5DT3NDkebM+f5vP9qUBD5jhHDAAAXAwMGbwAAAAAAAABtdLEJQ6NX3eIodo3SPB1FiHO1aqogB5ZsizRGMhzU7F5b+Y0ywI0PjTegAJgxUS79OvcpeLAVhobpTmRtGS7ysQqEiksgmBVRN4y7IMW7nur8yaK+TvEJBTRUc0EkTMbTOCnTzOmG6sNJ6CKh9sk3TUQycBSH2epMr0RDsh9OdpAyQmzwTyKloHEee3aDHj1kurwuE1IConAtQijhRG05A38LN68kbHcSnY7EAa9sujbKlY7ncfHN57SA0b2yAjeEbulgLsICJgnGiSFajNE3MyZ17VzheeBrHgQ1FUGFD42Ve4xVmwJ6xpAD3ULnl+JFGt3hadtuF9puzor3+tLv4dgU5k2We2HQnFhcGpqPpWjHZdmpLzxSGDppbanuVK4wP\/gT3zcPQ49R7L0U4RGKqKXo12l0Q35coFYLyXYA3hsmD0wxWUnttgqrVShBNvMC32h3u2lSX8pdNiJo8QZFUVzjlNSgbzmDQU+jOP+z+VmtWer8HvQ8JuDBuTMpEhCFDoxuC7S7a6VvNnwdecoF\/SaLmR9u\/DMxzKBbpa0wNxi7wzU9LMaWRclSJpk8aE8NRnoMyOZT3\/QXySzW+cmUUIqFmOJSJrqchgJNTvdWbhYxu\/5izykVeME477+MiueYGxZO+SIsANMOBl4uXJTabJ\/7+RhITlUO7wST9krfm0EHH1JSCqvmCe8coCZpdlv4vNw8q8E5dLgcnEk3A2uqu+F+zdFjql2hR+CqaKiCaP9StrbJPjyp8pcSXU5QPPbM9jgyN4naga7dxH8lPjdFkaB3zH2mi3ILTsOINHXtkTrDhWpsceCUBLNrlHWpt2DQgkUmL1XfWCxvyZzQivZneGfoA5QU07SW62Mqd9qAUp5TEjq7iuqFO8V2tgWVtJbM8yOP+93eGbdhZWoKnt\/Wm7LltEB1Kw4hsZHuxn9tGWypruvdpY3FKmms7KHqFqjHVK1riOgxsPh7t1jFo83XOExPZcJdhLM9u3UR3higc60AuTjUENbnerGShod5Y6DY0zbgbPTyz8tMNAt8EqjVcuWnm\/W\/BkVGHbzbrmicqWoaCRLiW04v+Ii1\/eLDOGKqoo03l4\/JpKmyJTNdNtHNyCvYZKRXnKgCflQW+14vDliGLF80bZme3QBR1T5PfhoRWg26OzGkYwYTcCwZK4+MCiY0LP4MiyQ8G66Xg79HTbEaA+5WM2jaKbWVeYc\/Ssy1i9IZyuTkVX8K2psWuyoIv6g93hYa0RoXY2UDegBvKcJWUn39Iea\/XCPTATEfyJyrJWJUeYkRsMszoXvc3Jl4Pt3PEBpWeftL+GmYjoM8zfgAOA2SLHvMXJi0sEHqjNZdSY6eEHvTcxOSaptH6PEsrulsfZFXp4EUoXjnZmqwSns8mcWI18eOUyOye2DaAP3+uwPYWE2NlqboZPOzbCBfGTU5GJnq5nFWjQPCiMmSlsa5Mpj05\/tRwKTrPvLyDid7EtxGCa+XoWSRaX8ZAPk2vmSbQvqMsvMhThFewmzfTluH6HqWI8qQkHGMAIusqG86Wud3pX\/bNu19yZoS3cdbGLx2jBDJXBGznmfwPgqM2\/g8LAmY\/W7a2bhEbc+da2X6lVm6OZrFXGThiXVcHzzULCRZmorOTIKfQzucI3QxrIQG9w9o6ev2nIZSu7aUuQolXRMuM9KQDkYX9pDv","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AE5HmzPnUBAf8s4IAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AE5HmzpbUBAf9MeSAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AE5HmzpbUBgf9MKlAAAXAwMAMOAIO32NJwukmh86ZQx3P+JyHAvFQ1nSGE91j7rDYLqIInd89fFANeMjwxcDIAPFww==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gOUAAfwYpYsCoAo6sEAK5DT3NDkebOlv5vP9qUBj5jkVeAAAXAwMAMAAAAAAAAABu3Dj6FgDJ72vj6OzsTW6pjUhfYR0tdrAYbYXkd53CWTuTuYlJGQKojg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2025{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AINHmzqQUBAf\/sceAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AINHmz+JUBggADMdAAAXAwMAMOAIO32NJwulePd+TTFA4YpMftGOhBHvTVO2Vn+7l00LTkQibq2ypJ54uKf4pV86iA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0816{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gPEAAfwYpX8CoAo6sEAK5DT3NDkebQQT5vP9qUBj5ji4uAAAXAwMAMAAAAAAAAABwh1oLXUAu0gLvwoc+YoPXZRFVI9B6dh+ykhC2ruFS6BmVY7scOwwBJg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ALhHm0EEUBAf9MB\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ALhHm0E5UBAf8sBMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ALhHm0E5UBggAL1uAAAXAwMAOOAIO32NJwumVSE49abjkPZ\/OAyxxn2NMw6leFbfKRavU+9ebg\/s0Y9tvSJiU2FSooz3AjCiW7V8","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgPUAAfwYpk8CoAo6sEAK5DT3NDkebQTn5vQAZUBD43+f9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgPkAAfwYpksCoAo6sEAK5DT3NDkebQTn5vQBOUBD4quf9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgP0AAfwYpkcCoAo6sEAK5DT3NDkebQTn5vQC4UBD4QOf9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gQEAAfwYpW8CoAo6sEAK5DT3NDkebQTn5vQC4UBj4QCU8AAAXAwMAMAAAAAAAAABxhjfyIAN6b6wIjNRSZImNf8rZnudahW1lv\/ZW2RLb\/IC63G\/CcobRog==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9APVHm0FuUBAf\/r\/OAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVgQUAAfwYpUsCoAo6sEAK5DT3NDkebQW75vQC4UBj4QL59AAAXAwMAOAAAAAAAAAByifxG52sc0jZr70W2EEMEZ7cOKcHmGAYwmTvciYfwP\/S+6GpYWwGQ1NCDniRwwi6Z","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gQkAAfwYpWcCoAo6sEAK5DT3NDkebQav5vQC4UBj4QLP5AAAXAwMAMAAAAAAAAABzQD8xPFTWXmJMBfu60qxy3HjoRzSjE3nRLD6Dd7cVGwwaAkHNFNfP+A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9APVHm0GrUBAf\/r+RAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9APVHm0HgUBAf\/r9cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9APVHm0HgUBggAE04AAAXAwMAMOAIO32NJwunTXGuZlXBAO7xaqD0rY13V2+pyMhWWQZnSHoUePCrCxwgRj5L64fsAA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0hUUBAf9Li9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gRUAAfwYpVsCoAo6sEAK5DT3NDkebSFT5vQC4UBj4QPfnAAAXAwMAMAAAAAAAAAB17PQVSmgf9eSJOxl44W4ytpwemPR7iHKMeDfFPIGPiBr+WF8LBrDUsg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gRkAAfwYpVcCoAo6sEAK5DT3NDkebSIn5vQC4UBj4QFGlAAAXAwMAMAAAAAAAAAB21jv01O91CR8DStkQ0qThHBQq4uTEP8d6e1D8YgrYnWM+hf70iqoJLw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0iJUBAf8riKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVgR0AAfwYpTMCoAo6sEAK5DT3NDkebSL75vQC4UBj4QGErAAAXAwMAOAAAAAAAAAB3utdXVD2F5BMV5EhtziWO5VtRFE0A6mzmFQQmaZoW4Sh\/i7OWVTmNvVYrh4T\/Ao6s","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0i+UBAf\/rhJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gSEAAfwYpU8CoAo6sEAK5DT3NDkebSPv5vQC4UBj4QKqeAAAXAwMAMAAAAAAAAAB447M9\/ZRZfmSqbDnwxEB+KtkhiPdMunLbyllC6fb98Qnsi7eqHhAn+w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ASpHm0j7UBAf\/rgMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ASpHm0j7UBggABCjAAAXAwMAOOAIO32NJwuo4mr87TKXf41dZWFCkAxrNKgISz\/KZtadYEw9aLsYBfHmYJZomCHoKuZju9\/U3LhX","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgSkAAfwYoC8CoAo6sEAK5DT3NDkebTin5vQC4UBj4QPogAAB70kYg5XfcwNJwZy\/tgQfespP8m88PfJe5ZsDpkF59WaSF1HMAoHrIyZ6W\/gNbdXLUMOxj+vVEbcNETVbsFTUPn0yXOj7P8oB2sHtxe7iNlux24M7nnLpkCb8ITKA98ny8sAXd6e5kVLh8hgukJFa6OCtAU5CvwjpXdlSqvJjzxywM3LdXp5EgXs7+prB+scJ70\/5LxDexMF3qD7fPJxiiRZmv8m\/LkCLBwRU8foKp2vWpiFG9zqjdsYQpt7\/xnSLCodmSVqQErK1EReftMzqE+0Nt4rkOfUFjuVZud5Ii+CE5cslBCDV\/UfoeF6GokuZv9y5K8Ga2qtvgltFSZkt6Ey3T0WYCsSoME0pHFz9Otqy9HEQrBWk+GjYtcx34KFVr4wIyYU697rtVwEat+OoXyMH1RpkkKxPKxy41zNLdZKkOafHf\/4+2Av6Z+lvXVm4u9fQ4DrXb2z2CAnwjqFfASjuE1\/Iab5p1H4jyAX5PJS3QKl5yghrmZV\/b","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AWdHm0kwUBAf\/reaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gS0AAfwYpUMCoAo6sEAK5DT3NDkebT6T5vQC4UBj4QLx9AAAXAwMAMAAAAAAAAAB6EXR9XE2jhlOIpvAKSIxge8foMPi5mQQPvQjZK6tMj\/RStziDvACAnQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AWdHm0kwUBggAKhoAAAXAwMAMOAIO32NJwupO\/2E\/C49pm7PHyC3kAPphDHURWyCLOESOGkQLzeLxLUxJ+3eYBmd8A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AZxHm0+kUBAf9LD7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgTEAAfwYki8CoAo6sEAK5DT3NDkebT9n5vQC4UBD4QJ1kAAAXAwMGbwAAAAAAAAB7n8OusLj1QfPmkKMqfhMd9hu8t9njGVflMnprATl0u8EkWAOz8HyDeav2F9lLtBjnMd\/CRaaZJFOSpcyFDg3zGgGQ2NWsrDCt03K+aGUU0xxUCjyu17MoUMwcCvSTK7nBB8r63yzq7IsmRk947XEMOT4F9Vj+A1dzjX\/cKs2yj3o1UzkLf7k8Fc0TtnKCxmrm5zoV7k6wmL3j8j3eSBQCYpLZB9oHmUSmrf4ZofbCaRNqDGaUZkUAJabl0rxP9Q8v\/RkVyehDdQ0CQ\/gw5dXP5aqh8OMmCLUJEST0jp44jqhSN0Ua10EV1L1uySuzk8\/WSyiblmEUdKTxBw3PpWVhxWOsu0wLM9xa5r2pEUFnckXFi1ogeoZxTSHxs9rsLfHJShggy5j9ZNkIZ0Kgy3OAB9q3OxYWISbf3ah5T8XPTXAybqbsSiuyu4TD5RoVhtkYemRvOQX0PC10t1laqGkuDT7zREKkkjqp54GL9uuGyqsJSlJmlmf3K1f1YUsWLJTgmDfTU6RyzZjkqxNswyyKsDlCP8yyrkYMhPzCR+gX11seYi5L03fzOPzZC\/Bmf6mMeANn0YdJVxQDEqXLbEtUwBusU\/bRHghF6u6Sw2mHk9Lg\/Z6TJF6D11TA5t6dHFA4TnINSaY8hLhPTHqembf10qYCFGVkquwIY+wTDhzbjHahExTHZFoUJvXdoKtikHvqMldEM2MrMDJFYQMyG83W1wg1jfXSXMIEvn+R0VQRxpQ0JJGVhV\/7CbGxibCCyJU4h8BU14ZEmyyjx6tega8c2jKe7vka4tmz98m+wQyUHsUxFIGIi5WydhgK5OurONMWgkrUCmufgO5Eshme\/k1bYl6b\/fJhRVEhULlWUTaRR6\/fw550piBTIlUMTF8SO0dvt0kx\/FM0xe5ryQphTe6xazZb29od+KYRseH2sz96hUlvrOUuQVM8dP284L9etfcS+ADC03hwDscNmWFb71cqsjswbDXWCbzunCC6OLa4xdvOKwQYfFiZYY0GUgFuNZ0RgmO6NwkoQCaKqZFIvpN2Lwj5cDgatMV6WhejedvyqpUPepOpLX4j+BbCL\/JqSTcfOS4w7R4sO2FjiK0hSTYIa+5s+Y1PPNJsZmluubMgkGGQPB+HjxReqN1bXD\/CwsBfb+ER889U4fZSQtO4PvjhnHBFht3kHe4ehh9OpbZByQ5qwrxQFUsJeAqcv7mZIOXXocIQkdmvhU3SF2\/jJcGp6TULBuB3dzY79N86neoGkgUvUswOkh5b3FvyjexDhUpK9WWzn0oO+OAPp3T1Z8LjJXC93RjroAtnC6lBFDB4+hCs\/YU54kvep1QMSOKcMHzZkBj+0cRWCewIKs7CspHvdNsxpfSJnGrrRiiYEQxFHUfrK4ALM\/Ndt72Mf+WNR\/1QVkjeHpXduQAtUUDZqT0CXx4hrrzaAQoGSww3bXOHoiCPIiELqNORiLmEfY891dQNJ2212tWRS+bic3Abl\/Y9Eq20yZcU6dA\/7MqrqZCSZlxIgZBxSZWLSgiD5MZPMgUZ\/A6\/04DQr5fiJF1gh\/J4jx4UuPv1WYbQ43JMSD7E2eXvgknOxth1MzMa9TUuQXJI2Fh9K67eFvyCne9BIVdYG4jRHeohBTZZKyJrLbSB0gUBqaLAqa3ztHYp+VK8hMwbr\/1vzh7kD0AZ\/RVy","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0815{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AZxHm0\/ZUBAf\/rC8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gTkAAfwYpTcCoAo6sEAK5DT3NDkebVk35vQC4UBj4QKeWAAAXAwMAMAAAAAAAAAB8\/qHglTzbfG+mIcipYYMkJ5ceTxQZccEESGImMbkoFsDdur4w0\/AWaw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AZxHm1ZNUBAf9KpSAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gT0AAfwYpTMCoAo6sEAK5DT3NDkebVoL5vQC4UBj4QFbuAAAXAwMAMAAAAAAAAAB92ULyb+ZFBm1IzPIMUjxBA26v4HgjsYdjawZ66myfrCNomGI4IyAYVA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AZxHm1ZNUBggAHA8AAAXAwMAMOAIO32NJwuqVYvnWp\/62iRJr2u2U0njJbaYbENo5rcuu9RdKN7ZWjDiIRhsZNd+Xw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gUEAAfwYpS8CoAo6sEAK5DT3NDkebVrf5vQC4UBj4QId3AAAXAwMAMAAAAAAAAAB+4Glzgvikt+6wrmQA3KW9jNfLoezEvCCFQZv35TNDWzui01FuJFvUiQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AdFHm1aCUBAf\/qneAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AdFHm1a3UBAf\/qmpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9AdFHm1a3UBggABSaAAAXAwMAOOAIO32NJwurxu2CQALU1Smuo\/7sJzcgX+xZJYpJIZiAv0D2sV++nSmyM33Ii+fY\/L3+NYGnMiSj","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gU0AAfwYpSMCoAo6sEAK5DT3NDkebXWD5vQC4UBj4QPkiAAAXAwMAMAAAAAAAAACANwlNIf5uhvlDXTa2NKSOd8miEoHQ1U\/oaWhxWt5kY1ZGHYa2nNypNQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Ag5Hm1bsUBAf\/qk3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Ag5Hm1bsUBggADeNAAAXAwMAMOAIO32NJwusqfE7HTvTHjsRnQXoN3zkD9sl+oiA8a3z59XskRmBE7Boiksk5Oui1w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AkNHm11gUBAf9KKYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AkNHm12VUBAf\/qJZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AkNHm12VUBggAAvrAAAXAwMAMOAIO32NJwuts02+cK41ezVE54wAZyZ0Wxa0ROxIFIJT0NKheC3kBsXHZcdMgP1TsQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgVUAAfwYoAMCoAo6sEAK5DT3NDkebYo75vQC4UBj4QLJLAABX3voGG4FDbXIw7s+YjnmP8itLcO+BEgxaVB0G3FK+ejmNQ36n1XPyBHoDN4eFqVa\/xwm9+Ij\/rIdl0r9d\/\/cxnLjyRJD3NBc\/iD9CrvFTvaVaPOMFEBiplkUf1F2lbYHOSAubBQKd7u9b5qnxzxb2ZxPAcIdMRh6dt3STi7RUiUuA0u0I5WJ6ZaJt1ZRTnRQCKiABhBSejSD4VXxa\/bMzwHazybkJJu4d2e5OMMMHyBjNjLnez3sY1nRZdBe\/HXiWbnQW1KAsZ+6omh7C1jukOwD2tu8Ajq+Lr0EPAYN39mYAxlz8VZ26lTekSjFh9GnndpT0hmQMO+TwYfM9nHUZERQ6f1iNejh8dVRZZ5w\/PWqT5uUZcOX0QkgmB52fFEW\/5s8mBV3zWIRsvhYlI47qInb8m6orhhkcJemEL4HdpTWx\/WoEtdjm+\/9evPeFSWIreI4Uc2wWexypMGXy8QfMokmdsK66Wr4o9cfKmSu5vJiNkjkDnAe08IDo","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AnhHm2QJUBAf9Ju6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gVkAAfwYpRcCoAo6sEAK5DT3NDkebZAn5vQC4UBj4QJtTAAAXAwMAMAAAAAAAAACCi5s6SnTxstkqUnAQmkm9RH9M7tGmloEY2Gfq866IuL11J8t35YLTKQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9AnhHm2Q+UBAf\/pt7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9AnhHm2Q+UBggANxhAAAXAwMAOOAIO32NJwuueOhe4rNG+OogVfpd9plHI9uSAqRphhCDi3a8DpneFxkQTyL9KW4Th8ruD7ZaTEi0","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgV0AAfwYpecCoAo6sEAK5DT3NDkebZD75vQEqUBD3zsT4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgWEAAfwYpeMCoAo6sEAK5DT3NDkebZD75vQGcUBD3XMT4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgWUAAfwYpd8CoAo6sEAK5DT3NDkebZD75vQIOUBD26sT4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gWkAAfwYpQcCoAo6sEAK5DT3NDkebZD75vQIOUBj26q5sAAAXAwMAMAAAAAAAAACDL7vsQy62nnf3rJHAf3IF3zhFhahMaeE0vGYW31EWTFgxMF3oW50MZw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVgW0AAfwYpOMCoAo6sEAK5DT3NDkebZHP5vQIOUBj26lggAAAXAwMAOAAAAAAAAACEf5zyXLzNd\/Oue6FmdCEzFRs5k\/YBoS4KxC+SgpdCQidJUL\/XA0GVn4Mz\/dqbAO+z","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2RzUBAf\/psJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gXEAAfwYpP8CoAo6sEAK5DT3NDkebZLD5vQIOUBj26opiAAAXAwMAMAAAAAAAAACFH7WyHa7bwiZljdc3TfcquJ2BlanDldGrdb3Nh\/\/XuYAinQ\/QvzU0cw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2SwUBAf\/JrOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2TlUBAf\/pqXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gX0AAfwYpPMCoAo6sEAK5DT3NDkeba1n5vQJDUBj2tUbIAAAXAwMAMAAAAAAAAACH5GilIa5LzkJMdvDzuu4Jb6Qe7U7kyAtoJYfH40OoUAft0HrHxoia6g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2tZUBAf9JQtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgYEAAfwYkd8CoAo6sEAK5DT3NDkeba475vQJDUBD2teDMAAAXAwMGbwAAAAAAAACIvhTfIMcpK4aJ8Sjas7sz8CnAmaYQpis4SNO1cXRwrCBTjWPbnzUs20sbuVl0q\/7aEGn4MHMVa4upfeDJSync1570WKV0YeYvkqECiF9RELUJQt4kc76u1RpDArAeqBlY4UBLbqG92XLsO+qX7ocJQwKa4AOr7EXFofsvfRO5Z\/2XaX\/w3c6phZFDM1ksSPb9vq7ZodXX3lUqkEwb35nVO3Slcgse5U3uzPq3EUqgzam0OyrTcvtKgOhZpwzHf2RdZcJu4KSXBm1vsAtPR9nWbYhwL2L1E6abRV7nUFXHha45dr4Wh59REibtkHHpAI377oNhup\/e8NJGcOrrSwz2TczGLTLB5mu+HL8gALNKF4GHrQRRq\/Wo1\/2T1PhNCC5m5modhe+IJzkm7CAad2lW+tgz6D70\/vD3XKmfVVYfIncujqaKFT\/kqN1OG0iGzjWWl6nnoaX\/aS5Hw3d7rCdvAQRBy\/8gU2iKERczB+sPRCQPcaY5UaRgkW8oXdga8E3IDbKVLlqFZslHBg74a0Tm7mqODb\/VkM7niLptarV5Vc8EhpP6LmtzN88lCzqCMD9zhLGeXnbrKzwXBsiGwcD6tkd5xbq\/ksH6ncKEOa8vn165fM0CgR910tIg7cYNqXK28kisHnOkRQXWTLHLQACCLAUEyamKWcG7G1vX\/hXhHdFsKD9EuaRKsc+TDF4BJV2xsi9Ys6hI5cSytJR8BUnZdqcgiPf8jRzlmeBzVc0KYnFBPjaiJF43YLxg0bwydFoRmNXYjwz\/6soGFrQ\/7xLbmgttLgOC4MTSL1W3NGVI\/QzVQJClLm7yuoovuDskIVxHMDsahynUjJoS+HGxiDkvwRlSAbKtVXDpCEeA7SHvulxaFLYyqfeQFmX0SmbWs2zvlwwh+19BN\/hO07wd4sAp4UTCI+k0jkenFqadGM7BWuQJzzCkqknWgysCWe\/H+9VajE9FffGgjY1qSR0e5tClKeFVW44vNGtjxVDklHRLQ3aVYcJ4O7jK1zAVx5ZsxgTqgqaLIjSwcUa5EzHJcFeUjuowgxII0fqx1AA6ljdJ4mIv3WK9Ief44s9p8G7+8O+6UZfxX1wq1QMpDp2hadepzSudboTCE+XwJU5etTMcV7VEoc4tZ0xudvpR+Ue\/46nCBqcMyBoQExhR5TOjeYpKhyoaWCtC1OUvuP6wfRWT9UYKUhdBExOywzWXZ+YHMLtndKu9Uq2VaR4B+Fz7qklJ3SHcpr625n12mFVYP\/lbKlxPJ5CWQ0ee7Os9Tb+ImjASWZlgBH8tJvZzxMKXguIYLFvbyjqEm6aSdod0KZ5zZzF4jToiEl7qC8BesCiFud4ntAj38HeaJZCWLrHUEwc9sPi\/PIf7RKnnLgX9auROZB818BAb6IoBXyav8Dxz6ScATKUL2z1ooO8LGD8W3S1ZGJZcY93JzZFHwADBrJRmV9sdoMEb5TFlzHEqsshOx7F8OHAAhRWP7H+5vq1iuJTVDXMsKNhgy1CwcYNwNlEj5Cz4MJ8Ip8qX9raV9IkjhovUIyXp60sBQlsWDWpvru2RF8xyMBbuv4fXMF4mDaPPMM1rO906EDpYhNONpd1DmXoVM8Q0gk+7oRthG0kzTeAn8D1QUcR5q9hmoZSJQm0zSuMY0X38zGiAW9WKc6aKcml0qdyRmYlrI9pdcQs3","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ArVHm2uOUBAf8pP6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9ArVHm2uOUBggAF3kAAAXAwMAMOAIO32NJwuvlZOxPvXhMP2nnsfe+hDCv4u0B2zpJYXnxUqV1mvHDHJGKbGm92C01Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9AupHm3CHUBggAN7sAAAXAwMAMOAIO32NJwuwzin5GdT5Ukbm9iqolFGpFPSxHt5G1snFNAj0hDSEosBTjqwdbHcPXQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Ax9Hm3ICUBAf9I0aAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gYkAAfwYpOcCoAo6sEAK5DT3NDkebcgL5vQJDUBj2tbYlAAAXAwMAMAAAAAAAAACJsDlnYRN8X1wnnJ6g5kIzrX368jN0tJk79szhm9vYl\/80U8e7KdVzSQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Ax9Hm3I3UBAf\/ozbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9Ax9Hm3I3UBggAB\/yAAAXAwMAOOAIO32NJwuxD2+NZ6HLT092utS3QZuwEo6eP7Bn\/wwYGv+zCfRmy8eDT62knSbSZ99WIo\/Mh+Ab","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgY0AAfwYpbcCoAo6sEAK5DT3NDkebcjf5vQK1UBD2Q7b\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gZEAAfwYpN8CoAo6sEAK5DT3NDkebcjf5vQK1UBj2Qyl0AAAXAwMAMAAAAAAAAACKXWaXIMgMhFuNtdZ1Y\/O64aciCqFbm43xrM3LXpofGz4861DLLHkDvw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A1xHm3JsUBAf\/oxpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gZUAAfwYpNsCoAo6sEAK5DT3NDkebcmz5vQK1UBj2Q1L+AAAXAwMAMAAAAAAAAACL4Dmm2\/VVt5Nkkbxykd3J45DS0ElD9CRD5sDSnt6e71l3iBfsbZSNFA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A1xHm3KhUBAf\/ow0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgZkAAfwYkccCoAo6sEAK5DT3NDkebcqH5vQK1UBD2Q5OeAAAXAwMGbwAAAAAAAACMW\/ffwSwvZhlXbHjFE6OZh+VsbT9N7HLckKZS3UD0sw2CRxX7hZC5Kkw3NutqSTqPtMETAP5P+X\/GtYE1arxKb+OQp49bjXjZ7RTuRqmwzGB1x0nqGEai5isfJZZCPvNWoLDTVSeYFeYq2U269ELkoEkEkwugGbqTXpesz0SNCtO3xI9+dM5RBMDQ9cU39ClzYHVAiYfTfD1Ak+Lf9eEwqWFk83X8UIGeRy5149XUSgxKdEWtoudeyPWLA1b5HNAfinSR0islYTyiGRUws+wDHliqND3mAcA1fV0XIkVHWroFnd122WesRLdMeh4h5dMiRzSN7KH71nD9HwIjcQB0HcuSoM39dPzdkD8SFxXCO+gziPCh8SmpRhnu8D5xIwvovOdiAlR4XW445DbvceKTHe7sPcmC5w40gP1fmQu\/TheybP4G5bwrfPiFR5zHih3TfZstKgSZ\/PgHg3Y7K2h5Pj\/7YxSTK7zpZ6UKxPKZuyij4IiOTzNfgOaGnK\/\/\/+C+z7T\/nvz7DwHNLYv4cg\/hxiK+gg9RE1owdnMfM36vl3JTypOtqlzeJgcfMZzICVGRSNstSZreaJR4uYZvD8a6CKPtwAXvq7ue8P+3Eh6PvG\/Ngx6yABnj+R2BNqFv2XXC24H0RBIBG80wZ9HjJFGanCU1pK7v8QFBz0OwumfBC3FatFIvcX2oxbiScQfBa8eB\/P2p5ecKHVC2sCBgoKmn8rrW3PCqAMfc9a6ZJpclbC11BJjejHV4n\/MiXUxWTlZQA3wQDhEu5Nfe4TwvjsIKun9uM83V87UFcePlpekQ33jGNJIoosfQyJ\/iEGWTMXP4Ne+px12U2FxS2mArfahkoUcOrxLr9cn+sF8ULMk\/8audyBSY\/aOq3UwFnNETCC2KDJ2Hs6ANJ+BD9YSmRzif71RnZz40162++2ZXvPebP1Hp+I64jk\/ddSMxwaFPWpfoyVHSjL\/unExxdy\/+fGWh2bmAp46TdslqzVdhLOGyNnmD54q0+7jJ9OfTSUbCw4tF7eG925qixUfmyKgsgZjyF0gA1j9EzqcijqdZ9h831HApYkWckWVAbptKLSvJp\/jl2NL3cZVG7yjUOOanneHTQ1Tzh1Nudq3We+dRRD0u9y5OAR+QvotP4HrO37T+6Xjk+673Q8Or369jJxQuSv24bVecdQ9ff81pA9YsGYD5f9xGLnPkHe4h9QKNVylpHtKb7Ifftwr9\/r2iGx25LQmtY4S8UqwxY2+wgb6wWiGz2fjPB4su7E5sFsfENFSNvaOAwzZGzfrQgVe1CMjOYVpxxjPrH29qpWUo3P\/1oI2JotXZC98u65J2yAFk8XGr0MhQO8IRoPqMB3DHCN3wRyGlQxIxciEftFRKW1KFshTHECj0w5bOJTlTmY6MNWyJcEpAwOpQhCPnWKam418p5n\/OZEQzJ03cR+5JsQEPVybOpSO\/2dtAhkhOYz8bydJbUDugT5KkzOl89PUjnbdDY3o5dgzHVjHJKivG2WlBxnXA0g0QiKvO7+ge0utFWEOaRSU6OwIVAISzog0DNAXT2upN3h4DIqwS8RIiME0k8gMapkbLnYkP1AUxfLIqyp1PqYFTUH6pHY1utcqKz3aO3UxyG84AB02oBS2AzFEG1Dyk31XM12TYiN1NpZqhN7MHn0h3Y1jjKPI2sOVJEZ2n","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A1xHm3kVUBAf9IXKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gaEAAfwYpM8CoAo6sEAK5DT3NDkebeRX5vQK1UBj2Q1a7AAAXAwMAMAAAAAAAAACNPUL7zXiKBO2kH0Uu5rFUDH7ZBFXfE7yI0RFpmiLyAfWuedMQP6cLXg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9A1xHm3kVUBgf9MD9AAAXAwMAMOAIO32NJwuy3n69U9VJRNMahxRs2fuPyWk6DcG5u\/NnkKLoT5pEBa1eN3flC8dqiw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A5FHm3lKUBAf\/oVWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9A5FHm3lKUBggAI+GAAAXAwMAMOAIO32NJwuzVgzccVk1ZC066z\/8g6iQYUFQ+UqHiZizMzHdlrOQWgbscP9JoQRUgQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgaUAAfwYkbsCoAo6sEAK5DT3NDkebeUr5vQK1UBD2Q9z0AAAXAwMGbwAAAAAAAACOLwioyUAnOuWnljgZa5bwJZPntOvGwPDvoWotaWshXZC6hAkEnYLXtlrTnvktKFqdVriQMG10hnP3leViw28TCpGtgj+O6YBrpStrezmhsj8h4WYnoQQjMgCtBQXYHbuWElAGFb6RwkL22OFcVUf0qJzL0d9qvOlso8SnPLbfbdbCS7tmcJYHNqLHnMyXh8lVsmDAzIqG7xevTIgaIfw+pOh0Km5b828u70Fy8\/VMrkyZvKT2qk25\/ug6+VdWglrPREiNzHnucLeRtGIt1ZUmpDF1A7xKttywQZAhM8C\/YHCBiAPYke6X8TD8yVtCOJSsK\/hU9Ies6UP19rRdjpcIdNP3rvjj2WL4j8LB1lIF4yDSAkC31D3QLhCffCycQdhzUOYdnq+TZ7MXr4wUlVycO1X41hVWGzn3ydDA8tEtsGNnOZJHYzefagMMqaXKKPSI2\/rR2NNe+SCVfC\/nTqWVPQva+o2LB+4c\/K3RJH1kH2Tc6CJxZVUjgSeyMyxAU4O7kDc3SbSj7q5W4QkzG0ycVdmmqQEmgi6vWGje2S48fw6WWrVYNHvaCWhHSOrsXszjWTh4aHW0p+65U2jcTMk+b+Tmd8r6n7xIkXSxOfaWUgG4uA25qWZNQmMGDaqBwCAhjSsWEbHraBNvn7qeA7aFXIHMqDwrJOKQ+IvVGFpUL7JgviJCnQyImj68AKwVwNO3RI9f\/CZGUImtW2SpcXWAYOT0cLf1UwlBN8TnuRCIyJ10\/pD1cNlWmXY1IGzoSA5pGY9wYePS\/C4viDK9C5fWhoGEjIgZgO58ACtZDZpe4zWQ4YSEyMGsAXxtPXQ96fUUJ4GMgZOPcsXfO8Gugs6sZ3xEW8HaDynmFmCn1sUbA69jbLOhWuKrOviUjZuhcjLyzUXLoCGDN0GyL9WoTJ6L4Jy\/i41CbGHP28J5i0zX\/KgkiAK9l\/G45JgatMg47wE488LSfMcxgmM2wYorN\/kaMwPw7sxnDnAtixmrD4loozs7ihwrjEPtQFNMSFelSf0llNKeuH12PP5fQXbImpAMQjYD12K6lcXsDrReRkWjFEO75K4uGkNhSh95Zcg1cFTGkrnQzsksLjZ7yfU8us\/hvCrBc1lNcCj\/uRMGIuFxSFYpEr\/C4jgPST7XJdpOiHZfkcqFqFTvCKqiDHvjjfq1gRy4a1ph6g2HbD4D1sGppvXzUcFbkYB\/pxkMhyU8lMaT10M8emCYsHHYhf+lmqAtkM79\/8\/Q15Y0bZ27hS6fpTpFCfLvdmwSAhcYUpNkBkJF6Tzmo+HcTz0llSd9+rqqn6KcTonGUbNGLWD2SY3xs+VmPp\/BGDsSzMOtHv2pwt2sBaVkcjKxGSn5eysLCvb5CcftqnXARPZQY+55uNax5bj49qYOhUZm5un9Sa4oWrpbDcTwQWI9Kb\/q3k1E\/c8KR57HiMzoifyvHM6jgeHhrBf0qzJ4yma+jqSdJR+csnwJpi0ag3PIbLYsRkR7UxSU2C3W05BXrild2\/ERSkeABSMXzcoo0rGJYhzsniqy3QIYWCJFTHp+weFizTHFUhzIWs8mu2DuV0bURHbmShysAqlSvK7HHB1TKQgyNu23\/P\/9Y7ZdarH5wXbdNZCQdIIYFCwAkhpl6Z6fFfXCMlzap\/eAZIXFT\/VVAVTzz\/KWDIi0eERW3wTSVxD32AnX","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A8ZHm3++UBAf9H63AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1ga0AAfwYpMMCoAo6sEAK5DT3NDkebf775vQK1UBj2Q\/fBAAAXAwMAMAAAAAAAAACPniwqqqLehDcnC\/\/OvPGSRXK8tzlACfY85ZeNY+Ckc9Q\/ZZrW5Rko0w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgbEAAfwYpZMCoAo6sEAK5DT3NDkebf\/P5vQMfUBD12alDAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9A8ZHm3\/zUBAf8n6EAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9A8ZHm3\/zUBggAE2EAAAXAwMAOOAIO32NJwu0y5marrZZMTGYN+RWsCCocxBhZIXy+ufK+C0sky+1ISAQvTO85FubZPrIH298kbJA","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgbUAAfwYpY8CoAo6sEAK5DT3NDkebf\/P5vQORUBD1Z6lDAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gbkAAfwYpLcCoAo6sEAK5DT3NDkebf\/P5vQPGUBj1MsIHAAAXAwMAMAAAAAAAAACQytoteal9VrbOdOA68YzZuLuFoJ7bHInG4ZXIC53OHI6hO0p+4XiWVg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4AoUBAf\/n4GAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVgb0AAfwYpJMCoAo6sEAK5DT3NDkebgCj5vQPGUBj1MjugAAAXAwMAOAAAAAAAAACRcT\/P0HVk5z2HT3e2dAczT2cZwSjIZg3jfFtkbbbWDvV3sAMmoBmMSW1df0y4XvAX","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gcEAAfwYpK8CoAo6sEAK5DT3NDkebgGX5vQPGUBj1Mm9vAAAXAwMAMAAAAAAAAACSD\/Rqwl89pApXwMJivVlZz9M5fTpWmJObTidm3dryr86FFypVnjqp\/A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4BlUBAf\/n3JAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4CaUBAf\/n2UAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BANHm4cOUBAf9HcqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gc0AAfwYpKMCoAo6sEAK5DT3NDkebhw75vQPGUBj1MiJVAAAXAwMAMAAAAAAAAACUVv+GRAtLal8ceUNGtiOgJUOBSUpuwPnamoq78mOLv9gvVBRgG2O7Sg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BANHm4cOUBggAG2CAAAXAwMAMOAIO32NJwu1ObbbdaVoWstw1T+F8VrSoo1C+VzzAch1A\/nYZNR+8RRjNklWN2ZVqA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BDhHm4dDUBAf\/na2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgdEAAfwYkY8CoAo6sEAK5DT3NDkebh0P5vQPGUBD1Mq+AAAAXAwMGbwAAAAAAAACVQyr8yunBUT6+oQ+75yMgzEJ4Cn5UYkzWSA0YNE4d2p3q7sFNNEe9H4rlQtqxP7Z5yDqgAzx+zIiRckCCo+V5bAusaalcQQIDg6sJofujWW4YR1GBV2EqPL116aB7Q2GFHe96Acaz6HrhrzNSyvs4Ju8WrQ4pyuMVLwfeZmoZWkS0RgZYKV0+rQBEqoFOJai\/lEnUE4uRIr4CbAHpplar6b62CjjfVModHfvCsOhCSvZby0+TgZpadurxTT9EU6M9JaRVPNYvztCdWrCqCgv5CmoRl2ZXL8li+ryY0bCm4F+po60yKrpI5TK0\/u8HFznpzKgOEdxlZygqIXGmj2AgNbZ4PVT83btUWDhxnV6URXiO9a52D0I5y35wc3kdlnCSy05sQ2cQ43xEMxEx\/6BVnPB40e0lvGOi8w5MEXlZuRwz3+tKEWYfp68k6vN1vnzqs8gM6umvDINHLlayZCKcys8pHgJOZ1gXVp175t+8mZrif8wSnswQjkjFRpSMpcnzUd7WLHM\/JtAuIF7grH6dYQlgg1OY6GDIbyXY\/aLa0U+OBKC1ArBbnlliz1bjGQpvQTWQlGtQ8hylbpyjqaA+6FXZ\/AWY6V+43zQEtiAlU8EregACHq\/AGB74s82+vLyUQ7Q2+j9iXFfdQTVkwuj3KLzPh6omCH8HCv+m6\/5L2nS2eXKJosDRTemBZs8UdnF7cB9Kwu96UWF7DfjfH9M8iDcHMayEP\/naSVrONBQaVBCNSQ7ELytOjKnxrRRxGX03CG1vX1xJ7ZkD1UIAW+kuMJNZgottxkgV1l0xd9bYoOMpcDFWs33p\/WSu0wxN6kdKro4OgN7K02TOYLFeP72D5Li86pygQGMBwThr4uiTGMFQc+eKEtwf777CSKdw5xHkoVfQ6hM6r1hhcDwslb4ZuH3txoWjEjUEhm5So3KpsWfcgO2tQe5RHg3xpdx0xNBMwA4IRa26gToP9SkzguS8WgFxmIUXOaiHL6i7e6T5zUlIrN9yh57zQLNIkpT1Xi1bEfhD+XmDj3oNJ6U4oWghK7J0EDDumkbsM7yWVA7qZFKj0wGXFLXN6kqYplKdxV3OOraJjBJf6BmtRoWeC9fbc8QBh+OY7xXGK7dG38I0Gm0aEKKzEUdsnRQUgP+SkqSiMqcqhaQTGjx83Xi5dMp663gueneTqYXPoKtc5pUwjLGdXfb2uqlDdmIfe9eQc5t8fchAjNCvOVeJKhbXCRggxl1vMyOIDeXldoWDtXTjaWMpsxFcz5tEP+OiRAp8s4u4n0eQr1T\/6JrnAZ8QzXONWwjXJnc\/wUxKrr40DbYtlxvMdonuf8ZtcgNK9AB1jBKxgPZpXc\/\/sWATQW3Rqwjsg4ZsC8CUamcKYZXmzuZZ+FK3W\/+wyV0Rvg045yxxNfh2Ez0C5Coaa7s5viHISMmkRR5tjKEqRQK09WJki7iCjC\/H+z\/p1zd5oQkMLBe4UcdaH+LaGE+92xHHfhGCWrQKop1izleZJNQ10UG5GLhYqNRaj\/Hk5nqAlPz0t5tvQj8g20qGg+Grg0Qw5+B72o+CHOkKw17Lkn0kfxXbTNLFTmA29z7A1dmIWbFJ2xHe7oXsY94dhxPpSla2dPWGxveXFXZJ28DpRFUHD7BsUHiT4s1J\/tC41MLCzNME20Nc4aDr5wPNq9mJmAhb3hFd","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BDhHm4dDUBggAHDzAAAXAwMAMOAIO32NJwu2pK5HHAG2SBRH+FbOTkQZ8kftrPRGxHnfaHRB0fbX3WSwOvHoZo1TDA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm423UBAf9HAXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gdkAAfwYpJcCoAo6sEAK5DT3NDkebjbf5vQPGUBj1MmusAAAXAwMAMAAAAAAAAACWAXJh55G17OxxuOqyytEutveNoyiRzI1RGlESx1aTOaW+AkncDqfMtA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm43sUBAf\/m\/YAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gd0AAfwYpJMCoAo6sEAK5DT3NDkebjez5vQPGUBj1MmKFAAAXAwMAMAAAAAAAAACX2Rm2ALKYJ8TH1z2GnMRYWPi\/bTibXaVie\/dbN4atF1WkYV4y0BMx0w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1geEAAfwYpI8CoAo6sEAK5DT3NDkebjiH5vQPGUBj1MmK1AAAXAwMAMAAAAAAAAACY0++k4oySYy4pXnsY0Oc1yI3Xt7WnUkgPNoxbIxHn8tqewVs7\/kdH9g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm44hUBAf\/m+jAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BG1Hm45WUBAf\/m9uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BG1Hm45WUBggALw8AAAXAwMAOOAIO32NJwu3Z52+rNQ\/W6KbTVCffNaXQM3k48Z9fStM0x2N4qCYpsGmnIKaVaS+YnaLDNOncXHt","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BKpHm45WUBggAEVoAAAXAwMAMOAIO32NJwu417UuK\/L3U50lT7+nWD9c6dDHX\/T3+M17Y9SJdeOGPZ3lNK+g8nFf\/Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BN9Hm5TKUBAf9GiSAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1ge0AAfwYpIMCoAo6sEAK5DT3NDkeblMr5vQPGUBj1MuK1AAAXAwMAMAAAAAAAAACac3txT2Eww+3heMG3QwftHArBnkaSv4D3y0IOr5b6MBL\/YEv\/5z4IMw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BN9Hm5T\/UBAf8mhfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BN9Hm5T\/UBggAGXrAAAXAwMAOOAIO32NJwu5V2s6pIbp55+UArAE59O9a1zEIiki4NqxxxCxdIt7WuqQ5TRMSFQlBAsq2A15vBSA","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgfEAAfwYpVMCoAo6sEAK5DT3NDkeblP\/5vQQDUBD6AI8sAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gfUAAfwYpHsCoAo6sEAK5DT3NDkeblP\/5vQQDUBj6AOiUAAAXAwMAMAAAAAAAAACbf05fJtZVxmzwMoyXeZ0vQbcYRDoSeRODJD1I+wWl2cBt6lgUNTtMuQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BRxHm5U0UBAf\/mfhAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gfkAAfwYpHcCoAo6sEAK5DT3NDkeblTT5vQQDUBj6AClkAAAXAwMAMAAAAAAAAACcTakFg+0DTJhFLqqX6CGs2pEcFM5mJxAxOlhy6bR7VoD2TUDoKR0MIA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BRxHm5VpUBAf\/mesAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BRxHm5VpUBggACnQAAAXAwMAMOAIO32NJwu6\/O3hisKr2N6AeIhozftmxb+myu\/JAsWTppTBNdIuqw\/c+NpwxB20KA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgf0AAfwYkWMCoAo6sEAK5DT3NDkeblWn5vQQDUBD6APW0AAAXAwMGbwAAAAAAAACdS0jsWem3gZj8clykMZgx22ftPIgOgZaOju1Pz0dVUzP3hTPNuwN0SdUOE2kiaWmqyn5Zvdmg6xgzRO9JU3LAwmLKxHNYsg9ymT\/nu2OjbLJC3gOM6+7V84UKCXzqh3iTrLnnrCusVAbJOrTtbUjqhB58tn0HJsW+o22f3\/gFQx4TgIxIbnnklS3dMM7GpC+JvOmzG4sUU\/7YGaf0rjeqGZsySttaAOnQkCGM++vspSQI7Jche3H+EfgwEqUiOHqqTL7FtdSGf3\/PUuKrEK7ANaroorTlYQcp63LHg1fykYiI\/marc\/Jq7EAe5Z6pgw15fUs5RIefmuOYKaFGgJ\/TIS7ObqdBjqcmKoLcNLjOi5I8uWLEoFieYR4euzah4tN1aM\/LY1AEhrMdUK5rW6Vl1p4n1t9yxrDPxLhKeKkFj9C38\/rvYc68jQb\/h+uqGUxH1uwMHkWl1CWLyAdeThSgXhxVT5W+gRrdO5SbTkM67Pp3LU7cASfqL\/ZOZO98Wc3o\/7kXh3K7CBrpwCCpJf8EwVs287JXeN8FdzY9M6RrQHunuBULiy7Dn6MAonwzK8YqwNIZlT7HOx93dSVNYb6ejGthuHI3BJdLx0qIUdIEoSSpa23nwKJ3m1cUZLVIipoW66MZHubdWpGzVu\/diAdrW0sb5BN9f9ZohTOEXcyqB0J+WoJ0H8gWFw\/IzJFCJnprgRbsMx+MiJ1IZz+7dueM7JBSDxV69RZkSEBoPc0k2RC9Ll58MfYAcEZqpkAaqH7HURZKgje+Mw3xkxaxBSpr77MthoAvKbb8Rsm\/7HxbsSiHNnRlRwTHurgpQ7gSU9UPiGz7UD3ExRwGZUee7zx+1lXRiTU+qsYBUVggJ68KbpGYJUoQNjMfaZWhvni+E\/eDt5k7vHP4m1sO9bLHIVP8tZC1FcdD3i\/3+n9uBFgWr9n6Gjw4ds1NckNd1RhVcNWKnSwC4te9chsvxH0Gfyz00DC+WFbYkiH1nH\/1OX50Y3WsarXbSDbIdRm4qTxNA6+w5B9OCpcBvSFbMd4pxIm3axyp5m9xdPl4wLTLVZ3j7\/OvDrIQBzKswqdLJNqZGHN4oy0oKBqByzF0niRXXUJYlXOcJVzqSO8n\/uQwnEjgFraOnOBDvn7hY8JzoR5oIvFKG218vhRq+N5GDwuaeFoi7AVBeyijvFt3fYV+LWRRkB3uZbzlKFu8qH8wgm\/Th4QOAfoakw7iKfo5wbsJkkPEQNX0W0u9hR5jV+yV3Vx2mOg\/YcF9KhVF+bBoCoDhtYTCisI5btMEdGZSE5mTVPGzXlaWseg\/3NK1TyyxUHyScPXRzhOHYUpUmf7yBKySISsVYwh384tbh9kuz07IW6hFuO0YjiEWyMgK43voz0T3OCkOCH7yudGXLcpqJfUz1iv4wmcgyGhUmNcELSQPOwuMIkL7aRjOXzapKEDZqsMCryOpaQAMxTXy4S\/emMljfmu4mebjHzKelPqYwp85EN7Icon38vfmq4QuxdsA2UKasksYEczHIUkvlgyIp15MA3HOn9qCKZH9l8KvspYdwqBcdA07y+SmjfIvupUuXbFtHsTkgbAb5AO\/gFQ9raagl+ygisKwqt5gsWoVJUfPI7hrSWateqbsUoesBIYvjVeBjKD3gi8f2z++m36er2S8QMD6ADZ\/Duz\/er5d1Qfo","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNggEAAfwYn1cCoAo6sEAK5DT3NDkebmmL5vQQDUBj6APS4AAChJALYjFI7lyK6YK0qJg0NrVcXVBpbjGj\/+irPOL\/G4xX\/KCsusxg0QhFkZaRJWgKENxsA1HdzDYDR\/BkRyDslzfT+gF\/OvCe7lcXChaK8BvP9vusDzzAv2A9H7GQevCM3SKN1vvTB8Uzn3\/KJnJO48O3pS1vibwocceyq6F2zhgUbLGBRc+B3HpKV4JPzoJI4VIpiqDAJ5e9f8hNiIF9NO2B9nO2HQR5l81U2kuwSbRH05Xpj6y8wl9iD9U9lbGhn\/V0VASFIvnnQNJfL2Y5TneQlwXS8WCrKykV5LcH4xe4QUJnegqJj7LO5lpRVinv3lK2Ssr08G6dXiuaAqfZwHd8491HLUHfm6HXonn313\/lTkz4hWWerTbcJxiHbRTgkCMme1DPMN0+IfksxKszpESieg+pNTVfaPc2aI4ErqShblm9yqxBL46zRCNEastU2T\/QyZvIo5sEd2OKakuwpgrQVGRZk00W3tvhTLtNp2qcOQBSahebDNh7W","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1ggUAAfwYpGsCoAo6sEAK5DT3NDkebm935vQQDUBj6ACtuAAAXAwMAMAAAAAAAAACe55IqroPLi9ozi6BaQ7gxzoJClUuZaum3HtCSKNe65Gcl6P1QxDBE6w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BVFHm5vdUBAf9GENAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChggkAAfwYpTsCoAo6sEAK5DT3NDkebnBL5vQRtUBD5logZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BVFHm5wSUBAf8mDaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gg0AAfwYpGMCoAo6sEAK5DT3NDkebnBL5vQRtUBj5ll6UAAAXAwMAMAAAAAAAAACf4b3CCev2a8ynWAr27JeZAqLWqw89iDSPZg1SOrz4MTMzhTKNU4vwvA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BVFHm5xHUBAf\/mCZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVghEAAfwYpD8CoAo6sEAK5DT3NDkebnEf5vQRtUBj5lo\/qAAAXAwMAOAAAAAAAAACgB7zWciB82IunkfxyLBO+ll53iUwVmIFo5WU9Zp1bXY5q04BkVuekAW0va3yAo281","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BVFHm5xHUBggAHG1AAAXAwMAOOAIO32NJwu7OSKEhqPaNvym5FIs2iNg57oybpi8pKI35phxud74ZHxd3F5WxiQ4e0PxDXn\/6ekB","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1ghUAAfwYpFsCoAo6sEAK5DT3NDkebnIT5vQRtUBj5lgTtAAAXAwMAMAAAAAAAAAChU9urfp832ajqzNHXN68QuIyh\/3S43+GmoGDlK152rPMhImzWRAJywg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BY5Hm5yEUBAf\/mAfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BY5Hm5y5UBAf\/l\/qAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BY5Hm5y5UBggANvWAAAXAwMAMOAIO32NJwu8p4yIu4B3hv7IOjwlBIlAMQz3LX7JW6jVVbqL9yO72dMRI\/eOQqjEtQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFghkAAfwYkUcCoAo6sEAK5DT3NDkebnLn5vQRtUBD5lsPzAAAXAwMGbwAAAAAAAACi+68Ldd2vfOttOG17HKCQapY37125NMxk\/vAoKNcWVeLdARBqm4NueFT+LD9MwD1GoUKs9y4R9h4Oo7J8IjJrE1ggeDCgxQwjww6cBUIJX3\/M1E3WBdnoslFrLxG7KtbupFsV\/c0l4xweayxXSMJ+qBclhD6s+3aWDi3I4AuLf5gF4Ft3sWBIcxn4QbGysPez5OoT5Sjm\/2XlaHUeRiDkgf9787ohF2Hab5Fe7K26LYmbdvrCGDozSDJHnZrHdNAkUFlNV0c7bllHN06uvnt6zEcupJcFMfJFbIsE1cvhH\/VKqeZEYnagGN+GQbr4RzRRRmg8tut6DcMe2FxdiKQkFa01us3lwLyhqq9znSNy52s1zv\/3lgyMsRwu+a+VLmP+m54KhQbgHXe6Wm5aR5\/xD4dzOed2Cy1\/esNiQ2T\/WOxPGW1jaLaE59VVX\/UaR36LUtaTFgWDFmnJYyU0HdrCaxWiGXAgE\/mxp8JUC6QrPUbUFGil9m1FLEnrLHiKJbkwnHgaPFZPh+miaTNg02UP5rVBw8EHr3GPePINnG7l3tBud\/eVU67bT9r58RqsIWstOkMDrFhmHn3SukhNLqIh57vfZAaLX9g4txUGnxPCVJS1gv17V0glE9ebc2ca8PRnhPXLfCpw\/JsKechtfyzD\/\/qEEekdJurHpgUTw682J1wRlenP1mq3L1bvKMNz4ZZBo6ADI\/ENbgzhmL4cGB5EV+Uut1c\/CtMFj0K0zRVV7AsrwpCkRT9RxCQiR8nFjz1b7C\/h1vq9FMRYH0IqjnfwQG+tXhP5WEHDk0C5atvJ9qSicc57klyufHbdzRY6qWQDJ3lu9Fq8KnuFPzy9b+5RRhaTO4wyRkjtZIjTtgT\/c4PAPPOeOeexddCNkqMCS3aQb69SHhExQt9LPCMsU+Vv10m2Y3a4AJ0CAGb5dt71Lmc8NHLLirXnX2cpdgnBZ+NODQ1VAfeRz0Fx\/Tphy2HxpPQGwj3fjjXxdEkd2b5BqhcZx+R65SeyubtT0kTq\/1h8rM5jHuNuKdNZdp98mAObYaqGkXbwUA8hPL96Gd+NDaKpZkz2czKGFfNVbnQswUYXYaDU5Ua\/fLLt+vKvJX84r7bRIkz7EqfO3N9P5cLUpsP+twjKOyOEoQK66RylnB\/6Qdt++4cMwZxrr\/5pQlUpGfPLc+H3hMXqWt5qhpjSera\/j5aWat8l\/n4zX4dSE4oZkFnw4\/0Q8M7da3a37XQ88RTVic3L7WSRjB2LbQtVQpcaEjsrgF3GRVzDPr0jbFn+Hra7RSmOd4PspBZn6XUv5UUx2FOohSw\/IyOC6kfsIYNNTQ4LJ3m38fmoNlZEiAW+Rohfd3XrGbiiauk\/hLlEDE1YCi2KGFP7WCxjwwnBOeIdevCJK7u2oDREHKtK5i3jKly3vcearpQMI4QT5gB96uiE\/vjyiZwNVosRfprtmD7\/JBH1Em+rAGaiRykfvtUapPPtl3GcP34\/KMJX0vrB2uNp6o7FqYpP+3zee2\/4ebeL92zXfqdxF49+yxFGeMPAb+OvNy8TXxbTxUogErhNsS0OvLR4bAgIwePg9ubWI\/V3KfUJz+6tZ6mSkZ\/ULPKFpG6W9uEsFXaoazfd6pqD1aeej8vZSqNIhkOQ2aAZmnBDksmqvotRnhKyz409Ku608C+tCX3WI\/PjHVDG","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BcNHm6MtUBAf9FlLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1giEAAfwYpE8CoAo6sEAK5DT3NDkeboy35vQRtUBj5ludmAAAXAwMAMAAAAAAAAACj4NJpMK89wiMKTZreS2W0jd9sM3sFfTQnO\/D0GdHvbrlFEESDr+z\/aA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BcNHm6NiUBAf\/lkMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BcNHm6NiUBggAD9gAAAXAwMAMOAIO32NJwu9DSEHtO4289mo6t3m6STTHAdizWpUj6q1J73mBVoihFgDbglhGJGVuw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFgiUAAfwYkTsCoAo6sEAK5DT3NDkebo2L5vQRtUBD5lih4AAAXAwMGbwAAAAAAAACkMYLiQubzStuD88YWy0Ne95LgQzmZG6rw\/KtVUaQepOz9451MicxsbJaWjb48boaAWT1TauQ51YrxEJ0R0DYmU6\/x1bXVyyEdai4ojSMgFGbz5ukosN0uumRZU5ztcCw3ukE899ec4xUQSQj6CMn4lLu1xD38Z72kHK6udGYLyD\/e4hmvjQXX15MmOCdw2LopAKdlcIhs3RhEUH3uJ+AYG2mrFLkEv1ubRFvMjnfK5gIpGjQLMNW1bGgkZ3IiPJYgOQh0TWCNlUfcZfZyobeUDRfs9ixbyubYyQv6GcuPkhGMbwJphqsu3B9cR\/K7XrijK1Ve4cJNZbnzxUzeufOtTe4cX\/uk20rCWjwkT5W182eR\/IgxhbmYcF2qY+C0Y8qQQvYWIoGECkRvUUzxXpPAez3Kc5jgbySuG9n\/Nay42M3X8dHPp7m01wYwPeJglxjLVM61Mceg27sMsyPNgZlbtqtEXdQ\/PUNthn6ElrvCSjHHMESxEQmbjhW1BTyMZHK3zRKbQ6f1uh0SZ\/SyNByvaxmcOwKeHB4BDSBByatVybuKjQcqN\/y\/7dMaf5IwpszQ+jxbw6qFtZHemQXHdiH97wwy+PHkOYtN840fETIEqnuMUsk2g0oFdw2MvWcTn+sJxpzFpypA7jxuwjVSTWJG0BM7XNMwKhYKMwjx+HSnezESKwbPiWVYOvG\/CME5Sxsfn42AGTdrVJV9lZPmEvFucmXudQg1Msa6OeGB2hXC8hgjs5j4mhNWLPiK9NpC6nHFwMoPdwcYSWZZn5Ft5X4LVI2utGDCF6hMylAk7tULtW1GsxJFHlGGyj3lszGshYn+dBf855ebxKT+m3mAbFxS6w0qAOrDj+8HHdVfYm\/wrz4EW8jiQ526szhEPUnvKXQrnD7kL5qIFOyHUnLVujYq9Nls9zRom5XnBpZS696VtzABGlUxqwhmr1a6KLsLRRTb4sk8uWHHZe6iCeeiuC9w9IHHSp37x8tqHJz2DQpPbKcZ2DbaCmtmVh4KXfA2RGvNHtje1S\/zOUxcVY7DHGsXgoC1qaQHjx5CUCYsnBp5Fnvzfwy627+tfIZzkc7EBGN6LBtgbsDYKVPMw3nlAsQ8lyoQ9QRufwGonUOxw1wvr\/ZDlvp0vtCb5cS\/+hOAT0LhDsrhMmgQzIcvRarFhgBa47cJh\/66MGV\/XmCbfB5ZvEHsjJFgOlbBWBJcivGZNkmSPJNI673DQxn1iIDH9hXGRsnKNedbwH4SeF1k5DX2UzeLTtwEt6LK11Y9tlMzNZZqb2Aj6dp6QpaX99n0AmlkLEX1wBKLYAV4Tq2WjLv83LavcEpkf\/+HCC6hBkoKlMfnV\/V6uEt6OkpjGP3nvXMxki7\/8bXOryu7BrFl0Tg+hvRzqii2Kz6id1dNwOHdiL8CBDAasxmQs\/gwj\/j03FLPty6iw71Le4xZZCZMkcGah+bcWQ5ObiskaQltj636+dqZ4DdT62JV9GKewC\/IyDiAEPGQCtMKYTmDybYwNK4ioM07pmO+6dDcoQx57PpkfOxNEaxN9Tb+O3R80AR9B5EbzKvGvq7G\/IRfaZW11ly2\/fzY2vzG6e4QzisdFXdgV0iEwMhp9tnsIA8cM9kaEwg8ldlAeznx\/NqIQu\/e3up2N6WJvCDiCURyC5grMVF9Wp1jljrxrryR\/qilxIce","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gi0AAfwYpEMCoAo6sEAK5DT3NDkebqdb5vQRtUBj5lqcdAAAXAwMAMAAAAAAAAAClkRvnk88+\/0rAKFLwEJCyQXyqfY+uoI+7ml2zzPg6gICWQTD70AZDAA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6nWUBAf9FJtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgjEAAfwYpRMCoAo6sEAK5DT3NDkebqgv5vQTfUBD5JHogAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6oLUBAf8lI6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gjUAAfwYpDsCoAo6sEAK5DT3NDkebqgv5vQTfUBj5JD3mAAAXAwMAMAAAAAAAAACm+dyNc8ruILLoFJvGXymh6DGfBReUWAVe2xPHR8MhhZ8UN++y8NdRIQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6pAUBAf\/lH5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gjkAAfwYpDcCoAo6sEAK5DT3NDkebqkD5vQTfUBj5JITWAAAXAwMAMAAAAAAAAACnzaCodT9fHxVxbb4T+BgoYiaSVsqQ2XSoA78KnB2rJzBbkL\/CiKI1cg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BfhHm6p1UBAf\/lHEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BfhHm6p1UBggAMpfAAAXAwMAOOAIO32NJwu+hSFlY5VBz8e+GnsBSqtv\/VK1W0PagEdnUyu+\/0Z3IZHGmmusvG+PhhEfKnnDrVre","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BjVHm6p1UBggAKiYAAAXAwMAMOAIO32NJwu\/5A4kuvGaPmLAPVspMTdjPP2+shLMwbsk1Hk7RZKVLRH5HZiLMh1EbA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gkUAAfwYpCsCoAo6sEAK5DT3NDkebsOn5vQTfUBj5JP9vAAAXAwMAMAAAAAAAAACpcvTXXkRs0gvpE28PyUvghktIMuUJfbQnuH\/ut9hpeamusaN9kpoU2A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BmpHm7DpUBAf9EroAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BmpHm7EeUBAf8kq1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BmpHm7EeUBggALJaAAAXAwMAOOAIO32NJwvAXFK3txcByGUmvB9TSPpa8CuDX1liQTdH6PhI+zIui55Os3HTEST2TNdahwQHcTB\/","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgkkAAfwYpPsCoAo6sEAK5DT3NDkebsR75vQVRUBD4snMNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gk0AAfwYpCMCoAo6sEAK5DT3NDkebsR75vQVRUBj4sngPAAAXAwMAMAAAAAAAAACqoMHVrqJglxPtWRclapJ5CUWB7UHyRgr4wc9mRBVmAIMh9aAl9O\/\/\/A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7FTUBAf\/ko3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7fHUBAf9EPNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0402{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":109,"pkt":"AgAAAEUAAGlglkAAfwYo+cCoAo6sEAK5DT3NDkebt8f5vQVRUBj4sid+AAAXAwMAPAAAAAAAAACs9uuhdz9V\/PGphjQSPejJb2xDTjYrwprVHvmxAhUJTjLJy\/CcG9\/826vm\/7Tjr2EPRvYg6Q==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7gIUBAf\/UODAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gl0AAfwYpBMCoAo6sEAK5DT3NDkebuAj5vQVRUBj4soD1AAAXAwMAMAAAAAAAAACt+DYlRw9YloW9I3a9bKMNV6DV0PTuKLyQp0+E+hRQD58YnLLLVZ7t+A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm7g9UBAf\/kNNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BqdHm76xUBAf9DzjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BqdHm76xUBggAH5hAAAXAwMAMOAIO32NJwvBJl1DJk6oIlmkJTwgBRRuw3qXkwNkDhU3GH9ksgciKuv1oEmyQfea+Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gmkAAfwYpAcCoAo6sEAK5DT3NDkebvrH5vQVRUBj4sjxBAAAXAwMAMAAAAAAAAACv+4jFjkml+\/Cm4qfXgC0yIO1iu1jBAsYmXuD4lPR2PfrCUdeGOIpkSw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BtxHm77mUBAf\/jxvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gm0AAfwYpAMCoAo6sEAK5DT3NDkebvub5vQVRUBj4sg7qAAAXAwMAMAAAAAAAAACwppLYAT7YzdcyUqFRRtlzfAzaAlYRXz5JEeu2Rv22FHqeFLDLFTljyQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BtxHm78bUBAf\/jw6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9BtxHm78bUBggAKLyAAAXAwMAOOAIO32NJwvCLr8DaUIs1vgEHIm+AC64aAk75LfYA21gO+IMQRkVFnMV9\/wm6QV8sQUqv6xx+V1w","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgnUAAfwYnuMCoAo6sEAK5DT3NDkebxBT5vQVRUBj4so\/hAAAJfW8hjNAqZLctxCNf0ozAcnJJLO9VKQvL205KFar5ie3COZdN4qSbm1s3a4gFDr5dzFR5H5eRzU9RhYhiVmcrxiodj0ygx04DwAfykLv4KyDyzxr062VVT3tTynymKZ3FRfuFboLlyL3tex7S11k+1z3nzFmaxcfy4HwKJ9KGrwwUGmgguzE3XJUyNnoKqsdMeIS+AiAqxdb+CWwwAYLELFgaNrA\/G4puTUTX++e+6XeamQEc8Rcx90si+i9r5LCLySzOYccl8wyNBLUKi3vMnjR6EAlLqK43raYh5Ea9qESKU7IkamFvSx6clvRHZyulXWoprMoJR6EhTYhn1HiHpO92eWUPFD0w374ocKh54Tlj0xJ6rRwAWVRbvo+b84hXxzFZdUeAeLi29lEHwtAt0GpesdUnSkjTjWn939MRPLkbFFDFz3KcWjB6u4w15yKuztZcw2iPzi6F485a0Um5codp\/svv47XYUNlHeKMzTz24zJz96HxsZRrY","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BxlHm8WPUBAf9DWTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gnkAAfwYo\/cCoAo6sEAK5DT3NDkebxY\/5vQVRUBj4sta\/AAAXAwMAMAAAAAAAAACycpPdf6BMXHQwEHbV58Ru9tHe9nAE7X\/NQgvMYLbuxXM9kqcH5w6tlA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9BxlHm8XEUBAf\/jVUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9BxlHm8XEUBggAKygAAAXAwMAMOAIO32NJwvDVSQyIbKjl1s7C47\/4tlX3S+xUFsjEVqEReGNITo3sBL7Av5JjwajhA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgoEAAfwYntcCoAo6sEAK5DT3NDkebyr35vQVRUBj4ssDcAAC5sHdMJ+fNEYlqtBmJNEmnUsXS+MEF1OxbwfichzCjEcUa28GFs7etR8AOnaeKuBPdI11556KlKFeElEIkKbp+sk1bNQL6Aws0PqXHIHMPylo3dFDxNk8mrmL3Uf1KXjrwkzSDgVTLzK1Gavg6z6wue91q+QYZgoPBYB+sSIc9936\/7p00hDBAWP9+CvK8Nl\/q47GGMwjq9PKi0vzCte\/aJVSFh70e+\/u8b8O2Nb9FhlLHpcuQ5tcJZUXRM+7Sxq7JB1Tl2rpQrWqSa4D8Iwj4mCB\/16mFr8PFi1CZefU4iuyufjMobJ2HxlY8hk3WKxbHSzigaOv4cDANl2QMxAgIXIT2YKHA3EG3caYiHed98Sw7SkbmvE00\/HwRIS6tLbpKhPnI1rsdug4\/sMXmQPHjWV9hlGkG6zz\/SqIAqYB7udrUpBDRMfyceSlLrVhTlbdEskfvb8Lanc8xr9sQCRNGdLDxM2PVYkdTjL6\/d4l8\/HGGtPa3xYkVyA8x","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B05Hm8w4UBAfzC7dAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1goUAAfwYo+sCoAo6sEAK5DT3NDkebzDj5vQVRUBj4suFGAAAXAwMAMAAAAAAAAAC0HN+UDrzcubOXURlXm8DtqH1W8Hwn9Mw+FJ4tDtsJU6ctV2Db9Ii0yA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B05Hm8xtUBAf\/i52AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgokAAfwYpLsCoAo6sEAK5DT3NDkebzG35vQXDUBD4QFe+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1go0AAfwYo+MCoAo6sEAK5DT3NDkebzG35vQX4UBj4CzKxAAAXAwMAMAAAAAAAAAC1bEjydpiGPOxlxFEIpi4mD4GJClSZM4quTaIBd8IQLZYAHCcKcd6NZA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B05Hm8yiUBAf\/i5BAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9B05Hm8yiUBggAHBcAAAXAwMAOOAIO32NJwvEd4nqbnpietHS2CtvrWN0Exk09ksCVYSBczjuAeK4DHqn79D8z0GMRWylxXDrJ5aY","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B4tHm9MWUBAf9CeaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gpkAAfwYo9cCoAo6sEAK5DT3NDkeb0xb5vQX4UBj4CzPXAAAXAwMAMAAAAAAAAAC3otIL+HIiLRJu1is2qfqKFYBzFGSRICt9uT0yCzqO9YnzQqeMMPSoZQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B4tHm9NLUBAf\/idbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9B4tHm9NLUBggAEKxAAAXAwMAMOAIO32NJwvFzFb+0zW3nOKdXmzJuJV3g1LO2QStJQAA68fZdOAtLDiVkRMIRBFD2w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgqEAAfwYnrcCoAo6sEAK5DT3NDkeb2ET5vQX4UBj4C2c8AADHJRvckMcYIFD33pf+UETZCpIn6hXcYqymVBQvO9\/clEQfPhbAcS1wkwZDja9Jt1runBk6gMRCckSJq9HzXrjnM93E9K439\/tsoUt+WrmNMzhsV3YWD5gq7h0gGUAC2zZlWUF2MX1a\/Qiwx4BgWQBymgprWGUWxwYbOpHsdRNw1iN8fT\/Vrd5KrYEHjWqVYV\/H1DwBBWo78eYxaJ\/MaMCDrE7Hg2eNI+qBo2I\/ndJwW4a4VfP7IaXJuAFdYMDfrTP8IIa5Nq2iLlE5JCkGLHQizB0kdRDPeonTDuBI4cr6KiNRVRQaytAihRF6MXv+0V9FqEbqz6qTrnLesA\/bDT5ocScisMH\/\/5+VgG8r2u2QVQi1xL8yG8YHCpUzQx0zvQO43qcVBQVu\/LOGAGvoA4jM\/rsEAMMj\/h6Uz5W\/PekyVrcMWzbm58F5OCKaAwDOZnZEgBrIpl6TpnY+2x2QBbYH3gVEkQ2XjReAVmWG5begUcpBwP34GVvnv1l\/","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gqUAAfwYo8sCoAo6sEAK5DT3NDkeb2b\/5vQX4UBj4Cz4OAAAXAwMAMAAAAAAAAAC5ReDVYUktIIkaczWvjB6+rFk9rvalW6qj5HnHR6GLovfRt2acCvVxYQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B8BHm9m\/UBAf9CC8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgqkAAfwYpJsCoAo6sEAK5DT3NDkeb2fT5vQZqUBD3mUo3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B8BHm9n0UBAf8iCJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gq0AAfwYo8MCoAo6sEAK5DT3NDkeb2fT5vQZqUBj3mW9OAAAXAwMAMAAAAAAAAAC6sEvREfu+LJew+SaDfwI\/8a6n8cyiCh0H5k7bNCSQDF5wiRuGvoTLJQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B8BHm9opUBAf\/iBIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9B8BHm9opUBggALeoAAAXAwMAOOAIO32NJwvGxT\/8vJJjREeclKSQQIZ9CRAODC5Opvaycj7Feg4CJzpGTNWkHE4pFqppKFsmlOAM","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B\/1Hm+CdUBAf9BmhAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1grkAAfwYo7cCoAo6sEAK5DT3NDkeb4J35vQZqUBj3mYDNAAAXAwMAMAAAAAAAAAC8iSggEW8MPMxZlOWw4WLMXub\/ExAK1vhckVWxOHG\/RgvofRAoa3rh5g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9B\/1Hm+DSUBAf\/hliAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9B\/1Hm+DSUBggAGdsAAAXAwMAOOAIO32NJwvH7TIqKsRW0FWybXsGG8C2idMsN4SbTBaBemfDv9trus1AFnl6j5kX7qe7jBcHqB2w","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgr0AAfwYpIcCoAo6sEAK5DT3NDkeb4NL5vQbcUBD3J0NZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgsEAAfwYpIMCoAo6sEAK5DT3NDkeb4NL5vQdOUBD2tUNZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gsUAAfwYo6sCoAo6sEAK5DT3NDkeb4NL5vQdOUBj2tXdFAAAXAwMAMAAAAAAAAAC9U5bHDSK5zhzrKX0px10wbfYy3cILQI\/WDyyV9xYDS+4yBDZSHNlr2w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CDpHm+EHUBAf\/hjwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gskAAfwYo6cCoAo6sEAK5DT3NDkeb4Qf5vQdOUBj2tWApAAAXAwMAMAAAAAAAAAC+xDjbuTZqQkdonP0vr48y+XKq0irVC6Yq1fu6FkP3XhE0YXOPGzejkg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CDpHm+E8UBAf\/hi7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CDpHm+ewUBAf9BJRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CDpHm+ewUBggAA9NAAAXAwMAMOAIO32NJwvIt9wl9W4ZmXjAZI88yIB4+ya9ZGTEYMZ6c+xXO7tK0N3fjWppYBB1bA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CG9Hm+4kUBAf9AuoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gt0AAfwYo5MCoAo6sEAK5DT3NDkeb7iT5vQdOUBj2teq\/AAAXAwMAMAAAAAAAAADB3OzHsjDASdcsQSZ3nNTcNCC8myFINRAOJvhQPdhWb31ZcoQ7TFIeHA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CG9Hm+5ZUBAf\/gtpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1guEAAfwYo48CoAo6sEAK5DT3NDkeb7ln5vQdOUBj2tb83AAAXAwMAMAAAAAAAAADCzVH6oih+bTl0h2dyEbpQ\/h5wd\/lJTOAvJUzbvvCdhpYquaS26T\/MNg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CG9Hm+6OUBAf\/gs0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CG9Hm+6OUBggAMNgAAAXAwMAOOAIO32NJwvJ+E6Sh2WtPnzmv2RFtdRz5G+V1pi4KJ4Ilzh97YitjDL1mfxhVXdABnMV35nEjcuj","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1guUAAfwYo4sCoAo6sEAK5DT3NDkeb7o75vQdOUBj2tY9jAAAXAwMAMAAAAAAAAADDHNOghYDKaSH4vMKE4cBhrw3PiksnQjpeM5bq97rJS\/GjgLXXlW1E2A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CKxHm+7DUBAf\/grCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CKxHm\/O8UBggAAuVAAAXAwMAMOAIO32NJwvKpuUPN6g\/KSfc4sfhT5wN\/sxzZJynmNbgY6\/SV3IHIMZdCe+sTrKfjg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/U3UBAf9AQjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/urUBAf9P2uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gvkAAfwYo3cCoAo6sEAK5DT3NDkeb+6v5vQdOUBj2tVfaAAAXAwMAMAAAAAAAAADGVIe3vr8nN\/IhseUSsqpbtCM8HWh+COG7DLsIAP2Obrg4BGV1KtdigQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgv0AAfwYpEcCoAo6sEAK5DT3NDkeb++D5vQfAUBD2QyhLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/vgUBAf\/v1vAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gwEAAfwYo28CoAo6sEAK5DT3NDkeb++D5vQfAUBj2Q9noAAAXAwMAMAAAAAAAAADH9nMDKp3+9P7+nTxL3TCo7u92vIv1H8athyvFqmXey83FA9LYHkA3KQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9COFHm\/wVUBAf\/v06AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gwUAAfwYo2sCoAo6sEAK5DT3NDkeb\/BX5vQfAUBj2Qx11AAAXAwMAMAAAAAAAAADI+wbQHXVvk\/b+6L\/6A+jOapSP7eQw\/V0tCDIWKS1yn+j9VDihYF9njA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9COFHm\/wVUBggANb2AAAXAwMAOOAIO32NJwvLNIKXRqu+BnEhb1\/LuOkB1DRdUX7SSUhs+IPGr3TkyD\/ALFvwHm9SEFxU5ODeEkKc","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CR5Hm\/xKUBAf\/vzIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CR5Hm\/xKUBggAByxAAAXAwMAMOAIO32NJwvMwS6tMm72Tq1l06ZI60Le8Fd8MQiJUIISiGFKxGKMRZmEx\/18Bz6GEQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CVNHnAK+UBAf9PYpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CVNHnAkyUBAf9O+1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gxkAAfwYo1cCoAo6sEAK5DT3NDkecCTL5vQfAUBj2Q2uJAAAXAwMAMAAAAAAAAADL7h659aOGbjI2Q40pIiruDhnoqr\/M83r7D3Xnilu1HA4hFk3R4i7UtQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CVNHnAlnUBAf8u+CAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CVNHnAlnUBggAP2uAAAXAwMAOOAIO32NJwvN49vNRzRWZyIwTpWetz+uzmn0T85YmyJOMMwHeo9zenK6y7fK3BdYWB\/sRyr9Uc5F","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgx0AAfwYpCcCoAo6sEAK5DT3NDkecCWf5vQg6UBD1yRrEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChgyEAAfwYpCMCoAo6sEAK5DT3NDkecCWf5vQjhUBD1IhrEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gyUAAfwYo0sCoAo6sEAK5DT3NDkecCWf5vQjhUBj1In3RAAAXAwMAMAAAAAAAAADMIFAU\/dBHu\/m155JRNRCOisrMKrsGr3WwluEASfNvw1SScUiXw5KFsQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CZBHnAmcUBAf\/u8EAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVgykAAfwYoycCoAo6sEAK5DT3NDkecCZz5vQjhUBj1Ik1+AAAXAwMAOAAAAAAAAADN1\/ogaWMl+Lg3qHOxGtgXqx+qc5nnU3OQBitss0RuHhznCFDEUe2ZxH0kJ+jXLDJF","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1gy0AAfwYo0MCoAo6sEAK5DT3NDkecCdn5vQjhUBj1IvVTAAAXAwMAMAAAAAAAAADOodFM2l8JV8GHT6e68pBDTtW5y4zeR3GesALvHEJHitSJRWbgHZxHgg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CZBHnAnZUBAf\/u7HAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CZBHnAoOUBAf\/u6SAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CZBHnAoOUBggAH8kAAAXAwMAMOAIO32NJwvOfZec6KoMK2eDll2WkfnLkCBpBGf6E33X0OAv7YRl\/pMiDTr+J0KkLQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgzUAAfwYniMCoAo6sEAK5DT3NDkecDwf5vQjhUBj1IvERAACxaAquaIzREGRpx0VInSNvRpRGwk2tm7Tj20GH5ur5dJIpLq27ZNwkT+REVnJCJN7f7mRlNlYQbTzX8z7DcdXNp\/vTvYyyVLiYasKjz979mRoBvmiM9huV0V+pSBSwH4K6aWFvtaKRnCGiWre0nDsJ6lVWD+Gw0wuNHa\/OGHIOzY2e9qL\/lyrzDZ03QOO\/G4yj8KDbDLl5bhfeGPlh3f5Kuwm8PHB6g0wPgW8fUd8DYBUg3EXsHrk73YVjDpzlV6L2pfZSnv282oDB3JGbjIrBG+wBfeY9UrfzbI6uK\/BwI6dmvhEAaAEw8Ygy0chHgqQOYn49eZxccDPk1KDQC6X9yLOz804g9w+uBBWyHpWTsgaxLT2j4U1rGZp0uqQmAfAv2C1xE7j41a219sdD\/9XM4DU0eM\/33K47n7LqYCnkWLYHt+yw4OS5J8TJliDt7NTJlJquhbg2j7PjPqv0erwfZBuFxswipP\/fyybIgimUi\/S\/NOnjyVF58rrS","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CcVHnBCCUBAf9OfzAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNgz0AAfwYnhsCoAo6sEAK5DT3NDkecFXv5vQjhUBj1IvWzAACY\/17vboLUGHKcCBDVqvw0aWHdquoJhofOQoKYbjgnIhOqIUswBv0jIO1y8c9TUwVNysIeAssiNp3HtzRQFybx2IOHywxERe\/MfRPkuGyXrcmirdql5+o3LnCJFOo\/+rvIk2cBg3T0vGKGscmVXteom8k1B6Ixk4Q3lNtdPDFLBksucopjkRPnToJjUPNO5KyCeAhexN8TYSqyLMV2fnKBZW\/MCpQs+unvsJmChyPeGYdb2KBLcN00TqTFEdBLQoQkqck0RPLezU7HzpBDiqPQcOqD5MbMlcDitHhL14PPAQCs3XcmES\/RnJmOwqlKZhQRba6kAT4+G6JcfSQgeK2NgcvT7ikrOWYlI5NEzXvRukdRNIGa2R61N9GKSWpP3u0GwxNggEYvf239Z4BGqxGpGDhy+IFC5cCGbU8yNHas6akuQr6T+NnLgwrXP5evqi47QCkYKRaWF1hjw0hLfhSpkAaaz0L4vKHZJeX4ct8j\/NHouqOKbWeKYQoc","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CcVHnBb2UBAf9OF\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g0EAAfwYoy8CoAo6sEAK5DT3NDkecFvb5vQjhUBj1IpGiAAAXAwMAMAAAAAAAAADRJ7Q+JV5dj9sjVlsZ8z2U8CTac6Igx1cM6Rfx\/J0T8KANY6tZ3qbmMg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CcVHnBcrUBAf\/uFAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g0UAAfwYoysCoAo6sEAK5DT3NDkecFyv5vQjhUBj1IlNjAAAXAwMAMAAAAAAAAADSLcYGXqJ6Hav7qmDO6Oxtpqfo+ysVuzEIRHPR8tDQaUJbVqqH6jeJ3w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CcVHnBcrUBggAGOgAAAXAwMAOOAIO32NJwvPhzIwtTSZWQL7xCMDoLOSitTeTYA+aWge5vdtvi1a\/DsIvENjXf6Kn9QdiFRMgOVB","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g0kAAfwYoycCoAo6sEAK5DT3NDkecF2D5vQjhUBj1IpdBAAAXAwMAMAAAAAAAAADTEBgRZXwszOBE6uMxPm1c\/nAJMY6NLguSfzvrBCDy47PBjVQjKKQysg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CgJHnBdgUBAf\/uDOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CgJHnBdgUBAgAODMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0814{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CgJHnBeVUBAf\/uCZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CgJHnByOUBgf2HrWAAAXAwMAMOAIO32NJwvQLTODXZ0xh8miVEsLp2Pdk1\/wNyGxNW1G7rLb6mAHKwDCCrinUhTbuw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CjdHnB4JUBAf9Nn6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFg1UAAfwYkAsCoAo6sEAK5DT3NDkecHgn5vQjhUBD1ItESAAAXAwMGbwAAAAAAAADVrd0PtMbrq1S4tQH2NNx3kIHf7vkyt2rivKCBJ7z\/wPQGb0NRgYdlK1DY\/Gb+ZMsmxt8FesDlV50MdTHGDfW2N3IvkUzfbb0zqxvOZEC2EfA1q0Nrgmm6RlrsEK1imdb9kQr+CKTVCK7V+FgJAHHDO7UzmPpZYfTJ4Qx1zNGbBvGFh+Q9MmEutxRxdtXVBbaSnRKIeNQVvS8BC3eRfJt1qhlsljGQknbQnBP12u0WuNrzyHkur6GB4yZn+maj9AmQEdgcfoLOdCSc0+fj+RN707yE6mzzGKWsfTk5r1nq8dtLHnl3jD46xmyO8HPns2ybn7vrXpuEmZ2yLGYIeK5BKsHV8weySfyntrz806VfD9TJygW+mKIHW1RO1xXFYUM1NGUAYOYbFCNGe6hBjVQDPdr22upWbk7dTA70ESTlHRZtoarFQCc5ITxR2eOPh6litI8Vg1fS0SyrgdeThGj7VFF\/9LIIlGLsSBZ0PcovbJOtg38XSdV8hthUeswlxXs+6fUHrUpAAeI0azZqzmNlFTzmbfzegDqWaZr1bZKgOiny0LMZvakU04uebfWxQlCSak7wEBYk9hZInG1fccqjXgZLhf\/7+BMhVvYy9KjOnchnS4odtDVs9BIU8emgr8Vq8koYAPGunsOXBFl7NouCy69EIYhXK4zs4rxYcrEz6kZ3FW1QUJA24hVm2WeQtwnl0lCTHPE+RlHID9\/141tnnwgkQDVlvk9TiQ3GzPaHOa6hnYlO9czM\/Q0BkbNPVPjzDStGk6eymqOO3YzTLQ6aZLzgu65inlSwbjhHeMbu3E0270trGi0P4yXb0uoMB6GDV5Xq\/sFmrcIdlyOLINpAzOOetKWQ4669\/k7IXDYU2nfZ0A1vswnpdxay3R6+GgRmRftrybU4qImzL4Bot0VbcAzBk68glXLcYk81Sgrp0hw\/cQgk5A7fpfzYuX+KGGnbJ2gNm5BCju9JI1+yN5pZBnpZZfa4r86t7vQe29L6bRAqxyo1ocNw0aTUE\/Gx41PYQMYPMAki1DEblPgwHie8SZloUZaYij7UJo54cy3jGnbZ16BKTvf3du5waENyG8Aw2GinWaHplQ1oSjO\/2iat6Iedr2B0ca2E\/xq8\/X2muMjXMTzsT7U2KWGkYphYsYjZs5wBz0NvsrAOqFLhU\/PWmyAToZTv6sQ6VrVY4qDo\/qheiDXvxoXZ3EdpRJZxJi9547fjrbVG0USvh\/qf34T7Rfql6ixRhA7goMetGF\/3kdXbP\/MO+73q+Ol9XBgAMlXcfWehWNRdD8Jmc4ZjycmZe+m\/Z\/eNqajdcUKzu\/1gKCGwhehm95ZnN+DXu64809fEelxkKE6s2WIGyQnl4ytj6\/\/DNvK2SWGNr2PfyXlHcuXNYinRWAY1JYgI2gbYZZMGI+k9PW4CPkeHbgFVviAZ\/RS7W2Ul+uOjHGvUVhkjySv7bhs4gSi7jGEVIOFF3SO8TQmJRkkqMzuEik6EhiUnT+f+dtD1Cr65k9UGI38CeFWUDLVn\/Ffczd5Gv\/McfclobWdwm\/dvqGFlUS9yrA5Hr4732aXF4ROwYle+Jy5NQMNBQG0PLaNhkO5ONVWO3os3b8v41T\/8DphNjt8b3BlZzDYlZ0e21HIhUepNDVTNAuXj7GuY4SLcLLzM04WVtXEwXQ5Je1O8S+cY5hKB","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNg1kAAfwYnf8CoAo6sEAK5DT3NDkecIwL5vQjhUBj1IqwiAACQgcIuEfoCQP6Rh0T7CepDp7G25O1Ru4I\/MDaIj1p0NA7WZihop8X+kRCH\/sn875jbJiyzlacipahRmrKljib396sLHvsa3Ailzv\/XI7w8ThJPORZZs8sXtpkn93Csl1izLZ5PddevJ\/bLosmWBtYYoRSHHiGGObKsXGqn2K\/V+qAOWBW4kSNatRzUknquX\/glLf7tpmEOZedsbXLxbrlC+vn2ZP1233XOap5qcrm772s8HUPXpa087Sx+q3Gi8iLRqtDJYfa7wmBUgrUlCY5yUi7REzG80miYcv5sZNt+gRItjONeavW8\/rH7WVNVwxwe8538kql2K7tESmsPE\/h2FFenMVknWi1iSJ2CkUsOQaxOLPt1mWua\/77kMoZOKJ+H5FKsG0uAx176lHoEQ4sAwik1E2S56sbMB2kL1O5xoOic709pM3l9h7jjw++bP7FFpeTCCVb\/Q2bGGnmvPEpyDM+n2iUfhqK\/cb\/s5+ZdvJxgfD1gzXC7\/Cxy","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CjdHnCR9UBAf9NOGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g10AAfwYoxMCoAo6sEAK5DT3NDkecJH35vQjhUBj1Isq2AAAXAwMAMAAAAAAAAADWad7lB0ggKhPz5cCNh6vSWiE3LZD+vFYlWb7Tbhix2EP4RSsBKtzWkQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CjdHnCSyUBAf\/tNHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChg2EAAfwYo+MCoAo6sEAK5DT3NDkecJLL5vQkeUBD6APpdAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CjdHnCSyUBggAC12AAAXAwMAOOAIO32NJwvRQR4qDNkS1VspfiQsPr80C3SdjMgQo1L3cxZ+k1gj+Xb3ofKgA1DY1UygsiUqjWDG","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChg2UAAfwYo98CoAo6sEAK5DT3NDkecJLL5vQlTUBD5y\/pdAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g2kAAfwYowcCoAo6sEAK5DT3NDkecJLL5vQlTUBj5y3WsAAAXAwMAMAAAAAAAAADXe1NkJJWJojsNJKdj2qNZ8LDHmHpXktoVKpJSz4mZYxRt9PNeBhcjpg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCTnUBAf\/tLVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVg20AAfwYouMCoAo6sEAK5DT3NDkecJOf5vQlTUBj5yxezAAAXAwMAOAAAAAAAAADYgLwz\/TzbXyCrYlErletVQs3VoLWy8jYbmmc3O+KK3kTXtB9KtlWCuHIWtbTolMnN","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCUkUBAf\/tKYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g3EAAfwYov8CoAo6sEAK5DT3NDkecJST5vQlTUBj5y74nAAAXAwMAMAAAAAAAAADZDNgXmuU7zUn56UYLckW+6AywC\/Bz45s6XY2rPQTCfgTFI\/21bXVXXg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCVZUBAf\/tJjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CnRHnCvNUBAf9Mv5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CnRHnCvNUBggANURAAAXAwMAMOAIO32NJwvSpDjg1lAYCeWZl\/5HDXk7i7Qm+turRqsHXlboQ6Fl2Q0VP+wDPDgjYg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CqlHnDJBUBAf9MVQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g4UAAfwYousCoAo6sEAK5DT3NDkecMkH5vQlTUBj5y9+dAAAXAwMAMAAAAAAAAADc0\/jfrep8mW18l8DPhSZudwhYnLGUwE2QjXN7HIInvqALoN7K19P0Xg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CqlHnDJ2UBAf8sUdAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CqlHnDJ2UBggAOKmAAAXAwMAOOAIO32NJwvTRFFZwujbYAwmAd9act6\/iibCjJaoKyu\/a5gdgwM\/S01H5wLUskMoftgedrt8Uv24","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChg4kAAfwYo7sCoAo6sEAK5DT3NDkecMnb5vQnFUBD5WeyZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChg40AAfwYo7cCoAo6sEAK5DT3NDkecMnb5vQo3UBD45+yZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g5EAAfwYot8CoAo6sEAK5DT3NDkecMnb5vQo3UBj45yG8AAAXAwMAMAAAAAAAAADd6M3uep4Ief9oOi8Cvh1SWK4cTJ+aVC9S4GLQB+oysybd+E+FotEjKQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CuZHnDKrUBAf\/sSfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g5UAAfwYotsCoAo6sEAK5DT3NDkecMqv5vQo3UBj458sXAAAXAwMAMAAAAAAAAADeYd0+3hOqgodBn6c2HXweUn+VSxJ8yBWT+26tiSqaGYTbAtWVduo+yg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CuZHnDLgUBAf\/sRqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CuZHnDlUUBAf9L4AAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9CuZHnDlUUBgf9MtKAAAXAwMAMOAIO32NJwvUiyWEj2KTHi0a5C1s17tjJIEWNmYKcgJsB+Bclj\/eTDQSJD2hJwKB1Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CxtHnD\/IUBAf9LdXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g6kAAfwYoscCoAo6sEAK5DT3NDkecP8j5vQo3UBj453JNAAAXAwMAMAAAAAAAAADhOMa\/7oyPex7KOU0Rc6gw5JtsmFYgRfcXP6SRLlH50RaUAxNPTy\/HgQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CxtHnD\/9UBAf\/rcYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g60AAfwYosMCoAo6sEAK5DT3NDkecP\/35vQo3UBj453aGAAAXAwMAMAAAAAAAAADiVj+ncI6\/6aaHjXlcDZMAPhbBz6eO2uFkHRiwylDFk39E1fc1SJ848A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9CxtHnEAyUBAf\/rbjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g7EAAfwYor8CoAo6sEAK5DT3NDkecQDL5vQo3UBj451exAAAXAwMAMAAAAAAAAADj2ITkIA+YKeVhhGHmrUa0vM5BkNk1qYVXn95G6HRK5ANPUpJfNcpfGw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9CxtHnEAyUBggAM2SAAAXAwMAOOAIO32NJwvVHz7+GeNlv6+kVhWwQbF8wG+8FMbl0AqY3HNWOwCQk5XAB7dwC\/3CxDpsWQ1wsZMI","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C1hHnEBnUBAf\/rZxAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFg7UAAfwYj6sCoAo6sEAK5DT3NDkecQGf5vQo3UBD459DVAAAXAwMGbwAAAAAAAADkf55lGltxJl4xw21\/bnRlpi7cfgThc3Dt1L+ZS\/oU162FKrHuD1Vs\/qGBDX20\/vcftfYkHEhOEr7CMCrO3\/F5hXAgpd0dYNRI5XNWzE0ezqwT0x682ud\/26o4Ea5B50ytAna7fw9Itsesw\/OJIWo7PsP0qH9mLEuDKSD3GHyLaWy1egbfoe2CvmvhTujIsHFOMegsXIHdx3NSKK\/IN3kykIRHFW0ShF4ajLwVPUS6cn0VypGh2vpIRwJr16OzmUBjZH4P8ggbxrM\/3qJSkA3kE6nCzbN9ID\/JE+BmUNybpTPH27GuewppsrV17+DaARdMnUfVkwtObuFolWQaTMWRBGSF4wNxvMFWrrF+cwuCb9txZFp2saORLG6Hpxc0YFnQ7qwe9llNF1oMBDUy8C7JwbFxGY3T1QduRGR8YnVEnMv\/TI8SVgpaLZIErnY7OsXOS7xl8bIsAqLBkXSvPsy\/SR5eLxYYXOsXwmC7NTf3CjqekGgkrWi5MCmkGntIKbIX8p3eZNxpeQZjkpl9lP9d03yOQgE59gH2qqNQCC5REOslxRNQAc1o7sUn9EiIuwWQtkTFNGxXo6C1dtYx1fZ0ZL9Q54kKRRawzKVI4+\/aDVlOsfpAsmhXuWNIIxDPsJjgHWRBLH5TQIOGdMBltYPUtwlQ5ggSXqjagTWBVYjQWQf2eUMKwZv0lvEFTZi8nxW7adwB0NA2uajdu5+iGFYx58Ix0zrTu7JgdX3bONDmelgay+LtxFgjPu7h8qC3ICWCwLhIq44jOLuZ4XWEVACz1oOSu3Jcm6tQQfA60RCIvEUVY2RkP0jA7C79E6hgvz04IGL154MR0wVwwbJcEOd2J\/ou\/X6ik\/U3Ysm0r6wQiJov6g4IIucWnXGH5yVr\/gy4jaTEpbNqkixy2iXtFhIYl\/EuWHKkLjiMGgT321o4PCmfXVvPnkfqSGx8NR50cxkPcLKiGF3ue2FJHD8A6xq8Zu0qiLmaORseu8TfTVEskUy1\/9YJy14stID4nvqznm\/7uKjj3JibYCUpZCeyq6ess6HDc8uujQvaY2nRyTThDN8xvNzAzgRp\/MRSR6raVWtD13JNsnwwxMS43aU5qeBs78g8oQ8LCFELBuqjGt4hXXgcXPkg7AlmVcCzkTxLFK7v3a2uPgzRpFxbDASPUHn4Bwh1xSaZe0g6L\/wsbXAJzKw4Zow1BDRV2T8YibcxVIDgicMdW+2Uuw8FnlbOdmX4uK6iG91grIB5SBtSUpowd\/X36gekkD7yyf96+F1iO4M8UVKNx4bNsKcj9WOB3+LivlEcL\/Wbb1Wp95DDEviM\/xI5g7mFaxV0tTxxr+zwwlq+umork80OGt2qowDX5pm2V4oHMwtcZn7uRdS3zVV3pCg\/cnt5GKZYOZaj4\/OirGrqDF5exzSqIN3pjclt72zgs+oQsFCQFqDRoGlU1iMIAxfrn5uhGAp3FDpo9BLB84s2Ze73Pebn3gwD6GlDYoaq3BiQ+\/bdbXPZE4b\/1T1MuFiFWaJ5K3erFPjBZrPFTeqPO6ZTHKUixrKFiF7VlKk2mqWQCeswT4A621ZRB\/EkBnh0wSGF\/MMaY0L5UlEwhZLJ64I2HtqUgHRU3g8VX6Z4m80128aShpp1Hn83h+jS1xjSNb4sND0R6RE5mdRclT3VVjuII8sIn8Pdv+F3","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9C1hHnEBnUBggAIS5AAAXAwMAMOAIO32NJwvWw+1ngZ8MAabPW\/8b+L+Qow8u9KStSxO\/qZ56ME9CU1YY2yIFjyZIGg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnEbbUBAf9K\/SAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g8UAAfwYoqsCoAo6sEAK5DT3NDkecTU\/5vQo3UBj451qmAAAXAwMAMAAAAAAAAADmOFKculZSdfl8RGFr\/EZJECBBDF3uAdjRY285Ot1mTPncCMbYBYOyBg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnE1PUBAfzKmGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChg8kAAfwYo3sCoAo6sEAK5DT3NDkecTYT5vQqpUBD4ddGLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnE2EUBAf\/qkfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g80AAfwYoqMCoAo6sEAK5DT3NDkecTYT5vQqpUBj4daMgAAAXAwMAMAAAAAAAAADnMaLHu4kN27Ob3Zq\/wTQaLVxoRxUxtKGb4d7XiUpt5YYBDpiA\/nLBsg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C41HnE25UBAf\/qjqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g9EAAfwYop8CoAo6sEAK5DT3NDkecTbn5vQqpUBj4dYHLAAAXAwMAMAAAAAAAAADoUYTlick1EBs8F2US54R\/rhVvxa+FZRdTDkVSQLo\/OTz36DHKRNv2+Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9C41HnE25UBggAME7AAAXAwMAOOAIO32NJwvX9iBqKv4VqLB00LjCNVHm2L2kf5G2y5uFB2gfk3qaEahOzwcYN13Us0s72ryLIQlq","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C8pHnE3uUBAf\/qh4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9C8pHnE3uUBggAD7yAAAXAwMAMOAIO32NJwvYMysiGsafpOik6qc2LD99MOd8SG1PW\/1uYW\/wXJo737iznweRRe6Ppg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNg9kAAfwYnX8CoAo6sEAK5DT3NDkecUuf5vQqpUBj4dQdjAABMyV5nbLCGg5MnE0d4NrdJbvix0D7sr3CNQC7dB2SlUfsoUNFb64RthTebmEy528NhTlW8fYAMljG79ku8fP\/xx877uVT6IEnd4I4vcn4neP21KYzzg7h77J+J8pUNRDUdgaPIazXQJxpWl1dsIuTYdazpOhlhYZ6DmUdguoRVDb678lLu2SkwsNyBIJcvuc7yww1bamOxcd72pe+PaCJCiYATgfEg8KHYPNbyCkOGLaYPgBaxSkxzasZgvfJqx\/2OM6g7jkBBfp7VFPjBhNyb\/y6KztpEbCN0MxT74MWcV9WUVOX0JRTLJhEI7YXebGgopHid35URJ7R\/2Upk30brL6aNu7ky2mCoElvmHDsNXX3nNUdPvrgy+CBwm3x2LPF7wAwcvqiqAyl7sCpofMj1k3S47V\/3PXdIOuYw+msrXnottug+IfFLdagqZhBxx6Zz9A72VeX2O\/jUdHgXp3wYR5QS1uZaZ+cx8RaEG7yiXinmg3n34IJdKCCj","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C\/9HnFRiUBAf9KHZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNg+EAAfwYnXcCoAo6sEAK5DT3NDkecWVv5vQqpUBj4dTmgAAA43hNnRzjF0bLuDFoxk35nW5CQax6\/HGysCmxFIgnvCu3UqS9tzbb6pq+\/5ZPbeMbGnm+KhVm4MnUr2TX\/qx\/vI4pRqjkJEbvgFSlI7Mmtxe5kNuOPMy6\/VfvolJ6dcCMUOSFm0xfOdMF5hlF7Wz2FruIZdUsqcQ8sBqCrdxIFmv815nvoEPWWbwn+fpgTOUybd58KtTaY5gkGVs+M5G+wZvi3xuSv\/M0K9u5bMnDy22WGL2GwlQNPG3xrNgzLQqr3STssJzmXqsmPnuop5mMUE3gdaNVCYtx8tgP894BtHx7CQx+Zn4R601UyOKHjFOkKkKxT2xjm8ASe3rk+KE7XZKxpu3nBf\/slxuz\/5y9PrI5iIkCXR\/YPXBMPmMZjp9NgJFPXQEqHmToZiu\/GBB2ff+5jhpIsPWIA469IMRvJloWNgoIxCsjAq56KWQV2mHeiDtplzIv8tXmSzgSK0RJCSCR2rh5hPcb+58PjNNJgfOsaSu4GR\/ATmv7A","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C\/9HnFrWUBAf9JtlAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g+UAAfwYoosCoAo6sEAK5DT3NDkecWtb5vQqpUBj4ddEzAAAXAwMAMAAAAAAAAADrhiYFvmC12YUb9dPv3xk42O7Cnwo1xJ\/EYhrWkqn3Hr5ukXvy98ivwA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9C\/9HnFsLUBAf\/psmAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9C\/9HnFsLUBggAFcIAAAXAwMAOOAIO32NJwvZ8jp36xTdHwlNaRuGfvqLft3RakGMvGkYlEUV6Eb\/9Lx9Y1mN9G9tqmVxNewXn\/4b","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g+kAAfwYoocCoAo6sEAK5DT3NDkecWwv5vQrmUBj4OKugAAAXAwMAMAAAAAAAAADs9TYXD2B95sEmXHusTDR0toqLg77YUC5ICtGQ3m\/cZIzZ\/SQK0I8Y1g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnFtAUBAf\/pq0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFg+0AAfwYj3MCoAo6sEAK5DT3NDkecW0D5vQrmUBD4OBYOAAAXAwMGbwAAAAAAAADtOOhz3KagrKbi0a+W37nNhun+J8G9wNRrZS4bRqMRlGpfcAG+NbRT0H9dh+Tq5e+7zloZZGL7IzUirbT4robqMCyNeMjTxcXzBi+ZBlnCuNJO6oYoyPfItcU9DH3W8dohI4TLcdO5pdNLyW\/CBGsdkonisAB2SwizCZ2JR2nocWV56mAB3moo8ixEoV2VckxkPZXwBTvzqcu3BR7j1waI1eN+yjW2yil9XHLLoOlQ4E\/rglNo+9\/gg4dNHWy2diRO1oAenWq9cUOGavT\/w\/S9ZT3AzWreWS0T+TVw4tiv3IHAKKRhEDTq1Sb2Ko4zAz9Q7IxDtbMF62MStUdzQ6Ib1tmux+yTxl6buLSANeKoDSLx9eE0Y\/CQ6POkyEPBTBIFLmqrKfCdJT2C8R\/sPwN31aHr7UEf7Krdv\/Z8AEcf0g3KABj2CwOb0aZGhPVZyGabIN6d5P6b96OnA1ozlcelSsYCvPu5LrRqvYexRsFwZDr6RUiST6YuHyKXuTGD91qCxYaWsyQZ06iqFfQUd6iDHYdzzFGVSZT\/OAPrgxnSdrxIM3GvbulNFhgt6TfNV3uyzZ\/8O37H45tKNP1ukzX05SR+WP8IDyqAO8INGc0vf5Fnhe6Bo2I33Et03Lk4xKzBHd0CmM2jWWZORU\/AxdUurotMoyWqKesMDBFjxS83br\/YnPh08OlpOSEsrNgk6FOt\/85ws3rjVSy7ZfTBt2cYyiP4da4QNB0+e4qg05tmQTbtQ\/hJ16WGtluKZk\/vP\/RgvVAsKAj6uizHrC05395HfpRFKz5MiI18Rrpu3F+vDG3rejnxGFieywV1WonFsQpA6rNqiXKHUv5cOY8tzSkZmk7j+NiyJEYggidzbj0PP97rTCZANUOMadEVL\/rKSUToNTbSbjzhC5AyDGhVzB\/nuVcGATwkXjHa2s\/MwvClkKIe8o8niLM90ueEzL8YQBS+7A90nvetFZ7ciPViipAQB4InGdZvpafAI22u1o78\/DhVCqQFrmKW04MLt3aABVgZ6phfnk9pTtB9tBd4gsSWsgUlIdiqGMnIzx8YL74NkbXqX0I3iTAkCosfDyWy6wWCGuYyLE2xelocUZUnEOPBrLf4UQScb8xZuuCLhLPshJ357WzDFpWlkWr+D6QSzv0LF6UNnsStP185ifz7wq0Yp2RRMnRJR7GS8ydOVW8IuY2IB+KcC0WgPnSsWM8TMT0eQ5AgLANNGicZ9V7dfjlfHmlTMXr87z1zQgwYqXCBndgxvipRZ2iWNLmjtg2sDq+Tp6wJm3lylxQXScR3DDqi3AJzKWElb+j1OEwQzox53eqGSx7s02kCkLyfkF7XJ+\/V82VXkkkxKsMUvGlYJjSgyKE0\/S\/IHvYT5Ch9qJ0fKiNClPP5wcuristvVDnaHHko3LJ5\/uWSJrAQnutWyNIVO7Vq6Sc+3A+2SgGplt\/vWtfraZlt3RexYk5p3mi6xP3G2lV7HSYaTU2R+AzLAbzgHkO70Q+DC1CWyR9LxaAUbeTalXzZeWAHMZuLINVTMXLv6IC2o7l5qDfh8uDY5PYyyiXNqK9JCAM0sPxhzW072rOtmd++sbrriEBzdqJNTZrBl8Q71JFgVDnOzJ3Bs4aXHYTeriKvvm5tsOfNBOCwjdUW7QRp\/0zZ3qAvMatTBZdl9Fq\/KRfVsHdJ5vqt","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNg\/EAAfwYnWcCoAo6sEAK5DT3NDkecYDn5vQrmUBj4OFpLAACmBma60TfEHiiBEPZqZjp60EVVzTLZVOB+8lnOhvR2WMRMhD8zjaoYTWRJ\/Dkg+hWTwgqK5ELPvdTjhbASGDaFSdgUC3xbIxLobmA7BcL27K775IwAebU2ofrKg7eeD39sqBjWIUmS93jf1jdZGvfFz+EJdO3tIV+svr\/k2i0bGNJ41AFtU6rqviSreIideM8o1gzbpehSazh9L01PVDSc3ERZTpIyfZumO3L\/HrNjarr\/7gvYFS3pQDEnvxnKYoKRqeHX4g+KV7BIq+nDraH0JoHcHHNJMh1rUEJc+D83jXa2qX1mV\/aw2\/4lwMfMVL5F28+ru6AEKXGgor1rXHbuPUPqNcjPv5wzY\/5O6o1uMIy8HZoOsMwaE99y61VAQa3ioXMIBswBfSTvUMDhQEnZN9VNkBEGuD1wl2kFM+Tj3VRjdW3WWxKTRco8fwy\/iNCkFW3TtxtLS0sw+5d\/Z6BFO+pxe9r+kIJXSklJBp0FHLFEPdadVl+j6NZT","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnGG0UBAf9JRKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0399{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":109,"pkt":"AgAAAEUAAGlg\/UAAfwYoksCoAo6sEAK5DT3NDkecYbT5vQrmUBj4OIOBAAAXAwMAPAAAAAAAAADuod98Pzup5EimL0YxqNkLAKgTU5VUYxl8JfSGlqXiGwVykSmqS3ueGsqQSw4vqEQuDVK7FQ==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnGH1UBAf\/ZQAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1g\/kAAfwYoncCoAo6sEAK5DT3NDkecYfX5vQrmUBj4OI+UAAAXAwMAMAAAAAAAAADvAlcpiR4FGYT9hqWRftR4xMetryPzPrUdRbccK4i4U\/aNgV\/ZDUnudQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DDxHnGIqUBAf\/pPKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DDxHnGIqUBggACgYAAAXAwMAMOAIO32NJwvaQbve7cjQrV3Kuk8yzszCHIdTKwp5Hfjxp3DxSBKqft73Xb9W6r6JyA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnGieUBAfzI1TAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG2XUBAgAIgmAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNhAkAAfwYnU8CoAo6sEAK5DT3NDkecbZf5vQrmUBj4OCT0AAA3wZqzsexsNUcbA9eRD0WfNBTrOQgWPIZA6ZKZIl6fM1eL5N\/0Qdg\/J8bLoqfE1n3AL7sXJpexVtSdoExYI+KkWvgjpjRW\/Fxcl5SJb6uo7G8\/QR1DB3jFV1UZp2G8O\/wBHEk+alq+0xEIuzSFt\/KEI8tr184AdwohxsCR9TUQDB8B94XLsgu5lYGzVGFnWD8Iqt\/s2qotHcgr7ri87sgHcN3kVyzH1YUmdghAZEWXceB0U237ORD6KOT1dd\/T07ps7A\/WDFKieIVc5wxAMa6rs72rncWRYVLJa3pm9mgyy+3f8hqu\/OgVoIc8USojjIYv1rX0zXY8ufDrFl+kNYoYkcivIJ403zhqipowWP9ucKIyI\/9WqNW0jcE489dGLa8chzPcgRGkSdqca99bhgDm7WjnAE1EdV34XG5cEL71kj+hB5meDWY3tnIWRryvlIfS9xd3cEbiuHuCr1YVqcbCG1GGUgTXnb55O0F5meahP6gyfJTdszK7yFq0","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hA0AAfwYomMCoAo6sEAK5DT3NDkecbxL5vQrmUBj4OO9KAAAXAwMAMAAAAAAAAADyf\/8oxcnHDa8M\/y+eUE54fIMPpWz\/3twFT5lyF9X8\/ggRYPZFgTXI7Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG8SUBAf9Ia3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChhBEAAfwYozMCoAo6sEAK5DT3NDkecb0f5vQtYUBD3xq\/IAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG9HUBAf\/oZ4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hBUAAfwYolsCoAo6sEAK5DT3NDkecb0f5vQuNUBj3kRb\/AAAXAwMAMAAAAAAAAADzRsazMsmlFH3QYgjUVb10gK448gjPweu2D1ZGTJM8axCMcNuCjm1mwA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DHFHnG98UBAf\/oZDAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DHFHnG98UBggADymAAAXAwMAOOAIO32NJwvb20wMXRXOY5C3WD448bfBIegctSexxULBm8AYPc0gj4hi4zJcx4PTjND7pHexOZuL","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFhBkAAfwYj0cCoAo6sEAK5DT3NDkecb3z5vQuNUBD3kRYsAAAXAwMGbwAAAAAAAAD0A5OI20PKNw5IGeYxGCKrrZMTgBjrhw9pyfy5vxiMzbcaEHriBpgoDhY+8X29jAQHWDz6AiwAZMhZo8HI1QdKK1CSPiiLoJ4NT\/d+NW4xnpED5G4hOV05tHkO0CyY8XFUXuEeSKg5HtfAzqIVAHG+8KXG7xnDL\/pc56cW5MYKNTbk82Hc0UUYymsofzURhhwkD3ohCUZJh9qXdBSbal1DD55qC330tT+SudIS4pCWtJ7LAI0iSju8tRDwvFksf1AZxq3MMOt17KecIIt9J0dEPh9Z71e\/slM1D2aE8C9jamWoP1aN3FSE7i8vk42S\/c0xqq3RAZyXHaP0BAEAm935EcOWNwWHTWBfZ62vEWoJqTIRaUIVCeGu+CMRP+w18DWTfJv9Uph9LfxUZwRNAHcm7Q2rvY0NFf\/7BkB3UlgykBnQWwq36JQ2jHkrFr5LwZHHbNnpDEm4xQTx3\/\/mIhnleoADBbfqq3zUHSBvhEv3zKitKnE0Ok8ijtEb+Q2A58T5Uhm8N\/MY5wnSeFIpjbvLojbq3kzF4tec\/7N4huKhsyzPf6sLYy9sdTiZHObUCVV1VOJ3qISBG6mgvCFWBpKdrZJ+0jCEMmIqQhFdXJt9D\/5gG8q0xsqlKnDpXDeihCMNBre1cKLTwN9JHK1+WTjwKLmrXCnoOuOAxwZs8o78PM8iT68ZbKBnJHRTlY2EaivrZSg4FkJyQ2eoxWhXxpTkCvCgfniFJB\/9iykHPSXVKY2ppmQ7qxyzR\/\/KRmW5oXL6PP4NvvUyVQKvX8lgtuNlAV+x5jbA5rp+S16YU1RqpzNOzy8yEF00Y\/NMcIbO7sfhOCWg\/p+Yx8aoXnaT6rYL8pabnYLDEcAwvIJgfO6C7VWNYQV2b4mnOZstihiCUmhdxk1OEEaRF\/YKxpmaDN\/s5FDz2TdDYObGudpjYEWke7Zr\/GzDSJ0IavqAe4vNu9fZhNF3lTPKJmpu20Sz3NeAmYe88dz3dM8VAX0gx6B+GNXKHe0U6L30ATmymQYGJqGTvP0kMc7lBhS7fD4CCjFVqmtNa5Mk0gYn3m00IJaf\/RpzDyO3u9OPVD38vp7Sy+GTJX404xAojHINWGZBOopIPvYTD5LTLQqN63BsjivCPZ5J4Aj1s4QsrYdx2Wt3M4noMoNYrS3rsRVqsKv\/tJNObNg93VOB5qQ26OV4bJX3C36RISg64EOucPFDI5Z9h16GRZqtyXNGhBd+A4I1BPgyS2w1e6t\/IaXiJbumuxKX1n8+hLqWK2doskT\/Xlj+F1sGk6npoaf6EXlvkI+g6oWIpmcpehNSVmLUrl2HUoCTOwj\/nCDtluOmprsVHCsJRyCXtW19gY3pZox33n+J76a74ev1LQuNsKkJiHndcwQjOJqal7AcY318mZzJTlJkNQvuqzAS+NUZMzpwg1OM+4pZArg9ibSNd3O7g6EqZxIb3N7sy\/Cnk\/ZBZvfsF3C\/Wh2sAV6CKNli1vdbUCVmLABh4PLK4W7NjwgqqhhH+AyQEetM1nTtMVOHPiSmIW5Fug5VxklnDyMpq7IRHm3nclZcYiWQbhKoFYPidoV7iNqFoYFBA+NFKdO\/37qGI53Z6ZW67Sln3VidG6pIobzQVA3ElsYOa\/MHKsZ5HD4vG16uuzPGl4+v26yWBu2P9U3DGVhAZjpM5mjnwNuzHMd9","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DK5HnHXwUBAf9H+cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hCEAAfwYok8CoAo6sEAK5DT3NDkecdfD5vQuNUBj3kTtmAAAXAwMAMAAAAAAAAAD17PX66wHzgoUt4kHF3bDDo1xfuveNZY6QZVViNbMHzkZFiQ7IbLG9rg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DK5HnHYlUBAf\/n9dAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DK5HnHYlUBggAIwgAAAXAwMAMOAIO32NJwvchnQquHVAU94VwQnSYbmMm41pWW7qXl1qIWHcspZX\/0aWHgnfyQySjQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DONHnHyZUBAf9Hi+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hC0AAfwYokMCoAo6sEAK5DT3NDkecfJn5vQuNUBj3kRSXAAAXAwMAMAAAAAAAAAD3Ni9jl0l+c88BiW7Aqy\/lFwbqfLGFm11DNXejlulfSL1Y9+rTPStUCw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DONHnHzOUBAf\/nh\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hDEAAfwYoj8CoAo6sEAK5DT3NDkecfM75vQuNUBj3kdgtAAAXAwMAMAAAAAAAAAD4u42y\/qltvAJytgznMDfucs1dFQy6qaLoZpbfHVMg7k42mZNz1\/r3Gw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DONHnH0DUBAf\/nhKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"AgAAAEUABSFhDUAAfwYjysCoAo6sEAK5DT3NDkecfQP5vQuNUBD3kdxwAAAXAwMGbwAAAAAAAAD5kX40asn4bbXmBaZhNdMHlpqb6dyi68qR1rX7F5hItfNsyxswG1+oTWyL7cPUxeiPFbNng4AKDS5nSzeJfRrSw2gD9p2WcBKlEDD7+guUzilbvTJolECvX19j+UmmQ492uNTF3z0b+1Li\/vniv22zfI+fSDTsQScdk2DArMfv6lldpULVUI5l9gEvsiMmJySQACouafSAxR3nOLFkKev1obMdK9TVoDlPeCV\/1Ff3xJpSQTXgeWW48Ql3V6XvVbI6lz0frzkDwz\/7tAM5p1emb1Tcv5oUc9OJjahVXtQcNnTqWq++usuI9hXqOVxjOKMOwV8S6vijvYSUKbtZjp3QaKaGlFTRr2479Xik\/+hH51Y0lQxgwG32cnuQiyr\/djRK7n0vDrDA4zvaXoBE6Wa76qL1UEaX6im90SsPBvH+2aRKw4sLQ17GBX3NPxVPqrHy5gZ6KF+xJFHAk\/sSvtTP7k2CV5lMmrelvUgo7FOrM+MP\/kX5SlZBCIA9dZN10K4r82yFu3cSHfuC05lb0s8neIAf6Z3YpU\/L6E54zBjahVwZHk8VPDlxNzuNSMfF6eFl4jkrXaRB0mMivf48Wvo5IbNPCDGNgp5NY5vGJxB+qgMTlxlpCCnRU41dpkf6sUOK91ob797KtwOAGsj4lJyMh0fLLcQVgTXaPFWTdBgom8W9C0bl2yRZt6tPFbXLzPaQWWv6RFyD7\/IBaVmhEE6Yh9IUVocGhvl5KoZSFbp6JG73zJfv8gzA+Lk+CoqmQhIGAYoMuZcu\/GlD5\/MzGSBljSoFof3UFHNsqp1tSXwHE3xvpaZ+Z3HMJBFMzniRbOz9shtikaBcFfQRTbqVYt9kC0iH4tSZUCTzVKdVPGxiEi7Wj8\/yP4etr7764mvD4u0WQrkbGxb4wo0vXuUu2oj2Lrj+tzEwLDa0mNzvuKAK8idAVXHEaZ0Pap+RYUsEuMD3ZgAy01sDp9gKrdAsVAqj\/BmQT2byBsOHpfCoxY90oRYdgzx6kimXObZ\/q2Qv6q4vgeLFzamZr808sixxVxjRIEYzEr6rw3OBa9X\/Bdd3rVRyWMRgwM\/5fSRVFLOVf7AhgniF8BtbD9cT1q+mspjVidLZUqbeBxMY4VH+rhiZQFSy1WxbpuavrWKnZrF3H6z2XEJu2IXIvwsEJ8Aog8SFtH\/AhdP5WpsgVIdRiu4AoK7nJEZuQq5q2jg9F5GTxK8taYiGk4KYX9bt2jH+R8RrkckH8nNs87XQu6HPU9Qp4S8enTM54i\/wGJABF+ARv1F867upoXvunewforMk2Z8KX5bqjhkTYXQaNm4wx7l9VVmcYPWmMD4eGjuuRxZ0FAeEYS0LQ\/FyK6Tn5OkcpyZDFAB8wX4Qrin0\/b6mMgdVyHUwinCt72kNoOo5S4Trb+oCvacW\/5N5fuCTWzImoXsM+3VLadgCDIBkEbIK4TaZI1B+BkqTVEL3oxU6O1NK\/EoAoqKT4MGTiJDWprdQoow1P9llke3b4VFfiitda7Dr8g17uxHh9zAqx0KpT3ch5uBiNI1oZmJRFQIuwnHgzU9Ht8u96CPeceS6aWfAevGuLKtSOKanDVPHGXqapTB1vZo8kgIyA\/AE07TDPLnFtLpmKppJsckUOQuSlpKl2+HUvIzNtlPga2V94dlm8J+mPi3\/ZUzMkOY9qngc87j8","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DONHnIH8UBggABPFAAAXAwMAOOAIO32NJwvdel5b3snfljvekDdcrbyXv2x\/NG0bMwfifjGChNy3HTeugVIPr2g9TNexD+FFkCKx","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DSBHnIN3UBAf9HGjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hEUAAfwYoisCoAo6sEAK5DT3NDkeciev5vQuNUBj3kUimAAAXAwMAMAAAAAAAAAD77r1Hw1SN12E7nXC+MZreKeOOxRQvf817lXzYZQZ53nmajBK14c6W8g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DSBHnInrUBAfzGtXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChhEkAAfwYovsCoAo6sEAK5DT3NDkeciiD5vQv\/UBD3H5TvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DSBHnIogUBAf\/mrwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DSBHnIogUBggAKFwAAAXAwMAOOAIO32NJwveuNImc4rTmoMuCsy\/RIgpcDZS+I+EYB\/83XxUeCMKY3QLTQt5Zue4SbUwjun9KxCc","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hE0AAfwYoiMCoAo6sEAK5DT3NDkeciiD5vQv\/UBj3H8yxAAAXAwMAMAAAAAAAAAD8LNeklhnhNy\/Na3joXsa6FhMiSy+1Bh38oh6aoObtBjCLIEBJhhXOIQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DV1HnIpVUBAf\/mp+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hFEAAfwYoh8CoAo6sEAK5DT3NDkecilX5vQv\/UBj3HzNtAAAXAwMAMAAAAAAAAAD9O1hn+6RaTpgwnviIjbMgi+\/ZKO2wUNLECSnz9\/xXouiSxkyEm27rdQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DV1HnIqKUBAf\/mpJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DV1HnIqKUBggAO6cAAAXAwMAMOAIO32NJwvfEJIPS+dApXquf7yIH3DeXhK5h7t4a+lhfVGZ17D9rV81dMsCVN7ZFg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DZJHnJD+UBAf9GOqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNhGEAAfwYnPcCoAo6sEAK5DT3NDkeclff5vQv\/UBj3H0H+AADxpkR0T3KZk8EVVGFDKRGB9IVzGj0lvUuSaJaJUuIXlrMqkVLmZmO4JkRKSuzC+WM0zYKylmFqvWL+28ifB3KRZ6AzXJvrGFGr3ro0Jv2rHC7D0o1z8+HgjpAF88f6j0YD2xllpRFt7c+xJHMDfl4YIDF9vCvVGjeXpMTMlHTtVNV\/SfqIPxNGVsuaGy6S0msQ6piDBc5XOuxSjS9ipBjfVMtXhv\/yGpexS1Tj4Ia0sDfADrMW9iFotft5QDnDdqEJ4411RpkwSV1zqt5ykAinUuCxclQObvsHMgInJiAbEXxhUmeVB0Wg\/71B9YFvDphrzQrNNrEjmSW+bN1gfgoI3TU57ERFfpvxPU5zeN\/hQ0qVYNtrV1rAXsRSuu9RxYH6ayKNxamz2klbKkNUsSy4JN7EdN1y2FPzLe2wvRHak92EhHARrvxGoPu1PzwWEc0Fdy1xn+xls67AFCOcANUCvziFLLMs6ypfGC7WpvaWzrEJGwqf3UR3yevY","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DZJHnJdyUBAfzF1eAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hGUAAfwYogsCoAo6sEAK5DT3NDkecl3L5vQv\/UBj3H7WOAAAXAwMAMAAAAAAAAAEAQbtR5tMBgRt5lKpm1\/B60da6v7yyZ+bhxDnLxTnXTkhRgLIYyulYqA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9DZJHnJenUBAf\/lz3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChhGkAAfwYotsCoAo6sEAK5DT3NDkecl6f5vQxxUBD2rYdoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DZJHnJenUBggAFAfAAAXAwMAOOAIO32NJwvgIjRfiy0KJz5pC4t9w37L9HFCRorwF\/5rJBzLrdoCMaB+yVNTzbcmI1ENlcOqk4YO","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0776{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":390,"pkt":"AgAAAEUAAYJhHEAAfwYnWsCoAo6sEAK5DT3NDkecnKD5vQxxUBj2rWaLAAAydXFx77lPdc7zuDCxZXBmp6OOPXXHmm45PLkgfBzNhBCN1cguE9UIjTP0J\/Ha8WD1mN4FrxRawqqrQbhGLgBWKD5APDCLxQyvz5sUn7RJfjWYPlPO1vtyf9zH0Usjqor\/0D7cQMRr3jGk7H4Ppr2aENqwJmsTPlLfj4kJTBwwEjB+CLHXB81mc8Gu7RHj+eYf8XorMkkL5z7dsPWsuocUYDr9Nig0tGH2w0\/BbS7nIHhybQxY3VpjoZkH3iSvGMOF\/N193gm308b8Vjz9gKb3UTdhfxmq3zGIPHIpsT8uIask5n1CnCxJp2S03C2rJ6TYG78sfW2gWaWZ3OEAjXnsXI+99ymuzjoVP9x9GAw9C\/Q8XmLt8eb49k2Kvhwy8ZoTFbg0NThZNofaAqObW9XyqqqPk\/rnTdmlUvw4FGNCN6NkhUsachxDoa1PyUe75lPJmuOPzHOIfxf6","pkt_caplen":390,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ36UBAf9VZwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0394{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":107,"pkt":"AgAAAEUAAGdhHUAAfwYodMCoAo6sEAK5DT3NDkecnfr5vQxxUBj2rb09AAAXAwMAOgAAAAAAAAEClTHw25D35RU+o6GxHvwrXPY6nMx7fxifhGuTdHTiHtVABHnsZ4b5XBon10WmwvdW6Iw=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChhHkAAfwYossCoAo6sEAK5DT3NDkecnjn5vQzjUBD2O4DWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ45UBAf\/lYoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChhH0AAfwYoscCoAo6sEAK5DT3NDkecnjn5vQ1dUBD1wYDWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAAChhIEAAfwYosMCoAo6sEAK5DT3NDkecnjn5vQ3PUBD1T4DWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hIUAAfwYoesCoAo6sEAK5DT3NDkecnjn5vQ3PUBj1T6mSAAAXAwMAMAAAAAAAAAED1gGk\/QdICXZjxSLCnqAT\/tcUO0ymbjRfyhStRcHHlWHM4fOg+v\/GcA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0357{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":81,"pkt":"AgAAAEUAAE1hIkAAfwYoicCoAo6sEAK5DT3NDkecnm75vQ3PUBj1T42FAAAXAwMAIAAAAAAAAAEE7U7OIt\/uyxtgLJE72mf3h6I2IxHRVipC","pkt_caplen":81,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ5uUBAf\/lXzAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hI0AAfwYoeMCoAo6sEAK5DT3NDkecnpP5vQ3PUBj1T8WSAAAXAwMAMAAAAAAAAAEFoPoBMZFfzGwTqxBPKiSPO\/hLBdmkMnkdpCrrlVmIhlg7LjNjh\/9Jcg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ6TUBAf\/VXPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnJ7IUBAf\/lWZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnKU8UBAf9E8vAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNhJ0AAfwYnLsCoAo6sEAK5DT3NDkecqjX5vQ3PUBj1T+4FAABH0vvqzFrq5XHPsgH4F9uju9cEIDG\/IayEoZKo9jwiVZYOpJ2n7zrSZIGJBHyNjd0shfbnqJwFoc4zBr1qxGHquNPtKVUNlqJURQBIg6lVyloCFG+Bo8I148kclWH9qhnEUY5PYw4jpc6lGbKQjGQfEIKHS+LXaaHBC6uQQLqg\/txGygOxz1UUj2nEWULX1BG0VbFjsduYdUoaSFZcBRuZSYPx490+vBPU0UuY44p5c9fVidYTKzsXzfKpp5QE3oec0ba8Fq2NT606gV8X74CrND0rQlT2RxBFbOFW+vPzg3YD9Gay1vmRBDjnab27QfHrLI2URsqQx1y91hKp4R7OuUpyZgxyPg5VKcNL3QdEkZZYVmaJYCqi8k+6VWX2K7IMAuRLUZbY2BSnDcruRoh7aJxGl1l6THl57VKVxe5YGGxfWOs3Pc5QMkeMLiCobLCcxj3+Mzd+sIFDqnHrTkQI\/9xPBHz36ZVGDUmJeL+GOB3J95akwOu017FB","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0917{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":494,"pkt":"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","pkt_caplen":494,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnKuwUBAf9Ei7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hKUAAfwYocsCoAo6sEAK5DT3NDkecrXL5vQ3PUBj1T5C6AAAXAwMAMAAAAAAAAAEJHYWj0ZnLeWIovaReGcAk4Q3ZXtcxe3Ywi4dKmZZGYvfHx12rHUea1g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK1yUBAf5kcHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hKkAAfwYoccCoAo6sEAK5DT3NDkecraf5vQ3PUBj1T+sUAAAXAwMAMAAAAAAAAAEKeENuFvz63Gy16LeHNA5JDmKgsxDdnyxgp5siINfkoIxvmEAriA\/OMQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK2nUBAf\/ka6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGVhK0AAfwYoaMCoAo6sEAK5DT3NDkecrdz5vQ3PUBj1T13OAAAXAwMAOAAAAAAAAAEL7XCVlZuoft8IT05f3gVNDRHF950HAWqfi8QIoNeRdDPOIgjMVkiDVPz45f5flq4e","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK3cUBAf\/kaFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hLEAAfwYob8CoAo6sEAK5DT3NDkecrhn5vQ3PUBj1Tz+iAAAXAwMAMAAAAAAAAAEMfEuMR+0mdzg\/qXdFuqboOrP42qyfiuw2XQCewEREdm7DgvfBQtB9KA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK4ZUBAf\/kZIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnK5OUBAf\/kYTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLTCUBAf9D+pAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"AgAAAEUAAaNhMEAAfwYnJcCoAo6sEAK5DT3NDkecubv5vQ3PUBj1TzoTAACT7PoWdQJrCHxtdHFd0blkmEP9WMbOzCps5TUb8ZMR7voz4kuocd1Ab1zFlerWk8kGl0FoGEP+rUbq5IQ5UAQSu1NORLYBpODjyqbFBDcvS8wpTOwIr6juw6fAsBfbShQTWTTHgeC61rYk6J1ymVNLY+5J2\/gs\/In8nyS0j\/YJIR6HhRbN+8Ga+uhgPn5jji8AopUmT9FSdNvExnOcldlws3lOSLPMysTNZh\/V5K9uqVBuo63OoFPosckjnvxW5WVAw+xG4w8EJlFwawxW4UpAXgKypbmpIktUzELCcB1lltTqkclIxH3Gbg+FYzwfr\/3BMwaoPMAw6uacxxMmGjYuKfhdsooUskTeAWW+mdn0K\/UsmHTDiHo3ysoK2OLnfkbVqbWPNX88kBOVVEL+HJWp8U5FAzkF2UJ2vFPeonRrFyEQnWA800o\/vzZAwKsXh\/ry49WtI3RgffdHhAvINWg0lJYAaSTU2GcEWbJO\/oUpwSUG0pb5k7Mj6xo5","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLs2UBAf9Dk1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hMUAAfwYoasCoAo6sEAK5DT3NDkecuzb5vQ3PUBj1T+5BAAAXAwMAMAAAAAAAAAEPmatIU7uCQs2vpIZQ+acJ4XlgFbuo6JEfCO4u6v0A+BumL6PJp\/tUQQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLtrUBAf\/jj2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hMkAAfwYoacCoAo6sEAK5DT3NDkecu2v5vQ3PUBj1T1SwAAAXAwMAMAAAAAAAAAEQSJuOxczmnNKwc8HjvnbLMc4bghHQOJxMRZkIkglFpwvm0OjdoLhKBA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnLugUBAf\/jjBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnMIUUBAfzDJ\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hNUAAfwYoZsCoAo6sEAK5DT3NDkecwhT5vQ3PUBj1T27wAAAXAwMAMAAAAAAAAAESd66A2ctvy+\/eyEeprU7\/i8zLjT\/4f0eqU+AbgWSi1R9xD1E0WgMGvQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnMJJUBAf\/jIYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Dc9HnMi9UBAfzCvWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0406{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9Dc9HnMi9UBggAJSsAAAXAwMAROAIO32NJwvhyFZuyjNlMb2KGbPRm+AxhnXTFStfkPW8ScFM0Sk0kMtj69+JSH3xPuULRCqSIZkZVlasMD+stD+IHsQB","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9DhhHnMi9UBggANLWAAAXAwMAROAIO32NJwviUewYyCR2+DEY\/5nvNS++ux2QVNs+jGgag1KFUeaSBvOk6595pd8d3kbsuCmEV\/CI4qB1ggemlPjaq\/Bw","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DmFHnMi9UBggANUiAAAXAwMAMOAIO32NJwvjSy5ktpcd8edQimIl+IYSvhJHTGwbG+KyHEgm7UIu2v0z3LqckZvEpA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DpZHnMi9UBggALC3AAAXAwMAOOAIO32NJwvk2+kiSf0\/yDFr2osT0+ztk0S\/MiGkUAIaLd4PawrdrT\/Qv6qitv8GyL1AOSkomz+i","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9DtNHnMi9UBggADqxAAAXAwMAMOAIO32NJwvlCcmYKUmsZ76MOR6RDNcUtUvjiRp4bRZAFDBFdbmwBYed7Rh3umrrBg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9DwhHnMi9UBggAFvmAAAXAwMAOOAIO32NJwvmqtmfUr3t93cXD2bnwAg42fbnu1iSJZfOTe7hgY3mYKODEu4Xwftic5v\/LstQ+2Pv","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9D0VHnMi9UBggABb0AAAXAwMAMOAIO32NJwvnONzUM9YRDUk1QjrNlJfCAJpgpniwyKhULtcYkxV9OVxbwE0\/foQ0Yw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D3pHnM8xUBAf9COPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":97,"pkt":"AgAAAEUAAF1hOkAAfwYoYcCoAo6sEAK5DT3NDkeczzH5vQ3PUBj1T2QuAAAXAwMAMAAAAAAAAAEVpDGtYhQ4C2tSHwnlHTMMf0\/bUAjs89WATcbsqN\/mEh4Ts2rnMHI5xQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D3pHnM9mUBAf\/iNQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207470,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9D3pHnM9mUBggAEb6AAAXAwMAOOAIO32NJwvoA0syiaftNlyB0Ec1cGf+WEEPEJGJ4nnMbk5BmXu8DnVjxg20NP8Or2mDKbymx4x3","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhO0AAfwYolcCoAo6sEAK5DT3NDkecz2b5vQ4YUBD6AEqvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhPEAAfwYolMCoAo6sEAK5DT3NDkecz2b5vQ6WUBD5gkqvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhPUAAfwYok8CoAo6sEAK5DT3NDkecz2b5vQ8IUBD5EEqvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhPkAAfwYoksCoAo6sEAK5DT3NDkecz2b5vQ96UBD4nkqvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hP0AAfwYoXMCoAo6sEAK5DT3NDkecz2b5vQ96UBj4ngkOAAAXAwMAMAAAAAAAAAEWeDY0gDXklD5tlXHpG17vB+lIGGBTwULvSFQjXT27fgZR+22EcaAONg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D7dHnM+bUBAf\/iLeAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D7dHnNYPUBAf9Bx0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hQkAAfwYoWcCoAo6sEAK5DT3NDkec1g\/5vQ96UBj4nlpWAAAXAwMAMAAAAAAAAAEY9+b\/FWX5piHBbHlbIrdihSrLjtF1\/YxdLSFQjPeORrvUDJTICAjCnQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D7dHnNZEUBAf\/hw1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9D7dHnNZEUBggANZPAAAXAwMAMOAIO32NJwvp3tl0QYp415x6pMb+6dw40RuK2BwWr8qvyxN0TCzWlBlyiq2H8PDuiQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D+xHnNy4UBAf9BWWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hRUAAfwYoVsCoAo6sEAK5DT3NDkec3Lj5vQ96UBj4nubEAAAXAwMAMAAAAAAAAAEaGaPpaYhLPzTWhjOZr+rJpUiqkwpO9fKDCZDWZzvmcE+kjKSsr\/dmKA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D+xHnNztUBAf\/hVXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hRkAAfwYoVcCoAo6sEAK5DT3NDkec3O35vQ96UBj4nviHAAAXAwMAMAAAAAAAAAEb9edOmcGxlrYHDiiUAOBkqyf2hGNL0NoEDUnEQqD9cp+tTRz37UC96g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9D+xHnN0iUBAf\/hUiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9D+xHnN0iUBggAPzpAAAXAwMAOOAIO32NJwvql6+bvk0JMOcnT5Ks5dOPpNK8Dvm4\/Q2yLryjAaEO2qU9Ho+7WRFeDKIKQghfxJq0","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EClHnOOWUBAf9A57AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNhSkAAfwYnC8CoAo6sEAK5DT3NDkec6I\/5vQ96UBj4nuosAAD30ON\/8MsolJiTS2dU1xyJm8ILj5htYmKaSe3CqlqBjNZ72\/UYuFDb9cbl2rJIRMd3NRoOJpcRiX7mlX0NC\/sJjo6E4pqw3vb1Pc5I4\/0v\/E5r+bbo0qZ2AJeT9XrEFcLDsz6dNJ4nU8MZ+\/REdMGhraqUsQWHBLBysEUpx3g1WCJBd5kDDVtpZ1HAND9aXZEI9JK4w3pk4hoWuYLxH5xAFRLxO0SuOKE\/4\/qd4ml5lglVuxf2KBRejStGbBE\/S8j7kFcLRX9FjYLr251NS27bCyEjGKaQOsnXNP\/A69BGntJWmP5ekD9kwH7T1pB0KXAHwgLydRPmpakZvaBGEKyVgo7KK3MTD+xKglALK7IP4zJQ\/qW0Mqh+KJOl1bR+xKV+vK+hs4rRPvtN7Z0NchDA8GMHAtan44khHJkgvxclUzvVtPtw3HzhooJaeJ+4duRCqPCt5FQJY2uWBYeh73EmXy0BbNd5Y2sUCF5KhiKTKQIW1fNdavu+v\/fy","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EClHnOoKUBAf9AgHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hS0AAfwYoUMCoAo6sEAK5DT3NDkec6gr5vQ96UBj4ns60AAAXAwMAMAAAAAAAAAEemsk5rm9BIEm\/y\/j\/eeSy9mA1iLVfT9YZ47vPygFnW9hqiLbLeMsCFg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EClHnOo\/UBAf\/gfIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hTEAAfwYoT8CoAo6sEAK5DT3NDkec6j\/5vQ96UBj4niPbAAAXAwMAMAAAAAAAAAEfiVgDpaUN\/P8rYJHi4cMNdtzOFEeDX8musA4UtxJ2xnGVKbqV4erQng==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EClHnOo\/UBggAK7cAAAXAwMAOOAIO32NJwvrwr6Qo9peQWt64n4urR1msWmwUXffY1r4oR3HmGxoQZ2SUQ7IJxqTTqVHeJ\/mEgSl","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hTUAAfwYoTsCoAo6sEAK5DT3NDkec6nT5vQ96UBj4nn4JAAAXAwMAMAAAAAAAAAEgZQjXJA3bOJYCJ5OUFEgiBYxPLxTkCAuWevmTh2ApLQ68ALcVUTb8lw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EGZHnOp0UBAf\/gdWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EGZHnOqpUBAf\/gchAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EGZHnOqpUBggAImrAAAXAwMAMOAIO32NJwvs9Vb0kGtYP0CTW5QHBHTcnEjqyDTaAu8bhjsGtvTPGzUl6sdpc14Jvg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPEdUBAf9ACCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hUkAAfwYoScCoAo6sEAK5DT3NDkec95H5vQ96UBj4nvdmAAAXAwMAMAAAAAAAAAEjmsvv+ky\/89rIR\/dWvO8MB2FtK40txnw2dkz5W8G4COPMTwvkYqbbsQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPeRUBAf9PoNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPfGUBAf8vnaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hU0AAfwYoSMCoAo6sEAK5DT3NDkec98b5vQ96UBj4njLXAAAXAwMAMAAAAAAAAAEk2INzR+Dj0M+SvnCf7nePb2dYujO9RYHmSYbib0kSak3Cm0Odk5\/d1Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EJtHnPf7UBAf\/vmZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EJtHnPz0UBggAJZiAAAXAwMAOOAIO32NJwvtZvD6wU9FENVravlt+z++mEO8n2VZkD\/MAAM8TCtX\/bNUAVrSzw7dLAFyDHYH+Qwq","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hVkAAfwYoRcCoAo6sEAK5DT3NDkec\/m\/5vQ96UBj4nrAnAAAXAwMAMAAAAAAAAAEmbrakjwi+y9ZWOoIp2bvPB4q7uaRvWl6Q\/ikYkK72QYUIooWqTj\/d6w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ENhHnP5vUBAf9PLyAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ENhHnP6kUBAf8vK\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhV0AAfwYjgMCoAo6sEAK5DT3NDkec\/qT5vQ96UBD4nsR5AAAXAwMGbwAAAAAAAAEnUFr8n+E1IVHFQQ2Jy6oBObvjszdb8ziaNBNJNbTxsRkhpJVMp4\/YENSu1ji6KkY68kfja1bBghoZUEUjmH6fq\/gM5Bb8TeHBpNZL4xWdvldBoyTD7NyD0hPuJKxi8zwazAIWqKZZtSSz75uraY2osJ9FZx7euXknR8zWHEv5DlE8f606er16L90698MuuB+c7MICWOa7tywx80GdwrgDRDIXMqEUOyzt21e94dhZAna8p\/93+4rQ5yw0v71bt2eHss6K4gDiS60nFoLVdp+3d2py3SERgp+x+PA\/zUJzUbSsPs0s8vAYPbEICnS1muX2H3FAaWAlCB6vmp8Kw\/AkUDilCg6Nzz7cbWB6qMqJEcfdojLkiJomyPyjSrnY3smQE7XWeaRwmwO3OPMwEZxiAqHIIA\/dATIaTkLud0G6DcTYk0Y1MrN5hnLwS4UULFxCBRuX2rizccOR34YELa5Vx8uAJHJcEvCSe2XATZpXMhVeE76HmiC3X820ixaC3Rn8drre06ZiTUkJUrlUJtPpWoNZ91dxzxOkFedQOxBsBQHC7YuiGBKXI6ooV0GZuKw5qEgvdBNLqZZklm\/DqWRrZ8OX02CFFNKPGIceWSee\/v26ZsuinrMgw+KFDdsEo6U8V7YpInbi1W8Tg+1cmKQ9a0ZuhvPbCLNT35pJOCG10ttDfLoqw+cUkniyV2SlboVAXYIv7fJd1KBDRsEXdOTLtsK7zFjV48cSxUDe0TNF99zCPHMmHzO04vjN3Jwk+6\/FVhpdne34TTT8wGdpXbs7cOaOYaRyu6BLQiWpcfeQx7Mg2+6Ea4aBhVdpq+UUnmORim\/Sj9S9QN\/FvyDpZiIsyzqDhMTyRKGonzqDs2U3uug4T5sLhGiYXqB6o68abCaR\/jx1PC3PU0mGbnr10szBlE+7BSmC2lyOOfU4vAE7SxFgisT71ZPSLl8+Epp6vPlUMA5tUo1SF4lo6f4GIwd39ED5A56xuVLX8+R12QMFB6FT4\/coz56\/3xl4PNzhjKsKPAWCnqddWmi0WaqsRZNOIRVjgCCShcLYeBhL60VK8g9H3huraUjS1jGD2cn\/Ny9hHg9Vlw2ZVeFntBmsm9Jo5Fljt8WOFNgaY92M578FRcFdDK9\/s+2BDEaPkFleIU5Pl\/AabACXAmVnPNL+w\/r2Ci3T3oc\/ByTJh0aZNWdDmekdP4M+yPxuUTM\/QUNUhZPQbQ0FqW9p7yGJBVGFl\/\/3SZoLxfxstwllveBvFxrlFz+BQRbgiM0rBqhw\/wd6Q5aNwIrQ6hlC0bfYAUe5o691ejzNPgmoQeqkDTEN9xb79VOgsOvdZXzkhqGuPNXGtrQN9D+jSk5R1MPN41uFV0tNDNAdDqGIxRk7xldXTwcUUCYCLc4kaiLGppDsw52usOzecpmBTjmZG82FH\/Ri9aGnoMqLvJNOkyTzcWrldCEBpcCblVEVxduYklw\/x0Bc9N1rVCwmf1qrK3r8SOwEgOnYhK7nrFb24qHZVZstQlA0xIgbHk0rxaK5eTbd4kgY7s+OLenjQENUkLWy8ghU\/2Q+xAi6qzT7fglSx\/Nu5JWh7VahPEEqIKaxghA7DOCnKkDwS\/h62JQY0+k6hr02bpnEHAjS45YLefe\/MRWdh7cJ9WYv+U8v5FiE19socKjkqpPwc8aLX35O6CaucSam","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9ENhHnQOdUBggAG6EAAAXAwMAMOAIO32NJwvuLel\/L8DpXQAx4U97zEvvGjrSRKaXw4DI1htTCbEJbL82Hfl55GBE6A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EQ1HnQUYUBAf9OwUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhWUAAfwYjfsCoAo6sEAK5DT3NDkedBRj5vQ96UBD4nqaPAAAXAwMGbwAAAAAAAAEoaLZb9nMWIwm\/\/vlbE83ZX6x7yFy5Q4X8nbutd3p2iYrVmiFU73wc0IAW8WdftUf4sgQKQ8Gnz6T0oL9BwhbaDPHKNcajkUqi1yXtdNNxbKE5MgETtjuzz7znz7BSw9iOkhi\/DwJhw5JKnjmlPhfdGXVNeUS9oclIAukd0\/eb2aOqgzFmo2ZvgYSh09bNUz179zbCR2QrOHlx1TxbV3goDuxbrROcNk2\/6I3RCV0hd7Nf5PCAgJvbt+6wyQB9s1MsVxzCmhnQkDklQJJv8D33cjw+WakPND0J4SfR338SKbB5G1Xx\/5ZO7U3p59GazdrIv+mxQneHt8PDG+gMO4PS3FSBC55NManAD8dfroYCeLD+4xC85MJK2OTlCjF40oHzwjTThfj490XsYF4RymQUN7mV0LsgZiRiy6tznHY4RCVTQU\/vPn1xm9vibWhuzVm0Cvm+l1IKrZDcBNfQwu4+y0D6GnLRgULj5Emd0tYzb6WgTsRZABC+AgQsfqUOt8sZdM69OXj\/kp+67ejDUj94PtYYhWLiF8vYWu97WxSj3Xah06Y0ClT+hS7nrAd\/uPRWVGsvGLy2HDcPJ7tkQ8YoGpbD82qNJLn+Y7JKKg9Vmu1D7MWjmoepWTJ0Br7noyG+8Nq6bxc7T1bFMWjvRDvqtW9FslAALWy9KYjmPxNJa0M8tnpAF1PcIMeC5mGcpV4utqCuSHix\/Bv3v+uHIn8iSz9T1W9onHMhrIw5rN4TAAlRNEZd9o0uhzPZmCITpzIiYGvRWvBG0cONr2mB38pr2JpYo+RsSphCNMtV18jPzArQshiu+N8W5he0WLAgrB6hYlhBqLK23uD2\/zoi4hlIT9uIpeKa\/NE6EbzWcdTh1zuhZ1l2zXCAtkF85MRGIacA792Kzv71wvBwRWPmQPoUuv6d+RUWY2naHL7teyF\/IKlUDAOjrD8GucGp789SVQuw4xz6cWvD3LiSB5bhowX22tb+deLS8xkNgifqqI1RfFoCjQLy1Q\/Jdw\/4ExDaHjI8XS8Zvp4SEE5Y32g8saarHMZ1hfP6P0XhdHalkq7QdE+T9+g8Yh3lluxyrrNUYn7cBlp8q52sReN4qLLQKERCiMFJWeN6keYmC9PuyiiKqhgIf\/FhDU5mAgHAFsGIrMG7+\/ykXAGowUkxnhAMEO9O37u1DiO3DIluVgvPGgy9heStWtRefUpRF7xa06p0NbkP4M1uGFgqOL5R6JW0LfyBB76JDvjiEjGl9zqDwMZQ+IGU\/edKA\/VzSfWYQCzElLK1o8DJgikBAJEf0ZmtUIQRxh3M1TaeEHlksV8Q9\/RddoHmzHLnTYY5MAypH4ydugCIWd2aMrwZLz7NzctotB824KlDSbrLf1hP2\/ocvDvszx0Eds5F3Wt+4FJS4\/2MUdVdU\/BCpScOh8iiNWY\/15cADSTdnSGeyVr5wk3TbCTefHher7OsR01uNk\/da3qJXjnWAJuyvBN\/NVsxyi3PnqDlM1xkM+qx+B9msACHQVXn3ddJK6uLyvoaCZ4A9PQhBY5eMoB8DGu56m4Iv+1h\/CEWdLeR3Ki7TLF9elLoUjqMXk0aO\/0u88VzaOHbRzPCWJmNg8e1cB6hTDhquF6ThzJGA1hdEe7Skdvd2\/5YFBxKnjaxPKMJ658jRRDKTtqlcMb\/ZRmX9tUV6OP2cXdn","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hW0AAfwYoQMCoAo6sEAK5DT3NDkedC4z5vQ96UBj4nggOAAAXAwMAMAAAAAAAAAEpvjTyVKVgcI++tsPqkoffZ3Rcg1rZV\/VRu+CPWW4DpWtWsHfdsH\/acA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EQ1HnQuMUBAfzOXIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EQ1HnQvBUBAf\/uVhAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EQ1HnQvBUBggAJQkAAAXAwMAOOAIO32NJwvvbq2JTwDXCKaA\/fMqsj4SGLImxZ128Aw2LpQDDKwzVMHS\/eF3q+RQVSuKUDcrQX82","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hXEAAfwYoP8CoAo6sEAK5DT3NDkedC8H5vQ+3UBj4YfutAAAXAwMAMAAAAAAAAAEqqt7b7VN+p26oL48gdHIioEe1tglHeCQ9\/bRpg8iT+iZpegYX\/oETBw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhXUAAfwYjesCoAo6sEAK5DT3NDkedC\/b5vQ+3UBD4YXZhAAAXAwMGbwAAAAAAAAErYyk7iBm+fDnpwKMVq9Mlayq8ddGCyYPfj+JMTntBQvbFwoYh9Y8oO4UQU4mHcF2mNPU762e8Cc173zW1o2wY5eDHeYabucWfNq9pYrrmJzL2BlEuPt82rpUfTFZWJ2YNfjCsziZzOt410vZl0NNZetDslD5BJxLD86JRtmNPVmStdVgTgcFmMDayKdgeC3IDnXOl0UYq1Dr2QE9iK\/wxeYZjwMTBmKdU2CT4VIBbmebuNfsHTpQXJy5wN9AYHrOrcUvmKSC4c24tePP4KrK2j1NXapJ9hmTc\/PwHXF1o7Eo2ZeZmogvJ8GNo4RPZHkTGGPjBecnH\/45g5ZfACTnz3y7YCzx5UhKbGESN4yI9LKCLx8L2hC8y2cGp9Jla2ngHqDEBzi1tBFwOeWQ+oOXorG264G6RNOp25WgDkXk3FnEf81QsHosjL5d+yX3OVx8Q15dr5ob3XvhIx4rl2TLUhBIIfbUbLO6OtQS8+pOGoS\/bisKxj42dNIRdAOctONSR5wr6e2hBO10LcNN9UsRJlerbZ4AgOBKixQgVYiPbfRLPHfnP44yC\/F6iIiPhMx0SSUXsWj8eoW80eFMqgRnfhUh1MAVOwllw8pvgZUf\/c6hzmLfiiKUY328Ricq7qARAOoHIhZxdR7B57Zy6tRpo9u5kk+g2IpBKlsJ2JbxWVHZZ8pv14IDRfdbQlPLWSjrpC1+hb+9d2vFtIG8ON4+K505dOUi6ywSwY1Zx6JTs1FxKH+j1+XzUtF5cX9LKr4+RlTz3PyC6hMyGFnHqr+1idOu5OOARCSsu6Ps2BTwL7vtcEPt79ZGBiAn0tmyBO9haDFqdTAXKnhuUTn9nDgJwfU2MnEKd2TueiZvEpWeZK5wJOg+46I3HQFwgXMhLAbGTvfyUdu2014YNzXMXy4Cn\/6jDfqNkx2SBiimopffvP8995t4+zSfRV2FrDxx31fbCa4JFs6r5BsjF2TW2PwSlnLIU9a7orG3z4OZfs6CnYTHitN\/WBdX4f1KMbrq1xko\/QvmWSrGwIz1W+aZDAGdKJI1q3sGts0imldMj8ar+QN5acSb6jqTKWc+S0HnXM\/YDDhx35V6Y2tvt63JD23Z4+K84eDdrfeq+1py1cTd+TJyc6qj3IBkXtXIM3TlvH7cIHaeGbyqf2Z2ps4sXQhdU5Uy13Y9VHU3Fqv011UrzKBMASKyTvSIuqk\/TJcAoCTBA1HunxmYEaiJ4sdi7RASufZMEorE6Jmjy\/nYIb0mpZDm39aJqFRhYGle5BGogbnzh2dfTQwVYQrTd1LNcKPaL6mhaOyoZGioV74yFJzp3E6tEDjQIIhzHGJjygNDEdbjlLjJWiLLJEu5NmMghBClddHvTd0l+FTt3WhKIMos2p\/14LWVhv7qAxtod8rIUT7DaWZxPmN8bxH694LdIHz6APDjrHw\/DwZ6XSQoC2PBEKCkGevnmzK4Sf9ZewyMOoLb+BxlJoEEMD+KtROmY73sVOmxTef2LNMIdyTxJIRxS1DitWwvcZxFVxZ8+PIUYsCcT5lXz3GCwmevGzlcmyPAs5NxfQhPrAR65nWYHUs1IAYoZ\/4\/KzdpURYkykXaYOZMiMy6FqSNTR0v3UxKdQkmPdm\/lsqOvWOxDoGVoufjESlfPTrWIEPI8Bj+czWX+Tt5c+XC+uonsN2FIWdfH","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnQv2UBAf\/uTvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRJqUBAf9N6FAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRjeUBAfzNg5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hYUAAfwYoOsCoAo6sEAK5DT3NDkedGN75vQ+3UBj4YbvgAAAXAwMAMAAAAAAAAAEt85IzRBtXFP9N1VvbFgaUPZxO78zNAUvqhcQhMFbzagZfEsLkAnY4SQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRkTUBAf\/tfSAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hYkAAfwYoOcCoAo6sEAK5DT3NDkedGRP5vQ+3UBj4YT9QAAAXAwMAMAAAAAAAAAEuY5xhtwF4AwhfGjmrbYQ6w31oxdTqij6Yc+6thuZMMgDUqwjH2QwIxg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EUpHnRlIUBAf\/tedAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0398{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":109,"pkt":"AgAAAEUAAGlhY0AAfwYoLMCoAo6sEAK5DT3NDkedGUj5vQ+3UBj4YTniAAAXAwMAPAAAAAAAAAEvlVmMtY8o+T+EPD9Owm5DWUMzmZKoG9LObKSVps9bz0XlzImnYMJOLgPEXOttuyIAn2OCpg==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EUpHnRlIUBggACqLAAAXAwMAOOAIO32NJwvwYej\/Pnzjw5tn2xiuG+9Ub26+cgfl4JY9w+pc7bpY5Eo+SwXUthEbBcPexHJp711X","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hZEAAfwYoN8CoAo6sEAK5DT3NDkedGYn5vQ+3UBj4YfIGAAAXAwMAMAAAAAAAAAEwR8YEhRqfLYTqdyV1glzaWWYXeG4UbM1+hdIL\/+pYfPs66ZnszyXk7w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EYdHnRmJUBAf\/dcgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EYdHnRm+UBAf\/tbqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EYdHnR63UBggAKBLAAAXAwMAMOAIO32NJwvx9Ox3zkz3cxWOXLkKN6DG23z1RT5lBHaaAuuBMg82DOFuDOXnvlzsRA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnSAyUBAf9NBLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhZ0AAfwYjcMCoAo6sEAK5DT3NDkedIDL5vQ+3UBD4YQACAAAXAwMGbwAAAAAAAAEyEncUYfYtrGpyZpZcQHvOLzcZRdvCrqVfzhi03DBGfL7FB\/wP3xj33iuKWh2n6XLzBpRBl8HGhqzOF9DJuXlN3Q1Fom\/\/yru5JzYB6NMNUwfye\/9lAUkZh13Jk09FftczfXSQaRUmsyvN77r3dPCK1cKp45Adi\/dsv6alHWcE9nhksIPkdxsoLtrgUUY+DuG4\/FXOZ1xrmYs\/pqSE9bjUrSe4kO1N8T\/i7IFMMHRsSiZppNOtF6g5ZDS13hcMBhmNexANt1QXDecb97v5gmVGD3r5b9jmck4I5rnEHXuZYFkKVifWPWgADNmGxvYeo+6LTWROzFo4SxzsCilzm7YK8CTawaHavQqQ3twyG6nGLrnqqzQMdKzQs+ZSxE4I7h1cGQQP4RVY8XXzKLzTPNyf+MUfun8RkB8Addb6S7nSkiZf\/QDtRzfNCU8Rrj3F3nCBFVN1y4hUhByF0Uf5uMDz2Wz\/E5MMyg5UHXWtf1hNsEoWr\/fEu6WJG3foawjY6QuBjQ1CUzKARcEY\/pebEnslLO5SLdZSS2EVeY6O+ThtQfvXC92oaG9XlhsTlr29ZZVI1O96Ek+CWDXdrlqLaXwlw1Xuss8SJaP0hrjOBHkYp0oGXM4LXJM9YMoj48ZV8uAk2vBF\/hfrKfvFTnHlKESJfov7yI4sK9FOluMEMgLnRIj5LSJWLjNewrAGHLRpgU7aFzJKBNOiGQ\/zbDzt4x9JGIVEU4GmRS0h3846mF\/VIUtQIxnFM++oSS6BhBUWh5IB8w0aKN3xwzwU7n4zYkK\/lgpHD04LaulGwsaiwRsNiiebcaU72p08Nfj24La3gNEPxoLlZlapERteYWpH0\/8yT5OA0Vh3CgpYfbYxVZaFvVEYg9DCvPG5woPOadvo\/HTgXUeOqlZ+9FGb4nTUxj5YpONPNUsI0UzAJvWPEdvpm9KihS73jXMQKtQ8BKH5aVKqBs0pjNDhl\/4OlI84KkMJdpkYU75PqSGpMwZ6dlRBfJErxdfPZZorEoJfDjRXH6N+d8MY2vYPSlnaZSacp3GGJMClxCTxcmJDleIkhRbpYkuWlN+4+nCjD\/ZQBFZO3\/U+mJvOCtZOk6jgtYRugo5gncpO\/7fPBAzFPB7URRbyDP8tbs9AFNSgs5rPgVvvhNjnJJWt4\/LJ1A6V+2\/mBfUEDTbmuI94KIxxvGWTb26KZLlY0MenSQJxac4xHeKJ5PJjFJLUgkW208uy9mArZ8OJw3rvG0RNR2Fb5sXW4+6QiuEt747vxcGW7fWUjVaQVzPAhIC2fIIrwNPuC0k\/HyvoW9i2C7lQk46DCbQi3HFK\/TFV7xmwDKiZS2Fv8j0tZVzGPgch3O7h7Prth1a2rC2XyLHRNIMXDES9KNkp60JCXlMfWvilSuZdiXQ7RFFP\/pFEUWfrWN7BAYil8TTz\/LHIdEbspePReaDVEIlZxHk2De39ef9SOKtn5G1V8mSB8TCUn1xmPx3n5YJkYOJ1Gg+vRCS8jClAIhA3bVl+PKaent2ND6k\/1\/X0wiSFYlIqg9kpeXbdlz8bWaFek5mpfICwVeMqW+4lEqHVfZ7EgUYAOE9kRHL0JEAyWHBWKcPJCe+c9gJ6dZyqmNIVlZ+xIVfi51GSGdI32a2M12TL4BE\/g7GApfr1olOmzKofFRzFSU+bnLvqPOj3CuGNZQGH","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnSamUBAf9MnXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1haUAAfwYoMsCoAo6sEAK5DT3NDkedJqb5vQ+3UBj4YQZZAAAXAwMAMAAAAAAAAAEzVCzVuilLAC7sjhEt3kHVhxn70ZD59FHwWZB0EwzLwuCgy6VGWsxZ6g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnSbbUBAf\/smYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hakAAfwYoMcCoAo6sEAK5DT3NDkedJtv5vQ+3UBj4YfTCAAAXAwMAMAAAAAAAAAE0+n34rlosTRhk67l1RtaS6DeCXK3Pm4P0U6pEriNzpBEKsOAWklLeNw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EbxHnScQUBAf\/sljAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EbxHnScQUBggACJ1AAAXAwMAOOAIO32NJwvy8I2W2QHw7Zna8Ez6VV5JTeI55gZYHpX13emX7r+yBz2RfW7rD9pRr+5CVePwTSip","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFha0AAfwYjbMCoAo6sEAK5DT3NDkedJxD5vQ+3UBD4YTCRAAAXAwMGbwAAAAAAAAE1eV6aXWsy1V5dN+9uyr9xsoMNp+vASp0i74OqwVtGqmGWPl3E1DfQPVrQOLJiT745iPvE5VINHK7Ct2GJbr2Uiy6pwpv8YHDrDxERfArIypBvO7NOGLnrzl1ikJKVbGxfeuIUKAT6QVaEZWr4AF8tISMXK\/45bWmYPPuMu00c6L7PJoW1hqil8lg4HVQCsNwW6qAZv0gd9B1hOQd1EzcOJ16Setzo1zlA8rhSzoYPlmBvYrTFXDibtYGs3phjXnGFf2nt\/A1lCPD8KTGcCEYloFFEz6mT2\/zwq98V9dj+nIRwYifEP7RsGklbpC5yukpZeMOocA2Puab9QwMFmnoyJI+aBmp1yxzoxs6F\/8E6574rW\/j0TzP1KeK3UrRoNuKLmLvSFLf5rj6HCJYw8acoeCR9+hX1opGsiOQEVP7a\/JtBN7L+BlDGuMY4GDm4zgudWKHIm+HQPMkL3ojevkDpFjSWrrTm6E3lqP1rxwRmEjEZ0jexR36g8vDoz\/IOEiGDUZGnmPh8qysfEA3CBFck7hUsDSVjaOE8IutlZLyq+CSHdNMg+yE7nWznvQCIUP\/bcPKiWJ80JocjuOpTGc2X67tU1TWXugjeUyqjmhWuU+F2Q+qxeBNsoApqQfXaVAEz1FjBENdCYvrQUuuGBZJA+BR8PNy2k1E+OOLdlqwkelkDQ3AG328J20zr7STulLKtP3mYHlxHEeM08Fqgej54UVFwn\/X6v0ZNU14\/gYBjWDzncuI1KNq66flOd9\/gufcRtBUW82c\/kW5nyVVQvUTM88GEzxXGO78l1curzH+SWPBN9fZWy4RZxV4LoKATdEkhWl2O5CrBTU07zUWs3aGKMP7acz4W9RGHf\/7DyOUPByUY7P7pJiaKZcF\/NIPeI6\/+MOfFUOfhqr3B8w59WukIOxgrKBXCrgeO+\/\/gUs40Z387y5x4m4\/ol\/gNOmzRG3xUlB9fOeOPs4EVncuvBrTdz1hwZvdf0j4h2vTEGLyifcdJqCK2Fy05NaBDavuLwKO1dhNvgj27jgs1AnTOmQSEx1x5DrCF6YfyWdbmL+dPGmQ87UEDJX9CPi4oaTdDYxwVoyqFXD8tCAQBYU3w1SJXbuHnUP00HoyjLWlnsfmqV7FUKxYgatnh8GEZ38sNXsi\/uJMjIkuCo\/5M8XUaYZy1eudAlNyvdAG+A312EmrQGSUNh6YZNKP1uFvnPQLt1rA3bOqh5qIbTRvAmVkeJCfq3nT4MFY6tmHLg5BGC0Mp3BgChT98rwCMOAg9YXF53aygel7Byb8dcYdPlNrcQaNv1OnS6zeFFpHCPMXTF6noh60hLYm5RQvpD2fJJd0JefBd7DRgiYmANxJ2p4aH+AGrcD6GJmFCkhYoagktDg\/7wJPFBh+6vWKAiyy8NzAjh7bOXRgeyW9yfx9wTFUfpvO1rUVZkBVff6VpkpanA522AFJC0Zo0oDZp6wC\/wx1uGwpoAmX1vDiW7BFTCis6YIxtYsZ7GiA5rwSEEaaH2yZL4q8gJS2WXi1RHa1NC6PZXU3vxa3MeGm5EgsIjFMP1uK8+5nxoq6SoEU6MEH70w2xQg5lNudpg8gu94ywrB3qJzqvHBs3vRuvra8kYnQMvFvvSL6zPYJxI\/Z8DFuUtWItYqNlw3tBolI4TzA6UCzX8Asn1Pz0GJX+IfP50FOP","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EflHnS2EUBAf9MK8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hbUAAfwYoLsCoAo6sEAK5DT3NDkedLYT5vQ+3UBj4YbGYAAAXAwMAMAAAAAAAAAE2o+Mj1by7rvaqc8+tkjsfCUL9hapZz\/38Y1qhXXN9wBG5H8zy2+udLw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0378{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":95,"pkt":"AgAAAEUAAFthbkAAfwYoL8CoAo6sEAK5DT3NDkedLbn5vQ+3UBj4YcdGAAAXAwMALgAAAAAAAAE3MP2z2uRHh39kNTg4O8rcIs27eg\/\/h+LETv7jMts2hwKGJ1zILzk=","pkt_caplen":95,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EflHnS25UBAf\/sJ9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhb0AAfwYoYcCoAo6sEAK5DT3NDkedLez5vRApUBD37+woAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EflHnS3sUBAf\/MJMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhcEAAfwYoYMCoAo6sEAK5DT3NDkedLez5vRCbUBD3fewoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhcUAAfwYoX8CoAo6sEAK5DT3NDkedLez5vRENUBD3C+woAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EflHnS3sUBggAMYfAAAXAwMAOOAIO32NJwvzkN6MsuJcVq3htyxymUD+VOygNScw+wuAqVinPu36up4bmPnVleM0VNzkVicUYrEl","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hckAAfwYoKcCoAo6sEAK5DT3NDkedLez5vRFKUBj2zjbDAAAXAwMAMAAAAAAAAAE4mGkmmG4m9EtJAQMcaSXzpwZ5L2FXv4TuZIYqX3ktDbxVqRBi0nb4+g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EjZHnS4hUBAf\/sHYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNhdEAAfwYm4cCoAo6sEAK5DT3NDkedMxr5vRFKUBj2zimdAAAAh\/lEBhJLEGz1kNnJDcJsw8XDyQZUMJOef4Glf2l+6oEY8qLyz\/4f\/BHz4aLv3+OKUjub1D4QZxjvxLstS+65uDM\/epmL49RqqmxEbcu\/NBZLby6rKMPPYPnzEVSWUMNOYVsnJXI477pE32QPpVH4AIQxymq\/i3EXItRABX5APP+ZPB5D8Jp+sSHi+IrEiwtbPDV\/TQp4p42HKlb5IFtEPFAM5SM1eK7EHNuDFOH6xgqZ+\/ILxY\/+kMhX7iG3L4VQfBkPyNKKt7vudX0VDmjeg\/vHZjQQGb11kTBj9TAAIVZiEUwDREJbWU4Y1Omc7RuZOXNZNOenQ3POMHFyvdSdw6MF0WabDAokjLeiNG+GjG67Zrq49DEEQDs0rkSlJH6dw4TxCbvGRaCP8hhatnRu2SvfHZXA99IXV2OK2x0AnrYjwXRBH4ZxLdVyuO\/ysYsLHD93gDotC2s8zxgRjbXdBYYakT93Rsbg7zaWDz0cQWMXGU6RoCXi277z","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EjZHnTSVUBAf9LtuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hdUAAfwYoJsCoAo6sEAK5DT3NDkedNJX5vRFKUBj2zhroAAAXAwMAMAAAAAAAAAE6M6ytnkZI4GI4LuEU7mM9b+d1XQVdgNTEh6++YJXxUsMz700WOC+qfw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EjZHnTTKUBAf\/rsvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EjZHnTTKUBggAHocAAAXAwMAMOAIO32NJwv0wzPnotxGjWA+\/Mowfgh91kbgfhB5wQR3nMNgL21vJn\/XJBUFep\/H9g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhdkAAfwYjYcCoAo6sEAK5DT3NDkedNMr5vRFKUBD2zqvQAAAXAwMGbwAAAAAAAAE7eYX8g3kqayYmNoKu6l4WFGYRcy0\/hHPBCPGXZXBBIG\/IITMltskuFVT4z4RGzMyIwlzM8uBuQeAxlNsGQElU634kOEL1PASdGlv9UETDPCM3QniLjVvImty1fJteVYeU0Nbi16uCBdTGTABQdZg22U90Z4Gn7\/VgpH6os1Y4WtBdYRX86jl2OWwvYAmnSjHOBy8P1T2KIN2Fc14yr4292x78j5tCWF\/nOxMBg\/Dmc87aKSBLjgZa6wX05\/jLA24tNaLkcTpbIItX2UxdyZDeu2dEI+0larfkfQtoU1YpQC263bif3uOjjw23jZdY3kYoJJZ44iap5u79OHQQYWurdzqBWUdff\/1fz84CGpBsVZETDBX90IzD9vhDzzvcFZKOyDl7SUDIkcKKl4X71\/Ba+ecOowM5xqL4FOOpEyxqtn+aiw73pKYZHS\/Mmu+gWQIZqwsQ3\/wuj4mVNDYEyDnY\/JueCa2M8ZOcldiQ6VNrhFX6K5Gsm8qkTwmwekSAbUjgFlizalMjPTMRoHuANIQjpQ2OD\/hFIJ\/bn+N7rajWhMZ3BSkvI0s+at7WpsgVOQBanHqvkTVIng9xRbjQljaVOwQyUaHDaO1g2VgGEycwyIy9IJIfYDIh\/E1fzemOSq\/YpIKN8zyMO24IuMyqyhWlK5fJghM8CVAWqgkWzkHbkAmuhZaMsVfmy1+1gw2TOFWYniMOjtIII8fEu2fH7J7AU2EJEjNKbpdxuv\/KMEoAS7QHZPuXJIDoLqei8rO+YQ88y8lor2LpWWzbF3xRJyVynRPK32dXUQYPvleRBRz\/EmWNLb5\/EjbZQerIFcfZlQqR6W5DJ0bo85kNJCENpL7XIcuWnAZBi6pZyNA5KKZdCeR2Jr9SUcXxTXEzrmGuJ3WHhsPfSgePU5V3UaTlSTBnk0juzL+IJd07tv\/GSr8vkdCFvZisyD+85jRwZH960hIMcG8OLuGEWI7pjW76A16htzfeL4jaXFXw6Z0kq63RZwLY3dzXa8jbl7\/cPbzlI3k7e+Zg4qKXr0QrMbDmCu+LCP2wBmmWUVDoemUhNomiqdx6\/BCP7KkH9LfMOwMo7voVogME3gwm5afqujUlgJGTF6B7zUceNaRBxwoZhCjVexPGbLKV5T4ajRVBUad2eSJKyYeWasz8oep+cg1ctWVXxRxqoPZjIsY0yMw2qpqPHZo5VreYOt9t2unBvEdrE2O2c\/N4roqhwZvakpCX8cR\/AzvVsWJPqzQhPPbANSGOQVjg1yyJ+q6g4HVtoyznOHBc9JApy5IzhAza62L\/x+f4XL6n2rl7b9+1a81kj0VQI5\/ZrXDz5VcUj3stVo5fU9ceQo8Kn9OKQGyn67srIRvtM+hbg+WJEblAhZdTG0+7yAb7DNgN3wx3JNYjJYo+rCMuluYsAb+D3NRhfMLAhIzDCn3VbYIHy4B4jrAI5oDpmQzVrmGjKK+2aaocDh597fAksH7qcRikWkaYUg8ztIbxCJLo2v068teugu3HBHM9ehYzQzxZAR80nsoR4zZZkVYMiafafHMH2beMFnTYWcIr6lEFoTXPyaKlgUX3FJyJCdObbK6MGeE9+Ns8r819LgAQh\/r+SP2p7BpwY1tkrmTk6CWbtj6fqrrmwNoJj9ZJzpvxUC3TgQG3WlIXNSkiXkqZs1En+39lMYmKSPNy","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnTs+UBAf9LSQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0308{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnUGyUBAf9K4cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hekAAfwYoIcCoAo6sEAK5DT3NDkedQbL5vRFKUBj2zg2sAAAXAwMAMAAAAAAAAAE93wptMKjFFid1yCev+S4AKU+9FWQ64xI8rnlKbAdtbyGjj+yzneeDaw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0380{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1he0AAfwYoIMCoAo6sEAK5DT3NDkedQef5vRFKUBj2zgrxAAAXAwMAMAAAAAAAAAE+vspc5QzSYxdnWF8Y+zYYuy6ye3i776qUVE4BEpI+w3CgQiG7iquM4A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnUHnUBAf\/q3dAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EmtHnUIcUBAf\/q2oAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0390{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9EmtHnUIcUBggADzdAAAXAwMAOOAIO32NJwv1xUSTP9Fg0ZRLr2l0ZHbrCMhkiDMNLjR9prw9eDYD+o3lSxZv8q4wZNAjvVZR4icq","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhfEAAfwYjW8CoAo6sEAK5DT3NDkedQhz5vRFKUBD2zkTjAAAXAwMGbwAAAAAAAAE\/rLtBhOXXgKbjK8G6Xw\/cc36rB6ZW6CpO6eLn8XGRBnjR9ZoDodWkc\/fSc9PgqGt+l7Q+c+Xy8YsaEOmuv86QhPiVzSNCypMsy9ZFNphMmQCmTGiNLcNaFurVuV6OBn6s1L+OEIqy\/5vwB7a1q6oVWd4uIP4JF8WIyIvpJtzwsV1e5Pz1eEuy+BoA4msg8ENaOq\/p2ymjKhqqM5sxSKGQbCt\/rvh8XpyHoddw2gjV5ztGuXLhxAgRq6K56Ei91kFiquZcttYl3U8a06Y41YG8rmzT+7hCq\/6omZjcwYfJZmbjukaAUdFH0tl9nV1zF7x+Kl2ZZAxd4mn9iziwOPI6lAHUun9AQZp3R61fkWvEYJ1I0IEcxKA7V03ETiSiGK+3xEL8nnj1WLINhYH8DjC1sNjxBs9qEeGGh9JAOfHuovKr3h7Z4P2iDDFpgjPTfuXXP7BGOsjDBFAPl8e6icaA+mJuIXygKFDAUqxERe5fJ8sbsEgf9IvRMz44NQYKmlcjsomACy\/SLC2XigpAoiTJ\/kaST4gkrDJ9qVrpqGZTXxdHctJiK2vQ+CrwZqxjWW5rPZ53f\/GLFav+j1lmvzqMTLyvRGa8qCL8XYNRszjbiX8b6SWfrNJ\/dDUrsqxnFGDyBpRAYeUFA1gkWrFGhmr+6WJsqF2obSXbZnsWy1OZrkU1J+4SVWEY49RKq0jE4\/1F9jsMeS2BoNfDlq4HQgCdj+mO1WatAow5wNMxy0SU9HREgOzctbbeHSaw0s9j9m91HhYrneIV99RDMbCpJEX8pQ1t7AG7j1CFBh3DRmNMHD\/UIwFItGvWAt5HrknyvWI9q6UWp8rzxQS7pxuN0ofFIrn9j0FbZYb\/I0hyzotJUA24VCr5xWSH+0u5fwMdIJFxCJQR6yR7p7U4FQpF6e403oDBcFSiR8GXrTJEkjnglD6hycDkilbluIXcw+hv5Auk6kB\/gZDCpZi3qObyKQWlngKDyXdtb\/LyXyI1D7LLOW2NBkoTSK7i+4Mc0eP6Ti4nWRRQQlxeGlgq0pr1GpeczwynDsVMKdN4kCnrsI+RAYIcRf\/zVCmgFLGj+SfNY9EAzHx6HpfUiolK5qSx4ajzz6k+ZTlt1EGJnxsvON\/dEFEFHuCjVs+k+7oWntJs\/HV+gxgPukBuq8Vkfac\/TapSN8Y9mOND0uLKnX\/BZ8c1TQennu3z9ulpKQ7kCW\/11DLRyrVjBoya46wpPOmJC2X2ibUOaN4WFwGBokEbXamzSbfB6QSIhEga1EsKj6TfEFIWlKxom7S2wuhmfsdOgly7sz\/6IkGOKrPA56843Pd4fE9Ps7rsnRVBp+enyx7NuWLgxO99ds66ja9uqPfqHQSltWS2409uK3QPvi7JT3tV+DmMYqWPJmRYX67+SvrWMs7pKwZH2f65RhPNBqFCRT3OdnGvKniR2JppU6z6HQaj83h6iORoiw8MsY7aV3VqZLz0Tg4MJTD+6uon70VGwM+RpMDnZ1UpiLYjlT5XnrpR4OlOPSugYyVt+eeK0ShH9HrP1FPXBh8tnJGKZAakzugVgQSFqfBQPmMRwaFy5nxsyFltAR7PrAX49j1OfvsP9pBm7k6vCnBR6k1N1mE65WYWS7ciesXMYLPWW7Cu4E88Ou2PM25DXPgeir5X8JJq2mXbXKzqclBlHoQauMrd","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0191{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnUiQUBAf9KcBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhfkAAfwYjWcCoAo6sEAK5DT3NDkedSJD5vRFKUBD2zsdLAAAXAwMGbwAAAAAAAAFABHNIkBmsC5+RanhvQPwGl5pMmzQcnCKldRD0JkQgGRIo2N5dQYiHY2dVV1ZcTcZCg7GicsT4Qdo4Lo8gPYUgxRHVbUb0CwW\/T2s4kMpQZ58tMDkKAMXIrmcrAIiphHNY96G0JiufvV7DP1DlwbBA+JC+1T2\/Df3jBaWbD4eJckXFR4gcHx4VsdUmWyeJQvHkl\/pxv288HkKn\/GehLD037INaoaWlognHrOse5xObAd\/BQGzOzG12bjWMX9WMt1L\/ZbMiZTRxNcsYW5zgp7VqUi7\/FLhkBtEm1dTJgmCCPTuQCZ39C\/zxraz+gAnDGsxqG3ZRqe1bkazuDhKmwftxdw1Fi1RFfZ1L2WH45EjVL0JHErTpjHjR4XI5ndFDRxQLIkz6wyWZ+gCr+2MLHqJvXue7OEISzE5JvmmCLeZCoLg5BSiUUIjA13\/lfI7gJZaAw16VnVGEm\/i0Mhyy793agWIkS9xG4loNVDF69Ay1jVAqvdkfl7+Fhm7Spd19dlED9+duoYf6eMdqGxXLqn\/rcxlkCADd1MTAkOH29SLwpHCgBxEr2WixZ2aey5Fg43jaQ\/mriiCN2pOq7PNanopA3lZ3YtlH1MjGWPXNDYOUvnAsCqBK0qo8dbST87sWgrDWz8c2kP8ceq7grwKQGbG4szFl0D5\/gSUU\/r99R+JK8SrHS3u+KLsWA0E\/Y+BxlCzOaaWWssA2dybmBpqwEg4XZHSUAAr2rDKfrIW3pmYEmOzOu7exblB\/tYXHNlRR\/l+nPssAaHSZy5tgaDezM8krRly5b6IgsDwV3HWFwQBGShoRAdijuhOvUxhSAnyeJDUp7zSzXKfyTzRg9IMI6zQayvEcU2AnrSVOH3sn4TR9SGjijAwknn\/F5wh0roGeu5iSeOdGdUILan2dCp8FjbPV4kjAp51MQGW2w\/LYF890hyarkW5ZJ+8nlNSNMbRapVSQOf9z8uijqUcVPBT1DDPmJe7SFCmAJwnKUjrbBRFxDUGKACiCDI0Jb+tU6UBP1lKI6EAODWXy03cWK\/IIlY5zmVMs+muAmFFvcTJdrmHonnKbKumOj36Tw1yPOjyrjwvnPecmyIz4mDC50ZBJmU\/xxQ3xcfexzJpc6R1GKHdsePLiOoOxq39K6204\/b9TDUOlf1gJc6MO0YpEGCWYOWfTSlfXDa8CLoO3JlaRMax\/jjdV8pzahDYdskIWWTUvek5a14f6kQrRPKhM3lndDq7mHDkFNRNIQ84krAnJNpWEkP24vd2PKhRGQho0P1oc\/TIhZjDZHGAE4hxbrgUCSH9gmOxSOiaAd4P++oxPBBuHFRkcz0R90OiuFwT3UYL1lSV3KIiKQXCq3vwWADAyX3RxcMcMKbJNNCjF6\/17K5x3Kf9FgViOucP0AcclvazMxSAQ+\/XRAP\/O5kP9jnSjQ\/JUfbjY4Wz9E\/lD7KV3ztRS+y7LXrsocTIzCFldVHp1cCFalVSVDXjQiFZ2jchQOoDwfFYjarFBf0IJAPnVmRbg1bFAylv0dgyhIlUqKXlWP7XWUU5q6dPv3w+fRUIJWQNIpPOkZqYoy2+WZ2wpqxoXoAqCliHQKp++6n8L9qOu+G7UUwaGAVNr\/Xh9SDgdNLUjBsjS5kt\/gILCwYOmROeqg8Q5TT4vrn\/xgVdOHRKcpgy0qfVdj5XzRmF5NWq0","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnU8EUBAf9KCNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hgEAAfwYoG8CoAo6sEAK5DT3NDkedTwT5vRFKUBj2zih7AAAXAwMAMAAAAAAAAAFBMujxAJyWjpa3fL4KSBB1IFl020fjXB9OrWXs7Fn2GCUsUIXikuhJWA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnU85UBAf\/qBOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9EqhHnVWtUBAf9JnkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hg0AAfwYoGMCoAo6sEAK5DT3NDkedVa35vRFKUBj2zj5rAAAXAwMAMAAAAAAAAAFDQeo84mLyAgPUFC2wGAzbNfqNdNicVyq\/r79JQXfk5IU0cdJIgtbMtg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9EqhHnVWtUBggAHErAAAXAwMAMOAIO32NJwv2zBmmFaRESPrDzcjnq0pnCl5OS81JV\/05oS\/l0n4QXxnLaaoNG67Twg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hhEAAfwYoF8CoAo6sEAK5DT3NDkedVeL5vRFKUBj2zjeXAAAXAwMAMAAAAAAAAAFEO1iyFLAtFNAi65YKOhOywtETM\/OpRtp8o83TdsZlY+wkeaTQmcR0WA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Et1HnVXiUBAf\/plwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Et1HnVYXUBAf\/pk7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9Et1HnVYXUBggAFL6AAAXAwMAOOAIO32NJwv3FH\/VVI+VAzQdpWhfdVHo4N6Dn5HJHCmmbQ8nzUHHXhnqWvFFAXDnmvzy\/oEv9UvP","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnVyLUBAf9JKUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWL\/UBAf9IwgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWlzUBAf9IWsAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hi0AAfwYoEMCoAo6sEAK5DT3NDkedaXP5vRFKUBj2zujQAAAXAwMAMAAAAAAAAAFI8iaYv47IU2jgIyZog0HDToXP8rh1sy9kKFB7lFQ2NGjkFv\/eeNMuFQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWmoUBAf\/oVtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhjEAAfwYoRMCoAo6sEAK5DT3NDkedaaj5vRG8UBD2XLBsAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hjUAAfwYoDsCoAo6sEAK5DT3NDkedaaj5vRH5UBj2H8\/LAAAXAwMAMAAAAAAAAAFJXzBsIsMLnT6vr72qzAW34yRCEEC6mshg2kXA+ZcCIoX7TSIRgmeWYA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWndUBAf\/oU4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hjkAAfwYoDcCoAo6sEAK5DT3NDkedad35vRH5UBj2H+jmAAAXAwMAMAAAAAAAAAFKVSI+hrJMZs3X0tDg8CYzxmsApSA8U8R58j6jeUSlLGzD8crvll5Y1w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ExpHnWoSUBAf\/oUDAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ExpHnWoSUBggACDqAAAXAwMAOOAIO32NJwv4zL5rxWK4KERaZXZ16sI7C4okOMb7+mN44ylv\/TIVfFGIUKZrH\/hzl3bjSvBQIWgV","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9E1dHnW8LUBggAEz8AAAXAwMAMOAIO32NJwv519VhnarkBFqxB5bVWUndX6\/NWZjP+ov+sGWvWuErx9wmd7PZubVw2g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNhkEAAfwYmxcCoAo6sEAK5DT3NDkedbwv5vRH5UBj2H2EIAAAI961gOM0DiBteyUHN3XP4zVeBKHJJynxtHMwWAYOwjrje3MaNqMltHYIOPkbazoXhPIJZ6MNJjN1+Sr3AceTbrn8urMdlBU2IDR5q40wHvFKNiEJr4Q2cSCwSjsW3eZI5odxzCXI7SYxGi9bLu0Zyp8nUygBUlFIT0Mmoxd4BgmKPSe+YzdVhBLjK6BiM7l4heOPsHIX\/6scgVmtq6RqB7sbWRE9CMjKksNrXHM3H3n6uGjh7zMnvoRmFWv1Ze8dz1N408fZHPfKP9wr3oOmxDaWR7hSJm0hqROpfXRGnRPoqmoH0w6cRNnSMu37kCF8OyqZklXTn0WdG7a8v1OohNq9UIfsnHn+ZQPyQd8P0LvnLiQJDcJJiUe5D1Q7+amQQtt8qihsrMqbGUU4PIxBA7rEIKbAB0bqAAdicQB1fm6HOTqFqiQYvVvhofL4t6rm+9SHS8gz5jvNvxcYPTxsh2eKYNfNLWp4Lhof\/tSzhjPY6vBoJ0CkKSTL7","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnXCGUBAf9H4nAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnXb6UBAf9HezAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnX1uUBAf9HE\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnYPiUBAf9GrLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hl0AAfwYoBMCoAo6sEAK5DT3NDkedg+L5vRH5UBj2H3oNAAAXAwMAMAAAAAAAAAFPaniP8Z8nS5vPpk7mhZCbZs3jP8QicTQ1qdOs5YOr8Fj3VGocW4TSzw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E4xHnYQXUBAf\/mqMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9E4xHnYQXUBggAA6EAAAXAwMAOOAIO32NJwv6sB+VHagVedYVJz+YpgIC2Nm1pDTSst9IlphvLLRoC1P1CM4BzgGeKHPsx7mEnr+9","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhmEAAfwYoOMCoAo6sEAK5DT3NDkedhBf5vRJrUBD1rZX9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhmUAAfwYoN8CoAo6sEAK5DT3NDkedhBf5vRLdUBD1O5X9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhmkAAfwYoNsCoAo6sEAK5DT3NDkedhBf5vRMaUBD6AJD7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hm0AAfwYoAMCoAo6sEAK5DT3NDkedhBf5vRMaUBj6AHsLAAAXAwMAMAAAAAAAAAFQvAWQ5AfbnZTHe9roUiDZZ4AO8MCJMKIGl4UAXEq8PNksqFlyzLLf6Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGVhnEAAfwYn98CoAo6sEAK5DT3NDkedhEz5vRMaUBj6AM38AAAXAwMAOAAAAAAAAAFRqUKVSZzcfEvjrXb\/tF0BL7TKmneM4p8MzrkJB78x0chuUzOQ0efkGkPgwa\/2QOCM","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYRMUBAf\/moaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hnUAAfwYn\/sCoAo6sEAK5DT3NDkedhIn5vRMaUBj6ANaeAAAXAwMAMAAAAAAAAAFS9TMzp8bBxuLf\/V3aHGi126e3GA3lOiJosataQqXlE7cLSdfG1ZOc6w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYSJUBAf\/GnfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0832{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYS+UBAf\/mmoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E8lHnYsyUBAf9GM+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9E8lHnYsyUBggAI4mAAAXAwMAMOAIO32NJwv7V10O3phsNWKw82345mpS0yyEbGijFsTS0rk8cMLH9sF8\/\/yeZ0HgQw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2048{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZGmUBAf9FyVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hpEAAfwYn98CoAo6sEAK5DT3NDkedmBr5vRMaUBj6AFoNAAAXAwMAMAAAAAAAAAFWjVe+onW46SwYOwlmDkTTX\/nkfjVWUcaZHJfxE+wer8qMdCrphIqA2w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZgaUBAf9FYhAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hpUAAfwYn9sCoAo6sEAK5DT3NDkedmE\/5vRMaUBj6AKnyAAAXAwMAMAAAAAAAAAFXfAJFANOEXaMcgrCKzH\/JKlqIio7I+Ap7g8dn0GXk4rAI\/JqLqUcAyA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZhPUBAf8lXuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZiEUBAf\/lWtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9E\/5HnZ74UBAf9E9DAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hqEAAfwYn88CoAo6sEAK5DT3NDkednvj5vRMaUBj6APumAAAXAwMAMAAAAAAAAAFZoHKM4B1Lj3QF2FCtwKffQBOuiIJObqd1oKyRRNI8fy7LEr2VRgt9MQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9E\/5HnZ74UBggAN2iAAAXAwMAOOAIO32NJwv8BFFrTGGQSvSZOEaxDGMvSFyqy7UxKoB2MHP\/uUkfZLy587P1Q8xOl9j3jqzLf3RD","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FDtHnZ8tUBAf\/k7HAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNhqkAAfwYmq8CoAo6sEAK5DT3NDkedpCb5vRMaUBj6AAJuAAAg6IQLFQyOxVUAHQt94SxZ9s3b8p+Eb5P\/YCKeYnJdX7RNHsvOlxLqIkz3HnL6ebT1qnvnAPTIIdRYqjj2sWjF8+RT1\/4Y5Fy1oeFT7iVj0x8y\/HjoiGWcf6P\/+HXma+nideu32ot6Q9mjg2LnISdepoeDc7ws8Vzbrr9Lfs\/Uo7cHoyJ9OiPQEf8Fqsq1T6PvhgkZ6RSXXKCBwYVJYFgdrR42+uaH5JKxtkSvwjKzmRkxMatqLznM++PaW5bmWDlLeID5nGo68QGjlOBnZ1j+GNP6s1LSTl2CRabycBQ\/kZG7LJa0VM3odvOF49xHomgifhnwOhXh5bIKprMVxAJpOGCLK0V3eTCXz\/wDL2crK8PiGuDUFMGzX74mTJUHPoJDSyS2a669wdRFw+erBgjAQ+Rki+5sdr5qlIM3BbgsKtySpNocmp4lQsJzPeNttwiL7R4d9uvwORIuluuRDz6DPDDGaH3agT6cYePuYCCkuXowmgpfwLlGseFx","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FDtHnZ8tUBggABvPAAAXAwMAMOAIO32NJwv9OD9gXowV8OGSSgaa2Qq\/d5WmIKuxS5\/Va7aL4L1wEPOnA95imdPNmQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnaWhUBAf9EgoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhq0AAfwYjLMCoAo6sEAK5DT3NDkedpaH5vRMaUBD6ABvDAAAXAwMGbwAAAAAAAAFbJLz6Ft1aoNmq31h0wBSYBWjPNQz6bmnhdjkKs4Ul15bsV1IybDP5Oib8G4EK6qhfC+OOy26gVPhIK1aLSKW6nJJtex0lhaaC42LESusk7RRAJS56jae1g1GCtp6tgjcX17BeKIc+RXJEzXaPzN1TW+iug1i3JiwsnHFnql\/KJjIPs\/WchggPlwRggR7YbSiVq267hFJ4CBg8BIxmckK6Gtd7Cxq0s2vjw2tDbV3BMTpNG05zhrElxZ5ZXstvAuW\/EaTJwy4xv1Kam6sYytZ9UDhYHRyAxYRCoKroimtNqxz2QAmHk9MWixOaJLNKg35PbSkY\/zjHF7xaN6\/oZFcie7+i6BiruaUD+tsYgq7vcVk0jPvnnw1rjY+VqQ9nsyxp0JKOai83pLZ1o9m0jip6sXrFaP44ygEVbAAcKZJnbMcDI4uBXU81mtNHSvljqMcVlgNPQQphQQ8qDCG5Kb8AN2ycY0HuBUcKXZAhPP\/CHZt+EgQkl2PzLIPmo0xFeoqxsWKIcl\/MjoaNYA4eXipitkk6mpFhamTvkjTfTie6tjRgn4w1eR6RR6zMEjxT9kKQbBrvvwM4RkDBNaHsnRRZSpZb4Z0i9N1ZarlxXrMlwt43+RpY07gDdypmOLq98AV6hoxaFb2yr\/a3+jLmqKCI5rrksLd4VAv9cznYVFfdW1z9Wq\/ve+h\/2iFkFBLOu4Yy1lkqNXwzp9XISqc6UqGaXsN74O6+WpBXmuLK8\/fN4X5Nh351PlcdwNgYN7rbWdDoU0gnDEXJEHghk\/yLOwqH4AG6SIJuol7\/ssqF6MP84CAiSaaAXbUqKEF1TeYoCN00zBzHHUJl1c\/V6VTEaNy3T52DXAtyraIbO0MqLXK6KZSA01uUxGdCpKYaijnx443o2kywOLCc9kwLDucxFjFp5JCiw8P53UsQ9j4rRiIG\/1ZI\/dUeecx2lG\/MwaDL34w8kAPU5CUPvSB+FwDUe3uEceLlsA3c2cAVeQoihdo4el3fwPz2kIyMJ36vh0W82LHR4sKUbKL1JkCD4FL30doCySebc9CSc0s8a0bbFDhbMnuG3F00iJOkWt7VIggEsZssLZoUoC9tQk6KH7X8lfHcB4+dO0dTu++zeLbCVGkEIcpCD16cbi1O4aBOvphp7xxkKPbOG39NNLqtpaI2izy2Pykkm11l30XToQKTGMN1wWqmyY0ve1cA5dAsOiA2VqaD9m3rC7tw4Pf2Z1rKZ6Xkf1u8Zb959T1lvg5LQ5b94znBYZ5i50dmeJv\/\/NAzDL50y4vEcEfmil4hvSDDtVOFoJhVjlL5C3S2NK2JkgyHZiiwvXAjc1mjAouxXD83tcgALa3iPx+iMl7frbl8Y0eIfWcobgTF7dlRqcOY52A09ZjzWy0C4Hz8v2F4V4zdpnuetIvwx454TDZoGGtWpQ9Q8is8StqnahoAG6zSuLI3n\/pnesXuzyVekvs3IW+9ghyurSSvMPV3sJ8Qk\/HJm3lqqF9DYW7EBch\/6HmXE4O3EI4AU+cXQzuHuVoy7n9DSbcpPP24eU0yexndLgFBG9WmUP8riFcbfPIP+kQtX+NH5gFimjIGjxGyXfMmiIEIsbXKJA9GlcSjtVi78YxL2hcOJq3bnrzRjaioArsrhW0\/YbQgNdRLNDI0DcX4ShZYJBqxRgrdR0511MzOudT2","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnawVUBAf9EG0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnbKJUBAf9DtAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hsUAAfwYn6sCoAo6sEAK5DT3NDkeduP35vRMaUBj6ADKEAAAXAwMAMAAAAAAAAAFehkG4vI3N5pLx055YcfskKM+A8gEffCiLmJH43G0PFEVRudWnaNTJTw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnbj9UBAfzDT0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhskAAfwYoHsCoAo6sEAK5DT3NDkeduTL5vROMUBD5jlvgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FHBHnbkyUBAf\/jSNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FHBHnbkyUBggAA3nAAAXAwMAOOAIO32NJwv+SOhJiUJXkUULYhgjMbvEHRlgDgCT3zacgSqUDlE12BDNVmjWicBRzch+hmC39N7R","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhs0AAfwYoHcCoAo6sEAK5DT3NDkeduTL5vRP+UBD5HFvgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChhtEAAfwYoHMCoAo6sEAK5DT3NDkeduTL5vRRwUBD4qlvgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1htUAAfwYn5sCoAo6sEAK5DT3NDkeduTL5vRRwUBj4qmWIAAAXAwMAMAAAAAAAAAFfAfYeE6kQbR42Nm0\/64olHDgAeHKlGM07fg4yVxtgpLc30DHj4slMNg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FK1HnblnUBAf\/jQbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1htkAAfwYn5cCoAo6sEAK5DT3NDkeduWf5vRRwUBj4qpM3AAAXAwMAMAAAAAAAAAFgm9XrmUy9BZHK80UBB5D\/hQgHK+X+zsISRcTg38cXXAhknkogA8lQOw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FK1HnbmcUBAf\/DPoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNhuEAAfwYmncCoAo6sEAK5DT3NDkedvpX5vRRwUBj4qvKVAADi6w8TlmNSA0Y1qePuSmLCAL\/VcoIz5JAKAbPrLG\/1Aw6rjs09LqIe76Ya\/nRRUfV9OKSzPl8BnxCxT1zLur7BlGdQ6SX+O+H4XCWn7ogv2XXl4ABXWQxoZFWREjh283GGTdakw66S60yHMP6OPGPSBGxU4We4IB4VtThBS\/7ZLWcZXBOMS79jBfd6kzRhTRjJOQnRBQ0ih\/HgCp1AzptWk\/zcECFbEp01omLf31XLKcyNJK6sollLOLx7FZEyEyU6pJvN+LhiuYo6ZlFCUTFV2ORWQMeuHwxvVlvnmRD1q1jxV5VWyBxIDbN9QfEoYRWevIGOuX0063XWsVyiTAZ+Sf2UQwyS7moqsh8vRBLNzBZ1VXb3cJ1BwsaYC04Gg45CbInzDhmN\/u\/PJ7LxEVx\/xeix0zikZUW2OD0Jhqxo88zQ3UYF9fhWDX8IlNsGpSzsNkaZ9lfI7MCcdsBITg7ZZXY1truabUa7ZVEnITv3Rl3lRUi+yhXuDiBk","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FK1HncAQUBAf9C18AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FK1HncAQUBggAE0yAAAXAwMAMOAIO32NJwv\/HqAQb3fAoE75POtmVhhcfH55fmiRBaC7gxfrusnFJblsfLBdeV1HZg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhuUAAfwYjHsCoAo6sEAK5DT3NDkedwBD5vRRwUBD4qlTuAAAXAwMGbwAAAAAAAAFimDHp0Ls4LwOqe4jc7D8mfmWDOE\/CBw\/M5OxykKPVAjYqRcGkZV9BiJoxY6dXyf5cJO7B+K0vfVugckHYYqPH6Qq45JvNENJquTEMF6botS52u7a2BI2DZiR0Bue2DsOaLxWObOiQOHqE4zn6vVFGuHOOv1JF5JgGxcAMwVkwTyC\/2evy6yAHYhEe70bdEgehEvkYV\/af1aAPwUr0ap\/ggG87n0HSCr1DQJfanAbRjPavtV7mBsuGU7+QAFQXpUmHRAx4w06\/EQmdZ4B+DRMUIg4VvXRa686swn9sTY1rFo8v6tBwZRipfATrJnEY2voMYIz46OFFUqw3dUI382lGuB6+JXXnPhK9S+mdkjHnQzHQ49h2IWbwPJ\/a10rEwVOQovpeeG\/1PD9+WQr8hzSYwYofpNLgjFv9voGEnqTRxIDyUjSCJGGDP7GAsuOcTq0jHt61+mYSOBWu3BkRCy2a9oyTJtEtQ3+l1OwVcAS76muddxbNrQvSR3H8y0EK8NRm8NuFTdL5RKU62zeq7WXaOSki\/fBFRBTq8cQ6c6kTWZObvw5JAqzxwZGpZYJUseFlDJmGxPVKFXh0umyLd1m1T0bvffsYAuw0tLG86k9IvGYmW64AKZDMvbd+Rw4sxvJCdLnLTbT1Okyo7ySY1QqIN1ED3NYwb7vheGAsJvJB3u5nv74Jibwegh9ShxLODqaqrAL+qg9hxUK2F+KCUz8BeerEaNI4CWVfRFRBz7OpRo5sQYI9R6ptYxF5q9ae960wArVtUhe+cL4hiad\/GVwM+v741l8Rz22hsbn8RYo5BYP1I05uD5oG6gyaV1qaTSo8qgWe8mcj+JR+9pF\/5gdtgK8oom0J1fV73tA4XTSNNvcAkJd7ajb1HP+z0dDCplr5lNVdp8p4sjSWw+b3MEmX3UJtud0mzIbhBAFLQNRRiFcmT1MaVPyXORXVk9WMeuOkdNj16TaDFCrG2c9a1490+t4qO1bv6Y7IY4ecTK9n31hs44lH40F\/xufdAC\/z30QHGz7+wEj8sKbNRItl+fta\/bUBdwjwQt59GgbGyhzTlIrY+EQZ5x6FTQX5c9dE7x6kVVw1MwLzz6Syu+r4sst5i6r\/bdVmzy1FXJfffb\/RM5IApDBh8YWSUPH5chUVsZVi6jTY\/dHrzGX\/wcPYjr5Si1YGDIvReuivR3IgL0ARfEm\/KxV8ntuaY+m2iNSXrqFFyi+lp5o7PgrWqhHiS9TCYfc+RDTJlLRFd0LWiZNhzxUfbx2aVqxKpcyUy73uHr\/AS\/MeJ+ybMhsrReg69RbnFIRWS5JrNLpJlKxE0UCwmG+uhdvQ3nXxJuDfJShD6o7w9z00PYHxRQ\/yJqpadOKIfpp7jIneJxTYBb\/Vc6k5\/XOzLQemDYus1HJqIQ5bRKE7rv1HzC5j3bGYw8AHs7XZKxB2lC6o2n9heUh8tEDhsGKn4YgSzOQRdUQCYVAzTolqpj94bX9Rmve\/WIOGcsvo2Jeqpr91VcAHfjz1CdVN\/RK4Kg8GehBn7olPbK\/mqb8ECQmAbcqZPvaroR\/qmdirxCeRsiPgmMQZ4RXETEgk7uY4r1c93B64yvlVr326g\/9T92gbW+c4aDTAG421JZMg7RQqsSScTTOsCb0yjGSXvUuiHtOIO20ycqIKaNvf3tF17cKWMU6NzMNWseLx","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHncaEUBAfzCb7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHnct9UBAgACHOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHncz4UBAf9CBfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hv0AAfwYn3MCoAo6sEAK5DT3NDked02z5vRRwUBj4qmhxAAAXAwMAMAAAAAAAAAFl7KkfeJoCaAmviQF+T\/LDvnlFfZmWJM0NzuW1ReAh9KIatBirBl4zhA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHndNsUBAf9BnrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FOJHndOhUBAf8hm4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FOJHndOhUBggAGppAAAXAwMAOOAIO32NJwwAhupPjLlkHPhISwimghDUmk5bfCacLx3q4Q4JJS+Zu0kgZraUpwxVP8Isw+hqYdHO","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hwEAAfwYn28CoAo6sEAK5DT3NDked06H5vRStUBj4bey9AAAXAwMAMAAAAAAAAAFmkl\/HBi4FGAWV0PlM2rGTGJl25t4Jq5lvuztewtkudvy0sm1X31VGUg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FR9HndPWUBAf\/hk6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hwUAAfwYn2sCoAo6sEAK5DT3NDked09b5vRStUBj4bWzFAAAXAwMAMAAAAAAAAAFnmcBN75QeSt6KmUmLrY4QPRMYfWe0whc4xnatxSmqtJfUBMUhChmKTQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FR9HndQLUBAf\/hkFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FR9HndQLUBggAFZxAAAXAwMAMOAIO32NJwwBTOT79NgsklpRGse7jO6vPDUDZZ61LHmE5ApAJpFk+hfuQ\/ez+Zo71A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhxEAAfwYjE8CoAo6sEAK5DT3NDked2n\/5vRStUBD4bc9tAAAXAwMGbwAAAAAAAAFp9BqlxM80LSBopbe5UPzQRQOflKA0k6UZ4INFVejrpPLXue0\/RtiK5xULHvDYvxy1G2vXGwgx54FR7FHwbHCLf\/Z2wSRUXyI2mTpRYCuUpbmcVSu+AL4ptW58Mpf6DVevQirxUZIbfVzlYFvZqsZxTYxpM6RFG8rQQalrmuHztfuuNZuLxuzz7mH4H2gZIAZEGGCkTGb1IQomRempOrEd6QYvTz0lvFht5iNbc+zE8LQoMhzNEBeogU1BQbHR6j+vKFUbedpIOeJ7KjlIlG8Y7r7YDQYaBaiXPyS7CvEDHLndY354\/wsxNhLe9pc3\/qqbsbi4Ndsmya+SNxNHBJT2D66r2iL0Nc6iTNbmL8zywuy7lWYK0+8GdLqbg7gaLq7XUGfmfIdEv+n\/rUymCVC9ut\/dVhoZAxoivw6e9e8wSL92xj2vfsp4mvGQhzGNHVavllFYOO7W\/DDyrCMkuDV5IZeIPTyyq77OEsezfNqpxC5VqyHIADR0UpP8r1OqruqyoiZ3AHVh2OzwP6EVdeQQ1Y7sWtByQE92B94rcDe3do26M4Uxad7sTzarq8a44vxWC7CvdP5YgPnPkeUZSFLw6uKWZc9YWJTR\/0CfblL6pFO0VmMAZ058j9Qb8W9+SKnmzM730o4Mljt7Oio\/MpNB8OetN8dmdFZcN\/b+ic26MiYZ4pUddKwiPjLl4fiKttpCJoaKIj9zw2G2GQNLRIFbunEoU8C7hHPg1jz0pjwcPbk02ypfTGZvk583hCO7XBvJjYgSfdFsO0P6tMDkjysWwvkdtfirYdSGaYMPPbZKhvKV14GHhNL68oq\/DuxIPidXo6C6Aq0z35sM3k9A+oY6eCd+q4JNZVgQYZJa0Uie5q\/CeWEGJmfN4ME7DK5\/cdWqD0r97qDqasFmVTyWk8U7NKrw27hxl7isk9\/bJSqNNm5lr4XsMuPXmnPSFIgj+nA3JpQGks8OR4lsd0g79b7oEwVRGJyJGntP0eGggScHmUf0SGdDRPmabRDKQwusRX4saDyNEPrQihDUWlz92QJsNs69eeQkPmkoPFJowSVtmaEZVYmZVKl2TQJ7SQW3g2w+SLOMUUoit72Skv7jmJnWIr9WXib\/hlhtC9OTRsal90A\/6Q00lNf5TrdNRABMyjM3JWrT5PBzCMU6Rh2XMdIJf4Dbctyr0zuuHV7Qpe5lnFLiqmr5CYkBultJlWMDU01kFCVhN1B3ErkB2XWE9C7HHgRSxt1hGIIk+Y5i7DlKE0Dg14SAD467cLva91jmerl0\/gjk6KvPzkCLs7YaK1Rq4SWc6ng6RMAchTvuiBqZmaajnrNcjUAW0O7Ny17JXyguDnb4pb\/j4Kp393XAY2FJNhTIf1tHiPy0BI2C2dYMtyxaXd2WJejZ67ohXwTzIVya8nf3KJz6tA9JG25J06iYzQCxAPezLuy+uV7lNwj\/\/kQWTDUOYbmIyYbEHHnjo73PX4lDttXTHi\/+uv6LIHmhHA4PYkNBvuLegQa+6GnaaciGQZxTMr1nkPxjRDlmHINCAIxHwEpn3guJfcjVCFkitZ6+jklJH5Pcvfoo6+E88byrOcorcBAcgDMtWEloFx5Em87wrqIP813q\/UhFZ0dEl7eAq476Hd0Yc0s66jSV1BMbzese\/x+gOgKA6\/V5dxh3Y6ju4vT0C2mPEsre","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHndp\/UBAf9BJmAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHneDzUBAf9AvyAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hyEAAfwYn08CoAo6sEAK5DT3NDked52f5vRStUBj4bdNJAAAXAwMAMAAAAAAAAAFrTkzcMI6Hl1jQzZOk1p\/a1HjqrAJ5r7naah\/vV0R6pQyEgCTrRHQwCw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHnednUBAf9AV+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hyUAAfwYn0sCoAo6sEAK5DT3NDked55z5vRStUBj4bQqQAAAXAwMAMAAAAAAAAAFsLS1825utYQ9L\/csD8G4a82o6R3iJWvTQPCuipxsKGwTOuVZoXwYSXA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHneecUBAf8gVLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FVRHnefRUBAf\/gUKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FVRHnefRUBggADoHAAAXAwMAOOAIO32NJwwCOAltiQuwdVeMsx6TPw7GBNqEVG738jmWReymP27LsHRPhASSde7CMMnwS6lk2bpD","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1hzEAAfwYnz8CoAo6sEAK5DT3NDked7kX5vRStUBj4bUXRAAAXAwMAMAAAAAAAAAFuOBe3QpX7D0+dQV9eNuKkd62OKODF24nMY8O3OyVyUPVMedyGkTvb0A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FZFHne5FUBAf9P5iAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFhzUAAfwYjCsCoAo6sEAK5DT3NDked7nr5vRStUBD4bfvmAAAXAwMGbwAAAAAAAAFv4bCdigB4cNufXwTtdML2U9RBKHXv6QtuVZH7vpjAfp602kT8cv9HPxX1nEpWhPS18\/eA9BltNE6coL6T+r4JLaxv41bc3oYGv58qrjGd2Vw9GXpqEA9evxndVXRBvO4k6kyXbfe5p56m2rI4l6dVZis6\/24Xgrm0uINAHmfc2lDouK9Hy5APCKEbiNeSzkFEyGYT0R9fZzmZLZ7h6BASU0EXEzQC9imn4YGvwXwoZSRYeDdSF4XlAoRqUew6rF9XENJdpbaoAzX5bymkcbSHvH1EOyQ\/a01L\/Onwi9zRLnJZ\/0bHk+Bj1\/hRFK2qYXVn\/Dp\/za56SS4Tsfm75W1GtQyBuEt08gKakIx132QWsmD1Mio7aY3x1Kt3RBzq9w6g9KC5Sm0WeHjwuJ80\/oo5GVmW3Gokpor50hBMUdc0xBZflJ9\/bQp4TefphoKlcJkhxeoRdwa4W4OgLr+8HifknaItiz8SUCLXKhFAbRP1+RUwK1O0sl\/8gw24WjtOg3uGVt\/TmzyVZMNpkDuI5DtUZZkBz4si27Abjb8Q8melON3Kpovjv30arUubVQ+roH7vkTIUZAg7CO9WYizmgSLtC\/UyZdRHi8UwT1KVKwKTOPAje7lTJkKrMJKcwLY5RbXSaog0sG5bz0OL5EVJXUA\/qCFsNeqVmbZGw2Wd3kzBZ5Ku62Yh+pufuwxoKDlN2I2s+x8tSYkeFeUztW4bY+HOEymwsde6lUmpvrA6xFjqr5kNYrChEcxQv3A6mOLvna3j0zYUkERtx4QO1LGpoPy+xo2kqavEr69\/GMCIpLdx4xT45XSchwDtN8cl6iMUjPEk9IIyKnQm9h7jhgWfr2ecKFXAJWW098HhZ4FEDIj3GeiX2+Tsh0UJvFLse4LFzrd+f0ewdG2O804Ye\/Y95XVaPRceUdgcPBv8VHXvINn7uEdry7wgwS0RtRv+I1X5FXjPzvIrBipkjOMPUZ8kFOO4lz7\/CrncfL8LY8NvrXPYTWM07Dmax9mJaLRnrD3o3Nf\/VyWtRGA6vRcmpQ3F7VQDMCfdhi4fEnmzGuF7QQrqbq\/qxuQPm8A5LnQ6LWmP\/7pNroNDtn23aimpiCBVnE79p8HVA57CiSVN1arZW90XptGMmmgO5rDeiv+6J3Y8DYSFBhG48J4HYmVxT2IorlJtPuyvEQOncGg5+cv4Ku16IK2AS3hPrurCCJUgUxr2h64yJ51djy1aaP1BxuqjcJfDSTRkCPdO+XMJ0Oi8da5z\/8isQIZ4hWPLZcBEccM22b45jgrsat6PcvOV\/PJOwGQi01IZ6vhKvyE7NV9A9Zqbm7Qtb6scFTO44F526aEQWJWRBt3yHWnQtY9Ar9uKXUFjRKXuOFqSDdYaRMMVHXniVQN72Wr\/OVFwyXcQJkz6CNL2JWujCzILZ\/7SMu7MvkyhngVdBCsu8qkxOrtKpri9Suzm+0aTT1MDFhvMrcFmRZndYZfrjIqZZuAzcBuawUHZazPc0l4xZnY5ZFLbc3TV4BCYivxfq8LBXhmHfdHgLpAVxQ7Bk9pivyW+kZIHLpsg\/o59oaYncrtykny4JmRUv7jOKwRUZdS2qqE2STEivN9\/h3Jih73GQ0y9FsHHiXz6eYZQ1DebnqgMwv6jpCEmV8JfpRSASdSLG6OX\/G4dlr11mK6winWDO+W8niS1","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FZFHne56UBAf\/v4jAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FZFHne56UBggAGljAAAXAwMAMOAIO32NJwwDKKwtlmCCgnDEngr\/HgQwP97aZv9klDsdjiAVRwKwheljK5+i0h2MCg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHnfTuUBAf9PeEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHnftiUBAf9PEQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNh0kAAfwYmg8CoAo6sEAK5DT3NDkeeAFv5vRStUBj4bfW9AABfFtRNFNfcSl486ohs\/dPmyrVmgNT7aGA7+LtXWEypqj4OO17nTy3evAGeypd01L9dadj+eRwGAaxAPZoMyMIghsrtkOlTF2XzN+8QMvoYfIks33jH87YPF0236cswDtTdr5ZdmbMB1CQqzuB7Fb11oxGzkpd9dvlt\/tnKbTDNG1j1e1jHL0Mo1HCoDbGov10Q\/utPLxTGHC6iMKvIUG9ex6X2DAqoskRj1ucYHyVsLkUqppiTSAxL\/i8MXqaOeg2\/bEtc7B9cx\/nUpykUTsqH8Ii+HK9GwIkCYN1e0pL\/iQDLln+JzxrB+N1REWUvSz1LovKBz2jj3YFTJBAwT0rrkDqVsXHJBLej32x\/pMjiUTB52JS\/l5OyEXGOANpZZtN3BFiIk7xCFnXuSqYyXGURraDd1u2TMgFej40su\/bbj\/mQ\/\/u54WrW0MIBoErKF944nqldWkn1jqXiuBE9IRjUWbZDGn4+R2cu1AUTrN+fSHDOGW8Y\/rSSzWHJ","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHngHWUBAf9OqcAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h1UAAfwYnxsCoAo6sEAK5DT3NDkeeCEr5vRStUBj4bUL4AAAXAwMAMAAAAAAAAAFz3ekfX\/xsemB32RMlvjGk5pUE7jnl+1y455m7Ev2WUlsAqDmYEmYmpw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHnghKUBAf9OQoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h1kAAfwYnxcCoAo6sEAK5DT3NDkeeCH\/5vRStUBj4bWRhAAAXAwMAMAAAAAAAAAF0ls\/\/8c2Cv\/OFMrN37w0SrSgmsTO1aR7ETg9uxpFTUloXAM7MF8BFtA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHngh\/UBAf\/uPpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":109,"pkt":"AgAAAEUAAGlh10AAfwYnuMCoAo6sEAK5DT3NDkeeCLT5vRStUBj4bSvvAAAXAwMAPAAAAAAAAAF1a1Vbp1h4KJINnK6O2Yy1Qv+QnuEJB\/giCtrFNT3D5ePfBZu9ATfse+L0+WOOpkF7OMqtBA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FcZHngi0UBAf\/uO0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h2EAAfwYnw8CoAo6sEAK5DT3NDkeeCPX5vRTiUBj4OIYiAAAXAwMAMAAAAAAAAAF2HB+MkOpkE\/5U\/F5SxP1Rv13gKpjWM+t9K2AxLs7oiT\/g+fv+IlNJeg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FcZHngi0UBggANSmAAAXAwMAOOAIO32NJwwErCozv40iaprw7zIua66zO7lXbrh7x0iLKlEAY+uw18uiYVMVXwxnwUdUjjsSAHbz","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FgNHngj1UBAf\/eM3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNh2kAAfwYme8CoAo6sEAK5DT3NDkeeDiP5vRTiUBj4OIieAACfeRDVJd25nDpbUCCXUqRu0qmEN3K6SIRSN+nd7ZFEsK+La3HHblYvNCROi0iZCj0vA5MF3JrtffnPsyA1zC8Es6oXqxJ1mWYthTLdQi0szYejvgf5u5VN9ewBukDUwqElBYibbpT0gqdISD3wi\/MLx30ciOXngqWpVrLFPCqK3ez7CaztNa3GF9MGa4b3d5wiqhNLMnMrg\/Ni+FQGpSicVyc2Q9+xebwi0jvgovU34JC3xi7Hp95VTUF2b874t2LXOnGc3e5H1sLAQVnq9ljpoucOPPWHDsKWjRjZFhpzDD2PNGPqBookJgVkIf9m5dz6URWlcXEGXSR+ygIJKXCAUTf\/UOXufL9H1+5DnhoDOMFGECSGOzm9ysjxiAPcrTFD0oz0RptF5Vjt7gk4QkhbTQFBhJ891bPA3Ms5zkBUVsgW5bBuOsp8FC9nNlBpDhtNmohztsduER2pROYyBDBB7yDk06pXYlLKgP2jlb00hcyfscAk0X9Ib5r8","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FgNHngkqUBAf\/uMBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FgNHngkqUBggADxqAAAXAwMAMOAIO32NJwwF\/DbtfCuMJFveI8hKBqhet\/kA\/kqihH8ixZOMbzPvHQED9p\/11cwloQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHng+eUBAf9NxiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHnhYSUBAf9NXuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNh3kAAfwYmd8CoAo6sEAK5DT3NDkeeGwv5vRTiUBj4ONk1AADO\/IkAhGnQdaSgMlfz25M41t+rquxP7+byMqBUFwZss\/Qr0IK7lhEoBjMM8v1rupL0K9yPiVspFE741XPFzFLF+4v08oYFaeGD9\/RKH9Z3QyVdE0Dd1NLvrbaZf6JXzMRAFgzhRAsW\/bq00OjUBm4+GCqH\/T598vkmLpqkaiKBwTMtzHv9gsNvt1yKdoO9l71O0yhvbK226gNrFwbMbU\/mEq5VTvUNozcerbM6uEIMhWL1jnVUIHejpXexVujI0RO8Q8XwJVZauxVGTG8XrnB5dvcO2Y9MXqc+X1ixdSDTIy9YCRDoHc2clrhZDZYv9YI1PbOHbblLgWUurW+JNyA+NqYLoOrn1sYtnF+acPeBA7sWE2jFWnQ7tOXtI7\/xc9YGceaHsSTZIb36oLbgxfQQoz3NITXH97NWRO6J5xYDiRPiheV9\/hKULYIuMDH4gEsN3wdvhBL0OHugJshsjt020UNsXTZ9ZspvUqpRrjS+9MWG\/vHxeNM6159W","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHnhyGUBAf9M96AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h4UAAfwYnusCoAo6sEAK5DT3NDkeeIvr5vRTiUBj4OLeqAAAXAwMAMAAAAAAAAAF7vblTUQLrZGJNOAqTaOltMuS3vc6gMIVhDIZ5NSlGjKcwt\/aLxNiVVw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHniL6UBAfzMkuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FjhHniMvUBAf\/sjHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FjhHniMvUBggAGu3AAAXAwMAOOAIO32NJwwGpu8rAnzk0FYv3Nt14eN5iQBGZnQw\/QgPwW1bU3w8L1JBp24+3o0Zz8kJHZgZEntd","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h4kAAfwYnucCoAo6sEAK5DT3NDkeeIy\/5vRUfUBj3+3K3AAAXAwMAMAAAAAAAAAF89AIj8tzQ9b15COM1SWsaoxCWLEXsP\/Yz27YObUL4Ar1gCyzSVa4NNA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h40AAfwYnuMCoAo6sEAK5DT3NDkeeI2T5vRUfUBj3+wUQAAAXAwMAMAAAAAAAAAF9u7ZkLiWbENa1WJwm+h2wVDPUKtOI1\/ptPHRcsHXVY1iMHGwJltcmoA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FnVHniNkUBAf\/shVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FnVHniOZUBAf\/MgiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNh5UAAfwYmcMCoAo6sEAK5DT3NDkeeKJL5vRUfUBj3+wDUAADAhkdRtvXNGW\/ZYUOTJvRvY4lqeu6o+OpEHc4lnZimd6YbETaqpDNR3jNyjFmWlprIxB1pkA03Dy8L2DxKxGGu3UnOfQUVriKWmZ2\/2WedInWA4DrXL5vveoZ+1eHFhaZ6orIvD6nk8GuVlX6GhhCAuz8Va4J5yjGwVAtBJ8C2NXNDpGlAG7Wgn5X3BjpffiFrgyDUJ7qkLFUcEz90aHUzPggFHMphBIF\/1Wz24MqlYSvkxfuvEjQa6o6advzeW+8ixeiFr1A3E77S+Z\/Db+D2NjNGHKl2876y3NhvA5oAYU9lBCY1EIzNakJjWZZcRMwPzVj\/vteEPQ4KBgyvYagR6Q7IZjqIPVqrbMvxuNDFuMZsvp+6lRHh6b0IBc0BVr3W\/ed++wy8WfbGsbsGSKlQVFi6B04D94U1jUXPgVv41VmZKAxMt309DhwT6\/B5cVYzdQBBz6PiI5YlxOjKz6fDKCqkeNOBFtTm282pCfMomaut5cTrakkUNaJZ","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FnVHnioNUBAf9MG2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9FnVHnioNUBggAOdyAAAXAwMAMOAIO32NJwwH59R3tqXByKZTPWEPAv8GnMo+elUt0G1yVSxKrB2325UgbByW01Utqw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnjCBUBAf9LsNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnjb1UBAf9LSZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnj1pUBAf9K4lAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0321{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":54,"pkt":"AgAAAEUAADJh7UAAfwYn2cCoAo6sEAK5DT3NDkeeQmL5vRUfUBj3+xY1AAAO+YL5FQGh7XOH","pkt_caplen":54,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkJsUBAf\/6kXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0469{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":161,"pkt":"AgAAAEUAAJ1h7kAAfwYnbcCoAo6sEAK5DT3NDkeeQmz5vRUfUBj3+6g8AAAXAwMAcAAAAAAAAAGDVt7o5mVbN4WivIBaUa7hxYfMgPDCFF70ksVJi3\/QOYElOVE8jH1lHNkDJF+pc20952egdpR63muy3XGPsGO3u0UVrEH12BJZ0D7rqDv2fNq8OdoIZDMXZKlo9VavIIar5g\/KYY9gXJQ=","pkt_caplen":161,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h70AAfwYnrMCoAo6sEAK5DT3NDkeeQuH5vRUfUBj3+zLcAAAXAwMAMAAAAAAAAAGEtkKjH6ExD9X\/QKV4FkjYyh0yQtggtezA2Ha8lRkyhfU3mL9EzmkNoA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkLhUBAf\/KilAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChh8EAAfwYn4MCoAo6sEAK5DT3NDkeeQxb5vRWRUBD3idH7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkMWUBAf\/qhuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h8UAAfwYnqsCoAo6sEAK5DT3NDkeeQxb5vRXGUBj3VBmwAAAXAwMAMAAAAAAAAAGF8\/SFJGLxCSezHDL8+Pr\/iLsDblDrUOkCns5hY9BHqencMfmG76UIsA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9FqpHnkNLUBAf\/qg5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h8kAAfwYnqcCoAo6sEAK5DT3NDkeeQ0v5vRXGUBj3VMU4AAAXAwMAMAAAAAAAAAGG+VfBULapTFMC4lQTS+eKYYLQ4eW0wyr8jsQlr3u\/MZkRZbRPDKnotw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9FqpHnkNLUBggANg3AAAXAwMAROAIO32NJwwIS0AY1x\/bReC\/V4EWbYp0LvlQrIhJvML4JhKzxW1DiVNEbwEUJei4ATMntuxVx24k18ZI1P5bdgcYtgij","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9FvNHnkNLUBggANOfAAAXAwMAOOAIO32NJwwJjVIk3vOL6kU4qkEvxf6QPymIl2V4EKf44Msmo0v7+dlsBGnMpwyf6Yf60uVvmtwz","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNh9EAAfwYmYcCoAo6sEAK5DT3NDkeeSHn5vRXGUBj3VPoqAADOioWF\/y6G8HTig3X2HjNlps40CXl4JevUZeoLkKMgWaao6EdaAD5G8Kq1O3rfa+13SjthYi0sEQM+PBi4un4dp0cbcU4hQBpCXdRwpURHxbYGpseanCiB3Ui9X+sDAVrL4iuKKkE+o0ptBxzWCzcsOXJT1\/rfQR5v31crlgNIYKj8MvMAQ\/HZkpx5NL0egBeZc+7YSebk85bkmlO3p0bQpwBW98ttlwI3OG0efZL9140XqOsbICWEkWPPUswfZxnh4MSyI7qE3hTj0JMwJhFawxtIGMuGUWS99e5uh0ZX+QkVPOazE2Y3XPaj7LbU35T6qCOUiKB0\/Zw74NXQHpKuPtyvDHnszBL4MpoVD5DA24u\/Z3ng6qLaYdziFHOB687ltOJNOhw2N5SizhFpL8uJzKn9lR6BdFPoz5hWC2hLiDLthIUtQ4\/Eot9YVjd3E9P\/KMbxUzqs3y8ZkVi8sMgkiJ8cPJeNyrNGemw94Mh9SBkWhBt0US1A+tzk","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9FzBHnkNLUBggANOuAAAXAwMAROAIO32NJwwKpLU3Bt+OGFkB6vHsuk5a6q5cna9lZV0Et95B40r5rcRwXz1zWATRSBNb8gni3TfRkyG2UdC2cNNYz0ET","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F3lHnkOAUBAf\/qc1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFh9UAAfwYi4sCoAo6sEAK5DT3NDkeeSfT5vRXGUBD3VEQTAAAXAwMGbwAAAAAAAAGIeySJ1cFY8TmmDHHcY3RNTUFny5tU7AUzuYEQjrdQkpqvtNQfoAlTejSKBNoWaf0VsRAavYXj\/\/PDj3grzaBbRSlWwHNXsQiVdbulZ0\/ZHPx2vlsSxcZJ5bS504gNcROUACChvr+dlKVuzPJ2BvYdCclQD9IxAIJd+tU52+g8z+2QOO9VEC1ymmDYEORAJ\/xdg9pTyeDHGZ3ts5q1kwlS6ydqHLiHF5YzrP\/KlI781HaBQp3H6J9Kg\/sv+z7ljKLlwlNOpKzs\/WbPOETkxQKXq88eUT5q3znR9upZBNRBgrJZ1T2lECysHiXsccNP2zve9R1k68YDcA28uLzzSEHEIwxvhFMHXDMhSQ2oIjhxx7j7ZUxiqE+rgPSEZrhTZ70IrmdsJK2xb6EInavC0w9wjFP766Sumfm3YjxXYtmFv9SQzXkvS6XCE1QQ8jYe+K64XJaW49XPiPZbqTG5qNJE679jys0h7amgHmrwKKvLfWLv9Z09JCoHT96yWsl3i54OrU+Pfzh0\/2UpMazYZGwJxKGkL3QD4oGFJIVWSbJpMyOz68pOk4Gh8WaP1Pf7LTwBItY6fkeA6yXeve8s3q8tuUMtxzY\/r+m0Efvs30lGABPb3pLRzFc52Dkl5Mv4pNcp3Oso71sxkUPcCyCDj35CmmPiQI3pjZO1LpSfwQTYnnILVGyC2dEVFlMutgm8PBRCpSv+aZkrZKK2bgbJZF\/kgyNBtfmhsk1hC1kJDAXGAjajZGHoAlWOs72fBQEn7SU5NEa4hA3jrdvAlT\/iYDu9CtQaJ3AC0c9fIQULt1TmpUZTpIybYfzEXZS\/nMVinAAIjzbl6JCfTnjuZpz9bhUaXUhS\/p\/Si6IRs2tWhhnwwW+tuGdFax1m2jDJjRRCtXxuDpf8iJQtAqz7Av2LGaNKyVvI89anYLA1yc7CiX5wSHsEAec4OBYSyvs+UWNf6b14Bz2d2xjEu+1\/ihocqRdTvJD4D6aSAgzQuoEN0BNXH\/hoomVJ\/2ryF1o7Ukx0ecPiT4DD1h4lLlEQG\/oQq2SOPBkf0a8GpcUaL2dCzv8Tg72sQNPNPAebOoFgfbeBI3gQv0mey4krWN3K5YOMDpwxIPOXnOq+PBMHb2nMQcUrPllQypzQ\/oaihcNyEcYgOBd25hBY8iGtclppzw0Hsiz7csJJNoZI\/9JSCMHKd327OlCnDi8eYEpWKQOIy+csmrZ8BIRmUr\/0qLvc4U+8nQQ5PADm5KAe9esUVg0TktgE8bRfCKLXx36SbGoHw6MJKVZ3rCiUseVdtd354NcNfmmH3wG8NBa6mdwQABqXwziG0NolQnNKNuk+XdKaSxTZKRQrlpKh\/6lTCzjFGAKOhHtlqEv1UrzxCfSCBL5imstprycaN+JCP0WHoVhmxOoc3Kbk4gLVengOdItdWBPI\/YEiIygvxa3q5eP8TazOOMTZdCf0Ctvo0R2QmbKZWFZ9ruR5Oh5sZ\/a0XDrHIdK76haFR939ZNRWVyKw41sAcFne0VlqkKwlcm0wyF5dCqAAWe5ijjwd94HEB7Ve2Y3c\/oT4AgNxvvO\/myrFXOf9kp9gbmSuKGqv7nL9WZSbKoUfKZkQdPY+evOEMp4Cipn9hzXyTL\/Nva01OugyRcAeg+YgBEbwD1LTC4+DvRagzs2t69L+BFNBddI41cTYAuDd","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9F3lHnkOAUBggAEjOAAAXAwMAMOAIO32NJwwLeKeqLh3s\/9JpjW4uMzcLr\/QsWrvueqSZKBFvwuXbTShp9ZnvBZtizw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65Hnkn0UBAf9KCWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNh+EAAfwYmXcCoAo6sEAK5DT3NDkeeVWH5vRXGUBj3VFqSAAAqyjYSkhDXEndQxbxoezHbkzOCsre\/Ayhr8fA3hCVBwNmI0ux5QjCkecRhQE048TjlybW9l1UaV7jf7zG4u+YgLGT9hTnQ03\/Fdt7oF6fuj6\/FapVRlZ2iV2hnWvv540RGvYOujwIQR1U6QFaZann+XcSfFw6kYwqPLjkkmkt9kBOorkHERxcEn55+6G4VysGu0sJna1EF71g2a6Al\/FvLvYTgjxreIyLl9YtKQQ3EWpZbGT3Hi9GUmNU4XAFQyoD2M1LTbEzGGhR9epnzqpJhM2VIyQUiHUZnRIRr5TH+j\/2UA4\/lbEThCW\/xR3X11j7oiDiXqGY6vp0t5AmlauK0kuKlGd9o6vt8kWmrfYLSXIc777tVG1xEf6YJmkQb+mDhf7xNyisgqLWKPBr8cBB4rFA+tCAC8B4jeL4X7JwYTFnxg22WNzl0xQyw6FzHotwd5konXRt4JSSwK3Te+eiFv7eGPIeZGCYBRAfrKEGg9cjyaozsfkiJY0aA","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65HnlBoUBAf9JoiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h+UAAfwYnosCoAo6sEAK5DT3NDkeeVtz5vRXGUBj3VPW3AAAXAwMAMAAAAAAAAAGKX0S8Us5AudIkPwARSfstu2eOl94dvja5ZSHw+BFOoBoeuEuX4gZUhQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65HnlbcUBAf9JOuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h+kAAfwYnocCoAo6sEAK5DT3NDkeeVxH5vRXGUBj3VPIcAAAXAwMAMAAAAAAAAAGLToF84SmxfqYp0uIzrGDK5PCEfDoaXX6WTXVZfCUjMCOIDiX0BWz1lg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F65HnlcRUBAf\/pNvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9F65HnlcRUBggAJPzAAAXAwMAOOAIO32NJwwMJm\/FzgKiz5\/irRvd7\/uoHLXbDS7KU3E5Dcm8A0ac5KX3A3Gn4YIMrWl\/NRCz6YrV","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F+tHnldGUBAf\/pL9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1h\/UAAfwYnnsCoAo6sEAK5DT3NDkeeXbr5vRXGUBj3VExMAAAXAwMAMAAAAAAAAAGNJk2DuCbMJukjvWFkNqRhImuYLg1bd24gRv+qJ9zcPBlleadJsxSHvg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F+tHnl26UBAf9IyTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9F+tHnl3vUBAf\/oxUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0385{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9F+tHnl3vUBggAOMOAAAXAwMAMOAIO32NJwwN9p4VhYyMOHdmp2SM\/dXJpAgBC6\/noIYsIU6eItjDL\/uvqKe\/DYI8Ng==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnmRjUBAf9IW1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnmrXUBAf9H9BAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiA0AAfwYmUsCoAo6sEAK5DT3NDkeeb9D5vRXGUBj3VJcXAADNJLSbKOgfgm4YjbCPTfxopFucSJgKMRKd\/ZFj+lWzZ3haaXjRB9Q+GxbdIuVUNWpWejapF9E\/CAt8J0esq5d0eCmkl1Ee+GijvmV0g+jj2Qn+ZgLlAb\/YoqMfEKbu4OmmR7deJcp8e7ugfVjXKC9lFb\/0alaKEVthyh4TNRexHJXyEdYEauJgwdOgdm\/jMY9wBVHC9sdiNDZOSTo0lU1e1Udv5zLQtW5e3fRbBDV0SxeVrMCBL9q105Tj7y82WgmPR889pqC8FFtCP2N7am53tKz88KuPhVxVKRQjMHkIimfBZcYCE\/VvXRZzwT9TlwEn5+1+57AI3OBZI0v40YubX9eUlaVFZqlKe+vzXd0rL\/6u\/vmZldbv5LR6qavWls2Je6dRM\/VxD+TP1dC\/ijYqEec\/jJza\/MZnsADb4nvf8AcqiyiD9\/zGfPWJJH4oc95IUKf2qIY5xIHwqrWWKqkReIWq7VS0DZ6LCS9+guMqMXp6aPT6lXQEMxGc","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnnFLUBAf9HjNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFiBEAAfwYi08CoAo6sEAK5DT3NDkeecUv5vRXGUBD3VC8VAAAXAwMGbwAAAAAAAAGRASVBq4uC5hdyLVlOw7DPPLp4+U9xHXXkRSI3rTUh+9hYrgsAgKUXVcbphpv7QI8TL6a4E6WQV0zBCDo3UM5BsbEnoG+Bp2o5\/zkt+mS\/9kc\/NyW2ft+Vrhqgd8awrXIe43UxRqQdbH5+TG1o3X\/eDnCwle6R4PbcbKPaxU7w5jM43aPzRqD4RAwNbpxn+kBQ7n++F14dwpMihraKaUCplabtT8YdzSB9cJ5GkixCL6u+TJscNHQVHgSQ7+lyBRKP96yCEtaKIemFpeAhr7vYuo2r0nS\/F6bewPau0Zug4VSxB9WuvnxN8\/SLE1BC\/ZtJo60lxBD+GpDaJDaNramwwJlv6aGnyMYe3q6koiYBexkSPmtLOrSS+p8Owz3vTABv9QHh6X6BS2GicoSXKLn9yB4zwQaulgydigOG5AqcNvPJhgS2FT3GraUtiMANpK6T5x2xxyQ5+ekDUeP4dDv34IG+9EvLgsH2P4MKA9F9GUOx+x0StrKcgb6\/Z0nd4PlN2eP+A5sntGRFrfTEl7gKh8VOBfJLcNlAM6ThpGISRsZKsv0kiYpyOAeAZJcGJuo0mWDeUtCscM9rcewAvcds7vvJaoRxt2+yTvA0Q01SMNxfkoN4TpFxPlE2WPrynaNJk6f5eqR1TCtiYCiGLtCzodD+ujeCSDyzeorjSJWcZna5Zl8DrG2P9MpAamMLVKfoAP2cGwCczbTMmsickcz+5dEaKUMdLqq4bh28r7bWM\/UWnLWfuy6BVD+KlQsuP6u69P51b6TRATxaD8HZwfkMkSmQuQWPF+b3i0YyhPvGyAH0K7XgJFGWfyGE7H2WUawWSHReI6FzS6OAh8AzRsN1Uy5TeuQdXq\/y9+r+jxH3nbkJSw0XsjEMTTwiG+sp2GDnlqz6zb8aDy7hGWD\/ACwG0PSBofcu\/Ib\/6qjONo84TN83IITbPwfOvM7XnYDxS8PD186+ruudnX2Epvg34Da5RY65XZNWhDijAQJap1nRLSGFCEbCywXoOEJF\/Wt\/TkboNsA4Wwy7xdqVqbD2svtDrJJkoIU0zfxprXdxd0Hw4ne\/Is9DB68a2DFkdBDfhEbPkME\/gMhflnhTGf7h+G9TBzXWNSM96LaXgbwvBqL1xpYrLFrTT\/o\/zOTaYMPn9oi5yrb1+Vcy1nUOfNA92SqZcCU+\/xgu5sFNqgI+hFCyFO1I4vQRXqc05+OFwwN40hX+xbebn5Av6djE4h0GaRl0CiEcpj5NNMhQniwJHrRtx9kEBx1GOtwbdRpJeJNM3Yi4PN8Qj6OTEajWjWG5J2eQtj\/wnLzFVfJMuOhYyXW77\/yQmyoPu4fvd1pO8Mhu9V2+iA\/IHOCwkc0xkI7P9mSs8CcTnNRzf\/DVixzDZ2RuDKrKTPdFhsRTHe9vqyg0rjW3ly8cxuKoAyUsKc0LR+KSZCyrz+654GHaQdG12l2iNUHHQGpva6tLlWT+pKwuE7QFNyXJRJ2galcsrUCqMu5XIzN2NWYvUa5LS7EFYF+IulGFzHCsCbt5f2K4R0uXg6YhPVzROU5GOdnJ1LdPdnQHskOi1B70UoofnY+O9KtG+seUPq32ITZYr\/yzQtpFYdFLySoiay61yZUaztteJV3xU6UdnXdZ2hBQ7Ew2eaNwLxGbajeHXjvpugo3Tk3AKwoDgfhBXA\/OfnozMul2","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnne\/UBAf9HJZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iBkAAfwYnlcCoAo6sEAK5DT3NDkeed7\/5vRXGUBj3VHfxAAAXAwMAMAAAAAAAAAGSHoXUkaCR2IWzILdBvnkJo45fzpjV6rP3C89ybqe5ucPTDwwL6+DvCQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GCBHnnf0UBAf\/nIaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiB0AAfwYnycCoAo6sEAK5DT3NDkeed\/T5vRY4UBD24p0dAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GCBHnnf0UBggAK3EAAAXAwMAOOAIO32NJwwOVTsOL\/VvIZCgQGZlGsFTSgW2s8aD0EM4Hyvm3mkkRCcs5QnqSnC2HONYrRX5JnLN","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiCEAAfwYnyMCoAo6sEAK5DT3NDkeed\/T5vRaqUBD2cJ0dAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iCUAAfwYnksCoAo6sEAK5DT3NDkeed\/T5vRaqUBj2cI6GAAAXAwMAMAAAAAAAAAGTjiX9yoZkYAFer7pCaqmc3r6B1aan\/5iw4OO1qRjnddxaF8KEVStWbw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GF1HnngpUBAf\/nGoAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGViCkAAfwYnicCoAo6sEAK5DT3NDkeeeCn5vRaqUBj2cKNzAAAXAwMAOAAAAAAAAAGU59FlhjgpxB0CytQtZfVI4qlOi4pxAxtW6XIO+hT+\/OmzrwPqkiNOdeWcizWdr+ln","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GF1HnnhmUBAf\/nFrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iC0AAfwYnkMCoAo6sEAK5DT3NDkeeeGb5vRaqUBj2cBloAAAXAwMAMAAAAAAAAAGViVN6npBMNSiZS3Wa228j+GBCBbW7cJXQ8HMZd2uTe4bqQ\/ZjbeYzIw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GF1HnnibUBAf\/nE2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GF1HnnibUBggAHBwAAAXAwMAMOAIO32NJwwPsJsVBKJtYRa4ff3dDfKxeg63ml4x+tblOdBnNkKr\/lQcjcxrOGHatg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFiDkAAfwYiycCoAo6sEAK5DT3NDkeefw\/5vRaqUBD2cHSvAAAXAwMGbwAAAAAAAAGXxOtuMOIdPchbA+dnt2y+nsG8LbMPoeGm3Racg5SoEZib8ZH9gsB1dveTZCk\/Ni9osAQpF1hrWiI22WB5sLGudKbLbr4vb42d4iir5t4o\/DEJbD9rCq7IT2T6TOxAnPGyBvhiID3jM6qngpi77zCoppH9buXWb45eIcFm1ppQPUoh9oFa17inrtvfZICEAxCnv5EZ9+4sEnArSFpG4oku+720xjhb18H5eZHVU7U67JsYKsAiApJUTGkxh9QEzHrig67Kv5KEI4Gn\/VmpomlkDzYyEMlGOnK3\/m7mhmygTIAaR9wgJa9hAK+Qp5p9FvgcvbGMvJDSgWGKsW9vr3hGAPt0iAwm2h\/kVgnJvB54zHkjZKbxZdYMh2IgTO9TUc0afEFijsoPtgknBfMcqSfdF5aHsnUM6e6SOwSvQWau8bBfb6ykqpV\/9GoDMmtxChVFTlTPGABjCfL9DgBvxjcOTrtRSySpR523JUYZ00NfGzXOgdebK3vQYJr9oG7jBSEqmciG2LW2RVzleQYnw3W1EYtGc\/cJfUjGAxgV1Laj093Irqmtvf0V5BzlYgTdN7A5YItWqp+icP7ttbuU\/a+f7JreXvLs6KWPqkeHJzUs9Z1n1\/rn0UIuH3HM9wYeXHXafjoFXXM6TuUQsxDdxX+C9hbiyWjVSwb4+jdYTLjxXo87rdi7OdGuurQXO\/3eqyZEAIbkLS5G2w5uzeOIPqb0oiBD4onV9rjRbhvwDHXdnKL8c1e9\/7+6zO4bAE67NkvpFAhK9KvvmdneVe4et93R6rK7k8prqoXlMgQToKIRWe1\/CC4QZKK7v7QbEbRaw2f44TrgwungDExjVS0UUvcWmJKTNwfSlRYHvyt4slHqVCpjR7i6shcYDGFLiDSxg9NxLd3J7edH0SiCzTVI3fNSVTlodCDSeoKmbyhdmKhgXu9NWAsahsxr0G0k2ztlhqaNzFNXugd2DQnq+fWs\/OkMH3oHmW7cTvWcw5FEDy1MSgoUqhE1kWdtkfQN1GS6\/6U1rDzATvbJ7OWVKKQof1FnvS6OaMtV7Aj9ooy2mEHvE+NB\/IWmIFggQSUVKBJLl7rvgOfOhYQbldGv1G\/Y69FPyZIOKoXMKNK8jscGhZR7FcQMJHxEJJa9Q3tolOsEJm7yyo6R+rsCNz6mv6gCTkof3P2c1affnlAkieQ3sP3d58W3hy1JPv81mUfT9aQ3bjnB5xcfh9TXG5d1mnsUojGxg7nPcH1D8PXjkqvj8u4QsVKdvIqZa9frOmsKUJOo8iJGN5oqtZU4OwPxmM0NQ0aEEdjL59KYD83lEyplolzgTRAoPKOcemnJ8VH1xLJiJoOL6\/skbpNtRwzdrvmatww8u5ey7ybo1zhPRJQTF1wHowK2Dr0E\/cOava62fFUzhmg3T++s4ul16kznKjDVMA2FAs0sksRxK223kccwud5uW0IZmbdXzNHjW8tM9g9N4E5jN4yK2h5M82aFf4Zf9I\/Y6\/\/K5whgIojUgKQYWJ\/tyIN3IvrhX+C\/lwB08FZnUqgXYO9YV4vUfDariMbOUo5XTOXi2ZMq6Msb1\/xxOAaPtE4eKfapaPMLceGIZOhFwjnxdFTr7FKAecpi5GqT2NVg0\/Cq67kWhmo+TwFyqb2I3XjN5t2hVgEfosiDDgqz++vsGcanQIgdc9vNNIi2","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnn8PUBAf9GqXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiD0AAfwYmRsCoAo6sEAK5DT3NDkeehAj5vRaqUBj2cAsGAACRzDdsq4q4IdavMYd1CSYyDMfZ\/c2u7Kk0kRpifa6NNXPSpqo9BzPgTYFutL\/NmnPzHOMnf+ggeiom0Xaq2u3LpfDxaw+IHyNwbqmygmOxD9Fo9F8t55jeF\/Qmdmg9vNeFyMfcwSUBeKLMhjgIY1rPo7xBQcaOsG7xx2WbyYyMHvx17UtG8s8Z8MPqLM+DFmWpHLqiaHPI+N8cnnXdq8CjmkLfKWoiao5trH3nwfhmSk8JZ3KvROqwVfXKFFZJ0GnYz\/o41my5BIrXIl9MUZAqR7oUA9OrkDZdRvqa1CNunidcz+Nf02lZNwUk3fznV36guJyZUA6h\/bH5jd8hsHqZc6NkK0K5CArif\/9JilJws43TBmWSMolBQqPf4ilAoxMTsTnZ7iUq\/AyJPJCRJzN7odZKDt6J9swPA5urgkFM\/2ptc8lLcoeoSM\/KGj2G2HwtTmccYr0p2GHJBN\/0PhL9cakCaccyqwMsMqAXt9oSDJKqHiVl5g0ZMNau","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnoWDUBAf9GQjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnov3UBAf9F2vAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iEkAAfwYnicCoAo6sEAK5DT3NDkeei\/f5vRaqUBj2cK3OAAAXAwMAMAAAAAAAAAGZWZzGVtfvCvF\/OHhc+ziIsT+jwCAxiJHeVtMImpD6bocBeDHIxLFxmA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iE0AAfwYniMCoAo6sEAK5DT3NDkeejCz5vRaqUBj2cMubAAAXAwMAMAAAAAAAAAGaj8RG5Jkqc9iucKx1gFgQuIHxrtjmiIIz3etgy7xZZdBRSM1IKsf0dQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GJJHnowsUBAf\/l1wAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GJJHnowsUBggAETJAAAXAwMAOOAIO32NJwwQpBBiQKwRh\/MojBNHjtN\/JFKqOWTRyLJ2fTyttdYYqb3w8z+qIyZGIDytjstYA6tv","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GM9HnoxhUBAf\/lz+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iFkAAfwYnhcCoAo6sEAK5DT3NDkeektX5vRaqUBj2cIRpAAAXAwMAMAAAAAAAAAGcWAGbM0au8NdlZg\/qjTobzFnhck3oo1xew0k18mQT25\/vYJMgo6HXwQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GM9HnpLVUBAf9FaUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2046{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GM9HnpMKUBAf\/lZVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiGEAAfwYmPcCoAo6sEAK5DT3NDkeemAP5vRaqUBj2cLg1AADcV19OJqoIug4bQGJJO0ZdNh7bhHj8etyWx+2e\/0DtgEQKa4QVVN9AM6OoL7TuN7xQ9pGsboOZJGgqXf5UyJErRDcSvKcbUTgLmGuIQgtvbEGHinkfq6WE\/XDPra1dUgDyT4Ic4SIAIOm5mSYb7y++O+DjEp916StW7kEstBiFqDm7xuSku1D+lmqQEG+oxvj2RtZJ8mTKZ2IZ1DB0gPO8NkiV1qIQjSwXsQ0bJxvjoJJg\/Beuw4fMRC96Y7mGwge4lHF04NaJUYeLbD5GiqetHHngqMUS5QDdRzuFsEmLmXwpBT3jtkErEBBCfYm1YgTMUHxrkaYKXV65Im+S3aQ8TGIMa40HLweEJlPsYSeMQzVut\/U5\/YepaQvCKXgoc0gR5jm8qbgvBb\/5xWykERzX8kOYPJtgeMiGAkyDO5ZGD\/wyEJ1s4eB7qCON3ziAFL19RHVR7IyZaqPkvevbGNVC2S1LBRWsgqH6qix+wqP4qEej6Yzw8vbOWph8","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GM9HnpMKUBggALMUAAAXAwMAMOAIO32NJwwRFd\/32rBAbkUbFNJKs99WxatpzL3xRwk8hl3LZjRPchx0MevuvWSc9Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnpl+UBAf9E+2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiGkAAfwYmO8CoAo6sEAK5DT3NDkeennf5vRaqUBj2cDrpAAAGFqCfEJVizIa3IrskMsI9Y8CbYDHIaBEEwqZSWfN\/bI\/3xM+lhtnG+1AQr90J4zYnCb\/B02fnADtRC1rKI78nR2hxtjTSPeHhexRTyUHyj9\/VVUt1IQCsqYr5gLbWGWpSSHq+\/xbP0QbP02y6gd9mtSATfyliRGMu6tuc7o1nKlhzhvzCyBenl0ohhOHPVHaIkRTI8YkhxjrwL9sGyZTC26kD63yO1mwt3cQgogyZ154kuhGeFyuj8FFu+yPKyi+mkYNmwYIoZDxsTGcDmI0BuxVfW0gNRB5YmO2ZzglwK2MEikpUFTg1ouhwMEq6oeBDScqMQKbDvloQPISmQuB4Kce\/IPlcC5S7zLSc8YHivuGdC9PcPxOmnh3bMBdf7WsmrRum7itUIwTwJDx1lo1VX2EhfJSag93BLj87G4Jxpssn55jFbSXGSe1S6aQiBg7EenAPpx+BBEgizWz932cfPwI5IAVTxnIBGAKmSwAHHAMRRxFJ7odw6QHO","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnp\/yUBAf9ElCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnqZmUBAf9ELOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnqzaUBAf9DxaAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iH0AAfwYnfMCoAo6sEAK5DT3NDkeerNr5vRaqUBj2cEJAAAAXAwMAMAAAAAAAAAGh4O6aJCOoJcfiJu7JAeP2VH+B8dOXsaPShZH1VtLazzz+YSsLdP+\/SA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GQRHnq0PUBAf\/jwbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiIEAAfwYnsMCoAo6sEAK5DT3NDkeerQ\/5vRcwUBD16mgCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GQRHnq0PUBggAAFuAAAXAwMAOOAIO32NJwwSVuzR2XRLI+mcf07oR3aGXTardVP92T7vWGZTJQwnlIOinZi3FPzH5WjM3q0I6ZZZ","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiIUAAfwYnr8CoAo6sEAK5DT3NDkeerQ\/5vReuUBD1bGgCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iIkAAfwYnecCoAo6sEAK5DT3NDkeerQ\/5vRfrUBj1L7BLAAAXAwMAMAAAAAAAAAGivHb6EWtFHrv++24fIIZViB1ONA1swz7vzXbzz3mzAG1FNLRYnPGCJA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GUFHnq1EUBAf\/jupAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":109,"pkt":"AgAAAEUAAGliI0AAfwYnbMCoAo6sEAK5DT3NDkeerUT5vRfrUBj1L1jgAAAXAwMAPAAAAAAAAAGjudlQ2ysWnrGT\/0TUUfsmgp1cZhoGmZhWA4xdLIJ2iwk3mKwWqlOrtSfz4DeWn8isDX+5+Q==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GUFHnq2FUBAf\/TtpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iJEAAfwYnd8CoAo6sEAK5DT3NDkeerYX5vRfrUBj1L7SIAAAXAwMAMAAAAAAAAAGkz3nR3tAgg6C3yiXuQmxt81khOIV3Mm4Dhn+J7CU2uPOdg\/fpH44kJA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GUFHnq26UBAf\/jszAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GUFHnq26UBggAG4WAAAXAwMAMOAIO32NJwwTX72bJZCXFbAZeP9PC9fSQSirKSq3Ag4pEbqYIzthqePwt4BdTLkpxA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiJkAAfwYmL8CoAo6sEAK5DT3NDkeesrP5vRfrUBj1L2CgAADR+V6Mst2LadyD3PVa+jE+HzjaUkpXJl3HEZvM4VOBWmT7HxaMo9Z98tRk6TRy477auIQwlf2nCeIQ9mY2cspQMguHvJp\/+3D2PdSIn2MjZ5YE7WC82kpuOx4UjV6ouUXxbxzXdudsXL2eyAWgrGMSanFTF36b0mPIb+9d\/bpFWwNErVbD0B2IAeo9NGkk4NIKK3n+8E1PO20H320bP8VeAJyqYxx5h7KA+40U6nmaHecKc5C7SWo6+d98iOZ9dQtD12Qo+qn0FX\/EREdR+n7PDfle76zqHFSbdsHDqlb1\/fB\/jR4Qj7Qcqee1Fy33FysT3vGSCWxk02\/\/vx\/3O9GUmtZ7mYutnrRMo4ehFZRgs5uG\/XnwXQl64Fivaw+P0CxeIJ15Ajf0pCkWsB6Mrd4ypemc+FXqIuhV87BlRocGBvZ4myJMoHqbl1gE874HCEj24eOCmCfoR3ef6S19fbT5eTUIfjHkdfv9RQql4b80k1fDbcQMg7koeDtD","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnrQuUBAf9DSUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnrqiUBAf9C4gAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnsEWUBAf9CesAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnseKUBAf9CE4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iLUAAfwYnbsCoAo6sEAK5DT3NDkeex4r5vRfrUBj1L7geAAAXAwMAMAAAAAAAAAGp+35A9aTk6OjjgvgSRSKHwXEmgUJoFFmAxOf91kase+MkHt2DYGsYjQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GXZHnse\/UBAf\/iD5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GXZHnse\/UBggADZnAAAXAwMAMOAIO32NJwwUdcVGMBSxtnXt87sNltCG2yb\/3a+V7v4rhqA9Th4vHDDJpz+PvVfvbQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GatHns4zUBAfzBqCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iMEAAfwYna8CoAo6sEAK5DT3NDkeezjP5vRfrUBj1L+FfAAAXAwMAMAAAAAAAAAGrEv5r8jtYaDzERajYbnPSF2Zvdv6BBZES9S97hRO9rMPrVO9OYVUPjA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiMUAAfwYnn8CoAo6sEAK5DT3NDkeezmj5vRggUBD6AEGjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GatHns5oUBAf\/hobAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiMkAAfwYnnsCoAo6sEAK5DT3NDkeezmj5vRhdUBD5w0GjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GatHns5oUBggAKI0AAAXAwMAOOAIO32NJwwV7HgaAA7so55Fyb+nAZcI2LXmBxInxlV4l2rGhDGb5\/+yTeDjHOQnUlHBK5EU\/wME","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiM0AAfwYnncCoAo6sEAK5DT3NDkeezmj5vRjPUBD5UUGjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiNEAAfwYnnMCoAo6sEAK5DT3NDkeezmj5vRlBUBD430GjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iNUAAfwYnZsCoAo6sEAK5DT3NDkeezmj5vRlBUBj4353IAAAXAwMAMAAAAAAAAAGsTjehk8gppdAxGtA2C3a10vf6c4zCKNZPW2l5kNrCCGqVd1m9W+ZxDA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHns6dUBAf\/hmpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHntURUBAf9BM\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHntuFUBAf9AzLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHnuH5UBAf9AZXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iPEAAfwYnX8CoAo6sEAK5DT3NDkee4fn5vRlBUBj43\/qEAAAXAwMAMAAAAAAAAAGwXZBBim780\/zKoUXnxq4cQoZwzbnS6DaxoeFHOJ6orns1npEgv6NbRg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GehHnuIuUBAf\/gYYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GehHnuIuUBggAJC4AAAXAwMAMOAIO32NJwwWEbwLD6Hzq7q8QlARRZK0aexIr4hwlr\/KPhj1Bdad0nTcFWnxqJBgog==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1HnuiiUBAf9P94AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiQEAAfwYmFcCoAo6sEAK5DT3NDkee7Zv5vRlBUBj433EBAAC5vgADFVlOfzlxh0VFQayOY9zGeBBvth0hQJb9zyS2Wtn0osf5DtnFv18SQ593jocwAyvxPSByZAJt2BhXwZKoRiPAfqG6NNoZHYuMRVNP++hVttaFUGq2KgdFe5qz5L3mbQ45TYM\/UNg7M3VJbvNoI4gGd79MA\/Ngch1QPMQN01RGxM\/wP969TWr7DLf6Cgu8yEXZD4JwiMhNKjDkBiqmUNowfcxKcZQV9agbsUdwB+va4uF0BvM\/CSzgjdf7RM60h3ztsVYRY8LV9vgbskmTU5DpLqdKdQO62xF7SzRaMpelEKel8NczopHYEQdBQxU8rimbPL2W1HCxAB98aucpCJFfI3+D707ARDObFi8KuRYB25W3M23W5GQj+lUJBD3ZoVRAlze3kX5FeXrggu1qOqNVxnMqy1y2tgrRyQQRD0yTnErFcxmtVO7EDH+M0bquYJfI9\/RqCqhi6jOMMzBDYSlLtY2E6QypVglvSVYLcEWwvaCo0I8+Vw9d","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1Hnu8WUBAf9PkEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1HnvWKUBAf9PKQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iQ0AAfwYnWMCoAo6sEAK5DT3NDkee9Yr5vRlBUBj435izAAAXAwMAMAAAAAAAAAG0we79wXabIWGeu9+CxDs1BS5ynY\/w4IfzMb9ueeooAWxvuwDm9HyGlA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iREAAfwYnV8CoAo6sEAK5DT3NDkee9b\/5vRlBUBj432N4AAAXAwMAMAAAAAAAAAG1YhMyCZZBruL2ziSBvVjzdWCQxYV2cHEdzQkIroquVZ8KhDsc7e31Hw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Gh1HnvW\/UBAf\/vJRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9Gh1HnvW\/UBggABnTAAAXAwMAOOAIO32NJwwXzhyuwaEqb3coWKtJOXx4\/pFi04ua4TqrRnZQpyGbbmJivhpVsHySR5f3vK9rgYqN","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GlpHnvX0UBAf\/vHfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iR0AAfwYnVMCoAo6sEAK5DT3NDkee\/Gj5vRlBUBj438TBAAAXAwMAMAAAAAAAAAG3OjjQIbRaUZRt01x2PfDy\/8Mq0O+NmScPfkmV4lelad47RWs8bJViQA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GlpHnvxoUBAf9Ot1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GlpHnvydUBAf\/us2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GlpHnvydUBggAGIWAAAXAwMAMOAIO32NJwwYfqOPQOQ1QYugsLLFIn8aiGpOsuduuTJyyYGyrYu4O+Dg42SNBgMXuA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnwMRUBAf9OSXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnwmFUBAf9N4jAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9Hnw\/5UBAf9NevAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFiTkAAfwYiicCoAo6sEAK5DT3NDkefD\/n5vRlBUBD43ymWAAAXAwMGbwAAAAAAAAG7PC4kHU9uhv4xe50kQVdbILZETrebEuFxwAG0UM8uKkcYc\/ziTqlNqFrjp7ubYTbjcrkJUWC+OxMMcLt3FizN06H3yGk6V5yUdTh2853Je7JHYxqrs\/U3Uq\/RT323vFayHBPDLbv7BKdvjSZ4lXW2wigcbpFSYo2mPi+e39rYW9Odyw5TwF3GZE7FuJxt5BYtCC3Zj5VHpClL5GDpsCE99M3RSJEYiTtFtoz\/zED+QcuqL7v+QZ1L+J0H7SwPC9kjNRgb3xpG05IPY2EJW+iiqhHc5TYxKzytff+qfLmLNz4Qj0mEwA8nm4EQisS6bkgi0rjMuZwc\/zIzMZzQ\/jrXRRA\/byLCihqFL7uPP5TU979j5WKJ6iUzFPgtIJYHRRTMijRUVPghRgh9xyxzzmE8qCgXogELHEoQf1IlVCvOUE4E7nxrY9JMK1UH5+u5YXchnY6RtVwirnprpi7lPUokjZESo+QdepA15Yol4Y0MCxL7NjjieNlGid\/j6YkH7Oipgf5LTK2NEZ5iRZlx7CxS5yQcctNlNF5cj\/fnyNmJAKAlOQI\/we2aGIBkANM31rXPjC\/XcZPxvc9ZdEG+OZrm7to467nQKtTZFgCELSszZ\/DLUz3DzuvWT7lJ3QNRG6a4OGMgGKC8q3SRQ7kHEXICWbBkKNOA38CtxGb+4Atoe74wEqpYKWXtFhROA2JsNX6aKkfA8nR7iADOFTh\/uWPKOdamPWTP5X8vsXtWfXWBlp4lREHT2OrsY2\/bRqROOdBmjBkMgULXpA2q\/j+AFFyxng6RXtscd5ygE1meSdsH1z\/enzWiwv8z+mYscW2T2bS9ul0CJDfJu4yLqbPijzCkKi4ekeXOdLDLOLprRKy6pUtEzXmvJeuEUj59u4ZVGD3oyhU+uSLLBrva+pAQMSwEkVbu5xy6RRNkMEJeu0kP47Hzkq7ToanfBY00q4FooNgiPpJbard+DAB3xJuKWG1oqVeLTPqEM5aFlhZZ6Jz\/VdDPkz5jvqcP+t++8S5lkNk5FasCFfAXgDTZbRcENiMKRlJDLR0NtXZQ3263Ynk53ywLr27gwP\/qtOlT+VnK9HA5Bo5gUp1DpQZzdBAccgDlg1n\/AT\/+Tgc\/ONL0G5fC1yTLvodNQA5bgUJc8zoD2CcB5H0DfHkF2d98Q1Ls\/QEadLlYi8UajOwzURCp5wqCqkpShXjjZcve0FmHuBWJnFaqQJcKvJlcBhmtPrtlQF\/RWkbyW48MAFfRkqVU8bz9Q1v2DQaE1lv8X0OxU8MDMnDOl2Hl1X9N+nTjhu4z3m4hPJf6WURG02KwkG6JK+TdsrbLQPRPspLmxeqTIEHJhtz7SaCOPf7ArJEVJuPmyEjyxrlEot9pabZAPKxZSVu0O6BvwvYmbNfsSkrhKhvN\/9QcfsIvo1qPKYni0e7yClDnp9oXzx1KAfjxECFUFl5MLHoyG6UadLQhJfdUMmrc2bb4w\/xhJBvRAXAUM1j+4hzr9\/fFYmD0lfAWwoj80fa5t3Ky19WmNEuZ3rCJODA5gKrQlMUrsq7hs1pprjbLWHqguaS1mSyZE+NiPfSMBGn28TwyWbZAbHPqw+S+f+0VNezr\/wrQB7J\/3qOWagJkJON2ygLkvcS\/nKpiuvMk92Mok4WJuVXs83FpgvISlaJdwhNRZDmJ+MppDVCr4W\/C","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnxZtUBAf9NE7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iUEAAfwYnS8CoAo6sEAK5DT3NDkefFm35vRlBUBj430FiAAAXAwMAMAAAAAAAAAG8B6OKGZOx2oKebPojYZLYJ65WEYmtcgrhon5gM\/EmQVu8xEi\/jmnmIA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Go9HnxaiUBAf\/tD8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Go9HnxaiUBggACW0AAAXAwMAMOAIO32NJwwZujnhwATIPfRf7GTgJ5oPgUgcT2dHkYD3d26zHQ9A4QG5nSK+\/asiGQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiUkAAfwYmA8CoAo6sEAK5DT3NDkefG5v5vRlBUBj434jDAAB2EMhIqiZikuppouKem8dn4n8zJXyLD042JBP74umPGHvr6N2aKZjSAijk84yekXUogNeQPWj1kw9LyOTMgbglH0RvOo6tNFOWYUe2HdnnkaFUVkTfWDy8IfvKOcfaFmkqtWGtybvpbbGd+mAnKuj3N5wMga5\/S8+ojYjRIMl1sncE97tPMZF7Sy\/TiGwTyawNj5DJg8wEBCEUy9dfNAmvBPVr0K8vVda1dQZ2RdAYAzmr3II3XTrezFX6Tk\/5iIgWn+csF4Um2Td245l9MVAhjtqjYv4BS3VYo2KDHZC7lOOMekEEy9Jrz7BAcyJxGUcdkI65kM9HR1nrMuFr7w78dTquAfX+ZD5Lg7pOrdz\/Jp7gYvS00J0LDWHwrmPul12+geg54Og4qd7mQkvcIhQ9AiJooBEcAHn3QOSkzwwwmEITIRsUGWm86Gsj1BAm3btbsHST5R0bjTxl9v4zcI9vyL+yw3wJ4+QqhGziZmmg4QXVKULqqHW4qJt4","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GsRHnx0WUBAfzMqFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iU0AAfwYnSMCoAo6sEAK5DT3NDkefHRb5vRlBUBj435yhAAAXAwMAMAAAAAAAAAG+pMIIPaFYRZ3PrpIJQQ8Dn\/MgY6Efz+tZy3\/cwBLbBoOerz8opSIwbQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GsRHnx1LUBAf\/soeAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9GsRHnx1LUBggAO\/HAAAXAwMAOOAIO32NJwwaCiUVfgc8ODE+qBuqDcNWhlfL4V3Q42h03wuhZcujIxboxZFJVd0MtSG98LT2nHK2","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnyO\/UBAf9MN3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiV0AAfwYl\/sCoAo6sEAK5DT3NDkefKLj5vRl2UBj4qsI7AADgqpUnBt3kbt1otWyCsvxWHHB9JGNu9V2f3\/O7lksm3pny2QByK3iK6AO657SwijMqnrPG8RbmzRYtFBdG0MlGHQHsbmeBYB7sc0m3oo3gZTR5A5AVbaOJk61BXWSI3BAnVhuiXDm0rHKMg5xWTOaU+h1xXZWSlgTyqemGdzaiKzcESgVkqjzYnHwMKQzNYVZlwWH6LyjDYOHV3VeTaIe4I5ebWLXdQIqcxi1aPTj0o3Qn0l3uUlfVRGqiXe4smuMOj4esVqxeto2aZii+JFoOxzcnZZ6zzzADecr79O+83VhTVXHUWHcN8xKOTaSrBhwWnAWMuD93b9HuGwLO1kS6RhQTRIHXdWn1QgB\/dMm\/k9Hi+KxVrlNdlNYJ2ko9+Q22sMvbFRQtFazY+fVr\/JwqJ+NqlBKSXunhuMHDU8Nalwgi2VJts+GXkjj0vPZWncBcbbhLL+81QcrgJr8QdKIZWxQ1CPGaKP4KGCeOA7t2+IAJgfNdQvMFAyrH","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnyozUBAf9L0DAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFiWEAAfwYif8CoAo6sEAK5DT3NDkefKjP5vRl2UBD4qk07AAAXAwMGbwAAAAAAAAHBf0DcRE7O+CGPA9XOF380dfGQyUDNaBYbTJsbGt3TuMmVq6bu1ZdrqnxTSPYlvMLN+hB9fsAvZFgKvpSlC0aO2jJZeUHwg4COKq6cQwV2MvbMTc4SwwwJJgaZ9GBDqebiCArliqnsLUNIzyBOVXlA912vpZY6NfOuQFfhx60i7n1+\/EyKBtH12ybN0nqXBEcSMbMH4WsZ2jIeR+xg+iiolvEZA\/vivSKNAay74jE0u2AU5c51dbZ5UK0pkybR2fiU7NHqA9E2eJmlte3LN3g9miaUre9TqoN5Iirhrfn6sG\/dR2S2EvmWjzd3K1hrPpGUoro1yfPZmZvgbM4zmVfm6WMc6nzhyyWUU2RagslDPD+eFmJgGrvSxZhOu9\/129olBgpcCFSJpznTlILtDYZBJe98GBYaqy60qWmn4VLZZmAmAlkxBEIJWQ3p63dKOKkAsaArjR+Fqn2Yo99o8Qy+2RS2a6EFzNquxw\/6oNB+za4Z9lEJEPH+krLRShiEhRjbsF1GJm4hkfWXMMMJs9p\/A0AMuAUyUCArRfL\/iq60EQ3\/U25wK\/MPAhLrhI8LHMszsRoo1Qi9Xm5wvCCwxt7Gfpumr3jryZxB25CQuKG4yUT8rEb03SmfvfemQEftsuUtkqVV+xAShBXQrupAwkbK7OHx\/aeyEgWOAOA06NgLDn4nTdlU9uGJU1vzocXxjLLB9uGifFPYFju7\/k8K4pylrsD7xcUbCP5ltovgxI7S\/zav3EDrOKCnjwmMac1wEdSIDYdtXF8UrjhmEJulyUY1lv3z7ZfNix11OWxVytDAHmOYWA5ZVPHQCudbNNJozJTXKjhnhhnKOrgqB93KadbjHLoUEgxqJLOWzDpdow4KfZGHmfGOKoKkmi9QGGu59o4SgfIOrCJbybu2Ibke8w4aepE1Pk4nSMJBg1ASBEsoJ3bFP4V7+d\/6Si0FXFmBLwS0FT0kXq4tocZHpTpbl7FFYZYe73epcRGf4OLm8Hr46ddEo095wqWWYA5h82CEPvZEoi8oAwSWjcpITBIClso5ziYZdFwj1S2S8MpyhE9bygTuNAGffTk6IV6SiDnKKObNRAEIzzLPzuS1hokxAQXUSP9mZcYxwMYZO8RQS8+U98wGwxsxBMpXWgpftCs35SH5l6cYVWcMPxbwc994vLTCxh2UULrXQK7xQ7aIR4U\/5\/5W1In9BRoOavfJ3u+KJ7bRzRcI1Ju+3+UpQ9BEq2x44w0El71YQenb1koqNjH6vYtinNJvX5guT7D\/pQrLgb1HnUYnoJkFIOXS2p179unUErCrCJR27YGms30Alpel3oxOisroZsqIxuE\/5mgOGHMADayEISv2ud2SMcoMQBHJ+8K++87hTfueURiY\/3cNQtr1zTMsCzxSINWRsemmYhuQvXGtvscImd4gUVuxAUEJbP5jBvEzQTY3XFEsBDa3cBj2wk5l6Tv0BnLmmREnOcuzhnYunJ\/0SKRaTwkmtNwS1jnN5QBfsCK\/KZ0RAyb7MUZUs9qaPpAlY7lKyW16+xYleTwQk\/hCiLo37DAm91XL6Z1hZ2pumTN2N\/TQZWKW8hutdLOqdriN6SdNwRY1TcHVK6iNyTmdZau7WzBd\/yhvbGWScmfQtoHX7g3PzFCD8MYHSmW0sgLCdv6XekQJAFRjsB2R7ZqeZUHKaTru","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnzCnUBAf9LaPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iWkAAfwYnQcCoAo6sEAK5DT3NDkefMKf5vRl2UBj4qosbAAAXAwMAMAAAAAAAAAHCDRbjIrVyLmXjyynfnqrN6ShVZXbwTYTKMCQpDyL2Tyl6Xe0XA49+vA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GwFHnzDcUBAf\/rZQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GwFHnzDcUBggAAdtAAAXAwMAMOAIO32NJwwbgF8cfQ7r2ASTvDLThuE+jEClKAXCoosSEokqqs95qVwWLHMr2vEMHw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiXEAAfwYl+cCoAo6sEAK5DT3NDkefNdX5vRl2UBj4qjBKAAAEsWme4WkdNYAqUpTSISurqPPj9AAc6Ifi52d14v1\/vdwxuphN8y6LGkNZB9p3DM52uTMlQ3AD6cNMEE4l4wAcUseXpdpIc6IovgGDRKwRLVDQWS1oXdztrHiTeL5XFbmtu8Fd7xj1Jcgxswg+GFhK9TB\/mNPJ92AzRNu+5lj16ze5Wy006eHCv+ZwU7TEX+RN\/Lc+YIuO0ciDX8Kmy8XtIllLObF62h8ZKB2ssw4Rno2FtBJbK27urdQx0kLV0qwdDeTTwN\/8cd3rxBuD63MpkUGVjt9N2NBYCyvjwmWjvzNfyV68nZ3hclSP1j\/tnJ+7DyOm5KTZ37Yd+L2jWNEsXf\/pFWbudNxKZ+H1+XeuvBC92O2Nu6thd2r7PNJudn9A4z54zusZtG4p8n+avWsAwpw5JpOk+rZwBziNH4myv6xQDJadiWumGrwINUx05ZsXuryrUEM6VktU9e1JZidQHc2oytqueQO\/BpvpyD06AjZoYeqE\/UiH1KOb","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiXUAAfwYnc8CoAo6sEAK5DT3NDkefN1D5vRnoUBD4ONi6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHnzdQUBAf9K+xAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iXkAAfwYnPcCoAo6sEAK5DT3NDkefN1D5vRodUBj4A27fAAAXAwMAMAAAAAAAAAHEWPDpmNReq4KPV3p4vJOZyaQkSbQaQAYM7bjz0oy2mizMfmAviU6qMg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHnzeFUBAf\/q9yAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiYEAAfwYl9cCoAo6sEAK5DT3NDkefPH75vRodUBj4AwbvAADokCqhOh5zXTTb0s53UxxrDLFWItQR6w05YelVPECVgTs4cVexoWbKQ7Sm9PCf1mZpf12WjmS5TudODGYsgrHQVXHmq1bAeijdjd+uVEWX4tBaaiQPTAjeRRfoysVDJJ0UHFZNXTnK2DUTItLhW5wFxvhkNd1JfM0Dd8D1Vae2NLTPzC1elsbkhiSY2efbZh5LItkEsCTk0PWPi2P0Lbk5tjwZQ88O8s+g6XA9SlVk0\/B+m9u59giNhqGUg3VuFVfUXaeUT+KpqUACvyjRckel4nkze5Afm3K+C0Jvn\/7cMsv1kmcVRksGAEtDAPIXstyoiXFBQTiOLSclzlEMa54KJ03gLk0SEiCAzeYV4ZsTk4RSs\/ly+KuHani6ZxvBTGrMMr0n90bEa+a\/2PO3lV7fb6dcMKVWTAVP2OFT7SIhvmw674j\/Ig3KTq4Yj1pUlVSSspnCch+XSnpSXnm6JN+nhaSnO\/6AyHXTGH50Dl+AScS0\/5fkwpkKTlHa","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHnz35UBAf9KkIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0RtUBAf9KKUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0rhUBAf9JwgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGViZUAAfwYnLsCoAo6sEAK5DT3NDkefSuH5vRodUBj4Aw+rAAAXAwMAOAAAAAAAAAHIjhPWBD6heUY8g2HlDR98NNmV1gTrkzUC6cgnodTuc\/NfPHkazB9Nb8q0HibOsxzt","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iZkAAfwYnNcCoAo6sEAK5DT3NDkefSx75vRodUBj4A67xAAAXAwMAMAAAAAAAAAHJfi6bK8ByhLBu7JNgqA9FFnO0Jzq6JNwOvm2Wjfp1p3Z87zFwwtTR0w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0seUBAf\/pvZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9GzZHn0tTUBAf\/pukAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9GzZHn0tTUBggAPrgAAAXAwMAMOAIO32NJwwc0WvUFzD4ZyAQG85MDJzktRWyYdwiQI9JsfiaMRdmVkp+qHZxNSGyCA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2046{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn1HHUBAf9JUFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNiakAAfwYl68CoAo6sEAK5DT3NDkefVsD5vRodUBj4A+FpAAARrlZUqLG1qPPIPBpiTiM6Lvj\/Ybluv3cgvWPgIrGD70YhL534VeNO0+dmF0AH+G75Dog2v5WZmqgGWckzoujeexFoAdaq0OLVwuQWc2ir5q9teU84dST9MPuXGYddc8xgia+TgcW7F6SAEMbi+p\/hBWScrRr0BZgkHUxghG4PxDYBw0xX\/Nv7iMvIUuWvizjwKSE9TOVUup0LcP\/hxikUPGdEKXdfwTRFr1NQb0qnKUcn7EdsDV6lhmJcpSLC565\/3u5syEhzx+AZU6PDGhQt4UjH5Uy\/5KhT3JeI9fPvk+5cdEw\/QhsSq7w2oeVZiNQaUIPsfSqpHiKa0Dsf+lrOlnwyH82pgyHhBLUqEYvfLqHuafzwEr9kyEZslQgzXF4J35HegHIRjeA3FOazpkRyEz0BC7g12HoUscZ0Hx5UUNlaRMHufLxQk2M69VtLGQ92tNy9pQpa3SyqhtnWyLteE\/ZbhNwGuuU3FgfRZ15yjSQHEOIL2mmI2wjV","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn1g7UBAf9I6RAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFia0AAfwYibMCoAo6sEAK5DT3NDkefWDv5vRodUBD4A8kfAAAXAwMGbwAAAAAAAAHMxvufmD4uI9FEjNCadGew+fGTxhTXXtkcuaQhdl0tO+kkBsuWONGGEBBqOfHucoSZKQFNnc\/HG3LtO9iLzVt6oOW7rhNYxoZDQ66B+fOqzfViKxbF8hN42h+X5D3SQRKvuT5F26gC9JZ5NCf3yk0Uzz5Ehhxi7REY083Bp3wV1kvH9V9nwu1UzGe9JCR3BiA\/FDtbHHwTtL1krIlpMPM7MLPBMVI4IF42PpBi1qItK+uP097zO1E5exfh1HeCOhae2QOQ0BOhbbF8EC2BfwD4Q6g2edZzu4NyWgrOTLUK9dPA\/b1MV7dxTe65O2WrOzkc2eEGIY57sB\/lXaD7+A3fmfX42oVa3D8cWogaH23PIxI8bWPbJCXiI2WDmNC8J7ndOjcXis4Xr66xo7QLuGWF3GST5a953+ejaGb\/H6PrIhaZNTjM5LyU7HIqgDMcOcBsUmDMNxZPdA6RXKIsCXyPrbWzlUYRzOdvb\/P+EUwJQKyaBQNXPgxCJDPT9KamikCz\/GfeNbh\/pdW24FhDn7qVC9chNwv2cq7zG65bUT40OZdZQ00Soq7rpBW69g3uEfdmat7bmMfrbxA1CJqQoS5LlDMEyods8bKYm7u4C8y6PXRQ6Xakh8+PL7tAukiOOOurm5ujBYEWliKAE+vWIeShb88vmhpECo77t+XI94Ico+3otqk1I8OLJ2RQq94aq2\/jHthUPyrD6TegEzIcEgNAZ7+Ne8E26DeLkfj1cvrooUPfsiZpDxbvDsf+P\/WTUSf7X7Fo8FpohTkfsSvaQBGRiZZ+UlBc9kjloM3nxfs+Et6YCgeGIQ91+npf3HZ2vT1aciTa3yQeENuprkvnxE0zEY07uH8VJQG8T\/\/MeSuE\/CwpxyTwtJm7QYNTpWg9+5byVYKH7nk7ZITzLn1giEn9MczFk+9E9nka\/VgGY+2rutXz4\/j0Lg+3zhign0EVTJECCRabChRCHoQqYEnT+kOqtdnGFsFXNydMx6gv3xC1vYvZAfdrNIdy9\/YZEzQ7JrLpDW6ViXys3nFzNgP69mFcehM49Lp\/tkf8Lf9dE830ROIWusIMpwM7cuLVr4HmZuW2mkTWORQOQ3WCvALJgjDb7YinmCDTQ9CiZo2K9WswfAy8CRaBZqJBABWdcfrW56VxCKx7b0Us5QqkVEajOaBt9rK6++C5s+JFrinHiaT2vNvmXfxbjLo7VgL9voLWlCOa67UD1w0wVicuKDVwZxkEWg0ufAAYcyyVtjua4y2SiIVvUuyVU93UEme81Du2Bs2g0O+SaH4HMPHDOW3bssLYwyTtWaj1rgE3nlkd138TWaH742x9Y9OskXBkCeoVFQL+4ffgZgb+0mTGyLyRoKsfE2B7J2Zg2Jvc9eK4ODoA8hZwlMdiwVHUY5txQ+PgDwyYIikRO5y5JzY2BU4W6GN1BisQF2Dl9eDHr3KZb3lvqpGHO3UedqewClLod\/cWVfWcDP+j+H+YznrawKZqgDImlJUPiezUyhhsX1EZaJZ92YCo6W\/3DOP9Gwr0sw\/\/Xorxzt7I9E+LOxVM0p\/MnhCBIqIkhoBiZkgZXheceX+1dNy3KYtXEKfaxwCN9yKn8c\/rK9nhSfaMYS3HGY6Cr3jcpbOhWWIFV8dMTC\/1hdUJlTYfG+pBW1eXj2PI5fbGc6qm+Hochv0lAAZt5eA0","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn16vUBAf9IgdAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNibkAAfwYl58CoAo6sEAK5DT3NDkefY6j5vRodUBj4A5I8AAD0zm\/wUyddDmtpdx8SUf\/kX5\/OPd11iJ9ORCaPEo\/z2B2kstM6q7hcFgIfHjPbFGGUWZjNpyoW8Ma4a0jJVQad82q40OWlJtLK1vLEWPC87uBaJjUl5MetqujS5FhGW7WjjD460ZLmMy0T0QYXCEk\/zkYEjPpDNgqXdNfnHfCgelH3yoQZ\/FE2VAzM5IzAexMDNqWF81+CtILeW1xYLvwJ\/4VhzlpCmpyBXtdL+Xl1+DyNJG\/t80R0lyGu0xOWBaPE0Qf\/+3\/+C7PjeSQqivLAbcvDMMb\/6PB\/2\/8GGPSr8LhwgP1+r+h6yvYqXH1INbUhV1A\/27q8cIifcB0PzaX3AGSpLEU\/WSZsayhuyYnBa2RtoGqxpb9wDOuY2\/LX7viG0BHPgb8RUNaQbGnazWXKofPtRh9QphwY0DPyL2UXm68FyvKD7cR+PJVI4917jE4ietXTzaFwT+baoeonxVyz12lfvzHPDm0ejvSrtzuZa11c5GgOXVUNGAAj","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1ib0AAfwYnLMCoAo6sEAK5DT3NDkefZSP5vRodUBj4A5\/5AAAXAwMAMAAAAAAAAAHO0oQeVnAzlCdHyrW6XXEnLgoUoyMHAq5yrQaltV7vsL8fwyVAbly8IA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn2UjUBAf9IGpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G2tHn2VYUBAf\/oFqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9G2tHn2VYUBggAPKeAAAXAwMAMOAIO32NJwwdXuf6lbWTPPrgQfr3LPYOjji1TRj5g8kStgiTz5AAkP+ZBTKhj2Fjaw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G6BHn2vMUBAf9HrLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1ickAAfwYnKcCoAo6sEAK5DT3NDkefa8z5vRpaUBj3xhX5AAAXAwMAMAAAAAAAAAHQ\/K1KX85x9P7XPGCzyCE\/XD4OXRsMMvbbf7S8G1R6AdLxuM13Rz+Cww==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChic0AAfwYnXcCoAo6sEAK5DT3NDkefbAH5vRrEUBD3XKQJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G6BHn2wBUBAf8nqYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1idEAAfwYnJ8CoAo6sEAK5DT3NDkefbAH5vRrEUBj3XIQxAAAXAwMAMAAAAAAAAAHRTSH6mmQT5fVk55aKwx5QMM8X0hzsrK0AJp49o1V7iAdkkTKl+lTnSw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G6BHn2w2UBAf\/npXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9G6BHn2w2UBggABpSAAAXAwMAOOAIO32NJwweEDvYz28rpF68l1iHw06alwgWfSQ587M1kAM2H91hAmWqf1oTLxjBahMf\/GCh0tfx","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFidUAAfwYiYsCoAo6sEAK5DT3NDkefbDb5vRrEUBD3XHn8AAAXAwMGbwAAAAAAAAHSWhzTLS9pqicz1mfCxncTLPunK8jI66JckG8\/o5GkuwxIaRPTHrpJBYaVWX5EngtDWZegD6RZSPF8W9ZeVuBXsXk9SJfCu7lOktr2TNyfsiT7dHWSDW1wRDS1cG484XeE5awFqmrGkzv73BfWfYxoXy\/iehs\/GEO62czRwt+kltV\/ZzaORBdj6IgyTF\/Zxm\/8VvIWr9rxVUME1UfEVsBJGJaY27kmK9s65YB1vXlqO6984PVUPWc9re64G6ynTXZCuLtzdHN7ZOTCvtOjodZhkjNOM8BfA5OfPkbJMag1jNT2unAxpfNxWTU01msoyC31Wmsmg89NOOgxKJT9T1cZct3aOtPn3sFZ\/y\/OsYqqwBLTdbLOV6cJoBtfh2+z70609jsfhoXe28zf5mOoSSJdLGfyMkwV+1ApCfu+nL5bXOHCT0ORnoLrctNDfe5cqnglRU\/VZscFDissGLoN0camqn5tSybntumlYEP0gaNZdoNuS3VylE9iRZth4O9HToYI28gLs8\/86DoNVakpGCrqBSPJBoc9eAmH13IpEBX9rXFgY06N2JCPjf4J02szJWrXLE73eMJHK3j6XUVUpGE1TsKSEBhltzaXb8rgyiRiy2ZsExsJQpCqmnp0KK5lJZkz2++ejMX5RQU8hGNdLkHtQ2Xr5N+XBIOezKb5fxhEsNOy\/lqB8y8IsntatcRNuU4YekosnQArnzzwRvZM\/M\/2zGbhK61DC5tD1v4KUKWuve23AwYU31g2CEonMXMMGM2n6gc5uiCagAFvdGJxViU3YZPTGI0jcmQMoaz97UNWYAKss2g4+wZLQfC3igpCliTGf0piZcSPBSf0LwIkkPZaqnfDyLe\/9CHQOZwjt7Yyn\/53GD86FrCb65BZHju\/Mn2p1c2k3b1DGvqO3Ovh7mXMeViIpGvoII\/4YGfAh0aFoow54UvRjLQGel08p84g+xQ3cv2rBtVDam7hUWyudY7VvD70NVDlxiG76Am9YSvaU7mICtZFoi1DxuFNBcTpxdwB7AG5fV+Zo4etdEjFBIgWvjEo\/A8rcD9\/O1Pj2VZExkMWHkitprzNgwBA5aNWl\/xxnuu6rLREPVEAFJuRQ6dc4MkPyK6LTdFENQeMV4bNwy+iGQmSG45Wddwz85X9xfok3\/1Wot4TFSIXJbvI6mmbA5VLrFk1Kmdj13qhs0tgH5K351e1wbARUEJI4hq02WurO+K69QAj3YwBoI3cTteDHo6vqzaG15qPRdjpDezareCmyOAxdqvhIeNCS\/xofEROOjV7lj5\/nwPnAgj1gaW9vQGKfF3CI7j8ulighL1gpaR44sZOvuydKeuj6vdzF32Wu5dB3qMBam82jz6xWlR7b9c5tTVO6bEhwSO09Uz8yN11VAzmrIg9tKJ8WUPwo48biWVt+JLQ+lb8R7s\/ZI8lJBgJj6sP9BOaXpEfQtUXqjNGMRQbh3OzDzLpJoYmoyiq5q+CvSUAPwANpTMByxqCYxBQWUGseUys8s2dLKD1yRKGiPs0u4sAfmeaWh3BCGEgqje1crJg0CYYhZTNXwUaTXmohLV0r2aZD\/JHk2H9Guy4VAtMt4o4uzLIS6f2dgf9DUlqF6oZV9\/iNsEBUy9N0iINIEgnC\/dnLZh9xfFcVzgSgvN8wxan0Ou+EYbtmUoqOa2uAblN3F+BxzWQ","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3KqUBAf9HOwAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFid0AAfwYiYMCoAo6sEAK5DT3NDkefcqr5vRrEUBD3XOCvAAAXAwMGbwAAAAAAAAHT8cvZTNiRtjR0eO6xJFf0k9dphmo0BHCUMaqv3UfOcwz+8eIsr+ZE9wNsDeMvtQFPGO5b4Za\/i2MJsJ4XMJfzX+nyNauwJjcchVxvhUQkqoCVVrtcEHJfF51wb2KWtlHOlaJnouFozm6fmV3cKts6SQeXaBPxVwvVhHEodGaPXYXrag6exePVgzsAZyzXPklX\/9vsMQpvisg75OmUSQjynjtILcNDTkRA96od+E\/Q2pf1c2gui2+oVes\/+jcSfpVx19CWv97\/mq6CBDE18rn78bSPNhYJYWoxIdXfkpbMYJhW29yAkEdD+FfVqEZO7b8ukhNTnbl9C1y+sXFUBD9ximE4YXOCDCPeIjyqoz7ZzYjqmoN\/4iOcHSvlI3zDzkSUmLR0gVJtCTfAhtLfTVxbNVl+Z18EHpE8q+T1\/2jdS8qArxcbDPG3fp0SWaHkIBo5480r4MAh7mJOHiF92SAzzKLuMNT\/d3IJxEvspbSRkeNQlGBiBYTfzhEMrRVTJMOu\/dqE+vm21wKSbePpMHqvTKjNOZKu9eY6BaA1i2y+zMKe3Cc7xMnqMu1im68qbVI6oUgpxvwrXKMH5YW5YoajQ0a3eHFLDTtQ7HVAg8LmOw+4twbNjIp+CohYKnEI6tJ2fDBhqWOgFWZJvsdLqh89PNTQ1v+t7DXtOas0SquOJjQQawWxhmUIXAnqQFOwBBrVys75uQwriTzyGa1ZCej1kSSS2uM3AE0oAJnLV3rYRSeKEgCnsIFymJs4zIpE8y2jyn4Pr8Xos0SItSR2YNtvSWVwKfUgDqS8fCzbsyObOa+fykESBqV3yQ1r8XP4BafVg1IoyOGDnG84EfxD064Htiyls4i4R9HiN2fZTvtsK5ln6AfnGSyRcG6L6DiqpTt0nsPt5MCrCA0mOshnyBszlphuzVdX8jQgLLKWk8qNNl+GbYAOoQ4ybvVtGgNWkLg7hpmCm+9OW5C2KF1u8k\/yBgcCRxyDTD\/TM8\/jPNLSYZTYOJig5dbEaAkT\/Dz9pHfzxzV63ZBfIeFjH+QXRWJHJhF49YxuZUnL\/4aLd22qFz+Zvt2XInm8nNzSj6ADdVX27TqkHMsPeMckl9M6PTsDCIuEeYkXI9A1BYt3akZpo106uiHrTicEnflK2whNQbV3ez\/dkzRSF\/d6Ee7HG04kc91sRGEenEEZ9BL5iDoIE21vU8jwoZw9Ec82i7lSMMJ9avMOSFCLBmYBqEPtQIz59hMiYWoh19lOJSDQlCJbkMpJOngYRpRjr7PNF1u7iJbgfFoqFSol9rWFI2fa4zqaOJq0tJ9FItt+VUr7kjm4kHV4n2b+ZuG91WqVsMKg5mP\/0VL2JM2NOoMVnsQPHF\/25fpfCI5GuwG6R\/e0L7VninopxVNUe2zIFhRBz41eTWqlYOprLy6ABmZAYVcKtj2Bx8fj0PJJYh\/F2jfbrx3B\/kYqVFOPmESV\/yfbtfC5CR1lFvxz6xUG1TXlzE5VuInGFcO\/YxD4ec3jVMH3Yj9PExGOCKC5XduIHQz9nAeOMZKXxJ9v2TutYLTjJlfsr+pJ5C2izOHRc1\/\/U8Mr\/3WiAOK1\/wwkjH9W0PlJn0NkxAeSD58+zgp0GSMOcrrDRLfZenKaXcUL2vyXXkezxCm4sZJkEZGp4rE0B0cCyfaNQwtzWKLnFOOLtUNEyxRT","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3keUBAf9G08AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2046{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3+SUBAf9GbIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1ie0AAfwYnIMCoAo6sEAK5DT3NDkeff5L5vRrEUBj3XD2zAAAXAwMAMAAAAAAAAAHVOzOtPqoke0gwbRUENnf+fR\/pQd3XQoG4kXOzwpKa3Aw9WVy2fkxz8g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9G91Hn3\/HUBAf\/maJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9G91Hn3\/HUBggAIcRAAAXAwMAMOAIO32NJwwfAc6BTgxyFMaVfQcM+eVB3EhENGv8j0FB3ZfJVagmaescFzaaGTckvw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFifEAAfwYiW8CoAo6sEAK5DT3NDkeff8f5vRrEUBD3XBHjAAAXAwMGbwAAAAAAAAHWGMetJtH5vvbibe6MSP3Gjg\/ni0ZgKzRIIfvY87noPM7f9bBGsDKkhVZ+bmTTnZ1NRK6TaO3Li90tQgQQBNxctqIWM8vt68uHP0nw0cb4YZAQEHS49bQGs6at56Dx3KeVJ4kjKLhwiLGvkmxB9UW9wzGDVoS28nsT1LqttbPm6a4fQp\/SFK+6BsMcf+8ohBbs3j1vGKJ0Jaq7vJy8Zrbscb3goHcLaiGjuFP0niO0jHOJQ8kJRzv1YaS\/9oP7KC6wjTwDFnwZkW81v8J4fv4NBBOcfqqHNJoeeTkTzQ5n9GJHPIBUdYqVnvMkXqBCECkGrmvQBkwWSCgQWs3XCdSXwr6LmE\/gMWhJa9Hmco7dASQtSKTtsUXaeVCcPIw7HEPqI4xTPPYvVPGdSRUmjLK89p\/iMp0w8VuhYt2ZhwfRzJWLpWqU+9rNcOzIB4XLnDJUAgs4BJrY\/KidsYvuzutwCCwwgK8V6xWlGwX8YhIyYaphhMI1M2701JNml8fSu\/2JCT++bL\/K8trSyid4DKjqQohbE2yXn3wUPgm9frAiT9RqzL+fEQq1Tl6dNFZV2ftcnVC\/nMB3gaI4aFURHkZiJ4nx54QjHU76hJvCXy9cf8FmBI57N\/pRuMCYfiNoFOELzp6N7sDNRjRYf6Pz9iuKnSedgki5J1\/yg\/EjdayLlc1NJvs4x29vPp2+mzK36oecOyhLtknJPGV+m82QERHifmtqKQLXb+WvHPYd5oPl1tVr0zr\/5EOZYMUJrElTcXSK4pjqua\/Br3rlfp05iR11M89BDx9zdfPCeqWf4PmDHAZV6L35+\/psdM3pMrGJLyMHLMXo1xkfU8zPeoJAB\/ggH\/220nFQZfwXJaUxnvlD2L4wzgHAYeyIr3uIZepF55KadGQkI4DENkdCkZaoM8RG0pHlhhlYiJJKwnUEPN7uerj9tw88OMt3IVjFKvv0zBqU14pFRlrha4RYbM7dAdHq7dcab3hcubI9heW5fRTXx7f2hiKHxwczqwharerGBHRnLx4o\/yC\/\/Q5eaFBCUBZdouyxKBHUpuPlxq7BXCUWmJdffUVIXSSoLJjVRS7BZFk9MQf52mMk2stgWDX3p1NAquhmpWCSGjCHPBXnYF\/j9HjrMu1e7+wDbdhGLNwu\/vHl6BonMUenw+o8xp7BOWIrgTQm24zvivxPd1yfqBuoGiCPbs3jJbtcscRIjOU1aEcZPfjBr4I4lcX6EvqWLbYE6NO5mksxJViNczplZbXj3cQdqBDAXpQDlqUQ+6Vjh6qc4iTl0GS7LXxVMXCqCTttQZbz9AhMErT8sgAtoP2X95xxxZeXhQl8qcUk7vFmWJg5SOFDj2OkcHyPtxsV1OH0vagXILbSB49cb9a68PF2zZPBKYlRgcWUS3QIpYGw7\/KhNgfZI6\/DRU28OS7laTSKNnSLKUhNarMvvmueCU1Ql7wi5oJhQYDlOvPC4vcXArEbqTpgHxeWhr7BeFfaXPdDtKsewR5iYnh2FFaYoCSi0k6PEkhm\/wipMjEnwtvNs6Gp3EnwK+150728NzGj+poHnMFMuX4zr0nTWmFl4jAfPpV2pmYswtz5YBLCmdn3bk26aviWv4M7s7cMcs8u1QYZe6UhUYrHD\/piU16YMyWaDKkGnXLtEWKubOYiAP8c1FJAVBtBq8iOUaaU62zQ","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn4Y7UBAf9F\/qAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn4yvUBAf9Fl2AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn5MjUBAf9FMCAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1igkAAfwYnGcCoAo6sEAK5DT3NDkefkyP5vRrEUBj3XOyfAAAXAwMAMAAAAAAAAAHZjjM+1PqxJramBTy2t2FhOygaDO9p8gEhYs8nC10XcWepDeKM7QWqjQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HBJHn5NYUBAf\/lLDAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HBJHn5NYUBggANMqAAAXAwMAOOAIO32NJwwg8n8cTorueK9OKg8OaIvRQzuZovycvWCK8SMWXLNw6Nxgx+6hy\/oQkrd8vV6VGTpV","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChig0AAfwYnTcCoAo6sEAK5DT3NDkefk1j5vRs2UBD26nyyAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFihEAAfwYiU8CoAo6sEAK5DT3NDkefk1j5vRs2UBD26lXSAAAXAwMGbwAAAAAAAAHaLSr6WwEDV4fFmSCRFrLFKOP90rRi\/qshjg4iJUApqefPCLdDczlTakBrbzyfgGZCiC7QUkZGuqNRUsaJT4Nj7FFcK4olaQ8x+R2FvQRVCFD1ibHCRkixF2EJZPVwhr0OOW1zsPtqgTRIIOee34ipEu3kGXLlDu0NQfZzncQ5ympwvfQ\/2lKP6FTphcqJk7n3vNZ53M0TGx9NeVBqegYidHT1pB7A2IEQ5KHZapIDCO+pHgPn6TGXclc+d\/9somtFv\/rIjM6PMqctb4NuqoCNukfdK51AevJjnM5n\/96Eb3wsq7iqUqdbkO64UX\/+I56FuWzxMMLIdfPKe5gQpkPqPyTc2fxJr6FmWTwda\/E7RNayc5jyWZfCaemDSCULcPfCFQZ6319SxDTzVZkaCZdpSI5U6VIUYUOV3qmLCcgiG4RJ2NTT0yJ5ZEuoHLzjjllVF17y5ef35zesTUiYdKv4aYLAwK0iC0BF1oQUywZAQfOJsjCMmf4mutjyZeYZ6F3BOUkkMZlw5dAMLCt+hEpt0npXR0Z4mfzWV92XRt+jP65LoQcEd5qs41gTzm73bGWI1zwnxvuiil2Uy5mMEWdBHrp4JJ4r8lH+ejWVBjAAtOoX7qplezGFsUSZfYhm6Zv34yK9XNgCkKhZNySqOGAGYLnk1VbkZfSWt2PjP1Lq9SXl5Ix2\/ME9lPFpgagcdTisp7FsH\/c6HtTWALc3y0vGOUNx52YyMaV5bIk2ukv+ZjpsHgrlGuO21S\/54EoJ2VZkE9DHxMZ1WfHDbngid7vhTk5cw7ipMvNPiT+367UMbRD+0GFFrftBzbOMIQ0e+2IgYk\/Wy8vsORqsBIGcT30FGoridUrSyJcmAPDHGyiTnUzujj3X+5ZhM+GXEAOU71jzPK1m0\/311bkTIRJdkHqzJ9Ab6gzWb9ESjX1OzBqW+ZijEoGt66s708sZbi27L7gUXG18\/X\/55qlpFLWpAeGZeN9+DYmQFXgUXmlpeTRaHpRUh5UfoKIYvV3opf+cBnwQmPgKZoanBMipIOqgavbi6MGIHbIs0XTsvmmpP2avPIsUW0EOW8CjyUzmRYiRQAOYCfRiHTXiLZ0KVdCcmXSmkw88hv39fO4hRgna\/AhuKyNtLwK\/4xHTHNT+UVN9rWJ9bcgvuH9wNE8UmtvEkFF77+O56OXN\/cM8eL1YLhvrASxtxtkRf5VxEZQoqPmuafsQK4uHIdrxLIMBaS16G6T7Kwy\/uZojTidrOhNXsDmrQSMnBTVy+1pFWvNJEm6rQ3w0gJPtga+3qU0ENx2i7gklJOWJZXVREXyZ0VDhyZYfr0t96IOGjAwha57vEzPNc2O+DMSLgmdapesbGDmOlI0ys91DoSzoxPeJyQOLN+gwJfCMNILpEgiDf2h6GECuslIQpVqgzajXQ\/O1QXXvSATufR3F\/hNQdoa65j1eTXUKUgRjqhmZ9tu1IxrP3OGsAfA23h+K9DFJ0UNDyNFILSfp3wlPxcZ38F\/1d5FeKyxi8jwuupZVTfMoyt7Tg6p7tWkAZazS2g+l15U2Hju0q8\/P7wNiyxXUBX\/N+6jyVaWB\/wttsZ7Tjg5N2eRMSsrV0ka4NZrEqv1bYiy0RFRNXtRVLM5ihknSDgYVo\/Fnrt1QmzG4BzOduMhgvrPR5cFB1XQcro9t6U9J7oKi5gHd","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1ihkAAfwYnFcCoAo6sEAK5DT3NDkefmcz5vRs2UBj26gJTAAAXAwMAMAAAAAAAAAHbdhmBTme1jtoPDuVhBpZc7IVP\/dE5mV4JtZhfQiBcCvkAFEKhvDsJfw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HE9Hn5nMUBAf9EwcAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HE9Hn5oBUBAf8kvpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HE9Hn5oBUBggAB3MAAAXAwMAMOAIO32NJwwhE+SeQA6os4yxFyW5MR8oadUo8En7lCRRGUSxpaTSCYGaTw9Tw5mpjw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn6B1UBAf9EU+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn6bpUBAf9D7KAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFii0AAfwYiTMCoAo6sEAK5DT3NDkefpun5vRs2UBD26gH6AAAXAwMGbwAAAAAAAAHeF\/crBCCGWCTatamsYQP9FKSmD++utA6Yk0nhCj8gYmCIYDfgCGiFJM7pYjuejoiLUby4o\/qbBl5h1Ptlaaa3PjtsXJyupBRm97Z0y7\/zrDqc1rgmkR90uQeNX3afq7y1r8X4lpkUtdfAM8rDxHmtmINzm26Gq7pyvEGQwFtrpmTqdgCjnJSdgRcs\/cP8sxve9Mq8aP4Q438M01X2SZpG4uqvUzz5POz6VJ9mv+a0k3L7EqygXPSL6zCC5POSK7mhaCuFX\/rOTLG3ndoIORiroDs3XVymhbxBdNSc\/+Vb9CzNWddvTFYkm\/SvrB2XVO9UEe0kX2J\/PIicg93n5LYpRsnlibUebVAMT\/k6qNeYkeoTNpOUJHIOQ7PsysaO2YlInVyNmvjBsjiZPne5Ci78pMmY9rGLJZfqcb4uOGb4noWW6tpezo\/1DGXKZhVZyVoRPWyoiOiWXU6jx351YR1v3yA4hp5WCJX9CEACollt8KaoO5q1HQx\/3FXKi4vSYCYDb8o2V6UUbi2U3mQvE3Nh7Ec6iq7FocKuCxb4ai0UNmQOxR6\/etOnaWtwfP77FirBHDqqyshFBxxs0DqqkJsQPkI8j+5q53a3j6xahEi9lm7\/e0FqC9LdvZCEmONvk68i7yCiUm74J4HjNIvBtlox28QfxdOdbDoc7ZUaKQli+tWQdOO\/8D0GOgF+7m6wluECtJd8bU8TFWAk7TkZy0wYoyH5tVPvNBq70Bl9rST8fv3Vk8\/Hz\/e4P1cOlbAAf\/5hGM+yGkyGKIMe4+705PeaO5gU9TTAlv4D6AZAXfM3nOGXO5JtpfwrIt5VVRDr1jIwJLQd9xzNWqHaWXsJ9qUqkfVqJWf7TgIv7JXvdatvNtVLOyUTDtotApz1NKvJEuQDKBxd2qgGtFOpW08HdYxnvWHR9JO+3rGXx4MkcECSluNXPJR8Dvu42Kj0jdz40Zb7e+vNctAdyi42PnbDtNTikM7rEhT2s+9PdOV3oVnJ\/8XA2mxoQDGavf81PRh6cEGOPztm4XYqtYKctWBlbAZ1nufxQwMJNtXfkfF5vBkpMeSJaeplSM9KCtr\/6MPtoqWWnlM55hHUPCGIC5nXDrZGwAN\/5F8KxsFHrElZrCkD8vLIMubDCRXvNUCBCDoi29hdQLIUacUGuBvZAZJl9NwcwpabWQeWtfrQuESKP\/hfEc\/54jYdKsX0IkUUTi7Z7GV5GLZZsnTVmNzej7V41ejcEnlpfV+Ho8+RTDSZ1j+MaRO1IEsiDw6RmZqyBjkh9Pt\/+cN7uwr\/OQvWUsZqmLGt7VNY8VOZTPT\/4\/kzAxpQrR9\/MgjZs2jnAk\/gHf4O4tAXMZdGvT7DlMRMtqt9Pb1m1OAgyP8lYnqICoyS4nDx6e7+LwOjSIzyzYg9CgiQlOd41j8+CVl+AhsVAvFmRbwl5VW+ZNmPvrDOARm6SXhvVroPPdLcXsHfLSEtDmjb\/YhKPtMPwYozF0Hs3lSeK7gajzgha6CZIf2tXdoUXgfHHbbfnb3YXh5DOnda0Xl32RI6dPQSx1ysuolnJvyFsdBf5OUZoaj+s4eIZW8iCorkME4vFCraqIC6+w\/T4gJGOBSLq9BuH8fOEs2Px6NiX\/haiLRgRfu8oknmA8IYbs4urw3kxYlo+q7vrUDUeNOPLwKXT3tYIiYGiNeS+1Ry","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn61dUBAf9DhWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChijUAAfwYnQ8CoAo6sEAK5DT3NDkefrV35vRugUBD2gGKtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1ijkAAfwYnDcCoAo6sEAK5DT3NDkefrV35vRugUBj2gMicAAAXAwMAMAAAAAAAAAHf8xzWulaobJp6MBmtZ9dTpUMipHjhBa3xxnOgwhSh1Eb8O9VJIBI5sw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn62SUBAf\/jgXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFij0AAfwYiSMCoAo6sEAK5DT3NDkefrZL5vRugUBD2gGlNAAAXAwMGbwAAAAAAAAHgJUot3mNHHmCnOvK\/+VI\/v\/SmSONfgrsQn805GZHBiwr+h7RvDCGE+8OhdYxR1a9dIzJ1scXzmqHfZSntfDGlbf96+i36lyzsjYuq4W49NOWwnkod5z0AIqqKBKBv7BwR\/2w+kW4B079A2\/lKvvFedONrfF7kuus\/9ZXjXx\/Hbn1xl+hU75VTfDqCv7kJxViu7CTdVsIcA\/IHoJB12Yj7wBXPnYpf2WLEy93AIy0xy7tcAIi6v4Mcgk1Uy+uV2mYAihXIMP9BtiCkRiQk3STYIIELfOAXxdTQfcNb\/UJEIVnPlRW0Ad0YlUrr+tPnFwEnibM4KSZ\/Kab\/hbN3JsnV9Bc\/0aSJCCh2pPbGX5hQoNrxbK7FJkIERCp7IehtI4eXoJtfex+5l+zqTdEfe\/Cychjms+uZ4oy8ZhWACx6Zb\/XPkj6itp+KA2wLFswh9wO6UNPAa1z4QBONnklcqUlqHXjSVFX6Ad6ti7vC9+9KFO63EFQQXyCmOrfrvVTXpTj4hB8oalNd41C+wK9RHLPmb9Um1GmxqT1Qh\/JTalfZ83x7buMA6OaUbAmmLKMrZv9U2tzpU8xMxc\/UOCeXtwINqPIs13Mm5tGh5T+oS8ygOlI4trAC4\/p25m6Do1A8bl3\/4vXrzZLAgOCEdfIQPIWl8gXfqDpP8SvQg5BoFExOkZaVX7f4rtDdoTtBOwsjmSa7WM8anUMSn0uv8UkcnEZT2kWeTeq3udkkKQ6S9Nb\/CkJlXtqzYam1Gv1E5Zta38unSeDdl4m0Q91DLOg26KN+gjBEntoaIsofQGfGP8HY0Q0DDtbcAdL+XG\/sn25QNfDuRjgRamO0UNiHM9+iGYsPAb+5iLorz4tIKx9WDjzcTKkA65cSPR00K8lJyvJg4xMmWDCAjoW9k\/HFFjUTorqzIa3bP88BGUa0eMSlJCEkrH1yS+aJEzXg1g7SFbM0VAKK9+cDwvdeqnFy3cHLgA8JMXEp8i7SjDId7abK0JsvUzE\/vlIWP0DXLhSevzQ3i72n71RcDgQ7OeJql8RBLgJ\/79\/JcXRGI+7MMAaGLkF4k7vvaSlM3YAyF+FrJU+vPV5pB9meebeoowM7Lzy46g3SH6PSH6UbzT00sDdlLzN5AKw3JKK\/K7\/DPeu+u1GFVNiZw\/ux7dnZbuHW7u\/Z7gDztCYc61Hbv1YqFP7iD2xaXlwGavEyWijUwboRk5W7BT4FYIkFYDtRcXrnQnh2xSVsoMALIFcH8zcCCZDsZE5OIhdSU31Lw6QYIdt\/Hb\/GZ+eJrxY61KcHKJNm7gQCKcuQ97wYdW5HVc33eYasm4XH3ULQZkDVXAezfGeIOESLNnOLlJrWzqAqvuvLi7ZZXGhoBVSZ4MhOWC5Ow2UrW0Q1\/JBSkLtFToZaegSlEEahGLqzu61JBiqigO8ISDlwjDZLSTO7qbR\/B5Ydyv\/F712H0VCoWwU4v3tH0cslNYLBr3G30m3Xthos273zyKbOY8ATPquwtPfBSYySBI0wnGvyCebsvsX+SgNnQckQy+EzBujD36fUVVYp6UmjIYZQ6AecxjjXiXcHXbzMJMNWpuHIV3OH5P4mZ7v5AWUK6glYfU7D\/1jkd7GEKOmOXWb89jWebYeg85ilEFDEvz8Pt+uj8A5RVQlqDpjoI+WusatI5vdIraOlcvDsdAFhrdc0","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn7QGUBAf9DGtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1ikUAAfwYnCsCoAo6sEAK5DT3NDkeftAb5vRugUBj2gCq3AAAXAwMAMAAAAAAAAAHhu52zNE2MzMIvszrRiPIzFENjZymo5\/TCwnumAyNVzEhvs0EObaecmw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HIRHn7Q7UBAf\/jFuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HIRHn7Q7UBggABwwAAAXAwMAMOAIO32NJwwiJ\/LBzk4Y0RqUWAo03SSN0\/JAirBsETT3R3fLsnI2cE3GY3VBOlWq3w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn7qvUBAf9CrPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFilEAAfwYiQ8CoAo6sEAK5DT3NDkefuq\/5vRugUBD2gJ\/AAAAXAwMGbwAAAAAAAAHjJe82Imz4i2T2ppI4HpeJDPFwaXBNby4SvdCc0CkfTxCRXlbsYGC+C2B29mW16210TFFY79VPKq+uiTJhO4RHM04c4VKAAJul1eEISj7lV5JSuK1+1+X4nGw2Jn7OSyf3fTG6ILtVoXLJo3srja1I9YVGEjfnevF3KgHCaaccsmfACb4pxKxSgDEP9VYjy3oNyrIReABXiRcHePjf8gWOKJxEpEH\/XimhXN+RTfJfG3qeUSxCbrBp9\/uc\/TMCxtRdFD\/yz+1gsNO6DrfG4cSxMlDvtMhDK8kg9Uz5Jjv5mHy7e4e8kGtG\/Tb8CXWd4sh6IiKDZM0zaqtOHcfTQSGWfJIfAOG\/kw2xwD2e3Dd8D2QU\/E0gEsNFSyADc\/yaiMzNEXV6bNE\/oHjX9LqDWK5\/0YYO\/iWkj4mA0K\/gBBjvBzuvgZimLSWsSVufiWa523P3DcrIGz6\/WSTomgSvQZoDKR7OxBv3+d5cPhrNNp8ADGJTUWsBK1NWNf68yMUalga8sCEb9Dkm4YC1UZIMw7AEMTDposU0PMn66swcVy5+rN\/jvInnVhL+5dXaFH3NzBmM97d3v0+5oJRA8f5oyvqTtQR7hkxFeiIzwWvGr4fqnB92gFh4inwb8IBnIgzLR+1NLTmSbXVj7c50h\/K62\/HhMJ1NK+GxOvN95APEdFBeJkbB6apZyx+iGx1qzAM7GF\/uy8xv9KMySfzWQYCv3m8KputKN7Hl16wvE8GgJXVBibCtnUvz3slbQ0FFZgonojSzSTHCLI7PxvwAA8msQCdVigQBpFhDVIt8XzHuI7Y+FrBL6vEQrr1WWppVEMMNPnuvJ4DFcG+JL35QxYM5Gx3IZtJ34BjrBdUkd0TVHEssa2xdwDgrcqtf\/oBhqe1kEGvbkaacRcc1eH25MyYcXUq+FiMwTomugXXZ4Fw2nTZKaGMFf3WzTODocvUELwDh\/UglSxx77mNwF4369QTvzNBK1AcoK5Sxm9sEaTDlylZXfd\/4jqYm+7FfeLpH\/DWQw+C2nLImmJOXPQYl6Hm1aFE9Vwx\/1FyDFRz9NYFYnY7sYMPBs10UQCZ9Vgn00oWiMeYD4f9VYe3qiZCOVw4lxrorrRmyZIFO4rExku9yx45UV599LSmL1BuBtI7PBhEc33rHKFX3BnTcM3qwmSQ7qaVHCqoYWDwOQxZLK3gStvpN4ztcpIMuT71iSuHTLA8nYzAVcTQfTB0b+mhVAmHUyWtG3Iw9nC+NCWzFfpsCMcsBZlrgyXnUqcdcW0BeDTt2bVunp8WIoqvjipCoThSOSOXjy8uD5sKnWC9I0RwB8ZAweYPM3E59pwbZrxn7i865Y2VIllYWSVl3w3cY24\/WDgpZ3waAwomLigBUBZWXdX+9bLzJMqq1uofcYEmrNBrcMLpsuz0BO3ZlCrQts8XtJW1mH8qgd\/SIWBlDvEw5nJgJTp3vJAfjellX6bvEBuFmil3M+PwD0GbY0MY3laOPfL9wvgP\/TZBHbs1XngwHBK7tFaHN3xQ0fJtnDskqjTPTTzlL\/OXAo+oxqyDi3w+a25GdJzsq1pJN8zrj0jz69\/Bv4rSH6hFNtOnUQtZmeK\/K9nMK7qNLMu8Agcv24XjKbp9MOeiYj+sXAx6zWrRkSABkdCnCe1aKaUITVTcA5jiON5gj840JZ1WGBh585Rdt","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn8EjUBAf9CRbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn8eXUBAf9B3nAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2024{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFimEAAfwYiP8CoAo6sEAK5DT3NDkefx5f5vRugUBD2gI8+AAAXAwMGbwAAAAAAAAHl3XRWVg7bZaGENUSjwrslqsmSSOkCVSiNp0GY33qxxlvd73tZ30wTv59X0yBk52ml0WmpmVQlQTgEcdujFnHPbxP2yD3KpV9vv862NV14nL6VWW788ZOpyNuubpUUXKki05FKfpf7AjiMb5YorOquV5C\/Dto9MCPwlF44+lcZyiy4m\/tCSqKxMlK+nvPYXBQdWO+DDL6lDxeMbtEGdv1nF6oeZd6V1Xb+ux\/nNKgxKRzrlbrMJAJd1fTANJxqopEJv\/mQbtfwOJhWDoLYJGzZZ7sGwzAeNHD94D9DiZYBy0kZFPRGmmrK0eCC6lvKqT4iTnK2le6jLVwzjPyERCOJEY7OOTOWrxN+PDpQNAcBDzOjeyBVtp8sUqEnHbqQqzv+L+EtY3yLuE\/hfD1r2zcCHQ9OOXi4l4tN3pNRpDzt6UiH+qD5D4v707EJ+4aGGyRoxznOQnMMiYVkhzyKj5iTW7rZvZ1o2B7zpfUOf8jMHEst7Nykad+8xju0EZh21diumPVm5UkAiErfnIDxttw291z9Cr6hME33JGlpL0pE8O0nD4QahNX2bHyLdxXlAu8ZBemnJML21A9jHDeZbFetH640RDd\/K3vodmsgFE8s0O9y529ZwMAablqZ+NzjF7s9dmmKaCULqi34utZH1OoWD96l7dc0r+bwJDpYgIuYOWeDlmxU5ADMRFKiHTODJNpOL5dffdsClcbnm3so6c5cbZ0NIqav9lXFDxnZNWvH7DpVWG6gpwPoyLl+MRCtyzrPr7qufpLuuZety70J82QxN4mIOEFPBZZfTU+IIcf9L3PW49TStI478aKt\/jGLW16UfgKBOEpyR1AhI9jS5MTz1fr6LAdIH\/IzWkoK3zbfOgSdduBz5r+U39kC73jbnHRjoTdamxAOxR+YhoMlTWHS42mttHHc6zHyznowYiqEicyoVbn716PB9ouHL56bPrrN0clLDSP2ho9IzYh+OJnvxsxi1e2QqHCwcYOTPlPrUjIQTkwXWwva70PE6u2FQFnlAdW1tyfG3NEzrM7ufTwbcb8fK+h5tzUW7yIwbXGOXXBuLBY8J1spe828vdf0eO2o1FbcGxt8vcdTEq2xuPSu6CxPGIZyRLUoblnXuCG5nr9V7XDJAfUjeT7\/kwgVpoLycXUY3x4jdae\/EmJbi5ri99BLLDLbPEqhIqOuBLRDczlHuDsUfe3bA38Ep4rf31vCVIMcxVv1Y62VxShUTVD\/0CB6veJjPX+vM0UlzZX9pwxp11BXbWzco3lGRHiv2aK4lidOyrq0fgBJYT2cA7eQJ7PWj8L6IqQSorl5ctPKfDZz8QNWdRJFuWZzcBE6PNoEmb7EwXIbPNbnlcF\/R7sB0RNLIncKGGK\/KdbW6MpdE7Jw2SNAZ6E3hz2oy5aHHn89X2VwJRnuZAMdKIIgBI94L3aW8jqCSmEfBP3UmaYRL9K+PtlIo0ak7HlfgeuVeZUddon\/rGkAXtYK\/mIAFrZ+zjMpC4b6SH0CEjEsxCWttlr17vK3BdibpPicDu06213r6w2Xvds9aTgK+ic01QHPOIArotJdnb28Wvn7+bZ99nu2h3hikbFt20SQvTu0JLnvj2JkCsqOFAr5d9g4kHhsKR+T1nihyi6rIOoxi2FWgGK3P28VzHC2yh1XYyRFDXKEhFcJGk5oXw0aomcT","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn84LUBAf9BdzAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1imkAAfwYnAcCoAo6sEAK5DT3NDkefzgv5vRugUBj2gPU2AAAXAwMAMAAAAAAAAAHm9fZKm2QFAE9q0U9EUiTlhHtNxLs+ViJi5DMgXDQSWZK1omcOmpkFNg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HLlHn85AUBAf\/hc0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HLlHn9M5UBggAEmIAAAXAwMAMOAIO32NJwwjAtWxOZIgPfau7mUdOQZ2vEc89ZEsxoju\/Zrzbav8Pt9TtQdVqzyfCg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9S0UBAf9BCVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0595{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":254,"pkt":"AgAAAEUAAPpinUAAfwYmYcCoAo6sEAK5DT3NDkef1LT5vRugUBj2gCuYAAAXAwMAzQAAAAAAAAHoVfWsIm0QENMCOth156Uax3ku4PKBHYQCVJb29ufxR\/XCssymFBtYJ\/FKRL54P+mR3ObHkSB6urIrR+X+QJtMtuGrFs89yjq41aHHa6Vmym1Ps5RyOR1dZe3+bzFA39eZylTkdkriq7O5qdGeG\/eOviDKx8BkhVSmpfXJ2pbABsYGtdbGNOYeZN2Hdg4HOkr3WPKQUoehINhgvXx8igoO3ImCkuduGPvu\/cgv3ppQS5KqPbUgPHncYJQ0mwijrqAbAJwg2nc=","pkt_caplen":254,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0424{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":127,"pkt":"AgAAAEUAAHtinkAAfwYm38CoAo6sEAK5DT3NDkef1Yb5vRugUBj2gKhPAAAXAwMATgAAAAAAAAHpPaljNls0uiAncpBRm4ZW9x5kvYp1OHfl6sjREdkoqYJrWdhDT5uhmGsI2PqJrDcm5sabQUsRnSEuxLB\/LhQtXxC459OVEQ==","pkt_caplen":127,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9WGUBAf+Q++AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1in0AAfwYm\/MCoAo6sEAK5DT3NDkef1dn5vRugUBj2gB1rAAAXAwMAMAAAAAAAAAHqoEkWqALMSnBcFUiQ3zeHRajDgWLg6EkakVPLoGxfwZ9aRDJEFovyZg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9XZUBAf\/Q9nAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChioEAAfwYnMMCoAo6sEAK5DT3NDkef1g75vRwSUBD2Djn8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9YOUBAf\/g8xAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChioUAAfwYnL8CoAo6sEAK5DT3NDkef1g75vRyEUBD1nDn8AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iokAAfwYm+cCoAo6sEAK5DT3NDkef1g75vRyEUBj1nFBFAAAXAwMAMAAAAAAAAAHrP71UzCc6OkGIr2cczLxtxa0ZAuSVKEGWSH+CrBj\/IWUFlh9pg84fRw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9ZDUBAf\/g78AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn9y3UBAf9AiSAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn+MrUBAf9AIeAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0817{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn+mfUBAf9PupAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iqUAAfwYm8sCoAo6sEAK5DT3NDkef6Z\/5vRyEUBj1nNGOAAAXAwMAMAAAAAAAAAHv6rFR23tFZWGOE+HTmGKG7zK2uoEYvx5Ed8qi+JY26BWfoKrxT5SWPA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn+nUUBAf\/vtqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn\/BIUBAf9PUAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFirEAAfwYiK8CoAo6sEAK5DT3NDkef8Ej5vRyEUBD1nBM4AAAXAwMGbwAAAAAAAAHxO50cAe3sJD5QUBNRvWCwFOpqOj8xN\/Jdto\/+v4CBu41YB1bCaTRTy2PUKMXuT9DqZ91ukTnTZltphtjoBlAhnSQlQu1xcWF2XfL1348tbN+Ecq3xiZLiqqe6eZyNbBq0UY0Es23oEPUZoDkxuwk2ezgZskbEqCF\/bBWLHwbhFEk\/DV\/pbi7bsHzP4u0Ra09nPmiKAiJkZGyclP0B9Zji\/sDT3hdNGhF4q+hugXlUO7JwlvZyRhbw0gxzCyFZjkQ9Ug5rj6UVDeGISTVFrPqioD2udgN8m259Q8la6waA69andY54x\/ngeEjCeFO3bWWx3FWSnKUzI\/KseNXSG953mt6yQvcoM8qEUxg2jedY07ZfBRgjHy\/4qfQzgc9wRienO59WH23l9hg2o0DZ5rJ95rEy88sJNjsoQRNTmOU67gC1fENrMIM9EYUR1sqZITHfR+UfczLYzHmAmFxwMYhw3E0b0zoh4Vjzx1JsaYWjLTe+EeHvu7+tS9NPGYUCWXXBJtcrCfSKnUqSLrFX0htzGNP7GTPMGkcCtqQ2wUuNtTrNtDaPzRUDipwmG\/msSCxL5GoNiVmeeCqBCRqKGTjLnPOkCF+MIv75Ye99AQKxwAI9LPRhmnXxGKc\/3uSXpeSnkDyyMTVKnPX4ZEJnXYSna9VYOvmFkrEe4XJ9B8bTIwJw+nRQzebw\/GCMC6EmdcU8GvbsJz863Eq2lee3FidD5xjP8vzVr4IkxpfDrAL3plVu0C\/uckl7BeoI2pfORU3\/ET4cAUtmxe9PKtUC7nitXvFmf7zyUWWprO85zo\/GzlZEnyzDapOHBR38xypFtzknJYAJIfn32sahvUCMEGNhJrhOwTqy7Ow3FKviR498FszRZn7v3POYL0ZA9MvLgWW5w2axwIcg9rIMsan4yWgla\/jJdnplXzvSb\/prVTlaDwd\/mqdq\/QUxdj6KbUeqaCgcpx7i3JhIT30mMOCBH9QhdQnn\/\/o4k9zYhAtbiki90I6GCxXueRWbcKSc5H1XlvAe4\/hqsBoTTfUJ4V\/5nt6qr0\/Vj6F1px4Cn\/yIxoVkFsAf2SdaMbKeEiXO3+9MRIX5hp+JGipb2iXx6UrAr1axjwLyYuwGwUSqGbEdmjJJr6wFyMtRmAI1453zyFn1Qi5errAJRkWO9n6FDnwleDSjpH9NtLoZ2lamJ9kJhe3pjdSORS6A4uqOl\/1X8YXdE1JFeTTo0nyN0mNB0J0HI3JOa60cd4pOTLaTe0BeJUualp70SMviH8o8iS51W82NsEHfp\/z0aiN16cNbLXj8ZaykZnUpMqjLaqnsTCREqKxSLg2g1jCLJS3ZdBUVsNIv7RnBerlmRlAM4jhYgmSPTvwigfLbrFimJ+91YdpGpbEfdM\/8znL2nX3FguRF1ZB3SrL3l\/92x\/8gUJDTAUYA\/UC7PcCIXx5rno7kD4EdKyBcSQ2H7sTv7ZPQk6iVd3IdpZ+6j4MSitGPqZuD\/dzroKyH5OTRdBIVxsuHiJ6DIgOD5MaKZ4l6Azr7Q0vIm83JlZCoF8M7kPJELDsP3IOYyvSOTufQa08J1\/l9eNukguuOKK74VOlP2zLaUjtov7Bb1CYzuzvaIpe5c0heLiWbjtzjyFJc\/H5bqNuiUAzrClHjWemEQWf3rjq067Iv9Gz4ic\/WrO6nGungQLzFbbc6","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn\/a8UBAfzO60AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNir0AAfwYlpsCoAo6sEAK5DT3NDkef+7X5vRyEUBj1nCczAAAJTR\/H48b6Ux0mLmy46ZqvKxFChY+3mK++x3EAKMw6YxpSc8my9gOzVL0YrrD0KB\/2un+XKm1YySkRcl2IoESGXHg8XdgsJfq8hCMVbium4ggeXLKekDDj0OdXeu2XT\/HBS86YUQmKBRPM8RMP+E+KylEiQB9Uchr9DZ49ktmTk8k4lfDHizIcZ\/g72t7VivHa3Q\/sWP6L0wDi1jUqXHfjq3XGo\/mr\/hFXvfZHKdjVYzxxlcTESQOsjMOaR3SmhNH4I7NT6SW24gdD2JvNLcLgnTDaffxeT7a51bEvr6IohHVpioP2BhD3ZF8THcCZ0bKQMXCT2sefMjEfBtSVDWZv\/qhKtvKhrPMACxJNmot5tBtsZaX+NIGpsrBWPwjEKUT1rXx3kNmWK8CYB70NmC130OwahbQrcNcR9YCMbseXi1ff4ycy7fzejbEYF8LTSN0WjuD2YxQguKyRz0LmjkjvP\/GPRKgENdbyLk2qGHq8FAnq3H0dwQnpetY5","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5Hn\/0wUBAfzOhAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoAOkUBAf9OGkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iskAAfwYm6cCoAo6sEAK5DT3NDkegA6T5vRyEUBj1nC\/RAAAXAwMAMAAAAAAAAAH0SDaW8kjo9JHOvkU0FmFgNeAEqAPy3RJ4EcP0khc6Zang6SMKaNcuDg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoAPZUBAf\/uFlAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2046{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNitEAAfwYlocCoAo6sEAK5DT3NDkegCNL5vRyEUBj1nEjCAAAQCJyKK7KKcglB8IoYUGKd5JULDmrS1aWS2hj375CTJh3nELUPfgHr5kS7VWpfjMB++Gzchya68l0TndCbqnQvtLVkuEuFThmVk6tmvtKYp1BNIwjq\/k7UbXtrpcFShW+moZnvnOLLlLGloiP7I2nLwCEjMigcCW8H3THbgVpt8ZYWqyymW2ZZ5mCIVaaEwQ0FiHuHrXqsm0Y5dNv7sDjWDg6ZCYbaL4u3wd3KMXddGHATXwQs4MCqILN2cG\/1MBswJZAOnrLMSg11IsON74tW6FJyVG1K1i+CWsBi8rccFDPvbgi\/hP2JTvGkixSuSPGR0RKqGPaL7mYLNweKD3ZoFVVnYd5VGBCyBDOcVMVviSrSvVkcUGExlqS2KHX56UC+9dTCIY1C4kb67qII5yqNtTGj9ZK1mEn\/L9GX8dk6+pTDv2W6w8JqaAsjRhP4END\/4MdgAdAoZZMlswl4NQs7+a9LTXzoPp2X1CqhAZohGg9EwrdJYFxpXqtT","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoApNUBAf9Nr7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1it0AAfwYm5MCoAo6sEAK5DT3NDkegEMH5vRyEUBj1nPAOAAAXAwMAMAAAAAAAAAH3u46bqjpHPAmhxp7lVJz0OkGM4w5TVKsag4xx9qYXGOGN6DvQzFszJg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBDBUBAf9NSHAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChiuEAAfwYnGMCoAo6sEAK5DT3NDkegEPb5vRzuUBD1Mv8TAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBD2UBAf\/tRIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iuUAAfwYm4sCoAo6sEAK5DT3NDkegEPb5vRzuUBj1MkTwAAAXAwMAMAAAAAAAAAH4K1A35UxI7ojg0h5HKOMJaKYLHruPRFbUR8HJXnX+Xbr+4SadrZivOw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBErUBAf\/tQTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoBefUBAf9M2pAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HO5HoB4TUBAf9Mc1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9HO5HoCMMUBggAM7xAAAXAwMAROAIO32NJwwkTmmEp9iJNuHJZHfNjyvJlZaR4F8YqlGLwmfGvhBnyaYaXVJhoXJy0nshgxS+5gTOCGOJUhHJHJZX0hoj","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HTdHoCSHUBAf9MB4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9HTdHoCSHUBggAOG6AAAXAwMAROAIO32NJwwldwmdj7jplR2EsfND6dREMouy6+p+Llx9c1drx5SauIoR\/8MdT8eqXOGMi3LFSmDfYONaFtFGbSXYpO0N","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":109,"pkt":"AgAAAEUAAGliwkAAfwYmzcCoAo6sEAK5DT3NDkegKvv5vRzuUBj1Mo\/KAAAXAwMAPAAAAAAAAAH9dEDIBauTplF8a9hHwts2C0VQXKYhDfL5KFUfMqGjwhVsRJ9t1hlc47gCSW3v5ExCq7ORAw==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HYBHoCmAUBggAOzhAAAXAwMAOOAIO32NJwwmcq0sDaUFY9m5anDk2\/jgzBM2aRKJlifVwYsq\/nz6hti9Ig59joQVbcad7di6FcDK","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Hb1HoCr7UBAf9Ll+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iw0AAfwYm2MCoAo6sEAK5DT3NDkegKzz5vRzuUBj1MvZZAAAXAwMAMAAAAAAAAAH+NkSZQacqam7wB2JpnMQheq118rJy2pyR\/j4PPjXkdAFuTSZ5wXeCoQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFixEAAfwYiE8CoAo6sEAK5DT3NDkegK3H5vRzuUBD1MkraAAAXAwMGbwAAAAAAAAH\/lcjUjGWjPXasHUTN9Ul2EKsh+WZjX141KIV758vbcJrlG9vQBn2H3zA823hWBXfkab12B0YOO+n3L+7tZ4VY5bVWNT6ADT8C0Ul5cTfA+xu\/\/8MAWtGgxQhNtEdjZJnmKa05li1xFq0GJSx519C3S07Mgx7nchJ19cwUp+BPAhbIzZvT\/9A1H+Bv6AzjRpf8wTAh8d3hv9cy1Mnx5WBW949ASgpjS03tAJz5QlF3ujbTsGU8pEHrBTW8NJZMvD1gee9JcGeoIuP5DTNJ20atSRetSn9c+N0THOOQB9HhJ8VoiZ6fJBW005sbmPTa9Av49A8tR5J1Ohvgh5o1l+jAKseuqJkSPkCT+XeFff7DshKpVaL4XyVrqYm9Jrzkj\/acNdv+jzOcMlFjoq2umhfAHSl9w7IjCH1zfYRc+NZVW3qt8BUcuUnoP3D63fG5\/4xSNMwtzDyFp9Jkpz9pXhpl7LIvsOep7o7f9NsLjjSM8arBpzOzQXCRd7LhRWcFQmidISGwnE4m4W6XdrFuHQ4EVORwv\/yoK8ppYacB+xuIgsoSMfqTUFLV2UEGHkoCVdwin1skVcGMarRfsVG0LHfVJzePxPM\/MV854Z9gnxL7Hoxbc+VR9fpva064+JKHYkhSCf5u8rbliGFysHwpjGSuGpSGGHn6vGXkCL9pqky5pcKQmy2mM+iAyN3co65Uof4yJIxvtez7JZSpaLT9EApoHo8Y\/5XUvjwaryGqBPJhA7T0vZmXyS1z4W6u+C+BGfssebrVwOD+otl+9px45GURpuE54vf9rmDc3SlUZiLrn7OUuKCrKrxiRcp0DrWsUET8MJJ6neeb3ZMaf44zumiDdAGaMWRwSJbM1HH1yBdtkBVmDqYuqEaxrcSYEI+pY6O2J\/YLLryZxaJKWhwznDih1elP\/+gret8MHYz6UHa\/Syy9OBodt0RcyCKu1Rtsor+iln85T6JW2jA+tqLQJpBl7vyTvk5cT3UUsSiCYxMxGLd8l6bDOIP1puFJ+DwuzK7is82SHmCkl05CHmFp56JEiEYmHtD+I9FHIYih6GnmXljdQ1sEyNoBikLO2OdeJ5ib8AZGXDNGpHf89neEIltQ4a91yfdQfyfqXrhtK0zzRZVhlqcXA+IloJurej9SvtRewK8854OTP2d4NowRtnKDsr2K5+sj23C2u+uFZqMbrQx5qZLK4Od3Ximxga9o4DGQlLynZA6DaFtP2yTYap0gYzJaGNZd\/0n\/wsoFXqlUx9TZ3awTTHePX05cDgLRbCA1x+AhcKKHmSkMhLJrdXdBm4cBlGjYh4O6jNAfHv9BFnp5I3ZvrlKrXmhL2SV6UAeLg1KvGs+wYYr8Lg3PWzQeXEXUaA31jEulEfMAQnhn1+p2dQzN7sp7Lenar4Mcq\/TnHFZTv5opFBsfFh4C65cWgB46kiOoIVJAoXVn4ENqzQ\/uquBdBxtFZkFKgnMqXIisdP7HmAmgGfjEJM7XPoZdc3J3TUix+0Lag3neYGIVrdBiRXth1We78YO9slulge\/1CndVY7HwKA25sTkDiF0mt7aWnz7qudaXABut8k+yiAq6r6NQe1fAXYyMdQSQNxsVPAj6Kj7eCf1zvU3uqqNAkptJcrKho2J0Wh9atikU3mrJAY0M9wOq7cI6ppEmvpnNr+Ik0ROuwhwNugiO","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9Hb1HoCs8UBAf\/bk0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNixUAAfwYlkMCoAo6sEAK5DT3NDkegMGr5vRzuUBj1MtzaAAA8gwOn2N3ZZqrZRh0zOPEKqHDmyFRMV+GBwxDyfHe5jXwcO+N379cpnGP77hwsDeLDsS8cCK7fVd6gk4WLshzfZsM2yT0vu5z+\/E0YWslaS6WBsgxUN8G\/TeOJvakZlalyYonwgxMG8l9NYu0Xecy\/FyKuTueg7F\/RZ5SsbcKHoyut\/yRZliFF8f6kc6nMEKqlL+3F7pZs93bBr4w\/qNhZ2KqLwmrQBdexz50R0tGahNNmBPJzFnUxI9+Z7ZgnPjx7P+ZmmsgthvtTNB8EGnXPqw\/DvnPWN3V9yrpOdKR5xv7bq6hyI\/kx2Qa94ckIfbzVqTwAv+ac1zUzbkxalfVSiggtHibm9KO2KAUvGwcARJBSf+EIStTS0ujfYZATnbVhr0ULEHt17sxT035JsnqW2R+Au5XOVNsomsK0H6FWJ8ZYyH\/NwTUZ+fcFl00S6l\/O2cRJ3mbebs8vznBqt0XTmkUwThOVJYAk40lfEv\/cuTnkcF5vyz3YRYRz","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Hb1HoCs8UBggAG+gAAAXAwMAMOAIO32NJwwnVk4yapkPpbqfEZBpEK3QmhhBJlEGDR7qlnOCsmrnT08amjIhcvHNUQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HfJHoCtxUBAf\/rjJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HfJHoCtxUBggAMWqAAAXAwMAMOAIO32NJwwoiMqv\/Z8rlXCAyBq\/gbBqJlFdZX4f7yAOlVlcJzZKWYGtfGUR3t3Jfg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iyEAAfwYm08CoAo6sEAK5DT3NDkegOFn5vRzuUBj1MvM2AAAXAwMAMAAAAAAAAAIBTti5ypuapmnkX+EUJVy4ksga2MtshA93TqM4Bs1vlE+3I9PVYJFYuA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HidHoDHlUBAf9LIqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1iyUAAfwYm0sCoAo6sEAK5DT3NDkegOI75vRzuUBj1Mk0RAAAXAwMAMAAAAAAAAAICwGoCUsl2FpebMttxCGQYZJrhu4D1Z0nlnipr+XsnV1GG7NHRad65HQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HidHoDHlUBggAMFsAAAXAwMAOOAIO32NJwwpdv2ay8g\/9FvZCwSMZ0c\/TqASPVfq0i9RoFzq3hetgh9lu5r6qUo6n87\/wgfn\/+f3","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HmRHoDbeUBggAIoQAAAXAwMAMOAIO32NJwwqGKjsKryqPQLnVmtY85ZQai+OceJjvh3byvdnVkH84K3YTyNkTRCNCQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFiykAAfwYiDcCoAo6sEAK5DT3NDkegOMP5vRzuUBD1MjOVAAAXAwMGbwAAAAAAAAIDR19NnjaRoU9rhw\/wMkihPnwsl4QimQEdh\/eYHSqF\/yVHi7V7AItIVEnRzTb8y9KYxg\/NyLI5aUJcT0ayeGFy6Zd67mZplmq5NWNUNC01UbyoyiXFIHT907GYUUbLhys4QPL\/uLPJlw4l8\/VTart8PDyuFom+4ikd+1JjjdHYq5zok+jOYnSK\/Xpjnx\/m0\/wcA0rYMMl9p1+j4GcRZcYFLA18fLheWJlCnE5LrUigayw4nGv30crI2grmTBNAICwAWfXrd6bSxYoeQTAyezOcxl0S6u0PDWEPfSOYrYEtMKaw5AjVZOLg3z2Qk2GGoAQBi6qH6yWgqSX1qpOd+HFhWLAkL2DKqjtB09KGIYh3JQorVJdVVH6gMU6RwRDmMG7Hl9OWX2CSgOZTDsW0o9gxKloNTXnZr\/ZokaN98oSazOHX4zbMxRiY4DpFkxLfv4q55SjI4NH7ca5MKuBwxUNs+8CIW+Tfd2HWys7PjdvgfIW4lfYRbfbUdurYMBHXhjpiCaIrTw3doBJovtJ6f+HU5c7uqP0xyQquFyACuZnBmHqWWUicbRWt8I9XRsMKg2h\/i+BZXbxZ3zjbewr\/k+HUt\/bAce46wyLv05wK392n1S+nsYBJo1kGGqYtoZjUFjn7vCe11FXVLY3EC8sR+vJQsVsYfcV0xWjbA4dvYdo5nVOvHjaCkggFZN\/09b2r4A6jfw0VNa\/jJ\/Ge8tDId7L3XYQhPRegujscneMqwQHH9\/f7zShCVgEKd6ntuLm3mNqyBl37rPLdNuD7HoSOB2JIRgSNIqwwAv7p\/bOEz8ofnQPAeKgmgokX0G9CbY8W2ismokWTCGNvDaEPm4L0\/q9W29fk536XB0mv4fFdiIQlbD4lmJL1vHMSNzLxueUu0lPzLdd9Wxwo+KSZSj\/62cfO05ZsxPmJwdk9qboCCpiU0nvPyuOVlcr6IIrYlfcaXprDdkfLBk56U1WyHTkdgoElFHEdhMXgZdUcD4XkS1GT9eZmdQjqXcNTgTcjI8vm6MlO1Y74V8dSDVO7M640NOCwFlgtp\/1CNARt1U4MPOcsMcXp5W+wvVZyNWFQvY0JLiO2qxpJeeEVqlYq6DB7\/gFC2WORjF9ze+33dV0SJfYAyEtFiFobiEfODhW\/HzjVnkRVflqX3bvYrPvGkc8o6Pc8Sf6t7+muhFcDPeBEJMggjSkDpRVv+mRBa5YI6Go2pEvv8UTXyxCSTj6aMDyz3mXCx85FqkGjPjWQ2DqyYLiZBCwyE6emEptWFq06ipr4kEhYIrSvRg8N9Fl8NpiERBUNacPMTXWFXmT85alK1xccosvzSipbxUBV3zfdqU2Qu57en+dVy0HHz1VjekJTPrHGgPNdIYyxh0hz7iKD5M7G6MkXW6CnhJ7e8J+PxB0NXRxj3nkMVpD9tBI\/vKDN1U60nkNbLdBf1AXZ9GoveMrJZejEmKLuZVWur9FbsSYeMMtaWLmtQ3SPwchjMyRSIgWIi8umwbOWmGtfAYCs6HnE1TQwJimzk1CtDL0mV4M7mNa+fTyYBqpiHVppSa+1W+ROQu6oyOvMWSdxkRQjX3C1mhUs86j22GmlSrCCQ3Za\/DvZNRNh3OL9e9rS7sxI2ysAN0\/qSg8Y11fMjkcv910bVV\/t19UJdEdJ\/ll4WdN6lB7Kt1bq1QChO0+sD4lB","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HplHoDhZUBAf9KtEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HplHoDiOUBAf\/qsFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFizEAAfwYiC8CoAo6sEAK5DT3NDkegPzf5vRzuUBD1Mv2yAAAXAwMGbwAAAAAAAAIEx9lrfXfd7s4ydts3WUtdlVtX\/2RHzP2JaUNNSvlUlRgCFOv+fuuUQIwqYh6FeBWO+88SOfGQbhKlmE8vy3snsuD4pS5sl+WYpG0pTqfUVb7ebtopkPwOqdi0R9HwI6glOl66gNon\/8+K4\/hTnUfxLG8ZP38XaQbzUGI+tZnehuff0Jymn+mMnjI3JkedmKX7RUbDCgZ9sojTORbFU3zuhNDDPheugCAoH5gPzz0WHwz3FO6E2ItC3m7K3ipAmhxfAtaQlMQFL1frcX318ZmOwB2B+GKbY35z\/vyBfEem\/I4r1qv8CjEDc4tYAnByaaWtVrtELO3YT2Kb58VQQR1ufk3pjJcdphdbBFe\/E4Nx2qlVWV74nVEIay8wMCP+rAyAWM8GxrOZoc5ZVvw5xD6BGv6jx1f8Nl\/hj9gYR+9xaI7Af0vpyxFLkf9KyRdTyz\/TVwq3rq1FHtUQUwn5DV8puTUogcYhUIcNtESGObckYrpTzejmTAkg16dGhTTLUPvdxoXOb4SY2y6lgHhzSwkoPbifoncJDWfaRpypbf4wduIVM2rrusaP0RhicOyQo\/ZPGd9Wg2v5Q5LbpCGk36x7Sq3fT8ktnLbQpxyv8IZDpzcnlXpDARYdVIwRPQAEsh9e5jmDxeTgs\/H8wTTJLbDHSJCce3TxrP61815LEknwETots+r1MUMq4RCrl7avWl+47+RYqC8wDVT9YXNsf87zlS0g5aG5rpwZDZVK+fRhhwhMy7BylkkcOR2B2drEzkMcd80uQ8KT288r32t23Upy+ivmq+utyQ8bjxkdjORdATTBN9XBJBWfrlZmsrtX10hcxl06u4ko3EdUoR6lW51x\/Tw7kF3hPSPWSbl14EtcaGFlcB9BAtvHxOXb2zV\/PVkphFQohHvOw952WdXoMiQ1j1K6A6gBn0tUpPe0aCy9YHq\/67sPA7AflIYiES1+xCt5hOdul5A9ES3uns0VXN7KWI+pjnk6KNCNVxvqaYGPlX8EVaEJVlD5iBIdBRLFz6ipXiTtBicjZphwGYJ8SLpMmrUz0j4dyfQsbyDrzKaxSRNDUBDgfb\/bkUK4ibkahrTUi3rWnNpolwOJp87AnaRT+EfYcsvDtQbRZdfIeAELjYTNsTS\/a1th9V9EMzUF4zLIHFmKjxtUMpDFR0C+Lr7T2or7siMs62x5OkalZCXEvf\/gTtT05XCe0a1d\/14bvQLE0IDUM74QTjdjNe+2+PzZlB9+XdCUf4VbTtW7Gp\/LoJ13cBMytdWPchqenGNiVOKvpOHTNsOoQc\/ZvnoSMNS2gtXk\/BlYTFyC9Vm3DwuHGolBjwCT2x7SouBdChJRmm4o1Y55SCUhaoKUvzUS+YOpx3X6U6BbcX4tFZHaiy+su855zYzlmY0LM5S5\/nphBxDezTGWsAhmFWWGCMn6160IsJm4jMXYPywgXi746OeCCvZq+vLS1sa6qYAq8ue5HGwDF1Ncte600nE3C5z6YEEyraey8iz1I+R7yqwSh2e8YJjwbKedb9NnL0b7puncN31CCRaTwOAkj\/bsuuzhGTSaHAJifA4uSZDX3BVCN+eb8boyQPXRA1BfRtchVyGWLvoyvESy0ERcceRmkJGIQY4s3\/QNajVsFogTaZmQ0sbe0qMewLwYhYbCzkywyGkSyvooj466s59IL2tLuDql","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HplHoDiOUBggAGdiAAAXAwMAOOAIO32NJwwr4rS+xlWEXa+KbMBT17fbSteSi04cfF+545QY+36yU36fICmNPdCXxC5gkK+3t47E","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoDjDUBAf\/qqTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoD83UBAf9KQpAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoEWrUBAf9J21AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNi0UAAfwYlhMCoAo6sEAK5DT3NDkegURj5vRzuUBj1MlW\/AADXnfqp6\/xVXvDWjNaT8EmgWNzy\/OxoKodRY4b4Apw6tri3DgIGRrrVwde87qK6drRsAKo2TjzDl8rm8W70UNz7g3nrdI5uUw7LUqiCw68LHJ8boS0oPoQIdhuxCZnHmrnDlk7q6VKsQMqOHlC805WpdvK+4XrLsQIRx7LN6APD1THX79LmDT6zQd\/Fn97uWUvD88RqRPndlbdLbt4q43AfLDxgVPG08t7zngdmM83pe96uCY3Dh796wgEp6fIDN1oXsUNt3aVYJQtfhAkjTD+B4UK+sWt9TmxRWXR9UTjRBoQETr\/dXQWjiTrBeNnQyu+ij2bKkR9AoWqUiJnzf4wrvkiWn3eoQwtPH4nltnxSWdynNewwfKWgZGy\/rcWgwodfpMyYsE4XlpMdE604OW2JA\/G1OCC3T13ZQ7XHPiNs9yAubmV3zr5+TXhCigESnYabCMiqmIxn+NHH7diP5+b96CcVi+b8PjGvKVtc9JFV2dtowJKfnM7iOljw","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoEwfUBAf9JdBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i0kAAfwYmycCoAo6sEAK5DT3NDkegUpP5vRzuUBj1MjmIAAAXAwMAMAAAAAAAAAIHwvem57uPJ6cV1czylM+LCFfV67WGU9N6xQA6mlko2Q+pUZKKO0kWKg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoFKTUBAf9JDNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HtZHoFLIUBAf\/pCOAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFi00AAfwYiBMCoAo6sEAK5DT3NDkegUsj5vRzuUBD1Mlx7AAAXAwMGbwAAAAAAAAIIsxUxC5WvcsX7HfbNX9Sv6nHmNfxusvNMIlYmxHkAGsJzivVqtisCJqrKp5Z8mN+MnumSLX+c5XcPxRXavbhXg2oZSIKK71i\/eoqpFOYSWQxiZ8pPTfV+uDKnynqipdoir5Y980YKTfRlf6f2QDxFEnWnboGsRQQHtfABbf3pQwo1Nsmd0VXtuJLBMPEf8K\/JPpdqFchKJoEvovmd8vEojrQ1AjXvT+8onSzdcZBZ75pBfbJeYRl+8KIeepPuU8n\/9Vc72ajQvCGuhIDKtoqbWpGqnyz+NAzgvOa3EdAe4iAY0b63pIxuQmJIPu5\/YPEIp5Pv3wMgS8LvG5RcDm7+M3Pq2cyDgO2Ub84zr8nyn\/SGAlzMS8i0W27\/Bj6InEGrJyZEjfrDymu2wPDkVeuiRKEMBWciVbYj1q5dhdSlZtN0hLV+xhU4orq4BK+al3+xbWDb5cXZk7v+W+XWpGfQQa9sZDB0LAjwuQWnwKTHNkWQ1wKx6l\/\/\/tYmobUvpjVZoY\/Pd25pVfPffznzQhS3TG97arYdYFnW+gwURkYuwQIlecZOlG2G1O8UQMu1I7xpn1mQLmvNbDf8RkG\/j5Nt8p\/ogRmYvyOcSjz1BThS6P7Xov1tCkCKtVXnxiYKNhcLgt63RsG56org\/9aWofxx4ikgv0PXPoBLy6NvqOt70DhMTLEw6oOjm3YNK1ESac00ktbdbuMRT7P9Zl+0K8rrZwMzINFe6np7Hm+YcculqclVQOfLQfyJ8fFj3dnY3F249LszmEvF7dKoV8BUdRVutxrUwlpkUYwMaSiueRMVKtHcpfo97xbD1ZVSxfvDD7UZtxVnyB4cDLKPTP7yHg7A2MVWpMIXBg6xAfNQGzfUa87kO9ph9cXG6WGsbRxPgA5q6RNnL4lLxwmC8pV\/jFBJouvZN1vpPN0LLai9kjpfaHLdL5OHAi\/WSKd0qr9su3Kmag3LvZ3wz4FVy2efkoGg37aK2erVzftnkDO+6CV8wblCbUE8floNRaOrRkRBAvKjaxXiRtsj8dmie2ThOPdTz3E01hPvJpU82zPU52x40x37ztyGHF7RfT9S+bNqw6BNhi5iwe4pC9POfPNJXnTK3EmYlOBYhgYKIpXKtAj7gCvBQh+1NmWbN6HOkIenmliItkGObYSrteTJbqMuJSS9oBPxL2tlHmqYZAAkquChLt9Q07g+0pJUUiNqgS9LBLWunxIR74QnLUGaftvYWPsW0WI2OadK\/uh3fDot2\/EmpKzYJCCC51WDrxhcyg4GCrj0797Y8DsMfVj0HtOCl7N+5T6t1u6OyMbPJVM2OKBcIwmo5OLb+krDEslszJhnrGCH4PHki+auXnSS3IXl14ZI0OUEKrQEaI3NAeY82raPMckNpvRtF5m+N6Kk03xsvZdiOy4KyLjEn\/LrGui0sAcKhYsrX06oZdRp\/LrrHSMmuGfhRMagoeSqCk1LohbtZah5riIWiS1rwNn6PPOi0tYs68eQmCFndi\/OF5w77yffoqpJM1PuESAiPwgCwGDDugioxngw1XI5iJNyu1vF1AJKPDQElRTsMnOLUmiwZyVvGurB2tS7mxcmGB7mJG1rs5cIR92qRdqvzC7itwyysjvV92g+4icoj4wgT8Br9B\/xf2pYKhtEqwHKOHXmJDk2o3XsllpjugfCbgz4fBlJ","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNi1EAAfwYlgcCoAo6sEAK5DT3NDkegV8H5vRzuUBj1MgjXAABLpq+E5MJz8asAnj7Iv5BAzGUxdKRdQ7oU5ZBfJkWu4Ej9OPq52mbVDk35gs26X4XSEDsoX8o0T9Xcw\/I6hCyBbbO3hYmduBa1boYzed7jaA+yMH6Qv1LRr+mHJhQw4llVPQM8m5cC3xjep246sDbEA1OwPDcfhvu0bTYFVPgUPx\/qprchZPjUH6mB75d20HD9zdxFHIztLC+rFH21KXYcEMhjO+ysjkxA+uUURW7l\/dzVcI2ACQx0\/afcE2Nnp+t2B4Qp4WosZLS\/ZmrCq4feVQVYrHsLeD0u2kV7lm9pxPUjzhUr4Y0YxJpX3Wjxd\/rk1RTcJeTO\/mGk1TiL6xmwYEY5nZ+lQ+PtCOaCd6+\/oZx0wvTD3weigtbt34dLETbiLchw8ISlbGG3G56UKR0+WiPsUz9Jc5zVrdsGH+PdoshaRGR8TEMkHPfB0zixwlSqgI\/iv2MSoziHuZx1R41ln7i+lZb1WwTY9fOyGkv\/4LLE79JFTzj4iPU+","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9HtZHoFLIUBggAGh3AAAXAwMAMOAIO32NJwws\/Hgoq48roQC5EQDxEGouOMoxOzThNspgHmTFS5tU6UPh+7uCfKieoQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoFk8UBAf9InvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoF+wUBAf9IN7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFi10AAfwYiAMCoAo6sEAK5DT3NDkegX7D5vRzuUBD1MjiwAAAXAwMGbwAAAAAAAAIKtkpFiHg3fwkMcVh9A1XAY64+s7z+JfobjZSbNcMJlPg3XzeXD3bFTUIJz2cKfg3LDbV3xJ+LEMqR7DKQ7K+Uz1boEPr0McR8lgPWUg3BFhXprLXfCmF1kSsj54XUdsT1Dp5QrblBo9jkV2xIX7Z9pk5eQbXvlyACOdKuJQ1eAua0GRMStGaUFEH5Qb7XwSI\/LSUPX5oaNl8FI+USgbDAnXdVmW35\/VxlQObuF5jpusX8GAFUNjOb+RcDBUOVFOssWiToPnqNzTRYuV6b\/aeEG\/3HoU3afqOPE3FMIL7X+vLOlfzEcBKa6\/2DAtbK56YE7CIG58VgtCJY9OOsp3nq7cX9RyCsrhbYEAuwA49njmUfQZqQYDeAbWHh8D7qIXzto56AIeN7AeYm9iR7RdDZ1MvvUJ5OgQFCxONvKr\/TuVJm+o0gPrBGjZd3dSF\/qIP9RdF0KTuJB\/xGCgJcQtN5ZMPNlzDjZ8cwRL\/4SblvQqIXIOX7ZlcjGZCJ2FtP8zwYaSHehe5HdndIz\/24M3ThhOTOiqpmxBiJkChVjRKCNJ5ExgwDJkSIfaYijLbZzfYwlRLdBqNnay7dSqHMZRBsJl838uQg8PCGvC0Uc86GybgOAEQuIm07HXbDHfhg0w0oeC7BxxUPyfN0FaYkbiQCe23lB\/uznvwpzrS2\/jxboxym5b3HjUSBQk5nHnhpCmj3HvJBmL6pRw\/Z6vC2X\/lw6hfx2oPEFerIcWnWjuc+HKn2Nvoostz1PeOdJqbGld\/B\/WYf3hH\/gHIzHpQUw7uNtnn97XWj1hcADikB9HbFl46tGR5tJw0CS8BkVbFE36FLZOJxMLDpPkeIvH6ffZZrAHSwRoFi37NuxklimHtM748lIB7SF1wUXldwJPr5DqUelynod2L+2JFvIQAclpgXLu2X8LBy0\/vkQWvI+gb9nMfBzfby5SAxiJ7lpuQesErCoWe2Jcxo7cI\/azQSqFyeu4O4aI3Os0pbphDjOnceaRAl3XvhpdjYfBpQZ0CnGTK3m6mBW6rgYA5j52iygEjvABL1LnxsUmC2xkKDNzKZxGW0oRAUqet+M7hv2Pb+3oTXV0WUaQwy0w0D3O6fsTVpLAW65Z3VXo5zL86HDyVvAkzvFhXbkx51yiOEKDLtIUNaydg3tAqxI8AD4lWm8csoPvYIEZ+aGF\/c15vueavC\/RgDWlMRs4WFczv2BkHZVhpLqLB1+LU6D\/8ffZhkuyQM4SEc+x7ph6DJ6\/l2kWiQJdqNVN16VzYEvUnE80wRbvlLeL+xqzl2lajVVwO9W9e7yP8zc6VzV8jKfnYLAXG7ytObYjSHV9HBF8Ht9EEm8MdBkKUhe+LHEZX0EVLGP23PdOgJTflFqqpaPVLTRsJYSC3Iy2SLp2+QCvzTMwje9JWdSIzTbz29YiOQ2SY2hfiURiAHBLqhLdpzMGDEV7kRWX\/TcLG+MueQKPeKNXPRYngUQ3JMN1ihcy0KGk1VTOEsFOC5Aj8s4ACsdv+n5VF6m3lcy20liNPd\/vHtn6POtMEAfjFeJ5b0Y6GJUp4I3h+X2fezl64Wv4WE8zYfnWoAJkkqDQ2S\/N90uugLuS1ZfShNrOXKptMmCk3iqlGA0WQLlI58FDH1IRQeb2nHdxcsBQsCOD2wUyfPdec6QdTO06QB9Pcl1ZwhkjiHPfTI","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoGYkUBAf9H0HAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i20AAfwYmwMCoAo6sEAK5DT3NDkegbJj5vRzuUBj1MsVwAAAXAwMAMAAAAAAAAAIM7hL7BSq6J5Jm3BONYzfE4RYLs+locEFCLVXd82hDLpw5rRwkD+9lDw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoGyYUBAf9HaTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9HwtHoGzNUBAf8nZgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9HwtHoGzNUBggALmZAAAXAwMAOOAIO32NJwwtgra0Js1uQzczhSKb5Y6pEQW5IZEutfLuxVdi3c5M7sTIy3Z6QqavvucCe3Rku2g4","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChi3EAAfwYm9MCoAo6sEAK5DT3NDkegbM35vR2AUBD6AJ3cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChi3UAAfwYm88CoAo6sEAK5DT3NDkegbM35vR3yUBD5jp3cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChi3kAAfwYm8sCoAo6sEAK5DT3NDkegbM35vR5kUBD5HJ3cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChi30AAfwYm8cCoAo6sEAK5DT3NDkegbM35vR7WUBD4qp3cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i4EAAfwYmu8CoAo6sEAK5DT3NDkegbM35vR7WUBj4qqI3AAAXAwMAMAAAAAAAAAIN54IvabU9KZj57t1b9rpvL3fHbIzIDCOI\/NVHdC\/WRkvd+FcCSAwoUQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoG0CUBAf\/nXiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2019{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHN2UBAf9G94AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHnqUBAf9GkEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGVi5UAAfwYmrsCoAo6sEAK5DT3NDkegeer5vR7WUBj4qtaCAAAXAwMAOAAAAAAAAAIQa9C4LZUmEKPPYmv8cCRpVPhUFZsxfy2rVwa9s6FLD8fst5ef+AsRoiEb23SUXsHc","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHonUBAf\/mi9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i5kAAfwYmtcCoAo6sEAK5DT3NDkegeif5vR7WUBj4qs6QAAAXAwMAMAAAAAAAAAIRNGCwki1ul\/10vlKpnHZcAdC96XXMBVneu7pqPEkqAcf73ctO9GM4lw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H0hHoHpcUBAf\/miIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9H0hHoHpcUBggAGfvAAAXAwMAMOAIO32NJwwurBpAj2BtBHwq6YXgjqlZR+39pVJanJC9Ajy94UP44lRku\/juk3hhVA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2047{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoIDQUBAfzGIRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoIXJUBAgAFzkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoIdEUBAf9Ft1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoI24UBAf9FUBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoJQsUBAf9E6NAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i70AAfwYmrMCoAo6sEAK5DT3NDkeglCz5vR7WUBj4qkdjAAAXAwMAMAAAAAAAAAIWZmp1lkvSbc6dUpGvZNf+W2WaZ+OMW0\/NxBSRUH3kGSzDwTVgBKUcFA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H31HoJRhUBAf\/k5OAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9H31HoJRhUBggAHasAAAXAwMAOOAIO32NJwwvNqxWHZSj8lJXf3W6MhnaNNH7lgJmlmuviulZl6Wv3egvHpBR\/W\/zU5oUFGuTPCET","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i8EAAfwYmq8CoAo6sEAK5DT3NDkeglGH5vR7WUBj4qmHkAAAXAwMAMAAAAAAAAAIXSLC6jxHQh3UdirdqD60Yl4wkv4\/X7czd+cEVofJ9Af0rPd2JcXoZVQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoJSWUBAf\/k3cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNi8kAAfwYlY8CoAo6sEAK5DT3NDkegmY\/5vR7WUBj4qovJAACPKU5h\/+szM+zRS5CdTaRpVj4ykkl3HwNM7yhr\/JSy0T2cFBT2\/w8nt58wHhdiR+lweE5cABQJNGgpk90wxQRrrs7ORyRdPkklcm2Eq8L6soXO6iuChUjMK8AIZj2sitt3dHTnQ0uKlNRJVNEgJYQzqBbw7B198L6DYu48NlQHdzk2+MBUnvcI5KRPGiU2\/9zHM7gmkTnDekQJ2sgIiYxa2wfF6Yq4HIy0IanMuRblpStgr48Fb\/\/6NqXwhIH+lzgVUpnZVDCbLVF1N9taoKIeUga5ouStx\/ult42MGpYdhYX75kDFbd5Gr4rd0vNTrG3Dmzw+SQcf86eEzJZSHy6kHPdMApWq5OE\/AdCnEdlRqXEEOk1TOk\/PHe3ktPUay+d6rguKMXuY9JLvua3c\/\/7qWwei0IRRFGN0HygiWtujsql3FVOSxiQzt5PM\/xj\/gY7loeQ1IMGvyzB9jI+G737JP0+xFADxxI2oRl5PBuBG5JF9xa6k2bNN5owv","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoJsKUBAf9EdyAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoKF+UBAf9ED+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1i9UAAfwYmpsCoAo6sEAK5DT3NDkegoX75vR7WUBj4qmV9AAAXAwMAMAAAAAAAAAIa9uqIo85\/vRcjDVUAGR3NM52g\/1f59IuNuEWf45B1yuqpuD\/URJH99w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H7pHoKGzUBAf\/kC\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9H7pHoKasUBggAIEjAAAXAwMAMOAIO32NJwww4LG8fGIdKShri5yL9ToHChpTuJ0+jOilgqR2CE4w4hxwZB\/MqtEgow==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNi90AAfwYlXsCoAo6sEAK5DT3NDkegpqz5vR7WUBj4qtP4AAAadRWVdT6CfPXkuddN5xhq94tYUKAVW+2zyEjabDue0HgbFucAtTcuR3OpmzLaNBGMNqFAszZzKB64dtCwv3JiUKgRWazXea3mGAYuBRf3O5IB3CVX5vDA1hOggkxaf4uvJMk0rtqIq7QRy842w66LcYIMKZrRu7Qn671ZG+AZL+OEvxhpNBeG1kCsEgfcFTBdKGNTREs5lnm4wCOBeF2iSHyZr6diqhJfyqZm2mRQluSbgX\/e0m6B8+Xm7Zh7tb2XiWKz8808+RCBLbe2gjXBJFMJ64jSNCYMXkLK0HXR\/f6+dnBzZo6kD90nGFft7O9avaNTbOV7vj8sYunOf4I4uVnGEUdBWaO2MZQJ+Hhuv+7JFjgruh1JO9HI\/HWDeFIqqHtaVskxNVnrzSVlGEVtcNO2MSEJfmW5yPG\/JfghtRD8zDO2phoB0UwzQYFZM3TAoKsAqjlAv9jO36\/7iAC2xQZHrQK3QzyAnB7\/txH8B4RmUcp59Z98cUrF","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoKgnUBAf9DogAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoK6bUBAfzDPUAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNi+0AAfwYlWsCoAo6sEAK5DT3NDkegs5T5vR7WUBj4qoRIAAAKt4gokXLr5Rzgz+pAl2s6RxDtvuFHlucnOIy50438b2vb7uS0lGT+EyOZ2dreZV1vkEp7O3ocVArXBkN0RiC0viQRl0GcLfGygI93xdI1xloGTf\/5eQo0CSbgvuPMfDn4fYZeXtMrWbzccv+nMVV0WpOylbbxg1rFYu2uBAZ4Xd\/bxQvxIJnRGvi+2z7n7FJSUlW0ZGzXXBfa7pEYyT3VStgEup5IHL9ZSn8k8Rw4P3R+0BC+ldSrcrKFU3dVfptDqmHpOlNLy6ur1l6HMrjhpoWy4h688lgXZKHf7iE5mzpIqgt\/X0n5f2d5S2MqFPFIlKGljtauYRny72jyeKXiSNMuS6ysWnvtMGToMZvI\/r8w5l25krxaafXIh\/66+p2qbJ3EYD7d1Nevxcj8J3mZbAG2ZXT5GUWd\/hv9ZwDxmU9Kig3HAtJeQcBg9Y\/wIfHh1Pk3j7oX1cSQ1Jwn4u0fZ2wYJWFy9qM4v9J6S4yNhzP1vOFQM4KMb4oA","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoLUPUBAf9C04AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoLuDUBAf9CbEAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFi\/kAAfwYh2cCoAo6sEAK5DT3NDkegu4P5vR7WUBD4qrzsAAAXAwMGbwAAAAAAAAIfSwhXJx\/ahIAYRQGfGJJ2N1EVt5uqWMe6AeJVAE5+GuvXMAKDr5oMVh2kRLbO8GJBbiFzeTW6TyWrYjTrvs8GzRdIDnyl6GyqApCKmhKxQh4KByl5hqu4iLYOx4Q0s+iLyokbbBxyiyiL8MjSv3hdOwtJ1JPbTfurgkpDM8YNN\/qFJyqypEg29wUXfZ1XsHNTSiRlIje0gj0VmQ958PhII5tsubcUYg84RGc6ooiNJ07yXM4vRDfArgnYTWqr8nth6ArTucGUCqJcKsi9adPWQU5qmu5EzGCBB93xoWVXtoRXdEpc0PS5m+I9Df9858uTyUM700C1iTH\/AhFQDaJZJn+Qern6G\/wplcIZt4mcJ9zbIMshULU+u1utgJNo8olWMCfW7HH1jNzqaI1FDc7Nq4Qr37z2Sj3BNgQFD64edfbdw9JsSev1DGKNpFRA63yb4fZgtlwQ3zdePYw1uMMXLDAoANvFuUaK1C6SPp8I0Zzy6RZ1UnH71DBfTF71LJkJ9iSYFG6NAPiiFU5TaMnaHnyCQbF0v8+m7YO9lJGVWCpPcG6kWXGDFebmVhNz8bKorJKI91XeWlHlDiJ8xJdLyeJkjM1vsLz5yajXxKtqN20YNzRSFMlC7L1E5jCSA3m89CqLm4+QXZ5SJDwXkcRCbQf0bZGfC0X4MzTZUnCGaJIVXkz\/Z3HNnEUfFmXC4VQ7kH0JAo0EbKaM9HcjRtOEdF4qfy79TJP8PYs9+p+wsc0Av6eXPmDacfU0yxUxpk4g3o6SmPmW5IotnyPWK8hYS\/WM4qkwK1DheccAYdrqTljaHy\/L7D1\/\/+aIEwO5F9\/\/FRyKRE\/eYiKXS7v6TDln86XgTQ7siU2pQmuEHd9fBZdBOFt9Qu09iA5m02BXmqYU2QOxtBk74PnG9wxuL4OIc6Ax4p6GhgkukMdTHF\/wpmGq5ZS7+GtMsbxMWXISiv3Spx4C35h5bRNCa4liI4N7HtAAHPyScRPjDl++ntqUh1wt+qYFVnTmEnk9dABzYul7f26mCL07hCRxrXlH4raBZBlFTIcpjlDxkRVX3B70cwzbARm6jVSzH3BT1VFt0z7CRcvx85f9a2lVFMVk7WFNbjMqaXdPWiW7r2kZVDVjIFYBYWPd5h2ie9X8s\/He7xRALx7oxS3qgqohDwhxroSwyn+7mIOTBqVB9z\/zUiM+Cr8uLRUYuaYD0ZN2U3jKoSIJJzuhWBDQPBBVCWfHCAoTEwSwikPKt1d+Mps0HcExDKdxv6kVaU3RGmwjwNIGL86tdt80tFC2Q7fQhX2XhImV9Ts86JXwcxkawV0HHKamhX0dRx4AJjRQcMT5mp4cEoPzyQYJSw1h6i0t8D01iy1+KcHDdPu9vvgealELG+63KGEQ8xmS9mvgLTR3K74wYghurUsIPmwYCjkPdTg8VT3Xqkv5yYtk9ToegmTWKfkj3x02SLbhxJ84fUtOnU\/m2SQEFAm7h9MgGRNN\/Vbd3UQOjHCmOcC2ijMVo7xekjTgHr+xATKoFYmZ0HKqxnDtTBVQgRfAaaJUMVSf5if1Ht5tw7mr13xR9y4pkb0+FYsfIFWgtQH1dpt4e3pZvDNrnr9PB8RB4U315mvgqTDFPDd80Jp1DfnCGcfx0Ftx2oHqk7CYmzXoY0O9jf6UOvEs8+e\/FjAFqOV\/XQNdBSIZ","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoMH3UBAf9CBQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoMhrUBAf9BncAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jAkAAfwYmmcCoAo6sEAK5DT3NDkegyGv5vR7WUBj4qjtWAAAXAwMAMAAAAAAAAAIhWYljTVO0ftXUGOekh00X\/joNzTfkh3tWwdAgI3SdwEa2+WpCEBgL4g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9H+9HoMigUBAf\/hmdAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9H+9HoMigUBggAGzXAAAXAwMAMOAIO32NJwwxHqmnpnzygOzeQH97L3seqxCrF7\/WbwEYj9M9j+KJqGsV2mK01yu2bQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjBEAAfwYlUcCoAo6sEAK5DT3NDkegzZn5vR7WUBj4qmHBAABWJWwt3Sul8vc6r\/ZP\/DSkTsyM5Lj8z0FAKd2vEFS+l9xcM1JzG9bjbvvY8DGNzFf8pcbajRt9nYUJ1MwNd9rJlAcTUjHSB45WcSUOaTbmoycM2jt33FkGimSs9JWLAv2X4iRB0wpP1KTiVr9x4iZCgnqq8\/5zgUtMXHLUJmhBTmAdIcZ7AG9wkoFAahwCs1vsBFsu4McZJqaMTZ5rFFOq1uIe9p9TGvQ9yQ0UIAjBqY256KdCpK9C6ze4s5uBNaiDfObmL5C\/9sjL7iz3P8jB9znbKR53EqIDz\/UXZzqzYaa0v4lz0mmoMx+\/+9A4hYGkF1SA9vOebp\/fl\/oTHO0LpC83g9qN6PtwQUyyJmzgzC4FBTf\/vmxpRodDUfAVmrZXlh9Nkmo17f8Ig7E2IRqBFLeKYuQrhxY+ou1Xwnhh16wAilWuiRUGKzbSA1aYrYBbjEyXslcFF\/\/JiDUf32fnBB+LwXuSQT56tE4O79VR\/GtkgbMG99u7dIlR","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ICRHoM8UUBAf9BL+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jBUAAfwYmlsCoAo6sEAK5DT3NDkegzxT5vR7WUBj4qhaLAAAXAwMAMAAAAAAAAAIj4A3N6Q6beAI0g+hxItXjmTkw5rddA+SaVR2foKtQLUUinvaFuEpvdQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9ICRHoM9JUBAf\/hK\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjBkAAfwYmysCoAo6sEAK5DT3NDkegz0n5vR9IUBD4ODtgAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0395{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9ICRHoM9JUBggAC93AAAXAwMAOOAIO32NJwwyvLNA9\/x7x8R9SBSUC90M7x12R\/bRrPqDYGQPKxcomQFMt73i2tew1Dg1vTb\/s\/9f","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jB0AAfwYmlMCoAo6sEAK5DT3NDkegz0n5vR9IUBj4OP07AAAXAwMAMAAAAAAAAAIk2hLihWQR1DD+S4phsHFcdRDWDq7pc+asiVAkK6TrUpeVWSFMMr\/ZVw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoM9+UBAf\/hJNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjCEAAfwYhz8CoAo6sEAK5DT3NDkegz375vR9IUBD4OIkvAAAXAwMGbwAAAAAAAAIlrtn\/s8TLzK9jG116X1fGEwdIpyx9Qp+KD3H1+9x6odKLAHFZ46BEuxy1JcVF2HFzRT92RDy0\/249VCEfvRrLCsrCSeL+WcWv+XH2I4ElBGhwUuCZfY9t4sJTiO8yqPEriBnZQHzZxYjuYIfaZLEcqkAyQF41rNAyaJO5yJtIvCzz\/bANItBFNXM4wk7GnH1L2K8Y7UDWyiNP5OICqoQwV3hhXlUn4Eyp9B0kLPMX8TCetM8O\/ER7ZHePQdemQXHtVd7+jCaua1CEOOXexZzxV6LuLxuPbR067zJmEj8AqAZe0gPwKGzPFyOcP\/95oBJf+3qTygvTJYjjbjwCPEivfkle43ZxzpwPjT1VbMbYg2XCPoGpx07lffjj3DmqpxCtlPCdbtgATRr8Cz9lLY\/3hsIclw3qDN1HKJt4da+xTAE102tSj\/Aw\/DG9mOgGGHPD7VAx51gVAA4K3oxIJEFfbLF8fJELnscaO\/k1WSm+EQvPB6PbEL+00\/b+5hx3wJSR7WMHKIz4rUyjwD3NiEQmTJpKoIdlf6wLDRSEH\/85hce0fJjNVo60C7+\/fDBOXVGs6da4nm5S6hsvEpJcz0A7sMjCmkeRGzkUHzLki0MBBF04HB0Sog+gLdwc6WGg3hSn1gBZT7+WaYTwPALfZTLT3JM4rP93fCoMCraUh56NYOwHzSxAENlhRu987xh4haDoVvfxD3SlcADjU92jpBm\/zjeD\/hDWm7JNyS\/dZy+owVmmKychVrgiGfXyU+f1fni5eWz\/lle8e5jnxtN8dxGjilGEM2BYwLWOJyCtOQBLwEqprnb9tZgV6E1WroerCkzhkXb+FmVyGzHg+UMYzL9mE\/kQw7s4zfsYzgiGibsdjTYDv5DNqmKQgm\/ufiTttJOUTD7RQY7GM9V9MBUHEhfhmHc01b278rRXUtghT5BHQ3L1q6NPyO95sZCssFTpzYN+WejdHivUtdVqn2iCQ5BTT0K+\/IzZkWnzyE4vDMVCPsN2ZsgFOJ0iPpiwYEvjFzhRWbWkjoSC\/9n7WILtGd6fLFIn5ZdrPAXdrjhcZC3uueQKXS1ahjYw9QbeyxJq\/fMGlkcxm8FdbjQ6Fmp9Yi8nqnvZ3hswf6lBLIH+JgwaWlqJgZF1EU6hvh2OJ0AdwhCEY5Fcf8B5hCOLcLBFY6h6bwKYeZRohwNMJ1O3vp2cyrtIzbMdtCyu0bibaUHMW\/sqe2ZgjPhxLmI2sZlEpv3DkQ6T0KjOVxm\/O15QuP9R7Hncije\/DYm+KaMevooRKrug1M8FqBmcr7FK4PCiQmGIWR6S6HWOQF\/TE9L8v7HM3hGVJODP12irCWFQ16VHbaVb+hPq9AVI3S1QOST6YsMfX1mKnWd8kJB0lO3MMhOxNAGl6GXXwo7Yf9s74sfYHQgZoA4QhncZvRw1djGnGEdUAKUa4zPYe9NeqluxuifvzglsOzrIqmsqH0nlikJVHBd3muSLQFEz6pP9TfJtjTwP2tLBNxCYfJNSopeO0uSHHT+Ov0b5ldqq0yCb9Cfv+Jq8SnzZx\/knBjLzTkIGqLOiDA8dEmCqG16oZOlXitjQToWzN8VXlo6eimW4HIADbzd\/jbb+TvTqvQ4FFcTNKkC8Z06wD1RZnkibmB1CGZVX8RyHEVktz1TwyFzYYsmVY+NbabcGd8Y1k\/AcoC\/I","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoNXyUBAf9AvjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoNxmUBAf9AVvAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoOLaUBAf9P76AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoOlOUBAf9PiGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoO\/CUBAf9PISAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jEkAAfwYmicCoAo6sEAK5DT3NDkeg78L5vR9IUBj4OMRDAAAXAwMAMAAAAAAAAAIqqeyks90mcKloknTRBzbAEhGgcq3I1\/zF6UGvFRaNYsQF6NKuPhSthQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IGFHoO\/3UBAf\/vHTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IGFHoO\/3UBggAHm4AAAXAwMAMOAIO32NJwwzEXIz+5XtqVhAJldNWqyyyD\/KV9+jWOjL5F7eg7c69k6rENPLuoktEA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0831{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IJZHoPZrUBAf9Os0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjFUAAfwYhwsCoAo6sEAK5DT3NDkeg9mv5vR9IUBD4OGLSAAAXAwMGbwAAAAAAAAIsf0x+kwXEnIGQka9eHB+nc6SmT0FTY6sJOx09D55Nza0\/zbW\/wRDF1Y0zeZWzihbAgnkYBZV08eAoFwGkh3TCw4Dria60FSboWeUCCb\/R3jyWFFttE3SspUw3IptK2akj6prfjbB8RQcrBJUskz+HmZFJqacSBXu+RkCuklKSt+S5s+IhPBqgsEFmzWMnly2o7jRGW5Ku+PMw5ImLrtEgZVAWOleCuhutbLkN6ShHYHbzbkLRtMJ\/tu+TeM0GgdniHhZISxTGZ0H3FW6nHl4j46\/SfVifPM2a+VuG4rozdsRIqkVkkDo4c2ZAXueO8KF+TL2wukIliQh03fLqkrce6H3Pbss0SogbfPXaoVpS9y0i+fa7lrx7UgvSSG81X2VLI3LU1sFevhS+tNKw9L\/uBtfGllus+i\/muhX2NER1Ahiy4bR9Y4D9vwRA0QC5ynb3ZfyUsGvl\/qUjBS8tWPQDhSroP6KhH7UstBpaUQDtX1aoS1840xXCQRwdoIG8brGJBMOVjyeenQkF2KG3l3dg8gfNziOuxRm5RKbkHAxqfXglxw6q1IJD\/+QCzBNGUGy+MAqfyyg1Lq9ozhLwJOJbIQ5lzBAL5Ke7maQdIoHvSkibAO5sJRJLRmWsn5+49pbSab+7bLKjr79sYnHgM11bu\/ab5XCBWQU9gVML0l4d\/KsuAFuWAThDjIf8cQ5xPpcRM7juq9m0LxAAO+2UgzmX2lzF9L8F3qYN8STkmmB\/hDDqzHo9srMrrozpF73O7o1dF2tj4FaSG7IW7eXbZerwbsCrzwtZ7EjgYPXfy\/MxWIBCLYvU3LRRTWSaXLD3pNEY3ul7oOjKsP5TSwhRLlzVv1tnH0tcaiDnTqwODy4UN4XU4OZCWjK9pW30gMNFgrOFQU35OPlQ7OFzgApc9kZ2z2EAL0q8\/CiWyVCsf0r6foLd1Hoa7ejIsQPReimLb4KlPH6+fnP6iEZSbgXRjxuRVDg4K\/P\/SHQkkZGCfQrW2LOHkJ9hNb\/kVn1Nvvm\/AnHt9Y+522BwhQdAgPp5EcPXWdTOni8pW1hdZuOgyaqhHpSqr0LdoVhLFnN929TxmTUp1S9XjiT9waM8RfpefDMmhbrmNk0ye1PDMZw2DaEepWuRtTIxoOQ0LW48RmRI+ZX7GbFXqGXWLieCR8GY7x0LSb2XjbWd1PuKIk3bvZPsTLafW4v9ygNWtegtAmq720xrnAXbHokppXslPqIKGr\/RwobZsCuZgW38Lm5xzD72cTeqzEv8X+ZdOZS7qvHz2pfVgaXxP8YLHUaB+pnEINLkqrDFm8hYoRKzaC\/idO30Q6Se2T5Ves42foiTYZ2wJxYF9T3AKQsnBar1hGJRbAYGJwrJA5DwCvgNa79IDHetdwHXbjDy5CGaC3Mnr306PB8c8we9RO67GTlS\/3zCOzOUfGdiXHlrM9IVHEatEaQzWjS0A3pbqQUvkjEsjTCfVk1UuSGkKMg8THOAq\/Cjd2hZwS2fRAlEuhetO5nPdaM9gJOW50LbVKLayrRAc5oKDB8zJdlIl7cARUr\/ng2WTAqxxntCdBYuIPlttvoPWOnl2RUiCm1mWb63pZbuiRyWW4Ck5pKRtgtqfF+AWNSwGMBK6o6Hg1pn\/xpBpg2ytmhM5qGS7FEdtvOdUztm7aQRs5N2rn53J8\/d+D5wjePc","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jF0AAfwYmhMCoAo6sEAK5DT3NDkeg\/N\/5vR9IUBj4OKrjAAAXAwMAMAAAAAAAAAItFJKD+FuBQb38kPbQZcoaglPgysG+xI7iDXYl\/4oL+HfI1TlWPayYWQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IJZHoPzfUBAf9OTAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IJZHoP0UUBAf8uSNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IJZHoP0UUBggAN18AAAXAwMAOOAIO32NJww0xvCcZy5s3Xm\/WI\/qSffECt80aHQqWKPvkSG34dqwsvYcOTTykVekkIJUFUiRx5w7","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjGEAAfwYmuMCoAo6sEAK5DT3NDkeg\/RT5vR+6UBD3xg2VAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjGUAAfwYmt8CoAo6sEAK5DT3NDkeg\/RT5vSAkUBD3XA2VAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjGkAAfwYmtsCoAo6sEAK5DT3NDkeg\/RT5vSCWUBD26g2VAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jG0AAfwYmgMCoAo6sEAK5DT3NDkeg\/RT5vSCWUBj26mH5AAAXAwMAMAAAAAAAAAIuQhQlsHhg0uBuNveOmtlpOdez6TewirRJgCWOGV0fNMKNOux8bcGO+w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoP1JUBAf\/uQPAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoQO9UBAf9N2lAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoQoxUBAf9NcxAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoRClUBAf9NC9AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjI0AAfwYlMsCoAo6sEAK5DT3NDkehFZ75vSCWUBj26hiLAADCvTGWIbDUqhwaov4hf3fFb3Emaz9j\/YMNVeTA8p15MGN9JySSNTey6fY6GVDC0w8+FDm1eo5LK+n\/mSu9V+ew3bK4r1R5ODkv9KPDevMv0gjKQSH+isVy1SwYXi5Vp4DuvBojNuZFveGXwtX6TSVDygJRhX+8IiVRzc9KuqobsCSZk1jAvOVvVg38CLkOK55avNVyOgjUYz8Sk58mCdg2Parv67gqG3feFlg7OUcISk7vPec8WuS7q1GMvhiSS0vzUv7+NANLsmG9bP8s4ujmkChkXDD9Dk3Xu4OgDP9c8FxYxNwJqp+xRdtE2waKC1yVEAa2Irc1g694\/Ku\/wSLHcjHCAQ89D3jTLwLFvuKkXg5UedPrrk5snQSxkto4G40DshFwRE5kmU1IsFxB4Kv9F\/AiN5cIeQxLHFW6WBf57xR4zAO3wzSnG\/ECniC72Cc5dhSHgZPgeFwiIqhauwf1x+L7nSVUbJ3sAGxk2iEALfgc2+ujiRqkgmDH","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoRcZUBAf9MpJAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jJEAAfwYmd8CoAo6sEAK5DT3NDkehFxn5vSCWUBj26pOoAAAXAwMAMAAAAAAAAAIzyRzUXKtZrf4yPJL5ZE7VY6qCvGGj1PChrcKenFq14+cv8X\/b8n+GhA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9INNHoRdOUBAf\/soKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjJUAAfwYhssCoAo6sEAK5DT3NDkehF075vSCWUBD26hXPAAAXAwMGbwAAAAAAAAI0eW\/wM7NE51X4+Qhc5LKTbkKrt3Y1fSALNN\/\/bQQL7EjpKOp9CP00EgyuxnO+YFGjYvE4lJTVzMaf3vZZUE1dGlAjsuI+O0SDEMT1cm7fYImAQlIroPEmNzOGoMTW5NK2ZYCGmqvumrWGqKt86ItGC3Vtyl9aSHHr8YorCRuUTwu2hgFEDeV4agiDDXCtkh9TNVxkOWdcEzbtduuxqTsMu41OdIfTYXj0GXOM2suLvcgtdrbw8Q0sFFSLXqGWDdaKQ3SQdFjJTF86ac7OtgGQxwpd76RX5lahYzL6TRxhtzr\/g49zG7bpjV26o9ZmwhamP\/ONGkMUJggZN7r7FVELHSdgi++4FxKv2EI4jH5nzgbgnpvb20k8sbF66qPOx+zGaSwrvEGj0vITun0+OB54\/edX1G6006Bm0efgEFUihrEoQVa6c4EEtMu42eq+by5ygzRN4xouRQ7UKkl5nwjh423c9TRZhbZ3kJV\/kggC9DczIEWl+U0pL+97PGJf+jan+KsGVjSVx8EgQOntAAaiesDk68\/L8waiCEkl63RVL3FWOTdHcggCFyQwJjiWvg1Eb\/Cp6xuQnNah9qB+\/LOK8YpgI4O\/jpnupsNmXIrFoDchAUSrvzFyfzCeYqRYPVJN+XkL1NnjveNITdUrwyehgXboI4r+jIzhWvLdR2C+wnJ9kwyK2uedihHWBclvVMqS85FhKx+c5Jz9FNx3w0B7kACUrlDJhFSwUFlEyvEwGLjJejBk9olpCxslW9jvuhWdXdhnuYpyxOLVevRG4faAWAV6eggdCbUMe7J4Lf265JCpEifAkIE2UAJYN2x\/8IufWPyUZzM+rLCVu6Q2cmsG2z2SOwpUBccnO1aVZjWbBi1M2KMrlKIa+CDdVcAmGknFNtXU+cNyb3wkN5jFi+2BzDdGaOrNJJUd05qYe3MNR2bLzqEt5bZpHUug+1aiC91rQQ5VrFKVfPFo4GKYCTSl9HoqDuWhKxg\/CbzpoL2ERNe9mr8NCmaRjMdKefgjh7dvtfvpPv+IUaIb+4T9b9oHHQrPYi6HNmVqmwA4qvDjQYCJm1k6ayL94E+ve47qwoT3\/mbSuCTXnE4Mcm85ezwN6xjbiYMc74eSkDnSO3ndDLO4GujZ+Xzfr7PsnqN\/5irWYUQR6bwfklWjGzQ2Ha90\/geF7lNXXl2u08VU\/sCAaBuUQGP3KNXRWi6ZqgmJs76WvXS9EFkyhq5Dbf9S0Rh+cVqfwghfdtYBB4omUm6CAEng0Li5u2DtBYwAXFh3gXYwdpcEsXiNm8CoSL6CxYUFMCK46+MdZ9OEyZxyZvoJlXX5vsPtRH\/DjEV2LfVz2\/+6yhf8li4ct5bcpSlOeaoUlGWhKd0xA9Yxlk6qQ52gsbMEO5SlskCRElW+mAQ0DNyP5L29eRMII1zfEIVYvd5PwN3LeOFeFug+xJBFkpO9kJouKDdNfldXvz7XoVCy0UORDKfda58ShEWoLHlw4c3dNf8G2xNMR8PLPMmaRpr7+Tn8qaXckadrNrNY8ZsUdvavrIwsaSX9l7K140QsknyQSl+gcg7FadyrUVlAGANMROFjWON6OERZaDAFgS0Y+05Q4JNZnpLfTqiJdy4YjeBQbQ68N9D0LfzBMKqn7Y4X8hTgBunTmeg2WjZbrSkH949ImSn9c7XCDGHYNr5T","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9INNHoRxHUBggAGeaAAAXAwMAMOAIO32NJww1PtWHDdoLwso7I8BLkg5c2QosZ3wu491GE7pxqmw0X+4oKv1B8lZMAw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoR3CUBAf9MNrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoSQ2UBAf9Lz3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jKUAAfwYmcsCoAo6sEAK5DT3NDkehJDb5vSCWUBj26vWIAAAXAwMAMAAAAAAAAAI2M\/6VAEcZDuIBvFHc+Sg9n9Dt1\/iI0GamygMehuKYAumeyW9rV54x2Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoSRrUBAf\/ry4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jKkAAfwYmccCoAo6sEAK5DT3NDkehJGv5vSCWUBj26jYeAAAXAwMAMAAAAAAAAAI3E9N8DBvxTlHRr5YbVl0j5f6F1T1JaHDoFr5Ikj81PP1Etweh7OZeKA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IQhHoSSgUBAf\/ryDAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0393{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IQhHoSSgUBggAHAZAAAXAwMAOOAIO32NJww2GeR0C\/253OKlkW\/ONV2GRbd8Kz3VMCufp5fpO3JtH0xvo3ZfOV4620S1TNSvaJBB","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjK0AAfwYhrMCoAo6sEAK5DT3NDkehJKD5vSCWUBD26jmxAAAXAwMGbwAAAAAAAAI4iZWs2+5pt+7ezF4snt1De8H7EHiJ07GFXlek9yoAqPF0FQDp+vp2T7p9OuGkIIE9prduMyBWqiO7Q+kmrqeDwGENEKtjIrKB4HrRNql1q3xSRCjFSFT6rvEQ32U2Uhdbew6kWDyiSFCCeHZ+YavdPjsHWdtnsWeV3tGy0KJWzWPxDm1RWe8cPAmAJt7AIa1rQCFApfd8fEl92SIKntlVvqsAtdCQM+iTgsAX7745PZ2g489CDuJW7DU7J2hX7vpWJ7AhKEZ8cDVUeLY+WRp4GsBWxgBmqiAuFQA1fi2wETl50+rizswV3e1SSH6Dg\/qxJX\/4T2yqeuIZkWS4leUhrrBrH8cuAffWSTpt+qgvwMHcbSb856n81Ie8XoC9lh6XoWq8XYPSV3SYhLe\/+c5MxE8I4e9FJfTrxhXeA7V4HYe\/6dUSiPQWzI\/SfgdR+9s5RlalYZFpGs\/s0h\/9IT3muwC2waZ\/56RfvuOt0EppNKAYg7eJA6Qp\/TiQK6lC+arG4R4wM5RrgmEA4m8KavkzZ5xkWiUtQbrkL8k+il3p598y9v7VVypDwMuSucXt1wxLPAH\/Qk0ADs7jdwBpqBDk4I07xraqH23gXfwDxBQL4IyGaIaW1hSPS4ebnt+vxa5cHMxvFpzpylUGr0MeSfCfyfeHXXqTnBHF2ned1b6\/BHAtiFtDHUiayzeuS\/U6yuXvg3Fp9FM6MumSNWzMIg7klzkmMlwk5F3p\/s+MFEMBQoOGpZCNMZMvyOzsj8oNdeOPsFkAMXOmNZX6exopr1DWBc5IAITR7wNXNE8KH+9mywPnMDsFxMTyRoHLgGGLkPkpJle4lEAE9tgKHnRLsXbODorWdNrRHGLqm0jDl7Deg4zrf1RclY+CD+fqFR9kjUl2eeI+FNzEsQmBzT+oiDd45daMuTpFHkpluGj2j79hznlI5AwjYdYUJUoMc65r2dyhx43q5D1oTvRLN9UzdUeGJ1LIamb9dJErU3ikafafklghlOUCTwfbvb6vZO+Rc9Hht4aY0d4OHhwBNoH2WSw8OiI9qred\/HTug+g9Xj59kuWqlvaHPxxMPpg3BOPZEFNhzbnwCtES6wy6KxASoE7s54xskFMjrd3DQh82AyeuR\/HlJWggNKMuk3vL1WJYfxPUP13R7sxqBe2LFxxWPATul0mi3cJoDWzH8Drr1ZIyl+TyCRUNq903yCx+1Cm59U6yEjvEi76XdLBXITflttW+tw4wHLeiLdpgbKsC4WoBEfZDn7KFuovO1Vgeo0xcCiTRUYZlt1Kd2cbgPt5MnywTZbfdgKI\/jHnV4Ar1ar5MMGmooDc5narGvsgtS7m+Ss7o1LOKTTgKDD9I7uBT15ON9qCuuul2z1aycgvl1IugQDZd3dG8eMeTokEsRrrFjLZacv16eLI2enj2kjkafx7xGyXyKiWNlxfhd1z1hGJZ0rE6wOoeXbizpT\/+tU6ZxwNzdoR2y8xXUh5l\/sjkP8mvaXQYLlDcvG6rMw\/5y74Fwn1DUwUlFG8ONIqWcfQwjgmDdPJLMEu0uALmGZRgUVjBkP5WdA\/a83LlpxHRtb8pi52Mp+FuW9MM4TEvuHZAC5iLfxLHNDziMMQVFrWleF5Foe3kd7vKq2wzrO\/fTpRU04x8\/ImlpLoq68YyDCTHC\/ZyXOPZJyr3kYgUgzRJ","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoSsUUBAf9LXcAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoTGIUBAfzK+QAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoTf8UBAf9Kj0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoT5wUBAf9KKAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jM0AAfwYmaMCoAo6sEAK5DT3NDkehPnD5vSCWUBj26ieSAAAXAwMAMAAAAAAAAAI8XplyjZruDevV5ztRa9j+gTbVjl2KYGgyEb7OmQueoM7vMse67AqHBw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IUVHoT6lUBAf\/qJBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IUVHoUOeUBggALzDAAAXAwMAMOAIO32NJww39RGeljDU2mIVXQyBZvPo4s7okAuKCz0Ot2W5\/shGdQeFOqeG0G+rKw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0827{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoUUZUBAf9JuiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjN0AAfwYlHsCoAo6sEAK5DT3NDkehShL5vSCWUBj26sQpAABE\/BQBKVyEyRJbGOWdKEC4w9IYct0QOlB4jLrq+CU3gc0PHhjcoi8W0dCjwBX2a0sxHzB0GU+CtBt\/AvYXkM8OgD+LF+GIJ6qdTH+0pyz7v9RamiT2lLgEI\/6NJdlBvuwacjaklO5NGULuZNCihSgQveTjg1E5vfKR1j3+XdQtLCzH\/ihDSa6zPYPG1MUNK9rLsL11KShFwNP2sXvvi\/+m5lpNPRA1d9jrFF339CVBpx19mucbUv+cgmIuPDzpmCVZ3DuADrJ2u\/yT7IEbU3vXN+BqovubN4RhcHGiZU1APn1XYrkokTLYuDqZ9vH2dpj7TyJ8cvOQmgRO6JkQW8ANckCc0cg0Q7Rj4Mq6IozzzILRxurBRRjjs1x4n3fgu+YEGzaQ2N9MVNVmZezWN9otYC92l8ATKIDIG2UPvKotDnKLrHrjYgvWSnXtpl3\/qFiESqyfRhE1UpXldHv4OlOeb7HLQfFpCLkcs3Y0jmDJrk1jjwRO21M9I\/bQ","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoUuNUBAf9JUuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1563{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":964,"pkt":"AgAAAEUAA8BjOEAAfwYjAMCoAo6sEAK5DT3NDkehS435vSCWUBj26kqdAAAXAwMDkwAAAAAAAAI\/L6hnOzNI47Wn9VO9wZNT4AXIzDJbPIpWd\/cF5fvgW9LLeWDd5QGNuBq92ELp4BVFXXHABlmFFeAfKeloEyrBSMDo0eDCQFpAZiKshVEo770Sv0HZdhD6ZzXTN4FZqsVcuz2NQJ418AFwkR\/PfbM2Q9kUPeU50\/crVh6d1hF2n2Os7rNgcwXpObW05LJcCmexvTocpsQHhxttNDmgNDZ1oPUYbHcobie83JTfG7HGvoTONXpQpcUYbIcceirTfMhuuRVHZU+oa5Fuzh27g4dLVrAbe4Af4vG6\/+rCXOxf1ZD2NL81280jOElY7yypMPH4lgartr++hAADpgRKh7IWEHD8dUkufqDwKo\/edEbG4Q4VraRBPH68moywUHB5dLbEPKNSZk8UpXWnPMEmlxYw9Flh8EFAG12PIi3xAFazsPANtviropHAesfWJ4CUDdz6ivkru5S0Hj5wKLiDZjXbJD08MvpumI\/v8qzSMYPRRmvk5bBhAzN1u0SiqQzrgnhcrj21yZ2qMceqliDD+iIJ\/OFeXOyS0Rtluua\/o5eyU373jvKK\/+Zel4Np3oxeouHdA7f8sL2vpWoxXwIs8C6t2DmHbpBcaZzS2bsHJWNJW\/1SZXis9E7c9UzNr9G08+i00tyOmAcka6NdNk0\/nqzyhq2i7BQ8Wf7mKN+uIkdRMLicKnKZH0M\/tXTbkNhfKNvm4i0dKbJ99g4+K+bUS0gSdjyj+NJwPtq92PPC0FlHfCx+4yztOfrAsLpP7jpqgjovTGCGXEZp2WFq\/7iMUVds3OkX8XtoXjcj\/eYbqd+vrRotdEZTMjBYnTywhdbqklZs5a6s6xRYjpscBoVvSSA7Mw9w3lqZpuD6kyTG+37SYzx9glSlnry8fBdWVQ6p4TqiD33S0oHwDN7g7WaZn3mVY+R3BeoGA4543apM9dvmFoEVVfx8qYs6yLeiGtJoWucWsg16\/T24mTlch3vAiY7MgcWHG4Ee\/3mI12W7k88PhrvGIWOp4Nmf+JRzkg\/Cae3ePXVOYX0KrFoTsmMPj22l+cz+0pmGqtO\/vdHRV+6FrK6osZNldjcU\/kuXfeH4XD\/\/Y5TkOwRePkXR3\/jT5ujf27YypimZ6NJvZ2lmz1DkJsEfk8NQleUWZtnuQcC4tdige9o1HRe\/EUyKt4Mvn5AJDDCRUp32tFj10PIwANrPuaw0enoE7dMa+ln0cA==","pkt_caplen":964,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU8lUBAf45GnAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0396{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":107,"pkt":"AgAAAEUAAGdjOUAAfwYmWMCoAo6sEAK5DT3NDkehTyX5vSCWUBj26hgOAAAXAwMAOgAAAAAAAAJA3930oqE8LSNBpzg4gj4FIiUG7FWr1KOHA14PAYeMiiQxAwl7936M+\/IUJqgK6fvlIaE=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jOkAAfwYmYcCoAo6sEAK5DT3NDkehT2T5vSCWUBj26pW3AAAXAwMAMAAAAAAAAAJBSUaPAq+3o7\/5lq+y1Zlc0hB1xGMDSdAH9NWP3eMcFDyVzkhmuSqHjg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU9kUBAf\/pFNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jO0AAfwYmYMCoAo6sEAK5DT3NDkehT5n5vSCWUBj26jlBAAAXAwMAMAAAAAAAAAJC4m5FTjmbEJJB6jglXapmcn8m1gqiLw8ihB\/S15L2BLOPGBTyJrcb+Q==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU+ZUBAf\/pEYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoU\/OUBAf\/pDjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjPUAAfwYlGMCoAo6sEAK5DT3NDkehVMf5vSCWUBj26m9KAADN77sN5EZRLf59UothuKTMnwU22UqRPBAe\/NKSZmiyDT3XqJhnEZl3HSanYK00WHpV1Ry\/bg6NiZnkex94Lx3Q63S6I4JaL4+IwLy7bGvGhVdIvZQxkIaRnMANnN+usHrVX6CBX+1u2BiM22HgYn\/\/euJnvIKlVpYCcESKawUmExwqQApgTM86GzmV926BLkJukyEfsv49uWw9dto39J2PKphAZd51rFgNIB9jikw6bz+Nsdyx8l26S6xxDESRQWW1\/b1JyHLOw0WJMZDJ5AO\/MAZFvIZwuznaaFvXJ4PikuVcFk7ArPggMttk1zgsq4aUv3SKg7+tv1nRXUdGftAPjCrpXVs9nR9SdyLo1qY9+RySHJ\/ugp5EmSKTvvbrldtprCoa04VnYchCOelq03ZCbuVR24X\/jucTFaUgys+1FgAPw13YiQxnswhMoGm9IuXpD2NVJ8xdWNY25\/UjeoTiXrgby3RrpWWlRVDdy7EMhoIP38XngHpQBLVu","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoVZCUBAf9Ip5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjP0AAfwYlFsCoAo6sEAK5DT3NDkehWzv5vSCWUBj26vD+AAA\/y71ocXVoPfQxHI9VXmSeCxYmFPfhsVSFXkHu9Uq\/JiBOObaD64Qu+VmqLkwByqcGL51dadNz8142doQ9WhNC4NHGAOVSQzOlHkW6FJCSuqMArc2LA8mMyDV9qyqytWadHvMfyYhUt35Jorb6mGeCnEtDce0dgdP8hRyj1X9MJhjo09PcKfz4qi4aMjjWxdy55j6p+hOfNgz4kY72zZtXqp+ymRn5D\/KMWt30eZOxwKRC\/qtrEoViJ\/NQ93\/19q0DDfvJGXgRv\/15Mc\/0BEugIjoY97o+bdiUVhFz9+sIX\/0ZDZwQICW\/MPFF0lEguPHYE5kbeSuidkJGt94En2w6eVCJxD8a1g1ZlRsZnjvG3qy7KYIih0SfcyT+eiT\/xsV+8jcdg3oCLrNF8Ioa+jdTqdGCJQVxffJrvtlSBFbh\/Dx3spDWg3xm12L7KI7fdr7I3UB\/2mEB+1hotn68u3sGw0HmElPocmBlFBc6erCB8pcI3FQ9jWr7SCCn","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoVy2UBAfzIQtAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjQEAAfwYhl8CoAo6sEAK5DT3NDkehXLb5vSCWUBD26r9OAAAXAwMGbwAAAAAAAAJFro9UYULu7YsR0ZN0JBusHR1LXiXPZ9RIiziUdCy989NIl8wbaSeLrZZv0dS8+M0es4IJ3KKJCGJSmLZIpdU+DCPxJWreIIei0K6E90GrV4rWl82CVLt1t9Dvxr2LMaCkyX3kW1zoV371xxNbcaiCyGxkcpQWF8rrXoQQLPVfxQpCsy1n27IBUbEaZnJjqOQVxNmv2xfctiMWuvc2jD3Ixly1+akRujySqxuzOD0dV5vpCNI1jr+ow2Q96wBmx2GDx2G8RdDPtmFiAjYJyVWrEHQG+X504btggAKRCt3XYQGXyHEX5WnPxgZsExtvQ4SGOgdaXSI+rPKkJGGIY9NVw3v7Y395Y6G+th4vuO04gcNCxIbOZTWnhRhit63EHVCZ6Q+3Y+UuEBqxoRiSnR4AjuPSJ+\/qQ\/TnPCZPPOi3Wsu1w6wWGJNsK6flnUoRuy+rLv+dH8j8UMkaKV\/3sNyJtwqbw5auXwDKEc5NUr+NLodwKYjv4sQosT4bZCclumAVCLVewG4vIoZ19115zA86gsNioHePtQ9MNUGw5c2mQ6scGoOd7WMsojNgT15\/E9HAUDKmyqo5N9BzyGdIPMr6zze\/alQOWixxju6taD828+cTm8X28ZR2+J+seDx6pHhO+6Qqjtt1OeUdZoIpQ00Blexgm1JkTBEIjW4QzsAGoUD2V6JKPlb4psq2pGxZGzoCphiUl7EsPlOnu5qTlAyma6dKZJUKXROtch\/JjubIeOi\/AblVDBBRVGrcSi9ds\/NRETPKgj19QBAhtoBRVb9O6tdbEe0j+aypSkr6yrEU5nHcG6wpAmYTt2j17i6E7kSzNCUGpc\/l3euLloKjHzFnw76SVGhf2R1Zdd0ary2hxOIJI43ReRE25PjPsPaqwcARh3K7Am7Pvv+A4KUR5aYO12mkrg9hKKc45moGMlu66+RdvinktcANzlx6yyzpDdo\/YHZsTcVOTGgqWbPvZvnKVCpsDihmJ9iQizT7vImlAAqMjlfOIB2il2b5bBqZm5Xsu5SrLwDLKWJoY9CpkFzvPO6yNBfq3YruGDOGMDkzPpS7W3vlZWC5fvFzkz4PCbFgI1F7z4IW9Hiomd+pU6WK+wWrlzNbfVqSD26k7dOPKbE6DdH7tIxR3XTnyLeE4Yg6bzRPyZwrczyctyHskx4hMQw6KI89aqtOAYjbnymbuLpDMWblJTQtxcLf+HRc1zLpb8z34Od1YiYXThyyj7\/\/b\/rzIHQLEmqMBsSELzpm1PJ04gpezO1QFs+L5FKR2zDMy6WLXPs9kxlI9BIoQGTY9xZEM0fjt4gWXc5GMyZrI3VSVmI7r2T90jaX5MQfMgarnN21REAvywP6XRfMVpMjp6njSIsQ2sQ6S1tQezo324F2WtLzhd3ua4RY4uETrkeU5\/EF++tDWyRJYf6uB4FQ6nFoPYXdUw03LIB7PCoavrqld7gmXhcnZJo6yq+DX0dxC7U4unXQc1su+7eg0sUqRhvnqabCf5bX1qRtaQOWJ9q0Ipqc6uI1ROhY4MPfuApaeJKQD4RQGyiV6KjUQt8+gYhZ1GAVdnQYSJI1qZpGigQ1i9d65C5Tc73mKv2ZIYHCJPRk+qcHtSX3vpoe4CQ8QM4Ik5URkiuP4uSrcndEMhV80sVw5LA5Lw\/Nwa\/6\/Ko57aYCIu94M15kwIR5","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoWMqUBAfzH25AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jQkAAfwYmWcCoAo6sEAK5DT3NDkehYyr5vSCWUBj26uG2AAAXAwMAMAAAAAAAAAJGVH\/q0sICY9VEbtsG1+n+RaY1F4bedLdP0dPb0fKcZ2fSJfYbdO2SDA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoWNfUBAf\/n1SAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoWnTUBAf9HboAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjRkAAfwYlD8CoAo6sEAK5DT3NDkehbsz5vSCWUBj26lUmAAAs26s2vAef4s3JdK9Kdl0dvb96tarmWA108kKfQfR9sKdoPFQdI0Wtxtxp8oV6+YPbdb08DFQDyywHUEdAKc92qfKxsVlvFNtu3IHce6a\/IfB54FwZnr9ueKiGuv4\/e0C+ac0qUgNmEjyO5PKs5rOPtsgqmSrmiaKv39q2LVlpgs25Bm+zOkLR3XhhhKS\/cnTFWqzx5n2AD5HURa\/9VlYWWS37kaC8ddmLzEzWL1mb+GGq9odbjP67bDVPrT8wrQBkL7SRJqVyH6hxboPmXKst1A6hzO6q9DhC4WpuvqTxF57T5rmuqV4qxiaKHbPFPlAiUTcF3\/BiC5jNSsFbe6aEjXkqu6NNRRuub2pPd2zPmVEGVaVA8tWdwifFaO2nfdfZH+Q+HRIRRloZosyVB9zhIZRRtTGc+VJcCexw\/zqyOH1zRKMofG6fWA3vPzgSF2IpfcdoHfll8bMLHMY9g0Moli8t3CSe9ne2rZG8QGG19ezPCymBE\/HgTFOT","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXBHUBAf9HB0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjSEAAfwYlDcCoAo6sEAK5DT3NDkehdUD5vSCWUBj26uaNAADXs0rEfJicTvWJuqI8QH6bLwT5G1+m4IdN5dwLKWA0x0+jZ0DekmaPqSuK05DSCJl51iQAn4246CoZ8ER16gSyV6gdCP9BhT8QCH3ZZ36PwXM4PPJkrlPcEXI8J4bwcwcU02yjytlkVmEQD3+ZRsPZhm+L1f9H4GRsC4DZALce\/qoxkSkVxCQAfbCxdQofry8l51j6M13IqlhwSoC89ESmwqpm7jSHngOGCho93akcIuXY1ZRHrnt\/AAIfeOPjeXv4q8JrMMp\/ZX9lBLlDZ5FeMJWNLd8fYli1D\/jA5gKAZ6FsAYSPeK7kfQ4vB24kncmoGsl2OyGBBQ5Z9eKA8+rfqcaEG2NNfDmGSEw9LbvPth+7C68Sc7VCBpiXGJPBMLrufRDRDlgeuRwYK+N9lnxBQQalIv40iviVpQaA14ZtJMeJbJomje6nkKJBCvwbbyJVDw3HrBxi+gU5xUUR3tyTnLKUtYjfNMly5RqsbiDPmoVpsTIwwOTNgC\/Q","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jSUAAfwYmUsCoAo6sEAK5DT3NDkehdrv5vSCWUBj26iZAAAAXAwMAMAAAAAAAAAJKHTz3+2eY6kEVep\/3tw+8s0BbR+TtBMK6sCZ6UiIsy1za1d4Dcq9fBw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXa7UBAf9GoAAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jSkAAfwYmUcCoAo6sEAK5DT3NDkehdvD5vSCWUBj26hejAAAXAwMAMAAAAAAAAAJLtQrQNCn7y8Mc6GGynj41LRS90IOyi\/0yZvJ2eDx9AuELnZ2Ee1YvoQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXbwUBAf8mnNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2034{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoXclUBAf\/mmMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoX2ZUBAf9GMiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoYQNUBAf9FyuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjT0AAfwYhiMCoAo6sEAK5DT3NDkehhA35vSCWUBD26hkVAAAXAwMGbwAAAAAAAAJOYmwfX5AZW+VKnxY5VeJjbDPxnLg7nlwFJe8lrRnzBrXeoUPiF5qbQwRNCAXrixq+Q4qi2senaQ3n1Szwu01Jb2kiR8zCuPAE5+PmhFvG1HtMkJ\/sMoAfwtTN5ifSxdSyMVrV4mG0ROBxFcQyd2wunIZM2X+IdwavTmV6C9soHlN2w0PSpNXdVba83j\/XV\/LTxpZRjY3m+\/pqpQtD+dFQZ9oAsC758msPQtjeinst9ml1slLkKCbjC8TcB1+9FP7q6nbo2z\/K+RxdHIb+BvNjZKsc9yM9ol7de\/MtG\/sDEG9dV7SX8nQaqR8WSLhTcZr0q\/LIbdeYZEvZFS9IJYzI\/xSTVYJgffRoTqpz5+m1LfglS+I5ZcsyioN+6Nt6sMxqH9JwGujd1SHCKXueKjhikOxTScTYh+vX3hTw4r91sm4z8xw25wPxyohZQPhAhMdCU2xhsTDl5TLJf1AV6edYnS\/l\/LYFEJiQP+zew+jMGER3onmTnQDDW4XtmWAh84\/Y22iYbVmlKBZd2eOABzeme+vCzpGzqnLbWNfxPLLXQ6HTScnrPonqXNAdA0bTuL52sBxB7HKoGoLu36hfu6GWmzX28Ws0XzU+r+Se8X+P8B4axsfhbG6hoeKJoQ3zLmoAv2GIPXPrKl63pm+wLVDI2k\/JdtOGm+h8XU8\/\/Yge1QxNB0eOUkNOioWartiA1AGyhn9PY3puktHIgHXL8jVDg\/dVg\/BNLIyKUMtkpfGleZvTIYbSN1aBVljV4bhnbbOgrBEnkM94ZncmBGUwgjPBt1uFOKt6B87Uiio06nQ0rRaaFUHHNgxEQYlpAgCsVti8oqThAcvgqxSShoRjMbg6+wzw\/TVdOvwkSYiwtCooP9hfmaDsTQFd8HrNUPYWffQXB\/J1GErNsnoF\/EMvT+N214uSE6D72xA538HTwDNEe41LdpkfK6c+B6LJhwRu8Vf33CzKetd7\/KwaSF4ZFYokJ8FQ3hVSpvmIfdO7+mbWBSN6OTIyE\/WwOrfPBXKq4PN4DgSEWMBNiuAzOM9jq8D0e1fl3i8fkUrMvokNeOIuyqRM\/z+QdpcwZsCojsyYl1pAsdLmSQITwKM7L2J1MqmMBiFp8M3Jc6dkDY15g1ipXhE1R429sHHL5arRLdVc6c8ANcBVgU4JEx301MuIlejef0EPQyNJfcg1I4KNJalQ6tGJJinlJKrP+M0+GNDzd6mWeZIJKrEelLTY7pf3CJd9taW+xlb8fC3uYeiz5VYE4H4wnbY\/TCHXHx8cRFeEbdgVdkk+8RTbioKfRQXbOfD5\/1HgYiLqSjhNGAfKxW+91d5uuAefAf+YPDCxxiZGw7aravrigJOKKRfSlbh0bIbTcD9M28+Xp9+TktZKiTAB0DOK44X8Cv67sIuUVOP3w3umkH0oQUDkCXZYc4n73P8anVs3EbE5rW\/or59BDF8t\/\/U6tEVfy\/XJRj4FC8wDDM+\/OMm+gEnJPYyVKQrTE4vNALqzPvW2dqGi42ZfnCNiJvP\/hG9gp5pTtY5FXPxZ3m0TUVjxMiXpDfoFTRpUtHzctwtyEb3GhOnZwB0\/cYztuEBv4MifVGTXBLYBH7fDFu8Z9D+n1x6c95QN4tj3DZfzhxq7jA35YwzxZgJyTB\/PeBBhNWfKWRKMWtm1GfJXnbxzz5s4vJ61SYdMr6Ji","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoYqBUBAf9FY6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jUUAAfwYmSsCoAo6sEAK5DT3NDkehioH5vSCWUBj26tnJAAAXAwMAMAAAAAAAAAJPkyjaowwC7e1cYVyFlCC\/cPG6JnxJ9lHLMKlOf+ZSIFCEj3xBJ7ZEjQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoYq2UBAf\/lX7AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjU0AAfwYlAsCoAo6sEAK5DT3NDkehj6\/5vSCWUBj26kQKAAAujwrva4elYfc5AHkNJfsQuBmPhkrniUFciXhS5XxVU1d65xaHVjPKMM56k6wf\/c3N4L\/CgFoITzl1XgqnYTDdCeJL12uq8XxK0A0tPIYnxTiquY0ofvUdc6BYYFrylIB0LQsxXHwN\/hL06IVIEJerE6X87iF85RMosdLtkj9MvxLCDI+lw0Ni+gSxHIXItL5WC493POKksbL1qcCqFHy1+jQjA+xR1Tf1XXQ2yMNTqYzCXPZmik36nQnwZ0arPkkoGuenhc3OesAOo\/sveheU60k1F4yKCPtjqwuy9\/09v0hOoEPpKx2FaC4zWrxhXE2KumWf9xRx4U8aL9OawqCxbjSBydPl0L9p9eF+zrRpWtuiAa61Xfn4zYpW1GVrNgk+kYQQX0LCJRT8FMPilTuVmUaGXEXsrtHMv05KqxbMaTEPbiRZtvR1bgNw9a\/VQi4ZIwU1pdYJBctV7i3fkFM0tXrBHjv+vbGYZjapnX+VbS+wJoxn1OUM5yfe","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZEqUBAfzE+5AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZeeUBAfzElFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jVkAAfwYmRcCoAo6sEAK5DT3NDkehl575vSCWUBj26ozsAAAXAwMAMAAAAAAAAAJSD+QBh9WgAfMwQpr4YixEP0gKr2rCCbLt0HhiWardvwBmqsUrUcD58A==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZfTUBAf\/kjeAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjV0AAfwYmecCoAo6sEAK5DT3NDkehl9P5vSEIUBD2eHLVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IXpHoZ5HUBAf9EJ0AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0407{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9IXpHoZ5HUBggAIW3AAAXAwMAROAIO32NJww4ybTgwpUiZ0Ay8Wu4WbLbsEKOBcnh8o5jlQbZQiOnmahbWssVYrTwsuv+tFnA8XdDBJNZMFwKo6lMyEul","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9IcNHoZ5HUBggAGE9AAAXAwMAROAIO32NJww5BitHp2EePn30i1pUTVr\/GmZ+KzrcJqlulghObW3Dod1gdTAZL9GOFZuYOQy2BI9SHQNC36y62nSCLXLC","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IgxHoZ5HUBggAP2xAAAXAwMAOOAIO32NJww63Lra7XJB3ZllNGchbHxkqFQZYJ9c2PJSTeetCQY4D117zlI2uQrx068IUDFmfo8F","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IklHoaS7UBAf9DsxAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0400{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":109,"pkt":"AgAAAEUAAGljXkAAfwYmMcCoAo6sEAK5DT3NDkehqy\/5vSF6UBj2BsvXAAAXAwMAPAAAAAAAAAJWymTGDYhdcNA6Y6THzMGWn+2YZhHNnn+zKj915igNTXXWEWl1A22CmFBw1DUayzK9O7pcoA==","pkt_caplen":109,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IklHoaS7UBggAMRQAAAXAwMAMOAIO32NJww7dOjiUUSxMErUiewjmvfgCjZsFlpTOjT8YWEQPCklXJWnsPC7IiNQeQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jX0AAfwYmPMCoAo6sEAK5DT3NDkehq3D5vSF6UBj2BgEWAAAXAwMAMAAAAAAAAAJXS4Gh1Y8lfmc0Nc5gM2VEmBGEr3uw+sK5ShtkCUAJfy0EY1IwLZlECQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9In5HoasvUBAf9DSIAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9In5HoatwUBAf\/TQ+AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2042{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9In5HoatwUBgf\/XLVAAAXAwMAOOAIO32NJww8qoe4GBb90N7c3iIceezGRqmB+1NBpXZjp0HfNdIoA6V82Wnr3w5qQAt+MJTiB9qI","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IrtHoaulUBAf\/jPLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2041{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9IrtHobIZUBAf9C1hAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9IrtHobIZUBggAOsBAAAXAwMAMOAIO32NJww99RC10RCsxKLp\/zT9AK0yfs+6OarG8olFpyiczToTWs3w5y7JaSLQaw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0392{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9IvBHobIZUBggAEZlAAAXAwMAOOAIO32NJww+ddq+83Ibf03PsAkYSTiewdGIN2hpqz1QXU16T9lc5xru2vUxh+FAUH7PKCAhgBn\/","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9Iy1HobcSUBggAEteAAAXAwMAMOAIO32NJww\/4+S8mB1qOCCwECnVe4Kl1F4fIHdvGV9\/Mx6jsDyFr4DrD1c4oHqymQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHobiNUBAf9CZGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHob8BUBAfzB\/6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHocV1UBAf9BleAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jakAAfwYmMcCoAo6sEAK5DT3NDkehy+n5vSF6UBj2BhEpAAAXAwMAMAAAAAAAAAJdNrG\/ZxhgJBF1iT+hHiNHRMftbMCfW1CvN0s+lDw8f\/wg\/RJFhMf3jg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHocvpUBAf9BLqAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I2JHocweUBAf\/hKrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0384{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9I2JHocweUBggABW2AAAXAwMAMOAIO32NJwxAhKby\/A2cc+93tOJRLkHDCpXdm\/LMFHVugXo8yVDw0ImN33Wjb8\/y3w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFja0AAfwYhbMCoAo6sEAK5DT3NDkehzB75vSF6UBD2BtNoAAAXAwMGbwAAAAAAAAJeQZnGD\/kk\/QbYoPz2M8h6iQ9sbNcWMCOtdb7+g0z+GIM3gu+Cje6ZXz5bo4Wv18VFjiGZlZGfQe9zss8ahzSRoTXNfrpwBHalXwauOT9Ne\/cme2q+A5gCEFRKN1ZjdTLl4qIaLQxzQZhtWXrfZmul6116lCSCsOYkS2oPYskrJDgDQty1UYHmoFg3bPWCpnwCGFY9PwCMUWIaDM0Y5ZlVkru7Tp6CrczM3bm4hDtK4CybLGrv5waao5b6CBff0JAzXxA9Z+Qtue\/9Fx5ql9s7okUlh8oz1A9cp2KjAFKqAc7wUKHYmU3hqxTPBpODexQSqrulBUW8yd6F1GfxCPghM9hAoMLz94miGeC57VFxfne4H7dwN\/PNocs1602gho397IouUJhALLlIWQM0SKB9MrevBLjiaEr2+HS6\/10dmm1DpQKBXzAk0a3xntLz42RCSqohaA8Ykdx\/R1Cw2Dn9\/hyCJWhx2V7AxZc4cxjikcszq3zSsNS8Rhyq4FyRlkitRZCjBgfxP8sCnef2UiAMP\/IyvCJ3zZhO\/a0gmCZwHzxSAzfR6b6yP+EJJkZ9VkL4jhhf8vx09RmiUeyxeBlWVj2NqTb9JzbmeCqSCHpcDgwHmLKnkVq3lJqLWSgQ9SFYm30zrIZmD8tERFtp+LT07ADFuMcOzMcm52zvh+SgG4aVG8GNpF2uJFG5p2RMEAJvLmrjKXB3cQaeHF\/LLZk4oGDI6Ud6lazODZmZ6w9OPoGOt+G+TJH0BD2TBNG9qnMqhM3dsgPY5FsbsBmmpdKKW4UIBrBIgTcdOzSX7EubuGUZS\/n\/YFrl4su8x\/VuldO8XCOJohpMGhgEST\/gvJ0BUxMpOTVocYUCME6kygnX6NbiH1AQUSRsyGGoFBaiYvYH9F5\/EQqmw7pVs5klt12xlRWDB6lafue\/CwBwRdK7FgAAfQFvx0sHoZZGaG7N92FjJp05IjM19vJnw3yJb2FB4pC4v7QgltJ4bS60GKbIaMrc9lwQ700OfsGIf7QY\/tr0i2JPgJj0u0wPusqi2TvPkaR4sIIFmxMuaEM5HY6Ic6HlBIDAKhNHMKLU6pCzyssIOGa4Y\/wxmP1TI3V2yXj4B55dDY9OM9ZLQp9XQ0fFE9X8KIHhq6MoUDJik0JqWtI3oXgxM7R0\/PXTm9soOCFiNVcKPgOyFOf4jsT+GKqR50C8vbsK7giArKkt1n\/csORgffC71zMGH9c1a6QuSlnXhYEg0z0ne6aTejJRLUqYoTdZxOmGh5MK66Tu0fBmEWKR0a2\/aoDN+70vLRy5PPUMZur+m32QvI5kW2RY8uVd15dL4Bm+7k3ejZXrH6Q6jKnHoh5wGldqXLNWmqm4oIOV1mZDZhRNZ37FMnh+9gsox8xMfjhqa5fjoKxwx5a115szKWBbLMIaMFDsvKxmkB77BU4dH\/EATnc0ttogrripRqV6Fu3ShTyuTxjv+V2bPX+cxVrw6z+\/HBCgBBKqMVo\/eha8qcJwguwHBwvfU8x5WaG2UwSekEC2Qc+chahAAYiz\/UHXqA3vxm2MPwXrlNtbY95xqHk\/bC8JKU4LdhInwRAdzzvDz9atJvcr+w7UAvsbb\/WQ61qaFoER+aq4OrIkFe2zrkTOEg\/ywNKqcodRGSxReWcNmLETyR9VoFoKScMBh\/iP30F8EIfTTQH3","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHodKSUBAf9AwMAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjbUAAfwYmY8CoAo6sEAK5DT3NDkeh0pL5vSIMUBD1dDgWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjbkAAfwYmYsCoAo6sEAK5DT3NDkeh0pL5vSJ+UBD6ADMYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjb0AAfwYmYcCoAo6sEAK5DT3NDkeh0pL5vSLwUBD5jjMYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjcEAAfwYmYMCoAo6sEAK5DT3NDkeh0pL5vSNiUBD5HDMYAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jcUAAfwYmKsCoAo6sEAK5DT3NDkeh0pL5vSOXUBj458YkAAAXAwMAMAAAAAAAAAJfTH\/gBWPkstnuD7B3rawRDU81cPlsTVTfAS5bnS7SGERSQQZKchkgXQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHodLHUBAf\/gvNAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHodk7UBAf9AVjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHod+vUBAf9P7uAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2030{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoeYjUBAf9Ph6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoeyXUBAf9PIGAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGVjekAAfwYmGcCoAo6sEAK5DT3NDkeh7Jf5vSOXUBj453DTAAAXAwMAOAAAAAAAAAJkdTSaiQGnZszD6PIF9WmTACpfw2xlWcY7YvMsS2poZ60cohQlooDujaKmQIAEfxo2","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoezUUBAf\/vG\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0383{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1je0AAfwYmIMCoAo6sEAK5DT3NDkeh7NT5vSOXUBj45\/8\/AAAXAwMAMAAAAAAAAAJltZ7rlwNoSjnRE+vj1SmLpR4VzBhS6nwnpexnYKj1ogXlLy6h0ZNP3g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I5dHoe0JUBAf\/vGKAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9I5dHoe0JUBggAHtlAAAXAwMAMOAIO32NJwxB9bdlU7kb9W6kJUGhZP4hL8FcuwCcZuAh0DtFQw\/OP+gdP83QWaQV4w==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHofN9UBAf9OrrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0818{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHofnxUBAf9OR3AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2045{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHogBlUBAf9N4DAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jgkAAfwYmGcCoAo6sEAK5DT3NDkeiAGX5vSOXUBj45ynjAAAXAwMAMAAAAAAAAAJprnUCZvrfqYYhvPhxhPfTiNUJ+51gK\/JICW40FkawqlE816G+xIJifA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHogCaUBAf\/t3EAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jg0AAfwYmGMCoAo6sEAK5DT3NDkeiAJr5vSOXUBj454PIAAAXAwMAMAAAAAAAAAJqaWfy6W0mDmUtytY9nkszJ2dbxS3YxqIQJz5MUUhkV5AesqO7NsijWg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9I8xHogDPUBAf\/t2PAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9I8xHogDPUBggAHnsAAAXAwMAOOAIO32NJwxCa4xVV8Mgo4FDgVwXcwETWrEZBfa1hq+rBCeD9xL3rx1fh8eQAcqNrjrJpRFEWBVu","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2031{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JAlHogdDUBAf9NboAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JAlHog23UBAfzNCcAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jiEAAfwYmE8CoAo6sEAK5DT3NDkeiDbf5vSOXUBj459ljAAAXAwMAMAAAAAAAAAJtSQ+SnC+gd\/L08taXEejYWhEfWSovle5ehIdVJO7jnsa+Y9MewjPQEA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JAlHog3sUBAf\/tA1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JAlHog3sUBggAPc9AAAXAwMAMOAIO32NJwxDG1AGMY7DRdUoq7OsYUPwEJc28tOC43y7bEIIJdBEopcpOkyM1s0fVg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5HohRgUBAf9MmWAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2039{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFji0AAfwYhTMCoAo6sEAK5DT3NDkeiFGD5vSOXUBD455zIAAAXAwMGbwAAAAAAAAJvKl8K0lsdtIqAbJ08L8wtSDMl5efy5w1UqkgsLQWGsbYpdixU2fVlABvu3JaSlLVubLEhEqLqc6fKJgKyss8ax84j\/FNcZN2Dsw1snQsrfU4lXhGAGg1VvDNsiRL+u0Jf6WgV5a7H2F0cZDlVMkhRLZhwdGt7arvQsYO21lZEHfZLzfiyWT32+Sdmd53obNgNW4iz4O8xkNLmQRUVkk3S23MPM6YU\/y20Bp\/Izz37lfQfrcsj9BU+hNsy0zY1YNpf8B3uiQAsYaw4cieT3dC\/2zfHnmmHkvED6tJsx1ktQ+qtMdDVdUqBnceSXTYmdZn8cp5reAi7JA904v3BolN\/Bm5GkC0bxHH1Zsqr6fH32HuLwI3jR79Vdg9cu27VOnyQlCY7dsTkhAM4SILFNnsBVIJ1TAiYJJcKjFbSKM1fgP2PJ8oH+lsBHQqSbP5lnMwtYeu1c\/32V9neAyAx98zn1q61u7ru3bFTLmGnOAdX58crH\/6HAGgttuaC8VYHHpj6Wmtm2DoAD7xbjVcmEhk85RWX0REXFOowzln2AZsS6dl5+rJTcTJ2o2hO7hUSsWG8iRJ3+t633qKGJk901bwsrlBjWiDUWT1gXGoKoy2hsEI7XJKwhJHIoIvUIxby4YVUnGLFM8fUdBnLMrp1dcsI0mPUvmoo8We6SCODzO1Q3ykMqSWzS+INoVxpZvYxvC66LC3MxHRv\/uKz05tAv5b1kz0cwcf8DWbafECtUBsaZeHYIxYGlER\/GnPFzICHpG+MTUSJD9KY9FMIUNi3saJQsUIT\/biF0Hh5g\/lobk2KoI3LrKZKYWtPlI2mwvGrwmqG6d9eHVSwYhIJpm7PY3Y51AJpISPeIz2\/U5CbiP\/axkDvbMbwnb0BGZehpKarTatUYlPzE205j8bAn0lSWl1tBtczrmw\/QQzUSf0fna0Jv6GhopLmwSn6L5ZNvmqJ+Vjm8O75nQqM3daK+p0V2PScTy\/f3b0egrwQFwp4OkpAjTjn+9sIFxui77lY5SfQP9N+nzD0WMI3X0+\/NydT3Z01NhxpJ1Vu4OZfkV7xKQ\/yOfISU4T565zHobKfDy6uq3CvzvIBfkSvtA0jULN+AusfwA9tI+6JqaJZI4sMMScHE1\/4vu3frnhdQ5udP5PP6ry7m2VB7silo\/0bPoWTVi3SRKfq6qYm8SxgTHlQIhaaMM+TfSy0DP2yfbbBLeQeThZ4J1jOoDud0DinGWLnZwKp5yqhDkEqeaadTQLG75tWuKv+nHqz5VQEAXAT0W2qc3qRmWkDEQomwmX6IoqvC\/VpK31TTZhldoNvTvgB1UpBzhFnK58Gw8y9FLCKDj+gVeDxkyVPXXmw+Wvy0Kxl6k\/hFiEn30QDbkiLogRScaApCdpU3YF3X403C\/q0M\/iXWuw1ngR0zCDbfx\/iAe1WPcXC\/qR4gTmDreqNjObCk90drsuTIGFda88l9ze2Eyd2w1xU\/oiFLdP3yUQzUFq1tOs3wgNF0C02Jxm2T\/CbevvNTpw2LZl8JH09dkQz9j5nzUoRvj5UAJttSo3KBcbZ6dKx9Zt2OSI71V1o5T\/9eau\/KoYqTcQDq11iV6\/ZTwybmYpF4OFVnfhmcgXsEgr7sNRfA+TShm3KxbNADpY2qH8ZOoiFtXhbTNn0ZyPy4H6WoNtTXbBOF4lBV9mo6yiN","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5HohrUUBAf9MMiAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2027{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0820{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5HoiFIUBAf9LyuAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjj0AAfwYhSMCoAo6sEAK5DT3NDkeiIUj5vSOXUBD45+HmAAAXAwMGbwAAAAAAAAJxm7FP49KfXn2gLT1RZDGeqILUbLQeWkd4h83iUmsGszYGzLh1rSu8LW6J9PAkkHwd29j8HnvTVr+2Fl2gAq9BxAKPP9CjT1r5zGS5W8mmdc95E5ouOSW\/ErDWgp6sHIBkIK4BNorJ\/6BQTI12ionsixcuhAmmTag6PY13m5bQBq1xV1Eilgu9fHxarAVWSy+B+AdSVfp9LDmhuS445T\/SlmKtTZGzE\/kLKHDeFSqBWasyV87tUguevJOmA7XbhZEZekmDBOwH37RQ9CfBV2fdc+5iZrgjXN9FK6LbXi9dpzP7qvtO4FNhEwmFrhfDD7iR3hy\/biTHe5sR7MdvNVbVRZcjgkzf5DBv9EWiNBdT0fRRfPKI4hB9SAmWq5HwlwmL61C4s1pSDgI8vsINMY3W1pSoyQEbJOR4C3jYa2KfhCkdFWZ8YGoDL1aW3PfvRyGwaYTa9Q7tyY5U\/PF8gQcnnaGdM4lWAglhve4R+aThA5Ri\/+CSwhmypC6ckQThXlLQgpAfZKfdhlTyCFNZxwvUmfPuVNgoQ88CtPwth6EaFtGFLMHQZoyHDWFyCM7Jad+WyY900vhuh7nBHAVU6d9mHLv8+LlR1ppjViceoOFXhYmJdJNxCtl4AUei5YYqzw5lEltFLAisWWTse0J43FFEsI0LgHnUC8DdHc4s+zA+dHKjpTb5QLs64GaHIfh3h\/\/qi7uyEqcIPV\/IdWme9KMyFou5zH01\/vm6NbTEw7i8Is2w4cFvBeJgzT7\/4kQRWUmr5+M2rVJSmRTD7kiaT7APLVYWhTZr6ect5kbKlNB6dBU3QNQrrw2J9L7Yf6F69In2Y\/FwhteTZr0qu0OUJN5nb+590jfkNTy4dlua6mWEnlZ7i9tV6vz0hh9hne8RkUhpRIA7Da5oRglhlxlkEJ1vmkfv27YE7SlMXOTOkAw4HMjlEbb7gjHeL0vsUCZN4GPyKZ2dQIw8NYrfX7tbZ9QLwBgaJNlQ0zOfbXlezmMuyZwyh0tro\/roxOUPB2omfI+fG81rM9eN3\/My2rGFyaH3m9bXiO5GP3fOHen5sXSQVR4P1eDgBqfUl9wC\/FfGMgjJySJaYRk\/r8ankk4kdevDnghV6rKXrt+0NwFztYWINjU3F8U0tgusy7FUycyMzW5oLo3yDJK\/TbkpwApsV+mInc+nD6QMknyN2eHf7R19rwnNkkDXnqxud3oVsTstskSNoGHsBSg91yUnKNALkjU1Fftvm6FKYfbvZI0r9dZ7g7JmRgFSVSCDbcMyag0peHgeWWyH+o9L1INQC\/ox3aUN8kys209PCnOYtclhUj6jGm\/i\/t\/qTmyXRgb+GyP6i0Eoq6YlC7Mag\/1\/U0t9EvmjIczRp2g3CAS8HYBUZaUTqJLhk0UHud6vncJrZ7qSELooa5eTwaeJqmqueMCKHJkboWMye7ay08Qq7FySxQqdrohzRxumW9n83WTlcFLZRVe9S72auSWb9QvI\/mSfdRIukZOKl8A2CSuf+5+rybm\/s6NSf+FuzR5e8kFI9lQASXcQmd0G21L1nwlTykXEftsaGw0TdZmAv+70U9QpAwjD8fSh07QnPkasdO2ODkX99S2p3\/jqRx5i6Ut3cW8DrflZeHnZmELH45\/RzhEYT32+3nPQxunXCEQfGIoi3MyTuiul68DTMdsmHqdjUwcF","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoie8UBAf9LY6AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2029{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0829{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoi4wUBAf9K\/GAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jk0AAfwYmCMCoAo6sEAK5DT3NDkeiLjD5vSOXUBj458ujAAAXAwMAMAAAAAAAAAJzZGlQJbmpfWfq1aZAKUAaQA\/f4+c3JID2pfpEg79VbK4cCD5VdjZAIA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jlEAAfwYmB8CoAo6sEAK5DT3NDkeiLmX5vSOXUBj45\/F8AAAXAwMAMAAAAAAAAAJ0zK+l5HTqe21cqy288f0lv2Selx3tBd+gQ3GjVlqwYQTgh7LlSEs5fg==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoi5lUBAf\/q+HAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jlUAAfwYmBsCoAo6sEAK5DT3NDkeiLpr5vSOXUBj45\/MDAAAXAwMAMAAAAAAAAAJ1Q+e7sAru42hRcKfaDJyzXBuscMRQu7Ag2qw3HLLhNcXDPje7F4eHtA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JD5Hoi6aUBAf\/q9SAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9JD5Hoi6aUBggAPv2AAAXAwMAOOAIO32NJwxEMbax5s20wkTaoYINK5zH7WAYpGNHPzfa1xiXkTLbPj1BK0+L9x+zVDcx3TR32G3d","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2033{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0825{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjl0AAfwYkvsCoAo6sEAK5DT3NDkeiM8j5vSOXUBj452adAAB6QuyEhK53N4F\/naBzkTNIIk9lvUiaSmkqiZf6U6LtTyrkGUYGSs0XxBTNURZcURNngPT+W6gw4ndKFkPoygM96WCeFops83\/UOoCvb0ddoDqRdJ\/pye62NvqgNlUZ6GUOEhT8eM7c2huNU2VW\/Jj3BoZa1Yf0o2LMkevUU1jIRUcT\/SXtIO7I3ZndFbu5SOGkbgrmhV1oqzdMPETGmwB548ru65QNvJt\/6EpQS+9AzboFaoB\/K\/nqNk3HWjCyBug0V\/QMLP994MiQsrCp6Pcd6GI2co9LaFt2DdMWc9FXCqDX0idymIjBmiZq2xisBTRvv0uMF\/ToGUFPPddsy6cx5twPF7uXiJXn8KEbsW5cXvXJvGVBtLo+octZ0g4I4j6WjYNveZd63PupQ9F5LGaOrcAplRkeRUJDwQ67nxl4avmjkwzc7GJOBxCG3IV+Yg+mDXyA5xPRaXsGMSNWbu10WVhrfT6CLoQpCM+LqC8iIPMS32RaT5IBPtd+","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JHtHoi7PUBAf\/q7gAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JHtHoi7PUBggAGYIAAAXAwMAMOAIO32NJwxFrJuWM0uzTj7aWcMFB\/ACETyH0cQy6gLou5sCS8aPczBjvRfZVXZQGA==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2028{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjmEAAfwYhP8CoAo6sEAK5DT3NDkeiNUP5vSOXUBD453NYAAAXAwMGbwAAAAAAAAJ3oSyf2P09GGFp2Iu+RWwNQ1qX0TuUIH3s2l5IsdQd6OrxTBr48Nqwf0FLXKNvOfEoyq6CKDj1Z+LrQOQf6Euap\/4qKU7pBIYcftP1tPJ85zUkOyDAdXroMa5sMAIf57nlmk+z1HLbLwykAJVU+EAx7oHNMk\/BEQguM+D3gyc7NZZMzr+Ro4ZqCrCFot+z8poKtWX2YcHPWmjGw7lHF11iu2BWBYDLo4F2Ml2a4gk49FGNZAA2kfJePSUqDCLdCCMv4RF2n\/K1LwYsDhTzucsEa6\/wavlkNJjNNI+qPvAIkJAigaF+z5iVQsDoxvLX335dPQk0UCB57B1wQ3hCJfkPtyklsKrmY2vDtjYbUgkVZJ6eYmKNQemWl0UZ8+gZgR7Tr1IOSlLkbw7dByUzSRjEFBJuTwuR0rQ8t6zcp01s\/98Q0XAaY9F5IIEkvHzYdEmXsv\/aoSgRJa1gV0TzyZ7cQ3fUyt4v3Ll0fXLCCyD1mrwC+2zXR+w3qaaJ\/ENFMvV0et0uEd+DAOGA64\/jsqqtqsKwqMaTdjiXa412ZqVMSlWjANLWYRZaSB3zS4pW0YKshQiIZl\/2xPGk\/mzNbxNr4gGB1JnQLr1dN49IptiaijCqfG7HuqCYdA3d+Ra13ebkmUP7e5GfpU9CnU9QLHrKhKNznudE9DTFXsSDhd7EQpLJJSi2myb3Y2Gb4sVXQLCGcLogaJbc2MC4azhU1iWonQ4kBdLdbUHm5CVdoI1mk83UfVA1Fd3y79Xl4L4PY9Jlgta\/DyIQqPeXDEXTby45xyvz9uYahzgsPEgeI8sYKWBGAzOrp66Zv0kgHtYIGmxah7JmFkgIvLtZQBiP7XKs6eNgYbp1KfNdsx6qgaO3xXwN\/LLl3au1ZorlagdrblSRPMoKIPh174zfWVx1Vi8WiprCt9WDvjrAnQEQ3oBxLzvYmGsOUZwIbX5Y1lQuPhl2hFFS4AXQHi57plyWP6MuX2HEuX4tmNUHmEp5CufM7yaT\/cwu7kaKtyFpE5fCBDMEEXFs0bLSO9nPXjzE1bfTiS4uWOoWrO2h8IYyOP4OQEnpiATIASV3lWW8Zk2sRJ6FsaxPtpP0BkSUIQD+rZ2eskjZ8vWuAOdlHRfM0hlBofTWl\/iL7BoQabllX7JLz6UcYZsYyI0WENiGdb3qLLIUkKKFER0x25iQkX047mEXlFhnCWthp+gX\/SwyTSf\/Rg53MZV93lUXWDbWVUowUuKjw83FQvHNXIYsH8F92fV01mLeN76k94B51Tk9alWVNtl8ndCoBA2fUT7mNmBYoaNlp8lkAcOK5iOsIh7m9AtZpf4HtLBXhd5efNjS8y5YuWfKPYpZWDNfDRWfH6BKqKoejmbpgU2FAFncwjPTm\/L\/O8Jz0yFMPE6xJGXUMvbS+xALBvUFrtKorjqTooinjn0rRSsYt+rAw89OFmqRJ3ck3AASMeBK8VzEB5Aw17kDHzH78IqXSk2fT4VZGRVdQc9tDy4tow40Pn0Ow1YsKluTaLJYyG24jMG02Xpv0rdGRfs8+htFsexDWjVGhOEKdxMD2DO3Pijx25p1SpeYs27lyhawxq84fdhy7a5GrJb21L54mjbVXmCqr5XWINwf1W8SOMvfXY\/4IJXDEqNtIukCxMNyTlhVTuQrSyIWAnyuO8iWZmr5TWk4SuWle0hd","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHojVDUBAf9KhBAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHoju3UBAfzKH1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjm0AAfwYkusCoAo6sEAK5DT3NDkeiQLD5vSOXUBj45w09AAC+mPXIzKiN7nEDS7zgL+sS0j2jdMBxl1ivtqup6a2gONQt9P3N4MH9HFMoIsx9wymNgiaZPG4vOiiWLfwVJYkwoL2tVyBu+pSmrBBR2v5TzvAJCV7baNPhMzmgmeRjUF9nhySIy3JDCDlFHCcPOW6Si2JHLJulMyvaT6WUHvYW8RWoj8j0OMk+rsZqUN1vFwVjzJP0K1QjbdglJ0d1g5YJQLt0dP\/5L0YY+NOaXf8+RHXtnyEXJ0cdbrhLXn8VRSx4tMhE+pm44icAGtrSjYl8NxLDC4II\/+oMdTMCSJMFMRHyYc5tRi7b0tM4Td8Q4e4n+wDWVBlV1jJpNVd7I4XPdnuZprJA7F1Me\/UTcv6\/wfnI\/XSBJpBcGCXPeNwtsA0ZP4ylg9dnUCK\/qd6mOlZ6\/2U7gUgmqOCBq4kREuQ8n5anT6\/kipAflzYdJKdyK58dhflKQvrpq+GwmrwIarbnjlguXwMByeE3ChBaE97cStsaaUsw5Z7fB1zT","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHokIrUBAf9JtZAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0819{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHokifUBAf9JTlAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2049{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHok8TUBAf9I5xAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1joEAAfwYl+8CoAo6sEAK5DT3NDkeiTxP5vSOXUBj452eWAAAXAwMAMAAAAAAAAAJ7LVF1JIRrsoVGdBwtOVxTCBlRAZD87BEVIMhBZ2Rk7qFlZm+Ru6KGaQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JLBHok9IUBAf\/o4yAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2021{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjoUAAfwYhNsCoAo6sEAK5DT3NDkeiT0j5vSOXUBD45zQsAAAXAwMGbwAAAAAAAAJ8UqWjLqb5prgUMe+lH8C89bC4brY3WUdQsI4YQR8dhmqG1jjOR6a20xhe9cFxcO4zoGfew08CCbHO5JGi33tQnO8lf8oGcLhLoG3smWoHtBDevrMAB2n\/Am0fTMoZBGDBK45j17NzLtFo+pOzShB4tRu24Az+NMMyS1cLmzpMd0\/xQjLWgkrNTOTwVzcJQXKagpHeorE6H6bkk7qUwaEl6Z0C\/sLzCE7bkTcuWAO6pyE71xeJSChag+0L69MNT74fA7Bg4wtQN5G8vZ6FtFRIWkIkm\/PkHMRJrMrifupxHtOGGWRpu4e7fXjj5c9zQE3bivh1yIFGdn99IzRTHiNmduiVhph26ERYA4IWsTZBsClhOeA7YG4xVmo4JeJJLeZkO0wj7exJplqvFAb2lNa9Gyp4wD\/urX50CNRqiLoR7ybNBxvyaUjms+ILtkeRQp30ma6kEmcQyDEj3Xoof7scvvvDkeVGse\/5RLrmMV2EG8hHI6An6ry0XARIBX96SAupsAT2WX7WiHIA2UgS1nRhLaB7aUPJplnIAe5R5nzjFcf1BXBuzOelLahs2EHEOYFFUyANFsAeHzQhTr9MnJp7nfom0e94D5cXca4ICKZl6HD5YS2v8PETASEURLDT5HyLFSc3wRgGxdr0EIwJgoR0yyv3UNI+d\/o267pvKjyLL4fAGy+Zetb1HgWclOlnNqEG82rNTvLWdFnD1Z3QdcdizxACtnEihH+VQKVJbQxQlUg\/V9vkzdS1R6uO8Mi\/6igS4fXErK3pAWP1ogHC10VRjkZjt+M2PqLmScuoZRQanrMdxAS26Nsu3QeYebvYsElESwek+XrcAzpCNML5VSml+Qiaw51g0ZtkDFFfDUdGGILBcsJqXp99XKbFn1BmXVXtYv9guYVMohVNqWkFAGflzL0fHo7Of3lVcanQxr9tPmmLPYYZURltaKTDmRe3WuWFtsl6kU9UvbewTnXd8XGdy5p8X8LbWuoIa0Rt5Z1UMQOzPf9aB7bJwetL4gEOsWlYvGtgWQrgDCtFqLXP1oMR1JwoNZ5HFhv6DOpK6SlWDqw9whRYcITdZAPtEy8tXeVOZA4rSNIX6uke2xOZStLQNTqvjfBwVDy6aSf+fkeD77Ut5Ubn\/IfNxyhuualL3lWAgSa8F+ryEAHc8HeugQP9FRaqqgJnWKVqGgyHqBotnf\/F9urZKbXCNKZoXm5bYp6CIPNNuPk5VZyZTmXZrQSQ3gPwyu7AmW37fMNbBux9J+RPxgicJQNULapsP33s5nNnrujT0zaF9hNNVbcll8HkpVw0klMvGzLBc9zWSCAOGK65tqCWpSLsTPlpyEDr+Uf5lYEGNZdgTeCYWEhQa1RetkBCXB1BACkN8dzx+fBDIe9Pd9HkH4MmcCQkkm2lmD3ZHdLAYdjS9q8Sq72wed8dfoqILYDZWEyQNWU6hV8Ov9R7p4lgTdwzHVVcMqEHMIJ9GyFPdajmTvV3GFUexxr+f0yVvmOn+F4\/rMnlOR66RSNe+yLr4f7Fj++u+LIKDXiHrZmRL1lI1euaWd1k7EXim7iBMCsHCilFbf2otJI7NXStm1ayHmeQvlYDw3g6DvgHnOIPTzUb+7pp4Cf+ZQZ97lJ1WQyd5exu9jz61qB3UMRV4XK7gyZKfDukrjfqM33DJ6qKOJkBpMkxFydD","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0828{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JLBHok9IUBggAHMwAAAXAwMAMOAIO32NJwxG8m6fC2fN7slPjN6OKiapw4odLPEyNyg2vlHYzqXgZNld9FPM9AjHpQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHolW8UBAf9IeTAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjo0AAfwYhNMCoAo6sEAK5DT3NDkeiVbz5vSOXUBD45zxcAAAXAwMGbwAAAAAAAAJ90ji4c33TCqtWGA5OxXVaBporu3Oz+MLkbtiCH+KnfM59SNJVSsrNC0+A0EhH3IeMa89LGlwdj7R5Zzuazk\/\/NNKVvrz1rRocOuqatWdiwU9C2\/wbxnsr97C9cDViIbMXU9J2bc5yn1jET60oLlTb0UU7IA9pFN64VQZCAczFbiiCUWANMZbUu743WYsvQ6sH0xGEFVFZhgQA82WW52B8\/c\/zF3WAqYVm9zZ0pMYAOKEF7RD79Bg0AF50PJD4DWjzkl2hNsGmMzGwXV64D+x1gpSn3FxyWkJMBbnGzTrjsexS32CgWI2NRaEFTxFjEDP90xuBMYck36czfBFDJWrEEUwb9asUxSXXw91zGvDFd4WKcJFtP\/GCmu7hY6b12HXgBViDEdbVhGY3OsaeA28kI\/Y5zRSdQzz5fuSo1NqJ+9ZS0AuJm\/HSpdyWH3A1ffLSG9j5fMzrln9qUZ7HbkzBY581X0EWpethBOxRFaTItr3PLCyARrTyUcC3f5HFPe4OvVKiLJqZpFuQDVnasFfTmc0v0YVDlg1sQO33VVH4Ep9NMLfjRuVIqetcQRJTg\/IhhqpHbcA0goFr\/NUF9sXeoLUaOYl2FKgXYM37yGn7YRsAriF4FEQEYN\/0reaFdAKiiJU0mHCihPskWwrR1az6xlBq627usA5c3lWXBWjhmN7rX++j1F7xuLT4xaUCvCFSstZGrj5CU1\/Pmb4h5NBAw8VxsyTF6IWf7wtoGWOwP826ZNuBmFksNaijdZKlEhL60iqq2KcIQi+d50wTV0a0jKt+t0QZMs0uLw5NomF0yWrlDz\/4FPfsf1NpoDt4lmoqdwLGZdnrcfWg9SAKnkrIPCh\/I\/C1fXp7EAqglY5T3lSGAoqrUUhoqx9rYXC6GiA17qxFIW663qRJfJyaNgAxGOgssHI5C\/qMzSuxcd+62mjLJcMYwc7tTWDX5uu2jVpSEjEMazceKcIKmNFfB8MAdru9qUQ7vqVNutOf2+xC0PIOMHlyb6kuqMz6WAObjMwYS7RKSOLQRRdQHn8ROg37EyJBdWbyKewbnmk5ODu8LDaNtu0FkZUtrfiSdr+fFNHVhfGtiIY4i8eCp\/2NhUDkvlPdcv+Ie7CxQ1zDiHUWS0SAiwvq99n+Im\/gmxlrInq3xhGW1IsZUiNkhyWSpBQjBwvHXvItioknwso\/UHbvaoj+Igzy6felTRBpm1c1qpHp+M8k\/zHLmHGg9DqjKcopd7LCWI5P1ALW8z4MnmaDezeBUZk0Praumb4jsq73lf8JE\/rsbs3n9KyUUQQBMBbkg9IqCYh\/IC6BOyWdUImHUyhfjnjqHOhx8Q8cDjebggU1Wv1C163nF8ME62ZdNGrusQgjrXWz1614G\/Qviz69BEJoBBMetBKNkTSkHq4jqL0mvOidpJAKtFY+0MIqTy3N8k61Xj5Z42Qqck4uZQQ8O8qqhcTgXBWhcDSAS7qSm9VCFFStgFjYF7YkktZdyw9i7AUm1B1RhtZLzWYZ6en1epqm9DUpJbOCJ8HyD\/RqzL7eW6WU4d4EbmG6KcAlHIkoOH\/HMoHFpUVLzmH62x7lcquDqxMNQdLpmbC\/AbHhAGcoojiZtgHe4rSCbp3ds7BOyRt5mOg+PrSVpUTPrfmoXkGvh80NwMy+c0FAOH4FXa\/vqhu9PRnqzzsWKCzc","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHolwwUBAf9IEfAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2043{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0824{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjpkAAfwYkr8CoAo6sEAK5DT3NDkeiYSn5vSOXUBj451sfAAASwDqnmbabC9a0CaKzyTd9PkmFa5gH0egrVLSFRXjq0O+CheFy0If5KVXUjHw3xJudcPJWmB2Splf\/XfgNoKA3j9fYvff+bzbLN2l65E13\/fwEEMlZGD7C2pYm1rwdYty0F9fJ7t\/qCi+y7AmxveOlJJ1k8y0MgUD1Vg9p2Yvye3+ITVm3hA5CYflkFqL70sdXtEOddTMpqoG93sjd94ARP1fkCMP659m5BttAky0Tm8fgQhRjTXQDRNQaFHWvPRhE7ZOAHjIW+FK01Tty9n\/NEK936ytbLzQAXoT3Q+OJhRmvmdI5oX3dwgmcAPRuPyrZJou7dICtKqoEBCa3mfYpAkGVuhRV72z3POijcOI1GObbx9pg8iKXzRXA\/cQFLDU1RWZxQ\/q9leqHXTo\/yjTrJa96EhWONO54CG0\/ZAAD0RBA\/nDH3wIqQs4rBFe4qtsK58nzWUCB358cG8DW6RGxVw6laIL5oSoGqRqe9nukJSOvKJAtWK4V8tmy","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHomKkUBAf9HqrAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jp0AAfwYl9MCoAo6sEAK5DT3NDkeiYqT5vSOXUBj451X8AAAXAwMAMAAAAAAAAAJ\/cZYe7QkghGDb8PEoFyqBHJ9ljArSgfl07YuOUrL3WP+0NQHsXNqw5g==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JOVHomLZUBAf8np4AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0391{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":105,"pkt":"AgAAAEUAAGUAAEAAQAbIk6wQArnAqAKOzQ4NPfm9JOVHomLZUBggAAXhAAAXAwMAOOAIO32NJwxHozMV8kK61vRHbNAIFEduZ3qjNuokjUw0Oj5Q2J0zhlNwqhgpCHNOeGahDW865b+T","pkt_caplen":105,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2036{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjqEAAfwYhL8CoAo6sEAK5DT3NDkeiYtn5vSPMUBD4spvxAAAXAwMGbwAAAAAAAAKA4dz8kwoFmzb8t7EWqaT1nGy9XAsIOZvjZpCdS\/Ce8vZsCuz8OtUehLFiwBAceeyMSu0KpZrwpJG3oyLuvvLqC2hr70KjiQTBtAvlFgqIrLTdiB1ntpycK7ISw3XSwmoVK8lfRPtmjSFJCNRPjGELA7HWNN03EJLxfRjNvvRlUu1L0j+cqpAx+ETBnw9P7qUNQLv2TkoDNoyUQO2EEr+aZ\/XToxFz\/RDCRG8yhaYjCnPNFpEpobygkfkjBeD2nAoC+9D7GSurSsu5JQQKUso2mWspz8Y929kQOVT+D3Rw\/+XvGWfi3dKTr9ydxUpibnBOhgh+bSFy+7BJofUEy8whgUAgoOx66B6dbWERNrJaAe+qmj+e9fAjT25yVGvaBuEBmTsbSEHBwe4rFPA9GWjcvyOkQirA3qfya7zWV6DW4j+ETWFPMmi\/\/shz7MTUZMpx6tzq5PEsI1aLvYaSRQsfvShhkPSWsOYzaFGCbyzmkFa\/hApCgBenlaoHyMghXsG1Yfy8RIdjLRsPc2lILaeYkrDe53WHhjMbAAnCnN4F8OojrcarxJdXN2JIGzB2PqRH2S9Mb0CY8P\/613RPQ98juLIKFz0UFUehzQXKdJ4K5hOy+SNlKnvMtGhdy8s2sMWMwgZ82xgwZHXW3GAovrjknKf1\/85kkr\/6D0o1\/9pWX3JmD8Qw7B6FqeL1vwyMaApYnlbx1RoKdzljaXbN1SuPNBix++Yw1Gu8Bg11BMGtwL+F+QG75UCa16c9yS1GAc7JcVKo11RVdvPUP4bYxiAbGeOZtFZNqlTBq4ZI6+t1HyiifnaKQw7tcXco1uxgSDmD1JF3JrbwoRMUjeH+9Nn+A\/\/JljUp522V1L0YoOphiZB43FSsPZyeuqYUBgwgu+AgM4ZVxGVKZ2xJfp\/gDy7F2O8w3x7chO\/hXthfvPqi816hpnbRbJwA8It8NCmuH3sG2sT+Ed8wqKMChTR\/WyPzs75nxQkjiq9X+RDBc7sgMoy348I6UTGa7lunm8oS8\/80qUtOFqKWh1\/VaL4DGShIIVh8RFEGuFXoLoN5jw1dAdo3n9m1vhZy4FLYIECrDa9dAo2ggrO0qMX8b3eo6k0RLoPKAmd2WzEDZS9ArJK+4JaFoUVWat+HGHBpOLbyOcdLHid1HGrT8tZe5uhwOGtNXGvixucR7ENpC\/1PUZheIpY0Lv1286Mg8Wqm5j\/j8iVhMZ3jLGtak1JRgrbKcYxh76yr59Fh3r4xe\/D3d9th1FAm7lsRWSDjm3BATyAaCAcx7UAJjQGYeZM4wLVMS4JJ5fH+sflWNiwkHLFuAvVW2j0QDAAb\/qTKvgnfXQ8Sgs2zNRsR1UpM4mkOOQzO87joMXl7CYMxp37RTQiUgxp0fhfH+Y8jIICDcn2PLWie7wLYI3M22P1IFO3Seep+SuNY1yEtoexWilYHJYaaRheUKu2sj2kToz\/v+8yV7gLgP2OFquQ9uQkMa9hAN\/jBQ1i9FBHqiN1xr5BAPoMbHPkj3h9gRNJr\/Mp7nFgnz9jsxtspCZV1qadpkg8Rdb+Pi7vVblPVk0CHRd1YuPsvYHYpATINPbkGB5GqUpVOeY226wjKIx3wNGGtFU7igOjcUzJuVdocgrR3wdt2ok\/CUXaYSD9Kq10a\/mSk+YtKmFKIQE+nVpHVxkv2gLrjI0Oc","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHomlNUBAf9HPFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2032{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHom\/BUBAf9G1RAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1jrEAAfwYl78CoAo6sEAK5DT3NDkeib8H5vSPMUBj4sqY0AAAXAwMAMAAAAAAAAAKCWe70Z7a+tpHKG7ikwVohaJo46lLik0gWAAd43y1Q5wEI4PZ4FZr+lw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHom\/2UBAf\/m0SAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjrkAAfwYkp8CoAo6sEAK5DT3NDkeidO\/5vSPMUBj4sn6NAAAkziGA8EoFUM52xx7b4YlVRirp3YtnvAlCr0QkaVhxy3Pgpaj\/eg+M8vXfbS11KsN6FTzuc\/BdNkeLU\/Y3bhFFSZrE2rDG5qU1+G9a6TGP2tj30kXqDJ53+M5bptm1LmK8zPzgeKrWjdFcWOL9Gw7ts+DC0f4kUtTS4YrasdfQ0GkjixzPpY2JUhzIMdLJ1qGouITBIp1C6OMv4vG4uXTXWmz6qxom+CW2ExZYgYydptgak8bionjMBBitm9wdHdFpeOfCo\/iFHD4k8lSv22YgQJE3QNwYsJw3IWHkxvLkFuZygJcqspdKr3vK7yukdR0EteMlY1f5e4VfmbEhZTBOLfjWiUKvKpxwxk5Nv3SZZGl5yP8XF30nVRc6JxFJgVYTDuY6VB8efl8qPczj\/EMapcYy0qu5TCDjbMA7t0s4WvGtKtGNDllBmv0BCIVWKLcezG6Rw9AJmKhNxV3ENHEy2uCRJLCU0FZnXLTdb0BJ0yUupGGVlVjeV05+","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JSJHonZqUBAfzGbQAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2044{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0382{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JSJHontjUBgf2NeYAAAXAwMAMOAIO32NJwxI9BuHou3GMbK5e63vRdlS\/dwBJoO0u0hAPbyHatUicSolasBL93e5rQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0821{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0311{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHonzeUBAf9F\/\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2040{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHooNSUBAf9FmLAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjs0AAfwYmHcCoAo6sEAK5DT3NDkeig1L5vSQ+UBD4QIJXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjtEAAfwYmHMCoAo6sEAK5DT3NDkeig1L5vSSwUBD3zoJXAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2037{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHoonGUBAfzFM\/AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0826{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHopA6UBAf9EyjAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF1juUAAfwYl4sCoAo6sEAK5DT3NDkeikDr5vSTlUBj3mdhUAAAXAwMAMAAAAAAAAAKID5NArMI+Mqw3U3CIfQMTylxkzvGil3JKbWQEU3NZmvqxhNO63gQ2bw==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JVdHopBvUBAf\/kxkAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0381{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":97,"pkt":"AgAAAEUAAF0AAEAAQAbIm6wQArnAqAKOzQ4NPfm9JVdHopBvUBggAKrdAAAXAwMAMOAIO32NJwxJ+UY8d7J0YfJN3UJCExcpC7cwTmDpdQwAivpdn6vaa9LryO3XV1lMsQ==","pkt_caplen":97,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2038{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"AgAAAEUABSFjukAAfwYhHcCoAo6sEAK5DT3NDkeikG\/5vSTlUBD3mQdYAAAXAwMGbwAAAAAAAAKJUzKnVV6DwSYzbMiDrYbDHYwqKgPJ7R18lw2uq3pfjLWwmlVRBLBMhSEbl7vnOqVt23ld1aJaw32+sMkyxnbc7O85v7P\/WxXyPe4eeWiHQJjxYUpa0DPllg69ojZk1TViygYWSZ\/oVJ3ilGY3IYZh+US+9zydojvudMQNcYpLTDMvVnHvr0dbyfti1gjeGa\/cTpzkF+mJ0\/1PEaTkYulZBPEESbCnjbHr77oQfnjPytmaMRZdR3VcluV0baMQNYFoiWLyDPc1lSPGTnEeVmoGhZ3S0yMLYqBcJNw+xOaN9Q2aeG\/B6fGRI9lJ+W0KDKXTLrNR9NysLisdRzRAcDhJ62SQF0SmNETKQvNdRWI0jO1TswowaqvF1zdZgVflfQkgmwaKsfGy7ZcCHDPP07t0nfWmop7HVlr8mg2FKa2spYBAghIfDsYbEr0LEhV\/+Z\/sv6mX417s9x8IGVWI3j6NUHVoP1+GTJ45zfwGDJWI2L+\/Ip\/xARNB7a6YSAHeHRU936jmIwjwOzxSZCWHibiPQgvk6Odndsvq78GTiQMQAhY6I8NRDsdhknE2joz52qF6bCKKiNP+WnEaTRoLkxArMwG4YplJ5Rz82aAnfKD\/r6XiQqebnSAdSAle0gvBO0FLGZfWLSVVsNEZdyZui65pt27DCgHNHJGf6kVHAoHM0wMFQfSQvMIcfVvWrGxcR7xQpv9QPXY\/pTSQiGg2Hd7klYGOwAUE7LlHYcAluZSYGIcGiDsU9cfet402sAVkLtFWjQlm\/fzzOJjWpR8JuEFMkF1jaN92nzF2F8HAO1QOMAAbLExy5iMlGmpVtkKjxrz+4HjGseAOsGI\/gahEg6Sv0OwoWxf11Jqm+POu0uotzSM\/LMRZ5Y0HJ\/Brnrwb24PJ7k8ptMcCmgKlvlqK10hokycZ+ag2ITg2Btpu8wqTLW1AcIEwUCJn+GIh9nfi2FNFAh9BlqEqUxKo1kLp2ruXGTKkRRTeUZ\/8pay7SfKOS9LHqiqNzfcC\/pk2pgzKlHHF14a7NY\/zCjCzm2mATwuIz+HK+deebVXFnFcRzXaNqXGX9vlJ8CxdCTE2NbJHNfhxafLxFn+1mUZZTws6Jbvlez\/RVGMUT6mliRCaizr1KuLjurfdQUwziAOJgGbAbGay3oDn\/xdkjcgmYG8QAzCFusgi4Nwcn\/RT87xZLRfA77pWp\/5uuQm7+roxoS1QLCd9pekjgRqCH3DbmuKq6kmgsOwvQg7BGkoguC9i6FkC2cvZp3UsndLUyJAjAcEv2SUYUXlVqw6dqwmlSu8kGah4TDNROKz8rMottdo5dAB021xQeAb8lnDupQ8Oq1ykIT1B6D2uTtmw61MjrRq2RdhQnmIScpy5X1K9dW5if0uS84n\/Lw+admxGDFFd2jQSFHH2WV8HSByXvKtHCJa045GVzwLoZC3jHak8RBEz0mMy+GZPkRIOShZ0TdYv\/AAcecG5Y35kv0ctovG7d0IbQGetp5YZPpsVBoMBNFgs69aOi3Lv3UEo7cjNnpbnZTvmZ\/Kvdk1lCMkYDuxo1F\/C8KXYaJfLKa6THnIsyerqMXSHKB5WpDbbhkPovykH41Gv1uXvpA+bcEB3vGrx\/exHV4ssSseIlH0s6REWWaSCjOn8o\/IAR24Vda8AeDBfF3CcNOwfPaZFrn5rICHTKGxb","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0823{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHopbjUBAf9EXFAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+2035{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1317,"pkt":"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","pkt_caplen":1317,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0822{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":423,"pkt":"AgAAAEUAAaNjvUAAfwYkmMCoAo6sEAK5DT3NDkeim9z5vSTlUBj3mewVAABDS3GftK5PjHQeGqNq1Zq9XR9XivcEWhbl1hep0etLgGOLc2TvLD+JPG1CFMtCNNMjMh3sW2PLMe4Th0bqeKtMNsTsUVLK0iiOuresvOLC9J6sURt6uAihWY1\/xWu+sDqPgWTsbCXCQvKTRL63zsRZFJ1LICXlmXLseS1Rv5ZdSIX5tGbsxImra8cNUySo99Q1smJo\/rWzSPkfN1zQi9S0tdtrvZ5RIZQPqgCvtEuz+GqriPkkWinxfW7w6OQ1y5PM6d\/KuaQm7q58jC9dW0IJ40kBexFyXFEQPJ9KVfKjcnEHE953cmhbNTVv5VPlCTtO781vqduMWY1FVafgMzABzdMP58rbHlmDVYOxo8AeYHEPf4cc\/Tg6\/7zHFHMrzyyUaIs+KCE6DT6KRNsDSBJ7gMNa0DQchwR\/ohCaLz7wrG+zyQ+fKN8g\/Cgb9Z7hss5kILq1ihYajNE9IezHxzIyXQyPYbkD27EDEBt6qHMwDeG1luLTK0eGb3m3","pkt_caplen":423,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHop1XUBAf9D9RAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+1679{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":1052,"pkt":"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","pkt_caplen":1052,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHoqFHUBAf4Dt1AAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0409{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":115,"pkt":"AgAAAEUAAG9jv0AAfwYlysCoAo6sEAK5DT3NDkeioUf5vSTlUBj3mdrkAAAXAwMAQgAAAAAAAAKMllVs\/tChDH9pb12MTbn\/ylDoiBpUIyQTTJsRLtATWZFWJepPR2l0H0nCSmdX+Y6z27X37q0iPVkmDw==","pkt_caplen":115,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0310{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JYxHoqGOUBAf\/TsRAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9JYxHoqGOUBggAGTRAAAXAwMAROAIO32NJwxK98h6VTiPdeDmNNWAWhGiBuLK6PiFrdm\/+wnn2OBGX7GlLb53cea2A2tWVh7q0NlxE5ZEviaHCWYxYkIt","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0408{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":117,"pkt":"AgAAAEUAAHEAAEAAQAbIh6wQArnAqAKOzQ4NPfm9JdVHoqGOUBggAG4bAAAXAwMAROAIO32NJwxLVqvvi4RJKDtRV8Azt3mRDyTCFOMrNWFPAWihFRNh1ctFMkulnqutTDUYDFHnx5IDi\/4UU70zcMJZKkJa","pkt_caplen":117,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjwEAAfwYmEMCoAo6sEAK5DT3NDkeioY75vSVXUBD3J2QbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207471,"pkt_len":44,"pkt":"AgAAAEUAAChjwUAAfwYmD8CoAo6sEAK5DT3NDkeioY75vSXVUBD2qWQbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":44,"pkt":"AgAAAEUAAChjwkAAfwYmDsCoAo6sEAK5DT3NDkeioY75vSYeUBD2YGQbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0353{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":76,"pkt":"AgAAAEUAAEgAAEAAQAbIsKwQArnAqAKOzQ4NPfm9Jh5HoqGOUBggAMAyAAAXAwMAG+AIO32NJwxMWYMhsBEzKmn6N54uQj9dGx66XA==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0354{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":76,"pkt":"AgAAAEUAAEgAAEAAQAbIsKwQArnAqAKOzQ4NPfm9Jj5HoqGOUBggACQ1AAAXAwMAG+AIO32NJwxN\/HeDAqHcP5vgnmlQoBbEZ9iFXw==","pkt_caplen":76,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0362{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":82,"pkt":"AgAAAEUAAE4AAEAAQAbIqqwQArnAqAKOzQ4NPfm9Jl5HoqGOUBggAMHvAAAXAwMAIeAIO32NJwxOlfQ2MZcD42PuuEbSqPqARND8KcU\/T1zYKg==","pkt_caplen":82,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAbI0KwQArnAqAKOzQ4NPfm9JoRHoqGOUBEgADoVAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":44,"pkt":"AgAAAEUAAChjw0AAfwYmDcCoAo6sEAK5DT3NDkeioY75vSZeUBD2IGQbAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":44,"pkt":"AgAAAEUAAChjxEAAfwYmDMCoAo6sEAK5DT3NDkeioY75vSaEUBQAAFoSAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0309{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","pkt_oversize":false,"pkt_ts":1559207472,"pkt_len":44,"pkt":"AgAAAEUAAChjxUAAfwYmC8CoAo6sEAK5DT3NDkeioY5HoqGOUAQAAJEzAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0192{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap","datalink":0,"header":33554432}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rdp.pcap"}
diff --git a/tests/result/nDPId_reddit.pcap.txt b/tests/result/nDPId_reddit.pcap.txt
new file mode 100644
index 000000000..4ace048a8
--- /dev/null
+++ b/tests/result/nDPId_reddit.pcap.txt
@@ -0,0 +1,1159 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1605291684451,"flow_last_seen":1605291684451,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp"}
+0435{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8UAAAAAoAL9IJAlAAACBAWgBAIICtTdYAcAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0498{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605291684451,"flow_last_seen":1605291684451,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp"}
+0435{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka2YUAAAAAoAL9INBoAAACBAWgBAIICtTdYAcAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605291684452,"flow_last_seen":1605291684452,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp"}
+0435{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiLjUAAAAAoAL9IMZSAAACBAWgBAIICql037gAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0436{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwh+EoHfGoBJXgJjYAAACBAV4AQMDAwQCCArC1zJs1N1gBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4Sgd8blpMIggBAB+xzRAAABAQgK1N1gIMLXMmw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1115{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0842{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1605291684451,"flow_last_seen":1605291684476,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605291684481,"flow_last_seen":1605291684481,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp"}
+0435{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7CxQAAAAAoAL9IHB8AAACBAWgBAIICql039UAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0436{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9DimtmGoBJXgOayAAACBAV4AQMDAwQCCArC1zJ11N1gBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0437{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL1mKYoi42oBJXgKSSAAACBAV4AQMDAwQCCArC1zJ1qXTfuA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka2YaCVBfRgBAB+2qiAAABAQgK1N1gKcLXMnU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiLjb7y9ZjgBAB+yiDAAABAQgKqXTf2cLXMnU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1117{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0843{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1605291684451,"flow_last_seen":1605291684485,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1118{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1605291684452,"flow_last_seen":1605291684486,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0438{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0uYRewsVoBJXgNkGAAACBAV4AQMDAwQCCArC1zKKqXTf1Q==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWkwiCEoHnLgBALMBF6AAABAQgKwtcyidTdYCA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2064{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0884{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1605291684451,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2069{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1104{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":586,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhQGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXOWky5CEoHnLgBgLMF\/CAAABAQgKwtcykNTdYCARp9Y1GkdrUAhVhcIw0EqIoQmCp6NJaNRfX73OnhFB2Jr7TAAtyqqxuLgc2arJFSQXxRmoSHfVkBjgDoEeWr6oJywHLeY2paZ+JwV0cOXGhZlfh92iIeQzRolyKzpZXgcwWNU6Yqfn\/UWEJq7kiTCu4Vh+0IhdwT5LOo718RMZj4xIKmcFKxTsnYmy1FBFRU2jC91Tif3G+CjNK0MFk8wVerUZkAWcFpngd1SaH1I3K2BPcwDQbwNSVXH890orGlUAUGb284YXic14pz4txZAy9L6n8Pq0Xfc4PSYN7wQUJDI1yLRfqERnT2mZCsQTzVdqRSgjOV0pnIaDds\/8jwTZuMneHy4Kd2\/9shu\/jYYSMLlNeygV0za3weB7oGmDk5vqv2EAnBPuJqfoTttsdHuTdOmRHRvvj1rvJMgVvomNBhmDhGKTT\/pj+wgBM00TLlhS17mFrqB7vck6x3+uuDabSxRBByyT9VCdVfUS3aO7zW4z52W\/2W7rU+a8ND\/VOkeObzZ+ylBrB+I0LUNN8huSB0\/dP5o4BPrCYsty5PlLxNbFD42FXVWqKKXQl4Bji7XU2UmAQyZTKAzTAcvB+S0SzIS781NoG1bOW8etMbVwpTBy6pDm2xgU2MncgCslvuK+4kxTQl+pKYcSKhL2SrCZfToE5w==","pkt_caplen":586,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUF9HimtuLgBALMF88AAABAQgKwtcyodTdYCk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7CxV06NLngBAB+1zSAAABAQgKqXTgG8LXMoo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpMbYgBAB9RWrAAABAQgK1N1ga8LXMpA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpMuQgBAB8hD2AAABAQgK1N1ga8LXMpA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpM2EgBAB7w8FAAABAQgK1N1ga8LXMpA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL1mOYojA7gBALMB0aAAABAQgKwtcyo6l039o=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1831{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1605291684452,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1842{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL2nuYojA7gBgLMFaKAAABAQgKwtcyqKl039plcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXQrSzGvAAAEAwBHMEUCIA4cEDk5PHlewpHzj26HOiQYpOqP2omD5+Ok3XvOGjvLAiEAscSe5jGq7+A1eA9CosURVXiFG10O2uG7a3d0exugn8YAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXQrSzHWAAAEAwBIMEYCIQCxbG96NckU2JDBIgJPBbdq8isaryVs6CFbEIVpmICYFgIhAK4\/cwv3QOvL6\/r1eBSuNjH8ea1wkWPPafYHa\/T2zS4cMA0GCSqGSIb3DQEBCwUAA4IBAQDJdKHctElcuqyCkmp8mpTUGkGnB3LVzx6AlsMpQm1P2E\/FO7nlknf9cCDmw9zsWs4Vwy0WyWm2VITQHFibHvPRL9Dqdq57g8bbFomQLOayWwM4ymsEk1sOwkg9GmGUttJoxtFhWMTaKNgiwa1KzMnOenD0aOCisNjqYwuAwjXNR4prj\/NaGsDOdAIquq\/5ysyZ9ZTflWiVnQbilOt4e\/blGzRhaSd4gTYdYkgV\/84UmKwjSekYiL2ioVV1mVoDRtSfMV9CdwjyekkC849Oi21tKfCnsyl+9Ipp3oESKGdNZ5966KOZhQo0yght\/ROeeRQR8c5vS0fKeKnkHGBz240cAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRqFDu1m5K+wgdlTvza\/P96","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1836{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvL3pOYojA7gBgLMM8PAAABAQgKwtcyqKl039qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMDgwMjAyNTFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQDR33xPAIHf0NQOujujRTcYAAGA8yMDIwMTEwODAyMDI1MVqgERgPMjAyMDExMTUwMTE3NTFaMA0GCSqGSIb3DQEBCwUAA4IBAQBY+1SnH0u3ho+Y8niHMzRj8wWXBoT45DsNzWXZsZidgbnEjA4\/L6gnKwvitI4d+SX6Al6xofYE","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1150{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":2,"flow_packet_id":8,"flow_first_seen":1605291684452,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
+1124{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":601,"pkt":"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","pkt_caplen":601,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0884{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1605291684451,"flow_last_seen":1605291684551,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"safebrowsing.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2073{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1108{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":587,"pkt":"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","pkt_caplen":587,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y9p7gBAB9SH3AAABAQgKqXTgG8LXMqg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y96TgBAB8x3hAAABAQgKqXTgG8LXMqg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+KrgBAB7RnPAAABAQgKqXTgG8LXMqg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+SugBAB6RfQAAABAQgKqXTgG8LXMqg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVByJgBAB9WN1AAABAQgK1N1ga8LXMqk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCFBgBAB8l7AAAABAQgK1N1ga8LXMqk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCM2gBAB71zOAAABAQgK1N1ga8LXMqk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1117{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0826{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1605291684481,"flow_last_seen":1605291684552,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0511{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgecvlpM2EgBgB9UkkAAABAQgK1N1gdMLXMpAUAwMAAQEXAwMANcqXWVSmzEyECPE8WpHXySUT8FrR0ganY2UOLc0YplHZnp5O+ckAO073diJltWHpbAIjMJ0I","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0512{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDERGAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka24uCVCM2gBgB9cE1AAABAQgK1N1gdsLXMqkUAwMAAQEXAwMANf\/NSaUukGHnTscXkQgZCZuAMgmA1XRF5gtJMX2dCABEH+DW4SffxztoT8vHs4Yz6EIwoYiC","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0552{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMDv7y+SugBgB9TMxAAABAQgKqXTgKcLXMqgWAwMAJRAAACEgb44jejT1SBb\/bvRTAPQylKfYT1DbYwYMDvmmfnJPbAUUAwMAAQEWAwMAKAAAAAAAAAAAL7fQQfxjOogXK9MM2ISbQ5Kw2RaljMRvG38yXhUWUus=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDERGACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnF4Bu+Ka28uCVCM2gBEB9Vx5AAABAQgK1N1gecLXMqk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gBBqZAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnFwBu4SgegvlpM2EgBgB9YyOAAABAQgK1N1gecLXMpAXAwMAVzM3BREzuuCAKO\/DzI7SDpnFJNGDllSoOywgOaHEmdtDtVTC9z08j2RIqDEJO\/C\/PWbEpz6ZeM0RXx7eo08wkjLvyJnEue8OdvoPD4Y33jWj3jEp6evn\/w==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iiMJj7y+SugBgB9SvNAAABAQgKqXTgKcLXMqgXAwMAXgAAAAAAAAABuLyVXtc7Den4BNy9hXTB79r9hslNhamiYbFRZL\/oA4QLXT\/0uRT0RJvuihB57ZtApvVZgbZJL1ET7hEkFq8jATpbeW0qU+JSm3DJX\/n6QCjC8L2+pdo=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+1544{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":910,"pkt":"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","pkt_caplen":910,"pkt_type":34525,"pkt_ipoffset":14}
+1291{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":724,"pkt":"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","pkt_caplen":724,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo0ucRew0agBALMFFEAAABAQgKwtcy3al04Bw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIzbimtvLgBALOFMGAAABAQgKwtcy3dTdYHY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbucXoJUIzbimtvMgBALOFMCAAABAQgKwtcy3dTdYHk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1831{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0882{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1605291684481,"flow_last_seen":1605291684592,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1842{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06Nb\/gBAB9VY9AAABAQgKqXTgRMLXMt8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06NsXgBAB7VItAAABAQgKqXTgRMLXMt8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1837{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1151{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":3,"flow_packet_id":10,"flow_first_seen":1605291684481,"flow_last_seen":1605291684593,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
+1125{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":601,"pkt":"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","pkt_caplen":601,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06N8vgBAB5U4cAAABAQgKqXTgRcLXMt8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06OEygBAB4UwdAAABAQgKqXTgRcLXMt8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gB3LfAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PABuxF7DRp06OEygBgB9U4+AAABAQgKqXTgR8LXMt8WAwMAJRAAACEgLCeuk0qqi\/GOnYAOAtlcQKOyjvGtBdId5ZCzGhWhjkkUAwMAAQEWAwMAKAAAAAAAAAAASNVaMONVPNQkwi1QNatfiTayCgn\/ib7d+PoSyIjqcPA=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291684,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8HTo4TIRew13gBALPEI\/AAABAQgKwtczA6l04Ec=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":1605291686035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp"}
+0437{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzH8AAAAAoAL9INmFAAACBAWgBAIICql05ecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":1605291686035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy4AAAAAoAL9IGaWAAACBAWgBAIICql05ecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":1605291686035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp"}
+0437{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQoAAAAAoAL9IOFQAAACBAWgBAIICql05ecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":1605291686035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp"}
+0437{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHTUsAAAAAoAL9IMleAAACBAWgBAIICql05ecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":1605291686035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4YysAAAAAoAL9ICkLAAACBAWgBAIICql05ecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605291686035,"flow_last_seen":1605291686035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp"}
+0437{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSVasAAAAAoAL9IGuvAAACBAWgBAIICql05ecAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+1147{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":2,"flow_packet_id":255,"flow_first_seen":1605291684452,"flow_last_seen":1605291686054,"flow_tot_l4_data_len":195539,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6277,"flow_avg_l4_data_len":766,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":1605291686060,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1NYAAAAAoAL9IMKJAAACBAWgBAIICql05gAAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":1605291686060,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytfXMAAAAAoAL9IIyvAAACBAWgBAIICql05gAAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":1605291686060,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx4AAAAAoAL9IOUhAAACBAWgBAIICql05gAAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605291686060,"flow_last_seen":1605291686060,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg34wAAAAAoAL9IKbfAAACBAWgBAIICql05gAAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":1605291686064,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2EAAAAAoAL9IFHtAAACBAWgBAIICql05gQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":1605291686064,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFZiEAAAAAoAL9IB7eAAACBAWgBAIICql05gQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":1605291686064,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXsAAAAAoAL9ID\/VAAACBAWgBAIICql05gQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605291686064,"flow_last_seen":1605291686064,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowUAAAAAoAL9IHbXAAACBAWgBAIICql05gQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtCtDxMC8voBJXgHBaAAACBAV4AQMDAwQCCArC1ziiqXTl5w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMMqHg8cyAoBJXgMyZAAACBAV4AQMDAwQCCArC1ziiqXTl5w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy+VrQrRgBAB+\/RNAAABAQgKqXTmBcLXOKI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzICEjDKigBAB+1CNAAABAQgKqXTmBcLXOKI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwLy+VrQrRgBgB+3OgAAABAQgKqXTmBcLXOKIWAwECAAEAAfwDAwyYN5j\/xCCsFbpKYtVHaXLKE\/uA+b8YhQZ6Wm2LZTmgIPoHYB\/uf+OrSqApvu9853Fa+\/5VUFSQ+FaXEGdGe73hACCamhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZM6OgAAAAAAGQAXAAAUd3d3LnJlZGRpdHN0YXRpYy5jb20AFwAA\/wEAAQAACgAKAAgaGgAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKRoaAAEAAB0AIJ5MVY1Z5Rq\/dBprPM2ILEA\/hIQM9DFSL5dx91jq4B4yAC0AAgEBACsACwqamgMEAwMDAgMBABsAAwIAApqaAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686065,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1117{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686065,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0439{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YTHT6uGMsoBJXgOg4AAACBAV4AQMDAwQCCArC1zipqXTl5w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhBwR01MoBJXgDmIAAACBAV4AQMDAwQCCArC1zipqXTl5w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX7sl7kLoBJXgNeBAAACBAV4AQMDAwQCCArC1zioqXTl5w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4YyyemEx1gBAB+2wmAAABAQgKqXTmC8LXOKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHTUwUASYRgBAB+711AAABAQgKqXTmC8LXOKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuQuOjCV\/gBAB+1tvAAABAQgKqXTmC8LXOKg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1118{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1119{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686071,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/LFklWsoBJXgCIUAAACBAV4AQMDAwQCCArC1ziqqXTl5w==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSVayn4kvzgBAB+6YAAAABAQgKqXTmDMLXOKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1118{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1605291686035,"flow_last_seen":1605291686072,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605291686084,"flow_last_seen":1605291686084,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5RtgHMAAAAAoAL9IHHJAAACBAWgBAIICql05hgAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605291686084,"flow_last_seen":1605291686084,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbEAAAAAoAL9ICltAAACBAWgBAIICql05hgAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL0EwGjpsfoBJXgFyoAAACBAV4AQMDAwQCCArC1zjFqXTmAA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4V8rX10oBJXgNWtAAACBAV4AQMDAwQCCArC1zjFqXTmAA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw49PvcdTXoBJXgPwjAAACBAV4AQMDAwQCCArC1zjFqXTmAA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOmx9iS9BNgBAB++CSAAABAQgKqXTmJ8LXOMU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytfXQZm0eGgBAB+1mYAAABAQgKqXTmJ8LXOMU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1NeMsOPUgBAB+4AOAAABAQgKqXTmJ8LXOMU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1119{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1118{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686099,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO8IeJd6tioBJXgCN0AAACBAV4AQMDAwQCCArC1zjGqXTmBA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsk6UAYN+NoBJXgFfrAAACBAV4AQMDAwQCCArC1zjGqXTmAA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCGPwRcUBxWYioBJXgB9GAAACBAV4AQMDAwQCCArC1zjGqXTmBA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3q2LoDvCIgBAB+6dhAAABAQgKqXTmKMLXOMY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg341lbJOmgBAB+9vUAAABAQgKqXTmKMLXOMY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFZiJj8EXGgBAB+6MzAAABAQgKqXTmKMLXOMY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgy8YZci18oBJXgKFLAAACBAV4AQMDAwQCCArC1zjGqXTmBA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyLXx84MvHgBAB+yU5AAABAQgKqXTmKMLXOMY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1117{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1121{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1605291686060,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1122{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686100,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1123{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686101,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vo\/hs46MGoBJXgG5nAAACBAV4AQMDAwQCCArC1zjGqXTmBA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowYOlaP5gBAB+\/JSAAABAQgKqXTmKsLXOMY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjowYOlaP5gBgB+6pXAAABAQgKqXTmK8LXOMYWAwECAAEAAfwDAzpoH5eGEGzTFt5HMarkQS85RnurgVO\/aBYt9fo57YL+IKTuih3DEW77d6v3Ju+D+D5ks\/z7dDlOpig4k7rr1nYZACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAFAASAAAPcHJldmlldy5yZWRkLml0ABcAAP8BAAEAAAoACgAIKioAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACkqKgABAAAdACBQT3pU4XvIA\/VlN6TB5fHnSiCNPOTwhb7yYNoEZjwQNQAtAAIBAQArAAsK6uoDBAMDAwIDAQAbAAMCAAJqagABAAAVAM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1605291686064,"flow_last_seen":1605291686103,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtCtHxMDE0gBALMOjtAAABAQgKwtc4yKl05gU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1832{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1605291686035,"flow_last_seen":1605291686105,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMMqLg8c6FgBALMEUrAAABAQgKwtc4yql05gU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1846{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrQ7pgBAB9e3lAAABAQgKqXTmLcLXOMs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRMBgBAB7enVAAABAQgKqXTmLcLXOMs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1838{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtEwHxMDE0gBgLML\/pAAABAQgKwtc4y6l05gX82vz\/eq7cXH5VMQzoOQek174v0wtq0rHfX\/5XdFM7NYDdro5EmLOfDtPa4Nf0aymrRKdLWIRtkkuBw9pzixKXSJAERXUa3Tcxl5LozVQNO+TBPzleLrjzXH4QjoZBAI1FZkewoWXOoKopCU7zl+voLqsPcqcwDvrH9P0Ud8OkWyhXwrP5gv23RVibAgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQPgGEcgjFh1S8o541GOLQs4cbZ4jAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3RVTANBgkqhkiG9w0BAQsFAAOCAQEAIz7fS9IxQqW2fkJcGkTMadFotF1L4AQhbEvibcyx4JePplMJzaoqZeU5Tx6DpW5cmKIkJub7oe2Txy4Cxk1Kv7BC33jas6j5bf8hhVM2YEx2zuw43NZRgPDF1uXUTSdkq5vHPnH7SJe4M23JEwfulqIbGBX2XExA7bPC7P9xweNH\/9S5ALQ3Qtogyepuiu4UBq59olmYiKgbby308skUXybPLI1+7TfAqdU5uYK\/GQzqNK8AIWj4rXPiyTLaOCULVdOaHfBohu0uQTTvfKVQHb86+dPBCAzm7R6KWCXkuHetLW71Ut20dI+rSS6dO5M0KB94zpTqx73TyW0c3lwy8xYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFA+AYRyCMWHVLyjnjUY4tCzhxtniGA8yMDIwMTExMjIxMjA1NFowczBxMEkwCQYFKw4DAhoFAAQUEF+meoAInbUnnzXOgwtDiJ6jxw0EFA+AYRyCMWHVLyjnjUY4tCzhxtniAhAKKFSCcBAsMFQOJUmxyqxYgAAYDzIwMjAxMTEyMjEyMDU0WqARGA8yMDIwMTExOTIwMzU1NFowDQYJKoZIhvcNAQELBQADggEBABeB6JqTyRqpznuNqjuGqK1A1QRem\/bt7r3xHqNn7pAlcMLfp0mKD4Z\/4wWMOz\/68m3Y","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1163{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":5,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686106,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+1133{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":606,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAigGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JWtFxnxMDE0gBgLMFYNAAABAQgKwtc4y6l05gU0oxSJU7Q1xjHlIjL9scjBhPuAEq0GCjMtFYiE7RJduMg4k0Ct9ZVwlb\/tOfyduWomz4zyeZVSJcuz082cUMYPrFas2XrpIIwdEdRaYS92wFLz1XeFYdwh7zq\/N7Upjur0hrtQfEue4+5ZqhbVR01oJNp4anHrUePIzlEnIT\/kcFsvAfnzhY8sCe6\/eHPlYmFh5NUqF382WuxmyYl4R2jC00MjKyceQCe+GA7mY6N19PTuAOUiLxpJNmIq9pmPNVdOG9Iimp3HvGkitHGB3xYDAwEsDAABKAMAHSDHWq\/C0\/TD2ag3R1CBC5+dCnGhO93whWqM8TXWzHC1DwgEAQBWpTBswB+zDIcvtXb0kpMH1NqR0aUvMK3BJBNiQYdr34ubbqu+b5pb\/sg7wz\/r9WT3QYcyn6OkaFr8IM8Va2fML\/E7Moc20L2MQGvRMNAmVjVVrdUOSf0x9mGj4SDIlb1IuLf\/ljDDrlPTO69khpGkrJRUjir+8yyhJUzlOm4YOmZfMQbd0vcnmWEExtWxZ+u0RnbkxlYCpVI1xRAhFoujHcL6vY4jDTaDL7b9XVY5Ld6IXPsYx2ItxtDUn9pzk6rjX\/RJTOkajLDQ5iIgjubIJlbBHjVcu5Ljjq7EwCF6ZxgQXV+qyvG5YhgVEU80EAPjezSzzx7vn1g4TdzutE0JFgMDAAQOAAAA","pkt_caplen":606,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRcZgBAB5eXFAAABAQgKqXTmLcLXOMs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRkhgBAB4ePBAAABAQgKqXTmLcLXOMs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMTSVrRkhgBgB9a3tAAABAQgKqXTmMMLXOMsWAwMAJRAAACEgfccXoV0OOJneLf+rpWTHrQM5urvnVU23TJoAWgykwTsUAwMAAQEWAwMAKAAAAAAAAAAA0ebRKJwkBmszku7WqU95DRhA0VfugO+WHocBjDjyn94=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwMZGVrRkhgBgB9bQ9AAABAQgKqXTmMMLXOMsXAwMAXgAAAAAAAAABpujuixx0xW9GrCk9QTYOyj3yFZulKnjJXZ7SJOb+XYtysJf3f4U+6KzDsvn\/EahAjH57elr7uvMemI9lRgdDJ8lMRedqn0jswH0MULTkNVj6iT49rNg=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDzZzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoWEjDKigBEB+040AAABAQgKqXTmMMLXOMo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAChDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxCOjCV\/gBEB+1lEAAABAQgKqXTmMMLXOKg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCVbzACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EUASYRgBEB+7tKAAABAQgKqXTmMMLXOKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB\/ybACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTGemEx1gBEB+2n7AAABAQgKqXTmMMLXOKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAreKACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7Gn4kvzgBEB+6PWAAABAQgKqXTmMMLXOKo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1833{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686110,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1846{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1836{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMOtLg8c6FgBgLMBwmAAABAQgKwtc4zql05gX82vz\/eq7cXH5VMQzoOQek174v0wtq0rHfX\/5XdFM7NYDdro5EmLOfDtPa4Nf0aymrRKdLWIRtkkuBw9pzixKXSJAERXUa3Tcxl5LozVQNO+TBPzleLrjzXH4QjoZBAI1FZkewoWXOoKopCU7zl+voLqsPcqcwDvrH9P0Ud8OkWyhXwrP5gv23RVibAgMBAAGjggFaMIIBVjASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMDegNaAzhjFodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBQPgGEcgjFh1S8o541GOLQs4cbZ4jAfBgNVHSMEGDAWgBQD3lA1VtFMu2bwo+IbG8OXsj3RVTANBgkqhkiG9w0BAQsFAAOCAQEAIz7fS9IxQqW2fkJcGkTMadFotF1L4AQhbEvibcyx4JePplMJzaoqZeU5Tx6DpW5cmKIkJub7oe2Txy4Cxk1Kv7BC33jas6j5bf8hhVM2YEx2zuw43NZRgPDF1uXUTSdkq5vHPnH7SJe4M23JEwfulqIbGBX2XExA7bPC7P9xweNH\/9S5ALQ3Qtogyepuiu4UBq59olmYiKgbby308skUXybPLI1+7TfAqdU5uYK\/GQzqNK8AIWj4rXPiyTLaOCULVdOaHfBohu0uQTTvfKVQHb86+dPBCAzm7R6KWCXkuHetLW71Ut20dI+rSS6dO5M0KB94zpTqx73TyW0c3lwy8xYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFA+AYRyCMWHVLyjnjUY4tCzhxtniGA8yMDIwMTExMjIxMjA1NFowczBxMEkwCQYFKw4DAhoFAAQUEF+meoAInbUnnzXOgwtDiJ6jxw0EFA+AYRyCMWHVLyjnjUY4tCzhxtniAhAKKFSCcBAsMFQOJUmxyqxYgAAYDzIwMjAxMTEyMjEyMDU0WqARGA8yMDIwMTExOTIwMzU1NFowDQYJKoZIhvcNAQELBQADggEBABeB6JqTyRqpznuNqjuGqK1A1QRem\/bt7r3xHqNn7pAlcMLfp0mKD4Z\/4wWMOz\/68m3Y","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1162{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":4,"flow_packet_id":9,"flow_first_seen":1605291686035,"flow_last_seen":1605291686110,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+1130{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":606,"pkt":"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","pkt_caplen":606,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoUAAAAAUAQAAMvJAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhFwR09RgBALMLIOAAABAQgKwtc41ql05gs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YTHX6uGUxgBALMGC\/AAABAQgKwtc41ql05gs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX\/sl7sQgBALMFAHAAABAQgKwtc41ql05gs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1833{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBJhFwR09RgBgLMDkrAAABAQgKwtc42Kl05gsWAwMAUgIAAE4DA4yhuxJ8cIU0x\/UfQJqgjG9j52fjJQKhYXSxkWb+I0O2AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK1gsACtIACs8ABjEwggYtMIIFFaADAgECAhAKKFSCcBAsMFQOJUmxyqxYMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEdMBsGA1UEAxMUd3d3LnJlZGRpdHN0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6joCtz\/XpIsmJDC1IQp8NmK79cp42u8wGU1+lRLzNGCN3Oih+bKGJg97Ah7p9AbLaWK0tgyBtFZgkMmY7Jo\/G212kqsCOVM9Th2+rA37LRUL0hA1hYOr7ZloEcI3QHvDG3fMi0MJnQEJUwcYp0LD0lHN+nraQIuBRPUCvjIw59jCEP62Zn9JwJpJGvofXIIJTS1EowlPz0+3NaMoHDR7OifayHdEBn2Cno669wEo1cOfeSogRHUJJgRRUIZuKl4av4KEC0nBDWQlUz2ybLpzENnVqWwK1YiWNlZbF1dwm7oBP9Rvj5VUjzV4rIfFfREPsh+BA\/UlEB0RX0AUqnSkLAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUU1Nk92iGK6OQNjntaEa8GWH6n3IwHwYDVR0RBBgwFoIUd3d3LnJlZGRpdHN0YXRpYy5jb20wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":7,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686127,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0409{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1847{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1832{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":8,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1837{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1163{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":7,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+1846{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1131{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":606,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAigGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBMllwR09RgBgLMDYoAAABAQgKwtc42Kl05gs0oxSJU7Q1xjHlIjL9scjBhPuAEq0GCjMtFYiE7RJduMg4k0Ct9ZVwlb\/tOfyduWomz4zyeZVSJcuz082cUMYPrFas2XrpIIwdEdRaYS92wFLz1XeFYdwh7zq\/N7Upjur0hrtQfEue4+5ZqhbVR01oJNp4anHrUePIzlEnIT\/kcFsvAfnzhY8sCe6\/eHPlYmFh5NUqF382WuxmyYl4R2jC00MjKyceQCe+GA7mY6N19PTuAOUiLxpJNmIq9pmPNVdOG9Iimp3HvGkitHGB3xYDAwEsDAABKAMAHSCWDCY8Zh\/4c5QIux2ngbaHM49eTZRNqHHO1FDC4WPqOwgEAQCeJO80DEkaslpwwhrS5u+fRWKNnEolFXbXnpUcgCAxed+B4Z7Lpy4AX8zUo5TtAbthrY2Lbu03Y77JGrROZipwiNkcISlxq3ejt3MZG5gswLTmkmRyDIu8HFyTUhl8OYynep4icTTFbAzwIWRqj2dcrFfBXaCN8+8194VAcf7qm6LtaPYOoZi5dd64Et+f1MAkJin4AmTqVaC2wmAFNSgbm6ne1IbRkeaaLEY2N6syakRwgpXxHlwdmZqnqkrmRP3YKKZxV\/jdtDoRbJHudVTVeqxIT4QMgCxk\/ZKpUjKzI\/byMbgEl4u8wpMcPy2o9fO4RTkkHPB9v\/1ypMT2JX3cFgMDAAQOAAAA","pkt_caplen":606,"pkt_type":34525,"pkt_ipoffset":14}
+1837{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1163{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":8,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+1128{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":606,"pkt":"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","pkt_caplen":606,"pkt_type":34525,"pkt_ipoffset":14}
+1835{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MJX\/sl7sQgBgLMHD3AAABAQgKwtc42Kl05gsWAwMAUgIAAE4DA38EDp\/K4XxG\/E1+f9jCsO+wjOQIeNaVpFlPMzkLjUm0AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK1gsACtIACs8ABjEwggYtMIIFFaADAgECAhAKKFSCcBAsMFQOJUmxyqxYMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEdMBsGA1UEAxMUd3d3LnJlZGRpdHN0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6joCtz\/XpIsmJDC1IQp8NmK79cp42u8wGU1+lRLzNGCN3Oih+bKGJg97Ah7p9AbLaWK0tgyBtFZgkMmY7Jo\/G212kqsCOVM9Th2+rA37LRUL0hA1hYOr7ZloEcI3QHvDG3fMi0MJnQEJUwcYp0LD0lHN+nraQIuBRPUCvjIw59jCEP62Zn9JwJpJGvofXIIJTS1EowlPz0+3NaMoHDR7OifayHdEBn2Cno669wEo1cOfeSogRHUJJgRRUIZuKl4av4KEC0nBDWQlUz2ybLpzENnVqWwK1YiWNlZbF1dwm7oBP9Rvj5VUjzV4rIfFfREPsh+BA\/UlEB0RX0AUqnSkLAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUU1Nk92iGK6OQNjntaEa8GWH6n3IwHwYDVR0RBBgwFoIUd3d3LnJlZGRpdHN0YXRpYy5jb20wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":6,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686128,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1846{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDDz0ABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PgBu3BHT1EAAAAAUAQAALuiAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTEAAAAAUAQAABtPAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0409{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1838{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1163{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1605291686035,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":3985,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+1131{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":606,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAigGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MMcfsl7sQgBgLMIDoAAABAQgKwtc42Kl05gs0oxSJU7Q1xjHlIjL9scjBhPuAEq0GCjMtFYiE7RJduMg4k0Ct9ZVwlb\/tOfyduWomz4zyeZVSJcuz082cUMYPrFas2XrpIIwdEdRaYS92wFLz1XeFYdwh7zq\/N7Upjur0hrtQfEue4+5ZqhbVR01oJNp4anHrUePIzlEnIT\/kcFsvAfnzhY8sCe6\/eHPlYmFh5NUqF382WuxmyYl4R2jC00MjKyceQCe+GA7mY6N19PTuAOUiLxpJNmIq9pmPNVdOG9Iimp3HvGkitHGB3xYDAwEsDAABKAMAHSC2k7KwcAPsv4fSQ0bc08RiDffNZuoU8t2FrnZlHXVTfQgEAQBpiqGB2Hqu1po6M6HhvzqFp1RVncGzEUi7lwiYcHf8Bs+Gu6A3Wug\/vVauHE905tCWsK1Y7tBpZ118XLT04I0VFCmj38I8tthuxEFn2kJB6OiIqREluj9nhcn0JNaHlxKEA3ZxsJXLGfppgMULPox9OIspGBpeJKWR3CTRvXvvsdh\/xzUec1zSDwQjTEZ2uYUGS\/vpoVpNBm\/B5d1rVpx9WxPiISd8WyUvK1LihqzEj4wf9SPOc9cSFSOscMhkOBSBqoTYexP5KmXd5hciUa0RxJtE6TKMOC0hESh9weV+lFlg8XL8NJFxQVUbVRMHNrO\/NXnCEWW32P9OMkvF5CaCFgMDAAQOAAAA","pkt_caplen":606,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzEPbiYGyoBJXgE4hAAACBAV4AQMDAwQCCArC1zjcqXTmGA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaN0mUbYB0oBJXgO0tAAACBAV4AQMDAwQCCArC1zjbqXTmGA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/PFklexgBALMJqUAAABAQgKwtc43Kl05gw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1836{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiS\/PFklexgBgLMARsAAABAQgKwtc43ql05gwWAwMAUgIAAE4DA\/AQIQbrU20HyJyN7PsW9O\/kvAJjS9MziTQJmepzrB6+AMAvAAAm\/wEAAQAAAAAAAAsABAMAAQIAIwAAAAUAAAAQAAUAAwJoMgAXAAAWAwMK1gsACtIACs8ABjEwggYtMIIFFaADAgECAhAKKFSCcBAsMFQOJUmxyqxYMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMjIxMjAwMDBaMG8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRQwEgYDVQQKEwtSZWRkaXQgSW5jLjEdMBsGA1UEAxMUd3d3LnJlZGRpdHN0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6joCtz\/XpIsmJDC1IQp8NmK79cp42u8wGU1+lRLzNGCN3Oih+bKGJg97Ah7p9AbLaWK0tgyBtFZgkMmY7Jo\/G212kqsCOVM9Th2+rA37LRUL0hA1hYOr7ZloEcI3QHvDG3fMi0MJnQEJUwcYp0LD0lHN+nraQIuBRPUCvjIw59jCEP62Zn9JwJpJGvofXIIJTS1EowlPz0+3NaMoHDR7OifayHdEBn2Cno669wEo1cOfeSogRHUJJgRRUIZuKl4av4KEC0nBDWQlUz2ybLpzENnVqWwK1YiWNlZbF1dwm7oBP9Rvj5VUjzV4rIfFfREPsh+BA\/UlEB0RX0AUqnSkLAgMBAAGjggLlMIIC4TAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUU1Nk92iGK6OQNjntaEa8GWH6n3IwHwYDVR0RBBgwFoIUd3d3LnJlZGRpdHN0YXRpYy5jb20wDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":9,"flow_packet_id":7,"flow_first_seen":1605291686035,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0410{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxAAAAAAUAQAANOUAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbK5D8xEgBAB+9IFAAABAQgKqXTmRcLXONw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5RtgHT3WjdKgBAB+3ESAAABAQgKqXTmRcLXONs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0409{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJgbK5D8xEgBgB+3f+AAABAQgKqXTmRcLXONwWAwECAAEAAfwDA9erSYCt3PYYZEktL7MJcpGlYIX2xYNgs1\/AtKvB7xt0IOR+LE0dhUbDAJPbNSHJ7ZIObTOEyDbEgQFzR3Tqo8K3ACAaGhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNaWgAAAAAAGgAYAAAVZW1vamkucmVkZGl0bWVkaWEuY29tABcAAP8BAAEAAAoACgAIiooAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACmKigABAAAdACA5IMr2gd92bNdZoVSKNUS0n14cDWaYPOFRO\/ISsXyZWAAtAAIBAQArAAsKOjoDBAMDAwIDAQAbAAMCAAI6OgABAAAVAMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1605291686084,"flow_last_seen":1605291686129,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1123{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1605291686084,"flow_last_seen":1605291686130,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1847{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbR4Z8rX95gBALME5BAAABAQgKwtc44ql05ic=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1838{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1163{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":9,"flow_packet_id":11,"flow_first_seen":1605291686035,"flow_last_seen":1605291686137,"flow_tot_l4_data_len":4005,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":364,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+1139{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":606,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAigGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiWDvFklexgBgLMNq4AAABAQgKwtc43ql05gw0oxSJU7Q1xjHlIjL9scjBhPuAEq0GCjMtFYiE7RJduMg4k0Ct9ZVwlb\/tOfyduWomz4zyeZVSJcuz082cUMYPrFas2XrpIIwdEdRaYS92wFLz1XeFYdwh7zq\/N7Upjur0hrtQfEue4+5ZqhbVR01oJNp4anHrUePIzlEnIT\/kcFsvAfnzhY8sCe6\/eHPlYmFh5NUqF382WuxmyYl4R2jC00MjKyceQCe+GA7mY6N19PTuAOUiLxpJNmIq9pmPNVdOG9Iimp3HvGkitHGB3xYDAwEsDAABKAMAHSCKSs4l89bXUCOiAIzy0t\/XLXv+FnPQAIHZbzK6\/b2zPQgEAQBWPvvUKCJhPPl9UaqgkQGRrEPnInqn3AgcWKBdJ\/beNUnh8YiG3BBPpig7fWXGt3faQYJkoxICObedZ\/\/cQR843TMJ\/tFxHeh++mhywQmo7IpKjyH\/cP4tkncFJahFlCiQctlFwQ79rSY9MXmiFUFSBu2Wpus46YvEsiEjcq65kwD7H64LAMJAlLAK\/qICDJYwTqmpVm7OhyWGMqHUmqT4O1IaWg4\/Hvxuqm\/zhHGzTDzqcxuGre\/5e1Yavz6ai+Vs+j6Mdk2hnEzA0diG0ay0njYI+YGULPP2\/6vLFzXax3XhVsBLNckbJzge9vIBu2l3NVdiid+USCvy+MnfiZrnFgMDAAQOAAAA","pkt_caplen":606,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL0E0Gjp0kgBALMNU7AAABAQgKwtc44ql05ic=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1835{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686137,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0410{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gDKneABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PwBu8WSV7EAAAAAUAQAAF3zAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9RlgBAB9do2AAABAQgKqXTmTcLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1843{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9h9gBAB9dYeAAABAQgKqXTmTcLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1841{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJL2H0Gjp0kgBgLMKqZAAABAQgKwtc45Kl05icUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMTIxMzIwNTZaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQBSCpw0UHR0S5Q9u7sJJenYAAGA8yMDIwMTExMjEzMjA1NlqgERgPMjAyMDExMTkxMjM1NTZaMA0GCSqGSIb3DQEBCwUAA4IBAQAe0tW7eHxJsBmpUJLOLbayxqVf49zXEZ5\/cB0RRa6yG3CNXesl4JDY","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1176{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":12,"flow_packet_id":10,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
+1152{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS9yVgBAB9dIFAAABAQgKqXTmTsLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS96ngBAB9c\/zAAABAQgKqXTmTsLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1836{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1843{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1840{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdABmbT7Z8rX95gBgLMCOfAAABAQgKwtc45Kl05icUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMTIxMzIwNTZaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQBSCpw0UHR0S5Q9u7sJJenYAAGA8yMDIwMTExMjEzMjA1NlqgERgPMjAyMDExMTkxMjM1NTZaMA0GCSqGSIb3DQEBCwUAA4IBAQAe0tW7eHxJsBmpUJLOLbayxqVf49zXEZ5\/cB0RRa6yG3CNXesl4JDY","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1175{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":11,"flow_packet_id":8,"flow_first_seen":1605291686060,"flow_last_seen":1605291686138,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
+1148{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm0uegBAB9VM7AAABAQgKqXTmTsLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm0+2gBAB808lAAABAQgKqXTmTsLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1POgBAB7UsTAAABAQgKqXTmTsLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1XggBAB6UkFAAABAQgKqXTmTsLXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/oyw49TvcdbcgBALMHS1AAABAQgKwtc45Kl05ic=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnSRiS96ngBgB9TenAAABAQgKqXTmUMLXOOQWAwMAJRAAACEgGhiw9b94f8rz2dJx6nh+9ommAOkvNbCFYxJJRPRrDQMUAwMAAQEWAwMAKAAAAAAAAAAADDiXoMO+wQIDk0GccYULTEY6bkLD8890nYXEqstmLnY=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+1837{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsk6YAYOGSgBALMNB1AAABAQgKwtc466l05ig=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsOfsgBAB9XmsAAABAQgKqXTmUcLXOOY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf3kZm1XggBgB9e6bAAABAQgKqXTmUcLXOOQWAwMAJRAAACEgXn0+nl7ibnbnv3X+XE5SsOnr6yCBoTQjDG1qP+zsESMUAwMAAQEWAwMAKAAAAAAAAAAAu1t2RzBpuHFGdpAbDAc+HC8CD+XJPWLxyiIYqaKyz2I=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+1837{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1845{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1841{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1175{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":10,"flow_packet_id":9,"flow_first_seen":1605291686060,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
+1151{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZJlbJe+gBAB9dVtAAABAQgKqXTmUcLXOO0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsOwEgBAB83WWAAABAQgKqXTmUcLXOOY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPAcgBAB63GGAAABAQgKqXTmUcLXOOY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPIugBAB5294AAABAQgKqXTmUcLXOOY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO8IiJd61ngBALMJwEAAABAQgKwtc46al05ig=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1832{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1605291686064,"flow_last_seen":1605291686141,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0426{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvSggBAB86D+AAABAQgKqXTmUcLXOOs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1846{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBugO9KCJd61ngBgLMGouAAABAQgKwtc466l05igGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXQrSmdiAAAEAwBHMEUCIQD\/04ygSe1MYzrJpdTwrQK9Sjx\/tAOekyn8ZwUHe438MQIgQeoxYr6dp9e0Vi2BfTgg\/tx7yoUBr46n4mPgngP1Cg8AdQBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXQrSmd+AAAEAwBGMEQCIDQ+4afNmJ6Lq7tcDFhWE5ZRcYt+T8eRVv9HNhRXleMaAiAfvoxXCpDvg3ksn\/DbvlHRhWsdVwta6mdmCm+pp0EQLDANBgkqhkiG9w0BAQsFAAOCAQEAAG3CaPVDekrOfzw6f0I5v2tWlY1xVwLUq3mWKiYqkY13PT0BCSJhi4Wr05nryv4hM2tTgWfXEYy5thizGRFQU2k2\/UwaR1tWB7k6icplfD0Ga+hHuMA1ioLo\/9dpR90j3inuZOlew5NI2+DUxJoSXlo3H8MbyO5DP\/ctl49WhW+y0JaR0mw+Wsni\/W0+ctk2wp4ac\/lpLbD1iXAOjwpg\/HHz0VF8T8dgjOGW64yvr1ftmXr2UumO7tbZmf00WJprBjlf4hclLVDLtjreq8DhsjB3cf\/gLzGIz0xtBET1KwumlL4Vmay44nBXCrqr3Ucoup6L8umjZP\/gUQ4QuW1ijwAEmDCCBJQwggN8oAMCAQICEAH9o+tuynXIiEOLckvPvJEwDQYJKoZIhvcNAQELBQAwYTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEgMB4GA1UEAxMXRGlnaUNlcnQgR2xvYmFsIFJvb3QgQ0EwHhcNMTMwMzA4MTIwMDAwWhcNMjMwMzA4MTIwMDAwWjBNMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5EaWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrliQTcHEMBWQNVtuPIIV9SxcvePb\/3FD+mQlgNTuGKJN8GbQCnNuEZg2F2SvN539+kGEr8evjP4ac03PM5eQopaHU4MruaZ1SC0dVjd72jEyGtesqwb0ql1Lt0dG3SqTw5AueYCA7xMEahQ7tZuSvsIHZU782vz\/eq7cXH5VMQzoOQek","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvi4gBAB65zuAAABAQgKqXTmUcLXOOs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1843{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1145{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":14,"flow_packet_id":10,"flow_first_seen":1605291686064,"flow_last_seen":1605291686142,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
+1113{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDvzQgBAB45jdAAABAQgKqXTmUsLXOOs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDv7IgBAB4JboAAABAQgKqXTmUsLXOOs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1tyMsPIugBgB9YFTAAABAQgKqXTmUsLXOOYWAwMAJRAAACEgZJ2fNuxYDkYEAorrSgrC6naxu108X\/vrHejUJ\/bvY20UAwMAAQEWAwMAKAAAAAAAAAAAuxwHWn\/YV7LzrQXx5DCSpCQE8NxK6REGaWrzx+x6k\/A=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDoxGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QABu3ytf9YZm1XggBEB9UiWAAABAQgKqXTmU8LXOOQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBKPwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3P4Bu+9x1zmMsPIugBEB9W8KAAABAQgKqXTmU8LXOOY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0564{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOnYFiS96ngBgB9bc6AAABAQgKqXTmU8LXOOQXAwMAXgAAAAAAAAABe6gvpK3f09SZmdUeupLeJbR2b43kbwfw5hyBx9bENlHGJC\/\/cx38UO6bl36KpKUr5QIJ1IgXfYt5H0KjwrHbH0js\/3q9ImEFNEjmcNvJjMu0LnW1sYA=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCVnRACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZJlbJe+gBEB9dVqAAABAQgKqXTmU8LXOO0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCGPwRcYBxWgngBALMJfQAAABAQgKwtc476l05ig=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1843{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1841{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1176{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":13,"flow_packet_id":10,"flow_first_seen":1605291686060,"flow_last_seen":1605291686144,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"styles.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
+0428{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzgy8cZci+BgBALMBnUAAABAQgKwtc48Kl05ik=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZIAAAAAUAQAAJk8AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1149{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":616,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAjIGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsn+4AYOGSgBgLMB82AAABAQgKwtc47al05igFzSsmCedJGCcRINBMxj2OkjLRrR5+xcD9lb4unAKC5WTmKH6ycrO9ix\/L32MGep\/ZFvIJCQSouE7mlgSAcTFI4BXte\/pGsHMAjui+1qfzuJeDRU1HhuOmlCbhFJ6m4gFzgwhyGd9L+hpBg5KgMKhXfS7jrubusel2UJKbGh734tJ39CE6k1PRqEwMkj67np+DYccuihF63nxZALE8swo0riZoaCe5AiIY7ITMITCBbxCZuPAGOPmEMbEPmOm6Pvj+\/bWyqGz8umNh91i6hsUU6dKjsm4mWYsWAwMBLAwAASgDAB0gG2cOJgoEaixVukJFuagwQP1Slxp2pmozF56MYk\/waEIIBAEAxD4SJToiMcYIr5B0\/+sb0wfrs+x2lHtMV12QgO7sOQdEGDIDCYyBWOFUPQutn88\/lvd8NzFxEk7Gx5Vt6P5ROxT1NSKv0FCLFMr4T\/+xaq98Yne3wtlRpwrKYdTxXc5vRO9\/NciX5jSwPMQIX0VlmhEbICMhjZHHrvtGHhd3to9Pxceen905+pBfwNZIfoh4S9qGDT8cgCiS0ZUGhF0UpsywcC9kFFVL5eDTopw46xpDM7z5kMHT\/bfMxNk48gbgJ2WKpmN8aEqu+Izc5jj96Mpy1L26ZOqOVCR+Pk2qOmrCeAHGLz9Iuj2X0o+K8aVPhgNqwk9IMXTabXd30cmNrxYDAwAEDgAAAA==","pkt_caplen":616,"pkt_type":34525,"pkt_ipoffset":14}
+1832{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1605291686064,"flow_last_seen":1605291686144,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0411{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZIAAAAAUAQAAJk8AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8EnegBAB9ZzFAAABAQgKqXTmVMLXOPE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rWfoDv7IgBgB9TMgAAABAQgKqXTmVMLXOOsWAwMAJRAAACEgDKhK+fnPfakLEiUGnf24VB8EgC9O2IJ8IfqQjcJ8lQ8UAwMAAQEWAwMAKAAAAAAAAAAAoJxM\/eZ8gECxhU1BRAHdej9eS7fhJ9tLYYhb89Z\/n7s=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+1846{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1842{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1144{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":15,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686145,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
+1121{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vo\/ls46ULgBALMObsAAABAQgKwtc48al05is=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8E32gBAB9ZitAAABAQgKqXTmVMLXOPE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FIOgBAB85SWAAABAQgKqXTmVcLXOPE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FQGgBAB8JKhAAABAQgKqXTmVcLXOPE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0554{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaCdj8FQGgBgB9YdxAAABAQgKqXTmVcLXOPEWAwMAJRAAACEgdmph34K9vZmrea03hofRhLJS5d6gycs\/IbxulMy89A4UAwMAAQEWAwMAKAAAAAAAAAAAhsMpILyScP4uhEQeessUbI3M0EgUPanhQHw9MXz+3wQ=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAj4aACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QgBuwHFaIRj8FQGgBEB9ZI+AAABAQgKqXTmVcLXOPE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3rcToDv7IgBgB9f79AAABAQgKqXTmVsLXOOsXAwMAXgAAAAAAAAABvEL0yUJOjCdNlCZfyMUAZ1urAkUYudWPz5bof2+QElDF3vfAUfW7axtToeUPNB+Ggkspui9eT0SxHuOnJtzAcGynoCgiZY73+Bwb5R\/vvT5\/Poezr0w=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMdACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4F84MvHgBEB+yLbAAABAQgKqXTmVsLXOPA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBZ0wACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQsOlaP5gBEB++\/1AAABAQgKqXTmVsLXOPE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1831{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":16,"flow_packet_id":7,"flow_first_seen":1605291686064,"flow_last_seen":1605291686146,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1846{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1843{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1144{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":16,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686146,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
+1116{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4EAAAAAUAQAADI2AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+p6YWsX6uGUygBALMFIrAAABAQgKwtc49Kl05jA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc+BQBNGFwR09SgBALMKN6AAABAQgKwtc49Kl05jA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9o6MM8\/sl7sRgBALMEF0AAABAQgKwtc486l05jA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMQPLg8c6GgBALMDaGAAABAQgKwtc486l05jA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCLKYABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PoBu\/q4ZTIAAAAAUAQAABtOAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBOdWABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PYBu+yXuxEAAAAAUAQAANOTAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoYAAAAAUAQAAMvIAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+1833{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":17,"flow_packet_id":7,"flow_first_seen":1605291686064,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":1805,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":257,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1846{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6VqBFs46ULgBgLMLUVAAABAQgKwtc49Kl05isGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXQrSmdiAAAEAwBHMEUCIQD\/04ygSe1MYzrJpdTwrQK9Sjx\/tAOekyn8ZwUHe438MQIgQeoxYr6dp9e0Vi2BfTgg\/tx7yoUBr46n4mPgngP1Cg8AdQBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXQrSmd+AAAEAwBGMEQCIDQ+4afNmJ6Lq7tcDFhWE5ZRcYt+T8eRVv9HNhRXleMaAiAfvoxXCpDvg3ksn\/DbvlHRhWsdVwta6mdmCm+pp0EQLDANBgkqhkiG9w0BAQsFAAOCAQEAAG3CaPVDekrOfzw6f0I5v2tWlY1xVwLUq3mWKiYqkY13PT0BCSJhi4Wr05nryv4hM2tTgWfXEYy5thizGRFQU2k2\/UwaR1tWB7k6icplfD0Ga+hHuMA1ioLo\/9dpR90j3inuZOlew5NI2+DUxJoSXlo3H8MbyO5DP\/ctl49WhW+y0JaR0mw+Wsni\/W0+ctk2wp4ac\/lpLbD1iXAOjwpg\/HHz0VF8T8dgjOGW64yvr1ftmXr2UumO7tbZmf00WJprBjlf4hclLVDLtjreq8DhsjB3cf\/gLzGIz0xtBET1KwumlL4Vmay44nBXCrqr3Ucoup6L8umjZP\/gUQ4QuW1ijwAEmDCCBJQwggN8oAMCAQICEAH9o+tuynXIiEOLckvPvJEwDQYJKoZIhvcNAQELBQAwYTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEgMB4GA1UEAxMXRGlnaUNlcnQgR2xvYmFsIFJvb3QgQ0EwHhcNMTMwMzA4MTIwMDAwWhcNMjMwMzA4MTIwMDAwWjBNMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5EaWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrliQTcHEMBWQNVtuPIIV9SxcvePb\/3FD+mQlgNTuGKJN8GbQCnNuEZg2F2SvN539+kGEr8evjP4ac03PM5eQopaHU4MruaZ1SC0dVjd72jEyGtesqwb0ql1Lt0dG3SqTw5AueYCA7xMEahQ7tZuSvsIHZU782vz\/eq7cXH5VMQzoOQek","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc8oSMQPLg8c6GgBELMDaEAAABAQgKwtc49Kl05jA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1842{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6VrCls46ULgBgLMPNnAAABAQgKwtc49Kl05ivXvi\/TC2rSsd9f\/ld0Uzs1gN2ujkSYs58O09rg1\/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGXkujNVA075ME\/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0\/RR3w6RbKFfCs\/mC\/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzhxtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEBCwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq\/sELfeNqzqPlt\/yGFUzZgTHbO7Djc1lGA8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls\/3HB40f\/1LkAtDdC2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPitc+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLzFgMDAd8WAAHbAQAB1zCCAdMKAQCgggHMMIIByAYJKwYBBQUHMAEBBIIBuTCCAbUwgZ6iFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIYDzIwMjAxMTEyMTIyMDU2WjBzMHEwSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEASBWIkVoZ4tBgg0csD1+oCAABgPMjAyMDExMTIxMjIwNTZaoBEYDzIwMjAxMTE5MTEzNTU2WjANBgkqhkiG9w0BAQsFAAOCAQEAbwsD5QK4DQ9xfMkiwjwxyTNXlhdZjg2N8vB\/PaYfH1XoDJdlWGVbnA8TWdbHQAFf+6hb2yCXT2PrEc5rtmuJ6qsC","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1144{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":17,"flow_packet_id":9,"flow_first_seen":1605291686064,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
+1116{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":590,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6VsEFs46ULgBgLMGUfAAABAQgKwtc49Kl05itkRhvz1enisus+n+JtTFh5SwLPqnsNQGg3iOJYoXp+wF91pGTE\/3x+aQOXjrcYJPujSbXof\/sNWsX0Ch+B\/eKgUux4+l+H6D2B4ET1JbSLEEOr9ZWpS3RJvElVNKQUtc6UiHPg\/2caAWll+fY5HO0LlKfS0\/+z66ZGktG+DgAoy7TfLapyN4\/YD\/XHQTfVf+ymrIBkogrdwK2UAhWm9rWt7ALq5xFuJyf0ZlOeEe+6ePGSg5v4hVg3I0eT4d0tFgMDASwMAAEoAwAdIKjIfdNB+Xj\/xUSylt58OAv3rIjdUPkIhQAKY9xqDo4yCAQBAE+tQV47PDWyW\/jPbVae0n926H+33P2dhwyJMYdEtd3vXUusGY1Sf4\/fwnOPpAmVyiTQmhlgyOzBntrsQI2jHfVbMwpgwyfcThx95sEwKki0ToIwd2wl2GnhphTQ\/lNIy9+hA4QbkmtVW9EOdHXBVDo+4Gh07K91JF64MWKqikri5f82ieaxHm+xMwv+dY2CsWtcgeuV4pmfkotqFwOkyrd45TA77Z1NQaA3L9nzQ7KACm0Texz9IfpLQGJypgpz3YBo7rPAxod2zOyccGyhTwYh7X34qDo60\/rykpF2jklkFP63v1zxdn8NVHCRQoTcEasL\/2jJbhbN7dlmp6tVLC4WAwMABA4AAAA=","pkt_caplen":590,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQsAAAAAUAQAAGk4AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gC3zdABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PIBu+DxzoYAAAAAUAQAAMvIAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc\/KfiWkPFkleygBALMIv+AAABAQgKwtc4\/al05jA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkPzETbiYO3gBALMMaaAAABAQgKwtc5Dal05kU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaN0qUbYJ5gBALMGWmAAABAQgKwtc5DKl05kY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1840{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0891{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1843{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkP0FzbiYO3gBgLMFHDAAABAQgKwtc5D6l05kV0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXOQZCKCAAAEAwBHMEUCIAherbIi6ZyHzb3QX5+4\/MlQsJrfbT9XT60YNwXvs\/FkAiEAwb6FWwmkC64YkR7Z3GfczyoO1X+DuWs1z\/cJf1mGmRAAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXOQZCKuAAAEAwBIMEYCIQCNJnMx30MdQpcsqt\/W+zrckQM+XjK6x44S461Ih+FOwgIhAKbBLZjqonCb3DAhfmp8tsmJH+X3MizzOAQP3yn5uVQ5MA0GCSqGSIb3DQEBCwUAA4IBAQBCDMeIm2uPoixPwoutZHrrGFzfNJEXLQk54PkRo2woDSpR3o0sLrpMXiyWx6H0MMNDjCQCbMH2ymQA6oTDSulICMxnonBHGBAiFWQ4yFy2iFOaonss\/jw9Dn15iyoLKitvtvJLO9YtEqX7BhpUXB+aGzE35RE3PNE7a9BSnYdTRBdwcbTm4\/GUaX3HC2LiAXQA2DAltxNjiE72Zxrfz9Ebt1FNjsFnx0Ah1ZbnA1MIHFvgmyPuvrAyEw9PR6UdJmEHtOv18OslcdpyIt5b11k6XZhXnFrHzfU77INW6\/\/S6hVNtvk1bBdMuvkLXzN88BKcp9k9\/9vFc9yzgrbsBbZxAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRq","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1840{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1174{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":19,"flow_packet_id":8,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":3933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
+1146{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":34525,"pkt_ipoffset":14}
+1837{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0891{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1605291686084,"flow_last_seen":1605291686182,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9BcgBAB9cuGAAABAQgKqXTmesLXOQ8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9R0gBAB88dwAAABAQgKqXTmesLXOQ8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9iMgBAB7cNeAAABAQgKqXTmesLXOQ8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9qegBAB6cFQAAABAQgKqXTmesLXOQ8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WjtigBAB82qVAAABAQgKqXTmesLXOQ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1843{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDvdaO2KUbYJ5gBgLMPDOAAABAQgKwtc5Dql05kZ0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAXOQZCKCAAAEAwBHMEUCIAherbIi6ZyHzb3QX5+4\/MlQsJrfbT9XT60YNwXvs\/FkAiEAwb6FWwmkC64YkR7Z3GfczyoO1X+DuWs1z\/cJf1mGmRAAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAXOQZCKuAAAEAwBIMEYCIQCNJnMx30MdQpcsqt\/W+zrckQM+XjK6x44S461Ih+FOwgIhAKbBLZjqonCb3DAhfmp8tsmJH+X3MizzOAQP3yn5uVQ5MA0GCSqGSIb3DQEBCwUAA4IBAQBCDMeIm2uPoixPwoutZHrrGFzfNJEXLQk54PkRo2woDSpR3o0sLrpMXiyWx6H0MMNDjCQCbMH2ymQA6oTDSulICMxnonBHGBAiFWQ4yFy2iFOaonss\/jw9Dn15iyoLKitvtvJLO9YtEqX7BhpUXB+aGzE35RE3PNE7a9BSnYdTRBdwcbTm4\/GUaX3HC2LiAXQA2DAltxNjiE72Zxrfz9Ebt1FNjsFnx0Ah1ZbnA1MIHFvgmyPuvrAyEw9PR6UdJmEHtOv18OslcdpyIt5b11k6XZhXnFrHzfU77INW6\/\/S6hVNtvk1bBdMuvkLXzN88BKcp9k9\/9vFc9yzgrbsBbZxAASYMIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBDQTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIgU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANyuWJBNwcQwFZA1W248ghX1LFy949v\/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83nf36QYSvx6+M\/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bdKpPDkC55gIDvEwRq","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1840{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1174{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":18,"flow_packet_id":9,"flow_first_seen":1605291686084,"flow_last_seen":1605291686183,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emoji.redditmedia.com","server_names":"*.redditmedia.com,redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"96:A3:77:56:81:79:10:5C:E8:7F:F0:33:D2:7E:1C:45:08:2C:25:85"}}
+1149{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":616,"pkt":"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","pkt_caplen":616,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3Wj96gBAB9WZ6AAABAQgKqXTme8LXOQ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkOSgBAB82JkAAABAQgKqXTme8LXOQ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkWkgBAB72BWAAABAQgKqXTme8LXOQ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0554{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJg7e5D9qegBgB9Tc+AAABAQgKqXTmfMLXOQ8WAwMAJRAAACEg3KY1H\/05Q15oj6d5bgAwoPgpNJUhsYhgVZeNDdb+CwMUAwMAAQEWAwMAKAAAAAAAAAAA0Gn41pN31l55+wXuCFG6hvJFOpUeW6U3HTLow+B5mH4=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0554{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgnn3WkWkgBgB9ePfAAABAQgKqXTmfcLXOQ4WAwMAJRAAACEgVgtqpHliuL0Op9BnOLDhFz2xDTdVGlADg825t9I3d3kUAwMAAQEWAwMAKAAAAAAAAAAAq7siOn5l3QhTDyKz5ySKKpa9+GvIEEOa\/DQD65ylo1A=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTHMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3Q4Bu5Rtgtb3WkWkgBEB9V\/wAAABAQgKqXTmfcLXOQ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJhBS5D9qegBgB9cN5AAABAQgKqXTmfcLXOQ8XAwMAXgAAAAAAAAABnOvciIXX4vSH6iDSVLx8BmLJ1WliglA6TgbgmaeZoLtkuvIEUORIZl0tXMy9ipHj\/YC78HX7iUreOf7xxjSvOKjDHVfHgz7J5L1ug0UldeAzh1EN2tc=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBGVsogAAYOGTgBALMMG3AAABAQgKwtc5I6l05lM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCPRTABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QQBuwBg4ZMAAAAAUAQAAJk7AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vsjls46UMgBALMNhKAAABAQgKwtc5J6l05lY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2gcZci+CgBALMAsuAAABAQgKwtc5KKl05lY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQwAAAAAUAQAAGk3AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4IAAAAAUAQAADI1AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdCnzg2gcZci+CgBELMAssAAABAQgKwtc5Kal05lY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdDA6Vsjls46UMgBELMNhHAAABAQgKwtc5Kal05lY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gAi8TABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QoBuxlyL4IAAAAAUAQAADI1AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0411{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gCsXSABQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QwBu2zjpQwAAAAAUAQAAGk3AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605291686301,"flow_last_seen":1605291686301,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3ML0AAAAAoAL9IDDZAAACBAWgBAIICql05vEAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWUkNzC+oBJXgILuAAACBAV4AQMDAwQCCArC1zmoqXTm8Q==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3ML5BwRVmgBAB+wbmAAABAQgKqXTnC8LXOag=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1605291686301,"flow_last_seen":1605291686327,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1160{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":5,"flow_packet_id":255,"flow_first_seen":1605291686035,"flow_last_seen":1605291686338,"flow_tot_l4_data_len":285405,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6320,"flow_avg_l4_data_len":1119,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.redditstatic.com","server_names":"www.redditstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=www.redditstatic.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"24:BA:A2:05:04:98:6C:4E:72:57:0C:2C:45:25:9D:1F:8E:C3:CC:A8"}}
+0429{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBFWYkNzLDgBALMPtvAAABAQgKwtc55Kl05ws=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1836{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0895{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1605291686301,"flow_last_seen":1605291686419,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwRl+gBAB9QA1AAABAQgKqXTnZ8LXOeY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1842{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1840{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBHZYkNzLDgBgLMBeVAAABAQgKwtc55ql05wsG9KpdS7dHRt0qk8OQLnmAgO8TBGoUO7Wbkr7CB2VO\/Nr8\/3qu3Fx+VTEM6DkHpNe+L9MLatKx31\/+V3RTOzWA3a6ORJiznw7T2uDX9Gspq0SnS1iEbZJLgcPac4sSl0iQBEV1Gt03MZeS6M1UDTvkwT85Xi6481x+EI6GQQCNRWZHsKFlzqCqKQlO85fr6C6rD3KnMA76x\/T9FHfDpFsoV8Kz+YL9t0VYmwIDAQABo4IBWjCCAVYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUD4BhHIIxYdUvKOeNRji0LOHG2eIwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDQYJKoZIhvcNAQELBQADggEBACM+30vSMUKltn5CXBpEzGnRaLRdS+AEIWxL4m3MseCXj6ZTCc2qKmXlOU8eg6VuXJiiJCbm+6Htk8cuAsZNSr+wQt942rOo+W3\/IYVTNmBMds7sONzWUYDwxdbl1E0nZKubxz5x+0iXuDNtyRMH7paiGxgV9lxMQO2zwuz\/ccHjR\/\/UuQC0N0LaIMnqboruFAaufaJZmIioG28t9PLJFF8mzyyNfu03wKnVObmCvxkM6jSvACFo+K1z4sky2jglC1XTmh3waIbtLkE073ylUB2\/OvnTwQgM5u0eilgl5Lh3rS1u9VLdtHSPq0kunTuTNCgfeM6U6se908ltHN5cMvMWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBQPgGEcgjFh1S8o541GOLQs4cbZ4hgPMjAyMDExMDcyMzU2NTFaMHMwcTBJMAkGBSsOAwIaBQAEFBBfpnqACJ21J581zoMLQ4ieo8cNBBQPgGEcgjFh1S8o541GOLQs4cbZ4gIQC8UVYLrj9aLahvOzd+6bZ4AAGA8yMDIwMTEwNzIzNTY1MVqgERgPMjAyMDExMTQyMzExNTFaMA0GCSqGSIb3DQEBCwUAA4IBAQARl21TQUHOKoKU2eR5v9c8iWfM","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1199{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":20,"flow_packet_id":9,"flow_first_seen":1605291686301,"flow_last_seen":1605291686420,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"b.thumbs.redditmedia.com","server_names":"*.thumbs.redditmedia.com,thumbs.redditmedia.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.thumbs.redditmedia.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"FF:F4:6C:CF:D6:FD:64:3E:50:17:A2:DE:B0:F2:B6:9B:76:59:C6:75"}}
+1179{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":637,"pkt":"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","pkt_caplen":637,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwR2WgBAB9fwbAAABAQgKqXTnaMLXOeY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSGugBAB8\/gFAAABAQgKqXTnaMLXOeY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSPVgBAB7\/XiAAABAQgKqXTnaMLXOeY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MsNBwSPVgBgB9Z1MAAABAQgKqXTnacLXOeYWAwMAJRAAACEgWYU3PfgsQKYihFO3uoMJdTmDwQVceFgYyiRr8prQm0MUAwMAAQEWAwMAKAAAAAAAAAAA0FgT\/SKenNyDYhzxq42tumFsAOJ4h5zHyIcni8qFEN4=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3MyBBwSPVgBgB9bbXAAABAQgKqXTnacLXOeYXAwMAXgAAAAAAAAABUHjyoTMKS98mcOvWf3UpTo1d4pwHgu1OJbBtPp584YrH51mfdENeft+iSY7mt4F2ROOjr+Z8p0dhvBTbwFC9CZTY4BZgbNz0YaORcr22c3h+rYSnehg=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605291686985,"flow_last_seen":1605291686985,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD88AAAAAoAL9IJsfAAACBAWgBAIIClRf4AwAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0495{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605291686985,"flow_last_seen":1605291686985,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hEAAAAAoAL9ICE+AAACBAWgBAIICkv6YkkAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605291686996,"flow_last_seen":1605291686996,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291686,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FmjEAAAAAoAL9ILJdAAACBAWgBAIICnOjJUYAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm6q63bg\/QoBJXgIMUAAACBAV4AQMDAwQCCArC1zxZVF\/gDA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD9DT5uqvgBAB+wcHAAABAQgKVF\/gK8LXPFk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duD9DT5uqvgBgB+0cnAAABAQgKVF\/gK8LXPFkWAwECAAEAAfwDA2TZVj7uQEkCD0qaduyi4bmVPP7zAKvO9+7Wlc8AMGeTIIS\/CXAHw3XUf20VSt6oh4Hf\/WTHeXksbYFJmbfF89a\/ACBqahMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNKSgAAAAAAHgAcAAAZd3d3Lmdvb2dsZXRhZ3NlcnZpY2VzLmNvbQAXAAD\/AQABAAAKAAoACDo6AB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApOjoAAQAAHQAgYKiZy5yb0i6Knp9i3yjCivd+Ief6i7v0\/AghN6n2uzkALQACAQEAKwALCoqKAwQDAwMCAwEAGwADAgAC2toAAQAAFQDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0844{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1605291686985,"flow_last_seen":1605291687016,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.googletagservices.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0442{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAnf\/VJtBZoyoBJXgFGuAAACBAV4AQMDAwQCCArC1zxhc6MlRg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4R5AeISoBJXgAGtAAACBAV4AQMDAwQCCArC1zxhS\/piSQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FmjIJ3\/1TgBAB+9WjAAABAQgKc6MlYsLXPGE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB4hIaj6uFgBAB+4WXAAABAQgKS\/picMLXPGE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1605291686996,"flow_last_seen":1605291687024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"c.aaxads.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1121{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1605291686985,"flow_last_seen":1605291687024,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"c.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm6q+3bhHVgBALMPumAAABAQgKwtc8f1Rf4Cs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0885{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1605291686985,"flow_last_seen":1605291687060,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.googletagservices.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2072{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5u9ngBAB9f\/3AAABAQgKVF\/gV8LXPIU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vQfgBAB8vtCAAABAQgKVF\/gV8LXPIU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1055{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":547,"pkt":"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","pkt_caplen":547,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vXsgBAB7\/l3AAABAQgKVF\/gWMLXPIU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAnf\/VNtBZw3gBALMMpCAAABAQgKwtc8iHOjJWI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPq4V5AeQXgBALMHo2AAABAQgKwtc8iEv6YnA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0519{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEdXT5vXsgBgB9fdYAAABAQgKVF\/gWsLXPIUUAwMAAQEXAwMANR8vgLmhiHvL\/roVqe2Caz7DYPmgM\/8rDPsX4ny\/13EIeY6mjywRdp19TOqcB\/vZYopNOlSi","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0558{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEhXT5vXsgBgB9VtEAAABAQgKVF\/gWsLXPIUXAwMAVwBjIcDX7pZI2m9db6MAcuVvvIUC6ceyzuDWbbSXzRXAJkDVHB\/afLzUyVw\/gIuKH5PFyS0EExG8UKNv6+okw9ygDdaEYPzsXJvHkMFubJ43QtG\/NRaDTg==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0784{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":347,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ASUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duEnHT5vXsgBgB9XNgAAABAQgKVF\/gWsLXPIUXAwMBAErss9Ro1+6WKxQzbA1HvyO2qoAbQOglRe1CBh53dLgZCtV2ACUKhSnmyjVFRGbGXtBLE13Z2ZxluMzCOQstrDXbOCBfqA0oTe1kfP\/WjFcuHFHLwYDsJFwgABy0sIKc4wxRxixnnmuuyFzv9HosyYI9HJnZAwF\/8Vmi7Y\/jxpltC0ja2Fl12v\/8L5yPrBqISakOJCGosJstvni06OGZRb80kreytDKVbkCzkGRpSwPQPOqxHSBPhcLJGoiujnQB8sBhOisw6m2TPkQKx3AkxF0o9kn2igiSV3VLDdvY2GpMPPJdfkZ0kJRkPQBP2ho98yuoN\/87UYuLIJC8A5iJj84=","pkt_caplen":347,"pkt_type":34525,"pkt_ipoffset":14}
+2310{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0866{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1605291686985,"flow_last_seen":1605291687075,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"c.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2312{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbup5BqPsPF5AeQXgBgLMAmeAAABAQgKwtc8jUv6YnBoEnVTuCCFUDq3Gq2KIzu\/mEx5A+cKKGYDCvCCf77hR22MQYK1wSNhLsFBSed7wA0x3BYtdexGMG0kXIM4FVu32G\/\/DfFJK8gx9QaExXbWgHbC3olISpnxkjtgHwpCUDcHOfaIBNioN7bHZdcaugtOqxDEovbcPm2M8jTO5dsA9qbGK90lD1NFQuFYLkIklcBqKvSOn78By88Tbnm2Sn2PGsDSUS4jtXOZ5pVC8UUeA8FAsEgAlrl4jcPoOq1L+j0oIMPqZjt0CRParKNNXQOlg1A+MUgmjQvj\/6QBS9rR7NE3NFTV8oJk7X+vOj9KB29AwttAqAs1LCJbBq7tpoZND82L6IwepXP9RX8BBZii6ugXJLcfXUUWSTardu6NhI3vcw+8f3imAMZG0ynf2RGKtk\/ipdHq8fBT1DovFvrSvYR1jEyafhr8rZTHQR0+ZfvIjxCCreeZTURmKMxa7+xjNLa83XV7ubDhZ9ZKO\/E460v3j6vj5PiPH7t+6LCd8qz1P\/4u7uRu5HhmvzMAghjgnRdf8sjXa4+GdNfHpi1pbN45I3V6ULeAU84mDh676GwiFD0yCq9ZpsJ4wJqBakuEVyHrA6lpNRcwdE1PchcNxtWnR62NgesKoA\/UP8WBby1k6L8ae5HLUWTNIvIMyMgUOMDZaLvsCmNZNU0xP6IR97Yg2\/Zl9K5imjuqIiHeUyht3h2LS7CFutkZViO7oAhnu9IQSBWIvaOpMCU4b8Em6zVNJEouqYegRVK4Df7jHEn0TPug4G9Po67iAATfN7R+O+WA+xevY9ODR6YjxreK4MAdMIHgLAjipn17AsCHjKfr\/LbJOxgV5Bts7ZtTo1ORRDNpU7u0WPdt15cUWFyOQ1Y+aKm2WLmBnyorS92KWrMEkpw6cH3YUdUiJ2OrrMcH3TsFV9h6\/3\/gBfIbSDaZQlZ0yTmsXpE0QIDG3TTALbTk8JTeVelR04v+GvYnNgAAbMP1n7OdDLbeVEIgUA64RpHojO\/XGEX9verS2XOEp4x5GsX6IoYadcAPqeTW4WMYy8R1WZmOmQflBW473fh20GaNojLGUgF6yGaRGwD9mQHceL8tiL5yaZGbK1W+UEpsuVFAlgoFRBQrE5lA1D+UslFK9gsDNyqWS36s6dqrLgVVnFzRnGa9lWPvP\/4eSwHnN7dwcqwTnRtFVlgTHVXZ0pCnwY1bYXdeCpQwvxR6cmP2\/vuySYmCP9pq788pDL4ZGx7xtmz8l\/Z6Vx7c3GtPIWKo\/4orGPVKagy2q4MOwYOY3USuwakjlIHksDgG5vXIqqowHc1EcS8K7Uby5p3Uj\/xLEMg\/9jHSW3GRNzSKQliPLT7z2pMkVO0pZbmCibcpZk9V0AeX1wIkaEnE4oEGqJJLSowYrRVLcSoK0l+DNSeaZIWVBDzssh\/w\/GiIclDk3mleYHpQqOuHViaAWci1e\/KJjRvFvWwAR4GEfQVBqhinu1zfToNsnZGwYPB5xMpBDmei\/jkAJJxF7qlo0nvPlxo1tT4Y4ehD0SbjSg36j19alRO+\/zw3pfkK9SkcrI25p1EOBT2KD0g4QfzyaPgnPrrtDfhnDBPxGXzOnwRZHFqM+oQilvpNg8ksgTtCQaHXFBUdM5PfaXh\/TENWbmksi7lHaPs54fh3EIeAONsz593r0F\/mdr9BROKau07jgwH0cj6qGixkFkVkBqtdZLDsp+Ro\/UGT0WhAj95GoaG0OQK329HBnbR0bMvIt0Ax8XuqgdYMzAVG5lgW3KKag+d16C5aRF6zGYExvfwTYot1gaVdG5NmX2XOoLl+yl+3mnZm7geLOjzblMvtXcpQAOwf6EoITuXyhCB3r4629g==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2319{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2307{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0861{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7DxgBAB9X3NAAABAQgKS\/pio8LXPI0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7ZdgBAB8HhmAAABAQgKS\/pio8LXPI0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj7vJgBAB6XMBAAABAQgKS\/pio8LXPI0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj8E1gBAB4W2bAAABAQgKS\/pio8LXPI8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDjDtACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqeQBu3kB5Bcaj8JwgBAB32xiAAABAQgKS\/pio8LXPI8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2324{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":23,"flow_packet_id":6,"flow_first_seen":1605291686996,"flow_last_seen":1605291687096,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"c.aaxads.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2310{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngAr9tBZw3gBgLMLsyAAABAQgKwtc8qXOjJWJ9vuEw\/ThTFafwMs0DrqDhjt\/i96kE2+0HTP3V8xo5ptFiod4XDlQt8wanBjOh1S2A6UmA+GAuCiinErBOGpc5DkbOdCFV4ps8r9PFLUCePhtKuX7JsZrw8fVmfB5AkvCVZYBblre48pvBbPFjgRB2X6XBSoYw9t1IcFRJo7clAFlcGtXpdfqrFT\/iJud6u+VH1tqjxtBBiN5Q1JGtFJFpRI4o2j7uZp74uaLSqmlm182uCqhGk2puPfMTWYa+vzyx9tFQRxhSvVB50WaW9c216Qp5LUfPiQ+lKdUdtOD4MZLGDQrs9iHDd98VbRPN4f\/J7FtFKYHzLfEBLBTArNKXO57M8WrqNCAZcfFrhUiXyg9wptAZtr9TNC2O9rGl+DJuUs5NIKA7wzQpT+CWOF2QZ2NrHdFFMcUFjV8riiDLRcV+Ei7rnrGWSkNrJA+o\/KQKX2mvWTGGcXyUFTbkQjdgt794b\/3JMmtR\/fK65SBKwveo011Iz5Igx0LYddUxNvawT3RVITNGMTRWB7gvEnqv5eCI5QeZkDCNOOzfNfaMVL0p8g2XuqzdzWkdS6kA3vk\/bDP8PWhjX39g4+wPOa8ZLgYCrSPPJ5JwSYlAPJbOoLnHZgd0mselHZG2aNxPcQQC1uc76fAzy+\/P3dw8HUl2YxLiRYGC13yXo7HQOFyNBP7NGYsiQmKWPGuEs8994C\/Sr1\/A59jl40C33HSW06u7esdSjbVxOm9S+SvWijad0MxmrwSOakosC9QzVZldifXwaT\/A2yuzzNpwP6YdZ5Zg4iLi9bGzYrH4FqqdxrPWdai7mAuFazdPrvRhJRaUHHlyWOyUrn583ZZNVUXJO9IxlDTfmvZlYeaatW\/7ILb6N8lUkLBdgyW0+NPJvFQwb2Jp5W3LLhiRKLV79K0X3V0eyz\/1wQuwWdesHDNr2ieMyDQTs5Mjlp2MGxa1Tvhq0EUtb427A6krKrlBe5QvySn\/uItxSkwS0yyWselmTV5e0DymOy0zYm7Q2qL38inrdHHVxShu8t4QS++AvJIbBTMEbQr3AjD2Mpt\/KQgbZbaarjyluiYDru\/B2JkOzl2ha5xg3jV01xMUTWZB8\/ADblVo2CFOHyCf6SM7j8qjrJOJB75egtyKJNU64nuxW2cVHoAhMARmsE4AHltYf3KwjOi4ptCvu3GA8hw75LM10IyIwJKbG9qKpPAAqJxyU\/jsUj66kk+OxPWwd2PFXG0qeGoiT65zXXUS1g+8wfY9vHVo7SE6vgT99i8oPFT7ApTJtgr7X+vzPgbaW+s\/Cnxvrkt4cXI0wVNDnjcm7m83juvCHAcFdAMAoDplkkXYth9pcsUsdD1BCGMC+FUkZct300JVtYsbGFZP5ekmtmD9Y6oYoA9kS4abbkhPFGmwvrqNRJVma5Z1SlSQJBbHNSaSgWxPtVHScynQ6blJGs0jaKDHBSrVX\/cId5wijWTnUTFwXwEKwkLaYwMAezGv6T7R9wHgXdtKHFRGUgQpAWLUCXxAez4bPiY7qIkDd+ryUnsSICyCsGdyJGzS8jfOSa6DpnnW\/AQZr5gY26T9cWWeSB1jf+rlAickGvJc3xMgPTKyUORYDHjkNtNo8CQ8Pwq9zLtl1WzP7i069YXfEft0TIv3b2Tt2FPeUQs6aXasRf3738A1kzbNKy1CRq2IyUbV51CWfTVw+nGlHgYDwVG02r4Mh0tgreiAIhqbIF5KJia88jZNT7bjA5JI1kBWBfmvsAoemVFnBgKwaWdajdwQ1UUzEVVseEw\/0cD0FscT7pWAiRcD+\/w1c\/bT1N09RTv9MsZAAsl8iKFgZKdQ4eqcI8sxd6hhaoTQ0f8i0muhBw==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0752{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":324,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ4GPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngCCttBZw3gBgLMBi9AAABAQgKwtc8qXOjJWLVoULR7Q9V2rIPKiUxoXF35KjSgvcWeMi+kPpQEQL3c3SVw9jyx66\/tE0W2vKsddsGR13DkTjb+96PaqotZhcDAwBhjHl7i5HNjqksylN1eNcm5CLUY\/RIzP3IduDQpA\/Gi7c+a6oXIZKXtBMdUqSG0cqtChn1bs6UKk9l6ZElcu1VrsS2bEkuoQN8DFZUhkOsADcvJAqRbEqV8jfgvbOh4cSTYRcDAwBF3orx51IqRkoCntzkBk\/RIR6nynfZe2EWZiT89CxGE7FN7axExT0Toj3NWz1a8Zau\/OsMziC5kYMpq5cyfMy1FteKvERr","pkt_caplen":324,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AK\/gBAB9c2oAAABAQgKc6MlqsLXPKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AgrgBAB8MhBAAABAQgKc6MlqsLXPKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AkZgBAB78dUAAABAQgKc6MlqsLXPKk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPm9ey3bhIVgBALOO\/FAAABAQgKwtc8rFRf4Fo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0539{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":166,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnDcJ4AkZgBgB9S2EAAABAQgKc6MlrcLXPKkUAwMAAQEXAwMARUWhDZfuxiMk7fQubfiMm7+27dZfRH4UDKnLUK298SJF8Y9ySD9V+KA6mu03fkwRXwBD\/EC7HmO2NY5P65C733Gt9NmGpg==","pkt_caplen":166,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnIcJ4AkZgBgB9fylAAABAQgKc6MlrcLXPKkXAwMAV\/z+RxkDlJXvgJNE2QhL+h5zglcobEvykxlM2AKYZ1uN5JO5pwiygkhPt1HcMkVQ4O1yuZIvKq\/6AA1RewBjfYBqXii4ludFjv0O\/IMDmsQbRZqJwFtiOw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0807{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":364,"pkt":"qtsDr8lk5EKm5WPyht1gCh2fATYGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7O2lbABu20FnOMJ4AkZgBgB9T2pAAABAQgKc6MlrcLXPKkXAwMBEel4+2s26Q\/\/+VvqkI2wNh1vDtUyVrJe1S2V8IXhhSKyES07bw5YW+WDEWHhUs+h3LkoPS4AlKY2do5hp3rzAARAqv5+t1ykm3xgDzVh3cRIDZoL1OdifHKhz6PJzxZsq4EE6ZKWId9JwohEbKkSl8QtpvPET6gzn1rPY+ONP8e1W8xQ49JnxqyzqD6JTv1UkNGZmQnFz1tZNZceTwCHV+E4k3QZV6+lk6JSTdUmtBaK9HcuJezt2oBrsjqnytxmKjyy\/TtPkrVTmQmWamPhh\/IMQ+Kkeycct+uiMQ1LoeqV\/KxEH4emAjvSUkzAdPcMT5nLzFy4gAIs51Tmhmbu7RRXJdI3qFS+vYeEI9GbLFFxgg==","pkt_caplen":364,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs7YqAcsBIEmLB5kd7IUo3\/YpAbuVsAngCRltBZyHgBALOr2VAAABAQgKwtc8ynOjJa0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605291687485,"flow_last_seen":1605291687485,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ4AAAAAoAL9IP2VAAACBAWgBAIICruOxrcAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRnoyfz12foBJXgAjWAAACBAV4AQMDAwQCCArC1z5Fu47Gtw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PXZ\/60Z6NgBAB+4zMAAABAQgKu47G0sLXPkU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1605291687485,"flow_last_seen":1605291687513,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"securepubads.g.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605291687514,"flow_last_seen":1605291687514,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5MAAAAAoAL9IOSoAAACBAWgBAIICiRA7pIAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRno2fz1+kgBALMIFtAAABAQgKwtc+abuOxtM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx0ItjeUoBJXgPGUAAACBAV4AQMDAwQCCArC1z5pJEDukg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5RscSsegBAB+3WHAAABAQgKJEDuscLXPmk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2N5RscSsegBgB+1xOAAABAQgKJEDuscLXPmkWAwECAAEAAfwDA6sAiYRVVUdNeU6qgV+6RMsMCIZAzjq+68NrjIRzdTDzIH6Nje53IGXhSc03yuiyvZsWos5mhh1w53jt4PUlCtOeACCqqhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZOqqgAAAAAAGQAXAAAUcGxhdGZvcm0udHdpdHRlci5jb20AFwAA\/wEAAQAACgAKAAjKygAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKcrKAAEAAB0AIAjq9VoWgWPxpcjAD3ywxiF\/9WPMGppuo1idcmIeMRgoAC0AAgEBACsACwq6ugMEAwMDAgMBABsAAwIAAgoKAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1605291687514,"flow_last_seen":1605291687545,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2322{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0876{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1605291687485,"flow_last_seen":1605291687552,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"securepubads.g.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60aP5gBAB8YURAAABAQgKu47G+sLXPnE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2315{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRo\/mfz1+kgBgLMKQ8AAABAQgKwtc+cbuOxtO6MvXMzu03ZWsKybUfb6UYyBk1V33eePkvGWn+QtR722KNYYC1p1vtYLkTlouVpBLlp1ngmYn8E\/MwHrpEeYncZk\/Z87CwZACHdBSSLosaXqWoD+J+gOhfiwmzIn5MXHHvCTcr\/Mmb54+cThQtlU88vZKA+BKDnQHSsq3ZSy8OeNDJeHXevty1EBIfxsXHNegUyT1whCvdrSiEXm8IORaTguxnBiblzOXDmOEAhi\/SF40Udu+aLXtd+mipeRk8EVaNOKW0AG5iC2OioOTFZOTBUHRT3ePNcZk+\/QznP4ruiB33xhTT5iTefumZE6mloXgquFPY6NY91fbraM7z1IJBuMBats2hQmEV+\/x5dXAX2yz6tLjtru4Enlw\/cmFGmgCpC3T+13PEIJMqE++S\/OdQly6kI+qGQ95ueiFqPfzuxhec7TtUzSQ70z+SwqwWyNs\/0n2g2xA7huFOfDpTetCgezl2GpfGOAwrNbJjSb4Wj7H5AlhCSMQuAuR\/g1YHqRFdToYg\/ZjSgx+0ovVXjl9o4GJf72LMqveC\/ZvcTsnmDkk5HBvmHCwoHeSKm+g0BsdrO66dWqmVCGwuh3RkslWRgc99a8OASUKIcb5hC9IZSxzppbsCmTvlhSCiPaTU9uLsaaz02pUTIhjiosh2XQPppzi9vLPdpcaMWdVJ7Cvm0nvhjvf3h6q4A6ZN06NfyqWonTPXLsE7i\/ypKerYh23sfKPn1f38UOhkzo3qVSg9eUPVjbMl8kCMC33FqbFXg3pUs4UAFU6QU355GHEZ54KZycodyjDyEWl2ziP6xLWjUAT7p128tayHvKt33Hjus+XJTkCi\/fIEsJCjz+fVxFOuoIxLfWL6Dq3ol1bYPQzotCJNa+BRfcMGpru+cALtgRTHSmwGWMk4Sr8U35O8DIqryZ\/pXPMenafdsvPOODWRtJCLK4QhSMZW\/i9bAAhiza8pHaH5y3onOYU7253QbBktIPZNSD45o56LUHNG0\/KeOpHotlGA76f1EmULjY0Q3Zh+\/IVKxo6FfB0VBTua++gj49\/84SE22AF3SXiZmYhbyIMUnCPnFwF8a1cB6oV6dP9CpEJ5418pbUIpF6A9Ab+XnWiqv8P21gu7nH2FZKOcFf07v10reWrapaJMBoC6F83PQ+LartovWuNzQJ96z\/NrFPwFbXasrCGKN6eEM90iOzKDA93j2vmrzsAx2CPMpQjTqB4ZKbFbdMqukg4JAl4p0byQPPOUqf7AS7uIuTqdi3eiUKIarfOcJTMbW1xk2nTC3lRPGqcCM1ORZ+2E0wC\/h7Msh7WYTn0NUJ9BBnpf0g\/dlgykw6eP7VQxp0QqnWorKDXy3JtrIGm0TCJjoFROKrnncc+RCRymeRF8rKg\/TtqtO68Ml39KT4bEFXZM8BqnOmz1it5u8jk9G5eSVD8zcUVk5xdpUIGLgTf7PvHh5ZCdJ1s7KpwWd1p7E2nM3cfKkFCIXHXM3N\/HGYHyFZtSRDoZUDpbPFrFLVtP7pGEqqgc4GxqKqAryJ4+rPd2KSLbGnxuIx633jX\/CMr53OnPh+\/1sjrydaRxTiIUzSRc3AAYrc7muUXJqIj2KejGQMnCOY\/cw97Y1fr6\/99GaTbuK03ETAwd6UPKUy\/9SPlomafsHOoSwdURAslQAh8XMWA7GSDTGZVGlp0OrhFkmTqrSeP9cpOcRi9ou6q7B0srEi5rEgDJM1LdpY9JuRTYgvR+BzGFPrzPRPBzlLgDH73G4YV3nu6FXoeiwT7lOAzOmUolCcWIajuC5sdarhS4WZgNRU9okrRn9TxKJ+nIRfeHJy7SUXtS5mk41NLV+t9gdyb1839q7ePPwy3Wlg==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0570{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":188,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIYGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRqWWfz1+kgBgLMHClAAABAQgKwtc+cbuOxtNkZemhbgwASoxlCtW1abhK3B\/tL3dWopbbjUQhTzBLCR4uVXy80v8Wf5q6EgkF+XnIGPIVZVc0cBICLuUJqZmJLhXpFJEmb3RvVqvx9df+iFHA3ksavgxAW3\/7kL6+vaMI+iBfh\/I=","pkt_caplen":188,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60allgBAB9X+gAAABAQgKu47G+8LXPnE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60anLgBAB9X86AAABAQgKu47G+8LXPnE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX6T60anLgBgB9ZN0AAABAQgKu47G\/MLXPnEUAwMAAQEXAwMANT9oW3\/XQK5SJC6KQgbXi2eFePZr0gCln14p\/cwjApxVuoE5M9TY1+i4LedI0BYrkXSb01WC","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0559{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PX+T60anLgBgB9ZntAAABAQgKu47G\/cLXPnEXAwMAV29dzDk2yENRPtgCfgb4aS\/RWDEENEGG1oZ8c3Ud8ug8eRoQG3wPCo1PfQYszVRp9jrCq\/BhCcf2YqFEHFSegJyJAVSrjTHSw6YRrq9tZ\/CPutF9DaUCiQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0800{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":360,"pkt":"qtsDr8lk5EKm5WPyht1gDGJhATIGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACs2RLCx1IBu5\/PYED60anLgBgB9R7pAAABAQgKu47G\/cLXPnEXAwMBDSpry5NwUc4R2NKmw\/wnh5V9PbkhZgbfUw3D3CWYt4sQwXNPHpIwaggGymNA1jx7zLnu571keejl+YDQ8E7vHFDz41UN1mnNBdthzqy3FtWgUwPKbL1xd45xzE6smlRSEJ9J+HVF0YA\/Rz5NWr5T5KqXNwMStrIO1P1uN1K68NWhezS\/VI7IIVYtcZV2O8X53+Iu8HUNOopWLPxbLMqNcGTfrhRynzdpmOioThQOBsXahdzbZSPU7vhneu13R9D9pqiANs\/uVpVV3RqE50G9CfvqcFPwm9TvAaoXRQmLEdoNT4imHOd4337f4xA6huTgW1xxLHZqk79F7QwVGxIexEXOvYKcAQ8eKQ7Q4BK2","pkt_caplen":360,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAKzZEsIqAcsBIEmLB5kd7IUo3\/YpAbvHUvrRqcufz1\/kgBALOHWOAAABAQgKwtc+mbuOxvw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxKx4ItjmZgBALMGodAAABAQgKwtc+mSRA7rE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1835{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1605291687514,"flow_last_seen":1605291687606,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscS82gBAB9W8AAAABAQgKJEDu7sLXPpw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1837{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1846{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGxxM04ItjmZgBgLMLePAAABAQgKwtc+nCRA7rEBDwAwggEKAoIBAQC24C\/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMICKq\/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK\/IHe1NnF9Xt4ZQaJn1itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j\/018QsIJzJa9buLnqS9UdAn4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0Xsh5ENWV\/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcftbZvySC\/zA\/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAdBgNVHQ4EFgQUUWj\/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7DaQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwdaOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk\/gNHE+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly\/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zuxICaEnL6VpPX\/78whQYwvwt\/Tv9XBZ0k7YXDK\/umdaisLRbvfXknsuvCnQsH6qqF0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp\/BIAV0AecPUeybQWAwMB3xYAAdsBAAHXMIIB0woBAKCCAcwwggHIBgkrBgEFBQcwAQEEggG5MIIBtTCBnqIWBBRRaP+QrwIHdTzM2WVkYqISuFlyOxgPMjAyMDExMTIwMDU2NTdaMHMwcTBJMAkGBSsOAwIaBQAEFM8m9Rj6yX6PjLNC4BwvahCejl8KBBRRaP+QrwIHdTzM2WVkYqISuFlyOwIQDGRracJVX3n\/Q2O0","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1217{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":25,"flow_packet_id":9,"flow_first_seen":1605291687514,"flow_last_seen":1605291687606,"flow_tot_l4_data_len":3965,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","server_names":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=Twitter Security, CN=platform.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"2B:30:10:3B:07:2F:F2:EB:3D:08:E3:BB:45:61:F7:A3:9F:4C:A7:92"}}
+1282{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTNOgBAB82rqAAABAQgKJEDu7sLXPpw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTdmgBAB7WbYAAABAQgKJEDu7sLXPpw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTnegBAB6WRkAAABAQgKJEDu7sLXPpw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0554{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OZlscTnegBgB9QTdAAABAQgKJEDu8cLXPpwWAwMAJRAAACEgwJfCy8hYegf8vK1gEd771FfULAnWR2VKZ360NviDzVQUAwMAAQEWAwMAKAAAAAAAAAAAEwtwOfUQVmc1mHUWH7ov8ZceZBEvh4p0wiGKwlhnIvo=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0565{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2OfZscTnegBgB9TOvAAABAQgKJEDu8sLXPpwXAwMAXgAAAAAAAAABjw9BEk2YJbGDeK86aZew3Mf7D\/Z5M1FLMpMQ8HdpJQ50oLyOWImN6mqth6m\/RP\/40Ks638qoxbNS0Zu2LZ7kKA4tnQgaNqn6+tnLpBt0GmlBEff7vHo=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605291687642,"flow_last_seen":1605291687642,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxgAAAAAoAL9IGTNAAACBAWgBAIICsL4XLwAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfuuGDx7sZoBJXgGbFAAACBAV4AQMDAwQCCArC1z7qwvhcvA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxnnH7rigBAB++qzAAABAQgKwvhc38LXPuo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1118{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHuxnnH7rigBgB+7zOAAABAQgKwvhc4MLXPuoWAwECAAEAAfwDA2DQ5OxREVO95xl1cBrII9zoe+SeXEyLTL2RY3d38wEfIDXqjNmx1LhM5R6ahoCjZqYoEOLjS9cTu1r8mF5O4+z+ACBqahMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZMaGgAAAAAAHQAbAAAYd3d3Lmdvb2dsZXRhZ21hbmFnZXIuY29tABcAAP8BAAEAAAoACgAIamoAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArAClqagABAAAdACC7Hzx8NSeckRnAno888LeBaZNAd1ZxsSahddbprKYQMwAtAAIBAQArAAsK6uoDBAMDAwIDAQAbAAMCAAIKCgABAAAVAMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1605291687642,"flow_last_seen":1605291687678,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.googletagmanager.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfuuKDx70egBALMN9QAAABAQgKwtc\/EsL4XOA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1605291687642,"flow_last_seen":1605291687721,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.googletagmanager.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2063{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1076{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":564,"pkt":"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","pkt_caplen":564,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH7+agBAB9eOfAAABAQgKwvhdDMLXPxo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8RSgBAB8t7qAAABAQgKwvhdDMLXPxo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8YwgBAB790PAAABAQgKwvhdDMLXPxo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvR7nH8YwgBgB9cEoAAABAQgKwvhdD8LXPxoUAwMAAQEXAwMANTuiWZPTyxL8Q\/\/nF5weNXBYVnv5\/NleIQwSByQxH1HnaopR3O\/Q1ECJ9cRo0CMSKlyTAdFB","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvV7nH8YwgBgB9SQoAAABAQgKwvhdEMLXPxoXAwMAVzmHwSAiWI\/k3CJkJeFEnnTcskuW6crrkLQFEBiS0vl+XR65kcLDbLlGxXq3eodCHKGxcH9g9IbJ+rTMvn76iM92Yab+rZhFJh3wRl\/MCI63sBOMO1tThw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0786{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":349,"pkt":"qtsDr8lk5EKm5WPyht1gDI7+AScGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFgAAAAAAACAImmABu4PHvbrnH8YwgBgB9YzRAAABAQgKwvhdEMLXPxoXAwMBAizDx2A1A0vbHRpYsfJI5RLkH3Jzhy5MjXSfFOaNEDo4gIQv2afYdeTg0OoFqkrBqH2JgG\/3iCLCyAV0bizD84zlHn\/YzHdrnbRfFiAOqKwPmCJMuFCJ47FDdugVdNO5OYUwOgyMcRGRuwUlEOi9EZzNdnFOvKsQcj5pk02n6S1ZaskxVuWki00kzw0Zm\/n+56YxFaX6Y5JKH2AHrLmn8880RzJTHvGKVLI7jDzHn4kpYyB9TJdIrDoyKdAs2QmImGiwQGR9g3ZYnyDIjP8dFicLDwD5aDkbL9WTCoq7S7qHDwIUvee\/K79qfVH+0wgciRNqSXH4C6lURIbSWdTKkwXREQ==","pkt_caplen":349,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgWAAAAAAAAIAgqAcsBIEmLB5kd7IUo3\/YpAbuaYOcfxjCDx71egBALONNeAAABAQgKwtc\/P8L4XQ8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605291687761,"flow_last_seen":1605291687761,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bcAAAAAoAL9IFSZAAACBAWgBAIIClvEqOkAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUg0Stm4oBJXgFBhAAACBAV4AQMDAwQCCArC1z9gW8So6Q==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK2bhSc1VJgBAB+9RVAAABAQgKW8SpBsLXP2A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0815{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1605291687761,"flow_last_seen":1605291687790,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.aaxdetect.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605291687800,"flow_last_seen":1605291687800,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8MAAAAAoAL9IICJAAACBAWgBAIICk1+jVUAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUk0Stu9gBALMMj9AAABAQgKwtc\/flvEqQY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkT\/jDfEoBJXgChEAAACBAV4AQMDAwQCCArC1z+HTX6NVQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8SdXV5FgBAB+6w4AAABAQgKTX6NcsLXP4c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAiUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MN8SdXV5FgBgB+6QUAAABAQgKTX6NcsLXP4cWAwECAAEAAfwDAzHyJHiw4CvySm\/wmMZSj93xjRQIb\/7lSao6BEVVselnIDSsTTPKNSgpPqgoZjsi0To1XtuBv2kZEOLdyhUMYBkRACDKyhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZO6ugAAAAAAHAAaAAAXc3luZGljYXRpb24udHdpdHRlci5jb20AFwAA\/wEAAQAACgAKAAiqqgAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKaqqAAEAAB0AINkx20sEA6mpd6uYYzNH4dLwnJuropRMU+claKQ8nqNoAC0AAgEBACsACwrKygMEAwMDAgMBABsAAwIAAkpKAAEAABUAxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1605291687800,"flow_last_seen":1605291687829,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2308{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzVUk0Stu9gBgLMOWBAAABAQgKwtc\/nlvEqQYWAwMAegIAAHYDA986N90EPY0pqv1uo704Oc7mDSIMAuof+2zXEsC9vjOtIAaF+rCsUiCOU8bqK7O8i4N8LINKpStTbOqmpKKpf9E2EwIAAC4AKwACAwQAMwAkAB0AIEfVGQEfjWG0TCcA8PWASSiXGqUaFxrcUf0h1+vwXiAKFAMDAAEBFwMDADSHjXx66PAlT7YZdb4Edet48yvNoM0j6Cb2hpfeIGPYWQJCgsVspml\/1p3iFmybFSMVs2h2FwMDCmEhUhqhV+2yz0cSbkQH9lav7bT82kgBbWAw1IYOOT9B3JxWFWmXD7uEuPjPcdmhslXypV4rmKGSQy06IdRrUi+wsd+JJNR7bCFaCoiTtJCU1vtx+6tWf1SFJh8gMiN8Z0h+K5ZuYc9nVzTuO36F4tydcCBkt93LtK2lW2nIPgmGvMVq7wzox368u8qVGrmKNLun\/5VQI2v1JJ8OWMHYEMDaQ5SPuaIoyebA0fSrb4ySYZ8p6iQHvbX9jKM5dD\/8mxVW9X7fa8Hr8O0TKvymknDqlsWIDA8oM4wlpTT7aOQ+JdozUrASqV6M9GVWIpQFshAkgZ9yal2PLsP53JZmkHf3i1bO7l3dU0SODPcisKAH1aKfoqk5tuLox\/XiHvBOBzi9ZT6u1P\/dsfon0a+QfFedH3NCkZUyPzjkoretjUVGXZ362zN9X6TDT2zTkoF3DkJN62JdkU6+S21UdnbtHedmDr02FXyahzjO2\/y1xggtUwO4iUukN5Xb2hNUxI4Q0qayndGowMyr0CPJpC\/8QQLc4\/p1h09fosbxbnLPXSFJRqDpA\/VSuVQvhsn47sJ2tFr9XaSfOtWQDieEsdzTagfMkmJWl6gSwNvVAyJS\/SbcGY\/T366GKLpbsEzcIqxn1umDHFdeIuFYwMHTxJWT0tefr6zlqCe+ngeRoJtgUydMN3K9J252bIEg2ufM0VEdvlq9VF1TpSSAFSiMvM\/ptHIk3AsyNSbs8eC0F1EsiRQ6ZzlP+ofSEXD3lB4wioQ4bRWVLVqIQfHsZKm9knD9BRUnG6QagZhIuk+obzg1cjqvl8O5J6htqt6iS4QM5FX2YqzidycYBCBhX4DN0GOuxvqs7V4U2tgEgKubyqGUKstfW6hXL88PHupDuyehtbuHkwmuw02E2OsdvfHPL46lNQOC7Zq8742UYfo9fmX0owuiDEV3poG8JFG0LFgIhBTm4GGh7Oguj52K2fH3IK421Bmw3JYTJuTUK8Hc7ws6tMddeOqAJi5MgVcLuiV5Tj\/53PeRMrJdzy76F60HBidjsseom3SrvHnMQPXNfdk60b+fN\/Ll\/9+FQjN+2AaOMJpindaTt9FGzo55itFdo5rUW2FcZNf7XxDcriYmAzpvplUiLUllOkRUXg7DFVPLw08Fyp\/+TdCKeTzX0Nb+jwZb8hfguJJqyDMq1VlpSD03XF\/NFbLJ3pF1+MwrPeiFNekNKaewi5ljgkMFym\/oj3e+h14PvKPqR4ZrhZx+dDoHWI6zpHlWXfg9QkUs2Dpaid8MXPNRWS+xyNz0CpW8Sf78ifbVeQ1xCAhYR0hbCJerZ\/3Rx280wUlr9dL4qu\/4wwIsBxkk2ivD7f7KEkMvblJ8x+BpPXJLUSOmV3JHLqIOIXU\/U9yrKaS680U4bwEnouZ7ulUmWb2kdUgOOd7oIBkdiv8heVUWYKirzTpaVNJmivPSsKv6ffjOXtermLJsu6jXg4gDCHkoVeEsRUcpim+o9irST+Wb6JAGBVhDDotAhNlhrZGK0Mzcq8Vj5aSHv9geS8OhTYMGZJMgjvvOLgiEkE71dsvB7E5Ms2NN\/sF52COj0C04NGu8wFrzrQ==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0856{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1605291687761,"flow_last_seen":1605291687852,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.aaxdetect.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2316{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc1q1gBAB9cxuAAABAQgKW8SpRMLXP54=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2AhgBAB8McHAAABAQgKW8SpRMLXP54=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0775{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":338,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARwGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYCE0Stu9gBgLMFTGAAABAQgKwtc\/nlvEqQZMO39y2YEtMwrD1hNK1gwyOawcrBdgg+uwa2UaP5emwVrlpL2Bu0MENPvXs3VR7m0OOpJ\/esXJLmLwZaiTavsQY6Hy6+3U8Ql6iTZOFwMDAGFdVvKrB1PAcxwOosv+FqAZSYlCJbjCI3sLpmttzH1hMzR1pZGxDhXdDuHmsS0kTeiZGJCggL\/qO8NHmWdjnz4epHcw6j8ApQ0+Sdw\/v1sInfQgrVHTPdTTCHz0ukgUdeKDFwMDAEU1pPpwpIx3j6wshpAVPzOj2IQ612idtI4LX\/vY7nZDjQ5ldJIKYd6Jp0MXFhV76Jj8LNKAs0LuAceKZOc95R\/\/cZbbna0=","pkt_caplen":338,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2EdgBAB9cYFAAABAQgKW8SpRcLXP54=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0541{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":166,"pkt":"qtsDr8lk5EKm5WPyht1gCTrZAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABoU7PRgMoBuzRK271Sc2EdgBgB9ckmAAABAQgKW8SpSMLXP54UAwMAAQEXAwMARXcxrEXgBPL2v15tl2nStBVqZ08\/OC5L7jjAkbsqzg\/g\/PKuN9sbeaW7ha2beU4SMEcj4ZYmpCEr9kJAmqNDBq51Wq4Hjw==","pkt_caplen":166,"pkt_type":34525,"pkt_ipoffset":14}
+1044{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":542,"pkt":"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","pkt_caplen":542,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkX\/jDnJgBALMKDhAAABAQgKwtc\/pE1+jXI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYR00StwNgBALOrxOAAABAQgKwtc\/vVvEqUg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGhTs9EqAcsBIEmLB5kd7IUo3\/YpAbuAylJzYR00St3VgBALc7pKAAABAQgKwtc\/wFvEqUg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605291687896,"flow_last_seen":1605291687896,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYetUAAAAAoAL9ICsYAAACBAWgBAIIClOdBf4AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605291687931,"flow_last_seen":1605291687931,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF0vYAAAAAoAL9ILpIAAACBAWgBAIICnCSuGYAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+xPN32HrWoBJXgPVcAAACBAV4AQMDAwQCCArC1z\/tU50F\/g==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYetYTvsT0gBAB+3lKAAABAQgKU50GIsLXP+0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0810{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1605291687896,"flow_last_seen":1605291687933,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"id.rlcdn.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605291687933,"flow_last_seen":1605291687933,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACgGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6EoAAAAAoAL9IFfFAAACBAWgBAIICteKYnsAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605291687934,"flow_last_seen":1605291687934,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJAAAAAAoAL9ICibAAACBAWgBAIIClHJL\/gAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWRoTRRdL3oBJXgGFBAAACBAV4AQMDAwQCCArC10AQcJK4Zg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF0ve1VkaFgBAB++UvAAABAQgKcJK4icLXQBA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0829{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1605291687931,"flow_last_seen":1605291687966,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5XSRuhLoBJXgDDhAAACBAV4AQMDAwQCCArC10AQ14piew==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+xPR32HzbgBALMG3oAAABAQgKwtdAFVOdBiI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6Eu2IhOWgBAB+7TJAAABAQgK14pipMLXQBA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0837{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":31,"flow_packet_id":4,"flow_first_seen":1605291687933,"flow_last_seen":1605291687974,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL5ddGO8iRoBJXgMJGAAACBAV4AQMDAwQCCArC10AVUckv+A==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yJEjS+XYgBAB+0YvAAABAQgKUckwIcLXQBU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1605291687934,"flow_last_seen":1605291687975,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2313{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1605291687896,"flow_last_seen":1605291687976,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"id.rlcdn.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2314{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvspggBAB9XGJAAABAQgKU50GTsLXQBc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvs\/MgBAB62wnAAABAQgKU50GTsLXQBc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2324{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1467{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":849,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAxsGPQBk\/5sAAAAAAAAAACJ4z5QqAcsBIEmLB5kd7IUo3\/YpAbuayhO+1Th32HzbgBgLMLGsAAABAQgKwtdAF1OdBiJdT\/2nuk+XLH7QDZcKXWINh0Q8LFydUo98mtn4EyAh+ny6U5oT1ER4pfsT1FL9F+zScOlvGUsChhWvlKneAR1GTP0rrWHjn2tsjgiROLM\/WzwlvbtFNaaajgUb3BGDi3HuM\/L9K5w6DFSHc6kx7T1AAPZPjIDtRzxdslV1gNd7aF3cXYiN8jxZZmKUv9+gKL5emUCeUYuheVhjAeVZtg4EUiHRwr1hvD1lwr21OtY2doza3l+NkP+O3KIchyfOd0bQovqYk5STVFeOjNSmcn8+v2ek2bqA5vm0R3OVGUsERnqaWVchDCSmB7qh9ELFIr9B33ykeB6Qh0gBFdNmNwaJRGmcsN1eLEaDDN7KGQNrXHHFLPWxMoJKR9Y1H\/ReDWyJYBTyIwQlU2QM2Dahh4OKczuB\/ZDQrolOHR+CHTwS4RsPPNxuJA9CfsdHoyFos6lWR\/T0qCRLNEKB9XWKX8lAdJe\/dLq9XtAnoSPGn3k1J8YwLFk2DbXZnE5A3nn\/OurUTR7xqC2oeqhEBP2m8DrJl7EQEIonX\/mxjSEYjaD+281INnkkKUq1VwAD0ueilscmDNL03fpsfrqQaE7ukyh5TitGNxMK05RjFCfuu3sBTaxJr+utcKyM6uBwNCSIPoS4moUmAUXkILKT1KHt8eG3oCpOKTPyWJ\/puyvK\/miPFN\/R5UgpYzxpHMr2vLiNG8jVUmp0ocrMYtHrg4wCQR7q5aQUjIVzCZ0l1DR5Ef+oRr63HR\/ISlFftk3Nko+nIyY\/eldVE4muNQqjCCYVvxO29udPpTfNIB5BgrBPvC0vth5l8kSVknfnMXdloehK+SLxQIuWRUnYSYYRksPQgNbZg6Bl8A464fB0KWhq6Z35YFeTANESHLgfA+j2F3QKr+dUqqE\/jneVprTyqYR83VuI91WfRUb7tS4k6wY2wjEyyBD\/9c3gST6qgcP\/B\/c2SQCZ48DO67e1q35NsJrHA7BESeR09K1d9t\/w1lGMM58EcuxFYRyfOQeMYMxw","pkt_caplen":849,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtU4gBAB4WbFAAABAQgKU50GTsLXQBc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD27HACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtgzgBAB3GPPAAABAQgKU50GTsLXQBc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gD27HAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfNsTvtgzgBgB9dDCAAABAQgKU50GUcLXQBcUAwMAAQEXAwMANbpWMnbWAtRWOmd6b5z5XtbllVCz99ZW8cX3m14LjwOuE+lhSEs+ElW3OOks51p7+qpzRsWc","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291687,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gD27HAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAieM+UmsoBu3fYfRsTvtgzgBgB9SW2AAABAQgKU50GUsLXQBcXAwMAV9mZ94pPejW0IJSD8bwnOmdb\/yRZOlSdaybWLLTwm8MN19W4KwuYIzzHCWJRFjjrWzbCov+L5bQak+Qk3Z+TbuEWYb4YRQd2GIcxzSxjbDtnu1hH\/8U17g==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWRoXRRdT8gBALMNnKAAABAQgKwtdAO3CSuIk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5bSRupQgBALMKljAAABAQgKwtdAPNeKYqQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0870{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1605291687931,"flow_last_seen":1605291688024,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1Vks9gBAB9d4NAAABAQgKcJK4w8LXQEE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2061{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2059{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWT\/XRRdT8gBgLMD9lAAABAQgKwtdAQXCSuIm+ZN4ZODQLk1MacIPx8GfVvaKdJQT78HHE38eBNoR3EREsErNUy92PsKyFXtBERPtQbpNYsTcxdESCJxwmaEt12GSmMZu\/L59lOVRzusjxCRuoNuG4igecd6uRJaCQTmE24rMdwUCsKRVmX98N44QLkBB9fuyxCVATxGGMamN4owjiPI52K4M9X52LRVizjBw8QBTVnhNyu4OmRWbvT\/hLEyNRpSv4uy47LZTd5TZ85RcFmXb654M83I39\/8jSQd9uwRxNfcMMoV0LKxsNZWETWPhhPSPBWC9cF+DITqc5Qm1R\/CuWMeCBlBBfNo9XKGec+Ooyhh7ccNCvF3Hd5n1EYUBIj+kF0LqvzVjZmZAUadHsuNjBH9QLtndpxzgC1iCN7++Kts2XIknD8BX5Uofa4XSgd4QLjZhwvIeOA3yFGzyEsGqLDooxJceQNRtdva0RO7vAydCpkqYVLqwVWZX8hB3dALQcOwMChw2ZmvkMRZwQ2bxgbkLkDzt0xCsLyOXD8kXYcT7tPmVwbC5OTodbgBE+sfAj\/Uo0b2IMHFo7lq77\/98Apj4mYdqFF8zQfbCfcAEsvnCtuf9ZoYyAZkeHh\/hzm+FM32n24D5IohxgNlaD3fPNhyFJXbqbCeWZCij\/KK0z6r2Y0O4wLItdFyGVjXvhvV6hTKeKQf\/+n09VfxVXOhgnhs202ARBy\/7sdw49h21ZDSqwf5fgaUuz6VHTpxrTnX2dVfKb0MZy1IiEiOsrrM0HqGQEp683iMfmvcdISokzn2lb6hgUy8Bgl3U5kTTwc0RS2Un2YMtMSixKf5iofS5jOQv5nRlmr8ZSx9ajmWQlEZBJlsjFK2YNFnXOk2kSMSzkeVy0CRZAvo7utWWX6VhEDkPXipEerfqr1gWhpUuawV57lLICFDJNnu2psRp++ElchnX6eQic6TT0ws6Sc+zaDzPy4sbTUw7H+7t5dmZcaKlSRtCXQG1r2OPwjCOBSNTLBgSfkSlwtw++PvWTbBzsEjNVfQkSXYsiv8xmCapIVrlCsPnBpgn5KzsnA4Ox2evjCfIrv1fCIo3Q3UszTB5G8CdI8WCyDPiqvnF4QOhTvslXe5AM9QqVTK+phteIbzDl5Ora41ACNFGEr6IoToYzN+w+gjc\/\/p4wm1xXM8U5\/rmflL0kWVweW69eKbnN5lozAmCxaZ7DaJyTN0YwVbb0CVVwCtfphLU0M8JMG5++7hGrAUonRjf2QcpvRLS9a+eT5K6MNNZqH+lc5UkQl6l2smME0jbB+YtvZXskclTt++wdDbSGtyu+ThhGm5hzy+4UgpnoMLqi9AU3SuKMS2mCoguSFhCRJsdvjoxHq67JPzoUESMnbCP616xLSGf+\/YvmZRMJzxAEOUdt57po1gn+YwTluw0KK2wKcBhquTIw6vQA7gxOyueKZulWMbeTKmIkVyEY130KunREse4oQB+WHJwi6qenvAdaCbEfms4VuKVg5hhl4tOY5GZwD3XmppdecuuPpqK9n4cN7eOlzBNfR1A73cUD4K5jGaK4V0LWvhY7TnauOHOipG2epB77Go1y63O+8YygtDFXZKud7eDDOKE+weLrAsXXrdickuhsxWlubg==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0705{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":286,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAOgGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvWTrVWVK3RRdT8gBgLMHKWAAABAQgKwtdAQXCSuIk7nST5MB4W7LqQDI+ruRgSqNFixg8+tuf7fxTSvdZP4F373dDQYdr\/dUBy5M5Y0r0J8\/NwDNIhNkSh1xz99T3T0hzeqb64Mi2tF5f4IJ2UrY624nPzFZdWoQHg1PneTNulsX1j8klkyC\/XNhtZp7ADwBkTqNyP\/TSAIoqgLNnjg0M\/vextssIJRGXu1Z+IjHqLqiURPYAzXVbgI2UP3l9v2PWV6dKDhD3n3bwUYUisMilKaOv0U8MsCpwnsBZd17KZz00NU\/J4qA==","pkt_caplen":286,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL5dhGO8qWgBALMDrJAAABAQgKwtdAQVHJMCE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2318{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":32,"flow_packet_id":6,"flow_first_seen":1605291687934,"flow_last_seen":1605291688025,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2303{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0672{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":266,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAANQGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL8LBGO8qWgBgLMBR4AAABAQgKwtdAQ1HJMCHo3L5OFwMDAGFnpa9efBK27FTOo2bcWqyKvjzPykx9aWoPWSfIj5rQLBHGICzQSuv6HR54YvalrJ5FE0uJKXw7SSb+IQPVJVWqa8tDMIsKBYjWTRHtSKBCzGhuH4vGmGfJEX0feYTzpPPdFwMDAEWyfdrJIh8ybuZI2kcrCpSYZYxLIxjhtCWTtQ9cYKVgr5jLNmGlKHgxaWJWEFx\/Qfp2s966SbOGX61NEnen+TUQptYsRI4=","pkt_caplen":266,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1Vk\/1gBAB9dlUAAABAQgKcJK4xMLXQEE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlStgBAB8tSfAAABAQgKcJK4xMLXQEE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlV1gBAB8dPYAAABAQgKcJK4xMLXQEE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS+tEgBAB8T5oAAABAQgKUckwU8LXQEM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/CwgBAB5zkGAAABAQgKUckwU8LXQEM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/FkgBAB5jhTAAABAQgKUckwU8LXQEM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Py1VlV1gBgB9bbYAAABAQgKcJK4x8LXQEEUAwMAAQEXAwMANfpQu8xk8zyNblZs3IHMorVGv3IB26ltGRnX+fscAZlJD0iWK+RIGlbPoduVx3BmexD4lZFk","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0541{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":166,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7ypYjS\/FkgBgB9VNaAAABAQgKUckwV8LXQEMUAwMAAQEXAwMARSsZCHMBkVuqax2fP0MlAzWGM\/INMirxjZgerlnFD\/HXu9993iEbSIQ2KZjMlR7KnSQKwvF5isN3VMVrc7ZoDIMMC79Wxw==","pkt_caplen":166,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gCkMmAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1k4Bu9FF1Ty1VlV1gBgB9TghAAABAQgKcJK4ycLXQEEXAwMAV6IwUuKlNwcFIN5JinvDvs5wyYI8Vf1K2pqctiTv7HAw\/ZgkIfR30nMw1yo5oIiRZ5cSlU3\/5hcXggQjPTFnIT4k0QV+w1JWfdVv4ECphPEuFwmUmGkSIg==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+1135{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":608,"pkt":"qtsDr8lk5EKm5WPyht1gA0MZAioGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAXNobxrOgBu0Y7yuYjS\/FkgBgB9Vr0AAABAQgKUckwWMLXQEMXAwMCBdw9YPyptpUaPrvKXAia3WKdhxG3zwg0P6dw+SNWe27ET0dYGzK\/Zsa5BrcHi55wY5dT0gjkBtUm7iIAV1V+HpoK2kohrkXArOPR4DNPL\/5g72AXP4CIKcbUP9WcowBKdCydsWHWbIc\/O6Iix6COL1rk43PiNLDQbKcxCcoxsphBa1Vlyy7kdSITfFHXywmm4c3Ri82Lgp7hjo\/0vmKKg9baKer6SPkyK19MDfQ0bBpCLC0MJX2v0SrfgAjFHbVZiEaqW2HfPGefLKZIsnXLTIBmUUXF3cb5Li18lPTdEklYN2n0B0ND8LRXY3CCFtHC4ZGivJqoddRd3AeBYFqMiELgjnMrIxMZW6bRgiTBxe0nlEiNGb8c\/NzxA1br2krw+J8+V8mrggC9JD3lVhVcD14Nq8UkVH712hTB39AyhBm2yip+lmGnN4snUsquG2kOlzNHVS6rP7sMP9LnPkMTRFXNhSSFef+\/eDypsaHUpt3seXDOtxr4DaoZO92xLslr7TiW1hfmJMeE\/RpQYph2P2m6B+66jlvhwitJDbRdSRjf0OBOUYfjaUkQs7huNsu3QRqowkwXIXSfSTdTVBvTITlvdJsiIEN766V0CoTBHwyvaad37U02GfI80thwzympZpkNraCBW5GAVVdg4PtEkHQ9BdhimDr\/2fzBLLHcNXRNPuinI84=","pkt_caplen":608,"pkt_type":34525,"pkt_ipoffset":14}
+2292{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPSYgARaADQAh+RZQSfh\/EI4qAcsBIEmLB5kd7IUo3\/YpAbu+CLYiE5bSRupQgBgLMAkxAAABAQgKwtdAUNeKYqQWAwMASgIAAEYDA5hs1RS1r3hoIUTUe\/Np5sVzJ5mEFtISYKb1UBid74JvAMAvAAAeAAAAAP8BAAEAAAsABAMAAQIAIwAAABAABQADAmgyFgMDC3ULAAtxAAtuAAazMIIGrzCCBZegAwIBAgIQBCsCdIn4IMOaHu0hIfUKPzANBgkqhkiG9w0BAQsFADBwMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNzdXJhbmNlIFNlcnZlciBDQTAeFw0yMDEwMDIwMDAwMDBaFw0yMTEwMDcxMjAwMDBaMHUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMR4wHAYDVQQKExVRdWFudGNhc3QgQ29ycG9yYXRpb24xGTAXBgNVBAMMECoucXVhbnRzZXJ2ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGTX0jadssR6ED2H16VJWjPQW\/BuyH86LOqrNUs0NlHM4ihfiYKKZ4ilqRvk5sJ+zAaEKOXD4\/RAOH4myfslDAKTSE\/uofcoHIT6uKju1rHsbXqDabgczg6GBGngeiCWWzb6n7XsnJCyGFkcb3mgIwPn9TQjQsVDQp3vDoWsiN\/7CoNM7K3OYUQqucNMYXoHHOS2dEamKHkw0G9CpMUCWCTnDuS5CAIP3PUicCumqL+zQwt78nBZ\/2WWYYNQ3IQNzG6BBtgNXlAOo5IDzx9wgMSuS3O6xlcfM4r3Ez7kguCwyHqAs3kBmn190hgjvVH0eZQDw1FbKe5NM0KOiSY29AgMBAAGjggM+MIIDOjAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUNKGiZtz+BH59Z4aFJhevAt2WhcMwaQYDVR0RBGIwYIIQKi5xdWFudHNlcnZlLmNvbYIQKi5xdWFudGNvdW50LmNvbYINKi5hcGV4dGFnLmNvbYIOcXVhbnRzZXJ2ZS5jb22CDnF1YW50Y291bnQuY29tggthcGV4dGFnLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF06xohQwAABAMARzBFAiEAj1FrlzEObHNQMKLAmw9ccGe8TtS9c\/m7pBtKaqouMh8CIHx9UWPVHw==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0893{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":31,"flow_packet_id":6,"flow_first_seen":1605291687933,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2301{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1226{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":674,"pkt":"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","pkt_caplen":674,"pkt_type":34525,"pkt_ipoffset":14}
+1270{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":31,"flow_packet_id":8,"flow_first_seen":1605291687933,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":4153,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":519,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"secure.quantserve.com","server_names":"*.quantserve.com,*.quantcount.com,*.apextag.com,quantserve.com,quantcount.com,apextag.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"b898351eb5e266aefd3723d466935494","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Quantcast Corporation, CN=*.quantserve.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3A:30:B1:4A:CE:62:AF:55:B1:89:FF:0C:CB:69:E3:80:CB:B0:91:90"}}
+0427{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IhkCgBAB9azgAAABAQgK14pi4sLXQFA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2Ih5ugBAB8Kd5AAABAQgK14pi4sLXQFA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IiC6gBAB7KUxAAABAQgK14pi4sLXQFA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1213{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":25,"flow_packet_id":255,"flow_first_seen":1605291687514,"flow_last_seen":1605291688036,"flow_tot_l4_data_len":247217,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6320,"flow_avg_l4_data_len":969,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"platform.twitter.com","server_names":"platform.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=Twitter Security, CN=platform.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"2B:30:10:3B:07:2F:F2:EB:3D:08:E3:BB:45:61:F7:A3:9F:4C:A7:92"}}
+0600{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":212,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAJ4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6lC2IiC6gBgB9RmeAAABAQgK14pi5sLXQFAWAwMARhAAAEJBBDU74BzP7Q6RSVUWj9cO2lqHkgsYnntO0GBgQsjeKNHhq\/FvR0aI5ELRFHDlX\/LMaAcnsUWjczn1FadPzDGyymUUAwMAAQEWAwMAKAAAAAAAAAAAaH1na1yJCdmPc5LOW+GXQI2W4akRkKbxfXNj7hRma5U=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":31,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsAIMGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6s62IiC6gBgB9ZCCAAABAQgK14pi5sLXQFAXAwMAXgAAAAAAAAABhTe2kqaTLlAAr1bUYq0xjWqOf93ObH7BnPvCaaDcXr7U21czVub80rrckE2NlQCoHD7g9B+xs8G9tNwpWj4ElxeKVkwXL8dqAWqp8Dluss2bvuLPnXQ=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0780{"flow_id":31,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":344,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsASIGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6zG2IiC6gBgB9Sw8AAABAQgK14pi5sLXQFAXAwMA\/QAAAAAAAAAC9pMun1ZqAdTi1F1kreffo29Ey700P\/1LxMn1WNIVaNH360u7qDLCs\/IdEMxFqj6MX5gwsKWlJpCdeeb1mXwtDV43E67V7Hvk0e7+IeYzBlROgwWrNJnpq70HiOHdVMaUa+yyKyfdo6W2KeMEedpBecer6+JlP2GKN58yOO0v0\/1nrhSb\/FJkQdAEqYJc1NSpkT8E9wRtf+gNDwG00+IGUrl\/FfIaitfxPWUn+flW35wuLjHv5lngue8VUBVFqhFj61eBdi3zXrykyFq1Iqyo6fUrWlPwkDT0pXBFhMCB91j0RhGkwQR5JLSluMEyKzXvzAiPQxk=","pkt_caplen":344,"pkt_type":34525,"pkt_ipoffset":14}
+2301{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dXkX\/jDnJgBgLMClnAAABAQgKwtdAVk1+jXIWAwMARgIAAEIDA0EGNUiKAt7pqpIYVTSg1b142DjcfagHPa7RoVjNDPdfAMAvAAAa\/wEAAQAACwAEAwABAgAjAAAAEAAFAAMCaDIWAwMLxAsAC8AAC70ABwIwggb+MIIF5qADAgECAhAB36AC8MVTwy8rWtYjdFbqMA0GCSqGSIb3DQEBCwUAMHAxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xLzAtBgNVBAMTJkRpZ2lDZXJ0IFNIQTIgSGlnaCBBc3N1cmFuY2UgU2VydmVyIENBMB4XDTIwMDEwMjAwMDAwMFoXDTIwMTIyNDEyMDAwMFowgYMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRYwFAYDVQQKEw1Ud2l0dGVyLCBJbmMuMQ0wCwYDVQQLEwRsb24zMSAwHgYDVQQDExdzeW5kaWNhdGlvbi50d2l0dGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0IUzWz0oNefou8gqWlT3VJSbRw59LAqWypMlSm7sz\/cGf70j5ZWejClXalDh9uGhcHH7SNg5KYz7YvKjkVlpNrNB05CzHCnbKfloFkvQ\/nSlD9VBLwN3AUBmoCdiFadGDuE8I14q5WblC6VX\/YCjOnzW7e9e7Vo5hjXm8\/n9cw8\/kzeVbz2AXnMYPGQXhl0WOHU8Mob7evmGAN5FT7KIL\/762d3Td0vuBghvBgZy\/PGyQtvW9ZQA5idrqUS90lp20rt9tQ\/nWx1\/+wEvLFB8+TcRzcy4Ax1\/yjAjKinx4bT7hz6jRQAcFCe3pkjT9ECsUsyppiNLtQuRAOZjGmqZECAwEAAaOCA34wggN6MB8GA1UdIwQYMBaAFFFo\/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBSt95I9bhf2K5GhxeCqT9RTr2H+RzCBpwYDVR0RBIGfMIGcghdzeW5kaWNhdGlvbi50d2l0dGVyLmNvbYIVc3luZGljYXRpb24udHdpbWcuY29tghlzeW5kaWNhdGlvbi1vLnR3aXR0ZXIuY29tghdzeW5kaWNhdGlvbi1vLnR3aW1nLmNvbYIbY2RuLnN5bmRpY2F0aW9uLnR3aXR0ZXIuY29tghljZG4uc3luZGljYXRpb24udHdpbWcuY29tMA4GA1UdDwEB\/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG\/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB\/wQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCkuQmQtBhYFIe7E6LMZ3AKPA==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0895{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1605291687800,"flow_last_seen":1605291688046,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWOxgBAB9aMlAAABAQgKTX6OS8LXQFY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2304{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1330{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":749,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAArcGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1daR3\/jDnJgBgLMJgiAAABAQgKwtdAVk1+jXJiohK4WXI7MB8GA1UdIwQYMBaAFLE+w2kD+L9HAdSYJhoIAu9jZCvDMA0GCSqGSIb3DQEBCwUAA4IBAQAYipWJA+Zt31z8HWjqSo+D1lEvjWtEFp6sY\/XSbmyEmYuqgXGEW+00TrC3eZIpzC2AavCOIOF5pP4DRxPq9YbKWXF99ASWa9NZWD3+0zElXBg4hKPmn4L9jFuYMU7NeJ4a\/YXLSaryJ4uZcvw+qtVBC9rVNqG\/HG5HSX9e2Uh8A9n9i0mgmCZCQOvWkhGkZApXVMT1HdYCXmus7sSAmhJy+laT1\/+\/MIUGML8Lf07\/VwWdJO2Fwyv7pnWorC0W7315J7Lrwp0LB+qqhdMBoyAoQVlDKNKB46r27Hs7d7ZAYoAFQUUB7xcGPt7AM5tn02EucofkafwSAFdAHnD1Hsm0FgMDAU0MAAFJAwAXQQRRP\/JUvszQqSvK5Bq1SnvhUJwShBlKDToo2XDMr5TpLF25MlojqIpYf8LIM5XJ\/rGSPtUuy2MbzJNrFJq31ugEBgEBAEJHQ8P+yVYw\/j6kQvMigeTykLEYqjZXCvwwxyXYKBq94i9fIVZeHp\/VHAs9yYLdkimQef6uMIVx5Ptv4k8oNwV77sNhatu5+\/+bkZCE6HYhaLS3OXFzVqP734hF+LUVz9032GptR4XHJRXecgTCOYx\/wfPc1yP6q9LMarkdDtgjoTtC89srf0rWZBgwsvf7uZ6QmTSmLbzvWkgFoZsdTq8vBQ7eZwZ40JHRl6S5av+QSqHPM0Z5kFxqm1Mhz9I7XBbT8x0zUS1h\/80UQLMOIQtiCUhKS2ioH2XAjDaHC2+tfpBNnP0aS6bY5fKipjuuhVk5rXVouqmeZ55o9NfLS\/sWAwMABA4AAAA=","pkt_caplen":749,"pkt_type":34525,"pkt_ipoffset":14}
+1340{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":28,"flow_packet_id":9,"flow_first_seen":1605291687800,"flow_last_seen":1605291688046,"flow_tot_l4_data_len":4260,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":473,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"syndication.twitter.com","server_names":"syndication.twitter.com,syndication.twimg.com,syndication-o.twitter.com,syndication-o.twimg.com,cdn.syndication.twitter.com,cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Twitter, Inc., OU=lon3, CN=syndication.twitter.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"09:D3:FE:9A:3E:39:A7:E2:90:5B:C9:1F:3B:7D:CE:7C:7E:08:1C:6F"}}
+0429{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWkdgBAB9Z25AAABAQgKTX6OS8LXQFY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWu0gBAB85skAAABAQgKTX6OS8LXQFY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0601{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":212,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAJ4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOcmdXWu0gBgB9aVbAAABAQgKTX6OTcLXQFYWAwMARhAAAEJBBLxNGdavmW2r6LuhyaTtmynR54HIf1IbZbNGrqxJliXAuxyzExWIiumFL6ux6cBe6ohWZ6ComRXkrIQtAX1uevUUAwMAAQEWAwMAKAAAAAAAAAAAk6ZleW3+AoD\/yTrCsbJF5nmHROOCbTsZe7zF\/mKXSAM=","pkt_caplen":212,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MOkedXWu0gBgB9flNAAABAQgKTX6OTcLXQFYXAwMAXgAAAAAAAAABXeBZ8sXYkwQw6UX3auw42bdmluZV+emTj4s1arJ2DJJ9kcKNokCO5vNIL52Skml+PpYjv50KX0eeCQHuJjGWj6Y2YyM8sLhMbLO49mjZVvaG3Sj5ybM=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":376,"pkt":"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","pkt_caplen":376,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":376,"pkt":"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","pkt_caplen":376,"pkt_type":34525,"pkt_ipoffset":14}
+1135{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":608,"pkt":"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","pkt_caplen":608,"pkt_type":34525,"pkt_ipoffset":14}
+0780{"flow_id":31,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":344,"pkt":"qtsDr8lk5EKm5WPyht1gBZTsASIGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIfkWUEn4fxCOvggBu9JG6zG2IiC6gBgB9SveAAABAQgK14pjRMLXQFAXAwMA\/QAAAAAAAAAC9pMun1ZqAdTi1F1kreffo29Ey700P\/1LxMn1WNIVaNH360u7qDLCs\/IdEMxFqj6MX5gwsKWlJpCdeeb1mXwtDV43E67V7Hvk0e7+IeYzBlROgwWrNJnpq70HiOHdVMaUa+yyKyfdo6W2KeMEedpBecer6+JlP2GKN58yOO0v0\/1nrhSb\/FJkQdAEqYJc1NSpkT8E9wRtf+gNDwG00+IGUrl\/FfIaitfxPWUn+flW35wuLjHv5lngue8VUBVFqhFj61eBdi3zXrykyFq1Iqyo6fUrWlPwkDT0pXBFhMCB91j0RhGkwQR5JLSluMEyKzXvzAiPQxk=","pkt_caplen":344,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAABc2hvEqAcsBIEmLB5kd7IUo3\/YpAbus6CNL8WRGO8rmgBALOi35AAABAQgKwtdA9VHJMFc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605291688324,"flow_last_seen":1605291688324,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXpjQAAAAAoAL9INe7AAACBAWgBAIICn8mSwwAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605291688336,"flow_last_seen":1605291688336,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzgAAAAAoAL9IOr4AAACBAWgBAIICn8mSxgAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605291688344,"flow_last_seen":1605291688344,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACgGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmAAAAAAoAL9ICpwAAACBAWgBAIICgi3lpgAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63k25KV6Y1oBJXgLbhAAACBAV4AQMDAwQCCArC10GYfyZLDA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXpjUut5NvgBAB+zrKAAABAQgKfyZLNcLXQZg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1605291688324,"flow_last_seen":1605291688365,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxA2CKc5oBJXgKoEAAACBAV4AQMDAwQCCArC10GjfyZLGA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIpzlTJI8RgBAB+y30AAABAQgKfyZLOsLXQaM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0823{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1605291688336,"flow_last_seen":1605291688371,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9OJtD5hoBJXgGMHAAACBAV4AQMDAwQCCArC10GlCLeWmA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmHs03vUgBAB++b9AAABAQgKCLeWs8LXQaU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1125{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gATUNAiUGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0PmHs03vUgBgB+yzJAAABAQgKCLeWs8LXQaUWAwECAAEAAfwDA9hatQx\/QktbULCFc2FQNgXPGrp+qPvBQrE5NDlBZlE\/IMd+e8Lduh2\/OW58Rm5lIQBoGyh8j\/3MT9YMf0bL3Me3ACCqqhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAGQAXAAAUcnVsZXMucXVhbnRjb3VudC5jb20AFwAA\/wEAAQAACgAKAAhKSgAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKUpKAAEAAB0AIOhk20ZK7Hqhb4\/e3Kx4aK6U4Kcjb5InvqFomt\/cTww3AC0AAgEBACsACwr6+gMEAwMDAgMBABsAAwIAAtraAAEAABUAyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1605291688344,"flow_last_seen":1605291688372,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"rules.quantcount.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63k29KV6g6gBALMC9uAAABAQgKwtdBun8mSzU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxE2CKk+gBALMCKeAAABAQgKwtdBvn8mSzs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2317{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0864{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":33,"flow_packet_id":6,"flow_first_seen":1605291688324,"flow_last_seen":1605291688408,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout5jbgBAB8TMPAAABAQgKfyZLYMLXQcE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2313{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63mNtKV6g6gBgLMJhgAAABAQgKwtdBwX8mSzWirApCSz3sQI42Fj6NwAKOQFWwx4xH24hxUU7e1RSdP5ldgb3b95LkJDeHNpmZNSN\/RYDqJf1t+5nY1lIQtbG6EnNR5bRfJ8i5yTt6hPdAhD0dqp5wfRTXVOp9dUACNLiNinly42GzrWwkTqltlKelvSTQVhrtdIiQ38spOtz+Uw9KU3Ir5ijSYU+Gn8Za5nQCP+nxVY+iA1uL0gr57MTARIGt5P+Sxd9C+8LLlGSSjoIYR+i\/r\/MGN5GUZvXdLA\/wCVrkAi7+fLOJAJBrC35JyEWBfU4ScXogECvLHNu5xOKdgGVQEnYGMDoRfTRqzgoqHdKLofFTlzrGUSJky9FO3Rw4SyD9cLP1Bgbpe4SKF\/zmJjfg3d58M\/NVB2OYKqPuppvSWPdyiBYVvQKTKm7kZHUy2TB0jBK2ZfssDt7us0KeB4Clrxuz32GnSwqSZrFQgs1X22AUzOuTEltWVJwLE2Ek8RxQxRR6CgGk9iRwutMb9IIQQjDAyv6rvrcJhoQOBR8LuAnmxA1R0llEeKCiqwnnhegPNrZcDr6pFQa1ftB8miU28gZbtvvPfgSNgPPZlmdjcv7Go7VsoKfRMj1NPbGYtZd1pGe22VHZrBbb\/EnM4NDgZU7X2wAXmnvpE3nmr1yOLdyNESUNxyyfOnWk3y6t6IxTQg4kZTlxSyUdNzCKhq7Ll+NK59W\/oAjDutyYMdH4YxAkwOAVdtK0fHp6rzLijwvSezDF1ZkWvD2eptJofHUUxJbYWkMRa6A52EwNdRNH8yasup6HJJdyGrzP\/UYu4QY3e7oAEipBeTPGZCmrfY9FgiT9W1\/Fjpa2Gt7BqENznE0H2fOoOvtyU5mcZd0zasKkJPvaZ1x\/+kMEcZGpX31AzVzhTj4ZB9yvUg4pEiOKNTYPO0jOexv5\/CPKxWvCMUW0ur6QaSJCaeTWOdw52+jJi5rOz2j04XnZlro9UZDcv7U59Ib0jsox1y0XZFX1yomIjMoWrDPKWNtJZ1kVg7Yasc39yAgo9ZCwEjzIKYw7aazuX2C4pHHviVD0uNPJ59dGx6xH2zU5wylDuW3UJXbYCjy\/ujmhy2lsOb+0+WK71ubbTckelE38cy1sSmc2XI1zZ1CnRU61I7mh7uFcYHsIuMkO0x7gfwz9AMS4\/R1OeDGuSXCov5jFWhHL4jXXV0Y6lAgIUfWijaIIYDtQp129qW55eoEqrkdFqaNYyPJYIB6wW6HgydBYXcggVoh+ojOjc8jUK+8UfowtOp8o5bXGQbybmrhVjaykhslKYCz6rsF2ZAAxjQ6bK3OJRcgF+y0OIL3HlXVQY\/O7WGhNBlj4VCDrKCY9VqO09YtL2Im+mK2qYrKLIkxR2S+BboyeuP28QS+QtKAwXKX\/JYxiAeK49\/DU7se3YQzmtSzi3T3NMcE73IMj6bAAaZFY4Z2KD\/lO+3VeH\/GnuUhE+Usd7lP5d+FMjLHOfbdnwO7EZtt3xZyJCG0EdA0IEF1iZCOJr3jnBiee0shhBOgRvFCX5Di2ePGLoRRk\/4oDD8KpxmEcSXWBDXRbefKafUk+GYkX\/jLilxiizE8cB9W04tSA+nXA\/Wf+vPQwHeAdU\/ZTAfPYsNUQ1dgDPrp\/eVDaEiw9K345b\/eM4ZIf\/Lp7H733MHlrS2fvSf5H2VmZ7Lzm8ccGZPJ7HjUAI6baow+5NTEzZpYo8JzCWXZMssAggcRg0eh5\/W3GnHcfY8XXByZGiWGcNzDuZlC3AY+F5ZQiVTeQI5jUlOEL1f\/+sLAiXrby1ptzpNASaigLSqm884hj3rfnwMt3Em6ol8KzIYe1hundMYfNbAPpieN0cXNkf54oD0lUFdbmwAA0xQ==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0568{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":186,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIQGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63nkdKV6g6gBgLMFT\/AAABAQgKwtdBwX8mSzWZAQtKOmC1Cmerdjiwl25zxvQlLKTxyRIsfRSd59vSCP1FHBqpjeScKIz0NcYEkjRQ7qA8y6PGIoYEoZ4T7RwBEOdmiEu9wwZaGN0bxBSDJZ\/N\/2bdOdfViyR0g\/bbUOqTfL5\/","pkt_caplen":186,"pkt_type":34525,"pkt_ipoffset":14}
+2313{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkjxE2CKk+gBgLMBQ5AAABAQgKwtdBxn8mSzsWAwMAegIAAHYDA4OvVEE8P8LeBhM9sxYB7JO33u841one47T4FjONL3E7IJCDNh4n+qlo6kd0ODvy\/AwDjBO0nZ+gYy2KZgyiYgg0EwEAAC4AMwAkAB0AIGlLEoqHSJOtf0NQaf58sba84Rk29Czu8zFA6RCb0SgHACsAAgMEFAMDAAEBFwMDCrNpssVxv5bEMF6N0DvU13HZFusYYefzxcQSvf6yfnUhBgmdDW9hrhPPT2nUbgoAoNP2KUnTa7Eu+zkSDXr+\/8rW7sLWiEB110AqG2ZyKA4audA79UGs5fRFb5GyFTBt2uxcMpYS+RzRKO0hgIJHDc+NhZ0NhuOqWT3K0OzSpBxq+xq7UKVK9U1tnZCyLu\/XTk8xx9Bf1FSoEJHPDXVfOlXNdl1CXnb\/baRsWd7zLPj1h4f5QFWeXNqz0qRnO+4ABMJY4DYc7XQFdhSI0tmnOra1XMIMPBVaoiBwRaLkX2CEojLoq+7Jd\/XmC0yRS6ysd\/5K8UK2mah\/mzExS7266A2tN\/BdOchaoKCtTqUAy9QBFHidUyAEykhnPmmv9XazKodZ3D5Umh5JluHiOZ29sjOh\/mHEyDT9Evfst3uHVCiUvjdkQEJ0wgW+2j\/SY8MhP5bMgYT4keK4DETi5xpMZKtyN2wSUZ4ZHiCl8\/+hExmMQCaja1BGLtWCJUmPEsNX6um\/wFyfPNRY192cV9aCo3trSu0spUJwTeF0iVTanT\/9cqlj5iyJndfyz6F5sMhMrmU9rOxzmF2FqOvoYloOUuLdEQFI38F6JKYcnikVB4tQ3uQSB9SjQIo2xTJGbnEQecMH9vvcAGAY1uIrRloh4Oizv3gHFPIoSGbdl29S2oZhKT3FSbYA4TGtULxkk0Ss0GIL1jw2o5jgRY\/VRdW4n43ANilnA7LloaFhUMvjfB5J0lsnVgDE1IpbBqBs7JtyG2sYN6+lbrj+suNaqDe4UD6f4Ue6ewwl9GYNeXw5mNX502l4gWiicxnzQemyw3BALd1l28yO5f2End4P7DRyLinFnrdJTOe7lmipXz1y8wC34D399b29znf0PoSSHTpvOATbEFiNvrRDskEkGIGTuSFSJmliQDiSScVsqv1+XnUr9jMN9Lkjpoz4rDj8Sbn7EvaJS9fpBpj2btbGNwcMYZEj5voMlIIdCOwU944ysgEM\/1skaNQS1tkUNh\/u0MVsZjLf\/RBBXDFevy5afuDxyKzfom9ziNW4QzGaYXv\/wgYkR4vSvAqoslJp\/foH0jO9Rj+txz0UXxh\/CjW7i0OHKflEx4lZXqH1qVvhnAeCoCbhQRhxcaXdzl3zI1KecpBErUPA87UEXGOX3Ah5usBkun6pj115ffqMJFvwWOAjiOflplJDmocMR5xYQCDIBhPxDBts7wmCr8i9luh\/Hpu6qI9C8xZcu7gA7Tdrv+lLdU1uoN6qOTj\/Veo6+KCrLTcPThYsTsobiHQW4ex+hc9g33P21h6ERqwY9Ts5oALhTHUwwLarJ5\/n4lkQDzVWyXcrqU\/Ri9Aj+7pM3tYzify\/LLjiDOCXfR7DNvwa4SU+LBxn4k4Vtn2CcSsV+Oq1H5QpHKcork61+w0mYcdMNbd9yOcLTOyQhAif9sessY92daMDU7oNhyypr+aR18H5frX2iuyeb1iMO9bRlnfawA21aD8AukqYCRiIi5elxjfRgyi3\/nPT1We1oYGFUN0wLBJqOd9rRQkxzDrniNseELyEaEyz5e9+Dsf\/vt7M8LrSaJCnIEkMzTWLznw+MXEc1oTj8Jj8lDLzOwEOS4yxQyOkQZqzeD8Vfm3j6XYEm6Ks71a4zt7Myv2h6IWvx+aH22\/SyNfj3Q==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0864{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":34,"flow_packet_id":6,"flow_first_seen":1605291688336,"flow_last_seen":1605291688408,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ad.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2328{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1474,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABYwGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMklH02CKk+gBgLMJidAAABAQgKwtdBxn8mSzubt+A7eUnAKISP8nJYU3iS3hDr2o2WsV4hnMNiRHCxxo796342BLTCKmI5ot2fMtZvSeM\/Pjnol2gJEVIgbWf9Sgw4fIyTWNR9M9KWfNFgSlL\/fQUStiPMs4wmCoonos2Nm6WBA2FcyNSI\/u\/5V34q2ceSNijdqAfD0QnpUZj93+j+QBAfSnpFp6MZwtA1bzexO3LGd7D6OH\/DDSOg4UtmXllnmhB2Gteqq6qhEVhG\/rZ5sQt7ArAKYstCz\/nvZtjT7zZ0+idrPuJBx8\/vxj0MSDpoJShpGPF3u56Yqbq\/0Q8lzOW14xzNj6EaEpmmY5K+bA9aNSL0ndRymupnMUH+5ebOwfVs8E\/5r1Mdx+YuSa\/7ODDRnd7i5t\/KnOtmhIfRTnlRWN9LfiqMuWLLf0COjJNPXNzaeIIU77hIYcOuulfrwjcMB\/bQqZUKQnMy1+sSLDRToDihTai8oRME6baNPLfLWu6ssCvcZ+lFZ4UpkrLQFKD76j9KIMjjl7kpQgRIOxRVW+cJnIFByiVjR6M46vMbmB2Ri3TtLLfekcd\/7Hxaniwt9xtbhl0s1OrkQFQw\/Zv45yPUeP3hR5i\/SZ+PFr75nTSXz1Nnq8C9v+Dg3YPc44e01drs6m3Es83LWUUfIM1M7arKPkGysaOI+Afj9XtgLMrtFBq4v3T6J+Z86A+pr6tmXpkRaJ706Zi\/CiR8AXPtDAtmL5+7A6+J+3U\/yJzRgAi5kTOXwvnAdnHl91o7QiXMdF7x5o7q\/NcYcRPu1l\/HI5UIjb3\/WAaRytg6y\/3qfyq2KH3Egx4eLRALXhmOGFq8CtAr4kv+2CqSC2CqC\/uVudLrLRrIAV0WzYgkw3NMCqnu5rORX81ifzhr76FHPl9AhSw2cP\/cn1tXjZYZll6KQDgjgSmP0JH6kDQDeQUnRPSz3PYrilhYZsVpFxTqn9Adn8RF93ACbja7v0mTQOtbP0tFC4WG1Uicqi2gThl4Bda22dgL3pSZJ8R6iwI9+G+OXZNxAK7XlB+F0\/xynawgmRRCbcW1LNoa5Jo3vN2q5gxkyhtu5W6AsRpVLnvDYb674PgYX2AA\/vbw1lwW\/mV58hqEWDSIFGe90E3SeGgDrHiFzWtLT9pkJkImPw0RyYxsO0dlIowTt1Qp+a4v2t5vTlP0JCyugoMe+nnlinAEv6LDwOJBO9b9xAGo\/pH2KRq1dhmNvvlM64oWl1Bcwufft15eVarDd7kNjU1uIoCC98v5UVYbkgyBbzsncHiS6L8dYjOx1pyacjPOAKMaQIbUgrIrYZwGaquGGx7Gl72P8nIV+1hr\/d\/YpfaO\/mgjhnWtcaBFEEATwtRlJzw0qGkIdbhZduOfkOTsuEHXBVzd8B\/HXQcNo74XxhbnQouK5lkoBz4QoWRVGPxVXleJU2Ju16V2khW8Wjxl7\/jfeIYrZUp8MoZ\/EKk2xKlEYz0uJuzasXIhWri8zq\/IkYbfN\/8TXkUISibbxafwkOQzdiJQNiWj6M0y3g+f7po3IimQDI\/c\/J0yzgE8qDpjt62KTSaSvxqrUZPHVle+Ak5NdA0mpQ07voHqIJ56EDLLjc0b7uioVGqoyr0UwcK75gU4bY\/5sz0i5l1UsXyE\/xhp1BW3DXNF5Khf5ZdLLls8sJKh\/Nriey9lUyLDAPH\/v3i3HiVzIMUuUHb4oraROExZEEs+6nKIiKZ238KRWP4rjUaAUHbLDH1icvrh8kloKtrNG\/3AG95tfcVl9M239dTnFB8XQzcduxkqnjBHvLIWcFmkB89yQDJRoKztwa73vUr54VvrSgOLHFcur7S195tghyTX+dKi4pAB6pQYwfJ2QFL8jnSHh0ik7TzCwQ==","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":187,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIUGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmek2CKk+gBgLMMEcAAABAQgKwtdBxn8mSzsMG9Zlx4pyIl38xUkHT\/o5UVMEf43EGtYcv4lIY8Fi\/LqFSKJSyE+GNZxkT6Tc6bS7uFIbM4czCsUnkH8iWm\/Xyol32BKfQrmSx0DiX\/IhEgWjA+1bVw1qkCgBI6O9YkwF8K\/R1A==","pkt_caplen":187,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTe9SJtEBmgBALMNufAAABAQgKwtdByQi3lrM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout55HgBAB9S2fAAABAQgKfyZLYMLXQcE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout56rgBAB9S07AAABAQgKfyZLYMLXQcE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJR9gBAB9SZAAAABAQgKfyZLYMLXQcY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJnpgBAB8CDZAAABAQgKfyZLYMLXQcY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJpOgBAB8CB0AAABAQgKfyZLYMLXQcY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0517{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqDout56rgBgB9UYlAAABAQgKfyZLY8LXQcEUAwMAAQEXAwMANc0QwgdYcEjWX\/4wHLuVBW6Cm1u7ajv39dhbN3eeeT8qB9my\/v2hL1Ym\/5KqxPzMl2FBNbNK","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+2066{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1605291688344,"flow_last_seen":1605291688411,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"rules.quantcount.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2077{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04CMgBAB9d\/2AAABAQgKCLeW28LXQc0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04VEgBAB8ttBAAABAQgKCLeW28LXQc0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2062{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSYAkAAhnO4AAAZE4\/jAk6EqAcsBIEmLB5kd7IUo3\/YpAbvbeuzTifyJtEBmgBgLMGbqAAABAQgKwtdBzQi3lrPzjqfnN8LVr+BDFEc0HS6LBJ78\/MQrTnTMMtaSvvaBR1Il\/ewitmHM8SUJohhWWcXM3EkDKZFli4ZrQj6e4ENyvqonFiGmkWpF1bfQXQ+XMPJa7a73vKZaDK96r66bEyJRky0ebiMzaJ0X98s2KT1areik67nUuC4+NO0FogoGoYXqAtHJ8lnE6LQxy7KRpXAKa\/Ur5xknqB9xniyNrCMjwJATObVGBkwmddRswMAsa0jiZAlvY00rWOVsz6RpMRQZ14SIX1jihEcZMbKuMLJPMoSt3G7FHLcE8QlOGBO13mQOgyPX6zBw54Jmw1RxPwvL3yzaovnKm5EYRbEI90NpcbrXMvAqcq5pQcjLCl5prQYdOHaXQwKV\/ywMNewQWz5cRoUzqG2VL2dnzWi7VbCmFE\/QCxDAayFxN034XvwY+agQRgD1U3CMNwdU7nmg7Vm495q9GqAtRZ+w814VXY02o1Uag8cIkVqLTPMrh7biTnHonjlOcQBYVswviCx7FLQkcGhfhYMNcOtc177cO410gLt6VsKL+k5barq71I9CCI7i4G9MkS8G1bv9A9YtpjXWn6NpDRYcOXDjDrL+JPGsUh9chOTO+G1FpGWA43iN0sCE3Dxk23g0giUKaGEpvH3BBXKYwspO5a4dAlDOhZRzonkyUgCJ9+r6CeJlTVtlKH84ePX7PMr1fRpPMmKqaPSKIDHm4l8wgbdx70qdX\/iFRy24hoFngykWv057Y79vNiWCbqfZZOClo3QsxqjDbBoVgkiH8gFTM7AQ4B1vpgdfA8LrJnVJ5VPagIiXGc3NfN1t5GTJC3yJRHpAtV7wuBVPugY6B07UJM+XQn4ialxEGQ2ia19MRtL8x4G7JlShQiVpUJMzdi+vyliBkWnCOiofjaZYYyHPGBa20NNo427HUPyW1n5nYD+UDn\/kEtuJG9CieIZcp3dHTfCiTaOsGwaVZmCVIRXgcTYlLU9aJUhfkb8XS0Xd9RocXEz+cKvQU46OxA8D3rszmlbsXQOHiV0FvH0sRVLQS\/8uu9csNwo21Sa7v01JqEeU7lhTGHGHNyixaXU2X3G4Ur49\/BrgDbgAI8T2UWvUQ4nv\/5H3DvOCKpGYtL+HrT5x6SifMvN74DqwsrNcOCgNNMnOzvfpRyudPIlmExbBGDab6nDd2HD4jJkLqycQIf1CxHCoTDV8mLmU5nm9Q5V5goQtI476ooxWvpcApcYWRzJlKPGHiaQnf\/Yik0wMiyOC94xWFiNtcDq8wNpMV6\/P3dznxNqM8qHWzCXll5XdmEwZKv3HI\/kTnxVl5ZxCw9imcICCh3Yl9qmwXFhqwrhTyFoPOc5dvNKiNB5YN99dcUHWAd4hVhfcHbPpuVB7CICLQccv0qIwp\/4lLEwqh5ibYJatDCGedjbQhnOJ+fxmng073v3f\/Ai2UZCe4CCc7B3NfrmdklB6F43+R9k+E45s1seaBYSP+2PBnAy3ZnvbgKPDczgBsigknOz1+ej099eBtw0a3Cj42jOkeI88xXRVjLjjL+TO7j64RpPyLvqzvxFYKXxSePPmoQl0CSV9i5OLOtA593Vq28\/cOsSqeM4uhJuS4yHlHH1mVG79qrOvjA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs04n8gBAB69aPAAABAQgKCLeW3MLXQc0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs0460gBAB5NHeAAABAQgKCLeW3MLXQc0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0514{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFAGAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqT5TJJpOgBgB9d2LAAABAQgKfyZLZMLXQcYUAwMAAQEXAwMANQT9482DaSeGfPdtMerjrv5LZSDOPGYBUxn1iMlz0FW5cLcaTs0foHF49wrtTXADpCjwLmA9","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC0OFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx54BuzYIqX5TJJpOgBEB9SAqAAABAQgKfyZLZMLXQcY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDP1bAHwGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtHmx5wBu0pXqHout56rgBgB9QKpAAABAQgKfyZLZMLXQcEXAwMAV\/TMNjkH2omVQHg5ejZEyBQ2M5bgYdhurjUXmj4skXhZguuBakqFnb7UNfKRn4Fk1AkRI0mUPwhgfx42YGNKPp6j6AbZXlRPU8Uvi\/EbPChmpqXFMfH+fQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0992{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":500,"pkt":"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","pkt_caplen":500,"pkt_type":34525,"pkt_ipoffset":14}
+1577{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":931,"pkt":"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","pkt_caplen":931,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gATUNACAGQCoBywEgSYsHmR3shSjf9ikmAJAAIZzuAAAGROP4wJOh23oBu4m0QGbs05IBgBAB7c6FAAABAQgKCLeW3cLXQc8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":33,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnC63nqtKV6h6gBALOCOMAAABAQgKwtdB6n8mS2M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmk42CKk+gBALMBcMAAABAQgKwtdB7n8mS2A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg60eYqAcsBIEmLB5kd7IUo3\/YpAbvHnlMkmk42CKl\/gBALOBa\/AAABAQgKwtdB7n8mS2Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0867{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":30,"flow_packet_id":255,"flow_first_seen":1605291687931,"flow_last_seen":1605291688455,"flow_tot_l4_data_len":309525,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7280,"flow_avg_l4_data_len":1213,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.youtube.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0512{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605291688611,"flow_last_seen":1605291688611,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp"}
+0441{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACgGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z44AAAAAoAL9IIe6AAACBAWgBAIICvY2BR4AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cTxd2ePoBJXgMFkAAACBAV4AQMDAwQCCArC10K+9jYFHg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z4+UttHFgBAB+0VLAAABAQgK9jYFScLXQr4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/AiUGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3Z4+UttHFgBgB+9l4AAABAQgK9jYFScLXQr4WAwECAAEAAfwDA46RLPCXby2v1fhhEaIIot6g8XiGmSWLgLgejrMgyw66ICkvsU+x9q1tILELIWe9u4V18z4rsB3VSuGPlE2gOpFxACAKChMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZMKCgAAAAAAHgAcAAAZY2RuLnN5bmRpY2F0aW9uLnR3aW1nLmNvbQAXAAD\/AQABAAAKAAoACNraAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwAp2toAAQAAHQAgkrvLnn5W3A5xznxU8nIj0ij8otKT8iVeuL\/XwL97plwALQACAQEAKwALClpaAwQDAwMCAwEAGwADAgAC2toAAQAAFQDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0857{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":36,"flow_packet_id":4,"flow_first_seen":1605291688611,"flow_last_seen":1605291688654,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cXxd2mUgBALMDnoAAABAQgKwtdC5\/Y2BUk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0562{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":185,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20cXxd2mUgBgLMHVeAAABAQgKwtdC6fY2BUkWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcICkvsU+x9q1tILELIWe9u4V18z4rsB3VSuGPlE2gOpFxEwIAAAwAKwACAwQAMwACABcUAwMAAQE=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0896{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1605291688611,"flow_last_seen":1605291688705,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Twitter","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.syndication.twimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3aZSUttIogBAB+0KFAAABAQgK9jYFfMLXQuk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1130{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":609,"pkt":"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","pkt_caplen":609,"pkt_type":34525,"pkt_ipoffset":14}
+1141{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":14,"flow_packet_id":255,"flow_first_seen":1605291686064,"flow_last_seen":1605291688712,"flow_tot_l4_data_len":156291,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4224,"flow_avg_l4_data_len":612,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"preview.redd.it","server_names":"redd.it,*.redd.it","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.redd.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"3D:15:31:F3:94:55:33:92:88:5C:61:40:B0:FD:ED:27:6D:29:3A:12"}}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1605291688712,"flow_last_seen":1605291688712,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHQQAAAAAoAL9IGnKAAACBAWgBAIICoWLJ5EAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNBoNFCkHQgeCALYqAcsBIEmLB5kd7IUo3\/YpAbubOJS20ijxd2ufgBALcjbcAAABAQgKwtdDD\/Y2BX0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2076{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UttbggBAB9Tt0AAABAQgK9jYFpsLXQxM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2078{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2078{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UttuYgBAB9Ta7AAABAQgK9jYFp8LXQxM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDEO\/ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATQaDRQpB0IHggC2mzgBu\/F3a5+UtuBQgBAB8jIGAAABAQgK9jYFp8LXQxM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1605291688749,"flow_last_seen":1605291688749,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7IAAAAAoAL9ICgwAAACBAWgBAIICm3\/yPIAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyAqhUIR0FoBJXgNU8AAACBAV4AQMDAwQCCArC10MXhYsnkQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHQUxsgKpgBAB+1kkAAABAQgKhYsnu8LXQxc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1123{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1605291688712,"flow_last_seen":1605291688754,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"static.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0442{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXPjQDuzoBJXgOVIAAACBAV4AQMDAwQCCArC10M\/bf\/I8g==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7OBGGF0gBAB+2k0AAABAQgKbf\/JGMLXQz8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAO7OBGGF0gBgB+9LpAAABAQgKbf\/JGMLXQz8WAwECAAEAAfwDAxslW\/nV6n4TSU+WU427vUmpkTBTAfJMCiXCjsW6jsM1IDI9pBtUEgNPXXn3m6DfkXTykQkxvHtW6AlECtSxtZwqACB6ehMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAEwARAAAOd3d3Lmdvb2dsZS5jb20AFwAA\/wEAAQAACgAKAAh6egAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKXp6AAEAAB0AIOcwVI1IhWdfqyJF52U0JaQN9BKpJPL3krZ3EsrflGwKAC0AAgEBACsACwq6ugMEAwMDAgMBABsAAwIAAvr6AAEAABUAzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1605291688749,"flow_last_seen":1605291688786,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyAqlUIR8KgBALME23AAABAQgKwtdDSoWLJ7s=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0874{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1605291688712,"flow_last_seen":1605291688813,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"static.doubleclick.net","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2064{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1050{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":546,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAewGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyDBlUIR8KgBgLMG5PAAABAQgKwtdDUYWLJ7sAWdSA9dP6l2hGNH1MScc+LBfToGcOsV4XAAaR7p7paqFbidCYEBprMy2tW\/eM1TAUSj\/+KZgcBOC4woJCh9RbxK\/sR3Qx+Z09th\/+PGt5Tz4GMzFuuEgmk4nnUuKdhERwiNqPe+J2r+fiqiXRInJDfjwwZlZ+x0LYsT4SsPfvT8ig7Vd8dlhkUXzfEWgs3ParQ0ZRzL30sEn\/mlCdNvjGW+gzzULVpDW5QW2Phd5lIX2HhCvkga+pdoiNryQtMtdyJ8XoSsSOZZtMsDKFUJQSov35Dk1W9abDJyOjIvea6sx1CXM0wXTd++ht8hdQGSo318njBm8YlQJReos58jWIMEuiEIZ8mWmov+du0OvSZcb98wkoJZGy4Zybu\/rOLa3ABSFkj1Vb3rH0Vg23EE58yIoYScZZWy4PHxZdQvSsAKBlBzlcbazWe45kPVgoLxoFu8pErPNpSVpClJOT\/jIKFqIfLJHpscEIPQd\/ucKrmi4sXieG7SK18qYUVqHuah+tNWegI348jnfNfzI2FIogMgeJW5Ln7PA5EZylscaV6op6JffT7Qc+MEDK84BqVVKyRPyf6Tg4CCfytahhmQlG5NA886ohE7a2oCvG","pkt_caplen":546,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsgdhgBAB9VH4AAABAQgKhYsn9sLXQ1E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsgwZgBAB8k1DAAABAQgKhYsn9sLXQ1E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsg3lgBAB70t6AAABAQgKhYsn9sLXQ1E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhHwoxsg3lgBgB9QvCAAABAQgKhYsn+MLXQ1EUAwMAAQEXAwMANWxcOGJPb\/bnuwx+2gjxE3DRB+OYnyfDx1WN1ZWWBg8XqFZU3GGEx3VN8\/AD0LZF2XY0KMAe","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhH0oxsg3lgBgB9b7CAAABAQgKhYsn+MLXQ1EXAwMAV7DTKicdyIW9oddQezvsVCqOnBsYYNXBUX\/VeTmD0ji7eQF7bJ\/RBzIyz06PRPexQ6SFB18LSfT2xP7JpoMR9WY9qSF5V6lAi73Si+8b8DV8mVSE7oChjg==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0787{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":350,"pkt":"qtsDr8lk5EKm5WPyht1gBqw+ASgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAG1cYBu1QhH6Yxsg3lgBgB9dztAAABAQgKhYsn+MLXQ1EXAwMBAwHGgS8JktvfhJS8HTbLgj6uoqDjdEf18UnkHBBik+lUriT5jTSaDF8DTTSaPFnnQE\/THCeaZwSWe2Qx5gktzbknDzgl0qSZvL43hTnvc6sKMpbI4hoqcvs1mtK6XA9ZTPZD\/qcqEY\/ovDS3gRdB84oNtU0XUs7CLp4pcnDoBjlyU\/UvpAtKVLeacATqoil3q0W2mi13oMQfs9ljUx4gBCLPxau2brTAO4vE6RmkIiawY1S29m9LWhjIgfeu1beb4kX2rd+jr9Gv0KKGJVjV5S4N\/SSfpikfvX0EKrxDX28Qz3HfasQcEZgQU2TQ3cT+WURQcEaaY0Jo4dPdHGjmgnxMadQ=","pkt_caplen":350,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1605291688830,"flow_last_seen":1605291688830,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5AAAAAAoAL9IFwjAAACBAWgBAIICu7gTZEAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1605291688831,"flow_last_seen":1605291688831,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+wAAAAAoAL9IM9TAAACBAWgBAIICkSadMcAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXTjQD24gBALMF3PAAABAQgKwtdDam3\/yRg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1605291688843,"flow_last_seen":1605291688843,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp"}
+0441{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/oAAAAAoAL9IC3PAAACBAWgBAIICjfz93gAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1605291688843,"flow_last_seen":1605291688843,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulIdYAAAAAoAL9IPghAAACBAWgBAIICjfz93gAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+2072{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYYXTjQD24gBgLMO07AAABAQgKwtdDcW3\/yRgWAwMAegIAAHYDA9hl96NcXpyz2ISlFxxvyE5\/hkAR+BcsBnhxw1qXKgxCIDI9pBtUEgNPXXn3m6DfkXTykQkxvHtW6AlECtSxtZwqEwEAAC4AMwAkAB0AIO6mOXa9ieI7g7AiE4RgUaifMNA\/iGPHbvUnXohFrQN3ACsAAgMEFAMDAAEBFwMDCb\/9SXEBCPgNdvwhK\/4ZpCtcyaxgXmkJ0GF3xY7B38gEmOMfWYQCKvhiZqmt\/QfSEQKsSTm0Os6xPMLBHcH5TgF2fy5Zl3qASi1iyf+fBrJdrB+fkdin2J04aiGjd3XgTrWUNfkLZdQgzgItYY\/Ws\/ealoOISn7pxVzgs6\/XNXPXiVhaZN2Ne4z4VQDCKHDwLDsvLTE1wUlr6puadbWBmPVKXuCGQwehVLuaCYnYCRGULZkGxrl4AnCxz1qaqshqCiUgucX+Mr26F0kJ+Ux884AIOXPYb5ncZEsI7kK4bytDHiSI1XkPFazSYKGz16eU8oWpP5M+lJfcRLJKz2EVPTeheSgMYQZqk\/rsH7gf4CvbAfIw4I\/RkTYgaGjq9WnRMb3WM8\/xovsDNeElM2cWz4ihvfZp4n8nrtNyFjlIPoVLeOKHEOv4PJZdP49rga3Vh\/NI04Pn7a6pTLhVQFd24mHJp\/DhI4EG8amwpRhwjQNg3eWKUIWKxAcvSLgKJr5k\/2a+Z94ijlhxbpaY+v7faJeWMVfCQcH3FcFC+SZmRQ5m+KMpTHllqKl0DT0f+bpD2ypOlUj\/gj+oymZa+QwzsNwil3IRC9B9Bw8YYY2al08fLOM1dv71PmO\/K3Can2qRn8Y9HqIGicWEApdQrQYs8aGY+YvJ81BnbhJnhDaLMG0RIBtRNYBUNDw\/08wpB0o00jrj3PKLYZ9fIitUIu7gkebZaNVd4s0xAcqcH\/kK9PNLne2lLlRXHA778aAbJ83j418Fef2oQbxlmsho9bszQkVaA4t9\/K9R4RkT2KToOdWWWOqkMLqqckzRlD9\/Yi+IvwrgzK78X\/aKx3Mjgm61C3TBm0ijCn2o3EBXqUNAS71RbHEvihEmeHuVhYWsI22LC7wk5eNHGzqXCxyE7fnBzbAJWxnvTprcFiL9B1sAoOl6xRLpbJ34vhK6mkH\/hnpHcRYEG26h+BMrpqBw58I7LL5ZQHc04Arjy07INsxj+7zD4gePA5kAunH1nabbgIpia\/Yublz3Ptp6CL02DHAWZEkK7zfVuASkLeXxTkiEmBDyYJkojlr2GRmULlD3O7+NtYTmDYL7pm9bxRdp2VpYeril5PBLyUOeb8NWdfGuqPVxYCloqn6Mf49R2iQe66xv3udU\/+Pt1k5mqBwaTEURAMQrjwaSknkHWdZuqSvv9\/URiU0a1JmRpC2CCKXVTXSmqJP2BcjA4MuKlPE6ChBk+Q888EBadeZMIkb5gI2oXnfzdB59KcUVuM2evyEy23yhECd+A\/Ble3VOsfybdaZXjOqpw6r5v4FxKTDrd+k91erOqMF4DhUnAOpudCewLCwcHAN\/Dc3SdK3HSgEPuYhloPd3wudQvJWMqGndh7npvpP6ApKRO+VKFHSNeG+9D7xdK0fEpiCzLqjLhpvns1vwkw==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0866{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":38,"flow_packet_id":6,"flow_first_seen":1605291688749,"flow_last_seen":1605291688848,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"www.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2070{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGYsgBAB9WINAAABAQgKbf\/JVsLXQ3E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGrkgBAB8l1YAAABAQgKbf\/JVsLXQ3E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0721{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":303,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPkGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYauTjQD24gBgLMO9eAAABAQgKwtdDcW3\/yRj22CaIGkFKgjMJdIviOlFSxzfTtB1VAkH6FZG1EY5vqQWQu1W1qhNzxf1cXpO+\/Q1B+to4agaZY6goL3el3O99qqVao3uJh1S2EcZznbDnOJh7caS16vCgmMUjCOjnjLTMzjn+MN8ukKN4z2OC0vNIsrmNefATZbZ2khcKWlGoef+Y7hJA8RHzlkc5kqIGcpYReFXzxH8+1m6zn8p7T2hXcCFf0FsSXODpq+gBZ1oWOAWsXlG1NjeLCAN+lzap2wQ59SxOqQmDiEakQiYlFHUvcDyBPzqh3CcU","pkt_caplen":303,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGu9gBAB9Vx7AAABAQgKbf\/JV8LXQ3E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPbiBGGu9gBgB9RHpAAABAQgKbf\/JWcLXQ3EUAwMAAQEXAwMANS7pbYekUrI79ZNEw3VzDbAZ58PddFvDuJcfrSKZm7mSjkQXpPd\/GQtaXLl3zlXxW5t7Z6pW","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0556{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPfiBGGu9gBgB9T6PAAABAQgKbf\/JWcLXQ3EXAwMAVyWhRzz0RSxcLhmCGRcey9SZMukJBxf8zaXPq+iTFZWDbnDj+F2oNI+2\/cMUzDH5UKi0awQ2XUbmqGo9KiB3ZPc7vNjp6txIhBg4qp6pEoJGLpLhkAIDuQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0815{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":372,"pkt":"qtsDr8lk5EKm5WPyht1gCJDMAT4GQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAE38IBu+NAPlSBGGu9gBgB9YUJAAABAQgKbf\/JWsLXQ3EXAwMBGVeZOwPo2SFBU\/dwgOV0mRWcYfIJR8xqvjOm3GWUPmi1rxjok4Yyl5Dr8QKYbzb7CgdaKRYZaA\/\/jGlomXLpvZrz13MtIe8Sx7diX+zXgxCqzbMTR3pcJ7lqwy3sd5UyINRIpJSxFDXfMfPNeFpt8qQLqJGK\/BFTlDOVvcU0fG7CbBSJRtDBX44cM+fDF4rZk4fuXwqx+596dnCvpAmr8e+RXlT4j6Kh338gPFSmhIL7KjEfXC+U+qbC7gPqcA7XsLll1WFZjarIT7VxQlWtUGpIeReHXCkabMzFhxlSMUOEb1ATYBRqHnJHrqUK5ZwNHO40T28JhE5XOP0nenltfqqMakZycoISC+qdQnOk5lFkAguwNaRhUwwJ","pkt_caplen":372,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAYqAcsBIEmLB5kd7IUo3\/YpAbvVxjGyDeVUIR9KgBALOEHDAAABAQgKwtdDfYWLJ\/g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp17E2f1af7oBJXgOZHAAACBAV4AQMDAwQCCArC10OnN\/P3eA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lZERbpSHXoBJXgPP1AAACBAV4AQMDAwQCCArC10OmN\/P3eA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbvfwoEYa73jQD34gBALOFLBAAABAQgKwtdDpm3\/yVk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vp\/v6dexOgBAB+2orAAABAQgKN\/P3psLXQ6c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulIdc\/JWRFgBAB+3fZAAABAQgKN\/P3psLXQ6Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1126{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1605291688843,"flow_last_seen":1605291688889,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1123{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1605291688843,"flow_last_seen":1605291688889,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfikiqr+RoBJXgDd0AAACBAV4AQMDAwQCCArC10OZ7uBNkQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5FF0H4qgBAB+7tFAAABAQgK7uBN0cLXQ5k=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1123{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0AiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqv5FF0H4qgBgB+5EWAAABAQgK7uBN0cLXQ5kWAwECAAEAAfwDAw\/cwYtpk8EY2nFSet6HfhMTIva07YBjsHCyF\/EXCY4lIET\/tOg8vSE9lW4MNj+8zcNcKH9YOh6jVhMXDVw4Nj\/KACBqahMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZP6+gAAAAAAEgAQAAANeXQzLmdncGh0LmNvbQAXAAD\/AQABAAAKAAoACEpKAB0AFwAYAAsAAgEAACMAAAAQAA4ADAJoMghodHRwLzEuMQAFAAUBAAAAAAANABIAEAQDCAQEAQUDCAUFAQgGBgEAEgAAADMAKwApSkoAAQAAHQAgNH1NsmWXDLZE3tZCuT77ObLFazHLQDqNeh9VcGafUUsALQACAQEAKwALCrq6AwQDAwMCAwEAGwADAgACWloAAQAAFQDPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":39,"flow_packet_id":4,"flow_first_seen":1605291688830,"flow_last_seen":1605291688894,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"yt3.ggpht.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRvaZMy7vtoBJXgIUlAAACBAV4AQMDAwQCCArC10OaRJp0xw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+0r0b2ngBAB+wj4AAABAQgKRJp1BsLXQ5o=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAiUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLu+0r0b2ngBgB+10nAAABAQgKRJp1B8LXQ5oWAwECAAEAAfwDA7oV79R4wHgRAL7AbVXE9v058PsBigjvSIOLh78hsprPIH89NlzV0TnECw3jtHrFgKXeJLtftYSCOzC0pH+h068qACAKChMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZPq6gAAAAAAEAAOAAALaS55dGltZy5jb20AFwAA\/wEAAQAACgAKAAhqagAdABcAGAALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAADQASABAEAwgEBAEFAwgFBQEIBgYBABIAAAAzACsAKWpqAAEAAB0AIDrwMaG6jpMb0YufYlUyECjXCvQ2CIEExX7BF92xG1MCAC0AAgEBACsACwoqKgMEAwMDAgMBABsAAwIAAvr6AAEAABUA0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1605291688831,"flow_last_seen":1605291688895,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"i.ytimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp17E6f1aoAgBALMF7QAAABAQgKwtdDyDfz96Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvjCkXQfioiqsGWgBALMK\/YAAABAQgKwtdDzO7gTdE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRvadMy73ygBALMP2JAAABAQgKwtdDzUSadQc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2063{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0868{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":39,"flow_packet_id":6,"flow_first_seen":1605291688830,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"yt3.ggpht.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2073{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2066{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0ILigBAB9bQQAAABAQgK7uBOFsLXQ9I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0IeagBAB8q9aAAABAQgK7uBOF8LXQ9I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0IxSgBAB66qpAAABAQgK7uBOF8LXQ9I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0JEKgBAB5KX4AAABAQgK7uBOF8LXQ9I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0963{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":483,"pkt":"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","pkt_caplen":483,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0866{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":40,"flow_packet_id":6,"flow_first_seen":1605291688831,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTube","category":"Media"},"tls": {"version":"TLSv1.3","client_requested_server_name":"i.ytimg.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lZEVbpSPcgBALMGx9AAABAQgKwtdDyDfz96Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2070{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+1347{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":765,"pkt":"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","pkt_caplen":765,"pkt_type":34525,"pkt_ipoffset":14}
+2064{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":41,"flow_packet_id":6,"flow_first_seen":1605291688843,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBrB0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAB4woBuyKqwZZF0JKXgBAB4aRuAAABAQgK7uBOF8LXQ9I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cJfgBAB9QHCAAABAQgKRJp1S8LXQ9Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0ccXgBAB8v0MAAABAQgKRJp1S8LXQ9Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cm+gBAB7fpqAAABAQgKRJp1S8LXQ9Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfEGgBAB9WMDAAABAQgKN\/P38MLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0794{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":355,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS0GPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4xvp19b6f1aoAgBgLMOzfAAABAQgKwtdDzjfz96bUsmxC081h5ZSDjxYRC0\/vv\/aVDshIdoJf6XkBZrgfA6CGMnWzHlpEnzbc7BqGk5ohBApcWitDvQJDlTjw5de+3Ihck2QENwDH1A1C99dPldt6z7bfhbLeNoAzjfAlcbEjEU7iHZTnGBK5E+u\/EHaxbynFMAXGohBOqzClJuJu+19rl8E\/YfUYDUX70sFkkMI6fVz9PgMVWLSyLEUNE43pLwnYGuSRqgOUJrL5ANkwcYvoklc3cngTRBKFb0tdKeqkLIFS9nnmzg+7jNZYc3US45+pndZTpBJ48U7HT3zpoSkQMHOarKLNSo9G0FVAClrU6ugD3cl0E+6zThNByss7DaYi9sm4ghjKTZUUTQ==","pkt_caplen":355,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":42,"flow_packet_id":6,"flow_first_seen":1605291688843,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.gstatic.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2071{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8laP1bpSPcgBgLMKhgAAABAQgKwtdDzjfz96buRS+F7fp8hxn1hGstedehWvrxbbnf5sFtMlZkIjGFHRnRdTh48tSHR9xzjhE9LK0pwSu\/dYtdAcLdmNNYnIfGRIydRlAqXG013W8bOqYtXFkhvvTH0AMDSEyEJ2iKwuqoKWqgzyPqdMZGdOm4CHO8gFTbJdW+TL9bv9kHixd1jMetnEdXSg\/EzybhLtPsZgEYBoI3W0Y\/+p+Ga38oo0xS\/AAyjhQKjlmhRzm0slHPti3ef3\/uVXjr92Uu9u1+lq6BrM5bvmhNrddZ3eV24j\/lUS+3S50QXCvQPe55Nr1egbwNJSlW2bsdLA8iaZWoY7PQFVSeqhQleZVb+SCgUSUMWJOAI8mWpOLwtWN3AQ50IsdPERYXOGTBvGQEZb3qwyFO94a5I3TEVWTdwKTomJxi7opPDD50up5H4VpBJf7WGFzyv9i88zoiADzusvktGfA1kcmOFwQmkOVPRilrA84LKkqI1mCnEgHJcXP0um9QVCGyXokf8S2mntzVVSah3\/Oiume7yU7DUi16bjtG3+hacWBGMO2+Ni\/N0gFkx8RKWKCOe+Pw4h1nz\/ZsTqg1jlGy1COC0iQODZMHbrFHUVf1TTyPpWY0GV\/jtizrpoM+CQRp5fbNTMdjeM9QwzZxOen7OYcrRQohprWRosyPbPUlPHvyaUT9XBvcmVKbHhpJ7\/ENeC7X4o9PznO+kwLhMxiuIDVzw5GbYl+JYxUuZodRJAKsnKUh15nXhT7uYOmR6EvMBkgH\/JmH7iRMKedBnfKQhNU3U9X0pH9RE7TJ+Pb5AR417AYuHI2a1OycsJ9VJsXVMIUzhE2WVFmmei7p3buMhei2FBZdrnNpH01gjdDcDg8TVswpEIxA4wpI+Z1xqpYGXa10OrUg+O0OstqI7Z8WBeHrSyh\/sxexVKv0QUgCFTh5QGCPVIGPPfuqtyGnmSxY4ZCwrA72A4ZYfcaLxeZfiNw6An2C2iKBW4EvhEZjVPWy7RovF7LolzSpY0T2YJnDOE8ju6hU0odNvq2h90Hy3E7N4cU4LbJH2M\/BkuCKBIP3oGBI4EnZpJJzqN2O8nwPetDTPjPt5nGEtT\/10pJp+3R9T8RW\/Z1SZhLp9mWZaEnOAS+5FxQJJzMWRbSCBZm+WsoHJ4PTGiG1wUc7zMrF\/LYaJYaOCzBy8o3jERgtb9n\/HIC5t6PQBZvbub1VrbRzmkRkAxJXCP6opcoVDJrALCwDIyHoyq3DPd8phdLNNv54NWwuDqOH2lGbPcsBNjDqEClKD\/g4yXnG9lYHjd0obo+m7ldwBHEuJCxxsrXp3vftYJXYBqF4PZFwyl4r9kj1pMychW\/OSSngzSnew9vZxEeL9dN5r7XDlLICd9LY4URxfmozeeoNQkZ7dWkUX+mhVOP9OsszMfIndovXrqKuDdQrxx9iD+JEXCBTc6rTHua7TEQgNabv4ZSAPBxPGfwwImC\/g5SxfFIlT7\/QS\/92elaiB7qRW4StlS6RSZI\/+UnUMulk63ksJt+\/\/AkNu\/3buShBQqXc50E7ZavxrQrx68ZtLrenPRUaQKteFvxWyj0MvLty4S3W1Z9obYhi+pysFjrn7+1qDoM4q37W8C7GHoFwPoQfLA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0793{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":355,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS0GPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbbVbpSPcgBgLMCGjAAABAQgKwtdDzjfz96bPIEph5izz7ezvMZGFIrlXa6WBEFpLgQuikWGA5oQiJy+ofZfIezYUrEiSgkfiwC93def9fqnLfsL3nibiaPMaGj3P4lu2Ktst2eV899ca5jeu6XXaXgQo54RX4\/Qm7djxnj97n3fxSaIDTzrfA9eYtN+x2bZUZfyl4VbV1ZO8sMitpAtpVifZDuu+wj4MuteCH\/AiJ2Rbq4BUyn202RgkMsZw0IaXT\/2PGc3dduytbXCerx5uPUdp5l4lf9dhteRKTWkDkvAFgTeKK7LVvcT3RaTwnEv+opN0tRdVWTRuipaK7yQ0S3Wd1AVCtzeZqIyh2Vce2sWyV7YBLOaBpD2MTQJgJrwvxbU3LOuUdg==","pkt_caplen":355,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfW+gBAB8l5OAAABAQgKN\/P38MLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfbLgBAB8F1DAAABAQgKN\/P38MLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JWj9gBAB9XCwAAABAQgKN\/P38MLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW21gBAB8mv7AAABAQgKN\/P38MLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW7CgBAB8GrwAAABAQgKN\/P38MLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0517{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvfIr0cm+gBgB9UKHAAABAQgKRJp1VsLXQ9QUAwMAAQEXAwMANSQF9LAxFquz90lsA+3Bn1jOTlFW\/zyg43dEw+G6xOIF77JK5E\/qWe8aImWD\/qGb5Bi1Tl+e","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0519{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqgD6dfbLgBgB9WtZAAABAQgKN\/P3\/MLXQ84UAwMAAQEXAwMANag\/zot3eO2xQUGPM6bVrD+vsIB02CvxdTsR8l7fF2zwPAX2HEW535Yri2kq\/gyqka03EszC","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0521{"flow_id":42,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulI9w\/JW7CgBgB9aZCAAABAQgKN\/P3\/cLXQ84UAwMAAQEXAwMANbUf01yQTavdZEcoPfGW3YGfmMqFlu\/\/PwheKuZvuCwsVVD\/0YptIUsRmnVW+hu81Lrqh\/nb","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":42,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC3ZcACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMgBu1ulJBw\/JW7CgBEB9WqdAAABAQgKN\/P3\/cLXQ84=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gDPOvAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACAWzEgBu0zLvjIr0cm+gBgB9eg5AAABAQgKRJp1WMLXQ9QXAwMAV4XUA8y\/H3rV3I7A+4+L3+6xTIDkH3fhQx0Sg72p0g9WgvejHYF0uMsIVfg6aVnEoGaa6YMGbB8R0N7hoUjdx8L+Tc\/+DVxCs5pFlZAihihNoS\/XgXDNzQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0560{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/VqkD6dfbLgBgB9YiaAAABAQgKN\/P3\/cLXQ84XAwMAV9gbbZns+ezhodF9W5kAdJPIX+uM60i\/xfsqUHL4Us2BItuyjw2dFWYGEgZku9XHLH1EkgI+lba9OoQXHPNKqfo5waZIyAQx\/WM2t2\/NmGuPFdtka9wbMw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0840{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":34525,"pkt_ipoffset":14}
+0841{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":387,"pkt":"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","pkt_caplen":387,"pkt_type":34525,"pkt_ipoffset":14}
+0543{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291688,"pkt_len":167,"pkt":"qtsDr8lk5EKm5WPyht1gAjZHAHEGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDAAAAAAAACADuMYBu5\/Vq8n6dfbLgBgB9e5VAAABAQgKN\/P3\/cLXQ84XAwMATEURRg2y7c4DOFmEgEKFboIMyKQIBVehNZ0+V9Dl\/5oq+kmXaTN0jgajODmhaoPq4MRH6Ny0DoOV3\/IyV6g+ZrLODZm4PKlLUTtbuPE=","pkt_caplen":167,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbsJbpSQcgBALOGENAAABAQgKwtdEHDfz9\/0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgMAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbu4yD8lbsJbpSQdgBALOGEMAAABAQgKwtdEHDfz9\/0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIBYqAcsBIEmLB5kd7IUo3\/YpAbvMSCvRyb5My74ygBALOPCMAAABAQgKwtdEHESadVY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1605291689408,"flow_last_seen":1605291689408,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPoYYAAAAAoAL9IMRnAAACBAWgBAIICql08xMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ86cETj6GHoBJXgAFCAAACBAV4AQMDAwQCCArC10XLqXTzEw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPoYd2fOnCgBAB+4U5AAABAQgKqXTzLcLXRcs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0833{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1605291689408,"flow_last_seen":1605291689434,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ86cITj6OMgBALMHnhAAABAQgKwtdF6al08y0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1834{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":43,"flow_packet_id":6,"flow_first_seen":1605291689408,"flow_last_seen":1605291689577,"flow_tot_l4_data_len":1773,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1845{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fO3agBAB9X5yAAABAQgKqXTzvcLXRes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPHygBAB83pcAAABAQgKqXTzvcLXRes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1840{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1158{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":43,"flow_packet_id":10,"flow_first_seen":1605291689408,"flow_last_seen":1605291689578,"flow_tot_l4_data_len":3997,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":399,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Reddit","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gateway.reddit.com","server_names":"reddit.com,*.reddit.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"16c0b3e6a7b8173c16d944cfeaeee9cf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA","issuerDN":"C=US, ST=California, L=San Francisco, O=Reddit Inc., CN=*.reddit.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"DB:E9:D5:FE:EB:EF:68:34:55:FD:62:BA:C9:BB:04:D4:E3:22:18:81"}}
+1131{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":601,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAiMGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ89goTj6OMgBgLMDSEAAABAQgKwtdF66l08y2MeNOajMtxBxZ+LVRuvUxmRODoEmjzZpUwTQHXVXdAaqEqvizNUSG+LT4vLrN7\/K4TwkEU6rRjdvl7TGJTrtCTMr2vchF3+WWRcRrbCxS19I7FpLOu0+uRp0eAJTMGW1sjp2Tl1N1sPVLUR76tvsG1UZjWq6EozImj5ue5\/NjN5pIuabHxZABwArW3iblcTRJthPe\/eXEt+vWXP7bK6pfiHfdKhr+WbtteQ+gSEhA1KkKMKnmBC2LheG29uhxtvvQ3X+xQV+7F9j4WAwMBLAwAASgDAB0gdfzHLPAZHR0tU6idUbWdeWhmleDcvOQ0xlxqvsq1k2cIBAEAJVNQrCbU7askIJmKVQKey4LKSvPWJWm\/qUrBrweaBqbT7Cr5gZvqHBU\/mFv6fQKK95vzS\/E2+F5TR45FkOs1KCwmj3aTK2P2FTjidKcmDyq29+w5JgJiMB0yE2H7MbX6DgZdfqDOhhIdoFp2UVKrWt+0QfGy\/c1R1nUH8Fn6SQtT7zH4S6DAFwDfvv\/ZnJFypcwOeTHdJ8ikpUvRXdcvAdnov2uzmB0\/d3D2RE3KK9vq2IGE5+vQOBbeKbiXK4ptDdJwHa7f0CgP7qUEzENKosP5odm\/0vXhP3XtBElzujVdYenGhLYA6UGZz0BIJ02\/t7g3aStdyZX6SGNWhNKk8xYDAwAEDgAAAA==","pkt_caplen":601,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPYKgBAB7XZKAAABAQgKqXTzvcLXRes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPgNgBAB6XRLAAABAQgKqXTzvcLXRes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":179,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFAH0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo4x2fPgNgBgB9ecwAAABAQgKqXTzwMLXResWAwMAJRAAACEgXdr5tAznIsP0ZYcFVU0Vp9mW5dinaB\/IC0Txi4uVK0MUAwMAAQEWAwMAKAAAAAAAAAAAYObURD76P7BRqmy0nANK1AwCnpZf9yXzOJlnIkFwHnE=","pkt_caplen":179,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_id":43,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291689,"pkt_len":185,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFAIMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPo+l2fPgNgBgB9WkEAAABAQgKqXTzwcLXResXAwMAXgAAAAAAAAABu4ekuHoVU7jS8MR7sSH27XAbRL1e69fImX+DRf\/j0WZSraMLPQfRpqZpC6EyneH36Ab4Rdmg5rWFB23meVfCGPLJ5PocjEgqrduJb0R75yBt8s5nrqQ=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1605291690373,"flow_last_seen":1605291690373,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6Su2UAAAAAoAL9IFr7AAACBAWgBAIIClRf7UgAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1605291690384,"flow_last_seen":1605291690384,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynDEAAAAAoAL9IAqWAAACBAWgBAIICgxmJysAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Xl4+krtmoBJXgDq4AAACBAV4AQMDAwQCCArC10mNVF\/tSA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6Su2ZbO15fgBAB+76yAAABAQgKVF\/tX8LXSY0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0830{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1605291690373,"flow_last_seen":1605291690396,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"adservice.google.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOmbspwyoBJXgGsCAAACBAV4AQMDAwQCCArC10mUDGYnKw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynDL\/+TjqgBAB++8BAAABAQgKDGYnPcLXSZQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1605291690384,"flow_last_seen":1605291690403,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"adservice.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1605291690405,"flow_last_seen":1605291690405,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15YAAAAAoAL9IOjCAAACBAWgBAIICgKUPwEAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1605291690421,"flow_last_seen":1605291690421,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTDYMAAAAAoAL9IIEIAAACBAWgBAIICl8E6ogAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Xl8+kr1rgBALMLNSAAABAQgKwtdJs1Rf7V8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5OOqbsp43gBALMOOjAAABAQgKwtdJtwxmJz4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx++bDteXoBJXgLoLAAACBAV4AQMDAwQCCArC10m3ApQ\/AQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO15f\/88fwgBAB+z36AAABAQgKApQ\/JMLXSbc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1605291690405,"flow_last_seen":1605291690440,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2073{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0871{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1605291690373,"flow_last_seen":1605291690448,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"adservice.google.fr","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2MXgBAB8redAAABAQgKVF\/tk8LXSbo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOtUOc0w2EoBJXgGkiAAACBAV4AQMDAwQCCArC10m3XwTqiA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+2078{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0872{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1605291690384,"flow_last_seen":1605291690449,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"adservice.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2072{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Yxc+kr1rgBgLMI\/+AAABAQgKwtdJulRf7V+sW6T5EprOWe81YNFl6OWXXLXWlz4pye2aVy9hb3z3TXBBOd0F009VYbl6aogCrvO67ej\/2odmnNT3AhGzbJbgf4TU81B4W3XSbFsi2Lkr0yBCGxWZpgFBZ7UxicSsiIHN7E\/pGk2cQCFlq5QyeocfQtXdRsAlGE+Wh\/ZJDWOH8daegj2q6957MbQdCvMbLT7IzVnyWmP6+8jZEtwKxzEr\/sZl5AMkmDWi68LxXHiOFhTyshVQPJUcvdtM4tNk1JX2OllZgYLLLoYNqSwTsfB6sy6wTeaQrsEb6jjh6J3\/M8TX+dRgIJH0xozd8oRcrXUUPAQs5QTE2daCYBWDGGKLX+mL\/GBy7OAshcQII5Yv0sDA1OPfJUFlh0wFD\/Pn6Lh41SETrxxY6\/6lEBQWtgVzNQtGV0ubqS3Vwl1Ag5rstSHKlC1VBv1W44oyG5g4kcH2n4Et4xAoBWXb7EiPA5p2GVPDFLUyLMMJLn8ba94uHjKnovPFYZm2075xPBTPh3njWJvkdadU7IQ9ssDFcyFNkX1Ri\/yF3tsBhz3h62JjWwgAUIQu3T9rc3\/4psn65r+BWTmUeSF973till\/uXVODD2JsItiN1BaFSSfdchV6JpHu2JhGWOqEEhkdkMzSP4MO6b18NfLGSeu9XH0y8bIj0z0CaFpyyi098RdJYcgsFK8LVaXK2h9ZJn6sxcxq7lzz1X7+FTVt7x2ftlNOGJASdcmDTcGMzbPZ+FGXQUrH8HI9ym2bcmKLSoFykZIHy5ju9Yc8xLuGbzfo77ACfjvaoK9qW1mGBB\/RCTuUYFg0DuygG88hdtIR0OUdHPJBRls97PJBZEnP9RFaJ3LkDQTShVqIngwUjF2GXtdlf0dvjHcVlvrsOEF\/5o34QUnqKshihkp1x7iLePpb6r9WJcs6UzNv2+0TKQAAjV78rHhI3oCnNq6DEotVg8zL0qXbSL\/gPAzKgNEjWAjnxh+NlcqUWl3m18uuV\/1rUcpmjarRZ1Xfksgv\/NQLl3CS+P01yU8io0FWFaeoXSX\/zzZD7Lm9fUwFhXbtTgDUk+084aLDJy6Ns6K1LMrdMIMAmZLws0p7RTxRe1LNoPxjhKCzhgZnbp8X\/sZDhwv9nVPiVTmqia0VsRKn7sdTXhrS\/wPXIQtxGLj005XZY5VO6t3pEloOYFWpRbXxRDKYH8aNt3g4nvsI3pHfOunqYti8sn30T4KcoIDHBcJYk3fu9to3zc41QMN4W2QcF\/Ly84ZxlH7\/9yDOO9Fx9xeSGiC8aQ6syUOOAff7insK4PnT361vWydFXw+\/rXIRXorJJFFNSd73fiBfa1DHnGxS1nD50emLuHV2yfxMFmY2K29+Rx1e\/6YyRBio\/xgmRlIMt2cHD1l+Ktbrg1iO3qyV9EyjMv5dWFt8t5DoSRva3vSgDCZSoFso9uVK6qLjzWSruKrRGLMrGxyZsBn5VxaQDICc5JxDWO1B4K9i2oKmPtAk0hsOHq1XM2Fug\/GZ3ma8iullFiHskSu\/AFLIUe\/64cRtyaR\/PwttobuzlXlejgWELPskQNOMztRsh8RQdlinlYBtIWovfW\/zAxUHqg7M4PcTihwKm8JJSho0FZb+Xw==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0729{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":305,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAPsGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7Z88+kr1rgBgLMOHzAAABAQgKwtdJulRf7V9tB3H5DPpTeBo0wVpYnMhUOmaxIICljpIa34pVBkZpLMoFgZl\/uikyKGGq68+zSJCNTfecY5zW9\/5+j86lCFPVd0F+gw994LnfuEM5\/tuhsyZVPkdpC4YF2pX+qW\/5Ck2bgbFYpnXwC75r2jPmrNPeZUTImQeRrmznGP0MPoJh2WkWJZgik8c0QNTvqPby7AAbmch6z5MqaxGa5ivVyLsxu1FbdJFZVyqiAzTOkskyEPZPOJpIbKrsq5T7GmY\/XwgvYRrEmUTafl\/gkbF2F5jvVtHihPI++Ntyb\/Q=","pkt_caplen":305,"pkt_type":34525,"pkt_ipoffset":14}
+0706{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":287,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAOkGPSoAFFBABwgLAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvnyP\/5RxKbsp43gBgLMNPCAAABAQgKwtdJvQxmJz7mcN\/1bhMhxOy0\/ci6g3QPSjFpHbaK6ZM2uunEJ\/pU035RHYT7s2wmMK2NY0vyIygioZi1migRrvYm3RLl8Qw9BLudW1lBI9+nikcObi1DjppgKERzgQMLpzF+WsLjhBhcZ7vBMffpub8kO5ySiGCE\/9BpI6CGvOAW4R28KMUYmedt24XNP07n+TmfvxEcl+9xsPvCbUuRbaU6I6WhtRYut3AZUT3N\/vNuj8wYTfGXkwok8QHe\/KehuxZZhIEIxivGq7MBEM2\/Ux0=","pkt_caplen":287,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTDYT7zrVEgBAB++0WAAABAQgKXwTqpcLXSbc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+T2igBAB9efyAAABAQgKDGYnbMLXSb0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UJagBAB8uM9AAABAQgKDGYnbMLXSb0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2fPgBAB9bLhAAABAQgKVF\/tlMLXSbo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UcSgBAB696MAAABAQgKDGYnbMLXSb0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB68TACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2iqgBAB9bIGAAABAQgKVF\/tlMLXSbo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UfbgBAB6t3EAAABAQgKDGYnbMLXSb0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0916{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":47,"flow_packet_id":4,"flow_first_seen":1605291690421,"flow_last_seen":1605291690449,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"8a755a3fef0b189d8ab5b0d10758f68a.safeframe.googlesyndication.co","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0515{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gB68TAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvWtbO2iqgBgB9TUeAAABAQgKVF\/tmsLXSboUAwMAAQEXAwMANd4NjEUeIX74ArFsjp+bUZypXFq6lPI8rim6QYxU2JflDdSJkL4uoUd0SO3Tzk5FC5enP3u6","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0515{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynjf\/+UfbgBgB9ThEAAABAQgKDGYndMLXSb0UAwMAAQEXAwMANcxNdd7n6D1SmPZcrLqPmYCKaa74qo41V7hB0y4VKzGdmGo6hjvJ1yYndqthGOKxBj6SlG4s","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0559{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gB68TAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvatbO2iqgBgB9UhjAAABAQgKVF\/tncLXSboXAwMAV+MBBQym7s2H\/DCrgROb2ZwrQ\/FB21xLJaDmMmBrKCOTrbKZm8OcMm2NY3jGeiNNfuEdz0KZrzuIEJzAfjmeAzV5sqaYsfYtFcZ\/Pih+9\/gndd6PGV693w==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":45,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gCvtsAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAC58gBu5uynnf\/+UfbgBgB9WDkAAABAQgKDGYndcLXSb0XAwMAV9HGxsWLmQ5QoTCKjodxhKrE\/DLWsJPHHWL6HgT4T+L1xrHpr+lwSl5DcFLZ2jlzbbuuJKv16AXW+JlIoS8AV8+s8CL4N4J4acNhUHwRR1ML7O\/asDwFhw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0803{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":363,"pkt":"qtsDr8lk5EKm5WPyht1gB68TATUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxz4Buz6SvgdbO2iqgBgB9dPMAAABAQgKVF\/tncLXSboXAwMBEA5bIC1YuXYNoVa4kGZipWjrCUoy5VvCqWq\/3Xp9Yj7L4RKgWdM9ci7zfUevkVKWxsjYBpOrQH0FcfgGsLsCdKGu\/5XXNA+NnpQSyd2mVCc0gJUANqHILJ16he9cv8n1O6Iu5w2r6za7ODRE8zIna\/jKpUdvsVEQpKMEifNVTYv3gUV7meYY2P0p+6Yd47LFSl7UZHYRsQ4ZuRhtAL+mHMpzoPUrW3jB3pz2FW+oYKpdJEpDEw9oqGqSaCtW93bIenRf8DYSunWG5FNICVIdfNcxhup\/a8UmA4yx4YVJiHm7C+vHBe9Iw2xAZQVjh4DeK+IkBtxyIcsxLkSlKmiS2fWAYAnNdJjl6sDUKNgSmgK7","pkt_caplen":363,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHPls7aKo+kr2rgBALOKhYAAABAQgKwtdJ31Rf7Zo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/zx\/CbDtmcgBALMDKbAAABAQgKwtdJ3AKUPyQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOtUSc0w+JgBALMOG0AAABAQgKwtdJ318E6qU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0957{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":47,"flow_packet_id":6,"flow_first_seen":1605291690421,"flow_last_seen":1605291690483,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"8a755a3fef0b189d8ab5b0d10758f68a.safeframe.googlesyndication.co","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zrn8gBAB8uYSAAABAQgKXwTqx8LXSeU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zr60gBAB6eFjAAABAQgKXwTqx8LXSeU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1058{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":548,"pkt":"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","pkt_caplen":548,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":47,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zsCCgBAB7d+QAAABAQgKXwTqyMLXSeU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":47,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4AGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD4n7zsCCgBgB9bQQAAABAQgKXwTqzcLXSeUUAwMAAQEXAwMANavSbPLcV0lXYF5mSNdTiFDKnxOg1\/0REvCqXU3KPBAoCM1n7lUa17po\/KA8M22nvSHrHXgO","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":47,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gBJW4AHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAB6OgBu5zTD8n7zsCCgBgB9YxQAAABAQgKXwTqzcLXSeUXAwMAV3v7\/U+JPp9qd1ALpOBGiCL5krLY40yH2E6QQ+EaRpOYbsIvkzSHg6H653NWchAmLo3jH8F3YR8JVmYQeHzBTQMnj3YkDygNZxvE9PfOFpYwwkd7P6Exxw==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0906{"flow_id":47,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":436,"pkt":"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","pkt_caplen":436,"pkt_type":34525,"pkt_ipoffset":14}
+2263{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1446,"pkt":"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","pkt_caplen":1446,"pkt_type":34525,"pkt_ipoffset":14}
+0887{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":46,"flow_packet_id":6,"flow_first_seen":1605291690405,"flow_last_seen":1605291690501,"flow_tot_l4_data_len":2085,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":347,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"49b45fc1ab090aa3a159778313fc9b9e","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2259{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1446,"pkt":"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","pkt_caplen":1446,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/881AgBAB9TYuAAABAQgKApQ\/YcLXSfc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/89KQgBAB8TDiAAABAQgKApQ\/YcLXSfc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2258{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1446,"pkt":"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","pkt_caplen":1446,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/89fggBAB7SuVAAABAQgKApQ\/YsLXSfc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2264{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1446,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABXAGPQBk\/5sAAAAAAAAAADRffKUqAcsBIEmLB5kd7IUo3\/YpAbu2Nv\/z1+CbDtmcgBgLMHeTAAABAQgKwtdJ9wKUPyQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUwIwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTswOQYDVQQDEzJTdGFyZmllbGQgU2VydmljZXMgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANUMOsQq+U7i9b4Zl1+OiFOxHz\/Lz58gE20pOsgPfTz3a3Y4Y9k2YKibXlwAgLIvWX\/2h\/klQ4bnaRtSmpDhcePYLQ1Ob\/bISdm28xpWriu2dBTrz\/sm4xq6HZYuajtYlIlHVv8loJNwU4PahHQUw2eeBGg6345AWh1KTs9DkTvnVtYAcMtS7nt9rjrnvDH5RfbCYM8TWQIrgMw0R9+53pBlbQLPLJGmpufehRhJfGZOozptqbXuNC66DQO4M99H67FrjSXZm86B0UVGMpZwh94CDklDhbZsc7tk6mFBrMnUVN+HL8cisibMn1lUaJ\/8viovxFUcdUBgF4UCVTmLfwUCAwEAAaOB8DCB7TAPBgNVHRMBAf8EBTADAQH\/MA4GA1UdDwEB\/wQEAwIBhjAdBgNVHQ4EFgQUnF8A36oB1zArOIiiuG1KnPIRkYMwHwYDVR0jBBgwFoAUv1+30c7dH4b0W1Ws3NcQwg6piOcwTwYIKwYBBQUHAQEEQzBBMBwGCCsGAQUFBzABhhBodHRwOi8vby5zczIudXMvMCEGCCsGAQUFBzAChhVodHRwOi8veC5zczIudXMveC5jZXIwJgYDVR0fBB8wHTAboBmgF4YVaHR0cDovL3Muc3MyLnVzL3IuY3JsMBEGA1UdIAQKMAgwBgYEVR0gADANBgkqhkiG9w0BAQsFAAOCAQEAIx3jilfKfekXeUzxHlX9zFNuPkcP38ZV8rIENu2AH1PEXTQoa77HVfxn6ss\/f5CyM80bWBCCAvj4L\/UTYNQFzvGBCMHdp3WXTxi5bd73k5EIun5ALO3B6rt2njMGdx0NCH9T3Rtkq4In8WnVTV6u9KHDdadYRC3yPHCYrLpptpV3fw8xXiz8oIc6R2nweV\/0FFSklV4ReBJgJ86fwnf\/I1N3Xbr\/6lnn28+vkpbvJJo1EHqckcYOfZn2Pxnf9XJU4RWpB1l7g79SLkaMsgBkdhxI09h56G5WzK4sA5DXGTiZ5MoJGVv\/B5awqH80Sd9WqfewX+0z7YxHtzADXfQDjBYDAwHfFgAB2wEAAdcwggHTCgEAoIIBzDCCAcgGCSsGAQUFBzABAQSCAbkwggG1MIGeohYEFFmkZgZSoHuVkjyjlAcnlnRb+T3QGA8yMDIwMTExMzAzMjA1NFowczBxMEkwCQYFKw4DAhoFAAQUM\/Wqxh1m5wVdAxc6TR8+GHE4hQ0EFFmkZgZSoHuVkjyjlAcnlnRb+T3QAhAN6I+4NjnSxA60g+Y1JBJ1gAAYDzIwMjAxMTEzMDMyMDU0WqARGA8yMDIwMTEyMDAyMzU1NFowDQYJKoZIhvcNAQELBQADggEBAJ6Y2cSPZStqz0xDzR7cR6Zl3XaWQN47BaUbGgNTcOZ4BOCZDyKgCL5Mn+McBPfZcolMp\/DH6fseyXRzKXVMYRLImDVy\/76YDX6V+9r5sgkkkky4uuwBPXCyEiufvUrqTlPiA951Kjrt2XwsYe7LI7qGhZoeL85MdlANSDi8JPYYOn5ZgS3Y1rFHYGP6W+XmhdgrjBGKqrA0uo1kGXdYODDcAdCUyZ0YndrfWv8gGFaJNqOz3hScQKhFNJLg","pkt_caplen":1446,"pkt_type":34525,"pkt_ipoffset":14}
+1191{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":46,"flow_packet_id":12,"flow_first_seen":1605291690405,"flow_last_seen":1605291690502,"flow_tot_l4_data_len":6357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":529,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"aax-eu.amazon-adsystem.com","server_names":"aax-eu.amazon-adsystem.com,aax.amazon-adsystem.com,aax-cpm.amazon-adsystem.com,aax-dtb-web.amazon-adsystem.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"49b45fc1ab090aa3a159778313fc9b9e","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Amazon, OU=Server CA 1B, CN=Amazon","issuerDN":"CN=aax-eu.amazon-adsystem.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"5D:18:8E:CB:B7:91:5C:79:26:B5:08:49:FF:2C:24:D8:06:54:91:8B"}}
+0997{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":501,"pkt":"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","pkt_caplen":501,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/890wgBAB9SY9AAABAQgKApQ\/YsLXSfc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYjGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA0X3yltjYBu5sO2Zz\/897PgBAB9SSeAAABAQgKApQ\/YsLXSfc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":47,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbvo6PvOwIKc0w\/JgBALONXkAAABAQgKwtdKAV8E6s0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX0dQAAAAAoAL9IKwyAAACBAWgBAIIChrDFp8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSReQAAAAAoAL9IG1mAAACBAWgBAIIChrDFp8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3s24AAAAAoAL9IHV1AAACBAWgBAIIChrDFp8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzOkAAAAAoAL9INfoAAACBAWgBAIIChrDFp8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JFQAAAAAoAL9IB2IAAACBAWgBAIIChrDFp8AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKygYAAAAAoAL9IOOcAAACBAWgBAIICqpUDK0AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyvivtsAAAAAoAL9IO7kAAACBAWgBAIICriVOzQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns154AAAAAoAL9IJ6VAAACBAWgBAIICriVOzQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QLUEAAAAAoAL9IA5NAAACBAWgBAIICriVOzQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1605291690926,"flow_last_seen":1605291690926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoCyUAAAAAoAL9ILYPAAACBAWgBAIICriVOzQAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefV\/3l9HVoBJXgDRiAAACBAV4AQMDAwQCCArC10u2GsMWnw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX0dWRnn1ggBAB+7hZAAABAQgKGsMWucLXS7Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690953,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltPCUkXloBJXgMhIAAACBAV4AQMDAwQCCArC10u9GsMWnw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSReWlcJbUgBAB+0w+AAABAQgKGsMWu8LXS70=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1t9ZMt7NvoBJXgClQAAACBAV4AQMDAwQCCArC10u9GsMWnw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6vQxszqoBJXgBZ9AAACBAV4AQMDAwQCCArC10u9GsMWnw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3s28rdbfXgBAB+61FAAABAQgKGsMWu8LXS70=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzOq05qOsgBAB+5pyAAABAQgKGsMWu8LXS70=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690954,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1119{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690954,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1120{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0440{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa6eczuyRVoBJXgHLsAAACBAV4AQMDAwQCCArC10u9GsMWnw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JFVX2unogBAB+\/bgAAABAQgKGsMWvMLXS70=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH2llkCsoHoBJXgJ6iAAACBAV4AQMDAwQCCArC10u9qlQMrQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKygcBx9pagBAB+yKXAAABAQgKqlQMysLXS70=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1118{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":52,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1123{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":53,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690955,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"fonts.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/C8or4r7coBJXgC2BAAACBAV4AQMDAwQCCArC10u+uJU7NA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkJjbNefoBJXgN3ZAAACBAV4AQMDAwQCCArC10u+uJU7NA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyvivtxMvwvLgBAB+7F0AAABAQgKuJU7UsLXS74=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns158Fn1JDgBAB+2HNAAABAQgKuJU7UsLXS74=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690956,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1120{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":55,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690956,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0441{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi4YaAsmoBJXgA33AAACBAV4AQMDAwQCCArC10u\/uJU7NA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3meEC1CoBJXgOW1AAACBAV4AQMDAwQCCArC10u+uJU7NA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoCyZ9DsIvgBAB+5HpAAABAQgKuJU7U8LXS78=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QLUL4Qsd6gBAB+2moAAABAQgKuJU7U8LXS74=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":57,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690957,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+1120{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1605291690926,"flow_last_seen":1605291690957,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGefWD3l9PagBALMKz6AAABAQgKwtdL2hrDFro=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltTCUkfqgBALMEDkAAABAQgKwtdL3RrDFrs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1t9dMt7V0gBALMKHqAAABAQgKwtdL3hrDFrs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2063{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690990,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2071{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnoIYgBAB9bFSAAABAQgKGsMW38LXS+A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnobQgBAB8qydAAABAQgKGsMW38LXS+A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0629{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":234,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAALQGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu21pGembD3l9PagBgLMLDYAAABAQgKwtdL4BrDFrpzOADvEFIyS2jokc7Yshgt7jJFkX3YKXvQ5VzVWLFWS4G32VuzE32WbxYI+HC\/5SI3dQ\/kpep3unsjkwp3HosjWMHNW6GcwJQUdeSXIFqoob0MAaAbfTSoF5dQCnNsQCPUrFnued4nxFlGvPTvQkjMFBYtHM1qG770t6OeCjEucsPkg7l8llAIInZZXkr9tf3xTqVU","pkt_caplen":234,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDDgdACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttYBu\/eX09qRnouIgBAB66fsAAABAQgKGsMW38LXS+A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6zQxs7vgBALMI8TAAABAQgKwtdL4RrDFrw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa6egzuyZagBALMOuCAAABAQgKwtdL4RrDFrw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0502{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1605291690992,"flow_last_seen":1605291690992,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDPazACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGwBu4uuzGcAAAAAoAL9IIFCAAACBAWgBAIICriVO3YAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH2lpkCswMgBALMBc4AAABAQgKwtdL4qpUDMo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2066{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22KVwltTCUkfqgBgLMErkAAABAQgKwtdL4xrDFrsWAwMAegIAAHYDAzNQ8sFN7Swy92+j0SqvksdFVpszUS4x7IjfFFRtMRxCIP2iD+DA1k36xX9GOoNszd6eNYaj3dekN9x\/XE8bE1dIEwEAAC4AMwAkAB0AIILIseW9UiKImaBUa09x5GXPjEZBKjNk15MCl2rU7p0WACsAAgMEFAMDAAEBFwMDHFlooLpn+B1GHVvYojPABpa5lnZzJhYy4vUa5MyYtB6cdW5k9AxXBULT0zXHUB+MHIvqk97hJRNJOY6H7wCVZ3lQmcQqRsRNEx7a9XjBDwpQb3BJGRVMjCB9qcIOrA\/Ry23MMg11pgj7uLtjUfbh\/3r2yh1DBiCMVdhXs1uIe6\/EAAu3HimlVSNxJXJn00Eu9gW56FMujQLHTonIx2o7OO7\/9CdALsDmpAKYzJtMbIFNfkWD422HWCVLAaxhBMXWJIeQv4VLgX0v3UYpipglYScrdqHhAJaZCYeGC5KUMoBtqG7V6df4QgGq5oIbJX4NLTfPJQlVDOP1A9YMMLNS8BGbAU9lxuDtYu5UuZQ1pBH0a1tncf29xuDJ9hGfZO0yeqVY8hB0JbSTKDRJpDbeyUwRKE++nS59+mFzw32rtnEDLm7YGjjGeucigHMXyvTxLOiUomoQwUew2CwvgFBX6DIa3na16QQP9WDg0zxYg8ZXkF\/yYd1MhFxMC5jFft\/2weLPNwU23EGQfDoyy6s3jJl5XB9ji5jUFStyxGqiNcSwlv9NDLkANKc6lGxuapnSDAKXf1zJs2U+S\/7+MNhO56envP2D7xbD2me6GHq1GbDORxtMUTnGCz\/qkbmEzknJS2\/lV+i6+KNI\/CdXiXR04N+CUpWbejoV05xo6XkzByGEhCYZQAcTRC76+80mw4X3q5wJBtOU100e1xO6F0ZpPKp60aIHlsEuyQI8xJqznhYhCFIeGenjBKRkzjByDI0s73Ad3+9q3sdlRQ1vCQSPm5YBxtpOuRIH18F5sNg0TPHmola1G4FcHX0DBn2HgUpt5iR2YlpPhZqAfTODSnVWogQiMM\/nw3DZx9OLyeY65S97YDvhrK09\/8H2rC794qQGaDtYNXV9uA0hJf1ZyJ0TmVuKUr\/69Dn1VHlzu9ySoDQi94pUEDWYDW3+jhT4qdW9YeZfgYL90\/6ZYArCQzjFKBl4ndf8PVc9qeb1Kpc5AEkqPpp8+dqVStpa\/0ZC9+0pzfBy7jrgQPKp+T+zHS7fZhjn06MseZC1fHL4ayGU9zZLsCiPHXiQPOm5OQm7YFJoDhlIBSNM1GhrImoE45PL6WIHBiq\/S6kVj8ODPTSb7rUimo1gOkzbzQ2qFnfzjvuDZciv4WlDeMwGQ4uwfCMWa5\/n1kt\/kn+zFUsu7XRl5\/yaTs9BHom1aJhtO5Bxp2YoLrm0L+PgPGT3CUoFcpE\/XT1go3iAesuBb0zYb7GhKcDTz9JUh5WWGv1yeW0F6CYpI4m8+Uw7lrY0m6WXpRUaIybV+7NSgR9ts5UQ8SmRxGUqvvthAJoTJfII5ALMqicSk1OBZmgZlKawLMgLpGEWle\/CVuJ8tEDnR95YvaWl5iZVPCcm6Myj8Z1xzHKhcE0Gfzd9eqt0QwmXorkgVD70oQ==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":49,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690994,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2066{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2062{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2076{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2077{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcJuMgBAB9UU5AAABAQgKGsMW48LXS+M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKBEgBAB8kCEAAABAQgKGsMW48LXS+M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKT8gBAB6zvTAAABAQgKGsMW48LXS+M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcKm0gBAB5DciAAABAQgKGsMW48LXS+M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDtx5ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttgBu8JSR+qlcK5sgBAB2zJzAAABAQgKGsMW48LXS+M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2065{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690996,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2070{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2068{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1wUdMt7V0gBgLMDI3AAABAQgKwtdL5BrDFrv5h1FHMS\/qjIy3fd7QX9exjVXpg3ZcMiWu9U859tgLxOuf5BF4j3uHLV+LcoVafXS0PvcitWYuG\/sljnG3eSDVRPYoP\/GkRYxnUDgNSuEZ80xoycoti9iJuQXSxaIgfnHJkexCfjFSelI9awnZbqMjVs2fsikIyhxBBWPFjjwZgpKHGnH0y0jEIX3fXazlyQcvraXoDB4\/0Ow4ZmcstEgZIxhYy0fvRE7I1i443a9ONjr+Vckm6i44sCaYrgMI147Nm9MHAsqnITKDrCttXyxaXudQ0h0SYO5IOzVL0BG+HaETchVcfBG+FJ6tOH4RUMB2KrBsPKxufHOq87P88pd0g9K0oeQuxAxEuBAobsRPRq0733vJQlgXX48y5zru6wa0of1Y1DEJGlVCAZzn4shL5h15fwL+jPoxC3J1fymGyX+5A04E67MQvC3bPZGfBOYoco7L\/9KSXBKBihbMYnZTthObCfntBTzJvIeoINttMnHjH+cqqkZWZiJXv6T4lm9eF5Y6z1FGs7o0mZWqPMRPIWhhupMg6Ln\/zGfjyLPcZeZGCWC\/+\/9dtFKfHBLsu86EQSbYNSrfPElXYi6J+9Trcd3U\/+S6ZcxElLCUghBJ+1Gj5kAbyVRnI5olJA\/O3fiN\/ItoRC+l\/eBU8jBqHezd46aoegR8ivO8dQ\/I3sI+sqazBx4wZoK5LLT+Tg4WyDel9bB0AYT04WRjyFZovD5P3URM7oku9E4axAnRFBpw1gPidNMvCSoTIuyyt7cBvEPVWz\/Oi5UoqIrQ44NP5FapAkvZG63UADSEOyz+Co5YQ2rwHEwT4IJbIGlS+MtDJglzIdKWphggE10B3vQEABOA81GDgXm9Nh1u8GduxjRL1QbhGZ3jF4bNYIwHjYzhkwQlGRBMcVUG9PN\/9zjdSUT2ZanCbPKHZJk3ZMxVaQ58mTedo+jGMP\/5OJL90rnblaXDAS4BBlIiwzcRdkGRm1fWKRq166vVXE6DOTi9SoyKlDlTxbiBi0xqQRpuMNNnVe0zyybJhPTm3rEdpy0YtPLeFL3kVn7GnInNxkWrZ8HAy+NMqDtKqazUlRVJmTXCd\/dR2mmcRHadKOttsVyy9jCm+XJuwPEy2nUZ1vlo+KL\/8IIRFaNSmoUST66+jZMfjhocApwgHwUpHMk3rrn11bNuH4wothOSIYNW\/mnGSp8y+95bUx3JCpN7Tf1W2IcgEhwgUSXPj+i1AQFSFXz+mWGUtsk1XWvdXgj455hiIzmljL8j3O4GgqusxuNxI2a66iFy1avTfJy6LJKszpooKTCUe\/SzO\/xFz3hviGJ9MmKdam1Pa8BJ1B08oE2szmc0fqw6DSuFvagFqjQjiYTk5zZk9ZDVTp39oQxq4mTnts3U2E+R57o8F9X+zeS\/AyiiasJ3y1aW333\/tzK2VuW4ZH2Go4AOs79g1hdhaodj5rjArtHmdIZ3G9Hf\/LAmm5lQO38Aod44dvv2z4fQiYDT1K7Rft2pSgajtwZNVa4oQ6u1JG7Jof6XeRMs5PRDORBls0d0z2ocgxRIXjJ36PS0jraqDlHIVpwZuAkN9hHjuQxKXSOD6f5uk5hFUssX+Uhr97vxbc6ZqZJw8w==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2073{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2060{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu22it1z29Mt7V0gBgLMIpmAAABAQgKwtdL5BrDFruoQmei\/qpGgVl4beDOmDSyKcrdOmE3ySTyvUU7XVniao3sL0iUbkJawR0Hqw1SkiqqHC2pgpwcnU6Y9NENS3Id7OVomItvSnYBqeV82s3Vp5QWtiU1jnF\/7STDZsifAFocPjw+tgEmJ2FVrcHYLVdZc+DqzWWYfBSz38e39Yl7eSJd1KR1UXj+DOTJDaHsuuLR5li2Fj9lXizA+tHX8GcVM5ipOpIQ2ms+GrgMUt07bufJ2L75A5rHOczhTLeJmx5fUeMxkSokLoEZJCYESKBEU1mnrMhC3MaRfuePuA2TRo3plgbhUR\/pzSCZ4YID+WE7E28Wqbv03hJJMUV9EdAvU9RBPw4AiRPywxDwU5LXXMwCnrHqQet9efVRhLOXwpLk7+FnJqebkSw1rKxCMoj4h94ek4gTZudB8nEVInyEFU7X8G3CrOmVFiyoVFfHqmJ41x5g+6W+RTf3Yx2JUDARRQtOPCsI1t0QlDW4YhCfFdb2FmsOR8Ug7+sA0Z+kYBaKVeDaEE4oyjjRJZT5vx7yhckATfvUr5FrmJuyic7ix8H0vM8TXjaKV8rSLMgeLKLxJOyX9qFG6RiWpilQV3gZ1UUEKylm5FcYx6yPY2bVhCEhfoRNtaI4rfQ986k8Cc1PfBPbFpsF\/C5dwn8zSt6nMt9TCcndvr3eSO+FmWbZaU8XBGT\/VNwCHUoyUA7z8Famqe3qfwZ3TviAiHB873K63M2NNw4bg9lTULyD1DvwPIuBq6VL3VZkFpMRPdVswgzcwtzkr0iMtfUWmfbU6JaeP6MR\/qerlZdm3ZDFToFa\/mlZvNwSkPPJqCsNnxEnIGGTMhqbqc9ltUPTQuDunTQn9w4ZEPz8BFZDKqa0k+FAFqTofuame3NasT+gA0MiQLZdDWHyaLkRqjSC9Iu6sSvt0rD5t6Hu1XQ5XMvvMwho\/Ny\/ZlRoAjgKth2F6GIDQQvJv7bF5kg5Jjvwy5RHHhWAlaw3xucVMkt3Ozqv9IT3upaOBe2jtEs6rDjYWNPElW38sYieF4gug7HsrmLmzDP2xRXWzto8vIObbOKZ+P4BZgO5dbI0Y4lQ7UpqM5aItG1uREGh+YVv6nHL074wjV6nxIQmn95UmvxD0lAu4gevIuQrD1mWuQP5nI8jS4UwXW45gUdM3SBFRMqP0aDQK5w90x5QWfDJuSO\/7RYqyZOwJhL6wVraBYgKcVcCQ6mSnYzAvmEgkkNv+c\/\/7iFOLN905CoKNpd50w1hiHKTrvqU0bVWaL1\/CObaLnhLq8q3O5jesI8\/WCGUil1yPDJbabHUL0NRHS789JZ6qqfDWaRrBNufaD4nWFJdtt9VcQGRvaYhHKuKXt3omMOLfd5Tec9Ns9Hu0EkyeG2V+73tvkVRylghjtt+WIYcy5q\/24bjco7qhXoEWiPkiRIJN57pmyL2np4gMeokAqJWNwngqihElTIqXk3SWcRiiLJcqOosDg2QHVCL1QKch9kM1y5FitwTvQELMNjx3JTFSlQk3HyWeYZwahdxbpLMutTu2pMCLheU8rLqYGsWlgsaNJuTFTtx0L3ANcVVuQrnZT8xopkaZgo896SjAWvRQmK+cDX4tTSkBlXCBknbSQ==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdbyPgBAB9aY9AAABAQgKGsMW5cLXS+Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcFHgBAB8qGIAAABAQgKGsMW5cLXS+Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcX\/gBAB65zXAAABAQgKGsMW5cLXS+Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhnPACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttoBu0y3tXQrdcq3gBAB5JgmAAABAQgKGsMW5cLXS+Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/C8sr4sDhgBALMKYUAAABAQgKwtdL5LiVO1I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfUkNjbNmkgBALMFZsAAABAQgKwtdL5biVO1I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCx3qeEC9HgBALMF5GAAABAQgKwtdL5riVO1M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23LTmo6zQxs7vgBgLMKxXAAABAQgKwtdL5hrDFrwWAwMAegIAAHYDA5knAga9JsVthANvMMOq2D2+SX2rmS0yGAGyoniOt0ThIGZv95UrdgGMWa\/TkNOulH2VrZ4BEKc4CasnxiGwlqMaEwEAAC4AMwAkAB0AILxJHt\/nUlpqnkxFEv08JNNXN3OGTCenOutCUqlYgwMpACsAAgMEFAMDAAEBFwMDHFlVo28LZFpnB3dTdWjKtLAfLwyX7tiiIKH9Kc5hPNWnWbEb9w9xDAFwVZMfovECzqOccXQWfvlUUZAt4NjvLwF0L5X1NKT2yEHGgzn8h5uXNfaaGH28icL2dMGaqDC4P4NzMcE3pjFYv\/JT73Bx4yqdgYPx55CyXTHHNEiiL2LMXamE6a2oXVogN04FSta5RfsrxGSxOlqOzV\/hgilUWWe\/ZgEGX2V1Cg3Nf+wznEihqmmjJ\/4pp4Z2wbfGgVRzFfH8aL8hPSjm+H0f8jyH2n8py\/Y0rjWzkn0BqoX\/PsZA59yikX3z+SkfaoMHyB7YEO+S3+G3rw\/xP+HisCc8aYYy6lNWejbizW6rtB+\/e9JWkR4hJhTIKLV0pR4ubKba\/OTepLSk0Qfyl7TPNg+rLgIQBnb\/8J7UT4EVi8B7y6Km1nqED8KKyhyA9Ik05ywfhj2iskfO76MdSwtaztK0PAYNZTA+K68slmKGb\/3g55sF6njuCuhY\/3Ql5w8d8hDwLpt9G7w505ZOfCNCxxmv7mySNjWu9huk2SVvdoU6MYs9OX5ZNH5NN2OTUWygWg0oKq8gg1C5lMSbmkE1r0upPfNl7oRgEAip5gh1CCmM0EtoT0y8a\/pfVAL4vmGsXOzDmFA78xy75\/5ko\/pmbKbWmw+GLKbu74ek9j37Yn5YyvsJMTcGErl9u0P5o3SwKhQZfQeuwPQvY\/xLwSQ0+L3AhQ5LnR\/Ejjczhw6ZEP6VNRl5uBafMYG092S2P8nNEVJOTTyVQWTqPkAEyAcyLror+0MVOF1bI3NM6GesiOXgXxDpV0M2F03YdMJgHe8tmW2F53jfvpsgpQcCGlQRADpIcZyQOcf9\/AH++O09WU9YH2YxqkDfLK4rNdy+dElYwRKTpb+e8nK\/8w+Ho0PbexMzBGr2QdSmrjZ33CObiZN+1l6rzcpqUHW+vA82+jajr4pWrmOkNBO1vKg8svqpNfjxUVcYTiQhKIm5pvAbNWsfe9\/+J\/BSI9vjZM0sjNLkMKPNMXJ7he8h4C4sg21Sp4d57FA+kOkyc9GnjgSfeNOOnWmIyFp0jsGiqlfqeai8RGhnB1I0QsxjSqIYpHAkNStBgugPyGsdxjx08fTaPbIHhZ0OPww5UGKnW06oBbNa+peps2gli257vU+f55L138VCmJHRgMTadyqANFR\/NNnhLN3hQToaNkNiaNbLG0qO1nTaGgbvKp27phMBC9oYdiZmlKdwAiUnwhTx4c0OZqpGtKeJxb43JG9lksBV\/64AZo9uYxIwGD2vBHqejuODmCECOxwjItFNz+mXV0oDwO7yProByaYi5VPXxAQ7prXlGrbdeRYPIZnvwEoJt90ow7FRHznUsxInIDf7zuI4tiuU6Q+g5cdjjgdY6u9J22xCcBdsoLEcx3r9m+L5CQvdK6Vbsg==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":51,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690998,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0428{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Owi8YaA0rgBALMIaIAAABAQgKwtdL5riVO1M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":51,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05qhkgBAB9ZNmAAABAQgKGsMW58LXS+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2070{"flow_id":51,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2066{"flow_id":51,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":51,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05q0cgBAB8o6xAAABAQgKGsMW58LXS+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":51,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05rHUgBAB64oAAAABAQgKGsMW58LXS+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2070{"flow_id":51,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":51,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":51,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05raMgBAB5IVPAAABAQgKGsMW58LXS+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":51,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAc2lACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABttwBu9DGzu+05rtEgBAB3oCdAAABAQgKGsMW58LXS+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2077{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":52,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690999,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cdn.ampproject.org","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2064{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2u6ggBAB9e\/TAAABAQgKGsMW6MLXS+c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vNYgBAB8useAAABAQgKGsMW6MLXS+c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2063{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vgQgBAB6+ZtAAABAQgKGsMW6MLXS+c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gClWEACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACABtt4BuzO7JlpX2vzIgBAB5OG8AAABAQgKGsMW6MLXS+c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgIAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbu23lfa\/MgzuyZagBgLMLyXAAABAQgKwtdL5xrDFrwEUr9duJ\/J58A1ZnIkdxVFZZNqMzKdg9od0bihDsN4CN7J5O+YcpMcg0a\/lGvlYuCmBfiUiN\/+F1yAm4DboKvtqIihX68qxU1Nxn6VfM37tVa5QfyDVDKTSIEPXDeQLNSGM\/HYwxBATZS8tkiLFhndaHhKQZAWTYP8GdY2li3Qpm+NOC38DE7vEGKznA9SRzoSZlV6TVUEnX6fiwTBTFEVI9a3lMKnvJLb2ddzEjXDwCK\/IHT3TRk3fhsRjsEvwvBZIWzyf0+hVwtmATT2MoocaCs1lEHmXe9XRguSrW3mmf6L5U2U+mXtoC9msW4U2ykcU7nYAB1b7lSs7EhPmBd2ku7inSk5rBco\/ooGkI0HbLeU5n1hcKgkMVz\/9zW\/IjaiGXgPDisHQTb099ron\/266gd0NR5RcvgB9Wbuq3wH4VcvxFfXbGppxN\/u\/TULryNfy6q6gPesyCNXqNX1cYIWJ+hNzpoGKovvuAIF0u8McOoaPJ2onSpIsz01yg\/lZz7tH\/A2uptd6Zeje2BCwpkhg+OH5Jx06Bmke3LlS7ckYO4qO3T5Q2h2pArjerh9FqbfrAtJaIsPObWC7EgkREdAfLZ+FrpqXCBrtoYhMn1IFeIjcdDJrzSyWcX05kP1lqsaeOpa8A3NOqAcxMxUWktVNH+AYJRLpGow8G2Hb3xLPwvPiSNhy2F79XSMKG3eIsSt8W+fSdJUTZ0pUi45QFpEqmGK5M4byFyII96hEpAEfPtxSWJFcxW9RGGZ3BLQg0EqHd\/jlOAhYt\/pC1kyJZl3rZxfnNAFWZFJ03SMhrGuioXVRH8eICkCZ6zwKemltoudbsUVuatJpQVsTuF2FeABKnqLDWJoLCfGVm\/kKZ096BXmNbXhKPxOW5Jrz1aw9ynvHBW7w1\/3kamctzDGNgz688b+fy48sY2dqg9Hx2bAs5FqnafTdwKUPHtw7K2OwzaH6TKbBSxVM4B2lqKl73aWZoG+Sa3yZHJ\/x\/RL5+XN8oiE9hiC+fmlfQ0UbRsFtvPRNy40csBvDuS1xivXJmoleu\/U6YadOcgQd4l+bp1FPIE7VEQ+T8aK8sEybM338qYgfdHmSjOEUM6UlXw2S05PEwt6WArRUsgY0CWzlznQff3EzAF24LcLTOH6Czv8mUcol1dyv83xo9zVZSIOPsHRbxZOODtjTFgc7fU1TaYUqxobEwdzfjoUWpj9NDuAnTKseG0Q6y2t3X9zX0pjPKczEJZ+Z4Vfl8AK4nj0TxvhUWZv4uscilVuKVCxjat1WqDWU5Ln7Lh0ExRez2rD8l\/UE9LHXAPA2ActKnfUk2KkwUYAkxLap1zq\/39YRdPz8ootLBYAtu8g0NwFYHLGBrfY\/2pRuh619cD2k+rKbfES6PC5GEC1+lL2JKOrXcyxDq6sJ72oA441OnImGWRsO1dg9kRh83u3vc7AOUzBpuco6a8KEjhyK3JSi82ZGS3rGEbB2GwIOCZHLZCl6XY15FMdjvRo6pm9W+3he7rB8trSi0IfYKXT1m1R8yoYo4sae5twNvckF+yXEQmOMI6V5ajeIsACl2oURLLGwRu9xvChi0KQGZXFGn3UtuF4ScYBjYIepqkpm4MTtQ==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2076{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2072{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":53,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291690999,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"fonts.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":53,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx98SgBAB9RuJAAABAQgKqlQM9sLXS+g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2070{"flow_id":53,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":53,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291690,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+PKgBAB7BbaAAABAQgKqlQM9sLXS+g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1114{"flow_id":53,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":586,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAhQGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH48pkCswMgBgLMEOQAAABAQgKwtdL6KpUDMoq2n26049nT9BVJeyVBPh1jwWY07QErD1k2HjxT+JAavNdgexUzc\/8ZIaho9+9+vBjzLCk4OaXDc+grOA1EkXRSYzZnzlmC301NAf+NKB6GijDKI\/rHTY4Pg+Oicbwi3JTZM\/agbREGXXPLdLM1+nBxeeuqEOa84gwWL1btBUaojsmHwvkduNqR3jH0NeL0Pa1HV4YIJexl2BTQsCUdIt4IvZVYo\/xuzTKxQwwuSoN8SfXSwbZUpJezg6jAyFYULtQFsDfWnRM7wKuwjkYL48COFSCdrmKpJKVedutC3hWlonBsUx7ScYN+avQlkG7+Iz0iwPGjxKmoldc3rPlPeOPeA2piKPn+aWO+mGGLviIHAJnsYtGbAo4zzYmb0iCA5EQH2boqNfu\/gLHtxZugepkwiC\/K\/TdaUfxrAKdNCn89jMqq69ZFPnqK6Xo2qHjryaW2k3H1NMee9UtWbb6ascN+cDLRp5c\/at\/N4+i919IgJVpysAkAIYGbZhT0xGE132lA5LlrzhNH\/HQTFxxppLalEZ7\/RHe\/6VA5GfkJv7NucDZ\/XPFK5oIdVUHhet1+cxSUDdsP2YDqrvWl24lIG5J4sji7iC6Je5DBTFipx6hNBWogpB5pQZrI6kWoz6I0s0ryHq8bJle\/4sU9cFINc7\/a8TTOA==","pkt_caplen":586,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":53,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+W+gBAB6RToAAABAQgKqlQM98LXS+g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2070{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691002,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2075{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0755{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":325,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZEy\/FTsr4sDhgBgLMF2vAAABAQgKwtdL6riVO1KFCUBjSZHSTS7FYDB69m5ne2IcPwkugv9ufCPNKlhnkKiGdCY0\/TjFV1mwZRTbi4FN5your0dzLXXaobS6QQiMKB6ZssDxSPbQUpqNTwD1ghfndMUOxdvzSRWHuJbgIOOOkBTfOwzw9zuAsyGt7orYshsE9funI9KJ8SpHbhaHaXeu6wo0hnlzXEqZLrZfSDaYlwaqEY2GU4FY0aAzE+zp5T4VrDN96JJZyvwW\/g1Dyz1iICtiDTHEnmffmKalxvdpWwFpA\/CcKy33yW99Eoq4k\/QpOU1dWZ88FCRMl82WbQ2bjAxERDK6oX32whVlDQ==","pkt_caplen":325,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxCDgBAB9apjAAABAQgKuJU7gMLXS+o=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxU7gBAB8qWuAAABAQgKuJU7gMLXS+o=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxYqgBAB8aTAAAABAQgKuJU7gMLXS+o=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":55,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691003,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2059{"flow_id":55,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2075{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":57,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691003,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0756{"flow_id":55,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":326,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAARAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfW7NjbNmkgBgLMNynAAABAQgKwtdL7LiVO1JU1jc6XrD2wXmbYDR2pMF84bOcpSbK9hhJqfIkBXNuFr3F04boTslSEt8bzc1owuQGIkaX41lcijADD4RKEYOmBIJUA5VXzaRzaQgYVANMhu1T6ORX1FfISMaRJexWjHTaeJeyt8n94xUPEtkpRl9p4XhRDteYG\/L5Sva5Z\/iYVt9Ty6\/77VR9wVqBBca\/M3RePv+XQQUkKG1mlSqbqfLfK0+TsArGgMP2U0SLkSoaMaEsGibISRlcDreZVcFDjcbQYD83Dt9ILPFvEHtHoaQa5UY7DjHaFxkC2zpaAlCbLd0mV\/\/B7pbmmOrKDn6hncY=","pkt_caplen":326,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":57,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0754{"flow_id":57,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":325,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0Oy58YaA0rgBgLME4vAAABAQgKwtdL7LiVO1NLYki1QRHzVravWZjwvZBOm5hOjQZh1BXxAtNFyVwsGyhbWHb9b4OK4R1BqfuFaXguGa\/NKYRnUqzYL+eeBO4mesNP1VjUQahgnfZgnt2WAnXPGV4TYVyXvsOcH\/7lESvmaNKdD4CjyxLy4xgeaDVtpm4W6hUus+eNJ2miCfrnqn9vXytBSeG+fnuD3TjmbYS1kGVyE8QDiDfkSE\/6\/4HAXkcOvhweDqJ7OrrkNq73Jhjf67WSuGD+G3u9kHhzgXvUUQc7MK5uX47BnTNfzEgIlXiloWPiOYPFuMsKbA0ul8VWOKpgwmaLq4v7Mb5dVw==","pkt_caplen":325,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":55,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1b7gBAB9Vq5AAABAQgKuJU7gcLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":55,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1uzgBAB8lYEAAABAQgKuJU7gcLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":57,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsbngBAB9YrXAAABAQgKuJU7gcLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":55,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1yjgBAB8VUVAAABAQgKuJU7gcLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":57,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsufgBAB8oYiAAABAQgKuJU7gcLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":57,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsyOgBAB8YU0AAABAQgKuJU7gcLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2071{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0877{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1605291690926,"flow_last_seen":1605291691004,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"tpc.googlesyndication.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2063{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhCzDKeEC9HgBgLMCvqAAABAQgKwtdL7biVO1NneABvzk6stRrQUoB1AGfllNjIKRtp\/gxp\/62wegmbsqzgg8mYOjOLgdJ+czCSMLAthanMvLIqSP4Mao8y934osNe3FVYge0lU+RVAWgevu8Pcv+ngvzUSNy9mjCmpk9iiIUcrXnD65vmjlHlz2bJKx2fw08Y3CaTyX6B+BSRZapbly2\/kfpc6J8F6hah0fDLkFAO9sGDbgH4izcUf10NaeEUZ+UeKDhWpkMDukTe+fY7xRto9rpzLoJlLkzMqSHkFu4sajPbzDfwHKOh4w4qiPi8GHe0cw8etizeNV7vbkH4zzXFpiMfLezICEv2bnUdexRkSn1YlEscC+J2byF6oLV1lTmiTH2fmNu1TNL2tW5eFz8Ce0gom96O2eyo4+jUA1qyQug3oZhMKe6bEMiSIPd2bPYJuBXsL9OzZc878rRV39U22WBpR0Ek0aaicfIPlXdhi8HGHsMMSsb3x66KXNoilO8jDyXdg4T7YaLB6Gj2U5QsiPgObHBcfhd9j2ONIi8jZ0GQjimiE+8CjBNDDKuESfmGfsSG4Hq0UCqaRdIZzfqUvWtPe+Pgfd2BqepYzTAJKVklI\/LLAHyFtbZ5VxSrJ5yRv+oDQkxjYvJHv5sprxTlHI7BElU\/T59wX\/Jl5PS53Mkwf6m41dXF5LZw2qvz6p3Vp+fvhfzZz9OWs7Xbt0Qd3Io7KB+WS3B5lr23Koz9fEKu8n4KaNKItpjEVZXlQqPxYI0XJScTMWRVVigStAuAFYNDR5pkM\/WbhZw2MA5fzcpEJ5c0JsQmAco+haaEFiDiuGs6tO97xvFdbhlOr2qxsChnP\/2mzGVdtWl7sp0w\/pzzoIavtSp+457qa0azX5khNvOh\/pD\/Ta44w9C3MhDhfLwKyuFPR\/pVJXGwVowSFMRsP\/Fi6HlGOejZ3H\/79xzgumMKvFUimlep+VWMAh9HAHFWggjJK2F2SSdAKavKiZf7qYtvPHMmaE1mcvx6HFicA2YXxvkZOPb0CO1f1QIYhU8WUcZ8naw7ew2cjoEd8dOYNCQQu2Mm5cVog67mTUVKWKFFmEzRLZjb8ecjo7wxl8eBGxknQIdUo7lmpOPrIGaJUZicRJqLe20xCfbeRXmltU2XW7fflQW0Hor0qPf9MWer19XGiyUmP8eeizD3WhbFmXNofSEfBip9jCRWnA+aHe8SM4VPKhuYcNb1ySxDnGBFQCirLo5DIaVIE\/0Rj7TwI8GPYCBVhDAEchLxxrKVOxna8N5p3bMldpwEaRnx\/ZAXSwt6EMaJazNyKUbxQAfZ4\/Sy9IAeGsI7Z3zYi4arEnJESIlFrYtw8pVkc73T2dOK5K4Kv6exlJskR5v1OLUem8ROaO6k6LB9LxCmHPoihYydOK539lqUKAaLiMxEGOfNsDdyMLyUnTJNUQz8xt5WuA+57V4I3W8HXTuGoRwKD8BRx6g2Zm9b8L8JGVt\/e6OzL1fHBUzfyAscK1A1eQ1gnXNz+CHLM7JO4dvoa4X86eyP6mooIKvYwwlVqc+N93cg+B0sQRTlNgwkG3U5vJWeWo8YJoeyqWZsz9Y\/4MLIcyaOQqgsPi10c25Y1zSArYVbSpG2Ocze0CSo6DuvEOMdYoA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0752{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":324,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ4GPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0OqeEC9HgBgLMI0oAAABAQgKwtdL7biVO1MsfuU\/h\/0EgEpFattDsbIEbY3flbv1Gxud6QKPVnyQvC45AO1yoL55TVPOXciCPrwu+Ouerjym+4Mu7U7poDJn3JrNUV2GB7xpQLT7NPwLS2XfQ+wkNdcCtPKIxgklIUMtbM64S4hq4grtGtzGUyb09qOSRnki\/d3KFnDy5T31A6Uq5Ne\/M3MkDYvZCUiBtq8UlKoj1U5aHhS3pGLBeEB\/jDdsju6RrIGpBifBRBmDds\/WTENGGCAUwfTmmycKnpcY5XOSBsq1FJwZ4x9tsCK2OXIQeJzHpm6DAcYYmvE9TwTyVjpVPzakA3UT94+V","pkt_caplen":324,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QswygBAB9WKTAAABAQgKuJU7gsLXS+0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtDqgBAB8l3eAAABAQgKuJU7gsLXS+0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtHYgBAB8VzxAAABAQgKuJU7gsLXS+0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":53,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzAwBx+W+gBgB9ZnrAAABAQgKqlQNB8LXS+gUAwMAAQEXAwMANRf8NdfYlUQALYOTVKD4GHwbJdPb71k2rsZH+NlQYljC\/EYWE\/Ay9Y3IsNq4wss4JfLDftQn","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0515{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwOFMvxYqgBgB9b\/hAAABAQgKuJU7kcLXS+oUAwMAAQEXAwMANXWYreaI15TFK9hnYpxwrDfO4ntWP9BTQfuuFqco8pGbJX7GTFeG8is1Hca6L5QuYgg2qc1y","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":55,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2aQFn1yjgBgB9TLlAAABAQgKuJU7k8LXS+wUAwMAAQEXAwMANQNTG8c9T4iLGClYz\/BRK3dmWJDvjxQ0RK8tlylAPFQteGDCKaBnNU\/k7dD7wG403TRq+MDb","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0515{"flow_id":57,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDSt9DsyOgBgB9eMKAAABAQgKuJU7lcLXS+wUAwMAAQEXAwMANcH+vIoJ1CA41siAcHiBIczKFyzQpOyxX2aB\/dlyZwmI0k2UmeiDvahq8qizpw1w99smpLhC","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gB5miAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL0f4QtHYgBgB9WuzAAABAQgKuJU7l8LXS+0UAwMAAQEXAwMANZ6JqQ+YyEPwKCf\/G+KqQ5olT1Ne07DXzwyYlbPxfZsI0PHsHXuudiNf3OPwTvMK7RQqf\/Uw","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":55,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDhWZACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGYBu2Ns2eQFn1yjgBEB9VS6AAABAQgKuJU7l8LXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":57,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCQMiACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGoBuxhoDWt9DsyOgBEB9YTYAAABAQgKuJU7mMLXS+w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB5miACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGgBu54QL4f4QtHYgBEB9VyWAAABAQgKuJU7mMLXS+0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":53,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzEwBx+W+gBgB9Y\/zAAABAQgKqlQNEcLXS+gXAwMAV1q7\/x\/8p1IAMzClobSR5+R2ntFiusD2lIxb6KgEg9frAw0iCkykUg9pbjAFU82XHQ0E62x9i8AHtDZMxbyIy3bXsDgUT6HKHyjOAWAehvwC4PiVFlkGeg==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0558{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gBnVWAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGQBuyviwSFMvxYqgBgB9VV+AAABAQgKuJU7mMLXS+oXAwMAV+cFICpUiF+GdNlsz5J\/EsfkYEcb8580Nr89q7jv\/RaMxc06Pikcu4V\/JNJ7zdUKMH4p4t8hKHYCVilNXsOmt0CHa5nE0Lk\/RkxVuBl+JqQlGOitiL6Idg==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0812{"flow_id":53,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":369,"pkt":"qtsDr8lk5EKm5WPyht1gBhSQATsGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAKlRYBu2QKzKgBx+W+gBgB9WCOAAABAQgKqlQNEsLXS+gXAwMBFmDsopAndzT88MTn8oP7EaWKZMn4wqihHbphGqCh9Erffp0eeHHr1hoLGbLI56jybU07Oj1RBTW29xXe2J9RlLnpZEJB6NsBUwUDwSHLl0MPAuDBwPl9\/U9hngvkR9n5r79U2MMuPiI\/TwqPQQbPoyy+Cerfg+3dNIS2IIYaS2m\/eH3+l1Trv6sJdxNups+MjeNOHGFalJDQ3jf3TmlM54Bk0fXr2jlomHn3yDVGga4LeGwyoqGN8r3mBjH2VtVuLPOL\/zWBpgQy+2zJuL9hByN46\/xHqzCtP2EMPLSnlzFGyhfly1B5YAsVjNRzl\/AL7g29aBDgBQCanzoHZPh5d7uLrnXkrw15kzkvqXSpJsoHK9y2n7Qk","pkt_caplen":369,"pkt_type":34525,"pkt_ipoffset":14}
+0859{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":405,"pkt":"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","pkt_caplen":405,"pkt_type":34525,"pkt_ipoffset":14}
+0840{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQbO1037mLrsxooBJXgErvAAACBAV4AQMDAwQCCArC10wIuJU7dg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0412{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gBfK\/ABQGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIDwAAAAAAACABkGwBu4uuzGgAAAAAUAQAANo6AAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":53,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuVFgHH5b5kCsxMgBALOAsjAAABAQgKwtdMDqpUDQc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":55,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQZgWfXKNjbNnkgBALOEtWAAABAQgKwtdMEriVO5M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1217{"flow_id":55,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":666,"pkt":"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","pkt_caplen":666,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":57,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQan0OzI4YaA1rgBALOHtnAAABAQgKwtdMHriVO5U=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1214{"flow_id":57,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":666,"pkt":"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","pkt_caplen":666,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0dieEC9HgBALMFN6AAABAQgKwtdMJbiVO4I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291691,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgPAAAAAAAAIAEqAcsBIEmLB5kd7IUo3\/YpAbuQaPhC0dieEC+IgBALOFMcAAABAQgKwtdMJbiVO5c=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1605291696948,"flow_last_seen":1605291696948,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291696,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKBQAAAAAoAL9IL45AAACBAWgBAIIClIhuaMAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291696,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OKxV4xygVoBJXgPOCAAACBAV4AQMDAwQCCArC12M3UiG5ow==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291696,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKBUfTisWgBAB+3eDAAABAQgKUiG5tMLXYzc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1124{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291696,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0818{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":59,"flow_packet_id":4,"flow_first_seen":1605291696948,"flow_last_seen":1605291696965,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0430{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OKxZ4xyoagBALMGwaAAABAQgKwtdjZlIhubQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2302{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0874{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":59,"flow_packet_id":6,"flow_first_seen":1605291696948,"flow_last_seen":1605291697033,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2299{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2219{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":1406,"pkt":"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","pkt_caplen":1406,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjCCgBAB9W+SAAABAQgKUiG5+MLXY3k=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjXugBAB8GorAAABAQgKUiG5+MLXY3k=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":59,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTjsWgBAB5mUNAAABAQgKUiG5+MLXY3k=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2302{"flow_id":59,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+1287{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":59,"flow_packet_id":12,"flow_first_seen":1605291696948,"flow_last_seen":1605291697034,"flow_tot_l4_data_len":6401,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":533,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"d9.flashtalking.com","server_names":"tag.device9.com,www.tag.device9.com,fp.zenaps.com,the.sciencebehindecommerce.com,d9.flashtalking.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=tag.device9.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"8B:5C:A4:62:70:92:3A:09:C3:72:49:B2:A2:22:32:16:22:87:9D:F3"}}
+0529{"flow_id":59,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":158,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAGgGPQBk\/5sAAAAAAAAAADTTrOwqAcsBIEmLB5kd7IUo3\/YpAbu3nh9OQIJ4xyoagBgLMG3YAAABAQgKwtdje1IhubSBt0obLL+WIiPG6AQ56SzS1GkUMIPNBkq1N9IMlEKIOpEbi45nD5zJkYriLO4a7hmSKY4Uz5bfrMdnA+ZKZmoWAwMABA4AAAA=","pkt_caplen":158,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":59,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTkCCgBAB3F+oAAABAQgKUiG5+cLXY3s=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":59,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","pkt_oversize":false,"pkt_ts":1605291697,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDNdJACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAA006zst54Bu3jHKhofTkDKgBAB3F9gAAABAQgKUiG5+cLXY3s=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":38,"flow_packet_id":39,"flow_first_seen":1605291688749,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":12230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2004","src_port":57282,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":45,"flow_packet_id":33,"flow_first_seen":1605291690384,"flow_last_seen":1605291690520,"flow_tot_l4_data_len":7714,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":233,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2002","src_port":59336,"dst_port":443,"l4_proto":"tcp"}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":25,"flow_packet_id":782,"flow_first_seen":1605291687514,"flow_last_seen":1605291688963,"flow_tot_l4_data_len":621328,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6320,"flow_avg_l4_data_len":794,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":54,"flow_packet_id":85,"flow_first_seen":1605291690926,"flow_last_seen":1605291691284,"flow_tot_l4_data_len":39821,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2502,"flow_avg_l4_data_len":468,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36964,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":55,"flow_packet_id":20,"flow_first_seen":1605291690926,"flow_last_seen":1605291691053,"flow_tot_l4_data_len":4437,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36966,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":56,"flow_packet_id":19,"flow_first_seen":1605291690926,"flow_last_seen":1605291691064,"flow_tot_l4_data_len":4415,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":232,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36968,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":57,"flow_packet_id":20,"flow_first_seen":1605291690926,"flow_last_seen":1605291691062,"flow_tot_l4_data_len":4436,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36970,"dst_port":443,"l4_proto":"tcp"}
+0549{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":58,"flow_packet_id":3,"flow_first_seen":1605291690992,"flow_last_seen":1605291691029,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":58,"flow_packet_id":3,"flow_first_seen":1605291690992,"flow_last_seen":1605291691029,"flow_tot_l4_data_len":100,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80f::2001","src_port":36972,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":32,"flow_packet_id":27,"flow_first_seen":1605291687934,"flow_last_seen":1605291688340,"flow_tot_l4_data_len":7503,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::1736:86f1","src_port":44264,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":2,"flow_packet_id":847,"flow_first_seen":1605291684452,"flow_last_seen":1605291698703,"flow_tot_l4_data_len":509140,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6277,"flow_avg_l4_data_len":601,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":41,"flow_packet_id":114,"flow_first_seen":1605291688843,"flow_last_seen":1605291691232,"flow_tot_l4_data_len":72894,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2448,"flow_avg_l4_data_len":639,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47302,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":3,"flow_packet_id":17,"flow_first_seen":1605291684481,"flow_last_seen":1605291684654,"flow_tot_l4_data_len":5087,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56560,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":42,"flow_packet_id":19,"flow_first_seen":1605291688843,"flow_last_seen":1605291689005,"flow_tot_l4_data_len":4446,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80c::2003","src_port":47304,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":4,"flow_packet_id":15,"flow_first_seen":1605291686035,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":4641,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":309,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56562,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":5,"flow_packet_id":1442,"flow_first_seen":1605291686035,"flow_last_seen":1605291696381,"flow_tot_l4_data_len":1968519,"flow_min_l4_data_len":32,"flow_max_l4_data_len":11560,"flow_avg_l4_data_len":1365,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":6,"flow_packet_id":17,"flow_first_seen":1605291686035,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":4681,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56566,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":7,"flow_packet_id":18,"flow_first_seen":1605291686035,"flow_last_seen":1605291686148,"flow_tot_l4_data_len":4701,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56568,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":8,"flow_packet_id":17,"flow_first_seen":1605291686035,"flow_last_seen":1605291686149,"flow_tot_l4_data_len":4681,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56570,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":9,"flow_packet_id":18,"flow_first_seen":1605291686035,"flow_last_seen":1605291686156,"flow_tot_l4_data_len":4701,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":261,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56572,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":10,"flow_packet_id":23,"flow_first_seen":1605291686060,"flow_last_seen":1605291686196,"flow_tot_l4_data_len":5289,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56574,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":11,"flow_packet_id":23,"flow_first_seen":1605291686060,"flow_last_seen":1605291686196,"flow_tot_l4_data_len":5289,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56576,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":12,"flow_packet_id":133,"flow_first_seen":1605291686060,"flow_last_seen":1605291697854,"flow_tot_l4_data_len":103287,"flow_min_l4_data_len":32,"flow_max_l4_data_len":10512,"flow_avg_l4_data_len":776,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":13,"flow_packet_id":17,"flow_first_seen":1605291686060,"flow_last_seen":1605291686196,"flow_tot_l4_data_len":4703,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56580,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":14,"flow_packet_id":5480,"flow_first_seen":1605291686064,"flow_last_seen":1605291695840,"flow_tot_l4_data_len":5898915,"flow_min_l4_data_len":32,"flow_max_l4_data_len":9464,"flow_avg_l4_data_len":1076,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":15,"flow_packet_id":23,"flow_first_seen":1605291686064,"flow_last_seen":1605291686203,"flow_tot_l4_data_len":5263,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":228,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56584,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":16,"flow_packet_id":15,"flow_first_seen":1605291686064,"flow_last_seen":1605291686203,"flow_tot_l4_data_len":4625,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56586,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":17,"flow_packet_id":15,"flow_first_seen":1605291686064,"flow_last_seen":1605291686203,"flow_tot_l4_data_len":4625,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56588,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":18,"flow_packet_id":23,"flow_first_seen":1605291686084,"flow_last_seen":1605291686232,"flow_tot_l4_data_len":5289,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56590,"dst_port":443,"l4_proto":"tcp"}
+0505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":19,"flow_packet_id":37,"flow_first_seen":1605291686084,"flow_last_seen":1605291686283,"flow_tot_l4_data_len":11120,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":47,"flow_packet_id":35,"flow_first_seen":1605291690421,"flow_last_seen":1605291690571,"flow_tot_l4_data_len":9215,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::2001","src_port":59624,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":20,"flow_packet_id":112,"flow_first_seen":1605291686301,"flow_last_seen":1605291696305,"flow_tot_l4_data_len":44526,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":397,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":43,"flow_packet_id":45,"flow_first_seen":1605291689408,"flow_last_seen":1605291689979,"flow_tot_l4_data_len":9793,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":217,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp"}
+0522{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":35,"flow_packet_id":27,"flow_first_seen":1605291688344,"flow_last_seen":1605291688502,"flow_tot_l4_data_len":8092,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2600:9000:219c:ee00:6:44e3:f8c0:93a1","src_port":56186,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":23,"flow_packet_id":118,"flow_first_seen":1605291686996,"flow_last_seen":1605291688354,"flow_tot_l4_data_len":97928,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5584,"flow_avg_l4_data_len":829,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3b6","src_port":38320,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":28,"flow_packet_id":45,"flow_first_seen":1605291687800,"flow_last_seen":1605291692129,"flow_tot_l4_data_len":9892,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":219,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp"}
+0505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":46,"flow_packet_id":27,"flow_first_seen":1605291690405,"flow_last_seen":1605291690626,"flow_tot_l4_data_len":10193,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1392,"flow_avg_l4_data_len":377,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::345f:7ca5","src_port":46646,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":36,"flow_packet_id":36,"flow_first_seen":1605291688611,"flow_last_seen":1605291688858,"flow_tot_l4_data_len":8763,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:134:1a0d:1429:742:782:b6","src_port":39736,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":26,"flow_packet_id":69,"flow_first_seen":1605291687642,"flow_last_seen":1605291687853,"flow_tot_l4_data_len":38231,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2448,"flow_avg_l4_data_len":554,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:816::2008","src_port":39520,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":39,"flow_packet_id":71,"flow_first_seen":1605291688830,"flow_last_seen":1605291698440,"flow_tot_l4_data_len":21093,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":297,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2001","src_port":58122,"dst_port":443,"l4_proto":"tcp"}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":24,"flow_packet_id":146,"flow_first_seen":1605291687485,"flow_last_seen":1605291690985,"flow_tot_l4_data_len":126179,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5584,"flow_avg_l4_data_len":864,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::acd9:12c2","src_port":51026,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":33,"flow_packet_id":42,"flow_first_seen":1605291688324,"flow_last_seen":1605291688572,"flow_tot_l4_data_len":7396,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":176,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51100,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":59,"flow_packet_id":23,"flow_first_seen":1605291696948,"flow_last_seen":1605291697249,"flow_tot_l4_data_len":8369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::34d3:acec","src_port":47006,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":34,"flow_packet_id":19,"flow_first_seen":1605291688336,"flow_last_seen":1605291688453,"flow_tot_l4_data_len":4638,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":244,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d1e6","src_port":51102,"dst_port":443,"l4_proto":"tcp"}
+0513{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":40,"flow_packet_id":174,"flow_first_seen":1605291688831,"flow_last_seen":1605291698470,"flow_tot_l4_data_len":129359,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3656,"flow_avg_l4_data_len":743,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2016","src_port":52296,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":0,"flow_packet_id":53,"flow_first_seen":1605291684451,"flow_last_seen":1605291698602,"flow_tot_l4_data_len":10044,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":189,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40028,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":1,"flow_packet_id":19,"flow_first_seen":1605291684451,"flow_last_seen":1605291684592,"flow_tot_l4_data_len":4678,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":246,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40030,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":27,"flow_packet_id":21,"flow_first_seen":1605291687761,"flow_last_seen":1605291687902,"flow_tot_l4_data_len":5688,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6853:b3d1","src_port":32970,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":31,"flow_packet_id":44,"flow_first_seen":1605291687933,"flow_last_seen":1605291688585,"flow_tot_l4_data_len":16169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":367,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:f916:5049:f87f:108e","src_port":48648,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":53,"flow_packet_id":35,"flow_first_seen":1605291690926,"flow_last_seen":1605291691119,"flow_tot_l4_data_len":7497,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":214,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::200a","src_port":38166,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":22,"flow_packet_id":73,"flow_first_seen":1605291686985,"flow_last_seen":1605291690314,"flow_tot_l4_data_len":43592,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2808,"flow_avg_l4_data_len":597,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43492,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":37,"flow_packet_id":31,"flow_first_seen":1605291688712,"flow_last_seen":1605291688927,"flow_tot_l4_data_len":6013,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":193,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2006","src_port":54726,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":30,"flow_packet_id":636,"flow_first_seen":1605291687931,"flow_last_seen":1605291698785,"flow_tot_l4_data_len":768921,"flow_min_l4_data_len":32,"flow_max_l4_data_len":7280,"flow_avg_l4_data_len":1208,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":54862,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":29,"flow_packet_id":31,"flow_first_seen":1605291687896,"flow_last_seen":1605291688326,"flow_tot_l4_data_len":7711,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":248,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::2278:cf94","src_port":39626,"dst_port":443,"l4_proto":"tcp"}
+0515{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":48,"flow_packet_id":104,"flow_first_seen":1605291690926,"flow_last_seen":1605291691154,"flow_tot_l4_data_len":114469,"flow_min_l4_data_len":32,"flow_max_l4_data_len":10904,"flow_avg_l4_data_len":1100,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46806,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":49,"flow_packet_id":28,"flow_first_seen":1605291690926,"flow_last_seen":1605291691043,"flow_tot_l4_data_len":9432,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46808,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":50,"flow_packet_id":28,"flow_first_seen":1605291690926,"flow_last_seen":1605291691043,"flow_tot_l4_data_len":9431,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46810,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":51,"flow_packet_id":27,"flow_first_seen":1605291690926,"flow_last_seen":1605291691043,"flow_tot_l4_data_len":9412,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46812,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":52,"flow_packet_id":27,"flow_first_seen":1605291690926,"flow_last_seen":1605291691044,"flow_tot_l4_data_len":9413,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::2001","src_port":46814,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":21,"flow_packet_id":164,"flow_first_seen":1605291686985,"flow_last_seen":1605291698522,"flow_tot_l4_data_len":50634,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2365,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp"}
+0510{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap","flow_id":44,"flow_packet_id":31,"flow_first_seen":1605291690373,"flow_last_seen":1605291690520,"flow_tot_l4_data_len":6692,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":51006,"dst_port":443,"l4_proto":"tcp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":11682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/reddit.pcap"}
diff --git a/tests/result/nDPId_rx.pcap.txt b/tests/result/nDPId_rx.pcap.txt
new file mode 100644
index 000000000..c5bd283cd
--- /dev/null
+++ b/tests/result/nDPId_rx.pcap.txt
@@ -0,0 +1,68 @@
+0354{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1460647264018,"flow_last_seen":1460647264018,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":41559,"dst_port":7002,"l4_proto":"udp"}
+0754{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647264,"pkt_len":334,"pkt":"PIqwbTfwAAjK968mCABFAAFA5\/AAAEARo32DctuowKfOfKJXG1oBLBrkVw+1YFw\/yYgAAAABAAAAAQAAAAEBBQAAAAAASQAAAfgAAAABAAAAZwAAAGkAAABvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":334,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1460647264018,"flow_last_seen":1460647264018,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":41559,"dst_port":7002,"l4_proto":"udp","ndpi": {"proto":"RX","category":"RPC"}}
+0407{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647264,"pkt_len":78,"pkt":"AAjK968mPIqwbTfwCABFAABAOykAADoRV0XAp858g3LbqBtaolcALPkKVw+1YFw\/yYgAAAABAAAAAQAAAAEBBAAAAAAASQAAAAEAACcR","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647264,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd5\/IAAEARpF6DctuowKfOfKJXG1oASRKnVw+1YFw\/yYgAAAABAAAAAAAAAAICIQAAAAAASQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1460647283326,"flow_last_seen":1460647283326,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":38331,"dst_port":7002,"l4_proto":"udp"}
+0752{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647283,"pkt_len":334,"pkt":"PIqwbTfwAAjK968mCABFAAFA6DUAAEARoziDctuowKfOfJW7G1oBLLHjVw+1c1wtPyQAAAABAAAAAQAAAAEBBQAAAAAASQAAAfgAAAABAAAAZwAAAGkAAABvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":334,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1460647283326,"flow_last_seen":1460647283326,"flow_tot_l4_data_len":300,"flow_min_l4_data_len":300,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":300,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":38331,"dst_port":7002,"l4_proto":"udp","ndpi": {"proto":"RX","category":"RPC"}}
+0406{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647283,"pkt_len":78,"pkt":"AAjK968mPIqwbTfwCABFAABATVwAADoRRRLAp858g3LbqBtalbsALJAKVw+1c1wtPyQAAAABAAAAAQAAAAEBBAAAAAAASQAAAAEAACcR","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647283,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd6DcAAEARpBmDctuowKfOfJW7G1oASammVw+1c1wtPyQAAAABAAAAAAAAAAICIQAAAAAASQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1460647299605,"flow_last_seen":1460647299605,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7003,"l4_proto":"udp"}
+0422{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":90,"pkt":"PIqwbTfwAAjK968mCABFAABM9uIAAEARlX+DctuowKfOfBtZG1sAOL9z1w+zMFwiT6wAAAABAAAAAQAAAAEBBQAAAAAANAAAAg8AAAAJcm9vdC5jZWxsAAAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1460647299605,"flow_last_seen":1460647299605,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7003,"l4_proto":"udp","ndpi": {"proto":"RX","category":"RPC"}}
+1824{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":1118,"pkt":"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","pkt_caplen":1118,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9usAAEARlWWDctuowKfOfBtZG1sASZXi1w+zMFwiT6wAAAABAAAAAAAAAAICIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":134,"pkt":"PIqwbTfwAAjK968mCABFAAB49uwAAEARlUmDctuowKfOfBtZG1sAZAqx1w+zMFwiT6wAAAACAAAAAQAAAAMBBQAAAAAANAAAAhUAAAAEAAAAAAAAAAAAAAAAAG4yeAAAQwcAAB\/B\/\/\/\/owAAACUAAAABAAAAAQAAAAAAAAB\/\/\/\/\/qgAAAHc=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":130,"pkt":"AAjK968mPIqwbTfwCABFAAB0USMAADoRQRfAp858g3LbqBtbG1kAYH0p1w+zMFwiT6wAAAACAAAAAQAAAAIBBAAAAAAANABuMngAAEMHAAAfwf\/\/\/6MAAAAlAAAAAQAAAAEAAAAAAAAAf\/\/\/\/6oAAAB3AAAADwAAAAEAAAABwKfO8Q==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9vEAAEARlV+DctuowKfOfBtZG1sASZXf1w+zMFwiT6wAAAACAAAAAAAAAAQCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1460647299704,"flow_last_seen":1460647299704,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.241","src_port":7001,"dst_port":7000,"l4_proto":"udp"}
+0403{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":74,"pkt":"PIqwbTfwAAjK968mCABFAAA8LUMAAEARXrqDctuowKfO8RtZG1gAKKMX1w+zMFwiT7AAAAABAAAAAQAAAAEBBQAAAAAAAQABAAQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1460647299704,"flow_last_seen":1460647299704,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.241","src_port":7001,"dst_port":7000,"l4_proto":"udp","ndpi": {"proto":"RX","category":"RPC"}}
+0449{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":108,"pkt":"AAjK968mPIqwbTfwCABFAABeF80AADoReg7Ap87xg3LbqBtYG1kASo9g1w+zMFwiT7AAAAABAAAAAAAAAAECIgAAAAAAAQAAAAAAAAABAAAAAQAAAAAGAQEAAAAAAAWkAAAFpAAAABAAAAAB","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABdLVQAAEARXoiDctuowKfO8RtZG1gASaag1w+zMFwiT7AAAAABAAAAAAAAAAICIQAAAAAAAQAAAAAAAAABAAAAAAAAAAEHAAAAAAAAFjwAAAWkAAAAEAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":74,"pkt":"AAjK968mPIqwbTfwCABFAAA8F9AAADoRei3Ap87xg3LbqBtYG1kAKJ5Np\/AZ\/luoHUgAAAABAAAAAQAAAAEBBQAAAAAAAQABAAI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1100{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":510,"pkt":"PIqwbTfwAAjK968mCABFAAHwLVcAAEARXPKDctuowKfO8RtZG1gB3OGAp\/AZ\/luoHUgAAAABAAAAAQAAAAEBBAAAAAAAAQAAAAEAj\/y1AACzMAAAFw\/\/\/\/+bAAAAfwAAAAYAAAAWAAAAFgAAAHr\/\/\/+qAAAAdwYWFnr\/\/4gAgRjNzAAAAtLIJ\/Lw\/\/+IAMgn8vD\/\/4gAAAAAAQAAAAAlXBLA\/\/+IAgAAAAAAAAAAAAAAEAAAAAAAAURAAAAAAIEJ1ff\/\/\/\/\/yCfzWP\/\/iACBCkN9\/\/\/\/\/wAAAAD\/\/4gALuVEsP\/\/iAIAAAABAAAAAMgn8vD\/\/4gA\/\/\/\/AP\/\/\/\/8u5URAAP+IAsgn+ED\/\/4gALuUZQP\/\/iALIJ\/LwAAAAAYFWHN7\/\/\/\/\/oLiogP\/\/\/\/+gtEIe\/\/\/\/\/wT6olj\/\/8kAoLRnW\/\/\/\/\/8AAAAAAAAAAKC0Ltj\/\/\/\/\/BPqiWP\/\/yQCXNbAg\/\/+IAAABREAAAAAEJWiKIP\/\/iAIAAAW+AAAAACL+f9j\/\/4gCI6eWCP\/\/iAIAAAAAAAAAAAAAApIAAAAAIv59lP\/\/iAK54UfA\/\/+IAKC1uoD\/\/\/\/\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLSMW\/\/\/\/\/\/IJ\/Lw\/\/+IAP\/\/\/\/8CAAEAIv591P\/\/iAKgtO7T\/\/\/\/\/wAAAAEAAAAB","pkt_caplen":510,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"AAjK968mPIqwbTfwCABFAABdF9QAADoRegjAp87xg3LbqBtYG1kASaQNp\/AZ\/luoHUgAAAABAAAAAAAAAAICIQAAh9YAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":118,"pkt":"AAjK968mPIqwbTfwCABFAABoF9UAADoRefzAp87xg3LbqBtYG1kAVAcGp\/AZ\/luoHUgAAAACAAAAAQAAAAMBBQAAAAAAAQAAANUAbjJ4AABDBwAAH8H\/\/\/+jAAAAJQAAAAEAAAABAAAAAAAAAH\/\/\/\/+qAAAAdw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":70,"pkt":"PIqwbTfwAAjK968mCABFAAA4LVwAAEARXqWDctuowKfO8RtZG1gAJJ5Xp\/AZ\/luoHUgAAAACAAAAAQAAAAIBBAAAAAAAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"AAjK968mPIqwbTfwCABFAABdF9oAADoRegLAp87xg3LbqBtYG1kASaQKp\/AZ\/luoHUgAAAACAAAAAAAAAAQCIQAAh9YAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":78,"pkt":"AAjK968mPIqwbTfwCABFAABAF9sAADoReh7Ap87xg3LbqBtYG1kALKMM1w+zMFwiT7AAAAABAAAAAQAAAAIBBAAAAAAAAQAAAAEAAAAH","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABdLWIAAEARXnqDctuowKfO8RtZG1gASZWe1w+zMFwiT7AAAAABAAAAAAAAAAMCIQAAAAAAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":134,"pkt":"PIqwbTfwAAjK968mCABFAAB49wkAAEARlSyDctuowKfOfBtZG1sAZIbt1w+zMFwiT6wAAAADAAAAAQAAAAUBBQAAAAAANAAAAhUAAAAEAAAAAAAAAAAAAAAAAIQN5gAA+50AABAS\/\/\/\/mP\/\/\/4QAAAABAAAAAQAAAAAAAAB\/\/\/\/\/qgAAAHc=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":130,"pkt":"AAjK968mPIqwbTfwCABFAAB0UV4AADoRQNzAp858g3LbqBtbG1kAYPnb1w+zMFwiT6wAAAADAAAAAQAAAAMBBAAAAAAANACEDeYAAPudAAAQEv\/\/\/5j\/\/\/+EAAAAAQAAAAEAAAAAAAAAf\/\/\/\/6oAAAB3AAAADwAAAAEAAAABwKfOfA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9w4AAEARlUKDctuowKfOfBtZG1sASZXc1w+zMFwiT6wAAAADAAAAAAAAAAYCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1460647299986,"flow_last_seen":1460647299986,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7000,"l4_proto":"udp"}
+0403{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647299,"pkt_len":74,"pkt":"PIqwbTfwAAjK968mCABFAAA89w8AAEARlWKDctuowKfOfBtZG1gAKKOI1w+zMFwiT7QAAAABAAAAAQAAAAEBBQAAAAAAAQABAAQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1460647299986,"flow_last_seen":1460647299986,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7000,"l4_proto":"udp","ndpi": {"proto":"RX","category":"RPC"}}
+0449{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":108,"pkt":"AAjK968mPIqwbTfwCABFAABeUWIAADoRQO7Ap858g3LbqBtYG1kASjJ01w+zMFwiT7QAAAABAAAAAAAAAAECIgAAXV0AAQAAAAAAAAABAAAAAQAAAAAGAQEAAAAAAAWkAAAFpAAAABAAAAAB","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9xIAAEARlT6DctuowKfOfBtZG1gASacR1w+zMFwiT7QAAAABAAAAAAAAAAICIQAAAAAAAQAAAAAAAAABAAAAAAAAAAEHAAAAAAAAFjwAAAWkAAAAEAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":74,"pkt":"AAjK968mPIqwbTfwCABFAAA8UWMAADoRQQ\/Ap858g3LbqBtYG1kAKDk4na9LKFupW+gAAAABAAAAAQAAAAEBBQAAAAAAAQABAAI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":510,"pkt":"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","pkt_caplen":510,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":107,"pkt":"AAjK968mPIqwbTfwCABFAABdUWUAADoRQOzAp858g3LbqBtYG1kASUAcna9LKFupW+gAAAABAAAAAAAAAAICIQAAhrIAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":118,"pkt":"AAjK968mPIqwbTfwCABFAABoUWYAADoRQODAp858g3LbqBtYG1kAVB4wna9LKFupW+gAAAACAAAAAQAAAAMBBQAAAAAAAQAAANUAhA3mAAD7nQAAEBL\/\/\/+Y\/\/\/\/hAAAAAEAAAABAAAAAAAAAH\/\/\/\/+qAAAAdw==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":70,"pkt":"PIqwbTfwAAjK968mCABFAAA49xQAAEARlWGDctuowKfOfBtZG1gAJDlCna9LKFupW+gAAAACAAAAAQAAAAIBBAAAAAAAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":107,"pkt":"AAjK968mPIqwbTfwCABFAABdUWgAADoRQOnAp858g3LbqBtYG1kASUAZna9LKFupW+gAAAACAAAAAAAAAAQCIQAAhrIAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAABaQAAAWkAAAAIAAAAAE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":78,"pkt":"AAjK968mPIqwbTfwCABFAABAUWkAADoRQQXAp858g3LbqBtYG1kALKN91w+zMFwiT7QAAAABAAAAAQAAAAIBBAAAAAAAAQAAAAEAAAAH","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9xYAAEARlTqDctuowKfOfBtZG1gASZYP1w+zMFwiT7QAAAABAAAAAAAAAAMCIQAAAAAAAQAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":94,"pkt":"PIqwbTfwAAjK968mCABFAABQLXUAAEARXnSDctuowKfO8RtZG1gAPEeNpznrEIIX+LwAAAABAAAAAQAAAAEBBQACk4wAAc15rzohZDu3jxMeHup7VafzWmFjRiqOvw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":86,"pkt":"AAjK968mPIqwbTfwCABFAABIF\/4AADoRefPAp87xg3LbqBtYG1kANER8pznrEIIX+LwAAAAAAAAAAAAAAAEGAAACAAAAAQAAAAIDVH8rAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0893{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":435,"pkt":"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","pkt_caplen":435,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":74,"pkt":"AAjK968mPIqwbTfwCABFAAA8F\/8AADoRef7Ap87xg3LbqBtYG1kAKJ5Hp\/AZ\/luoHUgAAAADAAAAAQAAAAUBBQAAAAAAAQABAAI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":82,"pkt":"PIqwbTfwAAjK968mCABFAABE9x0AAEARlUyDctuowKfOfBtZG1sAMLK81w+zMFwiT6wAAAAEAAAAAQAAAAcBBQAAAAAANAAAAg8AAAADd3d3AA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+1826{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":1118,"pkt":"AAjK968mPIqwbTfwCABFAARQUXkAADoRPOXAp858g3LbqBtbG1kEPFde1w+zMFwiT6wAAAAEAAAAAQAAAAQBBAAAAAAANAAAAHcAAAB3AAAAdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBuMngAAEMHAAAfwf\/\/\/6MAAAAlAAAAAQAAAAEAAAAAAAAAf\/\/\/\/6oAAAB3AIQN5gAA+50AABAS\/\/\/\/mP\/\/\/4QAAAABAAAAAQAAAAAAAAB\/\/\/\/\/qgAAAHcAbjJ4AABDBwAAH8H\/\/\/+jAAAAJQAAAAEAAAABAAAAAAAAAH\/\/\/\/+qAAAAdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwAAAA8AAAAPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAEgAAABIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAEE5wZ3dOcGeKAAAAAAAAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=","pkt_caplen":1118,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9x4AAEARlTKDctuowKfOfBtZG1sASZXZ1w+zMFwiT6wAAAAEAAAAAAAAAAgCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":82,"pkt":"PIqwbTfwAAjK968mCABFAABE9yUAAEARlUSDctuowKfOfBtZG1sAMMZK1w+zMFwiT6wAAAAFAAAAAQAAAAkBBQAAAAAANAAAAg8AAAAEdXNlcg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+1826{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":1118,"pkt":"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","pkt_caplen":1118,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":107,"pkt":"PIqwbTfwAAjK968mCABFAABd9ycAAEARlSmDctuowKfOfBtZG1sASZXW1w+zMFwiT6wAAAAFAAAAAAAAAAoCIQAAAAAANAAAAAAAAAACAAAAAQAAAAAIAAAAAAAAFjwAAAWkAAAAIAAAAAQ=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":94,"pkt":"PIqwbTfwAAjK968mCABFAABQ9z0AAEARlSCDctuowKfOfBtZG1gAPMf2pznrEIIX+MQAAAABAAAAAQAAAAEBBQACQQMAAc15rzohZDu3tHAiNlJF9KLblAPfbQt\/ew==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":86,"pkt":"AAjK968mPIqwbTfwCABFAABIUYoAADoRQNzAp858g3LbqBtYG1kANGRrpznrEIIX+MQAAAAAAAAAAAAAAAEGAAACAAAAAQAAAAIPbFORAAAAAAAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0894{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":435,"pkt":"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","pkt_caplen":435,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","pkt_oversize":false,"pkt_ts":1460647300,"pkt_len":74,"pkt":"AAjK968mPIqwbTfwCABFAAA8UYsAADoRQOfAp858g3LbqBtYG1kAKDkyna9LKFupW+gAAAADAAAAAQAAAAUBBQAAAAAAAQABAAI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1460647264018,"flow_last_seen":1460647264026,"flow_tot_l4_data_len":417,"flow_min_l4_data_len":44,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":41559,"dst_port":7002,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":4,"flow_packet_id":20,"flow_first_seen":1460647299986,"flow_last_seen":1460647320158,"flow_tot_l4_data_len":2462,"flow_min_l4_data_len":36,"flow_max_l4_data_len":476,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7000,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":3,"flow_packet_id":79,"flow_first_seen":1460647299704,"flow_last_seen":1460647320158,"flow_tot_l4_data_len":9690,"flow_min_l4_data_len":36,"flow_max_l4_data_len":748,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.241","src_port":7001,"dst_port":7000,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":2,"flow_packet_id":27,"flow_first_seen":1460647299605,"flow_last_seen":1460647300326,"flow_tot_l4_data_len":9001,"flow_min_l4_data_len":48,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":333,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":7001,"dst_port":7003,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1460647283326,"flow_last_seen":1460647283340,"flow_tot_l4_data_len":417,"flow_min_l4_data_len":44,"flow_max_l4_data_len":300,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.219.168","dst_ip":"192.167.206.124","src_port":38331,"dst_port":7002,"l4_proto":"udp"}
+0140{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/rx.pcap"}
diff --git a/tests/result/nDPId_s7comm.pcap.txt b/tests/result/nDPId_s7comm.pcap.txt
new file mode 100644
index 000000000..c4fdb9b0d
--- /dev/null
+++ b/tests/result/nDPId_s7comm.pcap.txt
@@ -0,0 +1,20 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1408528803880,"flow_last_seen":1408528803880,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.10","dst_ip":"192.168.1.40","src_port":4185,"dst_port":102,"l4_proto":"tcp"}
+0410{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":76,"pkt":"ABsbI+s7kOa6hF5BCABFAAA+LUtAAIAGAADAqAEKwKgBKBBZAGaQRN2iAAL7EFAY+vCDswAAAwAAFhHgAAAABwDBAgEAwgIBAsABCg==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1408528803880,"flow_last_seen":1408528803880,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.10","dst_ip":"192.168.1.40","src_port":4185,"dst_port":102,"l4_proto":"tcp","ndpi": {"proto":"s7comm","category":"Network"}}
+0410{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":76,"pkt":"kOa6hF5BABsbI+s7CABFAAA+AM4AAB4GGGrAqAEowKgBCgBmEFkAAvsQkETduFAYEAAGowAAAwAAFhHQAAcAAwDAAQrBAgEAwgIBAg==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":79,"pkt":"ABsbI+s7kOa6hF5BCABFAABBLUxAAIAGAADAqAEKwKgBKBBZAGaQRN24AAL7JlAY+tqDtgAAAwAAGQLwgDIBAAACAAAIAADwAAABAAEB4A==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":81,"pkt":"kOa6hF5BABsbI+s7CABFAABDAM8AAB4GGGTAqAEowKgBCgBmEFkAAvsmkETd0VAYEAAeAAAAAwAAGwLwgDIDAAACAAAIAAAAAPAAAAEAAQDw","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":61,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLU1AAIAGAADAqAEKwKgBKBBZAGaQRN3RAAL7QVAY+r+DpAAAAwAABwLwAA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":87,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLU5AAIAGAADAqAEKwKgBKBBZAGaQRN3YAAL7QVAY+r+DvgAAAwAAIQLwgDIHAAADAAAIAAgAARIEEUQBAP8JAAQBMgAE","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":135,"pkt":"kOa6hF5BABsbI+s7CABFAAB5ANAAAB4GGC3AqAEowKgBCgBmEFkAAvtBkETd+VAYEAACRQAAAwAAUQLwgDIHAAADAAAMADQAARIIEoQBAQAAAAD\/CQAwATIABAAoAAEABAABAAAAAQACAAAAAFZWvASj1RQACXICAAAAAAAAAAAAAAAAAAAA","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":61,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLU9AAIAGAADAqAEKwKgBKBBZAGaQRN35AAL7klAY+m6DpAAAAwAABwLwAA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":87,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLVBAAIAGAADAqAEKwKgBKBBZAGaQRN4AAAL7klAY+m6DvgAAAwAAIQLwgDIHAAAEAAAIAAgAARIEEUQBAP8JAAQBMgAC","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":135,"pkt":"kOa6hF5BABsbI+s7CABFAAB5ANEAAB4GGCzAqAEowKgBCgBmEFkAAvuSkETeIVAYEACdkgAAAwAAUQLwgDIHAAAEAAAMADQAARIIEoQBAQAAAAD\/CQAwATIAAgAoAAEAAgAAAAAAAAAOAAAAAAYBCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":61,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLVFAAIAGAADAqAEKwKgBKBBZAGaQRN4hAAL741AY+h2DpAAAAwAABwLwAA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":87,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLVJAAIAGAADAqAEKwKgBKBBZAGaQRN4oAAL741AY+h2DvgAAAwAAIQLwgDIHAAAFAAAIAAgAARIEEUQBAP8JAAQAEwAA","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":275,"pkt":"kOa6hF5BABsbI+s7CABFAAEFANIAAB4GF5\/AqAEowKgBCgBmEFkAAvvjkETeSVAYEADS7gAAAwAA3QLwgDIHAAAFAAAMAMAAARIIEoQBAQAAAAD\/CQC8ABMAAAAkAAUAAQABAAMAAAARAAAAAwAAAAABYAAAAAAAAAAAAAAAAAAAAAAAAgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwACAAIAAAACAAAAAAAAAAAAAAAAAAAAAgAAAAATKgAAAAAABAACAIAAAAACAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAABQACAAAFAAACAAAAAAAAAAAAAAAAAAAAAAUAAAAAIAAAAAA=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":61,"pkt":"ABsbI+s7kOa6hF5BCABFAAAvLVNAAIAGAADAqAEKwKgBKBBZAGaQRN5JAAL8wFAY+UCDpAAAAwAABwLwAA==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","pkt_oversize":false,"pkt_ts":1408528803,"pkt_len":87,"pkt":"ABsbI+s7kOa6hF5BCABFAABJLVRAAIAGAADAqAEKwKgBKBBZAGaQRN5QAAL8wFAY+UCDvgAAAwAAIQLwgDIHAAAGAAAIAAgAARIEEUQBAP8JAAQBMQAE","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap","flow_id":0,"flow_packet_id":55,"flow_first_seen":1408528803880,"flow_last_seen":1408528804016,"flow_tot_l4_data_len":3390,"flow_min_l4_data_len":27,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":61,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.10","dst_ip":"192.168.1.40","src_port":4185,"dst_port":102,"l4_proto":"tcp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/s7comm.pcap"}
diff --git a/tests/result/nDPId_selfsigned.pcap.txt b/tests/result/nDPId_selfsigned.pcap.txt
new file mode 100644
index 000000000..59c244dd2
--- /dev/null
+++ b/tests/result/nDPId_selfsigned.pcap.txt
@@ -0,0 +1,42 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0350{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAAByZcLuc3ubiYAAAAAsAL\/\/\/40AAACBD\/YAQMDBQEBCAoTf8z4AAAAAAQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0351{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":68,"pkt":"AgAAAEUAAEAAAEAAQAYAAH8AAAF\/AAABC7nJlxL1FVDN7m4nsBL\/\/\/40AAACBD\/YAQMDBQEBCAoTf8z4E3\/M+AQCAAA=","pkt_caplen":68,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ubicS9RVRgBAx1\/4oAAABAQgKE3\/M+BN\/zPg=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1FVHN7m4ngBAx1\/4oAAABAQgKE3\/M+BN\/zPg=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+1026{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":573,"pkt":"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","pkt_caplen":573,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1FVHN7nAsgBAxx\/4oAAABAQgKE3\/M\/hN\/zP4=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+2170{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":1413,"pkt":"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","pkt_caplen":1413,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucCwS9RqegBAxrP4oAAABAQgKE3\/NARN\/zQE=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0597{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":250,"pkt":"AgAAAEUAAPYAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucCwS9RqegBgxrP7qAAABAQgKE3\/NIRN\/zQEWAwMAihAAAIaFBAG+dqNZTTGNmlhVbXDLZNVvUlffjDtinpHNy96LVaKYMsQRKJqlAMJaJ1CL2upAok8ZJ3580aT16eCbet9Av5rvqwGLozAGivP0w7XcCvMFhYEkd0w55ov6A5Xgcdk0U5pPZKI4AHrMk56KuDLa48F22ITuDHcEXW1FwVSrPe\/aIwNarxQDAwABARYDAwAoAAAAAAAAAACfHxM0p3Cy7xktMZ6c6Q\/r\/qNpTZ7nZV0imZBp6cUPhQ==","pkt_caplen":250,"pkt_type":0,"pkt_ipoffset":0}
+0196{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1Gp7N7nDugBAxwf4oAAABAQgKE3\/NIRN\/zSE=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0404{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":107,"pkt":"AgAAAEUAAGcAAEAAQAYAAH8AAAF\/AAABC7nJlxL1Gp7N7nDugBgxwf5bAAABAQgKE3\/NIhN\/zSEUAwMAAQEWAwMAKPFL+hO\/a3B3v+zcGiguxbP496ElenpzjOz+90hPssLt7skmpRpCGLw=","pkt_caplen":107,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucO4S9RrRgBAxq\/4oAAABAQgKE3\/NIhN\/zSI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0482{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":163,"pkt":"AgAAAEUAAJ8AAEAAQAYAAH8AAAF\/AAAByZcLuc3ucO4S9RrRgBgxq\/6TAAABAQgKE3\/NIhN\/zSIXAwMAZgAAAAAAAAABdBSRwbqzQkhQtcxlAK17XmvhhAJFl33RHxJN0euo4ttiJS6nTJ0vqgLpUY2Fj7p\/dZWzDo51XJ69V2M\/QOjoclgQ6xctxSRbp7a+0T7Nk2eRCARiLWRH6v4l1aNskA==","pkt_caplen":163,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1GtHN7nFZgBAxvf4oAAABAQgKE3\/NIhN\/zSI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0847{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":433,"pkt":"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","pkt_caplen":433,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucVkS9RxKgBAxn\/4oAAABAQgKE3\/NIhN\/zSI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAABC7nJlxL1HErN7nFZgBExvf4oAAABAQgKE3\/NIhN\/zSI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0334{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":56,"pkt":"AgAAAEUAADQAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucVkS9RxLgBAxn\/4oAAABAQgKE3\/NIhN\/zSI=","pkt_caplen":56,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0374{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":87,"pkt":"AgAAAEUAAFMAAEAAQAYAAH8AAAF\/AAAByZcLuc3ucVkS9RxLgBgxn\/5HAAABAQgKE3\/NIhN\/zSIVAwMAGgAAAAAAAAACREZ61K9C9UtSJpV+82AiMBrk","pkt_caplen":87,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0315{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","pkt_oversize":false,"pkt_ts":1588921646,"pkt_len":44,"pkt":"AgAAAEUAACgAAEAAQAYAAH8AAAF\/AAABC7nJlxL1HEsAAAAAUAQAAP4cAAA=","pkt_caplen":44,"pkt_type":0,"pkt_ipoffset":0}
+0197{"basic_event_id":1,"basic_event_name":"Unknown datalink layer packet","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap","datalink":0,"header":33554432}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/selfsigned.pcap"}
diff --git a/tests/result/nDPId_signal.pcap.txt b/tests/result/nDPId_signal.pcap.txt
new file mode 100644
index 000000000..d1f930e1d
--- /dev/null
+++ b/tests/result/nDPId_signal.pcap.txt
@@ -0,0 +1,301 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569051245838,"flow_last_seen":1569051245838,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0778{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051245,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKS8AAP8RkXYAAAAA\/\/\/\/\/wBEAEMBNJxAAQEGACG6jqoAAQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569051245838,"flow_last_seen":1569051245838,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569051247593,"flow_last_seen":1569051247593,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":85,"pkt":"xiwDYGpkxGGLNYKpCABFAABHd8wAAP8RvnbAqAIRwKgCAe15ADUAM\/YJyvgBAAABAAAAAAAABGU2NzMFZHNjZTkKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569051247593,"flow_last_seen":1569051247593,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e673.dsce9.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569051247594,"flow_last_seen":1569051247594,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrcBKAbtArcPUAAAAALAC\/\/8kVgAAAgQFtAEDAwYBAQgKKFVNgQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569051247599,"flow_last_seen":1569051247599,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN66AbtonqfVAAAAALAC\/\/\/ZywAAAgQFtAEDAwcBAQgKKFVR7gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569051247600,"flow_last_seen":1569051247600,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrd67AbuyrbdxAAAAALAC\/\/+b2AAAAgQFtAEDAwcBAQgKKFVR7wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569051247601,"flow_last_seen":1569051247601,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrd68AbvGwW2DAAAAALAC\/\/\/RsAAAAgQFtAEDAwcBAQgKKFVR8AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569051247603,"flow_last_seen":1569051247603,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGZHDAqAIRIuHwrd69Abtt2McPAAAAALAC\/\/\/RCgAAAgQFtAEDAwcBAQgKKFVR8gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":101,"pkt":"xGGLNYKpxiwDYGpkCABFAABXR+wAAEARrUfAqAIBwKgCEQA17XkAQwp5yviBgAABAAEAAAAABGU2NzMFZHNjZTkKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAA8ABBc5GBA=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1569051247593,"flow_last_seen":1569051247630,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e673.dsce9.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.57.24.16"}}
+0406{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADQGlLoXORgQwKgCEQG73rrg+UqLaJ6n1qAScSCOEgAAAgQFrAQCCAqWTinBKFVR7gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66AbtonqfW4PlKjIAQBAspvwAAAQEICihVUhuWTinB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1091{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1569051247599,"flow_last_seen":1569051247645,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0395{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0iWYAADQGC1wXORgQwKgCEQG73rrg+UqMaJ6p24AQAOsqrAAAAQEICpZOKe8oVVIb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0815{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1569051247599,"flow_last_seen":1569051247690,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2351{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAAXUiWgAADQGBboXORgQwKgCEQG73rrg+VAsaJ6p24AQAOuJLwAAAQEICpZOKe8oVVIbxAXCpHbxPftaL4zD+bXbUvS8WzTblfQmSFg3TcVgBhrRL7IMVVjmem3E64jPckHXSIMaCBo0I6Vru1KcVVtRsTg\/KT8zjUtuGiDTbqlTqprLzMVMKG5JBGoAPgC871UdRhEjkyTpQETY0\/jDkHxSwOH4x4tr\/E9d8X60qp0b\/8eSP3yaZNx6nPtIDWU9bO9w8kuQCfrDwTEjcGZ0hAhigPynn99QQxdSNZAB4I0Ea0UJ86TWYm80tof3NT+f0dEuX6V8zRYUyDPRWw0iiPKDgdvySuxFILhkiF6MZX8EFKMcL\/yEvW94RcjYbpJvt91GL7snvYFl8bXMXmoTpXqvnUGhXc0nZEuoqH3+5Oix15F0gTTHbsruxzP8sFnF9mcTLDks8vv\/dHU8oZiHJQHStW6a6yoSWFiAV697M7\/n+qgt9ESweWU7DmmEfWUxaEq+qgkJaeDz2eDqVhc4AoXnECDQ+K\/iJW\/DlDACPYMLiLp+DwuWvAVyyRncqDwiY5NN35jujMOyJMTssVmmkQ2\/COS5GFAfClCsxcYxHYXc+ZoFRrEPvOBF\/VVocQs4w2EzBRZ8ziaI4JSM42QdhQEMz5A7Y1dcYC3lsTvUyzaebJNRykwIVtGK\/kk41STOkjp+IRsHK4v0wNgoKSkZ\/KAnXenufKx7+ol6XwCeMTyv5G7NuQGuRA3+HJJRv\/q813ewEIOsmUZN2y9urgQGCTjxA4hNycl7l7i+P6ecXDqSNyVhPtZY0y\/42gXiKs3+jtZMxFGDsuKCyFaR8PfxeI+teeYy7dzGNyOLjeFNv7UsiZg57I+r7+fb+ZGBPZPf21numlZbcdiXlTotn\/JSv1nv95V8cKsUXhVmaLOj+Znha4jPuMbbBxMSAfUMZMYObaxxtAsUAjuVU6LcMesmSPlZPVvvyjDOMO9kV1Nss7hBTIqC9CqOD8tWmUAA8RDhPWOmcCoaVvQK4gamwkMa5\/oo+llZxpMe6FT\/Cy5pfA9RdtTsTSAAHZ6k1w7F5FJX6WCosUra5AJtx58za0ujMV65mGpgLE8RUJMOKoGKSV3ry5yEUa+\/CdmZ9W6gaYUVYZLJpgcrso\/wMBkzWxIKHiI0L5Yto8+9H5Pav2fcE8zeTAOupLYj\/mNC3CpinV\/1tXD0mczD11UtvsKwGwZ+1ywKYB6YktBCKzgawLWTqlxOFSLVCgGDUARyqLj0fzUB8HHcvLngkSv9Gc2cM\/p\/zJe7oF2Hlil\/qgGEmIxpw37N8ywkO8psfZcB1fstW5+nMkgCPjhAHqYduF6d+BslQEATpnfEf4319WFCVpVnsJej9zDqCxii8iaLQ1FnBv8CJab9k+nhklAxNHea63zjQkoMmoWK0bNHME45w+dwL+VvSFLJkJqHdQYmOB6OuqUSsgBPgjSy4Yj4zICpNnkopcYNmF8sFixg5tY0Agwg6g+zOUf1auld5T4mS89vZcvBp\/H2pjFXqr4F2+nr8aDZqxszaOav1rlo+LtuFDnSIm8EK9\/b8UkqZ1mdLyfFzWAXAjYZLoaXI2ETFePtnPjccHnkkALLzbJYFNXVgjNr56WzKmuyQAzZOeo2MThI508zTwSLTBmDMuvmevCTF+JnO4Jwn9eSLeza\/V3HQkQTg60Fr6B7sqhtvA8\/Y5QpENWUN3c02GKHt\/VGmKHSeCwvKvmPn108H4HMIfL0fDzuEBzmZ1H5IhR1PCnSAD8\/jAXT8kUfxUwcUyFl9ZtX6hJrkxuc+tzXz2LE3+WHRdjrs363PwgyplOYHNKHhRUFw5GYte3mv5TNY4uDKa0Dy+bQy9sFRNe\/47JVi0gJ94Gic1DghxysVQTcdZaipYhrbuvVJZlY1p7s0RpdAw36Hdw+SjMdlGyb3D3Vk0SV9ALyeNezhkDfgeCtYgKn2wq0Blr1ZBnB","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2040{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4PlVzIAQA\/QcNAAAAQEICihVUkqWTinv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4PlajIAQA+sXfQAAAQEICihVUkqWTinv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4PlgLIAQBAARxwAAAQEICihVUkqWTinw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO0G93Mi4fCtwKgCEQG7wEr7fyfqQK3D1aASaN\/uCAAAAgQFrAQCCApkFVboKFVNgQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrcBKAbtArcPV+38n64AQCBZ9JQAAAQEICihVTfNkFVbo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":263,"pkt":"xiwDYGpkxGGLNYKpCABFAAD5AABAAEAGY7fAqAIRIuHwrcBKAbtArcPV+38n64AYCBZZNQAAAQEICihVTfNkFVboFgMBAMABAAC8AwNdhdJvuXs\/d642PJRF7UI\/AdVwXtSGkzdnBwsA+gkrIgAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAZwAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1569051247594,"flow_last_seen":1569051247706,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0408{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO0G93Mi4fCtwKgCEQG73rtLEL7asq23cqASaN9\/CQAAAgQFrAQCCApkFVbqKFVR7wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd67AbuyrbdySxC+24AQBAsSOAAAAQEICihVUlpkFVbq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1091{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1569051247600,"flow_last_seen":1569051247711,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0407{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO0G93Mi4fCtwKgCEQG73r1n96jrbdjHEKASaN+tQgAAAgQFrAQCCApkFVbrKFVR8gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G9nMi4fCtwKgCEQG73rwJHv1\/xsFthKASaN+4LQAAAgQFrAQCCApkFVbrKFVR8AEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd69Abtt2McQZ\/eo7IAQBAtAbwAAAQEICihVUl9kFVbr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":583,"pkt":"xiwDYGpkxGGLNYKpCABFAAI5AABAAEAGYnfAqAIRIuHwrd69Abtt2McQZ\/eo7IAYBAtWzgAAAQEICihVUl9kFVbrFgMBAgABAAH8AwNt7hXbpLjXMRR\/bxdtzkjvB4xS1PwDQ6PxbRaUrO0qwSDVSMeS43dgzqJuDX9Nz7D77w9PJu+JEAZF32iZkikHGQAiEwETAxMCwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqAEAAZH\/AQABAAAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcAFwAAAA0AGAAWBAMIBAQBBQMCAwgFCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAAMwAmACQAHQAggkVxJnNxvx7yRJ3IWr6\/bePVPj3hLoE6hEcrUhAYuEMALQACAQEAKwAFBAMEAwMACgAKAAgAHQAXABgAGQAVAM4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1569051247603,"flow_last_seen":1569051247716,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0395{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd68AbvGwW2ECR79gIAQBAtLWAAAAQEICihVUl9kFVbr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":583,"pkt":"xiwDYGpkxGGLNYKpCABFAAI5AABAAEAGYnfAqAIRIuHwrd68AbvGwW2ECR79gIAYBAtCawAAAQEICihVUl9kFVbrFgMBAgABAAH8AwMC\/iq\/29\/bfQmL3NywRdaHPxawxpN\/gjq67bcZmEul+iC0YvLniq6GFUwRgLKNIv\/K1BW3lLi2Y9hIO9HhpF3gJwAiEwETAxMCwCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqAEAAZH\/AQABAAAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcAFwAAAA0AGAAWBAMIBAQBBQMCAwgFCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAAMwAmACQAHQAg4ti0IjmHHcY34Qh7EHKKwWM8SOIvozUrzGlVTZfDoB4ALQACAQEAKwAFBAMEAwMACgAKAAgAHQAXABgAGQAVAM4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1569051247601,"flow_last_seen":1569051247716,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1221{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":673,"pkt":"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","pkt_caplen":673,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN66Abtonqnb4Plii4AQA\/sPFAAAAQEICihVUnWWTioe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":146,"pkt":"xiwDYGpkxGGLNYKpCABFAACEAABAAEAGSHLAqAIRFzkYEN66Abtonqnb4Plii4AYBAAqMQAAAQEICihVUnyWTioeFAMDAAEBFwMDAEWt3vSyYiyXNihI1uEvJcD3z4UZlRCq\/v6Noa6tzj1C2PFXglBI2RcmKUroHMPUFJ7ycyKUh9XP0G0NH2GNDEqL6FJpfsY=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cO8AAO0Ghowi4fCtwKgCEQG7wEr7fyfrQK3EmoAQAG6D7AAAAQEICmQVVwQoVU3z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1569051247594,"flow_last_seen":1569051247818,"flow_tot_l4_data_len":1849,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+1789{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1095,"pkt":"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","pkt_caplen":1095,"pkt_type":2048,"pkt_ipoffset":14}
+1223{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":2,"flow_packet_id":7,"flow_first_seen":1569051247594,"flow_last_seen":1569051247818,"flow_tot_l4_data_len":2910,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":415,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0395{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrcBKAbtArcSa+38xkIAQB+9yVQAAAQEICihVTmNkFVcF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA06d0AAO0GDZ4i4fCtwKgCEQG73rtLEL7bsq25d4AQAG4TtAAAAQEICmQVVwYoVVJa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAAXU6d4AAO0GB\/0i4fCtwKgCEQG73rtLEL7bsq25d4AQAG7q5gAAAQEICmQVVwYoVVJaFgMDAGICAABeAwMNXD8fXbNx86yVNZArROawe23r2GZoQa3gLHkrH4BfYiDYrD5r2btJMgmiQISYggyjzcYEtCwpCd3hAwR36bb9U8AvAAAW\/wEAAQAACwAEAwABAgAQAAUAAwJoMhYDAwfnCwAH4wAH4AAD5zCCA+MwggLLoAMCAQICAhAYMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMB4XDTE5MDIxNTE3MzgxN1oXDTI5MDMxMjE4MjAyMFowgZAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxLjAsBgNVBAMMJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyBG10UW3wKLLz5OJmoB1s7B4cDs7uzp+xAOMcalYh2zeKMeI5eS4fZrup1VtHgb8XPc0CjxtIo4ECTf0led4xcI6qra+CWE7B8yrOm4B5WB+rFt1x8Xj4+SRSkkl1mO5SjQElZeSpEpoWomCLRDxMb0qDwfWzcLqYsWeQHtIiBPzWEAOsmV6UE2NHQVNJdatKUHl8y16oCXrU4c0l6+o+bKDTtiskaDATWyONnz1GL1kQjlH8lDSNn296rLmQ\/kEO2CsZeYYAwVPKDQjTfNLDVo4YeZxRDlho+ZcZdamE5Kd7FiSRmA+nLkAydQ60ijWw1Fp7JSHvsL2X08ffpJtAgMBAAGjSDBGMEQGA1UdEQQ9MDuCJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmeCEnNlcnZpY2Uuc2lnbmFsLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAKWsuR7z3DD\/hxNr0t1jsS\/8oBtaP6uM3Dv1WDnwO6tsohTdhQxfJRHMBKnAzAM9voRiv314toGiGKun6d3y\/TrcyK15lDQgdiPT6biOI4+sVLREXnDl0mhxNgt0yN7ewiHL4WxlNTqyYgy21RRxPEQHrbCScndmFrswcHfVN6FkuGTc45cEC0zoiaaAKUipjJUOjlX4Ha+q0UyNaHMPquP8A8XGBIYi6DJY8uNgP1q8F88lDA5HALWR045FALki4r5+N+Jy3GF2pTFCFvLEDS5LCk6lR9ujCktrdh0VbOHMA35rRs5lki24EQZf\/DqrquVyyzRFCDN9TVXAVBaSoSQAD8zCCA+8wggLXoAMCAQICCQCJui2rSuTzYjANBgkqhkiG9w0BAQUFADCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMR0wGwYDVQQLDBRPcGVuIFdoaXNwZXIgU3lzdGVtczETMBEGA1UEAwwKVGV4dFNlY3VyZTAeFw0xMzAzMjUyMjE4MzVaFw0yMzAzMjMyMjE4MzVaMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9w","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1569051247600,"flow_last_seen":1569051247822,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1800{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1104,"pkt":"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","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1232{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1569051247600,"flow_last_seen":1569051247822,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0498{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":141,"pkt":"xiwDYGpkxGGLNYKpCABFAAB\/AABAAEAGZDHAqAIRIuHwrcBKAbtArcSa+38xkIAYCABaGAAAAQEICihVTmZkFVcFFgMDAEYQAABCQQQ0a64xGwwi1kkJsdUkQiNOXRlFpHsfkxHSAhcTsXv6UyZKkk4J1ZCtXUXGlACAfofI4Wt3Eai4rLftrFZhdx5J","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd67Abuyrbl3SxDIiYAQA\/cGEQAAAQEICihVUsZkFVcG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0\/+sAAO0G948i4fCtwKgCEQG73r1n96jsbdjJFYAQAG5B6wAAAQEICmQVVwcoVVJf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2327{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1569051247603,"flow_last_seen":1569051247830,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1802{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1104,"pkt":"xGGLNYKpxiwDYGpkCABFAARC\/+0AAO0G838i4fCtwKgCEQG73r1n966MbdjJFYAYAG6dQgAAAQEICmQVVwgoVVJfZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUlgaTggQxdIuKtneIwF5El1BqW3lroFT0Ao2i+qg\/UAzsXltWn73z6POt4ugq6tSg8R6Qd+hMM1XI8C5BUyDHqO7fbNRUKJQLd5hK1dlNL4nulXrPso+oK0n8cCAwHHbCpiNGtUkAmZa90NbXBwJAChUcWDWsAA8qbOQfmZqnIH+ud010uf9CDz0C6HC5\/Bli8DmDZ2HwbyCygzCLZmU7RG7nHYoMRAPZnyL7xwAxG7Xi7VYMAZvUeb1b7cKw+ggsSN6YB+xB+5DD9Dnfd8C4rL59coR2OxbmJa5GKnZDL1lKyqAElcOI2+vb2niQlHVPhwqFzkj9T0HC+lnpzQhwIDAQABo1AwTjAdBgNVHQ4EFgQUAYsY8T\/7ORlEboWGvpRlMqcyPJAwHwYDVR0jBBgwFoAUAYsY8T\/7ORlEboWGvpRlMqcyPJAwDAYDVR0TBAUwAwEB\/zANBgkqhkiG9w0BAQUFAAOCAQEAfh6+IQueptC7yQLtUSujbjw20zBDe\/4zKIxR8R+D91zxX7qY0fm5A6tKTzlOiYyMZ6w9Vw\/xFZk02k1WOYjoXsr+1MyTnn29qSznParLryOH52hEofW4c5Z\/i18bQq0TxoZMQNSDCKNyf7NlhfylWGcnIrum+LmyfdVzwLgTWcCJroO\/7K1r26ZNIaugOs9eNFk1UirSRuxD+NZCXv6BeLrGOSeyz5MSty1szCZ2+RCCQ5kb8h\/KckcFoOkJuqohhWiOJy\/EFOC2tcdnp+Axl0WizD0cIxCzYED6HUd\/M6AjLgPIB2X2WGKGew+0NcDVIlR3MbhaxHgWmCWyxK8C1RYDAwFNDAABSQMAF0EE6KGWqENscs7my902gawi82EKGEBY1OGfCfEfs7ccHGRh\/ivx4SUKMrTlS5v1UjrC46CJp46iaaYMUhfqQloWHQYBAQCK5xLvS8uYOH+now\/VHq0+02Yf\/3dOOduLRhd\/U10lyXbakGblKOev0HYzCWD1LMPGzJ+aAqSss1M0\/tRwNDL+MwmzLschKgXIEyFMjj+oV+knxenQFOJNP+AMJogCZ0ndTs+TrruKmq03cz5imW\/nL46yqnkx8gUP1Yu7AMbchxBVlAMph0uTVkFAFMHS59CeTXh+pYWTuiyGhUWJylpqoJ9cH8dpUVcvKwfOL4AhZTAlB058Vtw3SRtuIhbdKFTFYYRM8B2iOARPcnK52bczpoXKQd1Ppube4uIpD2t0FPo7ShsDqPM79kQtshChk1GlRFCGA+L5WL78DoirnVfdFgMDAAQOAAAA","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1232{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":6,"flow_packet_id":7,"flow_first_seen":1569051247603,"flow_last_seen":1569051247830,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0396{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qogAAO4GS\/Mi4fCtwKgCEQG73rwJHv2AxsFviYAQAG5M0wAAAQEICmQVVwgoVVJf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2327{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1569051247601,"flow_last_seen":1569051247832,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1802{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":1104,"pkt":"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","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1232{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1569051247601,"flow_last_seen":1569051247832,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0571{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGY\/7AqAIRIuHwrd67Abuyrbl3SxDIiYAYBABg8wAAAQEICihVUtBkFVcGFgMDAEYQAABCQQTzJ1yPIXJ3ZnR+vGzI54jrzhnu8C3zk3AuTzCiaxGYRAyma\/mN8ZRj03ZTAyyUj+D\/l2fAgVRsNhr3Y0B3RZ5gFAMDAAEBFgMDACgAAAAAAAAAAJjG9\/FrrX2\/si5tk63YfV\/QxCZCnOQaYOIilQwA+2OO","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd69Abtt2MkVZ\/eymoAQA\/c0QgAAAQEICihVUtBkFVcI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd68AbvGwW+JCR8HLoAQA\/c\/KwAAAQEICihVUtBkFVcI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGY\/7AqAIRIuHwrd69Abtt2MkVZ\/eymoAYBABMcgAAAQEICihVUtZkFVcIFgMDAEYQAABCQQSAJzWvCnK0aJhUQQC6oX3wq29Zh+S2wSQpZdMfEgVug8N7b1hQ6tqKVONPcnNAVkGw03nTK3ScsEhoHjv7zPddFAMDAAEBFgMDACgAAAAAAAAAAJz8B9mobdEuxCQMKA\/FdMuU\/\/5gEuyfr7x4e9qsJmkA","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGY\/7AqAIRIuHwrd68AbvGwW+JCR8HLoAYBABfPAAAAQEICihVUthkFVcIFgMDAEYQAABCQQTX9ABbSXAnuBVjrUckqWb55UlmE4yvNWkoJQkka9DAHLXz7MQ8dkmMxJ1rEj3fIxC49HC2wJuR2N2vx59EgawEFAMDAAEBFgMDACgAAAAAAAAAAN3aOEJmmIah7\/RbdRsJWUPclmEEGateGdrsMcprBICz","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABn6eAAAO0GDWgi4fCtwKgCEQG73rtLEMiJsq259YAYAG69TQAAAQEICmQVVyUoVVLQFAMDAAEBFgMDAChwMq\/o++J1m+aZio58YaG66jfGqIU98RNrHtG4md66XLBGsFJo88BC","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB56eEAAO0GDVUi4fCtwKgCEQG73rtLEMi8sq259YAYAG5XAAAAAQEICmQVVyUoVVLQFwMDAEBwMq\/o++J1nL4edJ02PnylxIyl\/o9XXSsLthTjT3nyUBTFRaigAk2tNn+mcrb9zDm7H2TD5EflHVxrHRArQAhg","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd67Abuyrbn1SxDIvIAQA\/8EwgAAAQEICihVUz1kFVcl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGZEfAqAIRIuHwrd67Abuyrbn1SxDIvIAYBADqXgAAAQEICihVUz5kFVclFwMDADAAAAAAAAAAARlUoQDL9AONRZWZoPWvYVJPRkg2\/2hibkX8OuOPQ5LyLZdawMsJcPU=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGZErAqAIRIuHwrd67AbuyrboqSxDIvIAYBADlUQAAAQEICihVUz5kFVclFwMDAC0AAAAAAAAAAjAVvcrU0na4NUOjlwgd5atWB7V6QpDGfuOvr4T70XZlHxKqtxg=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGZFLAqAIRIuHwrd67AbuyrbpcSxDIvIAYBAB+HgAAAQEICihVUz5kFVclFwMDACUAAAAAAAAAA2VWwXLzP6p\/oY8NIHJAATFoPmGKNJAr594bVj3A","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABn\/+4AAO0G91ki4fCtwKgCEQG73r1n97KabdjJk4AYAG6hewAAAQEICmQVVyYoVVLWFAMDAAEBFgMDACiOQpHtZL+9E9bSiyV\/Gp9tSl0qsmyckCGSx0xbf\/YtXkcjrcmzswHT","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5\/+8AAO0G90Yi4fCtwKgCEQG73r1n97LNbdjJk4AYAG6CkAAAAQEICmQVVyYoVVLWFwMDAECOQpHtZL+9FI0pdylhzWC\/6ykmz+h2J5Qx+DGlPEvIGz+GnnM28oWlvsaABZk2H4WTbHBUtEF4d1\/8vBk6BWm+","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd69Abtt2MmTZ\/eyzYAQA\/8y9wAAAQEICihVU0RkFVcm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGZEfAqAIRIuHwrd69Abtt2MmTZ\/eyzYAYBADNtAAAAQEICihVU0VkFVcmFwMDADAAAAAAAAAAAbsPqSjCb\/jHraCKqhsVJIh624VO1mfR5nUTyA9i9BW6LB36wbMgMHc=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGZErAqAIRIuHwrd69Abtt2MnIZ\/eyzYAYBAAjCwAAAQEICihVU0VkFVcmFwMDAC0AAAAAAAAAAr6sauNFu3vXjP63DLrlvC+MzCGBUu7+ziHidUza7210QPmn6wk=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGZFLAqAIRIuHwrd69Abtt2Mn6Z\/eyzYAYBACk7AAAAQEICihVU0VkFVcmFwMDACUAAAAAAAAAAyTc6C2A8\/LkfdLsG8JvPnTE6MhXKTD+NtirbEKH","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnqosAAO4GS70i4fCtwKgCEQG73rwJHwcuxsFwB4AYAG5sewAAAQEICmQVVycoVVLYFAMDAAEBFgMDACh\/EvinPkBCbgdYRqBmOxnOdBzZJ9qyVVQWJ6OwzGFp3jpRgvwV80pt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5qowAAO4GS6oi4fCtwKgCEQG73rwJHwdhxsFwB4AYAG6PPQAAAQEICmQVVycoVVLYFwMDAEB\/EvinPkBCb56\/Y1mdD9P\/nshsSf5SokuZTH+sZmZH76Sk+7zDkIOGHagcz4nDQPP6t4m6HxtY+7KWeRDkJHbK","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrd68AbvGwXAHCR8HYYAQA\/892gAAAQEICihVU0lkFVcn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGZEfAqAIRIuHwrd68AbvGwXAHCR8HYYAYBAAu\/AAAAQEICihVU0pkFVcnFwMDADAAAAAAAAAAATcufglEViLPiPjL092UEQJo0U64vUF2UFkY53GOwbJOwkAvWB0AwLM=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGZErAqAIRIuHwrd68AbvGwXA8CR8HYYAYBABEBgAAAQEICihVU0pkFVcnFwMDAC0AAAAAAAAAAqISE8B12kMfYa+2uGxDkEAjhOLHV1PQbjMZZA9t\/Hrkm215chk=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGZFLAqAIRIuHwrd68AbvGwXBuCR8HYYAYBAD1JgAAAQEICihVU0pkFVcnFwMDACUAAAAAAAAAA35IIP1PbvAvAh7sE6GkD8KbJNOMX2z3shtqa05K","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cPIAAO0Ghoki4fCtwKgCEQG7wEr7fzGQQK3E5YAQAG55YQAAAQEICmQVVywoVU5m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051247,"pkt_len":117,"pkt":"xiwDYGpkxGGLNYKpCABFAABnAABAAEAGZEnAqAIRIuHwrcBKAbtArcTl+38xkIAYCAACOwAAAQEICihVTvxkFVcsFAMDAAEBFgMDACjF9vt\/9gkmYguZ\/E008ELB8CGGKKgGnT35n32pwCXRS\/STmslJWMGa","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051248,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0cPMAAO0Ghogi4fCtwKgCEQG7wEr7fzGQQK3FGIAQAG54fQAAAQEICmQVV0coVU78","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051248,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABncPQAAO0GhlQi4fCtwKgCEQG7wEr7fzGQQK3FGIAYAG5cXgAAAQEICmQVV0coVU78FAMDAAEBFgMDACjFKRzNiN688WuC\/jhhgMDnvnEWIkXsOIwqIk1\/je0ktQnyQDtkTv0L","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051248,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGZHzAqAIRIuHwrcBKAbtArcUY+38xw4AQB\/9wSwAAAQEICihVT2pkFVdH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0989{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051248,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051248,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKTAAAP8RkXUAAAAA\/\/\/\/\/wBEAEMBNJw9AQEGACG6jqoABAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051253,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKTEAAP8RkXQAAAAA\/\/\/\/\/wBEAEMBNJw4AQEGACG6jqoACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569051255515,"flow_last_seen":1569051255515,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":78,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":78,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.146.144","src_port":56996,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":112,"pkt":"xiwDYGpkxGGLNYKpCABFAABiAABAAEAG01TAqAIREfiSkN6kAbu8mMGjrFDpOoAYBADERQAAAQEICihVb2TeKRePFwMDACkAAAAAAAAAByneD5KHf7LhXiN5Pdq3wP31zhE4MGciEgckOq75+f9F5w==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":97,"pkt":"xiwDYGpkxGGLNYKpCABFAABTAABAAEAG02PAqAIREfiSkN6kAbu8mMHRrFDpOoAYBABt7AAAAQEICihVb2XeKRePFQMDABoAAAAAAAAACJW1v\/IhTp91V+O68DpoE88kag==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG04LAqAIREfiSkN6kAbu8mMHwrFDpOoARBACJkgAAAQEICihVb2XeKReP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAMAADEGen8R+JKQwKgCEQG73qSsUOk6vJjB0YAQBCu0hAAAAQEICt4q7JEoVW9k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAQAADEGen4R+JKQwKgCEQG73qSsUOk6vJjB8IAQBCu0ZAAAAQEICt4q7JEoVW9l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAUAADEGen0R+JKQwKgCEQG73qSsUOk6vJjB8IARBCu0YwAAAQEICt4q7JEoVW9l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0qAYAADEGenwR+JKQwKgCEQG73qSsUOk7vJjB8YAQBCu0YgAAAQEICt4q7JEoVW9l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051255,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAG04LAqAIREfiSkN6kAbu8mMHwrFDpO4ARBAC0cgAAAQEICihVb4DeKuyR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569051257169,"flow_last_seen":1569051257169,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"2.18.232.118","src_port":57017,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":89,"pkt":"xiwDYGpkxGGLNYKpCABFAABLAABAAEAGjWvAqAIRAhLodt65Absqy4Q4WMZypYAYBABE5AAAAQEICihVdq6vX9qZFQMDABKEOlUEciue5QZs7g3+sWQHUk8=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGjYLAqAIRAhLodt65Absqy4RPWMZypYARBABBggAAAQEICihVdq6vX9qZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":89,"pkt":"xGGLNYKpxiwDYGpkCABFAABL884AADUG5JwCEuh2wKgCEQG73rlYxnKlKsuET4AYAQIBNAAAAQEICq9gUAcoVXauFQMDABK6ebhIWf6gqCdSaZoYDdKf06A=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0888AADUG5LICEuh2wKgCEQG73rlYxnK8KsuET4ARAQLO+gAAAQEICq9gUAcoVXau","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA089AAADUG5LECEuh2wKgCEQG73rlYxnK9KsuEUIAQAQLO+AAAAQEICq9gUAgoVXau","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":54,"pkt":"xiwDYGpkxGGLNYKpCABFAAAoAABAAEAGjY7AqAIRAhLodt65Absqy4RPAAAAAFAEAABzDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":54,"pkt":"xiwDYGpkxGGLNYKpCABFAAAoXdwAAEAGb7LAqAIRAhLodt65Absqy4RPAAAAAFAEAABzDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051257,"pkt_len":54,"pkt":"xiwDYGpkxGGLNYKpCABFAAAo4ZQAAEAG6\/nAqAIRAhLodt65Absqy4RQAAAAAFAEAABzDgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051261,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIKTIAAP8RkXMAAAAA\/\/\/\/\/wBEAEMBNJwwAQEGACG6jqoAEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569051264073,"flow_last_seen":1569051264073,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKMBLAbsF0WXIAAAAALAC\/\/9prAAAAgQFtAEDAwYBAQgKKFWN0AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569051264078,"flow_last_seen":1569051264078,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN6+AbvH3a+JAAAAALAC\/\/8ydQAAAgQFtAEDAwcBAQgKKFWSTQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569051264088,"flow_last_seen":1569051264088,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":97,"pkt":"xiwDYGpkxGGLNYKpCABFAABTylIAAP8Ra+TAqAIRwKgCAdvHADUAPyTGAMEBAAABAAAAAAAAEnRleHRzZWN1cmUtc2VydmljZQ53aGlzcGVyc3lzdGVtcwNvcmcAAAEAAQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569051264088,"flow_last_seen":1569051264088,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Signal","category":"Chat"},"dns": {"query":"textsecure-service.whispersystems.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569051264090,"flow_last_seen":1569051264090,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN6\/Abvpz5RJAAAAALAC\/\/80LQAAAgQFtAEDAwcBAQgKKFWSWgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569051264091,"flow_last_seen":1569051264091,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN7AAbuO10RdAAAAALAC\/\/\/fDwAAAgQFtAEDAwcBAQgKKFWSWwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569051264093,"flow_last_seen":1569051264093,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN7BAbuYIIuMAAAAALAC\/\/+OlgAAAgQFtAEDAwcBAQgKKFWSWwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAADQGlLoXORgQwKgCEQG73r7gO6oYx92viqAScSBHlgAAAgQFrAQCCAqWTmoXKFWSTQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":193,"pkt":"xGGLNYKpxiwDYGpkCABFAACz4rsAAEAREhzAqAIBwKgCEQA128cAn9JUAMGBgAABAAYAAAAAEnRleHRzZWN1cmUtc2VydmljZQ53aGlzcGVyc3lzdGVtcwNvcmcAAAEAAcAMAAEAAQAAAB0ABDavL27ADAABAAEAAAAdAAQi4fCtwAwAAQABAAAAHQAEaxdHWcAMAAEAAQAAAB0ABCOpAyjADAABAAEAAAAdAAQ0zyk7wAwAAQABAAAAHQAENMjD8Q==","pkt_caplen":193,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1569051264088,"flow_last_seen":1569051264113,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":63,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Signal","category":"Chat"},"dns": {"query":"textsecure-service.whispersystems.org","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.175.47.110"}}
+0430{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569051264115,"flow_last_seen":1569051264115,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp"}
+0405{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":70,"pkt":"xiwDYGpkxGGLNYKpCABFAAA4YPoAAEABlGjAqAIRwKgCAQMDIGEAAAAARQAAs+K7AABAERIcwKgCAcCoAhEANdvHAJ8AAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569051264115,"flow_last_seen":1569051264115,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0397{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3a+K4DuqGYAQBAvjSwAAAQEICihVknGWTmoX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1569051264078,"flow_last_seen":1569051264116,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.2","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0397{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0riEAADQG5qAXORgQwKgCEQG73r7gO6oZx92xj4AQAOvkPwAAAQEICpZOaj0oVZJy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1569051264078,"flow_last_seen":1569051264151,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.AppleiTunes","category":"Streaming"},"tls": {"version":"TLSv1.3","client_requested_server_name":"itunes.apple.com","ja3":"17305a56a62a10f6b0ee8edcc3b1769c","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+2344{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2052{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1282,"pkt":"xGGLNYKpxiwDYGpkCABFAAT0riQAADQG4d0XORgQwKgCEQG73r7gO7VZx92xj4AYAOvUVAAAAQEICpZOaj0oVZJykMTnT9umJuzLkPbl0yKdSDEDgItG5CkvUTO4K1g8+ok9Ke0w4g9YqWttZMWTDfHuFkTHMFVypiYPzHnUZRXXjRh5NNyaPSNu12pGzmTcitTA37c6uCNwYnjxHWEN3+\/wfMREPl9Z6gjcmzscGdSaJgQjUqUKQ+ENACFglyD6ndSy52hcx+ef0e8UXvJfm9O1DQbFO9fQ\/1MhuinAfqbmvbpiv0LkHx87l8mDC5wXifTGtd7rmqfwL5NroqZgJw+YQ174BrqEdFUKSX\/Yik\/uqBv\/CeAdA0WQJLXHFgUBBfDxS+J1KqN+\/sF8E9LU8EL0GA2hv2gGXgiNxMZser2Wwl\/1IFAgpZTHNjy94xx0go6NOZ3IjW4ajSiCcddTpbJDLt9BQXe6VeW\/mtGeLIolClWG4BRAyo9NlOdEEQun8vfbvc795TOZeb8oQWcb8s7THP\/uvQfsdaqttuB8Vp1l12OJ7OMMvysTJSh9SDWe8DF93cSxandFZ0XgG\/7\/9uVpM5at9CfgqS5N3+CYNGTQpVErHrCtWofEO8uehZFzYto1dzT1zGdBeR3xKoz7fayu7+d7GuEiQM+ZBb7MHxaOUPQJgrQYSvr064EclahWiEI0nqhBLYSlsMBVH4fG57X0BrOvxZiuOOyuBIQYqBbMKjboJwc3qr5ZaVOvQaSbTY8Ij3O+L6m4G\/7IwBTYIVVE2\/nzGDpR1Gonuugkivak1tkdpQD81XQf0zREF3EFCzhegv+QFzz2Iplc1iuNHrOh4rOCOnMn5r30YzB5jQF8IUBveZScPPOrqUkG0OV01IoPfoOym4RFSM51t3yQqANqB8Z6mNdgw3bQ94wE\/6gAJm+OqFhBGHdGk79r4a\/BR\/wehQC0NUwszUpS0wNvxxcXNJqzZ5KibYlO9ArSnbM5nEPXNayCqP\/sbS32bB+gKN0Icp2tIhatgE0N6o+xG8+gBHLEBzOUZzeG4IUdDwmty5IHw30uFW+gVdUq9JhIqDJ\/sgrD\/LpGsk8pubk8FIu67zwX0w58zuypR7IrD\/ZSGtgyzMTcIb9a1V1hLdpCenCu5JCgoLvh4UVuB7bg4Ztfq+rQB3m0\/KynpLYL9g\/WbcCouNbRmjFsQ2m+p+hP33cvLGMT5I3FH+QrzDavVUZR6w2AovBbqPjNDWZD0HBK1yc6XUbTxL108mqQLA4ODuZxkQEo7KNAiAZSmCbT3PVsjrLcSYR5BrvNZwaWlbn4qWj64UNwU1rAvUUhjD2NZS7lXyl745WCn4GoFNHo3EA3pGft9Anjfpzf3wQsneqjkf83ZCw8XeEOXw0nhdtUanKbqZQqdYFjaxwHl2dluz304YXoqCkyRUAPgYvcC0xCMuuwyvM6FaYETEFVbuxQ7gH9m8w0\/aNEzacr41v8n2CkdCEgFyAX6eIgnYbuVMJT35oNAEWMitW1sOCRCSLnVwNTU5uBbzQ6lpdqo\/eG+xlyH3yTBPZlA2\/klRa\/fNkGbtkuwschjdKURojmlA2BALpT2Qcffnbvn7W57aVF8B9Fp+9aF+FG3hDYRkyz+lrFSJqugSNx9P4uYc8v1a1BvVlLqMH0uG\/n+DzX5UocPTTTyZH1VUbBxrtIf+gWY6k7Nw==","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3bGP4Du1WYAQA\/TV0gAAAQEICihVkpaWTmo9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3bGP4Du6GYAQA\/bREAAAAQEICihVkpaWTmo9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG7wEvNn9QhBdFlyaASaN\/LpgAAAgQFrAQCCApkFUBJKFWN0AEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKMBLAbsF0WXJzZ\/UIoAQCBZawQAAAQEICihVjkRkFUBJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1223{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":673,"pkt":"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","pkt_caplen":673,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73r+o1iHY6c+USqASaN9tOAAAAgQFrAQCCApkFUBMKFWSWgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73sBFykuNjtdEXqASaN9RcQAAAgQFrAQCCApkFUBNKFWSWwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73sEV2c5FmCCLjaASaN+uMAAAAgQFrAQCCApkFUBNKFWSWwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":263,"pkt":"xiwDYGpkxGGLNYKpCABFAAD5AABAAEAGUHXAqAIRI6kDKMBLAbsF0WXJzZ\/UIoAYCBbVbwAAAQEICihVjm1kFUBJFgMBAMABAAC8AwNdhdKAFZvPd8KN3PrIuLJ+p3RN76tFaWi69JIAQQd9fgAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAZwAAACoAKAAAJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1569051264073,"flow_last_seen":1569051264229,"flow_tot_l4_data_len":345,"flow_min_l4_data_len":32,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0399{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN6+AbvH3bGP4DvCGIAQA\/vIpwAAAQEICihVkvqWTmo+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN6\/Abvpz5RKqNYh2YAQBAsAMQAAAQEICihVkvtkFUBM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1569051264090,"flow_last_seen":1569051264259,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0397{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7AAbuO10ReRcpLjoAQBAvkagAAAQEICihVkvtkFUBN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1569051264091,"flow_last_seen":1569051264259,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0397{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7BAbuYIIuNFdnORoAQBAtBKQAAAQEICihVkvxkFUBN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1569051264093,"flow_last_seen":1569051264259,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1223{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":673,"pkt":"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","pkt_caplen":673,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN6+AbvH3bGP4DvCGLAQBABPuwAAAQEICihVkwqWTmq0AQEFCuA7v7ngO8IY","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0lEcAAO4GTvIjqQMowKgCEQG7wEvNn9QiBdFmjoAQAG5hVAAAAQEICmQVQHAoVY5t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2327{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":9,"flow_packet_id":6,"flow_first_seen":1569051264073,"flow_last_seen":1569051264342,"flow_tot_l4_data_len":1849,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+1789{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1095,"pkt":"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","pkt_caplen":1095,"pkt_type":2048,"pkt_ipoffset":14}
+1221{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":9,"flow_packet_id":7,"flow_first_seen":1569051264073,"flow_last_seen":1569051264343,"flow_tot_l4_data_len":2910,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":415,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"303951d4c50efb2e991652225a6f02b1","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0397{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKMBLAbsF0WaOzZ\/dx4AQB+9PvQAAAQEICihVjt5kFUBw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":141,"pkt":"xiwDYGpkxGGLNYKpCABFAAB\/AABAAEAGUO\/AqAIRI6kDKMBLAbsF0WaOzZ\/dx4AYCABSpQAAAQEICihVjuBkFUBwFgMDAEYQAABCQQTAAQFeqaxcPjmmsRP0oJLLx6BokWD\/AZ1dfxoGTaM7uCOTu4MS2i9nNUsPIXW9zYz4cBy204beSQi8sZHgvYUk","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0Ya4AAO4GgYsjqQMowKgCEQG73r+o1iHZ6c+WT4AQAG4BngAAAQEICmQVQHcoVZL7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2327{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAAXUYa8AAO4Ge+ojqQMowKgCEQG73r+o1iHZ6c+WT4AQAG6+VgAAAQEICmQVQHcoVZL7FgMDAGICAABeAwNu8dE7Sdw67vExce1lmc6tUX3BJzty7id96PHyq9+LziCrC0t8waXbU1rG+dAlQYUF+O4HLQ41oBg583GSOK2gjsAvAAAW\/wEAAQAACwAEAwABAgAQAAUAAwJoMhYDAwfnCwAH4wAH4AAD5zCCA+MwggLLoAMCAQICAhAYMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMRMwEQYDVQQDDApUZXh0U2VjdXJlMB4XDTE5MDIxNTE3MzgxN1oXDTI5MDMxMjE4MjAyMFowgZAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxLjAsBgNVBAMMJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyBG10UW3wKLLz5OJmoB1s7B4cDs7uzp+xAOMcalYh2zeKMeI5eS4fZrup1VtHgb8XPc0CjxtIo4ECTf0led4xcI6qra+CWE7B8yrOm4B5WB+rFt1x8Xj4+SRSkkl1mO5SjQElZeSpEpoWomCLRDxMb0qDwfWzcLqYsWeQHtIiBPzWEAOsmV6UE2NHQVNJdatKUHl8y16oCXrU4c0l6+o+bKDTtiskaDATWyONnz1GL1kQjlH8lDSNn296rLmQ\/kEO2CsZeYYAwVPKDQjTfNLDVo4YeZxRDlho+ZcZdamE5Kd7FiSRmA+nLkAydQ60ijWw1Fp7JSHvsL2X08ffpJtAgMBAAGjSDBGMEQGA1UdEQQ9MDuCJXRleHRzZWN1cmUtc2VydmljZS53aGlzcGVyc3lzdGVtcy5vcmeCEnNlcnZpY2Uuc2lnbmFsLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAKWsuR7z3DD\/hxNr0t1jsS\/8oBtaP6uM3Dv1WDnwO6tsohTdhQxfJRHMBKnAzAM9voRiv314toGiGKun6d3y\/TrcyK15lDQgdiPT6biOI4+sVLREXnDl0mhxNgt0yN7ewiHL4WxlNTqyYgy21RRxPEQHrbCScndmFrswcHfVN6FkuGTc45cEC0zoiaaAKUipjJUOjlX4Ha+q0UyNaHMPquP8A8XGBIYi6DJY8uNgP1q8F88lDA5HALWR045FALki4r5+N+Jy3GF2pTFCFvLEDS5LCk6lR9ujCktrdh0VbOHMA35rRs5lki24EQZf\/DqrquVyyzRFCDN9TVXAVBaSoSQAD8zCCA+8wggLXoAMCAQICCQCJui2rSuTzYjANBgkqhkiG9w0BAQUFADCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMR0wGwYDVQQLDBRPcGVuIFdoaXNwZXIgU3lzdGVtczETMBEGA1UEAwwKVGV4dFNlY3VyZTAeFw0xMzAzMjUyMjE4MzVaFw0yMzAzMjMyMjE4MzVaMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9w","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1569051264090,"flow_last_seen":1569051264369,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1805{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1104,"pkt":"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","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1231{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":12,"flow_packet_id":7,"flow_first_seen":1569051264090,"flow_last_seen":1569051264369,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0397{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0jjEAAO4GVQgjqQMowKgCEQG73sEV2c5GmCCNkoAQAG5ClwAAAQEICmQVQHcoVZL8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN6\/Abvpz5ZPqNYrh4AQA\/fz+AAAAQEICihVk2lkFUB3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0C\/kAAO4G10AjqQMowKgCEQG73sBFykuOjtdGY4AQAG7l1wAAAQEICmQVQHcoVZL8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1569051264093,"flow_last_seen":1569051264373,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1800{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1104,"pkt":"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","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1231{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":14,"flow_packet_id":7,"flow_first_seen":1569051264093,"flow_last_seen":1569051264373,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+2330{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1569051264091,"flow_last_seen":1569051264373,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1805{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1104,"pkt":"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","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1231{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":13,"flow_packet_id":7,"flow_first_seen":1569051264091,"flow_last_seen":1569051264374,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0398{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7BAbuYII2SFdnX9IAQA\/c08AAAAQEICihVk2xkFUB3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7AAbuO10ZjRcpVPIAQA\/fYLwAAAQEICihVk2xkFUB4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN6\/Abvpz5ZPqNYrh4AYBAB0uwAAAQEICihVk69kFUB3FgMDAEYQAABCQQQvIQtTC3wsLDZURcqy6fud3o3cmduBgrSZYhjyE1mtUup0j1FMZ+yIK86HeaJrZEboPP6ftAA12sDFzQ\/cLMiYFAMDAAEBFgMDACgAAAAAAAAAAGhromIIj7FF2zqBnkRGnCJDWAcm3IGLGUhi2Ze+vRhr","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN7BAbuYII2SFdnX9IAYBADhWQAAAQEICihVk7NkFUB3FgMDAEYQAABCQQQbnOCcdHPh2bSIqYEk8Yd36sVuiI2ezOOpv1Rw83\/6kSm5XFtYDR9ygWpPUgmxgwHmFwgzdyc5akrdkr2mXHw1FAMDAAEBFgMDACgAAAAAAAAAAJ9fbfokk2CdONkzxd21ov4oOgj1oocFkijBLTVGFpfo","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN7AAbuO10ZjRcpVPIAYBAAVcQAAAQEICihVk7NkFUB4FgMDAEYQAABCQQRCQCG4hb4hCmPRID9O1t1wEiiIrckGzSiTI9FC7ju2Ke08GnY+2KxGtygeyDWUto1XM5FVXBpdWFOAN4fuT697FAMDAAEBFgMDACgAAAAAAAAAAPoon4+X+PoxmW+fSw64rgWVo\/YHcdTitcIZ1i3Oxg8m","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0lEoAAO4GTu8jqQMowKgCEQG7wEvNn93HBdFm2YAQAG5WyQAAAQEICmQVQJgoVY7g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":117,"pkt":"xiwDYGpkxGGLNYKpCABFAABnAABAAEAGUQfAqAIRI6kDKMBLAbsF0WbZzZ\/dx4AYCAA4\/gAAAQEICihVj3pkFUCYFAMDAAEBFgMDACjiya5yB8bzgMxtpDZMPgfLCyZ99YOOlz4gAQ7ZaltGbM\/yoD9lgrJL","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnYbEAAO4GgVUjqQMowKgCEQG73r+o1iuH6c+WzYAYAG6ZYAAAAQEICmQVQKUoVZOvFAMDAAEBFgMDACgrAH9kEyeRf2QftppOVu8koxSwLNhHThtYdnHun4G0DBQQj2Zydpg+","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5YbIAAO4GgUIjqQMowKgCEQG73r+o1iu66c+WzYAYAG73kAAAAQEICmQVQKUoVZOvFwMDAEArAH9kEyeRgJJd3rMHyX01xQY2PB+rkr4EUb\/iTdLA7RbPnyrAW\/Rbufp6RvQZE8njRQP4jC\/t\/ycynaVGxqIG","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN6\/Abvpz5bNqNYruoAQA\/\/yYAAAAQEICihVlBpkFUCl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN6\/Abvpz5bNqNYruoAYBADVGwAAAQEICihVlBtkFUClFwMDADAAAAAAAAAAAU8MdhigXfH5sFm3\/f4t2mvIHYOCIjpreqpy63kBgoYz+FJhUp1efGk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN6\/Abvpz5cCqNYruoAYBACOsQAAAQEICihVlBtkFUClFwMDAC0AAAAAAAAAAv3vsv+XjTKEV9Zrz5YY6MKRYtTOwW2zRjoCytTfR0TSrXAUT7g=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN6\/Abvpz5c0qNYruoAYBACM3wAAAQEICihVlBtkFUClFwMDACUAAAAAAAAAA9pz00Vbc+QMPhdVtPAOlNLde7T8EVpndxCfTlJz","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnjjQAAO4GVNIjqQMowKgCEQG73sEV2df0mCCOEIAYAG7lmgAAAQEICmQVQKYoVZOzFAMDAAEBFgMDACgGxBGcuocgeky4jEAlwUHuaVwtgPY+BhY+e\/LLa7akJla5\/xQlvSQN","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5jjUAAO4GVL8jqQMowKgCEQG73sEV2dgnmCCOEIAYAG577wAAAQEICmQVQKYoVZOzFwMDAEAGxBGcuocge\/xd1dfes7kmqjYjiOIbBJDmLaP+v9vvdkm1D18SXs22zTRvE6lqqR3ftMEUXph\/bPyBxIPl4tlS","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7BAbuYII4QFdnYJ4AQA\/8zVAAAAQEICihVlCBkFUCm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnC\/wAAO4G1wojqQMowKgCEQG73sBFylU8jtdG4YAYAG5RSwAAAQEICmQVQKcoVZOzFAMDAAEBFgMDAChYKi43nl\/rF1QxYcfrhLutr48fDagIfMLktEcK2WfU9k7quQ83\/ryt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN7BAbuYII4QFdnYJ4AYBADOmgAAAQEICihVlCBkFUCmFwMDADAAAAAAAAAAASRmjam7pY23lezk2JI3t7RFuK6thWWbVzf4ECOnbVvexDBfEZgcnBE=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN7BAbuYII5FFdnYJ4AYBABogQAAAQEICihVlCFkFUCmFwMDAC0AAAAAAAAAAsy\/6ydz+qVrRk5kCxjiPzqmCcsmDMYlvj1+J0vThi5EM0h6K9M=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN7BAbuYII53FdnYJ4AYBADoSQAAAQEICihVlCFkFUCmFwMDACUAAAAAAAAAA3OeHt+da\/II3iBHZuZk+ovBbTOKShWlEMbTWaw\/","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5C\/0AAO4G1vcjqQMowKgCEQG73sBFylVvjtdG4YAYAG6\/JwAAAQEICmQVQKcoVZOzFwMDAEBYKi43nl\/rGAGRhB7F5kbCjk5ZbkBzHyNZjvDhnYddI8aXxeL+H2lEBXIs7XxhirAF5baWhzg6ktDFMPAnrBYn","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7AAbuO10bhRcpVb4AQA\/\/WkQAAAQEICihVlCJkFUCn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN7AAbuO10bhRcpVb4AYBAAHHAAAAQEICihVlCJkFUCnFwMDADAAAAAAAAAAAe9uU9NJBOutTb5b37\/VUKwqrW8aVw6Hni\/HtOLqD1RY8FqR0PgG7LY=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN7AAbuO10cWRcpVb4AYBABikAAAAQEICihVlCNkFUCnFwMDAC0AAAAAAAAAAlKsKco8AfH2mYY1+L6\/iZCJrU603A5xm2yld+z9nDYwLkIJP1U=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN7AAbuO10dIRcpVb4AYBAC7dAAAAQEICihVlCNkFUCnFwMDACUAAAAAAAAAA9Sf0UZDz\/KDl8oEdFGvdo5lEt5wxH8cGwfdeiaY","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0lEsAAO4GTu4jqQMowKgCEQG7wEvNn93HBdFnDIAQAG5V4QAAAQEICmQVQLMoVY96","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnlEwAAO4GTrojqQMowKgCEQG7wEvNn93HBdFnDIAYAG79pgAAAQEICmQVQLMoVY96FAMDAAEBFgMDACghB2eB771eibt8xLtm+J2t7+E+Go+xRzU2K1+SjRStFAm8+4PYN+oO","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKMBLAbsF0WcMzZ\/d+oAQB\/9NrgAAAQEICihVj+lkFUCz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0995{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":502,"pkt":"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","pkt_caplen":502,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569051264666,"flow_last_seen":1569051264666,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGUS7AqAIRI6kDKN7CAbvJrSrvAAAAALAC\/\/+7dwAAAgQFtAEDAwcBAQgKKFWUiQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAO4G4zEjqQMowKgCEQG73sL5Zid4ya0q8KASaN+dwQAAAgQFrAQCCApkFUDdKFWUiQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7CAbvJrSrw+WYneYAQBAsw7wAAAQEICihVlPVkFUDd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1569051264666,"flow_last_seen":1569051264776,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0397{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0Z4EAAO4Ge7gjqQMowKgCEQG73sL5Zid5ya0s9YAQAG4ybAAAAQEICmQVQPgoVZT1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2327{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0843{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":16,"flow_packet_id":6,"flow_first_seen":1569051264666,"flow_last_seen":1569051264887,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1803{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":1104,"pkt":"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","pkt_caplen":1104,"pkt_type":2048,"pkt_ipoffset":14}
+1231{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":16,"flow_packet_id":7,"flow_first_seen":1569051264666,"flow_last_seen":1569051264887,"flow_tot_l4_data_len":3239,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":462,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"textsecure-service.whispersystems.org","server_names":"textsecure-service.whispersystems.org,service.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"1089ea6f0461a29006cc96dfe7a11d80","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=textsecure-service.whispersystems.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"5E:9E:63:F5:69:45:C7:DC:E6:4D:26:68:36:7E:C2:68:DB:02:60:8B"}}
+0398{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7CAbvJrSz1+WYxJ4AQA\/ckxAAAAQEICihVlWVkFUD5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051264,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGULzAqAIRI6kDKN7CAbvJrSz1+WYxJ4AYBACrZgAAAQEICihVlWpkFUD5FgMDAEYQAABCQQTquNP6GY7fQLK2iZyWMIts8xYB7Fly4bH4O\/SnX24F7Ir3fomGTee9Atgk8uJOjMv68Sggowtz2dJ3yTV9cFukFAMDAAEBFgMDACgAAAAAAAAAABOJelbNZWsO\/mOCDsN+UZCa2OkXEQohqoGlLdv8lwo0","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051265,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnZ4QAAO4Ge4IjqQMowKgCEQG73sL5ZjEnya0tc4AYAG61hAAAAQEICmQVQRYoVZVqFAMDAAEBFgMDAChc4ROackEnamCtna2hZgZnF8Vo6DLBQaiWsf69JdY1JXrgUZVAikNH","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051265,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5Z4UAAO4Ge28jqQMowKgCEQG73sL5ZjFaya0tc4AYAG5ZUQAAAQEICmQVQRYoVZVqFwMDAEBc4ROackEnay3sQKBPeFxB1xuT8MyGSV+6ksqT+\/tqxI5IxAcP0AKHBAueplIZs4bAezt0eQW+RNBriZvZaNOI","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051265,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGUTrAqAIRI6kDKN7CAbvJrS1z+WYxWoAQA\/8jfQAAAQEICihVldZkFUEW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051265,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGUQXAqAIRI6kDKN7CAbvJrS1z+WYxWoAYBABG9wAAAQEICihVlddkFUEWFwMDADAAAAAAAAAAAXr0G6WkwildHebwwoTMS\/j500xAmTZrUAlNO0CDgH4CkWXBIoPemFc=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051265,"pkt_len":116,"pkt":"xiwDYGpkxGGLNYKpCABFAABmAABAAEAGUQjAqAIRI6kDKN7CAbvJrS2o+WYxWoAYBAAQbAAAAQEICihVlddkFUEWFwMDAC0AAAAAAAAAAl\/0PFi+uzoLG\/yjsYLC10gy+hXF39eOo8J9Gq0ZRrcXJrO1ha0=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051265,"pkt_len":108,"pkt":"xiwDYGpkxGGLNYKpCABFAABeAABAAEAGURDAqAIRI6kDKN7CAbvJrS3a+WYxWoAYBABfbgAAAQEICihVlddkFUEWFwMDACUAAAAAAAAAA6UYtqR3XQaITcujng0e4PfvGMyB3EHM1ShLjWCd","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569051266396,"flow_last_seen":1569051266396,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.24.16","dst_ip":"192.168.2.17","src_port":443,"dst_port":57016,"l4_proto":"tcp"}
+0429{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":90,"pkt":"xGGLNYKpxiwDYGpkCABFAABMyV0AADQGy0wXORgQwKgCEQG73rjhiC89LB07wYAYAQKY+AAAAQEICpZOcwIoVP9fFwMDABNN53WS+HQ+OdIkNGbGHI++PaTs","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0yV4AADQGy2MXORgQwKgCEQG73rjhiC9VLB07wYARAQL5ggAAAQEICpZOcwIoVP9f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":90,"pkt":"xGGLNYKpxiwDYGpkCABFAABMyV8AADQGy0oXORgQwKgCEQG73rjhiC89LB07wYAYAQKXnQAAAQEICpZOdF0oVP9fFwMDABNN53WS+HQ+OdIkNGbGHI++PaTs","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN64AbssHTvB4YgvVYAQA\/9Y6QAAAQEICihVnPyWTnMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN64AbssHTvB4YgvVoAQA\/9Y6AAAAQEICihVnPyWTnMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGSLbAqAIRFzkYEN64AbssHTvB4YgvVrAQA\/8BLQAAAQEICihVnPyWTnMCAQEFCuGILz3hiC9V","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":105,"pkt":"xiwDYGpkxGGLNYKpCABFAABbAABAAEAGSJvAqAIRFzkYEN64AbssHTvB4YgvVoAYBAA\/FgAAAQEICihVnPyWTnMCFwMDACIKgs7b93B06Cv8uAmmDZC2sqL1mjavG04B6gMvy4n2On1D","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051266,"pkt_len":90,"pkt":"xiwDYGpkxGGLNYKpCABFAABMAABAAEAGSKrAqAIRFzkYEN64AbssHTvo4YgvVoAYBADU7gAAAQEICihVnRGWTnMCFwMDABMBoYtcHlLMr5\/EHZNRIBnn\/fb7","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGSMLAqAIRFzkYEN64AbssHTwA4YgvVoARBABYiwAAAQEICihVnRiWTnMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":54,"pkt":"xGGLNYKpxiwDYGpkCABFAAAoAAAAADQGlM4XORgQwKgCEQG73rjhiC9WAAAAAFAEAADMiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":54,"pkt":"xGGLNYKpxiwDYGpkCABFAAAoAAAAADQGlM4XORgQwKgCEQG73rjhiC9WAAAAAFAEAADMiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":54,"pkt":"xGGLNYKpxiwDYGpkCABFAAAoAAAAADQGlM4XORgQwKgCEQG73rjhiC9WAAAAAFAEAADMiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569051267121,"flow_last_seen":1569051267121,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":78,"pkt":"xiwDYGpkxGGLNYKpCABFAABAAABAAEAGbbHAqAIRDSP9Kt7DAbsjR8rsAAAAALAC\/\/\/U1AAAAgQFtAEDAwcBAQgKKFWeFwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":74,"pkt":"xGGLNYKpxiwDYGpkCABFAAA8AAAAAPEG\/LQNI\/0qwKgCEQG73sO\/wI8zI0fK7aAScSCWtAAAAgQFrAQCCAqvNN\/RKFWeFwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR8rtv8CPNIAQBAsybAAAAQEICihVnjqvNN\/R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0765{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1569051267121,"flow_last_seen":1569051267161,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+0399{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0UOEAAPEGq9sNI\/0qwKgCEQG73sO\/wI80I0fM8oAQAHYz9AAAAQEICq8039UoVZ4+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":1506,"pkt":"xGGLNYKpxiwDYGpkCABFAAXUUOIAAPEGpjoNI\/0qwKgCEQG73sO\/wI80I0fM8oAQAHYoLAAAAQEICq8039UoVZ4+FgMDAEYCAABCAwO8CP99YakUmA5\/wTpOe7dfvmNFl3vc9k06WUNBKeJlFgDALwAAGgAAAAD\/AQABAAALAAQDAAECABAABQADAmgyFgMDB6QLAAegAAedAAOkMIIDoDCCAoigAwIBAgICEBcwDQYJKoZIhvcNAQELBQAwgY0xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxEzARBgNVBAMMClRleHRTZWN1cmUwHhcNMTkwMjE1MTczODE3WhcNMjkwMzEyMTgxOTUwWjB5MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEdMBsGA1UECgwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxHTAbBgNVBAsMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMRcwFQYDVQQDDA5jZG4uc2lnbmFsLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM18LQzkZEfWlg4hw\/dBL9paXMIB8No3GZAgAy\/09MbfinutJhogqyGsfD9QVwKOcVCvolxWRJxOVHLvfJ+j3OjaizipPSg4tJBcbN+9ZakhzUpPRoghEI4yiKrl0Sqi7vJNILC1JTYvkRytQ9n\/4Jbs5Y2RBnRT1TPYTV57UYEJTbpi7gEiAWGj2rth0iCCvOasx+qhZEdPOn1e6lwVwWKHe0IcTRfT2CWMW01KVLcW86+adINJC\/1ymCCoUyAve8Qsdf59G5bmObwjQzhxFqFhHY7QFfbJcvl0n1Cn1eglY+a\/RyEDs5oux7VcZ8aj6P5GLiya+i08XBOQs3AuHwECAwEAAaMdMBswGQYDVR0RBBIwEIIOY2RuLnNpZ25hbC5vcmcwDQYJKoZIhvcNAQELBQADggEBAG\/PlhcSBiL6fGKTGRpaoycPg7hJ9ziHLiB+y0QyB5wqO5derbp7SMXlOZV+SdL63ngqyVoN0iuC4BM7lU8DJithuOT+DkdBUHAdejNgRNl0tgpxiKFhl81NV1bHcDkHXtI6Eg31yWJKn5PkQX5bVICwoe1ebZJdERU+Uc4uf9IUgrJmkWNSNRRVNtXEiyL7WEbG3MlOE7UNzIJWYeBa\/F7AWNItLd5fu9hbJvGq\/pLUxVuNeSr2mrSxLF\/UtUYOvxNSwLpLCNoS7wnv60ZtLmXBCZ8hswk\/q79aWHy3ln5ByH72UEQs3psE2qaoOv8CGulVWMPSRA2lUjj3NNE1CfIAA\/MwggPvMIIC16ADAgECAgkAibotq0rk82IwDQYJKoZIhvcNAQEFBQAwgY0xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMR0wGwYDVQQKDBRPcGVuIFdoaXNwZXIgU3lzdGVtczEdMBsGA1UECwwUT3BlbiBXaGlzcGVyIFN5c3RlbXMxEzARBgNVBAMMClRleHRTZWN1cmUwHhcNMTMwMzI1MjIxODM1WhcNMjMwMzIzMjIxODM1WjCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoMFE9wZW4gV2hpc3BlciBTeXN0ZW1zMR0wGwYDVQQLDBRPcGVuIFdoaXNwZXIgU3lzdGVtczETMBEGA1UEAwwKVGV4dFNlY3VyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFJYGk4IEMXSLirZ3iMBeRJdQalt5a6","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1569051267121,"flow_last_seen":1569051267197,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2"}}
+1678{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":1009,"pkt":"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","pkt_caplen":1009,"pkt_type":2048,"pkt_ipoffset":14}
+1144{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":18,"flow_packet_id":7,"flow_first_seen":1569051267121,"flow_last_seen":1569051267197,"flow_tot_l4_data_len":3144,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":449,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","server_names":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=cdn.signal.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"81:3D:8A:2E:EE:B2:E1:F4:1C:2B:6D:20:16:54:B2:C1:87:D0:1E:12"}}
+0400{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR8zyv8CYg4AQA\/gm\/AAAAQEICihVnmWvNN\/V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":192,"pkt":"xiwDYGpkxGGLNYKpCABFAACyAABAAEAGbT\/AqAIRDSP9Kt7DAbsjR8zyv8CYg4AYBADctAAAAQEICihVnmyvNN\/VFgMDAEYQAABCQQR3AJwD6bvm8LSD4P4qqhTngHu3j+sGyQuY\/SHAiBL2yXE70CUQKXnm7Nk1bW5kNxGjQM7Ydxo9Eb1d6LVwZQCKFAMDAAEBFgMDACgAAAAAAAAAAHpNgLBkD5iitC2mzH\/sbjhLNGCD9Pu3p2ZDjsJD0dhT","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xGGLNYKpxiwDYGpkCABFAAA0UOQAAPEGq9gNI\/0qwKgCEQG73sO\/wJiDI0fNcIAQAHYp9AAAAQEICq8039ooVZ5s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":117,"pkt":"xGGLNYKpxiwDYGpkCABFAABnUOUAAPEGq6QNI\/0qwKgCEQG73sO\/wJiDI0fNcIAYAHY9+AAAAQEICq8039ooVZ5sFAMDAAEBFgMDAChvPyAnzRvtIYgg6l3Y13zBGohGG2Gmg1TjY8+hQwNiPvZJrUMz2jKJ","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":135,"pkt":"xGGLNYKpxiwDYGpkCABFAAB5UOYAAPEGq5ENI\/0qwKgCEQG73sO\/wJi2I0fNcIAYAHaobQAAAQEICq8039ooVZ5sFwMDAEBvPyAnzRvtIvh4qTZHjGJymA1OE9ErVGlhKg3LgTUzDsjpEwktfQUh4g5td9r8ceptZw9B8lnVDRLIYQeTukhL","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR81wv8CYtoAQA\/8mFwAAAQEICihVno2vNN\/a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":66,"pkt":"xiwDYGpkxGGLNYKpCABFAAA0AABAAEAGbb3AqAIRDSP9Kt7DAbsjR81wv8CY+4AQA\/8l0gAAAQEICihVno2vNN\/a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","pkt_oversize":false,"pkt_ts":1569051267,"pkt_len":119,"pkt":"xiwDYGpkxGGLNYKpCABFAABpAABAAEAGbYjAqAIRDSP9Kt7DAbsjR81wv8CY+4AYBADbrwAAAQEICihVnpSvNN\/aFwMDADAAAAAAAAAAAVWG6O8VCZhpL3ljuuQbyjQJH99xwYFcfRw3CnAmaC4jWGNvCJKk0L4=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":18,"flow_packet_id":255,"flow_first_seen":1569051267121,"flow_last_seen":1569051267505,"flow_tot_l4_data_len":206833,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":811,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Signal","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cdn.signal.org","server_names":"cdn.signal.org","ja3":"6725ca90906e1036febcbfd464e2e326","ja3s":"c4b2785a87896e19d37eee932070cb22","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=California, L=San Francisco, O=Open Whisper Systems, OU=Open Whisper Systems, CN=TextSecure","issuerDN":"C=US, ST=California, O=Open Whisper Systems, OU=Open Whisper Systems, CN=cdn.signal.org","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2","fingerprint":"81:3D:8A:2E:EE:B2:E1:F4:1C:2B:6D:20:16:54:B2:C1:87:D0:1E:12"}}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1569051245838,"flow_last_seen":1569051261595,"flow_tot_l4_data_len":1232,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":7,"flow_packet_id":8,"flow_first_seen":1569051255515,"flow_last_seen":1569051255541,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":32,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":41,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.146.144","src_port":56996,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":7,"flow_packet_id":8,"flow_first_seen":1569051255515,"flow_last_seen":1569051255541,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":32,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":41,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"17.248.146.144","src_port":56996,"dst_port":443,"l4_proto":"tcp"}
+0431{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569051264115,"flow_last_seen":1569051264115,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","l4_proto":"icmp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":17,"flow_packet_id":12,"flow_first_seen":1569051266396,"flow_last_seen":1569051267048,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":20,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.24.16","dst_ip":"192.168.2.17","src_port":443,"dst_port":57016,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":17,"flow_packet_id":12,"flow_first_seen":1569051266396,"flow_last_seen":1569051267048,"flow_tot_l4_data_len":471,"flow_min_l4_data_len":20,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"23.57.24.16","dst_ip":"192.168.2.17","src_port":443,"dst_port":57016,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":3,"flow_packet_id":45,"flow_first_seen":1569051247599,"flow_last_seen":1569051247843,"flow_tot_l4_data_len":13052,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":290,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57018,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":10,"flow_packet_id":45,"flow_first_seen":1569051264078,"flow_last_seen":1569051264482,"flow_tot_l4_data_len":13683,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":304,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"23.57.24.16","src_port":57022,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":4,"flow_packet_id":27,"flow_first_seen":1569051247600,"flow_last_seen":1569051261087,"flow_tot_l4_data_len":4704,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":174,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57019,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":5,"flow_packet_id":27,"flow_first_seen":1569051247601,"flow_last_seen":1569051261087,"flow_tot_l4_data_len":4747,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":175,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57020,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":6,"flow_packet_id":26,"flow_first_seen":1569051247603,"flow_last_seen":1569051261087,"flow_tot_l4_data_len":4933,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":189,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":57021,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":12,"flow_packet_id":26,"flow_first_seen":1569051264090,"flow_last_seen":1569051264669,"flow_tot_l4_data_len":4727,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57023,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":13,"flow_packet_id":26,"flow_first_seen":1569051264091,"flow_last_seen":1569051264679,"flow_tot_l4_data_len":4945,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":190,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57024,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":14,"flow_packet_id":26,"flow_first_seen":1569051264093,"flow_last_seen":1569051264674,"flow_tot_l4_data_len":4684,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57025,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":16,"flow_packet_id":38,"flow_first_seen":1569051264666,"flow_last_seen":1569051265237,"flow_tot_l4_data_len":18958,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":498,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":57026,"dst_port":443,"l4_proto":"tcp"}
+0507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1569051257169,"flow_last_seen":1569051257194,"flow_tot_l4_data_len":266,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"2.18.232.118","src_port":57017,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1569051257169,"flow_last_seen":1569051257194,"flow_tot_l4_data_len":266,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"2.18.232.118","src_port":57017,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":2,"flow_packet_id":24,"flow_first_seen":1569051247594,"flow_last_seen":1569051257495,"flow_tot_l4_data_len":4441,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"34.225.240.173","src_port":49226,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":9,"flow_packet_id":25,"flow_first_seen":1569051264073,"flow_last_seen":1569051267100,"flow_tot_l4_data_len":5313,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":212,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"35.169.3.40","src_port":49227,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":18,"flow_packet_id":265,"flow_first_seen":1569051267121,"flow_last_seen":1569051267601,"flow_tot_l4_data_len":207245,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":782,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"13.35.253.42","src_port":57027,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1569051264088,"flow_last_seen":1569051264113,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":63,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":56263,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1569051247593,"flow_last_seen":1569051247630,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.17","dst_ip":"192.168.2.1","src_port":60793,"dst_port":53,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/signal.pcap"}
diff --git a/tests/result/nDPId_simple-dnscrypt.pcap.txt b/tests/result/nDPId_simple-dnscrypt.pcap.txt
new file mode 100644
index 000000000..77e8dd3a2
--- /dev/null
+++ b/tests/result/nDPId_simple-dnscrypt.pcap.txt
@@ -0,0 +1,82 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1491813284555,"flow_last_seen":1491813284555,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp"}
+0404{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":66,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PRVAAIAGMNDAqCunhncaGMQ5Abvf\/XrjAAAAAIACIAChWwAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":66,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADMGuuWGdxoYwKgrpwG7xDnBW87r3\/165IASchC\/iQAAAgQFHgEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPRZAAIAGMNvAqCunhncaGMQ5Abvf\/XrkwVvO7FAQAEBxlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":260,"pkt":"uFpz9d6dpDTZFrEGCABFAAD2PRdAAIAGMAzAqCunhncaGMQ5Abvf\/XrkwVvO7FAYAEAlbQAAFgMBAMkBAADFAwPMizo6irh7WreX73XN9DV4060ZvWSF1+Ey0R2L6KnrlgAAIMrKwCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAfDo6AAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACIqKAB0AFwAYKioAAQA=","pkt_caplen":260,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1491813284555,"flow_last_seen":1491813284694,"flow_tot_l4_data_len":310,"flow_min_l4_data_len":20,"flow_max_l4_data_len":226,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"b8f81673c0e1d29908346f3bab892b9b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0388{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":54,"pkt":"pDTZFrEGuFpz9d6dCABFAAAoQ1NAADMGd56GdxoYwKgrpwG7xDnBW87s3\/17slAQAO1wGwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2153{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1491813284555,"flow_last_seen":1491813284804,"flow_tot_l4_data_len":1660,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":276,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"b8f81673c0e1d29908346f3bab892b9b","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2151{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":1364,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGQ1VAADMGcn6GdxoYwKgrpwG7xDnBW9QK3\/17slAQAO3CTAAAY2EuY29tL0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTA1BgNVHREELjAsghJzaW1wbGVkbnNjcnlwdC5vcmeCFnd3dy5zaW1wbGVkbnNjcnlwdC5vcmcwDQYJKoZIhvcNAQELBQADggEBAEYKh0V6lmCDQfNwo5jPTcH6S9OBZ3Moyfar6ls8iUE8tp\/LzNzBmFb+TXq8npQywPd6U9lqAmXSoJhyb0dfYBhHNVbsB3cQ14vBgqNMJM5m+cWeyf\/JuPZZFBypV6qfp0R+3wJrnwK6f10riZMvAxtVsnZgneHQr4eFFSBfHM1MTPMjofv5JIYhc6+CAaCp2NcOqOsu4Y40YpTUMbkYOxaWUTkMOAgJXGhWVj4TdHMrScYZuPI2D+FcmknNKB4k7q+xxdQ\/8Z1BFGci4Yasa8VEmFoacSHLZ3plleYor63ehrG6hIIT\/HsaYVTaC23y2ysidaPGKG3OrI5uVNMugsgABgwwggYIMIID8KADAgECAhArLm7q2XU2bBSKbtujfIwHMA0GCSqGSIb3DQEBDAUAMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNDAyMTIwMDAwMDBaFw0yOTAyMTEyMzU5NTlaMIGQMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE2MDQGA1UEAxMtQ09NT0RPIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsICGeGgWaTrODWNLP0B0NNJwGTHC2IFRRY6qKDADAJ\/HczbxKFtdwOjD4b54wacPguBiptJG60DvvpL24wg7dXOXmWOPg2vTMKwt0VeUi803kgkZLRBrgCX975n3p7QeqdTgDt8rfWWVW+XRwp8hYsil42zhOCWV9BwGGCWj+4tB5OdobrK0c176cQqmighkU1vkk8lpfJ6Nd0m3Eal0KxZNYz\/TpFDUD9Zkx5sUSHuWBSr\/nVQeD5MsByGE\/prmLzgO5QehVLcA5MkGG7LJ1FF5nDeJUOkDeFKpe22fsjNbe4uHSdzXdxFMICq47JBC6+9RIfaueUbnX+u5YWCpQIDAQABo4IBZTCCAWEwHwYDVR0jBBgwFoAUu69+Aj36pvE8hI6t7jiY7NkyMtQwHQYDVR0OBBYEFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMA4GA1UdDwEB\/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH\/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAbBgNVHSAEFDASMAYGBFUdIAAwCAYGZ4EMAQIBMEwGA1UdHwRFMEMwQaA\/oD2GO2h0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNlcnRpZmljYXRpb24=","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPRhAAIAGMNnAqCunhncaGMQ5Abvf\/XuywVvZKFAQAEBmjAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2159{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+2157{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+2154{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":0,"flow_packet_id":11,"flow_first_seen":1491813284555,"flow_last_seen":1491813284819,"flow_tot_l4_data_len":7000,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"b8f81673c0e1d29908346f3bab892b9b","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}}
+0808{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":360,"pkt":"pDTZFrEGuFpz9d6dCABFAAFaQ1lAADMGdmaGdxoYwKgrpwG7xDnBW+iC3\/17slAYAO3oGAAAY0Xq\/9g4SaHrnZU8W1EHPc0FO8GkCpQDheHi1SbVYbB9oNEiawhz288ItkmH6s7w0KED+G+eCWHNyuXA3itUrsI3pIWlCF52GKrWkKP0tp81086u88BxGaebXQsoIN5DJj+Bkoh+LdpaN54mH6seoq0838MPwuEFWHBBAdUELKkrH\/owKxm4b1PukIrJ6X5pT4z5sS8GkdA2Auq6Afx2mzKwic7VG\/QM7RGtFcnOQchhmy0eEFvCbRRk+9iyB8vHpzlYjS8F5\/Gf2pAVXe0WvA7kUdTGMcYZEtAafqgneJnHhfsa6+wE1MrrlHWrtCRuUw\/BrDa4DslYLKEsCrqa\/sD\/vfjhn1PjhKWaFL8lEIko8KEFzoTomOzgFAGEEb\/k+guXUfM2tmxYFgMDAAQOAAAA","pkt_caplen":360,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPRlAAIAGMNjAqCunhncaGMQ5Abvf\/XuywVvptFAQAEBWAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":180,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPRpAAIAGMFnAqCunhncaGMQ5Abvf\/XuywVvptFAYAEBS2QAAFgMDAEYQAABCQQQmJSolkwGDyVAdCVJ6eIlxoGwq5F0FnvTyGQfQq87GDzWoVfXGSnPYpcidY+497arq9kBqNEHHq0pXWvGrnjmFFAMDAAEBFgMDACgAAAAAAAAAABYnOw0XTGd6c2GPgttRE3Y7c\/U6PC3f24OW3JIoT6yO","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813284,"pkt_len":107,"pkt":"uFpz9d6dpDTZFrEGCABFAABdPRtAAIAGMKHAqCunhncaGMQ5Abvf\/XwwwVvptFAYAEBVBwAAFwMDADAAAAAAAAAAAQS1TJ+m8SrlGXLzDCmOjwkrDHkaokQ+7Wi90r7MCGPULJYmu25moAk=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1491813286275,"flow_last_seen":1491813286275,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp"}
+0404{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":66,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PSdAAIAGML7AqCunhncaGMRNAbtYb9jbAAAAAIACIADK3QAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1491813286392,"flow_last_seen":1491813286392,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp"}
+0404{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":66,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PShAAIAGML3AqCunhncaGMRSAbte7A6DAAAAAIACIACOtAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1491813286393,"flow_last_seen":1491813286393,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp"}
+0404{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":66,"pkt":"uFpz9d6dpDTZFrEGCABFAAA0PSlAAIAGMLzAqCunhncaGMRTAbtepcAHAAAAAIACIADddQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":66,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADMGuuWGdxoYwKgrpwG7xE3jDV\/XWG\/Y3IASchA2bgAAAgQFHgEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPSpAAIAGMMfAqCunhncaGMRNAbtYb9jc4w1f2FAQAEDoegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":264,"pkt":"uFpz9d6dpDTZFrEGCABFAAD6PStAAIAGL\/TAqCunhncaGMRNAbtYb9jc4w1f2FAYAEDIdQAAFgMBAM0BAADJAwNv0uKa8YPP5S3C1fDc6AAVy\/lKelnnMptROJU3jjxHAgAAIGpqwCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAgOrqAAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAja2gAdABcAGJqaAAEA","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1491813286275,"flow_last_seen":1491813286464,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0404{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":66,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADUGuOWGdxoYwKgrpwG7xFOF+CiKXqXACIASchDdaAAAAgQFHgEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPSxAAIAGMMXAqCunhncaGMRTAbtepcAIhfgoi1AQAECPdQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":264,"pkt":"uFpz9d6dpDTZFrEGCABFAAD6PS1AAIAGL\/LAqCunhncaGMRTAbtepcAIhfgoi1AYAEAxMwAAFgMBAM0BAADJAwPabWMx4TPEe003EmcOaVVkGB4BJdiLaMIosjjzc6WatQAAINrawCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAgGpqAAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAhqagAdABcAGDo6AAEA","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1491813286393,"flow_last_seen":1491813286470,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0404{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":66,"pkt":"pDTZFrEGuFpz9d6dCABFAAA0AABAADMGuuWGdxoYwKgrpwG7xFKVdKj9XuwOhIASchD+twAAAgQFHgEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPS5AAIAGMMPAqCunhncaGMRSAbte7A6ElXSo\/lAQAECwxAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":264,"pkt":"uFpz9d6dpDTZFrEGCABFAAD6PS9AAIAGL\/DAqCunhncaGMRSAbte7A6ElXSo\/lAYAEA4UAAAFgMBAM0BAADJAwMEITmqCCDYKHQAOZXDppXwBZfCK5UgUTxqQznpvaY\/AwAAIAoKwCvAL8AswDDMqcyozBTME8ATwBQAnACdAC8ANQAKAQAAgDo6AAD\/AQABAAAAABcAFQAAEnNpbXBsZWRuc2NyeXB0Lm9yZwAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAgqKgAdABcAGKqqAAEA","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1491813286392,"flow_last_seen":1491813286491,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0389{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"pDTZFrEGuFpz9d6dCABFAAAovEhAADUG\/KiGdxoYwKgrpwG7xFOF+CiLXqXA2lAQAO2N9gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2153{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1491813286393,"flow_last_seen":1491813286573,"flow_tot_l4_data_len":1664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2151{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTBAAIAGMMHAqCunhncaGMRTAbtepcDahfgyx1AQAECEZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2159{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+2156{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGvExAADUG94aGdxoYwKgrpwG7xFOF+DflXqXA2lAQAO0WkQAAvvCo\/\/S4rek3+7q49As6+ehDQh6J2ITLE\/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UNIkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF\/cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY\/0Dd+9BCiH+jMzouXB5BEYFjzhhxayvspoq3MVw6akfgw3lZ1iAar\/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYDVR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB\/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH\/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEEKTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBDAUAA4IBAQBkv4PxX5qF0M24oSlXDeha99HpPvJ2BG7xUnC7Hjz\/TQ10asyBgiXTw6AqXUz1uouhbcRUCXXH4ycOXYR5N0ATd\/W0rBzQO6sXEtbvNBh+K+l506tXRQyvKPrQ2+VQlYi734VXaX2S2FLKc4G\/HPPmuG5mEQWzHpQtf5GVklnxTM6jkXFMfEcMOwsZ9qGxbIY+XKrELoLL+QeWukhNkPKUyKlzousGeyOd3qLzTVWfemFFmBhox15AayP1eXrvjLVri7dvRvR78T1LBNiTgFla4EEkHbKPFWBYR9vvbkb9FfXZX5qz29i45ECzzZc5roW7HY683Ieb0abv8TtvEDhvAAQ6MIIENjCCAx6gAwIBAgIBATANBgkqhkiG9w0BAQUFADBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFowbzELMAkGA1UEBhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5hbCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf3GjPm8gAELTngTlvtH7xsD821+iO2zt6bETOXpClMfZOfvUq8k+0DGuOPz+VtUFrWlymUWoCwSXrbLpX9uMq\/NzgtHj6RQa1wVsfwTz\/oMp50ysiQVOnGXw94nZpAPA6sYapeFI+eh6FqUNzXmk6vBbOmcZSccbNQYArHE504B4YCqOmoaSYYkKtMsE8jqzpPhNjfzp\/haW+710LXa0Tkx63ubUFfclpxCDezeWWkWaCUN\/cALw3CknLa0Dhy2xSoRcRdKn23tNbE7qzNE0S3ySvdQwAl+mG5aWpYIxG3pzOPVnVZ9c0=","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTFAAIAGMMDAqCunhncaGMRTAbtepcDahfg9A1AQAEB6KwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2156{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":3,"flow_packet_id":12,"flow_first_seen":1491813286393,"flow_last_seen":1491813286577,"flow_tot_l4_data_len":7024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}}
+0806{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":360,"pkt":"pDTZFrEGuFpz9d6dCABFAAFavE5AADUG+3CGdxoYwKgrpwG7xFOF+EIhXqXA2lAYAO1VyQAAgfDgysVfPEvmt5Z9dTAzetcvPVa35+oZfQL6WY0Ay7\/SLRbZjQkIzELPhiW\/jQuAta0gRp95uN6eScNGa9U+1+0LcjCHLosA2x+QmQYF8egmyHJlZdJk\/Sgu9KwWjD7uvcr4eSFqJqFqmIts60wVW9\/jpZRmS1gbKvtL\/bHcpM+OE649K\/TgaB7ykLDJwPfp2FcqRMwnYdMCBQtedbCWlaKNpjOM4uWjHkUSJakrdi+JOOcSzf109Ki9FDf2NjuZuEPzkwTfVr7bTmmg7XF\/AO5eC0C8zsIrmetOXUeuCms8RO3U2vi053XW6u314+lb0XlAHaK4816yG097CtxEzbROdp7gvCSlPMKquzXjsj7b8hSNxzDXbRLqJCPRPwyrlJuSOBZx+q8QFgMDAAQOAAAA","pkt_caplen":360,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"pDTZFrEGuFpz9d6dCABFAAAoyxFAADMG79+GdxoYwKgrpwG7xE3jDV\/YWG\/ZrlAQAO3m+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTJAAIAGML\/AqCunhncaGMRTAbtepcDahfhDU1AQAEBz2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":180,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPTNAAIAGMEDAqCunhncaGMRTAbtepcDahfhDU1AYAEC7GAAAFgMDAEYQAABCQQRW0lV6McmTUT8JY9gbBLSM5KYf2JZG113UuVep5lsaZ+vaAaBxlB4uxo3rOimT2gVpPyUiEaINLq9dzSN1ucsqFAMDAAEBFgMDACgAAAAAAAAAADO6WjRkHVs5dxlyRfEYMkuQgMxWA5hhAVoDLVBE0snP","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+2154{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1491813286275,"flow_last_seen":1491813286586,"flow_tot_l4_data_len":1664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2152{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+2160{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTdAAIAGMLrAqCunhncaGMRNAbtYb9mu4w1vMlAQAEDYTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2157{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTtAAIAGMLbAqCunhncaGMRNAbtYb9mu4w10UFAQAEDTMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2151{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":1,"flow_packet_id":12,"flow_first_seen":1491813286275,"flow_last_seen":1491813286594,"flow_tot_l4_data_len":7024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}}
+0806{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":360,"pkt":"pDTZFrEGuFpz9d6dCABFAAFayxdAADMG7qeGdxoYwKgrpwG7xE3jDXluWG\/ZrlAYAO3PeQAA9KgKw1cRKN1LhBpLd0u6575qOGfheGjeKby+2Oy67SVjTf9V2dZBv9BQgaDSierKZovk7ZVnrNNHEsWJhs4XAqtOL7+AnB+KGzxwpkYnPGOxO1gLCj5HmyeXEn+HHxS25swqrkgAec\/JaI2JcROXZppxzn1shFTqUuJpFv1dXzcXCgTjsAIWBKB4u2Bf09QjWk86ppbUwDXx74wtLbeoFSGvP4zs\/WR18s35Wm5lVtMgmoCFrl7U8NCN0abLau0Hn5RiLdTA7XfY\/+uj+QEvI\/nDtTiroeKDOFxXG3jja6DhnklD9Ty1bXR13kyPLxRh2ECehDLaCgotOanR8u7LB\/FRF7jVnFmDXDm8OdqRTvpOO+j9QbKG\/9spShqTY4XwJ09Wr0r9LbwgFgMDAAQOAAAA","pkt_caplen":360,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"pDTZFrEGuFpz9d6dCABFAAAoPCFAADMGftCGdxoYwKgrpwG7xFKVdKj+XuwPVlAQAO2vRQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPTxAAIAGMLXAqCunhncaGMRNAbtYb9mu4w16oFAQAEDM4AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":180,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPT1AAIAGMDbAqCunhncaGMRNAbtYb9mu4w16oFAYAEDgnQAAFgMDAEYQAABCQQQ5fXNvqbM11bCAY9DPMQgGl+h2VtzUXoPpNzY63jYw2WS6d0DPAXMiUXzSMxAPEkVJHsBPRzq4wrlqJTMAnyVeFAMDAAEBFgMDACgAAAAAAAAAACEYNrBfOvxn+amPUTqDEMEbEnofHBf+HvoGe9j\/c1FH","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+2152{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1491813286392,"flow_last_seen":1491813286609,"flow_tot_l4_data_len":1664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2151{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPT5AAIAGMLPAqCunhncaGMRSAbte7A9WlXSzOlAQAECltgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2159{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+2156{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"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","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPT9AAIAGMLLAqCunhncaGMRSAbte7A9WlXS9dlAQAECbegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2152{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":1364,"pkt":"pDTZFrEGuFpz9d6dCABFAAVGPCZAADMGea2GdxoYwKgrpwG7xFKVdL12XuwPVlAQAO0yiwAAKddGtworZbbTQm8Vsrh7++\/pXVPVNFonAgMBAAGjgdwwgdkwHQYDVR0OBBYEFK29mHo0tCb3+sQmVO8DveAky1QaMAsGA1UdDwQEAwIBBjAPBgNVHRMBAf8EBTADAQH\/MIGZBgNVHSMEgZEwgY6AFK29mHo0tCb3+sQmVO8DveAky1QaoXOkcTBvMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBFeHRlcm5hbCBDQSBSb290ggEBMA0GCSqGSIb3DQEBBQUAA4IBAQCwm+CFJcLWI+IPlgaSnUGYnNmEeYHZHlsUByM2ZY+w2He7rEFsR2CDUbD5Mj3n\/PYmE8eAFqW\/WvyHz3h5iSGa4kwHCoY1vPLeUcTSlrfcfk7ucP0cOesMAlEULY69FuDB30Z15ySt7PRCtIWTcBBnup0GNUoY0yt6zFFCoXpj0ea7ocUrwja+Ew3mvWN+eXunCQ1Aq2rdj4rD9vaMGkIFUdRF9Z+nYiFoFSBDPJnnfL0k2KmRF3OIP1YbMTgYtHEPms3IDp6OLhvhjJiDyx8x8URMxgRzSXZgD8f4vReAay7pzEwOWpp5DyAKLtWeYyYeVZKU2IIXWnvQvMePToYEFgMDAeAWAAHcAQAB2DCCAdQKAQCgggHNMIIByQYJKwYBBQUHMAEBBIIBujCCAbYwgZ+iFgQUkK9qOpRaC9iQ6hJWc99DtDoo2ucYDzIwMTcwNDA5MDQwMjQwWjB0MHIwSjAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEQCCr5kvWgaS4\/6x6rGelVcqgAAYDzIwMTcwNDA5MDQwMjQwWqARGA8yMDE3MDQxNjA0MDI0MFowDQYJKoZIhvcNAQELBQADggEBAH+wfpp+5LlkCRisx4nBj3QUHeouZckpEuXuzNLrHapMTI2irFC1B8nhS8VqiSEhU80d87eufNjS9ja4P3y\/9Gf1mDgVmwelWuNUfTDa0fIOG+Iok+qRyzywOVh+bLzrVJ1TmjtXTZD42IWFcGqgYx7yUytRrBy8tsK+7tvF\/TdoJvdyDca\/zwlZABw6+foldVCqO5dRcQIV1cOsQ1EYCUZmHJPpUe2sxVE3cuvAzL9LySGo9pync+JfJU2vw8JdwOcokNSprDor2Fq2Lrm0a1PkUH6nOdzaMWMf+cM8JLhskYX9lg8v9hKrHYKQkVmkHpKCAtg4IbjOmYaD7pVy9OUWAwMCTQwAAkkDABdBBOQBw8a7wwwIBUc6xvoRYH95nvrfu1gNnFZrS3UCDSaz2sm9sLlpLhcqAfa8gejsKHleao51wRJX0wZ5raBhnV4GAQIALnQnGKjqB5gH3ozWgjfwqzq1r9fLbFPh+TecMRPPo7Kb4cdPYHrTZdnzP\/wVgQRmlRxxRmAdF+eYO8VkjhyNbIwURiq96\/6++bWFXva15lFpOzDRGSnn+GsV8Latce+HzRor+gXr76P24APQnSRFcc9dFE61EPF6CJH1OFUyb5AvxOHpD38pQmtACr+aLFVh2Pdmynku3UPNWvmIoHyxLo3PbU0jv4biMOWuClHYVwiQCIyJ\/yl3q9LU9dK34zKNNcLK3+MhNiIT4RnabH+qnJ8rldvJgCc=","pkt_caplen":1364,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":2,"flow_packet_id":12,"flow_first_seen":1491813286392,"flow_last_seen":1491813286612,"flow_tot_l4_data_len":7024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"simplednscrypt.org","server_names":"simplednscrypt.org,www.simplednscrypt.org","ja3":"83e04bc58d402f9633983cbf22724b02","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL, CN=simplednscrypt.org","alpn":"h2,http\/1.1","fingerprint":"3E:20:0F:BF:AD:D8:5C:A1:A1:1B:E5:B2:A7:D4:68:E2:6A:DB:01:41"}}
+0805{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":360,"pkt":"pDTZFrEGuFpz9d6dCABFAAFaPCdAADMGfZiGdxoYwKgrpwG7xFKVdMKUXuwPVlAYAO24IwAAOniMGP4VfxmqNYQkfmYsWzbtFzPT8SzMmHLpB8VEC49Krcr1+mK5gWMneNpnV9dODfdehLZnP0A\/O2j3PCFXZww0C2p7j2lBW5KK\/nFKj0DgymGHVQn2sGgTGQbXWLq7kpacgXw8M39PxN7RT2S8WR98pWYHn6moqRPQIUN71ryQq2I3sVu3GSK+WnX6dN+gVflqI+wV93ySPTZNsauRM\/ypKN7HSpQlBFHVKNMAggEU3sXbo\/\/YnRHEE0y13nL0P5k6I9ow\/Isps7udr+o640FCadudaRKKLP7C888mtsiggJjlQ8I3kTpna8W+eEWAtsai9jHCC0AwVsAYwxrsXIn4elp8rDeNYgHNpBqZu2j1wa+9s3OgRLcQiqmrn4PiMSsVVK0GYu0nFgMDAAQOAAAA","pkt_caplen":360,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":54,"pkt":"uFpz9d6dpDTZFrEGCABFAAAoPUBAAIAGMLHAqCunhncaGMRSAbte7A9WlXTDxlAQAECVKgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","pkt_oversize":false,"pkt_ts":1491813286,"pkt_len":180,"pkt":"uFpz9d6dpDTZFrEGCABFAACmPUFAAIAGMDLAqCunhncaGMRSAbte7A9WlXTDxlAYAEBXewAAFgMDAEYQAABCQQS3Xp2AlfFC22Y2YogKVYDmOcIMxJboN\/X7MTLKc+s0a\/3KPHASyDk0CPcYXgtszMN5ekLUAAOsBJqGyUfM8brVFAMDAAEBFgMDACgAAAAAAAAAAGSqZuE6blT7eearrYamBpAP9Uxx8q45CrWFtb1OeTqe","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":0,"flow_packet_id":39,"flow_first_seen":1491813284555,"flow_last_seen":1491813285262,"flow_tot_l4_data_len":15042,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":385,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50233,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":1,"flow_packet_id":18,"flow_first_seen":1491813286275,"flow_last_seen":1491813286718,"flow_tot_l4_data_len":7903,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50253,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":2,"flow_packet_id":18,"flow_first_seen":1491813286392,"flow_last_seen":1491813286753,"flow_tot_l4_data_len":7903,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":439,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50258,"dst_port":443,"l4_proto":"tcp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap","flow_id":3,"flow_packet_id":36,"flow_first_seen":1491813286393,"flow_last_seen":1491813286913,"flow_tot_l4_data_len":10054,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1330,"flow_avg_l4_data_len":279,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.43.167","dst_ip":"134.119.26.24","src_port":50259,"dst_port":443,"l4_proto":"tcp"}
+0153{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/simple-dnscrypt.pcap"}
diff --git a/tests/result/nDPId_sip.pcap.txt b/tests/result/nDPId_sip.pcap.txt
new file mode 100644
index 000000000..78fd5cb6b
--- /dev/null
+++ b/tests/result/nDPId_sip.pcap.txt
@@ -0,0 +1,54 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0985{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1120469572844,"flow_last_seen":1120469572844,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":475,"flow_max_l4_data_len":475,"flow_avg_l4_data_len":475,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+1009{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469572,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":348,"pkt":"AODtAW69ADBUADRWCABFAAFOAABAADcRit\/U8iEjwKgBAhPEE8QBOln2U0lQLzIuMCAxMDAgVHJ5aW5nDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA2OSBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2M0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9OGU5NDhiMA0KVG86IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz4NClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MDtycG9ydD01MDYwO2JyYW5jaD16OWhHNGJLbnAxNDk1MDUxNzgtNDM4YzUyOGIxOTIuMTY4LjEuMg0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":348,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469590,"pkt_len":388,"pkt":"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","pkt_caplen":388,"pkt_type":2048,"pkt_ipoffset":14}
+0985{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":509,"pkt":"ADBUADRWAODtAW69CABFAAHvac4AAIARF3DAqAEC1PIhIxPEE8QB29MsUkVHSVNURVIgc2lwOnNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjticmFuY2g9ejloRzRiS25wMTQwNTIwMTk5LTQ4OWQ1MjBmMTkyLjE2OC4xLjI7cnBvcnQNCkZyb206IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTg2MDJiMTQNClRvOiA8c2lwOnZvaTE4MDYzQHNpcC5jeWJlcmNpdHkuZGs+DQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDb250YWN0OiAgPHNpcDp2b2kxODA2M0AxOTIuMTY4LjEuMjo1MDYwO2xpbmU9OWM3ZDJkYmQ4ODIyMDEzYz47ZXhwaXJlcz0xMjAwO3E9MC41MDANCkV4cGlyZXM6IDEyMDANCkNTZXE6IDcwIFJFR0lTVEVSDQpDb250ZW50LUxlbmd0aDogMA0KTWF4LUZvcndhcmRzOiA3MA0KVXNlci1BZ2VudDogTmVybyBTSVBQUyBJUCBQaG9uZSBWZXJzaW9uIDIuMC41MS4xNg0KDQo=","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+1009{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469680,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":722,"pkt":"ADBUADRWAODtAW69CABFAALEadkAAIARFpDAqAEC1PIhIxPEE8QCsDUFUkVHSVNURVIgc2lwOnNpcC5jeWJlcmNpdHkuZGsgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjticmFuY2g9ejloRzRiS25wMTM4NzgwNjcyLTQ1MDIyYTFjMTkyLjE2OC4xLjI7cnBvcnQNCkZyb206IDxzaXA6dm9pMTgwNjNAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTg0NWEwMGQNClRvOiA8c2lwOnZvaTE4MDYzQHNpcC5jeWJlcmNpdHkuZGs+DQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDb250YWN0OiAgPHNpcDp2b2kxODA2M0AxOTIuMTY4LjEuMjo1MDYwO2xpbmU9OWM3ZDJkYmQ4ODIyMDEzYz47ZXhwaXJlcz0xMjAwO3E9MC41MDANCkV4cGlyZXM6IDEyMDANCkNTZXE6IDcxIFJFR0lTVEVSDQpDb250ZW50LUxlbmd0aDogMA0KQXV0aG9yaXphdGlvbjogRGlnZXN0IHVzZXJuYW1lPSJ2b2kxODA2MyIscmVhbG09InNpcC5jeWJlcmNpdHkuZGsiLHVyaT0ic2lwOjE5Mi4xNjguMS4yIixub25jZT0iMTcwMWIwNDIwNzNlNDBkYzNhYzdhZGIwNTJhZDQxZCIsb3BhcXVlPSIxNzAxYTEzNTFmNzA3OTUiLG5jPSIwMDAwMDAwMSIscmVzcG9uc2U9ImNjMmQ0NTczZWU5Mzk5ZjM0YzFjN2YzYmY1MTQ0MTAzIg0KTWF4LUZvcndhcmRzOiA3MA0KVXNlci1BZ2VudDogTmVybyBTSVBQUyBJUCBQaG9uZSBWZXJzaW9uIDIuMC41MS4xNg0KDQo=","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
+1017{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469697,"pkt_len":533,"pkt":"AODtAW69ADBUADRWCABFAAIHAABAADcRiibU8iEjwKgBAhPEE8QB877qU0lQLzIuMCA0MDEgbm9uY2UgaGFzIGNoYW5nZWQNCkNhbGwtSUQ6IDU3ODIyMjcyOS00NjY1ZDc3NUA1NzgyMjI3MzItNDY2NWQ3NzINCkNTZXE6IDcxIFJFR0lTVEVSDQpGcm9tOiA8c2lwOnZvaTE4MDYzQHNpcC5jeWJlcmNpdHkuZGs+O3RhZz04NDVhMDBkDQpUbzogPHNpcDp2b2kxODA2M0BzaXAuY3liZXJjaXR5LmRrPjt0YWc9MDAtMDQwODktMTcwMWIwNjctMzIwYWQyZGEzDQpWaWE6IFNJUC8yLjAvVURQIDE5Mi4xNjguMS4yO3JlY2VpdmVkPTgwLjIzMC4yMTkuNzA7cnBvcnQ9NTA2MDticmFuY2g9ejloRzRiS25wMTM4NzgwNjcyLTQ1MDIyYTFjMTkyLjE2OC4xLjINCldXVy1BdXRoZW50aWNhdGU6IERpZ2VzdCByZWFsbT0ic2lwLmN5YmVyY2l0eS5kayIsbm9uY2U9IjE3MDFiMDYxMTU4NzQyNDQ2ZDNkZThiODBkNjQ1ZjMiLG9wYXF1ZT0iMTcwMWExMzUxZjcwNzk1IixzdGFsZT1mYWxzZSxhbGdvcml0aG09TUQ1DQpDb250ZW50LUxlbmd0aDogMA0KDQo=","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
+0987{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+1011{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469847,"pkt_len":528,"pkt":"AODtAW69ADBUADRWCABFAAICAABAADcRiivU8iEjwKgBAhPEE8QB7ov6U0lQLzIuMCA0MDEgVW5hdXRob3JpemVkDQpDYWxsLUlEOiA1NzgyMjI3MjktNDY2NWQ3NzVANTc4MjIyNzMyLTQ2NjVkNzcyDQpDU2VxOiA3MiBSRUdJU1RFUg0KRnJvbTogPHNpcDp2b2kxODA2MkBzaXAuY3liZXJjaXR5LmRrPjt0YWc9NzYwNjllNA0KVG86IDxzaXA6dm9pMTgwNjJAc2lwLmN5YmVyY2l0eS5kaz47dGFnPTAwLTA0MDcxLTE3MDFiMTcyLTIyZTFjYzQ3MA0KVmlhOiBTSVAvMi4wL1VEUCAxOTIuMTY4LjEuMjtyZWNlaXZlZD04MC4yMzAuMjE5LjcwO3Jwb3J0PTUwNjA7YnJhbmNoPXo5aEc0YktucDEyMzc1OTA2My00NjRiYzFiYjE5Mi4xNjguMS4yDQpXV1ctQXV0aGVudGljYXRlOiBEaWdlc3QgcmVhbG09InNpcC5jeWJlcmNpdHkuZGsiLG5vbmNlPSIxNzAxYjE2YTJhMDliYzM4NDdjZmQyMDE1NjEyZmUyIixvcGFxdWU9IjE3MDFhMTM1MWY3MDc5NSIsc3RhbGU9ZmFsc2UsYWxnb3JpdGhtPU1ENQ0KQ29udGVudC1MZW5ndGg6IDANCg0K","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+1271{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469864,"pkt_len":722,"pkt":"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","pkt_caplen":722,"pkt_type":2048,"pkt_ipoffset":14}
+1019{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469865,"pkt_len":533,"pkt":"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","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
+0987{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469938,"pkt_len":509,"pkt":"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","pkt_caplen":509,"pkt_type":2048,"pkt_ipoffset":14}
+1011{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120469939,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+1458{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1120470049188,"flow_last_seen":1120470049188,"flow_tot_l4_data_len":830,"flow_min_l4_data_len":830,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":830,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+1458{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470049,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+1458{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470050,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+1158{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470051,"pkt_len":637,"pkt":"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","pkt_caplen":637,"pkt_type":2048,"pkt_ipoffset":14}
+0862{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0862{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470083,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0862{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470084,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+1182{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470085,"pkt_len":656,"pkt":"AODtAW69ADBUADRWCABFAAKCAABAAC8RRyvIRHhRwKgBAhPEE8QCbo0fU0lQLzIuMCA0MDggUmVxdWVzdCBUaW1lb3V0DQpWaWE6IFNJUC8yLjAvVURQIDE5Mi4xNjguMS4yOjUwNjA7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0PTUwNjA7cmVjZWl2ZWQ9ODAuMjMwLjIxOS43MA0KRnJvbTogImFyaWsiIDxzaXA6ODE2NjY2QHZvaXAuYnJ1cmp1bGEubmV0Pjt0YWc9NjQzM2VmOQ0KVG86IDxzaXA6OTcyMzkyODcwNDRAdm9pcC5icnVqdWxhLm5ldD47dGFnPWE2YTFjNWY2MGZhZWNmMDM1YTFhZTViNmU5NmU5NzlhLTYxNjcNCkNhbGwtSUQ6IDEwNTA5MDI1OS00NDZmYWY3YUAxOTIuMTY4LjEuMg0KQ1NlcTogMSBJTlZJVEUNClNlcnZlcjogU2lwIEVYcHJlc3Mgcm91dGVyICgwLjguMTIgKGkzODYvbGludXgpKQ0KQ29udGVudC1MZW5ndGg6IDANCldhcm5pbmc6IDM5MiAyMDAuNjguMTIwLjgxOjUwNjAgIk5vaXN5IGZlZWRiYWNrIHRlbGxzOiAgcGlkPTMyNzUzIHJlcV9zcmNfaXA9ODAuMjMwLjIxOS43MCByZXFfc3JjX3BvcnQ9NTA2MCBpbl91cmk9c2lwOjk3MjM5Mjg3MDQ0QHZvaXAuYnJ1anVsYS5uZXQgb3V0X3VyaT1zaXA6OTcyMzkyODcwNDRAdm9pcC5icnVqdWxhLm5ldCB2aWFfY250PT0wIg0KDQo=","pkt_caplen":656,"pkt_type":2048,"pkt_ipoffset":14}
+0827{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470085,"pkt_len":389,"pkt":"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","pkt_caplen":389,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470086,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0864{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470090,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470094,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470098,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470102,"pkt_len":417,"pkt":"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","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470106,"pkt_len":417,"pkt":"ADBUADRWAODtAW69CABFAAGTapEAAIARzIjAqAECyER4URPEE8QBf5mcQ0FOQ0VMIHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0IFNJUC8yLjANClZpYTogU0lQLzIuMC9VRFAgMTkyLjE2OC4xLjI7YnJhbmNoPXo5aEc0YktucDEwNDk4NDA1My00NGNlNGE0MTE5Mi4xNjguMS4yO3Jwb3J0DQpGcm9tOiAiYXJpayIgPHNpcDo4MTY2NjZAdm9pcC5icnVyanVsYS5uZXQ+O3RhZz02NDMzZWY5DQpUbzogPHNpcDo5NzIzOTI4NzA0NEB2b2lwLmJydWp1bGEubmV0Pg0KQ2FsbC1JRDogMTA1MDkwMjU5LTQ0NmZhZjdhQDE5Mi4xNjguMS4yDQpDU2VxOiAxIENBTkNFTA0KQ29udGVudC1MZW5ndGg6IDANCk1heC1Gb3J3YXJkczogNzANClVzZXItQWdlbnQ6IE5lcm8gU0lQUFMgSVAgUGhvbmUgVmVyc2lvbiAyLjAuNTEuMTYNCg0K","pkt_caplen":417,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":1,"flow_packet_id":18,"flow_first_seen":1120470049188,"flow_last_seen":1120470116279,"flow_tot_l4_data_len":8900,"flow_min_l4_data_len":355,"flow_max_l4_data_len":830,"flow_avg_l4_data_len":494,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"200.68.120.81","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0595{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/wAAIARFmjAqAEC1PIhJHUwncgAtBjegAhvrgAABNg3lstx1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1REEHBgYEhIeEBQXahMcGAQEBQYBAQAHBQUZEwUbGRATGQUEBAcDAgMDAAACDQ0NAAEDDQwNAAABAgMBBgYBDw4ODAMABwYAAwMGBwEEBgYbHxwRaWBiFREQFGoTFWBpYX10UltZ10dcVlJVREtCdVlzeFp8bmgUag==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1120470985348,"flow_last_seen":1120470985348,"flow_tot_l4_data_len":180,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp","ndpi": {"proto":"RTP","category":"Media"}}
+0598{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/0AAIARFmfAqAEC1PIhJHUwncgAtL+rgAhvrwAABXg3lstxbmgVFGoUFBVpYG5qbG5kbGoWF2xubWBmfn9Fxsnw\/Ofz+uXwy\/H2z83k+sJTdF9CW\/bw8vzg7pfo8ldaT011Z399ZmV0dUN4S0dVQ2dmbWNsZGZkeGRvbxQUbBcRExAXEBwfHRAQFhAQHxwfGR4YEBcSFGxibWNqFRUXbmV3ckDQ93N9fmJnYmoVahcVZUNxWll+YGZ6cnJJZXpgeF1EQg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/4AAIARFmbAqAEC1PIhJHUwncgAtNyMgAhvsAAABhg3lstxcX5wdtbF0Et0dn92T1BB0VhmZ2V\/Z294Y2ZmahQXFhQREBAVb2ZPemVlYWJoYE9\/YWZkcnV4bWwVFRVqZ2xpYn94ZmBnY2F0zfjXdmNiYXhveHJgaW5jUFlwZW1kYWdlamoREhAQEx4fHx0XahRvRl1F3V5ESdbQxFFR39TfQXR\/Z9L15ebs6JeW7+DslJOU6uqUn5CcnJKX+Ofs5+Hg6g==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0596{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIa\/8AAIARFmXAqAEC1PIhJHUwncgAtJlvgAhvsQAABrg3lstxkpfo6Zfq5frn5uz6+sB4emFkcGBneMvv7+rslZHu5OLqkpKdkpCUlZGcnpuHh4GAgoODgYGGhoGBgIGDg4GAhoSFhZ6ZhYSFhYeHhoWFhICCgIOBmJyQnZ+Yn5CW6u7s6e7ol+ji7vrcWtzJ8\/Lz9ujq7u6XkZaWkZ2Ym5iFh4aGhZyemZ6fmZ+fk5OfhYeEk5STk5eU6fj3T1hDVM9BQg==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAAAAIARFmTAqAEC1PIhJHUwncgAtMoSgAhvsgAAB1g3lstxRH1wVt719vLg7uHxw3h4ZGRhfE9UWV\/Rz+Dt5\/PklJOUlJXt4uzx+Pjm5PPHzf38\/fr05+3ikurj4ezn4+H6\/97AwEJ8S9DN9Vd1XdzJ8eDp6eXwzcXWRUJnZHhnYX96aHLW+ubo6eHg5\/DG\/MNRcE3B+ubNy+Xu7Obt7+qX6u7oy9fw3vLT3N1W19X49PBBf39jZnhmbBEdEWpqb2BweA==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAEAAIARFmPAqAEC1PIhJHUwncgAtHeogAhvswAAB\/g3lstxZWVmFB0cBQQHBwQbHxZgY21iFGpoFRdvFxMWEBAdFhEQFhcREBVoam1hbmNjFBYQHx4SHRYWEh0XaW0VaWR\/aGoUF2liaBEUFm9mZm1hbWgVER0ZHB0fHRsbHhwdHxgbGREVbmoUEhsFBBgFGx0TFmx6cUZxZWZoaXJ2cmoTExESExRqZFPLyfH47frj+svP1PT6X0\/RW0t\/SXVUy\/7m7A==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAIAAIARFmLAqAEC1PIhJHUwncgAtKmigAhvtAAACJg3lstx5NneS0l8Y2kVYm9oFW9tbW1jZWRyc3hvZmpoaGpjaHpzTXRnen5Z2l1FzdHU0dvZy+zx3Pzm7peVlZeX7unjw\/P09\/Xz4fzz9c3C9uXl+vP2Wkl0aG1mZ0twR1TQWU1PflrBy\/PBR3BkZ2ZsZHN6YWRyeHXH4\/\/x8U1W\/Nb15ezv7pWRkJ2FmZubhYWEhZiZm4SFhISYnoWbhISbnJaXlw==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAMAAIARFmHAqAEC1PIhJHUwncgAtLaDgAhvtQAACTg3lstx6urs5ueUkJOXlZGWlOyVlOD46O7hzXXbxsfz\/OLg5ufawPH4wk3N8Obu7+Pv6unk4fj\/29jZ1\/7l4+Ht7JOXlOrs4vPPUfVQz97J5fLjl5GXkpyRl+jqk5aQlero4uLh7+rslJfp6uP+9vbL+OLg5vj99\/LL9ub4+uTs6ZSVlJXp6Ojv7eqWkZOTnJORkpCTk5GXlpaRkJCW6erp7JWXlw==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470985,"pkt_len":214,"pkt":"ADBUADRWAODtAW69CABFAADIbAQAAIARFmDAqAEC1PIhJHUwncgAtIfqgAhvtgAACdg3lstxlpDplp2cmZ6fkpaRle3n9PTy\/PyVkZKehIeEmJGRl52QlJaX6OOU6JaRlp2cn4WEhZ2RkJeV6ZaQnZ6EhJuFh4WFmYWYk5+dkpCQ6u\/qkZ2fmYSYnZ6Rk5OU7OD6+Pbh4PTl+OTo6unl9eXi7f7c1VT\/+uiX6JSUkJCV7uXm\/Obu7pWWkZeW7OPpk5Ofm5+Yk5WV7untlJeSkpeV7+qWkA==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120470986363,"flow_last_seen":1120470986363,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30001,"dst_port":40393,"l4_proto":"udp"}
+0503{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","pkt_oversize":false,"pkt_ts":1120470986,"pkt_len":146,"pkt":"ADBUADRWAODtAW69CABFAACEbAUAAIARFqPAqAEC1PIhJHUxnckAcCyBgMgABjeWy3FCyQfKXvrGAwAAJMMAAAAJAAAGDIHKAAs3lstxAR0xMTg5NDI5Ny00NDMyYTlmOEAxOTIuMTY4LjEuMgYFU0lQUFMAAIHLAAY3lstxEHNlc3Npb24gc2h1dGRvd24AAAA=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120470986363,"flow_last_seen":1120470986363,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30001,"dst_port":40393,"l4_proto":"udp","ndpi": {"proto":"RTCP","category":"VoIP"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":0,"flow_packet_id":84,"flow_first_seen":1120469572844,"flow_last_seen":1120471094413,"flow_tot_l4_data_len":34719,"flow_min_l4_data_len":13,"flow_max_l4_data_len":1084,"flow_avg_l4_data_len":413,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.35","src_port":5060,"dst_port":5060,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":2,"flow_packet_id":9,"flow_first_seen":1120470985348,"flow_last_seen":1120470985511,"flow_tot_l4_data_len":1620,"flow_min_l4_data_len":180,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":180,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30000,"dst_port":40392,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1120470986363,"flow_last_seen":1120470986363,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"212.242.33.36","src_port":30001,"dst_port":40393,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/sip.pcap"}
diff --git a/tests/result/nDPId_skype-conference-call.pcap.txt b/tests/result/nDPId_skype-conference-call.pcap.txt
new file mode 100644
index 000000000..f8ce0ecc1
--- /dev/null
+++ b/tests/result/nDPId_skype-conference-call.pcap.txt
@@ -0,0 +1,20 @@
+0373{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1501061916646,"flow_last_seen":1501061916646,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp"}
+0523{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":146,"pkt":"XEl5dU5qxCwDBkn+CABFAACEzEwAAEARWwHAqAIUaC4oMcCC7OIAcIaYAAEAVCESpELFWk\/f3gwyXjBMYMcABgAJZ3BwZTp6V3lrAAAAACQABG7\/\/v+AKgAIAAAAAAC\/QxeAVAABMQAAAIBwAAQAAAADAAgAFMOSZmY4XAmhNOQKDGwu8wYai2KrgCgABB+1m2s=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0595{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1501061916646,"flow_last_seen":1501061916646,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":112,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","category":"VoIP"}}
+0521{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":146,"pkt":"xCwDBkn+XEl5dU5qCABFAACERTYAAG4RtBdoLigxwKgCFOziwIIAcHm6AAEAVCESpEI8yF2moGJ4zvU2wuEABgAJeld5azpncHBlAAAAACQABG7\/\/v+AKQAIAAAAAAACl5OAVAABMQAAAIBwAAQAAAADAAgAFHnv8xovieyQrsQ6j2MMyqg8GNj1gCgABORvfhY=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":114,"pkt":"XEl5dU5qxCwDBkn+CABFAABkjWYAAEARmgfAqAIUaC4oMcCC7OIAUFnEAQEANCESpEI8yF2moGJ4zvU2wuEAIAAIAAHN8Ek8jHOAcAAEAAAAAwAIABSgsacIkgIOfzKEQbuerkeFTLj204AoAASK\/70B","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":114,"pkt":"xCwDBkn+XEl5dU5qCABFAABkRTcAAG4RtDZoLigxwKgCFOziwIIAUMppAQEANCESpELFWk\/f3gwyXjBMYMcAIAAIAAHhkH7lJQGAcAAEAAAAAwAIABQrKEEJgBBMTTHUJMwo4kS9VvHVU4AoAARKHr2N","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":146,"pkt":"xCwDBkn+XEl5dU5qCABFAACERTgAAG4RtBVoLigxwKgCFOziwIIAcHm6AAEAVCESpEI8yF2moGJ4zvU2wuEABgAJeld5azpncHBlAAAAACQABG7\/\/v+AKQAIAAAAAAACl5OAVAABMQAAAIBwAAQAAAADAAgAFHnv8xovieyQrsQ6j2MMyqg8GNj1gCgABORvfhY=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":114,"pkt":"XEl5dU5qxCwDBkn+CABFAABk+qAAAEARLM3AqAIUaC4oMcCC7OIAUFnEAQEANCESpEI8yF2moGJ4zvU2wuEAIAAIAAHN8Ek8jHOAcAAEAAAAAwAIABSgsacIkgIOfzKEQbuerkeFTLj204AoAASK\/70B","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":150,"pkt":"XEl5dU5qxCwDBkn+CABFAACIyYsAAEARXb7AqAIUaC4oMcCC7OIAdCd0AAEAWCESpELFWk\/f3gwyXjBMYMcABgAJZ3BwZTp6V3lrAAAAACQABG7\/\/v8AJQAAgCoACAAAAAAAv0MXgFQAATEAAACAcAAEAAAAAwAIABT1JqdLy2bXvEeDsPwpSdGXvE59K4AoAARcs9hB","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":152,"pkt":"XEl5dU5qxCwDBkn+CABFAACKpCcAAEARgyDAqAIUaC4oMcCC7OIAdi+4kGhdMwwzN\/\/gdMcAvt4AARJzAe98e2MCoivqZPnJUAFL3VX33q5uQ+IYKuS0EUKTIo39Hj8iukGI19FjyOxrBZyYkg6iF95EWV8le0HWtWEfKWDyZ1DDN5hOm3Kp5iAcotTqAYm+0+HE7xx8OWI=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":145,"pkt":"XEl5dU5qxCwDBkn+CABFAACDJZIAAEARAb3AqAIUaC4oMcCC7OIAbyMtkGhdNAwzOT\/gdMcAvt4AARJzFoIj8RvDtoBnCmxX9hIkCAPQbg6oB6F+2\/BS2ej\/1Yx+s5sbTunvLBoL2m+o5Jy0WdwZpTg4y027nZALU7f94OZPLZpX+snOwU8BPCbpSEb6h\/hgjA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":137,"pkt":"XEl5dU5qxCwDBkn+CABFAAB7Cq8AAEARHKjAqAIUaC4oMcCC7OIAZ5KRkGhdNQwzOn\/gdMcAvt4AARJzL5WXAb4FnUpu5Ustien9yf4fKgKyZziei2176fxqYI29WcaPKmNBgxwUzkC0b7AvDpOjrM+YKSoqSExQI68c1fSSAXoy96BR5daIvws=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":209,"pkt":"xCwDBkn+XEl5dU5qCABFAADDRTkAAG4Rs9VoLigxwKgCFOziwIIAr5d6gckAEAAAA+jRYbbdpaZwZcp4HhimQeJvWTqwNpGSqnfDF2++mcV0CSMOA2sesBI9G6QTGaW73P0MbrjdyL2V7ezUhMi+JhQH1l+\/pucjL24WG\/3W+6J2ACSbEnQkSGuZnDqR07Gu66wLz\/t2bDNdmg\/zDByyOeTksyEr32n2gdG1py7P7M0grJaV4UdIpWrLn3RHkhXNGy+AAAACAUPdhV3J\/ZuDflQ=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":77,"pkt":"xCwDBkn+XEl5dU5qCABFAAA\/RToAAG4RtFhoLigxwKgCFOziwIIAKwMLj84ABAAAA+gZZ7Ud7jiCwNl1ozeAAAADAWGz1p37DOHYDPQ=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":169,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRTsAAG4Rs\/toLigxwKgCFOziwIIAh3g4gMkABgAAA+kozqPuZhFQtvXYhXLU9laq6VpMsxyF5TyhbvlCVt7zAQFZOlRbxtk69tkjpENIlvzMKACC+zjGaufaaX4NQvZmRVnu7CWMI45MVTTEiJyIi0Y0uEFenTy\/eoe7G29X6WGy1lhMaBQE7oAAAAsBKpMsVI2YWnKXTg==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":169,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRTwAAG4Rs\/poLigxwKgCFOziwIIAh7GygMkABgAABE31YJhxpeEStx\/Non2Hw9ODhjn1nPI6twAa6v4TPbXALXJS4WDhGnHiGs7M0q1LV5JIhmLN19a4UZ2oNcceD7gcC6\/hlfHMoWziriN+88lO8+6FVpNUywPwW580clvLUe3t1RqG\/Q2pUoAAAAwB9dds5qvBKmJN+A==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","pkt_oversize":false,"pkt_ts":1501061916,"pkt_len":169,"pkt":"xCwDBkn+XEl5dU5qCABFAACbRT0AAG4Rs\/loLigxwKgCFOziwIIAh3lxgMkABgAABLEYhveI+TJqXoNflKzETGTrRbw2whOI8HHGZ9H1FnMJe5bOVFI65E6c22uJfv\/qd5toD\/qg2AhULgiZ0dL4yqWJoA7uey4F0+\/ntXNU1VN2Qkq5FFOEjp3tzTNRRgKcJLBlUIvR1ZSm7IAAAA0B0DttNZRbKmPtmw==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap","flow_id":0,"flow_packet_id":200,"flow_first_seen":1501061916646,"flow_last_seen":1501061918151,"flow_tot_l4_data_len":32887,"flow_min_l4_data_len":40,"flow_max_l4_data_len":923,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.20","dst_ip":"104.46.40.49","src_port":49282,"dst_port":60642,"l4_proto":"udp"}
+0159{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype-conference-call.pcap"}
diff --git a/tests/result/nDPId_skype.pcap.txt b/tests/result/nDPId_skype.pcap.txt
new file mode 100644
index 000000000..471b54de2
--- /dev/null
+++ b/tests/result/nDPId_skype.pcap.txt
@@ -0,0 +1,2699 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431969641947,"flow_last_seen":1431969641947,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49163,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969641,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAt5UAAEARP6TAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431969641947,"flow_last_seen":1431969641947,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49163,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431969641948,"flow_last_seen":1431969641948,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57406,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969641,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5KYAAEAREpPAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431969641948,"flow_last_seen":1431969641948,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57406,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":1431969642087,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55711,"dst_port":53,"l4_proto":"udp"}
+0413{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDTB0AAEARqxnAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":1431969642087,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55711,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":1431969642087,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52850,"dst_port":53,"l4_proto":"udp"}
+0413{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDfx0AAEAReBnAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431969642087,"flow_last_seen":1431969642087,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52850,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431969642244,"flow_last_seen":1431969642244,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54396,"dst_port":53,"l4_proto":"udp"}
+0406{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7CqYAAEAR7JjAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431969642244,"flow_last_seen":1431969642244,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54396,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431969642247,"flow_last_seen":1431969642247,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65426,"dst_port":53,"l4_proto":"udp"}
+0406{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7ECYAAEAR5xjAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431969642247,"flow_last_seen":1431969642247,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65426,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431969642318,"flow_last_seen":1431969642318,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp"}
+0418{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABE3usAAEARGErAqAEiwKgBAfpVADUAMOQoL9MBAAABAAAAAAAABWU3NzY4AWIKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431969642318,"flow_last_seen":1431969642318,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e7768.b.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431969642334,"flow_last_seen":1431969642334,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp"}
+0444{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXAnAAAEAR9LLAqAEiwKgBAeU5ADUAQzJbSPEBAAABAAAAAAAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431969642334,"flow_last_seen":1431969642334,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431969642336,"flow_last_seen":1431969642336,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50026,"dst_port":40002,"l4_proto":"tcp"}
+0413{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5NNAAEAGc8HAqAEiQTffIcNqnEKAlL6TAAAAALAC\/\/\/spQAAAgQFtAEDAwUBAQgKPiKLPAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":1431969642337,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49793,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+t\/gAAEARP0PAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":1431969642337,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49793,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"dsn4.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":1431969642337,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65045,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+EyEAAEAR5BrAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431969642337,"flow_last_seen":1431969642337,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65045,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"dsn4.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0438{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":98,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA1+lUAQEJvL9OBgAABAAEAAAAABWU3NzY4AWIKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAQABBffSSI=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1431969642318,"flow_last_seen":1431969642376,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e7768.b.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.223.73.34"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431969642376,"flow_last_seen":1431969642376,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.223.73.34","src_port":50027,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAw0tAAEAGVKHAqAEiF99JIsNrAbvkkjeSAAAAALAC\/\/9pYAAAAgQFtAEDAwUBAQgKPiKLYwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":1431969642398,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49990,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKxdsAAEARMVTAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":1431969642398,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49990,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst6.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":1431969642398,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57288,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKPqUAAEARuIrAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431969642398,"flow_last_seen":1431969642398,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57288,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst6.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0532{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":166,"pkt":"PBXCt3IO0NQSxnP1CABFAACYAABAAEARtuHAqAEBwKgBIgA15TkAhAy4SPGBgAABAAAAAQAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAHALQAGAAEAAArBADUDbnMxBG1zZnQDbmV0AAZtc25oc3QJbWljcm9zb2Z0wDJ4Gz7uAAAcIAAAA4QAJOoAAAAOEA==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1431969642334,"flow_last_seen":1431969642400,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":67,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0407{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGIPEX30kiwKgBIgG7w2sxgMP95JI3k6ASOJD6qQAAAgQFrAQCCAr301nQPiKLYwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zNJAAEAGSybAqAEiF99JIsNrAbvkkjeTMYDD\/oAQECxRlwAAAQEICj4ii5z301nQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADz+0lAAEAGG\/DAqAEiF99JIsNrAbvkkjeTMYDD\/oAYECz3GAAAAQEICj4ii5z301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0758{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1431969642376,"flow_last_seen":1431969642434,"flow_tot_l4_data_len":339,"flow_min_l4_data_len":32,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.223.73.34","src_port":50027,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apps.skypeassets.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431969642444,"flow_last_seen":1431969642444,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1ldAAEAGhorAqAEinTh+08NsAbvs\/oHsAAAAALAC\/\/9bSwAAAgQFtAEDAwUBAQgKPiKLpgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYZlBN98hwKgBIpxCw2oyvdjRgJS+lKASOJDQnQAAAgQFrAQCCApNl5tJPiKLPAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MzFAAEAGJXDAqAEiQTffIcNqnEKAlL6UMr3Y0oAQECwnRgAAAQEICj4ii75Nl5tJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtY0NAAEAG9STAqAEiQTffIcNqnEKAlL6UMr3Y0oAYECzrYwAAAQEICj4ii75Nl5tJ6smIHyVAovOEKtxMjFHhFE5etiV\/vVw36gjZq5ds6C9zJBux3MBO5ybMZHGD\/6v5\/6TFMnvwoV63","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAAA4WGRAAHYGzoWdOH7TwKgBIgG7w2wloWLk7P6B7ZASIACkPAAAAgQFrAQCCAoZLBplPiKLpg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA00kpAAEAGiqPAqAEinTh+08NsAbvs\/oHtJaFi5YAQ\/\/\/eqAAAAQEICj4ii\/AZLBpl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":160,"pkt":"0NQSxnP1PBXCt3IOCABFAACSMcdAAEAGKsnAqAEinTh+08NsAbvs\/oHtJaFi5YAY\/\/9NyQAAAQEICj4ijAwZLBplFgMBAFkBAABVAwEgtkKG+1toLI7mzUNcQhv4\/5ujub1OOHHUzm\/nOhDVwQAALsAKwAXACcAEwAfAAsAIwAPAFMAPwBPADsARwAzAEsANADkAMwA1AC8ABQAEAAoBAA==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1431969642444,"flow_last_seen":1431969642548,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":32,"flow_max_l4_data_len":126,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0396{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0X1hAAEAGuKDAqAEiF99JIsNrAbvkkjhSMYDD\/oARECxQSQAAAQEICj4ijCr301nQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Q7tAADcGHeZBN98hwKgBIpxCw2oyvdjSgJS+zYAQAB02+wAAAQEICk2Xm2o+Iou+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":164,"pkt":"PBXCt3IO0NQSxnP1CABFAACWQ7xAADcGHYNBN98hwKgBIpxCw2oyvdjSgJS+zYAYAB083AAAAQEICk2Xm2w+Iou+CdMT1UPQKox859yHIz6o0HUYFajlOiLQWTdPoYnrUXixya2Pp2zpzSU+jOImqOecY7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/D1Ks8g=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PI9AAEAGHBLAqAEiQTffIcNqnEKAlL7NMr3ZNIAQECgmBAAAAQEICj4ijEZNl5ts","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86W5AAEAGbyrAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECjBzQAAAQEICj4ijEZNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":1506,"pkt":"PBXCt3IO0NQSxnP1CABFAAXUW3RAAHYGxdmdOH7TwKgBIgG7w2wloWLl7P6CS4AQ\/SBMsgAAAQEIChksGm8+IowMFgMBDm0CAABGAwFVWh9q25\/l6fJ\/H0CETvek1qRdi\/+k+NwdrfjDwigGXyArEwAA62WuwRD8r0UCJjDv\/21psKhSbK3EMkyvcrpjRsAUAAsADLAADK0ABsIwgga+MIIEpqADAgECAhNaAABXr+G5kPxf1sjbAAEAAFevMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBTU0wgU0hBMjAeFw0xNDEwMjcyMjUxMDdaFw0xNjEwMjYyMjUxMDdaMCcxJTAjBgNVBAMMHCouZ2F0ZXdheS5tZXNzZW5nZXIubGl2ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyx0gXDtYT4FDgq1U\/QT4gIqh\/oOwWGgGWr1Rw1pQofkd5Appl7fbVIjBIuJ+PMiYpN1xCoV1HZbm8LArgeHDfsoutcr0hH5rsD6th+v+cZ\/Gp0zo8NL2R606iXfu6X64MlQlCO\/UFzzV4LPDfXvjmXPMa6j593FmA7o9xMkfCYTsoSVSUMNFAU2t8o01SWuCjZYIf4rKo8YKrN0XNh868VsKpWPOf0is1CGHYv+tscgp6dRsSNLEMuMqcjtY2hH3b+XSVViiIbU2Qv8fj9559K777if3lrsPegqawHj5lb\/SF0hqH55segyHJV40HOAoBBNKrXmDFC7xJBy2UTmWzAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQUUTD6bxEALx8wce+ldRcbVOgh+TAwCwYDVR0PBAQDAgSwMB8GA1UdIwQYMBaAFFGvJCac9GgiV4AmKztGYhV7HsylMH0GA1UdHwR2MHQwcqBwoG6GNmh0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL21zaXR3d3cyLmNybIY0aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL21zaXR3d3cyLmNybDBwBggrBgEFBQcBAQRkMGIwPAYIKwYBBQUHMAKGMGh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL21zaXR3d3cyLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTgYDVR0gBEcwRTBDBgkrBgEEAYI3KgEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzADAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMBMAoGCCsGAQUFBwMCMIGfBgNVHREEgZcwgZSCHCouZ2F0ZXdheS5tZXNzZW5nZXIubGl2ZS5jb22CJiouYmV0YS5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tgiUqLmJ5Mi5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tgiUqLnNuMS5nYXRld2F5LmVkZ2UubWVzc2VuZ2VyLmxpdmUuY29tMA0GCSqGSIb3DQEBCwUAA4ICAQCnsc3osHo0VQdHc5SuNwgNZJ8VsGz4eyw1SrNg9wtd7X8dgqG0DxuGBpdklYV1npJ69Mh9pxvTLkelzlqQDQ\/1JCGc1pEMYEeLbjuCppS3YkAcyqQNhIJN8hG7Ed1mdiul2eLg+teOctcRJaHvYA6AG90ICkMWVpiMmukLC+WmFcpurK\/Y","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":86,"pkt":"PBXCt3IO0NQSxnP1CABFAABIW3VAAHYGy2SdOH7TwKgBIgG7w2wloWiF7P6CS4AY\/SAgLQAAAQEIChksGm8+IowMMUuJaVUXCwA66lzZMRkm0xM\/nV8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0anpAAEAG8nPAqAEinTh+08NsAbvs\/oJLJaFomYAQ\/\/\/YHwAAAQEICj4ijF0ZLBpv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":1506,"pkt":"PBXCt3IO0NQSxnP1CABFAAXUXR9AAHYGxC6dOH7TwKgBIgG7w2wloWiZ7P6CS4AQ\/SBcLgAAAQEIChksGng+IoxdUYsZAArswT+sVYDe4\/s+octFa5f5NraUxxncYJ0H1DXox59A2Fq5VISuVN85wP2CCUyU9Jri0W12MS8UHhofDtCC\/aeGWq+l6J+nD16R4eDapUlNB52CJOmfvVeyYhEr\/aSkyh+x5qntiHPmxNL4oQ4t9q9cRGg37NGw4W3v7gKUqZA7GOEtfs7ndzQKvfITYRFhRXtB+Geyc8SVWiWlBbePlt40Z9Mwm7DPu0JToThROvr07EpvaNHsDj+sfl4\/ssqhJPAoVfz0wWGwi\/ByYUJT0t+8BVptm\/HAUYoi\/0PQFRMfymq9Y999sgymNr6YwPYzcm66fQL57hVd+E\/NpGuAwv\/j4I98bfIb7cS26RkUtr41mvTduUpwXz6HZnONvg3rFQ55MtL0jpv\/5T2PNTkmAFhF5Csuvsme4bvtShQRBEmXn48raUgx6y\/5XH7Pm2hyngLVzMnjf+Ej0KsCBNhIlshCh7AABeUwggXhMIIEyaADAgECAgQHJ6pHMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTQwNTA3MTcwNDA5WhcNMTgwNTA3MTcwMzMwWjCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgU1NMIFNIQTIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDR6DendopwSxnwIDcJJDd\/6vt45gW6aq1OJw38cmrZbCHEZBGVcxAKXCV7iGyUBP3H26573EoIsz4W8dCt2zBt1xoeUrU98EcZA+J9pr1XEz9U6jqjsXf8QvBjSWqRgC4wScCK6yuv\/jrrB10G9+n9hA6RvQkgKehuXQnOFdPn79tQ60TvGFerBB28Mfn3eyoTz9E9Ua8bxbV757D8U7ua52PeQTO2RyRpXbhGp\/+tq99PenglJyEmNMoCbjdR8O1YGmCU9sST2N0wJCXXHOsZlDVdk7KuqimDc8R0WQVSZ53aZ1E5BTo26vIedisUruw9+RSZiwduvOcMVt6svq7bdTKQnmO9dL\/gCsr4NJZnhM3RQjh4x5m2DM62D+kby\/RZvhEOyywyyPqDKWR5PItL8DJ0bPOTuJZrXVdaaMHMDHmKGd71SQJeCIABiQwyzdLWltVLoPPsv6v0fbOhuXzaTtflt6y58iVfAcuMlqgorsEzWvY\/CJDc6\/852CbIEp0cmqqpwBaOhu1nUpYAfw2SPT3ZcDbl6kJvH66V5Vtd+NA6x9Ted4bQ\/J5O4uK4qWg3CcQ544W4ifMfbrdtH0ovGAlv3koBjxTJt6bup2OfM6RUfEKDaLil37\/suRpdEzvZrWj9IApVkSFk+dcTAaAIXVmJG0SvpKzHBRD6QUqo+wIDAQABo4IBezCCAXcwEgYDVR0TAQH\/BAgwBgEB\/wIBADBgBgNVHSAEWTBXMEgGCSsGAQQBsT4BADA7MDkGCCsGAQUFBwIBFi1odHRwOi8vY3liZXJ0cnVzdC5vbW5pcm9vdC5jb20vcmVwb3NpdG9yeS5jZm0wCwYJKwYBBAGCNyoBMEIGCCsGAQUFBwEBBDYwNDAyBggrBgEFBQcwAYYmaHR0cDovL29jc3Aub21uaXJvb3QuY29tL2JhbHRpbW9yZXJvb3QwDgYDVR0PAQH\/BAQDAgGGMCcGA1UdJQQgMB4GCCsGAQUF","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1477{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+1173{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":14,"flow_packet_id":9,"flow_first_seen":1431969642444,"flow_last_seen":1431969642708,"flow_tot_l4_data_len":4096,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":455,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.gateway.messenger.live.com,*.beta.gateway.edge.messenger.live.com,*.by2.gateway.edge.messenger.live.com,*.sn1.gateway.edge.messenger.live.com","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"5e4e5596180ebd0ac0317125ee490707","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2","issuerDN":"CN=*.gateway.messenger.live.com","fingerprint":"95:C4:07:41:85:D4:EF:AA:D9:1F:0F:1F:3C:08:BF:8E:8B:D0:90:51"}}
+0400{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08wdAAEAGaebAqAEinTh+08NsAbvs\/oJLJaFxV4AQ\/\/\/PCwAAAQEICj4ijKoZLBp4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":173,"pkt":"0NQSxnP1PBXCt3IOCABFAACfLVVAAEAGLy7AqAEinTh+08NsAbvs\/oJLJaFxV4AY\/\/8rtQAAAQEICj4ijLYZLBp4FgMBAGYQAABiYQSjw7rH0spJ7j8GLYCMheRZGMxZ3\/fgvwjIxHOMZDyj1laQGsIe8lJQFXSsShMnTlSuvrtrEr4fnpODoiXtT2hGPxMrjRFBdsir\/yXczKkdYM+WfvMDNhZibmcCg77lKAQ=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADz0jBAAEAGRQnAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECz1pAAAAQEICj4ijQ\/301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431969642969,"flow_last_seen":1431969642969,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49903,"dst_port":53,"l4_proto":"udp"}
+0403{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969642,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6a7MAAEARi4zAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431969642969,"flow_last_seen":1431969642969,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49903,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"ui.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0397{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ZFRAAHYGwpmdOH7TwKgBIgG7w2wloXFX7P6CtoAQ\/LXRwAAAAQEIChksGpY+Ioy2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":125,"pkt":"0NQSxnP1PBXCt3IOCABFAABvm8pAAEAGwOjAqAEinTh+08NsAbvs\/oK2JaFxV4AY\/\/\/bRAAAAQEICj4ijdQZLBqWFAMBAAEBFgMBADDh1P2DFckZhZIzor4Rd7jotjMfxJZ2UzpT6K+Q5gEAtsfbN\/CWzx7cD1P81jQ1G+s=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431969643037,"flow_last_seen":1431969643037,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp"}
+0419{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABEXycAAEARmA7AqAEiwKgBAcqnADUAMDQMD6ABAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431969643037,"flow_last_seen":1431969643037,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0410{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjuUAAEARaFTAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZzYAAEARkAPAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":98,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA1yqcAQLnbD6CBgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAgABBfOIaY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1431969643037,"flow_last_seen":1431969643092,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}}
+0483{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":125,"pkt":"PBXCt3IO0NQSxnP1CABFAABvZhBAAHYGwKKdOH7TwKgBIgG7w2wloXFX7P6C8YAY\/HoykQAAAQEIChksGp0+Io3UFAMBAAEBFgMBADAEIZ9QnHrxVn\/WY8oun0Tyt3xxzcNsOk\/T+WDRxQ8\/8kzjS7L\/TKzBpAcOCtF1Dsw=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EOJAAEAGTAzAqAEinTh+08NsAbvs\/oLxJaFxkoAQ\/\/\/MiAAAAQEICj4ijicZLBqd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1431969643093,"flow_last_seen":1431969643093,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50029,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAi9JAAEAGs6fAqAEiF84hpsNtAbuewXptAAAAALAC\/\/+RHQAAAgQFtAEDAwUBAQgKPiKOJwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ThhAAEAGCoHAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECi\/vwAAAQEICj4ijlRNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7w20Yoc3insF6bqASOJBNnAAAAgQFrAQCCArsLkk6PiKOJwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z0xAAEAGcDnAqAEiF84hpsNtAbuewXpuGKHN44AQECyklQAAAQEICj4ijlTsLkk6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtyndAAEAGdFXAqAEiF84hpsNtAbuewXpuGKHN44AYECz6mwAAAQEICj4ijlXsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1431969643093,"flow_last_seen":1431969643140,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50029,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apps.skype.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0415{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDNYcAAEARwa\/AqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABD3H8AAEARGrfAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7eVIAAEARfezAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7NGoAAEARwtTAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+gSAAAEARdhvAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+7pYAAEARCKXAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzKeRAAEAG7VXAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzzhQAAAQEICj4ijy7301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtA4pAAEAGO0PAqAEiF84hpsNtAbuewXpuGKHN44AYECz5TAAAAQEICj4ij6TsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK1twAAEARIFPAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKJUgAAEAR0efAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1431969643944,"flow_last_seen":1431969643944,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50030,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYXlAAEAG9xvAqAEiQTffIcNuAbtcUOQ7AAAAALAC\/\/9\/kQAAAgQFtAEDAwUBAQgKPiKRcAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtWwFAAEAG48vAqAEiF84hpsNtAbuewXpuGKHN44AYECz3dgAAAQEICj4ikXrsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431969643971,"flow_last_seen":1431969643971,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60288,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLW5oAAEARm5TAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431969643971,"flow_last_seen":1431969643971,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60288,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431969643972,"flow_last_seen":1431969643972,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57726,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969643,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLe5YAAEARe5jAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431969643972,"flow_last_seen":1431969643972,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57726,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0408{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sH5AAEAGqBrAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECi8awAAAQEICj4ikahNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6xBwAAEARMyPAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXA0AAEARmyzAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAi\/oAAEARaz\/AqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYZlBN98hwKgBIgG7w24uYYHqXFDkPKASOJC9NAAAAgQFrAQCCApNl5zhPiKRcAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0M2pAAEAGJTfAqAEiQTffIcNuAbtcUOQ8LmGB64AQECwTyAAAAQEICj4ikgdNl5zh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8AA9AAEAGWErAqAEiQTffIcNuAbtcUOQ8LmGB64AYECw27QAAAQEICj4ikgdNl5zhgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIA\/5AVyuzDhnvc8fYrzCNk2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HOpAADcGRLdBN98hwKgBIgG7w24uYYHrXFDkhIAQAB0jbgAAAQEICk2XnQI+IpIH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPGr1AAEAGPcnAqAEiQTffIcNuAbtcUOSELmGB64AYECznbAAAAQEICj4ikoZNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzMdBAAEAG5WnAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzwEQAAAQEICj4ikqL301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDbaEAAEARiZXAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDF2AAAEAR39bAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7zZ4AAEARKaDAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7iAcAAEARbzfAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+yrYAAEARLIXAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+nFwAAEARWt\/AqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKsTcAAEARRfjAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKbB0AAEARixLAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtFHNAAEAGKlrAqAEiF84hpsNtAbuewXpuGKHN44AYECz0kgAAAQEICj4ilF7sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969644,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPpolAAEAGsfzAqAEiQTffIcNuAbtcUOSELmGB64AYECzlFgAAAQEICj4ilNxNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969645,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLYFYAAEARltjAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969645,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtroAAEARQHTAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969645,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6Gi0AAEAR3RLAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+1170{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":14,"flow_packet_id":255,"flow_first_seen":1431969642444,"flow_last_seen":1431969645445,"flow_tot_l4_data_len":121993,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":478,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.gateway.messenger.live.com,*.beta.gateway.edge.messenger.live.com,*.by2.gateway.edge.messenger.live.com,*.sn1.gateway.edge.messenger.live.com","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"5e4e5596180ebd0ac0317125ee490707","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2","issuerDN":"CN=*.gateway.messenger.live.com","fingerprint":"95:C4:07:41:85:D4:EF:AA:D9:1F:0F:1F:3C:08:BF:8E:8B:D0:90:51"}}
+0408{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969645,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8dsVAAEAG4dPAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECi2iwAAAQEICj4il4hNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969645,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPSzBAAEAGDVbAqAEiQTffIcNuAbtcUOSELmGB64AYECzhMQAAAQEICj4imMFNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969645,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADziCFAAEAGjxjAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzp8QAAAQEICj4imML301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969646,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtlxVAAEAGp7fAqAEiF84hpsNtAbuewXpuGKHN44AYECzvkgAAAQEICj4imV7sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969646,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLd2AAAEARf87AqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969646,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLNJ0AAEARwpHAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwAYAAEARNzPAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVfwAAEARoT3AqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABD8U8AAEARBefAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDG4wAAEAR26rAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7BP4AAEAR8kDAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7M8EAAEARw33AqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+y0UAAEARK\/bAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+F64AAEAR343AqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPO3lAAEAGHQ3AqAEiQTffIcNuAbtcUOSELmGB64AYECzaMAAAAQEICj4in8JNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK\/BoAAEAR+xTAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969647,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKCvMAAEAR7DzAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6q30AAEARS8LAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431969648258,"flow_last_seen":1431969648258,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp"}
+0760{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":333,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE\/AooAAAQRAYTAqAD+7\/\/\/+gQBB2wBK+71Tk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cG5wOnJvb3RkZXZpY2UNCg0K","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431969648258,"flow_last_seen":1431969648258,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0783{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":351,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFRAosAAAQRAXHAqAD+7\/\/\/+gQBB2wBPQhzTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K","pkt_caplen":351,"pkt_type":2048,"pkt_ipoffset":14}
+0855{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":405,"pkt":"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","pkt_caplen":405,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":397,"pkt":"AQBef\/\/6oPPBbTu2CABFAAF\/Ao0AAAQRAUHAqAD+7\/\/\/+gQBB2wBawDYTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6TGF5ZXIzRm9yd2FyZGluZzoxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDE6OnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6TGF5ZXIzRm9yd2FyZGluZzoxDQoNCg==","pkt_caplen":397,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":327,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE5Ao4AAAQRAYbAqAD+7\/\/\/+gQBB2wBJULdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLVdBTkRldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K","pkt_caplen":327,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":369,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFjAo8AAAQRAVvAqAD+7\/\/\/+gQBB2wBT72wTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5EZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6V0FORGV2aWNlOjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":347,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFNApEAAAQRAW\/AqAD+7\/\/\/+gQBB2wBOS6hTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KDQo=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA801JAAEAGhUbAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECirkwAAAQEICj4iooBNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtrDhAAEAGkpTAqAEiF84hpsNtAbuewXpuGKHN44AYECzmWgAAAQEICj4iopbsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":393,"pkt":"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","pkt_caplen":393,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969648,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADz9gZAAEAGITPAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzeeAAAAQEICj4ipDv301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969649,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLCHYAAEAR7rjAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969649,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLh8wAAEARb2LAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1431969649862,"flow_last_seen":1431969649862,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.170.46","dst_ip":"192.168.1.34","src_port":443,"dst_port":49445,"l4_proto":"tcp"}
+0774{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969649,"pkt_len":343,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCUdAADQGY89soKouwKgBIgG7wSW4YeeiqCbN0IAYAEgh+QAAAQEICmF6dG0+IfU9FwMBARD7Uh6I13FzmcC+6gIV5n6AJhrBsHNwxcug1X4hBQozb5rifdWfxFgx5N7\/STRCna2lXcJzFlsdHwFqwb5pWB6kc7KLSFtZJ1+xqs\/LWpjXKXVYWA3FemYFVDyRXOngCpgT23pGW6q+fdoixXKwG46vp4NCAhC8D9JiN3KitsOr260NevBFtGudn3qUJfX\/3DhGLatA0j+U2CwrLM6DTOg9xpgfiq+azd0+zhMP0HAm0WOjBrmnGfTNcgHh+iJmkjL5sJ7TuSOU5HIOWUg6nL2f38I4\/Fmt1UsWozkMatK9FYjzbVIEXXgeh7hu8fTbVAUDu9Avc4N0XIcK0QG830wTIghFDiessVKi+sWFRr4k9g==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969649,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05cZAAEAGfGTAqAEibKCqLsElAbuoJs3QuGHot4AQD\/f34wAAAQEICj4iqE1henRt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1698{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969649,"pkt_len":1020,"pkt":"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","pkt_caplen":1020,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CUhAADQGZONsoKouwKgBIgG7wSW4Yei3qCbRioAQAEwDoAAAAQEICmF6dKA+IqhP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAT\/YAAEARp0PAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIHEAAEAR1sjAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDLuoAAEARyEzAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABD51QAAEARD+LAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7wiQAAEARNRrAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7OqsAAEARvJPAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+sMAAAEARRnvAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+JgIAAEAR0TnAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKntMAAEARWFzAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969650,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKmIUAAEARXqrAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969651,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPQKpAAEAGF9zAqAEiQTffIcNuAbtcUOSELmGB64AYECzM9wAAAQEICj4irPtNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969651,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6Cj0AAEAR7QLAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969651,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtGdtAAEAGJPLAqAEiF84hpsNtAbuewXpuGKHN44AYECzY8QAAAQEICj4ir\/\/sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969652,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQykAAEARtAXAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969652,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQawAAEARtYLAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431969652367,"flow_last_seen":1431969652367,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0412{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969652,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+qlYAAEARtuTAqAEiQAQXpjLdnFYAKjPsm5AC0vz7eA6m1WQz3XSdSXIE0xPsZ0Mgdb244ufZVMBp9g==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431969652367,"flow_last_seen":1431969652367,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0658{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzP99AAEAG11rAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECzNsAAAAQEICj4itQP301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0404{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4KG4AAEARcKrAqAEinTeCmzLdnFQAJDcMm5ICyNK5iZjkkcxv0MQR2rwmgaeyTFibCj82iA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0404{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6eUkAAEARgjTAqAEib91NjjLdnFcAJt55m5QCPbPKJuLeDOim50Iw20p93HTUvcQYvwIjUtlP","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0414{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/jgcAAEARcPDAqAEib91KDzLdnFgAK3qlm5YCVGMQ34A4D4rgbT25j64U\/rdJx+5zd3Em6+QXhoxyxA8=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0404{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5a+4AAEARkvDAqAEib91KLjLdnFsAJRNlm5gCrA8YBMpkQAilpoWSkSOFSSJ7mpap5i7P8hQ=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0397{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0K\/cAAEARbLHAqAEiQTffDzLdnFoAIDycm5oCpFKxpTcQMqT3s1qudFIeHwatW0Yo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0408{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969653,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cW5AAEAG5yrAqAEiQTffIcNqnEKAlL7NMr3ZNIAYECiWawAAAQEICj4it6hNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0400{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969654,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2YJcAAEARmtjAqAEib91NoDLdnFwAInstm5wC0d61W0FRabgFV8W1nkBP2OEpO4vgeHY=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0412{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969654,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYWsAAEARhiPAqAEinTg0HDLdnEkALM83m54CE+gbUNd25CDT9n3foWmJBdcqOFnduxapZrLe74dYiza3","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0412{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969654,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwK8AAEARb0vAqAEinTfrsDLdnFYALGUnm6AC1ZExgfTg8R8Kk2ngcBhiodhOGddomI+8IvUKr50t+FQG","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0401{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969654,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2ttcAAEARMM7AqAEinTg0DzLdnFsAIgnVm6IClklzvpwg0J9RRu2barB5pBf+dP\/198s=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0404{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969654,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6uggAAEARpzfAqAEiQAQXpTLdnFQAJvWzm6QCh3CXl6XGrqArz4Fq72vdiruIePdvscfnf8nL","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":1431969655399,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.150","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0413{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969655,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+KmIAAEARBSXAqAEi1cezljLdnEQAKk92m6YCxHNRXNt6saUbXJuaVxAVloiUB3Kd06UQ7eXoZ8Yw\/Q==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":1431969655399,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":1431969655399,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0396{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969655,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAysnAAAEARTIvAqAEib91KGDLdnEEAHsG9m6gCfNYVHSc6jWjicVy5t1mw5NpUpQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":1431969655399,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0408{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969655,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9FyIAAEAR57bAqAEib91KMDLdnEgAKadmm6oC656jqkVeUmOjjlOF7oTonkHhDKTP6NWeDWkwfWY5","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0405{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969655,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4PBwAAEARwsfAqAEib91KKjLdnFgAJKhzm6wCYALzkzdu\/LrNPcT4NWmc+JYpVJ3L9m5YbQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0401{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969655,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1xDsAAEARa1jAqAEi1cezkjLdgQkAIXwbm64C\/E7GKHTAnqTXhScHNyy9JU+1q7MSwg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0408{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yZkAAEARz2bAqAEinTeCrzLdnEYAKHoim7AC0Uz4eUhtRx+U2n96ruKge0mKrTm6r7jfF82JDy4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.162","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0412{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+lOIAAEARTinAqAEinTc4ojLdnEQAKlJUm7IC63nFT7uUV5k0L358bPvax6aIijF38KySzDuXwNYHgA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.162","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0405{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA43x4AAEARCHPAqAEinTg0ITLdnEsAJM3am7QChNdFtOWmIsBdiMlrk7loIt\/AHz17BjRqJg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.172","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0414{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAA\/QAAEAR92XAqAEib91NrDLdnEoALEKJm7YClKE3lTfT0DUQisSOS4KG\/La+hJBP5DfxaCwxffHTvFZU","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.172","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0400{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1zB8AAEARzPbAqAEinTeCoDLdnF0AIXcUm7gCbIFVwo6Azkv+1yCNquXcTTuKbOiUHg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":1431969656652,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1052{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":1431969656652,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":1431969656652,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1048{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969656,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431969656652,"flow_last_seen":1431969656652,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":1431969657029,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1052{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISvf0AAEAR+NnAqAFc\/\/\/\/\/0RcRFwB\/v9VeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":1431969657029,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":1431969657029,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1048{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISJhIAAEARzh3AqAFcwKgB\/0RcRFwB\/jyueyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431969657029,"flow_last_seen":1431969657029,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50032,"dst_port":40032,"l4_proto":"tcp"}
+0414{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGANAAEAGj4bAqAEinTg0LMNwnGCx3l8+AAAAALAC\/\/8vJgAAAgQFtAEDAwUBAQgKPiLFlwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50033,"dst_port":40015,"l4_proto":"tcp"}
+0414{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2l9AAEAGyKzAqAEinTc4qsNxnE+r6BKEAAAAALAC\/\/99aQAAAgQFtAEDAwUBAQgKPiLFlwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50034,"dst_port":40033,"l4_proto":"tcp"}
+0415{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwhRAAEAGlxXAqAEinTeCjMNynGH\/hzWiAAAAALAC\/\/+8tgAAAgQFtAEDAwUBAQgKPiLFlwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0413{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/NlsAAEARxRrAqAEib91NkTLdnFsAK6mBm7oCyq7Iy7cmxwvThWDRoZOMl0+28C1BuPbRnMjSw2j4JUc=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0401{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA27UQAAEARdBjAqAEiQAQXjDLdnEwAIlR2m7wC9vRcAIihDfXYF+Nv6Z8h\/1gxupEorwc=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.150","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0404{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4fm8AAEAR4uHAqAEiQAQXljLdnEQAJKG2m74ChlnucS6od9D4320Ts5x3xY96lsRHLX7REg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.150","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":1431969657368,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.25","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0397{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0lqwAAEARaEzAqAEib91KGTLdnFwAIDPbm8ACFZDv7jAw6LF020D2sIW\/RLlBE6QH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":1431969657368,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":1431969657368,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.153","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0405{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5GS4AAEAR4kXAqAEib91NmTLdnFgAJQIPm8ICkS16B313b791pcC\/iQ60uf4KWNmYdYf5eCQ=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":1431969657368,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.153","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0396{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EVBAAEAGR1HAqAEiQTffIcNqnEKAlL7VMr3ZNIARECjsdAAAAQEICj4ixcxNl5ts","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H49AAEAGORLAqAEiQTffIcNuAbtcUOSfLmGB64ARECzffQAAAQEICj4ixcxNl50C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYi6dN4KMwKgBIpxhw3JnDsNv\/4c1o6ASOJAm+AAAAgQFrAQCCApOvfTqPiLFlwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z75AAEAGiXfAqAEinTeCjMNynGH\/hzWjZw7DcIAQECx9oAAAAQEICj4ixhlOvfTq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":162,"pkt":"0NQSxnP1PBXCt3IOCABFAACUXXdAAEAG+17AqAEinTeCjMNynGH\/hzWjZw7DcIAYECyOeQAAAQEICj4ixhlOvfTqmgPFoGNvmttu17SSx27DN0FnIgPIdkEujgkI9UxBABGXtsfa6cT2IT4xj5vBwO6MGkMYqcb\/pMUye\/ChXrf8PUqzyJn2b1S1YuugkY4nrC16I3iJJt8EpZJbUIG+l1wd","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBCdNziqwKgBIpxPw3E+7utRq+gShaASOJAwmQAAAgQFrAQCCApNea1+PiLFlwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wcBAAEAG4VfAqAEinTc4qsNxnE+r6BKFPu7rUoAQECyHNAAAAQEICj4ixiZNea1+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABzkndAAEAGEGLAqAEinTc4qsNxnE+r6BKFPu7rUoAYECx1PQAAAQEICj4ixiZNea1+5vVxrX76d82rgTASGZpaWE0S7\/lCVZONEASv82fBHTwrvUzATCY92YORcYJnDajjtWLroJGOJ6wteiN4iSbf","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIpxgw3AfJGVIsd5fP6ASOJAHOgAAAgQFrAQCCApMZC+DPiLFlwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04EdAAEAGx03AqAEinTg0LMNwnGCx3l8\/HyRlSYAQECxdkgAAAQEICj4ixmlMZC+D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":175,"pkt":"0NQSxnP1PBXCt3IOCABFAAChEsRAAEAGlGTAqAEinTg0LMNwnGCx3l8\/HyRlSYAYECzqEQAAAQEICj4ixmlMZC+Dh0to2qYboIadJIPjU5nsQLsFLQnwN7cbNuOqHu4uRdN1I1mopcbFq78KyvPnKKOzCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/A==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0NnlAADcGK72dN4KMwKgBIpxhw3JnDsNw\/4c2A4AQAB2NLwAAAQEICk699Qo+IsYZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":138,"pkt":"PBXCt3IO0NQSxnP1CABFAAB8NnpAADcGK3SdN4KMwKgBIpxhw3JnDsNw\/4c2A4AYAB3YVQAAAQEICk699Qs+IsYZlYPUs9F12mkMgpadxbNt8pg3v+ke42W4cyp4XIDaqzW2AuxNxheCt2VUeuTPemoLDdoD2GmGv2SF8juwYR53vP0Kc4hZti8U","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0hk5AAEAG0ufAqAEinTeCjMNynGH\/hzYDZw7DuIAQECl8VgAAAQEICj4ixp1OvfUL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QspAAEAGFmTAqAEinTeCjMNynGH\/hzYDZw7DuIAYECnjpQAAAQEICj4ixp1OvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABP88BAAEAGZMXAqAEiQTffIcNuAbtcUOSELmGB64AZECyzTgAAAQEICj4ixqNNl50CTMAH1SL8QvONeRpYBso+\/QJCoz9WFRyG\/xRs","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0RvBAADMGaSidNziqwKgBIpxPw3E+7utSq+gSxIAQAB2W4AAAAQEICk15raI+IsYm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":125,"pkt":"PBXCt3IO0NQSxnP1CABFAABvRvFAADMGaOydNziqwKgBIpxPw3E+7utSq+gSxIAYAB2RtAAAAQEICk15raI+IsYm4lwJ5ge5wMALMNxV+zSSt83It8u+Ei0iJt3K2s\/GC6u4m1MrA9Wr0MYeFbMep6N0+AmmX4QlEtvQAT4=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VRFAAEAGTgfAqAEinTc4qsNxnE+r6BLEPu7rjYAQECqGCwAAAQEICj4ixrNNea2i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/FRAAEAGprvAqAEinTc4qsNxnE+r6BLEPu7rjYAYECq51wAAAQEICj4ixrRNea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Sv5AADMGaZedODQswKgBIpxgw3AfJGVJsd5frIAQAB1tAAAAAQEICkxkL7c+IsZp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7Sv9AADMGaU+dODQswKgBIpxgw3AfJGVJsd5frIAYAB2zMgAAAQEICkxkL7k+IsZpYbAXlTB0kxlxib\/jan9ZZ0HQSDVpexbXhCIwvEny2kC84IojgVuCnmSC6zngUx75lo\/01QILQLEuR0xNGkMYqcb\/pMUye\/A=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VMlAAEAGUszAqAEinTg0LMNwnGCx3l+sHyRlkIAQEClb2gAAAQEICj4ixzpMZC+5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969657,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8X2JAAEAGSCvAqAEinTg0LMNwnGCx3l+sHyRlkIAYECltgQAAAQEICj4ixzpMZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88jpAAEAGZvPAqAEinTeCjMNynGH\/hzYDZw7DuIAYECnhlQAAAQEICj4iyK1OvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8EC9AAEAGkuHAqAEinTc4qsNxnE+r6BLEPu7rjYAYECq3pwAAAQEICj4iyORNea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50035,"dst_port":40021,"l4_proto":"tcp"}
+0414{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQSRAAEAGrlLAqAEi1cezr8NznFXnJeTHAAAAALAC\/\/+4YAAAAgQFtAEDAwUBAQgKPiLJgQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.38","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0398{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QmIAAEARVi\/AqAEiQTffJjLdnE8AIJ1Im8QCCqRVDPPz90033q\/EDoSNqvvC54ua","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0412{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+eZEAAEARtmzAqAEinTfrrzLdnEgAKiUSm8YCMvX5DXLyjY07d4zs9r3Rfjeqbt6RlQe5nLyOBDZmjA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40002,"l4_proto":"udp"}
+0413{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+H6wAAEAReNbAqAEiQTffKzLdnEIAKjdVm8gCRata2g4WRHPEL7\/NhH8e4p0ZaFQg5mWNPjrWv1AvJA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40002,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0404{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4T0EAAEARk9HAqAEinTc4oTLdnEwAJGHem8oC2K8VAwXZ2I4FcvndU1pGdzS9eSLWH0xc+w==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.17","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0404{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4VhMAAEARqOnAqAEib91KETLdnFYAJFy+m8wCfUg82Gg6DnsozSUd0tlDoiZPS7EFljPm7g==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0409{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIpxVw3Nt\/WNx5yXkyKASOJA3OAAAAgQFrAQCCApO2zlGPiLJgQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kRFAAEAGXnHAqAEi1cezr8NznFXnJeTIbf1jcoAQECyOCgAAAQEICj4iydlO2zlG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABkvFZAAEAGMvzAqAEi1cezr8NznFXnJeTIbf1jcoAYECzdMwAAAQEICj4iydlO2zlGUyU7cFcUPq3639jExXXe2rp6QwLRh9WNc6p+6woeVCkt2aXhyDUzLR\/RObUkbNHR","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtta9AAEAGiR3AqAEiF84hpsNtAbuewXpuGKHN44AYECy+6QAAAQEICj4iygfsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Wi5AADgGnVTVx7OvwKgBIpxVw3Nt\/WNy5yXk+IAQAB2d0wAAAQEICk7bOVw+IsnZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":122,"pkt":"PBXCt3IO0NQSxnP1CABFAABsWi9AADgGnRvVx7OvwKgBIpxVw3Nt\/WNy5yXk+IAYAB19LgAAAQEICk7bOV4+IsnZ3N0WLF0319oAwF8N9nmTqrf5u7NmHFqrn8impte659IIWu54KIxLF4am65Hh2I\/hHN1qU+g5Fg8=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Gy9AAEAG1FPAqAEi1cezr8NznFXnJeT4bf1jqoAQECqNRwAAAQEICj4iyh5O2zle","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yIxAAEAGJu7AqAEi1cezr8NznFXnJeT4bf1jqoAYECrpyQAAAQEICj4iyh5O2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JSJAAEAGyljAqAEi1cezr8NznFXnJeT4bf1jqoAYECroDwAAAQEICj4iy9hO2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431969658978,"flow_last_seen":1431969658978,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50036,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAyihAAEAG3WDAqAEinTg0LMN0AbuAxvN6AAAAALAC\/\/9gYQAAAgQFtAEDAwUBAQgKPiLL2QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431969658979,"flow_last_seen":1431969658979,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50037,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAnpdAAEAGBHXAqAEinTc4qsN1AbtlArMMAAAAALAC\/\/+4FQAAAgQFtAEDAwUBAQgKPiLL2QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431969658979,"flow_last_seen":1431969658979,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50038,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969658,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABACelAAEAGT0HAqAEinTeCjMN2AbvInJj+AAAAALAC\/\/8kpgAAAgQFtAEDAwUBAQgKPiLL2QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GolAAEAGPqXAqAEinTeCjMNynGH\/hzYDZw7DuIAYECnePwAAAQEICj4izANOvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kv1AAEAGFJDAqAEinTg0LMNwnGCx3l+sHyRlkIAYEClolAAAAQEICj4izCdMZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYi6dN4KMwKgBIgG7w3aulZl7yJyY\/6ASOJBvwQAAAgQFrAQCCApOvfZ9PiLL2QEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":64,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0l91AAEAGwVjAqAEinTeCjMN2AbvInJj\/rpWZfIAQECzGaQAAAQEICj4izFtOvfZ9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":64,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8xd1AAEAGkxDAqAEinTeCjMN2AbvInJj\/rpWZfIAYECzJ7wAAAQEICj4izFtOvfZ9gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDTaLmWj\/TVAgtAsS5HTE0a","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBCdNziqwKgBIgG7w3W+IGdaZQKzDaASOJBudwAAAgQFrAQCCApNea8RPiLL2QEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":63,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0v5BAAEAG44fAqAEinTc4qsN1AbtlArMNviBnW4AQECzFDgAAAQEICj4izGxNea8R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":63,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8REFAAEAGXo\/AqAEinTc4qsN1AbtlArMNviBnW4AYECxHFAAAAQEICj4izGxNea8RgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBDGKnG\/6TFMnvwoV63\/D1K","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8milAAEAGCOfAqAEinTc4qsNxnE+r6BLEPu7rjYAYECq0EQAAAQEICj4izHpNea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIgG7w3TcDZ\/TgMbze6ASOJA\/bQAAAgQFrAQCCApMZDEWPiLL2QEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0y0dAAEAG3E3AqAEinTg0LMN0AbuAxvN73A2f1IAQECyVyAAAAQEICj4izKhMZDEW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":62,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8knZAAEAGFNfAqAEinTg0LMN0AbuAxvN73A2f1IAYECyXTgAAAQEICj4izKhMZDEWgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICzyJn2b1S1YuugkY4nrC16","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":64,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0b+FAADcG8lSdN4KMwKgBIgG7w3aulZl8yJyZR4AQAB3WEAAAAQEICk699p0+Isxb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":64,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMea9AAEAG327AqAEinTeCjMN2AbvInJlHrpWZfIAYECxkFwAAAQEICj4izNhOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":63,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0yG1AADMG56qdNziqwKgBIgG7w3W+IGdbZQKzVYAQAB3UsAAAAQEICk15rzY+Isxs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":63,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6JbJAAEAGfSDAqAEinTc4qsN1AbtlArNVviBnW4AYECzzfAAAAQEICj4izPlNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAcP8AAEARhjrAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAB8QAAEAR73XAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0401{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3kJUAAEARCA3AqAEiQTffEjLdgQkAIzBxm84CB+tg2yEaM9\/bL8TBCQEYokW3ou6uIFeA","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40005,"l4_proto":"udp"}
+0416{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBYQoAAEAROAbAqAEinTeCmjLdnEUALTFnm9ACrELw0MyN5alTGXUohI4skjQwNKD1mI1L+u5IA2eq73xPAw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40005,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0404{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5DEcAAEARjD7AqAEiQTffLTLdnEwAJedsm9ICSKWpAVcx8I7JZ8adPdtcTNxD1Y7ygdStLzI=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0396{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyadkAAEARfcfAqAEinTg0GDLdnEEAHr+2m9QCPz6lPkIa5+HaiHK3kAac8KWOvw==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.45","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0400{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1BWcAAEAR4iHAqAEinTg0LTLdnEwAIdjym9YCeMy7FyJwEm6ud1zY3LUeAZMSqKDeqQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.45","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0397{"flow_id":62,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rp5AADMGBfedODQswKgBIgG7w3TcDZ\/UgMbzw4AQAB2lWgAAAQEICkxkMUs+Isyo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":62,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABimbtAAEAGDazAqAEinTg0LMN0AbuAxvPD3A2f1IAYECwISQAAAQEICj4izXpMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDMrcAAEARxH\/AqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDHhYAAEAR2SDAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aKRAAEAGhtbAqAEi1cezr8NznFXnJeT4bf1jqoAYECrlZQAAAQEICj4izoJO2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7760AAEARB5HAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA73OUAAEARGlnAqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+cbQAAEARhYfAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+VqEAAEARoJrAqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKEx4AAEAR5BHAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKunYAAEARPLnAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":64,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMiXhAAEAGz6XAqAEinTeCjMN2AbvInJlHrpWZfIAYECxiBQAAAQEICj4izupOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":63,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6qmRAAEAG+G3AqAEinTc4qsN1AbtlArNVviBnW4AYECzxPwAAAQEICj4izzZNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431969659988,"flow_last_seen":1431969659988,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50039,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969659,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwnVAAEAGLQHAqAEi1cezr8N3Abvoukp8AAAAALAC\/\/\/lagAAAgQFtAEDAwUBAQgKPiLPxAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIgG7w3fqOPcW6LpKfaASOJBSzgAAAgQFrAQCCApO2zrZPiLPxAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0KCpAAEAGx1jAqAEi1cezr8N3Abvoukp96jj3F4AQECyptwAAAQEICj4i0AVO2zrZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB813pAAEAGF8DAqAEi1cezr8N3Abvoukp96jj3F4AYECzrfQAAAQEICj4i0AVO2zrZgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICLwDGux8zNmsOYKUZ\/JEWy","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":70,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zf5AADgGKYTVx7OvwKgBIgG7w3fqOPcX6LpKxYAQAB25bQAAAQEICk7bOuo+ItAF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":70,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABm3+1AAEAGD2PAqAEi1cezr8N3AbvoukrF6jj3F4AYECxgUQAAAQEICj4i0EdO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6BEgAAEAR8vfAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TkFAAEAGWUzAqAEinTg0LMNwnGCx3l+sHyRlkIAYECljpwAAAQEICj4i0RRMZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0404{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4bnAAAEARKjLAqAEiQTffETLdnFYAJDJym9gCRkbR2cp0xkwlV8oyn8X0NKXbrbkoGiloQw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0405{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4jIYAAEAR1MHAqAEiQAQXnzLdnEkAJMXJm9oCsTdSNq2fp4IomM1W0LtS\/XasnVb1cYIFcA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.142","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0405{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA496cAAEAROH3AqAEinTfrjjLdnFkAJNtLm9wCCq\/Vr9SUD4fwmmEiNdezuQ9niYUSk+YjJQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.142","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0401{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3fJEAAEARs5PAqAEinTfrjzLdnF4AIz7Dm94CUldClJ3Jj\/ar7UJqBheNPI8TcYWyskFm","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.21","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0396{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAy3tIAAEARCNHAqAEinTg0FTLdnEQAHrtxm+ACoNYW9c0Iu96VtPV4yMd9SlxQuA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.21","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_id":70,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABmD4lAAEAG38fAqAEi1cezr8N3AbvoukrF6jj3F4AYECxe5QAAAQEICj4i0bNO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80ZBAAEAGh53AqAEinTeCjMNynGH\/hzYDZw7DuIAYECnYWgAAAQEICj4i0ehOvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":64,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMISNAAEAGN\/vAqAEinTeCjMN2AbvInJlHrpWZfIAYECxeqwAAAQEICj4i0kROvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":62,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABiDMRAAEAGmqPAqAEinTg0LMN0AbuAxvPD3A2f1IAYECwDcAAAAQEICj4i0lNMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JDJAAEAGft7AqAEinTc4qsNxnE+r6BLEPu7rjYAYECqtrAAAAQEICj4i0t9Nea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":63,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6V0VAAEAGS43AqAEinTc4qsN1AbtlArNVviBnW4AYECztjwAAAQEICj4i0uZNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8eZJAAEAGdejAqAEi1cezr8NznFXnJeT4bf1jqoAYECrg2AAAAQEICj4i0w9O2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":70,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABmcItAAEAGfsXAqAEi1cezr8N3AbvoukrF6jj3F4AYECxc1gAAAQEICj4i08JO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85tJAAEAGccbAqAEiQTffIcNqnEKAlL7NMr3ZNIAZECh5AQAAAQEICj4i1RFNl5tsq7xG5CK7Tso=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLrEUAAEARSunAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLuWoAAEARPcTAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0414{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+WsgAAEARoKjAqAEib91NlzLdnFsAKnZMm+IChMIMA7Iu2mZsqQZJnqfJooyOMKE\/uWGoix8bU\/YAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0413{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/HyoAAEARyHDAqAEinTg0ETLdnE0AK6EGm+QCNgMH2ITpxVJW+XmKXJHtTvzd6uYJCxFPw1m4ZheLNng=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0401{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2iHEAAEAR2M3AqAEiQAQXqjLdnEsAIkoGm+YCpGAFhs2RBCMUexQexYbsFkqmQ\/8Qtyc=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.168","src_port":13021,"dst_port":40007,"l4_proto":"udp"}
+0402{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2+lgAAEARAQ\/AqAEib91NqDLdnEcAIop9m+gChrJ8v\/omTh7Ne4Bar5T53RvLKUpGcwE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.168","src_port":13021,"dst_port":40007,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0404{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5wkwAAEARPJTAqAEib91KLDLdnF8AJV5Dm+oCagLaZIeW7H9EIxc7czPbdaN+lYkEZAqCu0Q=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0658{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzbXJAAEAGqcfAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECys5wAAAQEICj4i1cz301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":70,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABmO61AAEAGs6PAqAEi1cezr8N3AbvoukrF6jj3F4AYECxZgQAAAQEICj4i1xdO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":62,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969661,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABinkRAAEAGCSPAqAEinTg0LMN0AbuAxvPD3A2f1IAYECz+lgAAAQEICj4i1yxMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":64,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABM+VNAAEAGX8rAqAEinTeCjMN2AbvInJlHrpWZfIAYECxYvgAAAQEICj4i2DFOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0416{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBe8QAAEARtE3AqAEinTfrmDLdnEEALXlam+wCJAhMYE3a2mA+K8Gsvq1dkqSohtdF5WONseMrsTgQWNCbqg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0396{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PtsAAEAR8UnAqAEinTfrkjLdgQkAINq8m+4CkuZLUb2HgW9IroWQ+JaU9ew2O1bn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0415{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/GQkAAEARSEjAqAEiQAQXjzLdnFIAK+Dtm\/ACn46vTpwjXGMZ9bJtrKD0Tox8o\/uW9MNcEfVIZROhfxw=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.25","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0414{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+3+IAAEARuLHAqAEiQTffGTLdnFwAKrqUm\/ICs3eZ5yAavzTYAFVG6cHtvks6WRTX6quz\/un4rGT7CA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.25","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.151","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0415{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/8JUAAEAR8n\/AqAEinTc4lzLdnFsAK42nm\/QCY347bApK+fSJyR3vpMK2pFmarm3qJcKY67tEOMSW2tE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.151","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0495{"flow_id":63,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6QTZAAEAGYZzAqAEinTc4qsN1AbtlArNVviBnW4AYECzm9wAAAQEICj4i2X5Nea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iUBAAEAGHk3AqAEinTg0LMNwnGCx3l+sHyRlkIAYEClalgAAAQEICj4i2iVMZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969662,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gFdAAEAGbyPAqAEi1cezr8NznFXnJeT4bf1jqoAYECrYhwAAAQEICj4i22BO2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8g\/BAAEAG1T3AqAEinTeCjMNynGH\/hzYDZw7DuIAYECnNWgAAAQEICj4i3OhOvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":70,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABmXWZAAEAGkerAqAEi1cezr8N3AbvoukrF6jj3F4AYECxToAAAAQEICj4i3PhO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431969663377,"flow_last_seen":1431969663377,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50044,"dst_port":40031,"l4_proto":"tcp"}
+0414{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1DJAAEAGhNzAqAEinTeCp8N8nF+W1hb6AAAAALAC\/\/8sigAAAgQFtAEDAwUBAQgKPiLc+gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.166","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0397{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAy1ywAAEARC+fAqAEinTc4pjLdnFYAHmpym\/YCUIZT7d8ZZahDgzlHGwrFeQgMHw==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.166","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0417{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBojAAAEARjU7AqAEi1cezmzLdnEQALVYJm\/gCocGAOu9ctMRuZg09sIXFBXfoFp0ezBOePl8z3klTgDOO8A==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0414{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA4LIAAEARBt3AqAEinTg0GzLdnFsALK5Hm\/oC27Di400dfPUDJrwFd8eoU\/psKrn9OzjyFuH7NFUpoc4x","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.173","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0398{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyTM0AAEAR4z7AqAEinTfrrTLdnEwAHgM8m\/wCyw55OL3+chZLjMlighndXw9\/qA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.157","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0406{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5cNoAAEARvzrAqAEinTfrnTLdnEoAJXKym\/4Cz\/csSQ42SRwcVm84KNSC1Bge6u0+CtZPiaQ=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.157","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0408{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhOdN4KnwKgBIpxfw3yB0ZuyltYW+6ASOJDi6AAAAgQFrAQCCApOq7XZPiLc+gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0s6BAAEAGpXrAqAEinTeCp8N8nF+W1hb7gdGbs4AQECw5lAAAAQEICj4i3XlOq7XZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":145,"pkt":"0NQSxnP1PBXCt3IOCABFAACDnKFAAEAGvCrAqAEinTeCp8N8nF+W1hb7gdGbs4AYECwikQAAAQEICj4i3XlOq7XZChG\/0yYPmKegA+hNcGZvZSHoQU++Nx5Rkm\/BbOmvh7jXIbPWsU9+9CW7Aer6Cao0MOGe9zx9ivMI2TavlPWiK+DRzmfsbbpjuMlmH0Tl0g==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":86,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0LkpAADcGM9GdN4KnwKgBIpxfw3yB0ZuzltYXSoAQAB1JNAAAAQEICk6rtfk+It15","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":86,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":146,"pkt":"PBXCt3IO0NQSxnP1CABFAACELktAADcGM4CdN4KnwKgBIpxfw3yB0ZuzltYXSoAYAB07MQAAAQEICk6rtfs+It15gKI9976BXkzPO8JpMxteqmrvf10Vw96PKLzt1LqoxBOQkCwa6p2v91g++TX1\/mXMcCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEts=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":86,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NnpAAEAGIqHAqAEinTeCp8N8nF+W1hdKgdGcA4AQECk4UAAAAQEICj4i3f9Oq7X7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":86,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bEJAAEAG7NDAqAEinTeCp8N8nF+W1hdKgdGcA4AYEClK9AAAAQEICj4i3f9Oq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969663,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IPpAAEAGghbAqAEinTc4qsNxnE+r6BLEPu7rjYAYECqhrAAAAQEICj4i3t9Nea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":86,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8BTFAAEAGU+LAqAEinTeCp8N8nF+W1hdKgdGcA4AYEClI7QAAAQEICj4i4AZOq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":62,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABigoRAAEAGJOPAqAEinTg0LMN0AbuAxvPD3A2f1IAYECz1rQAAAQEICj4i4BVMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431969664357,"flow_last_seen":1431969664357,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2}
+0372{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":46,"pkt":"AQBeAAABoPPBbTu2CABGrAAgAAAAAAECgoTAqAD+4AAAAZQEAAARZO6bAAAAAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431969664357,"flow_last_seen":1431969664357,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40007,"l4_proto":"udp"}
+0409{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8z44AAEARX+vAqAEi1cezpTLdnEcAKEGUnAACQndt5hKcGQjs\/aUFepuMkaIJ9906aCWz4pv6M2E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40007,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0396{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyGYIAAEARfyPAqAEiQTffFDLdnGEAHnjQnAICuB3xnzqHf8BCJKQQ6ooGPwkzRg==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0401{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3zjoAAEARkxnAqAEiQAQXlDLdnEoAI3yfnAQC5t7RxPpucIQEcbOpo3n\/i37I7X5QLz7O","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.148","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0400{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3gRQAAEARembAqAEib91NlDLdnF0AI32wnAYCAtkwZfUpvy0PrMgHjjv7gkQ5J07OrfdX","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.141","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0401{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1GOEAAEAR4qLAqAEib91NjTLdnFQAIf21nAgChdWCG2VT3PvRM4JN\/HMVRe1geqFvmA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.141","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0397{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HPFAADcGRLBBN98hwKgBIgG7w24uYYI6XFDkhIARAB0PDgAAAQEICk2XsRI+IpIH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":64,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMCKZAAEAGUHjAqAEinTeCjMN2AbvInJlHrpWZfIAYECxNrQAAAQEICj4i40JOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431969664990,"flow_last_seen":1431969664990,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50045,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAI3tAAEAGNZTAqAEinTeCp8N9Abt3wuHVAAAAALAC\/\/8VHgAAAgQFtAEDAwUBAQgKPiLjQgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":86,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969664,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zB1AAEAGjPXAqAEinTeCp8N8nF+W1hdKgdGcA4AYEClFqAAAAQEICj4i40tOq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431969665006,"flow_last_seen":1431969665006,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","l4_proto":2}
+0388{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":60,"pkt":"PBXCt3IOxCwDBkn+CABGAAAgivAAAAEC9ufAqAFc4AAA+5QEAAAWAAkE4AAA+wAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431969665006,"flow_last_seen":1431969665006,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0408{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhOdN4KnwKgBIgG7w31xB6fgd8Lh1qASOJDOhQAAAgQFrAQCCApOq7dsPiLjQgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":98,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H2lAAEAGObLAqAEinTeCp8N9Abt3wuHWcQen4YAQECwlMAAAAQEICj4i48JOq7ds","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":98,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8rbhAAEAGqxrAqAEinTeCp8N9Abt3wuHWcQen4YAYECxvXwAAAQEICj4i48JOq7dsgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAm3wSlkltQgb6XXB2qkyh5","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtt4xAAEAGh0DAqAEiF84hpsNtAbuewXpuGKHN44AYECyk4QAAAQEICj4i5A\/sLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":98,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0EG1AADcGUa6dN4KnwKgBIgG7w31xB6fhd8LiHoAQAB001gAAAQEICk6rt40+IuPC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":98,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABdGotAAEAGPmfAqAEinTeCp8N9Abt3wuIecQen4YAYECwyVgAAAQEICj4i5D9Oq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50046,"dst_port":40011,"l4_proto":"tcp"}
+0417{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA9S9AAEAGY\/DAqAEinTeClsN+nEtADbnoAAAAALAC\/\/\/YlwAAAgQFtAEDAwUBAQgKPiLk6gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0402{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1j8QAAEARCNrAqAEiQTffGDLdnGAAISuNnAoCfsB5JB\/rTYpH1Pyy3TEn61xOyU3n6Q==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.175","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0416{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/Ev0AAEAR0ADAqAEinTc4rzLdnE0AK5vynAwCv2wYRcgby0Lpb\/j9BzqAbRO\/1tuxNgazREl3CBLvd3M=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.175","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0398{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pwAAAEARuljAqAEiQAQXkjLdgQkAIJb3nA4CpT3k+\/yRRYMAziIEiKPZ4SNw4uYJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0401{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2ZQAAAEARfiTAqAEinTc4kTLdnFsAImkAnBACXCxecPPKFtdeUw7sQSBvp3gi9mq4vcM=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0414{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+hGcAAEARenXAqAEib91KKzLdnEEAKumHnBICbsOSISjTImKbV\/UiCWod5a6w5EFlZL740jo5mcYkgQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0409{"flow_id":100,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiSdN4KWwKgBIpxLw35DcUQuQA256aASOJA7FQAAAgQFrAQCCApOt5+TPiLk6gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":100,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tVZAAEAGo9XAqAEinTeClsN+nEtADbnpQ3FEL4AQECyRaAAAAQEICj4i5cFOt5+T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":100,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":143,"pkt":"0NQSxnP1PBXCt3IOCABFAACBua5AAEAGnzDAqAEinTeClsN+nEtADbnpQ3FEL4AYECwSIgAAAQEICj4i5cFOt5+T207BU8RTpz6cl51LKBWtARK9wP6VlGI4+stPzH0uYPT1Iirrs3Q6E000sIWPSE+TE6j51s80FUJLgPFuh4yNWoNY6QY\/5AVyuzDhnvc=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":63,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6TMBAAEAGVhLAqAEinTc4qsN1AbtlArNVviBnW4AYECzajwAAAQEICj4i5eZNea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":100,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02+ZAADcGhkWdN4KWwKgBIpxLw35DcUQvQA26NoAQAB2g9AAAAQEICk63n8k+IuXB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":100,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":172,"pkt":"PBXCt3IO0NQSxnP1CABFAACe2+dAADcGhdqdN4KWwKgBIpxLw35DcUQvQA26NoAYAB2UyQAAAQEICk63n8o+IuXBLs4DEhcA3OEIs7TyrcrmsaytU+n4vERmAhfzXpkqP3u21VlCNGmFMmxx7Yf+wOsB8wjZNq+U9aIr4NHOZ+xtumO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78A==","pkt_caplen":172,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":100,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MrFAAEAGJnvAqAEinTeClsN+nEtADbo2Q3FEmYAQECiP\/gAAAQEICj4i5kFOt5\/K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":100,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88\/VAAEAGZS7AqAEinTeClsN+nEtADbo2Q3FEmYAYECjdFgAAAQEICj4i5kFOt5\/KwFGYWtZyg7g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":98,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969665,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABdh01AAEAG0aTAqAEinTeCp8N9Abt3wuIecQen4YAYECwwTAAAAQEICj4i5klOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":70,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABmMmpAAEAGvObAqAEi1cezr8N3AbvoukrF6jj3F4AYECxIqAAAAQEICj4i5\/BO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0398{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QwsAAEARVYDAqAEiQTffLDLdnE0AIF\/DnBQCMyjz3r9eJ18XTFVNiAvxrYpQ3ucg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.26","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0410{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82TgAAEARDlzAqAEinTg0GjLdnFoAKNB4nBYCAAvRN+bFqY3YyxruA93YXf9Qo41EFxKazlLBv\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.26","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0416{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/\/94AAEARYWbAqAEiQAQXmzLdnEQAK4rqnBgCdE2WfHkd94c\/GZASHmkYP3mRsrUzW7aH679XKkCN7wg=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.41","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0401{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3cPYAAEARJ5XAqAEiQTffKTLdnFsAIyQanBoCqUIPvRhVKRfli2TsAPxez+o30kiStRum","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.41","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.47","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0397{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAy3VkAAEARCjDAqAEinTg0LzLdnF0AHgzhnBwC9HB1yp1CFIBUD5AqeEDWvWy7jA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.47","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":86,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jDNAAEAGzN\/AqAEinTeCp8N8nF+W1hdKgdGcA4AYECk\/5wAAAQEICj4i6QxOq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":98,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969666,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABd03JAAEAGhX\/AqAEinTeCp8N9Abt3wuIecQen4YAYECwtAAAAAQEICj4i6ZVOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431969667019,"flow_last_seen":1431969667019,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50048,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYg5AAEAG9xHAqAEinTeClsOAAbtI+pnpAAAAALAC\/\/+D\/AAAAgQFtAEDAwUBAQgKPiLrJgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xXlAAEAGKgHAqAEi1cezr8NznFXnJeT4bf1jqoAYECrIrwAAAQEICj4i6zhO2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jf1AAEAGGZDAqAEinTg0LMNwnGCx3l+sHyRlkIAYEClJPgAAAQEICj4i631MZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":111,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiSdN4KWwKgBIgG7w4C5VVBeSPqZ6qASOJBi1AAAAgQFrAQCCApOt6EkPiLrJgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":111,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EhFAAEAGRxvAqAEinTeClsOAAbtI+pnquVVQX4AQECy5ggAAAQEICj4i66JOt6Ek","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":111,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB87wJAAEAGaeHAqAEinTeClsOAAbtI+pnquVVQX4AYECwCsAAAAQEICj4i66JOt6EkgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBmH0Tl0puQwf7XnF3q02i5","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":100,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8awRAAEAG7h\/AqAEinTeClsN+nEtADbo2Q3FEmYAYECjXfwAAAQEICj4i69hOt5\/KwFGYWtZyg7g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":111,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA08RxAADcGcQ+dN4KWwKgBIgG7w4C5VVBfSPqaMoAQAB3JKgAAAQEICk63oUM+Iuui","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":111,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXZX9AAEAG84nAqAEinTeClsOAAbtI+poyuVVQX4AYECxq7gAAAQEICj4i7CBOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50049,"dst_port":40021,"l4_proto":"tcp"}
+0415{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAvH9AAEAGnJDAqAEinTeCpsOBnFXYqqHbAAAAALAC\/\/9QDQAAAgQFtAEDAwUBAQgKPiLsxwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0409{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9SW0AAEAR5iPAqAEi1cezjTLdnE8AKQ5hnB4CGyqpujGNRC+tNfD9NfpLzFflMbzl80z6vtvIbjHD","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.168","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0406{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5JaMAAEARO5vAqAEiQAQXqDLdnEYAJeE7nCAClYKeY8U7yQoFLZ\/n5OmCV2u37neBgVGbscg=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0416{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/+CwAAEAR6vHAqAEinTc4jjLdnFcAKxxKnCIC+gceuOzI36Gk6bxAzIG\/CfJN2Kdzd\/KAG2cg42HExgA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0397{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0paYAAEARVdzAqAEib91NjzLdnFYAIE1nnCQCSJLvZtGpgN01LZemo1XXZO+oxg0w","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0418{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBc7oAAEARJM\/AqAEiQTffITLdnEsALfH+nCYCgzglH2UUEeAloaKWvjnBLcR69MpntGSFdWneylROBFqJdg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0409{"flow_id":112,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhSdN4KmwKgBIpxVw4FWpWbU2Kqh3KASOJCyZwAAAgQFrAQCCApOrGnnPiLsxwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":112,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04YFAAEAGd5rAqAEinTeCpsOBnFXYqqHcVqVm1YAQECwIogAAAQEICj4i7bdOrGnn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":112,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6xORAAEAGk\/HAqAEinTeCpsOBnFXYqqHcVqVm1YAYECy3pgAAAQEICj4i7bdOrGnndublI75nXubO21nQycJvJO84XcmJJcjmGsjdZZ7Sh0tXGkpbJzOfwgjXE\/IbWS5lhr9khfI7sGEed7z9CnOIWbYvFHUiqw==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":111,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABX4dlAAEAGdy\/AqAEinTeClsOAAbtI+poyuVVQX4AYECxo7QAAAQEICj4i7iFOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":112,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0DPdAADcGVSWdN4KmwKgBIpxVw4FWpWbV2KqiIoAQAB0YLwAAAQEICk6saiM+Iu23","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":112,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":162,"pkt":"PBXCt3IO0NQSxnP1CABFAACUDPhAADcGVMSdN4KmwKgBIpxVw4FWpWbV2KqiIoAYAB036gAAAQEICk6saiU+Iu23spYaUgUdZBB0q7Wmfti12eIC5do2SeSf8ucklbk3LV0YZBdAUK3KpCqqC7OJBKxlHne8\/QpziFm2LxR1IqtgUU7nbO064zhJ5p\/EZVIbEEF+VxzdalPoORYPdFWCi8Ax","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":112,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0h0NAAEAG0djAqAEinTeCpsOBnFXYqqIiVqVnNYAQECkHOAAAAQEICj4i7kBOrGol","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":112,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aTpAAEAG79nAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClhiQAAAQEICj4i7kBOrGolRtJrmlCDoq4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":98,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABd2YpAAEAGf2fAqAEinTeCp8N9Abt3wuIecQen4YAYECwnMAAAAQEICj4i72VOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":333,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE\/ApQAAAQRAXrAqAD+7\/\/\/+gQBB2wBK+71Tk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cG5wOnJvb3RkZXZpY2UNCg0K","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":351,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFRApUAAAQRAWfAqAD+7\/\/\/+gQBB2wBPQhzTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K","pkt_caplen":351,"pkt_type":2048,"pkt_ipoffset":14}
+0856{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":405,"pkt":"AQBef\/\/6oPPBbTu2CABFAAGHApYAAAQRATDAqAD+7\/\/\/+gQBB2wBc+ePTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpJbnRlcm5ldEdhdGV3YXlEZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCg0K","pkt_caplen":405,"pkt_type":2048,"pkt_ipoffset":14}
+0849{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":397,"pkt":"AQBef\/\/6oPPBbTu2CABFAAF\/ApcAAAQRATfAqAD+7\/\/\/+gQBB2wBawDYTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6TGF5ZXIzRm9yd2FyZGluZzoxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDE6OnVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6TGF5ZXIzRm9yd2FyZGluZzoxDQoNCg==","pkt_caplen":397,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2iIAAEARHRfAqAEiwKgBAcALADUALIa2zTYBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6jAAAEARDQnAqAEiwKgBAeA+ADUALBXIHdcBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0848{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":1431969668393,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0413{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAuzMAAEARQDfAqAEib91NmzLdnEQALFAWnCgCEvePRGLJGr6Sre+ODORDkQCce9O5GJ9D557YPiPEFuAx","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":1431969668393,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":1431969668393,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.143","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0416{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/2XIAAEARv6rAqAEinTeCjzLdnFEAK32DnCoCUchv5aDS7Qgi\/2x8dTOyi7BA\/ZCxsEvRrtCtnVEnyoU=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":1431969668393,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.143","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0507{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDHPJAADcGRGBBN98hwKgBIgG7w24uYYHrXFDkhIAYAB1z8wAAAQEICk2XtLA+IpIHFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAomF9AAEAGwE3AqAEiQTffIcNuAbtcUOSEAAAAAFAEAADHvgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDB9wAAEAR71rAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDDGwAAEAR6srAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431969668503,"flow_last_seen":1431969668503,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0434{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABItzYAAEARPsPAqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431969668503,"flow_last_seen":1431969668503,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0464{"flow_id":62,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABi1zFAAEAG0DXAqAEinTg0LMN0AbuAxvPD3A2f1IAYECzkpQAAAQEICj4i8R1MZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":111,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXsndAAEAGppHAqAEinTeClsOAAbtI+poyuVVQX4AYECxltAAAAQEICj4i8VpOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":100,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SbFAAEAGD3PAqAEinTeClsN+nEtADbo2Q3FEmYAYECjR6QAAAQEICj4i8W5Ot5\/KwFGYWtZyg7g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7oz0AAEARVAHAqAEiwKgBAf+SADUAJwCOlegBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7PUEAAEARuf3AqAEiwKgBAdR8ADUAJ+nL8sABAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+HhQAAEAR2SfAqAEiwKgBAcKBADUAKu5ghe0BAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+CR4AAEAR7h3AqAEiwKgBAf4VADUAKsDYd8YBAAABAAAAAAAABGRzbjQBZAVza3lwZQNuZXQAABwAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK8GcAAEARBsjAqAEiwKgBAd\/IADUANro4UU4BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKwQ4AAEARNiHAqAEiwKgBAcNGADUANrH\/diQBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDYBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gzNAAEAG1frAqAEinTeCjMNynGH\/hzYDZw7DuIAYECm4IQAAAQEICj4i8iFOvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431969669039,"flow_last_seen":1431969669039,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50051,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAm5lAAEAGvXbAqAEinTeCpsODAbsS3IR+AAAAALAC\/\/\/HlQAAAgQFtAEDAwUBAQgKPiLzAwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":121,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhSdN4KmwKgBIgG7w4O9Vc6mEtyEf6ASOJBZ3QAAAgQFrAQCCApOrGt3PiLzAwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":121,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0jk9AAEAGyszAqAEinTeCpsODAbsS3IR\/vVXOp4AQECywggAAAQEICj4i84hOrGt3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":121,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8hOFAAEAG0\/LAqAEinTeCpsODAbsS3IR\/vVXOp4AYECxJwgAAAQEICj4i84hOrGt3gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAUdSKrYFFO52ztOuM4Seaf","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":86,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89idAAEAGYuvAqAEinTeCp8N8nF+W1hdKgdGcA4AYECk1LwAAAQEICj4i88ROq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6C1AAAEAR6+\/AqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":121,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0pT9AADcGvNydN4KmwKgBIgG7w4O9Vc6nEtyEx4AQAB3AKAAAAQEICk6sa5g+IvOI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":121,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABSXh5AAEAG+t\/AqAEinTeCpsODAbsS3ITHvVXOp4AYECx5qgAAAQEICj4i9AhOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.168","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0410{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA749YAAEARS6HAqAEi1cezqDLdnEYAJ90VnCwCpNRKktf4Qi\/bdq+yPcZvRHBM0A5YqXcB1iPXfA==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0405{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5xgUAAEARIZrAqAEinTg0EjLdgQkAJZdLnC4CEFtjW45ZN3BY7kxO5IarNwXkC3qnvdRTMpg=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40034,"l4_proto":"udp"}
+0409{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9eQsAAEARtnjAqAEi1cezmjLdnGIAKUaUnDACIJVxUOV7zs6xYvMq6EYi6E1yxVZ+ttOndiNbBj7C","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40034,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0409{"flow_id":112,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SP9AAEAGEBXAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClbUwAAAQEICj4i9HZOrGolRtJrmlCDoq4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FSdAAEAGjenAqAEinTc4qsNxnE+r6BLEPu7rjYAYECqKcwAAAQEICj4i9hhNea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":121,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABSr9pAAEAGqSPAqAEinTeCpsODAbsS3ITHvVXOp4AYECx3kQAAAQEICj4i9iFOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969669,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzRR9AAEAG0hrAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECyMHgAAAQEICj4i9pX301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":70,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABm9XxAAEAG+dPAqAEi1cezr8N3AbvoukrF6jj3F4AYECw5nwAAAQEICj4i9vlO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":111,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXQOtAAEAGGB7AqAEinTeClsOAAbtI+poyuVVQX4AYECxgCwAAAQEICj4i9wNOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLTl4AAEARqNDAqAEiwKgBAeuAADUAN9PqYyoBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtqQAAEARQIrAqAEiwKgBAeF+ADUAN7bIb04BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":1431969670418,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0404{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1a3EAAEARxCLAqAEi1cezkjLdnF4AIe2\/nDICH70PgbauE\/TDe2jJ8Wqi40Tw\/dlcGg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":1431969670418,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":1431969670418,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.32","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0405{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4XYMAAEARoWrAqAEib91KIDLdnEkAJPvTnDQCE7A5vpizco713fAfzrDXfyhKHUClX6xRMw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":1431969670418,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.32","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0430{"flow_id":64,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMASdAAEAGV\/fAqAEinTeCjMN2AbvInJlHrpWZfIAYECw4VQAAAQEICj4i+JpOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":121,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABStFVAAEAGpKjAqAEinTeCpsODAbsS3ITHvVXOp4AYECx0KQAAAQEICj4i+YlOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":98,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969670,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABddstAAEAG4ibAqAEinTeCp8N9Abt3wuIecQen4YAYECwcVwAAAQEICj4i+j5Oq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":112,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80VhAAEAGh7vAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClVHAAAAQEICj4i+q1OrGolRtJrmlCDoq4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":100,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bcNAAEAG62DAqAEinTeClsN+nEtADbo2Q3FEmYAYECjHhQAAAQEICj4i+9JOt5\/KwFGYWtZyg7g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.141","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0409{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7f50AAEAR4bnAqAEiQAQXjTLdnEQAJ4UFnDYCwyd8EHi1QBLXs1KZU1iJVh3lwESpNueb3tiaIg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.141","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0412{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ovIAAEAR9aDAqAEiQTffHDLdnFoAKLy9nDgCw\/trQW+yBgre1M\/iGb+xrR1ukS\/k6lR8WrcUGNw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.161","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0414{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA3g4AAEARUfvAqAEinTfroTLdnEsALJxsnDoCIAhyfiAhHAGT2pPsDhuBxLXCl+D8eTQt2\/ZTx9MpLSju","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.161","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0497{"flow_id":63,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB684hAAEAGr0nAqAEinTc4qsN1AbtlArNVviBnW4AYECzChgAAAQEICj4i\/e9Nea82lrtEvF7Syi3sYudbWmm1LLmltdXITy9EZvRGZ4\/xmZ+XSmldmKNIhY33FGOH7bkZm8kH56oaXL6ossqblsc6QCTpmqw22A==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969671,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtolVAAEAGnHfAqAEiF84hpsNtAbuewXpuGKHN44AYECyK2AAAAQEICj4i\/hjsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":121,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABSOtRAAEAGHirAqAEinTeCpsODAbsS3ITHvVXOp4AYECxuIAAAAQEICj4i\/5JOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WO1AAEAGTqjAqAEinTg0LMNwnGCx3l+0HyRlkIARECkilgAAAQEICj4jAHVMZC+5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":62,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H5FAAEAGiATAqAEinTg0LMN0AbuAxvPx3A2f1IARECxhTwAAAQEICj4jAHVMZDFL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA026tAAEAGx2zAqAEinTc4qsNxnE+r6BLMPu7rjYARECpMQAAAAQEICj4jAHVNea2i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":63,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0LphAAEAGdIDAqAEinTc4qsN1AbtlArObviBnW4ARECyQUQAAAQEICj4jAHVNea82","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0AexAAEAGV0rAqAEinTeCjMNynGH\/hzYLZw7DuIAREClCdQAAAQEICj4jAHVOvfUL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":64,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mkVAAEAGvvDAqAEinTeCjMN2AbvInJlfrpWZfIARECyRzgAAAQEICj4jAHVOvfad","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":1431969672489,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40034,"l4_proto":"udp"}
+0398{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NOAAAEARZEfAqAEinTeCkDLdnGIAINainDwChxJXV87XhkbitLg+A\/cA051ANFNY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":1431969672489,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40034,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":1431969672489,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0401{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2EcMAAEAR7TnAqAEib91KEzLdnEEAItfhnD4Cb3aeHJFamREFARmu+jDLOabt8VoC3Pk=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":1431969672489,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0448{"flow_id":111,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABX+H1AAEAGYIvAqAEinTeClsOAAbtI+poyuVVQX4AYECxVgwAAAQEICj4jAYtOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969672,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JB1AAEAGy13AqAEi1cezr8NznFXnJeT4bf1jqoAYECqxxgAAAQEICj4jAiFO2zlegPUYPB\/96j4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50053,"dst_port":40030,"l4_proto":"tcp"}
+0415{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAbK1AAEAGNnfAqAEinTc4ksOFnF5LaK4QAAAAALAC\/\/8DvAAAAgQFtAEDAwUBAQgKPiMELQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50054,"dst_port":40005,"l4_proto":"tcp"}
+0416{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVldAAEAGAsbAqAEinTeCmcOGnEV7WkqhAAAAALAC\/\/\/tSQAAAgQFtAEDAwUBAQgKPiMELQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50055,"dst_port":40030,"l4_proto":"tcp"}
+0415{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA3dtAAEAG4QXAqAEib91KL8OHnF60mgT1AAAAALAC\/\/9fYAAAAgQFtAEDAwUBAQgKPiMELQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0397{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XMQAAEARBHrAqAEiQAQXrTLdnFEAIKzLnEACNoZuauEq3ADhWmqb7oTzdlIdyJ9N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.153","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0409{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7lioAAEARmezAqAEinTfrmTLdnFcAJ4lunEIC66wPUwGEAyW45bIdeHP6QiT0x60Zbz70ciSKMQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.153","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0402{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA180cAAEARCDTAqAEib91NlTLdnF4AIdImnEQCEhW3FidGQ7GJtk\/GLqF7d8vgcOXTwQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0409{"flow_id":133,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiGdN4KZwKgBIpxFw4bvEzbne1pKoqASOJB0cwAAAgQFrAQCCApOtNyOPiMELQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":133,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MLVAAEAGKHTAqAEinTeCmcOGnEV7Wkqi7xM26IAQECzLGgAAAQEICj4jBLBOtNyO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":133,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":172,"pkt":"0NQSxnP1PBXCt3IOCABFAACeCKhAAEAGUBfAqAEinTeCmcOGnEV7Wkqi7xM26IAYECzq0wAAAQEICj4jBLBOtNyOAWZkzughlCNCvXtxaSBC7JDDHESH2Je\/F\/dAa\/dGMFUSCfM7GfI9QD7EeE1HvoXmVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/Q==","pkt_caplen":172,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":132,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsCidNziSwKgBIpxew4VPS3COS2iuEaASOJBdoQAAAgQFrAQCCApNhXEjPiMELQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":132,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06I5AAEAGuqHAqAEinTc4ksOFnF5LaK4RT0twj4AQECy0NwAAAQEICj4jBMFNhXEj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":132,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":166,"pkt":"0NQSxnP1PBXCt3IOCABFAACY4mBAAEAGwGvAqAEinTc4ksOFnF5LaK4RT0twj4AYECy14AAAAQEICj4jBMFNhXEjjcGKM44IcwOKkvNSVGBoHOKeUAHavNsjRbS6QmRN2lH3wk76zOhfOGSe9VuWwt6qt\/w9SrPImfZvVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2g==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":133,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA06kZAADcGd+KdN4KZwKgBIpxFw4bvEzboe1pLDIAQAB3angAAAQEICk603K8+IwSw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":133,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":163,"pkt":"PBXCt3IO0NQSxnP1CABFAACV6kdAADcGd4CdN4KZwKgBIpxFw4bvEzboe1pLDIAYAB2FLgAAAQEICk603K8+IwSwAkLW0AouxS90QzAtn2GREgnFqPMBrYH3+pRqMCbtdxTEzuleXWVlyCn2e0EXyDqM29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBXK7MOGe9zx9ivMI2TavlPWiKw==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":133,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kHNAAEAGyLXAqAEinTeCmcOGnEV7WksM7xM3SYAQECjJrwAAAQEICj4jBTNOtNyv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":133,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FpFAAEAGQpDAqAEinTeCmcOGnEV7WksM7xM3SYAYECg5LwAAAQEICj4jBTNOtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":132,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0AcdAADMGrmmdNziSwKgBIpxew4VPS3CPS2iudYAQAB3DvQAAAQEICk2FcUg+IwTB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":132,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":135,"pkt":"PBXCt3IO0NQSxnP1CABFAAB5AchAADMGriOdNziSwKgBIpxew4VPS3CPS2iudYAYAB02bQAAAQEICk2FcUk+IwTBCykz8YybSIKDCc1itz4\/8SxGzYnwkfMzgCbe4Lzb0LQydJRRMjtR5C8mZXvWJngp9m9UtWLroJGOJ6wteiN4iSbfBKWS","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":132,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UpNAAEAGUJ3AqAEinTc4ksOFnF5LaK51T0tw1IAQECmy1gAAAQEICj4jBVZNhXFJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":134,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOVv3UovwKgBIpxew4ef2YLStJoE9qASOJBoyQAAAgQFrAQCCApNhV7NPiMELQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":134,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gCZAAEAGPsfAqAEib91KL8OHnF60mgT2n9mC04AQECy+ygAAAQEICj4jBVZNhV7N","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":132,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uVxAAEAG6cvAqAEinTc4ksOFnF5LaK51T0tw1IAYECnvLwAAAQEICj4jBVZNhXFJby9fpLXtPtU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_id":134,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":166,"pkt":"0NQSxnP1PBXCt3IOCABFAACYfiNAAEAGQGbAqAEib91KL8OHnF60mgT2n9mC04AYECyKzgAAAQEICj4jBVdNhV7NEKVIytY6Re6hcJje6jy8rY7TYJq9jnt022HVyJXk6491jFQjaXdvbAPCOBalIxCcflcc3WpT6DkWD3RVgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrQ==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":112,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969673,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QZlAAEAGF3vAqAEinTeCpsOBnFXYqqIiVqVnNYAYEClJeAAAAQEICj4jBlFOrGolRtJrmlCDoq4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":134,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03cVAADYG6ydv3UovwKgBIpxew4ef2YLTtJoFWoAQAB3OKgAAAQEICk2FXxc+IwVX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":134,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":116,"pkt":"PBXCt3IO0NQSxnP1CABFAABm3cZAADYG6vRv3UovwKgBIpxew4ef2YLTtJoFWoAYAB0DHgAAAQEICk2FXxc+IwVXga714v5PzUVQJso8s5dR4OoWGQIW4yrQwryqtPiBfWPy\/xosMK+MiS1yXZgkUEhjfYo=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":134,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0k4ZAAEAGK2fAqAEib91KL8OHnF60mgVan9mDBYAQECq8xQAAAQEICj4jBn1NhV8X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":134,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86FxAAEAG1ojAqAEib91KL8OHnF60mgVan9mDBYAYECql7wAAAQEICj4jBn1NhV8Xx9YMHiFnIWo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":133,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8AKVAAEAGWHzAqAEinTeCmcOGnEV7WksM7xM3SYAYECg3HwAAAQEICj4jB0NOtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":132,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HghAAEAGhSDAqAEinTc4ksOFnF5LaK51T0tw1IAYECns8gAAAQEICj4jB5NNhXFJby9fpLXtPtU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":1431969674456,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0418{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBxa4AAEAR02nAqAEinTeCkjLdnFoALfPInEYCTMX9D0zWqHZlar9rRJ4nLA7eV\/fFhp0UOFHwVjJRpWMfLA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":1431969674456,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0397{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Y3RAAEAGjA7AqAEi1cezr8NznFXnJeUAbf1jqoARECpPPQAAAQEICj4jCB9O2zle","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":1431969674456,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0410{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9FOcAAEARGqjAqAEi1cezjzLdnFYAKftynEgChXSqdM1qvdY\/tcyUx+hTJaaUvSW+LNUHctwmtBhJ","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":1431969674456,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0397{"flow_id":70,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0A1lAAEAG7CnAqAEi1cezr8N3Abvoukr36jj3F4ARECxxEQAAAQEICj4jCB9O2zrq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":86,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8orZAAEAGtlzAqAEinTeCp8N8nF+W1hdKgdGcA4AYECkghwAAAQEICj4jCGxOq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431969675055,"flow_last_seen":1431969675055,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50056,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAteJAAEAG7UHAqAEinTc4ksOIAbsXgt4IAAAAALAC\/\/+cAgAAAgQFtAEDAwUBAQgKPiMKdQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431969675055,"flow_last_seen":1431969675055,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50057,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQxNAAEAGFgrAqAEinTeCmcOJAbvJCUUsAAAAALAC\/\/85TwAAAgQFtAEDAwUBAQgKPiMKdQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431969675056,"flow_last_seen":1431969675056,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50058,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWxNAAEAGY87AqAEib91KL8OKAbuRyk0GAAAAALAC\/\/\/OdwAAAgQFtAEDAwUBAQgKPiMKdQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":133,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V6pAAEAGAXfAqAEinTeCmcOGnEV7WksM7xM3SYAYECgzyAAAAQEICj4jCppOtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":121,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABSeE5AAEAG4K\/AqAEinTeCpsODAbsS3ITHvVXOp4AYECxi1wAAAQEICj4jCttOrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":141,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiGdN4KZwKgBIgG7w4mX7uJ3yQlFLaASOJBqegAAAgQFrAQCCApOtN4hPiMKdQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":141,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04itAAEAGdv3AqAEinTeCmcOJAbvJCUUtl+7ieIAQECzBIgAAAQEICj4jCvdOtN4h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":141,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8QA1AAEAGGNTAqAEinTeCmcOJAbvJCUUtl+7ieIAYECyrbwAAAQEICj4jCvdOtN4hgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICiK+DRzmfsbbpjuMlmH0Tl","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":140,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsCidNziSwKgBIgG7w4gH6KF9F4LeCaASOJAKyQAAAgQFrAQCCApNhXK2PiMKdQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":140,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0v5VAAEAG45rAqAEinTc4ksOIAbsXgt4JB+ihfoAQECxhYwAAAQEICj4jCwVNhXK2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":140,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8oaNAAEAGAUXAqAEinTc4ksOIAbsXgt4JB+ihfoAYECzKLwAAAQEICj4jCwVNhXK2gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDSm5DB\/tecXerTaLmWj\/TV","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":132,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+epAAEAGqT3AqAEinTc4ksOFnF5LaK51T0tw1IAYECnpQgAAAQEICj4jC0NNhXFJby9fpLXtPtU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":141,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0PDlAADcGJfCdN4KZwKgBIgG7w4mX7uJ4yQlFdYAQAB3QyAAAAQEICk603kI+Iwr3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":141,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABW9spAAEAGYjzAqAEinTeCmcOJAbvJCUV1l+7ieIAYECzH3QAAAQEICj4jC3pOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":140,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA006RAADMG3IudNziSwKgBIgG7w4gH6KF+F4LeUYAQAB1xBQAAAQEICk2Fcts+IwsF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":140,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABP\/1tAAEAGo7nAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzz9gAAAQEICj4jC5VNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":142,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOVv3UovwKgBIgG7w4qMyvZEkcpNB6ASOJB16gAAAgQFrAQCCApNhWBgPiMKdQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":142,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0A+1AAEAGuwDAqAEib91KL8OKAbuRyk0HjMr2RYAQECzL7gAAAQEICj4jC5tNhWBg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":142,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8PFFAAEAGglTAqAEib91KL8OKAbuRyk0HjMr2RYAYECy2PgAAAQEICj4jC5tNhWBggEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIACC0CxLkdMTRpDGKnG\/6TF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50059,"dst_port":40015,"l4_proto":"tcp"}
+0416{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAarpAAEAGVDDAqAEib91KJsOLnE+UB73TAAAAALAC\/\/+\/fwAAAgQFtAEDAwUBAQgKPiML1gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.21","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0405{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5rAwAAEAR7JDAqAEiQTffFTLdnFsAJTYGnEoCYEAkEhPrC3cXaZ2QhtIeOoxIY9w9Ekoojl8=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.21","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0397{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAySgUAAEARsYLAqAEib91NjDLdnEMAHpNUnEwCeUQO24lPxsdSE1aywi7G9Ehfag==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0401{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3KwsAAEARbhfAqAEinTeCkjLdgQkAI6nfnE4CnxxG0E+kNYaCqSmEqqaVzyCf2xFtLT6I","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1431969675567,"flow_last_seen":1431969675567,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50024,"dst_port":443,"l4_proto":"tcp"}
+0384{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoxtNAAEAGPGLAqAEiEaxkJMNoAbucCLSTZ4D+ClAR\/\/\/87QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":142,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0luxAADYGMgFv3UovwKgBIgG7w4qMyvZFkcpNT4AQAB3bbAAAAQEICk2FYKk+Iwub","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":142,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNf2tAAEAGP2nAqAEib91KL8OKAbuRyk1PjMr2RYAYECyMfgAAAQEICj4jDNNNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":143,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+5v3UomwKgBIpxPw4sbzRl\/lAe91KASOJBx0gAAAgQFrAQCCApNf6NJPiML1gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":143,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0poBAAEAGGHbAqAEib91KJsOLnE+UB73UG80ZgIAQECzH1wAAAQEICj4jDPtNf6NJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":143,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAABqedZAAEAGROrAqAEib91KJsOLnE+UB73UG80ZgIAYECzuagAAAQEICj4jDPtNf6NJfaW28PjZtSz\/vkpZK95l4g8iej1A9KtQNcPaP4ABJ5Nx2UgR1Y7Rx80TCQjSqyJf8juwYR53","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":147,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoyPJAAPAGikIRrGQkwKgBIgG7w2hngP4KnAi0lFARn\/5c7gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":147,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoVvpAAEAGrDvAqAEiEaxkJMNoAbucCLSUZ4D+C1AQ\/\/\/87AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":134,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jBZAAEAGMs\/AqAEib91KL8OHnF60mgVan9mDBYAYECqfVQAAAQEICj4jDRdNhV8Xx9YMHiFnIWo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87QxAAEAGuoDAqAEinTg0LMNwnGCx3l+sHyRlkIAZECknVQAAAQEICj4jDWVMZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":141,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWVO1AAEAGBBrAqAEinTeCmcOJAbvJCUV1l+7ieIAYECzFzgAAAQEICj4jDYlOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":140,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPam1AAEAGOKjAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzxxQAAAQEICj4jDcZNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":1431969675950,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55159,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPisQAAEARbGbAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":1431969675950,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55159,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"a.config.skype.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":1431969675950,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63108,"dst_port":53,"l4_proto":"udp"}
+0434{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969675,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPsQsAAEARRh\/AqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431969675950,"flow_last_seen":1431969675950,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63108,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"a.config.skype.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0398{"flow_id":143,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0uhNAADcGDeNv3UomwKgBIpxPw4sbzRmAlAe+CoAQAB3XZgAAAQEICk1\/o5M+Iwz7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":143,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":136,"pkt":"PBXCt3IO0NQSxnP1CABFAAB6uhRAADcGDZxv3UomwKgBIpxPw4sbzRmAlAe+CoAYAB1g3QAAAQEICk1\/o5Q+Iwz7W0+jDkwYdyalyU6Dj4HU2pOBY1mmiLVz6n0Ki\/31ujL4cTtm9Z9iwycIFTqWFFeNZVIbEEF+VxzdalPoORYPdFWCi8Axrg==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":143,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06rBAAEAG1EXAqAEib91KJsOLnE+UB74KG80ZxoAQECnF6wAAAQEICj4jDiNNf6OU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":143,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8F4hAAEAGp2bAqAEib91KJsOLnE+UB74KG80ZxoAYECkMIgAAAQEICj4jDiNNf6OUySqTc3CS7Ig=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":98,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABd5kpAAEAGcqfAqAEinTeCp8N9Abt3wuIecQen4YAYECwHbwAAAQEICj4jDyZOq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KJpAAEAGMJTAqAEinTeCjMNynGH\/hzYDZw7DuIAZECmalwAAAQEICj4jD6pOvfULJJFwCjegzGQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":1431969676429,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0418{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBH10AAEARELrAqAEinTfrkzLdnFQALfL6nFACIA2HAe7F64ULrxZmZzlp\/IcJjWPYQGVuGoQXNRtdAcprsg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":1431969676429,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":1431969676429,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0410{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9SBkAAEARs0rAqAEib91NpTLdnFQAKf+JnFIC4bFrPlS3SgwUQ0ZkfJhi4Ibaq\/8x3HMPk6r8UbN8","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":1431969676429,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":100,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iAlAAEAG0RrAqAEinTeClsN+nEtADbo2Q3FEmYAYECizhAAAAQEICj4jD9NOt5\/KwFGYWtZyg7g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":133,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MwdAAEAGJhrAqAEinTeCmcOGnEV7WksM7xM3SYAYECgt5AAAAQEICj4jEH5OtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":141,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWkfJAAEAGxxTAqAEinTeCmcOJAbvJCUV1l+7ieIAYECzCeQAAAQEICj4jEN5OtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":140,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPlqBAAEAGDHXAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzuLQAAAQEICj4jEV5NhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":132,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FedAAEAGjUHAqAEinTc4ksOFnF5LaK51T0tw1IAYECniqQAAAQEICj4jEdxNhXFJby9fpLXtPtU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431969677018,"flow_last_seen":1431969677018,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50063,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAFnhAAEAGqHLAqAEib91KJsOPAbu0bGHpAAAAALAC\/\/+PWgAAAgQFtAEDAwUBAQgKPiMSEQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":148,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABP37sAAEARF2\/AqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":149,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPvnQAAEAROLbAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":62,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABiSBtAAEAGX0zAqAEinTg0LMN0AbuAxvPD3A2f1IAZECzDXAAAAQEICj4jEmVMZDFLCID\/ssOnhCQbPdgraKv5X6X6LEBl4VvsbMI2yvwLdbH5FbeEibgiwFjV2Yetww==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":142,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNHfFAAEAGoOPAqAEib91KL8OKAbuRyk1PjMr2RYAYECyFzwAAAQEICj4jE4JNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":152,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+5v3UomwKgBIgG7w48O1kHvtGxh6qASOJAkowAAAgQFrAQCCApNf6TaPiMSEQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":152,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fWFAAEAGQZXAqAEib91KJsOPAbu0bGHqDtZB8IAQECx6WwAAAQEICj4jE4NNf6Ta","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":62,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":114,"pkt":"PBXCt3IO0NQSxnP1CABFAABkrqRAADMGBcGdODQswKgBIgG7w3TcDaAjgMbz8oAZAB3zdQAAAQEICkxkQsk+IxJl88ShU4OJX+wVjAAh41xEYknjYdiCqiNsMrotROUKP3MjPnBVW48CfkkirGByqXPb","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":152,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8Tm1AAEAGcEHAqAEib91KJsOPAbu0bGHqDtZB8IAYECxLcwAAAQEICj4jE4NNf6TagEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBx7gcMDdoD2GmGv2SF8juw","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":62,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoez5AAEAGLGPAqAEinTg0LMN0AbuAxvPyAAAAAFAEAADiyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":134,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KzpAAEAGk6vAqAEib91KL8OHnF60mgVan9mDBYAYECqYuwAAAQEICj4jE7FNhV8Xx9YMHiFnIWo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.166","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0417{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/kxIAAEARaE7AqAEib91NpjLdnEsAK\/dAnFQCl1hxbJqFe\/EoPOrYejcO5KpAaYBpd\/JMh2XsR696PgE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.166","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0405{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4mEQAAEARAMrAqAEinTeCpTLdnFoAJC3GnFYCIQGR7TxLVU8tswjr1LACebeVCHQalWySEQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0401{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1f9wAAEARGT3AqAEinTeCnTLdnE0AIXYPnFgCFJgmOhVj0TGqdlU73IOUBy59C5OuhQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0469{"flow_id":70,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABm1jFAAEAGGR\/AqAEi1cezr8N3AbvoukrF6jj3F4AZECwcVgAAAQEICj4jFEFO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":143,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89bNAAEAGyTrAqAEib91KJsOLnE+UB74KG80ZxoAYECkFoQAAAQEICj4jFKRNf6OUySqTc3CS7Ig=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":152,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA05MhAADcG4y1v3UomwKgBIgG7w48O1kHwtGxiMoAQAB2JxAAAAQEICk1\/pTg+IxOD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":152,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAABq3jRAAEAG4IvAqAEib91KJsOPAbu0bGIyDtZB8IAYECxlQwAAAQEICj4jFKxNf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":1431969677975,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58458,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLNkoAAEARwOTAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":1431969677975,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58458,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":1431969677975,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49360,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLu3AAAEARO77AqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1431969677975,"flow_last_seen":1431969677975,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49360,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0448{"flow_id":111,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969677,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXYOVAAEAG+CPAqAEinTeClsOAAbtI+poyuVVQX4AYECxBOwAAAQEICj4jFdNOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81kZAAEAGzMnAqAEinTc4qsNxnE+r6BLEPu7rjYAZECpqKQAAAQEICj4jFmFNea2iMpsmfs9xo5c=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":64,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMjBFAAEAGzQzAqAEinTeCjMN2AbvInJlHrpWZfIAZECwajAAAAQEICj4jFmJOvfadOsfzaffo90GU9fGuBRpgbZPEZs9Bzxti","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":148,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPpIgAAEARUqLAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":149,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPxoMAAEARMKfAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":141,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWOc1AAEAGHzrAqAEinTeCmcOJAbvJCUV1l+7ieIAYECy8mAAAAQEICj4jFr9OtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":64,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":90,"pkt":"PBXCt3IO0NQSxnP1CABFAABMb+hAADcG8jWdN4KMwKgBIgG7w3aulZnLyJyZYIAZAB1q6QAAAQEICk6+CS8+IxZiCZN8qOdAn2tQKPavo9VwulBfRWu9L1K6","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":64,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoPRtAAEAGHCfAqAEinTeCjMN2AbvInJlgAAAAAFAEAACnIwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzJGNAAEAG8tbAqAEiF99JIsNrAbvkkjeTMYDD\/oAZECxrVgAAAQEICj4jF13301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":1431969678448,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.145","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0402{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA28WwAAEARPrfAqAEinTfrkTLdnFYAInUwnFoCL\/MPOOsaaRslv0+ih8hUClTBOiOZV0s=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":1431969678448,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.145","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0397{"flow_id":86,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yERAAEAGkNbAqAEinTeCp8N8nF+W1hdSgdGcA4ARECn+pQAAAQEICj4jF6BOq7X7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":1431969678448,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.26","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0417{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBiiMAAEARDm3AqAEiQTffGjLdnEQALZMdnFwCzKFKSd3cA9PLS4BXWJFRrjZHyG3cJPIPdrTAqEb6jU8VDg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":1431969678448,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.26","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0397{"flow_id":98,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09b9AAEAGY1vAqAEinTeCp8N9Abt3wuJHcQen4YARECzwvgAAAQEICj4jF6BOq7eN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":140,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABP7\/JAAEAGsyLAqAEinTc4ksOIAbsXgt5RB+ihfoAYECznxQAAAQEICj4jF8ZNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969678,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtqoVAAEAGlEfAqAEiF84hpsNtAbuewXpuGKHN44AYECxwzwAAAQEICj4jGCHsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLE+cAAEAR40fAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":157,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL8bEAAEARBX3AqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":142,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNgeVAAEAGPO\/AqAEib91KL8OKAbuRyk1PjMr2RYAYECx\/IQAAAQEICj4jGjBNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":143,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8McxAAEAGjSLAqAEib91KJsOLnE+UB74KG80ZxoAYECn\/IAAAAQEICj4jGyRNf6OUySqTc3CS7Ig=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":133,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UB9AAEAGCQLAqAEinTeCmcOGnEV7WksM7xM3SYAYECgi4wAAAQEICj4jG39OtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431969679451,"flow_last_seen":1431969679451,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50065,"dst_port":40031,"l4_proto":"tcp"}
+0416{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZ+RAAEAG8MXAqAEiQTffDMORnF\/vfD8JAAAAALAC\/\/9szQAAAgQFtAEDAwUBAQgKPiMbhwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.151","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0406{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zKQAAEARzHXAqAEinTeClzLdnFEAJhOjnF4CtwUXw\/VWCApVJdrfxkhI5qU9AKuGw3faL7f5","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.151","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.170","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0405{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5dCsAAEARu0zAqAEi1cezqjLdnEsAJQhSnGAC6QwwmBRocZoeU0bscPTURL89AdihxLtaI+k=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.176","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0411{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7lc0AAEARZY3AqAEib91NsDLdnFQAJ2jKnGICi6AMRljZtq+Es\/pWkLbSJ\/TvDoZrPj0F5hXOgQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.176","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":160,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYa5BN98MwKgBIpxfw5E\/Sv9r73w\/CqASOJDLRwAAAgQFrAQCCApNoe2VPiMbhwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":160,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cmZAAEAG5k\/AqAEiQTffDMORnF\/vfD8KP0r\/bIAQECwh8QAAAQEICj4jHAhNoe2V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":160,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOIGxAAEAGN\/DAqAEiQTffDMORnF\/vfD8KP0r\/bIAYECwRzAAAAQEICj4jHAhNoe2VfNU8dhpM38DGRSZmxic4e0pEdx+lOUJozRNK0FR\/ZhB0X2eExkEyGGlGIiJpdaUcTRpDGKnG\/6TFMnvwoV63\/D1Ks8iZ9m9UtWLroJGOJ6wteiN4iSbfBKWS","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":160,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0EtlAADcGTt1BN98MwKgBIpxfw5E\/Sv9s73w\/ZIAQAB0xhgAAAQEICk2h7bU+IxwI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":160,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":154,"pkt":"PBXCt3IO0NQSxnP1CABFAACMEtpAADcGToRBN98MwKgBIpxfw5E\/Sv9s73w\/ZIAYAB0FlwAAAQEICk2h7bc+IxwIlt0ZYO7DGu2FWCBlF0Bb5xxs02nWEvubLRglrGZvYH\/z0Ynn93EbsgdsK\/WVQs9F+qP4CaZfhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":160,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0uyhAAEAGnY3AqAEiQTffDMORnF\/vfD9kP0r\/xIAQECkgmAAAAQEICj4jHJBNoe23","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":160,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8M35AAEAGJTDAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECml3QAAAQEICj4jHJBNoe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":112,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8v6FAAEAGmXLAqAEinTeCpsOBnFXYqqIiVqVnNYAYECky+AAAAQEICj4jHNFOrGolRtJrmlCDoq4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":152,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969679,"pkt_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAABqnWNAAEAGIV3AqAEib91KJsOPAbu0bGIyDtZB8IAYECxcwgAAAQEICj4jHS1Nf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":156,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLe\/oAAEARezTAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":157,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLZ0MAAEARj+vAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":132,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Uc1AAEAGUVvAqAEinTc4ksOFnF5LaK51T0tw1IAYECnWQQAAAQEICj4jHkRNhXFJby9fpLXtPtU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":160,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NYVAAEAGIynAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmj0AAAAQEICj4jHp1Noe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":63,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0yHRAADMG56OdNziqwKgBIgG7w3W+IGeqZQKzVYARAB2\/4AAAAQEICk15w7Y+Isxs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":100,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sU1AAEAGp97AqAEinTeClsN+nEtADbo+Q3FEmYAREChWvAAAAQEICj4jH3pOt5\/K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":1431969680467,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.148","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0406{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5uekAAEARKTXAqAEinTc4lDLdnEoAJXlNnGQC\/A+kfzeJzZXZQQBxWhYkhXip+EvBFG8rlU4=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":1431969680467,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.148","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0398{"flow_id":111,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zLtAAEAGjHDAqAEinTeClsOAAbtI+ppVuVVQX4ARECyFHwAAAQEICj4jH3pOt6FD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":1431969680467,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0400{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyVhkAAEAR2gHAqAEinTfrnjLdnF8AHti+nGYCSGBvJFR\/HGq\/K9Cny1\/vxLQHiA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":1431969680467,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":134,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Fu9AAEAGp\/bAqAEib91KL8OHnF60mgVan9mDBYAYECqMTwAAAQEICj4jIB1NhV8Xx9YMHiFnIWo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":121,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969680,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABSh+RAAEAG0RnAqAEinTeCpsODAbsS3ITHvVXOp4AYECxNDgAAAQEICj4jIKROrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":141,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWkJdAAEAGyG\/AqAEinTeCmcOJAbvJCUV1l+7ieIAYECyxoAAAAQEICj4jIbdOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431969681060,"flow_last_seen":1431969681060,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50066,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2fpAAEAGfq\/AqAEiQTffDMOSAbvQogCqAAAAALAC\/\/9eaAAAAgQFtAEDAwUBAQgKPiMhyQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":160,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aJVAAEAG8BjAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmggAAAAQEICj4jIe1Noe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":166,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYa5BN98MwKgBIgG7w5Js9UEp0KIAq6ASOJBL6AAAAgQFrAQCCApNoe8nPiMhyQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":166,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ayJAAEAG7ZPAqAEiQTffDMOSAbvQogCrbPVBKoAQECyijAAAAQEICj4jIk9Noe8n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":166,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8uw1AAEAGnWDAqAEiQTffDMOSAbvQogCrbPVBKoAYECycqwAAAQEICj4jIk9Noe8ngEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIB4iSbfBKWSW1CBvpdcHaqT","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":149,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPjIcAAEARaqPAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":148,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPW28AAEARm7vAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":166,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rmJAADcGs1NBN98MwKgBIgG7w5Js9UEq0KIA84AQAB2yMQAAAQEICk2h70k+IyJP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":166,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABn3QRAAEAGe37AqAEiQTffDMOSAbvQogDzbPVBKoAYECwQoQAAAQEICj4jIs9Noe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50067,"dst_port":40027,"l4_proto":"tcp"}
+0417{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/b9AAEAGpVbAqAEinTc4oMOTnFuhu64eAAAAALAC\/\/+OBAAAAgQFtAEDAwUBAQgKPiMjagAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.162","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0407{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4YcMAAEARzb3AqAEi1cezojLdnF0AJAuMnGgC2mPP3NT+NgZcfouOKEVgI\/tI0sJfUuMhDA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.162","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.16","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0404{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1+dEAAEARBS\/AqAEib91KEDLdnGAAIfCsnGoCw1fhnSu+3d\/Tw+s36JFjatVqYPGvPQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.159","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0398{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyaGwAAEARx63AqAEinTfrnzLdnFUAHmVKnGwCxXHmKlMo0hJpMwmU59yIG9tJmA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.159","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0437{"flow_id":140,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPIXdAAEAGgZ7AqAEinTc4ksOIAbsXgt5RB+ihfoAYECzbvQAAAQEICj4jI85NhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":167,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBqdNzigwKgBIpxbw5OkoMOPobuuH6ASOJAefQAAAgQFrAQCCApNfpJAPiMjagEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":167,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mLVAAEAGCm3AqAEinTc4oMOTnFuhu64fpKDDkIAQECx1FQAAAQEICj4jI\/xNfpJA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":167,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":125,"pkt":"0NQSxnP1PBXCt3IOCABFAABvnb1AAEAGBSrAqAEinTc4oMOTnFuhu64fpKDDkIAYECzMkQAAAQEICj4jI\/xNfpJAQKqCEoqSQqrqe1xV2yxQmr7uY5SiXS4X4klg6qEW5tp9MdxW+w7pX+TxdjnuPTK3ROXSm5DB\/tecXeo=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":167,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UfRAADMGXi6dNzigwKgBIpxbw5OkoMOQobuuWoAQAB2ExAAAAQEICk1+kmU+IyP8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":167,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":126,"pkt":"PBXCt3IO0NQSxnP1CABFAABwUfVAADMGXfGdNzigwKgBIpxbw5OkoMOQobuuWoAYAB3I3AAAAQEICk1+kmY+IyP8txEYtD\/BAwWCfFR\/DqxCoIqSkSd8OvAnnmLeGxO2cwCN4SRtlSl2u+Y2fzv\/2soeZ+xtumO4yWYfROXS","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":167,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bUJAAEAGNeDAqAEinTc4oMOTnFuhu65apKDDzIAQECpz5AAAAQEICj4jJJJNfpJm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":167,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83OFAAEAGxjjAqAEinTc4oMOTnFuhu65apKDDzIAYECodXgAAAQEICj4jJJJNfpJmzRAJJHd6CMc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":166,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABngY9AAEAG1vPAqAEiQTffDMOSAbvQogDzbPVBKoAYECwOhAAAAQEICj4jJOxNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":86,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969681,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83cNAAEAGe0\/AqAEinTeCp8N8nF+W1hdKgdGcA4AZECkD3QAAAQEICj4jJRVOq7X7zDi7upn8y1s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":152,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAABq\/TRAAEAGwYvAqAEib91KJsOPAbu0bGIyDtZB8IAYECxUQQAAAQEICj4jJa5Nf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":142,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABN\/9JAAEAGvwHAqAEib91KL8OKAbuRyk1PjMr2RYAYECxyjQAAAQEICj4jJsRNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":167,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8itpAAEAGGEDAqAEinTc4oMOTnFuhu65apKDDzIAYECobJwAAAQEICj4jJslNfpJmzRAJJHd6CMc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":112,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04ypAAEAGdfHAqAEinTeCpsOBnFXYqqIqVqVnNYARECnOGQAAAQEICj4jJ1VOrGol","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":121,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA07TtAAEAGa+DAqAEinTeCpsODAbsS3ITlvVXOp4ARECx8LQAAAQEICj4jJ1VOrGuY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":1431969682488,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0406{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4pYYAAEARPZvAqAEinTc4kjLdgQkAJLU7nG4Cyw+0E3ewR9IGP0eBLCPkEu6cvusCSULx8g==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":1431969682488,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":1431969682488,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0414{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2L4AAEARJivAqAEib91KHDLdnE4ALJRcnHACG8tsqKlSc3O3hWaMTNmN0BY4DMi8SBQzDHozUa6r8phn","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":1431969682488,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":143,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hMBAAEAGOi7AqAEib91KJsOLnE+UB74KG80ZxoAYECny6AAAAQEICj4jJ1xNf6OUySqTc3CS7Ig=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":160,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ydJAAEAGjtvAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmapwAAAQEICj4jJ8ZNoe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":166,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969682,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABnIoNAAEAGNgDAqAEiQTffDMOSAbvQogDzbPVBKoAYECwLFAAAAQEICj4jKFxNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431969683081,"flow_last_seen":1431969683081,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50069,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAOCFAAEAGavXAqAEinTc4oMOVAbs\/vddwAAAAALAC\/\/9bFwAAAgQFtAEDAwUBAQgKPiMpogAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":156,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLwG0AAEARNsHAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":157,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL8lsAAEARBNPAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":173,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGsBqdNzigwKgBIgG7w5UO87UwP73XcaASOJCODAAAAgQFrAQCCApNfpPQPiMpogEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":173,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+rpAAEAGqGfAqAEinTc4oMOVAbs\/vddxDvO1MYAQECzkpQAAAQEICj4jKjNNfpPQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":173,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8YvRAAEAGP+bAqAEinTc4oMOVAbs\/vddxDvO1MYAYECxW2wAAAQEICj4jKjNNfpPQgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBNGkMYqcb\/pMUye\/ChXrf8","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":167,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8qdRAAEAG+UXAqAEinTc4oMOTnFuhu65apKDDzIAYECoXgQAAAQEICj4jKm9NfpJmzRAJJHd6CMc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":173,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0JsVAADMGiV2dNzigwKgBIgG7w5UO87UxP73XuYAQAB30RwAAAQEICk1+k\/U+Iyoz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":173,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABeYkJAAEAGQLbAqAEinTc4oMOVAbs\/vde5DvO1MYAYECzDbwAAAQEICj4jKsZNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":1431969683445,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54343,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLY\/4AAEARkzDAqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":1431969683445,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54343,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst13.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":1431969683445,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58368,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLbZEAAEARiZ3AqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431969683445,"flow_last_seen":1431969683445,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58368,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst13.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50070,"dst_port":40018,"l4_proto":"tcp"}
+0417{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjFBAAEAGzLvAqAEinTeCqsOWnFJsNFWpAAAAALAC\/\/\/KJgAAAgQFtAEDAwUBAQgKPiMrQAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0398{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAygKMAAEARGILAqAEinTeClDLdnFMAHuO+nHICw5e0uFvnoh7r2z7q0Ash9G6vuA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.37","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0402{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA37XsAAEAR+hLAqAEinTg0JTLdnGAAI2eBnHQCCWFRyRLVPOTLcRjYZLb3DOT1DUSOmuDR","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.37","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0402{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1nZ0AAEARXdnAqAEib91NmjLdnFEAIcopnHYCxd71ZoU+BTO6L2LN9kiyomjWgPGl4A==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0410{"flow_id":176,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhCdN4KqwKgBIpxSw5bt8UdnbDRVqqASOJAWbAAAAgQFrAQCCApOqggfPiMrQAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":176,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bWZAAEAG67HAqAEinTeCqsOWnFJsNFWq7fFHaIAQECxtGQAAAQEICj4jK71Oqggf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":176,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrizRAAEAGzazAqAEinTeCqsOWnFJsNFWq7fFHaIAYECx1igAAAQEICj4jK71Oqggf1scwOyi+GNro1zNlkpz1kJCutCUd78rawR2K0Dss\/kuexdEgM5cPtj8qxMgNmwBXm5DB\/tecXQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":98,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABdKNxAAEAGMBbAqAEinTeCp8N9Abt3wuIecQen4YAZECzqZQAAAQEICj4jLC5Oq7eNha\/REPk0JK+jyXRvQAnIdnOzfqInh3kQnO9afU+VElpw2DvgAIcm25w=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":176,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0T1ZAADcGEsKdN4KqwKgBIpxSw5bt8UdobDRV4YAQAB180gAAAQEICk6qCD4+Iyu9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":176,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":123,"pkt":"PBXCt3IO0NQSxnP1CABFAABtT1dAADcGEoidN4KqwKgBIpxSw5bt8UdobDRV4YAYAB3gCwAAAQEICk6qCD8+Iyu9pJTgmgKa3wc7YKW2mPeXfbP82SUCDqy3KKTR43hW7as5ikFhigkBV78S5V\/amBV6xv+kxTJ78KFe","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":176,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0RktAAEAGEs3AqAEinTeCqsOWnFJsNFXh7fFHoYAQECpsCQAAAQEICj4jLD9Oqgg\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":176,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Vv9AAEAGAhHAqAEinTeCqsOWnFJsNFXh7fFHoYAYECoI3gAAAQEICj4jLD9Oqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":98,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":120,"pkt":"PBXCt3IO0NQSxnP1CABFAABqEHRAADcGUXGdN4KnwKgBIgG7w31xB6gwd8LiSIAZAB2fjgAAAQEICk6rybs+Iywuyw5hYqtwMkLFBj5klpnhmKPM4qsTHrXg9gVOFS0AL0lAmHGXMfgS0ix\/rhnjJaq5EXtIvAqu","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":98,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoDaZAAEAGS4HAqAEinTeCp8N9Abt3wuJIAAAAAFAEAACu8wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":173,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969683,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABejChAAEAGFtDAqAEinTc4oMOVAbs\/vde5DvO1MYAYECzBOwAAAQEICj4jLPpNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":176,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PGRAAEAGHKzAqAEinTeCqsOWnFJsNFXh7fFHoYAYECoG3AAAAQEICj4jLkFOqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":149,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPCJcAAEAR7pPAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":148,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPHy0AAEAR1\/3AqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":166,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABnNhdAAEAGImzAqAEiQTffDMOSAbvQogDzbPVBKoAYECwE+wAAAQEICj4jLnVNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":1431969684467,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.172","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0402{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA16v8AAEARrgrAqAEinTeCrDLdnFMAIRT0nHgCu2bzH4JB7obGwPAa3nMCpmcjtPyNNg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":1431969684467,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.172","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":1431969684467,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0412{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hr8AAEAReCLAqAEib91KKDLdnFIAKIqNnHoCPuiFRI7wAmsXvw\/hsEg3lYrpYaj71nbGjF\/D9YI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":1431969684467,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0431{"flow_id":174,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLqeAAAEARTU7AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":175,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQlQAAEARtNrAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":173,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABe\/1RAAEAGo6PAqAEinTc4oMOVAbs\/vde5DvO1MYAYECy9mgAAAQEICj4jMJtNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":133,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/2ZAAEAGWbrAqAEinTeCmcOGnEV7WksM7xM3SYAYECgNqgAAAQEICj4jMLhOtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":167,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uBBAAEAG6wnAqAEinTc4oMOTnFuhu65apKDDzIAYECoQ\/AAAAQEICj4jMPRNfpJmzRAJJHd6CMc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":176,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ex1AAEAG3fLAqAEinTeCqsOWnFJsNFXh7fFHoYAYECoDogAAAQEICj4jMXtOqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431969685111,"flow_last_seen":1431969685111,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50072,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAAC9AAEAGWN3AqAEinTeCqsOYAbvnclCjAAAAALAC\/\/\/oPwAAAgQFtAEDAwUBAQgKPiMxhAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":70,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABmnN5AAEAGUnLAqAEi1cezr8N3AbvoukrF6jj3F4AZECz\/DAAAAQEICj4jMYpO2zrq3Ik+3JoryHORYpUOodhZtdvbaLVaOrSVdhFGDoNFz\/ygR9NCUBkcRkZjFi6mIQWuXX4=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":111,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABX6YxAAEAGb3zAqAEinTeClsOAAbtI+poyuVVQX4AZECwlEgAAAQEICj4jMftOt6FDtE+JMLnPtxIKxglVlecVLUAud036XUzec3hM4iMJiZPeQZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":182,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYhCdN4KqwKgBIgG7w5jP+27153JQpKASOJApWgAAAgQFrAQCCApOqgmyPiMxhAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":182,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w75AAEAGlVnAqAEinTeCqsOYAbvnclCkz\/tu9oAQECyACwAAAQEICj4jMf1Oqgmy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":182,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8Ym1AAEAG9mLAqAEinTeCqsOYAbvnclCkz\/tu9oAYECxqWgAAAQEICj4jMf1OqgmygEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBCS4DxboeMjVqDWOkGP+QF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtiKlAAEAGtiPAqAEiF84hpsNtAbuewXpuGKHN44AYECxWxwAAAQEICj4jMinsLkk6FgMBALQBAACwAwNVWh9r1BitCFD8cZbUoP0jV12FHPzKsJViTeYgJXwI\/wAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":111,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":96,"pkt":"PBXCt3IO0NQSxnP1CABFAABS8SNAADcGcOqdN4KWwKgBIgG7w4C5VVCuSPqaVoAZAB2QuAAAAQEICk63suw+IzH7RHUUo+s9TjGbDYg0\/5XxxuhuHyma7y+VMLdNReiV","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":111,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoFDhAAEAGRQDAqAEinTeClsOAAbtI+ppWAAAAAFAEAAAlvAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":182,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ZyZAADcG+vGdN4KqwKgBIgG7w5jP+27253JQ7IAQAB2PswAAAQEICk6qCdE+IzH9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":182,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlfFBAAEAG3JbAqAEinTeCqsOYAbvnclDsz\/tu9oAYECx20AAAAQEICj4jMnhOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":160,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ebhAAEAG3vXAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECmPvwAAAQEICj4jMq5Noe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":1431969685483,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.12","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0411{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9kPYAAEARbgbAqAEib91KDDLdnF8AKfx\/nHwCoMStpaQYl8DnkwYEqqAF9FXdbHxKRUYHrOVyJRT4","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":1431969685483,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":1431969685483,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40034,"l4_proto":"udp"}
+0415{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAc7wAAEARJVPAqAEinTeCnDLdnGIALEvBnH4CZ\/Wwkka3Pn+XJ2UB3JhFKbNG53SJ0IkPRrwOiZA6M572","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":1431969685483,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40034,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431969685484,"flow_last_seen":1431969685484,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.31","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0412{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA72\/8AAEARIuzAqAEib91KHzLdnFUAJxsjnIACakgRW6zNH9umAy\/xnD4EBConFfeCu32RWyeo5A==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431969685484,"flow_last_seen":1431969685484,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.31","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0431{"flow_id":174,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLzugAAEARKEbAqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":175,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLSKwAAEARroLAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":100,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA82+1AADcGhjadN4KWwKgBIpxLw35DcUSZQA26NoAYAB0qhwAAAQEICk63szg+IuZBa1Fa9Z6K\/TI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":100,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo05tAAEAGhZzAqAEinTeClsN+nEtADbo2AAAAAFAEAAB0OgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":182,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969685,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlvcJAAEAGmyTAqAEinTeCqsOYAbvnclDsz\/tu9oAYECx01wAAAQEICj4jNHFOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":152,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAABq0kJAAEAG7H3AqAEib91KJsOPAbu0bGIyDtZB8IAYECxECAAAAQEICj4jNedNf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":156,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLMVcAAEARxdfAqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":157,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL3PYAAEARGjjAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":132,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iRBAAEAGGhjAqAEinTc4ksOFnF5LaK51T0tw1IAYECm+OAAAAQEICj4jNk1NhXFJby9fpLXtPtU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":141,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWXbBAAEAG+1bAqAEinTeCmcOJAbvJCUV1l+7ieIAYECycdwAAAQEICj4jNuBOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":1431969686494,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.29","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0410{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7KdYAAEAR1RfAqAEib91KHTLdnFgAJyRCnIIC1fLHUFbyfUuPJFSEHOCi7XP7hf4fCpbSA7AYcw==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":1431969686494,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.29","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":1431969686494,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.147","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0414{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+wC0AAEAR2OzAqAEinTeCkzLdnFMAKhU5nIQCbtjtgTR5b1SpAOgeT3hZ1sNas6z5WpsHwiEzG2Fdeg==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":1431969686494,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.147","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0459{"flow_id":173,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABee+9AAEAGJwnAqAEinTc4oMOVAbs\/vde5DvO1MYAYECy3IQAAAQEICj4jNxRNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":176,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KGZAAEAGMKrAqAEinTeCqsOWnFJsNFXh7fFHoYAYECr99AAAAQEICj4jNyhOqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":182,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlvF1AAEAGnInAqAEinTeCqsOYAbvnclDsz\/tu9oAYECxxrgAAAQEICj4jN5pOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISl+cAAEARXILAqAEiwKgB\/0RcRFwB\/jf1eyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":257,"pkt":"0NQSxnP1PBXCt3IOCABFAADzoepAAEAGdU\/AqAEiF99JIsNrAbvkkjeTMYDD\/oAZECxKjgAAAQEICj4jOCX301nQFgMBALoBAAC2AwNVWh9qIUBTYdqPuvpJ\/EUxWvWdVTCc6qQWuOlUPkFPXAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQwAAABkAFwAAFGFwcHMuc2t5cGVhc3NldHMuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":134,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83MZAAEAG4h7AqAEib91KL8OHnF60mgVan9mDBYAYECp0PgAAAQEICj4jOC5NhV8Xx9YMHiFnIWo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1054{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISTt8AAEARZ\/jAqAFc\/\/\/\/\/0RcRFwB\/v9VeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969686,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":166,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABnR7hAAEAGEMvAqAEiQTffDMOSAbvQogDzbPVBKoAYECz5kgAAAQEICj4jOd1Noe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":63,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDyHVAADMG51OdNziqwKgBIgG7w3W+IGdbZQKzVYAYAB0hggAAAQEICk15ypg+IsxsFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":63,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoAo1AAEAGoJfAqAEinTc4qsN1AbtlArNVAAAAAFAEAAA6rAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.168","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0419{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBxOwAAEARHhbAqAEinTc4qDLdnEYALROCnIYCHY\/YUYokwK99l51ViNrnwr9nS0r47IMjMyFmHPRTFPvIVw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.168","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.29","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0418{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/rI8AAEAR6\/\/AqAEiQTffHTLdnEoAK4\/BnIgC0n2YTtpud4yFT0SZ+E2i0ODhSKmWbVLKl+n0TQ0fOTc=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0405{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3NGcAAEAR+6bAqAEinTfrpjLdnE8AI+OWnIoCh50u5xbhS9toIKRfor72\/ZRTG\/Y\/lAII","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0437{"flow_id":140,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969687,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPimVAAEAGGLDAqAEinTc4ksOIAbsXgt5RB+ihfoAYECzEdQAAAQEICj4jOxZNhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8fZJAAEAGKfvAqAEinTg0LMNwnGCx3l+sHyRlkIAZECn37AAAAQEICj4jPM1MZC+5IVzDseW9I30=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":112,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0DP5AADcGVR6dN4KmwKgBIpxVw4FWpWc92KqiIoARAB0DjwAAAQEICk6sfdE+Iu5A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":182,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlzKZAAEAGjEDAqAEinTeCqsOYAbvnclDsz\/tu9oAYECxsJQAAAQEICj4jPSNOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":167,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87W1AAEAGtazAqAEinTc4oMOTnFuhu65apKDDzIAYECoEuwAAAQEICj4jPTVNfpJmzRAJJHd6CMc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":132,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09iVAAEAGrQrAqAEinTc4ksOFnF5LaK59T0tw1IARECl5YQAAAQEICj4jPsJNhXFJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":140,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mudAAEAGCEnAqAEinTc4ksOIAbsXgt5sB+ihfoARECwtHQAAAQEICj4jPsJNhXLb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":133,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0KW1AAEAGL7zAqAEinTeCmcOGnEV7WksU7xM3SYARECiQFwAAAQEICj4jPsJOtNyv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":141,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zt9AAEAGiknAqAEinTeCmcOJAbvJCUWXl+7ieIARECyMywAAAQEICj4jPsJOtN5C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":134,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bgBAAEAGUO3AqAEib91KL8OHnF60mgVin9mDBYARECqEdwAAAQEICj4jPsJNhV8X","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":142,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0hDhAAEAGOrXAqAEib91KL8OKAbuRyk1ojMr2RYARECyYHAAAAQEICj4jPsJNhWCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":1431969688514,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0416{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAzhcAAEARLU\/AqAEib91NnzLdnEkALGRznIwCwyeMbMrdlUQ5AFonNJwRLd3E7Awg+gZSbquojb\/nyMcP","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":1431969688514,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":1431969688514,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0406{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4ZaYAAEARmVXAqAEib91KEjLdgQkAJLX6nI4C1Tkw7dXubJLsc4XN4Hhz+Cr0PORpW0nsUg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":1431969688514,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":143,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MPRAAEAGjfrAqAEib91KJsOLnE+UB74KG80ZxoAYECnbQAAAAQEICj4jPwRNf6OUySqTc3CS7Ig=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":121,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":96,"pkt":"0NQSxnP1PBXCt3IOCABFAABSsw9AAEAGpe7AqAEinTeCpsODAbsS3ITHvVXOp4AZECwupAAAAQEICj4jPw1OrGuYTUkltcFyUDx1UKDVsGVbE\/Ct+3YM+MpJT8qq59Fj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":142,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABN\/MpAAEAGwgnAqAEib91KL8OKAbuRyk1PjMr2RYAZECxaKwAAAQEICj4jPyVNhWCpro9SILG2kEIipiuKXJkgpDduj12IclUwiw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":175,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtqwAAEARQILAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":174,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQnQAAEARtLrAqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":121,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7pUZAADcGvI6dN4KmwKgBIgG7w4O9Vc72EtyE5oAZAB19RgAAAQEICk6sfo4+Iz8Nkairs0TpphfDTFAr69ewIlB4l\/gywEtHfMa7ineOsI\/qoQfnw+1GW6AnTrPGpVyx4u4xR9o3mBqGEBcUacjaAlXeRvtxmsA=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":121,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969688,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAobwNAAEAG6iTAqAEinTeCpsODAbsS3ITmAAAAAFAEAABxNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":176,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/ctAAEAGW0TAqAEinTeCqsOWnFJsNFXh7fFHoYAYECrzZAAAAQEICj4jQbhOqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":112,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8DP9AADcGVRWdN4KmwKgBIpxVw4FWpWc12KqiIoAYAB1atwAAAQEICk6sf0A+Iu5AKJ1ayO+rNFA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50074,"dst_port":40003,"l4_proto":"tcp"}
+0417{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAzR5AAEAGi+rAqAEinTeCrcOanEPZ9P\/0AAAAALAC\/\/+a6AAAAgQFtAEDAwUBAQgKPiNCegAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50075,"dst_port":40003,"l4_proto":"tcp"}
+0416{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGpxAAEAG1PvAqAEi1cezjsObnEM6Aj3FAAAAALAC\/\/+TmAAAAgQFtAEDAwUBAQgKPiNCegAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50076,"dst_port":40014,"l4_proto":"tcp"}
+0416{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA7khAAEAGAdHAqAEinTfrnMOcnE7UANcqAAAAALAC\/\/9gqgAAAgQFtAEDAwUBAQgKPiNCegAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0406{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zvgAAEARklXAqAEiQAQXlzLdnF0AJqz9nJAC1zV5OvO9upQBsUXmJpF2nBcsF0HuRy8JJIUg","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0406{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5rSQAAEARguHAqAEinTfrrDLdnGAAJdphnJIChjRH4yCKz81IO5fkX1qSeV8SZKk7yqqsiNY=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.152","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0400{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyo54AAEARi\/LAqAEi1cezmDLdnFcAHjAjnJQCZ2daOJDdnSgXIMa0IqUKO\/m6pw==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.152","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":194,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcG+JvVx7OOwKgBIpxDw5sesq08OgI9xqASOJCQMAAAAgQFrAQCCApQDL\/UPiNCegEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":194,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0n95AAEAGT8XAqAEi1cezjsObnEM6Aj3GHrKtPYAQECznJAAAAQEICj4jQrBQDL\/U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":194,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":158,"pkt":"0NQSxnP1PBXCt3IOCABFAACQdIRAAEAGesPAqAEi1cezjsObnEM6Aj3GHrKtPYAYECzznQAAAQEICj4jQrBQDL\/Ub+iEpNZYNceRyGBgSB3fK8wL2sGV8+6y9bK312hvam5FzQRsq5UiP\/Cn1owftehiayARDqcsrfqj+AmmX4QlEtvQAT4X3J0qE6j51s80FUJLgPFuh4yNWoNY6QY=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":195,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIpxOw5wzprYh1ADXK6ASOJDpcAAAAgQFrAQCCApMWRmAPiNCegEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":195,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0irdAAEAGZW7AqAEinTfrnMOcnE7UANcrM6a2IoAQECxAVAAAAQEICj4jQsFMWRmA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":195,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":141,"pkt":"0NQSxnP1PBXCt3IOCABFAAB\/mIxAAEAGV07AqAEinTfrnMOcnE7UANcrM6a2IoAYECxG4AAAAQEICj4jQsFMWRmAJFiH5172Tr0FPBvPxOpG1eCQhpvo82\/0j3xbBUi8uEENQAOEWBWw4BNUSizN2LCnc4hZti8UdSKrYFFO52ztOuM4SeafxGVSGxBB","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":194,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0EtxAADcG5cfVx7OOwKgBIpxDw5sesq09OgI+IoAQAB32ygAAAQEIClAMv+E+I0Kw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":194,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":129,"pkt":"PBXCt3IO0NQSxnP1CABFAABzEt1AADcG5YfVx7OOwKgBIpxDw5sesq09OgI+IoAYAB2wZQAAAQEIClAMv+E+I0KwXfhHd5fkymEOFO2T0M29DlwdRzJ+EXUcfp7AyYGsDA\/q2T6vRi4OuNEGuEeMzrFtsGEed7z9CnOIWbYvFHUi","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":194,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0LWtAAEAGwjjAqAEi1cezjsObnEM6Aj4iHrKtfIAQECrmRgAAAQEICj4jQuhQDL\/h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":194,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87R5AAEAGAn3AqAEi1cezjsObnEM6Aj4iHrKtfIAYECovCQAAAQEICj4jQuhQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":193,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYg2dN4KtwKgBIpxDw5oq9Bj82fT\/9aASOJAjJwAAAgQFrAQCCApOp72RPiNCegEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":193,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EYdAAEAGR47AqAEinTeCrcOanEPZ9P\/1KvQY\/YAQECx51gAAAQEICj4jQvVOp72R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":193,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":142,"pkt":"0NQSxnP1PBXCt3IOCABFAACA29NAAEAGfPXAqAEinTeCrcOanEPZ9P\/1KvQY\/YAYECxsZwAAAQEICj4jQvVOp72Roj2v1gblxmz1grQUCbmtnoREti8HhLI6SgMZqAyia8h8WMfNOs6A0EF6r7XUTC2tvP0Kc4hZti8UdSKrYFFO52ztOuM4SeafxGVSGw==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":195,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0r7BAADYGSnWdN+ucwKgBIpxOw5wzprYi1ADXdoAQAB1QBgAAAQEICkxZGZI+I0LB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":195,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":159,"pkt":"PBXCt3IO0NQSxnP1CABFAACRr7FAADYGShedN+ucwKgBIpxOw5wzprYi1ADXdoAYAB3dYgAAAQEICkxZGZI+I0LBHpW0LI9Ioyn0A0r8\/9WH8z1BKK8601pstMI\/k7rWVLbhf3yGCn63FKVck\/IhhAxIsGEed7z9CnOIWbYvFHUiq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg90","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":195,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0X5FAAEAGkJTAqAEinTfrnMOcnE7UANd2M6a2f4AQECk\/VwAAAQEICj4jQwdMWRmS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":195,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8S0VAAEAGpNjAqAEinTfrnMOcnE7UANd2M6a2f4AYECk7igAAAQEICj4jQwdMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":173,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABekahAAEAGEVDAqAEinTc4oMOVAbs\/vde5DvO1MYAYECyq+QAAAQEICj4jQzxNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":193,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0pUxAADcGvMidN4KtwKgBIpxDw5oq9Bj92fUAQYAQAB2JeQAAAQEICk6nvbE+I0L1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":193,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":117,"pkt":"PBXCt3IO0NQSxnP1CABFAABnpU1AADcGvJSdN4KtwKgBIpxDw5oq9Bj92fUAQYAYAB1iFgAAAQEICk6nvbE+I0L1z3yazfMdxpBDzF\/iFZDE4SV5\/k6gypL2BDE1Ky\/ecpaL2KW5QLJjI76cB+sOmhhokMH+","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":193,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EKlAAEAGSGzAqAEinTeCrcOanEPZ9QBBKvQZMIAQECp4uAAAAQEICj4jQ3ZOp72x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":193,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GnRAAEAGPpnAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpfLQAAAQEICj4jQ3ZOp72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":194,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oiBAAEAGTXvAqAEi1cezjsObnEM6Aj4iHrKtfIAYECottwAAAQEICj4jRDpQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":195,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uUVAAEAGNtjAqAEinTfrnMOcnE7UANd2M6a2f4AYECk6DgAAAQEICj4jRINMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":193,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/lpAAEAGWrLAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpdKgAAAQEICj4jRXlOp72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":194,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Tc9AAEAGoczAqAEi1cezjsObnEM6Aj4iHrKtfIAYECor3AAAAQEICj4jRhVQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":143,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0p15AAEAGF5jAqAEib91KJsOLnE+UB74SG80ZxoARECmNzgAAAQEICj4jRjdNf6OU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":152,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OFhAAEAGhp7AqAEib91KJsOPAbu0bGJoDtZB8IARECxGygAAAQEICj4jRjdNf6U4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50077,"dst_port":40022,"l4_proto":"tcp"}
+0417{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVDVAAEAGBNHAqAEinTeCsMOdnFaE5icqAAAAALAC\/\/\/EvgAAAgQFtAEDAwUBAQgKPiNGZAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0420{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBoHIAAEARwNrAqAEiQAQXkTLdnFgALcyQnJYCZ5BZSWZ\/iXC28\/gJa4xy6SADRNB7IBe6OkY8K1Ib90nh6Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.165","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0404{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2TSkAAEARlefAqAEinTc4pTLdnFQAIg\/nnJgCnGl25qOBTIS5Gpv0M8FAGs9\/YbWac7o=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.165","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":195,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ELJAAEAG32vAqAEinTfrnMOcnE7UANd2M6a2f4AYECk34AAAAQEICj4jRrFMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":199,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIpxWw53yBAwphOYnK6ASOJA8uAAAAgQFrAQCCApOpRObPiNGZAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":199,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+KpAAEAGYGfAqAEinTeCsMOdnFaE5icr8gQMKoAQECyTZwAAAQEICj4jRt9OpROb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":199,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6Gp5AAEAGPi7AqAEinTeCsMOdnFaE5icr8gQMKoAYECz6XgAAAQEICj4jRt9OpRObqiJE\/ujFyMl3e1PSS53Me2\/+X7AvI9mQFi7CN4NQeMStFLqnIe0YlJ6soUrEHiLaQkuA8W6HjI1ag1jpBj\/kBXK7MOGe9w==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":199,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0H5BAADcGQoKdN4KwwKgBIpxWw53yBAwqhOYncYAQAB2jEQAAAQEICk6lE7o+I0bf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":199,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":134,"pkt":"PBXCt3IO0NQSxnP1CABFAAB4H5FAADcGQj2dN4KwwKgBIpxWw53yBAwqhOYncYAYAB1QtgAAAQEICk6lE7s+I0bfL6AqGnQx6yZP6VrKZH40YtSXTeBqjm4Hz2ILgCpmXDC7bpb2JNtPaL0snaqaL6XXLkdMTRpDGKnG\/6TFMnvwoV63\/D0=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":199,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA006tAAEAGhWbAqAEinTeCsMOdnFaE5idx8gQMboAQECmSQAAAAQEICj4jR19OpRO7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":199,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Jq1AAEAGMl3AqAEinTeCsMOdnFaE5idx8gQMboAYECn0JQAAAQEICj4jR19OpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":182,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABl1MpAAEAGhBzAqAEinTeCqsOYAbvnclDsz\/tu9oAYECxh3QAAAQEICj4jR2tOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":160,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vJxAAEAGnBHAqAEiQTffDMORnF\/vfD9kP0r\/xIAYECl6tgAAAQEICj4jR7dNoe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431969691076,"flow_last_seen":1431969691076,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50078,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIjRAAEAGNtXAqAEinTeCrcOeAbsMd47qAAAAALAC\/\/9tvAAAAgQFtAEDAwUBAQgKPiNIswAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431969691076,"flow_last_seen":1431969691076,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50079,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAl7lAAEAGV97AqAEi1cezjsOfAbt1SdybAAAAALAC\/\/9NxgAAAgQFtAEDAwUBAQgKPiNIswAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431969691076,"flow_last_seen":1431969691076,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50080,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWD1AAEAGl9zAqAEinTfrnMOgAbv31LXOAAAAALAC\/\/\/yiAAAAgQFtAEDAwUBAQgKPiNIswAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":193,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uTlAAEAGn9PAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpZ7gAAAQEICj4jSLVOp72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":203,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcG+JvVx7OOwKgBIgG7w58e2AO\/dUncnKASOJDyJAAAAgQFrAQCCApQDMFlPiNIswEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":203,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0teBAAEAGOcPAqAEi1cezjsOfAbt1SdycHtgDwIAQECxJCwAAAQEICj4jSPdQDMFl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":203,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8oixAAEAGTS\/AqAEi1cezjsOfAbt1SdycHtgDwIAYECzzGQAAAQEICj4jSPdQDMFlgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDq02i5lo\/01QILQLEuR0xN","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":204,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIgG7w6ATTYBZ99S1z6ASOJDP3gAAAgQFrAQCCApMWRsSPiNIswEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":204,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bg9AAEAGghbAqAEinTfrnMOgAbv31LXPE02AWoAQECwmwwAAAQEICj4jSPlMWRsS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":204,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8DG1AAEAG43DAqAEinTfrnMOgAbv31LXPE02AWoAYECxQUQAAAQEICj4jSPlMWRsSgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAaQxipxv+kxTJ78KFet\/w9","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":194,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8DIJAAEAG4xnAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoo8AAAAQEICj4jSQFQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":202,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYg2dN4KtwKgBIgG7w56D64icDHeO66ASOJAr0QAAAgQFrAQCCApOp78jPiNIswEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":202,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0APxAAEAGWBnAqAEinTeCrcOeAbsMd47rg+uInYAQECyCfgAAAQEICj4jSTBOp78j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":202,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8oa9AAEAGtx3AqAEinTeCrcOeAbsMd47rg+uInYAYECwsjAAAAQEICj4jSTBOp78jgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBKs8iZ9m9UtWLroJGOJ6wt","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":203,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0wrZAADcGNe3Vx7OOwKgBIgG7w58e2APAdUnc5IAQAB1YwAAAAQEIClAMwXc+I0j3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":203,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOrURAAEAGQkXAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwMfAAAAQEICj4jSTdQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":204,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0m3lAADYGXqydN+ucwKgBIgG7w6ATTYBa99S2F4AQAB02eQAAAQEICkxZGyM+I0j5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":204,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrs3NAAEAGPHvAqAEinTfrnMOgAbv31LYXE02AWoAYECx0qwAAAQEICj4jST9MWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":199,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LXRAAEAGK5bAqAEinTeCsMOdnFaE5idx8gQMboAYECnyKgAAAQEICj4jSVpOpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":202,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0N95AADcGKjedN4KtwKgBIgG7w56D64idDHePM4AQAB2SJAAAAQEICk6nv0Q+I0kw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":202,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABUFOBAAEAGRBXAqAEinTeCrcOeAbsMd48zg+uInYAYECyQlQAAAQEICj4jSbBOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":195,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8b19AAEAGgL7AqAEinTfrnMOcnE7UANd2M6a2f4AYECk0SwAAAQEICj4jSkZMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0398{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03rMAAEARUOLAqAEi1cezkTLdnFsAIONWnJoCpMZAnYkDnzYrDpEHe3Wyl3Fm6DsP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0402{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA38a4AAEARPmXAqAEinTfroDLdnFsAI2YonJwCbYbrE4NbR6JS44ONijeTgTVa37UWYcSt","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0417{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/mMEAAEARl0\/AqAEinTfrmzLdnEMAK8StnJ4Ceg13qBmaNbQ5r3u++QJg+\/7hY4I5I2kK1W2d7qoWGw0=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0434{"flow_id":203,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOYSNAAEAGjmbAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwLBgAAAQEICj4jSq1QDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":204,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABr1T9AAEAGGq\/AqAEinTfrnMOgAbv31LYXE02AWoAYECxzMwAAAQEICj4jSrdMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":175,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLdPMAAEARgjvAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":174,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLeBAAAEARfx7AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":202,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969691,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABUpjRAAEAGssDAqAEinTeCrcOeAbsMd48zg+uInYAYECyOkQAAAQEICj4jS7ROp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":199,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GGxAAEAGQJ7AqAEinTeCsMOdnFaE5idx8gQMboAYECnu+wAAAQEICj4jTIlOpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1431969692087,"flow_last_seen":1431969692087,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50081,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWFBAAEAGALbAqAEinTeCsMOhAbuvVQecAAAAALAC\/\/9OOgAAAgQFtAEDAwUBAQgKPiNMnwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":203,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABO+BNAAEAG93XAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwI5AAAAQEICj4jTM9QDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":204,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrU7xAAEAGnDLAqAEinTfrnMOgAbv31LYXE02AWoAYECxxDAAAAQEICj4jTN5MWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":208,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIgG7w6FI4LuBr1UHnaASOJC+bQAAAgQFrAQCCApOpRUtPiNMnwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":208,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dU1AAEAG48TAqAEinTeCsMOhAbuvVQedSOC7goAQECwVHQAAAQEICj4jTRpOpRUt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":208,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8ZL9AAEAG9ArAqAEinTeCsMOhAbuvVQedSOC7goAYECwH1AAAAQEICj4jTRpOpRUtgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAdqpMoeVZPtJXCywBx7gcM","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":208,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rslAADcGs0idN4KwwKgBIgG7w6FI4LuCr1UH5YAQAB0kxQAAAQEICk6lFUw+I00a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":208,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuyYFAAEAGj1bAqAEinTeCsMOhAbuvVQflSOC7goAYECwpBQAAAQEICj4jTZZOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":194,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8F3hAAEAG2CPAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoj4AAAAQEICj4jThFQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":133,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87cNAAEAGa13AqAEinTeCmcOGnEV7WksM7xM3SYAZECjwPwAAAQEICj4jTiFOtNyvZO1SW4ugTYc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431969692507,"flow_last_seen":1431969692507,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0414{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAlm8AAEARZQTAqAEib91NkjLdgQkALPOBnKACf9Ciuj22pCihR6NIjTKXTxwVlkuMzvocVlIJl4RJ8z3V","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431969692507,"flow_last_seen":1431969692507,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0412{"flow_id":193,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/u5AAEAGWh7AqAEinTeCrcOanEPZ9QBBKvQZMIAYECpUPQAAAQEICj4jTmZOp72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":202,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABUG0JAAEAGPbPAqAEinTeCrcOeAbsMd48zg+uInYAYECyLUwAAAQEICj4jTvJOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":208,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuNqxAAEAGIizAqAEinTeCsMOhAbuvVQflSOC7goAYECwnCAAAAQEICj4jT5NOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":166,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969692,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABnuqFAAEAGneHAqAEiQTffDMOSAbvQogDzbPVBKoAYECzjiQAAAQEICj4jT+ZNoe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":203,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOVnlAAEAGmRDAqAEi1cezjsOfAbt1SdzkHtgDwIAYECwFaAAAAQEICj4jUEtQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":204,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABryVBAAEAGJp7AqAEinTfrnMOgAbv31LYXE02AWoAYECxthwAAAQEICj4jUGNMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":195,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/IlAAEAG85PAqAEinTfrnMOcnE7UANd2M6a2f4AYECkt6gAAAQEICj4jUKdMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":149,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPOXIAAEARvbjAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":148,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPap8AAEARjIvAqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":199,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85kFAAEAGcsjAqAEinTeCsMOdnFaE5idx8gQMboAYECnpZgAAAQEICj4jUh5OpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":208,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969693,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuZSpAAEAG863AqAEinTeCsMOhAbuvVQflSOC7goAYECwj2AAAAQEICj4jUsNOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":141,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWFO5AAEAGRBnAqAEinTeCmcOJAbvJCUV1l+7ieIAZECx\/LgAAAQEICj4jVChOtN5CdYilVbtaCwK\/tgRArD4Y28szEXDIjTbyD0VdE11jWOuPGA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":202,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABUabxAAEAG7zjAqAEinTeCrcOeAbsMd48zg+uInYAYECyFngAAAQEICj4jVKdOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":141,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":107,"pkt":"PBXCt3IO0NQSxnP1CABFAABdPEBAADcGJcCdN4KZwKgBIgG7w4mX7uLHyQlFmIAZAB1SIAAAAQEICk608Kc+I1Qoab8qunvrdzUzZ7P3fP\/Li75TLCJWJedutTr4YmIsCXASJeMEQixaTpg=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":141,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAooNdAAEAGuF3AqAEinTeCmcOJAbvJCUWYAAAAAFAEAAD6XgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":167,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA838JAAEAGw1fAqAEinTc4oMOTnFuhu65apKDDzIAYECrtAgAAAQEICj4jVO1NfpJmzRAJJHd6CMc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":134,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03cxAADYG6yBv3UovwKgBIpxew4ef2YMNtJoFWoARAB25AwAAAQEICk2Fct0+IwZ9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":152,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":120,"pkt":"0NQSxnP1PBXCt3IOCABFAABqHyxAAEAGn5TAqAEib91KJsOPAbu0bGIyDtZB8IAZECwkXwAAAQEICj4jVY9Nf6U4DpQ6T7GhI\/HZuALGyyd6FuE62cjswcclHGXEXQQQrFo1hEMiHK+aF1hYQEgpCBKH6FPKIRys","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":176,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KpxAAEAGLnTAqAEinTeCqsOWnFJsNFXh7fFHoYAYECrfCwAAAQEICj4jVhFOqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":160,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w0BAAEAGlXXAqAEiQTffDMORnF\/vfD9sP0r\/xIARECnnAQAAAQEICj4jVh1Noe23","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":166,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TzhAAEAGCX7AqAEiQTffDMOSAbvQogEmbPVBKoARECxuIAAAAQEICj4jVh1Noe9J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":203,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOJalAAEAGyeDAqAEi1cezjsOfAbt1SdzkHtgDwIAYECz\/NwAAAQEICj4jVntQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":152,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACD5M1AADcG4tlv3UomwKgBIgG7w48O1kHwtGxiMoAYAB3hZwAAAQEICk1\/tcg+IxODFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":152,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoQblAAEAGfUnAqAEib91KJsOPAbu0bGIyAAAAAFAEAABYKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":204,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrGmVAAEAG1YnAqAEinTfrnMOgAbv31LYXE02AWoAYECxnRwAAAQEICj4jVqNMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":132,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Ac9AADMGrmGdNziSwKgBIpxew4VPS3DcS2iudYARAB2uaQAAAQEICk2Fhbk+IwVW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":194,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969694,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CJBAAEAG5wvAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoahwAAAQEICj4jV2pQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":208,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuSWlAAEAGD2\/AqAEinTeCsMOhAbuvVQflSOC7goAYECwePwAAAQEICj4jWFxOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":193,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cjdAAEAG5tXAqAEinTeCrcOanEPZ9QBBKvQZMIAYECpJpAAAAQEICj4jWP9Op72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":156,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLThEAAEARqR3AqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":157,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLOT8AAEARve\/AqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431969695483,"flow_last_seen":1431969695483,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50086,"dst_port":40023,"l4_proto":"tcp"}
+0417{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAoJZAAEAGGuzAqAEib91NjsOmnFcVc978AAAAALAC\/\/\/LYQAAAgQFtAEDAwUBAQgKPiNZ1AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABD5OwAAEAREkrAqAEiwKgBAc5yADUAL8ad+vYBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDIwMAAEAR1DPAqAEiwKgBAdmfADUAL7TEHKMBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":173,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABebtlAAEAGNB\/AqAEinTc4oMOVAbs\/vde5DvO1MYAYECyTcQAAAQEICj4jWsRNfpP1C\/K+P2bJpeJPHa2PUHDULtdZf\/0zeGwCQKqXzvyh2rxHpWJ9WEovTk91","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":210,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIpxXw6bHcDhRFXPe\/aASOJD2ggAAAgQFrAQCCApNjF\/4PiNZ1AEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":210,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IC9AAEAGm1\/AqAEib91NjsOmnFcVc979x3A4UoAQECxMhgAAAQEICj4jWvtNjF\/4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":210,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":141,"pkt":"0NQSxnP1PBXCt3IOCABFAAB\/uqpAAEAGAJnAqAEib91NjsOmnFcVc979x3A4UoAYECyGLwAAAQEICj4jWvtNjF\/4dWx+T3e+DQAa0u3ClZbvo4ZP+EoGFF3JcvWAwPlePIKeXEEzkaPGAplyDX6zh0een8RlUhsQQX5XHN1qU+g5Fg90VYKLwDGux8zN","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":142,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lvJAADYGMftv3UovwKgBIgG7w4qMyvaUkcpNT4ARAB3HaAAAAQEICk2FdF0+Iwub","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":182,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlLkpAAEAGKp3AqAEinTeCqsOYAbvnclDsz\/tu9oAYECxOFQAAAQEICj4jWzNOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":140,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPYGJAAEAGQrPAqAEinTc4ksOIAbsXgt5RB+ihfoAZECykKwAAAQEICj4jW19NhXLb+CbW3lZbBv40\/beInvTLb7s0B7Su\/nEv8OsV","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":140,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969695,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA006tAADMG3ISdNziSwKgBIgG7w4gH6KHNF4LeUYARAB1cogAAAQEICk2Fhu4+IwsF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":140,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo2E5AADMG1+2dNziSwKgBIgG7w4gH6KF+AAAAAFAEAACpogAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":210,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0WBNAADcGbHtv3U2OwKgBIpxXw6bHcDhSFXPfSIAQAB1cAAAAAQEICk2MYEI+I1r7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_id":210,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":149,"pkt":"PBXCt3IO0NQSxnP1CABFAACHWBRAADcGbCdv3U2OwKgBIpxXw6bHcDhSFXPfSIAYAB09YAAAAQEICk2MYEM+I1r7eR3blUMB5PouxFyuRYonsfZoNCz2G9oPiMPd9qt7RWlYxme9RxpPeCiB3SFgyTwfpyyt+qP4CaZfhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI0=","pkt_caplen":149,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":210,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OXVAAEAGghnAqAEib91NjsOmnFcVc99Ix3A4pYAQEClKeQAAAQEICj4jXCJNjGBD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":210,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jEBAAEAGL0bAqAEib91NjsOmnFcVc99Ix3A4pYAYECmzDgAAAQEICj4jXCJNjGBDwr8qfxKhl3o=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":199,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u85AAEAGnTvAqAEinTeCsMOdnFaE5idx8gQMboAYECnfBgAAAQEICj4jXH5OpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":195,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cl1AAEAGfcDAqAEinTfrnMOcnE7UANd2M6a2f4AYECkh8QAAAQEICj4jXKBMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":143,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0uhpAADcGDdxv3UomwKgBIpxPw4sbzRnOlAe+CoARAB3CBAAAAQEICk1\/t34+Iw4j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6lQcAAEARYjjAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":167,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0b3pAAEAGM6jAqAEinTc4oMOTnFuhu65ipKDDzIARECo6pgAAAQEICj4jXcdNfpJm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":173,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09\/ZAAEAGqyvAqAEinTc4oMOVAbs\/vdfjDvO1MYARECyweQAAAQEICj4jXcdNfpP1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":202,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969696,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABUy\/hAAEAGjPzAqAEinTeCrcOeAbsMd48zg+uInYAYECx6\/gAAAQEICj4jX0dOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431969697097,"flow_last_seen":1431969697097,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50087,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAaXZAAEAGUgzAqAEib91NjsOnAbtL1T0XAAAAALAC\/\/\/LOAAAAgQFtAEDAwUBAQgKPiNgHAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":211,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIgG7w6e9PNNuS9U9GKASOJBj3AAAAgQFrAQCCApNjGGMPiNgHAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":211,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Y41AAEAGWAHAqAEib91NjsOnAbtL1T0YvTzTb4AQECy5igAAAQEICj4jYZhNjGGM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":211,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8lqJAAEAGJKTAqAEib91NjsOnAbtL1T0YvTzTb4AYECzcrwAAAQEICj4jYZhNjGGMgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIA\/5AVyuzDhnvc8fYrzCNk2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431969697530,"flow_last_seen":1431969697530,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50088,"dst_port":33033,"l4_proto":"tcp"}
+0416{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWjtAAEAGlejAqAEinTfrksOogQnO4dHgAAAAALAC\/\/9nBQAAAgQFtAEDAwUBAQgKPiNhywAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":212,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIoEJw6jH8XvBzuHR4aASOJCSaAAAAgQFrAQCCApMXRz0PiNhywEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":212,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UqNAAEAGnYzAqAEinTfrksOogQnO4dHhx\/F7woAQECzpSwAAAQEICj4jYhJMXRz0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":203,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOd+pAAEAGd5\/AqAEi1cezjsOfAbt1SdzkHtgDwIAYECzznwAAAQEICj4jYhNQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":212,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":143,"pkt":"0NQSxnP1PBXCt3IOCABFAACBGW5AAEAG1nTAqAEinTfrksOogQnO4dHhx\/F7woAYECy5sAAAAQEICj4jYhNMXRz0hJWBq8rZJChqtXfy58UzNtGZ\/\/XUC25CHPaWhljCzC+zNQUWR8Vu\/MyMsqm4LxoAPUqzyJn2b1S1YuugkY4nrC16I3iJJt8EpZJbUIE=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":204,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrVPlAAEAGmvXAqAEinTfrnMOgAbv31LYXE02AWoAYECxbjgAAAQEICj4jYlxMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":212,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ZsRAADYGk2udN+uSwKgBIoEJw6jH8XvCzuHSLoAQAB34+gAAAQEICkxdHQY+I2IT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":212,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":115,"pkt":"PBXCt3IO0NQSxnP1CABFAABlZsVAADYGkzmdN+uSwKgBIoEJw6jH8XvCzuHSLoAYAB0ELwAAAQEICkxdHQg+I2IT3hXhxlSCvWOzxJ4MCmLuYf5kiBQG7qYIVHTmVPk36syFpEii\/L6ZSefmPIWv+RdFNg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":212,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04KZAAEAGD4nAqAEinTfrksOogQnO4dIux\/F784AQECroaQAAAQEICj4jYmRMXR0I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":212,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FsRAAEAG2WPAqAEinTfrksOogQnO4dIux\/F784AYECr7mAAAAQEICj4jYmRMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":210,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA828xAAEAG37nAqAEib91NjsOmnFcVc99Ix3A4pYAYECmsgAAAAQEICj4jYrBNjGBDwr8qfxKhl3o=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":211,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0soRAADcGEgpv3U2OwKgBIgG7w6e9PNNvS9U9YIAQAB3I8gAAAQEICk2MYes+I2GY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":211,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAABbM2hAAEAGh\/\/AqAEib91NjsOnAbtL1T1gvTzTb4AYECxRTwAAAQEICj4jYr1NjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":208,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969697,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuydhAAEAGjv\/AqAEinTeCsMOhAbuvVQflSOC7goAYECwT1gAAAQEICj4jYsVOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":212,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HKtAAEAG03zAqAEinTfrksOogQnO4dIux\/F784AYECr6GQAAAQEICj4jY+NMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":194,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xhlAAEAGKYLAqAEi1cezjsObnEM6Aj4iHrKtfIAYECoNvgAAAQEICj4jZDNQDL\/hxH9LQ46+GKw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":160,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PAdAAEAGHKfAqAEiQTffDMORnF\/vfD9kP0r\/xIAZECldjAAAAQEICj4jZOBNoe23pd7yTaWfPN4=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIoEQAAEARVbXAqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":176,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0e4pAAEAG3Y3AqAEinTeCqsOWnFJsNFXp7fFHoYARECoyaAAAAQEICj4jZddOqgg\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":182,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0t6xAAEAGoWvAqAEinTeCqsOYAbvnclEdz\/tu9oARECxLmAAAAQEICj4jZddOqgnR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":212,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SuxAAEAGpTvAqAEinTfrksOogQnO4dIux\/F784AYECr35QAAAQEICj4jZhdMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431969698743,"flow_last_seen":1431969698743,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABEy5wAAEARK5nAqAEiwKgBAfdZADUAMBpr\/I4BAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431969698743,"flow_last_seen":1431969698743,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0443{"flow_id":213,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":98,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA191kAQKAy\/I6BgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAABAABBfOIaY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":213,"flow_packet_id":2,"flow_first_seen":1431969698743,"flow_last_seen":1431969698797,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431969698797,"flow_last_seen":1431969698797,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50090,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABASetAAEAG9Y7AqAEiF84hpsOqAbtGC\/RmAAAAALAC\/\/+XCwAAAgQFtAEDAwUBAQgKPiNmuAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":214,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7w6oZSGV1Rgv0Z6ASOJDhugAAAgQFrAQCCArsLyLPPiNmuAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":214,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ZSJAAEAG2mPAqAEiF84hpsOqAbtGC\/RnGUhldoAQECw4twAAAQEICj4jZuLsLyLP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":214,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969698,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbDrpAAEAGMCXAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxjgQAAAQEICj4jZuLsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":214,"flow_packet_id":4,"flow_first_seen":1431969698797,"flow_last_seen":1431969698841,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50090,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"apps.skype.com","ja3":"3d49c0a7161d6636fcb6973f14e05046","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1431969699142,"flow_last_seen":1431969699142,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50091,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQstAAEAGrVjAqAEinTfrksOrAbuMrH5PAAAAALAC\/\/911AAAAgQFtAEDAwUBAQgKPiNoDgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":214,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbhlNAAEAGuIvAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxiOwAAAQEICj4jaCjsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":215,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIgG7w6sASTQ1jKx+UKASOJCu2QAAAgQFrAQCCApMXR6HPiNoDgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":215,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ol1AAEAGTdLAqAEinTfrksOrAbuMrH5QAEk0NoAQECwFuQAAAQEICj4jaFlMXR6H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":215,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB85GxAAEAGC3vAqAEinTfrksOrAbuMrH5QAEk0NoAYECwPqAAAAQEICj4jaFlMXR6HgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBO52ztOuM4SeafxGVSGxBB","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":215,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0KqxAADYGz4OdN+uSwKgBIgG7w6sASTQ2jKx+mIAQAB0VbQAAAQEICkxdHpo+I2hZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":215,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4lntAAEAGWXDAqAEinTfrksOrAbuMrH6YAEk0NoAYECzM1wAAAQEICj4jaKJMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":210,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GRVAAEAGonHAqAEib91NjsOmnFcVc99Ix3A4pYAYECml8gAAAQEICj4jaT5NjGBDwr8qfxKhl3o=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":212,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WLxAAEAGl2vAqAEinTfrksOogQnO4dIux\/F784AYECr0RQAAAQEICj4jabdMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1431969699577,"flow_last_seen":1431969699577,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50092,"dst_port":40020,"l4_proto":"tcp"}
+0416{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAuMZAAEAGoFTAqAEinTeCm8OsnFQhlXAyAAAAALAC\/\/+7tgAAAgQFtAEDAwUBAQgKPiNpvQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":214,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbarFAAEAG1C3AqAEiF84hpsOqAbtGC\/RnGUhldoAYECxgdwAAAQEICj4jaezsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":215,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4bbNAAEAGgjjAqAEinTfrksOrAbuMrH6YAEk0NoAYECzLUQAAAQEICj4jaihMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":216,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYh+dN4KbwKgBIpxUw6wV0QgaIZVwM6ASOJCGcAAAAgQFrAQCCApOs6EPPiNpvQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":216,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0BLVAAEAGVHLAqAEinTeCm8OsnFQhlXAzFdEIG4AQECzdGQAAAQEICj4jaj5Os6EP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":216,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxV5lAAEAGAVHAqAEinTeCm8OsnFQhlXAzFdEIG4AYECxX9AAAAQEICj4jaj5Os6EPGu3oE6Z1WqXzUrOj9YhWRjEJaAN+v8U1njechafUdnsVXMcpfQfiZuLImpu3RrHDpMUye\/ChXrf8PUqzyA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":216,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0qStAADcGuPudN4KbwKgBIpxUw6wV0QgbIZVwcIAQAB3sygAAAQEICk6zoTA+I2o+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":216,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":146,"pkt":"PBXCt3IO0NQSxnP1CABFAACEqSxAADcGuKqdN4KbwKgBIpxUw6wV0QgbIZVwcIAYAB0U6gAAAQEICk6zoTE+I2o+HAftMTjk4hHVFRN7uJCMVaom8oldV\/hPp5zRzEwTRzXohSec2lRR+5S3SW0Upy7gbbpjuMlmH0Tl0puQwf7XnF3q02i5lo\/01QILQLEuR0w=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":216,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WWJAAEAG\/8TAqAEinTeCm8OsnFQhlXBwFdEIa4AQECnb6QAAAQEICj4jasJOs6Ex","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":216,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969699,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IPhAAEAGOCfAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClWagAAAQEICj4jasJOs6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":211,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAABbJJ9AAEAGlsjAqAEib91NjsOnAbtL1T1gvTzTb4AYECxIgwAAAQEICj4ja4lNjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":215,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4RftAAEAGqfDAqAEinTfrksOrAbuMrH6YAEk0NoAYECzJDgAAAQEICj4jbGtMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":214,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbkspAAEAGrBTAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxdtwAAAQEICj4jbKzsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":216,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zmFAAEAGir3AqAEinTeCm8OsnFQhlXBwFdEIa4AYEClUXgAAAQEICj4jbM5Os6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":195,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WuVAAEAGlTjAqAEinTfrnMOcnE7UANd2M6a2f4AYECkRaAAAAQEICj4jbSlMWRmSrtaWXBVsqR0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":193,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LeNAAEAGKyrAqAEinTeCrcOanEPZ9QBBKvQZMIAYECo1PAAAAQEICj4jbWdOp72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":175,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLz8oAAEARJ2TAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":174,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLMb8AAEARxW\/AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":166,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABnB2ZAAEAGUR3AqAEiQTffDMOSAbvQogDzbPVBKoAZECzEwAAAAQEICj4jbq5Noe9JdRKYsr25V5AAdpQR0WFwQXZONwsp2+ImLRVUPhbhlzT9d0d7m6HpVNUn8Hw+fr6YtSFt","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":166,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":91,"pkt":"PBXCt3IO0NQSxnP1CABFAABNrmlAADcGszNBN98MwKgBIgG7w5Js9UF50KIBJ4AZAB0RSwAAAQEICk2iAno+I26uHXCueEdSOLNzAMaWfFxW2Oe31pOdxv3jjg==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":166,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969700,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo62dAAEAGbVrAqAEiQTffDMOSAbvQogEnAAAAAFAEAAA2uwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1431969701181,"flow_last_seen":1431969701181,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50094,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1hBAAEAGgwrAqAEinTeCm8OuAbux\/OLXAAAAALAC\/\/9NAwAAAgQFtAEDAwUBAQgKPiNv+wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":216,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KhlAAEAGLwbAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClREAAAAQEICj4jcBxOs6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":215,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4tqhAAEAGOUPAqAEinTfrksOrAbuMrH6YAEk0NoAYECzFUQAAAQEICj4jcChMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":212,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XQFAAEAGkybAqAEinTfrksOogQnO4dIux\/F784AYECrtzAAAAQEICj4jcDBMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":199,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8rklAAEAGqsDAqAEinTeCsMOdnFaE5idx8gQMboAYECnLDQAAAQEICj4jcHdOpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":217,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYh+dN4KbwKgBIgG7w655m4Wssfzi2KASOJA0zwAAAgQFrAQCCApOs6KgPiNv+wEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":217,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yA5AAEAGkRjAqAEinTeCm8OuAbux\/OLYeZuFrYAQECyLfQAAAQEICj4jcHdOs6Kg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":217,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8TiFAAEAGCr7AqAEinTeCm8OuAbux\/OLYeZuFrYAYECwfUwAAAQEICj4jcHhOs6KggEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIC5lo\/01QILQLEuR0xNGkMY","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":217,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0J21AADcGOrqdN4KbwKgBIgG7w655m4WtsfzjIIAQAB2bIwAAAQEICk6zosA+I3B4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":217,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNJ9JAAEAGMTzAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyWOAAAAQEICj4jcPdOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":134,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA83c1AADYG6xdv3UovwKgBIpxew4ef2YMFtJoFWoAYAB25ngAAAQEICk2FefA+IwZ9t8k\/\/yge2GM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":214,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADb865AAEAGSzDAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxY\/wAAAQEICj4jcWTsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":203,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABO229AAEAGFBrAqAEi1cezjsOfAbt1SdzkHtgDwIAYECzjlwAAAQEICj4jchtQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":176,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bFpAAEAG7LXAqAEinTeCqsOWnFJsNFXh7fFHoYAZECrC4QAAAQEICj4jcjpOqgg\/dBFKHGWgP00=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":204,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrWBJAAEAGl9zAqAEinTfrnMOgAbv31LYXE02AWoAYECxLhQAAAQEICj4jcmVMWRsjTOTU6C9pwmn1THUzY5b6U80doM\/+81I3Di34csN6MEKT2gWCOGQ+NQDycBffWk+LeTwGvX3Zbg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":217,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969701,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNkgdAAEAGxwbAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyUNgAAAQEICj4jcvlOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":202,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABU9PZAAEAGY\/7AqAEinTeCrcOeAbsMd48zg+uInYAYECxmhQAAAQEICj4jc8BOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":211,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAABbeFRAAEAGQxPAqAEib91NjsOnAbtL1T1gvTzTb4AYECw\/tgAAAQEICj4jdFZNjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":149,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPvaAAAEAROYrAqAEiwKgBAfaEADUAO+FnvnsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":148,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":93,"pkt":"0NQSxnP1PBXCt3IOCABFAABPKIwAAEARzp7AqAEiwKgBAdd3ADUAO4zaTRYBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":167,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UfxAADMGXiadNzigwKgBIpxbw5OkoMPUobuuWoARAB1vogAAAQEICk1+pqw+IySS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":210,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8D+dAAEAGq5\/AqAEib91NjsOmnFcVc99Ix3A4pYAYECmZnQAAAQEICj4jdZNNjGBDwr8qfxKhl3o=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":216,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+LdAAEAGYGfAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClLOwAAAQEICj4jdfFOs6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":217,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNj89AAEAGyT7AqAEinTeCm8OuAbux\/OMgeZuFrYAYECyQ+wAAAQEICj4jdjROs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":142,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDlvNAADYGMatv3UovwKgBIgG7w4qMyvZFkcpNT4AYAB0pCQAAAQEICk2Fe0A+IwubFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":142,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoSD9AAEAGdrrAqAEib91KL8OKAbuRyk1PAAAAAFAEAACPqgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":182,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABladxAAEAG7wrAqAEinTeCqsOYAbvnclDsz\/tu9oAZECwyrAAAAQEICj4jdptOqgnRdB6rqSY5gTFTXdFTg9Bm\/CX0YSch8t1o2530L+EgrBJRuOnQwGMPQHcj8K4bAGf3WA==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":208,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABu6thAAEAGbf\/AqAEinTeCsMOhAbuvVQflSOC7goAYECz\/zAAAAQEICj4jds5OpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":215,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969702,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB47+NAAEAGAAjAqAEinTfrksOrAbuMrH6YAEk0NoAYECy+oAAAAQEICj4jdtlMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":182,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7Zy1AADcG+qOdN4KqwKgBIgG7w5jP+29F53JRHoAZAB2mhwAAAQEICk6qGw4+I3abPfyEP1edCp6XBImpAMkjenglp+QXXjy1jF6rpANfyUgb4NhT71pcBnJjjjqBqrXVeMDvrlxIfHNSTvq4+SU9FxIHT92XRns=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":182,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoh3xAAEAG0afAqAEinTeCqsOYAbvnclEeAAAAAFAEAADQTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":173,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0JsxAADMGiVadNzigwKgBIgG7w5UO87WAP73XuYARAB3gJgAAAQEICk1+p8Y+Iyoz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":143,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8uhtAADcGDdNv3UomwKgBIpxPw4sbzRnGlAe+CoAYAB1wBgAAAQEICk1\/vrA+Iw4jXBN0QrdawxQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":214,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbbYZAAEAG0VjAqAEiF84hpsOqAbtGC\/RnGUhldoAYECxQVwAAAQEICj4jegzsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":214,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0B45AAEAGN\/jAqAEiF84hpsOqAbtGC\/UOGUhldoARECwk1wAAAQEICj4jehrsLyLP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":343,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCUlAADQGY81soKouwKgBIgG7wSW4Yei3qCbRioAYAEzWWQAAAQEICmF6qSw+IqhPFwMBARBce3W2hkSsVDGNa\/4AdYPhhAyO2+VnNs+9IgqLdooYGcsIgjNOL0jZLqQVBKzP6H3SnQyD3FsHzddA5FKrcoOsR8TbqEiOiOjLGIQAkPoSMTns5aRq0bUekb9JnutAw6dRcKH95RRkQz6Q48Mmtp8p3+bNhnVPgXi4tWNQRpDjo7B2rV1sQNJ57Mcrog0n5jzAehRruKAD6IRP2ME\/ESVkkuJb1JuBJWkEfFwuYX48OxPnQBSI3sEnA7LV81lfhp+BMEqN2cRJNUoLzo\/\/y8cXPIs+IrgaICN1pOkXItuIFOiAwOZp6AEoKBx7GG0Xg5vZCIRLJSZytLbFrkMKxaLruoeJmKTp34n3Bozbtz\/hVA==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qupAAEAGt0DAqAEibKCqLsElAbuoJtGKuGHpzIAQD\/fsaQAAAQEICj4jejhheqks","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1688{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":1020,"pkt":"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","pkt_caplen":1020,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969703,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CUpAADQGZOFsoKouwKgBIgG7wSW4YenMqCbVRIAQAE\/4MQAAAQEICmF6qVA+I3o6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":217,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNJ2ZAAEAGMajAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyLTgAAAQEICj4je+FOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":212,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84NlAAEAGD07AqAEinTfrksOogQnO4dIux\/F784AYECrhowAAAQEICj4jfFlMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":156,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLMc8AAEARxV\/AqAEiwKgBAeRaADUAN2o90\/0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":157,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLke0AAEARZUHAqAEiwKgBAcDQADUANww\/OoYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":193,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IfFAAEAGNyTAqAEinTeCrcOanEPZ9QBJKvQZMIARECo\/NwAAAQEICj4jfO5Op72x","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":202,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0uaZAAEAGn27AqAEinTeCrcOeAbsMd49Tg+uInYARECxONgAAAQEICj4jfO5Op79E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":194,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pidAAEAGSXzAqAEi1cezjsObnEM6Aj4qHrKtfIARECqsNwAAAQEICj4jfO5QDL\/h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":203,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0q7pAAEAGQ+nAqAEi1cezjsOfAbt1Sdz+HtgDwIARECwUnwAAAQEICj4jfO5QDMF3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":195,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0y1hAAEAGJM3AqAEinTfrnMOcnE7UANd+M6a2f4ARECkFZwAAAQEICj4jfO5MWRmS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":204,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06l5AAEAGBcfAqAEinTfrnMOgAbv31LZOE02AWoARECzyPAAAAQEICj4jfO5MWRsj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431969704663,"flow_last_seen":1431969704663,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50096,"dst_port":40027,"l4_proto":"tcp"}
+0416{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjY9AAEAGMVPAqAEib91KLsOwnFtwFABlAAAAALAC\/\/8u+gAAAgQFtAEDAwUBAQgKPiN9hAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431969704664,"flow_last_seen":1431969704664,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50097,"dst_port":40022,"l4_proto":"tcp"}
+0417{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAvDNAAEAGM9LAqAEinTfrsMOxnFbKZQg9AAAAALAC\/\/\/99wAAAgQFtAEDAwUBAQgKPiN9hAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431969704664,"flow_last_seen":1431969704664,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50098,"dst_port":40026,"l4_proto":"tcp"}
+0416{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIjNAAEAGNnTAqAEiQTffD8OynFri9dA8AAAAALAC\/\/+GBAAAAgQFtAEDAwUBAQgKPiN9hAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":219,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+gmdN+uwwKgBIpxWw7HlrcetymUIPqASOJDOiAAAAgQFrAQCCApF6hSRPiN9hAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":219,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NN1AAEAGuzTAqAEinTfrsMOxnFbKZQg+5a3HroAQECwlZAAAAQEICj4jfdNF6hSR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":219,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":152,"pkt":"0NQSxnP1PBXCt3IOCABFAACKB4JAAEAG6DnAqAEinTfrsMOxnFbKZQg+5a3HroAYECxpEwAAAQEICj4jfdNF6hSRScR8yI5zJGx1UalhEv1CoznIJlTQ1Uuz2PZCaIl7clUF6UtGfvWt7dchEQrolNZPw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4Q=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":220,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYatBN98PwKgBIpxaw7KHsi8C4vXQPaASOJCmxwAAAgQFrAQCCAouudI2PiN9hAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":220,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iwlAAEAGzanAqAEiQTffD8OynFri9dA9h7IvA4AQECz9cAAAAQEICj4jfgUuudI2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":220,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":147,"pkt":"0NQSxnP1PBXCt3IOCABFAACFDSFAAEAGS0HAqAEiQTffD8OynFri9dA9h7IvA4AYECyRdQAAAQEICj4jfgUuudI26Eg6Dgq5jUHv5DMTws8sqEJvJDst3xRiR92D9nHNPXEaqw0D4E1Z\/ttNq3m\/agtO0AE+F9ydKhOo+dbPNBVCS4DxboeMjVqDWOkGP+QFcrsw","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":219,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA00wpAADYGJwedN+uwwKgBIpxWw7HlrceuymUIlIAQAB01CgAAAQEICkXqFKQ+I33T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":219,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":157,"pkt":"PBXCt3IO0NQSxnP1CABFAACP0wtAADYGJqudN+uwwKgBIpxWw7HlrceuymUIlIAYAB0OwAAAAQEICkXqFKQ+I33T5Nu74\/H3g0Q0IHjfkwoad1Q4rbPGLUzt1TxTqtkptSvkPptIo2P7etVtFtatSbb7umO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78A==","pkt_caplen":157,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":219,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UdBAAEAGnkHAqAEinTfrsMOxnFbKZQiU5a3ICYAQECkkVwAAAQEICj4jfh9F6hSk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":219,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZyZAAEAGiOPAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmfoAAAAQEICj4jfh9F6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":220,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/VZAADcGZFxBN98PwKgBIpxaw7KHsi8D4vXQjoAQAB0NDwAAAQEICi650lY+I34F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_id":220,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":153,"pkt":"PBXCt3IO0NQSxnP1CABFAACL\/VdAADcGZARBN98PwKgBIpxaw7KHsi8D4vXQjoAYAB3rQAAAAQEICi650lg+I34FKjCvUK6d4SgZy0KOUcs3b9+LeN1FqHaYlSf+OZ+ZoI+hg46TMIfATpOGd8rBC6EfXB2qkyh5Vk+0lcLLAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/QpziFm2","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":220,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wfdAAEAGlrvAqAEiQTffD8OynFri9dCOh7IvWoAQECn8HwAAAQEICj4jfo8uudJY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":220,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wRFAAEAGl5nAqAEiQTffD8OynFri9dCOh7IvWoAYECkj9gAAAQEICj4jfo8uudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":218,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOZv3UouwKgBIpxbw7DJYD8HcBQAZqASOJBMRQAAAgQFrAQCCApNhWUvPiN9hAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":218,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04b5AAEAG3S\/AqAEib91KLsOwnFtwFABmyWA\/CIAQECyiSwAAAQEICj4jfqhNhWUv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":218,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969704,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABslAxAAEAGKqrAqAEib91KLsOwnFtwFABmyWA\/CIAYECyPlwAAAQEICj4jfqhNhWUvtcxtX\/RC0V1RbJRd5fs2OtcSFoVxmFfhBz1l0szQlPSUeVSBu6tL5jGbLJE939dVYuugkY4nrC0=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":219,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mTBAAEAGVtnAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmeDwAAAQEICj4jf7BF6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":218,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0WnBAADYGbn5v3UouwKgBIpxbw7DJYD8IcBQAnoAQAB2x2AAAAQEICk2FZXk+I36o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":218,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":122,"pkt":"PBXCt3IO0NQSxnP1CABFAABsWnFAADYGbkVv3UouwKgBIpxbw7DJYD8IcBQAnoAYAB1LCgAAAQEICk2FZXk+I36o3PcjlVHVWmuDC4y5911dxPYhv7\/5hKw1X2OKOsYKGqMQjKtZJ4kSPomDtSR9VXt\/52ztOuM4SeY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":218,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0zqRAAEAG8EnAqAEib91KLsOwnFtwFACeyWA\/QIAQECqgbAAAAQEICj4jf89NhWV5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":218,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jHtAAEAGMmvAqAEib91KLsOwnFtwFACeyWA\/QIAYECq4oQAAAQEICj4jf89NhWV5MasRplDVU5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":220,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CPZAAEAGT7XAqAEiQTffD8OynFri9dCOh7IvWoAYECkh6gAAAQEICj4jgJsuudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":199,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GzZAAEAGPdzAqAEinTeCsMOdnFaE5id58gQMboAREClYyAAAAQEICj4jgM5OpRO7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":208,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08PtAAEAGaBbAqAEinTeCsMOhAbuvVQgfSOC7goARECzgxgAAAQEICj4jgM5OpRVM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":216,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA860VAAEAGbdnAqAEinTeCm8OsnFQhlXBwFdEIa4AYEClAWwAAAQEICj4jgNFOs6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1431969705713,"flow_last_seen":1431969705713,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50099,"dst_port":40022,"l4_proto":"tcp"}
+0417{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAO5ZAAEAG5a3AqAEiQAQXpsOznFablHTpAAAAALAC\/\/\/tRQAAAgQFtAEDAwUBAQgKPiOBlwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":219,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aB9AAEAGh+rAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmbtgAAAQEICj4jgglF6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":221,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIpxWw7Pn2AWqm5R06qASOJA+QQAAAgQFrAQCCApMP02qPiOBlwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":221,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dcVAAEAGq4rAqAEiQAQXpsOznFablHTq59gFq4AQECyUoQAAAQEICj4jgmFMP02q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_id":221,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969705,"pkt_len":174,"pkt":"0NQSxnP1PBXCt3IOCABFAACgF1BAAEAGCZTAqAEiQAQXpsOznFablHTq59gFq4AYECwSXAAAAQEICj4jgmFMP02qNW\/jFZYQXLguVkkNLv56JQ+8gCSjSlcIvEL7OwbfB0f5m4nQDn96wsV8RbHj+oJPeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/QpziFm2LxR1IqtgUU7n","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":221,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0SHdAADYG4thABBemwKgBIpxWw7Pn2AWrm5R1VoAQAB2kEQAAAQEICkw\/Td0+I4Jh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":221,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":130,"pkt":"PBXCt3IO0NQSxnP1CABFAAB0SHhAADYG4pdABBemwKgBIpxWw7Pn2AWrm5R1VoAYAB2uVwAAAQEICkw\/Td0+I4JhuobHxtfW58i+4LkXrPSXj5RfMV5kp1PO+lXdhurf2lui7nWcEKjolCB6\/UFq6WbLUhsQQX5XHN1qU+g5Fg90VQ==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":221,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iQFAAEAGmE7AqAEiQAQXpsOznFablHVW59gF64AQECqS9gAAAQEICj4jgy9MP03d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":221,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NMpAAEAG7H3AqAEiQAQXpsOznFablHVW59gF64AYECo9CgAAAQEICj4jgy9MP03dvRFcC9M5aYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":215,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4b4VAAEAGgGbAqAEinTfrksOrAbuMrH6YAEk0NoAYECyyCAAAAQEICj4jg3FMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1431969706277,"flow_last_seen":1431969706277,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50100,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABALAFAAEAGkuHAqAEib91KLsO0AbvHHCHtAAAAALAC\/\/9KwwAAAgQFtAEDAwUBAQgKPiODxwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1431969706277,"flow_last_seen":1431969706277,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50101,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABApn5AAEAGSYfAqAEinTfrsMO1AbsGcnDPAAAAALAC\/\/\/trQAAAgQFtAEDAwUBAQgKPiODxwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1431969706277,"flow_last_seen":1431969706277,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50102,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAkWpAAEAGxzzAqAEiQTffD8O2Abu4rlNDAAAAALAC\/\/\/BnQAAAgQFtAEDAwUBAQgKPiODxwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":220,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8eKVAAEAG4AXAqAEiQTffD8OynFri9dCOh7IvWoAYECkenAAAAQEICj4jg+kuudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":223,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+gmdN+uwwKgBIgG7w7Xvxq\/pBnJw0KASOJDKVgAAAgQFrAQCCApF6hYkPiODxwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":223,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0l01AAEAGWMTAqAEinTfrsMO1AbsGcnDQ78av6oAQECwhNQAAAQEICj4jhBNF6hYk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":223,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8SbpAAEAGpg\/AqAEinTfrsMO1AbsGcnDQ78av6oAYECzD2wAAAQEICj4jhBNF6hYkgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBvVLVi66CRjiesLXojeIkm","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":224,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYatBN98PwKgBIgG7w7bIenZGuK5TRKASOJBYwQAAAgQFrAQCCAouudPJPiODxwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":224,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IiZAAEAGNo3AqAEiQTffD8O2Abu4rlNEyHp2R4AQECyvaQAAAQEICj4jhEkuudPJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":224,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB87XBAAEAGavrAqAEiQTffD8O2Abu4rlNEyHp2R4AYECzSjwAAAQEICj4jhEkuudPJgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDfBKWSW1CBvpdcHaqTKHlW","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":223,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0udxAADYGQDWdN+uwwKgBIgG7w7Xvxq\/qBnJxGIAQAB0w6QAAAQEICkXqFjc+I4QT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":223,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABznYVAAEAGUk3AqAEinTfrsMO1AbsGcnEY78av6oAYECxnwwAAAQEICj4jhGBF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":224,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0pa5AADcGvARBN98PwKgBIgG7w7bIenZHuK5TjIAQAB2\/EAAAAQEICi650+k+I4RJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":224,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtbupAAEAG6Y\/AqAEiQTffD8O2Abu4rlOMyHp2R4AYECyKNwAAAQEICj4jhMsuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":222,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOZv3UouwKgBIgG7w7R3epf\/xxwh7qASOJBfaQAAAgQFrAQCCApNhWbCPiODxwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":222,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CZNAAEAGtVvAqAEib91KLsO0AbvHHCHud3qYAIAQECy1bQAAAQEICj4jhO1NhWbC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":222,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8+0NAAEAGw2LAqAEib91KLsO0AbvHHCHud3qYAIAYECxXFQAAAQEICj4jhO1NhWbCgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBPtJXCywBx7gcMDdoD2GmG","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":211,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAABb2yJAAEAG4ETAqAEib91NjsOnAbtL1T1gvTzTb4AYECwu5gAAAQEICj4jhSZNjGHr5RyfsH3VvVnJQl71QZdIt8rlNEktfRguBXjBrITvME1ddq1hxqhh","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":223,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABzKrRAAEAGxR7AqAEinTfrsMO1AbsGcnEY78av6oAYECxmOwAAAQEICj4jhehF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":219,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zARAAEAGJAXAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmXzQAAAQEICj4jhfJF6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":222,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/wxAADYGyeFv3UouwKgBIgG7w7R3epgAxxwiNoAQAB3E6gAAAQEICk2FZww+I4Tt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":222,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQa6VAAEAGUy3AqAEib91KLsO0AbvHHCI2d3qYAIAYECzDWgAAAQEICj4jhhRNhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":218,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA815dAAEAG507AqAEib91KLsOwnFtwFACeyWA\/QIAYECqyIQAAAQEICj4jhk9NhWV5MasRplDVU5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":217,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNBFtAAEAGVLPAqAEinTeCm8OuAbux\/OMgeZuFrYAYECyAvQAAAQEICj4jhnJOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":214,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969706,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbBeVAAEAGOPrAqAEiF84hpsOqAbtGC\/RnGUhldoAZECxDzQAAAQEICj4jhpXsLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":224,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABt8ulAAEAGZZDAqAEiQTffD8O2Abu4rlOMyHp2R4AYECyIKQAAAQEICj4jhtkuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431969707326,"flow_last_seen":1431969707326,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50103,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1ORAAEAGTF\/AqAEiQAQXpsO3Abu4qWeDAAAAALAC\/\/9x6QAAAgQFtAEDAwUBAQgKPiOH3AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":221,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81tRAAEAGSnPAqAEiQAQXpsOznFablHVW59gF64AYECo4SwAAAQEICj4jh+5MP03dvRFcC9M5aYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":223,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABzQslAAEAGrQnAqAEinTfrsMO1AbsGcnEY78av6oAYECxj9AAAAQEICj4jiC9F6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":225,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIgG7w7ccEsw5uKlnhKASOJDGigAAAgQFrAQCCApMP087PiOH3AEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":225,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EpBAAEAGDsDAqAEiQAQXpsO3Abu4qWeEHBLMOoAQECwc2gAAAQEICj4jiLdMP087","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":225,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB80sRAAEAGTkPAqAEiQAQXpsO3Abu4qWeEHBLMOoAYECw\/AAAAAQEICj4jiLdMP087gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIC\/ZIXyO7BhHne8\/QpziFm2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":220,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8maNAAEAGvwfAqAEiQTffD8OynFri9dCOh7IvWoAYECkYyAAAAQEICj4jib0uudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":225,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0g0tAADYGqARABBemwKgBIgG7w7ccEsw6uKlnzIAQAB0sagAAAQEICkw\/T3I+I4i3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":225,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlKB5AAEAG+QDAqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwivwAAAQEICj4jib5MP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":193,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hJxAAEAG1HDAqAEinTeCrcOanEPZ9QBBKvQZMIAZECoY0wAAAQEICj4jic9Op72xFzP0mFIZu5U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":224,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969707,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtSeNAAEAGDpfAqAEiQTffD8O2Abu4rlOMyHp2R4AYECyE1gAAAQEICj4jiiwuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":204,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDm4BAADYGXladN+ucwKgBIgG7w6ATTYBa99S2F4AYAB2OHwAAAQEICkxZK7A+I0j5FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":204,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoEWxAAEAG3sXAqAEinTfrnMOgAbv31LYXAAAAAFAEAADx+QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":223,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABzQqZAAEAGrSzAqAEinTfrsMO1AbsGcnEY78av6oAYECxgLwAAAQEICj4ji\/RF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":199,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83CNAAEAGfObAqAEinTeCsMOdnFaE5idx8gQMboAZECmvYwAAAQEICj4jjCBOpRO7eWBA9+mp+gg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":222,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQ3zRAAEAG353AqAEib91KLsO0AbvHHCI2d3qYAIAYECy80QAAAQEICj4jjJ1NhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":221,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MS5AAEAG8BnAqAEiQAQXpsOznFablHVW59gF64AYECozjQAAAQEICj4jjKxMP03dvRFcC9M5aYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":218,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WZNAAEAGZVPAqAEib91KLsOwnFtwFACeyWA\/QIAYECqroAAAAQEICj4jjNBNhWV5MasRplDVU5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":219,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PdtAAEAGsi7AqAEinTfrsMOxnFbKZQiU5a3ICYAYECmQxAAAAQEICj4jjPtF6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":212,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UcdAAEAGnmDAqAEinTfrksOogQnO4dIux\/F784AYECrQ2gAAAQEICj4jjSJMXR0I+8v6kCGg1MM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":210,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zFVAAEAG7zDAqAEib91NjsOmnFcVc99Ix3A4pYAYECmBvQAAAQEICj4jjXNNjGBDwr8qfxKhl3o=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":225,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABluRFAAEAGaA3AqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwdTAAAAQEICj4jjzFMP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":224,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtKiRAAEAGLlbAqAEiQTffD8O2Abu4rlOMyHp2R4AYECx++gAAAQEICj4jkAguudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":202,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":98,"pkt":"0NQSxnP1PBXCt3IOCABFAABUpFVAAEAGtJ\/AqAEinTeCrcOeAbsMd48zg+uInYAZECxKGwAAAQEICj4jkClOp79EOIZhDgpM596b5urYTkyt6EokOB\/jfhHHccIbekKWmsc=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":202,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":96,"pkt":"PBXCt3IO0NQSxnP1CABFAABSN+VAADcGKhKdN4KtwKgBIgG7w56D64jsDHePVIAZAB2vQgAAAQEICk6n0Rc+I5Ap7ZLqD1X1\/3YzXyXxbDlPgn3982+LNqD135SYTDHo","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":202,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAolPFAAEAGxC\/AqAEinTeCrcOeAbsMd49UAAAAAFAEAABtDAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":175,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLCRsAAEAR7hPAqAEiwKgBAeQAADUAN6zvm+wBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":174,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLXsEAAEARmG3AqAEiwKgBAdRHADUAN3UY\/nwBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDEzAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":203,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969709,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOaJJAAEAGhvfAqAEi1cezjsOfAbt1SdzkHtgDwIAZECzETgAAAQEICj4jkWNQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":208,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuF2pAAEAGQW7AqAEinTeCsMOhAbuvVQflSOC7goAZECzkAwAAAQEICj4jkpZOpRVM44Sb+UDZvBPvyND8nEiSDIgGrYJQDfLAHfdrnXRK8kGdb7zASRkE5IOUEx\/7yIb01lebNVn49aeUJw==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":223,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABz5JdAAEAGCzvAqAEinTfrsMO1AbsGcnEY78av6oAYECxZbgAAAQEICj4jkrVF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":208,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":103,"pkt":"PBXCt3IO0NQSxnP1CABFAABZrtBAADcGsxydN4KwwKgBIgG7w6FI4LvRr1UIIIAZAB0WMgAAAQEICk6lJsA+I5KWctp5OdC757z9AEOhXK35rpPpf4qDkPJrBG4QVkvBph3U9\/hTHg==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":208,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoUNpAAEAGCETAqAEinTeCsMOhAbuvVQggAAAAAFAEAABRXAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":222,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQ5DxAAEAG2pXAqAEib91KLsO0AbvHHCI2d3qYAIAYECy2SQAAAQEICj4jkyVNhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":210,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0jnBAAEAGLR7AqAEib91NjsOmnFcVc99Qx3A4pYARECkSQgAAAQEICj4jlFBNjGBD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":211,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0od5AAEAGGbDAqAEib91NjsOnAbtL1T2HvTzTb4ARECyGAwAAAQEICj4jlFBNjGHr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":220,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8fY1AAEAG2x3AqAEiQTffD8OynFri9dCOh7IvWoAYECkN6AAAAQEICj4jlJ0uudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":225,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlhqhAAEAGmnbAqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwX2gAAAQEICj4jlKNMP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":173,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDJs1AADMGiQadNzigwKgBIgG7w5UO87UxP73XuYAYAB1B2AAAAQEICk1+rpg+IyozFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":173,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoB+JAAEAGm0zAqAEinTc4oMOVAbs\/vde5AAAAAFAEAAA7dwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":215,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4jZhAAEAGYlPAqAEinTfrksOrAbuMrH6YAEk0NoAYECygoAAAAQEICj4jlNlMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":221,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QptAAEAG3qzAqAEiQAQXpsOznFablHVW59gF64AYECoq2AAAAQEICj4jlWFMP03dvRFcC9M5aYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1431969710853,"flow_last_seen":1431969710853,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp"}
+0416{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAz19AAEAG2DnAqAEinTg0HMO8nEnrI3UzAAAAALAC\/\/8PzQAAAgQFtAEDAwUBAQgKPiOVkAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":216,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969710,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kI1AAEAGyJHAqAEinTeCm8OsnFQhlXBwFdEIa4AYECkrYwAAAQEICj4jlclOs6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":226,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969711,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtJ2dODQcwKgBIpxJw7we\/\/hU6yN1NKASOJAgZAAAAgQFrAQCCApMXGQgPiOVkAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":226,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969711,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CpBAAEAGnRXAqAEinTg0HMO8nEnrI3U0Hv\/4VYAQECx2mwAAAQEICj4jloNMXGQg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":226,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969711,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8f0RAAEAGKBnAqAEinTg0HMO8nEnrI3U0Hv\/4VYAYECwYXQAAAQEICj4jloNMXGQgZZJK5+v4wpQjc0benTliCyHMzbaIXvjRlqGJhlecMQIbDtw5mLYeEBLTaAsRnTv6b1S1YuugkY4nrC16I3iJJt8EpZJbUIG+","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":226,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969711,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nAhAADMGGJ2dODQcwKgBIpxJw7we\/\/hV6yN1fIAQAB2GJAAAAQEICkxcZF4+I5aD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":218,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969711,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81MVAAEAG6iDAqAEib91KLsOwnFtwFACeyWA\/QIAYECqfaAAAAQEICj4jmQhNhWV5MasRplDVU5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":219,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83oNAAEAGEYbAqAEinTfrsMOxnFbKZQiU5a3ICYAYECmDewAAAQEICj4jmkRF6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":226,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":123,"pkt":"PBXCt3IO0NQSxnP1CABFAABtnApAADMGGGKdODQcwKgBIpxJw7we\/\/hV6yN1fIAYAB1MvAAAAQEICkxcZRU+I5aDTHlk0P0XJpbAAB00nIWQ4QVhVM2Y\/UcKSgj8b+0c6bkJdRp4+cGBFXMX+WQuBMN5uzDhnvc8fYrz","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":226,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W7pAAEAGS+vAqAEinTg0HMO8nEnrI3V8Hv\/4joAQECpxZQAAAQEICj4jmkVMXGUV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":226,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8feBAAEAGKb3AqAEinTg0HMO8nEnrI3V8Hv\/4joAYECpqpwAAAQEICj4jmkVMXGUVrGY\/iZXahOM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":217,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNqWlAAEAGr6TAqAEinTeCm8OuAbux\/OMgeZuFrYAYECxsZAAAAQEICj4jmstOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":224,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABt37hAAEAGeMHAqAEiQTffD8O2Abu4rlOMyHp2R4AYECx0CQAAAQEICj4jmvkuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":226,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8nAtAADMGGJKdODQcwKgBIpxJw7we\/\/iO6yN1fIAYAB1SmQAAAQEICkxcZU4+I5pFB7FMWw0hzWI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":226,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09IxAAEAGsxjAqAEinTg0HMO8nEnrI3WEHv\/4loAQEClwVAAAAQEICj4jmw5MXGVO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":226,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nAxAADMGGJmdODQcwKgBIpxJw7we\/\/iW6yN1hIAQAB2BHgAAAQEICkxcZVk+I5pF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":226,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":102,"pkt":"0NQSxnP1PBXCt3IOCABFAABYPh9AAEAGaWLAqAEinTg0HMO8nEnrI3WEHv\/4loAYECn3EwAAAQEICj4jmzZMXGVZyKphfsr9MBXUpMzENJdlqe1\/h0310jvsmQwoTUIkpZDHmADH","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":226,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":134,"pkt":"PBXCt3IO0NQSxnP1CABFAAB4nA1AADMGGFSdODQcwKgBIpxJw7we\/\/iW6yN1hIAYAB1uowAAAQEICkxcZYE+I5sOhMZaEh93OnZ3c\/muXOFwrztIYK5khE9IdC6mh6JkvLg12WBJtsQSO0zju2ffDzwJPfOQ3lkywMIQJ087yDYbZwOPHlE=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":226,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W21AAEAGTDjAqAEinTg0HMO8nEnrI3WoHv\/42oAQECdu8QAAAQEICj4jm9hMXGWB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":226,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nA5AADMGGJedODQcwKgBIpxJw7we\/\/ja6yN1qIAQAB1\/kwAAAQEICkxcZYs+I5s2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":49485,"dst_port":1900,"l4_proto":"udp"}
+0554{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":175,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChlVQAAAERcjPAqAEi7\/\/\/+sFNB2wAjXH\/TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":49485,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0549{"flow_id":227,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":174,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgzegAAAEROaDAqAEi7\/\/\/+sFNB2wAjNfyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":51066,"dst_port":1900,"l4_proto":"udp"}
+0553{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":175,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChxxoAAAERQG3AqAEi7\/\/\/+sd6B2wAjWvSTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":51066,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0549{"flow_id":228,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":174,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgMZsAAAER1e3AqAEi7\/\/\/+sd6B2wAjNHFTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54067,"dst_port":5351,"l4_proto":"udp"}
+0382{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoiaEAAEARbbDAqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1431969712918,"flow_last_seen":1431969712918,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp"}
+0422{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYEAAEAB8QTAqAEBwKgBIgMDgJYAAAAARQAAKImhAABAEW2wwKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1431969712918,"flow_last_seen":1431969712918,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431969712931,"flow_last_seen":1431969712931,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50109,"dst_port":12350,"l4_proto":"tcp"}
+0416{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAK1RAAEAGGV7AqAEiW77YfcO9MD57jsMsAAAAALAC\/\/8yeAAAAgQFtAEDAwUBAQgKPiOdpAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":231,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0xLRAAPUGywBbvth9wKgBIjA+w71YjgIOe47DLYASH\/7LvwAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":231,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoyL5AAEAGfAvAqAEiW77YfcO9MD57jsMtWI4CD1AQIAAMeQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":231,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969712,"pkt_len":165,"pkt":"0NQSxnP1PBXCt3IOCABFAACXODVAAEAGDCbAqAEiW77YfcO9MD57jsMtWI4CD1AYIACZrAAAyj\/S2cOjOn+CcIP8miG4Rt5KA71zKvoIvEKC4BnGH7tW516rcCigPW+mip\/VYbKheiN4iSbfBKWSW1CBvpdcHaqTKHlWT7SVwssAce4HDA3aA9hphr9khfI7sGEed7z9CnOIWbYvFHUiq2BRTuds","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":231,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAo8P5AADYGXcNbvth9wKgBIjA+w71YjgIPe47DnFAQA6AoagAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":229,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoTzkAAEARqBjAqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":230,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYIAAEAB8QPAqAEBwKgBIgMDgJYAAAAARQAAKE85AABAEagYwKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":225,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlpnJAAEAGeqzAqAEiQAQXpsO3Abu4qWfMHBLMOoAYECwNvgAAAQEICj4jnr9MP09yMopg3AEWOIVra5cGzJjAiCstkrxYMtnVJJjcl7xva4xaFu\/8chGd\/faIMJs3g\/Ld1w==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":214,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbaOdAAEAG1ffAqAEiF84hpsOqAbtGC\/RnGUhldoAZECwrhAAAAQEICj4jnt7sLyLPFgMBAKIBAACeAwFVWh+iRxw4dKYdeAHJfyjlXjv9yCDOr6NdIx96jKX10wAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":212,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Fs1AAEAG2WLAqAEinTfrksOogQnO4dI2x\/F784ARECqrxQAAAQEICj4jnv9MXR0I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":215,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w41AAEAGLKLAqAEinTfrksOrAbuMrH7cAEk0NoARECzOcgAAAQEICj4jnv9MXR6a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":216,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S9tAAEAGDUzAqAEinTeCm8OsnFQhlXB4FdEIa4ARECmnowAAAQEICj4jnv9Os6Ex","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":217,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0r0pAAEAGqdzAqAEinTeCm8OuAbux\/OM5eZuFrYARECxccwAAAQEICj4jnv9Os6LA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":218,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WYFAAEAGZW3AqAEib91KLsOwnFtwFACmyWA\/QIARECqBMwAAAQEICj4jnv9NhWV5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":222,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0X4hAAEAGX2bAqAEib91KLsO0AbvHHCJSd3qYAIARECyarAAAAQEICj4jnv9NhWcM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":219,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tchAAEAGOknAqAEinTfrsMOxnFbKZQic5a3ICYARECkDbgAAAQEICj4jnv9F6hSk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":223,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nM5AAEAGU0PAqAEinTfrsMO1AbsGcnFX78av6oARECwFrgAAAQEICj4jnv9F6hY3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":220,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA008xAAEAGhObAqAEiQTffD8OynFri9dCWh7IvWoARECnbpgAAAQEICj4jnv8uudJY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":224,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OkFAAEAGHnLAqAEiQTffD8O2Abu4rlPFyHp2R4ARECyUEQAAAQEICj4jnv8uudPp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":221,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WC1AAEAGySLAqAEiQAQXpsOznFablHVe59gF64ARECp3HQAAAQEICj4jnv9MP03d","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":225,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02e5AAEAGR2HAqAEiQAQXpsO3Abu4qWf9HBLMOoARECwF4QAAAQEICj4jnv9MP09y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":223,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABzrs5AAEAGQQTAqAEinTfrsMO1AbsGcnEY78av6oAZECxMtQAAAQEICj4jn21F6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":222,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQQMdAAEAGfgvAqAEib91KLsO0AbvHHCI2d3qYAIAZECyqAAAAAQEICj4jn21NhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":229,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAorjMAAEARSR7AqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":230,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYMAAEAB8QLAqAEBwKgBIgMDgJYAAAAARQAAKK4zAABAEUkewKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":231,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoxMpAAPUGyvZbvth9wKgBIjA+w71YjgIPe47DnFAUJeUGIQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1431969713736,"flow_last_seen":1431969713736,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50110,"dst_port":12350,"l4_proto":"tcp"}
+0416{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGB5AAEAGLJTAqAEiW77YfcO+MD4D6992AAAAALAC\/\/+KswAAAgQFtAEDAwUBAQgKPiOgwQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":232,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0e5xAAPUGFBlbvth9wKgBIjA+w7686z9CA+vfd4ASH\/6FhgAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":232,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoL3hAAEAGFVLAqAEiW77YfcO+MD4D6993vOs\/Q1AQIADGPwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":232,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtqZ1AAEAGmyfAqAEiW77YfcO+MD4D6993vOs\/Q1AYIACvLwAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.26.55.167","src_port":13021,"dst_port":63773,"l4_proto":"udp"}
+0390{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuRSsAAEARjAjAqAEisBo3pzLd+R0AGvy6nPQCqlUgKb9nOC7NdHVpaZsV","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.26.55.167","src_port":13021,"dst_port":63773,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.185.207.12","src_port":13021,"dst_port":45493,"l4_proto":"udp"}
+0391{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuxDQAAEAR2PrAqAEiTLnPDDLdsbUAGvt+nPYC2PYYRrvqRJzYx\/ENvQip","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.185.207.12","src_port":13021,"dst_port":45493,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.97.100.249","src_port":13021,"dst_port":26635,"l4_proto":"udp"}
+0391{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu9OEAAEARrrjAqAEisGFk+TLdaAsAGvRlnPgCVJNAf7hukPL\/wXB1U06s","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.97.100.249","src_port":13021,"dst_port":26635,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.62.0.85","src_port":13021,"dst_port":33647,"l4_proto":"udp"}
+0390{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuQzIAAEARLjDAqAEiRz4AVTLdg28AGnA0nPoCdLBbJLLwvfiy++3Nr6hQ","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.62.0.85","src_port":13021,"dst_port":33647,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431969713814,"flow_last_seen":1431969713814,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0589{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":207,"pkt":"PBXCt3IOxCwDBkn+CABFAADBLbUAAP8R6nbAqAFc4AAA+xTpFOkArSlHAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAyAAQRfc21iwBgADIABBF9yZmLAGAAMgAEGX2FkaXNrwBgADIABwAwADAABAAAPvAAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADA4AEA1MdWNh4oCZcyBpTWFjwAzAKAAMAAEAAAwOABANTHVjYeKAmXMgaU1hY8Ao","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1431969713815,"flow_last_seen":1431969713815,"flow_tot_l4_data_len":173,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0622{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":227,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtu5cAAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADIABBF9zbWLAGAAMgAEEX3JmYsAYAAyAAQZfYWRpc2vAGAAMgAHADAAMAAEAAA+8ABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMDgAQDUx1Y2HigJlzIGlNYWPADMAoAAwAAQAADA4AEA1MdWNh4oCZcyBpTWFjwCg=","pkt_caplen":227,"pkt_type":34525,"pkt_ipoffset":14}
+0390{"flow_id":232,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAot7tAADYGlwZbvth9wKgBIjA+w7686z9DA+vffFAQA6DimgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":1431969713965,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.145","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0391{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuO\/8AAEARXS3AqAEinTeCkTLdAbsAGqTTnQwCwP4SRbwMfSMDCWlEQOP1","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":1431969713965,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.145","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":1431969713965,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.39","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0390{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969713,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuUbAAAEARRubAqAEiQTffJzLdAbsAGjQZnQ4ChKdksriBAZEnlRRV2r4X","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":1431969713965,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.39","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","category":"VoIP"}}
+0390{"flow_id":232,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoe6BAAPUGFCFbvth9wKgBIjA+w7686z9DA+vffFAUJeXAUQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1431969714165,"flow_last_seen":1431969714165,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50111,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXlBAAEAG5mHAqAEiW77YfcO\/AbtO2k10AAAAALAC\/\/\/+rQAAAgQFtAEDAwUBAQgKPiOiXAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":241,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0n3BAAPUG8ERbvth9wKgBIgG7w79kPKOqTtpNdYASH\/7vYgAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":241,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAofgBAAEAGxsnAqAEiW77YfcO\/AbtO2k11ZDyjq1AQIAAwHAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":241,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtbvxAAEAG1cjAqAEiW77YfcO\/AbtO2k11ZDyjq1AYIAAZDAAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":241,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAohDNAADYGyo5bvth9wKgBIgG7w79kPKOrTtpNelAQA6BMdwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431969714398,"flow_last_seen":1431969714398,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50112,"dst_port":20274,"l4_proto":"tcp"}
+0417{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMR1AAEAGWiPAqAEiTKehBsPATzJsmy7uAAAAALAC\/\/\/3pQAAAgQFtAEDAwUBAQgKPiOjPwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431969714398,"flow_last_seen":1431969714398,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50113,"dst_port":18767,"l4_proto":"tcp"}
+0416{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtnFAAEAGcsPAqAEiR+4Hy8PBSU++p132AAAAALAC\/\/8aaAAAAgQFtAEDAwUBAQgKPiOjPwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1431969714398,"flow_last_seen":1431969714398,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50114,"dst_port":31010,"l4_proto":"tcp"}
+0416{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAOeJAAEAGfjbAqAEiBfi63cPCeSJZV8ukAAAAALAC\/\/9xGAAAAgQFtAEDAwUBAQgKPiOjQAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":1431969714399,"flow_last_seen":1431969714399,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50115,"dst_port":59621,"l4_proto":"tcp"}
+0416{"flow_id":245,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMoNAAEAGzS3AqAEiVh8jHsPD6OVaW8KbAAAAALAC\/\/9Q8QAAAgQFtAEDAwUBAQgKPiOjQAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":245,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8OCJAAHEGlpJWHyMewKgBIujlw8M6uTMdWlvCnKASIADQQwAAAgQFrAEDAwgEAggKABoDtj4jo0A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":245,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0C5pAAEAG9CLAqAEiVh8jHsPD6OVaW8KcOrkzHoAQECwOlQAAAQEICj4jo4gAGgO2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":245,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":155,"pkt":"0NQSxnP1PBXCt3IOCABFAACNbglAAEAGkVrAqAEiVh8jHsPD6OVaW8KcOrkzHoAYECxeQgAAAQEICj4jo4gAGgO2UOp8+5ILQyXm\/CGOm+2rS5B01onz8G0E2NNPF2ckqGQnTAMUByRzRf\/gdUpBUaV3S4DxboeMjVqDWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumM=","pkt_caplen":155,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":244,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAzQFAAHIGuRYF+LrdwKgBInkiw8JDt9yLWVfLpbASRBDtIwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":244,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0avhAAEAGTSzAqAEiBfi63cPCeSJZV8ulQ7fcjIAQECx\/8gAAAQEICj4jo7UAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":244,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwt4BAAEAGAGjAqAEiBfi63cPCeSJZV8ulQ7fcjIAYECzzIgAAAQEICj4jo7UAAAAAOmaHPcLlzqlkotjFhO8c40Ctk\/3OmKWcTFwpbjDB0+P5at\/tYbOl4dELKemEbcS+QkuA8W6HjI1ag1jp","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":245,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDOCRAAHEGlklWHyMewKgBIujlw8M6uTMeWlvC9YAYAQJWlQAAAQEICgAaA70+I6OINwE+ikejrPxiKCk6zuszHQcEdsEuQCiiIwhINaTMDb0KH9CG+T9M5RCaxWV7BENSDdoD2GmGv2SF8juwYR53vP0Kc4hZti8UdSKrYFFO5w==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":245,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sHRAAEAGT0jAqAEiVh8jHsPD6OVaW8L1OrkzbYAQECkNnQAAAQEICj4jo9QAGgO9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":245,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LflAAEAG0bvAqAEiVh8jHsPD6OVaW8L1OrkzbYAYECmonQAAAQEICj4jo9QAGgO9IXsnOyU+9vo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":243,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABA9bZAAHMGAH5H7gfLwKgBIklPw8GfDHVAvqdd97AS\/\/\/meAAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":243,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA092tAAEAGMdXAqAEiR+4Hy8PBSU++p133nwx1QYAQECw01gAAAQEICj4jpBYAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":243,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxyYVAAEAGX37AqAEiR+4Hy8PBSU++p133nwx1QYAYECygpgAAAQEICj4jpBYAAAAAI4dT+IndJ5D2lVyspq7VRHzUkZ4vrKQrxd0XZuU\/WUg1xhmsEikAFOzsd8RKqvtnd7z9CnOIWbYvFHUiqw==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":244,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":115,"pkt":"PBXCt3IO0NQSxnP1CABFAABlzQ5AAHIGuOQF+LrdwKgBInkiw8JDt9yMWVfL4YAYQ9RfgQAAAQEICgAAbrI+I6O1P3P8ITQzqsFyBarNjdLSsnqA8X8eeSq1nwHOHZtGNqSB9nFXmnNp\/GC275bcDchsBQ==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":244,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fEFAAEAGO+PAqAEiBfi63cPCeSJZV8vhQ7fcvYAQECoQZAAAAQEICj4jpCYAAG6y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":244,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vZxAAEAG+n\/AqAEiBfi63cPCeSJZV8vhQ7fcvYAYECrLtAAAAQEICj4jpCYAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":242,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yw8Ds1RmabJsu76AScSD0JwAAAgQFrAQCCAq+oN5GPiOjPwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":242,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08xxAAEAGmC\/AqAEiTKehBsPATzJsmy7v7NUZm4AQECyCxgAAAQEICj4jpFm+oN5G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":242,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":143,"pkt":"0NQSxnP1PBXCt3IOCABFAACBbmRAAEAGHJvAqAEiTKehBsPATzJsmy7v7NUZm4AYECz+QwAAAQEICj4jpFm+oN5GPdupgk\/vJ+FOmIyixigyQkcRv9dUuINLFJ8sQeh34b+ml19qM2aELhPHkvsXD3cHeVZPtJXCywBx7gcMDdoD2GmGv2SF8juwYR53vP0=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":229,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAobewAAEARiWXAqAEiwKgBAdMzFOcAFCBsAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":230,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYQAAEAB8QHAqAEBwKgBIgMDgJYAAAAARQAAKG3sAABAEYllwKgBIsCoAQHTMxTnABQgbAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":243,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":173,"pkt":"PBXCt3IO0NQSxnP1CABFAACf9cNAAHMGABJH7gfLwKgBIklPw8GfDHVBvqdeNIAY\/8I0CQAAAQEICgMco4A+I6QWyMQyGiG2r\/3uU2msM480Vm6KX6\/LsMHE37hgwVCkrulVFxF93a9bT+pbtinMot1EjVqDWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgs=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":243,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ot1AAEAGhmPAqAEiR+4Hy8PBSU++p140nwx1rIAQECiMvgAAAQEICj4jpO0DHKOA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":243,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8F7BAAEAGEYnAqAEiR+4Hy8PBSU++p140nwx1rIAYECgfQQAAAQEICj4jpO0DHKOA72ydd\/Dm76E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":1431969714902,"flow_last_seen":1431969714902,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50116,"dst_port":17639,"l4_proto":"tcp"}
+0417{"flow_id":246,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA9lxAAEAG47DAqAEiUVNNjcPEROe9aVYgAAAAALAC\/\/\/WyQAAAgQFtAEDAwUBAQgKPiOlLwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":211,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDsolAADcGEbZv3U2OwKgBIgG7w6e9PNNvS9U9YIAYAB0gaQAAAQEICk2Mcqg+I2GYFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":211,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoiKNAAEAGMvfAqAEib91NjsOnAbtL1T1gAAAAAFAEAADiEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":237,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":207,"pkt":"PBXCt3IOxCwDBkn+CABFAADBTP4AAP8Ryy3AqAFc4AAA+xTpFOkArS1IAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAwAAQRfc21iwBgADAABBF9yZmLAGAAMAAEGX2FkaXNrwBgADAABwAwADAABAAAPuwAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADA0AEA1MdWNh4oCZcyBpTWFjwAzAKAAMAAEAAAwNABANTHVjYeKAmXMgaU1hY8Ao","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":238,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":227,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtv5gAAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADAABBF9zbWLAGAAMAAEEX3JmYsAYAAwAAQZfYWRpc2vAGAAMAAHADAAMAAEAAA+7ABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMDQAQDUx1Y2HigJlzIGlNYWPADMAoAAwAAQAADA0AEA1MdWNh4oCZcyBpTWFjwCg=","pkt_caplen":227,"pkt_type":34525,"pkt_ipoffset":14}
+0410{"flow_id":246,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8ec1AAHQGLERRU02NwKgBIkTnw8TZuiW6vWlWIaASIAAuPAAAAgQFrAEDAwgEAggKALqZVz4jpS8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":246,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PRZAAEAGnQPAqAEiUVNNjcPEROe9aVYh2bolu4AQECxsmQAAAQEICj4jpWsAuplX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":246,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":162,"pkt":"0NQSxnP1PBXCt3IOCABFAACUiuZAAEAGTtPAqAEiUVNNjcPEROe9aVYh2bolu4AYECwRmAAAAQEICj4jpWsAuplXCCntTHCAUOPtlk2W1uP\/4V5VXtvSArVfLzHVkoAemwfcpgRnzNQ95SzgBts8VGpaWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4yWYfROXSm5DB\/tecXerT","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":242,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0xvpAAC8G1VFMp6EGwKgBIk8yw8Ds1RmbbJsvPIAQAOOQpQAAAQEICr6g32M+I6RZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":242,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":167,"pkt":"PBXCt3IO0NQSxnP1CABFAACZxvtAAC8G1OtMp6EGwKgBIk8yw8Ds1RmbbJsvPIAYAOOzRQAAAQEICr6g32Q+I6RZVF6hvvNTpXGxmCfhPjGAdoentonVfK3GNewpYYqPxNFZGM\/LBAuZG5ipU7awlE9eLK36o\/gJpl+EJRLb0AE+F9ydKhOo+dbPNBVCS4DxboeMjVqDWOkGP+QFcrsw4Z73PH2K8wg=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":242,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cJVAAEAGGrfAqAEiTKehBsPATzJsmy887NUaAIAQECh\/3AAAAQEICj4jpXe+oN9k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":242,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969714,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8inhAAEAGAMzAqAEiTKehBsPATzJsmy887NUaAIAYECg4EQAAAQEICj4jpXe+oN9kxXgAHFm0KHI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":246,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":133,"pkt":"PBXCt3IO0NQSxnP1CABFAAB3edJAAHQGLARRU02NwKgBIkTnw8TZuiW7vWlWgYAYAQImYgAAAQEICgC6mV0+I6VrXK3rI5oDMkfn5SpY4a\/eHF83ge1xhet1RW91deXnylNNuFmDelNmA6LM6ROK6BseGKnG\/6TFMnvwoV63\/D1Ks8iZ9g==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":246,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wjJAAEAGF+fAqAEiUVNNjcPEROe9aVaB2bol\/oAQEClrtgAAAQEICj4jpagAupld","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":246,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82aBAAEAGAHHAqAEiUVNNjcPEROe9aVaB2bol\/oAYEClldgAAAQEICj4jpagAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":245,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kd5AAEAGbdbAqAEiVh8jHsPD6OVaW8L1OrkzbYAYECmmjAAAAQEICj4jpeUAGgO9IXsnOyU+9vo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":221,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PzZAAEAG4hHAqAEiQAQXpsOznFablHVW59gF64AZECoaNgAAAQEICj4jpgJMP03dvRFcC9M5aYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":244,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Dv5AAEAGqR7AqAEiBfi63cPCeSJZV8vhQ7fcvYAYECrJwwAAAQEICj4jphcAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":246,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8bUFAAEAGbNDAqAEiUVNNjcPEROe9aVaB2bol\/oAYEClkFgAAAQEICj4jpwgAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":1431969715510,"flow_last_seen":1431969715510,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50117,"dst_port":18767,"l4_proto":"tcp"}
+0417{"flow_id":247,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA3TdAAEAGS\/3AqAEiR+4Hy8PFSU9+U7C+AAAAALAC\/\/8DrQAAAgQFtAEDAwUBAQgKPiOnggAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":1431969715511,"flow_last_seen":1431969715511,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50118,"dst_port":31010,"l4_proto":"tcp"}
+0416{"flow_id":248,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAKktAAEAGjc3AqAEiBfi63cPGeSKEqukYAAAAALAC\/\/8kCwAAAgQFtAEDAwUBAQgKPiOnggAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":1431969715511,"flow_last_seen":1431969715511,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50119,"dst_port":59621,"l4_proto":"tcp"}
+0416{"flow_id":249,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAylVAAEAGNVvAqAEiVh8jHsPH6OX+Qs16AAAAALAC\/\/+d5AAAAgQFtAEDAwUBAQgKPiOnggAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":249,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8OFdAAHEGll1WHyMewKgBIujlw8c9omIw\/kLNe6ASIADqygAAAgQFrAEDAwgEAggKABoEJj4jp4I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":249,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XmBAAEAGoVzAqAEiVh8jHsPH6OX+Qs17PaJiMYAQECwpEwAAAQEICj4jp9MAGgQm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":249,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABw38hAAEAGH7jAqAEiVh8jHsPH6OX+Qs17PaJiMYAYECw3awAAAQEICj4jp9MAGgQmHtru+ymkRTm2A+pHY3Z215sOyr8gdCtg1iulMa+dZEfWu2orjZ6TYb2ikYW441sdIsnlNVwIFS7UO6av","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":248,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAzWBAAHIGuLcF+LrdwKgBInkiw8ZD4gQbhKrpGbASRBB8ngAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":248,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wlBAAEAG9dPAqAEiBfi63cPGeSKEqukZQ+IEHIAQECwLJwAAAQEICj4jp\/sAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":248,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":95,"pkt":"0NQSxnP1PBXCt3IOCABFAABRANtAAEAGtyzAqAEiBfi63cPGeSKEqukZQ+IEHIAYECxo4QAAAQEICj4jp\/sAAAAAcfG0QpE3RDshJ7poDocJf7VVpqo3Mo3QyGFUfnU=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":249,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":113,"pkt":"PBXCt3IO0NQSxnP1CABFAABjOFhAAHEGljVWHyMewKgBIujlw8c9omIx\/kLNt4AYAQLwuAAAAQEICgAaBC0+I6fTktZQgnOXJEJTsISTORA2HxXslH1JCfqHP0cjnwzmo7k6OoXPj3NL6OguTVMX+5o=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":249,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JjdAAEAG2YXAqAEiVh8jHsPH6OX+Qs23PaJiYIAQECooZQAAAQEICj4jqBEAGgQt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":245,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0A7FAAEAG\/AvAqAEiVh8jHsPD6OVaW8L9OrkzbYARECkJVwAAAQEICj4jqBEAGgO9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":249,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABFBHpAAEAG+zHAqAEiVh8jHsPH6OX+Qs23PaJiYIAYECp6HgAAAQEICj4jqBEAGgQtY1R9uOTiptMR6EzlMglWk1o=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":249,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCOFxAAHEGllJWHyMewKgBIujlw8c9omJg\/kLNyIAYAQK51QAAAQEICgAaBDM+I6gRjBgcfGLHmRCW5A5lM9Q=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":249,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XSxAAEAGopDAqAEiVh8jHsPH6OX+Qs3IPaJiboAQECon\/AAAAQEICj4jqFUAGgQz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1419{"flow_id":249,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":820,"pkt":"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","pkt_caplen":820,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":247,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABA9cxAAHMGAGhH7gfLwKgBIklPw8W6q5ekflOwv7AS\/\/+V\/QAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":247,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iyZAAEAGnhrAqAEiR+4Hy8PFSU9+U7C\/uquXpYAQECzgEQAAAQEICj4jqF8AAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":247,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtBt9AAEAGIinAqAEiR+4Hy8PFSU9+U7C\/uquXpYAYECysRgAAAQEICj4jqF8AAAAAVDgEuw8SF15aGv5KwkPfIYmpZmZ0ucqVlEouiH1egPaJKziCCa38jwc1TDzWspxXGrrgcXxl7tvV","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":248,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":139,"pkt":"PBXCt3IO0NQSxnP1CABFAAB9zW1AAHIGuG0F+LrdwKgBInkiw8ZD4gQchKrpNoAYQ\/O36gAAAQEICgAAbr0+I6f7KIPcmLAVFnkaHVtsy6BBP2ldX66gHOpxvnQEQeOlf1A7Bmj++SpEhbSp\/JwKswD8wXMMiEBwYy+bwsqiSovhLRm5s0jDXpUpIQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":248,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0oxdAAEAGFQ3AqAEiBfi63cPGeSKEquk2Q+IEZYAQECmbmgAAAQEICj4jqGcAAG69","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":244,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wEtAAEAG99jAqAEiBfi63cPCeSJZV8vpQ7fcvYARECoMGgAAAQEICj4jqGcAAG6y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":248,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABF675AAEAGzFTAqAEiBfi63cPGeSKEquk2Q+IEZYAYECmEUAAAAQEICj4jqGcAAG69UhqDDf9XagvX5uLe2azFMn8=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":249,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCOF5AAHEGllBWHyMewKgBIujlw8c9omJu\/kLNyIAYAQJB9AAAAQEICgAaBDo+I6hVizNigL\/7wZ+JGL4SPpg=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":249,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MClAAEAGz5PAqAEiVh8jHsPH6OX+QtC6PaJifIAQECkkswAAAQEICj4jqJgAGgQ6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":248,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCzXBAAHIGuKUF+LrdwKgBInkiw8ZD4gRlhKrpR4AYQ+L8zAAAAQEICgAAbr4+I6hnOAluenMFZrS2hdKSYZY=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":248,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0RR1AAEAGcwfAqAEiBfi63cPGeSKEqulHQ+IEc4AQECmbEAAAAQEICj4jqNEAAG6+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":246,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80eFAAEAGCDDAqAEiUVNNjcPEROe9aVaB2bol\/oAYECliIAAAAQEICj4jqP4AupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":244,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kTJAAEAGJurAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECrGqQAAAQEICj4jqTAAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":247,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":101,"pkt":"PBXCt3IO0NQSxnP1CABFAABX9dlAAHMGAERH7gfLwKgBIklPw8W6q5elflOw+IAY\/8b4ewAAAQEICgMco4s+I6hfpoo0qYcSB8Se3sAmHRKq16MBrKQwh0OqijGW+EHoEBAe+2o=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":247,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03xVAAEAGSivAqAEiR+4Hy8PFSU9+U7D4uquXyIAQECo4PAAAAQEICj4jqTMDHKOL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":243,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0i7hAAEAGnYjAqAEiR+4Hy8PBSU++p148nwx1rIARECiIbwAAAQEICj4jqTMDHKOA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":247,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABF7TJAAEAGO\/3AqAEiR+4Hy8PFSU9+U7D4uquXyIAYECrXxwAAAQEICj4jqTMDHKOLIzgdxP00IPW\/+VionbBv4ds=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":248,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCzXVAAHIGuKAF+LrdwKgBInkiw8ZD4gRzhKrpR4AYQ+LQHAAAAQEICgAAbr8+I6jR9AmlQG9lrDP6BJC2V4Q=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":248,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Q7tAAEAGdGnAqAEiBfi63cPGeSKEqulHQ+IEgYAQECialwAAAQEICj4jqTwAAG6\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":248,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4I9VAAEAGlEvAqAEiBfi63cPGeSKEqulHQ+IEgYAYECiCmgAAAQEICj4jqTwAAG6\/Xee6CQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":245,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89dhAAEAGCdzAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECmjMQAAAQEICj4jqT8AGgO9IXsnOyU+9vo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":249,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0OGpAAHEGllJWHyMewKgBIujlw8c9omJ8\/kLQuoAQAP80CQAAAQEICgAaBE8+I6hX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":249,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969715,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4PsBAAEAGwPjAqAEiVh8jHsPH6OX+QtC6PaJifIAYECmbnAAAAQEICj4jqVgAGgRPthvSGQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":1431969716015,"flow_last_seen":1431969716015,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50121,"dst_port":17639,"l4_proto":"tcp"}
+0417{"flow_id":250,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAfGpAAEAGXaPAqAEiUVNNjcPJROc2X9vGAAAAALAC\/\/\/T7gAAAgQFtAEDAwUBAQgKPiOpaQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":220,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8OGdAAEAGIETAqAEiQTffD8OynFri9dCOh7IvWoAZECn47gAAAQEICj4jqZUuudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":250,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8egBAAHQGLBFRU02NwKgBIkTnw8naYr1gNl\/bx6ASIACSowAAAgQFrAEDAwgEAggKALqZxj4jqWk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":250,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0B4NAAEAG0pbAqAEiUVNNjcPJROc2X9vH2mK9YYAQECzRAwAAAQEICj4jqaIAupnG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":250,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":111,"pkt":"0NQSxnP1PBXCt3IOCABFAABhRYRAAEAGlGjAqAEiUVNNjcPJROc2X9vH2mK9YYAYECxoqAAAAQEICj4jqaIAupnGxybTj3meuQXk+DjI96LAabsOpEgWj7vgTYStI8MTlFkc4AK6scRaM9O8ytF3","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":210,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0WBpAADcGbHRv3U2OwKgBIpxXw6bHcDitFXPfSIARAB1G7wAAAQEICk2Mc9A+I1wi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":250,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":127,"pkt":"PBXCt3IO0NQSxnP1CABFAABxegRAAHQGK9hRU02NwKgBIkTnw8naYr1hNl\/b9IAYAQJRyQAAAQEICgC6mcw+I6miP8lOD3ZgR3K+xgV7MdGuF8X5fvarvP0TZC6WhiWHCtQ0lAcUkAOS9zGzrcNNr+FNOFmOI3F\/RTTg4hIaqA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":250,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UI5AAEAGiYvAqAEiUVNNjcPJROc2X9v02mK9noAQECrQXAAAAQEICj4jqdsAupnM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":246,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0xVVAAEAGFMTAqAEiUVNNjcPEROe9aVaJ2bol\/oAREClnegAAAQEICj4jqdsAupld","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":250,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABEzT9AAEAGDMrAqAEiUVNNjcPJROc2X9v02mK9noAYECpmzgAAAQEICj4jqdsAupnMjG4bdIaGHrV5T9XSy8YBbw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":243,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8fCpAAEAGrQ7AqAEiR+4Hy8PBSU++p140nwx1rIAZECgaRgAAAQEICj4jqecDHKOA72ydd\/Dm76E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+2011{"flow_id":249,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":1249,"pkt":"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","pkt_caplen":1249,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":247,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC9dxAAHMGAFZH7gfLwKgBIklPw8W6q5fIflOxCYAY\/7U3owAAAQEICgMco44+I6kzvZv3HosRqeTwyFun2sE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":247,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA097xAAEAGMYTAqAEiR+4Hy8PFSU9+U7EJuquX1oAQECo3UAAAAQEICj4jqf0DHKOO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":251,"flow_packet_id":1,"flow_first_seen":1431969716182,"flow_last_seen":1431969716182,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50122,"dst_port":44431,"l4_proto":"tcp"}
+0416{"flow_id":251,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAI3FAAEAG8D7AqAEiUYUTucPKrY8W93X3AAAAALAC\/\/8pggAAAgQFtAEDAwUBAQgKPiOqBgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":250,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCeglAAHQGLAJRU02NwKgBIkTnw8naYr2eNl\/cBIAYAQJxYAAAAQEICgC6mdM+I6nbd+c7b+yayoVA2nSITh0=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":250,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0d2xAAEAGYq3AqAEiUVNNjcPJROc2X9wE2mK9rIAQECnP8wAAAQEICj4jqiAAupnT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1416{"flow_id":250,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":819,"pkt":"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","pkt_caplen":819,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":251,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAivNAADAGmLxRhRO5wKgBIq2Pw8rX0EaLFvd1+LAS\/\/\/WdwAAAgQFrAEDAwUBAQgKArAx9T4jqgYEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":251,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OVVAAEAG2mbAqAEiUYUTucPKrY8W93X419BGjIAQECwFxAAAAQEICj4jqlUCsDH1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":251,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":176,"pkt":"0NQSxnP1PBXCt3IOCABFAACipVRAAEAGbfnAqAEiUYUTucPKrY8W93X419BGjIAYECwLxAAAAQEICj4jqlUCsDH1yVZTyBR\/FV20spD47NNR4igJwKwRozuA1h77fthP21qoSy2VGpPQ1GHBgR\/ej4ob9m9UtWLroJGOJ6wteiN4iSbfBKWSW1CBvpdcHaqTKHlWT7SVwssAce4HDA3aA9hphr9khfI7sGEed7z9CnM=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":250,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCehBAAHQGK\/tRU02NwKgBIkTnw8naYr2sNl\/cBIAYAQL7PwAAAQEICgC6mdo+I6ogskPahi4vKp\/yMTTW1xw=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":250,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bPFAAEAGbSjAqAEiUVNNjcPJROc2X9712mK9uoAQECnMswAAAQEICj4jqloAupna","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":248,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zYhAAHIGuJsF+LrdwKgBInkiw8ZD4gSBhKrpS4AQQ95m2QAAAQEICgAAbsM+I6k8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":251,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0omFAADAGgVpRhRO5wKgBIq2Pw8rX0EaMFvd1+IAQECwFcwAAAQEICgKwMkY+I6pV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":251,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0RIBAADAG3ztRhRO5wKgBIq2Pw8rX0EaMFvd2ZoAQECgFBwAAAQEICgKwMkg+I6pV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":251,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":154,"pkt":"PBXCt3IO0NQSxnP1CABFAACMbiVAADAGtT5RhRO5wKgBIq2Pw8rX0EaMFvd2ZoAYECh2iQAAAQEICgKwMkg+I6pVOz6gZOdYgC1WNotahae8L1wM65966aKZazO001Pq5RaKIEfe69tlvC6x\/H6GARjJJEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36o\/gJpl+EJRLb0AE+Fw==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":251,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bxhAAEAGpKPAqAEiUYUTucPKrY8W93Zm19BG5IAQECkEWgAAAQEICj4jqqkCsDJI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":251,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8rSlAAEAGZorAqAEiUYUTucPKrY8W93Zm19BG5IAYECk9nQAAAQEICj4jqqoCsDJIZdJpfu5kCPY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":247,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC9eFAAHMGAFFH7gfLwKgBIklPw8W6q5fWflOxCYAY\/7UVKAAAAQEICgMco5A+I6n9+E4HJ1lujmaAPbCFGnY=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":247,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cM5AAEAGuHLAqAEiR+4Hy8PFSU9+U7EJuquX5IAQECo2eQAAAQEICj4jqsQDHKOQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":247,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4v5dAAEAGaaXAqAEiR+4Hy8PFSU9+U7EJuquX5IAYECpAyAAAAQEICj4jqsQDHKOQI+HRww==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":250,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ehxAAHQGK\/1RU02NwKgBIkTnw8naYr26Nl\/e9YAQAP\/b+wAAAQEICgC6mfQ+I6oi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":250,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4yTlAAEAGENzAqAEiUVNNjcPJROc2X9712mK9uoAYECnmtwAAAQEICj4jq1YAupn0gp5iOw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":242,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8nBZAAEAG7y3AqAEiTKehBsPATzJsmy887NUaAIAYECgxvgAAAQEICj4jq8q+oN9kxXgAHFm0KHI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1927{"flow_id":250,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":1190,"pkt":"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","pkt_caplen":1190,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":246,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/ZNAAEAG3H3AqAEiUVNNjcPEROe9aVaB2bol\/oAZECle+wAAAQEICj4jrCIAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":247,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09fFAAHMGAE9H7gfLwKgBIklPw8W6q5fkflOxDYAQ\/7FG6QAAAQEICgMco5Q+I6rE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":251,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/4BAAEAGFDPAqAEiUYUTucPKrY8W93Zm19BG5IAYECk8CgAAAQEICj4jrD0CsDJIZdJpfu5kCPY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1050{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":219,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969716,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HjRAAEAG0dXAqAEinTfrsMOxnFbKZQiU5a3ICYAZEClxEgAAAQEICj4jrKxF6hSkCDlkOMMwVQQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAISf4EAAEARdK7AqAFcwKgB\/0RcRFwB\/jyueyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":252,"flow_packet_id":1,"flow_first_seen":1431969717177,"flow_last_seen":1431969717177,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50123,"dst_port":4415,"l4_proto":"tcp"}
+0416{"flow_id":252,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+WNAAEAGAQPAqAEiUA4uecPLET9q+lcrAAAAALAC\/\/9zkwAAAgQFtAEDAwUBAQgKPiOtxAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":252,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAoQ1AAHQGJVlQDi55wKgBIhE\/w8sUK4TLavpXLLAS\/\/\/FfwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":252,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NNxAAEAGxZbAqAEiUA4uecPLET9q+lcsFCuEzIAQECwJ2AAAAQEICj4jrhsAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":252,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":161,"pkt":"0NQSxnP1PBXCt3IOCABFAACTX6BAAEAGmnPAqAEiUA4uecPLET9q+lcsFCuEzIAYECzjbQAAAQEICj4jrhsAAAAAKlynFyjlOqL8dqz+bX0Or8xAQIj\/HCOpBXfertyPyUZgodtmd04O2PMb+P08ptsCU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK0=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":253,"flow_packet_id":1,"flow_first_seen":1431969717295,"flow_last_seen":1431969717295,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50124,"dst_port":44431,"l4_proto":"tcp"}
+0417{"flow_id":253,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAu4NAAEAGWCzAqAEiUYUTucPMrY9zRWLSAAAAALAC\/\/\/cJAAAAgQFtAEDAwUBAQgKPiOuOAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":252,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":155,"pkt":"PBXCt3IO0NQSxnP1CABFAACNoRNAAHQGJQZQDi55wKgBIhE\/w8sUK4TMavpXi4AY\/6C0HgAAAQEICgADVZY+I64bS62Kgl1ACKAwpANux8IK7+mmPs6Q432Z3QEqRI3UeUJeWYsHKQHcFtC62UOETMDlx8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36o\/gJpl8=","pkt_caplen":155,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":252,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04RFAAEAGGWHAqAEiUA4uecPLET9q+leLFCuFJYAQECmzMAAAAQEICj4jrnQAA1WW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":252,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88L1AAEAGCa3AqAEiUA4uecPLET9q+leLFCuFJYAYECk++gAAAQEICj4jrnQAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":253,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAwAFAADAGY65RhRO5wKgBIq2Pw8wuoXfGc0Vi07AS\/\/\/8vwAAAgQFrAEDAwUBAQgKArA2RD4jrjgEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":253,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0inxAAEAGiT\/AqAEiUYUTucPMrY9zRWLTLqF3x4AQECwsDQAAAQEICj4jroYCsDZE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":253,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAABb4XZAAEAGMh7AqAEiUYUTucPMrY9zRWLTLqF3x4AYECz4rQAAAQEICj4jroYCsDZExRCwb4Pw53lbWC1Nsi62p4WS+8ijah4MsiuRStaLm9aNjgrLv8QQ","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":244,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ofpAAEAGFiLAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECrBQQAAAQEICj4jrpgAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":251,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8q+hAAEAGZ8vAqAEiUYUTucPKrY8W93Zm19BG5IAYECk5rAAAAQEICj4jrpsCsDJIZdJpfu5kCPY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":253,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0PcNAADAG5fhRhRO5wKgBIq2Pw8wuoXfHc0Vi04AQECwrxAAAAQEICgKwNo0+I66G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":253,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0vJBAADAGZytRhRO5wKgBIq2Pw8wuoXfHc0Vi+oAQECormgAAAQEICgKwNpI+I66G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":253,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":92,"pkt":"PBXCt3IO0NQSxnP1CABFAABOPYZAADAG5htRhRO5wKgBIq2Pw8wuoXfHc0Vi+oAYECo+iwAAAQEICgKwNpI+I66GEUzAcptuOVWs58ktKjeJ1tjLW9q0p9kwWcg=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":253,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UKtAAEAGwxDAqAEiUYUTucPMrY9zRWL6LqF34YAQECsrMwAAAQEICj4jrtICsDaS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":251,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QYlAAEAG0jLAqAEiUYUTucPKrY8W93Zu19BG5IARECkAKAAAAQEICj4jrtICsDJI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":253,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABCKD5AAEAG62\/AqAEiUYUTucPMrY9zRWL6LqF34YAYECtBJgAAAQEICj4jrtICsDaSI0KWl21qT3SrBFagcZk=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":243,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iu5AAEAGnkrAqAEiR+4Hy8PBSU++p140nwx1rIAZECgVTAAAAQEICj4jruEDHKOA72ydd\/Dm76E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":225,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDg1BAADYGp7BABBemwKgBIgG7w7ccEsw6uKlnzIAYAB2LGwAAAQEICkw\/WPQ+I4i3FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":225,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAokcJAAEAGj5nAqAEiQAQXpsO3Abu4qWfMAAAAAFAEAACwgwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":253,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0LJJAADAG9ylRhRO5wKgBIq2Pw8wuoXfhc0VjCIAQECoq3wAAAQEICgKwNtk+I67S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":253,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABGLyxAADAG9H1RhRO5wKgBIq2Pw8wuoXfhc0VjCIAYECqhCAAAAQEICgKwNtk+I67SBnOMXKxM+8q4kvZtXT4DeD8e","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":253,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03KBAAEAGNxvAqAEiUYUTucPMrY9zRWMILqF384AQECoqhQAAAQEICj4jrxoCsDbZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":253,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaQRlAAEAG0nzAqAEiUYUTucPMrY9zRWMILqF384AYECqkjwAAAQEICj4jrxoCsDbZqyQ98h95f43OV5kmw9gCgvGChHgwjIcK3h\/HD6ViVYpRVHUgO60=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":245,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PU9AAEAGwmXAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECmdRQAAAQEICj4jrysAGgO9IXsnOyU+9vo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":253,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0dJ9AADAGrxxRhRO5wKgBIq2Pw8wuoXfzc0VjLoAQECkqFgAAAQEICgKwNyM+I68a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":224,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtgVZAAEAG1yPAqAEiQTffD8O2Abu4rlOMyHp2R4AZECxe8AAAAQEICj4jsBEuudPpI5bq6HMzIBDTkc9VEw4iCS9khhJElSKv7lgEA0wtqe8DbuphtcTug+qyZjVGz2PfJmKteoTIZ7xX","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":252,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IDhAAEAG2jLAqAEiUA4uecPLET9q+leLFCuFJYAYECk9VwAAAQEICj4jsBcAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1431969717899,"flow_last_seen":1431969717899,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.22","dst_ip":"192.168.1.34","src_port":5223,"dst_port":49447,"l4_proto":"tcp"}
+0686{"flow_id":254,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":279,"pkt":"PBXCt3IO0NQSxnP1CABFAAEJlCBAADAGQl8Rj6AWwKgBIhRnwSeBM8VdlvCqUoAYASHIigAAAQEIClVKAjo+IiGKFwMBANBGiA2FCgkg8zogS8Wv8uA0hKKXZpqXahZerQ98bBCn7C+LnTtdb1gFMe8akVD0ZXaKV2LbbgrevU7SQvBoNrIKmLDngOd7HnJnwMZSKAgZhBWjSGnNxPPChGecLDOMDXdtNcHO5aH0kerDi4eahd\/xxcweKHEqdaSg9EF7AN1znxgL9Vtu5lzdAyFIAlRZuEfAfgPOG5VblTu4iCKf5kwtqrTH0XrU9yr9hT+57cz\/TU37sy04NvAQJNXRsNfuIJU+SbJ1mgQuWHV+U5AtBgSt","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1431969717899,"flow_last_seen":1431969717899,"flow_tot_l4_data_len":245,"flow_min_l4_data_len":245,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":245,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.22","dst_ip":"192.168.1.34","src_port":5223,"dst_port":49447,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","category":"Cloud"}}
+0399{"flow_id":254,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ie5AAEAGPWbAqAEiEY+gFsEnFGeW8KpSgTPGMoAQD\/lO7gAAAQEICj4jsIZVSgI6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":254,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOywdAAEAG+\/LAqAEiEY+gFsEnFGeW8KpSgTPGMoAYEAClWwAAAQEICj4jsIdVSgI6FwMBACBFSXcAQNGwOhcu0QVlHuKzyvFkGgpCme0Kai94jEbJ0RcDAQAwQN+VK2ikiOW7uk5UyLlTNolrUZSBmQX1wD8NXzXPIFfAPuABh4UNMZuiOLR\/\/d5p","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":237,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":207,"pkt":"PBXCt3IOxCwDBkn+CABFAADBmPEAAP8RfzrAqAFc4AAA+xTpFOkArRpOAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAwAAQRfcmZiwBgADAABBF9zbWLAGAAMAAEGX2FkaXNrwBgADAABwAwADAABAAAPuAAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADAoAEA1MdWNh4oCZcyBpTWFjwAzAMwAMAAEAAAwKABANTHVjYeKAmXMgaU1hY8Az","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":238,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":227,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtrJ4AAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADAABBF9yZmLAGAAMAAEEX3NtYsAYAAwAAQZfYWRpc2vAGAAMAAHADAAMAAEAAA+4ABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMCgAQDUx1Y2HigJlzIGlNYWPADMAzAAwAAQAADAoAEA1MdWNh4oCZcyBpTWFjwDM=","pkt_caplen":227,"pkt_type":34525,"pkt_ipoffset":14}
+0462{"flow_id":224,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":110,"pkt":"PBXCt3IO0NQSxnP1CABFAABgpbRAADcGu9JBN98PwKgBIgG7w7bIenaWuK5TxoAZAB3GRgAAAQEICi653wQ+I7AREcUAnu3KQPWF5+KnxD9SPj1\/du47kWuqA+Y5cuLE4NgR02T7q4mUUlyKkSM=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":224,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAopvdAAEAGscfAqAEiQTffD8O2Abu4rlPGAAAAAFAEAAD76AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":203,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOD61AAEAG39zAqAEi1cezjsOfAbt1SdzkHtgDwIAZECylBgAAAQEICj4jsKtQDMF3EmQmnx6sH6BO82garWUNa027XrMWTbG33jE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":218,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u05AAEAGA5jAqAEib91KLsOwnFtwFACeyWA\/QIAZECqHvwAAAQEICj4jsLBNhWV5MasRplDVU5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":255,"flow_packet_id":1,"flow_first_seen":1431969717949,"flow_last_seen":1431969717949,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50125,"dst_port":12350,"l4_proto":"tcp"}
+0416{"flow_id":255,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1MFAAEAGbfDAqAEiW77afcPNMD7mkcxwAAAAALAC\/\/+pEQAAAgQFtAEDAwUBAQgKPiOwswAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":256,"flow_packet_id":1,"flow_first_seen":1431969717949,"flow_last_seen":1431969717949,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.23","src_port":50126,"dst_port":12350,"l4_proto":"tcp"}
+0416{"flow_id":256,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjMJAAEAGuFXAqAEiW77YF8POMD6CImXAAAAAALAC\/\/92lQAAAgQFtAEDAwUBAQgKPiOwtAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":256,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGUBRbvtgXwKgBIjA+w86t1YyggiJlwaASOJDgygAAAgQFrAQCCAoNJSaXPiOwtAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":256,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ynpAAEAGeqnAqAEiW77YF8POMD6CImXBrdWMoYAQECw3ygAAAQEICj4jsN8NJSaX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":256,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969717,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwNk9AAEAGDpnAqAEiW77YF8POMD6CImXBrdWMoYAYECxRwQAAAQEICj4jsN8NJSaX054\/x27CkB40M4zTRTB1beE56lLVTpv0SdQZMV+Gxe2vLfYhGBuOPdkXmeD3ZdZFGKnG\/6TFMnvwoV63","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":255,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kN5AAPQG\/d5bvtp9wKgBIjA+w83ZQ\/6U5pHMcYASH\/7YKwAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":255,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAonhdAAEAGpLLAqAEiW77afcPNMD7mkcxx2UP+lVAQIAAY5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":255,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":123,"pkt":"0NQSxnP1PBXCt3IOCABFAABtsS5AAEAGkVbAqAEiW77afcPNMD7mkcxx2UP+lVAYIACr\/AAAb8pkkMLyP1ReSzUDlnYO\/rcL1FqiCX+mFcfIwCBq9LukASeON+T+rYpdCovo\/4IhDA3aA9hphr9khfI7sGEed7z9CnOI","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":223,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":129,"pkt":"0NQSxnP1PBXCt3IOCABFAABzpBJAAEAGS8DAqAEinTfrsMO1AbsGcnEY78av6oAZECw7LQAAAQEICj4jsPVF6hY3sJ5M2vPvqN11yHQsLBYX78Fbyq3x3hepbRjJ8YnhMbQPilSaKG1RU\/yixUsT4fxcBNvK\/vN9qGK86WKCmteS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":256,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qgBAADUGphtbvtgXwKgBIjA+w86t1YyhgiJl\/YAQAB1HkwAAAQEICg0lJqE+I7Df","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":256,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":172,"pkt":"PBXCt3IO0NQSxnP1CABFCACeqgFAADUGpbBbvtgXwKgBIjA+w86t1YyhgiJl\/YAYAB305gAAAQEICg0lJqI+I7DfpZJiMhKXEGj7AQ\/2AdpH02RX++LOapULNWFXwVSIveJJkbTQ+2I8jxHwmp+B\/Fy3QLEuR0xNGkMYqcb\/pMUye\/ChXrf8PUqzyJn2b1S1YuugkY4nrC16I3iJJt8EpZJbUIG7AMRNwGL46w==","pkt_caplen":172,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":256,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WTZAAEAG6+3AqAEiW77YF8POMD6CImX9rdWNC4AQECg29AAAAQEICj4jsQgNJSai","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":256,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IzVAAEAGIefAqAEiW77YF8POMD6CImX9rdWNC4AYECiQhwAAAQEICj4jsQgNJSaium5jNp\/t6Mk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":255,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAohChAADcGx6Fbvtp9wKgBIjA+w83ZQ\/6V5pHMtlAQA6A1AAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":254,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lCFAADAGQzMRj6AWwKgBIhRnwSeBM8YylvCqrIAQASFchwAAAQEIClVKAx4+I7CH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":246,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8W25AAEAGfqPAqAEiUVNNjcPEROe9aVaB2bol\/oAZEClZewAAAQEICj4jsaIAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":218,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":128,"pkt":"PBXCt3IO0NQSxnP1CABFAAByWnZAADYGbjpv3UouwKgBIpxbw7DJYD9IcBQAp4AZAB159QAAAQEICk2FciY+I7CwmAIXkyBXzHE154LabKT7fJo+gXNAEWzUURQTrLo9dtJdHsP4Dv0+8630BSXoEtPs\/t59yXG3UZA5xAHlgzk=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":218,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAopbNAAEAGGUfAqAEib91KLsOwnFtwFACnAAAAAFAEAABjQwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":257,"flow_packet_id":1,"flow_first_seen":1431969718289,"flow_last_seen":1431969718289,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50127,"dst_port":4415,"l4_proto":"tcp"}
+0417{"flow_id":257,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAEiZAAEAG6EDAqAEiUA4uecPPET\/DDsi2AAAAALAC\/\/+lsQAAAgQFtAEDAwUBAQgKPiOyAgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":242,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80FVAAEAGuu7AqAEiTKehBsPATzJsmy887NUaAIAYECgrbAAAAQEICj4jshy+oN9kxXgAHFm0KHI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0850{"flow_id":256,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":257,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAoSFAAHQGJUVQDi55wKgBIhE\/w88Zt5eOww7It7AS\/\/\/jjAAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":257,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PHJAAEAGvgDAqAEiUA4uecPPET\/DDsi3GbeXj4AQECwjnwAAAQEICj4jsmEAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":257,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":108,"pkt":"0NQSxnP1PBXCt3IOCABFAABe99hAAEAGAnDAqAEiUA4uecPPET\/DDsi3GbeXj4AYECyaqAAAAQEICj4jsmEAAAAA1Uc7quK1zgneI1k5R8RQJbdfkZbM+4zLraYH\/YFcifeexP+WGe1tSG6F","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":251,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83z1AAEAGNHbAqAEiUYUTucPKrY8W93Zm19BG5IAZECk1twAAAQEICj4jso8CsDJIZdJpfu5kCPY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":252,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xOJAAEAGNYjAqAEiUA4uecPLET9q+leLFCuFJYAYECk62QAAAQEICj4jspUAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1451{"flow_id":247,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":843,"pkt":"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","pkt_caplen":843,"pkt_type":2048,"pkt_ipoffset":14}
+1444{"flow_id":248,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":843,"pkt":"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","pkt_caplen":843,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":242,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qwlAAEAG4ELAqAEiTKehBsPATzJsmy9E7NUaAIAREChysQAAAQEICj4jspm+oN9k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":257,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":133,"pkt":"PBXCt3IO0NQSxnP1CABFAAB3oSVAAHQGJQpQDi55wKgBIhE\/w88Zt5ePww7I4YAY\/9UY1gAAAQEICgADVaE+I7JhrkmMD8qYuloTzBTcnsqm7zjR0\/y6G1IIgjxM6tDjLe+miNcz2IkFQ9pZFBOt74taVL\/n7aOT\/+k32QPU7oJGRdOJCQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":257,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XpVAAEAGm93AqAEiUA4uecPPET\/DDsjhGbeX0oAQECnNLQAAAQEICj4jssQAA1Wh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":252,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bFZAAEAGjhzAqAEiUA4uecPLET9q+leTFCuFJYARECmu1wAAAQEICj4jssQAA1WW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":257,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABCi8ZAAEAGbp7AqAEiUA4uecPPET\/DDsjhGbeX0oAYEClU8gAAAQEICj4jssQAA1WhkIezl\/XhRCocc8wlEWE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":216,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jTtAAEAGy+PAqAEinTeCm8OsnFQhlXBwFdEIa4AZECkOWgAAAQEICj4jstFOs6ExgUZfklcFTZE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":257,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABGoSdAAHQGJTlQDi55wKgBIhE\/w88Zt5fSww7I74AY\/8cUkgAAAQEICgADVaI+I7LECd00p68v5qpIaiJrYmL\/RCf4","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":257,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OC9AAEAGwkPAqAEiUA4uecPPET\/DDsjvGbeX5IAQECnMrQAAAQEICj4jsyMAA1Wi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":257,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":103,"pkt":"0NQSxnP1PBXCt3IOCABFAABZswlAAEAGR0TAqAEiUA4uecPPET\/DDsjvGbeX5IAYECkxhgAAAQEICj4jsyMAA1WicbBvlPTAJKeJpcIvJlkmi5AmvI8rhb\/dMWlrowmWiQfE0pf9Qw==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":247,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09ftAAHMGAEVH7gfLwKgBIklPw8W6q5fkflO0FoAQ\/Kg\/AAAAAQEICgMco6g+I7KZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0852{"flow_id":256,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":257,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0oSpAAHQGJUhQDi55wKgBIhE\/w88Zt5fkww7JFIAQ\/6LdCwAAAQEICgADVaU+I7Mj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":233,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuya0AAEARB4bAqAEisBo3pzLd+R0AGsL+nm0CcwIwd+MhD2imQikN7XJ0","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":234,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAupZYAAEAR95jAqAEiTLnPDDLdsbUAGqRNnm8CZa4cvOCl2walp\/2oMJDI","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":248,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zh9AAHIGuAQF+LrdwKgBInkiw8ZD4gSBhKrsVIAQQNVdYQAAAQEICgAAbt4+I7KZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":214,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0R45AADkG\/vcXziGmwKgBIgG7w6oZSGV2Rgv0Z4ARAcX40wAAAQEICuwvcRg+I2bi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":214,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MIVAAEAGDwHAqAEiF84hpsOqAbtGC\/UOGUhld4ARECycXgAAAQEICj4jtEjsL3EY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":214,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969718,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoUvNAADkG854XziGmwKgBIgG7w6oZSGV3AAAAAFAEAABwfQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431969719055,"flow_last_seen":1431969719055,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp"}
+0448{"flow_id":258,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXAXoAAEAR9ajAqAEiwKgBAfP2ADUAQxAUbrQBAAABAAAAAAAAE3AwNS1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431969719055,"flow_last_seen":1431969719055,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"p05-keyvalueservice.icloud.com.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0493{"flow_id":258,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":133,"pkt":"PBXCt3IO0NQSxnP1CABFAAB3AABAAEARtwLAqAEBwKgBIgA18\/YAY7LlbrSBgAABAAIAAAAAE3AwNS1rZXl2YWx1ZXNlcnZpY2UGaWNsb3VkA2NvbQZha2FkbnMDbmV0AAABAAHADAABAAEAAAAZAAQRrGQkwAwAAQABAAAAGQAEEaxkCA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0691{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":258,"flow_packet_id":2,"flow_first_seen":1431969719055,"flow_last_seen":1431969719110,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":67,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.AppleiCloud","category":"Web"},"dns": {"query":"p05-keyvalueservice.icloud.com.akadns.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.172.100.36"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":259,"flow_packet_id":1,"flow_first_seen":1431969719110,"flow_last_seen":1431969719110,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":259,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAHqNAAEAG5HrAqAEiEaxkJMPQAbsLGQpgAAAAALAC\/\/8xEQAAAgQFtAEDAwUBAQgKPiO1KQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":259,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAsDItAAPAGRqYRrGQkwKgBIgG7w9AFbnZwCxkKYWASH\/7prQAAAgQFoAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":259,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAocytAAEAGkArAqAEiEaxkJMPQAbsLGQphBW52cVAQ\/\/8hVQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_id":259,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":287,"pkt":"0NQSxnP1PBXCt3IOCABFAAERGFtAAEAG6fHAqAEiEaxkJMPQAbsLGQphBW52cVAY\/\/\/qjAAAFgMBAOQBAADgAwNVWh+31WXSTHREMokhIqCcUnp9wljFgut1FAWv\/IRrRCC9J9K2RjJjHnC8CFVB8Gg9pkEtkLMETmSD4xz1bWuZVABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAABNAAAAIwAhAAAecDA1LWtleXZhbHVlc2VydmljZS5pY2xvdWQuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":287,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":259,"flow_packet_id":4,"flow_first_seen":1431969719110,"flow_last_seen":1431969719260,"flow_tot_l4_data_len":341,"flow_min_l4_data_len":20,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p05-keyvalueservice.icloud.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0390{"flow_id":259,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoDIxAAPAGRqkRrGQkwKgBIgG7w9AFbnZxCxkLSlAQiZaW1QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":259,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":146,"pkt":"PBXCt3IO0NQSxnP1CABFAACEDI5AAPAGRksRrGQkwKgBIgG7w9AFbnZxCxkLSlAYiZasDAAAFgMDAFECAABNAwNVWh+3tveMD2elbOWAHrVVg31Lnt0c0FKnZZJQCRlxxCC9J9K2RjJjHnC8CFVB8Gg9pkEtkLMETmSD4xz1bWuZVAAEAAAF\/wEAAQAUAwMAAQE=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":259,"flow_packet_id":6,"flow_first_seen":1431969719110,"flow_last_seen":1431969719411,"flow_tot_l4_data_len":473,"flow_min_l4_data_len":20,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.AppleiCloud","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p05-keyvalueservice.icloud.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0435{"flow_id":259,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":91,"pkt":"PBXCt3IO0NQSxnP1CABFAABNDJBAAPAGRoARrGQkwKgBIgG7w9AFbnbNCxkLSlAYiZY9MAAAFgMDACCErnELMC4NLURXH1XOmma\/eoxmsTpmClh52QJbqp0ANg==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":259,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo51ZAAEAGG9\/AqAEiEaxkJMPQAbsLGQtKBW52zVAQ\/\/8gEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":259,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoh2pAAEAGe8vAqAEiEaxkJMPQAbsLGQtKBW528lAQ\/\/8f6wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":259,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuFYpAAEAG7aXAqAEiEaxkJMPQAbsLGQtKBW528lAY\/\/8H2QAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":259,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNFhBAAEAG7QDAqAEiEaxkJMPQAbsLGQtQBW528lAY\/\/9ywgAAFgMDACAFGHg36o8q6\/6d45SMkkKJbYADHXopC+bXMrIdt+x2cA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0852{"flow_id":256,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+1237{"flow_id":259,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":680,"pkt":"0NQSxnP1PBXCt3IOCABFAAKa0qtAAEAGLhjAqAEiEaxkJMPQAbsLGQt1BW528lAY\/\/9PxwAAFwMDAm1NLIIPknygdXL+hU\/YxuuVqDKZQDzZzjZDaV2x5l2HLLTcO+Q+utwDKCW+92dZb+8EqLtNR0LMgTIAxx7tD7FZEoicoPqOCTNhNcynKm1bOgr+aphQL0+hcWGv0IQy42ZehrECOIZWrQrFNlOa+OgbP8a1dlFCpvvJAYTS4TfKF2ep1KSAR0OAsy+ciwxAwpyvyTCGYHc9SdOJO7qSt8wj2MKfVWx8TGLgDKyTBv1mV8+7x1eZ7RuU4P2B\/cFilLpx5nfQ43NqBk1CsY8AZ\/oosAmNSIXvb8U7MtJM2BjHQRAlnW53sFT5rVLlL6U3Z1tow+osZ0l4VpcmC\/vWvKQ8zUMywtm2Fa7\/TWKbjAf3Yxe0R5VVc8RXH+uNw1wIXUMi6Z5Ajdr2bqWPGQ1Nj1zGUCUzARNF4lgRzqax44KF4gHNweNYwL4WpfDypF3\/S2EBqu9UZWkbk6PzyeKWxIzsnst0tLU2wqSa9XZNtg2zaZ9VmwQ2\/b9g7jqRhI\/XeWji4bKpds\/ijR5ONA2n2DOY1w4pqkh0W1pyEkkaySPMn+L1i+BcVzhgdjz3S8WCGUFWUFssoVZZQYvCzSRWAWpNTs5jUJ7xJTpaeCVAHytw+8tquxAVx\/l9nh055zF4djtSoh3vHk7CW1ZxmqcYZGyM4MUadRMiDfw4Rzkxn7F3O1HcYJTUYrcuQamBhCmrD5u7tiHNkkagT64SdU93ic70\/AJnTOo8uWJ+AlYGTawIXDs7GR+0Rgtx6O1AzJrVQGqUlxzFx84zwkbRF+yj7vxjbJn\/CDIo6Y5p7hi\/pQOGhzvnW3m16X2\/tdnMcuw=","pkt_caplen":680,"pkt_type":2048,"pkt_ipoffset":14}
+1151{"flow_id":259,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":620,"pkt":"0NQSxnP1PBXCt3IOCABFAAJeoHhAAEAGYIfAqAEiEaxkJMPQAbsLGQ3nBW528lAY\/\/9lEAAAFwMDAjHGJHTnGOw+5vSCgkXy+FVBIsUyDZ9x1q6+aVNyR1MY7Uzm0Gr99Ni3SMbdLHMWQ0isLTbqBoNkjqTHSuOKQ9pdAPi\/U63Kl7zsCu4ZfljoeJuyeioSgzlPstnJ5VXlGsdI6r3tRpVCINzey6GM+5eG2K4Xw9ZxGNFs+0ddT5TfWQlvoGRlickUOsahUcyMLNaRK+bM8ChtyG1jgy\/T1V41qGCRRwuzZg\/c2M749VnS5GEVukm6FGhXWyHPLYnkODeNAzn0s+j+FyF+lJKi7CDgOjCv+C5xtkvnfIqxP5oU\/UouprgdU\/uesXiZZDon10geu6QZoJOf3r+X6eceMNMR44mGrIJYaQcUNjI1Tl8GMPw8VwkOFVLRxGKdHXyy\/rgMS2YqAgtbn34qloT9pfLlzMTz648JAaUVx146fB6ZEqHYGAgxO8wBCY1qKoPeBfVbJtoRKqaQBHGxhATrOdSsF27a0pTlb1OySOuWBchGrQTXt5kWoQ7roJD+lrv8kipTLAmXf1AjSG8LygRU+aa\/OSW0cDaOJ\/kbbjziMsYao+8gBv2s1BZ0OfHYXxcG6kzL3UYBaB+UIKB6e1vPO4XgkKk4em1N7zBjoCO1KKRp55Si2YFbfpjspQjTPdFZ15jpZc6A5ijLWIDFdcjBIu92N8mXb1ovt4CcARwj9Ova7jvmHnZIksW4B6aUJKLDd6l891+7m1IAOs3sZpHVMVdIb8p2XxyDnraoRteHJBemVvg=","pkt_caplen":620,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":252,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA848NAAEAGFqfAqAEiUA4uecPLET9q+leLFCuFJYAZECk2pAAAAQEICj4jtskAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":257,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCoTZAAHQGJS5QDi55wKgBIhE\/w88Zt5fkww7JFIAY\/6KT+gAAAQEICgADVaw+I7Mjyxflx\/whJktaKXqMoPE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":257,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nWJAAEAGXRDAqAEiUA4uecPPET\/DDskUGbeX8oAQECjIwwAAAQEICj4jttEAA1Ws","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":257,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4m21AAEAGXwHAqAEiUA4uecPPET\/DDskUGbeX8oAYEChZZQAAAQEICj4jttEAA1WsJ6JHsA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":215,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4kUZAAEAGXqXAqAEinTfrksOrAbuMrH6YAEk0NoAZECx+lgAAAQEICj4jtuJMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":260,"flow_packet_id":1,"flow_first_seen":1431969719561,"flow_last_seen":1431969719561,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50129,"dst_port":12350,"l4_proto":"tcp"}
+0416{"flow_id":260,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAR+5AAEAG+sPAqAEiW77afcPRMD4OYtZAAAAAALAC\/\/9xPAAAAgQFtAEDAwUBAQgKPiO25AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":259,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoDJFAAPAGRqQRrGQkwKgBIgG7w9AFbnbyCxkLUFAQiZCWVAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":259,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoDJJAAPAGRqMRrGQkwKgBIgG7w9AFbnbyCxkLdVAQiWuWVAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":217,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":91,"pkt":"0NQSxnP1PBXCt3IOCABFAABNChNAAEAGTvvAqAEinTeCm8OuAbux\/OMgeZuFrYAZECxQGwAAAQEICj4jtxNOs6LAbiJ8sZfDJaByCG++TyeH7mntaEp3F4nXwA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":260,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Hj5AAPQGcH9bvtp9wKgBIjA+w9E3PWT9DmLWQYASH\/7iJQAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":260,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo4VtAAEAGYW7AqAEiW77afcPRMD4OYtZBNz1k\/lAQIAAi3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":260,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtjSBAAEAGtaTAqAEiW77afcPRMD4OYtZBNz1k\/lAYIAALzwAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":222,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQ8hpAAEAGzLfAqAEib91KLsO0AbvHHCI2d3qYAIAZECySOAAAAQEICj4jtzVNhWcM7XBpLOel2RuchIud8UB4C3rjlSPUGdRd5JmqTw==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":257,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABaoThAAHQGJRRQDi55wKgBIhE\/w88Zt5fyww7JGIAY\/57mkwAAAQEICgADVa0+I7bRUp0POKkm42QBSdv0WyKYGivO3eZ\/1al4H598EV3vyMoZcRqqCiE=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":260,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAomCRAADcGs6Vbvtp9wKgBIjA+w9E3PWT+DmLWRlAQA6A\/OgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":217,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":127,"pkt":"PBXCt3IO0NQSxnP1CABFAABxJ3RAADcGOnadN4KbwKgBIgG7w655m4X8sfzjOoAZAB3AyAAAAQEICk6ztJ8+I7cTtMq4mBkrjVXBV5aFFFXAAfJxhORt9TWKqszQ\/OI4GMdUcEUNAqHo3wA18F4QhcPAJGFGjqN76LjgvTO\/Wg==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":217,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoBnVAAEAGUr7AqAEinTeCm8OuAbux\/OM6AAAAAFAEAABzogAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":243,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/LlAAEAGLH\/AqAEiR+4Hy8PBSU++p140nwx1rIAZECgMIAAAAQEICj4juA0DHKOA72ydd\/Dm76E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":222,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":97,"pkt":"PBXCt3IO0NQSxnP1CABFAABT\/xFAADYGyb1v3UouwKgBIgG7w7R3ephPxxwiU4AZAB3J7QAAAQEICk2Fc9A+I7c1HCwg9By\/HP1k64f+I284aRe91cTAsm500vqvV4XB1w==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":222,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969719,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo89JAAEAGyyfAqAEib91KLsO0AbvHHCJTAAAAAFAEAACFKwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":244,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aylAAEAGTPPAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECq3OQAAAQEICj4juKAAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":251,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8tnZAAEAGXT3AqAEiUYUTucPKrY8W93Zm19BG5IAZECkulwAAAQEICj4jua8CsDJIZdJpfu5kCPY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":245,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8DbFAAEAG8gPAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECmSNQAAAQEICj4jujsAGgO9IXsnOyU+9vo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_id":256,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":1431969720556,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52742,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":261,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKnloAAEARWNXAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":1431969720556,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52742,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst5.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":1431969720556,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":56387,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":262,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK65gAAEARC5fAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1431969720556,"flow_last_seen":1431969720556,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":56387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst5.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0413{"flow_id":246,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969720,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Ya5AAEAGeGPAqAEiUVNNjcPEROe9aVaB2bol\/oAZEClPQwAAAQEICj4ju9oAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":241,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAthDRAADYGyohbvth9wKgBIgG7w79kPKOrTtpNelAYA6A0ZwAAFwMBAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":241,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoq1JAAEAGmXfAqAEiW77YfcO\/AbtO2k16ZDyjsFAQH\/8wEwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":241,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtvQlAAEAGh7vAqAEiW77YfcO\/AbtO2k16ZDyjsFAYIAAZAgAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":255,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAotU1AAEAGjXzAqAEiW77afcPNMD7mkcy22UP+lVARIAAYnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":260,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAou1xAAEAGh23AqAEiW77afcPRMD4OYtZGNz1k\/lARIAAi2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":241,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAohDVAADYGyoxbvth9wKgBIgG7w79kPKOwTtpNf1AQA6BMbQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0832{"flow_id":241,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":381,"pkt":"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","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":241,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAohDZAADYGyotbvth9wKgBIgG7w79kPKOwTtpOxlAQA+BK5gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":255,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAohClAADcGx6Bbvtp9wKgBIjA+w83ZQ\/6V5pHMt1AQA6A0\/wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":255,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo2BJAAEAGarfAqAEiW77afcPNMD7mkcy32UP+lVAQIAAYnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":260,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAomCVAADcGs6Rbvtp9wKgBIjA+w9E3PWT+DmLWR1AQA6A\/OQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":260,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAotFxAAEAGjm3AqAEiW77afcPRMD4OYtZHNz1k\/lAQIAAi2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":242,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86i5AAEAGoRXAqAEiTKehBsPATzJsmy887NUaAIAZECgfjwAAAQEICj4jvfi+oN9kxXgAHFm0KHI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":252,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8X0xAAEAGmx7AqAEiUA4uecPLET9q+leLFCuFJYAZECkvAwAAAQEICj4jvmoAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":261,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKt0gAAEARP+fAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":262,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKslEAAEARRN7AqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":1431969721954,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52714,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":263,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA0TgAAEARJgHAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":1431969721954,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52714,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":1431969721954,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51802,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":264,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969721,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAl6MAAEARX5bAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1431969721954,"flow_last_seen":1431969721954,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51802,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0853{"flow_id":256,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969722,"pkt_len":398,"pkt":"0NQSxnP1PBXCt3IOCABFAAGARphAAEAG\/T\/AqAEiW77YF8POMD6CImX9rdWNC4AYECjvDgAAAQEICj4jwiYNJSaium5jNp\/t6MnvYv17vInE+u60ockfR5mfGTOro0QN8LMKnmAyvODPlTeyrnkoAUpKceu5uu4NlVO\/v7ctJqTBVS8o0R1CSL+EPA5s6N3+\/xSicLOSk8FOw0ZK8JvNsCjaQnMlPLIfYEsiQsmAyX1mhdmutUXuX1FlLSieJ868LDp8KWnZBPAIIPoWEV34j0UNNhg8OjdvwRinNdOManql86rY\/V2GVf6ms8Z9fpiOdcl2TxrxP9aSeZz3HmVMIj+c1\/jv3lQrBoXgfkzaS2fI27xuPVW4vOSfOCqdpBx40nBoPLwgs99WAHdL8kRdgfaFID96DQLsQ1X2UmAKMsqHqhcdQYFDK9h1czYRqgSNf6OjxZjjG\/RON6LXVdAjMLtOT1G4VUncOMp43DgkS1qIRYNmPbrc8XzQI4wvtYSHiTNizbbA6Gpepi0kbFY=","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":261,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969722,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK1+UAAEARH0rAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":262,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969722,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK050AAEARI5LAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1431969722958,"flow_last_seen":1431969722958,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50130,"dst_port":13392,"l4_proto":"tcp"}
+0416{"flow_id":265,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969722,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMbpAAEAGam7AqAEi1KEIJMPSNFCRDXDAAAAAALAC\/\/+cTwAAAgQFtAEDAwUBAQgKPiPECQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":263,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAmT0AAEARXfzAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":264,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAj1YAAEARZ+PAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":265,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQw9LBK81pkQ1wwaASOJBYJAAAAgQFrAQCCAo\/mk5jPiPECQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":265,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04iJAAEAGuhHAqAEi1KEIJMPSNFCRDXDBwSvNaoAQECyvBQAAAQEICj4jxFI\/mk5j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":265,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":152,"pkt":"0NQSxnP1PBXCt3IOCABFAACKTB5AAEAGT8DAqAEi1KEIJMPSNFCRDXDBwSvNaoAYECzFcwAAAQEICj4jxFI\/mk5jXPurvZMrHIdlgMlexHi7wCv7AA8FTqH3w+gb0BQ2P6KXfb0wivszuTShDu1I3SbXRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEts=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":265,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0gx9AADQGJRXUoQgkwKgBIjRQw9LBK81qkQ1xF4AQAB2+rAAAAQEICj+aTnU+I8RS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":265,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":166,"pkt":"PBXCt3IO0NQSxnP1CABFAACYgyBAADQGJLDUoQgkwKgBIjRQw9LBK81qkQ1xF4AYAB27BQAAAQEICj+aTnY+I8RSpoGucEyyRdjTKtoYRO7AJ76r9rOEjsyPSI822XDd6DPWQ7lLpeeo8kDbK9Lb6aq\/oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoQ==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":265,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qNJAAEAG82HAqAEi1KEIJMPSNFCRDXEXwSvNzoAQECit8wAAAQEICj4jxJs\/mk52","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":265,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hIRAAEAGF6jAqAEi1KEIJMPSNFCRDXEXwSvNzoAYECheNQAAAQEICj4jxJw\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":255,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":166,"pkt":"PBXCt3IO0NQSxnP1CABFAACYhCpAADcGxy9bvtp9wKgBIjA+w83ZQ\/6V5pHMt1AYA6Di6wAA9JBf+ogmKiXcu4z5F+778sCrUAWGaaxD4hdBEupzSDQylY\/rXnH0vrRIWDMGFCMzxv+kxTJ78KFet\/w9SrPImfZvVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHGI06P0CdBu4g==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":255,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo9yhAAEAGS6HAqAEiW77afcPNMD7mkcy3AAAAAFAEAAAQhQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":265,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/2tAAEAGnMDAqAEi1KEIJMPSNFCRDXEXwSvNzoAYEChctwAAAQEICj4jxho\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6hMgAAEARcnfAqAEiwKgBAcLvADUAJlJY1+QBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":210,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8WBtAADcGbGtv3U2OwKgBIpxXw6bHcDilFXPfSIAYAB076wAAAQEICk2MeyA+I1wikBQjBAcCSZI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":221,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/JJAAEAGJLXAqAEiQAQXpsOznFablHVW59gF64AZECr5vQAAAQEICj4jxnpMP03dvRFcC9M5aYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":223,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDueNAADYGP9+dN+uwwKgBIgG7w7Xvxq\/qBnJxGIAYAB2IUwAAAQEICkXqJwA+I4QTFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":223,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAox8dAAEAGKFbAqAEinTfrsMO1AbsGcnEYAAAAAFAEAAAoMwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":220,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KCRAAEAGMIfAqAEiQTffD8OynFri9dCOh7IvWoAZECnb5gAAAQEICj4jxp0uudJYB9ShBDhY9ug=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":251,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/S1AAEAGFobAqAEiUYUTucPKrY8W93Zm19BG5IAZECkhHwAAAQEICj4jxycCsDJIZdJpfu5kCPY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":221,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7SH5AADYG4opABBemwKgBIpxWw7Pn2AXzm5R1X4AZAB3c4wAAAQEICkw\/Xx4+I8Z64vChZIGSYGPd3gWvHAF1FFvTvMFyE+EKC4hLmmkTcTXcSZeXLUvbX\/aasqLFgOputlv\/VSyHYLoj1pO44uMuYdtsNL3meSE=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":233,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuQpkAAEARjprAqAEisBo3pzLd+R0AGtW0noACYJ7Q\/f1BEkFMtKs2xKkA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":234,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAujeYAAEARD0nAqAEiTLnPDDLdsbUAGk80noICQMd2CkIbTJvr2m+0rjWR","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":1431969723979,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63421,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":266,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLQV0AAEARtdHAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":1431969723979,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63421,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":267,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":1431969723979,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65037,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":267,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969723,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLuaAAAEARPY7AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":267,"flow_packet_id":1,"flow_first_seen":1431969723979,"flow_last_seen":1431969723979,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65037,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0412{"flow_id":265,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FntAAEAGhbHAqAEi1KEIJMPSNFCRDXEXwSvNzoAYEChagwAAAQEICj4jyE4\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":263,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAyr4AAEARLHvAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":264,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAk9AAAEARY2nAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":243,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84\/pAAEAGRT7AqAEiR+4Hy8PBSU++p140nwx1rIAZECj6jwAAAQEICj4jyZ0DHKOA72ydd\/Dm76E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":246,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WStAAEAGgObAqAEiUVNNjcPEROe9aVaB2bol\/oAZEClBOgAAAQEICj4jyeMAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":268,"flow_packet_id":1,"flow_first_seen":1431969724570,"flow_last_seen":1431969724570,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50131,"dst_port":13392,"l4_proto":"tcp"}
+0417{"flow_id":268,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJs1AAEAGdVvAqAEi1KEIJMPTNFCYsmkqAAAAALAC\/\/+V\/gAAAgQFtAEDAwUBAQgKPiPKSgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":268,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQw9NEN1OLmLJpK6ASOJD4ewAAAgQFrAQCCAo\/mJ6PPiPKSgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":268,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kBRAAEAGDCDAqAEi1KEIJMPTNFCYsmkrRDdTjIAQECxPXAAAAQEICj4jypQ\/mJ6P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":268,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5D6VAAEAGjIrAqAEi1KEIJMPTNFCYsmkrRDdTjIAYECw4TAAAAQEICj4jypQ\/mJ6PFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":268,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zS1AADQG2wbUoQgkwKgBIjRQw9NEN1OMmLJpMIAQAB1fVAAAAQEICj+YnqE+I8qU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":268,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5zS5AADQG2wDUoQgkwKgBIjRQw9NEN1OMmLJpMIAYAB1HRAAAAQEICj+YnqE+I8qUFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":268,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YJBAAEAGO6TAqAEi1KEIJMPTNFCYsmkwRDdTkYAQECtO+QAAAQEICj4jytw\/mJ6h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":268,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5ghZAAEAGGhnAqAEi1KEIJMPTNFCYsmkwRDdTkYAYECs36QAAAQEICj4jytw\/mJ6hFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":265,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EZFAAEAGiqPAqAEi1KEIJMPSNFCRDXEfwSvNzoARECinqQAAAQEICj4jytw\/mk52","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":268,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":268,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4nTtAAEAG\/vTAqAEi1KEIJMPTNFCYsm7VRDdTkYAYECvwEAAAAQEICj4jyt0\/mJ6hCV9P1w==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":268,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5zS9AADQG2v\/UoQgkwKgBIjRQw9NEN1ORmLJpNYAYAB1G3wAAAQEICj+YnrQ+I8rcFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+1900{"flow_id":268,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":1173,"pkt":"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","pkt_caplen":1173,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":268,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zTBAADQG2wPUoQgkwKgBIjRQw9NEN1OWmLJu2YAQACJZPQAAAQEICj+Ynrc+I8rd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":268,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":237,"pkt":"PBXCt3IO0NQSxnP1CABFAADfzTFAADQG2lfUoQgkwKgBIjRQw9NEN1OWmLJu2YAZACIDkgAAAQEICj+Ynro+I8rdFwMBAA7tSO8uO\/5OgpbqjQShgxcDAQAOt5kiQnuUGhzQCeV\/wtMXAwEADoEguOcZnO7injDqdGS3FwMBAA6RolA+RCBqLzyTjOUDiBcDAQAO6fxLmoVeM1AIaf+3MGEXAwEADm\/ew9i5FF643WM3gtRWFwMBAA7gVfi2SlZkxokEaprnxBcDAQAOqqPB5t8z9BjdoeL0EokXAwEADiMEleX6l+fX3q8yfuXQ","pkt_caplen":237,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":268,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W1FAAEAGQOPAqAEi1KEIJMPTNFCYsnMsRDdUQoAQECZD1QAAAQEICj4jyz8\/mJ66","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":244,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8C8FAAEAGrFvAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECqj8QAAAQEICj4jy+gAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":265,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969724,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8c+5AAEAGKD7AqAEi1KEIJMPSNFCRDXEXwSvNzoAZEChW4gAAAQEICj4jy+4\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":266,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLrvwAAEARSDLAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":267,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLUrMAAEARpHvAqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_id":256,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":252,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sAtAAEAGSl\/AqAEiUA4uecPLET9q+leLFCuFJYAZECkgiwAAAQEICj4jzOIAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":262,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKA0wAAEAR8+PAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":261,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKPxoAAEARuBXAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":269,"flow_packet_id":1,"flow_first_seen":1431969725833,"flow_last_seen":1431969725833,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50132,"dst_port":13392,"l4_proto":"tcp"}
+0416{"flow_id":269,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABANR9AAEAGjrLAqAEilQ0gD8PUNFDIS2mSAAAAALAC\/\/+IvwAAAgQFtAEDAwUBAQgKPiPPMAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":269,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQw9RkpUGCyEtpk6ASOJCS6wAAAgQFrAQCCAo\/guiRPiPPMAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":269,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0FRFAAEAGrszAqAEilQ0gD8PUNFDIS2mTZKVBg4AQECzp4QAAAQEICj4jz2Q\/guiR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":269,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":162,"pkt":"0NQSxnP1PBXCt3IOCABFAACUOHFAAEAGiwzAqAEilQ0gD8PUNFDIS2mTZKVBg4AYECzEtAAAAQEICj4jz2Q\/guiRWtROXfYPUI7KCS4OBV+KsMi\/AVHGu979e3TXhiBtlKMC10kPdjOE2J0Lo81PuEIAiSbfBKWSW1CBvpdcHaqTKHlWT7SVwssAce4HDA3aA9hphr9khfI7sGEed7z9CnOI","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":245,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yP5AAEAGNrbAqAEiVh8jHsPD6OVaW8L1OrkzbYAZECl83QAAAQEICj4jz5MAGgO9IXsnOyU+9vo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":269,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qR1AADUGJbiVDSAPwKgBIjRQw9RkpUGDyEtp84AQAB35gwAAAQEICj+C6J4+I89k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":269,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":122,"pkt":"PBXCt3IO0NQSxnP1CABFCABsqR5AADUGJX+VDSAPwKgBIjRQw9RkpUGDyEtp84AYAB3frwAAAQEICj+C6J4+I89kH1kAu3Ru0FGLKQyhvQ8Un13PjCiD2\/ZXBbSUyS3Vs+2233EDr6L\/6NMLQD6SwN7\/Jt8EpZJbUIE=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":269,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VKFAAEAGbzzAqAEilQ0gD8PUNFDIS2nzZKVBu4AQECrpCgAAAQEICj4jz5g\/guie","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":269,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969725,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8SxtAAEAGeLrAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq9UQAAAQEICj4jz5k\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":245,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0OeRAAHEGlNhWHyMewKgBIujlw8M6uTN1WlvC\/oAQAQLseQAAAQEICgAaCDc+I8+T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":245,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0xztAAEAGOIHAqAEiVh8jHsPD6OVaW8L+OrkzbYAQECnhkAAAAQEICj4jz9cAGgO9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":266,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLBEcAAEAR8ufAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":267,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLzWEAAEARKc3AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":269,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZdlAAEAGXfzAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq8BwAAAQEICj4j0OM\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":265,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Q0NAAEAGWOnAqAEi1KEIJMPSNFCRDXEXwSvNzoAZEChQaQAAAQEICj4j0mc\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":269,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8THpAAEAGd1vAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq6OwAAAQEICj4j0q8\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":237,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":207,"pkt":"PBXCt3IOxCwDBkn+CABFAADBW0kAAP8RvOLAqAFc4AAA+xTpFOkArTVOAAAAAAAEAAMAAAAAC19hZnBvdmVydGNwBF90Y3AFbG9jYWwAAAwAAQRfcmZiwBgADAABBF9zbWLAGAAMAAEGX2FkaXNrwBgADAABwAwADAABAAAPrwAWE0x1Y2HigJlzIE1hY0Jvb2tQcm\/ADMAMAAwAAQAADAEAEA1MdWNh4oCZcyBpTWFjwAzAMwAMAAEAAAwBABANTHVjYeKAmXMgaU1hY8Az","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":238,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":227,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAK0R\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QCtx54AAAAAAAQAAwAAAAALX2FmcG92ZXJ0Y3AEX3RjcAVsb2NhbAAADAABBF9yZmLAGAAMAAEEX3NtYsAYAAwAAQZfYWRpc2vAGAAMAAHADAAMAAEAAA+vABYTTHVjYeKAmXMgTWFjQm9va1Byb8AMwAwADAABAAAMAQAQDUx1Y2HigJlzIGlNYWPADMAzAAwAAQAADAEAEA1MdWNh4oCZcyBpTWFjwDM=","pkt_caplen":227,"pkt_type":34525,"pkt_ipoffset":14}
+0391{"flow_id":241,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAthDdAADYGyoVbvth9wKgBIgG7w79kPKOwTtpOxlAYA+Ay1gAAFwMBAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":241,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAox49AAEAGfTrAqAEiW77YfcO\/AbtO2k7GZDyjtVAQH\/8uwgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":241,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":75,"pkt":"PBXCt3IO0NQSxnP1CABFCAA9hDhAADYGynRbvth9wKgBIgG7w79kPKO1TtpOxlAYA+DkbQAAFwMBABAceoArauy9KE5uB3WSnKYD","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":241,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969726,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoC0lAAEAGOYHAqAEiW77YfcO\/AbtO2k7GZDyjylAQH\/8urQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":263,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA778AAEARB3rAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":264,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJ6IAAEARz5fAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":242,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LQRAAEAGXkDAqAEiTKehBsPATzJsmy887NUaAIAZECgInwAAAQEICj4j1Oi+oN9kxXgAHFm0KHI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":270,"flow_packet_id":1,"flow_first_seen":1431969727446,"flow_last_seen":1431969727446,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50133,"dst_port":13392,"l4_proto":"tcp"}
+0417{"flow_id":270,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAw6JAAEAGAC\/AqAEilQ0gD8PVNFDxI3WvAAAAALAC\/\/9NiQAAAgQFtAEDAwUBAQgKPiPVcAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":269,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA894xAAEAGzEjAqAEilQ0gD8PUNFDIS2nzZKVBu4AYECq3awAAAQEICj4j1X8\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":270,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQw9XOgDWr8SN1sKASOJC1wgAAAgQFrAQCCAo\/fSyFPiPVcAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":270,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0a9FAAEAGWAzAqAEilQ0gD8PVNFDxI3WwzoA1rIAQECwMugAAAQEICj4j1aM\/fSyF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":270,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA59WxAAEAGzmvAqAEilQ0gD8PVNFDxI3WwzoA1rIAYECz1qQAAAQEICj4j1aM\/fSyFFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":270,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0GT5AADUGtZeVDSAPwKgBIjRQw9XOgDWs8SN1tYAQAB0ctwAAAQEICj99LJI+I9Wj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":270,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5GT9AADUGtZGVDSAPwKgBIjRQw9XOgDWs8SN1tYAYAB0EpwAAAQEICj99LJI+I9WjFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":270,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cqtAAEAGUTLAqAEilQ0gD8PVNFDxI3W1zoA1sYAQECsMcAAAAQEICj4j1dc\/fSyS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":270,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5mvJAAEAGKObAqAEilQ0gD8PVNFDxI3W1zoA1sYAYECv1XwAAAQEICj4j1dc\/fSySFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":269,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vwxAAEAGBNHAqAEilQ0gD8PUNFDIS2n7ZKVBu4ARECriwgAAAQEICj4j1dc\/guie","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":242,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABaxwFAAC4G1iRMp6EGwKgBIk8yw8Ds1RoIbJsvRYAZAOObqQAAAQEICr6hELE+I9TolFlHssZ1bz8dicEMDX5sjU7hKvR8xj41drFya5uq4y\/2FTcvXgk=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":242,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAokJ1AAEAG+rrAqAEiTKehBsPATzJsmy9FAAAAAFAEAABRlQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":270,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5GUBAADUGtZCVDSAPwKgBIjRQw9XOgDWx8SN1uoAYAB0EXAAAAQEICj99LJ8+I9XXFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+2237{"flow_id":270,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":1418,"pkt":"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","pkt_caplen":1418,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":270,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":85,"pkt":"PBXCt3IO0NQSxnP1CABFCABHGUFAADUGtYGVDSAPwKgBIjRQw9XOgDW28SN7AoAYACI6qwAAAQEICj99LLA+I9YKFwMBAA7nRkv+WYyYSAatbJ10UQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":270,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cWBAAEAGUn3AqAEilQ0gD8PVNFDxI3sCzoA1yYAQECsGeQAAAQEICj4j1ks\/fSyw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":270,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":199,"pkt":"PBXCt3IO0NQSxnP1CABFCAC5GUJAADUGtQ6VDSAPwKgBIjRQw9XOgDXJ8SN7AoAZACJSwwAAAQEICj99LLQ+I9YKFwMBAA5YIsVlcbDCIEeU75q\/iRcDAQAOuMr+oH2xG5bvjaWg\/o4XAwEADu+FAJEpdImsS9E6llu4FwMBAA7DdkZ7LJ1K8QJPp1sNERcDAQAOvWw7zYt2Knvyv4gTP0cXAwEADvskhvCQQoUSwpm+CU06FwMBAA5rrDLSFK4BrlG4PQN\/WQ==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":270,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JoxAAEAGnVHAqAEilQ0gD8PVNFDxI3sCzoA2T4AQECYF5QAAAQEICj4j1lo\/fSy0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":270,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WQpAAEAGatPAqAEilQ0gD8PVNFDxI3sCzoA2T4ARECYF5AAAAQEICj4j1lo\/fSy0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":260,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAtmCZAADcGs55bvtp9wKgBIjA+w9E3PWT+DmLWR1AYA6AnKQAAFwMBAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":260,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969727,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAog9ZAAEAGvvPAqAEiW77afcPRMD4OYtZHAAAAAFAEAADfIAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":215,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4yJVAAEAGJ1bAqAEinTfrksOrAbuMrH6YAEk0NoAZECxcjgAAAQEICj4j2OpMXR6aqu6O72aW6xh35z3AV+yJQQlzV\/czZ3tOI38nltt4UVqSgJEIfqzGP6jAcvysYI+CHXjgzzv6OFuoeDW4oVrEywZ4EAM=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":120,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIsLcAAEARRULAqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":269,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u3lAAEAGCFzAqAEilQ0gD8PUNFDIS2nzZKVBu4AZECqykgAAAQEICj4j2lc\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":262,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKohwAAEARVRPAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":261,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKmkkAAEARXObAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":271,"flow_packet_id":1,"flow_first_seen":1431969728749,"flow_last_seen":1431969728749,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"239.255.255.250","src_port":50084,"dst_port":1900,"l4_proto":"udp"}
+1041{"flow_id":271,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":271,"flow_packet_id":1,"flow_first_seen":1431969728749,"flow_last_seen":1431969728749,"flow_tot_l4_data_len":507,"flow_min_l4_data_len":507,"flow_max_l4_data_len":507,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"239.255.255.250","src_port":50084,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+1037{"flow_id":271,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":539,"pkt":"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","pkt_caplen":539,"pkt_type":2048,"pkt_ipoffset":14}
+0954{"flow_id":271,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":475,"pkt":"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","pkt_caplen":475,"pkt_type":2048,"pkt_ipoffset":14}
+0965{"flow_id":271,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":484,"pkt":"AQBef\/\/6xCwDBkn+CABFAAHWqWoAAAERXK7AqAFc7\/\/\/+sOkB2wBwvRETk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnV1aWQ6MmNiYzc4NWUtMjVmNC00MGNhLTk4YjUtMGQ1ODA0YWRhYThlDQpOVFM6c3NkcDphbGl2ZQ0KTG9jYXRpb246aHR0cDovLzEwLjIxMS41NS4zOjI4NjkvdXBucGhvc3QvdWRoaXNhcGkuZGxsP2NvbnRlbnQ9dXVpZDoyY2JjNzg1ZS0yNWY0LTQwY2EtOThiNS0wZDU4MDRhZGFhOGUNClVTTjp1dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZQ0KQ2FjaGUtQ29udHJvbDptYXgtYWdlPTkwMA0KU2VydmVyOk1pY3Jvc29mdC1XaW5kb3dzLU5ULzUuMSBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOmQ0NmQ1MDA5ZTE0NzFiYTY4MDBlNDNlN2YwZTEyZWU0DQoNCg==","pkt_caplen":484,"pkt_type":2048,"pkt_ipoffset":14}
+1058{"flow_id":271,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":555,"pkt":"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","pkt_caplen":555,"pkt_type":2048,"pkt_ipoffset":14}
+1021{"flow_id":271,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":233,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuT74AAEARgXXAqAEisBo3pzLd+R0AGlkpnpMCdsJKc1x7UbKz9GM2ZaGK","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":234,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969728,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAunZEAAEAR\/53AqAEiTLnPDDLdsbUAGjjJnpUCQdC3iFj2LQA5DiTAYUX6","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":266,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969729,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLmscAAEARXGfAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":267,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969729,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLGzgAAEAR2\/bAqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":265,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969729,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84pdAAEAGuZTAqAEi1KEIJMPSNFCRDXEXwSvNzoAZEChEQAAAAQEICj4j3pA\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":263,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969730,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAyoMAAEARLLbAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":264,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969730,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgmcAAEARdNLAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_id":256,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969730,"pkt_len":398,"pkt":"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","pkt_caplen":398,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":252,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969730,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mg9AAEAGYFvAqAEiUA4uecPLET9q+leLFCuFJYAZECkMggAAAQEICj4j4OsAA1WWI9QHv+GwZuI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":252,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969730,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0oUFAAHQGJTFQDi55wKgBIhE\/w8sUK4UtavpXlIAQ\/5iQtgAAAQEICgADVhg+I+Dr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":18,"flow_packet_id":15,"flow_first_seen":1431969643944,"flow_last_seen":1431969668477,"flow_tot_l4_data_len":801,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50030,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":18,"flow_packet_id":15,"flow_first_seen":1431969643944,"flow_last_seen":1431969668477,"flow_tot_l4_data_len":801,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50030,"dst_port":443,"l4_proto":"tcp"}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":8,"flow_packet_id":17,"flow_first_seen":1431969642336,"flow_last_seen":1431969661480,"flow_tot_l4_data_len":792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50026,"dst_port":40002,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":8,"flow_packet_id":17,"flow_first_seen":1431969642336,"flow_last_seen":1431969661480,"flow_tot_l4_data_len":792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":50026,"dst_port":40002,"l4_proto":"tcp"}
+0413{"flow_id":269,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969730,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KLZAAEAGmx\/AqAEilQ0gD8PUNFDIS2nzZKVBu4AZECqpqgAAAQEICj4j4z8\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":246,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8EFJAAEAGyb\/AqAEiUVNNjcPEROe9aVaB2bol\/oAZECkl8gAAAQEICj4j5SsAupldFs\/7EKwgSC8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1021{"flow_id":271,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0965{"flow_id":271,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":484,"pkt":"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","pkt_caplen":484,"pkt_type":2048,"pkt_ipoffset":14}
+0953{"flow_id":271,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":475,"pkt":"AQBef\/\/6xCwDBkn+CABFAAHNh8QAAAERfl3AqAFc7\/\/\/+sOkB2wBuX63Tk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVwbnA6cm9vdGRldmljZQ0KTlRTOnNzZHA6YWxpdmUNCkxvY2F0aW9uOmh0dHA6Ly8xMC4yMTEuNTUuMzoyODY5L3VwbnBob3N0L3VkaGlzYXBpLmRsbD9jb250ZW50PXV1aWQ6MmNiYzc4NWUtMjVmNC00MGNhLTk4YjUtMGQ1ODA0YWRhYThlDQpVU046dXVpZDoyY2JjNzg1ZS0yNWY0LTQwY2EtOThiNS0wZDU4MDRhZGFhOGU6OnVwbnA6cm9vdGRldmljZQ0KQ2FjaGUtQ29udHJvbDptYXgtYWdlPTkwMA0KU2VydmVyOk1pY3Jvc29mdC1XaW5kb3dzLU5ULzUuMSBVUG5QLzEuMCBVUG5QLURldmljZS1Ib3N0LzEuMA0KT1BUOiJodHRwOi8vc2NoZW1hcy51cG5wLm9yZy91cG5wLzEvMC8iOyBucz0wMQ0KMDEtTkxTOmQ0NmQ1MDA5ZTE0NzFiYTY4MDBlNDNlN2YwZTEyZWU0DQoNCg==","pkt_caplen":475,"pkt_type":2048,"pkt_ipoffset":14}
+1038{"flow_id":271,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":539,"pkt":"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","pkt_caplen":539,"pkt_type":2048,"pkt_ipoffset":14}
+1042{"flow_id":271,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+1059{"flow_id":271,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":555,"pkt":"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","pkt_caplen":555,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":244,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8iKhAAEAGL3TAqAEiBfi63cPCeSJZV8vhQ7fcvYAZECqJKAAAAQEICj4j5rEAAG6yvouwwfuK2cY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":244,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969731,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA00YpAAHIGtJkF+LrdwKgBInkiw8JDt9zFWVfL6oAQQ8yZdgAAAQEICgAAb2E+I+ax","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":266,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969732,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLZ5EAAEARj53AqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":267,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969732,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLFH8AAEAR4q\/AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":243,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969733,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8+cVAAHMG\/HJH7gfLwKgBIklPw8GfDHWsvqdeNIAY\/8I+5QAAAQEICgMcpDg+I6Tt0Ou1l+tQ66E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":243,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969733,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoQAxAAEAG6UDAqAEiR+4Hy8PBSU++p140AAAAAFAEAAB0cAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":233,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969733,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAugTYAAEART\/3AqAEisBo3pzLd+R0AGq\/Inp8CBP0iWVVhqNaRhnko6puw","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":234,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969733,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAug4YAAEARGanAqAEiTLnPDDLdsbUAGuKenqEC+8xItnuUYEyJeTWjQjk1","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":265,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969734,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8w1RAAEAG2NfAqAEi1KEIJMPSNFCRDXEXwSvNzoAZECgzmAAAAQEICj4j7zg\/mk5203B1cONeI20=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":269,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969734,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hLpAAEAGPxvAqAEilQ0gD8PUNFDIS2nzZKVBu4AZECqdgQAAAQEICj4j72g\/guieZ8yzMrUUW5Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1059{"flow_id":271,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969734,"pkt_len":555,"pkt":"AQBef\/\/6xCwDBkn+CABFAAIdnLUAAAERaRzAqAFc7\/\/\/+sOkB2wCCWYzTk9USUZZICogSFRUUC8xLjENCkhvc3Q6MjM5LjI1NS4yNTUuMjUwOjE5MDANCk5UOnVybjptaWNyb3NvZnQuY29tOnNlcnZpY2U6WF9NU19NZWRpYVJlY2VpdmVyUmVnaXN0cmFyOjENCk5UUzpzc2RwOmFsaXZlDQpMb2NhdGlvbjpodHRwOi8vMTAuMjExLjU1LjM6Mjg2OS91cG5waG9zdC91ZGhpc2FwaS5kbGw\/Y29udGVudD11dWlkOjJjYmM3ODVlLTI1ZjQtNDBjYS05OGI1LTBkNTgwNGFkYWE4ZQ0KVVNOOnV1aWQ6MmNiYzc4NWUtMjVmNC00MGNhLTk4YjUtMGQ1ODA0YWRhYThlOjp1cm46bWljcm9zb2Z0LmNvbTpzZXJ2aWNlOlhfTVNfTWVkaWFSZWNlaXZlclJlZ2lzdHJhcjoxDQpDYWNoZS1Db250cm9sOm1heC1hZ2U9OTAwDQpTZXJ2ZXI6TWljcm9zb2Z0LVdpbmRvd3MtTlQvNS4xIFVQblAvMS4wIFVQblAtRGV2aWNlLUhvc3QvMS4wDQpPUFQ6Imh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7IG5zPTAxDQowMS1OTFM6ZDQ2ZDUwMDllMTQ3MWJhNjgwMGU0M2U3ZjBlMTJlZTQNCg0K","pkt_caplen":555,"pkt_type":2048,"pkt_ipoffset":14}
+0966{"flow_id":271,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969734,"pkt_len":484,"pkt":"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","pkt_caplen":484,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1431969735255,"flow_last_seen":1431969735255,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"106.188.249.186","src_port":13021,"dst_port":15120,"l4_proto":"udp"}
+0390{"flow_id":272,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969735,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuQGgAAEARFBbAqAEiarz5ujLdOxAAGjrunqMCSv26L3gQtCJn9dl5F8Bv","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1431969735255,"flow_last_seen":1431969735255,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"106.188.249.186","src_port":13021,"dst_port":15120,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0430{"flow_id":262,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969737,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKNw8AAEARwCDAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":261,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969737,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKv88AAEARN2DAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":263,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969739,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA88UAAEARA3TAqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":264,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969739,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAieIAAEARbVfAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":49,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969678270,"flow_tot_l4_data_len":783,"flow_min_l4_data_len":20,"flow_max_l4_data_len":95,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50033,"dst_port":40015,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":49,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969678270,"flow_tot_l4_data_len":783,"flow_min_l4_data_len":20,"flow_max_l4_data_len":95,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50033,"dst_port":40015,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":50,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969676525,"flow_tot_l4_data_len":822,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50034,"dst_port":40033,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":50,"flow_packet_id":17,"flow_first_seen":1431969657367,"flow_last_seen":1431969676525,"flow_tot_l4_data_len":822,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50034,"dst_port":40033,"l4_proto":"tcp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":147,"flow_packet_id":3,"flow_first_seen":1431969675567,"flow_last_seen":1431969675716,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50024,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":147,"flow_packet_id":3,"flow_first_seen":1431969675567,"flow_last_seen":1431969675716,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50024,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":64,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969678254,"flow_tot_l4_data_len":752,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":64,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969678254,"flow_tot_l4_data_len":752,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":50038,"dst_port":443,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":62,"flow_packet_id":14,"flow_first_seen":1431969658978,"flow_last_seen":1431969677390,"flow_tot_l4_data_len":852,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":62,"flow_packet_id":14,"flow_first_seen":1431969658978,"flow_last_seen":1431969677390,"flow_tot_l4_data_len":852,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50036,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":266,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969741,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLh7wAAEARb3LAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":267,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969741,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLtQQAAEARQirAqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969742,"pkt_len":343,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCUtAADQGY8tsoKouwKgBIgG7wSW4YenMqCbVRIAYAE+qkQAAAQEICmF6ztI+I3o6FwMBARDomDRC9tnU\/exAVC59HZPlEBW4rHeYicAzJ9Yo0Ees\/wMPsuDWIc9hCCUxarvHcZ19ZOXniHKoqEwFGFsxlBMnqF983iXzs4Ynpy4FeuPjfx841vRmTU+g6x2y3wWqnDLKBif9hjEV+q0Otvz1I9aTRlaCaRrqii2xzU1UlVzO2uuCVbfcDxrKUz0yrDO6G8lGCa4\/MlcQvm5H+k1a6Ixj7cii3DGdvIn73tTBKLcoiEBpQvuHlTOznFl6\/2MAlPmCpWlUEi815rMJLcNqendQ2Yy0vjL3Hx8fW+k80UUU8OLNEA0T3b9IpL0NiCziwQt9nyF5sZf9\/X6whqFZX+OeA6yRDmcN91vQkWrGQVmUDw==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969742,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UZNAAEAGEJjAqAEibKCqLsElAbuoJtVEuGHq4YAQD\/cskwAAAQEICj4kD5lhes7S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1684{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969742,"pkt_len":1020,"pkt":"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","pkt_caplen":1020,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969742,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CUxAADQGZN9soKouwKgBIgG7wSW4YerhqCbY\/oAQAFM4VwAAAQEICmF6zvY+JA+b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":273,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":56886,"dst_port":1900,"l4_proto":"udp"}
+0553{"flow_id":273,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969745,"pkt_len":175,"pkt":"AQBef\/\/6PBXCt3IOCABFAACh3hQAAAERKXPAqAEi7\/\/\/+t42B2wAjVUWTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":273,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":56886,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0550{"flow_id":273,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969745,"pkt_len":174,"pkt":"AQBef\/\/6PBXCt3IOCABFAACg2\/EAAAERK5fAqAEi7\/\/\/+t42B2wAjLsJTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":274,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":64560,"dst_port":1900,"l4_proto":"udp"}
+0553{"flow_id":274,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969745,"pkt_len":175,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChjL0AAAEResrAqAEi7\/\/\/+vwwB2wAjTccTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":274,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":64560,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0549{"flow_id":274,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969745,"pkt_len":174,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgyNwAAAERPqzAqAEi7\/\/\/+vwwB2wAjJ0PTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":275,"flow_packet_id":1,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49511,"dst_port":5351,"l4_proto":"udp"}
+0382{"flow_id":275,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969745,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoljUAAEARYRzAqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":230,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969745,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYUAAEAB8QDAqAEBwKgBIgMDgJYAAAAARQAAKJY1AABAEWEcwKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":275,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoS5QAAEARq73AqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":230,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYYAAEAB8P\/AqAEBwKgBIgMDgJYAAAAARQAAKEuUAABAEau9wKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":275,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo\/FMAAEAR+v3AqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":230,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYcAAEAB8P7AqAEBwKgBIgMDgJYAAAAARQAAKPxTAABAEfr9wKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":262,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKUvYAAEARpDnAqAEiwKgBAdxDADUANtEePu0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":261,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKe1gAAEARe9fAqAEiwKgBAc4GADUANhjrBXkBAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDUBcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969746,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969747,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969747,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":275,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969747,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoBdoAAEAR8XfAqAEiwKgBAcFnFOcAFDI4AAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":230,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969747,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABEBYgAAEAB8P3AqAEBwKgBIgMDgJYAAAAARQAAKAXaAABAEfF3wKgBIsCoAQHBZxTnABQyOAABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":263,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969748,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAKKsAAEARzo7AqAEiwKgBAc3qADUALN\/7ZhIBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":264,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969748,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5EEAAEAREvjAqAEiwKgBAcpaADUALFPq9ZgBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":266,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969750,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLga0AAEARdYHAqAEiwKgBAfe9ADUAN4CxqiYBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":267,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969750,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLcFEAAEARht3AqAEiwKgBAf4NADUANx167A0BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":276,"flow_packet_id":1,"flow_first_seen":1431969750597,"flow_last_seen":1431969750597,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.47","src_port":50134,"dst_port":12350,"l4_proto":"tcp"}
+0418{"flow_id":276,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969750,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYx1AAEAGQ2nAqAEinTg1L8PWMD5iE\/TfAAAAALAC\/\/\/p7gAAAgQFtAEDAwUBAQgKPiQvsAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":276,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969750,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGs4qdODUvwKgBIjA+w9azhlZQYhP04KASOJDCuQAAAgQFrAQCCApiCpO7PiQvsAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":276,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969750,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wMFAAEAG5dDAqAEinTg1L8PWMD5iE\/Tgs4ZWUYAQECwY2QAAAQEICj4kMLtiCpO7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":276,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969750,"pkt_len":154,"pkt":"0NQSxnP1PBXCt3IOCABFAACMRMpAAEAGYXDAqAEinTg1L8PWMD5iE\/Tgs4ZWUYAYECw1NAAAAQEICj4kMLtiCpO7DXQmpGKnI0I2RhDN\/3yj4d09fNnDzXdtJEccvDrHtNyh29f2eOqBagiw1+LzyIu7fYrzCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9A==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":276,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969751,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0xa5AADMG7eOdODUvwKgBIjA+w9azhlZRYhP1OIAQAB0oTAAAAQEICmIKk\/8+JDC7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":276,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969751,"pkt_len":142,"pkt":"PBXCt3IO0NQSxnP1CABFAACAxa9AADMG7ZadODUvwKgBIjA+w9azhlZRYhP1OIAYAB2oqAAAAQEICmIKk\/8+JDC79RtnezqwNkWmj+L6lXY3V1LUsLxOLBdhnxf1oRIVuBrv1bl4qHetgcqH6oA8OkFa3J0qE6j51s80FUJLgPFuh4yNWoMCufmCpDDtqw==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":276,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969751,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ln5AAEAGEBTAqAEinTg1L8PWMD5iE\/U4s4ZWnYAQECkXDgAAAQEICj4kMaFiCpP\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":276,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969751,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cuFAAEAGM6nAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECmWAgAAAQEICj4kMaFiCpP\/ou083U4OUyI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":100,"flow_packet_id":15,"flow_first_seen":1431969665416,"flow_last_seen":1431969685656,"flow_tot_l4_data_len":719,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50046,"dst_port":40011,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":100,"flow_packet_id":15,"flow_first_seen":1431969665416,"flow_last_seen":1431969685656,"flow_tot_l4_data_len":719,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50046,"dst_port":40011,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":112,"flow_packet_id":16,"flow_first_seen":1431969667439,"flow_last_seen":1431969689428,"flow_tot_l4_data_len":734,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50049,"dst_port":40021,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":112,"flow_packet_id":16,"flow_first_seen":1431969667439,"flow_last_seen":1431969689428,"flow_tot_l4_data_len":734,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50049,"dst_port":40021,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":86,"flow_packet_id":17,"flow_first_seen":1431969663377,"flow_last_seen":1431969687753,"flow_tot_l4_data_len":775,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50044,"dst_port":40031,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":86,"flow_packet_id":17,"flow_first_seen":1431969663377,"flow_last_seen":1431969687753,"flow_tot_l4_data_len":775,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50044,"dst_port":40031,"l4_proto":"tcp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":56,"flow_packet_id":17,"flow_first_seen":1431969658376,"flow_last_seen":1431969684569,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":20,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50035,"dst_port":40021,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":56,"flow_packet_id":17,"flow_first_seen":1431969658376,"flow_last_seen":1431969684569,"flow_tot_l4_data_len":720,"flow_min_l4_data_len":20,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50035,"dst_port":40021,"l4_proto":"tcp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":48,"flow_packet_id":16,"flow_first_seen":1431969657367,"flow_last_seen":1431969688218,"flow_tot_l4_data_len":756,"flow_min_l4_data_len":20,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50032,"dst_port":40032,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":48,"flow_packet_id":16,"flow_first_seen":1431969657367,"flow_last_seen":1431969688218,"flow_tot_l4_data_len":756,"flow_min_l4_data_len":20,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":50032,"dst_port":40032,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":63,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969687310,"flow_tot_l4_data_len":1059,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50037,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":63,"flow_packet_id":15,"flow_first_seen":1431969658979,"flow_last_seen":1431969687310,"flow_tot_l4_data_len":1059,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":50037,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":98,"flow_packet_id":15,"flow_first_seen":1431969664990,"flow_last_seen":1431969683864,"flow_tot_l4_data_len":901,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50045,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":98,"flow_packet_id":15,"flow_first_seen":1431969664990,"flow_last_seen":1431969683864,"flow_tot_l4_data_len":901,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":50045,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":111,"flow_packet_id":15,"flow_first_seen":1431969667019,"flow_last_seen":1431969685356,"flow_tot_l4_data_len":835,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":111,"flow_packet_id":15,"flow_first_seen":1431969667019,"flow_last_seen":1431969685356,"flow_tot_l4_data_len":835,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":50048,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":121,"flow_packet_id":15,"flow_first_seen":1431969669039,"flow_last_seen":1431969688720,"flow_tot_l4_data_len":841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50051,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":121,"flow_packet_id":15,"flow_first_seen":1431969669039,"flow_last_seen":1431969688720,"flow_tot_l4_data_len":841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.166","src_port":50051,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":70,"flow_packet_id":16,"flow_first_seen":1431969659988,"flow_last_seen":1431969685175,"flow_tot_l4_data_len":1042,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50039,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":70,"flow_packet_id":16,"flow_first_seen":1431969659988,"flow_last_seen":1431969685175,"flow_tot_l4_data_len":1042,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":50039,"dst_port":443,"l4_proto":"tcp"}
+0423{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1431969751302,"flow_last_seen":1431969751302,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"224.0.0.1","l4_proto":2}
+0390{"flow_id":277,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969751,"pkt_len":60,"pkt":"AQBeAAAB0NQSxnP1CABGwAAkAABAAAECQmnAqAEB4AAAAZQEAAARZOweAAAAAAJ9AAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1431969751302,"flow_last_seen":1431969751302,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0571{"flow_id":276,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969752,"pkt_len":190,"pkt":"0NQSxnP1PBXCt3IOCABFAACwh4FAAEAGHpXAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECnRuwAAAQEICj4kN+BiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":276,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969754,"pkt_len":190,"pkt":"0NQSxnP1PBXCt3IOCABFAACw0RhAAEAG1P3AqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECnLfAAAAQEICj4kPh9iCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":226,"flow_packet_id":255,"flow_first_seen":1431969710853,"flow_last_seen":1431969756218,"flow_tot_l4_data_len":88046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":345,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":226,"flow_packet_id":255,"flow_first_seen":1431969710853,"flow_last_seen":1431969756218,"flow_tot_l4_data_len":88046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":345,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0573{"flow_id":276,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969757,"pkt_len":190,"pkt":"0NQSxnP1PBXCt3IOCABFAACw99xAAEAGrjnAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECm\/yAAAAQEICj4kSdNiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":120,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969758,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIeXwAAEARfH3AqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":278,"flow_packet_id":1,"flow_first_seen":1431969759543,"flow_last_seen":1431969759543,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.253.48.245","src_port":123,"dst_port":123,"l4_proto":"udp"}
+0433{"flow_id":278,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969759,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFwABMl\/4AAEAR3SbAqAEiEf0w9QB7AHsAOFSa4wIG7AAAChwAAPSnEf0w9dkEndkb+ycx2QSd2Rb0\/7nZBJ3ZG\/snMdkEnl+LA3WC","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":278,"flow_packet_id":1,"flow_first_seen":1431969759543,"flow_last_seen":1431969759543,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.253.48.245","src_port":123,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP.Apple","category":"System"}}
+0431{"flow_id":278,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969759,"pkt_len":90,"pkt":"PBXCt3IO0NQSxnP1CABFAABMAABAADgRPeUR\/TD1wKgBIgB7AHsAOA1EJAEG7AAAAAAAAAAMR1BTc9kEnl2e8n962QSeX4sDdYLZBJ5fkbdSxdkEnl+RubQR","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":133,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969692603,"flow_tot_l4_data_len":863,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50054,"dst_port":40005,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":133,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969692603,"flow_tot_l4_data_len":863,"flow_min_l4_data_len":20,"flow_max_l4_data_len":138,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50054,"dst_port":40005,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":152,"flow_packet_id":13,"flow_first_seen":1431969677018,"flow_last_seen":1431969694645,"flow_tot_l4_data_len":845,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50063,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":152,"flow_packet_id":13,"flow_first_seen":1431969677018,"flow_last_seen":1431969694645,"flow_tot_l4_data_len":845,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50063,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":17,"flow_packet_id":17,"flow_first_seen":1431969643093,"flow_last_seen":1431969698671,"flow_tot_l4_data_len":2957,"flow_min_l4_data_len":20,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50029,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":166,"flow_packet_id":15,"flow_first_seen":1431969681060,"flow_last_seen":1431969700978,"flow_tot_l4_data_len":942,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50066,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":166,"flow_packet_id":15,"flow_first_seen":1431969681060,"flow_last_seen":1431969700978,"flow_tot_l4_data_len":942,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50066,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":140,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969696024,"flow_tot_l4_data_len":749,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50056,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":140,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969696024,"flow_tot_l4_data_len":749,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50056,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":141,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969694153,"flow_tot_l4_data_len":839,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50057,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":141,"flow_packet_id":15,"flow_first_seen":1431969675055,"flow_last_seen":1431969694153,"flow_tot_l4_data_len":839,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.153","src_port":50057,"dst_port":443,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":160,"flow_packet_id":17,"flow_first_seen":1431969679451,"flow_last_seen":1431969698502,"flow_tot_l4_data_len":823,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50065,"dst_port":40031,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":160,"flow_packet_id":17,"flow_first_seen":1431969679451,"flow_last_seen":1431969698502,"flow_tot_l4_data_len":823,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.12","src_port":50065,"dst_port":40031,"l4_proto":"tcp"}
+0667{"flow_id":254,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969762,"pkt_len":263,"pkt":"PBXCt3IO0NQSxnP1CABFAAD5lCJAADAGQm0Rj6AWwKgBIhRnwSeBM8YylvCqrIAYASF5ZAAAAQEIClVKruc+I7CHFwMBAMDbVcDXDjk6OywWp+H6bz0fp7Wdoe+zQTYAYzmO6g9ZcYAM2yKmlHkdsIQ\/fH+0unnd4ebwCzOwTTJYEQKBIirSGmlpFwGzZcKVtPCCjD5ILam\/x\/j0mo3148Vj7y6Tj7YjGVbzc8xx0I7GWPviK3o0QTcqDMMx68MZm6wWhSIUc+ijHlPByZnCGs2hs509J6XKUe8m5c5Ov+jIzGK9u5v5MgyqbthXRZTArzNzI37QCYC3kZkF3a6QteV2op9W3SI=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":254,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969762,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0rgNAAEAGGVHAqAEiEY+gFsEnFGeW8KqsgTPG94AQD\/n1QwAAAQEICj4kXGNVSq7n","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":254,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969762,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOqiNAAEAGHNfAqAEiEY+gFsEnFGeW8KqsgTPG94AYEABIFAAAAQEICj4kXGRVSq7nFwMBACCrq8Pa1S0H21OIhZwGAXIjnAlDFONAulogzbl9GkhCVBcDAQAwWffu8MxJHsXmejKZY05dKxegWcqQTLbKFBDdYnR0wJj18BcB6JFw+p\/ehKRUVyxJ","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":254,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969762,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lCNAADAGQzERj6AWwKgBIhRnwSeBM8b3lvCrBoAQASECYQAAAQEIClVKsEc+JFxk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":276,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969763,"pkt_len":190,"pkt":"0NQSxnP1PBXCt3IOCABFAACwwYxAAEAG5InAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECmpKAAAAQEICj4kYHNiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":279,"flow_packet_id":1,"flow_first_seen":1431969770694,"flow_last_seen":1431969770694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50135,"dst_port":20274,"l4_proto":"tcp"}
+0417{"flow_id":279,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABArS9AAEAG3hDAqAEiTKehBsPXTzInl3a\/AAAAALAC\/\/8aLgAAAgQFtAEDAwUBAQgKPiR90gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":280,"flow_packet_id":1,"flow_first_seen":1431969770694,"flow_last_seen":1431969770694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50136,"dst_port":18767,"l4_proto":"tcp"}
+0417{"flow_id":280,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABALoZAAEAG+q7AqAEiR+4Hy8PYSU+K+FHXAAAAALAC\/\/9\/iwAAAgQFtAEDAwUBAQgKPiR90gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":281,"flow_packet_id":1,"flow_first_seen":1431969770694,"flow_last_seen":1431969770694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50137,"dst_port":31010,"l4_proto":"tcp"}
+0416{"flow_id":281,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQGxAAEAGd6zAqAEiBfi63cPZeSJOVOkRAAAAALAC\/\/+EAwAAAgQFtAEDAwUBAQgKPiR90wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":281,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABA2Z5AAHIGrHkF+LrdwKgBInkiw9nUmdR+TlTpErASRBBRzQAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":281,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mqxAAEAGHXjAqAEiBfi63cPZeSJOVOkS1JnUf4AQECwKBgAAAQEICj4kfkoAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":281,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":148,"pkt":"0NQSxnP1PBXCt3IOCABFAACGW7dAAEAGXBvAqAEiBfi63cPZeSJOVOkS1JnUf4AYECymrwAAAQEICj4kfkoAAAAAY\/qZgOuN7xjVNPyS9XBuVFgUg2tcWygYjZ7rKv91Rd4SB\/tJJ30DJy2GQJyYi+ZAq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg90VYKLwA==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":280,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAAItAAHMG9alH7gfLwKgBIklPw9gmoqm+ivhR2LAS\/\/9qHAAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":280,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fUhAAEAGq\/jAqAEiR+4Hy8PYSU+K+FHYJqKpv4AQECzd4gAAAQEICj4kfqwAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":280,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABkhQlAAEAGpAfAqAEiR+4Hy8PYSU+K+FHYJqKpv4AYECyu1wAAAQEICj4kfqwAAAAAtoAAnb6By65p4EiPy\/33pzzKXH4lLeYmVCIlSmTSP42iSjljF9NML6xIEe3sQsrd","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":281,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":118,"pkt":"PBXCt3IO0NQSxnP1CABFAABo2aNAAHIGrEwF+LrdwKgBInkiw9nUmdR\/TlTpZIAYQ7594AAAAQEICgAAcOk+JH5KysGHyaJe2sTC4HjuodUdIhsI0VH2jP5J4pzdRLgWRDow8MPKm+7+WYK7vATqB3TpalPoOQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":281,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GplAAEAGnYvAqAEiBfi63cPZeSJOVOlk1JnUs4AQECqYJQAAAQEICj4kfr0AAHDp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":281,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sQ5AAEAGBw7AqAEiBfi63cPZeSJOVOlk1JnUs4AYECojZQAAAQEICj4kfr0AAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":279,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yw9eajaZMJ5d2wKAScSAAYwAAAgQFrAQCCAq+obooPiR90gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":279,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05SBAAEAGpivAqAEiTKehBsPXTzInl3bAmo2mTYAQECyPAQAAAQEICj4kfuy+oboo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":279,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969770,"pkt_len":118,"pkt":"0NQSxnP1PBXCt3IOCABFAABomRFAAEAG8gbAqAEiTKehBsPXTzInl3bAmo2mTYAYECzN1gAAAQEICj4kfuy+obooLk3k6SY0GyOMZzHVn\/H98F3IRjbjVyph+dPeC6NjpLm3XigGcdquOBB22\/+ezOksti8UdQ==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":280,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":135,"pkt":"PBXCt3IO0NQSxnP1CABFAAB5AJNAAHMG9WhH7gfLwKgBIklPw9gmoqm\/ivhSCIAY\/88aywAAAQEICgMcpbM+JH6s16vNHtdyE0iSoJIA6REfY38Gv0jbLdBVT3kh\/zfgdG+DHdIlBW2BChSs5UlWJoluU+g5Fg90VYKLwDGux8zNmsOYKUZ\/","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":280,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EcpAAEAGF3fAqAEiR+4Hy8PYSU+K+FIIJqKqBIAQECkzwQAAAQEICj4kf4wDHKWz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":280,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GYVAAEAGD7TAqAEiR+4Hy8PYSU+K+FIIJqKqBIAYECn1uQAAAQEICj4kf4wDHKWz6MDF2eKkrLc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":279,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HQ9AAC8Gfz1Mp6EGwKgBIk8yw9eajaZNJ5d29IAQAOOc+gAAAQEICr6hu0Q+JH7s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":279,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":130,"pkt":"PBXCt3IO0NQSxnP1CABFAAB0HRBAAC8GfvxMp6EGwKgBIk8yw9eajaZNJ5d29IAYAOMKbAAAAQEICr6hu0Q+JH7s1tv+2b3NBYT5zEbjMZL7vOHu1a3jqhbj4gKyGqbujCQRUdH3A29ukZKLWaxg3kxZn8RlUhsQQX5XHN1qU+g5Fg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":279,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NnJAAEAGVNrAqAEiTKehBsPXTzInl3b0mo2mjYAQECqMWgAAAQEICj4kgAW+obtE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":279,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8I9dAAEAGZ23AqAEiTKehBsPXTzInl3b0mo2mjYAYECoFFwAAAQEICj4kgAW+obtETjjGVAMHb58=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":132,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969701671,"flow_tot_l4_data_len":777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50053,"dst_port":40030,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":132,"flow_packet_id":17,"flow_first_seen":1431969673443,"flow_last_seen":1431969701671,"flow_tot_l4_data_len":777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":50053,"dst_port":40030,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":167,"flow_packet_id":17,"flow_first_seen":1431969681480,"flow_last_seen":1431969709213,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50067,"dst_port":40027,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":167,"flow_packet_id":17,"flow_first_seen":1431969681480,"flow_last_seen":1431969709213,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50067,"dst_port":40027,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":142,"flow_packet_id":14,"flow_first_seen":1431969675056,"flow_last_seen":1431969702873,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50058,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":142,"flow_packet_id":14,"flow_first_seen":1431969675056,"flow_last_seen":1431969702873,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50058,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":173,"flow_packet_id":15,"flow_first_seen":1431969683081,"flow_last_seen":1431969710648,"flow_tot_l4_data_len":891,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50069,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":173,"flow_packet_id":15,"flow_first_seen":1431969683081,"flow_last_seen":1431969710648,"flow_tot_l4_data_len":891,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.160","src_port":50069,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":182,"flow_packet_id":15,"flow_first_seen":1431969685111,"flow_last_seen":1431969703010,"flow_tot_l4_data_len":974,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50072,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":182,"flow_packet_id":15,"flow_first_seen":1431969685111,"flow_last_seen":1431969703010,"flow_tot_l4_data_len":974,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50072,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":202,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969709588,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50078,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":202,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969709588,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50078,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":204,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969708230,"flow_tot_l4_data_len":1024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50080,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":204,"flow_packet_id":15,"flow_first_seen":1431969691076,"flow_last_seen":1431969708230,"flow_tot_l4_data_len":1024,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50080,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":208,"flow_packet_id":15,"flow_first_seen":1431969692087,"flow_last_seen":1431969710209,"flow_tot_l4_data_len":1003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50081,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":208,"flow_packet_id":15,"flow_first_seen":1431969692087,"flow_last_seen":1431969710209,"flow_tot_l4_data_len":1003,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50081,"dst_port":443,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":143,"flow_packet_id":16,"flow_first_seen":1431969675413,"flow_last_seen":1431969703766,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50059,"dst_port":40015,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":143,"flow_packet_id":16,"flow_first_seen":1431969675413,"flow_last_seen":1431969703766,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":50059,"dst_port":40015,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":134,"flow_packet_id":16,"flow_first_seen":1431969673443,"flow_last_seen":1431969701528,"flow_tot_l4_data_len":718,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50055,"dst_port":40030,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":134,"flow_packet_id":16,"flow_first_seen":1431969673443,"flow_last_seen":1431969701528,"flow_tot_l4_data_len":718,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.47","src_port":50055,"dst_port":40030,"l4_proto":"tcp"}
+0411{"flow_id":281,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Vx1AAEAGYP\/AqAEiBfi63cPZeSJOVOlk1JnUs4AYECohbwAAAQEICj4kgLMAAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":282,"flow_packet_id":1,"flow_first_seen":1431969771806,"flow_last_seen":1431969771806,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50138,"dst_port":18767,"l4_proto":"tcp"}
+0416{"flow_id":282,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXBhAAEAGzRzAqAEiR+4Hy8PaSU8uFQxlAAAAALAC\/\/8djQAAAgQFtAEDAwUBAQgKPiSCJAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":283,"flow_packet_id":1,"flow_first_seen":1431969771806,"flow_last_seen":1431969771806,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50139,"dst_port":31010,"l4_proto":"tcp"}
+0417{"flow_id":283,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZhxAAEAGUfzAqAEiBfi63cPbeSJooXaIAAAAALAC\/\/\/X7AAAAgQFtAEDAwUBAQgKPiSCJAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":283,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABA2bNAAHIGrGQF+LrdwKgBInkiw9s0p7etaKF2ibASRBBmywAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":283,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HKZAAEAGm37AqAEiBfi63cPbeSJooXaJNKe3roAQECwaugAAAQEICj4kgpQAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":283,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969771,"pkt_len":106,"pkt":"0NQSxnP1PBXCt3IOCABFAABcf4JAAEAGOHrAqAEiBfi63cPbeSJooXaJNKe3roAYECzCFgAAAQEICj4kgpQAAAAAqdG9FK4TuUHIKK6aMyAYZRIhmWdJ9t4VhRgz8yYIfLUv8h43vNuNiw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":282,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAALFAAHMG9YNH7gfLwKgBIklPw9pIXx9TLhUMZrAS\/\/91HgAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":282,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TOFAAEAG3F\/AqAEiR+4Hy8PaSU8uFQxmSF8fVIAQECzklgAAAQEICj4kgvoAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":282,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":106,"pkt":"0NQSxnP1PBXCt3IOCABFAABcfvNAAEAGqiXAqAEiR+4Hy8PaSU8uFQxmSF8fVIAYECyaCQAAAQEICj4kgvoAAAAAySlZU2d+fWCI7gzoxQdQlWtv\/LqOYwU50I77xNQT\/1JgDkcmXg72yA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":283,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":108,"pkt":"PBXCt3IO0NQSxnP1CABFAABe2bdAAHIGrEIF+LrdwKgBInkiw9s0p7euaKF2sYAYQ+h30wAAAQEICgAAcPQ+JIKU\/iNnDy7MY+xYJiBf0Zydu+FnmBaOmB1etsSkKondEumn6ottmLpeVNZ\/","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":283,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tspAAEAGAVrAqAEiBfi63cPbeSJooXaxNKe32IAQECqpBAAAAQEICj4kgwUAAHD0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":281,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iVVAAEAGLs\/AqAEiBfi63cPZeSJOVOls1JnUs4ARECqT1AAAAQEICj4kgwUAAHDp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":283,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABFHcpAAEAGmknAqAEiBfi63cPbeSJooXaxNKe32IAYECpzLgAAAQEICj4kgwkAAHD0SCaPKbl3pITe6Qi5gkLChtQ=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":283,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC2b1AAHIGrFgF+LrdwKgBInkiw9s0p7fYaKF2woAYQ9exGQAAAQEICgAAcPU+JIMJXnXPuWBAVxKQkQZjR5s=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":283,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dvpAAEAGQSrAqAEiBfi63cPbeSJooXbCNKe35oAQECqocQAAAQEICj4kg3gAAHD1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":281,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GFdAAEAGn8XAqAEiBfi63cPZeSJOVOlk1JnUs4AZECoeSwAAAQEICj4kg9YAAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":282,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":101,"pkt":"PBXCt3IO0NQSxnP1CABFAABXAUBAAHMG9N1H7gfLwKgBIklPw9pIXx9ULhUMjoAY\/9fcSAAAAQEICgMcpb4+JIL6711cSIJaYBPxt+Azvw0vQI\/HxFSLE64Mu9sF\/6gQ\/OlvFB4=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":282,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA01aNAAEAGU53AqAEiR+4Hy8PaSU8uFQyOSF8fd4AQECo6lgAAAQEICj4kg9cDHKW+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":280,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kE9AAEAGmPHAqAEiR+4Hy8PYSU+K+FIQJqKqBIARECkvbQAAAQEICj4kg9cDHKWz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":282,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABFlUdAAEAGk+jAqAEiR+4Hy8PaSU8uFQyOSF8fd4AYECpG+AAAAQEICj4kg9cDHKW+HPp65LVA5fNgao2cRMqWn\/c=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":283,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC2ctAAHIGrEoF+LrdwKgBInkiw9s0p7fmaKF2woAYQ9e9AQAAAQEICgAAcPY+JIN4tQWhA9p4RFJLEHuLfDs=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":283,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0spxAAEAGBYjAqAEiBfi63cPbeSJooXbCNKe39IAQECmn9wAAAQEICj4kg+QAAHD2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":283,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4pNNAAEAGE03AqAEiBfi63cPbeSJooXbCNKe39IAYEClDlQAAAQEICj4kg+QAAHD2eTPrIg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":280,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87VVAAEAGO+PAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECnwogAAAQEICj4khKIDHKWz6MDF2eKkrLc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":282,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCAk5AAHMG8+RH7gfLwKgBIklPw9pIXx93LhUMn4AY\/8ZfjgAAAQEICgMcpcA+JIPXDqFiCt2vMDN2Rnr4e3Q=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":282,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0k\/RAAEAGlUzAqAEiR+4Hy8PaSU8uFQyfSF8fhYAQECo5nQAAAQEICj4khK8DHKXA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":283,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02dlAAHIGrEoF+LrdwKgBInkiw9s0p7f0aKF2xoAQQ9N0RgAAAQEICgAAcPk+JIPk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":282,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCAlRAAHMG895H7gfLwKgBIklPw9pIXx+FLhUMn4AY\/8aC3AAAAQEICgMcpcI+JISvrWju6bfySNsdhg3f\/oU=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":282,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0DvpAAEAGGkfAqAEiR+4Hy8PaSU8uFQyfSF8fk4AQECo4uAAAAQEICj4khYQDHKXC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":282,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4DP9AAEAGHD7AqAEiR+4Hy8PaSU8uFQyfSF8fk4AYECraqgAAAQEICj4khYQDHKXChSHY3w==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":279,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85aBAAEAGpaPAqAEiTKehBsPXTzInl3b0mo2mjYAYECr+zAAAAQEICj4khk++obtETjjGVAMHb58=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":282,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969772,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0AlhAAHMG8+hH7gfLwKgBIklPw9pIXx+TLhUMo4AQ\/8JJFwAAAQEICgMcpcY+JIWE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":281,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969773,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KGNAAEAGj7nAqAEiBfi63cPZeSJOVOlk1JnUs4AZECoYzwAAAQEICj4kiVIAAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":280,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969773,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8q5ZAAEAGfaLAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECnrjAAAAQEICj4kibgDHKWz6MDF2eKkrLc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":279,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969774,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HI5AAEAGbrbAqAEiTKehBsPXTzInl3b0mo2mjYAYECr4ggAAAQEICj4kjJm+obtETjjGVAMHb58=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":276,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969774,"pkt_len":190,"pkt":"0NQSxnP1PBXCt3IOCABFAACwbWhAAEAGOK7AqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECl8sAAAAQEICj4kjOtiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":284,"flow_packet_id":1,"flow_first_seen":1431969774806,"flow_last_seen":1431969774806,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50140,"dst_port":20274,"l4_proto":"tcp"}
+0416{"flow_id":284,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969774,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwnFAAEAGyM7AqAEiTKehBsPcTzIA95PqAAAAALAC\/\/8TqQAAAgQFtAEDAwUBAQgKPiSNxwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1457{"flow_id":282,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969775,"pkt_len":842,"pkt":"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","pkt_caplen":842,"pkt_type":2048,"pkt_ipoffset":14}
+1448{"flow_id":283,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969775,"pkt_len":842,"pkt":"0NQSxnP1PBXCt3IOCABFAAM805lAAEAG4YLAqAEiBfi63cPbeSJooXbGNKe39IAYECk3XQAAAQEICj4kkRsAAHD5NilX5D9QuJPVOF9F0MsWIyMCx8wmB7325OhhkpjZqNmQFVRZh2DcOK2Qkj3IWSkR+1ZEVcjNen9sPVTvumWqi2dkr+D+7\/jTE81PzAVkIHgOwxDV9PHcMhZJqHDkvV7S0T9aQY7j8dnm6dvWkAWBXYT5\/vYCQuY5Hq9XuvOiUo70rdoECScmATxus8wmyoIZqkY2go4nSDc8d6DDxh2u770\/HODI8yuJAcSz7sEyVBp1j6EoItTcfEsxFNeU3s+xFrpHJu4aDRiGGbvNBgP3e3+fXMWkfMW1ORg73le3VNf8kNg4YAGmxTMB5OwTsvcYXGJsLIuV06tk5Rmj2pvFLcGVJg9wFQIsfogrYj+OpFA+iWyta029Y8BUL0rF2o1bK7GsusGX+xgPqlB8zdwaptZzG0NRcFWaVickdNQ4mtjCHc5EWAal9HJKxXcdjjPtvK64tq5YzVKpJvwDYrlf8kYl9xxMk+DvHKWdIrtySzI8ziFJzRf9txNe7SOmQ20gTr+mAezfkg2A4Yk1EEmFpy77yRnOJqKMjZ8dVKdPeBXe1UWiDTWilEMiomx5RVYZIZIreqmcCn4JNpPewgfnmngE3uQjIJWconOKVwyckKVu\/1HCUXEGoVlbUiSuQPve449ne+PFJ1imorp1lEphPPkbfEJ\/wgiBKTmM6R\/CQOSQ2v3T4lM5n75LegxR0L5xglSmRwOdueKvl8jUVtvIo\/TA5vjqBGJFs7og7L0IG9AaoE0DWblqouRdMS6zAKhVxqjr4e\/h\/rjIQ3MD5qnbVVBC9Hpsiq0CVDo\/Qkh07wp15HNyoR1W+Bj6xHFo08QqnaUPmpDtWweIMDPYQgEBV4Cv0YyGH1qLqrK3aQVL8VWusSxvM3EtjgiC3OncHLFwOG+\/LQH47MH+TK7AD7PvsB6UjKl1j4wEHCd42G2JOh60HmuSBPu1NlwoQWq65mQeoNzV78+XnhbbOeJkKSuIgS3ARrm1xTDDkwbNEFW6RI31RtYx75ORhmcdLtIQGUSJ3dloJrW7BVI=","pkt_caplen":842,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":279,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969775,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tD5AAEAG1w3AqAEiTKehBsPXTzInl3b8mo2mjYARECp7OwAAAQEICj4kkRu+obtE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":283,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969775,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02nhAAHIGq6sF+LrdwKgBInkiw9s0p7f0aKF5zoAQQMtm7QAAAQEICgAAcRs+JJEb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":282,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0An9AAHMG88FH7gfLwKgBIklPw9pIXx+TLhUPq4AQ\/Lo9YgAAAQEICgMcpeQ+JJEb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":280,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89MFAAEAGNHfAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECniKAAAAQEICj4kkxwDHKWz6MDF2eKkrLc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":281,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8C5tAAEAGrIHAqAEiBfi63cPZeSJOVOlk1JnUs4AZECoOngAAAQEICj4kk4MAAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":284,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yw9wNTHkCAPeT66AScSCe6QAAAgQFrAQCCAq+oc+oPiSNxwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":284,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo01NAAEAGuATAqAEiTKehBsPcTzIA95PrAAAAAFAEAABYdwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969776,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969777,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969777,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":279,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969777,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V4pAAEAGM7rAqAEiTKehBsPXTzInl3b0mo2mjYAZECrstQAAAQEICj4kmGW+obtETjjGVAMHb58=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":280,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969780,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Ys5AAEAGxmrAqAEiR+4Hy8PYSU+K+FIIJqKqBIAZECnQKAAAAQEICj4kpRwDHKWz6MDF2eKkrLc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":281,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969781,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UCxAAEAGZ\/DAqAEiBfi63cPZeSJOVOlk1JnUs4AZECr7BAAAAQEICj4kpxwAAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":176,"flow_packet_id":17,"flow_first_seen":1431969683498,"flow_last_seen":1431969716234,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":20,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50070,"dst_port":40018,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":176,"flow_packet_id":17,"flow_first_seen":1431969683498,"flow_last_seen":1431969716234,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":20,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":50070,"dst_port":40018,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":195,"flow_packet_id":18,"flow_first_seen":1431969689470,"flow_last_seen":1431969717232,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50076,"dst_port":40014,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":195,"flow_packet_id":18,"flow_first_seen":1431969689470,"flow_last_seen":1431969717232,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":50076,"dst_port":40014,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":216,"flow_packet_id":17,"flow_first_seen":1431969699577,"flow_last_seen":1431969718631,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50092,"dst_port":40020,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":216,"flow_packet_id":17,"flow_first_seen":1431969699577,"flow_last_seen":1431969718631,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50092,"dst_port":40020,"l4_proto":"tcp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":194,"flow_packet_id":19,"flow_first_seen":1431969689470,"flow_last_seen":1431969716588,"flow_tot_l4_data_len":843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50075,"dst_port":40003,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":194,"flow_packet_id":19,"flow_first_seen":1431969689470,"flow_last_seen":1431969716588,"flow_tot_l4_data_len":843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50075,"dst_port":40003,"l4_proto":"tcp"}
+0510{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":225,"flow_packet_id":12,"flow_first_seen":1431969707326,"flow_last_seen":1431969717500,"flow_tot_l4_data_len":739,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":225,"flow_packet_id":12,"flow_first_seen":1431969707326,"flow_last_seen":1431969717500,"flow_tot_l4_data_len":739,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50103,"dst_port":443,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":231,"flow_packet_id":6,"flow_first_seen":1431969712931,"flow_last_seen":1431969713736,"flow_tot_l4_data_len":267,"flow_min_l4_data_len":20,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50109,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":231,"flow_packet_id":6,"flow_first_seen":1431969712931,"flow_last_seen":1431969713736,"flow_tot_l4_data_len":267,"flow_min_l4_data_len":20,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50109,"dst_port":12350,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":232,"flow_packet_id":6,"flow_first_seen":1431969713736,"flow_last_seen":1431969714165,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50110,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":232,"flow_packet_id":6,"flow_first_seen":1431969713736,"flow_last_seen":1431969714165,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50110,"dst_port":12350,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":211,"flow_packet_id":12,"flow_first_seen":1431969697097,"flow_last_seen":1431969714913,"flow_tot_l4_data_len":699,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50087,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":211,"flow_packet_id":12,"flow_first_seen":1431969697097,"flow_last_seen":1431969714913,"flow_tot_l4_data_len":699,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50087,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":222,"flow_packet_id":13,"flow_first_seen":1431969706277,"flow_last_seen":1431969719939,"flow_tot_l4_data_len":667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":222,"flow_packet_id":13,"flow_first_seen":1431969706277,"flow_last_seen":1431969719939,"flow_tot_l4_data_len":667,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50100,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":214,"flow_packet_id":15,"flow_first_seen":1431969698797,"flow_last_seen":1431969718921,"flow_tot_l4_data_len":1824,"flow_min_l4_data_len":20,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":50090,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":11,"flow_packet_id":18,"flow_first_seen":1431969642376,"flow_last_seen":1431969712120,"flow_tot_l4_data_len":3067,"flow_min_l4_data_len":20,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":170,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.223.73.34","src_port":50027,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":224,"flow_packet_id":14,"flow_first_seen":1431969706277,"flow_last_seen":1431969717910,"flow_tot_l4_data_len":914,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":224,"flow_packet_id":14,"flow_first_seen":1431969706277,"flow_last_seen":1431969717910,"flow_tot_l4_data_len":914,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50102,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":217,"flow_packet_id":15,"flow_first_seen":1431969701181,"flow_last_seen":1431969719738,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":217,"flow_packet_id":15,"flow_first_seen":1431969701181,"flow_last_seen":1431969719738,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":50094,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":203,"flow_packet_id":16,"flow_first_seen":1431969691076,"flow_last_seen":1431969717999,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50079,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":203,"flow_packet_id":16,"flow_first_seen":1431969691076,"flow_last_seen":1431969717999,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.142","src_port":50079,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":218,"flow_packet_id":15,"flow_first_seen":1431969704663,"flow_last_seen":1431969718237,"flow_tot_l4_data_len":702,"flow_min_l4_data_len":20,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50096,"dst_port":40027,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":218,"flow_packet_id":15,"flow_first_seen":1431969704663,"flow_last_seen":1431969718237,"flow_tot_l4_data_len":702,"flow_min_l4_data_len":20,"flow_max_l4_data_len":94,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":50096,"dst_port":40027,"l4_proto":"tcp"}
+0413{"flow_id":279,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/wRAAEAGjD\/AqAEiTKehBsPXTzInl3b0mo2mjYAZECrV5AAAAQEICj4krza+obtETjjGVAMHb58=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":285,"flow_packet_id":1,"flow_first_seen":1431969783628,"flow_last_seen":1431969783628,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50141,"dst_port":4415,"l4_proto":"tcp"}
+0418{"flow_id":285,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJsBAAEAG06bAqAEiUA4uecPdET\/5wLoiAAAAALAC\/\/9\/YwAAAgQFtAEDAwUBAQgKPiSwIwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":285,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAoepAAHQGJHxQDi55wKgBIhE\/w92tjxb3+cC6I7AS\/\/+oHwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":285,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sYlAAEAGSOnAqAEiUA4uecPdET\/5wLojrY8W+IAQECzqDwAAAQEICj4ksIIAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":285,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwDDJAAEAG7gTAqAEiUA4uecPdET\/5wLojrY8W+IAYECyTRgAAAQEICj4ksIIAAAAA9\/r1P1A0shPDRbmIqhNI2gKbWvPqHL9hix7hMF793UclVj5xB4U8YQR57\/+GFLwSBj\/kBXK7MOGe9zx9","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":285,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":165,"pkt":"PBXCt3IO0NQSxnP1CABFAACXoe9AAHQGJCBQDi55wKgBIhE\/w92tjxb4+cC6X4AY\/8M5ngAAAQEICgADWC4+JLCCR00xxPyJSvY7p+UXAcWld4BKHI06keybLBcwhbDgUv8nCnJiqh+hlIWSH0YfB7qlA9hphr9khfI7sGEed7z9CnOIWbYvFHUiq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5","pkt_caplen":165,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":285,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0XuJAAEAGm5DAqAEiUA4uecPdET\/5wLpfrY8XW4AQECiQ4wAAAQEICj4ksOIAA1gu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":285,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969783,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8psZAAEAGU6TAqAEiUA4uecPdET\/5wLpfrY8XW4AYECgLxwAAAQEICj4ksOIAA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":285,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FgxAAEAG5F7AqAEiUA4uecPdET\/5wLpfrY8XW4AYECgKEQAAAQEICj4kspgAA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"flow_id":254,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":471,"pkt":"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","pkt_caplen":471,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":254,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Vk1AAEAGcQfAqAEiEY+gFsEnFGeW8KsGgTPIjIAQD\/NEMwAAAQEICj4ktAFVSwZw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":254,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOb59AAEAGV1vAqAEiEY+gFsEnFGeW8KsGgTPIjIAYEAB6dQAAAQEICj4ktAJVSwZwFwMBACBMjqTWniHrcBEslZ43JJNdL32X\/QhiSiCd6RZ4FJgq0hcDAQAwLQvVvlMqMy3QmZD5957cdCXiFf+d7rhuZsTQ6kDGI4tkD\/5WT\/FCi1XYQFUuPtqx","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":286,"flow_packet_id":1,"flow_first_seen":1431969784741,"flow_last_seen":1431969784741,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50142,"dst_port":4415,"l4_proto":"tcp"}
+0417{"flow_id":286,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAOglAAEAGwF3AqAEiUA4uecPeET+tjIdjAAAAALAC\/\/\/6AAAAAgQFtAEDAwUBAQgKPiS0eAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":286,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABAogNAAHQGJGNQDi55wKgBIhE\/w94bo3ajrYyHZLAS\/\/9ZUgAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":286,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03GtAAEAGHgfAqAEiUA4uecPeET+tjIdkG6N2pIAQECyW9gAAAQEICj4ktM4AAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":286,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":134,"pkt":"0NQSxnP1PBXCt3IOCABFAAB4W0NAAEAGnuvAqAEiUA4uecPeET+tjIdkG6N2pIAYECweZAAAAQEICj4ktM4AAAAAXhYo3uqtjy7zH+uy\/+mFmTLkwFbyxBAy4R+P28dEVchvss4r7udXNkXTqR4NbwpWZaEQSEroaxCjulFk+qNEeZrOCUQ=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":254,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0lCVAADAGQy8Rj6AWwKgBIhRnwSeBM8iMlvCrYIAQASFRWwAAAQEIClVLB78+JLQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":286,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":129,"pkt":"PBXCt3IO0NQSxnP1CABFAABzoglAAHQGJCpQDi55wKgBIhE\/w94bo3akrYyHqIAY\/7vokQAAAQEICgADWDk+JLTOAwmBXT1X5ZxX7cjBjnHYvo0lwWM8FIx1FEZ0dMWQX0nkeUZm\/HEuk0Ax91jcJZ9lgQSauyA2QGrj8KmynSvC","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":286,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0BKJAAEAG9dDAqAEiUA4uecPeET+tjIeoG6N244AQECo94gAAAQEICj4ktSUAA1g5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":285,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0F\/xAAEAG4nbAqAEiUA4uecPdET\/5wLpnrY8XW4ARECiMlwAAAQEICj4ktSUAA1gu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":286,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABCWNZAAEAGoY7AqAEiUA4uecPeET+tjIeoG6N244AYECrPxwAAAQEICj4ktSsAA1g5jXVY7ifiedPv2XvGekQ=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":285,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969784,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NG1AAEAGxf3AqAEiUA4uecPdET\/5wLpfrY8XW4AZECgHbAAAAQEICj4ktTwAA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":286,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969785,"pkt_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABGog5AAHQGJFJQDi55wKgBIhE\/w94bo3bjrYyHtoAY\/60jpAAAAQEICgADWDk+JLUrUIGfVJQMb4RcIwfsP0DynKE4","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":286,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969785,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0uLJAAEAGQcDAqAEiUA4uecPeET+tjIe2G6N29YAQECk9aAAAAQEICj4ktYAAA1g5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":253,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969785,"pkt_len":103,"pkt":"0NQSxnP1PBXCt3IOCABFAABZYwJAAEAGsJTAqAEiUYUTucPMrY9zRWMuLqF384AYECqR9QAAAQEICj4ktYACsDcjItvxJQyu2woaBbPDq4\/tLVU1QqPtISTIGmQHTgiWkvi2inq8lw==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":286,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969785,"pkt_len":103,"pkt":"0NQSxnP1PBXCt3IOCABFAABZg4hAAEAGdsXAqAEiUA4uecPeET+tjIe2G6N29YAYECm6HAAAAQEICj4ktYAAA1g5DUamZv\/87VI+zPxWWvrFeM7UurIfLjSihN6s+tOdFeE86MjyiA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":286,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969785,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ohJAAHQGJGBQDi55wKgBIhE\/w94bo3b1rYyH24AQ\/4hN3wAAAQEICgADWD0+JLWA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":285,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969786,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8INNAAEAG2ZfAqAEiUA4uecPdET\/5wLpfrY8XW4AZECgC6wAAAQEICj4kub0AA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":285,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u11AAEAGPw3AqAEiUA4uecPdET\/5wLpfrY8XW4AZECj6sQAAAQEICj4kwfYAA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":281,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88FlAAEAGx8LAqAEiBfi63cPZeSJOVOlk1JnUs4AZECrfuwAAAQEICj4kwmUAAHDpAn7P43BvMd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":281,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03Q1AAHIGqRYF+LrdwKgBInkiw9nUmdS7TlTpbYAQQ7YgMQAAAQEICgAAcZg+JMJl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":120,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABIkIwAAEARZW3AqAFcwKgB\/+EV4RUANFGUU3BvdFVkcDB5FYpWEIvHwwABAARIlcIDhMAbG8d8ZX7RWey9o+VAQ2IEJyw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":286,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMeSRAAEAGgTbAqAEiUA4uecPeET+tjIfbG6N29YAYECn1lwAAAQEICj4kw\/gAA1g9wFsSni5WKW4ffF04tPxwhn8niMHYoouN","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":287,"flow_packet_id":1,"flow_first_seen":1431969788719,"flow_last_seen":1431969788719,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50143,"dst_port":29059,"l4_proto":"tcp"}
+0416{"flow_id":287,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtCpAAEAGk4XAqAEiTsric8PfcYPq0olRAAAAALAC\/\/+YTgAAAgQFtAEDAwUBAQgKPiTD+gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":287,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8euxAAHMGmcdOyuJzwKgBInGDw984j2+76tKJUqASIAAVbgAAAgQFrAEDAwgEAggKAlDJPj4kw\/o=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":287,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA00tZAAEAGdOXAqAEiTsric8PfcYPq0olSOI9vvIAQECxTqwAAAQEICj4kxFYCUMk+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":287,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":141,"pkt":"0NQSxnP1PBXCt3IOCABFAAB\/ylBAAEAGfSDAqAEiTsric8PfcYPq0olSOI9vvIAYECyzcQAAAQEICj4kxFYCUMk+GO7O\/LwBpCU408nsYZbR1kGJWcDOe8PLod1VtwuIK6kUauDdelAbFohyC13n95Fd7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg90VYKL","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":287,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":123,"pkt":"PBXCt3IO0NQSxnP1CABFAABteu1AAHMGmZVOyuJzwKgBInGDw984j2+86tKJnYAYAQJo0gAAAQEICgJQyUY+JMRWAMl+YAu1wlc0qNu4qyJaeuU6\/hIkwS43dve99RbqiXOASapEi6IeTs6lx+ckYj8YVk+0lcLLAHHu","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":287,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CbtAAEAGPgHAqAEiTsric8PfcYPq0omdOI9v9YAQECpS0wAAAQEICj4kxKQCUMlG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":287,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vnJAAEAGiUHAqAEiTsric8PfcYPq0omdOI9v9YAYECqjWQAAAQEICj4kxKQCUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":286,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969788,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0omJAAHQGJBBQDi55wKgBIhE\/w94bo3b1rYyH84AQ\/3A\/QgAAAQEICgADWGI+JMP4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":287,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8yZdAAEAGfhzAqAEiTsric8PfcYPq0omdOI9v9YAYECqhngAAAQEICj4kxl8CUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0373{"flow_id":92,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":46,"pkt":"AQBeAAABoPPBbTu2CABG2AAgAAAAAAECgljAqAD+4AAAAZQEAAARZO6bAAAAAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":280,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8BQxAAHMG8SxH7gfLwKgBIklPw9gmoqoEivhSCIAY\/89FjgAAAQEICgMcpms+JH+M9YwsX9kjArQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":280,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoYEBAAEAGyQzAqAEiR+4Hy8PYSU+K+FIIAAAAAFAEAAC0NAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":288,"flow_packet_id":1,"flow_first_seen":1431969789832,"flow_last_seen":1431969789832,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50144,"dst_port":29059,"l4_proto":"tcp"}
+0416{"flow_id":288,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAcbhAAEAG1ffAqAEiTsric8PgcYPYQ6AmAAAAALAC\/\/+PtQAAAgQFtAEDAwUBAQgKPiTITAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1431969789851,"flow_last_seen":1431969789851,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"224.0.0.251","l4_proto":2}
+0374{"flow_id":289,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":46,"pkt":"AQBeAAD7PBXCt3IOCABGAAAgDOsAAAECdSfAqAEi4AAA+5QEAAAWAAkE4AAA+w==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1431969789851,"flow_last_seen":1431969789851,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0410{"flow_id":288,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8evFAAHMGmcJOyuJzwKgBInGDw+BU8I6O2EOgJ6ASIADRMgAAAgQFrAEDAwgEAggKAlDJrD4kyEw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":288,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0W4RAAEAG7DfAqAEiTsric8PgcYPYQ6AnVPCOj4AQECwPdQAAAQEICj4kyKMCUMms","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":288,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969789,"pkt_len":139,"pkt":"0NQSxnP1PBXCt3IOCABFAAB91URAAEAGci7AqAEiTsric8PgcYPYQ6AnVPCOj4AYECy3rQAAAQEICj4kyKMCUMmscN6y6QrZswAe8uR7xBV73FcFbEjUmlrtmODaJOIr8ibpApC0LYZk5IgMI2xrpqlIANoyTT+7zlMqyp64IMDhlnfh3EUr2eSqug==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":288,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":118,"pkt":"PBXCt3IO0NQSxnP1CABFAABoevJAAHMGmZVOyuJzwKgBInGDw+BU8I6P2EOgcIAYAQJFEgAAAQEICgJQybU+JMijUVyBgSx+3D54OuAo1D7iw4Aj0qjIUYJ++8pz3Q1JlsOrt2wLDGjPfXs6z2fx74aClNPxGg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":288,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Ui1AAEAG9Y7AqAEiTsric8PgcYPYQ6BwVPCOw4AQECoOmAAAAQEICj4kyPwCUMm1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":287,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0F6hAAEAGMBTAqAEiTsric8PfcYPq0omlOI9v9YARECpOcgAAAQEICj4kyPwCUMlG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":288,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABCXAdAAEAG66bAqAEiTsric8PgcYPYQ6BwVPCOw4AYECq9pwAAAQEICj4kyPwCUMm1+clsC12ooYX9dpbYV4c=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":287,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8STtAAEAG\/njAqAEiTsric8PfcYPq0omdOI9v9YAZECqe8QAAAQEICj4kyQsCUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":288,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABGevNAAHMGmbZOyuJzwKgBInGDw+BU8I7D2EOgfoAYAQJL7AAAAQEICgJQycA+JMj85B1AD7Yh11vFcRSt2PscRlCV","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":288,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0d4BAAEAG0DvAqAEiTsric8PgcYPYQ6B+VPCO1YAQECkOBgAAAQEICj4kyWQCUMnA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":286,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABatdFAAEAGRHvAqAEiUA4uecPeET+tjIfzG6N29YAYECmb+AAAAQEICj4kyWQAA1hifTbI4b849r0Z6HNaXt511AAet\/le4HJTHAL9N8aHdVz2tM4Ti8A=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":288,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABasxhAAEAGlH3AqAEiTsric8PgcYPYQ6B+VPCO1YAYECkXxgAAAQEICj4kyWQCUMnAUpcNCAW+AlT8l6ef3Tnus32Uj+I\/QBcb+Te0nPH79Jc0Kq8IQs0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":288,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0evRAAHMGmcdOyuJzwKgBInGDw+BU8I7V2EOgpIAQAQIc+gAAAQEICgJQyc0+JMlk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":286,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0on1AAHQGI\/VQDi55wKgBIhE\/w94bo3b1rYyIGYAQ\/0o5yAAAAQEICgADWHA+JMlk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":343,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJCU1AADQGY8lsoKouwKgBIgG7wSW4YerhqCbY\/oAYAFMsPwAAAQEICmF6\/gY+JA+bFwMBARBRsIUVtluB28k8lpRnoaHAkgqFggI6iW1s1iUDJUoyhFMxklZ9llYYBlOY86vzIvwmsgRjUNsCClCu3vq26xvnvKL1l3X4lGJq1B\/Sru+DjNBSP9Sky4joZeiKF51XPR6Sihyg1s6lj7+ChEEVUR6K5AciozdcZoNBvhzfY8ZtNcdypLffmc9fw\/YtnKHOTludBcIpTqNjmrnk1FRplFJak83p\/iYITDHQ55PhPFuhWej1qIftKp5wSdQtMUpvDRnO5uBpmAOy8TW548iNK4Sh6X12+Tx1ho4bioOlw4Gzf9OFhfrY2TYCrPeWu8qd+xNK+fGMwT42BNen8wEzXoFhQvgDBWP6qVOXeoDuVvWC7A==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Ps1AAEAGI17AqAEibKCqLsElAbuoJtj+uGHr9oAQD\/c8OwAAAQEICj4ky+1hev4G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1692{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":1020,"pkt":"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","pkt_caplen":1020,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":276,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969790,"pkt_len":190,"pkt":"0NQSxnP1PBXCt3IOCABFAACwp0FAAEAG\/tTAqAEinTg1L8PWMD5iE\/U4s4ZWnYAYECk9CAAAAQEICj4kzJNiCpP\/ou083U4OUyKG5W39Rls52kHB4seHtGFWOjnxH9vL96zo7s\/hrhePc7yngjP78uPjgBCPNClMUrhUfbjHZM1vl72+27X8ItWoRr+cMWFEKEXMETqEyhRTKZ3N68tnVQztCI2VGGc5XDXqlMlRkcFBPVHkMJHGNR6XiHbo9Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":276,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969791,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAohAhAADMGL5adODUvwKgBIjA+w9azhladAAAAAFAEAAAddgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":290,"flow_packet_id":1,"flow_first_seen":1431969791166,"flow_last_seen":1431969791166,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp"}
+0418{"flow_id":290,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969791,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA8JJAAEAGte\/AqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/hugAAAgQFtAEDAwUBAQgKPiTNeQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":287,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969791,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kjpAAEAGtXnAqAEiTsric8PfcYPq0omdOI9v9YAZECqaYQAAAQEICj4kzZsCUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":220,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969723753,"flow_tot_l4_data_len":803,"flow_min_l4_data_len":20,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50098,"dst_port":40026,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":220,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969723753,"flow_tot_l4_data_len":803,"flow_min_l4_data_len":20,"flow_max_l4_data_len":119,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":50098,"dst_port":40026,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":193,"flow_packet_id":17,"flow_first_seen":1431969689470,"flow_last_seen":1431969722520,"flow_tot_l4_data_len":743,"flow_min_l4_data_len":20,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50074,"dst_port":40003,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":193,"flow_packet_id":17,"flow_first_seen":1431969689470,"flow_last_seen":1431969722520,"flow_tot_l4_data_len":743,"flow_min_l4_data_len":20,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":50074,"dst_port":40003,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":199,"flow_packet_id":17,"flow_first_seen":1431969690481,"flow_last_seen":1431969722726,"flow_tot_l4_data_len":754,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50077,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":199,"flow_packet_id":17,"flow_first_seen":1431969690481,"flow_last_seen":1431969722726,"flow_tot_l4_data_len":754,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":50077,"dst_port":40022,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":219,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969722362,"flow_tot_l4_data_len":793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50097,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":219,"flow_packet_id":17,"flow_first_seen":1431969704664,"flow_last_seen":1431969722362,"flow_tot_l4_data_len":793,"flow_min_l4_data_len":20,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50097,"dst_port":40022,"l4_proto":"tcp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":268,"flow_packet_id":19,"flow_first_seen":1431969724570,"flow_last_seen":1431969725166,"flow_tot_l4_data_len":4453,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50131,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":268,"flow_packet_id":19,"flow_first_seen":1431969724570,"flow_last_seen":1431969725166,"flow_tot_l4_data_len":4453,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":234,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50131,"dst_port":13392,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":242,"flow_packet_id":15,"flow_first_seen":1431969714398,"flow_last_seen":1431969727593,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":20,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50112,"dst_port":20274,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":242,"flow_packet_id":15,"flow_first_seen":1431969714398,"flow_last_seen":1431969727593,"flow_tot_l4_data_len":744,"flow_min_l4_data_len":20,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50112,"dst_port":20274,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":255,"flow_packet_id":10,"flow_first_seen":1431969717949,"flow_last_seen":1431969723488,"flow_tot_l4_data_len":417,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50125,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":255,"flow_packet_id":10,"flow_first_seen":1431969717949,"flow_last_seen":1431969723488,"flow_tot_l4_data_len":417,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50125,"dst_port":12350,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":260,"flow_packet_id":10,"flow_first_seen":1431969719561,"flow_last_seen":1431969727878,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50129,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":260,"flow_packet_id":10,"flow_first_seen":1431969719561,"flow_last_seen":1431969727878,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":50129,"dst_port":12350,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":252,"flow_packet_id":18,"flow_first_seen":1431969717177,"flow_last_seen":1431969730486,"flow_tot_l4_data_len":894,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50123,"dst_port":4415,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":252,"flow_packet_id":18,"flow_first_seen":1431969717177,"flow_last_seen":1431969730486,"flow_tot_l4_data_len":894,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50123,"dst_port":4415,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":246,"flow_packet_id":19,"flow_first_seen":1431969714902,"flow_last_seen":1431969731550,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50116,"dst_port":17639,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":246,"flow_packet_id":19,"flow_first_seen":1431969714902,"flow_last_seen":1431969731550,"flow_tot_l4_data_len":864,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50116,"dst_port":17639,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":245,"flow_packet_id":17,"flow_first_seen":1431969714399,"flow_last_seen":1431969726002,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":121,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50115,"dst_port":59621,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":245,"flow_packet_id":17,"flow_first_seen":1431969714399,"flow_last_seen":1431969726002,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":121,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50115,"dst_port":59621,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":221,"flow_packet_id":16,"flow_first_seen":1431969705713,"flow_last_seen":1431969723790,"flow_tot_l4_data_len":811,"flow_min_l4_data_len":20,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50099,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":221,"flow_packet_id":16,"flow_first_seen":1431969705713,"flow_last_seen":1431969723790,"flow_tot_l4_data_len":811,"flow_min_l4_data_len":20,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":50099,"dst_port":40022,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":212,"flow_packet_id":18,"flow_first_seen":1431969697530,"flow_last_seen":1431969725781,"flow_tot_l4_data_len":782,"flow_min_l4_data_len":20,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50088,"dst_port":33033,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":212,"flow_packet_id":18,"flow_first_seen":1431969697530,"flow_last_seen":1431969725781,"flow_tot_l4_data_len":782,"flow_min_l4_data_len":20,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50088,"dst_port":33033,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":244,"flow_packet_id":18,"flow_first_seen":1431969714398,"flow_last_seen":1431969731992,"flow_tot_l4_data_len":790,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50114,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":244,"flow_packet_id":18,"flow_first_seen":1431969714398,"flow_last_seen":1431969731992,"flow_tot_l4_data_len":790,"flow_min_l4_data_len":20,"flow_max_l4_data_len":92,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50114,"dst_port":31010,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":215,"flow_packet_id":16,"flow_first_seen":1431969699142,"flow_last_seen":1431969728419,"flow_tot_l4_data_len":1204,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":215,"flow_packet_id":16,"flow_first_seen":1431969699142,"flow_last_seen":1431969728419,"flow_tot_l4_data_len":1204,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":50091,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":223,"flow_packet_id":15,"flow_first_seen":1431969706277,"flow_last_seen":1431969723613,"flow_tot_l4_data_len":1080,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":223,"flow_packet_id":15,"flow_first_seen":1431969706277,"flow_last_seen":1431969723613,"flow_tot_l4_data_len":1080,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":50101,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":210,"flow_packet_id":16,"flow_first_seen":1431969695483,"flow_last_seen":1431969723584,"flow_tot_l4_data_len":726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50086,"dst_port":40023,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":210,"flow_packet_id":16,"flow_first_seen":1431969695483,"flow_last_seen":1431969723584,"flow_tot_l4_data_len":726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":50086,"dst_port":40023,"l4_proto":"tcp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":270,"flow_packet_id":16,"flow_first_seen":1431969727446,"flow_last_seen":1431969727738,"flow_tot_l4_data_len":2056,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50133,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":270,"flow_packet_id":16,"flow_first_seen":1431969727446,"flow_last_seen":1431969727738,"flow_tot_l4_data_len":2056,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1384,"flow_avg_l4_data_len":128,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50133,"dst_port":13392,"l4_proto":"tcp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":251,"flow_packet_id":20,"flow_first_seen":1431969716182,"flow_last_seen":1431969728657,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":20,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50122,"dst_port":44431,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":251,"flow_packet_id":20,"flow_first_seen":1431969716182,"flow_last_seen":1431969728657,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":20,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50122,"dst_port":44431,"l4_proto":"tcp"}
+0417{"flow_id":290,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969792,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6r1AAEAGu8TAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/d0gAAAgQFtAEDAwUBAQgKPiTRYQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":285,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969792,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GDFAAEAG4jnAqAEiUA4uecPdET\/5wLpfrY8XW4AZECjrCQAAAQEICj4k0Z4AA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":291,"flow_packet_id":1,"flow_first_seen":1431969792778,"flow_last_seen":1431969792778,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50146,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":291,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969792,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABACyhAAEAGm1rAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/\/F2QAAAgQFtAEDAwUBAQgKPiTTwgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":290,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969793,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABATYlAAEAGWPnAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/Z6gAAAgQFtAEDAwUBAQgKPiTVSQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":287,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969793,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA810BAAEAGcHPAqAEiTsric8PfcYPq0omdOI9v9YAZECqSCAAAAQEICj4k1fQCUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":291,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969793,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXRdAAEAGSWvAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/\/B8AAAAgQFtAEDAwUBAQgKPiTXqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":292,"flow_packet_id":1,"flow_first_seen":1431969793871,"flow_last_seen":1431969793871,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55893,"dst_port":53,"l4_proto":"udp"}
+0406{"flow_id":292,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969793,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA68cwAAEARBXPAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":292,"flow_packet_id":1,"flow_first_seen":1431969793871,"flow_last_seen":1431969793871,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55893,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"ui.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0417{"flow_id":290,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969794,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAj1lAAEAGFynAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/WAgAAAgQFtAEDAwUBAQgKPiTZMQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":291,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969794,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/CFAAEAGqmDAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/++BwAAAgQFtAEDAwUBAQgKPiTblAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":279,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969794,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8W2xAAEAGL9jAqAEiTKehBsPXTzInl3b0mo2mjYAZECqpCwAAAQEICj4k3A++obtETjjGVAMHb58=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":292,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969794,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6ITcAAEAR1gjAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":290,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969795,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMhBAAEAGdHLAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/SGQAAAgQFtAEDAwUBAQgKPiTdGgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":291,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969795,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAEgtAAEAGlHfAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+6HgAAAgQFtAEDAwUBAQgKPiTffQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":292,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969796,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6focAAEAReLjAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":290,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969796,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABASbNAAEAGXM\/AqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/OMAAAAgQFtAEDAwUBAQgKPiThAwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":291,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969796,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAV05AAEAGTzTAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+2NQAAAgQFtAEDAwUBAQgKPiTjZgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":287,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969797,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UPBAAEAG9sPAqAEiTsric8PfcYPq0omdOI9v9YAZECqCHwAAAQEICj4k5d0CUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":285,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969797,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZsJAAEAGk6jAqAEiUA4uecPdET\/5wLpfrY8XW4AZECjVYAAAAQEICj4k50cAA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":291,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969797,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABADyZAAEAGl1zAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+yTAAAAgQFtAEDAwUBAQgKPiTnTwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":290,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969798,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAG95AAEAGiqTAqAEinTg1M8PhMD4fbaHhAAAAALAC\/\/\/GXwAAAgQFtAEDAwUBAQgKPiTo1AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":292,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969799,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6VP0AAEARokLAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":291,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969799,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgi9AAEAGJFPAqAEinTg1M8PiAbsrN9oxAAAAALAC\/\/+qewAAAgQFtAEDAwUBAQgKPiTvIAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":292,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969802,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6+ugAAEAR\/FbAqAEiwKgBAdpVADUAJgS+DhkBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":265,"flow_packet_id":17,"flow_first_seen":1431969722958,"flow_last_seen":1431969740384,"flow_tot_l4_data_len":802,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50130,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":265,"flow_packet_id":17,"flow_first_seen":1431969722958,"flow_last_seen":1431969740384,"flow_tot_l4_data_len":802,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":50130,"dst_port":13392,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":243,"flow_packet_id":14,"flow_first_seen":1431969714398,"flow_last_seen":1431969733216,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":20,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50113,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":243,"flow_packet_id":14,"flow_first_seen":1431969714398,"flow_last_seen":1431969733216,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":20,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50113,"dst_port":18767,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":269,"flow_packet_id":18,"flow_first_seen":1431969725833,"flow_last_seen":1431969741920,"flow_tot_l4_data_len":800,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50132,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":269,"flow_packet_id":18,"flow_first_seen":1431969725833,"flow_last_seen":1431969741920,"flow_tot_l4_data_len":800,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":50132,"dst_port":13392,"l4_proto":"tcp"}
+0396{"flow_id":290,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969802,"pkt_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAAAwHcFAAEAGiNHAqAEinTg1M8PhMD4fbaHhAAAAAHAC\/\/86fAAAAgQFtAQCAAA=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":287,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969803,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8AztAAEAGRHnAqAEiTsric8PfcYPq0omdOI9v9YAZECprlwAAAQEICj4k\/GUCUMlGXTwVWHHTywE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":291,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969803,"pkt_len":62,"pkt":"0NQSxnP1PBXCt3IOCABFAAAwuxNAAEAG637AqAEinTg1M8PiAbsrN9oxAAAAAHAC\/\/8k5AAAAgQFtAQCAAA=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969807,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969807,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISO+0AAEARuHzAqAEiwKgB\/0RcRFwB\/jf1eyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":288,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969807,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HSRAAEAGKpjAqAEiTsric8PgcYPYQ6CkVPCO1YARECnK3QAAAQEICj4lDFgCUMnN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":288,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969807,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gkhAAEAGxXPAqAEiTsric8PgcYPYQ6CkVPCO1YARECnJNgAAAQEICj4lDf8CUMnN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":288,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969808,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OwJAAEAGDLrAqAEiTsric8PgcYPYQ6CkVPCO1YARECnGsgAAAQEICj4lEIMCUMnN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":285,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","pkt_oversize":false,"pkt_ts":1431969808,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8us9AAEAGP5vAqAEiUA4uecPdET\/5wLpfrY8XW4AZECiq1wAAAQEICj4lEdAAA1guNacy1AseEXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":3,"flow_packet_id":8,"flow_first_seen":1431969642087,"flow_last_seen":1431969695591,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52850,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":149,"flow_packet_id":7,"flow_first_seen":1431969675950,"flow_last_seen":1431969702405,"flow_tot_l4_data_len":413,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63108,"dst_port":53,"l4_proto":"udp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":287,"flow_packet_id":14,"flow_first_seen":1431969788719,"flow_last_seen":1431969803191,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50143,"dst_port":29059,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":287,"flow_packet_id":14,"flow_first_seen":1431969788719,"flow_last_seen":1431969803191,"flow_tot_l4_data_len":656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50143,"dst_port":29059,"l4_proto":"tcp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":288,"flow_packet_id":14,"flow_first_seen":1431969789832,"flow_last_seen":1431969808350,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":32,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50144,"dst_port":29059,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":288,"flow_packet_id":14,"flow_first_seen":1431969789832,"flow_last_seen":1431969808350,"flow_tot_l4_data_len":663,"flow_min_l4_data_len":32,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"78.202.226.115","src_port":50144,"dst_port":29059,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.21","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.45","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.26","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.47","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.37","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":213,"flow_packet_id":2,"flow_first_seen":1431969698743,"flow_last_seen":1431969698797,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63321,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":148,"flow_packet_id":7,"flow_first_seen":1431969675950,"flow_last_seen":1431969702405,"flow_tot_l4_data_len":413,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55159,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1431969642247,"flow_last_seen":1431969668794,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65426,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":226,"flow_packet_id":472,"flow_first_seen":1431969710853,"flow_last_seen":1431969807279,"flow_tot_l4_data_len":148579,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":314,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":50108,"dst_port":40009,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":227,"flow_packet_id":2,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":140,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":49485,"dst_port":1900,"l4_proto":"udp"}
+0433{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":230,"flow_packet_id":8,"flow_first_seen":1431969712918,"flow_last_seen":1431969747557,"flow_tot_l4_data_len":384,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":266,"flow_packet_id":7,"flow_first_seen":1431969723979,"flow_last_seen":1431969750316,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63421,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":46,"flow_packet_id":5,"flow_first_seen":1431969657029,"flow_last_seen":1431969777184,"flow_tot_l4_data_len":2550,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1431969656652,"flow_last_seen":1431969807022,"flow_tot_l4_data_len":3060,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":13,"flow_packet_id":7,"flow_first_seen":1431969642398,"flow_last_seen":1431969668794,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57288,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":289,"flow_packet_id":1,"flow_first_seen":1431969789851,"flow_last_seen":1431969789851,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"224.0.0.251","l4_proto":2}
+0424{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":277,"flow_packet_id":1,"flow_first_seen":1431969751302,"flow_last_seen":1431969751302,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"224.0.0.1","l4_proto":2}
+0422{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431969665006,"flow_last_seen":1431969665006,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","l4_proto":2}
+0422{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":92,"flow_packet_id":2,"flow_first_seen":1431969664357,"flow_last_seen":1431969789358,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":229,"flow_packet_id":4,"flow_first_seen":1431969712913,"flow_last_seen":1431969714738,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54067,"dst_port":5351,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":229,"flow_packet_id":4,"flow_first_seen":1431969712913,"flow_last_seen":1431969714738,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54067,"dst_port":5351,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1431969641947,"flow_last_seen":1431969668369,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49163,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":1,"flow_packet_id":7,"flow_first_seen":1431969641948,"flow_last_seen":1431969668369,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57406,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431969692507,"flow_last_seen":1431969692507,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":1431969688514,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":47,"flow_packet_id":5,"flow_first_seen":1431969657029,"flow_last_seen":1431969777185,"flow_tot_l4_data_len":2550,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":45,"flow_packet_id":6,"flow_first_seen":1431969656652,"flow_last_seen":1431969807022,"flow_tot_l4_data_len":3060,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":259,"flow_packet_id":86,"flow_first_seen":1431969719110,"flow_last_seen":1431969765415,"flow_tot_l4_data_len":17270,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":200,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":50128,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":157,"flow_packet_id":7,"flow_first_seen":1431969677975,"flow_last_seen":1431969704363,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49360,"dst_port":53,"l4_proto":"udp"}
+0586{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":238,"flow_packet_id":4,"flow_first_seen":1431969713815,"flow_last_seen":1431969726847,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":""}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":238,"flow_packet_id":4,"flow_first_seen":1431969713815,"flow_last_seen":1431969726847,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":279,"flow_packet_id":14,"flow_first_seen":1431969770694,"flow_last_seen":1431969794907,"flow_tot_l4_data_len":632,"flow_min_l4_data_len":32,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50135,"dst_port":20274,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":279,"flow_packet_id":14,"flow_first_seen":1431969770694,"flow_last_seen":1431969794907,"flow_tot_l4_data_len":632,"flow_min_l4_data_len":32,"flow_max_l4_data_len":96,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50135,"dst_port":20274,"l4_proto":"tcp"}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":284,"flow_packet_id":3,"flow_first_seen":1431969774806,"flow_last_seen":1431969776480,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50140,"dst_port":20274,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":284,"flow_packet_id":3,"flow_first_seen":1431969774806,"flow_last_seen":1431969776480,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":50140,"dst_port":20274,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":272,"flow_packet_id":1,"flow_first_seen":1431969735255,"flow_last_seen":1431969735255,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"106.188.249.186","src_port":13021,"dst_port":15120,"l4_proto":"udp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":256,"flow_packet_id":20,"flow_first_seen":1431969717949,"flow_last_seen":1431969750910,"flow_tot_l4_data_len":4474,"flow_min_l4_data_len":20,"flow_max_l4_data_len":364,"flow_avg_l4_data_len":223,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.23","src_port":50126,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":256,"flow_packet_id":20,"flow_first_seen":1431969717949,"flow_last_seen":1431969750910,"flow_tot_l4_data_len":4474,"flow_min_l4_data_len":20,"flow_max_l4_data_len":364,"flow_avg_l4_data_len":223,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.23","src_port":50126,"dst_port":12350,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":20,"flow_packet_id":7,"flow_first_seen":1431969643972,"flow_last_seen":1431969670410,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57726,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":2,"flow_packet_id":8,"flow_first_seen":1431969642087,"flow_last_seen":1431969695591,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55711,"dst_port":53,"l4_proto":"udp"}
+0577{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":237,"flow_packet_id":4,"flow_first_seen":1431969713814,"flow_last_seen":1431969726846,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":""}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":237,"flow_packet_id":4,"flow_first_seen":1431969713814,"flow_last_seen":1431969726846,"flow_tot_l4_data_len":692,"flow_min_l4_data_len":173,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":120,"flow_packet_id":5,"flow_first_seen":1431969668503,"flow_last_seen":1431969788519,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":271,"flow_packet_id":14,"flow_first_seen":1431969728749,"flow_last_seen":1431969734854,"flow_tot_l4_data_len":6805,"flow_min_l4_data_len":441,"flow_max_l4_data_len":521,"flow_avg_l4_data_len":486,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"239.255.255.250","src_port":50084,"dst_port":1900,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":22,"flow_packet_id":16,"flow_first_seen":1431969649862,"flow_last_seen":1431969790906,"flow_tot_l4_data_len":5436,"flow_min_l4_data_len":32,"flow_max_l4_data_len":986,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.170.46","dst_ip":"192.168.1.34","src_port":443,"dst_port":49445,"l4_proto":"tcp","ndpi": {"proto":"TLS.Dropbox","category":"Cloud"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":22,"flow_packet_id":16,"flow_first_seen":1431969649862,"flow_last_seen":1431969790906,"flow_tot_l4_data_len":5436,"flow_min_l4_data_len":32,"flow_max_l4_data_len":986,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.170.46","dst_ip":"192.168.1.34","src_port":443,"dst_port":49445,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":292,"flow_packet_id":5,"flow_first_seen":1431969793871,"flow_last_seen":1431969802019,"flow_tot_l4_data_len":190,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55893,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1431969642318,"flow_last_seen":1431969642376,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64085,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":264,"flow_packet_id":7,"flow_first_seen":1431969721954,"flow_last_seen":1431969748263,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51802,"dst_port":53,"l4_proto":"udp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":247,"flow_packet_id":43,"flow_first_seen":1431969715510,"flow_last_seen":1431969755612,"flow_tot_l4_data_len":4286,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50117,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":247,"flow_packet_id":43,"flow_first_seen":1431969715510,"flow_last_seen":1431969755612,"flow_tot_l4_data_len":4286,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50117,"dst_port":18767,"l4_proto":"tcp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":257,"flow_packet_id":27,"flow_first_seen":1431969718289,"flow_last_seen":1431969752365,"flow_tot_l4_data_len":1180,"flow_min_l4_data_len":32,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50127,"dst_port":4415,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":257,"flow_packet_id":27,"flow_first_seen":1431969718289,"flow_last_seen":1431969752365,"flow_tot_l4_data_len":1180,"flow_min_l4_data_len":32,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50127,"dst_port":4415,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":21,"flow_packet_id":79,"flow_first_seen":1431969648258,"flow_last_seen":1431969808391,"flow_tot_l4_data_len":26793,"flow_min_l4_data_len":293,"flow_max_l4_data_len":371,"flow_avg_l4_data_len":339,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":285,"flow_packet_id":15,"flow_first_seen":1431969783628,"flow_last_seen":1431969808684,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":32,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50141,"dst_port":4415,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":285,"flow_packet_id":15,"flow_first_seen":1431969783628,"flow_last_seen":1431969808684,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":32,"flow_max_l4_data_len":131,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50141,"dst_port":4415,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.141","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.150","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0504{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":286,"flow_packet_id":18,"flow_first_seen":1431969784741,"flow_last_seen":1431969808951,"flow_tot_l4_data_len":862,"flow_min_l4_data_len":32,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50142,"dst_port":4415,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":286,"flow_packet_id":18,"flow_first_seen":1431969784741,"flow_last_seen":1431969808951,"flow_tot_l4_data_len":862,"flow_min_l4_data_len":32,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.14.46.121","src_port":50142,"dst_port":4415,"l4_proto":"tcp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":280,"flow_packet_id":14,"flow_first_seen":1431969770694,"flow_last_seen":1431969789490,"flow_tot_l4_data_len":625,"flow_min_l4_data_len":20,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50136,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":280,"flow_packet_id":14,"flow_first_seen":1431969770694,"flow_last_seen":1431969789490,"flow_tot_l4_data_len":625,"flow_min_l4_data_len":20,"flow_max_l4_data_len":101,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50136,"dst_port":18767,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.168","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":282,"flow_packet_id":32,"flow_first_seen":1431969771806,"flow_last_seen":1431969808100,"flow_tot_l4_data_len":3884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50138,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":282,"flow_packet_id":32,"flow_first_seen":1431969771806,"flow_last_seen":1431969808100,"flow_tot_l4_data_len":3884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":50138,"dst_port":18767,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431969652367,"flow_last_seen":1431969652367,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":9,"flow_packet_id":7,"flow_first_seen":1431969642337,"flow_last_seen":1431969668794,"flow_tot_l4_data_len":294,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49793,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":1431969682488,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":274,"flow_packet_id":2,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":140,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":64560,"dst_port":1900,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1431969643037,"flow_last_seen":1431969643092,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51879,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":241,"flow_packet_id":20,"flow_first_seen":1431969714165,"flow_last_seen":1431969745160,"flow_tot_l4_data_len":804,"flow_min_l4_data_len":20,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":241,"flow_packet_id":20,"flow_first_seen":1431969714165,"flow_last_seen":1431969745160,"flow_tot_l4_data_len":804,"flow_min_l4_data_len":20,"flow_max_l4_data_len":347,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":50111,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":1431969713965,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.39","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":15,"flow_packet_id":9,"flow_first_seen":1431969642969,"flow_last_seen":1431969723490,"flow_tot_l4_data_len":342,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49903,"dst_port":53,"l4_proto":"udp"}
+0508{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":250,"flow_packet_id":40,"flow_first_seen":1431969716015,"flow_last_seen":1431969752089,"flow_tot_l4_data_len":4249,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1156,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50121,"dst_port":17639,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":250,"flow_packet_id":40,"flow_first_seen":1431969716015,"flow_last_seen":1431969752089,"flow_tot_l4_data_len":4249,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1156,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":50121,"dst_port":17639,"l4_proto":"tcp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":249,"flow_packet_id":100,"flow_first_seen":1431969715511,"flow_last_seen":1431969808618,"flow_tot_l4_data_len":8866,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1215,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50119,"dst_port":59621,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":249,"flow_packet_id":100,"flow_first_seen":1431969715511,"flow_last_seen":1431969808618,"flow_tot_l4_data_len":8866,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1215,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"86.31.35.30","src_port":50119,"dst_port":59621,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431969713965,"flow_last_seen":1431969713965,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.145","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":12,"flow_packet_id":7,"flow_first_seen":1431969642398,"flow_last_seen":1431969668794,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49990,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":19,"flow_packet_id":7,"flow_first_seen":1431969643971,"flow_last_seen":1431969670410,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60288,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":1431969672489,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":1431969655399,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":1431969668393,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.62.0.85","src_port":13021,"dst_port":33647,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.168","src_port":13021,"dst_port":40007,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":254,"flow_packet_id":12,"flow_first_seen":1431969717899,"flow_last_seen":1431969784849,"flow_tot_l4_data_len":1469,"flow_min_l4_data_len":32,"flow_max_l4_data_len":437,"flow_avg_l4_data_len":122,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.22","dst_ip":"192.168.1.34","src_port":5223,"dst_port":49447,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431969688514,"flow_last_seen":1431969688514,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":1431969670418,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.32","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.172","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.166","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431969713813,"flow_last_seen":1431969713813,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.97.100.249","src_port":13021,"dst_port":26635,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431969682488,"flow_last_seen":1431969682488,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":1431969684467,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.176","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":1431969676429,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.141","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431969685484,"flow_last_seen":1431969685484,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.31","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.17","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":1431969657368,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.153","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":1431969686494,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.29","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431969655400,"flow_last_seen":1431969655400,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":276,"flow_packet_id":15,"flow_first_seen":1431969750597,"flow_last_seen":1431969791165,"flow_tot_l4_data_len":1404,"flow_min_l4_data_len":20,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.47","src_port":50134,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":276,"flow_packet_id":15,"flow_first_seen":1431969750597,"flow_last_seen":1431969791165,"flow_tot_l4_data_len":1404,"flow_min_l4_data_len":20,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.47","src_port":50134,"dst_port":12350,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431969657367,"flow_last_seen":1431969657367,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431969657368,"flow_last_seen":1431969657368,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.25","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.148","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":1431969685483,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.12","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431969661414,"flow_last_seen":1431969661414,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.16","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0503{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":290,"flow_packet_id":8,"flow_first_seen":1431969791166,"flow_last_seen":1431969802183,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":28,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":290,"flow_packet_id":8,"flow_first_seen":1431969791166,"flow_last_seen":1431969802183,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":28,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50145,"dst_port":12350,"l4_proto":"tcp"}
+0509{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":248,"flow_packet_id":31,"flow_first_seen":1431969715511,"flow_last_seen":1431969755484,"flow_tot_l4_data_len":3634,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50118,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":248,"flow_packet_id":31,"flow_first_seen":1431969715511,"flow_last_seen":1431969755484,"flow_tot_l4_data_len":3634,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50118,"dst_port":31010,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":258,"flow_packet_id":2,"flow_first_seen":1431969719055,"flow_last_seen":1431969719110,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":67,"flow_max_l4_data_len":99,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62454,"dst_port":53,"l4_proto":"udp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":281,"flow_packet_id":18,"flow_first_seen":1431969770694,"flow_last_seen":1431969788429,"flow_tot_l4_data_len":833,"flow_min_l4_data_len":20,"flow_max_l4_data_len":114,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50137,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":281,"flow_packet_id":18,"flow_first_seen":1431969770694,"flow_last_seen":1431969788429,"flow_tot_l4_data_len":833,"flow_min_l4_data_len":20,"flow_max_l4_data_len":114,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50137,"dst_port":31010,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":175,"flow_packet_id":7,"flow_first_seen":1431969683445,"flow_last_seen":1431969709776,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58368,"dst_port":53,"l4_proto":"udp"}
+0509{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":283,"flow_packet_id":23,"flow_first_seen":1431969771806,"flow_last_seen":1431969808841,"flow_tot_l4_data_len":3337,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50139,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":283,"flow_packet_id":23,"flow_first_seen":1431969771806,"flow_last_seen":1431969808841,"flow_tot_l4_data_len":3337,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":50139,"dst_port":31010,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":262,"flow_packet_id":7,"flow_first_seen":1431969720556,"flow_last_seen":1431969746803,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":56387,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":174,"flow_packet_id":7,"flow_first_seen":1431969683445,"flow_last_seen":1431969709776,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54343,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":156,"flow_packet_id":7,"flow_first_seen":1431969677975,"flow_last_seen":1431969704363,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58458,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":4,"flow_packet_id":7,"flow_first_seen":1431969642244,"flow_last_seen":1431969668794,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":54396,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":273,"flow_packet_id":2,"flow_first_seen":1431969745776,"flow_last_seen":1431969745776,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":140,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":56886,"dst_port":1900,"l4_proto":"udp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":14,"flow_packet_id":387,"flow_first_seen":1431969642444,"flow_last_seen":1431969808620,"flow_tot_l4_data_len":184932,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":477,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":50028,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":234,"flow_packet_id":5,"flow_first_seen":1431969713813,"flow_last_seen":1431969733946,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.185.207.12","src_port":13021,"dst_port":45493,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":278,"flow_packet_id":2,"flow_first_seen":1431969759543,"flow_last_seen":1431969759588,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.253.48.245","src_port":123,"dst_port":123,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1431969642334,"flow_last_seen":1431969642400,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":67,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58681,"dst_port":53,"l4_proto":"udp"}
+0509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":291,"flow_packet_id":8,"flow_first_seen":1431969792778,"flow_last_seen":1431969803795,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":28,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50146,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":291,"flow_packet_id":8,"flow_first_seen":1431969792778,"flow_last_seen":1431969803795,"flow_tot_l4_data_len":336,"flow_min_l4_data_len":28,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.53.51","src_port":50146,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40002,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":1431969678448,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.26","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.29","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.38","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431969675413,"flow_last_seen":1431969675413,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.21","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431969666429,"flow_last_seen":1431969666429,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.41","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.25","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0505{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":253,"flow_packet_id":22,"flow_first_seen":1431969717295,"flow_last_seen":1431969788791,"flow_tot_l4_data_len":888,"flow_min_l4_data_len":20,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50124,"dst_port":44431,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":253,"flow_packet_id":22,"flow_first_seen":1431969717295,"flow_last_seen":1431969788791,"flow_tot_l4_data_len":888,"flow_min_l4_data_len":20,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.133.19.185","src_port":50124,"dst_port":44431,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":233,"flow_packet_id":5,"flow_first_seen":1431969713813,"flow_last_seen":1431969733946,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"176.26.55.167","src_port":13021,"dst_port":63773,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.162","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431969659392,"flow_last_seen":1431969659392,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40005,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.168","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":1431969680467,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.148","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.157","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431969671427,"flow_last_seen":1431969671427,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.161","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.173","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431969658376,"flow_last_seen":1431969658376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.175","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431969687504,"flow_last_seen":1431969687504,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.151","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431969668393,"flow_last_seen":1431969668393,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.143","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431969684467,"flow_last_seen":1431969684467,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.172","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431969686494,"flow_last_seen":1431969686494,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.147","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431969683498,"flow_last_seen":1431969683498,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431969690481,"flow_last_seen":1431969690481,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.165","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431969676429,"flow_last_seen":1431969676429,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431969653376,"flow_last_seen":1431969653376,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.155","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.159","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431969678448,"flow_last_seen":1431969678448,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.145","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.166","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431969654389,"flow_last_seen":1431969654389,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431969673443,"flow_last_seen":1431969673443,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.153","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431969667440,"flow_last_seen":1431969667440,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.142","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431969677439,"flow_last_seen":1431969677439,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":1431969674456,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":228,"flow_packet_id":2,"flow_first_seen":1431969712913,"flow_last_seen":1431969712913,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":140,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":51066,"dst_port":1900,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431969665416,"flow_last_seen":1431969665416,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431969662422,"flow_last_seen":1431969662422,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.151","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431969656410,"flow_last_seen":1431969656410,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431969660403,"flow_last_seen":1431969660403,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431969680467,"flow_last_seen":1431969680467,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431969685483,"flow_last_seen":1431969685483,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40034,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431969672489,"flow_last_seen":1431969672489,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40034,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":263,"flow_packet_id":7,"flow_first_seen":1431969721954,"flow_last_seen":1431969748262,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52714,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431969663378,"flow_last_seen":1431969663378,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431969655399,"flow_last_seen":1431969655399,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.150","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.168","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431969664405,"flow_last_seen":1431969664405,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40007,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":261,"flow_packet_id":7,"flow_first_seen":1431969720556,"flow_last_seen":1431969746803,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":52742,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431969679455,"flow_last_seen":1431969679455,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.170","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431969667439,"flow_last_seen":1431969667439,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":267,"flow_packet_id":7,"flow_first_seen":1431969723979,"flow_last_seen":1431969750316,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65037,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431969674456,"flow_last_seen":1431969674456,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431969689470,"flow_last_seen":1431969689470,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.152","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":10,"flow_packet_id":7,"flow_first_seen":1431969642337,"flow_last_seen":1431969668794,"flow_tot_l4_data_len":294,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":65045,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431969691496,"flow_last_seen":1431969691496,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":275,"flow_packet_id":4,"flow_first_seen":1431969745776,"flow_last_seen":1431969747554,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49511,"dst_port":5351,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":275,"flow_packet_id":4,"flow_first_seen":1431969745776,"flow_last_seen":1431969747554,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49511,"dst_port":5351,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431969681480,"flow_last_seen":1431969681480,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.162","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431969670418,"flow_last_seen":1431969670418,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431969669408,"flow_last_seen":1431969669408,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40034,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype.pcap"}
diff --git a/tests/result/nDPId_skype_no_unknown.pcap.txt b/tests/result/nDPId_skype_no_unknown.pcap.txt
new file mode 100644
index 000000000..e3851769c
--- /dev/null
+++ b/tests/result/nDPId_skype_no_unknown.pcap.txt
@@ -0,0 +1,2166 @@
+0368{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0432{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431970632290,"flow_last_seen":1431970632290,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"224.0.0.22","l4_proto":2}
+0397{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970632,"pkt_len":60,"pkt":"AQBeAAAWJKQ8\/kzXCABGwAAoAABAAAECQXbAqAHb4AAAFpQEAAAiADajAAAAAQIAAADpWbwBAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431970632290,"flow_last_seen":1431970632290,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":1431970634276,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55028,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAj1gAAEARZ+HAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":1431970634276,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55028,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"a.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":1431970634276,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64971,"dst_port":53,"l4_proto":"udp"}
+0421{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAlRoAAEARYh\/AqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431970634276,"flow_last_seen":1431970634276,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64971,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"a.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431970634431,"flow_last_seen":1431970634431,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60688,"dst_port":53,"l4_proto":"udp"}
+0426{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDXEcAAEARmu\/AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1431970634431,"flow_last_seen":1431970634431,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60688,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431970634432,"flow_last_seen":1431970634432,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58631,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDrh8AAEARSRfAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1431970634432,"flow_last_seen":1431970634432,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"conn.skype.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431970634589,"flow_last_seen":1431970634589,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64240,"dst_port":53,"l4_proto":"udp"}
+0416{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7UlwAAEARpOLAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1431970634589,"flow_last_seen":1431970634589,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64240,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431970634591,"flow_last_seen":1431970634591,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49864,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA75y8AAEAREA\/AqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1431970634591,"flow_last_seen":1431970634591,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49864,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"api.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431970634648,"flow_last_seen":1431970634648,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61016,"dst_port":53,"l4_proto":"udp"}
+0425{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABCEa4AAEAR5YnAqAEiwKgBAe5YADUALntuuqkBAAABAAAAAAAABGFwcHMLc2t5cGVhc3NldHMDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431970634648,"flow_last_seen":1431970634648,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61016,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"apps.skypeassets.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431970634669,"flow_last_seen":1431970634669,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp"}
+0456{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXFu0AAEAR4DXAqAEiwKgBAeFeADUAQ\/HxjTUBAAABAAAAAAAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAE=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1431970634669,"flow_last_seen":1431970634669,"flow_tot_l4_data_len":67,"flow_min_l4_data_len":67,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0543{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":166,"pkt":"PBXCt3IO0NQSxnP1CABFAACYAABAAEARtuHAqAEBwKgBIgA14V4AhKxSjTWBgAABAAAAAQAADkRCM01TR1I1MDExNzA5B2dhdGV3YXkJbWVzc2VuZ2VyBGxpdmUDY29tAAAcAAHALQAGAAEAAAbhADUDbnMxBG1zZnQDbmV0AAZtc25oc3QJbWljcm9zb2Z0wDJ4Gz7uAAAcIAAAA4QAJOoAAAAOEA==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1431970634669,"flow_last_seen":1431970634723,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":67,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"db3msgr5011709.gateway.messenger.live.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1431970634728,"flow_last_seen":1431970634728,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51229,"dst_port":40009,"l4_proto":"tcp"}
+0423{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABADqBAAEAGmPnAqAEinTg0HMgdnEkK2QRYAAAAALAC\/\/9q8wAAAgQFtAEDAwUBAQgKPjGHIQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431970634728,"flow_last_seen":1431970634728,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62875,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/L\/oAAEARx0DAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1431970634728,"flow_last_seen":1431970634728,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62875,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"dsn13.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431970634729,"flow_last_seen":1431970634729,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59113,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/lFMAAEARYufAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1431970634729,"flow_last_seen":1431970634729,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59113,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"dsn13.d.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1431970634729,"flow_last_seen":1431970634729,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAt4dAAEAGpVrAqAEinTh+08geAbsxSRU0AAAAALAC\/\/+DfQAAAgQFtAEDAwUBAQgKPjGHIQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431970634730,"flow_last_seen":1431970634730,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57592,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLIWAAAEAR1c7AqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1431970634730,"flow_last_seen":1431970634730,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57592,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst11.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431970634731,"flow_last_seen":1431970634731,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":53372,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL+hcAAEAR\/RbAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1431970634731,"flow_last_seen":1431970634731,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":53372,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst11.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0414{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":70,"pkt":"PBXCt3IO0NQSxnP1CABFAAA4BUNAAHYGIaedOH7TwKgBIgG7yB4Nim5XMUkVNZASIABVdAAAAgQFrAQCCAoZLZ4CPjGHIQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/VlAAEAGX5TAqAEinTh+08geAbsxSRU1DYpuWIAQ\/\/+P3gAAAQEICj4xh20ZLZ4C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":160,"pkt":"0NQSxnP1PBXCt3IOCABFAACSvDJAAEAGoF3AqAEinTh+08geAbsxSRU1DYpuWIAY\/\/9YPAAAAQEICj4xh4gZLZ4CFgMBAFkBAABVAwF2gnUJnVCWWbyDtFIDg6B8bhQi3kG6KGexUdynVrU4nwAALsAKwAXACcAEwAfAAsAIwAPAFMAPwBPADsARwAzAEsANADkAMwA1AC8ABQAEAAoBAA==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1431970634729,"flow_last_seen":1431970634832,"flow_tot_l4_data_len":238,"flow_min_l4_data_len":32,"flow_max_l4_data_len":126,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2340{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":86,"pkt":"PBXCt3IO0NQSxnP1CABFAABICBdAAHYGHsOdOH7TwKgBIgG7yB4NinP4MUkVk4AY\/SDRYwAAAQEIChktngw+MYeIMUuJaVUXCwA66lzZMRkm0xM\/nV8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pUhAAEAGt6XAqAEinTh+08geAbsxSRWTDYp0DIAQ\/\/+JVgAAAQEICj4xh9kZLZ4M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtJ2dODQcwKgBIpxJyB3uE3m5CtkEWaASOJCk1gAAAgQFrAQCCApMX+pXPjGHIQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Qp9AAEAGZQbAqAEinTg0HMgdnEkK2QRZ7hN5uoAQECz7NQAAAQEICj4xh+xMX+pX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":157,"pkt":"0NQSxnP1PBXCt3IOCABFAACPS55AAEAGW6zAqAEinTg0HMgdnEkK2QRZ7hN5uoAYECyExgAAAQEICj4xh+xMX+pXEDaxqNNs94bJX3MjOodsEDM88DACObmxILHLguZFB4dasZ4qWIC3URykkoTC6unHwssAce4HDA3aA9hphr9khfI7sGEed7z9CnOIWbYvFHUiq2BRTuds7TrjOA==","pkt_caplen":157,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1488{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":864,"pkt":"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","pkt_caplen":864,"pkt_type":2048,"pkt_ipoffset":14}
+1184{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":12,"flow_packet_id":9,"flow_first_seen":1431970634729,"flow_last_seen":1431970634990,"flow_tot_l4_data_len":4096,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":455,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.gateway.messenger.live.com,*.beta.gateway.edge.messenger.live.com,*.by2.gateway.edge.messenger.live.com,*.sn1.gateway.edge.messenger.live.com","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"5e4e5596180ebd0ac0317125ee490707","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2","issuerDN":"CN=*.gateway.messenger.live.com","fingerprint":"95:C4:07:41:85:D4:EF:AA:D9:1F:0F:1F:3C:08:BF:8E:8B:D0:90:51"}}
+0409{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970634,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tBlAAEAGqNTAqAEinTh+08geAbsxSRWTDYp8yoAQ\/\/+ARgAAAQEICj4xiCMZLZ4U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":173,"pkt":"0NQSxnP1PBXCt3IOCABFAACfFfJAAEAGRpHAqAEinTh+08geAbsxSRWTDYp8yoAY\/\/8YnwAAAQEICj4xiDMZLZ4UFgMBAGYQAABiYQSrq03YfHFl820bvS6W0Qg6ooFgejoxhjE8+5PigHKrLNmVczXJQCrkQ4zH0r4Tyq5CcJvbEQQ6XgJDw4iF3in7mO06MpCaUPpZUq2g8z5yNwkoaNsdB2jO9aO23OTlK6Y=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kzBAADMGIXWdODQcwKgBIpxJyB3uE3m6CtkEtIAQAB0KtwAAAQEICkxf6oo+MYfs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":141,"pkt":"PBXCt3IO0NQSxnP1CABFAAB\/kzFAADMGISmdODQcwKgBIpxJyB3uE3m6CtkEtIAYAB19AwAAAQEICkxf6oo+MYfs4bm06ALsmkjmvEJD\/Xp7DzZunLSFeNePGP146Ow0dUADTK8nymrof0\/nApzsTykmMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tT1AAEAG8mfAqAEinTg0HMgdnEkK2QS07hN6BYAQECn5kwAAAQEICj4xiLhMX+qK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8y75AAEAG297AqAEinTg0HMgdnEkK2QS07hN6BYAYECkGOAAAAQEICj4xiLhMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0FXVAAHYGEXmdOH7TwKgBIgG7yB4NinzKMUkV\/oAQ\/LWC9gAAAQEIChktnjM+MYgz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":125,"pkt":"0NQSxnP1PBXCt3IOCABFAABv\/ThAAEAGX3rAqAEinTh+08geAbsxSRX+DYp8yoAY\/\/9rIgAAAQEICj4xiVAZLZ4zFAMBAAEBFgMBADBQZqpRu3lF7RSGvtBgMw1mSnNGu4DvBvveLkv5kkOygzRoC+lc04nMGjZN3fCN3gs=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431970635325,"flow_last_seen":1431970635325,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63514,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA657QAAEARD4vAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1431970635325,"flow_last_seen":1431970635325,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63514,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"ui.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0491{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":125,"pkt":"PBXCt3IO0NQSxnP1CABFAABvF85AAHYGDuWdOH7TwKgBIgG7yB4NinzKMUkWOYAY\/Ho6CgAAAQEIChktnjk+MYlQFAMBAAEBFgMBADAE6Vbf2ar\/mJLYKulsBWZHlkQ4OKZ3utTO4lzLpQZ4uuQKcuuOHkCvyMCCR6EuLpw=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w0pAAEAGmaPAqAEinTh+08geAbsxSRY5DYp9BYAQ\/\/99yQAAAQEICj4xiZoZLZ45","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA4MoAAEARFm\/AqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWkkAAEARnPDAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431970635433,"flow_last_seen":1431970635433,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABECpEAAEAR7KTAqAEiwKgBAfitADUAMI+fhgYBAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1431970635433,"flow_last_seen":1431970635433,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0450{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":98,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA1+K0AQBV0hgaBgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAMABBfOIaY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1431970635433,"flow_last_seen":1431970635489,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1431970635489,"flow_last_seen":1431970635489,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51231,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAPS1AAEAGAk3AqAEiF84hpsgfAbv4Tz2XAAAAALAC\/\/9zuAAAAgQFtAEDAwUBAQgKPjGKEwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDdt0AAEARgFnAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDiigAAEARbQ7AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7yB8YNTxd+E89mKASOJCdjgAAAgQFrAQCCArsPW3FPjGKEwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0P2xAAEAGABrAqAEiF84hpsgfAbv4Tz2YGDU8XoAQECz0iAAAAQEICj4xij\/sPW3F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADta4RAAEAG00jAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwtoAAAAQEICj4xikDsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0764{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1431970635489,"flow_last_seen":1431970635535,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":32,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51231,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apps.skype.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0417{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA762oAAEARC9TAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7\/zoAAEAR+APAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/rmUAAEARSNXAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/dFsAAEARgt\/AqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLWNIAAEARnlzAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLGiMAAEAR3QvAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970635,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtH0JAAEAGH4vAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwsUwAAAQEICj4xi43sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1431970636044,"flow_last_seen":1431970636044,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":229,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":229,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.149","dst_ip":"192.168.1.34","src_port":5223,"dst_port":50407,"l4_proto":"tcp"}
+0674{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":263,"pkt":"PBXCt3IO0NQSxnP1CABFAAD5QB1AADEGlPMRj6CVwKgBIhRnxOfKLqrmIALxFIAYAQoi5AAAAQEIClVX3cw+MS9sFwMBAMAQLvPrUolszeBH4PjooKgoykESMntuxk1Te2w+x8Oya6GSybBw6qqEM+wWK2sXwWrrizJ5XKzKOAmSZesb7xCcv3da\/+28YcXK\/F7zVFmE31vvvLV8YkG8GBOlPbpZKZERb9mwy2LwmHQtz7O0hAoAaXw9xzeYM92S6l8kX5r5cFIIVhHHc18X56Qt2VFcbjB+OTKH9K3bn722DOl83K579IAjLFDRbrYAdebZ2GL8xgCQwxYSG690LowE4mV3zjs=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1431970636044,"flow_last_seen":1431970636044,"flow_tot_l4_data_len":229,"flow_min_l4_data_len":229,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":229,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.149","dst_ip":"192.168.1.34","src_port":5223,"dst_port":50407,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","category":"Cloud"}}
+0407{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0K69AAEAGmybAqAEiEY+glcTnFGcgAvEUyi6rq4AQD\/mVBgAAAQEICj4xjDlVV93M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACO6xNAAEAG22fAqAEiEY+glcTnFGcgAvEUyi6rq4AYEAB7VwAAAQEICj4xjDlVV93MFwMBACDcBm8C5CuEds5WH7uOVSaoSAeWe3pVfjpiQwGsBHUCdhcDAQAwqX6WBIxQfVe36rHY2TMg9Ev1HCHJmLbDku3Ki37TObTq6YVIEEF1VGVKw\/q+D6y6","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0QB5AADEGlbcRj6CVwKgBIhRnxOfKLqurIALxboAQAQqiwwAAAQEIClVX3qQ+MYw5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431970636300,"flow_last_seen":1431970636300,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":50055,"dst_port":53,"l4_proto":"udp"}
+0439{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLV\/cAAEARnzfAqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1431970636300,"flow_last_seen":1431970636300,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":50055,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431970636301,"flow_last_seen":1431970636301,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51753,"dst_port":53,"l4_proto":"udp"}
+0438{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLvh0AAEARORHAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1431970636301,"flow_last_seen":1431970636301,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51753,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1431970636340,"flow_last_seen":1431970636340,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51232,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAozBAAEAGBGnAqAEinTg0HMggAbskulgsAAAAALAC\/\/+RjgAAAgQFtAEDAwUBAQgKPjGNXAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADt1GlAAEAGamPAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwqgwAAAQEICj4xjV3sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89txAAEAGsMDAqAEinTg0HMgdnEkK2QS07hN6BYAYECkBeAAAAQEICj4xjXhMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6ONsAAEARvmTAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAsV0AAEARRdzAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQaoAAEARtY\/AqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtJ2dODQcwKgBIgG7yCDj6Zk0JLpYLaASOJC0hQAAAgQFrAQCCApMX+vyPjGNXAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0faxAAEAGKfnAqAEinTg0HMggAbskulgt4+mZNYAQECwKzQAAAQEICj4xjj9MX+vy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB86nFAAEAGvOvAqAEinTg0HMggAbskulgt4+mZNYAYECy7QQAAAQEICj4xjj9MX+vygEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIDl0puQwf7XnF3q02i5lo\/0","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDZH4AAEARkrjAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDjbsAAEARaXvAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0dRZAADMGP4+dODQcwKgBIgG7yCDj6Zk1JLpYdYAQAB0aYgAAAQEICkxf7CQ+MY4\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQopZAAEAGBPPAqAEinTg0HMggAbskulh14+mZNYAYECzKjAAAAQEICj4xjwVMX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7VPMAAEARokvAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA74iYAAEARFRjAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/9KsAAEARAo\/AqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/1uEAAEARIFnAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLHJUAAEAR2pnAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970636,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLIxUAAEAR1BnAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtI\/5AAEAGGs\/AqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwnqwAAAQEICj4xkDXsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1431970637197,"flow_last_seen":1431970637197,"flow_tot_l4_data_len":646,"flow_min_l4_data_len":646,"flow_max_l4_data_len":646,"flow_avg_l4_data_len":646,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":51227,"dst_port":443,"l4_proto":"tcp"}
+1247{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":680,"pkt":"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","pkt_caplen":680,"pkt_type":2048,"pkt_ipoffset":14}
+1173{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":622,"pkt":"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","pkt_caplen":622,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo8lZAAO8GYd4RrGQkwKgBIgG7yBt3OYL\/T6FHTlAQnYx\/rgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo8ldAAO8GYd0RrGQkwKgBIgG7yBt3OYL\/T6FJhlAQ\/\/8bAwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0846{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":387,"pkt":"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","pkt_caplen":387,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":90,"pkt":"PBXCt3IO0NQSxnP1CABFAABM8ltAAO8GYbURrGQkwKgBIgG7yBt3OYRMT6FJhlAY\/\/8OXgAAFwMDAB\/iYUIGS7t3BZyzRUet6iqqQJAh1B7ikTTYDPGP8wC4","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAos\/JAAEAGT0PAqAEiEaxkJMgbAbtPoUmGdzmETFAQ\/\/8ZtgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoDkNAAEAG9PLAqAEiEaxkJMgbAbtPoUmGdzmEcFAQ\/\/8ZkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1213{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":656,"pkt":"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","pkt_caplen":656,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC8l9AAO8GYbsRrGQkwKgBIgG7yBt3OYbKT6FJhlAY\/\/825AAAFwMDABXjRgXrmc2JQhdbcbdSXtAT8UOopd0=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo3GFAAEAGJtTAqAEiEaxkJMgbAbtPoUmGdzmGylAQ\/\/8XOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoMTJAAEAG0gPAqAEiEaxkJMgbAbtPoUmGdzmG5FAQ\/\/8XHgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLkYQAAEARZarAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLLWAAAEARyc7AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6+FgAAEAR\/ubAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970637,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8X1tAAEAGSELAqAEinTg0HMgdnEkK2QS07hN6BYAYECn8twAAAQEICj4xkjhMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1181{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":12,"flow_packet_id":255,"flow_first_seen":1431970634729,"flow_last_seen":1431970637858,"flow_tot_l4_data_len":124121,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":486,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.gateway.messenger.live.com,*.beta.gateway.edge.messenger.live.com,*.by2.gateway.edge.messenger.live.com,*.sn1.gateway.edge.messenger.live.com","ja3":"06207a1730b5deeb207b0556e102ded2","ja3s":"5e4e5596180ebd0ac0317125ee490707","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT SSL SHA2","issuerDN":"CN=*.gateway.messenger.live.com","fingerprint":"95:C4:07:41:85:D4:EF:AA:D9:1F:0F:1F:3C:08:BF:8E:8B:D0:90:51"}}
+0450{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQEBNAAEAGl3bAqAEinTg0HMggAbskulh14+mZNYAYECzFJAAAAQEICj4xlG1MX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":673,"pkt":"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","pkt_caplen":673,"pkt_type":2048,"pkt_ipoffset":14}
+1177{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":630,"pkt":"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","pkt_caplen":630,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtrIhAAEAGkkTAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwiwwAAAQEICj4xlR3sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAo8mBAAO8GYdQRrGQkwKgBIgG7yBt3OYbkT6FL8VAQnZN3HwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLoPEAAEARVj3AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970638,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL\/NIAAEAR+lvAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABASE0AAEARruzAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAML4AAEARxnvAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQqSpAAEAG\/l7AqAEinTg0HMggAbskulh14+mZNYAYECy\/vAAAAQEICj4xmdVMX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDt6kAAEARP43AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDWaUAAEARnZHAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vzlAAEAG6GPAqAEinTg0HMgdnEkK2QS07hN6BYAYECnz\/wAAAQEICj4xmvBMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA72qEAAEARHJ3AqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970639,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7A+cAAEAR81fAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970640,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/RFIAAEARsujAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970640,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/ev0AAEARfD3AqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970640,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL0sEAAEARJG3AqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970640,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLM+0AAEARw0HAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970640,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6H8cAAEAR13jAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970640,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtM5xAAEAGCzHAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwZuwAAAQEICj4xniXsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970641,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLXS8AAEARmf\/AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970641,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLJjoAAEAR0PTAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQHEVAAEAGi0TAqAEinTg0HMggAbskulh14+mZNYAYECy1swAAAQEICj4xo95MX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431970642408,"flow_last_seen":1431970642408,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0452{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOkRoAAEARZRPAqAEiwKgB\/wCJAIkAOosFRXIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1431970642408,"flow_last_seen":1431970642408,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0452{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOP7YAAEARtnfAqAEiwKgB\/wCJAIkAOrIIRXEBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOkDsAAEARZfLAqAEiwKgB\/wCJAIkAOrIDRXYBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABgJtAAAEARz0vAqAEiwKgB\/wCJAIkATHVQRXdAEAABAAAAAAABIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAAAgAAHADAAgAAEAAAOEAAZgAMCoASI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431970642412,"flow_last_seen":1431970642412,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0463{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARtFGRXKFgAAAAAEAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAEAA\/SAAAaAAMCoAQE=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1431970642412,"flow_last_seen":1431970642412,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":70,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0463{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARnhKRXGFgAAAAAEAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAEAA\/SAAAYAAMCoAQE=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431970642414,"flow_last_seen":1431970642414,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0618{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAADKa30AAEARijTAqAEiwKgB\/wCKAIoAtudmEQJFcMCoASIAAACgAAAgRU1GRkVERUJGREVORUJFREVDRVBFUEVMRkFGQ0VQQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAIAAG9FEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQRuRQAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1431970642414,"flow_last_seen":1431970642414,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431970642417,"flow_last_seen":1431970642417,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0625{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":226,"pkt":"PBXCt3IO0NQSxnP1CABFAADUAABAAEARtqXAqAEBwKgBIgCKAIoAwKmzEAoqm8CoAQEAigCqAAAgRUJFTUVKRURFRkVIRUJGRUVGQ0FDQUNBQ0FDQUNBQUEAIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAEAAAAAAAAAAAAAAAAAAAAAAAAAAQAFYAAwABAAEAAgAhAFxNQUlMU0xPVFxCUk9XU0UACgFuRQAAQUxJQ0VHQVRFAA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1431970642417,"flow_last_seen":1431970642417,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0443{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOXUsAAEARmeDAqAEiwKgBAQCJAIkAOtIRRXgAAAABAAAAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":271,"pkt":"PBXCt3IO0NQSxnP1CABFAAEBAABAAEARtnjAqAEBwKgBIgCJAIkA7VV4RXiEAAAAAAEAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAEAAAAAAK0HQUxJQ0VHQVRFICAgICAgAAQAQUxJQ0VHQVRFICAgICAgAwQAQUxJQ0VHQVRFICAgICAgIAQAAQJfX01TQlJPV1NFX18CAYQAV09SS0dST1VQICAgICAgHQQAV09SS0dST1VQICAgICAgHoQAV09SS0dST1VQICAgICAgAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABABnoAAEAR8L\/AqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWPUAAEARnkTAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDgUwAAEARderAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDT58AAEARp5fAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA73pUAAEARGKnAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970642,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7hx0AAEARcCHAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/AuQAAEAR9FbAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/vucAAEAROFPAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLrQ0AAEARSiHAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLoG8AAEARVr\/AqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6D08AAEAR5\/DAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431970643669,"flow_last_seen":1431970643669,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0452{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABOBnEAAEAR74LAqAFcwKgB\/wCJAIkAOrExRg4BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431970643669,"flow_last_seen":1431970643669,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0618{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAADKWJAAAEARnOfAqAFcwKgB\/wCKAIoAtjdgEQJGDcCoAVwAAACgAAAgRU1GRkVERUJGRENORUpFTkVCRURDQUNBQ0FDQUNBQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAACwUAAAxGEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQQLRgAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0452{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABOM9EAAEARwlzAqAEiwKgB\/wCJAIkAOosFRXIBEAABAAAAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABO8TcAAEARBPbAqAEiwKgB\/wCJAIkAOrIDRXYBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAABggQQAAEARdRfAqAEiwKgB\/wCJAIkATHVQRXdAEAABAAAAAAABIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAAAgAAHADAAgAAEAAAOEAAZgAMCoASI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":53826,"dst_port":137,"l4_proto":"udp"}
+0452{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAABOJN8AAEAR0RTAqAFcwKgB\/9JCAIkAOpbmnKMBEAABAAAAAAAAIEVNRkZFREVCRkRDTkVKRU5FQkVEQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":53826,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0463{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARtFGRXKFgAAAAAEAAAAAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAAAgAAEAA\/SAAAaAAMCoAQE=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABaAABAAEARtx\/AqAEBwKgBIgCJAIkARnhFRXaFgAAAAAEAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAEAA\/SAAAYAAMCoAQE=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":216,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAADKHC4AAEAR2YPAqAEiwKgB\/wCKAIoAtt1hEQJFdcCoASIAAACgAAAgRU1GRkVERUJGREVORUJFREVDRVBFUEVMRkFGQ0VQQUEAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAcAIAAHRFEQAABgAAAAAAAAACAAAAAAAAAAAAAAAGAFYAAwABAAEAAgAXAFxNQUlMU0xPVFxCUk9XU0UACQRzRQAA","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0625{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":226,"pkt":"PBXCt3IO0NQSxnP1CABFAADUAABAAEARtqXAqAEBwKgBIgCKAIoAwKSxEAoqncCoAQEAigCqAAAgRUJFTUVKRURFRkVIRUJGRUVGQ0FDQUNBQ0FDQUNBQUEAIEVNRkZFREVCRkRFTkVCRURFQ0VQRVBFTEZBRkNFUEFBAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAEAAAAAAAAAAAAAAAAAAAAAAAAAAQAFYAAwABAAEAAgAhAFxNQUlMU0xPVFxCUk9XU0UACgFzRQAAQUxJQ0VHQVRFAA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":92,"pkt":"0NQSxnP1PBXCt3IOCABFAABOhtkAAEARcFLAqAEiwKgBAQCJAIkAOtIQRXkAAAABAAAAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":271,"pkt":"PBXCt3IO0NQSxnP1CABFAAEBAABAAEARtnjAqAEBwKgBIgCJAIkA7VV3RXmEAAAAAAEAAAAAIEVCRU1FSkVERUZFSEVCRkVFRkNBQ0FDQUNBQ0FDQUNBAAAhAAEAAAAAAK0HQUxJQ0VHQVRFICAgICAgAAQAQUxJQ0VHQVRFICAgICAgAwQAQUxJQ0VHQVRFICAgICAgIAQAAQJfX01TQlJPV1NFX18CAYQAV09SS0dST1VQICAgICAgHQQAV09SS0dST1VQICAgICAgHoQAV09SS0dST1VQICAgICAgAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431970643964,"flow_last_seen":1431970643964,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0453{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970643,"pkt_len":96,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NACoR\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAqSjYAAAAAAAEAAAAAAAAKTHVjYXMtaU1hYwVsb2NhbAAAHIAB","pkt_caplen":96,"pkt_type":34525,"pkt_ipoffset":14}
+0569{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1431970643964,"flow_last_seen":1431970643964,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0662{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtJ+NAAEAGFurAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECwMkgAAAQEICj4xq07sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431970644120,"flow_last_seen":1431970644120,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0519{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":142,"pkt":"PBXCt3IOxCwDBkn+CABFAACAhzsAAP8RkTHAqAFc4AAA+xTpFOkAbM4wAACEAAAAAAEAAAACCkx1Y2FzLWlNYWMFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAAxiwD\/\/4GSf7ADAABgAEAAAB4AATAqAFcwAwAHIABAAAAeAAQ\/oAAAAAAAADGLAP\/\/gZJ\/g==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431970644120,"flow_last_seen":1431970644120,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0549{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":162,"pkt":"MzMAAAD7xCwDBkn+ht1gAU9NAGwR\/\/6AAAAAAAAAxiwD\/\/4GSf7\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsYIEAAIQAAAAAAQAAAAIKTHVjYXMtaU1hYwVsb2NhbAAAHIABAAAAeAAQ\/oAAAAAAAADGLAP\/\/gZJ\/sAMAAGAAQAAAHgABMCoAVzADAAcgAEAAAB4ABD+gAAAAAAAAMYsA\/\/+Bkn+","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0579{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1431970643964,"flow_last_seen":1431970644121,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0420{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FR5AAEAGkn\/AqAEinTg0HMgdnEkK2QS07hN6BYAYECnjVgAAAQEICj4xq5lMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLb0kAAEARh+XAqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLkaoAAEARZYTAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431970644777,"flow_last_seen":1431970644777,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0424{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970644,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+iz0AAEARV8bAqAEinTc4qjLdnE8AKqlOercCgeG1zG2vbzPj0KjKJlzB46QihppHpHZWBMh9hdX\/8Q==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431970644777,"flow_last_seen":1431970644777,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0415{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970645,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA533AAAEARH43AqAEib91KDzLdnFoAJRqBerkCLcYyzYQBZ1UUv9afmdL8U47Y0EMKk9GOcm8=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40002,"l4_proto":"udp"}
+0419{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970645,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IE0AAEAReEHAqAEiQTffITLdnEIAKKkPersC6xhZmoz4NcwgQN8Oq77mdsG6aJAJEzSI01rU6ec=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0420{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970645,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7MzsAAEARLhjAqAEiQAQXkTLdnFsAJ6Pner0C2KbUw2DxbMk3cWJigGAv5JrHPRhWYHrZrKFH\/Q==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0424{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970645,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+dlAAAEARIrjAqAEinTeCpTLdnFwAKmyyer8CyymJmKIvjgybbxj4QUGrEeWW\/O+vVrSV+3Rj4Yjh8w==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40028,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0416{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970645,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6yaYAAEARHe\/AqAEinTg0GzLdnFkAJhz6esECVdgpKZUPSYYd3u6m4rCVVtMoL0MGJKJcpPJg","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0702{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":279,"pkt":"PBXCt3IO0NQSxnP1CABFAAEJQB9AADEGlOERj6CVwKgBIhRnxOfKLqurIALxboAYAQqNlQAAAQEIClVYBlc+MYw5FwMBANBBPnYQ3MvLTtMYdbz0\/DlZYXrEXIv2\/rH+drT1aX9evssLuVRMDl3QSMVQ5mEY0\/AMVWIBvH6FB7+VLmLzLBAlApwIR\/pgZ8dHNQ+FR9uDZJv8y\/k81NO6WrgsBaMbre5mHzeJJa\/1PvYSNghTDfU7tyJC\/BuhouOcubsp78rR9\/PeoVc8nRc15q6ePgewOeEXV7cwouwXYH5r22PZtMDOfowJ3WUbhMyTHrhhLUTwNC6TLywCmXjGJCy\/vKgI21C6KbUoV5dQmUZJn5EWFr7D","pkt_caplen":279,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA04y5AAEAG46bAqAEiEY+glcTnFGcgAvFuyi6sgIAQD\/lCpAAAAQEICj4xtOFVWAZX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOcKNAAEAGVdjAqAEiEY+glcTnFGcgAvFuyi6sgIAYEAD3WAAAAQEICj4xtOJVWAZXFwMBACDuYk2bwgTyOXwC51MmgFGi2ZbfVRwCbzRfkIv9V7lkERcDAQAwIXJA9A7j3DEsaoI+VAhi19LwoM0S0IRXaTeOOjxSOxnOIy\/Lo5axDlu3HMFCyqNA","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0QCBAADEGlbURj6CVwKgBIhRnxOfKLqyAIALxyIAQAQpP+gAAAQEIClVYB5U+MbTi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.34","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0421{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7AJsAAEAR\/k3AqAEib91KIjLdnFsAJ+15esMC4VlNRvu3By\/5s5rGR+P6LgoKPKR7nd4t4OfW1A==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.34","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.168","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0426{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/TKMAAEAR42DAqAEinTfrqDLdnFgAKzONesUCSrWxfzMM\/u+ve5H0njBV7f1MGIL\/NDrkYJJdktuSF9Y=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.168","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0415{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5mqYAAEARlXzAqAEinTfrjzLdnF4AJa4yescCvwHYJJA0SDNaHmIGriSDO5fklPid0RnUmyQ=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0411{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1cmsAAEARiRbAqAEib91NjzLdnFYAIbzweskC5JgrRdKtWjAuXzT2S5r85LjjhllfqQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0416{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970646,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA42pAAAEARJFHAqAEib91KLDLdnFMAJIhoessC81Jpsjijfp0Q\/Q0jMgS+1lTSx5HXr8lZjQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0451{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970647,"pkt_len":94,"pkt":"0NQSxnP1PBXCt3IOCABFAABQmndAAEAGDRLAqAEinTg0HMggAbskulh14+mZNYAYECyiagAAAQEICj4xtydMX+wkj\/+\/FJjGnvuHRd2oWYqGsDWb1go6xLS\/RXUyPQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.173","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0417{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970647,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zV0AAEARYhbAqAEi1cezrTLdnE0AJlZnes0Ccg7v+3Lfid3osaqIFpFm\/v4o\/QqgzaHMxbGQ","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.173","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.167","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0411{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970647,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1vrcAAEARJFjAqAEinTc4pzLdnFgAIREees8CCCEtcEeglQLd7mhp21iK7rcni5fedw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.167","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0419{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970647,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9vysAAEARohHAqAEiQAQXpTLdnEQAKTALetECX1BVIaBDDxsr7kKWybF1ggh0MeIv40Hl0rhawj9H","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0416{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970647,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4G6EAAEARfQHAqAEiQTffETLdnFkAJOrWetMCvMga3ljFR4ptkQ1XTBYwQJAI0\/6MTBVdPQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0413{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970647,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1FVUAAEARg0\/AqAEiQTffEjLdgQkAIczZetUCcHkMN3GT\/RrB0G0KocMuGJme8meMAw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431970648367,"flow_last_seen":1431970648367,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp"}
+0773{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":333,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE\/BH4AAAQR\/4\/AqAD+7\/\/\/+gQBB2wBK+71Tk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVwbnA6cm9vdGRldmljZQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cG5wOnJvb3RkZXZpY2UNCg0K","pkt_caplen":333,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1431970648367,"flow_last_seen":1431970648367,"flow_tot_l4_data_len":299,"flow_min_l4_data_len":299,"flow_max_l4_data_len":299,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0795{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":351,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFRBH8AAAQR\/3zAqAD+7\/\/\/+gQBB2wBPQhzTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1JbnRlcm5ldEdhdGV3YXlEZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLUludGVybmV0R2F0ZXdheURldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K","pkt_caplen":351,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":405,"pkt":"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","pkt_caplen":405,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":397,"pkt":"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","pkt_caplen":397,"pkt_type":2048,"pkt_ipoffset":14}
+0763{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":327,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE5BIIAAAQR\/5HAqAD+7\/\/\/+gQBB2wBJULdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLVdBTkRldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K","pkt_caplen":327,"pkt_type":2048,"pkt_ipoffset":14}
+0819{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":369,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFjBIMAAAQR\/2bAqAD+7\/\/\/+gQBB2wBT72wTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5EZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6V0FORGV2aWNlOjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":347,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFNBIUAAAQR\/3rAqAD+7\/\/\/+gQBB2wBOS6hTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KDQo=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0852{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":393,"pkt":"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","pkt_caplen":393,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.32","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0424{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/tTsAAEAR41DAqAEiQTffIDLdnFYAK5o2etcCQsTVfNgeznDqGm3ssKnJOluDwQd072c+I4wlse7Ecr8=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.32","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.33","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0425{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+1vAAAEARJ\/bAqAEib91KITLdnEsAKklketkCS\/KCvZwmcOx3xDmHrpkfhUG8CXubM92mElOOFhZFlQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.33","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0415{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6md0AAEARSUPAqAEinTc4kTLdnEgAJsmIetsCpJOMytcJAiTHtz9O4hYGu7tAbRVxbii4hHFE","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.13","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0416{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5n+IAAEAR+MLAqAEiQTffDTLdnEkAJdiCet0C1RhCM\/VIp+W5EaRfz2WprIWREBw71gUfrFc=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.19","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0411{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA29EUAAEAR81vAqAEinTg0EzLdnFQAIrQSet8CIfzcSNY9VVu6zPT0+wzX1iqsIu28Tro=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.19","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":1431970648880,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1063{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":1431970648880,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":1431970648880,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1059{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1431970648880,"flow_last_seen":1431970648880,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431970648979,"flow_last_seen":1431970648979,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1063{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xCwDBkn+CABFAAIS99EAAEARvwXAqAFc\/\/\/\/\/0RcRFwB\/v9VeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1431970648979,"flow_last_seen":1431970648979,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431970648982,"flow_last_seen":1431970648982,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1059{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970648,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1431970648982,"flow_last_seen":1431970648982,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51234,"dst_port":40001,"l4_proto":"tcp"}
+0426{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABADS1AAEAG4vXAqAEinTfrk8ginEEPp71\/AAAAALAC\/\/+7IQAAAgQFtAEDAwUBAQgKPjHBiQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51235,"dst_port":40009,"l4_proto":"tcp"}
+0425{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAvnJAAEAGmhbAqAEiQTffLcgjnEma5hywAAAAALAC\/\/85DwAAAgQFtAEDAwUBAQgKPjHBiQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51236,"dst_port":40008,"l4_proto":"tcp"}
+0425{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABATBhAAEAGcsvAqAEib91KLcgknEjYMAm6AAAAALAC\/\/91FQAAAgQFtAEDAwUBAQgKPjHBiQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.171","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0416{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5i9YAAEARDTHAqAEinTeCqzLdnEwAJdiNeuEC3c6rdtKsOez6ZXpeJVa7dJ779QK3\/h1JCUU=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.171","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.65","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0415{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4dm4AAEARIgTAqAEiQTffQTLdgQkAJKmFeuMCyKqN77xeuXZwH4mCRZ2EnuTirQv1Yiuj0A==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.65","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0415{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4qTUAAEARhmHAqAEi1cezjDLdnEMAJE+IeuUC57gN1FWjl+cH4OXx7LBzSKM5WN7Ui1CRpw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.39","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0425{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAx6cAAEARH9zAqAEinTg0JzLdnF8ALF\/teucC9OsZNQfegPGKe6bjID0chTfhFg98J57+zrR\/SJSxjuh7","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.39","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431970649778,"flow_last_seen":1431970649778,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.25","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0424{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+a34AAEARfBXAqAEinTg0GTLdnEoAKvPOeukCU4Ora98LBiEx3upKt3C\/idNCTbgKHnJdEXlx5pIWdA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431970649778,"flow_last_seen":1431970649778,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.25","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0407{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NmVAAEAGcUDAqAEinTg0HMgdnEkK2QS87hN6BYARECnAggAAAQEICj4xwcBMX+qK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nplAAEAGCQzAqAEinTg0HMggAbskuliR4+mZNYARECzWtAAAAQEICj4xwcBMX+wk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iadN+uTwKgBIpxByCKHTehVD6e9gKASOJCRTQAAAgQFrAQCCApMYEY4PjHBiQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05xhAAEAGCRbAqAEinTfrk8ginEEPp72Ah03oVoAQECzoKAAAAQEICj4xwdhMYEY4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":175,"pkt":"0NQSxnP1PBXCt3IOCABFAAChU\/NAAEAGm87AqAEinTfrk8ginEEPp72Ah03oVoAYECxUywAAAQEICj4xwdhMYEY4J6jKR8ohtztSWYkbJTL0mMzNP11mD5qyQGCo36VDw0N8DfacTr\/3DVa7zulZMFssgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEtvQAT4X3J0qE6j51g==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGYo1BN98twKgBIpxJyCPPJ6UGmuYcsaASOJBnJAAAAgQFrAQCCApNlOiPPjHBiQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05LlAAEAGc9vAqAEiQTffLcgjnEma5hyxzyelB4AQECy9zQAAAQEICj4xwgpNlOiP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":128,"pkt":"0NQSxnP1PBXCt3IOCABFAAByvYVAAEAGmtHAqAEiQTffLcgjnEma5hyxzyelB4AYECye9gAAAQEICj4xwgpNlOiPvo1x4IDNDSI4Pbnv7WR+UQPca8b1BBndRFizKd7SeJyo\/RS9ljml+j6EmvjAGlIq+3Ah3jd8vcozSBl279Q=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rhtAADYGTBOdN+uTwKgBIpxByCKHTehWD6e97YAQAB33tQAAAQEICkxgRk0+McHY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7rhxAADYGS8udN+uTwKgBIpxByCKHTehWD6e97YAYAB30cQAAAQEICkxgRk4+McHYI8DwW3n4+CnT3eZY7ak09K1n4z8grSkvBgRbrcYV13qdyf5xmnnIUcDAlxIU7vJUvpdcHaqTKHlWT7SVwssAce4HDA3aA9g=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":58,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cwpAAEAGfSTAqAEinTfrk8ginEEPp73th03onYAQECnnDQAAAQEICj4xwixMYEZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":58,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970649,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8t3pAAEAGOKzAqAEinTfrk8ginEEPp73th03onYAYECk\/yAAAAQEICj4xwixMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0TahAADYGFO1BN98twKgBIpxJyCPPJ6UHmuYc74AQAB3NfQAAAQEICk2U6LA+McIK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":151,"pkt":"PBXCt3IO0NQSxnP1CABFAACJTalAADYGFJdBN98twKgBIpxJyCPPJ6UHmuYc74AYAB2tigAAAQEICk2U6LA+McIKRoN4Y+0JD2nToDXTRhW5GM4NirtbeUXxZNVRKfpBa0czN212DpcdTo54ddnTL1nDgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDg==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pkFAAEAGslPAqAEiQTffLcgjnEma5hzvzyelXIAQECm8mAAAAQEICj4xwo5NlOiw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XhpAAEAG+nLAqAEiQTffLcgjnEma5hzvzyelXIAYECkglwAAAQEICj4xwo5NlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOdv3UotwKgBIpxIyCR2KHXg2DAJu6ASOJBnsgAAAgQFrAQCCApNh6w6PjHBiQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S0FAAEAGc67AqAEib91KLcgknEjYMAm7dih14YAQECy9uQAAAQEICj4xwqxNh6w6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":144,"pkt":"0NQSxnP1PBXCt3IOCABFAACCPkxAAEAGgFXAqAEib91KLcgknEjYMAm7dih14YAYECwyWQAAAQEICj4xwqxNh6w67vaKznaqN42XYEbJbf0s3f1iTSz6SIJiZzPeudZF2WMskEa23o2BO0i2VcQcFTxEgovAMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":58,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oGxAAEAGT7rAqAEinTfrk8ginEEPp73th03onYAYECk+OAAAAQEICj4xw7xMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02WVAADYG74lv3UotwKgBIpxIyCR2KHXh2DAKCYAQAB3NMAAAAQEICk2HrIQ+McKs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":133,"pkt":"PBXCt3IO0NQSxnP1CABFAAB32WZAADYG70Vv3UotwKgBIpxIyCR2KHXh2DAKCYAYAB2jVgAAAQEICk2HrIg+McKsMV8PKThkbJnnL6ZwlT2wbmrOKnZrWhUMdkmnfFaMIhl9+Grnr1BstwqraO6aWhIIS4DxboeMjVqDWOkGP+QFcrsw4Q==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":60,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/XZAAEAGwXjAqAEib91KLcgknEjYMAoJdih2JIAQECm7pQAAAQEICj4xw+RNh6yI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":60,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8lg5AAEAGKNnAqAEib91KLcgknEjYMAoJdih2JIAYEClpAAAAAQEICj4xw+RNh6yILYCuK5us2zw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hBhAAEAG1HTAqAEiQTffLcgjnEma5hzvzyelXIAYECkeiwAAAQEICj4xxJpNlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtnd9AAEAGoO3AqAEiF84hpsgfAbv4Tz2YGDU8XoAYECzzCAAAAQEICj4xxNfsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1431970650785,"flow_last_seen":1431970650785,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51237,"dst_port":40022,"l4_proto":"tcp"}
+0426{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAQ6lAAEAGFV3AqAEinTeCsMglnFZwrI8vAAAAALAC\/\/\/tTwAAAgQFtAEDAwUBAQgKPjHFcQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0422{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ax0AAEARLXbAqAEiQTffHDLdnE4AKA\/ueusCO4\/2IMsd1vZVtYtrG4KJHI0MKaf\/zYcpuYfyCTg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0407{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02DgAAEARwOTAqAEinTeCmjLdnE0AIDT4eu0C9+f6EdNHv7hYXHZqXAueiqwkwiBF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0424{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+20MAAEARvT3AqAEiQTffLDLdnFQAKsWAeu8CRodfDjWwQgXB9ThlvK8WB1Z6kJ0K1lKVKQH1\/lgrJA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0424{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA++5AAAEARZaPAqAEiQAQXrTLdnFEAKkiDevECuUkWpyPJriCjpMdyVTxdl5EcBPkRY6\/lJZGF7hytnA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0424{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/bcAAEARMcnAqAEi1cezmjLdnFEALEFuevMCLFThLGMqgdMtKoErvKHNoLTdO9PKUomxAAk6+9gobSzp","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0419{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIpxWyCXC803gcKyPMKASOJCo1gAAAgQFrAQCCApOqL1kPjHFcQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0eB9AAEAG4PLAqAEinTeCsMglnFZwrI8wwvNN4YAQECz\/hAAAAQEICj4xxe1OqL1k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":118,"pkt":"0NQSxnP1PBXCt3IOCABFAABoLuFAAEAGKf3AqAEinTeCsMglnFZwrI8wwvNN4YAYECw4GgAAAQEICj4xxe1OqL1kQDBPNYAQZj8RkGWwccFpRJKeMgR0hR6+94lop5uzmYWORKswp70IIqGKetrWefi+S4Dxbg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":58,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970650,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89WJAAEAG+sPAqAEinTfrk8ginEEPp73th03onYAYECk74gAAAQEICj4xxhJMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":66,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA08GJAADcGca+dN4KwwKgBIpxWyCXC803hcKyPZIAQAB0PQQAAAQEICk6ovYM+McXt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":66,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":144,"pkt":"PBXCt3IO0NQSxnP1CABFAACC8GNAADcGcWCdN4KwwKgBIpxWyCXC803hcKyPZIAYAB0RJQAAAQEICk6ovYQ+McXtHitk1rXbGCBHeHaSSNzGsVxElPEVR\/vbxjlAVuu1ETdC29OeKffCUxNeoarv0xwO52ztOuM4SeafxGVSGxBBflcc3WpT6DkWD3RVgovA","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":66,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0kUFAAEAGx9DAqAEinTeCsMglnFZwrI9kwvNOL4AQECn+ZwAAAQEICj4xxmtOqL2E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":66,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ry1AAEAGqdzAqAEinTeCsMglnFZwrI9kwvNOL4AYECnUTwAAAQEICj4xxmtOqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1431970651380,"flow_last_seen":1431970651380,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51238,"dst_port":443,"l4_proto":"tcp"}
+0425{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABADJRAAEAG447AqAEinTfrk8gmAbvxz5x7AAAAALAC\/\/+ORwAAAgQFtAEDAwUBAQgKPjHHwQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1431970651380,"flow_last_seen":1431970651380,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51239,"dst_port":443,"l4_proto":"tcp"}
+0425{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+dJAAEAGXrbAqAEiQTffLcgnAbvOrmZyAAAAALAC\/\/9P1wAAAgQFtAEDAwUBAQgKPjHHwQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1431970651380,"flow_last_seen":1431970651380,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51240,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAiTBAAEAGNbPAqAEib91KLcgoAbtIes+yAAAAALAC\/\/\/TJAAAAgQFtAEDAwUBAQgKPjHHwQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FVJAAEAGQzvAqAEiQTffLcgjnEma5hzvzyelXIAYECkbPQAAAQEICj4xx+hNlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iadN+uTwKgBIgG7yCZm7uws8c+cfKASOJB\/agAAAgQFrAQCCApMYEfJPjHHwQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":72,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0trlAAEAGOXXAqAEinTfrk8gmAbvxz5x8Zu7sLYAQECzWVQAAAQEICj4xyABMYEfJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":72,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8GglAAEAG1d3AqAEinTfrk8gmAbvxz5x8Zu7sLYAYECz3egAAAQEICj4xyABMYEfJgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAfROXSm5DB\/tecXerTaLmW","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":72,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0q\/RAADYGTjqdN+uTwKgBIgG7yCZm7uwt8c+cxIAQAB3mDAAAAQEICkxgR9k+McgA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":72,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsN31AAEAGuHnAqAEinTfrk8gmAbvxz5zEZu7sLYAYECxHEgAAAQEICj4xyD9MYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGYo1BN98twKgBIgG7yCcCmRcOzq5mc6ASOJDW4gAAAgQFrAQCCApNlOogPjHHwQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03TJAAEAGe2LAqAEiQTffLcgnAbvOrmZzApkXD4AQECwtjQAAAQEICj4xyEFNlOog","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8uipAAEAGniLAqAEiQTffLcgnAbvOrmZzApkXD4AYECzRMwAAAQEICj4xyEFNlOoggEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICP9NUCC0CxLkdMTRpDGKnG","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":66,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85A1AAEAGdPzAqAEinTeCsMglnFZwrI9kwvNOL4AYECnSUQAAAQEICj4xyGlOqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/U9AADYGZUVBN98twKgBIgG7yCcCmRcPzq5mu4AQAB09NAAAAQEICk2U6kA+MchB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":73,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxjGlAAEAGy+7AqAEiQTffLcgnAbvOrma7ApkXD4AYECx2pQAAAQEICj4xyMJNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGyOdv3UotwKgBIgG7yCgNTasLSHrPs6ASOJD34AAAAgQFrAQCCApNh63LPjHHwQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CgxAAEAGtOPAqAEib91KLcgoAbtIes+zDU2rDIAQECxN5QAAAQEICj4xyOdNh63L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8RDtAAEAGemzAqAEib91KLcgoAbtIes+zDU2rDIAYECxvCgAAAQEICj4xyOdNh63LgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAID\/pMUye\/ChXrf8PUqzyJn2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA20cAAEARG\/LAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjPwAAEARaj3AqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDLMAAAEARynbAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDFisAAEAR4QvAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0420{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9fnAAAEARsRvAqAEi1cezkjLdgQkAKdgxevUC7H9CpX1vDFjUgifamALKVmn9IG\/Fgz6DNfXKD8OP","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.160","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0425{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/x4wAAEARZ+\/AqAEi1cezoDLdnF4AKxOyevcCGvABkprWeh8EUhOC0BCTnmpfRyuj2xsq6jfI1V+MUC4=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.160","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.12","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0413{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1mAEAAEART6jAqAEinTg0DDLdnF8AIfBgevkCw9fuW226FZ\/i0VkBrMngLZ\/OvlepsQ==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.12","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0425{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAT+gAAEAREWjAqAEiQAQXjzLdnFIALKj4evsCuV\/AUAbJFwXr2TpK\/p9BHGpZ+kg1tywBGmcFc5l3l+UA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.174","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0417{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5DD0AAEARIzfAqAEi1cezrjLdnFkAJTHjev0CDsFSgVTjU3l7SB\/6pLcIO\/MFhUO5HKYdIt4=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.174","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0486{"flow_id":72,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsOfhAAEAGtf7AqAEinTfrk8gmAbvxz5zEZu7sLYAYECxFrAAAAQEICj4xyaVMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":58,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WcBAAEAGlmbAqAEinTfrk8ginEEPp73th03onYAYECk3\/QAAAQEICj4xyfdMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":74,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0BRlAADYGw9Zv3UotwKgBIgG7yCgNTasMSHrP+4AQAB1dYgAAAQEICk2HrhU+Mcjn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":74,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABu6gpAAEAG1KrAqAEib91KLcgoAbtIes\/7DU2rDIAYECyArAAAAQEICj4xygxNh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7MH8AAEARxr\/AqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970651,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7\/FwAAEAR+uHAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":60,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8p89AAEAGFxjAqAEib91KLcgknEjYMAoJdih2JIAYEClifgAAAQEICj4xymZNh6yILYCuK5us2zw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":73,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxJMBAAEAGM5jAqAEiQTffLcgnAbvOrma7ApkXD4AYECx0mwAAAQEICj4xysxNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/RGQAAEARstbAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/82IAAEARA9jAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL34IAAEARF6zAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLl8AAAEARX27AqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":66,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CVlAAEAGT7HAqAEinTeCsMglnFZwrI9kwvNOL4AYECnPHAAAAQEICj4xy55OqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":72,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsizZAAEAGZMDAqAEinTfrk8gmAbvxz5zEZu7sLYAYECxDqQAAAQEICj4xy6hMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1431970652388,"flow_last_seen":1431970652388,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51241,"dst_port":443,"l4_proto":"tcp"}
+0425{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAw4RAAEAGlYHAqAEinTeCsMgpAbtXW5NMAAAAALAC\/\/+W4QAAAgQFtAEDAwUBAQgKPjHLqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8S1pAAEAGXEPAqAEinTg0HMgdnEkK2QS07hN6BYAZECnCzQAAAQEICj4xzCFMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYgqdN4KwwKgBIgG7yCm78+IiV1uTTaASOJDDlAAAAgQFrAQCCApOqL71PjHLqwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":80,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+sxAAEAGXkXAqAEinTeCsMgpAbtXW5NNu\/PiI4AQECwaQwAAAQEICj4xzCdOqL71","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":80,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":703,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8J3VAAEAGMVXAqAEinTeCsMgpAbtXW5NNu\/PiI4AYECxr2gAAAQEICj4xzCdOqL71gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAh3jd8vcozSBl279Q14msg","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":80,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0XTdAADcGBNudN4KwwKgBIgG7yCm78+IjV1uTlYAQAB0p6wAAAQEICk6ovxQ+Mcwn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":80,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3a8NAAEAG7QvAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwneAAAAQEICj4xzKJOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6qdwAAEARTWPAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.13","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0407{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyWSMAAEARpePAqAEib91KDTLdnEkAHvqKev8C0IwzOBgB3UEKOkJTX5CI9Vwhwg==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.13","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0411{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1DNUAAEAR8g3AqAEib91KLjLdnFsAIUKoewECUhceSedyogxjoY07gc663Yk4liOtLw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.174","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0415{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6I1wAAEARDKfAqAEinTfrrjLdnFMAJnmaewMCB1Y35rB9hiYgpWTMLw7QXUk3fDnH35+GDlnt","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.174","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.22","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0419{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8IkgAAEARdlHAqAEiQTffFjLdnEkAKNsyewUCeMezn62nslRHzPMr8rZBDWA5jghU5oMMawkbl98=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.22","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0411{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2CdUAAEAR8anAqAEib91NkTLdnFgAIo9yewcCvaqOUinZ3k4PRY4yBX99xmfLU0z2qZs=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0420{"flow_id":59,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970652,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Cw9AAEAGTX7AqAEiQTffLcgjnEma5hzvzyelXIAYECkVaAAAAQEICj4xzb1NlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":73,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxrEtAAEAGrAzAqAEiQTffLcgnAbvOrma7ApkXD4AYECxxUQAAAQEICj4xzhZNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":80,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3wFhAAEAGmHbAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwleQAAAQEICj4xzqFOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":72,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsuv1AAEAGNPnAqAEinTfrk8gmAbvxz5zEZu7sLYAYECxAbAAAAQEICj4xzuVMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLzkEAAEARKO3AqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLxN4AAEARMlDAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":74,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuvDlAAEAGAnzAqAEib91KLcgoAbtIes\/7DU2rDIAYECx6JQAAAQEICj4x0JNNh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":60,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zvFAAEAG7\/XAqAEib91KLcgknEjYMAoJdih2JIAYEClb+wAAAQEICj4x0OlNh6yILYCuK5us2zw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":58,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83+5AAEAGEDjAqAEinTfrk8ginEEPp73th03onYAYECkw\/AAAAQEICj4x0PhMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":66,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XLdAAEAG\/FLAqAEinTeCsMglnFZwrI9kwvNOL4AYECnJfAAAAQEICj4x0T5OqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":13021,"dst_port":40007,"l4_proto":"udp"}
+0416{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA54bUAAEARt2bAqAEinTeCljLdnEcAJaaFewkCIUNJcqobuUolNpafXbellV+EM\/ULmpysjyw=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":13021,"dst_port":40007,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0428{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBP+oAAEARp7DAqAEinTg0DzLdnFsALYwJewsCVNeDMJHHK\/Dt9HVlBuPPBbINu9bDjb8MSpCCrsrjyd0TEg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.162","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0408{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0mUYAAEARls7AqAEinTfrojLdnGEAICOXew0CZW2\/4VtO8SUcLK6ApfNDe+uaEMsE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.162","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0416{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6nacAAEARXcXAqAEib91NnzLdnF8AJrQGew8Ci4JWnsKyT6r3gHVnkQ4+dXrvzbvknlDqGmE\/","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0429{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABB8NoAAEARcG\/AqAEiQAQXlDLdnF0ALRa1exECrGOk9zKZhpR5Z4LrruV\/92iAsqS9CAawX8X4D80kRASy7Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0503{"flow_id":80,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970653,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3yV5AAEAGj3DAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwiRAAAAQEICj4x0dZOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":73,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxva5AAEAGmqnAqAEiQTffLcgnAbvOrma7ApkXD4AYECxrhAAAAQEICj4x0+NNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":72,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABs0lFAAEAGHaXAqAEinTfrk8gmAbvxz5zEZu7sLYAYECw6uwAAAQEICj4x1JZMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.142","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0416{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6wW8AAEARn+fAqAEiQAQXjjLdnFcAJg\/KexMCQ3jYuEugpNmWmUQtEzO7LdTOeKZd1ItpRQQC","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.142","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0407{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03zwAAEARghzAqAEiQAQXkjLdgQkAIIDZexUCZ4W5ZqoZlNOePqUvRCFg3WRtDoC9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.149","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0424{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/GZwAAEARf3vAqAEinTeClTLdnEsAK1wIexcCaeXnH1khWR2dVjoEFgFOwJFG48UKy+DykqMrgwb0UzA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.149","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0429{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBOycAAEARwEbAqAEib91NlzLdnF0ALQ\/xexkCYPXpRAQdHH0\/jNHVbGCv27qhgsGUdDsPAuuhBF8LGQtOxA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0424{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970654,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAm5UAAEARk+DAqAEi1cezpTLdnEQALDM7exsCCwiB5Tp\/+eOgtAg8Bibngtvk3Z9waqj3cY7b3c6tDEmT","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0520{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDdRxAADMGPzqdODQcwKgBIgG7yCDj6Zk1JLpYdYAYAB1wuQAAAQEICkxf\/gA+MY4\/FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoU2tAAEAGVEbAqAEinTg0HMggAbskulh1AAAAAFAEAADVtgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":74,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuJZBAAEAGmSXAqAEib91KLcgoAbtIes\/7DU2rDIAYECxznwAAAQEICj4x1xlNh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":80,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3kSVAAEAGx6nAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwcowAAAQEICj4x13dOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":59,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8J\/9AAEAGMI7AqAEiQTffLcgjnEma5hzvzyelXIAYECkKhwAAAQEICj4x2J5NlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51246,"dst_port":40020,"l4_proto":"tcp"}
+0425{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABANxVAAEAGcHTAqAEinTg0LMgunFRemxUUAAAAALAC\/\/+0UAAAAgQFtAEDAwUBAQgKPjHZGQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0407{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyDf8AAEARix7AqAEinTeCnDLdnFMAHh0Aex0Cxk3n0hRKPcgDeocb540rNGApyA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.27","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0431{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBoCUAAEAR+GnAqAEiQTffGzLdnF0ALfl1ex8CqPqPm6RB3JLpE4+TALz\/NA1U\/CYbcdFd\/zzgY3E\/zKJhBw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.27","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0416{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6UqAAAEARkIPAqAEinTc4jjLdnE0AJphseyECmYsgkMQHN\/YIHMBu8w6RdZxUPKbDb+JHSqeN","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.154","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0417{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4DEcAAEARVQbAqAEiQAQXmjLdnGAAJHYfeyMC79DK\/hLwI0tI0UYsgGEWGk5hr4E5iC40QQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.154","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40002,"l4_proto":"udp"}
+0416{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970655,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5ayYAAEARfGrAqAEinTg0ITLdnEIAJe9eeyUCb3+11x21V+othQ6FZpV0z1bnAthdPIEc8bI=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40002,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0420{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIpxUyC6j+8V4XpsVFaASOJDYRQAAAgQFrAQCCApMZ\/6WPjHZGQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":96,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HiFAAEAGiXTAqAEinTg0LMgunFRemxUVo\/vFeYAQECwuNgAAAQEICj4x2lNMZ\/6W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":96,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOOrdAAEAGbITAqAEinTg0LMgunFRemxUVo\/vFeYAYECxXoQAAAQEICj4x2lNMZ\/6Wrhs79BGYhMMB7iEF5tcHMoy4VALgEGzyG5tHOfMPK\/eAX\/weDS1SZ6oiHiBYEb64N3y9yjNIGXbv1DXiayARDqcsrfqj+AmmX4QlEtvQAT4X3J0qE6j51s80","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":96,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0O51AADMGePidODQswKgBIpxUyC6j+8V5XpsVb4AQAB09nAAAAQEICkxn\/uU+MdpT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":96,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":129,"pkt":"PBXCt3IO0NQSxnP1CABFAABzO55AADMGeLidODQswKgBIpxUyC6j+8V5XpsVb4AYAB3\/ewAAAQEICkxn\/uU+MdpTk5xHzoRUYOAlNqZNQRYXZDvyucwWb2OQn0+QDvjZC4IsoaublhF3fDS+yCZVUfHm4NHOZ+xtumO4yWYfROXS","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":96,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02iBAAEAGzXTAqAEinTg0LMgunFRemxVvo\/vFuIAQECosHgAAAQEICj4x24VMZ\/7l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":96,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kq1AAEAGFODAqAEinTg0LMgunFRemxVvo\/vFuIAYECqizQAAAQEICj4x24VMZ\/7lUZ\/2f58qofY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":66,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8OGhAAEAGIKLAqAEinTeCsMglnFZwrI9kwvNOL4AYECm\/BAAAAQEICj4x27ZOqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0412{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1wZMAAEARPVPAqAEib91KKjLdnEYAIaXieycCe1fKnMoPyS7sKN+ClU5dh7E8u7Wn6g==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0413{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3VcEAAEAR2kbAqAEinTfrrDLdnFQAI1TmeykCBTNtXbhMDQf2D6UV0R3mHu30wTeW\/+eg","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40020,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.167","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0408{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAylicAAEARmerAqAEinTfrpzLdnF0AHsxpeysCNBmO6n4oPt4qGVJFTPBgQCMCbA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.167","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0425{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+1C4AAEARDvPAqAEinTc4jDLdnEMAKhWUey0Ck6OV07meiCUQoBZZK2TePWK3VEloqo0Om\/LmRrc7qA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.156","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0429{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBaS8AAEARxk7AqAEi1ceznDLdnF8ALXpUey8C35QflkiVLuyYHEgftQvOcxrFG1PZDcVv\/V5f70upN2kVjw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.156","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0420{"flow_id":60,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970656,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86MxAAEAG1hrAqAEib91KLcgknEjYMAoJdih2JIAYEClPvgAAAQEICj4x3SZNh6yILYCuK5us2zw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":58,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8f5BAAEAGcJbAqAEinTfrk8ginEEPp73th03onYAYECkjxAAAAQEICj4x3jBMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtCkVAAEAGNIjAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECzZgAAAAQEICj4x3l\/sPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":73,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABx0FhAAEAGh\/\/AqAEiQTffLcgnAbvOrma7ApkXD4AYECxgtAAAAQEICj4x3rNNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":72,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABskhRAAEAGXeLAqAEinTfrk8gmAbvxz5zEZu7sLYAYECwwIgAAAQEICj4x3y9MYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1431970657448,"flow_last_seen":1431970657448,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51247,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAHFJAAEAGizfAqAEinTg0LMgvAbu6eq5bAAAAALAC\/\/9TfQAAAgQFtAEDAwUBAQgKPjHfXgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":107,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADMGtI2dODQswKgBIgG7yC\/usf9LunquXKASOJDxVgAAAgQFrAQCCApMaAAoPjHfXgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":107,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0sH5AAEAG9xbAqAEinTg0LMgvAbu6eq5c7rH\/TIAQECxHLAAAAQEICj4x4LNMaAAo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":107,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB86qtAAEAGvKHAqAEinTg0LMgvAbu6eq5c7rH\/TIAYECzAyQAAAQEICj4x4LNMaAAogEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAI2TavlPWiK+DRzmfsbbpj","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51248,"dst_port":40030,"l4_proto":"tcp"}
+0426{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAUUpAAEAGahfAqAEib91Nr8gwnF4IVezmAAAAALAC\/\/8+qQAAAgQFtAEDAwUBAQgKPjHhAAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.13","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0421{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9oHUAAEARRyvAqAEinTg0DTLdnFUAKQgoezEC\/l8nlzJZpnLIFE7P8fkc8mrPmKIpl9hxLirEQuOc","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.13","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.27","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0416{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4f1AAAEARf6LAqAEib91KGzLdnFsAJDT4ezMCrsyhXN3LQtIkyb75hiLtvYPm8jFPNUJJrw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.27","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0427{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+qWkAAEARhrHAqAEinTfrkjLdgQkAKiNZezUC\/2slHaKqOmhTH+zKnxlHa\/OJZyFRbGPJo\/ii7tiMOQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0413{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA13XsAAEARu5rAqAEinTeCoDLdnEgAIdXCezcCHsxzqj9mHv\/LaKdjYymm7xXHyFOeHw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40008,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.42","src_port":13021,"dst_port":40005,"l4_proto":"udp"}
+0421{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970657,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9HFoAAEARyynAqAEinTg0KjLdnEUAKXprezkCzIUWKH677Ew8QeRY2LFi0olqYWN\/wfRNYM+xO4zo","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.42","src_port":13021,"dst_port":40005,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0410{"flow_id":107,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/zFAADMGtWOdODQswKgBIgG7yC\/usf9MunqupIAQAB1WngAAAQEICkxoAH0+MeCz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":107,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":135,"pkt":"0NQSxnP1PBXCt3IOCABFAAB57e9AAEAGuWDAqAEinTg0LMgvAbu6eq6k7rH\/TIAYECyFzQAAAQEICj4x4ZRMaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":80,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB324VAAEAGfUnAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECwSKwAAAQEICj4x4e9OqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":108,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGxWVv3U2vwKgBIpxeyDDQUSwBCFXs56ASOJDrCwAAAgQFrAQCCApNo+IOPjHhAAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":108,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0UMZAAEAGaqfAqAEib91Nr8gwnF4IVezn0FEsAoAQECxBFgAAAQEICj4x4iBNo+IO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":108,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":158,"pkt":"0NQSxnP1PBXCt3IOCABFAACQmTBAAEAGIeHAqAEib91Nr8gwnF4IVezn0FEsAoAYECziqQAAAQEICj4x4iBNo+IOiZ0uM4UUx\/r8v6otdDGr3C97i4clqD3ww++M30WlHXwpnGkMW1HntI8XmE+5Wfo8pyyt+qP4CaZfhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBXI=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":96,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80HFAAEAG1xvAqAEinTg0LMgunFRemxVvo\/vFuIAYECqb1QAAAQEICj4x4n1MZ\/7lUZ\/2f58qofY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":74,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABu089AAEAG6uXAqAEib91KLcgoAbtIes\/7DU2rDIAYECxnWwAAAQEICj4x411Nh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":108,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zlRAADYG9xhv3U2vwKgBIpxeyDDQUSwCCFXtQ4AQAB1QgAAAAQEICk2j4lc+MeIg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":108,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":146,"pkt":"PBXCt3IO0NQSxnP1CABFAACEzlVAADYG9sdv3U2vwKgBIpxeyDDQUSwCCFXtQ4AYAB0PzQAAAQEICk2j4ls+MeIg+msEBmAzVVCg2om5ksbH3i5LqsKTi3p3bVMjULlB3fNdv7WeJTRW\/7JhqPxV1N\/TFHUiq2BRTuds7TrjOEnmn8RlUhsQQX5XHN1qU+g5Fg8=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":108,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02O5AAEAG4n7AqAEib91Nr8gwnF4IVe1D0FEsUoAQECk+4QAAAQEICj4x419No+Jb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":108,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8w3xAAEAG9+jAqAEib91Nr8gwnF4IVe1D0FEsUoAYECncyQAAAQEICj4x419No+Jb\/KZqQh\/x2yw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.16","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0408{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MmQAAEARtULAqAEinTg0EDLdnGAAINARezsCntsIeaNpS6NjCmJc+OoOrMkvCcDa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0425{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAykUAAEARZUbAqAEi1cezjzLdnFIALAJQez0CXU0wVq4fYZh\/Y+8+QJuiiaVycN5JEmy9Mj2R1c64L1Y6","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0420{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7lJ0AAEARm2LAqAEinTfrsDLdnF8AJ1FIez8C0TqVtIrtp1zqD0lx1wHOKMmPMNUvlfjRgE8UFg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0416{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4HuEAAEARyLnAqAEinTg0GDLdnGAAJDiFe0ECGzhHlfYpbTJCQlYvElI0z7NbdWF7vdKvag==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.20","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0425{"flow_id":118,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970658,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/Lr4AAEAR0DTAqAEib91KFDLdnGEAK3JGe0MC70klwlgauZl1jUNJ9T6muSj9wXln3SVqW5QyJa+s4xA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":119,"flow_packet_id":1,"flow_first_seen":1431970659480,"flow_last_seen":1431970659480,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51250,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":119,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAaDxAAEAGUyXAqAEib91Nr8gyAbuh2H3fAAAAALAC\/\/+ohwAAAgQFtAEDAwUBAQgKPjHnRwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":120,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51251,"dst_port":40029,"l4_proto":"tcp"}
+0426{"flow_id":120,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAPbBAAEAG45PAqAEiQAQXpsgznF2bjnkgAAAAALAC\/\/99bQAAAgQFtAEDAwUBAQgKPjHoqQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0413{"flow_id":121,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1elAAAEARHtbAqAEinTeCkDLdnFAAIfN1e0UCt0zo\/WrZ+Zw8Ki6+SR8vgG1TLjatCw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.20","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0425{"flow_id":122,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/fyEAAEARaHbAqAEinTg0FDLdnGEAK5aLe0cCmWiuCofYyBz6GXTZdvI4LweQLKgxsl8j0KcXdBMS+c8=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":794,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.20","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.144","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0428{"flow_id":123,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBTDEAAEAR4+jAqAEinTfrkDLdnGAALTL8e0kC17QicxuXB5auWkNIni8RcFzpWBK6wb+NIPIUjtvt0ICuYw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":795,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.144","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0425{"flow_id":124,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+n20AAEARW\/XAqAEib91NpTLdnEQAKqfKe0sCA3KviLJG1lAzDVoG9idWXcbF4pfswWYweShFk+5UVw==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0421{"flow_id":125,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA71A4AAEARxQ\/AqAEinTeCkjLdnGEAJ5FDe00CRUi6WS8h8mPi8e9oMy1XIZqCitDbn3NkpyCi9w==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0420{"flow_id":119,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGxWVv3U2vwKgBIgG7yDJl2k5Wodh94KASOJCbeAAAAgQFrAQCCApNo+OiPjHnRwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":119,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vZ1AAEAG\/c\/AqAEib91Nr8gyAbuh2H3gZdpOV4AQECzxPQAAAQEICj4x6KxNo+Oi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":119,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970659,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8I7FAAEAGl3TAqAEib91Nr8gyAbuh2H3gZdpOV4AYECyksgAAAQEICj4x6KxNo+OigEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAFcrsw4Z73PH2K8wjZNq+U","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":120,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIpxdyDOxwWA5m455IaASOJAGLQAAAgQFrAQCCApMQvFqPjHoqQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":120,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0G21AAEAGBePAqAEiQAQXpsgznF2bjnkhscFgOoAQECxcjQAAAQEICj4x6XNMQvFq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":120,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":154,"pkt":"0NQSxnP1PBXCt3IOCABFAACMEARAAEAGEPTAqAEiQAQXpsgznF2bjnkhscFgOoAYECylcwAAAQEICj4x6XNMQvFqsGDOHlSqfRc+prbw89Fa2rh2+pm2+OjDEB5JFD\/88MznmLOT4PCegeqg1w32B4WlAHHuBwwN2gPYaYa\/ZIXyO7BhHne8\/QpziFm2LxR1IqtgUU7nbO064w==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":96,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8\/gFAAEAGqYvAqAEinTg0LMgunFRemxVvo\/vFuIAYECqU3QAAAQEICj4x6XVMZ\/7lUZ\/2f58qofY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":119,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0raxAADYGF8Fv3U2vwKgBIgG7yDJl2k5Xodh+KIAQAB0AqwAAAQEICk2j4\/w+Meis","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":119,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsOlBAAEAGgOXAqAEib91Nr8gyAbuh2H4oZdpOV4AYECyPmwAAAQEICj4x6c9No+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":107,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":135,"pkt":"0NQSxnP1PBXCt3IOCABFAAB53zBAAEAGyB\/AqAEinTg0LMgvAbu6eq6k7rH\/TIAYECx9kQAAAQEICj4x6dBMaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":126,"flow_packet_id":1,"flow_first_seen":1431970660159,"flow_last_seen":1431970660159,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":309,"flow_max_l4_data_len":309,"flow_avg_l4_data_len":309,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.163.108","dst_ip":"192.168.1.34","src_port":443,"dst_port":51222,"l4_proto":"tcp"}
+0787{"flow_id":126,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":343,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJkcJAADIG5BVsoKNswKgBIgG7yBaV3SxsiZUqrIAYACaXjgAAAQEICmGAz38+MVp4FwMBARB8Fy4qyreLjg5Q96tDDF\/tJNQpsIShBClYLxny\/F4IVS87inYaH8NMzidehO4QJLb0Gpm5qZy83nu17ekToUXtOsjvJgerL5AdcFL4wkOs5YWIZJQILj89EVd3kwm2gSreMO6fU0x3sDxMFrXZesIKTvERW3z9QiBmYf77CRAcaBKDIZ4h8M6jvsMWFjh8rbcU6C9Yz3364yiyHbQuoqtvQN4EQD7H\/ZMlnDFOtnG2H8aPUdqUMD5HAjMSCpEQqc4JKy0wVFFuLxpIEra0u2hVB7ftMdJLJ\/sq+RNwy1Sfuv0g7qCHweCB0CkHYTzB2\/cU6qQOlFTex1tRE+sh29iBulHeN2MmenT9xvrZggKZYQ==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":126,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/qVAAEAGakfAqAEibKCjbMgWAbuJlSqsld0tgYAQD\/f6XgAAAQEICj4x6exhgM9\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1701{"flow_id":126,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":1020,"pkt":"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","pkt_caplen":1020,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":108,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8H1NAAEAGnBLAqAEib91Nr8gwnF4IVe1D0FEsUoAYECnWHQAAAQEICj4x6gtNo+Jb\/KZqQh\/x2yw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":120,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kaZAADYGmalABBemwKgBIpxdyDOxwWA6m455eYAQAB1sEgAAAQEICkxC8Zw+Melz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":120,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":149,"pkt":"PBXCt3IO0NQSxnP1CABFAACHkadAADYGmVVABBemwKgBIpxdyDOxwWA6m455eYAYAB2ZBAAAAQEICkxC8Zw+MelzjLQEsIeeVc+JDAz2rA4ym14qtE+qmcRTfvULGcvyToV4ShusctGfdVbdCiMxPRgYzZrDmClGfyRFsvtwId43fL3KM0gZdu\/UNeJrIBEOpyyt+qM=","pkt_caplen":149,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":120,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0eopAAEAGpsXAqAEiQAQXpsgznF2bjnl5scFgjYAQECla7gAAAQEICj4x6jhMQvGc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":120,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA880NAAEAGLgTAqAEiQAQXpsgznF2bjnl5scFgjYAYECnv7gAAAQEICj4x6jhMQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":126,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kcNAADIG5SlsoKNswKgBIgG7yBaV3S2BiZUuZoAQACoGOAAAAQEICmGAz7c+Menu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAd\/YAAEARf0PAqAEiwKgBAf3LADUALKDXdTsBAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABADV8AAEAR6drAqAEiwKgBAdb0ADUALMTUeDABAAABAAAAAAAAAWEGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":1431970660848,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0418{"flow_id":127,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6TMEAAEARsjLAqAEib91KGDLdnGAAJk69e08C7Jn\/msaru979SjBYNnh0LMk7Ko\/+l6KrptIV","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":1431970660848,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":1431970660848,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0416{"flow_id":128,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4j48AAEARa97AqAEib91NoDLdnFAAJOlwe1ECSObCw6nUMfh7bnqIU3mueprtSIlR2AyZTQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":1431970660848,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0428{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDA9cAAEAR81\/AqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970660,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDBJcAAEAR8p\/AqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7i9kAAEARa2XAqAEiwKgBAfrwADUAJ8Zq760BAAABAAAAAAAAA2FwaQVza3lwZQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7g7kAAEARc4XAqAEiwKgBAcLIADUAJ6plKNsBAAABAAAAAAAAA2FwaQVza3lwZQNjb20AABwAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":59,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8lPJAAEAGw5rAqAEiQTffLcgjnEma5hzvzyelXIAYECn1jgAAAQEICj4x7ZZNlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":72,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsqy1AAEAGRMnAqAEinTfrk8gmAbvxz5zEZu7sLYAYECwhmgAAAQEICj4x7bdMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/Y8gAAEARk3LAqAEiwKgBAfWbADUAK9VUuF8BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/lmgAAEARYNLAqAEiwKgBAebpADUAK335A20BAAABAAAAAAAABWRzbjEzAWQFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLvUMAAEAROevAqAEiwKgBAeD4ADUANz9NJ5kBAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLYwQAAEARlCrAqAEiwKgBAdB8ADUAN25j7f4BAAABAAAAAAAAAzMzNQEwATcBNwEzBXJzdDExAXIFc2t5cGUDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":129,"flow_packet_id":1,"flow_first_seen":1431970661447,"flow_last_seen":1431970661447,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51253,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":129,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYfhAAEAGv0vAqAEiQAQXpsg1Abs0yMrkAAAAALAC\/\/8mywAAAgQFtAEDAwUBAQgKPjHu7gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":120,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83iRAAEAGQyPAqAEiQAQXpsgznF2bjnl5scFgjYAYECnrLAAAAQEICj4x7vpMQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":129,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK0hABBemwKgBIgG7yDUuR6JLNMjK5aASOJDvYAAAAgQFrAQCCApMQvL8PjHu7gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":129,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0asRAAEAGtovAqAEiQAQXpsg1Abs0yMrlLkeiTIAQECxFxAAAAQEICj4x77VMQvL8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":129,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8wv9AAEAGXgjAqAEiQAQXpsg1Abs0yMrlLkeiTIAYECzgAQAAAQEICj4x77VMQvL8gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIB0VYKLwDGux8zNmsOYKUZ\/","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":66,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA895JAAEAGYXfAqAEinTeCsMglnFZwrI9kwvNOL4AYECmq3AAAAQEICj4x795OqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA61jYAAEARIQnAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":58,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89l9AAEAG+cbAqAEinTfrk8ginEEPp73th03onYAYECkRewAAAQEICj4x8HlMYEZOu98xvI+OKgs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":129,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UWNAADYG2exABBemwKgBIgG7yDUuR6JMNMjLLYAQAB1VWAAAAQEICkxC8y8+Me+1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":129,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxQiNAAEAG3u\/AqAEiQAQXpsg1Abs0yMstLkeiTIAYECzU8AAAAQEICj4x8HtMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0424{"flow_id":130,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgx0AAEARe8zAqAEib91KHDLdnFoALOnqe1MCA8GYjWWu9fDS5z8O1HnUzLtilbW9STWNzZ4dxAZIYogR","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40026,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0413{"flow_id":131,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3uKMAAEAR4H7AqAEinTeCkjLdgQkAI\/pPe1UCb1OUWk4YvTHMO4jKAgG4ML6WHkkTPHmm","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.152","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0416{"flow_id":132,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6xIYAAEAR1JLAqAEinTeCmDLdnFYAJvNGe1cC+NCgg6iFX83BbHq4v+mwzzHLJiFQXcBRQbw9","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.152","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0423{"flow_id":108,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970661,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89dNAAEAGxZHAqAEib91Nr8gwnF4IVe1D0FEsUoAYECnPcQAAAQEICj4x8LdNo+Jb\/KZqQh\/x2yw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":119,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABswt9AAEAG+FXAqAEib91Nr8gyAbuh2H4oZdpOV4AYECyHZwAAAQEICj4x8gNNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":107,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":135,"pkt":"0NQSxnP1PBXCt3IOCABFAAB5WsVAAEAGTIvAqAEinTg0LMgvAbu6eq6k7rH\/TIAYECx1VAAAAQEICj4x8g1MaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":73,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxpVZAAEAGswHAqAEiQTffLcgnAbvOrma7ApkXD4AYECxL2wAAAQEICj4x84xNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":120,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8v89AAEAGYXjAqAEiQAQXpsgznF2bjnl5scFgjYAYECnmaQAAAQEICj4x871MQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLomMAAEARVMvAqAEiwKgBAcOHADUANwqgVG4BAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL2k0AAEARHOHAqAEiwKgBAcopADUAN1kA5GsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":1431970662914,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.172","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0425{"flow_id":133,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+nlYAAEARkRrAqAEi1cezrDLdnEsAKjxNe1kCd7pyWFY\/2XtrOx7QzlcFNoQgfV3dFZmCGAMb34HK5w==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":1431970662914,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.172","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":1431970662914,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0413{"flow_id":134,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3jiIAAEAR0y7AqAEiQAQXlzLdnF0AI+cqe1sCynRK6RblWzdW13\/d3OH7SI3y+M61XQ85","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":1431970662914,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0421{"flow_id":60,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970662,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xIdAAEAG+l\/AqAEib91KLcgknEjYMAoJdih2JIAYECk4DQAAAQEICj4x9NdNh6yILYCuK5us2zw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":129,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxXIpAAEAGxIjAqAEiQAQXpsg1Abs0yMstLkeiTIAYECzQQwAAAQEICj4x9ShMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":80,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3DI9AAEAGTEDAqAEinTeCsMgpAbtXW5OVu\/PiI4AYECz+AQAAAQEICj4x9hhOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":96,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8lU1AAEAGEkDAqAEinTg0LMgunFRemxVvo\/vFuIAYECqHtAAAAQEICj4x9p5MZ\/7lUZ\/2f58qofY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtK5ZAAEAGEzfAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECy\/9wAAAQEICj4x9+jsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.176","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0412{"flow_id":135,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3FyoAAEARSg7AqAEiQAQXsDLdnEEAI4rRe10CzbovR94s4Zxf8rLQnBsqBqSn7dHSA+Hg","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.176","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0416{"flow_id":136,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6rCQAAEAR7PjAqAEinTeClDLdnFMAJgbKe18CYcW5TKiM44ghnCPOJzkfQkjh9HCzfXzFFif7","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0420{"flow_id":137,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970663,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8YPIAAEARzyHAqAEinTfrmzLdnFsAKKqoe2ECDwqATU5QUcdDsP2+OoC0sJan4F5erjlhYCY+cbA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0419{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8b7ZAAEAGN+fAqAEinTg0HMgdnEkK2QS07hN6BYAZECmVhAAAAQEICj4x+WpMX+qKABUsdMFxBVE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":129,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABx5GdAAEAGPKvAqAEiQAQXpsg1Abs0yMstLkeiTIAYECzLlgAAAQEICj4x+dVMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":119,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsIKZAAEAGmo\/AqAEib91Nr8gyAbuh2H4oZdpOV4AYECx\/MwAAAQEICj4x+jdNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431970664361,"flow_last_seen":1431970664361,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2}
+0384{"flow_id":138,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":46,"pkt":"AQBeAAABoPPBbTu2CABGwAAgAAAAAAECgnDAqAD+4AAAAZQEAAARZO6bAAAAAA==","pkt_caplen":46,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431970664361,"flow_last_seen":1431970664361,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0491{"flow_id":74,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":124,"pkt":"0NQSxnP1PBXCt3IOCABFAABuB+1AAEAGtsjAqAEib91KLcgoAbtIes\/7DU2rDIAYECxPmgAAAQEICj4x+x5Nh64VXoBGQFpplMys2JWIO4+I29OA4cPWkJJGByBiX+YJVXNQ2TREXlwyKhu2PLot6b6UkyYNEZ8cQhCRbQ==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431970664698,"flow_last_seen":1431970664698,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.229","dst_ip":"224.0.0.251","l4_proto":2}
+0400{"flow_id":139,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":60,"pkt":"PBXCt3IOtPCr0yf4CABGAAAg8JwAAAECkLLAqAHl4AAA+5QEAAAWAAkE4AAA+wAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431970664698,"flow_last_seen":1431970664698,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.229","dst_ip":"224.0.0.251","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":1431970664878,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0425{"flow_id":140,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/kL8AAEARaq3AqAEib91NmjLdnFEAK0H5e2MCFDnpGlF82iGY4eNpUibWNoDaPXvzzVnf0YiL6zK2YSk=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":1431970664878,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":1431970664878,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.149","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0416{"flow_id":141,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5Q+cAAEARHWrAqAEiQAQXlTLdnF4AJXN2e2UCDFA+Qxh89YvJZEs857N5H5uVs05hCuMkyAI=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":1431970664878,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0423{"flow_id":120,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970664,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QLhAAEAG4I\/AqAEiQAQXpsgznF2bjnl5scFgjYAYECndrAAAAQEICj4x\/HpMQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":108,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8djhAAEAGRS3AqAEib91Nr8gwnF4IVe1D0FEsUoAYECnC4AAAAQEICj4x\/UhNo+Jb\/KZqQh\/x2yw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":58,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0abpAAEAGhnTAqAEinTfrk8ginEEPp731h03onYARECmo8AAAAQEICj4yAEBMYEZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":72,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0xvlAAEAGKTXAqAEinTfrk8gmAbvxz5z8Zu7sLYARECydhAAAAQEICj4yAEBMYEfZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":59,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qslAAEAGrcvAqAEiQTffLcgjnEma5hz3zyelXIARECl+3QAAAQEICj4yAEBNlOiw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":73,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA01v5AAEAGgZbAqAEiQTffLcgnAbvOrmb4ApkXD4ARECz05wAAAQEICj4yAEBNlOpA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":60,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0svZAAEAGC\/nAqAEib91KLcgknEjYMAoRdih2JIARECl\/QAAAAQEICj4yAEBNh6yI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":74,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OUdAAEAGhajAqAEib91KLcgoAbtIetA1DU2rDIARECwVvwAAAQEICj4yAEBNh64V","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":66,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0EDtAAEAGSNfAqAEinTeCsMglnFZwrI9swvNOL4ARECnEiQAAAQEICj4yAEBOqL2E","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":80,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H05AAEAGOcTAqAEinTeCsMgpAbtXW5PYu\/PiI4ARECzlfgAAAQEICj4yAEBOqL8U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.171","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0409{"flow_id":142,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyYRMAAEARmlXAqAEib91NqzLdnF4AHu9ce2cCLa6FGK\/rw+WZJkTZL2SD2CNvhA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.171","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0412{"flow_id":143,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1sE4AAEARMsfAqAEinTc4oTLdnF8AITASe2kC9psOqbEN3IbEA34wiMcNZp24IiAl1w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0423{"flow_id":144,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970665,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9lmMAAEARmbbAqAEinTfrlDLdnGEAKXtSe2sCw7Vy\/6hHK2XTagfLmixWAHOAd\/loE1p\/EyV7QPa1","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0505{"flow_id":107,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":135,"pkt":"0NQSxnP1PBXCt3IOCABFAAB58G5AAEAGtuHAqAEinTg0LMgvAbu6eq6k7rH\/TIAYECxlpAAAAQEICj4yAb1MaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":100,"pkt":"AQAMzMzMJKQ8\/kzXAF6qqgMAAAwgAAF4S2kAAQAOQWlyR2F0ZXdheQACABEAAAABAQHMAATAqAHbAAQACAAAAAIABQAQQWlyR1cudjEuMC4zAAYAB0FHVwADAAdicjAA\/wAFLg==","pkt_caplen":100,"pkt_type":94,"pkt_ipoffset":14}
+0182{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","type":94}
+0494{"flow_id":129,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABx33tAAEAGQZfAqAEiQAQXpsg1Abs0yMstLkeiTIAYECzDBgAAAQEICj4yAmVMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":145,"flow_packet_id":1,"flow_first_seen":1431970666902,"flow_last_seen":1431970666902,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51255,"dst_port":40005,"l4_proto":"tcp"}
+0426{"flow_id":145,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAb9VAAEAG6VLAqAEinTeCjsg3nEXoG0e9AAAAALAC\/\/9+tAAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":146,"flow_packet_id":1,"flow_first_seen":1431970666902,"flow_last_seen":1431970666902,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51256,"dst_port":40013,"l4_proto":"tcp"}
+0426{"flow_id":146,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZOhAAEAGVprAqAEib91Njsg4nE30S7v3AAAAALAC\/\/9gmwAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":147,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51257,"dst_port":40032,"l4_proto":"tcp"}
+0426{"flow_id":147,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAp19AAEAGSKzAqAEinTfrqsg5nGDRQCL5AAAAALAC\/\/9RGgAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":148,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51258,"dst_port":40021,"l4_proto":"tcp"}
+0426{"flow_id":148,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAfbxAAEAGcbnAqAEi1cezsMg6nFWOWkeEAAAAALAC\/\/9u6QAAAgQFtAEDAwUBAQgKPjIEMAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0421{"flow_id":149,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9fE8AAEARfyTAqAEib91NlTLdnFAAKVN0e20CYiNLpCtZKVRm5qzsJsm2qgqqm\/VHJHAXu9AEnz3Z","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0421{"flow_id":150,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7vtoAAEARQB3AqAEib91KEzLdnEEAJxFYe28CrL8oxTm2+6Ol0c4xcn\/aCmr6scDIaqNamEoS7g==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0420{"flow_id":148,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93nVx7OwwKgBIpxVyDpdiXkDjlpHhaASOJCjtgAAAgQFrAQCCApO3n4vPjIEMAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":148,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TkBAAEAGoUHAqAEi1cezsMg6nFWOWkeFXYl5BIAQECz6qQAAAQEICj4yBGdO3n4v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":148,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":162,"pkt":"0NQSxnP1PBXCt3IOCABFAACU3h1AAEAGEQTAqAEi1cezsMg6nFWOWkeFXYl5BIAYECzwwAAAAQEICj4yBGdO3n4vpH+4YbRf46LMGng\/E51p5GZzYC9xP5Es2\/w2eKnW9UtZ6FFtAFdhjFPvc+i78cRadFWCi8AxrsfMzZrDmClGfyRFsvtwId43fL3KM0gZdu\/UNeJrIBEOpyyt+qP4CaZf","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":147,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+g+dN+uqwKgBIpxgyDkZrLIb0UAi+qASOJChgQAAAgQFrAQCCApMVm\/iPjIEMAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":147,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VXBAAEAGmqfAqAEinTfrqsg5nGDRQCL6GayyHIAQECz4ZQAAAQEICj4yBHZMVm\/i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":147,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970666,"pkt_len":117,"pkt":"0NQSxnP1PBXCt3IOCABFAABnYLRAAEAGjzDAqAEinTfrqsg5nGDRQCL6GayyHIAYECwnMAAAAQEICj4yBHZMVm\/iwEaMj8M5xvmyHE8sLJEGuFiWLirflKQdQ24zlWPXJEIVZLihiyPXvNuKmxRXLc4pgPFu","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":148,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Bz9AADgG8ELVx7OwwKgBIpxVyDpdiXkEjlpH5YAQAB0KTAAAAQEICk7efjw+MgRn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":148,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":126,"pkt":"PBXCt3IO0NQSxnP1CABFAABwB0BAADgG8AXVx7OwwKgBIpxVyDpdiXkEjlpH5YAYAB1OCQAAAQEICk7efjw+MgRnxaQ00137Ml1kiU0eyi+lTbYbpUp4jeRz2TzpD0yR+zJH3s9WrrWsiAUyKyQkVrQ14Z73PH2K8wjZNq+U","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":148,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03oBAAEAGEQHAqAEi1cezsMg6nFWOWkflXYl5QIAQECr5zwAAAQEICj4yBJpO3n48","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":148,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8NfNAAEAGuYbAqAEi1cezsMg6nFWOWkflXYl5QIAYECpMiQAAAQEICj4yBJtO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":145,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiydN4KOwKgBIpxFyDfIYnGx6BtHvqASOJAYmAAAAgQFrAQCCApOwLWvPjIEMAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":145,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ekBAAEAG3vPAqAEinTeCjsg3nEXoG0e+yGJxsoAQECxvRgAAAQEICj4yBKxOwLWv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":145,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":136,"pkt":"0NQSxnP1PBXCt3IOCABFAAB6zxJAAEAGidvAqAEinTeCjsg3nEXoG0e+yGJxsoAYECwc5gAAAQEICj4yBKxOwLWvH+3hkvF2M+aqUAEHFdjrumsOvwszsiA13RqrReWHn0YTtqWsd6Cv8TYnjTFkfugGJEWy+3Ah3jd8vcozSBl279Q14msgEQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":147,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA03e9AADYGHCidN+uqwKgBIpxgyDkZrLIc0UAjLYAQAB0IMQAAAQEICkxWb\/M+MgR2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":147,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":167,"pkt":"PBXCt3IO0NQSxnP1CABFAACZ3fBAADYGG8KdN+uqwKgBIpxgyDkZrLIc0UAjLYAYAB1b4QAAAQEICkxWb\/U+MgR27CO5G4+xevFD5NEP+2HFwKVJgKFi61jnK\/6x2+vNugxSeE+Z3dxD96hNra\/mI1bL+dbPNBVCS4DxboeMjVqDWOkGP+QFcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4yWYfROU=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":147,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Zm1AAEAGiarAqAEinTfrqsg5nGDRQCMtGayygYAQECj3cwAAAQEICj4yBMFMVm\/1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":147,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8qxtAAEAGRPTAqAEinTfrqsg5nGDRQCMtGayygYAYECiE0wAAAQEICj4yBMFMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":145,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0xHxAADcGnbedN4KOwKgBIpxFyDfIYnGy6BtIBIAQAB1+7wAAAQEICk7Atc8+MgSs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":145,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":118,"pkt":"PBXCt3IO0NQSxnP1CABFAABoxH1AADcGnYKdN4KOwKgBIpxFyDfIYnGy6BtIBIAYAB29LwAAAQEICk7AtdA+MgSs6e2YYqDsT4Y1prBaJW5wBXMmXWA5\/I+UxdYsfqkRqhcXego4yfGCwCmJcOAuIwe9F9ydKg==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":145,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ILtAAEAGOHnAqAEinTeCjsg3nEXoG0gEyGJx5oAQECpuLAAAAQEICj4yBS1OwLXQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":145,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UIFAAEAGCKvAqAEinTeCjsg3nEXoG0gEyGJx5oAYECrGYgAAAQEICj4yBS1OwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":146,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIpxNyDjFFwvv9Eu7+KASOJAFzgAAAgQFrAQCCApNkBSePjIEMAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":146,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0KkFAAEAGkU3AqAEib91Njsg4nE30S7v4xRcL8IAQECxb2QAAAQEICj4yBU9NkBSe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":146,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":115,"pkt":"0NQSxnP1PBXCt3IOCABFAABlW4VAAEAGX9jAqAEib91Njsg4nE30S7v4xRcL8IAYECyicQAAAQEICj4yBU9NkBSeje9wwyXSkPz9+l3ySHOXQLb\/sHvQChE9W1u6ieMrujza9vdq+yts9KGtofht1F39gg==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":148,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8n8dAAEAGT7LAqAEi1cezsMg6nFWOWkflXYl5QIAYECpLMwAAAQEICj4yBfFO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":147,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jsZAAEAGYUnAqAEinTfrqsg5nGDRQCMtGayygYAYECiDWQAAAQEICj4yBjtMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":146,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0HxdAADcGpXdv3U2OwKgBIpxNyDjFFwvw9Eu8KYAQAB1rbgAAAQEICk2QFOc+MgVP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":146,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":143,"pkt":"PBXCt3IO0NQSxnP1CABFAACBHxhAADcGpSlv3U2OwKgBIpxNyDjFFwvw9Eu8KYAYAB1ZwgAAAQEICk2QFOk+MgVPXQUgQqTc7bWSkcfPgQgqgRpqpQs0qdOCw9mTBQjUuKPShCk3U2pS\/CnhVMSr3Y5VBj\/kBXK7MOGe9zx9ivMI2TavlPWiK+DRzmfsbbo=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":146,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HlRAAEAGnTrAqAEib91Njsg4nE30S7wpxRcMPYAQEClZ7QAAAQEICj4yBnVNkBTp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":146,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88BpAAEAGy2vAqAEib91Njsg4nE30S7wpxRcMPYAYECkrwAAAAQEICj4yBnVNkBTphTv5WfSZuu0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":145,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jd1AAEAGy07AqAEinTeCjsg3nEXoG0gEyGJx5oAYECrEYQAAAQEICj4yBy5OwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":148,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8D8hAAEAG37HAqAEi1cezsMg6nFWOWkflXYl5QIAYECpJUAAAAQEICj4yB9RO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0416{"flow_id":151,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6bg8AAEARKxbAqAEinTeCjDLdnEsAJgsKe3ECMurpMuGdyMUwflNlvhyptKR18dfr99Rpa+D7","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0430{"flow_id":152,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBDu8AAEARihTAqAEinTeCpzLdnF8ALeNce3MCnSaJe8js0\/W0uOkrjvFqVEozNuFXZVFpbX\/qiFWAThpduA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0418{"flow_id":153,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4i7gAAEARb8PAqAEib91NkjLdgQkAJGEVe3UC\/j9SXtMCBQsEGLuepyVsXxpYMSM\/UQo5ag==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0422{"flow_id":147,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970667,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+klAAEAG9cXAqAEinTfrqsg5nGDRQCMtGayygYAYECiBLgAAAQEICj4yCGZMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":1431970668278,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63342,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":154,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6QgAAEARDjHAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":154,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":1431970668278,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63342,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":1431970668278,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64258,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":155,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAkhAAAEARZSnAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":155,"flow_packet_id":1,"flow_first_seen":1431970668278,"flow_last_seen":1431970668278,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64258,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"b.config.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0764{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":327,"pkt":"AQBef\/\/6oPPBbTu2CABFAAE5BIwAAAQR\/4fAqAD+7\/\/\/+gQBB2wBJULdTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxDQpOVFM6IHNzZHA6YWxpdmUNClNFUlZFUjogVFAtTElOSyBXaXJlbGVzcyBOIE5hbm8gUm91dGVyIFdSNzAyTiwgVVBuUC8xLjANClVTTjogdXVpZDp1cG5wLVdBTkRldmljZS0xOTIxNjgwMjU0Nzg5MDAwMDENCg0K","pkt_caplen":327,"pkt_type":2048,"pkt_ipoffset":14}
+0820{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":369,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFjBI0AAAQR\/1zAqAD+7\/\/\/+gQBB2wBT72wTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHVybjpzY2hlbWFzLXVwbnAtb3JnOmRldmljZTpXQU5EZXZpY2U6MQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5EZXZpY2UtMTkyMTY4MDI1NDc4OTAwMDAxOjp1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6V0FORGV2aWNlOjENCg0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":119,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsw99AAEAG91XAqAEib91Nr8gyAbuh2H4oZdpOV4AYECxvkgAAAQEICj4yCdhNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0864{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":347,"pkt":"AQBef\/\/6oPPBbTu2CABFAAFNBI8AAAQR\/3DAqAD+7\/\/\/+gQBB2wBOS6hTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTEwMA0KTE9DQVRJT046IGh0dHA6Ly8xOTIuMTY4LjAuMjU0OjE5MDAvaWdkLnhtbA0KTlQ6IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KTlRTOiBzc2RwOmFsaXZlDQpTRVJWRVI6IFRQLUxJTksgV2lyZWxlc3MgTiBOYW5vIFJvdXRlciBXUjcwMk4sIFVQblAvMS4wDQpVU046IHV1aWQ6dXBucC1XQU5Db25uZWN0aW9uRGV2aWNlLTE5MjE2ODAyNTQ3ODkwMDAwMQ0KDQo=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0860{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":399,"pkt":"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","pkt_caplen":399,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":72,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsZYVAAEAGinHAqAEinTfrk8gmAbvxz5zEZu7sLYAZECwFUAAAAQEICj4yCgBMYEfZsJPOrYWxbQ2kS5GoHYZTSJUEAhUVjQ9Suc6gMln7jVEiXtQHYU+2Wg9JNG\/SECNBnGag8RNJ4KY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":145,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83NZAAEAGfFXAqAEinTeCjsg3nEXoG0gEyGJx5oAYECrBKAAAAQEICj4yCmdOwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":156,"flow_packet_id":1,"flow_first_seen":1431970668514,"flow_last_seen":1431970668514,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51259,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":156,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAux9AAEAGAGPAqAEib91Njsg7Abv27osgAAAAALAC\/\/8jHQAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":157,"flow_packet_id":1,"flow_first_seen":1431970668514,"flow_last_seen":1431970668514,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51260,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":157,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAscJAAEAGp2XAqAEinTeCjsg8AbsAEWpXAAAAALAC\/\/\/YaAAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":158,"flow_packet_id":1,"flow_first_seen":1431970668515,"flow_last_seen":1431970668515,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51261,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":158,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA27JAAEAGFFnAqAEinTfrqsg9AbvoZ1qDAAAAALAC\/\/+WyAAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":159,"flow_packet_id":1,"flow_first_seen":1431970668515,"flow_last_seen":1431970668515,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51262,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":159,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAgztAAEAGbDrAqAEi1cezsMg+AbsskrryAAAAALAC\/\/\/xlwAAAgQFtAEDAwUBAQgKPjIKcgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":59,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LfFAAEAGKpzAqAEiQTffLcgjnEma5hzvzyelXIAZECnYhQAAAQEICj4yCp5NlOiwwc7xhOCNCBA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":159,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93nVx7OwwKgBIgG7yD6AD\/E0LJK686ASOJCKGgAAAgQFrAQCCApO3n\/CPjIKcgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":159,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IFlAAEAGzyjAqAEi1cezsMg+AbsskrrzgA\/xNYAQECzhBgAAAQEICj4yCrBO3n\/C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":159,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB86m1AAEAGBMzAqAEi1cezsMg+AbsskrrzgA\/xNYAYECxrdgAAAQEICj4yCrBO3n\/CgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAed7z9CnOIWbYvFHUiq2BR","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":158,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+g+dN+uqwKgBIgG7yD366YaT6GdahKASOJAv5wAAAgQFrAQCCApMVnF1PjIKcgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":158,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0q7lAAEAGRF7AqAEinTfrqsg9AbvoZ1qE+umGlIAQECyGvgAAAQEICj4yCsVMVnF1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":158,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8SiBAAEAGpa\/AqAEinTfrqsg9AbvoZ1qE+umGlIAYECyQrQAAAQEICj4yCsVMVnF1gEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBO52ztOuM4SeafxGVSGxBB","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":148,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mAJAAEAGV3fAqAEi1cezsMg6nFWOWkflXYl5QIAYECpGVAAAAQEICj4yCtBO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":159,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0juVAADgGaJzVx7OwwKgBIgG7yD6AD\/E1LJK7O4AQAB3wvgAAAQEICk7ef9E+Mgqw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":159,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrY0hAAEAGjALAqAEi1cezsMg+Absskrs7gA\/xNYAYECz+wwAAAQEICj4yCupO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":157,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGYiydN4KOwKgBIgG7yDxDIW5aABFqWKASOJD5UQAAAgQFrAQCCApOwLdCPjIKcgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":157,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ULBAAEAGCITAqAEinTeCjsg8AbsAEWpYQyFuW4AQECxP\/wAAAQEICj4yCu9OwLdC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":157,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8DyxAAEAGScDAqAEinTeCjsg8AbsAEWpYQyFuW4AYECzbbQAAAQEICj4yCu9OwLdCgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIB+VxzdalPoORYPdFWCi8Ax","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":158,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09x1AADYGAvqdN+uqwKgBIgG7yD366YaU6GdazIAQAB2WcAAAAQEICkxWcYo+MgrF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":158,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwQdZAAEAGrgXAqAEinTfrqsg9AbvoZ1rM+umGlIAYECxPNAAAAQEICj4yCxRMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":157,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02TlAADcGiPqdN4KOwKgBIgG7yDxDIW5bABFqoIAQAB1fpgAAAQEICk7At2I+Mgrv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":157,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABr\/1dAAEAGWaXAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyawgAAAQEICj4yC25OwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":156,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGxIZv3U2OwKgBIgG7yDsQofTJ9u6LIaASOJCSWQAAAgQFrAQCCApNkBYwPjIKcgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":156,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qSRAAEAGEmrAqAEib91Njsg7Abv27oshEKH0yoAQECzoZgAAAQEICj4yC49NkBYw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":156,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8+9lAAEAGv2zAqAEib91Njsg7Abv27oshEKH0yoAYECzyVAAAAQEICj4yC49NkBYwgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICux8zNmsOYKUZ\/JEWy+3Ah","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":66,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uEtAAEAGoL7AqAEinTeCsMglnFZwrI9kwvNOL4AZECmO8wAAAQEICj4yC8ZOqL2E+DHKQRbsUKg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":147,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u2FAAEAGNK7AqAEinTfrqsg5nGDRQCMtGayygYAYECh9oQAAAQEICj4yC\/NMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0413{"flow_id":160,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1LlEAAEARAb\/AqAEinTfrpjLdnE8AIZ69e3cC3u8ghDSSA4Gtev71JCe8ggQmBcfTOg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0409{"flow_id":161,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyB6AAAEARJ\/jAqAEi1cezkTLdnFgAHgsae3kCyqgAJfxhjLbJRJUrPtsodh20jg==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.42","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0425{"flow_id":162,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+wKIAAEAR1+DAqAEiQTffKjLdnFgAKi+se3sC0K9BEnPeD0WuBXXm5wareR+WL1\/qIQP+x9YGu9Sm5Q==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.42","src_port":13021,"dst_port":40024,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0490{"flow_id":159,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970668,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrGxBAAEAG1DrAqAEi1cezsMg+Absskrs7gA\/xNYAYECz9XAAAAQEICj4yDFFO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":158,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwXWxAAEAGkm\/AqAEinTfrqsg9AbvoZ1rM+umGlIAYECxNmAAAAQEICj4yDLBMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":156,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA04rNAADcG4dpv3U2OwKgBIgG7yDsQofTK9u6LaYAQAB335AAAAQEICk2QFnk+MguP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":156,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWsIpAAEAGCuLAqAEib91Njsg7Abv27otpEKH0yoAYECwDXAAAAQEICj4yDLJNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":146,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA88H1AAEAGywjAqAEib91Njsg4nE30S7wpxRcMPYAYECklWAAAAQEICj4yDN1NkBTphTv5WfSZuu0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":120,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PFhAAEAG5O\/AqAEiQAQXpsgznF2bjnl5scFgjYAYECnM+wAAAQEICj4yDStMQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":157,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABr4qpAAEAGdlLAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyYvwAAAQEICj4yDXFOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":154,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA35sAAEARF57AqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":155,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIWEAAEAR1djAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":159,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrdjpAAEAGeRDAqAEi1cezsMg+Absskrs7gA\/xNYAYECz7VwAAAQEICj4yDlZO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":158,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABw8NlAAEAG\/wHAqAEinTfrqsg9AbvoZ1rM+umGlIAYECxLKQAAAQEICj4yDx9MVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":1431970669927,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0413{"flow_id":163,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2E64AAEARG+XAqAEi1cezkjLdnF4AIuLme30CQ7dH2z2v6k8Do\/cqwHkYPEueogZ7yfU=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":1431970669927,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":1431970669927,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.38","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0421{"flow_id":164,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":75,"pkt":"0NQSxnP1PBXCt3IOCABFAAA9jJkAAEARWu7AqAEinTg0JjLdnE8AKRAHe38C0EXr0Mxbt14LCxM+eOaK\/XZWtSRnQDNWL9r8hWuf","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":1431970669927,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0421{"flow_id":148,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QlNAAEAGrSbAqAEi1cezsMg6nFWOWkflXYl5QIAYECpBIwAAAQEICj4yEAFO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":145,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TPZAAEAGDDbAqAEinTeCjsg3nEXoG0gEyGJx5oAYECq7fwAAAQEICj4yEBBOwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":96,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970669,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JPJAAEAGgpvAqAEinTg0LMgunFRemxVvo\/vFuIAYECpuKwAAAQEICj4yECdMZ\/7lUZ\/2f58qofY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":73,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxugZAAEAGnlHAqAEiQTffLcgnAbvOrma7ApkXD4AZECwu8QAAAQEICj4yEHVNlOpApvNYMEQS5cpK5u6346cd8BL2N20dvzqenZJMFcn1yRtBVTFQ\/i2ToNXpC7XoSTbRK6UPDCtXBWtUo6jCxA==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":157,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrhQZAAEAG0\/bAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyVggAAAQEICj4yEK5OwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":73,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":102,"pkt":"PBXCt3IO0NQSxnP1CABFAABY\/VZAADYGZRpBN98twKgBIgG7yCcCmRdezq5m+YAZAB14hgAAAQEICk2U\/F4+MhB1y6ri\/NV24R+k+4cX0jR6SFLXPQzoQ2dX0dan4GJ97gCcCEYV","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":73,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo\/8xAAEAGWNTAqAEiQTffLcgnAbvOrmb5AAAAAFAEAADOJgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":1431970670304,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61095,"dst_port":53,"l4_proto":"udp"}
+0442{"flow_id":165,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABL\/QYAAEAR+ifAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":165,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":1431970670304,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61095,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":1431970670304,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55866,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":166,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLI7cAAEAR03fAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":166,"flow_packet_id":1,"flow_first_seen":1431970670304,"flow_last_seen":1431970670304,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55866,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"pipe.prd.skypedata.akadns.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0663{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADt4eBAAEAGXOzAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECymbwAAAQEICj4yEXDsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":159,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABr48dAAEAGC4PAqAEi1cezsMg+Absskrs7gA\/xNYAYECz4FgAAAQEICj4yEZdO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":80,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3LFBAAEAGLH\/AqAEinTeCsMgpAbtXW5OVu\/PiI4AZECziFwAAAQEICj4yEgFOqL8U9IDgvpwdzGcEkd9CX4txidHNl7imFBAwZtm7PgDORMBSjaYWMXjPRWAjyRyC8GW2MJh6wHE92aXcM+JRSsWm\/1CudQ==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":154,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAdiAAAEARgRnAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":155,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAmMcAAEARXnLAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":147,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8dH1AAEAGe5LAqAEinTfrqsg5nGDRQCMtGayygYAYECh3UQAAAQEICj4yEkNMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":80,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":111,"pkt":"PBXCt3IO0NQSxnP1CABFAABhXT5AADcGBKedN4KwwKgBIgG7yCm78+JyV1uT2YAZAB2qGgAAAQEICk6o0Js+MhIBLyDiNExQPczCRAjnVwZ1RnZMMyuPa9pdn4tTsYRcL8oSJaFJMMoLss2TQZg7","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":80,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoe6BAAEAG3X3AqAEinTeCsMgpAbtXW5PZAAAAAFAEAAAZFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":129,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1011,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABxDdJAAEAGE0HAqAEiQAQXpsg1Abs0yMstLkeiTIAYECyyrgAAAQEICj4yEr1MQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":156,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWvTJAAEAG\/jnAqAEib91Njsg7Abv27otpEKH0yoAYECz89QAAAQEICj4yExhNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0491{"flow_id":158,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwH2JAAEAG0HnAqAEinTfrqsg9AbvoZ1rM+umGlIAYECxHFAAAAQEICj4yEzRMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":146,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1014,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81OtAAEAG5prAqAEib91Njsg4nE30S7wpxRcMPYAYECke7wAAAQEICj4yE0ZNkBTphTv5WfSZuu0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":1431970670941,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0409{"flow_id":167,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyyNoAAEARNhPAqAEib91KJjLdnE8AHkdoe4ECIl4YB+sv8264lsMD2bF6lk0ImA==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":1431970670941,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":1431970670941,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.40","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0409{"flow_id":168,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyjX8AAEARWhHAqAEinTg0KDLdnFEAHlwwe4MCZJjbDEMF5Jp3fN4mrZ11ZfLW0g==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":1431970670941,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.40","src_port":13021,"dst_port":40017,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0411{"flow_id":96,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0I6dAAEAGg+7AqAEinTg0LMgunFRemxV3o\/vFuIARECrzuwAAAQEICj4yE95MZ\/7l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":107,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iuxAAEAGHKnAqAEinTg0LMgvAbu6eq7p7rH\/TIARECwTHgAAAQEICj4yE95MaAB9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":60,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970670,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA02WxAADYG74Jv3UotwKgBIpxIyCR2KHYs2DAKCYARAB23kgAAAQEICk2HwJ4+McPk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":108,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82m1AAEAG4PfAqAEib91Nr8gwnF4IVe1D0FEsUoAYECmqiAAAAQEICj4yFaBNo+Jb\/KZqQh\/x2yw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":166,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLhJoAAEARcpTAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":165,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLdIYAAEARgqjAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":157,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrmRxAAEAGv+DAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyP0QAAAQEICj4yFl9OwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":159,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrLPFAAEAGwlnAqAEi1cezsMg+Absskrs7gA\/xNYAYECzyXQAAAQEICj4yF1BO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":169,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51267,"dst_port":40025,"l4_proto":"tcp"}
+0429{"flow_id":169,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABArq9AAEAGEE\/AqAEib91KEshDnFkB\/oZbAAAAALAC\/\/94TQAAAgQFtAEDAwUBAQgKPjIXzQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.171","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0431{"flow_id":170,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBmb4AAEARx3TAqAEiQAQXqzLdnF8ALTBge4UCLJNHDZxrWqKO2le\/27Ln4ZxRCYpxEOdXlle+BhpaiN\/trw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.171","src_port":13021,"dst_port":40031,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0413{"flow_id":171,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1BfQAAEAR+PHAqAEib91KKzLdnEEAIUqfe4cCc5jQ2kkfJiYMRWMm+FrbQ2W3s3qD9w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0409{"flow_id":172,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970671,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0IIEAAEAReCLAqAEiQTffFDLdnFcAIOS9e4kCJNSTA+Y3HirwjN7M3H9IWhw2zkeB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431970672329,"flow_last_seen":1431970672329,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"233.89.188.1","l4_proto":2}
+0402{"flow_id":173,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":60,"pkt":"AQBeWbwBJKQ8\/kzXCABGwAAgAABAAAECfDnAqAHb6Vm8AZQEAAAWAESk6Vm8AQAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431970672329,"flow_last_seen":1431970672329,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"233.89.188.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0421{"flow_id":169,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGyAJv3UoSwKgBIpxZyEOVl6lyAf6GXKASOJAXYAAAAgQFrAQCCApNdqzUPjIXzQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":74,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0BR9AADYGw9Bv3UotwKgBIgG7yCgNTatbSHrP+4ARAB1JQAAAAQEICk2Hwec+Mcjn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":169,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GgdAAEAGpQPAqAEib91KEshDnFkB\/oZclZepc4AQECxtDwAAAQEICj4yGUhNdqzU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":169,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":159,"pkt":"0NQSxnP1PBXCt3IOCABFAACRr\/NAAEAGDrrAqAEib91KEshDnFkB\/oZclZepc4AYECy4BwAAAQEICj4yGUhNdqzUmUO9\/LTafC041uHw5zeCI5+KKboHTmjFCo5WeTXWyCdenOVuxff5eRxdfDzh+VoYuzDhnvc8fYrzCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":72,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0q\/xAADYGTjKdN+uTwKgBIgG7yCZm7ux88c+cxIARAB3RYQAAAQEICkxgXDQ+McgA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":156,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWYEZAAEAGWybAqAEib91Njsg7Abv27otpEKH0yoAYECz2jgAAAQEICj4yGX9NkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":148,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HbNAAEAG0cbAqAEi1cezsMg6nFWOWkflXYl5QIAYECo3igAAAQEICj4yGZpO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":166,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLqkkAAEARTOXAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":165,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLc8IAAEARg2zAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":169,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1040,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0BEBAADcGw8pv3UoSwKgBIpxZyEOVl6lzAf6GuYAQAB18YgAAAQEICk12rTM+MhlI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_id":169,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1041,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":164,"pkt":"PBXCt3IO0NQSxnP1CABFAACWBEFAADcGw2dv3UoSwKgBIpxZyEOVl6lzAf6GuYAYAB3qkwAAAQEICk12rTQ+MhlI25VlLaIMnxH1O7G0LWlkeL2m3P\/jQwKEDXBYIc7BU7grvm3ixARg4gvlu54WDc1aZ+xtumO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78KFet\/w=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":169,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0DZNAAEAGsXfAqAEib91KEshDnFkB\/oa5lZep1YAQEChqzgAAAQEICj4yGm5Ndq00","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":169,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8aOBAAEAGViLAqAEib91KEshDnFkB\/oa5lZep1YAYEChK0gAAAQEICj4yGm5Ndq00xUaEJw2DyPo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":158,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABw\/flAAEAG8eHAqAEinTfrqsg9AbvoZ1rM+umGlIAYECw\/tAAAAQEICj4yGpRMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":145,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8hKtAAEAG1IDAqAEinTeCjsg3nEXoG0gEyGJx5oAYECqw9wAAAQEICj4yGphOwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":1431970672959,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0414{"flow_id":174,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1S7cAAEARFafAqAEiQAQXjDLdnEMAIfDFe4sC3LQi2HlVtL\/yF355PoVbgc9yifdOBA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":1431970672959,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":1431970672959,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.158","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0425{"flow_id":175,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+TFEAAEARFPLAqAEiQAQXnjLdnFUAKkRXe40CBN0haY4HfyNbFaIJe0md26M72eisE+NIO7kZgnvi7w==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":1431970672959,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.158","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0410{"flow_id":108,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YTBAAEAGWj3AqAEib91Nr8gwnF4IVe1L0FEsUoARECkGfQAAAQEICj4yG7pNo+Jb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":119,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970672,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0aYhAAEAGUeXAqAEib91Nr8gyAbuh2H5gZdpOV4ARECy9VAAAAQEICj4yG7pNo+P8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":154,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtKcAAEARQpLAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":155,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAitYAAEARbGPAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":176,"flow_packet_id":1,"flow_first_seen":1431970673563,"flow_last_seen":1431970673563,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51268,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":176,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABApWxAAEAGGZLAqAEib91KEshEAbuPHWWLAAAAALAC\/\/+gUwAAAgQFtAEDAwUBAQgKPjIeFQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":147,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Q3BAAEAGrJ\/AqAEinTfrqsg5nGDRQCMtGayygYAYEChreQAAAQEICj4yHhtMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":146,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UDxAAEAGa0rAqAEib91Njsg4nE30S7wpxRcMPYAYECkS5gAAAQEICj4yH09NkBTphTv5WfSZuu0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":176,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGyAJv3UoSwKgBIgG7yEQiaEt4jx1ljKASOJAO\/AAAAgQFrAQCCApNdq5oPjIeFQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":176,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gVFAAEAGPbnAqAEib91KEshEAbuPHWWMImhLeYAQECxk6gAAAQEICj4yH1FNdq5o","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":176,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8stpAAEAGC+jAqAEib91KEshEAbuPHWWMImhLeYAYECwvmAAAAQEICj4yH1FNdq5ogEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAID2b1S1YuugkY4nrC16I3iJ","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":177,"flow_packet_id":1,"flow_first_seen":1431970673966,"flow_last_seen":1431970673966,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51269,"dst_port":40029,"l4_proto":"tcp"}
+0427{"flow_id":177,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAY6tAAEAGi8vAqAEi1cezr8hFnF3LCMFlAAAAALAC\/\/+c0QAAAgQFtAEDAwUBAQgKPjIfpgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.171","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0409{"flow_id":178,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vU0AAEARcr7AqAEinTfrqzLdnEYAIOCne48C+j3UCj6Khrhd65pIazZgrSV3BW0j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.171","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0418{"flow_id":179,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6zOQAAEARzB\/AqAEinTeCrTLdnEMAJgAFe5ECW1GQc626NgViJqEYKjead5HrxbDyRckYY2Mu","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":13021,"dst_port":40003,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0409{"flow_id":180,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970673,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08VkAAEAR8c7AqAEinTc4jzLdnFIAIGspe5MC1RnFiDDpE1Hd7iM493fNRlWzMToF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.143","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0421{"flow_id":177,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIpxdyEUu77fnywjBZqASOJAmdQAAAgQFrAQCCApO3xkOPjIfpgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":177,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ax5AAEAGhGTAqAEi1cezr8hFnF3LCMFmLu+36IAQECx9awAAAQEICj4yH9pO3xkO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":177,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":164,"pkt":"0NQSxnP1PBXCt3IOCABFAACWN0BAAEAGt+DAqAEi1cezr8hFnF3LCMFmLu+36IAYECxWSwAAAQEICj4yH9pO3xkOsFDI7qsei964fUMEnfCOjiSi3+qAd86vtj0EFy+5edQ39AzLjWycx6MsRrBZOBFqVxzdalPoORYPdFWCi8AxrsfMzZrDmClGfyRFsvtwId43fL3KM0gZdu\/UNeJrIBEOpyw=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":177,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rvNAADgGSI\/Vx7OvwKgBIpxdyEUu77foywjByIAQAB2NCwAAAQEICk7fGRs+Mh\/a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":177,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":119,"pkt":"PBXCt3IO0NQSxnP1CABFAABprvRAADgGSFnVx7OvwKgBIpxdyEUu77foywjByIAYAB2X1gAAAQEICk7fGRs+Mh\/a10zihGPDSRCbV6jDTtE4bVGX24cAHsNTafnkYvrKcBxqv+1jBM1o79Sp1GinOXJA79Q14ms=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":177,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yB9AAEAGJ2PAqAEi1cezr8hFnF3LCMHILu+4HYAQECp8lgAAAQEICj4yIA1O3xkb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":177,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8UydAAEAGnFPAqAEi1cezr8hFnF3LCMHILu+4HYAYECofZQAAAQEICj4yIA5O3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":107,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":135,"pkt":"0NQSxnP1PBXCt3IOCABFAAB51rtAAEAG0JTAqAEinTg0LMgvAbu6eq6k7rH\/TIAZECxHCwAAAQEICj4yIFVMaAB9rs4rj\/Zn4y1sqwdIy3afkOEmLBspD4c0rMSeRLd9b91SLsTSeHa0jfo08XXIbE1KDwebW7o1FbLX0Wq5X\/ZmIfUdu0eE","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":176,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA05c5AADcG4jtv3UoSwKgBIgG7yEQiaEt5jx1l1IAQAB10YgAAAQEICk12rrc+Mh9R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":176,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABM7cdAAEAG0SrAqAEib91KEshEAbuPHWXUImhLeYAYECwwLwAAAQEICj4yIHNNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":157,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrOhNAAEAGHurAqAEinTeCjsg8AbsAEWqgQyFuW4AYECyFOAAAAQEICj4yIPhOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":177,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kZFAAEAGXenAqAEi1cezr8hFnF3LCMHILu+4HYAYECoeGgAAAQEICj4yIVlO3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":159,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABraPNAAEAGhlfAqAEi1cezsMg+Absskrs7gA\/xNYAYECzntQAAAQEICj4yIfhO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":177,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8exhAAEAGdGLAqAEi1cezr8hFnF3LCMHILu+4HYAYECocTQAAAQEICj4yIyZO3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":169,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oBRAAEAGHu7AqAEib91KEshDnFkB\/oa5lZep1YAYEChCDQAAAQEICj4yIzNNdq00xUaEJw2DyPo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0426{"flow_id":181,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/ed8AAEARbbrAqAEinTg0EjLdgQkAK+56e5UCujNYWaHOaIv8Mbnq8Yy9ltzxTGOAleIkOtVygbgwGI4=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0427{"flow_id":182,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/QPIAAEARV4\/AqAEiQTffKzLdnEYAK9tXe5cCDvOGtur9CosePaKDkKEzL5ekZUj+DrgiIjruAPBzlGM=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.150","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0413{"flow_id":183,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2DYgAAEAR1ZfAqAEinTc4ljLdnE4AIk81e5kCIa6rFGHkjW7tTxYGLEfEQXIXcRjIprw=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.150","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0410{"flow_id":120,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0oQpAAEAGgEXAqAEiQAQXpsgznF2bjnmBscFgjYARECkhhgAAAQEICj4yI5dMQvGc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":129,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970674,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pAxAAEAGfUPAqAEiQAQXpsg1Abs0yMtqLkeiTIARECwRKQAAAQEICj4yI5dMQvMv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":156,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABW72hAAEAGzAPAqAEib91Njsg7Abv27otpEKH0yoAYECzqiQAAAQEICj4yJYRNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":166,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLEdEAAEAR5V3AqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":165,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLOQoAAEARviTAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":184,"flow_packet_id":1,"flow_first_seen":1431970675578,"flow_last_seen":1431970675578,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51271,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":184,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVJFAAEAGmuXAqAEi1cezr8hHAbtzmW86AAAAALAC\/\/\/ayQAAAgQFtAEDAwUBAQgKPjIl6QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":177,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mnRAAEAGVQbAqAEi1cezr8hFnF3LCMHILu+4HYAYECoZfQAAAQEICj4yJfZO3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":184,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADgG93rVx7OvwKgBIgG7yEfSVR1Cc5lvO6ASOJBaGQAAAgQFrAQCCApO3xqhPjIl6QEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":184,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0n6FAAEAGT+HAqAEi1cezr8hHAbtzmW870lUdQ4AQECyxBQAAAQEICj4yJidO3xqh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":184,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8BuJAAEAG6FjAqAEi1cezr8hHAbtzmW870lUdQ4AYECxs4wAAAQEICj4yJidO3xqhgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIAAce4HDA3aA9hphr9khfI7","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":184,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0B\/NAADgG74\/Vx7OvwKgBIgG7yEfSVR1Dc5lvg4AQAB3AvAAAAQEICk7fGrE+MiYn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":184,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABakGhAAEAGXvTAqAEi1cezr8hHAbtzmW+D0lUdQ4AYECzDQgAAAQEICj4yJmVO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":148,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA87NBAAEAGAqnAqAEi1cezsMg6nFWOWkflXYl5QIAYECoqQgAAAQEICj4yJuJO3n48uQiwNY7rtQs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":185,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51272,"dst_port":40029,"l4_proto":"tcp"}
+0427{"flow_id":185,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAxtRAAEAGKUnAqAEinTfrmMhInF05JqawAAAAALAC\/\/9CLwAAAgQFtAEDAwUBAQgKPjInhAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.147","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0429{"flow_id":186,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABB4XAAAEARAafAqAEinTc4kzLdnE4ALQw6e5sCLpawwxGRzNJ9jeoeh5bY+9RpiszLnAcSdcNuRnMOI9PLQQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.147","src_port":13021,"dst_port":40014,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0413{"flow_id":187,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970675,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1ktIAAEARBdLAqAEiQTffEjLdnFkAIdOte50CPL9ZRieP6CLGvHSnuteGzwQxXE6Sug==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0442{"flow_id":176,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1098,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMySdAAEAG9crAqAEib91KEshEAbuPHWXUImhLeYAYECwpDwAAAQEICj4yJ5NNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":184,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1099,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABazv5AAEAGIF7AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECzB3wAAAQEICj4yJ8hO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":185,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iGdN+uYwKgBIpxdyEgRBN2QOSamsaASOJC3pAAAAgQFrAQCCApMXif\/PjInhAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":185,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0FvZAAEAG2TPAqAEinTfrmMhInF05JqaxEQTdkYAQECwOiwAAAQEICj4yJ8hMXif\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":185,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":158,"pkt":"0NQSxnP1PBXCt3IOCABFAACQhlBAAEAGaX3AqAEinTfrmMhInF05JqaxEQTdkYAYECyjuQAAAQEICj4yJ8hMXif\/7x1q5iQez43VygkHRboxG3\/Er5jb9Pal3akBDNNDY26BnuxRpYF9l3Bw7v\/tua3vVLVi66CRjiesLXojeIkm3wSlkltQgb6XXB2qkyh5Vk+0lcLLAHHuBwwN2gM=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":185,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09YBAADYGBKmdN+uYwKgBIpxdyEgRBN2ROSanDYAQAB0eLAAAAQEICkxeKBE+MifI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":185,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":147,"pkt":"PBXCt3IO0NQSxnP1CABFAACF9YFAADYGBFedN+uYwKgBIpxdyEgRBN2ROSanDYAYAB3v7wAAAQEICkxeKBM+MifI82CaQndmhTqcGAWjTUg9RTtwKpzADETAisGk7EUy2DAtLvQcwpjqYu46UY+hkcKMxTJ78KFet\/w9SrPImfZvVLVi66CRjiesLXojeIkm3wSl","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":185,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0rbdAAEAGQnLAqAEinTfrmMhInF05JqcNEQTd4oAQECkNgAAAAQEICj4yKBVMXigT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":185,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V85AAEAGmFPAqAEinTfrmMhInF05JqcNEQTd4oAYEClNvAAAAQEICj4yKBVMXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":119,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsh7BAAEAGM4XAqAEib91Nr8gyAbuh2H4oZdpOV4AZECxRGQAAAQEICj4yKFBNo+P8rykSL\/YNWXmmSdsJysigGnvSxhmV7qYqIM+fUQQnb8UpRj+FOZcGRraAYWqHRq8j3tnIqulYKJg=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":158,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwTqxAAEAGoS\/AqAEinTfrqsg9AbvoZ1rM+umGlIAYECwxuwAAAQEICj4yKI1MVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":185,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89DpAAEAG++bAqAEinTfrmMhInF05JqcNEQTd4oAYEClMRgAAAQEICj4yKYtMXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":184,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaYR5AAEAGjj7AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECy\/4AAAAQEICj4yKcdO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":154,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAywMAAEARLDbAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":155,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAW5oAAEARm5\/AqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":177,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8V+VAAEAGl5XAqAEi1cezr8hFnF3LCMHILu+4HYAYECoUpAAAAQEICj4yKs9O3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":251,"pkt":"0NQSxnP1PBXCt3IOCABFAADtZZFAAEAG2TvAqAEiF84hpsgfAbv4Tz2YGDU8XoAYECyM5gAAAQEICj4yKvnsPW3FFgMBALQBAACwAwNVWiNLhX\/\/ejAO4KpxNC8\/ZrCwmmE9wkU90zxCDkcIKAAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAPQAAABMAEQAADmFwcHMuc2t5cGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":1431970676959,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0414{"flow_id":188,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2RjwAAEAR6djAqAEinTfroDLdnFYAIpfGe58CtglNf35c9xed\/TOYZPtdg4AQKYWmKBE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":1431970676959,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40022,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":1431970676959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0418{"flow_id":189,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970676,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5iSIAAEARWf7AqAEinTc4kjLdnF4AJWUse6ECi+HEJAzVpo3ery\/yzADPEQnmy2088qUgojE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":1431970676959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0423{"flow_id":185,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8eChAAEAGd\/nAqAEinTfrmMhInF05JqcNEQTd4oAYEClKIwAAAQEICj4yK65MXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":96,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0O6RAADMGePGdODQswKgBIpxUyC6j+8XAXpsVb4ARAB0n7gAAAQEICkxoExk+MduF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":169,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uTZAAEAGBczAqAEib91KEshDnFkB\/oa5lZep1YAYECg5SAAAAQEICj4yK\/hNdq00xUaEJw2DyPo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":184,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaEXRAAEAG3ejAqAEi1cezr8hHAbtzmW+D0lUdQ4AYECy8qwAAAQEICj4yLPxO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":120,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8PThAAEAG5A\/AqAEiQAQXpsgznF2bjnl5scFgjYAZECmsYQAAAQEICj4yLcRMQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":190,"flow_packet_id":1,"flow_first_seen":1431970677603,"flow_last_seen":1431970677603,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51274,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":190,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAVVtAAEAGmsLAqAEinTfrmMhKAbuh9dLFAAAAALAC\/\/9BpgAAAgQFtAEDAwUBAQgKPjItyQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":190,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iGdN+uYwKgBIgG7yErORgmHofXSxqASOJDMTwAAAgQFrAQCCApMXimSPjItyQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":190,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tRpAAEAGOw\/AqAEinTfrmMhKAbuh9dLGzkYJiIAQECwjOgAAAQEICj4yLglMXimS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":190,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8ls9AAEAGWRLAqAEinTfrmMhKAbuh9dLGzkYJiIAYECyd2QAAAQEICj4yLglMXimSgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBouZaP9NUCC0CxLkdMTRpD","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":190,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0ICpAADYG2f+dN+uYwKgBIgG7yErORgmIofXTDoAQAB0y8QAAAQEICkxeKaI+Mi4J","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":190,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABp07ZAAEAGHD7AqAEinTfrmMhKAbuh9dMOzkYJiIAYECygLwAAAQEICj4yLktMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":147,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vr9AAEAGMVDAqAEinTfrqsg5nGDRQCMtGayygYAYEChbEQAAAQEICj4yLoNMVm\/1OYUqH2Q1qrY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":176,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMTWxAAEAGcYbAqAEib91KEshEAbuPHWXUImhLeYAYECwh7wAAAQEICj4yLrNNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":145,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8pqRAAEAGsofAqAEinTeCjsg3nEXoG0gEyGJx5oAYECqcrgAAAQEICj4yLuFOwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":185,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8u0ZAAEAGNNvAqAEinTfrmMhInF05JqcNEQTd4oAYEClGpgAAAQEICj4yLytMXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0425{"flow_id":191,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":76,"pkt":"0NQSxnP1PBXCt3IOCABFAAA+xqAAAEAR0mLAqAEinTeCqjLdnFIAKv3he6MC3h4IlBBBiQEMzD2u81WGXlCVYngNZSbA0YydRzOnaw==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":13021,"dst_port":40018,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.159","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0409{"flow_id":192,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyXBgAAEARPQLAqAEinTeCnzLdnFAAHlQNe6UCbRCk9Zm0qay7l4LGg8ZPRvGp2A==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.159","src_port":13021,"dst_port":40016,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.170","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0426{"flow_id":193,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970677,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABATykAAEARrDLAqAEib91NqjLdnFUALAKIe6cC06nLoifBCja4NtBTBPAIMkjY1r+eVyo0K906xL\/RnajP","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.170","src_port":13021,"dst_port":40021,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0484{"flow_id":190,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABpUC5AAEAGn8bAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyexAAAAQEICj4yL7ZMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":60,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA82W1AADYG73lv3UotwKgBIpxIyCR2KHYk2DAKCYAYAB1GaQAAAQEICk2Hx8A+McPk18UgKt1JlMY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":159,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABr679AAEAGA4vAqAEi1cezsMg+Absskrs7gA\/xNYAYECzY7QAAAQEICj4yMMBO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":190,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABpBntAAEAG6XnAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyctwAAAQEICj4yMcNMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":165,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLbKoAAEARioTAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":166,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLq2IAAEARS8zAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":107,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/zdAADMGtV2dODQswKgBIgG7yC\/usf+bunqupIARAB1B\/gAAAQEICkxoFM0+MeCz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":184,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaoa1AAEAGTa\/AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECy3CgAAAQEICj4yMp1O3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":129,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":127,"pkt":"0NQSxnP1PBXCt3IOCABFAABx5S1AAEAGO+XAqAEiQAQXpsg1Abs0yMstLkeiTIAZECySxAAAAQEICj4yMqZMQvMvj3RAvemHT+P7z0rouwAwTgf6jSGe3VlkB506Kg5x6iMueUoaC06tZlkow8O3V51nHVDge5Zkoq+VQDfaxQ==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+1064{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/PBXCt3IOCABFAAISqNoAAEARDjfAqAEi\/\/\/\/\/0RcRFwB\/vqceyJob3N0X2ludCI6IDE1NzMxOTU0NDUsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1060{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":108,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0zltAADYG9xFv3U2vwKgBIpxeyDDQUSxaCFXtQ4ARAB062gAAAQEICk2j9mU+MeNf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0427{"flow_id":194,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/p1UAAEAR8T7AqAEiQTffGDLdnF0AK+jLe6kC6fGNK2goAXsNse6RdApll6kRm4bOwgAP2hC\/D2eOAyk=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40029,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0422{"flow_id":195,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7GMMAAEARF0\/AqAEinTfrnjLdnFsAJ5Hde6sCJ8R84KyvegILw5PDMDyyzP0qbIKzwXJl3e6CLA==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40027,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.16","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0417{"flow_id":196,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970678,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA49SsAAEARo3fAqAEiQTffEDLdnGAAJBSJe60CT4+h0ZiCfQwqP7NMcZ5acjfF0jfx+oM28A==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.16","src_port":13021,"dst_port":40032,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+1064{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+1060{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":129,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":128,"pkt":"PBXCt3IO0NQSxnP1CABFAAByUWlAADYG2ahABBemwKgBIgG7yDUuR6KbNMjLa4AZAB0lqwAAAQEICkxDA\/w+MjKmHICQbtHFQnC9psgvY9YKQc8qPv8hKVwzZzoO3xpEQw9YsjMO6v0VQd\/siDDiwWhBpVXKCbrCFreU7q7JA2M=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":129,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo3N9AAEAGRHzAqAEiQAQXpsg1Abs0yMtrAAAAAFAEAADMRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":177,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FdtAAEAG2Z\/AqAEi1cezr8hFnF3LCMHILu+4HYAYECoLvAAAAQEICj4yM7dO3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":190,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABpP+ZAAEAGsA7AqAEinTfrmMhKAbuh9dMOzkYJiIAYECyZZwAAAQEICj4yNRNMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":185,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89DtAAEAG++XAqAEinTfrmMhInF05JqcNEQTd4oAYEClAdQAAAQEICj4yNVxMXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":157,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrna9AAEAGu03AqAEinTeCjsg8AbsAEWqgQyFuW4AYECxw0AAAAQEICj4yNWBOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_id":74,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDBSBAADYGw4Bv3UotwKgBIgG7yCgNTasMSHrP+4AYAB2qogAAAQEICk2HyQg+McjnFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":74,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoD41AAEAGr27AqAEib91KLcgoAbtIes\/7AAAAAFAEAABRsgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":1431970679839,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60413,"dst_port":53,"l4_proto":"udp"}
+0442{"flow_id":197,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK0kgAAEARJOfAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":197,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":1431970679839,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60413,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst0.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":1431970679839,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64364,"dst_port":53,"l4_proto":"udp"}
+0441{"flow_id":198,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKzS8AAEARKgDAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":198,"flow_packet_id":1,"flow_first_seen":1431970679839,"flow_last_seen":1431970679839,"flow_tot_l4_data_len":54,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64364,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"335.0.7.7.3.rst0.r.skype.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0422{"flow_id":146,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8RfhAAEAGdY7AqAEib91Njsg4nE30S7wpxRcMPYAYECn7nQAAAQEICj4yNpdNkBTphTv5WfSZuu0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":1431970679995,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.149","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0422{"flow_id":199,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":73,"pkt":"0NQSxnP1PBXCt3IOCABFAAA7shQAAEARfXbAqAEi1cezlTLdnF4AJ7D1e68CWBP9byLKqG9T\/ZSkhpqmfvjcm+3DFpOZwv2yxQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":1431970679995,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.149","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":1431970679995,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.29","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0414{"flow_id":200,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970679,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA12TQAAEARDmTAqAEinTg0HTLdnEoAIVxje7ECiU\/XVCamnPFSSydeUAuZRUP3ucHK0w==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":1431970679995,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.29","src_port":13021,"dst_port":40010,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0410{"flow_id":119,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970680,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rbJAADYGF7tv3U2vwKgBIgG7yDJl2k6modh+KIARAB3sngAAAQEICk2j97g+Meis","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":197,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970680,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKn9sAAEARV1TAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":198,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970680,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKCR0AAEAR7hLAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":190,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970680,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABpt85AAEAGOCbAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyTjgAAAQEICj4yOuxMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.43","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0426{"flow_id":201,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2XQAAEARDgvAqAEinTg0KzLdnEYALMh9e7MC2jL0tZM0Yzvr0KHAzi3oveeicB3qmta1c4OVExZFkpM\/","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.43","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0413{"flow_id":202,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":67,"pkt":"0NQSxnP1PBXCt3IOCABFAAA1sl0AAEARTKHAqAEib91KEjLdgQkAIR6we7UCnzLS60tunXakNuMsocCUgSoxAT5iGw==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0427{"flow_id":203,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":77,"pkt":"0NQSxnP1PBXCt3IOCABFAAA\/HVAAAEARe03AqAEiQTffDzLdnF4AK6Bke7cC41QXoMCqTrFc3jjyFt76m6sxlqO9wK+EPcEKNtA\/tkI=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40030,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0493{"flow_id":158,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":126,"pkt":"0NQSxnP1PBXCt3IOCABFAABwHH1AAEAG017AqAEinTfrqsg9AbvoZ1rM+umGlIAYECweUgAAAQEICj4yO\/ZMVnGKp9iYwrlcLUTfptpUQ9HnlFyq2KvXjkAGnxSlIXPZFxPNf26I7IG6HpdVzoKbtM+2y58XZOdHADBnVSgw","pkt_caplen":126,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":176,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABM2ZVAAEAG5VzAqAEib91KEshEAbuPHWXUImhLeYAYECwUdwAAAQEICj4yPCtNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":169,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8cPtAAEAGTgfAqAEib91KEshDnFkB\/oa5lZep1YAYECgohwAAAQEICj4yPLlNdq00xUaEJw2DyPo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":156,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":100,"pkt":"0NQSxnP1PBXCt3IOCABFAABWiKdAAEAGMsXAqAEib91Njsg7Abv27otpEKH0yoAYECzTSAAAAQEICj4yPMVNkBZ5b6tnM5g+MIH9ugWQ4EK6dUZuKY7n+8BcqJBKLNao313kcQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":184,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABatu1AAEAGOG\/AqAEi1cezr8hHAbtzmW+D0lUdQ4AYECyskQAAAQEICj4yPRZO3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":197,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKnmgAAEARWMfAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":198,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKbIIAAEARiq3AqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":1431970681960,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.144","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0414{"flow_id":204,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3frUAAEARsN7AqAEi1cezkDLdnEkAIwRMe7kCZypNkc74yL7GF7GC5QinylqI\/WPnVsk+","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":1431970681960,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.144","src_port":13021,"dst_port":40009,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":1431970681960,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0429{"flow_id":205,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970681,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBaTkAAEARlaPAqAEib91KKDLdnFkALS1Je7sCEGG8jv3asKVduW1KlINShpl5CYZ6daDh4AHUflFCiwcMag==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":1431970681960,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40025,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0410{"flow_id":145,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dXdAAEAG47zAqAEinTeCjsg3nEXoG0gMyGJx5oARECo0XgAAAQEICj4yPvJOwLXQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":157,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HVdAAEAGO93AqAEinTeCjsg8AbsAEWrXQyFuW4ARECwbXAAAAQEICj4yPvJOwLdi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":146,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0hSdAAEAGNmfAqAEib91Njsg4nE30S7wxxRcMPYARECkhZwAAAQEICj4yPvJNkBTp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":156,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0btdAAEAGTLfAqAEib91Njsg7Abv27ouLEKH0yoARECy0TwAAAQEICj4yPvJNkBZ5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":147,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z29AAEAGIKjAqAEinTfrqsg5nGDRQCM1GayygYARECi9OQAAAQEICj4yPvJMVm\/1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":158,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0w+RAAEAGLDPAqAEinTfrqsg9AbvoZ1sI+umGlIARECxR9wAAAQEICj4yPvJMVnGK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":148,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YS1AAEAGjlTAqAEi1cezsMg6nFWOWkftXYl5QIARECq\/bgAAAQEICj4yPvJO3n48","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":159,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JHdAAEAGywrAqAEi1cezsMg+AbsskrtygA\/xNYARECysNQAAAQEICj4yPvJO3n\/R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":177,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8VxNAAEAGmGfAqAEi1cezr8hFnF3LCMHILu+4HYAYECr\/kwAAAQEICj4yP99O3xkb8jl+H1rFkgE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":185,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8zJhAAEAGI4nAqAEinTfrmMhInF05JqcNEQTd4oAYECk03AAAAQEICj4yQPVMXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":206,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":1431970682971,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51276,"dst_port":40021,"l4_proto":"tcp"}
+0428{"flow_id":206,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA7SRAAEAGAv\/AqAEinTfrkshMnFVVB2sVAAAAALAC\/\/9GzAAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":207,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":1431970682971,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51277,"dst_port":40026,"l4_proto":"tcp"}
+0427{"flow_id":207,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA5x1AAEAGCPzAqAEinTfrnMhNnFpJkZ45AAAAALAC\/\/8fDgAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":208,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":1431970682971,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51278,"dst_port":40009,"l4_proto":"tcp"}
+0427{"flow_id":208,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAMNRAAEAG8HbAqAEiQAQXn8hOnEl2PjrTAAAAALAC\/\/+HCAAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":209,"flow_packet_id":1,"flow_first_seen":1431970682971,"flow_last_seen":1431970682971,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51279,"dst_port":40008,"l4_proto":"tcp"}
+0427{"flow_id":209,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABARUhAAEAGeZjAqAEib91KMMhPnEhg80NCAAAAALAC\/\/8xegAAAgQFtAEDAwUBAQgKPjJCqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":1431970682972,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0413{"flow_id":210,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":68,"pkt":"0NQSxnP1PBXCt3IOCABFAAA2ToQAAEARSoLAqAEinTeCrzLdnEYAIsBye70C0WV2Jw2JJv9T381tb7aFs7ugTny6Jk4=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":1431970682972,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":1431970682972,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.173","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0430{"flow_id":211,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970682,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBmw8AAEARYEjAqAEib91NrTLdnEwALft7e78CS2barOC4bSdle3ySCU4isieKFyYrhir3D1S\/zus1mmpuRQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":1431970682972,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.173","src_port":13021,"dst_port":40012,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0421{"flow_id":206,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIpxVyEzh8Ob8VQdrFqASOJAqmgAAAgQFrAQCCApMYN9LPjJCqwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":206,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JNdAAEAGy1jAqAEinTfrkshMnFVVB2sW4fDm\/YAQECyBfAAAAQEICj4yQvNMYN9L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":206,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3Mo1AAEAGvV\/AqAEinTfrkshMnFVVB2sW4fDm\/YAYECzPowAAAQEICj4yQvNMYN9LG\/ElW63KxOao8VKmuRdmcRFihQOEgdmeqxt9tl+ffCv6XLznEh5tysSzRUGu2IKGHne8\/QpziFm2LxR1IqtgUU7nbA==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":207,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIpxayE3JOyrZSZGeOqASOJDTSQAAAgQFrAQCCApMXOO6PjJCqwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":207,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA01TpAAEAGGuvAqAEinTfrnMhNnFpJkZ46yTsq2oAQECwqIwAAAQEICj4yQvxMXOO6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":207,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":163,"pkt":"0NQSxnP1PBXCt3IOCABFAACVOl9AAEAGtWXAqAEinTfrnMhNnFpJkZ46yTsq2oAYECztNgAAAQEICj4yQvxMXOO6eu0vh176uYm6c2RIVTTR0fS0NT1U5YUHZVwzlQnY7csn7B727YRBP18moobM811vCNk2r5T1oivg0c5n7G26Y7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGA==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":206,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0OaBAADYGwI+dN+uSwKgBIpxVyEzh8Ob9VQdrWYAQAB2RNgAAAQEICkxg310+MkLz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":206,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":134,"pkt":"PBXCt3IO0NQSxnP1CABFAAB4OaFAADYGwEqdN+uSwKgBIpxVyEzh8Ob9VQdrWYAYAB0zxgAAAQEICkxg318+MkLzkus8AAwCfM3owe8Rugue4BJ56BgDHvSoAIZldmTU389cQqPzNwkroIwrFwa4FmRHNeJrIBEOpyyt+qP4CaZfhCUS29A=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":206,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09QdAAEAG+yfAqAEinTfrkshMnFVVB2tZ4fDnQYAQECmAlgAAAQEICj4yQ0FMYN9f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":206,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81hdAAEAGGhDAqAEinTfrkshMnFVVB2tZ4fDnQYAYEClyKAAAAQEICj4yQ0FMYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":207,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0yRRAADYGMRGdN+ucwKgBIpxayE3JOyraSZGem4AQAB05vAAAAQEICkxc488+MkL8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":207,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":171,"pkt":"PBXCt3IO0NQSxnP1CABFAACdyRVAADYGMKedN+ucwKgBIpxayE3JOyraSZGem4AYAB1KswAAAQEICkxc488+MkL8\/MD9lxcN4ZY6g8PtlmYUkXNIJH2B8YLKnpSEcCqDe1jRVXkke+4zPaaUy4EN6+9+LxR1IqtgUU7nbO064zhJ5p\/EZVIbEEF+VxzdalPoORYPdFWCi8AxrsfMzZrDmClGfyRFsvtwId43","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":207,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0HQlAAEAG0xzAqAEinTfrnMhNnFpJkZ6byTsrQ4AQECgo+AAAAQEICj4yQ0xMXOPP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":207,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TAFAAEAGpBzAqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChoeQAAAQEICj4yQ0xMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":208,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK09ABBefwKgBIpxJyE4gX59Fdj461KASOJB7AAAAAgQFrAQCCApMR9iDPjJCqwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":208,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05M1AAEAGPInAqAEiQAQXn8hOnEl2PjrUIF+fRoAQECzRaAAAAQEICj4yQ21MR9iD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":208,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":132,"pkt":"0NQSxnP1PBXCt3IOCABFAAB2y9ZAAEAGVT7AqAEiQAQXn8hOnEl2PjrUIF+fRoAYECw4egAAAQEICj4yQ21MR9iDR4AhIcsYB9idZvLEBki\/S\/4DWmvHVbXeuwd63Ms4CiMKW69PvOOrt2NITXe3mDz066CRjiesLXojeIkm3wSlkltQ","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":208,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0R\/VAADYG42FABBefwKgBIpxJyE4gX59Gdj47FoAQAB3hBAAAAQEICkxH2LQ+MkNt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":208,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":173,"pkt":"PBXCt3IO0NQSxnP1CABFAACfR\/ZAADYG4vVABBefwKgBIpxJyE4gX59Gdj47FoAYAB0vEgAAAQEICkxH2LQ+MkNtm2Q62Hczhg2ed6XZEB0K7w6LRK4+swp2YiQBwuVhCdt\/tvdp2c9J4+1Du91WJjmFY7jJZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/D1Ks8iZ9m9UtWLroJE=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":208,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA014pAAEAGSczAqAEiQAQXn8hOnEl2PjsWIF+fsYAQECjPyAAAAQEICj4yRDNMR9i0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":208,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8znxAAEAGUtLAqAEiQAQXn8hOnEl2PjsWIF+fsYAYECgiUgAAAQEICj4yRDNMR9i06BKmNwKjHHk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":206,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8biRAAEAGggPAqAEinTfrkshMnFVVB2tZ4fDnQYAYEClwqwAAAQEICj4yRL5MYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":207,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XZRAAEAGkonAqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChm5AAAAQEICj4yROFMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":190,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABpdhtAAEAGednAqAEinTfrmMhKAbuh9dMOzkYJiIAYECyIpQAAAQEICj4yRdVMXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":209,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAGihAAEAGpLjAqAEib91KMMhPnEhg80NCAAAAALAC\/\/8tkQAAAgQFtAEDAwUBAQgKPjJGlAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0422{"flow_id":212,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8i9IAAEARpC3AqAEinTfrrzLdnFcAKG0ve8ECvWqBesxtVN\/+FF8A8FJFXO0bTxFAGhtLbx9IUYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40023,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0409{"flow_id":213,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Ni4AAEARsXfAqAEinTg0ETLdnE0AIDQfe8MCmFcjIzVltOuGOdvvgZmibnosxcEh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0409{"flow_id":214,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970683,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0PqwAAEARIpXAqAEiQAQXqjLdnEsAIM3ke8UC93ejJq9SbNcOBlZBFwBC35pf1nt9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0422{"flow_id":206,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84vRAAEAGDTPAqAEinTfrkshMnFVVB2tZ4fDnQYAYECluegAAAQEICj4yRu9MYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":207,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Jt5AAEAGyT\/AqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChkhAAAAQEICj4yR0FMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":209,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+Rv3UowwKgBIpxIyE81se9IYPNDQ6ASOJCdPQAAAgQFrAQCCApNifogPjJCqwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":209,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0vlRAAEAGAJjAqAEib91KMMhPnEhg80NDNbHvSYAQECzvXQAAAQEICj4yR7VNifog","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":209,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":116,"pkt":"0NQSxnP1PBXCt3IOCABFAABma2tAAEAGU0\/AqAEib91KMMhPnEhg80NDNbHvSYAYECz6rAAAAQEICj4yR7VNifog6S4q4yHQSfbXIeMHlq6o2PrMPtbeI4QAQSVzvS6sYktY0zKVyCE6kzOh9W8oGR9AmsM=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":208,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83DdAAEAGRRfAqAEiQAQXn8hOnEl2PjsWIF+fsYAYECgdvgAAAQEICj4ySMdMR9i06BKmNwKjHHk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":209,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0FSBAADcGssxv3UowwKgBIpxIyE81se9JYPNDdYAQAB3+8QAAAQEICk2J+mk+Mke1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":209,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":169,"pkt":"PBXCt3IO0NQSxnP1CABFAACbFSFAADcGsmRv3UowwKgBIpxIyE81se9JYPNDdYAYAB2FVwAAAQEICk2J+mk+Mke1yNVL9qyoiY0MBsyANMGSNjrd5g1ndD1+H5z8rKkNmwGp5zI9pi6xZhVsHc8MmY79QX5XHN1qU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36ow==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":209,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S\/pAAEAGcvLAqAEib91KMMhPnEhg80N1NbHvsIAQECjtWQAAAQEICj4ySNtNifpp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":209,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA857NAAEAG1zDAqAEib91KMMhPnEhg80N1NbHvsIAYECha\/AAAAQEICj4ySNtNifppdiL3+rNlcMo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":215,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":1431970684583,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51280,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":215,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJbZAAEAGym3AqAEinTfrkshQAbtIMwlhAAAAALAC\/\/9JqAAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":216,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":1431970684583,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51281,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":216,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABATSFAAEAGovjAqAEinTfrnMhRAbsdDADVAAAAALAC\/\/99UAAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":217,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":1431970684583,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51282,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":217,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA0\/xAAEAGTU7AqAEiQAQXn8hSAbvNFjtFAAAAALAC\/\/\/EBQAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":218,"flow_packet_id":1,"flow_first_seen":1431970684583,"flow_last_seen":1431970684583,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51283,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":218,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAs0xAAEAGC5TAqAEib91KMMhTAbtJAhNrAAAAALAC\/\/8NiQAAAgQFtAEDAwUBAQgKPjJI7gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":215,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+iedN+uSwKgBIgG7yFDrM+1YSDMJYqASOJAcRAAAAgQFrAQCCApMYODePjJI7gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":216,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYG+h2dN+ucwKgBIgG7yFE1cNv2HQwA1qASOJASpwAAAgQFrAQCCApMXOVNPjJI7gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":215,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0Kw9AAEAGxSDAqAEinTfrkshQAbtIMwli6zPtWYAQECxzIwAAAQEICj4ySTlMYODe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":216,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tXdAAEAGOq7AqAEinTfrnMhRAbsdDADWNXDb94AQECxphgAAAQEICj4ySTlMXOVN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_id":215,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8fsFAAEAGcSbAqAEinTfrkshQAbtIMwli6zPtWYAYECxWCQAAAQEICj4ySTlMYODegEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAICHjI1ag1jpBj\/kBXK7MOGe","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":216,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8VFpAAEAGm4PAqAEinTfrnMhRAbsdDADWNXDb94AYECzL6gAAAQEICj4ySTlMXOVNgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAID3PH2K8wjZNq+U9aIr4NHO","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":215,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0DahAADYG7IedN+uSwKgBIgG7yFDrM+1ZSDMJqoAQAB2C1wAAAQEICkxg4PE+Mkk5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":216,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0PpdAADYGu46dN+ucwKgBIgG7yFE1cNv3HQwBHoAQAB15OgAAAQEICkxc5WA+Mkk5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":215,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABazKNAAEAGI2bAqAEinTfrkshQAbtIMwmq6zPtWYAYECx8LQAAAQEICj4ySYZMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":216,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABVGdhAAEAG1izAqAEinTfrnMhRAbsdDAEeNXDb94AYECxb9wAAAQEICj4ySYZMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":217,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGK09ABBefwKgBIgG7yFJrWCY7zRY7RqASOJDkfAAAAgQFrAQCCApMR9oVPjJI7gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":217,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bUpAAEAGtAzAqAEiQAQXn8hSAbvNFjtGa1gmPIAQECw65QAAAQEICj4ySbBMR9oV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":217,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":138,"pkt":"0NQSxnP1PBXCt3IOCABFAAB8lGVAAEAGjKnAqAEiQAQXn8hSAbvNFjtGa1gmPIAYECwbywAAAQEICj4ySbBMR9oVgEYBAwEALQAAABAAAAUAAAQAAAoAAAkAAGQAAGIAAAgAAAMAAAYBAIAHAMADAIAGAEACAIAEAIBn7G26Y7jJZh9E5dKbkMH+","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":209,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8FSJAADcGssJv3UowwKgBIpxIyE81se+wYPNDdYAYAB1TYgAAAQEICk2J+rI+MkjbQeP0Ugn+aXU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":209,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TBBAAEAGctzAqAEib91KMMhPnEhg80N9NbHvuIAQECjr3QAAAQEICj4ySf5Nifqy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":218,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADcGx+Rv3UowwKgBIgG7yFO6F0g1SQITbKASOJCbYQAAAgQFrAQCCApNifq4PjJI7gEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":218,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo55hAAEAG11\/AqAEib91KMMhTAbtJAhNsAAAAAFAEAAANjAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":209,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0FSNAADcGsslv3UowwKgBIpxIyE81se+4YPNDfYAQAB39AAAAAQEICk2J+r0+Mkjb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":209,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":112,"pkt":"0NQSxnP1PBXCt3IOCABFAABixzFAAEAG94zAqAEib91KMMhPnEhg80N9NbHvuIAYECh6agAAAQEICj4ySiVNifq9GLe0D4Tn9QWk7lg3TOi+kHeOZN728IAqJqmwFk6udAQJYg5gSDcpHRSwOSRd0g==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":217,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0\/HpAADYGLtxABBefwKgBIgG7yFJrWCY8zRY7joAQAB1KewAAAQEICkxH2kY+Mkmw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":217,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABkagBAAEAGtybAqAEiQAQXn8hSAbvNFjuOa1gmPIAYECyhWwAAAQEICj4ySnJMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":206,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WuNAAEAGlUTAqAEinTfrkshMnFVVB2tZ4fDnQYAYEClq4gAAAQEICj4ySodMYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0409{"flow_id":219,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":64,"pkt":"0NQSxnP1PBXCt3IOCABFAAAyBX4AAEARk57AqAEinTeCnTLdnE0AHhvPe8cCM2e01AKVV7JkJRCi7OoE7P+SqQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0422{"flow_id":220,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MWwAAEARL9zAqAEiQAQXmzLdnEQAKCm\/e8kCIw7UNc1vAeAYbNVJreKXHNKN8e8UIdCt8moAbvU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0429{"flow_id":221,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970684,"pkt_len":79,"pkt":"0NQSxnP1PBXCt3IOCABFAABBr7UAAEARf9fAqAEi1cezjTLdnE8ALaWJe8sCd26eaxqppENRG4WXSuPXFKjQruFJphoXGEqS7tX7w9Yk1Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0442{"flow_id":198,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABK\/5kAAEAR95XAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":197,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKlSsAAEARYgTAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":145,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XEBAAEAG\/OvAqAEinTeCjsg3nEXoG0gEyGJx5oAZECqAhAAAAQEICj4ySwpOwLXQr3KT27Tir4g=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":216,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABVJapAAEAGylrAqAEinTfrnMhRAbsdDAEeNXDb94AYECxacgAAAQEICj4ySwtMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":215,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABalixAAEAGWd3AqAEinTfrkshQAbtIMwmq6zPtWYAYECx6qAAAAQEICj4ySwtMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":209,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":95,"pkt":"PBXCt3IO0NQSxnP1CABFAABRFSRAADcGsqtv3UowwKgBIpxIyE81se+4YPNDfYAYAB1z\/AAAAQEICk2J+vw+Mkn+xXOaElxWbFuLSNnm3o\/Fjm1lnJVEzM0mszz\/y4c=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":209,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iTFAAEAGNbvAqAEib91KMMhPnEhg80OrNbHv1YAQECfqJwAAAQEICj4ySyBNifr8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":207,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8rRdAAEAGQwbAqAEinTfrnMhNnFpJkZ6byTsrQ4AYEChgjAAAAQEICj4ySzlMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":184,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABa1hVAAEAGGUfAqAEi1cezr8hHAbtzmW+D0lUdQ4AYECyeSQAAAQEICj4yS15O3xqxJBunUkBMeJMsfT1eF4pqVDnte2DgNERt9BmDXlOuUVzA32khXIM=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":108,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8zlxAADYG9whv3U2vwKgBIpxeyDDQUSxSCFXtQ4AYAB2N+wAAAQEICk2j\/OA+MeNfPKoQLQ7QSrU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":96,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8O6VAADMGeOidODQswKgBIpxUyC6j+8W4XpsVb4AYAB1arAAAAQEICkxoG3g+MduFVLc8bSFmElE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":154,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAxaAAAEARMZnAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":155,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXDMAAEARmwbAqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":216,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABV8q5AAEAG\/VXAqAEinTfrnMhRAbsdDAEeNXDb94AYECxYLwAAAQEICj4yTU5MXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":215,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaQBJAAEAGr\/fAqAEinTfrkshQAbtIMwmq6zPtWYAYECx4ZQAAAQEICj4yTU5MYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":208,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8i2lAAEAGleXAqAEiQAQXn8hOnEl2PjsWIF+fsYAYECgZKQAAAQEICj4yTVxMR9i06BKmNwKjHHk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":159,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrNJRAAEAGurbAqAEi1cezsMg+Absskrs7gA\/xNYAZECy8IwAAAQEICj4yTYlO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":59237,"dst_port":1900,"l4_proto":"udp"}
+0564{"flow_id":222,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":175,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChckEAAAERlUbAqAEi7\/\/\/+udlB2wAjUvnTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":222,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":59237,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0560{"flow_id":222,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":174,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgeC8AAAERj1nAqAEi7\/\/\/+udlB2wAjLHaTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":58061,"dst_port":1900,"l4_proto":"udp"}
+0565{"flow_id":223,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":175,"pkt":"AQBef\/\/6PBXCt3IOCABFAAChI3QAAAER5BPAqAEi7\/\/\/+uLNB2wAjVB\/TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOUFBQQ29ubmVjdGlvbjoxDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":223,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":141,"flow_min_l4_data_len":141,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":58061,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0560{"flow_id":223,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":174,"pkt":"AQBef\/\/6PBXCt3IOCABFAACgWWQAAAERriTAqAEi7\/\/\/+uLNB2wAjLZyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KTVg6IDINCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KU1Q6IHVybjpzY2hlbWFzLXVwbnAtb3JnOnNlcnZpY2U6V0FOSVBDb25uZWN0aW9uOjENCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":224,"flow_packet_id":1,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59052,"dst_port":5351,"l4_proto":"udp"}
+0393{"flow_id":224,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo7Q4AAEARCkPAqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431970685839,"flow_last_seen":1431970685839,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp"}
+0433{"flow_id":225,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABElr0AAEABX8jAqAEBwKgBIgMDgJYAAAAARQAAKO0OAABAEQpDwKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":225,"flow_packet_id":1,"flow_first_seen":1431970685839,"flow_last_seen":1431970685839,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":226,"flow_packet_id":1,"flow_first_seen":1431970685852,"flow_last_seen":1431970685852,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51284,"dst_port":12350,"l4_proto":"tcp"}
+0427{"flow_id":226,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXIlAAEAG5ijAqAEiW77afchUMD4lFgKCAAAAALAC\/\/+SwgAAAgQFtAEDAwUBAQgKPjJN1wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":226,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0NCRAAPQGWplbvtp9wKgBIjA+yFR61rIKJRYCg4ASH\/4KBwAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":226,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoGAJAAEAGKsjAqAEiW77afchUMD4lFgKDetayC1AQIABKwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":226,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":105,"pkt":"0NQSxnP1PBXCt3IOCABFAABbqGlAAEAGmi3AqAEiW77afchUMD4lFgKDetayC1AYIACNzQAA1a99jnvZiFawQpx1ibr2pzSDK7StrM160W2HXA\/w\/P1uz0n3SPhAgA9gcBRVY3ta\/6TF","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":226,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970685,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoJyRAADcGJKZbvtp9wKgBIjA+yFR61rILJRYCtlAQA6Bm7QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":169,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08oZAAEAGzIPAqAEib91KEshDnFkB\/obBlZep1YARECg2lgAAAQEICj4yTp1Ndq00","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":176,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0tJtAAEAGCm\/AqAEib91KEshEAbuPHWXsImhLeYARECw07gAAAQEICj4yTp1Ndq63","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":177,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02kpAAEAGFTjAqAEi1cezr8hFnF3LCMHQLu+4HYARECpN\/QAAAQEICj4yTp1O3xkb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":184,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0S\/tAAEAGo4fAqAEi1cezr8hHAbtzmW+p0lUdQ4ARECyIEAAAAQEICj4yTp1O3xqx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":185,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA09DlAAEAG++\/AqAEinTfrmMhInF05JqcVEQTd4oARECnm7gAAAQEICj4yTp1MXigT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":190,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bExAAEAGg93AqAEinTfrmMhKAbuh9dNDzkYJiIARECwCGAAAAQEICj4yTp1MXimi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":206,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z6NAAEAGIIzAqAEinTfrkshMnFVVB2th4fDnQYARECl1MQAAAQEICj4yTp1MYN9f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":215,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QxVAAEAGrRrAqAEinTfrkshQAbtIMwnQ6zPtWYARECxtPQAAAQEICj4yTp1MYODx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":207,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dj9AAEAGeebAqAEinTfrnMhNnFpJkZ6jyTsrQ4ARECgdngAAAQEICj4yTp1MXOPP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":216,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iaFAAEAGZoTAqAEinTfrnMhRAbsdDAE\/NXDb94ARECxjpQAAAQEICj4yTp1MXOVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":208,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0VDFAAEAGzSXAqAEiQAQXn8hOnEl2PjseIF+fsYARECjFVQAAAQEICj4yTp1MR9i0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":217,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0B99AAEAGGXjAqAEiQAQXn8hSAbvNFju+a1gmPIARECw1TgAAAQEICj4yTp1MR9pG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":224,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAomw4AAEARXEPAqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":225,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABElr4AAEABX8fAqAEBwKgBIgMDgJYAAAAARQAAKJsOAABAEVxDwKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":217,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABksFpAAEAGcMzAqAEiQAQXn8hSAbvNFjuOa1gmPIAZECycyAAAAQEICj4yTwRMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":226,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoNDhAAPQGWpFbvtp9wKgBIjA+yFR61rILJRYCtlAUJeVEpAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":227,"flow_packet_id":1,"flow_first_seen":1431970686319,"flow_last_seen":1431970686319,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51285,"dst_port":12350,"l4_proto":"tcp"}
+0427{"flow_id":227,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAzaZAAEAGdQvAqAEiW77afchVMD6WWeS2AAAAALAC\/\/89ewAAAgQFtAEDAwUBAQgKPjJPpQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":158,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACD9yRAADYGAqSdN+uqwKgBIgG7yD366YaU6GdazIAYAB3tXQAAAQEICkxWgtA+MgrFFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":158,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoQM9AAEAGr1TAqAEinTfrqsg9AbvoZ1rMAAAAAFAEAABYBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":227,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0k+pAAPQG+tJbvtp9wKgBIjA+yFVGmTUullnkt4ASH\/5npwAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":227,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoqoZAAEAGmEPAqAEiW77afchVMD6WWeS3Rpk1L1AQIACoYAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":227,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtl1BAAEAGq3TAqAEiW77afchVMD6WWeS3Rpk1L1AYIACRUAAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":227,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoteZAADcGleNbvtp9wKgBIjA+yFVGmTUvllnkvFAQA6DEuwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":224,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoWF8AAEARnvLAqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":225,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABElr8AAEABX8bAqAEBwKgBIgMDgJYAAAAARQAAKFhfAABAEZ7ywKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":206,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8A0ZAAEAG7OHAqAEinTfrkshMnFVVB2tZ4fDnQYAZEClkeQAAAQEICj4yUO9MYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":185,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8QX5AAEAGrqPAqAEinTfrmMhInF05JqcNEQTd4oAZECkk0gAAAQEICj4yUP5MXigTaJ2t5RvhjU8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":216,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABVsdNAAEAGPjHAqAEinTfrnMhRAbsdDAEeNXDb94AZECxUcgAAAQEICj4yUQpMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":215,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaaTBAAEAGhtnAqAEinTfrkshQAbtIMwmq6zPtWYAZECx0qAAAAQEICj4yUQpMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":157,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABrqW9AAEAGr43AqAEinTeCjsg8AbsAEWqgQyFuW4AZECxUhwAAAQEICj4yUahOwLdijvxAZZgUoCkBH\/EVHhRNRbBof0ntyHRIt71VUzxiPflWQfiWlCD80Wr\/3G66XhsettJAtcl5eA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":227,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAok\/NAAPQG+tVbvtp9wKgBIjA+yFVGmTUvllnkvFAUJeWicgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":228,"flow_packet_id":1,"flow_first_seen":1431970686843,"flow_last_seen":1431970686843,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51286,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":228,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXdpAAEAG5NfAqAEiW77afchWAbv9gi8BAAAAALAC\/\/+4gAAAAgQFtAEDAwUBAQgKPjJRrgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":228,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rxlAAPQG36Nbvtp9wKgBIgG7yFakF93g\/YIvAoASH\/7ehAAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":228,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoj59AAEAGsyrAqAEiW77afchWAbv9gi8CpBfd4VAQIAAfPgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":228,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtzzZAAEAGc47AqAEiW77afchWAbv9gi8CpBfd4VAYIAAILgAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":157,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":125,"pkt":"PBXCt3IO0NQSxnP1CABFAABv2UBAADcGiLidN4KOwKgBIgG7yDxDIW6qABFq2IAZAB2WWgAAAQEICk7AySc+MlGoYM6Y72SmWR5htS4dovG5cbt1QaUguo5d5+o8p6LUhfy6YDKbvT6yWVZs\/mqzcbyb\/ER0zGvTjIHK030=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":157,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAonDFAAEAGvQ7AqAEinTeCjsg8AbsAEWrYAAAAAFAEAACZbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":228,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970686,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAoQBJAADcGC7hbvtp9wKgBIgG7yFakF93h\/YIvB1AQA6A7mQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":207,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ncNAAEAGUlrAqAEinTfrnMhNnFpJkZ6byTsrQ4AZEChZYwAAAQEICj4yUmFMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":228,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFAAAorxpAAPQG365bvtp9wKgBIgG7yFakF93h\/YIvB1AUJeUZUAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1431970687261,"flow_last_seen":1431970687261,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"174.49.171.224","src_port":13021,"dst_port":32011,"l4_proto":"udp"}
+0401{"flow_id":229,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuS7AAAEAREzPAqAEirjGr4DLdfQsAGuTOfB8CfeyODsgiOuU1SIeok9yn","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":229,"flow_packet_id":1,"flow_first_seen":1431970687261,"flow_last_seen":1431970687261,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"174.49.171.224","src_port":13021,"dst_port":32011,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"83.31.12.173","src_port":13021,"dst_port":23939,"l4_proto":"udp"}
+0401{"flow_id":230,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAurJcAAEARrJHAqAEiUx8MrTLdXYMAGpfYfCECZ7K5p+bX8n+OJOOTrcyv","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":230,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"83.31.12.173","src_port":13021,"dst_port":23939,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.138.161.88","src_port":13021,"dst_port":19521,"l4_proto":"udp"}
+0401{"flow_id":231,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuSakAAEAREGnAqAEivYqhWDLdTEEAGhcdfCMC1zNoLOVTJhFFmEsFrmck","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.138.161.88","src_port":13021,"dst_port":19521,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.188.134.174","src_port":13021,"dst_port":22436,"l4_proto":"udp"}
+0401{"flow_id":232,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuOf4AAEAROozAqAEivbyGrjLdV6QAGoKkfCUCWKDpreHeWqMtL4LNh6CD","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.188.134.174","src_port":13021,"dst_port":22436,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0476{"flow_id":217,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABkxTpAAEAGW+zAqAEiQAQXn8hSAbvNFjuOa1gmPIAZECyYNgAAAQEICj4yU5ZMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":224,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo51IAAEARD\/\/AqAEiwKgBAeasFOcAFAzzAAEAADLdMt0AAA4Q","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":225,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":82,"pkt":"PBXCt3IO0NQSxnP1CABFwABElsAAAEABX8XAqAEBwKgBIgMDgJYAAAAARQAAKOdSAABAEQ\/\/wKgBIsCoAQHmrBTnABQM8wABAAAy3TLdAAAOEA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":233,"flow_packet_id":1,"flow_first_seen":1431970687670,"flow_last_seen":1431970687670,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51288,"dst_port":20274,"l4_proto":"tcp"}
+0429{"flow_id":233,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjTxAAEAG\/gPAqAEiTKehBshYTzLHdCWnAAAAALAC\/\/\/vzwAAAgQFtAEDAwUBAQgKPjJU3AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":234,"flow_packet_id":1,"flow_first_seen":1431970687670,"flow_last_seen":1431970687670,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51289,"dst_port":18767,"l4_proto":"tcp"}
+0428{"flow_id":234,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABADkBAAEAGGvXAqAEiR+4Hy8hZSU+Qnyq6AAAAALAC\/\/\/FaAAAAgQFtAEDAwUBAQgKPjJU3AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":190,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":119,"pkt":"0NQSxnP1PBXCt3IOCABFAABpUJ1AAEAGn1fAqAEinTfrmMhKAbuh9dMOzkYJiIAZECx5nAAAAQEICj4yVN1MXimi86hE3Mf+F71gUhXfICsOYAQVmYXa6zVmVAN\/UCwMTk1xoRWYRdaWkDsfzScQ6Y1RzsI3trk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":235,"flow_packet_id":1,"flow_first_seen":1431970687670,"flow_last_seen":1431970687670,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51290,"dst_port":31010,"l4_proto":"tcp"}
+0427{"flow_id":235,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtDFAAEAGA+fAqAEiBfi63chaeSLm2Z5sAAAAALAC\/\/9aigAAAgQFtAEDAwUBAQgKPjJU3QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":165,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLZ5gAAEARj5bAqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":166,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLTOwAAEARqkLAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":235,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABA71RAAHIGlsMF+LrdwKgBInkiyFqd8pp25tmebbASRBBwGwAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":235,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QypAAEAGdPrAqAEiBfi63chaeSLm2Z5tnfKad4AQECxRTAAAAQEICj4yVUQAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":235,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":156,"pkt":"0NQSxnP1PBXCt3IOCABFAACOEktAAEAGpX\/AqAEiBfi63chaeSLm2Z5tnfKad4AYECz\/IgAAAQEICj4yVUQAAAAAEro9W9UC6NFFKgCYEzefPL6\/qkBreBn4jc1fLbrA9dMZ7FlE+weduUyLIBSOejvPMa7HzM2aw5gpRn8kRbL7cCHeN3y9yjNIGXbv1DXiayARDqcsrfqj+Amm","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0552{"flow_id":235,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":166,"pkt":"PBXCt3IO0NQSxnP1CABFAACY71tAAHIGlmQF+LrdwKgBInkiyFqd8pp35tmex4AYQ7Z0ZAAAAQEICgAAlPE+MlVEPCf64N\/QgoTnxCPZZ6j\/9gMBTUfU2F6JMXlII3D19KHxYirUXzwIZDKL6zrUfUT3umO4yWYfROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78KFet\/w9SrPImQ==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":235,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0RftAAEAGcinAqAEiBfi63chaeSLm2Z7HnfKa24AQECi7OgAAAQEICj4yVaoAAJTx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":235,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8D2FAAEAGqLvAqAEiBfi63chaeSLm2Z7HnfKa24AYECiXeQAAAQEICj4yVaoAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":234,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABArt9AAHMGR1VH7gfLwKgBIklPyFnlnJYLkJ8qu7AS\/\/\/byQAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":234,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JOpAAEAGBFfAqAEiR+4Hy8hZSU+Qnyq75ZyWDIAQECx4gAAAAQEICj4yVa4AAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":234,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":151,"pkt":"0NQSxnP1PBXCt3IOCABFAACJEuhAAEAGFgTAqAEiR+4Hy8hZSU+Qnyq75ZyWDIAYECyacAAAAQEICj4yVa4AAAAAx2WJEmFzkGyznsv5bIHiMa2rgJ3+hmTd8W9fL51XZsuiyweeLlWDllR6yJDQSBKY5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoQ==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":208,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8d9xAAEAGqXLAqAEiQAQXn8hOnEl2PjsWIF+fsYAZECgQyAAAAQEICj4yVbxMR9i06BKmNwKjHHk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDJDAAAEAR0wbAqAEiwKgBAe0QADUAL\/kqxMsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":81,"pkt":"0NQSxnP1PBXCt3IOCABFAABDhqIAAEARcJTAqAEiwKgBAeUHADUAL+4jvNsBAAABAAAAAAAABGNvbm4Fc2t5cGUGYWthZG5zA25ldAAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":233,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yyFgS\/h6Xx3QlqKAScSDnSgAAAgQFrAQCCAq+r7gZPjJU3AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":233,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06CNAAEAGoyjAqAEiTKehBshYTzLHdCWoEv4emIAQECx16wAAAQEICj4yVfS+r7gZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":233,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":161,"pkt":"0NQSxnP1PBXCt3IOCABFAACTKcJAAEAGYSvAqAEiTKehBshYTzLHdCWoEv4emIAYECwycAAAAQEICj4yVfS+r7gZDpcymbPRjqHS0MBRvFH\/Ltx8fwWiBBmQIi9mCQBkccCvt9P5uN6AByyOzUlygvBS3J0qE6j51s80FUJLgPFuh4yNWoNY6QY\/5AVyuzDhnvc8fYrzCNk2r5T1oivg0c4=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":146,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970687,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0Hx5AADcGpXBv3U2OwKgBIpxNyDjFFwxF9Eu8KYARAB1V6gAAAQEICk2QKO8+MgZ1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431970688025,"flow_last_seen":1431970688025,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.14","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0401{"flow_id":236,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuOK8AAEARxlrAqAEib91KDjLdAbsAGqZSfFUC4vleo7UvMvPmsU4YCKBd","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0591{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431970688025,"flow_last_seen":1431970688025,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.14","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","category":"VoIP"}}
+0443{"flow_id":176,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":90,"pkt":"0NQSxnP1PBXCt3IOCABFAABMImpAAEAGnIjAqAEib91KEshEAbuPHWXUImhLeYAZECz6TQAAAQEICj4yVlNNdq638u7zvxiLk1N\/bk90UuwO7GFozw5RA+4e","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":198,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKaYcAAEARjajAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":197,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKe8AAAEARe2\/AqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":234,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":118,"pkt":"PBXCt3IO0NQSxnP1CABFAABorutAAHMGRyFH7gfLwKgBIklPyFnlnJYMkJ8rEIAY\/6o2oQAAAQEICgMcyYQ+MlWueZdzeP9hsjyNsTGhZv0InKa0Xq3\/UQOxqE0kC7zsN+Twy5ADXa73B9jaxNh1frRaLXojeA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":234,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0YtBAAEAGxnDAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAQECqqhQAAAQEICj4yVoEDHMmE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":234,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FYBAAEAGE7nAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAYECp95AAAAQEICj4yVoEDHMmEsUo9bapdk3s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":233,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0p6tAAC8G9KBMp6EGwKgBIk8yyFgS\/h6Yx3QmB4AQAOODugAAAQEICr6vuTQ+MlX0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0485{"flow_id":233,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":120,"pkt":"PBXCt3IO0NQSxnP1CABFAABqp6xAAC8G9GlMp6EGwKgBIk8yyFgS\/h6Yx3QmB4AYAOMjhQAAAQEICr6vuTU+MlX0979\/jAaFxz9J17kaFgdP5kj+tcc94wOOYkyU7BSju0gtD25WNJlFffpkoREITQq1kY4nrC16","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":233,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0R15AAEAGQ+7AqAEiTKehBshYTzLHdCYHEv4ezoAQECpzJgAAAQEICj4yVwq+r7k1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":233,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8HstAAEAGbHnAqAEiTKehBshYTzLHdCYHEv4ezoAYECqQygAAAQEICj4yVwq+r7k1zWOVyLN8y6I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431970688320,"flow_last_seen":1431970688320,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.141","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0401{"flow_id":237,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAukPgAAEARnzfAqAEinTfrjTLdAbsAGuidfHYCyiJR+IygHiSHdyp3P0rG","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0592{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431970688320,"flow_last_seen":1431970688320,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.141","src_port":13021,"dst_port":443,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"Skype.SkypeCall","category":"VoIP"}}
+0422{"flow_id":235,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81axAAEAG4m\/AqAEiBfi63chaeSLm2Z7HnfKa24AYECiVrgAAAQEICj4yV3UAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":216,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABVYx5AAEAGjObAqAEinTfrnMhRAbsdDAEeNXDb94AZECxNwgAAAQEICj4yV7pMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":215,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABai7JAAEAGZFfAqAEinTfrkshQAbtIMwmq6zPtWYAZECxt+AAAAQEICj4yV7pMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":238,"flow_packet_id":1,"flow_first_seen":1431970688560,"flow_last_seen":1431970688560,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51291,"dst_port":17639,"l4_proto":"tcp"}
+0428{"flow_id":238,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABALZlAAEAGrHTAqAEiUVNNjchbROcBp2a0AAAAALAC\/\/\/KOQAAAgQFtAEDAwUBAQgKPjJYSAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":238,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8CBlAAHQGnfhRU02NwKgBIkTnyFsYw7jOAadmtaASIADTOAAAAgQFrAEDAwgEAggKALwVrD4yWEg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":238,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0NhhAAEAGpAHAqAEiUVNNjchbROcBp2a1GMO4z4AQECwRkQAAAQEICj4yWIkAvBWs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":238,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":168,"pkt":"0NQSxnP1PBXCt3IOCABFAACaF\/pAAEAGwbnAqAEiUVNNjchbROcBp2a1GMO4z4AYECx7dgAAAQEICj4yWIkAvBWsUBsMZVaFEmWpec3YOaz3apvGrACEaHflCEqfZV4zNVWBLI8SJxuhPyp2nhbsF5oIkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKnG\/6TFMnvwoV63\/D1Ks8iZ9m9UtWLroJGOJ6wt","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":238,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":136,"pkt":"PBXCt3IO0NQSxnP1CABFAAB6CBpAAHQGnblRU02NwKgBIkTnyFsYw7jPAadnG4AYAQJ4AQAAAQEICgC8FbU+MliJ8y+WiiMWk+rxA++uleX3d3qQzoYwWYU6TExH7yqfoCHp9Ru\/tJhVTD8G0rb8kSYVwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vQ==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":238,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wwVAAEAGFxTAqAEiUVNNjchbROcBp2cbGMO5FYAQECkQgQAAAQEICj4yWOcAvBW1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":238,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vqJAAEAGG2\/AqAEiUVNNjchbROcBp2cbGMO5FYAYECk9gQAAAQEICj4yWOcAvBW1LtP9fnVyMSs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":239,"flow_packet_id":1,"flow_first_seen":1431970688781,"flow_last_seen":1431970688781,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51292,"dst_port":18767,"l4_proto":"tcp"}
+0428{"flow_id":239,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwP5AAEAGaDbAqAEiR+4Hy8hcSU\/pBV4yAAAAALAC\/\/81QAAAAgQFtAEDAwUBAQgKPjJZIwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":240,"flow_packet_id":1,"flow_first_seen":1431970688782,"flow_last_seen":1431970688782,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51293,"dst_port":31010,"l4_proto":"tcp"}
+0427{"flow_id":240,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAUvJAAEAGZSbAqAEiBfi63chdeSKNyxjDAAAAALAC\/\/80+QAAAgQFtAEDAwUBAQgKPjJZIwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":72,"pkt":"0NQSxnP1PBXCt3IOCABFAAA6Sy4AAEARrBHAqAEiwKgBAfgaADUAJptGWcsBAAABAAAAAAAAAnVpBXNreXBlA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":240,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABA75tAAHIGlnwF+LrdwKgBInkiyF33HT2hjcsYxLASRBBSegAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":240,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0TDBAAEAGa\/TAqAEiBfi63chdeSKNyxjE9x09ooAQECwvYwAAAQEICj4yWYwAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":240,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":101,"pkt":"0NQSxnP1PBXCt3IOCABFAABXe1dAAEAGPKrAqAEiBfi63chdeSKNyxjE9x09ooAYECwD2AAAAQEICj4yWYwAAAAA7Z1+CcSySZR1q6DIx\/dpF82xZ3FwyfnvuLBsbf+ufJqSqZY=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":240,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":95,"pkt":"PBXCt3IO0NQSxnP1CABFAABR76RAAHIGlmIF+LrdwKgBInkiyF33HT2ijcsY54AYQ+3sVQAAAQEICgAAlP0+MlmMgQJHsoL6yOqkz3msTKIaAuk0k7LEZn\/ldbdLYF4=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":240,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0SFdAAEAGb83AqAEiBfi63chdeSKNyxjn9x09v4AQECuZwQAAAQEICj4yWfEAAJT9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":235,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0J+BAAEAGkETAqAEiBfi63chaeSLm2Z7PnfKa24ARECi26gAAAQEICj4yWfEAAJTx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":240,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABF499AAEAG1DPAqAEiBfi63chdeSKNyxjn9x09v4AYECsz8gAAAQEICj4yWfEAAJT9pX115QWGYLmnIVWi7\/6xUEY=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":239,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":78,"pkt":"PBXCt3IO0NQSxnP1CABFAABArvNAAHMGR0FH7gfLwKgBIklPyFwwtyOw6QVeM7AS\/\/93KQAAAgQFrAEDAwABAQgKAAAAAAAAAAABAQQC","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":239,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ublAAEAGb4fAqAEiR+4Hy8hcSU\/pBV4zMLcjsYAQECwPmAAAAQEICj4yWfYAAAAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":239,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970688,"pkt_len":139,"pkt":"0NQSxnP1PBXCt3IOCABFAAB9Ee5AAEAGFwrAqAEiR+4Hy8hcSU\/pBV4zMLcjsYAYECwcOgAAAQEICj4yWfYAAAAAl2UigK1go6J0fzX63ObckiQu+SS2ojXvRxdFqTBRTdLTz9PaBeV54JkfKQPpe53yUrkUv80ZxigWk69Hw4O\/lZbh7yi1n8YLuQ==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":235,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA81QxAAEAG4w\/AqAEiBfi63chaeSLm2Z7HnfKa24AZECiS4AAAAQEICj4yWkIAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":240,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC76ZAAHIGlm8F+LrdwKgBInkiyF33HT2\/jcsY+IAYQ9wH+AAAAQEICgAAlP4+MlnxPpdHkWAKTJErc5D9brs=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":240,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0aqVAAEAGTX\/AqAEiBfi63chdeSKNyxj49x09zYAQECqZNgAAAQEICj4yWl0AAJT+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":238,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8Gw5AAEAGvwPAqAEiUVNNjchbROcBp2cbGMO5FYAYECk79gAAAQEICj4yWnIAvBW1LtP9fnVyMSs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":240,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABC77pAAHIGllsF+LrdwKgBInkiyF33HT3NjcsY+IAYQ9wulgAAAQEICgAAlP8+MlpdxiwNYOAB461LSc5KhgY=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":240,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05WRAAEAG0r\/AqAEiBfi63chdeSKNyxj49x0924AQECqYwwAAAQEICj4yWsEAAJT\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":240,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4TfJAAEAGai7AqAEiBfi63chdeSKNyxj49x0924AYECqHFAAAAQEICj4yWsEAAJT\/T0vCVw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":239,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":128,"pkt":"PBXCt3IO0NQSxnP1CABFAAByrvhAAHMGRwpH7gfLwKgBIklPyFwwtyOx6QVefIAY\/7YJfwAAAQEICgMcyY8+Mln2fAC0H1wN\/7y3XsOO3lAHSi0nJ549WUICQ4MyIEfV+wot8nQofm8JSIA3972RbVxCOucaJDxLAQHjiBqWsE0=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":239,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0DLpAAEAGHIfAqAEiR+4Hy8hcSU\/pBV58MLcj74AQECpBjgAAAQEICj4yWs8DHMmP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":234,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0R6RAAEAG4ZzAqAEiR+4Hy8hZSU+QnysY5ZyWQIARECqmLgAAAQEICj4yWs8DHMmE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":239,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABFs1JAAEAGdd3AqAEiR+4Hy8hcSU\/pBV58MLcj74AYECoc\/gAAAQEICj4yWs8DHMmPVb4882ZfkSy7WLAZF8HHBVA=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":120,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8uu9AAEAGZljAqAEiQAQXpsgznF2bjnl5scFgjYAZECl+2QAAAQEICj4yW0xMQvGckklqarCuvYw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":234,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wu9AAEAGZknAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECp4\/gAAAQEICj4yW2YDHMmEsUo9bapdk3s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":239,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCrvlAAHMGRzlH7gfLwKgBIklPyFwwtyPv6QVejYAY\/6V\/ugAAAQEICgMcyZI+MlrP3PHMd9p5LlcZVo13eSU=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":239,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA06zRAAEAGPgzAqAEiR+4Hy8hcSU\/pBV6NMLcj\/YAQEClAmgAAAQEICj4yW6IDHMmS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":240,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA078VAAHIGll4F+LrdwKgBInkiyF33HT3bjcsY\/IAQQ9hlDgAAAQEICgAAlQI+MlrB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":217,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABkUPhAAEAG0C7AqAEiQAQXn8hSAbvNFjuOa1gmPIAZECyP2gAAAQEICj4yW\/JMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":239,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCrvxAAHMGRzZH7gfLwKgBIklPyFwwtyP96QVejYAY\/6U7JQAAAQEICgMcyZQ+MluitTxtVIkexevUyA+Ov+0=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":239,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0cEpAAEAGuPbAqAEiR+4Hy8hcSU\/pBV6NMLckC4AQECk\/tgAAAQEICj4yXHYDHMmU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":239,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4yeNAAEAGX1nAqAEiR+4Hy8hcSU\/pBV6NMLckC4AYECn+DQAAAQEICj4yXHYDHMmUFOwssA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":241,"flow_packet_id":1,"flow_first_seen":1431970689672,"flow_last_seen":1431970689672,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51294,"dst_port":17639,"l4_proto":"tcp"}
+0428{"flow_id":241,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2ypAAEAG\/uLAqAEiUVNNjcheROdnq4JVAAAAALAC\/\/9ETAAAAgQFtAEDAwUBAQgKPjJcjQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":107,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACD\/zhAADMGtQ2dODQswKgBIgG7yC\/usf9MunqupIAYAB2f3gAAAQEICkxoH3A+MeCzFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":107,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoElNAAEAGlU7AqAEinTg0LMgvAbu6eq6kAAAAAFAEAADppwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":238,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA822VAAEAG\/qvAqAEiUVNNjchbROcBp2cbGMO5FYAYECk5qAAAAQEICj4yXMAAvBW1LtP9fnVyMSs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":241,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8CCFAAHQGnfBRU02NwKgBIkTnyF6euo9OZ6uCVqASIADwZAAAAgQFrAEDAwgEAggKALwWGz4yXI0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":241,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ToBAAEAGi5nAqAEiUVNNjcheROdnq4JWnrqPT4AQECwuuQAAAQEICj4yXNIAvBYb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":241,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":131,"pkt":"0NQSxnP1PBXCt3IOCABFAAB1kMVAAEAGSRPAqAEiUVNNjcheROdnq4JWnrqPT4AYECySSAAAAQEICj4yXNIAvBYby8tS9MTHLgFjGknYMFekESVB0jUOlH1C4x7Mw8wCdJJj7uvXkn4uEXzHzsbXaKtdlXyx8K2kd9KZ2WP467r6YGY=","pkt_caplen":131,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":206,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MjlAAEAGve7AqAEinTfrkshMnFVVB2tZ4fDnQYAZEClYcAAAAQEICj4yXPhMYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":241,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":94,"pkt":"PBXCt3IO0NQSxnP1CABFAABQCCJAAHQGndtRU02NwKgBIkTnyF6euo9PZ6uCl4AYAQLqLAAAAQEICgC8FiI+MlzS9agm4SRA7VPs5Pz8dIy63dEuZhb0JUIs8OatYQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":241,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA02q5AAEAG\/2rAqAEiUVNNjcheROdnq4KXnrqPa4AQECsuFwAAAQEICj4yXREAvBYi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":238,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OaNAAEAGoHbAqAEiUVNNjchbROcBp2cjGMO5FYARECkMTgAAAQEICj4yXREAvBW1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":241,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABEOdJAAEAGoDfAqAEiUVNNjcheROdnq4KXnrqPa4AYECtAgwAAAQEICj4yXREAvBYi1vG6G0jJykjTop9rpZwwsQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":233,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ZXBAAEAGJdTAqAEiTKehBshYTzLHdCYHEv4ezoAYECqKiAAAAQEICj4yXUy+r7k1zWOVyLN8y6I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":241,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCCCNAAHQGnehRU02NwKgBIkTnyF6euo9rZ6uCp4AYAQLrqQAAAQEICgC8Fig+Ml0RRkfzpMhG79ma7OWq3sU=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":241,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ZgNAAEAGdBbAqAEiUVNNjcheROdnq4KnnrqPeYAQECottAAAAQEICj4yXVEAvBYo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1432{"flow_id":241,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":818,"pkt":"0NQSxnP1PBXCt3IOCABFAAMkgnlAAEAGVLDAqAEiUVNNjcheROdnq4KnnrqPeYAYECpXYgAAAQEICj4yXVIAvBYodXZHldF9QGOZI5wf\/3cT9KeWznnCxwIwZ\/nP8+m+x+EfZ4kYTAUriEy1wv82uE6B8PDGw\/q+0CMTT2dE97GP5Km\/HyOue8wf6jszaaFm9ExFQK0H\/iZbf5bXQ88z\/iVxpdPwvYECUX2N9UKgMPfbURA+snVC5w8EmL1z9BuonFHboTj14OfZ64tiSacMnOrWum9hclebkhUzENdmuQSAFc3aXqQEERF7XBmEgQawj2H8T5VoPp17eGjZuC+I+ZgWI1r+7x8\/O20vPv2Jfn8x1OMGUkAvz0Fr+G7X4K1Nw1ubdXVS6OLMv88FpDGjm3LnKFSdzOjHNmnMS4+ijEC6VE4YE35GimP67XZFjF6BisbUlsLocY93RPUWPEp83oiBTRAtciAWtn\/EvACvLYZepUbOX6mdttdrvfttl0jQGUYQQJxrdS+RVYEzcDu+PyhIQqvpjIO\/DRzRJJAkUtFhjhiaFq1t5smRHj\/m+h+AerTZc6nWF5gJEcpGlLR20YM219bBrUhio4jx5PSjw3S1apkSwmfHqQME5fdt77oNNwn4Kjl7cnZfCKDl2Vy6Es0MN47mEY7etW6R\/6u1wFIWi2JUuG1ZdprRaUysfBAe6TajKv6+02Iuso9xVgVDG\/aGk61d7RFEBe0fE00x9ZxZ8+J5uoM1kG2X55qe38rnk44eeQ+X\/pMrVN+ZFnf4B6XG+crgehWRgO994qlB+UUjuX9f1fvstNtdXuSin27nq0NJaLjiGjvfZrUJtllSXbMtlTctwueuAv8bZFvCSbDiY8FdfgsO74qJPVcHCQFTIZ2WHB4MGVrOcbljhi3IijxKdGcLjMmGDHGVJaGdnd4ND\/COYWaikEuIklkWOn9CV\/5SA72Bhe2fbUAOhdFutRGrFeIH7rBaciwjCVw1Qsj5Xsz8RLM1482TuOCtWTYdFJ9AGAv72AD9qqW0MCIOnqqZlGjx3QvzkM1A\/6SZwL8ijEAJat3C4ohCy1YI5TAZ2+w=","pkt_caplen":818,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":169,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8BEZAADcGw7xv3UoSwKgBIpxZyEOVl6nVAf6GuYAYAB0mLgAAAQEICk12vhA+MhpuMev4eAbgEns=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":169,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAojT5AAEAGMdjAqAEib91KEshDnFkB\/oa5AAAAAFAEAABG0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":241,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCCCVAAHQGneZRU02NwKgBIkTnyF6euo95Z6uCp4AYAQLP0gAAAQEICgC8Fi4+Ml1Rr47tqqRVwqAsJw7uLag=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":241,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970689,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0x8dAAEAGElLAqAEiUVNNjcheROdnq4WXnrqPh4AQECoqcAAAAQEICj4yXZEAvBYu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":156,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA04rlAADcG4dRv3U2OwKgBIgG7yDsQofUZ9u6LaYARAB3jKQAAAQEICk2QKuQ+MguP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":239,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0rv1AAHMGR0NH7gfLwKgBIklPyFwwtyQL6QVekYAQ\/6FQNQAAAQEICgMcyZg+Mlx2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431970690133,"flow_last_seen":1431970690133,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":242,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":82,"pkt":"0NQSxnP1PBXCt3IOCABFAABEeJ0AAEARfpjAqAEiwKgBAemMADUAMK9udVgBAAABAAAAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":242,"flow_packet_id":1,"flow_first_seen":1431970690133,"flow_last_seen":1431970690133,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0453{"flow_id":242,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":98,"pkt":"PBXCt3IO0NQSxnP1CABFAABUAABAAEARtyXAqAEBwKgBIgA16YwAQDU7dViBgAABAAEAAAAABWU0NTkzAWcKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAsABBfOIaY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":242,"flow_packet_id":2,"flow_first_seen":1431970690133,"flow_last_seen":1431970690190,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"e4593.g.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.206.33.166"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":243,"flow_packet_id":1,"flow_first_seen":1431970690191,"flow_last_seen":1431970690191,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51295,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":243,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA15NAAEAGZ+bAqAEiF84hpshfAbtO4sWoAAAAALAC\/\/\/AXwAAAgQFtAEDAwUBAQgKPjJehwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":241,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0CChAAHQGnfFRU02NwKgBIkTnyF6euo+HZ6uFl4AQAP85vgAAAQEICgC8Fko+Ml1S","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":241,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4hhxAAEAGU\/nAqAEiUVNNjcheROdnq4WXnrqPh4AYECow1QAAAQEICj4yXpYAvBZKrPlLdA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":243,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADkGRn4XziGmwKgBIgG7yF8ZBQnnTuLFqaASOJBGLgAAAgQFrAQCCArsPkNyPjJehwEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":243,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0z6tAAEAGb9rAqAEiF84hpshfAbtO4sWpGQUJ6IAQECydKQAAAQEICj4yXrLsPkNy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":243,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbrhlAAEAGkMXAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzJfgAAAQEICj4yXrLsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":243,"flow_packet_id":4,"flow_first_seen":1431970690191,"flow_last_seen":1431970690235,"flow_tot_l4_data_len":315,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51295,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"apps.skype.com","ja3":"3d49c0a7161d6636fcb6973f14e05046","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+1943{"flow_id":241,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":1190,"pkt":"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","pkt_caplen":1190,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":235,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8mLNAAEAGH2nAqAEiBfi63chaeSLm2Z7HnfKa24AZECiODwAAAQEICj4yXxMAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":207,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XFFAAEAGk8zAqAEinTfrnMhNnFpJkZ6byTsrQ4AZEChL2wAAAQEICj4yX+lMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0789{"flow_id":126,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":343,"pkt":"PBXCt3IO0NQSxnP1CABFAAFJkcRAADIG5BNsoKNswKgBIgG7yBaV3S2BiZUuZoAYACriDwAAAQEICmGA7TM+MenuFwMBARDHtatnK4WgfmkFbFzV4JVQSVlXKbKyzr7vOkFjQGhuB\/WROlzUS5doe1J0ZJIV41VIjcRRL4cichOCq81fcjdO\/eFcAU7JUcZV7SjgJcMEs4O\/li\/rj\/vhqAJGTpCcO3RAwdBqjgwAVl50e6culhErF7qcMRSEt0Ae5eYxdctlDeNAJHWqYtKo+B1QkVJdScjA27RDKW9squCjJi125sythaPySMYuniptSdL1gIcNah0vb02UDhDO9afyMXcgLBgHoOkqOp9AtmWHbPANHU0UE\/WgaLlloKSnu48bpWhbYtAile2tTnBAyc1Od7+57tDPUQ8GMLet6RFpk1iaROZn5M9jwk+4T7bhq9EsTvbAYg==","pkt_caplen":343,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":243,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbyBZAAEAGdsjAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzINQAAAQEICj4yX\/vsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":126,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0bbFAAEAG+zvAqAEibKCjbMgWAbuJlS5mld0uloAQD\/dhzAAAAQEICj4yX\/thgO0z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1711{"flow_id":126,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":1020,"pkt":"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","pkt_caplen":1020,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":234,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+BJAAEAGMSbAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECp0GQAAAQEICj4yYEsDHMmEsUo9bapdk3s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":238,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wJFAAEAGGYDAqAEiUVNNjchbROcBp2cbGMO5FYAZECk10wAAAQEICj4yYJQAvBW1LtP9fnVyMSs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":126,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0kcVAADIG5SdsoKNswKgBIgG7yBaV3S6WiZUyIIAQAC5toAAAAQEICmGA7Ws+Ml\/+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":244,"flow_packet_id":1,"flow_first_seen":1431970690890,"flow_last_seen":1431970690890,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51296,"dst_port":12350,"l4_proto":"tcp"}
+0427{"flow_id":244,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAtBpAAEAGkJfAqAEiW77YfchgMD4BM37JAAAAALAC\/\/8o9wAAAgQFtAEDAwUBAQgKPjJhMgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":245,"flow_packet_id":1,"flow_first_seen":1431970690890,"flow_last_seen":1431970690890,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.24","src_port":51297,"dst_port":12350,"l4_proto":"tcp"}
+0428{"flow_id":245,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAW\/1AAEAG6RnAqAEiW77YGMhhMD6A1I6YAAAAALAC\/\/+Z6gAAAgQFtAEDAwUBAQgKPjJhMgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":244,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0q+NAAPUG49Fbvth9wKgBIjA+yGChcdZWATN+yoASH\/5orwAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":244,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoE35AAEAGMUzAqAEiW77YfchgMD4BM37KoXHWV1AQIACpaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":244,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":161,"pkt":"0NQSxnP1PBXCt3IOCABFAACTO9FAAEAGCI7AqAEiW77YfchgMD4BM37KoXHWV1AYIAAfTgAAliIQAjUGskOHyDqko+EfY1BFuSlEGFanrL7shCpnononVJuKO2HJ1ywSd53\/7e24ROXSm5DB\/tecXerTaLmWj\/TVAgtAsS5HTE0aQxipxv+kxTJ78KFet\/w9SrPImfZvVLVi66CRjiesLXo=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":245,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGUBNbvtgYwKgBIjA+yGFITqRBgNSOmaASOJAFAQAAAgQFrAQCCAoNH3OiPjJhMgEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":245,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0JxlAAEAGHgrAqAEiW77YGMhhMD6A1I6ZSE6kQoAQECxb9QAAAQEICj4yYWgNH3Oi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":245,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":151,"pkt":"0NQSxnP1PBXCt3IOCABFAACJWJpAAEAG7DPAqAEiW77YGMhhMD6A1I6ZSE6kQoAYECw0xAAAAQEICj4yYWgNH3OipiP8CpaokvL4RVcUyZtmMIVqda5wl\/mM71LzJ1o6r5djXWYjIkqBev3hUEftz6NwJEWy+3Ah3jd8vcozSBl279Q14msgEQ6nLK36o\/gJpl+EJRLb0A==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":244,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970690,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAojN1AADYGweRbvth9wKgBIjA+yGChcdZXATN\/NVAQA6DFXQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":245,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA01+1AADUGeC1bvtgYwKgBIjA+yGFITqRCgNSO7oAQAB1roQAAAQEICg0fc7A+MmFo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":245,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":150,"pkt":"PBXCt3IO0NQSxnP1CABFCACI1+5AADUGd9hbvtgYwKgBIjA+yGFITqRCgNSO7oAYAB0FyQAAAQEICg0fc7A+MmFotkGEuyjiwvkC1Yk6yvYWYGWNGijHw3Tmw6lYHBbHXWxha4N55ccXAdnshi7590k89m9UtWLroJGOJ6wteiN4iSbfBKWSW1CBvpdcHYBHhQK\/ZZZ7","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":245,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0aUJAAEAG2+DAqAEiW77YGMhhMD6A1I7uSE6kloAQEClbCwAAAQEICj4yYZ4NH3Ow","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":245,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA80QlAAEAGdBHAqAEiW77YGMhhMD6A1I7uSE6kloAYECnVHgAAAQEICj4yYZ8NH3Ow5U5PVEeeCZo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":243,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbs\/tAAEAGiuPAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzGawAAAQEICj4yYcXsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0869{"flow_id":245,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":246,"flow_packet_id":1,"flow_first_seen":1431970691351,"flow_last_seen":1431970691351,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51298,"dst_port":38895,"l4_proto":"tcp"}
+0427{"flow_id":246,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAcRRAAEAGRgjAqAEiUuBu8chil+9r2DTZAAAAALAC\/\/8RNAAAAgQFtAEDAwUBAQgKPjJi9wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":246,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8K7FAAHIGWW9S4G7xwKgBIpfvyGLApWwfa9g02qASIAC5cwAAAgQFrAEDAwgEAggKAAcb7T4yYvc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":246,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0AnRAAEAGtLTAqAEiUuBu8chil+9r2DTawKVsIIAQECz3yQAAAQEICj4yYzoABxvt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":246,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":137,"pkt":"0NQSxnP1PBXCt3IOCABFAAB7Om9AAEAGfHLAqAEiUuBu8chil+9r2DTawKVsIIAYECwDLAAAAQEICj4yYzoABxvtvKHjqKUhFix1K10amiUVskfxpyqy6OCBYtrIu4gGDlX6YWnqfxUIRyvtjz6hvFDealPoORYPdFWCi8AxrsfMzZrDmClGfyQ=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":246,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDK7JAAHIGWSdS4G7xwKgBIpfvyGLApWwga9g1IYAYAQIgWgAAAQEICgAHG\/Q+MmM6fTMEmcj2ZS8cCzQUZKZFgWbIj81ju0Gl4php1vR6oiM4xoeuU0iw4sLSsOHE06m5SBl279Q14msgEQ6nLK36o\/gJpl+EJRLb0AE+F9ydKg==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":246,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0ri5AAEAGCPrAqAEiUuBu8chil+9r2DUhwKVsb4AQECn26QAAAQEICj4yY4AABxv0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":246,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8BH5AAEAGsqLAqAEiUuBu8chil+9r2DUhwKVsb4AYECngtgAAAQEICj4yY4AABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":233,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ic5AAEAGAXbAqAEiTKehBshYTzLHdCYHEv4ezoAYECqERgAAAQEICj4yY46+r7k1zWOVyLN8y6I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":244,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoq\/ZAAPUG48pbvth9wKgBIjA+yGChcdZXATN\/NVAUJeWjFAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":247,"flow_packet_id":1,"flow_first_seen":1431970691584,"flow_last_seen":1431970691584,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51299,"dst_port":12350,"l4_proto":"tcp"}
+0427{"flow_id":247,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+lxAAEAGSlXAqAEiW77YfchjMD4Tm3MJAAAAALAC\/\/8foQAAAgQFtAEDAwUBAQgKPjJj3QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":247,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0Yg5AAPUGLadbvth9wKgBIjA+yGMdRKLvE5tzCoASH\/4ZmQAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":247,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAosdpAAEAGku\/AqAEiW77YfchjMD4Tm3MKHUSi8FAQIABaUgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":247,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAt\/S9AAEAGR5XAqAEiW77YfchjMD4Tm3MKHUSi8FAYIABDQgAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":247,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoYg9AAPUGLbJbvth9wKgBIjA+yGMdRKLwE5tzD1AQA\/92TgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":247,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAo0ntAADYGfEZbvth9wKgBIjA+yGMdRKLwE5tzD1AQA\/92TgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":216,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABVQcpAAEAGrjrAqAEinTfrnMhRAbsdDAEeNXDb94AZECxBKgAAAQEICj4yZFJMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":215,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABaP+1AAEAGsBzAqAEinTfrkshQAbtIMwmq6zPtWYAZECxhYAAAAQEICj4yZFJMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":243,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbUz1AAEAG66HAqAEiF84hpshfAbtO4sWpGQUJ6IAYECzDngAAAQEICj4yZJLsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":248,"flow_packet_id":1,"flow_first_seen":1431970691783,"flow_last_seen":1431970691783,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51300,"dst_port":20274,"l4_proto":"tcp"}
+0430{"flow_id":248,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA6ABAAEAGoz\/AqAEiTKehBshkTzK\/rUQGAAAAALAC\/\/\/JZwAAAgQFtAEDAwUBAQgKPjJkoAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":245,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":246,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8DntAAEAGqKXAqAEiUuBu8chil+9r2DUhwKVsb4AYECnfQwAAAQEICj4yZPMABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+1460{"flow_id":239,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":843,"pkt":"0NQSxnP1PBXCt3IOCABFAAM9drpAAEAGr33AqAEiR+4Hy8hcSU\/pBV6RMLckC4AYECm8cQAAAQEICj4yZUYDHMmY0ojLBzKbCEzV0NY45aTH5zlqLRARsxMYTEGZsLSBsVyMCmU7F4v7BwrEUuhzP2nT3I\/0ndCTYbxFQEiPfAsqFXMLEhjR5wyzh5tL4eo6VUfH2PudrgrlITjmsK887X4TKMRjoDf1MHx66vvtvwgq5ThEka1reNNdmI7wsceHD8f7LGnk1qRWK3uNByI7ceQr+W33scZNH1mOZ\/uj61j0YPWThNdPaGG75TNkO99bhcIEOsaghu8GLj9cn\/bwssufF\/OzV5VfGT\/fQZfFTzlT66nXHQCNksIbWENqJH6H6NfcPzhTbdp2MYugRo2tCjDSx5ZOFA2OyHd0p+TX3ymaOVj952Yvc4u6B5U4bbD0FxEVWbO432I6UvoPFD2No8aUmcgCYnBNEUMpFEqGc5sYofrP5cWp6O2InuZiV2y3pfEATlP5vBUir75dGfVY4Q8AslbfqtwqJ5XZzHC66yJiPfRIh+0frjlkOH5wGKotSulp1JjJD1rc3LkeWaEozcE2chg0zdbp7jr3fis5jBCvHBWK30xNV9xaWjYfNw\/6u6Zsrz\/2Bc8z2Tr6UjX61FV7ZYGKrMV6WVhYWKffNukYcMi+5wBHr\/lhaxxI9ua28f5Fl+9MdoK751pSoSafpK1XvQh7BzY3R0cSuPfOmQYqbTg9+TxnKkZnLIVNMQ9tbXqyawpHMaxzy+RLlMgYIXGTA7bGfFFGr2euRcO4zbsEE3yyYeX1iPCxko+xpvketUngopy4UBoiA5MlLfc0vz7ZXfujEScOvqJG5yE6VT+wQmUAGWXaExB0Ot7n5PENuLVOoCYRzvyy2bv0bBIAUkVhozaNFaayqaAHOhmUs39+2w8aXbyBsr1ZmqM13mrPjcbvzvFUE7rTTSqkmlDIICDaJtCSh8XZ1mkflnKo3oHK4tfWDi0JEtmQdW2GKiQBtRNsNUGV6y1vtbKDwefb\/OhJkjr3eOrKIxcklK3moiBJya5sUbK2sWCiLxD40qESCLeGb6U\/tC5c4l46bp\/Wv0i5ZujFbVOX0ZJb","pkt_caplen":843,"pkt_type":2048,"pkt_ipoffset":14}
+1467{"flow_id":240,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":843,"pkt":"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","pkt_caplen":843,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":233,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970691,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0WMdAAEAGMoXAqAEiTKehBshYTzLHdCYPEv4ezoARECpk4QAAAQEICj4yZUa+r7k1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":248,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAAC4GnURMp6EGwKgBIk8yyGRH9b\/zv61EB6AScSDahgAAAgQFrAQCCAq+r8ghPjJkoAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":248,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAop\/VAAEAG42LAqAEiTKehBshkTzK\/rUQHAAAAAFAEAADlHAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":208,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA83VdAAEAGQ\/fAqAEiQAQXn8hOnEl2PjsWIF+fsYAZECgA0AAAAQEICj4yZbRMR9i06BKmNwKjHHk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":184,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDB\/pAADgG7znVx7OvwKgBIgG7yEfSVR1Dc5lvg4AYAB0Y4QAAAQEICk7fKsA+MiYnFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":184,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAox6lAAEAGJ+XAqAEi1cezr8hHAbtzmW+DAAAAAFAEAAC3fwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":240,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA08TFAAHIGlPIF+LrdwKgBInkiyF33HT3bjcscBYAQQM9abgAAAQEICgAAlR0+MmVG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":208,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8R\/tAADYG41NABBefwKgBIpxJyE4gX5+xdj47FoAYAB0t\/gAAAQEICkxH4Vw+MkQz\/wRLqjQkKko=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":208,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo2gtAAEAGR1fAqAEiQAQXn8hOnEl2PjsWAAAAAFAEAACAhgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":229,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuAIoAAEARXlnAqAEirjGr4DLdfQsAGsvlfaACeL8XUJBpLDeRz+sEHWOI","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":230,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAug2AAAEAR1cjAqAEiUx8MrTLdXYMAGvz0faICfIT9gb6c5K1Sd5xbHa0C","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":239,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0sHNAAHMGRc1H7gfLwKgBIklPyFwwtyQL6QVhmoAQ\/JhHTQAAAQEICgMcybA+MmVG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":246,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vvZAAEAG+CnAqAEiUuBu8chil+9r2DUhwKVsb4AYECndJwAAAQEICj4yZw8ABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":249,"flow_packet_id":1,"flow_first_seen":1431970692464,"flow_last_seen":1431970692464,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51301,"dst_port":38895,"l4_proto":"tcp"}
+0427{"flow_id":249,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAG0ZAAEAGm9bAqAEiUuBu8chll+8qmATQAAAAALAC\/\/9+NAAAAgQFtAEDAwUBAQgKPjJnPQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":238,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1704,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8OKtAAEAGoWbAqAEiUVNNjchbROcBp2cbGMO5FYAZECku8wAAAQEICj4yZ3QAvBW1LtP9fnVyMSs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":249,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8K7ZAAHIGWWpS4G7xwKgBIpfvyGV1sVenKpgE0aASIACFcQAAAgQFrAEDAwgEAggKAAccXD4yZz0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":249,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA061FAAEAGy9bAqAEiUuBu8chll+8qmATRdbFXqIAQECzDxgAAAQEICj4yZ4EABxxc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":249,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":107,"pkt":"0NQSxnP1PBXCt3IOCABFAABdRo5AAEAGcHHAqAEiUuBu8chll+8qmATRdbFXqIAYECwg4QAAAQEICj4yZ4EABxxcdN\/PvhncCBxBTx10CH0pSBW20mZkIkfGOwDQrAPUck+HvT+TELzMsfE=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":245,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":401,"pkt":"0NQSxnP1PBXCt3IOCABFAAGDVPlAAEAG7trAqAEiW77YGMhhMD6A1I7uSE6kloAYECnQpwAAAQEICj4yZ6kNH3Ow5U5PVEeeCZpIIwSmkpxtPWvIQ8ycvXYLJYFHzypUoxCI4WYjUn1+fD\/hEHw\/QclyzkFvzzgC+gTQISL9Gc2pOkm+7\/OxwST+HGNp1LPLG6lujGcE5Y5efc8EkFCg\/zsXT+ZIbYKWoUDRi61OdIxcs1kdUr4ZmxkOXWCJxxDN3OxiEJ+JriDCicgOMiHmUcbTyLC8iJKqBM9\/gpZEaTW\/5N20B2\/GLkJHjFFoRXE07pKWEGQgr6c6gqXuPl3DEjhJckvETpiJ8v+p0qIXRcxs1ht4ZilQkjxIw3S2cnA0p5u+lOChexJvZqWieZkgH5t1pDMw9Xuovqbllekc1lBNq\/GEGTZgDYc\/K9V5zkcHXAC0+1fMaDUI1WM4ewVb5f1GOrOQGU\/l0MoMxFG30yoODyXJi6F+eWg8shWymNPdud0cNGJaiwifLozFkaD5vlA=","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":249,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":127,"pkt":"PBXCt3IO0NQSxnP1CABFAABxK7dAAHIGWTRS4G7xwKgBIpfvyGV1sVeoKpgE+oAYAQJT9wAAAQEICgAHHGM+MmeBkDiZzbojxJ9PxbugT0tjuly2Cbuf5f2\/Ols6OQShmjDUrdZ1qkX0XdDrvoIRIccEyjuUF5yWH+fbKQp7Tg==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":249,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0fYlAAEAGOZ\/AqAEiUuBu8chll+8qmAT6dbFX5YAQECrDFwAAAQEICj4yZ8UABxxj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":246,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA00\/9AAEAG4yjAqAEiUuBu8chil+9r2DUpwKVsb4ARECnymwAAAQEICj4yZ8UABxv0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":249,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":80,"pkt":"0NQSxnP1PBXCt3IOCABFAABCz39AAEAG55rAqAEiUuBu8chll+8qmAT6dbFX5YAYECr79gAAAQEICj4yZ8UABxxjMlUiMg++hysgPLDsCnE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":235,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8JaNAAEAGknnAqAEiBfi63chaeSLm2Z7HnfKa24AZECiFNwAAAQEICj4yZ+sAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":249,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":84,"pkt":"PBXCt3IO0NQSxnP1CABFAABGK7hAAHIGWV5S4G7xwKgBIpfvyGV1sVflKpgFCIAYAQIXKAAAAQEICgAHHGo+MmfFVvoJWDw5CmsinQt7JpUAy755","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":249,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0dktAAEAGQN3AqAEiUuBu8chll+8qmAUIdbFX94AQECnCrwAAAQEICj4yaAcABxxq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":249,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABao5JAAEAGE3DAqAEiUuBu8chll+8qmAUIdbFX94AYECm0ygAAAQEICj4yaAcABxxqnFPma9bHadl4Nwc7Zj60yXxykNHxifplbPVRlw\/zWX3ZQkfBbaY=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":249,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970692,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0K7pAAHIGWW5S4G7xwKgBIpfvyGV1sVf3KpgFLoAQAQLRlQAAAQEICgAHHIU+MmgH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":234,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8I9pAAEAGBV\/AqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECprGQAAAQEICj4yaUsDHMmEsUo9bapdk3s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":243,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbsaRAAEAGjTrAqAEiF84hpshfAbtO4sWpGQUJ6IAYECy+zgAAAQEICj4yaWLsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":250,"flow_packet_id":1,"flow_first_seen":1431970693196,"flow_last_seen":1431970693196,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51302,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":250,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWFNAAEAG7F7AqAEiW77YfchmAbumoVhjAAAAALAC\/\/\/PlQAAAgQFtAEDAwUBAQgKPjJqCAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":250,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0PUNAAPUGUnJbvth9wKgBIgG7yGaCZHojpqFYZIASH\/6TZAAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":250,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoI6NAAEAGISfAqAEiW77YfchmAbumoVhkgmR6JFAQIADUHQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":250,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":59,"pkt":"0NQSxnP1PBXCt3IOCABFAAAtwqtAAEAGghnAqAEiW77YfchmAbumoVhkgmR6JFAYIAC9DQAAFgMBAAA=","pkt_caplen":59,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":159,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":121,"pkt":"0NQSxnP1PBXCt3IOCABFAABreLhAAEAGdpLAqAEi1cezsMg+Absskrs7gA\/xNYAZECyfWwAAAQEICj4yalFO3n\/RxnG4\/AJEgxSLpj4g1w1XejDcElFRdGJgTnfA7RCUIGPtheZryFD\/LSyJskZ7bbubC2TOpkOp3g==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":250,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoCrZAADYGRAxbvth9wKgBIgG7yGaCZHokpqFYaVAQA6DweAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":246,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LoRAAEAGiJzAqAEiUuBu8chil+9r2DUhwKVsb4AZECnZtgAAAQEICj4yan8ABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":119,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDrbNAADYGF2tv3U2vwKgBIgG7yDJl2k5Xodh+KIAYAB1IagAAAQEICk2kBHA+MeisFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":119,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoKGdAAEAGkxLAqAEib91Nr8gyAbuh2H4oAAAAAFAEAABGmwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":249,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":80,"pkt":"PBXCt3IO0NQSxnP1CABFAABCK8JAAHIGWVhS4G7xwKgBIpfvyGV1sVf3KpgFLoAYAQLk8QAAAQEICgAHHMo+MmgHX3p649iZfa33vFNUcJI=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":249,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GthAAEAGnFDAqAEiUuBu8chll+8qmAUudbFYBYAQECm+bAAAAQEICj4ya7YABxzK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":249,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":70,"pkt":"0NQSxnP1PBXCt3IOCABFAAA4GlpAAEAGnMrAqAEiUuBu8chll+8qmAUudbFYBYAYEClFQQAAAQEICj4ya7YABxzK4LqYZA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":217,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":114,"pkt":"0NQSxnP1PBXCt3IOCABFAABkSBxAAEAG2QrAqAEiQAQXn8hSAbvNFjuOa1gmPIAZECx\/6gAAAQEICj4ya+JMR9pGOm9QiCGp0cwW6vp4r5Dn8\/7YY8lRGP7REcP1BqFDpRTD4qb3sZ4E9ti6rTGePCt6","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":249,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":105,"pkt":"PBXCt3IO0NQSxnP1CABFAABbK8dAAHIGWTpS4G7xwKgBIpfvyGV1sVgFKpgFMoAYAQJg8AAAAQEICgAHHNU+Mmu2W8NfWaHKaiQUhQUqKyJvgz+hXp0h+xUSaSAk7mGfNPpJzOtSbfFU","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":217,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACD\/H9AADYGLohABBefwKgBIgG7yFJrWCY8zRY7joAYAB2qDAAAAQEICkxH4ug+MkmwFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":217,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoUttAAEAGzofAqAEiQAQXn8hSAbvNFjuOAAAAAFAEAADDwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":245,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970693,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":206,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8w2xAAEAGLLvAqAEinTfrkshMnFVVB2tZ4fDnQYAZEClH6AAAAQEICj4ybYBMYN9f7d463h6NxxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":251,"flow_packet_id":1,"flow_first_seen":1431970694308,"flow_last_seen":1431970694308,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51303,"dst_port":62381,"l4_proto":"tcp"}
+0427{"flow_id":251,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA0wpAAEAGAQ3AqAEiUHlUXchn861MQWgbAAAAALAC\/\/+zaQAAAgQFtAEDAwUBAQgKPjJuTgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":190,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDIDFAADYG2amdN+uYwKgBIgG7yErORgmIofXTDoAYAB2K1gAAAQEICkxeOfA+Mi4JFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":190,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo\/eBAAEAG8lTAqAEinTfrmMhKAbuh9dMOAAAAAFAEAAAmPAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":233,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8GEVAAEAGcv\/AqAEiTKehBshYTzLHdCYHEv4ezoAZECp4iQAAAQEICj4yb0q+r7k1zWOVyLN8y6I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":154,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1804,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAjiQAAEARaRXAqAEiwKgBAfduADUALM6fTeoBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":155,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwIsAAEARNq7AqAEiwKgBAfsCADUALD+l2TUBAAABAAAAAAAAAWIGY29uZmlnBXNreXBlA2NvbQAAHAAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":146,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8Hx9AADcGpWdv3U2OwKgBIpxNyDjFFww99Eu8KYAYAB2nPwAAAQEICk2QL6g+MgZ1xx693YJQoJ0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":246,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970694,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WE9AAEAGXtHAqAEiUuBu8chil+9r2DUhwKVsb4AZECnTngAAAQEICj4ycJcABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":176,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA05dRAADcG4jVv3UoSwKgBIgG7yEQiaEvIjx1l1IARAB1fmQAAAQEICk12wzA+Mh9R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":251,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAwedAAEAGEjDAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+vgAAAAgQFtAEDAwUBAQgKPjJyNwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":243,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbntFAAEAGoA3AqAEiF84hpshfAbtO4sWpGQUJ6IAYECy19gAAAQEICj4ycjrsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":207,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8vrpAAEAGMWPAqAEinTfrnMhNnFpJkZ6byTsrQ4AZECg5MgAAAQEICj4ycpJMXOPPdjjDMntxC5I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":252,"flow_packet_id":1,"flow_first_seen":1431970695865,"flow_last_seen":1431970695865,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51305,"dst_port":13392,"l4_proto":"tcp"}
+0427{"flow_id":252,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWQRAAEAGas3AqAEilQ0gD8hpNFCsfgF7AAAAALAC\/\/9i1QAAAgQFtAEDAwUBAQgKPjJ0WwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":238,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CZNAAEAG0H7AqAEiUVNNjchbROcBp2cbGMO5FYAZECkh+wAAAQEICj4ydGwAvBW1LtP9fnVyMSs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":252,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyGm+xiHqrH4BfKASOJCW7wAAAgQFrAQCCAo\/i4QRPjJ0WwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":252,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yZ5AAEAG+j7AqAEilQ0gD8hpNFCsfgF8vsYh64AQECzt7wAAAQEICj4ydIU\/i4QR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":253,"flow_packet_id":1,"flow_first_seen":1431970695909,"flow_last_seen":1431970695909,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51306,"dst_port":62381,"l4_proto":"tcp"}
+0428{"flow_id":253,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2LhAAEAG+17AqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/uVQAAAgQFtAEDAwUBAQgKPjJ0hQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":252,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":159,"pkt":"0NQSxnP1PBXCt3IOCABFAACRUHNAAEAGcw3AqAEilQ0gD8hpNFCsfgF8vsYh64AYECyGGgAAAQEICj4ydIU\/i4QRsKu\/G+vqC8jfQ+HvwIDojVtELMrVHx8SlS274+GELEv8Mx\/sOIHL5wpScJG7+8RtU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3Ah3jd8vcozSBl279Q14msgEQ6n","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":252,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0pfdAADUGKN6VDSAPwKgBIjRQyGm+xiHrrH4B2YAQAB39lgAAAQEICj+LhBw+MnSF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_id":252,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":127,"pkt":"PBXCt3IO0NQSxnP1CABFCABxpfhAADUGKKCVDSAPwKgBIjRQyGm+xiHrrH4B2YAYAB17BwAAAQEICj+LhB0+MnSFDnx7qHtIbZA49IhIKDQkHH+9oDnAEmg1lVK1E7N6zNFlJiyxUhp+594fG+KU9vIzboeMjVqDWOkGP+QFcg==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":252,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iaZAAEAGOjfAqAEilQ0gD8hpNFCsfgHZvsYiKIAQECrtIAAAAQEICj4ydLA\/i4Qd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":252,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970695,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8B\/BAAEAGu+XAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECpmtAAAAQEICj4ydLA\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":216,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":99,"pkt":"0NQSxnP1PBXCt3IOCABFAABVo01AAEAGTLfAqAEinTfrnMhRAbsdDAEeNXDb94AZECwvwQAAAQEICj4ydbtMXOVgRJ52DFIu7cAK7Gpc8dNzIO4YY2vVOHQu5N+2IqCrL00y","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":215,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":104,"pkt":"0NQSxnP1PBXCt3IOCABFAABala1AAEAGWlzAqAEinTfrkshQAbtIMwmq6zPtWYAZECxP9wAAAQEICj4ydbtMYODx4TzV3\/Y4WDPH3tpvaLZcP8pol15k+DSkUSs81WKefnkA99PxSe0=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":252,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA85JJAAEAG30LAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECplggAAAQEICj4ydeI\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":245,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":156,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACD4rpAADcG4YRv3U2OwKgBIgG7yDsQofTK9u6LaYAYAB1FgQAAAQEICk2QMRA+MguPFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":156,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoSIFAAEAGcxnAqAEib91Njsg7Abv27otpAAAAAFAEAADkWwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":251,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAkb9AAEAGQljAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+rmAAAAgQFtAEDAwUBAQgKPjJ2HwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":243,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0udhAAEAGha3AqAEiF84hpshfAbtO4sZQGQUJ6IARECyFEQAAAQEICj4ydiLsPkNy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":252,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8l2BAAEAGLHXAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECpj5gAAAQEICj4yd34\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":165,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLSm8AAEARrL\/AqAEiwKgBAe6nADUAN3lCuqsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":166,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":89,"pkt":"0NQSxnP1PBXCt3IOCABFAABLheUAAEARcUnAqAEiwKgBAdo6ADUAN4ffpXsBAAABAAAAAAAABHBpcGUDcHJkCXNreXBlZGF0YQZha2FkbnMDbmV0AAAcAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":253,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970696,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAStVAAEAGiULAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/qbAAAAgQFtAEDAwUBAQgKPjJ4bgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":235,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA82yhAAEAG3PPAqAEiBfi63chaeSLm2Z7HnfKa24AZECh0TgAAAQEICj4yeNQAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":198,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKqigAAEARTQfAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":197,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKJ7cAAEARz3jAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":252,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WUJAAEAGapPAqAEilQ0gD8hpNFCsfgHZvsYiKIAYECphdgAAAQEICj4yee4\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":251,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAiGhAAEAGS6\/AqAEiUHlUXchn861MQWgbAAAAALAC\/\/+nrwAAAgQFtAEDAwUBAQgKPjJ6CAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":229,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu+HkAAEARZmnAqAEirjGr4DLdfQsAGpXefcACJf2u8qgkatcYbdd0gE\/+","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":230,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuk3UAAEARxbPAqAEiUx8MrTLdXYMAGjJQfcIC\/PmkO\/ZLL41O1l2CVTPo","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":234,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8FglAAEAGEzDAqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECpZ4AAAAQEICj4yeoQDHMmEsUo9bapdk3s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":254,"flow_packet_id":1,"flow_first_seen":1431970697478,"flow_last_seen":1431970697478,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51307,"dst_port":13392,"l4_proto":"tcp"}
+0428{"flow_id":254,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/r1AAEAGxRPAqAEilQ0gD8hrNFBkkG+ZAAAAALAC\/\/82XwAAAgQFtAEDAwUBAQgKPjJ6nwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":254,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyGvw2U4ZZJBvmqASOJDuMgAAAgQFrAQCCAo\/iaIXPjJ6nwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":254,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05GtAAEAG33HAqAEilQ0gD8hrNFBkkG+a8NlOGoAQECxFMgAAAQEICj4yeso\/iaIX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":255,"flow_packet_id":1,"flow_first_seen":1431970697522,"flow_last_seen":1431970697522,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51308,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":255,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJ8VAAEAGrFLAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9fxAAAAgQFtAEDAwUBAQgKPjJ6ygAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":254,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5lcVAAEAGLhPAqAEilQ0gD8hrNFBkkG+a8NlOGoAYECwuIgAAAQEICj4yeso\/iaIXFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":254,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA07DtAADUG4pmVDSAPwKgBIjRQyGvw2U4aZJBvn4AQAB1VMQAAAQEICj+JoiI+MnrK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":254,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA57DxAADUG4pOVDSAPwKgBIjRQyGvw2U4aZJBvn4AYAB09IQAAAQEICj+JoiI+MnrKFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":254,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/IZAAEAGx1bAqAEilQ0gD8hrNFBkkG+f8NlOH4AQECtE8gAAAQEICj4yevY\/iaIi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":254,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5LrpAAEAGlR7AqAEilQ0gD8hrNFBkkG+f8NlOH4AYECst4gAAAQEICj4yevY\/iaIiFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":252,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0yjJAAEAG+arAqAEilQ0gD8hpNFCsfgHhvsYiKIARECrm0QAAAQEICj4yevY\/i4Qd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":254,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":254,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":83,"pkt":"0NQSxnP1PBXCt3IOCABFAABFrnpAAEAGFVLAqAEilQ0gD8hrNFBkkHVE8NlOH4AYECsBzAAAAQEICj4yevc\/iaIi76xFgVR\/S9BBBlIdTNON8fo=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":254,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0947{"flow_id":254,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":458,"pkt":"0NQSxnP1PBXCt3IOCABFAAG8PYBAAEAGhNXAqAEilQ0gD8hrNFBkkHr18NlOH4AYECt5DgAAAQEICj4yevg\/iaIi5LCXbdTZDlnTKPUo0O+NWESTsL\/j3KAN6L9MNiC83EOOpIH1yDu9r8cakjSdFX5zL+xZDvNzU9icWQIFPn\/OHFNvYdp7wK64boar1Q4eRkv0bXSyx3Nm+OiFeBRRoENBvJuhfTpWz7raJoaABkLg1DP7+Efs9\/f+7glw\/FAIvnVe6I\/1Dy4j4A3eD0fQ0tRSuKMb6419cu3C4yuBhoBSqkeJtCPF5oDD2\/dHNYsCDtdirqVfKPJNtLViYyf6IGFQitfx2LcBTLIhTDLlRfmccXbKSNBtzY7LgqT\/bDRhVauQm\/LxEqHvjeeOM6qTTgB1CSUFIa7pQHB55MYrREMuPTCykWz0jRqEVFhufDOs7PzduW13p52JM6qkFd+pRtLfDkZR96u4RUCiUx\/KLhhyC53cwlZs9sY4T7Guf0i489OFMesWfOz7jPQIQ7suhT1hj7xlqytM1jf7jdceBQYb7LGKK+wKbBcIJyBcaH4xdYqlPqw2m0T7Nzt82v3w9hPgxfp\/Poa5eqo=","pkt_caplen":458,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":254,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA57D1AADUG4pKVDSAPwKgBIjRQyGvw2U4fZJBvpIAYAB084AAAAQEICj+Joi0+Mnr2FwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+1906{"flow_id":254,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":1167,"pkt":"0NQSxnP1PBXCt3IOCABFAASB1YlAAEAG6gbAqAEilQ0gD8hrNFBkkHx98NlOJIAQECtfKAAAAQEICj4yeyE\/iaItFwMBAH1zs6PTRjIrU7XBucswmTkpg2QSmIECVeUsjrm1483oAPquTe2ahgeLZSAgboE00j\/0V3HzX8HV3IqA\/+M6nPfblBjMWMqnmVB0SaaSQmOB8i8PnX7sFxF8XenOFSq7oJxgLF7vDdz0rZg6S7eqG7cRV3pjP7jVr5SHYmuCWxcDAQB9pxlpWjtmoBbz6VfCIQ7G5UpFD6RTBPnf5nObTJAcCG2iH2NK8rc3vg44nnvr9fCCAmu\/4dJ5e47XrDRlFnMv4O+e3IgZR0uzq47NTU+MIlMjXN5GZwYlwMgI1+uphMfTj76+cBrw+pjQCryhJhJYZ5m+CY7h0DAuALpFIJIXAwEAfVWu+rUVqss9tDc3\/aSTqd+SmUsRdRQpfqTrw1tHMD6r6uMmoa6Df8z22s\/PYLAbjhn0IjG\/Mxwd440gihHTEI+mcOZNKTOK9V6dhReFkFF1mc0BDzk29PvodgSD59gt6mC6toLzXWCj9yDhN1pe8ayEQytrQ+oovGULy6k9FwMBAH040AvB9OfvNfgU0p7nShRS\/3oR6ppoET9FtJNVrDIYYuuLBf3Mq\/kY36v2nyJ3m2c5\/W6s27Fma5vhyJ7Q8+Amy0LzYTMq6AhSXIk7cQaFnoY+vct0Fmu0XO\/kTci37KrrvQqcNS\/zUecuQ7OIvWJjfaW2aNANICdnWBENphcDAQCE5Z\/MaCR09FAQHsy9xxUoE5YrGomCrKZ8M5PaHt6IDnBExtoVRE4KaukzW6xajsyjch3z3T\/n+vHVz8+yDxFV+W6SJuj5oj0kpOCD8JMMEVf1NdNl8dXd8ClExLXVoRscvRDleMTuqbDV8ce2wwtA3gtKaJHawBiHL+1aW2pnyNIijmyfFwMBAH3mMJu7vGG2+tTqLnjGSUEMgHZl964ywi\/YQTomNnMSBTQy0q8GwjE4E+xRLF7HZcbDDoUpp0HqYVqmobSZzvqs+pMTeanHb9VadGjld8Napdi\/0iD\/akdqlJcFgHs\/Sl+4KLkDG0OFMDXNk6MCO3EJhwdqZIMbgLbfYq3eEBcDAQCJM\/h5hOsiaKp4yxPi\/dNn3mbQtlyXIb\/5BAzJUCun\/IADPwy44u7Ldjjnd8Su3TDqVaVWg1vfuWJoM6IgzOnnXKvoV3gq6ex2WDIl911gZ7KdSv2PdSBSqd+jAzBbhfkqcaH0Dcm7dY3oorUdOEr\/P9VMcke3sIHCcbFW0tIbnmZ5am4sea26r3IXAwEAidG3XNaryAB1mXBqYoINoH2IryI+kMuyTScuC6QrogzRbvjXFq7A4GKdkiloZSGszY9+2PGBfudzxjtOuTKTU+OIzITMKdq9w+wZnX2mwlZDUT18LXB9X6VBOlBvC0GCc1rsZH7EebaZqb0I+pga2CRbvIqcC6wSLVxuTc2p9GwDeKiCY3gRezVqFwMBAIw2j8LAp7ZddtkXcgD7as5O9GW4\/mssD3Ym","pkt_caplen":1167,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":254,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA07D5AADUG4paVDSAPwKgBIjRQyGvw2U4kZJB1VYAQACJPMQAAAQEICj+JojA+Mnr3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":246,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8nnlAAEAGGKfAqAEiUuBu8chil+9r2DUhwKVsb4AZECnINQAAAQEICj4yfAAABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":253,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970697,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXadAAEAGdnDAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/mhAAAAgQFtAEDAwUBAQgKPjJ8VgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":251,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAZ+VAAEAGbDLAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+jxgAAAgQFtAEDAwUBAQgKPjJ98QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":252,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jh9AAEAGNbbAqAEilQ0gD8hpNFCsfgHZvsYiKIAZECpdXAAAAQEICj4yfgc\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":255,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIalAAEAGsm7AqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9b2wAAAgQFtAEDAwUBAQgKPjJ+swAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":243,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbYshAAEAG3BbAqAEiF84hpshfAbtO4sWpGQUJ6IAZECypLAAAAQEICj4yfwPsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":256,"flow_packet_id":1,"flow_first_seen":1431970698661,"flow_last_seen":1431970698661,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51309,"dst_port":13392,"l4_proto":"tcp"}
+0428{"flow_id":256,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAL8NAAEAGlA7AqAEilQ0gD8htNFBZKlAPAAAAALAC\/\/9ctAAAAgQFtAEDAwUBAQgKPjJ\/OAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":256,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyG0MzUGLWSpQEKASOJAD+QAAAgQFrAQCCAo\/iaNBPjJ\/OAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":256,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0OGtAAEAGi3LAqAEilQ0gD8htNFBZKlAQDM1BjIAQECxa7wAAAQEICj4yf2w\/iaNB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":256,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":122,"pkt":"0NQSxnP1PBXCt3IOCABFAABsH8hAAEAGo93AqAEilQ0gD8htNFBZKlAQDM1BjIAYECzEXwAAAQEICj4yf2w\/iaNBe0ioHskHPpvsKpxCEQS5BOBaQrnzc9\/tw7maeX5w2dPQTfT+E\/dUAyvQLN0kQusfwDGux8zNmsM=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":256,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA04sJAADUG7BKVDSAPwKgBIjRQyG0MzUGMWSpQSIAQAB1quQAAAQEICj+Jo04+Mn9s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":256,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":141,"pkt":"PBXCt3IO0NQSxnP1CABFCAB\/4sNAADUG68aVDSAPwKgBIjRQyG0MzUGMWSpQSIAYAB1xmwAAAQEICj+Jo04+Mn9sOpJzwp2I9lmKmo9qet\/0JNHq3wKOmoF+GxDpI8NUGtvKs5qEae0kR3KE0SZc6Wdjcrsw4Z73PH2K8wjZNq+U9aIr4NHOZ+xtumO4","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":256,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0K3RAAEAGmGnAqAEilQ0gD8htNFBZKlBIDM1B14AQEClaLgAAAQEICj4yf6A\/iaNO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":256,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA893lAAEAGzFvAqAEilQ0gD8htNFBZKlBIDM1B14AYECm0nAAAAQEICj4yf6E\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":253,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970698,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAywpAAEAGCQ3AqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/imwAAAgQFtAEDAwUBAQgKPjKAPwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":256,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8TnFAAEAGdWTAqAEilQ0gD8htNFBZKlBIDM1B14AYECmzUgAAAQEICj4ygOs\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":251,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAAexAAEAG0ivAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+f3QAAAgQFtAEDAwUBAQgKPjKB2gAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":245,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":255,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA1tBAAEAG\/UbAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9X8gAAAgQFtAEDAwUBAQgKPjKCnAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":256,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8XNZAAEAGZv\/AqAEilQ0gD8htNFBZKlBIDM1B14AYECmxhgAAAQEICj4ygrc\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":257,"flow_packet_id":1,"flow_first_seen":1431970699896,"flow_last_seen":1431970699896,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51311,"dst_port":14506,"l4_proto":"tcp"}
+0428{"flow_id":257,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAq+JAAEAGjwvAqAEiXU\/gsMhvOKrhhkW1AAAAALAC\/\/9MqQAAAgQFtAEDAwUBAQgKPjKEAQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":253,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAJVVAAEAGrsLAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/eswAAAgQFtAEDAwUBAQgKPjKEJwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":257,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGRPJdT+CwwKgBIjiqyG99aSIL4YZFtqASOJC3HAAAAgQFrAQCCAoANM5PPjKEAQEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":257,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0MxRAAEAGB+bAqAEiXU\/gsMhvOKrhhkW2fWkiDIAQECwN6AAAAQEICj4yhFwANM5P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":257,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970699,"pkt_len":128,"pkt":"0NQSxnP1PBXCt3IOCABFAAByqA1AAEAGkq7AqAEiXU\/gsMhvOKrhhkW2fWkiDIAYECzKAQAAAQEICj4yhFwANM5PYTBwwWMI3W5EfAqWgvyIYQyUeH1\/y3UPlZ9J4EBYzfJjO\/e0stJxgmyBRJM2jCfjWoNY6QY\/5AVyuzDhnvc=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":257,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA07GlAADYGWJBdT+CwwKgBIjiqyG99aSIM4YZF9IAQAcUb+gAAAQEICgA0zmY+MoRc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":257,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":146,"pkt":"PBXCt3IO0NQSxnP1CABFAACE7GpAADYGWD9dT+CwwKgBIjiqyG99aSIM4YZF9IAYAcWw\/wAAAQEICgA0zms+MoRcCW3RyDFXIBx49jPnRKpj6FZ6vIHWYmInVMmJVjUMBfjlsBWYZPFzKanXOh1Feh8PQX5XHN1qU+g5Fg90VYKLwDGux8zNmsOYKUZ\/JEWy+3A=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":257,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1913,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/fBAAEAGPQnAqAEiXU\/gsMhvOKrhhkX0fWkiXIAQECkMzgAAAQEICj4yhM8ANM5r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":257,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8kO5AAEAGqgPAqAEiXU\/gsMhvOKrhhkX0fWkiXIAYECmYdQAAAQEICj4yhM8ANM5rAJngurdz24A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":252,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1916,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8nnRAAEAGJWHAqAEilQ0gD8hpNFCsfgHZvsYiKIAZECpV8wAAAQEICj4yhXA\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":258,"flow_packet_id":1,"flow_first_seen":1431970700273,"flow_last_seen":1431970700273,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51312,"dst_port":13392,"l4_proto":"tcp"}
+0427{"flow_id":258,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1917,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAXG9AAEAGZ2LAqAEilQ0gD8hwNFCdm737AAAAALAC\/\/+kFAAAAgQFtAEDAwUBAQgKPjKFdwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":256,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1918,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8sn1AAEAGEVjAqAEilQ0gD8htNFBZKlBIDM1B14AYECmutgAAAQEICj4yhYc\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":258,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyHC8tiDYnZu9\/KASOJDXAgAAAgQFrAQCCAo\/i4hfPjKFdwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":258,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA08VdAAEAG0oXAqAEilQ0gD8hwNFCdm738vLYg2YAQECwuAwAAAQEICj4yhaE\/i4hf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":258,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5TCJAAEAGd7bAqAEilQ0gD8hwNFCdm738vLYg2YAYECwW8wAAAQEICj4yhaE\/i4hfFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":258,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1923,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qLBAADUGJiWVDSAPwKgBIjRQyHC8tiDZnZu+AYAQAB0+AgAAAQEICj+LiGo+MoWh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":258,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1924,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5qLFAADUGJh+VDSAPwKgBIjRQyHC8tiDZnZu+AYAYAB0l8gAAAQEICj+LiGo+MoWhFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":258,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0H8lAAEAGpBTAqAEilQ0gD8hwNFCdm74BvLYg3oAQECstxQAAAQEICj4yhcs\/i4hq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":258,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1926,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5HDBAAEAGp6jAqAEilQ0gD8hwNFCdm74BvLYg3oAYECsWtQAAAQEICj4yhcs\/i4hqFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":256,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1927,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0eOdAAEAGSvbAqAEilQ0gD8htNFBZKlBQDM1B14AREClT+gAAAQEICj4yhcs\/iaNO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":258,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1928,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":258,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1929,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":161,"pkt":"0NQSxnP1PBXCt3IOCABFAACTAeVAAEAGwZnAqAEilQ0gD8hwNFCdm8OmvLYg3oAYECszYwAAAQEICj4yhcw\/i4hqZmUPsZFPVqQ8GxqbpDYrzYCnbv+iJeEP3BydwVT1JKf00ZPHhRy46qkVmzPFNX2xCuHwpiPxfavXYFcYlbzvb4F42muP81njeQ8Zb9+cuZiKzKKxNAkAwvw0KA+dn9U=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":258,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1930,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":258,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1931,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":159,"pkt":"0NQSxnP1PBXCt3IOCABFAACRIsFAAEAGoL\/AqAEilQ0gD8hwNFCdm8mlvLYg3oAYECvHJAAAAQEICj4yhcw\/i4hqM8v\/9do+OteJm3m21a5BguRI3\/P3EtOaiDvmGI+4tPJIVk325MdOCOmfCeI164XIX47kSoH2dLM\/FK7NCsTcX3Bnqn6qRYG4c14mGOgxbSurT6cDup3NQQafceul","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":258,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5qLJAADUGJh6VDSAPwKgBIjRQyHC8tiDenZu+BoAYAB0lswAAAQEICj+LiHU+MoXLFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":258,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":1388,"pkt":"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","pkt_caplen":1388,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":233,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8dpJAAEAGFLLAqAEiTKehBshYTzLHdCYHEv4ezoAZECph2QAAAQEICj4yhfq+r7k1zWOVyLN8y6I=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":258,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0qLNAADUGJiKVDSAPwKgBIjRQyHC8tiDjnZvEBYAQACI3tgAAAQEICj+LiHg+MoXM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":257,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8N4FAAEAGA3HAqAEiXU\/gsMhvOKrhhkX0fWkiXIAYECmWyAAAAQEICj4yhnwANM5rAJngurdz24A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":255,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAYAFAAEAGdBbAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9UCQAAAgQFtAEDAwUBAQgKPjKGhQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":238,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8COVAAHQGnSxRU02NwKgBIkTnyFsYw7kVAadnG4AYAQKkqgAAAQEICgC8GmA+MljnwuFPOnWA7qU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":238,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAom4FAAEAGPqTAqAEiUVNNjchbROcBp2cbAAAAAFAEAADZMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":233,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":137,"pkt":"PBXCt3IO0NQSxnP1CABFAAB7p7JAAC4G9VJMp6EGwKgBIk8yyFgS\/h7Wx3QmEIAZAONX8wAAAQEICr6v6eE+MoX6+fN5vG4ODm7i569+TS4a8H3mu1CAajgPTmiFTLLAjMXVPiadRls9tzo38vQiPpaO9lQI5z\/91jVoLpupXCUiiKYFIzILywg=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":233,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoSJVAAEAGQsPAqAEiTKehBshYTzLHdCYQAAAAAFAEAAD7WAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":253,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970700,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAA35AAEAG0JnAqAEiUHlUXchq861iaxDLAAAAALAC\/\/\/aywAAAgQFtAEDAwUBAQgKPjKIDwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":257,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8wOpAAEAGegfAqAEiXU\/gsMhvOKrhhkX0fWkiXIAYECmUNQAAAQEICj4yiQ8ANM5rAJngurdz24A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":251,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAUqNAAEAGgXTAqAEiUHlUXchn861MQWgbAAAAALAC\/\/+YDAAAAgQFtAEDAwUBAQgKPjKJqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":259,"flow_packet_id":1,"flow_first_seen":1431970701461,"flow_last_seen":1431970701461,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51313,"dst_port":13392,"l4_proto":"tcp"}
+0427{"flow_id":259,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABABNpAAEAGl07AqAEi1KEIJMhxNFBceQzyAAAAALAC\/\/9qAAAAAgQFtAEDAwUBAQgKPjKKDQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":260,"flow_packet_id":1,"flow_first_seen":1431970701508,"flow_last_seen":1431970701508,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51314,"dst_port":14506,"l4_proto":"tcp"}
+0428{"flow_id":260,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA+6xAAEAGP0HAqAEiXU\/gsMhyOKrDZAILAAAAALAC\/\/+oNwAAAgQFtAEDAwUBAQgKPjKKPAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":259,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQyHGqbrB+XHkM86ASOJCJjwAAAgQFrAQCCAo\/pB5HPjKKDQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":259,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0GjJAAEAGggLAqAEi1KEIJMhxNFBceQzzqm6wf4AQECzgbwAAAQEICj4yilc\/pB5H","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":259,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":135,"pkt":"0NQSxnP1PBXCt3IOCABFAAB5IhtAAEAGedTAqAEi1KEIJMhxNFBceQzzqm6wf4AYECym2gAAAQEICj4yilc\/pB5H6SLnReGwkjsHTSKNu1U729c0+aCr9r6US4og8IMG7dR+0i\/NBi2G1hkQGiL\/w\/bmKhOo+dbPNBVCS4DxboeMjVqDWOkG","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":256,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8+A1AAEAGy8fAqAEilQ0gD8htNFBZKlBIDM1B14AZECmp3QAAAQEICj4yil8\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":255,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/N5AAEAG1zjAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9QIAAAAgQFtAEDAwUBAQgKPjKKbgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":260,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADYGRPJdT+CwwKgBIjiqyHKomFMrw2QCDKASOJC0yAAAAgQFrAQCCAoANM\/iPjKKPAEDAwU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":260,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA03YRAAEAGXXXAqAEiXU\/gsMhyOKrDZAIMqJhTLIAQECwLlgAAAQEICj4yipUANM\/i","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":260,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":106,"pkt":"0NQSxnP1PBXCt3IOCABFAABcnjlAAEAGnJjAqAEiXU\/gsMhyOKrDZAIMqJhTLIAYECxL\/wAAAQEICj4yipUANM\/i044IfrhHhyD4n2SxkyCOE1pKq3Zdp5xbFm\/ts2yZLRd3lLSFOtIg6A==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":259,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0riVAADQG+g7UoQgkwKgBIjRQyHGqbrB\/XHkNOIAQAB3wJgAAAQEICj+kHlo+MopX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":259,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":147,"pkt":"PBXCt3IO0NQSxnP1CABFAACFriZAADQG+bzUoQgkwKgBIjRQyHGqbrB\/XHkNOIAYAB0D5AAAAQEICj+kHlo+MopX9qr7IgP3WcP6kVH0E9AmdkhTnL5oQFFp+0ZjkwBVxYTkNKBm5xHCnJeAVx1Q81aDti8UdSKrYFFO52ztOuM4SeafxGVSGxBBflcc3WpT6DkW","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":259,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0q29AAEAG8MTAqAEi1KEIJMhxNFBceQ04qm6w0IAQECnfgQAAAQEICj4yip8\/pB5a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":259,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8t8BAAEAG5GvAqAEi1KEIJMhxNFBceQ04qm6w0IAYECl3EAAAAQEICj4yiqA\/pB5axn8ujwJhcPA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":260,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nNVAADYGqCRdT+CwwKgBIjiqyHKomFMsw2QCNIAQAcUZvgAAAQEICgA0z\/k+MoqV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":260,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":104,"pkt":"PBXCt3IO0NQSxnP1CABFAABanNZAADYGp\/1dT+CwwKgBIjiqyHKomFMsw2QCNIAYAcWx+AAAAQEICgA0z\/o+MoqVxnuCqInKLYkhK2cNGi2kMOK9NGgsjetMZTAu0eMqBHA5OI4arpg=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":260,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0pMhAAEAGljHAqAEiXU\/gsMhyOKrDZAI0qJhTUoAQECoK0wAAAQEICj4yivQANM\/6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":257,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0nitAAEAGnM7AqAEiXU\/gsMhvOKrhhkX8fWkiXIARECkGoAAAAQEICj4yivQANM5r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":260,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":133,"pkt":"0NQSxnP1PBXCt3IOCABFAAB3S2JAAEAG71TAqAEiXU\/gsMhyOKrDZAI0qJhTUoAYECq4hgAAAQEICj4yivgANM\/6MLrCAks+kvY5M40z8tIirjFjQBZp070ye4Sb53PP1pBgQ4XWYcL\/P\/VY8V9hXHVvnh\/Lug0E7jWgIy\/+Lzr6Uqhynw==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":260,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nNdAADYGqCJdT+CwwKgBIjiqyHKomFNSw2QCd4AQAcUYzwAAAQEICgA00Bw+Mor4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":260,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1981,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":69,"pkt":"PBXCt3IO0NQSxnP1CABFAAA3nNhAADYGqB5dT+CwwKgBIjiqyHKomFNSw2QCd4AYAcXA2AAAAQEICgA00CU+Mor4XeH6","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":260,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0wXlAAEAGeYDAqAEiXU\/gsMhyOKrDZAJ3qJhTVYAQECoJtwAAAQEICj4yi58ANNAl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":246,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8I05AAEAGk9LAqAEiUuBu8chil+9r2DUhwKVsb4AZECm4bAAAAQEICj4yi8kABxv0Y+a7tnpGfD8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":260,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":72,"pkt":"PBXCt3IO0NQSxnP1CABFAAA6nNlAADYGqBpdT+CwwKgBIjiqyHKomFNVw2QCd4AYAcVa6AAAAQEICgA00Dw+Mouf84jbGe5r","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":260,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0gPxAAEAGuf3AqAEiXU\/gsMhyOKrDZAJ3qJhTW4AQECoJQgAAAQEICj4yi\/cANNA8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":260,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970701,"pkt_len":69,"pkt":"0NQSxnP1PBXCt3IOCABFAAA3Y5BAAEAG12bAqAEiXU\/gsMhyOKrDZAJ3qJhTW4AYECrv3gAAAQEICj4yi\/cANNA8OVfg","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":259,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8oRVAAEAG+xbAqAEi1KEIJMhxNFBceQ04qm6w0IAYECl1jgAAAQEICj4yjCI\/pB5axn8ujwJhcPA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":260,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1990,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0nNpAADYGqB9dT+CwwKgBIjiqyHKomFNbw2QCeoAQAcUXjQAAAQEICgA00FM+Mov3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":247,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoh2BAAEAGvWnAqAEiW77YfchjMD4Tm3MPHUSi8FARIABaTAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":250,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoGaJAAEAGKyjAqAEiW77YfchmAbumoVhpgmR6JFARIADUFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":250,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAoCrdAADYGRAtbvth9wKgBIgG7yGaCZHokpqFYalAQA6DwdwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":250,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoXytAAEAG5Z7AqAEiW77YfchmAbumoVhqgmR6JFAQIADUFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":247,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAo0nxAADYGfEVbvth9wKgBIjA+yGMdRKLwE5tzEFAQA\/92TQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":247,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoOShAAEAGC6LAqAEiW77YfchjMD4Tm3MQHUSi8FAQIABaTAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":215,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDDa9AADYG7DGdN+uSwKgBIgG7yFDrM+1ZSDMJqoAYAB3aAwAAAQEICkxg8fg+Mkk5FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":215,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAozTJAAEAGIwnAqAEinTfrkshQAbtIMwmqAAAAAFAEAABJYwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":216,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACDPp5AADYGuzidN+ucwKgBIgG7yFE1cNv3HQwBHoAYAB3QZQAAAQEICkxc9mg+Mkk5FgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":216,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAoZLtAAEAGi3bAqAEinTfrnMhRAbsdDAEeAAAAAFAEAAB9CwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":257,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8tQFAAEAGhfDAqAEiXU\/gsMhvOKrhhkX0fWkiXIAZECmP1wAAAQEICj4yjWwANM5rAJngurdz24A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":229,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAupeIAAEARuQDAqAEirjGr4DLdfQsAGnY5fcgC\/PIlRfLGUz+9W\/AIqJo1","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":230,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAuCWAAAEART8nAqAEiUx8MrTLdXYMAGkBffcoC\/xGbsvhYfjWPhtkio5B8","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":255,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAqt1AAEAGKTrAqAEiUHlUXchsAbvYtBS\/AAAAALAC\/\/9MNwAAAgQFtAEDAwUBAQgKPjKOVwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":259,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ikZAAEAGEebAqAEi1KEIJMhxNFBceQ04qm6w0IAYEClzUQAAAQEICj4yjl8\/pB5axn8ujwJhcPA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":252,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970702,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8LxBAAEAGlMXAqAEilQ0gD8hpNFCsfgHZvsYiKIAZECpL6wAAAQEICj4yj3g\/i4QdlEVm+IpzAKs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":235,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2015,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8CwxAAEAGrRDAqAEiBfi63chaeSLm2Z7HnfKa24AZEChc5gAAAQEICj4ykDwAAJTxinTTcj1jiGY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":261,"flow_packet_id":1,"flow_first_seen":1431970703073,"flow_last_seen":1431970703073,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51315,"dst_port":13392,"l4_proto":"tcp"}
+0428{"flow_id":261,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2016,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA2zBAAEAGwPfAqAEi1KEIJMhzNFD26tn9AAAAALAC\/\/\/8RgAAAgQFtAEDAwUBAQgKPjKQRwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":261,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQyHPVGwsc9urZ\/qASOJBaugAAAgQFrAQCCAo\/nFogPjKQRwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":261,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0QUdAAEAGWu3AqAEi1KEIJMhzNFD26tn+1RsLHYAQECyxnAAAAQEICj4ykI8\/nFog","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":261,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5quhAAEAG8UbAqAEi1KEIJMhzNFD26tn+1RsLHYAYECyajAAAAQEICj4ykI8\/nFogFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":235,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA09MFAAHIGkWIF+LrdwKgBInkiyFqd8prj5tme0IAQQ65MeAAAAQEICgAAlYo+MpA8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":247,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAt0n1AADYGfD9bvth9wKgBIjA+yGMdRKLwE5tzEFAYA\/9ePQAAFwMBAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":247,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFCAAowOFAAEAGg+DAqAEiW77YfchjMD4Tm3MQAAAAAFAEAAA6jQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":261,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0US5AADQGVwbUoQgkwKgBIjRQyHPVGwsd9uraA4AQAB3BkwAAAQEICj+cWjM+MpCP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":261,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5US9AADQGVwDUoQgkwKgBIjRQyHPVGwsd9uraA4AYAB2pgwAAAQEICj+cWjM+MpCPFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":261,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0trdAAEAG5XzAqAEi1KEIJMhzNFD26toD1RsLIoAQECuxOAAAAQEICj4ykNc\/nFoz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":261,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5bqJAAEAGLY3AqAEi1KEIJMhzNFD26toD1RsLIoAYECuaKAAAAQEICj4ykNc\/nFozFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":259,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0CTFAAEAGkwPAqAEi1KEIJMhxNFBceQ1Aqm6w0IARECnZQAAAAQEICj4ykNc\/pB5a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":261,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":261,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":130,"pkt":"0NQSxnP1PBXCt3IOCABFAAB0rgJAAEAG7fHAqAEi1KEIJMhzNFD26t+o1RsLIoAYECuXNwAAAQEICj4ykNg\/nFozOG7uFm2IY8bqXnqTQlWdfMo77o7aRkbgPM+rmtAkbYo68ywUx33aaFIAgh9F22iiOI3hRHsk3euE1EUkQLvOTQ==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":261,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":261,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2034,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":148,"pkt":"0NQSxnP1PBXCt3IOCABFAACGwsxAAEAG2RXAqAEi1KEIJMhzNFD26uWI1RsLIoAYECu3igAAAQEICj4ykNg\/nFoz1JlVstp4FbWCDpuT9eDEH0UTsfIDRNeZf4ej6kkXy3GDlR+eQMXC3dFUmCabAARYbLsLeOMnVIKAUfMMNLX05Gv9Ztiec3MV\/eg4\/B01OPqD3Q==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":261,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2035,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFAAA5UTBAADQGVv\/UoQgkwKgBIjRQyHPVGwsi9uraCIAYAB2pHgAAAQEICj+cWkY+MpDXFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+2265{"flow_id":261,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":1430,"pkt":"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","pkt_caplen":1430,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":261,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0UTFAADQGVwPUoQgkwKgBIjRQyHPVGwsn9urf6IAQACK7PwAAAQEICj+cWko+MpDY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":259,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8KntAAEAGcbHAqAEi1KEIJMhxNFBceQ04qm6w0IAZEClvoAAAAQEICj4ykg8\/pB5axn8ujwJhcPA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":176,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":145,"pkt":"PBXCt3IO0NQSxnP1CABFAACD5dVAADcG4eVv3UoSwKgBIgG7yEQiaEt5jx1l1IAYAB2\/zAAAAQEICk12y4A+Mh9RFgMBAEoCAABGAwFAG+SGAq3gKeF3dOVEucmctDExXgLdd50VSpYJul2ocCAcoOT2TGNRri+OTuHmdmoKiNXYxVyumMXkgfIqab+QWAAFAA==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":176,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFAAAo3TpAAEAG4dvAqAEib91KEshEAbuPHWXUAAAAAFAEAAB1NQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":256,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970703,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84nxAAEAG4VjAqAEilQ0gD8htNFBZKlBIDM1B14AZECmg9AAAAQEICj4yk0g\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":262,"flow_packet_id":1,"flow_first_seen":1431970704329,"flow_last_seen":1431970704329,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51316,"dst_port":13392,"l4_proto":"tcp"}
+0427{"flow_id":262,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAHThAAEAGppnAqAEilQ0gD8h0NFB7qA8CAAAAALAC\/\/9lUQAAAgQFtAEDAwUBAQgKPjKVIwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":262,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyHQNAtU7e6gPA6ASOJA1ewAAAgQFrAQCCAo\/gOZ\/PjKVIwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":262,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0+SJAAEAGyrrAqAEilQ0gD8h0NFB7qA8DDQLVPIAQECyMewAAAQEICj4ylU0\/gOZ\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_id":262,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":142,"pkt":"0NQSxnP1PBXCt3IOCABFAACAqrpAAEAGGNfAqAEilQ0gD8h0NFB7qA8DDQLVPIAYECx7oAAAAQEICj4ylU0\/gOZ\/8UaEXBXneHevAJNyzFhvLEJ6g6HbSbNU5RKN3J8l6peYrTLUgLslffn5babqbuDUqcb\/pMUye\/ChXrf8PUqzyJn2b1S1YuugkY4nrA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":257,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8MtxAAEAGCBbAqAEiXU\/gsMhvOKrhhkX0fWkiXIAZECmH5wAAAQEICj4ylVwANM5rAJngurdz24A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":262,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0M7ZAADUGmx+VDSAPwKgBIjRQyHQNAtU8e6gPT4AQAB2cMwAAAQEICj+A5oo+MpVN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":262,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":174,"pkt":"PBXCt3IO0NQSxnP1CABFCACgM7dAADUGmrKVDSAPwKgBIjRQyHQNAtU8e6gPT4AYAB1nGgAAAQEICj+A5os+MpVNZfJBJjPGEBuqeBidJbbO+Vqhxwz1kaluocctgV\/DbVS95rJaz+ZaFRb4XXKeGvWrhCUS29ABPhfcnSoTqPnWzzQVQkuA8W6HjI1ag1jpBj\/kBXK7MOGe9zx9ivMI2TavlPWiK+DRzmfsbbpj","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":262,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/vJAAEAGxOrAqAEilQ0gD8h0NFB7qA9PDQLVqIAQECiLjgAAAQEICj4ylXo\/gOaL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":262,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ohZAAEAGIb\/AqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChetQAAAQEICj4ylXo\/gOaLNT3NT3k1sQY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":262,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970704,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8pVlAAEAGHnzAqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChdggAAAQEICj4ylq0\/gOaLNT3NT3k1sQY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":243,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":233,"pkt":"0NQSxnP1PBXCt3IOCABFAADbh4xAAEAGt1LAqAEiF84hpshfAbtO4sWpGQUJ6IAZECyQYwAAAQEICj4yl8zsPkNyFgMBAKIBAACeAwFVWiOCVbYrRciiFbDPyo4FvK6EfrMUp8GvYuL\/j8yxbgAATAD\/VgDAJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAAApAAAAEwARAAAOYXBwcy5za3lwZS5jb20ACgAIAAYAFwAYABkACwACAQA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":262,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xo5AAEAG\/UbAqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChb5gAAAQEICj4ymEk\/gOaLNT3NT3k1sQY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":259,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gV9AAEAGGs3AqAEi1KEIJMhxNFBceQ04qm6w0IAZEClpBwAAAQEICj4ymKg\/pB5axn8ujwJhcPA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":245,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":401,"pkt":"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","pkt_caplen":401,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":262,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA89YZAAEAGzk7AqAEilQ0gD8h0NFB7qA9PDQLVqIAYEChZdgAAAQEICj4ymrk\/gOaLNT3NT3k1sQY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":263,"flow_packet_id":1,"flow_first_seen":1431970705942,"flow_last_seen":1431970705942,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51317,"dst_port":13392,"l4_proto":"tcp"}
+0428{"flow_id":263,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAIgJAAEAGoc\/AqAEilQ0gD8h1NFDRK91BAAAAALAC\/\/87SwAAAgQFtAEDAwUBAQgKPjKbZQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":263,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFCAA8AABAADUGzs2VDSAPwKgBIjRQyHXO868x0SvdQqASOJBt+QAAAgQFrAQCCAo\/gOgTPjKbZQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":263,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0iDxAAEAGO6HAqAEilQ0gD8h1NFDRK91CzvOvMoAQECzE+QAAAQEICj4ym48\/gOgT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":263,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970705,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA5X2ZAAEAGZHLAqAEilQ0gD8h1NFDRK91CzvOvMoAYECyt6QAAAQEICj4ym48\/gOgTFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":263,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0Ry9AADUGh6aVDSAPwKgBIjRQyHXO868y0SvdR4AQAB3U+QAAAQEICj+A6B0+MpuP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":263,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5RzBAADUGh6CVDSAPwKgBIjRQyHXO868y0SvdR4AYAB286QAAAQEICj+A6B0+MpuPFwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":263,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA05pFAAEAG3UvAqAEilQ0gD8h1NFDRK91HzvOvN4AQECvEuwAAAQEICj4ym7o\/gOgd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":263,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":71,"pkt":"0NQSxnP1PBXCt3IOCABFAAA59WFAAEAGznbAqAEilQ0gD8h1NFDRK91HzvOvN4AYECutqwAAAQEICj4ym7o\/gOgdFgMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":262,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qVFAAEAGGozAqAEilQ0gD8h0NFB7qA9XDQLVqIARECiFRQAAAQEICj4ym7o\/gOaL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":263,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":263,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":106,"pkt":"0NQSxnP1PBXCt3IOCABFAABcZg1AAEAGXajAqAEilQ0gD8h1NFDRK+LszvOvN4AYECsLsAAAAQEICj4ym7s\/gOgdrtD0m7eIeH5d56RfIjek+EsacDxdNy+I8WVmDWcICtFIu3iT+uxIrA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":263,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":1506,"pkt":"0NQSxnP1PBXCt3IOCABFAAXUVW5AAEAGaM\/AqAEilQ0gD8h1NFDRK+MUzvOvN4AQECvIRQAAAQEICj4ym7s\/gOgdFwMBAGbaFUOV3mjoY7xRFF16BLzMNkF5ByZQetjM\/dJ5hw5pxqPadcQPzBQgVa5v4BLJaGUNCQeEP1GuNa6RCGtc5njMcCnDwq8qKvETlivQMynaFfGchMHbKbl25yNJDhRDTA\/S1eqIl8wXAwEBx7ypTee8vHqRmyy51kjRWsprTcuf\/pAR46LV8sgA78EAf6K4rirChfujzynAcHzMt8aF222iS4i1dSNrAhzUIZ9uJ8Nd7uMPJ43iioldOxTeHOgVeB99esi+n9j6VJGM0ivrcuEYHq545usqtguk86SShgk8o+aDfrtUg4mV5+r8RCTWd36Bo8C7Jpejmfvu5A2xdY8Wvq2baI6S1QkQRStVxiN+pBd8bZ1f0Qqywv0dFjsPTzuTfH3SjA2Z98WkNqJykvzDtr1LmzX7FEw5lwOzeMDtqC8S2wArIgcIHDM\/F+IbC7ArRSkBNlAXWI\/1q8Suqf6zBgo\/bVcFklthgo5mdk7VMCa9XBrhiOh\/grlbjKmBad0QBwAEQI6I1cEY4ArgYD5DM1M948BHcu8NN+Ld3dfr7ShVs\/7kAYAlhypHFAKQ+vx4vSKtioqMCtwKanqJxYJvIPqSgHF6P6eJ8owQcp0Zmvedz6gOouq5CGjPMRlNqQDUjVYuaOoDWEahFZ9UWkud5mve1vA0b+XZcbs6C7J2zR8LH8bFM1pEyfVdJDV\/9VR6b+QTYN9PZJAk5ujOX1H815OTu\/uM\/jcV82eRUeo0AjcuFwMBAcW1Cq6DkuqW9LB+Yx4hFTzzXAkdQVKCrZSU2Z3Viwq43KP5uFjZsf2BA9GPrb26teysInuGy3GQ50LXsSUWcQpkWOfUPkBdeqIVrA1mBE5B1hS3gWEJ0\/\/Wt61VUKpRlzzo0SSGgCF0KHDKfZJ79oz92rgSU45u9ehbdlRvgNNRujYWOm\/3thtv4GJToUBAduq9j6RuA0DE8UW9Kz0aI4GEb0fDOQvEF52\/9ZZtwa8UP1DPiQSYA1ANWnXMirbayzO3PG7so5AE0aJNxxVBoftkUzFgckZdWBjdtfblJv29Nvxef\/OJX5igAxOQG48+rtg95Z2SMMuwKqJ1ZBcEPKSFm4IbL9CvIvtYMjBWH0ZOhZvXW0i0FxWHeoGfDeAGYXk7tBprW8TzZKMSxFg2u4Lysm1cBQskRw\/l67cbngeXqaGIRq27wNluvpFfIhqOVDwcHA2fDVbTh4R\/Byl02cVbmRB02xM5X4IkX09TWK4XsvHqC5ziYE\/wbP2kntfUQnzTmFTO5\/WqGotiwgh2FdV+DU2tCMn\/3pyJXPGV2o+2hN5UI3XWyaavjTz5yddE8QWX+C3CmnjIlTDbEZhX+Ajw49iook0XAwEAff\/KgmneAO5p7\/rZvbNADfCEmra5JpU\/ulKl9XR\/3MvYrZ9MmNNe5AZDERekLPwsB\/SDT\/hcDXT+WammJS6Cy1mGrFC70dZl\/A6Vm8zcvt2avsKXUS32w9U7Ah9zcahjhB3ZZyrmj7w+LVSbls2eTVeYH\/Wt+tavUOvS8zQBFwMBAH3PVLkO9aa+aJ+m4+pdfaMkoqdjLUa\/n3fVXWBNOErUzGV4EPzW93cn4klqwx1TQBTLAhYTN3\/c78GxkojrHJflAYk\/L+eam+JQy2ltjuOesoIyAR8Drqnmp3oMa6\/s0pde011xZWoLFrQhRi6j8g0\/ilL9iFhQAIINDPKBZxcDAQB9Yf1\/YJwvCp1dPecLvdxL2xELATSMZMwO7CffV8gdfaHjiJzblKDIgFJb9M2yHr1g0RAE2LKhxYzclc8413BWL3WsM2S57s5B3b\/i7pHKxQSicAj8Fmk\/Lq3NERn6IL1YS90mMvFce61N07zaiRcyzdGGyCuYPa\/CyW0f0TEXAwEAfS6HI7Nm9P9t2PVdOgznjnw7CRvT","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":263,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":171,"pkt":"0NQSxnP1PBXCt3IOCABFAACdOnlAAEAGiPvAqAEilQ0gD8h1NFDRK+i0zvOvN4AYECsVNQAAAQEICj4ym7s\/gOgddmVBylt55PwCttDsY54YJdlOuLxrAjZO0pHICQNUAIehw0c7gvi3ztnqi0wScDww9imIFgVa7kF1b+G4UduBA0mF8NRp21gVf322TjVAk+LHAcLIpqEDMLPxN3H8r2rZe68NjxhLVfqd","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":263,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2094,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":71,"pkt":"PBXCt3IO0NQSxnP1CABFCAA5RzFAADUGh5+VDSAPwKgBIjRQyHXO86830SvdTIAYAB28qQAAAQEICj+A6Cg+Mpu6FwMBAAA=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+2264{"flow_id":263,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2095,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":1431,"pkt":"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","pkt_caplen":1431,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":263,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2096,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFCAA0RzJAADUGh6OVDSAPwKgBIjRQyHXO86880SvjFIAQACLO4gAAAQEICj+A6Cw+Mpu7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":234,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8gslAAEAGpm\/AqAEiR+4Hy8hZSU+QnysQ5ZyWQIAZECo4OAAAAQEICj4ynCwDHMmEsUo9bapdk3s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":198,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKm98AAEARW1DAqAEiwKgBAftsADUANoJ0c24BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAABwAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":197,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":88,"pkt":"0NQSxnP1PBXCt3IOCABFAABKegMAAEARfSzAqAEiwKgBAev9ADUANqf\/XW0BAAABAAAAAAAAAzMzNQEwATcBNwEzBHJzdDABcgVza3lwZQNuZXQAAAEAAQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":250,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":60,"pkt":"PBXCt3IO0NQSxnP1CABFCAAtCrhAADYGRAVbvth9wKgBIgG7yGaCZHokpqFYalAYA6DYZwAAFwMBAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":250,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":54,"pkt":"0NQSxnP1PBXCt3IOCABFCAAoY0lAAEAG4XjAqAEiW77YfchmAbumoVhqAAAAAFAEAADwrAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":234,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA0srBAAHMGQ5BH7gfLwKgBIklPyFnlnJZIkJ8rGYAQ\/6J0mQAAAQEICgMcyjs+Mpws","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":234,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":116,"pkt":"PBXCt3IO0NQSxnP1CABFAABmsrFAAHMGQ11H7gfLwKgBIklPyFnlnJZIkJ8rGYAZ\/6JyXQAAAQEICgMcyjs+MpwsZBZO\/lnBnsg0dCVQeqMbFcMi5x2cxvVY3grUM9xFR9ksPv3jFA1FPSSFtIV0qkuTN3I=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":262,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8jcNAAEAGNhLAqAEilQ0gD8h0NFB7qA9PDQLVqIAZEChVXAAAAQEICj4yntI\/gOaLNT3NT3k1sQY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":256,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970706,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86IVAAEAG20\/AqAEilQ0gD8htNFBZKlBIDM1B14AZECmUywAAAQEICj4yn3E\/iaNOv+3qnuBIGqs=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":264,"flow_packet_id":1,"flow_first_seen":1431970707102,"flow_last_seen":1431970707102,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51318,"dst_port":13392,"l4_proto":"tcp"}
+0428{"flow_id":264,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABA\/2lAAEAGnL7AqAEi1KEIJMh2NFCv5GiXAAAAALAC\/\/+lEAAAAgQFtAEDAwUBAQgKPjKf5wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":264,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":74,"pkt":"PBXCt3IO0NQSxnP1CABFAAA8AABAADQGqCzUoQgkwKgBIjRQyHapD3vnr+RomKASOJCFFQAAAgQFrAQCCAo\/p5PEPjKf5wEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":264,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0qAZAAEAG9C3AqAEi1KEIJMh2NFCv5GiYqQ976IAQECzb9gAAAQEICj4yoDA\/p5PE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_id":264,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":139,"pkt":"0NQSxnP1PBXCt3IOCABFAAB9blhAAEAGLZPAqAEi1KEIJMh2NFCv5GiYqQ976IAYECy2tAAAAQEICj4yoDA\/p5PEOvphUqitoijdudy1GqYdl2SMInokobwdC35PBooej9FUTH8IzU2MFpTqtcHWuMRaxGVSGxBBflcc3WpT6DkWD3RVgovAMa7HzA==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":264,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":66,"pkt":"PBXCt3IO0NQSxnP1CABFAAA06D5AADQGv\/XUoQgkwKgBIjRQyHapD3vor+Ro4YAQAB3rqQAAAQEICj+nk9c+MqAw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":264,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":146,"pkt":"PBXCt3IO0NQSxnP1CABFAACE6D9AADQGv6TUoQgkwKgBIjRQyHapD3vor+Ro4YAYAB3FGgAAAQEICj+nk9c+MqAwbgRiMe0MNJpnsW\/NfOuljXSRyyed9+RwWvZ2xheS8RFTkCgQMVJ7bqL96Sh\/6PCnZh9E5dKbkMH+15xd6tNouZaP9NUCC0CxLkdMTRpDGKk=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":264,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":66,"pkt":"0NQSxnP1PBXCt3IOCABFAAA0\/cJAAEAGnnHAqAEi1KEIJMh2NFCv5GjhqQ98OIAQECnbAwAAAQEICj4yoHo\/p5PX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":264,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8WA1AAEAGRB\/AqAEi1KEIJMh2NFCv5GjhqQ98OIAYECmofQAAAQEICj4yoHo\/p5PX6wz3Jw7OQXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":229,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAunF8AAEARwoPAqAEirjGr4DLdfQsAGuvkfc8CwbP5+\/0XaLBIocIya3up","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":230,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu7o0AAEARapvAqAEiUx8MrTLdXYMAGunwfdECOswvcOuv5soiKh7QcjIR","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":264,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA86y5AAEAGsP3AqAEi1KEIJMh2NFCv5GjhqQ98OIAYECmm\/QAAAQEICj4yofo\/p5PX6wz3Jw7OQXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1431970707911,"flow_last_seen":1431970707911,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"133.236.67.25","src_port":13021,"dst_port":49195,"l4_proto":"udp"}
+0401{"flow_id":265,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970707,"pkt_len":60,"pkt":"0NQSxnP1PBXCt3IOCABFAAAu+nsAAEAR9XPAqAEihexDGTLdwCsAGiMOfdMCo1rvIegrMqRysYXm5vlz","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1431970707911,"flow_last_seen":1431970707911,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"133.236.67.25","src_port":13021,"dst_port":49195,"l4_proto":"udp","ndpi": {"proto":"Skype.SkypeCall","category":"VoIP"}}
+0423{"flow_id":264,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8ct5AAEAGKU7AqAEi1KEIJMh2NFCv5GjhqQ98OIAYECmkxgAAAQEICj4ypDE\/p5PX6wz3Jw7OQXM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":257,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8xlJAAEAGdJ\/AqAEiXU\/gsMhvOKrhhkX0fWkiXIAZECl4zgAAAQEICj4ypHUANM5rAJngurdz24A=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":259,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA84MtAAEAGu2DAqAEi1KEIJMhxNFBceQ04qm6w0IAZEClcngAAAQEICj4ypRE\/pB5axn8ujwJhcPA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431970708715,"flow_last_seen":1431970708715,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51319,"dst_port":13392,"l4_proto":"tcp"}
+0427{"flow_id":266,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970708,"pkt_len":78,"pkt":"0NQSxnP1PBXCt3IOCABFAABAWHtAAEAGQ63AqAEi1KEIJMh3NFBvQ5mUAAAAALAC\/\/+uawAAAgQFtAEDAwUBAQgKPjKmLwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":262,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","pkt_oversize":false,"pkt_ts":1431970708,"pkt_len":74,"pkt":"0NQSxnP1PBXCt3IOCABFAAA8s5VAAEAGEEDAqAEilQ0gD8h0NFB7qA9PDQLVqIAZEChN9AAAAQEICj4ypjo\/gOaLNT3NT3k1sQY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":232,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.188.134.174","src_port":13021,"dst_port":22436,"l4_proto":"udp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":74,"flow_packet_id":14,"flow_first_seen":1431970651380,"flow_last_seen":1431970679567,"flow_tot_l4_data_len":897,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":74,"flow_packet_id":14,"flow_first_seen":1431970651380,"flow_last_seen":1431970679567,"flow_tot_l4_data_len":897,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51240,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1431970634648,"flow_last_seen":1431970634648,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61016,"dst_port":53,"l4_proto":"udp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":119,"flow_packet_id":14,"flow_first_seen":1431970659480,"flow_last_seen":1431970693361,"flow_tot_l4_data_len":887,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51250,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":119,"flow_packet_id":14,"flow_first_seen":1431970659480,"flow_last_seen":1431970693361,"flow_tot_l4_data_len":887,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51250,"dst_port":443,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":156,"flow_packet_id":14,"flow_first_seen":1431970668514,"flow_last_seen":1431970696319,"flow_tot_l4_data_len":777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51259,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":156,"flow_packet_id":14,"flow_first_seen":1431970668514,"flow_last_seen":1431970696319,"flow_tot_l4_data_len":777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51259,"dst_port":443,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":176,"flow_packet_id":14,"flow_first_seen":1431970673563,"flow_last_seen":1431970703649,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51268,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":176,"flow_packet_id":14,"flow_first_seen":1431970673563,"flow_last_seen":1431970703649,"flow_tot_l4_data_len":727,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51268,"dst_port":443,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":218,"flow_packet_id":3,"flow_first_seen":1431970684583,"flow_last_seen":1431970684880,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51283,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":218,"flow_packet_id":3,"flow_first_seen":1431970684583,"flow_last_seen":1431970684880,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51283,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":265,"flow_packet_id":1,"flow_first_seen":1431970707911,"flow_last_seen":1431970707911,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"133.236.67.25","src_port":13021,"dst_port":49195,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":165,"flow_packet_id":7,"flow_first_seen":1431970670304,"flow_last_seen":1431970696803,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":61095,"dst_port":53,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":230,"flow_packet_id":5,"flow_first_seen":1431970687262,"flow_last_seen":1431970707409,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"83.31.12.173","src_port":13021,"dst_port":23939,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.33","src_port":13021,"dst_port":40002,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.42","src_port":13021,"dst_port":40005,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":201,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.43","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":200,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":1431970679995,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.29","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1431970649778,"flow_last_seen":1431970649778,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.25","src_port":13021,"dst_port":40010,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":213,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.17","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":164,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":1431970669927,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.38","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":168,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":1431970670941,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.40","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.19","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.13","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.27","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.15","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.12","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.39","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.24","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.16","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":122,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.20","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":11,"flow_packet_id":7,"flow_first_seen":1431970634729,"flow_last_seen":1431970661287,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59113,"dst_port":53,"l4_proto":"udp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":234,"flow_packet_id":17,"flow_first_seen":1431970687670,"flow_last_seen":1431970706351,"flow_tot_l4_data_len":791,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51289,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":234,"flow_packet_id":17,"flow_first_seen":1431970687670,"flow_last_seen":1431970706351,"flow_tot_l4_data_len":791,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51289,"dst_port":18767,"l4_proto":"tcp"}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":17,"flow_packet_id":17,"flow_first_seen":1431970635489,"flow_last_seen":1431970690062,"flow_tot_l4_data_len":2957,"flow_min_l4_data_len":20,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51231,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":239,"flow_packet_id":30,"flow_first_seen":1431970688781,"flow_last_seen":1431970693454,"flow_tot_l4_data_len":3884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51292,"dst_port":18767,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":239,"flow_packet_id":30,"flow_first_seen":1431970688781,"flow_last_seen":1431970693454,"flow_tot_l4_data_len":3884,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":129,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"71.238.7.203","src_port":51292,"dst_port":18767,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":1,"flow_packet_id":7,"flow_first_seen":1431970634276,"flow_last_seen":1431970660781,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55028,"dst_port":53,"l4_proto":"udp"}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":243,"flow_packet_id":12,"flow_first_seen":1431970690191,"flow_last_seen":1431970705014,"flow_tot_l4_data_len":1740,"flow_min_l4_data_len":32,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"23.206.33.166","src_port":51295,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":18,"flow_packet_id":8,"flow_first_seen":1431970636044,"flow_last_seen":1431970646741,"flow_tot_l4_data_len":846,"flow_min_l4_data_len":32,"flow_max_l4_data_len":245,"flow_avg_l4_data_len":105,"midstream":1,"l3_proto":"ip4","src_ip":"17.143.160.149","dst_ip":"192.168.1.34","src_port":5223,"dst_port":50407,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":228,"flow_packet_id":6,"flow_first_seen":1431970686843,"flow_last_seen":1431970687201,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51286,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":228,"flow_packet_id":6,"flow_first_seen":1431970686843,"flow_last_seen":1431970687201,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51286,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":154,"flow_packet_id":7,"flow_first_seen":1431970668278,"flow_last_seen":1431970694737,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63342,"dst_port":53,"l4_proto":"udp"}
+0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":257,"flow_packet_id":14,"flow_first_seen":1431970699896,"flow_last_seen":1431970708272,"flow_tot_l4_data_len":658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51311,"dst_port":14506,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":257,"flow_packet_id":14,"flow_first_seen":1431970699896,"flow_last_seen":1431970708272,"flow_tot_l4_data_len":658,"flow_min_l4_data_len":32,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51311,"dst_port":14506,"l4_proto":"tcp"}
+0518{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":260,"flow_packet_id":20,"flow_first_seen":1431970701508,"flow_last_seen":1431970702603,"flow_tot_l4_data_len":1379,"flow_min_l4_data_len":32,"flow_max_l4_data_len":355,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51314,"dst_port":14506,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":260,"flow_packet_id":20,"flow_first_seen":1431970701508,"flow_last_seen":1431970702603,"flow_tot_l4_data_len":1379,"flow_min_l4_data_len":32,"flow_max_l4_data_len":355,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"93.79.224.176","src_port":51314,"dst_port":14506,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":250,"flow_packet_id":10,"flow_first_seen":1431970693196,"flow_last_seen":1431970706224,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51302,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":250,"flow_packet_id":10,"flow_first_seen":1431970693196,"flow_last_seen":1431970706224,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51302,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":238,"flow_packet_id":15,"flow_first_seen":1431970688560,"flow_last_seen":1431970700671,"flow_tot_l4_data_len":716,"flow_min_l4_data_len":20,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51291,"dst_port":17639,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":238,"flow_packet_id":15,"flow_first_seen":1431970688560,"flow_last_seen":1431970700671,"flow_tot_l4_data_len":716,"flow_min_l4_data_len":20,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51291,"dst_port":17639,"l4_proto":"tcp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":241,"flow_packet_id":33,"flow_first_seen":1431970689672,"flow_last_seen":1431970694329,"flow_tot_l4_data_len":3975,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1156,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51294,"dst_port":17639,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":241,"flow_packet_id":33,"flow_first_seen":1431970689672,"flow_last_seen":1431970694329,"flow_tot_l4_data_len":3975,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1156,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"81.83.77.141","src_port":51294,"dst_port":17639,"l4_proto":"tcp"}
+0518{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":246,"flow_packet_id":14,"flow_first_seen":1431970691351,"flow_last_seen":1431970701913,"flow_tot_l4_data_len":674,"flow_min_l4_data_len":32,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51298,"dst_port":38895,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":246,"flow_packet_id":14,"flow_first_seen":1431970691351,"flow_last_seen":1431970701913,"flow_tot_l4_data_len":674,"flow_min_l4_data_len":32,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51298,"dst_port":38895,"l4_proto":"tcp"}
+0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":249,"flow_packet_id":18,"flow_first_seen":1431970692464,"flow_last_seen":1431970694362,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":32,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51301,"dst_port":38895,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":249,"flow_packet_id":18,"flow_first_seen":1431970692464,"flow_last_seen":1431970694362,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":32,"flow_max_l4_data_len":93,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"82.224.110.241","src_port":51301,"dst_port":38895,"l4_proto":"tcp"}
+0444{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":225,"flow_packet_id":4,"flow_first_seen":1431970685839,"flow_last_seen":1431970687668,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","l4_proto":"icmp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":56,"flow_packet_id":2,"flow_first_seen":1431970648979,"flow_last_seen":1431970679027,"flow_tot_l4_data_len":1020,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":54,"flow_packet_id":2,"flow_first_seen":1431970648880,"flow_last_seen":1431970678945,"flow_tot_l4_data_len":1020,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0515{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":120,"flow_packet_id":16,"flow_first_seen":1431970659834,"flow_last_seen":1431970689548,"flow_tot_l4_data_len":747,"flow_min_l4_data_len":20,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51251,"dst_port":40029,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":120,"flow_packet_id":16,"flow_first_seen":1431970659834,"flow_last_seen":1431970689548,"flow_tot_l4_data_len":747,"flow_min_l4_data_len":20,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51251,"dst_port":40029,"l4_proto":"tcp"}
+0515{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":208,"flow_packet_id":15,"flow_first_seen":1431970682971,"flow_last_seen":1431970692227,"flow_tot_l4_data_len":709,"flow_min_l4_data_len":20,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51278,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":208,"flow_packet_id":15,"flow_first_seen":1431970682971,"flow_last_seen":1431970692227,"flow_tot_l4_data_len":709,"flow_min_l4_data_len":20,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51278,"dst_port":40009,"l4_proto":"tcp"}
+0433{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":138,"flow_packet_id":1,"flow_first_seen":1431970664361,"flow_last_seen":1431970664361,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"224.0.0.1","l4_proto":2}
+0435{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":139,"flow_packet_id":1,"flow_first_seen":1431970664698,"flow_last_seen":1431970664698,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.229","dst_ip":"224.0.0.251","l4_proto":2}
+0436{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431970632290,"flow_last_seen":1431970632290,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"224.0.0.22","l4_proto":2}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":15,"flow_packet_id":8,"flow_first_seen":1431970635325,"flow_last_seen":1431970688837,"flow_tot_l4_data_len":304,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63514,"dst_port":53,"l4_proto":"udp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":73,"flow_packet_id":15,"flow_first_seen":1431970651380,"flow_last_seen":1431970670192,"flow_tot_l4_data_len":1023,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51239,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":73,"flow_packet_id":15,"flow_first_seen":1431970651380,"flow_last_seen":1431970670192,"flow_tot_l4_data_len":1023,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51239,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":202,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":153,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":14,"flow_packet_id":7,"flow_first_seen":1431970634731,"flow_last_seen":1431970661287,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":53372,"dst_port":53,"l4_proto":"udp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":72,"flow_packet_id":17,"flow_first_seen":1431970651380,"flow_last_seen":1431970679713,"flow_tot_l4_data_len":1128,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51238,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":72,"flow_packet_id":17,"flow_first_seen":1431970651380,"flow_last_seen":1431970679713,"flow_tot_l4_data_len":1128,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51238,"dst_port":443,"l4_proto":"tcp"}
+0517{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":235,"flow_packet_id":18,"flow_first_seen":1431970687670,"flow_last_seen":1431970703163,"flow_tot_l4_data_len":878,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51290,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":235,"flow_packet_id":18,"flow_first_seen":1431970687670,"flow_last_seen":1431970703163,"flow_tot_l4_data_len":878,"flow_min_l4_data_len":20,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51290,"dst_port":31010,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":80,"flow_packet_id":15,"flow_first_seen":1431970652388,"flow_last_seen":1431970670585,"flow_tot_l4_data_len":1074,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51241,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":80,"flow_packet_id":15,"flow_first_seen":1431970652388,"flow_last_seen":1431970670585,"flow_tot_l4_data_len":1074,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51241,"dst_port":443,"l4_proto":"tcp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":57,"flow_packet_id":2,"flow_first_seen":1431970648982,"flow_last_seen":1431970679028,"flow_tot_l4_data_len":1020,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1431970648880,"flow_last_seen":1431970678946,"flow_tot_l4_data_len":1020,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0520{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":240,"flow_packet_id":20,"flow_first_seen":1431970688782,"flow_last_seen":1431970692885,"flow_tot_l4_data_len":3225,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51293,"dst_port":31010,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":240,"flow_packet_id":20,"flow_first_seen":1431970688782,"flow_last_seen":1431970692885,"flow_tot_l4_data_len":3225,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1056,"flow_avg_l4_data_len":161,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"5.248.186.221","src_port":51293,"dst_port":31010,"l4_proto":"tcp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":157,"flow_packet_id":15,"flow_first_seen":1431970668514,"flow_last_seen":1431970686964,"flow_tot_l4_data_len":1004,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51260,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":157,"flow_packet_id":15,"flow_first_seen":1431970668514,"flow_last_seen":1431970686964,"flow_tot_l4_data_len":1004,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51260,"dst_port":443,"l4_proto":"tcp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":158,"flow_packet_id":15,"flow_first_seen":1431970668515,"flow_last_seen":1431970686367,"flow_tot_l4_data_len":1059,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51261,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":158,"flow_packet_id":15,"flow_first_seen":1431970668515,"flow_last_seen":1431970686367,"flow_tot_l4_data_len":1059,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51261,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":229,"flow_packet_id":5,"flow_first_seen":1431970687261,"flow_last_seen":1431970707409,"flow_tot_l4_data_len":130,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"174.49.171.224","src_port":13021,"dst_port":32011,"l4_proto":"udp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":190,"flow_packet_id":15,"flow_first_seen":1431970677603,"flow_last_seen":1431970694432,"flow_tot_l4_data_len":1010,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51274,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":190,"flow_packet_id":15,"flow_first_seen":1431970677603,"flow_last_seen":1431970694432,"flow_tot_l4_data_len":1010,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51274,"dst_port":443,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":215,"flow_packet_id":15,"flow_first_seen":1431970684583,"flow_last_seen":1431970702158,"flow_tot_l4_data_len":905,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51280,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":215,"flow_packet_id":15,"flow_first_seen":1431970684583,"flow_last_seen":1431970702158,"flow_tot_l4_data_len":905,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51280,"dst_port":443,"l4_proto":"tcp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":216,"flow_packet_id":15,"flow_first_seen":1431970684583,"flow_last_seen":1431970702162,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51281,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":216,"flow_packet_id":15,"flow_first_seen":1431970684583,"flow_last_seen":1431970702162,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51281,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1431970635433,"flow_last_seen":1431970635489,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":63661,"dst_port":53,"l4_proto":"udp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":159,"flow_packet_id":16,"flow_first_seen":1431970668515,"flow_last_seen":1431970693321,"flow_tot_l4_data_len":1087,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51262,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":159,"flow_packet_id":16,"flow_first_seen":1431970668515,"flow_last_seen":1431970693321,"flow_tot_l4_data_len":1087,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51262,"dst_port":443,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":184,"flow_packet_id":15,"flow_first_seen":1431970675578,"flow_last_seen":1431970692134,"flow_tot_l4_data_len":905,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51271,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":184,"flow_packet_id":15,"flow_first_seen":1431970675578,"flow_last_seen":1431970692134,"flow_tot_l4_data_len":905,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51271,"dst_port":443,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":60,"flow_packet_id":16,"flow_first_seen":1431970649777,"flow_last_seen":1431970678255,"flow_tot_l4_data_len":713,"flow_min_l4_data_len":20,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51236,"dst_port":40008,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":60,"flow_packet_id":16,"flow_first_seen":1431970649777,"flow_last_seen":1431970678255,"flow_tot_l4_data_len":713,"flow_min_l4_data_len":20,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.45","src_port":51236,"dst_port":40008,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1431970643669,"flow_last_seen":1431970643669,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":24,"flow_packet_id":8,"flow_first_seen":1431970642412,"flow_last_seen":1431970643680,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":58,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":23,"flow_packet_id":7,"flow_first_seen":1431970642408,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":442,"flow_min_l4_data_len":58,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1431970642417,"flow_last_seen":1431970643676,"flow_tot_l4_data_len":384,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.34","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1431970642414,"flow_last_seen":1431970643673,"flow_tot_l4_data_len":364,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1431970643964,"flow_last_seen":1431970644121,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c62c:3ff:fe06:49fe","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0436{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":173,"flow_packet_id":1,"flow_first_seen":1431970672329,"flow_last_seen":1431970672329,"flow_tot_l4_data_len":8,"flow_min_l4_data_len":8,"flow_max_l4_data_len":8,"flow_avg_l4_data_len":8,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.219","dst_ip":"233.89.188.1","l4_proto":2}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":231,"flow_packet_id":1,"flow_first_seen":1431970687262,"flow_last_seen":1431970687262,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"189.138.161.88","src_port":13021,"dst_port":19521,"l4_proto":"udp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":146,"flow_packet_id":16,"flow_first_seen":1431970666902,"flow_last_seen":1431970694879,"flow_tot_l4_data_len":694,"flow_min_l4_data_len":20,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51256,"dst_port":40013,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":146,"flow_packet_id":16,"flow_first_seen":1431970666902,"flow_last_seen":1431970694879,"flow_tot_l4_data_len":694,"flow_min_l4_data_len":20,"flow_max_l4_data_len":109,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.142","src_port":51256,"dst_port":40013,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":13,"flow_packet_id":7,"flow_first_seen":1431970634730,"flow_last_seen":1431970661287,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57592,"dst_port":53,"l4_proto":"udp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":108,"flow_packet_id":16,"flow_first_seen":1431970657867,"flow_last_seen":1431970685617,"flow_tot_l4_data_len":740,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51248,"dst_port":40030,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":108,"flow_packet_id":16,"flow_first_seen":1431970657867,"flow_last_seen":1431970685617,"flow_tot_l4_data_len":740,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.175","src_port":51248,"dst_port":40030,"l4_proto":"tcp"}
+0533{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":209,"flow_packet_id":199,"flow_first_seen":1431970682971,"flow_last_seen":1431970705724,"flow_tot_l4_data_len":83849,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":421,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51279,"dst_port":40008,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":209,"flow_packet_id":199,"flow_first_seen":1431970682971,"flow_last_seen":1431970705724,"flow_tot_l4_data_len":83849,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":421,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.48","src_port":51279,"dst_port":40008,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":169,"flow_packet_id":14,"flow_first_seen":1431970671951,"flow_last_seen":1431970689889,"flow_tot_l4_data_len":687,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51267,"dst_port":40025,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":169,"flow_packet_id":14,"flow_first_seen":1431970671951,"flow_last_seen":1431970689889,"flow_tot_l4_data_len":687,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.18","src_port":51267,"dst_port":40025,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":236,"flow_packet_id":1,"flow_first_seen":1431970688025,"flow_last_seen":1431970688025,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.14","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":223,"flow_packet_id":2,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":140,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":58061,"dst_port":1900,"l4_proto":"udp"}
+0536{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":126,"flow_packet_id":8,"flow_first_seen":1431970660159,"flow_last_seen":1431970690798,"flow_tot_l4_data_len":2718,"flow_min_l4_data_len":32,"flow_max_l4_data_len":986,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.163.108","dst_ip":"192.168.1.34","src_port":443,"dst_port":51222,"l4_proto":"tcp","ndpi": {"proto":"TLS.Dropbox","category":"Cloud"}}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":126,"flow_packet_id":8,"flow_first_seen":1431970660159,"flow_last_seen":1431970690798,"flow_tot_l4_data_len":2718,"flow_min_l4_data_len":32,"flow_max_l4_data_len":986,"flow_avg_l4_data_len":339,"midstream":1,"l3_proto":"ip4","src_ip":"108.160.163.108","dst_ip":"192.168.1.34","src_port":443,"dst_port":51222,"l4_proto":"tcp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":252,"flow_packet_id":18,"flow_first_seen":1431970695865,"flow_last_seen":1431970707876,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":32,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51305,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":252,"flow_packet_id":18,"flow_first_seen":1431970695865,"flow_last_seen":1431970707876,"flow_tot_l4_data_len":814,"flow_min_l4_data_len":32,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51305,"dst_port":13392,"l4_proto":"tcp"}
+0520{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":254,"flow_packet_id":26,"flow_first_seen":1431970697478,"flow_last_seen":1431970707879,"flow_tot_l4_data_len":16609,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":638,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51307,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":254,"flow_packet_id":26,"flow_first_seen":1431970697478,"flow_last_seen":1431970707879,"flow_tot_l4_data_len":16609,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":638,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51307,"dst_port":13392,"l4_proto":"tcp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":256,"flow_packet_id":15,"flow_first_seen":1431970698661,"flow_last_seen":1431970706984,"flow_tot_l4_data_len":687,"flow_min_l4_data_len":32,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51309,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":256,"flow_packet_id":15,"flow_first_seen":1431970698661,"flow_last_seen":1431970706984,"flow_tot_l4_data_len":687,"flow_min_l4_data_len":32,"flow_max_l4_data_len":107,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51309,"dst_port":13392,"l4_proto":"tcp"}
+0520{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":258,"flow_packet_id":25,"flow_first_seen":1431970700273,"flow_last_seen":1431970706319,"flow_tot_l4_data_len":14786,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":591,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51312,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":258,"flow_packet_id":25,"flow_first_seen":1431970700273,"flow_last_seen":1431970706319,"flow_tot_l4_data_len":14786,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":591,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51312,"dst_port":13392,"l4_proto":"tcp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":262,"flow_packet_id":14,"flow_first_seen":1431970704329,"flow_last_seen":1431970708726,"flow_tot_l4_data_len":700,"flow_min_l4_data_len":32,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51316,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":262,"flow_packet_id":14,"flow_first_seen":1431970704329,"flow_last_seen":1431970708726,"flow_tot_l4_data_len":700,"flow_min_l4_data_len":32,"flow_max_l4_data_len":140,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51316,"dst_port":13392,"l4_proto":"tcp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":263,"flow_packet_id":20,"flow_first_seen":1431970705942,"flow_last_seen":1431970706101,"flow_tot_l4_data_len":5516,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51317,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":263,"flow_packet_id":20,"flow_first_seen":1431970705942,"flow_last_seen":1431970706101,"flow_tot_l4_data_len":5516,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":275,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"149.13.32.15","src_port":51317,"dst_port":13392,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1431970634669,"flow_last_seen":1431970634723,"flow_tot_l4_data_len":199,"flow_min_l4_data_len":67,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":57694,"dst_port":53,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":12,"flow_packet_id":348,"flow_first_seen":1431970634729,"flow_last_seen":1431970685945,"flow_tot_l4_data_len":169855,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":488,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.126.211","src_port":51230,"dst_port":443,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":21,"flow_packet_id":13,"flow_first_seen":1431970636340,"flow_last_seen":1431970655127,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51232,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":21,"flow_packet_id":13,"flow_first_seen":1431970636340,"flow_last_seen":1431970655127,"flow_tot_l4_data_len":715,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51232,"dst_port":443,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":107,"flow_packet_id":14,"flow_first_seen":1431970657448,"flow_last_seen":1431970689704,"flow_tot_l4_data_len":952,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51247,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":107,"flow_packet_id":14,"flow_first_seen":1431970657448,"flow_last_seen":1431970689704,"flow_tot_l4_data_len":952,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51247,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":242,"flow_packet_id":2,"flow_first_seen":1431970690133,"flow_last_seen":1431970690190,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":48,"flow_max_l4_data_len":64,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59788,"dst_port":53,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1431970644120,"flow_last_seen":1431970644120,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":20,"flow_packet_id":7,"flow_first_seen":1431970636301,"flow_last_seen":1431970662705,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":51753,"dst_port":53,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.65","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":166,"flow_packet_id":7,"flow_first_seen":1431970670304,"flow_last_seen":1431970696803,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":55866,"dst_port":53,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":48,"flow_packet_id":36,"flow_first_seen":1431970648367,"flow_last_seen":1431970708411,"flow_tot_l4_data_len":12178,"flow_min_l4_data_len":293,"flow_max_l4_data_len":371,"flow_avg_l4_data_len":338,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.254","dst_ip":"239.255.255.250","src_port":1025,"dst_port":1900,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":135,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.176","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":174,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":1431970672959,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":220,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.155","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.165","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":214,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.170","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":255,"flow_packet_id":6,"flow_first_seen":1431970697522,"flow_last_seen":1431970702574,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51308,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":255,"flow_packet_id":6,"flow_first_seen":1431970697522,"flow_last_seen":1431970702574,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51308,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.173","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":175,"flow_packet_id":1,"flow_first_seen":1431970672959,"flow_last_seen":1431970672959,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.158","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.142","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.145","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":134,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":1431970662914,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.151","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.148","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":141,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":1431970664878,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.149","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":170,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.171","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.154","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":131,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1431970643670,"flow_last_seen":1431970643670,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.92","dst_ip":"192.168.1.255","src_port":53826,"dst_port":137,"l4_proto":"udp"}
+0515{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":59,"flow_packet_id":17,"flow_first_seen":1431970649777,"flow_last_seen":1431970674421,"flow_tot_l4_data_len":763,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51235,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":59,"flow_packet_id":17,"flow_first_seen":1431970649777,"flow_last_seen":1431970674421,"flow_tot_l4_data_len":763,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.45","src_port":51235,"dst_port":40009,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":6,"flow_packet_id":7,"flow_first_seen":1431970634591,"flow_last_seen":1431970661089,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":49864,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1431970634589,"flow_last_seen":1431970661089,"flow_tot_l4_data_len":273,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64240,"dst_port":53,"l4_proto":"udp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":58,"flow_packet_id":18,"flow_first_seen":1431970649777,"flow_last_seen":1431970680320,"flow_tot_l4_data_len":836,"flow_min_l4_data_len":20,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51234,"dst_port":40001,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":58,"flow_packet_id":18,"flow_first_seen":1431970649777,"flow_last_seen":1431970680320,"flow_tot_l4_data_len":836,"flow_min_l4_data_len":20,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.147","src_port":51234,"dst_port":40001,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":155,"flow_packet_id":7,"flow_first_seen":1431970668278,"flow_last_seen":1431970694738,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64258,"dst_port":53,"l4_proto":"udp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":66,"flow_packet_id":17,"flow_first_seen":1431970650785,"flow_last_seen":1431970683130,"flow_tot_l4_data_len":746,"flow_min_l4_data_len":20,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51237,"dst_port":40022,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":66,"flow_packet_id":17,"flow_first_seen":1431970650785,"flow_last_seen":1431970683130,"flow_tot_l4_data_len":746,"flow_min_l4_data_len":20,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.176","src_port":51237,"dst_port":40022,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":145,"flow_packet_id":17,"flow_first_seen":1431970666902,"flow_last_seen":1431970699651,"flow_tot_l4_data_len":738,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51255,"dst_port":40005,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":145,"flow_packet_id":17,"flow_first_seen":1431970666902,"flow_last_seen":1431970699651,"flow_tot_l4_data_len":738,"flow_min_l4_data_len":20,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.142","src_port":51255,"dst_port":40005,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":147,"flow_packet_id":18,"flow_first_seen":1431970666903,"flow_last_seen":1431970694442,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51257,"dst_port":40032,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":147,"flow_packet_id":18,"flow_first_seen":1431970666903,"flow_last_seen":1431970694442,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":20,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.170","src_port":51257,"dst_port":40032,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":206,"flow_packet_id":17,"flow_first_seen":1431970682971,"flow_last_seen":1431970700372,"flow_tot_l4_data_len":751,"flow_min_l4_data_len":20,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51276,"dst_port":40021,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":206,"flow_packet_id":17,"flow_first_seen":1431970682971,"flow_last_seen":1431970700372,"flow_tot_l4_data_len":751,"flow_min_l4_data_len":20,"flow_max_l4_data_len":100,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.146","src_port":51276,"dst_port":40021,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":237,"flow_packet_id":1,"flow_first_seen":1431970688320,"flow_last_seen":1431970688320,"flow_tot_l4_data_len":26,"flow_min_l4_data_len":26,"flow_max_l4_data_len":26,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.141","src_port":13021,"dst_port":443,"l4_proto":"udp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":185,"flow_packet_id":17,"flow_first_seen":1431970675992,"flow_last_seen":1431970693146,"flow_tot_l4_data_len":789,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51272,"dst_port":40029,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":185,"flow_packet_id":17,"flow_first_seen":1431970675992,"flow_last_seen":1431970693146,"flow_tot_l4_data_len":789,"flow_min_l4_data_len":20,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.152","src_port":51272,"dst_port":40029,"l4_proto":"tcp"}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":207,"flow_packet_id":17,"flow_first_seen":1431970682971,"flow_last_seen":1431970695489,"flow_tot_l4_data_len":848,"flow_min_l4_data_len":20,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51277,"dst_port":40026,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":207,"flow_packet_id":17,"flow_first_seen":1431970682971,"flow_last_seen":1431970695489,"flow_tot_l4_data_len":848,"flow_min_l4_data_len":20,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.156","src_port":51277,"dst_port":40026,"l4_proto":"tcp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":224,"flow_packet_id":4,"flow_first_seen":1431970685835,"flow_last_seen":1431970687666,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59052,"dst_port":5351,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":224,"flow_packet_id":4,"flow_first_seen":1431970685835,"flow_last_seen":1431970687666,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":59052,"dst_port":5351,"l4_proto":"udp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":148,"flow_packet_id":19,"flow_first_seen":1431970666903,"flow_last_seen":1431970694687,"flow_tot_l4_data_len":844,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51258,"dst_port":40021,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":148,"flow_packet_id":19,"flow_first_seen":1431970666903,"flow_last_seen":1431970694687,"flow_tot_l4_data_len":844,"flow_min_l4_data_len":20,"flow_max_l4_data_len":128,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.176","src_port":51258,"dst_port":40021,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":198,"flow_packet_id":7,"flow_first_seen":1431970679839,"flow_last_seen":1431970706168,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64364,"dst_port":53,"l4_proto":"udp"}
+0519{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":177,"flow_packet_id":19,"flow_first_seen":1431970673966,"flow_last_seen":1431970700297,"flow_tot_l4_data_len":839,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51269,"dst_port":40029,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":177,"flow_packet_id":19,"flow_first_seen":1431970673966,"flow_last_seen":1431970700297,"flow_tot_l4_data_len":839,"flow_min_l4_data_len":20,"flow_max_l4_data_len":130,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.175","src_port":51269,"dst_port":40029,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":19,"flow_packet_id":7,"flow_first_seen":1431970636300,"flow_last_seen":1431970662705,"flow_tot_l4_data_len":385,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":50055,"dst_port":53,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":181,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.18","src_port":13021,"dst_port":33033,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":171,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.43","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":150,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.19","src_port":13021,"dst_port":40001,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":124,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.165","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.42","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.13","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.33","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":211,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":1431970682972,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.173","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":167,"flow_packet_id":1,"flow_first_seen":1431970670941,"flow_last_seen":1431970670941,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.38","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":149,"flow_packet_id":1,"flow_first_seen":1431970666903,"flow_last_seen":1431970666903,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.149","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":128,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":1431970660848,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.160","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":140,"flow_packet_id":1,"flow_first_seen":1431970664878,"flow_last_seen":1431970664878,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.154","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.44","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":193,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.170","src_port":13021,"dst_port":40021,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.143","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.145","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":205,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":1431970681960,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.40","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":130,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.28","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.15","src_port":13021,"dst_port":40026,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.46","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.27","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.34","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.151","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":142,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.171","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.77.159","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":127,"flow_packet_id":1,"flow_first_seen":1431970660848,"flow_last_seen":1431970660848,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.24","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":118,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"111.221.74.20","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":197,"flow_packet_id":7,"flow_first_seen":1431970679839,"flow_last_seen":1431970706169,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":54,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60413,"dst_port":53,"l4_proto":"udp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":9,"flow_packet_id":16,"flow_first_seen":1431970634728,"flow_last_seen":1431970664345,"flow_tot_l4_data_len":742,"flow_min_l4_data_len":20,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51229,"dst_port":40009,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":9,"flow_packet_id":16,"flow_first_seen":1431970634728,"flow_last_seen":1431970664345,"flow_tot_l4_data_len":742,"flow_min_l4_data_len":20,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.28","src_port":51229,"dst_port":40009,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":96,"flow_packet_id":16,"flow_first_seen":1431970655836,"flow_last_seen":1431970685642,"flow_tot_l4_data_len":721,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51246,"dst_port":40020,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":96,"flow_packet_id":16,"flow_first_seen":1431970655836,"flow_last_seen":1431970685642,"flow_tot_l4_data_len":721,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.56.52.44","src_port":51246,"dst_port":40020,"l4_proto":"tcp"}
+0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":251,"flow_packet_id":7,"flow_first_seen":1431970694308,"flow_last_seen":1431970701362,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51303,"dst_port":62381,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":251,"flow_packet_id":7,"flow_first_seen":1431970694308,"flow_last_seen":1431970701362,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51303,"dst_port":62381,"l4_proto":"tcp"}
+0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":253,"flow_packet_id":6,"flow_first_seen":1431970695909,"flow_last_seen":1431970700948,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51306,"dst_port":62381,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":253,"flow_packet_id":6,"flow_first_seen":1431970695909,"flow_last_seen":1431970700948,"flow_tot_l4_data_len":264,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"80.121.84.93","src_port":51306,"dst_port":62381,"l4_proto":"tcp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":22,"flow_packet_id":76,"flow_first_seen":1431970637197,"flow_last_seen":1431970705557,"flow_tot_l4_data_len":16919,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":51227,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0481{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":22,"flow_packet_id":76,"flow_first_seen":1431970637197,"flow_last_seen":1431970705557,"flow_tot_l4_data_len":16919,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":222,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"17.172.100.36","src_port":51227,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":4,"flow_packet_id":8,"flow_first_seen":1431970634432,"flow_last_seen":1431970687929,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":58631,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":3,"flow_packet_id":8,"flow_first_seen":1431970634431,"flow_last_seen":1431970687929,"flow_tot_l4_data_len":376,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":60688,"dst_port":53,"l4_proto":"udp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":129,"flow_packet_id":14,"flow_first_seen":1431970661447,"flow_last_seen":1431970679053,"flow_tot_l4_data_len":956,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51253,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":129,"flow_packet_id":14,"flow_first_seen":1431970661447,"flow_last_seen":1431970679053,"flow_tot_l4_data_len":956,"flow_min_l4_data_len":20,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.166","src_port":51253,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":217,"flow_packet_id":13,"flow_first_seen":1431970684583,"flow_last_seen":1431970693811,"flow_tot_l4_data_len":815,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51282,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":217,"flow_packet_id":13,"flow_first_seen":1431970684583,"flow_last_seen":1431970693811,"flow_tot_l4_data_len":815,"flow_min_l4_data_len":20,"flow_max_l4_data_len":111,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"64.4.23.159","src_port":51282,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.33","src_port":13021,"dst_port":40002,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":182,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.43","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.22","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.13","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.28","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.44","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.32","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":172,"flow_packet_id":1,"flow_first_seen":1431970671951,"flow_last_seen":1431970671951,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.20","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":162,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.42","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":187,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.18","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.17","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":194,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.24","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.27","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":203,"flow_packet_id":1,"flow_first_seen":1431970681005,"flow_last_seen":1431970681005,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.15","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":196,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"65.55.223.16","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":259,"flow_packet_id":14,"flow_first_seen":1431970701461,"flow_last_seen":1431970708429,"flow_tot_l4_data_len":666,"flow_min_l4_data_len":32,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51313,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":259,"flow_packet_id":14,"flow_first_seen":1431970701461,"flow_last_seen":1431970708429,"flow_tot_l4_data_len":666,"flow_min_l4_data_len":32,"flow_max_l4_data_len":113,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51313,"dst_port":13392,"l4_proto":"tcp"}
+0520{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":261,"flow_packet_id":23,"flow_first_seen":1431970703073,"flow_last_seen":1431970706415,"flow_tot_l4_data_len":11502,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":500,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51315,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":261,"flow_packet_id":23,"flow_first_seen":1431970703073,"flow_last_seen":1431970706415,"flow_tot_l4_data_len":11502,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":500,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51315,"dst_port":13392,"l4_proto":"tcp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":264,"flow_packet_id":10,"flow_first_seen":1431970707102,"flow_last_seen":1431970708204,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":32,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51318,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":264,"flow_packet_id":10,"flow_first_seen":1431970707102,"flow_last_seen":1431970708204,"flow_tot_l4_data_len":517,"flow_min_l4_data_len":32,"flow_max_l4_data_len":112,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51318,"dst_port":13392,"l4_proto":"tcp"}
+0513{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431970708715,"flow_last_seen":1431970708715,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51319,"dst_port":13392,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":266,"flow_packet_id":1,"flow_first_seen":1431970708715,"flow_last_seen":1431970708715,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"212.161.8.36","src_port":51319,"dst_port":13392,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":10,"flow_packet_id":7,"flow_first_seen":1431970634728,"flow_last_seen":1431970661287,"flow_tot_l4_data_len":301,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":62875,"dst_port":53,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":179,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.173","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":210,"flow_packet_id":1,"flow_first_seen":1431970682972,"flow_last_seen":1431970682972,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.175","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":178,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.171","src_port":13021,"dst_port":40006,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":222,"flow_packet_id":2,"flow_first_seen":1431970685835,"flow_last_seen":1431970685835,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":140,"flow_max_l4_data_len":141,"flow_avg_l4_data_len":140,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"239.255.255.250","src_port":59237,"dst_port":1900,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":2,"flow_packet_id":7,"flow_first_seen":1431970634276,"flow_last_seen":1431970660781,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"192.168.1.1","src_port":64971,"dst_port":53,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.150","src_port":13021,"dst_port":40007,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1431970657867,"flow_last_seen":1431970657867,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.160","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1431970648822,"flow_last_seen":1431970648822,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.145","src_port":13021,"dst_port":40008,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":151,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.140","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.149","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.171","src_port":13021,"dst_port":40012,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":219,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.157","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1431970655837,"flow_last_seen":1431970655837,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.142","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.154","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":186,"flow_packet_id":1,"flow_first_seen":1431970675992,"flow_last_seen":1431970675992,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.147","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":183,"flow_packet_id":1,"flow_first_seen":1431970674981,"flow_last_seen":1431970674981,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.150","src_port":13021,"dst_port":40014,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":160,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.166","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1431970644777,"flow_last_seen":1431970644777,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.170","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":192,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.159","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":121,"flow_packet_id":1,"flow_first_seen":1431970659834,"flow_last_seen":1431970659834,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.144","src_port":13021,"dst_port":40016,"l4_proto":"udp"}
+0516{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":233,"flow_packet_id":15,"flow_first_seen":1431970687670,"flow_last_seen":1431970700698,"flow_tot_l4_data_len":748,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51288,"dst_port":20274,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":233,"flow_packet_id":15,"flow_first_seen":1431970687670,"flow_last_seen":1431970700698,"flow_tot_l4_data_len":748,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51288,"dst_port":20274,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":191,"flow_packet_id":1,"flow_first_seen":1431970677974,"flow_last_seen":1431970677974,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.170","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":180,"flow_packet_id":1,"flow_first_seen":1431970673970,"flow_last_seen":1431970673970,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":136,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.148","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1431970655836,"flow_last_seen":1431970655836,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.156","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1431970652859,"flow_last_seen":1431970652859,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.174","src_port":13021,"dst_port":40019,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.172","src_port":13021,"dst_port":40020,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":188,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":1431970676959,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.160","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":132,"flow_packet_id":1,"flow_first_seen":1431970661855,"flow_last_seen":1431970661855,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.152","src_port":13021,"dst_port":40022,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":212,"flow_packet_id":1,"flow_first_seen":1431970683987,"flow_last_seen":1431970683987,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.175","src_port":13021,"dst_port":40023,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.167","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.168","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":195,"flow_packet_id":1,"flow_first_seen":1431970678985,"flow_last_seen":1431970678985,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.158","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":137,"flow_packet_id":1,"flow_first_seen":1431970663923,"flow_last_seen":1431970663923,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.155","src_port":13021,"dst_port":40027,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1431970645790,"flow_last_seen":1431970645790,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.165","src_port":13021,"dst_port":40028,"l4_proto":"udp"}
+0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":248,"flow_packet_id":3,"flow_first_seen":1431970691783,"flow_last_seen":1431970692055,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51300,"dst_port":20274,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":248,"flow_packet_id":3,"flow_first_seen":1431970691783,"flow_last_seen":1431970692055,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"76.167.161.6","src_port":51300,"dst_port":20274,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.167","src_port":13021,"dst_port":40029,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":189,"flow_packet_id":1,"flow_first_seen":1431970676959,"flow_last_seen":1431970676959,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.146","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1431970646799,"flow_last_seen":1431970646799,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.143","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":152,"flow_packet_id":1,"flow_first_seen":1431970667913,"flow_last_seen":1431970667913,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.167","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":143,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":33,"flow_min_l4_data_len":33,"flow_max_l4_data_len":33,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.56.161","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.176","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":123,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.144","src_port":13021,"dst_port":40032,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":144,"flow_packet_id":1,"flow_first_seen":1431970665893,"flow_last_seen":1431970665893,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.148","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":125,"flow_packet_id":1,"flow_first_seen":1431970659835,"flow_last_seen":1431970659835,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.130.146","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1431970653869,"flow_last_seen":1431970653869,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"157.55.235.162","src_port":13021,"dst_port":40033,"l4_proto":"udp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":226,"flow_packet_id":6,"flow_first_seen":1431970685852,"flow_last_seen":1431970686318,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":20,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51284,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":226,"flow_packet_id":6,"flow_first_seen":1431970685852,"flow_last_seen":1431970686318,"flow_tot_l4_data_len":207,"flow_min_l4_data_len":20,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51284,"dst_port":12350,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":227,"flow_packet_id":6,"flow_first_seen":1431970686319,"flow_last_seen":1431970686843,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51285,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":227,"flow_packet_id":6,"flow_first_seen":1431970686319,"flow_last_seen":1431970686843,"flow_tot_l4_data_len":161,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.218.125","src_port":51285,"dst_port":12350,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":244,"flow_packet_id":6,"flow_first_seen":1431970690890,"flow_last_seen":1431970691584,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51296,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":244,"flow_packet_id":6,"flow_first_seen":1431970690890,"flow_last_seen":1431970691584,"flow_tot_l4_data_len":263,"flow_min_l4_data_len":20,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51296,"dst_port":12350,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":245,"flow_packet_id":15,"flow_first_seen":1431970690890,"flow_last_seen":1431970705762,"flow_tot_l4_data_len":3022,"flow_min_l4_data_len":32,"flow_max_l4_data_len":367,"flow_avg_l4_data_len":201,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.24","src_port":51297,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":245,"flow_packet_id":15,"flow_first_seen":1431970690890,"flow_last_seen":1431970705762,"flow_tot_l4_data_len":3022,"flow_min_l4_data_len":32,"flow_max_l4_data_len":367,"flow_avg_l4_data_len":201,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.24","src_port":51297,"dst_port":12350,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":247,"flow_packet_id":11,"flow_first_seen":1431970691584,"flow_last_seen":1431970703178,"flow_tot_l4_data_len":266,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51299,"dst_port":12350,"l4_proto":"tcp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":247,"flow_packet_id":11,"flow_first_seen":1431970691584,"flow_last_seen":1431970703178,"flow_tot_l4_data_len":266,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":24,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"91.190.216.125","src_port":51299,"dst_port":12350,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1431970649777,"flow_last_seen":1431970649777,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.140","src_port":13021,"dst_port":40003,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1431970654821,"flow_last_seen":1431970654821,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.165","src_port":13021,"dst_port":40004,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":204,"flow_packet_id":1,"flow_first_seen":1431970681960,"flow_last_seen":1431970681960,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.144","src_port":13021,"dst_port":40009,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":133,"flow_packet_id":1,"flow_first_seen":1431970662914,"flow_last_seen":1431970662914,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.172","src_port":13021,"dst_port":40011,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1431970647810,"flow_last_seen":1431970647810,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.173","src_port":13021,"dst_port":40013,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":221,"flow_packet_id":1,"flow_first_seen":1431970684997,"flow_last_seen":1431970684997,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.141","src_port":13021,"dst_port":40015,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1431970650786,"flow_last_seen":1431970650786,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.154","src_port":13021,"dst_port":40017,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1431970658879,"flow_last_seen":1431970658879,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.143","src_port":13021,"dst_port":40018,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":161,"flow_packet_id":1,"flow_first_seen":1431970668973,"flow_last_seen":1431970668973,"flow_tot_l4_data_len":30,"flow_min_l4_data_len":30,"flow_max_l4_data_len":30,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.145","src_port":13021,"dst_port":40024,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.174","src_port":13021,"dst_port":40025,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":199,"flow_packet_id":1,"flow_first_seen":1431970679995,"flow_last_seen":1431970679995,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.149","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":163,"flow_packet_id":1,"flow_first_seen":1431970669927,"flow_last_seen":1431970669927,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.146","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1431970651850,"flow_last_seen":1431970651850,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.160","src_port":13021,"dst_port":40030,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1431970656861,"flow_last_seen":1431970656861,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.34","dst_ip":"213.199.179.156","src_port":13021,"dst_port":40031,"l4_proto":"udp"}
+0155{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_no_unknown.pcap"}
diff --git a/tests/result/nDPId_skype_udp.pcap.txt b/tests/result/nDPId_skype_udp.pcap.txt
new file mode 100644
index 000000000..9cee107eb
--- /dev/null
+++ b/tests/result/nDPId_skype_udp.pcap.txt
@@ -0,0 +1,11 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1156534494734,"flow_last_seen":1156534494734,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp"}
+0409{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","pkt_oversize":false,"pkt_ts":1156534494,"pkt_len":73,"pkt":"ABbjGScVAAR2lnvaCABFAAA7AABAAEARoZLAqAECGOC+lYyWmV4AJ5lYFpcCrtEAh3kuASsbNLlPtKfPLsSj70vZ59IfZD23vQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","pkt_oversize":false,"pkt_ts":1156534496,"pkt_len":73,"pkt":"ABbjGScVAAR2lnvaCABFAAA7AABAAEARoZLAqAECGOC+lYyWmV4AJ5lYFpcCqvCj5HkuAStybQoRs8uOXAH\/9ayvdzDWsfxVrg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1156534494734,"flow_last_seen":1156534496782,"flow_tot_l4_data_len":78,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp","ndpi": {"proto":"Skype"}}
+0410{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","pkt_oversize":false,"pkt_ts":1156534500,"pkt_len":73,"pkt":"ABbjGScVAAR2lnvaCABFAAA7AABAAEARoZLAqAECGOC+lYyWmV4AJ5lYFpcCvuoUBXkuASuSYOIkRaPfGbxEfOnC\/51D4o9Ncw==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1156534494734,"flow_last_seen":1156534500825,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp","ndpi": {"proto":"Skype","category":"VoIP"}}
+0391{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","pkt_oversize":false,"pkt_ts":1156534567,"pkt_len":60,"pkt":"ABbjGScVAAR2lnvaCABFAAAuAABAAEARoZ\/AqAECGOC+lYyWmV4AGplLsGsC8X+1b++522uzltBGo\/MQ","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","pkt_oversize":false,"pkt_ts":1156534567,"pkt_len":60,"pkt":"AAR2lnvaABbjGScVCABFAAAuy+IAAGUR8LwY4L6VwKgBAplejJYAGg6E4FcCztAyD8zMjQ7u\/eBiRTNa","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1156534494734,"flow_last_seen":1156534567244,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":26,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.2","dst_ip":"24.224.190.149","src_port":35990,"dst_port":39262,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/skype_udp.pcap"}
diff --git a/tests/result/nDPId_smb_deletefile.pcap.txt b/tests/result/nDPId_smb_deletefile.pcap.txt
new file mode 100644
index 000000000..9d12b57f5
--- /dev/null
+++ b/tests/result/nDPId_smb_deletefile.pcap.txt
@@ -0,0 +1,20 @@
+0366{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1584368315417,"flow_last_seen":1584368315417,"flow_tot_l4_data_len":400,"flow_min_l4_data_len":400,"flow_max_l4_data_len":400,"flow_avg_l4_data_len":400,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.118","dst_ip":"192.168.1.187","src_port":56848,"dst_port":445,"l4_proto":"tcp"}
+0944{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368315,"pkt_len":434,"pkt":"2MuK4S0uKDc3AG3ICABFAAGkAABAAEAGtNLAqAF2wKgBu94QAb3ooAVq8kMyI1AYqgDfmAAAAAABeP5TTUJAAAEAAAAAAAUAAAEAAAAAmAAAAJwPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAA5AAAAAgAAAAAAAAAAAAAAAAAAAAAAAACBABAAEAAAAAcAAAABAAAAAQAAAHgAHAAAAAAAAAAAAEwAdQBjAGEAXABEAG8AdwBuAGwAbwBhAGQAcwAAAAAA\/lNNQkAAAQAAAAAADgAAAQQAAACIAAAAnQ8AAAAAAAD\/\/gAAEQAAAB0AAAAAKAAAAAAAAAAAAAAAAAAAAAAAACEAJQMAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/2AAJgAAAAEAaQBuAG4AbwBzAGUAdAB1AHAALQA1AC4ANgAuADEALgBlAHgAZQAAAP5TTUJAAAEAAAAAAAYAAAEEAAAAAAAAAJ4PAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAYAAAAAAAAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":434,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1584368315417,"flow_last_seen":1584368315417,"flow_tot_l4_data_len":400,"flow_min_l4_data_len":400,"flow_max_l4_data_len":400,"flow_avg_l4_data_len":400,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.118","dst_ip":"192.168.1.187","src_port":56848,"dst_port":445,"l4_proto":"tcp","ndpi": {"proto":"NetBIOS.SMBv23","category":"System"}}
+1064{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368315,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368315,"pkt_len":54,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAbm8kM0F1AQqfyLpgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0868{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":378,"pkt":"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","pkt_caplen":378,"pkt_type":2048,"pkt_ipoffset":14}
+1019{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":522,"pkt":"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","pkt_caplen":522,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":54,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAgq8kM161AQqfyIjgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0894{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":394,"pkt":"2MuK4S0uKDc3AG3ICABFAAF8AABAAEAGtPrAqAF2wKgBu94QAb3ooAgq8kM161AYqgDtZwAAAAABUP5TTUJAAAEAAAAAAAUAAAEAAAAAgAAAAKIPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAA5AAAAAgAAAAAAAAAAAAAAAAAAAAAAAACBABAAEAAAAAcAAAABAAAAAQAAAHgACAAAAAAAAAAAAEwAdQBjAGEA\/lNNQkAAAQAAAAAADgAAAQQAAAB4AAAAow8AAAAAAAD\/\/gAAEQAAAB0AAAAAKAAAAAAAAAAAAAAAAAAAAAAAACEAJQMAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/2AAEgAAAAEARABvAHcAbgBsAG8AYQBkAHMAAAAAAAAA\/lNNQkAAAQAAAAAABgAAAQQAAAAAAAAApA8AAAAAAAD\/\/gAAEQAAAB0AAAAAKAAAAAAAAAAAAAAAAAAAAAAAABgAAAAAAAAA\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/w==","pkt_caplen":394,"pkt_type":2048,"pkt_ipoffset":14}
+1042{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":538,"pkt":"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","pkt_caplen":538,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":54,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAl+8kM3z1AQqfyFVgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0991{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":466,"pkt":"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","pkt_caplen":466,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":180,"pkt":"KDc3AG3I2MuK4S0uCABFAACmOLNAAIAGPR3AqAG7wKgBdgG93hDyQzfP6KALGlAYEAQu2wAAAAAAev5TTUJAAAEAAAAAAA8AAAADAAAAAAAAAAAPAAAAAAAADQAAAwAAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAJAEgAMgAAAAAAAAACAAAAJgAAAGkAbgBuAG8AcwBlAHQAdQBwAC0ANQAuADYALgAxAC4AZQB4AGUA","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":54,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAsa8kM4TVAQqf+DOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1072{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":554,"pkt":"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","pkt_caplen":554,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":54,"pkt":"2MuK4S0uKDc3AG3ICABFAAAoAABAAEAGtk7AqAF2wKgBu94QAb3ooAsa8kM6QVAQqfyBSAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","pkt_oversize":false,"pkt_ts":1584368317,"pkt_len":158,"pkt":"2MuK4S0uKDc3AG3ICABFAACQAABAAEAGtebAqAF2wKgBu94QAb3ooAsa8kM6QVAYqgANAgAAAAAAZP5TTUJAAAEAAAAAABIAAAEAAAAAAAAAAKgPAAAAAAAA\/\/4AABEAAAAdAAAAACgAAAAAAAAAAAAAAAAAAAAAAAAkAAAAAAAAAM216xScgEmJp3LvkTALdLsAAAAAAAAAAAAAAAA=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap","flow_id":0,"flow_packet_id":101,"flow_first_seen":1584368315417,"flow_last_seen":1584368317802,"flow_tot_l4_data_len":27272,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":270,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.118","dst_ip":"192.168.1.187","src_port":56848,"dst_port":445,"l4_proto":"tcp"}
+0152{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smb_deletefile.pcap"}
diff --git a/tests/result/nDPId_smbv1.pcap.txt b/tests/result/nDPId_smbv1.pcap.txt
new file mode 100644
index 000000000..3ae9c87b2
--- /dev/null
+++ b/tests/result/nDPId_smbv1.pcap.txt
@@ -0,0 +1,12 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1492191036092,"flow_last_seen":1492191036092,"flow_tot_l4_data_len":157,"flow_min_l4_data_len":157,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":157,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.156.130","dst_ip":"10.128.0.243","src_port":50927,"dst_port":445,"l4_proto":"tcp"}
+0565{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":191,"pkt":"AFBW6AqxAAwpAu9qCABFAACxF9IAAIAGzm+sEJyCCoAA88bvAb3S22hjm3waG1AY+vCemgAAAAAAhf9TTUJyAAAAABhTwAAAAAAAAAAAAAAAAAAA\/\/4AAEAAAGIAAlBDIE5FVFdPUksgUFJPR1JBTSAxLjAAAkxBTk1BTjEuMAACV2luZG93cyBmb3IgV29ya2dyb3VwcyAzLjFhAAJMTTEuMlgwMDIAAkxBTk1BTjIuMQACTlQgTE0gMC4xMgA=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":171,"pkt":"AAwpAu9qAFBW6AqxCABFAACdcSEAAIAGdTQKgADzrBCcggG9xu+bfBob0tto7FAY+vCpnwAAAAAAcf9TTUJyAAAAAJhTwAAAAAAAAAAAAAAAAAAA\/\/4AAEAAEQUAAzIAAQAEEQAAAAABAAAAAAD84wEAQPSc00S10gHwAAgsAAirHC\/h7OapVwBPAFIASwBHAFIATwBVAFAAAABKAE8ASABOAC0AUABDAAAA","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":194,"pkt":"AFBW6AqxAAwpAu9qCABFAAC0F9MAAIAGzmusEJyCCoAA88bvAb3S22jsm3wakFAY+ns\/iQAAAAAAiP9TTUJzAAAAABgHwAAAAAAAAAAAAAAAAAAA\/\/4AAEAADf8AiAAEEQoAAAAAAAAAAQAAAAAAAADUAAAASwAAAAAAAFcAaQBuAGQAbwB3AHMAIAAyADAAMAAwACAAMgAxADkANQAAAFcAaQBuAGQAbwB3AHMAIAAyADAAMAAwACAANQAuADAAAAA=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1492191036092,"flow_last_seen":1492191036120,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":137,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":151,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.156.130","dst_ip":"10.128.0.243","src_port":50927,"dst_port":445,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","20":"SMB Insecure Version","22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0635{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":243,"pkt":"AAwpAu9qAFBW6AqxCABFAADlcSMAAIAGdOoKgADzrBCcggG9xu+bfBqQ0ttpeFAY+vD0\/QAAAAAAuf9TTUJzAAAAAJgHwAAAAAAAAAAAAAAAAAAA\/\/4ACEAAA\/8AuQAAAJAAAFcAaQBuAGQAbwB3AHMAIAA3ACAAVQBsAHQAaQBtAGEAdABlACAANwA2ADAAMQAgAFMAZQByAHYAaQBjAGUAIABQAGEAYwBrACAAMQAAAFcAaQBuAGQAbwB3AHMAIAA3ACAAVQBsAHQAaQBtAGEAdABlACAANgAuADEAAABXAE8AUgBLAEcAUgBPAFUAUAAA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":148,"pkt":"AFBW6AqxAAwpAu9qCABFAACGF9QAAIAGzpisEJyCCoAA88bvAb3S22l4m3wbTVAY+b51+wAAAAAAWv9TTUJ1AAAAABgHwAAAAAAAAAAAAAAAAAAA\/\/4ACEAABP8AWgAIAAEALwAAXABcADEAMAAuADEAMgA4AC4AMAAuADIANAAzAFwASQBQAEMAJAAAAD8\/Pz8\/AA==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":114,"pkt":"AAwpAu9qAFBW6AqxCABFAABkcSUAAIAGdWkKgADzrBCcggG9xu+bfBtN0ttp1lAY+vBBMgAAAAAAOP9TTUJ1AAAAAJgHwAAAAAAAAAAAAAAAAAAI\/\/4ACEAAB\/8AOAABAP\/\/HwD\/\/x8ABwBJUEMAAAAA","pkt_caplen":114,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","pkt_oversize":false,"pkt_ts":1492191036,"pkt_len":136,"pkt":"AFBW6AqxAAwpAu9qCABFAAB6F9UAAIAGzqOsEJyCCoAA88bvAb3S22nWm3wbiVAY+YJgRQAAAAAATv9TTUIyAAAAABgHwAAAAAAAAAAAAAAAAAAI\/\/4ACEEADwwAAAABAAAAAAAAAMxs6wAAAAwAQgAAAE4AAQAOAA0AAAAAAAAAAAAAAAAAAA==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1492191036092,"flow_last_seen":1492191036191,"flow_tot_l4_data_len":959,"flow_min_l4_data_len":80,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":137,"midstream":1,"l3_proto":"ip4","src_ip":"172.16.156.130","dst_ip":"10.128.0.243","src_port":50927,"dst_port":445,"l4_proto":"tcp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smbv1.pcap"}
diff --git a/tests/result/nDPId_smpp_in_general.pcap.txt b/tests/result/nDPId_smpp_in_general.pcap.txt
new file mode 100644
index 000000000..e64ec8d1d
--- /dev/null
+++ b/tests/result/nDPId_smpp_in_general.pcap.txt
@@ -0,0 +1,20 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1217149853878,"flow_last_seen":1217149853878,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"10.226.202.118","dst_ip":"10.226.202.53","src_port":1770,"dst_port":9000,"l4_proto":"tcp"}
+0401{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149853,"pkt_len":62,"pkt":"AAKlxo7UABbU5r3hCABFAAAwUN5AAIAG\/3kK4sp2CuLKNQbqIyjmvft6AAAAAHACf\/9NLQAAAgQE7AEBBAI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149853,"pkt_len":60,"pkt":"ABbU5r3hAAKlxo7UCABFAAAsMy0AADwGoS8K4so1CuLKdiMoBuqoDP5A5r37e2AS8ABLDAAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149853,"pkt_len":54,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUN9AAIAG\/4AK4sp2CuLKNQbqIyjmvft7qAz+QVAQhOTN5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149853,"pkt_len":94,"pkt":"AAKlxo7UABbU5r3hCABFAABQUOBAAIAG\/1cK4sp2CuLKNQbqIyjmvft7qAz+QVAYhOQscgAAAAAAKAAAAAIAAAAAAAAAAWFiaGlrAHBhc3N3b3JkAFNNUFAAAQAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1217149853878,"flow_last_seen":1217149853879,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":20,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"10.226.202.118","dst_ip":"10.226.202.53","src_port":1770,"dst_port":9000,"l4_proto":"tcp","ndpi": {"proto":"SMPP","category":"Download-FileTransfer-FileSharing"}}
+0415{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149853,"pkt_len":75,"pkt":"ABbU5r3hAAKlxo7UCABFAAA9My4AADwGoR0K4so1CuLKdiMoBuqoDP5B5r37o1AY8AA72wAAAAAAFYAAAAIAAAAAAAAAAVNNU0MA","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149853,"pkt_len":54,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUOFAAIAG\/34K4sp2CuLKNQbqIyjmvfujqAz+VlAQhM\/NvQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149882,"pkt_len":70,"pkt":"AAKlxo7UABbU5r3hCABFAAA4UPFAAIAG\/14K4sp2CuLKNQbqIyjmvfujqAz+VlAYhM\/NfgAAAAAAEAAAABUAAAAAAAAAAg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149882,"pkt_len":70,"pkt":"ABbU5r3hAAKlxo7UCABFAAA4M3oAADwGoNYK4so1CuLKdiMoBuqoDP5W5r37s1AY8ADiPAAAAAAAEIAAABUAAAAAAAAAAg==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149882,"pkt_len":104,"pkt":"AAKlxo7UABbU5r3hCABFAABaUPJAAIAG\/zsK4sp2CuLKNQbqIyjmvfuzqAz+ZlAYhL+t8AAAAAAAMgAAAAQAAAAAAAAAAwAAATEwMAABATEyMzQ1Njc4OTAAAAAAAAAAAAAABHRlc3Q=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149882,"pkt_len":79,"pkt":"ABbU5r3hAAKlxo7UCABFAABBM3sAADwGoMwK4so1CuLKdiMoBuqoDP5m5r375VAY8ACv8AAAAAAAGYAAAAQAAAAAAAAAAzQ3YzhjNzdhAA==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149882,"pkt_len":54,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUPNAAIAG\/2wK4sp2CuLKNQbqIyjmvfvlqAz+f1AQhKbNewAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149884,"pkt_len":70,"pkt":"AAKlxo7UABbU5r3hCABFAAA4UPRAAIAG\/1sK4sp2CuLKNQbqIyjmvfvlqAz+f1AYhKbNSQAAAAAAEAAAAAYAAAAAAAAABA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149884,"pkt_len":70,"pkt":"ABbU5r3hAAKlxo7UCABFAAA4M4EAADwGoM8K4so1CuLKdiMoBuqoDP5\/5r379VAY8ADh3gAAAAAAEIAAAAYAAAAAAAAABA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149884,"pkt_len":54,"pkt":"AAKlxo7UABbU5r3hCABFAAAoUPVAAIAG\/2oK4sp2CuLKNQbqIyjmvfv1qAz+j1ARhJbNagAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","pkt_oversize":false,"pkt_ts":1217149884,"pkt_len":60,"pkt":"ABbU5r3hAAKlxo7UCABFAAAoM4IAADwGoN4K4so1CuLKdiMoBuqoDP6P5r379lAQ8ABiAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap","flow_id":0,"flow_packet_id":17,"flow_first_seen":1217149853878,"flow_last_seen":1217149884833,"flow_tot_l4_data_len":552,"flow_min_l4_data_len":20,"flow_max_l4_data_len":70,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"10.226.202.118","dst_ip":"10.226.202.53","src_port":1770,"dst_port":9000,"l4_proto":"tcp"}
+0152{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/smpp_in_general.pcap"}
diff --git a/tests/result/nDPId_snapchat.pcap.txt b/tests/result/nDPId_snapchat.pcap.txt
new file mode 100644
index 000000000..f6dd3bc04
--- /dev/null
+++ b/tests/result/nDPId_snapchat.pcap.txt
@@ -0,0 +1,59 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1431417993318,"flow_last_seen":1431417993318,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8f1tAAEAG3k0KCAABSn2IjYHRAbtgYhiTAAAAAKAC\/\/8GegAAAgQFtAQCCAoAKmfIAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAalAABAGjBRKfYiNCggAAQG7gdGfnedsYGIYlFAS\/\/9PMgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAof1xAAEAG3mAKCAABSn2IjYHRAbtgYhiUn53nbVAQ\/\/9PMwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0690{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":280,"pkt":"ABoRAAACABoRAAABCABFAAEKf11AAEAG3X0KCAABSn2IjYHRAbtgYhiUn53nbVAY\/\/9LawAAFgMBAN0BAADZAwNQUkrj\/NwhWGN+74t6DO1OzXkqPZ7NjCRqFpHWgKKF7SB5P2Jy9UHDO3+nUN7rdggpnyyuKLgakXSnjHmueU\/o1AAswCvALMAvwDAAngCfwAnACsATwBQAMwA5ADIAOMAHwBEAnACdAC8ANQAFAP8BAABkAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAw==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1431417993318,"flow_last_seen":1431417993373,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":20,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAa5AABAGjA9KfYiNCggAAQG7gdGfnedtYGIZdlAQ\/\/9OUQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":191,"pkt":"ABoRAAACABoRAAABCABFAACxAa9AABAGi4VKfYiNCggAAQG7gdGfnedtYGIZdlAY\/\/8EngAAFgMDAFECAABNAwNVUbSJQinlln\/8edE+8CspXRzVGNkcjqtzNcG7sXtSrCB5P2Jy9UHDO3+nUN7rdggpnyyuKLgakXSnjHmueU\/o1MAvAAAF\/wEAAQAUAwMAAQEWAwMAKAAAAAAAAAAAf2zZevNRbfwJe\/A1K5Q+MDebGGO+Uf8ZeAUlLlz2nCI=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0828{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1431417993318,"flow_last_seen":1431417993476,"flow_tot_l4_data_len":503,"flow_min_l4_data_len":20,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","24":"SNI TLS extension was missing"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"36e9ceaa96dd810482573844f78a063f","ja3s":"fbe78c619e7ea20046131294ad087f05","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+0382{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAof15AAEAG3l4KCAABSn2IjYHRAbtgYhl2n53n9lAQ\/\/9NyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":105,"pkt":"ABoRAAACABoRAAABCABFAABbf19AAEAG3ioKCAABSn2IjYHRAbtgYhl2n53n9lAY\/\/\/n2gAAFAMDAAEBFgMDAChjpkAEFO1Imock9wPzUl61uVUbhQtDgFJLyjkYPfyHn3wBcQOiHJ+Z","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbNAABAGjApKfYiNCggAAQG7gdGfnef2YGIZqVAQ\/\/9NlQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":235,"pkt":"ABoRAAACABoRAAABCABFAADdf2BAAEAG3acKCAABSn2IjYHRAbtgYhmpn53n9lAY\/\/8m\/wAAFwMDALBjpkAEFO1Im7ts7r9vIMM5uHkPA\/yBTyfRRzAGAH5A+yTbBmvQrg4bMm38fceyN4A3oL7ebB2KJZ\/\/+0N4q0T27fvdooYsha8TnDhL0Hp\/8Cykk7hvPnTbb1F\/VzChhtgIxWxY+\/kb1lZZ72J\/OFY7Gy6eGp211rWHidq+f6syv1L9octxVv3M0YMqviBQw6+lIPlRQ1aT6Fa6mpsOiZVclxU2AQ+r8nYUsE97cyWFTg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbRAABAGjAlKfYiNCggAAQG7gdGfnef2YGIaXlAQ\/\/9M4AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1109{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbVAABAGjAhKfYiNCggAAQG7gdGfnef2YGIcdlAQ\/\/9KyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":325,"pkt":"ABoRAAACABoRAAABCABFAAE3f2JAAEAG3UsKCAABSn2IjYHRAbtgYhx2n53n9lAY\/\/\/YKQAAVnC0jR2z5CJlKZ8fFFQ8iRLZP172ZMrsOdo1SYpVQsQaoADocXdPgUrE0Pnq5UHQfeORu9\/czCm6OlgNS+YaLiqXdxksA+wiCdfpYmwCi\/6Nxlq6\/m3RaHuR0Z5xjL1StUO4mzH5UcsjkROn7NVe5vAVF9H7hWfYf\/LMtivYeaNQDAYnc3CoO6FCTYqyAICPE\/ljwAR\/YlV9wUHpuGfK0MtD6UAN8xX92tRW7hWhs8asthEs+J5bfrnZcCHsBVGhsRvljOga8XVhi50v4xcKnca3jR4+GaR5e519J810NayxCAAqQKIp2HbcxnASL94+PONXQoAPl3MQQEgb7UxHoAnlIFIkYEl4mj9MR2B6yQ==","pkt_caplen":325,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431417993,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbZAABAGjAdKfYiNCggAAQG7gdGfnef2YGIdhVAQ\/\/9JuQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1431418008131,"flow_last_seen":1431418008131,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8OQ1AAEAGJJwKCAABSn2Ija34AbvuolTmAAAAAKAC\/\/8JnAAAAgQFtAQCCAoAKm3rAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeJAABAGi9tKfYiNCggAAQG7rfgRXasZ7qJU51AS\/\/8jCwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1431418008133,"flow_last_seen":1431418008133,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8wNFAAEAGnNcKCAABSn2IjduBAbsrgq06AAAAAKAC\/\/9G3wAAAgQFtAQCCAoAKm3rAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeRAABAGi9lKfYiNCggAAQG724HUfVLFK4KtO1AS\/\/\/1gQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOQ5AAEAGJK8KCAABSn2Ija34AbvuolTnEV2rGlAQ\/\/8jDAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAowNJAAEAGnOoKCAABSn2IjduBAbsrgq071H1SxlAQ\/\/\/1ggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1431418008131,"flow_last_seen":1431418008138,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0383{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAedAABAGi9ZKfYiNCggAAQG7rfgRXasa7qJW7FAQ\/\/8hBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1431418008133,"flow_last_seen":1431418008141,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0384{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAehAABAGi9VKfYiNCggAAQG724HUfVLGK4KvQFAQ\/\/\/zfQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0590{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":206,"pkt":"ABoRAAACABoRAAABCABFAADAAetAABAGizpKfYiNCggAAQG7rfgRXasa7qJW7FAY\/\/+zsAAAFgMDAGACAABcAwNVUbSYnv8lFkwrP3tkn4HenuHfYNVayyWpsUxN9vxrPCACAgRWcgR9w4k0fccFDBFgltGnL9Eev8AwahrxGVyDb8AvAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKAAAAAAAAAAAXacoUY2XPyBFJGfEF3Th1vw79TgzZopqWjm3nxKar8M=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1431418008131,"flow_last_seen":1431418008294,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"7bee5c1d424b7e5f943b06983bb11422","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+0592{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":206,"pkt":"ABoRAAACABoRAAABCABFAADAAexAABAGizlKfYiNCggAAQG724HUfVLGK4KvQFAY\/\/9r2QAAFgMDAGACAABcAwNVUbSYmROcimMu8n3UiA4V9o6+qZRQpBjKJ9EfdyRo\/iACAgRWcgR9w4k0fccFDBFgltGnL9Eev8AwahrxGVyDb8AvAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKAAAAAAAAAAADDcXv+W8vtUMi18PvtyGNW\/DmWyzX37WYnllu2M793g=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1431418008133,"flow_last_seen":1431418008294,"flow_tot_l4_data_len":809,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Snapchat","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feelinsonice-hrd.appspot.com","ja3":"fded31ac9b978e56ce306f8056092f2a","ja3s":"7bee5c1d424b7e5f943b06983bb11422","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+0383{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoORBAAEAGJK0KCAABSn2Ija34AbvuolbsEV2rslAQ\/\/8gbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAowNRAAEAGnOgKCAABSn2IjduBAbsrgq9A1H1TXlAQ\/\/\/y5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":105,"pkt":"ABoRAAACABoRAAABCABFAABbORFAAEAGJHkKCAABSn2Ija34AbvuolbsEV2rslAY\/\/9RZwAAFAMDAAEBFgMDACg\/yxy\/isn7sp4msLqfjCgWlkRFGBF2Q3Vx+rR9jOq2HtyKTSD1PBM5","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAe9AABAGi85KfYiNCggAAQG7rfgRXauy7qJXH1AQ\/\/8gPAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1117{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfBAABAGi81KfYiNCggAAQG7rfgRXauy7qJZN1AQ\/\/8eJAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1116{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfFAABAGi8xKfYiNCggAAQG7rfgRXauy7qJbT1AQ\/\/8cDAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":253,"pkt":"ABoRAAACABoRAAABCABFAADvORRAAEAGI+IKCAABSn2Ija34AbvuoltPEV2rslAY\/\/+4KgAATPLlHnlMwVPMY3wN8GKj4lrDg+GYU76nwUHz+UjdXUaAGZ0fvbtAbP+ja0DxISIvnNR+NVh51N4gSCGKkbebxk8\/N\/ATfKDvEOIjjxDht1LpwfakTOw4a2GwYHEwO5Zc2bzZaRkCqH1SpR6hKamSk8AcJdOjmZPRsAkKxjEmjzdXbEtC2I1hMz1wX\/mSVhoXgJnbzFtBYBwtHDHAQFp5batgoINSt98mxTu71dYfcAzE7CJnb5u8S5EM2TgDkY6bgpo59HYK+A==","pkt_caplen":253,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfJAABAGi8tKfYiNCggAAQG7rfgRXauy7qJcFlAQ\/\/8bRQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":105,"pkt":"ABoRAAACABoRAAABCABFAABbwNVAAEAGnLQKCAABSn2IjduBAbsrgq9A1H1TXlAY\/\/+tkAAAFAMDAAEBFgMDACiTANECLV5gyrmsEBxSetKObvy84tLkwEhQmWtdNsvkTmFU5Ry2Gp9E","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfNAABAGi8pKfYiNCggAAQG724HUfVNeK4Kvc1AQ\/\/\/ysgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1115{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfRAABAGi8lKfYiNCggAAQG724HUfVNeK4Kxi1AQ\/\/\/wmgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1116{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfVAABAGi8hKfYiNCggAAQG724HUfVNeK4Kzo1AQ\/\/\/uggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":198,"pkt":"ABoRAAACABoRAAABCABFAAC4wNhAAEAGnFQKCAABSn2IjduBAbsrgrOj1H1TXlAY\/\/\/G6wAAstjj3\/bsqpZpfZBbB0U0MfQ1fvcBtg\/ngUbvEy0ydo\/TCHa74MV9Zwi2677DhjDQ7Y8hgLv04yaniKcq9e1oXDbG0nZBEfAhi3hvl9olQoHXtdnYwEdx7D2DuVvaqcLIx2lazMNmhLU53oscsI35lmtDhvLcFW6nY5DJFHZ\/uvNo7JO137yNDEMdsY\/zZaRu","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","pkt_oversize":false,"pkt_ts":1431418008,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfZAABAGi8dKfYiNCggAAQG724HUfVNeK4K0M1AQ\/\/\/t8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":0,"flow_packet_id":22,"flow_first_seen":1431417993318,"flow_last_seen":1431417995589,"flow_tot_l4_data_len":2131,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":33233,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":2,"flow_packet_id":17,"flow_first_seen":1431418008133,"flow_last_seen":1431418008853,"flow_tot_l4_data_len":3365,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1089,"flow_avg_l4_data_len":197,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":56193,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap","flow_id":1,"flow_packet_id":17,"flow_first_seen":1431418008131,"flow_last_seen":1431418008701,"flow_tot_l4_data_len":2799,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"74.125.136.141","src_port":44536,"dst_port":443,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/snapchat.pcap"}
diff --git a/tests/result/nDPId_ssdp-m-search.pcap.txt b/tests/result/nDPId_ssdp-m-search.pcap.txt
new file mode 100644
index 000000000..635fa6235
--- /dev/null
+++ b/tests/result/nDPId_ssdp-m-search.pcap.txt
@@ -0,0 +1,20 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1532054645808,"flow_last_seen":1532054645808,"flow_tot_l4_data_len":29,"flow_min_l4_data_len":29,"flow_max_l4_data_len":29,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.8","dst_ip":"192.168.242.255","src_port":42253,"dst_port":32412,"l4_proto":"udp"}
+0406{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054645,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxO0tAAEARmRfAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1532054645808,"flow_last_seen":1532054645808,"flow_tot_l4_data_len":29,"flow_min_l4_data_len":29,"flow_max_l4_data_len":29,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.8","dst_ip":"192.168.242.255","src_port":42253,"dst_port":32412,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0406{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054650,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxSyxAAEARiTbAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054655,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxW1JAAEAReRDAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054660,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxbhVAAEARZk3AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054665,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxfl5AAEARVgTAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054670,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxhQ5AAEART1TAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054675,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxkMxAAEARQ5bAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054680,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxkOxAAEARQ3bAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054685,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxmrNAAEAROa\/AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054690,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxprFAAEARLbHAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054695,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxsrNAAEARIa\/AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054700,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxufpAAEARGmjAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054705,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxvxhAAEARFUrAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054710,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxwmtAAEAREffAqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","pkt_oversize":false,"pkt_ts":1532054715,"pkt_len":63,"pkt":"\/\/\/\/\/\/\/\/AAibydCMCABFAAAxxENAAEAREB\/AqPIIwKjy\/6UNfpwAHf9xTS1TRUFSQ0ggKiBIVFRQLzEuMQ0K","pkt_caplen":63,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap","flow_id":0,"flow_packet_id":19,"flow_first_seen":1532054645808,"flow_last_seen":1532054735808,"flow_tot_l4_data_len":551,"flow_min_l4_data_len":29,"flow_max_l4_data_len":29,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.242.8","dst_ip":"192.168.242.255","src_port":42253,"dst_port":32412,"l4_proto":"udp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssdp-m-search.pcap"}
diff --git a/tests/result/nDPId_ssh.pcap.txt b/tests/result/nDPId_ssh.pcap.txt
new file mode 100644
index 000000000..25906cea8
--- /dev/null
+++ b/tests/result/nDPId_ssh.pcap.txt
@@ -0,0 +1,23 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1320435464760,"flow_last_seen":1320435464760,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp"}
+0409{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":78,"pkt":"AAwppUXgAFBWwAAICABFAABAek9AAEAGi52sEO4BrBDuqOQbABY3Xn+qAAAAALAC\/\/+abgAAAgQFtAEDAwMBAQgKHJWv9QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":74,"pkt":"AFBWwAAIAAwppUXgCABFAAA8AABAAEAGBfGsEO6orBDuAQAW5BtConY2N15\/q6ASFqC42wAAAgQFtAQCCAoAEyL4HJWv9QEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":66,"pkt":"AAwppUXgAFBWwAAICABFAAA0xzVAAEAGPsOsEO4BrBDuqOQbABY3Xn+rQqJ2N4AQ\/\/\/+RgAAAQEIChyVr\/UAEyL4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":87,"pkt":"AFBWwAAIAAwppUXgCABFAABJVM9AAEAGsRSsEO6orBDuAQAW5BtConY3N15\/q4AYAFs9HQAAAQEICgATIwEcla\/1U1NILTIuMC1PcGVuU1NIXzUuMw0K","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1320435464760,"flow_last_seen":1320435464768,"flow_tot_l4_data_len":169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher"},"proto":"SSH","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"","hassh_client":"","hassh_server":""}}
+0395{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":66,"pkt":"AAwppUXgAFBWwAAICABFAAA0YDlAAEAGpb+sEO4BrBDuqOQbABY3Xn+rQqJ2TIAQ\/\/\/+HgAAAQEIChyVr\/8AEyMB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":87,"pkt":"AAwppUXgAFBWwAAICABFAABJ8QpAAEAGFNmsEO4BrBDuqOQbABY3Xn+rQqJ2TIAY\/\/86WQAAAQEIChyVr\/8AEyMBU1NILTIuMC1PcGVuU1NIXzUuNg0K","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0749{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1320435464760,"flow_last_seen":1320435464768,"flow_tot_l4_data_len":254,"flow_min_l4_data_len":32,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher","19":"SSH Obsolete Server Version\/Cipher"},"proto":"SSH","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"SSH-2.0-OpenSSH_5.6","hassh_client":"","hassh_server":""}}
+0394{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":66,"pkt":"AFBWwAAIAAwppUXgCABFAAA0VNBAAEAGsSisEO6orBDuAQAW5BtConZMN15\/wIAQAFv9rQAAAQEICgATIwIcla\/\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1605{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":970,"pkt":"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","pkt_caplen":970,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","flow_id":0,"flow_packet_id":8,"flow_first_seen":1320435464760,"flow_last_seen":1320435464769,"flow_tot_l4_data_len":1222,"flow_min_l4_data_len":32,"flow_max_l4_data_len":936,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher","19":"SSH Obsolete Server Version\/Cipher"},"proto":"SSH","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"SSH-2.0-OpenSSH_5.6","hassh_client":"21B457A327CE7A2D4FCE5EF2C42400BD","hassh_server":""}}
+0393{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":66,"pkt":"AFBWwAAIAAwppUXgCABFAAA0VNFAAEAGsSesEO6orBDuAQAW5BtConZMN16DSIAQAHf6CQAAAQEICgATIwIcla\/\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1446{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":850,"pkt":"AFBWwAAIAAwppUXgCABFAANEVNJAAEAGrhasEO6orBDuAQAW5BtConZMN16DSIAYAHfp7gAAAQEICgATIwMcla\/\/AAADDAoUAPIpTowp\/R3EVkG6Xa+q1wAAAH5kaWZmaWUtaGVsbG1hbi1ncm91cC1leGNoYW5nZS1zaGEyNTYsZGlmZmllLWhlbGxtYW4tZ3JvdXAtZXhjaGFuZ2Utc2hhMSxkaWZmaWUtaGVsbG1hbi1ncm91cDE0LXNoYTEsZGlmZmllLWhlbGxtYW4tZ3JvdXAxLXNoYTEAAAAPc3NoLXJzYSxzc2gtZHNzAAAAnWFlczEyOC1jdHIsYWVzMTkyLWN0cixhZXMyNTYtY3RyLGFyY2ZvdXIyNTYsYXJjZm91cjEyOCxhZXMxMjgtY2JjLDNkZXMtY2JjLGJsb3dmaXNoLWNiYyxjYXN0MTI4LWNiYyxhZXMxOTItY2JjLGFlczI1Ni1jYmMsYXJjZm91cixyaWpuZGFlbC1jYmNAbHlzYXRvci5saXUuc2UAAACdYWVzMTI4LWN0cixhZXMxOTItY3RyLGFlczI1Ni1jdHIsYXJjZm91cjI1NixhcmNmb3VyMTI4LGFlczEyOC1jYmMsM2Rlcy1jYmMsYmxvd2Zpc2gtY2JjLGNhc3QxMjgtY2JjLGFlczE5Mi1jYmMsYWVzMjU2LWNiYyxhcmNmb3VyLHJpam5kYWVsLWNiY0BseXNhdG9yLmxpdS5zZQAAAGlobWFjLW1kNSxobWFjLXNoYTEsdW1hYy02NEBvcGVuc3NoLmNvbSxobWFjLXJpcGVtZDE2MCxobWFjLXJpcGVtZDE2MEBvcGVuc3NoLmNvbSxobWFjLXNoYTEtOTYsaG1hYy1tZDUtOTYAAABpaG1hYy1tZDUsaG1hYy1zaGExLHVtYWMtNjRAb3BlbnNzaC5jb20saG1hYy1yaXBlbWQxNjAsaG1hYy1yaXBlbWQxNjBAb3BlbnNzaC5jb20saG1hYy1zaGExLTk2LGhtYWMtbWQ1LTk2AAAAFW5vbmUsemxpYkBvcGVuc3NoLmNvbQAAABVub25lLHpsaWJAb3BlbnNzaC5jb20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":850,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1320435464760,"flow_last_seen":1320435464770,"flow_tot_l4_data_len":2070,"flow_min_l4_data_len":32,"flow_max_l4_data_len":936,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp","ndpi": {"flow_risk": {"18":"SSH Obsolete Client Version\/Cipher","19":"SSH Obsolete Server Version\/Cipher"},"proto":"SSH","category":"RemoteAccess"},"ssh": {"client_signature":"SSH-2.0-OpenSSH_5.3","server_signature":"SSH-2.0-OpenSSH_5.6","hassh_client":"21B457A327CE7A2D4FCE5EF2C42400BD","hassh_server":"B1C6C0D56317555B85C7005A3DE29325"}}
+0396{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":66,"pkt":"AAwppUXgAFBWwAAICABFAAA02jNAAEAGK8WsEO4BrBDuqOQbABY3XoNIQqJ5XIAQ\/\/\/3bQAAAQEIChyVsAEAEyMD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":90,"pkt":"AAwppUXgAFBWwAAICABFAABM0xtAAEAGMsWsEO4BrBDuqOQbABY3XoNIQqJ5XIAY\/\/\/JFwAAAQEIChyVsAEAEyMDAAAAFAYiAAAEAAAABAAAACAAAAAAAAAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":218,"pkt":"AFBWwAAIAAwppUXgCABFAADMVNNAAEAGsI2sEO6orBDuAQAW5BtConlcN16DYIAYAHdn8wAAAQEICgATIwQclbABAAAAlAgfAAAAgQDeSfyQaZlMN50rZWPv03765nhe6x3QoSsJCqwnKyLfjGSkoqt7mc4Ld6mlLggz1S1TsljO3\/0XXcijdmqbmAc2JkbckhVijD9K8OCNAKtgo7nlW65H6CZR2gwVonNV3bBjZcrh3d5MDJfcmUL9ZemGf6UOcuHHhUEe3SjeJ0uzIwAAAAECAAAAAAAAAAA=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":66,"pkt":"AAwppUXgAFBWwAAICABFAAA0rWVAAEAGWJOsEO4BrBDuqOQbABY3XoNgQqJ59IAQ\/\/\/2uwAAAQEIChyVsAIAEyME","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","pkt_oversize":false,"pkt_ts":1320435464,"pkt_len":210,"pkt":"AAwppUXgAFBWwAAICABFAADEyg1AAEAGO1usEO4BrBDuqOQbABY3XoNgQqJ59IAY\/\/+RQAAAAQEIChyVsAMAEyMEAAAAjAUgAAAAgQCKUG7tHgFITWPHoMxc4wuZ1BXy9n04qGBXJaOb+9wr70emYr8wHGq5ovMs7cviXyxxuF2Wdy30WLOfkouWkCplLGVZjdOTH0a5W2C9UmG80DhI+zr3en+DO3OfgxTtHr+gZJk6dXUbjvnH28419VgXWQUn69FtGg8SjApYMkgSUQAAAAAA","pkt_caplen":210,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap","flow_id":0,"flow_packet_id":258,"flow_first_seen":1320435464760,"flow_last_seen":1320435713237,"flow_tot_l4_data_len":26774,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1312,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"172.16.238.1","dst_ip":"172.16.238.168","src_port":58395,"dst_port":22,"l4_proto":"tcp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ssh.pcap"}
diff --git a/tests/result/nDPId_starcraft_battle.pcap.txt b/tests/result/nDPId_starcraft_battle.pcap.txt
new file mode 100644
index 000000000..7011a1635
--- /dev/null
+++ b/tests/result/nDPId_starcraft_battle.pcap.txt
@@ -0,0 +1,524 @@
+0368{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1437389953643,"flow_last_seen":1437389953643,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":1,"l3_proto":"ip4","src_ip":"192.30.252.91","dst_ip":"192.168.1.100","src_port":443,"dst_port":3213,"l4_proto":"tcp"}
+0434{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":85,"pkt":"IImEa8W6hCYVPnXECABFAABHZtpAAPMGok\/AHvxbwKgBZAG7DI12Mx9qhBzaXVAYAB\/+XQAAFwMDABrSe+rfqh1HHm09zJFdvf5O5AwaBTHDWE16Zg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":89,"pkt":"hCYVPnXEIImEa8W6CABFAABLZZBAAIAGFpbAqAFkwB78WwyNAbuEHNpddjMfiVAYAP4NnAAAFwMDAB4AAAAAAAAAE\/\/36Dj9UZVbiDpZWB\/\/4P+7KR1Y0OI=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1437389953741,"flow_last_seen":1437389953741,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":86,"pkt":"hCYVPnXEIImEa8W6CABFAABIX14AAIARVpTAqAFkwKgB\/uXCADUANEsbLmwBAAABAAAAAAAAAjkxAzI1MgIzMAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1437389953741,"flow_last_seen":1437389953741,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"91.252.30.192.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0433{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":86,"pkt":"hCYVPnXEIImEa8W6CABFAABIX18AAIARVpPAqAFkwKgB\/uXCADUANO2f6I8BAAABAAAAAAAAAzEwMAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1437389953741,"flow_last_seen":1437389953742,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"100.1.168.192.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0462{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":106,"pkt":"IImEa8W6hCYVPnXECABFAABcAABAAEARtd7AqAH+wKgBZAA15cIASF7P6I+BgAABAAEAAAAAAzEwMAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAAAAAAgGbmItd2luAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1437389953741,"flow_last_seen":1437389953743,"flow_tot_l4_data_len":176,"flow_min_l4_data_len":52,"flow_max_l4_data_len":72,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"100.1.168.192.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoZttAAPMGom3AHvxbwKgBZAG7DI12Mx+JhBzagFAQAB8ujQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389953,"pkt_len":154,"pkt":"IImEa8W6hCYVPnXECABFAACMAABAAEARta7AqAH+wKgBZAA15cIAeFi6LmyBgwABAAAAAQAAAjkxAzI1MgIzMAMxOTIHaW4tYWRkcgRhcnBhAAAMAAHADwAGAAEAAAA7ADgDbnMxA3AxNgZkeW5lY3QDbmV0AANvcHMGZ2l0aHViA2NvbQAAAAASAAAOEAAAAlgACTqAAAAAPA==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1437389953741,"flow_last_seen":1437389953805,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":52,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"91.252.30.192.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1437389954123,"flow_last_seen":1437389954123,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.26","dst_ip":"192.168.1.100","src_port":443,"dst_port":3476,"l4_proto":"tcp"}
+0396{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389954,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAohUoAAPMGdW9Q77oawKgBZAG7DZT7ZyHlrZYt91AU9s3jwgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1437389954543,"flow_last_seen":1437389954543,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389954,"pkt_len":86,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2AAAIARVpLAqAFkwKgB\/uXPADUANOzD5FkBAAABAAAAAAAAAzI1NAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1437389954543,"flow_last_seen":1437389954543,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"254.1.168.192.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0434{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389954,"pkt_len":86,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2EAAIARVpHAqAFkwKgB\/uXPADUANAhuNT0BAAABAAAAAAAAAjI2AzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389954,"pkt_len":86,"pkt":"IImEa8W6hCYVPnXECABFAABIAABAAEARtfLAqAH+wKgBZAA15c8ANGxA5FmBgwABAAAAAAAAAzI1NAExAzE2OAMxOTIHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1437389954543,"flow_last_seen":1437389954544,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"254.1.168.192.in-addr.arpa","num_queries":1,"num_answers":0,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0531{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389954,"pkt_len":159,"pkt":"IImEa8W6hCYVPnXECABFAACRAABAAEARtanAqAH+wKgBZAA15c8AfYPVNT2BgAABAAIAAAAAAjI2AzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAAAJABcGc2lnbnVwCndvdy1ldXJvcGUDY29tAMAMAAwAAQAAAAkAGg04MC0yMzktMTg2LTI2BmF0dGVucwNuZXQA","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1437389954543,"flow_last_seen":1437389954714,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":52,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"26.186.239.80.in-addr.arpa","num_queries":1,"num_answers":2,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1437389955642,"flow_last_seen":1437389955642,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.40","dst_ip":"192.168.1.100","src_port":443,"dst_port":3478,"l4_proto":"tcp"}
+0397{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo31oAAPMGG1FQ77oowKgBZAG7DZa8aq6WRaVMa1AU+bLclgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1437389955670,"flow_last_seen":1437389955670,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"173.194.40.22","dst_ip":"192.168.1.100","src_port":443,"dst_port":53568,"l4_proto":"udp"}
+0431{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":83,"pkt":"IImEa8W6hCYVPnXECABFAABFcNYAADURfO2twigWwKgBZAG70UAAMRxxEMkFXwBmE17ybHuJOXq3nhBj9+0\/GMWhnexwnqL3\/n6xqnftvooLDz8=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":83,"pkt":"hCYVPnXEIImEa8W6CABFAABFDD0AAIARlobAqAFkrcIoFtFAAbsAMXj5DBnPzxTN69maKsxX+B31W\/+0ERxkBS+pEu\/Lu7MhCuhfcS4mTXYS47w=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1437389955747,"flow_last_seen":1437389955747,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp"}
+0434{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":86,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2IAAIARVpDAqAFkwKgB\/uXcADUANLhfizwBAAABAAAAAAAAAjQwAzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1437389955747,"flow_last_seen":1437389955747,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"40.186.239.80.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0487{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":124,"pkt":"IImEa8W6hCYVPnXECABFAABuAABAAEARtczAqAH+wKgBZAA15dwAWs2+izyBgAABAAEAAAAAAjQwAzE4NgMyMzkCODAHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAC+XABoNODAtMjM5LTE4Ni00MAZhdHRlbnMDbmV0AA==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1437389955747,"flow_last_seen":1437389955800,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":52,"flow_max_l4_data_len":90,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"40.186.239.80.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1437389955932,"flow_last_seen":1437389955932,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"216.58.212.110","src_port":3052,"dst_port":443,"l4_proto":"tcp"}
+0393{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":55,"pkt":"hCYVPnXEIImEa8W6CABFAAApUQNAAIAGOxbAqAFk2DrUbgvsAbu4rIxVQhQWM1AQAPyVMQAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389955,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0zAIAADUGSwzYOtRuwKgBZAG7C+xCFBYzuKyMVoAQAofTiQAAAQEFCrisjFW4rIxW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1437389956550,"flow_last_seen":1437389956550,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp"}
+0435{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389956,"pkt_len":86,"pkt":"hCYVPnXEIImEa8W6CABFAABIX2MAAIARVo\/AqAFkwKgB\/uXjADUANNVsy9IBAAABAAAAAAAAAjIyAjQwAzE5NAMxNzMHaW4tYWRkcgRhcnBhAAAMAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1437389956550,"flow_last_seen":1437389956550,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"22.40.194.173.in-addr.arpa","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0434{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389956,"pkt_len":87,"pkt":"hCYVPnXEIImEa8W6CABFAABJX2QAAIARVo3AqAFkwKgB\/uXjADUANaawlcQBAAABAAAAAAAAAzExMAMyMTICNTgDMjE2B2luLWFkZHIEYXJwYQAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389956,"pkt_len":157,"pkt":"IImEa8W6hCYVPnXECABFAACPAABAAEARtavAqAH+wKgBZAA15eMAe9\/glcSBgAABAAIAAAAAAzExMAMyMTICNTgDMjE2B2luLWFkZHIEYXJwYQAADAABwAwADAABAABT2QAcEG1pbDAxczI1LWluLWYxMTAFMWUxMDADbmV0AMAMAAwAAQAAU9kAEg9taWwwMXMyNS1pbi1mMTTASg==","pkt_caplen":157,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":8,"flow_packet_id":3,"flow_first_seen":1437389956550,"flow_last_seen":1437389956552,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":52,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"110.212.58.216.in-addr.arpa","num_queries":1,"num_answers":2,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0487{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389956,"pkt_len":125,"pkt":"IImEa8W6hCYVPnXECABFAABvAABAAEARtcvAqAH+wKgBZAA15eMAWyEky9KBgAABAAEAAAAAAjIyAjQwAzE5NAMxNzMHaW4tYWRkcgRhcnBhAAAMAAHADAAMAAEAAFRfABsPbWlsMDJzMDYtaW4tZjIyBTFlMTAwA25ldAA=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1437389956550,"flow_last_seen":1437389956605,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":52,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"22.40.194.173.in-addr.arpa","num_queries":1,"num_answers":1,"reply_code":0,"query_type":12,"rsp_type":12,"rsp_addr":"0.0.0.0"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1437389958129,"flow_last_seen":1437389958129,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.208.193","src_port":3427,"dst_port":1119,"l4_proto":"tcp"}
+0410{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389958,"pkt_len":69,"pkt":"hCYVPnXEIImEa8W6CABFAAA3SKVAAIAGzl7AqAFkUO\/QwQ1jBF+OUzht5cVUn1AY+ehDuQAA00l1ne7IFusS1wyd32Yu","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389958,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBZAADQGDv1Q79DBwKgBZARfDWPlxVSfjlM4fFAQPaJ7fgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1437389961548,"flow_last_seen":1437389961548,"flow_tot_l4_data_len":21,"flow_min_l4_data_len":21,"flow_max_l4_data_len":21,"flow_avg_l4_data_len":21,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"64.233.184.188","src_port":2759,"dst_port":5228,"l4_proto":"tcp"}
+0394{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389961,"pkt_len":55,"pkt":"hCYVPnXEIImEa8W6CABFAAApPndAAIAGAKbAqAFkQOm4vArHFGzE+CH9edXaGlAQAPyZDAAAAA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389961,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0aJ8AACgGbnNA6bi8wKgBZBRsCsd51doaxPgh\/oAQAXGUkwAAAQEFCsT4If3E+CH+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0346{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389962,"pkt_len":58,"pkt":"AYDCAAAOIImEa8W6iMwCBwQgiYRrxboEBwMgiYRrxboGAg4R\/gkAEg8BAwABAAD+BwASuwEAAQEAAA==","pkt_caplen":58,"pkt_type":35020,"pkt_ipoffset":14}
+0184{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","type":35020}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1437389963466,"flow_last_seen":1437389963466,"flow_tot_l4_data_len":389,"flow_min_l4_data_len":389,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":389,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"239.255.255.250","src_port":38605,"dst_port":1900,"l4_proto":"udp"}
+0889{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1437389963466,"flow_last_seen":1437389963466,"flow_tot_l4_data_len":389,"flow_min_l4_data_len":389,"flow_max_l4_data_len":389,"flow_avg_l4_data_len":389,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"239.255.255.250","src_port":38605,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0877{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":414,"pkt":"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","pkt_caplen":414,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":423,"pkt":"AQBef\/\/6hCYVPnXECABFAAGZAABAAAERxbPAqAH+7\/\/\/+pbNB2wBhW9zTk9USUZZICogSFRUUC8xLjENCkhPU1Q6IDIzOS4yNTUuMjU1LjI1MDoxOTAwDQpDQUNIRS1DT05UUk9MOiBtYXgtYWdlPTYwDQpsT0NBVElPTjogaHR0cDovLzE5Mi4xNjguMS4yNTQ6NTcwNTIvcm9vdERlc2MwLnhtbA0KU0VSVkVSOiBFUElDRU5UUk8gVVBuUC8xLjAgTWluaVVQblBkLzEuNg0KTlQ6IHV1aWQ6MTEyNjY3MzYtZmE1OS0xMWU0LTljOWYtODQyNjE1M2U3NWM0DQpVU046IHV1aWQ6MTEyNjY3MzYtZmE1OS0xMWU0LTljOWYtODQyNjE1M2U3NWM0DQpOVFM6IHNzZHA6YWxpdmUNCk9QVDogImh0dHA6Ly9zY2hlbWFzLnVwbnAub3JnL3VwbnAvMS8wLyI7DQowMS1OTFM6IDENCkJPT1RJRC5VUE5QLk9SRzogMQ0KQ09ORklHSUQuVVBOUC5PUkc6IDEzMzcNCg0K","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0973{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":486,"pkt":"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","pkt_caplen":486,"pkt_type":2048,"pkt_ipoffset":14}
+0965{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":478,"pkt":"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","pkt_caplen":478,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0941{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":462,"pkt":"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","pkt_caplen":462,"pkt_type":2048,"pkt_ipoffset":14}
+0985{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":494,"pkt":"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","pkt_caplen":494,"pkt_type":2048,"pkt_ipoffset":14}
+0889{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":423,"pkt":"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","pkt_caplen":423,"pkt_type":2048,"pkt_ipoffset":14}
+0971{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":482,"pkt":"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","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0962{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389963,"pkt_len":476,"pkt":"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","pkt_caplen":476,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":74,"pkt":"hCYVPnXEIImEa8W6CABFAAA8SKZAAIAGzljAqAFkUO\/QwQ1jBF+OUzh85cVUn1AY+eiiKgAAgb8pIAfuTigNRzF0YIhRn73AbVc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1437389964518,"flow_last_seen":1437389964518,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3506,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0bDFAAIAGrOPAqAFkrcJx4A2yAFD3XxLXAAAAAIACIABVKAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0QI0AADUGY4itwnHgwKgBZABQDbI8Bg5O918S2IASp5SDTQAAAgQFlgEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDJAAIAGrO7AqAFkrcJx4A2yAFD3XxLYPAYOT1AQAQBqlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0861{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":404,"pkt":"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","pkt_caplen":404,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1437389964518,"flow_last_seen":1437389964552,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":20,"flow_max_l4_data_len":370,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3506,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"Web"},"http": {"hostname":"www.google-analytics.com","url":"www.google-analytics.com\/collect","code":0,"content_type":"","user_agent":"Battle.net\/1.3.0.5952"}}
+0397{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBdAADQGDvxQ79DBwKgBZARfDWPlxVSfjlM4kFAQPaJ7agAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":155,"pkt":"IImEa8W6hCYVPnXECABFAACNVBhAADQGDpZQ79DBwKgBZARfDWPlxVSfjlM4kFAYPaJuWAAAIwQ9pMGCyW3AhiuMP8mzYNJ83EmoDToO2hkSMZkDGaOuRjmhWKDQgF9DTw9ofoWFaqUwLCp1Mpis4vuebKZmDopIZT6lwQKmTcwYC821AtDb+uHs5pcy\/NnhzDKyYJ7rprHLquI=","pkt_caplen":155,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoQJUAADUGY4ytwnHgwKgBZABQDbI8Bg5P918UNlAQAVho4AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoSKdAAIAGzmvAqAFkUO\/QwQ1jBF+OUziQ5cVVBFAQ+YO\/IwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0968{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":481,"pkt":"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","pkt_caplen":481,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDRAAIAGrOzAqAFkrcJx4A2yAFD3XxQ2PAYP+lARAP9njQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoQKgAADUGY3mtwnHgwKgBZABQDbI8Bg\/6918UN1ARAVhnMwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDVAAIAGrOvAqAFkrcJx4A2yAFD3XxQ3PAYP+1AQAP9njAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1437389964752,"flow_last_seen":1437389964752,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":77,"pkt":"hCYVPnXEIImEa8W6CABFAAA\/X2UAAIARVpbAqAFkwKgB\/up6ADUAK3heAXYBAAABAAAAAAAABGxsbncIYmxpenphcmQDY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1437389964752,"flow_last_seen":1437389964752,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"llnw.blizzard.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0424{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":77,"pkt":"hCYVPnXEIImEa8W6CABFAAA\/X2YAAIARVpXAqAFkwKgB\/up6ADUAK3heAXYBAAABAAAAAAAABGxsbncIYmxpenphcmQDY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":144,"pkt":"IImEa8W6hCYVPnXECABFAACCAABAAEARtbjAqAH+wKgBZAA16noAbnPyAXaBgAABAAMAAAAABGxsbncIYmxpenphcmQDY29tAAABAAHADAAFAAEAAFQfABcIYmxpenphcmQCdm8FbGxud2QDbmV0AMAvAAEAAQAAATwABFf43f7ALwABAAEAAAE8AARX+N39","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":13,"flow_packet_id":3,"flow_first_seen":1437389964752,"flow_last_seen":1437389964788,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":43,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":65,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"llnw.blizzard.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"87.248.221.254"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1437389964790,"flow_last_seen":1437389964790,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp"}
+0410{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0FwlAAIAG67fAqAFkV\/jd\/g20AFApaAewAAAAAIAC\/\/838QAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":144,"pkt":"IImEa8W6hCYVPnXECABFAACCAABAAEARtbjAqAH+wKgBZAA16noAbgsvAXaBgAABAAMAAAAABGxsbncIYmxpenphcmQDY29tAAABAAHADAAFAAEAADuIABcIYmxpenphcmQCdm8FbGxud2QDbmV0AMAvAAEAAQAAASoABFf43f7ALwABAAEAAAEqAARX+N39","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0tGpAAPUG2VVX+N3+wKgBZABQDbTA0NjuKWgHsYAS\/\/+fJQAAAgQFtAEDAwQEAgAA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFwpAAIAG68LAqAFkV\/jd\/g20AFApaAexwNDY71AQBADa8wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":241,"pkt":"hCYVPnXEIImEa8W6CABFAADjFwtAAIAG6wbAqAFkV\/jd\/g20AFApaAexwNDY71AYBACGigAAR0VUIC9zYzItcG9kLXJldGFpbC9BRjExQ0QwMC9FVS8yNDYyMS5kaXJlY3QvczItMzYyODEtQkEzNTZERDU3NTU3NzI4ODQzQ0FGNjNBMTJDNzlBQTMubWZpbCBIVFRQLzEuMQ0KVXNlci1BZ2VudDogQmxpenphcmQgV2ViIENsaWVudA0KSG9zdDogbGxudy5ibGl6emFyZC5jb20NCkNhY2hlLUNvbnRyb2w6IG5vLWNhY2hlDQoNCg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1437389964790,"flow_last_seen":1437389964848,"flow_tot_l4_data_len":291,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"llnw.blizzard.com","url":"llnw.blizzard.com\/sc2-pod-retail\/AF11CD00\/EU\/24621.direct\/s2-36281-BA356DD57557728843CAF63A12C79AA3.mfil","code":0,"content_type":"","user_agent":"Blizzard Web Client"}}
+0399{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAowZRAAPUGzDdX+N3+wKgBZABQDbTA0NjvKWgIbFAQD\/7OOgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0859{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1437389964790,"flow_last_seen":1437389964921,"flow_tot_l4_data_len":1791,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer"},"proto":"HTTP","category":"Download-FileTransfer-FileSharing"},"http": {"hostname":"llnw.blizzard.com","url":"llnw.blizzard.com\/sc2-pod-retail\/AF11CD00\/EU\/24621.direct\/s2-36281-BA356DD57557728843CAF63A12C79AA3.mfil","code":200,"content_type":"application\/octet-stream","user_agent":"Blizzard Web Client"}}
+0392{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFwxAAIAG68DAqAFkV\/jd\/g20AFApaAhswNDeo1AQBADUhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFw1AAIAG67\/AqAFkV\/jd\/g20AFApaAhswNDkV1AQBADO0AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFw5AAIAG677AqAFkV\/jd\/g20AFApaAhswNDqC1AQBADJHAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFw9AAIAG673AqAFkV\/jd\/g20AFApaAhswNDvv1AQBADDaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389964,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoFxBAAIAG67zAqAFkV\/jd\/g20AFApaAhswND1c1AQBAC9tAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1437389967432,"flow_last_seen":1437389967432,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"12.129.222.54","src_port":3512,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0U2dAAIAG+pjAqAFkDIHeNg24AFDXJA2NAAAAAIACIACvkgAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAAC0GoQAMgd42wKgBZABQDbj6JMXG1yQNjoASFtD4xgAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoU2hAAIAG+qPAqAFkDIHeNg24AFDXJA2O+iTFx1AQAQBPaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":139,"pkt":"hCYVPnXEIImEa8W6CABFAAB9U2lAAIAG+k3AqAFkDIHeNg24AFDXJA2O+iTFx1AYAQD\/UgAAR0VUIC91cGRhdGUvTGF1bmNoZXIudHh0IEhUVFAvMS4xDQpIb3N0OiB1cy5zY2FuLndvcmxkb2Z3YXJjcmFmdC5jb20NCkFjY2VwdDogKi8qDQoNCg==","pkt_caplen":139,"pkt_type":2048,"pkt_ipoffset":14}
+0690{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1437389967432,"flow_last_seen":1437389967639,"flow_tot_l4_data_len":189,"flow_min_l4_data_len":20,"flow_max_l4_data_len":105,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"12.129.222.54","src_port":3512,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.WorldOfWarcraft","category":"Game"},"http": {"hostname":"us.scan.worldofwarcraft.com","url":"us.scan.worldofwarcraft.com\/update\/Launcher.txt","code":0,"content_type":"","user_agent":""}}
+0399{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoibdAAC0GF1UMgd42wKgBZABQDbj6JMXH1yQN41AQAC5P5gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":327,"pkt":"IImEa8W6hCYVPnXECABFAAE5ibhAAC0GFkMMgd42wKgBZABQDbj6JMXH1yQN41AYAC6X5gAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjI3IEdNVA0KU2VydmVyOiBBcGFjaGUvMi4yLjMgKENlbnRPUykNCkxhc3QtTW9kaWZpZWQ6IE1vbiwgMjUgQXVnIDIwMTQgMTg6MTk6MjcgR01UDQpFVGFnOiAiNmUyMDMzLTI3LTUwMTc4M2EyOGE5YzAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1MZW5ndGg6IDM5DQpDb250ZW50LVR5cGU6IHRleHQvcGxhaW4NCg0KU2Nhbg0KMi4yLjg0Ljc3DQpTY2FuV2luNjQNCjIuMi44NC43Nw0K","pkt_caplen":327,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389967,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoU2pAAIAG+qHAqAFkDIHeNg24AFDXJA3j+iTG2FARAP9OAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoiblAAC0GF1MMgd42wKgBZABQDbj6JMbY1yQN5FARAC5O0wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoU2tAAIAG+qDAqAFkDIHeNg24AFDXJA3k+iTG2VAQAP9OAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1437389968486,"flow_last_seen":1437389968486,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3492,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaD9AAIAGnzjAqAFkAuQuaA2kAbvjTIWjXKb5cVARAQDtEwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3489,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEBAAIAGnzfAqAFkAuQuaA2hAbso9r9xF3ZyNlARAP06DgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3490,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEFAAIAGnzbAqAFkAuQuaA2iAbuuMy\/9hNS6Y1ARAQCOtQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3491,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEJAAIAGnzXAqAFkAuQuaA2jAbuWFKpTUfGXQ1ARBFh\/KAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3482,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWNAAIAG7grAqAFkAuQucg2aAbv4rJBdJdjUo1ARAP0omQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3480,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWRAAIAG7gnAqAFkAuQucg2YAbs5x3Vg1+NhTFARAQDDxgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3481,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWVAAIAG7gjAqAFkAuQucg2ZAbvryQjoVlrkVFARAQB8vAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3479,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWZAAIAG7gfAqAFkAuQucg2XAbvNUW978CZu3VARBF0M8QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1437389968487,"flow_last_seen":1437389968487,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"199.38.164.156","src_port":3486,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoPo5AAIAGjnLAqAFkxyaknA2eAbtl4GJo2w7rJVAR9fPuOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1437389968488,"flow_last_seen":1437389968488,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3484,"dst_port":443,"l4_proto":"tcp"}
+0391{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDZAAIAGrOrAqAFkrcJx4A2cAbsxkmlKz83WwVARAP18ZAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABdOZFAADkGFKgC5C5ywKgBZAG7DZol2NSj+KyQXlAYAk8nagAAFQMCADAMud3SaYTsSqa\/uoo0a5E8VCc4Xkt3IWOikvjNzbZ6\/KN17SBOZ1wiAn+Wb8fZvA4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWdAAIAG7gbAqAFkAuQucg2aAbv4rJBeJdjU2FAUAAApXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoOZJAADkGFNwC5C5ywKgBZAG7DZol2NTY+KyQXlARAk8nEQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABdHrRAADkGL4UC5C5ywKgBZAG7DZfwJm7dzVFvfFAYAvbMYQAAFQMCADAisnLQsHrL1EoW2shNoX67xhkXstAI1yd6wVWuICpme1diCl2In\/GtYthhkjE1BS4=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWhAAIAG7gXAqAFkAuQucg2XAbvNUW988CZvElAUAAARFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoHrVAADkGL7kC5C5ywKgBZAG7DZfwJm8SzVFvfFARAvYOIgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABdZwtAADkG5y0C5C5ywKgBZAG7DZlWWuRU68kI6VAYAk+37QAAFQMCADBkKOWBHzDl37wozuIxUqGksDGbpGilDaRqgrJ95jL33eBT4nQmWu5qzsKHkzuYbBI=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGWlAAIAG7gTAqAFkAuQucg2ZAbvryQjpVlrkiVAUAAB9gwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoZwxAADkG52EC5C5ywKgBZAG7DZlWWuSJ68kI6VARAk97NwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABdGMVAADkGNX4C5C5owKgBZAG7DaRcpvlx40yFpFAYAi2\/cgAAFQMCADCHvY3Mj+EIqhLZWr7xkOkCQpCu81AAuIN2GL29a+w7fDrgr\/wsC4qtrqrTilg07F0=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEpAAIAGny3AqAFkAuQuaA2kAbvjTIWkXKb5plAUAADt2gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoGMZAADkGNbIC5C5owKgBZAG7DaRcpvmm40yFpFARAi3rsAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABd0ZRAADkGfK4C5C5owKgBZAG7DaKE1LpjrjMv\/lAYAi2OuwAAFQMCADAOk8uVyOotmLX2HoTUFpC+IVWXwl6ab8qQjuO+KPoI4xJC+fUMLiJl2rPTnnO4+D0=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaEtAAIAGnyzAqAFkAuQuaA2iAbuuMy\/+hNS6mFAUAACPfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo0ZVAADkGfOIC5C5owKgBZAG7DaKE1LqYrjMv\/lARAi2NUgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoCWgAADUGmrmtwnHgwKgBZAG7DZzPzdbBMZJpS1ARAXR77AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAobDdAAIAGrOnAqAFkrcJx4A2cAbsxkmlLz83WwlAQAP18YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABdqvpAADkGo0gC5C5owKgBZAG7DaNR8ZdDlhSqVFAYAi3xwAAAFQMCADAv7rGxhq2HqkFRX8I5oUWALbAWkrPmznIlHUyodNC0DL7UHLBQOucKALsB4ikroko=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaExAAIAGnyvAqAFkAuQuaA2jAbuWFKpUUfGXeFAUAACDRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoqvtAADkGo3wC5C5owKgBZAG7DaNR8Zd4lhSqVFARAi2BHQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABd8QVAADkGXTMC5C5ywKgBZAG7DZjX42FMOcd1YVAYArORfwAAFQMCADAnMl10t6P0LqwYwp17IIJpYKwGMbTqEggZBxrTB\/KdrEJjLBHayLFZyNZHXp1TB8c=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoGW1AAIAG7gDAqAFkAuQucg2YAbs5x3Vh1+NhgVAUAADEjQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo8QZAADkGXWcC5C5ywKgBZAG7DZjX42GBOcd1YVARArPB3QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":107,"pkt":"IImEa8W6hCYVPnXECABFAABdD8xAADkGPncC5C5owKgBZAG7DaEXdnI2KPa\/clAYAi2WsQAAFQMCADDEyuty98HROVf0C9dCpYEUA7Jug9PX6pMmtPtLY+MIAZP0XBy+LRgi1JBN1q929Nc=","pkt_caplen":107,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoaE5AAIAGnynAqAFkAuQuaA2hAbso9r9yF3Zya1AUAAA60gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoD81AADkGPqsC5C5owKgBZAG7DaEXdnJrKPa\/clARAi04qAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoIUtAAPIGObXHJqScwKgBZAG7DZ7bDuslZeBiaVAQFLnPdAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoIUxAAPIGObTHJqScwKgBZAG7DZ7bDuslZeBiaVARFLnPcwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoPo9AAIAGjnHAqAFkxyaknA2eAbtl4GJp2w7rJlAQ9fPuOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":71,"pkt":"hCYVPnXEIImEa8W6CABFAAA5SKhAAIAGzlnAqAFkUO\/QwQ1jBF+OUziQ5cVVBFAY+YMpmwAAZwpNwrdCWBzrqAUDWe7hqKU=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoSKlAAIAGzmnAqAFkUO\/QwQ1jBF+OUzih5cVVBFAR+YO\/EQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBlAADQGDvpQ79DBwKgBZARfDWPlxVUEjlM4kFAQPaJ7BQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBpAADQGDvlQ79DBwKgBZARfDWPlxVUEjlM4olAQPaJ68wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":71,"pkt":"IImEa8W6hCYVPnXECABFAAA5VBtAADQGDudQ79DBwKgBZARfDWPlxVUEjlM4olAYPaK3mAAABMoeCRh5\/tbSbbFVkyRANjI=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoSKpAAIAGzmjAqAFkUO\/QwQ1jBF+OUzii5cVVFVAUAAC4gAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389968,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoVBxAADQGDvdQ79DBwKgBZARfDWPlxVUVjlM4olARPaJ64QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389970,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0DEUAAIARlo\/AqAFkrcIoFtFAAbsAIKDYDBnPzxTN69maK3zVmJ1A8q4\/WcfKtlQW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389970,"pkt_len":77,"pkt":"IImEa8W6hCYVPnXECABFAAA\/jiEAADURX6itwigWwKgBZAG70UAAK09mEMoFok0rRRKq\/gpUJClbhllLX\/LbhD0JR6ucwFId24LczKc=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1437389976946,"flow_last_seen":1437389976946,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.107","dst_ip":"224.0.0.22","l4_proto":2}
+0399{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389976,"pkt_len":60,"pkt":"AQBeAAAWtFJ+6zOBCABGAAAoAABAAAECQqbAqAFr4AAAFpQEAAAiAPkCAAAAAQQAAADgAAD7AQEICgBN","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1437389976946,"flow_last_seen":1437389976946,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.107","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0399{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389980,"pkt_len":60,"pkt":"AQBeAAAWtFJ+6zOBCABGAAAoAABAAAECQqbAqAFr4AAAFpQEAAAiAPkCAAAAAQQAAADgAAD7DndzYmFj","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1437389981134,"flow_last_seen":1437389981134,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp"}
+0424{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":76,"pkt":"hCYVPnXEIImEa8W6CABFAAA+X2cAAIARVpXAqAFkwKgB\/s+ZADUAKjZ5W6oBAAABAAAAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1437389981134,"flow_last_seen":1437389981134,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"nydus.battle.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0424{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":76,"pkt":"hCYVPnXEIImEa8W6CABFAAA+X2gAAIARVpTAqAFkwKgB\/s+ZADUAKjZ5W6oBAAABAAAAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":92,"pkt":"IImEa8W6hCYVPnXECABFAABOAABAAEARtezAqAH+wKgBZAA1z5kAOuq0W6qBgAABAAEAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAcAMAAEAAQAAAAYABFDvuho=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":27,"flow_packet_id":3,"flow_first_seen":1437389981134,"flow_last_seen":1437389981169,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":42,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"nydus.battle.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"80.239.186.26"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1437389981197,"flow_last_seen":1437389981197,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3515,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EYNAAIAGHCvAqAFkUO+6Gg27AFBEOrW2AAAAAIACIAB5\/gAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":92,"pkt":"IImEa8W6hCYVPnXECABFAABOAABAAEARtezAqAH+wKgBZAA1z5kAOuqDW6qBgAABAAEAAAAABW55ZHVzBmJhdHRsZQNuZXQAAAEAAcAMAAEAAQAAADcABFDvuho=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDbuOe0nfRDq1t2ASOQixoAAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEYRAAIAGHDbAqAFkUO+6Gg27AFBEOrW3jntJ4FAQ+vAHdQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":193,"pkt":"hCYVPnXEIImEa8W6CABFAACzEYVAAIAGG6rAqAFkUO+6Gg27AFBEOrW3jntJ4FAY+vA+7gAAR0VUIC9TMi9lbkdCL2NsaWVudC9yZWdpb25zP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IG55ZHVzLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQoNCg==","pkt_caplen":193,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1437389981197,"flow_last_seen":1437389981265,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":20,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3515,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/regions?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoBz5AADMGc3xQ77oawKgBZABQDbuOe0ngRDq2QlAQPLjFIgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1081{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":569,"pkt":"IImEa8W6hCYVPnXECABFAAIrBz9AADMGcXhQ77oawKgBZABQDbuOe0ngRDq2QlAYPLht0wAASFRUUC8xLjEgMzAyIEZvdW5kDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjQxIEdNVA0KU2VydmVyOiBBcGFjaGUNClgtRnJhbWUtT3B0aW9uczogU0FNRU9SSUdJTg0KTG9jYXRpb246IGh0dHA6Ly9ldS5sYXVuY2hlci5iYXR0bGUubmV0L3NlcnZpY2UvczIvcmVnaW9uc3htbC9yZWdpb25zLnhtbA0KVmFyeTogQWNjZXB0LUVuY29kaW5nDQpDb250ZW50LUxlbmd0aDogMjQ3DQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD1pc28tODg1OS0xDQoNCjwhRE9DVFlQRSBIVE1MIFBVQkxJQyAiLS8vSUVURi8vRFREIEhUTUwgMi4wLy9FTiI+CjxodG1sPjxoZWFkPgo8dGl0bGU+MzAyIEZvdW5kPC90aXRsZT4KPC9oZWFkPjxib2R5Pgo8aDE+Rm91bmQ8L2gxPgo8cD5UaGUgZG9jdW1lbnQgaGFzIG1vdmVkIDxhIGhyZWY9Imh0dHA6Ly9ldS5sYXVuY2hlci5iYXR0bGUubmV0L3NlcnZpY2UvczIvcmVnaW9uc3htbC9yZWdpb25zLnhtbCI+aGVyZTwvYT4uPC9wPgo8L2JvZHk+PC9odG1sPgo=","pkt_caplen":569,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1437389981330,"flow_last_seen":1437389981330,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3516,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0RD1AAIAG6XXAqAFkUO+6FQ28AFBBQIDMAAAAAIACIACx5gAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEYdAAIAGHDPAqAFkUO+6Gg27AFBEOrZCjntL41AQ+O0G6gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGertQ77oVwKgBZABQDbzhin+3QUCAzWASOQhgoQAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRD9AAIAG6X\/AqAFkUO+6FQ28AFBBQIDN4Yp\/uFAQ+vC2dQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":267,"pkt":"hCYVPnXEIImEa8W6CABFAAD9REBAAIAG6KnAqAFkUO+6FQ28AFBBQIDN4Yp\/uFAY+vANTQAAR0VUIC9zZXJ2aWNlL3MyL3JlZ2lvbnN4bWwvcmVnaW9ucy54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogZXUubGF1bmNoZXIuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9ueWR1cy5iYXR0bGUubmV0L1MyL2VuR0IvY2xpZW50L3JlZ2lvbnM\/YnVpbGQ9ZW5HQiZ0YXJnZXRSZWdpb249RVUNCg0K","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1437389981330,"flow_last_seen":1437389981385,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3516,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"eu.launcher.battle.net","url":"eu.launcher.battle.net\/service\/s2\/regionsxml\/regions.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoABlAADMGeqZQ77oVwKgBZABQDbzhin+4QUCBolAQPLhz2QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2160{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":1377,"pkt":"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","pkt_caplen":1377,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoREFAAIAG6X3AqAFkUO+6FQ28AFBBQIGi4YqKl1AQ+vCqwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoREJAAIAG6XzAqAFkUO+6FQ28AFBBQIGi4YqKl1AR+vCqwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEYxAAIAGHC7AqAFkUO+6Gg27AFBEOrZCjntL41AR+O0G6QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoABxAADMGeqNQ77oVwKgBZABQDbzhioqXQUCBo1ARPLho+AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRERAAIAG6XrAqAFkUO+6FQ28AFBBQIGj4YqKmFAQ+vCqvwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoAB1AADMGeqJQ77oVwKgBZABQDbzhioqYQUCBo1AQPLho+AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoB0BAADMGc3pQ77oawKgBZABQDbuOe0vjRDq2Q1ARPLjDHQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389981,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEY5AAIAGHCzAqAFkUO+6Gg27AFBEOrZDjntL5FAQ+O0G6AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1437389982130,"flow_last_seen":1437389982130,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.130","src_port":3517,"dst_port":1119,"l4_proto":"tcp"}
+0408{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0Zr9AAIAGfH3AqAFk1fh\/gg29BF8F03V0AAAAAIACgABKLQAAAgQFtAEDAwABAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1437389982140,"flow_last_seen":1437389982140,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3518,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EY9AAIAGHB\/AqAFkUO+6Gg2+AFAFq5RDAAAAAIACIADZ\/QAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADIGMUXV+H+CwKgBZARfDb3bZ8BEBdN1dWASFtBArgAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoZsBAAIAGfIjAqAFk1fh\/gg29BF8F03V122fARVAQgADvOgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDb7iEHr2BauURGASOQiM8wAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZBAAIAGHCrAqAFkUO+6Gg2+AFAFq5RE4hB691AQ+vDixwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":191,"pkt":"hCYVPnXEIImEa8W6CABFAACxEZFAAIAGG6DAqAFkUO+6Gg2+AFAFq5RE4hB691AY+vCboQAAR0VUIC9TMi9lbkdCL2NsaWVudC9hbGVydD9idWlsZD1lbkdCJnRhcmdldFJlZ2lvbj1FVSBIVFRQLzEuMQ0KVXNlci1BZ2VudDogQmF0dGxlLm5ldCBXZWIgQ2xpZW50DQpIb3N0OiBueWR1cy5iYXR0bGUubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":31,"flow_packet_id":4,"flow_first_seen":1437389982140,"flow_last_seen":1437389982207,"flow_tot_l4_data_len":233,"flow_min_l4_data_len":20,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3518,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/alert?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo0FpAADMGql9Q77oawKgBZABQDb7iEHr3BauUzVAQPLigdwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1085{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":573,"pkt":"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","pkt_caplen":573,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1437389982269,"flow_last_seen":1437389982269,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3519,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0RElAAIAG6WnAqAFkUO+6FQ2\/AFB8c4vnAAAAAIACIABrlQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":156,"pkt":"hCYVPnXEIImEa8W6CABFAACOZsFAAIAGfCHAqAFk1fh\/gg29BF8F03V122fARVAYgAAxSQAASgAACmYCCu0tZq3I6AoAACmZZLcjoQAARtxDNzK6ACu0twAAZyUMBhcAbWF0dGVvYnJhY2NpMUBnbWFpbC5jb20CMlMAAIzUrFUAAAAAAAAAAAAA\/\/9dOfxp7nY4rwAAAAAAAAAA","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1437389982130,"flow_last_seen":1437389982277,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":20,"flow_max_l4_data_len":122,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.130","src_port":3517,"dst_port":1119,"l4_proto":"tcp","ndpi": {"proto":"Starcraft","category":"Game"}}
+0392{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZNAAIAGHCfAqAFkUO+6Gg2+AFAFq5TN4hB8\/lAQ+OniPgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGertQ77oVwKgBZABQDb8Q\/FwJfHOL6GASOQgOjQAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoREtAAIAG6XPAqAFkUO+6FQ2\/AFB8c4voEPxcClAQ+vBkYQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":254,"pkt":"hCYVPnXEIImEa8W6CABFAADwRExAAIAG6KrAqAFkUO+6FQ2\/AFB8c4voEPxcClAY+vB9RQAAR0VUIC9zZXJ2aWNlL3MyL2FsZXJ0L2VuLWdiIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IGV1LmxhdW5jaGVyLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vbnlkdXMuYmF0dGxlLm5ldC9TMi9lbkdCL2NsaWVudC9hbGVydD9idWlsZD1lbkdCJnRhcmdldFJlZ2lvbj1FVQ0KDQo=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1437389982269,"flow_last_seen":1437389982327,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":20,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3519,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"eu.launcher.battle.net","url":"eu.launcher.battle.net\/service\/s2\/alert\/en-gb","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoalVAADIGxvPV+H+CwKgBZARfDb3bZ8BFBdN121AQFtBYBQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1396{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":797,"pkt":"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","pkt_caplen":797,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoZsJAAIAGfIbAqAFk1fh\/gg29BF8F03Xb22fDLFAQfRnu1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAogR1AADMG+aFQ77oVwKgBZABQDb8Q\/FwKfHOMsFAQPLgh0gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0746{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":317,"pkt":"IImEa8W6hCYVPnXECABFAAEvgR5AADMG+JlQ77oVwKgBZABQDb8Q\/FwKfHOMsFAYPLinpQAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjQyIEdNVA0KU2VydmVyOiBBcGFjaGUNClgtRnJhbWUtT3B0aW9uczogU0FNRU9SSUdJTg0KTGFzdC1Nb2RpZmllZDogV2VkLCAwOCBKdWwgMjAxNSAwNjowNjowOSBHTVQNCkVUYWc6ICI3MGFiMThiNy0wLTUxYTU2ZWY1ZTU2NDAiDQpBY2NlcHQtUmFuZ2VzOiBieXRlcw0KQ29udGVudC1MZW5ndGg6IDANCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOA0KDQo=","pkt_caplen":317,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRE1AAIAG6XHAqAFkUO+6FQ2\/AFB8c4ywEPxdEVAR+eljmAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZdAAIAGHCPAqAFkUO+6Gg2+AFAFq5TN4hB8\/lAR+OniPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo0FxAADMGql1Q77oawKgBZABQDb7iEHz+BauUzlARPLiebgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZhAAIAGHCLAqAFkUO+6Gg2+AFAFq5TO4hB8\/1AQ+OniPAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAogR9AADMG+Z9Q77oVwKgBZABQDb8Q\/F0RfHOMsVARPLggyQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFBAAIAG6W7AqAFkUO+6FQ2\/AFB8c4yxEPxdElAQ+eljlwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":234,"pkt":"hCYVPnXEIImEa8W6CABFAADcZsNAAIAGe9HAqAFk1fh\/gg29BF8F03Xb22fDLFAYfRn9iQAAQgixAem1LITtiEPD549vSYy29271Ytl4oymZHgwghB1nnmgXZCDl05T\/TF\/eVyyeVMOabETnHPH0zK+F3oR6zbY5rhV0yDqJ4w\/5Bhx0Xa5BlsLHO\/bASH7s2zGX93pqJNxEdIpEiivLLosi\/h7Lhvuq+7R2D64lzjnj68eaQXScktbopFcq9InXNTiNeC\/iskcAZaDqzxPROph+\/bX8H3fQXF3uTnOCDclEkDq7tu5A1p8z","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":317,"pkt":"IImEa8W6hCYVPnXECABFAAEvaldAADIGxerV+H+CwKgBZARfDb3bZ8MsBdN2j1AYGSC7cwAAQhBhdXRoAABFVY6G+90e5RUxXp4+G0ebeIneHs7aBwPZh2+UQc5Nk0V2LAECqaEl\/4aw4jJEDh\/EA7FbMyONe3T+ElShY02rk6VlVeTrv94VRGT6PgCDnPQL0UHOeNgYhGRwXE4kEk9cA\/9p9bqJbEtbnbMWB5Z21Awh0yu1PA77\/N8dtWS\/6Ysv\/TrRwPEAFtFngIhUSVE09CNWKRV0y9G1hcQkKvxbKriLJl8iK7FJG7Yj7UQU\/oljHfyFdZRAzK60sJeK3pC5TXx2MwZNOk85J1d4B0tRg+HV\/z5hdXRoAABFVV4pjlMGmK+QXhJH5R7wsQmzUqwxDOeAKh9jYT25gO0XAAA=","pkt_caplen":317,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoZsRAAIAGfITAqAFk1fh\/gg29BF8F03aP22fEM1AQfBLuIAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":249,"pkt":"hCYVPnXEIImEa8W6CABFAADrZsVAAIAGe8DAqAFk1fh\/gg29BF8F03aP22fEM1AYfBJEqQAAQgjAAQAAABcAAABZS0dSOOGwo0VHUEMoFYKIR05MVe6rUoFHTkxT4FhQdEVNTkPiTrnRRU1OVV\/E50pPQ1RVO+LoFUNSQUOvqAw1VkVSQ8js5dFMVkxDiaUMM01FTVBfX4dDRVpTUF9fh0NSRVZPxpzqLkFSVkMekhsYQ1RGQwVnIFdEVEZDBuNB2kNGRUMcpww0REZFQybzendEUkJDAygNi05FVkPmM7EjRU1OQfYQRfZDU0RBogy8zUNBTQCYwVOh","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoalhAADIGxvDV+H+CwKgBZARfDb3bZ8QzBdN3UlAQHVBMIAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":122,"pkt":"IImEa8W6hCYVPnXECABFAABsallAADIGxqvV+H+CwKgBZARfDb3bZ8QzBdN3UlAYHVD1UAAAQIAAA6nAAb68IAAAAfQGAE1hdHRlbwZCcmFjY2kHZR2cAgAAAAAAAAAAAgoxMjQwNjcyMjgjMQAAAAAAAAAAAAAAAAA=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":56,"pkt":"hCYVPnXEIImEa8W6CABFAAAqZsZAAIAGfIDAqAFk1fh\/gg29BF8F03dS22fEd1AYe86oUgAARQE=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":77,"pkt":"hCYVPnXEIImEa8W6CABFAAA\/ZsdAAIAGfGrAqAFk1fh\/gg29BF8F03dU22fEd1AYe84vwAAAR+0eDqB+Q6jkKGsdpNkL4gbT05i26+I=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1437389982769,"flow_last_seen":1437389982769,"flow_tot_l4_data_len":10,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"5.42.180.154","src_port":53146,"dst_port":1119,"l4_proto":"udp"}
+0379{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":44,"pkt":"hCYVPnXEIImEa8W6CABFAAAeGS0AAIARpdHAqAFkBSq0ms+aBF8ACqcOCQE=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1437389982769,"flow_last_seen":1437389982769,"flow_tot_l4_data_len":10,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"62.115.246.51","src_port":53146,"dst_port":1119,"l4_proto":"udp"}
+0379{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":44,"pkt":"hCYVPnXEIImEa8W6CABFAAAeFBMAAIARMAnAqAFkPnP2M8+aBF8ACiwrCQI=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1437389982782,"flow_last_seen":1437389982782,"flow_tot_l4_data_len":9,"flow_min_l4_data_len":9,"flow_max_l4_data_len":9,"flow_avg_l4_data_len":9,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.212","src_port":6113,"dst_port":1119,"l4_proto":"udp"}
+0380{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":43,"pkt":"hCYVPnXEIImEa8W6CABFAAAdK4EAAIAR93XAqAFk1fh\/1BfhBF8ACcrCAQ==","pkt_caplen":43,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAeAABAADYRyP4FKrSawKgBZARfz5oACqYOCgEAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAeAABAADcRTRw+c\/YzwKgBZARfz5oACisrCgIAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAjAABAADMRL\/HV+H\/UwKgBZARfF+EAD6ZYAl05\/GkEgAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1437389982884,"flow_last_seen":1437389982884,"flow_tot_l4_data_len":9,"flow_min_l4_data_len":9,"flow_max_l4_data_len":9,"flow_avg_l4_data_len":9,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.166","src_port":6113,"dst_port":1119,"l4_proto":"udp"}
+0380{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":43,"pkt":"hCYVPnXEIImEa8W6CABFAAAdDfMAAIARFTLAqAFk1fh\/phfhBF8ACcjwAw==","pkt_caplen":43,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389982,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAjAABAADMRMB\/V+H+mwKgBZARfF+EAD6SGBF05\/GkEgAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1437389983663,"flow_last_seen":1437389983663,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3521,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EZpAAIAGHBTAqAFkUO+6Gg3BAFD6MpY\/AAAAAIACIADjdgAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDcFck85k+jKWQGASOQjIewAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZtAAIAGHB\/AqAFkUO+6Gg3BAFD6MpZAXJPOZVAQ+vAeUAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":193,"pkt":"hCYVPnXEIImEa8W6CABFAACzEZxAAIAGG5PAqAFkUO+6Gg3BAFD6MpZAXJPOZVAY+vBVyQAAR0VUIC9TMi9lbkdCL2NsaWVudC9yZWdpb25zP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IG55ZHVzLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQoNCg==","pkt_caplen":193,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1437389983663,"flow_last_seen":1437389983723,"flow_tot_l4_data_len":235,"flow_min_l4_data_len":20,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3521,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/regions?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0400{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoioNAADMG8DZQ77oawKgBZABQDcFck85l+jKWy1AQPLjb\/QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1081{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":569,"pkt":"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","pkt_caplen":569,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1437389983788,"flow_last_seen":1437389983788,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3522,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0RFRAAIAG6V7AqAFkUO+6FQ3CAFAtDsyVAAAAAIACIAB6SQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEZ5AAIAGHBzAqAFkUO+6Gg3BAFD6MpbLXJPQaFAQ+O0dxQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGertQ77oVwKgBZABQDcLXOt3ELQ7MlmASOQjVRgAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFZAAIAG6WjAqAFkUO+6FQ3CAFAtDsyW1zrdxVAQ+vArGwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":267,"pkt":"hCYVPnXEIImEa8W6CABFAAD9RFdAAIAG6JLAqAFkUO+6FQ3CAFAtDsyW1zrdxVAY+vCB8gAAR0VUIC9zZXJ2aWNlL3MyL3JlZ2lvbnN4bWwvcmVnaW9ucy54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogZXUubGF1bmNoZXIuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9ueWR1cy5iYXR0bGUubmV0L1MyL2VuR0IvY2xpZW50L3JlZ2lvbnM\/YnVpbGQ9ZW5HQiZ0YXJnZXRSZWdpb249RVUNCg0K","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1437389983788,"flow_last_seen":1437389983846,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3522,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"eu.launcher.battle.net","url":"eu.launcher.battle.net\/service\/s2\/regionsxml\/regions.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoAVhAADMGeWdQ77oVwKgBZABQDcLXOt3FLQ7Na1AQPLjofgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXcAVlAADMGc7JQ77oVwKgBZABQDcLXOt3FLQ7Na1AQPLir1wAASFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjQzIEdNVA0KU2VydmVyOiBBcGFjaGUNClgtRnJhbWUtT3B0aW9uczogU0FNRU9SSUdJTg0KTGFzdC1Nb2RpZmllZDogVGh1LCAwNiBGZWIgMjAxNCAyMzo0NzowNSBHTVQNCkVUYWc6ICJlMDU2LTljYS00ZjFjNTdkOWFmMDQwIg0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCkNvbnRlbnQtTGVuZ3RoOiAyNTA2DQpWYXJ5OiBBY2NlcHQtRW5jb2RpbmcNCkNvbnRlbnQtVHlwZTogYXBwbGljYXRpb24veG1sDQoNCjwhLS0gVGhpcyBmaWxlIHNwZWNpZmllcyB3aGF0IHJlZ2lvbnMgdGhlIFN0YXJjcmFmdCAyIGNsaWVudCBjYW4gY29ubmVjdCB0by4gRWFjaCBub2RlIGhhcyB0aGUgcG9zc2liaWxpdHkgb2YgNCBhdHRyaWJ1dGVzOgogICAgICAgICogZGlzcGxheW5hbWUgLSBUaGlzIHNwZWNpZmllcyB0aGUgc3RyaW5nIHRoYXQgd2lsbCBiZSBkaXNwbGF5ZWQgaW4gdGhlIGNsaWVudC4gSXQgaXMgaW50ZW5kZWQKICAgICAgICAgICAgICAgIHRvIGJlIGEgTDEwTiBzdHJpbmcgaWRlbnRpZmllciAoaWYgdGhlcmUgaXMgbm8gY29ycmVzcG9uZGluZyBMMTBOIHN0cmluZyB0aGVuIHRoZSByYXcgc3RyaW5nCiAgICAgICAgICAgICAgICBpdHNlbGYgd2lsbCBiZSBkaXNwbGF5ZWQpCiAgICAgICAgKiBob3N0bmFtZSAtIHRoZSByZWdpb24vaG9zdCB0byBjb25uZWN0IHRvLiBUaGlzIHdpbGwgYmUgZ2l2ZW4gdG8gZGFyayBwb3J0YWwgYW5kIGlzIHR5cGljYWxseQogICAgICAgICAgICAgICAgdGhlIHN0cmluZyBwcmVwZW5kZWQgdG8gImxvZ29uLmJhdHRsZS5uZXQiLiBJbiBkZWJ1ZyBidWlsZHMsIHRoaXMgY2FuIGJlIGEgZnVsbHkgcXVhbGlmaWVkCiAgICAgICAgICAgICAgICBhZGRyZXNzIG9yIGlwLgogICAgICAgICogYWxsb3dlZFByb2R1Y3RMb2NhbGVzIC0gYSBjb21tYSBkZWxpbWl0ZWQgbGlzdCBvZiBwcm9kdWN0IGxvY2FsZXMgZm9yIHdoaWNoIHRoZSByZWdpb24gaXMgYQogICAgICAgICAgICAgICAgdmFsaWQgb3B0aW9uLiBPbmx5IGNsaWVudHMgd2l0aCBvbmUgb2YgdGhlIGxpc3RlZCBwcm9kdWN0IGxvY2FsZXMgd2lsbCBiZSBhYmxlIHRvIGNvbm5lY3QgdG8KICAgICAgICAgICAgICAgIHRoZSBzcGVjaWZpZWQgcmVnaW9uLiBJZiAnYWxsJyBpcyBzcGVjaWZpZWQgdGhlbiB0aGUgcmVnaW9uIGlzIHZhbGlkIGZvciBhbGwgbG9jYWxlcwogICAgICAgICogbG9jYWxlc1RoYXREZWZhdWx0VG9UaGlzUmVnaW9uIC0gYSBjb21tYSBkZWxpbWl0ZWQgbGlzdCBvZiBwcm9kdWN0IGxvY2FsZXMgZm9yIHdoaWNoIHRoZSByZWdpb24KICAgICAgICAgICAgICAgIGlzIHRoZSBkZWZhdWx0LiBBIHByb2R1Y3QgbG9jYWxlIHNob3VsZCBub3QgYXBwZWFyIGluIHRoaXMgbGlzdCBpbiBtb3JlIHRoYW4gMSByZWdpb24uCiAgICAgICAgKiBpc0JldGFSZWdpb24gLSBpZiBzZXQgdG8gJ3RydWUnLCA=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2159{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":1377,"pkt":"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","pkt_caplen":1377,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFhAAIAG6WbAqAFkUO+6FQ3CAFAtDs1r1zropFAQ+vAfZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFlAAIAG6WXAqAFkUO+6FQ3CAFAtDs1r1zropFAR+vAfZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEaNAAIAGHBfAqAFkUO+6Gg3BAFD6MpbLXJPQaFAR+O0dxAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoAVtAADMGeWRQ77oVwKgBZABQDcLXOuikLQ7NbFARPLjdnQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoRFtAAIAG6WPAqAFkUO+6FQ3CAFAtDs1s1zropVAQ+vAfZQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoioVAADMG8DRQ77oawKgBZABQDcFck9Bo+jKWzFARPLjZ+AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389983,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEaVAAIAGHBXAqAFkUO+6Gg3BAFD6MpbMXJPQaVAQ+O0dwwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389984,"pkt_len":83,"pkt":"IImEa8W6hCYVPnXECABFAABFqPIAADURRNGtwigWwKgBZAG70UAAMT09EMsFZOyxDrjYRG2y0ipp9PqccSz6JxbGFLjQufRr6ohrr0sYBVOehSg=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389984,"pkt_len":83,"pkt":"hCYVPnXEIImEa8W6CABFAABFDEYAAIARln3AqAFkrcIoFtFAAbsAMRWsDBnPzxTN69maLBrknSaakXZhGjrjRS\/nnffiCjL5Ti69F2I4aVohCWc=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1437389985308,"flow_last_seen":1437389985308,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3523,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EaZAAIAGHAjAqAFkUO+6Gg3DAFAjjlJ6AAAAAIACIAD93gAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1437389985320,"flow_last_seen":1437389985320,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3524,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0EadAAIAGHAfAqAFkUO+6Gg3EAFAnGJJ3AAAAAIACIAC6VgAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDcNyhhfoI45Se2ASOQiDbQAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEahAAIAGHBLAqAFkUO+6Gg3DAFAjjlJ7coYX6VAQ+vDZQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0590{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":201,"pkt":"hCYVPnXEIImEa8W6CABFAAC7EalAAIAGG37AqAFkUO+6Gg3DAFAjjlJ7coYX6VAY+vDEMQAAR0VUIC9TMi9lbkdCL2NsaWVudC9mZWVkL2xpdmUtZXZlbnQ\/YnVpbGQ9ZW5HQiZ0YXJnZXRSZWdpb249RVUgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogbnlkdXMuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNCg0K","pkt_caplen":201,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":39,"flow_packet_id":4,"flow_first_seen":1437389985308,"flow_last_seen":1437389985373,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":20,"flow_max_l4_data_len":167,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3523,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/feed\/live-event?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGerZQ77oawKgBZABQDcQgMkzhJxiSeGASOQhdQAAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEapAAIAGHBDAqAFkUO+6Gg3EAFAnGJJ4IDJM4lAQ+vCzFAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":199,"pkt":"hCYVPnXEIImEa8W6CABFAAC5EatAAIAGG37AqAFkUO+6Gg3EAFAnGJJ4IDJM4lAY+vAQTgAAR0VUIC9TMi9lbkdCL2NsaWVudC9mZWVkL2hvbWVwYWdlP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IG55ZHVzLmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQoNCg==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1437389985320,"flow_last_seen":1437389985385,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":20,"flow_max_l4_data_len":165,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3524,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"nydus.battle.net","url":"nydus.battle.net\/S2\/enGB\/client\/feed\/homepage?build=enGB&targetRegion=EU","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoYVZAADMGGWRQ77oawKgBZABQDcNyhhfpI45TDlAQPLiW5wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1049{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":545,"pkt":"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","pkt_caplen":545,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1437389985434,"flow_last_seen":1437389985434,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3525,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0AOhAAIAGLLjAqAFkUO+6KA3FAFDb6m0AAAAAAIACIAAq7AAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo4f1AADMGmLxQ77oawKgBZABQDcQgMkziJxiTCVAQPLhwvAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1061{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":553,"pkt":"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","pkt_caplen":553,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1437389985446,"flow_last_seen":1437389985446,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3526,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0AOlAAIAGLLfAqAFkUO+6KA3GAFDf523sAAAAAIACIAAmAgAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEa5AAIAGHAzAqAFkUO+6Gg3DAFAjjlMOcoYZ1FAQ+QXYrgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEa9AAIAGHAvAqAFkUO+6Gg3EAFAnGJMJIDJO1VAQ+P2ygwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGeqhQ77oowKgBZABQDcUKff272+ptAWASOQgysAAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAOxAAIAGLMDAqAFkUO+6KA3FAFDb6m0BCn39vFAQ+vCIhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":263,"pkt":"hCYVPnXEIImEa8W6CABFAAD5AO1AAIAGK+7AqAFkUO+6KA3FAFDb6m0BCn39vFAY+vDrAwAAR0VUIC9zYzIvZW4tZ2IvZGF0YS9saXZlLWV2ZW50cy54bWwgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogZXUuYmF0dGxlLm5ldA0KQWNjZXB0OiAqLyoNClJlZmVyZXI6IGh0dHA6Ly9ueWR1cy5iYXR0bGUubmV0L1MyL2VuR0IvY2xpZW50L2ZlZWQvbGl2ZS1ldmVudD9idWlsZD1lbkdCJnRhcmdldFJlZ2lvbj1FVQ0KDQo=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1437389985434,"flow_last_seen":1437389985495,"flow_tot_l4_data_len":305,"flow_min_l4_data_len":20,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3525,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"eu.battle.net","url":"eu.battle.net\/sc2\/en-gb\/data\/live-events.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAsAABAADMGeqhQ77oowKgBZABQDcb00A3Z3+dt7WASOQgzVQAAAgQFtAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAO5AAIAGLL7AqAFkUO+6KA3GAFDf523t9NAN2lAQ+vCJKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":265,"pkt":"hCYVPnXEIImEa8W6CABFAAD7AO9AAIAGK+rAqAFkUO+6KA3GAFDf523t9NAN2lAY+vCXMwAAR0VUIC9zYzIvZW4tZ2IvZGF0YS9jbGllbnQtaG9tZXBhZ2UueG1sIEhUVFAvMS4xDQpVc2VyLUFnZW50OiBCYXR0bGUubmV0IFdlYiBDbGllbnQNCkhvc3Q6IGV1LmJhdHRsZS5uZXQNCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vbnlkdXMuYmF0dGxlLm5ldC9TMi9lbkdCL2NsaWVudC9mZWVkL2hvbWVwYWdlP2J1aWxkPWVuR0ImdGFyZ2V0UmVnaW9uPUVVDQoNCg==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0683{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1437389985446,"flow_last_seen":1437389985508,"flow_tot_l4_data_len":307,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3526,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"eu.battle.net","url":"eu.battle.net\/sc2\/en-gb\/data\/client-homepage.xml","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoxexAADMGtL9Q77oowKgBZABQDcUKff282+pt0lAQPLhF7AAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXcxe5AADMGrwlQ77oowKgBZABQDcUKfgNw2+pt0lAQPLjwkQAAMTY6MzM6MjQuNzA1WjwvdXBkYXRlZD48aWQ+MTk4MjU3NjQ8L2lkPjxsaW5rIGhyZWY9Imh0dHA6Ly93Y3MuYmF0dGxlLm5ldC8iLz48c3VtbWFyeSB0eXBlPSJodG1sIj5XYXRjaCBMaXZlIE5vdyA8L3N1bW1hcnk+PGNvbnRlbnQgdHlwZT0iaHRtbCI+PC9jb250ZW50PjxpbWFnZSB4bWxucz0iaHR0cDovL3d3dy5iYXR0bGUubmV0L25zL3NjMi9uZXdzIiB0eXBlPSJjb250ZW50IiBocmVmPSJodHRwOi8vYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0L2Ntcy9ibmV0X3RodW1ibmFpbC91My9VMzdWMkVWRDUxOFQxNDM2ODI1Nzk1MTMwLmpwZyIvPjwvZW50cnk+PGVudHJ5Pjx0aXRsZSB0eXBlPSJ0ZXh0Ij4gPC90aXRsZT48cHVibGlzaGVkPjIwMTUtMDctMTdUMDE6MzA6MDAuMDAwWjwvcHVibGlzaGVkPjx1cGRhdGVkPjIwMTUtMDctMTVUMTY6MzQ6MTIuODk3WjwvdXBkYXRlZD48aWQ+MTk4MTY3NjE8L2lkPjxsaW5rIGhyZWY9Imh0dHA6Ly93Y3MuYmF0dGxlLm5ldC8iLz48c3VtbWFyeSB0eXBlPSJodG1sIj5XYXRjaCBMaXZlIE5vdyA8L3N1bW1hcnk+PGNvbnRlbnQgdHlwZT0iaHRtbCI+PC9jb250ZW50PjxpbWFnZSB4bWxucz0iaHR0cDovL3d3dy5iYXR0bGUubmV0L25zL3NjMi9uZXdzIiB0eXBlPSJjb250ZW50IiBocmVmPSJodHRwOi8vYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0L2Ntcy9ibmV0X3RodW1ibmFpbC80ai80SjdPVUlJU0NMVFExNDM2OTQzNjI5MjEwLmpwZyIvPjwvZW50cnk+PGVudHJ5Pjx0aXRsZSB0eXBlPSJ0ZXh0Ij4gPC90aXRsZT48cHVibGlzaGVkPjIwMTUtMDctMTZUMTM6MzA6MDAuMDAwWjwvcHVibGlzaGVkPjx1cGRhdGVkPjIwMTUtMDctMTVUMTY6MzM6MzMuMDE4WjwvdXBkYXRlZD48aWQ+MTk4MjU3NjM8L2lkPjxsaW5rIGhyZWY9Imh0dHA6Ly93Y3MuYmF0dGxlLm5ldC8iLz48c3VtbWFyeSB0eXBlPSJodG1sIj5XYXRjaCBMaXZlIE5vdyA8L3N1bW1hcnk+PGNvbnRlbnQgdHlwZT0iaHRtbCI+PC9jb250ZW50PjxpbWFnZSB4bWxucz0iaHR0cDovL3d3dy5iYXR0bGUubmV0L25zL3NjMi9uZXdzIiB0eXBlPSJjb250ZW50IiBocmVmPSJodHRwOi8vYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0L2Ntcy9ibmV0X3RodW1ibmFpbC91My9VMzdWMkVWRDUxOFQxNDM2ODI1Nzk1MTMwLmpwZyIvPjwvZW50cnk+PGVudHJ5Pjx0aXRsZSB0eXBlPSJ0ZXh0Ij4gPC90aXRsZT48cHVibGlzaGVkPjIwMTUtMDYtMjhUMDY6MDA6MDAuMDAwWjwvcHVibGlzaGVkPjx1cGRhdGVkPjIwMTUtMDYtMTlUMTU6NTc6NTguMzM2WjwvdXBkYXRlZD48aWQ+MTk4MDMzODQ8L2lkPjxsaW5rIGhyZWY9Imh0dHA6Ly9iaXQubHkvR1NMRU5VU0VVIi8+PHN1bW1hcnkgdHlwZT0iaHRtbCI+V2F0Y2ggTGl2ZSBOb3cgPC9zdW1tYXJ5Pjxjb250ZW50IHR5cGU9Imh0bWwiPjwvY29udGVudD48aW1hZ2UgeG1sbnM9Imh0dHA6Ly93d3cuYmF0dGxlLm5ldC9ucy9zYzIvbmU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPBAAIAGLLzAqAFkUO+6KA3FAFDb6m3SCn4JJFAQ+vB8SwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":180,"pkt":"IImEa8W6hCYVPnXECABFAACmxe9AADMGtD5Q77oowKgBZABQDcUKfgkk2+pt0lAYPLiK4gAAd3MiIHR5cGU9ImNvbnRlbnQiIGhyZWY9Imh0dHA6Ly9ibmV0Y21zdXMtYS5ha2FtYWloZC5uZXQvY21zL2JuZXRfdGh1bWJuYWlsL2djL0dDRjFESE1IOEZEWTE0MzQ2NzAwMzc0MzQuanBnIi8+PC9lbnRyeT48L2ZlZWQ+","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEbVAAIAGHAXAqAFkUO+6Gg3DAFAjjlMOcoYZ1FAR+QXYrQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPJAAIAGLLrAqAFkUO+6KA3FAFDb6m3SCn4JolAR+nJ8SgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAolZxAADMG5Q9Q77oowKgBZABQDcb00A3a3+duwFAQPLhGjwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2251{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1445,"pkt":"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","pkt_caplen":1445,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPNAAIAGLLnAqAFkUO+6KA3GAFDf527A9NAY\/VAQ+vB9MwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEbhAAIAGHALAqAFkUO+6Gg3EAFAnGJMJIDJO1VAR+P2yggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPVAAIAGLLfAqAFkUO+6KA3GAFDf527A9NAY\/VAR+vB9MgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoxfBAADMGtLtQ77oowKgBZABQDcUKfgmi2+pt01ARPLg6BAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPZAAIAGLLbAqAFkUO+6KA3FAFDb6m3TCn4Jo1AQ+nJ8SQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoYVhAADMGGWJQ77oawKgBZABQDcNyhhnUI45TD1ARPLiU+gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEbtAAIAGG\/\/AqAFkUO+6Gg3DAFAjjlMPcoYZ1VAQ+QXYrAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAolZ9AADMG5QxQ77oowKgBZABQDcb00Bj93+duwVARPLg7agAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoAPhAAIAGLLTAqAFkUO+6KA3GAFDf527B9NAY\/lAQ+vB9MQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo4f9AADMGmLpQ77oawKgBZABQDcQgMk7VJxiTClARPLhuxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoEb1AAIAGG\/3AqAFkUO+6Gg3EAFAnGJMKIDJO1lAQ+P2ygQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1437389985821,"flow_last_seen":1437389985821,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp"}
+0432{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":84,"pkt":"hCYVPnXEIImEa8W6CABFAABGX2kAAIARVovAqAFkwKgB\/tisADUAMndemisBAAABAAAAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1437389985821,"flow_last_seen":1437389985821,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"bnetcmsus-a.akamaihd.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0432{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":84,"pkt":"hCYVPnXEIImEa8W6CABFAABGX2oAAIARVorAqAFkwKgB\/tisADUAMndemisBAAABAAAAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":194,"pkt":"IImEa8W6hCYVPnXECABFAAC0AABAAEARtYbAqAH+wKgBZAA12KwAoDk1miuBgAABAAQAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQABwAwABQABAAAAGwAlC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAllZGdlc3VpdGXAIcA2AAUAAQAAUvQAEQVhMTk2MQFnBmFrYW1hacAhwGcAAQABAAAAEwAEAuQucMBnAAEAAQAAABMABALkLms=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1437389985821,"flow_last_seen":1437389985882,"flow_tot_l4_data_len":260,"flow_min_l4_data_len":50,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"bnetcmsus-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"2.228.46.112"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1437389985891,"flow_last_seen":1437389985891,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3527,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LN5AAIAG2oXAqAFkAuQucA3HAFCKhzd4AAAAAIACIACLmQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1437389985892,"flow_last_seen":1437389985892,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3528,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LN9AAIAG2oTAqAFkAuQucA3IAFBzB1TrAAAAAIACIACFpQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1437389985898,"flow_last_seen":1437389985898,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3529,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOBAAIAG2oPAqAFkAuQucA3JAFBxSWFcAAAAAIACIAB68QAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1437389985898,"flow_last_seen":1437389985898,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3530,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOFAAIAG2oLAqAFkAuQucA3KAFB0cH\/ZAAAAAIACIABZTAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":194,"pkt":"IImEa8W6hCYVPnXECABFAAC0AABAAEARtYbAqAH+wKgBZAA12KwAoI8HmiuBgAABAAQAAAAAC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAAAAQABwAwABQABAAAASwAlC2JuZXRjbXN1cy1hCGFrYW1haWhkA25ldAllZGdlc3VpdGXAIcA2AAUAAQAAUJ4AEQVhMTk2MQFnBmFrYW1hacAhwGcAAQABAAAAEwAEAuQua8BnAAEAAQAAABMABALkLnA=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1437389985821,"flow_last_seen":1437389985912,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":50,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"bnetcmsus-a.akamaihd.net","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"2.228.46.107"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1437389985923,"flow_last_seen":1437389985923,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3531,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOJAAIAG2oHAqAFkAuQucA3LAFDKy4tMAAAAAIACIAD3fAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDccmQrPVioc3eYASOQiYawAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLONAAIAG2ozAqAFkAuQucA3HAFCKhzd5JkKz1lAQAQARRAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0593{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":203,"pkt":"hCYVPnXEIImEa8W6CABFAAC9LORAAIAG2fbAqAFkAuQucA3HAFCKhzd5JkKz1lAYAQD4IwAAR0VUIC9jbXMvYm5ldF90aHVtYm5haWwvZ2MvR0NGMURITUg4RkRZMTQzNDY3MDAzNzQzNC5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1437389985891,"flow_last_seen":1437389985925,"flow_tot_l4_data_len":253,"flow_min_l4_data_len":20,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3527,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_thumbnail\/gc\/GCF1DHMH8FDY1434670037434.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1437389985925,"flow_last_seen":1437389985925,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3532,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOVAAIAG2n7AqAFkAuQucA3MAFCmW5TdAAAAAIACIAASWwAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1437389985925,"flow_last_seen":1437389985925,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3533,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LOZAAIAG2n3AqAFkAuQucA3NAFAjKxvdAAAAAIACIAAOiwAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDci+ghTYcwdU7IASOQiZNAAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOdAAIAG2ojAqAFkAuQucA3IAFBzB1TsvoIU2VAQAQASDQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcngMONLcUlhXYASOQieXgAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOhAAIAG2ofAqAFkAuQucA3JAFBxSWFd4DDjTFAQAQAXNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcrPCIDOdHB\/2oASOQjwXgAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOlAAIAG2obAqAFkAuQucA3KAFB0cH\/azwiAz1AQAQBpNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":200,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LOpAAIAG2fPAqAFkAuQucA3JAFBxSWFd4DDjTFAYAQDm9QAAR0VUIC9jbXMvYm5ldF9oZWFkZXIveWYvWUY5UFJDWlhKVlBaMTQyODU5MTI1NDMxNy5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1437389985898,"flow_last_seen":1437389985931,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3529,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/yf\/YF9PRCZXJVPZ1428591254317.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0590{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":200,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LOtAAIAG2fLAqAFkAuQucA3KAFB0cH\/azwiAz1AYAQBOfQAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvMHgvMFhRMVZYUjhaUjI3MTQzNDEyODUyNzQ3MS5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":47,"flow_packet_id":4,"flow_first_seen":1437389985898,"flow_last_seen":1437389985945,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3530,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/0x\/0XQ1VXR8ZR271434128527471.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0407{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcsAWb5HysuLTYASOQgfxgAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLOxAAIAG2oPAqAFkAuQucA3LAFDKy4tNAFm+SFAQAQCYngAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0593{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":203,"pkt":"hCYVPnXEIImEa8W6CABFAAC9LO1AAIAG2e3AqAFkAuQucA3IAFBzB1TsvoIU2VAYAQD34AAAR0VUIC9jbXMvYm5ldF90aHVtYm5haWwvNGovNEo3T1VJSVNDTFRRMTQzNjk0MzYyOTIxMC5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1437389985892,"flow_last_seen":1437389985955,"flow_tot_l4_data_len":253,"flow_min_l4_data_len":20,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3528,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_thumbnail\/4j\/4J7OUIISCLTQ1436943629210.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0590{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":200,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LO5AAIAG2e\/AqAFkAuQucA3LAFDKy4tNAFm+SFAYAQCbwAAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvZmEvRkE1MTJJUFVOMFNFMTQzNjk3OTkzNjM4OC5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1437389985923,"flow_last_seen":1437389985955,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3531,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/fa\/FA512IPUN0SE1436979936388.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0407{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDcy5z5mcpluU3oASOQil2AAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLO9AAIAG2oDAqAFkAuQucA3MAFCmW5Teuc+ZnVAQAQAesQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAodyJAADkG100C5C5wwKgBZABQDccmQrPWioc4DlAQAeoPxQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXcdyRAADkG0ZcC5C5wwKgBZABQDccmQrmKioc4DlAQAeqLWAAAAgMEBgEHCAAJCgsBAAEFAQEBAQEAAAAAAAAAAAMAAQIEBQYHCAkKEAACAQIEBAQDBQYEBAAAAT0BAgMRBAAhEgUxQRMGUWEiB3EyFIGRQiMI8KGxwVIV0TMkCeHxYhZyQxeCklM0JQqiY0SW1xgZGrJzNbUmJ0dXKMLSVNRFVZXVNkZWZnY3WOLkhtanKYNklKS0haW2d4eXtzhI2BEAAQMDAgMFBgQEBQIDAQIfARECAwAhBDESQVEFYXEiEwbwgZGhMgexwUIU0eFSI\/FiMxUIciSCkhai0kNTsmPTNFQlF8Jzk9SDo7NEdEVVGAni4yZktMQ1J6Q3\/9oADAMBAAIRAxEAPwD8Ef2nieZ8TjQqFZz8f3nlhLTWppiRzOFSGqVlWJ5mvxOHF7UxFZqcPTKaUrHPj48Th2rTipANRiYU0qVU8yfvOJBRT05qJyqc\/PDgVFEvWQPM\/ecPfhTKtKApzP3n\/HDqalWc\/E\/ef8cPTJXqnxP3n\/HCpJXuIoSSPif8cKkgpGg1qpI5cTT45EZ4ZOVJK9p\/qFfDMmjZZg\/DDd9RpLRKcx83DiwP7jiJHHjTgisFXAowDimXEU8MyTXDX43pLTLQQy8SdQ41JDDLxORH35YiWsdrSXlTH0kyV0N1E5oDRq8eFdJPwOYxHyng+FCzlT9ppojPS1VfMFWJGeRHpPqAz+\/EbmxsaVJZSDQsCcqUJI+FcNelSOfgR8f3YZDSpQdga1P34dedKl6lOeaN\/UGP2fCmHpV4tKwoW1AcDUE+Y1cSuHvSrwAHPjwBywqal5\/Z9tfvrhUq9hKaVewlNKsg+IrhLSrwHgdPKgBoQeIyw4BNKnlcnJsxlWpy8ASDWuJdlNS1XnGxU55Ell+IBzBIxB0bXFeNKx76UC1aEGlfmUkrnw8CDgLoSNKew4UoEk0DVP8A4I4gWluotStWC4GVW88+H21zw7WbgpplAslMnyJPjXiTg7QWhOFRr2JKacCsgEmmf34YlAp0pVI0VHEg+IP7vhgQkcCrTalSDG4Na6suR9Qz5ivDBRI12utJW8TekipIBJp\/P4eAwRFCinB5171fD7a\/vw6VIhe6lAk8z5jP\/DD1ClCuWf8AHw+7Cp6yBTmfvOFrSpX2nPxJI8OdcIXNIpSwoyzNeGmjMAOdCPwmnPEwOdNTgVuPLlWoJFMia0oa4ki6UN4vTRXS1DUAjI158xxFCKfbiBBAqQK17yqeXPLlhkJqVLHLDC1qZKUB58fjhEHWoOPCs8jSv34ipWh2pAr4n78OtIpS9R8\/3\/4YSGmtSqnxP3n\/ABw6UyilgHxP7\/354dKRNZp5n7z\/AI4SUy1kD4\/ef5nCpC5peFeiGvLWuRI+054klDIBqTFUGtSaKcjWh5V+I5YnGFcvKhjWkPVvxE5+Jz+PDEnVIVleNM6nzP8APEaZxtTyZiuf3k+OEbVA05T4\/ecIEqKakkDz+8\/4jB6QJNJUFnVTUioJ+A4n7MIHhxqRSp1CuYJ8BxoPt8hgy0MinFqa5n4VP28+WGIKVE6VmlBly5VwkqNLXxNfv\/48cTaLVIfKpCqeINPtPj\/ww51SpgAhaeAJ5niK5nEb09L0nKpbLPnhqVOKvKp+85fvwhTd9OAZ8\/vOJDWorTo1V4n7z8PPD2qJINLGo8z95\/4Yao8acC04k+PE\/wCOHF7inIQ04FK8mNfP+OeEAaG522lAHxP3\/tzwUXNBpQBPifIk0I8D5YSL2UyCq+wNlPJGRqR6yRUORJ41B5Kf4YqOBjJBuTRIxbbzppZAWJcUXwHNuOk14hsQ3GplhAUmlrKyko\/qANNJNTQ5rqyyIr92H3Xoa89aRJJ1DmFqq0qQaH+lQc+WGN6e1IFRTMilQACRkeWfHPDVGnA5rmzGnCpHHlyw4N6M4+AUUtnc0VtZrRkAag1c0J4AAcuOLLNAeyhSH+3RdhE=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPBAAIAG2n\/AqAFkAuQucA3HAFCKhzgOJkK\/PlAQAQAFRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPFAAIAG2n7AqAFkAuQucA3HAFCKhzgOJkLKplAQAQD53gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPJAAIAG2n3AqAFkAuQucA3HAFCKhzgOJkLWDlAQAQDudgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1437389985960,"flow_last_seen":1437389985960,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3534,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"hCYVPnXEIImEa8W6CABFAAA0LPVAAIAG2m7AqAFkAuQucA3OAFAbejKQAAAAAIACIAD\/hwAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":200,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LPdAAIAG2ebAqAFkAuQucA3MAFCmW5Teuc+ZnVAYAQBV1AAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvNzgvNzhYSDJVTlU0SllLMTQzNDU2MDU1MTY4Ny5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1437389985925,"flow_last_seen":1437389985961,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3532,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/78\/78XH2UNU4JYK1434560551687.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0407{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":66,"pkt":"IImEa8W6hCYVPnXECABFAAA0AABAADkGTmQC5C5wwKgBZABQDc1+R6dFIysb3oASOQjP5wAAAgQFtAEBBAIBAwMF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPpAAIAG2nXAqAFkAuQucA3NAFAjKxvefkenRlAQAQBIwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0589{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":200,"pkt":"hCYVPnXEIImEa8W6CABFAAC6LPtAAIAG2eLAqAFkAuQucA3NAFAjKxvefkenRlAYAQBEtgAAR0VUIC9jbXMvYm5ldF9oZWFkZXIvbWYvTUZUSDhUUzQySEtYMTQzMDE4Mzc3ODMxOS5qcGcgSFRUUC8xLjENClVzZXItQWdlbnQ6IEJhdHRsZS5uZXQgV2ViIENsaWVudA0KSG9zdDogYm5ldGNtc3VzLWEuYWthbWFpaGQubmV0DQpBY2NlcHQ6ICovKg0KDQo=","pkt_caplen":200,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1437389985925,"flow_last_seen":1437389985962,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3533,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"bnetcmsus-a.akamaihd.net","url":"bnetcmsus-a.akamaihd.net\/cms\/bnet_header\/mf\/MFTH8TS42HKX1430183778319.jpg","code":0,"content_type":"","user_agent":"Battle.net Web Client"}}
+0399{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoJ7VAADkGJrsC5C5wwKgBZABQDcngMONMcUlh71AQAeoVuwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXcJ7dAADkGIQUC5C5wwKgBZABQDcngMOkAcUlh71AQAepN6AAAJvDhYnKCwkNTk4SUxJXVlhgZsmNzg7PDNFRkdDV1hcXlWFmiRLRVZbU2VmZ2htYXN\/FGVyijpEWlJ5c4EQABAgMEBAcKBw0FBQcCBwABAgMAEQQhMRIFQVETBmGR0SKSFQdxgaGxMkJS0xQI8OHSI1OTFsFicqIzQ6NUlNRVGAmy4uNEF4IkRVYZ8cJzZHSkRsM0Y4OztMQldf\/aAAwDAQACEQMRAD8A\/COyngqS1KQlsqIDcjY2snYK1yPYfUrj0dFNZbwcZs+HdEXyEyMl2cOj4oPtQq+5Awa3RAxaoogYJs24Gg3B62DUZeIMRQCC7NmBFFIBr0UwSjLxEwoRDc6ekWwl+DHMuDtftqR47fWpnr7UfU55GZOVmYwiywSsEtR72karRaJKGVlymZqQJp0jT3uTiiRQLVFnx0SojiX2HK7ric8waEHKoIIoQcwcHN5WDdbbLviw8Ri0pqVLqQpFoMFW9Ng0+LwUnJ4NTlcOkaXB\/Q8TpyaJ05VHp2i0XBgN7nm77RCoktAo404Nik19kHIjI4Re7wWNPIdY+EjcQQSIif3eDgvkdB1RpZ4Dj8h2z3OM3GvcNO+40AdyQzWgfZrtQTkRtScj0Exs5RzsCxJV\/ARrHgmL0ki8FKlDUVEFqLTgksaNY1jWPEbDEpRpcnPggeocHDIBFt1HDtGlVHMsJp4DiQbviJBkIh23pNaiAI6T1Chw77PiHdQiIxcNKr0pcflp2OGdN3VxCL+spIRDfXRKJRJyDaskudWSuvAb2SJZm4SZG+wGUhLETOYAAkbCBYo4QFKNJV5UKRe0s2avK4DoOqRNh7xi0WdBjpaB6vFIyxMcl4Is+qYItaAQf0DwCmE6mhwymCTXL9GXxAHbTHdTQvVMN71ymYv1nuFpcRwTNbKWpCQQpp0ZtuClM0KAUPBhjmRhQkZ968cI1EXg6DIwNV5FtUFGv4CG\/L6wDUtgbkS4qEXu1PPW\/UsQUPBuMNXDeTRJIAUaLT+RUDiJjLCsc4SULCBr4J2yIkpM7SkpOmIMtpi+3M2KBkRqIsI0\/wDZFiM8vEJPixE1PTSuJTk04OOUTgm3y+J\/3uKeA4Z1KNUM6lh+3y9OX2uB6mOOTCO6lit39Dmy847QwtCURtcWWU220U0C5lndQ4KEnNRZkqy6k1w9GQTmQhRstV5qQDIC6wqKybT5tgvircyzBUJSSAFpMhpJSZ+Inii4m+XRr\/Y4z\/InDOpRFp1NDxHLn+5h62E6lEd1NDkcuP7nSa9h9vC9Sx3UoiJcyOXfB5ca\/dLASlqyXVRUBmN2K6csEUm6yatxLCpgLISZXyUZWcNuqK\/NsrwMOKGhKjxAwroHl+Zmg9EzPN01lWi2uE0Pu47avp4KznIgiocTqWrxmHZVlALLZ+9HiEShXLgj\/e49bFWclEGnJhCCuXNK\/a4+pw3qYQnU8NV8ujX+xx62O6mEd1NFPQ9Di984tQobQHI+hbPDiuNhFQibd3FvrqffBlhvLoCu0YgTlOJZssAsI1qPOSeEBKCBYQFTMwUxVtZcF1Ckg+SkTHCq3xARZLnL0\/2uPWwR1MItOpoYOcviNscV6MscMlEJ1NDB3l\/0ebJPZTC9Sw4ZPKK61\/p46csLj8GG27frs8zb9NQyn67cJat1oUrmECriupCVHoxFUZaUCy1RsA4TrlbIeUqVoSCdEBZlSFlFnlGxPdN3L3oc2blNHsNmt1pab4ogtJS5IIO864c3HFV6VqJUe04mbyTCJCffvPCdZN5Ok2wVTZHskhI0Qs5y+Rn8QMtmWJOpomOVQOd0CgV+IHaaY7qaO6qgc7oNIqeABTbljjk0Icqir7bpA6uuBv7LCTpy1rUjTlR4s15NUuSxTIoGaW67c1dKcQNZOl2SxOQussNksQM5kEEgWAG084FJFTSZZ7SvGfIHk8J0q7mgX64kLukHUCo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLPxAAIAG2nPAqAFkAuQucA3JAFBxSWHv4DDutFAQAQALPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXcJ7hAADkGIQQC5C5wwKgBZABQDcngMO60cUlh71AQAep4iwAAqKE9R3CMHdQgxe9RgwxXpZVPrCQfAcId3xCdRQ0c0ur9IT4KHDTu+IYciiL3e3utSG7RbI7ci9Sk74bIJRGZJIL7vUmookbVHIZAkAvZRzsCLVX8AGs+GQvUQbgFKTV1lBhUG0WrPgGs8GrWYUg6KRbWS2hHHedJXKlrFXHXDtUr6Q2AZDEqN3QkaeXhPwkLhIACJ2N3A2JXnSdcKO6ZCvKaA7QM8d1HEvU8oaL0ykA+J4MsMVk3BEZyuBc+0RLdGclzXEx47VN5ZBJqTQAAVJJOQAFSchgZ\/LA2MSrvhIDWSbABaTYLYEqaNLSSpZkBAJvTEq6K49wjGJABrGtaqbzg6FP0qO0I6OnPICqyYqJxCwTEtegk8B0DVabSAmsRlan5KWJJ0J0\/7XJxwTXYEgZNgY5eVwYrL4Gv2RSc9wU66Yh6sERHLgYGuWsjYgeGmIF5aIHcywCAPxCnwlvdWwhW6\/MqA0ldaBIUdqiogUGzw5YENEkS1XaL5yl3Z2d0SiowpKpC7SdA7+kw0bmQVJKHHmlIUKKQVpII8BOBmpxMHmyJEiFo8xqEr4iUiVE\/tUuJLjYHvCTmOw+ocWjInf8AD4XxyKlLPkqBTqmJjua+4e8dESmFebc4hLrcxrcV0lYBHYQaEYsGAFXWxdMZiyoTxjjlB5i8QBSs5gf0xHt4tWWeCD265j008Ygyxerb03COP6aj28WrNPwQe1X030iekOWG7j8KPJculmucRma5nMgrfQmPLp7\/AG7jgpQLA7CCKULby8JKlpFpF1wJ0E2EjVMaLwZJkO+phJ2jLiArSCoSV3bbDqPHMRJ7VqqzXBhTiZrUZxpRRJivONodaWMilQqR4CCQdoJGLChQl5MwCCLCDeDqPj1EEEEggm8oc3pXRPGkEXgkAjw+EWHQYksW8WZW6V3mGhJ2jzhsH6OLMUg1RYdZ0osDiOkOWDbN305kDeYWX90t\/CxKijOqHDM6b6RHSHLDa7o0reGWSNQw4FygqLtpuyJDJdjPUpvAFVFJUDRSTkoZHBLVDaCUzlbaOAizUZEiY1mAsxFJUpHzyUrTalQUmYPHaDpBsI7xh7pzVlknJkQLvPg2+920pE9pMlBYeSryX46yrxm1+uk1ScxnM5RpCsKbbAZaQDOUx3jI3GRldEuT7wMugoeUhLib7RhOpSTpB403HhmLd30t\/wAfQKD+62vh4cmgOqLtOY0v0qOkOWCbN90wgnd1BbwT\/dTNf5rDjlZPmmF9upTe4jpDlh67dtITosiDOvtslQ5ja2pcZclhSHG3AUqSoFVCCCQcMXkoWClSJg2EETBHCIauoo1CRcbIP3w5YjOi9R2jT893Q111LElx4ra39IXpUlpYftyCB5u64VU48feCTU1UjdVmd+gTdEEObApVORUkk4ioAgGZkCMJUBzpkgpOJSivDTZTUsMqNOtxBAtQZ3p9EmcsSfCmRlfFtMag0tl+E1t8PnjHwsWHU59E8Ri\/9opfpEdIcsF2dQaTFK6otvhMxj4eE6nV6J4jDvaKX00dIcsF2NQaRy\/Cm2fsyP8ADw05Mr0DxGE29N6aOkOWK5+WdM6Q5oxZ8bUVvc05zPQI113JbK0Rb5BbKmHVfGEJTJjoU2o08pCK5nEbmWhMklMioyFkipQSToRMnAkkqWuQShKUptMUKlMsVQUFpKHbDzhILA5ptVZiTZYL0p1xeTOoNG1H4W2r9nR\/h445Kv0FcRi92tP6aekOWCjOoNFZD53Wr9nRh+fwnUa\/QVxGE2lP6aeMcsFGtQaJyrrC0\/s+N9kwnUTn0auIwhcp\/STxiKm5yX\/SFsY5ea0iastbytFamtjs9AmsKpb7mV2yUo7rgoG25pcqTQbueWK3NsvTSth+oQoJQpMjPCAVHZzUSDzUhZURYSQLQJxT50WgEOpWgYFpJmQeao4DpssVOdt0X40=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2369{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLP1AAIAG2nLAqAFkAuQucA3JAFBxSWHv4DD6HFAQAQD\/1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2361{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLP5AAIAG2nHAqAFkAuQucA3JAFBxSWHv4DEFhFAQAQD0bAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoRDRAADkGCjwC5C5wwKgBZABQDcrPCIDPdHCAbFAQAepnuwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQRAAIAG2mvAqAFkAuQucA3KAFB0cIBszwiMN1AQAQBdPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":47,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQVAAIAG2mrAqAFkAuQucA3KAFB0cIBszwiXn1AQAQBR1QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":47,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXcRDlAADkGBIMC5C5wwKgBZABQDcrPCJefdHCAbFAQAeoyeAAAixRkiDcsuUAIx8hmyMzI9lSzYUnbYnMcRECMfdtuytJiODxeU7W4rizGEMexwW7DElgxw52Njr6cDj\/GMVLUwFp6EgBMThee1VRxFpiiXaqo4HHZ6iMsx1nz3T4zbYlutmZNxHkRbDBzcPsy62G1jp2YcGmznbPaeY6OHJ08jKJwXS1gqomoMKhi62ku1sjIMtvkGuK\/ndehusBfzOEszMOXLFs8VsTM\/GcvuQJ2ZCBlvE0jvaPbYrINplMyJotxrYYdxs2ZpLlFkOgk\/wDp9aRu5MTMzHQSp2PMuzLWFULE0JrVaSrFHHUY+M94bFRQMqfrf5dcB2JDRkrrsxv6ryHYGHyXxvf4metjikuxIh293A7+K8fpHP2xlYW3wTgZxcvZQpiD1+rA9NXeLSJ0MmiE5evsGsc1yZIQmzEh+QQH5Lin5NA\/IuTpqAzp8pTpXORfRd9wTsl6OTKvtSBffdVocDaU1qtCtCbGwmODrDA4IYhccbDka6HAkLcVtsE3+nDETls\/XcZZwtc3x3MctT45sjnTY0DmQ6uSNr8D7GLPqMrX5WomEuF5pr5I9vLiTo30jFpagaFh6kxRsjdROcKlybMmTlNnco5ZasyshqZsH0fsOj8xjk\/JCdPVGeifMCDKjKjIjI1BwUb8YqQ6xf8Ar72EhN+QCYeg9xbRktzovZoDjX5TbSbVyYbmvxs0kRYUhkyo6Bv\/AGN5PHk5TJ47YpsnxvUYWJl48keX9d2Jl40i8lwcOXC8Z8lixNh5RuYtvkyIKtDHIa3hCei7q73UzLvJr7j3rU3IKZkvCZnzBfyM5D8skHIRlIXfTpejpEZEZEXq4IAOX1Q5PxpAu1Lc1qaKJkQIEdXNV66sfBP8YXCjGErybZSHP1Lrtbm\/6eBl4LJ9\/wCQTYIyZZhlRSgrOxIdhkw5mKwyzOyGvcbnTTPOsyJMB+y182JM6NtLeoJpH7Eq5XIEkucQpHOqHIK5CRCRCRGVGRCSq7lEXouRci5XFXJtHn6lU5kzF3ZLgowAmdSxq7bV0afg5QY9yGP08mz5ddi3uy8nRyd3UZTuljIzDBJKvqYGZ5Fmwsw8vUeQ7GQaXZfYTRNY\/uX\/AKlxZikZjpocjFfFI+L5WroqdOiqwKpCcm0QHUFVVVeu4u4rlciUSiieCUUeKqpVoCampjqLu1T31OLCboIGhNjavNdrLnbzH0eZFkaukOt2eXGIwQsoNZi9x80m1wI8XGblSY79PsJp82SV8z7W37h38ZqtdFBlS7HCy9fmOzYs3VzRp8bUA1NCki6kUVCi1UXSlteTVVVVVVVeCjweD6I62Bty7VqHsGJsNFjRm6I2gPFdjrwzbYOjldqdt54zC13heVlTYuO6MP3213Wbs9ZA3OO1wcrXRF7mDS5DYNo5\/R7ys3YHH22HqM2POdisyYRD2MCeYlWXkMCIIQ6B0bXIjgI0t\/VE0dVHivpIRVFRURAXxXyco4ZJWR2vTHtKJuIUdQRQKOVoXfDViyfZW5yvubfHbZDnayHJZl7vI1ubieWePZr\/ACzL0suF4rk48Wf\/ANkZnc2mh1+Zu80eM5GjncHWZGfj4OOJP5abGw4MSLdPOE7JbFBrupc0mjhRWolBParEBRO7bB0KIVEQVQ81VeKIqvxGLM+GHWzT4WPiY8uJhvwI4MbPnwmXFW9O65NcmFXdI47ljMZI6fFx2rGmjx3TukbNEwshAK8z8alyJdrqH+PNHh21yIsrxGXW5A+5sc+OPRY+V5Jo9jkPbufINJFs9XkYcmk8fysTW9uRq8la\/wDjcOYZofC5NbGF8V2405gJcwhV4Ps5H390UGVRbanY87WNglkFKcVRKmlxDg\/f\/wDXNzchmJcWtHtSqcqIkNR6qtEyTpj1cTPRY0bnB7RTJwpf4ySKQ72DB7WVBFCHNyYjiavRbGHZxCKM+TQ\/yms=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":47,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":47,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQZAAIAG2mnAqAFkAuQucA3KAFB0cIBszwijB1AQAQBGbQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2371{"flow_id":47,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAoe1pAADkG0xUC5C5wwKgBZABQDcsAWb5IysuL31AQAeqXIgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2376{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXce1tAADkGzWAC5C5wwKgBZABQDcsAWb5IysuL31AQAepbcgAASFRUUC8xLjEgMjAwIE9LDQpTZXJ2ZXI6IEFwYWNoZQ0KWC1GcmFtZS1PcHRpb25zOiBTQU1FT1JJR0lODQpMYXN0LU1vZGlmaWVkOiBXZWQsIDE1IEp1bCAyMDE1IDE3OjA1OjM2IEdNVA0KQWNjZXB0LVJhbmdlczogYnl0ZXMNCkNvbnRlbnQtTGVuZ3RoOiA4MDU1OTMNCkNvbnRlbnQtVHlwZTogaW1hZ2UvanBlZw0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xOTYxNjINCkV4cGlyZXM6IFdlZCwgMjIgSnVsIDIwMTUgMTc6Mjk6MDcgR01UDQpEYXRlOiBNb24sIDIwIEp1bCAyMDE1IDEwOjU5OjQ1IEdNVA0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQr\/2P\/hF\/hFeGlmAABNTQAqAAAACAAHARIAAwAAAAEAAQAAARoABQAAAAEAAABiARsABQAAAAEAAABqASgAAwAAAAEAAgAAATEAAgAAACQAAAByATIAAgAAABQAAACWh2kABAAAAAEAAACsAAAA2AAK\/IAAACcQAAr8gAAAJxBBZG9iZSBQaG90b3Nob3AgQ0MgMjAxNSAoTWFjaW50b3NoKQAyMDE1OjA3OjA5IDE5OjU5OjQxAAAAAAOgAQADAAAAAf\/\/AACgAgAEAAAAAQAAAcygAwAEAAAAAQAAANkAAAAAAAAABgEDAAMAAAABAAYAAAEaAAUAAAABAAABJgEbAAUAAAABAAABLgEoAAMAAAABAAIAAAIBAAQAAAABAAABNgICAAQAAAABAAAWugAAAAAAAABIAAAAAQAAAEgAAAAB\/9j\/7QAMQWRvYmVfQ00AAf\/uAA5BZG9iZQBkgAAAAAH\/2wCEAAwICAgJCAwJCQwRCwoLERUPDAwPFRgTExUTExgRDAwMDAwMEQwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwBDQsLDQ4NEA4OEBQODg4UFA4ODg4UEQwMDAwMEREMDAwMDAwRDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDP\/AABEIAEsAoAMBIgACEQEDEQH\/3QAEAAr\/xAE\/AAABBQEBAQEBAQAAAAAAAAADAAECBAUGBwgJCgsBAAEFAQEBAQEBAAAAAAAAAAEAAgMEBQYHCAkKCxAAAQQBAwIEAgUHBggFAwwzAQACEQMEIRIxBUFRYRMicYEyBhSRobFCIyQVUsFiMzRygtFDByWSU\/Dh8WNzNRaisoMmRJNUZEXCo3Q2F9JV4mXys4TD03Xj80YnlKSFtJXE1OT0pbXF1eX1VmZ2hpamtsbW5vY3R1dnd4eXp7fH1+f3EQACAgECBAQDBAUGBwcGBTUBAAIRAyExEgRBUWFxIhMFMoGRFKGxQiPBUtHwMyRi4XKCkkNTFWNzNPElBhaisoMHJjXC0kSTVKMXZEVVNnRl4vKzhMPTdePzRpSkhbSVxNTk9KW1xdXl9VZmdoaWprbG1ub2JzdHV2d3h5ent8f\/2gAMAwEAAhEDEQA\/AKLabcbpeN0w\/pM7Ns+3ZpbwLL2tFGM3\/iMfZ\/UXNdde3J6xl2sIdW60MY4HQtr2UiHfu\/o11PWrm9K6K3LBnOza68fFdPuburY\/Myv69dLvRr\/4W9cn0jGsys3HxK9PVdtc6eGAF1vP\/Atep8IAEpy0ADFlJNRjqbes65j2ZTMoUwy+3Ke6idAdrxdu\/sbFiZ9ZsxPVAkMi6NdG2Bof7f5L3M3rfuxhWM7OLXCjo+yioN9zS97K3trrZ\/wXq1sYz\/CqiyvZj12Wsltwfvdw0NDvRe130vb6N1Fb\/wBz0fU\/7SfpIsEtiOkr\/wAb5l2Ybg7Ef7zztFBI3xoF0XRMFtj3WRIprNmokA\/RY138hAswmYstdoBo1x5I+H\/V\/wAtbv1bZ+jyHglrX7E=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2396{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQxAAIAG2mPAqAFkAuQucA3LAFDKy4vfAFnJsFAQAQCMpAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2408{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2399{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQ1AAIAG2mLAqAFkAuQucA3LAFDKy4vfAFnVGFAQAQCBPAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2385{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2468{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLQ5AAIAG2mHAqAFkAuQucA3LAFDKy4vfAFnggFAQAQB11AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":60,"pkt":"IImEa8W6hCYVPnXECABFAAAo0CNAADkGfkwC5C5wwKgBZABQDci+ghTZcwdVgVAQAeoQjgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2389{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2382{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLRRAAIAG2lvAqAFkAuQucA3IAFBzB1WBvoIgQVAQAQAGEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2379{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2419{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLRVAAIAG2lrAqAFkAuQucA3IAFBzB1WBvoIrqVAQAQD6pwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2368{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2408{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"IImEa8W6hCYVPnXECABFAAXc0ClAADkGeJIC5C5wwKgBZABQDci+gjFdcwdVgVAQAepaNwAAGx732slx51tQ8X12DyPwVHd7R4rqC8JIcDb6JIsAsEDNUHTPbFF3PFkLwbF9Kx9xy8Th+SDu+F\/eRMeBYOaDb1QdM9tX+iqk\/wBxM\/w3oO6aT\/xOH\/YN\/BBkDSyCwbq8xa0LQqxJzY8NqXSECMROLidrZSswOnOw1rzxNWu+yKNwPrnZb8CoO8mC53urAe2uu6cQ0O6DpDgof\/XAP91VX+BIg7zdoSUCGWwdcoMWpBmhkYCBnaW3VHRHZFiEeEcZPiqnCF08L6cZzaz8zTb\/AKJCg73MhaQbhaUrpSXbhQQ2U3IJ8lRbBLdx15INfUcG4LX43Fi09EJMQY9kgm7148TbZTYG2lhy5LI5DfQ+ac0S3XX8UkPe59UEc0E3v\/UrxCu0UkeXvbYFhwZ\/9+\/\/ACF5rtl+7\/O\/C937l377\/wAf43dXY0LdlXCf+9sJ\/wCiF3PSPe\/A+THY8u2m9+s38urtdYe2Z\/oJwT\/fH\/5T11ra\/wByYfyvul3vuZ++OP8AI\/FDmHs0\/wCklw5\/98\/+8yrltnPevC+d9qXWduf8w5n5n2KXaI+Bdmh0RRIVZFZ2TmKn\/BdQeOO1b\/8AKbd\/vhh\/\/dwLx7Vff\/51HZS\/pzZ3\/JvzMX7Vb2A7W\/ovYX8xvI3ta\/6Y+Hf71R\/99MvI9rvd1HyI7an9KdzT3oxf5k\/ZoepcOBOF0n+0s\/wQvV8L9nT4ofznmP21fjntX21K\/V86mbRJFLrkeqCknf0SBp+KOF8N4ywabDMUgE1NJqCNHRu5OaeRH9tCvjzmTwc9hTg48XifR4Y8LldM1PNaRmac1lKrVR5pjqmOcT\/e95nrKLiH2eeMmzQk1eFVBs1xuI6qMfZd+68X+XmDr5TiUZvZjOdKnfRPmqjqnqmP73P6IwsXTdvtNnDxI6OLT56J6466Z9PgmHonhPi7DuNcFixLDpc8TtHxn44nc2uHIj+tepZLO4OfwYxsGd3pieqX896tpOa0bNVZXNU2mOE8pjrjwf8Ayd7rrtk7ZGcLRy4Ng0rZMYeLSzN1FKD+L\/LluV1jXtejJROWy03xJ4z8H\/32O\/7H7H1apVTns9FsGOEfD\/6+HnwhoeyHsZdM6LiLiWN0kr3d7T0c2pJ37yS+5O4B9T0XHaFoE1TGdz0Xmd8RPbPq87nNr9sooidL0mbRG6qqPN0aeyZjxR1u8n7FejvC2O7UKhXcgoKX7IOG9p9RxBS8NyycOsDqm9pcgzShnMxjr+W2q4LWq87h5WasjHtufXbweH+4dx2VwtJxdRpp1abUcr7qb\/7p6vRM8dzhnZ92OihkZi3EQ96r3HvG0shzNjO93n7TvLYeZ26\/o+zkYUxms\/7aud9p328M9c+h3PafbicemchpHtMKN01RumY6qeqn0z4I49qbG679Dxt597A\/9GFZ\/uB\/\/eRryLZH3dX8ie2l\/SndL96ML+ZH2a3fRHReuP5rI4aIKyg6I4PPvXbLUSkkWqqt4B9Hi33ryXS\/8TaCqv8A3Vz9p\/Se0EewbF0Yf+zCj00z9zu2R7Y2lz3BjRzJsF6zVVEReX83U01VzamLyxH4pRsdZ1XA0jkZB\/FfjOYwYm01x54fVGSzVUXjCqnyT6lb8VoiP\/Haf\/lG\/wAVPynA+HHnhr8hzfxVX0Z9SW1cM9hHMx99RleDdfpTiUV\/q1RL8K8DFw99dEx44lpsS4HwTGcQNdWUXfVRteTvXt20GgcAuKzGj5HN43s+Nh3q3b7zy8U2diyW0+radloyeVxujh793Rpnjx3zTM+lvnahc06srvf1UEEaoKkEnZBW\/mqIdsEgVuOqSOsMc4d4i4t4lkpaw9xQQnMyRoPdBp2I\/ed\/bQLzPO6fqmrZ6cHH9rh08J\/028HXP97oe86Trez+zmkU5nJx08evdMT+veON\/g0xytxjrm7n2BYBR8O0IpqOINboXvPxPPUld7w=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":54,"pkt":"hCYVPnXEIImEa8W6CABFAAAoLRZAAIAG2lnAqAFkAuQucA3IAFBzB1WBvoI3EVAQAQDvPwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2417{"flow_id":45,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","pkt_oversize":false,"pkt_ts":1437389985,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1437389982769,"flow_last_seen":1437389982825,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"62.115.246.51","src_port":53146,"dst_port":1119,"l4_proto":"udp","ndpi": {"proto":"Starcraft","category":"Game"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1437389982769,"flow_last_seen":1437389982825,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"62.115.246.51","src_port":53146,"dst_port":1119,"l4_proto":"udp"}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1437389961548,"flow_last_seen":1437389961598,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"64.233.184.188","src_port":2759,"dst_port":5228,"l4_proto":"tcp","ndpi": {"proto":"Google","category":"Web"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1437389961548,"flow_last_seen":1437389961598,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"64.233.184.188","src_port":2759,"dst_port":5228,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1437389955932,"flow_last_seen":1437389955967,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"216.58.212.110","src_port":3052,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1437389955932,"flow_last_seen":1437389955967,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":21,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"216.58.212.110","src_port":3052,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1437389981134,"flow_last_seen":1437389981218,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":42,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":53145,"dst_port":53,"l4_proto":"udp"}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":12,"flow_packet_id":9,"flow_first_seen":1437389964518,"flow_last_seen":1437389964635,"flow_tot_l4_data_len":981,"flow_min_l4_data_len":20,"flow_max_l4_data_len":447,"flow_avg_l4_data_len":109,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3506,"dst_port":80,"l4_proto":"tcp"}
+0436{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1437389976946,"flow_last_seen":1437389980126,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.107","dst_ip":"224.0.0.22","l4_proto":2}
+0529{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":9,"flow_packet_id":13,"flow_first_seen":1437389958129,"flow_last_seen":1437389968685,"flow_tot_l4_data_len":430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":121,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.208.193","src_port":3427,"dst_port":1119,"l4_proto":"tcp","ndpi": {"proto":"Starcraft","category":"Game"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":9,"flow_packet_id":13,"flow_first_seen":1437389958129,"flow_last_seen":1437389968685,"flow_tot_l4_data_len":430,"flow_min_l4_data_len":20,"flow_max_l4_data_len":121,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.208.193","src_port":3427,"dst_port":1119,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1437389985821,"flow_last_seen":1437389985912,"flow_tot_l4_data_len":420,"flow_min_l4_data_len":50,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":55468,"dst_port":53,"l4_proto":"udp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1437389968488,"flow_last_seen":1437389968521,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3484,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":25,"flow_packet_id":3,"flow_first_seen":1437389968488,"flow_last_seen":1437389968521,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"173.194.113.224","src_port":3484,"dst_port":443,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":44,"flow_packet_id":41,"flow_first_seen":1437389985891,"flow_last_seen":1437389985996,"flow_tot_l4_data_len":36033,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":878,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3527,"dst_port":80,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":45,"flow_packet_id":29,"flow_first_seen":1437389985892,"flow_last_seen":1437389985994,"flow_tot_l4_data_len":24113,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":831,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3528,"dst_port":80,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":46,"flow_packet_id":29,"flow_first_seen":1437389985898,"flow_last_seen":1437389985969,"flow_tot_l4_data_len":24110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":831,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3529,"dst_port":80,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":47,"flow_packet_id":29,"flow_first_seen":1437389985898,"flow_last_seen":1437389985982,"flow_tot_l4_data_len":24110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":831,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3530,"dst_port":80,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":48,"flow_packet_id":29,"flow_first_seen":1437389985923,"flow_last_seen":1437389985992,"flow_tot_l4_data_len":24110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":831,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3531,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1437389985925,"flow_last_seen":1437389985961,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3532,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1437389985925,"flow_last_seen":1437389985962,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":166,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3533,"dst_port":80,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1437389985960,"flow_last_seen":1437389985960,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3534,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1437389985960,"flow_last_seen":1437389985960,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.112","src_port":3534,"dst_port":80,"l4_proto":"tcp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":30,"flow_packet_id":215,"flow_first_seen":1437389982130,"flow_last_seen":1437389985956,"flow_tot_l4_data_len":42602,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.130","src_port":3517,"dst_port":1119,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968519,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3479,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968519,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3479,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968525,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3480,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968525,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3480,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968520,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3481,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968520,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3481,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968519,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3482,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968519,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.114","src_port":3482,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968541,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3489,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968541,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3489,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968521,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3490,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968521,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3490,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968522,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3491,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968522,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3491,"dst_port":443,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1437389968486,"flow_last_seen":1437389968520,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3492,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1437389968486,"flow_last_seen":1437389968520,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":20,"flow_max_l4_data_len":73,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"2.228.46.104","src_port":3492,"dst_port":443,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1437389964752,"flow_last_seen":1437389964835,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":43,"flow_max_l4_data_len":110,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":60026,"dst_port":53,"l4_proto":"udp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1437389953643,"flow_last_seen":1437389953774,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":42,"midstream":1,"l3_proto":"ip4","src_ip":"192.30.252.91","dst_ip":"192.168.1.100","src_port":443,"dst_port":3213,"l4_proto":"tcp","ndpi": {"proto":"TLS.Github","category":"Collaborative"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":0,"flow_packet_id":3,"flow_first_seen":1437389953643,"flow_last_seen":1437389953774,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":42,"midstream":1,"l3_proto":"ip4","src_ip":"192.30.252.91","dst_ip":"192.168.1.100","src_port":443,"dst_port":3213,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1437389982884,"flow_last_seen":1437389982933,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":9,"flow_max_l4_data_len":15,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.166","src_port":6113,"dst_port":1119,"l4_proto":"udp","ndpi": {"proto":"Starcraft","category":"Game"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1437389982884,"flow_last_seen":1437389982933,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":9,"flow_max_l4_data_len":15,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.166","src_port":6113,"dst_port":1119,"l4_proto":"udp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1437389982782,"flow_last_seen":1437389982833,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":9,"flow_max_l4_data_len":15,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.212","src_port":6113,"dst_port":1119,"l4_proto":"udp","ndpi": {"proto":"Starcraft","category":"Game"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1437389982782,"flow_last_seen":1437389982833,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":9,"flow_max_l4_data_len":15,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"213.248.127.212","src_port":6113,"dst_port":1119,"l4_proto":"udp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":28,"flow_packet_id":10,"flow_first_seen":1437389981197,"flow_last_seen":1437389981500,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":20,"flow_max_l4_data_len":535,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3515,"dst_port":80,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":29,"flow_packet_id":12,"flow_first_seen":1437389981330,"flow_last_seen":1437389981497,"flow_tot_l4_data_len":3252,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3516,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":31,"flow_packet_id":10,"flow_first_seen":1437389982140,"flow_last_seen":1437389982442,"flow_tot_l4_data_len":872,"flow_min_l4_data_len":20,"flow_max_l4_data_len":539,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3518,"dst_port":80,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":32,"flow_packet_id":9,"flow_first_seen":1437389982269,"flow_last_seen":1437389982443,"flow_tot_l4_data_len":659,"flow_min_l4_data_len":20,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3519,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":37,"flow_packet_id":10,"flow_first_seen":1437389983663,"flow_last_seen":1437389983964,"flow_tot_l4_data_len":870,"flow_min_l4_data_len":20,"flow_max_l4_data_len":535,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3521,"dst_port":80,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":38,"flow_packet_id":11,"flow_first_seen":1437389983788,"flow_last_seen":1437389983963,"flow_tot_l4_data_len":3232,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":293,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.21","src_port":3522,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":39,"flow_packet_id":10,"flow_first_seen":1437389985308,"flow_last_seen":1437389985615,"flow_tot_l4_data_len":854,"flow_min_l4_data_len":20,"flow_max_l4_data_len":511,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3523,"dst_port":80,"l4_proto":"tcp"}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":40,"flow_packet_id":10,"flow_first_seen":1437389985320,"flow_last_seen":1437389985635,"flow_tot_l4_data_len":860,"flow_min_l4_data_len":20,"flow_max_l4_data_len":519,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.26","src_port":3524,"dst_port":80,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":41,"flow_packet_id":12,"flow_first_seen":1437389985434,"flow_last_seen":1437389985610,"flow_tot_l4_data_len":3511,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":292,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3525,"dst_port":80,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":42,"flow_packet_id":11,"flow_first_seen":1437389985446,"flow_last_seen":1437389985631,"flow_tot_l4_data_len":3298,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":299,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"80.239.186.40","src_port":3526,"dst_port":80,"l4_proto":"tcp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1437389955670,"flow_last_seen":1437389984611,"flow_tot_l4_data_len":271,"flow_min_l4_data_len":32,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"173.194.40.22","dst_ip":"192.168.1.100","src_port":443,"dst_port":53568,"l4_proto":"udp","ndpi": {"proto":"Google","category":"Web"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1437389955670,"flow_last_seen":1437389984611,"flow_tot_l4_data_len":271,"flow_min_l4_data_len":32,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"173.194.40.22","dst_ip":"192.168.1.100","src_port":443,"dst_port":53568,"l4_proto":"udp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1437389982769,"flow_last_seen":1437389982823,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"5.42.180.154","src_port":53146,"dst_port":1119,"l4_proto":"udp","ndpi": {"proto":"Starcraft","category":"Game"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1437389982769,"flow_last_seen":1437389982823,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":10,"flow_max_l4_data_len":10,"flow_avg_l4_data_len":10,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"5.42.180.154","src_port":53146,"dst_port":1119,"l4_proto":"udp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968610,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"199.38.164.156","src_port":3486,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1437389968487,"flow_last_seen":1437389968610,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"199.38.164.156","src_port":3486,"dst_port":443,"l4_proto":"tcp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":11,"flow_packet_id":11,"flow_first_seen":1437389963466,"flow_last_seen":1437389963469,"flow_tot_l4_data_len":4610,"flow_min_l4_data_len":380,"flow_max_l4_data_len":460,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"239.255.255.250","src_port":38605,"dst_port":1900,"l4_proto":"udp"}
+0482{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":14,"flow_packet_id":179,"flow_first_seen":1437389964790,"flow_last_seen":1437389968014,"flow_tot_l4_data_len":128106,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":715,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"87.248.221.254","src_port":3508,"dst_port":80,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1437389954123,"flow_last_seen":1437389954123,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.26","dst_ip":"192.168.1.100","src_port":443,"dst_port":3476,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1437389954123,"flow_last_seen":1437389954123,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.26","dst_ip":"192.168.1.100","src_port":443,"dst_port":3476,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1437389955642,"flow_last_seen":1437389955642,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.40","dst_ip":"192.168.1.100","src_port":443,"dst_port":3478,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1437389955642,"flow_last_seen":1437389955642,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"80.239.186.40","dst_ip":"192.168.1.100","src_port":443,"dst_port":3478,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1437389953741,"flow_last_seen":1437389953805,"flow_tot_l4_data_len":296,"flow_min_l4_data_len":52,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58818,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1437389954543,"flow_last_seen":1437389954714,"flow_tot_l4_data_len":281,"flow_min_l4_data_len":52,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58831,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1437389955747,"flow_last_seen":1437389955800,"flow_tot_l4_data_len":142,"flow_min_l4_data_len":52,"flow_max_l4_data_len":90,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58844,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1437389956550,"flow_last_seen":1437389956605,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":52,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.254","src_port":58851,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap","flow_id":15,"flow_packet_id":9,"flow_first_seen":1437389967432,"flow_last_seen":1437389968027,"flow_tot_l4_data_len":562,"flow_min_l4_data_len":20,"flow_max_l4_data_len":293,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"12.129.222.54","src_port":3512,"dst_port":80,"l4_proto":"tcp"}
+0154{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/starcraft_battle.pcap"}
diff --git a/tests/result/nDPId_steam.pcap.txt b/tests/result/nDPId_steam.pcap.txt
new file mode 100644
index 000000000..6a52c2df8
--- /dev/null
+++ b/tests/result/nDPId_steam.pcap.txt
@@ -0,0 +1,271 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":1357332164693,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0410{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx\/AqLyVkkKYDbJhaYoALLORVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":1357332164693,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":1357332164693,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0409{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkyDAqLyVkkKYDLJhaYsALLORVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1357332164693,"flow_last_seen":1357332164693,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":1357332164694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0409{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LvAqLyVUatzCLJhaYoALBkuVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":1357332164694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":1357332164694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0409{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L3AqLyVUatzBrJhaYkALBkxVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":1357332164694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1357332164736,"flow_last_seen":1357332164736,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0409{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qbAqLyVRRyRrLJhaYoALAcZVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1357332164736,"flow_last_seen":1357332164736,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0409{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LvAqLyVUatzCLJhaYkALBkvVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.36","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0409{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARHb3AqLyVRI5bJLJhaYkALD4wVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.36","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0409{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkyDAqLyVkkKYDLJhaYoALLOSVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0421{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSYAAIARjXhFHJGswKi8lWmKsmEANLLiVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAzAy3GMcAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1357332164786,"flow_last_seen":1357332164786,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0410{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LzAqLyVUatzB7JhaYoALBkvVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1357332164786,"flow_last_seen":1357332164786,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.83","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0410{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARQazAqLyV0G+rU7JhaYkALGIfVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.83","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0411{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LvAqLyVUatzCLJhaYsALBktVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qjAqLyVRRyRqrJhaYkALAccVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWScAAIARjXlFHJGqwKi8lWmJsmEANPbVVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA7fJcQrwAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSgAAIARxIxEjlskwKi8lWmJsmEANPCBVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAzHF5K\/4AAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":1357332164836,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0411{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx7AqLyVkkKYDrJhaYsALLOPVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":1357332164836,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":1357332164836,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0412{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw\/AqLyVSKU9u7JhaYoALFeBVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1357332164836,"flow_last_seen":1357332164836,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":1357332164837,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qbAqLyVRRyRrLJhaYkALAcaVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":1357332164837,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":1357332164837,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0411{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L3AqLyVUatzBrJhaYsALBkvVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":1357332164837,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSkAAIARjXVFHJGswKi8lWmJsmEANAokVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAumV7f70AAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSoAAIAR3dxIpT27wKi8lWmKsmEANMZ2VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAjNtWHqQAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSsAAIAROeySQpgNwKi8lWmKsmEANDIHVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAhmUJFOgAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1357332164886,"flow_last_seen":1357332164886,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.34","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0412{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARHb\/AqLyVRI5bIrJhaYkALD4yVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1357332164886,"flow_last_seen":1357332164886,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.34","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1357332164887,"flow_last_seen":1357332164887,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.4","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAROR3AqLyVy025BLJhaYkALFmQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1357332164887,"flow_last_seen":1357332164887,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.4","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":1357332164888,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.179","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARBC7AqLyVRI50s7JhaYkALCShVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":1357332164888,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.179","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":1357332164888,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw7AqLyVSKU9vLJhaYkALFeBVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1357332164888,"flow_last_seen":1357332164888,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0422{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWSwAAIAROeySQpgMwKi8lWmLsmEANKu+VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAMlh+aU0BAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWS0AAIARqvhEjnSzwKi8lWmJsmEANEAeVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAHUr6J8MAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWS4AAIAROeqSQpgMwKi8lWmKsmEANAVPVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAJg+KI\/QAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWS8AAIAR3dZIpT28wKi8lWmJsmEANMuoVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAUb2BCq8AAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":1357332164936,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.82","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARQa3AqLyV0G+rUrJhaYkALGIgVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":1357332164936,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.82","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":1357332164936,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxHAqLyVSKU9ubJhaYoALFeDVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1357332164936,"flow_last_seen":1357332164936,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":1357332164937,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0411{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L7AqLyVUatzBbJhaYsALBkwVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":1357332164937,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":1357332164937,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0412{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx\/AqLyVkkKYDbJhaYkALLOSVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":1357332164937,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTAAAIAR3dhIpT25wKi8lWmKsmEANKoaVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAABVTtA7EAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTEAAIARxIVEjlsiwKi8lWmJsmEANIkpVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA3X7NeAABAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1357332164986,"flow_last_seen":1357332164986,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx7AqLyVkkKYDrJhaYkALLORVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1357332164986,"flow_last_seen":1357332164986,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":1357332164987,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxzAqLyVSKU9rrJhaYkALFePVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":1357332164987,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":1357332164987,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qfAqLyVRRyRq7JhaYkALAcbVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":1357332164987,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":1357332164987,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332164,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6rAqLyV0G+FVbJhaYoALIgcVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1357332164987,"flow_last_seen":1357332164987,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTIAAIAROeSSQpgOwKi8lWmLsmEANBm8VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAc5jYKUQBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTMAAIAR6HHQb6tSwKi8lWmJsmEANJoiVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA03wFcOUAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTQAAIARjWtFHJGrwKi8lWmJsmEANNwtVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAk2i\/c84AAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTUAAIAR3d5IpT2uwKi8lWmJsmEANL5BVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAyxQbKKkAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L7AqLyVUatzBbJhaYoALBkxVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxvAqLyVSKU9r7JhaYkALFeOVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.5","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARORzAqLyVy025BbJhaYkALFmPVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.5","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1357332165038,"flow_last_seen":1357332165038,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx3AqLyVkkKYD7JhaYoALLOPVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1357332165038,"flow_last_seen":1357332165038,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTYAAIAR3dxIpT2vwKi8lWmJsmEANO1rVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAw5zrdLEAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":1357332165087,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0411{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx3AqLyVkkKYD7JhaYsALLOOVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":1357332165087,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":1357332165087,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxzAqLyVSKU9rrJhaYoALFeOVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1357332165087,"flow_last_seen":1357332165087,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":1357332165088,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6vAqLyV0G+FVLJhaYkALIgeVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":1357332165088,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":1357332165088,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkyDAqLyVkkKYDLJhaYkALLOTVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1357332165088,"flow_last_seen":1357332165088,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTcAAIAROeCSQpgNwKi8lWmJsmEANEZHVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAkDOUBj8BAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTgAAIAR3dtIpT2uwKi8lWmKsmEANFKmVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAqXeqX6cAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":1357332165137,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LzAqLyVUatzB7JhaYkALBkwVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":1357332165137,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":1357332165137,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0412{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw\/AqLyVSKU9u7JhaYkALFeCVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":1357332165137,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":1357332165138,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L7AqLyVUatzBbJhaYkALBkyVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":1357332165138,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":1357332165138,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6vAqLyV0G+FVLJhaYoALIgdVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":1357332165138,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTkAAIARDmnQb4VVwKi8lWmKsmEANIntVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAATel0NDIBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWToAAIAROdySQpgOwKi8lWmJsmEANCG6VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA27XMEOAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTsAAIAR3ctIpT27wKi8lWmJsmEANAJdVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA5fe1HLAAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":1357332165187,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARZ6rAqLyV0G+FVbJhaYkALIgdVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":1357332165187,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":1357332165187,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxrAqLyVSKU9sLJhaYoALFeMVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1357332165187,"flow_last_seen":1357332165187,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":1357332165188,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxHAqLyVSKU9ubJhaYkALFeEVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":1357332165188,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":1357332165188,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.35","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARHb7AqLyVRI5bI7JhaYkALD4xVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1357332165188,"flow_last_seen":1357332165188,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.35","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWTwAAIAR3dVIpT2wwKi8lWmKsmEANKPuVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAASRKpercAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWT0AAIAR3ctIpT25wKi8lWmJsmEANNMtVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAPeyXWaUAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWT4AAIAROdeSQpgPwKi8lWmKsmEANLvcVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAACGWHPF4BAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1357332165237,"flow_last_seen":1357332165237,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0412{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx\/AqLyVkkKYDbJhaYsALLOQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1357332165237,"flow_last_seen":1357332165237,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":1357332165238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qjAqLyVRRyRqrJhaYoALAcbVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":1357332165238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":1357332165238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx3AqLyVkkKYD7JhaYkALLOQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":1357332165238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":1357332165238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxvAqLyVSKU9r7JhaYoALFeNVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1357332165238,"flow_last_seen":1357332165238,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWT8AAIARDmTQb4VUwKi8lWmJsmEANLI1VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAPGE+dlEBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUAAAIARjWBFHJGqwKi8lWmKsmEANA+cVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA1CBaTb8AAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUEAAIAROdSSQpgPwKi8lWmLsmEANCWgVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAfF+2fVEBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUIAAIAR3dBIpT2vwKi8lWmKsmEANO05VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA8dLGb6gAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUMAAIAROdWSQpgMwKi8lWmJsmEANPf\/VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAXTRtTucAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUQAAIARxHFEjlsjwKi8lWmJsmEANM4fVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAQP0jAwIBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1357332165287,"flow_last_seen":1357332165287,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0411{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+LzAqLyVUatzB7JhaYsALBkuVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1357332165287,"flow_last_seen":1357332165287,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27019,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":1357332165288,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw7AqLyVSKU9vLJhaYoALFeAVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":1357332165288,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":1357332165288,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.178","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0412{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARBC\/AqLyVRI50srJhaYkALCSiVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1357332165288,"flow_last_seen":1357332165288,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.178","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1357332165289,"flow_last_seen":1357332165289,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR+L3AqLyVUatzBrJhaYoALBkwVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1357332165289,"flow_last_seen":1357332165289,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0424{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUUAAIARDl7Qb4VUwKi8lWmKsmEANGnGVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAD\/WHUH0BAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUYAAIARquBEjnSywKi8lWmJsmEANI39VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAA\/x7bdLIAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUcAAIAR3b5IpT28wKi8lWmKsmEANK1cVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAARbG1YaUAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":1357332165337,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARkx7AqLyVkkKYDrJhaYoALLOQVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":1357332165337,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":1357332165337,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0411{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEAR5qfAqLyVRRyRq7JhaYoALAcaVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":1357332165337,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27018,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":1357332165337,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0411{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNxrAqLyVSKU9sLJhaYkALFeNVlMwMQAAAQAABgAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1357332165337,"flow_last_seen":1357332165337,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27017,"l4_proto":"udp","ndpi": {"proto":"Steam","category":"Game"}}
+0423{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUgAAIARDlrQb4VVwKi8lWmJsmEANOC5VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAApkPUDiMBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUkAAIARjVZFHJGrwKi8lWmKsmEANABlVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAZ1y1R+AAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUoAAIAR3cdIpT2wwKi8lWmJsmEANEZJVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAApDC7AqgAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUsAAIAROcySQpgNwKi8lWmLsmEANOxHVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAyRIwJMQBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWUwAAIAROcmSQpgPwKi8lWmJsmEANKyjVlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAEZL3SfQAAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":86,"pkt":"AAwp3FvtAFBW4RiuCABFAABIWU0AAIAROcmSQpgOwKi8lWmKsmEANHO2VlMwMQgAAgAAAAAAAAYAAAEAAAABAAAAAAAAAAAAAAAAAAAAoWZRYkMBAAA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":82,"pkt":"AFBW4RiuAAwp3FvtCABFAABEAABAAEARNwrAqLyVSKU9vLJhaYoAMEhAVlMwMQQAAwQABgAAAAAAAAEAAAABAAAAAQAAAAEAAAAEAAAAbm6TxQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AAwp3FvtAFBW4RiuCABFAABAWU4AAIAR3b9IpT28wKi8lWmKsmEALKNoVlMwMQAABAQAwKtTAAYAAAIAAAABAAAAAQAAAAIAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":106,"pkt":"AAwp3FvtAFBW4RiuCABFAABcWU8AAIAR3aJIpT28wKi8lWmKsmEASE4rVlMwMRwABgQAwKtTAAYAAAMAAAABAAAAAQAAAAMAAAAcAAAAFwUAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8BAAAAAQAAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":242,"pkt":"AFBW4RiuAAwp3FvtCABFAADkAABAAEARNmrAqLyVSKU9vLJhaYoA0FrvVlMwMaQABgQABgAAAMCrUwIAAAADAAAAAQAAAAIAAACkAAAAGAUAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8BAAAAgAAAALjQKcnVpX5ZsHLgWMFYHpMNlyE7kv2QLc3bIsInivgyulqOTPFqDN5YeodQV\/lg4xPRHRfJucNPORh2Blfi4A271PpqM2FNET81d+SrKuqOL8CAXtsdyMM0QmAC20wP4pFrbllieB6gPhGbfPCJ5IHav\/mVL6qCSZoGTn07WdXGbHZhFAAAAAA=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":102,"pkt":"AAwp3FvtAFBW4RiuCABFAABYWVAAAIAR3aVIpT28wKi8lWmKsmEARFIzVlMwMRgABgQAwKtTAAYAAAQAAAACAAAAAQAAAAQAAAAYAAAAGQUAAP\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8BAAAA","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0803{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":366,"pkt":"AFBW4RiuAAwp3FvtCABFAAFgAABAAEARNe7AqLyVSKU9vLJhaYoBTBPvVlMwMSABBgQABgAAAMCrUwMAAAAEAAAAAQAAAAMAAAAgAQAAKgqb75v5BLDc2N9lyxb0kZ55hQ4MJ9rfWt6TMLPx9Entnu87ndiLUO16TDuAZ4CjcqoN\/\/ecOJ0TLYAOqAvrakgEFfYZLRhZ6iC5i8DNCz34iuG06ftYqElNgiwu4LpqYFxR72yI+z63zDVBqE6PPXfFD5x3RpGc0hrpN4emVQBaQT1dn8fxpuWnBeIcjZtDPGuiLP5HVLs44u+PIsVZY1h3bP2goxeRqnhMcTHY\/2MCXIwgtEuT44fLgtmw7XKNYgAvY31hzOHvf0W\/bGHxEpkg8UnGhk4xRwg9iByyFWR8AXKjqvgPeod9bRwjuHKTwjozwxGHM3bkjGQ5C4Nun\/VecZdFU57AA+2wgi45BnE1bx7Z9WMdBe3JAdu1s+8+","pkt_caplen":366,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":158,"pkt":"AAwp3FvtAFBW4RiuCABFAACQWVEAAIAR3WxIpT28wKi8lWmKsmEAfEkXVlMwMVAABgQAwKtTAAYAAAUAAAADAAAAAQAAAAUAAABQAAAAgux1ympnhlJKXy0zvwqCQYTlqRzT2LWXTXvx\/11gCr4VUXaqpbhFIulso4n7wIJQpJ1kPnewIgY2tvvA5o3XJWewqSsndHrQTTMCTo8TCAM=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AAwp3FvtAFBW4RiuCABFAABAWVIAAIAR3btIpT28wKi8lWmKsmEALJhoVlMwMQAABQQAwKtTAAYAAAYAAAADAAAAAQAAAAYAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","pkt_oversize":false,"pkt_ts":1357332165,"pkt_len":78,"pkt":"AFBW4RiuAAwp3FvtCABFAABAAABAAEARNw7AqLyVSKU9vLJhaYoALKBoVlMwMQAABwQABgAAAMCrUwAAAAAGAAAAAAAAAAAAAAAAAAAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1357332165137,"flow_last_seen":1357332165137,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1357332164737,"flow_last_seen":1357332164737,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1357332165138,"flow_last_seen":1357332165138,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":1357332164694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1357332165289,"flow_last_seen":1357332165289,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1357332164786,"flow_last_seen":1357332164786,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1357332164694,"flow_last_seen":1357332164694,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1357332165287,"flow_last_seen":1357332165287,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.7","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1357332164937,"flow_last_seen":1357332164937,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.5","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1357332164837,"flow_last_seen":1357332164837,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.6","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"81.171.115.8","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1357332164987,"flow_last_seen":1357332165020,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1357332164837,"flow_last_seen":1357332164869,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1357332164787,"flow_last_seen":1357332164823,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1357332165337,"flow_last_seen":1357332165370,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.171","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1357332165238,"flow_last_seen":1357332165266,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.170","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1357332164736,"flow_last_seen":1357332164761,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"69.28.145.172","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":54,"flow_packet_id":2,"flow_first_seen":1357332165337,"flow_last_seen":1357332165375,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1357332165188,"flow_last_seen":1357332165229,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1357332165137,"flow_last_seen":1357332165175,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1357332165037,"flow_last_seen":1357332165075,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1357332164987,"flow_last_seen":1357332165027,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1357332164888,"flow_last_seen":1357332164927,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":49,"flow_packet_id":11,"flow_first_seen":1357332165288,"flow_last_seen":1357332165983,"flow_tot_l4_data_len":1080,"flow_min_l4_data_len":44,"flow_max_l4_data_len":332,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.188","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1357332165238,"flow_last_seen":1357332165277,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.175","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":1357332165187,"flow_last_seen":1357332165226,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.176","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1357332165087,"flow_last_seen":1357332165125,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.174","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1357332164936,"flow_last_seen":1357332164974,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.185","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1357332164836,"flow_last_seen":1357332164873,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"72.165.61.187","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1357332165037,"flow_last_seen":1357332165037,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.5","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1357332164887,"flow_last_seen":1357332164887,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"203.77.185.4","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1357332165188,"flow_last_seen":1357332165285,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.35","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":50,"flow_packet_id":2,"flow_first_seen":1357332165288,"flow_last_seen":1357332165310,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.178","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1357332164888,"flow_last_seen":1357332164912,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.116.179","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1357332164886,"flow_last_seen":1357332164980,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.34","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1357332164737,"flow_last_seen":1357332164834,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"68.142.91.36","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1357332165187,"flow_last_seen":1357332165344,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1357332165088,"flow_last_seen":1357332165243,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1357332164936,"flow_last_seen":1357332165017,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.82","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1357332164787,"flow_last_seen":1357332164787,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.171.83","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":39,"flow_packet_id":2,"flow_first_seen":1357332165138,"flow_last_seen":1357332165291,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.84","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1357332164987,"flow_last_seen":1357332165148,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"208.111.133.85","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1357332165238,"flow_last_seen":1357332165425,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1357332164986,"flow_last_seen":1357332165166,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1357332165088,"flow_last_seen":1357332165279,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1357332164937,"flow_last_seen":1357332165121,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27017,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":52,"flow_packet_id":2,"flow_first_seen":1357332165337,"flow_last_seen":1357332165520,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1357332165038,"flow_last_seen":1357332165230,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1357332164737,"flow_last_seen":1357332164925,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1357332164693,"flow_last_seen":1357332164876,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27018,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1357332165087,"flow_last_seen":1357332165270,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.15","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1357332165237,"flow_last_seen":1357332165424,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.13","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1357332164836,"flow_last_seen":1357332165015,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.14","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1357332164693,"flow_last_seen":1357332164892,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":44,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.188.149","dst_ip":"146.66.152.12","src_port":45665,"dst_port":27019,"l4_proto":"udp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/steam.pcap"}
diff --git a/tests/result/nDPId_teams.pcap.txt b/tests/result/nDPId_teams.pcap.txt
new file mode 100644
index 000000000..81b373018
--- /dev/null
+++ b/tests/result/nDPId_teams.pcap.txt
@@ -0,0 +1,1114 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1587041672419,"flow_last_seen":1587041672419,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0749{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041672,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES1AAEARZ+TAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABgr52AAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1587041672419,"flow_last_seen":1587041672419,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3"}}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041672,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1587041673094,"flow_last_seen":1587041673094,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"149.154.167.91","src_port":58533,"dst_port":443,"l4_proto":"tcp"}
+0393{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041673,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPCDAqAEGlZqnW+SlAbsZTPC7DAoX94ARECZ4MwAAAQEICjCEirAtAPMf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041673,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041673,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041674,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0393{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041675,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGPCDAqAEGlZqnW+SlAbsZTPC7DAoX94ARECZv6wAAAQEICjCEkvgtAPMf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041675,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041675,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1587041675997,"flow_last_seen":1587041675997,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp"}
+0430{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041675,"pkt_len":93,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPKfkAAP8RDk3AqAEGwKgBAe2NADUAO4czzp0BAAABAAAAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1587041675997,"flow_last_seen":1587041675997,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0456{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":109,"pkt":"KDc3AG3IEBMx8Tl2CABFAABfTWlAADkRcM3AqAEBwKgBBgA17Y0ASwAAzp2BgAABAAEAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAAQABwAwAAQABAAAACQAENHJNIQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1587041675997,"flow_last_seen":1587041676010,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":59,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.77.33"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1587041676362,"flow_last_seen":1587041676362,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex0AbuczSMnAAAAALAC\/\/99oQAAAgQFtAEDAwUBAQgKMISXcQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8L\/5AAGwGm3w0ck0hwKgBBgG77HRJoiConM0jKKASIABWrQAAAgQFoAEDAwgEAggKYQZMqDCEl3E=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSMoSaIgqYAQEAmVMgAAAQEICjCEl5xhBkyo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1587041676435,"flow_last_seen":1587041676435,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOx1AbsuhcJCAAAAALAC\/\/\/XIQAAAgQFtAEDAwUBAQgKMISXugAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0CixAAHUGQvQ0ccKEwKgBBgG77HWQGjC4LoXCQ4AS\/\/8WpAAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcJDkBowuVAQIAA3YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":264,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD6AABAAEAGgVrAqAEGNHHChOx1AbsuhcJDkBowuVAYIAChLwAAFgMBAM0BAADJAwMtfzNr5sJ0vwUnIfI3TV9sTsGbPpwfZOWfmMdYc+2laQAAHLq6zKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACEuroAAP8BAAEAAAAAGAAWAAATdGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACNraAB0AFwAYABsAAwIAAnp6AAEA","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1587041676435,"flow_last_seen":1587041676449,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0386{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoCi1AAHYGQf80ccKEwKgBBgG77HWQGjC5LoXDFVAQCAROjQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2329{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcMVkBo8EVAQH9IrZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcMVkBpBvVAQIAAljQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":271,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEBCjJAAHYGQSE0ccKEwKgBBgG77HWQGkdpLoXDFVAYCAScCwAAzjPbh60Ymm0tjFk6kKgrED9s6hrOYY5pNu9VYrK5pPgxrSAhNhst5\/5\/8MVEhARh014b8CQkuIP\/vDOZQPpfBPopVpmJQj7JuxbLB4RkMuq3bvko5Pv44o\/CEkLjRMQz4fOj+fCfq6EDg08bLmY27izuXnzUyg6CsISBPAsldliaS9FIdEgJKTmeAjW1uvY2xcoz9nx4cyxTpSxEiJpA4aFIkpyBYWDmjthHymsU\/xnc8dTEutTFR+vDoTJfm4wIDWbSvwIBoMC53HPI8+MWGNP49ra7DgAAAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+1051{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":4,"flow_packet_id":12,"flow_first_seen":1587041676435,"flow_last_seen":1587041676464,"flow_tot_l4_data_len":6511,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":542,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}}
+0379{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx1AbsuhcMVkBpIQlAQH8sfPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0596{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":212,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGgY7AqAEGNHHChOx1AbsuhcMVkBpIQlAYIABMRAAAFgMDAGYQAABiYQRucgjp+M009+y7BfrWGJrcaVoux\/RH354hUT9jM7kfyxIcTlbdGetTxtE3\/iG2szAPJokY+ykEqiJVfPaADPdlT4ze\/rZ3TdQ75xvFCAZrXljZeVoJBMqQeQJ6WRkIuLoUAwMAAQEWAwMAKAAAAAAAAAAATwxUzwoKZVac8SgD+A7mr6xxWyeSVP1XG1iEDvtSuCM=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoCjNAAHYGQfk0ccKEwKgBBgG77HWQGkhCLoXDs1AQCAM2ZwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":240,"pkt":"EBMx8Tl2KDc3AG3ICABFAADiAABAAEAG9tTAqAEGNHJNIex0AbuczSMoSaIgqYAYEAlcWgAAAQEICjCEl\/VhBkyoFgMBAKkBAAClAwNgsc\/zVfk3fJaoeGVjBvcvXHJydxa1mwDEXFImXbQK\/wAAHsAvwCvAMMAszKnMqMAJwBPACsAUAJwAnQAvADUACgEAAF7\/AQABAAAAACMAIQAAHm1vYmlsZS5waXBlLmFyaWEubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":240,"pkt_type":2048,"pkt_ipoffset":14}
+0771{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1587041676362,"flow_last_seen":1587041676499,"flow_tot_l4_data_len":322,"flow_min_l4_data_len":32,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2334{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUL\/9AAGwGleM0ck0hwKgBBgG77HRJoiCpnM0j1oAQBAXctwAAAQEICmEGTTMwhJf1FgMDEGYCAABRAwNemFWMXBNb2F1eIS0NgygX31DvjFSWgfTq\/PXgXBX\/USAORwAAVmOWcPohT0niCo9N4puGGU7iW5AxxYvHQvC098AwAAAJABcAAP8BAAEACwAO3QAO2gAJHDCCCRgwggcAoAMCAQICExYACr2jKIomrOvxeF4AAAAKvaMwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA0MB4XDTE5MTAxMDIxNTUzOFoXDTIxMTAxMDIxNTUzOFowJjEkMCIGA1UEAwwbKi5ldmVudHMuZGF0YS5taWNyb3NvZnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8J31SJyCTCkjxtLC8JE7aU56y+0937PcYfrFGWW\/wSL1vxV6UtbY+5UyBq7YUvoZUI+YYWI6FMysHpnkiGQR5h3NLX2it0lgM0JMJXgIYfO+vdhJalxciwWfJHOcY4+eUQwpTmpGeOTzK\/sd1W+VOYbkgWPJ0lAEgTcRXL\/NZZAtyce+Sv4+b4jHwY9pwQxOHJWtnns0bK3jD\/RcAtjLeUisGvBGtt1SItPOQvgD6i2AdvjCkjqVXn0nxT\/yKuGkvtii1i85nrjeMS5pKgL+N2I4goIXeRAaK089dd0KrnNO6kLEhhSHgHwJHnPwfqeXH1Q2p1Zw2r13mOsJdyP7QIDAQABo4IE1zCCBNMwggF\/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2APZclC\/RdzAiFFQYCDCUVo7jTRMZM7\/fDC8gC8xO8WTjAAABbbe0zD0AAAQDAEcwRQIgXUu8wYK\/QqX5unkLcaUv4T8oQWu5yZb6M3RYbUFPJ7sCIQCVvziq+dynpJXSFyAk+ZobbjdMm8Ziuyzc0miXoW9hmQB2AFWB1MIWkDYBSuoLm1c8U\/DA5Dh4cCUIFy+jqh0HE9MMAAABbbe0zTwAAAQDAEcwRQIgOIr7NuYD18H8X6OV\/YdBgg0HoCy47ognD1Etlbp3ZVgCIQCAVAoqvjDqhz4It72mColVOT\/FZuexWjdVPWkvuAPY1AB3AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT\/TM5a1toGoAAABbbe0zEEAAAQDAEgwRgIhAMLyKXAV0HvPisLX5tlLiDTgtSUtRgffnQWc5h8Pdj8PAiEAo6ENbH0+qORahbVCksBW940dOZQUoTXblsn+bri9ExQwJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDQuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBQa+kPWU8gwtBlTGMvS3dHpIWlv7TALBgNVHQ8EBAMCBLAwgfIGA1UdEQSB6jCB54IbKi5ldmVudHMuZGF0YS5taWNyb3NvZnQuY29tghlldmVudHMuZGF0YS5taWNyb3NvZnQuY29tghkqLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tgg5waXBl","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSPWSaIr6YAQD9OIagAAAQEICjCEmCFhBk0z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2182{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1389,"pkt":"KDc3AG3IEBMx8Tl2CABFAAVfMAFAAGwGllY0ck0hwKgBBgG77HRJoivpnM0j1oAYBAXusQAAAQEICmEGTTMwhJf1BM0QKjyXHQCemRgYCc9Ll+TJ\/ADwDFqdNuiyQMFKrIQoqj1GGCuniqz0r0uofklCx2IgwOanO13rkB+7itickOM6sWzClM4+MmvLcbNBLrnF4V3YWSeC++FIDX7oBPH5ASdB+pRafcUwu7a61xGbiPoBzG5Lkrn4eDzLnGiaFmaI0JOwKoMulxEdfoEgYeSwuZucblOVlSLG2b11ELrZdYw8Px3QlvgzRXt7H1Qz5UiXpwUkotvR3JWuICp9lolIe5J60CSx3kgR92c8tN\/4WGD1T3s0aOb9rCYItvMsQ9tPxBbQmwxxh7EHa4bdj6Cx+2ba2Mvp8vBl5Y7YHOovui1k8V7QG1CyDIVKzzvILipqdYzArlzZ6cB8fXzanOO9SrBgB4IrfV3IEK8uYozcmv3h2blZSJdCGsNQgQsfgyJr5Ju8KSKC\/YBRXHVfDjXC3X8vemefPY5bjLuvnfTMDPuoH50hwfPnUhpdzhRXbVC4Se6xCyfS4mknEm7GwCY+56QrG4tTOAb6Goc64Et\/mRZOWT1ZafFxp2VlGwIDAQABo4IBQjCCAT4wHQYDVR0OBBYEFHp7jMHP56DKHNRr+vvhM8MPGqKdMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwkwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL09tbmlyb290MjAyNS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDQYJKoZIhvcNAQELBQADggEBABH+cgY6IQo3bsj1KSICYp5FDu36Bp\/vv54kNRf+OYiyuwHheN\/Ri5f9t3fxinJPSTrosynXdIfkufMXYIeIklWCvdl9E0h\/BpA6iWbnnZb3lc1gD9fhyvZ27vqbNUihmH3SkypPgRbHqJa70SXzpm9Q2gCbKqj0NQDj\/Sw77eUVm38WD8eOyTYglPAdAbkSUFCZgeAoQiyOeP\/txp7V5MrpoKqzSE+kX+SLGP8TAi2QETYYZig6IprelfFZ7p9tKhd1k1DDBRLV3mS0trzb13ZZ\/qXW5Vbh\/kZcO4r47A777xKQkc4gEoG6PFLjf+NA9AxBIGaHGNoyaeD23I8o8r0MAAEoAwAdICf13BoKrGZPNG0+yUJZK8TCtflNTiG631bDCjWUJK4jBAEBAHbj1ePhfFL5FSiea0SFM\/ZkVyK+eDewU7ywV8xdIo\/5AzxB4ECtK1IiGdkJ4RVX31AHi\/CkjfaxlSycpoLayFFGuAJ\/ODU7meLERtve+q8bpBRRkElp8CtGG9ufBWZM9OTtVSHSiids0Y1qJQaSL3O++gtGLx1JVip50NS8osX9SZs8vOU1mv9\/OX7t6Mf4KJwc2l5RJQo9oZOzhWuMVW1WLzsIvCX5rZUG4lQu5imnPzvYMSQrxbkvH5vRtOnQ0oCK3Q4B72NjaN5XozPSxx6kRN1\/Ro5FKsGYBxIif+k03b5X8xi1li92DKijNEFd0s2WeBCBNW7PWnaHVE4F\/NAOAAAA","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+1299{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":3,"flow_packet_id":8,"flow_first_seen":1587041676362,"flow_last_seen":1587041676545,"flow_tot_l4_data_len":4653,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":581,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0394{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSPWSaIxFIAQD9aDPAAAAQEICjCEmCFhBk0z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex0AbuczSPWSaIxFIAYEAAchAAAAQEICjCEmCJhBk0zFgMDACUQAAAhILIaMevnbK1\/hpHUboPpPe+pb1HBL\/FLZ+shbMz6dR9FFAMDAAEBFgMDACgAAAAAAAAAAIJ0SPvnUI1H6qTG02JvBbggKD0kfO8io3ogy9sAjVIf","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnMAJAAGwGm000ck0hwKgBBgG77HRJojEUnM0kM4AYBAUC6gAAAQEICmEGTWMwhJgiFAMDAAEBFgMDACgAAAAAAAAAAP2LLG2PnDQehKYYtBjGkN6MY9XhuxGTfkh6HM3dIStA","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex0AbuczSQzSaIxR4AQD\/6CJgAAAQEICjCEmE9hBk1j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1587041676612,"flow_last_seen":1587041676612,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.5","src_port":60534,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS07pAAAAALAC\/\/+ZfQAAAgQFtAEDAwUBAQgKMISYYwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8LqNAAG0G6+cofgkFwKgBBgG77HaiQxrbpEtO6qASIAC6gQAAAgQFoAEDAwgEAggKVQC94TCEmGM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5PAqAEGKH4JBex2AbukS07qokMa3IAQEAn5EwAAAQEICjCEmIFVAL3h","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":312,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEqAABAAEAGRp3AqAEGKH4JBex2AbukS07qokMa3IAYEAkkyAAAAQEICjCEmIFVAL3hFgMBAPEBAADtAwMFij+vLNUEXtDYw018fSI+oguo6nn0NGVGlSQBEa6j4wAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACc\/wEAAQAAAAAeABwAABlsb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAADN0AAAAEgAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQALAAIBAAAKAAoACAAdABcAGAAZ","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1587041676612,"flow_last_seen":1587041676643,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.5","src_port":60534,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2349{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":162,"pkt":"KDc3AG3IEBMx8Tl2CABFAACULqdAAG0G64sofgkFwKgBBgG77HaiQyu8pEtP4IAYBAVGDwAAAQEIClUAvgAwhJiBfbkMHpnw46Od39l8xQWfkMb8Y4m7UQItE2ZTaCJ\/+0VF2uUDoFo+ZzMmKB4UT6N0T0t8m216vjKZdmv27C48wjxjvRwQlpbFUmbQ8WYEeJCXNqNVwUeFV6amQX8OAAAA","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS0\/gokMa3LAQEAkrhwAAAQEICjCEmKFVAL3hAQEFCqJDJhyiQyu8","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS0\/gokMa3LAQEAkrJwAAAQEICjCEmKFVAL3hAQEFCqJDJhyiQywc","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4fAqAEGKH4JBex2AbukS0\/gokMgfLAQD9wllQAAAQEICjCEmKFVAL4AAQEFCqJDJhyiQywc","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5PAqAEGKH4JBex2AbukS0\/gokMsHIAQD6PnBAAAAQEICjCEmKFVAL4A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5PAqAEGKH4JBex2AbukS0\/gokMsHIAQEADmpwAAAQEICjCEmKFVAL4A","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGRxXAqAEGKH4JBex2AbukS0\/gokMsHIAYEAAHhAAAAQEICjCEmLhVAL4AFgMDAEYQAABCQQQP74ekfGdN7RlsIKxJMW\/Mq+2BmbW\/7thooJtpPdhFAXJRybFYYpNybjYDAprlNb7BJOhHI0JNyOl6DfP\/9SUTFAMDAAEBFgMDACgAAAAAAAAAAIThtGFHNQ+umo9GZEAGHfoPFZYiR2E7d8fH5weSTVVC","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnLqhAAG0G67cofgkFwKgBBgG77HaiQywcpEtQXoAYBAQEbgAAAQEIClUAvjcwhJi4FAMDAAEBFgMDACgAAAAAAAAAAHANvoMH+9tmLzSa8LTfBzm9iSTK+Iyg6aq8izKwVC1V","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1494,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIex0AbuczSnHSaIxR4AQEABkowAAAQEICjCEmPthBk1jhetVSaOs0tVuOWSWMQt9KqsujxkAMKWHRi1WGPxJI63MiRm2Ue\/V7d2WwiTSqcWMmV4UGBaBicxHy0Im9BFzDU3NPUffzhyUjcoAONACL0EqIVjd+10VQxMJcbmvHrnp5weXg+CcMG4Dd8yFN0vKXme0TYB80DXsjBqDYndTE8W1CDaLM1Fpt7g3kwqwppOJOdACvhyvD2b0bMN+27J\/5sUsuwybgNukgyii8wUecNhmpO2zLmM263oF3M2iHh2\/a3cCaSw\/q2SexfQDUFSiocH3Sj5MTL3FTfyXCVuzyFn1Z9sMNr+h\/uZxr7J4\/pYPPENAalR9p8vwjUF2SKtKyjMUltBbm8nHX1gFhoaJG8levkK1PAM0uiA4kXxEoXQBLTw4HDO6eHj7U8HOYflNZXJWB15vmpaF61hrJnxjWHv7QqxOKL7yWyxSAWNT\/YDsPFOJOVeKEtJyKrHXmo89w7s5jTRmj24Jqykxq3HbONuc9m74lriHWyALwtB4+19pOt8Ofv42xsEzdzppNHnN6WleK1tM3E3VtreWlthU0885jovLDfKT5DtNDmGtGgEhYwoxYmwCEiuJFqFGi0X3Kbm92KzNxjf8IrFjBzIiqUO9PqXwbfUup9qhvG9KOVQOg0xBhMjV6bc7a3Uv70HipO0VLfK\/95Zn2\/0+Kt4kLPjyEsDh3x1+wI3KKHFxsgRTJB+roeShavaOcq6wUrIhIrWz9nDgJ45C7pgGliTQcFcll5A8leMbwk7nc3fEQvLuT+07WcS\/MtgsUTIfKSBZ5kKvSbKLebl2\/2hxHU5+8hr6ODuw0pGl5BJKPZXudUVDojF0y+t+wviklcVBYGSeutHjyxzaPsOV30d7+cE50ezVy4fF0AAOK6tztNR5ayL\/o7BJYQqcWztDcXoZhqgV19AAsJH5OXGjv\/5XuBfBdUtK+4D95P7Kv8Hvu\/e7hKaVHfFkNxX7rtQ5KlOzOTCC6VUt+j5OCYKlTcJyhMGyqDl4L7iIWLTqmlkA7hGU2tnY5HAzfxtElKR+kqelu\/FinQpzRcf3I\/dHsQFRPfLRahYBMfi3fDEBbIbUT9hXjYctI\/+cDAlN\/5hyfxhna4YcY\/dA0zq22Bdvt4HYS8mZD4xWp5AmjhYnWr1I9Tb+xPnSg0sPnW83DuQpqY2LCUA++RU\/oFYJAuTZHg1A+eFNULtjFJmKsbNp5VWsaTAGUs3RXIf7VtLQ83xCL7CyPOY7dY94\/Yil4+jd3kf46y6K9IH6YPzz4d1TXXvmX71YzDR94JcxRaRnaARqx7T\/M5BNw5bhFW6ees0i4OJNgphq1VaLc3xNeIkFY6+S0icOS5yTlqzLV6zZHXQnLJIwP6QbL+TjaCXYpbZqDEkPhCxZ22MJ1RILD0FpjJPJlDopx3HaGqXbUJmyoohvW1tLqcChXQPB0cIEcKpfHUoQzXH\/Bt5Ulfa\/aPlOx7YjBTNYrlqHP+uUCsRkSJDK5+jHrnzCN8XyStU70Shbp\/CV73lzd1PTqBYjnrv+NQUgOSroLFuXu8GUiUHz9XVwBs5hq0aN\/pXA6kMANc+EClVvxxF910l93c7wo71We89\/85YCbH\/H11hsYuGjoAucYB143swT+YbDm9IrvMjghO8iNg1T9V5414OnB+Zig+jXFJXc2rpyVkqp790PqfQiSZYXzKGwZmYwLIX7Y2J3lrgqCltjx5WPaKCTgZLmvqFbyJZD3BNuEFcBZ5dyfSEvI7e4bYBQ4HdpBAuGeXiBCvN27t0Ca0F\/GUQILX5M2a9bOsfJp4IFIffaALVfwVVAPzgLFtn\/+q5CC2YHe7L\/Wr6N91+wKfktrFQIBiJDAae0dpARr\/waXCgK8wLfWnNDGNhN42hH8i\/H3fo\/x2KGVF4zCYeIlOf7cLP3","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041676,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1587041677042,"flow_last_seen":1587041677042,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex3AbvbPWM6AAAAALAC\/\/\/8iwAAAgQFtAEDAwUBAQgKMISaAAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8FwhAAGwGtHI0ck0hwKgBBgG77Hf6fNLR2z1jO6ASIACfvwAAAgQFoAEDAwgEAggKYRMfbzCEmgA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex3AbvbPWM7+nzS0oAQEAneQwAAAQEICjCEmixhEx9v","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIex3AbvbPWM7+nzS0oAYEAl+5wAAAQEICjCEmixhEx9vFgMBAMkBAADFAwM5dVF27rKLSF3ZLHW6jf6ecE8+y\/c\/MIkP9CtH6UUE1iAORwAAVmOWcPohT0niCo9N4puGGU7iW5AxxYvHQvC09wAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1587041677042,"flow_last_seen":1587041677088,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2334{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2179{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex3AbvbPWQJ+nzYcrAQD9zrQAAAAQEICjCEmlxhEx+fAQEFCvp83hL6fOM9","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2329{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUFwpAAGwGrtg0ck0hwKgBBgG77Hf6fNhy2z1kCYAQBAVCDgAAAQEICmETH58whJosLnNreXBlLmNvbYIQKi5waXBlLnNreXBlLmNvbYIiKi5tb2JpbGUuZXZlbnRzLmRhdGEubWljcm9zb2Z0LmNvbYIgbW9iaWxlLmV2ZW50cy5kYXRhLm1pY3Jvc29mdC5jb22CFSouZXZlbnRzLmRhdGEubXNuLmNvbYITZXZlbnRzLmRhdGEubXNuLmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmyGSWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwNC5jcmwwTQYDVR0gBEYwRDBCBgkrBgEEAYI3KgEwNTAzBggrBgEFBQcCARYnaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3BzMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MPGqKdMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATANBgkqhkiG9w0BAQsFAAOCAgEAUxCmyVHd3H7BNm7xrFDWc0lUKQfFfvZJj7fGm702yYNfNb17H3sDMMybFW0xvlL9Ezzab9UkH29uzppLcvgSPbaskyoVw+2aUUDOWU9BNPXX55faad2R1I6KtC+PfV7YLtmbicvSGz4AqzYw9ZreqUymbtwFHx+mEj1q7bV3EnUB\/tkVGJLU4rtEsbNOyNY0rT1MPRe2qZ6z8OTI\/Ubwew2S+CzQq6NSEinFnoQ24d33L9+Q2VR7IJxgZJZ0JLJRb2EkmyBTG1bJPbFiADdV1t9YSY2ps7oVekv29d\/XDIODAnQFR1IHqlMXtC77TWoRsh1X4rC3iStLm+7YDXNcZ\/4Mj9IuoDmWavbkJCD0d5pvrPILAZtuXahuvQzQtAY2n0vu1+AhHxMbk9e2L2iJYbk++P\/GCSsH0E3MwFuGBx2aD8kcD\/GasOSgJ2hX1PemGbx7\/Y9FGQudVhN6gkjLviiZxZQGDI3hc4aNkSo6HFXMcwVO63+RLd5FmQcXxQ4wQgOa8gPG9Z+WsefaydUjjPdFmpvxlC8L\/\/hy5Vj29oZ7skaSNpSCyBSNkBskAzSt9el50ZVrhM5J4i3BG1jJVGu2oqjlyxlbfhoa6VdObxpgGXjYRrBKCYMJOGSIW1HBsVpPOHiO3HTRTWSc3nsno7KhTt65NB2bdGHaIXFW18cABbgwggW0MIIEnKADAgECAhALarOwPrGp9sRgkmqozf6zMA0GCSqGSIb3DQEBCwUAMFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3QxIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3QwHhcNMTYwNTIwMTI1MjM4WhcNMjQwNTIwMTI1MjM4WjCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCr5etdo2s5nvU0iBK7HVImXX0JC8Z5jqu3Dt8Zst3uD\/bu9FbkRuKSD+JnC+MccaTUQXO0y5kWjr93fbCvHmztcS7DCHdKXpKu7FrQSIHQxemg9XqPHo1e062SwNrGkTUxILk5","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1165{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":6,"flow_packet_id":8,"flow_first_seen":1587041677042,"flow_last_seen":1587041677137,"flow_tot_l4_data_len":4697,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":587,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe*<","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"21:3D:34:04:2E:C6:DE:5B:DB:97:83:FC:EB:36:1C:5E:20:CE:40:57"}}
+0395{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex3AbvbPWQJ+nzjPYAQD6nNCgAAAQEICjCEmlxhEx+f","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex3AbvbPWQJ+nzjPYAYEACHlAAAAQEICjCEml1hEx+fFgMDACUQAAAhIHPBp8+wuw19lTcvNkHN8MSJxGoJG5HShn76nTcEFxwBFAMDAAEBFgMDACgAAAAAAAAAANbr7pZrkfyPmtyujxFx+COuaCSWjNqCq8kcxQsKiIjC","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnFwxAAGwGtEM0ck0hwKgBBgG77Hf6fOM92z1kZoAYBAWuSwAAAQEICmETH88whJpdFAMDAAEBFgMDACgAAAAAAAAAAAKrgBHo\/OOQWfKLiWv1DSZ7VsgdwrCQ83brRuEYu3dO","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex3AbvbPWRm+nzjcIAQD\/7LxwAAAQEICjCEmophEx\/P","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1587041677243,"flow_last_seen":1587041677243,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOx4Abt\/TkvVAAAAALAC\/\/\/5uQAAAgQFtAEDAwUBAQgKMISawwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wUlAAHUGi9Y0ccKEwKgBBgG77Hiki1UTf05L1oAS\/\/8DeQAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkvWpItVFFAQIAAkOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":268,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD+AABAAEAGgVbAqAEGNHHChOx4Abt\/TkvWpItVFFAYIAA3rwAAFgMBANEBAADNAwPZLPUYRvEghAe9kJUNx9IFhytDuazyHj3Xl0vfJTFFvgAAHNrazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACI6uoAAP8BAAEAAAAAGAAWAAATdGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMXVQAAAACwACAQAACgAKAAi6ugAdABcAGAAbAAMCAAJaWgABAA==","pkt_caplen":268,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1587041677243,"flow_last_seen":1587041677255,"flow_tot_l4_data_len":330,"flow_min_l4_data_len":20,"flow_max_l4_data_len":234,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0388{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAowUpAAHYGiuE0ccKEwKgBBgG77Hiki1UUf05MrFAQBAE\/YQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkyspItgbFAQH9IYOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkyspItmGFAQIAASXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUwU5AAHYGhTE0ccKEwKgBBgG77Hiki2YYf05MrFAQBAFxvAAAAQICE3gAErJ3YfnO2ox+\/bwAAAASsncwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA0MB4XDTIwMDMxNTE1MzUzOVoXDTIxMDMxNTE1MzUzOVowKzEpMCcGA1UEAwwgTWljcm9zb2Z0X0lUX1RMU19DQV80X0tleUJpbmRpbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEyAX+5SqsGiqoUBRMLbUF1MOQcsxK8kPSKDVxGywx62TXqosok\/w8WIw51eitl2x7hGoq0+h3f95iPllxy7yEMgH7qmedNRiuGxRK+fAa5MH9aVtlomaFyqBArysde41\/HXuL4UW4GtwiAkT5ExgE2wHYEV7T5X03YsAWWM3JKQwMjB+rXZkft+Uk5MWL\/cJto5+yML0QwJr2wL9Ak66bKsuEMnGd8UzoAOAp5Rk0DmxRztNTjl\/lZ2ntFXsAyJALx3q0EDreLw0q2SftDOieUHmNsOvbAPjYsWKtDXayhXR0gqkwAbamSUrmFXf6QE7XDQuHTRyG7d\/srUScNlDAgMBAAGjgdYwgdMwHQYDVR0OBBYEFJ\/ldPQSLwcZJHaSD6SOKmapFFoKMA4GA1UdDwEB\/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDCTAPBgkrBgEFBQcwAQUEAgUAMB8GA1UdIwQYMBaAFHp7jMHP56DKHNRr+vvhM8MPGqKdMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2BzJtHgcjpFgIBZAIBBzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMJMA0GCSqGSIb3DQEBCwUAA4ICAQBQf\/nlSogs2KaMuQIKX+dZl6u\/fN4stOkBATIA+8WfgJ+qNyF20yCllnRhbqa4pd5JTrRYGJZhGA7agazmyim9wGvV0HcHxLLN3oNZBP5gF5jLC0IqxgJEvTiyy1\/1wYRdtr+SpcKNi2ZCac3x7voBvsf3YH\/f1jAp2zQ87qKhRy1PmcUkJdsJR2OnkYNgdR6oPKCsPkPve+qZXjBdfEVjq9duYM1IFFq0MYXUlFCy8YhnxEcasx4mCnA6B14O98ewaSZZhGaP6Py\/67LRhuWf36qXptvXI8bFJZEld25A5aR+COHvYWrlWmmfie3I9YEeDGTVodHmHxesLeBLQQmxpuZgnJ1eZYwSS2g4bPN+OSonsgPlHLzmBJcUpzxJl3mgtcjyN+2OgF46A4V1ENucCVGdLYjsbo\/kk6U7V0KiqERMGjIUeUVMt9tfNUf6xYXUsVOKsIfNcAMbDiCO2hf6q+1nKxCJw6p0qsB1ANlzJi00XH17tvsddvABkR26jQRxWpc1ck4l6ErNYoE186dUnlcdlKjaIHU4jQ4CS6fS1HuZFQD6VdPpfAFSv8BxzC46PHD4wMhUHF2gx9Kp9\/ATrborJ6OxeXVS1Ba+IQzGX6MpVsGiH22VzumR7tEvftwy0MX7pfN+X9yHBrJmVvFG4s6d6wUOHM9cT9DziFvLgAwAAWkDABhhBE+RAXC\/Xyd7UGeindq9xlq2qMKybD1FvF7NS0Q4Wnqgy+n0khMcobgonh6xbfdP6E2KVfyXbwTlraeuMDOGmxneQcHBifND6feNrPEleiAvyZ63CqEHXbuSCiAa5uZ0\/wQBAQAuqm4B5\/bbJuxzQ4HWtDDnbGvzWU\/SbPr4jUYJusk\/mOTB1TEHVi7Ysu5R","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":271,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEBwU9AAHYGigM0ccKEwKgBBgG77Hiki2vEf05MrFAYBAHfiwAAXmhm9FMI3qyjcnWYHDq5pJXe5LxxQiXcS7F7UMWyodFmf0Y2n4UV1oaptfAq62Mp0hzP0jkRR8Koy5NnpWVYjEEaobvfceXcy2e5kVF+mgUEbNMUUEHK0j5oyhuvhNYbp2ZSRS2srlEhhTZPrqPsdetHCr7lhX+majSPjB+X\/p7T24uO+LOMiS\/yeCk67d9qdVGcdwSOZ342Z1h4dM\/m4hrDY2zgeDXbNjB\/GfFdIsk52m7C1N7zBwfS2ftaTTJLXZDO0benj1Uao8znBEwW3iHOavB0DgAAAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+1052{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":7,"flow_packet_id":12,"flow_first_seen":1587041677243,"flow_last_seen":1587041677269,"flow_tot_l4_data_len":6515,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":542,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}}
+0381{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx4Abt\/TkyspItsnVAQH8sMDgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0595{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":212,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGgY7AqAEGNHHChOx4Abt\/TkyspItsnVAYIADFvQAAFgMDAGYQAABiYQTxgotmGkb9FcH5FUJAmY+IuSsOw5d+NiTKNDdr8gMKGCiRz+OrN2usCVeyQuJ2hYG0lEs1BP4wAxS3bfPvL9r2KEGBZkrJHYatnTVZxhAAdnXdPSdHbUfx19ZFZrZkHzAUAwMAAQEWAwMAKAAAAAAAAAAAaIoAUkcmslIl15A1c+bAL53g4S7Y2eLaeTpGpoRJasw=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAowVBAAHYGits0ccKEwKgBBgG77Hiki2ydf05NSlAQBAEnOgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGPCzAqAEGlZqnW+SlAbsZTPC8DAoX91AUECaMmwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1047{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":7,"flow_packet_id":255,"flow_first_seen":1587041677243,"flow_last_seen":1587041677384,"flow_tot_l4_data_len":190466,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":746,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0751{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES5AAEARZ+PAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGADtdrMEAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041677,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1587041678029,"flow_last_seen":1587041678029,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex5Abv0H+uOAAAAALAC\/\/9XkAAAAgQFtAEDAwUBAQgKMISdwwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8KlZAAGwGoSQ0ck0hwKgBBgG77Hk7ZXhQ9B\/rj6ASIAAz8QAAAgQFoAEDAwgEAggKYRL\/2zCEncM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+uPO2V4UYAQEAlydQAAAQEICjCEne9hEv\/b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIex5Abv0H+uPO2V4UYAYEAlkRgAAAQEICjCEne9hEv\/bFgMBAMkBAADFAwOeU\/FfLHrtrdCBVUwx+w+ija6LF0MoHL44Af8vhwR8KyDASAAAvuo5mSGLHTbLJlo\/aqiaHVmeYbbWtXIqS6QEPwAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1587041678029,"flow_last_seen":1587041678074,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2335{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+xdO2WDkYAQD69magAAAQEICjCEnh1hEwAE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2185{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+1300{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1587041678029,"flow_last_seen":1587041678120,"flow_tot_l4_data_len":4685,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0395{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+xdO2WIvIAQD4ZhaAAAAQEICjCEnh1hEwAE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+xdO2WIvIAQEABg7gAAAQEICjCEnh1hEwAE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex5Abv0H+xdO2WIvIAYEAA4KwAAAQEICjCEnh5hEwAEFgMDACUQAAAhIP7RpoO5uqiByuxIuFaSUf7cSQPUqY\/bPrLjbKhyQYw0FAMDAAEBFgMDACgAAAAAAAAAAA2bwhqRB70JhCC7tK0J+uT0p40fntt9Ofuwu8IMPAUS","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnKlpAAGwGoPU0ck0hwKgBBgG77Hk7ZYi89B\/suoAYBAUy2wAAAQEICmETADcwhJ4eFAMDAAEBFgMDACgAAAAAAAAAAHelKESahrXk8NeOsJcyeXwB1mevaMDIfanvCHkpcUO2","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex5Abv0H+y6O2WI74AQD\/5gAQAAAQEICjCEnklhEwA3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2332{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":1494,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIex5Abv0H+y6O2WI74AQEAAoYgAAAQEICjCEnkphEwA3FwMDG2cAAAAAAAAAAZWrlc0xquAlEvLg1qd3Ae5HeSo+iORe3JZNH14zWSiFWZJRmwAZvfrqVn7gmX\/rBt9nqaoLblCpp70qMBnSlYFTpLvirc1co0KqGiQE+L+jglGG2U181le9GMVy6lTlGpt3HjbhTIt1xyS2V+dwLbOqWsppgDq8iEvfGeRGjo8ubs2SAmphgiJEVy+ftkrvWmIxlnJEe0KJeNfyl420ieFoLwDIKqKxsKNo6wrrtmz5U81Mxy5z9+CVZRVUR1GSMDdtSjCDuXfd0er7qCMW0JkPh3vr6ANjn67SFYnQjWRYyUrtbC\/QAereKfnogKEVrQYU+Zi0n3EfB3UcYgsYQi0Jzr3lsWTtOwT\/xmia\/4cCIicAQ\/GMhxPKNinUw3VBSdzebgMVrM5lV6emBMyD9p97FPZFSo9oMfOuOqPOV9JM5biYw56\/12WdgNU4QNKnnC0X7VNC\/qsy8xWEkirzVaJdTjKQVtA9Fdigzp8pVZdmcKxxLYRg\/Qy20HdyxD1dWotjW\/iCqC8s1AXTBo7GlVjfO\/46wnL+Z4hJ9ooUjSQJ3qd0vK2MQRbUbbfNbpj4x2tSKJCGnRMDszzIMrX+hmB7uef3MI+S59QOmIsKrXeoNXsLxmuRw6W4F6xhxYbgZFioL71ouyMa\/A7+UR7J48hxdj08TZzumyLbjJ9ujRMIAhxdFkXyqkmWuq6rw4XZ4o\/0QF+S8Z5iYLfdWj8AKOnPMSYoPRfAU509DGJp1aGBtfkwf5gGb0I\/iYSVteGjlJI\/tk0wbS8mF\/IIb7FHDv71tM++F85Yapsne1iouzN443i3GO1l0aQUUV5YLGK6AiH0expNocaeSgcl3nS8WrX9MnMPzJtLpks0BpM2Y2mIbS\/a+CGlovrjadPZENRsN1miaMj5bLtdR+IMvXHqlQ7IHhdsaneLMkjaEms+l5c8L+yKl\/neXkCF6qYd7ugaYZ86T4LTsh6vXy1C1Gh3YoSFW7TxxTkhmdO0sPy6a6rOF4q536Obtt0ZjQL7Xya8ZO2+aniELVmXA2pi7zgWFG83HZPnAB4T4CgzzJ0VXZta09U\/tOKTPbXRti5aNbBP3kgjHoOKaLQa0fOHzHIWxuUJKV0JtnpeiVrlepeA0jYzOP286YEkCbpDlE\/bzceBRqNAShu6k+gRSkYmKG1WVKQqdIEawJwhNbLpBJa7HLC35zrjR1vC08PdBJPZHkGD9LsgHqUXqGDntDrZfuxV\/28wBkPK67i2NTOWEroUVGereH641SSKM9CWqsYmgq9pJsqdJ4wxEsuyiurR9ftmh9Dn5IQwpBeKzF0LR7w3SuHdkAKTQFB7rMjTx2HntUhG4EdcNvsQVLEUWh53KJPbvECnbJ5nHenBk9V9f0HVxFzpWLfveMyIf8bwtZw7gacmbaEHux4rkgMeXCJQjw\/DtoPIKQ7g2DZoVXj+LF2C9tapALqNK4Fo\/ZVZnoOTO5ChtIFuJA6d+3\/JzAdDHm+O3MsVmKgaicqcTOZeCd75hKNXR0\/oWrcWr5FIx2w89TRLqc8ES7Qdw3zwZGFPs27DKxhFEVnWuZV\/McUmB92gxyYl1JVZheceYxPjLdgTM4tDQrPgibg+kExAWj1UTbwyni7kq9MHpCQwNG+YfGuOlxjWQFkiomPenkBPCTFSHKvYLmwTfK\/6qrFdmMMSPpxYNgs40zsx+Ft3HXLWhcxjmnYtEwsd3W3I4Rg1kZE8bwc95mkKpIuMlzIUYZi3raBYtR5ACkmghCN7voA4EDuCeqmMDvOyrhei5CYM6AuwQKXhoU8nXbOcOmtd0dI\/dTBJO3mj+nR98Fz2PF5aAObS\/JKA7B9YmvOzXszSJB0xa6DDIfcSw6iiRblePgc0QjR08bOQ2XbS2+hB","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041678,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1587041679059,"flow_last_seen":1587041679059,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041679,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFmxQAAP8RnTvAqAEGwKgBAfouADUAMTs\/p0sBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1587041679059,"flow_last_seen":1587041679059,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":1587041679280,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1027{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041679,"pkt_len":527,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAAIBKZoAAEARjaTAqAEG\/\/\/\/\/0RcRFwB7XmveyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAxMzMzNTg3NDkxMjE4NDQ1MzM1NDE0MzUyMjUyODU2OTU0NjIxMiwgImRpc3BsYXluYW1lIjogIiIsICJuYW1lc3BhY2VzIjogWzI3NTAzNzA1NjAsIDc4NTI2NjE3NywgMTUyNjI2MzA0NSwgMjg1MjE2MDcsIDE0ODE5MzM3LCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgOTk2MzA2MjE1LCA1MzAzMzAxMjQ4LCA0MDU2NDYyNTkyLCA3MDUzNjI3MTg0LCAxNTIyMTc3NTg3LCAxNDIxMTE0Mzk5LCAxMjUyMTE2NDI5LCA5OTQ2OTc3MywgNzA3OTYzNjY4OCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNjQ3ODMwMzQ0MCwgNTExNzA2NjQyLCA2Mjk3OTU1MTg0LCAxNDE1NjIwMzUwXX0=","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":1587041679280,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":1587041679280,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1023{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041679,"pkt_len":527,"pkt":"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","pkt_caplen":527,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":1587041679280,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041679,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041679,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0420{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFhq8AAP8RsaDAqAEGwKgBAfouADUAMTs\/p0sBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0494{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":136,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB61LQAAEARImfAqAEBwKgBBgA1+i4AZgAAp0uBgwABAAAAAQAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAHAGwAGAAEAAAA7ACkFZG5zZG\/AGwpwb3N0bWFzdGVywBt4ZvNkAACowAAAHCAAJOoAAAACWA==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":9,"flow_packet_id":3,"flow_first_seen":1587041679059,"flow_last_seen":1587041680074,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1587041680216,"flow_last_seen":1587041680216,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0858{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":397,"pkt":"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","pkt_caplen":397,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1587041680216,"flow_last_seen":1587041680216,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1587041680294,"flow_last_seen":1587041680294,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":68,"flow_max_l4_data_len":68,"flow_avg_l4_data_len":68,"midstream":1,"l3_proto":"ip4","src_ip":"93.62.150.157","dst_ip":"192.168.1.6","src_port":443,"dst_port":60512,"l4_proto":"tcp"}
+0450{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":102,"pkt":"KDc3AG3IEBMx8Tl2CABFAABYCTNAAHEGSuNdPpadwKgBBgG77GBJd2ZkkI5L3oAY\/\/uUpgAAAQEICsJ1bW4wg\/kbFwMDAB8AAAAAAAAABVYf48xkHJTZ\/YMO7dmv4tC6Gofi60hR","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGhUbAqAEGXT6WnexgAbuQjkveAAAAAFAEAAAvzgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1873{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":1156,"pkt":"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","pkt_caplen":1156,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGhUbAqAEGXT6WnexgAbuQjkveAAAAAFAEAAAvzgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041680,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1587041681218,"flow_last_seen":1587041681218,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":89,"pkt":"EBMx8Tl2KDc3AG3ICABFAABLUFkAAP8R5\/DAqAEGwKgBAd06ADUANyl9Kf0BAAABAAAAAAAAB2NhcHRpdmUFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1587041681218,"flow_last_seen":1587041681218,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com.edgekey.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0502{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":142,"pkt":"KDc3AG3IEBMx8Tl2CABFAACAqEJAADkRFdPAqAEBwKgBBgA13ToAbAAAKf2BgAABAAIAAAAAB2NhcHRpdmUFYXBwbGUDY29tB2VkZ2VrZXkDbmV0AAABAAHADAAFAAEAAADSABkFZTcyNzkFZHNjZTkKYWthbWFpZWRnZcAmwDsAAQABAAAAFAAEFzKeWA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1587041681218,"flow_last_seen":1587041681248,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":55,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"ConnectivityCheck"},"dns": {"query":"captive.apple.com.edgekey.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"23.50.158.88"}}
+0343{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0174{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0171{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":1587041681714,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp"}
+0416{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":80,"pkt":"EBMx8Tl2KDc3AG3ICABFAABCnaYAAP8RmqzAqAEGwKgBAcdZADUALvSsiC0BAAABAAAAAAAABmV1LWFwaQNhc20Fc2t5cGUDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":1587041681714,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"VoIP"},"dns": {"query":"eu-api.asm.skype.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":1587041681714,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":95,"pkt":"EBMx8Tl2KDc3AG3ICABFAABRU9EAAP8R5HLAqAEGwKgBAfaCADUAPVgfcugBAAABAAAAAAAAB2V1LXByb2QHYXN5bmNndwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1587041681714,"flow_last_seen":1587041681714,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"eu-prod.asyncgw.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0582{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":203,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC9OkBAADkRg5jAqAEBwKgBBgA19oIAqQAAcuiBgAABAAMAAAAAB2V1LXByb2QHYXN5bmNndwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAHADAAFAAEAAAvAACoVYXNtLWFwaS1wcm9kLWV1LXRlYW1zDnRyYWZmaWNtYW5hZ2VyA25ldADAQQAFAAEAAAEsABoOd2V1MS1hcGktdGVhbXMIY2xvdWRhcHDAZsB3AAEAAQAAAAoABDRyS0Y=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1587041681714,"flow_last_seen":1587041681744,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":61,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"eu-prod.asyncgw.teams.microsoft.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.75.70"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1587041681745,"flow_last_seen":1587041681745,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60538,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux6AbuCUaOxAAAAALAC\/\/8ErAAAAgQFtAEDAwUBAQgKMISsLQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":182,"pkt":"KDc3AG3IEBMx8Tl2CABFAACo\/M1AADkRwR\/AqAEBwKgBBgA1x1kAlAAAiC2BgAABAAMAAAAABmV1LWFwaQNhc20Fc2t5cGUDY29tAAABAAHADAAFAAEAAAb4ACQPYXNtLWFwaS1wcm9kLWV1DnRyYWZmaWNtYW5hZ2VyA25ldADAMgAFAAEAAAEsABoOd2V1MS1hcGktc2t5cGUIY2xvdWRhcHDAUcBiAAEAAQAAAAUABDRyS0U=","pkt_caplen":182,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1587041681714,"flow_last_seen":1587041681754,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":46,"flow_max_l4_data_len":148,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Skype","category":"VoIP"},"dns": {"query":"eu-api.asm.skype.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.75.69"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1587041681755,"flow_last_seen":1587041681755,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60539,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex7AbtPkLhOAAAAALAC\/\/8ixgAAAgQFtAEDAwUBAQgKMISsNwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8MUxAAG0Gmwk0cktGwKgBBgG77HoxlVjpglGjsqASIACccwAAAgQFoAEDAwgEAggKVud31zCErC0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaOyMZVY6oAQEAnbCgAAAQEICjCErEZW53fX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":292,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEWAABAAEAG+HvAqAEGNHJLRux6AbuCUaOyMZVY6oAYEAmUUgAAAQEICjCErEZW53fXFgMBAN0BAADZAwO+LJEVwOHGYhKiVcLvt6A9rXWEi+VY68GJ4Pnee\/+sYQAAHLq6zKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACU6uoAAP8BAAEAAAAAKAAmAAAjZXUtcHJvZC5hc3luY2d3LnRlYW1zLm1pY3Jvc29mdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjq6gAdABcAGAAbAAMCAAL6+gABAA==","pkt_caplen":292,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1587041681745,"flow_last_seen":1587041681772,"flow_tot_l4_data_len":374,"flow_min_l4_data_len":32,"flow_max_l4_data_len":258,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60538,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-prod.asyncgw.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0408{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8PqJAAGwGjrQ0cktFwKgBBgG77HsaOOK2T5C4T6ASIABGlgAAAgQFoAEDAwgEAggKVN17aDCErDc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLhPGjjit4AQEAmFKgAAAQEICjCErFNU3Xto","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":277,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEHAABAAEAG+IvAqAEGNHJLRex7AbtPkLhPGjjit4AYEAnBuAAAAQEICjCErFNU3XtoFgMBAM4BAADKAwNa\/jUh9W55wUB0tnlMq1eAEhrPfTr7oU\/DtVhV\/8e2AwAAHNrazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACFGhoAAP8BAAEAAAAAGQAXAAAUZXUtYXBpLmFzbS5za3lwZS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAgqKgAdABcAGAAbAAMCAAJ6egABAA==","pkt_caplen":277,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1587041681755,"flow_last_seen":1587041681786,"flow_tot_l4_data_len":359,"flow_min_l4_data_len":32,"flow_max_l4_data_len":243,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60539,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-api.asm.skype.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2338{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUMU5AAG0GlW80cktGwKgBBgG77HoxlV6KglGklIAQBAXbeQAAAQEIClbnd\/MwhKxGsYFQCvPTWcgwCwYDVR0PBAQDAgSwMCgGA1UdEQQhMB+CHSouYXN5bmNndy50ZWFtcy5taWNyb3NvZnQuY29tMIGsBgNVHR8EgaQwgaEwgZ6ggZuggZiGS2h0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA1LmNybIZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjA1LmNybDBNBgNVHSAERjBEMEIGCSsGAQQBgjcqATA1MDMGCCsGAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMwHwYDVR0jBBgwFoAUCP4ln3TqhwTCvLuOqDhfM8bRbGUwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQA2X\/om4H+4\/cR81+swhscxS+n0lRF6\/9QaS3UJkZbRbKTCin3OgcYqSG9pYg6G1+1K1UtTBpsolwlA3Wj42xE7Uv4QpgEXC5f0oaTcFK1me59SUtzp5qGDrwX6WjG8Ktb6uYB5gEczE7C4PC+CFPM3paTb5H5cy9SB3sXBctpW9JL3Q4jgLf0RmKI+tU\/yzqXGVuQXEGhEGBnx2gx7c5jv9zuJnDG+h+fy0tJ8oKxrnU3\/YDtE5a8Gc9riCos64k1IwawJ2ex5sg6EIN6aZMm7jlbnY0GaYkT3Xzq9y\/pq48vIUbUNujVUDc5\/R\/SCSk\/dzf6G7\/xO1H5cZnPEC40ThKUvhXFO2qUKIhsUCjzJG5EdSNtcUv8eCyVsfCMB7dRsifQSwSDmGmM4n\/G81i0O9M4b2XZ+YaSEgJZmQx7Uh5AdoOqwYq2SqBhAihGJdwH2XMq283yNTDRqqo\/WVv2tQAJnjORm59j1r8dDWyuUfRzmyA\/balmQRC8\/yMgQswTFwP1y97tt4lyNjydBDOIBJv2TudKgtjqTbU59+fWu1pBkJP0+oPi5U7f32J4ZwXrKLU9tbuRaGYpYaW\/H8\/s8ycG4tlrTfTYH+M+FW9Y1DTTSC08bOYNW3zgFB64XvsPWTwevXfQWad0gfn6zMKIffJ0Woh7B4kndlMdWD8PoFQAFuDCCBbQwggScoAMCAQICEAiIzVJfGSRETRSlgpHeuVIwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVyVHJ1c3QgUm9vdDAeFw0xNjA1MjAxMjUzMDNaFw0yNDA1MjAxMjUzMDNaMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJrfgVw7j67peZa5mnmngfI52lUoRiMCxYJmB7YV3v2cOhqbkQnSZo8LiRf4cYchfzjTP5olALc10Kv4CHo281Bb3yspJ96k3SSS+vTGcI02KprwgN41+h5CnQmBqtUHChalxVpCbUK+HkKCtFcwmVtFK9SP0woGxnOTpOGD78W\/BSeneM2zC+CeIhbzmNymFOjMlNcj+dBQmbu1CxCV8d8C6Y+OnVaZPNiP01j7XJJ+PXv4","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":302,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEgMVFAAG0GmiA0cktGwKgBBgG77HoxlW9qglGklIAYBAWUqQAAAQEIClbnd\/MwhKxG3ueO4RFj+c8GEWZqZ2ovmlySwoou222o9uG3S2GrB1TfiWZLWZVissMZEKj22iCLiOSMDLRfrYOYclJv+d+871WdAeCW3f0oejs+a5PLWILQOxN1oJUmkzygCfKvgb0GTQZa4zf7vuGEH+a9IHNMZPFTq52DrUJ2zRbLbWITFYCD7IgBrczHOWvPH1ug3jIaaD2PdYvFV+\/lwr\/7oOvoj\/NFH9sKjIdd18UnE4QERIUspogHtp2gCNVnFCK6UG1hMOqHExEk\/B8blqIWUhvX\/b7W9\/zleEhQ0+sc8Cv\/Bbrp4V+zCsaDew4AAAA=","pkt_caplen":302,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux6AbuCUaSUMZVY6rAQEAl+FgAAAQEICjCErGJW53fXAQEFCjGVXooxlWQq","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVkKoAQD6\/PCgAAAQEICjCErGJW53fz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVvaoAQD1XEJAAAAQEICjCErGJW53fz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVwVoAQD07DPwAAAQEICjCErGJW53fz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux6AbuCUaSUMZVwVoAQEADCjQAAAQEICjCErGJW53fz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+N\/AqAEGNHJLRux6AbuCUaSUMZVwVoAYEABuqAAAAQEICjCErGNW53fzFgMDAEYQAABCQQRCHykjycQ+YysDW1nbaTFzY5zguJV1X+39rCv4Go2SaRWNHbEhm5ZXStHmGt0y5fJQP8fyRomQ2T4QmssmKb8zFAMDAAEBFgMDACgAAAAAAAAAAJde95qF1h+K4M0YxerhkxaYKARQZ6\/4jiLUbo+vBbUG","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex7AbtPkLkiGjjit7AQEAk4IQAAAQEICjCErHJU3XtoAQEFCho47fcaOPOX","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex7AbtPkLkiGjjoV7AQD9wykAAAAQEICjCErHJU3XuGAQEFCho47fcaOPOX","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLkiGjjzl4AQD6ZznQAAAQEICjCErHJU3XuG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLkiGjjzl4AQEABzQwAAAQEICjCErHJU3XuG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":910,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":276,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEGPqdAAGwGjeU0cktFwKgBBgG77HsaOPk3T5C5IoAYBAWlfAAAAQEIClTde4YwhKxTMVWY2KoM3UYNmUH53VfnFXQ7Balll6FrwjaWxkYmpJt0YQsGfB6o7My7usVjRo8Gl8LHEn9yDr8ZQjiqXpWCxWD1TPA5JGPQ4rki4qwn2LQnW1Z8jDbbG2rCsSoIsJ13reEorAWYQD9lgY7u6NhKhQivxM+NrK3lC10+ksRahXbaAed8F13P2B6X6pzJCA3sXXJy0ubM3rtfZ\/JuagHOdHC6t5DukWhpcRN\/gb9\/\/aLYdj+03iV+MEje6vELnhdfMDQOZ6uyxdS\/Ox2Q0OUOAAAA","pkt_caplen":276,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":911,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex7AbtPkLkiGjj6CYAQD8xtBQAAAQEICjCErHJU3XuG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":912,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041681,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+ODAqAEGNHJLRex7AbtPkLkiGjj6CYAYEAAfqAAAAQEICjCErHNU3XuGFgMDAEYQAABCQQSp\/xAWzX3m+GIpNYZNVd0zA6MTBbdTMGVEx0p1jU87SuX7JAy22e1aGg2H\/gasj5M3tBe1eXKbBJ6jddJBRYpYFAMDAAEBFgMDACgAAAAAAAAAADSGNV1DA1tmj+MfNOrWBiBzPkbQyCVjLR4dzDxIj2ac","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1587041682076,"flow_last_seen":1587041682076,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60540,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux8AbuMg\/cHAAAAALAC\/\/+l4gAAAgQFtAEDAwUBAQgKMIStbAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1587041682077,"flow_last_seen":1587041682077,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":933,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VLAqAEGNHJLRex9AbuFeblcAAAAALAC\/\/\/qlgAAAgQFtAEDAwUBAQgKMIStbQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":934,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8XUVAAGwGcBA0cktGwKgBBgG77HwdJJF2jIP3CKASIACM5QAAAgQFoAEDAwgEAggKVscEoDCErWw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":935,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/cIHSSRd4AQEAnLdwAAAQEICjCErYpWxwSg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0708{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":296,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEaAABAAEAG+HfAqAEGNHJLRux8AbuMg\/cIHSSRd4AYEAmCtgAAAQEICjCErYpWxwSgFgMBAOEBAADdAwM8bxQ0whreuqvYvEztjLrW4PBGRpjuL7egzSBD9aU3vgAAHKqqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACYCgoAAP8BAAEAAAAAKAAmAAAjZXUtcHJvZC5hc3luY2d3LnRlYW1zLm1pY3Jvc29mdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAISkoAHQAXABgAGwADAgAC2toAAQA=","pkt_caplen":296,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1587041682076,"flow_last_seen":1587041682107,"flow_tot_l4_data_len":378,"flow_min_l4_data_len":32,"flow_max_l4_data_len":262,"flow_avg_l4_data_len":94,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60540,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-prod.asyncgw.teams.microsoft.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0408{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8CPlAAG0Gw100cktFwKgBBgG77H37toO1hXm5XaASIACQKwAAAgQFoAEDAwgEAggKVQ929DCErW0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebld+7aDtoAQEAnOvQAAAQEICjCErYtVD3b0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":281,"pkt":"EBMx8Tl2KDc3AG3ICABFAAELAABAAEAG+IfAqAEGNHJLRex9AbuFebld+7aDtoAYEAl5vQAAAQEICjCErYtVD3b0FgMBANIBAADOAwNRm85ZKo2j5rIUIlemfdLsNPrk0mWhHKlhPOh2TLU7CwAAHKqqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACJ6uoAAP8BAAEAAAAAGQAXAAAUZXUtYXBpLmFzbS5za3lwZS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABgAGwADAgACmpoAAQA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1587041682077,"flow_last_seen":1587041682108,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":32,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-api.asm.skype.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1587041682129,"flow_last_seen":1587041682129,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp"}
+0425{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIVE8AAP8R4\/3AqAEGwKgBAcFqADUANJ5TmvIBAAABAAAAAAAABmNvbmZpZwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1587041682129,"flow_last_seen":1587041682129,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"config.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2337{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+VHAqAEGNHJLRux8AbuMg\/fuHSSRd7AQEAkmRgAAAQEICjCEradWxwSgAQEFCh0klxcdJJy3","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/fuHSSct4AQD6+\/bgAAAQEICjCEradWxwTA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/fuHSSiV4AQEAC5fQAAAQEICjCEradWxwTA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUXUlAAGwGanQ0cktGwKgBBgG77HwdJKJXjIP37oAQBAXwVAAAAQEIClbHBMAwhK2Kn1Qet5YvmxEJQA2HbHgnngQuAR2gggUjMIIFHzCCBRswggMDoAMCAQICE24AFdNPBmaWWBEkr9EAAAAV008wDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA1MB4XDTIwMDQwMjE2NTgwOVoXDTIxMDQwMjE2NTgwOVowKzEpMCcGA1UEAwwgTWljcm9zb2Z0X0lUX1RMU19DQV81X0tleUJpbmRpbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vbFFZga\/POcMNPw1dgv2un35hrdvRno\/bBLdqRDnw10YI02qHluRhaXn0ywENQe\/0R\/7DYJrN1STc3KeGjgTy+l0QKHrulfQbrYNkE6IWaW4E0pu4LnDLSoWm4NmJ+4Jov8kiKgf6pnHDWf1P4iU9huFQi30sRZshzPc0q9UCMvba4Jsh7h+BB6JFBjoJAw46Iom9tUbSOL6u1zzr4zGGGXhZP+gDSsQX+uQHIyTZU5KE+bs5h2Q8Hglp1KxjESVB0lCpm1nsPHVCgjumm5i+nCLOz1uTn+qk9tk5fZ98Q2Ztg9fwgQigcia\/D53k4K6OFwfw0PzLYPcAS3dg7JLAgMBAAGjgdYwgdMwHQYDVR0OBBYEFCh3Ac5lnou4VSj4K88j38W8dhpMMA4GA1UdDwEB\/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDCTAPBgkrBgEFBQcwAQUEAgUAMB8GA1UdIwQYMBaAFAj+JZ906ocEwry7jqg4XzPG0WxlMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2BzJtHgcjpFgIBZAIBBzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMJMA0GCSqGSIb3DQEBCwUAA4ICAQBl5aandQ99EtkjJSQg4\/erMAO+8kd6xjrcNzbKdJmdXDLCCNx4V\/6T7JABdTiq20PBxVuXxEDFndNHE4r+3H25iZpq+0SbezCH2HkHsMK+Yhd+qwkmVGkr84UZ9x\/j0E0FlcmTLn1\/xh8nj2GyImJZyFyUQLPanTgh6OVjauPMIyeAIxPZukDNgGwleiYBsqxVGXTsthPgIuF0gget36zJN653KOQx8lvfjL6rHF4MK91358sodyvFRqjdlex3vDPeaTURZBVpOj4x3f8QJS8Q7laNeMh7rJwqiayWnB74QW3oyOCK3lM7FncffccA0ji9Pnc9E2jIpmGQThL2IUJnN8JNZ6ewmRmmeUswAEThqo1ABfplT\/NqlsAZL0s9NqIq\/1HLWAwpquytNt2cXnCKfACZWHCprz208rNt8GThXTjIE90MnYOMVMtqdNDcQsaqEqqqZy+uy4eCE7Z31qTUc\/XcTHELT6Lj4auGohTDJbF2OeJQmXKV436KIhooSDqO+tUcVatHc9S0NujxMRpwTIX3pzzFdyM9WdRWuFUj77Z2+rI2kxnwAIkAPD0kQTyBOiinMYeWqObfpp2Vu9pkDXQbGz4H+dDHtrs15bXvHVFWI7ZEYk6TiUdJiTMkvMBfEV34nqJyDHYnMUGJWTuOhvWrrR7OQQwN9pF2c9cVDwwAAUkDABdBBOQRcjPcZLIMalgCPqcm4aTgP67kySd3NEaQbnttIfeIp+OzZ1CvLIzF6+iy4yZ3Zw\/KIlpTsU8e5k93GJqBX4gEAQEA1VJR+fOkVWhl\/LKSHbU\/vuLuYw1IUDl\/","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":962,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":302,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEgXUpAAGwGbyc0cktGwKgBBgG77HwdJKf3jIP37oAYBAVblQAAAQEIClbHBMAwhK2Kx+ZC58DkeMrfhR7U96as3cw+sR7\/rf1hy1qBiX86TIWnkXBHqXFDz7pngVzlpEKfDIDcxHKBTojp1WBGaQWJLAiFfJwhf3B\/PE6LD69PuXrUgzlBkcoammuQLH69vK84+9UGmMsZln5rc8Rwp+oYxiNVjwfIpJEoh+GmG34JsE7A1Doe5ToKKNBCgCHh94ffgv9OYHIGDMPgBt\/16XdtRNLGA7kMik5t2z0IxwLPd3MLF332WEAxDomet8qVnRSsKGssN\/L\/02gB33jzlYISmgtVsgiQz54vJPAdu9sReLefqOrYou5AMQ4AAAA=","pkt_caplen":302,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V3AqAEGNHJLRux8AbuMg\/fuHSSo44AQD8uzJgAAAQEICjCEradWxwTA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUCPpAAG0GvcQ0cktFwKgBBgG77H37toO2hXm6NIAQBAUeeAAAAQEIClUPdxEwhK2LFgMDF00CAABVAwNemFWQkTKZfyBaLuzO97G0quTrEm7BgPWyftzaEzJa0iBuSwAAwHf6a8yXd\/slaOSfyDbI53lK7p5dSy9A7BIMcMAwAAANAAUAAAAXAAD\/AQABAAsADnAADm0ACK8wggirMIIGk6ADAgECAhN7AATgvGLpy2Vku+GeAAAABOC8MA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgMTAeFw0xOTA1MDcxMjUwMDNaFw0yMTA1MDcxMjUwMDNaMBoxGDAWBgNVBAMMDyouYXNtLnNreXBlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSeVBZeaxVgbEF7BDFpA+N3ExF3ZQK1QrQQqA05Ko2A7Gpby+2Es8MXR3Kj2VRAX9P5YFzjF3SN5faeJJRz+j7An2iOLXkwQNkglDT6\/sjB3LbEb7T\/nzN+yIm+S8blVfyih6JM9Apu\/ik1krtvLJUniVwHJtK2\/rOjpX264mOpTx8SQf7TjiIlSs3HiDphOG0YLn3YYZ8njuADtWKju18sgzmH3TMQYaJ5rR8rrvEPgZCHNBk+XQJFexPiGtcDjF2WCQ1CKqCKZf8hKbpm8Y4TnLNUxuhK2E+6sFA1dP+E8Bm6m26cCfBNV3G7APHf8AN1YKGjnSNcO3xC9CoOmEMCAwEAAaOCBHYwggRyMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWqSYTh5AAAEAwBIMEYCIQCK9TKQMvnjt3bF9IskNoov410+TNUfrflXc+EV+7RCFQIhAOhI+FRSDv5ZevTOA7yjzgGxZ7+Vifwc2fzYuzpyLBBgAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFqkmE4gAAABAMARzBFAiAiHsCLrUDabE9VESRZTt4BikyAq6rNE1j3618pfpVpCAIhALEshKOsZh7n88+DKEMN6Qrti43TvlJOQ0RAjLMbS84WAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFqkmE4gwAABAMASDBGAiEAhlim8PX4pyi\/mpblvrIKUelL3OW87784ne5SOBJO7rUCIQCJx97+HPxXSJjEZtGi1euZMJxoXD7mYyvmnAr9RyA7ngB1AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT\/TM5a1toGoAAABapJhOJEAAAQDAEYwRAIgSWpW2jkU6iqzOFfqoMvHGTVxpA4qvulMcPxZZ3C6R34CIBq5beRJMDaP8rIHcokNsjMMe+YTY4GBs5JmQen9SUa+MCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwIwCgYIKwYBBQUHAwEwPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYTS30KC55N6AgFkAgEdMIGFBggrBgEFBQcBAQR5MHcwUQYIKwYBBQUHMAKGRWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMElUJTIwVExTJTIwQ0ElMjAxLmNydDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AubXNvY3NwLmNvbTAdBgNVHQ4EFgQU3aROfyhw35kc1iGhSMjmHtjM\/20wCwYD","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7aO9oAQD6\/CxwAAAQEICjCEradVD3cR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUCPxAAG0GvcI0cktFwKgBBgG77H37to72hXm6NIAQBAXTOAAAAQEIClUPdxEwhK2LjSsxwxRzId3jeGOcUYa1okhJwHkIFUMAK5m4S+DHVwdsxLmmVC0BU\/Kj8qTM2cFU84jN5EwT04ozIVitGL++OYFwOWk3+FukY+8JB9+HGmLHmgjF0R1eYnYB3WnmOLtEsC1NOsYugOBgclvyzOaOXDohHl2wOSu96hPLlsu2anSMjrwOEJ8bpUBBj5FcdqcO8ao6h7cMd99xai8oYUItkA9yBatn4MF7y5xAmsQKCESMfD26qQ4esdkivR9fQWpzVPZm4qD5pjne0nfzaQS\/t7s8xJP\/cgQctTadaH\/f+jlPsvaPuRz\/re0OFQjjhnzySEl3lxb2\/QD2T6Zeb+c5wFFlPeuxlzDs6p5z\/B4soN+Lz3NftQ4GQhcmlezYqSfQ0GWUXOI\/yigppSD0yN1dtP\/m3QIDAQABo4IBQjCCAT4wHQYDVR0OBBYEFFiIn9bcnEgitxQ+\/4SI6OaF\/\/p9MB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoIVDaGezq1BE3wMBIGA1UdEwEB\/wQIMAYBAf8CAQAwDgYDVR0PAQH\/BAQDAgGGMCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwkwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL09tbmlyb290MjAyNS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDQYJKoZIhvcNAQELBQADggEBADCaxp1q\/e+TCAy+gnf5dqBtnnswI3uoKVr0aj7HCwyW37hLUuQNnDjteGO1c8AcHzvgp\/9\/SVGVMrjQm6nlz5YDgYDVSmEY\/sRqxt9\/QUYinIBm6w9CoOTzpCGjmNB6dPaM6MPSK6orzhFZGUTnXAcJQuvX\/RVNuW9sRDUmh7qjO2iwgecgyX8TAvPMq58clVDLrmSAu4cKXc6ma7J94z024ilRtyX80AnjsK3EYi4+foUmsvav920xc8YZmKlykwLOygs9POzZcOiA9RareGqHTcaBN6gKdoEGqO8XYHxwEBM8ONczTOQ3ZQj7kbPoFnZhKmX1WJSzRQHvwE8De7gWAAcrAQAHJzCCByMKAQCgggccMIIHGAYJKwYBBQUHMAEBBIIHCTCCBwUwgceiFgQUqShwURmVA+Jp3zLm2A+QCVyZqYAYDzIwMjAwNDE1MTkzMzA5WjCBmzCBmDBMMAkGBSsOAwIaBQAEFE8LW9m32q+ftvNjciJ21uGVriYpBBRYiJ\/W3JxIIrcUPv+EiOjmhf\/6fQITewAE4Lxi6ctlZLvhngAAAATgvIAAGA8yMDIwMDQxNTE5MzMwOVqgERgPMjAyMDA0MTkxOTMzMDlaoSIwIDAeBgkrBgEFBQcwAQYEERgPMjAxOTA0MTYxOTMzMDlaMA0GCSqGSIb3DQEBCwUAA4IBAQBJ3b+j9b9amWJnAoiCkmf2UNIwgNLUYY7i2oIxOcCe4FwtfKqAknYBXLXDmybtzIEQGc9zVWPgZbClw+Dn6abFkbXSG0mhM4QP5D5MQbVxhe7SgYoYVGwkJbmRpd4grc+7uBTiXMgAxBCB5kUsxvRwqLqgwU4Ain2W6hQNvDRMAvojfSg3lYkOFvlf7bcTwOK90BIJGU11EABEc5brrKndHE9hje0klAXbzMZTL8AqrbgnzOZi1rf+0+Wq4RUDesXv6I1AJt7EoKj704jMo9fFhVZPD8osr0ZocAW0OSf5m2CQ\/UMENY99jq5D1K0ZM\/O3ik40uY\/GyUUQa5PIKgTroIIFIzCC","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":276,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEGCP5AAG0Gwo40cktFwKgBBgG77H37tpo2hXm6NIAYBAVDcgAAAQEIClUPdxEwhK2LSACSZiy6xhZBqFoHfuVJnWThOmXSvs5HXo3nkFTRLqH\/gFiVBrWHZPaugh5f71QBq9sKelJI+oDa8wSlJ5Wt4j3w9VFG\/sQznUFvp8oJAtwYO5QBk3182KbUZxp5sVVXJuFqmJZO+GuUdjnw1GCNdmlSgjR1DoejFE\/6m13ilnZhP9wECEUStxbPasnxIc6wJ5KLpnMUvRkvrC2VBa49EtHON6Sd\/jJ4oOhG9BR2vDdkKCsdYc9u6\/DazX8JYXbReumcyu1TD8JRN0Vbg2sOAAAA","pkt_caplen":276,"pkt_type":2048,"pkt_ipoffset":14}
+1035{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":20,"flow_packet_id":10,"flow_first_seen":1587041682077,"flow_last_seen":1587041682140,"flow_tot_l4_data_len":6525,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"eu-api.asm.skype.com","server_names":"*.asm.skype.com","ja3":"74d5fa154a7fc0a7c655d8eaa34b89bf","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=*.asm.skype.com","alpn":"h2,http\/1.1","fingerprint":"B9:41:1D:AE:56:09:68:D2:07:D0:69:E1:68:00:08:2B:EF:63:1E:48"}}
+0397{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7aaNoAQD1W34AAAAQEICjCErahVD3cR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7abCIAQD063FQAAAQEICjCErahVD3cR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+N\/AqAEGNHJLRux8AbuMg\/fuHSSo44AYEABmRwAAAQEICjCErahWxwTAFgMDAEYQAABCQQTQQKZeyPBCj\/p5lAGVLYOFivnXhnGHV0uHxCWHexpxHH2i8efa+9lnmebcwDiKsHG1Pc4CMMYS+KXQfwpjzBJWFAMDAAEBFgMDACgAAAAAAAAAADS8+dm2+8m4Tn34wvGsEBUoapDp6JZWBjkwDD4HPrC3","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+V7AqAEGNHJLRex9AbuFebo0+7abCIAQEAC2YwAAAQEICjCErahVD3cR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG+ODAqAEGNHJLRex9AbuFebo0+7abCIAYEABRlwAAAQEICjCEralVD3cRFgMDAEYQAABCQQTu+YlTGKNSK0JFZRyqdMcvGNFAs8T2GsnSGKY8NwNTGeyVr\/1AlmGpT90ZYfsLkZwIOBCg3KYKsTl5v4TwCb0eFAMDAAEBFgMDACgAAAAAAAAAALUx48gePS5Fp56cO0sk\/WM80Xs1SkLT\/cUJ6fNFiZHX","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":204,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC+wIdAADkR\/U\/AqAEBwKgBBgA1wWoAqgAAmvKBgAABAAQAAAAABmNvbmZpZwV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAHADAAFAAEAAAs5ACEGY29uZmlnBXRlYW1zDnRyYWZmaWNtYW5hZ2VyA25ldADAOAAFAAEAAAALAB8MY29uZmlnLXRlYW1zBnMtMDAwNQhzLW1zZWRnZcBUwGUABQABAAAAOgACwHLAcgABAAEAAABoAAQ0ccKE","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1587041682129,"flow_last_seen":1587041682143,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":52,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"config.teams.microsoft.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.113.194.132"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1587041682144,"flow_last_seen":1587041682144,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOx+AbuHxTqTAAAAALAC\/\/\/vlgAAAgQFtAEDAwUBAQgKMIStqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0EIdAAHUGPJk0ccKEwKgBBgG77H5W9rKzh8U6lIAS\/\/\/8MgAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTqUVvaytFAQIAAc8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":271,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEBAABAAEAGgVPAqAEGNHHChOx+AbuHxTqUVvaytFAYIACSqAAAFgMBANQBAADQAwMdYvXtwu11hWCpvITmw2DM6JIDDr9YgJ4rTdtCECjTrgAAHBoazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACLCgoAAP8BAAEAAAAAHwAdAAAaY29uZmlnLnRlYW1zLm1pY3Jvc29mdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjKygAdABcAGAAbAAMCAAKKigABAA==","pkt_caplen":271,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1587041682144,"flow_last_seen":1587041682157,"flow_tot_l4_data_len":333,"flow_min_l4_data_len":20,"flow_max_l4_data_len":237,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0388{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoEIhAAHYGO6Q0ccKEwKgBBgG77H5W9rK0h8U7bVAQBAE4GAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":989,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnXUtAAGwGb980cktGwKgBBgG77HwdJKjjjIP4bIAYBARcWAAAAQEIClbHBN8whK2oFAMDAAEBFgMDACgAAAAAAAAAABiDMTg4knHCAbQ9Vx3NJRfj8hBMfqWHYQc8rmnwNJ7o","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2332{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":996,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTttVva+DFAQH9IQ7wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUEItAAHYGNfU0ccKEwKgBBgG77H5W9r4Mh8U7bVAQBAH+RwAAhxpix5oIxdEdXmJ2Ad1p5ji7RLAtTTrGLoDgYHJb8szmjlw6IR5dsDkrveoTy5bLtmp0jI68DhCfG6VAQY+RXHanDvGqOoe3DHffcWovKGFCLZAPcgWrZ+DBe8ucQJrECghEjHw9uqkOHrHZIr0fX0Fqc1T2ZuKg+aY53tJ382kEv7e7PMST\/3IEHLU2nWh\/3\/o5T7L2j7kc\/63tDhUI44Z88khJd5cW9v0A9k+mXm\/nOcBRZT3rsZcw7Oqec\/weLKDfi89zX7UOBkIXJpXs2Kkn0NBllFziP8ooKaUg9MjdXbT\/5t0CAwEAAaOCAUIwggE+MB0GA1UdDgQWBBRYiJ\/W3JxIIrcUPv+EiOjmhf\/6fTAfBgNVHSMEGDAWgBTlnVkwgkdYzKz6CFQ2hns6tQRN8DASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMJMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9PbW5pcm9vdDIwMjUuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQAwmsadav3vkwgMvoJ3+XagbZ57MCN7qCla9Go+xwsMlt+4S1LkDZw47XhjtXPAHB874Kf\/f0lRlTK40Jup5c+WA4GA1UphGP7Easbff0FGIpyAZusPQqDk86Qho5jQenT2jOjD0iuqK84RWRlE51wHCULr1\/0VTblvbEQ1Joe6oztosIHnIMl\/EwLzzKufHJVQy65kgLuHCl3OpmuyfeM9NuIpUbcl\/NAJ47CtxGIuPn6FJrL2r\/dtMXPGGZipcpMCzsoLPTzs2XDogPUWq3hqh03GgTeoCnaBBqjvF2B8cBATPDjXM0zkN2UI+5Gz6BZ2YSpl9ViUs0UB78BPA3u4FgAHKwEABycwggcjCgEAoIIHHDCCBxgGCSsGAQUFBzABAQSCBwkwggcFMIHHohYEFPZCJyBUiJQZxe5ZDOM2ZtthRVswGA8yMDIwMDQxMzAzMTgyMlowgZswgZgwTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7\/hIjo5oX\/+n0CE3sADNbH39scQ60ghXIAAAAM1seAABgPMjAyMDA0MTMwMzE4MjJaoBEYDzIwMjAwNDE3MDMxODIyWqEiMCAwHgYJKwYBBQUHMAEGBBEYDzIwMTkwNDE0MDMxODIyWjANBgkqhkiG9w0BAQsFAAOCAQEAmQJ6SLm2zVRCwA2vj1iMtXpqFXbwq03+16DkzBYPkd1vJbCD2pK63BUefOP4K7H2MNhfhC9UdrdBqw1hn\/aiAEhRS8H6Uri0oK3BLddQh3Lar\/6za+aM1CIzUMhSO7cZaTzOWbrVqzRvDOHteUSC9izGmLPGOf\/rp1+Ih91m3oXenUwvGJXvzfRSCPcKMrC83N2dGsIwPtSWj64Vs1aDYQ8cKgW6GnG3F+r2W1I1E+3jEO4hx\/9M+TFBKwLQZe2XfQPbHwFNPRD1elltKGsu7cZ16xLxRoZNCw5lforDP15ZG7F8uxAeG4h3nPMxrpNqeTdwrgswsVKIbGKoRCV+EaCCBSMwggUfMIIFGzCCAwOgAwIBAgITYQAStb1WyXtb2s8yhQAAABK1vTANBgkqhkiG9w0BAQsFADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTttVvbDuFAQIAALFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUEIxAAHYGNfQ0ccKEwKgBBgG77H5W9sO4h8U7bVAQBAHB7AAAEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEwHhcNMjAwMzE1MTU0MTIzWhcNMjEwMzE1MTU0MTIzWjArMSkwJwYDVQQDDCBNaWNyb3NvZnRfSVRfVExTX0NBXzFfS2V5QmluZGluZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJvT7p2jRZ8\/dmjvHeLh\/yQq3j\/VLXZx+gb9\/gYzTJ1NuB\/fNr+MLJRZzh0ZHkoTOnU7rdrucl91EiuE5B7nZnaSgipbpqErKWG7ldt1BJoxJbVw3c0jWJs70AznmaPQ8k7ZtFvTnBMQ0WnBynR1EgwoKd4nRGzCwl4KDD3XL3IqlH0ccYaShIcyuhkaDQJlSNPBzOoy8PtNqzGG7skD5yyX2jyJunr5KAlOqPUTkQJ4NPWskLkpO9m9cxKSSjrxWittzJ58MG+I4PdxkAxykg0Xy9AXb71oEqTLr+VNh33xYFcQptcCkJevVo9+ql0C2dvsMb9LMJRuZ7hgAUOpntcCAwEAAaOB1jCB0zAdBgNVHQ4EFgQU9kInIFSIlBnF7lkM4zZm22FFWzAwDgYDVR0PAQH\/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMJMA8GCSsGAQUFBzABBQQCBQAwHwYDVR0jBBgwFoAUWIif1tycSCK3FD7\/hIjo5oX\/+n0wPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYHMm0eByOkWAgFkAgEHMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggIBAGY5nYacL1MJ3uGLUYkLN3TiyuW2utxsRuA4aiy3HDugPxruQtVgJYjFRC\/JWgJmU+a44O62VOtwA5VOouXajEfXeuRrvz\/bG8g2I3r0wfI+FVPM1dXuOYJktX508R\/y9eIqqjN\/gVpqa3sQ8lAlrF0Scae9MtjdmFWTqrmqmRSME+M6a2\/DAbo3T+4hZJPLKDqX\/5eVPprHv1utxtcK4mv2gh3hCllXuRdr9tTWiL31IE\/cErb1MoVZP+lgwRcqQq3vHNOaOswdpAN2\/HhnhOerhptulS9eDFhMUTcJ53lU8rAEspJSc7UyYyiCYgme1LJXW0VEnSFWcgfq7FLhcRLNsnz\/vHrlaHipB\/RRIfH01X6hr96Wn7qbjdLv\/3SzeLKGtOgzb0w1EFpEUWzunpeelOLr3bHN8gWDlKQhH2XZpQlLonrIkxk2So4Oj3pfROmjNZTylKBRIDkQkqdLfcc6bB2oYkKLNiwspvT4uWwL1ky3k+uTc8A2CVnfcZHD0h2qjWl8a3xJpw4R6hRBwNB+X2UrJV2u3\/w3id5wcWfh+DNrPllmdRV8pkGlTYhcHM+tXYdp4veYHXwHYQOdZ0ICSl3IAr1tLMfADF\/u+pZl0U8QnUQdzVEvWZPqZQh8nWy8Ibenx7gHCRYw3EE7jAZvuJvTV3zqCtmgjQBH+5dSDAABaQMAGGEEz3wa8tsiAGQNgfEDLC55klPgDaYrll6Qs4MTgcXRKg\/NeX+pzx54x5hc8v5BTxmoungSR9bm3O0Bp1\/mx35oydSZaptgcdryC8LE9DYpwi+Z315UmzumUWKLLtvDAm0ABAEBAHgISIkHZEujTNP8snwiZoNWGux1b6isjgFFT\/fx2TcRh2KJ6W5kLyV2rnBxCLOKTZdQVMTPihpHeJ\/Rwb9oe4Tv6aBiBhKD5qSanU6OrqInUEfx9hYzxb\/7obzmYCd4ZP0RS3DXyRsxZIgaICgfyYWmG5QDty6n","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1EI1AAHYGOxI0ccKEwKgBBgG77H5W9slkh8U7bVAYBAGByQAARJ\/yE86JRqyM\/N5553Gxm\/tllzSdO7xOJP0J9nAsnsIKjxRrloiZfD\/gVUiytWDypyc1x1dhVdcBqiu3UV2YKRrCSS\/a\/94RdsP82tnVqmB1\/xpZ2DxRn50uF4WXCWXA1mrBNkPQ6ts6V5QARJcy187mhiMPKQ0b2stKhCxgkuaAuRryjZ2Y2ecOAAAA","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+1104{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":22,"flow_packet_id":12,"flow_first_seen":1587041682144,"flow_last_seen":1587041682172,"flow_tot_l4_data_len":6442,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":536,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","server_names":"*.config.teams.microsoft.com,config.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"0f14538e1c9070becdad7739c67d6363","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=config.teams.microsoft.com","alpn":"h2,http\/1.1","fingerprint":"B9:54:54:12:C9:E9:43:65:10:70:04:7B:AD:B6:0C:46:06:38:A5:FA"}}
+0469{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnCP9AAG0Gwyw0cktFwKgBBgG77H37tpsIhXm6soAYBARGpgAAAQEIClUPdzMwhK2pFAMDAAEBFgMDACgAAAAAAAAAABckn\/Z2BLcr4a9ceayiTzolfHTKPZZ30ZSgslqMDJUa","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOx+AbuHxTttVvbJ8VAQH84FDgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0601{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":212,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGgY7AqAEGNHHChOx+AbuHxTttVvbJ8VAYIADQxgAAFgMDAGYQAABiYQRb26wex+ywDP+17p1b9MI22rzxhTPvUAH4uj3R1aCijUUOjCC+t\/YZ8iSpz+BifjGFDzVQ\/fMi4GUMlJTc56I5Ph1ZLk8h2BEOPmGvuaTEz75B\/TOM+hHsiHbHUs\/qYT4UAwMAAQEWAwMAKAAAAAAAAAAADEnD5bI3ciySL1\/QLlDFlnmnam5ZLkjmEkwMLApSrUo=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1017,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoEI5AAHYGO540ccKEwKgBBgG77H5W9snxh8U8C1AQBAEgPQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1587041682355,"flow_last_seen":1587041682355,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":93,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPcIEAAP8Rx8TAqAEGwKgBAf9rADUAOydaEDoBAAABAAAAAAAADm5vcnRoZXVyb3BlY25zDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1587041682355,"flow_last_seen":1587041682355,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"northeuropecns.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1587041682369,"flow_last_seen":1587041682369,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIex\/Abv2sXoGAAAAALAC\/\/+1wwAAAgQFtAEDAwUBAQgKMISugAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":171,"pkt":"KDc3AG3IEBMx8Tl2CABFAACdUKtAADkRbU3AqAEBwKgBBgA1\/2sAiQAAEDqBgAABAAIAAAAADm5vcnRoZXVyb3BlY25zDnRyYWZmaWNtYW5hZ2VyA25ldAAAAQABwAwABQABAAAA5AAyEW5vcnRoZXVyb3BlY25zLTMyC25vcnRoZXVyb3BlCGNsb3VkYXBwBWF6dXJlA2NvbQDAPwABAAEAAAAEAAQ0ckww","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1587041682355,"flow_last_seen":1587041682370,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":59,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"northeuropecns.trafficmanager.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.76.48"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1587041682376,"flow_last_seen":1587041682376,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+GfAqAEGNHJMMOyAAbuusi7sAAAAALAC\/\/9JyAAAAgQFtAEDAwUBAQgKMISuhQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8cKZAAGwGWtQ0ck0hwKgBBgG77H8VHmMl9rF6B6ASIAAZOgAAAgQFoAEDAwgEAggKYQa0RDCEroA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXoHFR5jJoAQEAlXvgAAAQEICjCErqxhBrRE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIex\/Abv2sXoHFR5jJoAYEAmOxwAAAQEICjCErqxhBrREFgMBAMkBAADFAwMlzpQNXKnJso0lmbQsWQ9QP0JUtMkYTF2ySEjqwct4CiA\/IwAA6KEdJo41XGChq4nIXjJi3Ldaf94\/c7z6UnyyFQAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1587041682369,"flow_last_seen":1587041682420,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0399{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HMFAAGwGr7I0ckwwwKgBBgG77ICUvjjErrIu7YAS\/\/+TZQAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi7tlL44xVAQIAC0JAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":290,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEUAABAAEAG95PAqAEGNHJMMOyAAbuusi7tlL44xVAYIABbPwAAFgMBAOcBAADjAwOLjruZZJmwp+AQ5ixl8mdC3oKgE\/9DUAxdN3dPhROtcwAAHCoqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACe+voAAP8BAAEAAAAAMgAwAAAtbm9ydGhldXJvcGUubm90aWZpY2F0aW9ucy50ZWFtcy5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIysoAHQAXABgAGwADAgACWloAAQA=","pkt_caplen":290,"pkt_type":2048,"pkt_ipoffset":14}
+0759{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1587041682376,"flow_last_seen":1587041682423,"flow_tot_l4_data_len":352,"flow_min_l4_data_len":20,"flow_max_l4_data_len":256,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"northeurope.notifications.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0753{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzES9AAEARZ+LAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAHT\/ICoAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUHMJAAGwGqhE0ckwwwKgBBgG77ICUvjjFrrIv2VAQCARrYQAAFgMDF7gCAABeAwNemFWSM6lG7UcIyFTu+ZAqpmou+1b9cSMUroQIXKhIYCB8QwAA2ApmCUiPkE7sFwGKZX+v4TYcZTXmXturaOIeDMAwAAAWAAUAAAAQAAUAAwJoMgAXAAD\/AQABAAsADrIADq8ACPEwggjtMIIG1aADAgECAhN7AAGtxR5ngEfSKjQjAAAAAa3FMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgMTAeFw0xODA1MTQyMjQzMDlaFw0yMDA1MTQyMjQzMDlaMC4xLDAqBgNVBAMMIyoubm90aWZpY2F0aW9ucy50ZWFtcy5taWNyb3NvZnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhBGUsVZpQSij1FrZ7UA10MFYiBlB5qoAYVuQvi8fG6euixViIn3J51NZJYhGR9o9SjpExVF2F2DFovz9yE2Ia\/Js6elboqU3tszl2KyanJJeYoaK16pdijTSVQFhN4OdbERR3KA2WROPO8wQk5QxhwLnXHsi9CWFTyGcRk+vPFwlw5KqW\/M10uCMZmhSG7qvFaAxU3WMhxRZoulvHCtLsLixgdLwHdgneRl6nZt63WXT6bo3+kmkw\/xmDwfJ7D6TraPEOZ2o0yk5oxtTbOwZJn7SB0bf3p9QQt1xurYAgml4fxfJApv2JqBVXOI\/jmUvTQYhdO3HrtSogk83Ok1TQIDAQABo4IEpDCCBKAwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABY2DbozwAAAQDAEcwRQIhAL7yA+kvf6VyrXY9vRgMDH0C7\/Io8PJ\/yV1QUmCPOwVMAiBP29xDfTKiXeL\/1YyqeVregr5YN5oWtRBikBVJd3jVKwB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABY2Dbo1MAAAQDAEgwRgIhAN0fi4bS99twLR1xFEbYoEf1bxKtPOSefKqtncETvlpWAiEA6RdOI\/5bz9mmM0V4jVAIKSzQNqshYo8T7WxtiLn0NBEAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAWNg26TrAAAEAwBHMEUCIDw9PjnuwJTBQuMPh48Xf9EW3r7JbJn71l0K1\/daUahFAiEAgGQAyryExjVwDZyDMNzwvajRi+xQMrmc2fF++zZqi7sAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWNg26eaAAAEAwBGMEQCICcGgSBGxMNucL7euSSv6ARrwjTQ8vyMwA5w1wb5qCDvAiBmX3aytg2JYDJ3fuGlFzcm5ghqLXlUCo2l8o4CFVrFOjAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2E0t9CgueTegIBZAIBHTCBhQYIKwYBBQUHAQEEeTB3MFEGCCsGAQUFBzAChkVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwMS5jcnQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20wHQYDVR0OBBYEFIpXMi3QH62h","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+HPAqAEGNHJMMOyAAbuusi\/ZlL44xYAQIADRFQAAAQEFCpS+PnGUvkQd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5EHVAQH6WoOwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5EHVAQIACn4AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":323,"pkt":"KDc3AG3IEBMx8Tl2CABFAAE1HMZAAGwGrqw0ckwwwKgBBgG77ICUvk91rrIv2VAYCASqlQAAlHY0M7sEAQEAG+Wv\/A8XDfKVCa5q38wMMmGRqM0DGXbOCv+pOYZNP0Csd4WnCZ5Hr4PhlQBnSommCohBf1FaXmcYdjw1bNCz6ewtqZUBo20KTT6jEffQMwyJAJZ2iCcrwEnUfRZ6KNFmygANoAR5JuySrXa0RCvvNUU2YBbSCIrDzUWWaOGt\/R2T+3sky0mSva1H2cAMmkXauZKns3\/oot1AEkP89jHgwMTvZIZE91DBv+8iZd0UEeVeQK31SVt4N57dEKcTERlBzBUvjXluqCj462Q\/7+UvgxAaXlE0uYqXla6U0VbAFQF\/TRPmg7UH2v3JrGnuhAllo2U\/OFkN\/PN1OXVAkmRJ3Q4AAAA=","pkt_caplen":323,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5PdVAQH9KctgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG+H\/AqAEGNHJMMOyAAbuusi\/ZlL5QglAQH8qbsQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0600{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":212,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAG9+HAqAEGNHJMMOyAAbuusi\/ZlL5QglAYIAAxQAAAFgMDAGYQAABiYQSk1SzOlNkn3TvkAIK+ewa3CfPyMYY0yJbfZF87dVti68QZu5uKzYQwlZozCfKM9LUBL\/N\/TsCPypM31+PQZMGfyB7ATYTUNeOASoLSrG0zFHIJVOVquOk3QmxnON+\/xzMUAwMAAQEWAwMAKAAAAAAAAAAAKlU1UkpvLQOv5JywXfbapExhtnFglvQPLDdDEhhrR70=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0cKdAAGwGWts0ck0hwKgBBgG77H8VHmMm9rF61YAQBAVitAAAAQEICmEGtIQwhK6s","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXrVFR5uZoAQD9NK3QAAAQEICjCEry1hBrTM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2186{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+1302{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":24,"flow_packet_id":9,"flow_first_seen":1587041682369,"flow_last_seen":1587041682557,"flow_tot_l4_data_len":4717,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":524,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0399{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXrVFR5zkYAQD6lF3AAAAQEICjCEry1hBrTM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIex\/Abv2sXrVFR5zkYAYEABZEQAAAQEICjCEry5hBrTMFgMDACUQAAAhIK\/sgoqbP1FUk5z3uBhISmpZe7zNM7WCfNmacEg0wRVeFAMDAAEBFgMDACgAAAAAAAAAAJIf4wDKViT\/AGT8JuQxf\/b3YbtHGUgi6ofrTu7kIdPE","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0398{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0cKtAAGwGWtc0ck0hwKgBBgG77H8VHnOR9rF7MoAQBAVQ3QAAAQEICmEGtREwhK8u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1587041682668,"flow_last_seen":1587041682668,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp"}
+0447{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":100,"pkt":"EBMx8Tl2KDc3AG3ICABFAABW2rQAAP8RXYrAqAEGwKgBAeC6ADUAQqKILzcBAAABAAAAAAAACHByZXNlbmNlCHNlcnZpY2VzA3NmYg50cmFmZmljbWFuYWdlcgNuZXQAAAEAAQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1587041682668,"flow_last_seen":1587041682668,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"presence.services.sfb.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0555{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":181,"pkt":"KDc3AG3IEBMx8Tl2CABFAACny9dAADkR8hbAqAEBwKgBBgA14LoAkwAALzeBgAABAAIAAAAACHByZXNlbmNlCHNlcnZpY2VzA3NmYg50cmFmZmljbWFuYWdlcgNuZXQAAAEAAcAMAAUAAQAAASwANRRhLXVwcy1wcmVzZW5jZTQtcHJvZAtub3J0aGV1cm9wZQhjbG91ZGFwcAVhenVyZQNjb20AwEYAAQABAAAABgAENHJNOg==","pkt_caplen":181,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1587041682668,"flow_last_seen":1587041682697,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":66,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"presence.services.sfb.trafficmanager.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.77.58"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1587041682698,"flow_last_seen":1587041682698,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.58","src_port":60545,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG913AqAEGNHJNOuyBAbtgCOGqAAAAALAC\/\/\/jdgAAAgQFtAEDAwUBAQgKMISvtwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABncKxAAGwGWqM0ck0hwKgBBgG77H8VHnOR9rF7MoAYBAUBLAAAAQEICmEGtWcwhK8uFAMDAAEBFgMDACgAAAAAAAAAACnDPFg8JobiAasYkqEjH3+CRacPkKTu59duD23yppKN","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIex\/Abv2sXsyFR5zxIAQD\/5DxQAAAQEICjCEr8RhBrVn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1587041682740,"flow_last_seen":1587041682740,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":1,"l3_proto":"ip4","src_ip":"162.125.19.131","dst_ip":"192.168.1.6","src_port":443,"dst_port":60344,"l4_proto":"tcp"}
+0715{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":299,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEdws9AADEGDl2ifRODwKgBBgG767gSqyGfi6a7DoAYAWi65wAAAQEICpHNoqswhBBbFwMDAOQAAAAAAAAACKmKftpP18TObpudfRHF+x2Q26rJbEiP394UtjZJPj4wSIR\/hp3JlNrAGtpUw45IgQ+\/Td3gBgwIaydoMxwS3i93S6aIvQahVpj\/c5RwIn5XTgvMLlxphbaNgBQKVcUBzOyFCFmX25bboaZrE8yGPewBV8YF9rPw3wiL2qX6gOrVwGBD+SxN5WBWFI2hGO+JWJUmRSYMjHC+44xSTFiyxGwuYeySW1fNosn1ZrrnxmEfRHvkqjQUYvkmRW87MNYmA\/nzpUUAJUjx7fyAlsSNV0cWWtSO31yX1lU5orE=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGwxXAqAEGon0Tg+u4AbuLprsOEqsiiIAQD\/hw3AAAAQEICjCEr+CRzaKr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA09YRAAGwG1eQ0ck06wKgBBgG77IG+FZNKYAjhq4AS\/\/+qaAAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOGrvhWTS1AQIADLJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":273,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEDAABAAEAG9prAqAEGNHJNOuyBAbtgCOGrvhWTS1AYIAAsUQAAFgMBANYBAADSAwPkbX85xJUsmCJfCQtb2nqS5r5NxitfmjfkWtCVFh+GIgAAHEpKzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACNCgoAAP8BAAEAAAAAIQAfAAAccHJlc2VuY2UudGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACAoKAB0AFwAYABsAAwIAAkpKAAEA","pkt_caplen":273,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1587041682698,"flow_last_seen":1587041682744,"flow_tot_l4_data_len":335,"flow_min_l4_data_len":20,"flow_max_l4_data_len":239,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.58","src_port":60545,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"presence.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+1219{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":665,"pkt":"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","pkt_caplen":665,"pkt_type":2048,"pkt_ipoffset":14}
+2329{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2329{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1494,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAGvYHAqAEGon0Tg+u4AbuLptO1EqsiiIAQEADeOgAAAQEICjCEr+SRzaKrzYW88e2CfWzNZAm7YGv\/GC3ueZTnRSVLBw7pYNrOpAiG38jI6Qt4Kx2b9WtYxpyjUoW9tcNvzBVTPMSZ47JvbZdCFPZDhCuw89DktdDgMhAd1cqt4pJY6R\/dfRGgq4A0d4K6bNZwTGby4vBzzJQSoq6lTgpL212+AqtZqSL9TOxJQNIbru8pCu+eMC3+UxABZh+vjVlApYEEgleR05OUu\/t0ujQt+rbsLfKhW7NCCrDcMsxA6eHyjOKvbJ5BKitSMsOxomxwN\/mBhwTXNMDIj9ipB8SqDCzyo+fGerdB7iJocdi94zm7ElNcLku7Fkp2YUsg8wo8tZdFBsESUChXBwnIdxBSsTyO6s4320AGbG5ZjxV3qpQkibkjjdMMfCsMZY3oBhr0DTEYU8KvT1SwPF5vx7D6QegGVkIuICWyZF2PnmGvQLX0gqS3jgF40PnwJRJzl\/m9YMakzCu5aqeLYJD8gpEgpEthdGxx\/W4+YL+SRhOZVTukaxO2LOzvCuf92CTq0stJna8lX6JLX7DZaczLtO7LC3rPIOiPLnTruqf6No\/X2XDOcAT\/PV\/vIRkGM4Q7h7ULoH+mIz3a\/nhwP2xV3Qw4Lkn5GWlyWBF\/qD09wJN6UiF0mBZft7Isb0gQFdOJ\/BfGrJPoFo8VUR6TWBWpzrRCj+\/syx4UndKeFRHBn+VCE+1ExF06Dm3FVDsYtrPd3OsrJrI0NXwvVGjIWdGZpB8ZB04HdhSVxrGF97QIG8HvrdEonhKd1P6C0+MG1i9Z0BIK3WhN1kKg+rLXpVb63wcO\/jE3a1PQdWrwy3B3ZXGMnzznOHWeDb0eyclCIILos94wv1CLlLZnqt09oWc6XqgYF5zxId1dMQx1b3PAfYfCJg0J+Dq1TOCSccXEaA0a6dvSWmYkMqwsWnElh0D5KycVZEJvl764RsjramQGkKDPi6hBKviZWsNog\/kzxfL1R9vf5wCA1gYmO\/JfPTUl9POLlJiy5UUhICv2fDbeiWLGx\/QrsYmze+WP82w58PobpeyRPnti+tHCxgBf6HiJwOJ1ZttfW4fEwBCilAYsOZU6tHYQY1YK2BKuDrStkHw6a7KHl0KqG3iooGUWp6IzjSRcIViXeJHxrw0OqqXd\/fNTQhEsFlDzRZW9RukuqvsDEeWPoqhyKPs8QjyrMUsenEh3qEvB5IpAhEjmmAlAPa\/H33u8d6jyZEl8PfSH4iRYM1QqcAX1JRFgzCTwdN\/mpNCLjnKIhoeYU7sCX2oJzJqPy\/OW6JHYizKQ+9iAwWUya8z2+xzJYoXx4IwEya8zVQ+LhzTxSMlkIsyzoW7Jp7h6QyC0ZwPQDgTncg52ARx3v2Ck3lQDqdFGD+KAXD80Uz83Ctkvhj6jRSpSKYaFNNulMvi58fPa7pMIPYIrCPvv\/x9xW5Thb7R+DA\/g5MSa1IqqAzpfm7G7nubnpoRaf3jIlfytao1ROi5ncT0GG3dHR3zJLHDt8KBhl3bZV79ey9RjNKBsK3ettdL71X1lyPM3UkuVanC\/4oqtS4GhOsxP2qPvCYvgk2VhYLDPXT6rg9M3y9PPoNn7nxwulsFhsI5ov83PwHfmEDkcB0HqcPw97APEPSPzsbVbRB1EKqAEQwjWILqZ5iO4bS5Wr4PvUbvJoNyD8icDNiUhUtTr\/PULeiFkd44sBoX8+LoD15PvgP8ukZzYLgeifLtc2BZw105kBEgC6px3i9a2EXIJuR0jU8kH1cKv39FghJJXxknSqLGsBaalCSfK4F08eIinwMmoXMoAccgGVwxV71PwsWBNuC1TaPs4iDYx+6HRqMhZSTW9XgJaYKDG8chMAnQpXNq6f8XvUYO1VHIrF0cqYZZM\/+31r35bmFvCP5CuO5kwYP9Y2qjfYOW6IppI99MciTsv","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1866{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1146,"pkt":"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","pkt_caplen":1146,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG92nAqAEGNHJNOuyBAbtgCOKGvhWTS4AQIADgbgAAAQEFCr4VmPe+FZ6j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWeo1AQH6W\/TwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWeo1AQIAC+9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWp+1AQH9KzygAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0945{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG93XAqAEGNHJNOuyBAbtgCOKGvhWrmFAQH\/OyDAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":212,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAG9tfAqAEGNHJNOuyBAbtgCOKGvhWrmFAYIABmlQAAFgMDAGYQAABiYQTSMCeEivTxD3Uoj1CdT6hnMeYe\/myCoo2If6kFa6BybMIfvoTvwWLHChyab4ek7OlUsui82X66GcwpE7Y\/aYMptrPdMlXK1hZpM8SFPp4ImRqqH2stb3E18rhOlY6kH5gUAwMAAQEWAwMAKAAAAAAAAAAACbY+n28jW9Z51qMsjh6WbX8j7sNwJiUHj8kay0XL5hY=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1587041682809,"flow_last_seen":1587041682809,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp"}
+0415{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+gHAqAEGp2PXpOyCEVImrEWfAAAAALAC\/\/+rgAAAAgQFtAEDAwUBAQgKMISwIQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtBAADEGD0WifRODwKgBBgG767gSqyKIi6a9ZYAQAWh8ogAAAQEICpHNoxswhK\/j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtFAADEGD0SifRODwKgBBgG767gSqyKIi6bC+YAQAWh3DAAAAQEICpHNoxwwhK\/k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtJAADEGD0OifRODwKgBBgG767gSqyKIi6bIjYAQAWhxdwAAAQEICpHNox0whK\/k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtNAADEGD0KifRODwKgBBgG767gSqyKIi6bOIYAQAWdr5AAAAQEICpHNox0whK\/k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtRAADEGD0GifRODwKgBBgG767gSqyKIi6bTtYAQAWhmTgAAAQEICpHNox4whK\/k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wtVAADEGD0CifRODwKgBBgG767gSqyKIi6bZSYAQAWhguQAAAQEICpHNox8whK\/k","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBganY9ekwKgBBhFS7ILLfLe3JqxFoKAS\/ogNbwAAAgQFrAQCCAoTeRnVMISwIQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEWgy3y3uIAQECwqYQAAAQEICjCEsFATeRnV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1587041682809,"flow_last_seen":1587041682863,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wZNAADQGRHqnY9ekwKgBBhFS7ILLfLe4JqxHpYAQAfo2WAAAAQEIChN5GgswhLBQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0606{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":218,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMwZRAADQGQ+GnY9ekwKgBBhFS7ILLfLe4JqxHpYAYAfqVNQAAAQEIChN5GgwwhLBQFgMDAGACAABcAwNj9DFW90uUp62kpYH0gZzusgJkAmnNdPklOGghCxgYwCDe8bvsDQaKZ\/SHTClTSUEpcKfm8tnRcB\/XxmDM4wjf0sAwAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKMmzRIH47MLZIGbvoCJbTEvrZpOUBHnePc1mxcuJT5HZCR1Sfyp+RIk=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1587041682809,"flow_last_seen":1587041682917,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"410b9bedaf65dd26c6fe547154d60db4","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEely3y4UIAQECcnXwAAAQEICjCEsIMTeRoM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041682,"pkt_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG+drAqAEGp2PXpOyCEVImrEely3y4UIAYECcphgAAAQEICjCEsIQTeRoMFAMDAAEBFgMDAChs678blRqlXKUex844yXqkDF719MGcqIK3P4stu596NYJ2PZbeVYuz","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wZVAADQGRHinY9ekwKgBBhFS7ILLfLhQJqxH2IAQAfo0+wAAAQEIChN5GmkwhLCE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1696{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1021,"pkt":"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","pkt_caplen":1021,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0wZZAADQGRHenY9ekwKgBBhFS7ILLfLhQJqxLk4AQAfUwvQAAAQEIChN5GpowhLDb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2056{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1292,"pkt":"KDc3AG3IEBMx8Tl2CABFAAT+wZdAADQGP6ynY9ekwKgBBhFS7ILLfLhQJqxLk4AYAfWd3AAAAQEIChN5GuQwhLDbFwMDBMXJs0SB+OzC2msrk3HDfuo1F9oSu2tMpdc5amiX3sP3+HF3T+eUlrMKwLu5vpRX2sY6Qgb2AfcqUJbzNahAcjl+AgBrxnDW3IzmBx1GjxIf54xU7CDOWBB6h2asl5Y0jc+NBtT4wwHKlGK7aTIDJNKtZpQBrtKu+wC1wThAEhnwiJCMcZrlw3JmUaM8hAcPWiv+P2f4HU7kVuR6SWFtZOY\/fBG6AA4hICINInUXNSPR\/9S0jS0+Tu+TIJ\/unj8qEMubqIQCh\/V448Q5nnpg+m97oZrqoHkU1CldcnFv99miigRKhMTB8UhJojHRmQkNNuSqkYUg1wt2+YPyuyggI93J3CSs68a0sNXTEXI8hPLWv745fuMVK+GzYpn3QIWpwecAc8ojwFk3sYFYGc6Kr3niKjvleeE9wyMd31MixrWRPeRyiEuUWD42A1y13fLADAszjc75ai96VXjLbCKwl0noyJq882kPNRilUNVn3DopZ1sxVJmeonQsuho+5bzSM5XTbWli5afK8uq4VkO1JTnH+QCaWxMcc3coahz2TQstp35Riylbla3PZIwtYbAltxp9HvMr2YRvetAhN583PQgyTcSglBA9VLQMuqlDS+Yp5l8M6wZyJzO21eJigfJi1o\/n0C6Jl9pe7P96S2qxZwHKbeC+ollOwzuEsW6W2euMv5Bty7uHkH95xBMzwiarDmQ+o1Ei+q2YXDkKmEFKmLcmSoD1gJV0NJfr5r7g39mk42G6pLB1NBDrBN71b4WG1g\/5u0a3rqw0V9i7QnL9BlX8fxEEmTnz9iZZ3YLsygkbuA7AHtVSjftrngTxt6ZxhwkU\/9bPSsV5zngK7DqCVeqwznry2Ak1K69ATi4hxBM6vJm4J5azYrQKBdtWCpMP6MD86FiPSrAXBunH0b4hPq5tzuqdO0D+jBbTb4Wuyuo2mJh3Wdi0GgAny77koSTNopgL0vMBX\/vxnEJDucvwdPHZyocOBrw+JRn9zmCrcQ0Y9Q0ezNl4QGHwMISpDuDI3rn5Latk4ocMu5N0vMsbOO1\/gQG9gmVcYiZsj3DHKbeczYMtV72zfzt4zMH0+e6uu8iTq60uJMXwyI30UG5fzVxRJ4j\/UD4W6mchwCwMr6q8+gd6YplByjwds617qOLrlHt36ra5Pk7X2fO+uom00juBLnsnSYzThqYa7AtStu7Ns8fxifn\/O6P+gzFrmtBjaHQA\/1xx17u3yi7XFhplKfr0jTUgN4p9G9TDE1YDvXCLgzdejZdoinUNYt+hdtAOR181o9OXHQQ+xZ\/Iv3h2AhVNwBkYN5nU8A1alX8Z3DnlAKQt\/+z+XcHUI6niPCc2ejcpuzXcezHBSBFte4gprIQQh03wzDWXI8qpvQafa7vTvNS+kOicPxL+ziFk1R29VK\/Tlcj\/S6eX9KExxqzooyHpqkZQzSaFvny7YFcXNSIa65RZq2MYCDgk\/dnxWHjsRaDEqCSAKbU2Fq986vwayL1+sL\/Zf1k26dI2qd3cUitCRLJhXhcARrcLsJcnB0d07VW1y7nmsSoLB3uoEg6LNbIgzreGXNOpkcDmj7mkRp8bmBxNM5VFiS++mkDQD2K+9dRHKpWlfUBTooQQQ3cD6RayBt1mpz8=","pkt_caplen":1292,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEuTy3y9GoAQEAAdJgAAAQEICjCEsVMTeRrk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1587041683142,"flow_last_seen":1587041683142,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":92,"pkt":"EBMx8Tl2KDc3AG3ICABFAABOVgkAAP8R4j3AqAEGwKgBAeCgADUAOmwyTTEBAAABAAAAAAAACmNoYXRzdmNhZ2cEc3ZjcwV0ZWFtcwZvZmZpY2UDY29tAAABAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1587041683142,"flow_last_seen":1587041683142,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"chatsvcagg.svcs.teams.office.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0607{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":222,"pkt":"KDc3AG3IEBMx8Tl2CABFAADQTcNAADkRcALAqAEBwKgBBgA14KAAvAAATTGBgAABAAMAAAAACmNoYXRzdmNhZ2cEc3ZjcwV0ZWFtcwZvZmZpY2UDY29tAAABAAHADAAFAAEAAAAMACoVdGVhbXMtY2hhdHN2Y2FnZy1wcm9kDnRyYWZmaWNtYW5hZ2VyA25ldADAPgAFAAEAAAEsADAWbXNnLXVrc28tMDEtY2hhdHN2Y2FnZwd1a3NvdXRoCGNsb3VkYXBwBWF6dXJlwCnAdAABAAEAAAAFAAQ0clg7","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1587041683142,"flow_last_seen":1587041683184,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":58,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"chatsvcagg.svcs.teams.office.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.88.59"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1587041683186,"flow_last_seen":1587041683186,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.88.59","src_port":60547,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG7FzAqAEGNHJYO+yDAbslAEUuAAAAALAC\/\/+uKgAAAgQFtAEDAwUBAQgKMISxhQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8HR9AAG0GokE0clg7wKgBBgG77INQlxoFJQBFL6ASIAAufwAAAgQFoAEDAwgEAggKAdQEQDCEsYU=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEUvUJcaBoAQEAltDgAAAQEICjCEsaYB1ARA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":287,"pkt":"EBMx8Tl2KDc3AG3ICABFAAERAABAAEAG64vAqAEGNHJYO+yDAbslAEUvUJcaBoAYEAkhLAAAAQEICjCEsaYB1ARAFgMBANgBAADUAwMl\/B1Vk9A1CXIA2wtxg6SSBUkcTlC\/1\/z0\/eteey4O7gAAHJqazKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACP2toAAP8BAAEAAAAAIwAhAAAeY2hhdHN2Y2FnZy50ZWFtcy5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAICgoAHQAXABgAGwADAgACSkoAAQA=","pkt_caplen":287,"pkt_type":2048,"pkt_ipoffset":14}
+0744{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":31,"flow_packet_id":4,"flow_first_seen":1587041683186,"flow_last_seen":1587041683220,"flow_tot_l4_data_len":369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.88.59","src_port":60547,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"chatsvcagg.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2330{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG7FzAqAEGNHJYO+yDAbslAEYMUJcaBrAQEAlP3AAAAQEICjCEsckB1ARAAQEFClCXH6ZQlyVG","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEYMUJclRoAQD69hCwAAAQEICjCEsckB1ARd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEYMUJcq5oAQEABbGgAAAQEICjCEsckB1ARd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":316,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEuHSRAAG0GoUo0clg7wKgBBgG77INQlzCGJQBGDIAYBAXjWgAAAQEICgHUBF0whLGmPnH4YmtZOu6GMruQC257Q3dc\/8pw9\/ie7cc8j0NsI9WLanx28OKtxQVz2r+HoIpjHmE1yckU6+O7y+1gODmc08tzcI47YNCYFmYnHLY44lsk5kuYbPacslPtdaYNzzbCG0qnuLWVQvcQZW+El\/G\/hVQQlb5z3dOTDFV484qzmq8OlTbS98cZUc9rwC9hiPK3QqulatiAjRfxVJV0c0b\/qshk1CjWPxbley54TTxPeOY892DrdvM3cbiF62Im6scY3GSWh09Ooc1FfF6ot9RF9flslwdcwuCa1uwy74tyd5kpLdlfm50CD4LKaC1t\/U1oGu1c8PB5DgAAAA==","pkt_caplen":316,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":31,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG7GjAqAEGNHJYO+yDAbslAEYMUJcxgIAQD8tUtQAAAQEICjCEsckB1ARd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":31,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG6+rAqAEGNHJYO+yDAbslAEYMUJcxgIAYEACBEQAAAQEICjCEscoB1ARdFgMDAEYQAABCQQRezSsAnQlWi0lqjQ4SpHGDfX17OXxqfEsHS8ZLdzsrGwBaBZFaQaUp8s6URLRqDEULI2+tuWAliD5jYvlhw6DSFAMDAAEBFgMDACgAAAAAAAAAAJnk61cTj4qNF6lQxeOyYfjOa3e0tTslesD1nI3CMPG4","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":31,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG7AvAqAEGNHJYO+yDAbslAEaKUJcxgIAYEADGawAAAQEICjCEsdUB1ARdFwMDAFgAAAAAAAAAAU4rtga3rq\/SDasDr\/c8RLmPqsh8im3OWQrnz2JH7mVci39ydqqhqXreT6iBJDhCtIoiv56M41zLr4M5t0Mld8g5EWihM+F4YqGRaSsS8K2G","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1587041683333,"flow_last_seen":1587041683333,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyEAbsX4foHAAAAALAC\/\/8Q\/AAAAgQFtAEDAwUBAQgKMISyEgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VAJAAGwGd3g0ck0hwKgBBgG77IQbiSB\/F+H6CKASIABpjQAAAgQFoAEDAwgEAggKYR77TDCEshI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4foIG4kggIAQEAmoEAAAAQEICjCEsj9hHvtM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyEAbsX4foIG4kggIAYEAle8wAAAQEICjCEsj9hHvtMFgMBAMkBAADFAwNQ2mjoGM5bceT+50qedBeC2QzxBSnWB8x+XpaOKMz6dSCjQgAAk2B6jpiMP4aNnNPzeGx44\/6X3U2RH3y64O03zgAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1587041683333,"flow_last_seen":1587041683379,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+2336{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2332{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4frWG4krwIAQD6+b9wAAAQEICjCEsnFhHvt\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2188{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+1302{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":32,"flow_packet_id":8,"flow_first_seen":1587041683333,"flow_last_seen":1587041683431,"flow_tot_l4_data_len":4685,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0398{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4frWG4kw64AQD9aWpQAAAQEICjCEsnFhHvt\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyEAbsX4frWG4kw64AYEABxswAAAQEICjCEsnJhHvt\/FgMDACUQAAAhIHlHECyVYXiIWBhXkzZvQlMWaCVu+lDMYkV1pzAo97ByFAMDAAEBFgMDACgAAAAAAAAAAM38DY8prudyLmt15rCEEidJ0bawdrQJHah5FREcDBRP","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnVAZAAGwGd0k0ck0hwKgBBgG77IQbiTDrF+H7M4AYBAWmfgAAAQEICmEe+60whLJyFAMDAAEBFgMDACgAAAAAAAAAABrg34hnZWwieIala85MwkRBQ90\/5OmnCY8VKC399k19","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyEAbsX4fszG4kxHoAQD\/6VkgAAAQEICjCEsp5hHvut","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041683,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1587041684291,"flow_last_seen":1587041684291,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":80,"pkt":"EBMx8Tl2KDc3AG3ICABFAABC19sAAP8RYHfAqAEGwKgBAegLADUALnZLN+4BAAABAAAAAAAACXN1YnN0cmF0ZQZvZmZpY2UDY29tAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1587041684291,"flow_last_seen":1587041684291,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","category":"Collaborative"},"dns": {"query":"substrate.office.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0599{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":214,"pkt":"KDc3AG3IEBMx8Tl2CABFAADIzNlAADkR8PPAqAEBwKgBBgA16AsAtAAAN+6BgAABAAUAAAAACXN1YnN0cmF0ZQZvZmZpY2UDY29tAAABAAHADAAFAAEAAABCABQJc3Vic3RyYXRlB21zLWFjZGPAFsAyAAUAAQAAABYACAVhZmQta8AWwFIABQABAAAAGQAoEm91dGxvb2stb2ZmaWNlLWNvbQZrLTAwMDIIay1tc2VkZ2UDbmV0AMBmAAUAAQAAAKAAAsB5wHkAAQABAAAAoQAEDWsSCw==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1587041684291,"flow_last_seen":1587041684304,"flow_tot_l4_data_len":226,"flow_min_l4_data_len":46,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","category":"Collaborative"},"dns": {"query":"substrate.office.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"13.107.18.11"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1587041684306,"flow_last_seen":1587041684306,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGWZTAqAEGDWsSC+yFAbvNnLiZAAAAALAC\/\/\/7GwAAAgQFtAEDAwUBAQgKMIS1wQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0FJpAAHUGEAYNaxILwKgBBgG77IU13hw0zZy4moAS\/\/\/HZQAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGWazAqAEGDWsSC+yFAbvNnLiaNd4cNVAQIADoJAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":265,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGWNnAqAEGDWsSC+yFAbvNnLiaNd4cNVAYIAB7OAAAFgMBAM4BAADKAwNT9yhcRBpq6+zC6hAkiruFzkDB0iUODZ2vqxEjURraCwAAHGpqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACF2toAAP8BAAEAAAAAGQAXAAAUc3Vic3RyYXRlLm9mZmljZS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAja2gAdABcAGAAbAAMCAAK6ugABAA==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1587041684306,"flow_last_seen":1587041684317,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"substrate.office.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0389{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoFJtAAHYGDxENaxILwKgBBgG77IU13hw1zZy5bVAQBAEDUQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2326{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGWazAqAEGDWsSC+yFAbvNnLltNd4njVAQH9LcJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":94,"pkt":"KDc3AG3IEBMx8Tl2CABFAABQFJ9AAHYGDuUNaxILwKgBBgG77IU13i05zZy5bVAYBAEvfwAA2BU6FLOqezFGRH8EDwiDKQrqoWuDQ8c67wKl46tlInnEsf3RDgAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+1562{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":34,"flow_packet_id":10,"flow_first_seen":1587041684306,"flow_last_seen":1587041684362,"flow_tot_l4_data_len":4843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":484,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"substrate.office.com","server_names":"outlook.office.com,attachment.outlook.office.net,attachment.outlook.officeppe.net,bookings.office.com,delve.office.com,edge.outlook.office365.com,edgesdf.outlook.com,img.delve.office.com,outlook.live.com,outlook-sdf.live.com,outlook-sdf.office.com,sdfedge-pilot.outlook.com,substrate.office.com,substrate-sdf.office.com,afd-k-acdc-direct.office.com,beta-sdf.yammer.com,teams-sdf.yammer.com,beta.yammer.com,teams.yammer.com,attachments.office.net,attachments-sdf.office.net,afd-k.office.com,afd-k-sdf.office.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"a66ea560599a2f5c89eec8c3a0d69cee","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=DigiCert Inc, CN=DigiCert Cloud Services CA-1","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Outlook.office.com","alpn":"h2,http\/1.1","fingerprint":"AA:D3:F5:66:06:48:AA:F8:8E:9B:79:D6:7F:1D:53:EA:3F:97:03:A2"}}
+0382{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGWazAqAEGDWsSC+yFAbvNnLltNd4tYVAQH9HWVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":212,"pkt":"EBMx8Tl2KDc3AG3ICABFAADGAABAAEAGWQ7AqAEGDWsSC+yFAbvNnLltNd4tYVAYIADR3gAAFgMDAGYQAABiYQTJ2e7AKWBQ04e1oVsTbr+Pd2xAGivzg\/UtbmFTalVk6OyMTpkH+ppXobE+32uV7\/D6XXEPCiyHu9Fj+T5kVMU86jwjuCr9Zld4aeEx7Ov9VdAH0mPX8DQpk4RPAjXOA4YUAwMAAQEWAwMAKAAAAAAAAAAAk6diy7+2roS\/v+tTXTMj5Lt7gLRyYvp53RvO8TB8FLY=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":147,"pkt":"EBMx8Tl2KDc3AG3ICABFAACFAABAAEAGWU\/AqAEGDWsSC+yFAbvNnLoLNd4tYVAYIAAp8gAAFwMDAFgAAAAAAAAAAamLj9A5OPT3Qblu0RImM1R5UCQzMjbveajEvsmKdeWImBylqL0J4JcD7voAm+GUiwTzCBvruK8wFjqXhmNh2gqVGlRZ9RFB0TkonutwnTL2","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+1119{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":592,"pkt":"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","pkt_caplen":592,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":186,"pkt":"EBMx8Tl2KDc3AG3ICABFAACsAABAAEAGWSjAqAEGDWsSC+yFAbvNnLyCNd4tYVAYIABWVQAAFwMDAH8AAAAAAAAAA\/r4V7fKCRvENEHp2g9oFooWRNtbwacjQp5ot\/N9Dpu1\/XRH0KkXCfxdbarfm17nT4djYDWdAWmnmNu\/aTLusJ6kYlOwsB+guT1ONQ8OI1tB+9TDyiNT0a2qyBQ+OOL4BWjVA16FFnxWiLsBk7g\/adWO6XttK6ej","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041684,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1587041685090,"flow_last_seen":1587041685090,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp"}
+0425{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":87,"pkt":"EBMx8Tl2KDc3AG3ICABFAABJHhYAAP8RGjbAqAEGwKgBAe89ADUANcKVVKoBAAABAAAAAAAABGV1YXoCdHIFdGVhbXMJbWljcm9zb2Z0A2NvbQAAAQAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1587041685090,"flow_last_seen":1587041685090,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"euaz.tr.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1587041685091,"flow_last_seen":1587041685091,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp"}
+0452{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":103,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZE40AAP8RJK\/AqAEGwKgBAdGuADUARafs9AEBAAABAAAAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AABwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1587041685091,"flow_last_seen":1587041685091,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1587041685092,"flow_last_seen":1587041685092,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp"}
+0451{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":103,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZD5kAAP8RKKPAqAEGwKgBAf7OADUARYKEB0oBAAABAAAAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AAAEAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1587041685092,"flow_last_seen":1587041685092,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1587041685093,"flow_last_seen":1587041685093,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":95,"pkt":"EBMx8Tl2KDc3AG3ICABFAABRstMAAP8RhXDAqAEGwKgBAcXdADUAPUwYqlcBAAABAAAAAAAAA2FwaQtmbGlnaHRwcm94eQV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAE=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1587041685093,"flow_last_seen":1587041685093,"flow_tot_l4_data_len":61,"flow_min_l4_data_len":61,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":61,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"api.flightproxy.teams.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0544{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":173,"pkt":"KDc3AG3IEBMx8Tl2CABFAACfqZ9AADkRFFfAqAEBwKgBBgA10a4AiwAA9AGBgAABAAIAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AABwAAcAMAAUAAQAADYsAHg90cm91dGVyMi1hc3NlLWEIY2xvdWRhcHADbmV0AMBJABwAAQAAAAUAECoBARHxAHAAAAAAAG\/dVKE=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1587041685091,"flow_last_seen":1587041685104,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":69,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":28,"rsp_type":28,"rsp_addr":"42.1.1.17"}}
+0528{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":161,"pkt":"KDc3AG3IEBMx8Tl2CABFAACTMl9AADkRi6PAqAEBwKgBBgA1\/s4AfwAAB0qBgAABAAIAAAAAD3Ryb3V0ZXIyLWFzc2UtYQd0cm91dGVyBXRlYW1zCW1pY3Jvc29mdANjb20AAAEAAcAMAAUAAQAADNUAHg90cm91dGVyMi1hc3NlLWEIY2xvdWRhcHADbmV0AMBJAAEAAQAAAAgABDRyDy0=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1587041685092,"flow_last_seen":1587041685105,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":69,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"trouter2-asse-a.trouter.teams.microsoft.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.15.45"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1587041685106,"flow_last_seen":1587041685106,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGNWvAqAEGNHIPLeyHAbsC\/Q6WAAAAALAC\/\/9IhwAAAgQFtAEDAwUBAQgKMIS4zgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":216,"pkt":"KDc3AG3IEBMx8Tl2CABFAADKzTRAADkR8JbAqAEBwKgBBgA1xd0AtgAAqleBgAABAAMAAAAAA2FwaQtmbGlnaHRwcm94eQV0ZWFtcwltaWNyb3NvZnQDY29tAAABAAHADAAFAAEAAA4OACoDYXBpC2ZsaWdodHByb3h5BXRlYW1zDnRyYWZmaWNtYW5hZ2VyA25ldADAQQAFAAEAAAEsACcbYy1mbGlnaHRwcm94eS1ldW5vLTAxLXRlYW1zCGNsb3VkYXBwwGbAdwABAAEAAAAGAAQ0ck2I","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":38,"flow_packet_id":2,"flow_first_seen":1587041685093,"flow_last_seen":1587041685127,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":61,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"api.flightproxy.teams.microsoft.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.77.136"}}
+0591{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":209,"pkt":"KDc3AG3IEBMx8Tl2CABFAADDZa9AADkRWCPAqAEBwKgBBgA17z0ArwAAVKqBgAABAAMAAAAABGV1YXoCdHIFdGVhbXMJbWljcm9zb2Z0A2NvbQAAAQABwAwABQABAAALoAAiBGV1YXoCdHIFdGVhbXMOdHJhZmZpY21hbmFnZXIDbmV0AMA5AAUAAQAAAAAAMBJiLXRyLXRlYW1zLWV1bm8tMDULbm9ydGhldXJvcGUIY2xvdWRhcHAFYXp1cmXAJMBnAAEAAQAAAAoABDRy+ns=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1587041685090,"flow_last_seen":1587041685136,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":53,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"euaz.tr.teams.microsoft.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.250.123"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1587041685171,"flow_last_seen":1587041685171,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABADGUAAP8RK\/DAqAEGwKgBAeRZADUALJr8l0UBAAABAAAAAAAAB291dGxvb2sGb2ZmaWNlA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1587041685171,"flow_last_seen":1587041685171,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","category":"Collaborative"},"dns": {"query":"outlook.office.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0627{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":236,"pkt":"KDc3AG3IEBMx8Tl2CABFAADeqaxAADkRFAvAqAEBwKgBBgA15FkAygAAl0WBgAABAAYAAAAAB291dGxvb2sGb2ZmaWNlA2NvbQAAAQABwAwABQABAAAANQAMCXN1YnN0cmF0ZcAUwDAABQABAAAAxQAUCXN1YnN0cmF0ZQdtcy1hY2RjwBTASAAFAAEAAAAmAAgFYWZkLWvAFMBoAAUAAQAAACYAKBJvdXRsb29rLW9mZmljZS1jb20Gay0wMDAyCGstbXNlZGdlA25ldADAfAAFAAEAAACgAALAj8CPAAEAAQAAAJ8ABA1rEgs=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1587041685171,"flow_last_seen":1587041685185,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":44,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft365","category":"Collaborative"},"dns": {"query":"outlook.office.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"13.107.18.11"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1587041685232,"flow_last_seen":1587041685232,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyIAbtyjZOTAAAAALAC\/\/8ViAAAAgQFtAEDAwUBAQgKMIS5SgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1587041685240,"flow_last_seen":1587041685240,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOyKAbtGGzTNAAAAALAC\/\/8rVAAAAgQFtAEDAwUBAQgKMIS5UgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1587041685243,"flow_last_seen":1587041685243,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp"}
+0433{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":93,"pkt":"EBMx8Tl2KDc3AG3ICABFAABPU3QAAP8R5NHAqAEGwKgBAchtADUAO5eNyGMBAAABAAAAAAAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAHAAB","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0708{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1587041685243,"flow_last_seen":1587041685243,"flow_tot_l4_data_len":59,"flow_min_l4_data_len":59,"flow_max_l4_data_len":59,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1587041685248,"flow_last_seen":1587041685248,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyLAbsws\/klAAAAALAC\/\/\/xvAAAAgQFtAEDAwUBAQgKMIS5WgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1587041685251,"flow_last_seen":1587041685251,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.7","src_port":60556,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4XAqAEGKH4JB+yMAbvF6IfFAAAAALAC\/\/8d8gAAAgQFtAEDAwUBAQgKMIS5XQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0w5JAAHUGiY00ccKEwKgBBgG77IqoHlkCRhs0zoAS\/\/9MIAAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzTOqB5ZA1AQIABs3wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":240,"pkt":"EBMx8Tl2KDc3AG3ICABFAADiAABAAEAGgXLAqAEGNHHChOyKAbtGGzTOqB5ZA1AYIAAZhwAAFgMBALUBAACxAwNemFWVZrT7WTFXDzKTJwgyjyi4pczPS4OaStHQgrmy6wAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAXAAAAB8AHQAAGmNvbmZpZy50ZWFtcy5taWNyb3NvZnQuY29tAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA","pkt_caplen":240,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1587041685240,"flow_last_seen":1587041685253,"flow_tot_l4_data_len":302,"flow_min_l4_data_len":20,"flow_max_l4_data_len":206,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0541{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":169,"pkt":"KDc3AG3IEBMx8Tl2CABFAACb\/nFAADkRv4jAqAEBwKgBBgA1yG0AhwAAyGOBgAABAAAAAQAAFHNreXBlZGF0YXByZGNvbG5ldTA0CGNsb3VkYXBwA25ldAAAHAABwCEABgABAAAADgBABHByZDEOYXp1cmVkbnMtY2xvdWTAKgZtc25oc3QJbWljcm9zb2Z0A2NvbQB9o\/w8AAADhAAAASwACTqAAAAAPA==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1587041685243,"flow_last_seen":1587041685256,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":59,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS","category":"Network"},"dns": {"query":"skypedataprdcolneu04.cloudapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0399{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0jN1AAG0Ge5k0cg8twKgBBgG77IfA1AaRAv0Ol4AS\/\/+iigAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q6XwNQGklAQIADDSQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":257,"pkt":"EBMx8Tl2KDc3AG3ICABFAADzAABAAEAGNLjAqAEGNHIPLeyHAbsC\/Q6XwNQGklAYIAAraAAAFgMBAMYBAADCAwNemFWVnmpu5iBYzDA0OwyTFl3gYWrTqQBuMzMR9X7FRwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAbQAAADAALgAAK3Ryb3V0ZXIyLWFzc2UtYS50cm91dGVyLnRlYW1zLm1pY3Jvc29mdC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA=","pkt_caplen":257,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":39,"flow_packet_id":4,"flow_first_seen":1587041685106,"flow_last_seen":1587041685262,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":223,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"trouter2-asse-a.trouter.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0389{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAow5NAAHYGiJg0ccKEwKgBBgG77IqoHlkDRhs1iFAQBAGIJAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUw5RAAHYGgus0ccKEwKgBBgG77IqoHlkDRhs1iFAQBAEKpQAAFgMDFysCAABZAwNemFWVon9sUY4smg\/Tw8+Zv8VcFlbcOdwExviP9\/E9yiDtJgAAkTnSxwdrr6KK4vMnxfSrgFx0pEdWZA9lBe7G6sAwAAARAAUAAAAXAAD\/AQABAAAAAAALAA4qAA4nAAhpMIIIZTCCBk2gAwIBAgITewAM1sff2xxDrSCFcgAAAAzWxzANBgkqhkiG9w0BAQsFADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDEwHhcNMTkxMjExMDIwNDIwWhcNMjExMjExMDIwNDIwWjAlMSMwIQYDVQQDExpjb25maWcudGVhbXMubWljcm9zb2Z0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKuoME\/5gx1HQd9sdy+s4YHawKf9J7S8dT4WfnUAqnYkdTyrmLaQGvnOVwm+Alg2MKjbLj7YlmrDEl+LlLhqsCOxTh+sGycfVj0hKsId4tssxk5dtSL14K6G+H0YBnvNUQu7vvVvTNCI4YPZj0lV\/ZKyol\/te+IRYafpXBi14wsmzo2lqeisNF9ulHu6A\/2xL\/FDFcQYFu8GUtZc\/1EHZiuH\/he6vLnSRl83OVtV\/yk0CSgW886Nb3\/WEJvOECPWn3DgxpU6jkEm4EvSs3adX1+bc\/i5J6\/gLUtUs6cAnmJtNvXs2pq\/f\/tijDc4rGLidlBdTF1jYL0uU8bsIVDJNSECAwEAAaOCBCUwggQhMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO\/3wwvIAvMTvFk4wAAAW7yvGHMAAAEAwBHMEUCIGa+\/kHz87e\/oQ8aC69gj8\/aoYo\/tE6p\/Si82L3s3PkGAiEAhkZwyGwr5TrczZ4j5sAn1Yok0bmQ50Q1otYS4UIF5GkAdgDuwJXujXJkD5Ljw7kbxxKjaWoJe0tqGhQ45keyy+3F+QAAAW7yvGL7AAAEAwBHMEUCID+jfXayujZyLzrbTnDycGFeCHnUL4IvMp4VSwcYAXjjAiEA+Wo2YMDO1x5lLdfKexvP6AnwkgDNgKyPCWglZwJVdW4AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW7yvGL5AAAEAwBGMEQCIHZ5MUybiLcqRiY\/i+zyj6mrjZJKktvjmJq7sVfmPkqyAiBXLnK3UpG6nhefXHnnWSJys9aLqQm8v0FaMVa+Jt2CdTAnBgkrBgEEAYI3FQoEGjAYMAoGCCsGAQUFBwMCMAoGCCsGAQUFBwMBMD4GCSsGAQQBgjcVBwQxMC8GJysGAQQBgjcVCIfahnWD7tkBgsmFG4G1nmGF9OtggV2E0t9CgueTegIBZAIBHTCBhQYIKwYBBQUHAQEEeTB3MFEGCCsGAQUFBzAChkVodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9NaWNyb3NvZnQlMjBJVCUyMFRMUyUyMENBJTIwMS5jcnQwIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLm1zb2NzcC5jb20wHQYDVR0OBBYEFLtL8OEZ7zs1ivteHY43T3pv1cy9MAsGA1UdDwQEAwIEsDBDBgNVHREEPDA6ghwqLmNvbmZpZy50ZWFtcy5taWNyb3NvZnQuY29tghpjb25maWcudGVhbXMubWljcm9zb2Z0LmNvbTCBrAYDVR0fBIGkMIGhMIGeoIGboIGYhktodHRwOi8vbXNjcmwubWlj","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzWIqB5kW1AQH9Jg+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzWIqB5qB1AQIABbIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":42,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":182,"pkt":"KDc3AG3IEBMx8Tl2CABFAACow5hAAHYGiBM0ccKEwKgBBgG77IqoHm+zRhs1iFAYBAG7UwAA0mcjUfghRDb\/G5+kNE504qga61CM4XWHMBZPM70HVY6bl5nTW4wMgEeYhASKAuc9\/c\/3xIbCGqTe4byauDnwt4gDPGW+QsBCOLLeXL0uNApF+1lxuJWGCd0dT62LqmKvy+IaoLTNxa2wjndjRezbtFElebsXF2K1eQmjcw4AAAA=","pkt_caplen":182,"pkt_type":2048,"pkt_ipoffset":14}
+1138{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":42,"flow_packet_id":12,"flow_first_seen":1587041685240,"flow_last_seen":1587041685269,"flow_tot_l4_data_len":6398,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":533,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"config.teams.microsoft.com","server_names":"*.config.teams.microsoft.com,config.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"7d8fd34fdb13a7fff30d5a52846b6c4c","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=config.teams.microsoft.com","fingerprint":"B9:54:54:12:C9:E9:43:65:10:70:04:7B:AD:B6:0C:46:06:38:A5:FA"}}
+0382{"flow_id":42,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyKAbtGGzWIqB5wM1AQH85VJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8aa1AAGwGYc00ck0hwKgBBgG77IgacWa+co2TlKASIABIJQAAAgQFoAEDAwgEAggKYR7cGTCEuUo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZOUGnFmv4AQEAmGrAAAAQEICjCEuXNhHtwZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyIAbtyjZOUGnFmv4AYEAk6ggAAAQEICjCEuXNhHtwZFgMBAMkBAADFAwO15W+8jaHI2sAcvPxYu3fOurYjru\/fmNz9T6MzJf3JQCDMFgAAPSmx1EB8rJYwgB6DDk65Ho1qqYZPmBoFpBpgkAAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1587041685232,"flow_last_seen":1587041685278,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0409{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VD9AAGwGx0kofgkHwKgBBgG77IwJMzAcxeiHxqASIADLBQAAAgQFoAEDAwgEAggKUkq4VzCEuV0=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6IfGCTMwHYAQEAkJnwAAAQEICjCEuXRSSrhX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":312,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEqAABAAEAGRpvAqAEGKH4JB+yMAbvF6IfGCTMwHYAYEAl4\/QAAAQEICjCEuXVSSrhXFgMBAPEBAADtAwMO1aNpNC\/DfNA+zTgvlq4OTJH4Eaani+1AUzQaqTtdmgAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACc\/wEAAQAAAAAeABwAABlsb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAADN0AAAAEgAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQALAAIBAAAKAAoACAAdABcAGAAZ","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0780{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1587041685251,"flow_last_seen":1587041685281,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.7","src_port":60556,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0532{"flow_id":42,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":161,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAGgcHAqAEGNHHChOyKAbtGGzWIqB5wM1AYIAA3KwAAFgMDAGYQAABiYQTSPsjxWGWz4pCe4\/e9vVSjl\/Z8Q0uN7k1kWUEcGAc3\/Gbp5QJzgkXHFiB4HT74NNZrxT8zrukht5BQ2pVsvaE9T\/TxBN83rZAPJ4GFxp7hMLAUr2QcDHEgUN74E6qDjiI=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8VA1AAGwGd200ck0hwKgBBgG77IvHJo2qMLP5JqASIAAqDQAAAgQFoAEDAwgEAggKYR8CxDCEuVo=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/kmxyaNq4AQEAlolwAAAQEICjCEuYBhHwLE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":256,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyAABAAEAG9sTAqAEGNHJNIeyLAbsws\/kmxyaNq4AYEAkImQAAAQEICjCEuYFhHwLEFgMBALkBAAC1AwNemFWVha04P4CUw6CKshmFd7ZG0fMDUFnrEIuMFFDaDAAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAYAAAACMAIQAAHm1vYmlsZS5waXBlLmFyaWEubWljcm9zb2Z0LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1587041685248,"flow_last_seen":1587041685294,"flow_tot_l4_data_len":338,"flow_min_l4_data_len":32,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":84,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0390{"flow_id":42,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAow5lAAHYGiJI0ccKEwKgBBgG77IqoHnAzRhs181AQBAFwiQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR4XAqAEGKH4JB+yMAbvF6Ii8CTMwHbAQEAlO8wAAAQEICjCEuZJSSrhXAQEFCgkzNb0JMztd","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6Ii8CTM7XYAQD6\/9hAAAAQEICjCEuZJSSrh3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":162,"pkt":"KDc3AG3IEBMx8Tl2CABFAACUVENAAGwGxu0ofgkHwKgBBgG77IwJM0D9xeiIvIAYBAUO+wAAAQEIClJKuHcwhLl1ylIYhh1swUUdzt0KIS+x1yDp112dFthuI7SvetM6QxZom320GzRkGy4oMbK3AzzTWBg7wjuVvNRmSVVhN2H19kOsZdTAWmUhAssMNxz3OXOwpycUFK29pbHFQLwOAAAA","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":45,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6Ii8CTNBXYAQD9D3YwAAAQEICjCEuZJSSrh3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":45,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGRxPAqAEGKH4JB+yMAbvF6Ii8CTNBXYAYEABr2AAAAQEICjCEuZtSSrh3FgMDAEYQAABCQQTwKy++HLBtGg3Uqg7Hj4cA5s160E2DLTa+rmI87ZN0CX5oGqVGwimriQ9\/3X3sl3qMqHyHVJ4c\/QEsIoSoJS59FAMDAAEBFgMDACgAAAAAAAAAAGcf0ldkqcTx3Mlc72Vgh1raGQFeDzkjoXhtD8jNFPtP","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZRiGnFx\/4AQD696oAAAAQEICjCEuZ5hHtxG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2188{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+1302{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":41,"flow_packet_id":8,"flow_first_seen":1587041685232,"flow_last_seen":1587041685327,"flow_tot_l4_data_len":4685,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0397{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZRiGnF3KoAQD9Z1TgAAAQEICjCEuZ5hHtxG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyIAbtyjZRiGnF3KoAYEABTMQAAAQEICjCEuZ9hHtxGFgMDACUQAAAhIDvgCHP2mI9cHzHqLz85L4rinpyirwQM0G15qiz8GUl0FAMDAAEBFgMDACgAAAAAAAAAANX1ITsccwssQQ7QgJqtBU2+fCpbWHhbhVG\/24Xb2iQ\/","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1869,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/nkxyaY64AQD69cigAAAQEICjCEubNhHwL6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUVBBAAGwGcdI0ck0hwKgBBgG77IvHJpjrMLP55IAQBAWSYgAAAQEICmEfAvowhLmBMSC5OQTNECo8lx0AnpkYGAnPS5fkyfwA8AxanTboskDBSqyEKKo9Rhgrp4qs9K9LqH5JQsdiIMDmpztd65Afu4rYnJDjOrFswpTOPjJry3GzQS65xeFd2FkngvvhSA1+6ATx+QEnQfqUWn3FMLu2utcRm4j6AcxuS5K5+Hg8y5xomhZmiNCTsCqDLpcRHX6BIGHksLmbnG5TlZUixtm9dRC62XWMPD8d0Jb4M0V7ex9UM+VIl6cFJKLb0dyVriAqfZaJSHuSetAksd5IEfdnPLTf+Fhg9U97NGjm\/awmCLbzLEPbT8QW0JsMcYexB2uG3Y+gsftm2tjL6fLwZeWO2BzqL7otZPFe0BtQsgyFSs87yC4qanWMwK5c2enAfH182pzjvUqwYAeCK31dyBCvLmKM3Jr94dm5WUiXQhrDUIELH4Mia+SbvCkigv2AUVx1Xw41wt1\/L3pnnz2OW4y7r530zAz7qB+dIcHz51IaXc4UV21QuEnusQsn0uJpJxJuxsAmPuekKxuLUzgG+hqHOuBLf5kWTlk9WWnxcadlZRsCAwEAAaOCAUIwggE+MB0GA1UdDgQWBBR6e4zBz+egyhzUa\/r74TPDDxqinTAfBgNVHSMEGDAWgBTlnVkwgkdYzKz6CFQ2hns6tQRN8DASBgNVHRMBAf8ECDAGAQH\/AgEAMA4GA1UdDwEB\/wQEAwIBhjAnBgNVHSUEIDAeBggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMJMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9PbW5pcm9vdDIwMjUuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQAR\/nIGOiEKN27I9SkiAmKeRQ7t+gaf77+eJDUX\/jmIsrsB4Xjf0YuX\/bd38YpyT0k66LMp13SH5LnzF2CHiJJVgr3ZfRNIfwaQOolm552W95XNYA\/X4cr2du76mzVIoZh90pMqT4EWx6iWu9El86ZvUNoAmyqo9DUA4\/0sO+3lFZt\/Fg\/Hjsk2IJTwHQG5ElBQmYHgKEIsjnj\/7cae1eTK6aCqs0hPpF\/kixj\/EwItkBE2GGYoOiKa3pXxWe6fbSoXdZNQwwUS1d5ktLa829d2Wf6l1uVW4f5GXDuK+OwO++8SkJHOIBKBujxS43\/jQPQMQSBmhxjaMmng9tyPKPK9FgAHKwEABycwggcjCgEAoIIHHDCCBxgGCSsGAQUFBzABAQSCBwkwggcFMIHHohYEFJ\/ldPQSLwcZJHaSD6SOKmapFFoKGA8yMDIwMDQxMjIwMTgxM1owgZswgZgwTDAJBgUrDgMCGgUABBQirwAcgHViBybgyJMa7KdCHDISOgQUenuMwc\/noMoc1Gv6++Ezww8aop0CExYACr2jKIomrOvxeF4AAAAKvaOAABgPMjAyMDA0MTIyMDE4MTNaoBEYDzIwMjAwNDE2MjAxODEzWqEiMCAwHgYJKwYBBQUHMAEGBBEYDzIwMTkwNDEzMjAxODEzWjANBgkqhkiG9w0BAQsFAAOCAQEAECbjKyDb9piP6hJkL6wfG9E8D09C4s5EJtshDBi95KyeBNmrhANouwaebIfXIBuDmHtHIJMqNzg+MDdajIvhQs4J6\/eyP1lV09t\/FIIkE4pCBQTXyxMmal3Q47TQ0Kl7OnD32GWGN\/AXz50m2PxpLaVqTyzn9+k+CNLi5FLecb3y1PhPb38PVLwdKd9NCsFonNvmPocHr7gn","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/nkxyaei4AQEABWmQAAAQEICjCEubNhHwL6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0835{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":385,"pkt":"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","pkt_caplen":385,"pkt_type":2048,"pkt_ipoffset":14}
+1303{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":44,"flow_packet_id":11,"flow_first_seen":1587041685248,"flow_last_seen":1587041685350,"flow_tot_l4_data_len":6641,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":603,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0399{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyLAbsws\/nkxyalaoAQD8lP8QAAAQEICjCEubNhHwL6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":45,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnVERAAGwGxxkofgkHwKgBBgG77IwJM0FdxeiJOoAYBAREIgAAAQEIClJKuJ4whLmbFAMDAAEBFgMDACgAAAAAAAAAAIBKHfNSFxBlmWv7H0u34ZHIWc0Rm83nyQsUXsoW1cEf","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":45,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR5HAqAEGKH4JB+yMAbvF6Ik6CTNBkIAQD\/72OwAAAQEICjCEubRSSrie","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":45,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1494,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAGQf3AqAEGKH4JB+yMAbvF6Ik6CTNBkIAQEABq+QAAAQEICjCEubRSSrieFwMDBsAAAAAAAAAAAZN+26IKokM\/ZJdqew2hyoVZsYfwirlKPCuD+rB9vU36bay4A1aRuUa47So2DTw3mKKAAiCas06RU3RR8C9HV6Z3G5shmetImIwR+iC\/Q\/93kNmIa6dp0d8XBDsbQgY\/n3IfyicZy2Gsa6borBu84VworLrUTByg1c4zc0w2AIDXE4Ge9CKyi73QyCqr1WKf8qEhM4eKqonhDGX3WvOtK\/16UQJmoHXA4+NjaOu+6vEkftmUKf3w\/pXP0cg7Xi2Yr78W6quARHrOk7v5h5JnIC4Xd8f12f5t8dxxa7MrgaZc1w06ZP+O9J8va3gaemP8wDVgpuEMfeWo1uQ2EXidZGfUWa9yMA9m+TTDTlkzd1iZn\/Nd15FbyY1kAIdHfBaoEFvSIETFKB\/dO4WJubLpR5UwO2jRcmLHiOorUkYZqEC5eDOjqkFQ2HnDTsAOoBBYQqalZ1321SVZtVdbxPW0t0ew1tEKC12JOLpx3d+4aeTaLCcfdA7AoRUUBrwzLVNSw5igewuDRF0GKGdvRoaE0c+VD+sMCJEmmWQZFGMtgqNNWDuu1PgEukvCJDUfDxZ04oqRPtELlTFA+iJMRWW2BCJRAqN33wpLI9qm53Uyg4ZoqGlBW8lRrAWBvSGsj9INEFJe4t1SMknz3q+wJgCC5+nwr1WHMvuGBVUE8uNyIEihhlI4YYwf3o8brRpRSQNynZzvIPxUIcARhPxTY8U2g2nfAI+fPeRRnRcB\/JMbytApHr8RPcoQ2VjJEQ5P+ZnPB4qzF3tU8PJXKk\/Iz93vjGEEYv75KE4ta0KGyROUiJJTrhW5xgN7z\/eZTnQK9FiFR0Atsk\/5engV5VkbmCHfIEAQST5ANhzxnExz\/XgfGra31U1Agz8PXWDCjb+O2AYTbI8cGwTbd9T\/xyCrasD9mJsbJucAZHGKf\/a5BHKNrMCFFCKhaIpwDo+1RW1w0NJjyJHct7NQA2f+rd8TCA6M2pIHObcDe2vqlqyhTGPqOcGaFxyQoSMxiLZkBB\/ehYzov4hiC9432RW5wH7AA0dav8N\/oDVsYev8RrGepQBAnLtlyvd5lnLso0kbYBXlteD3s4skj7L5NdPE9X+d8u01QQXH5lD9SttP3ur2qZyaPuz7kpDt\/v559XF4HO4JYTPAIXYak+7giuBKbT8ttl1gLyjNTIn6Wb2hWVy6gD6AA13w9Bt17dPPjeWfO+a\/UtMWYR8jZixqzautoXV4BVjKLkcHeO1CWs9hTdYMuBtr5nlfBYyPtai4kwEX4sJICqG1hpox71umTInnnp9J8GWlnqi4lgcjwBsWA9+Mjtk7S8Scfqkuh\/EQ8oLT8FsmvIGiaAoY6BVVpnXLF2AabHaNa8wXCjSDA6eaDtdYF+QsoQuTNmhp\/3y6xHjUJehx511zgqDBpRQSOJVl5OjlTcRtI1NwasT2FzE7vJKWzBJOuj1hs0vJ5ptt8GA+tlwxcDlkNjchMnRRwrk\/VHlOzPsG2HNqqbkO2JdHao4tqQT3t0Gkt9IT19Nm6jDsYmNs0i92xoBf\/hsehulRy34vLcg2hnxXrElot\/fhUCcnrs7cz77h3YRd9PkBUXkBsR7OPHV8Jlh8DW6g9dP0xk6pNwFryNxGFcM0pFBQ\/vyQh0P8bXq8nL4tJxqFQyivuXoid7Jr0jLNMfYZKSqXKARnUfUFQpzWuamwdW13s3CLTE90ng26\/yTHxtLFti2GyuxFSSSjCcUaMRkHRsyjtwYhX9nQ7MMrP+Kwl2PuLRf+gnPXr8uUoLiVmw9cHavRxVY\/rFhm+5Avrile50yIrqN90GdsBI2GGlBq1qZCUF0d1+wCKQH5lwJsaKGM31hcF7AqjSv2AOn929yv7LeVra2p\/MVq4KOqG3QgISQF","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":141,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB\/AABAAEAG9zfAqAEGNHJNIeyLAbsws\/nkxyalaoAYEACJxAAAAQEICjCEucBhHwL6FgMDAEYQAABCQQR2LdhnTLVLdjhoemvgAvid\/c5uLTUOsUTPRq73jWUkJpwr5TLWPvB+S\/rTQoynFejo7iEIeKUXIr7Dmo+ugaFU","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0398{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0abFAAGwGYdE0ck0hwKgBBgG77IgacXcqco2Uv4AQBAWAZAAAAQEICmEe3KMwhLmf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q9iwNQR6lAQH9K3VAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1906,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q9iwNQXllAQIACxegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1907,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":208,"pkt":"KDc3AG3IEBMx8Tl2CABFAADCjOJAAG0GewY0cg8twKgBBgG77IfA1B1CAv0PYlAYCAT33QAAhP8kGj4A71uZvPuiIFQNgmojQyaAV6pd1jD+lOLbBOEBkTitcW4qGNMWpLn0+DB74MywI1q+MsMrl9My\/pdszw+\/257T4TKQGFMqcjqLSt5G1XTEqzbXOxxwgReoxUjqT630fph3hTnJwYPYvxV91IFSGcWpVdfcj52uSWwebMcG2nFbczAZWuaUPPSbPbbCU33y2ywSDgAAAA==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+1178{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1908,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":39,"flow_packet_id":11,"flow_first_seen":1587041685106,"flow_last_seen":1587041685420,"flow_tot_l4_data_len":6421,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":583,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"trouter2-asse-a.trouter.teams.microsoft.com","server_names":"*.trouter.teams.microsoft.com,go.trouter.io,*.drip.trouter.io,*.dc.trouter.io","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 2","issuerDN":"CN=*.trouter.teams.microsoft.com","fingerprint":"DD:24:DF:0E:F3:63:CC:10:B5:03:CF:34:EB:A5:14:8B:97:90:9B:D4"}}
+0383{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1909,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGNYPAqAEGNHIPLeyHAbsC\/Q9iwNQd3FAQH82rZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0VBNAAGwGd280ck0hwKgBBgG77IvHJqVqMLP6L4AQBAVa+gAAAQEICmEfA10whLnA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1920,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG90\/AqAEGNHJNIeyLAbsws\/ovxyalaoAYEACJMwAAAQEICjCEugthHwNdFAMDAAEBFgMDACjKOW9G6pYYFQxbBReF7uslk560sh+IyAUFvY0v0wF49L1jZlB3T9Xz","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":161,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAGNRjAqAEGNHIPLeyHAbsC\/Q9iwNQd3FAYIACT9wAAFgMDAGYQAABiYQS80kqcx+dHmOVYK7Aj4fzmayr6AuRamhmxIa7bAW3xyLCmAKUzligWw+GpX4RkL84fvV2uF\/yIkEkiz4MehM51+B7Yj7T1\/gX4fcTf5d3U6r4rw7oO0MvcSYRG4w6OjD0=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0470{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1982,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnabJAAGwGYZ00ck0hwKgBBgG77IgacXcqco2Uv4AYBAVQyQAAAQEICmEe3ZEwhLmfFAMDAAEBFgMDACgAAAAAAAAAAGwcabH\/l\/Aiqt8xUwEcbKVK2GP8JMZve0ScvcZSWcOF","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1983,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyIAbtyjZS\/GnF3XYAQD\/5yEwAAAQEICjCEutZhHt2R","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1984,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAojONAAG0Ge580cg8twKgBBgG77IfA1B3cAv0PzVAQCATCxQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":105,"pkt":"EBMx8Tl2KDc3AG3ICABFAABbAABAAEAGNVDAqAEGNHIPLeyHAbsC\/Q\/NwNQd3FAYIADDMQAAFAMDAAEBFgMDACg1g3wT\/ODOeR+aU\/gTizqUW4fCOmeXoMw7EtPrJ+nxsME1J+VVQInR","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1987,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1587041685984,"flow_last_seen":1587041685984,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGghTAqAEGNHHChOyNAbtKVk3bAAAAALAC\/\/8LQAAAAgQFtAEDAwUBAQgKMIS8GgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0TQBAAHUGACA0ccKEwKgBBgG77I3LqgPISlZN3IAS\/\/9gggAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2020,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk3cy6oDyVAQIACBQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041685,"pkt_len":233,"pkt":"EBMx8Tl2KDc3AG3ICABFAADbAABAAEAGgXnAqAEGNHHChOyNAbtKVk3cy6oDyVAYIAAs2QAAFgMBAK4BAACqAwNemFWVDIT9d4HngeJpG5mlHm9Rt958WOVPiGzzmIF3agAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAVQAAABgAFgAAE3RlYW1zLm1pY3Jvc29mdC5jb20ACgAIAAYAFwAYABkACwACAQAADQASABAEAQIBBQEGAQQDAgMFAwYDAAUABQEAAAAAABIAAAAXAAA=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1587041685984,"flow_last_seen":1587041685997,"flow_tot_l4_data_len":295,"flow_min_l4_data_len":20,"flow_max_l4_data_len":199,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0390{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoTQFAAHYG\/yo0ccKEwKgBBgG77I3LqgPJSlZOj1AQCASYigAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2024,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUTQNAAHYG+Xw0ccKEwKgBBgG77I3Lqgl1SlZOj1AQCATEUAAAAgSwMB4GA1UdEQQXMBWCE3RlYW1zLm1pY3Jvc29mdC5jb20wgawGA1UdHwSBpDCBoTCBnqCBm6CBmIZLaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDQuY3JshklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDQuY3JsME0GA1UdIARGMEQwQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAfBgNVHSMEGDAWgBR6e4zBz+egyhzUa\/r74TPDDxqinTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggIBACMljl4PXdqfsGnHnHEiog8CyPTCICRJCVUcbZ5afVTsQxiRpg2bVtxl1vFq0UdqTpI+kMX8EVY4C7Gmrb2yOSLzdaz+0htG2dwTgNWS\/bd++B5YbYbyyrmrHhzmoDzfR+qZdKS0uA6mx2CYFo5hKxNjTHfd1Qdrg0w3XsuPrQax3fLN5JjHsFCQxAn9XxV2SfDNzLiNrpkQcWWElrudoda+F67h2kRXXaX8jtecomPcC8rpXShGH3O0tQI7lITD\/ghyFuS4OuN4zs3vGp2xsAH7PEi24hGQro09g1+rY\/VhwEhg\/\/nkTVgD\/ZbaRVPcvbIndMFc2uEbDyTEYG1ghQMlhzJ0z0ON1uZd+845eSsucuZAsM2nVRjaCLJ3VJXLp2bLLhQ8Z0oytSNQnEt4sS2H+qUfAxDvyt1VZ2g\/VYoL+stqV\/K5MJ5dbineogXsC\/RZwOCRTINGE2s6jTHOwhvEvUqlynAJe0lbwafcs+x5wYSwLNkng6KjnHuy4xZGEg4BM1iOtAqOQ\/nKFLpZQzXVqekdB2LMjWFKLQOyf2K70pU0GYuMCFCkhY0u\/OIpyRo\/IVgzwmO7bKF6dKMZ3EoTyTAuTwI1\/3MtVDjnpot8X2B7wWFIT1OXxoGkgYY9qoa2XjXhUFwMTUdeoK1yS4fEUV3Y68bTuXYV11jRsY6uAAW4MIIFtDCCBJygAwIBAgIQC2qzsD6xqfbEYJJqqM3+szANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJJRTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJlclRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTE2MDUyMDEyNTIzOFoXDTI0MDUyMDEyNTIzOFowgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq+XrXaNrOZ71NIgSux1SJl19CQvGeY6rtw7fGbLd7g\/27vRW5Ebikg\/iZwvjHHGk1EFztMuZFo6\/d32wrx5s7XEuwwh3Sl6Sruxa0EiB0MXpoPV6jx6NXtOtksDaxpE1MSC5OQTNECo8lx0AnpkYGAnPS5fkyfwA8AxanTboskDBSqyEKKo9Rhgrp4qs9K9LqH5JQsdiIMDmpztd65Afu4rYnJDjOrFswpTOPjJry3GzQS65xeFd2FkngvvhSA1+6ATx+QEnQfqUWn3FMLu2utcRm4j6AcxuS5K5","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2025,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk6Py6oPIVAQH9J1ZAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk6Py6oUzVAQIABvigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2028,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUTQVAAHYG+Xo0ccKEwKgBBgG77I3LqhTNSlZOj1AQCAQGZgAA7dIaCgAAABSW0TANBgkqhkiG9w0BAQsFADCBizELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEVMBMGA1UECxMMTWljcm9zb2Z0IElUMR4wHAYDVQQDExVNaWNyb3NvZnQgSVQgVExTIENBIDQwHhcNMjAwNDAyMTcwODI2WhcNMjEwNDAyMTcwODI2WjArMSkwJwYDVQQDDCBNaWNyb3NvZnRfSVRfVExTX0NBXzRfS2V5QmluZGluZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2SgxvpjDYjzBSs0WMPjaEnxfx0ph8YUENHkNtBgmTL\/I48ISA513PDZvgRlkEL8juzKHixKietMtbTjX2g0Ru+b0Xx3jTpJvUnThqOsEv072NriYX3tuq2YlbZfSvXX5g4CDBZAx1V8Y9CnBOP5Oj+UOsWBE9phfvyhrfN9XBADPrUuim5l2H3Wsx6VgY2WqiE\/AD766Gm5hxSrOygTdO6oYRNS6py2EIDxPSfo06of+f+bd5U4O1djL9YnvzHRcJG3xZRsDSBXZSutpJVrdUc3OsjyygQKoWHCbplOYXHYtXrL52V4R8lPBoeGGNIyX3nlHFJFj2gzYcVCm7fr90CAwEAAaOB1jCB0zAdBgNVHQ4EFgQUov5qP4QsEh\/ZqaZNTXvN5iiM8UwwDgYDVR0PAQH\/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMJMA8GCSsGAQUFBzABBQQCBQAwHwYDVR0jBBgwFoAUenuMwc\/noMoc1Gv6++Ezww8aop0wPgYJKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYHMm0eByOkWAgFkAgEHMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggIBAKPl9SK0LY+EXU1pDCJZNILX\/tsLthBgVVkdFDbAun0x8Ww8QmlW6qLErphV\/AeU0i+ofY+1NRBI3dS5PHQF9yXT2VY0sqQBSti9zuzRw2uf11GLfIZx5EWNPlMkhPfXzWNxUVi2\/FkJWN3wqvwaShm5c0f5selfWZ8Bqq8SRlmox8B96mIVf3wk3SXeHNpZbjUXl7OcH6T7+r8sLEa8EYOEBcS5JF+k4PEHqk5mNBrpgaczqCJLhxuii3S7bIBIeG6sBZe83weEPDxpxsTpw02D\/5yXHd9C+oxAP4JQbVAgyoHjFdw4c3IsOE7FxTfNUSZNWmQXjOei3vQ32nR0chEHjNlTdJwKuQGoTQF0k45jiFV7z7s0Iv2rHqv+dB3P18SlgUBifwg+S0xQ3fPol\/cooBvyJhDIAIVmL+OOF17ZWOn9PMX6jznZgzxMjIBIIOMqNUaLfXXbbB\/ykAOUOkrVO6XTcdly26wevgCDRUTIPFRDzoN6slnotBP4mwALUEQTE5HTW+ultwf5P6UIHEZ2AtKHtW9Prb2\/IOVj7iZ8WMW3OpZkfhPmb50r4KHj5SL1FEouj0ymUJWTijP7SJELUHZslfqBZzbwVYghPjrsaOPr34Xaw9EPOiMn++5naD9XuozjC863v1M25zIRY0O3DfW4ygEYRsRTfv+z4LPLDAABaQMAGGEE2sl6xnO4uP94rSIxVlg4b\/j99hnR8yaBzHoUH9\/qsNRkW9haIO+cM+lX2sjma0NLyCeRaBVp\/yTEPyTID+7UaplNFWbv\/tcVBB71zV4gY+ppHdd07J8XxSx68sr41pWVBAEBACErGiRr9GjIHoClE\/uVmHDe2IM5WQ+tESjQJIYlxc54JzAdeIHUmFPRqdqVWHNRbyNeVieOWV6u","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":258,"pkt":"KDc3AG3IEBMx8Tl2CABFAAD0TQZAAHYG\/lk0ccKEwKgBBgG77I3Lqhp5SlZOj1AYCAS77AAAvIujPjRzrH4orx5NcFc758218nlovmJ9A8tO8uTQ31JS\/9Z8ard+gW85grhMGd5fC2AryGxpyADt94rcf5ANohO2O9w3chTBZqvmZ4RhOhDKhvjS2iYXJjZeQZW4VIDPOEwLyXk3X6tvRm\/KDMyqBXlWC2ySrpNlGYxWmAcLr+g2XNRhvDDEB8TeShOR8\/Q9S18sFSiDKSlKk9h3K4GyIjAuOKk30BmRTqH\/RcpyOnUhtU+GG6Fn\/M6NQ9dAXiKSzWT0bDE6Wh0OAAAA","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+1088{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2029,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":46,"flow_packet_id":12,"flow_first_seen":1587041685984,"flow_last_seen":1587041686010,"flow_tot_l4_data_len":6467,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":538,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"teams.microsoft.com","server_names":"teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"7d8fd34fdb13a7fff30d5a52846b6c4c","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=teams.microsoft.com","fingerprint":"68:1E:E8:3C:83:70:6F:E3:86:F4:E8:8C:C4:E6:A0:9A:3E:E0:9C:0E"}}
+0382{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2030,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGgizAqAEGNHHChOyNAbtKVk6Py6obRVAQH8xpRgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":161,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAGgcHAqAEGNHHChOyNAbtKVk6Py6obRVAYIACsmwAAFgMDAGYQAABiYQQ29kHwPhvvnpaiCYG3+fxcHuntYbQcDfQWnyrEsXfWZHYY41ZDY2su30b0oAzRR5MiPvwj0FEd0ujfw7k4nnayIJgepfpgOA95AYZxgWsUyhsxGXi+m1LNcagh5bJS0Bk=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoTQdAAHYG\/yQ0ccKEwKgBBgG77I3LqhtFSlZO+lAQCASAowAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1587041686239,"flow_last_seen":1587041686239,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyPAbtgh2e9AAAAALAC\/\/9PlwAAAgQFtAEDAwUBAQgKMIS9EAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8YwZAAGwGaHQ0ck0hwKgBBgG77I9T9FE0YIdnvqASIADemAAAAgQFoAEDAwgEAggKYR9buzCEvRA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2e+U\/RRNYAQEAkdGQAAAQEICjCEvUBhH1u7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyPAbtgh2e+U\/RRNYAYEAniuwAAAQEICjCEvUBhH1u7FgMBAMkBAADFAwPWvyUszXyGVwTdfXyAsIQo65lWnkpPMHo57lR912BOzSAuDwAAZ8HaIUQ\/TUKOJyzDpeZ2C6OXN9Z66nmD08\/sfwAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":47,"flow_packet_id":4,"flow_first_seen":1587041686239,"flow_last_seen":1587041686288,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2331{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyPAbtgh2iMU\/RRNbAQEAmKzgAAAQEICjCEvXJhH1u7AQEFClP0VtVT9Fx1","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2iMU\/RcdYAQD68RAQAAAQEICjCEvXJhH1vt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2185{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2iMU\/RhoIAQD9YLrwAAAQEICjCEvXJhH1vt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":47,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyPAbtgh2iMU\/RhoIAYEADuPAAAAQEICjCEvXNhH1vtFgMDACUQAAAhILoNE073vLjkv42KST8jBEPCC1BAtVGR8MZdCvebJBtFFAMDAAEBFgMDACgAAAAAAAAAAJckANz4BCs8I78XXVnxpZcg2XCbaodvqaDrdTVFTmJ8","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":47,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnYwpAAGwGaEU0ck0hwKgBBgG77I9T9GGgYIdo6YAYBAVyZwAAAQEICmEfXBswhL1zFAMDAAEBFgMDACgAAAAAAAAAAOkiNhP8B13DC35Fq9aUjKeB4pBEiHe1eg9iEJe55fLr","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":47,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyPAbtgh2jpU\/Rh04AQD\/4KmQAAAQEICjCEvaJhH1wb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":47,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1494,"pkt":"EBMx8Tl2KDc3AG3ICABFAAXIAABAAEAG8e7AqAEGNHJNIeyPAbtgh2jpU\/Rh04AQEABHWgAAAQEICjCEvaNhH1wbFwMDNdQAAAAAAAAAARS1AoHXGXc7ihRSv8Tj+OXeK+qLZdoX\/mtelTHHto9+Wt9p7rAA5AYVg5NZL5AXwb9HECOHcFlhgViy+5wxuPvZrKY+KKgK1ZenGpXegDUDBWPYD3ZM+o97cm1z53yFtSboc\/ZDjVXzb7SnpUQRXFQRSeB5HZWjF6ygcN6HjR24xah9Uo7w5MdSB1VDlrDEJqCG2AZSRzLxWU7m4CREuN+XUcyMe89kOgMx+ky67xET9JOHDz+9P1ytKQ6R5icdvlhhZBdaSfU+Fq1Z8xnj84KwlE3hiZqYo\/SOPGmZdGHFg0ePUNJdZAOp79mdHaesVjjrZ6vdZObQW44zYCxqC6QID8j4SdN5DRhqIXwPt8gYMIBTOYNoYINw7e530+qglCTVxBjt6oAoyJziRi+DTmQpTU+g++wOm5v4fkaaWY\/ec70fFtGduUoDXLFKJSXohIcQcceM+B\/JttzkltzW3ETtvMEjPhuSIpjI8qQGG+0gm6zn6754copvDuP\/+WlWm96OJrwdYLlv9AJhGhrRPCAE98jiTyVEl3hgyaphDeczFQaqSvmoz193uls7+mNE3ZNTQWn1Ek+C9yoOGffAN71OToXVn2ZXZHauo1ZVy0VKKPMUt1RbpbfNohcE7pO9LoV428NifaBBu0XKE8BTweL95CtF2LMu5g86mSXH9V6+w4gp3TOTnESu87xstVuu1gDmHK+2nHF9cnJosIj1u1T6Sh1A4Pz0Yl38uAlzOBRuUIpxmrQWM0\/GHYAh453mEfkIr+vIGiznXS2+kIsNr6XklYlaMV8D\/CbXOIuKMWBg\/x8NgPqbv03muTcfzO9DIndvosQv+xnZLGqm0VjGJ5CPyPxkFTf5RwAp6B5C5pjdEYqAuVaFP5VP0mU3TSpGUohR9vhOcygzDdbWo0Y3S4jNVUi9ISeunPjXSTC3rI0lx+CorS8SBxn78\/95Hs\/nld\/KhPhNZV3DaIUh45fDARRiHmKX9egCTZnUvkrilaVIjCe6HD8+LEpCkKCFyBmP6IxdZULQvEoUViIF4HqhVuUW0S1Has09dEoxuivUxE5FbOJgITFsjAyWkYRC\/tlCZ4lflDmppL1flv+jo8lS6sU1cPCJtzmZGp2LnX+QNohcfvCNFItMsjHIC2eYhUtqijW0wWeKypsuQxCnLH\/R9daYUuB05\/QoyvLsa9bFHNYb00Dn2E5FR\/8LFQuDsZPin4hHUDE6f68v4q34vYS4J7+CTSK8dtXngQqwfEkEQC9UfPh9iJv\/Y8IrK0lKdUIm5ynzZJlvpFLvnO149TB+MicIJNfz+0et3KGqsy\/N5e7h0rZuzbejXavSb9HLfn70zQgHZSCAf+3veULDRzxMOZaxKx6GXrsCsYdiL37rgFGWQnRxslpLJjljCefbKSu6AM2jCz52LAoeyBqKWNftV0k7vz8KV7AEBp6Al2W42AZcHOW7dn9xJCwWYj3t+rKO3hZSRQpmt5t69wfs6qogk1\/wD1oAWNIASxc+UOv0sIs1LTUA3CtDpn3c3wZ\/\/AEAM1JHpwqfLCBZl4GcG+s65a+FAsVp3IOWwIN6eFgjyXLAfsNmYVsTrmm28JBauIDzeOoGY0S+BnUUbaWMTSuKg3wwxAnHnYKFS2AfNOgBYGfZPR9oyGgnuH5Q2Mry5aU5reBvxWEHLJHx20HFRma936nde5NZjKDzNfnLTddhWmuo3WNQYjtDwrwe90bXUUpbMN8i7ztAjXAnL5a7H3B\/rpBH4XnMfdBCG24d5y32NB+3ZGc4JBih\/qzrnGVfvfivbywm8qdnysbdCdc0yyT+3TxH5SOX5VJvfOJD60PhUjUZ3V\/UCRc+TTdGgV2rO0OdEP9TkINdui2eY2GKv4DdtoZ0wepa9YeB","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":47,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1587041686659,"flow_last_seen":1587041686659,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0431{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/jP5XIzfkCABFAABE9p0AAEAR\/0vAqAFwwKgB\/+EV4RUAME6OU3BvdFVkcDBE2bWZ25IvowABAADKIN8ICP0NzlEBuCwq6R7jWIhweQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1587041686659,"flow_last_seen":1587041686659,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1587041686889,"flow_last_seen":1587041686889,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGR0nAqAEGKH4JQ+yQAbuMpd1iAAAAALAC\/\/\/7KQAAAgQFtAEDAwUBAQgKMIS\/iwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8PdhAAGwG3XQofglDwKgBBgG77JCDb8\/fjKXdY6ASIAC\/qwAAAgQFoAEDAwgEAggKUkSG7zCEv4s=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd1jg2\/P4IAQEAn+PwAAAQEICjCEv6dSRIbv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0731{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":312,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEqAABAAEAGRl\/AqAEGKH4JQ+yQAbuMpd1jg2\/P4IAYEAngnQAAAQEICjCEv6dSRIbvFgMBAPEBAADtAwMbmcXPy8rEyjOH5t3NVXkoUGCRZxMGyIKbY0co\/wunRQAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACc\/wEAAQAAAAAeABwAABlsb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tABcAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAADN0AAAAEgAAABAAMAAuAmgyBWgyLTE2BWgyLTE1BWgyLTE0CHNwZHkvMy4xBnNwZHkvMwhodHRwLzEuMQALAAIBAAAKAAoACAAdABcAGAAZ","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1587041686889,"flow_last_seen":1587041686919,"flow_tot_l4_data_len":394,"flow_min_l4_data_len":32,"flow_max_l4_data_len":278,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2343{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd5Zg2\/bIIAQD9PyAwAAAQEICjCEv8RSRIcO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":162,"pkt":"KDc3AG3IEBMx8Tl2CABFAACUPdxAAGwG3RgofglDwKgBBgG77JCDb+DAjKXeWYAYBAVCNgAAAQEIClJEhw4whL+nQ32fUU3wgpyNXOS+YAQTaKFItA\/wMBEfcoJdzfo7Vhy7bDY7\/0CPvRpu\/u8Nd\/XiPGZZp2CcfD1ltBTqX9aHWUFSItU3j5\/wjZXSsX\/40JJB41OxGJ\/QivD2yTgOAAAA","pkt_caplen":162,"pkt_type":2048,"pkt_ipoffset":14}
+1364{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":49,"flow_packet_id":9,"flow_first_seen":1587041686889,"flow_last_seen":1587041686950,"flow_tot_l4_data_len":4970,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":552,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Microsoft365","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"login.microsoftonline.com","server_names":"login.microsoftonline.com,login.microsoftonline-p.com,loginex.microsoftonline.com,login2.microsoftonline.com,stamp2.login.microsoftonline-int.com,login.microsoftonline-int.com,loginex.microsoftonline-int.com,login2.microsoftonline-int.com,stamp2.login.microsoftonline.com","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"678aeaf909676262acfb913ccb78a126","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 1","issuerDN":"CN=stamp2.login.microsoftonline.com","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"7E:0F:A2:51:8F:FB:49:30:C3:34:07:5E:F8:7C:FD:34:20:A2:96:63"}}
+0399{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd5Zg2\/hIIAQD9DsBgAAAQEICjCEv8RSRIcO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGRtfAqAEGKH4JQ+yQAbuMpd5Zg2\/hIIAYEACglQAAAQEICjCEv85SRIcOFgMDAEYQAABCQQRF1\/1oMSdAxU1Mhx45DP5rD7GL3YTR99AHtI6CS5oE4zxa53P4viOFVIG1jEeguhsWdkQLAbDAklx91P7lzGi2FAMDAAEBFgMDACgAAAAAAAAAAIsLD7O97vjhH8lCxLcrSKE9fDLXgiaI+ndnxfU8CGCX","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnPd1AAGwG3UQofglDwKgBBgG77JCDb+EgjKXe14AYBAS3VwAAAQEIClJEhzYwhL\/OFAMDAAEBFgMDACgAAAAAAAAAADZpCQltcb4W89AtkdO9slaMxcqcxRBEn0SsLOBRfFJa","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGR1XAqAEGKH4JQ+yQAbuMpd7Xg2\/hU4AQD\/7q2gAAAQEICjCEv+lSRIc2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041686,"pkt_len":369,"pkt":"EBMx8Tl2KDc3AG3ICABFAAFjAABAAEAGRibAqAEGKH4JQ+yQAbuMpeRrg2\/hU4AYEACL+AAAAQEICjCEv+pSRIc2T3+mjlZiqvbSIDS3yLvmShrsZpTdEV0CSknJx5v5+YLFlaaPK8+ftc599Xj2DRHchYBtpvqLLN+5pP+TvtxqTjsw5hzPtq5q1uzS+S9M0Km3DX5xYcUsZT9velQx0jRi4+X2MlHPL7YU7A6KRKGx1OVWljS\/7qWTSdb0mQKgyQ7pWtIixslp31xh7yft5bDMRxJliVXwceBH\/1w+ox97x8oBqUiBfNWVaj3d2hGQG6TiV688PRENTqErJXTDMUieGv0vJkh\/T1OzjQPCg7TZe4oVOcBmRO1r2t25kvfR6cqsYFMYuDBXWEvlJB4cg\/smK4evTuN\/c4rerSDOolH0ulyxPnAKXgqzvFsJl5luX\/1O15UOeC9pxDfoRB3THa6onajGaeaSN\/0s6q9KSVT9","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1587041687245,"flow_last_seen":1587041687245,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG93bAqAEGNHJNIeyRAbt4yq\/kAAAAALAC\/\/\/rWgAAAgQFtAEDAwUBAQgKMITA4AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8EaVAAGwGudU0ck0hwKgBBgG77JHMBk4keMqv5aASIADnTgAAAgQFoAEDAwgEAggKYPR58TCEwOA=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yq\/lzAZOJYAQEAkl0AAAAQEICjCEwQ9g9Hnx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyRAbt4yq\/lzAZOJYAYEAmZKwAAAQEICjCEwQ9g9HnxFgMBAMkBAADFAwOyv9PSQv\/SmdcPkRjuFnJs95jqk9PvclXpwloDxRoWsCDkPAAAKbM0d7f12FXyaEAA7qD+P9kwtx+HS3tAUpaW7wAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0774{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1587041687245,"flow_last_seen":1587041687294,"flow_tot_l4_data_len":354,"flow_min_l4_data_len":32,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1587041687370,"flow_last_seen":1587041687370,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp"}
+0421{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABF06EAAP8RZK7AqAEGwKgBAdM1ADUAMUK+cAQBAAABAAAAAAAAA2FwaQ9taWNyb3NvZnRzdHJlYW0DY29tAAABAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1587041687370,"flow_last_seen":1587041687370,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"api.microsoftstream.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0678{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":272,"pkt":"EBMx8Tl2KDc3AG3ICABFAAECAABAAEAG9rTAqAEGNHJNIeyRAbt4yq\/lzAZOJYAYEAmY0wAAAQEICjCEwWdg9HnxFgMBAMkBAADFAwOyv9PSQv\/SmdcPkRjuFnJs95jqk9PvclXpwloDxRoWsCDkPAAAKbM0d7f12FXyaEAA7qD+P9kwtx+HS3tAUpaW7wAewC\/AK8AwwCzMqcyowAnAE8AKwBQAnACdAC8ANQAKAQAAXv8BAAEAAAAAIwAhAAAebW9iaWxlLnBpcGUuYXJpYS5taWNyb3NvZnQuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0752{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzETBAAEARZ+HAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAJGRMVEAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":78,"pkt":"KDc3AG3IEBMx8Tl2CABFAABAEaZAAGwGudA0ck0hwKgBBgG77JHMBk4leMqws7AQBAWoNwAAAQEICmD0enowhMEPAQEFCnjKr+V4yrCz","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":264,"pkt":"KDc3AG3IEBMx8Tl2CABFAAD6rblAADkRD+LAqAEBwKgBBgA10zUA5gAAcASBgAABAAYAAAAAA2FwaQ9taWNyb3NvZnRzdHJlYW0DY29tAAABAAHADAAFAAEAAAe+AB8DYXBpBnN0cmVhbQ50cmFmZmljbWFuYWdlcgNuZXQAwDUABQABAAAAPAAJBmV1d2UtMcAMwGAABQABAAAEVQANCmV1d2UtMS1hcGnAQMB1AAUAAQAAACkACwhldXdlLTEtMcAMwI4ABQABAAAAwQApHWFtcy1ldXdlLTEtaG9zLWFwaWdhdGV3YXktMS0xCGNsb3VkYXBwwE\/ApQABAAEAAAANAARoKLuX","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1587041687370,"flow_last_seen":1587041687435,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":49,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"api.microsoftstream.com","num_queries":1,"num_answers":6,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"104.40.187.151"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1587041687436,"flow_last_seen":1587041687436,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGVUrAqAEGaCi7l+ySAbtvi5oIAAAAALAC\/\/9njAAAAgQFtAEDAwUBAQgKMITBnAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8OsBAAGwG7o1oKLuXwKgBBgG77JKBluUGb4uaCaASIADVGwAAAgQFoAEDAwgEAggKAbkbHzCEwZw=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5oJgZblB4AQEAkTrwAAAQEICjCEwbkBuRsf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":280,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEKAABAAEAGVIDAqAEGaCi7l+ySAbtvi5oJgZblB4AYEAl2MwAAAQEICjCEwbkBuRsfFgMBANEBAADNAwNcYEYY9r+P9DTmk4+ghvjGxbgXLamZQ7BCvuLi0gzQzQAAHMrKzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACI2toAAP8BAAEAAAAAHAAaAAAXYXBpLm1pY3Jvc29mdHN0cmVhbS5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAgqKgAdABcAGAAbAAMCAAIaGgABAA==","pkt_caplen":280,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":52,"flow_packet_id":4,"flow_first_seen":1587041687436,"flow_last_seen":1587041687466,"flow_tot_l4_data_len":362,"flow_min_l4_data_len":32,"flow_max_l4_data_len":246,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.microsoftstream.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2336{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGVUrAqAEGaCi7l+ySAbtvi5rfgZbqp7AQEADtgQAAAQEICjCEweYBuRs+AQEFCoGW8EeBlvXn","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5rfgZb154AQD6YCEAAAAQEICjCEweYBuRs+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5rfgZb154AQEAABtgAAAQEICjCEweYBuRs+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":295,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEZOsVAAGwG7atoKLuXwKgBBgG77JKBlvuHb4ua34AYBAXWPgAAAQEICgG5Gz4whMG5EeY1MNfghvcwHwzk1R9gewO0913oGcQ7ndx4RSQ7pUPIhIxzukfB9cZ76w8elbcGVySLAVNwTs8FUVys1GNkCLUtjS7uWpnXQMNYqZXRNazc5X04H26RqJTAQRwGFwxlF88nbdaqFQ8LLE8aOjqT5pRtAVhdUU8ONZUonu1CEEHx4YShCJT\/pFwD0Q+t\/S1GvRluHzQI1PU4FYNin1je+XUNxHL4PzzF5ebWvUzrwnUMy424PiSaXPLa0lhdF3V\/0wHJZjlegYA\/bL0onOLa+i82kChtk8ACDf3J3zons95NDgAAAA==","pkt_caplen":295,"pkt_type":2048,"pkt_ipoffset":14}
+1011{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":52,"flow_packet_id":12,"flow_first_seen":1587041687436,"flow_last_seen":1587041687512,"flow_tot_l4_data_len":6619,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":551,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.microsoftstream.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"67bfe5d15ae567fb35fd7837f0116eec","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 5","issuerDN":"CN=*.api.microsoftstream.com","alpn":"h2,http\/1.1","fingerprint":"E2:21:AD:8A:8D:D3:9F:D4:B4:55:81:4C:34:8D:D9:B0:FF:C8:6D:FD"}}
+0398{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGVVbAqAEGaCi7l+ySAbtvi5rfgZb8bIAQD8v7ZQAAAQEICjCEweYBuRs+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGVPnAqAEGaCi7l+ySAbtvi5rfgZb8bIAYEACnHwAAAQEICjCEwecBuRs+FgMDACUQAAAhIK8OxPDglBgHZglnqb7gvF58UKqTrjsDINopusiBzJIdFAMDAAEBFgMDACgAAAAAAAAAALlrraheuC8w74kfls05Db0QKifAhpbCHmrMWQWiTgCR","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGVPnAqAEGaCi7l+ySAbtvi5s8gZb8bIAYEAADzQAAAQEICjCEwf4BuRs+FwMDAFgAAAAAAAAAARCMW2bwqXT7UTixKtqy+\/3offTIszbzNljWCXcfUDgxESE9Vl6yU8vG0W18lpajbvjn9lQhKY13DnqQb7ITJlbF\/vin\/\/OgkcJKMuyvbRYK","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yrCzzAZZZYAQD9MYCgAAAQEICjCEwgVg9Hrp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2186{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1389,"pkt":"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","pkt_caplen":1389,"pkt_type":2048,"pkt_ipoffset":14}
+1303{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":50,"flow_packet_id":10,"flow_first_seen":1587041687245,"flow_last_seen":1587041687544,"flow_tot_l4_data_len":4967,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":496,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Microsoft","category":"Cloud"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mobile.pipe.aria.microsoft.com","server_names":"*.events.data.microsoft.com,events.data.microsoft.com,*.pipe.aria.microsoft.com,pipe.skype.com,*.pipe.skype.com,*.mobile.events.data.microsoft.com,mobile.events.data.microsoft.com,*.events.data.msn.com,events.data.msn.com","ja3":"a1674500365bdd882188db63730e69a2","ja3s":"ae4edc6faf64d08308082ad26be60767","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.events.data.microsoft.com","fingerprint":"33:B3:B7:E9:DA:25:F5:A0:04:E9:63:87:B6:FB:54:77:DB:ED:27:EB"}}
+0398{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yrCzzAZekIAQD6kTCQAAAQEICjCEwgVg9Hrp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG9yXAqAEGNHJNIeyRAbt4yrCzzAZekIAYEACxYwAAAQEICjCEwgZg9HrpFgMDACUQAAAhIEEei9EC+K5+wTIH7nn4OrBCpvwIyhcSNoau7TZIohg7FAMDAAEBFgMDACgAAAAAAAAAAJhotVo7bnsIfNVJhUttAitclNGZcxD+p1Dd2JviYPnO","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0470{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnEapAAGwGuaU0ck0hwKgBBgG77JHMBl6QeMqxEIAYBAVw6QAAAQEICmD0ezUwhMIGFAMDAAEBFgMDACgAAAAAAAAAAKmibfDE971fe1e\/39N5Ncwu98x5\/x81YgWFBEvwX87I","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG94LAqAEGNHJNIeyRAbt4yrEQzAZew4AQD\/4RkgAAAQEICjCEwktg9Hs1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1587041687731,"flow_last_seen":1587041687731,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABM83AAAP8RRNjAqAEGwKgBAfUPADUAOAAFY+UBAAABAAAAAAAABmV1bm8tMQNhcGkPbWljcm9zb2Z0c3RyZWFtA2NvbQAAAQAB","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1587041687731,"flow_last_seen":1587041687731,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"euno-1.api.microsoftstream.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0611{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":225,"pkt":"KDc3AG3IEBMx8Tl2CABFAADTPBBAADkRgbLAqAEBwKgBBgA19Q8AvwAAY+WBgAABAAQAAAAABmV1bm8tMQNhcGkPbWljcm9zb2Z0c3RyZWFtA2NvbQAAAQABwAwABQABAAAGxQAfCmV1bm8tMS1hcGkOdHJhZmZpY21hbmFnZXIDbmV0AMA8AAUAAQAAABUACwhldW5vLTEtMcATwGcABQABAAAAOgApHWFtcy1ldW5vLTEtaG9zLWFwaWdhdGV3YXktMS0xCGNsb3VkYXBwwFbAfgABAAEAAAAVAAQ0qbp3","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0673{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1587041687731,"flow_last_seen":1587041687745,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":56,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"euno-1.api.microsoftstream.com","num_queries":1,"num_answers":4,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.169.186.119"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1587041687745,"flow_last_seen":1587041687745,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGienAqAEGNKm6d+yTAbth0wzHAAAAALAC\/\/81+QAAAgQFtAEDAwUBAQgKMITCxwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8GLFAAGwGRTw0qbp3wKgBBgG77JMQ1B2QYdMMyKASIACACgAAAgQFoAEDAwgEAggKASJ3bTCEwsc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0wzIENQdkYAQEAm+kQAAAQEICjCEwvABIndt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0696{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":287,"pkt":"EBMx8Tl2KDc3AG3ICABFAAERAABAAEAGiRjAqAEGNKm6d+yTAbth0wzIENQdkYAYEAmMqgAAAQEICjCEwvABIndtFgMBANgBAADUAwN1hCAWlzZVXD7TCb6igB3LJP9WVkluJUaJIbsmWjvyJAAAHCoqzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACP6uoAAP8BAAEAAAAAIwAhAAAeZXVuby0xLmFwaS5taWNyb3NvZnRzdHJlYW0uY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAI2toAHQAXABgAGwADAgACOjoAAQA=","pkt_caplen":287,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1587041687745,"flow_last_seen":1587041687789,"flow_tot_l4_data_len":369,"flow_min_l4_data_len":32,"flow_max_l4_data_len":253,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euno-1.api.microsoftstream.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2346{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2345{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGienAqAEGNKm6d+yTAbth0w2lENQjMbAQEAAIwgAAAQEICjCEwx0BIneaAQEFChDUKNEQ1C5x","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2332{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0711{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":297,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEbGLZAAGwGRFg0qbp3wKgBBgG77JMQ1DQRYdMNpYAYBAWZXwAAAQEICgEid5owhMLwlUn3uHgdhgU4MHogDrsVrY6D1rZLJHuvf87AS5dveCXuWr7wVSU8d\/VVEagzs9HiJvDqzYhOTLFh47XeH8G2GqoHo2gLYlw7TpXRKe9jUapVLBq6r0AIg6kvr4OnjlVSUL3d1meucwV4gMn1IMvou4XS3791x289aQ5rjH6jk2RWa3pxCGKDlijxsc\/q1WDbgRQYx3jOZa5HBeb\/VGPkU8iXp3F5K2yGp1JlNKWIBkufSBPxEt+i0B6Tc8BJsHOXF4aBYp7IEYbrHmXfRYs77Gd2PybaVEOcKhft5LW9z2TAUJsOAAAA","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+1018{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":54,"flow_packet_id":10,"flow_first_seen":1587041687745,"flow_last_seen":1587041687835,"flow_tot_l4_data_len":6564,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":656,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euno-1.api.microsoftstream.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"67bfe5d15ae567fb35fd7837f0116eec","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 4","issuerDN":"CN=*.api.microsoftstream.com","alpn":"h2,http\/1.1","fingerprint":"43:FB:E1:46:1D:0D:C3:44:66:EB:9E:08:EE:3D:71:49:7D:B8:EC:2F"}}
+0398{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0w2lENQucYAQD6as3QAAAQEICjCEwx0BInea","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0w2lENQ0+IAQD3GmiwAAAQEICjCEwx0BInea","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGifXAqAEGNKm6d+yTAbth0w2lENQ0+IAQEACl\/AAAAQEICjCEwx0BInea","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGiZjAqAEGNKm6d+yTAbth0w2lENQ0+IAYEAAnVQAAAQEICjCEwx0BIneaFgMDACUQAAAhIMy35KoEGSMcFnBa8jNDHx1RCVuhV\/QU89YQEITmKYxRFAMDAAEBFgMDACgAAAAAAAAAAFUqcKplxXzSNxk2DYQCNpbL\/SsW1VcXCQjZlJHNg+wn","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041687,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAGiZjAqAEGNKm6d+yTAbth0w4CENQ0+IAYEAAVhgAAAQEICjCEwyUBIneaFwMDAFgAAAAAAAAAASxgyx+Ky9RBAf0mud9B+q5CGZWyPshwEGQXTMTr7pa+hWGxwf18PjoNJzvtqriITj3xB8PcdsVT6zknQV+6Qnfc9EdObGk\/UuzAvm+KPAUt","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041688,"pkt_len":97,"pkt":"KDc3AG3IEBMx8Tl2CABFAABTwZhAADQGRFanY9ekwKgBBhFS7ILLfL0aJqxLk4AYAfVZTwAAAQEIChN5Lm0whLFTFQMDABrJs0SB+OzC2\/de8I9YL02OJFD2ECcCfrYWyA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041688,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyCEVImrEuTy3y9OYAQD\/\/2kgAAAQEICjCExD8TeS5t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041688,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041689,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041689,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1587041690880,"flow_last_seen":1587041690880,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp"}
+0437{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":96,"pkt":"EBMx8Tl2KDc3AG3ICABFAABSJv0AAP8REUbAqAEGwKgBAfm6ADUAPoc2eGoBAAABAAAAAAAAAmRjE2FwcGxpY2F0aW9uaW5zaWdodHMJbWljcm9zb2Z0A2NvbQAAAQAB","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1587041690880,"flow_last_seen":1587041690880,"flow_tot_l4_data_len":62,"flow_min_l4_data_len":62,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"dc.applicationinsights.microsoft.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0715{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":301,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEfVLxAADkRaLrAqAEBwKgBBgA1+boBCwAAeGqBgAABAAUAAAAAAmRjE2FwcGxpY2F0aW9uaW5zaWdodHMJbWljcm9zb2Z0A2NvbQAAAQABwAwABQABAAAACgAuHWFwcGxpY2F0aW9uaW5zaWdodHNfaW5nZXN0aW9uB21vbml0b3IFYXp1cmXALcBCAAUAAQAAAJEALB1hcHBsaWNhdGlvbmluc2lnaHRzX2luZ2VzdGlvbgtwcml2YXRlbGlua8BgwHwABQABAAAAXwAXAmRjDnRyYWZmaWNtYW5hZ2VyA25ldADAtAAFAAEAAAAeABwQY2ZyLWJyZWV6aWVzdC1pbghjbG91ZGFwcMDGwNcAAQABAAAABwAEKE+KKQ==","pkt_caplen":301,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1587041690880,"flow_last_seen":1587041690915,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":62,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"dc.applicationinsights.microsoft.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"40.79.138.41"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1587041690916,"flow_last_seen":1587041690916,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60564,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyUAbup7MP+AAAAALAC\/\/9nAwAAAgQFtAEDAwUBAQgKMITPEwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8GwdAAG4GfY4oT4opwKgBBgG77JSCI5UvqezD\/6ASIAArFwAAAgQFoAEDAwgEAggKUvjCpTCEzxM=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MP\/giOVMIAQEAlpqQAAAQEICjCEzzFS+MKl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":305,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEjAABAAEAGxa7AqAEGKE+KKeyUAbup7MP\/giOVMIAYEAnoKAAAAQEICjCEzzFS+MKlFgMBAOoBAADmAwMbIQaP+rFGCYsreMCv9lvxK9Aj9uBCbNOtF1CHIeISyAAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACV\/wEAAQAAAAAXABUAABJnYXRlLmhvY2tleWFwcC5uZXQAFwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACgAIAB0AFwAYABk=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1587041690916,"flow_last_seen":1587041690946,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":32,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gate.hockeyapp.net","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2322{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyUAbup7MTugiOVMLAQEAny+QAAAQEICjCEz1JS+MKlAQEFCoIjmtCCI6Bw","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MTugiOgcIAQD69dkwAAAQEICjCEz1JS+MLF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MTugiOmEIAQEABXogAAAQEICjCEz1JS+MLF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2008{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":1259,"pkt":"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","pkt_caplen":1259,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyUAbup7MTugiOwWYAQD9pNfwAAAQEICjCEz1JS+MLF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041690,"pkt_len":248,"pkt":"EBMx8Tl2KDc3AG3ICABFAADqAABAAEAGxefAqAEGKE+KKeyUAbup7MTugiOwWYAYEAAW4AAAAQEICjCEz1xS+MLFFgMDAEYQAABCQQSUnYSpybVYpi0p11KRpbmhDxBYhpXs5PROhBf4L2I5udzZUNYx70vQNqldliW9YUOr3Ds7MC+ESYnGUnUCnqeiFAMDAAEBFgMDAGCQ8BEm9rKcsTBnitntEAU7w\/ebg8cwxch5T6MJMx5sWNKe3opj2yGBAl7jJQwnA6\/JZOhoJxAXbcFpzYdB74brSKX5UU\/5TfIPccnelKyI+2smrraCFoe9GA\/I3dLOqBk=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":173,"pkt":"KDc3AG3IEBMx8Tl2CABFAACfGw1AAG4GfSUoT4opwKgBBgG77JSCI7BZqezFpIAYBAR8aAAAAQEIClL4wvIwhM9cFAMDAAEBFgMDAGA8Y2ZIWeRHbyEr11qF9jGK6p2aZClxjDUYQUISatc4CMtjM8T0AW1danbz\/TUonKqcSp07EQXLmUGHz0azZhSQ\/P1XmIHbTE3XM0JPoHoHdkx69JC4UjQ23LrepYpKgj0=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1587041691075,"flow_last_seen":1587041691075,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp"}
+0452{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":103,"pkt":"EBMx8Tl2KDc3AG3ICABFAABZLy0AAP8RCQ\/AqAEGwKgBAfWPADUARdrUdPIBAAABAAAAAAAABGVtZWECbmcDbXNnDHRlYW1zLW1zZ2FwaQ50cmFmZmljbWFuYWdlcgNuZXQAAAEAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1587041691075,"flow_last_seen":1587041691075,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"emea.ng.msg.teams-msgapi.trafficmanager.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0523{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":158,"pkt":"KDc3AG3IEBMx8Tl2CABFAACQrGdAADkREZ7AqAEBwKgBBgA19Y8AfAAAdPKBgAABAAIAAAAABGVtZWECbmcDbXNnDHRlYW1zLW1zZ2FwaQ50cmFmZmljbWFuYWdlcgNuZXQAAAEAAcAMAAUAAQAAADwAGw9tc2dhcGktcHJvZC1zZnIIY2xvdWRhcHDANMBJAAEAAQAAAAoABDRybAg=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0695{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":57,"flow_packet_id":2,"flow_first_seen":1587041691075,"flow_last_seen":1587041691148,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":69,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Teams","category":"Collaborative"},"dns": {"query":"emea.ng.msg.teams-msgapi.trafficmanager.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.114.108.8"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1587041691149,"flow_last_seen":1587041691149,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG2I\/AqAEGNHJsCOyVAbumbhw9AAAAALAC\/\/8jXgAAAgQFtAEDAwUBAQgKMITP9QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8PCRAAHEGa280cmwIwKgBBgG77JWud4Fgpm4cPqASIABnNAAAAgQFoAEDAwgEAggKUqoqrDCEz\/U=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbhw+rneBYYAQEAml0QAAAQEICjCE0AhSqiqs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0696{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":288,"pkt":"EBMx8Tl2KDc3AG3ICABFAAESAABAAEAG173AqAEGNHJsCOyVAbumbhw+rneBYYAYEAkjHAAAAQEICjCE0AhSqiqsFgMBANkBAADVAwNwlpHiXHB3s5dLKatTLHHCd3zPHP62TkNPLWHwExyS1QAAHAoKzKnMqMArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAACQysoAAP8BAAEAAAAAJAAiAAAfZW1lYS5uZy5tc2cudGVhbXMubWljcm9zb2Z0LmNvbQAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAABIAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAoACMrKAB0AFwAYABsAAwIAAhoaAAEA","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":58,"flow_packet_id":4,"flow_first_seen":1587041691149,"flow_last_seen":1587041691169,"flow_tot_l4_data_len":370,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":92,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"emea.ng.msg.teams.microsoft.com","ja3":"ebf5e0e525258d7a8dcb54aa1564ecbd","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2335{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":58,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG2I\/AqAEGNHJsCOyVAbumbh0crneBYbAQEAn+NAAAAQEICjCE0B1SqiqsAQEFCq53hwGud4yh","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":58,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbh0crneMoYAQD6+Z4wAAAQEICjCE0B1SqirB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":58,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":58,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbh0crneSQYAQEACT8gAAAQEICjCE0B1SqirB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":58,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0967{"flow_id":58,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":485,"pkt":"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","pkt_caplen":485,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":58,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG2JvAqAEGNHJsCOyVAbumbh0crneZhIAQD8WM6gAAAQEICjCE0B1SqirB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":58,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAG2B3AqAEGNHJsCOyVAbumbh0crneZhIAYEAD7QgAAAQEICjCE0B5SqirBFgMDAEYQAABCQQQK2dJCEMdhX7md\/Lh5ouYbeR0QO78n8njlcA5HQdgEcR4bEQk4KMHqHrxid1o7584ZuY8J6mKXsb02dkJUD4LJFAMDAAEBFgMDACgAAAAAAAAAAA0dAU2U0JIs+ClJsG6565DMr4wwIiXSF2v9oa+FYEKF","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":58,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":159,"pkt":"EBMx8Tl2KDc3AG3ICABFAACRAABAAEAG2D7AqAEGNHJsCOyVAbumbh2arneZhIAYEAA6yQAAAQEICjCE0ClSqirBFwMDAFgAAAAAAAAAAbwT8vUFA\/Fojr5f+cigicqpuAuzJpiwa1yz1q\/0GLhLgeNCd3U+W4HLxbcHwGMjOynBOWtzGHt\/xqnqJXowVUdqfRJcmwhgKsejNsTw2mwr","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041691,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0752{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzETFAAEARZ+DAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAPmTDokAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1587041692528,"flow_last_seen":1587041692528,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":1,"l3_proto":"ip4","src_ip":"151.11.50.139","dst_ip":"192.168.1.6","src_port":2222,"dst_port":54750,"l4_proto":"tcp"}
+0564{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":186,"pkt":"KDc3AG3IEBMx8Tl2CABFAACscMtAADIGTDyXCzKLwKgBBgiu1d6yibcLw8sjj4AYAfWSMAAAAQEICnMgXuAwhCbwdBDZH1X2LNSHenV0XPT5UOuNQPq3DAtDODIIsZ4L3xE8W9ceOtMh\/taRn1i3oYCG\/lk5DiXu3JH7RFT8gb0ANFHp9LfVVHPD+A0sB0\/WJaUdO\/QQPvH9sYa9nCylNS5SUfWnuhHHtKPL+2Ql1DSrQI\/KjFfe6Sr3","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFSAA0AABAAEAGrzfAqAEGlwsyi9XeCK7DyyOPsom3g4AQD\/zTvAAAAQEICjCE1UVzIF7g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFSAB8AABAAEAGru\/AqAEGlwsyi9XeCK7DyyOPsom3g4AYEADukgAAAQEICjCE1UVzIF7g5AplDBJ5jEkO1U2Mpra9\/PbG6UC\/FVXGQ5pEnr4zSbP3LnLXhdyZOGgH9qsJLTZHLgDXKr5t+q9K3Mvbm5JFapBhK16BH5zD","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0cMxAADIGTLOXCzKLwKgBBgiu1d6yibeDw8sj14AQAfXhSgAAAQEICnMgXxEwhNVF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1587041692808,"flow_last_seen":1587041692808,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp"}
+0415{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+gHAqAEGp2PXpOyWEVIVrX6QAAAAALAC\/\/9dQAAAAgQFtAEDAwUBAQgKMITWWwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADQGBganY9ekwKgBBhFS7JY0lYWJFa1+kaAS\/ohhIwAAAgQFrAQCCAoTeUD2MITWWwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":60,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrX6RNJWFioAQECx9\/QAAAQEICjCE1qITeUD2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":60,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0838{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":60,"flow_packet_id":4,"flow_first_seen":1587041692808,"flow_last_seen":1587041692881,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":60,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBJAADQG6funY9ekwKgBBhFS7JY0lYWKFa2AloAQAfqJ4wAAAQEIChN5QT0whNai","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0608{"flow_id":60,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":218,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMHBNAADQG6WKnY9ekwKgBBhFS7JY0lYWKFa2AloAYAfrg1wAAAQEIChN5QT8whNaiFgMDAGACAABcAwOUbx5\/B3ZgLf5vCjBFIQRrfoTRnqXQyERycJrp90X9EiDe8bvsDQaKZ\/SHTClTSUEpcKfm8tnRcB\/XxmDM4wjf0sAwAAAU\/wEAAQAAEAALAAkIaHR0cC8xLjEUAwMAAQEWAwMAKHrIfL7WEd9FBF7y+nv07iI\/qncPABmynlkhHQHjbn7q57JKbc2IA90=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":60,"flow_packet_id":6,"flow_first_seen":1587041692808,"flow_last_seen":1587041692953,"flow_tot_l4_data_len":881,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":146,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"7120d65624bcd2e02ed4b01388d84cdb","ja3s":"410b9bedaf65dd26c6fe547154d60db4","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0398{"flow_id":60,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrYCWNJWGIoAQECd61AAAAQEICjCE1uoTeUE\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":60,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041692,"pkt_len":117,"pkt":"EBMx8Tl2KDc3AG3ICABFAABnAABAAEAG+drAqAEGp2PXpOyWEVIVrYCWNJWGIoAYECdxjAAAAQEICjCE1uoTeUE\/FAMDAAEBFgMDACgePBs\/C2EWA291JuO3YkDgacglhK1S7Nmn4LfYvs\/WgbNRA6YYJi6T","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":60,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBRAADQG6fmnY9ekwKgBBhFS7JY0lYYiFa2AyYAQAfqIYAAAAQEIChN5Qa0whNbq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1677{"flow_id":60,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1012,"pkt":"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","pkt_caplen":1012,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":60,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBVAADQG6finY9ekwKgBBhFS7JY0lYYiFa2Ee4AQAfWEAgAAAQEIChN5QfEwhNdX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2067{"flow_id":60,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1291,"pkt":"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","pkt_caplen":1291,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":60,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+g3AqAEGp2PXpOyWEVIVrYR7NJWK64AQEABvXQAAAQEICjCE2GATeUK5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1587041693428,"flow_last_seen":1587041693428,"flow_tot_l4_data_len":985,"flow_min_l4_data_len":985,"flow_max_l4_data_len":985,"flow_avg_l4_data_len":985,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":51681,"dst_port":3478,"l4_proto":"udp"}
+1694{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1019,"pkt":"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","pkt_caplen":1019,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJIAAGwR1nE0ck2IwKgBBg2WyeEALeCzAzNiZmY2YTE1LTY4NDEtNDYwNy04YzI3LTllY2ViOWVlZDkzYg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":61,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":235,"pkt":"KDc3AG3IEBMx8Tl2CABFAADdNJMAAGwR1dQ0ck2IwKgBBg2WyeEAyV65B51cqyKYlOqfHC4eUj71t0+3OzD2kNc2OfFPQNt7fwvuOZltdCnrcr0l94iSgE3VeMj4bdDb+vZ+CObqTNO+QGlUnkV8bcknbNvGUx42nvxp8mhw\/srnkVApKnhDe\/uy29skE82ON2NOubAQd6VBKyo6DT6MaE1A1qjybrSe5XwDrj8OJ1EA\/FUFx\/b063Ar395Oi1sw+DBTZ16KUXaymVRCSFNXRrfz6yWlsSmdtxTLQfpVrW5dlejTUGgaSVxvSg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1587041693515,"flow_last_seen":1587041693515,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50016,"dst_port":3478,"l4_proto":"udp"}
+0460{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":110,"pkt":"EBMx8Tl2KDc3AG3ICABFAABg5p0AAEARo1PAqAEGNHL6e8NgDZYATAKlAAMAMCESpEKyND9uZ\/QdWKy6Y58ADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1587041693515,"flow_last_seen":1587041693515,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50016,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1587041693516,"flow_last_seen":1587041693516,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGShzAqAEGNHL6e8NiAbvwxDFFAAAAALAC\/\/9VoQAAAgQFtAEDAwUBAQgKMITZEwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1587041693517,"flow_last_seen":1587041693517,"flow_tot_l4_data_len":75,"flow_min_l4_data_len":75,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp"}
+0459{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":109,"pkt":"EBMx8Tl2KDc3AG3ICABFAABfDxsAAP8RKRvAqAEGwKgBAdnVADUASzsZd8IBAAABAAAAAAAAEmItdHItdGVhbXMtZXVuby0wNQtub3J0aGV1cm9wZQhjbG91ZGFwcAVhenVyZQNjb20AABwAAQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0683{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1587041693517,"flow_last_seen":1587041693517,"flow_tot_l4_data_len":75,"flow_min_l4_data_len":75,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"b-tr-teams-euno-05.northeurope.cloudapp.azure.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0559{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":185,"pkt":"KDc3AG3IEBMx8Tl2CABFAACrU5xAADkRak7AqAEBwKgBBgA12dUAlwAAd8KBgAABAAAAAQAAEmItdHItdGVhbXMtZXVuby0wNQtub3J0aGV1cm9wZQhjbG91ZGFwcAVhenVyZQNjb20AABwAAcAfAAYAAQAAAAUAQARwcmQxDmF6dXJlZG5zLWNsb3VkA25ldAAGbXNuaHN0CW1pY3Jvc29mdMA6AAAnEQAAA4QAAAEsAAk6gAAAADw=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0694{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":64,"flow_packet_id":2,"flow_first_seen":1587041693517,"flow_last_seen":1587041693530,"flow_tot_l4_data_len":226,"flow_min_l4_data_len":75,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"b-tr-teams-euno-05.northeurope.cloudapp.azure.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0399{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0nZBAAGwGgJc0cvp7wKgBBgG7w2KOQNor8MQxRoAS\/\/8u4wAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":63,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NiAbvwxDFGjkDaLFAQIABPogAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":63,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":241,"pkt":"EBMx8Tl2KDc3AG3ICABFAADjAABAAEAGSXnAqAEGNHL6e8NiAbvwxDFGjkDaLFAYIADs+gAAFgMBALYBAACyAwNemFWdM\/wbLFSI3dPgZpkO7ysDE3\/GJlDQM9ZmaeyX\/AAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAXQAAACAAHgAAG2V1YXoudHIudGVhbXMubWljcm9zb2Z0LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":63,"flow_packet_id":4,"flow_first_seen":1587041693516,"flow_last_seen":1587041693561,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euaz.tr.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0622{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":229,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXfJQAAGwR4OU0cvp7wKgBBg2Ww2AAw6emARMApyESpEKyND9uZ\/QdWKy6Y58ADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+o0AFAAUAk7L+IJ6YNZTBt6\/p32H0UQC3V0AFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6jYCVAAh\/IMTdT4SN+oAgAAgAAcHVcadqCg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":61,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":235,"pkt":"KDc3AG3IEBMx8Tl2CABFAADdNJQAAGwR1dM0ck2IwKgBBg2WyeEAyV65B51cqyKYlOqfHC4eUj71t0+3OzD2kNc2OfFPQNt7fwvuOZltdCnrcr0l94iSgE3VeMj4bdDb+vZ+CObqTNO+QGlUnkV8bcknbNvGUx42nvxp8mhw\/srnkVApKnhDe\/uy29skE82ON2NOubAQd6VBKyo6DT6MaE1A1qjybrSe5XwDrj8OJ1EA\/FUFx\/b063Ar395Oi1sw+DBTZ16KUXaymVRCSFNXRrfz6yWlsSmdtxTLQfpVrW5dlejTUGgaSVxvSg==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":61,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJUAAGwR1m40ck2IwKgBBg2WyeEALeCzAzNiZmY2YTE1LTY4NDEtNDYwNy04YzI3LTllY2ViOWVlZDkzYg==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1587041693582,"flow_last_seen":1587041693582,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50036,"dst_port":3478,"l4_proto":"udp"}
+0459{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":110,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgF74AAEARcjPAqAEGNHL6e8N0DZYATEppAAMAMCESpEI9x0RmdejywONbcT4ADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1587041693582,"flow_last_seen":1587041693582,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50036,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","category":"VoIP"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1587041693582,"flow_last_seen":1587041693582,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50021,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGShzAqAEGNHL6e8NlAbtcWVYoAAAAALAC\/\/\/E5AAAAgQFtAEDAwUBAQgKMITZVQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1587041693597,"flow_last_seen":1587041693597,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50016,"dst_port":3478,"l4_proto":"udp"}
+0659{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":256,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyLLYAAEARXJfAqAEGNHL6jcNgDZYA3iTJAAMAwiESpEIiL+\/H85JL0bmXJ+QADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIfyDE3U+EjfoAFAAUAk7L+IJ6YNZTBt6\/p32H0UQC3V0AFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACB+ROZSH0cQpVQPYpCmfWn5X6jy8HHHqFihd3XDn9tzDQ==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1587041693597,"flow_last_seen":1587041693597,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50016,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","category":"VoIP"}}
+2338{"flow_id":63,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":63,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDaLIAQIAAjCQAAAQEFCo5A6cyOQO94","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":63,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUnZFAAGwGevY0cvp7wKgBBgG7w2KOQNos8MQyAVAQCASF5gAAFgMDF+kCAABVAwNemFWdsj2BaVsDh5E5y8r1X3UjjxOVlMfMQIu1roLiOiDgQAAALn9hMRlUjUOvDW8rXXboUZyNr1rD5AfhgK2308AwAAANAAUAAAAXAAD\/AQABAAsADuwADukACSswggknMIIHD6ADAgECAhMtAAZemCjIP80XJ2CuAAAABl6YMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTAeFw0xOTA1MjQxNDEwMjZaFw0yMTA1MjQxNDEwMjZaMCExHzAdBgNVBAMTFnRyLnRlYW1zLm1pY3Jvc29mdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLTNHPfgLoOgUfyR4c2CDg+CoBg7bwaQp6OOdTLjN80e6165bdZW8ryNWADQBv\/\/6Ld1H5eQQNetSDwVifHVU+CteBiHg6T9F1rA96B1Fk1nARcGhMPsZbgvGxJ+NR6ygkRK7GWC6KFZyOiZ0MvWyxQTJBlsBwklHTiX9D0fiSz06Q+tVkIHpWWHGkJRO+Tm3UUtCMr7e1K4eQloaVRg1AeMGEhZEaGXyKum9VwAP15maK0zwKMiUymx8uWFHW4J0+7wZd9kZyUeJvDO2QDZvxPl5w9NBzvGZUQFIkRD+XvUanlt9AtvhnDy5BiPzueeQgaJbyvyJl4Af8nIo8gppfAgMBAAGjggTrMIIE5zCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFq6jb0ngAABAMARzBFAiEA+SbPYnNZBq5NAa+KJuZcLJF6Cs7c51vg2wno92Y73cQCIFui0LePG9Yu0H+TqmpdeWJeVlJ0KiyWWMKI6D92L\/K3AHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFq6jb1LQAABAMARjBEAiAZDnc3oPi8LaNBy6Df89WOlPch018jWvYNKaDO2U51nQIgYZuZffTHCtDDZ3lWVJgiVsjUCTGqki0p6MIBuSQoIfUAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAWrqNvNaAAAEAwBIMEYCIQChq4nHPM4twtbxyAgrDLE3a797eV+6L2EiO6pBrFmrUAIhANBHWXnY9HAcs6WqVRp9r8q8wlaSY9pBfB7vJlbCShQPAHUARJRlLrDuzq\/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFq6jb0QQAABAMARjBEAiAzKKpy8ELEm5AO\/Cl8weRDML0CJ7IOPZ2GbRbx\/8vxWgIgDCW1c1pNKCE9DA2mbQwKGa4Z2H7dNtIRrzU4ZJcZOr8wJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBSC313bBDWiwUMAeq0EgFmCSqbJVzALBgNVHQ8EBAMC","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1117{"flow_id":63,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":63,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDf2IAQH9IdiwAAAQEFCo5A6cyOQO94","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":63,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDh\/IAQH8EbeAAAAQEFCo5A6cyOQO94","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":63,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1124{"flow_id":63,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":63,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NiAbvwxDIBjkDnqIAQH5QV+QAAAQEFCo5A6cyOQO94","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":63,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NiAbvwxDIBjkDveFAQH1U6RgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1120{"flow_id":63,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"KDc3AG3IEBMx8Tl2CABFAAJMnZZAAGwGfnk0cvp7wKgBBgG7w2KOQO948MQyAVAYCAQXbQAAEO5WjXjIe6ycKomslpwe+EFt6Mjgit5TOxZ3H33HANI4vT53PRNoyKZhkE4S9iFCZzfCTWensJkZpnlLMABE4aqNQAX6ZU\/zapbAGS9LPTaiKv9Ry1gMKarsrTbdnF5winwAmVhwqa89tPKzbfBk4V04yBPdDJ2DjFTLanTQ3ELGqhKqqmcvrsuHghO2d9ak1HP13ExxC0+i4+GrhqIUwyWxdjniUJlyleN+iiIaKEg6jvrVHFWrR3PUtDbo8TEacEyF96c8xXcjPVnUVrhVI++2dvqyNpMZ8ACJADw9JEE8gToopzGHlqjm36adlbvaZA10Gxs+B\/nQx7a7NeW17x1RViO2RGJOk4lHSYkzJLzAXxFd+J6icgx2JzFBiVk7job1q60ezkEMDfaRdnPXFQ8MAAFpAwAYYQTcFelLA9oFcMXaZ1+o4whLp\/a59umnbq2FWq3OKBO8zamaxT2FyU19rYZ0ZilAUrKQf46lDK+8Hxp0k3fgqsnaxCN0dCohw\/JNH9hjSMMszCDsvH6g7UTzxGxVCtADiowEAQEACew2uQQDAc0TMzu4GCnlS5Qzgmai2FDlIr6yuHqj75k4WxQ8qA6CvskecRbf1DI9baDBITgISolwC9cfOnzbJSFP+LKDved8MDt+3jHN4TLLYVmpkkTYoA1qlWzMDaUvs17YThv1FNMmlaagZcuSaMDHizlaM3P7XnJYM0O9ky+rQRcXOKg=","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1587041693611,"flow_last_seen":1587041693611,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp"}
+0459{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":110,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgfyMAAEARCrzAqAEGNHL6jcNhDZYATBjuAAMAMCESpELalY8VcoE3uJ+0vVMADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1587041693611,"flow_last_seen":1587041693611,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","category":"VoIP"}}
+0620{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":229,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXVxUAAGwRBmU0cvp7wKgBBg2Ww3QAwyhaARMApyESpEI9x0RmdejywONbcT4ADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+okAFAAUPK7\/QeTw1Z9oICgNLxST+LDzEgAAFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6iYCVAAhb5VsGDC2J+oAgAAgAAc5scadqCg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0Nx9AAGwG5wg0cvp7wKgBBgG7w2XeqFvwXFlWKYAS\/\/\/MOwAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NlAbtcWVYp3qhb8VAQIADs+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":241,"pkt":"EBMx8Tl2KDc3AG3ICABFAADjAABAAEAGSXnAqAEGNHL6e8NlAbtcWVYp3qhb8VAYIADHIgAAFgMBALYBAACyAwNemFWdJel+38T72uo9XNMIcFrJVaaQNKpU+a+Uq8VSQwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAXQAAACAAHgAAG2V1YXoudHIudGVhbXMubWljcm9zb2Z0LmNvbQAKAAgABgAXABgAGQALAAIBAAANABIAEAQBAgEFAQYBBAMCAwUDBgMABQAFAQAAAAAAEgAAABcAAA==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":66,"flow_packet_id":4,"flow_first_seen":1587041693582,"flow_last_seen":1587041693628,"flow_tot_l4_data_len":303,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"euaz.tr.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0574{"flow_id":62,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1fJUAAGwR4QY0cvp7wKgBBg2Ww2AAoaFUAQMAhSESpEIiL+\/H85JL0bmXJ+QADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqNgAgABAAAAAaAIAAIAAHB1XGnagqAUAAYm3E8YjrBv7v21SN1g6+m0xjhRrQAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIK\/9w8VcH20Bp+o9r1mX6tB+MRypEJNYTX2DO\/tetQep","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1587041693654,"flow_last_seen":1587041693654,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50036,"dst_port":3478,"l4_proto":"udp"}
+0659{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":256,"pkt":"EBMx8Tl2KDc3AG3ICABFAADySXIAAEARP9\/AqAEGNHL6icN0DZYA3q9FAAMAwiESpELOvwn047sA+HEU4bYADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIW+VbBgwtifoAFAAUPK7\/QeTw1Z9oICgNLxST+LDzEgAAFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACCU7UyKuDgKSJKUvk8SSs9ovhsGMp06Kok2oE1dFOuKzQ==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1587041693654,"flow_last_seen":1587041693654,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":222,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50036,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","category":"VoIP"}}
+0621{"flow_id":68,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":229,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXfJYAAGwR4NE0cvqNwKgBBg2Ww2EAw+F\/ARMApyESpELalY8VcoE3uJ+0vVMADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+o0AFAAUPpo\/SSn4PJAIkOO6zaqfvtmAt1IAFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6jYCVAAiQUL8kDsWN+oAgAAgAAcwTcadqCg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1587041693668,"flow_last_seen":1587041693668,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50037,"dst_port":3478,"l4_proto":"udp"}
+0459{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":110,"pkt":"EBMx8Tl2KDc3AG3ICABFAABgYKIAAEARKUHAqAEGNHL6icN1DZYATE9EAAMAMCESpEJNv3gTxWrFDZ5wS8sADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAI=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1587041693668,"flow_last_seen":1587041693668,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50037,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Teams","category":"VoIP"}}
+2341{"flow_id":66,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":66,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":66,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NlAbtcWVbk3qhb8YAQIAArqAAAAQEFCt6oY8HeqGlt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":66,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NlAbtcWVbk3qhb8YAQIAAphAAAAQEFCt6oY8HeqGuR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2332{"flow_id":66,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":66,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGSijAqAEGNHL6e8NlAbtcWVbk3qhhnYAQH9IkBgAAAQEFCt6oY8HeqGuR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1117{"flow_id":66,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"KDc3AG3IEBMx8Tl2CABFAAJMNyFAAGwG5O40cvp7wKgBBgG7w2XeqGGdXFlW5FAYCAST2wAABLAwgZAGA1UdEQSBiDCBhYIWdHIudGVhbXMubWljcm9zb2Z0LmNvbYIYKi50ci50ZWFtcy5taWNyb3NvZnQuY29tghh0dXJuLnRlYW1zLm1pY3Jvc29mdC5jb22CGioudHVybi50ZWFtcy5taWNyb3NvZnQuY29tghsqLnJlbGF5LnRlYW1zLm1pY3Jvc29mdC5jb20wgawGA1UdHwSBpDCBoTCBnqCBm6CBmIZLaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3JshklodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3JsME0GA1UdIARGMEQwQgYJKwYBBAGCNyoBMDUwMwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NwczAfBgNVHSMEGDAWgBQI\/iWfdOqHBMK8u46oOF8zxtFsZTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADggIBABCcisiO+DAS4OPnUkT5drdGW+ySCAd1BsW3Lp1Fdet9nBRcfBcsaKZ66uJsRxluxJrhagjZ4fh8tXKFj90=","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":66,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGSjTAqAEGNHL6e8NlAbtcWVbk3qhrkVAQH7Dc7wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":66,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1122{"flow_id":66,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":66,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":180,"pkt":"KDc3AG3IEBMx8Tl2CABFAACmNyZAAGwG5o80cvp7wKgBBgG7w2XeqHNhXFlW5FAYCASYbwAA8CGs2DtbRdAb1Xgy4OWoDAo6QUCqXVyfkiCcZ\/OkC5tzYgLT0jnpyawrwv87OERD9XAYG4w2FJIYZM5cidKX5Zc2bXaKJCId5C2Lvu4bMrE+0KvOonXz6arB41w4Zm7zEG6JkuSYRKWmWBUuLW7VxJdKNsq0NJWfIMgOAAAA","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":65,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1VxYAAGwRBoY0cvp7wKgBBg2Ww3QAoWPcAQMAhSESpELOvwn047sA+HEU4bYADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHObHGnagqAUAAYmiULR7BQSjV7GJ7mOy6WXuQ5anUAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIJWLEhTAIKUMzT0EuyGZ9cU94RPVJanGef0JixSMSj4H","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":68,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":256,"pkt":"EBMx8Tl2KDc3AG3ICABFAADyfgoAAEARC0PAqAEGNHL6jcNhDZYA3rEpAAMAwiESpEJLDXUDhL3sfvdJg10ADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIkFC\/JA7FjfoAFAAUPpo\/SSn4PJAIkOO6zaqfvtmAt1IAFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACBfcijkK3I1E6fsjRiPsKvs33Xfpf\/cKnDyh7VrIY168g==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_id":70,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":229,"pkt":"KDc3AG3IEBMx8Tl2CABFAADXVxcAAGwRBlU0cvqJwKgBBg2Ww3UAwwtKARMApyESpEJNv3gTxWrFDZ5wS8sADwAEcsZLxoAIAAQAAAAGAAkAPQAABAFUaGUgcmVxdWVzdCBkaWQgbm90IGNvbnRhaW4gYSBNZXNzYWdlLUludGVncml0eSBhdHRyaWJ1dGUADgAIAAENljRy+okAFAAUc60+h2VE9PTAWxn4K2V6NOmKA20AFQAKInJ0Y21lZGlhIgABAAgAAQ2YNHL6iYCVAAjDwJ1K7o6J+oAgAAgAAcBocadqCg==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":68,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1fJcAAGwR4PI0cvqNwKgBBg2Ww2EAoTssAQMAhSESpEJLDXUDhL3sfvdJg10ADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqNgAgABAAAAAaAIAAIAAHME3GnagqAUAAYLOxJmLF8a9P8QJMpg69OprVoITMAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIMhO7y5FcPLOAgpkLIJifRx7Dv8ek2QLf5zo\/BiwDhB4","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":70,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":256,"pkt":"EBMx8Tl2KDc3AG3ICABFAADy1jgAAEARsxjAqAEGNHL6icN1DZYA3qn\/AAMAwiESpEK\/FrW6Bpt+jaFgT0IADwAEcsZLxoA3AAQAAAACgAgABAAAAAaABgAEAAAAAQAQAAQAAC7ggFUABAACAAKAlQAIw8CdSu6OifoAFAAUc60+h2VE9PTAWxn4K2V6NOmKA20AFQAKInJ0Y21lZGlhIgAGADgCAAAkkKDb2wHWGU3iFTe\/yZKgAzJzGvG+3Faa6DvVqwAAAAC\/cbJ2yXgTqN3v61y8eTonekzmPAAIACAOMJjC3yWHP2a8uRvQ6tdNq4Cf2VvwjY\/Ply+68rS7wg==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0575{"flow_id":70,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":195,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC1VxgAAGwRBnY0cvqJwKgBBg2Ww3UAoXQEAQMAhSESpEK\/FrW6Bpt+jaFgT0IADwAEcsZLxgANAAQAAAA8AAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHAaHGnagqAUAAYaOUMdiD0+ug9lexVR\/3YR6\/W6KUAAAAAgCIACTIuMC4xLjIxMQAQAAQAAC7gAAgAIL4g0LfB18yA2q\/RVWXcDhE8D9XtCMo2nCqOglxViaD8","pkt_caplen":195,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1587041693828,"flow_last_seen":1587041693828,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp"}
+0417{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGSf\/AqAEGNHL6mMNeAbvdNMkXAAAAALAC\/\/\/QFQAAAgQFtAEDAwUBAQgKMITaQwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1587041693849,"flow_last_seen":1587041693849,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGSf7AqAEGNHL6mcN0AbuMksvlAAAAALAC\/\/8dvwAAAgQFtAEDAwUBAQgKMITaVwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0nZxAAGwGgG40cvqYwKgBBgG7w17cXACa3TTJGIAS\/\/81\/QAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":71,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMkY3FwAm1AQIABWvAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0616{"flow_id":71,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":228,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWAABAAEAGSWnAqAEGNHL6mMNeAbvdNMkY3FwAm1AYIACuOQAAFgMBAKkBAAClAwNemFWd9sBVDmqpQ1JOmTf85+s9vRwXDIKd7RSpfqD9hwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAUAAAABMAEQAADjUyLjExNC4yNTAuMTUyAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":71,"flow_packet_id":4,"flow_first_seen":1587041693828,"flow_last_seen":1587041693869,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.152","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0399{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0NypAAGwG5t80cvqZwKgBBgG7w3QJhgXYjJLL5oAS\/\/9RUwAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":72,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksvmCYYF2VAQIAByEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0617{"flow_id":72,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":228,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWAABAAEAGSWjAqAEGNHL6mcN0AbuMksvmCYYF2VAYIAA4UQAAFgMBAKkBAAClAwNemFWd\/1XCA+79geTWEWiWwTsvTSnBi9NExcEsdrOoSgAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAUAAAABMAEQAADjUyLjExNC4yNTAuMTUzAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":72,"flow_packet_id":4,"flow_first_seen":1587041693849,"flow_last_seen":1587041693893,"flow_tot_l4_data_len":290,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Skype","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.153","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2330{"flow_id":71,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUnZ1AAGwGes00cvqYwKgBBgG7w17cXACb3TTJxlAQCARdzwAAFgMDF+kCAABVAwNemFWdM9zHzxbjC7QANdHz8AfaCDM7kl4CH3iC8m+C5SA8HQAAdg+4AWMXjI8CbVJCHoa9vuL+BAQY6d2I21i7H8AwAAANAAUAAAAXAAD\/AQABAAsADuwADukACSswggknMIIHD6ADAgECAhMtAAZemCjIP80XJ2CuAAAABl6YMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTAeFw0xOTA1MjQxNDEwMjZaFw0yMTA1MjQxNDEwMjZaMCExHzAdBgNVBAMTFnRyLnRlYW1zLm1pY3Jvc29mdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLTNHPfgLoOgUfyR4c2CDg+CoBg7bwaQp6OOdTLjN80e6165bdZW8ryNWADQBv\/\/6Ld1H5eQQNetSDwVifHVU+CteBiHg6T9F1rA96B1Fk1nARcGhMPsZbgvGxJ+NR6ygkRK7GWC6KFZyOiZ0MvWyxQTJBlsBwklHTiX9D0fiSz06Q+tVkIHpWWHGkJRO+Tm3UUtCMr7e1K4eQloaVRg1AeMGEhZEaGXyKum9VwAP15maK0zwKMiUymx8uWFHW4J0+7wZd9kZyUeJvDO2QDZvxPl5w9NBzvGZUQFIkRD+XvUanlt9AtvhnDy5BiPzueeQgaJbyvyJl4Af8nIo8gppfAgMBAAGjggTrMIIE5zCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFq6jb0ngAABAMARzBFAiEA+SbPYnNZBq5NAa+KJuZcLJF6Cs7c51vg2wno92Y73cQCIFui0LePG9Yu0H+TqmpdeWJeVlJ0KiyWWMKI6D92L\/K3AHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFq6jb1LQAABAMARjBEAiAZDnc3oPi8LaNBy6Df89WOlPch018jWvYNKaDO2U51nQIgYZuZffTHCtDDZ3lWVJgiVsjUCTGqki0p6MIBuSQoIfUAdwBc3EOS\/uarRUSxXprUVuYQN\/vV+kfcoXOUsl7m9scOygAAAWrqNvNaAAAEAwBIMEYCIQChq4nHPM4twtbxyAgrDLE3a797eV+6L2EiO6pBrFmrUAIhANBHWXnY9HAcs6WqVRp9r8q8wlaSY9pBfB7vJlbCShQPAHUARJRlLrDuzq\/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFq6jb0QQAABAMARjBEAiAzKKpy8ELEm5AO\/Cl8weRDML0CJ7IOPZ2GbRbx\/8vxWgIgDCW1c1pNKCE9DA2mbQwKGa4Z2H7dNtIRrzU4ZJcZOr8wJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdhNLfQoLnk3oCAWQCAR0wgYUGCCsGAQUFBwEBBHkwdzBRBggrBgEFBQcwAoZFaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvTWljcm9zb2Z0JTIwSVQlMjBUTFMlMjBDQSUyMDUuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29jc3AuY29tMB0GA1UdDgQWBBSC313bBDWiwUMAeq0EgFmCSqbJVzALBgNVHQ8EBAMC","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1116{"flow_id":71,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":71,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwIa1AQH8FOfQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":71,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUnZ9AAGwGess0cvqYwKgBBgG7w17cXAhr3TTJxlAQCATrYwAAW6sdwoMA3bRkqxv5VpjyajDfFXWqL4G9QZfl841dfR9SjQLMnRDtMHjHLLEHhJCKLU2ikazGCdNZMqtfaxeWquCIWw56s0bCKwmin9Y3DIsAdEejps5dwVGPEJfdlpEbIxcuBzCIRY0C23wA8SsmAke7nyJfwnrDoCjE4H7m3XXod08er9hfv0q4nITSnedP3o61Oc42o6ZTtprTcb83jeNHnfqPTx\/r7JoPcNdqLrU2S9F5B\/3\/72kY0IJW8GVz3JfVywG\/oGQZf4DtR+N9iCPyVunnsxwatk5VQeVSeoKWofbhmm5\/59\/eJyGGKNh6xcOod+zQ\/yRc87f6tHNG2YoyFngY2b4iSL5cKDGkUG4HW8AD3tnSSMB+eS+kUxAHQWzl9sk8GGj5SN\/h6yZsZx0M8Cajppy8O10hsA4MnuDtB3uK64JLD12Do4vw3+8vrlcfGCUgqrNGgRVPtSVulxGnCvWOq0JhUVItmI195Is0h3MiJgXc2KNuZpMfbIcuyiiUJx2zdkFT81nL1PidcMdiaFVUoMih7rr4UtgVbmkgKemK\/Z7z3no4iLWFOB0NszihbN+mXEPfve7ERdipQf9N4gAFuDCCBbQwggScoAMCAQICEAiIzVJfGSRETRSlgpHeuVIwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVyVHJ1c3QgUm9vdDAeFw0xNjA1MjAxMjUzMDNaFw0yNDA1MjAxMjUzMDNaMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJrfgVw7j67peZa5mnmngfI52lUoRiMCxYJmB7YV3v2cOhqbkQnSZo8LiRf4cYchfzjTP5olALc10Kv4CHo281Bb3yspJ96k3SSS+vTGcI02KprwgN41+h5CnQmBqtUHChalxVpCbUK+HkKCtFcwmVtFK9SP0woGxnOTpOGD78W\/BSeneM2zC+CeIhbzmNymFOjMlNcj+dBQmbu1CxCV8d8C6Y+OnVaZPNiP01j7XJJ+PXv4UEla9xB7d\/jmSpBKVVLelK10CaBkVyzNB5CfFq2Vw9EGuvHvbAW1BKyp3Bsxmw4tGZUET95my601cq8ZggiyFDoWX7A8m9uNDLAC1iYf6BVxxO\/5YzlDjOnCki6hwqAwJQ6WJ1+eoyuC1hC9PBkepof+VSE6XEH8AZjML5L\/Zji0uGacDxJoS0qshrtemP+eppxTbDMRpNCuUkfXi4\/xlqy5KZqPLPGtZBjDJrsAZN5QcMC77MZrrtOg78DxXA3yzHpZ2hgzL1kQrWcULF8iQ0pE4ejd4OdVFk4J7wNMDEhQWvAD347vY8pbZ4dDQCwGth8PPlPAZj\/XFBXmCGKYSH6D5ae1XVEtVC1h\/TRd1LeAzdJ9zrEkO\/OXbGwT3ooXyYr1SJVC9xKQ4xAX9qEAxTYqZZGeBexCLlq4mRv\/1E61+mZV2YOOvwgpjfoLAgMBAAGjggFCMIIBPjAdBgNVHQ4EFgQUCP4ln3TqhwTCvLuOqDhfM8bRbGUwHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUF","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":71,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwOF1AQIABIkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1124{"flow_id":71,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":71,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwQO1AQH+5GgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":71,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUnaFAAGwGesk0cvqYwKgBBgG7w17cXBA73TTJxlAQCASc0wAANTA1WjCBmzCBmDBMMAkGBSsOAwIaBQAEFCmF\/GE9vi+wEg9eQg5MnsPVnv18BBQI\/iWfdOqHBMK8u46oOF8zxtFsZQITLQAGXpgoyD\/NFydgrgAAAAZemIAAGA8yMDIwMDQxNTE3MDUwNVqgERgPMjAyMDA0MTkxNzA1MDVaoSIwIDAeBgkrBgEFBQcwAQYEERgPMjAxOTA0MTYxNzA1MDVaMA0GCSqGSIb3DQEBCwUAA4IBAQAeBlju+Bk8y9loNywmQduZG4vnsADIVOxrHwFDnlBuunDk3ICaZx4wK6m9ivD5M022cpjNZnVqryu4PhlvNBEmbfkg8kao6U8HlpI2WvX78jsc4bJjy+2Gu7b44KpbB8D3\/z16ntBvpqRM3nFjhy\/osreAQDPfZBdXsFDqYwBgcr21zhN+a+2xDJiymBT2ez9LWXwRVTa0vspjfdNsak2ljytLjN8EglWs2FjRqVz0aTyPocmLxHKlAs0Sc\/TyGsqYQomSLPABh0rsRmXkqE0dNpzs6a1b7XwxHlOi8n9+XwMR7di1d5FAi1XR3XPr91vUU4nTGA1yy3\/MpPq+1L1IoIIFIzCCBR8wggUbMIIDA6ADAgECAhNuABXTTwZmllgRJK\/RAAAAFdNPMA0GCSqGSIb3DQEBCwUAMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTAeFw0yMDA0MDIxNjU4MDlaFw0yMTA0MDIxNjU4MDlaMCsxKTAnBgNVBAMMIE1pY3Jvc29mdF9JVF9UTFNfQ0FfNV9LZXlCaW5kaW5nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt72xRWYGvzznDDT8NXYL9rp9+Ya3b0Z6P2wS3akQ58NdGCNNqh5bkYWl59MsBDUHv9Ef+w2CazdUk3Nynho4E8vpdECh67pX0G62DZBOiFmluBNKbuC5wy0qFpuDZifuCaL\/JIioH+qZxw1n9T+IlPYbhUIt9LEWbIcz3NKvVAjL22uCbIe4fgQeiRQY6CQMOOiKJvbVG0ji+rtc86+Mxhhl4WT\/oA0rEF\/rkByMk2VOShPm7OYdkPB4JadSsYxElQdJQqZtZ7Dx1QoI7ppuYvpwizs9bk5\/qpPbZOX2ffENmbYPX8IEIoHImvw+d5OCujhcH8ND8y2D3AEt3YOySwIDAQABo4HWMIHTMB0GA1UdDgQWBBQodwHOZZ6LuFUo+CvPI9\/FvHYaTDAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwkwDwYJKwYBBQUHMAEFBAIFADAfBgNVHSMEGDAWgBQI\/iWfdOqHBMK8u46oOF8zxtFsZTA+BgkrBgEEAYI3FQcEMTAvBicrBgEEAYI3FQiH2oZ1g+7ZAYLJhRuBtZ5hhfTrYIFdgcybR4HI6RYCAWQCAQcwGwYJKwYBBAGCNxUKBA4wDDAKBggrBgEFBQcDCTANBgkqhkiG9w0BAQsFAAOCAgEAZeWmp3UPfRLZIyUkIOP3qzADvvJHesY63Dc2ynSZnVwywgjceFf+k+yQAXU4qttDwcVbl8RAxZ3TRxOK\/tx9uYmaavtEm3swh9h5B7DCvmIXfqsJJlRpK\/OFGfcf49BNBZXJky59f8YfJ49hsiJiWchclECz2p04IejlY2rjzCMngCMT2bpAzYBsJXomAbKsVRl07LYT4CLhdIIHrd+syTeudyjkMfJb34y+qxxeDCvdd+fLKHcrxUao3ZXsd7wz3mk1EWQVaTo+Md3\/ECUv","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1125{"flow_id":71,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"KDc3AG3IEBMx8Tl2CABFAAJMnaJAAGwGflA0cvqYwKgBBgG7w17cXBXn3TTJxlAYCAQnDgAAEO5WjXjIe6ycKomslpwe+EFt6Mjgit5TOxZ3H33HANI4vT53PRNoyKZhkE4S9iFCZzfCTWensJkZpnlLMABE4aqNQAX6ZU\/zapbAGS9LPTaiKv9Ry1gMKarsrTbdnF5winwAmVhwqa89tPKzbfBk4V04yBPdDJ2DjFTLanTQ3ELGqhKqqmcvrsuHghO2d9ak1HP13ExxC0+i4+GrhqIUwyWxdjniUJlyleN+iiIaKEg6jvrVHFWrR3PUtDbo8TEacEyF96c8xXcjPVnUVrhVI++2dvqyNpMZ8ACJADw9JEE8gToopzGHlqjm36adlbvaZA10Gxs+B\/nQx7a7NeW17x1RViO2RGJOk4lHSYkzJLzAXxFd+J6icgx2JzFBiVk7job1q60ezkEMDfaRdnPXFQ8MAAFpAwAYYQQhQf1daOeyhgiavOXY\/txK+QPeehjV4SAFwgk2\/7vZFfnvBpx3s79fUnAwIryC0QS1\/SQoFkL+wU7sxxwPvq+ruhfRWOuXB4uL2Rh3JHRqTevg\/\/GagRR8oAQLHABO2g0EAQEAAFpM+ijJH609K8Xd4u7I\/GpZsxkUnc1ySSo2E\/dDEZ7xCReh8uynQdfZkfJaSbRKJmhhmUU+xVoZLwzoqlQhwyPtxEv7I4b1oax8FTuY+k7WDigByZC2b8eLQVWHprFPRqAGAXk7TEa8sB3CwmuSJ1iD75izcK4LDTR17k+CeJ81gvVdt3w=","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":71,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":180,"pkt":"KDc3AG3IEBMx8Tl2CABFAACmnaNAAGwGf\/U0cvqYwKgBBgG7w17cXBgL3TTJxlAYCARH6AAAoGYXVjxNjX0u94sb8EN71aR8FxRAxm4b7QhVDBFJeFyj2oxCVxEyLIOQM9r2Y\/py\/X1yaMdHm1JKh4uaQ14MPCaKxipbs9DYx5FnTDsagbvW939x1tOszgRxqrOpD63\/UszJQ1xtkbtRA8XFVVi29UHzj+W5gCPWBr0OAAAA","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+1226{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":71,"flow_packet_id":14,"flow_first_seen":1587041693828,"flow_last_seen":1587041693913,"flow_tot_l4_data_len":6616,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.152","server_names":"tr.teams.microsoft.com,*.tr.teams.microsoft.com,turn.teams.microsoft.com,*.turn.teams.microsoft.com,*.relay.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 5","issuerDN":"CN=tr.teams.microsoft.com","fingerprint":"A7:90:8D:41:ED:24:D2:83:48:95:90:CE:18:D3:A6:C2:62:7A:07:75"}}
+0382{"flow_id":71,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShfAqAEGNHL6mMNeAbvdNMnG3FwYC1AQH+4+sAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":72,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1116{"flow_id":72,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":72,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYNqVAQH8Fp0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":72,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":72,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":72,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYVeVAQH8FiAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":72,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1125{"flow_id":72,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":72,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":180,"pkt":"KDc3AG3IEBMx8Tl2CABFAACmNzJAAGwG5mU0cvqZwKgBBgG7w3QJhh1JjJLMlFAYCAQnLgAAvPhf6s8atadXOYIv8S\/kfh4lalB+\/KO7EsW7qibh4IX25u6kJs295JdF00jtndo3KB+O5mLywq7lVcO2UaxV7pBao4ZK\/1jPpcSNa98o6xrwsOJ+MWsHZAWq9r7iEbUJV++auMwbgBpMe6uRjTmnSy9VPw119vTUh0QOAAAA","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+1226{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":72,"flow_packet_id":13,"flow_first_seen":1587041693849,"flow_last_seen":1587041693938,"flow_tot_l4_data_len":6596,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":507,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"10":"TLS Certificate Mismatch","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"52.114.250.153","server_names":"tr.teams.microsoft.com,*.tr.teams.microsoft.com,turn.teams.microsoft.com,*.turn.teams.microsoft.com,*.relay.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"986571066668055ae9481cb84fda634a","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 5","issuerDN":"CN=tr.teams.microsoft.com","fingerprint":"A7:90:8D:41:ED:24:D2:83:48:95:90:CE:18:D3:A6:C2:62:7A:07:75"}}
+0382{"flow_id":72,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYdSVAQH8FaMwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":72,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041693,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGShbAqAEGNHL6mcN0AbuMksyUCYYdx1AQH71ZuQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1972{"flow_id":61,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":1227,"pkt":"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","pkt_caplen":1227,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":61,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJYAAGwR1m00ck2IwKgBBg2WyeEALargAzk5ZGQ3NzNkLTE5NGQtNDI0MC04MzliLTMxMTIxNWQ3OGZjMw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+1398{"flow_id":61,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":795,"pkt":"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","pkt_caplen":795,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1587041694219,"flow_last_seen":1587041694219,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp"}
+0416{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG9w\/AqAEGNHJNiOyXAbs8mpamAAAAALAC\/\/8lfgAAAgQFtAEDAwUBAQgKMITbvgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1587041694221,"flow_last_seen":1587041694221,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp"}
+0447{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":100,"pkt":"EBMx8Tl2KDc3AG3ICABFAABWS5cAAP8R7KfAqAEGwKgBAe2lADUAQpDJn88BAAABAAAAAAAAG2MtZmxpZ2h0cHJveHktZXVuby0wMS10ZWFtcwhjbG91ZGFwcANuZXQAABwAAQ==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1587041694221,"flow_last_seen":1587041694221,"flow_tot_l4_data_len":66,"flow_min_l4_data_len":66,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"c-flightproxy-euno-01-teams.cloudapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0547{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":176,"pkt":"KDc3AG3IEBMx8Tl2CABFAACixyFAADkR9tHAqAEBwKgBBgA17aUAjgAAn8+BgAABAAAAAQAAG2MtZmxpZ2h0cHJveHktZXVuby0wMS10ZWFtcwhjbG91ZGFwcANuZXQAABwAAcAoAAYAAQAAAA4AQARwcmQxDmF6dXJlZG5zLWNsb3VkwDEGbXNuaHN0CW1pY3Jvc29mdANjb20AfaP8PAAAA4QAAAEsAAk6gAAAADw=","pkt_caplen":176,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":74,"flow_packet_id":2,"flow_first_seen":1587041694221,"flow_last_seen":1587041694234,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":66,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"c-flightproxy-euno-01-teams.cloudapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0399{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0VplAAGwGdII0ck2IwKgBBgG77Jdw4z8APJqWp4AS\/\/+58wAAAgQFoAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpancOM\/AVAQIADasgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":249,"pkt":"EBMx8Tl2KDc3AG3ICABFAADrAABAAEAG9mTAqAEGNHJNiOyXAbs8mpancOM\/AVAYIADbZQAAFgMBAL4BAAC6AwNemFWex6L93KvTNrWWS\/8PQ2rao\/9bFvV0yUUyu2nlvwAALAD\/wCzAK8AkwCPACsAJwAjAMMAvwCjAJ8AUwBPAEgCdAJwAPQA8ADUALwAKAQAAZQAAACgAJgAAI2FwaS5mbGlnaHRwcm94eS50ZWFtcy5taWNyb3NvZnQuY29tAAoACAAGABcAGAAZAAsAAgEAAA0AEgAQBAECAQUBBgEEAwIDBQMGAwAFAAUBAAAAAAASAAAAFwAA","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":73,"flow_packet_id":4,"flow_first_seen":1587041694219,"flow_last_seen":1587041694263,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":20,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Teams","category":"Collaborative"},"tls": {"version":"TLSv1.2","client_requested_server_name":"api.flightproxy.teams.microsoft.com","ja3":"e4d448cdfe06dc1243c1eb026c74ac9a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0417{"flow_id":61,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":79,"pkt":"KDc3AG3IEBMx8Tl2CABFAABBNJgAAGwR1ms0ck2IwKgBBg2WyeEALargAzk5ZGQ3NzNkLTE5NGQtNDI0MC04MzliLTMxMTIxNWQ3OGZjMw==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":73,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":73,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG9xvAqAEGNHJNiOyXAbs8mpdqcOM\/AYAQIAAzCwAAAQEFCnDjRK1w40pZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":73,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpdqcONKWVAQH6XO8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":73,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":73,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpdqcONQBVAQIADI6wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":73,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_id":73,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":163,"pkt":"KDc3AG3IEBMx8Tl2CABFAACVVp5AAGwGdBw0ck2IwKgBBgG77Jdw41WxPJqXalAYCASinwAA4GKHnx+FKT4GOwbta3OHELM5eFeUfR1P8Mvmn7KM4L9S7DH6PDf+W9UTtqfn7Qy\/8\/fMvKXDbXORw+YgC9S4peUPAB9PsnXolxlLIrZRJY30pIn5X59MLsaRO1m9\/u42G6aFlecI6a48DgAAAA==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":73,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAG9yfAqAEGNHJNiOyXAbs8mpdqcONWHlAQH8\/DAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1399{"flow_id":61,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":795,"pkt":"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","pkt_caplen":795,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":73,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":161,"pkt":"EBMx8Tl2KDc3AG3ICABFAACTAABAAEAG9rzAqAEGNHJNiOyXAbs8mpdqcONWHlAYIACaAAAAFgMDAGYQAABiYQQGSN+eS\/KFb8Ri+9QZUqm\/p+HJuiNYhjvW7ADwia6h\/rnvemPZfb2xkuVwO2i1nU8wXvu\/nQ+esfQAHxFC+8JpOowtnq+be6g\/jkMwCDoJVU1CwSWklPP5ZN6DxUWuPvI=","pkt_caplen":161,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":73,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoVp9AAGwGdIg0ck2IwKgBBgG77Jdw41YePJqX1VAQCATaYwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041694,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0936{"flow_id":61,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":459,"pkt":"KDc3AG3IEBMx8Tl2CABFAAG9NJoAAGwR1O00ck2IwKgBBg2WyeEBqR78BzFRC256ljiqGAOx7NuC0kMOISiV3n6Cx+OVY3CV14TLJWVP6sirMGK8dPJHKR+K+LulCFKJT3LCilqMdLkQQ+\/1Q0BNGLB4+UEh8DCu7cFDlpmLEL+p8+eVXA6bpMeDE+W4cFhOysPpu91TUTxZi\/SuaHB3foegEX4Nwu5HYl9vxmkfFgN8elnpYDwLX3Nhc\/1rYHbhcjJKP8OmypeFdWdeEojlTbF+idsDENwTYVc9oIqOAY9o2187d\/+gitOuPcY2u24liZKUCWhC6b4TaDA8N5aW2kPLg4cZQ5TgvwUJzFfAzJaxnjTrqL6fo337kbBSZARHmCbWw6d9dKzUJk+\/4WdiACJUTI3acWG7qcvT\/JapM2u3drPOaz2qrx4SYsAj2G+k\/e0\/eIrAkLfPaq6UFfI3g3Wf\/iGxHi9ZDhRV9HyF97akUFZ8oL1udGFlSo1L\/TLzy3JJdW3txiJCoctEiP2XectUF1XkqQ71cMA5Y872zuCRepP\/YFDkK8ohFtS4svEtTuKMBY6j4c81dG2gYLhr7ghcnqnOkc\/3KXc4","pkt_caplen":459,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":61,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":79,"pkt":"EBMx8Tl2KDc3AG3ICABFAABBKVQAAEARDbDAqAEGNHJNiMnhDZYALb7kAzM3NDM4ZWNlLWQ1NmMtNDFjNy1hMTZjLTQ3M2QyM2ZjNWU3YQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0590{"flow_id":61,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":203,"pkt":"EBMx8Tl2KDc3AG3ICABFAAC96aQAAEARTOPAqAEGNHJNiMnhDZYAqZXIBl3+t6o2WT+OKw\/oTFMopouEH4gbE0oRDnfWSnKbiyKA1UFShjfP9XQMr3SuktBSg1fr9\/Cv\/\/M0m+iLV\/dO3k6aT89fa6A5A3fRXT6CWOsUW+zzpL9t2NYyp4ILTyhEca0jB07mOJmmtnQSS9730zSyT7ohVjIYmPNHU1Xc22zVUEHiNv5tw+qb5rATPwWbZIu65v4RMfw\/EGgkViIlMBU=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+1805{"flow_id":61,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":1099,"pkt":"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","pkt_caplen":1099,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":61,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":79,"pkt":"EBMx8Tl2KDc3AG3ICABFAABBBqUAAEARMF\/AqAEGNHJNiMnhDZYALR2vA2RlNzNhMDFmLTQ3NmQtNDQ3NC1hNzliLTMxM2VmOGRmNjI0ZQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":1587041695278,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp"}
+0522{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMhisAAEARcdvAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":1587041695278,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.Teams","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":1587041695278,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50036,"dst_port":50020,"l4_proto":"udp"}
+0523{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMZ7QAAEARkFLAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1587041695278,"flow_last_seen":1587041695278,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50036,"dst_port":50020,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.Teams","category":"VoIP"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":1587041695305,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16332,"dst_port":50016,"l4_proto":"udp"}
+0523{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"KDc3AG3IEBMx8Tl2CABFAACMbOkAADURirVdR27NwKgBBj\/Mw2AAeJv\/AAEAXCESpEJpQfrkOEmJN4IqUAgABgAJRlkzMjpvNS9JAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/3+gDcABAAAAAIACAAUCA60OBRrDjRc1P+cP0BpsLC+QjmAKAAEPxxxZQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0583{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":1587041695305,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16332,"dst_port":50016,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","category":"VoIP"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":1587041695305,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16333,"dst_port":50036,"l4_proto":"udp"}
+0523{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"KDc3AG3IEBMx8Tl2CABFAACM2aMAADURHftdR27NwKgBBj\/Nw3QAeFT\/AAEAXCESpEKjF0z2+O91Jw0PY1cABgAJK21JdjpKRndqAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/3+gDcABAAAAAIACAAUo4jart22gVLrHF0JHGaI64vA9HeAKAAEUHwvEg==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0583{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1587041695305,"flow_last_seen":1587041695305,"flow_tot_l4_data_len":120,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16333,"dst_port":50036,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","category":"VoIP"}}
+1634{"flow_id":60,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":975,"pkt":"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","pkt_caplen":975,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":130,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB0TLUAAEARoAHAqAEGXUduzcNgP8wAYAttAQEARCESpEJpQfrkOEmJN4IqUAiAcAAEAAAABwAgAAgAAR7efFXKj4A3AAQAAAACgDYABAAAAAEACAAUlU+ROI4McMZBUuZSU8\/gWyGrdx6AKAAE+OcqVw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":77,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMkXkAAEARWyXAqAEGXUduzcNgP8wAeAk2AAEAXCESpEL9LF5WbGc54yQwO\/cABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAU1YbVJoGA61aUBne1Qcfqud7BOGOAKAAEmnK+Jw==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_id":78,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":130,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB0gkYAAEARanDAqAEGXUduzcN0P80AYEblAQEARCESpEKjF0z2+O91Jw0PY1eAcAAEAAAABwAgAAgAAR7ffFXKj4A3AAQAAAACgDYABAAAAAEACAAUNbjIzLk8Htcx5rlGPdUzB6Mtkf+AKAAECmy4uA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":78,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMX9EAAEARjM3AqAEGXUduzcN0P80AeEAgAAEAXCESpEJvsFtMkRg8G\/ztdLwABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUIVL6+UU6k643kpe64\/MzitD9Q4eAKAAEwjOytg==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2674,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":314,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsaPwAAEARIBfAqAEGNHL6jcNgDZYBGBOdAAQA\/CESpEIsNFIeR67x\/KSTudUADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP8xdR27NABMAfAABAGghEqRCH9y33u2t\/jYyT2+1AAYACW81L0k6RlkzMgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAh\/IMTdT4SN+oA3AAQAAAACAAgAFLkI9+jCSAoSd\/OOXciVMXiIrqbdgCgABLPHZEgACAAg7sRmb8sPDDsK8L9wIx7c4\/un3a7csABeHu5jm1wMzFk=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0736{"flow_id":69,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2675,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":314,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsXTYAAEARK+HAqAEGNHL6icN0DZYBGMK2AAQA\/CESpEIeamDBSEqcaMKGtFYADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAfAABAGghEqRCa6gY9jQ3F4QYLRqEAAYACUpGd2o6K21JdgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAhb5VsGDC2J+oA3AAQAAAACAAgAFGPigS6EUGSGggUbRbFSk1APqJ0agCgABKpfQ2cACAAguGTqGqFZLfExfohAPRW3NYW9D0LDg15vdpj82BiyuIs=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":60,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0HBdAADQG6fanY9ekwKgBBhFS7JY0lYrrFa2ICIAQAfVqPgAAAQEIChN5Sr8whN\/3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_id":67,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":198,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC4fJgAAGwR4O40cvqNwKgBBg2Ww2AApNd+ARUAiMLWdk9T8dgTMFhVlH2+EmsADwAEcsZLxgASAAgAAT\/MXUduzQATAHAAAQBcIRKkQpOT7iqoT5owckEG1gAGAAlGWTMyOm81L0kAAACAKQAIAAB\/7V4FjgCAcAAEAAAAB4A2AAQAAAABACQABG7\/\/f6ANwAEAAAAAgAIABQwsyB\/3AcVNGFmgIYtfHOO0Vm54oAoAAR90b9H","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_id":69,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":198,"pkt":"KDc3AG3IEBMx8Tl2CABFAAC4VxkAAGwRBnI0cvqJwKgBBg2Ww3QApCdjARUAiE\/LrilDXPJWtp6yDikzcPIADwAEcsZLxgASAAgAAT\/NXUduzQATAHAAAQBcIRKkQlPk9TFAsI2GK+OZoAAGAAkrbUl2OkpGd2oAAACAKQAIAAB\/7V4FjgCAcAAEAAAAB4A2AAQAAAABACQABG7\/\/f6ANwAEAAAAAgAIABQqoNaJl5j6Qph3wmShySpejyG1ZYAoAAR\/OzfK","pkt_caplen":198,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":77,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2679,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":130,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0Bd0AADUR8dldR27NwKgBBj\/Mw2AAYJiUAQEARCESpEL9LF5WbGc54yQwO\/eAcAAEAAAABwAgAAgAAcHVcadqCoA3AAQAAAACgDYABAAAAAEACAAUfLZK4Jp9GCnUwepSRXJ0QYfNKUiAKAAEeKXxaw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":78,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2680,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":130,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0iYEAADURbjVdR27NwKgBBj\/Nw3QAYAIVAQEARCESpEJvsFtMkRg8G\/ztdLyAcAAEAAAABwAgAAgAAc5scadqCoA3AAQAAAACgDYABAAAAAEACAAUt0fBakPBlSed9Q+UJ+6ZvN9VvN+AKAAELvJkIw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2681,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1587041695421,"flow_last_seen":1587041695421,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp"}
+0537{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":166,"pkt":"KDc3AG3IEBMx8Tl2CABFAACYUPwAAGwRCyM0cvwVwKgBBg2Yw3QAhCaSAAEAaCESpEK59F1PLtIJs2rQCYoABgAJK21JdjpKRndqAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/n+gJUACGUfNM4ueRX8gDcABAAAAAIACAAUDNg3puCxSSnyiCvs+zLb4wfWy9WAKAAEDuovdw==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0582{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1587041695421,"flow_last_seen":1587041695421,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1587041695422,"flow_last_seen":1587041695422,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.8","dst_ip":"192.168.1.6","src_port":3479,"dst_port":50016,"l4_proto":"udp"}
+0537{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":166,"pkt":"KDc3AG3IEBMx8Tl2CABFAACY4AMAAG0Reyg0cvwIwKgBBg2Xw2AAhBBVAAEAaCESpEKBJ1p+KLNk2I89FPkABgAJRlkzMjpvNS9JAAAAgCkACAAAf+1eBY4AgHAABAAAAAeANgAEAAAAAQAkAARu\/\/n+gJUACN6qKWcI9wj8gDcABAAAAAIACAAUyAS6wVT6GpHQ1gnRXe5kbQ9LDuWAKAAEokvlFA==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2683,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1587041695422,"flow_last_seen":1587041695422,"flow_tot_l4_data_len":132,"flow_min_l4_data_len":132,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":132,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.8","dst_ip":"192.168.1.6","src_port":3479,"dst_port":50016,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.SkypeCall","category":"VoIP"}}
+0688{"flow_id":67,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2684,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":278,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEIQwIAAEARRjXAqAEGNHL6jcNgDZYA9FdMAAQA2CESpEKfui7uErrywVVZDhwADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP8xdR27NABMAWAEBAEQhEqRCk5PuKqhPmjByQQbWgHAABAAAAAcAIAAIAAEe3nxVyo+ANwAEAAAAAoA2AAQAAAABAAgAFFFp\/EIw9m0w0dRwmYyqML3\/iSKPgCgABN8vUt8ACAAgqGRf4o8r70c+bwbjLKjnyOxfHW\/RCLgda6bT0E3pUpo=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":142,"pkt":"EBMx8Tl2KDc3AG3ICABFAACA0aoAAEARtpnAqAEGNHL8CMNgDZcAbO2O\/xAAYN6qKWcI9wj8AQEARCESpEKBJ1p+KLNk2I89FPmAcAAEAAAABwAgAAgAASyFFWBYSoA3AAQAAAACgDYABAAAAAEACAAUmYtT\/sgffZE\/GPjMTGRSk5h1N+2AKAAEPqesNg==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_id":67,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":314,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsslcAAEAR1rvAqAEGNHL6jcNgDZYBGA46AAQA\/CESpEKGfpR3I6Wm38Zk7TUADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP8xdR27NABMAfAABAGghEqRCH9y33u2t\/jYyT2+1AAYACW81L0k6RlkzMgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAh\/IMTdT4SN+oA3AAQAAAACAAgAFLkI9+jCSAoSd\/OOXciVMXiIrqbdgCgABLPHZEgACAAg4ni\/MyGpn0IPPfamZXcwXcyTP9hFKqNf3gjYqNKVXl0=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0686{"flow_id":69,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":278,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEIB74AAEARgX3AqAEGNHL6icN0DZYA9JXXAAQA2CESpEJpchKVO4fonPIh+aAADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAWAEBAEQhEqRCU+T1MUCwjYYr45mggHAABAAAAAcAIAAIAAEe33xVyo+ANwAEAAAAAoA2AAQAAAABAAgAFKSOPm9ycNiS3mJyX4fapy4vEu1\/gCgABIqjvoYACAAg+pL5K0Lk7MyR0ZqbhlMFnDsKGKI3TTZKmRHPJasNnPQ=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":142,"pkt":"EBMx8Tl2KDc3AG3ICABFAACAFs8AAEARcWjAqAEGNHL8FcN0DZgAbMYz\/xAAYGUfNM4ueRX8AQEARCESpEK59F1PLtIJs2rQCYqAcAAEAAAABwAgAAgAASyKFWBYV4A3AAQAAAACgDYABAAAAAEACAAUb+d2GMvNHhGxBtT1sjJNLSVYAvSAKAAEqoFJXQ==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0736{"flow_id":69,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":314,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEsR2QAAEARQbPAqAEGNHL6icN0DZYBGOj5AAQA\/CESpELTjfKyZNTNUCzFgVAADwAEcsZLxoAIAAQAAAAGAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8ABEACAABP81dR27NABMAfAABAGghEqRCa6gY9jQ3F4QYLRqEAAYACUpGd2o6K21JdgAAAIAqAAgAAH+KUoZYAIBwAAQAAAAHgDYABAAAAAEAJAAEbv\/4\/4CVAAhb5VsGDC2J+oA3AAQAAAACAAgAFGPigS6EUGSGggUbRbFSk1APqJ0agCgABKpfQ2cACAAgUB2ZPqsXXGYjBv8pRG+HEjCK6R8QdiEsnAYTs3tf1IE=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":67,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":174,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgfJkAAGwR4QU0cvqNwKgBBg2Ww2AAjOyBARUAcKB5W+zxYEZI0BvFP4MTXuMADwAEcsZLxgASAAgAAT\/MXUduzQATAFgBAQBEIRKkQh\/ct97trf42Mk9vtYBwAAQAAAAHACAACAABLIoVYF7PgDcABAAAAAKANgAEAAAAAQAIABQu4nbMkN65GU2342ZGB1HTuyfL4oAoAASbSS9w","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_id":69,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":174,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgVxoAAGwRBok0cvqJwKgBBg2Ww3QAjPtSARUAcHDIdy6ELI5VgNlGYLKQR0cADwAEcsZLxgASAAgAAT\/NXUduzQATAFgBAQBEIRKkQmuoGPY0NxeEGC0ahIBwAAQAAAAHACAACAABLIoVYF7LgDcABAAAAAKANgAEAAAAAQAIABQmkyqTHQT6T56Pujrgj0IEPNmqmoAoAATGhbwj","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2696,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMZh4AAEARkejAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2697,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMyucAAEARLR\/AqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0546{"flow_id":67,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":174,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgfJoAAGwR4QQ0cvqNwKgBBg2Ww2AAjP\/jARUAcEsH9LrSqS+R0AO4vj8MjjMADwAEcsZLxgASAAgAAT\/MXUduzQATAFgBAQBEIRKkQh\/ct97trf42Mk9vtYBwAAQAAAAHACAACAABLIoVYF7PgDcABAAAAAKANgAEAAAAAQAIABQu4nbMkN65GU2342ZGB1HTuyfL4oAoAASbSS9w","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0545{"flow_id":69,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":174,"pkt":"KDc3AG3IEBMx8Tl2CABFAACgVxsAAGwRBog0cvqJwKgBBg2Ww3QAjH\/oARUAcJSaToyZriiQZEEn466yVrgADwAEcsZLxgASAAgAAT\/NXUduzQATAFgBAQBEIRKkQmuoGPY0NxeEGC0ahIBwAAQAAAAHACAACAABLIoVYF7LgDcABAAAAAKANgAEAAAAAQAIABQmkyqTHQT6T56Pujrgj0IEPNmqmoAoAATGhbwj","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":75,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACM6boAAEARDkzAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":76,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041695,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMMbQAAEARxlLAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":75,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMXPIAAEARmxTAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":76,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMFBgAAEAR4+7AqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":75,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMrv0AAEARSQnAqAEGwKgABMNgw1UAeNtRAAEAXCESpELGQpqANK6irJWNCoEABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUNaR7w6XgHLmtRZxpBWKVkGuwhq2AKAAE+3W4lQ==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":77,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACQu2oAAEARMTDAqAEGXUduzcNgP8wAfBKsAAEAYCESpEKyalJ26c+bCI1C0PUABgAJbzUvSTpGWTMyAAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAlAAAAJAAEbv\/+\/4A3AAQAAAACAAgAFNd7wOvI0gzaWL0JHAJmvaCW1OcegCgABLiDaXI=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":76,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":154,"pkt":"EBMx8Tl2KDc3AG3ICABFAACMPIAAAEARu4bAqAEGwKgABMN0w2QAeBWjAAEAXCESpEJMnOcpR8XuRjfgdwcABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAkAARu\/\/7\/gDcABAAAAAIACAAUZBvpMZrPL2uguq2xDA1A6CBjF+2AKAAEncV\/3g==","pkt_caplen":154,"pkt_type":2048,"pkt_ipoffset":14}
+0525{"flow_id":78,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":158,"pkt":"EBMx8Tl2KDc3AG3ICABFAACQSB8AAEARpHvAqAEGXUduzcN0P80AfNVTAAEAYCESpEKDWwnX0gcAJk8k2boABgAJSkZ3ajorbUl2AAAAgCoACAAAf4pShlgAgHAABAAAAAeANgAEAAAAAQAlAAAAJAAEbv\/+\/4A3AAQAAAACAAgAFPLvVpmLRoXR+XSjZzwE+pIZjkn7gCgABO2z0lM=","pkt_caplen":158,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":77,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":130,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0Vi4AADURoYhdR27NwKgBBj\/Mw2AAYGMtAQEARCESpEKyalJ26c+bCI1C0PWAcAAEAAAABwAgAAgAAcHVcadqCoA3AAQAAAACgDYABAAAAAEACAAUTaPAXiqXttOIXVsgmCJWtNuFFMWAKAAEjgd9gw==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":78,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":130,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB0IwoAADUR1KxdR27NwKgBBj\/Nw3QAYHcAAQEARCESpEKDWwnX0gcAJk8k2bqAcAAEAAAABwAgAAgAAc5scadqCoA3AAQAAAACgDYABAAAAAEACAAUw6PYcnYrotsM1O+VvNKE3YekJS+AKAAETRcPqA==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041696,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1587041697061,"flow_last_seen":1587041697061,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyYAbtVmTcwAAAAALAC\/\/8wcwAAAgQFtAEDAwUBAQgKMITmwQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":81,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8X+VAAG4GOLAoT4opwKgBBgG77Jhhqm+9VZk3MaASIADeAQAAAgQFoAEDAwgEAggKC\/ZmGDCE5sE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":81,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTcxYapvvoAQEAkclQAAAQEICjCE5t4L9mYY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":81,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":305,"pkt":"EBMx8Tl2KDc3AG3ICABFAAEjAABAAEAGxa7AqAEGKE+KKeyYAbtVmTcxYapvvoAYEAlljAAAAQEICjCE5t4L9mYYFgMBAOoBAADmAwMvt9\/l19PgHHhBJ7fePZ9nkIIpM9PqvMR3RuXFQQr78gAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACV\/wEAAQAAAAAXABUAABJnYXRlLmhvY2tleWFwcC5uZXQAFwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACgAIAB0AFwAYABk=","pkt_caplen":305,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":81,"flow_packet_id":4,"flow_first_seen":1587041697061,"flow_last_seen":1587041697092,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":32,"flow_max_l4_data_len":271,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"gate.hockeyapp.net","ja3":"a69708a64f853c3bcc214c2c5faf84f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2321{"flow_id":81,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2339{"flow_id":81,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":81,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGxpHAqAEGKE+KKeyYAbtVmTggYapvvrAQEAkxvQAAAQEICjCE5v4L9mYYAQEFCmGqdV5hqnr+","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":81,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTggYap6\/oAQD68QgAAAAQEICjCE5v4L9mY4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":81,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUX+hAAG4GMxUoT4opwKgBBgG77Jhhqnr+VZk4IIAQBAUGowAAAQEICgv2ZjgwhObeF\/KtH5EMefO8hv0pjo+hGaXILLf3FXEJEUNym4UkrCLWDamR59f1QmpKcgSIkZifPw\/6jT04Lx3G8j0u\/4Zr8jqlRUvE3IGU2i\/9PtddIGVo8QNa6Xkq8YGSG5VNgIqMIWbCkj8KJ+Czz+OcotlKrPgIDMBvcI4lpWpdQBZoNdY\/ftIR1NdqVrXotwyqYoxBWW54gatmCMI5+vrG+wwV9MdXq3rBSGLoxQncTvajDkV9i5fN4tSuYczQhYrBGR08owS10B3943mfIHr5DhObTJG3iM8z8j7RasCVMq\/+VyYlJVIsyOMCOHG8sv9fTaE2ij6GigWf\/juNwMk1x5uPV9+\/O8dKEkydhAbtb9ZVHFRiFtv\/fXg8D\/Yemtk8TlkLO6Zhh+iFVXckQUpYNXe1ooy7P7hUDicTS++Mgu1XjAkhTrNNty8pZaWucLOG4jFDYVxnhRF9NoO8URVfJk3w9jlssLCVT0Qxx7zinN8mIQmEz1QrPdOYm1I\/wWe+HOjmr36nHdTbGfZNfvsP5qR2Y+OL8cjV1OlMkGgqfDsgP5F+alHjTAiU4lKdHxO5qwAFuDCCBbQwggScoAMCAQICEAiIzVJfGSRETRSlgpHeuVIwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCSUUxEjAQBgNVBAoTCUJhbHRpbW9yZTETMBEGA1UECxMKQ3liZXJUcnVzdDEiMCAGA1UEAxMZQmFsdGltb3JlIEN5YmVyVHJ1c3QgUm9vdDAeFw0xNjA1MjAxMjUzMDNaFw0yNDA1MjAxMjUzMDNaMIGLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMRUwEwYDVQQLEwxNaWNyb3NvZnQgSVQxHjAcBgNVBAMTFU1pY3Jvc29mdCBJVCBUTFMgQ0EgNTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJrfgVw7j67peZa5mnmngfI52lUoRiMCxYJmB7YV3v2cOhqbkQnSZo8LiRf4cYchfzjTP5olALc10Kv4CHo281Bb3yspJ96k3SSS+vTGcI02KprwgN41+h5CnQmBqtUHChalxVpCbUK+HkKCtFcwmVtFK9SP0woGxnOTpOGD78W\/BSeneM2zC+CeIhbzmNymFOjMlNcj+dBQmbu1CxCV8d8C6Y+OnVaZPNiP01j7XJJ+PXv4UEla9xB7d\/jmSpBKVVLelK10CaBkVyzNB5CfFq2Vw9EGuvHvbAW1BKyp3Bsxmw4tGZUET95my601cq8ZggiyFDoWX7A8m9uNDLAC1iYf6BVxxO\/5YzlDjOnCki6hwqAwJQ6WJ1+eoyuC1hC9PBkepof+VSE6XEH8AZjML5L\/Zji0uGacDxJoS0qshrtemP+eppxTbDMRpNCuUkfXi4\/xlqy5KZqPLPGtZBjDJrsAZN5QcMC77MZrrtOg78DxXA3yzHpZ2hgzL1kQrWcULF8iQ0pE4ejd4OdVFk4J7wNMDEhQWvAD347vY8pbZ4dDQCwGth8PPlPAZj\/XFBXmCGKYSH6D5ae1XVEtVC1h\/TRd1LeAzdJ9zrEkO\/OXbGwT3ooXyYr1SJVC9xKQ4xAX9qEAxTYqZZGeBexCLlq4mRv\/1E61+mZV2YOOvwgpjfoLAgMBAAGjggFCMIIBPjAdBgNVHQ4EFgQUCP4ln3TqhwTCvLuOqDhfM8bRbGUwHwYDVR0jBBgwFoAU5Z1ZMIJHWMys+ghUNoZ7OrUETfAwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAYYwJwYDVR0lBCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEF","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":81,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTggYaqAnoAQEAAKjwAAAQEICjCE5v4L9mY4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":81,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUX+lAAG4GMxQoT4opwKgBBgG77JhhqoCeVZk4IIAQBAWSHQAAAQEICgv2ZjgwhObeBQcDCTA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzANBgkqhkiG9w0BAQsFAAOCAQEAPvLPMKV6vx5q3zlYGCg8w53u54HFS\/xn9r8fTjfa3vCv7or5A3tgZ3THO9r\/K0rr\/VR1E4vlwoESulISILopijrNQyTM1RcF\/pwWP3PgbUHAdj3yq0jFWWJkukRPChiCP0HqPxg6WOegMFd19dFqMRS2lJll2rboAd7kq\/u18+UZChhfpAJX3rZcJm9z\/i4J9QhDxA\/HJH+dKGdlodxb8Dr9+HCF56VPJN5CPx1EO12FBoUdHhzU2U5R5P0eERbMngDZlxqX42XHhjUbU3a+MtEsQUlLoz6TDFt3VwcwPDWLjNFpoif6VeirnRAe0RffumyJ08lb1wuUiKnYtJXXjhYABysBAAcnMIIHIwoBAKCCBxwwggcYBgkrBgEFBQcwAQEEggcJMIIHBTCBx6IWBBT9VOfspjpsX70VZxDzhO\/uVmwbaRgPMjAyMDA0MTQwNDQwMzNaMIGbMIGYMEwwCQYFKw4DAhoFAAQUKYX8YT2+L7ASD15CDkyew9We\/XwEFAj+JZ906ocEwry7jqg4XzPG0WxlAhNuABQ+IygxVnX+3gt8AAAAFD4jgAAYDzIwMjAwNDE0MDQ0MDMzWqARGA8yMDIwMDQxODA0NDAzM1qhIjAgMB4GCSsGAQUFBzABBgQRGA8yMDE5MDQxNTA0NDAzM1owDQYJKoZIhvcNAQELBQADggEBADkM19U0SmHlL3R\/ESJ19x4t0n8W5SjucBIYgjTO1GQJumgjW5tDii0LSvw3I3s7tfy8FCPvc2nuzYzAhWQU9+cGQBggRJE9+ZGhKKBB7ZmH0xtC8Lr0nt+OteoA4exsoLuFgGUdO5BnD4\/wtOusidOwcg1JE9GcgShEEPuRymds\/ZsCDQggl5k7w44OeYPJTAQQGFQrvNB0QQHCkXUCbnIxI74IMxt8cDmviehsHK3aLW60XdXL4Ul2HA6ASDdjOamK7xKakasLBICIXjY3LTREzy1mSB1\/ankSr+1o2t0XDCFVFKpaLTief2n7NrXROL\/o9qRXBV09fHsj2VsBp\/WgggUjMIIFHzCCBRswggMDoAMCAQICE24AE\/D2Kp4kxgB1wsEAAAAT8PYwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFTATBgNVBAsTDE1pY3Jvc29mdCBJVDEeMBwGA1UEAxMVTWljcm9zb2Z0IElUIFRMUyBDQSA1MB4XDTIwMDMxNTE1MjQzOFoXDTIxMDMxNTE1MjQzOFowKzEpMCcGA1UEAwwgTWljcm9zb2Z0X0lUX1RMU19DQV81X0tleUJpbmRpbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLL8jj3UBzU\/au5HTPbtPMCk5oVv210n++4hY3ar0HqI9QquzZ4bSqFbTrvtEbBDUYjsuWRRyh7PmGb4\/i5111AQMiqmHCXMlUEoISsFDVWgU7ngCnMhwhp48l8JBmtkGzagdLpyHYHcSiPAlGCLd3jLiBKzM\/ueqOFFcN5TX5VPlL2bsNstKGUgz+WDhIfD0rhDLaagjE5kTA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2007{"flow_id":81,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1259,"pkt":"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","pkt_caplen":1259,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":81,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGxp3AqAEGKE+KKeyYAbtVmTggYaqK54AQD60AmQAAAQEICjCE5v4L9mY4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_id":81,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":248,"pkt":"EBMx8Tl2KDc3AG3ICABFAADqAABAAEAGxefAqAEGKE+KKeyYAbtVmTggYaqK54AYEACwDQAAAQEICjCE5yIL9mY4FgMDAEYQAABCQQRk8tbv6LeIp5gvcVYSxbCbmrbJQXr2V6WVIW9RSbM5ImfOurPDyt+oH5YG9KbvRr8hl3+B0iut5oQYoLu9t8+7FAMDAAEBFgMDAGCeLHdUZZ7GAv2JeIoTdx\/rO7Ic8\/2f7pPTu1lbX1y63KilM+TATij0QmDKUBbqXyQZKpaV4t6wCKADr7Wj93PHQ5b6xqlbnJHh6TgWE9tCVuUaVY+AeAvLTWQIHeMynf4=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0547{"flow_id":81,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":173,"pkt":"KDc3AG3IEBMx8Tl2CABFAACfX+tAAG4GOEcoT4opwKgBBgG77JhhqornVZk41oAYBARoXwAAAQEICgv2Zn4whOciFAMDAAEBFgMDAGCBuVC\/T2rq99KYQBtaZ6auSviulGhAjILc6MEt1qo75gJZV6zYvdzGwYkgsi33Sttx+cXsDaengjJqcN\/wUT3dgs+mfVctteiVd4mK5Y808w0Xtsmk3O3+43rDaBw\/1Ys=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0344{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0175{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":34969}
+0753{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzETJAAEARZ9\/AqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANGFbXcAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_id":77,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":152,"pkt":"KDc3AG3IEBMx8Tl2CABFAACKzoQAADURKRxdR27NwKgBBj\/Mw2AAdvoBgMkACwAAdOzKWqyy7khbuMy2CPAOdSlm9vfV\/zA8Fjk6DoSrzk1YoR3CjL6fRwBFxfILywlH\/e+ZsaLsnUb0kk1pdZ8vvvffelHLEDAb56eIg0Fd5N31Iq33qt+Cl3MrgAAAALb8aZ7glFC0uQE=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":77,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":150,"pkt":"KDc3AG3IEBMx8Tl2CABFAACI1P8AADURIqNdR27NwKgBBj\/Mw2AAdIEuAAEAWCESpELLiCydeYhToi1VX7EABgAJRlkzMjpvNS9JAAAAgHAABAAAAAcAJAAEbv\/9\/oApAAgAAH\/tXgWOAIAzAACANwAEAAAAAgAIABT7q3YVkpLtqIBDQ4idBK1C1vp3woAoAASNt2uk","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":78,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":88,"pkt":"EBMx8Tl2KDc3AG3ICABFAABKHYAAAEARz2DAqAEGXUduzcN0P80ANmsVj84ABwAA5ltKwaXSuIo5xp1Mj3jnyAE4NEe2i8T7sf+AAAAAGmJ5GWX+DBatLA==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0333{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":60,"pkt":"AYDCAAAAeCjKBfrMACZCQgMAAAAAAJAAeCjKBfrMAAAAAJAAeCjKBfrMgAEAAAYAAQAEAKWlpaWlpaWl","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","type":38}
+0620{"flow_id":68,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":228,"pkt":"EBMx8Tl2KDc3AG3ICABFAADW2xEAAEARrlfAqAEGNHL6jcNhDZYAwt8iAAMApiESpEINQAd8TvBOvXDWMxoADwAEcsZLxoAIAAQAAAAGAA0ABAAAAACAUAAEAAAAAQAUABQ+mj9JKfg8kAiQ47rNqp++2YC3UgAVAAoicnRjbWVkaWEiAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8AAgAILegjOD1prOmcIML6MAq3Q5voM\/8\/Vbx8\/OHsgTOe6Dx","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":77,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":80,"pkt":"EBMx8Tl2KDc3AG3ICABFAABC4dsAAEARCw3AqAEGXUduzcNgP8wALqScgMkABQAA5looGQQtzyCqRiLs2mAILrHggAAAAIzs+vyI2S6eRnE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+2015{"flow_id":77,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1256,"pkt":"EBMx8Tl2KDc3AG3ICABFAATab+wAAEAReGTAqAEGXUduzcNgP8wExulzgMkBKwAA5lpsDx4xU6SHE\/lu1cbeWFc6naonT4JAuuoZuxzI2sow1YFjz\/bN9xje4nS4yGtK00hDpzDL30dBZsmDCgne5kA+GN7AB2rifeH85TWum9Ym\/tooPmTKi3RcSOyfHYutcmofKWKT6s5HQ0fhH3Z6TEwNM2mVI03jCxYraV2r9+r5vX2roR9dDhYZCtVYnoe2G94imh042ouKgMpu\/PMbneFIAUoIzKFlb4+KVdOQi9CqtSXinHYzN36ema5KYQpc1KyqvWCh55IReBkkf6eXTLqqSI6dTY6hZFgWciY5RYQ99JlURiHAJmhbQCRd7pQy9wAMJ3Dnv7MNtqksN+FOQwHUroTwANyMahHw5ah6ol+IhGg0tCOZU15M2KXffB2FHYXsLZhb9DdAb2qruuCuBo5bKggCZkeu6pQBS89aR5KgMU6ytD3htUIcxm7sAn89EmzHwqHEosUqx7BKyXmBTAXIz8JPiWv4VXpinCTtxDlo4SXifwylOdC+0SNYYJkWZzihLlaFHygFs2vHgi0K9WD\/oXvHIXSuuSTK2uxSj1jG8bJL2ykEEIxDyRFtdGh\/ZE+wftE\/mQ9YXajIN01\/z5xd2TdxJ0XFoYpjBA9wx2VkHjJOrAnh+sS74cNKz4juprWtOva9feBFvVQ2uTErBycBhDWnXY7mNb758ZVjfw29b82kC6yxlDX8dlXihl5NMKEZ\/fCkQXLDgFAGqlpUrD4YEvyEhCkoLyVGJNr5DnFltRPr75k4W1UHlJ4hsnM96fngXx1PRBKQxtntySydf\/gewnTwKpCJ8\/juYQd2cFLFENXsYY0fwFh2HyqUUXe8HKSkkeqSwdNLCW4SXakZRfCCfmRstuKJ+gtEoyR0bBA7yiN7oxZy0k\/tJgXCtVHO+dYMPxJ8U+Zf\/ERaIb9VcqVayqmjK7lYUYQlzr5xtjIN\/y0BnFwqnCVWK017RciqG4gAJJWDvcipvgXrLv+WM7\/tYsOzW\/qf5M22Wa\/bJs6LLzWeKJU7KuB3je3ekpHAgCGd6vhl4mmLHuyOJ2bQjGOBKgDEP+8zAn\/xVpFQp4pSUFWWTAOYY86A9jXXifGlGdfKSBIRj\/N7atpZUjpXIWN\/lbvz5PUw4ARDgWv2vNavHz0cekm1PzRbGRDiPVIF7xSamOQ8dimSWFLS7fiHfvE9z+Tn\/yKWVVYf5xtDBW8FR2DNl8k7005dCen26fidZ7EVGcXBoxCWAAl1+Gq23N9F9uql\/K43EHmfqI5N8AkOMCeCNZ3pAxfN0oPKGpjfR5ccfWU1eot6BRyBYU07SODDhNtU1JtVCI53CZfa64aKe13fJU4CW+tdR9bUMGuyvOtjXg\/1K9e3w6ZaYqdgp1xWudLj0ck5PlQ74yF50ptQb375kNBzIJn1Hbj013yqUM5\/A7z2NgaYTw1hPuYNkfagxRT1lhzj\/sbPqPshs89+pGA6B9WlovHvPUJG9OLlaXw4YEkUlGuNBUMdBG15ZKU2BXf0h+ZSUw79WtohyoMCIfVTG+ydvas7vDDIrwS3noXqCCRMOk26U0AffjXMPbLbB8QQLVPEQD1SOSr+39h6G5W1ha3VeQ4FgAAAAeAuqGnJ7B5kI8U=","pkt_caplen":1256,"pkt_type":2048,"pkt_ipoffset":14}
+2011{"flow_id":77,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1256,"pkt":"EBMx8Tl2KDc3AG3ICABFAATae2IAAEARbO7AqAEGXUduzcNgP8wExoSUgMkBKwAA5lrJLZgVPA0x9\/Ak0gXdsUJRceCTjz3PuRUPmAV78wFmDZkhlnERaBeQZTpXK7bb\/ZH2EdSRPwMpfg3keJ58F4NQW+eV73UAjqTTnUBcDAv4nztEOLvuqB+OuNNskceTT8J7XXNMIpnjNsBafsA15HhMWLJaTdLNJtYKxyGCuP1VHuGj+r0Sw8IL4\/l8CXmZ2YSMG\/JXV31DGroywkc5SLibL6tUGhgUNTM9EyJ3F6vXgq9CwLKp4El4q5iXjQyPZPdko\/XT+rXs3DmTySkPluXO97qvFJADso\/8EZbcYND++Hol2E0eGRWcqUYVhXKl6eto\/rOtNHC451D+lCLNPyd5NpgXFwGBbGvjzLFOR+ar+fgxtOOWcBpZfxr97EamwQ78f3XF4tXmtiVMV4IZU\/QB\/t5IBKVFJBryw9fHaodywEBQirqg1SqRFeQeBk5FzDTKm3N7fmuuTmxvAVjS7XIOvD8eq4KUrPejRpMwDJ\/f5O2dFeBVCSvt7BOneZRjxfJPvUBLFqqsVbRshIFGF9x2dGPFE6lpi7JIzhS4bN5efAHfWQucmHyMmWgeifrr7ErMUkIT8aJzIkTuXYe5hJmB\/z6RlF14OrhD67zleJHeO8g69SbdnyfWIYgAwYy2h5IInehvzD9mSoMmMf3602PdTBLaKaiyoeCcWEZIwkWEcfXM620bAzyDuDDM7ApjYN\/5x5YoCj0dfw3GHGZADAIszp14jYwX1iwT9tAu3yjXNHx7khS\/tbMQUF4q2az6FFcm0PS\/+qmcYsSx3cV7Z9IE0s85tnkXHyt+QxoAKaj4E1rVE1DTJTvEDp2NP6zcLKH6HDxjOqKRNc3rNv4xPzyidKQCH5YMzM4omH5JtzeyfgMhlyWUz9DjzAVtcjLInCJP5M96JlK1AafIqKkoFOqVR1nccfWFvPH7oF8im2KRr+bfIoJCLvbtqfadTbYXNuGKkpf+T8Daa3aN598fQt4lebspWWyj+hL3MvHqO9a0LS9kXdoJ5PXDUKjMnUDUAhIKq6tPlnBz+aBDmyu68zxLDJRcLsAX5+TEjy6f3gEfac3trJeU5hy39luehdZFNd+wwlJG2HxtJ7WXUmXTOo8GYGy6fF3bJyvr+25UbtzAFR9tz536T1QiIIM54x\/OT6B55TEl5UvBujxsfFmPOM6E0kyQSAjGPezPNZ7ECAvkGuCgOI2+NqY1OwrHlSFWjIAIe15st5Kcec82qv1Xjqrj1teCXNpFr8erfFbrNsyW3qiEIqSG48TeN2bP9AUHSIFxDK1A0GrG4VCWiC25uQBGPm2n7YnEOTbvJdHlnw4Wudkk1HhECOyrQhed5OqGtk6BqjAVRMV\/5y895yJn8U9SloFoPNb538uegseNseABC8atFUO8nTyX+rPC0KklbhzUxRJ92ZSEK2V99cuFw+LEvM\/9osmUOWMvrOqTF2taeFSZBxKuej\/7molrThcqLQMKoJgnjpVMurXpzk9uNuZetKRCs47i2AikShegzcyro\/UcnnUaChxa3F57u9EihqryxV1pfnonBIM1jDU5+0fDvcQFQwVL8Rdxv4p\/be2RjKyH4+cnxm\/KgAAAAq6K4T8PVd6LFAo=","pkt_caplen":1256,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_id":78,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":104,"pkt":"EBMx8Tl2KDc3AG3ICABFAABanjAAAEARTqDAqAEGXUduzcN0P80ARteagMkABAAA5lsmU+EIO4Jd\/4VVSEgk4ZreSec3uDuofyQ83QvCKgJVhk3g5k7mDymOgAAAAaxz4Wn0\/8jj7Tk=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1587041697660,"flow_last_seen":1587041697660,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp"}
+0406{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":70,"pkt":"KDc3AG3IEBMx8Tl2CABFoAA40fgAADUBJWpdR27NwKgBBgMDcCsAAAAARQAASh2AAAAyEd1gwKgBBl1Hbs3DdD\/NADaJWQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1587041697660,"flow_last_seen":1587041697660,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0564{"flow_id":68,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":187,"pkt":"KDc3AG3IEBMx8Tl2CABFAACtfJsAAGwR4PY0cvqNwKgBBg2Ww2EAmWC+AQMAfSESpEINQAd8TvBOvXDWMxoADwAEcsZLxgANAAQAAAAAAAEACAABDZg0cvqNgAgABAAAAAaAIAAIAAHME3GnagqAUAAYLOxJmLF8a9P8QJMpg69OprVoITMAAAAAgCIACTIuMC4xLjIxMQAIACBXZEEobQtnwOsCYr30FXefykLuRj2+vxB\/THVizwWzVA==","pkt_caplen":187,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":77,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":150,"pkt":"EBMx8Tl2KDc3AG3ICABFAACILyMAAEARvX\/AqAEGXUduzcNgP8wAdKAIAAEAWCESpEJpNUW874Cqp91dCQQABgAJbzUvSTpGWTMyAAAAgHAABAAAAAcAJAAEbv\/+\/4AqAAgAAH+KUoZYAIAzAACANwAEAAAAAgAIABSrJHBh7YcwQRz+xslFJPGEt4fI4oAoAAQWqXBo","pkt_caplen":150,"pkt_type":2048,"pkt_ipoffset":14}
+0620{"flow_id":70,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":228,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWXowAAEARKuHAqAEGNHL6icN1DZYAwtlEAAMApiESpEJ\/K8mw63L1SVFc8SkADwAEcsZLxoAIAAQAAAAGAA0ABAAAAACAUAAEAAAAAQAUABRzrT6HZUT09MBbGfgrZXo06YoDbQAVAAoicnRjbWVkaWEiAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8AAgAIBF1x2DO\/FnH+NItZ0DdGmNq9Qpo8WCUVFVIxiEnjM\/h","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0619{"flow_id":69,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":228,"pkt":"EBMx8Tl2KDc3AG3ICABFAADWQkgAAEARRyXAqAEGNHL6icN0DZYAwvo0AAMApiESpEKq36JSlpzO4UFUsSMADwAEcsZLxoAIAAQAAAAGAA0ABAAAAACAUAAEAAAAAQAUABQ8rv9B5PDVn2ggKA0vFJP4sPMSAAAVAAoicnRjbWVkaWEiAAYAOAIAACSQoNvbAdYZTeIVN7\/JkqADMnMa8b7cVproO9WrAAAAAL9xsnbJeBOo3e\/rXLx5Oid6TOY8AAgAIMgHBX+t\/XNKPsdtlpAIVsPeBDDuW\/3OC5VvHSABRDTj","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":77,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":115,"pkt":"KDc3AG3IEBMx8Tl2CABFAABlk\/cAADURY85dR27NwKgBBj\/Mw2AAUZjdkGg9EgleGUgAAHTsvt4AARKGkmBAR7apLL2NaEeL+wrY+tF3wd8\/xqTTl+bYW8pH+25dWXaHopKg6FqOsrw1czRCD5j2jR6V3w==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":70,"pkt":"KDc3AG3IEBMx8Tl2CABFoAA4akMAADUBjR9dR27NwKgBBgMDcBsAAAAARQAAWp4wAAAyEVygwKgBBl1Hbs3DdD\/NAEaJWQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":77,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":80,"pkt":"KDc3AG3IEBMx8Tl2CABFAABCxvIAADURMPZdR27NwKgBBj\/Mw2AALmUCgMkABQAAdOyunrWZXbYN\/Vl+Ik3K\/wMCgAAAAca5CAqZNW\/6ojY=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+2022{"flow_id":77,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":1256,"pkt":"KDc3AG3IEBMx8Tl2CABFAATa6dkAADURCXddR27NwKgBBj\/Mw2AExilggMkBKwAAdOzsa5K8UoqAgMkd6DyrDFM5Z5ls+wHmur1BhbBuUi5o3AHNCpvPNXoPapE6jrC+JzT+SZK8D06h9KkWZnNZ0to+rDxXAL8qfeNCyQf8VSQ0AntLdH\/K59E3hXZoxKxbgv5xmpBpN4h1DRb9ss3Zw9lHvXc\/zsARlFA3rTxVvmG8JuxQyZ11l2MiBj9O9PdNIgqmQ1X\/t8VvsmcP+oaVyL3Rye4vON7N9\/i3GQfK6jefXyT1F\/FReir67ocbsdrX4arGdGCd4Z7JejYiBJDSTjGNHiAnz7fAVLR2qqJL4\/Sd8X8dQV+r3yS+02htPEKHVN9cxfg\/OrSm57mPr52PrYaZ7ojRC3fnjoDXQu9PKKdBMNxw2ArNdoz0fpib6VWO\/EXu8gg09eqHwBEubXujZe+W8VKaLv\/4JLWNuhjLYaYTayQdmWDR\/ghya9BFOZMgbQTqjCeK5p0rW7VJ84jhVQ0JrJEtvM7SR3GN6Aksfur8vluQMNljEf0pe4ZXLIkwKxbUw2XInUe\/MrWGHIrq72jgjiaeuCLdP9pTVb23+PswDjwfr24AhxZxhkjRbp5SqjFwht1aWh0EXq3HsBzNii+irNEd6Pb7dvdE\/xlAVPTYMjZRBlTGv7elYyfGxw9YcKOu\/mcnyL2wusZdMc\/2lW0e\/\/s70KlhN4cSdg9+68j9qKCKCjrk5ts8OacUCq6sdwpP93U\/vaeEBHyR47Tzyfv1Jimai1ElwYHqr9C4C5ZMSfglAU97+eT9jCQG6NLM4gCbt+557epmUASqswbBeTk\/nN5weW6zTNPFW2iB9hYQxGa1WOY2dnVWQ06fxh08sjwfySpW5jTPNnpJa+ebIDJ1gmhlQom6TSavGEaLMnUlBSh40YzBoSITQ6\/hPa6QMANwcufrSnM9lfVHtQcxEQUmXywUAOQss+xImJic9lANftI7cg53ol9psrYwRvwIP6sJl9ct990QvLyQHF0+BGcKIQaVCLLS8z5Vq7PNqxYl0pZXe6VJ4fVCVoUBgYAs5oSxFmGHh5UnV7TXlPgZfuAWfZR70M3xVymqw6DLqU25r\/DNfjLFP37YjFuvJEGlAsHex+mfPYAR1UcKjdn3O1LchDrKOblh1YKg7ZVE7mAzkAi\/1nM3ZZfXZ7nGnqyWZEE6SeX9J8d557nRzBbgKQfX8b6QyIipZQHaKYLT1uCeQuHhoeOi9nka4DyXixxciPGXsP3CYn8rMacQg+2nCZtkAzyP643oGuCmv4OoP\/dPKqpk\/G67Lpw5G55kJ0UbCgi6jUrG7bVFWMuv8L\/JEjEuNlGyMphzfPfmlXefF647EGhTXLymFznu95xGlhre0omC5\/AvhztRX7vR8nN372CvUepGLo\/oMN5Jb6zz2V8i2oXn8NMp5kLbZxjRl0ZjFk3uRvayyWBSNvfY\/nxbVl9cjJOWlDhjRo0LH5FrIx+L08J\/U01uek5LCClDUdc9KzE1t7PZL1\/sNf+f1xp5CANozF\/uu+\/QNRdgulBTdfDW6IKj8XEvdzIHuOEs9UL2y8mbR7h1NTWsZfYTDiwy11ObRF6CUkaZP08bUDvAfGLcVYzBXFUCQZOJgAAAAg7rLYYXyWxwhDw=","pkt_caplen":1256,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_id":69,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":187,"pkt":"KDc3AG3IEBMx8Tl2CABFAACtVxwAAGwRBno0cvqJwKgBBg2Ww3QAmStwAQMAfSESpEKq36JSlpzO4UFUsSMADwAEcsZLxgANAAQAAAAAAAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHObHGnagqAUAAYmiULR7BQSjV7GJ7mOy6WXuQ5anUAAAAAgCIACTIuMC4xLjIxMQAIACBb+0dO7XG7sUjMCcGQZhDcW3hrI\/E2Bu3cGSpxYdsKow==","pkt_caplen":187,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":70,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","pkt_oversize":false,"pkt_ts":1587041697,"pkt_len":187,"pkt":"KDc3AG3IEBMx8Tl2CABFAACtVx0AAGwRBnk0cvqJwKgBBg2Ww3UAmdF8AQMAfSESpEJ\/K8mw63L1SVFc8SkADwAEcsZLxgANAAQAAAAAAAEACAABDZg0cvqJgAgABAAAAAaAIAAIAAHAaHGnagqAUAAYaOUMdiD0+ug9lexVR\/3YR6\/W6KUAAAAAgCIACTIuMC4xLjIxMQAIACDm9keelgh3gAU1t68wEkZCoxEf5LkRAoAG52M5NOQtKg==","pkt_caplen":187,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":71,"flow_packet_id":25,"flow_first_seen":1587041693828,"flow_last_seen":1587041694047,"flow_tot_l4_data_len":7466,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.152","src_port":50014,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":63,"flow_packet_id":33,"flow_first_seen":1587041693516,"flow_last_seen":1587041695435,"flow_tot_l4_data_len":7582,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50018,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":66,"flow_packet_id":31,"flow_first_seen":1587041693582,"flow_last_seen":1587041694243,"flow_tot_l4_data_len":7530,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":242,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50021,"dst_port":443,"l4_proto":"tcp"}
+0432{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":82,"flow_packet_id":2,"flow_first_seen":1587041697660,"flow_last_seen":1587041697673,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","l4_proto":"icmp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":72,"flow_packet_id":30,"flow_first_seen":1587041693849,"flow_last_seen":1587041697765,"flow_tot_l4_data_len":7994,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":266,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.153","src_port":50036,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":4,"flow_packet_id":40,"flow_first_seen":1587041676435,"flow_last_seen":1587041676536,"flow_tot_l4_data_len":13457,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60533,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":7,"flow_packet_id":1300,"flow_first_seen":1587041677243,"flow_last_seen":1587041697130,"flow_tot_l4_data_len":776162,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":597,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60536,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":22,"flow_packet_id":37,"flow_first_seen":1587041682144,"flow_last_seen":1587041685098,"flow_tot_l4_data_len":9810,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60542,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":42,"flow_packet_id":52,"flow_first_seen":1587041685240,"flow_last_seen":1587041685471,"flow_tot_l4_data_len":31500,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":605,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60554,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":46,"flow_packet_id":25,"flow_first_seen":1587041685984,"flow_last_seen":1587041686156,"flow_tot_l4_data_len":8660,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":346,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.113.194.132","src_port":60557,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":75,"flow_packet_id":5,"flow_first_seen":1587041695278,"flow_last_seen":1587041696498,"flow_tot_l4_data_len":600,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50016,"dst_port":50005,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":54,"flow_packet_id":29,"flow_first_seen":1587041687745,"flow_last_seen":1587041687963,"flow_tot_l4_data_len":10410,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.169.186.119","src_port":60563,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1587041681714,"flow_last_seen":1587041681744,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":61,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63106,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":76,"flow_packet_id":5,"flow_first_seen":1587041695278,"flow_last_seen":1587041696498,"flow_tot_l4_data_len":600,"flow_min_l4_data_len":120,"flow_max_l4_data_len":120,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.0.4","src_port":50036,"dst_port":50020,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1587041685092,"flow_last_seen":1587041685105,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":69,"flow_max_l4_data_len":127,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65230,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1587041680216,"flow_last_seen":1587041680216,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1587041685090,"flow_last_seen":1587041685136,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":53,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":61245,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1587041681714,"flow_last_seen":1587041681754,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":46,"flow_max_l4_data_len":148,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51033,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":3,"flow_packet_id":77,"flow_first_seen":1587041676362,"flow_last_seen":1587041677077,"flow_tot_l4_data_len":62529,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":812,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60532,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":6,"flow_packet_id":34,"flow_first_seen":1587041677042,"flow_last_seen":1587041677375,"flow_tot_l4_data_len":21202,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":623,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60535,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":8,"flow_packet_id":26,"flow_first_seen":1587041678029,"flow_last_seen":1587041678303,"flow_tot_l4_data_len":12901,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":496,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60537,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":17,"flow_packet_id":20,"flow_first_seen":1587041681745,"flow_last_seen":1587041681895,"flow_tot_l4_data_len":8326,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":416,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60538,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":18,"flow_packet_id":20,"flow_first_seen":1587041681755,"flow_last_seen":1587041681908,"flow_tot_l4_data_len":8282,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":414,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60539,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1587041682355,"flow_last_seen":1587041682370,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":59,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":65387,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":19,"flow_packet_id":24,"flow_first_seen":1587041682076,"flow_last_seen":1587041682204,"flow_tot_l4_data_len":12988,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":541,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.70","src_port":60540,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":20,"flow_packet_id":22,"flow_first_seen":1587041682077,"flow_last_seen":1587041682212,"flow_tot_l4_data_len":11276,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":512,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.75.69","src_port":60541,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":24,"flow_packet_id":107,"flow_first_seen":1587041682369,"flow_last_seen":1587041683086,"flow_tot_l4_data_len":89798,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":839,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60543,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":25,"flow_packet_id":38,"flow_first_seen":1587041682376,"flow_last_seen":1587041692106,"flow_tot_l4_data_len":10544,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.76.48","src_port":60544,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":27,"flow_packet_id":83,"flow_first_seen":1587041682698,"flow_last_seen":1587041691929,"flow_tot_l4_data_len":16124,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":194,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.58","src_port":60545,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":31,"flow_packet_id":35,"flow_first_seen":1587041683186,"flow_last_seen":1587041683511,"flow_tot_l4_data_len":11564,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":330,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.88.59","src_port":60547,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":32,"flow_packet_id":29,"flow_first_seen":1587041683333,"flow_last_seen":1587041683650,"flow_tot_l4_data_len":16494,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":568,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60548,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":39,"flow_packet_id":24,"flow_first_seen":1587041685106,"flow_last_seen":1587041685981,"flow_tot_l4_data_len":9376,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":390,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.15.45","src_port":60551,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":41,"flow_packet_id":25,"flow_first_seen":1587041685232,"flow_last_seen":1587041685890,"flow_tot_l4_data_len":10437,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":417,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60552,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":44,"flow_packet_id":31,"flow_first_seen":1587041685248,"flow_last_seen":1587041688035,"flow_tot_l4_data_len":12708,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60555,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":47,"flow_packet_id":33,"flow_first_seen":1587041686239,"flow_last_seen":1587041686589,"flow_tot_l4_data_len":19902,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":603,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60559,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":50,"flow_packet_id":37,"flow_first_seen":1587041687245,"flow_last_seen":1587041688061,"flow_tot_l4_data_len":23569,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":637,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.33","src_port":60561,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":58,"flow_packet_id":33,"flow_first_seen":1587041691149,"flow_last_seen":1587041691582,"flow_tot_l4_data_len":11237,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":340,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.108.8","src_port":60565,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":73,"flow_packet_id":24,"flow_first_seen":1587041694219,"flow_last_seen":1587041695993,"flow_tot_l4_data_len":8848,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":368,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":60567,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1587041672419,"flow_last_seen":1587041697427,"flow_tot_l4_data_len":1722,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":1587041679280,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1587041673094,"flow_last_seen":1587041677380,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":28,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"149.154.167.91","src_port":58533,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Telegram","category":"Chat"}}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1587041673094,"flow_last_seen":1587041677380,"flow_tot_l4_data_len":84,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":28,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"149.154.167.91","src_port":58533,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1587041684291,"flow_last_seen":1587041684304,"flow_tot_l4_data_len":226,"flow_min_l4_data_len":46,"flow_max_l4_data_len":180,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":59403,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":34,"flow_packet_id":54,"flow_first_seen":1587041684306,"flow_last_seen":1587041685465,"flow_tot_l4_data_len":15603,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":288,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"13.107.18.11","src_port":60549,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1587041685243,"flow_last_seen":1587041685256,"flow_tot_l4_data_len":194,"flow_min_l4_data_len":59,"flow_max_l4_data_len":135,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":51309,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":29,"flow_packet_id":20,"flow_first_seen":1587041682809,"flow_last_seen":1587041688190,"flow_tot_l4_data_len":3592,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1258,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60546,"dst_port":4434,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1587041679280,"flow_last_seen":1587041679280,"flow_tot_l4_data_len":493,"flow_min_l4_data_len":493,"flow_max_l4_data_len":493,"flow_avg_l4_data_len":493,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":60,"flow_packet_id":17,"flow_first_seen":1587041692808,"flow_last_seen":1587041695538,"flow_tot_l4_data_len":4664,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1257,"flow_avg_l4_data_len":274,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"167.99.215.164","src_port":60566,"dst_port":4434,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1587041683142,"flow_last_seen":1587041683184,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":58,"flow_max_l4_data_len":188,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57504,"dst_port":53,"l4_proto":"udp"}
+0507{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":61,"flow_packet_id":31,"flow_first_seen":1587041693428,"flow_last_seen":1587041697999,"flow_tot_l4_data_len":12691,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1209,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":51681,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":61,"flow_packet_id":31,"flow_first_seen":1587041693428,"flow_last_seen":1587041697999,"flow_tot_l4_data_len":12691,"flow_min_l4_data_len":45,"flow_max_l4_data_len":1209,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.77.136","src_port":51681,"dst_port":3478,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1587041682668,"flow_last_seen":1587041682697,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":66,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":57530,"dst_port":53,"l4_proto":"udp"}
+0502{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":59,"flow_packet_id":4,"flow_first_seen":1587041692528,"flow_last_seen":1587041692578,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":32,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":80,"midstream":1,"l3_proto":"ip4","src_ip":"151.11.50.139","dst_ip":"192.168.1.6","src_port":2222,"dst_port":54750,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":59,"flow_packet_id":4,"flow_first_seen":1587041692528,"flow_last_seen":1587041692578,"flow_tot_l4_data_len":320,"flow_min_l4_data_len":32,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":80,"midstream":1,"l3_proto":"ip4","src_ip":"151.11.50.139","dst_ip":"192.168.1.6","src_port":2222,"dst_port":54750,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1587041682129,"flow_last_seen":1587041682143,"flow_tot_l4_data_len":222,"flow_min_l4_data_len":52,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":111,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":49514,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":77,"flow_packet_id":37,"flow_first_seen":1587041695305,"flow_last_seen":1587041698021,"flow_tot_l4_data_len":7878,"flow_min_l4_data_len":46,"flow_max_l4_data_len":1222,"flow_avg_l4_data_len":212,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16332,"dst_port":50016,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":78,"flow_packet_id":8,"flow_first_seen":1587041695305,"flow_last_seen":1587041697619,"flow_tot_l4_data_len":776,"flow_min_l4_data_len":54,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"93.71.110.205","dst_ip":"192.168.1.6","src_port":16333,"dst_port":50036,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1587041685091,"flow_last_seen":1587041685104,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":69,"flow_max_l4_data_len":139,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":53678,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":55,"flow_packet_id":2,"flow_first_seen":1587041690880,"flow_last_seen":1587041690915,"flow_tot_l4_data_len":329,"flow_min_l4_data_len":62,"flow_max_l4_data_len":267,"flow_avg_l4_data_len":164,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":63930,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":64,"flow_packet_id":2,"flow_first_seen":1587041693517,"flow_last_seen":1587041693530,"flow_tot_l4_data_len":226,"flow_min_l4_data_len":75,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":55765,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1587041686659,"flow_last_seen":1587041686659,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.112","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":28,"flow_packet_id":16,"flow_first_seen":1587041682740,"flow_last_seen":1587041682856,"flow_tot_l4_data_len":9564,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":597,"midstream":1,"l3_proto":"ip4","src_ip":"162.125.19.131","dst_ip":"192.168.1.6","src_port":443,"dst_port":60344,"l4_proto":"tcp","ndpi": {"proto":"TLS.Dropbox","category":"Cloud"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":28,"flow_packet_id":16,"flow_first_seen":1587041682740,"flow_last_seen":1587041682856,"flow_tot_l4_data_len":9564,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":597,"midstream":1,"l3_proto":"ip4","src_ip":"162.125.19.131","dst_ip":"192.168.1.6","src_port":443,"dst_port":60344,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":9,"flow_packet_id":3,"flow_first_seen":1587041679059,"flow_last_seen":1587041680074,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":64046,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":67,"flow_packet_id":7,"flow_first_seen":1587041693597,"flow_last_seen":1587041695591,"flow_tot_l4_data_len":1470,"flow_min_l4_data_len":140,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":210,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50016,"dst_port":3478,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":62,"flow_packet_id":3,"flow_first_seen":1587041693515,"flow_last_seen":1587041693640,"flow_tot_l4_data_len":432,"flow_min_l4_data_len":76,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50016,"dst_port":3478,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":80,"flow_packet_id":2,"flow_first_seen":1587041695422,"flow_last_seen":1587041695432,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":108,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.8","dst_ip":"192.168.1.6","src_port":3479,"dst_port":50016,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":68,"flow_packet_id":6,"flow_first_seen":1587041693611,"flow_last_seen":1587041697663,"flow_tot_l4_data_len":1001,"flow_min_l4_data_len":76,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.141","src_port":50017,"dst_port":3478,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":69,"flow_packet_id":9,"flow_first_seen":1587041693654,"flow_last_seen":1587041697713,"flow_tot_l4_data_len":1817,"flow_min_l4_data_len":140,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":201,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50036,"dst_port":3478,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":65,"flow_packet_id":3,"flow_first_seen":1587041693582,"flow_last_seen":1587041693698,"flow_tot_l4_data_len":432,"flow_min_l4_data_len":76,"flow_max_l4_data_len":195,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.123","src_port":50036,"dst_port":3478,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":70,"flow_packet_id":6,"flow_first_seen":1587041693668,"flow_last_seen":1587041697714,"flow_tot_l4_data_len":1001,"flow_min_l4_data_len":76,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"52.114.250.137","src_port":50037,"dst_port":3478,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":79,"flow_packet_id":2,"flow_first_seen":1587041695421,"flow_last_seen":1587041695433,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":108,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"52.114.252.21","dst_ip":"192.168.1.6","src_port":3480,"dst_port":50036,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":51,"flow_packet_id":2,"flow_first_seen":1587041687370,"flow_last_seen":1587041687435,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":49,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":54069,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":5,"flow_packet_id":25,"flow_first_seen":1587041676612,"flow_last_seen":1587041676808,"flow_tot_l4_data_len":9285,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":371,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.5","src_port":60534,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":45,"flow_packet_id":27,"flow_first_seen":1587041685251,"flow_last_seen":1587041685681,"flow_tot_l4_data_len":11055,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.7","src_port":60556,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":49,"flow_packet_id":26,"flow_first_seen":1587041686889,"flow_last_seen":1587041687253,"flow_tot_l4_data_len":11027,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":424,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.126.9.67","src_port":60560,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1587041680294,"flow_last_seen":1587041680294,"flow_tot_l4_data_len":1230,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1122,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"93.62.150.157","dst_ip":"192.168.1.6","src_port":443,"dst_port":60512,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1587041680294,"flow_last_seen":1587041680294,"flow_tot_l4_data_len":1230,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1122,"flow_avg_l4_data_len":307,"midstream":1,"l3_proto":"ip4","src_ip":"93.62.150.157","dst_ip":"192.168.1.6","src_port":443,"dst_port":60512,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1587041685171,"flow_last_seen":1587041685185,"flow_tot_l4_data_len":246,"flow_min_l4_data_len":44,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":58457,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":56,"flow_packet_id":21,"flow_first_seen":1587041690916,"flow_last_seen":1587041691089,"flow_tot_l4_data_len":9656,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":459,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60564,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":81,"flow_packet_id":21,"flow_first_seen":1587041697061,"flow_last_seen":1587041697244,"flow_tot_l4_data_len":9672,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":460,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"40.79.138.41","src_port":60568,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1587041687731,"flow_last_seen":1587041687745,"flow_tot_l4_data_len":247,"flow_min_l4_data_len":56,"flow_max_l4_data_len":191,"flow_avg_l4_data_len":123,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62735,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1587041681218,"flow_last_seen":1587041681248,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":55,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":56634,"dst_port":53,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1587041675997,"flow_last_seen":1587041676010,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":59,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":67,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60813,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":57,"flow_packet_id":2,"flow_first_seen":1587041691075,"flow_last_seen":1587041691148,"flow_tot_l4_data_len":193,"flow_min_l4_data_len":69,"flow_max_l4_data_len":124,"flow_avg_l4_data_len":96,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":62863,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":74,"flow_packet_id":2,"flow_first_seen":1587041694221,"flow_last_seen":1587041694234,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":66,"flow_max_l4_data_len":142,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":60837,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":52,"flow_packet_id":32,"flow_first_seen":1587041687436,"flow_last_seen":1587041687725,"flow_tot_l4_data_len":10405,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":325,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"104.40.187.151","src_port":60562,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap","flow_id":38,"flow_packet_id":2,"flow_first_seen":1587041685093,"flow_last_seen":1587041685127,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":61,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.6","dst_ip":"192.168.1.1","src_port":50653,"dst_port":53,"l4_proto":"udp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teams.pcap"}
diff --git a/tests/result/nDPId_teamspeak3.pcap.txt b/tests/result/nDPId_teamspeak3.pcap.txt
new file mode 100644
index 000000000..93ba00c49
--- /dev/null
+++ b/tests/result/nDPId_teamspeak3.pcap.txt
@@ -0,0 +1,18 @@
+0362{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946745680740,"flow_last_seen":946745680740,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"10.0.0.2","src_port":53187,"dst_port":9987,"l4_proto":"udp"}
+0414{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745680,"pkt_len":76,"pkt":"REREREREZmZmZmZmCABFAAA+yVhAAHgRnjQKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2EAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946745680740,"flow_last_seen":946745680740,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"10.0.0.2","src_port":53187,"dst_port":9987,"l4_proto":"udp","ndpi": {"proto":"TeamSpeak","category":"VoIP"}}
+0622{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745680,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYyVlAAHgRnZkKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745681,"pkt_len":76,"pkt":"REREREREZmZmZmZmCABFAAA+yX1AAHgRng8KAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2IAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745681,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYyX5AAHgRnXQKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745682,"pkt_len":76,"pkt":"REREREREZmZmZmZmCABFAAA+yf1AAHgRnY8KAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2MAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745682,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYyf5AAHgRnPQKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745683,"pkt_len":76,"pkt":"REREREREZmZmZmZmCABFAAA+yhFAAHgRnXsKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2QAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745683,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYyhJAAHgRnOAKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745684,"pkt_len":76,"pkt":"REREREREZmZmZmZmCABFAAA+yr1AAHgRnM8KAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kW4K3na2UAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0624{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745684,"pkt_len":230,"pkt":"REREREREZmZmZmZmCABFAADYytBAAHgRnCIKAAABCgAAAs\/DJwMAxJv3eXRj6JO6fmAAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIVc9rwk+JLXtHwnSIOS9qVPnECnykaLcJG8hX08WvnftBqcJmqRqZMetkjLRcZ56Qb0yr7w3DD9zi02VU5x7l+AWx+kCtuxsALbdDKU+g3u9+7M\/R0k3h6Cj2dgqVHMwYrJL8wicW8AZK\/KfPOtEoKiRpNuYkxO9WWvZSdqdAZVZGl4X6vDNBIwrDu7kll5TuFIGNHjpSa9tdfD6M=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745717,"pkt_len":76,"pkt":"YDjgxTWgZmZmZmZmCABFAAA+24JAAK8RVQoKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kXBU+nh1IAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745717,"pkt_len":229,"pkt":"YDjgxTWgZmZmZmZmCABFAADX24NAAK8RVHAKAAABCgAAAs\/DJwMAw5v2GKGXKYQPUukAAAAAIp10i0Wqe++5nv6tCBm6z0HgFqIrSNf449weIP3Mtxs2f5CVIz4AlysccbJOh2Hx12\/FfvZIUr+CaqJ1NptjWD4c\/54KoGPBsG2TxDXHlEIv0\/gMC2N1sDtT78ZQaJDzVZlIiJ77J6cpv3JiGD+0usMBNzYePKwevp\/qOojGedOx6lkmihZs5dImFMit4tG7yLMrbaiHxknDDM0H2fni\/wB8qDeNKn5ajIuG8cxGCA==","pkt_caplen":229,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","pkt_oversize":false,"pkt_ts":946745717,"pkt_len":76,"pkt":"REREREREZmZmZmZmCABFAAA+3ANAAK8RVIkKAAABCgAAAs\/DJwMAKptdVFMzSU5JVDEAZQAAiA3QV2YAX1kXBU+nh1MAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap","flow_id":0,"flow_packet_id":13,"flow_first_seen":946745680740,"flow_last_seen":946745717746,"flow_tot_l4_data_len":1469,"flow_min_l4_data_len":42,"flow_max_l4_data_len":196,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"10.0.0.2","src_port":53187,"dst_port":9987,"l4_proto":"udp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teamspeak3.pcap"}
diff --git a/tests/result/nDPId_telegram.pcap.txt b/tests/result/nDPId_telegram.pcap.txt
new file mode 100644
index 000000000..40e89950b
--- /dev/null
+++ b/tests/result/nDPId_telegram.pcap.txt
@@ -0,0 +1,496 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1588779596451,"flow_last_seen":1588779596451,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0752{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJVAAEARYHzAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANsCwWgAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0544{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1588779596451,"flow_last_seen":1588779596451,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp"}
+0539{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACavyQAAAERSFfAqAE17\/\/\/+tQiB2wAhkPyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0424{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJuJEAAAERXjrAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1588779596464,"flow_last_seen":1588779596464,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":1588779596465,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0783{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTehJAAAERW5\/AqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1588779596465,"flow_last_seen":1588779596465,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0502{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":142,"pkt":"AQBeAAD7jP5XIzfkCABFAACAA9gAAP8RFKbAqAFL4AAA+xTpFOkAbODJAACEAAAAAAEAAAABBV9kYWNwBF90Y3AFbG9jYWwAAAwAAQAAAAAAHxxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzwAwAACkFoAAAEZQAEgAEAA4A2a7+VyM35Iz+VyM35A==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0602{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_dacp._tcp.local"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0530{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779596,"pkt_len":162,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAGwR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsHDYAAIQAAAAAAQAAAAEFX2RhY3AEX3RjcAVsb2NhbAAADAABAAAAAAAfHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjPADAAAKQWgAAARlAASAAQADgDZrv5XIzfkjP5XIzfk","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0610{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1588779596708,"flow_last_seen":1588779596708,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":108,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_dacp._tcp.local"}}
+0625{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":233,"pkt":"AQBeAAD7jP5XIzfkCABFAADbeQgAAP8RnxrAqAFL4AAA+xTpFOkAx\/OHAAAAAAAFAAAAAQABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEIX2FpcnBsYXnAHAAMgAEFX3Jhb3DAHAAMgAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcMAcAP+AAcBWACEAAQAAAHgAFwAAAADHIw5HYWJyaWVsZXMtaVBhZMAhAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":253,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAMcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDHLvQAAAAAAAUAAAABAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQhfYWlycGxhecAcAAyAAQVfcmFvcMAcAAyAARxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzBV9kYWNwwBwA\/4ABwFYAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwCEAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":253,"pkt_type":34525,"pkt_ipoffset":14}
+0724{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":308,"pkt":"AQBeAAD7jP5XIzfkCABFAAEmpacAAP8RcjDAqAFL4AAA+xTpFOkBEl+aAACEAAAAAAMAAAADCV9zZXJ2aWNlcwdfZG5zLXNkBF91ZHAFbG9jYWwAAAwAAQAAEZQADQVfZGFjcARfdGNwwCMBOAExATMBRQE3ATEBOAE3AUEBMQE5ATABQQFCATQBMAEwATABMAEwATABMAEwATABMAEwATABMAEwATgBRQFGA2lwNgRhcnBhAAAMgAEAAAB4ABEOR2FicmllbGVzLWlQYWTAIwI3NQExAzE2OAMxOTIHaW4tYWRkcsCFAAyAAQAAAHgAAsCVwEEAL4ABAAAAeAAGwEEAAgAIwKYAL4ABAAAAeAAGwKYAAgAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":328,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfARIR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QESmwYAAIQAAAAAAwAAAAMJX3NlcnZpY2VzB19kbnMtc2QEX3VkcAVsb2NhbAAADAABAAARlAANBV9kYWNwBF90Y3DAIwE4ATEBMwFFATcBMQE4ATcBQQExATkBMAFBAUIBNAEwATABMAEwATABMAEwATABMAEwATABMAEwATABOAFFAUYDaXA2BGFycGEAAAyAAQAAAHgAEQ5HYWJyaWVsZXMtaVBhZMAjAjc1ATEDMTY4AzE5Mgdpbi1hZGRywIUADIABAAAAeAACwJXAQQAvgAEAAAB4AAbAQQACAAjApgAvgAEAAAB4AAbApgACAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":328,"pkt_type":34525,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1588779597291,"flow_last_seen":1588779597291,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0741{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy\/KUAAP8ROizAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1588779597291,"flow_last_seen":1588779597291,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}}
+0541{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":169,"pkt":"AQBeAAD7jP5XIzfkCABFAACbIpQAAP8R9c7AqAFL4AAA+xTpFOkAh0T\/AAAAAAABAAAAAQABHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAA\/wABwAwAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDQAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":189,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCHgGsAAAAAAAEAAAABAAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAD\/AAHADAAhAAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":189,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":153,"pkt":"AQBeAAD7jP5XIzfkCABFAACLhdQAAP8Rkp7AqAFL4AAA+xTpFOkAd9R+AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/gAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":173,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3D+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP+AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":173,"pkt_type":34525,"pkt_ipoffset":14}
+0541{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":169,"pkt":"AQBeAAD7jP5XIzfkCABFAACbny4AAP8ReTTAqAFL4AAA+xTpFOkAh0T\/AAAAAAABAAAAAQABHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAA\/wABwAwAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDQAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779597,"pkt_len":189,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCHgGsAAAAAAAEAAAABAAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAD\/AAHADAAhAAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":189,"pkt_type":34525,"pkt_ipoffset":14}
+0517{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":153,"pkt":"AQBeAAD7jP5XIzfkCABFAACLw3kAAP8RVPnAqAFL4AAA+xTpFOkAd1R\/AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/AAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":173,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3j+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP8AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":173,"pkt_type":34525,"pkt_ipoffset":14}
+0595{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":211,"pkt":"AQBeAAD7jP5XIzfkCABFAADF7nQAAP8RKcTAqAFL4AAA+xTpFOkAsS9YAACEAAAAAAMAAAACHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAAEIABAAARlAABAMApAAwAAQAAEZQAAsAMwAwAIYABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDTADAAvgAEAABGUAAnADAAFAACAAEAAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0623{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":231,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfALER\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCxasQAAIQAAAAAAwAAAAIcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAAQgAEAABGUAAEAwCkADAABAAARlAACwAzADAAhgAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANMAMAC+AAQAAEZQACcAMAAUAAIAAQAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":231,"pkt_type":34525,"pkt_ipoffset":14}
+0559{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":184,"pkt":"AQBeAAD7jP5XIzfkCABFAACqi7MAAP8RjKDAqAFL4AAA+xTpFOkAloOLAAAAAAACAAIAAAABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEIX2hvbWVraXTAHAAMAAHADAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwAwADAABAAARlAAOC0x1Y2EncyBpUGFkwAwAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":184,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":204,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAJYR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCWvvcAAAAAAAIAAgAAAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAwAAQhfaG9tZWtpdMAcAAwAAcAMAAwAAQAAEZQAEA1MdWNh4oCZcyBpTWFjwAzADAAMAAEAABGUAA4LTHVjYSdzIGlQYWTADAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":204,"pkt_type":34525,"pkt_ipoffset":14}
+0726{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":308,"pkt":"AQBeAAD7jP5XIzfkCABFAAEmz4wAAP8RSEvAqAFL4AAA+xTpFOkBEl+aAACEAAAAAAMAAAADCV9zZXJ2aWNlcwdfZG5zLXNkBF91ZHAFbG9jYWwAAAwAAQAAEZQADQVfZGFjcARfdGNwwCMBOAExATMBRQE3ATEBOAE3AUEBMQE5ATABQQFCATQBMAEwATABMAEwATABMAEwATABMAEwATABMAEwATgBRQFGA2lwNgRhcnBhAAAMgAEAAAB4ABEOR2FicmllbGVzLWlQYWTAIwI3NQExAzE2OAMxOTIHaW4tYWRkcsCFAAyAAQAAAHgAAsCVwEEAL4ABAAAAeAAGwEEAAgAIwKYAL4ABAAAAeAAGwKYAAgAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":328,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfARIR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QESmwYAAIQAAAAAAwAAAAMJX3NlcnZpY2VzB19kbnMtc2QEX3VkcAVsb2NhbAAADAABAAARlAANBV9kYWNwBF90Y3DAIwE4ATEBMwFFATcBMQE4ATcBQQExATkBMAFBAUIBNAEwATABMAEwATABMAEwATABMAEwATABMAEwATABOAFFAUYDaXA2BGFycGEAAAyAAQAAAHgAEQ5HYWJyaWVsZXMtaVBhZMAjAjc1ATEDMTY4AzE5Mgdpbi1hZGRywIUADIABAAAAeAACwJXAQQAvgAEAAAB4AAbAQQACAAjApgAvgAEAAAB4AAbApgACAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":328,"pkt_type":34525,"pkt_ipoffset":14}
+0518{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":153,"pkt":"AQBeAAD7jP5XIzfkCABFAACLFGwAAP8RBAfAqAFL4AAA+xTpFOkAd1R\/AAAAAAABAAAAAgABDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAD\/AAHADAAcAAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAQABAAAAeAAEwKgBSwAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":153,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":173,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAHcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QB3j+sAAAAAAAEAAAACAAEOR2FicmllbGVzLWlQYWQFbG9jYWwAAP8AAcAMABwAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABAAEAAAB4AATAqAFLAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":173,"pkt_type":34525,"pkt_ipoffset":14}
+0540{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa8TAAAAERFkvAqAE17\/\/\/+tQiB2wAhkPyTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":167,"pkt":"AQBeAAD7jP5XIzfkCABFAACZz9MAAP8RSJHAqAFL4AAA+xTpFOkAhVCYAACEAAAAAAIAAAACDkdhYnJpZWxlcy1pUGFkBWxvY2FsAAAcgAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwAwAAYABAAAAeAAEwKgBS8AMAC+AAQAAAHgACMAMAARAAAAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779598,"pkt_len":187,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAIUR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QCFjAQAAIQAAAAAAgAAAAIOR2FicmllbGVzLWlQYWQFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjADAABgAEAAAB4AATAqAFLwAwAL4ABAAAAeAAIwAwABEAAAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":187,"pkt_type":34525,"pkt_ipoffset":14}
+0682{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779599,"pkt_len":275,"pkt":"AQBeAAD7jP5XIzfkCABFAAEFrJcAAP8Ra2HAqAFL4AAA+xTpFOkA8YKfAACEAAAAAAUAAAADHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjMFX2RhY3AEX3RjcAVsb2NhbAAAEIABAAARlAABAMApAAwAAQAAEZQAAsAMwAwAIYABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwDTAZgAcgAEAAAB4ABD+gAAAAAAAAAS6CRp4F+MYwGYAAYABAAAAeAAEwKgBS8AMAC+AAQAAEZQACcAMAAUAAIAAQMBmAC+AAQAAAHgACMBmAARAAAAIAAApBaAAABGUABIABAAOANqu\/lcjN+SM\/lcjN+Q=","pkt_caplen":275,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779599,"pkt_len":295,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAPER\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDxvgsAAIQAAAAABQAAAAMcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcARfdGNwBWxvY2FsAAAQgAEAABGUAAEAwCkADAABAAARlAACwAzADAAhgAEAAAB4ABcAAAAAxyMOR2FicmllbGVzLWlQYWTANMBmAByAAQAAAHgAEP6AAAAAAAAABLoJGngX4xjAZgABgAEAAAB4AATAqAFLwAwAL4ABAAARlAAJwAwABQAAgABAwGYAL4ABAAAAeAAIwGYABEAAAAgAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":295,"pkt_type":34525,"pkt_ipoffset":14}
+0504{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":142,"pkt":"AQBeAAD7jP5XIzfkCABFAACAMbcAAP8R5sbAqAFL4AAA+xTpFOkAbODIAACEAAAAAAEAAAABBV9kYWNwBF90Y3AFbG9jYWwAAAwAAQAAAAAAHxxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzwAwAACkFoAAAEZQAEgAEAA4A2q7+VyM35Iz+VyM35A==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":162,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAGwR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsHDUAAIQAAAAAAQAAAAEFX2RhY3AEX3RjcAVsb2NhbAAADAABAAAAAAAfHGlUdW5lc19DdHJsXzRBQkIzOUE0MUVFRkRFQjPADAAAKQWgAAARlAASAAQADgDarv5XIzfkjP5XIzfk","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0627{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":233,"pkt":"AQBeAAD7jP5XIzfkCABFAADbJxEAAP8R8RHAqAFL4AAA+xTpFOkAx\/KHAAAAAAAFAAAAAQABD19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMgAEIX2hvbWVraXTAHAAMgAEIX2FpcnBsYXnAHAAMgAEFX3Jhb3DAHAAMgAEcaVR1bmVzX0N0cmxfNEFCQjM5QTQxRUVGREVCMwVfZGFjcMAcAP+AAcBWACEAAQAAAHgAFwAAAADHIw5HYWJyaWVsZXMtaVBhZMAhAAApBaAAABGUABIABAAOANuu\/lcjN+SM\/lcjN+Q=","pkt_caplen":233,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":253,"pkt":"MzMAAAD7jP5XIzfkht1gD8IfAMcR\/\/6AAAAAAAAABLoJGngX4xj\/AgAAAAAAAAAAAAAAAAD7FOkU6QDHLfQAAAAAAAUAAAABAAEPX2NvbXBhbmlvbi1saW5rBF90Y3AFbG9jYWwAAAyAAQhfaG9tZWtpdMAcAAyAAQhfYWlycGxhecAcAAyAAQVfcmFvcMAcAAyAARxpVHVuZXNfQ3RybF80QUJCMzlBNDFFRUZERUIzBV9kYWNwwBwA\/4ABwFYAIQABAAAAeAAXAAAAAMcjDkdhYnJpZWxlcy1pUGFkwCEAACkFoAAAEZQAEgAEAA4A267+VyM35Iz+VyM35A==","pkt_caplen":253,"pkt_type":34525,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1588779600828,"flow_last_seen":1588779600828,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp"}
+0422{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":84,"pkt":"EBMx8Tl2KDc3AG3ICABFAABGiX4AAP8RronAqAFNwKgBAfC\/ADUAMkhio9MBAAABAAAAAAAABWU3MDQ3A2UxMgpha2FtYWllZGdlA25ldAAAAQAB","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1588779600828,"flow_last_seen":1588779600828,"flow_tot_l4_data_len":50,"flow_min_l4_data_len":50,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":50,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e7047.e12.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0740{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyb04AAP8Rx4PAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779600,"pkt_len":100,"pkt":"KDc3AG3IEBMx8Tl2CABFAABWE2lAADkRqo\/AqAEBwKgBTQA18L8AQgAAo9OBgAABAAEAAAAABWU3MDQ3A2UxMgpha2FtYWllZGdlA25ldAAAAQABwAwAAQABAAAAFAAEXHr3XA==","pkt_caplen":100,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1588779600828,"flow_last_seen":1588779600842,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e7047.e12.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.247.92"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":1588779601222,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1000{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779601,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1588779601222,"flow_last_seen":1588779601222,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":1588779601223,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0996{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779601,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1588779601223,"flow_last_seen":1588779601223,"flow_tot_l4_data_len":472,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0753{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779601,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJZAAEARYHvAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAM98X0EAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779603,"pkt_len":181,"pkt":"AQBeAAD7wJrQLWJ0CABFAACnQj4AAP8R1i7AqAE14AAA+xTpFOkAk34YAAAAAAAFAAAAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAyAAQ9fY29tcGFuaW9uLWxpbmvAFQAMgAEFX3Jhb3DAFQAMgAEIX2FpcnBsYXnAFQAMgAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMgAEAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":181,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1588779596464,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":53,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":100,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779603292,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0584{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779603,"pkt_len":201,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAJMR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QCTHG8AAAAAAAUAAAAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADIABD19jb21wYW5pb24tbGlua8AVAAyAAQVfcmFvcMAVAAyAAQhfYWlycGxhecAVAAyAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAyAAQAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":201,"pkt_type":34525,"pkt_ipoffset":14}
+0607{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1588779603292,"flow_last_seen":1588779603292,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_homekit._tcp.local"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":1588779603320,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0741{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779603,"pkt_len":320,"pkt":"wJrQLWJ0KDc3AG3ICABFAAEyUGUAAP8R5oLAqAFNwKgBNRTpFOkBHhkkAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":1588779603320,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_companion-link._tcp.local"}}
+0631{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779604,"pkt_len":238,"pkt":"AQBeAAD7wJrQLWJ0CABFAADgDXQAAP8RCsDAqAE14AAA+xTpFOkAzL4AAAAAAAADAAMAAAABCF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMAAHAJQAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AlwCUADAABAAARlAAOC0x1Y2EncyBpUGFkwCXAOwAMAAEAABGUABIPNTAtMzUtMTAtNzAuMSAxwDsAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779604,"pkt_len":258,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAMwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QDMXFcAAAAAAAMAAwAAAAEIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAwAAcAlAAwAAQAAEZQAEA1MdWNh4oCZcyBpTWFjwCXAJQAMAAEAABGUAA4LTHVjYSdzIGlQYWTAJcA7AAwAAQAAEZQAEg81MC0zNS0xMC03MC4xIDHAOwAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":258,"pkt_type":34525,"pkt_ipoffset":14}
+0741{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779604,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy\/rUAAP8ROBzAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779606,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJdAAEARYHrAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABAmSTUAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":142,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAeJ4AAP8Rn\/XAqAE14AAA+xTpFOkAbGrlAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABGRABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":162,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsCTwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEZEAEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779607374,"flow_last_seen":1588779607374,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":75,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA9u6QAAP8RfGzAqAFNwKgBAcuWADUAKd8a0oUBAAABAAAAAAAAAmluCWFwcGNlbnRlcgJtcwAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1588779607374,"flow_last_seen":1588779607374,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"in.appcenter.ms","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0593{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":209,"pkt":"KDc3AG3IEBMx8Tl2CABFAADD2ppAADkR4vDAqAEBwKgBTQA1y5YArwAA0oWBgAABAAMAAAAAAmluCWFwcGNlbnRlcgJtcwAAAQABwAwABQABAAAAXQAuGWluMi1wcm9kLWVhc3QtdXMyLTIzZmEzMzAOdHJhZmZpY21hbmFnZXIDbmV0AMAtAAUAAQAAAAsAMBNpbjItZ3cyLTA0LWVkZTZmMDZlB2Vhc3R1czIIY2xvdWRhcHAFYXp1cmUDY29tAMBnAAEAAQAAAAUABBQsTvs=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1588779607374,"flow_last_seen":1588779607388,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":41,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Microsoft","category":"Cloud"},"dns": {"query":"in.appcenter.ms","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"20.44.78.251"}}
+0741{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779607,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyjSEAAP8RqbDAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1588779608134,"flow_last_seen":1588779608134,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0433{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779608,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEQD4AAEARtebAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1588779608134,"flow_last_seen":1588779608134,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0433{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABE4wYAAEAREx7AqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1588779611355,"flow_last_seen":1588779611355,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp"}
+0542{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":167,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZH80AAAER55nAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1588779611355,"flow_last_seen":1588779611355,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0741{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyXK8AAP8R2iLAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJhAAEARYHnAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGALuAMeAAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":167,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZnzoAAAERaCzAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779611,"pkt_len":167,"pkt":"AQBef\/\/6jP5XIzfkCABFAACZ2TYAAAERLjDAqAFL7\/\/\/+uI8B2wAhTXETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQo=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1588779615019,"flow_last_seen":1588779615019,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":85,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHiDkAAP8Rr83AqAFNwKgBAe7AADUAMxxUuQsBAAABAAAAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1588779615019,"flow_last_seen":1588779615019,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0449{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":101,"pkt":"KDc3AG3IEBMx8Tl2CABFAABXJ0xAADkRlqvAqAEBwKgBTQA17sAAQwAAuQuBgAABAAEAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAA4ABFx69t8=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1588779615019,"flow_last_seen":1588779615032,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.246.223"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":1588779615961,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0435{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":91,"pkt":"AQBeAAD78KNaMBgSCABFAABNRwcAAP8R0cDAqAE04AAA+xTpFOkAOcUdAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0591{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":1588779615961,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":1588779615962,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0465{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779615,"pkt_len":111,"pkt":"MzMAAAD78KNaMBgSht1gBhFuADkR\/\/6AAAAAAAAABNzt7FsMpmH\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5dUAAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14}
+0600{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":1588779615962,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp"}
+0443{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABERC0AAEARERTAqAFNW2wIB1qGAgkAMLAM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8o+UYRJgGi8A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp"}
+0444{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEWYkAAEAR97nAqAFNW2wMBVqGAgsAMMZE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/VYJzCLkR9XA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp"}
+0443{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEZqwAAEAR5prAqAFNW2wQAVqGAg8AMLyJ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9u+DapRNA5DQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp"}
+0444{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEMZgAAEARH6\/AqAFNW2wMAVqGAhgAMB7S3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8nsGAWUhbrUA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp"}
+0443{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECJIAAEARTK7AqAFNW2wICFqGAhoAMJgJ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8HjiXC2fxIoA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp"}
+0443{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEVZYAAEAR963AqAFNW2wQBFqGAhoAMGBV3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8kkP6VHClAVg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1588779616036,"flow_last_seen":1588779616036,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0475{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcvxJAADMRYxZbbAgHwKgBTQIJWoYASDvF3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeKPlGESYBovAAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0gJAADMRUCVbbAgIwKgBTQIaWoYASCPC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeB44lwtn8SKAAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHlxAADQR\/s5bbAwFwKgBTQILWoYASFH93EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe1WCcwi5EfVwAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ8JAADQR9WxbbAwBwKgBTQIYWoYASKqK3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeJ7BgFlIW61AAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcdvtAADYRoDBbbBAEwKgBTQIaWoYASOwN3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeJJD+lRwpQFYAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcavZAADYRrDhbbBABwKgBTQIPWoYASEhC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJebvg2qUTQOQ0AAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":142,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAUoIAAP8RxhHAqAE14AAA+xTpFOkAbHPlAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABGIABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":162,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsEjwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEYgAEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8v0VAADMRYsNbbAgHwKgBTQIJWoYAaD3C3EwAKRVlt6y8I22p7aDVl1kuRsPrW9KEfnzYzQILhSJVZwm4ydGInRd8K6fl4JcT3ZYFqyIenAd9IA0qgCEd7GPQ6mJV\/aaZBQA9j+\/r0xZYfE1eMfKMjrw7DPZVZF3Y","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8TYUAAEARA4rAqAFNW2wMAVqGAhgAaPtH3EwAKRVlt6y8I22p7aDVlzF9tkqG8Vy9mc+httTfBLUUKD3nPIpyRy3ItnD3hVzo5GeIoM2qaFz\/yCQX0+y0hipTw\/kylFSjOOn2uuzWtdHeg39EeEdeCXu4W27oK0KN","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80idAADMRT+BbbAgIwKgBTQIaWoYAaCPe3EwAKRVlt6y8I22p7aDVl5GbCK4j4zRv3DTd8DT6OUw6qpjroPsdobKbJkssqpPX5uXMLNXGSRggLwmRIKQDuFEnjoz+E5Zlydodds5mKwEYgkGhNIjlK85eZgSRk81C","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJlAAEARYHjAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAPwKR20AAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HoJAADQR\/ohbbAwFwKgBTQILWoYAaHRJ3EwAKRVlt6y8I22p7aDVl5cYNmc7owIGPJxlskGx5br+SSQy40sMDI5d++f\/6aTzwNmsmc+tH0QUeknBRS9SCGoK6JwfyvJhza8gjx8KUlZD1YkPUiuIlncqMpzfBBG3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KBFAADQR9P1bbAwBwKgBTQIYWoYAaKHG3EwAKRVlt6y8I22p7aDVl1abu3bDGz6o8fsNot++0zK7RzO7PBk+7Vrmoj8ysTske1f\/EcqIuDby2Fk6mUM4OzQiEPo4kF6e\/Y9\/bAWD7HEOuyvzTKmDTuxutup64haF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8dyVAADYRn+ZbbBAEwKgBTQIaWoYAaCIT3EwAKRVlt6y8I22p7aDVl45mJpEhOWgZ6A6Kc6hID4w4KLG36jYh+Cxfh82Yl8XDNtvIeuCeB52AwTUXULg6UcBqL7rYB23KloHtMZxkmQf1gFMMk8wX4hEL6yN80sZ2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8azBAADYRq95bbBABwKgBTQIPWoYAaMOY3EwAKRVlt6y8I22p7aDVl+cOa7ebeRVfTEQWHnWAvbCNIPN6eM79xlpdrcTkZa70ozc5Ft59HxlMSrLPVRuFHV2it7vPpbUvtl1BMHRDI0C3GGHTZQO1jEuX1r8k9Zfa","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEJ4MAAEARLb7AqAFNW2wIB1qGAgkAMNdM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9YEU+KLH48og==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECGkAAEARSNrAqAFNW2wMBVqGAgsAMDee3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+JMCg+UR2p3g==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEtEsAAEARmPvAqAFNW2wQAVqGAg8AMCLv3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9XMjEOgWmzbw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE1K0AAEARfJnAqAFNW2wMAVqGAhgAMH1q3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/zkwdhjprdBQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE3YcAAEARd7jAqAFNW2wICFqGAhoAMCsU3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/yyawhg3+adw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABExwsAAEARhjjAqAFNW2wQBFqGAhoAMNDL3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/goo8O4yu8UQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcv2xAADMRYrxbbAgHwKgBTQIJWoYASGMF3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeWBFPiix+PKIAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0khAADMRT99bbAgIwKgBTQIaWoYASLbM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe8smsIYN\/mncAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHp1AADQR\/o1bbAwFwKgBTQILWoYASMNW3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeiTAoPlEdqd4AAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKDRAADQR9PpbbAwBwKgBTQIYWoYASAkj3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe85MHYY6a3QUAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8\/M4AAEARWDrAqAFNW2wIB1qGAgkAaINR3EwAKRVlt6y8I22p7aDVlyldsxmqbnFcCOoxJ9SrRoEgHcXJZ5Xpn3Ec\/ian2\/1mEpr6pPLgCHzhKwUXMJzeOfOiKoKWQ6oD2U2\/BWpii+su5vnDLCMiSN3sbJ8LYBJg","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8dIYAAEAR3ITAqAFNW2wMBVqGAgsAaFev3EwAKRVlt6y8I22p7aDVl5Q2Tp03KFy0BQuDNuRI\/p06QUkGfLe8r+7Xo4B\/82N0ml1KiKraN+qfy\/4RVnRnPEzYLOupSzeRhFGgrLm8kE6AoyNpqC46vz3raNsLWlCj","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8VKYAAEAR+GjAqAFNW2wQAVqGAg8AaIqt3EwAKRVlt6y8I22p7aDVl5SF6dBtlZfMFccc0vHJ86GlqPUUOC5GuyDUdKB5KltpDqPCcGbk9BBnmvijRKU9Dq5csL4ODGFgXr9dEvYsEeCqLjo8HGNgHagHZOsTdBLK","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB85wcAAEARagfAqAFNW2wMAVqGAhgAaGzN3EwAKRVlt6y8I22p7aDVl153AzqJEKeYz5NaGMlfds3WxAoif1JWLe\/x3pKRB964061J7eYaSjDUmusPqk4sY1OalKmHgycwgeEF+A1hxXrHpm0C8cQEdg0Lo7wsz6Z3","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Mp8AAEARImnAqAFNW2wICFqGAhoAaC+Q3EwAKRVlt6y8I22p7aDVl6tXgrLpgbbl7eXHDd2Qei9ZNgLgOW5QtCXbb5jWD0kcAsgxBsVqwOoZnWnc1uYEMVnNVyyHZLIuENAjqflfCTq3asu9q8Ief4VqBZp847FQ","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Nl0AAEARFq\/AqAFNW2wQBFqGAhoAaFG+3EwAKRVlt6y8I22p7aDVl+Q1+r0dJ2Fa7\/pVxUg4a79u69xdU\/qhLWT108nmnr\/ImFhYcx9KqcxW9Np4XKjnVgwGlxyr787ofTP+B+0Nkt7ep5lolbHi97D2YMEv3ptE","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd0dAADYRn+RbbBAEwKgBTQIaWoYASFyE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJe4KKPDuMrvFEAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca0BAADYRq+5bbBABwKgBTQIPWoYASK6n3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBg2rJeVzIxDoFps28AAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HrhAADQR\/lJbbAwFwKgBTQILWoYAaI1d3EwAKRVlt6y8I22p7aDVl9G\/fyvwThLwtRHHC9MZF4tcUeDyk0Nn82CF6LUqTVEd6zhw+1EGAk6yTq2GQQZ\/lHG5S5nKWjxevU\/ZhZ+WPgRW8kXFHiGkyv4l8VK\/kIYL","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8v5ZAADMRYnJbbAgHwKgBTQIJWoYAaJ\/p3EwAKRVlt6y8I22p7aDVlxREakotVNEDE142Pub8NqzS1LSd8S5f2XRCdXTA3CZX2oXNd7mdteWvpq+sLXxNpcAckLTim4cKUWl\/XDFRD7FihtvmQS+FjqXTKu9Hmd1g","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80mpAADMRT51bbAgIwKgBTQIaWoYAaLyo3EwAKRVlt6y8I22p7aDVl4gDyKkjCfJauyezv1whF64gfKQLbu+OfKbU2EFG+HA7PtPxdXjlhcQcp+HEshzrTvaHtVA+tjnUdVWIjj0hgok3Lf9ef7fRzlVAIN\/Tn2pJ","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8HtcAAEARNnLAqAFNW2wIB1qGAgkAKOcY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8DWwAAEARQ9\/AqAFNW2wMBVqGAgsAKOMY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8iUQAAEARxArAqAFNW2wQAVqGAg8AKN8Y3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8hZgAAEARy7bAqAFNW2wMAVqGAhgAKOMP3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8NtsAAEARHm3AqAFNW2wICFqGAhoAKOcG3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8fpgAAEARzrPAqAFNW2wQBFqGAhoAKN8K3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8T1cAAEARBbLAqAFNW2wIB1qGAgkAaPgc3EwAKRVlt6y8I22p7aDVlyePunxRRl1dPXK15pZxqRZddA\/0oz\/jG1axp\/nTsEi2pdUUQ4erjeRLjmGtydPdrZkkjiBDJYTNLyYb13Mq+IM2jN4\/GUtxXmKTdOAiWbiI","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMv55AADMRYppbbAgHwKgBTQIJWoYAOBYy3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABM0mxAADMRT8tbbAgIwKgBTQIaWoYAOBYg3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8Hr1AADQR\/k1bbAwFwKgBTQILWoYAaMYu3EwAKRVlt6y8I22p7aDVl97xbqCiqoUY5qJ414f4njwPu3I6sPWarCCakqHtMWFZXH0BXD1\/9ejf4xb55zkgoLmvMfEBhoxzzoc2ELq8sVW5oKtYWk76795u3vdkdvuz","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779616,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KFlAADQR9LVbbAwBwKgBTQIYWoYAaCmK3EwAKRVlt6y8I22p7aDVl8h1gFR\/8bxqYHF3yk6rd6P1AfsAbS\/j7dCMeGo36UmDmuu\/ZqsZii2i187N9Lv6jIkwUWQ3NdKwNxwxbLD6RNNWWIJQ1Usc+LqNCF8HZ8E2","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMHr5AADQR\/nxbbAwFwKgBTQILWoYAOBIy3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMKF5AADQR9OBbbAwBwKgBTQIYWoYAOBIp3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8d25AADYRn51bbBAEwKgBTQIaWoYAaHWi3EwAKRVlt6y8I22p7aDVl5rCFpxs7YHBZBZLmwquhsHPmVy3OJUPwksj34SDm8YldY3BnFx2JQeujibFeEqmznk9Wf0oInzfFml5xniV\/YyeK3vk71VPabbjLN9EBPJt","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8a1xAADYRq7JbbBABwKgBTQIPWoYAaK4I3EwAKRVlt6y8I22p7aDVlxKXtYSpL6tGVUJCxziEWfCslxpWFgl5thrDaDc7ojYiWBSENhNnTmjkSqADZkDqs+OvDQmA6kbCdtIXT+2ySkSALnvsiFHRIhCYm3xTo7bw","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq+kAAEARqVfAqAFNW2wIB1qGAgkAMNEE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/qxE4b8QntGQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEWcYAAEAR93zAqAFNW2wMBVqGAgsAMK7J3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/\/iP5DS4Xr7A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEtzYAAEARlhDAqAFNW2wQAVqGAg8AMMDV3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9HVl8svXS7Ow==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE\/dYAAEARU3DAqAFNW2wMAVqGAhgAMAL+3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/TGg39ngRh5Q==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABECZ0AAEARS6PAqAFNW2wICFqGAhoAMLS33EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+vFfzS1uywaQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq0sAAEARofjAqAFNW2wQBFqGAhoAMDPP3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/bleHhvhswmA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMd3NAADYRn8hbbBAEwKgBTQIaWoYAOA4k3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMa15AADYRq+BbbBABwKgBTQIPWoYAOA4y3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DXdwAAFcLzcMz7QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcv61AADMRYntbbAgHwKgBTQIJWoYASFu93EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe6sROG\/EJ7RkAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0nlAADMRT65bbAgIwKgBTQIaWoYASD9w3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJerxX80tbssGkAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":234,"pkt":"KDc3AG3IEBMx8Tl2CABFAADcv7ZAADMRYfJbbAgHwKgBTQIJWoYAyIR53EwAKRVlt6y8I22p7aDVl5d0AH5ObAqwAU8xBlDGVIkxaDwsl\/Tx3dQPtrczrlRgUFPeHc9gzUo17OOu7sbg8dEu3CSp9TK4pNX4iKSt1aPZvLRVY\/KtFRmtWJB9Dq6AleEU\/fGQZvsz95xhxe69E7Va5PPnA7FrjhkrvKx3BpDzkhYhBSqOIKw92MsnjopeCLN+PsD0eBa6OlPemDUc6dK\/4+U\/u98ahW80h7v2XshXT2KL76fQxjavhwr71c\/O","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcHuJAADQR\/khbbAwFwKgBTQILWoYASDmC3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe\/4j+Q0uF6+wAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKGxAADQR9MJbbAwBwKgBTQIYWoYASI223EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe0xoN\/Z4EYeUAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8HfUAAEARNxTAqAFNW2wIB1qGAgkAaGBN3EwAKRVlt6y8I22p7aDVl\/xKgqF60rJT3oaqpicxIMnoI3U+wgaLvgpgOwdBNwqB5xCwgQ6Kzerzf\/TGl1GJKfcpRvYZUX\/nAEWtODzC2r7QaC+YBNsA+8SUUO6steuY","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8a\/8AAEAR5QvAqAFNW2wMBVqGAgsAaNeN3EwAKRVlt6y8I22p7aDVl5s5VHoewnh2Vsojy\/up5tvpCX3oaEFOxkOqXoPwJ3bO+t6XO4INQPSYS6BlcHjofBzZiEhuzEuv6s3ngqwJRMiouSRPshKutwTCGkvk28Sl","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB883QAAEARWZrAqAFNW2wQAVqGAg8AaIKz3EwAKRVlt6y8I22p7aDVl32Pc1HHYEYZi03qucZTFlZCNbubeA6q68jFtFI807L3L2Q1Iq\/+vfYqu+JWPFPTntvaZFr70bw2+IJc0TUQfNCX+E3f8ZYzjfyys94dFrWT","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8dtkAAEAR2jXAqAFNW2wMAVqGAhgAaBww3EwAKRVlt6y8I22p7aDVl4vdmXzL72TBwedu7KHurKAh2P1dZR4VCu529CPBH17fOUG3BML2yTk2nLmjgNfhYpep7QwAOhc9vcf32ofx\/+LJzcEwwk2H80BEPwH6IV27","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8f+UAAEAR1SLAqAFNW2wICFqGAhoAaL863EwAKRVlt6y8I22p7aDVl2Z+eUAsmBtQeyC0OUCkfafRX4V225PAmCB0ZuqiMkYuVH6y\/\/nCzJBhcNkpFmRP0pMKp8O1m88zc2drgTh2WlOw+HbtYOEO6ont+XVyA4Ix","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8zjwAAEARfs\/AqAFNW2wQBFqGAhoAaNO63EwAKRVlt6y8I22p7aDVl2tG15m00Z4O5OQSm8Uf2GNj8pAbvopp1wpqnYKwsNZGvZRa0ShBkvgF25\/+Y5mE73LLX4U7zxEu5AntT0mzac2u85OXiFO8LcRPWoBqHH6T","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":1588779617174,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp"}
+0479{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"8KNaMBgSKDc3AG3ICABFAABsqlYAAEARTFnAqAFNwKgBNFqGevgAWLgQjfykZ0OTWbVGSN3cMHZvNB3RufFF5FIV8MQ0P3KjKgWFEWl4FO4hV\/puQOILS4RjUor87I6iIoOnx\/A9NueumG+cX0HrNbBHt0bLwMXSB9A=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":1588779617174,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp"}
+0481{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"EBMx8Tl2KDc3AG3ICABFAABs\/QcAAEARlrXAqAFNVwvNw1qG7TMAWH9So7C\/sNzcuk+cyiR2EyU9Q\/nbaTxTjDBemDeFTsb5lNpyEwlgOlPEUd9m7ay58cjORIuAWP8IcwSg0vb1EIxOrmmqeB4nTaYDWzAgf8R5\/bQ=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1588779617174,"flow_last_seen":1588779617174,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp","ndpi": {"proto":"OpenVPN","category":"VPN"}}
+0476{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd3tAADYRn7BbbBAEwKgBTQIaWoYASL6H3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe25Xh4b4bMJgAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":234,"pkt":"KDc3AG3IEBMx8Tl2CABFAADcv79AADMRYelbbAgHwKgBTQIJWoYAyO2t3EwAKRVlt6y8I22p7aDVlz0hS6R\/P6+h7iDam6YNZso1HdbCXaIDIoav8iPnn0fy6+kW9pNMmLa42T9nF\/vZoSfsIHIOW25zUxWLLAxS+KjdCoqjtaEnysQ9pWmOqty88YWXptpYLJIsnEoYpLj73ezoCreiNoCQ4U69zJz9X3a0\/UDc7Pi882XCIV9co6HLki9cZNIlEUT1D\/ZlHKeKTlQV8OBLC21Y0mtlViOwDpz2GB\/I0aD0+8OrgNpr858X","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca2FAADYRq81bbBABwKgBTQIPWoYASEuO3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJeR1ZfLL10uzsAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"KDc3AG3I8KNaMBgSCABFAABsUAUAAEARpqrAqAE0wKgBTXr4WoYAWLDM6Td5ePjQrnTyke2EPHu3iQJhxLIf06esu8RwrHmFIT7cHf5ycIamk2yhxwjAfE09exZIgAEDzMDiso7KFMuIe8fjwzyyS3MKiG+Cd3eNuy0=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB80plAADMRT25bbAgIwKgBTQIaWoYAaPDj3EwAKRVlt6y8I22p7aDVl+MX7HtGUYbwrQqCr4nYVPeDmZbZ2Bf+vN8udIrDAEL8It1Wi\/+ue1QTjqrg\/9qVehBOkj4\/T+fdlhHLBZwboP8C240mh3cEijKopP7xMWpM","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8HxtAADQR\/e9bbAwFwKgBTQILWoYAaHvv3EwAKRVlt6y8I22p7aDVl0UqJlE1OabPQTf2e0N80C8IyLi4FSthq7K\/CKRgPYLvFR3sah0B1uHAyn687xtiZVkMkP5dayfPZm+vj1DRlUUDewwWiFZHmp+GGswDrW2N","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KJ5AADQR9HBbbAwBwKgBTQIYWoYAaM8Z3EwAKRVlt6y8I22p7aDVlw7pozkX8PRV27QTDvgLl\/jawWiOrIHky37V4Y2MkH4S8LDWtKdz8Oj7gko4EANqBHi4pKpWaNOhyyNr0cW4ouLjfVXS\/MsTKKotUTaUzran","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8d59AADYRn2xbbBAEwKgBTQIaWoYAaK5b3EwAKRVlt6y8I22p7aDVl2M7tZku94NihPZzTPDPHOWDg2SL2IdMTbV+ifiPSEum1EGLEILUF03Silk0M4dCplYXXkqAwfLcaT8czhBSW7JPk3FP07Zjf1VrX\/EhA7PS","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8a3tAADYRq5NbbBABwKgBTQIPWoYAaANH3EwAKRVlt6y8I22p7aDVlwZ\/lr0pb5\/8OHWmjWpVGAC6aWnFO9YZe0AabMk9tAYNdCKm7Lc0YZSIQXd727arotbjGcPuNpZm7jwb0JEwc84e\/kUM82vy4cMNF9kPKTWE","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEGswAAEARNnfAqAFNW2wMBVqGAgsAMDCY3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/943nQWDxq3YQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEHCcAAEARMSDAqAFNW2wQAVqGAg8AMEmM3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/TUthfaCKCpw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABETBQAAEARBTPAqAFNW2wMAVqGAhgAMAJx3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8PlXSk\/DdhHQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE99IAAEARXW3AqAFNW2wICFqGAhoAMM8r3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/QKrUqs6nfyw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE+FgAAEARVOvAqAFNW2wQBFqGAhoAMBPZ3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8nPeBPB4O9EQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc0qlAADMRT35bbAgIwKgBTQIaWoYASFnk3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe0Cq1KrOp38sAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcd7RAADYRn3dbbBAEwKgBTQIaWoYASJ6R3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJeJz3gTweDvREAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABca45AADYRq6BbbBABwKgBTQIPWoYASNRE3EwAKRVlt6y8I22p7aDVl\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcBh2rJe01LYX2gigqcAAAAAAAAAAAAA\/\/9XC83DXdwAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779617,"pkt_len":122,"pkt":"KDc3AG3I8KNaMBgSCABFAABsRZ4AAEARsRHAqAE0wKgBTXr4WoYAWPxjToIQs5m5XoZB1qDehmfhJomQUeopOlZuJIIaL6qE8BgtmXQ6sqxHJAacGMTU5S5RgUjUPrOpUP\/aPObI3ORz5PRGJjnynufzdcsxdb\/ZTPY=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":90,"pkt":"KDc3AG3I8KNaMBgSCABFAABMydIAAEARLP3AqAE0wKgBTXr4WoYAODsLYp5\/+zyBsvkbXdhL6ARsRe5epV49Ib962s33xAud4j+fNlcVTYsLIrX00azPg1oy","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":106,"pkt":"8KNaMBgSKDc3AG3ICABFAABcuJYAAEARPinAqAFNwKgBNFqGevgASIwMGSklPzXEo+xeYy1+GF45Fj8LUGSCCu60WiiFqxLSO5M49NhltbcBCfe+3gJzPDxoeAqeJPaj79I+oze+Y3DSMA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":90,"pkt":"8KNaMBgSKDc3AG3ICABFAABM2MgAAEARHgfAqAFNwKgBNFqGevgAOHVzLDN7SsFyWuK6F0tpc5OATWnzbEU7qCpTN1Xozj8qtDOuKYxZPvphz9N0EPmGit2J","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABMg0kAAEAREJTAqAFNVwvNw1qG7TMAOE0OU2RiXNjy8sJRKs8KhnTyEy6Nhnt95vQlharNkBkXr2lvtMgl2dlHhYY4WvPjXQkp","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779618,"pkt_len":106,"pkt":"KDc3AG3I8KNaMBgSCABFAABcQqkAAEARtBbAqAE0wKgBTXr4WoYASPszoQUCF9P7scTQPabFpgbA0VyPrQrjBdPkNrzYYnOrrtS8RRJbPFmnTpzV\/p+26\/mmrLK5EkJB2QBg75XmqKGTLA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1588779619914,"flow_last_seen":1588779619914,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779619,"pkt_len":85,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHqTUAAEARTdLAqAFNwKgBAbgXADUAM25TALgBAAABAAAAAAAAA3d3dxFnb29nbGV0YWdzZXJ2aWNlcwNjb20AAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1588779619914,"flow_last_seen":1588779619914,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"www.googletagservices.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0449{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779619,"pkt_len":101,"pkt":"KDc3AG3IAICPmq69CABFAABXwqhAAEAR9E7AqAEBwKgBTQA1uBcAQ5UvALiBgAABAAEAAAAAA3d3dxFnb29nbGV0YWdzZXJ2aWNlcwNjb20AAAEAAcAMAAEAAQAAAAAABMCoAZ0=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1588779619914,"flow_last_seen":1588779619916,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleServices","category":"Web"},"dns": {"query":"www.googletagservices.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"192.168.1.157"}}
+0629{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":234,"pkt":"KDc3AG3I8KNaMBgSCABFAADcfG8AAEARedDAqAE0wKgBTXr4WoYAyKTrFri0AOIdoUF8HgC1gBiBR4WYAW+Y6ixI\/CimmbnvmNPc+7RWqRDiYYB5BtoNOZ+GYknJLF6vnmq\/vZVQVX\/qPiXfvr596tV5ihbzsQEUXujBr6CW5Jx7mLZKATUjQZG4pqkScDCtoGFYwLbXUskyWRSbrC6hy+uBu0qPmfd4SD\/7qckjnc8v4qbewk41c5gifJqMys+k7q5JK0Iwk8+BFQhZBUejZZ6XcaO0DUWhA3vqRiw7b6ii7Tnk1Hel1Nqd","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":266,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8M2UAAEARwrrAqAE0wKgBTXr4WoYA6OlehgGD1Gs0b120gEqf\/nK6f5WdQYejVzOsfJQlZP1AA6F9i0G7vZx1n8e25\/f5Mg3Jxah8nNc1tpxpe\/hy5cvvXVKXhfzXSLG1Qs8LShdTAgKPSWKnJDG+WOm1vZmRgd1Fi6ndcEV4W69AKGJdSjWzqB2FMtgvLbL75OcZDujIR2L6+0iE7z9X0+MJRjiEmby2aw0x8v+3mcowSs8zThHH\/YXo85JS0WXttk3c7nWNkJTbpXRKOSjL6vZwlv27BEWBuawzbbdbMQbuJj7r8dESqiyUArN7hdiDWj\/hscj136s=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0693{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":282,"pkt":"KDc3AG3I8KNaMBgSCABFAAEMW60AAEARmmLAqAE0wKgBTXr4WoYA+BFfLsDgPR+aI0jSmDeUwtyB2xUsT4BFGGcaH00QmXPwbTrfpMgsc5AFbeWTFhj50GiOMhjqhcxWRVD1a5b3PE53mT8NyoSlP80Z9AfMMyDTBtzFX1Zb5T18rhJNznSbJwRwMxKMQJlFd7U7yyptA46tU7ICSikqYFU6C\/HoJbvjNUIdP7NxZQQ4THckr2o2NhcBPqHLYNfMbjACd5hNPNrUai5y9Yb27TnsHBAeqmUL\/EpdipPTlGxY65\/wQFQiP9mrcF8pvutmbHhwhtyfXetd+bmrGzGSy3SZ+qTszdMo+XnEKdOPdC9JaZjlpY3MCcQh","pkt_caplen":282,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":266,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8VjwAAEARn+PAqAE0wKgBTXr4WoYA6PhNExkwSl2Pfa2L2V5HIhoB82Z+\/n+RtWmsJE0ZovpYvJaWUH5Wi\/8HX++L2m9amkSpE02x43ern6KiF9OaiRspZ5unFrhsZUfHaddWsfvGKuhXZJeOl+ZvZIfjsaIQoIgJvzKSbrap+0OSWgNwyhqGX8n330cqP4hHbMQDF4adwah3w8C5r4KEoXgOzoC84eX1dr1XNRV\/ic5gkkx+kRV4doJ1\/m1JAFCtQ2zpEqwUCvOCdDsITJkCH34EvZzbH9KN40jpBZ1N++lrLFE94J4l41tFcEAu\/c0JivVlkdAp4lk=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":266,"pkt":"KDc3AG3I8KNaMBgSCABFAAD8DugAAEAR5zfAqAE0wKgBTXr4WoYA6Hw+f5YAG5Tev5aNfoKjCPqJZQUVurtdk62nD\/1\/prtPCnst\/in3Kzbb4DWNn1SyoIDETKOP6ebVfXlEwRK1YTk6PvwbWSTQ5C4+DI2dpOkII8+LLKSej4JD7YJFht4uSSk5xxJG6J\/ZVVqpNDeAIhmxCAKq8ziJZj0z2LtQ4twYwe+4uO4wvhCyeS5eEuBf4OdWj5mKKgDGCEjZ9mor6f1F7vdit9jnrNRI\/GcWTUk9t2o0Q6I5BXQ8bkovVOPLjIPPTIHXc+uQTwqmV\/yji6aIJIHpVd8bjBy4TjP4LPX2LfU=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":250,"pkt":"KDc3AG3I8KNaMBgSCABFAADs4PwAAEARFTPAqAE0wKgBTXr4WoYA2GAFaJT7y9OwzkYFz+4\/fu32Clo96XsqaeX99ii0K5tZAhSCwV599PnV03D5aBnbESEyT0pxBbSbXxu1zi7zVChOt\/OPkZrZX9Acgevvz\/h2JRMGunbkyzfWVvxGUAcLdayGwXw\/jUpqNgzYt5rIGsOLMgpkX3huK2jFrPwAQhbcL3PnSKroJpcRGDgXwghqOpgOZvPODachR5oFQp6HXIvSw+6sC+SwKHN99AR3ETZZPzluj7hDvZBxA6h2\/7nf0KG+\/H3B01BAGZS0\/nLhyblW\/Q==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":218,"pkt":"8KNaMBgSKDc3AG3ICABFAADMZvUAAEARj1rAqAFNwKgBNFqGevgAuJMYkbG\/KIwIwQnayLD0LMXcqEj4lfZ8P9V2iOgexzXB+FkyVtJQfJJnKJmRVHq7SYjBzTc81jea\/W4JIV63if0rV5VmSeagRTwkiWOdGd9o02IQOA+PZJoz0lbdO4rIb8YnZr2XoGAdftw\/Xvcd7TrER6tHinrYdVg4a727UMkOFw96i+NaQr+lRQwgZr4Zf8u+FORrz2a5CnGe4doPuGXE8geBfZgxu\/1NsVKk2aHZjlE=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779620,"pkt_len":234,"pkt":"KDc3AG3I8KNaMBgSCABFAADcPBYAAEARuinAqAE0wKgBTXr4WoYAyD7zXC3NU7wX1h\/h\/kWcJ8qpQmiUN4mhou4JHo77YBPu7\/VIjDsoEmtNSaKDnbUdu9rsQvahuCrdo6qM8+WBlFmUqWfA9spsOUDbGhwiOu\/lCsyDdexur637pbnJEdrQnE5HC5ssaS6AKLWy49YhWHXZpaKXSUEpzSC6ItBDxBR3fKHkGB5NVGyHr8\/h4eaV5mQuKkaNSXZCpy8wOZWWvDRFDXwW4QKX+b0Qm\/U5oaRB0uDYUq\/aULnstigk7puyQYRj","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779621,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJpAAEARYHfAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAKhEc1gAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":1588779625981,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0862{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779625,"pkt_len":397,"pkt":"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","pkt_caplen":397,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":1588779625981,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":""}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":1588779626393,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0647{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/BJImXJc1CABFAADlSCQAAIARbWnAqAErwKgB\/wCKAIoA0XdaEQLkXsCoASsAigC7AAAgRUVFRkZERUxGRUVQRkFDTkZDRUNERkZFREJEQ0VIQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UAAQCA\/AoAREVTS1RPUC1SQjVUMTJHAAoAAxAAAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":1588779626393,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626394,"flow_last_seen":1588779626394,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0444{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABOW9EAAEARmjHAqAFNwKgB\/wCJAIkAOrFARg4BEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1588779626394,"flow_last_seen":1588779626394,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0444{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABOiakAAEARbFnAqAFNwKgB\/wCJAIkAOrE9RhEBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABONx8AAEARvuPAqAFNwKgB\/wCJAIkAOrE5RhUBEAABAAAAAAAAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJOAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779626,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJtAAEARYHbAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAOKuuvkAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1588779628757,"flow_last_seen":1588779628757,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779628,"pkt_len":73,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA7n3IAAP8RmKDAqAFNwKgBAcJkADUAJ31bFnMBAAABAAAAAAAABGRhdGkEbnRvcANvcmcAAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1588779628757,"flow_last_seen":1588779628757,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"dati.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0477{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779628,"pkt_len":121,"pkt":"KDc3AG3IEBMx8Tl2CABFAABr7g4AAEARCNXAqAEBwKgBTQA1wmQAVwAAFnOBgAABAAIAAAAABGRhdGkEbnRvcANvcmcAAAEAAcAMAAUAAQAAADwAFBFtYWlsLWRpZ2l0YWxvY2VhbsARwCsAAQABAAAAPAAEp2PXpA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":698,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1588779628757,"flow_last_seen":1588779628804,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":39,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"dati.ntop.org","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"167.99.215.164"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1588779629044,"flow_last_seen":1588779629044,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp"}
+0407{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779629,"pkt_len":72,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6m54AAEARW3bAqAFNwKgBARa0ADUAJpvbsPwBAAABAAAAAAAABXBpeGVsAndwA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1588779629044,"flow_last_seen":1588779629044,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"pixel.wp.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0431{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779629,"pkt_len":88,"pkt":"KDc3AG3IAICPmq69CABFAABKxbFAAEAR8VLAqAEBwKgBTQA1FrQANpjhsPyBgAABAAEAAAAABXBpeGVsAndwA2NvbQAAAQABwAwAAQABAAAAAAAEwKgBnQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":708,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1588779629044,"flow_last_seen":1588779629045,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"pixel.wp.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"192.168.1.157"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":1588779629079,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779629,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABFpC4AAP8Rk9rAqAFNwKgBAdVDADUAMZzqakQBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1588779629079,"flow_last_seen":1588779629079,"flow_tot_l4_data_len":49,"flow_min_l4_data_len":49,"flow_max_l4_data_len":49,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0754{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779631,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJxAAEARYHXAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGALnIwr0AAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779631,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZzLkAAAIRSQLAqAE14AAA+xTpFOkARfrBAAoAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1588779596464,"flow_last_seen":1588779631710,"flow_tot_l4_data_len":689,"flow_min_l4_data_len":53,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+1001{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0997{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":506,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAAHsvq0AAEARNbfAqAFNwKgB\/0RcRFwB2JlBeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiA0MDk1NjMzNTA1MDQ3NDIyMDI0ODQ4MjA1NjAzMDgyNTQwNDYyOSwgImRpc3BsYXluYW1lIjogIiIsICJuYW1lc3BhY2VzIjogWzUzMDMzMDEyNDgsIDc4NTI2NjE3NywgMTUyNjI2MzA0NSwgMjg1MjE2MDcsIDE0ODE5MzM3LCA0NTE0NzI2NTgsIDczNjM0MTUyOCwgOTM4ODEzODQ5LCAyNzUwMzcwNTYwLCAxMjY3Njk1MTA5LCA1NDQwNDA3MDcyLCA1ODM0NDk5NiwgNDA1NjQ2MjU5MiwgNzA1MzYyNzE4NCwgMTUyMjE3NzU4NywgMTQyMTExNDM5OSwgMTI1MjExNjQyOSwgNzA3OTYzNjY4OCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNjQ3ODMwMzQ0MCwgNTExNzA2NjQyLCA2Mjk3OTU1MTg0LCAxNDE1NjIwMzUwXX0=","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":723,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABES\/gAAEARqizAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":724,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779632,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZVrUAAAIRvwbAqAE14AAA+xTpFOkARfrBAAoAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779634762,"flow_last_seen":1588779634762,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp"}
+2173{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":725,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1588779634762,"flow_last_seen":1588779634762,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.google.com"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779634764,"flow_last_seen":1588779634764,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp"}
+2173{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"EBMx8Tl2KDc3AG3ICABFAAViUS0AAEARvOnAqAFN2DrNRMaGAbsFTkE+w1EwNDZQdSQ0JxgV+\/AAAAABpTtWGWoI4a2O5woGoAEEAENITE8ZAAAAUEFEAPUBAABTTkkAAwIAAFNUSwA5AgAAVkVSAD0CAABDQ1MATQIAAE5PTkNtAgAAQUVBRHECAABVQUlEoAIAAFNDSUSwAgAAVENJRLQCAABQRE1EuAIAAFNNSEy8AgAASUNTTMACAABOT05Q4AIAAFBVQlMAAwAATUlEUwQDAABTQ0xTCAMAAEtFWFMMAwAAWExDVBQDAABDU0NUFAMAAENPUFQUAwAAQ0NSVCQDAABJUlRUKAMAAENGQ1csAwAAU0ZDVzADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS13d3cuZ29vZ2xlLmNvbapsx9TSQuPwh8YeJs33Nmze8URvGPZoGeJQWhFImAF+FKGJcZ5Gv+AWggZjhNIH2DzcOgKswVEwNDYB6IFgkpIa6H7tgIaiFYKRXrLacjAwMDAwMDAwTrr3TE8EhubDtCHdJzdVC1d+PPBDQzIwYmV0YSBDaHJvbWUvODMuMC40MTAzLjM0IEludGVsIE1hYyBPUyBYIDEwXzEzXzYriYKzggSKpsC6slaoCl0fAAAAAFg1MDkBAAAAHgAAAIbXL08ZJ3aJ+3OQ3+Rsvbic8DCd31+92QlBmAfJ4ZcgyovDvfnINbPNV9UIgMSv\/oTfYVDM1unv0Eg0xlJTYVZkAAAAAQAAAEMyNTXvR+qpngpSje9H6qmeClKNYDLLkqBBTd8GdwAAAADwAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1588779634764,"flow_last_seen":1588779634764,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"www.google.com"}}
+2193{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4emwAAEARmNTAqAFN2DrNRPIWAbsAJN5oQKM1SRNfSpcJAg\/VJy\/hU5JXfMk208XyiTI7oA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":729,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":730,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779634,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4M8YAAEAR33rAqAFN2DrNRMaGAbsAJKIhQHUkNCcYFfvwAo2OXEY+ceV4qFvU3oSjW1YxGw==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779635,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABE\/3cAAEAR9qzAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":732,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779636,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ1AAEARYHTAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAMgSJqsAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":1588779636498,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0439{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779636,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABIkKQAAEARZWTAqAFNwKgB\/+EV4RUANJmxU3BvdFVkcDBukus1wI\/JPgABAARIlcIDfp+BivWMmwGHLE6mtUd\/uj\/4zNc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":1588779636498,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp"}
+0442{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABETKwAAEARCJTAqAFNW2wICG32AhEAMEyhL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8Sf7Krq21RXQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":734,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp"}
+0443{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEp8EAAEARpYXAqAFNW2wQAW32AhEAMJ\/zL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9gDcREEDsyHQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp"}
+0442{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE6yEAAEARZiPAqAFNW2wMA232AhIAMCHWL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+2+xugMe3kOw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp"}
+0442{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEy+YAAEARiWDAqAFNW2wIAW32AhUAMEz1L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+LrTXW6BYYCg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp"}
+0442{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEayUAAEAR5h3AqAFNW2wMBW32AhkAMN01L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+U8S0SsiW5Mg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":738,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp"}
+0443{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEEQsAAEARPDrAqAFNW2wQA232AhkAMF6eL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/Ppp3gSInx5A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1588779637543,"flow_last_seen":1588779637543,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp","ndpi": {"proto":"Telegram","category":"Chat"}}
+0423{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":83,"pkt":"EBMx8Tl2KDc3AG3ICABFAABF+GQAAP8RP6TAqAFNwKgBAdVDADUAMZzqakQBAAABAAAAAAAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAE=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":136,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB67hUAAEARCL\/AqAEBwKgBTQA11UMAZgAAakSBgwABAAAAAQAAAWIHX2Rucy1zZARfdWRwBG50b3ADb3JnAAAMAAHAGwAGAAEAAAA0ACkFZG5zZG\/AGwpwb3N0bWFzdGVywBt4ZvNkAACowAAAHCAAJOoAAAACWA==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":3,"flow_first_seen":1588779629079,"flow_last_seen":1588779637572,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.ntop","category":"Network"},"dns": {"query":"b._dns-sd._udp.ntop.org","num_queries":1,"num_answers":1,"reply_code":3,"query_type":12,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":742,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcg6JAADMRnoxbbAgBwKgBTQIVbfYASNOVL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJei6011ugWGAoAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":743,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc3cdAADMRRGBbbAgIwKgBTQIRbfYASNNBL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJeEn+yq6ttUV0AAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":744,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuRdAADQRZBVbbAwDwKgBTQISbfYASKh2L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJetvsboDHt5DsAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ6tAADQR9X9bbAwFwKgBTQIZbfYASGPWL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJelPEtErIluTIAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":746,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTfZAADYRyTZbbBADwKgBTQIZbfYASOU+L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJez6ad4EiJ8eQAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":747,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcdalAADYRoYVbbBABwKgBTQIRbfYASCaUL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB12rJeYA3ERBA7Mh0AAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1588779637830,"flow_last_seen":1588779637830,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp"}
+0606{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779637,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKg14AAAERg9XAqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":748,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1588779637830,"flow_last_seen":1588779637830,"flow_tot_l4_data_len":182,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0442{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":749,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEsZEAAEARo67AqAFNW2wICG32AhEAMJEzL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9ywagRVgIMjg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":750,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEUI8AAEAR\/LfAqAFNW2wQAW32AhEAMO1PL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/cV+9m8\/VZmQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":751,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEfdIAAEAR03LAqAFNW2wMA232AhIAMLZjL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/DysMOlAk5VA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEXu8AAEAR9lfAqAFNW2wIAW32AhUAMDI9L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8VVGaWhdbamw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":753,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE8IoAAEARYLjAqAFNW2wMBW32AhkAMMg9L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8fmAjwvVRcdw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE3R0AAEARcCfAqAFNW2wQA232AhkAMFmIL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/13zLCZd4eiw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83fxAADMRRAtbbAgIwKgBTQIRbfYAaLiFL+Sfp2xOtDPLzYKhu+piHsTJVQwtNQlN5BjrDFQS63ir9AxZ6eNFS99WQx\/aOquz913+WwsnsswlDvf7Dmn7fMUyoooiE0QiDgwcFtMOy\/TtVJkmOuKmka12UJawVN2u","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":756,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8g+xAADMRniJbbAgBwKgBTQIVbfYAaHl4L+Sfp2xOtDPLzYKhu+piHnNPvYpjojp\/MkUX0QWeuZLAgji5i60Q+QHWLARg0G5fOv6FKKcMY3G4W3IWnOIzWj8D57+vXqqgwp09rhgcqGRQHhvivW5XGcu1JpjHL+eY","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":757,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8ktgAAEARujTAqAFNW2wQA232AhkAaMjtL+Sfp2xOtDPLzYKhu+piHqRlzisMf4epbMc+wcg5TeSmixf3Vxk3wvxjgyFyv0Z7CHXwxlE7sAOR+Xd3ZilpdEsM9seQhGDpGfjow6wonpt3GiYLy5DQqsXK+J4Fo5v8","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":758,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcg\/JAADMRnjxbbAgBwKgBTQIVbfYASLfdL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeFVRmloXW2psAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABc3gBAADMRRCdbbAgIwKgBTQIRbfYASBbUL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJecsGoEVYCDI4AAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":760,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8rugAAEARph\/AqAFNW2wICG32AhEAaKqjL+Sfp2xOtDPLzYKhu+piHuViMv91uB2\/negp9kKpn10UMc4sI3CyLAm+6EO6izNmNxZ9T8tg8uzkP1BVSkfGJAo8VrIdgFn8zPE2iiS7fCcA8nWMS0b55B7Rfmo7l6va","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":761,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Q98AAEARCTDAqAFNW2wQAW32AhEAaFgsL+Sfp2xOtDPLzYKhu+piHsc6f+bfCWoRx7YPLNItPOBSZeaSGE3rAvB\/juDHZ80lS3RT6Vfnq1UK0W7DVLOsLPsLuTVeeopIPqyq262hA0DgzZBAWkTLEvHgaTG77uS5","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":762,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8iMoAAEARyELAqAFNW2wMA232AhIAaBGvL+Sfp2xOtDPLzYKhu+piHnsMeqhipGeCzQpwseCFn9\/BUTvW6IhCByDgDBviv9688iQOHSod13zlhIdeO18K7PHtib3\/95b5Pr5fzpkkUOD3KCaKBGwy202dq7GZPiuN","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":763,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8C\/EAAEARSR7AqAFNW2wIAW32AhUAaNWuL+Sfp2xOtDPLzYKhu+piHmiSsbI0NdV4Geqrhj2DBqoK\/kxYd8gzavjbOn690nNMI7srHBqbyi5F9y2D5mIq\/VNDmLKsgrbzzSTi5J8p1YExDKOCq7J2E6Ci7f9Deq3Y","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":764,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8OCoAAEARGOHAqAFNW2wMBW32AhkAaCAKL+Sfp2xOtDPLzYKhu+piHkEXFxiOVNxdGlAtuHnoS8DpH5FA43RGq80i7xa33IS0Nas1Cb7yrFjCtj\/HdyRB28q5jwSyZOZuAQrNrzzkZOerIfmZ4LSn5tED\/NYoVGMe","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8SIwAAEARBIHAqAFNW2wQA232AhkAaDmQL+Sfp2xOtDPLzYKhu+piHqjUPT2SG0sq4F0kESGrEqRjaNWHkRv03hQwbxqih34klV3fT5PI1MmnQHQbSTlEhEz\/ZMEIQ6My90Tj\/\/SkZkzsOMJP6LQEXDzIBfpQ3iOc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":766,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8J+BAADQR9SpbbAwFwKgBTQIZbfYAaH9tL+Sfp2xOtDPLzYKhu+piHnNQY7CI\/E1es6vcQVGg+RiNimGfmNmJeJPHiDsAWgK3UlEMVUvV2W\/OEsVub9CJx2Tp4lpSUwngx6iGuqnGzLipn4rnbnfLBQmnqXpC7fOu","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":767,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8uVtAADQRY7FbbAwDwKgBTQISbfYAaCwhL+Sfp2xOtDPLzYKhu+piHvAjMoWu\/hyR9QDJx47jb+LNbrA0ledOGk6Co9jx4rm5gXR1VPJTeL45LxXcejZXgjT7Uxeagur1Z25sjtt5Y3qABQT5y4p4O8Qob8Tp4af1","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":768,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83gxAADMRQ\/tbbAgIwKgBTQIRbfYAaB5dL+Sfp2xOtDPLzYKhu+piHv9QqbQ16nhxxN66tig8GqhWD3Q1yChaoqTnnabmIowJGm0AFG69H7tIcNnwBLTISNltF+C3Zt0Wm5n0cvpulzn8MhC+gAV+hCe4IrnCZNr6","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":769,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8TjNAADYRyNlbbBADwKgBTQIZbfYAaNqGL+Sfp2xOtDPLzYKhu+piHi473ek5HMA6JY5f9MtQXQVoS1Gxk9kHGg5N7qWf2fwuLlYZGz3eXHTcnt3xKWT59dSZxBEYGQ13+buO5mb\/i5MPlAaMl+ujqSYoHS+K53BI","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":770,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuVxAADQRY9BbbAwDwKgBTQISbfYASDwEL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJew8rDDpQJOVQAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":771,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcJ+JAADQR9UhbbAwFwKgBTQIZbfYASE3eL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeH5gI8L1UXHcAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":772,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8Oo4AAEARGrrAqAFNW2wICG32AhEAKA2nL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":773,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8SccAAEARA4jAqAFNW2wQAW32AhEAKAWuL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":774,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA85acAAEARa6XAqAFNW2wMA232AhIAKAmrL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8K8gAAEARKYfAqAFNW2wIAW32AhUAKA2qL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":776,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8H38AAEARMczAqAFNW2wMBW32AhkAKAmiL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":74,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA8LUEAAEARIAzAqAFNW2wQA232AhkAKAWkL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8depAADYRoSRbbBABwKgBTQIRbfYAaKg2L+Sfp2xOtDPLzYKhu+piHnpBSFbhYlk4qNsRtTdcxwAdJrPggJSWIC79FOIiZ\/6MKu7YAIFh2hpzJksbk6sn6pnFOcE5E27FnD+zi5b\/rvv8Dn86kJUmkW3jHAGRBCOF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTjlAADYRyPNbbBADwKgBTQIZbfYASN8oL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJe9d8ywmXeHosAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcde9AADYRoT9bbBABwKgBTQIRbfYASHLwL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJe3FfvZvP1WZkAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":781,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMoVMAAEARs2TAqAFNW2wICG32AhEAuCSIL+Sfp2xOtDPLzYKhu+piHny6aucbHAI9JHjeHEAkL2RcXApzRroDB8spH44S75VAvVgbogdJAhEmts1RmmbsBZEeYJxl+ktDJBwfEJnR1rfpQVOCEfsvQ9PgC7qcyC+uizK6cPth\/4jiII\/CWq8qLkqVVb1Pl7Y\/JLEPDQjUNXNQE5sav+U7KoXEJro+6+4YXsj\/ujkwrlSltXlvTy3mrbbc8GJpTnHFcea3TU42q9w=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":782,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMTzEAAEARBYfAqAFNW2wICG32AhEAuPEHL+Sfp2xOtDPLzYKhu+piHqgEx70pqnVJa86+6IVczt7obdxSQ2+xM31+4DykqNw7zmBVFcGGXzo+ktYEcdynJhJCMSCQQuxPMdBSUUnKA9T3T43thL4I5JqwItoC\/clRuThOyV7JAFfZ5k06XZ0vPW+rPyYkcdvH8J5cQkEzgUDunbd9VOp\/EbMvwhWRoMD\/Y7hlm8oFYUsLpQAvrArM3zIlsSOx6fIAIxcS+ddjLA0=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0611{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":783,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMQiAAAEAREpjAqAFNW2wICG32AhEAuCqhL+Sfp2xOtDPLzYKhu+piHvFFT5wdF\/mKWUTnucx2klwjUm00gH4Q\/RrHft5E4ArM9UOBK3x57ULXR\/uyX3\/ru+vuxs7508mtLDPrsl4T2J2PcmMpUDcKHnfEKVHjzqCJhN5jpts5R65osZytg0+kFZjbLqw6PJ05RFRr27q9EuvFM9sVTJzGqa4S\/Y5LX+2pMQBDs2GvuM5mlKSOicfk+AYnB7j1UrJl3wwCQrfOZJc=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":784,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":234,"pkt":"EBMx8Tl2KDc3AG3ICABFAADcu6wAAEARmPvAqAFNW2wICG32AhEAyDzvL+Sfp2xOtDPLzYKhu+piHseiTMirGxVEOYwt4aZRHWnrAmVA7DrWJc7SLpO0\/Ggy2y3zzkldKIjubWJM\/BRmQ0kk2jqOeShgbiLHvBXGEn8NIBseWxP+2JLj4CISHgwvdhGlGZ8pcL4JZpAZLYhLVi+eQjp8CAHK4PTrAFrDVrBr6DTvGge14H\/YYWhtbyEcAJqmHmuLFiDoPQueNxpLiPVQqebojVW46Vdb9ZVg8BiQphbLcCTI5gdWW8pm5+W9","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0612{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":785,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"EBMx8Tl2KDc3AG3ICABFAADMU+cAAEARANHAqAFNW2wICG32AhEAuJ6aL+Sfp2xOtDPLzYKhu+piHibjh\/SNdP7fTojC\/QCOqQzdbB7t3r8WOGti5bv1cwmOmeDYZ7QpDkqnOJtljurU\/2TC2oC1gkghmR5\/nHNG7rskJ9I1sDm5epWnapB\/nubh9vAR1qub8qNWbANxoKlsQq0ZjnApuGXMRKh+KuZq8yGtyuZVdaxApiGpYKqd96Cf+aq\/iBHdrAOgJ8dsPrVjs2DXBbLRH5st4EcrXoIseiI=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":786,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE8sgAAEARYnfAqAFNW2wICG32AhEAMOljL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/9cha7rRBj9A==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":787,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE4D8AAEARbQfAqAFNW2wQAW32AhEAMMdtL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+371u+lwCUgQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":788,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEXjcAAEAR8w3AqAFNW2wMA232AhIAMOTfL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9IDwLUV1uDfA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":789,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEevAAAEAR2lbAqAFNW2wIAW32AhUAMMPbL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8EIOHhyLmcAg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEoW8AAEARr9PAqAFNW2wMBW32AhkAMAnQL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9s6cXs2eT0Bg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":791,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEkjoAAEARuwrAqAFNW2wQA232AhkAMIk2L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/93DJMcVXsduQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":792,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB83lRAADMRQ7NbbAgIwKgBTQIRbfYAaF5PL+Sfp2xOtDPLzYKhu+piHmhw98SQt3CCpdK36YNs9EtYXS4Hh2qvneJyMgMDwi4WWB+RGjSF\/1rvFbhAuieTcnEHcoxS2jgUCR9f+LXvhFUha4p6t5d1BlO9YugEyLxc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":793,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8hCZAADMRnehbbAgBwKgBTQIVbfYAaP9sL+Sfp2xOtDPLzYKhu+piHrlKKjndr67tpOy3Kou6g3jhJ9GnPqKZTQe3r2i2mTDvyJMRVVjQGtlBidkcDN1v4knZSfhk5Wot0O8aJYPT\/DnBsvFev03MNlon6fXHuwt7","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABchCtAADMRngNbbAgBwKgBTQIVbfYASEl8L+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeBCDh4ci5nAIAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":799,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8iM4AAEARxEDAqAFNW2wQAW32AhEAaBntL+Sfp2xOtDPLzYKhu+piHqKgJ+oCHBcjSJKKr5HZ4cmuIzZ5QU1br1rn0N\/Ysdssz0nVW8FXgvHUEbTjdJnDYzS\/xewOHIi8YGrS8jiAywC1h59wqUyLo+kAOJ+YWKks","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8pyEAAEARqevAqAFNW2wMA232AhIAaEMXL+Sfp2xOtDPLzYKhu+piHt1BgncZjBvyVVx4ivH7OCSEnAO3Dxu+u2aejaJGiKJH1NKlqEHPnwNCqjSiTbQZNoBm1clCPTijW0igWO0fl7l0pJHT\/0D5xjW4J3Kto3A7","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":39,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":801,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8RW8AAEARD6DAqAFNW2wIAW32AhUAaNMBL+Sfp2xOtDPLzYKhu+piHqe73dOumPLfJSdMeZS1DsQW6\/hpCy8DOSZ7DyJs7Ou9HareSiWgXLBcZQvsdeLiTxpSTnmqV00WHGguWFKWyWVfRY5Nx7kBKf\/Jn6IzDsNR","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":802,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8Kg0AAEARJv7AqAFNW2wMBW32AhkAaP5XL+Sfp2xOtDPLzYKhu+piHgOPiMlXEBH2Hm1OwlollyXlXhdwNFoH5U9G2VbG56siGfNC0d6DOY5noCYiaS78b6rXrnvPapdco2WKUjZjtmLHsD28hLkB7vvp1+GNtLLV","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0504{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8zP4AAEARgA7AqAFNW2wQA232AhkAaNTdL+Sfp2xOtDPLzYKhu+piHsUuBWMC3GKDwrJX6QsLdT9bHWj2yfFabeAAKvc9LJ3OBd0PIi\/vNQOCvCfffF+w57IIQhfbo6rZc\/7BnirgSzJ3729rb2DhCvep\/\/qS\/Fx\/","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":39,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":805,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMhDZAADMRnghbbAgBwKgBTQIVbfYAOAOvL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KC5AADQR9NxbbAwFwKgBTQIZbfYAaG2iL+Sfp2xOtDPLzYKhu+piHo8sLmkfrl7ji8ssTNFVgOu4z55A7VzRPGaC4f3WPJRB+PPJR\/h2MvptMcTb12DbgdkLkQDMOj1teznsqjcYqTqUMAh3Ke98TkeErPX++8dy","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":808,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8uZlAADQRY3NbbAwDwKgBTQISbfYAaH\/0L+Sfp2xOtDPLzYKhu+piHjIfwpIL1wKLcHzMYh+xoWcLsHQ2lNoRZgVdXUWqa0KaBEwz3aqWqDTebpLtJAJF+biB0KnkIqPYfC+XX4EQfRvbeaBppw3Er7lYgo\/OOZdp","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":39,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":809,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8hENAADMRnctbbAgBwKgBTQIVbfYAaAGZL+Sfp2xOtDPLzYKhu+piHiEMfUFe+PMxqcIiZWMmkTlf1fxdqrIfyW9N0QHJdcQxlwnAG8yV\/9Q+Hh7zEhjjQd7Ex4oukZaHug+MKkJKEEMG3PUbPus5GwLWuLUlWZbc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":811,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8Tn1AADYRyI9bbBADwKgBTQIZbfYAaFwUL+Sfp2xOtDPLzYKhu+piHmPDqdoeLJkU1AYttaYLE0PH1SpH5oL3Hj1+9PFZKklvc94hUkGqJh2QP\/diwnAtNtpfSv2OLF+gZFdcU1IpvwmlN6EFmXAK18VdX06vx2wb","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcuZpAADQRY5JbbAwDwKgBTQISbfYASGqAL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJeSA8C1Fdbg3wAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcKDRAADQR9PZbbAwFwKgBTQIZbfYASI9wL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJebOnF7Nnk9AYAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":814,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8diVAADYRoOlbbBABwKgBTQIRbfYAaATwL+Sfp2xOtDPLzYKhu+piHqThFshYnXPLBqfhUcsaXL5Ghw5ksQ5e9GmM63l9zee9+3bwzkUUVhUaXEwpXmbmbPdSuU\/FAVhmII4RufSvgUlQYaM7XjQdDFzZ2KMF5fWF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_id":39,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":815,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMhElAADMRnXVbbAgBwKgBTQIVbfYAuH0KL+Sfp2xOtDPLzYKhu+piHixNygcB4b4oKSFHhrapF8CbNkqeqk6L1snNgqZ8koHpvhePCrDDjTmwRkiYvVtkCNrclG5doj1B7ykgw32SFoSnxp\/umzNR+6NcVPUD8wpVRe8W9tXH2pcdBUM6tie5qHXlIliS\/0V+A0XAn8Oo09n\/brGsdtVr5gtEgu+hcsVWk6HklB0gzfF4OrlkLxxrDR+JWfhtezmMFx\/HYfikSwU=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":816,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcTn5AADYRyK5bbBADwKgBTQIZbfYASA7XL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJedwyTHFV7HbkAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMKDhAADQR9QJbbAwFwKgBTQIZbfYAOP+mL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":106,"pkt":"KDc3AG3IEBMx8Tl2CABFAABcditAADYRoQNbbBABwKgBTQIRbfYASE0OL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/8dyFcB22rJet+9bvpcAlIEAAAAAAAAAAAAA\/\/9XC83DTfQAAA==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMuaFAADQRY5tbbAwDwKgBTQISbfYAOP+vL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMToZAADYRyLZbbBADwKgBTQIZbfYAOPuoL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":90,"pkt":"KDc3AG3IEBMx8Tl2CABFAABMdi1AADYRoRFbbBABwKgBTQIRbfYAOPuyL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/xw32SdXC83DTfQAAFcLzcN86QAA","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":39,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":218,"pkt":"KDc3AG3IEBMx8Tl2CABFAADMhFlAADMRnWVbbAgBwKgBTQIVbfYAuIVAL+Sfp2xOtDPLzYKhu+piHoYrCrVn58DKuKQgFCEZxi1S56PaW8g48ILriQrfDxO7q+e8I8hsLteA3M+FKIknbVFzjGlGDmYwNQXcrpIvgqCL9ZcBEAkxtwUXpMCCPPdvmlVu3VGEqVon9QYJR823nJY04Sl5gUCtDLqeW54nZFid0aAYpSVo2TXskO4cun1kg\/uCOWjOBuXoPD0jXKT96d3kNIeWnmU9iQU7taufGP8=","pkt_caplen":218,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779638,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKuMQAAAERTm\/AqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEq\/IAAEARoVTAqAFNW2wQAW32AhEAMFFHL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/8Y1ONYmQEgKA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEAiEAAEARTyTAqAFNW2wMA232AhIAMMOyL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/\/V94km42MEZg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":838,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABE2BEAAEAReTHAqAFNW2wMBW32AhkAMBHuL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/+qO5MANI6G2Q==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":82,"pkt":"EBMx8Tl2KDc3AG3ICABFAABEChcAAEARQy7AqAFNW2wQA232AhkAMMaxL+Sfp2xOtDPLzYKhu+piHv\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/7\/\/\/9K9sn\/VbHVOg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8GPcAAEARNBjAqAFNW2wQAW32AhEAaK6iL+Sfp2xOtDPLzYKhu+piHh2PbidyD9Pf1O+T+Z562PeR1DtGIsW0mqS9ri+KmdH4ghXfG88DFq4A8OotXX1tX6WY99wWbtl9XZn6xLMw9PSQkMuYpY8Cv+H2cjkPb120","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0501{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8l\/0AAEARuQ\/AqAFNW2wMA232AhIAaBYjL+Sfp2xOtDPLzYKhu+piHsUUdzWSq1JnQgHuwL5ZzFMZZUBkOgRAnQ06mV54nHJajHrw7JhJwP3pu854HgpQ8PBvE4mqy42\/yBfG6DvXpdhYfDWpcRMy5Iccl3fM9+eE","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB8soYAAEARnoTAqAFNW2wMBW32AhkAaK6EL+Sfp2xOtDPLzYKhu+piHpNqf0EGr3ouAM5o5Ho9IqKddcI\/Z\/b49j1yM7XDT90BJismgiRZXHF2EATHEoy8Lfiy7GCHIU14gsQujHjWVVo1d9xKDk2YVJGvI62nEIlc","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB87a4AAEARX17AqAFNW2wQA232AhkAaI81L+Sfp2xOtDPLzYKhu+piHgzmMNcDOZ2PoiHjW2yYnS6ePj1BGRdJoM8nFXnzaBh75yJzDzYLzBbUH1ZxWuxSCc8tLVzq402LbPVjqpmjcVElk5pqYd5uYnj2wmDnoeHG","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1588779639103,"flow_last_seen":1588779639103,"flow_tot_l4_data_len":88,"flow_min_l4_data_len":88,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp"}
+0478{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":122,"pkt":"EBMx8Tl2KDc3AG3ICABFAABsKQMAAEARarrAqAFNVwvNw2326XwAWFNj2ajstQcU9VmrWsN2RmlsiodFzsmW0mXr5Gv8o0f2aR9YWQKIE34PAz\/0T4VwEA0DXBRrws2ycCoPovMV6p5YsfJULcJS2cwqBKkU3Xys+SQ=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8KINAADQR9IdbbAwFwKgBTQIZbfYAaHLEL+Sfp2xOtDPLzYKhu+piHuRszQ41FbqXYbZZXAVFrGnz5aD6BIy2wA8WvWucaYHtk\/B8UWoe98wisy7vNTjdhvmyB6Y3Dlp4+tSorsm+9d+JCobletUdU3L\/e04ZzdCo","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8ugZAADQRYwZbbAwDwKgBTQISbfYAaKtUL+Sfp2xOtDPLzYKhu+piHrTHFdAFs\/SBIX5Iprv7doYCM0HACNVv0QlFf11rJbUDaIETC76BFd1FamkhtAFe0ooVzY\/LfUHdb+DFFh5kJjNqEmRDzDoNYGDvpKOPyWnW","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":138,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB8dmtAADYRoKNbbBABwKgBTQIRbfYAaFLeL+Sfp2xOtDPLzYKhu+piHlscntLRwoT3m1vJ\/doOEVvFUn\/+8frV46loAzRNGpVujhcnwTinUiHLcNG1\/K\/I\/bmsFhT6re8Lpl3\/xHBr3aApF0Ou1qQ9HrHg\/1stgsQm","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0606{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779639,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKAckAAAERBWvAqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":915,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779640,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABMml0AAEAR+X\/AqAFNVwvNw2326XwAOMsSsmK\/vWlJHJOqyuLBG8kWaad6RX1I27GljGkLPfHdr93dNQ8yPA7ggZLrS4Zn185b","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0607{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779640,"pkt_len":216,"pkt":"AQBef\/\/6KDc3AG3ICABFAADKXAQAAAERqy\/AqAFN7\/\/\/+sufB2wAtsJkTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KVVNFUi1BR0VOVDogR29vZ2xlIENocm9tZS84My4wLjQxMDMuMzQgTWFjIE9TIFgNCg0K","pkt_caplen":216,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779641,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEbZMAAEARiJHAqAE1wKgB\/+EV4RUAMNBmU3BvdFVkcDClWtsnvt2XzwABAACyJIr8D\/N2Z9WO7tpCHKgrvJhaBg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779641,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ5AAEARYHPAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGANQMhaoAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0743{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1026,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779642,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEymIIAAP8Rnk\/AqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0505{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779643,"pkt_len":142,"pkt":"AQBeAAD7wJrQLWJ0CABFAACAWI0AAP8RwAbAqAE14AAA+xTpFOkAbI7lAAAAAAABAAEAAAABDF9zbGVlcC1wcm94eQRfdWRwBWxvY2FsAAAMAAHADAAMAAEAABFtABIPNTAtMzUtMTAtNzAuMSAxwAwAACkFoAAAEZQAEgAEAA4AMeKa0C1idMCa0C1idA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779643,"pkt_len":162,"pkt":"MzMAAAD7wJrQLWJ0ht1gBqDxAGwR\/\/6AAAAAAAAAGKCkEok1wBv\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsLTwAAAAAAAEAAQAAAAEMX3NsZWVwLXByb3h5BF91ZHAFbG9jYWwAAAwAAcAMAAwAAQAAEW0AEg81MC0zNS0xMC03MC4xIDHADAAAKQWgAAARlAASAAQADgAx4prQLWJ0wJrQLWJ0","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJNSEAAAER4arAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTiPpAAAERTLfAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABEsxIAAEARQxLAqAE1wKgB\/+EV4RUAMB\/7U3BvdFVkcDCyd4qJW50BwwABAABMUeIxMdBB4jsY0JrM5ZhQFz1Lqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":1588779645381,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp"}
+0543{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa3qgAAAERKNPAqAE17\/\/\/+sYKB2wAhlIKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1588779645381,"flow_last_seen":1588779645381,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0454{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779645,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZEhgAAAIRA6TAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779646,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEyaYkAAP8RzUjAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779646,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGJ9AAEARYHLAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAHA28acAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779646,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZib4AAAIRi\/3AqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABExqMAAEARL4HAqAE1wKgB\/+EV4RUAMB\/7U3BvdFVkcDCyd4qJW50BwwABAABMUeIxMdBB4jsY0JrM5ZhQFz1Lqg==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaUgcAAAERtXTAqAE17\/\/\/+sYKB2wAhlIKTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJgtEAAAERk\/rAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779647,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTigFAAAERS7DAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1588779648840,"flow_last_seen":1588779648840,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp"}
+0544{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779648,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaCVUAAAER\/ibAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1588779648840,"flow_last_seen":1588779648840,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0428{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779648,"pkt_len":87,"pkt":"AQBeAAD7wJrQLWJ0CABFAABJAsIAAAERFArAqAE14AAA+xTpFOkANQuaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779648,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTiqZAAAERSwvAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779649,"pkt_len":82,"pkt":"\/\/\/\/\/\/\/\/wJrQLWJ0CABFAABElPEAAEARYTPAqAE1wKgB\/+EV4RUAMJohU3BvdFVkcDD0Jfgh9tR1aAABAAC\/vOrzE8GBHXmaYexmJHVX5sZgYw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779649,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZzgYAAAIRR7XAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779649,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEycgkAAP8RxMjAqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":90,"pkt":"EBMx8Tl2KDc3AG3ICABFAABM8zMAAEARoKnAqAFNVwvNw2326XwAOBQNt7NLZEiPyb9nJ25aFShQjjbK9tSAqF2RZJuCl4MIgiF4TeaDrkRovC99CpyADzRp","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":103,"pkt":"AQBeAAD7wJrQLWJ0CABFAABZgjsAAAIRk4DAqAE14AAA+xTpFOkARfrKAAEAAAACAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQlfQ0MzMkU3NTMEX3N1YsAMAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1588779650651,"flow_last_seen":1588779650651,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":81,"pkt":"EBMx8Tl2KDc3AG3ICABFAABD6GYAAP8RT6TAqAFNwKgBAeT3ADUAL99XO7EBAAABAAAAAAAACXRlbGVtZXRyeQdkcm9wYm94A2NvbQAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1588779650651,"flow_last_seen":1588779650651,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"telemetry.dropbox.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1588779650652,"flow_last_seen":1588779650652,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":85,"pkt":"EBMx8Tl2KDc3AG3ICABFAABHeaUAAP8RvmHAqAFNwKgBAcF9ADUAM+X9HKUBAAABAAAAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1588779650652,"flow_last_seen":1588779650652,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0450{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":101,"pkt":"KDc3AG3IEBMx8Tl2CABFAABXLE1AADkRkarAqAEBwKgBTQA1wX0AQwAAHKWBgAABAAEAAAAABWU0NTE4BGRzY3gKYWthbWFpZWRnZQNuZXQAAAEAAcAMAAEAAQAAAAcABFx69t8=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1588779650652,"flow_last_seen":1588779650666,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"e4518.dscx.akamaiedge.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"92.122.246.223"}}
+0478{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":123,"pkt":"KDc3AG3IEBMx8Tl2CABFAABtxO5AADkR+PLAqAEBwKgBTQA15PcAWQAAO7GBgAABAAIAAAAACXRlbGVtZXRyeQdkcm9wYm94A2NvbQAAAQABwAwABQABAAAAcAAOCXRlbGVtZXRyeQF2wBbAMwABAAEAAAA8AASifRMJ","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1588779650651,"flow_last_seen":1588779650681,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":47,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Dropbox","category":"Cloud"},"dns": {"query":"telemetry.dropbox.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"162.125.19.9"}}
+0543{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACaJ+EAAAER35rAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0786{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779650,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTivJAAAERSr\/AqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779651,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzGKBAAEARYHHAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGAJsQpYUAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779652,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACajVgAAAEReiPAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779652,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTjH1AAAERSTTAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0743{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779653,"pkt_len":320,"pkt":"jP5XIzfkKDc3AG3ICABFAAEy5oIAAP8RUE\/AqAFNwKgBSxTpFOkBHhkOAACEAAAAAAEAAAAED19jb21wYW5pb24tbGluawRfdGNwBWxvY2FsAAAMAAEAABGUABANTHVjYeKAmXMgaU1hY8AMwDIAIYABAAAAeAATAAAAAMAFCkx1Y2FzLWlNYWPAIcAyABCAAQAAEZQAWBZycEJBPTM5OjJBOjg4OkFDOjQxOkFCCnJwVnI9MTUyLjERcnBIST1mOWM0NmM2ZGQwN2QRcnBITj0zYzVkYzVjZTk1NzgRcnBIQT04Y2E4Y2I3MzFjMWMNTHVjYeKAmXMgaU1hYwxfZGV2aWNlLWluZm\/AHAAQAAEAABGUABoObW9kZWw9aU1hYzExLDMKb3N4dmVycz0xN8BUAAGAAQAAAHgABMCoAU0=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779654,"pkt_len":168,"pkt":"AQBef\/\/6wJrQLWJ0CABFAACa7R8AAAERGlzAqAE17\/\/\/+txAB2wAhjvUTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","pkt_oversize":false,"pkt_ts":1588779654,"pkt_len":353,"pkt":"AQBeAAD7eCjKBfrMCABFAAFTjhBAAAERR6HAqAFF4AAA+xTpFOkBP9DmAACEAAAAAAEAAAADEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAABAAAAeAAvEXNvbm9zNzgyOENBMDVGQUNDEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MQX3Nwb3RpZnktY29ubmVjdARfdGNwBWxvY2FsAAAQgAEAABGUAB0LVkVSU0lPTj0xLjAQQ1BhdGg9L3Nwb3RpZnl6YxFzb25vczc4MjhDQTA1RkFDQxBfc3BvdGlmeS1jb25uZWN0BF90Y3AFbG9jYWwAACGAAQAAAHgAHwAAAAAFeBFzb25vczc4MjhDQTA1RkFDQwVsb2NhbAARc29ub3M3ODI4Q0EwNUZBQ0MFbG9jYWwAAAGAAQAAAHgABMCoAUU=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1588779629044,"flow_last_seen":1588779629045,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":5812,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1588779615019,"flow_last_seen":1588779615032,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61120,"dst_port":53,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1588779625981,"flow_last_seen":1588779625981,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":363,"flow_max_l4_data_len":363,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":0,"flow_packet_id":12,"flow_first_seen":1588779596451,"flow_last_seen":1588779651446,"flow_tot_l4_data_len":3444,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1588779601222,"flow_last_seen":1588779632305,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"255.255.255.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":18,"flow_packet_id":123,"flow_first_seen":1588779616036,"flow_last_seen":1588779620617,"flow_tot_l4_data_len":22264,"flow_min_l4_data_len":40,"flow_max_l4_data_len":264,"flow_avg_l4_data_len":181,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.7","src_port":23174,"dst_port":521,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":19,"flow_packet_id":21,"flow_first_seen":1588779616036,"flow_last_seen":1588779618928,"flow_tot_l4_data_len":1624,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":23174,"dst_port":523,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":20,"flow_packet_id":20,"flow_first_seen":1588779616036,"flow_last_seen":1588779619034,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":23174,"dst_port":527,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":21,"flow_packet_id":21,"flow_first_seen":1588779616036,"flow_last_seen":1588779618946,"flow_tot_l4_data_len":1624,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.1","src_port":23174,"dst_port":536,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":23,"flow_packet_id":20,"flow_first_seen":1588779616036,"flow_last_seen":1588779619007,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.4","src_port":23174,"dst_port":538,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":22,"flow_packet_id":20,"flow_first_seen":1588779616036,"flow_last_seen":1588779618748,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":23174,"dst_port":538,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1588779619914,"flow_last_seen":1588779619916,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":47127,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1588779615962,"flow_last_seen":1588779615962,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4dc:edec:5b0c:a661","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1588779601223,"flow_last_seen":1588779632305,"flow_tot_l4_data_len":944,"flow_min_l4_data_len":472,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":472,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1588779611355,"flow_last_seen":1588779611657,"flow_tot_l4_data_len":399,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"239.255.255.250","src_port":57916,"dst_port":1900,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1588779600828,"flow_last_seen":1588779600842,"flow_tot_l4_data_len":116,"flow_min_l4_data_len":50,"flow_max_l4_data_len":66,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":61631,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":29,"flow_packet_id":3,"flow_first_seen":1588779626394,"flow_last_seen":1588779626394,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1588779626393,"flow_last_seen":1588779626393,"flow_tot_l4_data_len":209,"flow_min_l4_data_len":209,"flow_max_l4_data_len":209,"flow_avg_l4_data_len":209,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.43","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":47,"flow_packet_id":2,"flow_first_seen":1588779650652,"flow_last_seen":1588779650666,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":51,"flow_max_l4_data_len":67,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49533,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1588779603320,"flow_last_seen":1588779603320,"flow_tot_l4_data_len":286,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.53","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":6,"flow_packet_id":9,"flow_first_seen":1588779597291,"flow_last_seen":1588779653520,"flow_tot_l4_data_len":2574,"flow_min_l4_data_len":286,"flow_max_l4_data_len":286,"flow_avg_l4_data_len":286,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.75","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":4,"flow_packet_id":120,"flow_first_seen":1588779596708,"flow_last_seen":1588779655297,"flow_tot_l4_data_len":20763,"flow_min_l4_data_len":108,"flow_max_l4_data_len":435,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.75","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":3,"flow_packet_id":7,"flow_first_seen":1588779596465,"flow_last_seen":1588779654853,"flow_tot_l4_data_len":2233,"flow_min_l4_data_len":319,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":319,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.69","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1588779615961,"flow_last_seen":1588779615961,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.52","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":2,"flow_packet_id":18,"flow_first_seen":1588779596464,"flow_last_seen":1588779654853,"flow_tot_l4_data_len":1460,"flow_min_l4_data_len":53,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1588779639103,"flow_last_seen":1588779650102,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":56,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":43,"flow_packet_id":3,"flow_first_seen":1588779639103,"flow_last_seen":1588779650102,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":56,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":28150,"dst_port":59772,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1588779636498,"flow_last_seen":1588779636498,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":13,"flow_packet_id":8,"flow_first_seen":1588779608134,"flow_last_seen":1588779649019,"flow_tot_l4_data_len":384,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1588779637830,"flow_last_seen":1588779640832,"flow_tot_l4_data_len":728,"flow_min_l4_data_len":182,"flow_max_l4_data_len":182,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"239.255.255.250","src_port":52127,"dst_port":1900,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1588779617174,"flow_last_seen":1588779618677,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":56,"flow_max_l4_data_len":88,"flow_avg_l4_data_len":72,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"87.11.205.195","src_port":23174,"dst_port":60723,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":34,"flow_packet_id":3,"flow_first_seen":1588779634764,"flow_last_seen":1588779634797,"flow_tot_l4_data_len":2752,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":917,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":50822,"dst_port":443,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1588779628757,"flow_last_seen":1588779628804,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":39,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":49764,"dst_port":53,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1588779596464,"flow_last_seen":1588779598465,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":54306,"dst_port":1900,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1588779648840,"flow_last_seen":1588779654853,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":56384,"dst_port":1900,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":37,"flow_packet_id":24,"flow_first_seen":1588779637543,"flow_last_seen":1588779651686,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.1","src_port":28150,"dst_port":529,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":36,"flow_packet_id":298,"flow_first_seen":1588779637543,"flow_last_seen":1588779654458,"flow_tot_l4_data_len":57280,"flow_min_l4_data_len":40,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":192,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.8","src_port":28150,"dst_port":529,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":38,"flow_packet_id":24,"flow_first_seen":1588779637543,"flow_last_seen":1588779651659,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.3","src_port":28150,"dst_port":530,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":39,"flow_packet_id":288,"flow_first_seen":1588779637543,"flow_last_seen":1588779654458,"flow_tot_l4_data_len":59616,"flow_min_l4_data_len":40,"flow_max_l4_data_len":296,"flow_avg_l4_data_len":207,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.8.1","src_port":28150,"dst_port":533,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":41,"flow_packet_id":25,"flow_first_seen":1588779637543,"flow_last_seen":1588779651680,"flow_tot_l4_data_len":1944,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":77,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.16.3","src_port":28150,"dst_port":537,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":40,"flow_packet_id":24,"flow_first_seen":1588779637543,"flow_last_seen":1588779651645,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":40,"flow_max_l4_data_len":104,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"91.108.12.5","src_port":28150,"dst_port":537,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1588779607374,"flow_last_seen":1588779607388,"flow_tot_l4_data_len":216,"flow_min_l4_data_len":41,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":52118,"dst_port":53,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":10,"flow_packet_id":5,"flow_first_seen":1588779603292,"flow_last_seen":1588779643386,"flow_tot_l4_data_len":675,"flow_min_l4_data_len":108,"flow_max_l4_data_len":204,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::18a0:a412:8935:c01b","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1588779645381,"flow_last_seen":1588779647380,"flow_tot_l4_data_len":268,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.53","dst_ip":"239.255.255.250","src_port":50698,"dst_port":1900,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1588779650651,"flow_last_seen":1588779650681,"flow_tot_l4_data_len":136,"flow_min_l4_data_len":47,"flow_max_l4_data_len":89,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":58615,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":32,"flow_packet_id":3,"flow_first_seen":1588779629079,"flow_last_seen":1588779637572,"flow_tot_l4_data_len":200,"flow_min_l4_data_len":49,"flow_max_l4_data_len":102,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.1","src_port":54595,"dst_port":53,"l4_proto":"udp"}
+0511{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":24,"flow_packet_id":301,"flow_first_seen":1588779617174,"flow_last_seen":1588779629315,"flow_tot_l4_data_len":61960,"flow_min_l4_data_len":56,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp","ndpi": {"proto":"Unknown"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":24,"flow_packet_id":301,"flow_first_seen":1588779617174,"flow_last_seen":1588779629315,"flow_tot_l4_data_len":61960,"flow_min_l4_data_len":56,"flow_max_l4_data_len":280,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"192.168.1.52","src_port":23174,"dst_port":31480,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":33,"flow_packet_id":3,"flow_first_seen":1588779634762,"flow_last_seen":1588779634795,"flow_tot_l4_data_len":2752,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":917,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.77","dst_ip":"216.58.205.68","src_port":61974,"dst_port":443,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap","flow_id":5,"flow_packet_id":120,"flow_first_seen":1588779596708,"flow_last_seen":1588779655298,"flow_tot_l4_data_len":20763,"flow_min_l4_data_len":108,"flow_max_l4_data_len":435,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::4ba:91a:7817:e318","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/telegram.pcap"}
diff --git a/tests/result/nDPId_teredo.pcap.txt b/tests/result/nDPId_teredo.pcap.txt
new file mode 100644
index 000000000..5a98a0ae2
--- /dev/null
+++ b/tests/result/nDPId_teredo.pcap.txt
@@ -0,0 +1,41 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1438853615305,"flow_last_seen":1438853615305,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.106","dst_ip":"194.136.28.76","src_port":52513,"dst_port":3544,"l4_proto":"udp"}
+0458{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853615,"pkt_len":103,"pkt":"bEFqjICJABsXAAEVCABFAABZWboAAH4R6SsKcBBqwogcTM0hDdgARX2HAAEAALEbP+pGqa\/pAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1438853615305,"flow_last_seen":1438853615305,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.106","dst_ip":"194.136.28.76","src_port":52513,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","category":"Network"}}
+0533{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853615,"pkt_len":151,"pkt":"ABsXAAEVbEFqjICJCABFAACJMb4AAHIRHPjCiBxMCnAQag3YzSEAdV9uAAEAALEbP+pGqa\/pAAAAMt5G+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZJ0AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEz\/AAAAACABAA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1438853619792,"flow_last_seen":1438853619792,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.89","dst_ip":"194.136.28.76","src_port":60381,"dst_port":3544,"l4_proto":"udp"}
+0457{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853619,"pkt_len":103,"pkt":"bEFqjICJABsXAAEVCABFAABZKFgAAH4RGp8KcBBZwogcTOvdDdgARWZ6AAEAAJXRHBBSCtwOAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1438853619792,"flow_last_seen":1438853619792,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.89","dst_ip":"194.136.28.76","src_port":60381,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","category":"Network"}}
+0532{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853619,"pkt_len":151,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcAAAHIRHQfCiBxMCnAQWQ3Y690AdQSAAAEAAJXRHBBSCtwOAAAAFCJG+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZJ0AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEz\/AAAAACABAA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1438853629357,"flow_last_seen":1438853629357,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.92","dst_ip":"194.136.28.76","src_port":63448,"dst_port":3544,"l4_proto":"udp"}
+0457{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853629,"pkt_len":103,"pkt":"bEFqjICJABsXAAEVCABFAABZf5wAAH4Rw1cKcBBcwogcTPfYDdgAReM8AAEAAPs1qOhE924kAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1438853629357,"flow_last_seen":1438853629357,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.92","dst_ip":"194.136.28.76","src_port":63448,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","category":"Network"}}
+0531{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853629,"pkt_len":151,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcEAAHIRHQPCiBxMCnAQXA3Y99gAdXxOAAEAAPs1qOhE924kAAAACCdG+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZL4AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEwAAAAAAAAAAA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1438853632713,"flow_last_seen":1438853632713,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.64","dst_ip":"194.136.28.76","src_port":56154,"dst_port":3544,"l4_proto":"udp"}
+0458{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853632,"pkt_len":103,"pkt":"bEFqjICJABsXAAEVCABFAABZcmgAAH4R0KcKcBBAwogcTNtaDdgARUt\/AAEAABh7537NjT4KAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1438853632713,"flow_last_seen":1438853632713,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.64","dst_ip":"194.136.28.76","src_port":56154,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","category":"Network"}}
+0531{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853632,"pkt_len":151,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcIAAHIRHR7CiBxMCnAQQA3Y21oAdWZ0AAEAABh7537NjT4KAAAAJKVG+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYARiEAAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEy6FgeABnFWlQ==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1438853633749,"flow_last_seen":1438853633749,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.67","dst_ip":"194.136.28.76","src_port":51812,"dst_port":3544,"l4_proto":"udp"}
+0434{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853633,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQa1QAAH4R18EKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAA6wgo8LJvAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1438853633749,"flow_last_seen":1438853633749,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.67","dst_ip":"194.136.28.76","src_port":51812,"dst_port":3544,"l4_proto":"udp","ndpi": {"proto":"Teredo","category":"Network"}}
+0435{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853633,"pkt_len":95,"pkt":"bEFqjICJABsXAAEVCABFAABRa1UAAH4R178KcBBDwogcTMpkDdgAPZLqYAAAAAANOv8gAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTIAAbVcAAQaF2tytrco=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853633,"pkt_len":95,"pkt":"ABsXAAEVbEFqjICJCABFAABRMcMAAHIRHVLCiBxMCnAQQw3YymQAPZNqYAAAAAANOn8gAsKIHEwAAAAAAADCiBxMIAEAAMKIHEwg8zWbRvk\/RoEAbFcAAQaF2tytrco=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853635,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQa2cAAH4R164KcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAGb3LNOF2AAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853637,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQa5MAAH4R14IKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAvSDg4ChnAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853638,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQa5oAAH4R13sKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTIAAXeU5DFCjwogcTA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853638,"pkt_len":90,"pkt":"ABsXAAEVbEFqjICJCABFAABMMcQAAHIRHVbCiBxMCnAQQw3YymQAOBHZAADyJz1347NgAAAAAAA7Ff6AAAAAAAAAgADyJz1347MgAQAAwogcTCDzNZtG+T9G","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853638,"pkt_len":82,"pkt":"bEFqjICJABsXAAEVCABFAABEa6AAAH4R14EKcBBDwogcTMpkDdgAMCU8YAAAAAAAOxUgAQAAwogcTCDzNZtG+T9G\/oAAAAAAAACAAPInPXfjsw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853638,"pkt_len":94,"pkt":"ABsXAAEVbEFqjICJCABFAABQMcUAAHIRHVHCiBxMCnAQQw3YymQAPJNsYAAAAAAMOn8gAsKIHEwAAAAAAADCiBxMIAEAAMKIHEwg8zWbRvk\/RoEAXOU5DFCjwogcTA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853647,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQbAIAAH4R1xMKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAhAc57whyAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853647,"pkt_len":95,"pkt":"bEFqjICJABsXAAEVCABFAABRbAMAAH4R1xEKcBBDwogcTMpkDdgAPZLqYAAAAAANOv8gAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTIAAbVUAAQaH2tytrco=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853647,"pkt_len":95,"pkt":"ABsXAAEVbEFqjICJCABFAABRMcYAAHIRHU\/CiBxMCnAQQw3YymQAPZNqYAAAAAANOn8gAsKIHEwAAAAAAADCiBxMIAEAAMKIHEwg8zWbRvk\/RoEAbFUAAQaH2tytrco=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853649,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQbCkAAH4R1uwKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAAWgFHGCVPAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853651,"pkt_len":94,"pkt":"bEFqjICJABsXAAEVCABFAABQbEIAAH4R1tMKcBBDwogcTMpkDdgAPJPWYAAAAAAMOhUgAQAAwogcTCDzNZtG+T9GIALCiBxMAAAAAAAAwogcTYAA1cXm4AnCAAAAAA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853653,"pkt_len":103,"pkt":"bEFqjICJABsXAAEVCABFAABZW7oAAH4R5ysKcBBqwogcTM0hDdgARX2HAAEAALEbP+pGqa\/pAGAAAAAACDr\/\/oAAAAAAAAAAAP\/\/\/\/\/\/\/v8CAAAAAAAAAAAAAAAAAAKFAH04AAAAAA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","pkt_oversize":false,"pkt_ts":1438853653,"pkt_len":151,"pkt":"ABsXAAEVbEFqjICJCABFAACJMcgAAHIRHO7CiBxMCnAQag3YzSEAdV9uAAEAALEbP+pGqa\/pAAAAMt5G+T9GYAAAAAAwOv\/+gAAAAAAAAIAA8ic9d+Oz\/oAAAAAAAAAAAP\/\/\/\/\/\/\/oYAZL4AAAAAAAA6mAAAB9ADBEBA\/\/\/\/\/\/\/\/\/\/8AAAAAIAEAAMKIHEwAAAAAAAAAAA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":4,"flow_packet_id":14,"flow_first_seen":1438853633749,"flow_last_seen":1438853651224,"flow_tot_l4_data_len":828,"flow_min_l4_data_len":48,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.67","dst_ip":"194.136.28.76","src_port":51812,"dst_port":3544,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1438853632713,"flow_last_seen":1438853632766,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":69,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.64","dst_ip":"194.136.28.76","src_port":56154,"dst_port":3544,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1438853619792,"flow_last_seen":1438853619844,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":69,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.89","dst_ip":"194.136.28.76","src_port":60381,"dst_port":3544,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1438853615305,"flow_last_seen":1438853653403,"flow_tot_l4_data_len":372,"flow_min_l4_data_len":69,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.106","dst_ip":"194.136.28.76","src_port":52513,"dst_port":3544,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1438853629357,"flow_last_seen":1438853629411,"flow_tot_l4_data_len":186,"flow_min_l4_data_len":69,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":93,"midstream":0,"l3_proto":"ip4","src_ip":"10.112.16.92","dst_ip":"194.136.28.76","src_port":63448,"dst_port":3544,"l4_proto":"udp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/teredo.pcap"}
diff --git a/tests/result/nDPId_tftp_rrq.pcap.txt b/tests/result/nDPId_tftp_rrq.pcap.txt
new file mode 100644
index 000000000..90a63aba0
--- /dev/null
+++ b/tests/result/nDPId_tftp_rrq.pcap.txt
@@ -0,0 +1,24 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1367411051972,"flow_last_seen":1367411051972,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.253","dst_ip":"192.168.0.10","src_port":50618,"dst_port":69,"l4_proto":"udp"}
+0392{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411051,"pkt_len":62,"pkt":"AFCN14tDAAu+GJpACABFAAAwAAAAAP8ROWXAqAD9wKgACsW6AEUAHD4gAAFyZmMxMzUwLnR4dABvY3RldAA=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1367411052077,"flow_last_seen":1367411052077,"flow_tot_l4_data_len":524,"flow_min_l4_data_len":524,"flow_max_l4_data_len":524,"flow_avg_l4_data_len":524,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.10","dst_ip":"192.168.0.253","src_port":3445,"dst_port":50618,"l4_proto":"udp"}
+1055{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAEAAP8ROXTAqAD9wKgACsW6DXUADKpJAAQAAQAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1367411052077,"flow_last_seen":1367411052081,"flow_tot_l4_data_len":536,"flow_min_l4_data_len":12,"flow_max_l4_data_len":524,"flow_avg_l4_data_len":268,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.10","dst_ip":"192.168.0.253","src_port":3445,"dst_port":50618,"l4_proto":"udp","ndpi": {"proto":"TFTP","category":"DataTransfer"}}
+1055{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAIAAP8ROXPAqAD9wKgACsW6DXUADKpIAAQAAgAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1056{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAMAAP8ROXLAqAD9wKgACsW6DXUADKpHAAQAAwAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0388{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAQAAP8ROXHAqAD9wKgACsW6DXUADKpGAAQABAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1056{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAUAAP8ROXDAqAD9wKgACsW6DXUADKpFAAQABQAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1057{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAYAAP8ROW\/AqAD9wKgACsW6DXUADKpEAAQABgAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1058{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":60,"pkt":"AFCN14tDAAu+GJpACABFAAAgAAcAAP8ROW7AqAD9wKgACsW6DXUADKpDAAQABwAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1057{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","pkt_oversize":false,"pkt_ts":1367411052,"pkt_len":558,"pkt":"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","pkt_caplen":558,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","flow_id":1,"flow_packet_id":98,"flow_first_seen":1367411052077,"flow_last_seen":1367411052258,"flow_tot_l4_data_len":25775,"flow_min_l4_data_len":12,"flow_max_l4_data_len":524,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.10","dst_ip":"192.168.0.253","src_port":3445,"dst_port":50618,"l4_proto":"udp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1367411051972,"flow_last_seen":1367411051972,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.253","dst_ip":"192.168.0.10","src_port":50618,"dst_port":69,"l4_proto":"udp","ndpi": {"proto":"STUN","category":"Network"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1367411051972,"flow_last_seen":1367411051972,"flow_tot_l4_data_len":28,"flow_min_l4_data_len":28,"flow_max_l4_data_len":28,"flow_avg_l4_data_len":28,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.253","dst_ip":"192.168.0.10","src_port":50618,"dst_port":69,"l4_proto":"udp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tftp_rrq.pcap"}
diff --git a/tests/result/nDPId_tinc.pcap.txt b/tests/result/nDPId_tinc.pcap.txt
new file mode 100644
index 000000000..6464bae0c
--- /dev/null
+++ b/tests/result/nDPId_tinc.pcap.txt
@@ -0,0 +1,74 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1495983427717,"flow_last_seen":1495983427717,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":59244,"dst_port":55655,"l4_proto":"tcp"}
+0405{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":74,"pkt":"ABcILL3nACbGCvpSCABFEAA8vEtAAEAGvw6DcqgbuVPacOds2We5l\/9AAAAAAKACchD0JwAAAgQFtAQCCAp3tTETAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1495983427744,"flow_last_seen":1495983427744,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":49290,"dst_port":55656,"l4_proto":"tcp"}
+0404{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":74,"pkt":"ABcILL3nACbGCvpSCABFEAA8k+lAAEAG53CDcqgbuVPacMCK2WgWL9D7AAAAAKACchDyzQAAAgQFtAQCCAoov3nyAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":66,"pkt":"ACbGCvpSABcILL3nCABFCAA0AABAADEGimq5U9pwg3KoG9ln52yg0OtBuZf\/QYASOQhw5gAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAovExAAEAGvyGDcqgbuVPacOds2We5l\/9BoNDrQlAQAOXp2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":65,"pkt":"ABcILL3nACbGCvpSCABFEAAzvE1AAEAGvxWDcqgbuVPacOds2We5l\/9BoNDrQlAYAOU1egAAMCB0aGluayAxNwo=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":66,"pkt":"ACbGCvpSABcILL3nCABFCAA0AABAADEGimq5U9pwg3KoG9lowIoRT99iFi\/Q\/IASOQgE1gAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAok+pAAEAG54ODcqgbuVPacMCK2WgWL9D8EU\/fY1AQAOV9ywAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0389{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":61,"pkt":"ABcILL3nACbGCvpSCABFEAAvk+tAAEAG53uDcqgbuVPacMCK2WgWL9D8EU\/fY1AYAOWeRAAAMCB0IDE3Cg==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":60,"pkt":"ACbGCvpSABcILL3nCABFCAAo0wJAADEGt3O5U9pwg3KoG9ln52yg0OtCuZf\/TFAQAHPqQgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":64,"pkt":"ACbGCvpSABcILL3nCABFCAAy0wNAADEGt2i5U9pwg3KoG9ln52yg0OtCuZf\/TFAYAHOP7AAAMCBpbml6IDE3Cg==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAovE5AAEAGvx+DcqgbuVPacOds2We5l\/9MoNDrTFAQAOXpxgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1770{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1093,"pkt":"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","pkt_caplen":1093,"pkt_type":2048,"pkt_ipoffset":14}
+1766{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1091,"pkt":"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","pkt_caplen":1091,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":0,"flow_packet_id":9,"flow_first_seen":1495983427717,"flow_last_seen":1495983427818,"flow_tot_l4_data_len":2309,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1059,"flow_avg_l4_data_len":256,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":59244,"dst_port":55655,"l4_proto":"tcp","ndpi": {"proto":"TINC","category":"VPN"}}
+0386{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":60,"pkt":"ACbGCvpSABcILL3nCABFCAAo5z5AADEGoze5U9pwg3KoG9lowIoRT99jFi\/RA1AQAHN+NgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":61,"pkt":"ACbGCvpSABcILL3nCABFCAAv5z9AADEGoy+5U9pwg3KoG9lowIoRT99jFi\/RA1AYAHOprwAAMCBpIDE3Cg==","pkt_caplen":61,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAok+xAAEAG54GDcqgbuVPacMCK2WgWL9EDEU\/falAQAOV9vQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1766{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1091,"pkt":"ACbGCvpSABcILL3nCABFCAQ150BAADEGnyi5U9pwg3KoG9lowIoRT99qFi\/RA1AYAHMHJQAAMSA5NCA2NCAwIDAgNTg2MUFCRjZBODU4NUNFRTIyMDFCQTE4NUFDMDIwMEFDOTBEMEE5NDMxQUM0ODk3NEY3NEQ5REMzNzk4QjNBOEYzRkMwNDI4N0U0MDY0RkQ2OEE5QjJEQUM1RkNFNjczNEQyNERENzExQjFERjE3RUU4QjU2MTE4NTlCQjM3OTYzMjUwMTIwMzVFQ0M1Nzg5MEVDQUJDMDM5NUI2ODdCQTgwRjQzM0Y4RDA0OTZERjk1MjFDNTdGMzgzNkYxNkMwMERFRDRFRTcxNjg0RDIzQkUzQUFFNTJBQjVCNUU2QjNCRjA2Q0JDRjYwODIzOTJBNjkzQUJCQTQ2NTBEMUVCMTY0NjQ2MkMzMUNFQTc2NzhBMUExODJDRUY5RjBENkU5RkZFMDg2Rjc2NDIzQUEyMkRFRUE1QzczMDBBRDYyRUU5MzNEQTJCMjJFMEIxQjA2MkQ2NkM0NDA3NURFMjdCQkQ1MDkxQkRBMUZCOTI5Rjg5NTdCNDVFQzA0QUQzQ0ExNTAzOUFCRUI3RURBRDVERTRDMjVGREREMTMxMDQ5MzBDMDFBOENEQTJFQkQ1ODQzOEQ4OTlBQ0E3NTRFQjYwRUREMTI5QzMxNTg4NTNBMTMwNEEyRTcyNDZDOTg3MjlGQzlCRjVBRjk4RTk2MEI4RjhGQTJCNzk3NDg0NkVCQjQzNEU3NzkwNEQzRTQxQkEwNjEyQUU4MUREOTM5M0ZBOUM0Q0NGRjFFNTcyNTA3MDM5NkQ5OUQ1MkJFQUFBMENBRDQzQThEMkIzREM3QjcwMzMyNDRGMUQ1M0MwRDFERDA4RjQ4REI5M0NBOEU3MzBCODBCRTM2MERGRkYxMjE2QTI0NEUxMERFRDcyQ0RGQjAxQ0Y5RjIyOUI0NkRDRDgxNjJFQ0I4MjlCMUI4NTNGNDZENjc3NzZDMDg1RDdFMDMyODk2REE3MDMzRjg1NDU3MTU2MzA3NTdDMTNBOTU0Q0Q5MEEzQTA0QTA2MTQwODA4RDhERTEwN0M5QTRGNUIyQURDQzE5QUFGNTc5REE3RjQzRkMzMkM3MDg0ODg0RkQ5QzRGNkI2NzM3QzA4OTU1RDZCRTZFOUE0Q0YxRURGQTVBRDY1MkY3MzhDQzY2OTJDNDUwMTcyQjY0NTk1RkJBMTU2Q0RGQ0ZFRjVCQTg4NzBCRUZFQUVFNjM0RjZCRTQwNzU0ODgzNzdGQTJFNTJGNjUxOEI4NDhGNEE4OTcyM0E2RjNFRTZEOUQ2MTgxNTUwNzZDNUU4OTYwRDdCRUEzRTBCQTk3QkM1MjdDQzhENThGMDdEMkJCMkRDMTg2REQ4QzA2Mzk2RkI4RkMxOTQyNjRBNkYxRDUzMDgwMTE4NAo=","pkt_caplen":1091,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAok+1AAEAG54CDcqgbuVPacMCK2WgWL9EDEU\/jd1AQAPV5oAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1771{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1093,"pkt":"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","pkt_caplen":1093,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":1,"flow_packet_id":10,"flow_first_seen":1495983427744,"flow_last_seen":1495983427846,"flow_tot_l4_data_len":2322,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1059,"flow_avg_l4_data_len":232,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":49290,"dst_port":55656,"l4_proto":"tcp","ndpi": {"proto":"TINC","category":"VPN"}}
+0378{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAovFBAAEAGvx2DcqgbuVPacOds2We5mANboNDvWVAQAPXhmgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1776{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1081,"pkt":"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","pkt_caplen":1081,"pkt_type":2048,"pkt_ipoffset":14}
+1785{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1081,"pkt":"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","pkt_caplen":1081,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":54,"pkt":"ABcILL3nACbGCvpSCABFEAAovFJAAEAGvxuDcqgbuVPacOds2We5mAdeoNDzXFAQAQXZhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":97,"pkt":"ABcILL3nACbGCvpSCABFEABTvFNAAEAGvu+DcqgbuVPacOds2We5mAdeoNDzXFAYAQVMCAAAEKuY92C\/cto1EcAGFeOG8N3OIrCrByiGNuUTa6mlHKtX6gUptNrmRHNALg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+1780{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1081,"pkt":"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","pkt_caplen":1081,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":121,"pkt":"ACbGCvpSABcILL3nCABFCABr0wZAADEGtyy5U9pwg3KoG9ln52yg0PNcuZgHXlAYAJO18AAAdQT7bgkZOzYgnLdsK7AlgyVHTkmASqBoHEHbJffOsZIfrx0v3bt6qBU45B5arHL93lK7nOI7D0+j2j7wGM+p9CZjXQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":60,"pkt":"ACbGCvpSABcILL3nCABFCAAo50FAADEGozS5U9pwg3KoG9lowIoRT+N3Fi\/VElAQAIN2AwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1770{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":1081,"pkt":"ACbGCvpSABcILL3nCABFCAQr50JAADEGnzC5U9pwg3KoG9lowIoRT+N3Fi\/VElAYAINY6AAA71tFVtbLRm\/FWBrwGGSgBlamuiuzHwgd2fbkiz45WMYM9DB9VLLGGMfqQuIBqmomFA7FcPHazsQuvfhEWK22O2XTZXqzs1e8nhkvwXmMHIjhHudQ6douEBcClMiVTAj8W4gWgrUeGm9y21JWxyTXtViURTB6HW1zZSpygIm5SG+3JiIIVDP46JdiP7HuDk3Q2qLvE88QMMi1Xt0Hg+tpdkUrzw0xDNtSbLZVxA2F8VDk+rS3N4TwC1IptCoK\/n2FHeijsL5Bh\/xTBE2vXVRi1PGLqRew4BX2ipvYhHZie05hlCY9B9lHpky96+usu7XzpE5UnF1kQ27au6ARTgVAFjYMjD7WXdXF\/WgqGtknUgRrMjl70LYknNR9Sio20Q61q\/muD8tJVkdzFbgp7ZwhCbH6QBKuyZVtoCKaVvTRUgZ1MMXtVJPZLLcc6aAcRILR1ySvqZacubOv+MxSoniCeIOOfz8qqGVhBgMHYp9zrmucZU1AFpTTBJ79VMMyEQ8quU\/9vyHepVMkWS8Btv2cM01xUQe5x9dygFrydz4nFpbCSJ3CeJXaj3OkqLNjgqtbzDPtGBV7PsM5cUYOEcjVXOxd4BhiCo96riZ54P755HsajwsIjIISO0JsrqhUXoQ+u2RtOynTRbYceB+gHW1s4r0KZ4Ce5YmlbVLzEpI02LalKqlN2ALN83lJxRiTncL+iTsLa6MU1ftNAhMxIN0z6e4u9CbyLyZg525Aci2D1gOYctQ3VD1EGg4jaJfC8SaufNB3klKRMVR\/klkedLQNUGTYPL1G6\/1SuxMsLFy8YGVTws\/+eaWoXY8gyPgJJETCkkBGiv5I01w27qZ917O6hUNtbRfoky4RBp3M4MXvgnhNeQoc4ZTrtaFwXc8U+Q3QfNXkaY1g8RbRdxgjtgSRbuy0IyUY9FF5fYLd9dilSmqn5o8x\/5tjFrVmcvigd680RvteVuN0VDRaJEG0wf1CPbXQflCxNhyl7kLXTHY7+khtR5C69HLZZLWuDoi47vZZASDmhLuykYtLo21bh3bM9obDFin8eYhxUe1NdhHoYV3\/q4EsdJ3SuIFGI7yemZVKAGFWGmHlJ09TuJZpVne2waz4slCtrwmHBXZbI9ttDJEtV9JQH5mPwJyVdOGCZd+\/i1Sdg2TeDfy50HXp3CYFUlQdbirLrfweKKzHZaMWu4fEGAG1WlgROeJjevyBzIacpxiFC1F\/iFu8XVsTiu\/iUHZVhw77ZucfwK5G1l4jLzXCxT+GRIY\/Nj6P73XPYmD+ItLE9RX+FSkFRtRN15Ulq3VCxpxUrxaxzmp9yhje6enTowFWVdMyiECNuaM3FUegU5HQD8lAYaBIZdIY7cEeZnzIPA==","pkt_caplen":1081,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":97,"pkt":"ABcILL3nACbGCvpSCABFEABTk\/BAAEAG51KDcqgbuVPacMCK2WgWL9kVEU\/nelAYAQWmswAAUQViRm4\/ULlifZ1syaafJYrGx2oGaimTTwiDEMT\/CJFBzPFJdbi93VsVCA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983427,"pkt_len":60,"pkt":"ACbGCvpSABcILL3nCABFCAAo50NAADEGozK5U9pwg3KoG9lowIoRT+d6Fi\/ZFVAQAJNt7QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1495983428000,"flow_last_seen":1495983428000,"flow_tot_l4_data_len":652,"flow_min_l4_data_len":652,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":55655,"dst_port":55655,"l4_proto":"udp"}
+1233{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":686,"pkt":"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","pkt_caplen":686,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1495983428000,"flow_last_seen":1495983428000,"flow_tot_l4_data_len":652,"flow_min_l4_data_len":652,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":652,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":55655,"dst_port":55655,"l4_proto":"udp","ndpi": {"proto":"TINC","category":"VPN"}}
+1295{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":734,"pkt":"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","pkt_caplen":734,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":238,"pkt":"ACbGCvpSABcILL3nCABFCADgAABAADERibO5U9pwg3KoG9ln2WcAzPGuM9Lx5\/tPdTG2m3Y0AlyEq2mnzqyIMEs7w8HRBEl8Y5NuT+Tl6VzNZm9syhOM8O5X9DMCZ2i18aEY5\/AFa+9vGaBzFiMm9BvXYzjoD8NIhl92KAV3hQzzPzdUGmBVVMf0BbRkDSRCiFN9nGpFLBN+y4nOpA3kBUeSofHjZl9gZY\/0gSr+qv0Gl1ZSJf+LLeeMJpEC6tb9XeO6w6224M34GMTZTkD7Nv+SCyj6hVz9obZb5coivi5CEA1BAiI84UNSuifu9w==","pkt_caplen":238,"pkt_type":2048,"pkt_ipoffset":14}
+2330{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":2048,"pkt_ipoffset":14}
+1364{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":782,"pkt":"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","pkt_caplen":782,"pkt_type":2048,"pkt_ipoffset":14}
+0618{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":230,"pkt":"ABcILL3nACbGCvpSCABFAADYAABAAEAResODcqgbuVPacNln2WcAxEDssCY7enPGuzIv\/qJEOpXOsKn2+aD9vwFNuO00uhNoSNiOyTS37G4ixZm+uvzMXyyVwVeixhv13Np+2Jwknsx7C9AvgGaQgEipxQA2RP8\/dmLe4mFUnc11lWtSv6udz0iwbJOuDJcMAeNNifpZO7uWJ1hN5WPZemqcvGNDla+9730vDG1t7\/oOjIj63CNUcRROuHouW7nZvKpsAPiheo2rEQayCWWvtU4pgKOR91ILwvfEbKKsOZe9kb4PJgw=","pkt_caplen":230,"pkt_type":2048,"pkt_ipoffset":14}
+2033{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1270,"pkt":"ABcILL3nACbGCvpSCABFAAToAABAAEARdrODcqgbuVPacNln2WcE1Md1yFCI7gfwONXyvS0LzJWHp67rNLhDUs8NmY2WEqMzKfZfNlfaF8I5m8IX\/qjKc8HNNt79hPGrLFoVT\/wKFoeabFipVapxNkNAn06TsxtL76udh2GTNiBobsHrMUxUatxX7ChBU5WIXY0zLuvvdWlnVruvvuQZs+8iMi5hCIJdL\/ZthYwUR39Ckd3sYy+jwxHgM6m68nonTOVk38M1gAoKqua+yLBTpABqLhSfgA5IP6jycCURUFwO0sIziGhG8YhbOMzuIYPJYDS2AfQELbej0wXsbhzOXUiE7zGJqzLqtkyH10s2kA\/SvOiel1hN0zZ6nQz8Z1EyFqkR5zrYWX3QJeWsg9r0WOiAkBpmB57DNfm6UIWe8EPkTqoqyo9zLis+tqhUKUFe1P7bypeVYrzjyuz5sNKOeSf\/XIj4tfKnd7MgDqWEWtoM+X5At+1r\/XOXON9MxLvRqO1Gxz2PTjm7am\/qXZGmSzitIWsM4C+7hg4qSV4CRiDykT4ixX8ISwEnC6Mq+1RpuHM6evYUEydtebFDd+zZWYNNPMihlNh1ufkCIdIHgZrk1ZlN2TRwF40AP2WYai6yTbnavSsmJMZgGZJ2oWCGIL4PIxuvSNqDjD7HcFoIdiLgkv4SJdnVl7kDPGDZ9oDDVipAw7kQYzpKM04oXk65fW6GPAS2w53jGqrBAuNbGz+85AlBCZCMsLaN9kTOj\/VuGgQwo\/pyEUTDczM7mUw7MQ\/qvwbsH5U96wX4iucIAPeP0TanEk228ZuL7yUexiK\/3osOKgdBTCC1Zg82BunSJVUbfre1gC7aw6vEeFOGP0iZQECeXtbNvhfnBufw1hCujyyNiriBpLncaiehP\/+u2LyBzhZ1h25nexu9V8DWoLMKyuCNa+B6jMmGVWWuL8y3z7eFMooO1efxIucGCrRpJBX5hAxa3flLCsaEGv05NewwFZHevLKX1S3xHmMFfOs8cKrTqnU0+Dv5U8eiFWFpBHjviyvTx\/918zL1QBOtV\/NT54IElh+WgmMzYeyTLD4L6JQIfJ4sy81He8zYA48j3\/v8vIti\/UD935yon1+urNPDB0+p6A\/LjrD+J6F62bH6WHQ9bfI7DoiKxFnqf3xL4SOp3fxIO6CY6O3cbnj28eLg\/K\/3NS31YVQEbFA1eb+oEoApxQY+SqU+LzRr7qFY3NhXykXFKN0jOc3760NVwxflnpdHA+rRdwtZ57rS3970eYBrAy5\/koQrzi4B0KgW41gg5Ok3AIZor7\/toywc7ZiH\/+hlP36SRGJA6Ry4\/kj6TVC3Ii5KzFkmpCtijjHmsgEF3wHI2xLMz7s8nbdJIL6Ee2oBH5qM2ptGv\/0PrHyJJG5ex4p\/kjKo08Yx7SR1Ega7I4NvhjW23cRE7ggU8yP2bam9EliUyTvTNU6R35QxpqwqTnC5cNIFC7X+yg5eI6kzpYygG1GY5vJYnp8mtVoSth9E\/uWKaQaZnmrxM8jH9Scs0CD3Bm5C9KeV9Qny+8X8M3JeDUGP2baBFHU7rguVVCZDSXGtPWo\/D1B2vgIk8F64nPucbvsP6c9wkNh0S9XH2TF\/2thLZ6BoRdvPhC1MITb+yHAo9h+M0RlMxu46Vfam0TK9pKgOEFhN1QeYa5fQepcBUg==","pkt_caplen":1270,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":190,"pkt":"ABcILL3nACbGCvpSCABFAACwAABAAEAReuuDcqgbuVPacNln2WcAnN1v0uZKyPoWmaubuwZrIQBPO+BqMoVUkv\/hXTpUG6K+XH0RKW47XY\/1dEVD\/1oKU1zJQuD+UbQTXTTcm\/XGMVH2egj98VF2+e1yRSUyyMFvQM8in43T+5TOL5BOto9WZIIukzfdgAM\/MAqqBoNXxicKkAa4Pjceo2sJdl+39BnWaa0WeqsWYldgt7dyN7jFWOadS+UHzA==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+2080{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1310,"pkt":"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","pkt_caplen":1310,"pkt_type":2048,"pkt_ipoffset":14}
+2311{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1478,"pkt":"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","pkt_caplen":1478,"pkt_type":2048,"pkt_ipoffset":14}
+1354{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":774,"pkt":"ABcILL3nACbGCvpSCABFAAL4AABAAEAReKODcqgbuVPacNln2WcC5NYNMthrCBmbVcLDzx04GEaMBSJLDJLDYwwTtxER12czIPzvLWnK7TS2inmdofowfj\/GBA00qd7fFhWAZK0lO8txWM21Pnmlz5TtQTOL3eQ9AAyMMtiOA+aJtu86\/2KX2bJBXt1gfdemRkHUZHnW5XcVhDVYLp0elJOpWJP\/fPb2TTUEwLA8V9TT6UkDNzjtgeyVMkkPJ7dFLvdQYO\/LeD7rk7qUIRl6uTk3Ig8lrTZ16KCNAlDMRGZ39Q2Whby0KMKv3dIKKx8AfZmgo3MVoN7p08ehD\/kxHv6GuQ75AmHdEu1kJLfl06abggE+JDSOl2USp1ONL6t\/AAOQr9C+5aq7ie+oWaCvqGopfd\/BbBLdIK8kj221POsOjTNzLAOoaBG9snasbtYoPzkZEgPHUwldH39tI78ITonPV1GPVA9ZLiJCpjDTnFVh2CKybBHYh55UlQtmnc97O64hKTB250XxmSR9TyoTgniaJ4Vx+o2imnr9JOHdkM\/pcxizRNdixyx9BMACk3nlKD7FR8sMHaPzpWcilYoiqfI0AttvIcjhRqks6\/xKNa8FDZpKNsFscBWgUUwSaF71jJCyanex2xWz59dkYB+70kKsZcXTwWBLPBDUL3ZJ7PfNcnM2roS\/eF25pB6lVgZLj5gIYTk4JeDBjLizEynGHrVwKQj253i3GJZyyWmOjeMsYhoh4qYCaJxABqLFcLS\/CIqhc0XX8dbtkRxCKZL0Q+wOnH48pgGijYre0pSYNZPfnFs90\/NkSH8T6Zzjt8PVMtqa5NgHLGt+9fkSmsNIhltNPsecMqNtWZ3altiiXNyzIclAEEtxPto3JcCz0S0zNOYFypCtGYOjtx1sAFrCsQwLXkg\/0PtytHYcqK153MPFl3f3KtFfLOZDrflmjPzA8D0H5yDHRR19+MTe72Fzw8+RxTBKEARpsUky45xVVbcuEn8lA\/CXc0fP4TtFkUa9UQeq5VWX","pkt_caplen":774,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1495983428043,"flow_last_seen":1495983428043,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":732,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":732,"midstream":0,"l3_proto":"ip4","src_ip":"185.83.218.112","dst_ip":"131.114.168.27","src_port":55656,"dst_port":55656,"l4_proto":"udp"}
+1339{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":766,"pkt":"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","pkt_caplen":766,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1495983428043,"flow_last_seen":1495983428043,"flow_tot_l4_data_len":732,"flow_min_l4_data_len":732,"flow_max_l4_data_len":732,"flow_avg_l4_data_len":732,"midstream":0,"l3_proto":"ip4","src_ip":"185.83.218.112","dst_ip":"131.114.168.27","src_port":55656,"dst_port":55656,"l4_proto":"udp","ndpi": {"proto":"TINC","category":"VPN"}}
+2322{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":2048,"pkt_ipoffset":14}
+1606{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":958,"pkt":"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","pkt_caplen":958,"pkt_type":2048,"pkt_ipoffset":14}
+1241{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":686,"pkt":"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","pkt_caplen":686,"pkt_type":2048,"pkt_ipoffset":14}
+1297{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":734,"pkt":"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","pkt_caplen":734,"pkt_type":2048,"pkt_ipoffset":14}
+1306{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":734,"pkt":"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","pkt_caplen":734,"pkt_type":2048,"pkt_ipoffset":14}
+2023{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1270,"pkt":"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","pkt_caplen":1270,"pkt_type":2048,"pkt_ipoffset":14}
+2313{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":2048,"pkt_ipoffset":14}
+1613{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":958,"pkt":"ABcILL3nACbGCvpSCABFAAOwAABAAEARd+uDcqgbuVPacNlo2WgDnK+vXfoso+8aDfn6C06uHVzrREIJN0whusMczPLBasu8X7jHCbMDcTwqq5cRGXjgHvhN4GkCTvxbYJfrcDU0Rk+Tvmo7rKIxrLx4\/kqmQJ2pihEuUhiIQRsXbwxALbB+Asim8zCjGyplE6OxkOKsoa\/tSnsdI4hdTdh2\/9y1uXuVKSo1vEIS9U6FRdWxosDNU6+1XQ2ScBCTLN5Am\/zzyNgkeUCJp9\/\/NGfn1Kgcy8n7mxeNAgAi6xw5XRyVqYi7lmxkzNP1cO77nkVAelVJczF2UfNWfi57fiJ\/eS8Qcpe8nXbLeJ8mU1sEgABUO4Vt3in01N90+MIh3AC0ng2VAO4q981ZHhJqxGGrXi2GhID5\/WvqowZV7ODoDjWtwWnOtM73XXR+6herGGszYm+SjPUcFBVbKixtXwvZY9esAmdbVVTV4l\/eGEOJffVqFJozW31xSY6FXzo4wia\/A5YfkZjIwvxHN07lshIyN3cGF2N11ZT5Fex+nRDmXwgmLrSNgav6AMoyRipWQChUXlc+McEL2IkbGuTSnIl6c2Uk35zoobfCN5RiGFp6uRc5y+hMvrhKXYWXVRjjwenr+eNLQX9r2ggI8X9lzCumGmtaFhjpQsrUJsfO1i0OcNx\/gbF0\/3Mc833TdmtEqjujifV+soMk1WMu2KTBk\/g5OnmttFMNboZPLExV\/ZKJVoEskufcKogBnQyg8aL\/cLy8IKtmvUh\/c5sENVT2w9itCfqyHaZb5dvVy31VMnTBt48iR70ExsFCS\/Pbr1eJgygqDq1FEdSfnjBXAFUASKDQzZ9nRers1mK8sWC4k\/\/seKwlGjmy\/4aYoqkNm89tRf6n9cWsiD8L1xPky3D9s4kSwfNv+0irU4CRhfBf8F3M40ip7Zmc9SPFpjPyROk0r8nYTaV6E\/o2ayuLND7KuCexdJKSdtzQu8yOmve8Fs6amF554l\/cggx8Vg\/mOFX1V6vEQ1XfwTIAkqNJ9dJOfkvKLJwxthPByrAWdg58OM9\/tuH9OnrMLDmBuynz9fflwNR5qZqWZPRkCaLxI0Bz5CW+DNOZHli8n3mmOH9897GB0eZDZ02EqIUG2MrnchGrfEkzCG7wbM7azKqXydjPoYAHW1RnnE7ZJfs\/cKy26hzX5xbRtmRS2tDF0ye0h4cOVdKC1UFS5OebqjqOALo0hoiC01rBdLUaCdykHoLOc\/UUBU4OtfPT7GOZyPRIuw==","pkt_caplen":958,"pkt_type":2048,"pkt_ipoffset":14}
+2035{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":1278,"pkt":"ACbGCvpSABcILL3nCABFCATwAABAADERhaO5U9pwg3KoG9ln2WcE3PhPtl8OS\/RzdoIqpBJrM0piFMnraxV11rR6FHWIzoOVmGAMCgzM5PdvvbYncTxo4OQRc7hT5tJ+AZ2oZ9P4imTYl4PgmywQDxeHNqR6hSxcQdbfemHJ4j3uMzl06LCCDgwo9fR5vcOPaoxUqCwRvGwg25g3n9ndK2y6Qzn304bBYJbw8X2RjYF++DHRbnkWvUTAYXDoVl7wW+n7BYegbMpq0rngK64YH6iyeFxKE7Ti7zmBPDCSeGOvKjDLxrYWxOrR3To266PJ\/LC8+mBtSOAjTl9VPH+yObeC2B0d737JGXh7Es1IgytVkmDSNL8wqXJlM2eucuQ+uEzWUrq85miHrSinVUvZq3dtiLhByCWvylyQ0XqjpRtY0hEmqqx0gXarXDRn+XlY9Plc1IRkCF52btUaxZau8o9Uxl67jZZbvUJq3A2rNDUj7D6MldJp14del7+toTYHJT\/BUmFgZdTJ\/0xfAk9qtbK7HS+B50la1O3SrnMKala3EZzqHrQPvCz0bC9W8vp4wHEGuFOjjS8V3TGVQdRvOsagvWNfEhSmaJTVPuHSPLYs6YQImLi1rEA\/p5PzCrH9eAsFQny0qGLsDBsiqAONN862ry\/TgGvSLSG2evwc\/dEJD1jvzKGIgaEHvvJKTM2gyZoxQxz0+h2oJ+FUMhGG7PC5OpXD7fk459U\/be9jiAR1Jel019IVkDPZi21Fwf3Ps+nLVply3u4PbrqCl7DtpSV\/v45W\/wDyAOUu71EcIFkmh5+CPNe7KFx+LqYhQJR7gWGLhz7xcANJadFdUXcvKv06BDKCUzNjgVO2p1UXDrlia5m+x1DyaYoNhGgU2biR3JkauhXnWnGEZHPGP\/iqvXkPe\/yEtWN13OGlV9r9A8q22MokHV0j\/5FfuDt9eZLTScwEM7p9AfVcG5n70+eSlOepKgRlBqy9NcoRZtCYjcERbo7peFv7uHVF+3pUm6k6gO1+3dD2C\/hHC1rcW+6PCW9SN2Z11siO3Y7IEC62ocdPbdbP20MeuceloxIzPj1yV6ekUmE1BJ0uJLGAZ\/8Wn1r5uh2cnkVabfsmOSLvOuGw1Rtkpc9dRFwZHkiIlyYQeSUgFriEbYBUlJNWYcXWK3tsZiCrwD2tQpjk+tq5athZVsTBrvWsQ7GmPeoTUQ9g8x5tfclNduZbUIbTka9vA\/pOdGZUUEcuipEWFf+bSvEu6VuCbwfbZGnOPQn9ocJWWdQiPOdt800jOAY7NJcAvlBP9XIRhAXpiqRE12Z98ezfhmbShrMffNoIEi6WRooTiHjPp73MxE67Mft7TVvYtil0GXJpUmyLR+7CGbRBzKscUSKbDrjN9h8n7fINgLz1HTqv\/BR+J0lZ9aZVHPdOjXv5bptKJWyhGINceFh5lpu1zZZppNqa52oGpxHLRarkmi3h4tPylxDQFRcx1voGNPI2FVek\/gfcmXkcdmCWMfXMiQQq6yYNp5a3Vi7+RDkTJhzrGtCfrcSrPj9t50xNezkI14bortRrVwbKJfDi3MyvynkbzFax+\/KlniaAl+DUG8wuj1OcTmUEBxQHVwnv+WpThuXgeiXqWRLnJCcm5Lp689I8XJZyAxHGx8vM5S6\/5p\/1rewXdzAZcWu5NOTE06vuGzkoiymhzDp3ypbj","pkt_caplen":1278,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983428,"pkt_len":190,"pkt":"ACbGCvpSABcILL3nCABFCACwAABAADERieO5U9pwg3KoG9ln2WcAnM6JW9M2VTbgfqL3tgsJUW3zis+jx33prAVWldPZAQDv41mDZN4NabXxHItglmjMZR4ATDQIk4yx4bJmOJoLzAPOv2tTdq1J1umHdTnGo0fqXQm6bt8JXwjdU0qGw6yrEnSwno8bOisBkbns9gkZ6nTP72KzXLSnbT\/2PPrIlYbmJ34XfuogUj3U4WrJNknTYjFIbip2Yg==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+1757{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":1070,"pkt":"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","pkt_caplen":1070,"pkt_type":2048,"pkt_ipoffset":14}
+1215{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":670,"pkt":"ACbGCvpSABcILL3nCABFCAKQAABAADERiAO5U9pwg3KoG9lo2WgCfCTpyWG61RXi1Zqx6w1+pirryOOP9m+9d2Eh1KFZpnNuBM8ZR0m8LMpvc5i7SxKjgXKLTWbw1q+4UAC4OoxcaIRXT1zFLzcjxZyDNlAIo\/fKqRaQYIIUaTPofXLQNnynrNfAb8TlrEXV1AhnWxixUtjchIDew1dXJJ\/nr3azK9t5qjxTw7AEcy8jJ6b6E7lxEBo5cIu3KXwrQA+XWy84Bha2NhdQJ\/IH0A0+vlYCIq4GnSn7sr7yTfydOOWn0WH3wERj+w81Q7Gc3uRJnNR7aMoyQxZzazgeAyqrIE3fxWmpZXJRkrd3GK4h1yE2wtgWu79q3QZcslDa1rLcBKjuYzkwCgLRAfSXZKFqotZNcQ3\/zP1co1pU6KOMovHuqergaDR1qj2KQ1ImtDqUoK4O5GzB9TcGAafhtH633XKpibdfQ+VTo2n4j7ihfm9zGBrXpnmjzuEx7eLos9ZRvNw5CXzpl4ZLhlAmvK1F2qJKbE5HckGBERdijaIhHv05J6PRRCWPpfv0RC96FlFA5A\/DVL90sw0csfejA8Z4WSXuNuV3m0iAHFX2Eg1LpifxzOoeeJ4TprBTisy4FbzD+2yjaxsw7Ri\/73ZAAhDWuPN\/H8Quza04Yeku1sYzM5V4S175Iji7ZaI4Czh57GoGRfG9QwAYYBhy5ZttAAWTxPOLWeld2uK82Odwpun2WwFPfViQASCOEtb7C7PlWXKUWZ+SjTc6Qu4UE+5dgINW6q9fQ\/pH5iXnrTbOh4UTxkboXDII328TmOLdi69DKyhFDX3FUxNdY1yTDtPjEPYfGEb\/70\/62ZVra9cXM2YN+\/UUExaiH\/GItAs2Rw==","pkt_caplen":670,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":334,"pkt":"ACbGCvpSABcILL3nCABFCAFAAABAADERiVO5U9pwg3KoG9lo2WgBLMmIQ1pMfyOqxD+T45NcZDZvaRVlOnc+ETwoL98y47sTJdFqHVjT+fJ\/sOn4uj+5IqHehNnsG7cWp4Z5GS4T8l\/cQ+ww0YBQFxr7KdHQa8PDqwRxkAO0ccQ6sqiuwP0MEdU75ofJmjaZfvo2tiBvwRdcZN5uP7XZfa4ksu2IqOjeoU7NxBdeeHxNtaXyxLsTevjCuQXAx0XEAolqW4kOyxAJFf0YTTx5ut2DeaUMySpl9ri3UPXpKKfxzwGwFJ9siDka9JS2ku1fctR113fCQbQ\/DIoOz+fWbXUq09GskURLRk8T9mHpMFLWAcVbqqXKgoDSMdBpZwu5XP1C0LKKENw97n\/GZCVglFjM1Y\/nK02bNMDQP\/Y4sPJZPARxdZdenNxWtfBBcA==","pkt_caplen":334,"pkt_type":2048,"pkt_ipoffset":14}
+1751{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":1062,"pkt":"ABcILL3nACbGCvpSCABFAAQYAABAAEARd4ODcqgbuVPacNlo2WgEBEpDG9zSaPMWycLC7ev7jvZnv2k0ci\/X9HHA\/0ZqriYtTyHVKsCwIAhk8puScJNWwIc9BnfN5C\/NsFHX9a0v+eJWh5AU7mukJY6txRDUih37TOLsdzaqV5dfCR\/cEtZHT78kOPStqbJ11nIptUujN1thrxR3AzxrijJWT5xbPbubF3OzVkamb9IsCjOI466MA311fsDgSlJ4\/sBpTIBC2kd7Ck7P72LPgOtjK++kDVxFh7oNQ598tT0jFHF5OV\/ILLS2P3\/8On6ODR\/MIZ9F+Cwx8gRcEkHtMf47rBfpyUNQ3smmfedu4kXzh2rgvTdKFJpnI3DtL9H5mQyQgJJbJkeUOgyfPz09v0\/MQDl\/IHBS7W5qLUjtrNCdWnxtp6YucBORDkza5zJy+\/jnlIigQcuNG07nVWz3wdE4++5Ka7\/xhJaD4SxihsSUJ0Q2o49DY07hl8dd0Y36iTxBTeF4G4Q7lBOwmbA+pdR366zNgv95Rr2tFENRIvGuydtezCjUVSN83GYo2S5vy2UVzrYEDQ9ylRuNOSu5M8O+YKh2IKQW6bXW5RgLnJKOAJdbHqQ7Qp37z9yJL6860Ni221GIDiGJqowl82AuEqJ7nV\/uGULDJim73klUZxpwU2P2tr4wiFcq\/V3h2zoK7VfG8ocs\/xXLzfb2YTCn4jUaqIMb5rMlUJHaEf+nasBLzY5pVdGo+axYrVlzrjhjw1PHOrSEQWVmsBPvReDYVUMceNCfk88BevMOjGMJdfGK4bU73fE0qqYkRQQJH91Fs3WGeMW1NEVq\/1nPHTKyInAWnXD1DNYMeAI5Kq8ChCBMAHHBGQxPrbD2eSwbBdzJCcfEFO6Pw9syXD1BUenvn8YRQObyePEY9CUFyHlpYVuGsAE4DFCUpqEe\/7Hhb47G67U33J6tPeCHYCxEgfaiUdT\/LPeL+IbmjRObTutJwi9aDtuBYxGzfWwJZehp9H4\/+6gb+U7XMBWd2xw0RfGezKJH2XphSo4Jvz2EPOAujLzhpKCHPnUa6+DtsWCTLu39+2zmo\/k4JGFECDp5sbvJHF7gL6nrHM8Cx59Oyl+Sxx+bbrNYrcnMslrC7U\/1Af0tIf1QMwLuA2Bk56txAxnYGZ\/SWy\/8S8Iigxbt0o3QXBgT33Nt+sjJ0xhqQIS20uyOuQuKwoUApwSWtJNeckz0Ecr0AVU4TVycf2JAZiz4Kkt6lmj4jq6LvcrzarG0g9Ve3d3jNNyh8mKll7IlHE74+lGJU3\/lMEJOyTT8SQiVO3dNigVgaoztNwWrfKz+BTMUgB6enA7M6nzvyg7E5dtn8+6hCW2JBGf0OH1C2nRDWeocm6IHJb\/ZOVwfb6aygzStV2rDoSik","pkt_caplen":1062,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":190,"pkt":"ABcILL3nACbGCvpSCABFAACwAABAAEAReuuDcqgbuVPacNlo2WgAnBH1sD+pNFyGKp6G5yWyanAeWaBq7RsZqDfUoGtc6gBqozzx2G9j0\/BHibUXUnQ1LDAt63q54HT0owtSaqRHUXnwPlQA+zplIpz2KfWVdwmoqLhbcNmBgUeWs1y+n4WzqsK9R6GvCgdh0N7PkXhGEQxsrwsWx1niCx\/QRXIv08ZEjMF4CkyIx5UIC1CmBElTCcDiZfvuYg==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+2088{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":1310,"pkt":"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","pkt_caplen":1310,"pkt_type":2048,"pkt_ipoffset":14}
+1018{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":526,"pkt":"ABcILL3nACbGCvpSCABFAAIAAABAAEAReZuDcqgbuVPacNlo2WgB7J62aRDhv5lHZCc70ajhTJHa5jVi1efjSbFWsOD919+OPkOe23wCU\/SRc\/iz14OUCbnWQNvjwGKVLH6ApV++AQZwJOHvLZ8AbeieaoCZOKJ1J3nC6kIVkNErHfR9I4+evq9eRdylqwEVqye8D9E8j6K+I6BRQCJuDqiiFaL\/8HC24C9RLbT7AsGIvIT9aaTc4pX9XpdHUedKRlAcZjkMQlGiZn1rd4ADQnn4rOxP7u3OatTT04QI6e+zLLW29sNlsrV6YGCEi7FZm6vzmisMQnLVfeekLe6wzR3UA0u4rtCg3ZBOF8Wk3bGNIMy8+iwepSJg0N1KqeJRJ0Y0B1dKnbNcErAdukQgssBeoF9UhuQoxd3TuVi4bp7oTFvKnof8bkTw8HLxqckRQ4YHHb23TclrB1hc\/8a27rKJ53l5UoY5t4wYz7EGq+JKP0MYfGzVrz3FTzRHqSj1eaAyQR776gmVMWpxTfF4i\/1tYY+SaVYbfcridlAI1GzlEC1Q6UGxCYosiljcM+mAHS1zJ5jhJTA9uogDQ0K7\/GSRHVaTvI283Gh7GpGqXG8HwVOWTeFwc4IvrZy9nmg3Ck3uzR3TEJMVTuHQ1EWTT+fki0boCyE4Bmvi4Ct9VxQgC2kKLhE0vYYyLEvMvw==","pkt_caplen":526,"pkt_type":2048,"pkt_ipoffset":14}
+1214{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","pkt_oversize":false,"pkt_ts":1495983429,"pkt_len":670,"pkt":"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","pkt_caplen":670,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":1,"flow_packet_id":27,"flow_first_seen":1495983427744,"flow_last_seen":1495983475109,"flow_tot_l4_data_len":5962,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1059,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":49290,"dst_port":55656,"l4_proto":"tcp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":2,"flow_packet_id":130,"flow_first_seen":1495983428000,"flow_last_seen":1495983470973,"flow_tot_l4_data_len":165096,"flow_min_l4_data_len":84,"flow_max_l4_data_len":1476,"flow_avg_l4_data_len":1269,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":55655,"dst_port":55655,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":3,"flow_packet_id":134,"flow_first_seen":1495983428043,"flow_last_seen":1495983463866,"flow_tot_l4_data_len":165208,"flow_min_l4_data_len":84,"flow_max_l4_data_len":1476,"flow_avg_l4_data_len":1232,"midstream":0,"l3_proto":"ip4","src_ip":"185.83.218.112","dst_ip":"131.114.168.27","src_port":55656,"dst_port":55656,"l4_proto":"udp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap","flow_id":0,"flow_packet_id":26,"flow_first_seen":1495983427717,"flow_last_seen":1495983475073,"flow_tot_l4_data_len":5199,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1059,"flow_avg_l4_data_len":199,"midstream":0,"l3_proto":"ip4","src_ip":"131.114.168.27","dst_ip":"185.83.218.112","src_port":59244,"dst_port":55655,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tinc.pcap"}
diff --git a/tests/result/nDPId_tls-esni-fuzzed.pcap.txt b/tests/result/nDPId_tls-esni-fuzzed.pcap.txt
new file mode 100644
index 000000000..17c85f976
--- /dev/null
+++ b/tests/result/nDPId_tls-esni-fuzzed.pcap.txt
@@ -0,0 +1,14 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":1590680386576,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp"}
+1354{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","pkt_oversize":false,"pkt_ts":1590680386,"pkt_len":770,"pkt":"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","pkt_caplen":770,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":1590680386576,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":1590680387847,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp"}
+1358{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","pkt_oversize":false,"pkt_ts":1590680387,"pkt_len":770,"pkt":"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","pkt_caplen":770,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":1590680387847,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":1590680391590,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp"}
+1352{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","pkt_oversize":false,"pkt_ts":1590680391,"pkt_len":770,"pkt":"EBMx8Tl2KDc3AG3ICABFAAL0AABAAEAGxnTAqAEMaBZHxcLpAbsLJg40SW6gUlAYIAANXgAAFgMBAscBAALDAwMJLl9l\/OldUJYbpqd0xOpts3Kv4zg2hroTXcdX9KeB2CBjkfBVUTqX532YPuVZHQd0J5lIK2OZH9nsSRBnWwKDWwAkEwETAxMCwCvAL8ypzKjALMAwwArACcATwBQAMwA5AC8ANQAKAQACVgAXAAD\/AQABAAAKAA4ADAAdABcAGAAZAQABAQALAAIBAAAjAAAAEAAOAAwCaDIIaHR0cC8xLjEABQAFAQAAAAAAMwBrAGkAHQAgsbxhJX9IcnjB7rdgEb2YIBohnnxEhKIToNk1er8CIioAFwBBBLtlLNXLCuP0okhISXwuyj6tgeyLGZ5yaSZ9uT3zAbum2y5l1gYjS6RGBBL9dNcuY2pA4Ze582sOuuo0cAvw2TsAKwAJCAMEAwMDAgMBAA0AGAAWBAMFAwYDCAQIBQgGBAEFAQYBAgMCAQAtAAIBAf\/OAW4TAQAdACCgcq\/jSZGFwhXJHl9nfU84W9RHblecX+XHXi+knd++egAgHyQSymUyoBaYNvGbjOJlOzPcW4r7yiRdTxErCb+vUjmwk2PLEJ57JKeThEiW3dFrbufb5XbXZxYdeC179v7EU6Bakj2Njpvv\/Jfo5WxPGqtwjTPLrxKpdN+3jkm4v5pXmXQY7xTIeDCWHjyEgNKkvyfWHZEc70MAkkqfNhBXSLrthF\/1heQEBlRbs1xtqteJZDPsTf1rb0lyjahdcH23rHhPVaZljcat4wh7Hka7vt+kTz6HVLMaa8+FGdKR02KYBfqCbkN5nqbjMCHPCoPKBXF7APN9aYQZNPW1vyVMZGeIilksOKMAfbO31cu423QrZX+PlzwFC6qBeqVxOTzYpLwLIxJGCnfdBRD0u85D1TvPM05OjHVwJVu9F3FEA\/S2klQ0zWf5b6ngXXAHdoEO61eGscgYik1z+CCLYUuTKEqAk5KVlL4AHAACQAE=","pkt_caplen":770,"pkt_type":2048,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":1590680391590,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"24":"SNI TLS extension was missing"},"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"","ja3":"e5ef852e686954ba9fe060fbfa881e15","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1590680386576,"flow_last_seen":1590680386576,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.27.129.77","src_port":49886,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1590680391590,"flow_last_seen":1590680391590,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.22.71.197","src_port":49897,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1590680387847,"flow_last_seen":1590680387847,"flow_tot_l4_data_len":736,"flow_min_l4_data_len":736,"flow_max_l4_data_len":736,"flow_avg_l4_data_len":736,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.12","dst_ip":"104.16.125.175","src_port":49887,"dst_port":443,"l4_proto":"tcp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-esni-fuzzed.pcap"}
diff --git a/tests/result/nDPId_tls-rdn-extract.pcap.txt b/tests/result/nDPId_tls-rdn-extract.pcap.txt
new file mode 100644
index 000000000..be31004cb
--- /dev/null
+++ b/tests/result/nDPId_tls-rdn-extract.pcap.txt
@@ -0,0 +1,13 @@
+0367{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp"}
+0562{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":181,"pkt":"ERERERERIiIiIiIiCABFAACnLudAAIAGnZoKAAAB1ceV+3ppAbtkZ4Ye79i2a1AYQCmgXgAAFgMBAHoBAAB2AwEAAAAAM7RDB2u\/HXE+9PsbFMYgy+4A2s6CH4THeQytZwAAGAAvADUABQAKwBPAFMAJwAoAMgA4ABMABAEAADX\/AQABAAAAABMAEQAADmFkczEubXNhZHMubmV0AAUABQEAAAAAAAoABgAEABcAGAALAAIBAA==","pkt_caplen":181,"pkt_type":2048,"pkt_ipoffset":14}
+0744{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":147,"flow_max_l4_data_len":147,"flow_avg_l4_data_len":147,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"ads1.msads.net","ja3":"2201d8e006f8f005a6b415f61e677532","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+2344{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":1514,"pkt":"ERERERERIiIiIiIiCABFAAXc5PJAADUGLVrVx5X7CgAAAQG7emnv2LZrZGeGnVAQGJhAQwAAFgMBAEoCAABGAwEAAAAAWuuHTEcV+akd0cdt\/mCIl2W0D3ZsYen8qlKhhyDexkYNJNvmICdLfXfmBpGxedPIi6ruP\/C4V2lgLy7HPwAvABYDARoFCwAaAQAZ\/gAOyDCCDsQwgg2soAMCAQICCmkXyLYACAACTA8wDQYJKoZIhvcNAQEFBQAwgYsxEzARBgoJkiaJk\/IsZAEZFgNjb20xGTAXBgoJkiaJk\/IsZAEZFgltaWNyb3NvZnQxFDASBgoJkiaJk\/IsZAEZFgRjb3JwMRcwFQYKCZImiZPyLGQBGRYHcmVkbW9uZDEqMCgGA1UEAxMhTWljcm9zb2Z0IFNlY3VyZSBTZXJ2ZXIgQXV0aG9yaXR5MB4XDTExMTAyMTE2NDIwM1oXDTEzMTAyMDE2NDIwM1owggVRMQswCQYDVQQGEwJVUzEQMA4GA1UEBxMHUmVkbW9uZDESMBAGA1UEChMJTWljcm9zb2Z0MQwwCgYDVQQLEwNHRlMxHjAcBgNVBAMMFSoub2ZmaWNlYXBwcy5saXZlLmNvbTEUMBIGA1UEAwwLKi5tc2Fkcy5uZXQxGTAXBgNVBAMMECouYWRzMi5tc2Fkcy5uZXQxGDAWBgNVBAMMDyouc3RjLnMtbXNuLmNvbTEtMCsGA1UEAwwkY2RuLmRjMmZpbGVzLioubGl2ZWZpbGVzdG9yZS1pbnQuY29tMSAwHgYDVQQDDBdjZG4uKi5saXZlZmlsZXN0b3JlLmNvbTEoMCYGA1UEAwwfKi5tYXJrZXRwbGFjZS53aW5kb3dzbW9iaWxlLmNvbTEsMCoGA1UEAwwjKi5tYXJrZXRwbGFjZS53aW5kb3dzbW9iaWxlLWludC5jb20xLTArBgNVBAMMJCoubWFya2V0cGxhY2Uud2luZG93c21vYmlsZS1wZXJmLmNvbTEYMBYGA1UEAwwPKi5zdGoucy1tc24uY29tMRswGQYDVQQDExJhamF4Lm1pY3Jvc29mdC5jb20xJDAiBgNVBAMMGyoubWljcm9zb2Z0LXNicy1kb21haW5zLmNvbTETMBEGA1UEAwwKKi5saXZlLm5ldDESMBAGA1UEAwwJKi5tc24uY29tMRYwFAYDVQQDDA0qLm1zbi1pbnQuY29tMSMwIQYDVQQDDBoqLmYxZHMuc2hhcmVkLmxpdmUtaW50LmNvbTEdMBsGA1UEAwwUKi5mMWRzLndseHJzLWludC5jb20xHjAcBgNVBAMMFSouc2hhcmVkLmxpdmUtaW50LmNvbTEaMBgGA1UEAwwRKi5zaGFyZWQubGl2ZS5jb20xGDAWBgNVBAMMDyoubWljcm9zb2Z0LmNvbTETMBEGA1UEAwwKKi5saXZlLmNvbTEXMBUGA1UEAwwOKi5saXZlLWludC5jb20xFDASBgNVBAMMCyoud2x4cnMuY29tMRgwFgYDVQQDDA8qLndseHJzLWludC5jb20xFzAVBgNVBAMMDiouc3Qucy1tc24uY29tMRgwFgYDVQQDDA8qLnN0Yi5zLW1zbi5jb20xKTAnBgNVBAMTIGltYWdlcy5tb3h5LndpbmRvd3NwaG9uZS1pbnQuY29tMRkwFwYDVQQDDBAqLndseHJzdS1pbnQuY29tMSwwKgYDVQQDEyNpbWFnZXMucGFydG5lci53aW5kb3dzcGhvbmUtaW50LmNvbTEoMCYGA1UEAxMfaW1hZ2VzLnBhcnRuZXIud2luZG93c3Bob25lLmNvbTEVMBMGA1UEAwwMKi5qcC5tc24uY29tMRswGQYDVQQDDBIqLmMzc2NzLmpwLm1zbi5jb20xGDAWBgNVBAMMDyouYXNwbmV0Y2RuLmNvbTEWMBQGA1UEAwwNKi5ob3RtYWlsLmNvbTEqMCgGA1UEAwwhKi5wYXJ0bmVyLWRmLndpbmRvd3NwaG9uZS1pbnQuY28=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0813{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":1627,"flow_min_l4_data_len":147,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":813,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"ads1.msads.net","ja3":"2201d8e006f8f005a6b415f61e677532","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA"}}
+2341{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":1514,"pkt":"ERERERERIiIiIiIiCABFAAXc5PNAADUGLVnVx5X7CgAAAQG7emnv2LwfZGeGnVAQGJjDXgAAbTEUMBIGA1UEAwwLKi5zLW1zbi5jb20xFzAVBgNVBAMMDioubGl2ZS1pbnQubmV0MR8wHQYDVQQDDBYqLndpbmRvd3NwaG9uZS1pbnQuY29tMRswGQYDVQQDDBIqLndpbmRvd3NwaG9uZS5jb20xKjAoBgNVBAMMISoucGFydG5lci1wYy53aW5kb3dzcGhvbmUtaW50LmNvbTEfMB0GA1UEAwwWKi5tYW5hZ2UubWljcm9zb2Z0LmNvbTEYMBYGA1UEAwwPKi52by5tc2VjbmQubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX3PkoiInBfw68+6JNH406C4alrEnikcq1FZEZJZj8A0h7uDLWO01R+9CYljtZsYv4E+pfWvi8Z31QoN\/mqJYHgutax6\/UWMDIxFsXaIn1iXAoBA481Pyqa8XbzdmibAvotkEOm0ksJYJlu7VrGuQP+fyz69HW2nTnewmEyTsEy9pTZjqsxFdtBcWm2sS5KQA3Hoj6NzWl54VkXacUcpgQraZZFiSKVJpxhZpAqND3x7NCgSdQvwN2uTFwRCsRagxmCSSaZkQSbYCDh7lvCo6r5wBODibkMqCxrJ4nyg5Uw+J74SsSHhtBMkb6YMlWe5gPOyYSZfIVCby4onZWx45wIDAQABo4IGXzCCBlswDAYDVR0TAQH\/BAIwADALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMIIDowYDVR0RBIIDmjCCA5aCDyoudm8ubXNlY25kLm5ldIIVKi5vZmZpY2VhcHBzLmxpdmUuY29tggsqLm1zYWRzLm5ldIIQKi5hZHMyLm1zYWRzLm5ldIIPKi5zdGMucy1tc24uY29tgiRjZG4uZGMyZmlsZXMuKi5saXZlZmlsZXN0b3JlLWludC5jb22CF2Nkbi4qLmxpdmVmaWxlc3RvcmUuY29tgh8qLm1hcmtldHBsYWNlLndpbmRvd3Ntb2JpbGUuY29tgiMqLm1hcmtldHBsYWNlLndpbmRvd3Ntb2JpbGUtaW50LmNvbYIkKi5tYXJrZXRwbGFjZS53aW5kb3dzbW9iaWxlLXBlcmYuY29tgg8qLnN0ai5zLW1zbi5jb22CEmFqYXgubWljcm9zb2Z0LmNvbYIbKi5taWNyb3NvZnQtc2JzLWRvbWFpbnMuY29tggoqLmxpdmUubmV0ggkqLm1zbi5jb22CDSoubXNuLWludC5jb22CGiouZjFkcy5zaGFyZWQubGl2ZS1pbnQuY29tghQqLmYxZHMud2x4cnMtaW50LmNvbYIVKi5zaGFyZWQubGl2ZS1pbnQuY29tghEqLnNoYXJlZC5saXZlLmNvbYIPKi5taWNyb3NvZnQuY29tggoqLmxpdmUuY29tgg4qLmxpdmUtaW50LmNvbYILKi53bHhycy5jb22CDyoud2x4cnMtaW50LmNvbYIOKi5zdC5zLW1zbi5jb22CDyouc3RiLnMtbXNuLmNvbYIgaW1hZ2VzLm1veHkud2luZG93c3Bob25lLWludC5jb22CECoud2x4cnN1LWludC5jb22CI2ltYWdlcy5wYXJ0bmVyLndpbmRvd3NwaG9uZS1pbnQuY29tgh9pbWFnZXMucGFydG5lci53aW5kb3dzcGhvbmUuY29tggwqLmpwLm1zbi5jb22CEiouYzNzY3MuanAubXNuLmNvbYIPKi5hc3BuZXRjZG4uY29tgg0qLmhvdG1haWwuY29tgiEqLnBhcnRuZXItZGYud2luZG93c3Bob25lLWludC5jb22CCyoucy1tc24uY29tgg4qLmxpdmUtaW50Lm5ldIIWKi53aW5kb3dzcGhvbmUtaW50LmNvbYISKi53aW5kb3dzcGhvbmUuY29tgiEqLnBhcnRuZXI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":1514,"pkt":"ERERERERIiIiIiIiCABFAAXc5PRAADUGLVjVx5X7CgAAAQG7emnv2MHTZGeGnVAQGJhsRwAALXBjLndpbmRvd3NwaG9uZS1pbnQuY29tghYqLm1hbmFnZS5taWNyb3NvZnQuY29tMB0GA1UdDgQWBBR3cTg6hCQojXMJJ5D1bQIhPIcNAjAfBgNVHSMEGDAWgBQIQuPbThFm87UIxUDbVXwzRhGDODCCAQoGA1UdHwSCAQEwgf4wgfuggfiggfWGWGh0dHA6Ly9tc2NybC5taWNyb3NvZnQuY29tL3BraS9tc2NvcnAvY3JsL01pY3Jvc29mdCUyMFNlY3VyZSUyMFNlcnZlciUyMEF1dGhvcml0eSg4KS5jcmyGVmh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBTZWN1cmUlMjBTZXJ2ZXIlMjBBdXRob3JpdHkoOCkuY3JshkFodHRwOi8vY29ycHBraS9jcmwvTWljcm9zb2Z0JTIwU2VjdXJlJTIwU2VydmVyJTIwQXV0aG9yaXR5KDgpLmNybDCBvwYIKwYBBQUHAQEEgbIwga8wXgYIKwYBBQUHMAKGUmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMFNlY3VyZSUyMFNlcnZlciUyMEF1dGhvcml0eSg4KS5jcnQwTQYIKwYBBQUHMAKGQWh0dHA6Ly9jb3JwcGtpL2FpYS9NaWNyb3NvZnQlMjBTZWN1cmUlMjBTZXJ2ZXIlMjBBdXRob3JpdHkoOCkuY3J0MD8GCSsGAQQBgjcVBwQyMDAGKCsGAQQBgjcVCIPPiU2t8gKFoZ8MgvrKfYHh+3SBT4PC7YUIjqnShWMCAWQCAQowJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDAjAKBggrBgEFBQcDATANBgkqhkiG9w0BAQUFAAOCAQEAzjHSjzBBboE6Hf63YDAZ0eEE3Fr233P7k1evyql\/LmafHbV8kz4aMun+H+VIZeRM5Bql9x7WpjwQDS+J+smj4QnJo\/6ntdr3MlGPRoDRdkfFG7SosnI\/eCbIu9XuIWOHkZSH4\/9X7izdGgsuT0UnVndeXlHcgDw1ihOLBtxnkosbQSMKCF9\/HjID72MCp56vMoSU+WuvUQXXBr\/LgJr8eUtWe0pS65dkmCZ\/QNCuARDC2VnL+opy23sLHDSC3saZZQ+ZMxgShBWj\/VUrF5JAj8XmonqXVJeNovnT8++jWSd9AcVEkeZAo2TqMC\/26PhofncqN75eWaN2qQf74Z0rNwAGFzCCBhMwggP7oAMCAQICCmEDMzYABQAAADAwDQYJKoZIhvcNAQEFBQAwJzElMCMGA1UEAxMcTWljcm9zb2Z0IEludGVybmV0IEF1dGhvcml0eTAeFw0xMDA1MTkyMjEzMzBaFw0xNDA1MTkyMjIzMzBaMIGLMRMwEQYKCZImiZPyLGQBGRYDY29tMRkwFwYKCZImiZPyLGQBGRYJbWljcm9zb2Z0MRQwEgYKCZImiZPyLGQBGRYEY29ycDEXMBUGCgmSJomT8ixkARkWB3JlZG1vbmQxKjAoBgNVBAMTIU1pY3Jvc29mdCBTZWN1cmUgU2VydmVyIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOqfX5ELzRmCX5Hqq\/WLKNiL9Rzgkcm8zQIQUCK3OApcz3EMWC2IbKi4PDNj+XOdPOnDee3y\/snLw24k4jxCcNhft1v3m1\/1J294AOuWXbdvz+RBBPC7Q71vXyYPt443QRNUZxuQACc4uBrDlm0cMTU1ScVGHudzpMoDEXlBga\/Tjkaixb4AUwW5OJy3YCmzylKaksVTJ7ZBDUD4L5vngUkaWmqoT3HH6G2BvifvydbGkisQ5DY1QAjQTXD9cJsgHLO533WdK3fQxM1qce9aWAv5cIU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2352{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1620{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","pkt_oversize":false,"pkt_ts":946681200,"pkt_len":968,"pkt":"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","pkt_caplen":968,"pkt_type":2048,"pkt_ipoffset":14}
+2967{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":7001,"flow_min_l4_data_len":147,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1166,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher","9":"TLS Expired Certificate"},"proto":"TLS.Microsoft","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"ads1.msads.net","server_names":"*.vo.msecnd.net,*.officeapps.live.com,*.msads.net,*.ads2.msads.net,*.stc.s-msn.com,cdn.dc2files.*.livefilestore-int.com,cdn.*.livefilestore.com,*.marketplace.windowsmobile.com,*.marketplace.windowsmobile-int.com,*.marketplace.windowsmobile-perf.com,*.stj.s-msn.com,ajax.microsoft.com,*.microsoft-sbs-domains.com,*.live.net,*.msn.com,*.msn-int.com,*.f1ds.shared.live-int.com,*.f1ds.wlxrs-int.com,*.shared.live-int.com,*.shared.live.com,*.microsoft.com,*.live.com,*.live-int.com,*.wlxrs.com,*.wlxrs-int.com,*.st.s-msn.com,*.stb.s-msn.com,images.moxy.windowsphone-int.com,*.wlxrsu-int.com,images.partner.windowsphone-int.com,images.partner.windowsphone.com,*.jp.msn.com,*.c3scs.jp.msn.com,*.aspnetcdn.com,*.hotmail.com,*.partner-df.windowsphone-int.com,*.s-msn.com,*.live-int.net,*.windowsphone-int.com,*.windowsphone.com,*.partner-pc.windowsphone-int.com,*.manage.microsoft.com","ja3":"2201d8e006f8f005a6b415f61e677532","ja3s":"18e962e106761869a61045bed0e81c2c","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=Microsoft Secure Server Authority","issuerDN":"C=US, L=Redmond, O=Microsoft, OU=GFS, CN=*.officeapps.live.com, CN=*.msads.net, CN=*.ads2.msads.net, CN=*.stc.s-msn.com, CN=cdn.dc2files.*.livefilestore-int.com, CN=cdn.*.livefilestore.com, CN=*.marketplace.windowsmobile.com, CN=*.marketplace.windowsmobile-int.com, CN=*.marketplace.windowsmobile-perf.com, CN=*.stj.s-msn.com, CN=ajax.microsoft.com, CN=*.microsoft-sbs-domains.com, CN=*.live.net, CN=*.msn.com, CN=*.msn-int.com, CN=*.f1ds.shared.live-int.com, CN=*.f1ds.wlxrs-int.com, CN=*.shared.live-int.com, CN=*.shared.live.com, CN=*.microsoft.com, CN=*.live.com, CN=*.live-int.com, CN=*.wlxrs.com, CN=*.wlxrs-int.com, CN=*.st.s-msn.com, CN=*.stb.s-msn.com, CN=images.moxy.windowsphone-int.com, CN=*.wlxrsu-int.com, CN=images.partner.windowsphone-int.com, CN=images.partner.windowsphone.com, CN=*.jp.msn.com, CN=*.c3scs.jp.msn.com, CN=*.aspnetcdn.com, CN=*.hotmail.com, CN=*.partner-df.windowsphone-int.com, CN=*.s-msn.com, CN=*.live-int.net, CN=*.windowsphone-int.com, CN=*.windowsphone.com, CN=*.partner-pc.windowsphone-int.com, CN=*.manage.microsoft.com, CN=*.vo.msecnd.net","fingerprint":"FF:BF:9A:69:8F:C8:44:FF:89:F2:61:49:A7:D1:9A:98:DE:32:84:3B"}}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":946681200000,"flow_last_seen":946681200000,"flow_tot_l4_data_len":7001,"flow_min_l4_data_len":147,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1166,"midstream":1,"l3_proto":"ip4","src_ip":"10.0.0.1","dst_ip":"213.199.149.251","src_port":31337,"dst_port":443,"l4_proto":"tcp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls-rdn-extract.pcap"}
diff --git a/tests/result/nDPId_tls_esni_sni_both.pcap.txt b/tests/result/nDPId_tls_esni_sni_both.pcap.txt
new file mode 100644
index 000000000..5c5a25a13
--- /dev/null
+++ b/tests/result/nDPId_tls_esni_sni_both.pcap.txt
@@ -0,0 +1,40 @@
+0369{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1595697574192,"flow_last_seen":1595697574192,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":78,"pkt":"LLBdqyO5+P\/CRWqLCABFAABAAABAAEAGYZTAqAEVaBGvVdjMAbsVnUj1AAAAALAC\/\/+ITAAAAgQFtAEDAwYBAQgKRX5W8wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":66,"pkt":"+P\/CRWqLLLBdqyO5CABFAAA0AABAADkGaKBoEa9VwKgBFQG72MxjNlEZFZ1I9oAS\/\/+oqwAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUj2YzZRGlAQEADZRAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1251{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":688,"pkt":"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","pkt_caplen":688,"pkt_type":2048,"pkt_ipoffset":14}
+0868{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1595697574192,"flow_last_seen":1595697574223,"flow_tot_l4_data_len":750,"flow_min_l4_data_len":20,"flow_max_l4_data_len":654,"flow_avg_l4_data_len":187,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"these-are-not-the-droids-youre-looking-for.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3"}}
+0390{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAo1A9AADkGlJxoEa9VwKgBFQG72MxjNlEaFZ1LcFAQAELmiAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2374{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0915{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1595697574192,"flow_last_seen":1595697574271,"flow_tot_l4_data_len":2250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":375,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"these-are-not-the-droids-youre-looking-for.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"d75f9129bb5d05492a65ff78e081bcb2","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_supported_versions":"TLSv1.3"}}
+2368{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1759{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":1055,"pkt":"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","pkt_caplen":1055,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUtwYzZcglAQD9LLkAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUtwYzZga1AQD8LHtwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjMAbsVnUtwYzZga1AQEADHeQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":118,"pkt":"LLBdqyO5+P\/CRWqLCABFAABoAABAAEAGYWzAqAEVaBGvVdjMAbsVnUtwYzZga1AYEABPqgAAFAMDAAEBFwMDADWnb9y0FjHkCYXa9Mv3oiIw58kpLHI9hbCkpYSKwjbT5tmhSsPBCdwAMupOODdmzMyN2MBnEA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":175,"pkt":"LLBdqyO5+P\/CRWqLCABFAAChAABAAEAGYTPAqAEVaBGvVdjMAbsVnUuwYzZga1AYEACVEAAAFwMDAHTbGkXPhSFh2EtBT4Ucf2la9Me1Pr\/cnCufOWXr97iBYl2sFJjp6mds9gcEN0NbujkofpclXD\/7+RfwBuf00YU6dfzrsRTSZBOq190E19skhMEmjtDKcO4oViXiNfEnYtMrdsZgdVLAYKRQU4zDKuBqkYlDYQ==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAo1BRAADkGlJdoEa9VwKgBFQG72MxjNmBrFZ1LsFAQAELW9wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697574,"pkt_len":54,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAo1BVAADkGlJZoEa9VwKgBFQG72MxjNmBrFZ1MKVAQAELWfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1595697597731,"flow_last_seen":1595697597731,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp"}
+0425{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":78,"pkt":"LLBdqyO5+P\/CRWqLCABFAABAAABAAEAGYZTAqAEVaBGvVdjaAbvycO9jAAAAALAC\/\/+plAAAAgQFtAEDAwYBAQgKRX6yWgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":66,"pkt":"+P\/CRWqLLLBdqyO5CABFAAA0AABAADkGaKBoEa9VwKgBFQG72Npkmiax8nDvZIAS\/\/9OXwAAAgQFeAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjaAbvycO9kZJomslAQEAB++AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1256{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":693,"pkt":"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","pkt_caplen":693,"pkt_type":2048,"pkt_ipoffset":14}
+0874{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1595697597731,"flow_last_seen":1595697597760,"flow_tot_l4_data_len":755,"flow_min_l4_data_len":20,"flow_max_l4_data_len":659,"flow_avg_l4_data_len":188,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"you-think-thats-normal-tls-traffic-youre-seeing.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","tls_supported_versions":"TLSv1.3"}}
+0391{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":54,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAok5FAADkG1RpoEa9VwKgBFQG72Npkmiay8nDx41AQAEKMNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2367{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0921{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1595697597731,"flow_last_seen":1595697597802,"flow_tot_l4_data_len":2255,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":375,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS","21":"TLS Suspicious ESNI Usage"},"proto":"TLS.Cloudflare","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"you-think-thats-normal-tls-traffic-youre-seeing.com","ja3":"077d20c3f8c5a1f091dc937c515b69c1","ja3s":"d75f9129bb5d05492a65ff78e081bcb2","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_supported_versions":"TLSv1.3"}}
+2369{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1749{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":1055,"pkt":"+P\/CRWqLLLBdqyO5CABFAAQRk5RAADkG0S5oEa9VwKgBFQG72NpkmjIa8nDx41AYAEJrKwAANlaIPKqZfmwL6N1QJJGCIWYRIPt3urXE7Q7ayAmLBZsyAQCj5SQN8uw\/+3BXbnqRJgVvfkZaiahfccUgoO5sF39QkuzfLPVYwIO1U3g\/ZPFWt0GUer2ksvwRvMCaejOMH\/ePM+aH4IX4b+WhjvS+kt0k6WGLr1x31L9RIbka4q5FgdmJjrxW1MT8z85VBW6WuGpAqDgi5KQj83UrRX+hnrxZ51XD8nst\/oNpJwJAgGBFPOxWJpq1ruQT6zsChvqmjzaCu5YmKL82bzXIUNmFcfe+zxGFeYSHXWkI6SR1BKqkbio\/YdXzPi6ED9U3YIP2vCGAJVDlUUlXDNJvuQCtHMJXq+dAUg7sndO\/RrpL9MFrJAQMfcMk65ffrN5+TJeb16JlFjqkcepAe\/9MCiUJCTBeK6BqJ8ZrtzljcDt+a9vGj9H6p9put2f0O71cWCD+T9ZPlvDHC3CEZ4oPdVfXbDB9L5BTlnhSFpaO+Mp13uhVIWh29Ydpig3vaVjjGSm9\/ZE7E2YMLjDpan7SQ2zy43987HpcpcvY42MMWUjB08eIzJ2wghnZextd0JXczlfWdviXpV1NFgJPH5+SH8SLEFunCMX\/FWb4Ww2XshPRvParY32hYZ9QwzGDYIk5jpuAw2\/Gws2JNV8pggxRc30ecfhBPWkW5GNgGyJLXd3gdUv8kToUclYLWh9Fl1OUQ1vUAqTTgHdtxccQx3z9AmRxdk7s2RYbamZnY7eDjyGFrApN5WyLA10tNwift0ywIbLCEfwH4mriRMLsGkS+yIY5v0LyHAPZLDvma24k3Y10pcWlr+5EFHA6KEkGU7pAO\/xzBmMSxI4pHtplXhxsBewL0GnTOWG\/WSjNLKskp4B\/hWiOIgAM2kpooHFyzI0zJ06i4DizyzpeZw0eY+q6NS2CSfNkjVybHBeKQqka+0TNScdvt5W2RI\/SCdKnZygysYhajKxywAwmJyGPW71O\/q668WQhtG6CymZqiJC17RagLWkkHWLVVavvy4AdiVd3Vdz9HUWlgvwxuums7NmvJDzjs8tEFSJe9c+Lzux2k8Ypq1JuHRTzhVcK94gQJ1qHNvm3gn4ZLfXi7qzxPKWv5aMbRZHs12BMnhrpsOIfyRQp2N\/x1cW6zcBr4Mx4GQwvVTvxJHBktXR5LLWuZV29L91xIJJYsVtejg1\/v196kjx3M69qBVYmjBkk7sss5LtKVS0k9Ci+76hTJdm52fU4cmiDMC3USTV4udRKTx+XDDwCbCXRvOabP4kqlGXczLEFXzTtAgXq0x7k56Szmy6cAgWZnjhFZ\/CXQZJKw2U7NF2lR3JHw0ySphHuxPs=","pkt_caplen":1055,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjaAbvycPHjZJoyGlAQD+lxKAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":54,"pkt":"LLBdqyO5+P\/CRWqLCABFAAAoAABAAEAGYazAqAEVaBGvVdjaAbvycPHjZJo2A1AQD9ltTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":118,"pkt":"LLBdqyO5+P\/CRWqLCABFAABoAABAAEAGYWzAqAEVaBGvVdjaAbvycPHjZJo2A1AYEADIrQAAFAMDAAEBFwMDADWIDEokt5taLIJzA5NMYG\/eYqA6KC2vSRqyaE484F3ECDnoz6ppoluplBDgdrgspboN28s30g==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":175,"pkt":"LLBdqyO5+P\/CRWqLCABFAAChAABAAEAGYTPAqAEVaBGvVdjaAbvycPIjZJo2A1AYEACakAAAFwMDAHQmqSO2Rj3PZrm5EQF\/q5U45+97psJI4MT1NwULeuI4yAkC+dXv1sSss7LXjO92DmlU7FNtd0zWJi49PyFyA35TSov3A2yWn2fF7Be\/bBx+Uh1139L3KVXSGKdgjuFKawrqJhVeEZ1RPzqhdht2NYYTL+zmRw==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":54,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAok5VAADkG1RZoEa9VwKgBFQG72NpkmjYD8nDyI1AQAEJ8pgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":54,"pkt":"+P\/CRWqLLLBdqyO5CABFAAAok5ZAADkG1RVoEa9VwKgBFQG72NpkmjYD8nDynFAQAEJ8LQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2284{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","pkt_oversize":false,"pkt_ts":1595697597,"pkt_len":1445,"pkt":"+P\/CRWqLLLBdqyO5CABFAAWXk5dAADkGz6VoEa9VwKgBFQG72NpkmjYD8nDynFAYAELIhwAAFwMDBWplzicVCZkneNntXmzlkgcFPUoR724b66\/4aFGXjza5mmC3zqfD8bM7gil7myUhARY2kw9OHvr9uwzPmTvBHjRsELIrWZwcLZLV99JfhGJTo2AoCcZCgLpYTIgfIUP5yU7xwkkVNn+vj1tSupzP0tmv56auqdA\/UR+KA1PORkvMHA3ya80UFD6NE5E0Bg7xxaZ6cP0Px7YhPWHKZn6s4KxtzuFOOydj9eGw5Kehc\/SnpSlwzmcxdp3iCWueCFDfp29IsYOBx\/gPDnQbEVHXpyd0ziy\/lVYJCR6VM9MRn8QvKeGW3AiZR4yFbraogEKpcTGTh1T55hGtYvibNUKrIBdcIwzGVctVJ9bIWJ8pypthvUjVxU7s9kaKdI+vH\/LIT1Nj\/kTSSAsltH2kDpRkeP78vWQVSTKSa\/NLd7OJuWWyHjfdMVIsulnSNLRm2mLF+DB\/2DgVryJ+Np2bhlT70OQRLbs5mXEare2aozleJtcUPNPTD8weucmD8+PVHdQUdlfUTt3zjzhdzsp82hjYg5yjrJpzTSonmIPTNwOpysWltsa6zXRjk++cCbFk6QUoiZ9+Dn3JJ4O5fc3K59ax2s6cgnpIvwqQkWpV4WdTqyWxjefa498GtVerV7PY\/XzcsCtBEWzDdjlLDmwBobWpGfk3s\/VszXVEAR4rwm7\/\/yu558oAFlDkTgiBSfzj7qp00\/kRFuxfc3L2G05sb7A5RRZ7sr3OJE0pckqzmYOP26SoI1UMKRR\/HW7PxUmEa+3WKEktQ3kYEFQrQwxdy70ku1m7PjlyidteV5MEOUoIILdx75zVIQaHbJcMNE78mY5kgGcqjPjHDKQSdksBlgoV025VzfLuNCoo8kMBGIGzuBryleLJHnPP29XCAqV6gYFw9PiLwC5V9dEcjAnkr4apoDL1NTRE+ca4io6PUqFcpjKEbz1X\/bNC2EPVLRfm9+BFFYjQpR7\/AeuLjJEyVnbvapEltGx1fTnDg5+p\/viBdp9FPrECd5xeMKznZ\/Z5uz7VTMjvpK5c\/6dtLQ6MzoNtDx6U5vKyu03ougGxsI67C96xoB8Ru9mrmEhNLGaZPMo\/MRHGcoWPWdMu4DD4nrPmUrq7hJMKsmFPV3tyhx\/ZUIqLpKeZdTP7ffnHf6G6BjvTfKoi8RXLa3S18CBhnC+bfrYD1d2teesludojFv\/XikOZSDkYBRSTeC1ECOOalXjjIkc2AZd1XaxX\/729CzpGwA0n3hvku6mS9RZ+KQhlhv\/dCRi45nUxoccgJQQaBNSCpC9jU3xQOF+ZEOweldBvTqKcPu+Q2DEH4H0dQIFQWnxk\/DhQY4Via144XNb4Bo+4k8s271yWtexNCD1KfV2TjPrCNb6XVaWfklvPy3BpTSHcfinyRMyVNzQam\/e\/vOZRMuTmWx\/HIjOVWq5Ipi+MMW5i8nd7G12OHiuFMIhjlyt5uSA5H8QXC0aY6O2firVleGCsdkSDTJ0qUe3PMMtHhXoMkY24TtILf\/hZk\/u5Bbn6h7m3wcle8fSJFRbjLGhRfoUeMBRG6KbjmEpDoeCvVvDn3MEI26y4dLEtY6O0uPHIP6TTYInmwFv51IzzmyLwQKuWJnZRAISY4Lq3SAOetGVLBgDL+tlvlCu6krmwzJzE1DgAjIjr4TjX9JKtMSJWDu9ecXMyAkU6c\/sSb9HZq4Loprj4HvS9SCMdbYMyQye3e4YdAWX+KS98qzGBclqf4EZV255jjHhTlQMCf8l4+bN5U8wSPZbVeatya7uJFa7OmqBgpuzwu4unc9EHFcOKqGY5ZFnBjvD449vjrPDMJ3GKlrwyQp4JU+DlPlxYM51pSY5AYewjIEAHGag=","pkt_caplen":1445,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":0,"flow_packet_id":20,"flow_first_seen":1595697574192,"flow_last_seen":1595697574326,"flow_tot_l4_data_len":8051,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":402,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55500,"dst_port":443,"l4_proto":"tcp"}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap","flow_id":1,"flow_packet_id":18,"flow_first_seen":1595697597731,"flow_last_seen":1595697597855,"flow_tot_l4_data_len":6556,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":364,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.21","dst_ip":"104.17.175.85","src_port":55514,"dst_port":443,"l4_proto":"tcp"}
+0154{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_esni_sni_both.pcap"}
diff --git a/tests/result/nDPId_tls_long_cert.pcap.txt b/tests/result/nDPId_tls_long_cert.pcap.txt
new file mode 100644
index 000000000..5085e7374
--- /dev/null
+++ b/tests/result/nDPId_tls_long_cert.pcap.txt
@@ -0,0 +1,22 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1553619078033,"flow_last_seen":1553619078033,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp"}
+0421{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":78,"pkt":"BBjWMe9aeDHBvV4kCABFAABAAABAAEAGN8XAqAJ+aG\/XXesOAbssL+yBAAAAALAC\/\/8wZwAAAgQFtAEDAwYBAQgKJK\/ZdwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":74,"pkt":"eDHBvV4kBBjWMe9aCABFAAA8AABAADYGQclob9ddwKgCfgG76w4xmkZeLC\/sgqAScSAcqQAAAgQFtAQCCArQt2rgJK\/ZdwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":66,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+yCMZpGX4AQCAq0dAAAAQEICiSv2Y7Qt2rg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1098{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1553619078033,"flow_last_seen":1553619078058,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.repubblica.it","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0402{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":66,"pkt":"eDHBvV4kBBjWMe9aCABFAAA0ITlAADYGIJhob9ddwKgCfgG76w4xmkZfLC\/uh4AQAOu5bwAAAQEICtC3av8kr9mO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":1514,"pkt":"eDHBvV4kBBjWMe9aCABFAAXcITpAADYGGu9ob9ddwKgCfgG76w4xmkZfLC\/uh4AQAOuDIAAAAQEICtC3awAkr9mOFgMDAE4CAABKAwNVMtps0XtokkjC1gPE4\/KUJ6lo4L6JfLUX\/EQs\/RZj3ADAMAAAIv8BAAEAAAAAAAALAAQDAAECACMAAAAFAAAAEAAFAAMCaDIWAwMPfgsAD3oAD3cACuIwggreMIIJxqADAgECAhAHrG10aT6YsaH2msNNW\/HcMA0GCSqGSIb3DQEBCwUAMF4xCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xHTAbBgNVBAMTFEdlb1RydXN0IFJTQSBDQSAyMDE4MB4XDTE5MDMwNzAwMDAwMFoXDTIwMDUwNTEyMDAwMFowZDELMAkGA1UEBhMCSVQxDTALBgNVBAgTBFJvbWExDTALBgNVBAcTBFJvbWExHDAaBgNVBAoTE0dFREkgRGlnaXRhbCBTLnIubC4xGTAXBgNVBAMTEHd3dy5yZXBzdGF0aWMuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+MoTBM9TK0OoJt5QuApA9tPXya0zX1a3Ag59txQIELvplH2CUI0yPk6MwlUfk\/QyB9VJwP5ynDZulBq+PhC6m+ahoGcKrSSR22gBsGAaQ6CStsVpuQYre1BQCuOkzyHA6qdEhCOwn3lpMMaU2v5rAArYgOlI6q9E0FALF73FSHRzTan9MjcennBUYmGDNqjkvspY0oO37dFO6zbNfZHlbVANbvbKGBll10AGMHR\/W\/+WpodtUD8TaFInXBFlfGdOAeUXAN1a90MpS6947KQDst1elD\/R\/MU5ndBWKX2i4xodj56emiB+7Oj67\/EMg7iyXoZGJS2MS8+LWOMXPgezAgMBAAGjggeQMIIHjDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU55+91g3brgkpANCGNzfwge0PHBMwggUBBgNVHREEggT4MIIE9IIQd3d3LnJlcHN0YXRpYy5pdIIMcmVwc3RhdGljLml0ghVhbXAtdmlkZW8ubGFzdGFtcGEuaXSCEXd3dy5yZXB1YmJsaWNhLml0ghNhbXAtdmlkZW8uZGVlamF5Lml0ghlhbXAtdmlkZW8uZC5yZXB1YmJsaWNhLml0ghF3d3cuZ2VsZXN0YXRpYy5pdIIQb2FzanMua2F0YXdlYi5pdIIVdmlkZW8uZC5yZXB1YmJsaWNhLml0ghN3d3cudGVzdC5jYXBpdGFsLml0ghRuYXBvbGkucmVwdWJibGljYS5pdIIUdmlkZW8uaWxzZWNvbG94aXguaXSCFGdlbm92YS5yZXB1YmJsaWNhLml0ghFjZG4uZ2VsZXN0YXRpYy5pdIIQdmlkZW8uZ2Vsb2NhbC5pdIIPbWVkaWEuZGVlamF5Lml0ggxtZWRpYS5tMm8uaXSCIGFtcC12aWRlby5lc3ByZXNzby5yZXB1YmJsaWNhLml0ghNkb3dubG9hZC5nZWxvY2FsLml0ghBhbXAtdmlkZW8ubTJvLml0ghVib2xvZ25hLnJlcHViYmxpY2EuaXSCFHRvcmluby5yZXB1YmJsaWNhLml0ghJzY3JpcHRzLmthdGF3ZWIuaXSCFXBhbGVybW8ucmVwdWJibGljYS5pdIIScm9tYS5yZXB1YmJsaWNhLml0ghZ2aWRlby54bC5yZXB1YmJsaWNhLml0ghRhbXAtdmlkZW8uZ2Vsb2NhbC5pdIIcdmlkZW8uZXNwcmVzc28ucmVwdWJibGljYS5pdIIOd3d3LmNhcGl0YWwuaXSCFXZpZGVvLmxpbWVzb25saW5lLmNvbYIQbWVkaWEuY2FwaXRhbC5pdIIrc3luZGljYXRpb24tdm9kLXByby5ha2FtYWkubWVkaWEua2F0YXc=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0844{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1553619078033,"flow_last_seen":1553619078091,"flow_tot_l4_data_len":2177,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.repubblica.it","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"35af4c8cd9495354f7d701ce8ad7fd2d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2350{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":66,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+6HMZpRr4AQB+mm\/gAAAQEICiSv2bDQt2sA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2029{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":1266,"pkt":"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","pkt_caplen":1266,"pkt_type":2048,"pkt_ipoffset":14}
+2309{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","flow_id":0,"flow_packet_id":9,"flow_first_seen":1553619078033,"flow_last_seen":1553619078093,"flow_tot_l4_data_len":4921,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":546,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www.repubblica.it","server_names":"www.repstatic.it,repstatic.it,amp-video.lastampa.it,www.repubblica.it,amp-video.deejay.it,amp-video.d.repubblica.it,www.gelestatic.it,oasjs.kataweb.it,video.d.repubblica.it,www.test.capital.it,napoli.repubblica.it,video.ilsecoloxix.it,genova.repubblica.it,cdn.gelestatic.it,video.gelocal.it,media.deejay.it,media.m2o.it,amp-video.espresso.repubblica.it,download.gelocal.it,amp-video.m2o.it,bologna.repubblica.it,torino.repubblica.it,scripts.kataweb.it,palermo.repubblica.it,roma.repubblica.it,video.xl.repubblica.it,amp-video.gelocal.it,video.espresso.repubblica.it,www.capital.it,video.limesonline.com,media.capital.it,syndication-vod-pro.akamai.media.kataweb.it,test.capital.it,video.deejay.it,video.repubblica.it,milano.repubblica.it,video.lanuovasardegna.it,video.m2o.it,parma.repubblica.it,video.3nz.it,syndication-vod-hds.akamai.media.kataweb.it,amp-video.repubblica.it,video.lastampa.it,webfragments.repubblica.it,amp-video.xl.repubblica.it,amp-video.limesonline.com,media.kataweb.it,bari.repubblica.it,syndication-vod-hls.akamai.media.kataweb.it,amp-video.3nz.it,syndication3rd-vod-pro.akamai.media.kataweb.it,firenze.repubblica.it,amp-video.ilsecoloxix.it,amp-video.lanuovasardegna.it,cdn.flv.kataweb.it","ja3":"66918128f1b9b03303d77c6f2eefd128","ja3s":"35af4c8cd9495354f7d701ce8ad7fd2d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018","issuerDN":"C=IT, ST=Roma, L=Roma, O=GEDI Digital S.r.l., CN=www.repstatic.it","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"0C:9F:21:DB:65:A1:BE:EB:D8:89:38:D3:FF:7A:D9:02:8B:F1:60:A1"}}
+0404{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":66,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+6HMZpWX4AQB+2iSgAAAQEICiSv2bDQt2sA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1470{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":855,"pkt":"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","pkt_caplen":855,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":66,"pkt":"BBjWMe9aeDHBvV4kCABFAAA0AABAAEAGN9HAqAJ+aG\/XXesOAbssL+6HMZpZdIAQB\/OfKAAAAQEICiSv2bLQt2sF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":192,"pkt":"BBjWMe9aeDHBvV4kCABFAACyAABAAEAGN1PAqAJ+aG\/XXesOAbssL+6HMZpZdIAYCAB8QwAAAQEICiSv2bLQt2sFFgMDAEYQAABCQQRP4nTO7t1gsI+sncz3jLxPpGhLzyoJgYH\/Heat+NBgLeKqEhe7mj2inNwoJCD5LV\/qCPQv+KYPvBQWRUBtB06EFAMDAAEBFgMDACgAAAAAAAAAAA4cTqcj7y\/hvDbKtXE0ElrDaudKH2f2AXwmK1WfLrv\/","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0535{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":159,"pkt":"BBjWMe9aeDHBvV4kCABFAACRAABAAEAGN3TAqAJ+aG\/XXesOAbssL+8FMZpZdIAYCABWXQAAAQEICiSv2bvQt2sFFwMDAFgAAAAAAAAAAb\/x0RnZJwH8uWLyU9jchZrDqEEG9N2hXfwbnHQL0G\/XqSw4vJO5tvQIFj88Tjie\/WjLQdGBWvdE9B6uhvyryoJCQ\/EEkL8iR\/LrKxkDArPO","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+1538{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","pkt_oversize":false,"pkt_ts":1553619078,"pkt_len":902,"pkt":"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","pkt_caplen":902,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap","flow_id":0,"flow_packet_id":182,"flow_first_seen":1553619078033,"flow_last_seen":1553619149372,"flow_tot_l4_data_len":111413,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":612,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.126","dst_ip":"104.111.215.93","src_port":60174,"dst_port":443,"l4_proto":"tcp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_long_cert.pcap"}
diff --git a/tests/result/nDPId_tls_verylong_certificate.pcap.txt b/tests/result/nDPId_tls_verylong_certificate.pcap.txt
new file mode 100644
index 000000000..44fa555df
--- /dev/null
+++ b/tests/result/nDPId_tls_verylong_certificate.pcap.txt
@@ -0,0 +1,22 @@
+0376{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1578254908457,"flow_last_seen":1578254908457,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGntnAqAGgl2VCMdYUAbur4+BEAAAAALAC\/\/9+XwAAAgQFtAEDAwUBAQgKAb+3BwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADYGqN2XZUIxwKgBoAG71hTYdp3Gq+PgRaASauCAYQAAAgQFZAQCCApynbuCAb+3BwEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+BF2Hadx4AQEAgJrQAAAQEICgG\/txJynbuC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1110{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0735{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1578254908457,"flow_last_seen":1578254908475,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feodotracker.abuse.ch","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0412{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0JkBAADYGgqWXZUIxwKgBoAG71hTYdp3Hq+PiSoAQADgXbgAAAQEICnKdu4cBv7cX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2247{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1578254908457,"flow_last_seen":1578254908490,"flow_tot_l4_data_len":2097,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feodotracker.abuse.ch","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2240{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+JK2Haod4AQD9X9EgAAAQEICgG\/tyVynbuH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2250{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+JK2Hatz4AQEAD3jwAAAQEICgG\/tyVynbuH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2257{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":1434,"pkt":"KDc3AG3IEBMx8Tl2CABFAAWMJkRAADYGfUmXZUIxwKgBoAG71hTYdq3Pq+PiSoAQADha5wAAAQEICnKdu4cBv7cXbR\/LX8nVOu2fvuHvWFyjyBSf2+8VLzx\/QeXyjMJokT1EA2WFxc4WCWKwGvR+\/BLYJMtHu4C10XjRAu40GwAEjzCCBIswggNzoAMCAQICDkbwjNvPLFRm7zMB3V80MA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRAwDgYDVQQLEwdSb290IENBMRswGQYDVQQDExJHbG9iYWxTaWduIFJvb3QgQ0EwHhcNMTUwODE5MDAwMDAwWhcNMjUwODE5MDAwMDAwWjBXMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEtMCsGA1UEAxMkR2xvYmFsU2lnbiBDbG91ZFNTTCBDQSAtIFNIQTI1NiAtIEczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8B14TKY5dmuhHyN6CNfRpVbTKIlcNeQBIWAybX0imVNksulxEKgtnklMe3xhSDNE1E9Z6yXTWibM4Zcs3stqt93oGHR9Tz7mvzT1ZTKyR6AG5CQyKyN9mAXnDG4xWGi4m5XJQhvJJmZz5S\/x4trsB\/KFPoYm2wQfJkr2kpj5bJOwv0+EAtI9HcLL\/CWSzruvTXehY3aEw7OAcRx09N3xQimYDklpydpXIPRb3Z47sVEW0W9KTvixgkPor4r3ONc2lpvjufJB2t+ocBTlYKJ4Hhccqhsvmdrq+cz2Yfy+Fwn9PYqO4fv2sJH2r+s6ydke0xT6zThL5sgTVQSa30ovQIDAQABo4IBUzCCAU8wDgYDVR0PAQH\/BAQDAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH\/AgEAMB0GA1UdDgQWBBSpK4fhziRHOxu\/z4U3AlWdDZRY5jAfBgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo\/\/z9SzA9BggrBgEFBQcBAQQxMC8wLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL3Jvb3RyMTAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL3Jvb3QuY3JsMFYGA1UdIARPME0wCwYJKwYBBAGgMgEUMD4GBmeBDAECAjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAoh1pigqOxBSDKioSTTknkE7wjazSlmJHNl6S0frFk7U3B2Up0vRTUGvJ9P409d24Hfr83BSsVpQnnEKqBE237VjZmdJJ5iAv06d3uCqJGu+nz4Yt1lPpC5OcTqvZRe6khIX\/NOQOwLulzl+ViYVwqsFd7M8r09mD3wPKgacCMrd3YRAlTtl089l5grUmcLRSvI8z14quGdD8kq0vujygSFhHXv0gVpUgwXIdq2aZpNV4N0gbn7JMN2d6\/ULS01ae0x2OxAxolrZHURD3e+sVCWT1+fBjFi093yNCOpNjzKuvT1cGx\/4UVWLOJxEZ4fRC7SIwazUaSgWApGXfzMtv0BYDAwFNDAABSQMAF0EEawxlsOPuC\/v6LcxjIYDdYK5Ef1pmh3pllnUlqZjGwLrqzaj1eiuLrGdt9kwOYB9ci5Qe9SBpSUxu4l57XQQp5AYBAQBe9Buretkf0+bEQtIAAIujrnbbG4g5USUjrun5rI4edUoHW0hniFtzIhgRMhGPoRKcRb0c10lv","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+3479{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","flow_id":0,"flow_packet_id":11,"flow_first_seen":1578254908457,"flow_last_seen":1578254908490,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":578,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"feodotracker.abuse.ch","server_names":"p2.shared.global.fastly.net,*.12wbt.com,*.2bleacherreport.com,*.3bleacherreport.com,*.4bleacherreport.com,*.8bleacherreport.com,*.abuse.ch,*.acdn-it.ps-pantheon.com,*.cdn.livingmap.com,*.content.plastiq.com,*.dimensions.ai,*.dollarshaveclub.co.uk,*.dollarshaveclub.com,*.dontpayfull.com,*.ebisubook.com,*.foreignaffairs.com,*.fs.jibjab.com,*.fs.unitprints.com,*.ggleap.com,*.goodeggs.com,*.huevosbuenos.com,*.indy.myomnigon.com,*.jwatch.org,*.kingsfordcharcoal.com.au,*.lancenters.com,*.madebywe.com,*.minirodini.com,*.modcloth.net,*.orionlabs.io,*.ps-pantheon.com,*.scodle.com,*.steelseries.com,*.theforeman.org,*.uploads.eversign.com,*.uploads.schoox.com,*.vts.com,*.x.stg1.ebisubook.com,*.yang2020.com,12wbt.com,2bleacherreport.com,3bleacherreport.com,4bleacherreport.com,8bleacherreport.com,abuse.ch,brita.com,cdn.fwupd.org,cdn.livingmap.com,cdn.seated.com,cdn.skillacademy.com,clinicaloptions.com,clorox.com,content-preprod.beaverbrooksweb2.co.uk,content.beaverbrooks.co.uk,content.plastiq.com,coolmathgames.com,copterroyale.coolmathgames.com,d8-dev.coolmathgames.com,deflyio.coolmathgames.com,delivery-api.evadacms.com,dimensions.ai,dollarshaveclub.co.uk,dollarshaveclub.com,dontpayfull.com,eluniverso.com,email.amg-group.co,email.tekoforlife.co.uk,feedmarket.fr,freshstep.com,ggleap.com,goodeggs.com,heap.io,huevosbuenos.com,identity.linuxfoundation.org,joebiden.com,jwatch.org,kingsford.co.nz,kingsfordcharcoal.com.au,lancenters.com,lists.linuxfoundation.org,m-stage.coolmathgames.com,m.coolmathgames.com,madebywe.com,minirodini.com,modcloth.net,orionlabs.io,puritanmedproducts.com,reviews.org,rg-video-staging.ruangguru.com,rg-video.ruangguru.com,ruangguru.com,scodle.com,stage.coolmathgames.com,staging.appblade.com,steelseries.com,stg.platform.eluniverso.com,test.brita.com,test.heap.io,test.joebiden.com,test.ruangguru.com,theforeman.org,video-cdn.quipper.com,videos.calcworkshop.com,vts.com,www.101network.com,www.autos101.com,www.brita.com,www.clorox.com,www.collider.com,www.coolmathgames.com,www.eluniverso.com,www.flinto.com,www.freshstep.com,www.heap.io,www.holagente.com,www.icsydney.com.au,www.joebiden.com,www.kingsford.co.nz,www.mrnatty.com,www.myjewellerystory.com.au,www.myjs.com,www.netacea.com,www.parenting101.com,www.puritanmedproducts.com,www.reviews.org,www.sba.sa,www.shashatcom.sa,www.uat.ontariocolleges.ca,www.vacation101.com,www.walterspeople.co.uk,www.westwayelectricsupply.com","ja3":"2a26b1a62e40d25d4de3babc9d532f30","ja3s":"ae53107a2e47ea20c72ac44821a728bf","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA - SHA256 - G3","issuerDN":"C=US, ST=California, L=San Francisco, O=Fastly, Inc., CN=p2.shared.global.fastly.net","alpn":"http\/1.1","fingerprint":"E9:34:DF:E0:C5:31:3C:59:7E:E2:57:44:F2:82:E9:80:F5:5D:05:4B"}}
+0697{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":276,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEGJkVAADYGgc6XZUIxwKgBoAG71hTYdrMnq+PiSoAYADjE1QAAAQEICnKdu4cBv7cXzCLA0sJGrzYrkqYeX95fkjAkc1mPtjny9HtgPu1dnBHxIjyZwb3WbSh7xFHdjlJ9LayiCXU+dx64OQO5nS+WLY+1ZElqQk+i9g\/kMcB6yWny8XU2DsJ6luMRen3nv70cCttR1003kBzJKrSDFZmNLiiRMt8ct0QCIqjrBaLKDe9G6enBlLYoyT7wBnHEp28KoHWQu8rl3NwKln2FI3jNRS+GQYNDQGCzFiamKet1KePK0jikPpVZk2uHAbOSr+Z0aJx3kQ31imBNFgMDAAQOAAAA","pkt_caplen":276,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGnuXAqAGgl2VCMdYUAbur4+JK2Haz+YAQD87xlwAAAQEICgG\/tyVynbuH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGnmfAqAGgl2VCMdYUAbur4+JK2Haz+YAYEAAKWAAAAQEICgG\/ty9ynbuHFgMDAEYQAABCQQTH5tGUopjSjWc3V5g8OPm4JB2tlghwqc4c7itepwfZrwFWixAP48WmSW\/oHUg0\/tDllM9KvSI4LF83FbIwkaj5FAMDAAEBFgMDACgAAAAAAAAAAGH0xPBqc1LQH3P3k4+rU181NnTrTx84D0HwPLdrBsFz","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","pkt_oversize":false,"pkt_ts":1578254908,"pkt_len":117,"pkt":"KDc3AG3IEBMx8Tl2CABFAABnJkZAADYGgmyXZUIxwKgBoAG71hTYdrP5q+PiyIAYADhRZgAAAQEICnKdu40Bv7cvFAMDAAEBFgMDACj8bciWxFxco8nBV+vz6uJapqJf1ww4lYVxVlyDlR2X\/\/a25cyE9xS0","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0487{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap","flow_id":0,"flow_packet_id":48,"flow_first_seen":1578254908457,"flow_last_seen":1578254908551,"flow_tot_l4_data_len":20597,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":429,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.160","dst_ip":"151.101.66.49","src_port":54804,"dst_port":443,"l4_proto":"tcp"}
+0161{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tls_verylong_certificate.pcap"}
diff --git a/tests/result/nDPId_tor.pcap.txt b/tests/result/nDPId_tor.pcap.txt
new file mode 100644
index 000000000..a91e382ca
--- /dev/null
+++ b/tests/result/nDPId_tor.pcap.txt
@@ -0,0 +1,449 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821660,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0167{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821662,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0167{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0329{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821664,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0167{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1383821665420,"flow_last_seen":1383821665420,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A15AAIAGe0DAqAH8W49d8semAbvp\/8nSAAAAAIACIABVtgAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAAC4G0J5bj13ywKgB\/AG7x6b4Wbj86f\/J04ASOQiLRwAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA19AAIAGe0vAqAH8W49d8semAbvp\/8nT+Fm4\/VAQAQAEIgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":269,"pkt":"UlQA2EYhUlQAWul3CABFAAD\/A2BAAIAGenPAqAH8W49d8semAbvp\/8nT+Fm4\/VAYAQAYUgAAFgMBANIBAADOAwFSe39m5Uhx5LWaEhy\/VSH7GBPue0xnQwvtdptmyyiBdQAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAF0AAAAZABcAABR3d3cuY3Q3Y3RyZ2I2Y3I3LmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":269,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1383821665420,"flow_last_seen":1383821665498,"flow_tot_l4_data_len":319,"flow_min_l4_data_len":20,"flow_max_l4_data_len":235,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.ct7ctrgb6cr7.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0377{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAovfFAAC4GErlbj13ywKgB\/AG7x6b4Wbj96f\/KqlAQAHsD0AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1388{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":802,"pkt":"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","pkt_caplen":802,"pkt_type":2048,"pkt_ipoffset":14}
+0953{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1383821665420,"flow_last_seen":1383821665606,"flow_tot_l4_data_len":1107,"flow_min_l4_data_len":20,"flow_max_l4_data_len":768,"flow_avg_l4_data_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.ct7ctrgb6cr7.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.xkgk7fdx362yyyxib.com","issuerDN":"CN=www.g6ghvisevf3ibuu5.net","fingerprint":"94:F9:FF:E2:7F:DB:1F:B8:19:65:20:6F:F6:DE:B6:A5:D5:AF:14:C7"}}
+0561{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":188,"pkt":"UlQA2EYhUlQAWul3CABFAACuA2FAAIAGesPAqAH8W49d8semAbvp\/8qq+Fm76VAYAP0DsgAAFgMBAEYQAABCQQQBz\/iRhshChnDAfb40Y8MWCXprjP8lZG1DtE+U+j6BWPrq+5OFeCsW2pZ7Suy0BvJsDRr0urFqDxcFndXejXYEFAMBAAEBFgMBADB1hh6st8IRTt9zFzeTFecieoX\/gRdWKeoIyOPbMfbM9ZtQFSMUifno+9FawQ2f0SI=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABjvfNAAC4GEnxbj13ywKgB\/AG7x6b4Wbvp6f\/LMFAYAIOUGAAAFAMBAAEBFgMBADBVGONY7qr+VSoL0tusO+zWBvMzRndz3BHOEZVHB+8buEuy3EGlBEJ4IOcNmaSoQEo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByA2JAAIAGev7AqAH8W49d8semAbvp\/8sw+Fm8JFAYAP1YCwAAFwMBACB0ZHngnVul9\/NrqvzHaXwgcwIQhnFnY8TbxAF8aR5I8hcDAQAgrt1BCg17CnWnOF9fCAs5b\/AwpXaxSWcaCu6nHvL7OA4=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":156,"pkt":"UlQAWul3UlQA2EYhCABFAACOvfVAAC4GEk9bj13ywKgB\/AG7x6b4WcHY6f\/LelAYAINFfAAAlFK4Bju1KGbLaUyXueWpfs8og+tlg7rvm0T\/EAU\/BqYp5q02YH8NXAUnTwWhjczxCbQuIinoc5QlHxemMKZ2wMedl11ySQ5JAoJQHU\/uaOp2YFTScAR8Pz\/CdEiMHtOIHtBBC5dp","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA2NAAIAGe0fAqAH8W49d8semAbvp\/8t6+FnCPlAQAQD5OQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1181{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAovfZAAC4GErRbj13ywKgB\/AG7x6b4WcI+6f\/NxFAQAIz3YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1180{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821665,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1383821666407,"flow_last_seen":1383821666407,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A2hAAIAG0l3AqAH8Ljs0H8enAbvpjJYYAAAAAIACIADhCQAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAACwGKcYuOzQfwKgB\/AG7x6cxNPZ86YyWGYASchBnNQAAAgQFtAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA2lAAIAG0mjAqAH8Ljs0H8enAbvpjJYZMTT2fVAQAQAZGwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0678{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":276,"pkt":"UlQA2EYhUlQAWul3CABFAAEGA2pAAIAG0YnAqAH8Ljs0H8enAbvpjJYZMTT2fVAYAQDoYgAAFgMBANkBAADVAwFSe39nmuU3sweaQVD0jHq0Cq72Q\/dbDCXKTgOCZqGRcwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAGQAAAAgAB4AABt3d3cuZTZyNXA1N2tiYWZ3cnhqM3Bsei5jb20ACwAEAwABAgAKADQAMgABAAIAAwAEAAUABgAHAAgACQAKAAsADAANAA4ADwAQABEAEgATABQAFQAWABcAGAAZ","pkt_caplen":276,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1383821666407,"flow_last_seen":1383821666482,"flow_tot_l4_data_len":326,"flow_min_l4_data_len":20,"flow_max_l4_data_len":242,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.e6r5p57kbafwrxj3plz.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0377{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAoI35AACwGBlQuOzQfwKgB\/AG7x6cxNPZ96YyW91AQAB4ZHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1390{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":803,"pkt":"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","pkt_caplen":803,"pkt_type":2048,"pkt_ipoffset":14}
+0993{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1383821666407,"flow_last_seen":1383821666558,"flow_tot_l4_data_len":1115,"flow_min_l4_data_len":20,"flow_max_l4_data_len":769,"flow_avg_l4_data_len":185,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.e6r5p57kbafwrxj3plz.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.gmvuy6mtjbxevwo3w.com","issuerDN":"CN=www.bpcau5b3haif5els.net","fingerprint":"3A:B1:8A:6F:C3:F6:41:ED:77:D5:40:C3:85:79:8B:62:46:BC:65:9C"}}
+0558{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":188,"pkt":"UlQA2EYhUlQAWul3CABFAACuA2tAAIAG0eDAqAH8Ljs0H8enAbvpjJb3MTT5alAYAP3tDAAAFgMBAEYQAABCQQQbCwji4LUZT0epSH0gj4mvHkh2ZeQtzOVA1S7vs3bZ23H+4gJJqoM2Dz1h4aKovW61xcrmP4JLevLNNBaCJDBjFAMBAAEBFgMBADDcfk8P+jYf+z7UeGSu8le4RjkGrW6Vw3SLThiYsnvGmMLEq9EIBVULs+mRW0ZhKbc=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABjI4BAACwGBhcuOzQfwKgB\/AG7x6cxNPlq6YyXfVAYAB8mlgAAFAMBAAEBFgMBADB7EOw8+wEtEdpBi+G7JcCsTcVRGogcbGSmNZC1iS7tC4fMNHvHjM1Gc\/QZkOBwWaQ=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByA2xAAIAG0hvAqAH8Ljs0H8enAbvpjJd9MTT5pVAYAP0wUQAAFwMBACC8MSttPKbpeuJql1UlAtNdadSILn5gK8Svy7ekD6MzsRcDAQAg7tsD6870z1FfLFv1BukG3ypusdNwWJbe+1lZO4ENyNk=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":156,"pkt":"UlQAWul3UlQA2EYhCABFAACOI4JAACwGBeouOzQfwKgB\/AG7x6cxNP9Z6YyXx1AYAB+G+gAAVER3pCFQdATTBWP32oDDl7luztY6hDTRZFbrfeBHH\/K7B7FTDtivB0oCvTQwnCIwmX7TjvJmsIPa22peWs6h6lrwLjBzXOZB8WHoXV2Fc86Xes8wK8hETqsXm+xduCOX4cbMilip","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA21AAIAG0mTAqAH8Ljs0H8enAbvpjJfHMTT\/v1AQAQAOKwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1176{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":640,"pkt":"UlQA2EYhUlQAWul3CABFAAJyA25AAIAG0BnAqAH8Ljs0H8enAbvpjJfHMTT\/v1AYAQAQ8wAAFwMBACA4Eq1ZlDN9MT4mEfesQ61r03W0MOye0xlvRXJ\/lsXmRxcDAQIgBToIADsM11A6egSHeO3SYlUFuW0XD5a2KDsW0o1mggGUxjdHsTQJNT7X47yyC0Cdv++vewdlInSO1GgBL+SfDtkdYd1LkkD100BiI8\/4Qu6yU4VFAMYB2CeuPkYNPf3FHP5DuQwpBQSKEIQq0md+Y5c6zALX8OK6+SCwMSZ9PO+DsXlgARfYM\/F\/JqkJnzadtcb9w3IlW2EhR7cJ+8Ro4+G31uUdwhgeYJKy2WRGfopfDwNe94PSp97n+LUr1CnhsMp9oDescmIdYc3jB408CwfK1CgaSU75Wjm2QHk5jfReKP3mzXv66qrxlHtjmCwYa+WEghW35CzCD1qMV5Z+Pm129fU+LcqY0euW4zifpEeb8qmuepqNf22z1Vt8\/lXEHfqkH3EC1f3oa+Cv\/c2dRQxGFY3TRkBBa4fJ5n\/fSN+Zt0Cx9+hGjWAp+7k+X4gPQ41BVdq+9blhBJA\/RlbTMpo8f4\/4DKVEbozYpNjzcdcNcgUcqt0FLxmwVuZapvr971K5eIrA9zkPugok04gjpfxfzHhxlySAkUsRh+7qDlyc\/60gibCEsNp1j1gu935h3qfN5n4z0+yma+3Xd0w0ze6XK+9IlUrY+67ygj04BWN6jrpdCYM59H8Izlhf\/2l2Z\/lRU1jzrMsJtnWRVRBGtyWtAgMc4AFMKzSSEndt6pNrZJKksg151U5rQieJ+mEfiAVOqr6QkVm5boLDNLAxDw==","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAoI4NAACwGBk8uOzQfwKgB\/AG7x6cxNP+\/6YyaEVAQACAMwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1175{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821666,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1383821668403,"flow_last_seen":1383821668403,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0A3VAAIAGx5DAqAH8JuVGNceoAbuUs9YxAAAAAIACIADrCAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADQGFwYm5UY1wKgB\/AG7x6iEDREglLPWMoASOQg8wAAAAgQFtAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA3ZAAIAGx5vAqAH8JuVGNceoAbuUs9YyhA0RIVAQAQC1nQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0683{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":278,"pkt":"UlQA2EYhUlQAWul3CABFAAEIA3dAAIAGxrrAqAH8JuVGNceoAbuUs9YyhA0RIVAYAQDlUgAAFgMBANsBAADXAwFSe39pbZn4CAZLPeIeRH8NC+wysEGwDtFI6Y81\/Q\/FOwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAGYAAAAiACAAAB13d3cucTRjeWFtbmM2bXRva2p1cnZkY2x0LmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":278,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1383821668403,"flow_last_seen":1383821668548,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":20,"flow_max_l4_data_len":244,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.q4cyamnc6mtokjurvdclt.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0377{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAodvRAADQGoB0m5UY1wKgB\/AG7x6iEDREhlLPXElAQABC1rQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1629{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":983,"pkt":"UlQAWul3UlQA2EYhCABFAAPJdvVAADQGnHsm5UY1wKgB\/AG7x6iEDREhlLPXElAYABC9qQAAFgMBADECAAAtAwFSe3FkFBSyW8wepaOLNrHGBX6ujzo8E8jJ3hV5JUvPxQAAOQAABf8BAAEAFgMBAcsLAAHHAAHEAAHBMIIBvTCCASagAwIBAgIIQu7SDsoDvGgwDQYJKoZIhvcNAQEFBQAwITEfMB0GA1UEAxMWd3d3LmdnNTYyaXpjeGR2cWRrLmNvbTAeFw0xMzA5MTUwMDAwMDBaFw0xNDAyMjEyMzU5NTlaMCExHzAdBgNVBAMTFnd3dy5mY3N5dm5sZW13eHY1cC5uZXQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAJQ5+9Jafzi9QKeOG1kHDMDsvWpuxkXpeqU5V0auc99fup3dK8JdNTGzu3St2C7rtsHg\/aOI\/RD9LBPI3jkM\/bU0HyaJ3ATnGMkGr5BqkEX3ztOgHRZwu+TnTmi+fZZYOYr6X\/P1TAaEG\/JhZstA4GTErKlTy7h8CUyjLfJJOEhDAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAczayP3BW1GC9VJrrjJIooGh9+Wn4OGeizzpTmcCFI8IoeRhpPTIKqepFXqDaxPlMKybjBOaBnrwjugwfJouvDQ5AWM8LmNJinE97MZJTCtJdki6wMXqQ\/ENtzXqVsU9szKRr4KBKbjpnMQxheyATYof7q025Meevj610uNi4SCIWAwEBjQwAAYkAgNZ95EDLu9wZNtaT00r9CtUMhNI5pF9SC7iBdMuYvOlRhJ+RLmOccvsTtLTXF34W1VrBebpCCyop\/jJKRnpjXoH\/WQE3e+3c\/TMWikYarTty2uiGAHgEWwen28p4dAh9FRDqn8yd3TMFB91i24iuqnR94PTW4r1osOc5Pg8kIY6zAAECAIC7NDsQgl1IAWKbRx1wHPylgZjfFRnDGoYNfQ7CNaqRXHVejZyQnn6wNxAX2btR4cHb94VBJHyDz7731tfwYVhKU0Q0uQ+9iUV+KttLf4WfEH1OPgH35Lx+gZDuhiP6HSf7zcDaWz9UsBaGz5RpkdjpNOWfJEY2DOahHxjPJn9rAgCAPu2BuVcYmwTooEwYEE91V6CDblIATWpwKW\/TTRBsnSpOw2KnYuG7m0Xlmbfg1qWpqJep8soTArmFtgLXw0ykgqE3hliGUbTWkGTb5TgEp5QccknHUgEE5eiM4FmSQpPQAOha3Vv0rrVEZTpoq6WO4d3vecLDTlOfJdSF3sF8QF0WAwEABA4AAAA=","pkt_caplen":983,"pkt_type":2048,"pkt_ipoffset":14}
+0989{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1383821668403,"flow_last_seen":1383821668700,"flow_tot_l4_data_len":1297,"flow_min_l4_data_len":20,"flow_max_l4_data_len":949,"flow_avg_l4_data_len":216,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.q4cyamnc6mtokjurvdclt.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","issuerDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}}
+0644{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":252,"pkt":"UlQA2EYhUlQAWul3CABFAADuA3lAAIAGxtLAqAH8JuVGNceoAbuUs9cShA0UwlAYAP1UZwAAFgMBAIYQAACCAICVqs\/lAnDz1OCq70x00UceWrtuOw3N0LPh14jZeUdb0SIrh+q2nw7OzMPTMbvR2F3l+e9Ge2cO3B9dU3NuyuxmC2T11LmEuzT\/Hf14mMzupeO2yAdSPyikLwGzVW35ZClY6hUlpdVjzbtMcZLgCVrp1P2c6gx2eE0q2TMx74J8ShQDAQABARYDAQAwUYDo0syC7vcphX7PaChw29yHdSCulVCitJfgxPBnmRO2gFPOcCsNzcRdYYMrxKaX","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABjdvZAADQGn+Am5UY1wKgB\/AG7x6iEDRTClLPX2FAYABG6QQAAFAMBAAEBFgMBADAaY3i5fXWZ4AML4bIyljsoDgZZBOXmk153GE8srIolG5kCI8vhcZkuXXaLWjel7Is=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821668,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByA3pAAIAGx03AqAH8JuVGNceoAbuUs9fYhA0U\/VAYAPwTKQAAFwMBACAk0DxcKn+Ish+ZeQZv7WaMFXe8WkhVh9eJrY8qC7+55RcDAQAgv+Szj7Xko2kB53mat2M83QOGXHAJE0170QxkHpJFs+o=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+2358{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821669,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821669,"pkt_len":140,"pkt":"UlQAWul3UlQA2EYhCABFAAB+dvhAADQGn8Mm5UY1wKgB\/AG7x6iEDRqxlLPYIlAYABFsQgAAtOEeeSqjjatNM2LKIIKkbQ9+gT4Uh5pobbEdpliLZZqJixqlP1dBaV43awoMtY+5haP34rVXvO0ybuj+F160vqDVYPzmU4jJ5llkNPK6ook53R5pqas=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821669,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoA3tAAIAGx5bAqAH8JuVGNceoAbuUs9gihA0bB1AQAQCpxwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1175{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821669,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821669,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAodvlAADQGoBgm5UY1wKgB\/AG7x6iEDRsHlLPabFAQABKoawAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1176{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821669,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821670,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821672,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1383821673254,"flow_last_seen":1383821673254,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0563{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821673,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1383821673254,"flow_last_seen":1383821673254,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821674,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821676,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821678,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821680,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821682,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821684,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821686,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821688,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821690,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821692,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1383821693159,"flow_last_seen":1383821693159,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0651{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821693,"pkt_len":252,"pkt":"\/\/\/\/\/\/\/\/UlQAWul3CABFAADuA4EAAIARsTLAqAH8wKgB\/wCKAIoA2itVEQLJT8CoAfwAigDEAAAgRUZFT0VFRUpFQkVPQ05GQUVEQ0FDQUNBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAKgAAAAAAAAAAAOgDAAAAAAAAAAAqAFYAAwABAAEAAgA7AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABFTkRJQU4tUEMA","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1383821693159,"flow_last_seen":1383821693159,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821694,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0330{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821696,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0168{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821698,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821700,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821702,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0564{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821703,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821704,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821706,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821708,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821710,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821712,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821714,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821716,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821718,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821720,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821722,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821724,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821726,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821728,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821730,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0987{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":2,"flow_packet_id":255,"flow_first_seen":1383821668403,"flow_last_seen":1383821731378,"flow_tot_l4_data_len":208500,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":817,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","16":"Suspicious DGA domain name"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.q4cyamnc6mtokjurvdclt.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","issuerDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821732,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0564{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821733,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821734,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1383821734359,"flow_last_seen":1383821734359,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp"}
+0386{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":673,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821734,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoBE1AAIAGeHjAqAH8nTgeLsegAbuzcgvfGiCX\/lAUAAD2+QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821736,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":690,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821738,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":755,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821740,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":806,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821742,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821744,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0331{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821746,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0169{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821748,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1027,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821750,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821752,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821754,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821756,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1093,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821758,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821760,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821762,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0565{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821763,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821764,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821766,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821768,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821770,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1807,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821772,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821774,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821776,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821778,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821780,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821782,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821784,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383821786,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":0,"flow_packet_id":141,"flow_first_seen":1383821665420,"flow_last_seen":1383821774457,"flow_tot_l4_data_len":63576,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":450,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51110,"dst_port":443,"l4_proto":"tcp"}
+0505{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1383821734359,"flow_last_seen":1383821734359,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1383821734359,"flow_last_seen":1383821734359,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"157.56.30.46","src_port":51104,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":1,"flow_packet_id":34,"flow_first_seen":1383821666407,"flow_last_seen":1383821774461,"flow_tot_l4_data_len":9950,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":292,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"46.59.52.31","src_port":51111,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":2,"flow_packet_id":1576,"flow_first_seen":1383821668403,"flow_last_seen":1383821774532,"flow_tot_l4_data_len":1332694,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":845,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51112,"dst_port":443,"l4_proto":"tcp"}
+0565{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822123,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822124,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1835,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822126,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822128,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1837,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1383822129889,"flow_last_seen":1383822129889,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CJdAAIAGvzrAqAH81FOb+sfmAbsbVwNmAAAAAIACIAAzvwAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1383822129897,"flow_last_seen":1383822129897,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CJhAAIAGdgbAqAH8W49d8sfnAbtnuw7MAAAAAIACIACSwAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADEGFtLUU5v6wKgB\/AG7x+atYj18G1cDZ4ASOQgvyAAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCJlAAIAGv0TAqAH81FOb+sfmAbsbVwNnrWI9fVAQAQCoogAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAAC4G0J5bj13ywKgB\/AG7x+fD3pw1Z7sOzYASOQgZlAAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCJpAAIAGdhDAqAH8W49d8sfnAbtnuw7Nw96cNlAQAQCSbgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":263,"pkt":"UlQA2EYhUlQAWul3CABFAAD5CJtAAIAGvnHAqAH81FOb+sfmAbsbVwNnrWI9fVAYAQBc+gAAFgMBAMwBAADIAwFSe4E3FMYInxr2a\/LGdBo7iY6X3woxpwwwB2E4X+3g5wAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAFcAAAATABEAAA53d3cudDNpM3J1LmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0739{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1383822129889,"flow_last_seen":1383822129965,"flow_tot_l4_data_len":313,"flow_min_l4_data_len":20,"flow_max_l4_data_len":229,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.t3i3ru.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0668{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822129,"pkt_len":267,"pkt":"UlQA2EYhUlQAWul3CABFAAD9CJxAAIAGdTnAqAH8W49d8sfnAbtnuw7Nw96cNlAYAQCN\/AAAFgMBANABAADMAwFSe4E3htlD0jNwndR+1ou7jED0jjAcq7bR5WAiBXnUvwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAFsAAAAXABUAABJ3d3cuZ2Z1N2hieHBmcC5jb20ACwAEAwABAgAKADQAMgABAAIAAwAEAAUABgAHAAgACQAKAAsADAANAA4ADwAQABEAEgATABQAFQAWABcAGAAZ","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0742{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1383822129897,"flow_last_seen":1383822129972,"flow_tot_l4_data_len":317,"flow_min_l4_data_len":20,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.gfu7hbxpfp.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0379{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAooqlAADEGdDTUU5v6wKgB\/AG7x+atYj19G1cEOFAQAHuoVgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1384{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":797,"pkt":"UlQAWul3UlQA2EYhCABFAAMPoqpAADEGcUzUU5v6wKgB\/AG7x+atYj19G1cEOFAYAHuyMAAAFgMBADkCAAA1AwFSe3L53X2pEnJ+sMNK7yLUj\/W6pO2+NRex4VwJn0DBEwDAEwAADf8BAAEAAAsABAMAAQIWAwEBywsAAccAAcQAAcEwggG9MIIBJqADAgECAgggWXsb82yVFTANBgkqhkiG9w0BAQUFADAhMR8wHQYDVQQDExZ3d3cud29oZ3BhczQ1ajZ1Y3cuY29tMB4XDTEzMDkxMTAwMDAwMFoXDTEzMTEyNDIzNTk1OVowITEfMB0GA1UEAxMWd3d3LjdkNDNhaDJraWtyYWJqLm5ldDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAyklKQGQkcctz93HgInj2t1gLlEeTreYlTjt5cVuEnkRhvnpxBBhUZcDOSffaAx9+S0RFFDudqL8\/TeDZIwrCCOxcwFVb+zUytTfEc8ly5MA1G7S5d2I\/x5yvg04rZJRI9\/q5ks8spXJHHzSyzwoRTx50l96ITtI3yPQNeVSHVUcCAwEAATANBgkqhkiG9w0BAQUFAAOBgQC38KFCTBghhDrxpOEFUDAKZE4bCRug43WMb6jvNo\/BPXQ48wsYWM\/S+47KwCPqXVUNCDyMF+wvJ2aRBnR37D+\/ayO\/p7RlBCVwDONA9IZk20eslgIepjkM58HbyrjYv5PJpyqgB0BsDzJJ400K0\/0xL29Q2pOCbmf5\/QOa\/soHuhYDAQDLDAAAxwMAF0EEqppowQXXYJtKnNsDr3CjDoKRPdSy8GzPWFf2pW59bta1CDBd2K0DAFHTa+02CMVDmRNatXtDgujISj+n9Smk7QCAb3zAMJEE0ZhtRVfh24BgLQXvLqOzphBWw67izOerVVz4biNemHUEOkNwxD+9oynPQgMUOQR3MDvw5YUW7GSS7yczMzYXquDqWDrOY8Ns7gaPrsQ1YbSUTuO7mrfNLqHYD1sSjpyqfIn2S3zLLZ7+opf6vOO4LybO3Wf9JdFNFCsWAwEABA4AAAA=","pkt_caplen":797,"pkt_type":2048,"pkt_ipoffset":14}
+0946{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1383822129889,"flow_last_seen":1383822130023,"flow_tot_l4_data_len":1096,"flow_min_l4_data_len":20,"flow_max_l4_data_len":763,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.t3i3ru.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.wohgpas45j6ucw.com","issuerDN":"CN=www.7d43ah2kikrabj.net","fingerprint":"F9:1D:5F:89:8F:D8:58:1E:45:E7:9B:A6:FD:90:95:77:FF:DD:E8:1B"}}
+0563{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":188,"pkt":"UlQA2EYhUlQAWul3CABFAACuCJ1AAIAGvrrAqAH81FOb+sfmAbsbVwQ4rWJAZFAYAP37zgAAFgMBAEYQAABCQQQirs+7bZ92YZQcxZd+2DqfqldWcJ\/uP\/ceE0gwSB7sufju+Ou\/tmWkLRzvFyBtO+ky9kbj5Lk5KBHB2Iw8kEPgFAMBAAEBFgMBADD1vChkZBoQ7JL0US4P8m+ntzIHU6Wo0YrvCmKRLKn0gkpxAE5NLpPezGJYavoceMs=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAoVpRAAC4GehZbj13ywKgB\/AG7x+fD3pw2Z7sPolAQAHuSHgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1392{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":802,"pkt":"UlQAWul3UlQA2EYhCABFAAMUVpVAAC4Gdylbj13ywKgB\/AG7x+fD3pw2Z7sPolAYAHsRlAAAFgMBADkCAAA1AwFSe3Mya1gXPjAm53azNqffVZKBFeKBDmPnY4w6w9WrzADAEwAADf8BAAEAAAsABAMAAQIWAwEB0AsAAcwAAckAAcYwggHCMIIBK6ADAgECAghNHmd17ZYxhDANBgkqhkiG9w0BAQUFADAkMSIwIAYDVQQDExl3d3cueGtnazdmZHgzNjJ5eXl4aWIuY29tMB4XDTEzMTAwMzAwMDAwMFoXDTEzMTExODIzNTk1OVowIzEhMB8GA1UEAxMYd3d3Lmc2Z2h2aXNldmYzaWJ1dTUubmV0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHZ8HsrDd3h3QHNwmeQmsZhanoLQrgAdOGeNpqPnN8EeEfWHfAhERw2P2X\/65ntH30P1+pO341gfmDPiVnWKrKbdemOhWc5+hwLlrFMBHRwZhKfLV209jv90DdPiH2IEACikyepIw6POeuekcFmqTOmoCEJTbNBSj+8LU10shZzwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAAld0vA63k+sJBP0ASZPfowRgyf+KO3kn9u3Vfn7j2WGuu25E+hu31LvqyGY8p7YDhLtCfkLQW1kVQfVdYZigxa2W4XZzHJjJYQrJ4F3JAYrDHIJCSkFotsj+MHGvK8RMtwgWN\/DmTm0H+ElopdeZ6A1Yuf68M1eu+xcwU2J0cvXFgMBAMsMAADHAwAXQQSv97\/ilH42iFMoakelVTbrRTFAZqGEhYWR4S3V07Pyvxs1FvawqYKlRiM9gWAzXMX3bH1mpgVzLKUzeldVvvMfAIBVo+FA8tVYJ+HmyEdPa4Bdq+fFwyKjkuUjQTrHZKNrhamWl\/lB\/Ebo5CHux4Al+fZgZ3+QV\/Qd226bY9RwWJMGz\/2mP\/I1NkneJVmd+dkjXIeap\/WZmuZpe7HnTO5Mr1\/5mFqkmCL0boxqqxqxKDf58gCY\/Dfggk9bCoIClc40qBYDAQAEDgAAAA==","pkt_caplen":802,"pkt_type":2048,"pkt_ipoffset":14}
+0954{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1383822129897,"flow_last_seen":1383822130047,"flow_tot_l4_data_len":1105,"flow_min_l4_data_len":20,"flow_max_l4_data_len":768,"flow_avg_l4_data_len":184,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.gfu7hbxpfp.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.xkgk7fdx362yyyxib.com","issuerDN":"CN=www.g6ghvisevf3ibuu5.net","fingerprint":"94:F9:FF:E2:7F:DB:1F:B8:19:65:20:6F:F6:DE:B6:A5:D5:AF:14:C7"}}
+0564{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":188,"pkt":"UlQA2EYhUlQAWul3CABFAACuCJ5AAIAGdYbAqAH8W49d8sfnAbtnuw+iw96fIlAYAP2\/YgAAFgMBAEYQAABCQQTOrOIMUq8r6n1aKYiNs7U2FFNAVDNnCvPBG2\/LKMvoSWVofCBD3sAosTws5sK\/9czSs3fhclBVGnT2zMaH3JdCFAMBAAEBFgMBADAuL1gg35pDGio6a0sJwrrveSJC9yOSrYPI1ot\/w0ux0mAKfgjlBtwnXbCgD70pNiU=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABjoqtAADEGc\/fUU5v6wKgB\/AG7x+atYkBkG1cEvlAYAIO3AgAAFAMBAAEBFgMBADDfL2A9XXe6ItVkvPujf8ZlF9xDBUk6le1K6Q6vBc+xdpwWP5E1hcztjRUOvKJL2iM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByCJ9AAIAGvvTAqAH81FOb+sfmAbsbVwS+rWJAn1AYAP2ryQAAFwMBACDOqfI9\/1zpoMalpFDIOq\/+t2OKhFCF0\/8W1gJZQrk9KhcDAQAgdqvsCDJjPYM1XmS1wYHUGxKvFb4w\/k11fkDeEVu2xhM=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABjVpZAAC4Gedlbj13ywKgB\/AG7x+fD3p8iZ7sQKFAYAIMY5AAAFAMBAAEBFgMBADDWPPX7VChtt08EmUmyzO87isAFionW9SQNjfHMNzc+tALKFfoR\/TaNRvPxtsXneT0=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByCKBAAIAGdcDAqAH8W49d8sfnAbtnuxAow96fXVAYAP2G4wAAFwMBACBarV674uFbInB3pTFcBueGFdmsyCgbEeRL6pX3lZqwThcDAQAgWKwRGPpguwkxnyPhKGzQTukNt2gLIny1JyRru0XDTa4=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":140,"pkt":"UlQAWul3UlQA2EYhCABFAAB+oq1AADEGc9rUU5v6wKgB\/AG7x+atYkZTG1cFCFAYAINoGgAA3rVYxihbF8LRtZ6y\/IcR8KqhJKBv9vpV8uSkN2O44VCdviItQt55KTBPOlfgbNronl7jP7P516cHRLbeTLmLrG97gYF0YenprFkN4R3f95Q+XX0RCeQ=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCKFAAIAGvzzAqAH81FOb+sfmAbsbVwUIrWJGqVAQAQCd1QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1178{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+2365{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0519{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":156,"pkt":"UlQAWul3UlQA2EYhCABFAACOVphAAC4Geaxbj13ywKgB\/AG7x+fD3qURZ7sQclAYAIMMCQAAkTLs5DyotF2bx+ngCG4gXdgKUSvNexOGfi782LqvLHWdIhufdgogTQK6cUso\/PYhSv0yGYSLO1Gv14bD0kpYtxpGVUywRJtPWHZigJIrXsQA3bErimLkXxSBc1Os3F8LjXcSBrYe","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCKNAAIAGdgfAqAH8W49d8sfnAbtnuxByw96ld1AQAQCHiAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1182{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":640,"pkt":"UlQA2EYhUlQAWul3CABFAAJyCKRAAIAGc7zAqAH8W49d8sfnAbtnuxByw96ld1AYAQAg7AAAFwMBACD\/PxVnKTJDf0u98kfy\/GwOwKrRjxW6WWVZK3+fdkEb\/xcDAQIg2paFoPNFm3AShdp\/iFzkK6e6+gmum0SmxqWOFbRoYsyAYvgK5zBB0dCRJ3wWaYnWODl\/MvTBP5g31zbkm6bZAIKetsnCCM\/12FHdJZIkZJTt3J2HXZwnAl8OCzKrbK+c3u9rXRluMyAVbp739+jeE8G9H0XZwMcpeIoOhlRhArzNkBO8W+2PEt9JrohmCpPNaiIu2eK2V+aHl6Za\/TZVuMWQDDj3\/+jONcZrFcZQvUT4QlnrJNem1GkhfMLB5Bgr+FQeNJj7\/1H8KgE3zIz67sBTF1jSyNkBv3ytT8j8EEURN02tlmnwl60JMQL4Xf2rKjoT7eg3m9zHNsFoZmQ0l56qI+RVI\/73B5EAl2nKVytryxLAVgK48XHlCWBmQvPvwpAzPSHL\/a+R3uKkcNOG0gltp95xLSGzXh2VukHaTM+vlKKgWqkaLXpP9qBJx5EdKomJZJNaCEh5B8o9fk6b53tncDZLkGDOD9P0GJ4RttmLSLNBkR4VEaDBSSFyTk1B8l\/mfdMXKvr4Su89gz6KHGVgsHfxm9HMkpvlxLqSPFZZ1HAxNKGVpw5sCwzkyNyTpKHgbwKxMfTxOpfKpMMZMJYSVczqJM03L5\/6Owj0If\/IXit8Ocli1x3roaoMsskgI2PFo+oduNIzuzPI\/\/VjFMO4nHDLqx0xUhUFvJQ7CMdYOx1u6m9DuBJBotWUzjOWKf4Ig7ALSn\/gjkotSr05ew==","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAooq5AADEGdC\/UU5v6wKgB\/AG7x+atYkapG1cHUlAQAIyb\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1175{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAoVplAAC4GehFbj13ywKgB\/AG7x+fD3qV3Z7sSvFAQAIyFsgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1181{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":640,"pkt":"UlQA2EYhUlQAWul3CABFAAJyCKdAAIAGc7nAqAH8W49d8sfnAbtnuxK8w96ld1AYAQCeOAAAFwMBACAz5YAEXPD9Qp6lyJHqu1BSVaHO73GRNQm8Htgf0+c9mxcDAQIggGSqd7QMnsJ4kHJMLOklbVLNgwUP\/EkZy7W3NwFozzCote80AtSk7sn6fxe8acuFRFCQKIbQM5JkKbLFJdsaVBQIS8KJ3mJqEcN17ES7yv5X7kmwtAY0Oj+Qn\/O4MiKZiIbqCXUuIXBs30w6k5i1XKkR\/YjI1yzaosB78mCP1N+MitRHHOzKJ9BIN4RckCB0ahIg+SW3srzVgs\/hUNP4hLSwA9r1bn6Wx+XHvuNF74KSSRthK+UB\/PbjZmI13OCt6kBCakhFRLo4xd1Znv2Pfbt7FqyHdLdHCBcsGD5Uvdtw8qWMKPEXLk4NoW11tQXMBdwCgl\/xGuIkXESj2qcd+a6G\/U6B0dEP6RlAAX7I5nDrY50PtBQ94gZLzKB2qfFxI3h0QACydQDa1E2U\/DYgZWjvoy4r8eOXazr+Kwq8DkGePJs8qqu1PjYknNmPq\/hHKHLKZUAJ1IBCeVI4vX+BTiiooRLb09iC6svjWG00Y\/b+8hUWDkM60gjsOfnXmKe2Gmtai4EAK1BhjnT\/RDUesrNd1VdrsxdUqjj8s3SAUTlKeqcxkD3BLawtjcU5vI\/ChZmMJyoWadYf6Jq7tFuHIfLRmpSVDM39OBv8K4ikJC\/r5Tb12+qassYZfOLPbD\/SvIb+tyWIo\/\/o3GZf3Ucp04R7Pi0FoX8Ifpgv2ENVeAXzErpm7zVYy8TvEmUz3OuTxmPK6l0aAG8fU4fQnhW+nQ==","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1383822130889,"flow_last_seen":1383822130889,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822130,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0CK1AAIAGwljAqAH8JuVGNcfoAbv0twffAAAAAIACIABZFwAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADQGFwYm5UY1wKgB\/AG7x+hg0\/cE9LcH4IASOQjoIwAAAgQFtAEBBAIBAwMK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCK9AAIAGwmLAqAH8JuVGNcfoAbv0twfgYNP3BVAQAQBhAQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":264,"pkt":"UlQA2EYhUlQAWul3CABFAAD6CLBAAIAGwY\/AqAH8JuVGNcfoAbv0twfgYNP3BVAYAQATzQAAFgMBAM0BAADJAwFSe4E45UNCHF+9nmoqAUUyRuC4BvKCHcuaRNsIL6pQWAAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAFgAAAAUABIAAA93d3cuam10czJpZC5jb20ACwAEAwABAgAKADQAMgABAAIAAwAEAAUABgAHAAgACQAKAAsADAANAA4ADwAQABEAEgATABQAFQAWABcAGAAZ","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1383822130889,"flow_last_seen":1383822131034,"flow_tot_l4_data_len":314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.jmts2id.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0380{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAogW9AADQGlaIm5UY1wKgB\/AG7x+hg0\/cF9LcIslAQABBhHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1634{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":983,"pkt":"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","pkt_caplen":983,"pkt_type":2048,"pkt_ipoffset":14}
+0943{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":8,"flow_packet_id":6,"flow_first_seen":1383822130889,"flow_last_seen":1383822131220,"flow_tot_l4_data_len":1283,"flow_min_l4_data_len":20,"flow_max_l4_data_len":949,"flow_avg_l4_data_len":213,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.jmts2id.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","issuerDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}}
+0650{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":252,"pkt":"UlQA2EYhUlQAWul3CABFAADuCLJAAIAGwZnAqAH8JuVGNcfoAbv0twiyYNP6plAYAP1iWwAAFgMBAIYQAACCAIC489sTVZq\/GrKwFJ77i9pUjo8mUMWtC+3TfOvVv3\/lZeMgGHHRgTuax8BoSKz6hvfA1XyfqMyXXhhXL\/hmqpwL9+xMKjSKeC1\/nBFQNGi1R9BX0jpaOpJQL\/tEkXCPrXGMaMRX6FbhYcsf0y1KKo8nlIUSjgfqR7Uu68BU+P0kTBQDAQABARYDAQAwR5He0W0\/mJ2cp4A+CQ7sLCv+qfOQ89lzDZTa6EzlNuKFpcImS+UZUc6RvdwtbKaR","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABjgXFAADQGlWUm5UY1wKgB\/AG7x+hg0\/qm9LcJeFAYABE5sQAAFAMBAAEBFgMBADDGp5YJU4NYfAXlehYJRQ2odQmJNNLuW3og1BToTR83Gb0PCN+omLLmSnduJdxzfxE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByCLNAAIAGwhTAqAH8JuVGNcfoAbv0twl4YNP64VAYAPyWYgAAFwMBACD5OA5hWmwcr3qvvvlx80AhOaZ3HeL86UCzuBfLPvgmkBcDAQAg9ZKvZ3vwmeoBnpaDZ9egruCXkAuHZkA8B+2\/ifVrt+I=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAogXJAADQGlZ8m5UY1wKgB\/AG7x+hg0\/rh9LcJwlAQABFcMgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2365{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0500{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":140,"pkt":"UlQAWul3UlQA2EYhCABFAAB+gXRAADQGlUcm5UY1wKgB\/AG7x+hg1ACV9LcJwlAYABFBlgAAbg3TpZARg4wm+rG1P6gsIB+320pAOXPhPDqQBHv9AsE5iDtPAoLy7nBsv2qhovx\/6BMuY2APta\/rDTumORvRPJ3QzUphYOqlnO95xE7KxoyOioKj9sY=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCLRAAIAGwl3AqAH8JuVGNcfoAbv0twnCYNQA61AQAQBVOQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1181{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822131,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAogXVAADQGlZwm5UY1wKgB\/AG7x+hg1ADr9LcMDFAQABJT3QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822132,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1919,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822134,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1937,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822136,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822138,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822140,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822142,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822144,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822146,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1949,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822148,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1950,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822150,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822152,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0565{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822153,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822154,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822156,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1955,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822158,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822160,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1957,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822162,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1958,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822164,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822166,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822168,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822170,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822172,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":1986,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822174,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822176,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822178,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822180,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822182,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0565{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2067,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822184,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822184,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2068,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822186,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2069,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822188,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822190,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2071,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1383822190886,"flow_last_seen":1383822190886,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2072,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822190,"pkt_len":66,"pkt":"UlQA2EYhUlQAWul3CABFAAA0COtAAIAGZnzAqAH8PtKJ5sfxAbspsDzeAAAAAIACIACTeAAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2073,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822190,"pkt_len":66,"pkt":"UlQAWul3UlQA2EYhCABFAAA0AABAADEGvmc+0onmwKgB\/AG7x\/Gvhi1nKbA834ASOQidcgAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822190,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCOxAAIAGZofAqAH8PtKJ5sfxAbspsDzfr4YtaFAQAQAWTQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822190,"pkt_len":272,"pkt":"UlQA2EYhUlQAWul3CABFAAECCO1AAIAGZazAqAH8PtKJ5sfxAbspsDzfr4YtaFAYAQCdOAAAFgMBANUBAADRAwFSe4F0W8quv62S3\/7ygOUuf1KhU9yi6dM6uUHTsgpIIwAASMAKwBQAiACHADkAOMAPwAUAhAA1wAfACcARwBMARQBEADMAMsAMwA7AAsAEAJYAQQAEAAUAL8AIwBIAFgATwA3AA\/7\/AAoA\/wEAAGAAAAAcABoAABd3d3cuNmd5aXA3dHFpbTdzaWViLmNvbQALAAQDAAECAAoANAAyAAEAAgADAAQABQAGAAcACAAJAAoACwAMAA0ADgAPABAAEQASABMAFAAVABYAFwAYABk=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1383822190886,"flow_last_seen":1383822190951,"flow_tot_l4_data_len":322,"flow_min_l4_data_len":20,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.6gyip7tqim7sieb.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2076,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAo\/HtAADEGwfc+0onmwKgB\/AG7x\/Gvhi1oKbA9uVAQAHsV+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1380{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":794,"pkt":"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","pkt_caplen":794,"pkt_type":2048,"pkt_ipoffset":14}
+0951{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":9,"flow_packet_id":6,"flow_first_seen":1383822190886,"flow_last_seen":1383822191037,"flow_tot_l4_data_len":1102,"flow_min_l4_data_len":20,"flow_max_l4_data_len":760,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.6gyip7tqim7sieb.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"184d532a16876b78846ae6a03f654890","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"CN=www.a3uycdf3rn5md.com","issuerDN":"CN=www.l7xvysfnvkb.net","fingerprint":"EE:86:E7:21:36:93:23:30:DB:A0:09:48:55:16:CB:A8:E9:DA:01:D0"}}
+0563{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":188,"pkt":"UlQA2EYhUlQAWul3CABFAACuCO5AAIAGZf\/AqAH8PtKJ5sfxAbspsD25r4YwTFAYAP0z3gAAFgMBAEYQAABCQQRyKTQEXNEYBPZV3\/zEfTQkWpNPJBiGRL97y9vdutfsluomI+BM\/wATV9EXLZXU4z9ZBfdBaPDrleVfhRSEO4dsFAMBAAEBFgMBADDeTPLuhZGymstjqXonoYXbszTd6MvHlO4reIE7DIAVoLx2Ew2CndrSlYijv1enZdc=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":113,"pkt":"UlQAWul3UlQA2EYhCABFAABj\/H1AADEGwbo+0onmwKgB\/AG7x\/GvhjBMKbA+P1AYAIMjzwAAFAMBAAEBFgMBADAMkj8NEfgHVt41gvVoGZmSjJhPRcEYixw81Fk5SSn\/jCrlEY8yRundvc02RY4WwzM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":128,"pkt":"UlQA2EYhUlQAWul3CABFAAByCO9AAIAGZjrAqAH8PtKJ5sfxAbspsD4\/r4Ywh1AYAP2+LAAAFwMBACBL1ibhXCdYHNj2E4PTgng+oqeH24GkH8CHyZvt8J3ixBcDAQAgEkRPKK9bVsaEt1jzbATo6gi5Jrhe3QmS4lNa9Qi2Z+w=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+2359{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":1514,"pkt":"UlQAWul3UlQA2EYhCABFAAXc\/H5AADEGvEA+0onmwKgB\/AG7x\/GvhjCHKbA+iVAQAIOHNwAAFwMBACAkBlPlDToh5NjQPtxYQe526GbVe90miqswtvBnvkBl9hcDAQXQ6tpRF3oZJal\/nVYbzucrBK2D7YXJC\/IIzQrki5GM\/\/kgKSRW48AywhBBMqPsX3k6JxIOaQfPIgRxcHMY6lsMMXMDgGcNEd6JuRAh+PaYQ3ZOzsdIsyCph1md4B9nTGo\/uu9qSN\/TvjBfdIVs4IovVqI0c5KRsu9IAKHsAC3x7xBz0BeIiO5I73VmbQTICUtGfRcHmn8bjCsNkSKTIxG56LCX4M2DoY7VNECLoxMBwaxIY9CqTbEnOpt9XYowMWFzTDEwdKDzDk1mFL8HsSfGJmFwszJ\/3cbzwiPVlbA+rQncmR2c0uqQbmpZFNPe7gupogdPAHQoIA1eiY0RoBrjGkZSEY2qZYBJFDLrY+9QrsLielG3G7MgXnmzvf9MncfqxIaDup\/7\/ryBeGkvRNidXNoRqJu2qJCSFZFClvVWT3AxnqMlVwJMGjVjsSG2BfarxWfiv1Lcd1nzguGjIP2rhh3yglY4zoAkeT3TlmXChbBl5kagptSlhr8wnmiTikcWgd0vSNs1xd246wGyMY6NRIQZU5+uUghbVH\/HHHrGa+9cPNjzM6zp1KY+rTcix9p+wUNygvVhFPCP+hkUyiSz9THkjBPh8GDbFMtEsqqYXPzQowaN938E347BuV7Y0RXAZkrFJqIuWYJLxUAFXL6DIEKhZ\/ZGFDv41qtdux1ERpzXgZH2xl+gkLJtQE7ZkK8XFAXmseGXDY092a3QpmeSPwxduT7L7\/xWtRtu5GwBc6xpGpngD\/jswhQuDiaCDTLu7z39GYBpaak40bS4KaBgl94uyksOQ2ew6ELguoL5OMJ7MeikdGbMIxEGc7Kcwo5sLfSGWtZj0mX2TfGSmNuS48dDJn0z6PE4MCgIUfe7zTb4+4mO4zHfDPeJazl1VHf\/Cc4HbUFkg64GdlHtU9ejW\/+nIFHDrJrR7FKq5060F5UHx51Vw1bFl1j3pJ15Ga+nrgKMoTsmwswB567CXfXwcdI+rnwnf0IbFMFzoWxYDQTM+VbQEt23ROGqssAzcLIKpwZ8bvepPLFS7h2LJsiOYhl7pLrUsoDBFmL7TAueeugXhe6qUi+hDNWV6hrCUYFxPagO\/XUJjPQpY6gavOgpEavDMn0Cl9oYff1pqXy85FT269EupXBlllB7zowwPcwtcwUAlYUS6ApxUDwceKb3PyweKnMsCvJxh\/lEjKLiBzk4V35dtf8DO+8KGNsH9We7IVtTv1LxzUZbGctbkpLWMrS8rFyS0MUTOOHJ67Shq8vc4CFHo0uB1zbwTllcxYF2u+E1fskznQuX0mo2Sli53Wv3oggLVMzMBMXQhG\/0\/712yp6JL9A6hXgqsjEMLnM9HAgzDkLa0PCYN1Pyx3tCNQB+2LbuRQqG7BrVWCKHeRyeysBpja4JzG5ey8QDflv8PGWViVgg5nIziygVhS9KlJgKI9s7ADkkpU89injRnv4YIpbdqL2pC933M\/8K9KOZGiZhcQMHimt4cOaohsItUf5K802UhQ1b4ToB81jJWwXeokQVXfPRt9rIyXqy\/sxZMdc0+EK6OsPhBLHlH9PI27uIEdnGl6\/ho5exj5FjDJRHY3QMoVh9FCee7nGm4FljuHNMkU4+Rv4NUAFvAHhIwHpMVz0sovf7KzChhmoxXw2umMi3Ft7BCOExD3cHLW9DmDbQe7KEUEdkcqE7QNbdPyDdLA5aYteM3\/voDeM02tQQajhnu\/5sTxN2yJr93su\/Zg7VKh8ZfOy+KfawpIqjnPn9BrWTFddcTiLCKje3xQRbX3ze9nVeWT0QL4Z2ov4Ch9nQgOZrHQZJQOrov81asBvtr7VyonepTHVcCdHTi6eA03x72UqxNTLorPY0dvtS8whMhVVOcv6YwlYmR3TKrYYMxdBnEdGmE0A=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":124,"pkt":"UlQAWul3UlQA2EYhCABFAABu\/H9AADEGwa0+0onmwKgB\/AG7x\/GvhjY7KbA+iVAYAIP1\/wAAojeYv9WBh72O2RNpegkav3tigk0Kff0bc8dEvqjX7o6Us2kktDlSuMUONO4oliUxutOvDaKijvkhNxjfkueIsfxqviD5QA==","pkt_caplen":124,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":60,"pkt":"UlQA2EYhUlQAWul3CABFAAAoCPBAAIAGZoPAqAH8PtKJ5sfxAbspsD6Jr4Y2gVAQAQALigAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1180{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2084,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":640,"pkt":"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","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2085,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":54,"pkt":"UlQAWul3UlQA2EYhCABFAAAo\/IBAADEGwfI+0onmwKgB\/AG7x\/GvhjaBKbBA01AQAIwJtAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1179{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2086,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822191,"pkt_len":640,"pkt":"UlQA2EYhUlQAWul3CABFAAJyCPJAAIAGZDfAqAH8PtKJ5sfxAbspsEDTr4Y2gVAYAQARWwAAFwMBACAuvjLwx5Ij+UiLubXh24xjovbhHshGFWxLeDm0Yn\/KsxcDAQIg4GvrKssdBI6vk16PFTL1ZQoyHDdsLMK87\/Ckbc\/nBbwIBkGCazdevjsqp6O1G0BA8yHKQpnjvgZTWsLCk6QsUMZp4UEWHBLuexU0lZtwTVqBpMK+fW6BOoCAtTr3ECobkL48HhiQINfsvquZMF\/R9gTOctgGhvQoGR\/zSYk3S9An7he82PaHez\/ZL0rv7z8u\/NYrlsnKo4BvgvaB4kulUKF\/iZDy08QpfgxFh3noi0\/EOHwmzUi\/kziJdGz6VYzExgpm8lI59GODUlNXByTSzfNxZV+KDT1Bzi8jLytsSdsNH1PE+FZMwodMLQdpkNfa1RGj9HFQojtb0SDnZfYy63iwUz2sl3WKpa3p0Dg82FDWvqF5znbcCu9CNrLuFjkOBouKPYofcoNc+ShlqMEP8zL0hYeRgPWOjtEF5JFGJwvsqK0RINh9opmX+CTewaSls4yYjP8XAJjEJnpbgKWbMomo9InR\/sYdKkYQ9vSBd84peWT1i7pz6rxZz3oKfYXNB5xk9meqL76dC765FgmHEafXckoiK7bPU06dFkQtnA30wg4Ty7XiVwo3D54gy0K0\/CFXRNsLB6HhaMlf4Q3\/WOXZVGruBa+r7yodynU78lhkoWtJU7yRny6nFEFcedD3ZfIBbXggMeFoiYbazzJTNjXC0cOkTY1HGlFJgpUhB8EGB6IoQ9bge4u88fLohba3crZLpWcFQK5eFkf3LQ\/pNg==","pkt_caplen":640,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822192,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2097,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822194,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822196,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822198,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0940{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":8,"flow_packet_id":255,"flow_first_seen":1383822130889,"flow_last_seen":1383822199840,"flow_tot_l4_data_len":158038,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":619,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.jmts2id.com","ja3":"581a3c7f54555512b8cd16e87dfe165b","ja3s":"e1691a31bfe345d2692da75636ddfb00","unsafe_cipher":0,"cipher":"TLS_DHE_RSA_WITH_AES_256_CBC_SHA","issuerDN":"CN=www.gg562izcxdvqdk.com","issuerDN":"CN=www.fcsyvnlemwxv5p.net","fingerprint":"C1:93:18:2C:A3:1D:AC:5F:C7:DE:17:8A:4E:B1:E8:13:BB:08:73:3A"}}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822200,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822202,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822204,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822206,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822208,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822210,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822212,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0565{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2685,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822214,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822214,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2687,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822216,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1383822217531,"flow_last_seen":1383822217531,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0515{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822217,"pkt_len":151,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhDIMBZjPcAAgAAgAAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw==","pkt_caplen":151,"pkt_type":34525,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1383822217531,"flow_last_seen":1383822217531,"flow_tot_l4_data_len":97,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp","ndpi": {"proto":"DHCPV6","category":"Network"}}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822218,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2775,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0515{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2800,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822218,"pkt_len":151,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhDB8BZjPcAAgAAgBkAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw==","pkt_caplen":151,"pkt_type":34525,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822220,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0515{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822220,"pkt_len":151,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhC1cBZjPcAAgAAgEsAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw==","pkt_caplen":151,"pkt_type":34525,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822222,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822224,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0515{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2952,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822224,"pkt_len":151,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhCWMBZjPcAAgAAgMgAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw==","pkt_caplen":151,"pkt_type":34525,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822226,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822228,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":2988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822230,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":2988,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822232,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0515{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822232,"pkt_len":151,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhBkMBZjPcAAgAAgZAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw==","pkt_caplen":151,"pkt_type":34525,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822234,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822236,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3036,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822238,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822240,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822242,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0565{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822244,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822244,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822246,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822248,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0515{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822248,"pkt_len":151,"pkt":"MzMAAQACUlQAWul3ht1gAAAAAGERAf6AAAAAAAAAxYMZclcocyP\/AgAAAAAAAAAAAAAAAQACAiICIwBhAAMBZjPcAAgAAgyAAAEADgABAAEXdNYHUlQAoBS4AAMADA5SVAAAAAAAAAAAAAAnAAsACUVuZGlhbi1QQwAQAA4AAAE3AAhNU0ZUIDUuMAAGAAgAGAAXABEAJw==","pkt_caplen":151,"pkt_type":34525,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822250,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3717,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822252,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822254,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3735,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822256,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3752,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822258,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3810,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822260,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822262,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822264,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822266,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822268,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822270,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822272,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0566{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822274,"pkt_len":186,"pkt":"\/\/\/\/\/\/\/\/UlQAwqwfCABFAACsAABAAEARtfDAqAEBwKgB\/0RcRFwAmDDeeyJob3N0X2ludCI6IDY3Njg3OTk3NiwgInZlcnNpb24iOiBbMSwgOF0sICJkaXNwbGF5bmFtZSI6ICI2NzY4Nzk5NzYiLCAicG9ydCI6IDE3NTAwLCAibmFtZXNwYWNlcyI6IFsxNjc4NDEyMTYsIDE4MTA4Mzk2OCwgMTgxMDgwMzI0LCAyOTU0NDE3M119","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822274,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0332{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","pkt_oversize":false,"pkt_ts":1383822276,"pkt_len":60,"pkt":"AYDCAAAA\/lQA2EYhACZCQgMAAAAAAIAAUlQAwqwfAAAAAIAAUlQAwqwfgAMAABQAAgAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":38,"pkt_ipoffset":14}
+0170{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","type":38}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":7,"flow_packet_id":38,"flow_first_seen":1383822129897,"flow_last_seen":1383822265221,"flow_tot_l4_data_len":11192,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"91.143.93.242","src_port":51175,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":3,"flow_packet_id":10,"flow_first_seen":1383821673254,"flow_last_seen":1383822274144,"flow_tot_l4_data_len":1520,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"192.168.1.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1383821693159,"flow_last_seen":1383821693159,"flow_tot_l4_data_len":218,"flow_min_l4_data_len":218,"flow_max_l4_data_len":218,"flow_avg_l4_data_len":218,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1383822217531,"flow_last_seen":1383822248944,"flow_tot_l4_data_len":582,"flow_min_l4_data_len":97,"flow_max_l4_data_len":97,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c583:1972:5728:7323","dst_ip":"ff02::1:2","src_port":546,"dst_port":547,"l4_proto":"udp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":9,"flow_packet_id":29,"flow_first_seen":1383822190886,"flow_last_seen":1383822265123,"flow_tot_l4_data_len":8633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":297,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"62.210.137.230","src_port":51185,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":6,"flow_packet_id":32,"flow_first_seen":1383822129889,"flow_last_seen":1383822265160,"flow_tot_l4_data_len":9301,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":290,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"212.83.155.250","src_port":51174,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap","flow_id":8,"flow_packet_id":1826,"flow_first_seen":1383822130889,"flow_last_seen":1383822265215,"flow_tot_l4_data_len":1448416,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":793,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.252","dst_ip":"38.229.70.53","src_port":51176,"dst_port":443,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":3859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tor.pcap"}
diff --git a/tests/result/nDPId_tumblr.pcap.txt b/tests/result/nDPId_tumblr.pcap.txt
new file mode 100644
index 000000000..d35906501
--- /dev/null
+++ b/tests/result/nDPId_tumblr.pcap.txt
@@ -0,0 +1,477 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1605292102219,"flow_last_seen":1605292102219,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292102,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCcfOACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RABu9uJhiq5D+6LgBAB9a70AAABAQgKqXs\/nsLc288=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1605292102602,"flow_last_seen":1605292102602,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp"}
+0423{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292102,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2Qd5sejoTgBAk6T9pAAABAQgKJEdEAsLc4vQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1605292102603,"flow_last_seen":1605292102603,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp"}
+0423{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292102,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYSFACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3UABuxOPqDR2fQOlgBAB9XmBAAABAQgKqXtBHsLc4vw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292102,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdELkP7ovbiYYrgBALf0cxAAABAQgKwt2S76l05rw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292102,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdQHZ9A6UTj6g1gBALxQp7AAABAQgKwt2UBql09U8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0513{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1605292103804,"flow_last_seen":1605292103804,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":696,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":696,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:8c6e:cf2c:8d6:9fb5","src_port":41266,"dst_port":443,"l4_proto":"tcp"}
+1320{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":750,"pkt":"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","pkt_caplen":750,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1605292103804,"flow_last_seen":1605292103804,"flow_tot_l4_data_len":676,"flow_min_l4_data_len":676,"flow_max_l4_data_len":676,"flow_avg_l4_data_len":676,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::8fcc:d927","src_port":57286,"dst_port":443,"l4_proto":"tcp"}
+1297{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":730,"pkt":"qtsDr8lk5EKm5WPyht1gC36AAqQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPNREQMJOagBgB9f9ZAAABAQgKI0OBn8LdXfIXAwMCf+a7XKOkxtVKJI04EV4D3mT6IiNw5ZdwpK\/ctvLby5AnUtCRp1wz9iXgvd8CBQl59Ed1wqXQfvbQcvgr9o4GGMRVH8BPyBiK9wAHxfoair+VUOV+cUyNlvDKwuPaUh\/47DlY44LAL0vv9eo4G0vPSmnyuohMST6JkC52HBED7hDgCc5lbkYutM3P7xGL1Z5MrmmzLXVyM4doUQOUayCKfyqRux1EiZDMeHsdoHvinwuW98Zns+5LqMwEKiz9\/ZA1Iu594xbEmeMockAnjj3HmV8YsDERU2TzTk3sWn0ZhKp12Rdx11cVSOnv1ddUqmkYpF6VPIBgfZdY0+3WEYNWwp9gOeZ1SPKEW1sZa\/MZbqxYU+ge0aUNP414S6YsDr4wWnXY\/hrIPt4hdVJid3p8HC+BYX8NVuisAelA3CsslL+yrlEZs\/QElNY2EIBitMqJSsgpwlduIlvcGoykV3DYfMjS3smQ0\/HaV+vGuY59BD+HYzkVJoRFJ5+AoB\/9kz8MrwgQrulG8+mXwGs2Tz+e0pxggDcl3iaCIQO5yUqOapIz\/jo8gXQAUjpsoKRzsKjRY\/OKBL3cj5DbujlngZrs+3yRDxMp\/A8kmIYDSMjyy21do9HW47erPa0WwNSepOx56UCCZyny26AleUHgV47LLX+Hh0DKxyVNOlUl474o9ZULR18pA1FtXPbynHGzdWF0peqNAJdGXSpxCnSDK+dkiaw9fmAlL\/EwEDJgbnaFqYBoa1wzZSNmUTmn9uQt7gG5UTLglNz7Gtm2hHwfzEK4uAknhpJOuKuRvE3auX9h725wqrVluU5SCPoyvKwHHRb0nBQK3ngxp6Haaq8pgOXbmw==","pkt_caplen":730,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":132,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YAE4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGQ26Ce2BgBgB9dicAAABAQgKOMLykMLdWyEXAwMAKQAAAAAAAAAF+jUU1elIEFUi9UepC3cLGnJUpit7lClItBx8Gs+U4NeE","pkt_caplen":132,"pkt_type":34525,"pkt_ipoffset":14}
+0477{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gC36AAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN5UQMJOagBgB9TxfAAABAQgKI0OBosLdXfIXAwMAIkCDsSUDRd2gtpG1ie0hMvlOrf1SL9AYeSm49w1LAyMVmmo=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1605292103810,"flow_last_seen":1605292103810,"flow_tot_l4_data_len":414,"flow_min_l4_data_len":414,"flow_max_l4_data_len":414,"flow_avg_l4_data_len":414,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp"}
+0945{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":468,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAZ4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtL87ROW\/JgBgB9bw+AAABAQgKM4zEpsLdXIMXAwMBeeuGCWF9Lb0Ci6TEBMXMSCRU5\/ujX\/oVXdGh+BNpGjYWczn5t9MnrcPf0zR8Rsvgek65i+QCA5M9xg538hLyui9336X\/wmAqUKW0ovcGHfVkBbInk26LgYglI5Td\/ssdGWORhYySPbJXLEFtu\/h1mXhj5XU6VyNxU9SBh\/8O12l+trWyWdbANDOIW9SbvtVRvHBRVZmz1ag3okb4Plbrh4Qi4B+G74t5h0\/qMYjiEuZ1+PtpSHBW9OPbPwwcOV4UZ67nf4PG8vUha9JOewT6Ihb4Yfc7EBAGx7VHrcHsn7dvXiF8gTt9bh55AJVAbM2ak8Yu6DoJnJsa+jvwTKddiAxdtJhT3E7fBmbothroFA49N5AzGnFsh4cxhtIWJBj0s+8J1Phi\/75LUnCD0lYbxKIDoOKf0QWR08Jx8MCXKqwRPsjDU42Fi\/URG4BOwibUPBjlxMt8e\/Bx1zwNGX2TOl3lRdKcwrnMTh58G0mfgl41Ox0e5b1fEr4M","pkt_caplen":468,"pkt_type":34525,"pkt_ipoffset":14}
+0479{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMUzROW\/JgBgB9W6tAAABAQgKM4zEp8LdXIMXAwMAIinMMkxOhnFjQLjLSAyia+Ge5bjIivBAhB3nTGih+nlOG64=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0486{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":132,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YAE4GQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGQ26Ce2BgBgB9dhQAAABAQgKOMLy3MLdWyEXAwMAKQAAAAAAAAAF+jUU1elIEFUi9UepC3cLGnJUpit7lClItBx8Gs+U4NeE","pkt_caplen":132,"pkt_type":34525,"pkt_ipoffset":14}
+0478{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gC36AAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN5UQMJOagBgB9TwMAAABAQgKI0OB9cLdXfIXAwMAIkCDsSUDRd2gtpG1ie0hMvlOrf1SL9AYeSm49w1LAyMVmmo=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0479{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMUzROW\/JgBgB9W5SAAABAQgKM4zFAsLdXIMXAwMAIinMMkxOhnFjQLjLSAyia+Ge5bjIivBAhB3nTGih+nlOG64=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAhjG7PLAjWn7UqAcsBIEmLB5kd7IUo3\/YpAbuhMroJ7YHc4hkNgBALy7KoAAABAQgKwt2ZJjjC8o4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292103,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAI\/M2ScqAcsBIEmLB5kd7IUo3\/YpAbvfxhAwk5pzjzeVgBAL44uKAAABAQgKwt2ZKiNDgZ8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1151{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":613,"pkt":"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","pkt_caplen":613,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC36AACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN7wQMJWpgBAB8ZJ8AAABAQgKI0OCZsLdmS0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFMgBANk1L3AAABAQgKwt2ZMzOMxKY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0973{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":486,"pkt":"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","pkt_caplen":486,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYgARaADQAhjG7PLAjWn7UqAcsBIEmLB5kd7IUo3\/YpAbuhMroJ7xHc4hk7gBAL0LDVAAABAQgKwt2ZNDjC8pA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFzgBANmFLKAAABAQgKwt2ZMzOMxKc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFzgBANmFJvAAABAQgKwt2ZMzOMxQI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGTu6Ce8RgBAB9bnsAAABAQgKOMLzVsLdmTI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAI\/M2ScqAcsBIEmLB5kd7IUo3\/YpAbvfxhAwlalzjze8gBAL6IlDAAABAQgKwt2ZMyNDgaI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0481{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAI\/M2ScqAcsBIEmLB5kd7IUo3\/YpAbvfxhAwlalzjze8gBgL6GxpAAABAQgKwt2ZNSNDgfUXAwMAIst0CVj1q7qjJi3yf7Hh1SGYgyYWzkPSS2hhB4q5XnE4NGc=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0480{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5b8my7TFzgBgNmMBsAAABAQgKwt2ZNTOMxQIXAwMAIv+9arGN2B1xrSO9lbJghFcPZCl7S9sdh1ux31oaDcGlXio=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0424{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gC36AACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACPzNkn38YBu3OPN7wQMJXQgBAB9ZJFAAABAQgKI0OCasLdmTU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMXPROW\/wgBAB9V2AAAABAQgKM4zFa8LdmTU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0489{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":132,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAE4GPSYgARaADQAhjG7PLAjWn7UqAcsBIEmLB5kd7IUo3\/YpAbuhMroJ7xHc4hk7gBgL0KpXAAABAQgKwt2ZPzjC8twXAwMAKQT4a6EVPf\/MC7YjIsJ\/xsbAtMgLrAKkLm7X3dykd1N6K99jQOjUHHP+","pkt_caplen":132,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDK9YACAGQCoBywEgSYsHmR3shSjf9ikmIAEWgA0AIYxuzywI1p+1oTIBu9ziGTu6Ce8\/gBAB9bmoAAABAQgKOMLzX8LdmT8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1605292104650,"flow_last_seen":1605292104650,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp"}
+0425{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQoWdXXNVgBAB9YSyAAABAQgKTYTpp8Lc6wE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1604{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":958,"pkt":"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","pkt_caplen":958,"pkt_type":34525,"pkt_ipoffset":14}
+0425{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMXPROXNYgBAB71XXAAABAQgKM4zIKMLdmr8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0475{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":121,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAEMGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMXPROXNYgBgB9WhuAAABAQgKM4zIKcLdmr8XAwMAHpmznvZU2UfKV6HJQG1QnE3OYZdlFfFlZx4KGxEZrA==","pkt_caplen":121,"pkt_type":34525,"pkt_ipoffset":14}
+0576{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":198,"pkt":"qtsDr8lk5EKm5WPyht1gCmLwAJAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACYxxWTp5wBu7LtMZbROXNYgBgB9dP1AAABAQgKM4zIL8Ldmr8XAwMAa20GnVRo4SOuyVuEzc0zT0ExW04oholpdDwnlq8NCLgs1j+758QxGZEF\/8+f8UBdJMjvzi7izP8X4tgDofKJfDlV2L519LPdm7dRso5K+2rIVINtSCqIx2EAleB3j4ORapKJlYx9nNS1iVsL","pkt_caplen":198,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jEKGgBAMSBTRAAABAQgKwt2b\/U1+nj4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5c1iy7TGWgBANnEilAAABAQgKwt2cIDOMyCk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292104,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJjHFZMqAcsBIEmLB5kd7IUo3\/YpAbunnNE5c1iy7TIGgBANqkggAAABAQgKwt2cITOMyC8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2308{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1605292105170,"flow_last_seen":1605292105170,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":192,"flow_max_l4_data_len":192,"flow_avg_l4_data_len":192,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp"}
+0646{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":246,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHAMAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/HZTRuvUgBgSELhfAAABAQgKdG+lysLdLW8XAwMAm7+VUv5v3n1cEKhvA7Obmk7hW69laavu9OZNOdP5v2aiE9LYEKQeHffn7vm6VstuW5LB+GPd1bdCCYxPrQ8cpXXvSrRBde7Ubgvulsw\/eGF6vJKgoYXL5h04lY18ojPm\/cV9tUPretg64t\/hG52\/jXKkQ9+5e1GR1KuJgn1MWQ\/97vN82J\/Jt388ivkqQMfP0T\/jvMqs33Elwytq","pkt_caplen":246,"pkt_type":34525,"pkt_ipoffset":14}
+0629{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":237,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHALcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/RZTRuvUgBgSEKKhAAABAQgKdG+ly8LdLW8XAwMAazorJ+v8Qql\/1vWfAai2gkZCI3DTL5oADrcU2MSE9kWZdYS8Jqpk4fHfL5KS3jLCf57oTjL53SDsaGk+gIvtoan6S0MuUK39MyCSYP90lEM7cfvMMDv9MYZwBU7ADMu7jSPLRoIxvW6l0Cl8FwMDACLudklu9KmRe2M4B\/MpTRVuBpiUQvjz3VbQML7h4xLHHM4W","pkt_caplen":237,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1605292105171,"flow_last_seen":1605292105171,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":144,"flow_max_l4_data_len":144,"flow_avg_l4_data_len":144,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp"}
+0578{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":198,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAJAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxfpsKg54gBgd\/fuUAAABAQgKdG+ly8LdWR0XAwMAa1HIP\/vnAAogIw4J2B2TkEHONIFMeD5XyAVKi4Q2Vue2Mstte\/aj9aBEGnaC\/XLTSleNDPxB5FKFlYuKlZTTvSjcjRkZVdPHhikw9Xf3PTuX4sNc4A4aMrxDB+2xDdlSgUdvbOv4DPatYzp8","pkt_caplen":198,"pkt_type":34525,"pkt_ipoffset":14}
+0482{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxmpsKg54gBgd\/YTsAAABAQgKdG+lzMLdWR0XAwMAIlHp65gwK7PBPS\/ZXxVrtwWRv5u\/D1Oka\/7+0BiFD1N3mso=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0577{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":197,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAI8GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxpFsKg54gBgd\/f4EAAABAQgKdG+l0cLdWR0XAwMAau+1WhRe96DKEz4O2DiVS\/91xsnWseh+6lrx3LgaqNmDXwRm1lqF7AcLtXkaV8D99qMpoGwTJnk5i4\/A5jdKnihSC+92twzKrr9YRFj27xUmeqz0tGED25O9+HkuuOkV2W5IN6Z8o+lbpTM=","pkt_caplen":197,"pkt_type":34525,"pkt_ipoffset":14}
+0561{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":186,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDAIQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynxwBsKg54gBgd\/ayxAAABAQgKdG+l0cLdWR0XAwMAX\/Yd2tE30yITdLVScy1FaO070XnDZMR6GJiZVqwat++QvYX+J9OjAkXIuTA6eA+46mRMhtiJSnHUHMZJ232U\/skK8H88Oqka3BXGyUundCVpL+UIL2bs9pZSC7nGsqsQ","pkt_caplen":186,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG69Q0av0WgBAMvoDtAAABAQgKwt2d3XRvpco=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG69Q0av2tgBAM0YBAAAABAQgKwt2d33Rvpcs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0512{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1605292105197,"flow_last_seen":1605292105197,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp"}
+0437{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACgGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9OYAAAAAoAL9IHL6AAACBAWgBAIIClFT82IAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8ZqgBAMGKRpAAABAQgKwt2d4HRvpcs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8aRgBAMHaQ8AAABAQgKwt2d4HRvpcw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8cAgBAMKqO5AAABAQgKwt2d4nRvpdE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupqmwqDngMp8dkgBAMN6NFAAABAQgKwt2d5XRvpdE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1540{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":905,"pkt":"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","pkt_caplen":905,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRu8HgBASJXeKAAABAQgKdG+l8MLdnek=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0481{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG7wc0av2tgBgM0aduAAABAQgKwt2d63RvpcsXAwMAIhZodyqHfxCW5ue+LuDb1oZYnkoWRebVxcG9FBUtgwddFWQ=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+2306{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRu8ugBASJXdfAAABAQgKdG+l8sLdnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRvSagBASPHHcAAABAQgKdG+l8sLdnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0444{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":98,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACwGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG9Jo0av2tgBgM0ZSJAAABAQgKwt2d63RvpctoWMpGHIork7H3thw=","pkt_caplen":98,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRvSmgBASPHHPAAABAQgKdG+l88Ldnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2338{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDdvHACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqZwBuzRq\/a1TRvoegBASUmw3AAABAQgKdG+l\/cLdnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2332{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABZgGPQBk\/5sAAAAAAAAAAMAATSgqAcsBIEmLB5kd7IUo3\/YpAbupnFNG+h40av2tgBgM0VfHAAABAQgKwt2d63RvpcvXDjBoGSE0yYBb0MaTgfKyuMrjnEtx61lDlpmelCMVStV\/nhNzNnwBCYtGphaLbCOtw4VkADzuE8pqYrV7R1b5B5R0qZS6Ml3GnE87iRMjMa\/KZRSYcNZkYBCP\/r4722HYwktKRWjAVTyaozPTKpt3pD8XeacFC+Qumg74k6kcT\/NVsYzTOvAPX\/exiwRgpcAksqHiIFTiOmoyOcoWgzGGTP\/6yn3SANbH3OHJ0eoesn17BuLbZrLH9z913v1wrJFo3YbYO+k3Q0yzJUUK15c8F6PRJ7OoJn0ipk2+C4ckzVBn9bCd+Tz1J4c0ZkjoNrasLgsnrB3seG2ajA9fko\/Aacb8tbUq7NAfJUcbIWF1G04iSocbeLdGc4e2p77Fq81IashSdTELIYY\/kKUWsgEDR4BC9hfUgqgu2zlUEHLLo+CKabse5wPx7Kt2a7J1s2o5r2h52fPC89s14R\/nsZ9vuGvDjj1X4F6hWru6HbKzFuPBcqZQqPELeds4hivNOof6lVNSgp\/QnVEEmZemHZE1lyE4aI2qdgeZEqBR6yfDOiGbTp8PfuXSQlCqAAO8X8o0WSLtLQhDidxlTDsflUPj8hydSsQ1KqmZUQBEMBKimaQDSpF4Uw8zxcx3Vt1JZ78bEUtpfbgnjB5KNbdA9bZZxAj+siFse9SBH9Ndsm16p8XRbEvym2obvpGpXU+baP8RSIxdtsGPQ\/ySu\/xnkOwkp5hRZsnrfn3LAhyGUbKoQgiKEvstxy8tUxsDdVI2Tmlw4Zu7NHNm9A6nkdsj37uUTIvKytdaeoi5xcHdlAD9vBr9RHKXHT+CPdCjksYvOP+xFVCIq9DGF+AlBwbq1NNG\/+6bax8t6Dy3\/1MkoYXMiNrbrwigrSIaPRdddfXG1wJYOyFrlboLa6vc8hTawa7RKkaRUj8uiOPJg6Rkh+HNd2IsiFVID\/tlq12axDwgunSBlX2TMXUr4TxjPA3ejn\/D0qDDN2RUIiyanIIGh9VkwWUwH4M+ClpZXIWhZbwhiK2YTPDTV3iJ8H1fj\/Y+SCv89rlZnyCuVMZr89Et7pBGKNdGdQTmShX0wje9OyIzqPVYKV0+j2Mrx46tpT36FG45aH2+qjJRBrT6qG8SYHmRcmiBlrXVdBh8G6WsH1mCqFYzMAqbWaFPzsUVGyI6urPm2cZ+CCOxIii8wztkJgeL4aA\/Kd12UlF+GbPKeQtlKaVXrl+zslv2M16IYBpKGKrdBU8T5k3pjaFJZnHZy6ex5H3u8uCGiH\/GvWh1uGzugTn1dgmkXTBvDHqXrmLmXgB7kXBYWrM5lv\/omVCQCle6IVLzZMS6BFfgKNBKpuh9l+cK0CsI2WXLO+eUkrEgi\/V33Bg4mExomstgImDDG\/PPUp\/drB2Z8Mu\/JathvXf4h6qKKCzDZzWO3h36FSprSmEAwmfmnl3+uIiJH7EV+GDgtsjbY8EvWnTSxOd1jfVGHDiHEZMPvpwPI5leceHHnGRRkvG4cwoja3\/Y2BobvX15Vl8im28DAHdbrWLnRQm47f\/TvPdEBVTEIPykuaOcj1B8+j1gSCUCP4wTO5FtXW\/HSPDmCaWLvpot5s5pFA4pUKcEnUwSRxxDiHvOhDea0kqnjfVy1862IxPEud8J\/Rsa8WXiG5VpLBQBeK49poaeazrTYsyUoenNepNNr3m7n8ts2FcTB1RDVJ4NExGXcFAAYbiuLe4eThaQzPO9koqab7WGSXyhW3IUIvC+5smVVSpV\/5U6PAfe7\/rYoXDp9yQbzgw+\/pfTV5g2bSzYpfYiK\/40C04ZHET7AKO64bjy6LGAnPqDYsAyEBaDwmyl22ZuOrxF8o0tXB8B3KdvkJIki0x6ebIXFegEaw==","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+2322{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynx2RsKhPwgBAeE4u+AAABAQgKdG+l\/sLdnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2323{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynx2RsKhlogBAeKYYvAAABAQgKdG+l\/8Ldnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2324{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+2325{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCnTDACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0oqaoBuwynx2RsKh7ggBAeQICgAAABAQgKdG+l\/8Ldnes=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0439{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfl2n7vTnoBJXgHalAAACBAV4AQMDAwQCCArC3Z3zUVPzYg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9OfC4X5egBAB+\/qVAAABAQgKUVPzg8LdnfM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1119{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0835{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1605292105197,"flow_last_seen":1605292105231,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0514{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1605292105274,"flow_last_seen":1605292105274,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5ACgGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGvZYAAAAAoAL9IG8jAAACBAWgBAIIClFT868AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfl6n7vbsgBALMO8iAAABAQgKwt2eLFFT84M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0561{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":185,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfl6n7vbsgBgLMLo5AAABAQgKwt2eLlFT84MWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcIFdStpb+CkXQy2c2uOI7+AVrIzBfj1oZ8gAG3CYIQoMEEwIAAAwAKwACAwQAMwACABcUAwMAAQE=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0874{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":9,"flow_packet_id":6,"flow_first_seen":1605292105197,"flow_last_seen":1605292105278,"flow_tot_l4_data_len":824,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":137,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu9uzC4X7BgBAB+\/fCAAABAQgKUVPzs8Ldni4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1127{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":609,"pkt":"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","pkt_caplen":609,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvZrixr2XoBJXgG87AAACBAV4AQMDAwQCCArC3Z5DUVPzrw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGvZeG572bgBAB+\/MzAAABAQgKUVPzyMLdnkM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1605292105274,"flow_last_seen":1605292105299,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0427{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDMLhfsGn7vj3gBALcuwYAAABAQgKwt2eVVFT87Q=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2074{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2069{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu+PfC4YN5gBAB9fC2AAABAQgKUVPz2sLdnlY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu+PfC4YgxgBAB8uwBAAABAQgKUVPz2sLdnlY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCsuaACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5AwBu6fu+PfC4YzpgBAB6edSAAABAQgKUVPz2sLdnlY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA8c5ACAGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv5yG572bgBEB+\/EWAAABAQgKUVPz38LdnkM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvZvixr+cgBALMOfQAAABAQgKwt2ebFFT88g=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":185,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAIMGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvZvixr+cgBgLMEIPAAABAQgKwt2ebVFT88gWAwMAWAIAAFQDA88hrXTlmmERvh2MAh5luJHCohEWeruMXgeeCeLIqDOcIHBqihZlPQxi4\/Swmz8DIl9f5mkTuI3AenD0Ehe9UmbOEwIAAAwAKwACAwQAMwACABcUAwMAAQE=","pkt_caplen":185,"pkt_type":34525,"pkt_ipoffset":14}
+0875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":10,"flow_packet_id":7,"flow_first_seen":1605292105274,"flow_last_seen":1605292105340,"flow_tot_l4_data_len":856,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"consent.cmp.oath.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"15af977ce25de452b96affa2addb1036","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0411{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gA6lJABQGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv5wAAAAAUAQAABcOAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvf7ixr+dgBALMOdPAAABAQgKwt2eclFT898=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gA6lJABQGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv50AAAAAUAQAABcNAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSYGKAABNRVaI7oLKiX\/Ei0qAcsBIEmLB5kd7IUo3\/YpAbvkDobnvf7ixr+dgBELMOdMAAABAQgKwt2edFFT898=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":74,"pkt":"qtsDr8lk5EKm5WPyht1gA6lJABQGQCoBywEgSYsHmR3shSjf9ikmBigAATUVWiO6Cyol\/xIt5A4Bu+LGv50AAAAAUAQAABcNAAA=","pkt_caplen":74,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1605292105418,"flow_last_seen":1605292105418,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mG3sAAAAAoAL9IOHqAAACBAWgBAIIChNm5EYAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1605292105433,"flow_last_seen":1605292105433,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp"}
+0438{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACgGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkF5MAAAAAoAL9IMKvAAACBAWgBAIICr4D0hAAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0440{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+Ou0O5ht8oBJXgIDEAAACBAV4AQMDAwQCCArC3Z7YE2bkRg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mG3xqPjrugBAB+wS5AAABAQgKE2bkY8Ldntg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1263{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":706,"pkt":"qtsDr8lk5EKm5WPyht1gDBurAowGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mG3xqPjrugBgB+4JWAAABAQgKE2bkZMLdntgWAwECZwEAAmMDA01hkKus+MkqaNZ11u\/JhpX8opi+Paz\/2culjqS\/fRVYIMdAvSOkLp4IegED4alflZbkeoPKAFn+1vm3NO5kGg0FACAKChMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAfqamgAAAAAAHQAbAAAYc2Iuc2NvcmVjYXJkcmVzZWFyY2guY29tABcAAP8BAAEAAAoACgAI+voAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACn6+gABAAAdACAZgcv6djgDbSXoFxR2Bhsr1SLhgniKBtXtlIDDETXMCAAtAAIBAQArAAsKqqoDBAMDAwIDAQAbAAMCAAIKCgABAAApASsA9gDwAAAiIJslU1lFpjTpi3lmNam9hQpY2hMMKuXsZwFntxH9VeeCDjG5ZumnFfjZUDtOBPLSzw4R57\/QCBI18BwcPm48mrUGyW53Ub1R1QzZAjB7iAKV4vFIwFfFqvyyzCt+XQCHUSkW6UYjU9HW8UHVOSLv+gTEZIbkGDOYtPsq7YccVngTZL3n3IHqwmTgcbP5ueNH8XOZq7\/Y1OeX7Wx9xVtrBDjNMgQxbOzaBnVFB93EKDMM4PQzj6qYiuKetEAoBMozzmixqRKxA5zUbOA5h0RPxge6RCPaz+BuJE3Cm\/zM5MOERtu8U1IsclnN2s3hdk+igAAxMH67OIYeJEbtrgELqGnjRFz2Dy5CExYP6mmzTrMo8NEajMnamg6uhqcAqBJ0WIxFJA==","pkt_caplen":706,"pkt_type":34525,"pkt_ipoffset":14}
+0820{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1605292105418,"flow_last_seen":1605292105448,"flow_tot_l4_data_len":764,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0439{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSABSZgAFAgAAAAAAAAAEAEqAcsBIEmLB5kd7IUo3\/YpAbu4DgNW0a1gJBeUoBJXgDGmAAACBAV4AQMDAwQCCArC3Z7jvgPSEA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkF5QDVtGugBAB+7WdAAABAQgKvgPSKsLdnuM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1121{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":603,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCAiUGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkF5QDVtGugBgB+\/IDAAABAQgKvgPSKsLdnuMWAwECAAEAAfwDA0SwrBQ+d5serlsxTSylSCJ2cOl7xaFhVNFnNENmyXzLII1+rGz9ESjQv1hbMrYHKnzgyMTJu0Ir\/kwfyDkc\/1pDACCqqhMBEwITA8ArwC\/ALMAwzKnMqMATwBQAnACdAC8ANQEAAZNaWgAAAAAAGgAYAAAVY29va2lleC5uZ2QueWFob28uY29tABcAAP8BAAEAAAoACgAIiooAHQAXABgACwACAQAAIwAAABAADgAMAmgyCGh0dHAvMS4xAAUABQEAAAAAAA0AEgAQBAMIBAQBBQMIBQUBCAYGAQASAAAAMwArACmKigABAAAdACA9g892NhkW61BobOu+QMSd1m\/f0wlw8Wps+OIILfVOLAAtAAIBAQArAAsKiooDBAMDAwIDAQAbAAMCAALq6gABAAAVAMcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0828{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1605292105433,"flow_last_seen":1605292105459,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Yahoo","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"cookiex.ngd.yahoo.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+Ou4O5h3ogBALPfjjAAABAQgKwt2e\/hNm5GQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSABSZgAFAgAAAAAAAAAEAEqAcsBIEmLB5kd7IUo3\/YpAbu4DgNW0a5gJBmZgBALMKpAAAABAQgKwt2fBr4D0io=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0791{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":356,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS4GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+Ou4O5h3ogBgLPUAoAAABAQgKwt2fCBNm5GQWAwMAgAIAAHwDAw6IIth+R6VC4MCy4H4pC4R4NC+hmlI2w+T+VCPrieVAIMdAvSOkLp4IegED4alflZbkeoPKAFn+1vm3NO5kGg0FEwIAADQAKwACAwQAMwAkAB0AIHJkIFENvX9kSeVAQ6dQ32HTFcgVQiHD3CRMxNxQEmJ1ACkAAgAAFAMDAAEBFwMDADTDBTfsVEi22J5pAKqKmAXlTvVm436Rh8drCKTtC1v5wE\/gxHcai1SkGWW6uGtCAyWJqQowFwMDAEWRNLBCCNGaGZ4B5qnY9YCKWpmgS0EJqXTldfxvJtv2xQcCV4fkEky+QOkr3wF4L0ZnpaA2obKYHrtVVdHrPKyOLGuwE4c=","pkt_caplen":356,"pkt_type":34525,"pkt_ipoffset":14}
+0860{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1605292105418,"flow_last_seen":1605292105494,"flow_tot_l4_data_len":1098,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0426{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mHehqPjv8gBAB+QDiAAABAQgKE2bkksLdnwg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0536{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":166,"pkt":"qtsDr8lk5EKm5WPyht1gDBurAHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mHehqPjv8gBgB+cGqAAABAQgKE2bkk8LdnwgUAwMAAQEXAwMARXSu5HHoLN4J6sfTv5jSyh19PaWjGE58SRDgu4lQJ15nul9a9ZpY9a0dRf5BmVKNCB+qr4DA4KPR5sXwiPP3T+WIniKhgg==","pkt_caplen":166,"pkt_type":34525,"pkt_ipoffset":14}
+0988{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":503,"pkt":"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","pkt_caplen":503,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+O\/wO5h44gBALR\/ckAAABAQgKwt2fJhNm5JM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+O\/wO5h\/ZgBALe\/VOAAABAQgKwt2fJxNm5JM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0823{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":373,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAT8GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY8Go+O\/wO5h\/ZgBgLe4umAAABAQgKwt2fLxNm5JMXAwMBGhp4vG0VzsisEXJW0thxNt+cRtJTUZeB8d4bZGLklKef6RJe7pTeXjxdwliZQOYtyhrmWFY9nS7Sh3slVtZwjWuyaLVg3eG7eJkvSXjmoQEIxRGdWW314\/CQwSzMNXatOLRf26srqvO1dP4ZO8oq1ozoJa5K1wUcMm\/5C1m\/ZMyzr0qGgkk0v\/yNmr4QCkVdfoU73VxDzYa0OAC2WmRuD89Vcre4Mqm059cgjTpWiG4NZzzNZaXHmyp5efDfG5tDjNQgVWskClJkYou6mg+yQCUpsjSW9mV5radisRzpmq0zitw5rkU8RZ4OALe5U1udwiqNzjey6KW7Zyx7y\/Tbb04ziMOjs8Kwo1oTW0vsjJngImyvX2B\/yDd9Qw==","pkt_caplen":373,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mH9lqPj0bgBAB9\/2EAAABAQgKE2bkusLdny8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2039{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1273,"pkt":"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","pkt_caplen":1273,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDBurACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPABuw7mH9lqPkG+gBAB7viBAAABAQgKE2bk78Ldn2M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1605292105669,"flow_last_seen":1605292105669,"flow_tot_l4_data_len":152,"flow_min_l4_data_len":152,"flow_max_l4_data_len":152,"flow_avg_l4_data_len":152,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp"}
+0592{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":206,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAJgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKOk4W2C\/9gBhA0URlAAABAQgKBcmbq8LdLRcXAwMAcysuUqnNdP5CtlTC2pWvfZyUMV8UFocs8M6W09NnsspPibPhqobMFIm1f0B4kk13U59rzTyXjGQM3JpbSJkQg4GGmBSNMo7KgMloXnt3GygjcT75OOC0YPo3\/MFdKUwkpDu47ubalsF7IwgRDAn\/l0DFoLo=","pkt_caplen":206,"pkt_type":34525,"pkt_ipoffset":14}
+0484{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKOsYW2C\/9gBhA0ehRAAABAQgKBcmbrMLdLRcXAwMAIgQb59HIMHYAgoaCAJqbMMjq72ntBt\/\/eGErLyXH34Iczsk=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0604{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":215,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAKEGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKOu0W2C\/9gBhA0aEtAAABAQgKBcmbrMLdLRcXAwMAfBkhBkIFqMuMKjD1\/xjqGp2hEKMP3ziLomYjJXbyDDBzMNKC8MmFqfqAj9+xvxfAO7rBldu4UpazYVXmg399TnFcypI7qckvMpQyy6kehQ5F75J5BlTYjgokme9I6h8+9mS8Y6D2WQEp5qh0Ix9\/vReZo1xT0xocl8k7wFQ=","pkt_caplen":215,"pkt_type":34525,"pkt_ipoffset":14}
+0606{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":216,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAKIGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKO24W2C\/9gBhA0ZDEAAABAQgKBcmbrMLdLRcXAwMAfZb\/Q0UxJt3wR3GrF9wc05LB8qT7ZkR+HCn\/iqj2sc401jsGKy+hB2hQCcm\/k7qaMetiTYenENk+ACLo1f2YKjGXVQetGP63wKEr42K8k6tUqE9pBZIE6wew5q00rKis7dRbFMMi3Xwnl\/etAScMk4PwcPmhI80uNbHMV+Kj","pkt_caplen":216,"pkt_type":34525,"pkt_ipoffset":14}
+0528{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":157,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAGcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKO\/AW2C\/9gBhA0UbJAAABAQgKBcmbrcLdLRcXAwMAQrLK9m5yPUYZr\/Ss7uS7ctPQk7DORD1YOYAxKYpWRXgQ31nGrlNl9GZg3NHqc299aEIRfgvacsXASirCF1SyoYgbpg==","pkt_caplen":157,"pkt_type":34525,"pkt_ipoffset":14}
+0478{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":122,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sAEQGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKPDcW2C\/9gBhA0eTmAAABAQgKBcmbx8LdLRcXAwMAH8qqr+omTYd99KAGythadDgeZ7VP+dZ3UWtdCHFQTWc=","pkt_caplen":122,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjrGgBALrDvlAAABAQgKwt2f2gXJm6s=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjrtgBALsDu4AAABAQgKwt2f2wXJm6w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjtugBALwTsmAAABAQgKwt2f2wXJm6w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjvwgBAL0TqTAAABAQgKwt2f3AXJm6w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbvd2hbYL\/13yjw3gBAL2jpCAAABAQgKwt2f3AXJm60=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2326{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKPFsW2DV1gBBA0f90AAABAQgKBcmb3cLdn+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2330{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCP\/sACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3doBu3fKPFsW2DrtgBBA5\/nmAAABAQgKBcmb3cLdn+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0499{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1605292105726,"flow_last_seen":1605292105726,"flow_tot_l4_data_len":159,"flow_min_l4_data_len":159,"flow_max_l4_data_len":159,"flow_avg_l4_data_len":159,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4c03","src_port":51874,"dst_port":443,"l4_proto":"tcp"}
+0599{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":213,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAJ8GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npntnZTJergBgB9damAAABAQgKLIniTsLdLfkXAwMAepLzP8oRHbXAD5D56fW\/ezxXNRxKdaqM6BwQpjw0zyORx06Rl8gHWinoWY19NxmIXl2owLgVHJ\/UEVkHmda\/PMinu6FgCqLeUi5RUsVJaGqL1ulKRH6Mi5nxYau2z9M9f+jUaBIVXH47AOoxy+jPs5YTh+8Es3OdfTIr","pkt_caplen":213,"pkt_type":34525,"pkt_ipoffset":14}
+0480{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn1jZTJergBgB9c+fAAABAQgKLIniTsLdLfkXAwMAInb0OIEXDizCLxamWTiLwYinYzi396zhkwGnl1I5tNs4gXU=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMl6u56Z9YgBALghHTAAABAQgKwt2gFiyJ4k4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMl6u56Z9\/gBALhxGlAAABAQgKwt2gGCyJ4k4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2308{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+0869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1605292105433,"flow_last_seen":1605292105774,"flow_tot_l4_data_len":2113,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Yahoo","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"cookiex.ngd.yahoo.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2303{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1474,"pkt":"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","pkt_caplen":1474,"pkt_type":34525,"pkt_ipoffset":14}
+2225{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":1406,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABUgGPSABSZgAFAgAAAAAAAAAEAEqAcsBIEmLB5kd7IUo3\/YpAbu4DgNW3IZgJBmZgBgLMOxgAAABAQgKwt2gGL4D0ipmfj73scMChIKfQOlUqAQhZ47uCIOB6u+zgzF+PfcLM0tEkgUH1IF0oysZpbqY8OO9DwKX7+uWisq4fHq\/GTK8IhfgSmkSD9heQQpJ4PWGHylbaxL8xmFy1asd7hrIipCGWOAfnNw\/HeyUvtPoJhQ6tMjoSwt0D5GK7Oi4oxBsNU1rH94vMMdIfNCf8IeFsCwx19RIMYUHZwozKHlwBTijkks8qulmUN1+oEsJOkiROkv527\/LuMGjqN4RlaKi7bi7ToQM4d3j4yHxwYaAj6pbrs05vKuiXu\/OWKFYNatM9kMOrt2YM3Z+Z78h71i1BDODfTV0dNJik5U\/O5YeF6rXISTI3Pz4gouSam+Z52EICbGNNZG3u79oE\/bzT+IAuB1LDk9OI8acva2eQJmLXxvOMTZN5w+Egx1wR26dIH1Az0bVU+u6UCy4gfFufSyh6sjtSBFxvMXPx+rrTB+nS3\/wt4hYIxylLBYfRbWVAmVl8ESGzUl6p8Mysz1HmHrjm+\/Di\/cvxrIz+PiWGnEYvU7PjgrLzqRvihWeUAhV+20aHqwa6QVUHfRd7p9fITWzQaUYoayk94hyTeJcna+26pd9SsA3MqEkbZ8zdan7WVIS19ANKI7O1p1tfu3SLE8Z\/KDNeiiMREA1j6o8PY\/wTxEGU6YEEwb45zhkNHJJm09yqr2dpYVvd1oG9ZiWoDN4B\/ju5281gqFtLElnJ8PCsbBhHWRLtzS8AvRHMTeasZJ5cObZSC39F14S121mcPtW9R3JAJwqOTWcmmb3STqDOnzAzExkvAPsclU24dzqGN\/IZgI5+\/qDhQ4juDekuyUHv44yAvXjuoe8\/2YeTD0LpJiuYhd0nmmKNZTGsAlVWQ8lIGiQxElZbZoLSBZrZ7ERMm3h4Znh4PxZC1GQg4jLj0mNN5KWsFiW4mAtiqbDAFEpnP69tFOxpL+3VawaH76GTN013SJcfgQovVO6Kt9sduUg6Q5Yg\/fMVXaYfEnkD6y3T2Ce9WvHCBORfj072MOBxT8O5F9sBp4+Eq9xHJtYgyYjvERGdHUbaHmHDuVujkNFI9IP25rzqPkKmvz2ice21Nm6VQthpt7SORj8CZiRyhPWQhiky7arg\/0uKqZ0jte3WjUETZh1JUTuCnw+KxCM24M3L\/+XRT4DkK0Kc201lwQH9hgCj2Jnhy9gr65d\/FPLTdJwR9wm0YHIvCaNuZQxF\/sJ2tX\/y8CNDIyhkzhrqC+79vx\/ykAn\/Zj3Qq0KBKja5pV\/3XMlkB1sK9TvyPvgMNtwukj0eUMiOolnkO2owDbE41vxRwnQoixoBdz9PL2Ymj1U0ur48BhzlXVmpZlPfiTo72x451b87\/2j1pVlevm7NV37QDuKUxLPEGNZJLq8OF+f\/7CAH4oHG2yhcEsRlkmqfcwQuOIf0YoQRXa4\/oXu3wDYdOrfSBlHsBTrd+rLO9xmwika3kHiuLP7g5FM\/XxGQogoh4PldhPXKJ8ZKpeKM4OnI1FF48\/r7Qc3ZO6UzMO6koYi3JTn46LvhrIZWzEc+XT60HknSKUTyiy8c+\/lRJoRk7mCsJCujfP0XIaj9KCUTRwblK+fPx7dlXLR6esmbAsNBA8tEfyO706i4BkJLJayNdVkrwV3ry4HGj\/xr8t\/BPR35aIYRCT9T4aYk5OLe9MOk9uj15k7ZMzprcfTGS\/Sctfwl6am0\/NZkaHPfHiDwvrg8+3+jx6hLmJQy1L0Pa2Vtt+HvlWA+JXTyYCqSTWJPf9LozM=","pkt_caplen":1406,"pkt_type":34525,"pkt_ipoffset":14}
+0426{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVtcagBAB9avCAAABAQgKvgPTZcLdoBg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVtyGgBAB8KZbAAABAQgKvgPTZcLdoBg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVuGugBAB6aE6AAABAQgKvgPTZcLdoBg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1227{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":674,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAmwGPSABSZgAFAgAAAAAAAAAEAEqAcsBIEmLB5kd7IUo3\/YpAbu4DgNW4a5gJBmZgBgLMBA9AAABAQgKwt2gGL4D0irbgjpSXBnoxysqGfRvhYm1S4uXbUWn2gr8HRuvUgLIZotx2sd6S6Tl3jOS+ByJJtL+ZX2fsh\/+ycrEKXHes8l5ei5q0hOcMsEhPOZk1Cjdeftp4yiRyMry2Sr1HlTGEnA3AXDm3oteV3BM6THd0ABKOPP5bhsW5I+laVtnpwFtL79mXve\/qL81AoWfoU3wPKp1wPGHwObMieOEV5c6SGnjGnbBK6\/oR2ic88Ars11CfZePx9Se3s1Tn\/uBDBeCi59q4qJ5YduaJpHcMjunf0RBDu5YPLXi0wM1r7A2PFZmrEa75aOUXKQf4e02VqALBAtq1cJLBAMVcfWLJmlzR\/\/ah2Gzz6ZlsY6T9P0QlqvpDGtcrZXmiUj7MhUjdFeknQoH2P5atDKeiioM0MfKp\/gW8AFSosey\/oA5wRyY5mfiJyGMa63jwYVxbdTvZ2duyXIVeuQH2ti8lOuD5LHUlPWh5khbw0Y9+KBwb0rzbioFFWPkEeh\/4E\/CL3Qv3l319WKRtHt\/OPSYggbID17YiWNglOgwpMTupjKyM84E+MC84C\/h0C5PLUfWsGTV9QIXAwMAYOPVb3Vl21sxb6KDPw8m3tqXwobCNERukqoyII96uutC12g1xT7hYL9HmQC+DhKQNXZYa0AU35GnG4uGHIz9rVrlcd368uHmjLmu+xRG0WfDE+4uGgx07CBuZGe4z1q71xcDAwA1OkKRXy\/nX31q0Mo19l9KycP8sOEXO2h1zYbX+JJHfAyORYna89tnkiE8gPKiwguJURf5dao=","pkt_caplen":674,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCACAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVuP6gBAB5Z7yAAABAQgKvgPTZcLdoBg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0515{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCAGAGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGZkDVuP6gBgB9S8GAAABAQgKvgPTaMLdoBgUAwMAAQEXAwMANdVrvX00KotTHgkfm0km0tAoq\/4e64lqnMI2dnDtaJbFi\/lCdVorR2ah4XiyaxL1ThiRvLfk","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0555{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gCUBCAHwGQCoBywEgSYsHmR3shSjf9ikgAUmYABQIAAAAAAAAABABuA4Bu2AkGdkDVuP6gBgB9cRXAAABAQgKvgPTaMLdoBgXAwMAVy5va6yjTxoFWtLe+IvSvoq31vBNFJs5DP0ecaGTYcF+M\/9nw9EBBmThOfxBLrragHuToDpHPqqu+28Dtz7yyomlDRC6Xs9aVkF2eabsdAis\/8450zlYSQ==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0593{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":205,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAJcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMl6u56Z9\/gBgLh4oBAAABAQgKwt2gIiyJ4k4XAwMAcvJ676RsxXZ5oBs6OGzQqykqUEr3Z5TFSkZKsLr3jmM2YiVsojp\/iKfkn4WsVwk6xE+3pYlY7baFutWk3YOJdUe42QIFmRoIaWPZHUxxJ72tc0a\/9w3XW4cb6EZieEibCx4fYcBpRjmfe8aHsBh0yypXqQ==","pkt_caplen":205,"pkt_type":34525,"pkt_ipoffset":14}
+0483{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":722,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmCK56Z9\/gBgLh3XIAAABAQgKwt2gJiyJ4k4XAwMAIuIP5n5zdg3vwwgJWEqXoU9oSITck2Fnmb8jYDK18OCChTk=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn3\/ZTJgigBAB9Rp4AAABAQgKLInijMLdoCI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292105,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn3\/ZTJhJgBAB9RpNAAABAQgKLInijMLdoCY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0549{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":13,"flow_packet_id":255,"flow_first_seen":1605292105669,"flow_last_seen":1605292105789,"flow_tot_l4_data_len":153848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":603,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0550{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":731,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":13,"flow_packet_id":255,"flow_first_seen":1605292105669,"flow_last_seen":1605292105789,"flow_tot_l4_data_len":153848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":603,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0549{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":8,"flow_packet_id":255,"flow_first_seen":1605292105171,"flow_last_seen":1605292105998,"flow_tot_l4_data_len":155628,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0550{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":8,"flow_packet_id":255,"flow_first_seen":1605292105171,"flow_last_seen":1605292105998,"flow_tot_l4_data_len":155628,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":610,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1605292108746,"flow_last_seen":1605292108746,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2777,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBAJCACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QYBu4l3wyDoZi2igBBBsd06AAABAQgKqXtZHsLc+wU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1605292108746,"flow_last_seen":1605292108746,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2778,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjLcACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3PQBu\/EwVJeVyjqfgBBI2yKLAAABAQgKqXtZHsLc+ww=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1605292108747,"flow_last_seen":1605292108747,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2779,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDu9XACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3RIBuyQ3N5hBwa5pgBAB9TOKAAABAQgKqXtZHsLc+w0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1605292108747,"flow_last_seen":1605292108747,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp"}
+0427{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2780,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBLbYACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3QIBuwaOpKNiTUmPgBAFOCVEAAABAQgKqXtZHsLc+ww=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2790,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdBuhmLaKJd8MhgBAN560UAAABAQgKwt2r5al1DDM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2796,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc9JXKOp\/xMFSYgBAPnfW6AAABAQgKwt2r7Kl1DlE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2797,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdEkHBrmkkNzeZgBALy8PxAAABAQgKwt2r7al1DgU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2798,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvdAmJNSY8GjqSkgBAMILKCAAABAQgKwt2r9ql1FBI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1605292108895,"flow_last_seen":1605292108895,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2839,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qld1IAAAAAoAL9IHkiAAACBAWgBAIICgXJqEYAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iVUV6pXdToBJXgDxxAAACBAV4AQMDAwQCCArC3axnBcmoRg==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0427{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qld1Md4lVGgBAB+8BsAAABAQgKBcmoXMLdrGc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1122{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0834{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1605292108895,"flow_last_seen":1605292108918,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"64.media.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iVUZ6pXlYgBALMLUWAAABAQgKwt2sggXJqF0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2332{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0875{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2953,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1605292108895,"flow_last_seen":1605292108973,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"64.media.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2326{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+2186{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2956,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":1382,"pkt":"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","pkt_caplen":1382,"pkt_type":34525,"pkt_ipoffset":14}
+2343{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2959,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2960,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4lq+gBAB9biSAAABAQgKBcmolMLdrJI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2961,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4mA2gBAB7LMjAAABAQgKBcmolMLdrJI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2963,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4mVGgBAB5a4aAAABAQgKBcmolMLdrJI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4mq+gBAB3KiqAAABAQgKBcmolMLdrJM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0595{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":207,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAJkGPQBk\/5sAAAAAAAAAAMAATQMqAcsBIEmLB5kd7IUo3\/YpAbveCh3iar56pXlYgBgLMPWuAAABAQgKwt2skwXJqF3dQZ2u0hZVMK2JTI\/oFQ\/CE6QjQFrqVFn3uSmal27pWs0HSft70tl8AjCpJKIcXreVsA8qdRsG3X2K6BjQF+MXAwMANbbqCnCiZcHsKWXvS4vd4w1cP0laWKmE3ONxdUKDAkfC+k5H4FZ\/7gcgUl5YG6uiG7lVUDYX","pkt_caplen":207,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292108,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCOgvACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAE0D3goBu3qleVgd4ms3gBAB3KgxAAABAQgKBcmolMLdrJM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1605292114506,"flow_last_seen":1605292114506,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292114,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYCjACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXmM3O4Bu5iknWH70O\/fgBATex8tAAABAQgKqXtvnsLdEcs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292114,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleYwqAcsBIEmLB5kd7IUo3\/YpAbvc7vvQ79+YpJ1igBBY1dkNAAABAQgKwt3C3al6v1A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0872{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":12754,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":19,"flow_packet_id":255,"flow_first_seen":1605292108895,"flow_last_seen":1605292115060,"flow_tot_l4_data_len":149096,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2458,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","category":"SocialNetwork"},"tls": {"version":"TLSv1.3","client_requested_server_name":"64.media.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"f4febc55ea12b31ae17cfb7e614afda8","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAMi0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACACxxABu7duJjvT55jAgBAB9d1JAAABAQgKVGZuDcLdE7E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49496,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCRbVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACADwVgBu1ozjhE9MAHmgBAB9RZAAAABAQgK5fXM6cLdEu0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43602,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gA8lZACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAAAN+SHGqlIBu\/+4ugmfFZgCgBAB9UmMAAABAQgKTADwSsLdGmw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2002","src_port":35892,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBu\/tACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACACjDQBuwRHeTthOU5lgBAB9RTKAAABAQgKi91SNsLdGI4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45706,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAlISACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAOsooBu5EKNZ7ythfhgBAB9RDDAAABAQgKWJK\/EMLdGI8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49464,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBlBRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwTgBu2jzM2ULiifpgBAB9R7MAAABAQgK2Fskl8LdF\/4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49462,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBTnWACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwTYBuwdwDB5je19MgBAC+RdtAAABAQgK2Fskl8LdF9E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57788,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCDsgACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAO4bwBu7dGlx3VVkGGgBAB9ZNXAAABAQgKuCcas8LdF48=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49546,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBC50ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFQAAAAAAACADwYoBu\/frxKCU+7xigBACJCsCAAABAQgK5fXM6cLdFzo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":44164,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCjT0ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACADrIQBu3CsbiISBiplgBAJFEMHAAABAQgKZRk18sLdF+A=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58618,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB1DkACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAO5PoBu5jg6U77lZSLgBAB9bFqAAABAQgKob1mQcLdFBA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58616,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCkAwACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAO5PgBu6pVAe\/PmdazgBAB9nEsAAABAQgKob1mQcLdFA4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1605292116554,"flow_last_seen":1605292116554,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58614,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCnAxACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBQAAAAAAACAO5PYBu2KmMmkBhhCygBAB9hx4AAABAQgKob1mQcLdFA8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbvHENPnmMC3biY8gBANvdD5AAABAQgKwt3K6VRlt1w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvBWD0wAeZaM44SgBAN0gneAAABAQgKwt3K8eX1FWk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbuyivK2F+GRCjWfgBAMggWaAAABAQgKwt3K8ViSDUk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAA35IcYqAcsBIEmLB5kd7IUo3\/YpAbuqUp8VmAL\/uLoKgBALilfCAAABAQgKwt3K8Ev+J\/w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAIqAcsBIEmLB5kd7IUo3\/YpAbuMNGE5TmUER3k8gBALhgqfAAABAQgKwt3K8YvcoGw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBOAuKJ+lo8zNmgBALjxSdAAABAQgKwt3K8thacjc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbushBIGKmVwrG4jgBANXT4sAAABAQgKwt3K8WUYg3I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgVAAAAAAAAIAMqAcsBIEmLB5kd7IUo3\/YpAbvBipT7vGL368ShgBALhSEJAAABAQgKwt3K8eX1Gck=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvk9gGGELJipjJqgBALQBJ2AAABAQgKwt3K8aG8sBY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvk+M+Z1rOqVQHwgBALQGcqAAABAQgKwt3K8aG8sBU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBNmN7X0wHcAwfgBALjg4+AAABAQgKwt3K8thacg8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgFAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvk+vuVlIuY4OlPgBALOKdvAAABAQgKwt3K8qG8sBY=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292116,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvhvNVWQYa3RpcegBALd4k3AAABAQgKwt3K8rgmZ+0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1605292118602,"flow_last_seen":1605292118602,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d582","src_port":50906,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292118,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAi73ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADYOtWCxtoBu1KGqo810Lv\/gBAB9aO7AAABAQgKDow6U8LdGxc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1605292118714,"flow_last_seen":1605292118714,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":48988,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292118,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gADFFACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAEv1wBu54AWFX+ZWnrgBAB9ax4AAABAQgKIY6128LdIt0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292118,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAANg61YIqAcsBIEmLB5kd7IUo3\/YpAbvG2jXQu\/9ShqqQgBAMVq52AAABAQgKwt3S6w6JbWQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292118,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbu\/XP5laeueAFhWgBALgb+AAAABAQgKwt3S8iGL6TM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1605292119370,"flow_last_seen":1605292119370,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57770,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292119,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gB9dmACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAO4aoBuwkMYXdt3wkTgBAGDPrTAAABAQgKuCcls8LdJNk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292119,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvhqm3fCRMJDGF4gBAMQfSOAAABAQgKwt3Va7gmdTA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1605292120654,"flow_last_seen":1605292120654,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::200e","src_port":58004,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292120,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBWy\/ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICAAAAAAAACAO4pQBuzf4sNBRRFrJgBAB9RDeAAABAQgKzK1LLsLdJJ0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1605292120654,"flow_last_seen":1605292120654,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":55014,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292120,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD6CDACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIBgAAAAAAACAO1uYBu2Ue7VYDxGJbgBAB9U4jAAABAQgKcJlSucLdI9M=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1605292120654,"flow_last_seen":1605292120654,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":49002,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292120,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCJJIACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIEQAAAAAAACAEv2oBu3NXQRgXN+V5gBAZpzN2AAABAQgKIY69b8LdKhI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292120,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgIAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvilFFEWsk3+LDRgBALmwajAAABAQgKwt3a98yslWg=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292120,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgGAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvW5gPEYltlHu1XgBALmkPeAAABAQgKwt3bBnCYnCU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292120,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgRAAAAAAAAIAQqAcsBIEmLB5kd7IUo3\/YpAbu\/ahc35XlzV0EZgBAPBj1lAAABAQgKwt3bBiGODSw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0550{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":23398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":5,"flow_packet_id":255,"flow_first_seen":1605292103810,"flow_last_seen":1605292120926,"flow_tot_l4_data_len":152530,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":598,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":5,"flow_packet_id":255,"flow_first_seen":1605292103810,"flow_last_seen":1605292120926,"flow_tot_l4_data_len":152530,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":598,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1605292121486,"flow_last_seen":1605292121486,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc+osAAAAAoAL9IJMMAAACBAWgBAIICpi1TMUAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAEpymhYqAcsBIEmLB5kd7IUo3\/YpAbupQGb5NYUDXPqMoBJXgPvWAAACBAV4AQMDAwQCCArC3d2UmLVMxQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc+oxm+TWGgBAB+3\/SAAABAQgKmLVM28Ld3ZQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1123{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0836{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1605292121486,"flow_last_seen":1605292121507,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"catasters.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0430{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAEpymhYqAcsBIEmLB5kd7IUo3\/YpAbupQGb5NYYDXPyRgBALMHR7AAABAQgKwt3dsZi1TNs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1605292121674,"flow_last_seen":1605292121674,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:817::200a","src_port":55560,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13v36ZlfzugBAB9Zh5AAABAQgKG7m2dMLdLYw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2319{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+0898{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":40,"flow_packet_id":6,"flow_first_seen":1605292121486,"flow_last_seen":1605292121697,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"catasters.tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"738f0c3c6e00286f3afac626676d352d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+Tr+gBAB9XboAAABAQgKmLVNmcLd3kk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2314{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":1486,"pkt":"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","pkt_caplen":1486,"pkt_type":34525,"pkt_ipoffset":14}
+2186{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":1382,"pkt":"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","pkt_caplen":1382,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UB2gBAB9XFwAAABAQgKmLVNmcLd3kk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UWGgBAB62xqAAABAQgKmLVNmcLd3kk=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1789{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":1087,"pkt":"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","pkt_caplen":1087,"pkt_type":34525,"pkt_ipoffset":14}
+1167{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":23427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":40,"flow_packet_id":12,"flow_first_seen":1605292121486,"flow_last_seen":1605292121698,"flow_tot_l4_data_len":6014,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":501,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Tumblr","category":"SocialNetwork"},"tls": {"version":"TLSv1.2","client_requested_server_name":"catasters.tumblr.com","server_names":"*.tumblr.com,tumblr.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"738f0c3c6e00286f3afac626676d352d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA","issuerDN":"CN=*.tumblr.com","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1","fingerprint":"14:78:BA:5B:B5:54:5D:A1:2C:D2:79:4C:42:99:BB:3A:A9:DB:86:C2"}}
+0430{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UlvgBAB7Wh9AAABAQgKmLVNmsLd3ko=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d79\/gBALlo7gAAABAQgKwt3eUxu5BaQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0545{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":171,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1AHUGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/JFm+UlvgBgB9eKRAAABAQgKmLVNnsLd3koWAwMAJRAAACEg924hu4ACPC\/PXaZkE34PlImv8km+iF8yNNvrjew6ZXQUAwMAAQEWAwMAIJFrjXRXjeDXwP40UzvzcMNsiyj2fWWptNdFdbsKijzm","pkt_caplen":171,"pkt_type":34525,"pkt_ipoffset":14}
+0553{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292121,"pkt_len":177,"pkt":"qtsDr8lk5EKm5WPyht1gCYf1AHsGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoWqUABuwNc\/OZm+UlvgBgB9RncAAABAQgKmLVNnsLd3koXAwMAVjb4fHtLI2KzgJj1QoT30oBM8DV6Pb2214VxmzkjVJFxhBRek9mNXbe9Fh5wMtkvsmiJMN02A4T\/VeGjzgJsxSkKm+5oRHVITd+Qh6ejcjBJDX+CV6CP","pkt_caplen":177,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1605292122064,"flow_last_seen":1605292122064,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0AeaGkAAAAAoAL9IOE8AAACBAWgBAIICthbOh0AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0545{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":172,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAHYGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2Qd9sejoTgBgk6QsuAAABAQgKJEeQFMLc4vQXAwMAUQAAAAAAAAAPN+72C7wfHoQtmaJB3aOHKjPk6JlEWLNjF5TOq7HiJ1O2KSnCxtEIEQAeO4GmbeSTOkkpawAah7BKsajx09L6L57ZkTTcEWLCJA==","pkt_caplen":172,"pkt_type":34525,"pkt_ipoffset":14}
+0490{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":132,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTAE4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QjVsejoTgBgk6YPXAAABAQgKJEeQFMLc4vQXAwMAKQAAAAAAAAAQ4G\/3mQ3kGgQra1eBqPYCTvM1QPmaUoG2gBnwdZPdmFLU","pkt_caplen":132,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTL5FAHmhqoBJXgI\/cAAACBAV4AQMDAwQCCArC3d\/Z2Fs6HQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0AeaGok0y+SgBAB+xPQAAABAQgK2Fs6O8Ld39k=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1120{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0827{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1605292122064,"flow_last_seen":1605292122094,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1605292122095,"flow_last_seen":1605292122095,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACgGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5CzgAAAAAoAL9IPiAAAACBAWgBAIIChLBJ8gAAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGx6OhMItkI1gBAMRA6zAAABAQgKwt3f5SRHkBQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1848{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1134,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABDgGPQBk\/5sAAAAAAAAAAJdleJ0qAcsBIEmLB5kd7IUo3\/YpAbu8cGx6OhMItkI1gBgMRHzEAAABAQgKwt3f5iRHkBQXAwNAGJc9h3GYNRFQlTKtM7rxIBlCWvu2+kAtsSKUpPeQGC2f9G6Xq+yeDPU221fnjVpofZnbGWH209M5VFwfCbYBd\/Ug672I7YdgqPjdHdeHhsk5JO7a6ZKrKfKPrNR6YV7haA9UHN\/J20tM3dd1ztVqjpfbv0\/ZJmmisIhD21RHxC+bpnR9aUwAHNslPkgS258ZBH2f6TbIDYUZtSMnZWw3Yk\/ci8p72sljAny1A0bK6nTpcgQdrpz72F8pAQANc8+dtvsHTLhIpCvOc6Ne6kWtUKT7C\/mvdjTu5edIany0ejKotIFClcl4RxqARVu2X1rfTugLw5NDSe0wQ2nHTzTqPvaW7AfYVBRuhLTkXbNrJI65nxsqhUnfa60m3bgzF7vJcVGCZnpJafd9EdKxWUn3zIF9HNZPAaoWOVFHMyX9a+GRL3JsX2Y5BoTsGub9kof4cZv9bszWuQGQ32PqzX8tj0vwQgSS+\/6S++A\/fvGhO3z2O4J5JcExiBHL9NO41Ci77nPGUPc8rzROsKBv+iwjPxII7ZTo+HPy8VtcXYK9fMChuPeM2GJGvjtvuTXBXbAajdN99K6za2E83mXsUFa4zXbW8l6vvPf\/QtzoTU4L9xdK63gJGDxlquf0XuSzocIpEQi1F1Wer1yQa02YyM9dE5pCuSsEvLN9e3nWr+e5ts1swpdDA9qB0i7vopuVw7pVJRa\/5jtj10ogWPHGj2tvaRujTQeDciYar+lH9\/+jsk7PRHX+uIUqDDNJr9L4h4Y5HFaECy28OARK+N8iZPMvLjs+b2v9+1SVFwvOZk2keVzr60iLx9SAxK+qK3iQWWRvVmrjER7XMeaQBw9ZDHNiSeMtNeFfmRKRTQN09GNCR0gb6nnbLaowG55byyc9Ixf0CX1E+gt7yBldEZUUKfDlxtw+uLgeGUXqthxjdDzHmt05igu5OjLX1G4r5IZOVC4zPzyhWkdvVj3Xlv+5VdG78q9fG74Kr4jrWd0HmfWAicEqqlrJ0tzM615CXJdHLq2i\/icncRzXkfKIHoIE7akepvW2uFW47l3zunDfCPS2CPdfu4SgfwscjhTdvMd0yEZgiOOpbXgOiFet4ZTlfmbFFc1UeXXFtn8JSmdDTZps738TSMj+kk9x8MshGWKOVu0ue6LonWUyQNu1K9\/sN\/LUbwtwiJhRTd4lbHV3YBTVFelyuUAiHAYYrO1BQq\/1qgPHYrAC9\/XR1LO2ONRYU\/Y5+xV2iMD3hHSQ30e3g5G4lPgWiJR\/5BxivIHZmOM3jV1\/ejjWfzi6Q+rJSgLP1NhRuCOEWEb8Rva9JGpl5hBrk9oX7wzBiu7yI4Hc4KR6E6bjwM0G+KtwCI+dvZO488RHnGsWkcv5evakZJvQrVRCJM0\/gTwn","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsej4rgBAk\/\/GIAAABAQgKJEeQPMLd3+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1851{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+1849{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsekJDgBAk\/+1wAAABAQgKJEeQPMLd3+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23827,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsekZbgBAk\/+lYAAABAQgKJEeQPMLd3+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1855{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23829,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsekpzgBAk\/+VAAAABAQgKJEeQPMLd3+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1852{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD4BTACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAACXZXidvHABuwi2QmNsek6LgBAlFeERAAABAQgKJEeQPcLd3+Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1854{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23833,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1134,"pkt":"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","pkt_caplen":1134,"pkt_type":34525,"pkt_ipoffset":14}
+0442{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zbp+IuQs5oBJXgJ7NAAACBAV4AQMDAwQCCArC3d\/9EsEnyA==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5Cznt826ggBAB+yKbAAABAQgKEsEoDMLd3\/0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1123{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":603,"pkt":"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","pkt_caplen":603,"pkt_type":34525,"pkt_ipoffset":14}
+0839{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1605292122095,"flow_last_seen":1605292122163,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ajax.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTL5JAHmpvgBALMAhqAAABAQgKwt3gBdhbOjs=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2068{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0868{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":42,"flow_packet_id":6,"flow_first_seen":1605292122064,"flow_last_seen":1605292122177,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"apis.google.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2068{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0757{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":325,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAQ8GPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTOQJAHmpvgBgLMMFLAAABAQgKwt3gDNhbOjuvLGCrWM0GuhwMFoagOAdsCgnddWYnAru9SgQqgTxKSgkke9r9gjF9IBhRJFAa\/PE4Da+pvNla+z7q6xvWahXPeyE0PrzkR3elfdO+yLR1sIBNo3vJ9Q1JEloutmnviFHbp2FHHltexUS5DD9Tyi7xHZPT8jKFGn\/4sjPTZoxy+Xr4j9DUQCFvZ5+0\/k1Skz0xyrJjXvAXayu0sTzZSxNjCuzKl\/svDOFlbTKw1v8fuyVJbpa+zc+OrovD\/PVbQQ+VyEM6KzoFzNAKDuEZ8sEZU8V86jPN7r0NN7TPeIjLGsRXXtNAlgMZ\/mhjg9h+ag==","pkt_caplen":325,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0zRKgBAB9QyTAAABAQgK2Fs6jsLd4Aw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":42,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0zkCgBAB8gfdAAABAQgK2Fs6j8Ld4Aw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":42,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0znxgBAB8QbvAAABAQgK2Fs6j8Ld4Aw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":42,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeam8k0znxgBgB9dQLAAABAQgK2Fs6j8Ld4AwUAwMAAQEXAwMANbCwYWhW0jUdqBkvWA24z8kmgrwpj5oUEolxflOnMfxPYJk4tzHlrBNaaWSkJt7\/5zNJ1sik","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0550{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":7,"flow_packet_id":255,"flow_first_seen":1605292105170,"flow_last_seen":1605292122188,"flow_tot_l4_data_len":162300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":636,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0551{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":7,"flow_packet_id":255,"flow_first_seen":1605292105170,"flow_last_seen":1605292122188,"flow_tot_l4_data_len":162300,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":636,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0429{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zbqCIuQ0+gBALMBcPAAABAQgKwt3gTxLBKAw=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":42,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTOfFAHmqvgBALOP0hAAABAQgKwt3gUthbOo8=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1219{"flow_id":42,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":666,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAmQGPSoAFFBABwgJAAAAAAAAIA4qAcsBIEmLB5kd7IUo3\/YpAbvBjCTTOfFAHmqvgBgLOL35AAABAQgKwt3gU9hbOo8XAwMCAUIbF\/\/hatnBX8h91xFXbcWxtIUee8NEXRemgZdC+4H5Q1qcdtUDU8X2CjoZmWzoRUpYj1MdLnU3tIJeX91oHoXx\/4G6ckHILs6p3iSVbR52ySvZ4ftSJ5T4A5pMY2EtgD5g6px5DK1NcTz9XQXNTcRu7r3nFeijkgV7lse9bwZklDjJbOZGJteZkXcvHiz6qZL43umerNGhYHPcBhtr1iuAJq4V9G4bLq4VFnj1nB\/P6XpF0tauh5iKrKO1cop\/uWKpETV6F3f8aSYyRnRYSfX9lsbNVVY9cv0EBeRlG5RwW5VOsxGHkPDW1YHw+c\/94Cp3WIi7vCcGxfXWCbADUD3tEpkIg8NU2fK25ApqRAGRik6ClA8RRwug4fN6lpSClM2od06K7bML0SgBLeFeqWoYyxmbKiwQnu+dOHzNepARtOgFdzoBSA3WmPbOLGNuR3aA8omrLZJLRywKdY5\/SQq91NrUtFIxr\/1jqqrv1HD2Z3VXNyBIjgmZOFbZn89SyzA1s6Ph1JFIPgPnq2HMHmFkrqBZW3ho+v6r8MzPk8FoxknVBXTfe2VM0EvUb5wahUj\/C3gE7eer0U0sgcBZ7cfpH384TLqIRGvjWmCk0lQG4bjtGIkIPRQVp8TO9taHNYo1Bv9cWFihJNLyMUlVYYn0GOP9a4vW7uHPZ\/tN4kaPTBcDAwA5O\/1HEqA5lYLiwYW0WMc+DJ\/qblQcA+tNv8zEgpxaZ+\/bNuOp83uzhg9vl3fnrc\/OX17E+j\/UdH2N","pkt_caplen":666,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":42,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gAy+bACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICQAAAAAAACAOwYwBu0Aeaq8k0zw1gBAB9QQAAAABAQgK2Fs6r8Ld4FM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+2067{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1294,"pkt":"5EKm5WPyqtsDr8lkht1gAAAABNgGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zbqCIuQ0+gBgLMKSgAAABAQgKwt3gVRLBKAwWAwMAegIAAHYDAzyuzOrWYt4YZvIEVsUzzH4rmoshNwFiyvyyhBWtMqaUIFTZBy5p0gziG2ybvndeac3\/kMpuKpBLUHIf7VQxlGl9EwEAAC4AMwAkAB0AICh+LQj159\/vtLeAUNGb41KKW9y5Bg9TQeFJo1Uc4bBkACsAAgMEFAMDAAEBFwMDCtqU2z5yY5GabD7OqpDm8sh5zYYtzwxFPh8uKx8kTCtMwhxF69uMOL10+lFpcFraq7ZhDvIrGUf+qv7wCW\/gZUu406R4gElOTaHFyUVM++eBZKxVdE6nNemXiD9uG3lzKXFp6ar8vCeoYIaDHxWYcYNLpLXAnSAD0kzHq6+SncaT2W6qcD3+SY\/PedRoJLeGkk6JFiMNuBThHvaoNDJiHDyIxQkGn\/JUZgtMfbNVm1ZQc05qCGxb+NzBoeLsz9F0\/wRve2uuzULL7qjA\/x+0e9zJPpLI+fRc4yTKXzq6VDYIDB+1QifyM6AgnElJcTiawgOqpNFVH\/SdK3F5XVZEAe+zpEoX6rWuAwsIE8uHjmFWvaLy5rsPnBHzLDsh7j\/u3662SfwGdInRpAq82Kq04rvnSkxxSLWB+PtbPW0V4N9xd5QUws9Ac+sJTFlJAD7e8CcP3rkmEsm8B3hifmDCMogozZV9YFp4lJmdBsRR3uPuUleWy7gf2zD7MtKBJchm2XuKYP3PHKTtWuLmrQJzrtJy\/q4OTaTrnbyM3iTlq5H7I56vZ5hChfTJWVpzGpmuVvXOx01fX3PKtgOiRGNiNbBHgu96Ps9JE0a+1w26eC1kG\/FMZvEuJYfkJvHEBjoA9qeyN8hPkJnHYY3pye1NN3YyKHluPE0IRBN3s4REm66Rhth\/gM8GiysPFNe0hFhVNrO8m0mJJUuyFnlXflDzD0bMKDDJElOgV3IL+NWHL1aXiAwW97LfA7oGGzJ8QV5uuw8ZbbH+wfHOgEfYBJMslUIpSt9wmhMIeV4m8a6t\/83E4O09PzSRghuKl3Il73dycSFi+5jbEDSWoNR9dUKmkp4suztAoekAjy9HiSPiO6YxCMoKcSAt8VXpvmLwmQiuzewJtrBaq+FrBJLid0g9ELAf3Deqxm1o66K8rYdYjPLiXuys7xf9SfpxluDoPPo4EMTOvwD61ox0IhaRl5JjZZk88n8tsZ+\/IFMjkkmCl7nl7884LLG4vVfg3U0TcabOJJ6iDzGobOevwTeC4Rjk3+ROzOFCUMlg2fZtdBOoRIHtS3g3JBt9ute\/unjrNrcxBB3HK2HyFwf37M4ZSdMG43SO57NKbJIoK2eRzMrQ13SJ40ayflaqNNnm58NZg7fjoLh6sw\/TNuJGvOZJS6czESlKFHGfBNFguRjPCgSIgCATLb0857Rp91DxeiaojpYjtW1pRA\/8oCtDRkhy2vwvuZO1OPe\/XzdEy3NnCNYbf1KGqWTKkugyfRUqfB+kw2MWMYsvm\/GSLoIx0cdSVMw+Pc7BC2QbRPeAgVSSyMNaGyULydkuugG8+o758qIp\/6SB2KDVXN8xoF6VyB91H7bNPFfKqdoMy8pyO9LgfWtHA40KAfEq9LVik6Ryc\/0q9mp0k1a8xx\/04c2SHosoboucmA==","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0880{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":43,"flow_packet_id":6,"flow_first_seen":1605292122095,"flow_last_seen":1605292122212,"flow_tot_l4_data_len":1933,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.GoogleServices","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"ajax.googleapis.com","ja3":"b32309a26951912be7dba376398abc3b","ja3s":"eb1d94daa7e0344597e756a1fb6e7054","unsafe_cipher":0,"cipher":"TLS_AES_128_GCM_SHA256","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2070{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":1294,"pkt":"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","pkt_caplen":1294,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83NYgBAB9RtbAAABAQgKEsEoPcLd4FU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83gQgBAB8hamAAABAQgKEsEoPcLd4FU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1105{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":586,"pkt":"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","pkt_caplen":586,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83oEgBAB7xS1AAABAQgKEsEoPcLd4FU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0515{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":150,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVAGAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DT7t83oEgBgB9Y+MAAABAQgKEsEoUMLd4FUUAwMAAQEXAwMANWgMDMBfVNu2f5FozGih6OvPV1P8KfsX9K2YT81qgX0Y4A55ZTBHLh051v+IrLBTzl+MbtPM","pkt_caplen":150,"pkt_type":34525,"pkt_ipoffset":14}
+0557{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":178,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVAHwGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5DX7t83oEgBgB9YRRAAABAQgKEsEoWsLd4FUXAwMAV1wQ6i3Xk6rXoi\/h3QLv3b8sEklScfsVQbmd2ckZRzhNjLj9uya4DsfGYlg51fw7q2B6EJo4th3NDvK5Y2ZioY1vOQDO4FL6\/Lvsp7xoll0eWDuZ+Lsb4A==","pkt_caplen":178,"pkt_type":34525,"pkt_ipoffset":14}
+0805{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":364,"pkt":"qtsDr8lk5EKm5WPyht1gD2uVATYGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICwAAAAAAACAKltABu4i5Ddrt83oEgBgB9Zf3AAABAQgKEsEoW8Ld4FUXAwMBET1kQ7mdGg1v+GcSheXcZb1ysbvOCqinHXfUYXV+eMCJDyHIF5GmuPKSB+PEUQZuNq3JciJ9PqBoqR4vo\/CydWziP8di+drNd\/WLOLmaA2Of5UmXZWvzXBMNLvHH40IIw+ahTr98KeZPCQzERd0aTbXji33l2t3bY5NtR3q+ohXx7suP4e2AdOEfd20Qac64iLpBp08FlfvDjqeeN0ypFRJIklGlkZk94VtFvuda1tFMrYrR6cvozo4fdDVh6RW+OlfMSZnXDJP7kx2JrNOa0pv1EMPYUeS4hN3p0x0F4qzAHuGMQuWujj+9dG+92WXjycTp5bXICDy7wWRtGNFsmcCh51OAY7hDvdSb2YeJt6NUYQ==","pkt_caplen":364,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":43,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgLAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuW0O3zegSIuQ1+gBALOAruAAABAQgKwt3ggBLBKFA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0641{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":243,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAL0GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npn3\/ZTJhJgBgB9RDIAAABAQgKLIojfMLdoCYXAwMAmOWmFu5CqE9BsF0Lkja5wv\/YtP0TWWC4Sq4hb1kwqBE6vIH+0U5MLsUMO223+jPyyN1FscJHmpmpGyPJ0LQ0VNnChcFppvVSxSdkqm\/XA6UHtNQPui90Y4f4s74Na6+VT8wNcC0gVP4GmngoOMneBV+QwmaC+hHoinlxgRnvMgTiYYumn7lh9LrWHSu3a8txGMASoihmiHXa","pkt_caplen":243,"pkt_type":34525,"pkt_ipoffset":14}
+0483{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxAEcGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npoBzZTJhJgBgB9dRbAAABAQgKLIojfMLdoCYXAwMAIhowBNT55YAjcoAFDGc88P9C6kAhwqfDJKT9YBExYrBt2To=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmEm56aAcgBALm44IAAABAQgKwt3hNyyKI3w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmEm56aBDgBALn43dAAABAQgKwt3hNyyKI3w=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0587{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":203,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRAJUGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13v3+ZlfzugBgB9aL3AAABAQgKG7m5ccLd3lMXAwMAcFVxaXihuhejZCNpZ5nuv6bEN9Yj5XMBxAt2QHwyRgmT6ybDwC5C73DyglYgxmIhMzt282zpUtE5GphT7ONBXskP6qssi1eNQHysgmBFeTvR+6kSeL0yhYhtFPIEYfWd8KPo3wOHIQIgFNXMNqMrZ9Q=","pkt_caplen":203,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRAEcGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13v\/SZlfzugBgB9Z8fAAABAQgKG7m5csLd3lMXAwMAInk1I4nIPSajLKiA35EuKIlPm\/oqqHEG+SP9VTSkSQmA2P0=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0595{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":205,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAJcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmEm56aBDgBgLnxxYAAABAQgKwt3hQyyKI3wXAwMAcvR0AaHAXMuPGcwZrKE5MV8OsYym4dTmH6sPgN5IZ4m48DpW\/Wm5UDcghJ2LYje8A4Ak\/5o+LuuFi5ydHj6S4T+6e8RlFqGK4XDdC8dIWTPYMFRbJSOcZntN0rtNgaJfmbpOC56Fo7TzX2wSR6H6iJmIDw==","pkt_caplen":205,"pkt_type":34525,"pkt_ipoffset":14}
+0487{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPQBk\/5sAAAAAAAAAAMAATAMqAcsBIEmLB5kd7IUo3\/YpAbvKotlMmMC56aBDgBgLnwkqAAABAQgKwt3hQyyKI3wXAwMAIsMsUxMGUV9HlsZsHmOzQgYeJ2NMxxvsfC8bDr6KWN\/v\/KI=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBYNxACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAADAAEwDyqIBu7npoEPZTJjAgBAB9ZbdAAABAQgKLIojo8Ld4UM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d7\/0gBALpNeNAAABAQgKwt3hVRu5uXE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d8AbgBALqddfAAABAQgKwt3hVhu5uXI=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/O79d8AbgBgLqZufAAABAQgKwt3hVxu5uXIXAwMAIgJSt8n9Nave2iwImTXNrPNT1dOc\/VIcl92F92EKmrGkkcU=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0529{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":157,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAGcGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/RX9d8AbgBgLqSZsAAABAQgKwt3hZBu5uXIXAwMAQhvD81YuqK3284FGNHX8kOjywhYJi4P1H1UsgXY404o0xixQdJN5CIXQdFs+kR9ART\/sKZdevBJAsZWJzAQ2OcEZVQ==","pkt_caplen":157,"pkt_type":34525,"pkt_ipoffset":14}
+0517{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":149,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAF8GPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/Vz9d8AbgBgLqZR4AAABAQgKwt3hZBu5uXIXAwMAOgsTc9GincnGkczmVYNL4nE\/JUdfVyGjHt5hw31T7HqQ7SdmMb6uw7W6DWUXanxsZMx6ZZYS4t3HeCU=","pkt_caplen":149,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":125,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAEcGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/Zv9d8AbgBgLqQoxAAABAQgKwt3hZBu5uXIXAwMAIqSKq1Vq31KAX00ODaKE9JKGAIwgohGTAGsYBi8XS61Pssg=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13wBuZlf3CgBAB9eAUAAABAQgKG7m5nMLd4Vc=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0485{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":125,"pkt":"qtsDr8lk5EKm5WPyht1gDKQRAEcGQCoBywEgSYsHmR3shSjf9ikqABRQQAcIFwAAAAAAACAK2QgBu\/13wBuZlf3CgBgB9bAJAAABAQgKG7m5nsLd4VcXAwMAIuo3fDWUT\/cRtUj0TEb4lx5sbUF5H7+XEgCH82MrkSrCroE=","pkt_caplen":125,"pkt_type":34525,"pkt_ipoffset":14}
+0516{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":149,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAF8GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQoadXXNVgBgB9QaPAAABAQgKTYUvYcLdm\/0XAwMAOgAAAAAAAAAIvZM7k4G8cjK7Q9\/YrVI4eMbPvi74lWEwjtUtgcQJsZEKgX5x1KPe5+ARIWOSp6YRK8o=","pkt_caplen":149,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":132,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMAE4GQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQsWdXXNVgBgB9YnNAAABAQgKTYUvYsLdm\/0XAwMAKQAAAAAAAAAJhfarTPFG\/0Gx5mBHg+oWjrQOzezO5YGM3qlkDtuEBJnw","pkt_caplen":132,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgXAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbvZCJmV\/cL9d8BCgBALrtYDAAABAQgKwt3hhhu5uZ4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jELFgBAMUD3EAAABAQgKwt3hmU2FL2E=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jELzgBAMVT2QAAABAQgKwt3hmU2FL2I=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":132,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAE4GPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc1X\/jELzgBgMVXKAAAABAQgKwt3h9E2FL2IXAwMAKQKGO4CK2Sa9InR5j0uCXwXkJgY2TxXmIFKpB6UdD+bJIqvG+646NML7","pkt_caplen":132,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQvOdXXODgBAB9UbpAAABAQgKTYUv4MLd4fQ=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0496{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1605292122674,"flow_last_seen":1605292122674,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24688,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":94,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACgGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV9u8AAAAAoAL9IJXTAAACBAWgBAIIChNnJ60AAAAAAQMDBw==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0443{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":94,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACgGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbGM8FfbwoBJXgNHxAAACBAV4AQMDAwQCCArC3eI6E2cnrQ==","pkt_caplen":94,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV9vBYIWxkgBAB+1XrAAABAQgKE2cnxcLd4jo=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1267{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":706,"pkt":"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","pkt_caplen":706,"pkt_type":34525,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":24693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1605292122674,"flow_last_seen":1605292122698,"flow_tot_l4_data_len":764,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0497{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1605292122698,"flow_last_seen":1605292122698,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a15","src_port":42674,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gCuvGACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABKcpoVprIBu3ASIMYXhL6qgBAB9S93AAABAQgKNSTnjcLdLMU=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0821{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24701,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":373,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAT8GPQBk\/5sAAAAAAAAAAGj0KsgqAcsBIEmLB5kd7IUo3\/YpAbvdzp1dc4P\/jELzgBgMVXssAAABAQgKwt3iXU2FL+AXAwMAZgKGO4CK2Sa+MBvWVs7aSwMQS1XdhHEK8n0QGhVYPJ0fcKO17xXh1\/TnQFRLHAhfuOJ2xqV5suXStfVhcwsAjHRGV6KZtBpAeOpM+oH9KIaOY4i4b\/jiZXZvwoiqbraw4dTi6GqRqhcDAwCvAoY7gIrZJr99mddCvV5Pi0UZF1VOg83YYk8DSpojNp1UYB44rfbd7Nv8VPsaWBdoZtachs1FIB3x\/bOmuXGr+S46PqQ36u3DTULgx9r65qELgZBRCA6hbwCsou28zGuziJt2YNElBpvQRj87bfBHBJxeO0txFtGJ27GM6yrh5vi9xhWlJ+47R6OKNPxj0EcUTaIqG5HKo62n\/kFi\/O7kfvi+xjlge7IttySRyXMA0Q==","pkt_caplen":373,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gBEqMACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABo9CrI3c4Bu\/+MQvOdXXSigBAB80T6AAABAQgKTYUwScLd4l0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0431{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24705,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbGQ8FflcgBALPUoSAAABAQgKwt3iZBNnJ8Y=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24706,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAEpymhUqAcsBIEmLB5kd7IUo3\/YpAbumsheEvqpwEiDHgBALdyXtAAABAQgKwt3iZjUkMfM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0802{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":356,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAS4GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbGQ8FflcgBgLPTVnAAABAQgKwt3icxNnJ8YWAwMAgAIAAHwDAzWOeYeWA9tkttviHxFHMRX5kqSsIBnhr\/DteXs0HEdcIOfUpAFM2ex8Yzi\/Sen\/tnD95LkMo2l4V+QtyZhS\/smCEwIAADQAKwACAwQAMwAkAB0AIFMDDI70FepQJKovamRd8ZlpHhD3xMTEwVZ8ecFebZNRACkAAgAAFAMDAAEBFwMDADQFe8opu15w3t96wSHw\/hxzIs+jjXApto7NOP2S71vo6f\/CtK\/ovPn++sEbY22xCwtxfVMNFwMDAEVbG9+HThxTS\/dJcNiVEkQR4XKZN+zpevp6yXH6XRikKTfzKIbPDrUVd1y98ABmy1ohMiTG\/WkM87GBpF3QqkJmysT4GaI=","pkt_caplen":356,"pkt_type":34525,"pkt_ipoffset":14}
+0862{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24707,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1605292122674,"flow_last_seen":1605292122755,"flow_tot_l4_data_len":1098,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.3","client_requested_server_name":"sb.scorecardresearch.com","ja3":"44d502d471cfdb99c59bdfb0f220e5a8","ja3s":"2253c82f03b621c5144709b393fde2c9","unsafe_cipher":0,"cipher":"TLS_AES_256_GCM_SHA384","alpn":"h2,http\/1.1","tls_supported_versions":"GREASE,TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0429{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV+VxYIW1ygBAB+VIAAAABAQgKE2cn\/8Ld4nM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0541{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":166,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1AHAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV+VxYIW1ygBgB+T2\/AAABAQgKE2coAMLd4nMUAwMAAQEXAwMARdDa9yrwoDnXPAyRfhiAZdq3e3C4m8Yc02N87\/88hZCnz69OIwfWZ2BptZXPxasUo0TUxx2bF\/d152CHdMmBWDoRE9rAHw==","pkt_caplen":166,"pkt_type":34525,"pkt_ipoffset":14}
+1204{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":658,"pkt":"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","pkt_caplen":658,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24715,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbXI8FfmsgBALR0hBAAABAQgKwt3ikxNnKAA=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbXI8FfvogBALj0W8AAABAQgKwt3ikxNnKAE=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0825{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":373,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAT8GPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbXI8FfvogBgLj983AAABAQgKwt3imxNnKAEXAwMBGhoXlMHrWJpbYxv6AfH1ejblIx3Aa76YiN83He+kADd00k1+MkJGFTH\/gv70P\/Ak2AHeJI+bZLOalz4vMBBGd22tqdzT7CfTqv+dgfeOet6picHdZkVLPNZ9dzm14ypepKEXLAwxR+eoIpnlF8agnbxwfUfy3j5IBD1GfRDo+Yy\/EtJwmlXnU+A3P\/NiJMgpLvu14I0zKCZ1mirTJUUMYDw33cagESao44rjC4aKuR6HZ8ewpjymGjRVm3SrIU8WuJDJlUxZJLcFSyzdgJhwhcZD10G\/u4vEKCca\/2XI1\/+PAYQHBLmvdUBNVlwaeGNsvK1IHL+tUR3WfyMtzg5dkwHuq2ssQBR7SpldTL4WtmG2vA0AXY7VM9zCyw==","pkt_caplen":373,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24719,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV++hYIW6RgBAB904HAAABAQgKE2coJ8Ld4ps=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+1248{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24720,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":686,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAAngGPQBk\/5sAAAAAAAAAAGAGB0kqAcsBIEmLB5kd7IUo3\/YpAbuY\/FghbpE8FfvogBgLjyopAAABAQgKwt3inRNnKAEXAwMCUzZARbwxBkz3+SQfcs\/ZgbJZR+bKWkZu1ko90Fx\/mX2WuGFZ3yc43oenDWWC7\/RugTGPifZDrYRGw8ILNxwIdvH669GvPEFLAiUkCO9U1MaSlMiRtwAwlul+BFEl\/v6cbkxREtBOi\/I9EyBs3uZIgfGrIP7V36dV5XAdEh9XDAOTT+r7CVkTcwhHyuTDl+4cEe2WDrf6kH3EvVNHovmTgR6NBbi2ZzvYf\/I871e+eny2ObsTDS6auOCtJPml+QIiKq\/ZkAuyyE1Zk+G1NyrqxHvZOjNK6PZGzRLIb2cXXN+qdoebo6v7qqagSnmieYKIxz39tsigxdvJ2Vr383zhE8HvFXk6odr7Mo1KVfG41Qgy41fDBKoqAqmSHI9\/7hARsmC4Ktp6kgI\/6jCJ5pWZ4C\/rURmJeamcqLzm3Qyz+EXXgtS7ZHk6gYfIMlqB0g8AfaGtX4V9ZKDbk7QH4E3XetnXPqE0zgsbAXBciZyypq0sULlHE+VYpeL9kTykm7iBz2x1sM5QbsFGx+gXTmWRZj1LeT\/eAGa7MD277zs4U0uvXuwqDDXXC5f2ps1c5TG15onNx03RwFOOB4k6M3IjiYwxMPI02tCNW0y\/LSreaxKdooxeKVrn2mf0VY9lnBX9Si7WNjag5aI+NS859ngGEY9uoQE3\/Ami5dcrKKUOWHWg9oqk4\/qmhetPitZOnjEO5fFPTUN6biVkUyJISciA2ixL1SyqYa45+bJx+mhTWP82k4RdhoHrnraU8LSU0jqAY0Jsb3n37bdgMNgq+P75djh0grs=","pkt_caplen":686,"pkt_type":34525,"pkt_ipoffset":14}
+0429{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24721,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gD3A1ACAGQCoBywEgSYsHmR3shSjf9ikAZP+bAAAAAAAAAABgBgdJmPwBuzwV++hYIXDpgBAB80uwAAABAQgKE2coKMLd4p0=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0503{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1605292122874,"flow_last_seen":1605292122874,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40190,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24733,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"qtsDr8lk5EKm5WPyht1gDJQ7ACAGQCoBywEgSYsHmR3shSjf9ikqABRQQAcICgAAAAAAACAKnP4Bu4CgSN\/gvLosgBAB9qrlAAABAQgK1OQQnsLdMvM=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0430{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","pkt_oversize":false,"pkt_ts":1605292122,"pkt_len":86,"pkt":"5EKm5WPyqtsDr8lkht1gAAAAACAGPSoAFFBABwgKAAAAAAAAIAoqAcsBIEmLB5kd7IUo3\/YpAbuc\/uC8uiyAoEjggBALQrp6AAABAQgKwt3jAtThR68=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1605292118714,"flow_last_seen":1605292118786,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":48988,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":35,"flow_packet_id":2,"flow_first_seen":1605292118714,"flow_last_seen":1605292118786,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":48988,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":39,"flow_packet_id":2,"flow_first_seen":1605292120654,"flow_last_seen":1605292120853,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":49002,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":39,"flow_packet_id":2,"flow_first_seen":1605292120654,"flow_last_seen":1605292120853,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:811::2004","src_port":49002,"dst_port":443,"l4_proto":"tcp"}
+0562{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":3,"flow_packet_id":9,"flow_first_seen":1605292103804,"flow_last_seen":1605292104013,"flow_tot_l4_data_len":1490,"flow_min_l4_data_len":32,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:8c6e:cf2c:8d6:9fb5","src_port":41266,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0518{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":3,"flow_packet_id":9,"flow_first_seen":1605292103804,"flow_last_seen":1605292104013,"flow_tot_l4_data_len":1490,"flow_min_l4_data_len":32,"flow_max_l4_data_len":696,"flow_avg_l4_data_len":165,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2620:116:800d:21:8c6e:cf2c:8d6:9fb5","src_port":41266,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":1,"flow_packet_id":76,"flow_first_seen":1605292102602,"flow_last_seen":1605292122470,"flow_tot_l4_data_len":37666,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":495,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":1,"flow_packet_id":76,"flow_first_seen":1605292102602,"flow_last_seen":1605292122470,"flow_tot_l4_data_len":37666,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1080,"flow_avg_l4_data_len":495,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:789d","src_port":48240,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1605292114506,"flow_last_seen":1605292114736,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1605292114506,"flow_last_seen":1605292114736,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56558,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1605292108746,"flow_last_seen":1605292108796,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1605292108746,"flow_last_seen":1605292108796,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56564,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1605292108747,"flow_last_seen":1605292108805,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1605292108747,"flow_last_seen":1605292108805,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56578,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1605292108746,"flow_last_seen":1605292108789,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1605292108746,"flow_last_seen":1605292108789,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56582,"dst_port":443,"l4_proto":"tcp"}
+0541{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1605292102219,"flow_last_seen":1605292102653,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1605292102219,"flow_last_seen":1605292102653,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56592,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1605292108747,"flow_last_seen":1605292108796,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":17,"flow_packet_id":2,"flow_first_seen":1605292108747,"flow_last_seen":1605292108796,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56594,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":12,"flow_packet_id":31,"flow_first_seen":1605292105433,"flow_last_seen":1605292106000,"flow_tot_l4_data_len":8259,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":266,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2001:4998:14:800::1001","src_port":47118,"dst_port":443,"l4_proto":"tcp"}
+0551{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":41,"flow_packet_id":13,"flow_first_seen":1605292121674,"flow_last_seen":1605292122517,"flow_tot_l4_data_len":823,"flow_min_l4_data_len":32,"flow_max_l4_data_len":149,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:817::200a","src_port":55560,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0507{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":41,"flow_packet_id":13,"flow_first_seen":1605292121674,"flow_last_seen":1605292122517,"flow_tot_l4_data_len":823,"flow_min_l4_data_len":32,"flow_max_l4_data_len":149,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:817::200a","src_port":55560,"dst_port":443,"l4_proto":"tcp"}
+0541{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1605292102603,"flow_last_seen":1605292102678,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1605292102603,"flow_last_seen":1605292102678,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::9765:798c","src_port":56640,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49462,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":27,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49462,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49464,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":26,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49464,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49496,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49496,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49546,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":29,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2003","src_port":49546,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":42,"flow_packet_id":107,"flow_first_seen":1605292122064,"flow_last_seen":1605292122440,"flow_tot_l4_data_len":79659,"flow_min_l4_data_len":32,"flow_max_l4_data_len":6072,"flow_avg_l4_data_len":744,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:809::200e","src_port":49548,"dst_port":443,"l4_proto":"tcp"}
+0544{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1605292104650,"flow_last_seen":1605292122733,"flow_tot_l4_data_len":762,"flow_min_l4_data_len":32,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":76,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0500{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":6,"flow_packet_id":10,"flow_first_seen":1605292104650,"flow_last_seen":1605292122733,"flow_tot_l4_data_len":762,"flow_min_l4_data_len":32,"flow_max_l4_data_len":319,"flow_avg_l4_data_len":76,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::68f4:2ac8","src_port":56782,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1605292119370,"flow_last_seen":1605292119458,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57770,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1605292119370,"flow_last_seen":1605292119458,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57770,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":13,"flow_packet_id":21017,"flow_first_seen":1605292105669,"flow_last_seen":1605292122890,"flow_tot_l4_data_len":20732346,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2804,"flow_avg_l4_data_len":986,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56794,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57788,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200e","src_port":57788,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":19,"flow_packet_id":1671,"flow_first_seen":1605292108895,"flow_last_seen":1605292115212,"flow_tot_l4_data_len":1089230,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2458,"flow_avg_l4_data_len":651,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d03","src_port":56842,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1605292122698,"flow_last_seen":1605292122741,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a15","src_port":42674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":45,"flow_packet_id":2,"flow_first_seen":1605292122698,"flow_last_seen":1605292122741,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a15","src_port":42674,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45706,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200e","src_port":45706,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1605292120654,"flow_last_seen":1605292120839,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::200e","src_port":58004,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1605292120654,"flow_last_seen":1605292120839,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:808::200e","src_port":58004,"dst_port":443,"l4_proto":"tcp"}
+0542{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1605292118602,"flow_last_seen":1605292118777,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d582","src_port":50906,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0498{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":34,"flow_packet_id":2,"flow_first_seen":1605292118602,"flow_last_seen":1605292118777,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::d83a:d582","src_port":50906,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":5,"flow_packet_id":862,"flow_first_seen":1605292103810,"flow_last_seen":1605292122755,"flow_tot_l4_data_len":550417,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2326,"flow_avg_l4_data_len":638,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::98c7:1593","src_port":42908,"dst_port":443,"l4_proto":"tcp"}
+0545{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":4,"flow_packet_id":9,"flow_first_seen":1605292103804,"flow_last_seen":1605292104007,"flow_tot_l4_data_len":1576,"flow_min_l4_data_len":32,"flow_max_l4_data_len":676,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::8fcc:d927","src_port":57286,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0501{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":4,"flow_packet_id":9,"flow_first_seen":1605292103804,"flow_last_seen":1605292104007,"flow_tot_l4_data_len":1576,"flow_min_l4_data_len":32,"flow_max_l4_data_len":676,"flow_avg_l4_data_len":175,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::8fcc:d927","src_port":57286,"dst_port":443,"l4_proto":"tcp"}
+0523{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":9,"flow_packet_id":50,"flow_first_seen":1605292105197,"flow_last_seen":1605292105378,"flow_tot_l4_data_len":21326,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1240,"flow_avg_l4_data_len":426,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58380,"dst_port":443,"l4_proto":"tcp"}
+0519{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":10,"flow_packet_id":12,"flow_first_seen":1605292105274,"flow_last_seen":1605292105347,"flow_tot_l4_data_len":980,"flow_min_l4_data_len":20,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2606:2800:135:155a:23ba:b2a:25ff:122d","src_port":58382,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2002","src_port":35892,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:815::2002","src_port":35892,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":44164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":30,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2003","src_port":44164,"dst_port":443,"l4_proto":"tcp"}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":11,"flow_packet_id":35,"flow_first_seen":1605292105418,"flow_last_seen":1605292122864,"flow_tot_l4_data_len":10299,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1311,"flow_avg_l4_data_len":294,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39152,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":44,"flow_packet_id":19,"flow_first_seen":1605292122674,"flow_last_seen":1605292122861,"flow_tot_l4_data_len":3907,"flow_min_l4_data_len":32,"flow_max_l4_data_len":652,"flow_avg_l4_data_len":205,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::6006:749","src_port":39164,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58614,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":33,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58614,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58616,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":32,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58616,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58618,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":31,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::200e","src_port":58618,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1605292122874,"flow_last_seen":1605292122899,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40190,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1605292122874,"flow_last_seen":1605292122899,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80a::200a","src_port":40190,"dst_port":443,"l4_proto":"tcp"}
+0505{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":40,"flow_packet_id":62,"flow_first_seen":1605292121486,"flow_last_seen":1605292122503,"flow_tot_l4_data_len":26052,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::4a72:9a16","src_port":43328,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":7,"flow_packet_id":289,"flow_first_seen":1605292105170,"flow_last_seen":1605292122449,"flow_tot_l4_data_len":196436,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":679,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43420,"dst_port":443,"l4_proto":"tcp"}
+0506{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":8,"flow_packet_id":326,"flow_first_seen":1605292105171,"flow_last_seen":1605292122739,"flow_tot_l4_data_len":196237,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1432,"flow_avg_l4_data_len":601,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4d28","src_port":43434,"dst_port":443,"l4_proto":"tcp"}
+0541{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43602,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0497{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::df9:21c6","src_port":43602,"dst_port":443,"l4_proto":"tcp"}
+0546{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":14,"flow_packet_id":28,"flow_first_seen":1605292105726,"flow_last_seen":1605292122804,"flow_tot_l4_data_len":2267,"flow_min_l4_data_len":32,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":80,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4c03","src_port":51874,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0502{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":14,"flow_packet_id":28,"flow_first_seen":1605292105726,"flow_last_seen":1605292122804,"flow_tot_l4_data_len":2267,"flow_min_l4_data_len":32,"flow_max_l4_data_len":189,"flow_avg_l4_data_len":80,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"64:ff9b::c000:4c03","src_port":51874,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":43,"flow_packet_id":63,"flow_first_seen":1605292122095,"flow_last_seen":1605292122344,"flow_tot_l4_data_len":41578,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3173,"flow_avg_l4_data_len":659,"midstream":0,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:80b::200a","src_port":38608,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":38,"flow_packet_id":2,"flow_first_seen":1605292120654,"flow_last_seen":1605292120853,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":55014,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":38,"flow_packet_id":2,"flow_first_seen":1605292120654,"flow_last_seen":1605292120853,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:806::200e","src_port":55014,"dst_port":443,"l4_proto":"tcp"}
+0548{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0504{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1605292116554,"flow_last_seen":1605292116783,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip6","src_ip":"2a01:cb01:2049:8b07:991d:ec85:28df:f629","dst_ip":"2a00:1450:4007:805::2002","src_port":50960,"dst_port":443,"l4_proto":"tcp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":24745,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/tumblr.pcap"}
diff --git a/tests/result/nDPId_ubntac2.pcap.txt b/tests/result/nDPId_ubntac2.pcap.txt
new file mode 100644
index 000000000..99cac16f6
--- /dev/null
+++ b/tests/result/nDPId_ubntac2.pcap.txt
@@ -0,0 +1,34 @@
+0359{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1486943433175,"flow_last_seen":1486943433175,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":34085,"dst_port":10001,"l4_proto":"udp"}
+0614{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943433,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4FAAEARuPfAqAEB\/\/\/\/\/4UlJxEAtx2vAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADeYAsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFc8bAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1486943433175,"flow_last_seen":1486943433175,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":34085,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486943443357,"flow_last_seen":1486943443357,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":44641,"dst_port":10001,"l4_proto":"udp"}
+0615{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943443,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4JAAEARuPbAqAEB\/\/\/\/\/65hJxEAt\/NoAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADeagsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdAbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486943443357,"flow_last_seen":1486943443357,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":44641,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486943453510,"flow_last_seen":1486943453510,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":55321,"dst_port":10001,"l4_proto":"udp"}
+0614{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943453,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4NAAEARuPXAqAEB\/\/\/\/\/9gZJxEAt8imAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADedAsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdEbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486943453510,"flow_last_seen":1486943453510,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":55321,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486943463665,"flow_last_seen":1486943463665,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47871,"dst_port":10001,"l4_proto":"udp"}
+0615{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943463,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4RAAEARuPTAqAEB\/\/\/\/\/7r\/JxEAt+S2AgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADefgsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdIbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486943463665,"flow_last_seen":1486943463665,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47871,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1486943473817,"flow_last_seen":1486943473817,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":59772,"dst_port":10001,"l4_proto":"udp"}
+0614{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943473,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4VAAEARuPPAqAEB\/\/\/\/\/+l8JxEAt7UuAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADeiQsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdMbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1486943473817,"flow_last_seen":1486943473817,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":59772,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1486943483995,"flow_last_seen":1486943483995,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":52220,"dst_port":10001,"l4_proto":"udp"}
+0614{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943483,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4ZAAEARuPLAqAEB\/\/\/\/\/8v8JxEAt9GkAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADekwsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdQbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1486943483995,"flow_last_seen":1486943483995,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":52220,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1486943494148,"flow_last_seen":1486943494148,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47746,"dst_port":10001,"l4_proto":"udp"}
+0614{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943494,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4dAAEARuPHAqAEB\/\/\/\/\/7qCJxEAt+IUAgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADenQsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdUbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1486943494148,"flow_last_seen":1486943494148,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47746,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1486943504301,"flow_last_seen":1486943504301,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":42838,"dst_port":10001,"l4_proto":"udp"}
+0615{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","pkt_oversize":false,"pkt_ts":1486943504,"pkt_len":217,"pkt":"\/\/\/\/\/\/\/\/gCqojWksCABFAADLv4hAAEARuPDAqAEB\/\/\/\/\/6dWJxEAt\/Q2AgYAqwIACoAqqI1pK8CoAhUCAAqAKqiNaSzAqAEBAQAGgCqojWkrCgAEAADepwsABHVibnQMAARVR1czAwA4VW5pRmlTZWN1cml0eUdhdGV3YXkuRVItZTEyMC52NC4zLjMzLjQ5MzYwODYuMTYxMjAzLjIwMzEWAA40LjMuMzMuNDkzNjA4NhUABFVHVzMXAAEAGAABABMABoAqqI1pKxIABAAAFdYbAAU0LjAuMA==","pkt_caplen":217,"pkt_type":2048,"pkt_ipoffset":14}
+0579{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1486943504301,"flow_last_seen":1486943504301,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":42838,"dst_port":10001,"l4_proto":"udp","ndpi": {"proto":"UBNTAC2","category":"Network"},"ubntac2": {"version":"UniFiSecurityGateway.ER-e120.v4"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1486943473817,"flow_last_seen":1486943473817,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":59772,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1486943494148,"flow_last_seen":1486943494148,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47746,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1486943463665,"flow_last_seen":1486943463665,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":47871,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1486943483995,"flow_last_seen":1486943483995,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":52220,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1486943433175,"flow_last_seen":1486943433175,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":34085,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1486943443357,"flow_last_seen":1486943443357,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":44641,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1486943504301,"flow_last_seen":1486943504301,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":42838,"dst_port":10001,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1486943453510,"flow_last_seen":1486943453510,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":183,"flow_max_l4_data_len":183,"flow_avg_l4_data_len":183,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.1","dst_ip":"255.255.255.255","src_port":55321,"dst_port":10001,"l4_proto":"udp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/ubntac2.pcap"}
diff --git a/tests/result/nDPId_upnp.pcap.txt b/tests/result/nDPId_upnp.pcap.txt
new file mode 100644
index 000000000..c06f3abcd
--- /dev/null
+++ b/tests/result/nDPId_upnp.pcap.txt
@@ -0,0 +1,22 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1541515314826,"flow_last_seen":1541515314826,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3441:3d24:6d30:a807","dst_ip":"ff02::c","src_port":58932,"dst_port":3702,"l4_proto":"udp"}
+1269{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515314,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1541515314826,"flow_last_seen":1541515314826,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3441:3d24:6d30:a807","dst_ip":"ff02::c","src_port":58932,"dst_port":3702,"l4_proto":"udp","ndpi": {"proto":"UPnP","category":"Network"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1541515314827,"flow_last_seen":1541515314827,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.61.66","dst_ip":"239.255.255.250","src_port":58931,"dst_port":3702,"l4_proto":"udp"}
+1243{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515314,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1541515314827,"flow_last_seen":1541515314827,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.61.66","dst_ip":"239.255.255.250","src_port":58931,"dst_port":3702,"l4_proto":"udp","ndpi": {"proto":"UPnP","category":"Network"}}
+1269{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515314,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+1243{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515315,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515315,"pkt_len":718,"pkt":"MzMAAAAMGNvyL6AYht1gDeGUApgRAf6AAAAAAAAANEE9JG0wqAf\/AgAAAAAAAAAAAAAAAAAM5jQOdgKYg108P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCI\/Pjxzb2FwOkVudmVsb3BlIHhtbG5zOnNvYXA9Imh0dHA6Ly93d3cudzMub3JnLzIwMDMvMDUvc29hcC1lbnZlbG9wZSIgeG1sbnM6d3NhPSJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA0LzA4L2FkZHJlc3NpbmciIHhtbG5zOndzZD0iaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNC9kaXNjb3ZlcnkiPjxzb2FwOkhlYWRlcj48d3NhOlRvPnVybjpzY2hlbWFzLXhtbHNvYXAtb3JnOndzOjIwMDU6MDQ6ZGlzY292ZXJ5PC93c2E6VG8+PHdzYTpBY3Rpb24+aHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNC9kaXNjb3ZlcnkvUmVzb2x2ZTwvd3NhOkFjdGlvbj48d3NhOk1lc3NhZ2VJRD51cm46dXVpZDozZjQyZGM5YS0yNGNlLTQ4ZDEtODhmOS0xNmI5NmExMzdkNzE8L3dzYTpNZXNzYWdlSUQ+PC9zb2FwOkhlYWRlcj48c29hcDpCb2R5Pjx3c2Q6UmVzb2x2ZT48d3NhOkVuZHBvaW50UmVmZXJlbmNlPjx3c2E6QWRkcmVzcz51cm46dXVpZDplMzI0ODAwMC04MGNlLTExZGItODAwMC0wMDFiYTk5ZWM5NTY8L3dzYTpBZGRyZXNzPjwvd3NhOkVuZHBvaW50UmVmZXJlbmNlPjwvd3NkOlJlc29sdmU+PC9zb2FwOkJvZHk+PC9zb2FwOkVudmVsb3BlPg==","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+1243{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515315,"pkt_len":698,"pkt":"AQBef\/\/6GNvyL6AYCABFAAKsCtgAAAERvoTAqD1C7\/\/\/+uYzDnYCmBmmPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48c29hcDpFbnZlbG9wZSB4bWxuczpzb2FwPSJodHRwOi8vd3d3LnczLm9yZy8yMDAzLzA1L3NvYXAtZW52ZWxvcGUiIHhtbG5zOndzYT0iaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNC8wOC9hZGRyZXNzaW5nIiB4bWxuczp3c2Q9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDQvZGlzY292ZXJ5Ij48c29hcDpIZWFkZXI+PHdzYTpUbz51cm46c2NoZW1hcy14bWxzb2FwLW9yZzp3czoyMDA1OjA0OmRpc2NvdmVyeTwvd3NhOlRvPjx3c2E6QWN0aW9uPmh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDQvZGlzY292ZXJ5L1Jlc29sdmU8L3dzYTpBY3Rpb24+PHdzYTpNZXNzYWdlSUQ+dXJuOnV1aWQ6M2Y0MmRjOWEtMjRjZS00OGQxLTg4ZjktMTZiOTZhMTM3ZDcxPC93c2E6TWVzc2FnZUlEPjwvc29hcDpIZWFkZXI+PHNvYXA6Qm9keT48d3NkOlJlc29sdmU+PHdzYTpFbmRwb2ludFJlZmVyZW5jZT48d3NhOkFkZHJlc3M+dXJuOnV1aWQ6ZTMyNDgwMDAtODBjZS0xMWRiLTgwMDAtMDAxYmE5OWVjOTU2PC93c2E6QWRkcmVzcz48L3dzYTpFbmRwb2ludFJlZmVyZW5jZT48L3dzZDpSZXNvbHZlPjwvc29hcDpCb2R5Pjwvc29hcDpFbnZlbG9wZT4=","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515315,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+1243{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515316,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1269{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515316,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+1244{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515317,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1270{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515318,"pkt_len":718,"pkt":"MzMAAAAMGNvyL6AYht1gDeGUApgRAf6AAAAAAAAANEE9JG0wqAf\/AgAAAAAAAAAAAAAAAAAM5jQOdgKYg108P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJ1dGYtOCI\/Pjxzb2FwOkVudmVsb3BlIHhtbG5zOnNvYXA9Imh0dHA6Ly93d3cudzMub3JnLzIwMDMvMDUvc29hcC1lbnZlbG9wZSIgeG1sbnM6d3NhPSJodHRwOi8vc2NoZW1hcy54bWxzb2FwLm9yZy93cy8yMDA0LzA4L2FkZHJlc3NpbmciIHhtbG5zOndzZD0iaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNC9kaXNjb3ZlcnkiPjxzb2FwOkhlYWRlcj48d3NhOlRvPnVybjpzY2hlbWFzLXhtbHNvYXAtb3JnOndzOjIwMDU6MDQ6ZGlzY292ZXJ5PC93c2E6VG8+PHdzYTpBY3Rpb24+aHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNS8wNC9kaXNjb3ZlcnkvUmVzb2x2ZTwvd3NhOkFjdGlvbj48d3NhOk1lc3NhZ2VJRD51cm46dXVpZDozZjQyZGM5YS0yNGNlLTQ4ZDEtODhmOS0xNmI5NmExMzdkNzE8L3dzYTpNZXNzYWdlSUQ+PC9zb2FwOkhlYWRlcj48c29hcDpCb2R5Pjx3c2Q6UmVzb2x2ZT48d3NhOkVuZHBvaW50UmVmZXJlbmNlPjx3c2E6QWRkcmVzcz51cm46dXVpZDplMzI0ODAwMC04MGNlLTExZGItODAwMC0wMDFiYTk5ZWM5NTY8L3dzYTpBZGRyZXNzPjwvd3NhOkVuZHBvaW50UmVmZXJlbmNlPjwvd3NkOlJlc29sdmU+PC9zb2FwOkJvZHk+PC9zb2FwOkVudmVsb3BlPg==","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+1244{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515319,"pkt_len":698,"pkt":"AQBef\/\/6GNvyL6AYCABFAAKsCtsAAAERvoHAqD1C7\/\/\/+uYzDnYCmBmmPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48c29hcDpFbnZlbG9wZSB4bWxuczpzb2FwPSJodHRwOi8vd3d3LnczLm9yZy8yMDAzLzA1L3NvYXAtZW52ZWxvcGUiIHhtbG5zOndzYT0iaHR0cDovL3NjaGVtYXMueG1sc29hcC5vcmcvd3MvMjAwNC8wOC9hZGRyZXNzaW5nIiB4bWxuczp3c2Q9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDQvZGlzY292ZXJ5Ij48c29hcDpIZWFkZXI+PHdzYTpUbz51cm46c2NoZW1hcy14bWxzb2FwLW9yZzp3czoyMDA1OjA0OmRpc2NvdmVyeTwvd3NhOlRvPjx3c2E6QWN0aW9uPmh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3dzLzIwMDUvMDQvZGlzY292ZXJ5L1Jlc29sdmU8L3dzYTpBY3Rpb24+PHdzYTpNZXNzYWdlSUQ+dXJuOnV1aWQ6M2Y0MmRjOWEtMjRjZS00OGQxLTg4ZjktMTZiOTZhMTM3ZDcxPC93c2E6TWVzc2FnZUlEPjwvc29hcDpIZWFkZXI+PHNvYXA6Qm9keT48d3NkOlJlc29sdmU+PHdzYTpFbmRwb2ludFJlZmVyZW5jZT48d3NhOkFkZHJlc3M+dXJuOnV1aWQ6ZTMyNDgwMDAtODBjZS0xMWRiLTgwMDAtMDAxYmE5OWVjOTU2PC93c2E6QWRkcmVzcz48L3dzYTpFbmRwb2ludFJlZmVyZW5jZT48L3dzZDpSZXNvbHZlPjwvc29hcDpCb2R5Pjwvc29hcDpFbnZlbG9wZT4=","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1270{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515320,"pkt_len":718,"pkt":"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","pkt_caplen":718,"pkt_type":34525,"pkt_ipoffset":14}
+1244{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","pkt_oversize":false,"pkt_ts":1541515321,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","flow_id":0,"flow_packet_id":7,"flow_first_seen":1541515314826,"flow_last_seen":1541515320458,"flow_tot_l4_data_len":4648,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3441:3d24:6d30:a807","dst_ip":"ff02::c","src_port":58932,"dst_port":3702,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap","flow_id":1,"flow_packet_id":7,"flow_first_seen":1541515314827,"flow_last_seen":1541515321472,"flow_tot_l4_data_len":4648,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.61.66","dst_ip":"239.255.255.250","src_port":58931,"dst_port":3702,"l4_proto":"udp"}
+0141{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/upnp.pcap"}
diff --git a/tests/result/nDPId_viber.pcap.txt b/tests/result/nDPId_viber.pcap.txt
new file mode 100644
index 000000000..52bc68850
--- /dev/null
+++ b/tests/result/nDPId_viber.pcap.txt
@@ -0,0 +1,290 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1527155638428,"flow_last_seen":1527155638428,"flow_tot_l4_data_len":133,"flow_min_l4_data_len":133,"flow_max_l4_data_len":133,"flow_avg_l4_data_len":133,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"52.0.253.101","src_port":33208,"dst_port":4244,"l4_proto":"tcp"}
+0533{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":167,"pkt":"AA6OMNv9MAdNo1+nCABFAACZvbBAAEAGio\/AqAARNAD9ZYG4EJTYH5QATQ0UaIAYAtokAwAAAQEICgAhYEL3kz3SZQAKAAAALtCh9tIA1PL3FQOheV4He+mBM0W\/i9pTb10sHI+OMXtBs1b9JHGGgzJlSCkVK80QeHWJMpbzU2NcxAJaXXoLguc1CK5osKkCx6zZTIH0SZ0piWwLO+YlPXpdR9T6nHw=","pkt_caplen":167,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1527155638474,"flow_last_seen":1527155638474,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAHQZAAEARnDbAqAARwKgAD7KvADUALIZ64YMBAAABAAAAAAAABWdyYXBoCGZhY2Vib29rA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1527155638474,"flow_last_seen":1527155638474,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Facebook","category":"SocialNetwork"},"dns": {"query":"graph.facebook.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0581{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":203,"pkt":"MAdNo1+nAA6OMNv9CABFAAC9W3xAAEARXUPAqAAPwKgAEQA1sq8AqYax4YOBgAABAAMAAgACBWdyYXBoCGZhY2Vib29rA2NvbQAAAQABwAwABQABAAAK\/QAGA2FwacASwDAABQABAAADcAAMBHN0YXIEYzEwcsASwEIAAQABAAAAIgAEHw1WCMBHAAIAAQAAChUABwFiAm5zwEfARwACAAEAAAoVAAQBYcBswH0AAQABAAAKFQAERavvC8BqAAEAAQAAChUABEWr\/ws=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1527155638474,"flow_last_seen":1527155638476,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":44,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Facebook","category":"SocialNetwork"},"dns": {"query":"graph.facebook.com","num_queries":1,"num_answers":7,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"31.13.86.8"}}
+0472{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":122,"pkt":"AA6OMNv9MAdNo1+nCABFAABsvbFAAEAGirvAqAARNAD9ZYG4EJTYH5RlTQ0UaIAYAtrUUgAAAQEICgAhYFH3kz3SOAALAAAAldaoLlKjmwog1MjwGSIlPYr6Sdpf8civ07lgAXs3mNLP4I1IauuXnWuqSM\/O114Rmek=","pkt_caplen":122,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0M+hAACYGLr00AP1lwKgAERCUgbhNDRRo2B+UZYAQAIxrZwAAAQEICveUYGsAIWBC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":142,"pkt":"MAdNo1+nAA6OMNv9CABFAACAM+lAACYGLnA0AP1lwKgAERCUgbhNDRRo2B+UZYAYAIyDiQAAAQEICveUYGwAIWBCTAAOAAAA7ZKoDv3w6OEJqmeEcnEl5cUBQprrMM7Rp8izc+yMxyWcB68VLspY31LXwDQ0RwmmKdwU4EmaqJ3KShawrAeJ2amPhoabWg==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0vbJAAEAGivLAqAARNAD9ZYG4EJTYH5SdTQ0UtIAQAtpoeQAAAQEICgAhYF33lGBs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0999{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":508,"pkt":"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","pkt_caplen":508,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":130,"pkt":"MAdNo1+nAA6OMNv9CABFAAB0M+pAACYGLns0AP1lwKgAERCUgbhNDRS02B+UnYAYAIwQogAAAQEICveUYKUAIWBRQAAPAAAAPvIXL3EdR0EX2OM4ncmY88xy927Xy7SGfg+j8yPCe1JiAp0K2pE8ZJXDqxZswZaPQeeV6PP61om8kg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0vbRAAEAGivDAqAARNAD9ZYG4EJTYH5ZXTQ0U9IAQAtpmOAAAAQEICgAhYGv3lGCl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":134,"pkt":"MAdNo1+nAA6OMNv9CABFAAB4M+tAACYGLnY0AP1lwKgAERCUgbhNDRT02B+WV4AYAJW3YgAAAQEICveUYQEAIWBnRAAQAAAAhWyJ8NwOoiiefvfHWmYSvvyMNosILosbQOgWVmb9FwMzhNX+D1qiZakE4ObB3LGQCYZWvxRShcP8Pqrl1bo=","pkt_caplen":134,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155638,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0vbVAAEAGiu\/AqAARNAD9ZYG4EJTYH5ZXTQ0VOIAQAtplgQAAAQEICgAhYIL3lGEB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1527155639005,"flow_last_seen":1527155639005,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp"}
+0406{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8HWBAAEARm+DAqAARwKgAD4nTADUAKI8By5wBAAABAAAAAAAAA2FwcAZhZGp1c3QDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1527155639005,"flow_last_seen":1527155639005,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"app.adjust.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0712{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":303,"pkt":"MAdNo1+nAA6OMNv9CABFAAEhW4BAAEARXNvAqAAPwKgAEQA1idMBDcumy5yBgAABAAQABAAEA2FwcAZhZGp1c3QDY29tAAABAAHADAABAAEAAAHMAASyots6wAwAAQABAAABzAAEsqLbmcAMAAEAAQAAAcwABLKi2LPADAABAAEAAAHMAAS5l8wIwBAAAgABAAKIXQATBG5zMDEGYWRqdXN0BXdvcmtzAMAQAAIAAQACiF0AFARkbnMxA3AwOQVuc29uZQNuZXQAwBAAAgABAAKIXQAHBGRuczLAkMAQAAIAAQACiF0ABwRuczAywHHAiwABAAEAAWUPAATGMywJwKsAAQABAAFlDwAExjMtCcBsAAEAAQAAMG8ABC02EQHAvgABAAEAADBvAAQtNhFB","pkt_caplen":303,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1527155639005,"flow_last_seen":1527155639008,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":40,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"app.adjust.com","num_queries":1,"num_answers":12,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"178.162.219.58"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1527155639234,"flow_last_seen":1527155639234,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp"}
+0412{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAHWRAAEARm9jAqAARwKgAD\/WYADUALODJ\/WMBAAABAAAAAAAABG1hcGkJYXBwdGltaXplA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1527155639234,"flow_last_seen":1527155639234,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"mapi.apptimize.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0811{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":373,"pkt":"MAdNo1+nAA6OMNv9CABFAAFnW5VAAEARXIDAqAAPwKgAEQA19ZgBU\/qk\/WOBgAABAAkABAABBG1hcGkJYXBwdGltaXplA2NvbQAAAQABwAwABQABAAAKmgACwBHAEQABAAEAAAA7AAQ2RabiwBEAAQABAAAAOwAENrtbtsARAAEAAQAAADsABCLf10HAEQABAAEAAAA7AAQjoIExwBEAAQABAAAAOwAEI6WM3sARAAEAAQAAADsABCOitm\/AEQABAAEAAAA7AAQ2RVffwBEAAQABAAAAOwAENrpW+MARAAIAAQAAA2AAGQducy0xODgzCWF3c2Rucy00MwJjbwJ1awDAEQACAAEAAANgABcHbnMtMTEyOQlhd3NkbnMtMTMDb3JnAMARAAIAAQAAA2AAFgZucy02ODUJYXdzZG5zLTIxA25ldADAEQACAAEAAANgABMGbnMtNDczCWF3c2Rucy01OcAbwSgAAQABAAADYAAEzfvB2Q==","pkt_caplen":373,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1527155639234,"flow_last_seen":1527155639237,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":44,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"mapi.apptimize.com","num_queries":1,"num_answers":14,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.69.166.226"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1527155639240,"flow_last_seen":1527155639240,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8C6FAAEAGkTrAqAARNkWm4pB6Abv8W2quAAAAAKAC\/\/9PrwAAAgQFtAQCCAoAIWEPAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAOYG9to2RabiwKgAEQG7kHpPMSQJ\/Ftqr6ASaN+BOQAAAgQFtAQCCApMsKWZACFhDwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6JAAEAGkUHAqAARNkWm4pB6Abv8W2qvTzEkCoAQAq0WDQAAAQEICgAhYTtMsKWZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":246,"pkt":"AA6OMNv9MAdNo1+nCABFAADoC6NAAEAGkIzAqAARNkWm4pB6Abv8W2qvTzEkCoAYAq3FAQAAAQEICgAhYTtMsKWZFgMBAK8BAACrAwOf\/2TjK8r1kWpdan2TJekyDzujbi8jagHQAHL6QuSe+wAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABm\/wEAAQAAAAAXABUAABJtYXBpLmFwcHRpbWl6ZS5jb20AFwAAACMAAAANABAADgQDBAEFAwUBBgMGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1527155639240,"flow_last_seen":1527155639419,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":32,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0395{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0gc9AAOYGdRM2RabiwKgAEQG7kHpPMSQK\/FtrY4AQAG4XbAAAAQEICkywpcUAIWE7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1527155639240,"flow_last_seen":1527155639594,"flow_tot_l4_data_len":1836,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2342{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1112{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":595,"pkt":"MAdNo1+nAA6OMNv9CABFAAJFgdNAAOYGcv42RabiwKgAEQG7kHpPMTUC\/FtrY4AYAG7NjwAAAQEICkywpcYAIWE71u80GH4r6XnTq1dFDK8o+tDb5VCViLvfhVdpfZLYUspzgb8c8+a4bmYRBbMelC1\/kZWSWfFMzqORcUx8Rww7Cxn2obFshj5cqsQugsv5B5a6SE2Q8pTIqXOi6wZ7I53eovNNVZ96YUWYGGjHXkBrI\/V5eu+MtWuLt29G9HvxPUsE2JOAWVrgQSQdso8VYFhH2+9uRv0V9dlfmrPb2LjkQLPNlzmuhbsdjrzch5vRpu\/xO28QOG8WAwMBTQwAAUkDABdBBDb9v5njLta8VxN6b0FC+ppyxY5VkxPwMAd0CQOK6gpwagWrmk0kj7vl7SySoP1foWZjrA\/Rg81VD1cSGgsnKEQGAQEAyjGOlWQnRs7jjOaoOS5YVEimpQR8PYCIlnQGlXJ9PGtqY1cnoDdKvrw7eORhLNX5KdiOQQVZTg8QcJPYDXxB9t3jI4GlLhSY9mY+AZiNteaLVcHFZFJF\/GmvBPVu9FToyvfpQWxI9v0nYldE3Qdt\/uVFKsy1weuCm\/194Tlgru9gJEc2elKrLfLKgbP8+RaqP9DJ6fvTtH5BOn2IqEsbCQJrMjrfz4v2gZsrbGq+3bzvdOOm0e2wHQW5uu5hzmOWRBwbn+KkUm3ti22iT0Xr73UPGm9FZvLPUwrR8czr5g3uGtnq0vSoWmEhyA55gZmdXrAMETmyLTlUEPIF9Y1XBxYDAwAEDgAAAA==","pkt_caplen":595,"pkt_type":2048,"pkt_ipoffset":14}
+1132{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":4,"flow_packet_id":9,"flow_first_seen":1527155639240,"flow_last_seen":1527155639594,"flow_tot_l4_data_len":5357,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":595,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","server_names":"*.apptimize.com,apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA","issuerDN":"C=US, ST=CA, L=Mountain View, O=Apptimize, Inc, OU=PremiumSSL Wildcard, CN=*.apptimize.com","alpn":"http\/1.1","fingerprint":"BC:4C:8F:EC:8B:7B:85:BD:54:61:8B:C0:7B:E7:A2:69:0B:F2:49:E5"}}
+0396{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6RAAEAGkT\/AqAARNkWm4pB6Abv8W2tjTzEpsoAQAsMPKQAAAQEICgAhYYBMsKXG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6VAAEAGkT7AqAARNkWm4pB6Abv8W2tjTzEvWoAQAtoJagAAAQEICgAhYYBMsKXG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6ZAAEAGkT3AqAARNkWm4pB6Abv8W2tjTzE1AoAQAvEDqwAAAQEICgAhYYBMsKXG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0C6dAAEAGkTzAqAARNkWm4pB6Abv8W2tjTzE3E4AQAwcBhAAAAQEICgAhYYBMsKXG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":192,"pkt":"AA6OMNv9MAdNo1+nCABFAACyC6hAAEAGkL3AqAARNkWm4pB6Abv8W2tjTzE3E4AYAwcXYgAAAQEICgAhYYdMsKXGFgMDAEYQAABCQQQif0HwmkRgOTneBKTut0tN9AW4SfLVSUzuW3UL\/NJZtYN\/bVPqB\/NGE5BzM1hQLQMxz70nPpE1GBHYkv6b+J8TFAMDAAEBFgMDACgAAAAAAAAAAMmKkUBzXF+f8vviq5uyTbEuut2rNwkbh9Zx9oMXgXoQ","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0743{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155639,"pkt_len":324,"pkt":"MAdNo1+nAA6OMNv9CABFAAE2gdRAAOYGdAw2RabiwKgAEQG7kHpPMTcT\/Ftr4YAYAG7KuAAAAQEICkywphAAIWGHFgMDAMoEAADGAACowADAn2gqIZctsFDgAFT4WfWm8PIYbZeU7R769Z8VL3YvUFTWOa8LJ0c8IMJNLcPSWP9dGu38MBpgAtm0qVqMlwyGY5hTX2oeGOOHOYcvUqoOcr3ICNrcFLCIEanKE7MyJQ1wgm3DX4a4jDYtzRnGAJZY7ftOdHSfz5WlWP4vEsdw+dBhy5nBtFzqkkVZfZ2OyhkrJA1yw1h66FbYl\/FShg5YCRQ12eiBiNYppwt0BPbNxVdkksUQlcz7moo7w5JApDGiFAMDAAEBFgMDACgD5Lk+bHdoDNdjeRCd6onIzcUsbCayNa6tFCu94gsha1XhJfneFNzu","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1527155640085,"flow_last_seen":1527155640085,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36988,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8sZJAAEAG60jAqAARNkWm4pB8Abt0c9BwAAAAAKAC\/\/9xAAAAAgQFtAQCCAoAIWHiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAOYG9to2RabiwKgAEQG7kHz0FjHkdHPQcaASaN\/u9gAAAgQFtAQCCApMsKZsACFh4gEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0sZNAAEAG60\/AqAARNkWm4pB8Abt0c9Bx9BYx5YAQAq2DyQAAAQEICgAhYg9MsKZs","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":246,"pkt":"AA6OMNv9MAdNo1+nCABFAADosZRAAEAG6prAqAARNkWm4pB8Abt0c9Bx9BYx5YAYAq1TTQAAAQEICgAhYhBMsKZsFgMBAK8BAACrAwPxHao\/Q96Yxv6ptzoREqGRwhus41t797c9sc55oDAI4gAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABm\/wEAAQAAAAAXABUAABJtYXBpLmFwcHRpbWl6ZS5jb20AFwAAACMAAAANABAADgQDBAEFAwUBBgMGAQIBAAUABQEAAAAAABAACwAJCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1527155640085,"flow_last_seen":1527155640275,"flow_tot_l4_data_len":324,"flow_min_l4_data_len":32,"flow_max_l4_data_len":212,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36988,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mapi.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0394{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0l3xAAOYGX2Y2RabiwKgAEQG7kHz0FjHldHPRJYAQAG6FIwAAAQEICkywppwAIWIQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1112{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":595,"pkt":"MAdNo1+nAA6OMNv9CABFAAJFl4BAAOYGXVE2RabiwKgAEQG7kHz0FkLddHPRJYAYAG45CgAAAQEICkywppwAIWIQ1u80GH4r6XnTq1dFDK8o+tDb5VCViLvfhVdpfZLYUspzgb8c8+a4bmYRBbMelC1\/kZWSWfFMzqORcUx8Rww7Cxn2obFshj5cqsQugsv5B5a6SE2Q8pTIqXOi6wZ7I53eovNNVZ96YUWYGGjHXkBrI\/V5eu+MtWuLt29G9HvxPUsE2JOAWVrgQSQdso8VYFhH2+9uRv0V9dlfmrPb2LjkQLPNlzmuhbsdjrzch5vRpu\/xO28QOG8WAwMBTQwAAUkDABdBBB+SwNdefXtaqlKHuns58pidPGdqZwKeByrLD3pwN2L6KBpKq\/94qoQrRAFDlkSQGJAUqcEtDwuc0x9HZYPFhjIGAQEAEurEqnfDRngvdt1ezIr4yjfX40k9Ax4A+7pYBuoZIaRYCoAZ9cK8Nik9PZe4E6C6lG2T8M9rFHqWqqA3EeAyBVxcO3g6C3c4CIaWHgZz0Tcm1rx6ykfUz2uXzsm4jycYxXFiW66JIAfCitMQxrbXmklC0JyM+FzXG1y4WOhD3YplGOOi20PR6KXw3oyC0CG7fClawq\/i4nszP1f1MusVfCK2D\/A1Cw\/461eZHiqLyIORQktiMujusFL+fDXZ+H9l\/lDn8DYPaORmZLw0qlRC6thFyjsWyj6Udr6VV+ldCm9Q4dM5T6v1X76vbcAC5GOHPBH8oD+r4YZvcZnwvS6M6RYDAwAEDgAAAA==","pkt_caplen":595,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAsZVAAEAG60HAqAARNkWm4pB8Abt0c9El9BYx5bAQAsPvmAAAAQEICgAhYj5MsKacAQEFCvQWN430Fj01","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAsZZAAEAG60DAqAARNkWm4pB8Abt0c9El9BYx5bAQAtrp2QAAAQEICgAhYj5MsKacAQEFCvQWN430FkLd","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0sZdAAEAG60vAqAARNkWm4pB8Abt0c9El9BZC3YAQAvFxegAAAQEICgAhYj5MsKac","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0sZhAAEAG60rAqAARNkWm4pB8Abt0c9El9BZE7oAQAwdvUwAAAQEICgAhYj5MsKac","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":192,"pkt":"AA6OMNv9MAdNo1+nCABFAACysZlAAEAG6svAqAARNkWm4pB8Abt0c9El9BZE7oAYAwdkgwAAAQEICgAhYkJMsKacFgMDAEYQAABCQQR1\/lrPOP7QwmMUcyMj3ciYBV4nbgy5urRN+a4ubAY7ShW7R8zP6mu8tVt6rElE2w9k2xEoQ7u2Sz2BhSTxjeIGFAMDAAEBFgMDACgAAAAAAAAAAHJGbbT+xZdnTc0A126zrXMK2QZgtkAyQPt\/y4fIDDSt","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0746{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155640,"pkt_len":324,"pkt":"MAdNo1+nAA6OMNv9CABFAAE2l4FAAOYGXl82RabiwKgAEQG7kHz0FkTudHPRo4AYAG6y6QAAAQEICkywpswAIWJCFgMDAMoEAADGAACowADAn2gqIZctsFDgAFT4WfWm8MPKahZ+5Cdq35rw6SUGf1iZ2jDB22ZQsI+e5Qr1hc9C2EI9IJG\/SDlf22yMU9fiR4es+rk+63SbwgoN+r0qAud8CZkrSOJ\/fN2o5Y+\/mX5maf6rrnJxPIVjsBiAJ3Vr1gCv+Yw3ueKogDbaA+9g8GCwjfNtyABxKM4yqasm+BOm7v7vljzSztzN6rgICNtf5pHmho\/3BwE\/CHqQqr8VrV0ecreQQoXm5Kmqmdj+8+CNFAMDAAEBFgMDACiQWGXBQHkKbXqKtilNyeoDxkLpzPhc3gjpcp237WmZeB9cuMOiP+O8","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1527155641574,"flow_last_seen":1527155641574,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":79,"pkt":"AA6OMNv9MAdNo1+nCABFAABBH3ZAAEARmcXAqAARwKgAD5IqADUALZxVyU0BAAABAAAAAAAABW1lZGlhA2NkbgV2aWJlcgNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1527155641574,"flow_last_seen":1527155641574,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","category":"Chat"},"dns": {"query":"media.cdn.viber.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0556{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":185,"pkt":"MAdNo1+nAA6OMNv9CABFAACrXEZAAEARXIvAqAAPwKgAEQA1kioAlzNhyU2BgAABAAUAAAAABW1lZGlhA2NkbgV2aWJlcgNjb20AAAEAAcAMAAUAAQAACsAAHg1kbzJneTJrd2FrOWsyCmNsb3VkZnJvbnQDbmV0AMAxAAEAAQAAADsABDbmXWDAMQABAAEAAAA7AAQ25l2mwDEAAQABAAAAOwAENuZdIsAxAAEAAQAAADsABDbmXaA=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1527155641574,"flow_last_seen":1527155641691,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":45,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","category":"Chat"},"dns": {"query":"media.cdn.viber.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.230.93.96"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1527155641697,"flow_last_seen":1527155641697,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA825FAAEAGCivAqAARNuZdYOCwAbu7GrjkAAAAAKAC\/\/84\/wAAAgQFtAQCCAoAIWN1AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAPQGMbw25l1gwKgAEQG74LAWDyy+uxq45aAScSCWXAAAAgQFtAQCCAp+anA4ACFjdQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025JAAEAGCjLAqAARNuZdYOCwAbu7GrjlFg8sv4AQAq0zmAAAAQEICgAhY3p+anA4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":250,"pkt":"AA6OMNv9MAdNo1+nCABFAADs25NAAEAGCXnAqAARNuZdYOCwAbu7GrjlFg8sv4AYAq3PXQAAAQEICgAhY3p+anA4FgMBALMBAACvAwM9xUi6e2VHcfR2Et1lmWRy3PNn2wAw6MtgIjCKmCwNtgAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABq\/wEAAQAAAAAYABYAABNtZWRpYS5jZG4udmliZXIuY29tABcAAAAjAAAADQAQAA4EAwQBBQMFAQYDBgECAQAFAAUBAAAAAAAQAA4ADAJoMghodHRwLzEuMQALAAIBAAAKAAgABgAdABcAGA==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1527155641697,"flow_last_seen":1527155641717,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":32,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media.cdn.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0395{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0XIVAAPQG1T425l1gwKgAEQG74LAWDyy\/uxq5nYAQAHY1FQAAAQEICn5qcDoAIWN6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":1514,"pkt":"MAdNo1+nAA6OMNv9CABFAAXcXIZAAPQGz5U25l1gwKgAEQG74LAWDyy\/uxq5nYAQAHZ\/VwAAAQEICn5qcDoAIWN6FgMDAFQCAABQAwPoyuuCaGbnEG9iDpn6258VxnAoTYnO+9\/ziBviurg4hQDALwAAKAAAAAD\/AQABAAALAAQDAAECACMAAAAFAAAAEAALAAkIaHR0cC8xLjEWAwMLAgsACv4ACvsABj8wggY7MIIFI6ADAgECAhBhzDxU6rjF73JHtAvuSXwJMA0GCSqGSIb3DQEBCwUAMEExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwx0aGF3dGUsIEluYy4xGzAZBgNVBAMTEnRoYXd0ZSBTU0wgQ0EgLSBHMjAeFw0xNjA3MDMwMDAwMDBaFw0xODA3MDMyMzU5NTlaMHkxCzAJBgNVBAYTAkxVMRMwEQYDVQQIDApMdXhlbWJvdXJnMRMwEQYDVQQHDApMdXhlbWJvdXJnMRkwFwYDVQQKDBBWaWJlciBNZWRpYSBTYXJsMQswCQYDVQQLDAJJVDEYMBYGA1UEAwwPKi5jZG4udmliZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8n+EisnmdyKBpkVsvzsuk\/ujYXgyIE8xGBKCjA5x7cHaC1oIJtHyf+8X\/v119n6FNK4ChBrewFLJq+ebjhk2nuYslAfSLg42OpZz\/g07QolDzaSoO6LFeMdCDOxsqogq6F2gGWu1v93wXMZ3SxX0w18h2ffrV9iogCDu\/mnq8X\/idwGWekNtI2\/kjVqiWLJtkY\/tdLE9BJjPIoiwKQc4Yt+KQkFdDlibpwcHG8eeybzMInWXu7FC1vF3Qqbr8s\/\/3HEi8mcold\/nqp4tpy6eja5yIZxJyRta4uP5CWP1mxVh1nXdmY8bXdVUchnq4u5yoCX0k4ET9h8entvHWZ+XwIDAQABo4IC9TCCAvEwGgYDVR0RBBMwEYIPKi5jZG4udmliZXIuY29tMAkGA1UdEwQCMAAwbgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB\/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX\/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFVsIW2uwAABAMARzBFAiEAlTt3Tfiw+ZZkJLDr25tqCm1oUh0cB9HjeEURiPCEppcCICtUSsKus6VjSQLSl7aDoWDctozD4ksxtvlWI8eePdKUAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFVsIW22wAABAMASDBGAiEAkwIgHnjei9Vt6R6DySH3EGyATRDY6APv7x+fMnLLC70CIQDRAgEBufCSaKFWQnR4phBwxt9rp0P7DMPVkK1VYgphwgB3AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT\/vEAAABVbCFttoAAAQDAEgwRgIhAIHqLNKBhDtGl526NtEeDShBJzlZdt1CuekDsZFrZQ2oAiEAiNWljtQFJroPTOKnW86s\/s54V\/TJEZ\/n1XzoqcAzlFAwDQYJKoZIhvcNAQELBQADggEBAJU=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1527155641697,"flow_last_seen":1527155641736,"flow_tot_l4_data_len":1840,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media.cdn.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2350{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1039{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":7,"flow_packet_id":8,"flow_first_seen":1527155641697,"flow_last_seen":1527155641736,"flow_tot_l4_data_len":4800,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":600,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media.cdn.viber.com","server_names":"*.cdn.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=thawte, Inc., CN=thawte SSL CA - G2","issuerDN":"C=LU, ST=Luxembourg, L=Luxembourg, O=Viber Media Sarl, OU=IT, CN=*.cdn.viber.com","alpn":"h2,http\/1.1","fingerprint":"B6:30:6F:02:75:A8:08:0A:AE:AA:9C:6C:9F:B5:8E:4C:82:02:3D:39"}}
+0860{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":408,"pkt":"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","pkt_caplen":408,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025RAAEAGCjDAqAARNuZdYOCwAbu7GrmdFg8yZ4AQAsMtGwAAAQEICgAhY39+anA6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025VAAEAGCi\/AqAARNuZdYOCwAbu7GrmdFg84D4AQAtonXAAAAQEICgAhY39+anA6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025ZAAEAGCi7AqAARNuZdYOCwAbu7GrmdFg89t4AQAvEhnQAAAQEICgAhY39+anA6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA025dAAEAGCi3AqAARNuZdYOCwAbu7GrmdFg8\/DYAQAwcgMAAAAQEICgAhY4B+anA6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":192,"pkt":"AA6OMNv9MAdNo1+nCABFAACy25hAAEAGCa7AqAARNuZdYOCwAbu7GrmdFg8\/DYAYAwfMqQAAAQEICgAhY4R+anA6FgMDAEYQAABCQQR8hYex6T6IcfjrQGz2dWBRSQxJBICDIAwL4VUpMgxTmSC9MkB7XZu6WQAGc\/NuWQdIiLiI7lhVN4jtP\/V2hUkiFAMDAAEBFgMDACgAAAAAAAAAAPinAWXbwMl+PxlMD4nzrBWBuwFUoxaHLVoZlLYU1RLV","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":308,"pkt":"MAdNo1+nAA6OMNv9CABFAAEmXIpAAPQG1Ec25l1gwKgAEQG74LAWDz8Nuxq6G4AYAHZ6wAAAAQEICn5qcD4AIWOEFgMDALoEAAC2AAAqMACwdl6URFAA6YMRSWiAuGyrMvhx5yRQJDL2xvOldivO2HDCATKXaYBmvXO5Dr1T4CoyfOMHoEzRVzCiIp3wFmrpe3Nvz3wmjg6V92idYHBD\/Ir+mX8KY78ab9v06pKtsYqXpy4JSStOTTDB5sv9zFHKr9ko39Zd\/xxZlTUtGeSrWTqMzSWYSn4WJ85veaGeOFci3F\/u+XPj830Dga\/E8q0wfgVk0haiDxQaPUcrvoDSWrMUAwMAAQEWAwMAKPAGp6nvnGSjNCIJ9wRqtsyn22rlG09D61TtZki59jc8\/Qas\/wW6MEo=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1527155641813,"flow_last_seen":1527155641813,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp"}
+0410{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAH5VAAEARmafAqAARwKgAD539ADUALISKl70BAAABAAAAAAAACGRsLW1lZGlhBXZpYmVyA2NvbQAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1527155641813,"flow_last_seen":1527155641813,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","category":"Chat"},"dns": {"query":"dl-media.viber.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0556{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":185,"pkt":"MAdNo1+nAA6OMNv9CABFAACrXElAAEARXIjAqAAPwKgAEQA1nf0Al5UFl72BgAABAAUAAAAACGRsLW1lZGlhBXZpYmVyA2NvbQAAAQABwAwABQABAAAGHQAfDmQxZmplOWdtM2QwNXQ4CmNsb3VkZnJvbnQDbmV0AMAwAAEAAQAAADsABDbmXTXAMAABAAEAAAA7AAQ25l1swDAAAQABAAAAOwAENuZdn8AwAAEAAQAAADsABDbmXWM=","pkt_caplen":185,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1527155641813,"flow_last_seen":1527155641840,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":44,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Viber","category":"Chat"},"dns": {"query":"dl-media.viber.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"54.230.93.53"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1527155641845,"flow_last_seen":1527155641845,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8nXxAAEAGSGvAqAARNuZdNdKuAbvV1v7mAAAAAKAC\/\/\/mSAAAAgQFtAQCCAoAIWOaAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAPQGMec25l01wKgAEQG70q53C5Ep1db+56AScSB9zAAAAgQFtAQCCAp+anCqACFjmgEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nX1AAEAGSHLAqAARNuZdNdKuAbvV1v7ndwuRKoAQAq0bCAAAAQEICgAhY59+anCq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":249,"pkt":"AA6OMNv9MAdNo1+nCABFAADrnX5AAEAGR7rAqAARNuZdNdKuAbvV1v7ndwuRKoAYAq2cvgAAAQEICgAhY6B+anCqFgMBALIBAACuAwM1qr437x53guPHYx6idTGnRu91RvVMpGhSbboCtiTLxAAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABp\/wEAAQAAAAAXABUAABJkbC1tZWRpYS52aWJlci5jb20AFwAAACMAAAANABAADgQDBAEFAwUBBgMGAQIBAAUABQEAAAAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1527155641845,"flow_last_seen":1527155641868,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":32,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dl-media.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0395{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA04YZAAPQGUGg25l01wKgAEQG70q53C5Eq1db\/noAQAHYchQAAAQEICn5qcKwAIWOg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2346{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0778{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":9,"flow_packet_id":6,"flow_first_seen":1527155641845,"flow_last_seen":1527155641890,"flow_tot_l4_data_len":1839,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dl-media.viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2351{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1040{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":9,"flow_packet_id":8,"flow_first_seen":1527155641845,"flow_last_seen":1527155641890,"flow_tot_l4_data_len":4799,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":599,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Viber","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dl-media.viber.com","server_names":"*.viber.com,viber.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"76cc3e2d3028143b23ec18e27dbd7ca9","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=thawte, Inc., CN=thawte SSL CA - G2","issuerDN":"C=LU, ST=Luxembourg, L=Luxembourg, O=Viber Media Sarl, OU=IT, CN=*.viber.com","alpn":"h2,http\/1.1","fingerprint":"E1:11:26:E6:14:A5:E6:F7:F1:CB:68:D1:A6:95:A1:5E:11:48:72:2A"}}
+0861{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":411,"pkt":"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","pkt_caplen":411,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nX9AAEAGSHDAqAARNuZdNdKuAbvV1v+edwuW0oAQAsMUiAAAAQEICgAhY6d+anCt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nYBAAEAGSG\/AqAARNuZdNdKuAbvV1v+edwuceoAQAtoOyQAAAQEICgAhY6d+anCt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nYFAAEAGSG7AqAARNuZdNdKuAbvV1v+edwuiIoAQAvEJBwAAAQEICgAhY6p+anCt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0nYJAAEAGSG3AqAARNuZdNdKuAbvV1v+edwuje4AQAwcHmAAAAQEICgAhY6p+anCt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":192,"pkt":"AA6OMNv9MAdNo1+nCABFAACynYNAAEAGR+7AqAARNuZdNdKuAbvV1v+edwuje4AYAweSMQAAAQEICgAhY61+anCtFgMDAEYQAABCQQSMx\/xgnJ0MZTU6UD6zv5MkFyJpocQc5AKoUSYK9zABMxwrUyi\/0dAkAqmJnPW6alP\/ucXiRnaUzkicp4VxP6m4FAMDAAEBFgMDACgAAAAAAAAAABRVXqqmLxV40IubwlDoWtFMgIUcnsOsHdSZcoe4VaEF","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155641,"pkt_len":308,"pkt":"MAdNo1+nAA6OMNv9CABFAAEm4YtAAPQGT3E25l01wKgAEQG70q53C6N71dcAHIAYAHYMtAAAAQEICn5qcLEAIWOtFgMDALoEAAC2AAAqMACwdl6URFAA6YMRSWiAuGyrMmmL\/\/UWFxFwpKywqh8LTHb7USmx1KY9KmzAhCi1q6hmD+OGu3LMjHxvB3cvc5SklGKlumRvGOcwLqFtagakksM5P+Fip2sQsOCYZKab19+Yvjc5rHsVPiyh5RFDgckZWhcThGhxUSpsacAQqTmRWtfGctL\/UCycuv3p03qdYdZSTcJhvQIY2\/iRwfij+r2XZCSBoldbr\/8Q0s3nsglS3PwUAwMAAQEWAwMAKMgA\/zJ+MUGgvIWNCUUgyDJly9qc4jmQiOpPnjfyRxfOQBpTgUTvYOc=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1527155644240,"flow_last_seen":1527155644240,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.106","src_port":41993,"dst_port":443,"l4_proto":"udp"}
+0396{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155644,"pkt_len":65,"pkt":"AA6OMNv9MAdNo1+nCABFAAAzV0lAAEARXnTAqAARrNkXaqQJAbsAHwH3DO5PoOHayJNED10MJ0pTvsIOJQ7muOI=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155644,"pkt_len":65,"pkt":"AA6OMNv9MAdNo1+nCABFAAAzV0pAAEARXnPAqAARrNkXaqQJAbsAH4RqDO5PoOHayJNEEDIopLF1oa8UykhAnf8=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155644,"pkt_len":64,"pkt":"MAdNo1+nAA6OMNv9CABFAAAyAABAADoRu76s2RdqwKgAEQG7pAkAHohoAA5y\/VBeClgsOyCTlKKUc09Z1nXjEg==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1527155646819,"flow_last_seen":1527155646819,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp"}
+0417{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":79,"pkt":"AA6OMNv9MAdNo1+nCABFAABBI8dAAEARlXTAqAARwKgAD4oDADUALaw8\/YcBAAABAAAAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1527155646819,"flow_last_seen":1527155646819,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0437{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":95,"pkt":"MAdNo1+nAA6OMNv9CABFAABRXJhAAEARXJPAqAAPwKgAEQA1igMAPcYV\/YeBgAABAAEAAAAAD2FwcC1tZWFzdXJlbWVudANjb20AAAEAAcAMAAEAAQAAASsABKzZF04=","pkt_caplen":95,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1527155646819,"flow_last_seen":1527155646840,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"app-measurement.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.23.78"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1527155646850,"flow_last_seen":1527155646850,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8QKlAAEAGdTLAqAARrNkXTqq2Abu2kyjUAAAAAKAC\/\/\/OpwAAAgQFtAQCCAoAIWh9AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8SUEAADoGspqs2RdOwKgAEQG7qrbgrF\/UtpMo1aASpagYYgAAAgQFZAQCCAqjjizLACFofQEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0QKpAAEAGdTnAqAARrNkXTqq2Abu2kyjV4Kxf1YAQAq3p2QAAAQEICgAhaH6jjizL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1527155646850,"flow_last_seen":1527155646860,"flow_tot_l4_data_len":661,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":165,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"3967ff2d2c9c4d144e7e30f24f4e9761","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0397{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0SUsAADoGspis2RdOwKgAEQG7qrbgrF\/VtpMq2oAQAKrpygAAAQEICqOOLNYAIWiA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0617{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":228,"pkt":"MAdNo1+nAA6OMNv9CABFAADWSUwAADoGsfWs2RdOwKgAEQG7qrbgrF\/VtpMq2oAYAKpAyAAAAQEICqOOLNYAIWiAFgMDAGoCAABmAwNbBou+xK8IA8Bigvg9R7OVkhyuEsJxtVGVuZ+HIv6bZCAtuuVLu0IaXHkCuJfDbS+MIlAXHQF7wFtqpJjA8h8AE8AvAAAe\/wEAAQAAFwAAABAACwAJCGh0dHAvMS4xAAsAAgEAFAMDAAEBFgMDACgAAAAAAAAAAAka+C7\/X1Be6gfmmulH95vZtL0tyB43DjLcKezq7VI1","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1527155646850,"flow_last_seen":1527155646862,"flow_tot_l4_data_len":887,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":147,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"app-measurement.com","ja3":"3967ff2d2c9c4d144e7e30f24f4e9761","ja3s":"67619a80665d7ab92d1041b1d11f9164","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+0396{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0QKxAAEAGdTfAqAARrNkXTqq2Abu2kyra4Kxgd4AQArXnHAAAAQEICgAhaIGjjizW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":117,"pkt":"AA6OMNv9MAdNo1+nCABFAABnQK1AAEAGdQPAqAARrNkXTqq2Abu2kyra4Kxgd4AYArXc8AAAAQEICgAhaIGjjizWFAMDAAEBFgMDACgAAAAAAAAAAIOnf1NdjktXIFsIc8dJxf0KKwsAuNCCVUpEltwtBSlD","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0SWEAADoGsoKs2RdOwKgAEQG7qrbgrGB3tpMrDYAQAKro7gAAAQEICqOOLNwAIWiB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1503{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":882,"pkt":"AA6OMNv9MAdNo1+nCABFAANkQK5AAEAGcgXAqAARrNkXTqq2Abu2kysN4Kxgd4AYArXrHQAAAQEICgAhaI2jjizcFwMDAysAAAAAAAAAAZ1vAQ\/roP\/wIuwXOXPyEztEyVeYgRHxpDp872tQbcToaeg0tiAsk6O5dXvpjQiesottAoi\/QfJJaH4vvLj4xBS6fb81phopoeZFlp6nKiXosvcdFEsNhsWHzroiDWSGFAGInHBBttHFnPjZx4bGlLfYDi93k9y1OB5zZSlJ9hzS5oQtV+I1JFa3y7wmByuV6gnPxSsi3pdxQykiNN5Q1m83qlSuP3buHJ9YG2LtsvnibVgZCDw7tVhIGDHbfXZwJ+c9DblUnmr7GoL2CvInYpqUDx+w4PV2ER\/TlJub7w4qyEQUQprFJJw6vRTW\/ekeQ2Ut4c9vqg8vPjSFz8ObHgw+7amwQy+011slQnvkfjjLRkdx+4MU1YuLxn36qCbCB0KNjWzGzj13CuqkKcDIzsszEa\/o467mOvwg08h7yZZA31IV5TP9IYJGzQ7UXxXAGiFwMgP9HSm0wMdQa9cBt87ou7ZtOficG9hA3YL7OJlA7xcLOBsAYgMklrTDqyetK1JZxSBvPAj+0cXEg7zki17JJiNGHULKw+gf1E0BFFMW5w3aTENqEiMukM3b1w9m\/yjIgtcc9MEE8IvlRJciIUcsIChFr5La2NzZK1v56lBskE40NvRCOpj5a2iJSa3C3DZsJ11oxAvR\/6idz0WrrzYV67hGj8BgPbkLkja7TckG9LsJQM6+87D87mZ6YJvQaqoBoAGvoDfGHIbLOrly3YVJxZ7nOFe\/yK2ISSOgshSqL++NfKutztIivV7BjP9smUg7k41J3YG+hUbAt8I40jTxuUVOYa3UHX9JRKpApom4PGeSxPRBJpPLLen6gUPp8dFee9\/eeJ\/9wp416WxSLrgNOwNUBSi8xUMFUavxOVq\/JNy1+2kGbGGZWI5yhW4+rmpnMWE8zPTfJ\/hCQBM9sVEQGxJH6jp6h8T0WzOoMal1BkK+sMUvRT9uqXwVm5WPX2PUi6OL4QeAQsTwG1Pyrf9imCyZBaia1vovZZ3IrwgC4VFlxzpG\/pKpAtjf2DT\/q+M8YbvjZEuZEVLWuH\/wFYwCiCNG3apw7wL4HQHVsk8mV0zA","pkt_caplen":882,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0SWgAADoGsnus2RdOwKgAEQG7qrbgrGB3tpMuPYAQALHlewAAAQEICqOOLQwAIWiN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0957{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":480,"pkt":"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","pkt_caplen":480,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1527155646968,"flow_last_seen":1527155646968,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0450{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":103,"pkt":"AQBeAAD7MAdNo1+nCABFAABZHwxAAP8RutLAqAAR4AAA+xTpFOkARSvHAAQAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1527155646968,"flow_last_seen":1527155646968,"flow_tot_l4_data_len":69,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_805741c9._sub._googlecast._tcp.local"}}
+0450{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":103,"pkt":"AQBeAAD7MAdNo1+nCABFAABZHwxAAP8RutLAqAAR4AAA+xTpFOkARSvHAAQAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0QK9AAEAGdTTAqAARrNkXTqq2Abu2ky494KxiFYAQAr7hsAAAAQEICgAhaJ2jji0c","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0920{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155646,"pkt_len":452,"pkt":"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","pkt_caplen":452,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155647,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0ScYAADoGsh2s2RdOwKgAEQG7qrbgrGIVtpMvv4AQALfh\/QAAAQEICqOOLVIAIWif","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1527155647500,"flow_last_seen":1527155647500,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3207:4dff:fea3:5fa7","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0410{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155647,"pkt_len":70,"pkt":"MzMAAAACMAdNo1+nht1gAAAAABA6\/\/6AAAAAAAAAMgdN\/\/6jX6f\/AgAAAAAAAAAAAAAAAAAChQDAigAAAAABATAHTaNfpw==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0492{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1527155647500,"flow_last_seen":1527155647500,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3207:4dff:fea3:5fa7","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0410{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155647,"pkt_len":70,"pkt":"MzMAAAACMAdNo1+nht1gAAAAABA6\/\/6AAAAAAAAAMgdN\/\/6jX6f\/AgAAAAAAAAAAAAAAAAAChQDAigAAAAABATAHTaNfpw==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1527155648481,"flow_last_seen":1527155648481,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":82,"pkt":"AA6OMNv9MAdNo1+nCABFAABEJLZAAEARlILAqAARwKgAD61YADUAMDkH00kBAAABAAAAAAAAB3ZlbmV0aWEDaWFkBmFwcGJveQNjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1527155648481,"flow_last_seen":1527155648481,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"venetia.iad.appboy.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0554{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":183,"pkt":"MAdNo1+nAA6OMNv9CABFAACpXKlAAEARXCrAqAAPwKgAEQA1rVgAlY7c00mBgAABAAUAAAAAB3ZlbmV0aWEDaWFkBmFwcGJveQNjb20AAAEAAcAMAAUAAQAAAQIAGQF5A3NzbAZnbG9iYWwGZmFzdGx5A25ldADANAABAAEAAAAdAASXZQGCwDQAAQABAAAAHQAEl2VBgsA0AAEAAQAAAB0ABJdlgYLANAABAAEAAAAdAASXZcGC","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1527155648481,"flow_last_seen":1527155648506,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":48,"flow_max_l4_data_len":149,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"venetia.iad.appboy.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"151.101.1.130"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1527155648513,"flow_last_seen":1527155648513,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"151.101.1.130","src_port":55746,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8cjBAAEAGbuvAqAARl2UBgtnCAbvgBRgtAAAAAKAC\/\/+wcAAAAgQFtAQCCAoAIWodAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAADoG5xuXZQGCwKgAEQG72cJzm\/EW4AUYLqAScSBKVAAAAgQFtAQCCArIDMgpACFqHQEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0cjFAAEAGbvLAqAARl2UBgtnCAbvgBRguc5vxF4AQAq3nkgAAAQEICgAhaiDIDMgp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":250,"pkt":"AA6OMNv9MAdNo1+nCABFAADscjJAAEAGbjnAqAARl2UBgtnCAbvgBRguc5vxF4AYAq0GIgAAAQEICgAhaiLIDMgpFgMBALMBAACvAwNMJ7CvztfSmUaRPcK3z4cAvGSi2\/cpgw4T9New8B2\/AwAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABq\/wEAAQAAAAAbABkAABZ2ZW5ldGlhLmlhZC5hcHBib3kuY29tABcAAAAjAAAADQAQAA4EAwQBBQMFAQYDBgECAQAFAAUBAAAAAAAQAAsACQhodHRwLzEuMQALAAIBAAAKAAgABgAdABcAGA==","pkt_caplen":250,"pkt_type":2048,"pkt_ipoffset":14}
+0718{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1527155648513,"flow_last_seen":1527155648533,"flow_tot_l4_data_len":328,"flow_min_l4_data_len":32,"flow_max_l4_data_len":216,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"151.101.1.130","src_port":55746,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"venetia.iad.appboy.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0397{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0OTlAADoGreqXZQGCwKgAEQG72cJzm\/EX4AUY5oAQADvpRQAAAQEICsgMyC4AIWoi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":1514,"pkt":"MAdNo1+nAA6OMNv9CABFAAXcOTtAADoGqECXZQGCwKgAEQG72cJzm\/a\/4AUY5oAQADvJnwAAAQEICsgMyC4AIWoiNYAgKtnxi+t0zXvgqCNxYDJHlan1lapV20Z\/ny62IjeQgHIScYpqH+tVAAKb3EMP5nUUR1kQVrYkpKhqr2TFadRS9mHnnhZmaWW+\/AofJwQcNaK7ji309PCPZs5ODBDwwHUVKqTV\/dYYiu+qX2et2RkP5mWClu5PRe2YjEph5kcLHGPjrZtGJ2ZPub6ZAwZ3\/VBc3XXoydIa2cEe8omRMVYfrlKzGLPnue4sx2wX4UvPbHuHzDhK1tkYNtEfU6ZRK9cO77nMHM9ywKgvFhh4AASPMIIEizCCA3OgAwIBAgIORvCM288sVGbvMwHdXzQwDQYJKoZIhvcNAQELBQAwVzELMAkGA1UEBhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExEDAOBgNVBAsTB1Jvb3QgQ0ExGzAZBgNVBAMTEkdsb2JhbFNpZ24gUm9vdCBDQTAeFw0xNTA4MTkwMDAwMDBaFw0yNTA4MTkwMDAwMDBaMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRHbG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwHXhMpjl2a6EfI3oI19GlVtMoiVw15AEhYDJtfSKZU2Sy6XEQqC2eSUx7fGFIM0TUT1nrJdNaJszhlyzey2q33egYdH1PPua\/NPVlMrJHoAbkJDIrI32YBecMbjFYaLiblclCG8kmZnPlL\/Hi2uwH8oU+hibbBB8mSvaSmPlsk7C\/T4QC0j0dwsv8JZLOu69Nd6FjdoTDs4BxHHT03fFCKZgOSWnJ2lcg9FvdnjuxURbRb0pO+LGCQ+ivivc41zaWm+O58kHa36hwFOVgongeFxyqGy+Z2ur5zPZh\/L4XCf09io7h+\/awkfav6zrJ2R7TFPrNOEvmyBNVBJrfSi9AgMBAAGjggFTMIIBTzAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB\/wQIMAYBAf8CAQAwHQYDVR0OBBYEFKkrh+HOJEc7G7\/PhTcCVZ0NlFjmMB8GA1UdIwQYMBaAFGB7ZhpFDZfKiVAvfQTNNKj\/\/P1LMD0GCCsGAQUFBwEBBDEwLzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vcm9vdHIxMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC5jcmwwVgYDVR0gBE8wTTALBgkrBgEEAaAyARQwPgYGZ4EMAQICMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQCiHWmKCo7EFIMqKhJNOSeQTvCNrNKWYkc2XpLR+sWTtTcHZSnS9FNQa8n0\/jT13bgd+vzcFKxWlCecQqoETbftWNmZ0knmIC\/Tp3e4Koka76fPhi3WU+kLk5xOq9lF7qSEhf805A7Au6XOX5WJhXCqwV3szyvT2YPfA8qBpwIyt3dhECVO2XTz2XmCtSZwtFK8jzPXiq4Z0PySrS+6PKBIWEde\/SBWlSDBch2rZpmk1Xg3SBufskw3Z3r9QtLTVp7THY7EDGiWtkdREPd76xUJZPX58GMWLT3fI0I6k2PMq69PVwbH\/hRVYs4nERnh9ELtIjBrNRpKBYCkZd\/My2\/QFgMDBgsWAAYHAQAGAzCCBf8KAQCgggX4MIIF9AYJKwYBBQUHMAEBBIIF5TCCBeEwgZqiFgQUJzerGfqxBfrD93SB0OZc5bk=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2355{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":1514,"pkt":"MAdNo1+nAA6OMNv9CABFAAXcOTpAADoGqEGXZQGCwKgAEQG72cJzm\/EX4AUY5oAQADtPJgAAAQEICsgMyC4AIWoiFgMDAFgCAABUAwNx1mqvibVdsaPVXHpQMCYBkJ0VPvooyVGAnRK0MyRQngDALwAALP8BAAEAAAAAAAALAAQDAAECACMAAAAFAAAAFwAAABAACwAJCGh0dHAvMS4xFgMDCqcLAAqjAAqgAAYLMIIGBzCCBO+gAwIBAgIMJj0Cl9avVnaic4JyMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRHbG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTcxMDAzMjIwNzAzWhcNMTgwOTI4MTQzODI3WjBsMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEVMBMGA1UECgwMRmFzdGx5LCBJbmMuMRkwFwYDVQQDDBB5LnNzbC5mYXN0bHkubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VBiDVdx5J3VggMx41Pn\/SHPr8uG8eH9s2qP7j6yfibmLp\/bC6\/YA4wGdhGd157KQFQVrtBSZqNvff7SwTs8FSwCyqnq4DB2brNSvjB2fVI1fZ4aIBPu3BXHhnlnKxwPEqTmdE1XLGebyq0yagoPLLmqCl0J5N6wo8+5JC+Vby77k8Yztx8Etm1WgJ0V01EkLC5ORFBYurli5lnCir1fxxAodDZmhI\/USPMAgtKu4x4rKclCS31KNLL8MBK3QQ0KdVSbthTkinzNCzPVcm\/xlcp1eznMggbgFwwerI3FlkyrRWbEQIr\/FhIAgrglwIxP\/TfTFJi1Orjfb3N4pBuCmwIDAQABo4ICvDCCArgwDgYDVR0PAQH\/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2Nsb3Vkc3Nsc2hhMmczLmNydDA2BggrBgEFBQcwAYYqaHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2Nsb3Vkc3Nsc2hhMmczMFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMIIBVQYDVR0RBIIBTDCCAUiCEHkuc3NsLmZhc3RseS5uZXSCDyouYXBpLmFwcGJveS5ldYIMKi5hcHBib3kuY29tggsqLmFwcGJveS5ldYINKi5iYWl0b3J1LmNvbYINKi5iZXN0ZWdnLmNvbYIWKi5jZWRleGlzLmZhc3RseWxiLm5ldIIVKi5jbGluaWNhbG9wdGlvbnMuY29tgg4qLmhvbWVhd2F5LmNvbYITKi5pYWQtMDMuYXBwYm95LmNvbYIQKi5pYWQuYXBwYm95LmNvbYIQKi5pbnByYWN0aWNlLmNvbYIWKi5pbnByYWN0aWNlYWZyaWNhLmNvbYIYKi5tYXJpbmVyZmluYW5jZWxvYW4uY29tgg8qLm15YmVzdGVnZy5jb22CEWFwcGJveS1pbWFnZXMuY29tghxsZWdhY3lzc2wuYXBwLmNvc2NoZWR1bGUuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUA58I+9SRKDe03g9PqRV10UnXzzUwHwYDVR0jBBgwFoAUqSuH4c4kRzsbv8+FNwJVnQ2UWOYwDQYJKoZIhvcNAQELBQADggEBADzYtIEQ0kXhWZ8tQZksPZnNTMBThIU6\/8QndDKpLTACn37tzVs1SyWucuS8GaSxfPo=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0867{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":413,"pkt":"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","pkt_caplen":413,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAcjNAAEAGbuTAqAARl2UBgtnCAbvgBRjmc5vxF7AQAsPWQwAAAQEICgAhaibIDMguAQEFCnOb9r9zm\/xn","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":78,"pkt":"AA6OMNv9MAdNo1+nCABFAABAcjRAAEAGbuPAqAARl2UBgtnCAbvgBRjmc5vxF7AQAtrQhAAAAQEICgAhaibIDMguAQEFCnOb9r9znAIP","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0cjVAAEAGbu7AqAARl2UBgtnCAbvgBRjmc5wCD4AQAvHVkwAAAQEICgAhaibIDMgu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0cjZAAEAGbu3AqAARl2UBgtnCAbvgBRjmc5wDaoAQAwfUIgAAAQEICgAhaibIDMgu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":159,"pkt":"AA6OMNv9MAdNo1+nCABFAACRcjdAAEAGbo\/AqAARl2UBgtnCAbvgBRjmc5wDaoAYAwdG4AAAAQEICgAhai3IDMguFgMDACUQAAAhICSoXMs1fpP5vE\/PMwtc4FI4dMsChWitjQ\/I3S6eAMpqFAMDAAEBFgMDACgAAAAAAAAAAJs4AmAL4Xjlt+jKMlb49bgPgbwYeYmmkJ\/pW\/aV+T\/N","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155648,"pkt_len":324,"pkt":"MAdNo1+nAA6OMNv9CABFAAE2OT5AADoGrOOXZQGCwKgAEQG72cJznANq4AUZQ4AYADtLwwAAAQEICsgMyDoAIWotFgMDAMoEAADGAAAcIADA7biJ7e9MuWTIoOdQ3MWBtjFxrfslE+x9SfYLCkV1\/BgZcvm6CoAvj58YZKnZ\/hUkPlokK62OBneHbW8fdiQhr7YeKJeFFJREsGxMZRjUUH02PasMJenuyiHOVUCR\/aevWvW3dno8PnB40JTYE6YMworyOJk\/36uaVgCQU7enzIeRl26i9noqtlQs0dZeoimmYWk3wR6tSFMv2nsvRz03PU347vhgk8zkGHt9YrxmZ71I84ObtEZftuhBxPEnBkYmFAMDAAEBFgMDACjCpKGyldSr5knAm6gGU6ZK69Imm7lpPQp+AONukA0091RijFnMqSiS","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155649,"pkt_len":163,"pkt":"AA6OMNv9MAdNo1+nCABFAACVvbZAAEAGio3AqAARNAD9ZYG4EJTYH5ZXTQ0VOIAYAtrSdgAAAQEICgAhatH3lGEBYQANAAAAu6NTMlK3+oqYwB1cZ4uMnCEN5aQj\/U6rQl02LSYFaGjPZRutHfqpwEDx7eBwtSfERPjbdjFUIXZNaYZypRJcWPj9dk2RTKFvQh8VANsFfh0dFs\/Sk0RVb3ghMQ==","pkt_caplen":163,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155649,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0M+xAACYGLrk0AP1lwKgAERCUgbhNDRU42B+WuIAQAJUzSAAAAQEICveUis8AIWrR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155653,"pkt_len":160,"pkt":"AA6OMNv9MAdNo1+nCABFAACSvbdAAEAGio\/AqAARNAD9ZYG4EJTYH5a4TQ0VOIAYAtpTAwAAAQEICgAhbun3lIrPXgAOAAAAoG3g6ev5c\/NDWijH0p1sZqiVc2X8Tb2Xmy2xoRMT\/Do3Dj3Gty9fjG99OxhKRqKX5Z3no6Rh5HvCVrDWPhO+ifNv8x0XeQgjvBXjbkQ6Om\/XSVMiPnc47w==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155653,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0M+1AACYGLrg0AP1lwKgAERCUgbhNDRU42B+XFoAQAJUemgAAAQEICveUmwcAIW7p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155657,"pkt_len":160,"pkt":"AA6OMNv9MAdNo1+nCABFAACSvbhAAEAGio7AqAARNAD9ZYG4EJTYH5cWTQ0VOIAYAtqtvwAAAQEICgAhczv3lJsHXgAPAAAALeU9A2Q1LwgOdyngjohXz80gI\/bHFZK0\/umu4RSLYZIcIs2S5qP0N\/PuFBzLdpP65obrj0YxSQvn609TiS7Mq7ffuzQQGy1y7XP4cD1w3yHvoWFYO3kXNw==","pkt_caplen":160,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155666,"pkt_len":103,"pkt":"AQBeAAD7MAdNo1+nCABFAABZIsxAAP8RtxLAqAAR4AAA+xTpFOkARSvGAAUAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155666,"pkt_len":103,"pkt":"AQBeAAD7MAdNo1+nCABFAABZIsxAAP8RtxLAqAAR4AAA+xTpFOkARSvGAAUAAAACAAAAAAAACV84MDU3NDFDOQRfc3ViC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAcAbAAwAAQ==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1527155670632,"flow_last_seen":1527155670632,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":45424,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8WoBAAEAGCJrAqAAREskEILFwAbuQXSU3AAAAAKAC\/\/+HxQAAAgQFtAQCCAoAIX+3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":1527155670640,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7985,"l4_proto":"udp"}
+0713{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfMxAAEAR5NnAqAAREskEILhDHzEBCRHz7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABABAK45kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB6f1EwNZ4BrIBNZIXKB4sgy96MQL790EZYw7fY9vCydMCFozrGypXQPtcVrV5xCrsYqA8zuDlnCD1lV04sfnGYMAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":1527155670640,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7985,"l4_proto":"udp","ndpi": {"proto":"Viber","category":"VoIP"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":1527155670640,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7987,"l4_proto":"udp"}
+0412{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":76,"pkt":"AA6OMNv9MAdNo1+nCABFiAA+fM1AAEAR5bfAqAAREskEILhDHzMAKi7T7fYZAKwZNYyPZORHJd9NTuHNNxtcmrwm2dMLSwG7ObMAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1527155670640,"flow_last_seen":1527155670640,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7987,"l4_proto":"udp","ndpi": {"proto":"Viber","category":"VoIP"}}
+0392{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":62,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwfM5AAEAR5cTAqAAREskEILhDHzEAHFuJ7fYJALM5kpFjAQAArBk1jI9k5Ec=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAACsGeBoSyQQgwKgAEQG7sXDMrFlhkF0lOKASaN8nuwAAAgQFtAQCCAoAWtCxACF\/twEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":62,"pkt":"MAdNo1+nAA6OMNv9CABFAAAwfVFAACsR+skSyQQgwKgAER8zuEMAHAAy7fYaAKwZNYyPZORHMkN8XkO4AMg=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABofVBAACsR+pISyQQgwKgAER8xuEMAVGj37fYMAAEArBk1jI9k5EcyQ3xeQ7iuOZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155670,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0WoFAAEAGCKHAqAAREskEILFwAbuQXSU4zKxZYoAQAq28sQAAAQEICgAhf78AWtCx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1527155671066,"flow_last_seen":1527155671066,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8FY9AAEAG0gLAqAARNrtbtr+YAbtog5WsAAAAAKAC\/\/+1DQAAAgQFtAQCCAoAIYAjAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfNBAAEAR5NXAqAAREskEILhDHzEBCYn27fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABACAKg7kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB0003hcgpcmSdQZoJFj9c3crNvbbzPmA66eL1DRMEucxiwDMA5JhH5EzU3oJcu6XrgTfyNvrAIA0DorhgznjXYQAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABofl9AACsR+YMSyQQgwKgAER8xuEMAVG317fYMAAIArBk1jI9k5EcyQ3xeQ7ioO5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAAOYGQZE2u1u2wKgAEQG7v5iCE\/ghaIOVraASaN+HqAAAAgQFtAQCCAosBh44ACGAIwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZBAAEAG0gnAqAARNrtbtr+YAbtog5WtghP4IoAQAq0cfAAAAQEICgAhgE8sBh44","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":247,"pkt":"AA6OMNv9MAdNo1+nCABFAADpFZFAAEAG0VPAqAARNrtbtr+YAbtog5WtghP4IoAYAq2yzwAAAQEICgAhgFEsBh44FgMBALABAACsAwNpu8fyH0bmBuIhI45OMI2QAejACKsvR53r1YItFVUgZgAAHMArwCzMqcAvwDDMqMAJwArAE8AUAJwAnQAvADUBAABn\/wEAAQAAAAAYABYAABNicmFoZS5hcHB0aW1pemUuY29tABcAAAAjAAAADQAQAA4EAwQBBQMFAQYDBgECAQAFAAUBAAAAAAAQAAsACQhodHRwLzEuMQALAAIBAAAKAAgABgAdABcAGA==","pkt_caplen":247,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1527155671066,"flow_last_seen":1527155671250,"flow_tot_l4_data_len":325,"flow_min_l4_data_len":32,"flow_max_l4_data_len":213,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"brahe.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0397{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA05kFAAOYGW1c2u1u2wKgAEQG7v5iCE\/giaIOWYoAQAG4d1gAAAQEICiwGHmYAIYBR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2344{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0779{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1527155671066,"flow_last_seen":1527155671423,"flow_tot_l4_data_len":1837,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"brahe.apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2344{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+2357{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":1514,"pkt":"MAdNo1+nAA6OMNv9CABFAAXc5kRAAOYGVaw2u1u2wKgAEQG7v5iCFANyaIOWYoAQAG5LvQAAAQEICiwGHmYAIYBRCZ\/JaR8HGam\/3rr4C4iCRBYQfwfAgCJff7ww3rrNB3lkVtj\/80+cMLtuHlFL5s29F8TFv8g\/jrEfika3BkNvYi3PUZ1FyorpE4vAx5G+W7b6N0qJ\/vCd2hMmIiwGkD6LE5igGdbd2kpIfz0PiZ0kcksOe0T\/1Da2g3YjWIsUbLhd92FtOXbt3RI9a4eIl5G+wEYCHnYc3bavXE\/1ANacTangnqKO\/LEWeVwh00WBmgw5bG0o1yXStxGQ0Pbeb170+qSLZndyL5uQQCxSEmD5\/7VwLomaeQmJgS3sXHhvgYfx\/FUABXgwggV0MIIEXKADAgECAhAnZu5W60nzjqvXcKL8hN4iMA0GCSqGSIb3DQEBDAUAMG8xCzAJBgNVBAYTAlNFMRQwEgYDVQQKEwtBZGRUcnVzdCBBQjEmMCQGA1UECxMdQWRkVHJ1c3QgRXh0ZXJuYWwgVFRQIE5ldHdvcmsxIjAgBgNVBAMTGUFkZFRydXN0IEV4dGVybmFsIENBIFJvb3QwHhcNMDAwNTMwMTA0ODM4WhcNMjAwNTMwMTA0ODM4WjCBhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCR6FSS0gpWsawNJN3Fz0RndJkrN6N9I3AAcbxT38T6KhKPS38QVr2fcHK3YX\/JSw8Xpz3jsARh7v8Rl8f0hj4K+j5c+ZPmNHrZFGvnnLOFoIJ6dq9xkNfs\/Q36nGz637CC9BR++b7Epi9Pf5l\/tfxnQ3K9DADWietrLNPtj5gcFKt+5eNu\/Nio5JIk2kNrYrhV\/erBvGy2i\/MOjZrkm2xpmfh4SDBF1a3hDTxFYPwyllEnvGfDyi62a+pGx8cgoLEfZd5ICLqkTqnyg0Y3hOvozIFIQ2dOciqbXL1MGyiKXCJ7tKuY2e7gUYPDCUZObT6Z+pUX2nwzV0E8jVHtC7ZcryxjGt9XyD+86V3Em69FmeKjWiS0uqlWPc9vqv9JWL7wqP\/0uK3pN\/u6uPQLOvnoQ0IeidiEyxPx2bvhiWC4jChWrBQdnArncevPDt09qZahSL0896+1DSJMwBGB7FY79tOi4lu3sgQiUpWAk2nojkxl8ZEDLXB0AuqLZxUpaVICu9ffUGpVRr+goyhhf3DQw6KqLCGqR84onAZFdr+CGCe01a60y1Dma\/RMhnEw6abfFobg2P9A3fvQQoh\/ozM6LlweQRGBY84YcWsr7KaKtzFcOmpH4MN5WdYgGq\/yapiqcrxXStJLnbsQ\/LBMQeXtHT1eKJ2czL+zUdqnR+WEUwIDAQABo4H0MIHxMB8GA1UdIwQYMBaAFK29mHo0tCb3+sQmVO8DveAky1QaMB0GA1UdDgQWBBS7r34CPfqm8TyEjq3uOJjs2TIy1DAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH\/BAUwAwEB\/zARBgNVHSAECjAIMAYGBFUdIAAwRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0FkZFRydXN0RXh0ZXJuYWxDQVJvb3QuY3JsMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAQEAZL+D8V+ahdDNuKEpVw3oWvfR6T7ydgRu8VJwux48\/00NdGrMgYIl08OgKl1M9bqLoW3EVAl1x+MnDl2EeTdAE3f1tKwc0DurFxI=","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+1116{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":595,"pkt":"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","pkt_caplen":595,"pkt_type":2048,"pkt_ipoffset":14}
+1135{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":20,"flow_packet_id":9,"flow_first_seen":1527155671066,"flow_last_seen":1527155671423,"flow_tot_l4_data_len":5358,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":595,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"brahe.apptimize.com","server_names":"*.apptimize.com,apptimize.com","ja3":"d8c87b9bfde38897979e41242626c2f3","ja3s":"8d2a028aa94425f76ced7826b1f39039","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA","issuerDN":"C=US, ST=CA, L=Mountain View, O=Apptimize, Inc, OU=PremiumSSL Wildcard, CN=*.apptimize.com","alpn":"http\/1.1","fingerprint":"BC:4C:8F:EC:8B:7B:85:BD:54:61:8B:C0:7B:E7:A2:69:0B:F2:49:E5"}}
+0397{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZJAAEAG0gfAqAARNrtbtr+YAbtog5ZighP9yoAQAsMVrQAAAQEICgAhgH0sBh5m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZNAAEAG0gbAqAARNrtbtr+YAbtog5ZighQDcoAQAtoP7gAAAQEICgAhgH0sBh5m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZRAAEAG0gXAqAARNrtbtr+YAbtog5ZighQJGoAQAvEKLwAAAQEICgAhgH0sBh5m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0FZVAAEAG0gTAqAARNrtbtr+YAbtog5ZighQLK4AQAwcICAAAAQEICgAhgH0sBh5m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":192,"pkt":"AA6OMNv9MAdNo1+nCABFAACyFZZAAEAG0YXAqAARNrtbtr+YAbtog5ZighQLK4AYAwfqwwAAAQEICgAhgIksBh5mFgMDAEYQAABCQQTcGxvSa7fqShzAZqWQU+JXWPcMP8X17XOt7phjFwOAma7AFQwW57V32iZB0fjSX0hyPGvCz36n4G8KaXzAKk3kFAMDAAEBFgMDACgAAAAAAAAAAJmGgFvW2s8Fg4KovsqubSJQ2ImTZD\/ss5CD+euQ6kH7","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2363{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":62,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwfSxAAEAR5WbAqAAREskEILhDHzEAHHCF7fYJAJ49kpFjAQAArBk1jI9k5Ec=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0714{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfS5AAEAR5HfAqAAREskEILhDHzEBCQYY7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABADAJ89kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB\/sjEZJqAiu07NiPOdDNIZcvf3wjsntfvk0xrO5q1r7xDfBb+Y9pocMWBjGj961iEDkPirIeUHtGjj2ClOUquYUAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":76,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+f59AACsR+G0SyQQgwKgAER8xuEMAKmLm7fYLAJ49kpFjAQAAa0KSkWMBAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155671,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABof6hAACsR+DoSyQQgwKgAER8xuEMAVHXz7fYMAAMArBk1jI9k5EcyQ3xeQ7ifPZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0716{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155672,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfUdAAEAR5F7AqAAREskEILhDHzEBCYGY7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABAEAKU\/kpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB8bWfICPI2NeRSyaVBbpVL4+XrSmw6rvQoIcurBTv+tPZM1+jRM2dDI\/ertoau9dK3ag8Zl0R+zS1PC3wOdlq4EAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155672,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABogL5AACsR9yQSyQQgwKgAER8xuEMAVG7x7fYMAAQArBk1jI9k5EcyQ3xeQ7ilP5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155672,"pkt_len":62,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwfWhAAEAR5SrAqAAREskEILhDHzEAHIWB7fYJAIlBkpFjAQAArBk1jI9k5Ec=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155672,"pkt_len":76,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+gdRAACsR9jgSyQQgwKgAER8xuEMAKo7e7fYLAIlBkpFjAQAAVEaSkWMBAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0715{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155672,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdfXFAAEAR5DTAqAAREskEILhDHzEBCUGX7fYBAAUArBk1jI9k5EcHridUEQCowEO4MgAAAEMBABAFAKhBkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAvcYFlBohustZk1e\/8OyZiSqP86k39WGwDkG7f\/rMnT2tcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB8m\/QNNih7W1BF6xjsK4MyfFYly16J29kYRqJQ9pOX7GIJU4rN0Z4OOtVE70qU69IKbPWj7oKS0Q1FU07J5bWIAAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155672,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABogeVAACsR9f0SyQQgwKgAER8xuEMAVGrv7fYMAAUArBk1jI9k5EcyQ3xeQ7ioQZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155677,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0WoJAAEAGCKDAqAAREskEILFwAbuQXSU4zKxZYoARAq21qAAAAQEICgAhhscAWtCx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155677,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0iblAACsG7mgSyQQgwKgAEQG7sXDMrFlikF0lOYARANKbQAAAAQEICgBa7PMAIYbH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155677,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0WoNAAEAGCJ\/AqAAREskEILFwAbuQXSU5zKxZY4AQAq2ZXAAAAQEICgAhhtAAWuzz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1527155679410,"flow_last_seen":1527155679410,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":33744,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8V2ZAAEAGC9HAqAAREskEA4PQAbvgGt8vAAAAAKAC\/\/+jOgAAAgQFtAQCCAoAIYhJAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":1527155679411,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7985,"l4_proto":"udp"}
+0714{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdf+NAAEAR4d\/AqAAREskEA5UuHzEBCY\/LBbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABABAPdbkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB6SNCb6pEPHTLEjikG3nU2iKPCm3mBiaaSkNyyVaokw3bFWKZLztddqHjISoa\/0AQVn24h8Bz7MKBuS1UkASdYsAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":1527155679411,"flow_tot_l4_data_len":265,"flow_min_l4_data_len":265,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":265,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7985,"l4_proto":"udp","ndpi": {"proto":"Viber","category":"VoIP"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":1527155679411,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7987,"l4_proto":"udp"}
+0412{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":76,"pkt":"AA6OMNv9MAdNo1+nCABFiAA+f+RAAEAR4r3AqAAREskEA5UuHzMAKui4BbgZADUY9RiYZORHJd9NTuHNNxtcmrwm2dMLSwG7ObMAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1527155679411,"flow_last_seen":1527155679411,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7987,"l4_proto":"udp","ndpi": {"proto":"Viber","category":"VoIP"}}
+0388{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":60,"pkt":"AA6OMNv9MAdNo1+nCABFiAAuf+VAAEAR4szAqAAREskEA5UuHzEAGscOBbgRAAEAAAAuCDgEAAAHridU","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":62,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwf+ZAAEAR4snAqAAREskEA5UuHzEAHM1MBbgJAPtbkpFjAQAANRj1GJhk5Ec=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABopnVAACsR0YoSyQQDwKgAER8xlS4AVO7dBbgMAAEANRj1GJhk5EcyQ3xeLpX3W5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":62,"pkt":"MAdNo1+nAA6OMNv9CABFAAAwpnZAACsR0cESyQQDwKgAER8zlS4AHM86BbgaADUY9RiYZORHMkN8Xi6VAMg=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":74,"pkt":"MAdNo1+nAA6OMNv9CABFAAA8AABAACsGeDcSyQQDwKgAEQG7g9B0pK754BrfMKASaN\/EGgAAAgQFtAQCCAoA5FGtACGISQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0V2dAAEAGC9jAqAAREskEA4PQAbvgGt8wdKSu+oAQAq1ZEAAAAQEICgAhiFIA5FGt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":76,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+pnhAACsR0bESyQQDwKgAER8xlS4AKrsaBbgLAPtbkpFjAQAAwWCSkWMBAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdgANAAEAR4b\/AqAAREskEA5UuHzEBCYKIBbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABACAPBdkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB5uFWVzUfaXQ0M3vaCGMsqmTdbCfozZ\/zqH+JIqYi5FwJxF9FtZzMCe4fSWSiPbd2F4Cheq4HGNZc7T0drq5c4IAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155679,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABop4JAACsR0H0SyQQDwKgAER8xlS4AVPTbBbgMAAIANRj1GJhk5EcyQ3xeLpXwXZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":62,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwgFdAAEAR4ljAqAAREskEA5UuHzEAHONIBbgJAOVfkpFjAQAANRj1GJhk5Ec=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":54,"pkt":"AA6OMNv9MAdNo1+nCABFiAAogFhAAEAR4l\/AqAAREskEA5UuHzEAFDEnBbgOAAAAAAAHridU","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0716{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdgFpAAEAR4WjAqAAREskEA5UuHzEBCfL3BbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABADAOZfkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDBwi76Swr0MOTz\/c5hajJVU6voPOM8+w36FJ4OkGE\/tR24fyv\/CaoMEnpxJXj\/PN1kLEo0ZZ0uL9MCA0UlpQljokAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":76,"pkt":"MAdNo1+nAA6OMNv9CABFAAA+p+BAACsR0EkSyQQDwKgAER8xlS4AKukSBbgLAOVfkpFjAQAAqWSSkWMBAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABop+RAACsR0BsSyQQDwKgAER8xlS4AVP3ZBbgMAAMANRj1GJhk5EcyQ3xeLpXmX5KRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0712{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":299,"pkt":"AA6OMNv9MAdNo1+nCABFiAEdgKpAAEAR4RjAqAAREskEA5UuHzEBCQoaBbgBAAUANRj1GJhk5EcHridUEQCowC6VMgAAAEMBABAEAONhkpFjAQAAAAAAACXfTU7hzTcbXJq8JtnTC0sBuzmzAAAAAAAAAAADAAEAZgIAZwABeAAAAAAAAIAAGwkdkSv31AWZshbdezAt4SmQgEbXQ8gpESKVZEPm+yytcfHi3zlsEfu0kKTP5bAY2qxB7\/oc6uBQ0Wmie0yDB9DmD+jAgz+1QPoVxa1oGy5FCWmigjpujQmQ+eyliMV67TFt7n7QCPfcsBILiupGCOx7jtQ6ZaY8kVB+OFA+3okAAAAAAAAAAEcFAAA4AAAAEABBbmRyb2lkLDguOS4wLjIAAAA=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155680,"pkt_len":118,"pkt":"MAdNo1+nAA6OMNv9CABFAABoqKpAACsRz1USyQQDwKgAER8xlS4AVP\/XBbgMAAQANRj1GJhk5EcyQ3xeLpXjYZKRYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":118,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155681,"pkt_len":62,"pkt":"AA6OMNv9MAdNo1+nCABFiAAwgLpAAEAR4fXAqAAREskEA5UuHzEAHPpEBbgJAM5jkpFjAQAANRj1GJhk5Ec=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0V2hAAEAGC9fAqAAREskEA4PQAbvgGt8wdKSu+oARAq1TiwAAAQEICgAhjdYA5FGt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":66,"pkt":"MAdNo1+nAA6OMNv9CABFAAA0\/ypAACsGeRQSyQQDwKgAEQG7g9B0pK764BrfMYARANI\/LQAAAQEICgDkZ+UAIY3W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":66,"pkt":"AA6OMNv9MAdNo1+nCABFAAA0V2lAAEAGC9bAqAAREskEA4PQAbvgGt8xdKSu+4AQAq09SAAAAQEICgAhjeAA5Gfl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1527155685529,"flow_last_seen":1527155685529,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":74,"pkt":"AA6OMNv9MAdNo1+nCABFAAA8KqJAAEARjp7AqAARwKgAD8OxADUAKKNciEIBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1527155685529,"flow_last_seen":1527155685529,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":90,"pkt":"MAdNo1+nAA6OMNv9CABFAABMZZhAAEARU5jAqAAPwKgAEQA1w7EAOLypiEKBgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAABfAATYOs1k","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1527155685529,"flow_last_seen":1527155685530,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.205.100"}}
+0438{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1527155685757,"flow_last_seen":1527155685757,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","l4_proto":"icmp"}
+2332{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1527155685757,"flow_last_seen":1527155685757,"flow_tot_l4_data_len":1480,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+2332{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","pkt_oversize":false,"pkt_ts":1527155685,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":4,"flow_packet_id":22,"flow_first_seen":1527155639240,"flow_last_seen":1527155640252,"flow_tot_l4_data_len":7101,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":322,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36986,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":5,"flow_packet_id":22,"flow_first_seen":1527155640085,"flow_last_seen":1527155641008,"flow_tot_l4_data_len":6877,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.69.166.226","src_port":36988,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":10,"flow_packet_id":3,"flow_first_seen":1527155644240,"flow_last_seen":1527155644244,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":30,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.106","src_port":41993,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"Google","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":10,"flow_packet_id":3,"flow_first_seen":1527155644240,"flow_last_seen":1527155644244,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":30,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.106","src_port":41993,"dst_port":443,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":18,"flow_packet_id":46,"flow_first_seen":1527155670640,"flow_last_seen":1527155677861,"flow_tot_l4_data_len":5773,"flow_min_l4_data_len":20,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":125,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7985,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1527155670640,"flow_last_seen":1527155670672,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":28,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":47171,"dst_port":7987,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":7,"flow_packet_id":24,"flow_first_seen":1527155641697,"flow_last_seen":1527155647390,"flow_tot_l4_data_len":10349,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":431,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.96","src_port":57520,"dst_port":443,"l4_proto":"tcp"}
+0439{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":25,"flow_packet_id":2,"flow_first_seen":1527155685757,"flow_last_seen":1527155685757,"flow_tot_l4_data_len":2960,"flow_min_l4_data_len":1480,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":1480,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","l4_proto":"icmp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":16,"flow_packet_id":19,"flow_first_seen":1527155648513,"flow_last_seen":1527155648748,"flow_tot_l4_data_len":7127,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":375,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"151.101.1.130","src_port":55746,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":0,"flow_packet_id":58,"flow_first_seen":1527155638428,"flow_last_seen":1527155685200,"flow_tot_l4_data_len":7373,"flow_min_l4_data_len":32,"flow_max_l4_data_len":623,"flow_avg_l4_data_len":127,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"52.0.253.101","src_port":33208,"dst_port":4244,"l4_proto":"tcp","ndpi": {"proto":"Viber","category":"VoIP"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":0,"flow_packet_id":58,"flow_first_seen":1527155638428,"flow_last_seen":1527155685200,"flow_tot_l4_data_len":7373,"flow_min_l4_data_len":32,"flow_max_l4_data_len":623,"flow_avg_l4_data_len":127,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"52.0.253.101","src_port":33208,"dst_port":4244,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":9,"flow_packet_id":89,"flow_first_seen":1527155641845,"flow_last_seen":1527155647484,"flow_tot_l4_data_len":61632,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":692,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.230.93.53","src_port":53934,"dst_port":443,"l4_proto":"tcp"}
+0440{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1527155647500,"flow_last_seen":1527155647500,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::3207:4dff:fea3:5fa7","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1527155646968,"flow_last_seen":1527155666982,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":69,"flow_max_l4_data_len":69,"flow_avg_l4_data_len":69,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1527155639005,"flow_last_seen":1527155639008,"flow_tot_l4_data_len":309,"flow_min_l4_data_len":40,"flow_max_l4_data_len":269,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35283,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1527155646819,"flow_last_seen":1527155646840,"flow_tot_l4_data_len":106,"flow_min_l4_data_len":45,"flow_max_l4_data_len":61,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":35331,"dst_port":53,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1527155641574,"flow_last_seen":1527155641691,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":45,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":37418,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1527155638474,"flow_last_seen":1527155638476,"flow_tot_l4_data_len":213,"flow_min_l4_data_len":44,"flow_max_l4_data_len":169,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":45743,"dst_port":53,"l4_proto":"udp"}
+0506{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1527155670632,"flow_last_seen":1527155677899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":45424,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0461{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1527155670632,"flow_last_seen":1527155677899,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.32","src_port":45424,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":20,"flow_packet_id":27,"flow_first_seen":1527155671066,"flow_last_seen":1527155672061,"flow_tot_l4_data_len":8457,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"54.187.91.182","src_port":49048,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1527155685529,"flow_last_seen":1527155685530,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":50097,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":22,"flow_packet_id":43,"flow_first_seen":1527155679411,"flow_last_seen":1527155685088,"flow_tot_l4_data_len":4754,"flow_min_l4_data_len":20,"flow_max_l4_data_len":265,"flow_avg_l4_data_len":110,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7985,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1527155679411,"flow_last_seen":1527155679443,"flow_tot_l4_data_len":70,"flow_min_l4_data_len":28,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":38190,"dst_port":7987,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":12,"flow_packet_id":27,"flow_first_seen":1527155646850,"flow_last_seen":1527155680789,"flow_tot_l4_data_len":7857,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1004,"flow_avg_l4_data_len":291,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"172.217.23.78","src_port":43702,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":15,"flow_packet_id":2,"flow_first_seen":1527155648481,"flow_last_seen":1527155648506,"flow_tot_l4_data_len":197,"flow_min_l4_data_len":48,"flow_max_l4_data_len":149,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":44376,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1527155639234,"flow_last_seen":1527155639237,"flow_tot_l4_data_len":383,"flow_min_l4_data_len":44,"flow_max_l4_data_len":339,"flow_avg_l4_data_len":191,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":62872,"dst_port":53,"l4_proto":"udp"}
+0505{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1527155679410,"flow_last_seen":1527155685132,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":33744,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1527155679410,"flow_last_seen":1527155685132,"flow_tot_l4_data_len":208,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"18.201.4.3","src_port":33744,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1527155641813,"flow_last_seen":1527155641840,"flow_tot_l4_data_len":195,"flow_min_l4_data_len":44,"flow_max_l4_data_len":151,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.17","dst_ip":"192.168.0.15","src_port":40445,"dst_port":53,"l4_proto":"udp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/viber.pcap"}
diff --git a/tests/result/nDPId_vnc.pcap.txt b/tests/result/nDPId_vnc.pcap.txt
new file mode 100644
index 000000000..7b269b96e
--- /dev/null
+++ b/tests/result/nDPId_vnc.pcap.txt
@@ -0,0 +1,38 @@
+0355{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1476111264364,"flow_last_seen":1476111264364,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":59791,"dst_port":6900,"l4_proto":"tcp"}
+0391{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":66,"pkt":"EP7tAkntxOodxQGGCABFAAA0Xs1AAHQGVCNf7TDQwKgCbumPGvTqxTBkAAAAAIACIADbnAAAAgQFrAEDAwIBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":66,"pkt":"xOodxQGGEP7tAkntCABFAAA0fFNAAIAGAADAqAJuX+0w0Br06Y8QfmeF6sUwZYASIABT+gAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAAoXs5AAHQGVC5f7TDQwKgCbumPGvTqxTBlEH5nhlAQQTqDEwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":66,"pkt":"xOodxQGGEP7tAkntCABFAAA0fFRAAIAGAADAqAJuX+0w0Br06Y8QfmeG6sUwZVAYAQRT+gAAUkZCIDAwNC4wMDEK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":66,"pkt":"EP7tAkntxOodxQGGCABFAAA0XtNAAHQGVB1f7TDQwKgCbumPGvTqxTBlEH5nklAYQTco9wAAUkZCIDAwNC4wMDEK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1476111264364,"flow_last_seen":1476111264453,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":59791,"dst_port":6900,"l4_proto":"tcp","ndpi": {"proto":"VNC","category":"RemoteAccess"}}
+0387{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":62,"pkt":"xOodxQGGEP7tAkntCABFAAAwfFVAAIAGAADAqAJuX+0w0Br06Y8QfmeS6sUwcVAYAQRT9gAABw2FBYEGggI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAApXtRAAHQGVCdf7TDQwKgCbumPGvTqxTBxEH5nmlAYQTV17wAADQAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0375{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":54,"pkt":"xOodxQGGEP7tAkntCABFAAAofFhAAIAGAADAqAJuX+0w0Br06Y8Qfmqg6sUznlAQAQFT7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":73,"pkt":"xOodxQGGEP7tAkntCABFAAA7fFpAAIAGAADAqAJuX+0w0Br06Y8QfmrG6sUznlAYAQFUAQAAAAFpMOAjPvIHTr3O0uOY0QI6ug==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAAoXvNAAHQGVAlf7TDQwKgCbumPGvTqxTOeEH5q2VAQQGV9XAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":83,"pkt":"EP7tAkntxOodxQGGCABFAABFXvRAAHQGU+tf7TDQwKgCbumPGvTqxTOeEH5q2VAYQGUkFQAAAAs1RnW2wGGLvPx+4fS4+br74d2zdjaFmmBEWGU=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":88,"pkt":"xOodxQGGEP7tAkntCABFAABKfFtAAIAGAADAqAJuX+0w0Br06Y8QfmrZ6sUzu1AYAQFUEAAAABAV0a98UA\/uYVcOkT6k1VzX1Zss8DNhoL+opZq\/g0qQpg==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":88,"pkt":"EP7tAkntxOodxQGGCABFAABKXvVAAHQGU+Vf7TDQwKgCbumPGvTqxTO7EH5q2VAYQGXxHwAAABD4kWjKRPuBSComGQUeVSOHJpwdvgNCVw3Sf0PlviJsDA==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":76,"pkt":"xOodxQGGEP7tAkntCABFAAA+fFxAAIAGAADAqAJuX+0w0Br06Y8Qfmr76sUz3VAYAQFUBAAAAAQisGUct5Ou6lUgPdb106WnFrY60A==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111264,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAAoXvZAAHQGVAZf7TDQwKgCbumPGvTqxTPdEH5rEVAQQFd88wAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1476111286462,"flow_last_seen":1476111286462,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":51559,"dst_port":6900,"l4_proto":"tcp"}
+0394{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":66,"pkt":"EP7tAkntxOodxQGGCABFAAA0be5AAHQGRQJf7TDQwKgCbslnGvTjPDftAAAAAIACIAD7xAAAAgQFrAEDAwIBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":66,"pkt":"xOodxQGGEP7tAkntCABFAAA0AmNAAIAGAADAqAJuX+0w0Br0yWdPW3mt4zw37oASIABT+gAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAAobe9AAHQGRQ1f7TDQwKgCbslnGvTjPDfuT1t5rlAQQTpSNgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":66,"pkt":"xOodxQGGEP7tAkntCABFAAA0AmRAAIAGAADAqAJuX+0w0Br0yWdPW3mu4zw37lAYAQRT+gAAUkZCIDAwNC4wMDEK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":66,"pkt":"EP7tAkntxOodxQGGCABFAAA0bfFAAHQGRP9f7TDQwKgCbslnGvTjPDfuT1t5ulAYQTf4GQAAUkZCIDAwNC4wMDEK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","flow_id":1,"flow_packet_id":5,"flow_first_seen":1476111286462,"flow_last_seen":1476111286549,"flow_tot_l4_data_len":148,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":51559,"dst_port":6900,"l4_proto":"tcp","ndpi": {"proto":"VNC","category":"RemoteAccess"}}
+0390{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":62,"pkt":"xOodxQGGEP7tAkntCABFAAAwAmVAAIAGAADAqAJuX+0w0Br0yWdPW3m64zw3+lAYAQRT9gAABw2FBYEGggI=","pkt_caplen":62,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAApbfZAAHQGRQVf7TDQwKgCbslnGvTjPDf6T1t5wlAYQTVFEgAADQAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":54,"pkt":"xOodxQGGEP7tAkntCABFAAAoAmZAAIAGAADAqAJuX+0w0Br0yWdPW3nC4zw5\/1AQAQJT7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAAobfhAAHQGRQRf7TDQwKgCbslnGvTjPDn\/T1t8yFAQQHNN0gAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":54,"pkt":"xOodxQGGEP7tAkntCABFAAAoAmlAAIAGAADAqAJuX+0w0Br0yWdPW3zI4zw7J1AQAQFT7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":73,"pkt":"xOodxQGGEP7tAkntCABFAAA7AmtAAIAGAADAqAJuX+0w0Br0yWdPW3zu4zw7J1AYAQFUAQAAAAFQo3qOmyttSCO669FFFjnsxA==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":60,"pkt":"EP7tAkntxOodxQGGCABFAAAobf1AAHQGRP9f7TDQwKgCbslnGvTjPDsnT1t9AVAQQGVMfwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":83,"pkt":"EP7tAkntxOodxQGGCABFAABFbf5AAHQGROFf7TDQwKgCbslnGvTjPDsnT1t9AVAYQGUMdAAAAAtD14zifYG0h7hNY6JEfjTiOFBsN4kA8OBfXio=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":88,"pkt":"xOodxQGGEP7tAkntCABFAABKAmxAAIAGAADAqAJuX+0w0Br0yWdPW30B4zw7RFAYAQFUEAAAABB5egU6EyiUhjcAQTfjXu4EJ6Tyd+fY2j1lCEncfpiMwQ==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","pkt_oversize":false,"pkt_ts":1476111286,"pkt_len":88,"pkt":"EP7tAkntxOodxQGGCABFAABKbf9AAHQGRNtf7TDQwKgCbslnGvTjPDtET1t9AVAYQGWCBgAAABAyRkBH2n2M0M1lbRupL3R3bhQSGUiIXpMn5oN9qHkc9w==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":4551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","flow_id":1,"flow_packet_id":1008,"flow_first_seen":1476111286462,"flow_last_seen":1476111290613,"flow_tot_l4_data_len":38150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":51559,"dst_port":6900,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":4551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap","flow_id":0,"flow_packet_id":3543,"flow_first_seen":1476111264364,"flow_last_seen":1476111280884,"flow_tot_l4_data_len":135184,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"95.237.48.208","dst_ip":"192.168.2.110","src_port":59791,"dst_port":6900,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":4551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/vnc.pcap"}
diff --git a/tests/result/nDPId_wa_video.pcap.txt b/tests/result/nDPId_wa_video.pcap.txt
new file mode 100644
index 000000000..ccb4ad532
--- /dev/null
+++ b/tests/result/nDPId_wa_video.pcap.txt
@@ -0,0 +1,134 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561455764448,"flow_last_seen":1561455764448,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0435{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455764,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABI0kIAAEARIhLAqAIBwKgC\/+EV4RUANEtUU3BvdFVkcDC64ScQKi2g\/wABAARIlcIDyUSzc\/3fJAksKuG26pMF0apN5Ek=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561455764448,"flow_last_seen":1561455764448,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455767339,"flow_last_seen":1561455767339,"flow_tot_l4_data_len":580,"flow_min_l4_data_len":580,"flow_max_l4_data_len":580,"flow_avg_l4_data_len":580,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp"}
+1143{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455767,"pkt_len":614,"pkt":"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","pkt_caplen":614,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455767,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0cX4AAFMGgWyd8BQ1wKgCDBRmwMsu6EzOm9EhroAQALQFAQAAAQEICh5+dS80zyVK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2289{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455767,"pkt_len":1454,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgcX8AAFMGe\/+d8BQ1wKgCDBRmwMsu6EzOm9EhroAQALSeYwAAAQEICh5+deo0zyVKAAeY92kokkA7hrw6j6Vhkd+oEkvjt9+mUaq3VF5ALR\/3dyTIUqE+ce9A8zw57IwXMUm48Ve04aN2q3aoE1gIxi914RnbSua9WCw4BiKEAwBPqN8fZa53YGzu6KGDd+y61i8hb8APzgCq0BgVHxbqR0bN2PsZSNYDa\/cxDiPbHbN81oUvSJ1gG1HfKBlexobCedzu2sUfK2Qs2a4k4D1FAWNImtONV8L8QIDh9roN6NGgmn\/lqF1FSp0J1KRgd0jLjFjyO8E83j6fNPMnzyDyrqqDONC2kuu2acMixjEUltdGs477N1jzC9n+ER\/b\/S6TQcGEY9qe321iyRfAWuN0DLg7mjzkOAiLNEYzLk5mIXEf0ZRFKJwDAvOVHtFaYq9PK\/+TyWbUbh9dyV6FAMdUFiad1IPXICQYrOxMJpvYW44GNTJj7JJd\/vptPppVq\/RnqviVF+HvVQYCfsL\/SVoCMkJWYQL1ncdQ0eep1cbBr6nAtINm6y3vpk9iSvMUPjyihT4LCr1goaODAyLUwBnoKlcyQnCzrUTIAqAAM29AsZFrK3bZYGCyGW\/1MqA4MzwyfwMD1bF+saAkWfKpa6RSRkk3KGr6n6v79y+8bFqwHEmh79h64wuCdareEkcN59XiCjPB2jxFRkpLZWY0mc91mPUnIxaHkuQIMuo4JPBhS7O2C4sRkwc2EdliToDywQdgKCedjvE+Fkv+IJ1yiEuAY7OC0Yop8Phr2Qm2qT+26YDaaSkP6CBAA8F\/0qtcGuDnlIq3ve6KW\/D6MuF4EOQk1b\/mWeGOhmO2zaJtvFI8PxQT5VxpwG5mTmAHNrmnqHuX0IWL3zCefnedyGujv7ty3zJnVuQwRLy87IaxzKXwsdyDG3gOFStZBZK2qgn8IW\/xr0PRTCCbF58t6+kmge68BzSwUxMSja0zleeuWy9nliB9zaa4b+jN\/22Q56CpjAU0jeotHbt7rfwSgaDBMBcRXkBKkMuSRjHPsILIfuplVXUe9hbVn7Go2YVn3YMI8\/AExe4f\/h8AveIFQCrjpuBYwwenY\/QBLof\/waMaXnDMoOqv3UDo5f\/rUkCJZYja2kE\/3ozUaT8Uz0PCmt\/gc\/KCFNUf0Dg1W5QGc7mNzo6HmKq3sVYeKZxgXc+0B\/+Kg+WdAj0nr4z70bgW5GCi4QLhKZrELaubvCFff0BZt4Ss2ARFEyAH9IKD4jhRLgOIMULFRSu5xrKXDGooBaqIU\/671otysjRrQ81PzcJeLF2eHbj0voj\/+FWKEGjREDnwIqXWvMaPKFe8PlPupWBMwOzFz8pMa1\/Cfixow4NV+SRN1L2CcfmYjYCb8vwd81S0Sbh\/yjs0qpd5YLoB8pMYh\/yUoZ+FIXdWz+sa2pEUMxHkvUFc+7SzHNfV7LJOOBb6vDyxWLEcl4dY0FU+ynkwQS3op34TZEH4GA2VEfQdOgNR2iu4EKt2LFEXckrFDQqafGZhK5SjyixnKMbzvINk8a1d4ltQPewgraMY4ASPPuLS07U5UPA1qlh8E94Xhh8y1zAB0VWBPRDFRutgl1y4BL0Lad98ZYlvDZMJKhfwsfD1K84zCNVytc0lpEdS4WwTmG5jVDNkEok\/lFTqI9CJ\/ndHCOSY1DeCIemKT8q2EgY6ncZJwmIWq3s+IAWyQwqNpA+uXGEPONBjE53SU6ADJ7J2GkLvQbStohFZjKPShMILgTsEvkwNRe5icjnZF5b4X\/JteDZslY73Nte1q4DiPugbpWEOEW3UaXBVcccSnBXfsrY1lsgjH8BpxoTBACfj\/Nm3cIxvIq14OKHRvxy9b0mNen\/kzoDrO5sZ\/dAjHBdNu5W\/9k529dGB7vwkors=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455767,"pkt_len":169,"pkt":"kLkxKPrKxiwDYGpkCABFAACbcYAAAFMGgQOd8BQ1wKgCDBRmwMsu6FI6m9EhroAYALRFAgAAAQEICh5+deo0zyVKPusMeaD3lCmYGQs0mbv2onbTpmXzgK3ehPiaf\/jI1Ot8QVh3JhLBjeOPFQVrZL1eyZEh\/tmq8R\/YD3vf88ik5c9MV\/DPl8MvNMo0YiPUJmBufpG2yOesaCXKVO86h91FqigrzMFgzA==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+1016{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455767,"pkt_len":522,"pkt":"kLkxKPrKxiwDYGpkCABFAAH8cYEAAFMGf6Gd8BQ1wKgCDBRmwMsu6FKhm9EhroAYALRm5AAAAQEICh5+deo0zyVKLSQRVEKsxJjcWg\/H\/lMobRMW7X9RKF\/hZslxhUvme\/4heGQVcnrwt\/Fm5F2U+oLk+gFf2tebzVJU2bS4GWtpyfd7t0eGRRsksu\/IwWXxVQVfXmQWdqBagMROU0+Iv7cKU9E8j8khrgiQj04I4dJ4yob8xXCok1OIYUG8NdpqehsPn5Rq59THddLOmCgUSKZz\/u1aE7VKWVIXUVp7k19fdFvu2yb39GEDWSdBf4J9Oqs32QeZC52b5oVKE0ithMi9GHf6l\/ui7QsmMqIoJ3dCOeAzESPIDse\/Uw0Z19U+hGKwuaFZZxgdpjsRxn00Hd+xbUGY0TDE8Z\/s2TerF+yrQYARAtLEhyCWaiulNjDn+9f5mpFDmqUMLqsqClVwjcqNgfvRUqMf1Kng1nEjbYVdz0eYwkqEjFo20rkpLUKiaSh7EGttgz7HvZkjaMo8Q4Blqb1fKhQbir5L3ofhHA7goOKU5PHOFmaXZoL5abuQvfLea45eBI4EWKOxGMZDoeA8fGnY5ydOnOswhZUwVx+Pbot37CPOJwe1CCDdAiYytUlelaYcf3Hqbnb4mn5pjMUkvJohvpHobUScb2AcifLrDY6QnEnHXu93","pkt_caplen":522,"pkt_type":2048,"pkt_ipoffset":14}
+1016{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455768,"pkt_len":522,"pkt":"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","pkt_caplen":522,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":346,"pkt":"kLkxKPrKxiwDYGpkCABFAAFMcYMAAFMGgE+d8BQ1wKgCDBRmwMsu6FRpm9EhroAYALQCXgAAAQEICh5+fHE0zyVKAAEVJiKbfrUe\/gyjf\/W9\/gEaJ7uS5PPiWbxAHQ5sIuIO810KmI2qrFyfKlRmZXJeWs+qn7DUyBkwJqQdOyIp18Yk3S6BSSsapzoP+Y1UX+wK8pEILxVnRTueeMOWK2C\/HCvAJ6xBSDMunBcjw\/2aDWpe\/598RXhkPyqwYBmydHzbpZneSlmRd8NYp+ffhTtzpppjnNKMbDrA4cgpbA\/Eji43C9zJ30bQ6Fqsam5h3ELmsMfkvI7QymmHeUbbP4eCiwXB5AjRUgYXstAYQ0JousF+rM3mlHKPJbLGc5k7bxo3Fi41ztaRcdkzlRDBxh3bfNLiwIJ5\/ZG5QSpnhKD4rFJqJvf2eLZkziD2+oW+89me5vmJgj0dfg==","pkt_caplen":346,"pkt_type":2048,"pkt_ipoffset":14}
+0586{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":203,"pkt":"kLkxKPrKxiwDYGpkCABFAAC9cYQAAFMGgN2d8BQ1wKgCDBRmwMsu6FWBm9EhroAYALR4iQAAAQEICh5+fHM0zyVKAACGPjOU7IlfFTKKPjLab0u0Lu0c\/GYU8yFjkM7I8xnOpMGAjrGKhktVMh\/nBdnlZwf\/mhw39im\/IS3Ijg85jEeQqx0c70nw4IfDVU0Fhp8yM3s5pQp+TOcIfAZeXdC3zTqfSuAZKMohtUP1hrzAjit0Z1mHAAT1+mG868hgb32bJCH6aCBDPTM=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":239,"pkt":"kLkxKPrKxiwDYGpkCABFAADhcYUAAFMGgLid8BQ1wKgCDBRmwMsu6FYKm9EhroAYALScYgAAAQEICh5+faQ0zyVKAACqgconRJZ3C1y3MKzGWaJkMq4UBEs29eGjwcJ2hVV0AvRmkevce0Hv0H5UhbKiDKQ\/rhUJ0zpsLpnFfyS4i2W4v3m3UWbTK292eF5Wco5w6Ywlyiuym+Hua8PHXgJmpbugOyiLOwe3RJdpXtE+7t1MyUuP11sS6s3TtDP8pdA564GpTNyryrtQz1HmPH\/6hVJ\/77iUifwg+NlpxYb85HTnKCL6o93eXVsQ98U=","pkt_caplen":239,"pkt_type":2048,"pkt_ipoffset":14}
+2291{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhSoYAQB+jtxAAAAQEICjTPLsQefnXq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhUaYAQB+HsAwAAAQEICjTPLsQefnXq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":78,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGxd7AqAIMnfAUNcDLFGab0SGuLuhUabAQB+GvVQAAAQEICjTPLsQefnemAQEFCi7oUqEu6FRp","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhVgYAQB93kaAAAAQEICjTPLsQefnxx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0SGuLuhWCoAQB9vj3wAAAQEICjTPLsQefnxz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":1561455769789,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaxMYAAEARfZvAqAIMHw1WMNG4DZYAhm0oAAMAaiESpEIMCJFuDJOtHXjqlExAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":1561455769789,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0539{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACax74AAEAReqPAqAIMHw1WMNG4DZYAhm0nAAMAaiESpEIMCJFuDJOtHXjqlE1AAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":1561455769789,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaIVsAAEARBNTAqAIMuTzYM9G4DZYAhlDzAAMAaiESpEIMCJFuDJOtHXjqlE5AAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455769789,"flow_last_seen":1561455769789,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0539{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa3V0AAEARSNHAqAIMuTzYM9G4DZYAhlDyAAMAaiESpEIMCJFuDJOtHXjqlE9AAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":1561455769790,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaO9gAAEARHKbAqAIMnfDBMNG4DZYAhoNAAAMAaiESpEIMCJFuDJOtHXjqlFBAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":1561455769790,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0540{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaLgUAAEARKnnAqAIMnfDBMNG4DZYAhoM\/AAMAaiESpEIMCJFuDJOtHXjqlFFAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":1561455769790,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACab00AAEAR1OTAqAIMszzAMNG4DZYAhm7yAAMAaiESpEIMCJFuDJOtHXjqlFJAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455769790,"flow_last_seen":1561455769790,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0539{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaCwQAAEAROS7AqAIMszzAMNG4DZYAhm7xAAMAaiESpEIMCJFuDJOtHXjqlFNAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455769791,"flow_last_seen":1561455769791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaNcQAAEARH6zAqAIMnfDEPtG4DZYAhoAuAAMAaiESpEIMCJFuDJOtHXjqlFRAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455769791,"flow_last_seen":1561455769791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":53688,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0539{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaC9gAAEARSZjAqAIMnfDEPtG4DZYAhoAtAAMAaiESpEIMCJFuDJOtHXjqlFVAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/k4AAFQRMGUfDVYwwKgCDA2W0bgANE7GAQMAGCESpEIMCJFuDJOtHXjqlEwAIAAIAAHuJHGmBnJAAgAIAAABa44EONE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/k8AAFQRMGQfDVYwwKgCDA2W0bgANE7FAQMAGCESpEIMCJFuDJOtHXjqlE0AIAAIAAHuJHGmBnJAAgAIAAABa44EONE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI3v0AAFMRY8Sd8MQ+wKgCDA2W0bgANGHGAQMAGCESpEIMCJFuDJOtHXjqlFQAIAAIAAHuJHGmBnJAAgAIAAABa44EONc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI3v4AAFMRY8Od8MQ+wKgCDA2W0bgANGHFAQMAGCESpEIMCJFuDJOtHXjqlFUAIAAIAAHuJHGmBnJAAgAIAAABa44EONc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI86gAAFMRH9i5PNgzwKgCDA2W0bgANDKMAQMAGCESpEIMCJFuDJOtHXjqlE4AIAAIAAHuJHGmBnJAAgAIAAABa44EONY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIYqUAAFMRzt6zPMAwwKgCDA2W0bgANFCKAQMAGCESpEIMCJFuDJOtHXjqlFIAIAAIAAHuJHGmBnJAAgAIAAABa44EONc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455769,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIblcAAFAR2nid8MEwwKgCDA2W0bgANGTSAQMAGCESpEIMCJFuDJOtHXjqlFAAIAAIAAHuJHGmBnJAAgAIAAABa44EON0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455770313,"flow_last_seen":1561455770313,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51277,"dst_port":1900,"l4_proto":"udp"}
+0556{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":179,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClcA8AAAIRlYrAqAIM7\/\/\/+shNB2wAkeqFTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455770313,"flow_last_seen":1561455770313,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51277,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0540{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaSm4AAEAR9\/PAqAIMHw1WMNG4DZYAhm0eAAMAaiESpEIMCJFuDJOtHXjqlFZAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+1011{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"xiwDYGpkkLkxKPrKCABFAAH0+3oAAEARRY3AqAIMHw1WMNG4DZYB4H2\/gMcAAQAAAAAAAAAAABAAAAAAAACJhKdzsHnuet1Qdz41\/V0LZ6iaR+ompnqOC0UyarH5UrXQ7gahHsgo8fBSar+USGufvh1qJu\/NRhrMD3qR\/SAjm0znSoh6VhewgoYurQjuAFWWewtWrMpeuHL4S\/+0MyTq468+zTecDbZ6EwtoSN0rV7q8TBzNbXoPKLU+8hBZZ+C0Zwhv4pNQvQ73HCap6B8nDrljl1VQCssxIyDoFppm+A1WDiIcrzOwFmAtFZRxfxAwsXnaqMpfV7ETckMB4GqGDHMY9D07KVFzYHB6BDNMqwxrKcvDDDOcXgoLbVnJVRsvDhbsoDZ9LSZ\/DUdboxbtnb0+yVLLEsITqGIoWKkIia7aJcm3+DfUCeopy1IrRGOwSHhGcTRsKeL4Zo8myF1iplt\/QK0IWu1ypm\/fXsMYLI+JQtSzFlXwTnhFMZKGXe\/+5y10FBJa3vn8WHaLeEglFQxibWJAB9Pl\/RPmifsBDlwaKTewkQGv68cDGTBCOjDXY08IucQjkM5PSAZ1gm8bFtFdu3YCSvIUwWcVUUY1BlV1G\/8KITQVBlllroCeNwk8Egd\/diM+uKs4CkbCkQ4jiWkDlVqqBRrvIHMCzzF3cMkNZw==","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/z8AAFQRL3QfDVYwwKgCDA2W0bgANEyYAQMAGCESpEIMCJFuDJOtHXjqlFYAIAAIAAHuJHGmBnJAAgAIAAABa44EOvU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+1002{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"xiwDYGpkkLkxKPrKCABFAAH08nkAAEARTo7AqAIMHw1WMNG4DZYB4MxRgMcABQAAPxIAAAH0ARAAAAAAAADrDCQ6HzbMFOM39WrxTigJ6bRWNVpIf098NWctLXfoUuFV6BsXNV4y1pLvRvxDkRoEYwY31bdOBCgDB0wWXmBgyCfBVvfnGiMiG3M7rHP6ATciwGEEewYNSkp2JPlSB1KBg9hezLqhWInU7mGaoMMG7uFkFTvbLBLPB+0+T8ebOxsyOnAsxK98p2R4dzhNGAEXmHVigUBUFprgVnWl2rMaVZTXFaZjS3wKZ3s5Ad+pVBPmb1zOGGo2SpiCb3db3GZjFvkMPMQsNWpaBw5Y7MAE2IfcFR6BWkEX+tIcyQohX+lCS3KeCRYrK3rRM6C3q33VqaQUiemJRo1FQwg3MIt4tKgKegQAylGPMMckJg9FEaWQ5UwTaHtzoPLtKmT802uKQF8qwTmGU77YORHHqsRsmiaoY5N7fjTRCuNbeE7bFgG0\/Bf0uY1P+WqrYYcz\/DxYA5tRQ7D4FwAL\/EfrUTZ06FY8GsymbW871OEHh3E0e0KVCTCxOCZF7g9UUHX74T6T3kNmWLnJccR6p3KqFG1Rqc5nUHziME+CY2USPfVnPs2XFRufIaEmiWGmHBB4TW+GmwVH154lQatW3wwn+7IaIsuGXA==","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+1004{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+1017{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+1007{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+1009{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+1005{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"xiwDYGpkkLkxKPrKCABFAAH078EAAEARUUbAqAIMHw1WMNG4DZYB4LPEgMcABQAA7igAAAu4BhAAAAAAAADdDtdGgPMQURSC4i+bB8o\/1HG5aAJL4GYSpVwPn0hZC4vErhJCi+kPN6K1LVLgrG\/FYLs+r0XOf7YlQT8r8BJOGL9VPR3gdEgUtSVxFG6TYpsVID13kmoFaMW1FwE7sx5mzuYIGo\/4aM0pexZCXfVvetG9VZDMAyHfEmsAr+6jdX9fi13TuipplahPdNsJxRkUFgpXsKcvV4dAqnl4nXIY0j3ADIisGiGyJTVeb\/k9c4Qhw2lbl80JZNyLGNM1MgbSsmtKKR+pZGDwPBuYPMk92D6pZo8LXXFuE6IT06Spdf5UhFQLG+g7541HA186tU5XWwtc9tuZbbErOBDIebxXeGbfFgNcwCTO29hQ2dpGTTEEymavYdlYu1WcJ058wAhf6SAVz2a5I1uyDGEkppEI4YkyEhwc+jPsjEtp9Q8RX5XOLlnxxfwPalknHJZMX1u3Op1NMOx5DTlKgT\/BBDBBVjyIN5VOMVHXQR586sl0Jl81dD1+D1wYsCX9Q69otSDvyetlL54WW2FO6ynH12YX0VXgYAc+IigmUhZgEm5rWZuNBxx9yeEzJ0hzLD0PhkTwkFI9A5ypd1XGQSD+BkQ+oS0nZA==","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0374{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":48,"pkt":"xiwDYGpkkLkxKPrKCABFAAAizsUAAEARdBTAqAIMHw1WMNG4DZYADqpXaGVhbHRo","pkt_caplen":48,"pkt_type":2048,"pkt_ipoffset":14}
+1009{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455770,"pkt_len":514,"pkt":"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","pkt_caplen":514,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455772049,"flow_last_seen":1561455772049,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0783{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455772,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqwAAP8RG\/kAAAAA\/\/\/\/\/wBEAEMBNNtQAQEGAH5K8tcAMwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455772049,"flow_last_seen":1561455772049,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}}
+0550{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455773,"pkt_len":174,"pkt":"AQBef\/\/6kLkxKPrKCABFAACgzaAAAAIRN\/7AqAIM7\/\/\/+shNB2wAjBq9TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455776,"pkt_len":175,"pkt":"AQBef\/\/6kLkxKPrKCABFAAChemIAAAIRizvAqAIM7\/\/\/+shNB2wAjbrDTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTlBQUENvbm5lY3Rpb246MQ0KTUFOOiAic3NkcDpkaXNjb3ZlciINCk1YOiAzDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455779,"pkt_len":143,"pkt":"AQBef\/\/6kLkxKPrKCABFAACBKKcAAAIR3RbAqAIM7\/\/\/+shNB2wAbVXRTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cG5wOnJvb3RkZXZpY2UNCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455780,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInq0AAP8RG\/gAAAAA\/\/\/\/\/wBEAEMBNNtIAQEGAH5K8tcAOwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455781247,"flow_last_seen":1561455781247,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":53688,"dst_port":59491,"l4_proto":"udp"}
+0426{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455781,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIyagAAEARnszAqAIMATxOQNG46GMANIouAAEAGCESpELJdbow6qY0UK1Q3DAACAAUjCUqyJwTIDkKR+sjy0Uf5fkPaoE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455781247,"flow_last_seen":1561455781247,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":53688,"dst_port":59491,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455781352,"flow_last_seen":1561455781352,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","src_port":53688,"dst_port":32641,"l4_proto":"udp"}
+0430{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455781,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIUPMAAEAR0s7AqAIMW\/w4M9G4f4EANAIPAAEAGCESpEIZqLFMH0mnKh34iiEACAAUNcgqBRg9v\/os\/sidMBIfN2R1dO0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455781352,"flow_last_seen":1561455781352,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","src_port":53688,"dst_port":32641,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0426{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455781,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIUTkAAEARFzzAqAIMATxOQNG46GMANHzbAAEAGCESpELHuuAP05RaI+J6URIACAAUsHZdEyJr5uObsKQa7DYbE4YCA9M=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455782,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI8PwAAEARMsXAqAIMW\/w4M9G4f4EANE0kAAEAGCESpEKAWzwjt5VRcfVmBmsACAAUJw9zjdQvQsjy5FQih0Itb6wHKg0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455782,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIwHEAAEARqAPAqAIMATxOQNG46GMANGXPAAEAGCESpEIoM9pd\/2PDbhKoL1oACAAUvqQBu1i76V7zg0ib1\/6QLghtUUY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455782,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABINRkAAEAR7qjAqAIMW\/w4M9G4f4EANKRJAAEAGCESpEL4j9YAEpPJGTu3VCAACAAUGXORRrB48FGvPcJutSVccHGlcxM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIsaMAAEARttHAqAIMATxOQNG46GMANHtxAAEAGCESpEIVyYRJkvEHQDbjhQYACAAUZX4tAsQf0pHGsCjjkogdi3Laxls=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIAp0AAEARISXAqAIMW\/w4M9G4f4EANIWbAAEAGCESpEK7pDhewrPJPGinrSwACAAUDjWxbcggz7kXknMp3MU9Yvs9ftw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIi6YAADERpxtb\/DgzwKgCDH+B0bgANIC7AAEAGCESpELmDdRM\/MC6WEQIBDAACAAUFJ5Jo0QxW+Y3GOxMikLa0AFDz2E=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIJ4UAAEAR\/DzAqAIMW\/w4M9G4f4EANLqiAQEAGCESpELmDdRM\/MC6WEQIBDAACAAUXdG9xEvA2Brcy08x2LKzDxpWCwg=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI6JAAAEAROzHAqAIMW\/w4M9G4f4EANCUhAAEAGCESpEJH9o8VuDhceVAhx1gACAAUBSZjhaO52rmUAZOToD7idCnkrjk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0545{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":170,"pkt":"kLkxKPrKxiwDYGpkCABFAACc7CoAADERRkNb\/DgzwKgCDH+B0bgAiGKskHgARgADjgDewLChdG8AAf\/7AABmRB+tC06YHsiSvC0690xmTdG43UbkvbVKm24SDMcXTh5fDRqY29F4RY1utVkKGlmN1U8BJ\/SgS1FK4nWnGOreSOe4OZB0n0mCMg\/XNFVgUZ7lgjoOpFZlngfgR2x5weOPz0cGs9bazVSMR0w=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIx8wAADERavVb\/DgzwKgCDH+B0bgANFdVAQEAGCESpEJH9o8VuDhceVAhx1gACAAUrjI3VijqSSmCw9QGLivT4E+6NiQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":179,"pkt":"xiwDYGpkkLkxKPrKCABFAAClXtwAAEARxIjAqAIMW\/w4M9G4f4EAkSZ2kHgATAAD+YABicwWdG8AAQA4AADIUTlT2xYC\/InWQVAPC7gNJO0tjLX7n2VB+H9d6x\/3VSjvddGWgBbzJRTseCL0rTq30Lw7ekR35POg\/9wyfOaJBLdfT40pPc5Is\/DxeJwnQ37939RE2kdN+rXtoZfOXX25Fju41UVVmFU7aS35OBfWzXNupgk=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0536{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":164,"pkt":"xiwDYGpkkLkxKPrKCABFAACWVlkAAEARzRrAqAIMW\/w4M9G4f4EAgq04gcgAEgGJzBZvDY6kmVL8yYiX+NpRuernioE+3xKnbwLsgQxR2sjavFH90QMlrwYqQVJf7oZEf4vo2ywv4V4gfTFmMZ7\/Q6Z2QFTquJDYWUMQj+GT4SiRJct6XSB10Zq7k7IS9NxCfGe6zTCngAAAC+dYfPfL1qimAuE=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":144,"pkt":"kLkxKPrKxiwDYGpkCABFAACCQkwAADER8Dtb\/DgzwKgCDH+B0bgAbpKikcgAEjqGnCfOmPLqca5RbqAPI0cyTAzyHd6ti+a0E+qi5eOJECU0aoizEIOar5+khoxsvZ3rjFR8phG58PA3NtAUG2HMDz+6NhS0CbyhbKVuDJxAMVff+YAAAATikAylI1LU4A5A","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+1554{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":913,"pkt":"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","pkt_caplen":913,"pkt_type":2048,"pkt_ipoffset":14}
+1553{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":913,"pkt":"xiwDYGpkkLkxKPrKCABFAAODJ04AAEAR+TjAqAIMW\/w4M9G4f4EDb8nSkGYApQAWcC7DllpZ3r4AAjADYQAYcQNLy9ueWPtnuOyt17XctVY4UovtVp4EGepglY7HFaehxq+Q4xmcjz5qxJn0gNBG6vYi\/j+k8Elu8N9q0LtjAkaWu7BfinAgXiHGcaVWhSv7Z9Xx62VaBqerMvpDIZxiOFb75O+kvw7pz69wZaKqKnScU\/432Ne4n4QpSSLGwNMRDJciTPcUCXCGOsO+c6WzTVPebjVtbe4T7BLcgfCWJBjk3HhTyUVckVrSRx+DTpThgqWnHi0rnNhGcwAq3rvoFrbXCbvxkBKl+G7xyK20MK9SfJV7PNyJ3NR2\/mI0cx6onwqPm8uFgcHv5cd6592M6RURiEil9w79QLjqWLnMhZSivWEP8gUk8LSSQAv2t+wSgE\/4w9Yd90CXC2GW7iGYkr6D8A30ZIInxPkNFoFa\/\/viSFekbIIgFTT3NNyLhDRbKbDyGGhcYmkwyg2e+v5zkfpRO6\/moYOAtP89MzKybIvMdWOo4NaTBYoQ8XxU7A\/NaTowMwaiEXmjMM39CYckZZJctiNYcQY2bq\/bRPtSk17rFOwFv1pntTBDw\/jm96850gq4hl0m2fjW9et9SwA+Es8pYX8XDqBRIe4bSOEwU1mjN+u7LqcP\/5SRnjBVrYoeFWirCeOy8FUt2XuDkISyCKMppTKveheU+pItthDAQp+cY\/WuUwxFmBFcHjKcsiSTnaUC3Zcd8jD1Ss0xRkJMPjxOanU1lhdjgJQF6UA8IIwKQSbrni7ivBCtH239RIccdwYW\/E9H9EBykr62V\/rX3VvOWUPlM1nGmKy10ysG6QEasDRHcHmsVKPOgvdDbW4\/ndWmjTML6uJvUcTYMhWpoGQHI17IsVLDfxiO7Bwa1vUKOXb7moOy\/ARcJH8SUNw9l0VmKtoq5+9r0HEjclBQFThDtVLfEH2iOACrwV3IZV2DHips4+uLuA6uHoFnfOg\/XdDzVra7XjCJptQmyD9TjgfMDe8+pV0qE6klmqYDMXA8pO\/KioujLXWWZ9DHmDEN9uzJCEYGHJ1Y6xETtl3dKReprxkptHRniDZuXfQwnakh3X2iIXetfe99i9cLzU1fZmvLgcr0uKgHZ41hT6OXCSbVucQmwlgLPziWQklz5SgfeAy8XOcTifg5qDDnYvHoNA==","pkt_caplen":913,"pkt_type":2048,"pkt_ipoffset":14}
+1550{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":913,"pkt":"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","pkt_caplen":913,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455783,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABICZUAAEARXuDAqAIMATxOQNG46GMANOSYAAEAGCESpELddkAJ1F+LPT0EgzwACAAUXmgJtoJkdYveryQNIL+PUoNUtYY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":702,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455784,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIZ10AAEARARjAqAIMATxOQNG46GMANCcnAAEAGCESpEIj3XkG8YKTfumrO2cACAAU6blUiL9REGgUrCAn+fBDik0yMhM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":759,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455785,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIAhwAAEARZlnAqAIMATxOQNG46GMANIOWAAEAGCESpELiTBMRfqfJFlAu70AACAAUETfw2Mz3GqSutzo\/jaGh5v\/ta3Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":813,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455785,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI\/SoAAEARa0rAqAIMATxOQNG46GMANEXyAAEAGCESpELUGmRM4v14M3+SwVkACAAUtayjNCZzPKH53T\/nbmuRrjaNJtY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":914,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455786,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIzVYAAEARmx7AqAIMATxOQNG46GMANF\/EAAEAGCESpEIZ4CVqeKeVT3p7HUAACAAU6Kbx\/jNowHL0MvzAfWa9g7vNcsE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455786,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIn+AAAEARyJTAqAIMATxOQNG46GMANAAbAAEAGCESpEJKPRR9wXq\/Tr8FSnUACAAUeIBw4gXxXCGcyc2sVr33kFFSLwk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455787,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIBh0AAEARYljAqAIMATxOQNG46GMANCDcAAEAGCESpEKJVb4NwlVAQm0FxDsACAAUuCOcZYtOcgJZwgV2vzy6J0EMZhM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455788,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI\/F0AAEARbBfAqAIMATxOQNG46GMANNfSAAEAGCESpEKvI2c39QUgFzVb5CEACAAUbZIeVdIs8jv1EYIMqW3zGOiTBF4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455788,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI\/V4AAEARaxbAqAIMATxOQNG46GMANAWBAAEAGCESpEL9J7xmYK5cDifcwVEACAAUqNPdEYZoQK\/V+H4fwJUlvZ8d4i4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455789,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIcg8AAEAR9mXAqAIMATxOQNG46GMANP1VAAEAGCESpEIva9dDDm4yI7yH5UoACAAU\/jrs9XS9h1GzkJiayrGB\/RlA7es=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455790,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABImzcAAEARzT3AqAIMATxOQNG46GMANNL1AAEAGCESpEJXW7ZH0lh5LwkGSz4ACAAULT2Fd3ym5658dK6thlww0X1Ddqw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455791449,"flow_last_seen":1561455791449,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0835{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455791,"pkt_len":383,"pkt":"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","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455791449,"flow_last_seen":1561455791449,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0831{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455791,"pkt_len":381,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAFvmCUAAEARWwjAqAIBwKgC\/0RcRFwBW7HJeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAxNzQ1NjcxOTM5MjIwMTQ2OTg4Njg4NzAzNTEyMjAyNTg3OTI0NDMsICJkaXNwbGF5bmFtZSI6ICIiLCAibmFtZXNwYWNlcyI6IFsxMTgyMzk1NTczLCAxNDIxMTE0Mzk5LCAxODA4MDQ3NjgwLCAxMzcyMDkyNjA5LCAxMjUyMTE2NDI5LCA5OTQ2OTc3MywgNTI1ODAwNzEyMCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNDUxNDcyNjU4LCA0MTc0NjUwODgwLCAyODUyMTYwNywgMTQxNTYyMDM1MF19","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455792270,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":65025,"dst_port":1900,"l4_proto":"udp"}
+0560{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455792,"pkt_len":179,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClb\/UAAAIRlaTAqAIM7\/\/\/+v4BB2wAkbTRTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455792270,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":65025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0541{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455792,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaNCIAAEAR8gzAqAIMuTzYM9G4DZYAhkjkCAAAaiESpEIMCJFuDJOtHXjqlGBAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455792,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaRxUAAEAREWnAqAIMnfDBMNG4DZYAhnsyCAAAaiESpEIMCJFuDJOtHXjqlGFAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455792,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACafQwAAEARxyXAqAIMszzAMNG4DZYAhmblCAAAaiESpEIMCJFuDJOtHXjqlGJAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455792,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa1S0AAEARgELAqAIMnfDEPtG4DZYAhngiCAAAaiESpEIMCJFuDJOtHXjqlGNAAABmBQMCyDZF2ddgtlA0UBZWUTgM5bMiF47oTfkR8gxwf\/X6xPiwJonhfyRnCC\/1O3gjqwa36NKC7reorVrW4TGrS5w3rc3nItJV\/XceDJIdYAVMp2RD9UKe1LYtRXT0bfL9vCinKf9\/","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455792273,"flow_last_seen":1561455792273,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51458,"dst_port":1900,"l4_proto":"udp"}
+0561{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455792,"pkt_len":179,"pkt":"AQBef\/\/6kLkxKPrKCABFAACleZoAAAIRi\/\/AqAIM7\/\/\/+skCB2wAkenQTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455792273,"flow_last_seen":1561455792273,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51458,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0551{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455795,"pkt_len":174,"pkt":"AQBef\/\/6kLkxKPrKCABFAACgOnoAAAIRyyTAqAIM7\/\/\/+skCB2wAjBoITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","pkt_oversize":false,"pkt_ts":1561455795,"pkt_len":174,"pkt":"AQBef\/\/6kLkxKPrKCABFAACg4VAAAAIRJE7AqAIM7\/\/\/+v4BB2wAjOUITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1561455770313,"flow_last_seen":1561455779337,"flow_tot_l4_data_len":535,"flow_min_l4_data_len":109,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51277,"dst_port":1900,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1561455772049,"flow_last_seen":1561455780246,"flow_tot_l4_data_len":616,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":6,"flow_packet_id":5,"flow_first_seen":1561455769791,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1561455769790,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1561455792273,"flow_last_seen":1561455795276,"flow_tot_l4_data_len":285,"flow_min_l4_data_len":140,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":142,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":51458,"dst_port":1900,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1561455791449,"flow_last_seen":1561455791449,"flow_tot_l4_data_len":696,"flow_min_l4_data_len":347,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561455764448,"flow_last_seen":1561455764448,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1561455769790,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1561455769789,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":113,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":2,"flow_packet_id":493,"flow_first_seen":1561455769789,"flow_last_seen":1561455792270,"flow_tot_l4_data_len":231913,"flow_min_l4_data_len":10,"flow_max_l4_data_len":1147,"flow_avg_l4_data_len":470,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":53688,"dst_port":3478,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1561455792270,"flow_last_seen":1561455795277,"flow_tot_l4_data_len":285,"flow_min_l4_data_len":140,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":142,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":65025,"dst_port":1900,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":10,"flow_packet_id":893,"flow_first_seen":1561455781352,"flow_last_seen":1561455792065,"flow_tot_l4_data_len":654475,"flow_min_l4_data_len":34,"flow_max_l4_data_len":1301,"flow_avg_l4_data_len":732,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","src_port":53688,"dst_port":32641,"l4_proto":"udp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":1,"flow_packet_id":133,"flow_first_seen":1561455767339,"flow_last_seen":1561455795283,"flow_tot_l4_data_len":16046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":120,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","category":"Chat"}}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":1,"flow_packet_id":133,"flow_first_seen":1561455767339,"flow_last_seen":1561455795283,"flow_tot_l4_data_len":16046,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":120,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap","flow_id":9,"flow_packet_id":18,"flow_first_seen":1561455781247,"flow_last_seen":1561455791996,"flow_tot_l4_data_len":936,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":53688,"dst_port":59491,"l4_proto":"udp"}
+0147{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_video.pcap"}
diff --git a/tests/result/nDPId_wa_voice.pcap.txt b/tests/result/nDPId_wa_voice.pcap.txt
new file mode 100644
index 000000000..4c0b15b6c
--- /dev/null
+++ b/tests/result/nDPId_wa_voice.pcap.txt
@@ -0,0 +1,281 @@
+0360{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561455687942,"flow_last_seen":1561455687942,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455687,"pkt_len":74,"pkt":"xiwDYGpkkLkxKPrKCABFAAA8VCwAAP8R4ibAqAIMwKgCAcjnADUAKL4MZG8BAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1561455687942,"flow_last_seen":1561455687942,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455687,"pkt_len":90,"pkt":"kLkxKPrKxiwDYGpkCABFAABMq4sAAEARSbjAqAIBwKgCDAA1yOcAOH0WZG+BgAABAAEAAAAAA3d3dwZnb29nbGUDY29tAAABAAHADAABAAEAAADaAATY7yZ4","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1561455687942,"flow_last_seen":1561455687944,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"www.google.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.239.38.120"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455687991,"flow_last_seen":1561455687991,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455687,"pkt_len":74,"pkt":"xiwDYGpkkLkxKPrKCABFAAA89ksAAP8RQAfAqAIMwKgCAe1dADUAKOSmDHcBAAABAAAAAAAAAWcId2hhdHNhcHADbmV0AAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1561455687991,"flow_last_seen":1561455687991,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"g.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0462{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":113,"pkt":"kLkxKPrKxiwDYGpkCABFAABj38gAAEARFWTAqAIBwKgCDAA17V0ATz5mDHeBgAABAAIAAAAAAWcId2hhdHNhcHADbmV0AAABAAHADAAFAAEAAArzAAsEY2hhdANjZG7ADsAsAAEAAQAAAEEABJ3wFDU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1561455687991,"flow_last_seen":1561455688018,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":40,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"g.whatsapp.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"157.240.20.53"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455688201,"flow_last_seen":1561455688201,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"17.242.60.84","src_port":49354,"dst_port":5223,"l4_proto":"tcp"}
+2349{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0530{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1561455688201,"flow_last_seen":1561455688201,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"17.242.60.84","src_port":49354,"dst_port":5223,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","category":"Cloud"}}
+2348{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":1506,"pkt":"xiwDYGpkkLkxKPrKCABFAgXUAABAAEAGJCjAqAIMEfI8VMDKFGdIDym57pIeMIAQCADYpQAAAQEICjTN8KY8skLCFtVfgrozcBhAJsfsFvLQO\/UNbKaPAKskPEHc2H7HNZvZ0KHfZ\/KP+B9OyPm0SdMSjavTXp1RBX4n8dtnNy7ldwySyG0XJJWeRoZiiRtgXrZdFFD0QAS3Pe1DBo\/FUctyy9XBKqwrw5v92Jj5UtBctOxUvfejQ1SPTAJ5IukXOUTVRhF+GJ6uJpn2Gyv2J\/hXj4mZyNeIliL2I7bOA3ury1GpGWko+MWMnPSKdWfc+5iZ8htj49VB2VDsL+uaCsidGqZX708pkKajJgAtzAX6+OwUhPXab61vOJn2ZVsE84On3Sc1Kl0WWtXgaA5Kty9ym4wLqQYEYP55F5oeJX4cTBOZRUcxhyM2DEPfiJE4aGH7aPKJO1JXXtoaeR6aRsid5OY044cRXoCwjbqa8kVLoyG\/1hSUaMwK17Rm6Nq+PbrF+ED8fmHgN\/1Dutcz+R4xma\/dfBoQDryBVCTEwOthrl7LLjRmNDBA\/nKPrgUx1pUPyir\/k\/cBNu5VmA9ROEDXJTcYsaqkjSroNougihkTVcfxMwA0V1eozYWnylZYZfyg3u53u+M+Do2uu\/vpHb6ZX\/5fq7AfMO72tRX4kcflTeOHJPV42uX70ZwC1O+A2X8wG0wRrb8uK6OFhHts3S52N3FVIqWr3CBOEKtXus3msBLphIaEqtw7dKWimDDeKkgZyeDybQGBbwSqGgwXI4sXoyN6QNVYT2T4i6kGXwJ8KRo8HtR5yB7rhqGJ7va7Tq2PlcpSnVIQRwao1mofCncrFLbOpoxslAuFLv8G+fW1GEiueEIhAplFAErT8lEbc6sY9uI88S0O6mDpNBlvCBLanRfw12SWljEVA4Wh2w31ojL9SCLJgyYKb3rrXT3V5i0AGJxXutmEyz9yTXUcoSU1YUo3WfmVLfx6RyxgbfoU7yfB7G33wI6gfsYIkzsYXlIla2ZkFjlWmYTCmfyEh6mVsXCVMnp1BhZdWj+7bWgfM4VrhMG0uNxDM0Z53kq9r7jYLXP1URavTKVNjY1WxQ1RAuRJtVPSgtQELf6AAzGAMW947SHl7bPC94gub8Kmqytrgl8ICRtP21Twca8YlwoKzIkJ0ROGsHSJ1IUBnknB2X57XNTUY80EyrwKOEYdXqBbK5\/uwztG9gvPjPu8PKqPu7OCXZj1ZBnnEX2PjjdGe8\/qo\/GKpAlJAuol7xe33zGz401h7+ux36y894Mbarjx1CDQxx9YqwY6Lr4EHSyCq\/xOaCM9Ig4AmEcFYjNP6niCHmI6fO24v\/GQB6WXdzSw2ClyCXHYbvr4Qqi+4qXoeh2xXDeKjcBBfLtEOni++s2q3gzhbAvkZLj\/NmeA2TXw0Z3iDbzj8\/Y4RPkg+eKwZkIo3UDfKsFnJdpryN60+cHgLr\/4b6yqkGde7QP698bVNcwUBDmhcPTGUF72BSrLQvrtwQZtWbAZrNkztpBLnQ0QkqUG4rCER6dvRqYMKv5dFfseMTa1Q1gUuqPbbz23yUKTRtop\/\/Lht4EEFlQYsfbz48ddhpIGiMg5mZbcRDG3SabEXgtzSNVHYYfQC6vW4pikjByoIlKAdhA6SR3Oh3PU52UQkf1H00x5\/\/1hV8lcpLckyN2LNUVFAYrwz5do38QxPssBrJ+3S6\/aEGPegc3B67mnX5V9KdAWJTKT9mA6BOcYDIvqCcaofS9sLdAjWNazl\/6YRqmsk\/JZn6nsHta+t4co6kKrh8ZoenAhtwbNaOVmExbItteeviDeqFUd2pkhp3kXIT8d6YMdXIloWHR8vT7oGOwNL5sNWFZXjAeqyXFLohZVoKLbw4szdHzrmDOl0IHwY6y6lYvTSYc6OyNhkaHXFSCKUjvAFZPuWmliraxAT7phw5quixNUJhdRcYng0LMN9J3KAyHFA8Ber5WNyIqMxWZ5wh4eVaY0B\/wQ","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2009{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":1255,"pkt":"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","pkt_caplen":1255,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0TxoAADEGKbAR8jxUwKgCDBRnwMrukh4wSA8vWYAQAYNbPgAAAQEICjyzTX00zfCm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":119,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTxsAADEGKXgR8jxUwKgCDBRnwMrukh4wSA8z\/oAYAZklAAAAAQEICjyzTX40zfCmFwMDADBBMeYgtgt9IoqVyG19Nwskqr7pCCl5Q+uac6KaMFU5rnqChCXfQ+g55lEPhVLxVNw=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGKcrAqAIMEfI8VMDKFGdIDzP+7pIeZYAQB\/9PtQAAAQEICjTN8Ng8s01+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455688445,"flow_last_seen":1561455688445,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0436{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABI7iMAAEARBjHAqAIBwKgC\/+EV4RUANEtUU3BvdFVkcDC64ScQKi2g\/wABAARIlcIDyUSzc\/3fJAksKuG26pMF0apN5Ek=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1561455688445,"flow_last_seen":1561455688445,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1561455688704,"flow_last_seen":1561455688704,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp"}
+0415{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":78,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGxd7AqAIMnfAUNcDLFGab0QrZAAAAALDC\/\/8eGAAAAgQFtAEDAwYBAQgKNM3yoAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":74,"pkt":"kLkxKPrKxiwDYGpkCABFAAA8AAAAAFMG8uKd8BQ1wKgCDBRmwMsu6BkVm9EK2qASbHAbGAAAAgQFeAQCCAoefUIDNM3yoAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455688,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxerAqAIMnfAUNcDLFGab0QraLugZFoAQCAytcgAAAQEICjTN8zsefUID","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":322,"pkt":"xiwDYGpkkLkxKPrKCABFAAE0AABAAEAGxOrAqAIMnfAUNcDLFGab0QraLugZFoAYCAzMiwAAAQEICjTN83QefUIDRUQAAQAABAgFCAJXQQIBAADuEusBCiBs0lNzQCsv7mZcQ2g9JM5uc6RaWdA0Z64D7QJcOwjYQBIwJmlZLwntGSmIUxkxmNU28MJEcpB5OO0bQ\/MwTSXlPLcL0EAJwIPtRK4BkKxQEm8yGpQBpLbkwMhu60ti3xyo\/m+XNYQLSmvCZ+cyrvXBWv8GYjuw8tYDgMacJ4yVZ+X9ZR3kf2p2m9XmrT2zaBZrBe+6EOIG0o6LyS8qOT0UE3nWMyWNJfTas6N87sRPyREaOk2FytfLtO+4712zSQlNYUuRQxaykkbGBTBlWKUqb+90F2R6MgcPFF6d9coTYMiRbWh0F9ty5g==","pkt_caplen":322,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0cPoAAFMGgfCd8BQ1wKgCDBRmwMsu6BkWm9EL2oAQAHGyoQAAAQEICh59QzY0zfN0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":123,"pkt":"kLkxKPrKxiwDYGpkCABFAABtcPsAAFMGgbad8BQ1wKgCDBRmwMsu6BkWm9EL2oAYAHGeqgAAAQEICh59Q7k0zfN0AAA2GjQKIMn7JvHGavuhqVdYd1vca\/IJQIYKLMyQwSCH\/fsSv8x0GhA0tnde03caXwjAuznSL\/08","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":117,"pkt":"kLkxKPrKxiwDYGpkCABFAABncPwAAFMGgbud8BQ1wKgCDBRmwMsu6BlPm9EL2oAYAHF4YAAAAQEICh59Q7o0zfN0AAAw4pUZJKD3\/ErgOwmuDOgFuwgwSIVAHnDAwC6kJuXOJaZ7mvcLydOdTpuiyiKA7IGm","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":151,"pkt":"kLkxKPrKxiwDYGpkCABFAACJcP0AAFMGgZid8BQ1wKgCDBRmwMsu6BmCm9EL2oAYAHGJEwAAAQEICh59Q9c0zfN0AABSloYad50DCrHNU3CtOiJcVxFMqGwUsvuNrw\/NsvDrYT0f0qsFbtZuaeD9guVJ4i0o7gRKLs4+lCX\/FNQHYpCnMo45eos928+1PCmAjJ7UofRPcg==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+2279{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":1454,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgcP4AAFMGfICd8BQ1wKgCDBRmwMsu6BnXm9EL2oAQAHGI2gAAAQEICh59Q9g0zfN0AAmkdj7sPn0GT99AxZ8jLE\/HQ1mKLEFTkCRctfqMKGSNnX38tmxd4Gs9ZGOr+e\/+EE58DQjZz7UfdZHZYI3Vg4Wg8C7\/6I1D8xpQ+i4Ff38\/K0N6hhprWRnwznJMPoyr6FYEb1vIc9P2hjlSlfq2l8MmsDlbFGUnHFp7pX0oburxVGar3TZ\/\/MyGDjuyDIWGinGxLtr4HNpwx3v0vV6izHk1OSUJgHbfKcaYbmo4ReAogQrtTBE7GGfcXbsS8bGv6qk+InEdnTnmMh188wPsjWnS5YIfJl8zrAaXRSPjBGszBrVM64SHGJdqTIDm+bT3Vf+036wECPYxUCl\/9MDNUU8nMrhM++Jx7FK3DAWgWBbMA\/5m1FNVtcrw7vzPoYNujlC5EBI5GiWKhfoqMVjo5b+BpXpx9H0HaXt0v5Scfo4KV003MU6vBP44X6O2j2J8NFtlHdhz8sjCW2MWTtX4jgTHQBYnSNb+5jgSY0pd5VM0fTIimMbyT0tqdFe1oR7NZccaE0yykXWVSlwWaBrguXUTDN0GCiUqicRuKz1vFk50DQO8ztm4g9Oohumj09q5VhGvHdg9Cg1QlB8MUpbX21z9i4pQgsoDzQ7pH0xej+jp\/p0MDyiRMem9lL0mqEyymn5CgWzoJx\/1VBZrLevwKye+\/dFy5YeftC3\/LVi2yai\/44STHWobGUNHxCnWqfMA0frAxOuhU1eAnRKUUT8FO4lHypTW3UAgx9NRv4Wo1arBC5AFCxrokk3OCVe70lutXevJvoDNr0Tc1PwwY85rDhgvcNMcbEM51msFQFD5vcpC\/iRuTiv44tKauxMFAjTCinfvjqybQGCnG5WVW5pXOu2FlMC47Cynu3ofPa0X7uT0cZD+aIbI6BlIlfLA6HKp2UjPCQJF5OVgOWcE4ugcLN4KsjhRKKUvIZqhRn6ff9Vppo4YNKVIYGqcCeXHzgyTJD6gaWLpKc7R4ahM8F+X0UPK\/eTvjiKRyw7i8s\/PA4wzd5Xgn2u+4Aqh+k2mRv027TldOm7HpabStjoFxfhdKMwlGNd\/5z87lBmnaeAntaV0YWHU6SVZ6oUpYVwaF07Wc1ut24zztXNL1ZWlTsMkLD9gruwbI+2O4CQIYkX\/6iVHo6txn61Zdodi5UOi6mwKk+4d57YYX6KVM7HiWfOCE3fF4S0wCtUW2jtYm+q+wt8\/A+cSPGpxKs1xUYTjV65ZFpGo5JPgPe2ficXmYXNQVl0iBsq4dFZMxjeKp4NMjRL0efENmNYRxUlAFBPHM9Z8Yk0FOLxFxBULBdU\/BlafgDMmSgGkPmEzxMu+NJot\/PE8z+8Cg0dv6\/YnkkPOtaSiBQ0uin2TurQelKDcAXch+l5PdZyWC+0j4+UKD12EAL884GGA\/zulnkwEsuQwbF7pCAMoSVbcSRXUL6wvGN\/0yTqFwa+dGhUu9ClfoR5Ed+ZfJKuwH0G3BClYHpO6ZhRn+hURVE+XXdS4m0iSxs4DRBw5v95MgaU5FdHJ93YyzPc4LoYfTL2GHd4MY0KOr5M2hUUCcltWh4gibcAqDsrBpVmVv7ouX4pD8iWaQEAWBJ7fpq2ts1GBKTHLeHjhkmFA1EUtAsAeq769u7n9dQQxvFgr8\/hwdESqAcG9Xctnp9l+hCLCybd87JnIlH6PpDJc74SBPRTjoEvbVA21I4NvkvF2JB0NlMvcJ6kByq5SYqy7uHD+QFCyt6re4m47M0SITfBHbdXjnMo6jwkxdV6Dp3zhffvMRWKxKyox5SFcx7QpKkbd6KgckWEciTBqylRIl4uuDD+727kL4gkI9PhOgOtUlMNW68pDnsf0AHLlSjZg\/Mzbbrr0Ms53dc8=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":106,"pkt":"kLkxKPrKxiwDYGpkCABFAABccP8AAFMGgcOd8BQ1wKgCDBRmwMsu6B9Dm9EL2oAYAHEubwAAAQEICh59Q9g0zfN0vJVKMJsIZooHCxX3HwgTQtkI1Piq8VyI9tqMWMJzXMtRNDo94R5hDw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+2281{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":169,"pkt":"kLkxKPrKxiwDYGpkCABFAACbcQEAAFMGgYKd8BQ1wKgCDBRmwMsu6CTXm9EL2oAYAHGpDQAAAQEICh59Q9g0zfN0hXG6s9MhtEG+8d2FiCmcb\/SkMAUbgGpRw4RDiog0H0OPGl7wmMH6J6qd46CjOmsl\/29VKEyxxNd296ezERHdRwpZDfUDvEPvMSrvs69VczmxnvZq+3EZ3vzr0n7vbz5X6HcVd8mLZQ==","pkt_caplen":169,"pkt_type":2048,"pkt_ipoffset":14}
+2287{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":178,"pkt":"kLkxKPrKxiwDYGpkCABFAACkcQMAAFMGgXed8BQ1wKgCDBRmwMsu6Cqqm9EL2oAYAHHWpgAAAQEICh59Q9g0zfN0OmD+snV1QUhqItc7CZBQmsG6qZYUD1Z6WHk+O6S+J2qqFsZKWh7S\/FBIrxbjGtydUoqTdUJzETbYyVuUlCBNH7egwhJx0ddumHZlEir2k+KjhenSaBvgdPqOElvcisAIjGuRKR+Gh+VleoERAQquDA==","pkt_caplen":178,"pkt_type":2048,"pkt_ipoffset":14}
+2276{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":1454,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgcQQAAFMGfHqd8BQ1wKgCDBRmwMsu6Csam9EL2oAQAHGDJAAAAQEICh59Q9g0zfN0j00kD7SW47vpxLkGozFihiVHS84IOEIZ4S8w+pvhkI4\/BVPnMsu7keXoL493PG4Jl94mip3ZYMBXk0tzcxBsugkacLva6p+\/l9Ai4U77Xu7ts\/uFMCxxoRjCgcN\/3abOTw7N\/kRx+RhOrYwoq8rRMCqlUvDBqFAj10JdY6DJhmvLJlse2k9rMuixA3LoDW2+YSjX6RE0TOsMgivknvp8OpgqixA9QfIZ29RNEZJHEfRHvv8WUGRGI4DC5QUbOAmvnrpUWSwma3mVGFQT84CFlrEXLA1PMEMSRVDLOunbvTbivqIQkojlxXim7s8ZS07plo6AFOBloQ8gVaqHhZF6Wn4CIYkFuQUNvSDxEOypAKKhj7H4kMiZJ1UQ2Z1fxcys83bOxOj7emx2V3aeoIGT0\/ueprJ5LcJSQMZpEAnaDnQc\/VaEFzRb971FV8zqAkJSYizTV5x+JUvvy9xXIMqn\/3fQbQUmv4v1w3Slrt6EpOUdN8P50D34oF6OYFbUkFztGvx+Shr2reNIJIEbqzscAMhZ2n\/wNndDVNqvuB2sj6lsd07u17prEMI7kSFMn0DTi1FACMEvfe5Mb74VlY\/HNTVinIWOkse32EgSfpXV8cbvDOkZe5ZKJG69923K5xLmUKXpYyIvkR3e7JoSITZuahaMUANfyBSFxEokn67s+ECk\/ssch+u5bfqsg3XvCKFAFnx5tivzoDbhvvAl6INch9X1rAEZNcqHBqiwJPFMMVj39syFXYg8dDE35EtV11JaMuM9FtN5HnKSF4YcmhkWAYGjUNKDcQgs6E4NESJzNqtaW3VxC1mVGieihYnQ6HmR29huWMyF9qLObApw9iuMne4NWo4W0B51AN95npmBmaYCoSYfn7BHgFHCbeoLN7NM5NbbLQ5kTIq93TvZr8e67pIeNREdh0OcCN52mIP4nRNZQjGCVNXsE9odeo1mGqr\/rl5+KrQ9Fgt66Epj918esPteMZ6ztV4ajtwc7YhiTc8EuPiCZ0DbE038c\/5ImCKaqpahBsfMxcUkfridm6dlIJiaPiAAh5+7f7ntavun4Aeuj2ytX5STanePvtyxDY5DKQ0m6f9hs3Hxqdh+oo9Z7+ITcmY6SofZV0f0ej7sl5bIs9O\/C00CyTNx8MQe6eFgNRlolcqu3cJn87m8x08H38tnSMCc9lsuy6L2TE4n4II04VpSQEMolCII0BykjN0hVcPtnS4uZbNoM1dKUe5BHJCEyf7GIRAQcaWVbF00l4X1Yu5UKSH1yu1Obp\/JbUj6ZnkFex7ND8w48lrhUDw1GlTVmz7NuOpUCUDBmT7uMEhSVqRa5LuFo9CYd9NqVKjYECe\/yRfzlPI6SZISdWYrnJJRnwZp0poUQXGqh1PxRg3bQOIbU3aPQcTT2RCPoX5y975\/oAwgg2TgwXxg4+MVnSNPx3gCTFs5rKEG6tDM4Xbedl6ZvM5XFhTMBrR8gylJ4twI+PoHkmduAYJ\/UVs4dj65UpqTL1cHtHWLBf2jbHf\/YrCZNOqmXzvYO40AizTV9byTfAD5L161bjeZqzsDx2o1lW2PKYG5EWF5PWID9lrCAsFRKv4Z7wYt3hImKywE5DnXEMGUI581vp4PffKxbeKo2RCqkRbN1RmtrhJwenM\/hA3eh3E\/xoIbjklGRJGA1z7qu4SA3wwLGY+nY8WK2fss\/TARdobk2Lz2kQ7qC5Vp2ZddP3r0IVPwYZC+Wk5uW8ih0NTcDqxvrTop7lT3Xkt2eiwRqtM4oUK85X8A4+ZllM8ua+hFMrxd+oXnn8x75LXgHrSoF7NZqCgjN0ML7ajRMGVHnkkJQnvnPiHe1oIQYUdjaPOUG1tMaio=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455689728,"flow_last_seen":1561455689728,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":89,"pkt":"xiwDYGpkkLkxKPrKCABFAABL058AAP8RYqTAqAIMwKgCAdgAADUAN5FDM2kBAAABAAAAAAAADG1lZGlhLW14cDEtMQNjZG4Id2hhdHNhcHADbmV0AAABAAE=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1561455689728,"flow_last_seen":1561455689728,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"media-mxp1-1.cdn.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0451{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":105,"pkt":"kLkxKPrKxiwDYGpkCABFAABbphoAAEARTxrAqAIBwKgCDAA12AAAR3hsM2mBgAABAAEAAAAADG1lZGlhLW14cDEtMQNjZG4Id2hhdHNhcHADbmV0AAABAAHADAABAAEAAABFAAQfDVYz","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1561455689728,"flow_last_seen":1561455689761,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"media-mxp1-1.cdn.whatsapp.net","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"31.13.86.51"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1561455689909,"flow_last_seen":1561455689909,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp"}
+0415{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":78,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGAsTAqAIMHw1WM8VHAbtOnG1kAAAAALDC\/\/9BlgAAAgQFtAEDAwcBAQgKNM4E3wAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455689,"pkt_len":74,"pkt":"kLkxKPrKxiwDYGpkCABFAAA8AAAAAFQGLsgfDVYzwKgCDAG7xUfuAwj8TpxtZaASbHDC9wAAAgQFeAQCCAqHqaVzNM4E3wEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGAtDAqAIMHw1WM8VHAbtOnG1l7gMI\/YAQBAZZdQAAAQEICjTOBV2HqaVz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1561455689909,"flow_last_seen":1561455690039,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"media-mxp1-1.cdn.whatsapp.net","ja3":"b92a79ed03c3ff5611abb2305370d3e3","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0397{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0CsgAAFQGJAgfDVYzwKgCDAG7xUfuAwj9TpxvaoAQAHFafgAAAQEICoeppfc0zgVg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2285{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":1454,"pkt":"kLkxKPrKxiwDYGpkCABFAAWgCskAAFQGHpsfDVYzwKgCDAG7xUfuAwj9TpxvaoAQAHGU7wAAAQEICoeppfg0zgVgFgMDAHoCAAB2AwOjzyNHQjOpVvgAif\/8F5WB9m2U0scKnow2LScA2\/aVYiDheIsHXcZUiMjn0WFeVyeYgqZCpFf+j0FPaajeZJof+RMDAAAuACsAAgMEADMAJAAdACA5nxEHCn05\/Ye07pEajb+KCDvivuQkVTABzhNxH4pZLRQDAwABARcDAwP5obHjPldjOIylS0+Xwpe8NgBs43eBM3dIxITUTfptTDNiEB5Eq0rvnM+mOfPCdmgTgQTBzQK8hpmmqbe7NdS62S\/ZuugNetE6eL3lk3qguCRroXHIbV1vyR6JjglAciF4rrgEGkTOFdS1Oh85ZPwfZlJtXJnCnXkOfnwaFTtqIp2vSs887u2XmX5mcidKKal5aNyYWhETi63K9AOOkIQOqicaNIul5dEK6cCF5UMqRtDujk6NZzq7IwbqWADmhPMvnSM7A2l+EOSR0CaMazr82cComYDqc1PUsHe2I1niKsnT0m1bV13AzR+EvM8m0OxMD4lFOtzeiDXkenrkqREyOTi4MlfsrYptn9wRYRV+e63xQXaxh+dVdNVyHXfTD0qsdTX3wHgFwQl3oM6OXEaiyYn+KgXcXwq0ethdNrg08BJH\/8vapxF09PyDshSzAEpTXcEPu+GTbmZnoxjzvnDD18Zw26PohkmdbrlVfCBfPion7RT7C+Kb5UvF05Md5Tyv88FUdj\/VqRuFeEEnHphi\/R49yNc14nHYu4RN+XtOOSCmOwRK\/KBE5LZyV531wsNioyG+mpgfGatM7Tej\/w9lMWDYNl3p48MnFtX4IuCPpJtMt\/7NFVU2KyGybpb+cZXqPqee513o3Bp9uklsEM5Q02zzFMJMLBg8mewlDo+FbF5rjsLV2ebsrguXxpBNl3oHzU5n0lCR1wfayg9+yOdAiAWQ3Oys+AIICdmYtvasLN34LcCjcQD9YHzCzMirdSNF4OcXEtYeyMM5Sy6evWRISUbSiY6nQwyWBkw6bzxYYMb9lWVJNgEdfPpmxhjWDLantpJHGf1ojh8wQGIpRye3GHuhLaMEMVQZ4qbSOgvfn0nY\/CBysFxH7B1Ar3mwKcbisTwK8XJi8AK6+V+r\/\/vPWyG46iraQ7EEr0NABdn16L73zC3c4rUFcGCo3yv6nej46D3DVlZkcihybI8h+tLCp6b1ECWUVmYlINnm0Fxjv\/Rzo1yvYAfLRkl5wor8XK2Fz5nPTdPjLUTFI0X8tPfMr4lQEtr1lsx1uySK500IMrHApEofGX\/hBQdjjXSkQKDb+qcTK7sscfs5Dw5Td9blyzSb6ZftirLtqGt3+4r6Rk7H5mZPRCA0zEuJVUfsoBZY1WnrFNH7JTqWV61uqG1Rg44Yb\/dIwgoql8PDUAeyOTqxTSxsdG5duuR08zKsMhbg9mG2\/yjO7ZaSI9pXuKQqr3PlVwkcZ5\/c+b\/ZY5rbF0DFyRYf+Ya8itNTAp7GZ\/aoxoaK3dQTdA7C6++KMGOuUIeHq6Xpbi\/VSGaTsxQzLetZ0O0VmkUlLT\/RMxfq23QQiWbaeODe9tr3FwMDBe07gSGdhQaI9CSMCNgrecYRo\/+ZQun\/P9l3D4+KLQd\/am5Ukve96RSjpiSxrXHOZDo3MzLFr6eCZenso+tx\/kuRg\/tO6gWleSWfkYD+wyNSXegvt8V\/PxoE9wLtK\/z0QA49nDoK8NElxDHqwqsW7Jct5rqMts\/tuZB4W4+Qwj8h86gLJMpfkBGXRUSFmoixhMPOSOMNmJsNYZA4acZu7dCF\/7UJji6XAk2j1GNbkwpRxJMZ3aXKUN9svBHzCf6Hjdwq6mcXi5kRMkpqnNoBts\/p043tMsLNIewponpI4qPinwhvNic=","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0878{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1561455689909,"flow_last_seen":1561455690058,"flow_tot_l4_data_len":2117,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","category":"Chat"},"tls": {"version":"TLSv1.3","client_requested_server_name":"media-mxp1-1.cdn.whatsapp.net","ja3":"b92a79ed03c3ff5611abb2305370d3e3","ja3s":"475c9302dc42b2751db9edcac3b74891","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2296{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0788{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":349,"pkt":"kLkxKPrKxiwDYGpkCABFAAFPCssAAFQGIuofDVYzwKgCDAG7xUfuAxPVTpxvaoAYAHFcHAAAAQEICoeppfg0zgVgQ+tPBb7kaYYO+rR6biY\/FBVM+j2A0rn7l59uqzzwyz9IETm4Q4l0DthJst\/l6zOboAPQy9exfAgNfP4EZ\/JbGajAQUBkwZgWHP70oqgcBwGZOYSBtZdU+XnPK1CYTGKoUl\/Yzc05cVrQBp6CrIqx+GBKT+y1i7brTP5WCSjn\/vAJ\/FcB1EuL7kTLeoCNqFHmmSy\/qp\/xoqN4T8\/C9jO+UJF0ToXnckaSMUJB8MnrZLedBkrWQNra3UoTjAL0XqbBCsZHJzlsmm1fHKnLqz12zc2bjAKiYayUlVT+D66uNh0ZY4G5+q9PsIwxKP9+WOWGCQFZk1SIlpakKDWpO8rszSmIytVLOGl04AjQwxLmrghDKqHZj0l2FUMBSQ==","pkt_caplen":349,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGAtDAqAIMHw1WM8VHAbtOnG9q7gMT1YAQA\/VMDQAAAQEICjTOBXSHqaX4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGAtDAqAIMHw1WM8VHAbtOnG9q7gMU8IAQA\/JK9QAAAQEICjTOBXSHqaX4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":130,"pkt":"xiwDYGpkkLkxKPrKCABFAAB0AABAAEAGApDAqAIMHw1WM8VHAbtOnG9q7gMU8IAYBACzCAAAAQEICjTOBbWHqaX4FAMDAAEBFwMDADWsM6fLGVnPxe1K3F\/PXzYHw6XaXuk1HcUo27FCfSzPGwKyANNk\/nyTtBOX6WvVIkfamSbPtg==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":112,"pkt":"xiwDYGpkkLkxKPrKCABFAABiAABAAEAGAqLAqAIMHw1WM8VHAbtOnG+q7gMU8IAYBADIcwAAAQEICjTOBdqHqaX4FwMDACnXGBS6sntI30Kk9drPcEH0G4oDcURKPZSwg10xze6YqxmfWfcU6KaEHw==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":109,"pkt":"xiwDYGpkkLkxKPrKCABFAABfAABAAEAGAqXAqAIMHw1WM8VHAbtOnG\/Y7gMU8IAYBABJjAAAAQEICjTOBdqHqaX4FwMDACYjdj3wqAKYpcG13ZOKKJx3gkqTfyqOT5qGPjlzV13KJTpYv1V98g==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":101,"pkt":"xiwDYGpkkLkxKPrKCABFAABXAABAAEAGAq3AqAIMHw1WM8VHAbtOnHAD7gMU8IAYBAByvAAAAQEICjTOBduHqaX4FwMDAB5qUO0Nd2PEK3Az+rK6dIQHXROEo0d2BW1axL+Od2E=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0853{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455690,"pkt_len":402,"pkt":"xiwDYGpkkLkxKPrKCABFAAGEAABAAEAGAYDAqAIMHw1WM8VHAbtOnHAm7gMU8IAYBAAx3wAAAQEICjTOBduHqaX4FwMDAUsDEPutuKhGTc+1qxRTUxJxtvdrENzR\/VROIBQWysphhGzMGlxJjDEBPuhZAcCSDdVrGpfjK\/QJNgUjD52O8Bl72H1\/Vy8sjByBVOMc1VsZYqRUZjtTfzG50c1T5DZ8mzEx2TWOWqss5AqREgkrtM5Ynarwh50mufxhh7wCloA1XN1gOZJQ+r0Hq4VGqGFi5u5VavGz68w5VX7GOTnCBnfQmKZcu1oWGYi3vYuePFwwQcxIWkwt\/JVUnzs9AUcTP72A6C2elHAomh9EJQ2e48SQrec+uL9AzE3g5Mn9MMUGtBod0ax6NXche9VfuwkxfZFe+Db9PSRM8DGoz1rrIqjYYzL8anf4hCKVF1dWWa3AyrVTi9YLrRV2P2IC4Ws6u00\/wInUUFsC86U0cCMk2wnNFi+SCrGpxAgFsgdISl4GtAmYO9Bq57+acjiO","pkt_caplen":402,"pkt_type":2048,"pkt_ipoffset":14}
+0492{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455693,"pkt_len":135,"pkt":"xiwDYGpkkLkxKPrKCABFAgB5AABAAEAGKYPAqAIMEfI8VMDKFGdIDzP+7pIeZYAYCADZwAAAAQEICjTOBFg8s01+FwMDAEC+4ca82mxfgqL0M+jKmHCJENEAGUWdgR0YVkDDwjAaHB0ws79emtobbKfA5f7P5v+FiwA6ZnqSa8M+APsSqNHf","pkt_caplen":135,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455693,"pkt_len":119,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTxwAADEGKXcR8jxUwKgCDBRnwMrukh5lSA80Q4AYAZkAkwAAAQEICjyzYXU0zgRYFwMDADDwCq2t8tv2Nubh7K7Zs7SXKW9oP5b\/dRRCT4JlE+XMfzbIWgBqJ9qCooLqBSPC2qE=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455693,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGKcrAqAIMEfI8VMDKFGdIDzRD7pIemoAQB\/8nUwAAAQEICjTOBMk8s2F1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455701309,"flow_last_seen":1561455701309,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0833{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455701,"pkt_len":383,"pkt":"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","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1561455701309,"flow_last_seen":1561455701309,"flow_tot_l4_data_len":349,"flow_min_l4_data_len":349,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":349,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0830{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455701,"pkt_len":381,"pkt":"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","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1561455702980,"flow_last_seen":1561455702980,"flow_tot_l4_data_len":63,"flow_min_l4_data_len":63,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":63,"midstream":1,"l3_proto":"ip4","src_ip":"17.171.47.85","dst_ip":"192.168.2.12","src_port":443,"dst_port":50502,"l4_proto":"tcp"}
+0442{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455702,"pkt_len":97,"pkt":"kLkxKPrKxiwDYGpkCABFAgBT1H4AAC8Gs3ARqy9VwKgCDAG7xUbop23K2+r6qYAYAEJmGwAAAQEICipMBbM0zcKkFQMDABo0yWx0nf4Y8Lruj7Xpo7KOiHQ6o5fprSXAlA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455702,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA01H8AAC8Gs5ARqy9VwKgCDAG7xUbop23p2+r6qYARAEJXLQAAAQEICipMBbM0zcKk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455703,"pkt_len":97,"pkt":"xiwDYGpkkLkxKPrKCABFAgBTAABAAEAGNu\/AqAIMEasvVcVGAbvb6vqp6KdtyoAYBACmYwAAAQEICjTOOFoqS5CDFQMDABoAAAAAAAAAAyfFNdvhqDfXGuNhDL9lpNkkKA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455703,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGNxDAqAIMEasvVcVGAbvb6vrI6KdtyoARBABS5QAAAQEICjTOOF4qS5CD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455703,"pkt_len":54,"pkt":"xiwDYGpkkLkxKPrKCABFAAAoAABAAEAGNxzAqAIMEasvVcVGAbvb6vqpAAAAAFAEAAAOlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455703,"pkt_len":54,"pkt":"xiwDYGpkkLkxKPrKCABFAAAoAABAAEAGNxzAqAIMEasvVcVGAbvb6vqpAAAAAFAEAAAOlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455703,"pkt_len":54,"pkt":"kLkxKPrKxiwDYGpkCABFAgAoq3IAAC8G3KcRqy9VwKgCDAG7xUbop23KAAAAAFAEAACOuAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455703,"pkt_len":54,"pkt":"kLkxKPrKxiwDYGpkCABFAAAoq3MAAC8G3KgRqy9VwKgCDAG7xUbop23KAAAAAFAEAACOuAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455704556,"flow_last_seen":1561455704556,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.162.244","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp"}
+0542{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455704,"pkt_len":168,"pkt":"AQBef\/\/62DBiVgAcCABFAACa1ogAAP8Rp9yp\/qL07\/\/\/+sTQB2wAhsguTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455704556,"flow_last_seen":1561455704556,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.162.244","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455704557,"flow_last_seen":1561455704557,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp"}
+0542{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455704,"pkt_len":168,"pkt":"AQBef\/\/6xiwDYGpkCABFAACadbUAAAERkPrAqAIB7\/\/\/+sTQB2wAhlJ4TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455704557,"flow_last_seen":1561455704557,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":1561455705874,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0435{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455705,"pkt_len":91,"pkt":"AQBeAAD7kLkxKPrKCABFAABNhSMAAP8RkszAqAIM4AAA+xTpFOkAOcRFAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0591{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":1561455705874,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":1561455705874,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::414:409d:8afd:9f05","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0465{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455705,"pkt_len":111,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5+sIAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14}
+0600{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1561455705874,"flow_last_seen":1561455705874,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::414:409d:8afd:9f05","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0435{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":91,"pkt":"AQBeAAD7kLkxKPrKCABFAABNdOIAAP8Row3AqAIM4AAA+xTpFOkAOUTGAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAwAAQhfYWlycGxhecASAAwAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":111,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5e0MAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADAABCF9haXJwbGF5wBIADAAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":1561455706912,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0538{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACav+gAAEARgnnAqAIMHw1WMNwIDZYAhhEmAAMAaiESpEKmZ0918K0sABMVszZAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":1561455706912,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0538{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaKEAAAEARGiLAqAIMHw1WMNwIDZYAhhElAAMAaiESpEKmZ0918K0sABMVszdAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":1561455706912,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa\/egAAEARKEbAqAIMuTzYM9wIDZYAhvTwAAMAaiESpEKmZ0918K0sABMVszhAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1561455706912,"flow_last_seen":1561455706912,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0538{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaQnoAAEAR47TAqAIMuTzYM9wIDZYAhvTvAAMAaiESpEKmZ0918K0sABMVszlAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":1561455706913,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaTo8AAEARCe\/AqAIMnfDBMNwIDZYAhic+AAMAaiESpEKmZ0918K0sABMVszpAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":1561455706913,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0538{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACapTEAAEARs0zAqAIMnfDBMNwIDZYAhic9AAMAaiESpEKmZ0918K0sABMVsztAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":1561455706913,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0538{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa5uYAAEARXUvAqAIMszzAMNwIDZYAhhLwAAMAaiESpEKmZ0918K0sABMVszxAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1561455706913,"flow_last_seen":1561455706913,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0538{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaa6sAAEAR2IbAqAIMszzAMNwIDZYAhhLvAAMAaiESpEKmZ0918K0sABMVsz1AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1561455706914,"flow_last_seen":1561455706914,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0539{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa6jAAAEARaz\/AqAIMnfDEPtwIDZYAhiQsAAMAaiESpEKmZ0918K0sABMVsz5AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0532{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1561455706914,"flow_last_seen":1561455706914,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":56328,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0539{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa\/isAAEARV0TAqAIMnfDEPtwIDZYAhiQrAAMAaiESpEKmZ0918K0sABMVsz9AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIJPUAAFQRCb8fDVYwwKgCDA2W3AgANMY6AQMAGCESpEKmZ0918K0sABMVszYAIAAIAAHthnGmBnJAAgAIAAABa44DQzM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIJPYAAFQRCb4fDVYwwKgCDA2W3AgANMY5AQMAGCESpEKmZ0918K0sABMVszcAIAAIAAHthnGmBnJAAgAIAAABa44DQzM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIB5sAAFMROyed8MQ+wKgCDA2W3AgANNk5AQMAGCESpEKmZ0918K0sABMVsz4AIAAIAAHthnGmBnJAAgAIAAABa44DQzo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABISQ8AAFER\/sCd8MEwwKgCDA2W3AgANNxIAQMAGCESpEKmZ0918K0sABMVszoAIAAIAAHthnGmBnJAAgAIAAABa44DQz0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIdjQAAFMRu0+zPMAwwKgCDA2W3AgANMf9AQMAGCESpEKmZ0918K0sABMVszwAIAAIAAHthnGmBnJAAgAIAAABa44DQzo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIKZAAAFMR6fC5PNgzwKgCDA2W3AgANKn2AQMAGCESpEKmZ0918K0sABMVszgAIAAIAAHthnGmBnJAAgAIAAABa44DQ0I=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1561455706979,"flow_last_seen":1561455706979,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp"}
+0558{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455706,"pkt_len":179,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClm6MAAAIRafbAqAIM7\/\/\/+vzMB2wAkbYGTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1561455706979,"flow_last_seen":1561455706979,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1561455707435,"flow_last_seen":1561455707435,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":76,"pkt":"xiwDYGpkkLkxKPrKCABFAAA+06QAAP8RYqzAqAIMwKgCAeyFADUAKgBWfx8BAAABAAAAAAAAA3Bwcwh3aGF0c2FwcANuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0650{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1561455707435,"flow_last_seen":1561455707435,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"pps.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0470{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":117,"pkt":"kLkxKPrKxiwDYGpkCABFAABnIjoAAEAR0u7AqAIBwKgCDAA17IUAUyY\/fx+BgAABAAIAAAAAA3Bwcwh3aGF0c2FwcANuZXQAAAEAAcAMAAUAAQAACz4ADQZtbXgtZHMDY2RuwBDALgABAAEAAAA+AASd8BQ0","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1561455707435,"flow_last_seen":1561455707470,"flow_tot_l4_data_len":125,"flow_min_l4_data_len":42,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"pps.whatsapp.net","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"157.240.20.52"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1561455707474,"flow_last_seen":1561455707474,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp"}
+0418{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":78,"pkt":"xiwDYGpkkLkxKPrKCABFAABAAABAAEAGxd\/AqAIMnfAUNMVIAbt68MpNAAAAALDC\/\/823wAAAgQFtAEDAwcBAQgKNM5JcwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":74,"pkt":"kLkxKPrKxiwDYGpkCABFAAA8AAAAAFMG8uOd8BQ0wKgCDAG7xUi7sKeEevDKTqASbHBlBQAAAgQFeAQCCAq1oF6CNM5JcwEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxevAqAIMnfAUNMVIAbt68MpOu7CnhYAQBAb72QAAAQEICjTOSZq1oF6C","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1097{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1561455707474,"flow_last_seen":1561455707524,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"pps.whatsapp.net","ja3":"7a7a639628f0fe5c7e057628a5bbec5a","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+0399{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0dcMAAFMGfSid8BQ0wKgCDAG7xUi7sKeFevDMU4AQAHH9LAAAAQEICrWgXrQ0zkml","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2283{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0869{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1561455707474,"flow_last_seen":1561455707564,"flow_tot_l4_data_len":2117,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":352,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","category":"Chat"},"tls": {"version":"TLSv1.3","client_requested_server_name":"pps.whatsapp.net","ja3":"7a7a639628f0fe5c7e057628a5bbec5a","ja3s":"475c9302dc42b2751db9edcac3b74891","unsafe_cipher":0,"cipher":"TLS_CHACHA20_POLY1305_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","tls_supported_versions":"TLSv1.3,TLSv1.2,TLSv1.1,TLSv1"}}
+2283{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":1454,"pkt":"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","pkt_caplen":1454,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":347,"pkt":"kLkxKPrKxiwDYGpkCABFAAFNdcYAAFMGfAyd8BQ0wKgCDAG7xUi7sLJdevDMU4AYAHFTSgAAAQEICrWgXrU0zkml5zGLy\/oEoBGgPp+20oYTdRbGGCQwcGAMejnilyxMHL20VT9oxBg95ndZSSGo71EKRsLo1vdIfV7O0KFrW9033v\/9gq+tBriLEja4OqKGjamZtho7f1mcl5wnpUA8jrc7uIw1kCZct18NW+LPaB0UmsxgbGiupXJrXMDc8RSvdsz2D8\/ZKsLxzNErtQNJcccu3nfXtJ8ut82FM5VdhqxLel4fzcWEi2TGS+0Ejt79bCaIO8nbvqLxoEGyq5Uq2sfwLt30LogVS5Mu0t0iDZQRFj4P1V7KlQBDYWix83FCfgwmoSDQm77Ko3x6OJrkbi2SjIW0mgRX7K8x\/Em\/jhoUiUDkm6r60EqzcBINyulVSVZ4164kmFHqcCM=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxevAqAIMnfAUNMVIAbt68MxTu7CyXYAQA\/XupQAAAQEICjTOSc+1oF61","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGxevAqAIMnfAUNMVIAbt68MxTu7CzdoAQA\/LtjwAAAQEICjTOSc+1oF61","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0490{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":130,"pkt":"xiwDYGpkkLkxKPrKCABFAAB0AABAAEAGxavAqAIMnfAUNMVIAbt68MxTu7CzdoAYBABmfgAAAQEICjTOSfK1oF61FAMDAAEBFwMDADUJC360tMPn6SkPoZQlcU8cZzZIp9qEVuZIEhkq6LgHL2OygOA7t0wcpmHlJrTvC7o1aaQRaQ==","pkt_caplen":130,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":112,"pkt":"xiwDYGpkkLkxKPrKCABFAABiAABAAEAGxb3AqAIMnfAUNMVIAbt68MyTu7CzdoAYBACu3AAAAQEICjTOSfW1oF61FwMDACkS4\/VxL7JMcXsVEYubsoILBnzgKA6qBYMY\/SLP67dTZC5ZJbUlQNEaFw==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":109,"pkt":"xiwDYGpkkLkxKPrKCABFAABfAABAAEAGxcDAqAIMnfAUNMVIAbt68MzBu7CzdoAYBAD\/jgAAAQEICjTOSfW1oF61FwMDACZtUduoJYEf+ZWhUFkQfOfYGtpw60XmMytwsRSfDQQjPENZ2yHjBQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":101,"pkt":"xiwDYGpkkLkxKPrKCABFAABXAABAAEAGxcjAqAIMnfAUNMVIAbt68Mzsu7CzdoAYBADQRwAAAQEICjTOSfW1oF61FwMDAB4Z4BblH1ByvtHn+qZInbC8B686Vq\/E8xdP1hQbe1Q=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455707,"pkt_len":258,"pkt":"xiwDYGpkkLkxKPrKCABFAAD0AABAAEAGxSvAqAIMnfAUNMVIAbt68M0Pu7CzdoAYBAD\/YQAAAQEICjTOSfW1oF61FwMDALtsmsCPLEdWtcfRqj0ukvCNtl7zvbxOXZXaMcCzxQGKFgt1U6hq4D2WUasBKSQiPfBdQJBK4EOB1gqL1toC6baPy75XysKWyktW7gw7k+0Q2B4aOr19VB0nqiglJSvuZfjhXFj9gz5NT4CfYSQiykOi8XjR4PH62\/TKowBKYr\/vDOUMQswnc3YHL2rxTjloG4+pJxxpP+26TPM0qX9wf8asvQiXnNqOyUF20eGFS8pbrko\/tGp5kSK2a94A","pkt_caplen":258,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455709,"pkt_len":91,"pkt":"AQBeAAD7kLkxKPrKCABFAABNP9UAAP8R2BrAqAIM4AAA+xTpFOkAOUTGAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAwAAQhfYWlycGxhecASAAwAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455709,"pkt_len":111,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5e0MAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADAABCF9haXJwbGF5wBIADAAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14}
+0550{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455709,"pkt_len":174,"pkt":"AQBef\/\/6kLkxKPrKCABFAACggMsAAAIRhNPAqAIM7\/\/\/+vzMB2wAjOY9TS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTklQQ29ubmVjdGlvbjoxDQpNQU46ICJzc2RwOmRpc2NvdmVyIg0KTVg6IDMNCg0K","pkt_caplen":174,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455713,"pkt_len":175,"pkt":"AQBef\/\/6kLkxKPrKCABFAAChffAAAAIRh63AqAIM7\/\/\/+vzMB2wAjYZETS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpzZXJ2aWNlOldBTlBQUENvbm5lY3Rpb246MQ0KTUFOOiAic3NkcDpkaXNjb3ZlciINCk1YOiAzDQoNCg==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455716,"pkt_len":143,"pkt":"AQBef\/\/6kLkxKPrKCABFAACBk7cAAAIRcgbAqAIM7\/\/\/+vzMB2wAbSFSTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cG5wOnJvb3RkZXZpY2UNCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":143,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455718,"pkt_len":91,"pkt":"AQBeAAD7kLkxKPrKCABFAABNWGMAAP8Rv4zAqAIM4AAA+xTpFOkAOUTGAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAwAAQhfYWlycGxhecASAAwAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455718,"pkt_len":111,"pkt":"MzMAAAD7kLkxKPrKht1gDagnADkR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5e0MAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADAABCF9haXJwbGF5wBIADAAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14}
+0375{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":48,"pkt":"xiwDYGpkkLkxKPrKCABFAAAib6IAAEAR0zfAqAIMHw1WMNwIDZYADqAHaGVhbHRo","pkt_caplen":48,"pkt_type":2048,"pkt_ipoffset":14}
+0371{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":44,"pkt":"kLkxKPrKxiwDYGpkCABFAAAeOvQAAFQR8+kfDVYwwKgCDA2W3AgACo7+T0s=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACavJYAAEARhcvAqAIMHw1WMNwIDZYAhhEcAAMAaiESpEKmZ0918K0sABMVs0BAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACauRwAAEARiUXAqAIMHw1WMNwIDZYAhhEbAAMAaiESpEKmZ0918K0sABMVs0FAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa2X4AAEARTLDAqAIMuTzYM9wIDZYAhvTmAAMAaiESpEKmZ0918K0sABMVs0JAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaK6kAAEAR+oXAqAIMuTzYM9wIDZYAhvTlAAMAaiESpEKmZ0918K0sABMVs0NAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaXjgAAEAR+kXAqAIMnfDBMNwIDZYAhic0AAMAaiESpEKmZ0918K0sABMVs0RAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaAzgAAEARVUbAqAIMnfDBMNwIDZYAhiczAAMAaiESpEKmZ0918K0sABMVs0VAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaPBgAAEARCBrAqAIMszzAMNwIDZYAhhLmAAMAaiESpEKmZ0918K0sABMVs0ZAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa\/iEAAEARRhDAqAIMszzAMNwIDZYAhhLlAAMAaiESpEKmZ0918K0sABMVs0dAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa6sAAAEARaq\/AqAIMnfDEPtwIDZYAhiQiAAMAaiESpEKmZ0918K0sABMVs0hAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaA0YAAEARUirAqAIMnfDEPtwIDZYAhiQhAAMAaiESpEKmZ0918K0sABMVs0lAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIOv8AAFQR87QfDVYwwKgCDA2W3AgANJYmAQMAGCESpEKmZ0918K0sABMVs0AAIAAIAAHthnGmBnJAAgAIAAABa44Dcz0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIOwAAAFQR87MfDVYwwKgCDA2W3AgANJYlAQMAGCESpEKmZ0918K0sABMVs0EAIAAIAAHthnGmBnJAAgAIAAABa44Dcz0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIDM4AAFMRNfSd8MQ+wKgCDA2W3AgANKkmAQMAGCESpEKmZ0918K0sABMVs0gAIAAIAAHthnGmBnJAAgAIAAABa44Dc0M=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIDM8AAFMRNfOd8MQ+wKgCDA2W3AgANKklAQMAGCESpEKmZ0918K0sABMVs0kAIAAIAAHthnGmBnJAAgAIAAABa44Dc0M=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIjAkAAFMRpXqzPMAwwKgCDA2W3AgANJfpAQMAGCESpEKmZ0918K0sABMVs0YAIAAIAAHthnGmBnJAAgAIAAABa44Dc0Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIjAoAAFMRpXmzPMAwwKgCDA2W3AgANJfoAQMAGCESpEKmZ0918K0sABMVs0cAIAAIAAHthnGmBnJAAgAIAAABa44Dc0Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIY9gAAFER4\/ed8MEwwKgCDA2W3AgANKw0AQMAGCESpEKmZ0918K0sABMVs0QAIAAIAAHthnGmBnJAAgAIAAABa44Dc0c=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIY9kAAFER4\/ad8MEwwKgCDA2W3AgANKwzAQMAGCESpEKmZ0918K0sABMVs0UAIAAIAAHthnGmBnJAAgAIAAABa44Dc0c=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIN+UAAFMR25u5PNgzwKgCDA2W3AgANHniAQMAGCESpEKmZ0918K0sABMVs0IAIAAIAAHthnGmBnJAAgAIAAABa44Dc0w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIN+YAAFMR25q5PNgzwKgCDA2W3AgANHnhAQMAGCESpEKmZ0918K0sABMVs0MAIAAIAAHthnGmBnJAAgAIAAABa44Dc0w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0376{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":48,"pkt":"xiwDYGpkkLkxKPrKCABFAAAih78AAEARuxrAqAIMHw1WMNwIDZYADqAHaGVhbHRo","pkt_caplen":48,"pkt_type":2048,"pkt_ipoffset":14}
+0372{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455719,"pkt_len":44,"pkt":"kLkxKPrKxiwDYGpkCABFAAAeO2sAAFQR83IfDVYwwKgCDA2W3AgACo7+T0s=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1561455721320,"flow_last_seen":1561455721320,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0783{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455721,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqQAAP8RHAEAAAAA\/\/\/\/\/wBEAEMBNNuDAQEGAH5K8tcAAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1561455721320,"flow_last_seen":1561455721320,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252,95,44,46"}}
+0376{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455722,"pkt_len":48,"pkt":"xiwDYGpkkLkxKPrKCABFAAAi46wAAEARXy3AqAIMHw1WMNwIDZYADqAHaGVhbHRo","pkt_caplen":48,"pkt_type":2048,"pkt_ipoffset":14}
+0372{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455722,"pkt_len":44,"pkt":"kLkxKPrKxiwDYGpkCABFAAAePgMAAFQR8NofDVYwwKgCDA2W3AgACo7+T0s=","pkt_caplen":44,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455722,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqUAAP8RHAAAAAAA\/\/\/\/\/wBEAEMBNNuCAQEGAH5K8tcAAQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455724,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqYAAP8RG\/8AAAAA\/\/\/\/\/wBEAEMBNNuAAQEGAH5K8tcAAwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0376{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455725,"pkt_len":48,"pkt":"xiwDYGpkkLkxKPrKCABFAAAixzsAAEARe57AqAIMHw1WMNwIDZYADqAHaGVhbHRo","pkt_caplen":48,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455726,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIUlcAAEARof3AqAIBwKgC\/+EV4RUANEtUU3BvdFVkcDC64ScQKi2g\/wABAARIlcIDyUSzc\/3fJAksKuG26pMF0apN5Ek=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455729,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqcAAP8RG\/4AAAAA\/\/\/\/\/wBEAEMBNNt7AQEGAH5K8tcACAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1561455730495,"flow_last_seen":1561455730495,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"91.252.56.51","dst_ip":"192.168.2.12","src_port":32704,"dst_port":56328,"l4_proto":"udp"}
+0429{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455730,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI7nAAADERRFFb\/DgzwKgCDH\/A3AgANOnLAAEAGCESpEJZi1FU1SmRVkxGZgQACAAUYCmYSN+rkyNYVIx9I16CdotJWKc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1561455730495,"flow_last_seen":1561455730495,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"91.252.56.51","dst_ip":"192.168.2.12","src_port":32704,"dst_port":56328,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0430{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIAlEAADERMHFb\/DgzwKgCDH\/A3AgANGApAAEAGCESpELobM0y9AHrYlN0+hgACAAU\/c20Lcr5wjE5JYKvJct9qbua6og=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0833{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":383,"pkt":"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","pkt_caplen":383,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":381,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAFveLUAAEARenjAqAIBwKgC\/0RcRFwBW7HJeyJ2ZXJzaW9uIjogWzIsIDBdLCAicG9ydCI6IDE3NTAwLCAiaG9zdF9pbnQiOiAxNzQ1NjcxOTM5MjIwMTQ2OTg4Njg4NzAzNTEyMjAyNTg3OTI0NDMsICJkaXNwbGF5bmFtZSI6ICIiLCAibmFtZXNwYWNlcyI6IFsxMTgyMzk1NTczLCAxNDIxMTE0Mzk5LCAxODA4MDQ3NjgwLCAxMzcyMDkyNjA5LCAxMjUyMTE2NDI5LCA5OTQ2OTc3MywgNTI1ODAwNzEyMCwgMTc2OTY0MzA3LCAxMjU1NDA1NjYsIDEwNDc0MjgxODksIDQ3MTYxOTAwNDgsIDU0NjcxNjMwODgsIDExOTUwNDQwNzEsIDk2ODUzMjI0LCAxNzYwOTk2MywgNDUxNDcyNjU4LCA0MTc0NjUwODgwLCAyODUyMTYwNywgMTQxNTYyMDM1MF19","pkt_caplen":381,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1561455731665,"flow_last_seen":1561455731665,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":56328,"dst_port":64282,"l4_proto":"udp"}
+0428{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABId7IAAEAR8MLAqAIMATxOQNwI+xoANL93AAEAGCESpEJNNg9OA5IbZKhKGmoACAAUkUJIDnID0ka3i4LpQfhGRUa3K\/w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0582{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1561455731665,"flow_last_seen":1561455731665,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":56328,"dst_port":64282,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0430{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABI\/gUAADERNLxb\/DgzwKgCDH\/A3AgANISZAAEAGCESpEKSaahiiU3KFyQDpDgACAAUPvQQqrwwB3kMX1876e4ssz8N17Y=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIalYAAEARuWvAqAIMW\/w4M9wIf8AANHvGAQEAGCESpEKSaahiiU3KFyQDpDgACAAU78j6HBgMgp4J7E4uRUxed5inmwU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIuQIAAEARar\/AqAIMW\/w4M9wIf8AANBvxAAEAGCESpEInL2dPpxxCLUQhtkgACAAUq0S1cqGjKGibQ8Ad3a7kThUOm\/s=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":86,"pkt":"kLkxKPrKxiwDYGpkCABFAABIBd8AADERLONb\/DgzwKgCDH\/A3AgANDHzAQEAGCESpEInL2dPpxxCLUQhtkgACAAUkXzRJ1qhaDcj0PmT7BfwGRhoqq4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":213,"pkt":"kLkxKPrKxiwDYGpkCABFAADHmGMAADERmd9b\/DgzwKgCDH\/A3AgAsxZ9gHgACQADQwCH+rLXg13XNAGqLsD+76fzGu9\/+d0RAsGT3JMpYjjkcc8UGhNlz\/egD1NmPofCSzCTLdyAog7nslNXn16wCnKz77ojARGrfh8XXYQquO0fJntKUveKUXSnY4vJUM4dTpnJZHMMxl5Id4HWezclpJjd1hiJFRhLOaMmNB\/0qpPucRKIOmi8jqx1rf\/KPjYR4DAcf78NAAcs12MOMl1+32BJajOP","pkt_caplen":213,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455731,"pkt_len":274,"pkt":"xiwDYGpkkLkxKPrKCABFAAEE1AAAAEARTwXAqAIMW\/w4M9wIf8AA8IfngHgAAgAGTcD1A4b0yjIU7SKCWquwaSTANBaValwBsSMOn0UrTAgYamrqge0Z8vgS9x2Lz7OdBrFzxPjZO6Sa08PtW8UEO8xaGivlw+DlvO3s69lNElT+Tkhk9jCmowl7qFSZ1rhFE\/ijtn0L83O2N5riPifjf7I5aJwnWRugRZqrimW+hquH8pD0eLC4o6xXJiLOgrtc4UrFRW3Hj0mNQgMLlOBeCw5yG5rFwYH1wwHMuhyJIvyoS\/cxtq3HVb91nolIAZbSaeBzo1GTOOj1uvgOSUxoCYvrHAMpG1lU93lStd3LaZPphg==","pkt_caplen":274,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":164,"pkt":"kLkxKPrKxiwDYGpkCABFAACWbkkAADERxCpb\/DgzwKgCDH\/A3AgAghbNgcgAEof6stfJ\/+maYCso7dxvPViN6OkUa4VRdUB69RSKBdv\/gdNxpJmgOM5vjMaoqq42JUbKXNDjWvufYazHBvBEs12e3xfQ5Pzq5SiWIicEKdGbOdg689EPqIoZXk68JZAaoOVUPop+rD2hgAAABKXTglbZV1VKMh0=","pkt_caplen":164,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":175,"pkt":"kLkxKPrKxiwDYGpkCABFAAChsZ0AADERgMtb\/DgzwKgCDH\/A3AgAjXpOgHgACgADTQCH+rLX1E253ABPRLA4cB2ydFmUM0V3Q+bzAiAPsfEbaCX4M\/3iBNAW7LgOQgV+rBiZhDQ59jY9nbPnoJq38jYddjHIRKaWwhAjCadNRhIE4ekgVTedZE5SAgOHF03x6RFoIbTsmYKhSj57wAc2EhncN0aEPvyLcXa18eu8GQ==","pkt_caplen":175,"pkt_type":2048,"pkt_ipoffset":14}
+0741{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":315,"pkt":"xiwDYGpkkLkxKPrKCABFAAEtD+AAAEAREv3AqAIMW\/w4M9wIf8ABGXbMgHgAAwAGV8D1A4b0slxpfOKbGYNZCfpd28yhHAAcG7w9JPlDfJLxQlaBVn2+66p6cJ7aqJEtysektePsGpytPi\/a36eCznzyo9MyGmMJGtP\/d1F6BuY1ODVht04M58k5ckpnmWflF\/H0CBPKCRhQZrkMYTDKkzmtoyP34c1AwxYMy\/ndAMhQ04GuF3W\/ZIBQaOq0IPiQ0oZDBqZt4tXnKNXRFZ9okxs\/Kvb4kTIENfroANbp9xPKW6lsPtV7ajTEYwVY2JWfjKdDd9hSbnzeqdarTh+OZSTr867+KehMdtNYGKNP7zzhGa3DVJHwr0+SuBQjM3Vll1u2nwnrB9V4nXpKZIqQcBUjDII7Drl+yG48","pkt_caplen":315,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":151,"pkt":"kLkxKPrKxiwDYGpkCABFAACJaqYAADERx9pb\/DgzwKgCDH\/A3AgAdSqsgHgACwADVwCH+rLXE\/ZHDnAQRCQTdckrpvoQD2RObgw8ljTpkCunEjihK4NBsiZWHWT3RSsNVHNnn0x98suKGI3zuAfHG7ou\/fSDsYhFtcc0lHK2ZSxB0evm2AE+ZGlZsTXY6ZsJ2+W6W\/6pZQ==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":173,"pkt":"xiwDYGpkkLkxKPrKCABFAACfAsUAAEARIKbAqAIMW\/w4M9wIf8AAi2KvgHgABAAGYcD1A4b08bmLem+VrJeS+XoIIs8i5O3IQunpXkmyWGASzyVQ1NfYotKkWk0RRIiv5dRk+4\/Eu09ZJgwSnifyIxWYoS7vsZo2ccNa9uNtP+TxZK1YyMb7gxquFnl5NJ2FTBbF4WACOtia6YqaSyCcA7WsbsoWM+y8Vw1EiVM=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIre0AAEARuofAqAIMATxOQNwI+xoANHLOAAEAGCESpEIrgAUzrwTeBSrSSH8ACAAUv8Ev3sei+dcRfEZy9ei0mRui3Zw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":173,"pkt":"kLkxKPrKxiwDYGpkCABFAACfAgoAADERMGFb\/DgzwKgCDH\/A3AgAi1NtgHgADAADYQCH+rLXzBD\/cbSCIedmpl6VXE7LeLm1I9bC6f2xEaydyauFiVGz83Dhq5dbxn6e+oScVAQURSTZH5qfOVFd+cUFEyU+9Q47WmaacKoKQB\/eVIDXtJgDzsHT10E+ZcI5PBdoCBr\/YKsdJyd7yXQ7gmlHRbxURcOEsEL9+aE=","pkt_caplen":173,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":147,"pkt":"xiwDYGpkkLkxKPrKCABFAACFinkAAEARmQvAqAIMW\/w4M9wIf8AAceamgHgABQAGa8D1A4b0rUzpSllcxQiZQ7\/pQannk69zXkKUdHTKSqbM8+QeUHY6TfpytX+JocrdlDVbiH6ukEaeDGhYgRWJD0l8ooksH\/WycFtoBfUOAdnlNPEJtRPL5COyQ4srvVYRgI93","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455732,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIV+kAAEAREIzAqAIMATxOQNwI+xoANBvDAAEAGCESpELCs7YUVt8QVzF73yEACAAUMmINwHB46SKyj3xrODHnuD6GHSA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455733,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIhgkAAEAR4mvAqAIMATxOQNwI+xoANNyjAAEAGCESpEKaqxAMcXf5HhivnksACAAUXrUv35eEVCK3ZPufCanP8gSQnE8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455734,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIQ+QAAEARJJHAqAIMATxOQNwI+xoANLvkAAEAGCESpEJdvqBh2rbkNqYRchoACAAUXsrok\/u8nTRHu7GOUWRyNlbwy2Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455734,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABITIsAAEARG+rAqAIMATxOQNwI+xoANFb\/AAEAGCESpEIYhNNjQH9nfwvFCVIACAAUBc\/xmBlv7Bs3t9\/XflLKa7+tM70=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455735,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI9LUAAEARc7\/AqAIMATxOQNwI+xoANHTMAAEAGCESpEKe+qBzs04+X9t2hVMACAAUBM15MKafJfPMHKpVb2oQ8rH6Vps=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455736,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIpkMAAEARwjHAqAIMATxOQNwI+xoANGbNAAEAGCESpEIbBOc2L0AnanNgnUIACAAUpxo+OUqvhuVKmnJ0R1IFvZOwK5s=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455736,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIDXMAAEARWwLAqAIMATxOQNwI+xoANP39AAEAGCESpEItRl10YqpdeXG\/MywACAAUPkIlyey3tC8v\/ax2XtVHIWVldh0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":1506,"pkt":"xiwDYGpkkLkxKPrKCABFAgXUAABAAEAGJCjAqAIMEfI8VMDKFGdIDzRD7pIemoAQCABq3gAAAQEICjTOr3M8s2F1FwMDBtDPjLoBVCACIPSz4r4xxX4IaTtM4hp2KQc8YJhE47y9hsJ7KQ399bS56D89pQACvGc\/vyoThv6Q7H\/2TzZPN9Va0g0uZJ4oOBxLCUQTU\/g1sRdjH7eT3lUS4QmnqZCzzm+S9UjOQ5Px1cIvqLXFmj6nzmGXi\/O3ppEbzMZoNjc8LW39595+Q4dujgnsDZ7lSXD4VmJYxaBXTxtCmxivOJzgYxkw4uSrYQUkfQnMO+T2olfV9FyouwgtFg0DK\/mdrjFO5Wt2KLDevUs4DomkylxKiXJaAF2i87cw2Ac4HEPUcf2kuHWMAdgUn1JB\/af0GGPJrC4F0jq6ZIhRUp0njK+6O5mCLXzZaVphKwH3UdrdzSnNRoin15TTq35ImFCOWAE7gHbuzsTfI2n2GIhFsk3MrHlH8hrXpbjyzCw6CpGHx4obr6vWsaY56T86W\/ud9OEHx4UtudZkqR3jc1AT5ygDedkC+b0+nMJOiu39IHLujd0G2am6PRMSsVwUliRhMT4hl1xn8M49+omHsnMcT0xP5pQYcRHPag7yI\/SqHlYhDa6gPcRkjuBh4QjCRdx4TFWgHoNIf7BbMXBVC+O03V752jZBPVZSxLuQv4ucE4zcckjAnno1DJVl5HrLE8FWONnFnFbxfK20pDO2u5pSWXj0w7Q8\/Y5l\/S9k4J38XhO1q2AhQr7j\/X5vrMKfBAwtboIun1nKS7gyuKRtehO+i1O8wMkMGGgB6Y8d7AnUBwlWJIZFNt5Fy15EVwGqKJWiFyKJzRdWGrlDY3On94QNOK8LCv9SspMFJ93NNqo83NQLmcloqYRvSFC2VPN5wHANUWFWzw2J22X72cChpn0FLGIDgQKrBT9A\/QwYLOjthLkuaGkzD2sZv59Cc561Cujy3IuMUE0Xobpbackp3oTAlBreTP\/wtTVHHRnOyAL0cQhGSbVwZsyan0YDRGIh0x0aV5ID+50B7dXI7bEuIPS8U\/+4sKopq1eiJN7fiyksDJnhooQ\/NjPsp5W0Hvgra6kfG06vBLk+tTZ2Rh4CtdByOVMq42Ls6X0sCCurKbypa5Aa9jEvLZt1s5ypZxQjGr5Rx4\/1OzY3cR67p2XSqS4gqHmlAL+7OXTnaUKlw\/sAgLH5Sq0kiBAQfvhMy4aFvwJvySLoDTA4nuKxY+wMPskF1L7WKPqrgCxC0ZSUW5um0Fkx2EWo\/k6RjGniIK+M5CeU5zK64G7C3hiDLNF\/UwED9bpkC6bh5f0hqkDaUaHdT2YTpnM6ZV7\/T33spRaWzh2J9W\/ek6OapnomqhbF7vQpZTMcXg6XzlRn55Frmz6WORkB4cAFltuxnfl4fYD0Y5g7icdX1sfyYKduC2uMGK8liE3YmK1N79MHmeOUI5PZM\/i2hpdxRWajB0O1SqkMA+pfyPtjcOjP6t+KKL3KNQ+vt+s8rb1NOTjntrf6WP5ghCOmzNIkDbxQSExf4TBj8vmB4QTPtO77lVCG00n3vZF69KzY224XBiOoR63JBMrT9aip21KjtgwGTfTg5BKs4Y33HaYB\/n4aRVCGzpHrg3vI6FoKzxLRVayYubprTtdEUKXerbGSiO6MbL2rq5KGBlAoKajaQ+dFFj1LVvnbSdN1FFjffYqPWHIGSkGrO3GzHoqtPM4Pc9Ah0kvaSUxrsCqBBCzGRqwQcM0OWyTZi80BwhZFRtUW4+y5dGyohpGRX7VQHNPPSnkSo4VTz4+tYPyVJlPrtiw+uU7oNhUPDmv7mQYUPSpgKxHU+YOv3NQA11cdx+\/8B9qa0LGytKgAi41MPspO8KB14vRiAGRhueyiyDr5Jjz6KDzrgJ0dc0j1GEHXvJFMS25zsE2Ex8TomZIvPKO8TniBIQr2AGqz0zg5uShotBmi9NPo6yVUj46MMTv5I4Qo7yAIzrejMxdI","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0Tx0AADEGKa0R8jxUwKgCDBRnwMrukh6aSA87GIAQAcbQ5gAAAQEICjy0DJo0zq9z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":119,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTx4AADEGKXUR8jxUwKgCDBRnwMrukh6aSA87GIAYAcbrWgAAAQEICjy0DJo0zq9zFwMDADD4ff1mXscPTx1YejunYGhlS20dda00CA9MfWbWHu3g7j8U0QmgRZfiKOTJ17k7erI=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":119,"pkt":"kLkxKPrKxiwDYGpkCABFAgBpTx8AADEGKXQR8jxUwKgCDBRnwMrukh7PSA87GIAYAcbTlAAAAQEICjy0DJs0zq9zFwMDADDjmg78g99zYn69X8Z1BC6AiXrK9WENvtzfMzVTHOpG\/Tuh9Fa0DihleGNYJa759xk=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":66,"pkt":"xiwDYGpkkLkxKPrKCABFAAA0AABAAEAGKcrAqAIMEfI8VMDKFGdIDzsY7pIez4AQB\/\/KXAAAAQEICjTOr488tAya","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIaUoAAEAR\/yrAqAIMATxOQNwI+xoANFOWAAEAGCESpEJEp04wqayhNgpwqhcACAAUjz2kl+dJJZ\/5pJmfYUQPx33hp98=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0553{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":180,"pkt":"AQBeAAD7kLkxKPrKCABFAACmf9YAAP8Rl8DAqAIM4AAA+xTpFOkAklETAAAAAAAFAAEAAAAACF9ob21la2l0BF90Y3AFbG9jYWwAAAwAAQ9fY29tcGFuaW9uLWxpbmvAFQAMAAEMX3NsZWVwLXByb3h5BF91ZHDAGgAMAAEFX3Jhb3DAFQAMAAEIX2FpcnBsYXnAFQAMAAHAJQAMAAEAAA2VABANTHVjYeKAmXMgaU1hY8Al","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0585{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":200,"pkt":"MzMAAAD7kLkxKPrKht1gDagnAJIR\/\/6AAAAAAAAABBRAnYr9nwX\/AgAAAAAAAAAAAAAAAAD7FOkU6QCSh5AAAAAAAAUAAQAAAAAIX2hvbWVraXQEX3RjcAVsb2NhbAAADAABD19jb21wYW5pb24tbGlua8AVAAwAAQxfc2xlZXAtcHJveHkEX3VkcMAaAAwAAQVfcmFvcMAVAAwAAQhfYWlycGxhecAVAAwAAcAlAAwAAQAADZUAEA1MdWNh4oCZcyBpTWFjwCU=","pkt_caplen":200,"pkt_type":34525,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455737,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI3cwAAEARiqjAqAIMATxOQNwI+xoANNKMAAEAGCESpELCmPpdxscpAaqNI2UACAAUdLiw0j82TxziQLO4s52BG1yXKEE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1561455738163,"flow_last_seen":1561455738163,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"169.254.162.244","src_port":49352,"dst_port":49159,"l4_proto":"tcp"}
+0383{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455738,"pkt_len":54,"pkt":"2DBiVgAckLkxKPrKCABFAAAok2wAAP8GGLzAqAIMqf6i9MDIwAcC6LXACBPPY1AQCAWHOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455738,"pkt_len":66,"pkt":"kLkxKPrKxiwDYGpkCABFAAA0AAAAAP8GrByp\/qL0wKgCDMAHwMgIE89jAui1wYAQEABYwQAAAQEIChqjwVI0zNyh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455738,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABI0+QAAEARlJDAqAIMATxOQNwI+xoANEP+AAEAGCESpEIyor5B+F8OHsEYQ28ACAAUnFfgVJ84tg8AhKdl6pcQPBXzhho=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0784{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455738,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFInqgAAP8RG\/0AAAAA\/\/\/\/\/wBEAEMBNNtyAQEGAH5K8tcAEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwoBeQMGD3f8XywuOQIF3D0HAdgwYlYAHDMEAHanAAwKTHVjYXMtaU1hY\/8AAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455739,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIH9UAAEARSKDAqAIMATxOQNwI+xoANCCwAAEAGCESpEKDU2JYW2X8MlXip1MACAAUhfdZJarQqPZ0hMJ+06XS9r9uJYs=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455739,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIbLwAAEAR+7jAqAIMATxOQNwI+xoANMiuAAEAGCESpELFaDR+m2DiENqDngYACAAUPLv5bbfxr8lUDEwRVCRiMP9WpGg=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":682,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455740,"pkt_len":86,"pkt":"xiwDYGpkkLkxKPrKCABFAABIuMAAAEARr7TAqAIMATxOQNwI+xoANOHZAAEAGCESpELrkgBVSgpbJD6eyiIACAAUBLgc9CTve28kKfB7BxbIdEel5xY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":709,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACaBM4AAEARIWHAqAIMuTzYM9wIDZYAhuzcCAAAaiESpEKmZ0918K0sABMVs09AAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":710,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACayvEAAEARjYzAqAIMnfDBMNwIDZYAhh8rCAAAaiESpEKmZ0918K0sABMVs1BAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":711,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACar8UAAEARlGzAqAIMszzAMNwIDZYAhgreCAAAaiESpEKmZ0918K0sABMVs1FAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":712,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":168,"pkt":"xiwDYGpkkLkxKPrKCABFAACa9WkAAEARYAbAqAIMnfDEPtwIDZYAhhwbCAAAaiESpEKmZ0918K0sABMVs1JAAABmBQMIJtiE6i6kxJRLo58phnvyQbwdH1IoGV\/3YC8zAuYePvTeDeuXmJ+hMpM+Z145gcRU0WpajKrpUh0EIdumCzsyn4WKcuXddBNppoCNhIFnLa3lhKJz05n+MdP5HkVFVJtym9c0","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1561455741430,"flow_last_seen":1561455741430,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":50191,"dst_port":1900,"l4_proto":"udp"}
+0559{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":179,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClZnoAAAIRnx\/AqAIM7\/\/\/+sQPB2wAke7DTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":713,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1561455741430,"flow_last_seen":1561455741430,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":50191,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1561455741432,"flow_last_seen":1561455741432,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":57546,"dst_port":1900,"l4_proto":"udp"}
+0558{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":179,"pkt":"AQBef\/\/6kLkxKPrKCABFAAClgs4AAAIRgsvAqAIM7\/\/\/+uDKB2wAkdIITS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANClNUOiB1cm46c2NoZW1hcy11cG5wLW9yZzpkZXZpY2U6SW50ZXJuZXRHYXRld2F5RGV2aWNlOjENCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMw0KDQo=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":714,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1561455741432,"flow_last_seen":1561455741432,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":57546,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0433{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1561455741484,"flow_last_seen":1561455741484,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","l4_proto":"icmp"}
+0411{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455741,"pkt_len":70,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4hv4AAEABnOPAqAIMW\/w4MwMDoFgAAAAARQAA73IeAAAxEb\/8W\/w4M8CoAgx\/wNwIANsAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":716,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1561455741484,"flow_last_seen":1561455741484,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0524{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":4,"flow_packet_id":255,"flow_first_seen":1561455688704,"flow_last_seen":1561455741680,"flow_tot_l4_data_len":29222,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","category":"Chat"}}
+0525{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":718,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":4,"flow_packet_id":255,"flow_first_seen":1561455688704,"flow_last_seen":1561455741680,"flow_tot_l4_data_len":29222,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","category":"Chat"}}
+0410{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":726,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455742,"pkt_len":70,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4TCgAAEAB17nAqAIMW\/w4MwMDoOEAAAAARQAAZumbAAAxEUkIW\/w4M8CoAgx\/wNwIAFIAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":727,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455742,"pkt_len":70,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4HrIAAEABBTDAqAIMW\/w4MwMDoOEAAAAARQAAZp1RAAAxEZVSW\/w4M8CoAgx\/wNwIAFIAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":728,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","pkt_oversize":false,"pkt_ts":1561455742,"pkt_len":70,"pkt":"xiwDYGpkkLkxKPrKCABFAAA4twoAAEABbNfAqAIMW\/w4MwMDoOEAAAAARQAAZq9YAAAxEYNLW\/w4M8CoAgx\/wNwIAFIAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":2,"flow_packet_id":24,"flow_first_seen":1561455688201,"flow_last_seen":1561455742310,"flow_tot_l4_data_len":7191,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":299,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"17.242.60.84","src_port":49354,"dst_port":5223,"l4_proto":"tcp"}
+0506{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1561455738163,"flow_last_seen":1561455738163,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"169.254.162.244","src_port":49352,"dst_port":49159,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":24,"flow_packet_id":2,"flow_first_seen":1561455738163,"flow_last_seen":1561455738163,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":26,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"169.254.162.244","src_port":49352,"dst_port":49159,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":20,"flow_packet_id":85,"flow_first_seen":1561455707474,"flow_last_seen":1561455707887,"flow_tot_l4_data_len":44650,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":525,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.52","src_port":50504,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":21,"flow_packet_id":5,"flow_first_seen":1561455721320,"flow_last_seen":1561455738622,"flow_tot_l4_data_len":1540,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":22,"flow_packet_id":164,"flow_first_seen":1561455730495,"flow_last_seen":1561455742404,"flow_tot_l4_data_len":26358,"flow_min_l4_data_len":34,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":160,"midstream":0,"l3_proto":"ip4","src_ip":"91.252.56.51","dst_ip":"192.168.2.12","src_port":32704,"dst_port":56328,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1561455741432,"flow_last_seen":1561455741432,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":57546,"dst_port":1900,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":5,"flow_packet_id":2,"flow_first_seen":1561455689728,"flow_last_seen":1561455689761,"flow_tot_l4_data_len":126,"flow_min_l4_data_len":55,"flow_max_l4_data_len":71,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":55296,"dst_port":53,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":12,"flow_packet_id":5,"flow_first_seen":1561455705874,"flow_last_seen":1561455737895,"flow_tot_l4_data_len":374,"flow_min_l4_data_len":57,"flow_max_l4_data_len":146,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::414:409d:8afd:9f05","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1561455701309,"flow_last_seen":1561455731356,"flow_tot_l4_data_len":1392,"flow_min_l4_data_len":347,"flow_max_l4_data_len":349,"flow_avg_l4_data_len":348,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":0,"flow_packet_id":2,"flow_first_seen":1561455687942,"flow_last_seen":1561455687944,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":40,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":51431,"dst_port":53,"l4_proto":"udp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1561455702980,"flow_last_seen":1561455703262,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":20,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"17.171.47.85","dst_ip":"192.168.2.12","src_port":443,"dst_port":50502,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1561455702980,"flow_last_seen":1561455703262,"flow_tot_l4_data_len":270,"flow_min_l4_data_len":20,"flow_max_l4_data_len":63,"flow_avg_l4_data_len":33,"midstream":1,"l3_proto":"ip4","src_ip":"17.171.47.85","dst_ip":"192.168.2.12","src_port":443,"dst_port":50502,"l4_proto":"tcp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1561455704556,"flow_last_seen":1561455704556,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.162.244","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":17,"flow_packet_id":8,"flow_first_seen":1561455706914,"flow_last_seen":1561455741420,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.196.62","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":15,"flow_packet_id":8,"flow_first_seen":1561455706913,"flow_last_seen":1561455741419,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.193.48","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":11,"flow_packet_id":5,"flow_first_seen":1561455705874,"flow_last_seen":1561455737893,"flow_tot_l4_data_len":374,"flow_min_l4_data_len":57,"flow_max_l4_data_len":146,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1561455688445,"flow_last_seen":1561455726442,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":23,"flow_packet_id":16,"flow_first_seen":1561455731665,"flow_last_seen":1561455741046,"flow_tot_l4_data_len":832,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"1.60.78.64","src_port":56328,"dst_port":64282,"l4_proto":"udp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1561455741430,"flow_last_seen":1561455741430,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":50191,"dst_port":1900,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":6,"flow_packet_id":50,"flow_first_seen":1561455689909,"flow_last_seen":1561455690302,"flow_tot_l4_data_len":23052,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":461,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.51","src_port":50503,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1561455706979,"flow_last_seen":1561455716020,"flow_tot_l4_data_len":535,"flow_min_l4_data_len":109,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":133,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"239.255.255.250","src_port":64716,"dst_port":1900,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1561455704557,"flow_last_seen":1561455704557,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"239.255.255.250","src_port":50384,"dst_port":1900,"l4_proto":"udp"}
+0435{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1561455741484,"flow_last_seen":1561455742405,"flow_tot_l4_data_len":144,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"91.252.56.51","l4_proto":"icmp"}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1561455707435,"flow_last_seen":1561455707470,"flow_tot_l4_data_len":125,"flow_min_l4_data_len":42,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60549,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":4,"flow_packet_id":263,"flow_first_seen":1561455688704,"flow_last_seen":1561455743434,"flow_tot_l4_data_len":29613,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1420,"flow_avg_l4_data_len":112,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"157.240.20.53","src_port":49355,"dst_port":5222,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":16,"flow_packet_id":8,"flow_first_seen":1561455706913,"flow_last_seen":1561455741420,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"179.60.192.48","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1561455687991,"flow_last_seen":1561455688018,"flow_tot_l4_data_len":119,"flow_min_l4_data_len":40,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"192.168.2.1","src_port":60765,"dst_port":53,"l4_proto":"udp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":14,"flow_packet_id":8,"flow_first_seen":1561455706912,"flow_last_seen":1561455741419,"flow_tot_l4_data_len":826,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":103,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"185.60.216.51","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap","flow_id":13,"flow_packet_id":49,"flow_first_seen":1561455706912,"flow_last_seen":1561455741419,"flow_tot_l4_data_len":4351,"flow_min_l4_data_len":10,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":88,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.12","dst_ip":"31.13.86.48","src_port":56328,"dst_port":3478,"l4_proto":"udp"}
+0146{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wa_voice.pcap"}
diff --git a/tests/result/nDPId_waze.pcap.txt b/tests/result/nDPId_waze.pcap.txt
new file mode 100644
index 000000000..bc1c8d56a
--- /dev/null
+++ b/tests/result/nDPId_waze.pcap.txt
@@ -0,0 +1,494 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1435587866603,"flow_last_seen":1435587866603,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"174.37.231.81","src_port":42256,"dst_port":5222,"l4_proto":"tcp"}
+0429{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587866,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNMsFAAEAGQsYKECWdriXnUaUQFGaA18okWhY9doAYAVcoQwAAAQEICgAIazhBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNMsJAAEAGQsUKECWdriXnUaUQFGaA18okWhY9doAYAVcoEAAAAQEICgAIa2tBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1435587867443,"flow_last_seen":1435587867443,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.89.75.198","src_port":46214,"dst_port":123,"l4_proto":"udp"}
+0424{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":90,"pkt":"ABoRAAACABoRAAABCABFAABMAABAAEARHHkKCAAByFlLxrSGAHsAOIB9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANk705txaHKW","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1435587867443,"flow_last_seen":1435587867443,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.89.75.198","src_port":46214,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP","category":"System"}}
+0424{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":90,"pkt":"ABoRAAACABoRAAABCABFAABMdHBAABAR2AjIWUvGCggAAQB7tIYAOEf+HAIA7AAAAUgAAAbvyDaVGNk70ieZS5oL2TvTm3FocpbZO9ObncvLHNk705ud0JHn","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0453{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1435587867755,"flow_last_seen":1435587867755,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8zNlAAEAGoisKCAABQSeAh9aDAFDjx6dUAAAAAKAC\/\/+uwgAAAgQFtAQCCAoACGuNAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHFAABAGKqhBJ4CHCggAAQBQ1oMcOFir48enVVAS\/\/8NRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAozNpAAEAGoj4KCAABQSeAh9aDAFDjx6dVHDhYrFAQ\/\/8NSAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0732{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":317,"pkt":"ABoRAAACABoRAAABCABFAAEvzNtAAEAGoTYKCAABQSeAh9aDAFDjx6dVHDhYrFAY\/\/9cJAAAR0VUIC94dHJhMi5iaW4gSFRUUC8xLjENCkFjY2VwdDogKi8qLCBhcHBsaWNhdGlvbi92bmQud2FwLm1tcy1tZXNzYWdlLCBhcHBsaWNhdGlvbi92bmQud2FwLnNpYw0KeC13YXAtcHJvZmlsZTogaHR0cDovL3d3dy5vcGVubW9iaWxlYWxsaWFuY2Uub3JnL3RlY2gvcHJvZmlsZXMvVUFQUk9GL2NjcHBzY2hlbWEtMjAwMjEyMTIjDQpIb3N0OiB4dHJhMS5ncHNvbmV4dHJhLm5ldA0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogQW5kcm9pZA0KDQo=","pkt_caplen":317,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1435587867755,"flow_last_seen":1435587867781,"flow_tot_l4_data_len":363,"flow_min_l4_data_len":20,"flow_max_l4_data_len":283,"flow_avg_l4_data_len":90,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"xtra1.gpsonextra.net","url":"xtra1.gpsonextra.net\/xtra2.bin","code":0,"content_type":"","user_agent":"Android"}}
+0378{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587867,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHJAABAGKqdBJ4CHCggAAQBQ1oMcOFis48eoXFAQ\/\/8MQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNMsNAAEAGQsQKECWdriXnUaUQFGaA18okWhY9doAYAVcnqgAAAQEICgAIa9FBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1435587868632,"flow_last_seen":1435587868632,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45529,"dst_port":80,"l4_proto":"tcp"}
+0407{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA814xAAEAGPpQKCAABNubjrLHZAFCatruPAAAAAKAC\/\/+u6AAAAgQFtAQCCAoACGwDAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHNAABAG0cE25uOsCggAAQBQsdllSURwmra7kFAS\/\/\/ZDAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1435587868634,"flow_last_seen":1435587868634,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8jYZAAEAGx0MKCAABLjOtto0EAbvOcuGFAAAAAKAC\/\/+3SQAAAgQFtAQCCAoACGwDAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHRAABAGEGouM622CggAAQG7jQQxjR56znLhhlAS\/\/87IAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1435587868635,"flow_last_seen":1435587868635,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8H6lAAEAGNSEKCAABLjOtto0GAbtbbHOtAAAAAKAC\/\/+YJQAAAgQFtAQCCAoACGwEAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHVAABAGEGkuM622CggAAQG7jQakk4xSW2xzrlAS\/\/87HgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo141AAEAGPqcKCAABNubjrLHZAFCatruQZUlEcVAQ\/\/\/ZDQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAojYdAAEAGx1YKCAABLjOtto0EAbvOcuGGMY0ee1AQ\/\/87IQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoH6pAAEAGNTQKCAABLjOtto0GAbtbbHOupJOMU1AQ\/\/87HwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0493{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":137,"pkt":"ABoRAAACABoRAAABCABFAAB7145AAEAGPlMKCAABNubjrLHZAFCatruQZUlEcVAY\/\/9jcwAAR0VUIC9pbWFnZXMvSEQvQ0gyLnBuZyBIVFRQLzEuMA0KSG9zdDogcm9hZHNoaWVsZHMud2F6ZS5jb20NClVzZXItQWdlbnQ6IC8zLjkuNC4wDQo=","pkt_caplen":137,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1435587868632,"flow_last_seen":1435587868906,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":20,"flow_max_l4_data_len":103,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45529,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"roadshields.waze.com","url":"roadshields.waze.com\/images\/HD\/CH2.png","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0380{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHZAABAG0b425uOsCggAAQBQsdllSURxmra741AQ\/\/\/YugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAq149AAEAGPqMKCAABNubjrLHZAFCatrvjZUlEcVAY\/\/\/LpgAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHdAABAG0b025uOsCggAAQBQsdllSURxmra75VAQ\/\/\/YuAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1435587868996,"flow_last_seen":1435587868996,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8cVdAAEAGm2kKCAABrcJ2MI7pAburox1\/AAAAAKAC\/\/9UDAAAAgQFtAQCCAoACGwoAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587868,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHhAABAGyFytwnYwCggAAQG7julUXOKAq6MdgFAS\/\/\/xMQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocVhAAEAGm3wKCAABrcJ2MI7pAburox2AVFzigVAQ\/\/\/xMgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADejYhAAEAGxp8KCAABLjOtto0EAbvOcuGGMY0ee1AY\/\/+QzQAAFgMBALEBAACtAwFksj7uK\/R43HfLeC3YagY+KKYMl8Gp\/0RLJxa1HLl7kwAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1435587868634,"flow_last_seen":1435587869002,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0379{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHlAABAGEGUuM622CggAAQG7jQQxjR57znLiPFAQ\/\/86awAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2214{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":1422,"pkt":"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","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo15BAAEAGPqQKCAABNubjrLHZAFCatrvlZUlJyVAQ\/\/\/TYAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2574{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":1678,"pkt":"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","pkt_caplen":1678,"pkt_type":2048,"pkt_ipoffset":14}
+0614{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":228,"pkt":"ABoRAAACABoRAAABCABFAADWcVlAAEAGms0KCAABrcJ2MI7pAburox2AVFzigVAY\/\/9mQwAAFgMBAKkBAAClAwGlXtzD4CYR60HmpO3Epp6iuyOtJr59nHMXn8J60vKduCBvCKEM0sorljArU6qw4dCFWjF23JNAwYV6Z6lEcvF3aQAcwAnACsATwBQAMwA5ADIAOMAHwBEALwA1AAUA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1435587868996,"flow_last_seen":1435587869054,"flow_tot_l4_data_len":274,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0380{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodHxAABAGyFitwnYwCggAAQG7julUXOKBq6MeLlAQ\/\/\/whAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo15FAAEAGPqMKCAABNubjrLHZAFCatrvlZUlQIVAQ\/\/\/NCAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodH1AABAG0bc25uOsCggAAQBQsdllSVAhmra75VAR\/\/\/NBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0627{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADeH6tAAEAGNH0KCAABLjOtto0GAbtbbHOupJOMU1AY\/\/9DnQAAFgMBALEBAACtAwGHsWGgHOt8dG+f+uI0AkWsU3L2DLrIYI7d\/JEa4+8W9QAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1435587868635,"flow_last_seen":1435587869106,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0379{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodH5AABAGEGAuM622CggAAQG7jQakk4xTW2x0ZFAQ\/\/86aQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":187,"pkt":"ABoRAAACABoRAAABCABFAACtdH9AABAGx9CtwnYwCggAAQG7julUXOKBq6MeLlAY\/\/9aKwAAFgMBAFECAABNAwFVkVUdTZdNQZ4vLa\/vFFCecMZjU0GJsAgafF+WvV97nSBvCKEM0sorljArU6qw4dCFWjF23JNAwYV6Z6lEcvF3acARAAAF\/wEAAQAUAwEAAQEWAwEAJNog+Fm3DNfNFmROpYXuJw9xo8XNwqprowJ+Om9jMAaOVABf4g==","pkt_caplen":187,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":6,"flow_packet_id":6,"flow_first_seen":1435587868996,"flow_last_seen":1435587869107,"flow_tot_l4_data_len":447,"flow_min_l4_data_len":20,"flow_max_l4_data_len":194,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f8f5b71e02603b283e55b50d17ede861","ja3s":"23f1f6e2f0015c166df49fdab4280370","unsafe_cipher":2,"cipher":"TLS_ECDHE_RSA_WITH_RC4_128_SHA"}}
+0381{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo15JAAEAGPqIKCAABNubjrLHZAFCatrvlZUlQIlAQ\/\/\/NBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocVpAAEAGm3oKCAABrcJ2MI7pAburox4uVFzjBlAQ\/\/\/v\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":101,"pkt":"ABoRAAACABoRAAABCABFAABXcVtAAEAGm0oKCAABrcJ2MI7pAburox4uVFzjBlAY\/\/\/hJQAAFAMBAAEBFgMBACTBPx2ymvoFQmAuJHwqIX\/9mxl\/ucrNp\/rFjciYy7qxtwjVS7w=","pkt_caplen":101,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIBAABAGyFStwnYwCggAAQG7julUXOMGq6MeXVAQ\/\/\/v0AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1088{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":572,"pkt":"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","pkt_caplen":572,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIFAABAGyFOtwnYwCggAAQG7julUXOMGq6MgY1AQ\/\/\/tygAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo15NAAEAGPqEKCAABNubjrLHZAFCatrvlZUlQIlAR\/\/\/NBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIJAABAG0bI25uOsCggAAQBQsdllSVAimra75lAQ\/\/\/NBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1435587869162,"flow_last_seen":1435587869162,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45536,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8XmhAAEAGt7gKCAABNubjrLHgAFDjpDJQAAAAAKAC\/\/\/u\/QAAAgQFtAQCCAoACGw4AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIRAABAG0bA25uOsCggAAQBQseAcW82v46QyUVAS\/\/\/ZBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoXmlAAEAGt8sKCAABNubjrLHgAFDjpDJRHFvNsFAQ\/\/\/ZBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":194,"pkt":"ABoRAAACABoRAAABCABFAAC0XmpAAEAGtz4KCAABNubjrLHgAFDjpDJRHFvNsFAY\/\/8QEAAAR0VUIC9sYW5nX2Fzci9sYW5nLnBvcnR1Z3Vlc2VfYnJfYXNyIEhUVFAvMS4wDQpIb3N0OiBjcmVzLndhemUuY29tDQpVc2VyLUFnZW50OiAvMy45LjQuMA0KSWYtTW9kaWZpZWQtU2luY2U6IFR1ZSwgMjggQXByIDIwMTUgMTQ6NTA6MjUgR01UDQo=","pkt_caplen":194,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1435587869162,"flow_last_seen":1435587869165,"flow_tot_l4_data_len":240,"flow_min_l4_data_len":20,"flow_max_l4_data_len":160,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45536,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/lang_asr\/lang.portuguese_br_asr","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0380{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIVAABAG0a825uOsCggAAQBQseAcW82w46Qy3VAQ\/\/\/YegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAqXmtAAEAGt8cKCAABNubjrLHgAFDjpDLdHFvNsFAY\/\/\/LZgAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIZAABAG0a425uOsCggAAQBQseAcW82w46Qy31AQ\/\/\/YeAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0905{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":447,"pkt":"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","pkt_caplen":447,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoXmxAAEAGt8gKCAABNubjrLHgAFDjpDLfHFvPOVAQ\/\/\/W7wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIhAABAG0aw25uOsCggAAQBQseAcW88546Qy31AR\/\/\/W7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoXm1AAEAGt8cKCAABNubjrLHgAFDjpDLfHFvPOVAR\/\/\/W7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIlAABAG0as25uOsCggAAQBQseAcW88546Qy4FAQ\/\/\/W7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodIpAABAG0ao25uOsCggAAQBQseAcW88546Qy4FAR\/\/\/W7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoXm5AAEAGt8YKCAABNubjrLHgAFDjpDLgHFvPOlAQ\/\/\/W7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoXm9AAEAGt8UKCAABNubjrLHgAFDjpDLgHFvPOlAQ\/\/\/W7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1123{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":602,"pkt":"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","pkt_caplen":602,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocV1AAEAGm3cKCAABrcJ2MI7pAburoyBjVFzlKlAQ\/\/\/rpgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1747{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":1066,"pkt":"ABoRAAACABoRAAABCABFAAQcdIxAABAGDF4uM622CggAAQG7jQakk4xTW2x0ZFAY\/\/9J2QAAFgMBADUCAAAxAwH9mF72oxu76M+yQHYrXOQ0cqC6GWlKoWmFTaoyeqnTQQAANQAACf8BAAEAACMAABYDAQwDCwAL\/wAL\/AAEfjCCBHowggNioAMCAQICCHZ4M8fShJA1MA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpHb29nbGUgSW5jMSUwIwYDVQQDExxHb29nbGUgSW50ZXJuZXQgQXV0aG9yaXR5IEcyMB4XDTE0MTEwNjE2MDkyMFoXDTE1MTEwNjE2MDkyMFowajELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEzARBgNVBAoMCkdvb2dsZSBJbmMxGTAXBgNVBAMMECoud29ybGQud2F6ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dfWK79dCVb2w7\/g3HRrN4i9qgMlhgQofXQQXw0gD87T9syXmF5pz0Cwmmw7pjObFe\/feCHhP5Q5TYPxHvQFVRms3bi3u+ghHQQErMDQ+nN0nE87Jr74s0kO4gi5kxlnWO5u\/CLx56XE08DG89cYwLep2yXaw7FpQ88oYQg1iuiHwkbjtoRpijShFrwII4yGENpw3VHkb6Fx\/gAEFaQxZm6zeckwQ1HY64ImqtGYTIGt4mDB1FJaTUZwduWO6oPZLB\/Kr54+3jOco4hPhs\/aZ7TMra\/18qq1rDcwobkr4\/HCy6N0TGrQ6Dyn4sPpnwba++QjAmdGfjGSZmIvFi42lAgMBAAGjggFDMIIBPzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0RBBQwEoIQKi53b3JsZC53YXplLmNvbTBoBggrBgEFBQcBAQRcMFowKwYIKwYBBQUHMAKGH2h0dHA6Ly9wa2kuZ29vZ2xlLmNvbS9HSUFHMi5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly9jbGllbnRzMS5nb29nbGUuY29tL29jc3AwHQYDVR0OBBYEFNZsbyCbuRAq04t6Ot9dGm1t3uVoMAwGA1UdEwEB\/wQCMAAwHwYDVR0jBBgwFoAUSt0GFhu89mi1dvWBtrtiGrpagS8wFwYDVR0gBBAwDjAMBgorBgEEAdZ5AgUBMDAGA1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9wa2kuZ29vZ2xlLmNvbS9HSUFHMi5jcmwwDQYJKoZIhvcNAQEFBQADggEBAFaY2zopJZdE3mmntQjiL6V0yWpBnkS3\/vdmjvi7m0l8VT3fDFeuTu6nvu5k8w==","pkt_caplen":1066,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1435587868635,"flow_last_seen":1435587869425,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}}
+4623{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":3201,"pkt":"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","pkt_caplen":3201,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1435587868634,"flow_last_seen":1435587869476,"flow_tot_l4_data_len":3469,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3167,"flow_avg_l4_data_len":578,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0379{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoH6xAAEAGNTIKCAABLjOtto0GAbtbbHRkpJOQR1AQ\/\/82dQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3261{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":2189,"pkt":"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","pkt_caplen":2189,"pkt_type":2048,"pkt_ipoffset":14}
+1053{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":5,"flow_packet_id":8,"flow_first_seen":1435587868635,"flow_last_seen":1435587869477,"flow_tot_l4_data_len":3509,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2155,"flow_avg_l4_data_len":438,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0379{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAojYlAAEAGx1QKCAABLjOtto0EAbvOcuI8MY0qxlAQ\/\/8uIAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoH61AAEAGNTEKCAABLjOtto0GAbtbbHRkpJOYnlAQ\/\/8uHgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodI9AABAGEE8uM622CggAAQG7jQQxjSrGznLjglAQ\/\/8s2gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_id":5,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":5,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodJBAABAGEE4uM622CggAAQG7jQakk5ieW2x1qlAQ\/\/8s2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0703{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdJFAABAGD2MuM622CggAAQG7jQQxjSrGznLjglAY\/\/+PcAAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJxGEx9zFwckUgNQBtx5H\/W\/h1C3aYZhymNU2\/2R9wH3cbNDe\/pcnD5Mj8dG+IUh7142J\/QLPvxGJoHgWvhuJRn7c3B+LQbMZa2+KAfKEQFuO8psScmZe4khc8Dys9uG\/QlJczQGRiqjSArMj3AP\/xl\/l2EibkyBNybV37GpOG0FQ7DOvtcBvcyZmyxekrNRKBBQDAQABARYDAQAwrGu4vKSO\/IyqnPa4Ivf+GCFiqLHaaoH8msjDTXuTRxmXjDeZshWOhlo7YM6pnsU9","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":203,"pkt":"ABoRAAACABoRAAABCABFAAC9jYtAAEAGxr0KCAABLjOtto0EAbvOcuOCMY0rsFAY\/\/9h4AAAFwMBAJBvR2hOdPa8CYAoX\/lAmkYJrAYY77UT2w6xBK4KfLNjEx6b7zErP3DqXb26rhX4qlgZfHxMHrML6EAGZY+g7qrNjkrPzwEIf46\/zytgbvzdEFWEw7Bbgkn9mtDnHG3Y6webRYm6WtfqOVCokbdjadj7Vl00z1Ugiv2px9sBvqjyJeF6QnA4drGIjKtL8IXZ8eQ=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodJJAABAGEEwuM622CggAAQG7jQQxjSuwznLkF1AQ\/\/8rWwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0696{"flow_id":5,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdJNAABAGD2EuM622CggAAQG7jQakk5ieW2x1qlAY\/\/8jaAAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJ9jDPNm9cwmXboX+w4TOLFuUaVIef4MxLOZx0kcEcUy5N6AtsIXqt108b8x0xDprhXKx3Gr+uAZfxlybMhg1FeNH65h\/xlczy3hO5uKVO3ByRWTazfwUMzlGomLIyA\/fTUvMMKGW3VgeGQar1a6Wb33WAARknDCiSBoUvunNRPxi6RI8SAKzcXc0kCJntobEYhQDAQABARYDAQAw3x82M8XOY0lFeKApQnBNkGGJMwNQ6pt+tzRRmtT9Lk0k7qmg6BGtSPqFbR99Okjb","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":590,"pkt":"ABoRAAACABoRAAABCABFAAJAjYxAAEAGxTkKCAABLjOtto0EAbvOcuQXMY0rsFAQ\/\/8SYgAAFwMBAlBTgHKvXse3Q34qsmECusAZwERvU7TcGtVXgVHxXhM58XPN9udm36iJCbFTRyITTdpClw6Pto78XTVXnh63YpntxyjGgXYBhHlif2+\/xaZE6dvCRb9SsR4NUAl0v2XcpvF8g3jG3t6bor16PE4igPEpRLU5jFBLLuOFH+v6LKHJyQvi+JDde\/iT+8IsBY5dZM4cGg0lpP0jE9ux1QrikByEGA956FjcuT5Tr+XWC4qxPPpfF6iv2YWKS71k5v8Tb20qwsZOMYbMx87icRCpYv7xdMKPjW71ORfNTSDIMF+iRsgYeRYtia00qL+fGVUlL1JI74vbOCeWCc+GL9UR\/yg+4M1T1brH8J3HTBOOyEughp1XAFNS2pqAwvbtxGSG9tlXQORKSONcSuzSsGb4bZJtJIKZ9VflfGt+dgOvhiK8rrfkdHKA8w9UL9rnCkrxg2JsK0zUxLoHkXv+naflNq\/dQ4a8tG08\/Zt0DJUcYCI75tuzc4mvhuHqM8Nl3b9eXlY\/Vu+yu1kuE2WeTTT5wNBySCZIU5hO4d79cgfcAQhynrBaZIq23TldwMEbPK4Gzh4LEJ8wDxX3AFdBO92EO7bRAjg71BqQ04pu2pGcjLmv5yZ3wvGIiE4SJDLwWP\/KR4DUFw4l4VxmxZxGuAmbu1wyeGQ43UdmVlt8JpwA5wG4pTCfxwb7zDffFbKt0I9g4bAffv8=","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodJRAABAGEEouM622CggAAQG7jQQxjSuwznLmL1AQ\/\/8pQwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":115,"pkt":"ABoRAAACABoRAAABCABFAABljY1AAEAGxxMKCAABLjOtto0EAbvOcuYvMY0rsFAY\/\/+0VgAAYzgcfnOutMjMmE3N5HYCaVeQQOR\/ta2z2l+P33hyM54FnCnzYb7aruJ72WdGvn4oM1MU4eW4VtF58taNLQ==","pkt_caplen":115,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":5,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587869,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoH69AAEAGNS8KCAABLjOtto0GAbtbbHWqpJOZiFAQ\/\/8r7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587870,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNMsRAAEAGQsMKECWdriXnUaUQFGaA18okWhY9doAYAVcm3gAAAQEICgAIbJ1BJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+2295{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":1422,"pkt":"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","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1435587867755,"flow_last_seen":1435587871459,"flow_tot_l4_data_len":1771,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":295,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp","ndpi": {"flow_risk": {"4":"Binary application transfer"},"proto":"HTTP","category":"Download-FileTransfer-FileSharing"},"http": {"hostname":"xtra1.gpsonextra.net","url":"xtra1.gpsonextra.net\/xtra2.bin","code":200,"content_type":"application\/octet-stream","user_agent":"Android"}}
+0379{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAozNxAAEAGojwKCAABQSeAh9aDAFDjx6hcHDheBFAQ\/\/8G6QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1435587871656,"flow_last_seen":1435587871656,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45538,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8\/jRAAEAGF+wKCAABNubjrLHiAFBcJZMGAAAAAKAC\/\/8UywAAAgQFtAQCCAoACG0yAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodJ1AABAG0Zc25uOsCggAAQBQseKj2mz5XCWTB1AS\/\/\/ZAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo\/jVAAEAGF\/8KCAABNubjrLHiAFBcJZMHo9ps+lAQ\/\/\/ZBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1435587871658,"flow_last_seen":1435587871658,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45540,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8NxhAAEAG3wgKCAABNubjrLHkAFDBi1oqAAAAAKAC\/\/\/oPgAAAgQFtAQCCAoACG0yAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodJ5AABAG0ZY25uOsCggAAQBQseQ+dKXVwYtaK1AS\/\/\/ZAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNxlAAEAG3xsKCAABNubjrLHkAFDBi1orPnSl1lAQ\/\/\/ZAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0591{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":209,"pkt":"ABoRAAACABoRAAABCABFAADD\/jZAAEAGF2MKCAABNubjrLHiAFBcJZMHo9ps+lAY\/\/+63QAAR0VUIC9sYW5nX3R0cy9sYW5nLnBvcnR1Z3Vlc2VfYnJfdHRzP3J0c2VydmVyLWlkPTE1IEhUVFAvMS4wDQpIb3N0OiBjcmVzLndhemUuY29tDQpVc2VyLUFnZW50OiAvMy45LjQuMA0KSWYtTW9kaWZpZWQtU2luY2U6IFdlZCwgMDggQXByIDIwMTUgMTI6MTI6MjcgR01UDQo=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1435587871656,"flow_last_seen":1435587871689,"flow_tot_l4_data_len":255,"flow_min_l4_data_len":20,"flow_max_l4_data_len":175,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45538,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/lang_tts\/lang.portuguese_br_tts?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0381{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodJ9AABAG0ZU25uOsCggAAQBQseKj2mz6XCWTolAQ\/\/\/YaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAq\/jdAAEAGF\/sKCAABNubjrLHiAFBcJZOio9ps+lAY\/\/\/LVQAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKBAABAG0ZQ25uOsCggAAQBQseKj2mz6XCWTpFAQ\/\/\/YZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0586{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":207,"pkt":"ABoRAAACABoRAAABCABFAADBNxpAAEAG3oEKCAABNubjrLHkAFDBi1orPnSl1lAY\/\/8BLAAAR0VUIC9zaGllbGRzX2NvbmZfbmV3X2xhdGFtP3J0c2VydmVyLWlkPTE1IEhUVFAvMS4wDQpIb3N0OiByb2Fkc2hpZWxkcy53YXplLmNvbQ0KVXNlci1BZ2VudDogLzMuOS40LjANCklmLU1vZGlmaWVkLVNpbmNlOiBTdW4sIDI5IE1hciAyMDE1IDExOjI5OjUxIEdNVA0K","pkt_caplen":207,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1435587871658,"flow_last_seen":1435587871690,"flow_tot_l4_data_len":253,"flow_min_l4_data_len":20,"flow_max_l4_data_len":173,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45540,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"roadshields.waze.com","url":"roadshields.waze.com\/shields_conf_new_latam?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0381{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKFAABAG0ZM25uOsCggAAQBQseQ+dKXWwYtaxFAQ\/\/\/YaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAqNxtAAEAG3xcKCAABNubjrLHkAFDBi1rEPnSl1lAY\/\/\/LVQAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKJAABAG0ZI25uOsCggAAQBQseQ+dKXWwYtaxlAQ\/\/\/YZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4296{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":2790,"pkt":"ABoRAAACABoRAAABCABFAArYdKNAABAGH8ZBJ4CHCggAAQBQ1oMcOF4E48eoXFAQ\/\/8rDAAAAEwVYvba9\/EXiQIHOwAAAOkAFyFmAP\/x\/\/oqvhIPIWUrpFAJPn0IXXc2oQzWKsGHyaf\/\/5+MsH3l1SWrkbn7jv9y\/+getPxX\/LAMxAIHOwAAAOgADyFlAAAbAA2KZxNOIWbMPJCyK48F5453oQ328XDpEQn\/\/6ygFzhlKyeIIBwA7wCU\/7MWUfh8+UcWbQIHOwAAAN8ATiFmAP\/3\/+8jBBRpIWbTu47oPSACcsm8oQy+sL9mFj\/\/\/6IXL61SJyW3\/Qr9lAAUACsfL\/0r\/iIL4QIHOwAAAO4AaSFmAAAdAAryYBUSIWVXfDQKN5oLgg71oQ5Z5pcEDW3\/\/6ixsq6rniYQSAIFdgBf\/w4bgQH3APgPWQIHOwAAAOcAEiFlAP\/j\/\/DxlRZVIWYY8JNEPloEHALIoQ1vQ8GTYDL\/\/6E2rN0R5CWUz7H8P\/+h\/\/se7PxI\/L4MTQIHOwAAANoAVSFmAAAhAAv9sBcTIWa9+lEqMiQFTPQaoQzOSO06IfP\/\/6oEk4\/62yakhOj\/sQA+\/8cVbAgKBlQVkgIHOwAAANUAEyFmAP\/r\/\/wjKhlAIWZMYH+TMBMCY4QOoQ1M90JnLbj\/\/6YuHpxVRCfZm7X8uP\/UAAAqnPZD91MFXQIHOwAAAAwAQCFmAP\/a\/\/\/DKxpKIWYAuMDdNL0AKwngoQzDQ0JGQ9P\/\/6NdNFhluycfB138yQAp\/9cpNfal+DsFDQIHOwAAABAASiFmAP\/f\/\/\/olhs+IWbueQRpLBABTnKQoQ2aAGzw2PD\/\/6sXCtt8iydxBKP\/aQAv\/\/0XKPXx9uMVrgIHOwAAAAMAPiFmAAAYAAAFchwyIWYP4iqSLmsKAQsZoQ2U3UVMQ0H\/\/6MjvEVbRShJJnf7Pf+KAAQoUvVI9sQIbgIHOwAAAOgAMiFmAAAXAA7ASB1aIWZV0viAKqUAlY1joQ33Ym9G8Wj\/\/6zc6lUwbieva2IAiP\/+ABQWWvY3940WlgIHOwABAOsAWiFmAAAUABRNGB9FIWZ4aGxTMF0EHU3DoQxX2hkNpAz\/\/6gU6p1gxSe5wpsDQv\/BAGgm1wzxC3sITgIHOwAAAOMARSFmAP\/2AAo0hCBgIWaQkAOINXgFxFNzoQ3k\/MW4P4H\/\/6fEAq701iaP3\/P8zP+T\/+0dvPzD\/UUOsgIHOwAAAPgAYCFmAABX\/\/xMeAMDwh8BACQaTg0f\/WMAoQzt\/5fuqwAQTIP\/1isq\/\/wAAAc7AgB38E7\/N\/1PAKEMP\/+WXtv\/pDPw\/+meDQJbAAEHOwMABthOCpz9QAChDLP\/wla8\/5iDlQAhaV0BeQACBzsEAF3STv6a\/U8AoQz7\/5b9nQArhXb\/zBwk\/+j\/\/wc7BQAiQE4CRv0zAKEMJv\/CCIUADyUdAE9VwP8WAAEHOwYAARhODQr9XwChDdX\/l5Yj\/4TqKwAhVIcABwACBzsHAEZgThIQ\/VkAoQ1YABisAf+QMHr\/u8KgAe8AAQc7CQADmE4Jq\/1ZAKEN3\/\/s1HYAb0xAAAsNJf9H\/\/8HOwoAeUVO\/uL9LwChDPn\/wqPWACYkTwBbJdn\/QgAABzsLAIKDTuBM\/TAAoQ12\/4mLVgA5vsr\/vg6H\/Zf\/\/wc7DAAtwE4etP0+AKEM3ABEQhYAGaro\/6UzPAFBAAEHOw0AKJxOFJr9cAChDR3\/8YowAFVz0v\/a03b\/ef\/\/BzsOAEQITg+w\/WYAoQyO\/\/AfDv+vl7AAKcqLADf\/\/wc7DwA6+U755v1FAKEM4P\/rBQUAD+v7AA8CF\/7x\/\/8HOxAAQrJOHw\/9PgChDEAARQUiAA0DcQBR3VH\/iQABBzsRAFMJThP8\/V0AoQ33AG7WIP+uIe8AKl4b\/0UAAAc7EgCF3k70Uf0fAKEMTv\/Bd0P\/sIBVAGl2LwGyAAEHOxMAXotOEhn9XgChDaIAcNojABdO5QAJxt395AAABzsUACcnTvUZ\/SEAoQw7\/79VkQAvyhsAEVxLAV8AAQc7FQC4LU76sf1LAKEN8\/+W9Gv\/srKl\/5Urm\/4e\/\/8HOxYAQcdO8uX9HAChDOP\/wYLP\/6zX5QBWpd4BgAABBzsXAFTnTgPQ\/VMAoQxc\/+0q8v+TnAD\/+6h\/\/4T\/\/wc7GAAapk4HHv1LAKEM\/QAW+5MADmdq\/9156v\/\/AAAHOxkAJjtOFzH9MgChDOIAQlc6AB6hsf+KCyb\/+P\/\/BzsaAAKuTguI\/SMAoQxSAEI18AA0HSoAPq9+\/\/z\/\/wc7GwAU7k4Qpv1WAKENOQBs4ckACxauACvmywABAAEHOxwAoBhOHij9PwChDTEARTyX\/7xM8gBNhGEB2QABBzsdAAk5ThSN\/V4AoQ2bAG84Fv\/qq4f\/kx3KAooAAQc7HgAMwE4Iwf1IAKENcgAaqUcAeCkb\/765Xf\/oAAIHOx8AQddOFT79WgChDAMAGP54\/+qcFv+2K6UBRgAABzsgAFw7TgKR\/TYAoQ1a\/8WoRwACvTf\/zihL\/4sAAwc7BAAICQP\/\/i4I\/\/cFAA7\/\/\/\/9\/\/\/9ABAAOzsDEQYAKQc7Tgc7CBdhcAAAAAAAAAA\/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQPHAQMEMAESf9Cf9dAW\/9ffkUJODh8T8AQCAnr4LgQDBG989\/vsBr+UFwD\/UAIC\/8FwCZP3SAXf5X+0w3wS+L+\/\/BINABeAUAMETYE7f9Of9LAU79kfm4JADN8X8gQBAoH5xwOtgyh9Af3gCR+QCn\/fuAoA\/+zQB6v3cAXj75\/PwngFOsAgAAwIABoAUAMEeoEq\/9h\/8wASj9s\/p8IsCx8b9AQBAfj74gMnAfR9pv8kB3+n\/P+AKAv9AAswBNP7JATz+N\/swUn7\/XBIAAYDAByAUAMErIFWf+Uf8hAPV9yftYIcCX8b9gQBAaz9igJYgKZ+CAD4CV+X7X8gqA\/6ACbgAtf7uARsBJAHgA3vv\/CwA\/3+AB8AUAME7QE3f\/af8wALt94vxMIKB38j+AQBANv\/kwFY\/47\/AwHQBv+n3v+hGAv3ADNoAHAAJALMDmAg\/rvpgtDP\/\/P6ACGAUAMFMgFEABGf9xAHJ95v1QIABZ8j+gSBAFIA9QAX\/nr\/vAMIB3+X0AABiAn0ADwv\/zABuAGUGWA1PXfhxWEX++f2ACQAUAMFgQD5ADJf\/rACN95f5gH2A58j\/ASB\/1cCkv62fb+A\/QL8A7+zxQFB5\/\/xADW\/\/ggHR\/8sIUBEvDniCBEH8930ACaAUAMFz4DSgFwgCl\/8d9yP90H6Ab8f\/gSA\/rgDWf0r\/SEB7gM4Ar+zu4JiJ\/fvACy\/\/jQJ+\/1EKPBMeyXhSkEX59HzACkAUAMGIYBTgIoAGW\/2j9owCEH\/\/98f\/wSA\/bsEQfuffPMDSgIT\/d\/ntwQCR+nvABb3\/swQY\/pALMBNujvpTCDH28v1ACuAUAMGbIABgL2gKv\/wH9ZAGAIT\/l8UAQSA\/SwEM\/oMfOmEOwFD+\/\/\/tIWCT9\/vAAI4AKwTh\/fwL8BGOY\/wDWCnz8P2AC4AUAMGs\/9ngPGAPa\/p\/9IQJsIn\/N8QAgSA\/FEEQ\/ib\/VWFc\/8f9uBLt4ciH9Hw\/+UwAxgZw\/SwLvA4eSX+ziAnw8H6ADBAUAMG7n8QgSbgT6\/jx8zgM4JL+78IBAUA++4DX\/dF\/dgGJ\/2T9YBzvAhB78fy\/85QBoQc","pkt_caplen":2790,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAozN1AAEAGojsKCAABQSeAh9aDAFDjx6hcHDhotFAQ\/\/\/8OAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0858{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":409,"pkt":"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","pkt_caplen":409,"pkt_type":2048,"pkt_ipoffset":14}
+0906{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":447,"pkt":"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","pkt_caplen":447,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNxxAAEAG3xgKCAABNubjrLHkAFDBi1rGPnSnOVAQ\/\/\/XBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKZAABAG0Y425uOsCggAAQBQseQ+dKc5wYtaxlAR\/\/\/XAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo\/jhAAEAGF\/wKCAABNubjrLHiAFBcJZOko9pug1AQ\/\/\/W3gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKdAABAG0Y025uOsCggAAQBQseKj2m6DXCWTpFAR\/\/\/W3QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1435587871918,"flow_last_seen":1435587871918,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8cIlAAEAGqJ4KCAABsCJnacdpAbv69x3BAAAAAKAC\/\/\/XPAAAAgQFtAQCCAoACG1IAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKhAABAG1JOwImdpCggAAQG7x2kFCOI++vcdwlAS\/\/\/FGAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1435587871929,"flow_last_seen":1435587871929,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8KgBAAEAG7ycKCAABsCJnacdqAbskTkdIAAAAAKAC\/\/+EXgAAAgQFtAQCCAoACG1IAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKlAABAG1JKwImdpCggAAQG7x2rbsbi3JE5HSVAS\/\/\/FFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1435587871935,"flow_last_seen":1435587871935,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8\/WxAAEAGG7sKCAABsCJnacdrAbsTBZAkAAAAAKAC\/\/9MygAAAgQFtAQCCAoACG1IAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKpAABAG1JGwImdpCggAAQG7x2vs+m\/bEwWQJVAS\/\/\/FFgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1435587871939,"flow_last_seen":1435587871939,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8xDRAAEAGxZIKCAABNBFy25hiAbudWal8AAAAAKAC\/\/9IxgAAAgQFtAQCCAoACG1IAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKtAABAGRTA0EXLbCggAAQG7mGJiplaDnVmpfVAS\/\/9kvwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1435587871941,"flow_last_seen":1435587871941,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45546,"dst_port":80,"l4_proto":"tcp"}
+0410{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8RGdAAEAG0bkKCAABNubjrLHqAFALhykvAAAAAKAC\/\/\/PIgAAAgQFtAQCCAoACG1IAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodKxAABAG0Yg25uOsCggAAQBQser0eNbQC4cpMFAS\/\/\/Y+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNx1AAEAG3xcKCAABNubjrLHkAFDBi1rGPnSnOlAR\/\/\/XAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodK1AABAG0Yc25uOsCggAAQBQseQ+dKc6wYtax1AQ\/\/\/XAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodK5AABAG0YY25uOsCggAAQBQseQ+dKc6wYtax1AR\/\/\/XAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo\/jlAAEAGF\/sKCAABNubjrLHiAFBcJZOko9puhFAR\/\/\/W3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodK9AABAG0YU25uOsCggAAQBQseKj2m6EXCWTpVAQ\/\/\/W3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLBAABAG0YQ25uOsCggAAQBQseKj2m6EXCWTpVAR\/\/\/W2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocIpAAEAGqLEKCAABsCJnacdpAbv69x3CBQjiP1AQ\/\/\/FGQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoKgFAAEAG7zoKCAABsCJnacdqAbskTkdJ27G4uFAQ\/\/\/FGAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo\/W1AAEAGG84KCAABsCJnacdrAbsTBZAl7Ppv3FAQ\/\/\/FFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoxDVAAEAGxaUKCAABNBFy25hiAbudWal9YqZWhFAQ\/\/9kwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoRGhAAEAG0cwKCAABNubjrLHqAFALhykw9HjW0VAQ\/\/\/Y\/AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHkAFDBi1rHAAAAAFAEAAC8vQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587871,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHiAFBcJZOlAAAAAFAEAADpRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADecItAAEAGp\/oKCAABsCJnacdpAbv69x3CBQjiP1AY\/\/86cAAAFgMBALEBAACtAwGmC6YG6dpggqRoocPCS6GRSW3HALPFXrzPaO9ENu8EQgAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1435587871918,"flow_last_seen":1435587872045,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLFAABAG1IqwImdpCggAAQG7x2kFCOI\/+vceeFAQ\/\/\/EYwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+8123{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":5526,"pkt":"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","pkt_caplen":5526,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAozN5AAEAGojoKCAABQSeAh9aDAFDjx6hcHDh+FFAQ\/\/\/m2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADeKgJAAEAG7oMKCAABsCJnacdqAbskTkdJ27G4uFAY\/\/\/bawAAFgMBALEBAACtAwGNvLHuc12\/pFbnkT4Pum8D8uFdGv9vMlW4Y0hHfiKGhwAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1435587871929,"flow_last_seen":1435587872139,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLNAABAG1IiwImdpCggAAQG7x2rbsbi4JE5H\/1AQ\/\/\/EYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0632{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADe\/W5AAEAGGxcKCAABsCJnacdrAbsTBZAl7Ppv3FAY\/\/9RtAAAFgMBALEBAACtAwGE\/segDJyCTDDrsx\/XYj7jlyYez\/MCm2qOXqnc1anvDwAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1435587871935,"flow_last_seen":1435587872205,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLRAABAG1IewImdpCggAAQG7x2vs+m\/cEwWQ21AQ\/\/\/EYQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADexDZAAEAGxO4KCAABNBFy25hiAbudWal9YqZWhFAY\/\/8vsgAAFgMBALEBAACtAwF2lB5vq2mfN7X6ktw+ENS1yvGFdgW5h3\/A\/IpZBJlZIAAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1435587871939,"flow_last_seen":1435587872289,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLVAABAGRSY0EXLbCggAAQG7mGJiplaEnVmqM1AQ\/\/9kCgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":211,"pkt":"ABoRAAACABoRAAABCABFAADFRGlAAEAG0S4KCAABNubjrLHqAFALhykw9HjW0VAY\/\/\/+LwAAR0VUIC9uZXdWY29uZmlnLzEuMC8zL3Byb21wdHNfY29uZi5idWY\/cnRzZXJ2ZXItaWQ9MTUgSFRUUC8xLjANCkhvc3Q6IGNyZXMud2F6ZS5jb20NClVzZXItQWdlbnQ6IC8zLjkuNC4wDQpJZi1Nb2RpZmllZC1TaW5jZTogVHVlLCAyMyBKdW4gMjAxNSAyMTo0MToxMyBHTVQNCg==","pkt_caplen":211,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1435587871941,"flow_last_seen":1435587872340,"flow_tot_l4_data_len":257,"flow_min_l4_data_len":20,"flow_max_l4_data_len":177,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45546,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/newVconfig\/1.0\/3\/prompts_conf.buf?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0382{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLZAABAG0X425uOsCggAAQBQser0eNbRC4cpzVAQ\/\/\/YXwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAqRGpAAEAG0cgKCAABNubjrLHqAFALhynN9HjW0VAY\/\/\/LSwAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLdAABAG0X025uOsCggAAQBQser0eNbRC4cpz1AQ\/\/\/YXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0310{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":true,"pkt_ts":1435587872,"pkt_len":8262,"pkt":"","pkt_caplen":8262,"pkt_type":2048,"pkt_ipoffset":14}
+0908{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":447,"pkt":"ABoRAAACABoRAAABCABFAAGxdLlAABAGz\/I25uOsCggAAQBQser0eNbRC4cpz1AY\/\/+MTAAASFRUUC8xLjEgMzA0IE5vdCBNb2RpZmllZA0KQ29ubmVjdGlvbjogY2xvc2UNCkRhdGU6IE1vbiwgMjkgSnVuIDIwMTUgMTQ6MjQ6MzIgR01UDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTMwMA0KRVRhZzogIjZiMjRjYTNmMGI1MDVlNWU1ODQ1YmMxYWQ3ZjdjODM2Ig0KeC1hbXotc2VydmVyLXNpZGUtZW5jcnlwdGlvbjogQUVTMjU2DQpTZXJ2ZXI6IEFtYXpvblMzDQpBZ2U6IDIyOA0KWC1DYWNoZTogSGl0IGZyb20gY2xvdWRmcm9udA0KVmlhOiAxLjEgNmE1YzgwMGM3NDYxMzUyY2YzYzBhYmQ0Y2E3YjFjNzAuY2xvdWRmcm9udC5uZXQgKENsb3VkRnJvbnQpDQpYLUFtei1DZi1JZDogZU56VVBqeXprcjlzNnRWWmNNU2h2WHNwYTVqenctN052eE1NZktiYTZQYjBYVWRqNUIzVVZRPT0NCg0K","pkt_caplen":447,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAozN9AAEAGojkKCAABQSeAh9aDAFDjx6hcHDieJFAQ\/\/\/GyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4260{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":2687,"pkt":"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","pkt_caplen":2687,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoRGtAAEAG0ckKCAABNubjrLHqAFALhynP9HjYWlAQ\/\/\/W1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLtAABAG0Xk25uOsCggAAQBQser0eNhaC4cpz1AR\/\/\/W0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAozOBAAEAGojgKCAABQSeAh9aDAFDjx6hcHDiobVAQ\/\/+8fwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1435587872476,"flow_last_seen":1435587872476,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45552,"dst_port":80,"l4_proto":"tcp"}
+0410{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8WSJAAEAGvP4KCAABNubjrLHwAFDxQTSmAAAAAKAC\/\/\/drgAAAgQFtAQCCAoACG2EAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLxAABAG0Xg25uOsCggAAQBQsfAOvstZ8UE0p1AS\/\/\/Y9QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoRGxAAEAG0cgKCAABNubjrLHqAFALhynP9HjYW1AR\/\/\/W0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodL1AABAG0Xc25uOsCggAAQBQser0eNhbC4cp0FAQ\/\/\/W0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodL5AABAG0XY25uOsCggAAQBQser0eNhbC4cp0FAR\/\/\/W0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoWSNAAEAGvREKCAABNubjrLHwAFDxQTSnDr7LWlAQ\/\/\/Y9gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHqAFALhynQAAAAAFAEAACjswAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":206,"pkt":"ABoRAAACABoRAAABCABFAADAWSRAAEAGvHgKCAABNubjrLHwAFDxQTSnDr7LWlAY\/\/9RbQAAR0VUIC9sYW5ncy8xLjAvbGFuZy5wb3J0dWd1ZXNlX2JyP3J0c2VydmVyLWlkPTE1IEhUVFAvMS4wDQpIb3N0OiBjcmVzLndhemUuY29tDQpVc2VyLUFnZW50OiAvMy45LjQuMA0KSWYtTW9kaWZpZWQtU2luY2U6IFdlZCwgMTcgSnVuIDIwMTUgMTQ6MDk6MzggR01UDQo=","pkt_caplen":206,"pkt_type":2048,"pkt_ipoffset":14}
+0669{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1435587872476,"flow_last_seen":1435587872479,"flow_tot_l4_data_len":252,"flow_min_l4_data_len":20,"flow_max_l4_data_len":172,"flow_avg_l4_data_len":63,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45552,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/langs\/1.0\/lang.portuguese_br?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0382{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodL9AABAG0XU25uOsCggAAQBQsfAOvsta8UE1P1AQ\/\/\/YXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAqWSVAAEAGvQ0KCAABNubjrLHwAFDxQTU\/Dr7LWlAY\/\/\/LSgAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodMBAABAG0XQ25uOsCggAAQBQsfAOvsta8UE1QVAQ\/\/\/YXAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2224{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":1422,"pkt":"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","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1435587871935,"flow_last_seen":1435587872515,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+0383{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo\/W9AAEAGG8wKCAABsCJnacdrAbsTBZDb7Pp1NFAQ\/\/+\/CQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2225{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":1422,"pkt":"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","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":10,"flow_packet_id":6,"flow_first_seen":1435587871918,"flow_last_seen":1435587872568,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+5078{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":3545,"pkt":"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","pkt_caplen":3545,"pkt_type":2048,"pkt_ipoffset":14}
+1039{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1435587871939,"flow_last_seen":1435587872569,"flow_tot_l4_data_len":3813,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3511,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0382{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocIxAAEAGqK8KCAABsCJnacdpAbv69x54BQjnl1AQ\/\/+\/CwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoxDdAAEAGxaMKCAABNBFy25hiAbudWaozYqZkJ1AQ\/\/9WZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACuxDhAAEAGxRwKCAABNBFy25hiAbudWaozYqZkJ1AY\/\/8MmwAAFgMBAEYQAABCQQQ4BVLjLvc+HZGngY00+3Wo\/kZ45i9D7JrE6hE3wZbaIDTZhb9zNpOq0ZSZtrJ0ILhIdSEM\/LEW0+5OVnF4voG1FAMBAAEBFgMBADDqnEXoQ2Wj2nCaB4kh8NXXGUiCBecloJhaKlB25qG0zhN05u8PLH3x+RuGJFOha+Q=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodMRAABAGRRc0EXLbCggAAQG7mGJipmQnnVmquVAQ\/\/9V4QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0907{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":447,"pkt":"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","pkt_caplen":447,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoWSZAAEAGvQ4KCAABNubjrLHwAFDxQTVBDr7M41AQ\/\/\/W0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodMdAABAG0W025uOsCggAAQBQsfAOvszj8UE1QVAR\/\/\/W0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1435587872702,"flow_last_seen":1435587872702,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45554,"dst_port":80,"l4_proto":"tcp"}
+0411{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8Y6lAAEAGsncKCAABNubjrLHyAFAC8Q4\/AAAAAKAC\/\/\/yUgAAAgQFtAQCCAoACG2WAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodMpAABAG0Wo25uOsCggAAQBQsfL9DvHAAvEOQFAS\/\/\/Y8wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoWSdAAEAGvQ0KCAABNubjrLHwAFDxQTVBDr7M5FAR\/\/\/W0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodMtAABAG0Wk25uOsCggAAQBQsfAOvszk8UE1QlAQ\/\/\/W0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodMxAABAG0Wg25uOsCggAAQBQsfAOvszk8UE1QlAR\/\/\/W0AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY6pAAEAGsooKCAABNubjrLHyAFAC8Q5A\/Q7xwVAQ\/\/\/Y9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHwAFDxQTVCAAAAAFAEAACygAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":204,"pkt":"ABoRAAACABoRAAABCABFAAC+Y6tAAEAGsfMKCAABNubjrLHyAFAC8Q5A\/Q7xwVAY\/\/8YIAAAR0VUIC9uZXdWY29uZmlnLzEuMC8zL2xhbmcuY29uZj9ydHNlcnZlci1pZD0xNSBIVFRQLzEuMA0KSG9zdDogY3Jlcy53YXplLmNvbQ0KVXNlci1BZ2VudDogLzMuOS40LjANCklmLU1vZGlmaWVkLVNpbmNlOiBUaHUsIDE4IEp1biAyMDE1IDEyOjA2OjEyIEdNVA0K","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1435587872702,"flow_last_seen":1435587872706,"flow_tot_l4_data_len":250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":62,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45554,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Waze","category":"Web"},"http": {"hostname":"cres.waze.com","url":"cres.waze.com\/newVconfig\/1.0\/3\/lang.conf?rtserver-id=15","code":0,"content_type":"","user_agent":"\/3.9.4.0"}}
+0382{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodM1AABAG0Wc25uOsCggAAQBQsfL9DvHBAvEO1lAQ\/\/\/YXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":56,"pkt":"ABoRAAACABoRAAABCABFAAAqY6xAAEAGsoYKCAABNubjrLHyAFAC8Q7W\/Q7xwVAY\/\/\/LSgAADQo=","pkt_caplen":56,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodM5AABAG0WY25uOsCggAAQBQsfL9DvHBAvEO2FAQ\/\/\/YXAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0908{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":445,"pkt":"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","pkt_caplen":445,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY61AAEAGsocKCAABNubjrLHyAFAC8Q7Y\/Q7zSFAQ\/\/\/W1QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodNJAABAG0WI25uOsCggAAQBQsfL9DvNIAvEO2FAR\/\/\/W1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY65AAEAGsoYKCAABNubjrLHyAFAC8Q7Y\/Q7zSVAR\/\/\/W0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodNNAABAG0WE25uOsCggAAQBQsfL9DvNJAvEO2VAQ\/\/\/W0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodNRAABAG0WA25uOsCggAAQBQsfL9DvNJAvEO2VAR\/\/\/W0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGFjUKCAABNubjrLHyAFAC8Q7ZAAAAAFAEAADHOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdNVAABAGRBw0EXLbCggAAQG7mGJipmQnnVmquVAY\/\/+kkQAAFgMBAKoEAACmAAABLACgg\/JpS9qUL5p6+FH6c6MxwGHdZoAEWdlA63n4D4hFw\/uw5qwJrVHTNosaHlAGFqk2W6MnVLgELtXGqHw4tL5nYhLWS9KVxJxgHYPhfzz\/GHXOxkwlsUgEtZVmpWdAE3uvCc3vp4ZuNR1v6fuw7vKA+qtK9ySVpzbd2enk2WSRA8rce17qLtsEbDZKlhF1pljsrohuEoXKFbRTrZjn5qYIOxQDAQABARYDAQAwIoZd5qLXePDpBX37w1BIXQqskElYQxboOt0ojrvk4nlOFw1jqroJfXW5\/93yStDj","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0697{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":283,"pkt":"ABoRAAACABoRAAABCABFAAENxDlAAEAGxLwKCAABNBFy25hiAbudWaq5YqZlEVAY\/\/\/ylgAAFwMBAOAEodIEpoZEBbMOZXJZAVYJz2DQPbSI+1MNcikEHllNKksglFz98XyspiXSkchKTXii8JsSCqXHQM+6J7gzOp5TswqzAum3mf\/1MZsrFuYWD4cv3DQ\/HR++eQmURGzDQz7\/0yQ04YNkNmkbS6dAvDTHM7XmvnkA2DSRMug8BCAA0wDbvpivoRN7KygJb\/eRV3kViuKJQaORaFf7Zh2+qs5fAQZgZXW7XVRov2BiBmIVbVgnbtcszaReRiIaFi2jUZ7vCGgYC6GwoQ6D2Otzg5vWzmt0ByrAGkjtmKJJhDs7rg==","pkt_caplen":283,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodNZAABAGRQU0EXLbCggAAQG7mGJipmURnVmrnlAQ\/\/9UEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNxDpAAEAGxXsKCAABNBFy25hiAbudWaueYqZlEVAY\/\/8yqgAAFwMBACD6917ZS0W0rHHTYWU20EnVv2Org\/L65b3ajIwLBSra5A==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587872,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodNhAABAGRQM0EXLbCggAAQG7mGJipmURnVmrw1AQ\/\/9T7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5798{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":4048,"pkt":"ABoRAAACABoRAAABCABFAA\/CdORAABAGNV00EXLbCggAAQG7mGJipmURnVmrw1AY\/\/9yewAAFwMBD3Ae1c06ifDdZ7BaSZ+kw2is10akaaf1JPfoUrCK2GqgGQQcgA2X4xxr6A49RJfWB0c7fivetH79hLECquq0UzRCLMJna6CBqDbIblxhRoJUE2P3G2EvUNUHgpLQ35HpNtXvJhMK27hRNI416LMXU0D3Yf7mO3+EtSTj2xRgPaZoSOeoDuALIHS8KjaZX+sOMVfcn3JZS5icItFEkjQ45fzYKyp3cul3Tflim37qqdx6u++pYAFTTMb+LGOW5\/baL\/d0W2Zhs2KJKrDGYNj6\/vZXg21Pxw6cAg52ufQfS3Y6OhnsyabaYLWPDufFI0MosFGQHpKQXS8zwvFfjO4TSI9eIzkZdyVCdTdiqLdZsJxJxfZkB7oFpmkikM3tOM127FHB5f3smAF23Z8r48mowA5kfAJYM4E20uWYE3DpVEiIloL4EO\/Dlmv8JAOORWjzGyOnO8nEzNkm8yPJj4DKpj28XdbiMPy7GY+2hpS\/iDe7qInE5pa0thfuRq5jNhEh4K4t46\/lvAR3uV4CIcfwT+aOXR8Xjz3QxiXw0LYsctle76Kvpn0L7wUW9UvrzeI4ag3VLmH+xVEKHImUqFXShcW69D9uKvDhpopLD6s4cViJH\/Bxs0p5zltV5+xUsI2pQ\/i+90u1d1DYRUkc0BqgwtC98oVzrNHEzMLd+jpSsNa7jzPeDn7ELQpHe31C9\/EmCU9o\/cH4Rf\/bsnc\/ypMnpV06zxJPuotqWGx6A4msAS2RJJ3P2SnJRCbS0HNcSqR2mzrVqvIDn4wGwTsoN3IkQw\/\/nyrh5PFoDv6ljKtVLWmBc7IIExpb8ZhBHF1+yPvfeVyjBFmZ8xO3ON93R3RdCGEmmKXTUVAfOj2LCzpCVgM8KTJe1xqUQ6hBmfT7ScIZ8qS+HhQoU1\/nJSFGq40ujteIcpYB3oTdScuGYGXmFtTSKFtxoJcYF+XeplO49VhMGVbojnqb67ZQN\/QOuAyZf0qEDVNrtBBcX4wMEewmPY+8VFq\/FLcYyPe7FhK9AQAtlZ4TDqV6Z3LIGWzXxJGUOOMgu316+O3YdELUYTTKwO13dx5aXlzwVj6smB3JkoB3WTEdelTSMKv45QdrGYPgfPqV\/gFmHQiIA8x4DrJfy0hVe2MDGSm+4Nkz19vJxUOA3PhKGz4VBqRlDCdZv4a\/q0ZXgti9y5cSflabJC\/Hq8ylIGQaUAehfkTXRflip0lrDHGSpyGyFsWhcuMkijFevtzDd\/3kUwQKd4eV5wqg0PY\/mBolDUg5vIy85pzGKbsjBzvvvR2Ht+5wld362BaNYuSPh\/Cdr+9FWREh1OLrxKHo9bsI4ySk1OyYv+d10tRZSZYzifqoqyY1UgP0W+aZlyKvkAnOudIc\/+B81xBe3WRzNn2mx8vUHoiu6\/JIn\/F6I2AJOsyAvH2lOPj+qg7Cd8VUBEr1sMNhH\/qKwjVUYhO0M17mjpJzJx9l3\/BnjBl8KMSKrQIECl4dc9np74gluhOM0na2oCiqwdc3QHryuFgzjmIMEZqWqijN8ueMAo7n\/VrXBTYDPv7NhpU3tTlz1v81VERyfk6v+D7xXUqkekcaceuBOP78Hs3EYijWXU7gIqlJgzl0qb9vCGZnhCPaTEMtfK3VQSsA1DA\/\/GJ8V2mS27\/19rI93iWU5DRZolI4dOM1bElAWkyH\/HwUpeKHR0H45nrmE\/4yC9jtXIYo5ED9LqFg5rnn43iWSfcymbrrwqAqg7AUW1k7QOdYRPgnDBilO0nJhvG8tu9xb7g5215LROCwK8+6JI8mlaKV7ZCku2lSHeO1LtkBgsc\/zDkvyJ8eyfMsa4CObp\/GyVmlvkL0BeWJBPsFcj4+766YxCs5+AGJ9AgtPdNUsu\/lfw4PP1edysDT3641dnKwW3iA25hqBqAP\/zfc9CUjnmXjz9KHWt1cAeVqQiqJkBC8KcLxj3YtstEl9wQ1t+9rjUVo6PPfvroxIXjgRdzpE5zxIz4Ae9iZe6IFZqI6slIJk7A8b1\/CsiLmDmnizHMUErGfnt7aBPb7BQ6gu34tFFJMff7FTF+Pw7yAK12iJ11HtcDlESMTZqU3MOJlPwLMm4yc\/BgxXio\/l8D8vgt\/gnBZktZrBoYAYAkKT8oa\/Hh3llZB4fH0OHbKcAyPMFo4rAr3oXnE95vDLJNzTDAeYlTWHwS+NEutWihUoRlUSVMGpfm75ZZi6jHXnk9houTnDnwkkpg+\/6hISwKPKcZ3EpMTZbQOgi4TRmvU3O3xuT\/UM4TasLtNypx4xZF76qiOE+RG4MOYCtUCvArnh\/aEV4\/Xli3hNIkVzh2iTgWiYHe7ZN+NBQCBiJKaMsAQnsQ8RivuVcpZhzVioIgfyz\/lv3ppbJc0VLrAzrO6znQtBlgbd1khNk0ljCWnDJ0puy0oGtt1CNhL7apcZDDUablPh7g6s8uDjFB9hJ375sst1C+MVfocPQ\/BSTAtvc0QYSGwS66p+nJ+tS61qMMO3x2vojMSVIvdpb9l8yoXf3T5KraqlNQhuddurP9SjpBEZzKVRUOJ0gxBaGSnGLQm7DeSEYR9t5VbKpT7OXC7zG\/Ftmi4onHtADMvSPOt5m28YgN9Fko6B93SomlAHpDiZKWvFxiTPHEGysrA27U96Ri5UYAPgEeHOdQkRSDf7ejopsWDARLq1h96dctb\/EPa3CnW5xuFSu246gpY4mTqqGvJXT1IrcKxlrJVxau2Kf7inuWM6\/mSiBqI3Nww6eWib5YiNCb6iIZeRRt0bo33bIKDhRNu2FDTjJ+MT31fmL1OEWJb6n0Y2tH10vcYWCtTlbM4aYPYvpdxdEU91I+JCPJXEU2RZaAwab8rCCbPK\/QbHbuKXdqPrtPu0Q7MifvodJlv35fNYzuy7KdTfuRURp9jOQJAMUhZnuvLj9KGt1kDnRDSq4cG10yveZG+6xm+TvZYEgPbAi8YiukBp3OoSVvgAUtCQzyw4MKmSVzKlBsJaxMdb\/h5QNgGOKwM5UW+N77Zu6q38MZ2x2on07fx0aCtYzGiyHQn5WPk+txqZ5uWD9fyu9aiASXlmgWhYSpCMxkv6\/cRTK36I2W+lPFcctgJ4zL+C6qtJQcdY+0LCoUbsu9Cgor5USSObbpMnOUyqzpG\/Hol0rJyGv3XT8N6sNXKZ9Nsb\/G11pM9dSWvMxXZYPsacJ+IaYuMb+BeYWbQOJpM8uFiMCq\/dTFMyh061ufwV8SEYEY1s2PniEfBICKp8NfgVzkcvaw4gNE9h70qW5HTy7FW5Cv2DDVp4nbVBoGqkDT7032S3BUHxXoYVuDwWqubWneN0HosqS3OJFBnjUG9GmJ2kIId6ltlSQMIFj+q5zCJKTtsGW0G3Vrt15htewNjxtWy4GhgnNqbz5VXvnvWYUx5YTGjZk7NqitRwSryuXMQ8NsS4Vjtm5wcvv+Evz0kTcXoguSt6x9wqhel\/dNO4ZEXJxtzKTGdFqYNBp5lpP3vhO7ILd5JspWHTePyD9hWd4Ske7eWn68+nB2z2jpBoA90+Wffnuk9dd73+BlCai0pfRGS27ng1COwvdrkTyuWdNGIKqrvBdxsqBslGyZn3pZhmPLyhO9M4RzvOUYMtZOKZsqpHDPgnfY2puI7Ehn+XdQWOmpFqeoMXAOQcUyUm+io\/SCKEERDygLh+EBk39s4xu6uf0VYhvgU41d97r5JiglCI3HLiIhzIDnWK56XOziDzHWFzhNgaGFyHR4KUCboM4iUwAne4em1aGRhPFdihboZ1texKS1+DDu3pS+4mR+dbJtPgTJoT1TI+zUmDkpTcGJN6kJuAo30grqYznoL0o5lZE8RsImRB2QwdK8+NUcBYTNaZ9BIjmg2p46TEo+lcvU4vyqIMcw\/JsnnkNHoBniX6G8wz8XZq595zK41RXPqrD6HAtUk1jULRZlGWQNtrmf0OgAuziv2+IphpKBdxuvfhR\/kB+Gvh2\/65eQey5u54nnDI6GOzjIRYHBwaV5abp7VTNd\/CDMDNVlV7Je585PkWCSrsl+1Wcgyj44re38ee2VqoOr1jW6G40wCBTdPUBLkm2HL+wFWNE5AOUBK3SszzoyBLLX7gkRpMwXFcPfm9G\/CgPNkDoXgrln5oE3WiKgdtEGybPSAxjECh8lCckRtt8xEX31t+DCHN1ghq47p9Fu8O15jb0c8ddAyGh2lGx7x9qLkCxB7\/WjKpvUQmzQXR3Tx6aXpAfxSB43qOkKqBbzHAG\/RVSuJ4o89z0g1a1zRIXQ7bfBn4V3LN9G8ZSIF3N8oy8a4Zs0zSwD2yEDpr\/ynTAR2SWlmtUIuKPcPyROtn8\/vsz5+oSu0nbFXxUJg4OjO+7vPzhOzEFMkYYgMFl6vjlo5jsdklntcEo4HvNW8KZZxIWn+VgOHEJZ4MOKtT4xn1iF81dsZGASWVXP1tBkxRtmr74k4DkeAdmakOZW+Nzktm0mbm8PoRbhjgcoguNXsXIQC9IMzS3awc69AkXVvJgBPrlORKCP2mvjUC4od1mUF5F4troUNoSOHS9gk+ijuwl5BgiA\/JEYjP4tqH2Ljq\/+s+SmioaJvBAdtrVfdvGHStUDEqgzn1xCFjbAcSnJPnrjnZkugbW3EZGuCow8d2QAZmCuEYgG3sUf6IdXG\/bR4mWQaJhEwVupEkhSKroqQLzO9nbD0OtiWrtLFy3TR\/gd5PBcNZ2vkvFCBQea\/ZWzMneHkZb39NleHRib2QY4CjUW67W\/If2WZ0JyPjqdU\/nvG8Bbe17t8Dkg5Fu3TjP4ECPeGj78G5sfpsv3lttjoyG+NwIvNvQwz1IqwWmVaw2tO91MFwFPbBpyHrctpRRu7Ehc8hFxOB5Pe8s8ji+wMlVwGMPJD7XCGClVivG8QHOf3JIp2mzDc8UcxijSMLLfzWHnd4R++FrqsnL1CI9DEOoORFM2xKaYaxv3QjvDSdNU+ni1LhfjlyxuPoAWw8UZrTFQBUpHMJ\/GugSfFyjjHvHajyC8CgSep\/9glZNMdwXoasxxJmSb0slxpPl2WyC6+mqAuD3492+8ZwKel2BJM07v9aw49\/xHXwlCpvKinlH5D\/8aDyY88+ck0so149hs+v1gS4l+HFZn4QiE4muz7RdPJYlPjR1Mu4ZwC7aeBD2h9yPYpIqTrRJLJFDofxE70e3h4GrC4uLr+\/rMpHPqVIZe6TPwLh3PXwYSOxdl4cnNm2vmZ0U+YiY6jGOK\/g7dh1OYe4aYxA+WMlHWHBJ1jUaaUswbh3PKKlaW2O8MnOYjKBqYA7Wz2DRPDpTRwOFvJFQMBACDEWUnamGel4WGO8B7bz17uz\/4UBIKizwpxrvKxIfvTEw==","pkt_caplen":4048,"pkt_type":2048,"pkt_ipoffset":14}
+2225{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":1422,"pkt":"ABoRAAACABoRAAABCABFAAWAdOVAABAGzv6wImdpCggAAQG7x2rbsbi4JE5H\/1AY\/\/+OAwAAFgMBAD0CAAA5AwGT\/N2DAjIgaWtQ9FtzlofeU2qXyUUfT55EGVPZdVXqfQDAEwAAEf8BAAEAAAsABAMAAQIAIwAAFgMBC\/cLAAvzAAvwAARyMIIEbjCCA1agAwIBAgIIGh2bzDH41NkwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRlcm5ldCBBdXRob3JpdHkgRzIwHhcNMTUwMTEyMTMzNjExWhcNMTUxMjMxMDAwMDAwWjBkMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzETMBEGA1UEAwwKKi53YXplLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3DcqHH9nkO3xJ2\/KjK4+KdknYUOVAk5FCYu5jhH\/bx1tLDU5Ztle1x8HXTubW53UMCKQTgs3yaddERtJEwSjyOgcGzlHOBFe\/UBG5axvku4xaKMLfQktC2naRwB2q5Zom58pascBUUKKOZ26OEqBgHScTupV5iXj2dZqbrBMYx2mzRxrYrezh6HTAvLdjhr5H5Y8GFvRsIJNaQ3RiwUMzGqBqvApch1ohN8NmHPL5rAyRQfJ3ATlFU6SBrCbVrSV6DCXrLr2DYC4NtOWPEwmBlvslYl+WfClmW6BJgXQEErTAD4MEK2x2ubl5h0Cf8PUnVyuPmxzQVU39c6eXAQc0CAwEAAaOCAT0wggE5MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAVBgNVHREEDjAMggoqLndhemUuY29tMGgGCCsGAQUFBwEBBFwwWjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29tL0dJQUcyLmNydDArBggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5jb20vb2NzcDAdBgNVHQ4EFgQUAd9hvZ9qWOfmBT7pRCOjoYgBvDAwDAYDVR0TAQH\/BAIwADAfBgNVHSMEGDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAOMAwGCisGAQQB1nkCBQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29nbGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEALdEMofnAGs9KF\/aAssHoa027WFzlWlvAbahX1IS8HUzv4b7JE7O0JpCoo3n8\/YUadxD2PgK3U10HkSESZRPOEPUTuWPs2UxFE\/n5D34NIkm++oUgyVGOxd+tZTYilONIzglzPOPjwLpJRWewhlKC6I+dLqlm\/SdDf\/pngDN\/VbjmZ\/PKSIVX0ndrGoitOGL6cTZzcCN6T+tScWH0F1BGXTJlCsG\/cM1dsQxrwcY+4dBN5kQOon3i6gCvwBVGWuV5oLg6ItomasewqbtKKSz9Dz3xF1GDgpcISl4W4bCy5wn+oOv8UEqnX+NyIshCEV1j1gDa1t++GW4+YjpoJwLyFwAD9DCCA\/AwggLYoAMCAQICAwI6djANBgkqhkiG9w0BAQUFADBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMSR2VvVHJ1c3QgR2xvYmFsIENBMB4XDTEzMDQwNTE1MTU1NVoXDTE2MTIzMTIzNTk1OVowSTELMAkGA1UEBhMC","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1435587871929,"flow_last_seen":1435587873486,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+0383{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoKgNAAEAG7zgKCAABsCJnacdqAbskTkf\/27G+EFAQ\/\/+\/CgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3225{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":2165,"pkt":"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","pkt_caplen":2165,"pkt_type":2048,"pkt_ipoffset":14}
+1028{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":12,"flow_packet_id":8,"flow_first_seen":1435587871935,"flow_last_seen":1435587873688,"flow_tot_l4_data_len":3841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2131,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.waze.com","fingerprint":"A9:35:F0:16:17:A3:FD:73:EC:0C:03:24:F8:34:5A:8A:B3:D7:8D:57"}}
+0382{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo\/XBAAEAGG8sKCAABsCJnacdrAbsTBZDb7Pp9c1AQ\/\/+2ygAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3230{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":2165,"pkt":"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","pkt_caplen":2165,"pkt_type":2048,"pkt_ipoffset":14}
+1028{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":11,"flow_packet_id":8,"flow_first_seen":1435587871929,"flow_last_seen":1435587873741,"flow_tot_l4_data_len":3841,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2131,"flow_avg_l4_data_len":480,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.waze.com","fingerprint":"A9:35:F0:16:17:A3:FD:73:EC:0C:03:24:F8:34:5A:8A:B3:D7:8D:57"}}
+0567{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACu\/XFAAEAGG0QKCAABsCJnacdrAbsTBZDb7Pp9c1AY\/\/80TQAAFgMBAEYQAABCQQT\/dwBvETwxF8HCpQtNfsy8UrBBkbpcvUx4LvSTxKGyAUCgZo9OVa0V\/y4wB6KRUILtO1k82Zb3KCobi7iLg3GAFAMBAAEBFgMBADDJbwDESrOZXymXXCSDJzCaZl3p39KOFCGEfB5Zg+YJsK4+c+l5667V8OaYTl16zUU=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodOhAABAG1FOwImdpCggAAQG7x2vs+n1zEwWRYVAQ\/\/+2RAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2226{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":1422,"pkt":"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","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoKgRAAEAG7zcKCAABsCJnacdqAbskTkf\/27HGT1AQ\/\/+2ywAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocI1AAEAGqK4KCAABsCJnacdpAbv69x54BQjs71AQ\/\/+5swAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACuKgVAAEAG7rAKCAABsCJnacdqAbskTkf\/27HGT1AY\/\/95\/AAAFgMBAEYQAABCQQROUM1uiCLwwKaXy2KRRtyKZIVEuVzHlbhIL+ms7vSt+oSppVmAXIUUzS8nKGP3JUwTEvG+4qsrGNXSe6ECCKbpFAMBAAEBFgMBADANtdwInvgahyrPlspZUkV4\/RFs9lNcNWRKeIqOCf4x3cfoGGZmfUhCbZSaV01Pol8=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodOpAABAG1FGwImdpCggAAQG7x2rbscZPJE5IhVAQ\/\/+2RQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0697{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587873,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdOtAABAG02awImdpCggAAQG7x2vs+n1zEwWRYVAY\/\/92SgAAFgMBAKoEAACmAAABLACgZYyyhW1E1RrNGRvl3ohq15hOzXQwRcZM5ah1JdAdPli+e6t5WhI8kTG4RfzskAjo0sqZLiFziKd2x50ZcB8K9Cc5DL1WPuPDLvTg0khkAXBrYT5cg10D6DA+J1fpQQfjEyo2Ui8Kj5nQtNZl+tQlHSWpQ3MHmPjvNsZ5FVLrdUXt\/aBp7hS9Y+cqGs2xBbEW152AZoIqJjEISsgkQph6aRQDAQABARYDAQAwECRq5jnIQDHMQsW2olrfgLmBpyA80HhVPem7iKYN7MmU5ZX9FaQFdQkSuoyWFYyC","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0739{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":315,"pkt":"ABoRAAACABoRAAABCABFAAEt\/XJAAEAGGsQKCAABsCJnacdrAbsTBZFh7Pp+XVAY\/\/8SGQAAFwMBAQA2cWNxhmFZ1d05ru4JHvr0OIL2iGaMKnI94EwzC2yQE540T3A0JIAAzhceoCMTYb5\/FzVOQOUp43HXJdX2fspdo3fP2gytqtdEdOv7A0UWBQWLY+UsoOPPb02RFGzSv3y492ODg9wFQHzh9Nc24nSDFIUaqQ0iqf8EN7mLYSOuUstK6UxxwhTv0\/DgBEBNRguxwahy2dXT8G77M2loXu4JnRhb4QWJtjV4yH4at8J\/Jk12WXQTRFwqxLExNz6ZlbtXVRxRETsgG\/OSmCDW2M0kfD7OsEeES+UP\/SXAguG6Dbe1lZFu339\/2ueaBYBhQnAyPfiyro2ryd9vwfYU6xX+","pkt_caplen":315,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodOxAABAG1E+wImdpCggAAQG7x2vs+n5dEwWSZlAQ\/\/+0VQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1385{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":797,"pkt":"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","pkt_caplen":797,"pkt_type":2048,"pkt_ipoffset":14}
+1029{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":10,"flow_packet_id":10,"flow_first_seen":1435587871918,"flow_last_seen":1435587874033,"flow_tot_l4_data_len":3881,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":388,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.waze.com","fingerprint":"A9:35:F0:16:17:A3:FD:73:EC:0C:03:24:F8:34:5A:8A:B3:D7:8D:57"}}
+0698{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdO5AABAG02OwImdpCggAAQG7x2rbscZPJE5IhVAY\/\/8hcwAAFgMBAKoEAACmAAABLACgZYyyhW1E1RrNGRvl3ohq119X1zv6a+W0q7fpCHAJaiASCgGxvM0rhJRkkLGGrlffTZ3l4zA+p8CFkaN6JHmOKVENLTv9r8pnWIHaooS4Pb47q3nOdRgC0eH1b\/Ewz9XYHXlsdcwi8J+4wbRkAHQShh8SBqlngMLlZzx5fNeItuk6fyWSV3kjPJ1Abgp39F4iMNEsBy\/4BNtpUX5c9YyTwxQDAQABARYDAQAwDo5z9CCmu4T4yf8vDBdE1yo11d2ywtj29Fhj0WImC33Kx4H59Kyp0eRB+qVJPx7i","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABN\/XNAAEAGG6MKCAABsCJnacdrAbsTBZJm7Pp+XVAY\/\/8oCQAAFwMBACAJ6HqBXkdDtXSDf0r9cvid2om33dYTk4HvLbhI2imOcQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAocI5AAEAGqK0KCAABsCJnacdpAbv69x54BQjv1lAQ\/\/+2zAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACucI9AAEAGqCYKCAABsCJnacdpAbv69x54BQjv1lAY\/\/\/vRgAAFgMBAEYQAABCQQRdkZleahkvm3eppytahQ9tN\/PfzVJTHI+MG0KB9Mo8Kcx6vqwxDiMevbaN\/dHPCMYrMdpXq6\/nlFZqV82sUl5fFAMBAAEBFgMBADDWREv2gU0xrA3ugjom7Mlf2X3BLarktoq\/Nfe2DoLX9DzGxWQEdBvUkRJ6jG7imjI=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodPBAABAG1EuwImdpCggAAQG7x2kFCO\/W+vce\/lAQ\/\/+2RgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":379,"pkt":"ABoRAAACABoRAAABCABFAAFtKgZAAEAG7fAKCAABsCJnacdqAbskTkiF27HHOVAY\/\/8M1wAAFwMBAUAF1HbpYBuQBbRzcdyJMKqshZ55Y8atFbDyYuElywLKEsOfCuK6MHzzTF\/rju2o08QAdoslC33gpFTGYMfeUF8jJyGSXfYFOPy3uEXVkbV+hoNP38sBr9GUXsTQqzqfwnfwd2+lvXxb4uPepuGVokdhwJxPIHZZUM6s6mtUk9XfDfTDA7w0f4VVUVA5OVTNdfBzlhMw5z+K0mTBpFeZ2SBt\/b+KXt+nOSxdh4zUDxKWx8lS6yP4ZyVXLt+yof4LXqiLOLIicyBfKN5bEBiWu\/OU1\/bo+roiyyEjPFCmw6K5Rr\/l7nj1uXYiwpAmwfaOASVUlJ6cjkCXx+uMsWGZORZu+OfUBlZ9m\/qQyuk\/UBzyDGUwkNTmhUWpbfK8acORmRSLO6k+DrLp6JQwGgsuOkYSiZK\/Ild2L4vx44+\/9PxBYQ==","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodPFAABAG1EqwImdpCggAAQG7x2rbscc5JE5JylAQ\/\/+0FgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNKgdAAEAG7w8KCAABsCJnacdqAbskTknK27HHOVAY\/\/\/SGQAAFwMBACDVMImAVGQBDT4Y1ZmVLO6P73b3pTWMN53Kui7\/QtTwQw==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNMsVAAEAGQsIKECWdriXnUaUQFGaA18okWhY9doAYAVclRQAAAQEICgAIbjZBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0704{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdPNAABAG016wImdpCggAAQG7x2kFCO\/W+vce\/lAY\/\/+mvAAAFgMBAKoEAACmAAABLACgZYyyhW1E1RrNGRvl3ohq18ASlfsG\/KzX7mSm8oyfUsrIfh0hnbVsrjXbN7zdIfqNOhtvHj5dQN+gnOJohj3hP51JTKHyjTyrKh+7do5iR6C1sIBH\/EIR4wa\/RwUpaygmlfgDm\/9xJxGgzpWz3vTBniIQUuUGpKxZATb3isF1MvhQBG+ZmzuKm\/WYGtZQKAJmimbZHf65h9Br10vNM8S+BhQDAQABARYDAQAwsscIx2A4U38oHP6gML9v8ald1lh5KFrvUq4Gjw9kdeC65V1o0ufIdAzkBOtk3xg\/","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587874,"pkt_len":315,"pkt":"ABoRAAACABoRAAABCABFAAEtcJBAAEAGp6YKCAABsCJnacdpAbv69x7+BQjwwFAY\/\/+HPAAAFwMBAQC7\/o5A\/SNlwLrFHOhVIYdvKluvLhZh1POT6fHvf9DCGcIpt9NvMANr9sZ9LNyXWTpS4W5wlMSdSBjr+ilY+yorbNaVIAAFnQ6lSa\/BikJFafqFjXdbXSH5\/fMJbEIbNGXkBQkR6doyrvuesHXVZc1HIkHtsfyZYv8E9UMgRTUyVxE43VjH4CWre\/GVTZpctIV3iPU\/eHiCbt33SPtVg737wEEz7boy\/w\/y793VYCn9K4rxJ3ncCtVXEc33omhjYWyCx7LSRuCZM5youkODRiYWEGatQZSBhdisgY+deajUrECtJ1AJFpINyUI36x4Pko1QSeUkcu5jfjJzdDvk6XzJ","pkt_caplen":315,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":5,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587875,"pkt_len":235,"pkt":"ABoRAAACABoRAAABCABFAADdH7BAAEAGNHkKCAABLjOtto0GAbtbbHWqpJOZiFAY\/\/\/6sQAAFwMBALADrBKnGaK3WfzgCT3FYMNAjOZ+llBr3fI4vohyMsCSWn0ULt9+PV1IYPDe9kWWiV0OVn0edXZwGLo80p2mJdQ2gU2BvbX0MVkUpb15ppn1+hc6yQZdgKhFg0mU9F5BGATZ+rMVVPUcVRCj6KXAKEDnjm300I28sOYVdfFzTyDIuOT4nedEd55u3siGOk9\/rZms9VjSHdQf1AEs8NpfzxCE5zDZ\/iJuIgZc3IDyg6y66A==","pkt_caplen":235,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":5,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587875,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodQdAABAGD9cuM622CggAAQG7jQakk5mIW2x2X1AQ\/\/8rOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1435587878215,"flow_last_seen":1435587878215,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8EZdAAEAGeDAKCAABNBFy25htAbtopH5VAAAAAKAC\/\/+mHQAAAgQFtAQCCAoACG\/CAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodRhAABAGRMM0EXLbCggAAQG7mG2XW4GqaKR+VlAS\/\/9ktAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoEZhAAEAGeEMKCAABNBFy25htAbtopH5Wl1uBq1AQ\/\/9ktQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADeEZlAAEAGd4wKCAABNBFy25htAbtopH5Wl1uBq1AY\/\/\/QKAAAFgMBALEBAACtAwGuYbGMU0Nfp5xq\/npkGkka24sX9VU\/rk18edcLN8FjCgAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1435587878215,"flow_last_seen":1435587878444,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodRtAABAGRMA0EXLbCggAAQG7mG2XW4GraKR\/DFAQ\/\/9j\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1435587878606,"flow_last_seen":1435587878606,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8DkFAAEAGt5sKCAABsCK6tI3YAbvsnGGoAAAAAKAC\/\/+FVQAAAgQFtAQCCAoACG\/pAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodR5AABAGgNKwIrq0CggAAQG7jdgTY55X7JxhqVAS\/\/+rXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDkJAAEAGt64KCAABsCK6tI3YAbvsnGGpE2OeWFAQ\/\/+rXwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2223{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":1422,"pkt":"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","pkt_caplen":1422,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1435587878215,"flow_last_seen":1435587878781,"flow_tot_l4_data_len":1690,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":281,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+0381{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoEZpAAEAGeEEKCAABNBFy25htAbtopH8Ml1uHA1AQ\/\/9epwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3241{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":2177,"pkt":"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","pkt_caplen":2177,"pkt_type":2048,"pkt_ipoffset":14}
+1039{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":17,"flow_packet_id":8,"flow_first_seen":1435587878215,"flow_last_seen":1435587878832,"flow_tot_l4_data_len":3853,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2143,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0381{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoEZtAAEAGeEAKCAABNBFy25htAbtopH8Ml1uPTlAQ\/\/9WXAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADeDkNAAEAGtvcKCAABsCK6tI3YAbvsnGGpE2OeWFAY\/\/8ZoQAAFgMBALEBAACtAwFWCBNoAIHi9OlNrmTTyx\/umOS8ZNI54fs0MYN5hNdT+wAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1435587878606,"flow_last_seen":1435587878901,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587878,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodSJAABAGgM6wIrq0CggAAQG7jdgTY55Y7JxiX1AQ\/\/+qqQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1435587879018,"flow_last_seen":1435587879018,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8CjxAAEAGu6AKCAABsCK6tI3aAbtwD3ouAAAAAKAC\/\/\/pMQAAAgQFtAQCCAoACHASAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodSNAABAGgM2wIrq0CggAAQG7jdqP8IXRcA96L1AS\/\/+rXAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCj1AAEAGu7MKCAABsCK6tI3aAbtwD3ovj\/CF0lAQ\/\/+rXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACuEZxAAEAGd7kKCAABNBFy25htAbtopH8Ml1uPTlAY\/\/9XCgAAFgMBAEYQAABCQQQATU4nliehvNXm16xRaCitOB\/9BSV0IzVuFLFin1daa5Q2BJoDXENmdVLRDFYwQFmjb4+go7AlwuB\/6\/X3g7B2FAMBAAEBFgMBADAp5TwOgUBjgp6LZ7MpTXgv5bZA477tqS8CTnJvnl6OgegZQLA+2ARDBJixIlcwPwg=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodSRAABAGRLc0EXLbCggAAQG7mG2XW49OaKR\/klAQ\/\/9V1gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1745{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":1066,"pkt":"ABoRAAACABoRAAABCABFAAQcdSVAABAGfNewIrq0CggAAQG7jdgTY55Y7JxiX1AY\/\/+BGwAAFgMBAD0CAAA5AwH43\/Coq+O7F27uwBca4DxqHvsYbg\/KrmI1zK52e1hLPwDAEwAAEf8BAAEAAAsABAMAAQIAIwAAFgMBDAMLAAv\/AAv8AAR+MIIEejCCA2KgAwIBAgIIdngzx9KEkDUwDQYJKoZIhvcNAQEFBQAwSTELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkdvb2dsZSBJbmMxJTAjBgNVBAMTHEdvb2dsZSBJbnRlcm5ldCBBdXRob3JpdHkgRzIwHhcNMTQxMTA2MTYwOTIwWhcNMTUxMTA2MTYwOTIwWjBqMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzETMBEGA1UECgwKR29vZ2xlIEluYzEZMBcGA1UEAwwQKi53b3JsZC53YXplLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALl19Yrv10JVvbDv+DcdGs3iL2qAyWGBCh9dBBfDSAPztP2zJeYXmnPQLCabDumM5sV7994IeE\/lDlNg\/Ee9AVVGazduLe76CEdBASswND6c3ScTzsmvvizSQ7iCLmTGWdY7m78IvHnpcTTwMbz1xjAt6nbJdrDsWlDzyhhCDWK6IfCRuO2hGmKNKEWvAgjjIYQ2nDdUeRvoXH+AAQVpDFmbrN5yTBDUdjrgiaq0ZhMga3iYMHUUlpNRnB25Y7qg9ksH8qvnj7eM5yjiE+Gz9pntMytr\/XyqrWsNzChuSvj8cLLo3RMatDoPKfiw+mfBtr75CMCZ0Z+MZJmYi8WLjaUCAwEAAaOCAUMwggE\/MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAbBgNVHREEFDASghAqLndvcmxkLndhemUuY29tMGgGCCsGAQUFBwEBBFwwWjArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nbGUuY29tL0dJQUcyLmNydDArBggrBgEFBQcwAYYfaHR0cDovL2NsaWVudHMxLmdvb2dsZS5jb20vb2NzcDAdBgNVHQ4EFgQU1mxvIJu5ECrTi3o6310abW3e5WgwDAYDVR0TAQH\/BAIwADAfBgNVHSMEGDAWgBRK3QYWG7z2aLV29YG2u2IaulqBLzAXBgNVHSAEEDAOMAwGCisGAQQB1nkCBQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3BraS5nb29nbGUuY29tL0dJQUcyLmNybDANBgkqhkiG9w0BAQUFAAOCAQEAVpjbOikll0Teaae1COIvpXTJakGeRLf+92aO+LubSXxVPd8MVw==","pkt_caplen":1066,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1435587878606,"flow_last_seen":1435587879181,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+0381{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDkRAAEAGt6wKCAABsCK6tI3YAbvsnGJfE2OiTFAQ\/\/+mtQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3735{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":2533,"pkt":"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","pkt_caplen":2533,"pkt_type":2048,"pkt_ipoffset":14}
+1040{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":18,"flow_packet_id":8,"flow_first_seen":1435587878606,"flow_last_seen":1435587879233,"flow_tot_l4_data_len":3853,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2499,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0381{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDkVAAEAGt6sKCAABsCK6tI3YAbvsnGJfE2Or+1AQ\/\/+dBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdSdAABAGQ8o0EXLbCggAAQG7mG2XW49OaKR\/klAY\/\/+rAgAAFgMBAKoEAACmAAABLACgg\/JpS9qUL5p6+FH6c6MxwCK4cRLLEBytlVyqVmEEI8OflthIa4sgVetDlAHzCcVMWYkVzzbYIS9BkZtAOy60ryDRoSLKVkLABThVCDjY3JeIVBvKwFfQBYacpLg5nSJPcAr7nj8DS9LMW\/gf1uT2S\/B8mfQ6hpRI0jpOHj4+jEC2hmIqP6z\/BMORDidHGn5YQGlf4G3mFElDqimOASRQdxQDAQABARYDAQAwp2f81zUNMEDKpW8aaqGPR1ZnVymJK4QaPamhmqfVPdLLcY06wLo2Nr1hIyYf8Zhb","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoEZ1AAEAGeD4KCAABNBFy25htAbtopH+Sl1uQOFAQ\/\/9U7AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADeCj5AAEAGuvwKCAABsCK6tI3aAbtwD3ovj\/CF0lAY\/\/\/+sgAAFgMBALEBAACtAwGSsw\/fktSmaBgooXXKSQQjKTgV1PXtiav8sr65RpY55wAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1435587879018,"flow_last_seen":1435587879574,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodSlAABAGgMewIrq0CggAAQG7jdqP8IXScA965VAQ\/\/+qpwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACuDkZAAEAGtyQKCAABsCK6tI3YAbvsnGJfE2Or+1AY\/\/+e1AAAFgMBAEYQAABCQQTKtcwr30+oDHBPWKWYbRHy0eyakPFGIW4xcbL6BoqSb+ZiZ3SiSZoVFxmHb69Ys\/1iEh9\/w1Q7L8H4sMwJiAn4FAMBAAEBFgMBADDSGEm7wBPM25MNlbKzm4DTdjgpRJUTYlTdtCsl3oOBqhQg\/ftMX3En0j1UC\/NlyJ8=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodSpAABAGgMawIrq0CggAAQG7jdgTY6v77Jxi5VAQ\/\/+cgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0586{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":203,"pkt":"ABoRAAACABoRAAABCABFAAC9EZ5AAEAGd6gKCAABNBFy25htAbtopH+Sl1uQOFAY\/\/\/kzgAAFwMBAJD8HE52CfIrV3Brayr5u11zfpMHdFPFm9zUE2a8OjB3cI+FuzesbgxZkjaTMZ5RAsGAjIr1M5ytCzgsUxySeIGsd9XDJp9DHl9sUd5nXNRC4xyMk9JgZLal69XWqJtpg5FkzW\/gA22yto0HI1i0rxA5eaLYMck3kGgx2L48tMPmfFrga9pLlQSgkt7Q8dwi+Lk=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodStAABAGRLA0EXLbCggAAQG7mG2XW5A4aKSAJ1AQ\/\/9UVwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1435587879850,"flow_last_seen":1435587879850,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8Fw9AAEAGrs0KCAABsCK6tI3cAbueIGdrAAAAAKAC\/\/\/NjwAAAgQFtAQCCAoACHBkAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodS5AABAGgMKwIrq0CggAAQG7jdxh35iUniBnbFAS\/\/+rWgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoFxBAAEAGruAKCAABsCK6tI3cAbueIGdsYd+YlVAQ\/\/+rWwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1744{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":1066,"pkt":"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","pkt_caplen":1066,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1435587879018,"flow_last_seen":1435587879855,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"}}
+0382{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCj9AAEAGu7EKCAABsCK6tI3aAbtwD3rlj\/CJxlAQ\/\/+mswAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3733{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":2533,"pkt":"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","pkt_caplen":2533,"pkt_type":2048,"pkt_ipoffset":14}
+1040{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":19,"flow_packet_id":8,"flow_first_seen":1435587879018,"flow_last_seen":1435587879907,"flow_tot_l4_data_len":3853,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2499,"flow_avg_l4_data_len":481,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0382{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCkBAAEAGu7AKCAABsCK6tI3aAbtwD3rlj\/CTdVAQ\/\/+dBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADeFxFAAEAGrikKCAABsCK6tI3cAbueIGdsYd+YlVAY\/\/+8qQAAFgMBALEBAACtAwFRXWw4ffzcoR+ELSkdRag9IC5DFcRvWYz6Kh3Hk0YO0AAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1435587879850,"flow_last_seen":1435587879958,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodTFAABAGgL+wIrq0CggAAQG7jdxh35iVniBoIlAQ\/\/+qpQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0700{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587879,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdTJAABAGf9SwIrq0CggAAQG7jdgTY6v77Jxi5VAY\/\/\/QgQAAFgMBAKoEAACmAAABLACguRveXhDifa8+Zvsue43SnoHhHo9vk+mFx\/8e6i6Q6g0+yceMFnPSfLrqs1iny9s65WOjTCGrw7brH1fNEpXHTU4HpzzK2Znr6VTUsmFxk8lZ2iYpHk+VzWBU\/fO4bv1f33ZHqtBv9oWGHCTxqO3s2y5HHT71gRvK6huM+Rc4cN25ReqJCwma8WAVfmDQZt0KyplP7JOsT95PQOIJnwoYjBQDAQABARYDAQAwbi+tK96nWOAsfK4Flsh5RapHNeqbxY9pUWCIj7a6H0u\/S+NpvLaO2Fr+o8qu2phD","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoDkdAAEAGt6kKCAABsCK6tI3YAbvsnGLlE2Os5VAQ\/\/+blgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACuCkFAAEAGuykKCAABsCK6tI3aAbtwD3rlj\/CTdVAY\/\/\/tBgAAFgMBAEYQAABCQQQY4CpwGFPaa0wFuxFJzDDOniXs5KzlXBg2EHHVKJQdx4zndgZs90zXX5dorGidaO93rV6eUFYtwrQ2aq0F1asyFAMBAAEBFgMBADAgpgbnXwozCCi9T3AHr1nRGoIpPxQYTGc62XFkmMuyAbs88R9ntWdmPrRrjBd3sT8=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodTNAABAGgL2wIrq0CggAAQG7jdqP8JN1cA97a1AQ\/\/+cfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodTRAABAGgLywIrq0CggAAQG7jdgTY6zl7Jxk\/VAQ\/\/+ZfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":19,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdTlAABAGf82wIrq0CggAAQG7jdqP8JN1cA97a1AY\/\/+4KQAAFgMBAKoEAACmAAABLACguRveXhDifa8+Zvsue43Sntt3L9coN2jjCs43EX1YShb0IYJIO8LOGUFJ5j\/PWONRZTB+vHNDCWE\/fkZHu7wJFKCFPuDGqkfDjkORY25kFYaCW54tp5tqUdJvuyxv4nZBGmVjI54mKg3vbdHPdF91gcxN9hX\/OWPlOnOAXXVzJiZlRwZVB6MK+JrUkHanlR5zPm8bP6pVwZ2CRRWQXE6QxBQDAQABARYDAQAwfQxmZ\/Ir+1nimnX0U0gvvGsb0VJe5EDqWPwqoeTyolNIJ\/ExduuiKASIl5WETAC+","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":19,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCkJAAEAGu64KCAABsCK6tI3aAbtwD3trj\/CUX1AQ\/\/+blAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":19,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":347,"pkt":"ABoRAAACABoRAAABCABFAAFNCkNAAEAGuogKCAABsCK6tI3aAbtwD3trj\/CUX1AY\/\/+jCQAAFwMBASB7AY1S959lQBsWkulFa27o1ltoeQLa3UthSFl27nOAAgh3vRmQEA8ZkSMDGd3f1nU4OgUFZDpTaE+MJbTlS\/yN\/y\/VwmW42Ot97LgFGjdk1Jm3e\/GpHaBfYKiZ77lAm\/57Zqh5FdqRcqUYoiFCCwI49LqDC33HdJyClLQ\/imnsGlJj9XLOW7YbuKMHs0qquixJTprmmBha0lAaRSyOaS4QKJl6DQExPE0y3Ep3lXmh9M5P4AZztAqkvO7qkG45NEo58XcCyExcnzMa6T6xeF190puSge+YMJ5GWna+tTBwT8rB4VZpiE84LSkYnJfI68GNLZzkAY6q0Trd2N\/e+\/QPXVrC5gqSO3C1YXUdo8LSe1d9J1EvHYx1AL9npFNLU3g=","pkt_caplen":347,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodTxAABAGgLSwIrq0CggAAQG7jdqP8JRfcA98kFAQ\/\/+abwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5080{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":3545,"pkt":"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","pkt_caplen":3545,"pkt_type":2048,"pkt_ipoffset":14}
+1040{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1435587879850,"flow_last_seen":1435587880568,"flow_tot_l4_data_len":3813,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3511,"flow_avg_l4_data_len":635,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"39f74f5618836d3c5f7dcccc9f67ba75","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0381{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoFxJAAEAGrt4KCAABsCK6tI3cAbueIGgiYd+mOFAQ\/\/+dAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1435587880576,"flow_last_seen":1435587880576,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.31","src_port":43991,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0U4FAAEAG6tYKECWdyKAEH6vXAFAtnZBdDlnt+YARAVu2DAAAAQEICgAIcK6K\/GDA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUFAABAG+SLIoAQfChAlnQBQq9cOWe35LZ2QXlAQ\/\/9M8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUJAABAG+SHIoAQfChAlnQBQq9cOWe35LZ2QXlAR\/\/9M8QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1435587880577,"flow_last_seen":1435587880577,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":46473,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0OqdAAEAGA58KECWdyKAEMbWJAFDzNuhArgf0IIARAVuhgQAAAQEICgAIcK4TbB\/F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUNAABAG+Q7IoAQxChAlnQBQtYmuB\/Qg8zboQVAQ\/\/9\/2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodURAABAG+Q3IoAQxChAlnQBQtYmuB\/Qg8zboQVAR\/\/9\/2gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1435587880578,"flow_last_seen":1435587880578,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":41823,"dst_port":80,"l4_proto":"tcp"}
+0396{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA04rRAAEAGW5EKECWdyKAEMaNfAFDGgz5oQX0A9YARAVvp7QAAAQEICgAIcK4TbB\/F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUVAABAG+QzIoAQxChAlnQBQo19BfQD1xoM+aVAQ\/\/\/IRwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUZAABAG+QvIoAQxChAlnQBQo19BfQD1xoM+aVAR\/\/\/IRgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1435587880579,"flow_last_seen":1435587880579,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":45169,"dst_port":80,"l4_proto":"tcp"}
+0381{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAohIxAAEAG3tQKCAAByKAExrBxAFBvlik9kGnb21AR\/\/8iigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUdAABAGHhrIoATGCggAAQBQsHGQadvbb5YpPlAQ\/\/8iigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUhAABAGHhnIoATGCggAAQBQsHGQadvbb5YpPlAR\/\/8iiQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1435587880580,"flow_last_seen":1435587880580,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52953,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0VK5AAEAG6ZcKECWdyKAEMc7ZAFAfHIxhueqe64ARAVv9kwAAAQEICgAIcK4TbCOv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUlAABAG+QjIoAQxChAlnQBQztm56p7rHxyMYlAQ\/\/\/f1wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUpAABAG+QfIoAQxChAlnQBQztm56p7rHxyMYlAR\/\/\/f1gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1435587880581,"flow_last_seen":1435587880581,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52746,"dst_port":80,"l4_proto":"tcp"}
+0395{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":447,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA02RhAAEAGZS0KECWdyKAEMc4KAFB1GwfcXT3HdoARAVthCwAAAQEICgAIcK4TbCOv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUtAABAG+QbIoAQxChAlnQBQzgpdPcd2dRsH3VAQ\/\/9DTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodUxAABAG+QXIoAQxChAlnQBQzgpdPcd2dRsH3VAR\/\/9DTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":450,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPmQKECWdyKAEH6vXAFAtnZBeAAAAAFAEAABJUQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":451,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMbWJAFDzNuhBAAAAAFAEAAAiEAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMaNfAFDGgz5pAAAAAFAEAAAKxgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY2EKCAAByKAExrBxAFBvlik+AAAAAFAEAACO2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1435587880583,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60574,"dst_port":80,"l4_proto":"tcp"}
+0382{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo9fdAAEAGbf4KCAAByKAEMeyeAFAiBCaW3fvegVAR\/\/\/m8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodU1AABAGHqnIoAQxCggAAQBQ7J7d+96BIgQml1AQ\/\/\/m8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodU5AABAGHqjIoAQxCggAAQBQ7J7d+96BIgQml1AR\/\/\/m8QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1435587880587,"flow_last_seen":1435587880587,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":43089,"dst_port":443,"l4_proto":"tcp"}
+0381{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoE7JAAEAGT68KCAAByKAExqhRAbtmrsLcmVFRdFAR\/\/8aBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodU9AABAGHhLIoATGCggAAQG7qFGZUVF0Zq7C3VAQ\/\/8aBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodVBAABAGHhHIoATGCggAAQG7qFGZUVF0Zq7C3VAR\/\/8aBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1435587880589,"flow_last_seen":1435587880589,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60479,"dst_port":443,"l4_proto":"tcp"}
+0383{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoS15AAEAGGJgKCAAByKAEMew\/Abump6BqWVh1BVAR\/\/\/VjgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodVJAABAGHqTIoAQxCggAAQG77D9ZWHUFpqega1AQ\/\/\/VjgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodVNAABAGHqPIoAQxCggAAQG77D9ZWHUFpqega1AR\/\/\/VjQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMc7ZAFAfHIxiAAAAAFAEAAA4ugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGPlIKECWdyKAEMc4KAFB1GwfdAAAAAFAEAABoDwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY\/YKCAAByKAEMeyeAFAiBCaXAAAAAFAEAACjfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY2EKCAAByKAExqhRAbtmrsLdAAAAAFAEAAAE2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGY\/YKCAAByKAEMew\/Abump6BrAAAAAFAEAACj+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":188,"pkt":"ABoRAAACABoRAAABCABFAACuFxNAAEAGrlcKCAABsCK6tI3cAbueIGgiYd+mOFAY\/\/+K7AAAFgMBAEYQAABCQQTurxI+nMnZN+D7vHw4FE6RidzKzZC57NTLScck3Ir5efWxRdjMmnKWr39yNKGeYANuwsc5XctGeSC1oPz2EWJCFAMBAAEBFgMBADDvcdRTF1VniTUM33ciAXYkbZ7K5qM0GzIFF8NZfpcFTir6LkW7A00jtf3FM9XOb3c=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodVRAABAGgJywIrq0CggAAQG7jdxh36Y4niBoqFAQ\/\/+cfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdVtAABAGf6uwIrq0CggAAQG7jdxh36Y4niBoqFAY\/\/8+EwAAFgMBAKoEAACmAAABLACguRveXhDifa8+Zvsue43SnjJXVgcNlqsTrwV6Ac2PJDhtRn9DSp6ZuHu5FXbIS6dYrPDPXtOyK21XS83nle4rgMJ44Cn\/B6Janwhq\/a0WWjJt3I6W\/6YuouI6g8npQNo7XrtXRRSDtcS4+21uIgdcnOrpGGKet+sWRdSOnQayx6Ovh2Dc7JdyhIDjxM\/nTWErXsTeUL4hWyFp\/s+i56aLOBQDAQABARYDAQAwJ5yFje3xpcCXhGqa1caKqxAK\/+o1fMSorNw0kFwdp2PV6NcrmjAANoqC111UI9fe","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587880,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoFxRAAEAGrtwKCAABsCK6tI3cAbueIGioYd+nIlAQ\/\/+bkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0870{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587882,"pkt_len":411,"pkt":"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","pkt_caplen":411,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587882,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodV1AABAGgJOwIrq0CggAAQG7jdxh36ciniBqDVAQ\/\/+aLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0434{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587882,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNFxZAAEAGrrUKCAABsCK6tI3cAbueIGoNYd+nIlAY\/\/8mlQAAFwMBACDJjEu8pRJQ7ss+2IWucIURIZTqPsggb3KHjbrCpRJa4Q==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587882,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodV5AABAGgJKwIrq0CggAAQG7jdxh36ciniBqMlAQ\/\/+aCAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587882,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNMsZAAEAGQsEKECWdriXnUaUQFGaA18okWhY9doAYAVciEwAAAQEICgAIcWhBJdw4gAAWBXL2KZLscQ7\/r4Q3YR6R6YsREWIs0w==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1435587894241,"flow_last_seen":1435587894241,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA87+5AAEAGZNsKCAABLjOtto0mAbvDfJnqAAAAAKAC\/\/\/\/twAAAgQFtAQCCAoACHYEAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXFAABAGD20uM622CggAAQG7jSY8g2YVw3yZ61AS\/\/86\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7+9AAEAGZO4KCAABLjOtto0mAbvDfJnrPINmFlAQ\/\/86\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADe7\/BAAEAGZDcKCAABLjOtto0mAbvDfJnrPINmFlAY\/\/+u+wAAFgMBALEBAACtAwFHEcC8WvO2sF2kYiE8YWqxi\/TdpMl6\/BrnTeWud37DVAAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1435587894241,"flow_last_seen":1435587894323,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXJAABAGD2wuM622CggAAQG7jSY8g2YWw3yaoVAQ\/\/86SQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4624{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":3201,"pkt":"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","pkt_caplen":3201,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1435587894241,"flow_last_seen":1435587894759,"flow_tot_l4_data_len":3469,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3167,"flow_avg_l4_data_len":578,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0383{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7\/FAAEAGZOwKCAABLjOtto0mAbvDfJqhPINyYVAQ\/\/8t\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587894,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXRAABAGD2ouM622CggAAQG7jSY8g3Jhw3yb51AQ\/\/8suAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0701{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587895,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdXVAABAGDn8uM622CggAAQG7jSY8g3Jhw3yb51AY\/\/\/VMgAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJ6pYMsRRGJ1d9FELicARaPOaOcLiwNWRKVZRL15NOZovdKDRBJZMzEYApKwm4+Hui3ZkSpEBkRuzpeGlLHAWLu\/Fj2SgxEL4orVKY4tdSUXj9yG\/VdCyajTjkpAVOX1rkurLLjAkge\/0LqhMgCnlk8WBs27YrLvWSOrOIEaRc2jJ6xRPWa8C3XEgYWFcoRA5xBQDAQABARYDAQAwI72H3vp1CBuHlHA2TNgpJ\/9yWTMe+VE6uCn5LGd8WNKOTMwOqKLDg9romtgepIV5","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0587{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587895,"pkt_len":203,"pkt":"ABoRAAACABoRAAABCABFAAC97\/NAAEAGZFUKCAABLjOtto0mAbvDfJvnPINzS1AY\/\/+k0QAAFwMBAJAY3cmPW1W8S3N27ZTK8sX2UQjZ2dfMxoDzddg5AuSh\/F4DbQzKYHvYt9TmogIBUwKoOv06KEYgoJDM6\/8hkE0ej5zyob2UtXeSujYbjPlYh9oY4LVTDHeY15lDqDVEVOvFe8WtlU0d7eSeKnOb1UHnqrsdUg3lWwn6gE5uyeDnVrzrdlSXswZkmNMqlUA5Xak=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587895,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXZAABAGD2guM622CggAAQG7jSY8g3NLw3ycfFAQ\/\/8rOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587895,"pkt_len":379,"pkt":"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","pkt_caplen":379,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587895,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXdAABAGD2cuM622CggAAQG7jSY8g3NLw3ydwVAQ\/\/8p9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1570{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587896,"pkt_len":923,"pkt":"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","pkt_caplen":923,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0MsdAAEAGQtkKECWdriXnUaUQFGaA18o9WhY9doARAVd\/BwAAAQEICgAId7tBJdw4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXlAABAGMDOuJedRChAlnRRmpRBaFj12gNfKPlAQ\/\/9OlwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXpAABAGMDKuJedRChAlnRRmpRBaFj12gNfKPlAR\/\/9OlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0MshAAEAGQtgKECWdriXnUaUQFGaA18o+WhY9d4AQAVd\/BgAAAQEICgAId7tBJdw4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1435587898822,"flow_last_seen":1435587898822,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"108.168.176.228","src_port":50828,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8qMZAAEAGamAKCAABbKiw5MaMAbuJft8IAAAAAKAC\/\/93xAAAAgQFtAQCCAoACHfOAAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXtAABAGzb9sqLDkCggAAQG7xox2gSD3iX7fCVAS\/\/+\/9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoqMdAAEAGanMKCAABbKiw5MaMAbuJft8JdoEg+FAQ\/\/+\/9QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":222,"pkt":"ABoRAAACABoRAAABCABFAADQqMhAAEAGacoKCAABbKiw5MaMAbuJft8JdoEg+FAY\/\/8CgQAAV0EBBQAAGPgFAaWRifwQQW5kcm9pZC0yLjEyLjEyNAAAGfgCnPgE+AH8B3ByaXZhY3n4AYD4AUD4AXgAAGr4Bgy1\/4dVEZgRUAWfVr\/8WSPpm+qUrf9vBeH3C9lpBHYwAtjIwdtR7rFoy80viKanvIJlKfhUF50Xw54Ypb27n9\/PUPqe683YGcBZ4ZxhcQwGc4ldWiNEIpWFWrf05AEiHdzPQ0G9fY7P","pkt_caplen":222,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587898,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodXxAABAGzb5sqLDkCggAAQG7xox2gSD4iX7fsVAQ\/\/+\/TQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0488{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":132,"pkt":"ABoRAAACABoRAAABCABFAAB2dX1AABAGzW9sqLDkCggAAQG7xox2gSD4iX7fsVAY\/\/\/rmgAAAAAF+AMBOpEAAAP4AZyAAD0fEaLTWzYXLsvR2EIWPSd+QT1rF7j7mPtsFRrXulAcsNpnj9uxCX1HwIiBP2G6B4VrEysb+BC+GXb5y4r5","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoqMlAAEAGanEKCAABbKiw5MaMAbuJft+xdoEhRlAQ\/\/++\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABGqMpAAEAGalIKCAABbKiw5MaMAbuJft+xdoEhRlAY\/\/+k0QAAgAAbY7sI0qPcmlq2EiNAgFpx6B9k041mkSu+3+Is","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodX5AABAGzbxsqLDkCggAAQG7xox2gSFGiX7fz1AQ\/\/++4QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/qMtAAEAGalgKCAABbKiw5MaMAbuJft\/PdoEhRlAY\/\/\/SwgAAgAAUapYHVSsr8tEQzIUSuIS+8QylVXU=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodX9AABAGzbtsqLDkCggAAQG7xox2gSFGiX7f5lAQ\/\/++ygAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":75,"pkt":"ABoRAAACABoRAAABCABFAAA9dYBAABAGzaVsqLDkCggAAQG7xox2gSFGiX7f5lAY\/\/9dAAAAgAASBictEHhjgQm91YLcjt8g+Y+g","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":31,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoqMxAAEAGam4KCAABbKiw5MaMAbuJft\/mdoEhW1AQ\/\/++tQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":31,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":245,"pkt":"ABoRAAACABoRAAABCABFAADndYFAABAGzPpsqLDkCggAAQG7xox2gSFbiX7f5lAY\/\/\/bEwAAgAC8ZsshsEYVPNm3QpKvHHqYG5xP2x2\/5U\/+xIQXT32Ja3Fc+bWQg+v1g4OP2u6+xEObvhBr9OCT3nT5iGsDuCAwFusyPBCSH+QEnbMZp9MI2ffSAIJg4eG0z9h233DLB0Akp5\/XqI7bocb1GaMFO5+XiyatVpSIkTb+GKsHGe5Z0dT+Jq416QtuL8H82YJNuTzIgGGg+vCfhwgHApn\/WL7K5pRtb3hdL9ZyxaFK5UX0YNRiWlRpFI6mzT1hU2s=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":31,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587899,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoqM1AAEAGam0KCAABbKiw5MaMAbuJft\/mdoEiGlAQ\/\/+99gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1435587905035,"flow_last_seen":1435587905035,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA82iNAAEAGeqYKCAABLjOtto0pAbvwXaAfAAAAAKAC\/\/\/IZgAAAgQFtAQCCAoACHo8AAAAAAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodYZAABAGD1guM622CggAAQG7jSkPol\/g8F2gIFAS\/\/86+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2iRAAEAGerkKCAABLjOtto0pAbvwXaAgD6Jf4VAQ\/\/86\/AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0629{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":236,"pkt":"ABoRAAACABoRAAABCABFAADe2iVAAEAGegIKCAABLjOtto0pAbvwXaAgD6Jf4VAY\/\/\/tNgAAFgMBALEBAACtAwGvtEh7ZPeUuZEpuZqGf1gkt94wLOoQqmQjq2yZ1wt58QAAQMAUwArAIsAhADkAOMAgwA\/ABQA1wBLACMAcwBsAFgATwBrADcADAAoABcATwAnAH8AeADMAMsAdwA7ABAAvAP8BAABEAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAA=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1435587905035,"flow_last_seen":1435587905111,"flow_tot_l4_data_len":282,"flow_min_l4_data_len":20,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":70,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodYdAABAGD1cuM622CggAAQG7jSkPol\/h8F2g1lAQ\/\/86RgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1751{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":1066,"pkt":"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","pkt_caplen":1066,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":32,"flow_packet_id":6,"flow_first_seen":1435587905035,"flow_last_seen":1435587905510,"flow_tot_l4_data_len":1334,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1032,"flow_avg_l4_data_len":222,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA"}}
+0381{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2iZAAEAGercKCAABLjOtto0pAbvwXaDWD6Jj1VAQ\/\/82UgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3262{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":2189,"pkt":"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","pkt_caplen":2189,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":32,"flow_packet_id":8,"flow_first_seen":1435587905035,"flow_last_seen":1435587905565,"flow_tot_l4_data_len":3509,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2155,"flow_avg_l4_data_len":438,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Waze","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.world.waze.com","ja3":"f392f120f1087cd2f8814539cf58cfa4","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.world.waze.com","fingerprint":"30:50:FA:42:94:E4:1A:34:9B:23:55:CB:7B:F2:0D:76:FA:1C:58:4B"}}
+0381{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2idAAEAGerYKCAABLjOtto0pAbvwXaDWD6JsLFAQ\/\/8t+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587905,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodYpAABAGD1QuM622CggAAQG7jSkPomws8F2iHFAQ\/\/8stQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0698{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587906,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESdYtAABAGDmkuM622CggAAQG7jSkPomws8F2iHFAY\/\/9kBgAAFgMBAKoEAACmAAABLACg+DNooxMI1xMpQjOwcaWLJ1jBpjNn8GKzE6iQofLSwqPHC1iAAWCxKIz4mEwVuBjdYPXPbHFVSid3KtZtmjzky5f9c7ZH3igU0qNHShNGUQXlXYc5bdayarwxrRLirLWPLg+lhlG7uyFp4hsioBlMsA0li9wupJXRUSZnoJOaHnf6\/jxHkKrvgxrL93Kn70NWCNwRsFumEYSChC5NulUq7xQDAQABARYDAQAw5yF+Gs\/KZFyQqz1DTPGyIHhJl1HNlbY3lJyxzYWnCLT6apiF249RpSP99lmAPFjt","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587906,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2ilAAEAGerQKCAABLjOtto0pAbvwXaIcD6JtFlAQ\/\/8rywAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587906,"pkt_len":203,"pkt":"ABoRAAACABoRAAABCABFAAC92ipAAEAGeh4KCAABLjOtto0pAbvwXaIcD6JtFlAY\/\/+rHQAAFwMBAJDkrrD9SA4+LmKzspcHnXowhPBblCCla204NgqPS0UbDvi3FwMZblBmNtY0jKhmQuQORsNfhK8al25NMwXFLKNdn+z1CtsyYB43HL9wyLLSMNK7nC1Zky+WYPvMpkuwuyJ0+McaUzeUsX5ul4pcc5NuTj8ADh7sJcVgm+9jWgCOQ9KUX5vGtnm3baGraIAVagc=","pkt_caplen":203,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","pkt_oversize":false,"pkt_ts":1435587906,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodYxAABAGD1IuM622CggAAQG7jSkPom0W8F2isVAQ\/\/8rNgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1435587880580,"flow_last_seen":1435587880589,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52953,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1435587880580,"flow_last_seen":1435587880589,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52953,"dst_port":80,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":3,"flow_packet_id":17,"flow_first_seen":1435587868632,"flow_last_seen":1435587869162,"flow_tot_l4_data_len":3437,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1644,"flow_avg_l4_data_len":202,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45529,"dst_port":80,"l4_proto":"tcp"}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":7,"flow_packet_id":15,"flow_first_seen":1435587869162,"flow_last_seen":1435587869302,"flow_tot_l4_data_len":855,"flow_min_l4_data_len":20,"flow_max_l4_data_len":413,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45536,"dst_port":80,"l4_proto":"tcp"}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":8,"flow_packet_id":14,"flow_first_seen":1435587871656,"flow_last_seen":1435587871946,"flow_tot_l4_data_len":850,"flow_min_l4_data_len":20,"flow_max_l4_data_len":413,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45538,"dst_port":80,"l4_proto":"tcp"}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":9,"flow_packet_id":14,"flow_first_seen":1435587871658,"flow_last_seen":1435587871945,"flow_tot_l4_data_len":810,"flow_min_l4_data_len":20,"flow_max_l4_data_len":375,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45540,"dst_port":80,"l4_proto":"tcp"}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":14,"flow_packet_id":14,"flow_first_seen":1435587871941,"flow_last_seen":1435587872478,"flow_tot_l4_data_len":852,"flow_min_l4_data_len":20,"flow_max_l4_data_len":413,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45546,"dst_port":80,"l4_proto":"tcp"}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":15,"flow_packet_id":14,"flow_first_seen":1435587872476,"flow_last_seen":1435587872705,"flow_tot_l4_data_len":847,"flow_min_l4_data_len":20,"flow_max_l4_data_len":413,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45552,"dst_port":80,"l4_proto":"tcp"}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":16,"flow_packet_id":14,"flow_first_seen":1435587872702,"flow_last_seen":1435587872838,"flow_tot_l4_data_len":843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":411,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.230.227.172","src_port":45554,"dst_port":80,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":31,"flow_packet_id":15,"flow_first_seen":1435587898822,"flow_last_seen":1435587899372,"flow_tot_l4_data_len":831,"flow_min_l4_data_len":20,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"108.168.176.228","src_port":50828,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","category":"Chat"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":31,"flow_packet_id":15,"flow_first_seen":1435587898822,"flow_last_seen":1435587899372,"flow_tot_l4_data_len":831,"flow_min_l4_data_len":20,"flow_max_l4_data_len":211,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"108.168.176.228","src_port":50828,"dst_port":443,"l4_proto":"tcp"}
+0513{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1435587880579,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":45169,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0456{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1435587880579,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":45169,"dst_port":80,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":4,"flow_packet_id":107,"flow_first_seen":1435587868634,"flow_last_seen":1435587888318,"flow_tot_l4_data_len":82074,"flow_min_l4_data_len":20,"flow_max_l4_data_len":17224,"flow_avg_l4_data_len":767,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36100,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":5,"flow_packet_id":37,"flow_first_seen":1435587868635,"flow_last_seen":1435587884546,"flow_tot_l4_data_len":10726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3626,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36102,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":30,"flow_packet_id":24,"flow_first_seen":1435587894241,"flow_last_seen":1435587901093,"flow_tot_l4_data_len":5769,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3167,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36134,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":32,"flow_packet_id":23,"flow_first_seen":1435587905035,"flow_last_seen":1435587907392,"flow_tot_l4_data_len":4960,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2155,"flow_avg_l4_data_len":215,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"46.51.173.182","src_port":36137,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":18,"flow_packet_id":32,"flow_first_seen":1435587878606,"flow_last_seen":1435587882306,"flow_tot_l4_data_len":43531,"flow_min_l4_data_len":20,"flow_max_l4_data_len":11152,"flow_avg_l4_data_len":1360,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36312,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":19,"flow_packet_id":20,"flow_first_seen":1435587879018,"flow_last_seen":1435587882336,"flow_tot_l4_data_len":4993,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2499,"flow_avg_l4_data_len":249,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36314,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":20,"flow_packet_id":28,"flow_first_seen":1435587879850,"flow_last_seen":1435587883075,"flow_tot_l4_data_len":26934,"flow_min_l4_data_len":20,"flow_max_l4_data_len":8116,"flow_avg_l4_data_len":961,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.186.180","src_port":36316,"dst_port":443,"l4_proto":"tcp"}
+0502{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1435587880587,"flow_last_seen":1435587880590,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":43089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0457{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":28,"flow_packet_id":4,"flow_first_seen":1435587880587,"flow_last_seen":1435587880590,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.198","src_port":43089,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":13,"flow_packet_id":16,"flow_first_seen":1435587871939,"flow_last_seen":1435587873226,"flow_tot_l4_data_len":8641,"flow_min_l4_data_len":20,"flow_max_l4_data_len":4014,"flow_avg_l4_data_len":540,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39010,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":6,"flow_packet_id":13,"flow_first_seen":1435587868996,"flow_last_seen":1435587869400,"flow_tot_l4_data_len":1700,"flow_min_l4_data_len":20,"flow_max_l4_data_len":568,"flow_avg_l4_data_len":130,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.194.118.48","src_port":36585,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":17,"flow_packet_id":33,"flow_first_seen":1435587878215,"flow_last_seen":1435587880857,"flow_tot_l4_data_len":57774,"flow_min_l4_data_len":20,"flow_max_l4_data_len":21908,"flow_avg_l4_data_len":1750,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"52.17.114.219","src_port":39021,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":10,"flow_packet_id":23,"flow_first_seen":1435587871918,"flow_last_seen":1435587874945,"flow_tot_l4_data_len":7041,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1388,"flow_avg_l4_data_len":306,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51049,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":11,"flow_packet_id":18,"flow_first_seen":1435587871929,"flow_last_seen":1435587874378,"flow_tot_l4_data_len":4941,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2131,"flow_avg_l4_data_len":274,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51050,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":12,"flow_packet_id":21,"flow_first_seen":1435587871935,"flow_last_seen":1435587874495,"flow_tot_l4_data_len":7001,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2131,"flow_avg_l4_data_len":333,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"176.34.103.105","src_port":51051,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1435587880578,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":41823,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1435587880578,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":41823,"dst_port":80,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1435587880576,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.31","src_port":43991,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1435587880576,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.31","src_port":43991,"dst_port":80,"l4_proto":"tcp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1435587880583,"flow_last_seen":1435587880590,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60574,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0455{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1435587880583,"flow_last_seen":1435587880590,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60574,"dst_port":80,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":2,"flow_packet_id":37,"flow_first_seen":1435587867755,"flow_last_seen":1435587873026,"flow_tot_l4_data_len":61947,"flow_min_l4_data_len":20,"flow_max_l4_data_len":11799,"flow_avg_l4_data_len":1674,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"65.39.128.135","src_port":54915,"dst_port":80,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1435587880577,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":46473,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1435587880577,"flow_last_seen":1435587880583,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":46473,"dst_port":80,"l4_proto":"tcp"}
+0501{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1435587880589,"flow_last_seen":1435587880590,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60479,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0456{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1435587880589,"flow_last_seen":1435587880590,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.160.4.49","src_port":60479,"dst_port":443,"l4_proto":"tcp"}
+0458{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1435587867443,"flow_last_seen":1435587867753,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"200.89.75.198","src_port":46214,"dst_port":123,"l4_proto":"udp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1435587880581,"flow_last_seen":1435587880589,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52746,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0459{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1435587880581,"flow_last_seen":1435587880589,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"200.160.4.49","src_port":52746,"dst_port":80,"l4_proto":"tcp"}
+0500{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1435587866603,"flow_last_seen":1435587898628,"flow_tot_l4_data_len":446,"flow_min_l4_data_len":20,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":44,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"174.37.231.81","src_port":42256,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1435587866603,"flow_last_seen":1435587898628,"flow_tot_l4_data_len":446,"flow_min_l4_data_len":20,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":44,"midstream":1,"l3_proto":"ip4","src_ip":"10.16.37.157","dst_ip":"174.37.231.81","src_port":42256,"dst_port":5222,"l4_proto":"tcp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/waze.pcap"}
diff --git a/tests/result/nDPId_webex.pcap.txt b/tests/result/nDPId_webex.pcap.txt
new file mode 100644
index 000000000..0f394388f
--- /dev/null
+++ b/tests/result/nDPId_webex.pcap.txt
@@ -0,0 +1,920 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0455{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1444570624853,"flow_last_seen":1444570624853,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp"}
+0406{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570624,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8OXNAAEAGTZUKCAABQERpZ6GCAbtPGIcMAAAAAKACOQgjFwAAAgQFtAQCCAoATL5\/AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570624,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAQ5AABAGtg5ARGlnCggAAQG7oYKw53jzTxiHDVAS\/\/9Y4AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570624,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOXRAAEAGTagKCAABQERpZ6GCAbtPGIcNsOd49FAQOQgf2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570624,"pkt_len":249,"pkt":"ABoRAAACABoRAAABCABFAADrOXVAAEAGTOQKCAABQERpZ6GCAbtPGIcNsOd49FAYOQh62gAAFgMBAL4BAAC6AwNWGmYAecKEXHBKd9RHCMqE79SthA0OtjJysVWA+njuJAAAOMwUzBPMFcAUwAoAOQA4ADXAEsAIABYAEwAKwC\/AK8ATwAkAogCeADMAMgCcAC\/AEcAHAAUABAD\/AQAAWQAAABUAEwAAEHJhZGNvbS53ZWJleC5jb20ACwACAQAACgAIAAYAGQAYABcAIwAAAA0AIgAgBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAQEzdAAA","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0749{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1444570624853,"flow_last_seen":1444570624860,"flow_tot_l4_data_len":295,"flow_min_l4_data_len":20,"flow_max_l4_data_len":215,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0379{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570624,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAQ9AABAGtg1ARGlnCggAAQG7oYKw53j0TxiH0FAQ\/\/9YHgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4046{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":2774,"pkt":"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","pkt_caplen":2774,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOXZAAEAGTaYKCAABQERpZ6GCAbtPGIfQsOeDlFAQSmADHgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2024{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":1273,"pkt":"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","pkt_caplen":1273,"pkt_type":2048,"pkt_ipoffset":14}
+1102{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":0,"flow_packet_id":8,"flow_first_seen":1444570624853,"flow_last_seen":1444570625424,"flow_tot_l4_data_len":4314,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2740,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","server_names":"*.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0377{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOXdAAEAGTaUKCAABQERpZ6GCAbtPGIfQsOeIV1AQVQDzugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0805{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":364,"pkt":"ABoRAAACABoRAAABCABFAAFeOXhAAEAGTG4KCAABQERpZ6GCAbtPGIfQsOeIV1AYVQCmoAAAFgMDAQYQAAECAQBaUJRMvDfnP91s4fLaSdu44xt7RFR+trnYQAsQZuxiv+VH3sH2YjpaVj+0amWHFiBxymsVXudQxps8\/5f1xDtVwG8a\/DnSLkvL1cihzvsCtgdF4uu98yJ277wUvmb2ADrv\/q4qNCFJheN\/tviU6E0p9sJD0tbw6UMAxbTbpfvHhmrNcSZ7gphi4YoWg\/4K8xa5CFlA9Bwr2cXgCUOqkETobyBCJoOdy3LvdLyGtJDLzvg3lKApkzr7cWH2Z5H4GoYK7ZrQQMBwoGfNCtEfEXMdQL8J5i6bQe\/G8tQ\/hKM0OV9AzcPKReXjJ659etvNkSFvYhXHHHcoPV8Xx8\/e+ceMFAMDAAEBFgMDACBs0R1B8r1wXdCDd995zf9rNLSN0DOD7DSUs+Nqz9hnAA==","pkt_caplen":364,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoARJAABAGtgpARGlnCggAAQG7oYKw54hXTxiJBlAQ\/\/9HhQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTARNAABAGtd5ARGlnCggAAQG7oYKw54hXTxiJBlAY\/\/\/RlgAAFAMDAAEBFgMDACBUgHqoCzjeW1KL8J8+yck9I0dxRLzrOiBoVzV1LL5aEw==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOXlAAEAGTaMKCAABQERpZ6GCAbtPGIkGsOeIglAQVQDyWQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoARRAABAGtghARGlnCggAAQG7oYKw54iCTxiLHlAQ\/\/9FQgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1444570627404,"flow_last_seen":1444570627404,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8hnNAAEAGAJUKCAABQERpZ6GEAbuwMDkNAAAAAKACOQgO\/QAAAgQFtAQCCAoATL9+AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoASZAABAGtfZARGlnCggAAQG7oYRPz8bysDA5DlAS\/\/9Y3gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAohnRAAEAGAKgKCAABQERpZ6GEAbuwMDkOT8\/G81AQOQgf1wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0688{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":281,"pkt":"ABoRAAACABoRAAABCABFAAELhnVAAEAG\/8MKCAABQERpZ6GEAbuwMDkOT8\/G81AYOQi8XAAAFgMBAN4BAADaAwNWGmYD1bgajSKfLk8MBc\/KhqagawnHbCgQ2bA0JfR3iiCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAA4zBTME8wVwBTACgA5ADgANcASwAgAFgATAArAL8ArwBPACQCiAJ4AMwAyAJwAL8ARwAcABQAEAP8BAABZAAAAFQATAAAQcmFkY29tLndlYmV4LmNvbQALAAIBAAAKAAgABgAZABgAFwAjAAAADQAiACAGAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMBATN0AAA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1444570627404,"flow_last_seen":1444570627411,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoASdAABAGtfVARGlnCggAAQG7oYRPz8bzsDA58VAQ\/\/9X\/AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpAS1AABAGtW5ARGlnCggAAQG7oYRPz8bzsDA58VAY\/\/\/Z6wAAFgMDAFECAABNAwNWGmYJvIxu30wG6\/QUZCmoAMbL6LdQC15hV8KtMY\/qdSCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQAUAwMAAQEWAwMAIKNCXdoHLE35gFWT8+ZDcTEszCphhanV0csUAVKKsy+J","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1444570627404,"flow_last_seen":1444570627815,"flow_tot_l4_data_len":496,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0379{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAohnZAAEAGAKYKCAABQERpZ6GEAbuwMDnxT8\/HdFAQPLgawwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABThndAAEAGAHoKCAABQERpZ6GEAbuwMDnxT8\/HdFAYPLjpWAAAFAMDAAEBFgMDACBXzEd1erS3V3J4BRCzEeJwOZFWWJv7nft2Y0meqHofKg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570627,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAS5AABAGte5ARGlnCggAAQG7oYRPz8d0sDA6HFAQ\/\/9XUAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1110{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoATNAABAGtelARGlnCggAAQG7oYRPz8d0sDA8NFAQ\/\/9VOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1034{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":533,"pkt":"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","pkt_caplen":533,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoATRAABAGtehARGlnCggAAQG7oYRPz8d0sDA+E1AQ\/\/9TWQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1444570628113,"flow_last_seen":1444570628113,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8CqVAAEAGfGMKCAABQERpZ6GGAbuTEbVkAAAAAKACOQivfwAAAgQFtAQCCAoATL\/BAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoATVAABAGtedARGlnCggAAQG7oYZs7kqbkxG1ZVAS\/\/9Y3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1444570628117,"flow_last_seen":1444570628117,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8SvxAAEAGPAwKCAABQERpZ6GHAbtcKPU9AAAAAKACOQimjgAAAgQFtAQCCAoATL\/BAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoATZAABAGteZARGlnCggAAQG7oYej1wrCXCj1PlAS\/\/9Y2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCqZAAEAGfHYKCAABQERpZ6GGAbuTEbVlbO5KnFAQOQgf1QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0687{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":281,"pkt":"ABoRAAACABoRAAABCABFAAELCqdAAEAGe5IKCAABQERpZ6GGAbuTEbVlbO5KnFAYOQgw\/QAAFgMBAN4BAADaAwNWGmYE7RhsRONG\/m1MT5VVrdjnvzP1znNlFG2+WauU5SCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAA4zBTME8wVwBTACgA5ADgANcASwAgAFgATAArAL8ArwBPACQCiAJ4AMwAyAJwAL8ARwAcABQAEAP8BAABZAAAAFQATAAAQcmFkY29tLndlYmV4LmNvbQALAAIBAAAKAAgABgAZABgAFwAjAAAADQAiACAGAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMBATN0AAA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1444570628113,"flow_last_seen":1444570628121,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0380{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoATdAABAGteVARGlnCggAAQG7oYZs7kqckxG2SFAQ\/\/9X+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoSv1AAEAGPB8KCAABQERpZ6GHAbtcKPU+o9cKw1AQOQgf1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":281,"pkt":"ABoRAAACABoRAAABCABFAAELSv5AAEAGOzsKCAABQERpZ6GHAbtcKPU+o9cKw1AYOQiciAAAFgMBAN4BAADaAwNWGmYEkvVIckj2nKXTHHhTgHLpDPs+ur2PFRE7SXTT+yCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAA4zBTME8wVwBTACgA5ADgANcASwAgAFgATAArAL8ArwBPACQCiAJ4AMwAyAJwAL8ARwAcABQAEAP8BAABZAAAAFQATAAAQcmFkY29tLndlYmV4LmNvbQALAAIBAAAKAAgABgAZABgAFwAjAAAADQAiACAGAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMBATN0AAA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":3,"flow_packet_id":4,"flow_first_seen":1444570628117,"flow_last_seen":1444570628122,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0380{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAThAABAGteRARGlnCggAAQG7oYej1wrDXCj2IVAQ\/\/9X+QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2561{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":1658,"pkt":"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","pkt_caplen":1658,"pkt_type":2048,"pkt_ipoffset":14}
+1112{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0509{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":146,"pkt":"ABoRAAACABoRAAABCABFAACEAUBAABAGtYBARGlnCggAAQG7oYZs7kqckxG2SFAY\/\/+ufAAAFgMDAFECAABNAwNWGmYKL2EFknJPvXFykCSHotly4la6oG496nIi7KRcKSCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQAUAwMAAQE=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1444570628113,"flow_last_seen":1444570628514,"flow_tot_l4_data_len":459,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0379{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCqhAAEAGfHQKCAABQERpZ6GGAbuTEbZIbO5K+FAQOQgelgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpAUFAABAGtVpARGlnCggAAQG7oYej1wrDXCj2IVAY\/\/9V4wAAFgMDAFECAABNAwNWGmYKzk9E9QTUrFeH5Hw2eqdwlTnoxi20+pBaUP1saiCiEgrZvpHjzJYNIqBz8GV5Z5nEiB2\/9li16SQKz1NTSAAEAAAF\/wEAAQAUAwMAAQEWAwMAIFcfE72a+QYqy4KnB7ssdgEQPAH15UqMjQbvXvYfEwJV","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0792{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":3,"flow_packet_id":6,"flow_first_seen":1444570628117,"flow_last_seen":1444570628565,"flow_tot_l4_data_len":496,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":82,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1.2","client_requested_server_name":"radcom.webex.com","ja3":"f9010d8c34749bdf7659b52227e6f91b","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0433{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNAUJAABAGtbVARGlnCggAAQG7oYZs7kr4kxG2SFAY\/\/+PgAAAFgMDACAy73ppu2XOX3ICuy8hyAfMVby0BzvjSQkSvagk3Ak6Dg==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoSv9AAEAGPB0KCAABQERpZ6GHAbtcKPYho9cLRFAQPLgawAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCqlAAEAGfHMKCAABQERpZ6GGAbuTEbZIbO5LHVAQOQgecQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTSwBAAEAGO\/EKCAABQERpZ6GHAbtcKPYho9cLRFAYPLhETgAAFAMDAAEBFgMDACANe7e9z11ZOefijOq+b0yUCrnlOkCeUkjsqE+ONEnWiA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAUNAABAGtdlARGlnCggAAQG7oYej1wtEXCj2TFAQ\/\/9XTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTCqpAAEAGfEcKCAABQERpZ6GGAbuTEbZIbO5LHVAYOQhTdwAAFAMDAAEBFgMDACDsrVn+klk2PAbR1UMB7W8XzTSyzCFQLnlG0me9k09RdA==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570628,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAURAABAGtdhARGlnCggAAQG7oYZs7ksdkxG2c1AQ\/\/9XTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1444570630272,"flow_last_seen":1444570630272,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"185.63.147.10","src_port":54651,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570630,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0ymtAAEAGS1oKhc4vuT+TCtV7Abs2TX647AAfvYARAZp5QwAAAQEICgBMwJ1XHSbf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570630,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWBAABAGRHK5P5MKCoXOLwG71XvsAB+9Nk1+uVAQ\/\/\/y2gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570630,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWFAABAGRHG5P5MKCoXOLwG71XvsAB+9Nk1+uVAR\/\/\/y2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1444570631058,"flow_last_seen":1444570631058,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"107.20.242.44","src_port":59447,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0G+BAAEAG6O4Khc4vaxTyLOg3Abv3v7ExKrw8QIARAiEILgAAAQEICgBMwOxXHSRB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWRAABAGM3drFPIsCoXOLwG76DcqvDxA97+xMlAQ\/\/9\/\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWVAABAGM3ZrFPIsCoXOLwG76DcqvDxA97+xMlAR\/\/9\/\/AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1444570631722,"flow_last_seen":1444570631722,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA87rhAAEAGmE8KCAABQERpZ6GKAbt6Ji+WAAAAAKACOQhMyAAAAgQFtAQCCAoATMEuAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWZAABAGtbZARGlnCggAAQG7oYqF2dBpeiYvl1AS\/\/9Y2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7rlAAEAGmGIKCAABQERpZ6GKAbt6Ji+XhdnQalAQOQgf0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn7rpAAEAGmCIKCAABQERpZ6GKAbt6Ji+XhdnQalAYOQgODwAAFgMBADoBAAA2AwHgmz2uanfCUjnykbM2Mv9FAODhfxJmAjR5YaebpjX1JgAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":6,"flow_packet_id":4,"flow_first_seen":1444570631722,"flow_last_seen":1444570631731,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570631,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWdAABAGtbVARGlnCggAAQG7oYqF2dBqeiYv1lAQ\/\/9YmgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2218{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7rtAAEAGmGAKCAABQERpZ6GKAbt6Ji\/WhdnVulAQP8ATigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3854{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":2633,"pkt":"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","pkt_caplen":2633,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":6,"flow_packet_id":8,"flow_first_seen":1444570631722,"flow_last_seen":1444570632251,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":6,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7rxAAEAGmF8KCAABQERpZ6GKAbt6Ji\/WhdnfzVAQUJj4ngAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_id":6,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":6,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWpAABAGtbJARGlnCggAAQG7oYqF2d\/NeiYxHFAQ\/\/9H8QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1444570632436,"flow_last_seen":1444570632436,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8E6FAAEAGB\/MKCAABFyz987+YAbs3etLXAAAAAKACOQhiaAAAAgQFtAQCCAoATMF2AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWtAABAGSj0XLP3zCggAAQG7v5jIhS0oN3rS2FAS\/\/\/PVQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoE6JAAEAGCAYKCAABFyz987+YAbs3etLYyIUtKVAQOQiWTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnE6NAAEAGB8YKCAABFyz987+YAbs3etLYyIUtKVAYOQiFHgAAFgMBADoBAAA2AwGEmq+NZP+kc3ErHq1IRgxSv+RZnIPy+ZyIImU+XVBptwAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0719{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1444570632436,"flow_last_seen":1444570632470,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAWxAABAGSjwXLP3zCggAAQG7v5jIhS0pN3rTF1AQ\/\/\/PFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":6,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAW1AABAGtXRARGlnCggAAQG7oYqF2d\/NeiYxHFAY\/\/92owAAFAMBAAEBFgMBADD9PmnvW3yJRGDCtXk88uGURezbwFFzyI2PxxOI3cMS57iKf8\/Uw3einH9SeqEXnkY=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+4276{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":2957,"pkt":"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","pkt_caplen":2957,"pkt_type":2048,"pkt_ipoffset":14}
+1566{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1444570632436,"flow_last_seen":1444570632591,"flow_tot_l4_data_len":3106,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2923,"flow_avg_l4_data_len":517,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"www.webex.com.au,www.webex.ca,www.webex.de,www.webex.com.hk,www.webex.co.in,www.webex.co.it,www.webex.co.jp,www.webex.com.mx,www.webex.co.uk,m.webex.com,signup.webex.com,signup.webex.co.uk,signup.webex.de,mytrial.webex.com,mytrial.webex.com.mx,mytrial.webex.co.in,mytrial.webex.com.au,mytrial.webex.co.jp,support.webex.com,howdoi.webex.com,kb.webex.com,myresources.webex.com,invoices.webex.com,try.webex.com,buyonline.webex.com,buyonline.webex.de,buyonline.webex.co.uk,tempbol.webex.com,tempsupport.webex.com,www.webex.com,webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"714ac86d50db68420429ca897688f5f3","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=GeoTrust, Inc., CN=GeoTrust SSL CA","issuerDN":"C=US, ST=California, L=San Jose, O=Cisco Systems, OU=IT, CN=www.webex.com","fingerprint":"EE:CE:24:B7:67:4D:F0:3F:16:80:F8:DC:E3:53:45:5F:3E:41:25:CD"}}
+1108{"flow_id":6,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":590,"pkt":"ABoRAAACABoRAAABCABFAAJA7r5AAEAGlkUKCAABQERpZ6GKAbt6JjEchdngCFAQUJgT1wAAFwMBACBH\/1+4ssP5+r51KHoVlXmGpHPOXLNFe7ZVKdpfEkx8jxcDAQPghB7AHD4xu8ZetThKlFRnvqmplDEr11sv6gYnz9qjgq3dJjSM7RNpvbBrH0Nzfe67METwiZy0iTxD4QLgGHKmVAaddH6YdM5gElDiZD4SLJFZUuLjAKFacvU115VMsETKBJWkWaUd8sTg8686+hrMEqv1r65DGTFztVOdGNrfhbGwkRrF6j6hEVvedoU88QtrIwx1MobLlb0pj1qo\/Lbq1xUQ9hGY9l8wp4AM\/5KTsAhFGmm+9PSqM5t6J0VghK9SqBIC2PPVZdhjZWVTW\/0ZYb0K2exYkTCPtefugNGyls7zqQMrqi+OMLC+STkfN0Mf23LPHCIEagt6Od\/7TYM6TojeonOEZs5GjNftM4H8mvn0tPEbUUqTl0YhTCRHmnojAWsquYWV0CC3WbslLhBn87PKf1RIjhs6PEKo4TMsRKCEc6YzqyeaQ9x09FzuAosWemPanxyw0HR9fjfQ7L+A3OINGFNvoWE9p+5X5oSI0qCLmoHspcRmVjxM5xDYXze5XoFrJNuM6u3cYQimqJAqNTcVL\/wJh2tIbre42JJ2Rjp79tAaVQbzwrHJHG8pOma7icNf7k\/vOZaOpxo\/2rSuEg4FPyhv\/H8gu+JW8eWZz5hfYjNHYokY\/B3UJaAqnrNSSW9rrha+1xSpOBFUY0w=","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":6,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAW9AABAGta1ARGlnCggAAQG7oYqF2eAIeiYzNFAQ\/\/9FngAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1051{"flow_id":6,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":552,"pkt":"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","pkt_caplen":552,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoE6RAAEAGCAQKCAABFyz987+YAbs3etMXyIU4gFAQT2F0XwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAXFAABAGSjcXLP3zCggAAQG7v5jIhTiAN3rUXVAQ\/\/\/CegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":288,"pkt":"ABoRAAACABoRAAABCABFAAESAXJAABAGSUwXLP3zCggAAQG7v5jIhTiAN3rUXVAY\/\/+uNAAAFgMBAKoEAACmAAAcIACg\/5o9lNAmsXn\/5rGN4d3vFSaiCYEsd0hyG6WcG6ZfMNyTYECTo+q\/iGRtefwO0uoU\/LlWOkAEzUNUSxsaspZ2rBkOwwKvAxUxn3dozCkMekS2N2dCBgKC3LFDzqHKElw4nTqINzcgEVAwH63q\/ihN57eGSf5pJvrU45ULYh60P9hBSDRYiwt+no09OSeqalzwebumF8UtpEccNfFkvoSRhRQDAQABARYDAQAw1dnAOvNaCxNuG1cfh8mCzP\/hBZB8sP9yrrk+2q9HPBtdPFBWKMqCmBOMcSscWPFY","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0912{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":448,"pkt":"ABoRAAACABoRAAABCABFAAGyE6ZAAEAGBngKCAABFyz987+YAbs3etRdyIU5alAYZg80BwAAFwMBACBxWD53Zj93gjKQlE6ziBsrn9OmmOAPBlF909b9tfWsLxcDAQFg+GPgFA6SIoNaj25JyUmVdBUA+cujcpc3ZD8aK8oX77uPH6eCwfKytVlfbsfvBjNeyjOSFK+OcyADM6ZrfQVxLefI0PXLnhQR98i6YFfbAERTGqaXoy5UAie0Bk7E4Bqocuzl43qWoOj+GMkvhSmL+t0cA7JMROvP4shTzopIs8P6EZGo0Bwr7h+vOqmOXDd7shYIzQwnrW0y8D\/KO9MZCH4QduDcCKAnhEv7Evr2czO9AfejoHf0BarSMi8CdV25TRelXbba90LrVl98OeIX68kTStZcpsXpto5ATCiYfRozOw0l8Ng5iO1Eb2O50ZjWgnraJTvn9nZWEwjjWdpYEQOCk2kwhd6m8RifkmJihpQLKs1P0F8GgaWucxgYoJYTPEwr95NigQ8RwOLy+f1FDZHkj+W9nHbdu61LDRFsszZPrPYICCJnn6zdO8iTuNpR+jLLoWcWB\/LP3OIHaEbPfw==","pkt_caplen":448,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570632,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAXNAABAGSjUXLP3zCggAAQG7v5jIhTlqN3rV51AQ\/\/\/ABgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1069{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":560,"pkt":"ABoRAAACABoRAAABCABFAAIiAXdAABAGSDcXLP3zCggAAQG7v5jIhTlqN3rV51AY\/\/9sYwAAFwMBAdBr6rILLXSFfLg2xmcpp7IzjJDTPMXzdMKTosQVEQmd\/NFjPQ1znLompWH0SbWBVqguYeRqgYBlLJDr3tKAHftNbqlL1TEL7I5ZOaJboZ3flnha2DT2kZCvC40+JCvHZ96tdi4z7uHrb00aqlbZ2zCfdV2cmlPpxVzTjfMRLbdS6on04jNn\/ItcWbN0OEGtifIJ+tXSTg2GCfeyHT9p8mJv7osbIyon4jClJrZ\/qLYu2c5e6lKxDhQyetNN0IO\/tQ6GAnSpzUiUPMbb0\/rKdtDFoqgU1gB7IpWDe0iMGmFtFpoklWekWY3QllPKp1PNOP1edC0+GG9YeXTyBA\/03Oh8QBf4Y+PxScTe0HKoR0ivtezQkVoHn61lY+na6E092GzZVlfDp5XdmhUKToC9vcNKWuFOdILwYY1PQgXTNU4zkdW+\/8VSpxdux626mbKN23DPSjKheShbpaOotO0Ftm6rB6\/EALB2Q2kks0SK3KuoRYbRbqQauFGEvzX6V6k3YoRQ5EIZwW6UOBcmAqTJicciQWaA7f4XHbTqalPo97knYeYd26wFwPqRjQTH9Gd3EEqkG9i9uE1U4gze1BDS+uRRlo1SBbV137uDSdiTgOQUXBUDAQAgwS\/Rg9gFfgiFf+h0mxtWS3MfWKg4wYwBTN8NPs0oChM=","pkt_caplen":560,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoE6dAAEAGCAEKCAABFyz987+YAbs3etXnyIU7ZFAUfL1BSwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1444570633357,"flow_last_seen":1444570633357,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA87DBAAEAGmtcKCAABQERpZ6GOAbtaKC3iAAAAAKACOQht0gAAAgQFtAQCCAoATMHSAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAXpAABAGtaJARGlnCggAAQG7oY6l19IdWigt41AS\/\/9Y1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7DFAAEAGmuoKCAABQERpZ6GOAbtaKC3jpdfSHlAQOQgfzQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn7DJAAEAGmqoKCAABQERpZ6GOAbtaKC3jpdfSHlAYOQhBGAAAFgMBADoBAAA2AwHTw\/bn8phv0cUj5hxDCEb0N0sEPfC+Zz7P154TmGT2KQAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":8,"flow_packet_id":4,"flow_first_seen":1444570633357,"flow_last_seen":1444570633362,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAXtAABAGtaFARGlnCggAAQG7oY6l19IeWiguIlAQ\/\/9YlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2218{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7DNAAEAGmugKCAABQERpZ6GOAbtaKC4ipdfXblAQP8AThgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3854{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":2633,"pkt":"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","pkt_caplen":2633,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":8,"flow_packet_id":8,"flow_first_seen":1444570633357,"flow_last_seen":1444570633811,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0379{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo7DRAAEAGmucKCAABQERpZ6GOAbtaKC4ipdfhgVAQUJj4mgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":380,"pkt":"ABoRAAACABoRAAABCABFAAFu7DVAAEAGmaAKCAABQERpZ6GOAbtaKC4ipdfhgVAYUJgTNwAAFgMBAQYQAAECAQB9e7+NQHEVjddpWUvPW6gV6\/uT\/ulXG5JxuO2\/mzmtXH4zuQRw4iJCJPU3VPj6u38aPmB4Dsrc2Qs7ct0BxP7VNOFNHbm4pP4m\/3dz2Pjv9y\/W0h7QlT85w8QCL34iEAdymlHA5KlHcdrW+I+vmDbGdQmyygBMVJCS\/bCmSL7JoPdVIpFgDVVF+4lbc3He9yu65EhIhdjxOIS8ikJ9hxIMoSUUgeXpqoEMVJYMxCSBnDrePp9ACWlVgT9pI70aFkz+oJ9T\/isvSvlMITHn5IT78zWHA0bxvsyWLreoOZ9\/CzO5bs4+NWuoDSobztYVtDo3kFpJzWS5Vqe1lXyKfjipFAMBAAEBFgMBADCzHuR\/K+4uIP\/YCZDD3LbGmMwrUaEgFCaL0QLOypFC3IeRFhoJZMkn2m5kv4Bl\/K8=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAX5AABAGtZ5ARGlnCggAAQG7oY6l1+GBWigvaFAQ\/\/9H7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570634,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAX9AABAGtWJARGlnCggAAQG7oY6l1+GBWigvaFAY\/\/+j2gAAFAMBAAEBFgMBADDroF4qYP0Eb4y2au1\/mUKGmfDkasDlia2JhDi5pJtups0jHTP1rGqdG5vmc6tuyL0=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1115{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570634,"pkt_len":590,"pkt":"ABoRAAACABoRAAABCABFAAJA7DZAAEAGmM0KCAABQERpZ6GOAbtaKC9opdfhvFAQUJix4QAAFwMBACC2Gf98Lp3bUwIlav73r8\/RI8c9Dn9LTEAK7H9AKpnY2hcDAQIQQu0+BOhGMCHr6u35CSjzcixsV7Gd1f+U7zb+kRVo\/VUdxUFXkCuvjf38HXZG0MCUGizOrUDSjMjEmJlwX\/YdPx3iJqrloL3xFqpC1\/mG6wsgfWsOC7O9Uhxu7fogAPGhGmU79Evgh4Sae4yBGszAUYTMtJOxgVWijoO32g2Soco8\/NB8XFRGVMkkaXy6vQ8kw1wfIX7BzZBf1N6ccMV\/FAMko\/a+1VvZEfQrjlcMNUDOw3OqHCJAyksuO8Va4jBI3k9DZTQ2FV\/YTiH+7ZMZFJww6cTNH9CEUVRpXJ4WpqfVvV7fOwbb0qDBgpJt+HLSOSN8sI2DUcBsYvXP8DvDxVZKsHRzSbH0+i2EpYHbd9KWGTktCDcoADim\/yzZvjqoCzKMkaZrCcRF+zcVI\/WMh7Ruj17CNaxZHdV0LQZnoiQT6hDC+gsxli3OnOfjuvgXxg5XDtlNKXQgvieOTTUrsu8pdXHmVJ28P2dOz2ANpVJONCUcqtRIwr2Zj0XSbIYiWDwtKcClS\/3iYfp5AbMbNdfxzmLKdYKuvcPE\/sHGbBqWMP0EbQbsipOM\/Q76ik\/J0t\/9NAQy0UNk0saRvWTKcC8ai93rl1oWKsiCHL8\/12BXybpctrzVVshMoML\/Rd009EnsSl+1yWVrmBFedfo=","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":8,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570634,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAYBAABAGtZxARGlnCggAAQG7oY6l1+G8WigxgFAQ\/\/9FmgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0429{"flow_id":8,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570634,"pkt_len":88,"pkt":"ABoRAAACABoRAAABCABFAABK7DdAAEAGmsIKCAABQERpZ6GOAbtaKDGApdfhvFAYUJhLJQAA6M8TR5XszWO89LtX48bicE\/9oPFdvfJa9CRPtEy1N2EC0A==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1444570636151,"flow_last_seen":1444570636151,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41726,"dst_port":443,"l4_proto":"tcp"}
+0407{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8tbVAAEAGMwwKCAABch3V1KL+AbsYGndcAAAAAKACOQjFmAAAAgQFtAQCCAoATMLpAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAY1AABAGF0lyHdXUCggAAQG7ov7n5YijGBp3XVAS\/\/+5HQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAotbZAAEAGMx8KCAABch3V1KL+AbsYGndd5+WIpFAQOQiAFgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1444570636155,"flow_last_seen":1444570636155,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8NxlAAEAGu0sKCAABch3MMcm+AbvkVPXwAAAAAKACOQhdrAAAAgQFtAQCCAoATMLpAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAY5AABAGIOtyHcwxCggAAQG7yb4bqwoP5FT18VAS\/\/+cAAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABntbdAAEAGMt8KCAABch3V1KL+AbsYGndd5+WIpFAYOQhDcwAAFgMBADoBAAA2AwEixpBV3K1aYKpnKzRaOLYWz3kxtW8gINw5Lf9cpQ2h2AAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":9,"flow_packet_id":4,"flow_first_seen":1444570636151,"flow_last_seen":1444570636157,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41726,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0381{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAY9AABAGF0dyHdXUCggAAQG7ov7n5YikGBp3nFAQ\/\/+43wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNxpAAEAGu14KCAABch3MMcm+AbvkVPXxG6sKEFAQOQhi+QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnNxtAAEAGux4KCAABch3MMcm+AbvkVPXxG6sKEFAYOQjpBAAAFgMBADoBAAA2AwELSWRUw5u41GvWexySi8w7aRuG0UGhgcOkKRM8ZLYwuAAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1444570636155,"flow_last_seen":1444570636159,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZBAABAGIOlyHcwxCggAAQG7yb4bqwoQ5FT2MFAQ\/\/+bwgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1444570636160,"flow_last_seen":1444570636160,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA80GxAAEAGr+EKCAAB0cXen7mKAbt7nBKGAAAAAKACOQhH7AAAAgQFtAQCCAoATMLqAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZFAABAGrtHRxd6fCggAAQG7uYqEY+15e5wSh1AS\/\/86HgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0G1AAEAGr\/QKCAAB0cXen7mKAbt7nBKHhGPtelAQOQgBFwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn0G5AAEAGr7QKCAAB0cXen7mKAbt7nBKHhGPtelAYOQh2yQAAFgMBADoBAAA2AwENSlEe7+NgWQr9TJ\/2WZpS5a6sUQSaq2ncdIKzDktEmAAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":11,"flow_packet_id":4,"flow_first_seen":1444570636160,"flow_last_seen":1444570636164,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZJAABAGrtDRxd6fCggAAQG7uYqEY+16e5wSxlAQ\/\/854AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1444570636170,"flow_last_seen":1444570636170,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8c99AAEAGAvcKCAABQER5meEvAbvnI7E0AAAAAKACOQgMmAAAAgQFtAQCCAoATMLrAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZNAABAGpVdARHmZCggAAQG74S8Y3E7L5yOxNVAS\/\/8JAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoc+BAAEAGAwoKCAABQER5meEvAbvnI7E1GNxOzFAQOQjP+QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnc+FAAEAGAsoKCAABQER5meEvAbvnI7E1GNxOzFAYOQg\/MQAAFgMBADoBAAA2AwHlQjeb\/eKZHKuppjWfos5yg+nhloBcE1OwdwWUSYyZagAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1444570636170,"flow_last_seen":1444570636176,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZRAABAGpVZARHmZCggAAQG74S8Y3E7M5yOxdFAQ\/\/8IwwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1444570636180,"flow_last_seen":1444570636180,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8nw9AAEAGbDMKCAABPm3nA7L2AbufQl3jAAAAAKACOQhqbwAAAgQFtAQCCAoATMLsAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZVAABAGOcI+becDCggAAQG7svZgvaIcn0Jd5FAS\/\/\/LpgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAonxBAAEAGbEYKCAABPm3nA7L2AbufQl3kYL2iHVAQOQiSnwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnnxFAAEAGbAYKCAABPm3nA7L2AbufQl3kYL2iHVAYOQiqgAAAFgMBADoBAAA2AwG1npMJl\/ayeEKp148YQXJQu08Kp5pJKEAcdvXjyY7AEAAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1444570636180,"flow_last_seen":1444570636185,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZZAABAGOcE+becDCggAAQG7svZgvaIdn0JeI1AQ\/\/\/LaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1444570636248,"flow_last_seen":1444570636248,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8NIdAAEAGU1wKCAABQERojK3MAbt5hvZ2AAAAAKACOQh5XQAAAgQFtAQCCAoATMLxAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZdAABAGtmBARGiMCggAAQG7rcyGeQmJeYb2d1AS\/\/9NcQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1444570636252,"flow_last_seen":1444570636252,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA80SxAAEAGIt4KCAABch3Ki7gMAbtSShPdAAAAAKACOQjlGgAAAgQFtAQCCAoATMLxAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZhAABAGIodyHcqLCggAAQG7uAyttewiUkoT3lAS\/\/+vWAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1444570636255,"flow_last_seen":1444570636255,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA870JAAEAGjzEKCAABrfMETM36AbsKei2zAAAAAKACOQiHkAAAAgQFtAQCCAoATMLxAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZlAABAGrO+t8wRMCggAAQG7zfr1hdJMCnottFAS\/\/8j1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1444570636259,"flow_last_seen":1444570636259,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8u9ZAAEAGuzQKCAABQER5ZMv7AbtwVXkkAAAAAKACOQjQ2AAAAgQFtAQCCAoATMLyAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZpAABAGpYVARHlkCggAAQG7y\/uPqobbcFV5JVAS\/\/8eagAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1444570636264,"flow_last_seen":1444570636264,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8YelAAEAGFSMKCAABQER5Y9qhAbtb96MaAAAAAKACOQismgAAAgQFtAQCCAoATMLzAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZtAABAGpYVARHljCggAAQG72qGkCFzlW\/ejG1AS\/\/8PxQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNIhAAEAGU28KCAABQERojK3MAbt5hvZ3hnkJilAQOQgUagAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnNIlAAEAGUy8KCAABQERojK3MAbt5hvZ3hnkJilAYOQhZ6QAAFgMBADoBAAA2AwFZAOdrf318d9DQoA0D3C8cGGy1yScsdSsQfqgP8YHJWQAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":14,"flow_packet_id":4,"flow_first_seen":1444570636248,"flow_last_seen":1444570636268,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZxAABAGtltARGiMCggAAQG7rcyGeQmKeYb2tlAQ\/\/9NMwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0S1AAEAGIvEKCAABch3Ki7gMAbtSShPerbXsI1AQOQh2UQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn0S5AAEAGIrEKCAABch3Ki7gMAbtSShPerbXsI1AYOQjEKQAAFgMBADoBAAA2AwEgf\/e\/jgX0597KeqXA4hkOqtuJMPxy38wcZQGqQdMmagAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1444570636252,"flow_last_seen":1444570636269,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZ1AABAGIoJyHcqLCggAAQG7uAyttewjUkoUHVAQ\/\/+vGgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo70NAAEAGj0QKCAABrfMETM36AbsKei209YXSTVAQOQjqzAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn70RAAEAGjwQKCAABrfMETM36AbsKei209YXSTVAYOQhXBgAAFgMBADoBAAA2AwEbjnmamhrG0ilv8MM2B7NxSQPfoK5gN5dT14i2jCOS+AAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1444570636255,"flow_last_seen":1444570636270,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZ5AABAGrOqt8wRMCggAAQG7zfr1hdJNCnot81AQ\/\/8jlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAou9dAAEAGu0cKCAABQER5ZMv7AbtwVXklj6qG3FAQOQjlYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1444570636270,"flow_last_seen":1444570636270,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA879dAAEAGBrMKCAABch3IC7rhAbtuYS0jAAAAAKACOQivZQAAAgQFtAQCCAoATML0AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAZ9AABAGJQByHcgLCggAAQG7uuGRntLcbmEtJFAS\/\/+vAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnu9hAAEAGuwcKCAABQER5ZMv7AbtwVXklj6qG3FAYOQirFAAAFgMBADoBAAA2AwHYELTmAdFk47j\/kG3RMIzBgWabbigjj\/WcrWQ+O8XfAwAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1444570636259,"flow_last_seen":1444570636273,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaBAABAGpX9ARHlkCggAAQG7y\/uPqobccFV5ZFAQ\/\/8eLAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYepAAEAGFTYKCAABQER5Y9qhAbtb96MbpAhc5lAQOQjWvQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnYetAAEAGFPYKCAABQER5Y9qhAbtb96MbpAhc5lAYOQh9SQAAFgMBADoBAAA2AwFui4ALd8hCzC1Hn0XZp9IbNctVu8L5+XzvOp52wmP4PgAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1444570636264,"flow_last_seen":1444570636274,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaFAABAGpX9ARHljCggAAQG72qGkCFzmW\/ejWlAQ\/\/8PhwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo79hAAEAGBsYKCAABch3IC7rhAbtuYS0kkZ7S3VAQOQh1\/AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn79lAAEAGBoYKCAABch3IC7rhAbtuYS0kkZ7S3VAYOQiWfgAAFgMBADoBAAA2AwGYeAXD1rCaFxll3KHQwiDcn3jmpgdAsGqZOECdkGYcowAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":19,"flow_packet_id":4,"flow_first_seen":1444570636270,"flow_last_seen":1444570636276,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaJAABAGJP1yHcgLCggAAQG7uuGRntLdbmEtY1AQ\/\/+uxQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1444570636359,"flow_last_seen":1444570636359,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA86IFAAEAGnowKCAABQERpYciqAbsEZyp7AAAAAKACOQievAAAAgQFtAQCCAoATML6AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaNAABAGtX9ARGlhCggAAQG7yKr7mNWEBGcqfFAS\/\/8xvgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1444570636364,"flow_last_seen":1444570636364,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8Y+FAAEAGIywKCAABQERpYpEJAbvtraEaAAAAAKACOQh2dQAAAgQFtAQCCAoATML7AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaRAABAGtX1ARGliCggAAQG7kQkSUl7l7a2hG1AS\/\/9pXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo6IJAAEAGnp8KCAABQERpYciqAbsEZyp8+5jVhVAQOQj4tgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn6INAAEAGnl8KCAABQERpYciqAbsEZyp8+5jVhVAYOQiOAwAAFgMBADoBAAA2AwG0+nLinPAGG4t2PmApyj1cBSRGozWXopqiBuxsT+LyqQAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1444570636359,"flow_last_seen":1444570636368,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaVAABAGtX1ARGlhCggAAQG7yKr7mNWFBGcqu1AQ\/\/8xgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY+JAAEAGIz8KCAABQERpYpEJAbvtraEbElJe5lAQOQgwVwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnY+NAAEAGIv8KCAABQERpYpEJAbvtraEbElJe5lAYOQjiHgAAFgMBADoBAAA2AwF3tBEHB6guyNBNlJmUpeM5u9lxXWyFQhCvqu17Ld8y\/QAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1444570636364,"flow_last_seen":1444570636369,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAaZAABAGtXtARGliCggAAQG7kQkSUl7m7a2hWlAQ\/\/9pIAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1444570636387,"flow_last_seen":1444570636387,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA82lhAAEAGrK8KCAABQERpZ6GqAbsG3RlZAAAAAKACOQjUWwAAAgQFtAQCCAoATMMBAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAadAABAGtXVARGlnCggAAQG7oar5IuamBt0ZWlAS\/\/9YuAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2llAAEAGrMIKCAABQERpZ6GqAbsG3Rla+SLmp1AQOQgfsQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn2lpAAEAGrIIKCAABQERpZ6GqAbsG3Rla+SLmp1AYOQjTBwAAFgMBADoBAAA2AwHQxD6jP9mnXAR\/gJlsx5rnkfAjqPqPevvcaVvn\/9cADgAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1444570636387,"flow_last_seen":1444570636397,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAahAABAGtXRARGlnCggAAQG7oar5IuanBt0ZmVAQ\/\/9YegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2249{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAonxJAAEAGbEQKCAABPm3nA7L2AbufQl4jYL2ngVAQQLCFVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3785{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":2581,"pkt":"ABoRAAACABoRAAABCABFAAoHAapAABAGL84+becDCggAAQG7svZgvaeBn0JeI1AY\/\/9AIAAABAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ\/XxrcgxiV0i6CqqpkKzj\/i5Vbext0uz\/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6\/WhkcIzSdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn\/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4\/VBEnkjWNHiDxpg8v+R70rfk\/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10\/NIeWiu5T6CUVAgMBAAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH\/MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB\/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUAA4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5KlCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZtOxFNfeKW\/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3\/DgAAAA==","pkt_caplen":2581,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":13,"flow_packet_id":8,"flow_first_seen":1444570636180,"flow_last_seen":1444570636471,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAonxNAAEAGbEMKCAABPm3nA7L2AbufQl4jYL2xYFAQTvhtLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAatAABAGOaw+becDCggAAQG7svZgvbFgn0JfaVAQ\/\/+63wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2220{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":332,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":1414,"pkt":"ABoRAAACABoRAAABCABFAAV4AaxAABAGsPtARGiMCggAAQG7rcyGeQmKeYb2tlAY\/\/89lwAAFgMBD14CAABNAwFWGmYSAMIZ5g2r8Ta\/JoVG+bZt+QoLEo+D1Ut5Gr7FfiAVoW6tqVFw74l8dBfaZE0t1BaYdz1NzzGC7+ClOVhTSAA1AAAF\/wEAAQALAA8FAA8CAATpMIIE5TCCA82gAwIBAgIQKXSJqdQeSb5h94FpRuYh8zANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MDQxMDAwMDAwMFoXDTE4MDQxMDIzNTk1OVowdzELMAkGA1UEBhMCdXMxEzARBgNVBAgMCkNhbGlmb3JuaWExETAPBgNVBAcMCFNhbiBKb3NlMRwwGgYDVQQKDBNDaXNjbyBTeXN0ZW1zLCBJbmMuMQwwCgYDVQQLDANDU0cxFDASBgNVBAMMCyoud2ViZXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXjIYUvDCGFnLF6CX7BhvJlmnmrg0KiZFcDP6TyJs2s+n7Hjqpb8O374x26knzLrTkrkpNBVvbi6eY8X6lmrWlqvlgEoyMmslNbZoAjUy1C9HNIMI2F1bLGI\/pKRUGbpk5wvAv6SKOf+cKi3mis7U2sccUb8cFxKTVpp62iK2uOzkFa4zF1i4hm\/NKjJWJVuj\/D8tQpd0PSuU5wWY7G1x\/5UpvvDV7KS7Tsmn3ib\/8gstBL+PLvKZHJ8YWc8u02oGZQoWD64APslwdmLLyDqq5USERl2bc761RHbBhnmKf3IpyvGqgfCFbQ7hfb+sniY0O+KQiBpaJI1bt4iiHQ1YQIDAQABo4IBZDCCAWAwFgYDVR0RBA8wDYILKi53ZWJleC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGUGA1UdIAReMFwwWgYKYIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAU0XVgHR8KQTLFFzVVA7s1Rlqj4+dm5q+OB5OfJMqYeX\/hnGHVeD8z9\/9EdKsauBRbbFpJk38PC3aGoy0iL9v8CA4V6o0qYzEfedbF\/p\/UuvtChO8CktAaqN64hPdToCJEy3gqyB\/Hv7VVuKXUBogujzn1WBdIyBUlO\/hClSnOD8Qq1So\/AzCrw+\/ChOOV7DI631hsLE1M73UmQqxi7Cbu5R5TsXH6v6s\/7CAPBhVtuxTBBcBuPtA6Pd2Q8vOf6ByuErVmWAV\/tOLfjGuqPuM2JoxzR1iH82zcoIcxOzmtUIYsiTuUSCi\/AsNsm265BOW9oeh5kgZU+pE6LkGX9bECAAU8MIIFOA==","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":14,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":333,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNIpAAEAGU20KCAABQERojK3MAbt5hva2hnkO2lAQP8AIIwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAa1AABAGOW8+becDCggAAQG7svZgvbFgn0JfaVAY\/\/+8kAAAFAMBAAEBFgMBADABGZe8ehOSe7gK0FC8QxqAhYLDRh5yPtE2RphosONMTi0lAqbKlg87+MpJfR3JJIE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+5647{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1109{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1444570636160,"flow_last_seen":1444570636701,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+3855{"flow_id":14,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":2633,"pkt":"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","pkt_caplen":2633,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":14,"flow_packet_id":8,"flow_first_seen":1444570636248,"flow_last_seen":1444570636703,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0382{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0G9AAEAGr\/IKCAAB0cXen7mKAbt7nBLGhGP8vVAQTE\/eTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4318{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":2974,"pkt":"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","pkt_caplen":2974,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":14,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNItAAEAGU2wKCAABQERojK3MAbt5hva2hnkY7VAQUJjtNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo70VAAEAGj0IKCAABrfMETM36AbsKei3z9YXdtVAQT9jIVQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1712{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":1041,"pkt":"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","pkt_caplen":1041,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":16,"flow_packet_id":8,"flow_first_seen":1444570636255,"flow_last_seen":1444570636706,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2940,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo70ZAAEAGj0EKCAABrfMETM36AbsKei3z9YXhkFAQZqitqgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1024{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbJAABAGOaU+becDCggAAQG7svZgvbGbn0JhQ1AQ\/\/+4ygAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbNAABAGrq\/Rxd6fCggAAQG7uYqEY\/y9e5wUDFAQ\/\/8pVwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5647{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1444570636170,"flow_last_seen":1444570636773,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0826{"flow_id":14,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"ABoRAAACABoRAAABCABFAAFuNIxAAEAGUiUKCAABQERojK3MAbt5hva2hnkY7VAYUJjxsAAAFgMBAQYQAAECAQCZ6rrS4j7mksPkLANY2EpSpokmY5Lee+lBKCPpOZHfXp1fFLLNPE035x828S0y1EQDc8njA4rf5c3IoOBYAkW4m7x696LVX0ih7Y9CqgDL1B6yna5cRmn4YKD6c4mm38UvSifo5Tbq3QqtilkVc\/cK33qCDjCCDXA+yVGIexfPvbK4k53WTVK8dLRuY0CANraDoA3h61IpLC\/B\/jk\/Rtn1wmsqHWabMvWg5D8GlA+L\/Cu7bVhuv8KWI1WKDYR2icRl9PPlwJXiloUSEnsZFI8uNeVW9rTd0c4rLhiMlN8qWEup34ROCZLfJTafKUhn3VVU\/xejWCs4ig95w71MCUcLFAMBAAEBFgMBADBtORReP+0N+C\/5qD8bapB7MJQN7MZ8HQW6AXEUh6YL1FDSZove7qK9Vb4bbl+fd1M=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":14,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbVAABAGtkJARGiMCggAAQG7rcyGeRjteYb3\/FAQ\/\/88igAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0827{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"ABoRAAACABoRAAABCABFAAFu70dAAEAGjfoKCAABrfMETM36AbsKei3z9YXhkFAYZqi3+AAAFgMBAQYQAAECAQCKYf+wQGVh16cvfGjmi+GjYexIJm3TjXJPQzGPzrUE\/rqhEkIr7YcPINyJlXOCyVqjuVdxcCJ9NitnLXN0JUMUOPpX1k\/+dR5lsOpXrw+iQEqYfMCKPIl51Avar9s6c0b\/ccBZc3E4Xk4W0JBzPouJSIh+s9tpjD3dDUTtfiDyNHb6jRPnnf\/JiQzulWVG1ivFkeLZJoMEcg3Bz5YXkgCst4aBDx\/i+f5wtPnes2p1TvMaH\/2l8EMcbjUPWkrxFuQ5v1XnY4iyKRCXogYzxL6831ZTV5a223WqO1DNFgnRfcEIzkfayoqcHiojx\/Y2TXv22pPHpvT7t457TCsOF\/twFAMBAAEBFgMBADCi6GXiKEfVocs4Smlug8p+Nv1D6I8BZ0cMreVLJb83ihj9gmorDGb0EK3FcaLV+bg=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbZAABAGrNKt8wRMCggAAQG7zfr1heGQCnovOVAQ\/\/8TDQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoc+JAAEAGAwgKCAABQER5meEvAbvnI7F0GNxeD1AQTE+tMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2221{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":1414,"pkt":"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","pkt_caplen":1414,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo6IRAAEAGnp0KCAABQERpYciqAbsEZyq7+5ja1VAQP8DsbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5681{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":3993,"pkt":"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","pkt_caplen":3993,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1444570636364,"flow_last_seen":1444570636827,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+5682{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":3993,"pkt":"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","pkt_caplen":3993,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":22,"flow_packet_id":6,"flow_first_seen":1444570636387,"flow_last_seen":1444570636828,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+3854{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":2633,"pkt":"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","pkt_caplen":2633,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":20,"flow_packet_id":8,"flow_first_seen":1444570636359,"flow_last_seen":1444570636829,"flow_tot_l4_data_len":4182,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0823{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbtAABAGpS9ARHmZCggAAQG74S8Y3F4P5yOyulAQ\/\/\/4OQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY+RAAEAGIz0KCAABQERpYpEJAbvtraFaElJuSVAQTO8MzgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2ltAAEAGrMAKCAABQERpZ6GqAbsG3RmZ+SL2ClAQTO\/8JwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo6IVAAEAGnpwKCAABQERpYciqAbsEZyq7+5jk6FAQUJjRhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAbxAABAGtWZARGlhCggAAQG7yKr7mOToBGcsAVAQ\/\/8g1wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5685{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":3993,"pkt":"ABoRAAACABoRAAABCABFAA+LAb1AABAGlf9ARHlkCggAAQG7y\/uPqobccFV5ZFAY\/\/+KJwAAFgMBD14CAABNAwFWGmYS\/Z\/DgIaC4F3A6vWFfTwKeM+7hxQ\/MLnp7eykmCC0VhtNO44CsjutlOFpXxkFi7ilYsk5xuyo2fo3aKYyQQA1AAAF\/wEAAQALAA8FAA8CAATpMIIE5TCCA82gAwIBAgIQKXSJqdQeSb5h94FpRuYh8zANBgkqhkiG9w0BAQsFADB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MDQxMDAwMDAwMFoXDTE4MDQxMDIzNTk1OVowdzELMAkGA1UEBhMCdXMxEzARBgNVBAgMCkNhbGlmb3JuaWExETAPBgNVBAcMCFNhbiBKb3NlMRwwGgYDVQQKDBNDaXNjbyBTeXN0ZW1zLCBJbmMuMQwwCgYDVQQLDANDU0cxFDASBgNVBAMMCyoud2ViZXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXjIYUvDCGFnLF6CX7BhvJlmnmrg0KiZFcDP6TyJs2s+n7Hjqpb8O374x26knzLrTkrkpNBVvbi6eY8X6lmrWlqvlgEoyMmslNbZoAjUy1C9HNIMI2F1bLGI\/pKRUGbpk5wvAv6SKOf+cKi3mis7U2sccUb8cFxKTVpp62iK2uOzkFa4zF1i4hm\/NKjJWJVuj\/D8tQpd0PSuU5wWY7G1x\/5UpvvDV7KS7Tsmn3ib\/8gstBL+PLvKZHJ8YWc8u02oGZQoWD64APslwdmLLyDqq5USERl2bc761RHbBhnmKf3IpyvGqgfCFbQ7hfb+sniY0O+KQiBpaJI1bt4iiHQ1YQIDAQABo4IBZDCCAWAwFgYDVR0RBA8wDYILKi53ZWJleC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGUGA1UdIAReMFwwWgYKYIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAU0XVgHR8KQTLFFzVVA7s1Rlqj4+dm5q+OB5OfJMqYeX\/hnGHVeD8z9\/9EdKsauBRbbFpJk38PC3aGoy0iL9v8CA4V6o0qYzEfedbF\/p\/UuvtChO8CktAaqN64hPdToCJEy3gqyB\/Hv7VVuKXUBogujzn1WBdIyBUlO\/hClSnOD8Qq1So\/AzCrw+\/ChOOV7DI631hsLE1M73UmQqxi7Cbu5R5TsXH6v6s\/7CAPBhVtuxTBBcBuPtA6Pd2Q8vOf6ByuErVmWAV\/tOLfjGuqPuM2JoxzR1iH82zcoIcxOzmtUIYsiTuUSCi\/AsNsm265BOW9oeh5kgZU+pE6LkGX9bECAAU8MIIFODCCBCCgAwIBAgIQUT+5dDhwtzRAQY0wkwaZ\/zANBgkqhkiG9w0BAQsFADCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVjIENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstgFyhx0LbUXVjnFSlIJluhL2AzxaJ+aQihiw6UwU35VEYJbA3oNL+F5BMm0lncZgQGUWfm893qZJ4Itt4PdWid\/sgN6nFMl6UgfRk\/InSn4vnlW9vf92Tpo2otLgjNBEsPIPMzWlnqEIRoiBAMnF4scaGGTDw5RgDMdtLXO637QYqzus3sBdO9pNevK1T2p7peYyo2qRA4lmUoVlqTObQJUHypqJuIGOmNIrLRM0XWTUP8TL9ba4cYY9Z\/JJV3zADreJk20KQnNDz0jbxZKgRb78oMQw7jW2FUyPfG9D72MUpVKFpd6UiFjdS8W+cRmvvW1Cdj\/JwDNRHxvSz+w9wIDAQABo4IBYzCCAV8wEgYDVR0TAQH\/BAgwBgEB\/wIBADAwBgNVHR8EKTAnMCWgI6Ahhh9odHRwOi8vczEuc3ltY2IuY29tL3BjYTMtZzUuY3JsMA4GA1UdDwEB\/wQEAwIBBjAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wawYDVR0gBGQwYjBgBgpghkgBhvhFAQc2MFIwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vY3BzMCgGCCsGAQUFBwICMBwaGmh0dHA6Ly93d3cuc3ltYXV0aC5jb20vcnBhMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTUzNDAdBgNVHQ4EFgQUX2DPYZBV34RDFIpgKrL1evRDGO8wHwYDVR0jBBgwFoAUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwDQYJKoZIhvcNAQELBQADggEBAF6UVkndji1l9cE2UbYD49qecxnyH1mrWH5sJgUs+oHXXCMXIiw3k\/eG7IXmsKP9H+IyqEVv4dn7ua\/ScKAyQmW\/hP4WKo8\/xabWo5N9Q+l0IZE1KPRj6S7t9\/Vcf0uatSDpCr3gRRAMFJSaXaXjS5HoJJtGQGX0InLNmfiIEfXzf+YzguaoxX7+0AjiJVgIcWjmzaLmFN5OUiQt\/eV5E1PnXi8tTRttQBVSK\/eHiXgSgW7ZTaoteNTCLD0IX4eRnh8OsN4wUmSGiaqdZpwOdgyA8nTYKvi4Os7X1g8RvmurFPW9QaAiY4nxug9vKWNmLT+sjHLF+8fk1A\/yO0+MKccABNQwggTQMIIEOaADAgECAhAlDOjgMGEunyuJ9wVNfPj9MA0GCSqGSIb3DQEBBQUAMF8xCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE3MDUGA1UECxMuQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjExMDgwMDAwMDBaFw0yMTExMDcyMzU5NTlaMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8kCAgpejWeYAyq50s7Ttx8vDxFHLsr4P4pAvlXCKNkhRUn9fGtyDGJXSLoKqqmQrOP+LlVt7G3S7P+j34HV+zvQ9tmYhVhz2ANpNje+ODDYgg9VBPrScpZVIUm5SuPG5\/r9aGRwjNJ2ENjalJL0o\/ocFFN0Ylpe8dw9rPcEnTbe11LVtOWvxV3obD0oiXyrxySZxjl9AYE75C55ADk3Tq1Gf8CuvQ87uCL6zeL7PTXrPL28D2v3XWRMxkdHEDLdCQZIZPZFP6sKlLHj9UESeSNY0eIPGmDy\/5HvSt+T8WVrg6d1NFDwGdz4xQIfuU\/n3O4MwrPXT80h5aK7lPoJRUCAwEAAaOCAZswggGXMA8GA1UdEwEB\/wQFMAMBAf8wMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzMB0GA1UdDgQWBBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzBtBggrBgEFBQcBDARhMF+hXaBbMFkwVzBVFglpbWFnZS9naWYwITAfMAcGBSsOAwIaBBSP5dMahqyNjmvDz4Bq1EgYLHsZLjAlFiNodHRwOi8vbG9nby52ZXJpc2lnbi5jb20vdnNsb2dvLmdpZjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNvbTA+BgNVHSUENzA1BggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMDBglghkgBhvhCBAEGCmCGSAGG+EUBCAEwDQYJKoZIhvcNAQEFBQADgYEAEwLd+OiGAPJa+PggDFmIYgfOzvdO+btZoZjl4TjdTrxmGNOt6xjyDcltPkqUIMM8ur1lVMavRLMQrSxrPqvXB7a4gWPF+V4u5Spnzs0zDCrXiVYDIx+zvug6CFm07EU194pb\/2bPUK\/GbVeNGXi3uaLRV+ofmkuvusmOEn7Gvf8OAAAA","pkt_caplen":3993,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1444570636259,"flow_last_seen":1444570636894,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0824{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAb5AABAGtWNARGliCggAAQG7kQkSUm5J7a2ioFAQ\/\/9YdwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5683{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":3993,"pkt":"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","pkt_caplen":3993,"pkt_type":2048,"pkt_ipoffset":14}
+1106{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1444570636264,"flow_last_seen":1444570636897,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+3441{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":2309,"pkt":"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","pkt_caplen":2309,"pkt_type":2048,"pkt_ipoffset":14}
+0821{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAcFAABAGtVtARGlnCggAAQG7oar5IvYKBt0a31AQ\/\/9H0QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAou9lAAEAGu0UKCAABQER5ZMv7AbtwVXlkj6qWP1AQTO\/B2QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYexAAEAGFTQKCAABQER5Y9qhAbtb96NapAhsSVAQTO+zNAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2247{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAcNAABAGpVxARHlkCggAAQG7y\/uPqpY\/cFV6qlAQ\/\/8NgwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAcRAABAGpVxARHljCggAAQG72qGkCGxJW\/ekoFAQ\/\/\/+3QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNxxAAEAGu1wKCAABch3MMcm+AbvkVPYwG6sPdFAQQLBVrgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3785{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":2581,"pkt":"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","pkt_caplen":2581,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":10,"flow_packet_id":8,"flow_first_seen":1444570636155,"flow_last_seen":1444570636963,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNx1AAEAGu1sKCAABch3MMcm+AbvkVPYwG6sZU1AQTvg9hwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570636,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAcZAABAGILNyHcwxCggAAQG7yb4bqxlT5FT3dlAQ\/\/+LOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":14,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAcdAABAGtfVARGiMCggAAQG7rcyGeRjteYb3\/FAY\/\/+zvQAAFAMBAAEBFgMBADC3m65nfClCD6z07nlTzjGczGW8s2JiH3owBBh2gmYUQXeHzHDXpIDkTOlWCUj+yos=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":14,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNI1AAEAGU2oKCAABQERojK3MAbt5hvf8hnkZKFAQUJjrtgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAchAABAGrl\/Rxd6fCggAAQG7uYqEY\/y9e5wUDFAY\/\/+CwgAAFAMBAAEBFgMBADAX7WeBgwXzLjw32moShyX4hQlXqF+scOUxs+JFJVxrZn8XUwhgXJFXmd3E+uAYsMA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAclAABAGrISt8wRMCggAAQG7zfr1heGQCnovOVAY\/\/\/rTwAAFAMBAAEBFgMBADDAFEil\/VLC22qNJz18eFMJ7RNcpQigtcKirzO9hPnS7xa0\/Cq0oK\/0AxSvNr9rKPg=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAcpAABAGtR1ARGlhCggAAQG7yKr7mOToBGcsAVAY\/\/\/tLQAAFAMBAAEBFgMBADCR6GbLQMrh1oX7wQfMpKCroslq9iU+92X0nL+\/bA\/+x\/uOUaU\/3lZHjGnrd5gvUio=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1024{"flow_id":14,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":14,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoActAABAGtixARGiMCggAAQG7rcyGeRkoeYb51lAQ\/\/86dQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo70hAAEAGjz8KCAABrfMETM36AbsKei859YXhy1AQZqisKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1022{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAcxAABAGrLyt8wRMCggAAQG7zfr1heHLCnoxE1AQ\/\/8Q+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1025{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":528,"pkt":"ABoRAAACABoRAAABCABFAAIC6IdAAEAGnMAKCAABQERpYciqAbsEZywB+5jlI1AYUJi1sgAAFwMBACCCkS81FkocxdI5RBu\/NODmNdxUxHCBLNjmOnSwkXKDehcDAQGwm0NcohKLWl0Vt0bfJCQl0X44Xi0xgR7GqwHmonSRHx\/hWnuwYBG4iR53UmmTVeTFErl8VGn7PFMWsTIBhpyiacfxR6GkFSgmXVaKSZ8RlV9+zXWbIAedppHkZrCx7P1jhuXRs2QAIfTx7aq6yLueVeViltrYetxJ2PKV8S1QGpoOpuu\/dkADjvexXuf3\/lbUHtRVJenvT6rkMAAYVyajlMrfMFkUFblWLsTkjG0VDJvQJv5I4hEny9bP8jfJDvccRMNqx0aDkAup2XFdlqxZSJO79brCwMOIGLKdd7I1dy335h2o3CupcI6Q2UnhNehF2T0ZMC5Nqr3VmRyLavvGmCs5pfWZ5sqc\/cuRs+RCajn1UmazHjF9KsCbIBdMg6VqCAxYgjESJr\/dRGe87qF61duztokQxh3DC3q2f\/ocqa3V8BhThnNJ\/bW40id6JY1q5H45vQpYtIVO0KW\/jffN4DwALYlEhusXCWZl2V4eEb7kHPaxHh5Y\/h8afPF3uXh44tsichZqM4SosDW5VBZdB9vbO7zNWApP0y6NW7TA2+3S4gw4q9IlRGU7IeLIea2U","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAc1AABAGtVVARGlhCggAAQG7yKr7mOUjBGct21AQ\/\/8ewgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAc5AABAGpOFARHmZCggAAQG74S8Y3F4P5yOyulAY\/\/8CQQAAFAMBAAEBFgMBADAZqDTbpkLId\/1fe1W+so9Obuq9qOtL0rrIbNCMgslJbMQFPKSiLM2vkLq\/nbduYo0=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAc9AABAGtRdARGliCggAAQG7kQkSUm5J7a2ioFAY\/\/9pogAAFAMBAAEBFgMBADCa6iS3ojjCW33Vhc1zEIzyw0+YcCFBjwdLECM86n9kqv8q6lQOkXf1BDNZKeUe5rM=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAdBAABAGtRFARGlnCggAAQG7oar5IvYKBt0a31AY\/\/+hqQAAFAMBAAEBFgMBADCdp6mwZkXXosuvMLoM0ZyeGxGW6AztpopJT2GJmFrvuUxsZmarudOc0O4VqM6nMmg=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1022{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAdFAABAGrpHRxd6fCggAAQG7uYqEY\/z4e5wV5lAQ\/\/8nQgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1027{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAdJAABAGpRhARHmZCggAAQG74S8Y3F5K5yO0lFAQ\/\/\/2JAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+4215{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":2896,"pkt":"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","pkt_caplen":2896,"pkt_type":2048,"pkt_ipoffset":14}
+1091{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":576,"pkt":"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","pkt_caplen":576,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAdRAABAGtUhARGlnCggAAQG7oar5IvZFBt0c6VAQ\/\/9FjAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1028{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAdVAABAGtUxARGliCggAAQG7kQkSUm6E7a2kelAQ\/\/9WYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1444570637191,"flow_last_seen":1444570637191,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"172.16.1.75","src_port":64538,"dst_port":5060,"l4_proto":"udp"}
+1243{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570637,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0508{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1444570637191,"flow_last_seen":1444570637191,"flow_tot_l4_data_len":664,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"172.16.1.75","src_port":64538,"dst_port":5060,"l4_proto":"udp","ndpi": {"proto":"SIP","category":"VoIP"}}
+0380{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0S9AAEAGIu8KCAABch3Ki7gMAbtSShQdrbX3PVAQTbZWSgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1818{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":1119,"pkt":"ABoRAAACABoRAAABCABFAARRAdZAABAGHiByHcqLCggAAQG7uAyttfc9UkoUHVAY\/\/\/a\/wAAMIHKMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAyMDA2IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8kCAgpejWeYAyq50s7Ttx8vDxFHLsr4P4pAvlXCKNkhRUn9fGtyDGJXSLoKqqmQrOP+LlVt7G3S7P+j34HV+zvQ9tmYhVhz2ANpNje+ODDYgg9VBPrScpZVIUm5SuPG5\/r9aGRwjNJ2ENjalJL0o\/ocFFN0Ylpe8dw9rPcEnTbe11LVtOWvxV3obD0oiXyrxySZxjl9AYE75C55ADk3Tq1Gf8CuvQ87uCL6zeL7PTXrPL28D2v3XWRMxkdHEDLdCQZIZPZFP6sKlLHj9UESeSNY0eIPGmDy\/5HvSt+T8WVrg6d1NFDwGdz4xQIfuU\/n3O4MwrPXT80h5aK7lPoJRUCAwEAAaOCAZswggGXMA8GA1UdEwEB\/wQFMAMBAf8wMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy5jcmwwDgYDVR0PAQH\/BAQDAgEGMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzMB0GA1UdDgQWBBR\/02Wnwt3su\/AwCfNDOfoCrzMxMzBtBggrBgEFBQcBDARhMF+hXaBbMFkwVzBVFglpbWFnZS9naWYwITAfMAcGBSsOAwIaBBSP5dMahqyNjmvDz4Bq1EgYLHsZLjAlFiNodHRwOi8vbG9nby52ZXJpc2lnbi5jb20vdnNsb2dvLmdpZjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNvbTA+BgNVHSUENzA1BggrBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMDBglghkgBhvhCBAEGCmCGSAGG+EUBCAEwDQYJKoZIhvcNAQEFBQADgYEAEwLd+OiGAPJa+PggDFmIYgfOzvdO+btZoZjl4TjdTrxmGNOt6xjyDcltPkqUIMM8ur1lVMavRLMQrSxrPqvXB7a4gWPF+V4u5Spnzs0zDCrXiVYDIx+zvug6CFm07EU194pb\/2bPUK\/GbVeNGXi3uaLRV+ofmkuvusmOEn7Gvf8OAAAA","pkt_caplen":1119,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":15,"flow_packet_id":8,"flow_first_seen":1444570636252,"flow_last_seen":1444570638198,"flow_tot_l4_data_len":4150,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2862,"flow_avg_l4_data_len":518,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+5646{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":19,"flow_packet_id":6,"flow_first_seen":1444570636270,"flow_last_seen":1444570638199,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0469{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAdhAABAGpQxARHlkCggAAQG7y\/uPqpY\/cFV6qlAY\/\/9k7wAAFAMBAAEBFgMBADC+wNoJ2WMs\/kaYz+tTyOltIAk5CPeovLxPrlbRQogHN3MeURFd+ERbTcs80zOPM\/0=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAdlAABAGpQxARHljCggAAQG72qGkCGxJW\/ekoFAY\/\/8w5QAAFAMBAAEBFgMBADCClCt8nCyG8uA3DQ\/JHlSa+N9aejykoxJQAMeJ2cM3K1MpJK4JimEThmjEiLBqmOU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+2222{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":1408,"pkt":"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","pkt_caplen":1408,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAd1AABAGIGFyHcwxCggAAQG7yb4bqxlT5FT3dlAY\/\/\/EOAAAFAMBAAEBFgMBADCd5\/s9\/7Ll17ljBqb5VLA6MoBUy2Myf9DpxuFNXAGpDBo9hpQ+AbvaV2rQ4qmOJyU=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+3361{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":2245,"pkt":"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","pkt_caplen":2245,"pkt_type":2048,"pkt_ipoffset":14}
+3363{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":2245,"pkt":"ABoRAAACABoRAAABCABFAAi3Ad9AABAGnHxARHmZCggAAQG74S8Y3F5K5yO0lFAY\/\/\/VXgAAFwMBBWAwLX8ZpC+NjLNrThU\/Qiu7MZG0sO8PFM2Y8cX67I+4GS4myH53ZMqEe8nFxFhsL89AjQ4jVY\/oTPkHSVrq6JwXoUPXAd60UI1\/CcpPBlj\/ksEAtFL1gPkgGAnKl6RcFXh06W3R+bNqbwxP4LbNOQQY27QRro1L1s3NcPfx3LDThjwf608Rog2U\/Hxaw2+DS\/DmTrHJL6rclrmHDhaTsOXzEZm2FUr31NKhu2WCPAa\/\/mjbu8Ur86JPEDdmYiD6zJ+2fzqqzTQ9Gs0QLDIoyCETJ9K2yJ6mHDhEDorBwxIv\/WMGQ838uIAw+2Yf6GZOFEDwgvUXt8B7E9BRq9Eu1TfhVcoNIZJFIAoiKID1teFchbo1Hyn4U1OVk2faVixZbhEHhqT8HQyvSjgdOkOt3nvSKy5rzbRL+uttdTV3BCbbXfCRt4uUI6qMTFBjp2UsrvVxu4qSj4TzMym5YyhOlldW8EbAeBaGWoi1W842kR\/DFhsFGxRkLpEAQGXUuxB35ssimoJjYPCsCr3WF0gk8cC5iY8W6WshhREPJYgJIQJ\/moz+DJBZTyEcRfpcmjATwxO8rnCQxHEIjXGz2KjdmOG2vSkJOVEqr422zYuhJz38igYVpTNHkVxHt\/bVIBz\/5oczZwrSH40g0fjlidkLHQS5a\/Z9I3cj3GRbUDDnTMl8EvOf\/L+QTeOF\/3xf2NIcDhtCwQcDnO0D1JowYRbx9klMDwzzwSJK7um3RiDzrqHJWKAemZO+XaAzs6mG3TA\/1JrsFH7FL2CONlfyJHx1jvc2gQ33j9\/3lEy2\/+ButxDDU9awHYovEUcSMP\/qjJgPNjRLnzlkqlETK1so\/Odxmot6NGMv3TFWnahFcdbkBp+HTGXaP4NTS\/Flb4m5ykhnnEyXVjPRVEiWUL95\/H8s0GFx53XN\/9TdvYwzi4wClz61AWfbHZCihcmoSRgSWmOBElVA1h1csdciy6US75mMvpdUsP\/uCi5Zm5eLQz6OVGTkE\/OZB+ZJD\/TMXT5THU4hwDQMn7K5cezP98Ln\/e1+OIGEwkSzsWXfvh\/5gmjleCiRHsvxGVqKKxEvwiShn6UXjVYil93vyUGD7kU9Lbpyn+elmI1kCCl0tuuXFBzDSSAXiDHSlyVqD7fVFcgbUsYMBmn9JWnq\/tfHjbOxJwF\/N7bjn8vbxLjehD84NIYLGOn1bAI0OeIuuP2v1\/htfdzui1fcigF8hmSYomcOyCVeq5nT8bAIozkFv6aNzU+fJqgydQlnpoqE6eZcvkRsG96LeJiIs669DTNLgP71ZWdkMaeur6KelTJoUZ9RimFoTAJxak6CShYXWCZAQ0cq\/IAwuzS9LWRfSZy4rtPxyYe44uH6BPay2oW+91ZFStjES+\/dOJ8jNVTSPa0+Cr8jIspeXXbWyqrpM\/HK6xM1OXl7QyTKVgWWq3dkOwIb+3WjxHB8EtJPMV7LlVggKZk\/dxNBaN0PEvOAnLioQpsR3l24kZnJr3KylVsFsQVG\/xFfX8PWoVutljM9MLvnjOYC2dd8TZEbpf6o9jvJHBATbBKIQw\/eXMQitoNMISXU6UUcWQLjYglmThUkEU6F27pAvmlmKa4SjWIkMTr2eA5u5VZsSzscvP8QibmEKpg8AEE6KiQI9SNNFcCoFHCtMkWaeaqRUkpAT7RNQ3o70jyZLIdWQBMKhcPE4yrrQtCpdBkmf\/RlHMobSakmS9u+LZwjEZrcCofeHgDzENuSM7xEPIJ+GrC3cdX8Up3e6s35vXcsywe1AZEUukKAjGbcFW9P6PksoMQudKZQgrY2NA+yepkIG3rg0eQ+CCEKB\/Xas1RtvN8QWBcDAQMAOc27yvY7FIJcRuB+j6sqt+3JjDpMvi3BKr5GfGDFKnOeYy4i7qdxOPRjXbRLuhZpEiZbu6fAyX0xrWV8cK7ZucQsmE\/kdwuToIg2PbUfZKR3RlXKuRgUhgAilWCbs0JAYM7I6SGb81A9jKGTZUJKK1zMhXj0IuIiEkuHmvLGuC+nnZWgfZCBNYc38UF2f9DsVNAfnS09bO9HEDCMleKUCpQ0LEM7oteYhZETtZb9Y+xemK+TPWGOT+TlZvlEEE3FKRjDdLxelebkCzwgHxgGBatYmvE2mb8pd30dYeSEYf3XQdauToAZpU2dpqIYKG1OuYgj\/XxMz1qsHobHQULq494dfD+8ql9hivT1yV0tc2PCavYedg5YOV1RYid+b5Ik4DzT3QshRJXrwgr6ZM8VqgIpIBtluEP0Kt\/S2PZrmChVtafPqgV7pnS5VdWgy1Me9MKlvmkjLO9MmmTZR6EMhd1FBWVZWV\/+wvPEpepamB69SWyLTQ16AqTMt0mJq8RhjrWcafqIRzb7bn2XpWqZwn0wYkv7L27\/ORlZXXpqsUND4VLQIaC092AiCKT2zidGwyFInBaeBKTio0BetL3qP7ZyB8QCl3DYDn41Cdx76zCnL+A1ausO1PBR7I+Sl85bn5X3tH6QhtLgorunc0iQkr0WOQPB0WIKUI4cDj0wfjoRLUDJ3wTMHiH6QCawDkIPaWLvFxfXZWCp63KX2Uti5JGhhuSLa2Ac9N6RcIGzskPl68UlZAR+0gmGEHYVa22tUCSZ2d36spGZMn3K4s3scj\/Na6KLvsI4GV1TXvL7oNvbMLdeUfX\/2gFYjHN+2jGrFtWmvbHajuC3\/fTFgWsedk2+cnM23ZQEHJNpaAydnWsDvp1CjNLPzqXxmGWBM6eoNmVAkNDd3glxS2fDd+ScafZM1QCBw\/WO+SvRXrWKcZ7K8VAtFAe9Pb0Rfjr+XRAf9pGjrykMP\/KYHsZXsRRE5vXE\/1dvCTNVi1ISVXagvJtihI0rq7CyBrRVm9HMkqfzFQMBACB4uyAggbr8leqvh4SMZbnXe3zvVEUIp3e2CJOZK3lXhg==","pkt_caplen":2245,"pkt_type":2048,"pkt_ipoffset":14}
+3837{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":2608,"pkt":"ABoRAAACABoRAAABCABFAAoiAeBAABAGq0JARGlnCggAAQG7oar5IvZFBt0c6VAY\/\/9g+wAAFwMBCdCK5dEYCE9oHkE3SpubThJUXHGcidWdcxDMgTa12LtrUw8bMQZCwdunM8HzMEz2zgyp5AvwwEuRQ0x+Fl3+\/AqPwG0s5WMib3\/d6T+l+iiahv346Rf9OTEr0ILMEJkx9frczSG9KytDHXomCsNwVbxwrqWB5ATREJ1nAQ9E+LzVpP\/U+uMEO0G5j1MMku2xOTETmqZ5aKQmFG7USDFkRc3Roj82iIzSZKyCTHGES60pTDDd6m6i5UimAPWpS06e5LgtwHKgqB3Pl4UE7UEkifQ2x25d5y16grqaFUwLyEsoRvYSUTGOE3i6D9ivBoPePih2fooAVPAc3Fl4KYBbEhJb2yupgYoVWqMYMr3Z2v9eOC8t9tl\/VdulNM1pbdZ\/jWn1UXzjnwuZjqDZ1rKEo042qrE3H\/TA78FScV21e8lPcS+jaxgm1DQ8lRbu\/XQE1qTsgQypn381Q7oug1ZgEpy0dVt7eVI1xiDAdOFmRy3D1xBRz0T2rcFTG01GBw17Dv0UuI+zNjo\/4PawXO8lrpfG2412ABWrfn8UEByN3I8Zj+wsBDDhRx8nVJmx\/STQHEIAWD7qvtEQffwdg1FsqtP6n3lu1smBumVNRLiz01whCzi1nj6ARxgXNkjc6y+vRC8sgxdmMlOqvgGx4YXKiXl8e8FuMTN6yjf44o85ZlaVt56hIkK\/kN7rMfz0ZGXOEl3rczDkaGgzZZZqiNOsHECPOYlJczABbsqx\/kjo4gZNImKtqhCSLSG2iDEtbYFYkxMCmPkQ7BKn6WjxndfsdbWOn89JHSHwX6ycxoFUIQNYEGG7r97JSH9brW8FDRUmKmoQjJILO6Rl1L3AhrdhnmGiDvj+GMwZCmFQDU1cYH2PViJu+MycMRl5UTiKnyOMeEqTzq1+iUmOHHYWvVsC0V6wKkOYQqBmZigC1GESOHd4qezBl8LqxeTLpO9LY9\/Ygw+ofYIKrY8rkn4FN9L4gK4e9YNxqdzcw5iLxS9+dQKynbIgwQAeq80NjGPqliC7hPhnauZpyYUxAdT3H\/wjXxYmYAaQKLkOaW0SknLbVO3M0voO5ngCPOvRZsxog90A9isviQ5ZiafJVT6Us4TDvb6YhD85MIW4tJUrfYxQV3Ro6Y3JguaaKkfpHRxAhWjtXC1AK3sVdsChFCxVXzZ+P35Oyu\/nALPWCfqvgFBBQaYcxyaSk9R6qXOV8OC3GpacYLvYmhBiT+sma4\/iyfuY3rmGL7oSAtLoynpWooJL5lcLxTk4teSYhgE4\/OFv0IhYy33fa2DRDoPqxbWQeUo4EswfdMW1NeqRIyCpcJNu+rO5ex9Q\/ecqlurBUOLi01sc5rjoYhegURRPTGTqoBlLv4KMskPUkwqfUqHbYvwQRprqTRdXhmx26sxN2CI\/QN5EDt0WvmYQfuXIoP2IpkxYUeBsgMdMuNFwR5CIiXq9sFDTAXFvaxfDOJinGWv\/eOyJWVkIGZkX0n+wN46Zw\/pVSMBMbXfZHzMGgqavn4qdDoNyCyjsIa3x8suJk+q5+nv0yh4k+iKTKEanfCF7BYqAwYrD1tVJvIqnC+rV8b9Zy4NyLD7bzv2UBm0nimg3XFjOV98qoN0iyDnvUOv6yZZXdzcCffKuu4nWivmIhoWUnT61sVBWiElNE8YgkowiDHi+mxlc\/oNcBrARNn0P0igbhat3b1akdrCxDR2\/U6cH0oaNhCEolXs\/yKaJ95xLb8hTk9mYTOH\/uROpjf7JG9OHNJJcq3q9VWi1fDWOv7\/F94Z7pB+bdMIBNzGgsj1i7ZXbkcEEyPk9T2grNbzHznbwZfLISKTTNoW5jiyFMHEGllFIE16v8dHxQzajq9OWj0SltehQ119DBfCxIxHvvpFPyx0eIWDHKWmwCeN7xj4bXDMLYJupbD4VKHtRRtv5o4YQ675DoWOVk78XsnH4AB9NqX7TQD\/D7sYMUPQuBwD+c4m+uyrKfO4QqBNnCXQaxhnzlXc+8CPcFDgj9b8sd2\/ke2yefxzj0tFSbEvGYhFiA65W79kISOzBxUPbVXhtCj1s0209bdvsrZF5ikonuKFdymCqveoneVPXQESGOo9bws2D7HuDHB4W\/j+dDmQBLQz336V+9uLZ8tvBdTscoUMqwbDTUd5N6d0dmDCR3B5pvftwil+ftPXSP6mmn+FxUWV5nbr\/M98wXANPMJ+UkVbPg8qGypyZ2Fiyptc7PkKevXGlPGe5fVc0Il2F0t4RTVTFOVGE3yThumtuHr9bfKJXT3XkhFjf+8TVWF3+Td2KC+4AeOBHbQYSDxVD3g2bGi0s4uP4C4KjDCWoD61C230SjXICRct1NF\/axFUSFaw8\/rq75gL5iIHvQ6vFd6nQLTFPcwrjLF505QOhebJ+VrU+KJYBUcVqgo7M6X4TY1e+pTlQd+Y+zzsHMh6T3BwcEDOlFzZwzOyDc8m6jt0eZ2ZuolmucLjXEwSb7wM7xpJ0bGVvbIpYRtY0u2Vkme+BkLi9GT8HvNeKx79Gp4qn47tv6sIMY5d5JEVsQtSdmOHVUnn3AXdGKp4r2+ZOL+p13hTWXyoqCerenzG+2Bjpp1aMab6Yew92WQq+3yGhDXmkOv1sBHTcOpoG+oloye3gAsg+uAxYkwWrHzUU9zBYVy\/Vz+XtEkenIZRJMCOgGYh+2q+3Oqyu6vSaOuzbDM77Mk4tuRJwJhxqz5QTiQF4C7rbWDhFBzXWKDqkNguCiiibxO4ZPOuZwMroaG2pVqLrtipPOFLSSauoblrzOFkbD+Jz987MCevqnGCktde1xw0sNRogWyaA7Ej+6e022ffku4ryJqqsaHDvkHI7pInrb\/y74a\/zyHyZdmHTaKfKtZwW53tYxkEhks+SUr9ZdCguudE5dZQdokJHXaad97apBZNEjmJ5i8v\/\/DX+ZAbLGd6A8ejIz\/HZlctBSy7giKH0HgjpJr7mBro2t3XmMLskFdAfqbb6gkTcc+VMT865Rlkunikmf7LsHKLxoXs9ItYXe3chSJX9jpDefuJX+W\/94VDJ9JX65x\/CdAPOw4y8Wfan\/idNdBzMqbKzoyzAVnjKX3TZYL7uZQyj8qLiOireH\/3y+YRGZVry8v4n6iE5RCRFnzYyblek8nWmOS5J0IP9QhIgNemLIfV1to\/LMRyAhUx6sCMbJpdwV+yzJVkjzxDztVAdY4qbREl4ebJXnGDHyqLobJd+5mxY1tsnGHoJSb3yB00x3vhc1m046nlLV3EtLCTxYPBBxJp+zCDsKHtXBcsoQ9x1LT5SmtgZKVmJoKc21ydRf1d2PhWdHvMo6z3Cxhe8r3YrCL7q8sF7w4sG9xnjOJGkASvAFPtxCf+EZEHWEp7kFQMBACCCItIQVCaP2PI7n+NEWkiy8a7lKqnCPKr5eoNbQO79Sw==","pkt_caplen":2608,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1444570638225,"flow_last_seen":1444570638225,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8UR1AAEAGNzMKCAAB2DrQKKmpAbtoC5J\/AAAAAKACOQjy7gAAAgQFtAQCCAoATMNiAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeFAABAGtoPYOtAoCggAAQG7qamX9G2AaAuSgFAS\/\/9SAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoNx9AAEAGu1kKCAABch3MMcm+AbvkVPd2G6sZU1ARTvg8QAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeJAABAGIJdyHcwxCggAAQG7yb4bqxlT5FT3d1AQ\/\/+LOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeNAABAGIJZyHcwxCggAAQG7yb4bqxlT5FT3d1AR\/\/+LNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAotbhAAEAGMx0KCAABch3V1KL+AbsYGnec5+WIpFAROQh\/1gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeRAABAGFvJyHdXUCggAAQG7ov7n5YikGBp3nVAQ\/\/+43gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeVAABAGFvFyHdXUCggAAQG7ov7n5YikGBp3nVAR\/\/+43QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570638,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0TBAAEAGIu4KCAABch3Ki7gMAbtSShQdrbX3PVARTbZWSQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAeZAABAGIjlyHcqLCggAAQG7uAyttfc9UkoUHlAQ\/\/+j\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAedAABAGIjhyHcqLCggAAQG7uAyttfc9UkoUHlAR\/\/+j\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2224{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":1408,"pkt":"ABoRAAACABoRAAABCABFAAVyAehAABAGr+9ARGliCggAAQG7kQkSUm6E7a2kelAY\/\/9w6gAAFwMBBSCrJ+ksJMHeO+UUJSyXU0k3tW\/0HXNm63qfbSPciNlAB8cY7tpQdij8BOZtvRonFho8JtmFOzsTS5F2mimDP9+ulmVm7egweQzr0Kbw+YMfqU2J3qogT+ZtknM\/uB6M8f2moa1B9YGUMGY37kyxke7VnSVgygabx426Hqd0Aq9xv59QRNCOwx\/RZseQd2QD0Mwh0oHmE7H7sKcFWCE+k69A\/24cDWgtbTU3APp1QnJ1zIOXDVC1Axoo+3y8H8+9pACJJhQGhWcgTfiDzuNp53ZNL6Y5VZJQ3Yx9hobeqbJO61x9BIGrblk7L8F5ZkN+ydFXzJn\/WwjiPdWVQqAvY9nBc9rQelzuspUYqPH8zix7s99qorT6QyTyL69ECHMxJBFLBCSPvxsiD3MdaJnUnDyK7l4Y1RVz6NR83AympRf5fLah\/h714JZ\/Chugd\/QDBpjSRoRTF03hqbydt6dgicOAnU8ES6T\/dktr+t07YzebFvmhRc\/X+IUmMtSjagVCXMk+XbaF12QEJxQe3dWpOhLHqzXcJvMkfuvbsuUvLlOL4AOVLoqmKdsLeTjd4fZEAf0yXtfHHs0yGLXTAqvKtIu3NtJHVCDVuS7jxSgcU8e4oJ9RN8dQxneUKuyOT17mymCeiWd6I6Z1DBhoAq5jdCAykrHuJJttypbpFSS27i5qiYFSlUHLmU096638ZLBWRyE0Q3A7vby9vzjF20rsnoq6ArYUcJx46kQIdxm+X4YhmURrVcUJeqvcHN75mToSsqOKYNFb\/13jQy9MmfEe9NbYzQrUsYvUiCDsS98Qd\/AUE38jhzjcQ5BZ84XcMniFruhfrvi6IYwbs2hsSx+PiynFpoYnV73ZPpkDvN6wT0qe\/bWEU47JV2b+8840wVGwXv+aUoYlGz06mULVxg60vlqumgXpoTJOQ36pKmfOJeDbodq5O4lsxiW1WhDblfCNCDr674XfmmllyBoS1d0fi+CenitV0AjcvOP5wt5SPZri63gc\/1dh+VyONGwj2eWU9tYcolmyvhX5X0YwFcTaKMgsdxiVAACZhV7pqddjeGxEhuFqqCrKbqDDaEJe15MjOEo+KSJxn+MtcTS051YRi6DJsZfB6jyfUC1TzGzgbiB0sewWH9vTSGkI\/WaYR19YkKWjKJ+gRLDBHZ5UlMZhyatQ\/G4JuGFRV235EVpGviz7lApMnRMEyebE3FQOWQFpoSQ6nQqQDb4eF7\/mjIYZ7+wtfGYgXbukSgCX0VQniGM7lJpet4DrV5PopbhDGeX6PfhqonDp\/m51KILlEzbH2x\/AYPvEDPLS7MLFuBweRVsc8iYTaY0WhxdYTZkhVCAEMpgFaewnUPCFCbdBxOu\/i7osbzbv0mUXWgvQvEv4dLiMoD9cI57rL1dTvjdPACdG5IFFBQF8fm8DGlvjkU5i6l0+fWu3TiW2kAPEar45X0R+oyrimERgtzpkFquDljYnIH91vw6b\/r\/prWxHfK0yRFdN0wr6PEj00ARBNiU9g+\/5ghTOPaoIZjIM9SZMg8M1Z\/6AzeZRYs8hC8rM1avSJDdd4b4c6FvY\/57aa8ibHIsEqJmrR5v\/\/lRJFtNlSRIpGXeEOvu4nK\/8El7ZsjA4FSP0brbJVjn7W413WyN3PXfxjM9cvUFZ28hxWf9cmbQiR10TNFdO9i1fjdH2YpKIIMJta\/UTWJVcK206kJgjDcwfJxEvmdlP9LZ+PAj8DpyA4cV6Y41Fl5Mbjrbz3+6mW3cuFQMBACBE3BCuegZP7kcONCmOxdh667g0ft+9MhTEfEyW2w9PrA==","pkt_caplen":1408,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAou9tAAEAGu0MKCAABQER5ZMv7AbtwVXqqj6qWP1ARTO\/AkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAelAABAGpTZARHlkCggAAQG7y\/uPqpY\/cFV6q1AQ\/\/8NggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAepAABAGpTVARHlkCggAAQG7y\/uPqpY\/cFV6q1AR\/\/8NgQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYe5AAEAGFTIKCAABQER5Y9qhAbtb96SgpAhsSVARTO+x7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAetAABAGpTVARHljCggAAQG72qGkCGxJW\/ekoVAQ\/\/\/+3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAexAABAGpTRARHljCggAAQG72qGkCGxJW\/ekoVAR\/\/\/+2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo79pAAEAGBsQKCAABch3IC7rhAbtuYS1jkZ7S3VAROQh1vAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAe1AABAGJLJyHcgLCggAAQG7uuGRntLdbmEtZFAQ\/\/+uxAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":19,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAe5AABAGJLFyHcgLCggAAQG7uuGRntLdbmEtZFAR\/\/+uwwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoc+VAAEAGAwUKCAABQER5meEvAbvnI7SUGNxm2VAUW5KR\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":448,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0HJAAEAGr+8KCAAB0cXen7mKAbt7nBXmhGQFh1AUW5LDHAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoUR5AAEAGN0YKCAAB2DrQKKmpAbtoC5KAl\/RtgVAQOQgY+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2l5AAEAGrL0KCAABQERpZ6GqAbsG3Rzp+SMAP1AQa7XP3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":453,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAe9AABAGtS1ARGlnCggAAQG7oar5IwA\/Bt0c6VAR\/\/87kQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0689{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":281,"pkt":"ABoRAAACABoRAAABCABFAAELUR9AAEAGNmIKCAAB2DrQKKmpAbtoC5KAl\/RtgVAYOQjE6AAAFgMBAN4BAADaAwOv\/q6xmTCIAwLzDcizR7a\/t25hvWTVcDLyx+PEedO+jAAAKMArwCzAL8AwAJ4An8AJwArAE8AUADMAOcAHwBEAnACdAC8ANQAFAP8BAACJAAAAHQAbAAAYc3NsLmdvb2dsZS1hbmFseXRpY3MuY29tAAsABAMAAQIACgA0ADIADgANABkACwAMABgACQAKABYAFwAIAAYABwAUABUABAAFABIAEwABAAIAAwAPABAAEQAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgM=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1444570638225,"flow_last_seen":1444570639266,"flow_tot_l4_data_len":327,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":81,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ssl.google-analytics.com","ja3":"75edb912bc6f0a222ae3e3e47f5c89b1","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfBAABAGtnTYOtAoCggAAQG7qamX9G2BaAuTY1AQ\/\/9RHwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570639,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY+dAAEAGIzoKCAABQERpYpEJAbvtraR6ElJuhFARTO8JcgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfFAABAGtTBARGliCggAAQG7kQkSUm6E7a2ke1AQ\/\/9WYQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1444570640269,"flow_last_seen":1444570640269,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47135,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8fMBAAEAGd0oKCAABch3Ki7gfAbudV783AAAAAKACOQjtmQAAAgQFtAQCCAoATMP3AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfNAABAGIixyHcqLCggAAQG7uB9iqEDInVe\/OFAS\/\/+vRQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1444570640284,"flow_last_seen":1444570640284,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41757,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8nBhAAEAGTKkKCAABch3V1KMdAbtvG1\/vAAAAAKACOQiE1wAAAgQFtAQCCAoATMP3AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfRAABAGFuJyHdXUCggAAQG7ox2Q5KAQbxtf8FAS\/\/+4\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1444570640298,"flow_last_seen":1444570640298,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51676,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8YQlAAEAGkVsKCAABch3MMcncAbvjbaL+AAAAAKACOQiwWQAAAgQFtAQCCAoATMP3AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfVAABAGIIRyHcwxCggAAQG7ydwckl0B422i\/1AS\/\/+b4gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1444570640310,"flow_last_seen":1444570640310,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37139,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8S45AAEAGO38KCAABQERpYpETAbtLyIh5AAAAAKACOQgv9gAAAgQFtAQCCAoATMP3AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfZAABAGtStARGliCggAAQG7kRO0N3eGS8iIelAS\/\/9pVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1444570640319,"flow_last_seen":1444570640319,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41394,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8c3VAAEAGE5MKCAABQERpZ6GyAbtpybCOAAAAAKACOQjZNwAAAgQFtAQCCAoATMP7AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfdAABAGtSVARGlnCggAAQG7obKWNk9xacmwj1AS\/\/9YsAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1444570640330,"flow_last_seen":1444570640330,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51134,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":471,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8tGhAAEAGXWUKCAABPm3geMe+AbssX3BwAAAAAKACOQi7XAAAAgQFtAQCCAoATMQYAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":472,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfhAABAGP+o+beB4CggAAQG7x77ToI+PLF9wcVAS\/\/+9aQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1444570640338,"flow_last_seen":1444570640338,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51135,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":473,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA82ZNAAEAGODoKCAABPm3geMe\/Abvolh2LAAAAAKACOQhSCQAAAgQFtAQCCAoATMQYAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAflAABAGP+k+beB4CggAAQG7x78XaeJ06JYdjFAS\/\/+9aAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9B4KCAABch3Ki7gMAbtSShQeAAAAAFAEAABI\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9B4KCAABch3Ki7gMAbtSShQeAAAAAFAEAABI\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdx8KCAABQER5ZMv7AbtwVXqrAAAAAFAEAAAzeAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdx8KCAABQER5ZMv7AbtwVXqrAAAAAFAEAAAzeAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdyAKCAABQER5Y9qhAbtb96ShAAAAAFAEAAAPOwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":480,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGdyAKCAABQER5Y9qhAbtb96ShAAAAAFAEAAAPOwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":19,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":481,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9p4KCAABch3IC7rhAbtuYS1kAAAAAFAEAAATTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":19,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":482,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAG9p4KCAABch3IC7rhAbtuYS1kAAAAAFAEAAATTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1444570640346,"flow_last_seen":1444570640346,"flow_tot_l4_data_len":55,"flow_min_l4_data_len":55,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":55,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"80.74.110.68","src_port":33459,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":89,"pkt":"ABoRAAACABoRAAABCABFAABLP\/ZAAEAGY3QKhc4vUEpuRIKzAbsvtI0Fj3ahWYAYAWE\/AgAAAQEICgBMxFRXHeViFQMBABJ8gv9dmaTjHFUtA85jnlaY0C8=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":66,"pkt":"ABoRAAACABoRAAABCABFAAA0P\/dAAEAGY4oKhc4vUEpuRIKzAbsvtI0cj3ahWYARAWFq6AAAAQEICgBMxFRXHeVi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfpAABAG0ZNQSm5ECoXOLwG7grOPdqFZL7SNHVAQ\/\/+mgQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAftAABAG0ZJQSm5ECoXOLwG7grOPdqFZL7SNHVAR\/\/+mgAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8fMFAAEAGd0kKCAABch3Ki7gfAbudV783AAAAAKACOQjtNQAAAgQFtAQCCAoATMRbAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAfxAABAGIiNyHcqLCggAAQG7uB9iqEDInVe\/OFAS\/\/+vRQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":490,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8nBlAAEAGTKgKCAABch3V1KMdAbtvG1\/vAAAAAKACOQiEcwAAAgQFtAQCCAoATMRbAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAf1AABAGFtlyHdXUCggAAQG7ox2Q5KAQbxtf8FAS\/\/+4\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8YQpAAEAGkVoKCAABch3MMcncAbvjbaL+AAAAAKACOQiv9QAAAgQFtAQCCAoATMRbAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAf5AABAGIHtyHcwxCggAAQG7ydwckl0B422i\/1AS\/\/+b4gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8S49AAEAGO34KCAABQERpYpETAbtLyIh5AAAAAKACOQgvkgAAAgQFtAQCCAoATMRbAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAf9AABAGtSJARGliCggAAQG7kRO0N3eGS8iIelAS\/\/9pVAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1444570640382,"flow_last_seen":1444570640382,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33511,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8O9hAAEAGNk0KCAABUEpuRILnAbv7u\/+DAAAAAKACOQgB2AAAAgQFtAQCCAoATMRbAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgBAABAGoDlQSm5ECggAAQG7gucERAB8+7v\/hFAS\/\/9imAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1444570640385,"flow_last_seen":1444570640385,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8smJAAEAGv8IKCAABUEpuRILoAbtZhnY\/AAAAAKACOQgtTwAAAgQFtAQCCAoATMRdAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgFAABAGoDhQSm5ECggAAQG7guimeYnAWYZ2QFAS\/\/9ilwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8c3ZAAEAGE5IKCAABQERpZ6GyAbtpybCOAAAAAKACOQjY0wAAAgQFtAQCCAoATMRfAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgJAABAGtRpARGlnCggAAQG7obKWNk9xacmwj1AS\/\/9YsAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8tGlAAEAGXWQKCAABPm3geMe+AbssX3BwAAAAAKACOQi6+AAAAgQFtAQCCAoATMR8AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgNAABAGP98+beB4CggAAQG7x77ToI+PLF9wcVAS\/\/+9aQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA82ZRAAEAGODkKCAABPm3geMe\/Abvolh2LAAAAAKACOQhRpAAAAgQFtAQCCAoATMR9AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgRAABAGP94+beB4CggAAQG7x78XaeJ06JYdjFAS\/\/+9aAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAofMJAAEAGd1wKCAABch3Ki7gfAbudV784YqhAyVAQOQh2PgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnfMNAAEAGdxwKCAABch3Ki7gfAbudV784YqhAyVAYOQizYAAAFgMBADoBAAA2AwHL0KbklNiTQBXXAOTSW3u+JaExiKsBBup5X7QAW6mJdAAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1444570640269,"flow_last_seen":1444570640404,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47135,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":510,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgVAABAGIhpyHcqLCggAAQG7uB9iqEDJnVe\/d1AQ\/\/+vBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAonBpAAEAGTLsKCAABch3V1KMdAbtvG1\/wkOSgEVAQOQh\/9wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnnBtAAEAGTHsKCAABch3V1KMdAbtvG1\/wkOSgEVAYOQgbMgAAFgMBADoBAAA2AwGrp6IiqHkBm3loHqbaZBzbVkh+xkbqhD+UPXWnBcnLxAAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1444570640284,"flow_last_seen":1444570640404,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41757,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgZAABAGFtByHdXUCggAAQG7ox2Q5KARbxtgL1AQ\/\/+4wAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYQtAAEAGkW0KCAABch3MMcncAbvjbaL\/HJJdAlAQOQhi2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnYQxAAEAGkS0KCAABch3MMcncAbvjbaL\/HJJdAlAYOQhAsgAAFgMBADoBAAA2AwGD780leUD\/zJ6TyDunDGCFeal9B+1RLC9bN3N7SvEEPAAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1444570640298,"flow_last_seen":1444570640404,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51676,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgdAABAGIHJyHcwxCggAAQG7ydwckl0C422jPlAQ\/\/+bpAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoS5BAAEAGO5EKCAABQERpYpETAbtLyIh6tDd3h1AQOQgwTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnS5FAAEAGO1EKCAABQERpYpETAbtLyIh6tDd3h1AYOQiLjgAAFgMBADoBAAA2AwERAQnq4d\/gxiGfJU2bLkxxyvmp1+D227r48TmpdQ4WzgAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":28,"flow_packet_id":6,"flow_first_seen":1444570640310,"flow_last_seen":1444570640405,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37139,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAghAABAGtRlARGliCggAAQG7kRO0N3eHS8iIuVAQ\/\/9pFgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoc3dAAEAGE6UKCAABQERpZ6GyAbtpybCPljZPclAQOQgfqQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnc3hAAEAGE2UKCAABQERpZ6GyAbtpybCPljZPclAYOQg1JwAAFgMBADoBAAA2AwGYvNjE9n0n5PBRt0o9HyCmeZcSM\/CYZuDVHrLRWw9j1QAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1444570640319,"flow_last_seen":1444570640406,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41394,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAglAABAGtRNARGlnCggAAQG7obKWNk9yacmwzlAQ\/\/9YcgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAotGpAAEAGXXcKCAABPm3geMe+AbssX3Bx06CPkFAQOQiEYgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABntGtAAEAGXTcKCAABPm3geMe+AbssX3Bx06CPkFAYOQhVUgAAFgMBADoBAAA2AwHChCdZOEMAlD5sXipmDRVVUN8O0TYEJmE+D4b2cbQgJQAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1444570640330,"flow_last_seen":1444570640406,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51134,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgpAABAGP9g+beB4CggAAQG7x77ToI+QLF9wsFAQ\/\/+9KwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2ZVAAEAGOEwKCAABPm3geMe\/Abvolh2MF2nidVAQOQiEYQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn2ZZAAEAGOAwKCAABPm3geMe\/Abvolh2MF2nidVAYOQhfdgAAFgMBADoBAAA2AwHVxA3qKVbS+aM2DodEgQ0ezLSejrbBA\/G4QcrR0TfK+wAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":31,"flow_packet_id":6,"flow_first_seen":1444570640338,"flow_last_seen":1444570640407,"flow_tot_l4_data_len":223,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51135,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgtAABAGP9c+beB4CggAAQG7x78XaeJ16JYdy1AQ\/\/+9KgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGo40Khc4vUEpuRIKzAbsvtI0dAAAAAFAEAADXXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAofMRAAEAGd1oKCAABch3Ki7gfAbudV793YqhAyVAQOQh1\/wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAonBxAAEAGTLkKCAABch3V1KMdAbtvG2AvkOSgEVAQOQh\/uAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYQ1AAEAGkWsKCAABch3MMcncAbvjbaM+HJJdAlAQOQhinAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoS5JAAEAGO48KCAABQERpYpETAbtLyIi5tDd3h1AQOQgwDgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoO9lAAEAGNmAKCAABUEpuRILnAbv7u\/+EBEQAfVAQOQgpkQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAosmNAAEAGv9UKCAABUEpuRILoAbtZhnZApnmJwVAQOQgpkAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEAO9pAAEAGNYcKCAABUEpuRILnAbv7u\/+EBEQAfVAYOQjgzQAAFgMBANMBAADPAwFWGmYQaUf4c9qAoNyA\/Wv7T0CEUJYDhQEnkMlpU0A7GyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1444570640382,"flow_last_seen":1444570640408,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33511,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAgxAABAGoC1QSm5ECggAAQG7gucERAB9+7wAXFAQ\/\/9hwQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEAsmRAAEAGvvwKCAABUEpuRILoAbtZhnZApnmJwVAYOQglNwAAFgMBANMBAADPAwFWGmYQn3y+Y635kayg0wLQlN\/9KaMadTF0LMgTLEN5tSBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1444570640385,"flow_last_seen":1444570640408,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAg1AABAGoCxQSm5ECggAAQG7guimeYnBWYZ3GFAQ\/\/9hwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoc3lAAEAGE6MKCAABQERpZ6GyAbtpybDOljZPclAQOQgfagAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAotGxAAEAGXXUKCAABPm3geMe+AbssX3Cw06CPkFAQOQiEIwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2ZdAAEAGOEoKCAABPm3geMe\/Abvolh3LF2nidVAQOQiEIgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5365{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":3751,"pkt":"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","pkt_caplen":3751,"pkt_type":2048,"pkt_ipoffset":14}
+1256{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1444570638225,"flow_last_seen":1444570640491,"flow_tot_l4_data_len":4064,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3717,"flow_avg_l4_data_len":677,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"ssl.google-analytics.com","server_names":"*.google-analytics.com,app-measurement.com,google-analytics.com,googletagmanager.com,service.urchin.com,ssl.google-analytics.com,urchin.com,www.google-analytics.com,www.googletagmanager.com","ja3":"75edb912bc6f0a222ae3e3e47f5c89b1","ja3s":"389ed42c02ebecc32e73aa31def07e14","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.google-analytics.com","fingerprint":"E0:F0:1E:71:F2:B5:D9:2D:F7:4E:8F:CB:10:37:17:7C:0C:C4:07:9D"}}
+0381{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoUSBAAEAGN0QKCAAB2DrQKKmpAbtoC5Njl\/R78lAQSDX6eAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":180,"pkt":"ABoRAAACABoRAAABCABFAACmUSFAAEAGNsUKCAAB2DrQKKmpAbtoC5Njl\/R78lAYSDUnbQAAFgMDAEYQAABCQQQARi2Sq6lomOqdBwTXeK+7\/VSCE644W9ePmSa9EWlwoNhBkPWiERqUZ6KGC\/aDzofvpP6QqC1qdhwZ214CYXZcFAMDAAEBFgMDACiMfFcaI1hpldHeUclqaHBcFUg1h+fECh+\/j1y52hpRJWkfYJdr7o0+","pkt_caplen":180,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAg9AABAGtlXYOtAoCggAAQG7qamX9HvyaAuT4VAQ\/\/9CMAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpAhBAABAGn6hQSm5ECggAAQG7guimeYnBWYZ3GFAY\/\/\/TtAAAFgMBAFECAABNAwFWGmYw1S2SuQizrUA2AASo1\/xNI5gqSv2km0LL+94AiyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIAtAOY9Gt7feGYdDv\/ZQ6IBSs9DH9KrW9HIkjyflxg+V","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":34,"flow_packet_id":6,"flow_first_seen":1444570640385,"flow_last_seen":1444570640593,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0380{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAosmVAAEAGv9MKCAABUEpuRILoAbtZhncYpnmKQlAQPLgkhwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTsmZAAEAGv6cKCAABUEpuRILoAbtZhncYpnmKQlAYPLgwbgAAFAMBAAEBFgMBACB3tOPNrA1yIPhgJ2zXsFBvVf8GU6w+9JhDmg6WwOMMyw==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhFAABAGoChQSm5ECggAAQG7guimeYpCWYZ3Q1AQ\/\/9hFAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1113{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhJAABAGoCdQSm5ECggAAQG7guimeYpCWYZ5W1AQ\/\/9e\/AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":87,"pkt":"ABoRAAACABoRAAABCABFAABJsmhAAEAGv68KCAABUEpuRILoAbtZhnlbpnmKQlAYPLgXVwAAp0MLH2CbJQYhnupAbl4vEJny6r098rHOF3oCZdQVsgsV","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhNAABAGoCZQSm5ECggAAQG7guimeYpCWYZ5fFAQ\/\/9e2wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570640,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570641,"pkt_len":316,"pkt":"ABoRAAACABoRAAABCABFAAEuAhRAABAGtUrYOtAoCggAAQG7qamX9HvyaAuT4VAY\/\/+EggAAFgMDAM4EAADKAAGJwADEd5br9SMNDvXhzvcONgP0H2T7yR4EP46U+N7N+5JmcpYB9eIKlABqaHtQbU9PJzOs2cV4299TJ+B5FDBYJOVt5hMYIHM56A49cMgGirymFV3TRXz9Wty2d1IZachfpUzNpC4rk9oPzJRCeu1INvw4j7HhW1G+jaHMoLbap9FVS3H0X1LM2xQoqlJXZqgmgLWodU8+YTfOYjlKgqJpxBwQahQvH8I9omutoQb88AwIV4fFND1Xji4FVkJemcQyw+T2kHqK\/hQDAwABARYDAwAoAAAAAAAAAAAPnDef60F0GXILgwnzGm83rO04c10DxGv7OPNnYaQieQ==","pkt_caplen":316,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570641,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoUSJAAEAGN0IKCAAB2DrQKKmpAbtoC5Phl\/R8+FAQZRfcEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1112{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570641,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570641,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhVAABAGtk\/YOtAoCggAAQG7qamX9Hz4aAuV+VAQ\/\/8\/EgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0584{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570641,"pkt_len":199,"pkt":"ABoRAAACABoRAAABCABFAAC5USRAAEAGNq8KCAAB2DrQKKmpAbtoC5X5l\/R8+FAYZRfk\/AAAbWPxDcpBPt7Jt1CVWyyUVJM20584ue8CdnDdn3SGUOx\/uJiQg5WP3Vk35m3kKg+srzvbEqCMUpaqeVBr0DtOuKnw3Fse3etQ6ASNPhFhSUlZl08kBPTyk2TxuEJNKwKaDGsZo6jjJjsyvRe9gXqXc\/D0cYj02ykbMEC30HkRUlG15t3PcEXuE4B\/ipVVjByYew==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570641,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhZAABAGtk7YOtAoCggAAQG7qamX9Hz4aAuWilAQ\/\/8+gQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570644,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAofMVAAEAGd1kKCAABch3Ki7gfAbudV793YqhAyVAROQh1\/gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhhAABAGIgdyHcqLCggAAQG7uB9iqEDJnVe\/eFAQ\/\/+vBgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhlAABAGIgZyHcqLCggAAQG7uB9iqEDJnVe\/eFAR\/\/+vBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAonB1AAEAGTLgKCAABch3V1KMdAbtvG2AvkOSgEVAROQh\/twAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhpAABAGFrxyHdXUCggAAQG7ox2Q5KARbxtgMFAQ\/\/+4vwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhtAABAGFrtyHdXUCggAAQG7ox2Q5KARbxtgMFAR\/\/+4vgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYQ5AAEAGkWoKCAABch3MMcncAbvjbaM+HJJdAlAROQhimwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAhxAABAGIF1yHcwxCggAAQG7ydwckl0C422jP1AQ\/\/+bowAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAh1AABAGIFxyHcwxCggAAQG7ydwckl0C422jP1AR\/\/+bogAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoS5NAAEAGO44KCAABQERpYpETAbtLyIi5tDd3h1AROQgwDQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAh5AABAGtQNARGliCggAAQG7kRO0N3eHS8iIulAQ\/\/9pFQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570645,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAh9AABAGtQJARGliCggAAQG7kRO0N3eHS8iIulAR\/\/9pFAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570648,"pkt_len":698,"pkt":"ABoRAAACABoRAAABCABFAAKsAABAAEARgN0KCAABrBABS\/waE8QCmKnIUkVHSVNURVIgc2lwOjE3Mi4xNi4xLjc1O3RyYW5zcG9ydD1VRFAgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxMC4xMzMuMjA2LjQ3OjY0NTM4O2JyYW5jaD16OWhHNGJLLTUyNDI4Ny0xLS0tM2U0Njk4NjE4Y2ZiMmI3MztycG9ydA0KTWF4LUZvcndhcmRzOiA3MA0KQ29udGFjdDogPHNpcDo0NTE5MUAxMC4xMzMuMjA2LjQ3OjY0NTM4O3JpbnN0YW5jZT03YTQ2ZjFlMTI3MDJlN2ZiO3RyYW5zcG9ydD1VRFA+DQpUbzogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPg0KRnJvbTogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPjt0YWc9ZDM4MzM3NjcNCkNhbGwtSUQ6IEtvcExUdzl4c19sRXBDdGlQYTA3YlEuLg0KQ1NlcTogNCBSRUdJU1RFUg0KRXhwaXJlczogNjANCkFsbG93OiBJTlZJVEUsIEFDSywgQ0FOQ0VMLCBCWUUsIE5PVElGWSwgUkVGRVIsIE1FU1NBR0UsIE9QVElPTlMsIElORk8sIFNVQlNDUklCRQ0KU3VwcG9ydGVkOiByZXBsYWNlcywgbm9yZWZlcnN1YiwgZXh0ZW5kZWQtcmVmZXIsIHRpbWVyLCBvdXRib3VuZCwgcGF0aCwgWC1jaXNjby1zZXJ2aWNldXJpDQpVc2VyLUFnZW50OiBab2lwZXIgcjMzNjg4DQpBbGxvdy1FdmVudHM6IHByZXNlbmNlLCBrcG1sDQpDb250ZW50LUxlbmd0aDogMA0KDQo=","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570652,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoc3pAAEAGE6IKCAABQERpZ6GyAbtpybDOljZPclAROQgfaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570652,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiBAABAGtPxARGlnCggAAQG7obKWNk9yacmwz1AQ\/\/9YcQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570652,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiFAABAGtPtARGlnCggAAQG7obKWNk9yacmwz1AR\/\/9YcAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570652,"pkt_len":698,"pkt":"ABoRAAACABoRAAABCABFAAKsAABAAEARgN0KCAABrBABS\/waE8QCmKnIUkVHSVNURVIgc2lwOjE3Mi4xNi4xLjc1O3RyYW5zcG9ydD1VRFAgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxMC4xMzMuMjA2LjQ3OjY0NTM4O2JyYW5jaD16OWhHNGJLLTUyNDI4Ny0xLS0tM2U0Njk4NjE4Y2ZiMmI3MztycG9ydA0KTWF4LUZvcndhcmRzOiA3MA0KQ29udGFjdDogPHNpcDo0NTE5MUAxMC4xMzMuMjA2LjQ3OjY0NTM4O3JpbnN0YW5jZT03YTQ2ZjFlMTI3MDJlN2ZiO3RyYW5zcG9ydD1VRFA+DQpUbzogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPg0KRnJvbTogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPjt0YWc9ZDM4MzM3NjcNCkNhbGwtSUQ6IEtvcExUdzl4c19sRXBDdGlQYTA3YlEuLg0KQ1NlcTogNCBSRUdJU1RFUg0KRXhwaXJlczogNjANCkFsbG93OiBJTlZJVEUsIEFDSywgQ0FOQ0VMLCBCWUUsIE5PVElGWSwgUkVGRVIsIE1FU1NBR0UsIE9QVElPTlMsIElORk8sIFNVQlNDUklCRQ0KU3VwcG9ydGVkOiByZXBsYWNlcywgbm9yZWZlcnN1YiwgZXh0ZW5kZWQtcmVmZXIsIHRpbWVyLCBvdXRib3VuZCwgcGF0aCwgWC1jaXNjby1zZXJ2aWNldXJpDQpVc2VyLUFnZW50OiBab2lwZXIgcjMzNjg4DQpBbGxvdy1FdmVudHM6IHByZXNlbmNlLCBrcG1sDQpDb250ZW50LUxlbmd0aDogMA0KDQo=","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570656,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1243{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570660,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570664,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1244{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570668,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1444570669736,"flow_last_seen":1444570669736,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA80OhAAEAGQOUKCAABPm3geMfSAbvlsh8HAAAAAKACOQhHhwAAAgQFtAQCCAoATM\/vAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiJAABAGP8A+beB4CggAAQG7x9IaTeD45bIfCFAS\/\/+9VQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1444570669745,"flow_last_seen":1444570669745,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8QwJAAEAGzssKCAABPm3geMfTAbvSW4ztAAAAAKACOQjs9gAAAgQFtAQCCAoATM\/vAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiNAABAGP78+beB4CggAAQG7x9MtpHMS0luM7lAS\/\/+9VAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0OlAAEAGQPgKCAABPm3geMfSAbvlsh8IGk3g+VAQOQiETgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABn0OpAAEAGQLgKCAABPm3geMfSAbvlsh8IGk3g+VAYOQh66wAAFgMBADoBAAA2AwE1744IWto6M0QCtsjP9fOG23xHxlWSJd969XnKXp6XHQAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1444570669736,"flow_last_seen":1444570669760,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiRAABAGP74+beB4CggAAQG7x9IaTeD55bIfR1AQ\/\/+9FwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoQwNAAEAGzt4KCAABPm3geMfTAbvSW4zuLaRzE1AQOQiETQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":36,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnQwRAAEAGzp4KCAABPm3geMfTAbvSW4zuLaRzE1AYOQhN4wAAFgMBADoBAAA2AwE4pMre7\/gDNHFUYUtdH4I+oIdCvO8Q22rK5cuvc6RHAwAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":36,"flow_packet_id":4,"flow_first_seen":1444570669745,"flow_last_seen":1444570669762,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":36,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570669,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiVAABAGP70+beB4CggAAQG7x9MtpHMT0luNLVAQ\/\/+9FgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAotG1AAEAGXXQKCAABPm3geMe+AbssX3Cw06CPkFAROQiEIgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAiZAABAGP7w+beB4CggAAQG7x77ToI+QLF9wsVAQ\/\/+9KgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAidAABAGP7s+beB4CggAAQG7x77ToI+QLF9wsVAR\/\/+9KQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo2ZhAAEAGOEkKCAABPm3geMe\/Abvolh3LF2nidVAROQiEIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAihAABAGP7o+beB4CggAAQG7x78XaeJ16JYdzFAQ\/\/+9KQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAilAABAGP7k+beB4CggAAQG7x78XaeJ16JYdzFAR\/\/+9KAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5647{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1444570669736,"flow_last_seen":1444570670676,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo0OtAAEAGQPYKCAABPm3geMfSAbvlsh9HGk3wPFAQTE9hhQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAitAABAGP7c+beB4CggAAQG7x9IaTfA85bIgjVAQ\/\/+sjgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5648{"flow_id":36,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":36,"flow_packet_id":6,"flow_first_seen":1444570669745,"flow_last_seen":1444570670730,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":36,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoQwVAAEAGztwKCAABPm3geMfTAbvSW40tLaSCVlAQTE9hhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0830{"flow_id":36,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":380,"pkt":"ABoRAAACABoRAAABCABFAAFuQwZAAEAGzZUKCAABPm3geMfTAbvSW40tLaSCVlAYTE+2\/AAAFgMBAQYQAAECAQCWt0bEGBDiaW3wkbA3O9F3Ig4uidDxRApMSk8+hNZu3nn\/2GHToLO1hDLhQlAUkWRhyw0t1zVFXdxxdkjFz+5r0lkpZkHUszIurP+R8\/miZN4KjtkgXpMas\/So\/iPlXIMc\/yjT4WQBt4gtBtYhmFSppzsDmDIIk7mvfZxHXTD23VSjluF2QBfO2IWqMrFMUF5kLARyx4G2\/8ZjdNECapgOq9cdJsgD5BlcY2c+dHng19\/mYZA2BSxtQAyOT54Ghdr77MsgQiN2Llu3v+LZWpM+Zbvdg4hXwk\/BShSPoskiySh9VLMF\/nq+MGssfcSvrol76Im5W9PG\/DQIxfUY9d4FFAMBAAEBFgMBADBxLGEx28Qy59TtwMgeCKhDXvKFs7ZrkHvDe4Wu\/kgdVZQLIXwlg8iFIVwJQqhI6Xs=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":36,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAi1AABAGP7U+beB4CggAAQG7x9MtpIJW0luOc1AQ\/\/+sjQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAi5AABAGP3k+beB4CggAAQG7x9IaTfA85bIgjVAY\/\/\/ChwAAFAMBAAEBFgMBADDsOSpGwysZgLXUvcn59lOokpI6TIpqM365H2l2HZLgmAARcdWx5lyGGQ9rOjKtJVA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1066{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":560,"pkt":"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","pkt_caplen":560,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAi9AABAGP7M+beB4CggAAQG7x9IaTfB35bIih1AQ\/\/+qWQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":36,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAjBAABAGP3c+beB4CggAAQG7x9MtpIJW0luOc1AY\/\/9uGgAAFAMBAAEBFgMBADBdzWnWTzyuBMRi2zzc66gSAy5g7XPTErjxTINaJOlvsADpNZn7OjrHQmUs4FUSGpo=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAjFAABAGP7E+beB4CggAAQG7x9IaTfB35bIkn1AQ\/\/+oQQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":136,"pkt":"ABoRAAACABoRAAABCABFAAB60O9AAEAGQKAKCAABPm3geMfSAbvlsiSfGk3wd1AYTE\/JnwAAQRtgofebUhQ0TKot8XqFZeG1RYspPyOid1saiWk7qIuvPViVWibpuK6cvb2tNhZuUhh8L+gyzduae0cRcP7spdGjOzXwjgpyQmzLwYQ9lj\/JpA==","pkt_caplen":136,"pkt_type":2048,"pkt_ipoffset":14}
+1027{"flow_id":36,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":36,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570670,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAjNAABAGP68+beB4CggAAQG7x9MtpIKR0luQTVAQ\/\/+qeAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0679{"flow_id":36,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570671,"pkt_len":272,"pkt":"ABoRAAACABoRAAABCABFAAECAjRAABAGPtQ+beB4CggAAQG7x9MtpIKR0luQTVAY\/\/\/rJAAAFwMBAKCEUhgKS7Ore4V4XA8IdFUR4Er1pvl9N7NYzUrhqEqujMkCBt+R8+2ApxunQLbKtNBJ8frcD2IKNtRomHDisv5N1FfXTiIF2dw6IwJazu6xz8Sd9iJy3puaVNpZiGX3bSd4UxrqDoDAiYTuOjZvvQvkxFi3mKSaoKyOk3zR\/ULK5zXQWWH0E74qa1ipQXdhN7aYZwSSWvuhhYGExQr7m8GaFwMBADA1J1QYl7kQR0+Pa+4n7lamQYXLA+LfemMg8fQ6Z4hBckTkoKi+8YFeNtjNLDUxh78=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":36,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570671,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoQwhAAEAGztkKCAABPm3geMfTAbvSW5BNLaSDa1AQatU+yQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1707{"flow_id":36,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570671,"pkt_len":1024,"pkt":"ABoRAAACABoRAAABCABFAAPyAjVAABAGO+M+beB4CggAAQG7x9MtpINr0luQTVAY\/\/+gngAAFwMBA4B4LQc11sgj5iAjgSB3smLHk7\/SenRjb8ZFufK1knTFHzViNUQ\/iWw\/BOftoBW9nu2wpcFh2HwgU90pvkNcoN3JCbeXg7zpP1ezlsV6QElTGlBhpUkmV46hyOlVhhnaJx1KI0dq7t9l2OweDBGK0PQn5LHPHqu3x3JwyzvWZe6xh\/rGhX21y1g9t7yynI49ZQ1uUFo+qHPBLxoGdUow0Nj+lk0BQmVemJO5h7c0sShigdmTKTicVuZqbHk\/pE38q1MzwYlWJWSLv2xA2GgCJqiuRlsay4my3w7o9Vi1Ji5WFF9W8QkwiGSI5ggoIDDBZWH3NmaA+lF8t3eiBjypw\/rWIh9A2GBa3astQstJfJ08\/f53WRAGsSNqvaLmfLY8ybTwelhl+r\/IsAm\/v+U9SALE6vcYTZzwtM7rC0Y4D6OKd5A2YZrYZr5N+9ozCULr\/LwYAYAzJil4Lo2Cf7apInyitpc\/u55LLzZ+QHjotatTnTmeP+cEBxnKpPddLlPdVCvBesENj6jodLYSANMsJbl8Ph9BrHzMFj4hWAUgN9EqjGPvfT3Ev+JIBaoKqTIsS4Jdxtn1gw4zM5eITulccgYHizb7hA1c+re\/xWy3E2bQxzCqjtlptwHqBhwzh7BEAmwlvt6\/QPrJoU3B4ajbDa\/JBst1RbCrRoJRTmMwBmupRBWsPxCdvz\/ONIep8rncQophQvNN00cswoHha82TMfvBV9GWfAU4JOqknc7fIUig\/Fq9FzM5SR3AIldNixb6m6k2BJgbP7Pdm3XQ4rykU\/h3IUpB9cU2BiQB2JGXhl8vAT2MALS8szaGnalxePhZ\/bkp0IVj3CB8leJca9JvvjCdvmJEhQQ8JNLfy62IYtvdHh\/WvnJCUwTiJB+3rdbOgNDbnIS6FrKbcF5eLcmQYyfDnGpnmjiopAp5z+p+nganqLY6s2IodIyKWKoxKXHcUIGTrSy1e1bInxGzE0NHM7L5ZVjjKw4KM00glRLxFzT1YXy9uo0vKe\/nyD3jl4ArmoCsPvapZZ1+b4t13d2fXbhrcNpDAY94KdF\/pnb5WAkfCD3uJkZNtnnwz2iPpqszCJeS7SCcEyTkm6h8bhd95c1TdZd53H96TlF53rKj9WkZ3aJQmix4oXCwZwJkfRd\/Y7hdGD+ihyVfdmDmYW3M4SNv8CCf+KYV74TZla\/OWJ0vmxcDAQBA7bK+SOd8Bp2bc2MJqkBhbTMVnwLf1cGaM\/0unjO3v+yruYCgeAeC00Ow3WKSsgss2LTGvZ1dgWooudhb7lqK0g==","pkt_caplen":1024,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1444570672215,"flow_last_seen":1444570672215,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8MYhAAEAGVYAKCAABQERpZ6HLAbsAQeF1AAAAAKACOQgEvgAAAgQFtAQCCAoATND9AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAjpAABAGtOJARGlnCggAAQG7ocv\/vh6KAEHhdlAS\/\/9YlwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoMYlAAEAGVZMKCAABQERpZ6HLAbsAQeF2\/74ei1AQOQgfkAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnMYpAAEAGVVMKCAABQERpZ6HLAbsAQeF2\/74ei1AYOQieegAAFgMBADoBAAA2AwGjqRN4oMmUAvXJWDJ5WPEL71jxOoo9r1VB6+4PEHNUEQAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0727{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":37,"flow_packet_id":4,"flow_first_seen":1444570672215,"flow_last_seen":1444570672269,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAjtAABAGtOFARGlnCggAAQG7ocv\/vh6LAEHhtVAQ\/\/9YWQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5683{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":3993,"pkt":"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","pkt_caplen":3993,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":37,"flow_packet_id":6,"flow_first_seen":1444570672215,"flow_last_seen":1444570672626,"flow_tot_l4_data_len":4142,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":690,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0382{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoMYtAAEAGVZEKCAABQERpZ6HLAbsAQeG1\/74t7lAQTO\/8BgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAkBAABAGtNxARGlnCggAAQG7ocv\/vi3uAEHi+1AQ\/\/9HsAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAkZAABAGtJtARGlnCggAAQG7ocv\/vi3uAEHi+1AY\/\/8QwwAAFAMBAAEBFgMBADAXuYqN3r\/lP5Onr2QhzEQgXpkrMo+S3MYe2nzwVNVN61+q9n9loUk8jnHEFPT0Emc=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1095{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":576,"pkt":"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","pkt_caplen":576,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570672,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAkdAABAGtNVARGlnCggAAQG7ocv\/vi4pAEHlBVAQ\/\/9FawAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3845{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570673,"pkt_len":2608,"pkt":"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","pkt_caplen":2608,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570673,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoMY5AAEAGVY4KCAABQERpZ6HLAbsAQeUF\/744I1AUa7XPtwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1444570674487,"flow_last_seen":1444570674487,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570674,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8CB5AAEAGejQKCAABrfMAbtlxAbui3tn8AAAAAKACOQgsWAAAAgQFtAQCCAoATNHiAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570674,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAklAABAGsB2t8wBuCggAAQG72XFdISYDot7Z\/VAS\/\/8cOwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570674,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCB9AAEAGekcKCAABrfMAbtlxAbui3tn9XSEmBFAQOQjjMwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0634{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570674,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADjCCBAAEAGeYsKCAABrfMAbtlxAbui3tn9XSEmBFAYOQgu1wAAFgMBALYBAACyAwF10XyjAsAxicBbHHpuW8T0LZqOxOyDfFNTQx6hPM8mVgAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1444570674487,"flow_last_seen":1444570674600,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570674,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAkpAABAGsByt8wBuCggAAQG72XFdISYEot7auFAQ\/\/8bgQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5648{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":38,"flow_packet_id":6,"flow_first_seen":1444570674487,"flow_last_seen":1444570675110,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0381{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":676,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCCFAAEAGekUKCAABrfMAbtlxAbui3tq4XSE1R1AQTE+\/7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":678,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAlBAABAGsBat8wBuCggAAQG72XFdITVHot7b\/lAQ\/\/8K+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAlVAABAGr9at8wBuCggAAQG72XFdITVHot7b\/lAY\/\/93FwAAFAMBAAEBFgMBADCghUp\/lA1a1GFcU6oj+Em7jhDJfnlQ+ZearHR0Tlkv98sGzAjtkikwF1kr96TPq7k=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCCNAAEAGekMKCAABrfMAbtlxAbui3tv+XSE1glAQTE++bQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":691,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":692,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAldAABAGsA+t8wBuCggAAQG72XFdITWCot7eFlAQ\/\/8IpQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":694,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":152,"pkt":"ABoRAAACABoRAAABCABFAACKCCVAAEAGed8KCAABrfMAbtlxAbui3t4WXSE1glAYTE\/UtQAAmHVEYbuqOyCrxFJu6n22Og77DMpB20n4QmoYUJth1X+w3z6u9DIZFjIBQ2eHYidmx2WtmuC+Q+hUoiqkcZsL5JNP7gopOvzrK7EqC7vXk\/VlCpBDIvGFCmQRzVhLLhBg0rE=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":695,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAllAABAGsA2t8wBuCggAAQG72XFdITWCot7eeFAQ\/\/8IQwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1444570675941,"flow_last_seen":1444570675941,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51833,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":736,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8SaRAAEAGwwMKCAABPm3lnsp5AbteGJvVAAAAAKACOQhIBAAAAgQFtAQCCAoATNJxAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":737,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAm5AABAGOk4+beWeCggAAQG7ynmh52QqXhib1lAS\/\/+1iAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":739,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoSaVAAEAGwxYKCAABPm3lnsp5AbteGJvWoedkK1AQOQh8gQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADjSaZAAEAGwloKCAABPm3lnsp5AbteGJvWoedkK1AYOQjWkQAAFgMBALYBAACyAwEHq+X4OM58pZkulReYFtDW\/RDKtfBfQqv2TASThhAOCAAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":740,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":39,"flow_packet_id":4,"flow_first_seen":1444570675941,"flow_last_seen":1444570675997,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51833,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":741,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570675,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAnBAABAGOkw+beWeCggAAQG7ynmh52QrXhickVAQ\/\/+0zgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1444570679512,"flow_last_seen":1444570679512,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570679,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8dLdAAEAGDZsKCAABrfMAbtl1Abugj6duAAAAAKACOQhfOgAAAgQFtAQCCAoATNPZAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570679,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAphAABAGr86t8wBuCggAAQG72XVfcFiRoI+nb1AS\/\/8cNwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":823,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570679,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLhAAEAGDa4KCAABrfMAbtl1Abugj6dvX3BYklAQOQjjLwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570679,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADjdLlAAEAGDPIKCAABrfMAbtl1Abugj6dvX3BYklAYOQi67gAAFgMBALYBAACyAwE3afvT656oHHNlOl3\/S5vQra3qbarVhBS8TCkcXn\/60QAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":40,"flow_packet_id":4,"flow_first_seen":1444570679512,"flow_last_seen":1444570679526,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0382{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":825,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570679,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAplAABAGr82t8wBuCggAAQG72XVfcFiSoI+oKlAQ\/\/8bfQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2249{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":1434,"pkt":"ABoRAAACABoRAAABCABFAAWMAqNAABAGql+t8wBuCggAAQG72XVfcFiSoI+oKlAY\/\/9YtQAAFgMBDz4CAAAtAwFWGmIhpdMClixxGH1P3IzNWjym1oz\/Vm0EP84\/FROoyAAANQAABf8BAAEACwAPBQAPAgAE6TCCBOUwggPNoAMCAQICECl0ianUHkm+YfeBaUbmIfMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNTA0MTAwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHcxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMREwDwYDVQQHDAhTYW4gSm9zZTEcMBoGA1UECgwTQ2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECwwDQ1NHMRQwEgYDVQQDDAsqLndlYmV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ14yGFLwwhhZyxegl+wYbyZZp5q4NComRXAz+k8ibNrPp+x46qW\/Dt++MdupJ8y605K5KTQVb24unmPF+pZq1par5YBKMjJrJTW2aAI1MtQvRzSDCNhdWyxiP6SkVBm6ZOcLwL+kijn\/nCot5orO1NrHHFG\/HBcSk1aaetoitrjs5BWuMxdYuIZvzSoyViVbo\/w\/LUKXdD0rlOcFmOxtcf+VKb7w1eyku07Jp94m\/\/ILLQS\/jy7ymRyfGFnPLtNqBmUKFg+uAD7JcHZiy8g6quVEhEZdm3O+tUR2wYZ5in9yKcrxqoHwhW0O4X2\/rJ4mNDvikIgaWiSNW7eIoh0NWECAwEAAaOCAWQwggFgMBYGA1UdEQQPMA2CCyoud2ViZXguY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAFNF1YB0fCkEyxRc1VQO7NUZao+PnZuavjgeTnyTKmHl\/4Zxh1Xg\/M\/f\/RHSrGrgUW2xaSZN\/Dwt2hqMtIi\/b\/AgOFeqNKmMxH3nWxf6f1Lr7QoTvApLQGqjeuIT3U6AiRMt4Ksgfx7+1Vbil1AaILo859VgXSMgVJTv4QpUpzg\/EKtUqPwMwq8PvwoTjlewyOt9YbCxNTO91JkKsYuwm7uUeU7Fx+r+rP+wgDwYVbbsUwQXAbj7QOj3dkPLzn+gcrhK1ZlgFf7Ti34xrqj7jNiaMc0dYh\/Ns3KCHMTs5rVCGLIk7lEgovwLDbJtuuQTlvaHoeZIGVPqROi5Bl\/WxAgAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNV","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLpAAEAGDawKCAABrfMAbtl1Abugj6gqX3Bd9lAQQLDVaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+3785{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":2581,"pkt":"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","pkt_caplen":2581,"pkt_type":2048,"pkt_ipoffset":14}
+1107{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":40,"flow_packet_id":8,"flow_first_seen":1444570679512,"flow_last_seen":1444570680091,"flow_tot_l4_data_len":4274,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":534,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0380{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodLtAAEAGDasKCAABrfMAbtl1Abugj6gqX3Bn1VAQTvi9QQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0825{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":40,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAqVAABAGr8Gt8wBuCggAAQG72XVfcGfVoI+pcFAQ\/\/8K9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":40,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAqhAABAGr4Ot8wBuCggAAQG72XVfcGfVoI+pcFAY\/\/93dgAAFAMBAAEBFgMBADALcU1oe0d5RtR7cNKDPq4NltIuZmXFbV6VUV+\/cJzZOzSP0AsZSNmmwnfMSuvzJa4=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":40,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAodL1AAEAGDakKCAABrfMAbtl1Abugj6lwX3BoEFAQTvi7wAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1112{"flow_id":40,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":40,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570680,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAqlAABAGr72t8wBuCggAAQG72XVfcGgQoI+riFAQ\/\/8IoQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":36,"flow_packet_id":255,"flow_first_seen":1444570669745,"flow_last_seen":1444570689689,"flow_tot_l4_data_len":139862,"flow_min_l4_data_len":20,"flow_max_l4_data_len":17189,"flow_avg_l4_data_len":548,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0381{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570690,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoSadAAEAGwxQKCAABPm3lnsp5AbteGJyRoedkK1AROQh7xQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570690,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAvNAABAGOck+beWeCggAAQG7ynmh52QrXhicklAQ\/\/+0zQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570690,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAvRAABAGOcg+beWeCggAAQG7ynmh52QrXhicklAR\/\/+0zAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1444570693238,"flow_last_seen":1444570693238,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8LOJAAEAGVXAKCAABrfMAbtl3AbsPD\/XWAAAAAKACOQic9QAAAgQFtAQCCAoATNk0AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAxBAABAGr1at8wBuCggAAQG72Xfw8AopDw\/111AS\/\/8cNQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoLONAAEAGVYMKCAABrfMAbtl3AbsPD\/XX8PAKKlAQOQjjLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADjLORAAEAGVMcKCAABrfMAbtl3AbsPD\/XX8PAKKlAYOQjZZAAAFgMBALYBAACyAwFP3AbhLhTWOx1T12yIPxjjHHkav2YDbjvETRMnoVMoSgAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1444570693238,"flow_last_seen":1444570693297,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0384{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAxJAABAGr1St8wBuCggAAQG72Xfw8AoqDw\/2klAQ\/\/8bewAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5649{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1074,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":41,"flow_packet_id":6,"flow_first_seen":1444570693238,"flow_last_seen":1444570693766,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0383{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoLOVAAEAGVYEKCAABrfMAbtl3AbsPD\/aS8PAZbVAQTE+\/6AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0829{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAxlAABAGr02t8wBuCggAAQG72Xfw8BltDw\/32FAQ\/\/8K8gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjAx5AABAGrw2t8wBuCggAAQG72Xfw8BltDw\/32FAY\/\/+MXgAAFAMBAAEBFgMBADC935n5tIavtZmC1WJrNbcvz7sl9ycYSVtXL6eVUR4plQ477eLANfnou+UqI3XbCgE=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoLOdAAEAGVX8KCAABrfMAbtl3AbsPD\/fY8PAZqFAQTE++ZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1114{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":590,"pkt":"ABoRAAACABoRAAABCABFAAJALOhAAEAGU2YKCAABrfMAbtl3AbsPD\/fY8PAZqFAQTE8M5gAAFwMBACAxlDfUShcR70wyyDFz+wiI6vyuTLYypBLLw3HBewgCLBcDAQJQku8\/kvXvPqTpbiY\/FRQbcJA\/R5VugLi4MZtLqnz+a\/Ms0eEg0o27ej+It7\/jhszMs66BuY1bizcKvxQdNqsYiN3+BWkioGVldbNcLAv1EzgkJyizsls77ihwLLZBXSiRScMIFaHeS1YE0oaHrfs5dVuj2CWiOAMkDNXeCGWejgdY+GNMqQBAGDlQj6J3XpnEis41VrSLk9jBpPzBsRkV385JlIgBxQV5\/8vmtQYQ9o+IpVY3qlXavIUcfd11xeycAjzOTTs+0O3YKoZ93R4t6iXm8imihXZMW40BSdTo2eJrf2\/WyBnlgQLLJVsWo6W3xUruUugdPEng5fp\/nqtwN7xehvv5YLr2VykNbfLgUTFLbLOHjNj\/FSrtKxuH9LI6CKPA3B7oFvIlpyLTEYqd2cWnxOAVAVGeELd9IgSHbjP\/sruTMy4D35WiLW5DPImnqc2xDoNdAzMZD8uROgEtEbPCPjRFPNwZQj3EcRCX\/VxgYGm05sJ18yWSnsfUZu96VSmuDliMJPzcQzD6YQmmMyZ\/bHswkHLgBHUGcN+3aUY3QMO4aMq1Dx5aIbYR\/OoUL4XPDumkSGqcXVHHeZ8Ij2kdfKSGZsDCH0Mv36FbLucrtOJtIrntnWTwQOVuF9wumIa8C7gn8cWZKJISyzI=","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAx9AABAGr0et8wBuCggAAQG72Xfw8BmoDw\/58FAQ\/\/8InwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1091,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":152,"pkt":"ABoRAAACABoRAAABCABFAACKLOlAAEAGVRsKCAABrfMAbtl3AbsPD\/nw8PAZqFAYTE9+QQAAYMNllA45YOg7s\/V3FNa7TcKbtucZ8mvaPzrduR8d4GOdPqB\/Vc6yLiClDb4SGaF+XNqtCApbbDmZaYfIgYFlBwQ7D6G\/lqVhg2mTSJR1UkuX0hBLl1qumaY21EsSl3Eo2JI=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1092,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAyBAABAGr0at8wBuCggAAQG72Xfw8BmoDw\/6UlAQ\/\/8IPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1444570694561,"flow_last_seen":1444570694561,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51839,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA802lAAEAGOT4KCAABPm3lnsp\/AbubwQrQAAAAAKACOQiUEgAAAgQFtAQCCAoATNm5AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAytAABAGOZE+beWeCggAAQG7yn9kPvUvm8EK0VAS\/\/+1ggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo02pAAEAGOVEKCAABPm3lnsp\/AbubwQrRZD71MFAQOQh8ewAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADj02tAAEAGOJUKCAABPm3lnsp\/AbubwQrRZD71MFAYOQigvgAAFgMBALYBAACyAwGiAbZfNeJzK4ep+8FP1757rfliUbGs5JPyfYBIT\/aU1QAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":42,"flow_packet_id":4,"flow_first_seen":1444570694561,"flow_last_seen":1444570694614,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51839,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAyxAABAGOZA+beWeCggAAQG7yn9kPvUwm8ELjFAQ\/\/+0yAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":13,"flow_packet_id":16,"flow_first_seen":1444570636180,"flow_last_seen":1444570636961,"flow_tot_l4_data_len":7424,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":464,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.231.3","src_port":45814,"dst_port":443,"l4_proto":"tcp"}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":9,"flow_packet_id":8,"flow_first_seen":1444570636151,"flow_last_seen":1444570638237,"flow_tot_l4_data_len":243,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41726,"dst_port":443,"l4_proto":"tcp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1444570631058,"flow_last_seen":1444570631059,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"107.20.242.44","src_port":59447,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1444570631058,"flow_last_seen":1444570631059,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"107.20.242.44","src_port":59447,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1444570630272,"flow_last_seen":1444570630272,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"185.63.147.10","src_port":54651,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1444570630272,"flow_last_seen":1444570630272,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":20,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":24,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"185.63.147.10","src_port":54651,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":7,"flow_packet_id":14,"flow_first_seen":1444570632436,"flow_last_seen":1444570633205,"flow_tot_l4_data_len":4726,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2923,"flow_avg_l4_data_len":337,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"23.44.253.243","src_port":49048,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":6,"flow_packet_id":26,"flow_first_seen":1444570631722,"flow_last_seen":1444570633204,"flow_tot_l4_data_len":25500,"flow_min_l4_data_len":20,"flow_max_l4_data_len":8414,"flow_avg_l4_data_len":980,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41354,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":8,"flow_packet_id":38,"flow_first_seen":1444570633357,"flow_last_seen":1444570635974,"flow_tot_l4_data_len":41190,"flow_min_l4_data_len":20,"flow_max_l4_data_len":8867,"flow_avg_l4_data_len":1083,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41358,"dst_port":443,"l4_proto":"tcp"}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1444570699074,"flow_last_seen":1444570699074,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8OjpAAEAGn3oKCAABNvEgDrSDAbvRQeFHAAAAAKACOQhpXwAAAgQFtAQCCAoATNt9AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2VAABAGBmQ28SAOCggAAQG7tIMuvh640UHhSFAS\/\/+YiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":43,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOjtAAEAGn40KCAABNvEgDrSDAbvRQeFILr4euVAQOQhfhAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_id":43,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEAOjxAAEAGnrQKCAABNvEgDrSDAbvRQeFILr4euVAYOQhpTwAAFgMBANMBAADPAwFWGmZLJysQyU55el0fA2qHtq46\/QtJIPLxFEGaenjG8gAARgAEAAUALwA1wALABMAFwAzADsAPwAfACcAKwBHAE8AUADMAOQAyADgACsADwA3ACMASABYAEwAJABUAEgADAAgAFAARAP8BAABgAAAAGAAWAAATYXBpLmNyaXR0ZXJjaXNtLmNvbQALAAQDAAECAAoANAAyAA4ADQAZAAsADAAYAAkACgAWABcACAAGAAcAFAAVAAQABQASABMAAQACAAMADwAQABEAIwAA","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":43,"flow_packet_id":4,"flow_first_seen":1444570699074,"flow_last_seen":1444570699079,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"api.crittercism.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":43,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2ZAABAGBmM28SAOCggAAQG7tIMuvh650UHiIFAQ\/\/+XtAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1444570699096,"flow_last_seen":1444570699096,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59756,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8731AAEAGBawKCAABTi7tW+lsAFBr3TT9AAAAAKACOQhjAgAAAgQFtAQCCAoATNuAAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2dAABAGIddOLu1bCggAAQBQ6WyUIssCa900\/lAS\/\/+AggAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1444570699101,"flow_last_seen":1444570699101,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59757,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8ZgxAAEAGjx0KCAABTi7tW+ltAFASyr2MAAAAAKACOQgzhQAAAgQFtAQCCAoATNuAAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2hAABAGIdZOLu1bCggAAQBQ6W3tNUJzEsq9jVAS\/\/+AgQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo735AAEAGBb8KCAABTi7tW+lsAFBr3TT+lCLLA1AQOQhHewAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoZg1AAEAGjzAKCAABTi7tW+ltAFASyr2N7TVCdFAQOQhHegAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1099{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1444570699096,"flow_last_seen":1444570699201,"flow_tot_l4_data_len":636,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":159,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59756,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"cp.pushwoosh.com","url":"cp.pushwoosh.com\/json\/1.3\/registerDevice","code":0,"content_type":"application\/json","user_agent":"Dalvik\/1.6.0 (Linux; U; Android 4.4.2; LG-D855 Build\/KVT49L.A1412087656)"}}
+0383{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2lAABAGIdVOLu1bCggAAQBQ6WyUIssDa903FlAQ\/\/9+awAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":144,"pkt":"ABoRAAACABoRAAABCABFAACC74BAAEAGBWMKCAABTi7tW+lsAFBr3TcWlCLLA1AYOQj1VQAAeGdkd3RHcl93ZzFudyIsImxhbmd1YWdlIjoiZW4iLCJhbmRyb2lkX3BhY2thZ2UiOiJjb20uaGFhcmV0eiIsImh3aWQiOiJhMzc1ZGI1N2VmNjJkMWM1In19","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2pAABAGIdROLu1bCggAAQBQ6WyUIssDa903cFAQ\/\/9+EQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0831{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":388,"pkt":"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","pkt_caplen":388,"pkt_type":2048,"pkt_ipoffset":14}
+0734{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":45,"flow_packet_id":4,"flow_first_seen":1444570699101,"flow_last_seen":1444570699212,"flow_tot_l4_data_len":434,"flow_min_l4_data_len":20,"flow_max_l4_data_len":354,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59757,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"cp.pushwoosh.com","url":"cp.pushwoosh.com\/json\/1.3\/applicationOpen","code":0,"content_type":"application\/json","user_agent":"Dalvik\/1.6.0 (Linux; U; Android 4.4.2; LG-D855 Build\/KVT49L.A1412087656)"}}
+0384{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA2tAABAGIdNOLu1bCggAAQBQ6W3tNUJ0Esq+21AQ\/\/9\/NAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1050{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":551,"pkt":"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","pkt_caplen":551,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo74FAAEAGBbwKCAABTi7tW+lsAFBr3TdwlCLM9FAQPLg\/aAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1050{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":551,"pkt":"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","pkt_caplen":551,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoZg9AAEAGjy4KCAABTi7tW+ltAFASyr7b7TVEZVAQPLhAiwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2248{"flow_id":43,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":1436,"pkt":"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","pkt_caplen":1436,"pkt_type":2048,"pkt_ipoffset":14}
+0791{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1251,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":43,"flow_packet_id":6,"flow_first_seen":1444570699074,"flow_last_seen":1444570699636,"flow_tot_l4_data_len":1738,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1402,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"api.crittercism.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"c800cea031c10ffe47e1d72c9264577a","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0381{"flow_id":43,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOj1AAEAGn4sKCAABNvEgDrSDAbvRQeIgLr4kH1AQQMhRhgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":43,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":120,"pkt":"ABoRAAACABoRAAABCABFAABqA29AABAGBhg28SAOCggAAQG7tIMuviQf0UHiIFAY\/\/8nAwAALf4SsU2uf+VDXLMYtuAd7dAVY\/\/f85YQR3m3nhkc31shlW7dCqbyxdX2SoNIiptQr2Xh1S2KleiqoE0ylHUWfmYp","pkt_caplen":120,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":43,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOj5AAEAGn4oKCAABNvEgDrSDAbvRQeIgLr4kYVAQQMhRRAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":43,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":1502,"pkt":"ABoRAAACABoRAAABCABFAAXQA3BAABAGALE28SAOCggAAQG7tIMuviRh0UHiIFAY\/\/+2PgAAAAYMMIIGCDCCA\/CgAwIBAgIQKy5u6tl1NmwUim7bo3yMBzANBgkqhkiG9w0BAQwFADCBhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMjEyMDAwMDAwWhcNMjkwMjExMjM1OTU5WjCBkDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNVBAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7CAhnhoFmk6zg1jSz9AdDTScBkxwtiBUUWOqigwAwCfx3M28ShbXcDow+G+eMGnD4LgYqbSRutA776S9uMIO3Vzl5ljj4Nr0zCsLdFXlIvNN5IJGS0Qa4Al\/e+Z96e0HqnU4A7fK31llVvl0cKfIWLIpeNs4TgllfQcBhglo\/uLQeTnaG6ytHNe+nEKpooIZFNb5JPJaXyejXdJtxGpdCsWTWM\/06RQ1A\/WZMebFEh7lgUq\/51UHg+TLAchhP6a5i84DuUHoVS3AOTJBhuyydRReZw3iVDpA3hSqXttn7IzW3uLh0nc13cRTCAquOyQQuvvUSH2rnlG51\/ruWFgqUCAwEAAaOCAWUwggFhMB8GA1UdIwQYMBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSQr2o6lFoL2JDqElZz30O0Oija5zAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH\/BAgwBgEB\/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0gBBQwEjAGBgRVHSAAMAgGBmeBDAECATBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggrBgEFBQcBAQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAE4rdk+SHGI2ibp3wScF9BzWRJ2pmj6q1WZmAT7qSeaiNbz69t2Vjpk1mA42GHWx3d1Qcnyu3HeIzg\/3kCDKo2cuH1Z\/e+FE6kKVxF0NAVBGFfKBiVlsit2M8RKhjTpCipj4SzR7JzsItG8kO3KdY3RYPBpsP0\/HEZrIqPW1N+8QRcZs2eBelSaz662jue5\/DJpmNXMyYE7l3YphLG5SEXdoltMYdVEVABt0iN3hxzgEQyjpFv3ZBdRdRydg1vs4O2xyopT4Qhrf7W8GjEXCBgCq5Ojc2bXhc3js9iPc0d1sjhqPpepUfJa3w\/5Vjo1JXvxku88+vZbrac2\/4EjxYoIQ5QxGV\/Iz2tDIY+3GH5QFlkoakdH368+PUq4NCNk+qKBR6cGHdNXJ93SrLlP7u3r7l+L4HyaPs9Kg4DdbKDsx5Q5XLVq4rXmsXiBmGqW5prU5wfWYQ\/\/u+aen\/e7KJD2AFsQXj4rBYKEMrltDR5FL1ZoXX\/nUh8HCjLfn4g8wGTeGrODcQgPmlKidrv0PJFGUzpII0fxQ8AM=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":43,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1256,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOj9AAEAGn4kKCAABNvEgDrSDAbvRQeIgLr4qCVAQTzA9NAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2253{"flow_id":43,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":1436,"pkt":"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","pkt_caplen":1436,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":43,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOkBAAEAGn4gKCAABNvEgDrSDAbvRQeIgLr4vb1AQWoAsfgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2024{"flow_id":43,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":1272,"pkt":"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","pkt_caplen":1272,"pkt_type":2048,"pkt_ipoffset":14}
+1130{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":43,"flow_packet_id":14,"flow_first_seen":1444570699074,"flow_last_seen":1444570699643,"flow_tot_l4_data_len":6012,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":429,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Amazon","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"api.crittercism.com","server_names":"*.crittercism.com,crittercism.com","ja3":"54ae5fcb0159e2ddf6a50e149221c7c7","ja3s":"c800cea031c10ffe47e1d72c9264577a","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5","issuerDN":"C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA","issuerDN":"OU=Domain Control Validated, OU=PositiveSSL Wildcard, CN=*.crittercism.com","fingerprint":"68:8B:FC:77:1E:CA:80:33:0C:A9:0E:29:A6:E4:0D:FC:3A:AE:43:18"}}
+0382{"flow_id":43,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoOkFAAEAGn4cKCAABNvEgDrSDAbvRQeIgLr40MVAQZdAcbAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoO9tAAEAGNl4KCAABUEpuRILnAbv7vABcBEQAfVAROQgouAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA3RAABAGnsVQSm5ECggAAQG7gucERAB9+7wAXVAQ\/\/9hwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA3VAABAGnsRQSm5ECggAAQG7gucERAB9+7wAXVAR\/\/9hvwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/smlAAEAGv7gKCAABUEpuRILoAbtZhnl8pnmKQlAYPLgY5AAAFQMBABJgV68LS6YLMRfC0ydf82IUCbU=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA3ZAABAGnsNQSm5ECggAAQG7guimeYpCWYZ5k1AQ\/\/9exAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1444570699916,"flow_last_seen":1444570699916,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8M+lAAEAGPjwKCAABUEpuRIMPAbsBc+gmAAAAAKACOQj74QAAAgQFtAQCCAoATNvPAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA3lAABAGnsBQSm5ECggAAQG7gw\/+jBfZAXPoJ1AS\/\/9icAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoM+pAAEAGPk8KCAABUEpuRIMPAbsBc+gn\/owX2lAQOQgpaQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0677{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEAM+tAAEAGPXYKCAABUEpuRIMPAbsBc+gn\/owX2lAYOQhMegAAFgMBANMBAADPAwFWGmZL3uOMxVToaE\/p7S\/f3l0TPSF72MmK+MgBnG9FXiBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":46,"flow_packet_id":4,"flow_first_seen":1444570699916,"flow_last_seen":1444570699968,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0385{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570699,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA3pAABAGnr9QSm5ECggAAQG7gw\/+jBfaAXPo\/1AQ\/\/9hmQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":46,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpA35AABAGnjpQSm5ECggAAQG7gw\/+jBfaAXPo\/1AY\/\/+wJAAAFgMBAFECAABNAwFWGmZs4HEvkRp5CPDyrBD1d5FN0QkfcyNSvyMimX2MYiBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIHCqMV4qXgoAjYY8C2uGvdRpugsaOBkKyyR+wqee4vc5","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":46,"flow_packet_id":6,"flow_first_seen":1444570699916,"flow_last_seen":1444570700123,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0383{"flow_id":46,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoM+xAAEAGPk0KCAABUEpuRIMPAbsBc+j\/\/owYW1AQPLgkYAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0445{"flow_id":46,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTM+1AAEAGPiEKCAABUEpuRIMPAbsBc+j\/\/owYW1AYPLii3QAAFAMBAAEBFgMBACD\/OJPkF4mrRi\/eVp7fdXJ6ptt9f9Xyrl80jGyqqpclXg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":46,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA39AABAGnrpQSm5ECggAAQG7gw\/+jBhbAXPpKlAQ\/\/9g7QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":46,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":590,"pkt":"ABoRAAACABoRAAABCABFAAJAM+5AAEAGPDMKCAABUEpuRIMPAbsBc+kq\/owYW1AQPLjFzgAAFwMBAmrEU3DVRRBdOd5WIyfCWL6nzsGZcp3JQiva1MV5hzd4ZmEtFZys\/w\/ZU92kckbeuXwCK5aGZy7PaS5M+TD9rJcR6H8lWZOmSicofoKnn1zO\/jmW\/pVSqTxIy\/rAM4s8t+R\/5F77clEjVDywx4tecWJ5xFwXkafDOod4JZm4AVNTcvJNx4nJZY1fnNGMQvfr4xlOkMlOX24Ykk9oTiSq1UwcO\/Jnu6sNuo8111gNOXDOzA5H5OilWWTqXkkdcttiAaL88OizbMBazen1v2BZMg5kAxQO4I6gXbCiBklfTkoALV13U7zCbdnpOSHdsubc8lf5lUO4YVIvTw2EZDDz7q21iFNStBSP4WACdQL8nhxJfN+x6Tq9nqEQBqFMWxBB0mnUAUiv5jYHHXde2X\/+9T00KIXLsUxpjlbbesKcFyqgZvk55INrBFkDS6WeCT20fMg6Z1vtiKqKjNMzrEk3B1YM+8anVWdy74SO5zBpnRc54ECb\/dKsaOy7mAdM4noLqPw0YkPe5chvJ6VuntRAhh5aHisEVTAoMnMaOrWH7fXukC52UUwi1xFEgoRZmyfjN4BWP\/IKEHDL+Zq5+ga2pr+ZKE9lyRwb+jZV2dyE3qRac88YSY229Cs8kMkiKQvNr70PZU8tNzqO3ogfumvuAeMiMURu83T+lYQ+8R9tsUfRQdHCeLWZ0CIujU1ladBlUw8AhrM=","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":46,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA4BAABAGnrlQSm5ECggAAQG7gw\/+jBhbAXPrQlAQ\/\/9e1QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0502{"flow_id":46,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":141,"pkt":"ABoRAAACABoRAAABCABFAAB\/M+9AAEAGPfMKCAABUEpuRIMPAbsBc+tC\/owYW1AYPLgRbAAAOvdJAaqG3v8G7DijlxBsXC6vASyBm49VkiLQDtHbeo2dXeCs1Fc0ge6+3QjuNEfJ0Jb6c+XU6r0VVVOAUPHSzxoKQMmJ3LGf8YDaBFdfqaOwimG1R3lj","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":46,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA4FAABAGnrhQSm5ECggAAQG7gw\/+jBhbAXPrmVAQ\/\/9efgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0847{"flow_id":46,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":396,"pkt":"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","pkt_caplen":396,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":46,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/M\/BAAEAGPjIKCAABUEpuRIMPAbsBc+uZ\/owZsVAYQOj7XQAAFQMBABKp7I2jaOZ4+TM20Luobgcl8wI=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1444570700561,"flow_last_seen":1444570700561,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8d7ZAAEAG+m4KCAABUEpuRIMRAbsN6aumAAAAAKACOQgrqQAAAgQFtAQCCAoATNwQAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA4lAABAGnrBQSm5ECggAAQG7gxHyFlRZDemrp1AS\/\/9ibgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1444570700563,"flow_last_seen":1444570700563,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8CyVAAEAGZwAKCAABUEpuRIMSAbsmf9c3AAAAAKACOQjnfgAAAgQFtAQCCAoATNwSAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA4pAABAGnq9QSm5ECggAAQG7gxLZgCjIJn\/XOFAS\/\/9ibQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAod7dAAEAG+oEKCAABUEpuRIMRAbsN6aun8hZUWlAQOQgpZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCyZAAEAGZxMKCAABUEpuRIMSAbsmf9c42YAoyVAQOQgpZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEAd7hAAEAG+agKCAABUEpuRIMRAbsN6aun8hZUWlAYOQiQtAAAFgMBANMBAADPAwFWGmZMED4A5Nh17gO7bSCRkq5lMHNAG46Z4njZWjB\/3CBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":47,"flow_packet_id":4,"flow_first_seen":1444570700561,"flow_last_seen":1444570700615,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA4tAABAGnq5QSm5ECggAAQG7gxHyFlRaDemsf1AQ\/\/9hlwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEACydAAEAGZjoKCAABUEpuRIMSAbsmf9c42YAoyVAYOQhPIgAAFgMBANMBAADPAwFWGmZMUiXWlfiAkM3TLt+8m\/rKGRmXBLOAMg7wv4yATyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":48,"flow_packet_id":4,"flow_first_seen":1444570700563,"flow_last_seen":1444570700616,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0384{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA4xAABAGnq1QSm5ECggAAQG7gxLZgCjJJn\/YEFAQ\/\/9hlgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpA41AABAGnitQSm5ECggAAQG7gxHyFlRaDemsf1AY\/\/9HpQAAFgMBAFECAABNAwFWGmZsTnqkZUSl5NRIyBNUjvkakGhXOc4JYCEZKcugqyBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAINDUobyLhy7qsYKa7pQfKNg2A0RpIAZr2PLAT+0SGUWY","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":47,"flow_packet_id":6,"flow_first_seen":1444570700561,"flow_last_seen":1444570700767,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0562{"flow_id":48,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpA45AABAGnipQSm5ECggAAQG7gxLZgCjJJn\/YEFAY\/\/\/8lwAAFgMBAFECAABNAwFWGmZsSZTLsQmRXOA9BIEe6tiHL133I9vGXpYkt5mn6yBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIMu5\/8GpZLkiWJOsiQMnmQk6hTa1OPQQyiJKhIZUJS16","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":48,"flow_packet_id":6,"flow_first_seen":1444570700563,"flow_last_seen":1444570700767,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0382{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAod7lAAEAG+n8KCAABUEpuRIMRAbsN6ax\/8hZU21AQPLgkXgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":48,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoCyhAAEAGZxEKCAABUEpuRIMSAbsmf9gQ2YApSlAQPLgkXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTd7pAAEAG+lMKCAABUEpuRIMRAbsN6ax\/8hZU21AYPLhIQQAAFAMBAAEBFgMBACD134W\/9WTwbFl0+qIZUJuaE\/5h61bUXkkGmkRjO5HGhQ==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA49AABAGnqpQSm5ECggAAQG7gxHyFlTbDemsqlAQ\/\/9g6wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":48,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTCylAAEAGZuUKCAABUEpuRIMSAbsmf9gQ2YApSlAYPLiJLQAAFAMBAAEBFgMBACAzz40on5KcfTfUh6EtLECTgB0QHZDvi2oP1zjKJwOu1w==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":48,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA5BAABAGnqlQSm5ECggAAQG7gxLZgClKJn\/YO1AQ\/\/9g6gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":47,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA5FAABAGnqhQSm5ECggAAQG7gxHyFlTbDemuwlAQ\/\/9e0wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":47,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":64,"pkt":"ABoRAAACABoRAAABCABFAAAyd7xAAEAG+nIKCAABUEpuRIMRAbsN6a7C8hZU21AYPLg49gAAQnz+WXZF4FFRpQ==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":47,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA5JAABAGnqdQSm5ECggAAQG7gxHyFlTbDemuzFAQ\/\/9eyQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":48,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":48,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA5NAABAGnqZQSm5ECggAAQG7gxLZgClKJn\/aU1AQ\/\/9e0gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":48,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":87,"pkt":"ABoRAAACABoRAAABCABFAABJCytAAEAGZu0KCAABUEpuRIMSAbsmf9pT2YApSlAYPLgQYQAAuGdYWm7oI2Q6bD6DntdNebH3n8e+lelqwRDYEKhxMe2c","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":48,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570700,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA5RAABAGnqVQSm5ECggAAQG7gxLZgClKJn\/adFAQ\/\/9esQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1245{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570701,"pkt_len":698,"pkt":"ABoRAAACABoRAAABCABFAAKsAABAAEARgN0KCAABrBABS\/waE8QCmFVFUkVHSVNURVIgc2lwOjE3Mi4xNi4xLjc1O3RyYW5zcG9ydD1VRFAgU0lQLzIuMA0KVmlhOiBTSVAvMi4wL1VEUCAxMC4xMzMuMjA2LjQ3OjY0NTM4O2JyYW5jaD16OWhHNGJLLTUyNDI4Ny0xLS0tOThmOGEyMzc5MzA4YTlkNDtycG9ydA0KTWF4LUZvcndhcmRzOiA3MA0KQ29udGFjdDogPHNpcDo0NTE5MUAxMC4xMzMuMjA2LjQ3OjY0NTM4O3JpbnN0YW5jZT03YTQ2ZjFlMTI3MDJlN2ZiO3RyYW5zcG9ydD1VRFA+DQpUbzogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPg0KRnJvbTogPHNpcDo0NTE5MUAxNzIuMTYuMS43NTt0cmFuc3BvcnQ9VURQPjt0YWc9ZDM4MzM3NjcNCkNhbGwtSUQ6IEtvcExUdzl4c19sRXBDdGlQYTA3YlEuLg0KQ1NlcTogNSBSRUdJU1RFUg0KRXhwaXJlczogNjANCkFsbG93OiBJTlZJVEUsIEFDSywgQ0FOQ0VMLCBCWUUsIE5PVElGWSwgUkVGRVIsIE1FU1NBR0UsIE9QVElPTlMsIElORk8sIFNVQlNDUklCRQ0KU3VwcG9ydGVkOiByZXBsYWNlcywgbm9yZWZlcnN1YiwgZXh0ZW5kZWQtcmVmZXIsIHRpbWVyLCBvdXRib3VuZCwgcGF0aCwgWC1jaXNjby1zZXJ2aWNldXJpDQpVc2VyLUFnZW50OiBab2lwZXIgcjMzNjg4DQpBbGxvdy1FdmVudHM6IHByZXNlbmNlLCBrcG1sDQpDb250ZW50LUxlbmd0aDogMA0KDQo=","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0957{"flow_id":47,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570702,"pkt_len":472,"pkt":"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","pkt_caplen":472,"pkt_type":2048,"pkt_ipoffset":14}
+1245{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570702,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":47,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570703,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAod71AAEAG+nsKCAABUEpuRIMRAbsN6a7M8hZWfVAQQOgcPwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1245{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570703,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+1245{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570704,"pkt_len":698,"pkt":"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","pkt_caplen":698,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":18,"flow_packet_id":15,"flow_first_seen":1444570636264,"flow_last_seen":1444570640345,"flow_tot_l4_data_len":4707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.99","src_port":55969,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":10,"flow_packet_id":17,"flow_first_seen":1444570636155,"flow_last_seen":1444570639261,"flow_tot_l4_data_len":4715,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":277,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51646,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":27,"flow_packet_id":11,"flow_first_seen":1444570640298,"flow_last_seen":1444570645704,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.204.49","src_port":51676,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":11,"flow_packet_id":14,"flow_first_seen":1444570636160,"flow_last_seen":1444570639259,"flow_tot_l4_data_len":7320,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"209.197.222.159","src_port":47498,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":17,"flow_packet_id":15,"flow_first_seen":1444570636259,"flow_last_seen":1444570640345,"flow_tot_l4_data_len":4707,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":313,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.100","src_port":52219,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":19,"flow_packet_id":11,"flow_first_seen":1444570636270,"flow_last_seen":1444570640346,"flow_tot_l4_data_len":4210,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":382,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.200.11","src_port":47841,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":26,"flow_packet_id":11,"flow_first_seen":1444570640284,"flow_last_seen":1444570645701,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.213.212","src_port":41757,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":16,"flow_packet_id":17,"flow_first_seen":1444570636255,"flow_last_seen":1444570639258,"flow_tot_l4_data_len":7412,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2940,"flow_avg_l4_data_len":436,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.4.76","src_port":52730,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":32,"flow_packet_id":5,"flow_first_seen":1444570640346,"flow_last_seen":1444570640407,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":29,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"80.74.110.68","src_port":33459,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":32,"flow_packet_id":5,"flow_first_seen":1444570640346,"flow_last_seen":1444570640407,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":20,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":29,"midstream":1,"l3_proto":"ip4","src_ip":"10.133.206.47","dst_ip":"80.74.110.68","src_port":33459,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":14,"flow_packet_id":17,"flow_first_seen":1444570636248,"flow_last_seen":1444570639255,"flow_tot_l4_data_len":7391,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":434,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.104.140","src_port":44492,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":20,"flow_packet_id":16,"flow_first_seen":1444570636359,"flow_last_seen":1444570639256,"flow_tot_l4_data_len":6555,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2599,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.97","src_port":51370,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":21,"flow_packet_id":18,"flow_first_seen":1444570636364,"flow_last_seen":1444570640403,"flow_tot_l4_data_len":6595,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":366,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37129,"dst_port":443,"l4_proto":"tcp"}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":28,"flow_packet_id":11,"flow_first_seen":1444570640310,"flow_last_seen":1444570645707,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.98","src_port":37139,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":12,"flow_packet_id":14,"flow_first_seen":1444570636170,"flow_last_seen":1444570639257,"flow_tot_l4_data_len":7320,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":522,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.121.153","src_port":57647,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":15,"flow_packet_id":13,"flow_first_seen":1444570636252,"flow_last_seen":1444570640344,"flow_tot_l4_data_len":4250,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2862,"flow_avg_l4_data_len":326,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47116,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":25,"flow_packet_id":11,"flow_first_seen":1444570640269,"flow_last_seen":1444570645699,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"114.29.202.139","src_port":47135,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":22,"flow_packet_id":17,"flow_first_seen":1444570636387,"flow_last_seen":1444570640346,"flow_tot_l4_data_len":7823,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":460,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41386,"dst_port":443,"l4_proto":"tcp"}
+0382{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570709,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo02xAAEAGOU8KCAABPm3lnsp\/AbubwQuMZD71MFAROQh7vwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570709,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA7hAABAGOQQ+beWeCggAAQG7yn9kPvUwm8ELjVAQ\/\/+0xwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570709,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA7lAABAGOQM+beWeCggAAQG7yn9kPvUwm8ELjVAR\/\/+0xgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1444570712008,"flow_last_seen":1444570712008,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570712,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8BPxAAEAGfVYKCAABrfMAbtmHAbtwYOR3AAAAAKACOQhFnAAAAgQFtAQCCAoATOCLAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570712,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA7pAABAGrqyt8wBuCggAAQG72YePnxuIcGDkeFAS\/\/8cJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570712,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoBP1AAEAGfWkKCAABrfMAbtmHAbtwYOR4j58biVAQOQjjHQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570712,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADjBP5AAEAGfK0KCAABrfMAbtmHAbtwYOR4j58biVAYOQiiYgAAFgMBALYBAACyAwGU3Odz\/vfsiokT464lK0c\/\/ta9zx7QCCoXHtBhwwrAhAAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1411,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1444570712008,"flow_last_seen":1444570712016,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570712,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA7tAABAGrqut8wBuCggAAQG72YePnxuJcGDlM1AQ\/\/8bawAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":48,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1414,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/CyxAAEAGZvYKCAABUEpuRIMSAbsmf9p02YApSlAYPLgiMwAAFQMBABLzO3uKwLUa5N0D96wcS3I69kA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":48,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA7xAABAGnn1QSm5ECggAAQG7gxLZgClKJn\/ai1AQ\/\/9emgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5650{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1108{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":49,"flow_packet_id":6,"flow_first_seen":1444570712008,"flow_last_seen":1444570713707,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1444570713719,"flow_last_seen":1444570713719,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8m55AAEAG1oYKCAABUEpuRIMXAbuTJntGAAAAAKACOQjR\/QAAAgQFtAQCCAoATODYAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8NAABAGnnZQSm5ECggAAQG7gxds2YS5kyZ7R1AS\/\/9iaAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoBP9AAEAGfWcKCAABrfMAbtmHAbtwYOUzj58qzFAQTE+\/2AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAom59AAEAG1pkKCAABUEpuRIMXAbuTJntHbNmEulAQOQgpYQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0674{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":270,"pkt":"ABoRAAACABoRAAABCABFAAEAm6BAAEAG1cAKCAABUEpuRIMXAbuTJntHbNmEulAYOQhTzAAAFgMBANMBAADPAwFWGmZZuBzwgmCJdcmTjbwZnC8oKUidI7QzbitGwcbpgSBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgBGAAQABQAvADXAAsAEwAXADMAOwA\/AB8AJwArAEcATwBQAMwA5ADIAOAAKwAPADcAIwBIAFgATAAkAFQASAAMACAAUABEA\/wEAAEAACwAEAwABAgAKADQAMgAOAA0AGQALAAwAGAAJAAoAFgAXAAgABgAHABQAFQAEAAUAEgATAAEAAgADAA8AEAAR","pkt_caplen":270,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1444570713719,"flow_last_seen":1444570713734,"flow_tot_l4_data_len":316,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8RAABAGnnVQSm5ECggAAQG7gxds2YS6kyZ8H1AQ\/\/9hkQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0822{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":380,"pkt":"ABoRAAACABoRAAABCABFAAFuBQBAAEAGfCAKCAABrfMAbtmHAbtwYOUzj58qzFAYTE8rqgAAFgMBAQYQAAECAQCWmAWectP+J0A5Z2E+tnU97CXr2FOrN+LZS8Vb9mt4CS85xnRMgnqdJ6+5bSTKY5+sKvD0uOf1\/W+RCAJKPf9jm1ZTqZ2Gfv4lNIMODzPmzr684HM+3meSGcQ8DxxKLdTe20+g5alQAPFfi6wh4AaLxCFXTcKKjU5ppmYA3lLabZTHgExRfPxWxrCIGH9cHAZwlD62tlSeJJ6Bj5suxXonXbcjTyTgz+8mv2YaroIm3XFBu247nShRyixb0vMsQybAOZdQyfLJ65phnYoR3sg3UTZdBTdKtLs72nU1ZcxYMM\/SRxfYlGHyI81qJK3cDBVnA0qVgWMM2Nph8o4B07yMFAMBAAEBFgMBADAj5FDOpEuOjNf0skw9zVzK1F2d+LsHA3YiiFiktoj052qwNVAhJb7qOp5xJoHV4\/s=","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570713,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8VAABAGrqGt8wBuCggAAQG72YePnyrMcGDmeVAQ\/\/8K4gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":183,"pkt":"ABoRAAACABoRAAABCABFAACpA8ZAABAGnfJQSm5ECggAAQG7gxds2YS6kyZ8H1AY\/\/8Z7AAAFgMBAFECAABNAwFWGmZ7j4touJYuyExL4xTp2XN88sUNliawBCgTpqIwUCBKAAAAOC7EJ2lJH7mDuj6DaIBXRCqOxY\/AVNJYEqB0IgAEAAAF\/wEAAQAUAwEAAQEWAwEAIGHRs+Sg8bWNqolu8prJr20w\/iFuAjz6TMIW1wLUxZ5c","pkt_caplen":183,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1444570713719,"flow_last_seen":1444570715238,"flow_tot_l4_data_len":485,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"dff8a0aa1c904aaea76c5bf624e88333","ja3s":"6dfe5eb347aa509fc445e5628d467a2b","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0381{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAom6FAAEAG1pcKCAABUEpuRIMXAbuTJnwfbNmFO1AQPLgkWAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":97,"pkt":"ABoRAAACABoRAAABCABFAABTm6JAAEAG1msKCAABUEpuRIMXAbuTJnwfbNmFO1AYPLgnbAAAFAMBAAEBFgMBACAR8oB0o3Rds9SbYBXls93X3wUnTf47baRWW+9Ugy3q0g==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8dAABAGnnJQSm5ECggAAQG7gxds2YU7kyZ8SlAQ\/\/9g5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1111{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8hAABAGnnFQSm5ECggAAQG7gxds2YU7kyZ+YlAQ\/\/9ezQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0503{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":141,"pkt":"ABoRAAACABoRAAABCABFAAB\/m6RAAEAG1j0KCAABUEpuRIMXAbuTJn5ibNmFO1AYPLgLFQAAWZdnM9xR0M5f7o9mvw919CJzP5C0k0bQO6Py1MH23oSKVFBPXJmhzIUsahG4\/AANndkHe+wGkpBlwB19IDPxn7sIPZskqXV\/oZiGoavGAjWEFXSPlQsn","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8lAABAGnnBQSm5ECggAAQG7gxds2YU7kyZ+uVAQ\/\/9edgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjA8pAABAGrmGt8wBuCggAAQG72YePnyrMcGDmeVAY\/\/9abgAAFAMBAAEBFgMBADBWJQhr79joU86s15MUoIhRGg1+bbo5s652aX8ifVfkCiuCsDqwLsYVwO07aQ7b9N4=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoBQFAAEAGfWUKCAABrfMAbtmHAbtwYOZ5j58rB1AQTE++VwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1110{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8tAABAGrput8wBuCggAAQG72YePnysHcGDokVAQ\/\/8IjwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1445,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":152,"pkt":"ABoRAAACABoRAAABCABFAACKBQNAAEAGfQEKCAABrfMAbtmHAbtwYOiRj58rB1AYTE+XDgAA8n0K26HazNKgkc4Dl3hoP4WguocQuzfWhRw7Y9nJnNR7PrvGp96hPUjOpoXrA9sB65wlWNk5C82ZpqUzOqi4+lE7pRaZSuJvJaTS1h7ZZ7sXSutlTUhm3UIjLVg0bO258xM=","pkt_caplen":152,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1446,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570715,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA8xAABAGrpqt8wBuCggAAQG72YePnysHcGDo81AQ\/\/8ILQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1444570716599,"flow_last_seen":1444570716599,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1454,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570716,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8ldZAAEAGdtEKCAABPm3lnsqRAbsgVHeCAAAAAKACOQiaIAAAAgQFtAQCCAoATOJUAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570716,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA9FAABAGOOs+beWeCggAAQG7ypHfq4h9IFR3g1AS\/\/+1cAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570716,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAolddAAEAGduQKCAABPm3lnsqRAbsgVHeD36uIflAQOQh8aQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570716,"pkt_len":241,"pkt":"ABoRAAACABoRAAABCABFAADjldhAAEAGdigKCAABPm3lnsqRAbsgVHeD36uIflAYOQieBgAAFgMBALYBAACyAwH2mTMdHJrmw7XGFaYthT2kGUSX+T\/uNQ3U\/xVLblVUyQAAWMAUwAoAOQA4ADcANsAPwAUANcATwAkAMwAyADEAMACaAJkAmACXwA7ABAAvAJbAEcAHwAzAAgAFAATAEsAIABYAEwAQAA3ADcADAAoAFQASAA8ADAAJAP8BAAAxAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADwABAQ==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0730{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1444570716599,"flow_last_seen":1444570716610,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":71,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0383{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1458,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570716,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA9JAABAGOOo+beWeCggAAQG7ypHfq4h+IFR4PlAQ\/\/+0tgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5647{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570717,"pkt_len":3961,"pkt":"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","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1109{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1460,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":51,"flow_packet_id":6,"flow_first_seen":1444570716599,"flow_last_seen":1444570717923,"flow_tot_l4_data_len":4234,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":705,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"64ea4359ad4b496db653a3f30f7073e6","ja3s":"4192c0a946c5bd9b544b4656d9f624a4","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_128_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0381{"flow_id":51,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1461,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570717,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoldlAAEAGduIKCAABPm3lnsqRAbsgVHg+36uXwVAQTE9ZJAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0827{"flow_id":51,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1462,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570717,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":51,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1463,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570717,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA9RAABAGOOg+beWeCggAAQG7ypHfq5fBIFR5hFAQ\/\/+kLQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_id":51,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1464,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjA9VAABAGOKw+beWeCggAAQG7ypHfq5fBIFR5hFAY\/\/+RwwAAFAMBAAEBFgMBADBmZZlOKnN32DhHbyHFRuNR5NL7XwLtqMA0S8DHbS3perluIIGIjLuP2KnBloUPGLw=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":51,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1465,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoldtAAEAGduAKCAABPm3lnsqRAbsgVHmE36uX\/FAQTE9XowAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":51,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":128,"pkt":"ABoRAAACABoRAAABCABFAAByldxAAEAGdpUKCAABPm3lnsqRAbsgVHmE36uX\/FAYTE8s+wAAFwMBACB6XUK9V3wUhwVJ8PMSMKScvzaiYFeM9OWnGeiNA6+ZEhcDAQAgveCO9w51Tj6HVTnx\/u2u6UdcfDl5DQKk0BJY78JKESw=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":51,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA9ZAABAGOOY+beWeCggAAQG7ypHfq5f8IFR5zlAQ\/\/+jqAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0437{"flow_id":51,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1469,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":91,"pkt":"ABoRAAACABoRAAABCABFAABNA9dAABAGOMA+beWeCggAAQG7ypHfq5f8IFR5zlAY\/\/\/9uAAAFwMBACDYAlMgEXMNwMH0NIax0mFWDC9k9dpAvLzJWEoRTbcCMA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":51,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1470,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAold1AAEAGdt4KCAABPm3lnsqRAbsgVHnO36uYIVAQTE9XNAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1444570718801,"flow_last_seen":1444570718801,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51772,"dst_port":9000,"l4_proto":"udp"}
+0377{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":50,"pkt":"ABoRAAACABoRAAABCABFAAAk4zFAAEARKYMKCAABPm3lnso8IygAEONTAQAAAAAAAAE=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":50,"pkt":"ABoRAAACABoRAAABCABFAAAkA95AABARONc+beWeCggAASMoyjwAEESbAgAAAAC4nQE=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570718,"pkt_len":50,"pkt":"ABoRAAACABoRAAABCABFAAAk4zJAAEARKYIKCAABPm3lnso8IygAEONTAQAAAAAAAAE=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570719,"pkt_len":50,"pkt":"ABoRAAACABoRAAABCABFAAAkA99AABARONY+beWeCggAASMoyjwAEEObAgAAAAC4ngE=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1444570719041,"flow_last_seen":1444570719041,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51859,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570719,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8mB5AAEAGdIkKCAABPm3lnsqTAbu3\/XtaAAAAAKACOQj9rAAAAgQFtAQCCAoATONEAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570719,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA+JAABAGONo+beWeCggAAQG7ypNIAoSlt\/17W1AS\/\/+1bgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570719,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zNAAEARKV8KCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":29,"flow_packet_id":11,"flow_first_seen":1444570640319,"flow_last_seen":1444570652361,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41394,"dst_port":443,"l4_proto":"tcp"}
+0382{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570720,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAABAAEAGDLwKCAABPm3lnsqTAbu3\/XtbAAAAAFAEAACCJAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570720,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zRAAEARKV4KCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570721,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zVAAEARKV0KCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570722,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zZAAEARKVwKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570723,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zdAAEARKVsKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570724,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zhAAEARKVoKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1511,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570725,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zlAAEARKVkKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1512,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570726,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zpAAEARKVgKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570727,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4ztAAEARKVcKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570729,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4zxAAEARKVYKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570730,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG4z1AAEARKVUKCAABPm3lnso8IygAMvEjBgAAAAAAAAAh0jAhjOUQAAAB+4D\/bwAAAAQAGwMBAAAAAgAAAAAAAAAA","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1444570732086,"flow_last_seen":1444570732086,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51190,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570732,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8h\/tAAEAGidIKCAABPm3geMf2AbvHvWEvAAAAAKACOQgMSwAAAgQFtAQCCAoATObUAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570732,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA+tAABAGPfc+beB4CggAAQG7x\/Y4Qp7Qx71hMFAS\/\/+9MQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8h\/xAAEAGidEKCAABPm3geMf2AbvHvWEvAAAAAKACOQgL5wAAAgQFtAQCCAoATOc4AAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA+xAABAGPfY+beB4CggAAQG7x\/Y4Qp7Qx71hMFAS\/\/+9MQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1533,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8h\/1AAEAGidAKCAABPm3geMf2AbvHvWEvAAAAAKACOQgLHwAAAgQFtAQCCAoATOgAAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1534,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA+1AABAGPfU+beB4CggAAQG7x\/Y4Qp7Qx71hMFAS\/\/+9MQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1535,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoh\/5AAEAGieMKCAABPm3geMf2AbvHvWEwOEKe0VAQOQiEKgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnh\/9AAEAGiaMKCAABPm3geMf2AbvHvWEwOEKe0VAYOQhGawAAFgMBADoBAAA2AwHVO4NHpduGJEZF49hflO7g+gMWTzynDfqMtHMiTtpV9QAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":54,"flow_packet_id":8,"flow_first_seen":1444570732086,"flow_last_seen":1444570733112,"flow_tot_l4_data_len":283,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51190,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0384{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570733,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA+5AABAGPfQ+beB4CggAAQG7x\/Y4Qp7Rx71hb1AQ\/\/+88wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570734,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoiABAAEAGieEKCAABPm3geMf2AbvHvWFvOEKe0VAQOQiD6wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570734,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoiAFAAEAGieAKCAABPm3geMf2AbvHvWFvOEKe0VAQOQiD6wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1444570738415,"flow_last_seen":1444570738415,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8pZ5AAEAGbC8KCAABPm3geMf6AbsEHk9CAAAAAKACOQjdywAAAgQFtAQCCAoATOrcAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA+9AABAGPfM+beB4CggAAQG7x\/r74bC9BB5PQ1AS\/\/+9LQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1444570738419,"flow_last_seen":1444570738419,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51195,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8eOlAAEAGmOQKCAABPm3geMf7AbvAYZI1AAAAAKACOQjekwAAAgQFtAQCCAoATOrcAAAAAAEDAwY=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/BAABAGPfI+beB4CggAAQG7x\/s\/nm3KwGGSNlAS\/\/+9LAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAopZ9AAEAGbEIKCAABPm3geMf6AbsEHk9D++GwvlAQOQiEJgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoeOpAAEAGmPcKCAABPm3geMf7AbvAYZI2P55ty1AQOQiEJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABnpaBAAEAGbAIKCAABPm3geMf6AbsEHk9D++GwvlAYOQh\/zQAAFgMBADoBAAA2AwHh7e2VL35m23t1WU\/32VTucYT8nOT5NyMFMmtQATYTFwAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":55,"flow_packet_id":4,"flow_first_seen":1444570738415,"flow_last_seen":1444570738424,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0385{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1551,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/FAABAGPfE+beB4CggAAQG7x\/r74bC+BB5PglAQ\/\/+87wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":117,"pkt":"ABoRAAACABoRAAABCABFAABneOtAAEAGmLcKCAABPm3geMf7AbvAYZI2P55ty1AYOQia+QAAFgMBADoBAAA2AwFlZ\/2gy5EJcUBexsWY6X0\/hsP+2A782vGEfEVj8EbqUwAABAA1AP8BAAAJACMAAAAPAAEB","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1552,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1444570738419,"flow_last_seen":1444570738426,"flow_tot_l4_data_len":163,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51195,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0386{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570738,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/JAABAGPfA+beB4CggAAQG7x\/s\/nm3LwGGSdVAQ\/\/+87gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":30,"flow_packet_id":11,"flow_first_seen":1444570640330,"flow_last_seen":1444570670371,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51134,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":31,"flow_packet_id":11,"flow_first_seen":1444570640338,"flow_last_seen":1444570670373,"flow_tot_l4_data_len":323,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":29,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51135,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":38,"flow_packet_id":22,"flow_first_seen":1444570674487,"flow_last_seen":1444570675890,"flow_tot_l4_data_len":5807,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55665,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":37,"flow_packet_id":14,"flow_first_seen":1444570672215,"flow_last_seen":1444570673280,"flow_tot_l4_data_len":7763,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3959,"flow_avg_l4_data_len":554,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41419,"dst_port":443,"l4_proto":"tcp"}
+0381{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoZhBAAEAGjy0KCAABTi7tW+ltAFASyr7b7TVEZVARPLhAigAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/NAABAGIUtOLu1bCggAAQBQ6W3tNURlEsq+3FAQ\/\/99QgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":45,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/RAABAGIUpOLu1bCggAAQBQ6W3tNURlEsq+3FAR\/\/99QQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo74JAAEAGBbsKCAABTi7tW+lsAFBr3TdwlCLM9FARPLg\/ZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/VAABAGIUlOLu1bCggAAQBQ6WyUIsz0a903cVAQ\/\/98HwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/ZAABAGIUhOLu1bCggAAQBQ6WyUIsz0a903cVAR\/\/98HgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5649{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":3961,"pkt":"ABoRAAACABoRAAABCABFAA9rA\/dAABAGLqg+beB4CggAAQG7x\/r74bC+BB5PglAY\/\/87kQAAFgMBDz4CAAAtAwFWGmZ5tsqn+YAQZXvK+RxU4fExf6dY82QyqwsxQ76ZVQAANQAABf8BAAEACwAPBQAPAgAE6TCCBOUwggPNoAMCAQICECl0ianUHkm+YfeBaUbmIfMwDQYJKoZIhvcNAQELBQAwfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDAeFw0xNTA0MTAwMDAwMDBaFw0xODA0MTAyMzU5NTlaMHcxCzAJBgNVBAYTAnVzMRMwEQYDVQQIDApDYWxpZm9ybmlhMREwDwYDVQQHDAhTYW4gSm9zZTEcMBoGA1UECgwTQ2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECwwDQ1NHMRQwEgYDVQQDDAsqLndlYmV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ14yGFLwwhhZyxegl+wYbyZZp5q4NComRXAz+k8ibNrPp+x46qW\/Dt++MdupJ8y605K5KTQVb24unmPF+pZq1par5YBKMjJrJTW2aAI1MtQvRzSDCNhdWyxiP6SkVBm6ZOcLwL+kijn\/nCot5orO1NrHHFG\/HBcSk1aaetoitrjs5BWuMxdYuIZvzSoyViVbo\/w\/LUKXdD0rlOcFmOxtcf+VKb7w1eyku07Jp94m\/\/ILLQS\/jy7ymRyfGFnPLtNqBmUKFg+uAD7JcHZiy8g6quVEhEZdm3O+tUR2wYZ5in9yKcrxqoHwhW0O4X2\/rJ4mNDvikIgaWiSNW7eIoh0NWECAwEAAaOCAWQwggFgMBYGA1UdEQQPMA2CCyoud2ViZXguY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH\/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBlBgNVHSAEXjBcMFoGCmCGSAGG+EUBBzYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDANBgkqhkiG9w0BAQsFAAOCAQEAFNF1YB0fCkEyxRc1VQO7NUZao+PnZuavjgeTnyTKmHl\/4Zxh1Xg\/M\/f\/RHSrGrgUW2xaSZN\/Dwt2hqMtIi\/b\/AgOFeqNKmMxH3nWxf6f1Lr7QoTvApLQGqjeuIT3U6AiRMt4Ksgfx7+1Vbil1AaILo859VgXSMgVJTv4QpUpzg\/EKtUqPwMwq8PvwoTjlewyOt9YbCxNTO91JkKsYuwm7uUeU7Fx+r+rP+wgDwYVbbsUwQXAbj7QOj3dkPLzn+gcrhK1ZlgFf7Ti34xrqj7jNiaMc0dYh\/Ns3KCHMTs5rVCGLIk7lEgovwLDbJtuuQTlvaHoeZIGVPqROi5Bl\/WxAgAFPDCCBTgwggQgoAMCAQICEFE\/uXQ4cLc0QEGNMJMGmf8wDQYJKoZIhvcNAQELBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDIwMDYgVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMyBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEc1MB4XDTEzMTAzMTAwMDAwMFoXDTIzMTAzMDIzNTk1OVowfjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMS8wLQYDVQQDEyZTeW1hbnRlYyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgQ0EgLSBHNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLYBcocdC21F1Y5xUpSCZboS9gM8WifmkIoYsOlMFN+VRGCWwN6DS\/heQTJtJZ3GYEBlFn5vPd6mSeCLbeD3Vonf7IDepxTJelIH0ZPyJ0p+L55Vvb3\/dk6aNqLS4IzQRLDyDzM1pZ6hCEaIgQDJxeLHGhhkw8OUYAzHbS1zut+0GKs7rN7AXTvaTXrytU9qe6XmMqNqkQOJZlKFZakzm0CVB8qaibiBjpjSKy0TNF1k1D\/Ey\/W2uHGGPWfySVd8wA63iZNtCkJzQ89I28WSoEW+\/KDEMO41thVMj3xvQ+9jFKVShaXelIhY3UvFvnEZr71tQnY\/ycAzUR8b0s\/sPcCAwEAAaOCAWMwggFfMBIGA1UdEwEB\/wQIMAYBAf8CAQAwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNiLmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUFBzABhhNodHRwOi8vczIuc3ltY2IuY29tMGsGA1UdIARkMGIwYAYKYIZIAYb4RQEHNjBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2NwczAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRU3ltYW50ZWNQS0ktMS01MzQwHQYDVR0OBBYEFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMB8GA1UdIwQYMBaAFH\/TZafC3ey78DAJ80M5+gKvMzEzMA0GCSqGSIb3DQEBCwUAA4IBAQBelFZJ3Y4tZfXBNlG2A+PannMZ8h9Zq1h+bCYFLPqB11wjFyIsN5P3huyF5rCj\/R\/iMqhFb+HZ+7mv0nCgMkJlv4T+FiqPP8Wm1qOTfUPpdCGRNSj0Y+ku7ff1XH9LmrUg6Qq94EUQDBSUml2l40uR6CSbRkBl9CJyzZn4iBH183\/mM4LmqMV+\/tAI4iVYCHFo5s2i5hTeTlIkLf3leRNT514vLU0bbUAVUiv3h4l4EoFu2U2qLXjUwiw9CF+HkZ4fDrDeMFJkhomqnWacDnYMgPJ02Cr4uDrO19YPEb5rqxT1vUGgImOJ8boPbyljZi0\/rIxyxfvH5NQP8jtPjCnHAATUMIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4\/TANBgkqhkiG9w0BAQUFADBfMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsTLkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ\/XxrcgxiV0i6CqqpkKzj\/i5Vbext0uz\/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6\/WhkcIzSdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn\/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4\/VBEnkjWNHiDxpg8v+R70rfk\/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10\/NIeWiu5T6CUVAgMBAAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH\/MDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB\/wQEAwIBBjA9BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUAA4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5KlCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZtOxFNfeKW\/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3\/DgAAAA==","pkt_caplen":3961,"pkt_type":2048,"pkt_ipoffset":14}
+1109{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":55,"flow_packet_id":6,"flow_first_seen":1444570738415,"flow_last_seen":1444570740300,"flow_tot_l4_data_len":4110,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":685,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)","8":"Weak TLS cipher"},"proto":"TLS.Webex","category":"VoIP"},"tls": {"version":"TLSv1","client_requested_server_name":"","server_names":"*.webex.com","ja3":"7cb93b2404a98399e9f84c74fef1fb8f","ja3s":"91589ea825a2ee41810c85fab06d2ef6","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_CBC_SHA","issuerDN":"C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4","issuerDN":"C=us, ST=California, L=San Jose, O=Cisco Systems, Inc., OU=CSG, CN=*.webex.com","fingerprint":"61:C9:DE:EE:FA:AE:DC:17:A0:36:B9:68:F9:17:F6:5A:90:7B:14:E1"}}
+0381{"flow_id":55,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAopaFAAEAGbEAKCAABPm3geMf6AbsEHk+C++HAAVAQTE9hXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0823{"flow_id":55,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":380,"pkt":"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","pkt_caplen":380,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":55,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/hAABAGPeo+beB4CggAAQG7x\/r74cABBB5QyFAQ\/\/+sZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":55,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":113,"pkt":"ABoRAAACABoRAAABCABFAABjA\/lAABAGPa4+beB4CggAAQG7x\/r74cABBB5QyFAY\/\/8nPgAAFAMBAAEBFgMBADDK0wKzAT\/lCZNSSV48d2pcoOSD8nO01Zt\/Htn6cdig73JeYwqih0S0gJ9xocT2WO4=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+1023{"flow_id":55,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":528,"pkt":"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","pkt_caplen":528,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":55,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoA\/pAABAGPeg+beB4CggAAQG7x\/r74cA8BB5SolAQ\/\/+qUQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0609{"flow_id":55,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":219,"pkt":"ABoRAAACABoRAAABCABFAADNA\/tAABAGPUI+beB4CggAAQG7x\/r74cA8BB5SolAY\/\/+2rwAAFwMBAKD59UDZ7S7geJrVoYTOnjjAElM7mgEB5SfOzss2AtHnIjs7wJRjidoZeLKCsZK3Kzs5xW13JL+ljy2vDIr\/MQmdsFHjUqVYXgzVTVCkmtV8WnZlS3Vb17A2+NAprTG7USXVPvkyuUIRRNg3TVuSGRd3HbKWs4zo22fg7N+B9r+UJZyyPOKqBA1GZbAHLaPDnooAlMupSDk92KNoV3z+SqJ4","pkt_caplen":219,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":55,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":false,"pkt_ts":1444570740,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAopaRAAEAGbD0KCAABPm3geMf6AbsEHlKi++HA4VAQatU+1wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0313{"flow_id":55,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","pkt_oversize":true,"pkt_ts":1444570741,"pkt_len":8739,"pkt":"","pkt_caplen":8739,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":44,"flow_packet_id":12,"flow_first_seen":1444570699096,"flow_last_seen":1444570740249,"flow_tot_l4_data_len":1383,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59756,"dst_port":80,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":45,"flow_packet_id":10,"flow_first_seen":1444570699101,"flow_last_seen":1444570740248,"flow_tot_l4_data_len":1051,"flow_min_l4_data_len":20,"flow_max_l4_data_len":517,"flow_avg_l4_data_len":105,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"78.46.237.91","src_port":59757,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":23,"flow_packet_id":22,"flow_first_seen":1444570637191,"flow_last_seen":1444570733113,"flow_tot_l4_data_len":14608,"flow_min_l4_data_len":664,"flow_max_l4_data_len":664,"flow_avg_l4_data_len":664,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"172.16.1.75","src_port":64538,"dst_port":5060,"l4_proto":"udp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":39,"flow_packet_id":8,"flow_first_seen":1444570675941,"flow_last_seen":1444570690940,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51833,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":42,"flow_packet_id":8,"flow_first_seen":1444570694561,"flow_last_seen":1444570709697,"flow_tot_l4_data_len":367,"flow_min_l4_data_len":20,"flow_max_l4_data_len":207,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51839,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":51,"flow_packet_id":50,"flow_first_seen":1444570716599,"flow_last_seen":1444570737975,"flow_tot_l4_data_len":8660,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":173,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51857,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":53,"flow_packet_id":3,"flow_first_seen":1444570719041,"flow_last_seen":1444570720045,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51859,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Webex","category":"VoIP"}}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":53,"flow_packet_id":3,"flow_first_seen":1444570719041,"flow_last_seen":1444570720045,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":26,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51859,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":52,"flow_packet_id":16,"flow_first_seen":1444570718801,"flow_last_seen":1444570739041,"flow_tot_l4_data_len":627,"flow_min_l4_data_len":13,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51772,"dst_port":9000,"l4_proto":"udp","ndpi": {"proto":"Webex","category":"VoIP"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":52,"flow_packet_id":16,"flow_first_seen":1444570718801,"flow_last_seen":1444570739041,"flow_tot_l4_data_len":627,"flow_min_l4_data_len":13,"flow_max_l4_data_len":50,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.229.158","src_port":51772,"dst_port":9000,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":24,"flow_packet_id":17,"flow_first_seen":1444570638225,"flow_last_seen":1444570642072,"flow_tot_l4_data_len":5797,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3717,"flow_avg_l4_data_len":341,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"216.58.208.40","src_port":43433,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":35,"flow_packet_id":105,"flow_first_seen":1444570669736,"flow_last_seen":1444570738301,"flow_tot_l4_data_len":15716,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51154,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":36,"flow_packet_id":513,"flow_first_seen":1444570669745,"flow_last_seen":1444570732084,"flow_tot_l4_data_len":326644,"flow_min_l4_data_len":20,"flow_max_l4_data_len":29662,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51155,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":40,"flow_packet_id":23,"flow_first_seen":1444570679512,"flow_last_seen":1444570680667,"flow_tot_l4_data_len":5859,"flow_min_l4_data_len":20,"flow_max_l4_data_len":2547,"flow_avg_l4_data_len":254,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55669,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":41,"flow_packet_id":22,"flow_first_seen":1444570693238,"flow_last_seen":1444570694561,"flow_tot_l4_data_len":5807,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55671,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":54,"flow_packet_id":11,"flow_first_seen":1444570732086,"flow_last_seen":1444570734115,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51190,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":49,"flow_packet_id":22,"flow_first_seen":1444570712008,"flow_last_seen":1444570716597,"flow_tot_l4_data_len":5807,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3927,"flow_avg_l4_data_len":263,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.243.0.110","src_port":55687,"dst_port":443,"l4_proto":"tcp"}
+0460{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":33,"flow_packet_id":8,"flow_first_seen":1444570640382,"flow_last_seen":1444570699865,"flow_tot_l4_data_len":396,"flow_min_l4_data_len":20,"flow_max_l4_data_len":236,"flow_avg_l4_data_len":49,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33511,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":55,"flow_packet_id":24,"flow_first_seen":1444570738415,"flow_last_seen":1444570742172,"flow_tot_l4_data_len":35072,"flow_min_l4_data_len":20,"flow_max_l4_data_len":14339,"flow_avg_l4_data_len":1461,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51194,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":34,"flow_packet_id":18,"flow_first_seen":1444570640385,"flow_last_seen":1444570699915,"flow_tot_l4_data_len":1360,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33512,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":56,"flow_packet_id":5,"flow_first_seen":1444570738419,"flow_last_seen":1444570738426,"flow_tot_l4_data_len":183,"flow_min_l4_data_len":20,"flow_max_l4_data_len":83,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"62.109.224.120","src_port":51195,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":46,"flow_packet_id":21,"flow_first_seen":1444570699916,"flow_last_seen":1444570700460,"flow_tot_l4_data_len":1816,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33551,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":47,"flow_packet_id":20,"flow_first_seen":1444570700561,"flow_last_seen":1444570713719,"flow_tot_l4_data_len":1795,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":89,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33553,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":48,"flow_packet_id":18,"flow_first_seen":1444570700563,"flow_last_seen":1444570713710,"flow_tot_l4_data_len":1360,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33554,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":50,"flow_packet_id":13,"flow_first_seen":1444570713719,"flow_last_seen":1444570715293,"flow_tot_l4_data_len":1291,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"80.74.110.68","src_port":33559,"dst_port":443,"l4_proto":"tcp"}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":43,"flow_packet_id":30,"flow_first_seen":1444570699074,"flow_last_seen":1444570740247,"flow_tot_l4_data_len":8548,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":284,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"54.241.32.14","src_port":46211,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":0,"flow_packet_id":95,"flow_first_seen":1444570624853,"flow_last_seen":1444570630376,"flow_tot_l4_data_len":89006,"flow_min_l4_data_len":20,"flow_max_l4_data_len":17700,"flow_avg_l4_data_len":936,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41346,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":1,"flow_packet_id":56,"flow_first_seen":1444570627404,"flow_last_seen":1444570630162,"flow_tot_l4_data_len":107792,"flow_min_l4_data_len":20,"flow_max_l4_data_len":17986,"flow_avg_l4_data_len":1924,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41348,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":2,"flow_packet_id":11,"flow_first_seen":1444570628113,"flow_last_seen":1444570628619,"flow_tot_l4_data_len":639,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41350,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap","flow_id":3,"flow_packet_id":9,"flow_first_seen":1444570628117,"flow_last_seen":1444570628568,"flow_tot_l4_data_len":599,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":66,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"64.68.105.103","src_port":41351,"dst_port":443,"l4_proto":"tcp"}
+0144{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/webex.pcap"}
diff --git a/tests/result/nDPId_websocket.pcap.txt b/tests/result/nDPId_websocket.pcap.txt
new file mode 100644
index 000000000..3c7390a9b
--- /dev/null
+++ b/tests/result/nDPId_websocket.pcap.txt
@@ -0,0 +1,10 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1475155931028,"flow_last_seen":1475155931028,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.135","dst_ip":"192.168.43.1","src_port":12345,"dst_port":50999,"l4_proto":"tcp"}
+0417{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","pkt_oversize":false,"pkt_ts":1475155931,"pkt_len":79,"pkt":"AFBWwAAIAAwpij2nCABFAABB27JAAEAGhyvAqCuHwKgrATA5xzc8ilRnydSxV1AYAO1IlQAAgRdXZWxjb21lLCAxOTIuMTY4LjQzLjEgIQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0518{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1475155931028,"flow_last_seen":1475155931028,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.135","dst_ip":"192.168.43.1","src_port":12345,"dst_port":50999,"l4_proto":"tcp","ndpi": {"proto":"WebSocket","category":"Web"}}
+0406{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","pkt_oversize":false,"pkt_ts":1475155946,"pkt_len":72,"pkt":"AAwpij2nAFBWwAAICABFAAA6BcdAAEAGXR7AqCsBwKgrh8c3MDnJ1LFXPIpUgFAYP+\/mwAAAgYzhfo65lRv9zcET68qSH+nc","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","pkt_oversize":false,"pkt_ts":1475155946,"pkt_len":106,"pkt":"AFBWwAAIAAwpij2nCABFAABc27NAAEAGhw\/AqCuHwKgrATA5xzc8ilSAydSxaVAYAO0tVgAAgTIyMTozMzo1MiAoJzE5Mi4xNjguNDMuMScsIDUwOTk5KSBzYXk6IHRlc3QgbWVzc2FnZQ==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","pkt_oversize":false,"pkt_ts":1475156008,"pkt_len":75,"pkt":"AAwpij2nAFBWwAAICABFAAA9BeZAAEAGXPzAqCsBwKgrh8c3MDnJ1LFpPIpUtFAYP+K7sAAAgY+3zv1X36uRO9juijLVvZI03KuJ","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","pkt_oversize":false,"pkt_ts":1475156008,"pkt_len":109,"pkt":"AFBWwAAIAAwpij2nCABFAABf27ZAAEAGhwnAqCuHwKgrATA5xzc8ilS0ydSxflAYAO0H8wAAgTUyMTozNDo1MyAoJzE5Mi4xNjguNDMuMScsIDUwOTk5KSBzYXk6IGhlbGxvIHdlYnNvY2tldA==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap","flow_id":0,"flow_packet_id":5,"flow_first_seen":1475155931028,"flow_last_seen":1475156008657,"flow_tot_l4_data_len":271,"flow_min_l4_data_len":38,"flow_max_l4_data_len":75,"flow_avg_l4_data_len":54,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.43.135","dst_ip":"192.168.43.1","src_port":12345,"dst_port":50999,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/websocket.pcap"}
diff --git a/tests/result/nDPId_wechat.pcap.txt b/tests/result/nDPId_wechat.pcap.txt
new file mode 100644
index 000000000..6947b8e46
--- /dev/null
+++ b/tests/result/nDPId_wechat.pcap.txt
@@ -0,0 +1,1253 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1492167337792,"flow_last_seen":1492167337792,"flow_tot_l4_data_len":636,"flow_min_l4_data_len":636,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":636,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54084,"l4_proto":"tcp"}
+1211{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167337,"pkt_len":670,"pkt":"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","pkt_caplen":670,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167337,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0B7NAAEAGDZLAqAFny82XotNEAbsWJbkHbCUOQoAQAk6qQAAAAQEICgAwqxZF0ZUD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":1492167338426,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0418{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167338,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuMlAAAERHdXAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":1492167338426,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":1492167338426,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0448{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167338,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1492167338426,"flow_last_seen":1492167338426,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0418{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167338,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuMpAAAERHdTAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167338,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0418{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167339,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuN1AAAERHcHAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167339,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0418{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167341,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEuPZAAAERHajAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167341,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1492167342857,"flow_last_seen":1492167342857,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp"}
+0436{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":94,"pkt":"8IQvSpdgeJKcD6iOCABFAABQ0QRAAEAR5OLAqAFnwKgB\/tHmADUAPEQCPBkBAAABAAAAAAAADHNhZmVicm93c2luZxFnb29nbGV1c2VyY29udGVudANjb20AAAEAAQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1492167342857,"flow_last_seen":1492167342857,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":60,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":60,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"safebrowsing.googleusercontent.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0673{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":272,"pkt":"eJKcD6iO8IQvSpdgCABFoAECAABAAEARtJXAqAH+wKgBZwA10eYA7qtlPBmBgAABAAIABAAEDHNhZmVicm93c2luZxFnb29nbGV1c2VyY29udGVudANjb20AAAEAAcAMAAUAAQAANssADgJzYgFsBmdvb2dsZcArwEAAAQABAAAAxwAErNkWDsBDAAIAAQAACYwABgNuczHARcBDAAIAAQAACYwABgNuczTARcBDAAIAAQAACYwABgNuczLARcBDAAIAAQAACYwABgNuczPARcBqAAEAAQABNLQABNjvIArAjgABAAEAATS0AATY7yIKwKAAAQABAAE0tAAE2O8kCsB8AAEAAQABNLQABNjvJgo=","pkt_caplen":272,"pkt_type":2048,"pkt_ipoffset":14}
+0682{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1492167342857,"flow_last_seen":1492167342893,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":60,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"safebrowsing.googleusercontent.com","num_queries":1,"num_answers":10,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.22.14"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1492167342893,"flow_last_seen":1492167342893,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8j4ZAAEAGJj\/AqAFnrNkWDpcBAbvnsj+XAAAAAKACchDgsAAAAgQFtAQCCAoAMLARAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8xIIAADIGPqOs2RYOwKgBZwG7lwHnJuhS57I\/mKASpajHRwAAAgQFZAQCCApd2bi8ADCwEQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4dAAEAGJkbAqAFnrNkWDpcBAbvnsj+Y5yboU4AQAOWaewAAAQEICgAwsB1d2bi8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0694{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":288,"pkt":"8IQvSpdgeJKcD6iOCABFAAESj4hAAEAGJWfAqAFnrNkWDpcBAbvnsj+Y5yboU4AYAOXwqgAAAQEICgAwsB1d2bi8FgMBANkBAADVAwNGweD9NUKL5AVTYyYP+mu6+yZ5eVPxgI+DpY7zF4i1IwAAIEpKzKnMqMwUzBPAK8AvwCzAMMATwBQAnACdAC8ANQAKAQAAjOrqAAD\/AQABAAAAACcAJQAAInNhZmVicm93c2luZy5nb29nbGV1c2VyY29udGVudC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjEACwACAQAACgAKAAjKygAdABcAGPr6AAEA","pkt_caplen":288,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":4,"flow_packet_id":4,"flow_first_seen":1492167342893,"flow_last_seen":1492167342942,"flow_tot_l4_data_len":366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":254,"flow_avg_l4_data_len":91,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleusercontent.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0395{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0xKkAADIGPoSs2RYOwKgBZwG7lwHnJuhT57JAdoAQAVSY+QAAAQEICl3ZuPEAMLAd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2297{"flow_id":4,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":1484,"pkt":"eJKcD6iO8IQvSpdgCABFoAW+xKoAADIGOPms2RYOwKgBZwG7lwHnJuhT57JAdoAQAVREYwAAAQEICl3ZuPEAMLAdFgMDAT4CAAE6AwNY8KquurQREh2KA56GFyNwM5NNQTAm\/6ElicqXKStoqADMqQABEv8BAAEAABcAAAAjAAAAEgDyAPAAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVs\/SFoKAAAEAwBIMEYCIQD6zHRrh9AcxzPMFYouW3wGAA5k400xB8JLp\/vnuoRXTQIhAJa\/qK2iQ4DYAdp5cF41mcMUKrtPMyaAB4jQJuhQ9yd\/AHUA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFbP0hagwAABAMARjBEAiApqxJ58Ienlh5fRXTZgXKhjqBeF9+AZpEZdiV6F4rGmwIgUSNGsv++wkBf75eOZfy2MnVNK8iuK65K9WF29UDC+DIAEAAFAAMCaDIACwACAQAWAwMOqwsADqcADqQAByYwggciMIIGCqADAgECAgg4NhvsMkLjzTANBgkqhkiG9w0BAQsFADBJMQswCQYDVQQGEwJVUzETMBEGA1UEChMKR29vZ2xlIEluYzElMCMGA1UEAxMcR29vZ2xlIEludGVybmV0IEF1dGhvcml0eSBHMjAeFw0xNzA0MDUxNzE0NDZaFw0xNzA2MjgxNjU3MDBaMHExCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKDApHb29nbGUgSW5jMSAwHgYDVQQDDBcqLmdvb2dsZXVzZXJjb250ZW50LmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABAKrkboiiJDAZ7SAVzgulTL2i0xA34tqt\/GkkUNqbVAa39AygcAl8NIrqp02Ks65Dv1uPMcCUMhh36AWeZeXDlCjggSvMIIEqzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMIIDbgYDVR0RBIIDZTCCA2GCFyouZ29vZ2xldXNlcmNvbnRlbnQuY29tghwqLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tgiQqLmFwcHNwb3QuY29tLnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CDiouYmxvZ3Nwb3QuY29tghEqLmJwLmJsb2dzcG90LmNvbYIiKi5jb21tb25kYXRhc3RvcmFnZS5nb29nbGVhcGlzLmNvbYIpKi5jb250ZW50LXN0b3JhZ2UtZG93bmxvYWQuZ29vZ2xlYXBpcy5jb22CJyouY29udGVudC1zdG9yYWdlLXVwbG9hZC5nb29nbGVhcGlzLmNvbYIgKi5jb250ZW50LXN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CHCouZG91YmxlY2xpY2t1c2VyY29udGVudC5jb22CCyouZ2dwaHQuY29tghEqLmdvb2dsZWRyaXZlLmNvbYIXKi5nb29nbGVzeW5kaWNhdGlvbi5jb22CFCouZ29vZ2xld2VibGlnaHQuY29tgh8qLnNhZmVudXAuZ29vZ2xldXNlcmNvbnRlbnQuY29tgh8qLnNhbmRib3guZ29vZ2xldXNlcmNvbnRlbnQuY29tgiEqLnN0b3JhZ2UtZG93bmxvYWQuZ29vZ2xlYXBpcy5jb22CHyouc3RvcmFnZS11cGxvYWQuZ29vZ2xlYXBpcy5jb22CGCouc3RvcmFnZS5nb29nbGVhcGlzLmNvbYIfKi5zdG9yYWdlLnNlbGVjdC5nb29nbGVhcGlzLmNvbYIMYmxvZ3Nwb3QuY29tgg9icC5ibG9nc3BvdC5jb22CIGNvbW1vbmRhdGFzdG9yYWdlLmdvb2dsZWFwaXMuY29tghpkb3VibGVjbGk=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0805{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":4,"flow_packet_id":6,"flow_first_seen":1492167342893,"flow_last_seen":1492167342995,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleusercontent.com","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d655f7cd00e93ea8969c3c6e06f0156f","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","alpn":"h2,http\/1.1"}}
+0395{"flow_id":4,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4lAAEAGJkTAqAFnrNkWDpcBAbvnskB25ybt3YAQAPuTuwAAAQEICgAwsCpd2bjx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2307{"flow_id":4,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":4,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4pAAEAGJkPAqAFnrNkWDpcBAbvnskB25ybzZ4AQARGOGgAAAQEICgAwsCtd2bjx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2246{"flow_id":4,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":1442,"pkt":"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","pkt_caplen":1442,"pkt_type":2048,"pkt_ipoffset":14}
+1889{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":4,"flow_packet_id":10,"flow_first_seen":1492167342893,"flow_last_seen":1492167342997,"flow_tot_l4_data_len":4770,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":477,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"safebrowsing.googleusercontent.com","server_names":"*.googleusercontent.com,*.apps.googleusercontent.com,*.appspot.com.storage.googleapis.com,*.blogspot.com,*.bp.blogspot.com,*.commondatastorage.googleapis.com,*.content-storage-download.googleapis.com,*.content-storage-upload.googleapis.com,*.content-storage.googleapis.com,*.doubleclickusercontent.com,*.ggpht.com,*.googledrive.com,*.googlesyndication.com,*.googleweblight.com,*.safenup.googleusercontent.com,*.sandbox.googleusercontent.com,*.storage-download.googleapis.com,*.storage-upload.googleapis.com,*.storage.googleapis.com,*.storage.select.googleapis.com,blogspot.com,bp.blogspot.com,commondatastorage.googleapis.com,doubleclickusercontent.com,ggpht.com,googledrive.com,googleusercontent.com,googleweblight.com,static.panoramio.com.storage.googleapis.com,storage.googleapis.com,storage.select.googleapis.com,unfiltered.news","ja3":"d551fafc4f40f1dec2bb45980bfa9492","ja3s":"d655f7cd00e93ea8969c3c6e06f0156f","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=*.googleusercontent.com","alpn":"h2,http\/1.1","fingerprint":"8B:36:AF:31:A2:4C:EE:50:CC:6F:34:F7:2C:A3:C5:B6:4B:02:AC:53"}}
+0396{"flow_id":4,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167342,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0j4tAAEAGJkLAqAFnrNkWDpcBAbvnskB25yb4x4AQASeIpAAAAQEICgAwsCtd2bjx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0515{"flow_id":4,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167343,"pkt_len":151,"pkt":"8IQvSpdgeJKcD6iOCABFAACJj4xAAEAGJezAqAFnrNkWDpcBAbvnskB25yb4x4AYASdgEgAAAQEICgAwsCxd2bjxFgMDACUQAAAhIFTDoRfECA9UXSx3Sxxy0vP1nhY9Lq9\/lQFw4g+aqXgVFAMDAAEBFgMDACBkfneDcqzi2Nje8E1lOFDpdGYGDUwA+4+JYfiYxYvJ2g==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":4,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167343,"pkt_len":111,"pkt":"8IQvSpdgeJKcD6iOCABFAABhj41AAEAGJhPAqAFnrNkWDpcBAbvnskDL5yb4x4AYAScb2AAAAQEICgAwsC5d2bjxFwMDAChkJ2bB26To\/kNXsOt+kwWJVo63aXLzXxNrnD+7sGyFG3arYue2\/uLN","pkt_caplen":111,"pkt_type":2048,"pkt_ipoffset":14}
+1523{"flow_id":4,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167343,"pkt_len":895,"pkt":"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","pkt_caplen":895,"pkt_type":2048,"pkt_ipoffset":14}
+0766{"flow_id":4,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167343,"pkt_len":336,"pkt":"eJKcD6iO8IQvSpdgCABFoAFCxNQAADIGPUus2RYOwKgBZwG7lwHnJvjH57JAy4AYAVSbYAAAAQEICl3ZuSkAMLAsFgMDAN4EAADaAAGJvwDUbxVD5pY99MWMwsYGglFDLd4TKc7HNP9Bfj1katTLjm5MUPP4LGAl7joaiNojx2JHv8uDL7LwEDY\/sgs1caWZ0AdGsLQF22vwx9oOj51CHV764BY8TCvvNNG4WjMwNM4OXgNRdZaAvzn0Ebh6tcIV1u8PTBE91h\/fPr8PnkGCX2HG6DgLHozhlAX94ZaimBGpVK2aaCKZA9\/5bR4YZ76aPButHJXvuJ2SyFZ\/fgYpMMbpK\/eCI\/vFAIPzDVW6u\/2\/221xFzCrv5xx4hbqROjJKoMVoXwUAwMAAQEWAwMAIFp8LMo3+xtUYPU5i10hvoNCEPCwhUtawe84m0jq9OGa","pkt_caplen":336,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1492167345896,"flow_last_seen":1492167345896,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.78","src_port":47627,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167345,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0u5hAAEAGF5PAqAFn2DrNTroLAbv4cm+uICz91YAQATUbzAAAAQEICgAwswD2qQZf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1492167345896,"flow_last_seen":1492167345896,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.78","src_port":53220,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167345,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ew1AAEAGOYDAqAFnrNkXTs\/kAbv7Pa3ZiiWYPIAQAT3Z6QAAAQEICgAwswB+x0ZO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167345,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0XCMAADcGv2jYOs1OwKgBZwG7ugsgLP3V+HJvr4AQAV1HoAAAAQEICvaptmIAL9cA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167345,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0vmsAADcGPoKs2RdOwKgBZwG7z+SKJZg8+z2t2oAQAVQFzwAAAQEICn7H9k8AL9cC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167347,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0LFtAACwG\/EnLzZeiwKgBZwG700RsJQ5CFiW5B4ARAQCiIgAAAQEICkXRnm4AMKsW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167347,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0B7RAAEAGDZHAqAFny82XotNEAbsWJbkHbCUOQ4AQAk6XYAAAAQEICgAwtIpF0Z5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1492167350333,"flow_last_seen":1492167350333,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":75,"pkt":"8IQvSpdgeJKcD6iOCABFAAA92D9AAEAR3brAqAFnwKgB\/rP+ADUAKS5MZgIBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1492167350333,"flow_last_seen":1492167350333,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0622{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":234,"pkt":"eJKcD6iO8IQvSpdgCABFoADcAABAAEARtLvAqAH+wKgBZwA1s\/4AyDQ0ZgKBgAABAAEABAAEA3NzbAdnc3RhdGljA2NvbQAAAQABwAwAAQABAAAAHQAErNkXQ8AQAAIAAQACiyoADQNuczEGZ29vZ2xlwBjAEAACAAEAAosqAAYDbnMywEHAEAACAAEAAosqAAYDbnM0wEHAEAACAAEAAosqAAYDbnMzwEHAPQABAAEABThHAATY7yAKwFYAAQABAAUudQAE2O8iCsB6AAEAAQAFLnUABNjvJArAaAABAAEABS51AATY7yYK","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1492167350333,"flow_last_seen":1492167350372,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.23.67"}}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1492167350385,"flow_last_seen":1492167350385,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":51507,"dst_port":443,"l4_proto":"udp"}
+2173{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":1392,"pkt":"8IQvSpdgeJKcD6iOCABFAAVivyhAAEAR8DbAqAFnrNkXQ8kzAbsFThBpDTHWY7YNkySLUTAzNQEAZRP82mbzhTNOuyagAQAEQ0hMTx0AAABQQUQAIgEAAFNOSQAxAQAAU1RLAGsBAABWRVIAbwEAAENDUwB\/AQAATk9OQ58BAABNU1BDowEAAEFFQUSnAQAAVUFJRMgBAABTQ0lE2AEAAFRDSUTcAQAAUERNROABAABTUkJG5AEAAFNNSEzoAQAASUNTTOwBAABDVElN9AEAAE5PTlAUAgAAUFVCUzQCAABNSURTOAIAAFNDTFM8AgAAS0VYU0ACAABYTENUSAIAAENTQ1RIAgAAQ09QVEgCAABDQ1JUYAIAAElSVFRkAgAAQ0VUVggDAABDRkNXDAMAAFNGQ1cQAwAALS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1zc2wuZ3N0YXRpYy5jb23DJ9pgKUoswhKlaAfLoi3sQZPhfUFgtpep51u0rkbBgx\/nebVFToqDPqkbsFtGn3MXCPqLWhc6j\/ixUTAzNQHogWCSkhrofu2AhqIVgpFY8Kq2MDAwMDAwMDC6zWefDMewsHm6e\/MeaJgBlt0fDWQAAABDQzIwQ2hyb21lLzU3LjAuMjk4Ny4xMzMgTGludXggeDg2XzY0Jc6XFWD7G7yXYXhVaoxdywAAAABYNTA5AAAQAAEAAAAeAAAAtqrwWAAAAAA5eOlJA3D70ONW2AJf\/ogbdqDz00OrZf\/OgXQcK6rvrAta8o74ustrYp5ItVHeFC1VJKErdNkin676crWgBJJhZAAAAAEAAABDMjU1wgnkHLidnM3CCeQcuJ2czT2t9HxBefiRQAt7kKmuees3ygAAW65hsjHRUCwmcSnHJYniTszHhABKgaojbj7US89crmIZu34dDjUIs9wDqj3f87VRLZoVe0zMx1t+ZFc1SOwYij5LWSM1YcolsQBx9V4iuTevcGsCo1kr3VNCHdz7PtfP9d6GZNrg2+YgXWbXAAnfNe23tKnBUPczWdseoa1PkV+7toc2QUBJDmQV3Doscx5oizBP3jmujZdyIIvaDPKntnnsjC8AAPAAAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0563{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1492167350385,"flow_last_seen":1492167350385,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":51507,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"ssl.gstatic.com"}}
+0849{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":2048,"pkt_ipoffset":14}
+2174{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":83,"pkt":"8IQvSpdgeJKcD6iOCABFAABFvzVAAEAR9UbAqAFnrNkXQ8kzAbsAMQogDDHWY7YNkySLBOrASIpV41hPskm0GMKG4qO9Zgt0H6YdoS0lP52KlgM=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":73,"pkt":"eJKcD6iO8IQvSpdgCABFoAA7AABAADcRvOas2RdDwKgBZwG7yTMAJzAnAAKyFCqrim3sDOQE\/XDJpR12pzfvYmnKHzCB9qcEGg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":72,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7yTMAJhITAAOOiWkWxkr2BoDxvqS3cLitwaYkv2m85is5NMlI","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":80,"pkt":"8IQvSpdgeJKcD6iOCABFAABCvzZAAEAR9UjAqAFnrNkXQ8kzAbsALqnmDDHWY7YNkySLBWKbf5etVeyiT33m0Z2Ue\/M3a2Vjw+Gv8zEJQBQ=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":328,"pkt":"eJKcD6iO8IQvSpdgCABFoAE6AABAADcRu+es2RdDwKgBZwG7yTMBJlJfAAQqNhNwzYSAXgmLkJsHpaAzRcBJayS1EpBkIgCW6fSDanYiNcFDAyPxbhdyRJqZD812kkSsRg+WUvT2KLaAyICsFWnAnwk25HPdQVI0wTzVQyDtCqN3YJqvfGHNzs+iLVfPp633VV0GJn4ObnKaYxfsnXCcrr\/IPqTYnLCfzUCGvEjuI6q6FQVoVp9FcQHRTXKqHrZAi0qjsHco6cUwphiazOWMSRF55gV3avowYEEq4lB2TRknAueP8WFqaF4hLEqRRUI2CbDnbPXy7uPzDzqE00ePIM5ECbqBFllGv264I2q2dptJEcfnN5ks5RU+6VVOddalILKch814mN3H5TVjmomuT2C55qzhNAuB1epiyEtycgjMOuSgdAc8HQ==","pkt_caplen":328,"pkt_type":2048,"pkt_ipoffset":14}
+0416{"flow_id":8,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":80,"pkt":"8IQvSpdgeJKcD6iOCABFAABCvzpAAEAR9UTAqAFnrNkXQ8kzAbsALrPCDDHWY7YNkySLBmo4YJbUlXxqD2ZC063Gtj+1aqDqaJQXEvzUnwc=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+2197{"flow_id":8,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":8,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":72,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7yTMAJnCsAAYr4opWZHoPXiPXDtetp+RWij5Bf+N3uVPD\/CKR","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":8,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167350,"pkt_len":80,"pkt":"8IQvSpdgeJKcD6iOCABFAABCvztAAEAR9UPAqAFnrNkXQ8kzAbsALs6hDDHWY7YNkySLB82utXxuM1jeW4I\/i0nY4r7ntsp3eUSD88EIprU=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1492167351026,"flow_last_seen":1492167351026,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":75,"pkt":"8IQvSpdgeJKcD6iOCABFAAA92FdAAEAR3aLAqAFnwKgB\/to2ADUAKSL33acBAAABAAAAAAAABGRvY3MGZ29vZ2xlA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1492167351026,"flow_last_seen":1492167351026,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleDocs","category":"Collaborative"},"dns": {"query":"docs.google.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0613{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":227,"pkt":"eJKcD6iO8IQvSpdgCABFoADVAABAAEARtMLAqAH+wKgBZwA12jYAwUoh3aeBgAABAAEABAAEBGRvY3MGZ29vZ2xlA2NvbQAAAQABwAwAAQABAAAA2QAE2DrGLsARAAIAAQACiyoABgNuczLAEcARAAIAAQACiyoABgNuczHAEcARAAIAAQACiyoABgNuczPAEcARAAIAAQACiyoABgNuczTAEcBPAAEAAQAFOEYABNjvIArAPQABAAEABS50AATY7yIKwGEAAQABAAUudAAE2O8kCsBzAAEAAQAFLnQABNjvJgo=","pkt_caplen":227,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1492167351026,"flow_last_seen":1492167351061,"flow_tot_l4_data_len":234,"flow_min_l4_data_len":41,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.GoogleDocs","category":"Collaborative"},"dns": {"query":"docs.google.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"216.58.198.46"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1492167351067,"flow_last_seen":1492167351067,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.198.46","src_port":57591,"dst_port":443,"l4_proto":"udp"}
+2178{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0578{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1492167351067,"flow_last_seen":1492167351067,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.198.46","src_port":57591,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.GoogleDocs","category":"Collaborative"},"quic": {"hostname":"docs.google.com"}}
+1624{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":969,"pkt":"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","pkt_caplen":969,"pkt_type":2048,"pkt_ipoffset":14}
+2200{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":83,"pkt":"8IQvSpdgeJKcD6iOCABFAABFbRRAAEARbRvAqAFn2DrGLuD3AbsAMQ6vDE3ZCrKMtFhpA7Y9jgNT0qCEjni6SuPZWM+AykfeqYgCOx\/sRFcfvEI=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":73,"pkt":"eJKcD6iO8IQvSpdgCABFoAA7AABAADcR4pnYOsYuwKgBZwG74PcAJ50WAALZroC++876tEf+28S7j2Ttku9RiL8OOFC5+3RXgA==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":80,"pkt":"8IQvSpdgeJKcD6iOCABFAABCbRVAAEARbR3AqAFn2DrGLuD3AbsALv6EDE3ZCrKMtFhpBK1o18SKo\/qbz8U825\/VzcbL6V6+eFmxogbDKI4=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":72,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcR4prYOsYuwKgBZwG74PcAJs97AANw4OTyouUplCAQlCxyR5wFQ8L97KXJUGT9o9Kf","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167351,"pkt_len":72,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcR4prYOsYuwKgBZwG74PcAJmLSAAThnIEPyE2iTeMUNqIIGc3pgi1qVvKpqLMzF+Gl","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1492167352068,"flow_last_seen":1492167352068,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":36017,"dst_port":5228,"l4_proto":"tcp"}
+0396{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePFAAEAGFx7AqAFnQOmnvIyxFGy60MyoSq1b+oAQAO38PQAAAQEICgAwuQeFnMDK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0OfYAACsGqnlA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWVTqwAAAQEICoWdcMgAL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":359,"pkt":"eJKcD6iO8IQvSpdgCABFoAFZAABAADcR4XvYOsYuwKgBZwG74PcBRQmsAAXfXTfs4CpU4zZDcNemGq3fAZVjuSRdySjI0P8ou9U96Fb95XNHQ5Ea8U4ZSmuUymwNiTNbhXsmzwKmBCuRJ4sBmMwptJChUKY0ESXRFy40FVrhyqSFvWzWYlYtv\/hZ43FRhBB9ZsIjDChwOu75W8VxLyhAf4IMvy51o+tsW0yS9eMLTBfOiyqz4NxBP0TuIqIFZQaIOrtR8uF6bo6A5KPpKxsXrQj5MdwsmOS+8COp2q0MzYzIgwFRgg62y0C\/lgco8tigwv3TFtazcfjpsxdmRBSghhQv+39dr+pAFDPhHgHiBhY9k3C6ydjauV5uApNmXzE1nG6gwZfdO2nzy3QDybZ6zVepjUf5UgvoZw3\/cp8oXD+UVRyQRlUziULxsVtRwqeiTfuyA5SFGNz7lnlALVNnIyGt8JlNqjk=","pkt_caplen":359,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":87,"pkt":"eJKcD6iO8IQvSpdgCABFoABJAABAADcR4ovYOsYuwKgBZwG74PcANSDZAAauBtGOwFjLL1Lk85SZ2kaRRdWlzbgwiQR4YswhN4p3ezcTMujbIkqf\/FW9","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":86,"pkt":"8IQvSpdgeJKcD6iOCABFAABIbddAAEARbFXAqAFn2DrGLuD3AbsANL1NDE3ZCrKMtFhpBQoBtYakBkLfRax+TOi6IfaF3077Z7hpEcpobbJ7derDkLk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":70,"pkt":"eJKcD6iO8IQvSpdgCABFoAA4AABAADcR4pzYOsYuwKgBZwG74PcAJIY2AAeeeUXUuwqERc9o6KyNGYuNKj080+Ib8mkGTA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167352,"pkt_len":77,"pkt":"8IQvSpdgeJKcD6iOCABFAAA\/bd1AAEARbFjAqAFn2DrGLuD3AbsAK7F2DE3ZCrKMtFhpBm7kl79oV\/7DDgt7GHK2JHDMxM8dDtJ486Q=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1492167353674,"flow_last_seen":1492167353674,"flow_tot_l4_data_len":230,"flow_min_l4_data_len":230,"flow_max_l4_data_len":230,"flow_avg_l4_data_len":230,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54058,"l4_proto":"tcp"}
+0667{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":264,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwRAACwGsNrLzZeiwKgBZwG70ypPgUs4IVggsIAYAQuBHwAAAQEICkXRpIYAMKn\/FwMDAMGOrZUQQd+ekzcfermPixMN7baWMlCLOjLGRLUay7A9ywN4ZUGmiUXDO1gdTDC98QU1t8eAbnyMFUBj5qM3d0y5XCUUPMCeBhhxcxN\/8G4Ch12FyipeyhGtwqgzXcsPc5ZQsJ\/Yfu\/XdVaAYYDYsfkQdrrVo9IGd6i0jIOj1GEXv+MuFcw5UP8MbQ5QLfOihRir7leYEOxmHGeDrisZkZBhOzKLL2Q5myihhKQJ9yeXWCsp\/s4j9ebB8kfX1kVSE8Aa","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8JAAEAGdYLAqAFny82XotMqAbshWCCwT4FL\/oAQAcj35wAAAQEICgAwuphF0aSG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0B7VAAEAGDZDAqAFny82XotNEAbsWJbkHbCUOQ4ARAk6RTgAAAQEICgAwuptF0Z5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1492167353687,"flow_last_seen":1492167353687,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40741,"dst_port":443,"l4_proto":"tcp"}
+0381{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoXgBAAEAGtx\/AqAFny82X058lAbtnDvSGeC5ApFARAOXT9QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1492167353687,"flow_last_seen":1492167353687,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54085,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0QwNAAEAG0kHAqAFny82XotNFAbtA8usy6z8oEoARAOWo0QAAAQEICgAwuptF0ZJx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1492167353687,"flow_last_seen":1492167353687,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8ZmlAAEAGrtPAqAFny82XotNJAbvI4NzyAAAAAKACchB6zAAAAgQFtAQCCAoAMLqbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1492167353937,"flow_last_seen":1492167353937,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8a3xAAEAGqcDAqAFny82XotNKAbuhD9GmAAAAAKACchCtqQAAAgQFtAQCCAoAMLraAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167353,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0bFFAACwGvFPLzZeiwKgBZwG700RsJQ5DFiW5CIAQAQCMMwAAAQEICkXRpNcAMLqb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0vARAACwGbKDLzZeiwKgBZwG700XrPygSQPLrM4ARAHCW2wAAAQEICkXRpNsAMLqb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0QwRAAEAG0kDAqAFny82XotNFAbtA8usz6z8oE4AQAOWWFAAAAQEICgAwuu1F0aTb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoK49AAC4G+vDLzZfTwKgBZwG7nyV4LkCkZw70h1AQAHPUZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoK5BAAC4G+u\/LzZfTwKgBZwG7nyV4LkCkZw70h1ARAHPUZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoev1AAEAGmiLAqAFny82X058lAbtnDvSHeC5ApVAQAOXT9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG700mLgJvryODc86ASN8g1VAAAAgQFoAQCCApF8RJmADC6mwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZmpAAEAGrtrAqAFny82XotNJAbvI4Nzzi4Cb7IAQAOWalAAAAQEICgAwuvZF8RJm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiZmtAAEAGrevAqAFny82XotNJAbvI4Nzzi4Cb7IAYAOVDAAAAAQEICgAwuvZF8RJmFgMBAOkBAADlAwMg8ecmhVvNIGBKxVKhOhJWIrAbXQB1XAVkfDWfr1I96iDQqVQUi2ekdsYx76vXfMv4reYubqyVUBJq1nTozJ\/kzAAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABgqKgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1492167353687,"flow_last_seen":1492167354049,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0409{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG700oogx9AoQ\/Rp6ASN8hHnAAAAgQFoAQCCApF8RKkADC62gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a31AAEAGqcfAqAFny82XotNKAbuhD9GnKIMfQYAQAOWs3QAAAQEICgAwuzRF8RKk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0iSlAAC0GnnvLzZeiwKgBZwG700mLgJvsyODd4YAQAHiZtAAAAQEICkXxEsUAMLr2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIiSpAAC0GmObLzZeiwKgBZwG700mLgJvsyODd4YAQAHju1AAAAQEICkXxEsYAMLr2FgMDAF0CAABZAwM1kPQW92cguevuQqDaCbRcD\/G+X6zRfbURm97Uu0BVKCA3foG4i9pV6QeN41xMuSS6TypXmVvnRL5nSZVX0j3qosAvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0781{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":15,"flow_packet_id":6,"flow_first_seen":1492167353687,"flow_last_seen":1492167354430,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0396{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZmxAAEAGrtjAqAFny82XotNJAbvI4N3hi4ChgIAQAPuTPQAAAQEICgAwu1VF8RLG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":15,"flow_packet_id":8,"flow_first_seen":1492167353687,"flow_last_seen":1492167354487,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Zm1AAEAGrtfAqAFny82XotNJAbvI4N3hi4CnFIAQARGNhQAAAQEICgAwu2NF8RLG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4iSxAAC0GnXTLzZeiwKgBZwG700mLgKcUyODd4YAYAHgviAAAAQEICkXxEsYAMLr2fTScOdm56ml7v1ofTVAkfVhd3wcrzURPmgmRKtBv2u80x9TnTxKtBnp2tzJvxT7yoK7qis+ID2ApL4Bg1FSshJivuWkb9x\/9I4xx7OzQ29cEdb4Qd8G3dnaBoRFgtpqrZd2VBPSjYjYstYO0oDVVYHM8jQlx9PCqFzGdHuRBpnuVBhSZsWykeif6s2sxXA7+43gpYo8JwIoAcuk5uZKdqLLaMhSPOw7XEhl4OLVKkcg6YAFkzpUfZkfB+G1B9nCg5GnUrcb8dtjLw77P\/8DIKbUlq2Li322jlWf9tleQaJX3Pcg3aj1TcUjxdk2Jw\/0XY2Rlsl5ThM\/ogtUWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Zm5AAEAGrtbAqAFny82XotNJAbvI4N3hi4CoGIAQASiMagAAAQEICgAwu2NF8RLG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyZm9AAEAGrlfAqAFny82XotNJAbvI4N3hi4CoGIAYASgXIAAAAQEICgAwu2RF8RLGFgMDAEYQAABCQQRBUqcOr\/Fo9LfujpCB1YIK12c6eVV75kVsU8e5xArVru79k3ajtqlrZp0McDR+8QZPDpNm6ocQtMz6EuG9VJxYFAMDAAEBFgMDACgAAAAAAAAAAB9QQJRpQW0QXzIXXukwJtDqaRVZoRNnEF6LSTogjsgs","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABniS1AAC0GnkTLzZeiwKgBZwG700mLgKgYyODeX4AYAHiZewAAAQEICkXxEzMAMLtkFAMDAAEBFgMDACjTZNtyCweq2cjQQzxGpVecoDk5dDO33TmzV16l2q5lvjybNw5JFWfK","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1044{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167354,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEia35AAEAGqNjAqAFny82XotNKAbuhD9GnKIMfQYAYAOWR5gAAAQEICgAwvEFF8RKkFgMBAOkBAADlAwPQGPUQ73ic+7iVIAjQSjq5W05BxFF6D6kJRu\/s5h+d6yA3foG4i9pV6QeN41xMuSS6TypXmVvnRL5nSZVX0j3qogAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIGhoAHQAXABgaGgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1492167353937,"flow_last_seen":1492167355372,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2008{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0dwVAACwGsZ\/LzZeiwKgBZwG70ypPgUv+IVglVIAQAR3wRAAAAQEICkXRpoMAMLxF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":264,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwZAACwGsNjLzZeiwKgBZwG70ypPgUv+IVglVIAYAR1S1AAAAQEICkXRpoQAMLxFFwMDAMGOrZUQQd+elO6yUWZaxB1XMRBaU5iIrSWBDYFMTBklza86ZAJ6mlfc+fSz1nangNwW6dDHehHKK9aovFSe8h\/p4B1XlNKo6T5XxbmSKu1Sbxvxyur1MrHjSISlyLPclpL0f6AhZsZEEcReSmOdovjdyShnPTyu0ybkZB4WFJHVgACkcFaPkTxnnNq1rLUf91oPxf\/kt+Uc1aHDCkMk\/Kcb18Ipw1elIOYbN1xUGZ7sM+yxphWAWHZg+LCttdBqRoJi","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8RAAEAGdYDAqAFny82XotMqAbshWCVUT4FMxIAQAd7uawAAAQEICgAwvJZF0aaE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1492167355723,"flow_last_seen":1492167355723,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8P4ZAAEAG1bbAqAFny82XotNLAbtsCoMeAAAAAKACchAveAAAAgQFtAQCCAoAMLyYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0C01AAC4GG1jLzZeiwKgBZwG700oogx9BoQ\/SlYAQAHip5wAAAQEICkXxFAwAMLxB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":16,"flow_packet_id":6,"flow_first_seen":1492167353937,"flow_last_seen":1492167355743,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a39AAEAGqcXAqAFny82XotNKAbuhD9KVKIMk1YAQAPujcgAAAQEICgAwvJ1F8RQO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2319{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":16,"flow_packet_id":8,"flow_first_seen":1492167353937,"flow_last_seen":1492167355744,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4BAAEAGqcTAqAFny82XotNKAbuhD9KVKIMqaYAQARGdxwAAAQEICgAwvJ5F8RQO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4C1BAAC4GGlHLzZeiwKgBZwG700oogyppoQ\/SlYAYAHgcYwAAAQEICkXxFA4AMLxBrWqcYcmfgNeSEdnmJ5nyoHMAVeaBIcWYcz1pTCm2RGV7eUnYOO875YQ7xSqd2OzVA8qQXCPv27uKii008HP8GoLtpFGi0DAXndkfaNsefxALbcNqDrb\/EWVo7Od6q+is7u5kx8PwNSqcxfsH91yNQcsoNLmMNFHkzBwRHwtGsIcfF28w+wIumV\/7PrhP\/kvYEvyt+LEaddd+XZ2KB7za+Pe\/6Zq6By2Tb5BP2VLakhk+dc+A47b3kd8v58hS77Lns3WXAriAzfOs52nM8qdtSkZFmISUhdKxui67nouiSz0WuB8H5xQdMkNKMvhWjR5J3Apj3uim9AQtresWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4FAAEAGqcPAqAFny82XotNKAbuhD9KVKIMrbYAQASicrAAAAQEICgAwvJ5F8RQO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167355,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACya4JAAEAGqUTAqAFny82XotNKAbuhD9KVKIMrbYAYASgmpQAAAQEICgAwvJ5F8RQOFgMDAEYQAABCQQTW54G5ygZMFzJMA3QBRi+4YfZQ+vrY+14xhh043NTgIW2nN5Djq6OJrGE\/Q5SMlEm02FDXSZWOKU4JGAF0RPduFAMDAAEBFgMDACgAAAAAAAAAACGgOeAaPsug5OT\/xG+f46v\/aO1Xc8JTQ0kZfPBt8fdC","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG700uz8YPYbAqDH6ASN8iq2QAAAgQFoAQCCApFrUFyADC8mAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4dAAEAG1b3AqAFny82XotNLAbtsCoMfs\/GD2YAQAOUQHAAAAQEICgAwvPFFrUFy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiP4hAAEAG1M7AqAFny82XotNLAbtsCoMfs\/GD2YAYAOVYrwAAAQEICgAwvPFFrUFyFgMBAOkBAADlAwPrb22xHnXa3171HQ\/x0N7leORqlrAubtrqrBze9\/ohpiA3foG4i9pV6QeN41xMuSS6TypXmVvnRL5nSZVX0j3qogAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8amoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIamoAHQAXABi6ugABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1492167355723,"flow_last_seen":1492167356077,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0470{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnC1FAAC4GGyHLzZeiwKgBZwG700oogyttoQ\/TE4AYAHitFQAAAQEICkXxFGkAMLyeFAMDAAEBFgMDACi\/lY9ttWYgixpZVnLivPTiYtg2AlyBjdFSnoTBoX1jmkDYSHWa6jpY","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvOpAAAERGbTAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0420{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvOtAAAERGbPAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0398{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4NAAEAGqcHAqAFny82XotNKAbuhD9MTKIMroIAQASibPAAAAQEICgAwvQJF8RRp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0whVAAC0GZY\/LzZeiwKgBZwG700uz8YPZbAqEDYAQAHgPQQAAAQEICkWtQcwAMLzx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2315{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":17,"flow_packet_id":6,"flow_first_seen":1492167355723,"flow_last_seen":1492167356488,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4lAAEAG1bvAqAFny82XotNLAbtsCoQNs\/GJbYAQAPsIwwAAAQEICgAwvVhFrUHM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2670{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":17,"flow_packet_id":8,"flow_first_seen":1492167355723,"flow_last_seen":1492167356489,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4pAAEAG1brAqAFny82XotNLAbtsCoQNs\/GQBYAQARUCEQAAAQEICgAwvVhFrUHM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyP4tAAEAG1TvAqAFny82XotNLAbtsCoQNs\/GQBYAYARXmRwAAAQEICgAwvVhFrUHMFgMDAEYQAABCQQSK1xuoI\/EoM9LICk0fk\/dqoOaDBID8gzK5B4fzI1nC7bPJSViPhx8rygylgSJtQ08wpWYxrO6Tiw+b1qSjy8ZQFAMDAAEBFgMDACgAAAAAAAAAAFWZZ4LhzH+dBrtI+pdWhmOWc4CJbHUk7r6Bu7ogdr6t","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+2008{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnwhlAAC0GZVjLzZeiwKgBZwG700uz8ZAFbAqEi4AYAHhE5wAAAQEICkWtQjMAML1YFAMDAAEBFgMDACgnBMv9ASURh8KYAMFphlTJKv7mOV6REhDxcVQav2y2QTSJZzWIeLbA","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0dwdAACwGsZ3LzZeiwKgBZwG70ypPgUzEIVgp+IAQATDohwAAAQEICkXRp6gAML1g","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167356,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P4xAAEAG1bjAqAFny82XotNLAbtsCoSLs\/GQOIAQARUAlgAAAQEICgAwvbtFrUIz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167357,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvRNAAAERGYvAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167357,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0420{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167359,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEvmhAAAERGDbAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167359,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0475{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":121,"pkt":"eJKcD6iO8IQvSpdgCABFoABrfSgAADcGnizYOs1OwKgBZwG7ugsgLP3V+HJvr4AYAV2wggAAAQEICvap78EAL9cAFwMDADI7\/WDixcApjMc4oo49oFJiwuyoshtW5rSqz9ahoHcSOkzcmjO3CkNO6pgK6XLAf2uLNg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0u5lAAEAGF5LAqAFn2DrNTroLAbv4cm+vICz+DIAQATUj0AAAAQEICgAwwWH2qe\/B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fSkAADcGnmLYOs1OwKgBZwG7ugsgLP4M+HJvr4ARAV0OCQAAAQEICvap78EAL9cA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0u5pAAEAGF5HAqAFn2DrNTroLAbv4cm+vICz+DYARATUjzgAAAQEICgAwwWH2qe\/B","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":121,"pkt":"eJKcD6iO8IQvSpdgCABFoABr4O8AADcGG8es2RdOwKgBZwG7z+SKJZg8+z2t2oAYAVTREQAAAQEICn7IL7IAL9cCFwMDADL\/QQeiav2tbjoNjgJzOU4UPNZPR4RzRuOQ+h3eXjLhIIWjbE1Sb3YuyocNPQRCTo9EPA==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ew5AAEAGOX\/AqAFnrNkXTs\/kAbv7Pa3aiiWYc4AQAT3h6gAAAQEICgAwwWJ+yC+y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ew9AAEAGOX7AqAFnrNkXTs\/kAbv7Pa3aiiWYc4ARAT3h6QAAAQEICgAwwWJ+yC+y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":6,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA04PAAADcGG\/2s2RdOwKgBZwG7z+SKJZhz+z2t2oARAVTMMwAAAQEICn7IL7IAL9cC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":6,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0exBAAEAGOX3AqAFnrNkXTs\/kAbv7Pa3biiWYdIAQAT3h6AAAAQEICgAwwWJ+yC+y","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fUYAADcGnkXYOs1OwKgBZwG7ugsgLP4N+HJvsIAQAV0jgAAAAQEICvap7+cAMMFh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":6,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167360,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA04RQAADcGG9ms2RdOwKgBZwG7z+SKJZh0+z2t24AQAVThqwAAAQEICn7IL9gAMMFi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167366,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0a4RAAEAGqcDAqAFny82XotNKAbuhD9MTKIMroIARASiQuQAAAQEICgAwx4RF8RRp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167366,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P41AAEAG1bfAqAFny82XotNLAbtsCoSLs\/GQOIARARX2ygAAAQEICgAwx4VFrUIz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1492167366908,"flow_last_seen":1492167366908,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167366,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8lZ5AAEAGf57AqAFny82XotNMAbt+X1IbAAAAAKACchBDOAAAAgQFtAQCCAoAMMeFAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1492167367159,"flow_last_seen":1492167367159,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54093,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8UGVAAEAGxNfAqAFny82XotNNAbtphJemAAAAAKACchASSQAAAgQFtAQCCAoAMMfDAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG700zSrc67fl9SHKASN8jkhQAAAgQFoAQCCApF0bHCADDHhQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0lZ9AAEAGf6XAqAFny82XotNMAbt+X1Ic0q3OvIAQAOVJ0gAAAQEICgAwx9RF0bHC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEilaBAAEAGfrbAqAFny82XotNMAbt+X1Ic0q3OvIAYAOWQkQAAAQEICgAwx9VF0bHCFgMBAOkBAADlAwMIMAddqPI8parJRh1yfNKrDdpzlU1BZ7DFnpjp1nvcByAw4BRL3PXeGMjW+qUk6QYvRqoU0TSzHBocUA21W5zrfgAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8CgoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABhaWgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1492167366908,"flow_last_seen":1492167367228,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0whpAAC0GZYrLzZeiwKgBZwG700uz8ZA4bAqEjIARAHjtOgAAAQEICkWtTF8AMMeF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0P45AAEAG1bbAqAFny82XotNLAbtsCoSMs\/GQOYAQARXsRQAAAQEICgAwx91FrUxf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG7002nXL3IaYSXp6ASN8hVJQAAAgQFoAQCCApFrUycADDHwwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGZAAEAGxN7AqAFny82XotNNAbtphJenp1y9yYAQAOW6bQAAAQEICgAwyBZFrUyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fK9AACwGq\/XLzZeiwKgBZwG700zSrc68fl9TCoAQAHhI\/wAAAQEICkXRshMAMMfV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIfLBAACwGpmDLzZeiwKgBZwG700zSrc68fl9TCoAQAHjqewAAAQEICkXRshMAMMfVFgMDAF0CAABZAwODHFehjzW0hk5sWu5Ge8mFKciWQxbsw86zd9rLy\/qzTiB+R4AGaiYYG\/eTLeHwwqwepnXhm94m+8GpHgG9docrHMAvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1492167366908,"flow_last_seen":1492167367549,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0laFAAEAGf6PAqAFny82XotNMAbt+X1MK0q3UUIAQAPtCmAAAAQEICgAwyCVF0bIT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIfLFAACwGpl\/LzZeiwKgBZwG700zSrdRQfl9TCoAQAHicWQAAAQEICkXRshMAMMfVi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQQP9onIxoqLlfKiUkbNgc+7yiRr7efVCxTibCqk9XQPMVvI9Aoe7O3LDaU6dLhOg8DRChtxEwJtY+NElt6TxP6+BgEBAL68Lae5","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":18,"flow_packet_id":8,"flow_first_seen":1492167366908,"flow_last_seen":1492167367550,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0laJAAEAGf6LAqAFny82XotNMAbt+X1MK0q3Z5IAQARE87gAAAQEICgAwyCVF0bIT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4fLJAACwGqu7LzZeiwKgBZwG700zSrdnkfl9TCoAYAHiNUgAAAQEICkXRshMAMMfV\/wUPj3J3gO0mKBbdMGG\/+oXHBAxnimdIiFbV5u3a8dOOCJ1fcmGnWeedg7V43T21vlini6SKaOHKuodqV+w9ljmEmp0jLlHMp+UH+4V8hIbgmPMk90l+vzhTNLfNph5Xv\/QVOsM2OTjI1rxhiQsLx1zzPlyStw5nZt7Ztpqi170qLzM3nZy2FH1ADBNtxpHLBUm59b+kWdwy2OjeYEQGB3Of58swX+iQSmZo2yxFIaV6Ib\/bWBqr59jlr2DeGQ8ZpdLz6ZfTi3O8GzeLU0IgCgTPvD1UwjI8NUD\/xpAsvNZWIYmahxWM4i7xxZVVCvD5mTDGY3Fj81uJL24WAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0laNAAEAGf6HAqAFny82XotNMAbt+X1MK0q3a6IAQASg70wAAAQEICgAwyCVF0bIT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACylaRAAEAGfyLAqAFny82XotNMAbt+X1MK0q3a6IAYASgkIgAAAQEICgAwyCZF0bITFgMDAEYQAABCQQTveG3rIh3CStSj2Ej8oZKjD6fPv4Zm5j73uoUBJkEyDJR7JI\/xTp+IXOX0cQ517HOU0AOEM8PYVZX16C+XbL0SFAMDAAEBFgMDACgAAAAAAAAAAI3j+oZoCVoti\/yJohzvO7U6mfithyrObgOOY0osFUwd","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnfLNAACwGq77LzZeiwKgBZwG700zSrdrofl9TiIAYAHiR6wAAAQEICkXRsmQAMMgmFAMDAAEBFgMDACigH1Pqvpx6glAchlJIiCYaZgsWq\/SuI4OIVAnKw7sHl6dm9A7srZiY","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1987{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":1234,"pkt":"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","pkt_caplen":1234,"pkt_type":2048,"pkt_ipoffset":14}
+1055{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167367,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167368,"pkt_len":264,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwhAACwGsNbLzZeiwKgBZwG70ypPgUzEIVgp+IAYATAEDwAAAQEICkXRss0AML1gFwMDAMGOrZUQQd+elU\/DgUOG7rXEfGlXnP3f\/qtwD0QWH9JQRgh3eLUoz0vysMOcJ7f\/q3bTGvZaljp1pa5aJOMWJzcLrndD5iwSOOk0dA\/\/aK1o5TSkWOSY1xYuU54JF\/7z89qcINevWo4jgaZZcb36Pc81OKbU6rr1kptdMEF5wXI6Kq+BtztlYTWzcEEsUegeCVWkzvsSZ3wYYsu4Y3AWkZWXeWmB1k3Cf5\/z3\/eg4WyzTWXQoAtCqwCDVM1ZhxZcg2G4","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167368,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8ZAAEAGdX7AqAFny82XotMqAbshWCn4T4FNioAQAfTQWQAAAQEICgAwyN9F0bLN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2020{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167368,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":19,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167368,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG7002nXL3IaYSXp6ASN8hTlgAAAgQFoAQCCApFrU3YADDIFgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":19,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167368,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGdAAEAGxN3AqAFny82XotNNAbtphJenp1y9yYAQAOW5NQAAAQEICgAwyU5FrUyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167369,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0dwlAACwGsZvLzZeiwKgBZwG70ypPgU2KIVgunIAQAUPLUAAAAQEICkXRs4AAMMlC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1492167377896,"flow_last_seen":1492167377896,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.142","src_port":49787,"dst_port":443,"l4_proto":"tcp"}
+0397{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167377,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0KM9AAEAGqhzAqAFn2DrNjsJ7AbvMOVSD1yvysIAQAT1vHQAAAQEICgAw0kAycerX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167377,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0Fj0AADQGCA\/YOs2OwKgBZwG7wnvXK\/KwzDlUhIAQAVQWugAAAQEICjJymzYAMHos","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0670{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167378,"pkt_len":264,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6dwpAACwGsNTLzZeiwKgBZwG70ypPgU2KIVgunIAYAUO4gwAAAQEICkXRvJsAMMlCFwMDAMGOrZUQQd+elpC6jXhQN0+OxKQcXsPaqnj+1ENZvcp3idjqige3Sp9lPHY+uJ33v64WfeuccJb2L+GFejBrHAWHVOhnbSAio2DFRSfAwDsFczqmZec8k66\/IRNX2\/z\/5YWZCT3eOmwSfnOC\/\/ADwJooRdfKE1JqLKXihpm3LUObOHaO66Lyygop\/1BlV5aspusDNcuRRtxWYmgN4FP8dI0tJbYetqwRirIWR9ioMQDFa6HRsijSdDMzvTAkfIMOaFem","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167378,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0n8hAAEAGdXzAqAFny82XotMqAbshWC6cT4FOUIAQAgu3OwAAAQEICgAw0q5F0byb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":19,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167378,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGhAAEAGxNzAqAFny82XotNNAbtphJenp1y9yYARAOWvgAAAAQEICgAw0wJFrUyc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1492167378674,"flow_last_seen":1492167378674,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167378,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8mSRAAEAGfBjAqAFny82XotNOAbtKc0omAAAAAKACchBzmgAAAgQFtAQCCAoAMNMCAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1492167378926,"flow_last_seen":1492167378926,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167378,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8cOpAAEAGpFLAqAFny82XotNPAbtxraOrAAAAAKACchDymgAAAgQFtAQCCAoAMNNBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":19,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA08+5AACwGNLbLzZeiwKgBZwG7002nXL3JaYSXqIARAHCktAAAAQEICkWtV9wAMNMC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":19,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0UGlAAEAGxNvAqAFny82XotNNAbtphJeop1y9yoAQAOWj7QAAAQEICgAw01RFrVfc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG7005qx4IjSnNKJ6ASN8i96gAAAgQFoAQCCApF0b0+ADDTAgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0mSVAAEAGfB\/AqAFny82XotNOAbtKc0onaseCJIAQAOUjLAAAAQEICgAw01xF0b0+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":21,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEimSZAAEAGezDAqAFny82XotNOAbtKc0onaseCJIAYAOUQ7wAAAQEICgAw01xF0b0+FgMBAOkBAADlAwOGOumiw0u0u0I6gmpzIGxnGk0VZSO+6aIdnNrT8rHiHCB+R4AGaiYYG\/eTLeHwwqwepnXhm94m+8GpHgG9docrHAAgiorMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABiqqgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":21,"flow_packet_id":4,"flow_first_seen":1492167378674,"flow_last_seen":1492167379034,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0409{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG7009k83t+ca2jrKASN8iurAAAAgQFoAQCCApFrVgaADDTQQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cOtAAEAGpFnAqAFny82XotNPAbtxraOsZPN7f4AQAOUT8AAAAQEICgAw05lFrVga","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":21,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0P71AAC0G5+fLzZeiwKgBZwG7005qx4IkSnNLFYAQAHgiUAAAAQEICkXRvZkAMNNc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":21,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":21,"flow_packet_id":6,"flow_first_seen":1492167378674,"flow_last_seen":1492167379396,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":21,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0mSdAAEAGfB3AqAFny82XotNOAbtKc0sVaseHuIAQAPsb3QAAAQEICgAw07dF0b2a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2666{"flow_id":21,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":21,"flow_packet_id":8,"flow_first_seen":1492167378674,"flow_last_seen":1492167379397,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":21,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0mShAAEAGfBzAqAFny82XotNOAbtKc0sVaseOUIAQARUVKwAAAQEICgAw07dF0b2a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":21,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACymSlAAEAGe53AqAFny82XotNOAbtKc0sVaseOUIAYARXHHQAAAQEICgAw07hF0b2aFgMDAEYQAABCQQQDGk5eUBtKpsuLsWox1TrmdQjPGpitnO2j07CAKLAS9gK8+k0MWvCOzEv3KKallXpE2DShuJG56zcCZdCOOMJWFAMDAAEBFgMDACgAAAAAAAAAAJ2Non8CnOdee+SRAiPzB6j6y9fjWuZ0WgelacS8R+j5","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":21,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnP8FAAC0G57DLzZeiwKgBZwG7005qx45QSnNLk4AYAHgb+QAAAQEICkXRvfQAMNO4FAMDAAEBFgMDAChHOK6vDZXWbpq+G499J6WMaHFpG+2cm4rM3CIy5gGcC08FRdTkYbul","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2081{"flow_id":21,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":1306,"pkt":"8IQvSpdgeJKcD6iOCABFAAUMmSpAAEAGd0LAqAFny82XotNOAbtKc0uTaseOg4AYARVxFgAAAQEICgAw1BFF0b30FwMDBNMAAAAAAAAAAbOVPHTbKfBFwkP9mv6hoolvveFHHrJwEieblRW5\/NpJYOOiqgMCz4wfm4BoKm1X9Yo3PUVFeJGcKRp9to8\/42HTS74evwyzxvKD+Wks+2Qqxg4XTxD6efK3FvsEypGixafgUS13pMMshs2G5r\/QH2g89cqHO3p+KPAxZWDuN9b\/6ycW2U0uitBc5wTwO6XcpqMHIKaLEZEoSQYnXxWUwkF0TcuOxxaZ72TCEP6BQQDxiFmE08ZXv05zDwMCKi2hjQd3Hi3muU9Av922RYmGWDlGiR1I557m+uFapiv0uRp\/Ct3J4rqMjr8FRnUGLSdmIS+ZnsksStFwzvAL\/IPQtzUmVvCfO5wdjFHvhv39mZq6gkpgIwmMt1ylsnqjGuMLS1HwjOPabUsr3HtgTIrwSeM9qOaJPxH3cPBdTyfOyq5JSVWTrvdizWnkAUmljGamSmkmKY9eOMaQ651cY51TFsH7gM2Okzz1pDMs5FlZeJ6fU9jrwrDTjgjYqgfv2xOyEahIMIYGB5lgxPVRR0z6eTHMH5zXQw5E35eGTxTCjQzUUi3TUDtredbmpk53KdRNVQMzaRAq1UyUs5DIJPGbiQWuWQ4E75fqO5k7vaEhmd0KTj\/YsORgSD32oFgJsKNrBMFzYq7rKREjPXkvWrmgjY1Wd44FdfY+c7dw3NP3Tda0N+rMNhQIR1TxLOBzMTnqiEXs0E\/6oLgKCaQPVT\/yK4zGAjndvL056z4cFdtA6FlpqxbPDOrGORF3mgeRsNtc+oeBS+AVKkb5wogst2MCgd8agPnChNyV6TWoB5E+s5QjXWvehR75PS8NVFlnSzVHs7aZJj9FI4Rr1YWLWP41KezwtI20PTzSSb2VwbvatrTk+3l9TwYma88RBaRbhlowgXPWb3fnG0+ouex1L37kw474WeZ5mcznc7D9HbZvHOqvz1uSTxmyCfIXlncOw5ZHbdnRW\/C1z9bkKRJa0cWm0Yu0d\/DJDRc8SwCtRrOE1dfphQ2ioMqj9ZGcYKhya6pfv6Jj9Rfk2YakP\/bVKDPb7FrnfBoyAY51z+QTf7j63mYOLgLyC685+RWpDoKxuJO2MrLcQFvyzNYVA\/K2gvt\/1ky5Ac47Q0aQXoXDGfTBupL0bT\/1itrPpeJfqM2jbCjvMXyWsZZi7wpVgvkshJpjz0O35MtwgpJWtHfu+mSGl4Ex1cG7NYBhV1ylEjdyT\/aT8wOA2Rnf2cN96YLpfFvSX6QwUwFMUnKhXQkENEyh+oT+7P\/aUdlWnF9OwXUMk045UHlDssLU+FXfJV5svalHx12HmPwd2rDL0cue2RD4uALVpa\/\/bLya4QF8i\/AHjsFOPBOzd6DZ6u\/kgpjsM+2xIseZMUMnwu4o5cqR2Z\/+PchX8wIcyUGzej8OXyamCaWBCGTCwVdpgUKG5WN806BeExfr0cL8\/3pRIihQBckaUymUriaZJaOTO7s3BMuawnuZtZn+37DsN4HGLaD1c52GMswfX0VatbFz3S08A81S43V9mkSYQ9TM5cfenzbb9CeBPJnO3WABGF9BecC7us3Y6oMOQpz1J+1MTX6502sdoxVrTy9zasToEtUYaIBMv96CYNfhzC+5vPbbQQooNubIf7QKESc+dSvQXe3J5Q==","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1050{"flow_id":21,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167379,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":21,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0P8JAAC0G5+LLzZeiwKgBZwG7005qx46DSnNSRoAQAJ8NLQAAAQEICkXRvlAAMNQR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":21,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIP8NAAC0G4k3LzZeiwKgBZwG7005qx46DSnNSRoAQAJ+3HAAAAQEICkXRvlkAMNQRFwMDBjhHOK6vDZXWb8K9uQJpNnm7MY9fWKyx9uA2e2tIKxuPK49b6XnrqL45BR3BcpWqbMCLvAHyedWAoGn4dk2TmK2ATQVsGiXT28fifp8v+RJEOO1QdyHs42f5UmnUvNYrefcHcCjpTB7VI4FwAA8yaw\/5b4E91lHuNv5Di720fCarTra6zDaet7FYt6jsjY1Lk\/G3yR5yW88lJzG\/g9powclcVkQFhHhSeN+rkbyNSLvGxTKbUFT\/CMAql+HX+sTlMRhtVZVNKv\/IqgtrruUyjXx4riz6zvLCS7UVgyhZHMHS\/7pAXoYme3EYd4\/vcswItkvfGSDLsen0IojoOGRI4xbSpLz6XYDk97lTlzJ0M91gB4\/o2YZpEdhnVMroP3JcVfdn53AY9CdZtYDmlsXbZv5LGClSfkhm\/bwTCshn53B7tsA3m7061cPiOt2rMwQDqlwob5v6xAeZZup3tBO+5bqoJXd2vv8kRsXMHpU7l3ZKIqYZ5J9iysRNmkNYbmmtPR6vmiO2yVSAB\/LexXuztbTXE4r5WvUD1wuypAiXqICAbyqQT4mz5XvXMNxbutD9gp4kR12cRcg9D0pJ8OYr3HqeCWomvT3B9TXiHoPKnV+YzNr64gYGtlmwui1YvUmWSq5sJAs4Lg7dz1KjORI1v7ukfJjD0sGdC72JUL33KRjbYV4p3rVhLwKYVmH7fcSH3KZH4LEbYHSeeDscsXlqiBU\/Y6ZTriy8M1AYFe6bQBmyiX2fcXy3Dj5VXPHdnVkXnTwSuo+eN\/fSlVEHCpcmpzWiOXovtUpyWBAYOKGnVQw3iYt9xiXxBYsdv2U3dkZxYDQU\/Vt6bbNAP5wzjoOso2NY3owQ+uXXzqt6HleYG6Bi+n7sJVC0Qz4JCBF0UvmbqZMHK8mmR5CYhvMD0UvXG5e+gQ1\/KPUjkEbxhPoIRuoCw\/fh9bK1kbXojwMsY3Iv6G7bGmPdyMhfY2KsEm8STsDPPVAwtAUig0lRcgs7mOmGOLk\/+L5JVhUKx6LEc\/kQ8w6GwgRiYLh75hMY7Buwz35OlsPvj1iCKS1QBNVJVnQlJ3QiARzCFqWSIUXbdiQZh0QkX2EEq4SmaZJxbDF04QsDXGkWjlegOqyLkZY\/5tD7TS9kc1YYT7Sx17qukq7DQBhP+nSeLybrcKoNdEJdDeng37EDRmmUieCxflso0YL42v24AFXi0vFFKxKB\/nbW8oIXgH1kuQawITOjoB5T1e7fP24Tqeplq50rwAy0yeH02anLOHZVljt2BaTEC3XU8cFcwS6mikLToBcxNRXsOoDedG\/zRwcw5o8xC2JkkHYMCb7W2qKLwrWmgOIvhKRdEwIRV8WN9zWWvCHBYBvnwoqy22CkqIYo3E0C04Uw7RBLeH4o0fuOCYrp9zgjWCs3wo2jAxTe3WwQOxP4Jc43KOrBbzVagVcg1HFAcwtt6b6yIhAkQTsIFTafiH\/w9bpvu2TmmL5LaYgAwkGmjpGI6g4YqpRwunT5BTZzB0pJ2gklU0nc\/2RFXhPZ5n01Wu\/q88HWWLT1D6rInP3ZKksOts9Xk9NG7ujgmIM8Na3mb99aLx\/oO3hYpSvZi0EBdAu4YjMNtQBLkxW+GqppGuOUeIFXjZlC5+yXTxgeF8XUP6vstyg00mTrLNnXLqq+oLqBnzO97Te+5M2U2XDCoXLJPuK5KCyjNaOn7rah454xLSnX01svTtoIItEGJ3nfEQiVm965X6hEDe6Bx0bL6NJo6frsYZzKDFsXJpwhHsAHmDoe+MSgtPK0fG\/u\/IBZvg0uKpK6sTyoTZ5n6Yw9jDkzb37rmEUVpQq9SeGih58vOLiIdCPMLBr9CdV44D4F\/41ZAtP7G8ysUVYmqWkQsg0DKEBQmWmfdTgiE11ZMwClTqwo","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEicOxAAEAGo2rAqAFny82XotNPAbtxraOsZPN7f4AYAOVbvgAAAQEICgAw1IhFrVgaFgMBAOkBAADlAwP\/XNiqxBer6CoBriARmvadzv\/U5kXIDNO5dJQ14ZPOdyCc+qdX8GXELVfQ5N806uYJcFsoXMTX+cAyXbg9n1utjQAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB82toAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIWloAHQAXABiqqgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":22,"flow_packet_id":4,"flow_first_seen":1492167378926,"flow_last_seen":1492167380233,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+2012{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG7009k83t+ca2jrKASN8itLQAAAgQFoAQCCApFrVlBADDTmQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":22,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cO1AAEAGpFfAqAFny82XotNPAbtxraSaZPN7f4AQAOUR2wAAAQEICgAw1MBFrVga","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1492167380581,"flow_last_seen":1492167380581,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8GvtAAEAG+kHAqAFny82XotNQAbtFV84kAAAAAKACchDy2AAAAgQFtAQCCAoAMNTfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":22,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0Ih5AAC4GBIfLzZeiwKgBZwG7009k83t\/ca2kmoAQAHgROQAAAQEICkWtWWEAMNSI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":22,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":22,"flow_packet_id":8,"flow_first_seen":1492167378926,"flow_last_seen":1492167380590,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":22,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cO5AAEAGpFbAqAFny82XotNPAbtxraSaZPOBE4AQAPsKyAAAAQEICgAw1OFFrVli","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":22,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":22,"flow_packet_id":10,"flow_first_seen":1492167378926,"flow_last_seen":1492167380590,"flow_tot_l4_data_len":3438,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":343,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":22,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cO9AAEAGpFXAqAFny82XotNPAbtxraSaZPOGp4AQAREFHgAAAQEICgAw1OFFrVli","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_id":22,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4IiFAAC4GA4DLzZeiwKgBZwG7009k84anca2kmoAYAHjl+gAAAQEICkWtWWIAMNSIRkegUwvMxkxVvteWTRtsy7b6NWkuMrZF4TyVgb+E5NdsFtADy6H37iuqs2GVTfzS3XJPvLl3D+Ri0ojp6RMGjY8ZVkX\/k4QQz9yw\/Njz4veR\/gCMZ6Itbi6hRLL6p9wdeRluCe4af35kT2e2dsJAEwU69kODFYvUDnl2Dque6AtNTIPBK1zE6+TyM0srw6tg\/ElUwrAI8dqVU2p9s+1hIyhy1SQe8f5Mqi921MHuqt2hj4JtmhI3cs4h14ogHwkVPTXKJC+WLXY98QB5iWBEkL9a8b0BCtimgSnGXOR+Ay1FRh8sbaI6RImz4Wph0CkNS4OBDl1wg+lDBuoWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":22,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cPBAAEAGpFTAqAFny82XotNPAbtxraSaZPOHq4AQASgEAwAAAQEICgAw1OFFrVli","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":22,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACycPFAAEAGo9XAqAFny82XotNPAbtxraSaZPOHq4AYASgsOgAAAQEICgAw1OJFrVliFgMDAEYQAABCQQReTD6wNH0MTu2Xeroepy4aexjx4e2n7L2funPy1zNlFaA2FAMr0v5a9I+LJMJgi2pPDvpuviDMGBI6Eh8HOwVTFAMDAAEBFgMDACgAAAAAAAAAADiARZ0NrkHoDDFlyO5g17UpugH+ytdavJRQF9b50Hax","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701DDsQ6LRVfOJaASN8i7gwAAAgQFoAQCCApFrVm2ADDU3wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GvxAAEAG+kjAqAFny82XotNQAbtFV84lw7EOjIAQAOUg0QAAAQEICgAw1S1FrVm2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiGv1AAEAG+VnAqAFny82XotNQAbtFV84lw7EOjIAYAOWJCgAAAQEICgAw1S1FrVm2FgMBAOkBAADlAwPkquj1+KgT4KNlV8MaR+Hdvo3+qTOKljkN+dwtx1j15iCc+qdX8GXELVfQ5N806uYJcFsoXMTX+cAyXbg9n1utjQAg6urMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIqqoAHQAXABj6+gABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":23,"flow_packet_id":4,"flow_first_seen":1492167380581,"flow_last_seen":1492167380894,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0420{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABExrdAAAERD+fAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABExrhAAAERD+bAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0468{"flow_id":22,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167380,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnIiJAAC4GBFDLzZeiwKgBZwG7009k84erca2lGIAYAHihjgAAAQEICkWtWbwAMNTiFAMDAAEBFgMDACh0+E7epZD9eVBRkwrRTXJ2FcCaScxzkJxpEodh7Yei1lVGF6yGLPn7","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0VIpAACwG1BrLzZeiwKgBZwG701DDsQ6MRVfPE4AQAHggAAAAAQEICkWtWgYAMNUt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2315{"flow_id":23,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":23,"flow_packet_id":6,"flow_first_seen":1492167380581,"flow_last_seen":1492167381212,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":23,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Gv5AAEAG+kbAqAFny82XotNQAbtFV88Tw7EUIIAQAPsZmQAAAQEICgAw1X1FrVoG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":23,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":23,"flow_packet_id":8,"flow_first_seen":1492167380581,"flow_last_seen":1492167381212,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":23,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Gv9AAEAG+kXAqAFny82XotNQAbtFV88Tw7EZtIAQARET7wAAAQEICgAw1X1FrVoG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0753{"flow_id":23,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4VI1AACwG0xPLzZeiwKgBZwG701DDsRm0RVfPE4AYAHjX4AAAAQEICkWtWgYAMNUtMtEcXJQP74kjXZiXpO26folEXtE\/5wUdXtwlTodUkQ4eQ0khK3WcW7Fn72amkTQ2YBqN\/S29luRw6pGj8WveriECv6W\/V1sKsSHWojIXmb1R24hbXhjVOMFpTnUO\/38G7ai5USiUxLHmi\/GUxg34DK0IjWMCRruY47ZZUxEQ5bWfimxb4PQTCdVAKgXnRr5qaieYoUmcSfKPzfueCVbS1BQ1EnbyxER3tYNfbGAPlZRoIN9MOSPtlPl6IcGZyV7Vywz8ButClD0PsxQZHJ0N1tFdSbN4K9pjdpD7gpkvEdUsVs4DNujVW8G7Vsm2sWuPrLSW7UN4uAhGzn4WAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":23,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GwBAAEAG+kTAqAFny82XotNQAbtFV88Tw7EauIAQASgS1AAAAQEICgAw1X1FrVoG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":23,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyGwFAAEAG+cXAqAFny82XotNQAbtFV88Tw7EauIAYASgL7wAAAQEICgAw1X5FrVoGFgMDAEYQAABCQQTNVYAcrmfQlaPl+lusSHKltZwaA1QUJnfmsHU\/5UeUi3qvOHyn7p6F40aqB52U8i2Jic+\/6sSY0eAJSOXrOL66FAMDAAEBFgMDACgAAAAAAAAAACRHf0nmIIQuWMwwMntQJ+Pk8tHsI88+iGkCABKxX+mC","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":23,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnVI5AACwG0+PLzZeiwKgBZwG701DDsRq4RVfPkYAYAHhqbgAAAQEICkWtWlUAMNV+FAMDAAEBFgMDAChlnbffjnU8cNa3QzQCV5upK\/xOXB0V5j+uFzM9zOv9dEoYHfMxgqIO","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":23,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GwJAAEAG+kLAqAFny82XotNQAbtFV8+Rw7Ea64AQASgRewAAAQEICgAw1dZFrVpV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABExsdAAAERD9fAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167381,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1492167382020,"flow_last_seen":1492167382020,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40740,"dst_port":443,"l4_proto":"tcp"}
+0381{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167382,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokulAAEAGgjbAqAFny82X058kAbutvz98aYB+jlAQAdESKQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167382,"pkt_len":60,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoL8xAAC4G9rPLzZfTwKgBZwG7nyRpgH6Orb8\/fVAQAIMTdgAAAADZK2u8","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167383,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABEyKRAAAERDfrAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167383,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0397{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":345,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167397,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePJAAEAGFx3AqAFnQOmnvIyxFGy60MyoSq1b+oAQAO0gQAAAAQEICgAw5QaFnXDI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167397,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0qRsAACsGO1RA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWWjrgAAAQEICoWeIMQAL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":23,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167400,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0GwNAAEAG+kHAqAFny82XotNQAbtFV8+Rw7Ea64ARASj+rwAAAQEICgAw6KBFrVpV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1492167400812,"flow_last_seen":1492167400812,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167400,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8voBAAEAGVrzAqAFny82XotNRAbuSN1YhAAAAAKACchAKOQAAAgQFtAQCCAoAMOihAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1492167401063,"flow_last_seen":1492167401063,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8\/z9AAEAGFf3AqAFny82XotNSAbu9GRfgAAAAAKACchAdWQAAAgQFtAQCCAoAMOjfAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701Ey6mUDkjdWIqASN8j5bgAAAgQFoAQCCApFrW16ADDooQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0voFAAEAGVsPAqAFny82XotNRAbuSN1YiMuplBIAQAOVesAAAAQEICgAw6PtFrW16","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEivoJAAEAGVdTAqAFny82XotNRAbuSN1YiMuplBIAYAOVZ9QAAAQEICgAw6PtFrW16FgMBAOkBAADlAwPYeeuaiTy\/tIyKXoKofIhRithfsRyeOK+DY3\/clVFvoSA3mLBCmIceJJgOxXyELRaSDZshWQNNLhQemCnnvWjecwAg2trMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB86uoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABiamgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1492167400812,"flow_last_seen":1492167401176,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0409{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701JpITMTvRkX4aASN8iiggAAAgQFoAQCCApF0dMbADDo3wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0BAAEAGFgTAqAFny82XotNSAbu9GRfhaSEzFIAQAOUHxwAAAQEICgAw6TZF0dMb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0CNFAAC0GHtTLzZeiwKgBZwG701Ey6mUEkjdXEIAQAHhd1AAAAQEICkWtbdUAMOj7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1492167400812,"flow_last_seen":1492167401535,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0voNAAEAGVsHAqAFny82XotNRAbuSN1cQMupqmIAQAPtXYgAAAQEICgAw6VVFrW3W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2672{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":25,"flow_packet_id":8,"flow_first_seen":1492167400812,"flow_last_seen":1492167401537,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0voRAAEAGVsDAqAFny82XotNRAbuSN1cQMupxMIAQARVQrwAAAQEICgAw6VZFrW3W","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyvoVAAEAGVkHAqAFny82XotNRAbuSN1cQMupxMIAYARXRzgAAAQEICgAw6VdFrW3WFgMDAEYQAABCQQR+Zzl6OF3mpBTuo1MHw06sa3HXCYdc2aan\/mlkbUAtlxEnFnijBED0VLBGpUi2PPuMFOYY4FqU2Kwbgr9KoNadFAMDAAEBFgMDACgAAAAAAAAAAPY\/RIx9sjpUCxjOK2FLU4x2pg76qmzxkX0LqNsEQp1b","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnCNVAAC0GHp3LzZeiwKgBZwG701Ey6nEwkjdXjoAYAHhVMwAAAQEICkWtbjAAMOlXFAMDAAEBFgMDACj\/FfgXKdx6o9tjixDT8r1LXUhCaN6fSWvolEpiQojx\/\/sEVcb95exU","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1984{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":1234,"pkt":"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","pkt_caplen":1234,"pkt_type":2048,"pkt_ipoffset":14}
+1043{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167401,"pkt_len":535,"pkt":"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","pkt_caplen":535,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":85,"pkt":"eJKcD6iO8IQvSpdgCABFoABHL81AAC4G9pPLzZfTwKgBZwG7nyRpgH6Orb8\/fVAYAIMZWAAAFQMDABoY8p0q0Neyx8LzFoDelCtviTdTs0pFnXUR7g==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokupAAEAGgjXAqAFny82X058kAbutvz99aYB+rVAQAdESCQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoL85AAC4G9rHLzZfTwKgBZwG7nyRpgH6trb8\/fVARAIMTVgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokutAAEAGgjTAqAFny82X058kAbutvz99aYB+rlAQAdESCAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0CNZAAC0GHs\/LzZeiwKgBZwG701Ey6nFjkjdd84AQAJ1JAAAAAQEICkWtbo0AMOmw","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAokuxAAEAGgjPAqAFny82X058kAbutvz99aYB+rlARAdESBwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEi\/0FAAEAGFRXAqAFny82XotNSAbu9GRfhaSEzFIAYAOXLGwAAAQEICgAw6hdF0dMbFgMBAOkBAADlAwNcdyw1yRDcJ84bZrg3yfpXPyAQAyCg+1tU4GVhjRrgZCAaIhm+GrvSL4C3za8tBz\/r8L0Wzeb9BIm3rLTP4zTFlAAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8KioAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABg6OgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1492167401063,"flow_last_seen":1492167402310,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0716{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":297,"pkt":"eJKcD6iO8IQvSpdgCABFoAEbCNdAAC0GHefLzZeiwKgBZwG701Ey6nFjkjdd84AYAJ36FAAAAQEICkWtbp0AMOmwFwMDAOL\/FfgXKdx6pGbalAz1ohkcA0lw2HwrHPuK9\/idzZPdcoSBfT7Jc5IB8+Q0\/iqiXWeiux54PEEb10mQ0NnmXUs1k9xWI1fO18IfaEHWmMVhXjTjn39E+xIiT\/rMyrwzBhM3vPKdwzqG2+\/pOewuwuaLCD2dBP+GQFajVHfNPwkJDAViiuPi1wGVZfBQk9kFJyHbovzhq7lZ+zlig0PtFdEi9Yiz60lOElWBfnTwm\/g1rqQnV4R\/ExK\/5BeoIvKE5wRE0CUm6sSbJRT8k81DbZZGlff0xmTiGNfAOA7sqmYeeMCC","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701JpITMTvRkX4aASN8ihIwAAAgQFoAQCCApF0dQjADDpNgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0JAAEAGFgLAqAFny82XotNSAbu9GRjPaSEzFIAQAOUFyAAAAQEICgAw6kdF0dMb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA050BAAC0GQGTLzZeiwKgBZwG701JpITMUvRkYz4AQAHgFLAAAAQEICkXR1FQAMOoX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":26,"flow_packet_id":8,"flow_first_seen":1492167401063,"flow_last_seen":1492167402665,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0NAAEAGFgHAqAFny82XotNSAbu9GRjPaSE4qIAQAPv+ugAAAQEICgAw6nBF0dRV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2669{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":1754,"pkt":"eJKcD6iO8IQvSpdgCABFoAbM50JAAC0GOcrLzZeiwKgBZwG701JpITiovRkYz4AYAHgsPgAAAQEICkXR1FUAMOoXi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQRiCB\/oTnfbUwjHRkWGqKpkzWY2pPBFPSI0yl+TbNLg7osPgJcu3tO6CEuqUsUJjoo297g\/pub8Uk3SYQMbvnV8BgEBAAIRTPBMijx0A7fIwTN60i3BCQJK21T88+nZ0ohdQLtYXD8\/2Xu42EjSiOL4mMaRS77Lrj9FAnr3YwBIRoBj5ZexvizNqBZJjFOhCmH6CvsZswlyVIkh9WLXL5peuFTT5PdamoHJ0r5DMgU1OcATqzbQaTWDyCTkmWiu2xACXKNgb8p2IgGnpQK5LKxb7TPAuaJgJUboC4mA1aHYwMbhfvelmQQdHX1pXUjinFKE1tX5o6J8aYViGPJxnXnnIfo6K6TtO8nECxxn1upXYeDQGfk8aHchQCyPvNEQEF6u2ITkaCyH5bymmaKW4FybaGsc5FpnHpv26eig+cwL\/mPOvkwWAwMABA4AAAA=","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":26,"flow_packet_id":10,"flow_first_seen":1492167401063,"flow_last_seen":1492167402666,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0400{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0RAAEAGFgDAqAFny82XotNSAbu9GRjPaSE\/QIAQARX4CAAAAQEICgAw6nBF0dRV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAoAABAAC4GJoDLzZfTwKgBZwG7nyRpgH6urb8\/flAQAIMTVQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167402,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACy\/0VAAEAGFYHAqAFny82XotNSAbu9GRjPaSE\/QIAYARWScwAAAQEICgAw6nFF0dRVFgMDAEYQAABCQQSodlJVfkgcPdCNyg8MxcPPyMMVu2GGgiiQcNvSk\/XPNS4tHGVpWALjyRNlzUBgx8BOzjGw3P57YxKONN42aXs0FAMDAAEBFgMDACgAAAAAAAAAABpHCGE0LVyx5Ogac1iVBZTsPVuaoIc1Qg\/Jbk1Zpdak","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167403,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn50RAAC0GQC3LzZeiwKgBZwG701JpIT9AvRkZTYAYAHhnaAAAAQEICkXR1K0AMOpxFAMDAAEBFgMDACgbsP2NNYJif+6lSsn5QXXt4R3OAUoL58YjbIDnRnSrCx280FkQp1TW","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167403,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/0ZAAEAGFf7AqAFny82XotNSAbu9GRlNaSE\/c4AQARX2nQAAAQEICgAw6tJF0dSt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2088{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167407,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167410,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABE4H5AAAER9h\/AqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167410,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167410,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABE4H9AAAER9h7AqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167410,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0421{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167411,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABE4LZAAAER9efAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167411,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1492167337792,"flow_last_seen":1492167353998,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":32,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":132,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54084,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1492167337792,"flow_last_seen":1492167353998,"flow_tot_l4_data_len":796,"flow_min_l4_data_len":32,"flow_max_l4_data_len":636,"flow_avg_l4_data_len":132,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54084,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1492167353687,"flow_last_seen":1492167354015,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54085,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1492167353687,"flow_last_seen":1492167354015,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54085,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":6,"flow_packet_id":8,"flow_first_seen":1492167345896,"flow_last_seen":1492167360666,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":38,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.78","src_port":53220,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":6,"flow_packet_id":8,"flow_first_seen":1492167345896,"flow_last_seen":1492167360666,"flow_tot_l4_data_len":311,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":38,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.78","src_port":53220,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1492167345896,"flow_last_seen":1492167360663,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.78","src_port":47627,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":5,"flow_packet_id":7,"flow_first_seen":1492167345896,"flow_last_seen":1492167360663,"flow_tot_l4_data_len":279,"flow_min_l4_data_len":32,"flow_max_l4_data_len":87,"flow_avg_l4_data_len":39,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.78","src_port":47627,"dst_port":443,"l4_proto":"tcp"}
+0511{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1492167353687,"flow_last_seen":1492167354049,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40741,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":452,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":13,"flow_packet_id":4,"flow_first_seen":1492167353687,"flow_last_seen":1492167354049,"flow_tot_l4_data_len":80,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40741,"dst_port":443,"l4_proto":"tcp"}
+0398{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":466,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167422,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0KNBAAEAGqhvAqAFn2DrNjsJ7AbvMOVSD1yvysIAQAT2SvQAAAQEICgAw\/kAycps2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167422,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0f4cAADQGnsTYOs2OwKgBZwG7wnvXK\/KwzDlUhIAQAVRmugAAAQEICjJzSzUAMHos","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":15,"flow_packet_id":41,"flow_first_seen":1492167353687,"flow_last_seen":1492167367265,"flow_tot_l4_data_len":25193,"flow_min_l4_data_len":32,"flow_max_l4_data_len":5858,"flow_avg_l4_data_len":614,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54089,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":16,"flow_packet_id":17,"flow_first_seen":1492167353937,"flow_last_seen":1492167367264,"flow_tot_l4_data_len":4091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54090,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":468,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":17,"flow_packet_id":15,"flow_first_seen":1492167355723,"flow_last_seen":1492167367264,"flow_tot_l4_data_len":4027,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":268,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54091,"dst_port":443,"l4_proto":"tcp"}
+0424{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1492167440370,"flow_last_seen":1492167440370,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2}
+0377{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167440,"pkt_len":50,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj9gAAAEC8bPAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":474,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1492167440370,"flow_last_seen":1492167440370,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0425{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1492167440984,"flow_last_seen":1492167440984,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2}
+0384{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167440,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPPkAAAECRRTAqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":475,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1492167440984,"flow_last_seen":1492167440984,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":18,"flow_packet_id":26,"flow_first_seen":1492167366908,"flow_last_seen":1492167378674,"flow_tot_l4_data_len":10622,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":408,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54092,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":19,"flow_packet_id":8,"flow_first_seen":1492167367159,"flow_last_seen":1492167379000,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54093,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":19,"flow_packet_id":8,"flow_first_seen":1492167367159,"flow_last_seen":1492167379000,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54093,"dst_port":443,"l4_proto":"tcp"}
+0397{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":476,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167442,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePNAAEAGFxzAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO1ERAAAAQEICgAxEQWFniDE","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":477,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167442,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0\/NwAACsG55JA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWXzsQAAAQEICoWe0MAAL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167443,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPPoAAAECRRPAqAFk4AAAFpQEAAAiAPsBAAAAAQIAAADgAAD8","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":479,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167444,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPPwAAAECRRHAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1492167449288,"flow_last_seen":1492167449288,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2}
+0381{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167449,"pkt_len":54,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1492167449288,"flow_last_seen":1492167449288,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0384{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":489,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167449,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPQQAAAECRQnAqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1492167452759,"flow_last_seen":1492167452759,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":491,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167452,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8XuFAAEAGtlvAqAFny82XotNTAbtWrkW6AAAAAKACchAjbQAAAgQFtAQCCAoAMRtbAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1492167453010,"flow_last_seen":1492167453010,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8DstAAEAGBnLAqAFny82XotNUAbuiFhVRAAAAAKACchAILgAAAgQFtAQCCAoAMRuaAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701NWIPBqVq5Fu6ASN8jLwAAAAgQFoAQCCApF0gWaADEbWwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":495,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XuJAAEAGtmLAqAFny82XotNTAbtWrkW7ViDwa4AQAOUxAAAAAQEICgAxG7dF0gWa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiXuNAAEAGtXPAqAFny82XotNTAbtWrkW7ViDwa4AYAOUnVwAAAQEICgAxG7dF0gWaFgMBAOkBAADlAwMB1JsivsRgj8yUUGC\/C0eM+z7uYBFdAkifuDVMARIokyD2Roioh3VliBz70\/MEuqHmVMPaLVlcE9C1qSXIt5UDlQAgCgrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8mpoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI2toAHQAXABgqKgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":30,"flow_packet_id":4,"flow_first_seen":1492167452759,"flow_last_seen":1492167453126,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0409{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG701Rfi5PhohYVUqASN8gDZQAAAgQFoAQCCApF0gXVADEbmgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0DsxAAEAGBnnAqAFny82XotNUAbuiFhVSX4uT4oAQAOVoqQAAAQEICgAxG\/FF0gXV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":499,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA09Z1AAC0GMgfLzZeiwKgBZwG701NWIPBrVq5GqYAQAHgwIwAAAQEICkXSBfYAMRu3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2315{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":30,"flow_packet_id":6,"flow_first_seen":1492167452759,"flow_last_seen":1492167453494,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":501,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XuRAAEAGtmDAqAFny82XotNTAbtWrkapViD1\/4AQAPsprwAAAQEICgAxHBNF0gX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2671{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":502,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":30,"flow_packet_id":8,"flow_first_seen":1492167452759,"flow_last_seen":1492167453503,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":503,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XuVAAEAGtl\/AqAFny82XotNTAbtWrkapViD8l4AQARUi+wAAAQEICgAxHBVF0gX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":504,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyXuZAAEAGteDAqAFny82XotNTAbtWrkapViD8l4AYARV8ugAAAQEICgAxHBZF0gX3FgMDAEYQAABCQQTAUPypt9xaHCSU1tnZVmstVn87nMzf1JxjuZz0Dcm\/IjiDmrcH8Xg1GCgransUMQVsGK3AuYrz2m\/ZIpTChkN3FAMDAAEBFgMDACgAAAAAAAAAAK4eB3OcBQ+sbR1xd9XV894cFoYH\/CR+gwJ4Wm5PTFbT","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":505,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn9aFAAC0GMdDLzZeiwKgBZwG701NWIPyXVq5HJ4AYAHhfKgAAAQEICkXSBlUAMRwWFAMDAAEBFgMDAChEfqMDeLUua6RwlKh9qSN0\/\/E\/94R6G\/s4Y+xlw8mnUe4ch5s4cMck","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2086{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":506,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1048{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":507,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167453,"pkt_len":541,"pkt":"8IQvSpdgeJKcD6iOCABFAAIPXuhAAEAGtIHAqAFny82XotNTAbtWrkv\/ViD8yoAYARWb\/gAAAQEICgAxHHJF0gZVFwMDAdYAAAAAAAAAAvtBn\/6uM2YutXiUB5wx6pQKBAsPs+FjwAAZCxkj1AljGX0D+F2\/SNyVcVyOhBTnYSumM668nhfaJua9X+FOGxUdKBJg+KtZKDs3FeGACo+oAqydz3VoqqlnLVxtBjGLF8GmB2Qnl4VhOLT1CVz5XBh3\/IQGQBr6r\/fQKqsLwy58Na+v+FhwgW5JQ1OoaOpdtgg5CAFeDyo9B+ekVBh7JFpud90VWtjkk1AWDAy6BTCfK5jGdGejTJ62xw6R2IXZU4Cih\/j9Z3QufOBmKiFeKPKrcFZJgGH6q0e4dS1eHN0ENwku8CNqlBG97N9C2wtfivN0GXNwJNAmzAmWqEJAF\/NxeWV5OQxvZ4N+wvhYYluh4IV4LHBYSjFOwsxfJlMiLlJO0L1yfYgELS9u5AukWnkP1B0bVbIv8MHpETJx\/VXebC74dB8ILdszOjv4Rol\/IlqJ+HIxxoGaDd7Tf7wQRNloQthCHs5z+cTmSAwQ29CjKD6KdaRD6PB+P+\/9czo53yzA0GouBhO4hyjJxhdQHtp60IJP922x0k8WA3NkASGZ1jZz3MD49BOVN\/OvC3sbFaqEv7t0dv3OnxL8QEZvgw0C3S2f4Q4dCTYGELEqJA==","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":508,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA09aJAAC0GMgLLzZeiwKgBZwG701NWIPzKVq5N2oAQAJ8a9QAAAQEICkXSBrMAMRxx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":509,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiDs1AAEAGBYrAqAFny82XotNUAbuiFhVSX4uT4oAYAOURrgAAAQEICgAxHO9F0gXVFgMBAOkBAADlAwOwu7FYw\/oDOwKcTwOiOKv7YlMzDssvxBClvfkpiaCariDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJgAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8uroAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIuroAHQAXABhaWgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":31,"flow_packet_id":4,"flow_first_seen":1492167453010,"flow_last_seen":1492167454373,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1492167454457,"flow_last_seen":1492167454457,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA86XpAAEAGK8LAqAFny82XotNVAbue7PR+AAAAAKACchAqvwAAAgQFtAQCCAoAMR0EAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1492167454458,"flow_last_seen":1492167454458,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8cSZAAEAGpBbAqAFny82XotNWAbsdO2wiAAAAAKACchA0zAAAAgQFtAQCCAoAMR0EAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG701Rfi5PhohYVUqASN8gB6QAAAgQFoAQCCApF0gb6ADEb8QEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Ds5AAEAGBnfAqAFny82XotNUAbuiFhZAX4uT4oAQAOVmlwAAAQEICgAxHRVF0gXV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0lM9AAC4GkdXLzZeiwKgBZwG701Rfi5PiohYWQIAQAHhl0gAAAQEICkXSBy0AMRzv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2315{"flow_id":31,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":31,"flow_packet_id":8,"flow_first_seen":1492167453010,"flow_last_seen":1492167454734,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":31,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Ds9AAEAGBnbAqAFny82XotNUAbuiFhZAX4uZdoAQAPtfYQAAAQEICgAxHUlF0gct","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2672{"flow_id":31,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":31,"flow_packet_id":10,"flow_first_seen":1492167453010,"flow_last_seen":1492167454734,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":31,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0DtBAAEAGBnXAqAFny82XotNUAbuiFhZAX4ugDoAQARVYrwAAAQEICgAxHUlF0gct","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":31,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyDtFAAEAGBfbAqAFny82XotNUAbuiFhZAX4ugDoAYARXDmgAAAQEICgAxHUpF0gctFgMDAEYQAABCQQSMckZo6cNJuKko7ASzNW8zM48WYISyypuNV8z\/optNU\/SHqo9BNV5u+mcIURe9QKYRxOU+O0Ixgamjl6HluJtcFAMDAAEBFgMDACgAAAAAAAAAABM7Fi0dg5nQ824BJcvpqk2VIb5P5kO5+onwest\/nLnu","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":530,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701bGHEoeHTtsI6ASN8gRwgAAAgQFoAQCCApF0gdIADEdBAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cSdAAEAGpB3AqAFny82XotNWAbsdO2wjxhxKH4AQAOV3BwAAAQEICgAxHVpF0gdI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEicShAAEAGoy7AqAFny82XotNWAbsdO2wjxhxKH4AYAOXnawAAAQEICgAxHVpF0gdIFgMBAOkBAADlAwNlRdxMBOhusYOhke3C4aoS6XOzHHv0fe3kJrWbx7\/QPCDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJgAgamrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB82toAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAISkoAHQAXABhKSgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":532,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1492167454458,"flow_last_seen":1492167454802,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1492167454818,"flow_last_seen":1492167454818,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":536,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8NuJAAEAG3lrAqAFny82XotNXAbvn9Cu8AAAAAKACchCqHQAAAgQFtAQCCAoAMR1eAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":537,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC4GJp3LzZeiwKgBZwG701XgAvN\/nuz0f6ASN8ip9gAAAgQFoAQCCApFraHjADEdBAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":538,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA06XtAAEAGK8nAqAFny82XotNVAbue7PR\/4ALzgIAQAOUPMwAAAQEICgAxHWNFraHj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167454,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEi6XxAAEAGKtrAqAFny82XotNVAbue7PR\/4ALzgIAYAOV+twAAAQEICgAxHWNFraHjFgMBAOkBAADlAwOV9frOGjvUn7m\/tE4bAyr+3UrlA9jYYKoC1I6VS\/9RdiDTV6G8D5hCzz2oy9LF\/fe7R79cAC6gdeTyhTkWLR5CJgAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABjKygABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1492167454457,"flow_last_seen":1492167454837,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0468{"flow_id":31,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnlNNAAC4GkZ7LzZeiwKgBZwG701Rfi6AOohYWvoAYAHhGagAAAQEICkXSB4UAMR1KFAMDAAEBFgMDAChPKKgx5Bx38tIqf0DBGgIgyJvCPJP6ArmNr9ujESXGV0ovD6Kp4fqZ","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2079{"flow_id":31,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1306,"pkt":"8IQvSpdgeJKcD6iOCABFAAUMDtJAAEAGAZvAqAFny82XotNUAbuiFha+X4ugQYAYARXHcwAAAQEICgAxHaFF0geFFwMDBNMAAAAAAAAAAR3iS1C2zVdqt818j2V1AiBf6UJ+k1ajP+hPcA6ZaYO6QG1EI0V+qZOYYf829zKyM9HQwhpghq4FW557NyYcbY2QTbPztrqwDxaZpQyOlIGu0vbir1aEoWCT6MZ\/XE3W8+7QTd6WhoWUcoiPq+3G4NMdEENs0QwJvRMO7RovLuDhJbdxve+C2yTVR+S0aOnjOOSTk6W0Lyatd1nukKkQLmKk3u\/Db564dRnHhWL3BT+pRo+irQm5K\/3DXsyuZejR+18VRBN6oWdj99uqv96JsUmrU05J\/kyDJKYrsKpCq1Iy1vW+BycLnRaC27Sm+sOBG52f8Uz8uIVaq7tNp4l0ijXAerfw5LhD7LhmVFerHk\/EVjGXS7WMopb5TZBOiO0P79l7K7gqWE+i99S4pPiEAoulb3yKd5ZOxuGDjWlPXG3vTxYxvhNKBswER4jet7arTc0728EVqPx3WPkbznZSZKOxzG71oH0vpIqdW015UjMJyTPGH3gniVVExyPG5ldb6OqYQEvUOwmI8X86HtJBabpDWWkonoJ36QYMoixUqrEjCDCpI3I8nild2PLQZYlvd4qwxE6U1T8OiRDFZ+DvZmOpeRaUajX4fFEV10jzNsUnbD1Q8\/FPMpfM4v5BIF\/8bMBW\/C88WDS4wX3IfizYufrKsAcPIvEDpsLSFw+2OxzRgnVUpLk2kNAKTjlBkN9lnzAgkZKT9YNwKsdAL87PkFa3WfZwKT32YrMXPEmy6HGgLQXJ8xRODVE4gbePgySsJTyt\/oE4jS+V+d4tEzkWrZUEPz58JOJaJ4LYcGcVeay\/gtmZAfh\/dWcYK5tdhkDwqyElqyuCPXOewpH9f25dV43K22sDJBI9elGbrAV76nzDQJZjt4oTY14EbLv\/ABmrTZGYD8Gl7MRaiWtMzCCU8tbS7hh+Egys8wQebsWB+JpalwBLkacx+ou0FmgPGu25p4fJKWbGP+98GqdhyqLbZrCoFGTijJs1DBOUj+hAHOiUkH9KuaHEbGglvuNriPIOPsRwT7Ba5Kfi7g3kh6MfXTKEdDxAz8dZ6ZU23+pvmtEwNVqJMr3beZ\/sTasozYVuEpoUkbkto766BHf36SeemWaLiRottQSm3a6P2pEPmlfMN2BBMTwv\/Ku1\/8lr+c9jyF568Cm6yHFKhL3+A\/d0t0eJ\/oCcIFSgsFpFGs+pMhKc3r\/qeKR5r7RE54XYBiAeN+h7ZRls8Brtj4iTaBA0O3CwNYCYgC116jAm8c46XWmmg8JgFtRqgpFpiUkpL8yRoZ1rRhDhaPRN1j7SH73kSzr6nJObLXp6ksAWEp+okWPN6JRnXHD\/6U6nC4vRYgcpLdAyonX\/+5Bh4h9Cof8J795MKp8tQgvbvZDOgaajJOLXt5Q1N2WdhJHD8IwCRwqbQvy5ANalhvNZFz4bfaalGqy7F5lI9WjmslQs\/eaNCyo7ULm6c8V7ylUvCRbA3GqAq7K0roB4Wxmam86dxv1aXrSNxN28SSnnpkXS8w7CL530I5v+Hzf8rCtiClLxNHM8M7yvWg6hZ7TZiBXw0Mh6Yf0SauRXDNw8g52XyV5NlFj53vz2yvIFc2K9WtL0RJnDFSHe4u55hDkAqTZptWkOqTy8zctLBpJk1xg2TA==","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1042{"flow_id":31,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":33,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0TYZAACwG2x7LzZeiwKgBZwG701bGHEofHTttEYAQAHh2NQAAAQEICkXSB5kAMR1a","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+4582{"flow_id":33,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":3182,"pkt":"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","pkt_caplen":3182,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":33,"flow_packet_id":6,"flow_first_seen":1492167454458,"flow_last_seen":1492167455179,"flow_tot_l4_data_len":3562,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3148,"flow_avg_l4_data_len":593,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":33,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cSlAAEAGpBvAqAFny82XotNWAbsdO20RxhxWS4AQARVpDQAAAQEICgAxHbhF0gea","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701d\/O17O5\/QrvaASN8geewAAAgQFoAQCCApFraI2ADEdXgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NuNAAEAG3mHAqAFny82XotNXAbvn9Cu9fztez4AQAOWDvAAAAQEICgAxHbhFraI2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":33,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACycSpAAEAGo5zAqAFny82XotNWAbsdO20RxhxWS4AYARXAvgAAAQEICgAxHblF0geaFgMDAEYQAABCQQT6mbFqrS3fjAwophItOMwj+qLk5VGgJXN36xSlo0GL+1w788l2beA+lKcqQIgQCQhuR7wPprFiAQeCn1u6Sl5IFAMDAAEBFgMDACgAAAAAAAAAAOd5V0DLp\/WK+k8tV1TnsQdr1hYfhUS8aZPXAvoeqGeZ","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":34,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiNuRAAEAG3XLAqAFny82XotNXAbvn9Cu9fztez4AYAOU9hQAAAQEICgAxHblFraI2FgMBAOkBAADlAwM9fcE0colRywJmHYx0JC6oiZlXQMNTk+HTiXDSO5d6\/iAcYMK9E59njED1hK3WStu15DAHEEhJMQg30HN\/4iKe5QAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8ysoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABg6OgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":550,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":34,"flow_packet_id":4,"flow_first_seen":1492167454818,"flow_last_seen":1492167455180,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0UbtAAC4G1OnLzZeiwKgBZwG701XgAvOAnuz1bYAQAHgOWgAAAQEICkWtojsAMR1j","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIUbxAAC4Gz1TLzZeiwKgBZwG701XgAvOAnuz1bYAQAHgpRwAAAQEICkWtojwAMR1jFgMDAF0CAABZAwN5lLx\/anNa5CdWKHFAWo2KsKhrZTHGO\/XekBGAWPpWUCB66mvcfG4Ged5EomNnAZ+CIUduULHJ6+CXsjslEbhhf8AvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":32,"flow_packet_id":6,"flow_first_seen":1492167454457,"flow_last_seen":1492167455193,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA06X1AAEAGK8fAqAFny82XotNVAbue7PVt4AL5FIAQAPsH6QAAAQEICgAxHbxFraI8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2668{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":32,"flow_packet_id":8,"flow_first_seen":1492167454457,"flow_last_seen":1492167455196,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":32,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA06X5AAEAGK8bAqAFny82XotNVAbue7PVt4AL\/rIAQARUBNwAAAQEICgAxHbxFraI8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":32,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACy6X9AAEAGK0fAqAFny82XotNVAbue7PVt4AL\/rIAYARVbqAAAAQEICgAxHb1FraI8FgMDAEYQAABCQQSe9ct109vl3nZaGpDspqU+kMk+njSATjwJpfRNEoBk4Fy+IGL5tqh9idWN8sua685w\/MhQolN5LUCaobR2x7W5FAMDAAEBFgMDACgAAAAAAAAAAA3rMunx7WZhU\/w92CUQrH9WIDvPZrDkxZfJeEKQqupU","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":33,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnTYpAACwG2ufLzZeiwKgBZwG701bGHFZLHTttj4AYAHiAnwAAAQEICkXSB\/YAMR25FAMDAAEBFgMDACjdvGeXbmORNz3imQRxQgJuk9A2g4DSsr760MLCQrIRMFfV61GTF3hu","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1882{"flow_id":33,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1153,"pkt":"8IQvSpdgeJKcD6iOCABFAARzcStAAEAGn9rAqAFny82XotNWAbsdO22PxhxWfoAYARVpUAAAAQEICgAxHghF0gf2FwMDBDoAAAAAAAAAAec2HimkjMvSkuGTQ3MrrTK23YW6zEDG4HtifnBw8dy\/ojjIDVyVauiw2mlYAjbJT7NoH9FiJFwpEOYf27Ebh63VcW8lcOJQJY4vc7EFvVhuDfqkQP78nKDH0qu8CQiY4oXrWHevBRnQoohdj4XDQvoJBw1q\/tgWflxu+7ggVBgjwzHp6ZNuSTLYyhqgqbl0HSDz3BIlXowmwek2YRTP9M2U1LQG9BIHSccX2vVigNw7HpSTkpZz\/\/\/outcNZ2XkMgxOvXVZ630tzzXLsce7GCDGj7DMMl5vC245eeVxx1gQgFSu3x9vugLSoAbOfeE2BOSAf5KWO+Z94IpXmE9Hk9UbMSd+D4wC\/plixDabpKlFbmKADc+kgXGE3eCQxcbh2k0ufOOvYfxWltK7b7z8bPZ2uNOBO6UhLN3p7jcjRbTjIh5+Y5IIEU7iObF8KmgTGzKg+Zgl2vrTFwJxOANMP4g59abHekT4w7GDbu7RXS+Rne8P89j5SJb\/Ms1F+Ay\/ei1OCO13cI3n3ksVR8Oj\/Lo7QlUgkeTKSLhqGUMqEFCPF6IIrb9MVdfxAAETx0ZVKOYynr+X8LI3vNuJ304FY7pG3\/0emqFYzc0M\/FooXUVth+rhH90BTvEv2X\/j9wDc26ribOTSvxyLJoCGsiby5CZlVF1\/djEcjWtcBhkx+\/SLp+dCI\/bfztvDFm5NqWp6YHm\/lsdIxcVAUJ7uUvemZrKirC0o+aMPsbvM\/fYVHqk3q2j2bhSx7ql8BfcZ5LnHeKk1qOcRHl2B0r9lng1QKMASp0JL17\/9stq8Mo9Xrvq0DePvW\/pBqUgQVC+N5aaM8Wnzu0l76NC1xzArS3uVrpEfwS8EyAkZUW1+jDhJ+uQJoeFW+K7OaBq2oa30VkhYpyJUfOYHMmDcJAwLwQcfAYlAxvdlv5pHrNe16uCbjBLisa6JrIY7FQsx2eCPxLs62ZEmdWQImjMwEjFFv74zU\/iqlJfzpeWnLiAnLdALgv5YIePmzWNE5UIiOdat93mdCEsg1AnnhnsXjMXclzsElsm1fwXwPokFCAC0d1ip\/NhZimGoDvsSlRRsj0N8xu9199ysceqlt00bdwnXGp9s+5ObDy38W9nAKQcqKcUV+I54\/sJ84UKa1me1\/29cLFg5qyRgPm++q8jZLGGVQDZLNGanSNt2+PRfhzDHHx3gP9JxWEhLQQ5PmK8u\/myqe1pzKcvvgqtvTir\/xCjK+2+uBRok96zi\/uvTeSBoC12CivEVumMgq5G1XBO2RMq5YgXHlTwkNN6YwYaoXQb1lRzQ7QT2q5lYO\/nriGmObzoWg+CAtR1zudzHb0HWzq3LyXPXOBNv9IT9lFXTbGKmCk3YVTV7xH2ipkEBkxNxFaU0dUOuAy4vOHVrsPUR3hSgKRwmWOCS3m8keVhEVF\/BD7sWrKIglA==","pkt_caplen":1153,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":34,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0\/F1AACwGLEfLzZeiwKgBZwG701d\/O17P5\/Qsq4AQAHiC3gAAAQEICkWtopIAMR25","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":34,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":34,"flow_packet_id":6,"flow_first_seen":1492167454818,"flow_last_seen":1492167455501,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":34,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NuVAAEAG3l\/AqAFny82XotNXAbvn9CyrfztkY4AQAPt8dwAAAQEICgAxHglFraKS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2320{"flow_id":34,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":34,"flow_packet_id":8,"flow_first_seen":1492167454818,"flow_last_seen":1492167455502,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":34,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NuZAAEAG3l7AqAFny82XotNXAbvn9Cyrfztp94AQARF2zQAAAQEICgAxHglFraKS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_id":34,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4\/GBAACwGK0DLzZeiwKgBZwG701d\/O2n35\/Qsq4AYAHgYwAAAAQEICkWtopIAMR25VvFXSBWRH4LVMoif+a3PWQ\/IY3BX1hsBcm4fMDEwF26AvgqENGI8gqQJZCUGW8EqJbDuE+C\/hb1onY1PrhIBPuko\/71qFkmEs6my44YjiyE0x5TShTvdPqSejfT2TzPPcV\/3e+xH+tvqecNTCjdapI4+MA9Yb8fMsWeyfnMeOHXnBYsd2bDm8AUL7SL31x7YPixZDmVgHBBoDdtAKPOoQ+5faYTOkBXiEXR+97jLhGMU03SdTNf\/mmmX3YJXLfBjFjLxGIGnf6GveFv7WkltHvsT0euwWA4nsRqqkJ2s4JDJYh8zA9ILia+m50OrVV4Bak0GHZi2fEv\/a3QWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":34,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0NudAAEAG3l3AqAFny82XotNXAbvn9Cyrfztq+4AQASh1sgAAAQEICgAxHglFraKS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":34,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyNuhAAEAG3d7AqAFny82XotNXAbvn9Cyrfztq+4AYAShdrgAAAQEICgAxHgpFraKSFgMDAEYQAABCQQRLfGOXKsHTwDwaiRJMPFQZdrXTkVPKTQM6wmtGWYnFpie6rLE6uLmht2BoDbC1KqgfZuZPPJuk1BlRiwEqCfGNFAMDAAEBFgMDACgAAAAAAAAAADunnwkcqCnL0CfbOpb62nSTksEflqwm89UZmoGusPUM","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1492167455528,"flow_last_seen":1492167455528,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8kudAAEAGglXAqAFny82XotNYAbvneYz3AAAAAKACchBIqgAAAgQFtAQCCAoAMR4QAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":32,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnUb9AAC4G1LLLzZeiwKgBZwG701XgAv+snuz164AYAHizdwAAAQEICkWtopgAMR29FAMDAAEBFgMDACgzgIElE4pLe+2zi2rQXdcjmX\/2eB+Fwjq43XnFbQ9Q8FQ1vez2N5\/z","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1986{"flow_id":32,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1239,"pkt":"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","pkt_caplen":1239,"pkt_type":2048,"pkt_ipoffset":14}
+0912{"flow_id":32,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":443,"pkt":"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","pkt_caplen":443,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":34,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn\/GFAACwGLBDLzZeiwKgBZwG701d\/O2r75\/QtKYAYAHhjewAAAQEICkWtouUAMR4KFAMDAAEBFgMDACipqlamxow5+yVenQFNK6XxJgF7A3RPtrL\/BnQoxqXPqDLnmSaLQe+O","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1876{"flow_id":34,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1154,"pkt":"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","pkt_caplen":1154,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":33,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXITYtAACwG1YXLzZeiwKgBZwG701bGHFZ+HTtxzoAQAImjKAAAAQEICkXSCEwAMR4IFwMDLSLdvGeXbmOROG5Gk9\/CF5MaPGA6ixWm6kVy8v\/7R4SJbU6PzLo+F49GQHdUF+Jg+Qb\/2Vh\/TK1l4USoyONcLcHCqhKf7VGNZ52kXfwD5k9HuPwWhT7HroCRPND3yXwaD1jA7jr8boPJzKSLVRvGE0059PKzXNOUWSxt7e+A+XcHbTtG1T7AHR9\/uWzxPSnHOU\/DnyKKrReZFpn9kOZ15Dk3hWtX3poRa6RJtCTmV9KKqC4saHjilv6u+ifaVhsYKPNp5djowcejg2x8PY5+e00Go3bD5d87VRueGCWSutqGSQ1xyvNESB2rjtWRH44XemiPT9MEi9QDdyXkmXFmROFGIGu5bQyUswR\/GgR40RmJsRn7VtiZ0yuJjvsoMUR\/Owp8Pc3WbhLfiXMorrbubAesQS7yo\/BsTZwRQkoXBhYntTTRKekTmfOo+A+YpfHtEelCaJUgoG69vL1C2Ktwy2jd9X7WOSOzkW+EKzv0LcYCwNYYp7Cia3zX0sFSiEeTDgf\/mrTrbuJCn+BZBnOec5f4amZYZJ1Usk1py1fPjzhjVVLlMdbPA5UzPvUB7OQDBIZ4OHAWGDo\/qegkSs0NAXOOTs6bVWpNLVRw\/5q4XQsJgvlpa3UhNBZXNz5U7M42nxGBncRsBZjzgZ7QXJK7TmC1pD5qaIp3dXs\/\/DOsXjkLTOP3P\/8R\/JcHw5D8YrCulFithgRdHzKJp4mDV25BeA2VsJnqegQgq0R3f4EVT0y6bOUjD6rxhssgI4LF\/kPYQVPS+mIoaUd1JnDvP\/+mxC+t3n3c1UUdAza4CLK4LC\/Zd\/f7RDmkuyj70TrQnaLlfIHEuNnz93XlVvxG0MKS0ZjZww4plwIGEXKTI7KoUE4LvgMAjn8Io4ZUfVijggoGL5RM\/dCjQYsUEtiM7MpZltgHnHKTPoBmC4xlttZ978qqmtFSdEbP8rbuJ5y1m8esX954D4F24\/xOrvbFFMA3CbacQDmemFowz9NogNBZ5pY8yDXGZZfTNdvskkV+e6v5+XO4CdZKEcPQFa6VKo\/kCiuIZxr5\/XuR4hMXK8KJ9jEx1aCZBxEr20z9JgVvScJp4fGINFRTIUqZ4bT4ZMiiwYbDe5LD4\/v9QK+Fe5LqXXu3XRfttxiSIiGkbgUma+x9kA3DN3N5HaWhSx0X1Zut9E\/ry3KvG7iCuMVt8UxobEKhzFQrtAUsqz4w4LplFVqnInufEDBkOESFvWVWVWfcmkpcoPmJ5UaW4Tw3vA9pnetA\/wEif8uW2HFSEF\/CN3ib7s64YNiiG9dZhILYT9JqxZlj2JnxSQWffghZSYRQkJXfr4HvAFvj7PCI2LytTAXs8CnH6f9mqft38g0ean\/uES0HNURtnjAEXuNB\/Pvb7T1FhUJIDMXv5J9\/VT39X62y+cOThS8YNRv+5oYHTeO7Ax6a6956GDYq+SfgVdLzWvu30HYqhdC8UCld6G5PT3OTZIlJSZ3fpB4DOEzSdAYD10tgEyZCJF5xzgj5QTREikBq3UAdvR3IMWt+TSoDfYXGLdvc9QxjYvRL5eN6gdd4kEQkEnpAT7RgmVrTsTcyVa9brDzk14upBmBvzZ7fSxFfZqeW0rLe25oKNez2vzTYzkBadbgl2+QR5GD\/oTqKAqrEKVO3VlDXClVr9pj3AntbsH05+8d0pL04opCYp3mzmIebTtIPmHpjUXRk+uq9A7R7JVZoJdVFI5rR1yIJYuzfWK11cwabBBrN+rjf9ckd9JCzH7EZhHj8UZI8eRMkAOoapG5woivb9BaYcp4xO1MCPUW354Sc\/xOiO3QOvqUcFasuf88+R7OULcZTV+GV7HVhQXR0eRYVICAmq9Uz6uwCH6dJMuklymckpLWxAaDWW+FF\/zIjwcL65ruFd83tZDou","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":33,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":33,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cSxAAEAGpBjAqAFny82XotNWAbsdO3HOxhxhpoAQAUJXcAAAAQEICgAxHl5F0ghM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":33,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":33,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG701iyhnqT53mM+KASN8htQwAAAgQFoAQCCApFraLqADEeEAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kuhAAEAGglzAqAFny82XotNYAbvneYz4soZ6lIAQAOXShAAAAQEICgAxHmpFraLq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_id":35,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEikulAAEAGgW3AqAFny82XotNYAbvneYz4soZ6lIAYAOW1DgAAAQEICgAxHmpFraLqFgMBAOkBAADlAwP9NQ6LikCBiVimjppT8i2VlLy8HZBkMhwiS9FNacyQcSDLK5nEKozFFehKxLSZMCTAPUR52rwta8Dt2NpTSUG7QAAg+vrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8CgoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABiKigABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":35,"flow_packet_id":4,"flow_first_seen":1492167455528,"flow_last_seen":1492167455891,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0399{"flow_id":32,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0UcBAAC4G1OTLzZeiwKgBZwG701XgAv\/fnuz7+YAQAJ352gAAAQEICkWtovQAMR4Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0672{"flow_id":32,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167455,"pkt_len":264,"pkt":"eJKcD6iO8IQvSpdgCABFoAD6UcFAAC4G1B3LzZeiwKgBZwG701XgAv\/fnuz7+YAYAJ1nsAAAAQEICkWtovwAMR4ZFwMDAMEzgIElE4pLfJQd348ZqSNDqad9eLAkFSn\/Qn\/aCUPmc91v4Nbf17CDphJt9xgDEWm4yV5Bd+d6hmXjgjwBMGg4KC5twbaB5ps5qAZvll8pxQG6IYBX\/XIVfQupfuS+\/xHdb+td97LCtH4IaLiyhWXnejZkJEW3wGse+Xrmf0gIjfCyD8gkUvjSd\/jG65fM1UgysG+\/Z7LwebuukPlzP8RlzXnkDRv\/YlDrAmi4dNtSRztaplua3ioOqlULZgQWuN7q","pkt_caplen":264,"pkt_type":2048,"pkt_ipoffset":14}
+2331{"flow_id":34,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":35,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA02dBAAC0GTdTLzZeiwKgBZwG701iyhnqU53mN5oAQAHjRqQAAAQEICkWto0QAMR5q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2315{"flow_id":35,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":35,"flow_packet_id":6,"flow_first_seen":1492167455528,"flow_last_seen":1492167456251,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":35,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kupAAEAGglrAqAFny82XotNYAbvneY3msoaAKIAQAPvLNwAAAQEICgAxHsRFraNF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":35,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXI2dJAAC0GSD7LzZeiwKgBZwG701iyhoAo53mN5oAQAHhdywAAAQEICkWto0UAMR5qi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQRppmH8i+60HAbfTvc3xrcF3kHQR5qAmyZW25jCWYkU3FVgzVXITZim69Ml6n3ZD\/8CuP\/PuMiAsIMJSiS22QraBgEBADtaHh5m","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":35,"flow_packet_id":8,"flow_first_seen":1492167455528,"flow_last_seen":1492167456251,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":35,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kutAAEAGglnAqAFny82XotNYAbvneY3msoaFvIAQARHFjQAAAQEICgAxHsRFraNF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0754{"flow_id":35,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE42dNAAC0GTM3LzZeiwKgBZwG701iyhoW853mN5oAYAHhaMAAAAQEICkWto0UAMR5qzoSbMlRqH7JaM3j53Tya0SGHn7w\/kJXJq++JFot5vOIiA37Z+swSemgzUvwnS+Fw2saYEzNJ+4Ye1hhr0v\/ZNIOb5jEv7gXnS4KzYyWPKLzehGWKKv1aw6z9SGGwkYsHOh+V4suW\/uLEOoNs9XfOni2rPI2bq9VakhWOli88tcieGr\/Mf4dZBEfNk53qumJ4AJLNG58v+b9FlXfGphRu0ObBSROzHoSWcZSsfppUZ+1pZeAgq7hS5l9\/5IkexrphWB3y6VwXD\/XvC3Q1lQJWMycXCgMVOSrtvqnzE+WkRt8iIJb2fDRhsWNEEJWXhabDDSZVYq5U0oTWbdoWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":35,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0kuxAAEAGgljAqAFny82XotNYAbvneY3msoaGwIAQASjEcQAAAQEICgAxHsVFraNF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":35,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyku1AAEAGgdnAqAFny82XotNYAbvneY3msoaGwIAYASj2agAAAQEICgAxHsVFraNFFgMDAEYQAABCQQTMl+90f3n6IbQvcRcRI7HcLWGaHVCUB1s1OrvQxpnYMZ6jBC2wJJD7ZFLjBOTh6MSd740CZ0EmgP9EhT+VUq2UFAMDAAEBFgMDACgAAAAAAAAAAKzhbQGk8H\/1IAZFZZB9r63fYh2rPpelt\/UlfhZKCVuK","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":35,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn2dRAAC0GTZ3LzZeiwKgBZwG701iyhobA53mOZIAYAHhcTwAAAQEICkWto54AMR7FFAMDAAEBFgMDACi3C2ngHhtHi2MfV2Pcnrxt9lEm5HpWTvknUmhLZpDDS9lgFX9COg3T","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":35,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167456,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ku5AAEAGglbAqAFny82XotNYAbvneY5ksoaG84AQASjDBAAAAQEICgAxHyhFraOe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":21,"flow_packet_id":40,"flow_first_seen":1492167378674,"flow_last_seen":1492167401175,"flow_tot_l4_data_len":17095,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":427,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54094,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":22,"flow_packet_id":39,"flow_first_seen":1492167378926,"flow_last_seen":1492167401170,"flow_tot_l4_data_len":24397,"flow_min_l4_data_len":32,"flow_max_l4_data_len":8257,"flow_avg_l4_data_len":625,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54095,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":23,"flow_packet_id":17,"flow_first_seen":1492167380581,"flow_last_seen":1492167401124,"flow_tot_l4_data_len":4091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54096,"dst_port":443,"l4_proto":"tcp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":24,"flow_packet_id":8,"flow_first_seen":1492167382020,"flow_last_seen":1492167402666,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40740,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":803,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":24,"flow_packet_id":8,"flow_first_seen":1492167382020,"flow_last_seen":1492167402666,"flow_tot_l4_data_len":191,"flow_min_l4_data_len":20,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":23,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.211","src_port":40740,"dst_port":443,"l4_proto":"tcp"}
+0398{"flow_id":35,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":812,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167467,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ku9AAEAGglXAqAFny82XotNYAbvneY5ksoaG84ARASi4yAAAAQEICgAxKWNFraOe","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":831,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167468,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0KNFAAEAGqhrAqAFn2DrNjsJ7AbvMOVSD1yvysIAQAT22vQAAAQEICgAxKkAyc0s1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167468,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA05nsAADQGN9DYOs2OwKgBZwG7wnvXK\/KwzDlUhIAQAVS2uAAAAQEICjJz+zYAMHos","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":25,"flow_packet_id":44,"flow_first_seen":1492167400812,"flow_last_seen":1492167448100,"flow_tot_l4_data_len":18499,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54097,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":26,"flow_packet_id":38,"flow_first_seen":1492167401063,"flow_last_seen":1492167448091,"flow_tot_l4_data_len":13790,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":362,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54098,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":30,"flow_packet_id":54,"flow_first_seen":1492167452759,"flow_last_seen":1492167467498,"flow_tot_l4_data_len":34617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":641,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54099,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":31,"flow_packet_id":27,"flow_first_seen":1492167453010,"flow_last_seen":1492167467495,"flow_tot_l4_data_len":9614,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1764,"flow_avg_l4_data_len":356,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54100,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":32,"flow_packet_id":86,"flow_first_seen":1492167454457,"flow_last_seen":1492167470188,"flow_tot_l4_data_len":63075,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4316,"flow_avg_l4_data_len":733,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54101,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":33,"flow_packet_id":28,"flow_first_seen":1492167454458,"flow_last_seen":1492167467494,"flow_tot_l4_data_len":17089,"flow_min_l4_data_len":32,"flow_max_l4_data_len":3148,"flow_avg_l4_data_len":610,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54102,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":34,"flow_packet_id":96,"flow_first_seen":1492167454818,"flow_last_seen":1492167477932,"flow_tot_l4_data_len":60378,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4025,"flow_avg_l4_data_len":628,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54103,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":35,"flow_packet_id":17,"flow_first_seen":1492167455528,"flow_last_seen":1492167467498,"flow_tot_l4_data_len":4091,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":240,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54104,"dst_port":443,"l4_proto":"tcp"}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1492167617247,"flow_last_seen":1492167617247,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54109,"dst_port":443,"l4_proto":"tcp"}
+0398{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA044hAAEAGMbzAqAFny82XotNdAbtNZ116WRhNMIARAViFkQAAAQEICgAxu\/1F0qIP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1492167617247,"flow_last_seen":1492167617247,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54110,"dst_port":443,"l4_proto":"tcp"}
+0398{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":841,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0trJAAEAGXpLAqAFny82XotNeAbstqSV4qlMZrIARASwk9gAAAQEICgAxu\/1Frj0D","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1492167617248,"flow_last_seen":1492167617248,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8JpFAAEAG7qvAqAFny82XotNfAbt51Z1vAAAAAKACchAH4QAAAgQFtAQCCAoAMbv+AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1492167617498,"flow_last_seen":1492167617498,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54112,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":843,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA82VRAAEAGO+jAqAFny82XotNgAbuDb2VoAAAAAKACchA2DwAAAgQFtAQCCAoAMbw8AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG701\/B3aGGedWdcKASN8hYRQAAAgQFoAQCCApFrkDUADG7\/gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":845,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpJAAEAG7rLAqAFny82XotNfAbt51Z1wwd2hh4AQAOW9kgAAAQEICgAxvExFrkDU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiJpNAAEAG7cPAqAFny82XotNfAbt51Z1wwd2hh4AYAOWw1gAAAQEICgAxvExFrkDUFgMBAOkBAADlAwOiNE1rRkT0h3QOeP2KdM3vXFnz\/PaRz1MgqYNk+PneFSA+FXDDfXOJsJmV4DXnwkF2Bf3XeOpXHU2Ui84OelC\/LQAgqqrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8SkoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABhqagABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":846,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":38,"flow_packet_id":4,"flow_first_seen":1492167617248,"flow_last_seen":1492167617561,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0397{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":847,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0KCxAACwGAHnLzZeiwKgBZwG7016qUxmsLakleYAQAJ8hsQAAAQEICkWuQNUAMbv9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":848,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0701AAC0GOFfLzZeiwKgBZwG7011ZGE0wTWdde4AQAOqB1AAAAQEICkXSpjoAMbv9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":849,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702Andsj9g29laaASN8iTkQAAAgQFoAQCCApF0qaCADG8PAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":850,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VVAAEAGO+\/AqAFny82XotNgAbuDb2VpJ3bI\/oAQAOX41AAAAQEICgAxvJRF0qaC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":851,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA04KNAACwGSAHLzZeiwKgBZwG701\/B3aGHedWeXoAQAHi8wQAAAQEICkWuQSQAMbxM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXI4KRAACwGQmzLzZeiwKgBZwG701\/B3aGHedWeXoAQAHjxgQAAAQEICkWuQSUAMbxMFgMDAF0CAABZAwNR3Yv58EXkARruI6MbXBUr2l9SVzFl0EZ4wibgNUpCviDg0to5\/h\/p7gAXT1kViG+D6U7ulXWnLBXIcoeBXEekv8AvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":38,"flow_packet_id":6,"flow_first_seen":1492167617248,"flow_last_seen":1492167617881,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpRAAEAG7rDAqAFny82XotNfAbt51Z5ewd2nG4AQAPu2WQAAAQEICgAxvJxFrkEl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":38,"flow_packet_id":8,"flow_first_seen":1492167617248,"flow_last_seen":1492167617883,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpVAAEAG7q\/AqAFny82XotNfAbt51Z5ewd2sr4AQARGwrwAAAQEICgAxvJxFrkEl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":856,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE44KZAACwGRvrLzZeiwKgBZwG701\/B3ayvedWeXoAYAHgafgAAAQEICkWuQSUAMbxM\/b5DNs64DIF5q7fKZyFICi9kQ\/lct9MI5GWa\/cqfyCs1GKceNnk6Y9GUvH+fsTdws9yPHuZm9fVmEyOZfvxY3PYax2LhoTy4jqGwwoONIIaUV0SEi2BY+zl9efMqYaJb\/SVywLPKEpu9E7WYPUulJS\/ghB2hjRHGdlg\/mPz7ya\/TKuviTZ\/XTu6Pj0pXNeXSk7o3HIzV0B+ECun3x707qYY1dyWOBgntihvasSdGXPEKHh89ZqUtQ4u8a3BaAUKyZ0vOCUo1w8sVLzKygft211f4ugtpGo7SyPHyY+w\/tHk64Zd3c6GhtFij\/npk7b\/UhVdDrPfRxDj\/aloWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":857,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JpZAAEAG7q7AqAFny82XotNfAbt51Z5ewd2ts4AQASivkwAAAQEICgAxvJ1FrkEl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167617,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyJpdAAEAG7i\/AqAFny82XotNfAbt51Z5ewd2ts4AYASjIAgAAAQEICgAxvJ1FrkElFgMDAEYQAABCQQTCb+94+x7+yEsJvT\/TXWoWWgsy22MZrh2xjKuNy\/msvP0PuoCQInKX2+CwiU5qltG21qqcrcKgj1mty3wX0yMgFAMDAAEBFgMDACgAAAAAAAAAANVsgur8uIlrmu9Sb648TJ8cZYStftO6nrKZyuc0vZZB","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167618,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn4KdAACwGR8rLzZeiwKgBZwG701\/B3a2zedWe3IAYAHiupgAAAQEICkWuQXQAMbydFAMDAAEBFgMDAChO6s\/g2cTvA0dLzXCkMG1q3E+8ytNH4Hcoz2xFFzQ8EaTeAjZA4mKR","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1983{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167618,"pkt_len":1234,"pkt":"8IQvSpdgeJKcD6iOCABFAATEJphAAEAG6hzAqAFny82XotNfAbt51Z7cwd2t5oAYASj9OwAAAQEICgAxvOxFrkF0FwMDBIsAAAAAAAAAAa2HV0m6YqkqKosBh+sq+h55rxjiQ56Aq3uAujbMKTUnhXCjwZICTC448ualjKI1rhm5T2VYu+JpgvRouRhsUjk18O6iapWIljQIrpxs3ATIPQC0IbhK\/0VEDVaCC6y0r\/WQ7E1+wtrUjKdXqvNCUlFHxSDPdbjQ2kPFBQ2CqMsIy7mSR9dmk92P52iHrU\/kdsFaWeu8sJl0bWz2FT5ctx32gnyrcuYOi4NzJfr8myIRqeNeZN0hA5vX2XACMO2uIRAHa\/5SNGBnPvYMTZ+0oOnFF+biGwLfrIqYp\/b0Kh2mJJ4OaEcPEaOEUeD7kbCxz+vCnG\/KCU3qzaVUDYPM9IGVaYazN80cdl+UdyNvLz9N7cCfY4T9r4zElsr7G0H40+88WMGHWzvVyIkK2L2uA636b5GdJAXQnT9Jeefq6pEH3hWcrbzS1Mf6SgqYJJH1br22ptnn5DrIrv82Qt8x\/s9\/JGMCSqmdwSIq2OPKqPYNOhEucW272pO6qYW9Ci9yr1XiB2sdyQRwWnlkpnw1AtkeVm9OrVhaI8wLbks2YAs+mLB9jirxUwmCKm2bkOz1YTBwf8WknUkHRUfIY8rhPUIdhucExAZVEzkUJaVbTIDPCihfwaj34SzjKdmTBryDsVFWXIaFTPCtTkUqdajcahVxCSI+yDnUAuSOtVWxk0vhAwX6h6iexRX3PMP2OK3xRVJ\/CwMLwSgOekg\/V+lGn4373E+LZx7vjTNxfByiLqWBwOUKJU6X4I8hj8IuierqIi9uNeYsRBj+JQTMYJKZ9qx+o0lVCvIn7SlvUHTD6lj1jG2Y9z9PLvoAkzGdgTZAVoAAosMKDiFkXG5QKbn5VJZK+cYtxtJqYvtp+aShn9xIowNQtF2oGtlDD+AJ5KnhAwNgCJ5j5ugDHQtdIZOWjDJZgeqHPk\/N9CzGFA18+SAxjRaCiV17dIBUPFOnsl\/l\/U1ZIDJ\/c16+gBWzsWfZHUXO6KN5YihYzms0U2HirBweHI68rCq+JMwH1H2qlbc6B7DyPVEmQbPhsCbU5mkcfbuvm6KSJsiNkSuXkHZG0UJ7YTL0wXD9cvXW4h+xm6moOhg+JppU5GPNLimfsMOf2J5y4Tu71YfIpLnQgGjr\/q\/YRvvxKW8wQtR5ivIz9rig\/Z3hzjfypuOZgdRPmPPDnicgEvu4dFJYvMbNdAw\/Tx0t8j3nzRtetecQIHCbiepL\/rnpZ+DIQL1t+gV1\/LFH7xCzCuLoDhrA62z9mphQnWq3rvPDJgX0QTuZ+wkNgZzfE4exmrSGkJJyUUrewhBrpzc7GehddsH4efkIO5JRB3JW6vew6qO3TkGyE7EyFPm3bQHJ7Wvi65ptOEgDOpdjUEoAAMX13WFJs6o2NnCRK1STQ0WCDuD5ckIYxeh2U2O7UJjghl984Mzdg6JV7\/VghR17tHTlP2xMhST+s+Gs0vmXZGn30+PckVstBZZcUwkhDMx5DMydF4mTcC1VbpUNbFJfJJ9A9iE8K0rYWXoJYfKykpnGVG9ZiOSQYyC6H0KrkthKoA==","pkt_caplen":1234,"pkt_type":2048,"pkt_ipoffset":14}
+1004{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167618,"pkt_len":513,"pkt":"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","pkt_caplen":513,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":870,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167618,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702Andsj9g29laaASN8iSHwAAAgQFoAQCCApF0qecADG8lAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167618,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VZAAEAGO+7AqAFny82XotNgAbuDb2VpJ3bI\/oAQAOX3ugAAAQEICgAxva5F0qaC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1492167619048,"flow_last_seen":1492167619048,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp"}
+0397{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167619,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Dr9AAEAGBobAqAFny82XotNaAbub+DW+SvgsEIARAOUtjAAAAQEICgAxvcBFrgFX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167622,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePdAAEAGFxjAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO3UVQAAAQEICgAxwQGFoOCz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167622,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0uEoAACsGLCVA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWUzwAAAAQEICoWhkK8AL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167639,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0bxNAACwGuZHLzZeiwKgBZwG702Andsj+g29laYARAHDjOwAAAQEICkXSu3UAMb2u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167639,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VdAAEAGO+3AqAFny82XotNgAbuDb2VpJ3bI\/4AQAOXO7AAAAQEICgAx0YhF0rt1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167639,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA02VhAAEAGO+zAqAFny82XotNgAbuDb2VpJ3bI\/4ARAOXOWgAAAQEICgAx0hlF0rt1","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1492167639887,"flow_last_seen":1492167639887,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167639,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8T5xAAEAGxaDAqAFny82XotNhAbttdZ2FAAAAAKACchD+DQAAAgQFtAQCCAoAMdIZAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1492167640138,"flow_last_seen":1492167640138,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54114,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8VUZAAEAGv\/bAqAFny82XotNiAbsbK4ceAAAAAKACchBmfwAAAgQFtAQCCAoAMdJYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702Ea0aYHbXWdhqASN8gHqwAAAgQFoAQCCApF8injADHSGQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":41,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T51AAEAGxafAqAFny82XotNhAbttdZ2GGtGmCIAQAOVs9wAAAQEICgAx0mhF8inj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_id":41,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiT55AAEAGxLjAqAFny82XotNhAbttdZ2GGtGmCIAYAOVdJQAAAQEICgAx0mhF8injFgMBAOkBAADlAwNTKUS2Efj261J+LE5stULB\/lzfBlOjyL3qEyuaPjoLLSDg0to5\/h\/p7gAXT1kViG+D6U7ulXWnLBXIcoeBXEekvwAgWlrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8SkoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIKioAHQAXABi6ugABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":41,"flow_packet_id":4,"flow_first_seen":1492167639887,"flow_last_seen":1492167640203,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+B5AACwGMIbLzZeiwKgBZwG702Andsj\/g29laoAQAHDN6wAAAQEICkXSvFkAMdIZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702LyUvm4GyuHH6ASN8hErAAAAgQFoAQCCApF8iogADHSWAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":42,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUdAAEAGv\/3AqAFny82XotNiAbsbK4cf8lL5uYAQAOWp+QAAAQEICgAx0qZF8iog","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":41,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0jDpAACwGnGrLzZeiwKgBZwG702Ea0aYIbXWedIAQAHhsJwAAAQEICkXyKjIAMdJo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2314{"flow_id":41,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0782{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":41,"flow_packet_id":6,"flow_first_seen":1492167639887,"flow_last_seen":1492167640523,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0397{"flow_id":41,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T59AAEAGxaXAqAFny82XotNhAbttdZ50GtGrnIAQAPtlvwAAAQEICgAx0rhF8ioz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":41,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1315{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":41,"flow_packet_id":8,"flow_first_seen":1492167639887,"flow_last_seen":1492167640523,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0397{"flow_id":41,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T6BAAEAGxaTAqAFny82XotNhAbttdZ50GtGxMIAQARFgFQAAAQEICgAx0rhF8ioz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0748{"flow_id":41,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4jD1AACwGm2PLzZeiwKgBZwG702Ea0bEwbXWedIAYAHj7wQAAAQEICkXyKjMAMdJoxFwy3+pR7798L38aICm5PRXbvMTLd8bAytx20qUedNneLZhqqX+fas2jW9BTEa6+Y+g0FbaEsc0CdV0uSOiKWx8PESp808CDboG+hmz3XQR5H+kbrqgFqoLhOEegXLkTsLAzcdj8Mft7ftSP2tUH+bwMwlskUk2APWvNNtnGYXnJlN1Xx8DB5+yWP+B2cgJylQkcr4PeHueLkxI4HuHGGGlcCmmsodYm+yzlIityEkxJy2XMHEQJ+k2Zgz9YRaoV7ZAdbrc+xsmlSxnUNzA9OPMOR+gqYL50oTMcmTMwvAItw9y5XCKsP0JRZeI3o7TLpNb3qhcA8ChQZFMWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":41,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0T6FAAEAGxaPAqAFny82XotNhAbttdZ50GtGyNIAQAShe+QAAAQEICgAx0rlF8ioz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_id":41,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyT6JAAEAGxSTAqAFny82XotNhAbttdZ50GtGyNIAYASj2MgAAAQEICgAx0rlF8iozFgMDAEYQAABCQQSYqWHtZ8LgWlO15dh+fdJ3nqcBuUM8+tfxqz2jW8tfUye0eFFyRslXvQE7fsTpUszDWskMifZN48VBkuaCTdLHFAMDAAEBFgMDACgAAAAAAAAAAAVsrZYAUhs26PgMirptnxdGhmLSfoG067ZtHNOeFNxQ","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_id":41,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":903,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnjD5AACwGnDPLzZeiwKgBZwG702Ea0bI0bXWe8oAYAHh4EgAAAQEICkXyKoIAMdK5FAMDAAEBFgMDACjNNFVdUvW9s8mTz+nzxahD1GvhgdlRv34kDHdsJx1G0tkwx3ap4Xwb","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2085{"flow_id":41,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":904,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1040{"flow_id":41,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":905,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167640,"pkt_len":541,"pkt":"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","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":42,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":921,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167641,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702LyUvm4GyuHH6ASN8hDHwAAAgQFoAQCCApF8itfADHSpgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":42,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":922,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167641,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUhAAEAGv\/zAqAFny82XotNiAbsbK4cf8lL5uYAQAOWouwAAAQEICgAx0+RF8iog","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1492167648243,"flow_last_seen":1492167648243,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp"}
+0410{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":73,"pkt":"8IQvSpdgeJKcD6iOCABFAAA7101AAEAR3q7AqAFnwKgB\/kphADUAJzTVMN0BAAABAAAAAAAAA3JlcwJ3eAJxcQNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1492167648243,"flow_last_seen":1492167648243,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","category":"Chat"},"dns": {"query":"res.wx.qq.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1027{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":537,"pkt":"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","pkt_caplen":537,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1492167648243,"flow_last_seen":1492167648277,"flow_tot_l4_data_len":542,"flow_min_l4_data_len":39,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.QQ","category":"Chat"},"dns": {"query":"res.wx.qq.com","num_queries":1,"num_answers":27,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.158.34"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1492167648277,"flow_last_seen":1492167648277,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8euFAAEAGk9vAqAFny82eIqtKAbscYaCqAAAAAKACchBlYgAAAgQFtAQCCAoAMdpLAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1492167648494,"flow_last_seen":1492167648494,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43851,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8\/\/9AAEAGDr3AqAFny82eIqtLAbsShiV+AAAAAKACchDqMgAAAgQFtAQCCAoAMdqBAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0AABAADEGHSXLzZ4iwKgBZwG7q0qHWOtEHGGgq4ASOQgtSgAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":44,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoeuJAAEAGk+7AqAFny82eIqtKAbscYaCrh1jrRVAQAOWmPwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1079{"flow_id":44,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0720{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":44,"flow_packet_id":4,"flow_first_seen":1492167648277,"flow_last_seen":1492167648583,"flow_tot_l4_data_len":629,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.QQ","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"res.wx.qq.com","ja3":"550dce18de1bb143e69d6dd9413b8355","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":945,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0AABAADEGHSXLzZ4iwKgBZwG7q0tO\/rLJEoYlf4ASOQgjJgAAAgQFtAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoAABAAEAGDtHAqAFny82eIqtLAbsShiV\/Tv6yylAQAOWcGwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":44,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":967,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAouBhAADEGZRjLzZ4iwKgBZwG7q0qHWOtFHGGisFAQAHukpAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":44,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":1514,"pkt":"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","pkt_caplen":1514,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":44,"flow_packet_id":6,"flow_first_seen":1492167648277,"flow_last_seen":1492167648902,"flow_tot_l4_data_len":2129,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1480,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher"},"proto":"TLS.QQ","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"res.wx.qq.com","ja3":"550dce18de1bb143e69d6dd9413b8355","ja3s":"290adf098a54ade688d1df074dbecbf2","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_GCM_SHA384","alpn":"h2,http\/1.1"}}
+0381{"flow_id":44,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoeuRAAEAGk+zAqAFny82eIqtKAbscYaKwh1jw+VAQAPuecAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+5001{"flow_id":44,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":3484,"pkt":"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","pkt_caplen":3484,"pkt_type":2048,"pkt_ipoffset":14}
+1370{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":970,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":44,"flow_packet_id":8,"flow_first_seen":1492167648277,"flow_last_seen":1492167648903,"flow_tot_l4_data_len":5599,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3450,"flow_avg_l4_data_len":699,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"8":"Weak TLS cipher"},"proto":"TLS.QQ","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"res.wx.qq.com","server_names":"wx1.qq.com,webpush.wx.qq.com,webpush1.weixin.qq.com,loginpoll.weixin.qq.com,login.wx.qq.com,file.wx2.qq.com,wx2.qq.com,login.wx2.qq.com,wxitil.qq.com,file.wx.qq.com,login.weixin.qq.com,webpush2.weixin.qq.com,webpush.wx2.qq.com,webpush.weixin.qq.com,web.weixin.qq.com,res.wx.qq.com,wx.qq.com","ja3":"550dce18de1bb143e69d6dd9413b8355","ja3s":"290adf098a54ade688d1df074dbecbf2","unsafe_cipher":1,"cipher":"TLS_RSA_WITH_AES_256_GCM_SHA384","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=CN, ST=Guangdong, L=Shenzhen, O=Shenzhen Tencent Computer Systems Company Limited, OU=R&D, CN=wx.qq.com","alpn":"h2,http\/1.1","fingerprint":"67:53:57:7F:22:BB:D0:A6:D4:5F:A6:D4:B3:0A:13:73:29:23:D0:C9"}}
+0381{"flow_id":44,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoeuVAAEAGk+vAqAFny82eIqtKAbscYaKwh1j+X1AQATGQ1AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_id":44,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167648,"pkt_len":372,"pkt":"8IQvSpdgeJKcD6iOCABFAAFmeuZAAEAGkqzAqAFny82eIqtKAbscYaKwh1j+X1AYATFcEgAAFgMDAQYQAAECAQAhawO\/So02owaxwtSBTxgQTMGYEFFwQfENZd+q51oYgQaRl474gqK1J1Qcn\/lTkYGvPp69dZQntNXEY5pmbpNXrM5S78RwbgFdRvg9LmN5xSHxhEG+PtKta2IW9t4ERcm5QkxyjclvEYp\/3f0gkLogOpZzo1D6BoBxwqxl2od9ghrNs\/fgh1yMYsShe51\/CE6NfJmxw1tAncj0mIpZ\/V8NOsuLtjcBXBd5Yi0ZUzWmw95su4oMpe4ZCuldslgd3DFEQSFRYu5e+hEPRE+d30syoeIdkZiyk5oA9X6WlIkQLzKVKAPU9\/zOFZzCyerdURGdA8\/P0FtIx2sWQmLQY1gJFAMDAAEBFgMDACgAAAAAAAAAAHreAZXwYU5XDew+sGUU0hHC+4w9SB7ji3gKd9\/+recE","pkt_caplen":372,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":44,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":991,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167649,"pkt_len":60,"pkt":"eJKcD6iO8IQvSpdgCABFoAAouB1AADEGZRPLzZ4iwKgBZwG7q0qHWP5fHGGj7lAQAIOQRAAAAAC4nN6O","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_id":44,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":992,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167649,"pkt_len":312,"pkt":"eJKcD6iO8IQvSpdgCABFoAEquB5AADEGZBDLzZ4iwKgBZwG7q0qHWP5fHGGj7lAYAIOadQAAFgMDAMoEAADGAAAXcADARmd9wm0qbpS1rmR0FUVZp4NmWX0DAMK6cEyyTZQHRyxKIfdveqHM\/LscRQuwt7NwDYCAOnfI3WBGVA0W+gF3ZrDQWwlGAPk2iIa1WZe1pjmSSeitcjNp+0lTc2ZsvuZQ539EhMFwYT1gImvrl4N3GL6aKLxLf6TDfl4TNbrg9XHwxNLx6AGQ+3BV5aF6RA5Ti2uz6EZ4Sg+r9PcRLlxvu0Jjfv0OTWlaQfC5bxwgKQ9nodhswjwTdUkCVmjejRFuFAMDAAEBFgMDACgy6eHBv2K633TSMJHkQK+Y4YIBEW55ljhJJM1dKX0lQRXj6zioyhKZ","pkt_caplen":312,"pkt_type":2048,"pkt_ipoffset":14}
+1061{"flow_id":44,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":993,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167649,"pkt_len":556,"pkt":"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","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0390{"flow_id":44,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":994,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167649,"pkt_len":60,"pkt":"eJKcD6iO8IQvSpdgCABFoAAouB9AADEGZRHLzZ4iwKgBZwG7q0qHWP9hHGGl5FAQAIyNQwAAAADcFepn","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+1643{"flow_id":44,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":995,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167649,"pkt_len":984,"pkt":"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","pkt_caplen":984,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1492167650311,"flow_last_seen":1492167650311,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp"}
+0410{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":75,"pkt":"8IQvSpdgeJKcD6iOCABFAAA916xAAEAR3k3AqAFnwKgB\/uySADUAKTCBKzkBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":997,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1492167650311,"flow_last_seen":1492167650311,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0623{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":234,"pkt":"eJKcD6iO8IQvSpdgCABFoADcAABAAEARtLvAqAH+wKgBZwA17JIAyGqeKzmBgAABAAEABAAEA3NzbAdnc3RhdGljA2NvbQAAAQABwAwAAQABAAAAHQAErNkXQ8AQAAIAAQACif4ADQNuczEGZ29vZ2xlwBjAEAACAAEAAon+AAYDbnM0wEHAEAACAAEAAon+AAYDbnMywEHAEAACAAEAAon+AAYDbnMzwEHAPQABAAEABTcbAATY7yAKwGgAAQABAAUtSQAE2O8iCsB6AAEAAQAFLUkABNjvJArAVgABAAEABS1JAATY7yYK","pkt_caplen":234,"pkt_type":2048,"pkt_ipoffset":14}
+0664{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1492167650311,"flow_last_seen":1492167650345,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"172.217.23.67"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1492167650348,"flow_last_seen":1492167650348,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":35601,"dst_port":443,"l4_proto":"udp"}
+2176{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":999,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1492167650348,"flow_last_seen":1492167650348,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":35601,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"ssl.gstatic.com"}}
+0853{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1000,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":2048,"pkt_ipoffset":14}
+2194{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1001,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":1392,"pkt":"eJKcD6iO8IQvSpdgCABFoAViAABAADcRt7+s2RdDwKgBZwG7ixEFTkCsBPCmO80d\/CW5IJoqjbn6lzjr5TC1v3d2foeU3jLNcA4IAV35th92JTinR3E92La4uW3lsByHG3R1axVDDHGrIc2Dhs2S+7aBzkyVbwcuUK77hYdmfJ4TJuEFhTaYjceo9r51oYeJqOHOCc1BBmB5E+A58P\/H55fRg4dxRA9v1f2aVQ6I67HK4M7mS7147fzZ170E12rNhRLBsPAWwZ8U93ZWKjAcVK9waq7ihKZ\/GTyfNPuOCQnhcxCFRMVEx2xx65NSFauaw3a1qVgRV428j6Bchcyom0cvPgxBbWJUmObxkeqmQAFmTPCN6igcJnamWF5CRIXtlRtvIVi8G3Rds0EdWXNYvxaTSkwCziFaIH6mAaz9hCwjxATLUAdqd1Yo+wN5ikpGmpiBzh3Coj125lb7YXMKgdIF\/8K12iKaeICQ1ArpMEt9vvWxk35P363XmPN9SjUjvFqh8rl+ETiuGHzQwTYDZUwFRT8Tnc90FuuWkSHrjLuI78eE0u2MPArYDWbkXnAkM9f\/B1mpEGpwrQCQA0PHuwaHNDaEcqfk+htDhYfF2k76y25VNuFHeOfHnAe8W\/L6MSq0NvvJdxpclRqAM5S2hcBrDwho6FgiBa0XuPrQx61q\/3nmcTSWb0DXXos+FWaLGj1Jg4cyk4xSeKoZfxTTY8qOxPxWcSNcXXGMVMwz3NtJzwB28A6uPq8NBF+APnNiUzkLELf20sskbghw4Wvw2P5GvZ6Z0iUqrAzGSGc0IroovL34w3TMmjBnTPzAWKnwYJxIrcFH65r\/43AXULA7mwVKw7TuryWaAn8PVofDMn5VL+m8Bc4anaE3270Gx7DXXa3CWGylYl6IhspD51Ji7UqD6pJpDanmkxF7QRS0mZz7M+VCAuE5+TvKpba5WKwmCrXKMkHXnBfHSx4yC\/BngUmyj5AqU\/35FBtHK2MhZhT3uv3ixGib\/DhROgxNj\/fCIDmyLmZy6LuI15IWBQr2uiGWD15jLW9srpQ3r\/cpXrjFWrIOILP7BDqFX16AVMtIyhn8QUmpyMBzWR3rPBVnAwwCQUSi7lOuHYSBa2JAApapl8ibPeq+IESORJ2WC1jpiGlKVsyKHvCUxM4DB9CDGl+VMCLfBwTUsv9jC9A0oISxfI+skno\/pMiMhfE+1+tVpq0kVbytQk5I14sgZgoXLliJYkFCOr3ikDyMImPkBDegikF\/nhKUricS6KkRKOBVEDYofUgm6hebzs7TAwbIX0LHGrieMSNYdiZ\/RaP9BKZ7WUS7z8Jvlw3DtdXYHHGY\/9m62j8jgUA89FYp2sdoaRFheoQUmxEE6EpSZHWMo5+AT1rvxDTcNLYyAF\/NKlyP79gaAWae04vlwFQ4Bupkoby3AV8qNrlb42pc54gLBwr2\/V8SfP1Jf8GHKLnbnMMGzz8c8g08IQe\/1e7EH9oyogw0WeUU2ddyxaRPwa4eLAdObHTP\/jn7fsHAYVorRI56TLQ62d12KS2GZw3\/dElBm43NGOyNU1Hp381LUrTlDOWD2CkkP1QCRN+zezQnIAdftR9GtZfdliGgi4n+DRQuugUUjAENUiyLbjua9o3CfXKyGh5RlHt3r219Xp7bzpU2Sa3x2tOlotON5hkk2pmORaeO3NrbIHwpGOzFl20\/4Mhk6xhdUZeHJoEN7V1+kqNLH9CANDu7wpMSMlhqJfpnckBvaCh9BXX3VOJErUyDwJ\/yEG1ZNKGdvcDhAfCDrZsIbxElU8wBdoFg5g3GjSgWUZyHIUdESjz3nA05zyGh0UQ5UNTBZNmAzAGEZvPJPDUf","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1002,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":83,"pkt":"8IQvSpdgeJKcD6iOCABFAABFbjFAAEARRkvAqAFnrNkXQ4sRAbsAMdx0DCoBZwIONIO7A\/2cOIqV1ZCK4h2eK05EMevTWpEuYxJ\/wRQedJtK4Zk=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1003,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":73,"pkt":"eJKcD6iO8IQvSpdgCABFoAA7AABAADcRvOas2RdDwKgBZwG7ixEAJ1FNAAKKbXDyukAED2gnENfkBoaaYzFpqRX7MwhtVYvU7w==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":47,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1004,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":72,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7ixEAJi6WAANEGtEs50ixWe+ABqEl9SJOgoy0S657xf4flgbZ","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":47,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1005,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":80,"pkt":"8IQvSpdgeJKcD6iOCABFAABCbjJAAEARRk3AqAFnrNkXQ4sRAbsALiQuDCoBZwIONIO7BAg+F6C9OJtOw9xbOObe2FsMePS5IHFvVFWfi\/g=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":47,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":328,"pkt":"eJKcD6iO8IQvSpdgCABFoAE6AABAADcRu+es2RdDwKgBZwG7ixEBJqaZAATD7MXnehtiXlUz+Hk1AeZaUc2+ZMvDZUZ0GqGxNNaAlZinDCrBrnaOATxSGsOCFMaCaFec4SV7oO\/kLFwrUENrwh1y1mgTHgoiDmnYRHxuSeGyRFMYgw\/xosUJkzw12lBcnAXTNv8a\/2SuAyzWJ4jI6Iu2NlHm3V9zQ8CxPjqgYIbUhNNdrG5USoTXaVi5Y7S5DrKlzxBm3pDBUHpSYYgnG\/IeF1QrqlkpO7en7C1cHKFw6gJSHCRIMxY8ZiapLj1p4qZkxYLvpZc5K1weMNgNi9AfEMvDInvOymojlrBOTgO6WjdYp9wpg0vGani4DMjzXYMZAzdJxYXKztZguyy1lTWS4COCVAf8P5zodYdJZ5FJBDf9WNj4Gj5A6A==","pkt_caplen":328,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":47,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1007,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":80,"pkt":"8IQvSpdgeJKcD6iOCABFAABCbjpAAEARRkXAqAFnrNkXQ4sRAbsALnSgDCoBZwIONIO7BYiI4Q8+7Irw1TjIeblP7I8YsZt0hiW0bAcHDAs=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":47,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1008,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167650,"pkt_len":72,"pkt":"eJKcD6iO8IQvSpdgCABFoAA6AABAADcRvOes2RdDwKgBZwG7ixEAJriTAAUXSH3m+iN6aIxogGzNWS8zq8zerRpTJGHn\/W\/H","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1009,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167654,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0DsBAAEAGBoXAqAFny82XotNaAbub+DW+SvgsEIARAOUK7AAAAQEICgAx4GBFrgFX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":42,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1012,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167662,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA00hRAACwGVpDLzZeiwKgBZwG702LyUvm5GyuHH4ARAHCUGQAAAQEICkXyPzYAMdPk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1013,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167662,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUlAAEAGv\/vAqAFny82XotNiAbsbK4cf8lL5uoAQAOV\/zAAAAQEICgAx57xF8j82","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1018,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167667,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePhAAEAGFxfAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO34WQAAAQEICgAx7QCFoZCv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1019,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167667,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0HvAAACsGxX9A6ae8wKgBZxRsjLFKrVv6utDMqYAQAWWDwwAAAQEICoWiQKsAL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1492167669545,"flow_last_seen":1492167669545,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0662{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167669,"pkt_len":254,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoADwPUUAAIARd2TAqAFkwKgB\/wCKAIoA3H9oEQ7+\/cCoAWQAigDGAAAgRUhFSkVQRkdFQkVPRU9FSkNORkFFRENBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAALAAAAAAAAAAAAOgDAAAAAAAAAAAsAFYAAwABAAEAAgA9AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABHSU9WQU5OSS1QQwA=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1492167669545,"flow_last_seen":1492167669545,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617598,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54109,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":36,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617598,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54109,"dst_port":443,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617562,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54110,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1023,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":37,"flow_packet_id":2,"flow_first_seen":1492167617247,"flow_last_seen":1492167617562,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54110,"dst_port":443,"l4_proto":"tcp"}
+0378{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1031,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167690,"pkt_len":50,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj9oAAAEC8bHAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1032,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167690,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPVsAAAECRLLAqAFk4AAAFpQEAAAiAPsBAAAAAQIAAADgAAD8","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167691,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPVwAAAECRLHAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1037,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167693,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPV0AAAECRLDAqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1038,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167693,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoAAFAAEAGDtDAqAFny82eIqtLAbsShiV+Tv6yylAQAOWcHAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1039,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167694,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAo4WxAADEGO8TLzZ4iwKgBZwG7q0tO\/rLKEoYlf1AQAHOcjQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1042,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoPV8AAAECRK7AqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":45,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoAAJAAEAGDs\/AqAFny82eIqtLAbsShiV\/Tv6yylARAOWcGgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":42,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1044,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0VUpAAEAGv\/rAqAFny82XotNiAbsbK4cf8lL5uoARAOVfYAAAAQEICgAyCCdF8j82","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1492167695237,"flow_last_seen":1492167695237,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1045,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8M9xAAEAG4WDAqAFny82XotNlAbtEgzv7AAAAAKACchBSeAAAAgQFtAQCCAoAMggnAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1492167695488,"flow_last_seen":1492167695488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1046,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8xuRAAEAGTljAqAFny82XotNmAbsIrs6CAAAAAKACchD7hQAAAgQFtAQCCAoAMghmAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0391{"flow_id":45,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1047,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":60,"pkt":"eJKcD6iO8IQvSpdgCABFoAAo4W1AADEGO8PLzZ4iwKgBZwG7q0tO\/rLKEoYlgFAQAHOcjAAAAAAICnRO","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":45,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1048,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":54,"pkt":"eJKcD6iO8IQvSpdgCABFoAAo4W5AADEGO8LLzZ4iwKgBZwG7q0tO\/rLKEoYlgFARAHOciwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":45,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1049,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":54,"pkt":"8IQvSpdgeJKcD6iOCABFAAAoK+RAAEAG4uzAqAFny82eIqtLAbsShiWATv6yy1AQAOWcGQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":42,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1050,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0ZdRAACwGwtDLzZeiwKgBZwG702LyUvm6GyuHIIAQAHA\/GwAAAQEICkXyX\/AAMggn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1051,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAACwGKJ3LzZeiwKgBZwG702WgJJlmRIM7\/KASN8ga\/wAAAgQFoAQCCApF0vJmADIIJwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M91AAEAG4WfAqAFny82XotNlAbtEgzv8oCSZZ4AQAOWASQAAAQEICgAyCHhF0vJm","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiM95AAEAG4HjAqAFny82XotNlAbtEgzv8oCSZZ4AYAOVrOQAAAQEICgAyCHhF0vJmFgMBAOkBAADlAwO2WFDDl4dFyeBPNOhybUjd72FmGP\/nu4brBDO9flonhCBYxgzAaMyfJOk08sA4g8dg3UnK03IZIzAXShNAci3a7gAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8WloAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIWloAHQAXABjKygABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1053,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":49,"flow_packet_id":4,"flow_first_seen":1492167695237,"flow_last_seen":1492167695562,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0410{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1054,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702aaLHzgCK7Og6ASN8jmSwAAAgQFoAQCCApF0vKlADIIZgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1055,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xuVAAEAGTl\/AqAFny82XotNmAbsIrs6Dmix84YAQAOVLjAAAAQEICgAyCMFF0vKl","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1056,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0a99AACwGvMXLzZeiwKgBZwG702WgJJlnRIM86oAQAHh\/dgAAAQEICkXS8rgAMgh4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":49,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1057,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":49,"flow_packet_id":6,"flow_first_seen":1492167695237,"flow_last_seen":1492167695891,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":49,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1058,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M99AAEAG4WXAqAFny82XotNlAbtEgzzqoCSe+4AQAPt5DQAAAQEICgAyCMpF0vK4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2319{"flow_id":49,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1059,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":49,"flow_packet_id":8,"flow_first_seen":1492167695237,"flow_last_seen":1492167695891,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":49,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1060,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M+BAAEAG4WTAqAFny82XotNlAbtEgzzqoCSkj4AQARFzYwAAAQEICgAyCMpF0vK4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_id":49,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1061,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4a+JAACwGu77LzZeiwKgBZwG702WgJKSPRIM86oAYAHhcPQAAAQEICkXS8rgAMgh4feQ6Vcn0UE6BcmemkY6Ordo0430PoDtYVX9m6GwDXwkGzaCOO2Gzbe4AwIrm62nAnuTE0S0voJRb7aKqAgjP3p20svZQfNzYyqAci9GDPKgj6zdQkU51O8\/dfE410rNl7B2DD6nwoBi9mJo0U2mlSGP4kHtBEoFl3dnNfLcipodIHbabyhDLbGkhT6vE3WjRsC38RgUnNMeSNBOR5BO6f5ONA9GXgx3RvvLzkVjT+V6c5IkzPwEFJtFgrffgtkUHmH7X2clDFKlVH0201b\/mjk2ldCjJRZ4mmIdDtsDPLQTJf\/aTjZzq7n3WznPbQKGOe0TnPxbVHWxTFJwWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":49,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1062,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0M+FAAEAG4WPAqAFny82XotNlAbtEgzzqoCSlk4AQAShyRwAAAQEICgAyCMtF0vK4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":49,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1063,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167695,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyM+JAAEAG4OTAqAFny82XotNlAbtEgzzqoCSlk4AYASjrZwAAAQEICgAyCMxF0vK4FgMDAEYQAABCQQSgcQkhpYBqxsWEPHktP0k8izPTqUSj9ROt3P17Sb4OurP3igt7AufsSwowITXBD8by7tEbKHMCkKg7GYIewnsOFAMDAAEBFgMDACgAAAAAAAAAANVXHcZh1PNP4Ws7cUlEUzBicQuIF4rr96Z6Ktw582DW","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":49,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1064,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167696,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABna+NAACwGvI7LzZeiwKgBZwG702WgJKWTRIM9aIAYAHj3SwAAAQEICkXS8wsAMgjMFAMDAAEBFgMDAChJm4P16SeP6FgI3Hv4durktyyM51LBC+292O9xkavh1ZNN3Ku3a02s","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1990{"flow_id":49,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1065,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167696,"pkt_len":1234,"pkt":"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","pkt_caplen":1234,"pkt_type":2048,"pkt_ipoffset":14}
+1046{"flow_id":49,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1066,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167696,"pkt_len":538,"pkt":"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","pkt_caplen":538,"pkt_type":2048,"pkt_ipoffset":14}
+0723{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167696,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEixuZAAEAGTXDAqAFny82XotNmAbsIrs6Dmix84YAYAOUVZQAAAQEICgAyCYVF0vKlFgMBAOkBAADlAwMlUfNTDYjhvRdeF23CS9txxbOTIA6V\/rqxhzXUPkoC0SBB4xlOjKoTkDpNNo30AWaSGj1BD\/4+Gt6DSefvkE2ybgAgKirMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIWloAHQAXABhaWgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1070,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":50,"flow_packet_id":4,"flow_first_seen":1492167695488,"flow_last_seen":1492167696636,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0398{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1075,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0jyRAAC0GmIDLzZeiwKgBZwG702aaLHzhCK7PcYAQAHhJJwAAAQEICkXS88UAMgmF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":50,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1077,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":50,"flow_packet_id":6,"flow_first_seen":1492167695488,"flow_last_seen":1492167697005,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":50,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1078,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xudAAEAGTl3AqAFny82XotNmAbsIrs9xmiyCdYAQAPtCtAAAAQEICgAyCeFF0vPF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2319{"flow_id":50,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1079,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":50,"flow_packet_id":8,"flow_first_seen":1492167695488,"flow_last_seen":1492167697006,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":50,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1080,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xuhAAEAGTlzAqAFny82XotNmAbsIrs9xmiyICYAQARE9CgAAAQEICgAyCeFF0vPF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_id":50,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1081,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4jydAAC0Gl3nLzZeiwKgBZwG702aaLIgJCK7PcYAYAHhBRAAAAQEICkXS88UAMgmFoaiGCpS8oOjYacuydkQHgtPbP3DyrCSx4AGIoU3SQ6w6IlQLXR0jRvKahfxAvfRWK4NS0Ud2bL\/NEmEXTmcgYJtVpdEEZ51CAdmCnjdG5uJ1io+QU7gh0ieRKl0oDcMLrFtpE76p373nVzBc+KAsPd0s1oTigooRcerywIagM\/X4e2qLIZotZ7PkDFvtdRlU5qU+VC\/opMNw23\/weduPQHLssSRe9AcC5CbkN7\/nJMVWUhmp5xJ9EwyLnKx0P1muAOMxhsWDKq3MatVtiLYKjr3EcpIUBHqpmvyfA5M\/azGCndkdBUn+QYSjYkP7wL71mSayS2cuuL7yVrEWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":50,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xulAAEAGTlvAqAFny82XotNmAbsIrs9xmiyJDYAQASg77wAAAQEICgAyCeFF0vPF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":50,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1083,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyxupAAEAGTdzAqAFny82XotNmAbsIrs9xmiyJDYAYASiq3gAAAQEICgAyCeJF0vPFFgMDAEYQAABCQQS8+ivPYczW5+rJfLWUbP9rYqvXhfuC\/MWdEmcduZ5+9OMejhS0CyUEgMZsROleG8h7Nz3jzyX4sLzYdOP9rh\/7FAMDAAEBFgMDACgAAAAAAAAAAKPW9XXS+swNXytRtShV\/jCFnWvlpb2CiYLduqAyR2n3","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":50,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1087,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnjyhAAC0GmEnLzZeiwKgBZwG702aaLIkNCK7P74AYAHhaPQAAAQEICkXS9CEAMgniFAMDAAEBFgMDAChGxQBTa4I\/dQQi68l11IGtmusE372V+0\/B329iOZuMQCrZ\/RynVkvv","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1088,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":54,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":50,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1089,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167697,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0xutAAEAGTlnAqAFny82XotNmAbsIrs\/vmiyJQIAQASg6fAAAAQEICgAyCkdF0vQh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":38,"flow_packet_id":26,"flow_first_seen":1492167617248,"flow_last_seen":1492167640200,"flow_tot_l4_data_len":8877,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":341,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54111,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":39,"flow_packet_id":9,"flow_first_seen":1492167617498,"flow_last_seen":1492167640214,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54112,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1090,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":39,"flow_packet_id":9,"flow_first_seen":1492167617498,"flow_last_seen":1492167640214,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54112,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167712,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePlAAEAGFxbAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO0cXQAAAQEICgAyGQCFokCr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167712,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0fTIAACsGZz1A6ae8wKgBZxRsjLFKrVv6utDMqYAQAWXTwgAAAQEICoWi8KsAL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1492167619048,"flow_last_seen":1492167654504,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":40,"flow_packet_id":2,"flow_first_seen":1492167619048,"flow_last_seen":1492167654504,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54106,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":50,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167717,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0jylAAC0GmHvLzZeiwKgBZwG702aaLIlACK7P74ARAHgnogAAAQEICkXTB6oAMgpH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1492167720101,"flow_last_seen":1492167720101,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8R8JAAEAGzXrAqAFny82XotNnAbsR+WetAAAAAKACchBBBgAAAgQFtAQCCAoAMiBvAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1492167720353,"flow_last_seen":1492167720353,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8TqBAAEAGxpzAqAFny82XotNoAbuP9m4OAAAAAKACchC8ZwAAAgQFtAQCCAoAMiCuAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702cUBmdaEflnrqASN8gU+wAAAgQFoAQCCApFrqVHADIgbwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8NAAEAGzYHAqAFny82XotNnAbsR+WeuFAZnW4AQAOV6PQAAAQEICgAyIMhFrqVH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0724{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiR8RAAEAGzJLAqAFny82XotNnAbsR+WeuFAZnW4AYAOXtRgAAAQEICgAyIMhFrqVHFgMBAOkBAADlAwO4FYiIFcG2NJgznPgifBfdh+y\/SP3z7w7BFwt\/H9iuDCAVSEeMY2IvjCMgDjKK8SiyT+W1aOjnLn\/Q4fRxYvFJEgAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8iooAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIGhoAHQAXABiamgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":51,"flow_packet_id":4,"flow_first_seen":1492167720101,"flow_last_seen":1492167720458,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0411{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702hvZooej\/ZuD6ASN8iscAAAAgQFoAQCCApF0wrqADIgrgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqFAAEAGxqPAqAFny82XotNoAbuP9m4Pb2aKH4AQAOURtQAAAQEICgAyIQVF0wrq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0wsRAAC0GZODLzZeiwKgBZwG702cUBmdbEflonIAQAHh5ZAAAAQEICkWupZ8AMiDI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":51,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":51,"flow_packet_id":6,"flow_first_seen":1492167720101,"flow_last_seen":1492167720812,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0399{"flow_id":51,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8VAAEAGzX\/AqAFny82XotNnAbsR+WicFAZs74AQAPty9AAAAQEICgAyISBFrqWg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2318{"flow_id":51,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":51,"flow_packet_id":8,"flow_first_seen":1492167720101,"flow_last_seen":1492167720812,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":51,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8ZAAEAGzX7AqAFny82XotNnAbsR+WicFAZyg4AQARFtSQAAAQEICgAyISFFrqWg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_id":51,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4wsdAAC0GY9nLzZeiwKgBZwG702cUBnKDEflonIAYAHiyYQAAAQEICkWupaAAMiDIXbQxaJ2fFnFfbCcl3eWZA4KQcgYqei0zO7LNcQCdFQyLb01pe0mx1YK\/OdasYs2XXJ6FWYhWMzVI4hoUfrese2MaWRGjf0auoZW9P1BkH8gvLIQ7wG0+NaEJiXPpbQm8PF9CV52kt9qDZ3ZzwwkqqIdndfc86RSeO9gYopVBeEpUmxKXfYXBHQcJZejVDsQhyQhPUlehGUJfqUlmEnnt9CChBsB6XTIMbTmf\/+aSo686TrrM6SnHTTuGo2lCeoJwHuf2uuAhIPpSTwgonOuqQg76fZkP6iQuUsERZbLFTyX60WdV2sl7tzCfCxqE1hLc+6Yfy3GGkZSc2ioWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":51,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8dAAEAGzX3AqAFny82XotNnAbsR+WicFAZzh4AQAShsLgAAAQEICgAyISFFrqWg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":51,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167720,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyR8hAAEAGzP7AqAFny82XotNnAbsR+WicFAZzh4AYASj2kwAAAQEICgAyISFFrqWgFgMDAEYQAABCQQQMBT429+T3gJw\/GUNezVyChj+c1x+DtajLaHHg9em79qmtUtJQ6em1QCrHiT9yqRq4lfQrJBrb6CRpF0BS0WfUFAMDAAEBFgMDACgAAAAAAAAAAEHorowN4PW3Vw9i7\/bEAIswMK3LX39IRH+UpA1+UKb8","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":51,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167721,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnwshAAC0GZKnLzZeiwKgBZwG702cUBnOHEflpGoAYAHiJEAAAAQEICkWupfsAMiEhFAMDAAEBFgMDACjUSe3W9MPyIyQY8HS96Nr4xBVh+YPRTs9WGTp33NcYdV0Q8ABXyzio","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":51,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167721,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1047{"flow_id":51,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167721,"pkt_len":541,"pkt":"8IQvSpdgeJKcD6iOCABFAAIPR8pAAEAGy5\/AqAFny82XotNnAbsR+W3yFAZzuoAYASjW8QAAAQEICgAyIX5FrqX7FwMDAdYAAAAAAAAAAmll4Z\/nAI5PtOkc+WmgTBFLWxMTDcMnrIR3FvSDg7qQtfcoUVUZ7eqfkgkX6mJrPSwQTYKMhd0In7w0gRme3wT0RFhsn7udpy\/Owt+2L6HKVLW3qHVilPAQxOuPMpKUiZSjhZmOUoZ3rp6UDZp7nUN7EzZJiWko1D91A443wUOzwadSAOJ4eZmCSzH9OkY+oX5ZY2haLm6X\/\/2mluiyHJTvC+hXrFP2A\/t0Z1S+RfU1QMpajaJwNIiiylBU9czWpoa4\/YoZ3Kn+yLlZR+9thY2kk05ZEwFctYiKsyUROThi41BXlOyBExCuuBNqBja2FuI6K7riDQ93kclHglPLfthZrYjFDWZTlu+qx8BikkByw\/UKKsvj6HYnYOrygQWOBCEqXdcTxU7z43wKd4dweM3S397DssjUxyuwBEVVkf2QouvTKQiQxhxXL\/7DOShwNsiQX3SGy0fBlrUZRKNxc\/OtnJObu9LAMUlPLHiOySyDHmztEPoXcbwz+2qGk1Z3twNHzs9sYyhrP2IhW1JS4iyDBlTVudFXwkkU+tei8bPskG+7FEf+uMq1Ol2XyFPoS9bkrbQJKdB4WSr0fJrrWuOpUnyIEXlMpLKwK3HAvg==","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiTqJAAEAGxbTAqAFny82XotNoAbuP9m4Pb2aKH4AYAOXLQgAAAQEICgAyIkxF0wrqFgMBAOkBAADlAwPB\/pJ6BvhHBq\/4TId1UjdeYYD0wwj82jOL+qyjL+5dzCBgvGDUb62G4Do9NReMfS8YxaGk\/NAEyDLFergV\/vcvsQAgysrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8mpoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAI+voAHQAXABh6egABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":52,"flow_packet_id":4,"flow_first_seen":1492167720353,"flow_last_seen":1492167722010,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0411{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC0GJ53LzZeiwKgBZwG702hvZooej\/ZuD6ASN8iqwgAAAgQFoAQCCApF0wxBADIhBQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqNAAEAGxqHAqAFny82XotNoAbuP9m79b2aKH4AQAOUPcQAAAQEICgAyIltF0wrq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0hpVAAC0GoQ\/LzZeiwKgBZwG702hvZoofj\/Zu\/YAQAHgOTQAAAQEICkXTDIoAMiJM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2319{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXIhpZAAC0Gm3rLzZeiwKgBZwG702hvZoofj\/Zu\/YAQAHiTcAAAAQEICkXTDIoAMiJMFgMDAF0CAABZAwMLb\/bjahqipXDIAq7z\/zsCBoMKS82TWpulAU+Vb+o17yCLvNA70NWnnOkivxA3NtxTObgLtgPDGlVnUKXVA0Y5mcAvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":52,"flow_packet_id":8,"flow_first_seen":1492167720353,"flow_last_seen":1492167722364,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqRAAEAGxqDAqAFny82XotNoAbuP9m79b2aPs4AQAPsH3QAAAQEICgAyIqVF0wyK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2676{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":1754,"pkt":"eJKcD6iO8IQvSpdgCABFoAbMhpdAAC0GmnXLzZeiwKgBZwG702hvZo+zj\/Zu\/YAYAHgsPgAAAQEICkXTDIoAMiJMi6AhOArffz9dJXvub9aMTE9m7GKRKeFA\/Frtrp0XYhX6JqYW8b5etQL4tC009s8jG\/TuF8dFm+8Qnv4WGTbK3wvSPN1JnNDQWe+joFVsTCgLSjZxmTivYWk1MKykcC3vkTLWMDBQxUwZd+bVuFy+Hg8Wo2jQzS71Re20zkF2fEkUE+GnA3Ez8ZEoMIVFfuZJTLyMwnZDYqRXtmKQLIXy6PQpFijtmZoXa3RaUholNnff2hQGO8247PV9f6R3KrjtNTdvAtNV8PNXxSymO5xp1cn7ghlbtsUCsdT2arvzaytmF1NYKThZAARTMIIETzCCAzegAwIBAgIDAjpvMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMTA1MjEzNjUwWhcNMjIwNTIwMjEzNjUwWjBEMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMUR2VvVHJ1c3QgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvn4KhqPPa209K6GXrUkkTdd3uTR5CKWeop7eRxKSPX7qGYax6E89X\/fQp3eaWx8KA7UZU9ulIZRpY51qTJEMEEe+EfpshiW3qwRoQjgJZfAU2hme+msLq2LvjafvY3AjqK+B89FuiGdT7BKkKXWKp\/JXPaKDmJfyCn3U50NuMHhiIllZuHEnRaoPZsZVP\/oyFysxj0ag+mkUfJ2fWuLrM04QprPtd2PYw5703d95mnrU7t7dmszDt6ldzBE6B7tvl6QBI0eVH6N3+liSxsfQvc+TGEK3fveeZerVO8rtrMVwof7UEJrwEgRErBpbeFBFV0xvvYDLgVwts7x2oR5lAgMBAAGjggFKMIIBRjAfBgNVHSMEGDAWgBTAephojYn7qwVkDBF9qn1luMrMTjAdBgNVHQ4EFgQU0m\/3lvSFP3I8MH0j2oV4m6N8WnwwEgYDVR0TAQH\/BAgwBgEB\/wIBADAOBgNVHQ8BAf8EBAMCAQYwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2cxLnN5bWNiLmNvbS9jcmxzL2d0Z2xvYmFsLmNybDAvBggrBgEFBQcBAQQjMCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nMi5zeW1jYi5jb20wTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTM5MA0GCSqGSIb3DQEBCwUAA4IBAQCg1Pcs+3QLf2TxzUNqn2JTHAJ8mJCi7k9o1CAacxI+d7NQ63K87oi+fxfqd4+DYZVPhKHLMk9sIb7SaZZ9Y73cK6gf0BOEcP72NZWJ+aZ3sEbIu7cT9clgadZM\/tKO79NgwYCA4ef7i28heUrg3Kkbwbf7w0lZXLV3B0TUl\/xJAIlvBk4BcBmsLxHA4uYPL4ZLjXvDuacu9PGsFj45SVGeF0tPEDpbpaiSb\/361gsDTUdWVxnzy2v189bPsPX1oxHSIFMTNDcFLENaY9+NQNaFHlHpURceA1bJ8TCt55sRornQMYGbaLHZ6PPmlH7HrhMvh+3QJbBo+d4IWvMpzNSSFgMDAU0MAAFJAwAXQQRtFBJY2kTMiaaZFBuHN1c\/TNaqoxPpEk+Ku1B1KEIVp9iiNYDhXExDe\/OLl+n7vutXvft2uLIvAiGvAgswYqAWBgEBADySyo4fGlLduZomBkniwg2borttFJi0Oi8px0PnsWBARwmabT+FwpxGJ0A+ZahbBQMood1nI\/TB8n2CdmrmnL1Bk5F0S96\/wFegDfXCO8EsRKN4ZgeMWZfYsmVTCGxUHcNIhokgWfF675hNEqEB6Eqgl2XcR5+G564QhbW4oXb2QKjvGyinK1o4uXi+ED\/8gdfzUnO+YVe\/Mx0VLJ8Uvda3+x89Lbatfrmy1IoZVmz\/pSi1PF86Y1Xk19VU7egMTrW1k2mM1+E14GZuenX5NuFicscWj5HXhMlWuYpslHC5T\/B3H0EU6qKFDZ4rWzkEC9XEEh6++1mL6ne6wdgz+h4WAwMABA4AAAA=","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1317{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":52,"flow_packet_id":10,"flow_first_seen":1492167720353,"flow_last_seen":1492167722365,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0400{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqVAAEAGxp\/AqAFny82XotNoAbuP9m79b2aWS4AQARUBKwAAAQEICgAyIqVF0wyK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyTqZAAEAGxiDAqAFny82XotNoAbuP9m79b2aWS4AYARX9lQAAAQEICgAyIqVF0wyKFgMDAEYQAABCQQSh+pnFGxxwzvrDsA0C+\/OV0hT8QxymxVSdVOzIK8Ts7xEtLYwEBepfGTQ4O02ZU78gXkUfB2wRx9JbEX7l0swBFAMDAAEBFgMDACgAAAAAAAAAAG4Yn7256L3yejklVAHqL0q7mw3v5ZM4LG\/C12DTIoZs","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnhplAAC0GoNjLzZeiwKgBZwG702hvZpZLj\/Zve4AYAHhVfQAAAQEICkXTDOIAMiKlFAMDAAEBFgMDACg7VmUMZZIKzA5NcQ\/AxiIDUBx1HTnigQytG0dHQHqNZy6HR+dvlZb5","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167722,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0TqdAAEAGxp3AqAFny82XotNoAbuP9m97b2aWfoAQARX\/vwAAAQEICgAyIwdF0wzi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":41,"flow_packet_id":73,"flow_first_seen":1492167639887,"flow_last_seen":1492167667658,"flow_tot_l4_data_len":41563,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":569,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54113,"dst_port":443,"l4_proto":"tcp"}
+0400{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167742,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0hppAAC0GoQrLzZeiwKgBZwG702hvZpZ+j\/Zve4ARAHjs0wAAAQEICkXTIGoAMiMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":45,"flow_packet_id":9,"flow_first_seen":1492167648494,"flow_last_seen":1492167695538,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43851,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0467{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":45,"flow_packet_id":9,"flow_first_seen":1492167648494,"flow_last_seen":1492167695538,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":23,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43851,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":42,"flow_packet_id":9,"flow_first_seen":1492167640138,"flow_last_seen":1492167695550,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54114,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":42,"flow_packet_id":9,"flow_first_seen":1492167640138,"flow_last_seen":1492167695550,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54114,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167757,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePpAAEAGFxXAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO1AWQAAAQEICgAyRQOFovCr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167757,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA05AsAACsGAGRA6ae8wKgBZxRsjLFKrVv6utDMqYAQAWUjtgAAAQEICoWjoLcAL7Ej","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1492167765155,"flow_last_seen":1492167765155,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp"}
+0412{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8EUFAAEARpLrAqAFnwKgB\/uvEADUAKLhvU\/MBAAABAAAAAAAAA3dlYgZ3ZWNoYXQDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1492167765155,"flow_last_seen":1492167765155,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0839{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":391,"pkt":"eJKcD6iO8IQvSpdgCABFoAF5AABAAEARtB7AqAH+wKgBZwA168QBZQj\/U\/OBgAABAAMABAALA3dlYgZ3ZWNoYXQDY29tAAABAAHADAAFAAEAAAJYAAcEd2ViMcAQwCwAAQABAAACWAAEy82Tq8AsAAEAAQAAAlgABMvNl6LALAACAAEAAU8CAA0HbnMtdGVsMQJxccAXwCwAAgABAAFPAgAKB25zLWNuYzHAZ8AsAAIAAQABTwIACQZucy1vczHAZ8AsAAIAAQABTwIACgducy1jbW4xwGfAjgABAAEAAAFuAAS4ac55wI4AAQABAAABbgAEy82TmMCOAAEAAQAAAW4ABMvNsDrAjgABAAEAAAFuAARnBx7vwKMAAQABAAANPgAEtv5vZMCjAAEAAQAADT4ABLfoeDvAowABAAEAAA0+AAS2\/hBmwHgAAQABAAABmAAEb6Frw8B4AAEAAQAAAZgABG+haBHAXwABAAEAAAFuAAS2jLiMwF8AAQABAAABbgAEtwK6mQ==","pkt_caplen":391,"pkt_type":2048,"pkt_ipoffset":14}
+0668{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1492167765155,"flow_last_seen":1492167765432,"flow_tot_l4_data_len":397,"flow_min_l4_data_len":40,"flow_max_l4_data_len":357,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"web.wechat.com","num_queries":1,"num_answers":18,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"203.205.147.171"}}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1492167765433,"flow_last_seen":1492167765433,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA88RZAAEAGKB3AqAFny82Tq+K0AbvYTb2iAAAAAKACchDtIAAAAgQFtAQCCAoAMky0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1492167765657,"flow_last_seen":1492167765657,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58037,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8ZwNAAEAGsjDAqAFny82Tq+K1Abs3CyvvAAAAAKACchAf3gAAAgQFtAQCCAoAMkzsAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rSlk19z2E29o6ASN8g4AQAAAgQFoAQCCApF8qRxADJMtAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RdAAEAGKCTAqAFny82Tq+K0AbvYTb2jpZNfdIAQAOWdWQAAAQEICgAyTPdF8qRx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEi8RhAAEAGJzXAqAFny82Tq+K0AbvYTb2jpZNfdIAYAOUfdwAAAQEICgAyTPdF8qRxFgMBAOkBAADlAwN2f14Oc5hAS77GsYiJJWuQsbu0wB7\/AFxtEPxKO0DQmSCLvNA70NWnnOkivxA3NtxTObgLtgPDGlVnUKXVA0Y5mQAgenrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8WloAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIenoAHQAXABgKCgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":54,"flow_packet_id":4,"flow_first_seen":1492167765433,"flow_last_seen":1492167765701,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0410{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rU+QocNNwsr8KASN8h9cwAAAgQFoAQCCApFrtG3ADJM7AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwRAAEAGsjfAqAFny82Tq+K1Abs3CyvwPkKHDoAQAOXiyQAAAQEICgAyTTFFrtG3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+8BAAC8GLdvLzZOrwKgBZwG74rSlk1902E2+kYAQAHiclQAAAQEICkXypLQAMkz3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":54,"flow_packet_id":6,"flow_first_seen":1492167765433,"flow_last_seen":1492167765976,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RlAAEAGKCLAqAFny82Tq+K0AbvYTb6RpZNlCIAQAPuWNwAAAQEICgAyTTxF8qS2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2321{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":54,"flow_packet_id":8,"flow_first_seen":1492167765433,"flow_last_seen":1492167765976,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RpAAEAGKCHAqAFny82Tq+K0AbvYTb6RpZNqnIAQARGQjQAAAQEICgAyTTxF8qS2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0755{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4+8NAAC8GLNTLzZOrwKgBZwG74rSlk2qc2E2+kYAYAHjbvgAAAQEICkXypLYAMkz3vzSRAATJF5Ub4moHzwyV4aCffI9oBbi9oX6NyyE2mrm1ZVHbh8j6P4dLWkpBXUzFwjR\/MzxCp+3ICjlWJmYTDYpb3Ky+WlXnOxMeiY4zehdJIBH2kmIF+ZiWG+QuRxqRFpUrkavP\/MgD8MYFF+d0oAicK39skPTNThYTL3KePhO2ztkbZt+wRQNy6g3mY+SqpJkfhq+P7RpmlH\/TsEtt6r6jGE\/8Nj59DNjcU8X2RYCQgY9UdxUkK1sLN1YPrrRjDdK8znFnq4KtudJ4qF8IGzNnGJ7b5vhAkWZkfWWQx2\/aTR8DGFtAx87PcruS7\/4l7eDUnr4I+5QdhBwWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA08RtAAEAGKCDAqAFny82Tq+K0AbvYTb6RpZNroIAQASiPcgAAAQEICgAyTTxF8qS2","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167765,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACy8RxAAEAGJ6HAqAFny82Tq+K0AbvYTb6RpZNroIAYASjeiQAAAQEICgAyTTxF8qS2FgMDAEYQAABCQQQbsQkjZ8nG+G3tfEfZXtcxiAZo2Zo0eCMu9wEzcQaqEOnnj2+VEmdyNLCfd703CPi7AvTtbdyFi3QXIMp5pGKTFAMDAAEBFgMDACgAAAAAAAAAANGEg2RP21kloYbSnOD1PFyuJVViGOVwMG7ZUa3E4ebt","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167766,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn+8RAAC8GLaTLzZOrwKgBZwG74rSlk2ug2E2\/D4AYAHizQwAAAQEICkXypPoAMk08FAMDAAEBFgMDAChUWQ8rRDGKDrrxdb27\/tlT8ba1TPAe6hFCARlxgjc9\/SlhAZI7L9++","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1983{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167766,"pkt_len":1234,"pkt":"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","pkt_caplen":1234,"pkt_type":2048,"pkt_ipoffset":14}
+1068{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167766,"pkt_len":556,"pkt":"8IQvSpdgeJKcD6iOCABFAAIe8R5AAEAGJjPAqAFny82Tq+K0AbvYTcOfpZNr04AYASj4fgAAAQEICgAyTYFF8qT6FwMDAeUAAAAAAAAAArGSK6vg4V6ONkIANrXoEA1w3amtVbYxWsrGNXZufnMHgT3aK4D6qCJ8210x1aPb0HbyqC9c01TxW5rWyFwXYobrMkjPEacdcqbimPaI6BCCfrTlbWku4HfJUoqLcqhgMtJb7g+i9acBTQG2a\/V\/qBDYGiSabuSBeJZeC0h\/tu3F4xKKB61VH66psng67pca\/F601HoUhmZb+XOL6WIWIA5AXCRyH75myXxQoD5W5Xk+ZyfPUU8qS0CWqqlw9di5Hf2R54L+E6Ves+FAo2kDDtSA2UlgzkY0NqbNPzp8bCOOz9p\/srEymVv8IpNVQx9DmwakY\/Paf02pzFvOJPfBVE\/QrIVZ5CBGTlYukyDD8Xpx9YvRn4C3tcrFcximnIGa84eTXNIYnOLxpoCyFfDBNj1xNMMw\/zR44OHc1rel7N0tHOkTSEr4zFshHyoKNWcDGH9Ya\/uCYkQe5ctc3EFo\/hOZ7qI8ARWsjsRaAWG7UdjBU6LQZzzj0g+CK477vfzAeMYVd+VGOFLeYCs+RWIbY8HnyzsQBvQ5wajvJIIpovnoJSJdBjfvtc+LhGcZut83EYoJ1qdKo\/g1eCNMo+NHa9YlfJBIkW4Uq4esnCarOPr1TAjUF56Hxj3ceBC0qw==","pkt_caplen":556,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":55,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167767,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rU+QocNNwsr8KASN8h73QAAAgQFoAQCCApFrtMIADJNMQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":55,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167767,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwVAAEAGsjbAqAFny82Tq+K1Abs3CyvwPkKHDoAQAOXhegAAAQEICgAyToBFrtG3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":55,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167776,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwZAAEAGsjXAqAFny82Tq+K1Abs3CyvwPkKHDoARAOXYBQAAAQEICgAyV\/RFrtG3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1492167776953,"flow_last_seen":1492167776953,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1258,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167776,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8k9VAAEAGhV7AqAFny82Tq+K2AbuZa8QhAAAAAKACchAaQgAAAgQFtAQCCAoAMlf0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":57,"flow_packet_id":1,"flow_first_seen":1492167777204,"flow_last_seen":1492167777204,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58039,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":57,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8XvpAAEAGujnAqAFny82Tq+K3Abv08QbJAAAAAKACchB71AAAAgQFtAQCCAoAMlgzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rYX2Lh9mWvEIqASN8j8PgAAAgQFoAQCCApF00IlADJX9AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0k9ZAAEAGhWXAqAFny82Tq+K2AbuZa8QiF9i4foAQAOVhlwAAAQEICgAyWDdF00Il","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":55,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0VEVAAC8G1VbLzZOrwKgBZwG74rU+QocONwsr8YARAHDNcQAAAQEICkWu3L8AMlf0","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":55,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ZwdAAEAGsjTAqAFny82Tq+K1Abs3CyvxPkKHD4AQAOXMuQAAAQEICgAyWDdFrty\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEik9dAAEAGhHbAqAFny82Tq+K2AbuZa8QiF9i4foAYAOUtNAAAAQEICgAyWDdF00IlFgMBAOkBAADlAwO7CPpUAi5ji1WrIUUoJckLyw+WP0iTwMQC+JpZ0PHlhCBDtbBAnWnGygM6P1AG0j+Q0vm5\/VvsmvPTT+HjfnB2iAAgurrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8+voAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAICgoAHQAXABhaWgABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1264,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1492167776953,"flow_last_seen":1492167777221,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0411{"flow_id":57,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1265,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74reza+A99PEGyqASN8j\/yAAAAgQFoAQCCApFrtz+ADJYMwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":57,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1266,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XvtAAEAGukDAqAFny82Tq+K3Abv08QbKs2vgPoAQAOVlIAAAAQEICgAyWHdFrtz+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1267,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+hdAAC8GL4TLzZOrwKgBZwG74rYX2Lh+mWvFEIAQAHhg0gAAAQEICkXTQmkAMlg3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":1494,"pkt":"eJKcD6iO8IQvSpdgCABFoAXI+hhAAC8GKe\/LzZOrwKgBZwG74rYX2Lh+mWvFEIAQAHhv+gAAAQEICkXTQmkAMlg3FgMDAF0CAABZAwMMdZZFC+a\/dtCPgB6zd6eEL1mqS0ty8xuhCtoWZrw+ICAMsBFok8j6ktN3mDNfYh89ubRYR7QbnhPUZ8eCwdphM8AvAAARAAAAAP8BAAEAAAsABAMAAQIWAwMKagsACmYACmMABgowggYGMIIE7qADAgECAhAw0VtVOfZrLt7UNL9vJ0R7MA0GCSqGSIb3DQEBCwUAMEQxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMR0wGwYDVQQDExRHZW9UcnVzdCBTU0wgQ0EgLSBHMzAeFw0xNTA5MjEwMDAwMDBaFw0xODA5MjAyMzU5NTlaMG8xCzAJBgNVBAYTAkhLMREwDwYDVQQIEwhIb25nS29uZzERMA8GA1UEBxQIV2FuIENoYWkxITAfBgNVBAoUGFRlbmNlbnQgTW9iaWxpdHkgTGltaXRlZDEXMBUGA1UEAxQOd2ViLndlY2hhdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKLCU12ARBCRlKli7V796N1s9bfDDDp36hVnOckXCCtd1EICzDOMCShPpSy6mvuoSPYBr2kWWo99zbB1a21uYKdVpQmanSw53I2i\/nT9Ba10GRLm5DHrUpDUEij+mkz50Z2gx4CFdsKkRaGEZPO+as9uZ5K0vR1Ij1SUq7qYvK\/o8FWohsRDN8NCmoaUDyOkjivmoxwF9B\/OolimvW\/aejHHbaF7KhHMDTMj3pM9w5Z2Pb22IeJh85lDZOl6rH+yOl8HX0\/8DT5oJOmZoGq0Ovth7OnIKiNK8RoWM02mbl0XitpMl\/rj\/RLaSgD7DwrZYmXrRrFMnwlkx7CD4EfJfAgMBAAGjggLHMIICwzCCAT4GA1UdEQSCATUwggExghN3ZWJwdXNoMS53ZWNoYXQuY29tghJ3ZWJwdXNoLndlY2hhdC5jb22CFGxvZ2luLndlYi53ZWNoYXQuY29tghZ3ZWJwdXNoLndlYi53ZWNoYXQuY29tghN3ZWJwdXNoMi53ZWNoYXQuY29tghd3ZWJwdXNoLndlYjIud2VjaGF0LmNvbYIUZmlsZS53ZWIyLndlY2hhdC5jb22CD3dlYjEud2VjaGF0LmNvbYITZmlsZS53ZWIud2VjaGF0LmNvbYIUbG9naW5wb2xsLndlY2hhdC5jb22CD3dlYjIud2VjaGF0LmNvbYIQbG9naW4ud2VjaGF0LmNvbYIVbG9naW4ud2ViMi53ZWNoYXQuY29tgg5yZXMud2VjaGF0LmNvbYIOd2ViLndlY2hhdC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb\/eW9IU\/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQAZA+6JF4lvu2XJwUfeUSiNqeNdtX0tN26N","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1268,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1492167776953,"flow_last_seen":1492167777494,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1269,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0k9hAAEAGhWPAqAFny82Tq+K2AbuZa8UQF9i+EoAQAPtadwAAAQEICgAyWHtF00Jp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2673{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1270,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":56,"flow_packet_id":8,"flow_first_seen":1492167776953,"flow_last_seen":1492167777494,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1271,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0k9lAAEAGhWLAqAFny82Tq+K2AbuZa8UQF9jEqoAQARVTxQAAAQEICgAyWHtF00Jp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0573{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyk9pAAEAGhOPAqAFny82Tq+K2AbuZa8UQF9jEqoAYARWqOwAAAQEICgAyWHxF00JpFgMDAEYQAABCQQTKZanQFrSBWAGE7Lsy2NW8K6\/OvO32APvUx0zuyCdPie5U73QgBOPH2dgHei7rc7\/TCiKYRNjFNX\/xQHylg2LQFAMDAAEBFgMDACgAAAAAAAAAAOOqsDRMItC6TsbKzpaz8E0fEnlRnpFbFqVoK\/49cCbL","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABn+htAAC8GL03LzZOrwKgBZwG74rYX2MSqmWvFjoAYAHihWgAAAQEICkXTQq0AMlh8FAMDAAEBFgMDAChye55KBmqR+mMBsNTBYkeoYWUd1mB13FUml8ygNJsw+gHbUh7R9AGL","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+2084{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1043{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1275,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167777,"pkt_len":541,"pkt":"8IQvSpdgeJKcD6iOCABFAAIPk9xAAEAGg4TAqAFny82Tq+K2AbuZa8pmF9jE3YAYARXo6wAAAQEICgAyWMBF00KtFwMDAdYAAAAAAAAAAiJw5AlDILIVinlub3KJpNa9n2V80+SM1f2MB1PS9s2Ra41u8lXPsaN8WZtufrLBnmL7KvQziCZxyD\/3CqwEmmNpjIVCAjQoDTctrhxPb2B3azM1flmVNB0SfvxDdxFp3lbJ8EGUNqHtciAbgO9nxmcrxZgL63rpZTDUYU3IA7sS5gDMlBW7AiEKodAvM7tKv8QuEinZW\/J+hN4ekW6SCGjv17dcWCVIkR1I5ShNVm0KIq7Y3mESfvmpCo9pBcvSYbSpBcJrIUX7ub9eKRAgcIlegtULx0UFrpT0xPd3lfbxWDCsz5Kh5CkZZPwT510SgkPLFE2wBtygOsgMmdLOd+1YLx+k1MFYzlDmt4Kq8n3V6Qp2cYJ7TJ+DYXnMMkQy5LoQGMlNiWAMgBztImcDr9O8f7sT+K3Si0MloKZVAqlWzV8F2yqd7x4LTIus7GgMOtCzv6kdz4GGHmckXBCeMHd7d\/Srp9D5hd1\/Fmer36+7b9zUmVoP7P3jtsww0o9w4usouU1lFbQK84ztu1bgEky6Kjs1OatjUcTt\/02OJ9ZYFq1X74Tii3IeU\/aKUXXjBMOPNoChi8WcM2fn2xkezNusTEv569tDKpozSDoOvQ==","pkt_caplen":541,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1276,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167778,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0+hxAAC8GL3\/LzZOrwKgBZwG74rYX2MTdmWvMQYAQAJ9MCAAAAQEICkXTQvQAMli\/","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2161{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1277,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167778,"pkt_len":1371,"pkt":"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","pkt_caplen":1371,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":57,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167778,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74reza+A99PEGyqASN8j+HgAAAgQFoAQCCApFrt5kADJYdwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167778,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XvxAAEAGuj\/AqAFny82Tq+K3Abv08QbKs2vgPoAQAOVjuwAAAQEICgAyWdxFrtz+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":44,"flow_packet_id":24,"flow_first_seen":1492167648277,"flow_last_seen":1492167720406,"flow_tot_l4_data_len":7958,"flow_min_l4_data_len":20,"flow_max_l4_data_len":3450,"flow_avg_l4_data_len":331,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.158.34","src_port":43850,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":49,"flow_packet_id":36,"flow_first_seen":1492167695237,"flow_last_seen":1492167720429,"flow_tot_l4_data_len":13739,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":381,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54117,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":50,"flow_packet_id":18,"flow_first_seen":1492167695488,"flow_last_seen":1492167720468,"flow_tot_l4_data_len":4123,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54118,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1492167788126,"flow_last_seen":1492167788126,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0422{"flow_id":58,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167788,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEPYcAAAER2HrAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":58,"flow_packet_id":1,"flow_first_seen":1492167788126,"flow_last_seen":1492167788126,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1492167788128,"flow_last_seen":1492167788128,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0450{"flow_id":59,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167788,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0567{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1328,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":59,"flow_packet_id":1,"flow_first_seen":1492167788128,"flow_last_seen":1492167788128,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0422{"flow_id":58,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167789,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEPhsAAAER1+bAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167789,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167789,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEPiIAAAER19\/AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":58,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167789,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEPiMAAAER197AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167789,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167789,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0422{"flow_id":58,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167790,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEPlkAAAER16jAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167790,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0422{"flow_id":58,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167792,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEPrkAAAER10jAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167792,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1492167795087,"flow_last_seen":1492167795087,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":54124,"dst_port":5355,"l4_proto":"udp"}
+0407{"flow_id":60,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":70,"pkt":"AQBeAAD80CeIF3AECABFoAA4QcoAAAER1ELAqAFk4AAA\/NNsFOsAJPA+T9YAAAABAAAAAAAACmxiamFtd3B0eHoAAAEAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":60,"flow_packet_id":1,"flow_first_seen":1492167795087,"flow_last_seen":1492167795087,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":54124,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1492167795088,"flow_last_seen":1492167795088,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":49832,"dst_port":5355,"l4_proto":"udp"}
+0405{"flow_id":61,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":68,"pkt":"AQBeAAD80CeIF3AECABFoAA2QcsAAAER1EPAqAFk4AAA\/MKoFOsAIsj\/\/HMAAAABAAAAAAAACGNhbnNhcWNxAAABAAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1363,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":61,"flow_packet_id":1,"flow_first_seen":1492167795088,"flow_last_seen":1492167795088,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":49832,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1492167795090,"flow_last_seen":1492167795090,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":57401,"dst_port":5355,"l4_proto":"udp"}
+0403{"flow_id":62,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":68,"pkt":"AQBeAAD80CeIF3AECABFoAA2QcwAAAER1ELAqAFk4AAA\/OA5FOsAIm9WRGIAAAABAAAAAAAACG1jenRtcGtjAAABAAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1364,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":62,"flow_packet_id":1,"flow_first_seen":1492167795090,"flow_last_seen":1492167795090,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":57401,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1492167795091,"flow_last_seen":1492167795091,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50440,"dst_port":5355,"l4_proto":"udp"}
+0432{"flow_id":63,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":90,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACQRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxQgU6wAk8ypP1gAAAAEAAAAAAAAKbGJqYW13cHR4egAAAQAB","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0575{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1365,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":63,"flow_packet_id":1,"flow_first_seen":1492167795091,"flow_last_seen":1492167795091,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50440,"dst_port":5355,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"LLMNR","category":"Network"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1492167795092,"flow_last_seen":1492167795092,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":49195,"dst_port":5355,"l4_proto":"udp"}
+0432{"flow_id":64,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":88,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADwCsU6wAiwAT8cwAAAAEAAAAAAAAIY2Fuc2FxY3EAAAEAAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1366,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":64,"flow_packet_id":1,"flow_first_seen":1492167795092,"flow_last_seen":1492167795092,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":49195,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1492167795095,"flow_last_seen":1492167795095,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50577,"dst_port":5355,"l4_proto":"udp"}
+0432{"flow_id":65,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":88,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxZEU6wAifoZEYgAAAAEAAAAAAAAIbWN6dG1wa2MAAAEAAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1367,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":65,"flow_packet_id":1,"flow_first_seen":1492167795095,"flow_last_seen":1492167795095,"flow_tot_l4_data_len":34,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50577,"dst_port":5355,"l4_proto":"udp","ndpi": {"proto":"LLMNR","category":"Network"}}
+0408{"flow_id":60,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1368,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":70,"pkt":"AQBeAAD80CeIF3AECABFoAA4Qc0AAAER1D\/AqAFk4AAA\/NNsFOsAJPA+T9YAAAABAAAAAAAACmxiamFtd3B0eHoAAAEAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":63,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1369,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":90,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACQRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxQgU6wAk8ypP1gAAAAEAAAAAAAAKbGJqYW13cHR4egAAAQAB","pkt_caplen":90,"pkt_type":34525,"pkt_ipoffset":14}
+0403{"flow_id":62,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1370,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":68,"pkt":"AQBeAAD80CeIF3AECABFoAA2Qc4AAAER1EDAqAFk4AAA\/OA5FOsAIm9WRGIAAAABAAAAAAAACG1jenRtcGtjAAABAAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":61,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1371,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":68,"pkt":"AQBeAAD80CeIF3AECABFoAA2Qc8AAAER1D\/AqAFk4AAA\/MKoFOsAIsj\/\/HMAAAABAAAAAAAACGNhbnNhcWNxAAABAAE=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_id":65,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1372,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":88,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADxZEU6wAifoZEYgAAAAEAAAAAAAAIbWN6dG1wa2MAAAEAAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0432{"flow_id":64,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1373,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":88,"pkt":"MzMAAQAD0CeIF3AEht1gAAAAACIRAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAQADwCsU6wAiwAT8cwAAAAEAAAAAAAAIY2Fuc2FxY3EAAAEAAQ==","pkt_caplen":88,"pkt_type":34525,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1492167795292,"flow_last_seen":1492167795292,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0444{"flow_id":66,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQdAAAIARc3vAqAFkwKgB\/wCJAIkAOgI3\/v8BEAABAAAAAAAAIEVNRUNFS0VCRU5GSEZBRkVGSUZLQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":66,"flow_packet_id":1,"flow_first_seen":1492167795292,"flow_last_seen":1492167795292,"flow_tot_l4_data_len":58,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"flow_risk": {"16":"Suspicious DGA domain name"},"proto":"NetBIOS","category":"System"}}
+0444{"flow_id":66,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQdEAAIARc3rAqAFkwKgB\/wCJAIkAOgw8\/wABEAABAAAAAAAAIEVORURGS0ZFRU5GQUVMRURDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167795,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQdIAAIARc3nAqAFkwKgB\/wCJAIkAOio7\/wEBEAABAAAAAAAAIEVERUJFT0ZERUJGQkVERkJDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1377,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167796,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQy0AAIARch7AqAFkwKgB\/wCJAIkAOgI3\/v8BEAABAAAAAAAAIEVNRUNFS0VCRU5GSEZBRkVGSUZLQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1378,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167796,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQy4AAIARch3AqAFkwKgB\/wCJAIkAOio7\/wEBEAABAAAAAAAAIEVERUJFT0ZERUJGQkVERkJDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1379,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167796,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABOQy8AAIARchzAqAFkwKgB\/wCJAIkAOgw8\/wABEAABAAAAAAAAIEVORURGS0ZFRU5GQUVMRURDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1380,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167796,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABORSAAAIARcCvAqAFkwKgB\/wCJAIkAOgI3\/v8BEAABAAAAAAAAIEVNRUNFS0VCRU5GSEZBRkVGSUZLQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1381,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167796,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABORSEAAIARcCrAqAFkwKgB\/wCJAIkAOgw8\/wABEAABAAAAAAAAIEVORURGS0ZFRU5GQUVMRURDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":66,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1382,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167796,"pkt_len":92,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoABORSIAAIARcCnAqAFkwKgB\/wCJAIkAOio7\/wEBEAABAAAAAAAAIEVERUJFT0ZERUJGQkVERkJDQUNBQ0FDQUNBQ0FDQUFBAAAgAAE=","pkt_caplen":92,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1383,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167799,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0PplAAC8G6wLLzZOrwKgBZwG74reza+A+9PEGyoARAHBO\/gAAAQEICkWu8i8AMlnc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":57,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167799,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Xv1AAEAGuj7AqAFny82Tq+K3Abv08QbKs2vgP4AQAOU6vAAAAQEICgAybalFrvIv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167802,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0ePtAAEAGFxTAqAFnQOmnvIyxFGy60MyoSq1b+oAQAO1kTQAAAQEICgAycQKFo6C3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":51,"flow_packet_id":50,"flow_first_seen":1492167720101,"flow_last_seen":1492167748133,"flow_tot_l4_data_len":29265,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2888,"flow_avg_l4_data_len":585,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54119,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":52,"flow_packet_id":18,"flow_first_seen":1492167720353,"flow_last_seen":1492167748129,"flow_tot_l4_data_len":4131,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54120,"dst_port":443,"l4_proto":"tcp"}
+0378{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167815,"pkt_len":50,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj9sAAAEC8bDAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167818,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTS4AAAECNN\/AqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167819,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTTIAAAECNNvAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0382{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167820,"pkt_len":54,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167820,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTTQAAAECNNnAqAFk4AAAFpQEAAAiAPsBAAAAAQIAAADgAAD8","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0386{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167822,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoTUkAAAECNMTAqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":54,"flow_packet_id":26,"flow_first_seen":1492167765433,"flow_last_seen":1492167776953,"flow_tot_l4_data_len":10634,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":409,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58036,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":55,"flow_packet_id":8,"flow_first_seen":1492167765657,"flow_last_seen":1492167777220,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58037,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":55,"flow_packet_id":8,"flow_first_seen":1492167765657,"flow_last_seen":1492167777220,"flow_tot_l4_data_len":280,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58037,"dst_port":443,"l4_proto":"tcp"}
+0422{"flow_id":58,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1401,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167837,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABETnwAAAERx4XAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":58,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1402,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167837,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABETn0AAAERx4TAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1403,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167837,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167837,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167838,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEUDIAAAERxc\/AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":59,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167838,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167840,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEUk8AAAERw7LAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":59,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167840,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0398{"flow_id":57,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167844,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Xv5AAEAGuj3AqAFny82Tq+K3Abv08QbJs2vgP4AQAOUOxgAAAQEICgAymaBFrvIv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1413,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167844,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0W3NAAC8GzijLzZOrwKgBZwG74reza+A\/9PEGyoAQAHAO8gAAAQEICkWvHm4AMm2p","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1416,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167848,"pkt_len":243,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoADlWmgAAIARWkzAqAFkwKgB\/wCKAIoA0eSKEQ7\/A8CoAWQAigC7AAAgRUhFSkVQRkdFQkVPRU9FSkNORkFFRENBQ0FDQUNBQ0EAIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUJPAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAAIQAAAAAAAAAAAOgDAAAAAAAAAAAhAFYAAwABAAAAAgAyAFxNQUlMU0xPVFxCUk9XU0UADwCA\/AoAR0lPVkFOTkktUEMAAAAAAAYBAxIFAA8BVaoA","pkt_caplen":243,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1492167849769,"flow_last_seen":1492167849769,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0411{"flow_id":67,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167849,"pkt_len":70,"pkt":"MzMAAAACuHgu4toHht1gCKryABA6\/\/6AAAAAAAAACEKj86KGbFv\/AgAAAAAAAAAAAAAAAAAChQD\/swAAAAABAbh4LuLaBw==","pkt_caplen":70,"pkt_type":34525,"pkt_ipoffset":14}
+0493{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1417,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":67,"flow_packet_id":1,"flow_first_seen":1492167849769,"flow_last_seen":1492167849769,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::2","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1492167851002,"flow_last_seen":1492167851002,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0782{"flow_id":68,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167851,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/uHgu4toHCABFAAFI3+EAAP8R2sMAAAAA\/\/\/\/\/wBEAEMBNOAUAQEGADPq6ioAAAAAAAAAAAAAAAAAAAAAAAAAALh4LuLaBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEDNwcBeQMGD3f8OQIF3D0HAbh4LuLaBzIEwKgBajMEAHanAAwOaVBob25lZGlNb25pY2H\/AAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1418,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1492167851002,"flow_last_seen":1492167851002,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,121,3,6,15,119,252"}}
+0428{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1492167851203,"flow_last_seen":1492167851203,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff86:6c5b","l4_proto":"icmp6"}
+0432{"flow_id":69,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167851,"pkt_len":86,"pkt":"MzP\/hmxbuHgu4toHht1gAAAAACA6\/wAAAAAAAAAAAAAAAAAAAAD\/AgAAAAAAAAAAAAH\/hmxbhwDa5wAAAAD+gAAAAAAAAAhCo\/OihmxbDgE+iVJ12j4=","pkt_caplen":86,"pkt_type":34525,"pkt_ipoffset":14}
+0481{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1419,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1492167851203,"flow_last_seen":1492167851203,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff86:6c5b","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0398{"flow_id":67,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1420,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167851,"pkt_len":62,"pkt":"MzMAAAACuHgu4toHht1gCL93AAg6\/\/6AAAAAAAAACEKj86KGbFv\/AgAAAAAAAAAAAAAAAAAChQDCHwAAAAA=","pkt_caplen":62,"pkt_type":34525,"pkt_ipoffset":14}
+0441{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1492167852023,"flow_last_seen":1492167852023,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0464{"flow_id":70,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167852,"pkt_len":110,"pkt":"MzMAAAAWuHgu4toHht1gAAAAADgAAf6AAAAAAAAACEKj86KGbFv\/AgAAAAAAAAAAAAAAAAAWOgABAAUCAACPAPHlAAAAAgQAAAD\/AgAAAAAAAAAAAAL\/tFRbBAAAAP8CAAAAAAAAAAAAAf+GbFs=","pkt_caplen":110,"pkt_type":34525,"pkt_ipoffset":14}
+0494{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1421,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1492167852023,"flow_last_seen":1492167852023,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::16","l4_proto":"icmp6","ndpi": {"proto":"ICMPV6","category":"Network"}}
+0399{"flow_id":57,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167865,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Xv9AAEAGujzAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXNQQAAAQEICgAyruNFrx5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":71,"flow_packet_id":1,"flow_first_seen":1492167865975,"flow_last_seen":1492167865975,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":71,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167865,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8cVZAAEAGp93AqAFny82Tq+K4AbvAQN+1AAAAAKACchCA5wAAAgQFtAQCCAoAMq7jAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":72,"flow_packet_id":1,"flow_first_seen":1492167866226,"flow_last_seen":1492167866226,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":72,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1427,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8hOdAAEAGlEzAqAFny82Tq+K5AbuucSvFAAAAAKACchBGZwAAAgQFtAQCCAoAMq8iAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":71,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1428,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rhfZ1wawEDftqASN8iGUwAAAgQFoAQCCApFrzOuADKu4wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":71,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVdAAEAGp+TAqAFny82Tq+K4AbvAQN+2X2dcG4AQAOXrqwAAAQEICgAyryZFrzOu","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":71,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEicVhAAEAGpvXAqAFny82Tq+K4AbvAQN+2X2dcG4AYAOUGhQAAAQEICgAyryZFrzOuFgMBAOkBAADlAwM6MRNk3EmFJ9vIXCbdCkO3vP+WoKpqLBvgL+NdCbhfqyAMsBFok8j6ktN3mDNfYh89ubRYR7QbnhPUZ8eCwdphMwAgOjrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8GhoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIOjoAHQAXABhqagABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":71,"flow_packet_id":4,"flow_first_seen":1492167865975,"flow_last_seen":1492167866243,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0410{"flow_id":72,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1431,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rl6NAw+rnErxqASN8iAowAAAgQFoAQCCApFrzPtADKvIgEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":72,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1432,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOhAAEAGlFPAqAFny82Tq+K5AbuucSvGejQMP4AQAOXl+wAAAQEICgAyr2VFrzPt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":71,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1433,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0b+pAAC8GubHLzZOrwKgBZwG74rhfZ1wbwEDgpIAQAHjq5wAAAQEICkWvM\/EAMq8m","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":71,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1434,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":71,"flow_packet_id":6,"flow_first_seen":1492167865975,"flow_last_seen":1492167866514,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":71,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVlAAEAGp+LAqAFny82Tq+K4AbvAQOCkX2dhr4AQAPvkiwAAAQEICgAyr2pFrzPy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2319{"flow_id":71,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":71,"flow_packet_id":8,"flow_first_seen":1492167865975,"flow_last_seen":1492167866514,"flow_tot_l4_data_len":3366,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":420,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":71,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVpAAEAGp+HAqAFny82Tq+K4AbvAQOCkX2dnQ4AQARHe4QAAAQEICgAyr2pFrzPy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_id":71,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1438,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":326,"pkt":"eJKcD6iO8IQvSpdgCABFoAE4b+1AAC8GuKrLzZOrwKgBZwG74rhfZ2dDwEDgpIAYAHhjgwAAAQEICkWvM\/IAMq8mH8OtgucgtUA7PijryUnPiWyN1eNHGVt9PvidK0Kq\/DwczjZ+O0xK484Ewx2zKwDclwSi+Q1QCZ\/b3OVV\/O7TAMvy3oLlTYECM2iCz+kcJi62AmMoUaEN2v+6jidm2qj5Lvbz7fl35JpJTLqZaNBx+\/+2Pnig\/xR+k4OEpLf1l3KgzTw3uaUKSjTPBRH9lD8EjyPlDiZ9k9aHYiAr8AEy2zQ44UlrefG4HZ0Fo9XeZEmY\/ClVJFi8G7BInSN6S0qiTzHQ84nscFW1PATeZBPhwYYIB387B2Rff4BvPAY9b0SHHLmHmhzv9np7vfAuT6RzK834RMCbfHg\/7CMWAwMABA4AAAA=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":71,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1439,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0cVtAAEAGp+DAqAFny82Tq+K4AbvAQOCkX2doR4AQASjdxgAAAQEICgAyr2pFrzPy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":71,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACycVxAAEAGp2HAqAFny82Tq+K4AbvAQOCkX2doR4AYASgW2QAAAQEICgAyr2tFrzPyFgMDAEYQAABCQQRsOBC80u7GYj06nZEke0QYx2JsJKUCJ9\/Wp7W0Y+2Ft2zgBgNv8RYT9jRpjKM0UKVeCB8yjF2uevVVSzGYZbCDFAMDAAEBFgMDACgAAAAAAAAAAHoJFD9O9YrXBcTXxVu0uYVAFP97oR49ibSlMsQgAYLe","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwBAAEAGujvAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXMqQAAAQEICgAyr3tFrx5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":71,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnb+5AAC8GuXrLzZOrwKgBZwG74rhfZ2hHwEDhIoAYAHgIaAAAAQEICkWvNDYAMq9rFAMDAAEBFgMDACg4\/FLdEKRbQJQLOtpgu7AlCKoSDK4K0CrXEiD8eE1QZcmbkSXz0Im3","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1999{"flow_id":71,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":1246,"pkt":"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","pkt_caplen":1246,"pkt_type":2048,"pkt_ipoffset":14}
+2328{"flow_id":71,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167866,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1455,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167867,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwFAAEAGujrAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXL3QAAAQEICgAysEdFrx5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":72,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1456,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167867,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rl6NAw+rnErxqASN8h\/HQAAAgQFoAQCCApFrzUwADKvZQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":72,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1457,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167867,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOlAAEAGlFLAqAFny82Tq+K5AbuucSvGejQMP4AQAOXkuAAAAQEICgAysKhFrzPt","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1467,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167869,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwJAAEAGujnAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXKRAAAAQEICgAyseBFrx5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":72,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEihOpAAEAGk2PAqAFny82Tq+K5AbuucSvGejQMP4AYAOWxhwAAAQEICgAys9hFrzPtFgMBAOkBAADlAwOZa2bywhmdZUX58olJRmXCZ7SuNmlIRPbIU98uRUk9bCC9CRO8qTdKdBx1vFCAUpGqkrrbgAZaFdgU9IvXLwqN\/AAgmprMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8amoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIamoAHQAXABj6+gABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":72,"flow_packet_id":6,"flow_first_seen":1492167866226,"flow_last_seen":1492167871050,"flow_tot_l4_data_len":454,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0400{"flow_id":72,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1483,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0OUxAAC8G8E\/LzZOrwKgBZwG74rl6NAw\/rnEstIAQAHjcUQAAAQEICkWvOKMAMrPY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":72,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1484,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":72,"flow_packet_id":8,"flow_first_seen":1492167866226,"flow_last_seen":1492167871323,"flow_tot_l4_data_len":1946,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":243,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":72,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1485,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOtAAEAGlFDAqAFny82Tq+K5AbuucSy0ejQR04AQAPvV9QAAAQEICgAytBxFrzik","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2674{"flow_id":72,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1317{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1486,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":72,"flow_packet_id":10,"flow_first_seen":1492167866226,"flow_last_seen":1492167871323,"flow_tot_l4_data_len":3698,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":369,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0400{"flow_id":72,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1487,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hOxAAEAGlE\/AqAFny82Tq+K5AbuucSy0ejQYa4AQARXPQwAAAQEICgAytBxFrzik","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_id":72,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1488,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyhO1AAEAGk9DAqAFny82Tq+K5AbuucSy0ejQYa4AYARVuHQAAAQEICgAytB1FrzikFgMDAEYQAABCQQSr0kOEGHE4WGKpY\/5aqefcAOavEkG2UwlG\/o9vNro3sWuojxfAR0juUwuvlIB\/hiM60Im9ShghIL3TNYMM\/pDQFAMDAAEBFgMDACgAAAAAAAAAAESRiMLSeBmuWadzIpsriOQh7WdCxs+OM1uhoR\/hEEj3","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":72,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1493,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnOVBAAC8G8BjLzZOrwKgBZwG74rl6NBhrrnEtMoAYAHhBewAAAQEICkWvOOgAMrQdFAMDAAEBFgMDACjHKmy6psvZGILTp4ph5Y6tIPXU4KRvT96PWbBU01pudPAOEleI\/ppz","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":72,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1494,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167871,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0hO5AAEAGlE3AqAFny82Tq+K5AbuucS0yejQYnoAQARXOAAAAAQEICgAytGpFrzjo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":57,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1496,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167872,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwNAAEAGujjAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXHEgAAAQEICgAytRJFrx5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":56,"flow_packet_id":59,"flow_first_seen":1492167776953,"flow_last_seen":1492167815112,"flow_tot_l4_data_len":27722,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":469,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58038,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":57,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1497,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167878,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0XwRAAEAGujfAqAFny82Tq+K3Abv08QbKs2vgP4ARAOXArAAAAQEICgAyu3hFrx5u","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":72,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1500,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167891,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0OVFAAC8G8ErLzZOrwKgBZwG74rl6NBiernEtMoARAHi7FAAAAQEICkWvTHAAMrRq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":73,"flow_packet_id":1,"flow_first_seen":1492167905310,"flow_last_seen":1492167905310,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":73,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1513,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8Y7pAAEAGtXnAqAFny82Tq+K6AbsLFrb3AAAAAKACchA4ZAAAAgQFtAQCCAoAMtVNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":74,"flow_packet_id":1,"flow_first_seen":1492167905561,"flow_last_seen":1492167905561,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58043,"dst_port":443,"l4_proto":"tcp"}
+0410{"flow_id":74,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1514,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":74,"pkt":"8IQvSpdgeJKcD6iOCABFAAA8gtZAAEAGll3AqAFny82Tq+K7AbsB+ldaAAAAAKACchCg3QAAAgQFtAQCCAoAMtWMAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":73,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1515,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rpcdpBKCxa2+KASN8jmJgAAAgQFoAQCCApFr1oYADLVTQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":73,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1516,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Y7tAAEAGtYDAqAFny82Tq+K6AbsLFrb4XHaQS4AQAOVLfQAAAQEICgAy1ZJFr1oY","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0722{"flow_id":73,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":304,"pkt":"8IQvSpdgeJKcD6iOCABFAAEiY7xAAEAGtJHAqAFny82Tq+K6AbsLFrb4XHaQS4AYAOUEvAAAAQEICgAy1ZJFr1oYFgMBAOkBAADlAwOpwzJj9zQUL7FTARxwe22aWmPjNgjLbbTXUoctVXlwQCAXdM3iNMSeSRYu5rAL4uxt+WZ\/oboN6SP4aeC7pGEeFQAgqqrMqcyozBTME8ArwC\/ALMAwwBPAFACcAJ0ALwA1AAoBAAB8OjoAAP8BAAEAAAAAEwARAAAOd2ViLndlY2hhdC5jb20AFwAAACMAAAANABQAEgQDCAQEAQUDCAUFAQgGBgECAQAFAAUBAAAAAAASAAAAEAAOAAwCaDIIaHR0cC8xLjF1UAAAAAsAAgEAAAoACgAIysoAHQAXABhqagABAA==","pkt_caplen":304,"pkt_type":2048,"pkt_ipoffset":14}
+0726{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":73,"flow_packet_id":4,"flow_first_seen":1492167905310,"flow_last_seen":1492167905586,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":32,"flow_max_l4_data_len":270,"flow_avg_l4_data_len":95,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0411{"flow_id":74,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1518,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rtG\/8zAAfpXW6ASN8gnXAAAAgQFoAQCCApFr1pdADLVjAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":74,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1519,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0gtdAAEAGlmTAqAFny82Tq+K7AbsB+ldbRv\/MwYAQAOWMrQAAAQEICgAy1dZFr1pd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":73,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1520,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0yhRAAC8GX4fLzZOrwKgBZwG74rpcdpBLCxa35oAQAHhKtQAAAQEICkWvWl8AMtWS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2316{"flow_id":73,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+0783{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1521,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":73,"flow_packet_id":6,"flow_first_seen":1492167905310,"flow_last_seen":1492167905866,"flow_tot_l4_data_len":1874,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+0398{"flow_id":73,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1522,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Y71AAEAGtX7AqAFny82Tq+K6AbsLFrfmXHaV34AQAPtEWAAAAQEICgAy1dhFr1pf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2672{"flow_id":73,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":1754,"pkt":"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","pkt_caplen":1754,"pkt_type":2048,"pkt_ipoffset":14}
+1316{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1523,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":73,"flow_packet_id":8,"flow_first_seen":1492167905310,"flow_last_seen":1492167905866,"flow_tot_l4_data_len":3626,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":453,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"},"tls": {"version":"TLSv1.2","client_requested_server_name":"web.wechat.com","server_names":"webpush1.wechat.com,webpush.wechat.com,login.web.wechat.com,webpush.web.wechat.com,webpush2.wechat.com,webpush.web2.wechat.com,file.web2.wechat.com,web1.wechat.com,file.web.wechat.com,loginpoll.wechat.com,web2.wechat.com,login.wechat.com,login.web2.wechat.com,res.wechat.com,web.wechat.com","ja3":"e330bca99c8a5256ae126a55c4c725c5","ja3s":"699a80bdb17efe157c861f92c5bf5d1d","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=GeoTrust Inc., CN=GeoTrust SSL CA - G3","issuerDN":"C=HK, ST=HongKong, L=Wan Chai, O=Tencent Mobility Limited, CN=web.wechat.com","alpn":"h2,http\/1.1","fingerprint":"4F:3B:6A:87:0C:D2:34:09:C9:53:9F:6F:EE:7D:7B:9B:E9:D6:EF:C1"}}
+0398{"flow_id":73,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1524,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Y75AAEAGtX3AqAFny82Tq+K6AbsLFrfmXHacd4AQARU9pgAAAQEICgAy1dhFr1pf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_id":73,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1525,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167905,"pkt_len":192,"pkt":"8IQvSpdgeJKcD6iOCABFAACyY79AAEAGtP7AqAFny82Tq+K6AbsLFrfmXHacd4AYARWmBwAAAQEICgAy1dlFr1pfFgMDAEYQAABCQQTFXprh3YJ93AWRwR3pfe8hZl\/9VhymPzf8yZmxmLFk8oQoEE4juHOvk\/KqBpoFfa55jrDEUOw4rYqBMszUv4UcFAMDAAEBFgMDACgAAAAAAAAAAHyPtAxCXHRR8n7rWdRimt5+aaWiHMjIYP\/FkrajzDKM","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_id":73,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1526,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167906,"pkt_len":117,"pkt":"eJKcD6iO8IQvSpdgCABFoABnyhhAAC8GX1DLzZOrwKgBZwG74rpcdpx3Cxa4ZIAYAHhR5QAAAQEICkWvWqMAMtXZFAMDAAEBFgMDACijiklPzEj8zwLVeuyKBmF4cNJuE3ZbayEdla3mYV\/Uv1ZfYkclU5ln","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+1990{"flow_id":73,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1527,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167906,"pkt_len":1234,"pkt":"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","pkt_caplen":1234,"pkt_type":2048,"pkt_ipoffset":14}
+1034{"flow_id":73,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1528,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167906,"pkt_len":535,"pkt":"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","pkt_caplen":535,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":73,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1529,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167906,"pkt_len":66,"pkt":"eJKcD6iO8IQvSpdgCABFoAA0yhlAAC8GX4LLzZOrwKgBZwG74rpcdpyqCxa+yYAQAJ02OQAAAQEICkWvWuoAMtYc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":73,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1531,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167906,"pkt_len":297,"pkt":"eJKcD6iO8IQvSpdgCABFoAEbyhpAAC8GXprLzZOrwKgBZwG74rpcdpyqCxa+yYAYAJ30iQAAAQEICkWvWvsAMtYcFwMDAOKjiklPzEj80F\/vYdM4YXXqyaoEZLuAeaV17\/vv0Cnj1Mr5PtIb+doPYwxHcNrO53LWRaQJ68KYWHZ3Hy86DfolGcZOiHotADtaSay\/VOsQ152bkCsorbcnMVx7a1e1c0p0QPlY8mMY8elRX80wFIeDiWIhahrQVOhKuvVHMm89dI9ciOdGi9TAK1HXToBrS5jNNHRm+zw\/WgW8QLowQl5ZrhVgFpQ3kvS3vJJZHY8r4aiHZiBEmR6flZlWVepdPRI7uuz3zCoZ0BG84qds++Uxy2tUCGN4xfjr1QoKAbqlpjFm","pkt_caplen":297,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":74,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1540,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167907,"pkt_len":74,"pkt":"eJKcD6iO8IQvSpdgCABFoAA8AABAAC8GKZTLzZOrwKgBZwG74rtG\/8zAAfpXW6ASN8glwAAAAgQFoAQCCApFr1uvADLV1gEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":74,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1541,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167907,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0gthAAEAGlmPAqAFny82Tq+K7AbsB+ldbRv\/MwYAQAOWLXAAAAQEICgAy1ydFr1pd","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1542,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167908,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEYOMAAAERtR7AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1543,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167908,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEYOQAAAERtR3AqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":59,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1544,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167908,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0451{"flow_id":59,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1545,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167908,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1546,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167909,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEYPUAAAERtQzAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":59,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1547,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167909,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":58,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1548,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167911,"pkt_len":82,"pkt":"AQBeAAD70CeIF3AECABFoABEYSkAAAERtNjAqAFk4AAA+xTpFOkAMOibAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":59,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1549,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492167911,"pkt_len":102,"pkt":"MzMAAAD70CeIF3AEht1gAAAAADARAf6AAAAAAAAAkfk983Q2bNb\/AgAAAAAAAAAAAAAAAAD7FOkU6QAw3CsAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":65,"flow_packet_id":2,"flow_first_seen":1492167795095,"flow_last_seen":1492167795102,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50577,"dst_port":5355,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":2,"flow_packet_id":40,"flow_first_seen":1492167338426,"flow_last_seen":1492167781907,"flow_tot_l4_data_len":1920,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":68,"flow_packet_id":1,"flow_first_seen":1492167851002,"flow_last_seen":1492167851002,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":61,"flow_packet_id":2,"flow_first_seen":1492167795088,"flow_last_seen":1492167795100,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":49832,"dst_port":5355,"l4_proto":"udp"}
+0427{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":29,"flow_packet_id":3,"flow_first_seen":1492167449288,"flow_last_seen":1492167820408,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2}
+0429{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":28,"flow_packet_id":12,"flow_first_seen":1492167440984,"flow_last_seen":1492167822531,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2}
+0426{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":27,"flow_packet_id":3,"flow_first_seen":1492167440370,"flow_last_seen":1492167815567,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":60,"flow_packet_id":2,"flow_first_seen":1492167795087,"flow_last_seen":1492167795096,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":54124,"dst_port":5355,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":66,"flow_packet_id":9,"flow_first_seen":1492167795292,"flow_last_seen":1492167796728,"flow_tot_l4_data_len":522,"flow_min_l4_data_len":58,"flow_max_l4_data_len":58,"flow_avg_l4_data_len":58,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":48,"flow_packet_id":2,"flow_first_seen":1492167669545,"flow_last_seen":1492167848542,"flow_tot_l4_data_len":429,"flow_min_l4_data_len":209,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":214,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":64,"flow_packet_id":2,"flow_first_seen":1492167795092,"flow_last_seen":1492167795103,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":49195,"dst_port":5355,"l4_proto":"udp"}
+0522{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":57,"flow_packet_id":17,"flow_first_seen":1492167777204,"flow_last_seen":1492167918120,"flow_tot_l4_data_len":568,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58039,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":57,"flow_packet_id":17,"flow_first_seen":1492167777204,"flow_last_seen":1492167918120,"flow_tot_l4_data_len":568,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":33,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58039,"dst_port":443,"l4_proto":"tcp"}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":71,"flow_packet_id":49,"flow_first_seen":1492167865975,"flow_last_seen":1492167896999,"flow_tot_l4_data_len":22802,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58040,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":72,"flow_packet_id":18,"flow_first_seen":1492167866226,"flow_last_seen":1492167897002,"flow_tot_l4_data_len":4131,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":229,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58041,"dst_port":443,"l4_proto":"tcp"}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":73,"flow_packet_id":22,"flow_first_seen":1492167905310,"flow_last_seen":1492167916848,"flow_tot_l4_data_len":8772,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1720,"flow_avg_l4_data_len":398,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58042,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":74,"flow_packet_id":5,"flow_first_seen":1492167905561,"flow_last_seen":1492167907207,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58043,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":74,"flow_packet_id":5,"flow_first_seen":1492167905561,"flow_last_seen":1492167907207,"flow_tot_l4_data_len":184,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58043,"dst_port":443,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":11,"flow_packet_id":20,"flow_first_seen":1492167352068,"flow_last_seen":1492167892851,"flow_tot_l4_data_len":640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":36017,"dst_port":5228,"l4_proto":"tcp","ndpi": {"proto":"Google","category":"Web"}}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":11,"flow_packet_id":20,"flow_first_seen":1492167352068,"flow_last_seen":1492167892851,"flow_tot_l4_data_len":640,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":36017,"dst_port":5228,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":4,"flow_packet_id":34,"flow_first_seen":1492167342893,"flow_last_seen":1492167478295,"flow_tot_l4_data_len":7525,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":221,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.22.14","src_port":38657,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":69,"flow_packet_id":1,"flow_first_seen":1492167851203,"flow_last_seen":1492167851203,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip6","src_ip":"::","dst_ip":"ff02::1:ff86:6c5b","l4_proto":"icmp6"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":12,"flow_packet_id":179,"flow_first_seen":1492167353674,"flow_last_seen":1492167907140,"flow_tot_l4_data_len":70870,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":395,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54058,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":12,"flow_packet_id":179,"flow_first_seen":1492167353674,"flow_last_seen":1492167907140,"flow_tot_l4_data_len":70870,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":395,"midstream":1,"l3_proto":"ip4","src_ip":"203.205.151.162","dst_ip":"192.168.1.103","src_port":443,"dst_port":54058,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":58,"flow_packet_id":14,"flow_first_seen":1492167788126,"flow_last_seen":1492167911210,"flow_tot_l4_data_len":672,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":1,"flow_packet_id":40,"flow_first_seen":1492167338426,"flow_last_seen":1492167781907,"flow_tot_l4_data_len":1920,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1492167342857,"flow_last_seen":1492167342893,"flow_tot_l4_data_len":298,"flow_min_l4_data_len":60,"flow_max_l4_data_len":238,"flow_avg_l4_data_len":149,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53734,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1492167351026,"flow_last_seen":1492167351061,"flow_tot_l4_data_len":234,"flow_min_l4_data_len":41,"flow_max_l4_data_len":193,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":55862,"dst_port":53,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1492167648243,"flow_last_seen":1492167648277,"flow_tot_l4_data_len":542,"flow_min_l4_data_len":39,"flow_max_l4_data_len":503,"flow_avg_l4_data_len":271,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":19041,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":8,"flow_packet_id":13,"flow_first_seen":1492167350385,"flow_last_seen":1492167350562,"flow_tot_l4_data_len":6394,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":491,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":51507,"dst_port":443,"l4_proto":"udp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":53,"flow_packet_id":2,"flow_first_seen":1492167765155,"flow_last_seen":1492167765432,"flow_tot_l4_data_len":397,"flow_min_l4_data_len":40,"flow_max_l4_data_len":357,"flow_avg_l4_data_len":198,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60356,"dst_port":53,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":7,"flow_packet_id":2,"flow_first_seen":1492167350333,"flow_last_seen":1492167350372,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":46078,"dst_port":53,"l4_proto":"udp"}
+0442{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":70,"flow_packet_id":1,"flow_first_seen":1492167852023,"flow_last_seen":1492167852023,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::16","l4_proto":"icmp6"}
+0440{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":67,"flow_packet_id":2,"flow_first_seen":1492167849769,"flow_last_seen":1492167851204,"flow_tot_l4_data_len":24,"flow_min_l4_data_len":8,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::842:a3f3:a286:6c5b","dst_ip":"ff02::2","l4_proto":"icmp6"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":46,"flow_packet_id":2,"flow_first_seen":1492167650311,"flow_last_seen":1492167650345,"flow_tot_l4_data_len":241,"flow_min_l4_data_len":41,"flow_max_l4_data_len":200,"flow_avg_l4_data_len":120,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":60562,"dst_port":53,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":10,"flow_packet_id":13,"flow_first_seen":1492167351067,"flow_last_seen":1492167352398,"flow_tot_l4_data_len":4370,"flow_min_l4_data_len":36,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.198.46","src_port":57591,"dst_port":443,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":62,"flow_packet_id":2,"flow_first_seen":1492167795090,"flow_last_seen":1492167795099,"flow_tot_l4_data_len":68,"flow_min_l4_data_len":34,"flow_max_l4_data_len":34,"flow_avg_l4_data_len":34,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.252","src_port":57401,"dst_port":5355,"l4_proto":"udp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":47,"flow_packet_id":10,"flow_first_seen":1492167650348,"flow_last_seen":1492167650467,"flow_tot_l4_data_len":3632,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":363,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"172.217.23.67","src_port":35601,"dst_port":443,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":59,"flow_packet_id":14,"flow_first_seen":1492167788128,"flow_last_seen":1492167911211,"flow_tot_l4_data_len":672,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0475{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":63,"flow_packet_id":2,"flow_first_seen":1492167795091,"flow_last_seen":1492167795098,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::91f9:3df3:7436:6cd6","dst_ip":"ff02::1:3","src_port":50440,"dst_port":5355,"l4_proto":"udp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1492167377896,"flow_last_seen":1492167468048,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.142","src_port":49787,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1492167377896,"flow_last_seen":1492167468048,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.142","src_port":49787,"dst_port":443,"l4_proto":"tcp"}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":75,"flow_packet_id":1,"flow_first_seen":1492171154216,"flow_last_seen":1492171154216,"flow_tot_l4_data_len":1220,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp"}
+2015{"flow_id":75,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1553,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171154,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":76,"flow_packet_id":1,"flow_first_seen":1492171154792,"flow_last_seen":1492171154792,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp"}
+0400{"flow_id":76,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1554,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171154,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0MxpAAEAGXPXAqAFnQOmnvNO9AbuA1BLzAh8CfoAQAT0MFQAAAQEICgA\/OqCGKY\/Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":77,"flow_packet_id":1,"flow_first_seen":1492171164904,"flow_last_seen":1492171164904,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":77,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1555,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171164,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRVAAEAG2hjAqAFnX2UiIpknAFAjQjGZFOMj7IAQBf7IcQAAAQEICgA\/RIBwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":78,"flow_packet_id":1,"flow_first_seen":1492171166312,"flow_last_seen":1492171166312,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp"}
+0402{"flow_id":78,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1556,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171166,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/65AAEAG93\/AqAFnX2UiIYi0AFB\/4ffk18M9+4AQCyPvSAAAAQEICgA\/ReBr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":79,"flow_packet_id":1,"flow_first_seen":1492171166440,"flow_last_seen":1492171166440,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":79,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1557,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171166,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqRAAEAGaIrAqAFnX2UiIYi3AFBZ1tlh3d8I5IAQBaRnrgAAAQEICgA\/RgBr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":80,"flow_packet_id":1,"flow_first_seen":1492171166696,"flow_last_seen":1492171166696,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":80,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1558,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171166,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R7pAAEAGr3TAqAFnX2UiIYi4AFDlnJrhImFMS4AQCdyNBgAAAQEICgA\/RkBr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":81,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":1492171168104,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":81,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1559,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171168,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00nhAAEAGJLXAqAFnX2UiIpk\/AFBMVGJPaE9vZoAQBU7AugAAAQEICgA\/R6BwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":82,"flow_packet_id":1,"flow_first_seen":1492171168104,"flow_last_seen":1492171168104,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":82,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1560,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171168,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkNAAEAG0OvAqAFnX2UiIYilAFA23DHngeAL9oAQBaSDAQAAAQEICgA\/R6Br6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1492171169377,"flow_last_seen":1492171169377,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"193.204.114.233","src_port":37578,"dst_port":123,"l4_proto":"udp"}
+0430{"flow_id":83,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171169,"pkt_len":90,"pkt":"8IQvSpdgeJKcD6iOCABFEABMYzZAAEAR4JXAqAFnwcxy6ZLKAHsAOA7KIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANybOCEWgBhs","pkt_caplen":90,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1561,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1492171169377,"flow_last_seen":1492171169377,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"193.204.114.233","src_port":37578,"dst_port":123,"l4_proto":"udp","ndpi": {"proto":"NTP","category":"System"}}
+2015{"flow_id":75,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1562,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171171,"pkt_len":1254,"pkt":"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","pkt_caplen":1254,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":84,"flow_packet_id":1,"flow_first_seen":1492171175912,"flow_last_seen":1492171175912,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":84,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1563,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171175,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0iE1AAEAGSqnAqAFn2DrNg+MfAbtA+v0fFZsbqIAQAT54MgAAAQEICgA\/T0Ay2r7t","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":85,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":1492171176772,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":85,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1564,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BdAAEAGIxbAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvX7AAAAQEICgA\/UBZwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1565,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/69AAEAG937AqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPlEAAAAQEICgA\/UBZr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1566,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqVAAEAGaInAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRdlQAAAQEICgA\/UBdr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":80,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1567,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R7tAAEAGr3PAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyDLQAAAQEICgA\/UBdr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1568,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRZAAEAG2hfAqAFnX2UiIpknAFAjQjGaFOMj7IARBf682AAAAQEICgA\/UBdwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":86,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":1492171176772,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":86,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0251AAEAGiP7AqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf1WAAAAQEICgA\/UBcc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":87,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":1492171176772,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp"}
+0400{"flow_id":87,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1570,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e59AAEAGnZzAqAFny82Tq+NyAbsh7o58Fu1nsYARAOW08AAAAQEICgA\/UBdF3\/Tx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1571,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkRAAEAG0OrAqAFnX2UiIYilAFA23DHogeAL9oARBaR6iAAAAQEICgA\/UBdr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":81,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1572,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00nlAAEAGJLTAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU64QQAAAQEICgA\/UBdwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":1492171176772,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":58165,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":88,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171176,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABE+U9AAEARvKPAqAFnwKgB\/uM1ADUAMHLoUUIBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1573,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":1492171176772,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":58165,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0399{"flow_id":85,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1574,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BhAAEAGIxXAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvXsQAAAQEICgA\/UFFwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1575,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRdAAEAG2hbAqAFnX2UiIpknAFAjQjGaFOMj7IARBf68nAAAAQEICgA\/UFNwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1576,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7BAAEAG933AqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPk0AAAAQEICgA\/UFZr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":80,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1577,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R7xAAEAGr3LAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyC7gAAAQEICgA\/UFZr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":81,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1578,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00npAAEAGJLPAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU64AQAAAQEICgA\/UFdwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1579,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkVAAEAG0OnAqAFnX2UiIYilAFA23DHogeAL9oARBaR6RwAAAQEICgA\/UFhr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1580,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqZAAEAGaIjAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRdUgAAAQEICgA\/UFpr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":86,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1581,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0255AAEAGiP3AqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf1FQAAAQEICgA\/UFoc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":85,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1582,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BlAAEAGIxTAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvXdgAAAQEICgA\/UIxwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1583,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRhAAEAG2hXAqAFnX2UiIpknAFAjQjGaFOMj7IARBf68YAAAAQEICgA\/UI9wfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":80,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1584,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R71AAEAGr3HAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyCrwAAAQEICgA\/UJVr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1585,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7FAAEAG93zAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPkkAAAAQEICgA\/UJZr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":81,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1586,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00ntAAEAGJLLAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU63wQAAAQEICgA\/UJdwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1587,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkZAAEAG0OjAqAFnX2UiIYilAFA23DHogeAL9oARBaR6BgAAAQEICgA\/UJlr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1588,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqdAAEAGaIfAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRdDwAAAQEICgA\/UJ1r6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":86,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1589,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0259AAEAGiPzAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf00gAAAQEICgA\/UJ0c0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":87,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1590,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6BAAEAGnZvAqAFny82Tq+NyAbsh7o58Fu1nsYARAOW0WAAAAQEICgA\/UK9F3\/Tx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1492171177429,"flow_last_seen":1492171177429,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43317,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":89,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABE+fFAAEARvAHAqAFnwKgB\/qk1ADUAMHHYjFIBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1591,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1492171177429,"flow_last_seen":1492171177429,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43317,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0399{"flow_id":85,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1592,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BpAAEAGIxPAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvXAAAAAQEICgA\/UQJwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1593,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRlAAEAG2hTAqAFnX2UiIpknAFAjQjGaFOMj7IARBf676AAAAQEICgA\/UQdwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":80,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1594,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R75AAEAGr3DAqAFnX2UiIYi4AFDlnJriImFMS4ARCdyCMQAAAQEICgA\/URNr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1595,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7JAAEAG93vAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPkEAAAAQEICgA\/URZr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":81,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1596,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00nxAAEAGJLHAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU63QQAAAQEICgA\/URdwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1597,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkdAAEAG0OfAqAFnX2UiIYilAFA23DHogeAL9oARBaR5hAAAAQEICgA\/URtr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1598,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqhAAEAGaIbAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRciQAAAQEICgA\/USNr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":86,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1599,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171177,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026BAAEAGiPvAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJf0TAAAAQEICgA\/USMc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":87,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1600,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6FAAEAGnZrAqAFny82Tq+NyAbsh7o58Fu1nsYARAOWzegAAAQEICgA\/UY1F3\/Tx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":85,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1601,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BtAAEAGIxLAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvWFAAAAQEICgA\/Ue5wfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1602,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRpAAEAG2hPAqAFnX2UiIpknAFAjQjGaFOMj7IARBf66+AAAAQEICgA\/UfdwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1492171178741,"flow_last_seen":1492171178741,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":56367,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":90,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABE+rRAAEARuz7AqAFnwKgB\/twvADUAMPgq0wUBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1603,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":90,"flow_packet_id":1,"flow_first_seen":1492171178741,"flow_last_seen":1492171178741,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":56367,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":80,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1604,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R79AAEAGr2\/AqAFnX2UiIYi4AFDlnJriImFMS4ARCdyBNQAAAQEICgA\/Ug9r6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1605,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7NAAEAG93rAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPjDwAAAQEICgA\/Uhdr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":81,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1606,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00n1AAEAGJLDAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU62QAAAAQEICgA\/UhhwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1607,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkhAAEAG0ObAqAFnX2UiIYilAFA23DHogeAL9oARBaR4fwAAAQEICgA\/UiBr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1608,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqlAAEAGaIXAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRbfAAAAQEICgA\/UjBr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":86,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1609,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171178,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026FAAEAGiPrAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJfzPwAAAQEICgA\/UjAc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":87,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1610,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6JAAEAGnZnAqAFny82Tq+NyAbsh7o58Fu1nsYARAOWxvQAAAQEICgA\/U0pF3\/Tx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":85,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1611,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01BxAAEAGIxHAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvUOwAAAQEICgA\/U8dwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1612,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRtAAEAG2hLAqAFnX2UiIpknAFAjQjGaFOMj7IARBf65FwAAAQEICgA\/U9hwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":80,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1613,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8BAAEAGr27AqAFnX2UiIYi4AFDlnJriImFMS4ARCdx\/PAAAAQEICgA\/VAhr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1614,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7RAAEAG93nAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPhDgAAAQEICgA\/VBhr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":81,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1615,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00n5AAEAGJK\/AqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU60PgAAAQEICgA\/VBpwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1616,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171180,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JklAAEAG0OXAqAFnX2UiIYilAFA23DHogeAL9oARBaR2dQAAAQEICgA\/VCpr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1617,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171181,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqpAAEAGaITAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRZYgAAAQEICgA\/VEpr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":86,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1618,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171181,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026JAAEAGiPnAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJfxJQAAAQEICgA\/VEoc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":87,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1619,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171183,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e6NAAEAGnZjAqAFny82Tq+NyAbsh7o58Fu1nsYARAOWuQwAAAQEICgA\/VsRF3\/Tx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":90,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171183,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABE\/1xAAEARtpbAqAFnwKgB\/twvADUAMPgq0wUBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":85,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1621,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171184,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01B1AAEAGIxDAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgvQigAAAQEICgA\/V3hwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":77,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1622,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171184,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HRxAAEAG2hHAqAFnX2UiIpknAFAjQjGaFOMj7IARBf61VQAAAQEICgA\/V5pwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1492171184747,"flow_last_seen":1492171184747,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":33915,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":91,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171184,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABEAC1AAEARtcbAqAFnwKgB\/oR7ADUAMLAAcuQBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1623,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1492171184747,"flow_last_seen":1492171184747,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":33915,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":80,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1624,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171184,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8FAAEAGr23AqAFnX2UiIYi4AFDlnJriImFMS4ARCdx7SgAAAQEICgA\/V\/pr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":78,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1625,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171184,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/7VAAEAG93jAqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyPdCgAAAQEICgA\/WBxr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":81,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1626,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171184,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00n9AAEAGJK7AqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU6wPAAAAQEICgA\/WBxwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":82,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1627,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171185,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JkpAAEAG0OTAqAFnX2UiIYilAFA23DHogeAL9oARBaRyYwAAAQEICgA\/WDxr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":79,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1628,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171185,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jqtAAEAGaIPAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaRVMAAAAQEICgA\/WHxr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":86,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1629,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171185,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA026NAAEAGiPjAqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJfs8wAAAQEICgA\/WHwc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1492171203806,"flow_last_seen":1492171203806,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2}
+0379{"flow_id":92,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171203,"pkt_len":50,"pkt":"AQBeAAAB8IQvSpdgCABGoAAkj\/YAAAEC8ZXAqAH+4AAAAZQEAAARZOybAAAAAAIAAAA=","pkt_caplen":50,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1630,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1492171203806,"flow_last_seen":1492171203806,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1492171205448,"flow_last_seen":1492171205448,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2}
+0382{"flow_id":93,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171205,"pkt_len":54,"pkt":"AQBeAAAWeJKcD6iOCABGwAAoAABAAAECQerAqAFn4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1631,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1492171205448,"flow_last_seen":1492171205448,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1492171206877,"flow_last_seen":1492171206877,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2}
+0382{"flow_id":94,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171206,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoL+EAAAECUizAqAFk4AAAFpQEAAAiAPsCAAAAAQIAAADgAAD7","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1632,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":94,"flow_packet_id":1,"flow_first_seen":1492171206877,"flow_last_seen":1492171206877,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0385{"flow_id":94,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1633,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171208,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoL+IAAAECUivAqAFk4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":94,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171210,"pkt_len":54,"pkt":"AQBeAAAW0CeIF3AECABGoAAoL+UAAAECUijAqAFk4AAAFpQEAAAiAOwAAAAAAQIAAADv\/\/\/9","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1492171211383,"flow_last_seen":1492171211383,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.108","dst_ip":"224.0.0.22","l4_proto":2}
+0385{"flow_id":95,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171211,"pkt_len":54,"pkt":"AQBeAAAWACSlnnPpCABGwAAoAABAAAECQeXAqAFs4AAAFpQEAAAiAOwDAAAAAQIAAADv\/\/\/6","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1635,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1492171211383,"flow_last_seen":1492171211383,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.108","dst_ip":"224.0.0.22","l4_proto":2,"ndpi": {"proto":"IGMP","category":"Network"}}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":86,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":86,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":87,"flow_packet_id":5,"flow_first_seen":1492171176772,"flow_last_seen":1492171183608,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":87,"flow_packet_id":5,"flow_first_seen":1492171176772,"flow_last_seen":1492171183608,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":82,"flow_packet_id":8,"flow_first_seen":1492171168104,"flow_last_seen":1492171185112,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":82,"flow_packet_id":8,"flow_first_seen":1492171168104,"flow_last_seen":1492171185112,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":78,"flow_packet_id":8,"flow_first_seen":1492171166312,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":78,"flow_packet_id":8,"flow_first_seen":1492171166312,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":79,"flow_packet_id":8,"flow_first_seen":1492171166440,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":79,"flow_packet_id":8,"flow_first_seen":1492171166440,"flow_last_seen":1492171185368,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":80,"flow_packet_id":8,"flow_first_seen":1492171166696,"flow_last_seen":1492171184848,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":80,"flow_packet_id":8,"flow_first_seen":1492171166696,"flow_last_seen":1492171184848,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":85,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184328,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":85,"flow_packet_id":7,"flow_first_seen":1492171176772,"flow_last_seen":1492171184328,"flow_tot_l4_data_len":224,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":77,"flow_packet_id":8,"flow_first_seen":1492171164904,"flow_last_seen":1492171184464,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":77,"flow_packet_id":8,"flow_first_seen":1492171164904,"flow_last_seen":1492171184464,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":81,"flow_packet_id":8,"flow_first_seen":1492171168104,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":81,"flow_packet_id":8,"flow_first_seen":1492171168104,"flow_last_seen":1492171184984,"flow_tot_l4_data_len":256,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":1492171250302,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0422{"flow_id":96,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171250,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABESuVAAAERi7nAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1636,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":96,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":1492171250302,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":1492171250302,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0452{"flow_id":97,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171250,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0567{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1637,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":97,"flow_packet_id":1,"flow_first_seen":1492171250302,"flow_last_seen":1492171250302,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_googlecast._tcp.local"}}
+0422{"flow_id":96,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1638,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171250,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABESuZAAAERi7jAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":97,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1639,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171250,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0422{"flow_id":96,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1640,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171251,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABESy5AAAERi3DAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":97,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1641,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171251,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+0423{"flow_id":96,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1642,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171253,"pkt_len":82,"pkt":"AQBeAAD7eJKcD6iOCABFAABES\/VAAAERiqnAqAFn4AAA+xTpFOkAMOiYAAAAAAABAAAAAAAAC19nb29nbGVjYXN0BF90Y3AFbG9jYWwAAAwAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":97,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1643,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171253,"pkt_len":102,"pkt":"MzMAAAD7eJKcD6iOht1gAAAAADARAf6AAAAAAAAAepKc\/\/4PqI7\/AgAAAAAAAAAAAAAAAAD7FOkU6QAwzvQAAAAAAAEAAAAAAAALX2dvb2dsZWNhc3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":102,"pkt_type":34525,"pkt_ipoffset":14}
+1002{"flow_id":84,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1644,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":45366,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":98,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABEJBJAAEARkeHAqAFnwKgB\/rE2ADUAMGKHk6IBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1645,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":98,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":45366,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp"}
+0399{"flow_id":99,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1646,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0R8tAAEAGr2PAqAFnX2UiIYi4AFDlnJriImFMS4ARCdwsYAAAAQEICgA\/puRr6XGp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp"}
+0402{"flow_id":100,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1647,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0\/79AAEAG927AqAFnX2UiIYi0AFB\/4ffl18M9+4ARCyOM4gAAAQEICgA\/qERr6XAp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp"}
+0401{"flow_id":101,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1648,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA00olAAEAGJKTAqAFnX2UiIpk\/AFBMVGJQaE9vZoARBU5gFAAAAQEICgA\/qERwfJTZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1492171267430,"flow_last_seen":1492171267430,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":59567,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":102,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBJlBAAEARj6bAqAFnwKgB\/uivADUALYbgc9oBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQNsYW4AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1649,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1492171267430,"flow_last_seen":1492171267430,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":59567,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1492171267576,"flow_last_seen":1492171267576,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp"}
+0401{"flow_id":103,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1650,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171267,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA01ChAAEAGIwXAqAFnX2UiIpkbAFBTLvPZ9eqaX4ARCgt\/PgAAAQEICgA\/qMRwfB+e","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1492171268427,"flow_last_seen":1492171268427,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42074,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":104,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171268,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBJl5AAEARj5jAqAFnwKgB\/qRaADUALSfRFz8BAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQNsYW4AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":104,"flow_packet_id":1,"flow_first_seen":1492171268427,"flow_last_seen":1492171268427,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42074,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1492171268472,"flow_last_seen":1492171268472,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":105,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1652,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171268,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0JlRAAEAG0NrAqAFnX2UiIYilAFA23DHogeAL9oARBaQg+wAAAQEICgA\/qaRr6Xcq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1002{"flow_id":84,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1653,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171268,"pkt_len":506,"pkt":"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","pkt_caplen":506,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1492171268754,"flow_last_seen":1492171268754,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43705,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":106,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171268,"pkt_len":86,"pkt":"8IQvSpdgeJKcD6iOCABFAABIJm1AAEARj4LAqAFnwKgB\/qq5ADUANAzJFXEBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1654,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":106,"flow_packet_id":1,"flow_first_seen":1492171268754,"flow_last_seen":1492171268754,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43705,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1492171269128,"flow_last_seen":1492171269128,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":107,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1655,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171269,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0HSdAAEAG2gbAqAFnX2UiIpknAFAjQjGaFOMj7IARBf5ipwAAAQEICgA\/qkhwfIhZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1492171269192,"flow_last_seen":1492171269192,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp"}
+0401{"flow_id":108,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1656,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171269,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0e7BAAEAGnYvAqAFny82Tq+NyAbsh7o58Fu1nsYARAOVarwAAAQEICgA\/qlhF3\/Tx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1492171269383,"flow_last_seen":1492171269383,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":109,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171269,"pkt_len":81,"pkt":"8IQvSpdgeJKcD6iOCABFAABDJn9AAEARj3XAqAFnwKgB\/qwfADUALz4De5MBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1657,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":109,"flow_packet_id":1,"flow_first_seen":1492171269383,"flow_last_seen":1492171269383,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0420{"flow_id":109,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171269,"pkt_len":81,"pkt":"8IQvSpdgeJKcD6iOCABFAABDJoBAAEARj3TAqAFnwKgB\/qwfADUAL2b9N5kBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1658,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":109,"flow_packet_id":2,"flow_first_seen":1492171269383,"flow_last_seen":1492171269383,"flow_tot_l4_data_len":94,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1492171269548,"flow_last_seen":1492171269548,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0664{"flow_id":110,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171269,"pkt_len":254,"pkt":"\/\/\/\/\/\/\/\/0CeIF3AECABFoADwL\/IAAIARhLfAqAFkwKgB\/wCKAIoA3H89EQ7\/KMCoAWQAigDGAAAgRUhFSkVQRkdFQkVPRU9FSkNORkFFRENBQ0FDQUNBQUEAIEFCQUNGUEZQRU5GREVDRkNFUEZIRkRFRkZQRlBBQ0FCAP9TTUIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEQAALAAAAAAAAAAAAOgDAAAAAAAAAAAsAFYAAwABAAEAAgA9AFxNQUlMU0xPVFxCUk9XU0UADACguw0AV09SS0dST1VQAAAAAAAAAAMKABAAgP4HAABHSU9WQU5OSS1QQwA=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1659,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1492171269548,"flow_last_seen":1492171269548,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"NetBIOS.SMBv1","category":"System"}}
+0423{"flow_id":98,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1660,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171269,"pkt_len":82,"pkt":"8IQvSpdgeJKcD6iOCABFAABEJttAAEARjxjAqAFnwKgB\/rE2ADUAMGKHk6IBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20AAAEAAQ==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1492171270418,"flow_last_seen":1492171270418,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42589,"dst_port":53,"l4_proto":"udp"}
+0412{"flow_id":111,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171270,"pkt_len":75,"pkt":"8IQvSpdgeJKcD6iOCABFAAA9Ju1AAEARjw3AqAFnwKgB\/qZdADUAKRuahlUBAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0649{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1661,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1492171270418,"flow_last_seen":1492171270418,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42589,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Google","category":"Web"},"dns": {"query":"ssl.gstatic.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":1492171271288,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":112,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1662,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171271,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0jrVAAEAGaHnAqAFnX2UiIYi3AFBZ1tli3d8I5IARBaQBSAAAAQEICgA\/rGRr6XCp","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":1492171271288,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp"}
+0400{"flow_id":113,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1663,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171271,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0261AAEAGiO7AqAFnX2W0s8s0AFCaGNVHW3dgu4ARJJeZCwAAAQEICgA\/rGQc0iJk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":104,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1664,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171273,"pkt_len":79,"pkt":"8IQvSpdgeJKcD6iOCABFAABBJ9JAAEARjiTAqAFnwKgB\/qRaADUALSfRFz8BAAABAAAAAAAAA3NzbAdnc3RhdGljA2NvbQNsYW4AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":106,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1665,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171273,"pkt_len":86,"pkt":"8IQvSpdgeJKcD6iOCABFAABIKB1AAEARjdLAqAFnwKgB\/qq5ADUANAzJFXEBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1492171274388,"flow_last_seen":1492171274388,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp"}
+0428{"flow_id":114,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171274,"pkt_len":85,"pkt":"8IQvSpdgeJKcD6iOCABFAABHKHpAAEARjXbAqAFnwKgB\/qdoADUAMwYVU1YBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwNsYW4AAAEAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1666,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":114,"flow_packet_id":1,"flow_first_seen":1492171274388,"flow_last_seen":1492171274388,"flow_tot_l4_data_len":51,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0428{"flow_id":114,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171274,"pkt_len":85,"pkt":"8IQvSpdgeJKcD6iOCABFAABHKHtAAEARjXXAqAFnwKgB\/qdoADUAMwU2OTUBAAABAAAAAAAAATEGZGViaWFuBHBvb2wDbnRwA29yZwNsYW4AABwAAQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1667,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":114,"flow_packet_id":2,"flow_first_seen":1492171274388,"flow_last_seen":1492171274388,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"1.debian.pool.ntp.org.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1492171274755,"flow_last_seen":1492171274755,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44346,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":115,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171274,"pkt_len":86,"pkt":"8IQvSpdgeJKcD6iOCABFAABIKKBAAEARjU\/AqAFnwKgB\/q06ADUANGSfuxkBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1668,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1492171274755,"flow_last_seen":1492171274755,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44346,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1492171290232,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp"}
+0420{"flow_id":116,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171290,"pkt_len":81,"pkt":"8IQvSpdgeJKcD6iOCABFAABDMahAAEARhEzAqAFnwKgB\/qMfADUAL3l8SRkBAAABAAAAAAAAATIGZGViaWFuBHBvb2wDbnRwA29yZwAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1669,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":116,"flow_packet_id":1,"flow_first_seen":1492171290232,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"2.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0420{"flow_id":116,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171290,"pkt_len":81,"pkt":"8IQvSpdgeJKcD6iOCABFAABDMalAAEARhEvAqAFnwKgB\/qMfADUAL1ZyUSMBAAABAAAAAAAAATIGZGViaWFuBHBvb2wDbnRwA29yZwAAHAAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":116,"flow_packet_id":2,"flow_first_seen":1492171290232,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":94,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"2.debian.pool.ntp.org","num_queries":0,"num_answers":0,"reply_code":0,"query_type":28,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0400{"flow_id":76,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171290,"pkt_len":66,"pkt":"8IQvSpdgeJKcD6iOCABFAAA0Mx1AAEAGXPLAqAFnQOmnvNO9AbuA1BLzAh8CfoAQAT2IFAAAAQEICgA\/vqCGKY\/Q","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1492171291761,"flow_last_seen":1492171291761,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53515,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":117,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","pkt_oversize":false,"pkt_ts":1492171291,"pkt_len":86,"pkt":"8IQvSpdgeJKcD6iOCABFAABIMrNAAEARgzzAqAFnwKgB\/tELADUANPxl\/4EBAAABAAAAAAAAB3dlYnB1c2gDd2ViBndlY2hhdANjb20DbGFuAAABAAE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1492171291761,"flow_last_seen":1492171291761,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53515,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WeChat","category":"Chat"},"dns": {"query":"webpush.web.wechat.com.lan","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":111,"flow_packet_id":1,"flow_first_seen":1492171270418,"flow_last_seen":1492171270418,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42589,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":97,"flow_packet_id":4,"flow_first_seen":1492171250302,"flow_last_seen":1492171253304,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::7a92:9cff:fe0f:a88e","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":84,"flow_packet_id":3,"flow_first_seen":1492171175912,"flow_last_seen":1492171268600,"flow_tot_l4_data_len":976,"flow_min_l4_data_len":32,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":84,"flow_packet_id":3,"flow_first_seen":1492171175912,"flow_last_seen":1492171268600,"flow_tot_l4_data_len":976,"flow_min_l4_data_len":32,"flow_max_l4_data_len":472,"flow_avg_l4_data_len":325,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"216.58.205.131","src_port":58143,"dst_port":443,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":83,"flow_packet_id":1,"flow_first_seen":1492171169377,"flow_last_seen":1492171169377,"flow_tot_l4_data_len":56,"flow_min_l4_data_len":56,"flow_max_l4_data_len":56,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"193.204.114.233","src_port":37578,"dst_port":123,"l4_proto":"udp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":114,"flow_packet_id":2,"flow_first_seen":1492171274388,"flow_last_seen":1492171274388,"flow_tot_l4_data_len":102,"flow_min_l4_data_len":51,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":51,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42856,"dst_port":53,"l4_proto":"udp"}
+0427{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":95,"flow_packet_id":1,"flow_first_seen":1492171211383,"flow_last_seen":1492171211383,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.108","dst_ip":"224.0.0.22","l4_proto":2}
+0427{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":94,"flow_packet_id":3,"flow_first_seen":1492171206877,"flow_last_seen":1492171210973,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"224.0.0.22","l4_proto":2}
+0427{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":93,"flow_packet_id":1,"flow_first_seen":1492171205448,"flow_last_seen":1492171205448,"flow_tot_l4_data_len":16,"flow_min_l4_data_len":16,"flow_max_l4_data_len":16,"flow_avg_l4_data_len":16,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.22","l4_proto":2}
+0426{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":92,"flow_packet_id":1,"flow_first_seen":1492171203806,"flow_last_seen":1492171203806,"flow_tot_l4_data_len":12,"flow_min_l4_data_len":12,"flow_max_l4_data_len":12,"flow_avg_l4_data_len":12,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.254","dst_ip":"224.0.0.1","l4_proto":2}
+0523{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":1492171271288,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":113,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":1492171271288,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.180.179","src_port":52020,"dst_port":80,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":102,"flow_packet_id":1,"flow_first_seen":1492171267430,"flow_last_seen":1492171267430,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":59567,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":110,"flow_packet_id":1,"flow_first_seen":1492171269548,"flow_last_seen":1492171269548,"flow_tot_l4_data_len":220,"flow_min_l4_data_len":220,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":220,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.100","dst_ip":"192.168.1.255","src_port":138,"dst_port":138,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":117,"flow_packet_id":1,"flow_first_seen":1492171291761,"flow_last_seen":1492171291761,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":53515,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":89,"flow_packet_id":1,"flow_first_seen":1492171177429,"flow_last_seen":1492171177429,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43317,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":98,"flow_packet_id":2,"flow_first_seen":1492171267294,"flow_last_seen":1492171269750,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":45366,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":96,"flow_packet_id":4,"flow_first_seen":1492171250302,"flow_last_seen":1492171253304,"flow_tot_l4_data_len":192,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1492171269192,"flow_last_seen":1492171269192,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0468{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":108,"flow_packet_id":1,"flow_first_seen":1492171269192,"flow_last_seen":1492171269192,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.147.171","src_port":58226,"dst_port":443,"l4_proto":"tcp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":75,"flow_packet_id":2,"flow_first_seen":1492171154216,"flow_last_seen":1492171171688,"flow_tot_l4_data_len":2440,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WeChat","category":"Chat"}}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":75,"flow_packet_id":2,"flow_first_seen":1492171154216,"flow_last_seen":1492171171688,"flow_tot_l4_data_len":2440,"flow_min_l4_data_len":1220,"flow_max_l4_data_len":1220,"flow_avg_l4_data_len":1220,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"203.205.151.162","src_port":54183,"dst_port":443,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":106,"flow_packet_id":2,"flow_first_seen":1492171268754,"flow_last_seen":1492171273759,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":43705,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":116,"flow_packet_id":2,"flow_first_seen":1492171290232,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":94,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":41759,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":88,"flow_packet_id":1,"flow_first_seen":1492171176772,"flow_last_seen":1492171176772,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":58165,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":109,"flow_packet_id":2,"flow_first_seen":1492171269383,"flow_last_seen":1492171269383,"flow_tot_l4_data_len":94,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44063,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":90,"flow_packet_id":2,"flow_first_seen":1492171178741,"flow_last_seen":1492171183746,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":56367,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":104,"flow_packet_id":2,"flow_first_seen":1492171268427,"flow_last_seen":1492171273433,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":42074,"dst_port":53,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":91,"flow_packet_id":1,"flow_first_seen":1492171184747,"flow_last_seen":1492171184747,"flow_tot_l4_data_len":48,"flow_min_l4_data_len":48,"flow_max_l4_data_len":48,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":33915,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":115,"flow_packet_id":1,"flow_first_seen":1492171274755,"flow_last_seen":1492171274755,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"192.168.1.254","src_port":44346,"dst_port":53,"l4_proto":"udp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1492171268472,"flow_last_seen":1492171268472,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":105,"flow_packet_id":1,"flow_first_seen":1492171268472,"flow_last_seen":1492171268472,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34981,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":100,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34996,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":1492171271288,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":112,"flow_packet_id":1,"flow_first_seen":1492171271288,"flow_last_seen":1492171271288,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":34999,"dst_port":80,"l4_proto":"tcp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0463{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":99,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.33","src_port":35000,"dst_port":80,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":76,"flow_packet_id":2,"flow_first_seen":1492171154792,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":76,"flow_packet_id":2,"flow_first_seen":1492171154792,"flow_last_seen":1492171290232,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"64.233.167.188","src_port":54205,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1492171267576,"flow_last_seen":1492171267576,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":103,"flow_packet_id":1,"flow_first_seen":1492171267576,"flow_last_seen":1492171267576,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39195,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1492171269128,"flow_last_seen":1492171269128,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":107,"flow_packet_id":1,"flow_first_seen":1492171269128,"flow_last_seen":1492171269128,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39207,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0464{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap","flow_id":101,"flow_packet_id":1,"flow_first_seen":1492171267294,"flow_last_seen":1492171267294,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.103","dst_ip":"95.101.34.34","src_port":39231,"dst_port":80,"l4_proto":"tcp"}
+0145{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wechat.pcap"}
diff --git a/tests/result/nDPId_weibo.pcap.txt b/tests/result/nDPId_weibo.pcap.txt
new file mode 100644
index 000000000..e27d18fec
--- /dev/null
+++ b/tests/result/nDPId_weibo.pcap.txt
@@ -0,0 +1,345 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1463089067804,"flow_last_seen":1463089067804,"flow_tot_l4_data_len":145,"flow_min_l4_data_len":145,"flow_max_l4_data_len":145,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp"}
+0550{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089067,"pkt_len":179,"pkt":"eJKcD6iOkDVu60UQCABFAAClAABAADMR2u3YOtIOwKgBaQG7wNEAkSEpAAl3y2T5ujTCSSEU5zJMPfXh7u\/a3oWq2yhhK1m4ny+qR4W2lfILr6Ils4h\/iqKUCkI0zipqePuQ8qDP3gfa2UEwOgxjQY6zEBJhdLLCAKezbAF+wpbNcZnrqI9Vp3iRS5CpzEuDxhuTRv5J009cEtkCA6nVS0D6WXhVs+S9\/EHIHeXl6YD1cbA=","pkt_caplen":179,"pkt_type":2048,"pkt_ipoffset":14}
+0785{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089067,"pkt_len":353,"pkt":"eJKcD6iOkDVu60UQCABFAAFTAABAADMR2j\/YOtIOwKgBaQG7wNEBPzHaAAoUu93Ovdfsj+VZ99cgMeSVKfCKokSNRuOMv1PGF2DIkukcXrUmGkv\/ArCiq\/KK23NXKqXH3z8FxKfa8OQtN5x73GaADweitAmqYsU072yu9KsRUtnFIEIB5Y5LqWVX6vqXepSvfYCEhodq+tUiz0aSzdffkeHhLztt20iOOpChbjrtXhyjh2xOYPCWGl\/75gN\/zEEb2R9h09zfr5IUCExPcV8JWIdoh2fXU4mq9qytwCU0GOdjsWy12v2HhTBnSYnXaFz8kW\/ToyswW6z6hT26xiqWB5RJW9cvGUU8G6jKCXTHHR5WczEJ7NLt9QErBQKutf8Nh4rVBXW1avPgj1A0tNYSKXAcYt1eYGsw4tjOzS7DHafUDgikSZ+H9BNuGGXb1gwh45909vW3665ubMpNt9lmWoI=","pkt_caplen":353,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089067,"pkt_len":85,"pkt":"kDVu60UQeJKcD6iOCABFAABHtklAAEARGALAqAFp2DrSDsDRAbsAM7beDDzb+3ozZeMBCkxEEj6TblVeBP78aEspYfuydCS19UAd5UCVpxpshuwHMA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0513{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089067,"pkt_len":151,"pkt":"kDVu60UQeJKcD6iOCABFAACJtkxAAEARF73AqAFp2DrSDsDRAbsAdbpVDDzb+3ozZeMBCzojeOlAMgvGNktyYcAUA7A\/3Svs2ToszWJa515eysxsBGt2GWJkyb0raTzXh1+QI2hgs8vbL9ZN+SRZ\/GOQxQ+J9bkhmb0JUaHBY3MAoon0eWS2MvshnVAsrdiQAr2Fjffaxw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+1200{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089067,"pkt_len":660,"pkt":"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","pkt_caplen":660,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089067,"pkt_len":77,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/AABAADMR21PYOtIOwKgBaQG7wNEAKwoHAAtqUHOnDVLSXvQSvF7LtrvJ4+Ut0\/+PPibILhcVRlQ0\/Cc=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0489{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089068,"pkt_len":133,"pkt":"eJKcD6iOkDVu60UQCABFAAB3AABAADMR2xvYOtIOwKgBaQG7wNEAY5h\/AAz3NgibEP+3fCH01gaXm\/ujoksOD8lVuFPVv4dTuDm1GQajh0JsK5hDx1wcIIslcR6FuJguYCUDV+hO960qSchu4lOGDy6g9QGt9CHdRWgSVC2cqVi1Gvnv6A==","pkt_caplen":133,"pkt_type":2048,"pkt_ipoffset":14}
+0610{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089068,"pkt_len":221,"pkt":"eJKcD6iOkDVu60UQCABFAADPAABAADMR2sPYOtIOwKgBaQG7wNEAu1cBAA1SPRGfkBIcRyXIBOFmOzx7xByjFzObStYT9JG3BdTcYyczLM6U\/yGJL1UOa9efX1YnjJOnzSQes+TW7tPCCmIWM5k2OHC\/X4h62\/gFcsaUMiZP99DIiBWpEzuVuyrC9ruL8hz5sxTLccSbyiADHsnAODMlyaW7YySfafX77mgaS4\/pAmpwE\/R73VLqa4x3u5DTBS1saCqD2G0cou9H3fDUBMN96cndkiXeH\/VLD\/DRoz0=","pkt_caplen":221,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089068,"pkt_len":85,"pkt":"kDVu60UQeJKcD6iOCABFAABHtn9AAEARF8zAqAFp2DrSDsDRAbsAM\/dlDDzb+3ozZeMBDb0E20MJqfc7ail3g\/1CveOoZw\/qFJDJZ3ZNxPAuDExJjg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1463089069330,"flow_last_seen":1463089069330,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089069,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0vWJAAEAGDMfAqAFp2DrWTuRwAbsLWGhZZbJo+oAQAO2GIAAAAQEICgBBBg58MNQL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089069,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA04pUAADMGNJTYOtZOwKgBaQG75HBlsmj6C1hoWoAQAV4BuwAAAQEICnwxg\/kAQNoT","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1463089070086,"flow_last_seen":1463089070086,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0hxpAAEAGQw\/AqAFp2DrWTuRxAbtN5WEdhI1WjIAQAO065AAAAQEICgBBBst8MNbL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0MLYAADMG5nPYOtZOwKgBaQG75HGEjVaMTeVhHoAQAV62dAAAAQEICnwxhr4AQNrV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1463089070755,"flow_last_seen":1463089070755,"flow_tot_l4_data_len":372,"flow_min_l4_data_len":372,"flow_max_l4_data_len":372,"flow_avg_l4_data_len":372,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp"}
+0858{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":406,"pkt":"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","pkt_caplen":406,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":71,"pkt":"kDVu60UQeJKcD6iOCABFAAA5MGRAAEARnSDAqAFp2DrS49GYAbsAJVKhDLva88\/LUhUgJfyz0FFMX+goev2cGp67zKdIwHY=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":303,"pkt":"kDVu60UQeJKcD6iOCABFAAEhMGVAAEARnDfAqAFp2DrS49GYAbsBDYkQDLva88\/LUhUgJkcz8vG4Z\/IO+VkPDhG6AFD7bU7A+qqkwZ+x\/RvFauDbIOOJtwCjXyUObeUIn5gQ+UX+x65qNOazAz\/4wVrPUNQeyvpM\/apVfaPKE\/BWwazlUXoAI5VQNixlUUJ1awnxsfIGiNrCTSIptZgAvLyXtwp5hhxDz3XyJujNKh8y4KxdXT+KUDUJOJJnUi42xAE7YEaRgCG0Gsvcv8KKqXj17ZhXhBURaPrZodsQJCbjs8pPzHSHwv2KhOv\/hmenV+Y+4AoEiGoPjQoanC+Mp48jh+wIc24blOr9i\/xboxYy\/SLPPtKSsAsklxNqe9J5gUDokozUo9KiuHi4kWMZ","pkt_caplen":303,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":67,"pkt":"kDVu60UQeJKcD6iOCABFAAA1MGZAAEARnSLAqAFp2DrS49GYAbsAIVjxDLva88\/LUhUgJwLsxjgxXNbPIqKq5C2ocA==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463089070757,"flow_last_seen":1463089070757,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp"}
+0398{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":69,"pkt":"kDVu60UQeJKcD6iOCABFAAA3JrZAAEARkEXAqAFpwKgBAdbMADUAI69dsmwBAAABAAAAAAAABXdlaWJvA2NvbQAAAQAB","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0633{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1463089070757,"flow_last_seen":1463089070757,"flow_tot_l4_data_len":35,"flow_min_l4_data_len":35,"flow_max_l4_data_len":35,"flow_avg_l4_data_len":35,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0411{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":77,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/48EAADYRM73YOtLjwKgBaQG70ZgAK5KmACJCWlXaapi9mYsktLXHPcOwMT6FVng4z3AZrMHlanNy2Oo=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA848MAADYRM77YOtLjwKgBaQG70ZgAKK3cACPs9\/Su8BV3z9mXpWI0v3VrqD9MgU\/H3zT1WUtzOd8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0452{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":106,"pkt":"eJKcD6iOkDVu60UQCABFAABc49MAADYRM47YOtLjwKgBaQG70ZgASG6ZACRpSAAaXQawU+oPS7uVCeQrGIL0yTGmks5EA52DAWmpkywr7fEQ4oz4qVaUQTicoPuWtiLawy9XMTDS6ewOQw==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0898{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":433,"pkt":"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","pkt_caplen":433,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":91,"pkt":"kDVu60UQeJKcD6iOCABFAABNMHBAAEARnQDAqAFp2DrS49GYAbsAObaFDLva88\/LUhUgKByMYFMjskIM1A8eJQ8V9Nd4rb6Cbk+lAN9qqqdkdRyQRocRp3Qz5A==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":85,"pkt":"eJKcD6iOkDVu60UQCABFAABHAABAAEARtuvAqAEBwKgBaQA11swAM884smyBgAABAAEAAAAABXdlaWJvA2NvbQAAAQABwAwAAQABAAAAJAAEcoZQog==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1463089070757,"flow_last_seen":1463089070841,"flow_tot_l4_data_len":86,"flow_min_l4_data_len":35,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"weibo.com","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"114.134.80.162"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1463089070841,"flow_last_seen":1463089070841,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8BZVAAEAGr+3AqAFpcoZQoubvAFC9RQISAAAAAKACchCiVgAAAgQFtAQCCAoAQQeHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1463089070841,"flow_last_seen":1463089070841,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089070,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA80EtAAEAG5TbAqAFpcoZQoubwAFDrBNfMAAAAAKACchCe2wAAAgQFtAQCCAoAQQeHAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1463089071008,"flow_last_seen":1463089071008,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp"}
+0406{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8ct5AAEAGQqTAqAFpcoZQoubxAFC2vHVvAAAAAKACchA1VgAAAgQFtAQCCAoAQQexAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1463089071046,"flow_last_seen":1463089071046,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0aeJAAEAGY8fAqAFp2DrSzolSAbv6shUXRZgnfoAQAcBJAQAAAQEICgBBB7tvXD+b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0QjAAADYG1XnYOtLOwKgBaQG7iVJFmCd++rIVGIAQCVwVnQAAAQEICm9c76IAQIN7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0BcYAACkGBsVyhlCiwKgBaQBQ5u8JOZF4vUUCE4ASOQhvgQAAAgQFqAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZZAAEAGsADAqAFpcoZQoubvAFC9RQITCTmReVAQAOXoagAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0977{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":500,"pkt":"kDVu60UQeJKcD6iOCABFAAHmBZdAAEAGrkHAqAFpcoZQoubvAFC9RQITCTmReVAYAOVVpAAAR0VUIC9sb2dpbi5waHA\/bGFuZz1lbi11cyBIVFRQLzEuMQ0KSG9zdDogd2VpYm8uY29tDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpBY2NlcHQ6IHRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LGltYWdlL3dlYnAsKi8qO3E9MC44DQpVcGdyYWRlLUluc2VjdXJlLVJlcXVlc3RzOiAxDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MC4wLjI2NjEuMTAyIFNhZmFyaS81MzcuMzYNClJlZmVyZXI6IGh0dHBzOi8vd3d3Lmdvb2dsZS5pdC8NCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZSwgc2RjaA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuOCxpdC1JVDtxPTAuNixpdDtxPTAuNCxydTtxPTAuMg0KDQo=","pkt_caplen":500,"pkt_type":2048,"pkt_ipoffset":14}
+0736{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":5,"flow_packet_id":4,"flow_first_seen":1463089070841,"flow_last_seen":1463089071196,"flow_tot_l4_data_len":558,"flow_min_l4_data_len":20,"flow_max_l4_data_len":466,"flow_avg_l4_data_len":139,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {"hostname":"weibo.com","url":"weibo.com\/login.php?lang=en-us","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0394{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0IcQAACoG6cZyhlCiwKgBaQBQ5vAZ6VqE6wTXzYASOQiSSgAAAgQFqAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAo0ExAAEAG5UnAqAFpcoZQoubwAFDrBNfNGelahVAQAOULNAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0BccAACoGBcRyhlCiwKgBaQBQ5vFPiVnutrx1cIASOQjz5AAAAgQFqAEBBAIBAwMH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoct9AAEAGQrfAqAFpcoZQoubxAFC2vHVwT4lZ71AQAOVszgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"eJKcD6iOkDVu60UQCABFAAAoBcgAACkGBs9yhlCiwKgBaQBQ5u8JOZF5vUUD0VAQAHvnFgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1232{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":689,"pkt":"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","pkt_caplen":689,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":5,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZhAAEAGr\/7AqAFpcoZQoubvAFC9RQPRCTmT9VAQAO\/kJgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":5,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoBZlAAEAGr\/3AqAFpcoZQoubvAFC9RQPRCTmT9VARAO\/kJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463089071551,"flow_last_seen":1463089071551,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp"}
+0406{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":73,"pkt":"kDVu60UQeJKcD6iOCABFAAA7Jz9AAEARj7jAqAFpwKgBARvsADUAJ8YJ26oBAAABAAAAAAAAA3d3dwV3ZWlibwNjb20AAAEAAQ==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1463089071551,"flow_last_seen":1463089071551,"flow_tot_l4_data_len":39,"flow_min_l4_data_len":39,"flow_max_l4_data_len":39,"flow_avg_l4_data_len":39,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"www.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0500{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":142,"pkt":"eJKcD6iOkDVu60UQCABFAACAAABAAEARtrLAqAEBwKgBaQA1G+wAbIVL26qBgAABAAMAAAAAA3d3dwV3ZWlibwNjb20AAAEAAcAMAAUAAQAAACUAGQN3d3cFd2VpYm8DY29tBWNkbmdjA25ldADAKwABAAEAAAAHAARdvIaJwCsAAQABAAAABwAEXbyGhw==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0671{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1463089071551,"flow_last_seen":1463089071612,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":39,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"www.weibo.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.137"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1463089071613,"flow_last_seen":1463089071613,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA84VFAAEAGsxPAqAFpXbyGicnyAFB0WekZAAAAAKACchD\/WQAAAgQFtAQCCAoAQQhIAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGnGVdvIaJwKgBaQBQyfKlqmMtdFnpGqAS\/\/8RHAAAAgQFqAQCCAr5u121AEEISAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA04VJAAEAGsxrAqAFpXbyGicnyAFB0WekapapjLoAQAOU+7wAAAQEICgBBCFD5u121","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0998{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":516,"pkt":"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","pkt_caplen":516,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":10,"flow_packet_id":4,"flow_first_seen":1463089071613,"flow_last_seen":1463089071642,"flow_tot_l4_data_len":594,"flow_min_l4_data_len":32,"flow_max_l4_data_len":482,"flow_avg_l4_data_len":148,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"www.weibo.com","url":"www.weibo.com\/login.php?lang=en-us","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0395{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0PuBAADgGXY1dvIaJwKgBaQBQyfKlqmMudFnq3IAQAqQ7UwAAAQEICvm7XdAAQQhQ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1463089071730,"flow_last_seen":1463089071730,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA08m9AAEAG2cLAqAFp2DrURZOqAbsjKGR2xs8noYAQA+RthAAAAQEICgBBCGYlk10U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0StsAADYGy1fYOtRFwKgBaQG7k6rGzyehIyhkd4AQAsDqzAAAAQEICiWUDPAAQNxk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":5,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":54,"pkt":"eJKcD6iOkDVu60UQCABFAAAoBcoAACkGBs1yhlCiwKgBaQBQ5u8JOZP1vUUD0lAQAHvkmQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1463089071994,"flow_last_seen":1463089071994,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089071,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA06TdAAEAGtMfAqAFpNuGj0p34AbsDr1KJWj28A4AQAWjCCQAAAQEICgBBCKgBIwBO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1463089072046,"flow_last_seen":1463089072046,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp"}
+0395{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0dEpAAEAGV+zAqAFp2DrUQYeLAbv4qaw1BowayYAQAO03NAAAAQEICgBBCLUlGFKF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0NhEAADYG4CXYOtRBwKgBaQG7h4sGjBrJ+KmsNoAQAV6y1gAAAQEICiUZAmMAQNzC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":71,"pkt":"eJKcD6iOkDVu60UQCABFAAA5PuJAADgGXYZdvIaJwKgBaQBQyfKlqmYfdFnq3IAYAqRjYwAAAQEICvm7X4IAQQhQZjJjDQo=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VRAAEAGswzAqAFpXbyGicnyAFB0WercpapjLrAQAOXu6QAAAQEICgBBCMj5u13QAQEFCqWqZh+lqmYk","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2356{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VVAAEAGswvAqAFpXbyGicnyAFB0WercpapjLrAQAPvpNwAAAQEICgBBCMj5u13QAQEFCqWqZh+lqmvA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1502,"pkt":"eJKcD6iOkDVu60UQCABFAAXQPuRAADgGV+1dvIaJwKgBaQBQyfKlqmvAdFnq3IAQAqSthQAAAQEICvm7X4IAQQhQgF8IhJXRoV0NqmFTeIkoS03jaZETpVuYYxiDyFX1oM7s+hh1pUzqcEJmCDNfYT52R0ZFMFYwbmZuhs43gUOcIUCigKZaYN6h2HhhHARgMwwvQIl3XfRGh4XO6swnsq2VEl0dNqMe\/Q8uQoQAAtC\/\/YZQoQeAtQvqgO0I69mhVtXmsXxeANqCg94Q69X+jdf7lz\/afTJ56pJQiVhghP3ShV1G\/R9dGkvuUIug7Zc\/7n\/nE4j2tn9xY+vmj\/oXvjP4\/m\/ytGguIB3CGJi+uZGM6sXClxr0cAp+x3OhyGouTlNAUtZTT6i1MKFyyvnlt25e2v7kb9tvn1frM\/jJx9sXL6C7V84N\/vLy4PLrg6sXvnL6ydNrTzz1+JlTXytUa5XGYfRFHHIIAlEPu2AXK3mgZjnraJobVTSRoncE\/8iyD9KSo2kWTa3c58awFTYqa6lnGWhk9GFcSZ19Jk4H1jpU3KlSG3tWbHghPyYdLsiTjFYgtKfMt3HvmAurvtwhtN3hxyr1sr+5LAlN9K7BNCZRgVYh0pZ1mhoU1BQJit6xDalTzLo\/nBLQTTBCFW1159pHg4s\/7t86F+2DfPCbwYWPtt+79s9zVwYX39u6cQ5+\/3nulyslfw+wGu2xhQUJtf18FynrT8ub9Lf6WB\/MxIJEsvVMtHfpOtF8QBgEqhB5Mp2AJQ8mO4mSM3vJXYBJ54IiD2PJ9ta0oTOYxTWL0QnF11ZPicqIuuDboKl7ty5NN2wp+xWAVMGEhHcT+2juiL3d3wolIGShaU4iKFKJiO8fEIiivb0CeFaNZc\/zllY4mnEOhZ3sXhptmzIBUhseipJlDXoqBlKXwWLtfPqzwYdXB1cuKl2+d+vXQ36Bx8n\/WHQi3HkRqE2J0bYb+tGj6Hd8BNDAB\/q6j570uo8oDzXD+KY4rCgrk9gKGGPmADx4Fgb8TJL6Z5AflT6HiI0HC6Nl8kFXZOQZE+Jkf5Ar9m6B9G1OtT5zykbISCDaTfU1TFSdzSTs1PVDrqJl0Br50fLMkE0l9bKcDLEkyGocox02LaGHoqSGHLxpE7ctXVL1CJiakHsgWb5NONTxWq0RfYpoEjTTPAVxv136iicPCFLWSWTrpuf3hhvjU+EQUa5BXYtsQvdq53R+2jmrgUvIBXx3gQKnxSFKlEs05wrNsCbpTqYuRHUpex0Uddd2Q3zq7JKIV6dI4pjNIi5YO91nXW31q1FLu9nt+zHNO3d+3H\/1d3f\/dGnn2nmgvfOaZ6CotNVLaP2YdiNJ5VL4qCqSs01ff4yQ58qtH+GPeBi46nxjWZvZgxvc1c0OdiE+GXWbGk1OidgNtsB1dcR+SoCG3uSELD41dMszLtmba3G1pPzuakQamaIbSW68oJlG5QT2ITDD+eIdy3903piNXTJ5JOu1aVZ3enSA450IaDPaxNqLDKgdvCH\/L5dHgcFSeW4JScir3OTTJgIYLT8+RWJ7a2+cKVMzp1QAbrP9izvzKjAwHN0K3XwNlv45hQdzd1PefaldXgZEagP6KI7YVEDE8TXQE0Fyx7Rx2H5ATBUBx\/t5MNyUIp6RrSCR8Z\/Rxkgt+t99d3DufP\/aa1K\/Mny2MOHoG4WzBKIOCMWQkqk8ZRvX8UjnFAxZ0Ce1bWkGm\/AZOHspoXuTODFARUxn2D1NxSRChaUEJI4RMvU\/NhniYDOmZ834KB0I\/ymbiNe13mnrwGJcZPFgUa7xchfg9bpFzyfugcWhELNoPROCTIFDtz1eils4Do0GvaYssTDqevEL8fvY\/pkQ+ZgQxTIv9xeVSE3bXJTTFDweZuR3R1xnqCGPydHFLGy3ABbwtrFBbNQS9x1GwYPO8AZhHHOSkNaWLTatRHGQR3E7oKmd9NxFjswOMdcRbYnbBAzBH0bqqAQJuQxBN4pjWjO8kTJ\/fYU=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VZAAEAGswrAqAFpXbyGicnyAFB0WercpapjLrAQARHjgQAAAQEICgBBCMz5u13QAQEFCqWqZh+lqnFc","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":68,"pkt":"eJKcD6iOkDVu60UQCABFAAA2PuZAADgGXYVdvIaJwKgBaQBQyfKlqnVQdFnq3IAYAqQaawAAAQEICvm7X4IAQQhQDQo=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":86,"pkt":"kDVu60UQeJKcD6iOCABFAABI4VdAAEAGswHAqAFpXbyGicnyAFB0WercpapjLtAQARGNeQAAAQEICgBBCMz5u13QAQEFEqWqdVClqnVSpapmH6WqcVw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+1772{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1078,"pkt":"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","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABA4VhAAEAGswjAqAFpXbyGicnyAFB0WercpapjLrAQASHfewAAAQEICgBBCMz5u13QAQEFCqWqZh+lqnVS","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0XohAABsGZHc24aPSwKgBaQG7nfhaPbwDA69SioAQAIjCywAAAQEICgEjLGEAQNyy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0603{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":214,"pkt":"kDVu60UQeJKcD6iOCABFAADIMHRAAEARnIHAqAFp2DrS49GYAbsAtDaTDLva88\/LUhUgKY+xs7iw1orb+tz+ka2qzr+koIZvGx7rYDrJ\/f4nIFHp7KM+XDOVT1fclkN+Zp\/5AMzmN\/fI22iaVxZ2wbCTl2vpMzdsvLIl83sNvYI5OEEIczI7gAwFedn01M9rq6EccbITTNm\/9KsOndQbng2W\/c9Bdl7Gljb29KN8um0bfsJkmyoG7BO106c4KGdE5pfHR4Jnrg5AA8c112H29gMhWJXEGQ==","pkt_caplen":214,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":67,"pkt":"kDVu60UQeJKcD6iOCABFAAA1MHVAAEARnRPAqAFp2DrS49GYAbsAIZe6DLva88\/LUhUgKtrdfYOrYAZFD+Sy5gLiLg==","pkt_caplen":67,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":77,"pkt":"eJKcD6iOkDVu60UQCABFAAA\/6AMAADYRL3vYOtLjwKgBaQG70ZgAK+PGACavMB4N4yIzGWdh1rywnHHD9GKrlEvcs81E5Fg8mOE1i4w=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":106,"pkt":"eJKcD6iOkDVu60UQCABFAABc6BsAADYRL0bYOtLjwKgBaQG70ZgASC1QACePx5VdQS6UanRpiyRb1SqZ2LsHNLKT3NzM\/1qa6Zqxx+hvKc+dxBqAnZG\/ow4Wk7CxE52Q+sn1tchPYliq\/w==","pkt_caplen":106,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1463089072333,"flow_last_seen":1463089072333,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":75,"pkt":"kDVu60UQeJKcD6iOCABFAAA9J7BAAEARj0XAqAFpwKgBAdEnADUAKd+0rc0BAAABAAAAAAAAA2ltZwF0BnNpbmFqcwJjbgAAAQAB","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1463089072333,"flow_last_seen":1463089072333,"flow_tot_l4_data_len":41,"flow_min_l4_data_len":41,"flow_max_l4_data_len":41,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"img.t.sinajs.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0423{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":82,"pkt":"kDVu60UQeJKcD6iOCABFAABEMHtAAEARnP7AqAFp2DrS49GYAbsAMK62DLva88\/LUhUgK1nsvLxTwI61hx7I4ZYbNy\/FHeh1pRHmWfG2sK\/0yA==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":191,"pkt":"eJKcD6iOkDVu60UQCABFAACxAABAAEARtoHAqAEBwKgBaQA10ScAnYbirc2BgAABAAUAAAAAA2ltZwF0BnNpbmFqcwJjbgAAAQABwAwABQABAAAAAAAHBHdjZG7AEsAtAAUAAQAAACoAFQZzaW5hanMFY3NnbGIFdHhjZG7AGcBAAAUAAQAABBMAFAhuNGNzd2hrMwVnY2NkbgNuZXQAwGEAAQABAAAABAAEXbyG9sBhAAEAAQAAAAQABF28hvE=","pkt_caplen":191,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1463089072333,"flow_last_seen":1463089072444,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":41,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"img.t.sinajs.cn","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.246"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":1463089072445,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8AXdAAEAGkoHAqAFpXbyG9ovbAFCLeghvAAAAAKACchAFvgAAAgQFtAQCCAoAQQkYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":1463089072445,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8fClAAEAGF8\/AqAFpXbyG9ovcAFB8ZHUxAAAAAKACchCoEAAAAgQFtAQCCAoAQQkYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1463089072445,"flow_last_seen":1463089072445,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8mn5AAEAG+XnAqAFpXbyG9ovdAFDX1pNmAAAAAKACchAuaAAAAgQFtAQCCAoAQQkYAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9tGfim0i3oIcKAS\/\/\/69gAAAgQFqAQCCAoDdgkqAEEJGAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXhAAEAGkojAqAFpXbyG9ovbAFCLeghwRn4ptYAQAOUoywAAAQEICgBBCR8Ddgkq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9zPRoUNfGR1MqAS\/\/+5JgAAAgQFqAQCCAoDdgkrAEEJGAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fCpAAEAGF9bAqAFpXbyG9ovcAFB8ZHUyz0aFDoAQAOXm+gAAAQEICgBBCR8Ddgkr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi90SpJVX19aTZ6AS\/\/\/r1QAAAgQFqAQCCAoDdgksAEEJGAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0mn9AAEAG+YDAqAFpXbyG9ovdAFDX1pNnEqSVWIAQAOUZqgAAAQEICgBBCR8Ddgks","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0958{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":486,"pkt":"kDVu60UQeJKcD6iOCABFAAHYAXlAAEAGkOPAqAFpXbyG9ovbAFCLeghwRn4ptYAYAOWFQQAAAQEICgBBCR8DdgkqR0VUIC90Ni9zdHlsZS9jc3MvbW9kdWxlL2Jhc2UvZnJhbWUuY3NzP3ZlcnNpb249MjAxNjA1MTMwNTM3IEhUVFAvMS4xDQpIb3N0OiBpbWcudC5zaW5hanMuY24NCkNvbm5lY3Rpb246IGtlZXAtYWxpdmUNCkFjY2VwdDogdGV4dC9jc3MsKi8qO3E9MC4xDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MC4wLjI2NjEuMTAyIFNhZmFyaS81MzcuMzYNClJlZmVyZXI6IGh0dHA6Ly93d3cud2VpYm8uY29tL2xvZ2luLnBocD9sYW5nPWVuLXVzDQpBY2NlcHQtRW5jb2Rpbmc6IGd6aXAsIGRlZmxhdGUsIHNkY2gNCkFjY2VwdC1MYW5ndWFnZTogZW4tVVMsZW47cT0wLjgsaXQtSVQ7cT0wLjYsaXQ7cT0wLjQscnU7cT0wLjINCg0K","pkt_caplen":486,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":15,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072471,"flow_tot_l4_data_len":564,"flow_min_l4_data_len":32,"flow_max_l4_data_len":452,"flow_avg_l4_data_len":141,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/css\/module\/base\/frame.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0974{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":498,"pkt":"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","pkt_caplen":498,"pkt_type":2048,"pkt_ipoffset":14}
+0824{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072472,"flow_tot_l4_data_len":576,"flow_min_l4_data_len":32,"flow_max_l4_data_len":464,"flow_avg_l4_data_len":144,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/css\/module\/combination\/comb_login.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0947{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":476,"pkt":"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","pkt_caplen":476,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":17,"flow_packet_id":4,"flow_first_seen":1463089072445,"flow_last_seen":1463089072472,"flow_tot_l4_data_len":554,"flow_min_l4_data_len":32,"flow_max_l4_data_len":442,"flow_avg_l4_data_len":138,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/skin\/default\/skin.css?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0396{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0IPZAADgGewpdvIb2wKgBaQBQi9tGfim1i3oKFIAQAqQlTAAAAQEICgN2CUYAQQkf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0jEpAADgGD7ZdvIb2wKgBaQBQi9zPRoUOfGR24oAQAqTjbgAAAQEICgN2CUgAQQkf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0nB1AADgG\/+JdvIb2wKgBaQBQi90SpJVY19aVAYAQAqQWNAAAAQEICgN2CUkAQQkf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1083{"flow_id":17,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":577,"pkt":"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","pkt_caplen":577,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0moFAAEAG+X7AqAFpXbyG9ovdAFDX1pUBEqSXV4AQAO0UjwAAAQEICgBBCWwDdgpZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1713{"flow_id":17,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1026,"pkt":"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","pkt_caplen":1026,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":17,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0moJAAEAG+X3AqAFpXbyG9ovdAFDX1pUBEqSbF4AQAPwQvgAAAQEICgBBCW4DdgpZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1086{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":580,"pkt":"eJKcD6iOkDVu60UQCABFAAI2jEtAADgGDbNdvIb2wKgBaQBQi9zPRoUOfGR24oAYAqRDYQAAAQEICgN2ClwAQQkfSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDEyIE1heSAyMDE2IDIxOjM3OjUyIEdNVA0KU2VydmVyOiBQV1MvOC4xLjM2DQpYLVB4OiBtcyBoMC1zNjUucDEtbXhwICggaDAtczU5LnAxLW14cCksIG1zIGgwLXM1OS5wMS1teHAgKCBoMC1zMTgzMi5wMjEtbnJ0KSwgaHQgaDAtczE4MzIucDIxLW5ydC5jZG5ncC5uZXQNCkVUYWc6ICI1NzMxZTI2Ni1iMTYxIg0KQ2FjaGUtQ29udHJvbDogbWF4LWFnZT0xMjk2MDAwDQpFeHBpcmVzOiBGcmksIDI3IE1heSAyMDE2IDIxOjM3OjA0IEdNVA0KQWdlOiA0OA0KQ29udGVudC1MZW5ndGg6IDkwMTkNCkNvbnRlbnQtVHlwZTogdGV4dC9jc3MNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KUHgtVW5jb21wcmVzcy1PcmlnaW46IDQ1NDA5DQpMYXN0LU1vZGlmaWVkOiBUdWUsIDEwIE1heSAyMDE2IDEzOjMwOjE0IEdNVA0KQWNjZXNzLUNvbnRyb2wtQWxsb3ctT3JpZ2luOiAqDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQoNCg==","pkt_caplen":580,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fCxAAEAGF9TAqAFpXbyG9ovcAFB8ZHbiz0aHEIAQAO3hwAAAAQEICgBBCW4Ddgpc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2364{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":157,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1502,"pkt":"eJKcD6iOkDVu60UQCABFAAXQjExAADgGChhdvIb2wKgBaQBQi9zPRocQfGR24oAQAqTl6AAAAQEICgN2ClwAQQkfH4sIAAAAAAAAAN09y44jyXFn+yvSu1hjptHk1INkk2wIFlbCAjZkw5BkLAwIKBTJYrM0RRZFVj9miT4Lvvlo2PBRV3+AYfhvJB\/9C853RWRGVhV7xoJh9Wq6WcyMjIyMjIxXRo2\/zw51VT+UB3Zhx\/pcNmV9WJ6KKm\/Kp+Ke7YryYdcsJ9Po+HLPVvn648Opfjxslo+n6t1X4\/EH9V+5zx+K8wf+3XOz+yDhfVg9GNDx+NfHh7+I00k6SeIonU\/S+eKr94wd6tGpOBZ5w9bFoSlOLIJDjM7lD8VyXT8Vp3v2OraILlfFtj4VAN18da6rx4aju6qbpt4vE4ntSaLOYe7zE+83Up\/Vd2sO67T8ehGJH\/GRj39oluyr3\/\/Lf\/7XP\/z2D\/\/6uz\/8+z\/+93\/884+\/q+vz48tX9+x5VzbF6HzM18XyUD+f8uM92\/JuCs14IqACLNl4U2yzM\/87P9zCx+VhW2e7It\/w+Y5\/c1rXmyJrOIJFg5p9n8k\/MtXCtCSbcGrs2fjxXJwO+b4QIxwfm0xg2NH8mJ\/Pz\/VpM7T5rj6EQa+PonF9aztt6udDVecCOidttq73e\/5rdetMK3tK2Hj10EsfOfoF8oZkuCXr58Lz8cTXTY06Ph4INkQ8p\/hxaTnTWdPnctPs5PwvmquWEcsfm5rzh\/hquVDshTr9ImtemuRieG69XuMGuW6x3Alet+2+++471C6TWyFmBB2+wGakhjI77erN4oFKPhfryWCsk6ux\/nuO00P2h3\/63e\/\/7bcE7unn4j4djHt6Ne5\/VZzPxS85\/ghxsXtPxYPeRlxS5ptNeXiQso9FLJl5PNoiIjbyRXNzrLjZHALDzoCqXuVVdsifPnz\/rYSWrcTGUzP+8b7YlDmrD9Undl6fioKz\/2HD3o2ei9XHshntuZzeFE\/luhgdy5eiGp34QVQvk\/e3TP3P77mvf3hLtzrY6UMc7hYc6NJFzYHsQ1Bu9JJY4rlHI5PLw9SysNfAeu7z8nBB31XFtlnVL+R5L7hwW9XPy1252RQHI9ZmiBHSyBdy7WlnJWOcppLdIo5oKjooWOndBMKaYKYaWaQioQ40xUszKg8byf2jBf9fsXdG1tNh4\/Oufs7K\/QOpGTT1UagCdn7MTLBjTh5kJqEPJYn89W2A0GZLcuJMfThqiOTOB1pzBaRsPnXNUaAtfus9HEXfWPDqA9jCX0eRoIoCumTReMK1mrLiytgyr467\/J3+6keT6P09k3vNNJZtRx93zb4aYQCvgfOcJESoMRs3+crw0ggpdpp2IzHfOJb8wzWZ4mRa8UeM06TcMHXYom9HSraeHlb5uySa3Jr\/j6fve5Bh+YVx3uHqgaDwvYPaKG4XbiqpjHBKLU7NKT9wNfLEWfoe6QSS1\/OqfDgstUKMNEwptKvyUIwsr4gnRnJKsIq4emg2Ts5s\/bgq16NV8UNZnN7x1Ulv+Rqld7cs5v+ZJX1j3zd26yHyeP3IOSVEva+3+d0mXd+HtKQuBbtr0yjjYKQ2o1rFSdfh18qpkfiKjeJFaDmIThSdkinnQfnfgliXNwH53P4D6ZoJ+XgZQJyh8LhsLgLw5hJekvrwoMFCShqx0szIR\/FHsLtGrirPjSuB4u6BoYnU6l1TcQ4aiQDEExIFmuNP+aZ8PC8Th92C7N5vBZoTK5nNQzwspCgbzec9c6OMRpLUvQOO0sWwEV27843DzQcOZyco5W92PD8HhUYsl0gyUzoDPoV5JH4G8oj4Rn6yfKYAToAWoHhdM8+B00N8eBmddzk3s\/WDjsH254e\/5NwcGCkG+sbcd2JgUFx5KrefBkBa9EF6Lsps83gYACqe3w3ESkgQCs6ArqdieyrOuw4HiEW4qluhIN0+PZJEeAfUA1eUcJZ0jTa6o\/hmvSvWH4XWfqMPJBanPZMDALg=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC1AAEAGF9PAqAFpXbyG9ovcAFB8ZHbiz0aMrIAQAQPcDgAAAQEICgBBCW4Ddgpc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+4295{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":2938,"pkt":"eJKcD6iOkDVu60UQCABFAAtsjE1AADgGBHtdvIb2wKgBaQBQi9zPRoysfGR24oAQAqSyIgAAAQEICgN2ClwAQQkfkDk4HNbTmZuPXPoB4xELwP8VhatudnzP6Q9N2RjBNfdUn9i3YFFn8EFL8YBhE98l4JAnvHgI7C+yrfBnYTVQb\/tiutluchLN5dJoBZLXR8cqXxe7utoAb4+WGuSKCE8aX4H2PLmLjGGl9BWylzpSu4wPqUCHd9cA16NpovX\/zPHluc34HnusaDUM8uYMbv8p1ML0J6ApG0V5wAwCGkUcSZWCsuBoONAKJNEz1lBMa+f6azaO36CeX9P5rf0G0ED5KhUlrEF4z2425Zlz96euU8nnmQv7Qdr4L4Ji0DhN0xQZp\/OAcTonjNM5ZZzOe3AyDGrwSTrsDLcvP8mkbNCcLPbWJCxl8YjydyaUTtS\/4\/wy\/ZvySHWcDdonq+aQCQX9Yt0Pc8\/I7FOZgHohwK3szkgdbWz59XZbbItJKzFXd+k0IPJo2MZD7gCdbabXQMk4k+arqiuYEuqi2d7BIOU\/U1f\/60BI\/c0BG\/h5K9ojR5t1HQAIrI67kG6Jk3b4AFE6g6Jq5ujKOvLBQOgjM7u5PEiWWFX1+qNrxYn4TpPXq7ym5WvERlPC+BPdfvObgEieSokc6taU+eFT2S3NQ33TWRTq2D3o44H\/2gf6Jt2DrvJy8xjqiobdlE\/jb63S9222Lw8lp3p79I+0u+K1bfa3P\/lpdizXQs3JVrJXeTgUJ2yBzqSuOaQP9KOa9dcLrxlTWVGWj6QC5apX144Fz1RqgFdElkPdFGcQgeOKEHQMLtXug4Iye0ouluiM1oRY7MhM44UjgImwJdBjGDYN2ShWCClXwyhRGqyaHktm0AHO0jvX1gdWsmIsrVc8ledyVVbyLLN0VsdOdirW1ATNCjK9hEpQMCUpND4pdEAzJRjAWcLm4IGSKlxbsnqnGZ2Bv0U48zJo6MgfGp4+GBs9+AQYINpbwoSDUEYb1G907rQ+w1aYMmW9K5HNG2y39+5k8tOJ8yYfJ+N6TnitgRsgWXim0ciOoFAIDsKH0B31JhjkL1OBcVLstnxDsq9WialZ6bXBqq35aLaY4G9JRBlN1OT0\/FWKstbhBpV85qnyndvNOuTYBfKmlLx9PUwE3l1tp0umDnexs+FOk39XQptVMUFqLGz\/eF932D2SFpoUSrRb+qM4GdN+kIBK14HRH127Dk6\/Q6v2+hDa9Mxq04ERerVor9\/V2jNiAJvlolmS0wAlg7AFEa+a9XJ9mzxj\/soEKdDmSR2+J\/ooXYkPdCEkr\/LH48QoFzPVnm+JplznlX7I50AOi\/J8LrTiSAr9NAlMREIs6zMHRwk4NppEyms9xcvrQMgPm1NdbsJQlAImfZ9BIJplQjCm6piWO\/Q1JCMcb47QSLCkNaKVTe+ke2c6187Fr399zs7Np6rI1udztq83j\/xPlWxiPIsmSqWOjT8d\/\/QXP5FrH9YIJSPe\/FAL9x2fOOywRxlOkm1H8VzSBzaTGp3XMp55DR8rxYduxHROa45EVzGYhkGzFjSANC0UP18Hni93U+y16OkfSdtVUE6rD1oeiLjPVLnqRIZGz9Byfo7KjeZCpCD2wVQJa9uSm\/iZzlvwF7KDCmzMVfdLeKKkdCBhN5yIHz2TIoNJClDzMzlKEJb83ZRNVVy81Ev5+Vn1XdXVxg3Pp86sY58tpWQdKQGdoWdaRlG9W87UgjUGglUFIdwNQXTuWCi+e7enfF8IAgxAf+FjHw8D5M5knrozWVwHh5rU1OW+5PqJUJ1d5GcRjXxnXwrhtIt44fGvI95AXBTxyNOAbyuZQZiB\/WJPBWaPBT68POx1Nzbe1XxH1XyPWx1mJENa\/EyTh89rV5eqZO15MldnlpllR58j72UOHhFsHQlJtlydivzjSHzuBTBu6iavmHF7yZZSAwj2yoCSpieoInevrKtXlQvrgYQyRVQCUIqXo8gUHKvf2APjB4de\/Y7AKLQreEcfZV19hc2KLMoYbAnhJzMhJInYjXk+h48DmofKUxSD7zWvXaD+ofmMoyGme2HQT8NJJgWk1TtAS06dC3WQt1tQtDzFsh04N9qvEvCVzMG60Zk8i\/ECtktBuzQdp\/C7CfgumX7joJh7JxiaXIxMZKW++WYEBjnmimQAqpF7coXWj6czt5mOdUkBUaQOaA8JWPk7mIsiBzD8AZwX8rFc+KWM6\/rD48M6CTJLk68yxA2upiokYlFs5A5a56cNUihhzFm4AI\/5Q8FsF+EtBb2WYruO1ruy2ngA7F7TY2XC8gsMo1tlm6LJy+riuDyktyPS\/3itXdDC\/W17RKB58+nID4H6JYOxaQZ3tk47HqvfGc7YdQOnYEOPEiktbqzVH4XgCWRlQJsZhp\/EXojAzF5JzVmIp6FCZvcrNSRnT35M7YvDo47Mn8BgwoBIEktXruhezG6GD9lY\/gt8xshX5TaujyBjQ5PJ+d4LX03m2KFMS1+\/P0dNmZ2blgnNRSTZxXCVH\/BGys5ULmIG5ST0U0h5k0IUp3BeUoO4YO0aiSXV10uKQJta5WwHD2g5hnDdXzwrQHCH2lP6WNZWhQqGVFVdiztR5rH2iIptcSwDX\/Az+NYBdH7OZIDbkkT4fxPFny5GTLstNIA8gEoexCV3kLkwLQ\/FtwCy3v7MFS0msQRNLZ75tBvJljfuU7EvM\/chFOvq\/EmcYfggZpZ\/DVgnNTapS6Y954OqQPNRf2RyD1mXPjaJsVvX7D0h4S7O8RjBL10n31IrZQIxsxdMhspwKinw+UN2Nqqa5Am2QN+Z\/co\/gOGV3wVgqZqqdL36UaZDdbm20unMWZKY3GZYLwPnLjpy9TOYIm62phBO7Q0Cu\/KB5cSBaT4PibkaS+cTuo57JzPVZhtGbYxF\/pZZXdGt\/BnH0\/ecM85FE6Ie07l+RvlXFvO8VdQSFVfSuY4RkegIHNjyQWgkf30lL0GzDETIzb2kX0XqqPrVrf69uHTPxCyIWESk3M8J2SwX6RVizI+bG+MdbjMWYYsC5AgAfp62nBrw0PoQVogSFMMQXQmarjyKmj5SoTihr+f4a7M1A9vIDi7CmY4IBZJFNWC5c8KyJHKbGA3nFvXTaRzmSxfMpA0NloddcSob76ovoX3rY+l4ysszV\/BWt\/1N7ByXVvDdIFSmXYvkwBY5nqzYX3yxKJn+xk9M9A6UqTczSyqMeCiHIpnK7HwfjkKxtHdhrYh09DGhGu+4KVspNV\/96Wdvko1bG0NLTk4pQsaKp1DOdsJi4jYKfXHJ8zj2AJKWecv4SpyFI4Lf2NvskXPIj+6Q4RHE2hsS7bUeAMgLEciAHynXq75vNhyg5FKjjxurRcGyfog4dVQBp6Ua7fGwBnzCHrlenQVzoUZKXNK85EByXRGtNRcjfvW6BSxxqIqgy38wm1qiSXCseo50A7SZkxA9qnKsM+ZAQNsoIRl4ZmLcJBTJTLfBb9i6bIxD3t8Obg\/NkgQ+Yds2NudnK6BoTAjo3TPr43LDjYkxrtsTxsLankReGO3ZC\/GHp\/patnIOgLTrAAhCb\/eX0irU1tJalx1BbuGEUqTFCEgF72H3zz0mgnDlmWZpRSzQjX12brhcXg+B51JH5dDfwEeRVkWMEzcj5L+xzcNpaMBhZLUkBTGT6ibS6CKGVEaZWqP6znBf5oOBpsAUHQ5dTuUucRjo+0Wcymgq2Fs2M655f8L7o8he\/56OZVtCqwGE01FOIXd8IN0Oj8jprK8gEyeK9WWTXeQ55NPVbRU8Y6yb3O\/TebpMO0+Xwa5eJMq8CYq9pHQiQuJ76DoaNvQ93ACVOqKkkHVGkESQfPnY1OvHYFKAucaLeNQ5ghPslxVQhZP5fMGOT9RCuZxlIDrLbwNfrNqk+sgN\/aR45+Ezig==","pkt_caplen":2938,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC5AAEAGF9LAqAFpXbyG9ovcAFB8ZHbiz0aX5IAQATDQpQAAAQEICgBBCXIDdgpc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0fC9AAEAGF9HAqAFpXbyG9ovcAFB8ZHbiz0adgIAQAUfK7gAAAQEICgBBCXYDdgpc","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1777{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1078,"pkt":"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","pkt_caplen":1078,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABAfDBAAEAGF8TAqAFpXbyG9ovcAFB8ZHbiz0adgLAQAV2sBgAAAQEICgBBCXYDdgpcAQEFCs9GoxzPRqcQ","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1086{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":581,"pkt":"eJKcD6iOkDVu60UQCABFAAI3IPdAADgGeQZdvIb2wKgBaQBQi9tGfim1i3oKFIAYAqTAnQAAAQEICgN2Cl8AQQkfSFRUUC8xLjEgMjAwIE9LDQpEYXRlOiBUaHUsIDEyIE1heSAyMDE2IDIxOjM3OjUyIEdNVA0KU2VydmVyOiBQV1MvOC4xLjM2DQpYLVB4OiBtcyBoMC1zNjUucDEtbXhwICggaDAtczgxLnAxLW14cCksIG1zIGgwLXM4MS5wMS1teHAgKCBoMC1zMTA5LnAyMS1ucnQpLCBodCBoMC1zMTA5LnAyMS1ucnQuY2RuZ3AubmV0DQpFVGFnOiAiNTczMzAyNmUtMmY3ZTgiDQpDYWNoZS1Db250cm9sOiBtYXgtYWdlPTEyOTYwMDANCkV4cGlyZXM6IEZyaSwgMjcgTWF5IDIwMTYgMjE6Mzc6MDQgR01UDQpBZ2U6IDQ4DQpDb250ZW50LUxlbmd0aDogMzI3NDENCkNvbnRlbnQtVHlwZTogdGV4dC9jc3MNCkNvbnRlbnQtRW5jb2Rpbmc6IGd6aXANClZhcnk6IEFjY2VwdC1FbmNvZGluZw0KUHgtVW5jb21wcmVzcy1PcmlnaW46IDE5NDUzNg0KTGFzdC1Nb2RpZmllZDogV2VkLCAxMSBNYXkgMjAxNiAwOTo1OToxMCBHTVQNCkFjY2Vzcy1Db250cm9sLUFsbG93LU9yaWdpbjogKg0KQ29ubmVjdGlvbjoga2VlcC1hbGl2ZQ0KDQo=","pkt_caplen":581,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXpAAEAGkobAqAFpXbyG9ovbAFCLegoURn4ruIAQAO0jgwAAAQEICgBBCYMDdgpf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2372{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXtAAEAGkoXAqAFpXbyG9ovbAFCLegoURn4xVIAQAQMdzwAAAQEICgBBCYUDdgpf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+6225{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":4374,"pkt":"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","pkt_caplen":4374,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AXxAAEAGkoTAqAFpXbyG9ovbAFCLegoURn5CKIAQAUcMtgAAAQEICgBBCYYDdgpf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1463089072885,"flow_last_seen":1463089072885,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp"}
+0409{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8J\/lAAEARjv3AqAFpwKgBAaGIADUAKAcnK+gBAAABAAAAAAAAAmpzAXQGc2luYWpzAmNuAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1463089072885,"flow_last_seen":1463089072885,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"js.t.sinajs.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+2356{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AX1AAEAGkoPAqAFpXbyG9ovbAFCLegoURn5HxIAQAV0HAAAAAQEICgBBCYoDdgpf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+6227{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":4374,"pkt":"eJKcD6iOkDVu60UQCABFABEIIP1AADgGai9dvIb2wKgBaQBQi9tGfkfEi3oKFIAQAqS3vgAAAQEICgN2Cl8AQQkfsg6teVQ9vvI7HfFbyDHgkf25XOd4923Arwp9eXyg4piuWM2qjooFXXFTbLJZtOKErLiZ8jvzZEV+HQOXN\/R4hsQZgNkduquaMIHARVrkWZYWs1k+4+G7LwL2WG9ZXbYsgNoq9jcBUfYBeadj7MsDgy5ksYKbjOZnwf\/liUneLc8uXclTKH7RlCzb9C3Zs1j8qs\/051TledMD+RXUlDmr1Lv7Q9O+fScyr9wlL4MaGvA+6as0TV65ZcDy\/ARglO3H0I0hHl6CC2\/mVVlfANSR8A7A\/54P7nwQo\/zaZEYThRf8+skSZZMbJgyH82tg8PwbzSMfqi\/iPCIbGiVy3qTfEVn75BVfb9NN9ciTVfFjX+FS46kqx9rh3BVoBB8HxC0kiWqDLAQbaELgmy70iQIAMA01DjICb1N\/pBZo5HeWR+vQ0T2ggsl4JgRHqUigUP\/1wQoSnqIJa232atngFb\/ygdYbTUDfeq1NIuXpoM0nZ73VPFUbkahpYIv\/CMr\/aCv86NT4sTPGTuWGMsD07z9dqjMXSz84EH8wIWiwk0WOIUJMAxtK6fxIn71+iy5FK8lt6LNLJt7\/gLfEWnOfSZJaekWbBQAE3UJYSjPQs0PJqCcHgBbDEAWNCGBHJlpDNiD3SFtxYZr8LVhfPwjXpn5oazapq8NGP59bxrSmZNOaWudPasMsH2Vwo37aNYfHT6uBSTIuFmL9yPZ2BoraWaubEiu2WfqAsg2nwKUCblZyU3gH9\/q261cby1UW6QQE7ZFlFnzb8AzJZT7Oi3Wa5h4AXGiWl2PeCqSx\/TieVQsfBVyoYHuX2dpA0ANjgaxX040PxCtXrBebdWbgiAG1HZ2tJ9nUA+IUSlcrQA3OBZBS82LjdwWWqTazcQ4wkJxjPk\/K+boicHCKFZPZYjM3UHQ4sb6iPN2kWeEBcUqV+TpPZwaGZFOLyLTcbnxEnFLjybxa2ZFVzA0IMs\/5jhNnZBCi0oHr15xOAZn5NLGo5aui8smMyuTVYgsIpAx76uN6MluvUw8ALlRuJ6tyYyDo+WhuIJjPJqUHIlBKuY7qbUkvR+NeHlTgqvpU1asmFj0tD630dtcKQw+\/tse\/pl61+KW5bMrmIFg5ajPvaBgHgfLfcXgqNqAL3rktT6vytCxvvgpj3jMua4JDJnWDYuWhLgKkFbfbWpMWbSdRldvjBD\/zv89uDlDUYLRF6C\/QIFfx26Vu7NOMauF1O4Gs9BrmOt6LCU4H29WLjCLU+pZupN3d0HkAw3kVotGpyXQB++TG4fx1HOSPc2vq7T0SfashphMd4DQh3IP87mPts31qWhMn3uwbXitAceeO+\/CF9qRYT\/wd8pmH175NR\/PJHcyd5e+1oBgUuKNt3rez2SqttqYE6xH+zlRANhhAMOt+wkKTzXpSToHDoXwM0AEHPlmqOHH03E2ymrFtRfhYgdw3Po\/+7R\/\/iTe6PPL7mGj\/mAk1S63TEaR\/An4e6WWYOt4dHFFVlXm68LxBTsCWn9GKihw2ujfvwKbacR2OpFugYr8pJjJi8xkmc2ODbClFusjmWZbN07RzooHwJhTdtFReG7n8LUOZkkEPI454cFhbFo7F+KHAJcV526raHOvDAD4Lno6yo+RG7G0K3NxCTK53vmdsiV7B+9bgNO9z+SrqFpp0VZlusy0uw7uKZ6\/QsF042oHmksnecEmTS2aJg0ni4hHacO7CKxPFFWDJkDoFrjImu\/jCJ3kBV+AcQiZ4Ql+P7vQOPqlrvGJgJpkBs39cisxbZ4brOWB1Q9domouxLVeZXKZp9LpMK4mXq8tqBaLbYGhh5FBWShz7ZIJgswT5hKkwxcjBDr0CKoJ+qZj2og\/\/++9kiorowRhwB5hkIX9a+Q5aMy8SeLutuNy2+4anHLEEwBavd9U8K7KU7KrsFiw8Z9vxxRgGQB42p6Y2AXtzqDRGAp318SQnnLJuzuogxGR+GyCosGwatrGvsuzWfA8zkN7gpt3ntml250355dbTOll+e4vhhHFCjnnZ4nj0eDlQP1b6x1r\/2IAbKjNhf5WXDhB3AwciHXye06NWOCqBjKpAi0duwyq8q\/jcKWC9W8ErzppLy6GbOw9l720AjKABflzjRx3\/T19hLV0IAgqVWF615y5ITOswkpCLWZnZ+dvtbLYeb9C0d2+P5KVzN1Q6Zwqw0zfc4mw6yzZki+l0kY9tZX3oYeC+oKBu1+liSynyqIXVarOoULg3ulfRnpUwZOx1r2YvwmR3OsZlPB4\/0Ksyvjdzs+B\/LDbk5Zpr8Q\/qk8Eh83DgF5YaeC6BVw6BjdU45X9uIJuGg27nI1oAWWADoGy0YgqyMMt0AlY0hPRBWQ7zhA30Dw3U+A5leFZHNuCmQzgvpct7+MhlC5vgb9vmONAHPJL0O\/57MtlmXGLxhKNoN6X3j10wYiCar6q9P39NdaKqym0eg\/CMhZqzsS1meV71JrMorcicTubp7AVkNjBiIIJk7lU7TOY+1eNkDkF4Novnrzp3cl\/AjHI8ddQppZ5jKkvLMZ0W08VsfPuYWhgxEKEx7Vc7OKa9qkfHNAjh2VEA0NSZbKfj6aYvmWVpSebJeDKfZreT2cKIgQiRuV\/tIJl7VY+SOQjhecSJzBV62u4DN2hIUcx83THFWqFK+MDh81PHcfhzF\/7Chz+3jhZxT3HipuyXbXX1ZeyaxsZjr60xjreG4Isu8K6ajS7A5mr9hMRdsvu+OVVXEEMDQsiAoVDah1wfWXO0qqQyNdgtslBG0Nur70tztzySMM5bMfIBM5sxxmX6CKDBx4T6AGxAGJEJvZYWUFt1TVTdUFV5Zlyv9so4cDeb9lMzsECp1xv6NQRCQaCqe3UFlb3a6O2GfGtb926IdzChv286votx+Mg5dgBJjt5szJsrNpTQN+4hxqKMbOB8x5+pi\/D75RiD7nzdkF+vhl+HY3swgOAX4GvnSiK6ghvMDbRpWHtvNnDjYDSUhIC2BiOF903bcrGalkj9eXb7uK8Ol6srm9zBy3xJwXrPj0KZqE8CqFODCdif0TRdlwfpG\/Ku3AjcuCF3olqwqkstXBvNBA8L9O1b64v3YW2EyljpfVymuF3w33AbEc8R6orMFKxNOBTDFwjo9cZ97UJRKHtgnPcb5\/21c4YOSTGPDMfas+fiJEPSHITgyw18SaDixpR5Z0HHaLVPRn5vdT9NWJNw5gUmjDmXZM6OISz1hyimZNiKzNbuU+hlixEBpe9q5B0+6r0w04JbL\/OFWnLV30af5NPGB9y5lMcbW6jGFrYxcpG\/Yn8YL4rcYTkUCv2I3wVyXITEfxcuVrPM8dBe4d22gtnegRe+7BHRUdjttwgxX2+2edfdSTEbrhSBPYl3qwbUp3lnxb+B3ogmr6t3YHKMIb\/hVdFdKPjU9GQuqM0zk4jVFGYZBXsEy9blaSPv20KX3YC7l8aZWIGt4o3u11IeaM8A6h50DCh20BkgvLUuXnzWc5TWl8jNywZX6Xhc6tueCEkLNz+wDaUz+ftUzCdzz2dOrjyhVpS+FXfxA\/+RkZsq7qRXMzwm4Xysulzk79TuOwPNga3RUN0jJ86Tn6+U18Y5eZoM09GYnz1lNMNf5B3YD+8+Md0MHlQtxry0gHxiK3x14u+bY1vv2frDulAxtY1waCXvYIIhmV\/IYMqWdBGyTaOQIBT0SwcDOQUsh\/NBx9vOB48DSBr7NAtvbzTyp+rjwD7yW5RtZvoUxrS4p+bFC+vCN259B3hiNGchOoHqjF5D1RmpM6K379Arqfx7r35Gbaue0Fp7SGlHeZdgw\/JmWdiueYOb5X\/5wvdKeIRRFW1MpNyJTlGZlN57ZTxF2H3jeI4ArF19bqlLRqPCQvph3Ymo+dpdNYYT3FPeJPs\/j7USy8US42BDgN\/ZpUNKVXVdq8wSKC8olcHfS\/mgz3h8tkY5KZqNc11GjWqLwPCLnHXm+bO5bBLiizFNLjsmsJPySpz4f6dnwoxvzLQme16fmt3u\/l7bcOXzqjwl1zc61JQVfaNj4aZd9YarCyPE4V4TmsExkX3Gmd27Nr8z79SykV6zbRwTGIObKjP5xdhMVb0RkfZUrj\/AXnheWHlZ4LFkYrLtA2x4rKt19bWQni77VRytb8uyfHijPNo58Ghvt\/q1tjOrLXqOLI5a4PLfXEYFb+jzc6OFEqhTjvDERcVJPZ2HIiM+EncIK7Q964+QsVaZAVu5OdANnVKiUX7150HntrMtgJyLtq556RqOqoL\/ofbOCBYO3EAQA0IzAoakQaiM3eULTINuetROvIUgbA2LRxgTRzmA+8NNa5UF9Ymgk8XXVIVa50bieCFDMoEjHbsAU5SojghlXCyibOCDV6DqEx7DPAPs5FZP6kHoS7V3o0vSCKAlD4tPtJ01kR3jqc0WfiXI8mieoXJSW6g2dYsDw0L2QlBJ3cSsaoFcMUovGuqJKI7CJxbAYCTeLJtLKxnW8I4aDo6ztcbw66wDkkpvJl0mkWu1ZgHho6aSPh7xLd75mv+Br4RXe1YM5L\/paHr34Nn1Aywk0FYnuIH\/HH1WU5YXGqBqXA2QxjrXRhmIQ0MWPQeH2gFB2UiAdXEGLWGmE4JRUSqgCWULHS682irt1mHHKlcD4tNBsDf1helU9f6y9y79ACXFNSZRAeJ4GgNh35APFlv+x+MDHRnEo6f8kEF4NAGfDNGHzHa7ZDTWSTLAdcn098gnlwBENEAirqQHSJVpWnoVeWgbeWn8mPdRXxqfsK3uxDpj2eKRdGzr86klMoy8U6FsPvW9SRWwoDhz7dXORb3esai\/7auCNQOgCP1f+0bgZ8R6QqJ2GcdmObSNeQG\/eEc890MREiQnUPAoOBwmqkv5axhY7+SEmLZvq92uPp7rM4pZTrSNx482fucLGMo4ZENJeTRp4hOKCDAd8z\/EmcJItBCPmeV\/VKRdzv\/w7NfsoZrxP37sjQGq2N4AlA0MhNqUCOjil47KEViy3URzfCti2kS7d+j9RHwQSOAPHImBwuguik1nL2Enu\/sYCHF6OcBQ1NOLIcYCoXoChcwVDUAf6VLLWGpOnUY+hfquuE9lAB\/C+e7wNhSr+zi54TRdrbepu+rLMA1\/Y0ooaxYTlDMx3cy2U1wInuGCNa2BGp7WAof0xjpGJ3x2gsHzj060TKx4jkxvJ62pw1uaKdck8h9IM3C33VtZ2yjL8rPCZsT\/J9LBXH3xybaLs+0cR1bPmbJVOWeN4EgA86GFr\/PHEG1st9V47bSx3ebVtH8bUv90Ge\/BD8jyIgS4YdAzReq9oQTd+oYXnBKWL0iUr8hUB9s7pJJnVFSdrak2bKqKiuCQfADdqEPptpeMKrZyAIaOUWgvx6sbEvPO96f\/wHOtCh41Zv3vLIYi+W2KJysbqkWF3wntO59MBnkxH+Q534jN5fkSA35Z7ct6dyUAiVIi1VcC0TFOoKk8TzR18GV0VpDrw6E6AbcEyOjDSCxPRlJ57qynLk0Z9Lvk2g1+JmI4nzEibKx39rqm1EOUf7fyBTHEYu6VprgGHRlWLwuhAC1\/aZr9fUbISQ8q8PkZSJmPrSjZXj2TDlFqpW0DKwhyZqMZ3QrCJ9hhKxDIv6GSoXXlWeN2w8\/v62p5OW7KtuLaLEq0Fog9JZEc1RUy8Dq3FgQqbbehSubANV1x\/XRq9sEWhwRTgcrnkgnUaRqsPYs2fW4uj02wrk76Eai8KuvNJVyZ6DSaVolZIPV0X0iBY12HSIiwRYUQIQnJDazMp\/bp\/eqR","pkt_caplen":4374,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0AX5AAEAGkoLAqAFpXbyG9ovbAFCLegoURn5YmIAQAaD15gAAAQEICgBBCYwDdgpf","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1084{"flow_id":17,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":577,"pkt":"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","pkt_caplen":577,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":17,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABAmoNAAEAG+XDAqAFpXbyG9ovdAFDX1pUBEqSbF7AQAPyIiAAAAQEICgBBCZQDdgpZAQEFChKklVgSpJdX","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+1714{"flow_id":17,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":1026,"pkt":"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","pkt_caplen":1026,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":17,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089072,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABAmoRAAEAG+W\/AqAFpXbyG9ovdAFDX1pUBEqSbF7AQAPyCbQAAAQEICgBBCZUDdgq0AQEFChKkl1cSpJsX","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1463089073286,"flow_last_seen":1463089073286,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp"}
+0416{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":81,"pkt":"kDVu60UQeJKcD6iOCABFAABDKCFAAEARjs7AqAFpwKgBAUZzADUAL2deWFEBAAABAAAAAAAAAnUxA2ltZwZtb2JpbGUEc2luYQJjbgAAAQAB","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0665{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":252,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1463089073286,"flow_last_seen":1463089073286,"flow_tot_l4_data_len":47,"flow_min_l4_data_len":47,"flow_max_l4_data_len":47,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"u1.img.mobile.sina.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":1463089073287,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp"}
+0413{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":77,"pkt":"kDVu60UQeJKcD6iOCABFAAA\/KCJAAEARjtHAqAFpwKgBAcXQADUAK4SVO9YBAAABAAAAAAAABmFjanN0YgZhbGl5dW4DY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":1463089073287,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"acjstb.aliyun.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":1463089073287,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp"}
+0404{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":72,"pkt":"kDVu60UQeJKcD6iOCABFAAA6KCNAAEARjtXAqAFpwKgBAcjwADUAJqqk8RABAAABAAAAAAAAAWcGYWxpY2RuA2NvbQAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":254,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":1463089073287,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"g.alicdn.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":1463089073287,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8KCRAAEARjtLAqAFpwKgBAdDaADUAKHiskZsBAAABAAAAAAAAA2xvZwZtbXN0YXQDY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1463089073287,"flow_last_seen":1463089073287,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"log.mmstat.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1463089073289,"flow_last_seen":1463089073289,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp"}
+0413{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":76,"pkt":"kDVu60UQeJKcD6iOCABFAAA+KCVAAEARjs\/AqAFpwKgBAYQeADUAKn2XkPcBAAABAAAAAAAABWxvZ2luBnRhb2JhbwNjb20AAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1463089073289,"flow_last_seen":1463089073289,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"login.taobao.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+1014{"flow_id":17,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":259,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":525,"pkt":"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","pkt_caplen":525,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1463089073319,"flow_last_seen":1463089073319,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":260,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8H8hAAEAGdDDAqAFpXbyG9oveAFCCZhY7AAAAAKACchAAKAAAAgQFtAQCCAoAQQnzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1463089073321,"flow_last_seen":1463089073321,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA80r9AAEAGwTjAqAFpXbyG9ovfAFBlcdtMAAAAAKACchBYCgAAAgQFtAQCCAoAQQnzAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1463089073322,"flow_last_seen":1463089073322,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":262,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8W1BAAEAGOKjAqAFpXbyG9ovgAFAoLVKkAAAAAKACchAd9QAAAgQFtAQCCAoAQQn0AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1463089073334,"flow_last_seen":1463089073334,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":263,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8E7RAAEAGgETAqAFpXbyG9ovhAFAJpBpDAAAAAKACchB02wAAAgQFtAQCCAoAQQn3AAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":17,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0nCJAADgG\/91dvIb2wKgBaQBQi90SpJsX19aWzIAQAqEKgAAAAQEICgN2DKIAQQnz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi944y47WgmYWPKAS\/\/+aeQAAAgQFqAQCCAoDdgyiAEEJ8wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H8lAAEAGdDfAqAFpXbyG9oveAFCCZhY8OMuO14AQAOXIRAAAAQEICgBBCgMDdgyi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1019{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":530,"pkt":"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","pkt_caplen":530,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1463089073319,"flow_last_seen":1463089073382,"flow_tot_l4_data_len":608,"flow_min_l4_data_len":32,"flow_max_l4_data_len":496,"flow_avg_l4_data_len":152,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/global_nav\/WB_logo_b.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0412{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi9\/6KbWaZXHbTaAS\/\/8KOQAAAgQFqAQCCAoDdgyiAEEJ8wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sBAAEAGwT\/AqAFpXbyG9ovfAFBlcdtN+im1m4AQAOU4BAAAAQEICgBBCgMDdgyi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1047{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":550,"pkt":"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","pkt_caplen":550,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1463089073321,"flow_last_seen":1463089073383,"flow_tot_l4_data_len":628,"flow_min_l4_data_len":32,"flow_max_l4_data_len":516,"flow_avg_l4_data_len":157,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/growth\/login\/sprite_login.png?13434210384389","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0411{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+DI1jKOKC1SpaAS\/\/+EggAAAgQFqAQCCAoDdgyjAEEJ9AEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0W1FAAEAGOK\/AqAFpXbyG9ovgAFAoLVKlyNYyj4AQAOWyTgAAAQEICgBBCgMDdgyj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+Gi04d5CaQaRKAS\/\/+sgAAAAgQFqAQCCAoDdgyjAEEJ9wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7VAAEAGgEvAqAFpXbyG9ovhAFAJpBpEotOHeoAQAOXaTwAAAQEICgBBCgMDdgyj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1031{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":539,"pkt":"kDVu60UQeJKcD6iOCABFAAINE7ZAAEAGfnHAqAFpXbyG9ovhAFAJpBpEotOHeoAYAOVvCQAAAQEICgBBCgMDdgyjR0VUIC90Ni9zdHlsZS9pbWFnZXMvY29tbW9uL2ZvbnQvd2JmaWNvbi53b2ZmP2lkPTIwMTYwNTExMTc0NiBIVFRQLzEuMQ0KSG9zdDogaW1nLnQuc2luYWpzLmNuDQpDb25uZWN0aW9uOiBrZWVwLWFsaXZlDQpVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoWDExOyBMaW51eCB4ODZfNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS81MC4wLjI2NjEuMTAyIFNhZmFyaS81MzcuMzYNCk9yaWdpbjogaHR0cDovL3d3dy53ZWliby5jb20NCkFjY2VwdDogKi8qDQpSZWZlcmVyOiBodHRwOi8vaW1nLnQuc2luYWpzLmNuL3Q2L3N0eWxlL2Nzcy9tb2R1bGUvYmFzZS9mcmFtZS5jc3M\/dmVyc2lvbj0yMDE2MDUxMzA1MzcNCkFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZSwgc2RjaA0KQWNjZXB0LUxhbmd1YWdlOiBlbi1VUyxlbjtxPTAuOCxpdC1JVDtxPTAuNixpdDtxPTAuNCxydTtxPTAuMg0KDQo=","pkt_caplen":539,"pkt_type":2048,"pkt_ipoffset":14}
+0813{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1463089073334,"flow_last_seen":1463089073384,"flow_tot_l4_data_len":617,"flow_min_l4_data_len":32,"flow_max_l4_data_len":505,"flow_avg_l4_data_len":154,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"img.t.sinajs.cn","url":"img.t.sinajs.cn\/t6\/style\/images\/common\/font\/wbficon.woff?id=201605111746","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0523{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":159,"pkt":"eJKcD6iOkDVu60UQCABFAACRAABAAEARtqHAqAEBwKgBaQA1RnMAfV+\/WFGBgAABAAMAAAAAAnUxA2ltZwZtb2JpbGUEc2luYQJjbgAAAQABwAwABQABAAAACQAZBWFkaW1nBGdzbGIIc2luYWVkZ2UDY29tAMAzAAUAAQAAAAoADQV3ZWlibwRncmlkwD7AWAABAAEAAAAvAATeSRxg","pkt_caplen":159,"pkt_type":2048,"pkt_ipoffset":14}
+0680{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1463089073286,"flow_last_seen":1463089073393,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":47,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"u1.img.mobile.sina.cn","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"222.73.28.96"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":1463089073394,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp"}
+0414{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":77,"pkt":"kDVu60UQeJKcD6iOCABFAAA\/KDNAAEARjsDAqAFpwKgBAS4WADUAK\/dEyn0BAAABAAAAAAAAB2FjY291bnQFd2VpYm8DY29tAAABAAE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0661{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":1463089073394,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"account.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":1463089073394,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8VdhAAEAGKCnAqAFp3kkcYKUjAFC1h1\/eAAAAAKACchBUFAAAAgQFtAQCCAoAQQoGAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":190,"pkt":"eJKcD6iOkDVu60UQCABFAACwAABAAEARtoLAqAEBwKgBaQA1oYgAnCOtK+iBgAABAAUAAAAAAmpzAXQGc2luYWpzAmNuAAABAAHADAAFAAEAAAA8AAcEd2NkbsARwCwABQABAAAAKQAVBnNpbmFqcwVjc2dsYgV0eGNkbsAYwD8ABQABAAAEEgAUCG40Y3N3aGszBWdjY2RuA25ldADAYAABAAEAAAADAARdvIb2wGAAAQABAAAAAwAEXbyG8Q==","pkt_caplen":190,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1463089072885,"flow_last_seen":1463089073423,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":40,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"js.t.sinajs.cn","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"93.188.134.246"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":1463089073424,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp"}
+0404{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":70,"pkt":"kDVu60UQeJKcD6iOCABFAAA4KDhAAEARjsLAqAFpwKgBAUGkADUAJAai81YBAAABAAAAAAAAAWMFd2VpYm8CY24AAAEAAQ==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0654{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":304,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":1463089073424,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"c.weibo.cn","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":1463089073424,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":305,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8dN1AAEAGHxvAqAFpXbyG9ovjAFD5+n7QAAAAAKACchAf3wAAAgQFtAQCCAoAQQoNAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":171,"pkt":"eJKcD6iOkDVu60UQCABFAACdAABAAEARtpXAqAEBwKgBaQA1yPAAiVtu8RCBgAABAAUAAAAAAWcGYWxpY2RuA2NvbQAAAQABwAwABQABAADy0wAXAWcGYWxpY2RuA2NvbQdkYW51b3lpwA7AKgABAAEAAAGzAAQvWUHlwCoAAQABAAABswAEL1lBx8AqAAEAAQAAAbMABC9ZQcbAKgABAAEAAAGzAAQvWUHk","pkt_caplen":171,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073478,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":38,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"g.alicdn.com","num_queries":1,"num_answers":5,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"47.89.65.229"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":1463089073479,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp"}
+0408{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8KD5AAEARjrjAqAFpwKgBAcVlADUAKPnf1EwBAAABAAAAAAAABGRhdGEFd2VpYm8DY29tAAABAAE=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":1463089073479,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Sina(Weibo)","category":"SocialNetwork"},"dns": {"query":"data.weibo.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":1463089073479,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":308,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8PQxAAEAGymDAqAFpL1lB5caLAbuG5TcXAAAAAKACchASAQAAAgQFtAQCCAoAQQobAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":112,"pkt":"eJKcD6iOkDVu60UQCABFAABiAABAAEARttDAqAEBwKgBaQA10NoATp++kZuBgAABAAIAAAAAA2xvZwZtbXN0YXQDY29tAAABAAHADAAFAAEAAAIfAAoDbG9nA2dkc8AQwCwAAQABAAAAIwAEjM2uAQ==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":309,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":40,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"log.mmstat.com","num_queries":1,"num_answers":2,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"140.205.174.1"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8K\/hAAEAGEeTAqAFpjM2uAbzgAbtP+SHlAAAAAKACchCeNwAAAgQFtAQCCAoAQQodAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8i2VAAEAGsnbAqAFpjM2uAbzhAbvMrYF4AAAAAKACchDB7gAAAgQFtAQCCAoAQQodAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8pN1AAEAG2SPAqAFp3kkcYKUoAFA4Ca70AAAAAKACchCCVAAAAgQFtAQCCAoAQQopAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":330,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8GyhAAEAG7ETAqAFpL1lB5caPAbufLBEBAAAAAKACchAfvgAAAgQFtAQCCAoAQQopAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":331,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8abpAAEAG1CHAqAFpjM2uAbzkAbvb32OTAAAAAKACchDQkgAAAgQFtAQCCAoAQQopAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":335,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0g5JAADgGGG5dvIb2wKgBaQBQi944y47XgmYYDIAQAqTEEAAAAQEICgN2DUcAQQoD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":336,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0uN1AADgG4yJdvIb2wKgBaQBQi9\/6KbWbZXHdMYAQAqMzvAAAAQEICgN2DUgAQQoD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0934{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":337,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":467,"pkt":"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","pkt_caplen":467,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H8tAAEAGdDXAqAFpXbyG9oveAFCCZhgMOMuQaIAQAO3EDQAAAQEICgBBCisDdg1I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1223{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":339,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":678,"pkt":"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","pkt_caplen":678,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":340,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":78,"pkt":"kDVu60UQeJKcD6iOCABFAABAH8xAAEAGdCjAqAFpXbyG9oveAFCCZhgMOMuQaLAQAPft5wAAAQEICgBBCiwDdg1IAQEFCjjLlgQ4y5ho","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"eJKcD6iOkDVu60UQCABFAAXQg5RAADgGEtBdvIb2wKgBaQBQi944y5BogmYYDIAQAqS\/bQAAAQEICgN2DUgAQQoDiVBORw0KGgoAAAANSUhEUgAAAHgAAAAoCAYAAAA16j4lAAALTUlEQVR42u1bCXCURRYmHIFkJUQCOTjkDqCGK0hWQJYFJdGESwo2olxCANESloLliCyyhFWpWsOh4gor2cItkUuErO7CuhsEBBPOcIVVqYjA5CIJhIQww+Tt6\/CabTr\/\/3f\/M0Gkarrqq5m\/3+v+\/3nf393vve6pU+dnUODP0X6IRYijiDIEEPIQXyFSED3r+Mr9WZC8UQKpVshEPOmz2P1H8BRNgjk+QjT2We7+IbgJTcWMvBJENuIsotKC5BOIMJ\/17m\/i6yH6IFYirhmQzF6CYJ+lfqJyKTQqADEAMR7xHKJrLZIdgUg3IHmnz\/J3l9S6iBGIzxAVCJCwhRFvg8jOiGGIOEQrA297lQHJiT4map9YP8TziBwDUmUs1yR3vgF5exF9JZK3SDq5bDr3sVJ75D6K2KNBLMd5TYIPmzhUbsQ0Qa8ZoljSGeljpnZG7SyE0wa5DNc1CX4R4bIg+VeC7hJJvsHHkHfkNkF8apNYjiIba3AgoQVlsNwCiYcEvQ4SwRd8LHlOblvEaQ\/JZfhS6q8RYiDNBisQaYjViKmIMInwpRKRnQSZQ5L9QuslAngYUQC3yisG8h9J1lLRz\/uk97rmfeshLlObmbaiCIAu1K4KES7JhiFmIbp5Qu7DiAtekMuwjEgdg9hh4m1zXENMEEhsJZE4VJDtl2RtNQzVSiDwjwbyHiQ7rPGS3ESUIoI1SXoC\/l\/a2SR4HrX7Wqqvi8gnWU+75HZCFHpJLkMpEaerfxPRkUgMl0gcLhC8zw7BRO53ZIw1wohiRD1IOovEUYmfTRAuGjmhQl9\/J72FNkhaTm1OCXUtEQM1cITa\/lWqfxGRhzgj1utOyxdqgVxPMYNIjJFIfEQgOFeSBVkYtzPiHBnpLYSfMKL2CHqZVNebrsfQ9UFBJ57q\/otoaIPgHGr3hlC3Hmq\/FKvIDUKcvIfkMswXnK7TROC\/WBxsMrILLQzbD1FEP36JUP8W1c2l63AaqQ72AlDdBtJJputGiO+p7iWa0mV0NniGTgIBfaVRnaYAH735GroMs1Sh0M57TC7DKGGk+iMiEXWFuoESwVtMyJ2IqES4ZYeKTZVkuC50PYmu1wpOEX8xulPd2xoj6COD5\/gtyQrZumlz\/f2M2v6pNjzmWZ4Qkt9tEBSNmAQl0+dB6fxlcCX5TSid8wconjwbCockgqNtHzv93WBhmSKcepAOBDByqxDPGBgmmQxTgRgqydqRLJc5SYQdVPcCXT9F1z9Qm8F0fQmRIYC\/BN\/SdZzBs\/yHdNKk+kDEp4jtFqiktocUek1U5HYh4ypJyIvsB6UzF8H1HbvAXVSsfqdvusF5MgfKVqyFggEjVf2fYjOJ5gbEVLbjZBKSsFDoIiKa6qLI0NsQc2ysae8iWpMzw8qzwn0aCQR3EepbSMZ3kU62UNcBMaKW1t0TOqN3t4rYgn7DoeKTHVB144ZXT3Nj3zdQlDDe6l4sx\/0aoplHu0+3RtseHjOSwc\/TVB2HWIU4polYFjYJj\/+QcJ8JVPcP6f7TVI4QvYQfcu\/Y5HesJfkGE\/kuki9TkRunGrHlG7agedy15+tVVUF52ifgaBVtRTSLmRcg6tkk+DFEAyHUOSI6Szb7ek146kJJlkX1T0v1kULYsp9760JdDymGXWYSHjm4520gY0sIH2m\/VBG838zIhU8\/Dzcv5pny5HQ6ISMjA1JTU2Hx4sWQkpICmzZtgsLCQr3RfPAIONo8ppq2v0A09IActsZ9Tbda7+FswEKncupjnzRLsHKae90GbRsgrnCvW5L1raWhkmfpuFG2ytCwlxOnQ9X1SsNeS0tLITk5GZo2bQrseWXUr18fEhMT4fz588onvP75lzrO13oPyP033WI=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H81AAEAGdDPAqAFpXbyG9oveAFCCZhgMOMuYaIAQAQ277AAAAQEICgBBCiwDdg1I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1621{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":968,"pkt":"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","pkt_caplen":968,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0H85AAEAGdDLAqAFpXbyG9oveAFCCZhgMOMub7oAQASO4TwAAAQEICgBBCi0Ddg1I","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0ijJAADgGEc5dvIb2wKgBaQBQi+Gi04d6CaQcHYAQAqTWEAAAAQEICgN2DUoAQQoD","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0971{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":493,"pkt":"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","pkt_caplen":493,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sJAAEAGwT3AqAFpXbyG9ovfAFBlcd0x+im3RoAQAO0zlwAAAQEICgBBCjEDdg1K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2347{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sNAAEAGwTzAqAFpXbyG9ovfAFBlcd0x+im84oAQAQMt5AAAAQEICgBBCjIDdg1K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2342{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"eJKcD6iOkDVu60UQCABFAAXQuOBAADgG3YNdvIb2wKgBaQBQi9\/6KbziZXHdMYAQAqO0MAAAAQEICgN2DUoAQQoDVeKVBfZk3j1tenfu\/vPjjo0o4BpyIyIwum+aQC9cLy1DJd5soqj3CJg+7zSZxxNGjxghFDDCIAa4wLoZwsXzJjZ5ipHViSrxYvXbfxwTTiXl7z8\/+FkznHPs8W2CoMpQTiYfxTdfC6eThtTyPchKRLrzJTheiBCSRsAIOAUzBseBuKlNKmB6JsNU0qv0394sy7y09wXYB6QE\/5Fj5K5sXOG9XX56xb88Q\/w0S95pshhPGCGEAuZlgamkMvFUUlz\/kc7hkTndmbWE4mVeiQdmSjS9oqdYck2zoNBAAaK9EheTh+2D3pqPAC8NISS1gAGKiFL6mjJTufUeUkm7xC7dtfdfsZCBr8xyNNLQ83IEr0zvuZ5OCdicYAbVtLJ6MoQQ8rJscgTgZWCANOEaVk3OT77+a2Al4x+x54wrRS+4jg5mQ1Vyvh0Ubvsvjio9fUqc+aan0Rq4rgu+wet9Emch6Vo236cIYLzgq0P2S183iBAKmDJsYPVU+cxfJr+HSrQpjNpa+69U8SF6YcnQ42jsAoGVBRxrAIPcQI2fn7pvReA0mZYcGKTpPqp0hhdgI72BFTzT1rMUxIGGc7GXg3PEZ34+J6icEAqYChZaa8INkndQbjNWsRwTDB5r7b9KLa6np9fmBzOYrHqj7SNFw1EZ\/L38xL+\/oKjeVtWpOaKh8F1Xgmm4Rq\/59AQvWiv34ucNY1vK+R3wmUjkgcFg4gq9EpHPeCfNn\/kTXwE4dDVqvair5dQdIcuzcQyI+VJQw7MqyvzptKvsvwKniRyZTqdII7\/Xg3qkeNmpqSPrWIOpgzfbrTwDX+q8bIK+reTnJ1w\/btNC30wLxyMVvsUaoS\/OUBl6SpzevZOWd5o53uMVuujrJf4zCSEhAmaUgQ5TkCezDnbS1sxa+q+VVjiEy7BQjId1vKnaePHiPMcegnkr8DAUfi9QPBCHgxSO7fCcKuPnd4Cw3IHgGXxVdqHq8l55Q8YEMUEh+5ycz48UpfQUtpTjEEK+o4D5eOLCeKV5M1bafxaNKlRaHRO8vf4OWK26EIO0U7Ek\/Z21a7R3aZDPXYIC0uAbp8dPiw00tCAgAmq3HLFooyeuxdw5BdhD8HqvKjDbBDFBoUwBhS1TFUos1X6ZIYRsHv3CBxRoq9C9L4wR9STWT\/7+G2GAP8nPlEXbGt+9gmkfHUNzMH4qaYunhYP4qD2GU\/pWoRa9DBBUldeDoDKtAgKV0QuzU6JlYq2hBPtlgRAKGByUK\/0lBkM1O7Ih0IDOkFny3uTvv1+yfa7aIvbeKa6AKrsF7KuNfQFZSH1kATstXizcB+u7zyqN2y7cd7U0E5hZdALPSJs5RquUhsKtlD74TLoSNRBQHPGQX+QQQjaBxncGg9vCm+re5TLm8vPZ+m+O2OdRT0Z951v9rOrGfHqMdgkB0oUyvnuoHVPDtFQL8SRT2FQZiEnZP8BTVuqpsIXT7kcRp02g+BikidDD6a\/FqVXGUaUyedZCH3hNJeyXWcAQQjaBqa17GDRHGbBrqQdyUlMXvkJSxZ2BftsnurqLBHE5+fovHAvxHufAFOtKZd3cYoB9tBdBZ\/rU8hOZpC\/RM7WFANtCWgeF704BYuRHTNC0XN\/e01dWX2vA9KqV9khxtp0SQ8\/gGBivNcPPd2GbN6CYEAqYRpqBt1kceH5BEKZsG8Sn8TMmWnXWmjjy9188AxhijL0JX7rBzxAcg+LPohqg3goKikpaB6JvH29c4Fz9cTwWA50XfN5nh2CYHV6eLkGhvwnOZ1RCZXpRwVIEB\/TngxAKGPAKlHpQVsXFsFR\/taK6LPg59WLuZODN+m8WUdWC0Q\/htEDquAXjp4XJeK+AktZAM0KxoPHcYcEy9LA5DNoBYykQEBTDg8Kzw3gdx3EmOYdOfi4PFhF8TQoRmOW6hQk=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":357,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sRAAEAGwTvAqAFpXbyG9ovfAFBlcd0x+inCfoAQARooMAAAAQEICgBBCjMDdg1K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":358,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":359,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sVAAEAGwTrAqAFpXbyG9ovfAFBlcd0x+inIGoAQATAifAAAAQEICgBBCjUDdg1K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2360{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":360,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"eJKcD6iOkDVu60UQCABFAAXQuOJAADgG3YFdvIb2wKgBaQBQi9\/6KcgaZXHdMYAQAqNamAAAAQEICgN2DUoAQQoDC05iIk\/SgAkU8T5HMpboSqVSqUwuowl9GUkhp\/IsU3icM7iSp7iV1oS+ILZW04p8\/lLZHM63xNgXnMxblLEtVfiWdzmZt4m9pdzCFmrQiXeozmQKyeMe7uNONhBrmZRTm6b8rubUoJxMYq4RezCLDOryLUUMZCKbKGBfoiyVSqWyuZrRrOJ3TYD\/Vy8upJhS7uZRYqyQFRRRxgjGsi\/tqcS3ZBBrE6DC9yyhh6nEuRzNKkqpRU3u4Hli7gcu5jkyOJdcevEdl1JCzK1mIjfyPMM4nSb0J4\/fsncXsHGc7RbH31kzQ5iTBouBMiZtv1Lg42C5TcrM3CSXyszMzG3KDXMZwwxOGofMvPeM9FgaWa6v62vYtf4\/6WhmYTb2OtI8enFkYOA1AETsXkhNDQguYHe8dWNU2Qykr6xlZpVDczlCmWJ\/h7XWRRa2xwOs9eUFWzoh3wEABQwAAEBj9OkDAABQwAAAAFDAAAAAUMAAAAAKGAAAAAoYAAAAChgAAEABAwAAQAEDAABAAQMAAChgAAAAKGAAAAAoYAAAAAUMAACIGhQwAAAAFDAAAAAUMAAAALEOAIBm4j3hPB1Cdv+JcSIVlrAFAAAgYoSUeCVD6ZKYmNjrsMMO6921a9dse95zkSNGSWjbtm2ajilKspKoJFkS7blUe0+CXQMAAFoRz27ybfbZZ5\/9fvjhh2fLysrywvLMM8\/8xYoEz0WO+IMOOqhNcXHxwmHDhg3Q455Kd6VHID3\/9re\/7aX3LM4UK8JaEQAAEKdk6YZ\/8M6dO5eHTZWccMIJA\/VaWgQVMJ61rnT+7LPPLl++fPmbH3744e2\/\/vrru2vXrp3u57fffnvv448\/vmvlypXvTps27RL\/vXaN55oFPNe0AADwrNul3Zo1a57o2bPn8c5s27btl\/bt2\/9Vp1uVYiUcAT9rrJKun7Pb+++\/f+N+++33b1eHX3755d1Ro0ZNVWGzQQ\/zAuN5EMWzkAAACCkJF198cX8VBce5gFmzZj2tQ2EE3fRDSmJCQkLWvHnzHrDipU7qEvuH3vuQf41\/bXTdWylgAAAIzjCKs2OMJXbMmDGHBVv+f\/zxx5dHjx49TaflgXuSFwGDd1PUZXRa586dj9R5+O23334vNzf3d1eDntvqv+ZE7z38o48+OsW\/1j6jJcRaS1eqkl4jqfZavBJnx+B5ndfZZ4daTQEDAECg2yXBbniZSrYl055L6NChQ3cneXl5G1544YUpgwYNut\/uQylKhr0v3goAr4V+jzgl+cADDxzrpEo+\/\/zzVXniati9e\/eu6dOnr6kSJ4MHDx5j42BiW+jnT7LvvJPSVelm8c872WsplnSLPa77OvvsUCsZAwMAgLW42JTigQMHtrvuuusO69KlS\/eSkpJSDXxdcu211\/6sGUfu9ttvH5iTkxO67777cvbYY4\/4m266aaC6X3rpuvLVq1cvueCCC6bv2LFjpx4XKCUt0K3kKelDhw7tN3PmzMXuT\/LHJA8YMGCIBv2u0cP8FugS65Kfn\/9Vampqf1cLvfZrenr633Qa1vmbTtLS0kbr4OnxtDquW6rr\/qLTHUpxtBcwAAB41mKSqht359dff\/2qvfbaa0xsbGyiCygqKspVITNdLRmL+vTp0+WQQw45qlu3bgNDoVCcC9B05NzZs2c\/cOKJJ75oN8siK2KaUoyluvsq+Y477jj06quv\/tA1wPXXX3\/cbbfd9r397GGlSqm0Y9g1rb4qopa7OnieN0SHsHxvjwf7Bz3+7v+4rp8OOUoBK\/ECAFpDt1GKpkH3fuWVV57Pzs4e4GqRnJzcVl0yY\/y4OiQlJbXVZ01dtmxZv\/79+1+tp0qVyia+8ScqKYE1XGLUEpGkYmqreoZCurF7rh50gw+rIKvScjBJ9nn+0VeqFAZ+l6YU58ykSZM=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":361,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA00sZAAEAGwTnAqAFpXbyG9ovfAFBlcd0x+inNtoAQAUccxwAAAQEICgBBCjcDdg1K","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"eJKcD6iOkDVu60UQCABFAAA8AABAADgGm\/hdvIb2wKgBaQBQi+OyanX1+fp+0aAS\/\/9YyQAAAgQFqAQCCAoDdg1LAEEKDQEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":375,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0dN5AAEAGHyLAqAFpXbyG9ovjAFD5+n7Rsmp19oAQAOWGdAAAAQEICgBBCj0Ddg1L","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0930{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":464,"pkt":"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","pkt_caplen":464,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":376,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":31,"flow_packet_id":4,"flow_first_seen":1463089073424,"flow_last_seen":1463089073616,"flow_tot_l4_data_len":542,"flow_min_l4_data_len":32,"flow_max_l4_data_len":430,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"js.t.sinajs.cn","url":"js.t.sinajs.cn\/t5\/register\/js\/v6\/pl\/base.js?version=201605130537","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0396{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":384,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGFnUvWUHlwKgBaQG7xos8arg3huU3GIASOQiHzQAAAgQFqAEBBAIBAwMJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoPQ1AAEAGynPAqAFpL1lB5caLAbuG5TcYPGq4OFAQAOUAuQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0655{"flow_id":33,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":254,"pkt":"kDVu60UQeJKcD6iOCABFAADwPQ5AAEAGyarAqAFpL1lB5caLAbuG5TcYPGq4OFAYAOU\/oAAAFgMBAMMBAAC\/AwOXT1\/apC0sseL9tClTjO1tCqBgMoC4vQJs2bkXrM\/zTQAAHMypzKjMFMwTwCvAL8AKwBTACcATAJwANQAvAAoBAAB6\/wEAAQAAAAARAA8AAAxnLmFsaWNkbi5jb20AFwAAACMAAAANABIAEAYBBgMFAQUDBAEEAwIBAgMABQAFAQAAAAAzdAAAABIAAAAQABcAFQJoMghzcGR5LzMuMQhodHRwLzEuMXVQAAAACwACAQAACgAIAAYAHQAXABg=","pkt_caplen":254,"pkt_type":2048,"pkt_ipoffset":14}
+0721{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1463089073479,"flow_last_seen":1463089073635,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":20,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"g.alicdn.com","ja3":"58e7f64db6e4fe4941dd9691d421196c","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,spdy\/3.1,http\/1.1"}}
+0986{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":387,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":507,"pkt":"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","pkt_caplen":507,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":388,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7dAAEAGgEnAqAFpXbyG9ovhAFAJpBwdotOJM4AQAO3VvgAAAQEICgBBCkIDdg1b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2353{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":389,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"eJKcD6iOkDVu60UQCABFAAXQijRAADgGDDBdvIb2wKgBaQBQi+Gi04kzCaQcHYAQAqRcnQAAAQEICgN2DVsAQQoDd09GRgABAAAAAJhsABAAAAABDIAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAABbAAAABsAAAAccu786UdERUYAAAGIAAAAHgAAACAA0QAET1MvMgAAAagAAABSAAAAYFot3LtjbWFwAAAB\/AAAAWEAAAHaxHpgAWN2dCAAAANgAAAANgAAAEYHCRXVZnBnbQAAA5gAAAT+AAAJljT\/p5VnYXNwAAAImAAAAAgAAAAIAAAAEGdseWYAAAigAACJ2QAA9qwE3clOaGVhZAAAknwAAAAxAAAANgoWnhhoaGVhAACSsAAAACAAAAAkCBEEkGhtdHgAAJLQAAABDQAAAfhg4iadbG9jYQAAk+AAAAFKAAABSj8VAKptYXhwAACVLAAAACAAAAAgAo0IyW5hbWUAAJVMAAABQgAAAjT68ZEZcG9zdAAAlpAAAAFDAAAB2tObVp1wcmVwAACX1AAAAJUAAACVx9PPgHicY2BgYGQAgjO2i86D6MsRa3mgNC8ASGQGRQB4nGNgZGBg4ANiCQYQYGJgBMLFQMwC5jEAAAtLANYAAHicY2BhYWT8wsDKwMA0k+kMAwNDP4RmfM1gzMgJFGVgY2YAgwYGBmYBBgQISHNNYTjAoPSMl7nhfwNDDHMDQyNQmBEkxyzJLAikFBgYAZtYDRQAAHicY2BgYGaAYBkGRgYQuALkMYL5LAw7gLQWgwKQxcWgzKDKoMtgyWDLEMVQxVDDUMewiGEJw3KGNQwbGHYxXGP4xvBfQe0Z7\/\/\/QD1KQLVaDAZAtY4MiWC1C4FqlzGsYlgPVLuf4QbDD6Bahv\/\/\/z\/8\/+D\/nf+3\/l\/\/f+X\/uf9n\/5\/5v+r\/yv8r\/i\/7v+T\/7P\/T\/0\/7P\/VBvtQ0qNuIBIxsDHANjExAggldAYhgZmFgBdFs7BycDAxc3Dy8fPwCgkLCQCERIBYVE5eQlJKWkZWTV1BUUlZRVVPX0NTS1tHVg5ihb2BoZGxiamZuYWllbWNrZ+\/g6OTs4urm7sHgyeDFEB0Tl5CRW1ReVlFVWV1bX9fQ2NzU0tre2dHV093fN2EiQ4gPgz8DQynEsNg8JNcFhDLU9IZ5B4HYgQxTGcKjchCSU5D9EZkYkRSfkpqWnJXNkFlQmA8UCoZKAQB\/KWRSAAAAeJxjYEADaQzBQNzGoMi4C8xSArKlme3\/H2ayZ3b8f4HBkbnhfz0QH2a6yuz8fzOEDwCJzxHuAAB4nJ1VaXfTRhSVvCTO5rYkMRTRdszEKY1GJmzBgAtBiu1CujgQWgm6yElMF\/4AH\/tZv+YptOf0Iz+t946XhJae0zbH0rtv5s7b9N5EHCMqfR6Ia9SRktd9Ka0\/lVLnWVzXdS+LlfT7cV22E09Ji6iVJEqqncGRXKJa7SjZJNgk43U\/Vs9Vlg2UzPfjFCuKe\/NEW0RbqZcmSeKJ4yeJFqcfD5MkkIJRsFNqDBBCOerHUtahzOjQq9cTcdNAikYjHnWUlw9CxZ3jarmwUQeMVKYymMs3y41sL0773uBREusEe9uPY2x4jH7sKpCSkQpsz+Jx+EQyG+3FUon8Y8d1ojSU2vACeGWDPQZV6ByK2zlIdwKZmaw5vs4rpUaqOpkesGw2S8djJUR58DdxKMWGHuzg7KzJy+WOuAPgikFOCiWKHpIFoMNEFqg9grYALZA5o\/4oOQd8HcKLLEapylIlizrUgcyb3f04n3V3kjVZGuqXgSyY3b149\/Fo0atjfdmuL5rcWYqexPnSUgT3ocz5CdMuNMJxxvk8cL6Al7g1rRAysgCj1Agz1Ba+Kxt1jbMT7I3P47F6gkx6iL+Xyq8HJxXLHWdZ74gbiXP32HVduApkCeGUO\/uxI0s6VCms\/l6tus6iE4ZZmi+WfHnhexeRf5Vx+4G8Y3KX8l2TFyjfM3mR8ozJS5Q=","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":390,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7hAAEAGgEjAqAFpXbyG9ovhAFAJpBwdotOOz4AQAQPQCwAAAQEICgBBCkMDdg1b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2351{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":391,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":392,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7lAAEAGgEfAqAFpXbyG9ovhAFAJpBwdotOUa4AQARrKVwAAAQEICgBBCkQDdg1b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":393,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7pAAEAGgEbAqAFpXbyG9ovhAFAJpBwdotOaB4AQATDEpAAAAQEICgBBCkUDdg1b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2348{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":1502,"pkt":"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","pkt_caplen":1502,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"kDVu60UQeJKcD6iOCABFAAA0E7tAAEAGgEXAqAFpXbyG9ovhAFAJpBwdotOfo4AQAUe+6QAAAQEICgBBCk0Ddg1b","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":422,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGFnUvWUHlwKgBaQG7xo+u1rhnnywRAoASOQgi\/AAAAgQFqAEBBAIBAwMJ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0380{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":423,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoGylAAEAG7FfAqAFpL1lB5caPAbufLBECrta4aFAQAOWb5wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0522{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":157,"pkt":"eJKcD6iOkDVu60UQCABFAACPAABAAEARtqPAqAEBwKgBaQA1xdAAe7w5O9aBgAABAAMAAAAABmFjanN0YgZhbGl5dW4DY29tAAABAAHADAAFAAEAAAJYAAcEYWNqc8ATwC8ABQABAAABAAAhBGFjanMGYWxpeXVuA2NvbQNnZHMKYWxpYmFiYWRuc8AawEIAAQABAAAAbAAEKpy4Ew==","pkt_caplen":157,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":424,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":43,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"acjstb.aliyun.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"42.156.184.19"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8np1AAEAG913AqAFpKpy4E8wvAbt9EpT8AAAAAKACchBGkwAAAgQFtAQCCAoAQQphAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":426,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8jjVAAEAGB8bAqAFpKpy4E8wwAbsmFYRUAAAAAKACchCuNwAAAgQFtAQCCAoAQQphAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":166,"pkt":"eJKcD6iOkDVu60UQCABFAACYAABAAEARtprAqAEBwKgBaQA1hB4AhOXUkPeBgAABAAMAAAAABWxvZ2luBnRhb2JhbwNjb20AAAEAAcAMAAUAAQAAASwADAl3YWdicmlkZ2XAEsAuAAUAAQAAAMgAJgl3YWdicmlkZ2UGdGFvYmFvA2NvbQNnZHMKYWxpYmFiYWRuc8AZwEYAAQABAAAALwAEjM2qPw==","pkt_caplen":166,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":429,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1463089073289,"flow_last_seen":1463089073763,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":42,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"login.taobao.com","num_queries":1,"num_answers":3,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"140.205.170.63"}}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":1463089073764,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp"}
+0409{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":430,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8woBAAEAGfx3AqAFpjM2qP7ppAbuaKMjiAAAAAKACchCy\/gAAAgQFtAQCCAoAQQpiAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":435,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0AABAADEGjQneSRxgwKgBaQBQpSMt08jatYdf34ASOQjHwAAAAgQFqAEBBAIBAwMI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":436,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":54,"pkt":"kDVu60UQeJKcD6iOCABFAAAoVdlAAEAGKDzAqAFp3kkcYKUjAFC1h1\/fLdPI21AQAOVAqwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0956{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":482,"pkt":"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","pkt_caplen":482,"pkt_type":2048,"pkt_ipoffset":14}
+0812{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":437,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1463089073394,"flow_last_seen":1463089073773,"flow_tot_l4_data_len":540,"flow_min_l4_data_len":20,"flow_max_l4_data_len":448,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Sina(Weibo)","category":"SocialNetwork"},"http": {"hostname":"u1.img.mobile.sina.cn","url":"u1.img.mobile.sina.cn\/public\/files\/image\/620x300_img5653d57c6dab2.png","code":0,"content_type":"","user_agent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/50.0.2661.102 Safari\/537.36"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":1463089073788,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8M4FAAEAGYnrAqAFpKpy4E8wyAbubxznpAAAAAKACchCC5wAAAgQFtAQCCAoAQQpoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":1463089073789,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":441,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":74,"pkt":"kDVu60UQeJKcD6iOCABFAAA8F+ZAAEAGKbjAqAFpjM2qP7prAbvY7h2OAAAAAKACchAfhQAAAgQFtAQCCAoAQQpoAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":492,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","pkt_oversize":false,"pkt_ts":1463089073,"pkt_len":66,"pkt":"eJKcD6iOkDVu60UQCABFAAA0e6lAADgGIFddvIb2wKgBaQBQi+OyanX2+fqAX4AQAqSCEQAAAQEICgN2DmEAQQo9","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1463089073394,"flow_last_seen":1463089073773,"flow_tot_l4_data_len":540,"flow_min_l4_data_len":20,"flow_max_l4_data_len":448,"flow_avg_l4_data_len":135,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42275,"dst_port":80,"l4_proto":"tcp"}
+0518{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"222.73.28.96","src_port":42280,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1463089073286,"flow_last_seen":1463089073393,"flow_tot_l4_data_len":172,"flow_min_l4_data_len":47,"flow_max_l4_data_len":125,"flow_avg_l4_data_len":86,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":18035,"dst_port":53,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1463089070757,"flow_last_seen":1463089070841,"flow_tot_l4_data_len":86,"flow_min_l4_data_len":35,"flow_max_l4_data_len":51,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":54988,"dst_port":53,"l4_proto":"udp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1463089071730,"flow_last_seen":1463089071755,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1463089071730,"flow_last_seen":1463089071755,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.69","src_port":37802,"dst_port":443,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":15,"flow_packet_id":106,"flow_first_seen":1463089072445,"flow_last_seen":1463089073885,"flow_tot_l4_data_len":73299,"flow_min_l4_data_len":32,"flow_max_l4_data_len":4340,"flow_avg_l4_data_len":691,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35803,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":16,"flow_packet_id":72,"flow_first_seen":1463089072445,"flow_last_seen":1463089073773,"flow_tot_l4_data_len":51833,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2904,"flow_avg_l4_data_len":719,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35804,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":17,"flow_packet_id":41,"flow_first_seen":1463089072445,"flow_last_seen":1463089073819,"flow_tot_l4_data_len":21851,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":532,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35805,"dst_port":80,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":24,"flow_packet_id":13,"flow_first_seen":1463089073319,"flow_last_seen":1463089073551,"flow_tot_l4_data_len":4259,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":327,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35806,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":25,"flow_packet_id":53,"flow_first_seen":1463089073321,"flow_last_seen":1463089073852,"flow_tot_l4_data_len":34666,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":654,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35807,"dst_port":80,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":26,"flow_packet_id":3,"flow_first_seen":1463089073322,"flow_last_seen":1463089073383,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":26,"flow_packet_id":3,"flow_first_seen":1463089073322,"flow_last_seen":1463089073383,"flow_tot_l4_data_len":112,"flow_min_l4_data_len":32,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35808,"dst_port":80,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":27,"flow_packet_id":35,"flow_first_seen":1463089073334,"flow_last_seen":1463089073893,"flow_tot_l4_data_len":21171,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1468,"flow_avg_l4_data_len":604,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35809,"dst_port":80,"l4_proto":"tcp"}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":31,"flow_packet_id":5,"flow_first_seen":1463089073424,"flow_last_seen":1463089073885,"flow_tot_l4_data_len":574,"flow_min_l4_data_len":32,"flow_max_l4_data_len":430,"flow_avg_l4_data_len":114,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.246","src_port":35811,"dst_port":80,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1463089071994,"flow_last_seen":1463089072138,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Amazon","category":"Web"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":12,"flow_packet_id":2,"flow_first_seen":1463089071994,"flow_last_seen":1463089072138,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"54.225.163.210","src_port":40440,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1463089069330,"flow_last_seen":1463089069374,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1463089069330,"flow_last_seen":1463089069374,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58480,"dst_port":443,"l4_proto":"tcp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1463089070086,"flow_last_seen":1463089070131,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":2,"flow_packet_id":2,"flow_first_seen":1463089070086,"flow_last_seen":1463089070131,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.214.78","src_port":58481,"dst_port":443,"l4_proto":"tcp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":33,"flow_packet_id":4,"flow_first_seen":1463089073479,"flow_last_seen":1463089073635,"flow_tot_l4_data_len":312,"flow_min_l4_data_len":20,"flow_max_l4_data_len":220,"flow_avg_l4_data_len":78,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50827,"dst_port":443,"l4_proto":"tcp"}
+0507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":37,"flow_packet_id":3,"flow_first_seen":1463089073537,"flow_last_seen":1463089073759,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":37,"flow_packet_id":3,"flow_first_seen":1463089073537,"flow_last_seen":1463089073759,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"47.89.65.229","src_port":50831,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":1463089073764,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1463089073764,"flow_last_seen":1463089073764,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47721,"dst_port":443,"l4_proto":"tcp"}
+0509{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":1463089073789,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1463089073789,"flow_last_seen":1463089073789,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.170.63","src_port":47723,"dst_port":443,"l4_proto":"tcp"}
+0462{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":118,"flow_min_l4_data_len":40,"flow_max_l4_data_len":78,"flow_avg_l4_data_len":59,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53466,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":21,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073478,"flow_tot_l4_data_len":175,"flow_min_l4_data_len":38,"flow_max_l4_data_len":137,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":51440,"dst_port":53,"l4_proto":"udp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52271,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1463089073760,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52272,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":1463089073788,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1463089073788,"flow_last_seen":1463089073788,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"42.156.184.19","src_port":52274,"dst_port":443,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":14,"flow_packet_id":2,"flow_first_seen":1463089072333,"flow_last_seen":1463089072444,"flow_tot_l4_data_len":198,"flow_min_l4_data_len":41,"flow_max_l4_data_len":157,"flow_avg_l4_data_len":99,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":53543,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":18,"flow_packet_id":2,"flow_first_seen":1463089072885,"flow_last_seen":1463089073423,"flow_tot_l4_data_len":196,"flow_min_l4_data_len":40,"flow_max_l4_data_len":156,"flow_avg_l4_data_len":98,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":41352,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1463089073424,"flow_last_seen":1463089073424,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":16804,"dst_port":53,"l4_proto":"udp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1463089072046,"flow_last_seen":1463089072070,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":13,"flow_packet_id":2,"flow_first_seen":1463089072046,"flow_last_seen":1463089072070,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.212.65","src_port":34699,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48352,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1463089073488,"flow_last_seen":1463089073488,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48353,"dst_port":443,"l4_proto":"tcp"}
+0508{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1463089073537,"flow_last_seen":1463089073537,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"140.205.174.1","src_port":48356,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":9,"flow_packet_id":2,"flow_first_seen":1463089071551,"flow_last_seen":1463089071612,"flow_tot_l4_data_len":147,"flow_min_l4_data_len":39,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":73,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":7148,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1463089073289,"flow_last_seen":1463089073763,"flow_tot_l4_data_len":174,"flow_min_l4_data_len":42,"flow_max_l4_data_len":132,"flow_avg_l4_data_len":87,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":33822,"dst_port":53,"l4_proto":"udp"}
+0514{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":0,"flow_packet_id":9,"flow_first_seen":1463089067804,"flow_last_seen":1463089068491,"flow_tot_l4_data_len":1638,"flow_min_l4_data_len":43,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp","ndpi": {"proto":"Google","category":"Web"}}
+0467{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":0,"flow_packet_id":9,"flow_first_seen":1463089067804,"flow_last_seen":1463089068491,"flow_tot_l4_data_len":1638,"flow_min_l4_data_len":43,"flow_max_l4_data_len":626,"flow_avg_l4_data_len":182,"midstream":0,"l3_proto":"ip4","src_ip":"216.58.210.14","dst_ip":"192.168.1.105","src_port":443,"dst_port":49361,"l4_proto":"udp"}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":5,"flow_packet_id":9,"flow_first_seen":1463089070841,"flow_last_seen":1463089071891,"flow_tot_l4_data_len":1293,"flow_min_l4_data_len":20,"flow_max_l4_data_len":655,"flow_avg_l4_data_len":143,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59119,"dst_port":80,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1463089070841,"flow_last_seen":1463089071198,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1463089070841,"flow_last_seen":1463089071198,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59120,"dst_port":80,"l4_proto":"tcp"}
+0519{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1463089071008,"flow_last_seen":1463089071348,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1463089071008,"flow_last_seen":1463089071348,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":20,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":30,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"114.134.80.162","src_port":59121,"dst_port":80,"l4_proto":"tcp"}
+0515{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1463089071046,"flow_last_seen":1463089071094,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1463089071046,"flow_last_seen":1463089071094,"flow_tot_l4_data_len":64,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.206","src_port":35154,"dst_port":443,"l4_proto":"tcp"}
+0516{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":3,"flow_packet_id":14,"flow_first_seen":1463089070755,"flow_last_seen":1463089072356,"flow_tot_l4_data_len":1698,"flow_min_l4_data_len":33,"flow_max_l4_data_len":399,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"Google","category":"Web"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":3,"flow_packet_id":14,"flow_first_seen":1463089070755,"flow_last_seen":1463089072356,"flow_tot_l4_data_len":1698,"flow_min_l4_data_len":33,"flow_max_l4_data_len":399,"flow_avg_l4_data_len":121,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"216.58.210.227","src_port":53656,"dst_port":443,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1463089073479,"flow_last_seen":1463089073479,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50533,"dst_port":53,"l4_proto":"udp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":10,"flow_packet_id":79,"flow_first_seen":1463089071613,"flow_last_seen":1463089072438,"flow_tot_l4_data_len":34806,"flow_min_l4_data_len":32,"flow_max_l4_data_len":2904,"flow_avg_l4_data_len":440,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"93.188.134.137","src_port":51698,"dst_port":80,"l4_proto":"tcp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":20,"flow_packet_id":2,"flow_first_seen":1463089073287,"flow_last_seen":1463089073760,"flow_tot_l4_data_len":166,"flow_min_l4_data_len":43,"flow_max_l4_data_len":123,"flow_avg_l4_data_len":83,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":50640,"dst_port":53,"l4_proto":"udp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1463089073394,"flow_last_seen":1463089073394,"flow_tot_l4_data_len":43,"flow_min_l4_data_len":43,"flow_max_l4_data_len":43,"flow_avg_l4_data_len":43,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.105","dst_ip":"192.168.1.1","src_port":11798,"dst_port":53,"l4_proto":"udp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":498,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/weibo.pcap"}
diff --git a/tests/result/nDPId_whatsapp_login_call.pcap.txt b/tests/result/nDPId_whatsapp_login_call.pcap.txt
new file mode 100644
index 000000000..4222b2829
--- /dev/null
+++ b/tests/result/nDPId_whatsapp_login_call.pcap.txt
@@ -0,0 +1,535 @@
+0371{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1432582222253,"flow_last_seen":1432582222253,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.70","src_port":49199,"dst_port":993,"l4_proto":"tcp"}
+0408{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0DNdAAEAG9U7AqAIEEaxkRsAvA+GIPSCcUlOPyIAQH\/poTQAAAQEICi36Gt0QlQ1l","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0641{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":236,"pkt":"xiwDYGpkAPS5Jrv0CABFAADeU1tAAEAGriDAqAIEEaxkRsAvA+GIPSCcUlOPyIAYIAB\/kgAAAQEICi36GusQlQ1lFwMBACCNqYpymgjJuQNgLA+QJekfsmHWqykdlwnJ8t48lRIpCxcDAQCAv+6eyOO6KHhFdGRnKCRyPqihrwnYLrpV5EXpUrXv8Q2ow7fiZ\/ErfHE9ZAprbeZEb1cjDczzZ9GWtg7wUDK1rjYT+gKbhCMZiNQZ3QlWly2tQPPw5M7rqWdzOWy2ATMXqxCkXOBCTdOBYD70ikDCSIjo2fZ8\/cJDhiGvSnc\/9Rw=","pkt_caplen":236,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5UAAC8G15ARrGRGwKgCBAPhwC9SU4\/IiD0hRoAQAJuGIAAAAQEIChCVDjkt+hrr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":151,"pkt":"APS5Jrv0xiwDYGpkCABFAACJe5YAAC8G1zoRrGRGwKgCBAPhwC9SU4\/IiD0hRoAYAJui9AAAAQEIChCVDnQt+hrrFwMBAFAOU4Dqrk0xBR8mTKZ422FaiS6lEkMOmtTZ8SKUcLM58+Kde7t8MXre7pdm72xwkZJWc\/nmuQtIaS\/7arXyG1nGCW2zfHgJjrWZGH2fMy05sw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0LtRAAEAG01HAqAIEEaxkRsAvA+GIPSFGUlOQHYAQH\/plZQAAAQEICi36G7cQlQ50","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0595{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":204,"pkt":"xiwDYGpkAPS5Jrv0CABFAAC+CfJAAEAG96nAqAIEEaxkRsAvA+GIPSFGUlOQHYAYIABX0gAAAQEICi36G8gQlQ50FwMBACANZfGYQ88qtODxZiPbJprCDuhmOwTOtFhb37u6pJDubhcDAQBg18cYHnGgxx79FzMJhZ1kYBx4ySa3+6qAIy09\/jRI9YobDgpMUb8Gy7mMJrOl\/rLU9qYq6YN6TSRbTUxWVVaAilbdUrcZ0AqXspFnQn5N9uWE6Z+mCSy5WHFSBem737mu","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5cAAC8G144RrGRGwKgCBAPhwC9SU5AdiD0h0IAQAKSDfQAAAQEIChCVDxct+hvI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":151,"pkt":"APS5Jrv0xiwDYGpkCABFAACJe5gAAC8G1zgRrGRGwKgCBAPhwC9SU5AdiD0h0IAYAKRk0QAAAQEIChCVD4wt+hvIFwMBAFDKwGQ6oPL1AqAzz9olNE\/BCp+LSiypQUfAybDHjel0k1dV+mvh40HlsRaOR2LY8+JOfjJkuvEr+myDxw3cWJkZ8M9SMz\/mp13w4MGi44bYEA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0NJRAAEAGzZHAqAIEEaxkRsAvA+GIPSHQUlOQcoAQH\/piSgAAAQEICi36HNsQlQ+M","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0577{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":188,"pkt":"xiwDYGpkAPS5Jrv0CABFAACubVhAAEAGlFPAqAIEEaxkRsAvA+GIPSHQUlOQcoAYIAALiQAAAQEICi36HOcQlQ+MFwMBACAgbcxfMtSMptXez+uFE3m0Fa9f+MvPaieXp+0HsrzB5xcDAQBQqEtZ\/BPiWJJLS\/IvF1CQEdfg1vmVOXSagSxz6MiQdHpkQKoW2APbnF7RjulfWlw6JLGwKyvtR6WajfngNPxtRt4UOnYSsLx+it790xhsnCM=","pkt_caplen":188,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5kAAC8G14wRrGRGwKgCBAPhwC9SU5ByiD0iSoAQAKSAbQAAAQEIChCVEDkt+hzn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":151,"pkt":"APS5Jrv0xiwDYGpkCABFAACJe5oAAC8G1zYRrGRGwKgCBAPhwC9SU5ByiD0iSoAYAKSgIQAAAQEIChCVEHEt+hznFwMBAFCtvnfrK9W8csZyaRAqhhwM779PgNd13t6vk7iEynuhQJQYVoJiyLFZrJoCWOuxGMkITWEMbq3652zhoLq6TizXutNWuKDwXoHBir8QQWsZJg==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0BYdAAEAG\/J7AqAIEEaxkRsAvA+GIPSJKUlOQx4AQH\/pfwQAAAQEICi36HbAQlRBx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0558{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582222,"pkt_len":172,"pkt":"xiwDYGpkAPS5Jrv0CABFAACe5npAAEAGG0HAqAIEEaxkRsAvA+GIPSJKUlOQx4AYIAAD\/gAAAQEICi36HbkQlRBxFwMBACA\/7+3k7ZQjshHNa4itk6LszWuSq0aRWA5QYTHlnF6tcxcDAQBAYDyOCcbXfuBhhdQ6FBKZ7lY374AO+D+PP\/LzHlV4aO1uUVyhZ6T4rrDUq0Bl+2rt3zsLYU4a2Cg7iD82mR9Elw==","pkt_caplen":172,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582223075,"flow_last_seen":1432582223075,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.121","src_port":49166,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoimtAAEAGmaXAqAIEEZpCecAOAbvaSAv6foHOKFARQABkXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432582223077,"flow_last_seen":1432582223077,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.111","src_port":49163,"dst_port":443,"l4_proto":"tcp"}
+0393{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAowYpAAEAGYpDAqAIEEZpCb8ALAbvQPf\/UHJzPWVARQADbTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0e5sAAC8G14oRrGRGwKgCBAPhwC9SU5DHiD0itIAQAKR+CgAAAQEIChCVEQst+h25","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo1rsAAPAG3V4RmkJvwKgCBAG7wAscnM9Z0D3\/1VARCf8RTwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAos7EAAPAGAF8RmkJ5wKgCBAG7wA5+gc4o2kgL+1ARCf+aXQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoD6pAAEAGFHHAqAIEEZpCb8ALAbvQPf\/VHJzPWlAQQADbTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582223,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo\/GpAAEAGJ6bAqAIEEZpCecAOAbvaSAv7foHOKVAQQABkXAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432582224208,"flow_last_seen":1432582224208,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49169,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoKQFAAEAG+w\/AqAIEEa1CZsARAbueE\/YokxpP+1ARQAAf9QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432582224210,"flow_last_seen":1432582224210,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.82","src_port":49173,"dst_port":80,"l4_proto":"tcp"}
+0409{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA05xtAAEAGq+\/AqAIEXbqHUsAVAFCuhm774V0pFoARIEWaRQAAAQEICi36IndY+IKz","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582224230,"flow_last_seen":1432582224230,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"23.50.148.228","src_port":49172,"dst_port":443,"l4_proto":"tcp"}
+0408{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA05uBAAEAG5SDAqAIEFzKU5MAUAbtLz6It0ZnyqIARIAAW8QAAAQEICi36IooRXfsX","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0470{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582224235,"flow_last_seen":1432582224235,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"5.178.42.26","src_port":49174,"dst_port":80,"l4_proto":"tcp"}
+0408{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0IU9AAEAGJv3AqAIEBbIqGsAWAFB5Ls3ledN1n4ARIFCQkQAAAQEICi36Io9kkidZ","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0pWwAADkGNJ9duodSwKgCBABQwBXhXSkWroZu\/IARAeZAKgAAAQEIClj4+ywt+iJ3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA06DdAAEAGqtPAqAIEXbqHUsAVAFCuhm784V0pF4AQIEUhrwAAAQEICi36IpNY+Pss","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":151,"pkt":"APS5Jrv0xiwDYGpkCABFAACJJDcAADkG7nUXMpTkwKgCBAG7wBTRmfKoS8+iLoAYAghwjQAAAQEIChFecist+iKKFQMDAFAv7dNuXnOpK1CdvNYEt52MdeH58dywqIMfN+GfFSQKoHdGcEPHPIYnDd6I8bRCtU0lSoikjPCdTCArNmgRywMWXqpqGQcfgITTy3erXmajWw==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JDgAADkG7skXMpTkwKgCBAG7wBTRmfL9S8+iLoARAgi9fgAAAQEIChFecist+iKK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLH4AAEAG34\/AqAIEFzKU5MAUAbtLz6IuAAAAAFAEAACRUAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAob+UAAEAGnCjAqAIEFzKU5MAUAbtLz6IuAAAAAFAEAACRUAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0UnIAADkGPNoFsioawKgCBABQwBZ503WfeS7N5oARAeY3ugAAAQEICmSSnpkt+iKP","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0QQVAAEAGB0fAqAIEBbIqGsAWAFB5Ls3medN1oIAQIFAZNgAAAQEICi36Iqlkkp6Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAopJIAAO4GEX4RrUJmwKgCBAG7wBGTGk\/7nhP2KVARCf9V9QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582224,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoVthAAEAGzTjAqAIEEa1CZsARAbueE\/YpkxpP\/FAQQAAf9AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582225313,"flow_last_seen":1432582225313,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.53","src_port":49175,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAobpJAAEAGk7DAqAIEEaxkNcAXAbvFrXCYlCt1nlAR\/\/91YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582225324,"flow_last_seen":1432582225324,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.55","src_port":49165,"dst_port":443,"l4_proto":"tcp"}
+0394{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoYhRAAEAGoCzAqAIEEaxkN8ANAbtmBk0BJP5uJ1AR\/\/9vTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432582225329,"flow_last_seen":1432582225329,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.130.137.77","src_port":49176,"dst_port":443,"l4_proto":"tcp"}
+0392{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoYhlAAEAGezvAqAIEEYKJTcAYAbvMgisCtJzpXFARQAC7BQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAohYkAAPIG5coRgolNwKgCBAG7wBi0nOlczIIrA1AREADrBAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoSmNAAEAGkvHAqAIEEYKJTcAYAbvMgisDtJzpXVAQQAC7BAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAocjAAAO8GIRIRrGQ1wKgCBAG7wBeUK3Wexa1wmVARn\/7VYwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoqzoAAO4G6QURrGQ3wKgCBAG7wA0k\/m4nZgZNAlARn\/7PTgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoGflAAEAG6EnAqAIEEaxkNcAXAbvFrXCZlCt1n1AQ\/\/91YgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582225,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAooItAAEAGYbXAqAIEEaxkN8ANAbtmBk0CJP5uKFAQ\/\/9vTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432582227526,"flow_last_seen":1432582227526,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp"}
+0429{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":79,"pkt":"xiwDYGpkAPS5Jrv0CABFAABBdxsAAEARfjvAqAIEwKgCAcq5ADUALb4mNPgBAAABAAAAAAAABXF1ZXJ5A2VzcwVhcHBsZQNjb20AAAEAAQ==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432582227526,"flow_last_seen":1432582227526,"flow_tot_l4_data_len":45,"flow_min_l4_data_len":45,"flow_max_l4_data_len":45,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"query.ess.apple.com","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0659{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":251,"pkt":"APS5Jrv0xiwDYGpkCABFAADtqMoAAEARS+DAqAIBwKgCBAA1yrkA2SFYNPiBgAABAAkAAAAABXF1ZXJ5A2VzcwVhcHBsZQNjb20AAAEAAcAMAAUAAQAASFYAIAVxdWVyeQllc3MtYXBwbGUDY29tBmFrYWRucwNuZXQAwDEAAQABAAAAOwAEEbJoDMAxAAEAAQAAADsABBGyaA7AMQABAAEAAAA7AAQRsmgnwDEAAQABAAAAOwAEEbJoJsAxAAEAAQAAADsABBGyaA3AMQABAAEAAAA7AAQRsmgPwDEAAQABAAAAOwAEEbJoC8AxAAEAAQAAADsABBGyaBA=","pkt_caplen":251,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1432582227526,"flow_last_seen":1432582227594,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Apple","category":"Web"},"dns": {"query":"query.ess.apple.com","num_queries":1,"num_answers":9,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"17.178.104.12"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432582227595,"flow_last_seen":1432582227595,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp"}
+0426{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":76,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA+I5EAAEAR0cjAqAIEwKgCAcveADUAKv\/L36MBAAABAAAAAAAAA2UxMwh3aGF0c2FwcANuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0659{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432582227595,"flow_last_seen":1432582227595,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"e13.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432582227604,"flow_last_seen":1432582227604,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":78,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAZF5AAEAGme\/AqAIEEbJoDMAxAbvjm5\/WAAAAALAC\/\/9XjAAAAgQFtAEDAwQBAQgKLfovrgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0597{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":204,"pkt":"APS5Jrv0xiwDYGpkCABFAAC+d\/oAAEARfN\/AqAIBwKgCBAA1y94AqhSs36OBgAABAAgAAAAAA2UxMwh3aGF0c2FwcANuZXQAAAEAAcAMAAEAAQAAC20ABJ5V6TTADAABAAEAAAttAASeVTpKwAwAAQABAAALbQAEuK2zJ8AMAAEAAQAAC20ABJ5VOnfADAABAAEAAAttAAS4rbMlwAwAAQABAAALbQAEnlU6M8AMAAEAAQAAC20ABK4k0i3ADAABAAEAAAttAASeVQXI","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0676{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1432582227595,"flow_last_seen":1432582227624,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":42,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"e13.whatsapp.net","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"158.85.233.52"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1432582227643,"flow_last_seen":1432582227643,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"184.173.179.37","src_port":49202,"dst_port":5222,"l4_proto":"tcp"}
+0427{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":78,"pkt":"xiwDYGpkAPS5Jrv0CABFAABACXVAAEAGAsTAqAIEuK2zJcAyFGaCPuKZAAAAALAC\/\/9xPwAAAgQFtAEDAwQBAQgKLfov1AAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":74,"pkt":"APS5Jrv0xiwDYGpkCABFAAA8rYsAADQGqrG4rbMlwKgCBBRmwDLYm8Xcgj7imqAS\/\/9JMQAAAgQFrAEDAwkEAggKD\/GKmy36L9Q=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1432582227884,"flow_last_seen":1432582227884,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.14","src_port":49203,"dst_port":443,"l4_proto":"tcp"}
+0428{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":78,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAKwpAAEAG00HAqAIEEbJoDsAzAbunfDOjAAAAALAC\/\/\/+yQAAAgQFtAEDAwQBAQgKLfowvwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0779AAEAGHIXAqAIEuK2zJcAyFGaCPuKa2JvF3YAQIFhWrQAAAQEICi36MMYP8Yqb","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0rZoAAO4G4r4RsmgMwKgCBAG7wDE71dh745uf14ASH\/64\/gAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo79dAAEAGDo7AqAIEEbJoDMAxAbvjm5\/XO9XYfFAQQADZtwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0656{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582227,"pkt_len":244,"pkt":"xiwDYGpkAPS5Jrv0CABFAADm\/b5AAEAG\/+jAqAIEEbJoDMAxAbvjm5\/XO9XYfFAYQAAWUgAAFgMBALkBAAC1AwNVY3hTkWg+eTHwOUaw54SWwWf9D1HPpzrAyt\/Q2NH3agAASgD\/wCTAI8AKwAnACMAowCfAFMATwBLAJsAlwAXABMADwCrAKcAPwA7ADQBrAGcAOQAzABYAPQA8ADUALwAKwAfAEcACwAwABQAEAQAAQgAAABgAFgAAE3F1ZXJ5LmVzcy5hcHBsZS5jb20ACgAIAAYAFwAYABkACwACAQAADQAMAAoFAQQBAgEEAwIDM3QAAA==","pkt_caplen":244,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":12,"flow_packet_id":4,"flow_first_seen":1432582227604,"flow_last_seen":1432582227896,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":20,"flow_max_l4_data_len":210,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"query.ess.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0410{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0MLsAADQGJ4q4rbMlwKgCBBRmwDLYm8Xdgj7imoAQAgJ0EAAAAQEICg\/xi44t+jDG","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0UDkAAO4GQB4RsmgOwKgCBAG7wDON4auhp3wzpIASH\/48GwAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoC8AAAEAGMqTAqAIEEbJoDsAzAbunfDOkAAAAAFAEAADWZAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2340{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":1494,"pkt":"APS5Jrv0xiwDYGpkCABFAAXIrZwAAO4G3SgRsmgMwKgCBAG7wDE71dh845uglVAYCgbCZAAAFgMDDU4CAABNAwNVY3hUdBSmIsuRSfKUkSKfJawGUTPdCW2wlAc+B2NhsCAEgWdpsy6+A4+ZhL8Tkx4bi2N8e1FKAmfseEZ9Bgb9VAAEAAAF\/wEAAQALAAz1AAzyAAQuMIIEKjCCAxKgAwIBAgIIQV3GMSw7NA4wDQYJKoZIhvcNAQELBQAwbTEnMCUGA1UEAwweQXBwbGUgU2VydmVyIEF1dGhlbnRpY2F0aW9uIENBMSAwHgYDVQQLDBdDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTETMBEGA1UECgwKQXBwbGUgSW5jLjELMAkGA1UEBhMCVVMwHhcNMTUwNTA2MDEwOTQ3WhcNMTYwNjA0MDEwOTQ3WjBXMRgwFgYDVQQDDA8qLmVzcy5hcHBsZS5jb20xGTAXBgNVBAsMEElTRyBEZWxpdmVyeSBPcHMxEzARBgNVBAoMCkFwcGxlIEluYy4xCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aHlPz8zEr2\/OlryJSjAdm3sBeBzxOb\/IYmo5gsM\/DRfPN4PDf\/LrTFueEMTiR1M5eH6brzPM75EM9O6pYBeSfzTeLrmzkrQKWAysaI+eWoj+0wnQMFSNCiK1eEGkr56WF5QbZQwBgXQ7UW332Ww5HOZX7ppN9mzT+UcRSwZ+eJ1dFDZ46Ie+bEJOBHexWMO+bjrT6T5lFV0oxGUlGiQ98q6BwqpSmIGFuXz7+dKT+4GA0iO\/RHQmq65u82gk8zLaBnGTQJkGs5aM0NxfMtOiLhzTLaaEt6YpqlVE\/7HORmtYFJLNt4ZqIUGIEb3QhUF\/fhRt4KhGl5TGt58qtS9zwIDAQABo4HjMIHgMB0GA1UdDgQWBBTnAJO\/qk1G34wBscywcpJsl6a9yzAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFCzFbVLdMe+M7AiB7d\/cykMARQHQMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuYXBwbGUuY29tL2FwcGxlc2VydmVyYXV0aGNhMS5jcmwwDgYDVR0PAQH\/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMBoGA1UdEQQTMBGCDyouZXNzLmFwcGxlLmNvbTARBgsqhkiG92NkBhsEAgQCBQAwDQYJKoZIhvcNAQELBQADggEBAB8k4DiGeRhLlP0hiINVbMh3H\/n8I\/7a3QFwAzuim\/AqtI+nIHxJH9NO4z4fgiGpCmBe\/QTEz8LJghnPNsXdqhe0gJgoTFI0K4Zk73j1Y1F1yNiMcbd\/xxPUPif8gSiJElgVmq0j5wge8856CEIqaCvJHXfCSs\/S5UI5uLwzRe2Kt40codzp8blUE\/XjzKPR4zqaDMlWxOzMadpoEjn9BtvP9skUbgmpAX\/guSHB2LDg6qwkf8Y7BJnIo0mmhs0vmssvJlDDhl0pZUqjnW2QtO8df6+a\/l6hO8\/uod6Yasaqu86iEOd8YqJaCL68F6utzwMb9ZRPgkQL0Z\/oLSgCiMkAA\/wwggP4MIIC4KADAgECAggjaXQErcuDFDANBgkqhkiG9w0BAQsFADBiMQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEmMCQGA1UECxMdQXBwbGUgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNVBAMTDUFwcGxlIFJvb3QgQ0EwHhcNMTQwMzA4MDE1MzA0WhcNMjkwMzA4MDE1MzA0WjBtMScwJQYDVQQDDB5BcHBsZSBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0ExIDAeBgNVBAsMF0NlcnRpZmljYXRpb24gQXV0aG9yaXR5MRMwEQYDVQQKDApBcHBsZSBJbmMuMQsw","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1110{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":585,"pkt":"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","pkt_caplen":585,"pkt_type":2048,"pkt_ipoffset":14}
+1091{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":12,"flow_packet_id":7,"flow_first_seen":1432582227604,"flow_last_seen":1432582228181,"flow_tot_l4_data_len":3777,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":539,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"query.ess.apple.com","server_names":"*.ess.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5","issuerDN":"CN=Apple Server Authentication CA, OU=Certification Authority, O=Apple Inc., C=US","issuerDN":"CN=*.ess.apple.com, OU=ISG Delivery Ops, O=Apple Inc., C=US","fingerprint":"BD:E0:62:C3:F2:9D:09:5D:52:D4:AA:60:11:1B:36:1B:03:24:F1:9B"}}
+0393{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoyh1AAEAGNEjAqAIEEbJoDMAxAbvjm6CVO9XeHFAQP6bTswAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAocERAAEAGjiHAqAIEEbJoDMAxAbvjm6CVO9XjvFAQP0zObQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoNoZAAEAGx9\/AqAIEEbJoDMAxAbvjm6CVO9Xlz1AQPyrMfAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo9dRAAEAGCJHAqAIEEbJoDMAxAbvjm6CVO9Xlz1AQQADLpgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0756{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":321,"pkt":"xiwDYGpkAPS5Jrv0CABFAAEz02hAAEAGKfLAqAIEEbJoDMAxAbvjm6CVO9Xlz1AYQACwxgAAFgMDAQYQAAECAQDIayX5ZEqo1qjKYhdyEGA\/OiCn6ILW94+JGPEhgOQzSSDnvNCGi8y3yuKRWkYBBPSQKMh5lQARLBH5UCWrlCc85zv0asxv3cNBRmcZqvd4R854PQfkzedbgk2jp0nBjv3YFV6q1h5lNKm+abaKLwX+mdh8O9wPBdz0ADox0+zqIWw9JitsQSiPvptAMP2uAWPNsgvY6Vuyb\/9K7wi7fxmYt5+OypWMyHRXjcx+j7oH8CqfretEuMV5xfKW2Ipx6tH39erTK\/3m6F\/rYdALhF11zAntD6uRc9UrvvnxiXTVnG4xehvvcj0LoY5SyWDmbIpdVa8sTbrojMn7CfychKtm","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":60,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAuVNlAAEAGqYbAqAIEEbJoDMAxAbvjm6GgO9Xlz1AYQACyiQAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0446{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":91,"pkt":"xiwDYGpkAPS5Jrv0CABFAABNWmZAAEAGo9rAqAIEEbJoDMAxAbvjm6GmO9Xlz1AYQAATxgAAFgMDACA3Q1MaR5Nc353X8bvllgqbFo0TH+B3HGCqk6tLCTZrTg==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432582228503,"flow_last_seen":1432582228503,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.110.229.14","src_port":49193,"dst_port":5223,"l4_proto":"tcp"}
+2361{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":1506,"pkt":"xiwDYGpkAPS5Jrv0CABFAAXUnXJAAEAG3ojAqAIEEW7lDsApFGe4aEuG1IsaTIAQIAA3PgAAAQEICi36MxJvhmvfFwMBACDgnfLWgV8g\/pw7jjX\/\/3ZDH1tB+gK1jE9k\/rmu6RmKPhcDAQdQwvKiQZwynx6ML8uHDg8WgbZIBNPdSiBPAiHm7VZMSxjHJ7BGJ8hRCNCOXC6LyliytHBkvL\/WQAE0iyMMgIlOMed9vHW1FQrPwtxifubqT35jWP9Nwm9hOQ2sUXPF6J6ZcqeRRxjts4LAxUp+ZVHbqO88UycvtArFRoKmsjwuTsOHFL0h\/BX9z3nWEUxaS9mVyhudzOuBlhf3aNgcppeJ3Mr6DsSPYDWrJ1Ko6GUQ6Mz7WhKyRp+OhCR+8vNcJ+2CIpa9aPiStGZvZFFuJ5eoJiBK6lrgPDyxxPa\/Z82Zx7iZHY+\/ajmPTXvQU4j7rC5OlL\/ZO1JkHVVmXmK1\/n5cUDYPvmxuWKEEWDx8eNxgRC58OMj0i5sHQHDG+ZLwIW4R3Ebyfp++7DjTwhy7uHM9lVzOAa6qgVVbeWZWLm5Zp4udgSHyIGs6plbNOhN8Lb7TTV3BFKBjCbwxtnCR+8lPTlOVAewtoM48Z0qRSJODl9LDmyJOnkTl+LQlbM7hWhZq\/VVyYDivHB+RnYZFdt7ZvWbMsFi9dXD6LjMsdLkj0RU\/SFA5gXvUGWy9x04Yo\/WqRH7ng0WIs\/oAxdVKAH0RL\/egfgAwRrcRgu3dPMqb8b19+PmNfa+WFGFnW0JLuexKCM9POmeD5yw6nk\/ac9Raq2rKcykqXxndrastmOjTbplC4qeRqr0LASV9tRAtG4WvYwC\/dfTiBawq859mBNGrglJvult9KPMKQPFULDG6x+KBv4eYpxjRc54qoabZQMWqqc+\/C0Emvy+eYJXsquvu+83ilyZ2N5sYlJ92HKH8JfE8JTIg5o3c9zLm5ZWhw8+NmQMwd0i5bU9vg06cROWuAG\/JN1YaR0pdUTITubm5mlduwzPQc2BVmXII2GZu105+s7qlJpQzMmRVjoqYtbOeWHJKIQ4UQdZCqzpz4AcWUN7LNHzsfvI5B8mXgc+B7aL8Y8jc2YqBmFk1dHfnjKeYCxGmRBZHJy7WbY9uViabjXvTq6pmYIGh+8lsYGwBwhWNapwWuc8Bw0b65ZKVGVcMKolOabscbWi+EYPJjuvFKgqZscrMC1dXZUtfdGPsPdXUlxbBMQ2Kup7KMqRXjqDlL2rJPpRC\/J6FfjQ+IKNfM\/RVAKV8teQWPRPthAH1FIrtEy51cDQixMgza8uftMRBKRfqEYXF7XVD5164o\/Mck2RudrQlyQmifMkcXuuW1kb2sTQoTz3p0Ox09YvEjxH+5SXf2MqAQ5cwiqd8fGHwSVuprE4y5B+B+0nEsRucTP\/97X6ZaOAcSRCuPQgdHN1NHCSQ8002IEFsPCRXQaWhb\/8KMjfJXXs1I3Eouoy5fGg9Eon7zV6InzJDOtmcVxRzUBgfDR1DGBIMOusKSnnAX1htfNBhCsM31KRySVA9BnU7p8tKS\/3BfJCTQQBoGTP2MoOxAiFKkSgXEh3w0kC\/x4kpimxmzxtGXOOQBZWNBgxyNTYgb0Sf9nOE+sqmGbSG7xueIM5u7Dd864xcMPmVsE1VcOkz2PMHbXIHe+roLyX2aqyb6Yu22cChJiPbSlY+mRr9siD+E7u3KnznXJcpEJBSd3utMm4QryOQBR9FCdalU2IyjVmAb148IpK6Ghgjmw7oVrHdCZXaVw+zfL1FhqC9Bd1VFHiBGm211UlGgrjedJW7mv5NM2z0cPLUMCaZycFw6G4KQN6aDAE1rL1eqhrIxxsuhCw0HsrKiJLLdGsa1+3Rf\/uEKt1c0Ng9dAzkrCJEwEwHx3trkLyhj9\/ja7mEqYBSp5Sx0mCtwBbfi6wnI8gTgb3WlgH0Ha3ke8bRCbeKw4dCUR0GSPUQYm4lO6VKKERImy3aoUDOHbtquSKZKUtb1hVt","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1432582228503,"flow_last_seen":1432582228503,"flow_tot_l4_data_len":1472,"flow_min_l4_data_len":1472,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":1472,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.110.229.14","src_port":49193,"dst_port":5223,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","category":"Cloud"}}
+1055{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":540,"pkt":"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","pkt_caplen":540,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoraEAAO4G4sMRsmgMwKgCBAG7wDE71eXP45uhoFAQC17\/PQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":232,"pkt":"xiwDYGpkAPS5Jrv0CABFAADaxo9AAEAGRQ\/AqAIEuK2zJcAyFGaCPuKa2JvF3YAYIFhpewAAAQEICi36M4IP8YuOV0EBBQAAGvgFAaWRifwSaVBob25lLTIuMTIuMi01MjIyAAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAZvgGDFa\/tfwMMzkzNDczNDYxNzY4\/FDnfdSrPKM74AGKPNBrlW1TfHbZeaW2yRg64tGyV9Kd9BO9DsNhrwFxgzcWR1a2B5R5W\/LKjd9DViwtNGRDni5Svuydo8TYyRQPuhQyiTrekA==","pkt_caplen":232,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":144,"pkt":"APS5Jrv0xiwDYGpkCABFAACCtBgAADQGo964rbMlwKgCBBRmwDLYm8Xdgj7jQIAYAgJM7wAAAQEICg\/xjlQt+jOCAAAF+AMBOpEAAAP4AZyAAD0m0VlB+8tWsbp0BQYWF+bMvoLZ\/WgG6u1TyCCzxwH20h0Q2jxNGSwJRTNrgjDsLTCDjuGenrlmDXZD4OyX","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JuMAAC8Gq7gRbuUOwKgCBBRnwCnUixpMuGhRJoAQAQ6R7QAAAQEICm+GjQ4t+jMS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JuQAAC8Gq7cRbuUOwKgCBBRnwCnUixpMuGhTAIAQASWP9wAAAQEICm+GjRMt+jMS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":13,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":87,"pkt":"APS5Jrv0xiwDYGpkCABFAABJxvEAADQGkT64rbMlwKgCBBRmwDLYm8Yrgj7jQIAYAgIZ+gAAAQEICg\/xjnct+jOCgAASjAEu4UAUjmQ3lBCQ4RaoVQTV","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":13,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0OkJAAEAG0gLAqAIEuK2zJcAyFGaCPuNA2JvGK4AQIFNOdAAAAQEICi36NFcP8Y5U","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":13,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA06wtAAEAGITnAqAIEuK2zJcAyFGaCPuNA2JvGQIAQIFFOPgAAAQEICi36NFcP8Y53","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":13,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582228,"pkt_len":267,"pkt":"xiwDYGpkAPS5Jrv0CABFAAD9i4lAAEAGf\/LAqAIEuK2zJcAyFGaCPuNA2JvGQIAYIFFGwwAAAQEICi36NOYP8Y53gADGy7ezkjAQkq2BWn3DEeSuFO95UwYjvqLdboW8kBNtdet+6zrs8gt1bSFJ52WMtyt\/i0InoiXkpyz82lfq0pzseBRJBSO4S4JyoYsjZYuoTu\/fTfMpcBbEQ8vcCc1rrEcLBobzNzhQEMg7yfWo2jePIaRujSbr5zBiiyJIVto3PR2jvUXzZVdFH7ya4jrEPe958l57A22+oLv2oeSEex3svE\/eHK1yFAJzgMk2QXKdiaSJA0USugNXB15U4s5WyxP2G\/ooe0Js","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0456{"flow_id":13,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":98,"pkt":"APS5Jrv0xiwDYGpkCABFAABUeGYAADQG3764rbMlwKgCBBRmwDLYm8ZAgj7kCYAYAgIJ9AAAAQEICg\/xj7wt+jTmgAAd\/b4OUEgsPXKQquzhDRfg9LXYbPQSxH7XJ2cUrOY=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":13,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":85,"pkt":"xiwDYGpkAPS5Jrv0CABFAABH0lZAAEAGOdvAqAIEuK2zJcAyFGaCPuQJ2JvGYIAYIE\/KHQAAAQEICi36NesP8Y+8gAAQUZbxCnaKOgXzScuiFSl9qQ==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1608{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":940,"pkt":"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","pkt_caplen":940,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":13,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":87,"pkt":"APS5Jrv0xiwDYGpkCABFAABJB+4AADQGUEK4rbMlwKgCBBRmwDLYm8Zggj7kHIAYAgKvvwAAAQEICg\/xkMAt+jXrgAASm4j1WJUFo7RZpsPza25blijr","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":13,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0mdJAAEAGcnLAqAIEuK2zJcAyFGaCPuQc2JvGdYAQIE5IwAAAAQEICi36Nn4P8ZDA","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0652{"flow_id":13,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":241,"pkt":"xiwDYGpkAPS5Jrv0CABFAADjnHlAAEAGbxzAqAIEuK2zJcAyFGaCPuQc2JvGdYAYIE7sWwAAAQEICi36Nt4P8ZDAgACsw3VabUs0KW3Wx2tw4Qp1Cg+MPojgHGLiSPqnvoLwqYbzRsSlV3q2Dwl5TNhLqa6IqC63M49S2INfT8ex9swMj0Jt1fkTJ3wiL+Uzm7Jg8zszjXNvlhpkBzhzeTTkKxu7\/dogZTDbYv4+fOLZhjkuaaMRSk\/eUI3w\/Ey63SeOnjfvfpltJdJ9Ae+6SDykZEHVLCo3vG8uccnbnjaYEfpbqE2Zg4P0veGYbO3mXg==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JuUAAC8Gq7YRbuUOwKgCBBRnwCnUixpMuGhWaoAQATuGBgAAAQEICm+GkEot+jZM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0465{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":103,"pkt":"APS5Jrv0xiwDYGpkCABFAABZJuYAAC8Gq5ARbuUOwKgCBBRnwCnUixpMuGhWaoAYATuNjgAAAQEICm+GkEst+jZMFwMBACBjANhOrz6MBEcuqr\/94gpfQghrMUjVutkJayHkJQ7Utw==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA04fdAAEAGn6PAqAIEEW7lDsApFGe4aFZq1IsacYAQH\/1l6QAAAQEICi36N4FvhpBL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1596{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":940,"pkt":"xiwDYGpkAPS5Jrv0CABFAAOeaNNAAEAGFV7AqAIEEW7lDsApFGe4aFZq1IsacYAYIACpTwAAAQEICi36OA1vhpBLFwMBACAY\/mkSB+KYEbiQogzGc3sDxtd0hGa0Aob93QYa2L5gWxcDAQNA2QZirFYKG26TmUe3BXOrrgmEU9nUcefy6JgSwQpwcCo4FjVCP8cMTkAmvLs\/G7w9PEBZVwrVMybv2U8qIJHYouOKGi4FG+JjgOp1Ouca1FbrShbHIGENiQ6vUGESwH4FoOWtSsuxkrm6f6s1l50xREGyOUz7iaX0k6ZID4SxossDMGtwCYo1Q3f5qrHvemf9KFyTdmmx2wF9NlZFOhqF\/oDUWmklRTnZFKseu4Ko7IB05\/R2\/mXoNVT+VT+Iih3zzRZRQoyPmpwasPM8eXFMFcG1geQReT55QCDiERyT+uz5N77yFCAGyi6SQrVscYOWsmcoovyY2dINpUxHvo1H2uz0uswJJgJabe\/YoW2DDKaiQOtjXNerLABQLZUWMII\/jdofX6Er02dThdCiA3+5pHhV3ZUcFfb\/O9Q3uJEeVzxmh7eOqDON9cDffxR7O8pVnzZmA8I0zrdychV0LgQcg\/BIBQbX05iw8SQojWg6fWejKKFglwcVslzlM\/xXGC4xgwtDU2CmG75\/QVNIwNn\/Gl4Yz7D4Se4Ls2LRNmNONzY3Ix7OQPfNKUhbz6w9HLqCPwFHt4HWF7kGwaacCoPb2DMuW92fXaeWwzk2iK4ekNVOorozD6Nr10CGdVTbOh1amXZOz\/5AbFLmZUCQ0XJ9Cgbt263bCNlyX+IPOK5YR8x9Xqj8rZTd+N22EB9JUcDE9rI1OKa6ayyGOXoKd6uuKI26IjpPZs0dHUaWywfbrTJ8LVTz9v9hSiotRdSBtCDas72sCqYenc60llgy9dsYW2sf9myrIJq57aS1sHsj3rTqx4abVFavZaxMFzhrpv0CAD1NgTGSid8rTXz9i99PdKYvyNb5CjCX6TBU2C9gAIlvBHOWqeWz6WtVr6Ls108ZjUz6MSNY+NSbWrHrByM9t8D+vHwazemVGfLXBGfEtVIrplh2wPvZxmmjtKugidR7\/7Q6h7CYL3dQpuuNehvVKgaNxJyA+UQIVk06AY0kjIFuijRLcnxBjWn4qHNyWaBYiRWNgz6MWAmhl\/9l2r2twYpEOKWsOyZK9\/8EF+ZL8QVDVXHz1SJB+aRwEfCS0qBt3MXwNwkbdddZHsb1ruUKdQ==","pkt_caplen":940,"pkt_type":2048,"pkt_ipoffset":14}
+0681{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":263,"pkt":"APS5Jrv0xiwDYGpkCABFAAD5JucAAC8Gqu8RbuUOwKgCBBRnwCnUixpxuGhWaoAYATtYIAAAAQEICm+GkWIt+jeBFwMBAMDZ7E6sZ7cccN\/EEjBpWRuD2Gh313X5mXcEOAYXOhcl83gS+B\/p1uYaye9IrqI5nZxurP+TzkH8r0GOV4NC+1aGFsMvixVBpJQ4Urunwhqa3UdyYuF9fFjRtWjwfFa9M0zh9DeDQjocLYHBYo5gxNNTjNC6oR7fnXD1I\/d9RoPfsjnv4gf8PTi68GbkzUkljW+WzijqgM+F4myD\/6L9HP8RgVJcNt9nGV+BTKZ6tQBrNtN9zanB0F0hNWY7eWxTJ7s=","pkt_caplen":263,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582229,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0cTJAAEAGEGnAqAIEEW7lDsApFGe4aFnU1IsbNoAQH\/NfdAAAAQEICi36OLpvhpFi","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0JugAAC8Gq7MRbuUOwKgCBBRnwCnUixs2uGhZ1IAQAUl+DAAAAQEICm+GkiEt+jgN","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0534{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":156,"pkt":"xiwDYGpkAPS5Jrv0CABFAACOOwNAAEAGRj7AqAIEEW7lDsApFGe4aFnU1IsbNoAYIABSOgAAAQEICi36OXlvhpIhFwMBACBYGpMgxLI\/XOlvDAO1YmBcJuuAqZND0LWK6E2nesgBchcDAQAwGK4hHmiB9gR3xDxlj3xXanaYSvfNpgsrWjqiCYvT+mpqxvi3OYqgTKjf9iJyrVxa","pkt_caplen":156,"pkt_type":2048,"pkt_ipoffset":14}
+0728{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":300,"pkt":"APS5Jrv0xiwDYGpkCABFAAEeJukAAC8GqsgRbuUOwKgCBBRnwCnUixs2uGhZ1IAYAUkTjwAAAQEICm+GkqEt+ji6FwMBACDfcHM4dLo++G90ERAFFxzA222gLV2VS4glm957e0qOUhcDAQDAZ9x1fq9BnzAIDFQdn8QUIu\/zzjVU031GhI4CjUFGJaIOPA5INw42aR2LN+lHAxXoHM0+waT2ktoqx8f6PnoFzitPiZWZrKwMW8JuL\/OGDiDBMAiZTfaeyB5EQNXDVfkkEuTAXfG1h5fPTAYw5xsO8bUUWBQW9V7PO\/A8IBaSFDBI1TVa2GWzyEiu0UW5DGF+z9cX2afRExak8V7zquk1H0QLWF9VMvSFKkFlVbX1AqL86NmHxKhdXXuk+LjgXy+o","pkt_caplen":300,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0FmJAAEAGaznAqAIEEW7lDsApFGe4aFou1IscIIAQH\/Fb\/wAAAQEICi36Oa5vhpKh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1432582230648,"flow_last_seen":1432582230648,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":78,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAZppAAEAGvV7AqAIEEa1CZsA0AbuMr4Y\/AAAAALAC\/\/\/iDQAAAgQFtAEDAwQBAQgKLfo7WAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0jEsAAO8GKLkRrUJmwKgCBAG7wDR81DyUjK+GQIASH\/6qEgAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":16,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLotAAEAG9YXAqAIEEa1CZsA0AbuMr4ZAfNQ8lVAQQADKywAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0702{"flow_id":16,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582230,"pkt_len":281,"pkt":"xiwDYGpkAPS5Jrv0CABFAAELd3hAAEAGq7XAqAIEEa1CZsA0AbuMr4ZAfNQ8lVAYQADmeAAAFgMBAN4BAADaAwNVY3hWzpRvQb4tQBJl4xyEq38xvRpwxqpjBZECV8GAECDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAABHAAAAHQAbAAAYcDUzLWJ1eS5pdHVuZXMuYXBwbGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0776{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":16,"flow_packet_id":4,"flow_first_seen":1432582230648,"flow_last_seen":1432582230862,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0395{"flow_id":16,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAojFMAAO8GKL0RrUJmwKgCBAG7wDR81DyVjK+HI1AQCgL\/5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_id":16,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":146,"pkt":"APS5Jrv0xiwDYGpkCABFAACEjFUAAO8GKF8RrUJmwKgCBAG7wDR81DyVjK+HI1AYCgJANgAAFgMDAFECAABNAwNVY3hWI039rq0zERKUON6sjGVDSZCqKie+A5zCjAoXmyDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVAAEAAAF\/wEAAQAUAwMAAQE=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":16,"flow_packet_id":6,"flow_first_seen":1432582230648,"flow_last_seen":1432582231003,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0447{"flow_id":16,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":149,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":91,"pkt":"APS5Jrv0xiwDYGpkCABFAABNjFcAAO8GKJQRrUJmwKgCBAG7wDR81DzxjK+HI1AYCgJAMgAAFgMDACBiB\/EBcHJhTjzTzrwx1GVDilcgFXEF0qJick8c0ufuiA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":16,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":150,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo6VVAAEAGOrvAqAIEEa1CZsA0AbuMr4cjfNQ88VAQP\/rJkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":16,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":151,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoUvNAAEAG0R3AqAIEEa1CZsA0AbuMr4cjfNQ9FlAQP\/fJcAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":152,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":60,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAulgZAAEAGjgTAqAIEEa1CZsA0AbuMr4cjfNQ9FlAYQACxVQAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0447{"flow_id":16,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":91,"pkt":"xiwDYGpkAPS5Jrv0CABFAABNFytAAEAGDMHAqAIEEa1CZsA0AbuMr4cpfNQ9FlAYQACRxAAAFgMDACDpSNsN+k7pEGWvTEDr9oMvFXB7oi2iembpqqbxsREpaA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+2349{"flow_id":16,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":154,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":1494,"pkt":"xiwDYGpkAPS5Jrv0CABFAAXIIwVAAEAG+2vAqAIEEa1CZsA0AbuMr4dOfNQ9FlAQQABIgwAAFwMDB3guHVVPGUCz\/ZGsP4DbmzExlxe\/I9m9sFAMb4OtRfC4TBuTQ76H2fvU5wSpus9lV9Pih4OA8672owEzMvbusd8wM5xZkE0Yk\/nqrp19Ik54glfbV8ZeulDRtMB3Hv9krD9yd1Zfn4PZEHWSqRX+qWLJ8DYUATtBufN4sWxWv42GMv+WA1dK5E1Bs\/ehXLtlcEXxbhnlr0za8OHaKw8rAh6v360kUhVGbgWO6mIsOoz\/CzlTvzwL8KQ0Mipv65EH3u3CYJCzLnpixc6QoYiypWS\/gvKZK8CdrmTgIKXLrkNOQU\/p2DIVWR+YwyNzcqmHhnosZMAt2iYmvHBFHBmNI2DRaTZBNe2UPzVDvguDJ\/7XpEdJNKOfRZWaOQefffmKo6kwNXIy3qUw6ENsHBJ4gd3MMSA820i7KiwGM6JObpk2YLsuipEolR06chIOc0ztT3N9SogSgxkSedoVousx9udnnkiszxPhyFY\/qtMl+VZ3zQFlpWjfHvbQyo+1MuXyxFv0loF2pj\/UTKZvKjf63a5Z8BphQN2TYj+aYWLAX4xUHaEZ0GdrN0rI3lHXpF5hXRfnoABsV6oMEZtsyDfG0OcvRiYXwWLLabRRcL7R0Yj58Kdo\/++sqwQ5m3Dw1O5muMoIh7Q07aR4jRwnPAoGt60+\/lvWsV8AWxC6NZIlOVL4EOuuXUa4prBe7XsklHAG6cMv+uEPUtsj9MJrFm\/\/cLPy13yxRx3Zg593dH05FZiMFyJqBNoVdBK15OybdX8m2tOabpLF1RvWvYn0wutj00Uj97\/xCVoZ+DY9b7MlLzw1RE4xJO9qY7W5fHz8z\/Uvv0jT0r+6mCi3DYwCRFe\/NxLC0fx8oajU\/wzmqfkGJxfbmfMHIpA2m7hDZt+W06dW6R0ivb4IoIyyTJcrMCQRgcklPoZgV+ZAaO5MvsmsJ3540slPnUaNxKCRJAlKWmlk\/QytxtSScnB6y\/TRN3NdOU+xu6NOXzz26tES3bJy+LXX7d+8hHmvdnql1j18BugnnyYCQH7mwXB5+4NIN9903x1FI4yJCIDkcCSlavj8\/TJhevIVY9DjI\/HuXfcxy+9KpPs2B2MNTzbEaWzAyZF2rZ3y5tvtwYPAkH0\/GkS8D7uWElIwPIY7QLlo9n3oEFmbV1UQya1CZ7BrXPdyLmHi3Q44Vps0lzoAOR83vS0yJckVktkM5q5MLNdWu+1dnYGywvvBOEjZhTTWNOcxawe+YrmQS1uMkdHji2mvVikZB7b\/M0MoVtOuoK6BopKTObMQqV+2mN6IJcjCrPDJbr3etKuhOFfV67FMXYbmVp9R\/SCL6y++OKyIkQeAgs8bMnuMH04kzmI1uZEDo3RHPYdNe8yTgEUHnZNsqLd5bXSSmQ5kyKAKGLllsGimFVwX7BfuiabhNqj4qgpRV0d8iAvmmFf4BtIsk9AidJcwc4oWmJTkwx5\/jjJhrqtB+R+VU7XVU2FmRFOFonxAroj2TplVbWhQn96kZ5eqC9O2n29OI5Ge7S7EhNOGNSPNSxMFED03AY8MCHtyR9B+4tI5BQJ2UArT9vy6ulS8rEhwNHGzTi6nfEL7Vbi2FLT9r9FFMGRM6NHxTiqerRBSV\/2OMC8NHyMxm7C\/B17e7YTQTilT7NOsVD6itcmJ0WSYzFh3Z6RPAMkp0xLtgjhEOGe+gZ84zwAjEZJZ+NgIVfqUyn+pSJKuZgI7+\/Tubfj1pbLOhkzt5TF+y1CNEaJXbvrRW8FX4YbyVP5ceGXsgQ2t49HIinve+HC6pfpFW2drVmAzXvZS+iBH0DYWaffuxXOx8IzFtjjSNyQiQumrN2k5zzDqREJzTgvNA2RXMANfLWD5tLkbT0Kn4Oba1zgCm\/At9kqNHo8XSGpz0LZPOwAbBrY3QhgwjzCW5fro8xeAdgcd","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1043{"flow_id":16,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":531,"pkt":"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","pkt_caplen":531,"pkt_type":2048,"pkt_ipoffset":14}
+1155{"flow_id":16,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":156,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":610,"pkt":"xiwDYGpkAPS5Jrv0CABFAAJUPRdAAEAG5M3AqAIEEa1CZsA0AbuMr47LfNQ9FlAYQAAyzQAAFwMDAicr2\/eRSJOi6Al3SvFD7yeMbcGmkKshkZydWdXNi38CQoQFoleJiJ3GVAaEaulr2sqQFK5f99oLGrq6URIcc2mnkAkxw47W7nOrfH9aB5ti8gELqQlT4VM93FJfi7h0ALg2zFe38WfXzMLUYLWvLP9vWNKg9ktkwHrmUl+yqVBb+hOofgAueUBhN7DMBypDEE+DL46DpMs18SLOf8kUrRJY7m3yMx4yVK7moXMEwip2JcNkfj0MO5Q6irN\/WwSqCiAEPPKCXKmOj2KsABowhoNAaoljb8dR8XeoaLe4W6GF0yRLyukctazZdIv2yOewLkR8it\/NvwbSz49lbTJHlGGlvu1g3Oos97uScf3Lpq0TDbeHQy93f4eD07VoRhgHDcb3Yf3m+W4TDEN9R5i1y5oFc\/He\/MikMvpw0hYvkLKDbq1r0GC5mV+O04YGE0QfJolQz9IQu292HEsMB8dic5HfYbdYG\/PAPuvI1M8FneaDa0hBDLzKV9\/2PmlVtpo\/Ywjc87k9L2jMmOQtOg9NnNmvFHNk8N5XB8DmI\/NMp7enfSmtodcKqhMGBWe3rMMfPYzt\/MyCjczYgf0aAZG+\/Si00O53ARuQX6+wCNAnsEN1jOxApcUe5dlIgT8E7ThuwBiSO8ozNltEUsSQRdyoWVjem+AaGTG9oUqn\/CpPzpsDECp5aL1ug0idhl\/eXHnX9F2kr66EkrD9kmz2KqklE3\/nONrmvqqnLw==","pkt_caplen":610,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":16,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582231,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAojFoAAO8GKLYRrUJmwKgCBAG7wDR81D0WjK+HKVAQC2n9+AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1432582233314,"flow_last_seen":1432582233314,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.8","src_port":49192,"dst_port":80,"l4_proto":"tcp"}
+0410{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0kh5AAEAGATfAqAIEXbqHCMAoAFBgmxszxhyTY4ARIABAdgAAAQEICi36RbdjLQIx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":17,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0ewoAADkGX0tduocIwKgCBABQwCjGHJNjYJsbNIAQAebnbwAAAQEICmMteVEt+kW3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":17,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0ewsAADkGX0pduocIwKgCBABQwCjGHJNjYJsbNIARAebnAQAAAQEICmMteb4t+kW3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":17,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0FgJAAEAGfVPAqAIEXbqHCMAoAFBgmxs0xhyTY4AQIADIcwAAAQEICi36RpljLXlR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":17,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0HhlAAEAGdTzAqAIEXbqHCMAoAFBgmxs0xhyTZIAQIADIBQAAAQEICi36RpljLXm+","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1432582233751,"flow_last_seen":1432582233751,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.49","src_port":49191,"dst_port":443,"l4_proto":"tcp"}
+0399{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoI\/dAAEAG3k\/AqAIEEaxkMcAnAbsMJFozPw\/LbVAR\/\/9EkwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo+xIAAO8GmDMRrGQxwKgCBAG7wCc\/D8ttDCRaNFARn\/6kkwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582233,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoy8lAAEAGNn3AqAIEEaxkMcAnAbsMJFo0Pw\/LblAQ\/\/9EkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1432582234869,"flow_last_seen":1432582234869,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.52","src_port":49182,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582234,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAohHZAAEAGfc3AqAIEEaxkNMAeAbsiAVkzu7svv1AR\/\/9OvgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582235,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoaq4AAO4GKZURrGQ0wKgCBAG7wB67uy+\/IgFZNFARn\/6uvgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":19,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582235,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAosCtAAEAGUhjAqAIEEaxkNMAeAbsiAVk0u7svwFAQ\/\/9OvQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1432582235998,"flow_last_seen":1432582235998,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.37","src_port":49181,"dst_port":443,"l4_proto":"tcp"}
+0397{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582235,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLkpAAEAG1AjAqAIEEaxkJcAdAbtiYuGVG2ODH1AR\/\/\/TAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1432582235999,"flow_last_seen":1432582235999,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.59","src_port":49180,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582235,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoEt9AAEAG713AqAIEEaxkO8AcAbueodpQe0gK3VAR\/\/+2UAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582236,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoyysAAO8GyCYRrGQlwKgCBAG7wB0bY4MfYmLhllARn\/4zAwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":21,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582236,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoKcoAAO4GanIRrGQ7wKgCBAG7wBx7SArdnqHaUVARn\/4WUQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582236,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLwpAAEAG00jAqAIEEaxkJcAdAbtiYuGWG2ODIFAQ\/\/\/TAQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":21,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582236,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoODNAAEAGygnAqAIEEaxkO8AcAbueodpRe0gK3lAQ\/\/+2TwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432582238790,"flow_last_seen":1432582238790,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.100.14","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACarW0AAEARhl7AqAIEHw1kDsk+DZYAhpcUAAMAaiESpEIAAHUQ+ENDH9BeI3lAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1432582238790,"flow_last_seen":1432582238790,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.100.14","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACat4MAAEARfEjAqAIEHw1kDsk+DZYAhpcUAAMAaiESpEIAAHUQ+ENDH9BeI3lAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.70.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACayJAAAEARiRnAqAIEHw1GMMk+DZYAho7CAAMAaiESpEIAACUBlIyWX5N55xRAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.70.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaw2YAAEARjkPAqAIEHw1GMMk+DZYAho7CAAMAaiESpEIAACUBlIyWX5N55xRAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.64.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0550{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa2EoAAEARf1\/AqAIEHw1AMMk+DZYAhnzzAAMAaiESpEIAAN5oNK0Wc\/NrxVVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.64.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa9a4AAEARYfvAqAIEHw1AMMk+DZYAhnzzAAMAaiESpEIAAN5oNK0Wc\/NrxVVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.85.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa8J4AAEARUgvAqAIEHw1VMMk+DZYAhiWBAAMAaiESpEIAADIU0Oi5cQTqY2RAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.85.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaLVIAAEARFVjAqAIEHw1VMMk+DZYAhiWBAAMAaiESpEIAADIU0Oi5cQTqY2RAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.91.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaNZEAAEARBxnAqAIEHw1bMMk+DZYAhs2+AAMAaiESpEIAAJhbSrigEVALo05AAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.91.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa90wAAEARRV3AqAIEHw1bMMk+DZYAhs2+AAMAaiESpEIAAJhbSrigEVALo05AAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACahRkAAEARwwDAqAIEHw1PwMk+DZYAhkfEAAMAaiESpEIAADsyhsRFd5d2aQVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1432582238791,"flow_last_seen":1432582238791,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaCdEAAEARPknAqAIEHw1PwMk+DZYAhkfEAAMAaiESpEIAADsyhsRFd5d2aQVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":1432582238792,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaWjwAAEAR4G3AqAIEHw1dMMk+DZYAhleUAAMAaiESpEIAAOhOyhcXEAbXGlxAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":1432582238792,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":232,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaWaMAAEAR4QbAqAIEHw1dMMk+DZYAhleUAAMAaiESpEIAAOhOyhcXEAbXGlxAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":1432582238792,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0548{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACagnUAAEARzDTAqAIEHw1JMMk+DZYAhhoqAAMAaiESpEIAABpmz0oddRqYGlZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":233,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1432582238792,"flow_last_seen":1432582238792,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":51518,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0548{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":234,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACakcIAAEARvOfAqAIEHw1JMMk+DZYAhhoqAAMAaiESpEIAABpmz0oddRqYGlZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI28gAAFURZ\/MfDUAwwKgCBA2WyT4ANKxZAQMAGCESpEIAAN5oNK0Wc\/NrxVUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMnU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI28kAAFURZ\/IfDUAwwKgCBA2WyT4ANKxXAQMAGCESpEIAAN5oNK0Wc\/NrxVUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMnc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIJlcAAFMRBGUfDVswwKgCBA2WyT4ANP0WAQMAGCESpEIAAJhbSrigEVALo04AIAAIAAGRdm4xsYdAAgAIAAABTYyOMoM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIJlgAAFMRBGQfDVswwKgCBA2WyT4ANP0UAQMAGCESpEIAAJhbSrigEVALo04AIAAIAAGRdm4xsYdAAgAIAAABTYyOMoU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":22,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIKucAAE4R+\/YfDWQOwKgCBA2WyT4ANMZzAQMAGCESpEIAAHUQ+ENDH9BeI3kAIAAIAAGRdm4xsYdAAgAIAAABTYyOMnw=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":22,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIKugAAE4R+\/UfDWQOwKgCBA2WyT4ANMZxAQMAGCESpEIAAHUQ+ENDH9BeI3kAIAAIAAGRdm4xsYdAAgAIAAABTYyOMn4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":28,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIUUgAAFYR1HMfDV0wwKgCBA2WyT4ANIbjAQMAGCESpEIAAOhOyhcXEAbXGlwAIAAIAAGRdm4xsYdAAgAIAAABTYyOMow=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":28,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIUUkAAFYR1HIfDV0wwKgCBA2WyT4ANIbhAQMAGCESpEIAAOhOyhcXEAbXGlwAIAAIAAGRdm4xsYdAAgAIAAABTYyOMo4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIHLUAAFQRHwcfDUkwwKgCBA2WyT4ANElHAQMAGCESpEIAABpmz0oddRqYGlYAIAAIAAGRdm4xsYdAAgAIAAABTYyOMr4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582238,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIHLYAAFQRHwYfDUkwwKgCBA2WyT4ANElFAQMAGCESpEIAABpmz0oddRqYGlYAIAAIAAGRdm4xsYdAAgAIAAABTYyOMsA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":23,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582239,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIsFoAAFQRjmEfDUYwwKgCBA2WyT4ANL3lAQMAGCESpEIAACUBlIyWX5N55xQAIAAIAAGRdm4xsYdAAgAIAAABTYyOMrg=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":23,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582239,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIsFsAAFQRjmAfDUYwwKgCBA2WyT4ANL3kAQMAGCESpEIAACUBlIyWX5N55xQAIAAIAAGRdm4xsYdAAgAIAAABTYyOMrk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582239,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI6QYAAFMRTSUfDU\/AwKgCBA2WyT4ANHa7AQMAGCESpEIAADsyhsRFd5d2aQUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582239,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI6QcAAFMRTSQfDU\/AwKgCBA2WyT4ANHa5AQMAGCESpEIAADsyhsRFd5d2aQUAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582239,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIAeoAAFYRK9IfDVUwwKgCBA2WyT4ANFR5AQMAGCESpEIAADIU0Oi5cQTqY2QAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":250,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582239,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIAesAAFYRK9EfDVUwwKgCBA2WyT4ANFR4AQMAGCESpEIAADIU0Oi5cQTqY2QAIAAIAAGRdm4xsYdAAgAIAAABTYyOMuQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1432582244297,"flow_last_seen":1432582244297,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.31","src_port":49164,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":272,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582244,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAojkRAAEAGShnAqAIEEaeOH8AMAbt6TdZMbFoWmFAR\/\/+4DAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":273,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582244,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoqu8AAO0GwG0Rp44fwKgCBAG7wAxsWhaYek3WTVARn\/4YDQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":274,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582244,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoPbFAAEAGmqzAqAIEEaeOH8AMAbt6TdZNbFoWmVAQ\/\/+4CwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1432582245413,"flow_last_seen":1432582245413,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.8","src_port":49167,"dst_port":443,"l4_proto":"tcp"}
+0397{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":278,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582245,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAodlRAAEAGjBvAqAIEEaxkCMAPAbv4S5DjkuqnU1AR\/\/\/yOgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":279,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582245,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo3Q8AAO8Gtl8RrGQIwKgCBAG7wA+S6qdT+EuQ5FARn\/5SOwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582245,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo\/ZBAAEAGBN\/AqAIEEaxkCMAPAbv4S5DkkuqnVFAQ\/\/\/yOQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1432582246280,"flow_last_seen":1432582246280,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1062{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582246,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0533{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1432582246280,"flow_last_seen":1432582246280,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432582247125,"flow_last_seen":1432582247125,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0447{"flow_id":33,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582247,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIu7MAAEAROKHAqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":33,"flow_packet_id":1,"flow_first_seen":1432582247125,"flow_last_seen":1432582247125,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":34,"flow_packet_id":1,"flow_first_seen":1432582249235,"flow_last_seen":1432582249235,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.62.150.157","src_port":49194,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":34,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582249,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0VdFAAEAGLmvAqAIEXT6WncAqAbtp\/2UpB8hbNoARIADD5gAAAQEICi36g7kNLSlg","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":35,"flow_packet_id":1,"flow_first_seen":1432582249235,"flow_last_seen":1432582249235,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49198,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":35,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":296,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582249,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo02tAAEAGBQTAqAIEEaeODcAuAbvUT3p65yrTtlAR\/\/+B3QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":34,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":297,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582249,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA0DlQAAG4Gh+hdPpadwKgCBAG7wCoHyFs2af9lKoARAgLVtQAAAQEICg0tNY4t+oO5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":34,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":298,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582249,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0W3xAAEAGKMDAqAIEXT6WncAqAbtp\/2UqB8hbN4AQIAC3ZgAAAQEICi36hAoNLTWO","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":35,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":299,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582249,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAony8AAO4Gyz8Rp44NwKgCBAG7wC7nKtO21E96e1ARn\/7h3QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":35,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":300,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582249,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo3x9AAEAG+U\/AqAIEEaeODcAuAbvUT3p75yrTt1AQ\/\/+B3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":36,"flow_packet_id":1,"flow_first_seen":1432582250339,"flow_last_seen":1432582250339,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49200,"dst_port":443,"l4_proto":"tcp"}
+0396{"flow_id":36,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":301,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582250,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoFBJAAEAGxF3AqAIEEaeODcAwAbsLr3wkAQ2ywFAR\/\/9P5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":36,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582250,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAoVmEAAO4GFA4Rp44NwKgCBAG7wDABDbLAC698JVARn\/6v5gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":36,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":303,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582250,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAotpxAAEAGIdPAqAIEEaeODcAwAbsLr3wlAQ2ywVAQ\/\/9P5QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":28,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":310,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":128,"pkt":"APS5Jrv0xiwDYGpkCABFAAByH68AAFYRBeMfDV0wwKgCBA2WyT4AXrjagckACUwonm2wHgwTDvqn09dI5Tl\/4L+Lv6PBoXbsprKS9SgxRhWHjq5qsMlCLel9YINSbVW1kyOkA+bDEjDWVO8fpWX9e7C0gAAAAVvv5xPqYsEj4ls=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":28,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":128,"pkt":"xiwDYGpkAPS5Jrv0CABFwAByxxYAAEARc7vAqAIEHw1dMMk+DZYAXqeygckACVRZKCT7lnvZ811JfC5ler1y\/RVJ82dVNGIRmS8ajsv2qK4TCbrz2O7Z+mq+ixG2tXbvFQ3Uv55JzfT8oMVSo0nQX+75gAAAAZw0TI0CfOcdGVE=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":28,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":302,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEgvnIAAEARe7HAqAIEHw1dMMk+DZYBDJTogPhBKQAACgBUWSgkJQftb+eUEIqcBe\/Wcq54y3PH7EtnWYY10TPN\/yzikXt2N06\/l+eNPUtopv6QSAGjC9LvWMuyyZ+feEglSpbVTzTDx4DlAE7e2DVd\/reZs86a5kl5JSTCGIWRfwC\/cSWhnhq4ICvhgp9YK+jKykfxbYE68863ROqjz4FFM7VPE9G2o7b8BXzFfdHdNt1kIxhL\/V8kKE\/3a7VLkGFomHbeT+JWvwPw5iFS3mqeUcML4GaEx4EbcOn9A\/7lfE3jBSL2qWE\/WyYvU5oPByLSO7xLxbqH6rvOmskmAHKMT6MhPp\/umR5I4DZrcqAUjFqcbl9eq+emOrfWgCo=","pkt_caplen":302,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":28,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":68,"pkt":"xiwDYGpkAPS5Jrv0CABFwAA2e64AAEARv1\/AqAIEHw1dMMk+DZYAIg4SgdAAAlRZKCSVlI1fgAAAAk1d8SGQuEHlKXY=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0715{"flow_id":28,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":290,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEUdqEAAEARw47AqAIEHw1dMMk+DZYBAKKGgPhBKgAAFABUWSgkDvB0RV1pLNSrh6QBVQxaGQaxVxFAUUsM\/GIh55k8FH9UAH2kkkcjF1GyHySMx348M+BTdZP6+r1orR6JI161XnlQmvv2bGz\/MzhaZjYqy1xqCXMw81CHFwhmBf49vlx19QivwWZM6w0AyBRTHblc7DTexrIsggmBAR66ey\/30yS2cMPykyUtM7CUJLPORnk0UzMAHfix75df0VHphEDqKui95fCVClsnlyUEugUHeX3g7l9E9DEB+u2sX5cwM+1uNRKOyUrV6ucukW3T7N4YpH1cGCD2aGvHThq7R3qzzT2icM9oFXPWsHnuUWM=","pkt_caplen":290,"pkt_type":2048,"pkt_ipoffset":14}
+0770{"flow_id":28,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":331,"pkt":"xiwDYGpkAPS5Jrv0CABFwAE9ZPwAAEAR1QrAqAIEHw1dMMk+DZYBKZ7sgPhBKwAAHgBUWSgkQMik4p1LbXk0hKnHYswpfXmGxoTLR2vyhBAXTC1bOUCu6lcpCsqJt6IgRt1JGt2akYG\/tXKY0BlNRzRMdvSJruDWPXfHvs6g7E1hasRSE9+25WZS515xB9YqgTNSGjvoFWoHzISxDDdHA8qDs9ykHkHma3ocJSNsN0SlUZ+gtjXSm1tpPhPsj7is53gncmN5OG8jG0QttEqkYfA5jXqMKg4AYPsRwAgfqW5uHR+omFWtXPvUoEpXK3wStiUTJ5sqpO2H0ir42h00TnrEA0LumIO27GR14nayC+k0zvvQBXT3koQQeDIFxzYv7kALKy+wBl1GqKZ9cc5aHyad2o8TqBv38WGgouQEEp95glDTUoCfA8hixA==","pkt_caplen":331,"pkt_type":2048,"pkt_ipoffset":14}
+0630{"flow_id":28,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":224,"pkt":"APS5Jrv0xiwDYGpkCABFAADSH7AAAFYRBYIfDV0wwKgCBA2WyT4AvsBhgPglSAAACgBMKJ5teM91LWa3D4cFSTUsYUqOhsnItYTVdSdTS\/Dw\/dFgzYBh+7QfdcpfMRhyTViAKYpMw1Wd3nYP4QsKjIsrWLkvyifOL6fVBfehCMBA1\/y3R9DHy2OuZJOpJ7HJZWP6FY1nD5d+qbr9iljH8ps0BzzGkn5DMXFvTzhTIdR+U2mnEnYbT7SOpDorJzFK+QDPA2ZkjUriZvXEAVYaNEi\/aJj4GzOJ\/3opB6LgSpg=","pkt_caplen":224,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":28,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582257,"pkt_len":68,"pkt":"APS5Jrv0xiwDYGpkCABFAAA2H7EAAFYRBh0fDV0wwKgCBA2WyT4AIgNbgdAAAkwonm1geegQgAAAAo9os8zuLjw3RAA=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0733{"flow_id":28,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":326,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":299,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEd\/ncAAEARO6\/AqAIEHw1dMMk+DZYBCVqagPhBLAAAKABUWSgkH1k7MQ+SpX9e37sFlnpFBbbSSz\/eMBJZin9e9q7+a3YroYkyKhOjEHJhM4\/ZJubRpoVEzoNCQiYW37PQ9ACQdGaVa4jiIwRxgKx4GZigATStpSP9rtzUVaGYDPXIEUNDOGJwOYUgeM0Ft2WtPdlW8PlAB4gvA1AclHBPRO1dAviShoe+1BogsJ6\/bHhRMqnQ6eUKzWlgT0FzIyOWgJrQ1+PmUjhinUB\/OQxQeeHzZ79VN7X4b0Ky7BsiYZyi+C9EEFgvWn7QTFW4I7iSlBr1VkCSn9L8AJBsiqCfAiXqQ\/5eBSYaBaGRbmFYbv4lL5\/kLiwQJyc=","pkt_caplen":299,"pkt_type":2048,"pkt_ipoffset":14}
+0697{"flow_id":28,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":327,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":276,"pkt":"APS5Jrv0xiwDYGpkCABFAAEGH7IAAFYRBUwfDV0wwKgCBA2WyT4A8ta+gPglSQAAFABMKJ5tmiD\/0WCiLlNUr9XvJVIJQ\/u6oBIXekwKCHWs0LW7qqW4AItvqVH1GpoaRri77tdwwm54S24QJkTPOrgJPaHwobLxxUzmKM906vC0Z0tkzrakkvHLQUYMgG4NEtVASKMjwMF7bNp\/GghORWLnCr1FIpoTp7tAfBhbRYjn8gDBTzHoEKZEGf45Q38PlJhJRJtE9RgDubiByvCStec0oZX0Fj1nMql5JAdIKFwVeg3iC7R5DNjvWqi4ffWNNgjlk2X3bGOOZ3qUYQ6ZeNYLt\/NKqH7JP6qIW0iMpWxi3Bdd","pkt_caplen":276,"pkt_type":2048,"pkt_ipoffset":14}
+0684{"flow_id":28,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":329,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":266,"pkt":"APS5Jrv0xiwDYGpkCABFAAD8H7MAAFYRBVUfDV0wwKgCBA2WyT4A6BJ1gPglSgAAHgBMKJ5tQqgHrjMR3HfoBKUbsHSDS5aU64Vqc0Ix1OO5vV1Ug2kVfumuSRmeoiyk6FxOHh4URezevKx0AHnVCovgWN09Fao9\/vsgPljujT63FO2Jihe8v8HUtwG02dJcaJg4dyO7C8jAZ1BBh42oWZ5c6ukFXKsUDof\/zP7HxEdFDBfMnuQ4WeiaLc5yFDJQb52HMKxrDmndS7UhOforJq6JdW\/jTpMgNcFONycByxLJbaNy4EijSVgkgr4p9mKp1YXuppYt2gBfKjgirq8Q4nCECPUAzvmmhpU=","pkt_caplen":266,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1432582258587,"flow_last_seen":1432582258587,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":51518,"dst_port":60312,"l4_proto":"udp"}
+0438{"flow_id":37,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIJ6AAAEARMxjAqAIEAcJav8k+65gANBimAAEAGCESpEI2xNtJG9sue8sIM0EACAAU5G1owzzn9g07DgjX0q3CWkGBWA0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":334,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":37,"flow_packet_id":1,"flow_first_seen":1432582258587,"flow_last_seen":1432582258587,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":51518,"dst_port":60312,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432582258730,"flow_last_seen":1432582258730,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":51518,"dst_port":9344,"l4_proto":"udp"}
+0440{"flow_id":38,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIG0oAAEARj7DAqAIEW\/2wQck+JIAANKXrAAEAGCESpELdaIZ9jcVOA62tiygACAAUhE7qa\/gs1xldMnASKkUclFJWums=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":338,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":38,"flow_packet_id":1,"flow_first_seen":1432582258730,"flow_last_seen":1432582258730,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":51518,"dst_port":9344,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0439{"flow_id":38,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":341,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI4nIAAC8R2kdb\/bBBwKgCBCSAyT4ANOAtAQEAGCESpELdaIZ9jcVOA62tiygACAAUsHui2xBS6T5qw9kAv9V6SryCnE8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0787{"flow_id":38,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":342,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":342,"pkt":"xiwDYGpkAPS5Jrv0CABFwAFIgM0AAEARKS3AqAIEW\/2wQck+JIABNDV+gPhBLgAAPABUWSgkrOczzTmmNaWeHGyeFn5K8vlkangPxwACY7IwMpCpL5qUBEDYknjmXwiwt1Sg\/GoDEpuWps7K3BPScguv1CoIPKC+VL4kk69VBQy2eU1f6p0OhYSXKAcM\/9HmK5KZeJJnhjzxZ+J\/AtWZs+X8uDaujdvMYKyUONaU\/07PQLiEd81h3NGLNxCpTNYPkmMGXMy1y+UaiUzN89zB2\/RkHbLVqN6e+nvnnRR2frMRlVsFWAJQmXtD929e1+a2u\/RdJfu15HCbSLl3jTXDbl84mpeVYYxkc3LSpxB7HrCYZEpYcCniVsfACmA6zpHVbv1BlaoQu+KuUWJT2eQ73+Vh12sP5aPix21kFcGvLfE3UalmxPkTCEhiCOUQRQbTvOcEo103","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":38,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":343,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIE\/gAAC8RqMJb\/bBBwKgCBCSAyT4ANMrWAAEAGCESpEKeaboEfgZsasdwHloACAAUqRSMFuqpInS4y87I6AOf8O\/PSC8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":38,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":344,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI60MAAEARv7bAqAIEW\/2wQck+JIAANLSRAQEAGCESpEKeaboEfgZsasdwHloACAAURgJjd0i0VDTJJrV76xTQyOSNOaY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_id":38,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":346,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582258,"pkt_len":315,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEtjfoAAEARHBvAqAIEW\/2wQck+JIABGfrygPhBLwAARgBUWSgk6o4SYXABImM48oYUO5ed515iKRqbYPf5fzLGszSw0XKd+zscVVQyNW0mvF6ElGrOJQRRmlexlXlTl9ZEouXuYwocleXrMLmJH9u5ylV86g\/JyAecKaaQwn6J1bCvEeZZ3qE5aVVsKHq\/ZYKPO3gZFzJFH6DjRY\/\/pDzOxyORQYVnCBRO7cUQqdpK77rqxnl6kzusys6rHv8cXPElF8vwsaM2grV+koQ7+5UoyDFIgtiubtINABfDk0RhSOvPALbs0hxLRhoJF\/qkAnJVHX819F+58OFJ30iANVOu0e1mUTUmGqP1gU1yagrwI7vpy9MBOG0sAeh+QO9vpIL7fWdtzpDFBitO","pkt_caplen":315,"pkt_type":2048,"pkt_ipoffset":14}
+0631{"flow_id":38,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":347,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":225,"pkt":"APS5Jrv0xiwDYGpkCABFAADTK8oAAC8RkGVb\/bBBwKgCBCSAyT4AvwS9gPglTwAAUABMKJ5tdOYPmwStrgEOpcAVzVD\/ris\/Ui5PlK9KkPXR4vUcSFNWIOFTCOX0PMaijkm1dLreIqF7dJ6jFf399CPPRFtdQ8yDdIz3Q7avMQRG238NsJqWIxdEqB0OyUx7cZVhamgjijTrqDZ3HWhINDvsnW\/iDEYzo5hF99o6snmn1hsVSdo9rYoDY\/6fsBeJ8kYascSCQJ\/\/nrkZ0cg2Fd+JwC9af4MIMT44TZ3gz2Q6","pkt_caplen":225,"pkt_type":2048,"pkt_ipoffset":14}
+0747{"flow_id":38,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":348,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":311,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEpC\/kAAEARniDAqAIEW\/2wQck+JIABFe8pgPhBMAAAUABUWSgk0gP+uPmVHljaZ0UrsDIoeU2DDw+g5HvE6EI2ob12no0lWSS\/RqqcT+7tGBAYCKgulnrJoIaj4ajeo4NBPmRmI7aB+c1BBScta\/22LflwX2ez3vP4\/hT+uv9U8Q3P66zmmhyUTMzN0we7ezzngxB5seyaoiGwJRR3ijczCH+dlFchnnklpN5rOJYLQ\/LeHSF2cElChsGH5+JcAplwNbbMT9OTxoMF4frt9UWJttkNI43eSnYKLDcMvV0TdCo3aUeQX5qwOsrG0svWPI4nv7zEPAhpNQQ\/PWNm43cDW1nVSh6fcBBN99RDNLhv5g0cKuQrx8TAmZYKE6D2PNqQOMjH1UQ=","pkt_caplen":311,"pkt_type":2048,"pkt_ipoffset":14}
+0658{"flow_id":38,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":349,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":248,"pkt":"APS5Jrv0xiwDYGpkCABFAADq8GgAAC8Ry69b\/bBBwKgCBCSAyT4A1lwWgPglUAAAWgBMKJ5tHirsOlC0t0apwx0snzBWgqXOT4tLSxMxei4EJusQYTvYdqV4bY29mse4N9Z+G9ApwQYgVvLYBjyerHST0UvoLCLF6wNn6bA+eMxM6BptN0WffMFWHjMFYNArvayCCM0hmF+kdkZ\/j9EH4UAtDY2MmAGKt2aYMbBGNAw4j3aASyGAO1MQ8zi0XJEjNzauoXgpxXx2NUW8SBwP6VL3Vs4vMg1W2JbvBIDa0Fl7p+Mj4q230HCbXuXuvPtuBuajPih04yc=","pkt_caplen":248,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":37,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":350,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIbNAAAEAR7efAqAIEAcJav8k+65gANKlVAAEAGCESpEKmTTdqxAPLVFlkZFwACAAUe9SyVdo3\/CPkaMOU00d3jUs\/Tzg=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0751{"flow_id":38,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":351,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":315,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEtl2QAAEARErHAqAIEW\/2wQck+JIABGZ2sgPhBMQAAWgBUWSgkkas4KXnRhVhgdU4qSWqeo1pdJBoWeCV06vV1j6eWSqpmFXtzmINmLXGBNWGYkn6T49otwMXPbW\/R3TApItwG06JCu34hiy\/m87Z7mI3g9lmyVWrRzNhXOZKfn3wFEnpyl8qgboQR\/vw34pipkQQtYCLYZFTl7IAr8mNCWmFKCwaAzaih7+c\/OlNACJAVaMxhuN8PNs0xi3hXeTmeOc97+QmEvSsaCzG0LyFjq2TCJVJn39FE6i6iaaY7zaHJmRxNefDBTpsFoNoBZV4OOOkNKIqqWTAwMgQoU92pXsT0gFHaGCcu+tu36x3TCqCsH80XZUulkJMK0UCv1q6QgbMqjVhzf\/y1","pkt_caplen":315,"pkt_type":2048,"pkt_ipoffset":14}
+0626{"flow_id":38,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":352,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":220,"pkt":"xiwDYGpkAPS5Jrv0CABFwADO5okAAEARw+rAqAIEW\/2wQck+JIAAumr3gPhBMgAAZABUWSgkScV+lrZMd2sMYyXQSXeqOHhwtdKfJOlU78PlzqgC5i5nAT4KnXElc1u4Rqk2aFTtrKqWOXyx0IrRScCC4Mfc65BVAX7LdhvmgmY8cO1C\/uQ+1JhSWNA8IpqoiCpmdP2z91OyK9\/duP2dXvcxEeBtLXtNIundlxoXa8\/LdegCYwyPcAiyW2fa0is700WnXNt4bHzqhiOxvL6XcCw0c\/JHgdrISNvZFA==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0529{"flow_id":38,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":353,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":148,"pkt":"APS5Jrv0xiwDYGpkCABFAACGYykAAC8RWVNb\/bBBwKgCBCSAyT4AckYSgcgADkwonm1n5tAepsL17EcOJHItfxDHO5mRlTojYHeox1d\/68E3e1K7vFqLl8y05\/nd1\/vVfjdneDCP5h7S27nryL9UDcseeXl9c5aLYDMLJibEaG5Vtcvf66uAAAAECA0CI3+zVej25g==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":38,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":354,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":64,"pkt":"APS5Jrv0xiwDYGpkCABFAAAyxJQAAC8R+Dtb\/bBBwKgCBCSAyT4AHksQgdEAAUwonm2AAAAF3d5MJccULfHsfw==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":38,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":355,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":249,"pkt":"xiwDYGpkAPS5Jrv0CABFwADrpcgAAEARBI\/AqAIEW\/2wQck+JIAA19opgPhBMwAAbgBUWSgkq+i1nCHDshG9cwqUURi1lXC5QJypRb6wa5EswEdqhlco28oD+iAUpu0d400ufEhUq1lrmJ7dKJE72YRYXaQrrUfqEqPe6mvPVXlhD6YP9fAP4J+wkTWAduRtd3ZX6lyvR2Qa07El1UPv+HKwQNqXMeTbqCjlY\/JDIg7eMRCaxgkcfR1XDjgxnRCvK3KYzm4xFv1EderkmInGdKawpU5RxF4aKyZAdEg1tFLR6EYa2BTbRYGyYisULIwkGthQRFbEHoyo","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0598{"flow_id":38,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":356,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":199,"pkt":"APS5Jrv0xiwDYGpkCABFAAC5Zf8AAC8RVkpb\/bBBwKgCBCSAyT4ApWA+gPglUQAAZABMKJ5tnUS6X9B2ti2qUfLVwUkJ6rhi1NqCj\/tUbudp8N0oW0nZtW178j\/6zNQw4BnfoDUSlN4\/TdooGvCVpYrR7Emu1ACPCsmYttJd8x5wzX1doDnnKzEXj7QusQ\/rNnbj0pRe5xnAjZlOCjqlEVWXVkFUSe2ktlSnjC8b0tcFQEImXblrOoOvKf4nTpNbJYIOqE7QQQ==","pkt_caplen":199,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":362,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582259,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI77MAAEARawTAqAIEAcJav8k+65gANKqSAAEAGCESpEK30Ms3\/7rzJdDOeSQACAAUjiMqFpbreAaLOXedI1Eon++y9eE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":374,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582260,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI+cUAAEARYPLAqAIEAcJav8k+65gANJE\/AAEAGCESpEJlzPg4GxgzVtPAczQACAAUByzPknXSQgU3SCNOJEjP0trCKUQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":37,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":385,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582261,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIYAcAAEAR+rDAqAIEAcJav8k+65gANF9sAAEAGCESpEJrlvABy0sjWqgqRUMACAAUZ+Ym0GC+WjRbPeLsPQxQ+KfJET0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":394,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582261,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIfRQAAEAR3aPAqAIEAcJav8k+65gANG8ZAAEAGCESpEIYnvNxGnQQMSBwNi8ACAAUfcSaNu+6sEB\/tKVDpUiMkHhz4k0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582262,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIlVwAAEARxVvAqAIEAcJav8k+65gANDl8AAEAGCESpELloJwIzR4HY4VXd2gACAAU6i0pmxwS4l\/EcMrZZqYRcawRE+E=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":37,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582263,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIXVwAAEAR\/VvAqAIEAcJav8k+65gANGRBAAEAGCESpEJXEhNzxkgZaRH1+HoACAAUyqgLwJXrgV2f7vqL\/RSlXPt3hvg=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":440,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582263,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIVycAAEARA5HAqAIEAcJav8k+65gANK8UAAEAGCESpEJ9fkcoM1XBbZC\/wC8ACAAU5zy+hNeV1ODXVOPOB8HtbBzFjTo=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":37,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":478,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582264,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIZRkAAEAR9Z7AqAIEAcJav8k+65gANLueAAEAGCESpEK\/+oJIyjYcD4YPUQUACAAUNOpNDRGYQiUnmXdio7j48kN1Vek=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":37,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":517,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582264,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIHdkAAEARPN\/AqAIEAcJav8k+65gANCYTAAEAGCESpEIkKdIMDwGLOUyd8lQACAAUfIpgRynQiuao73XhN4RmbsdJWus=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":569,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582265,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIohAAAEARuKfAqAIEAcJav8k+65gANGF4AAEAGCESpELyzL04+EDaNON032QACAAUFCrDLbx0uaetsQtun1B9ZP1Unos=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":37,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":634,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582266,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI0YkAAEARiS7AqAIEAcJav8k+65gANId\/AAEAGCESpELSFnMKWjrfCcbvbx4ACAAU09B\/VSnmB3CrQ39bGvJ6930JZ\/U=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":37,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":699,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582266,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIr94AAEARqtnAqAIEAcJav8k+65gANF9rAAEAGCESpEKHhDhXzeeEP09kji4ACAAUUNDwY8JHdq6AHpgvXooemqaxYKc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":37,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":765,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIYYAAAEAR+TfAqAIEAcJav8k+65gANI3NAAEAGCESpEJoDPBmpLS+GTCIRTcACAAU2zcQLOTY7HJOR\/kj\/ly\/RXUUcFY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":22,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":817,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaQoIAAEAR8UnAqAIEHw1kDsk+DZYAho8WCAAAaiESpEIAAHUQ+ENDH9BeI3pAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":23,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":818,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACadjsAAEAR227AqAIEHw1GMMk+DZYAhobECAAAaiESpEIAACUBlIyWX5N55xVAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":819,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaxPEAAEARkrjAqAIEHw1AMMk+DZYAhnT1CAAAaiESpEIAAN5oNK0Wc\/NrxVZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":820,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACajUAAAEARtWnAqAIEHw1VMMk+DZYAhh2DCAAAaiESpEIAADIU0Oi5cQTqY2VAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":821,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACapL4AAEARl+vAqAIEHw1bMMk+DZYAhsXACAAAaiESpEIAAJhbSrigEVALo09AAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0549{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":822,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACakhcAAEARtgLAqAIEHw1PwMk+DZYAhj\/GCAAAaiESpEIAADsyhsRFd5d2aQZAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0548{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":824,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaISAAAEARLYrAqAIEHw1JMMk+DZYAhhIsCAAAaiESpEIAABpmz0oddRqYGldAAABmAQCp9g36qkiVOtLQr3ViX6FsbDYXjEJ9QGAivtjborGILbaLFUctqtKwjyuh8hQDpfay6HpQUwtK9uAMfRAxRJKoeR4kQioyDnAbRIAxuEByQdpCzZp5JzNQR7k0c+gy5xI4fd1T","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432582267983,"flow_last_seen":1432582267983,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","l4_proto":"icmp"}
+0420{"flow_id":39,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA44FwAAEABy33AqAIEW\/2wQQMDDx4AAAAARQAANHIMAAAvEUrCW\/2wQcCoAgQkgMk+ACAAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0495{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":826,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":39,"flow_packet_id":1,"flow_first_seen":1432582267983,"flow_last_seen":1432582267983,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0420{"flow_id":39,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":828,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4yYsAAEAB4k7AqAIEW\/2wQQMDDx8AAAAARQAAM4K1AAAvEToaW\/2wQcCoAgQkgMk+AB8AAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":39,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":830,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582267,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4J2kAAEABhHHAqAIEW\/2wQQMDDx8AAAAARQAAM6fUAAAvERT7W\/2wQcCoAgQkgMk+AB8AAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":39,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":832,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582268,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4d4EAAEABNFnAqAIEW\/2wQQMDDwYAAAAARQAATKqlAAAvERIRW\/2wQcCoAgQkgMk+ADgAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":39,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":834,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582268,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA48NYAAEABuwPAqAIEW\/2wQQMDDuwAAAAARQAAZoGNAAAvETsPW\/2wQcCoAgQkgMk+AFIAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":39,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":836,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582268,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4oWQAAEABCnbAqAIEW\/2wQQMDDucAAAAARQAAa814AAAvEe8eW\/2wQcCoAgQkgMk+AFcAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":39,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":840,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582268,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4tY4AAEAB9kvAqAIEW\/2wQQMDDukAAAAARQAAaU70AAAvEW2lW\/2wQcCoAgQkgMk+AFUAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":39,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":842,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582268,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA4zs0AAEAB3QzAqAIEW\/2wQQMDDu4AAAAARQAAZKhGAAAvERRYW\/2wQcCoAgQkgMk+AFAAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":39,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":844,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582268,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA45d4AAEABxfvAqAIEW\/2wQQMDDsQAAAAARQAAjiA1AAAvEZw\/W\/2wQcCoAgQkgMk+AHoAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432582271840,"flow_last_seen":1432582271840,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0795{"flow_id":40,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582271,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIREwAAP8RdlkAAAAA\/\/\/\/\/wBEAEMBNOdgAQEGALYzLg0AAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":852,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":40,"flow_packet_id":1,"flow_first_seen":1432582271840,"flow_last_seen":1432582271840,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}}
+0795{"flow_id":40,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":853,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582273,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRE0AAP8RdlgAAAAA\/\/\/\/\/wBEAEMBNOdeAQEGALYzLg0AAgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_id":40,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":854,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582275,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRE4AAP8RdlcAAAAA\/\/\/\/\/wBEAEMBNOdcAQEGALYzLg0ABAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+1062{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":855,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582276,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAISQGwAAEARsh7AqAIBwKgC\/0RcRFwB\/jsJeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_id":40,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":858,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582280,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRE8AAP8RdlYAAAAA\/\/\/\/\/wBEAEMBNOdXAQEGALYzLg0ACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":1432582284805,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0427{"flow_id":41,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582284,"pkt_len":76,"pkt":"AQBeAAD72DBiVgAcCABFAAA+cQoAAP8RGNup\/qbP4AAA+xTpFOkAKikcAAAAAAABAAAAAAAACkx1Y2FzLWlNYWMFbG9jYWwAAByAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0566{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":859,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":41,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":1432582284805,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":1432582284805,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0456{"flow_id":42,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582284,"pkt_len":96,"pkt":"MzMAAAD72DBiVgAcht1gA4nLACoR\/\/6AAAAAAAAA2jBi\/\/5WABz\/AgAAAAAAAAAAAAAAAAD7FOkU6QAqIMQAAAAAAAEAAAAAAAAKTHVjYXMtaU1hYwVsb2NhbAAAHIAB","pkt_caplen":96,"pkt_type":34525,"pkt_ipoffset":14}
+0571{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":860,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":42,"flow_packet_id":1,"flow_first_seen":1432582284805,"flow_last_seen":1432582284805,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":1432582284806,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0426{"flow_id":43,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582284,"pkt_len":76,"pkt":"AQBeAAD7xiwDYGpkCABFAAA+TlkAAP8RybDAqAIB4AAA+xTpFOkAKrdAAAAAAAABAAAAAAAACkx1Y2FzLWlNYWMFbG9jYWwAAByAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0562{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":861,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":43,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":1432582284806,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0483{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":1432582284806,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0456{"flow_id":44,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582284,"pkt_len":96,"pkt":"MzMAAAD7xiwDYGpkht1gAhHGACoR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QAqK3YAAAAAAAEAAAAAAAAKTHVjYXMtaU1hYwVsb2NhbAAAHIAB","pkt_caplen":96,"pkt_type":34525,"pkt_ipoffset":14}
+0572{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":862,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":44,"flow_packet_id":1,"flow_first_seen":1432582284806,"flow_last_seen":1432582284806,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0523{"flow_id":41,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582285,"pkt_len":142,"pkt":"AQBeAAD72DBiVgAcCABFAACANrsAAP8RUuip\/qbP4AAA+xTpFOkAbF25AACEAAAAAAEAAAACCkx1Y2FzLWlNYWMFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAA2jBi\/\/5WABzADAABgAEAAAB4AASp\/qbPwAwAHIABAAAAeAAQ\/oAAAAAAAADaMGL\/\/lYAHA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":863,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":1432582284805,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0521{"flow_id":43,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582285,"pkt_len":142,"pkt":"AQBeAAD7xiwDYGpkCABFAACAD1QAAP8RCHTAqAIB4AAA+xTpFOkAbI9mAACEAAAAAAEAAAACCkx1Y2FzLWlNYWMFbG9jYWwAAByAAQAAAHgAEP6AAAAAAAAAxCwD\/\/5gamTADAABgAEAAAB4AATAqAIBwAwAHIABAAAAeAAQ\/oAAAAAAAADELAP\/\/mBqZA==","pkt_caplen":142,"pkt_type":2048,"pkt_ipoffset":14}
+0572{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":864,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1432582284806,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0551{"flow_id":44,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582285,"pkt_len":162,"pkt":"MzMAAAD7xiwDYGpkht1gAhHGAGwR\/\/6AAAAAAAAAxCwD\/\/5gamT\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsA5wAAIQAAAAAAQAAAAIKTHVjYXMtaU1hYwVsb2NhbAAAHIABAAAAeAAQ\/oAAAAAAAADELAP\/\/mBqZMAMAAGAAQAAAHgABMCoAgHADAAcgAEAAAB4ABD+gAAAAAAAAMQsA\/\/+YGpk","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0582{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":865,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1432582284806,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0551{"flow_id":42,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582285,"pkt_len":162,"pkt":"MzMAAAD72DBiVgAcht1gA4nLAGwR\/\/6AAAAAAAAA2jBi\/\/5WABz\/AgAAAAAAAAAAAAAAAAD7FOkU6QBsVWEAAIQAAAAAAQAAAAIKTHVjYXMtaU1hYwVsb2NhbAAAHIABAAAAeAAQ\/oAAAAAAAADaMGL\/\/lYAHMAMAAGAAQAAAHgABKn+ps\/ADAAcgAEAAAB4ABD+gAAAAAAAANowYv\/+VgAc","pkt_caplen":162,"pkt_type":34525,"pkt_ipoffset":14}
+0581{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":866,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1432582284805,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"lucas-imac.local"}}
+0448{"flow_id":33,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":867,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582285,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABInyUAAEARVS\/AqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1432582224235,"flow_last_seen":1432582224264,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"5.178.42.26","src_port":49174,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0471{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":6,"flow_packet_id":3,"flow_first_seen":1432582224235,"flow_last_seen":1432582224264,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"5.178.42.26","src_port":49174,"dst_port":80,"l4_proto":"tcp"}
+0530{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1432582224210,"flow_last_seen":1432582224240,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.82","src_port":49173,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0473{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":4,"flow_packet_id":3,"flow_first_seen":1432582224210,"flow_last_seen":1432582224240,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.82","src_port":49173,"dst_port":80,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":2,"flow_packet_id":3,"flow_first_seen":1432582223077,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.111","src_port":49163,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":2,"flow_packet_id":3,"flow_first_seen":1432582223077,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.111","src_port":49163,"dst_port":443,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1432582223075,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.121","src_port":49166,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":1,"flow_packet_id":3,"flow_first_seen":1432582223075,"flow_last_seen":1432582223379,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.154.66.121","src_port":49166,"dst_port":443,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":9,"flow_packet_id":3,"flow_first_seen":1432582225329,"flow_last_seen":1432582225381,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.130.137.77","src_port":49176,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":9,"flow_packet_id":3,"flow_first_seen":1432582225329,"flow_last_seen":1432582225381,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.130.137.77","src_port":49176,"dst_port":443,"l4_proto":"tcp"}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":5,"flow_packet_id":5,"flow_first_seen":1432582224230,"flow_last_seen":1432582224260,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":44,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"23.50.148.228","src_port":49172,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":5,"flow_packet_id":5,"flow_first_seen":1432582224230,"flow_last_seen":1432582224260,"flow_tot_l4_data_len":221,"flow_min_l4_data_len":20,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":44,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"23.50.148.228","src_port":49172,"dst_port":443,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1432582227884,"flow_last_seen":1432582228167,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.14","src_port":49203,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":14,"flow_packet_id":3,"flow_first_seen":1432582227884,"flow_last_seen":1432582228167,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":20,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.14","src_port":49203,"dst_port":443,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":8,"flow_packet_id":3,"flow_first_seen":1432582225324,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.55","src_port":49165,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":8,"flow_packet_id":3,"flow_first_seen":1432582225324,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.55","src_port":49165,"dst_port":443,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1432582225313,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.53","src_port":49175,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":7,"flow_packet_id":3,"flow_first_seen":1432582225313,"flow_last_seen":1432582225533,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.53","src_port":49175,"dst_port":443,"l4_proto":"tcp"}
+0525{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1432582224208,"flow_last_seen":1432582224417,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49169,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":3,"flow_packet_id":3,"flow_first_seen":1432582224208,"flow_last_seen":1432582224417,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49169,"dst_port":443,"l4_proto":"tcp"}
+0795{"flow_id":40,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":868,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582288,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFAAAP8RdlUAAAAA\/\/\/\/\/wBEAEMBNOdPAQEGALYzLg0AEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":1432582296337,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":45,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACalSUAAEARuYTAqAIEHw1JMM46DZYAhue1AAMAaiESpEIAAPA16Ue1KOAmhBVAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":871,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":45,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":1432582296337,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":45,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":872,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaZm0AAEAR6DzAqAIEHw1JMM46DZYAhue1AAMAaiESpEIAAPA16Ue1KOAmhBVAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":1432582296337,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":46,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACajDIAAEARrnfAqAIEHw1dMM46DZYAhkaaAAMAaiESpEIAABQXleBLNAVxhWFAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":873,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":46,"flow_packet_id":1,"flow_first_seen":1432582296337,"flow_last_seen":1432582296337,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":46,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":874,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACalgkAAEARpKDAqAIEHw1dMM46DZYAhkaaAAMAaiESpEIAABQXleBLNAVxhWFAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0550{"flow_id":47,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaRlMAAEARAcfAqAIEHw1PwM46DZYAhjlFAAMAaiESpEIAAL9\/1m08YXkuT0ZAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0540{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":875,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":47,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0550{"flow_id":47,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":876,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa1Y0AAEARcozAqAIEHw1PwM46DZYAhjlFAAMAaiESpEIAAL9\/1m08YXkuT0ZAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"179.60.192.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":48,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaIqQAAEARINbAqAIEszzAMM46DZYAhuAOAAMAaiESpEIAAHR4erx3E5L39hlAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":877,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":48,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"179.60.192.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":48,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":878,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaNRkAAEARDmHAqAIEszzAMM46DZYAhuAOAAMAaiESpEIAAHR4erx3E5L39hlAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"173.252.114.1","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":49,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa4C0AAEARtrvAqAIErfxyAc46DZYAhqERAAMAaiESpEIAAPckPngMfZVuqj1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":879,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":49,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"173.252.114.1","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":49,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":880,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaP+kAAEARVwDAqAIErfxyAc46DZYAhqERAAMAaiESpEIAAPckPngMfZVuqj1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.90.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":50,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaOAUAAEARBaXAqAIEHw1aMM46DZYAhuQ6AAMAaiESpEIAAEIAbV8qcywo32JAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":881,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":50,"flow_packet_id":1,"flow_first_seen":1432582296338,"flow_last_seen":1432582296338,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.90.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":50,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":882,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaLOMAAEAREMfAqAIEHw1aMM46DZYAhuQ6AAMAaiESpEIAAEIAbV8qcywo32JAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":1432582296339,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.74.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":51,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACafE8AAEAR0VrAqAIEHw1KMM46DZYAhr8lAAMAaiESpEIAAMYoECn4BPzbT0BAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":883,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":51,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":1432582296339,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.74.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":51,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":884,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa1VQAAEAReFXAqAIEHw1KMM46DZYAhr8lAAMAaiESpEIAAMYoECn4BPzbT0BAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":1432582296339,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.84.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0549{"flow_id":52,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaPWIAAEARBkjAqAIEHw1UMM46DZYAhgQrAAMAaiESpEIAAPM63M4iUJ72Oh1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0539{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":885,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":52,"flow_packet_id":1,"flow_first_seen":1432582296339,"flow_last_seen":1432582296339,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.84.48","src_port":52794,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0549{"flow_id":52,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":886,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa4JwAAEARYw3AqAIEHw1UMM46DZYAhgQrAAMAaiESpEIAAPM63M4iUJ72Oh1AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":46,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":887,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABItbcAAFYRcAQfDV0wwKgCBA2WzjoANObxAQMAGCESpEIAABQXleBLNAVxhWEAIAAIAAG2aW4xsYdAAgAIAAABTYyPEzk=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":46,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":888,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABItbgAAFYRcAMfDV0wwKgCBA2WzjoANObvAQMAGCESpEIAABQXleBLNAVxhWEAIAAIAAG2aW4xsYdAAgAIAAABTYyPEzs=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":52,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":889,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIu\/4AAFIRdr0fDVQwwKgCBA2WzjoANKRaAQMAGCESpEIAAPM63M4iUJ72Oh0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE2E=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":52,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":890,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIu\/8AAFIRdrwfDVQwwKgCBA2WzjoANKRZAQMAGCESpEIAAPM63M4iUJ72Oh0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE2I=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":48,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":891,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI4fkAAFYRTJKzPMAwwKgCBA2WzjoANIBbAQMAGCESpEIAAHR4erx3E5L39hkAIAAIAAG2aW4xsYdAAgAIAAABTYyPE0Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":48,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":892,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI4fsAAFYRTJCzPMAwwKgCBA2WzjoANIBZAQMAGCESpEIAAHR4erx3E5L39hkAIAAIAAG2aW4xsYdAAgAIAAABTYyPE0Y=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":50,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":893,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3osAAFMRTTAfDVowwKgCBA2WzjoANIR9AQMAGCESpEIAAEIAbV8qcywo32IAIAAIAAG2aW4xsYdAAgAIAAABTYyPE04=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":50,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":894,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3owAAFMRTS8fDVowwKgCBA2WzjoANIR7AQMAGCESpEIAAEIAbV8qcywo32IAIAAIAAG2aW4xsYdAAgAIAAABTYyPE1A=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":45,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":895,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIVHgAAFQR50MfDUkwwKgCBA2WzjoANIfaAQMAGCESpEIAAPA16Ue1KOAmhBUAIAAIAAG2aW4xsYdAAgAIAAABTYyPE2w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":45,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":896,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIVHkAAFQR50IfDUkwwKgCBA2WzjoANIfZAQMAGCESpEIAAPA16Ue1KOAmhBUAIAAIAAG2aW4xsYdAAgAIAAABTYyPE20=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":51,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":897,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIfMQAAFURvPcfDUowwKgCBA2WzjoANF8yAQMAGCESpEIAAMYoECn4BPzbT0AAIAAIAAG2aW4xsYdAAgAIAAABTYyPE4Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":51,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":898,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIfMUAAFURvPYfDUowwKgCBA2WzjoANF8wAQMAGCESpEIAAMYoECn4BPzbT0AAIAAIAAG2aW4xsYdAAgAIAAABTYyPE4Y=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":49,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":899,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3hsAAE0RrN+t\/HIBwKgCBA2WzjoANEEuAQMAGCESpEIAAPckPngMfZVuqj0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE3Q=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":49,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":900,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI3h0AAE0RrN2t\/HIBwKgCBA2WzjoANEEsAQMAGCESpEIAAPckPngMfZVuqj0AIAAIAAG2aW4xsYdAAgAIAAABTYyPE3Y=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":47,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":901,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABID4sAAFMRJqEfDU\/AwKgCBA2WzjoANNk2AQMAGCESpEIAAL9\/1m08YXkuT0YAIAAIAAG2aW4xsYdAAgAIAAABTYyPE58=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":47,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":902,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582296,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABID4wAAFMRJqAfDU\/AwKgCBA2WzjoANNk0AQMAGCESpEIAAL9\/1m08YXkuT0YAIAAIAAG2aW4xsYdAAgAIAAABTYyPE6E=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0795{"flow_id":40,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":925,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582297,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFEAAP8RdlQAAAAA\/\/\/\/\/wBEAEMBNOdGAQEGALYzLg0AGgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":17,"flow_packet_id":5,"flow_first_seen":1432582233314,"flow_last_seen":1432582233518,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.8","src_port":49192,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP","category":"Web"},"http": {}}
+0474{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":17,"flow_packet_id":5,"flow_first_seen":1432582233314,"flow_last_seen":1432582233518,"flow_tot_l4_data_len":160,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.186.135.8","src_port":49192,"dst_port":80,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":21,"flow_packet_id":3,"flow_first_seen":1432582235999,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.59","src_port":49180,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":21,"flow_packet_id":3,"flow_first_seen":1432582235999,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.59","src_port":49180,"dst_port":443,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":20,"flow_packet_id":3,"flow_first_seen":1432582235998,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.37","src_port":49181,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":20,"flow_packet_id":3,"flow_first_seen":1432582235998,"flow_last_seen":1432582236282,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.37","src_port":49181,"dst_port":443,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":19,"flow_packet_id":3,"flow_first_seen":1432582234869,"flow_last_seen":1432582235028,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.52","src_port":49182,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":19,"flow_packet_id":3,"flow_first_seen":1432582234869,"flow_last_seen":1432582235028,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.52","src_port":49182,"dst_port":443,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":18,"flow_packet_id":3,"flow_first_seen":1432582233751,"flow_last_seen":1432582233926,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.49","src_port":49191,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":932,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":18,"flow_packet_id":3,"flow_first_seen":1432582233751,"flow_last_seen":1432582233926,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.49","src_port":49191,"dst_port":443,"l4_proto":"tcp"}
+0499{"flow_id":52,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":936,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582302,"pkt_len":128,"pkt":"xiwDYGpkAPS5Jrv0CABFwABy39QAAEARY\/3AqAIEHw1UMM46DZYAXmPlgckACQoVDhA\/cDmPP2GH+dw+eSd5Ut6D6R34wbCvsCoYFHs8lda5k2P52vD1dbELS8rcXVWf0VY2IFXDP5up5wUe\/tYGcpldgAAAAb5uMWFJKkRckYE=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":52,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":938,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582302,"pkt_len":128,"pkt":"APS5Jrv0xiwDYGpkCABFAAByXYsAAFIR1QYfDVQwwKgCBA2WzjoAXmv+gckACSB2M\/5X8+7ElJjZtJTkAZbDxrLHHhhUBR+1hKIMqEIhSPb6Wg4Ja9XBi2fc\/D+ZPefGYMYzCVqJhDuK+Gsma2+PG7u5gAAAAZEEAqnD8KaHguk=","pkt_caplen":128,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":52,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":939,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":64,"pkt":"APS5Jrv0xiwDYGpkCABFAAAyXjMAAFIR1J4fDVQwwKgCBA2WzjoAHuwEgdEAASB2M\/6AAAACcCTfJHwxNRurEw==","pkt_caplen":64,"pkt_type":2048,"pkt_ipoffset":14}
+0497{"flow_id":52,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":940,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":127,"pkt":"APS5Jrv0xiwDYGpkCABFAABxXjUAAFIR1F0fDVQwwKgCBA2WzjoAXdR7gPh9XAAACgAgdjP+xbNZ0qThdlWLsdqCEJPTsqg7evnPQ3eUhqsJJFxY778HlfnnqcTGET+ohtt85LaCJEX7eumX4\/hkfEghGRFeYluaEDHG3J6+ow==","pkt_caplen":127,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":52,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":941,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":68,"pkt":"APS5Jrv0xiwDYGpkCABFAAA2XjkAAFIR1JQfDVQwwKgCBA2WzjoAIvdCgdAAAiB2M\/6YWHBsgAAAA8HppQatQ+qGmOI=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0484{"flow_id":52,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":942,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAABnXjsAAFIR1GEfDVQwwKgCBA2WzjoAUxlRgPh9XQAAFAAgdjP+q\/kEFZvwnYsAR\/3b\/z4vmiArWusMzlvlxk7xfp4CqqMe5gIbMHd0Pu67hnxgPl7BYqAXFBnhHsakV8adx2yU","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":52,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":943,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAABnXkMAAFIR1FkfDVQwwKgCBA2WzjoAU5IggPh9XgAAHgAgdjP+kn9SIGTv4CA0pWaHCw6Qx7A53BHTLoo9qLy5G+0vUNCkpXIDcHUY7ViZf0VOkJ1Ip67ZRUk2\/RufvW3SysP9","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432582303186,"flow_last_seen":1432582303186,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":52794,"dst_port":51727,"l4_proto":"udp"}
+0441{"flow_id":53,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI\/ugAAEARW8\/AqAIEAcJav846yg8ANOnpAAEAGCESpEL3EVgs34UDSm8ZSi0ACAAUBo8N2M5l\/vTJutWmGJeHW1ycL5M=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":944,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":53,"flow_packet_id":1,"flow_first_seen":1432582303186,"flow_last_seen":1432582303186,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":52794,"dst_port":51727,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0669{"flow_id":52,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":946,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":252,"pkt":"xiwDYGpkAPS5Jrv0CABFwADuQ4kAAEAR\/8zAqAIEHw1UMM46DZYA2tRwgPhVpwAACgAKFQ4QuqT9ptkgZ5Y2FvijqWVfAD6UVcFEIzFKF\/JNQN0Y+dJMFtTCgVCZpfHDSiB+Xmr+\/h8AYGb1t+Sn4Xec5ai6Ah4\/btvRhWVJI5CHZ18pma97DhgyhUsOS\/C63VuOwqbmhhWzUsrF\/hYCDoUbltfgeNlWBkgRMKwrDgKhSyFB0ptNTYoTVhjLIiZKXnPkwTmV6oZgcUtgsE+iaefjPsJOx\/4\/6Z2jskQuOeGO9vDLrzXnzaySedSQdWtTou2OLhwnSaYkDaC+","pkt_caplen":252,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":52,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":947,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":68,"pkt":"xiwDYGpkAPS5Jrv0CABFwAA2130AAEARbJDAqAIEHw1UMM46DZYAIroUgdAAAgoVDhB3PeWjgAAAAndoOROZ+YMI74E=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":52,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":948,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAABnXm8AAFIR1C0fDVQwwKgCBA2WzjoAUyQOgPh9XwAAKAAgdjP+380xJX1FWSmeObsDkWqrKkLjxQDaAHcKg6HqDt1Ks2QxpVBOLRL9\/WnpUJd8BMROrpV3ZWNfb8WYnsm\/Edll","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432582303300,"flow_last_seen":1432582303300,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":52794,"dst_port":9665,"l4_proto":"udp"}
+0440{"flow_id":54,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIibwAAEARIT7AqAIEW\/2wQc46JcEANNm\/AAEAGCESpEJqJ0QlQ7N3HdICmh0ACAAUdy+mbVoXRYBrOj7VSucZjRXX5oc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0594{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":951,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":54,"flow_packet_id":1,"flow_first_seen":1432582303300,"flow_last_seen":1432582303300,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":52794,"dst_port":9665,"l4_proto":"udp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port"},"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0659{"flow_id":52,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":954,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":246,"pkt":"xiwDYGpkAPS5Jrv0CABFwADoe2oAAEARx\/HAqAIEHw1UMM46DZYA1LT\/gPhVqAAAFAAKFQ4QO5YRnqxmcDxXUwJcX+x8T8ZmO3EsLKIXqky0fB5AZTybZVFSm0WTZPklkb8\/5llTCzEbtxbEFQRMdmmWnqYLMO+U\/inIg+s8k3y8P+dBWxlU49qs3a0CuXtnbKdc+6bgmshii4WqbMG\/MaaOc3yJMTdpJeOBf1VxNFAilTYAcKju3jXEp5YZ0SZ6lNguqjBQsJqmjsbgl0f\/MyPKvc60IvIACSiDcTxFntnkiIJKBvO8Lm4irtnZRQE0hvlNvaKl","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":54,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":964,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABI2uIAAC8R4ddb\/bBBwKgCBCXBzjoANGAJAAEAGCESpEIU61RZ3ZsVVlL2qyQACAAUqmIWy0WW07d7nJ5APIsHCVUVL7g=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":54,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":965,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIbOUAAEARPhXAqAIEW\/2wQc46JcEANIk8AQEAGCESpEIU61RZ3ZsVVlL2qyQACAAU6CFWVCyx0lHi4kItE160ER18SxI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":54,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":966,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIgjEAAEARKMnAqAIEW\/2wQc46JcEANMh1AAEAGCESpEIsOC9qKgcRQkh47WsACAAU2ZdPl1kHfCpml7O+IRdvILydfEM=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":54,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":968,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"APS5Jrv0xiwDYGpkCABFAABIBlkAAC8RtmFb\/bBBwKgCBCXBzjoANK7MAQEAGCESpEIsOC9qKgcRQkh47WsACAAUfDHrJU+Q0hLT1ujVdOoJkJQ5oh0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0527{"flow_id":54,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":969,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":148,"pkt":"APS5Jrv0xiwDYGpkCABFAACGn+EAAC8RHJtb\/bBBwKgCBCXBzjoAcvEqgcgADiB2M\/791SdyqlAqImpztq4uzEXsSv9PRAS7SscEpCN3WkeSqI1PR+0RnGacvWTO5KhUtkDP\/XZj6X3ehYWgAKgDzn8YmxaKM+F3YUR8Z3sJtuullTCtK5aAAAAEL6bXEoCZRh4wrQ==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":54,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":971,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":138,"pkt":"APS5Jrv0xiwDYGpkCABFAAB82sEAAC8R4cRb\/bBBwKgCBCXBzjoAaEG2gPh9YgAARgAgdjP+ZOQxMUUUVhGzWER95FE\/8a\/z1jAd3GHrzIJBa4pI7kA9Gqdp5QBB5jtx9XoKv4hMrrwamjvTCP4ZxHlAD5bRCkMCyUzSR0YdEqlSscK8NtYV6p09","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":53,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":972,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIdWcAAEAR5VDAqAIEAcJav846yg8ANHIiAAEAGCESpEJT9nMzid0wAn5OIFYACAAUj7UY3ZixJKF1uir6vHE5QBib28w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0762{"flow_id":54,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":973,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":320,"pkt":"xiwDYGpkAPS5Jrv0CABFwAEybwcAAEAROwnAqAIEW\/2wQc46JcEBHlLvgPhVqwAAMgAKFQ4Q9NaMXNlq4Y6qmvtCPEfAjQUA7U3\/uSTEhhNW0B5j8R+GJN5mYg92WnsaKmHYpHzXxVA+jZ7IaDr1l+D35Bbc1klWJk0QnChnL3tc6k8OsIGwx7Y1T1oEKlShDdoZVCzmm\/O\/ReB3H8lSKTDYfi3jogNGRiAa\/19FNRLGbADaLBYEz2Ha4Sf9frbVjVT0OvtNOMarfGZaAHwUxCXsLQCDmP7HieB0\/YLcY\/FK+N77a9JN\/SYRkYneKdd4KfpxB9NTp7HkW4pcv+2Bvbp9q\/cEQqwRYT\/7xCbzC8UkQx5QYGKWBllhCkptltXY7w9B5JlXLd8cddzZlVSFpe6c58NtDGjGgHxeTgtHcd4=","pkt_caplen":320,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":54,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":974,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":181,"pkt":"APS5Jrv0xiwDYGpkCABFAACnquIAAC8REXlb\/bBBwKgCBCXBzjoAk5vAgPh9YwAAUAAgdjP+UgylMm9kt9ptIlBeLOh0Id9AD3M2\/ABgM2DdIsf0tkrM7lgS4lrFsXMmL2hEfIEXUsuuCCCODO1QXBMq2ogOc9SlcwdPFcVpXadZaVrOQFqMTrvD\/2A8osi7N7IzHqhjcORVr1xN+eR0tbzYPVCIBXJU50XXNtISKe6rtzDT8A==","pkt_caplen":181,"pkt_type":2048,"pkt_ipoffset":14}
+0418{"flow_id":54,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":975,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582303,"pkt_len":68,"pkt":"APS5Jrv0xiwDYGpkCABFAAA2GgoAAC8RosJb\/bBBwKgCBCXBzjoAIoIhgdAAAiB2M\/4\/I5E2gAAABVKK6AlI19vANM8=","pkt_caplen":68,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_id":54,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":976,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582304,"pkt_len":246,"pkt":"xiwDYGpkAPS5Jrv0CABFwADoMZkAAEAReMHAqAIEW\/2wQc46JcEA1OJdgPhVrAAAPAAKFQ4Q43MEe3KLaVU1xewlW9cq7cF97\/dYnRDmtBGTmyUbx\/HUUY4j8xnaZQRbMiJS6cflwOof2xWiDQY43WBbUKsBBcp4vZT0OnUXnhRVMpcRt97yVSku1FBRqMbttg\/UgNNaKeSJ8eg5DWDBvBJohAODrMF065CNErFIzfKYE0mL+6bxIud94h95WNqNPOcmKG7luU2H9Svwi8Gi6LmFvGyOJvrHc7f7R+zGkLlGz+fbzmY+VelWfjy8CQoHqcWD9E4A","pkt_caplen":246,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_id":54,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":977,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582304,"pkt_len":148,"pkt":"xiwDYGpkAPS5Jrv0CABFwACG3VkAAEARzWLAqAIEW\/2wQc46JcEAcpFDgcgADgoVDhDm0zkikkII0aBuupe9qgHQnKTE5Oa4fR\/vd8dVKWNG9eir0ru5v3RzVUyHHLwiMq\/Zni9wmKMgoMFg7VM1JNS5F2703crbvVDDL+GcZoseaqBhTByAAAADT5cAC8k5qBozYw==","pkt_caplen":148,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_id":54,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":978,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582304,"pkt_len":242,"pkt":"APS5Jrv0xiwDYGpkCABFAADk9q4AAC8RxW9b\/bBBwKgCBCXBzjoA0JVGgPh9ZAAAWgAgdjP+sLXxIwS2phlds5CdH0PA6\/SXm+YyBzIymAI3YPz5w5kJS4AT7ClBDknu5fafMCvfLWRVwan7mJHHnimIrbxA8vmpNUeBhRCxHVN1\/wHez630pzJtY++yWLk7jr+Fbp3KwXBrlTiPifJfZFq9U229ZK49OPvqgt7FCRD1NfalM5JpwBC0i5UPTyUq1B98ZsgxsVXrvgvgIOoDNin8cITdHArwVVBk5S042HjYG4em\/t8CujAw196F3lku9RI=","pkt_caplen":242,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":54,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":979,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582304,"pkt_len":226,"pkt":"xiwDYGpkAPS5Jrv0CABFwADUHdYAAEARjJjAqAIEW\/2wQc46JcEAwKTWgPhVrQAARgAKFQ4QalFncW6NRw4A6gM1fmXENXmb2KdYDN5PXF9KsV0VupMSWQijDp\/O\/sdaSngV0TejlKbXTatx79gNJUeypuKmjvqU8vRs6yV6ONi19JiTK9iCnFCd88NO4eF62+Gk8TYil8sJBJVMvCfptTtD85KD\/XngBbIpCzX7mM42rF3\/9i9g4NOp+kjlyQLi0kYQkhw4r\/X9O8cRC6OHWgEpTOwn52brE5QGsgWrQbd8IA==","pkt_caplen":226,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":54,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":980,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582304,"pkt_len":117,"pkt":"APS5Jrv0xiwDYGpkCABFAABn7PkAAC8Rz6Fb\/bBBwKgCBCXBzjoAU9yqgPh9ZQAAZAAgdjP+Dibhh+kUFB6If5JZ5tjXjRTlnz8Ivtmmtm+TjUk6ij8yFFGSg7gZOsT3R0qQPBx\/204tvLAa88M0JAmJ7ZN9","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":53,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":985,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582304,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIRQUAAEARFbPAqAIEAcJav846yg8ANIW7AAEAGCESpEIZoNpuKgJFUxs+kVcACAAURUHG5kUyySWGpYslvS2cuO+ddv8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":53,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":998,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582305,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI+yoAAEARX43AqAIEAcJav846yg8ANESCAAEAGCESpEKHi4QAVEzkfV5fTxcACAAUSe5EBzgFfmq12TvpmvAMFQPSazU=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0796{"flow_id":40,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1006,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582305,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFIAAP8RdlMAAAAA\/\/\/\/\/wBEAEMBNOc+AQEGALYzLg0AIgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":53,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1010,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582305,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIr1YAAEARq2HAqAIEAcJav846yg8ANKgQAAEAGCESpELZAvkIKfkpFBb9pE8ACAAUpwxPL3W2phMpSSxWPm\/EvQ75gEI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":53,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1021,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582306,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABI4aUAAEAReRLAqAIEAcJav846yg8ANKLfAAEAGCESpEIz2ONY3CmHVuVWzUMACAAUZrHzQ82TK7U+\/hqibPpy5E4012Y=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+1063{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1022,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582306,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":53,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1033,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582306,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIKgAAAEARMLjAqAIEAcJav846yg8ANPy6AAEAGCESpEL31FdWatBeIMDvxDAACAAUSFPzRc996SzqmZ6E1q9HrR63LhY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":53,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1043,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582307,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIC\/EAAEARTsfAqAIEAcJav846yg8ANL9aAAEAGCESpEJtcaF4+ugdL0CNqlQACAAUaPHflDa2x9PoZdiwWZf\/\/ginRuE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":53,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1052,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582308,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIsHQAAEARqkPAqAIEAcJav846yg8ANE36AAEAGCESpEItkB8JCH8yd1sjMhQACAAUEQzuvewy\/DjCKlzLvHRA+8aLVJs=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":53,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1082,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582308,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIp3sAAEARszzAqAIEAcJav846yg8ANDBqAAEAGCESpEI2+O8fm7GQQ8RZfFAACAAU6QQG+fZzRwp0tCMEhTfwUyAxZHE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":53,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582309,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIogkAAEARuK7AqAIEAcJav846yg8ANKfKAAEAGCESpEIkfOkTsinVRe+IpC0ACAAU8IG+HfRTsolvfQt3aQvidfLvoyA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":53,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1155,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":86,"pkt":"xiwDYGpkAPS5Jrv0CABFwABIF5sAAEARQx3AqAIEAcJav846yg8ANB3aAAEAGCESpEI2BLYsKIzOYULIUz8ACAAUke3XWAt6X\/RcnH2DfB+KIJfMnqI=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":45,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACas04AAEARm1vAqAIEHw1JMM46DZYAht+3CAAAaiESpEIAAPA16Ue1KOAmhBZAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":46,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACawzQAAEARd3XAqAIEHw1dMM46DZYAhj6cCAAAaiESpEIAABQXleBLNAVxhWJAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":47,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACavs8AAEARiUrAqAIEHw1PwM46DZYAhjFHCAAAaiESpEIAAL9\/1m08YXkuT0dAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":48,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACawH0AAEARgvzAqAIEszzAMM46DZYAhtgQCAAAaiESpEIAAHR4erx3E5L39hpAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":49,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACa4soAAEARtB7AqAIErfxyAc46DZYAhpkTCAAAaiESpEIAAPckPngMfZVuqj5AAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0551{"flow_id":50,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACaDrsAAEARLu\/AqAIEHw1aMM46DZYAhtw8CAAAaiESpEIAAEIAbV8qcywo32NAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":51,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582310,"pkt_len":168,"pkt":"xiwDYGpkAPS5Jrv0CABFwACacW8AAEAR3DrAqAIEHw1KMM46DZYAhrcnCAAAaiESpEIAAMYoECn4BPzbT0FAAQBmAQAMg3Xe01iNThr0oMxz4g8yD3fN+Bpz1wfmSsMwaadvnUwroGLz0VM5S4DttzrmDPMSBOgeXpPF04uIBCkoaMH+hW2Svovhs3GWh\/N1CnZ6UVrnXy6FvDLog+b+F7o9EvQF2yeF","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":39,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582311,"pkt_len":70,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA48BUAAEABu8TAqAIEW\/2wQQMDCIcAAAAARQAAjs3hAAAvEe6SW\/2wQcCoAgQlwc46AHoAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0521{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":34,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249292,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.62.150.157","src_port":49194,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":34,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249292,"flow_tot_l4_data_len":96,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"93.62.150.157","src_port":49194,"dst_port":443,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":30,"flow_packet_id":3,"flow_first_seen":1432582244297,"flow_last_seen":1432582244462,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.31","src_port":49164,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":30,"flow_packet_id":3,"flow_first_seen":1432582244297,"flow_last_seen":1432582244462,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.31","src_port":49164,"dst_port":443,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":35,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249492,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49198,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":35,"flow_packet_id":3,"flow_first_seen":1432582249235,"flow_last_seen":1432582249492,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49198,"dst_port":443,"l4_proto":"tcp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":36,"flow_packet_id":3,"flow_first_seen":1432582250339,"flow_last_seen":1432582250618,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49200,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":36,"flow_packet_id":3,"flow_first_seen":1432582250339,"flow_last_seen":1432582250618,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.13","src_port":49200,"dst_port":443,"l4_proto":"tcp"}
+0526{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":31,"flow_packet_id":3,"flow_first_seen":1432582245413,"flow_last_seen":1432582245576,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.8","src_port":49167,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0475{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":31,"flow_packet_id":3,"flow_first_seen":1432582245413,"flow_last_seen":1432582245576,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.8","src_port":49167,"dst_port":443,"l4_proto":"tcp"}
+0796{"flow_id":40,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582313,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFMAAP8RdlIAAAAA\/\/\/\/\/wBEAEMBNOc2AQEGALYzLg0AKgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":12,"flow_packet_id":38,"flow_first_seen":1432582227604,"flow_last_seen":1432582260448,"flow_tot_l4_data_len":15928,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":419,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.178.104.12","src_port":49201,"dst_port":443,"l4_proto":"tcp"}
+0796{"flow_id":40,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582322,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFQAAP8RdlEAAAAA\/\/\/\/\/wBEAEMBNOctAQEGALYzLg0AMwAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":33,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582324,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABIJmQAAEARzfDAqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":55,"flow_packet_id":1,"flow_first_seen":1432582331561,"flow_last_seen":1432582331561,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.39","src_port":49197,"dst_port":443,"l4_proto":"tcp"}
+0397{"flow_id":55,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582331,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAowcFAAEAGFpTAqAIEEaeOJ8AtAbtkgHfvejCYYFAR\/\/+cbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":55,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582331,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo+xwAAO0GcDgRp44nwKgCBAG7wC16MJhgZIB38FARn\/78bwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_id":40,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582331,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFUAAP8RdlAAAAAA\/\/\/\/\/wBEAEMBNOckAQEGALYzLg0APAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":55,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582331,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAo40dAAEAG9Q3AqAIEEaeOJ8AtAbtkgHfwejCYYVAQ\/\/6cbwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":16,"flow_packet_id":53,"flow_first_seen":1432582230648,"flow_last_seen":1432582264928,"flow_tot_l4_data_len":16580,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":312,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49204,"dst_port":443,"l4_proto":"tcp"}
+1063{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582336,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":56,"flow_packet_id":1,"flow_first_seen":1432582355253,"flow_last_seen":1432582355253,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp"}
+0429{"flow_id":56,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":78,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAz7ZAAEAGVELAqAIEEa1CZsA1Abt+ckUjAAAAALAC\/\/9LOwAAAgQFtAEDAwQBAQgKLfwhgQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":56,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1218,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA009MAAO8G4TARrUJmwKgCBAG7wDWkxiaffnJFJIASH\/7nbQAAAgQFoAEDAwQBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":56,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoTu9AAEAG1SHAqAIEEa1CZsA1Abt+ckUkpMYmoFAQQAAIJwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0703{"flow_id":56,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":281,"pkt":"xiwDYGpkAPS5Jrv0CABFAAELcyVAAEAGsAjAqAIEEa1CZsA1Abt+ckUkpMYmoFAYQABJcgAAFgMBAN4BAADaAwNVY3jT+WAMBJPe1sSsxt7B5e33LtE3N+Ij9pRhB6MISiDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVABKAP\/AJMAjwArACcAIwCjAJ8AUwBPAEsAmwCXABcAEwAPAKsApwA\/ADsANAGsAZwA5ADMAFgA9ADwANQAvAArAB8ARwALADAAFAAQBAABHAAAAHQAbAAAYcDUzLWJ1eS5pdHVuZXMuYXBwbGUuY29tAAoACAAGABcAGAAZAAsAAgEAAA0ADAAKBQEEAQIBBAMCAzN0AAA=","pkt_caplen":281,"pkt_type":2048,"pkt_ipoffset":14}
+0777{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1220,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":56,"flow_packet_id":4,"flow_first_seen":1432582355253,"flow_last_seen":1432582355482,"flow_tot_l4_data_len":343,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":85,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0395{"flow_id":56,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1221,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo09YAAO8G4TkRrUJmwKgCBAG7wDWkxiagfnJGB1AQCgI9QgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0523{"flow_id":56,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":146,"pkt":"APS5Jrv0xiwDYGpkCABFAACE09gAAO8G4NsRrUJmwKgCBAG7wDWkxiagfnJGB1AYCgJ94gAAFgMDAFECAABNAwNVY3jTQ3OzV2+3nXXm86LnOOTxKQsOBzom841n\/BAPASDnNWvFSuDQ9RWxNOp1GECdroi8RHuHNQND3XitCRrHVAAEAAAF\/wEAAQAUAwMAAQE=","pkt_caplen":146,"pkt_type":2048,"pkt_ipoffset":14}
+0818{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":1222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":56,"flow_packet_id":6,"flow_first_seen":1432582355253,"flow_last_seen":1432582355622,"flow_tot_l4_data_len":475,"flow_min_l4_data_len":20,"flow_max_l4_data_len":247,"flow_avg_l4_data_len":79,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Apple","category":"Web"},"tls": {"version":"TLSv1.2","client_requested_server_name":"p53-buy.itunes.apple.com","ja3":"799135475da362592a4be9199d258726","ja3s":"c253ec3ad88e42f8da4032682892f9a0","unsafe_cipher":2,"cipher":"TLS_RSA_WITH_RC4_128_MD5"}}
+0448{"flow_id":56,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":91,"pkt":"APS5Jrv0xiwDYGpkCABFAABN09oAAO8G4RARrUJmwKgCBAG7wDWkxib8fnJGB1AYCgK2NAAAFgMDACA6GyjsJmKuYnGv9\/VM4XmZSKbQP31R+VeHkrIAEtY9aA==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":56,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoWCdAAEAGy+nAqAIEEa1CZsA1Abt+ckYHpMYm\/FAQP\/oG7gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":56,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1225,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoLm1AAEAG9aPAqAIEEa1CZsA1Abt+ckYHpMYnIVAQP\/cGzAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":56,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":60,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAu4OtAAEAGQx\/AqAIEEa1CZsA1Abt+ckYHpMYnIVAYQADusAAAFAMDAAEB","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0451{"flow_id":56,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1227,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":91,"pkt":"xiwDYGpkAPS5Jrv0CABFAABNvYhAAEAGZmPAqAIEEa1CZsA1Abt+ckYNpMYnIVAYQABfiQAAFgMDACBlbj7NKOVv0bwX\/wzcSsaG09IbALC\/kFKkm\/Y3LrNvGQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+2354{"flow_id":56,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1228,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1047{"flow_id":56,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1229,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":530,"pkt":"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","pkt_caplen":530,"pkt_type":2048,"pkt_ipoffset":14}
+1156{"flow_id":56,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1230,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":610,"pkt":"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","pkt_caplen":610,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":56,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1231,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","pkt_oversize":false,"pkt_ts":1432582355,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo0+EAAO8G4S4RrUJmwKgCBAG7wDWkxichfnJGDVAQC2k7VAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":40,"flow_packet_id":10,"flow_first_seen":1432582271840,"flow_last_seen":1432582331780,"flow_tot_l4_data_len":3080,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0532{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":0,"flow_packet_id":17,"flow_first_seen":1432582222253,"flow_last_seen":1432582223191,"flow_tot_l4_data_len":1420,"flow_min_l4_data_len":32,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":83,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.70","src_port":49199,"dst_port":993,"l4_proto":"tcp","ndpi": {"proto":"IMAPS.Apple","category":"Web"}}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":0,"flow_packet_id":17,"flow_first_seen":1432582222253,"flow_last_seen":1432582223191,"flow_tot_l4_data_len":1420,"flow_min_l4_data_len":32,"flow_max_l4_data_len":202,"flow_avg_l4_data_len":83,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.172.100.70","src_port":49199,"dst_port":993,"l4_proto":"tcp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":49,"flow_packet_id":5,"flow_first_seen":1432582296338,"flow_last_seen":1432582310666,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"173.252.114.1","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":48,"flow_packet_id":5,"flow_first_seen":1432582296338,"flow_last_seen":1432582310666,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"179.60.192.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":41,"flow_packet_id":2,"flow_first_seen":1432582284805,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"169.254.166.207","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0527{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":55,"flow_packet_id":3,"flow_first_seen":1432582331561,"flow_last_seen":1432582331825,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.39","src_port":49197,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0476{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":55,"flow_packet_id":3,"flow_first_seen":1432582331561,"flow_last_seen":1432582331825,"flow_tot_l4_data_len":60,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.167.142.39","src_port":49197,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":47,"flow_packet_id":5,"flow_first_seen":1432582296338,"flow_last_seen":1432582310665,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":52,"flow_packet_id":20,"flow_first_seen":1432582296339,"flow_last_seen":1432582310668,"flow_tot_l4_data_len":2313,"flow_min_l4_data_len":30,"flow_max_l4_data_len":297,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.84.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":51,"flow_packet_id":5,"flow_first_seen":1432582296339,"flow_last_seen":1432582310667,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.74.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":50,"flow_packet_id":5,"flow_first_seen":1432582296338,"flow_last_seen":1432582310667,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.90.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":46,"flow_packet_id":5,"flow_first_seen":1432582296337,"flow_last_seen":1432582310664,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":45,"flow_packet_id":5,"flow_first_seen":1432582296337,"flow_last_seen":1432582310664,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":52794,"dst_port":3478,"l4_proto":"udp"}
+0485{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":54,"flow_packet_id":198,"flow_first_seen":1432582303300,"flow_last_seen":1432582311036,"flow_tot_l4_data_len":23686,"flow_min_l4_data_len":31,"flow_max_l4_data_len":518,"flow_avg_l4_data_len":119,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":52794,"dst_port":9665,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":32,"flow_packet_id":4,"flow_first_seen":1432582246280,"flow_last_seen":1432582336425,"flow_tot_l4_data_len":2040,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0487{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":44,"flow_packet_id":2,"flow_first_seen":1432582284806,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::c42c:3ff:fe60:6a64","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0523{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":13,"flow_packet_id":180,"flow_first_seen":1432582227643,"flow_last_seen":1432582361929,"flow_tot_l4_data_len":18754,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"184.173.179.37","src_port":49202,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0486{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":13,"flow_packet_id":180,"flow_first_seen":1432582227643,"flow_last_seen":1432582361929,"flow_tot_l4_data_len":18754,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":104,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"184.173.179.37","src_port":49202,"dst_port":5222,"l4_proto":"tcp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":53,"flow_packet_id":12,"flow_first_seen":1432582303186,"flow_last_seen":1432582310134,"flow_tot_l4_data_len":624,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":52794,"dst_port":51727,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":15,"flow_packet_id":22,"flow_first_seen":1432582228503,"flow_last_seen":1432582353955,"flow_tot_l4_data_len":5178,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":235,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.110.229.14","src_port":49193,"dst_port":5223,"l4_proto":"tcp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":43,"flow_packet_id":2,"flow_first_seen":1432582284806,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":33,"flow_packet_id":3,"flow_first_seen":1432582247125,"flow_last_seen":1432582324191,"flow_tot_l4_data_len":156,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0484{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":38,"flow_packet_id":464,"flow_first_seen":1432582258730,"flow_last_seen":1432582268457,"flow_tot_l4_data_len":37144,"flow_min_l4_data_len":30,"flow_max_l4_data_len":491,"flow_avg_l4_data_len":80,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","src_port":51518,"dst_port":9344,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1432582227526,"flow_last_seen":1432582227594,"flow_tot_l4_data_len":262,"flow_min_l4_data_len":45,"flow_max_l4_data_len":217,"flow_avg_l4_data_len":131,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":51897,"dst_port":53,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":28,"flow_packet_id":24,"flow_first_seen":1432582238792,"flow_last_seen":1432582267974,"flow_tot_l4_data_len":4009,"flow_min_l4_data_len":30,"flow_max_l4_data_len":324,"flow_avg_l4_data_len":167,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.93.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":27,"flow_packet_id":5,"flow_first_seen":1432582238791,"flow_last_seen":1432582267973,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.79.192","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":26,"flow_packet_id":5,"flow_first_seen":1432582238791,"flow_last_seen":1432582267973,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.91.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":29,"flow_packet_id":5,"flow_first_seen":1432582238792,"flow_last_seen":1432582267975,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.73.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":25,"flow_packet_id":5,"flow_first_seen":1432582238791,"flow_last_seen":1432582267972,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.85.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":24,"flow_packet_id":5,"flow_first_seen":1432582238791,"flow_last_seen":1432582267971,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.64.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":23,"flow_packet_id":5,"flow_first_seen":1432582238791,"flow_last_seen":1432582267970,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.70.48","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":22,"flow_packet_id":5,"flow_first_seen":1432582238790,"flow_last_seen":1432582267969,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"31.13.100.14","src_port":51518,"dst_port":3478,"l4_proto":"udp"}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":11,"flow_packet_id":2,"flow_first_seen":1432582227595,"flow_last_seen":1432582227624,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":42,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":52190,"dst_port":53,"l4_proto":"udp"}
+0448{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":39,"flow_packet_id":10,"flow_first_seen":1432582267983,"flow_last_seen":1432582311138,"flow_tot_l4_data_len":360,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"91.253.176.65","l4_proto":"icmp"}
+0486{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":42,"flow_packet_id":2,"flow_first_seen":1432582284805,"flow_last_seen":1432582285047,"flow_tot_l4_data_len":150,"flow_min_l4_data_len":42,"flow_max_l4_data_len":108,"flow_avg_l4_data_len":75,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::da30:62ff:fe56:1c","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":37,"flow_packet_id":15,"flow_first_seen":1432582258587,"flow_last_seen":1432582267438,"flow_tot_l4_data_len":780,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"1.194.90.191","src_port":51518,"dst_port":60312,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap","flow_id":56,"flow_packet_id":32,"flow_first_seen":1432582355253,"flow_last_seen":1432582356195,"flow_tot_l4_data_len":8617,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":269,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp"}
+0158{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":1253,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_call.pcap"}
diff --git a/tests/result/nDPId_whatsapp_login_chat.pcap.txt b/tests/result/nDPId_whatsapp_login_chat.pcap.txt
new file mode 100644
index 000000000..0d3ead7fc
--- /dev/null
+++ b/tests/result/nDPId_whatsapp_login_chat.pcap.txt
@@ -0,0 +1,79 @@
+0371{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1432582377898,"flow_last_seen":1432582377898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0444{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582377,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAABI56kAAEARDKvAqAIBwKgC\/+EV4RUANKgAU3BvdFVkcDCYJeGQmjjiDQABAARIlcID1NylhjSgAeWF26p2NNVFJFGe2SE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0526{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1432582377898,"flow_last_seen":1432582377898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582379543,"flow_last_seen":1432582379543,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp"}
+0423{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582379,"pkt_len":76,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA+Df0AAEAR51zAqAIEwKgCAfEBADUAKg3CrIsBAAABAAAAAAAAA2UxMgh3aGF0c2FwcANuZXQAAAEAAQ==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0657{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432582379543,"flow_last_seen":1432582379543,"flow_tot_l4_data_len":42,"flow_min_l4_data_len":42,"flow_max_l4_data_len":42,"flow_avg_l4_data_len":42,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"e12.whatsapp.net","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0595{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582379,"pkt_len":204,"pkt":"APS5Jrv0xiwDYGpkCABFAAC+Me8AAEARwurAqAIBwKgCBAA18QEAqrdkrIuBgAABAAgAAAAAA2UxMgh3aGF0c2FwcANuZXQAAAEAAcAMAAEAAQAAAiQABLitsy\/ADAABAAEAAAIkAASeVTpnwAwAAQABAAACJAAEuK2zLMAMAAEAAQAAAiQABLitsyPADAABAAEAAAIkAARsqLDGwAwAAQABAAACJAAEnlU6NMAMAAEAAQAAAiQABJ5VOg\/ADAABAAEAAAIkAASeVTol","pkt_caplen":204,"pkt_type":2048,"pkt_ipoffset":14}
+0675{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1432582379543,"flow_last_seen":1432582379571,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":42,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.WhatsApp","category":"Chat"},"dns": {"query":"e12.whatsapp.net","num_queries":1,"num_answers":8,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"184.173.179.47"}}
+0472{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432582379591,"flow_last_seen":1432582379591,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"158.85.58.15","src_port":49206,"dst_port":5222,"l4_proto":"tcp"}
+0425{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582379,"pkt_len":78,"pkt":"xiwDYGpkAPS5Jrv0CABFAABAjylAAEAGEH7AqAIEnlU6D8A2FGYksXJ9AAAAALAC\/\/+BgwAAAgQFtAEDAwQBAQgKLfyAogAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582379,"pkt_len":74,"pkt":"APS5Jrv0xiwDYGpkCABFAAA8XOEAADUGjcqeVToPwKgCBBRmwDYfJVHSJLFyfqAS\/\/8RNgAAAgQFrAEDAwkEAggKXZ2yry38gKI=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582379,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0bGhAAEAGM0vAqAIEnlU6D8A2FGYksXJ+HyVR04AQIFgeowAAAQEICi38gaNdnbKv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":66,"pkt":"APS5Jrv0xiwDYGpkCABFAAA05WEAADUGBVKeVToPwKgCBBRmwDYfJVHTJLFyfoAQAgI7+AAAAQEICl2ds7At\/IGj","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":232,"pkt":"xiwDYGpkAPS5Jrv0CABFAADadGtAAEAGKqLAqAIEnlU6D8A2FGYksXJ+HyVR04AYIFieBQAAAQEICi38g6pdnbOwV0EBBQAAGvgFAaWRifwSaVBob25lLTIuMTIuMi01MjIyAAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAZvgGDFa\/tfwMMzkzNDczNDYxNzY4\/FBoME2HogokCAgPrR9GeJ2i0w6wLwjITxt5JorMO\/\/Lf1x\/ZwJLOvSC0XFN7QGNpunD0LGDG4tou2tUxcBy8ZGRsH7pztrwCaJmXTt0t17cmg==","pkt_caplen":232,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":144,"pkt":"APS5Jrv0xiwDYGpkCABFAACCBo4AADUG49eeVToPwKgCBBRmwDYfJVHTJLFzJIAYAgIKPAAAAQEICl2dtdIt\/IOqAAAF+AMBOpEAAAP4AZyAAD1V7Q4cxEWjokngmkJ3StTjfo1k+moICoI+8SD7S955gguNYtbETmPiu5AT9LcC7DvsfsMG9N2tBB+NnTXn","pkt_caplen":144,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":87,"pkt":"APS5Jrv0xiwDYGpkCABFAABJCrsAADUG3+OeVToPwKgCBBRmwDYfJVIhJLFzJIAYAgJW\/gAAAQEICl2dtdot\/IOqgAASiqq2Jxp4k93SlQQHJx41spS4","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA0PsVAAEAGYO7AqAIEnlU6D8A2FGYksXMkHyVSIYAQIFMXXwAAAQEICi38hNVdnbXS","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":66,"pkt":"xiwDYGpkAPS5Jrv0CABFAAA05yJAAEAGuJDAqAIEnlU6D8A2FGYksXMkHyVSNoAQIFEXRAAAAQEICi38hNVdnbXa","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0685{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":267,"pkt":"xiwDYGpkAPS5Jrv0CABFAAD9VD5AAEAGSqzAqAIEnlU6D8A2FGYksXMkHyVSNoAYIFG51QAAAQEICi38hPRdnbXagADGoXXHZHz3P+WAvXYApR6j9B\/8Di1FAm0voTPUQyHjPnlnJFxr9q5gDPJc+BkmKKUjAJ9oZSD\/4Wskfp0U8Kdrs2dD4oKwb6QDbtQvk5C9\/c6izkmzOF5XH9TpoNj3SAnD6fV9SR3aX8RhLEyuwTOAAzO4xOFdpP1B71Iiu3K\/Vht2rW+wWLgPgual6KmX6i4keD13Sjbhwg\/t14iYeVmFakM4W2yGyUL7cEWtRly5vjqVrCqiYf9xpx\/mLJxH1NQeNDsyWgIR","pkt_caplen":267,"pkt_type":2048,"pkt_ipoffset":14}
+0454{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":98,"pkt":"APS5Jrv0xiwDYGpkCABFAABUqjsAADUGQFieVToPwKgCBBRmwDYfJVI2JLFz7YAYAgIl4QAAAQEICl2dtwUt\/IT0gAAdTm2OBkGLC85v18LKMqnYRqls5070C7uXMlkDWJk=","pkt_caplen":98,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582380,"pkt_len":85,"pkt":"xiwDYGpkAPS5Jrv0CABFAABHh\/lAAEAGF6fAqAIEnlU6D8A2FGYksXPtHyVSVoAYIE+VnAAAAQEICi38hgZdnbcFgAAQqn0yZ6EpS9vbskJXFYhLcg==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":87,"pkt":"APS5Jrv0xiwDYGpkCABFAABJN7sAADUGsuOeVToPwKgCBBRmwDYfJVJWJLF0AIAYAgJJ0gAAAQEICl2duBct\/IYGgAASMNKDKRpEFhPS2sk7RlPTnJ77","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0460{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":102,"pkt":"APS5Jrv0xiwDYGpkCABFAABYP+0AADUGqqKeVToPwKgCBBRmwDYfJVJrJLF0AIAYAgIQ5QAAAQEICl2duCct\/IYGgAAhcJs82WMNq3CnmaF1toG0Zp8XSCzemAAoxR129U3S+qk4","pkt_caplen":102,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432582381179,"flow_last_seen":1432582381179,"flow_tot_l4_data_len":1460,"flow_min_l4_data_len":1460,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":1460,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp"}
+2344{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1036{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":531,"pkt":"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","pkt_caplen":531,"pkt_type":2048,"pkt_ipoffset":14}
+1152{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":610,"pkt":"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","pkt_caplen":610,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":241,"pkt":"xiwDYGpkAPS5Jrv0CABFAADjTbBAAEAGUVTAqAIEnlU6D8A2FGYksXQAHyVSa4AYIE7xHQAAAQEICi38htJdnbgXgACsiCxev1qaTFLyuU0+A7ptMnJLPien2dxWYHPL7dcdqNVV3rcn8BdjcT+gZB4gzrJQlwK8ZVOXD2NojtBC1T2bsWgvYxQ49bNzVle6Zm70LlJ4eWaRCL9d2lqff+FSSdpeyY8UZkR0wiW9rv4Nc31JeWPp6YK71QqNgGObxyOF5IIVftoAY0Z1Kj2hjC4O+IuJIQvZnjmD1xUBlRa7tG6ROin9bgJ8BpS7ZSvjfw==","pkt_caplen":241,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo17YAAO8G3VkRrUJmwKgCBAG7wDWkxjE9fnJhCVAQDFgVTQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo17cAAO8G3VgRrUJmwKgCBAG7wDWkxjE9fnJjNVAQDZ0R3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1678{"flow_id":3,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":1000,"pkt":"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","pkt_caplen":1000,"pkt_type":2048,"pkt_ipoffset":14}
+0868{"flow_id":3,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":400,"pkt":"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","pkt_caplen":400,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":3,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoMmhAAEAG8ajAqAIEEa1CZsA1Abt+cmM1pMY071AQP8TcAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":54,"pkt":"xiwDYGpkAPS5Jrv0CABFAAAoeFdAAEAGq7nAqAIEEa1CZsA1Abt+cmM1pMY2SVAQP6\/avQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2350{"flow_id":3,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":1494,"pkt":"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","pkt_caplen":1494,"pkt_type":2048,"pkt_ipoffset":14}
+1052{"flow_id":3,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":538,"pkt":"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","pkt_caplen":538,"pkt_type":2048,"pkt_ipoffset":14}
+1149{"flow_id":3,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":610,"pkt":"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","pkt_caplen":610,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo17wAAO8G3VMRrUJmwKgCBAG7wDWkxjZJfnJquVAQDFcGkgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":3,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":54,"pkt":"APS5Jrv0xiwDYGpkCABFAAAo170AAO8G3VIRrUJmwKgCBAG7wDWkxjZJfnJs5VAQDZwDIQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1682{"flow_id":3,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582381,"pkt_len":1002,"pkt":"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","pkt_caplen":1002,"pkt_type":2048,"pkt_ipoffset":14}
+0479{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432582396509,"flow_last_seen":1432582396509,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+1060{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582396,"pkt_len":544,"pkt":"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","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0531{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432582396509,"flow_last_seen":1432582396509,"flow_tot_l4_data_len":510,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp","ndpi": {"proto":"Dropbox","category":"Cloud"}}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582399902,"flow_last_seen":1432582399902,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0793{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582399,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFYAAP8Rdk8AAAAA\/\/\/\/\/wBEAEMBNOdfAQEGALYzLg4AAAAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0574{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432582399902,"flow_last_seen":1432582399902,"flow_tot_l4_data_len":308,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3,6,15,119,95,252,44,46"}}
+0793{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":80,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582401,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFcAAP8Rdk4AAAAA\/\/\/\/\/wBEAEMBNOddAQEGALYzLg4AAgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582402666,"flow_last_seen":1432582402666,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0444{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582402,"pkt_len":91,"pkt":"AQBeAAD7APS5Jrv0CABFAABNW6AAAP8RvFfAqAIE4AAA+xTpFOkAOcRNAAAAAAACAAAAAAAABV9yYW9wBF90Y3AFbG9jYWwAAAyAAQhfYWlycGxhecASAAyAAQ==","pkt_caplen":91,"pkt_type":2048,"pkt_ipoffset":14}
+0599{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582402666,"flow_last_seen":1432582402666,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582402667,"flow_last_seen":1432582402667,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::189c:c31b:1298:224","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0474{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582402,"pkt_len":111,"pkt":"MzMAAAD7APS5Jrv0ht1gCRl1ADkR\/\/6AAAAAAAAAGJzDGxKYAiT\/AgAAAAAAAAAAAAAAAAD7FOkU6QA5eQMAAAAAAAIAAAAAAAAFX3Jhb3AEX3RjcAVsb2NhbAAADIABCF9haXJwbGF5wBIADIAB","pkt_caplen":111,"pkt_type":34525,"pkt_ipoffset":14}
+0609{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582402667,"flow_last_seen":1432582402667,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::189c:c31b:1298:224","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"flow_risk": {"17":"Malformed packet"},"proto":"MDNS","category":"Network"},"mdns": {"answer":"_raop._tcp.local"}}
+0793{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582404,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFgAAP8Rdk0AAAAA\/\/\/\/\/wBEAEMBNOdaAQEGALYzLg4ABQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582408,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFkAAP8RdkwAAAAA\/\/\/\/\/wBEAEMBNOdWAQEGALYzLg4ACQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582411561,"flow_last_seen":1432582411561,"flow_tot_l4_data_len":341,"flow_min_l4_data_len":341,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":341,"midstream":1,"l3_proto":"ip4","src_ip":"17.110.229.14","dst_ip":"192.168.2.4","src_port":5223,"dst_port":49193,"l4_proto":"tcp"}
+0826{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582411,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0538{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432582411561,"flow_last_seen":1432582411561,"flow_tot_l4_data_len":341,"flow_min_l4_data_len":341,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":341,"midstream":1,"l3_proto":"ip4","src_ip":"17.110.229.14","dst_ip":"192.168.2.4","src_port":5223,"dst_port":49193,"l4_proto":"tcp","ndpi": {"proto":"ApplePush.Apple","category":"Cloud"}}
+0826{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582412,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582413,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582416,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582416,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFoAAP8RdksAAAAA\/\/\/\/\/wBEAEMBNOdOAQEGALYzLg4AEQAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+0826{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582421,"pkt_len":375,"pkt":"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","pkt_caplen":375,"pkt_type":2048,"pkt_ipoffset":14}
+0793{"flow_id":5,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582425,"pkt_len":342,"pkt":"\/\/\/\/\/\/\/\/2DBiVgAcCABFAAFIRFsAAP8RdkoAAAAA\/\/\/\/\/wBEAEMBNOdFAQEGALYzLg4AGgAAAAAAAAAAAAAAAAAAAAAAANgwYlYAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwkBAwYPd1\/8LC45AgXcPQcB2DBiVgAcMwQAdqcADApMdWNhcy1pTWFj\/wAAAAAAAAAAAAAAAAAA","pkt_caplen":342,"pkt_type":2048,"pkt_ipoffset":14}
+1061{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582426,"pkt_len":544,"pkt":"\/\/\/\/\/\/\/\/xiwDYGpkCABFAAISk3sAAEARXw\/AqAIBwKgC\/0RcRFwB\/jsJeyJob3N0X2ludCI6IDMzNzUzNTk1OTMsICJ2ZXJzaW9uIjogWzEsIDhdLCAiZGlzcGxheW5hbWUiOiAiIiwgInBvcnQiOiAxNzUwMCwgIm5hbWVzcGFjZXMiOiBbMTQ4MTkzMzcsIDE3NjA5OTYzLCAyMDY0OTM0OSwgMjg1MjE2MDcsIDU4MzQ0OTk2LCA2MDU5NDk4MywgNjQ0MzYwOTksIDk2ODUzMjI0LCA5OTQ2OTc3MywgMTAxMDQ3OTk2LCAxMDgxNTkxMDIsIDEyNTU0MDU2NiwgMTc2OTY0MzA3LCAyNDM2ODI5ODYsIDI0NzkyNTA4NSwgMjYwNDY1MjYxLCAyNzA0MDQ3NDIsIDI4Mzg2MTQ1NywgNDI0NTQwMTk3LCA0NDgzOTczOTMsIDQ1MTQ3MjY1OCwgNTExNzA2NjQyLCA1NjgzOTU4MzMsIDU5NDI0Njk1NCwgNTk4MDYxMDY2LCA2MTU5ODMzNzksIDcyMDA1ODM2MSwgNzM1MDUxODMwLCA3MzYzNDE1MjgsIDc0MTI1NTYxMywgNzc2MDg3MjQ3LCA3ODA4NzA1ODEsIDc4Mjk4MTk0OSwgNzg1MjY2MTc3LCA4MTg3NTI3MTAsIDg1NTY4MjM5MCwgODg0MTIwMTMyLCA5MDg5MTQ4NjhdfQ==","pkt_caplen":544,"pkt_type":2048,"pkt_ipoffset":14}
+0622{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","pkt_oversize":false,"pkt_ts":1432582431,"pkt_len":220,"pkt":"APS5Jrv0xiwDYGpkCABFAADOJvMAAC8Gqw4RbuUOwKgCBBRnwCnUix1VuGhbLIAZAUnUJAAAAQEICm+JpTEt\/BtwFwMBAHDYSydR01U4MXShqjjP\/e6ozSqHDVuZ8Us7t5fLSxg\/JTSqTU1rbh5BP52nKbmElzpUYdGkXfEnn2PaHKB1t4LzV\/pkQ5JZxi+qRHMWxqelxwlH4daQC2wVBaO6VgWkkLBvXyNAW3gXtTuKympv3KY2FQMBACAIXcm+uxec4nsB2p08pVk5ZiggKezrR8Gc5wbiqdSlnQ==","pkt_caplen":220,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":5,"flow_packet_id":6,"flow_first_seen":1432582399902,"flow_last_seen":1432582425196,"flow_tot_l4_data_len":1848,"flow_min_l4_data_len":308,"flow_max_l4_data_len":308,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"0.0.0.0","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432582402667,"flow_last_seen":1432582402667,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip6","src_ip":"fe80::189c:c31b:1298:224","dst_ip":"ff02::fb","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":4,"flow_packet_id":2,"flow_first_seen":1432582396509,"flow_last_seen":1432582426553,"flow_tot_l4_data_len":1020,"flow_min_l4_data_len":510,"flow_max_l4_data_len":510,"flow_avg_l4_data_len":510,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":17500,"dst_port":17500,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":1,"flow_packet_id":2,"flow_first_seen":1432582379543,"flow_last_seen":1432582379571,"flow_tot_l4_data_len":212,"flow_min_l4_data_len":42,"flow_max_l4_data_len":170,"flow_avg_l4_data_len":106,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"192.168.2.1","src_port":61697,"dst_port":53,"l4_proto":"udp"}
+0514{"flow_event_id":7,"flow_event_name":"not-detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":2,"flow_packet_id":30,"flow_first_seen":1432582379591,"flow_last_seen":1432582399306,"flow_tot_l4_data_len":1943,"flow_min_l4_data_len":32,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"158.85.58.15","src_port":49206,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"Unknown"}}
+0477{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":2,"flow_packet_id":30,"flow_first_seen":1432582379591,"flow_last_seen":1432582399306,"flow_tot_l4_data_len":1943,"flow_min_l4_data_len":32,"flow_max_l4_data_len":233,"flow_avg_l4_data_len":64,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"158.85.58.15","src_port":49206,"dst_port":5222,"l4_proto":"tcp"}
+0479{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":8,"flow_packet_id":6,"flow_first_seen":1432582411561,"flow_last_seen":1432582431565,"flow_tot_l4_data_len":1891,"flow_min_l4_data_len":186,"flow_max_l4_data_len":341,"flow_avg_l4_data_len":315,"midstream":1,"l3_proto":"ip4","src_ip":"17.110.229.14","dst_ip":"192.168.2.4","src_port":5223,"dst_port":49193,"l4_proto":"tcp"}
+0472{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432582402666,"flow_last_seen":1432582402666,"flow_tot_l4_data_len":57,"flow_min_l4_data_len":57,"flow_max_l4_data_len":57,"flow_avg_l4_data_len":57,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0476{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1432582377898,"flow_last_seen":1432582377898,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.1","dst_ip":"192.168.2.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0531{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":3,"flow_packet_id":44,"flow_first_seen":1432582381179,"flow_last_seen":1432582385071,"flow_tot_l4_data_len":19875,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":451,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Apple","category":"Web"}}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap","flow_id":3,"flow_packet_id":44,"flow_first_seen":1432582381179,"flow_last_seen":1432582385071,"flow_tot_l4_data_len":19875,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1460,"flow_avg_l4_data_len":451,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.2.4","dst_ip":"17.173.66.102","src_port":49205,"dst_port":443,"l4_proto":"tcp"}
+0156{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_login_chat.pcap"}
diff --git a/tests/result/nDPId_whatsapp_voice_and_message.pcap.txt b/tests/result/nDPId_whatsapp_voice_and_message.pcap.txt
new file mode 100644
index 000000000..4b96647d1
--- /dev/null
+++ b/tests/result/nDPId_whatsapp_voice_and_message.pcap.txt
@@ -0,0 +1,160 @@
+0378{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1432820558921,"flow_last_seen":1432820558921,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"184.173.179.46","src_port":35480,"dst_port":443,"l4_proto":"tcp"}
+0426{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820558,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA89o5AAEAGzkgKCAABuK2zLoqYAbsGFK3rAAAAAKACOQj9WQAAAgQFtAQCCAoABFtlAAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820558,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAJAABAG9Om4rbMuCggAAQG7ipj561IUBhSt7FAS\/\/+tmQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820558,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo9o9AAEAGzlsKCAABuK2zLoqYAbsGFK3s+etSFVAQOQh0kgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0644{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":231,"pkt":"ABoRAAACABoRAAABCABFAADZ9pBAAEAGzakKCAABuK2zLoqYAbsGFK3s+etSFVAYOQh8uwAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAdPgIDLX\/h1UhmCkBUQ\/sTqZWv\/xgL\/OOe5EfaI3hnw38C5rzGgbJdboceXh+6uT5elbuFLCygADnnNcZ165+\/2XUTTA9IaVlrQrxqqJFS\/kXW9k9b7Wlv7SNYPBPUFyQeuOVrlIwHNJoFQWyO2S1VrW+Oa\/9","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAANAABAG9Oi4rbMuCggAAQG7ipj561IVBhSunVAQ\/\/+s6QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0507{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":132,"pkt":"ABoRAAACABoRAAABCABFAAB2AARAABAG9Jm4rbMuCggAAQG7ipj561IVBhSunVAY\/\/947gAAAAAF+AMBOpEAAAP4AZyAAD1OgLSiaaQrzr8UZsQjad9laQ\/IG0pIbb4NDDxKJfzZf4yh53qt3rMgvUYKnSpxezbq7xSEMyS8PayGaedL","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0398{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo9pFAAEAGzlkKCAABuK2zLoqYAbsGFK6d+etSY1AQOQhzkwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG9pJAAEAGzjoKCAABuK2zLoqYAbsGFK6d+etSY1AYOQgF6QAAgAAbYM6uygXV2FuR4uikwR70\/U9hc4kK6kXd\/rFT","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAVAABAG9Oa4rbMuCggAAQG7ipj561JjBhSuu1AQ\/\/+sfQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0433{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/9pNAAEAGzkAKCAABuK2zLoqYAbsGFK67+etSY1AYOQjewgAAgAAU5RlXN+oKKd7wcux2QBsbRWNVpyY=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820559,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAZAABAG9OW4rbMuCggAAQG7ipj561JjBhSu0lAQ\/\/+sZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0635{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820560,"pkt_len":223,"pkt":"ABoRAAACABoRAAABCABFAADRAAdAABAG9Du4rbMuCggAAQG7ipj561JjBhSu0lAY\/\/+oUwAAgACm2slBsNBD2eXbX22IuM3eZfnqQ0M5jbKArr+gyXHHhDT1H5iY6ykOhJd49NMu1ytvC8G6zXgtkreBt3Kft18ZGxVzUbJjTFTuXaZLL+1kY2pcw3ZwnwzvFQH+Cirp7c97MeZqVo4zQnciukaKdrOMa1L0JQ5BhVfvG4EnGg\/ERgzvcXA925ZhIS4Dv6c\/mxd77G\/cb5gF0rYLCBfWI8vB0V9M+lENJA==","pkt_caplen":223,"pkt_type":2048,"pkt_ipoffset":14}
+0400{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820560,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo9pRAAEAGzlYKCAABuK2zLoqYAbsGFK7S+etTDFAQPLhvBQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820560,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABI9pVAAEAGzjUKCAABuK2zLoqYAbsGFK7S+etTDFAYPLhs9wAAgAAddpKjam22WfwfcejRXzOwKhF5uWMahhWTEd2hQD4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820560,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAAhAABAG9OO4rbMuCggAAQG7ipj561MMBhSu8lAQ\/\/+rnQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432820567259,"flow_last_seen":1432820567259,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.84.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820567,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvE0KCAABHw1UMNF0DZYAhk4lAAMAaiESpEIAANFg4Ox4XqyZamxAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1432820567259,"flow_last_seen":1432820567259,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.84.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0443{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820567,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIAA5AABAR7VEfDVQwCggAAQ2W0XQANI6xAQMAGCESpEIAANFg4Ox4XqyZamwAIAAIAAHzk56wzx5AAgAIAAABTZrCzrs=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820567,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvE0KCAABHw1UMNF0DZYAhk4lAAMAaiESpEIAANFg4Ox4XqyZamxAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820567,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIAA9AABAR7VAfDVQwCggAAQ2W0XQANNaZAQMAGCESpEIAANFg4Ox4XqyZamwAIAAIAAGqbZ6wzx5AAgAIAAABTZrCz\/k=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432820567917,"flow_last_seen":1432820567917,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.74.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820567,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARxk0KCAABHw1KMNF0DZYAhknAAAMAaiESpEIAABwXmwtuMPN7N0hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1432820567917,"flow_last_seen":1432820567917,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.74.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0443{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABBAABAR908fDUowCggAAQ2W0XQANMmPAQMAGCESpEIAABwXmwtuMPN7N0gAIAAIAAGyFZ6wzx5AAgAIAAABTZrC0PY=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARxk0KCAABHw1KMNF0DZYAhknAAAMAaiESpEIAABwXmwtuMPN7N0hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABFAABAR904fDUowCggAAQ2W0XQANO2fAQMAGCESpEIAABwXmwtuMPN7N0gAIAAIAAGNHp6wzx5AAgAIAAABTZrC0d0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432820568346,"flow_last_seen":1432820568346,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.64.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEAR0E0KCAABHw1AMNF0DZYAhjyrAAMAaiESpEIAAKkWq28lYULzqlFAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1432820568346,"flow_last_seen":1432820568346,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.64.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0444{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABJAABARAU4fDUAwCggAAQ2W0XQANK\/IAQMAGCESpEIAAKkWq28lYULzqlEAIAAIAAG83p6wzx5AAgAIAAABTZrC0t8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":3,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEAR0E0KCAABHw1AMNF0DZYAhjyrAAMAaiESpEIAAKkWq28lYULzqlFAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":3,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABNAABARAU0fDUAwCggAAQ2W0XQANMbTAQMAGCESpEIAAKkWq28lYULzqlEAIAAIAAGkqZ6wzx5AAgAIAAABTZrC1Ak=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432820568947,"flow_last_seen":1432820568947,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.252.121.1","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820568,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARCI0KCAABrfx5AdF0DZYAhjqZAAMAaiESpEIAAJtQaIETIh2AbQlAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1432820568947,"flow_last_seen":1432820568947,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.252.121.1","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0444{"flow_id":4,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820569,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABRAABAROYut\/HkBCggAAQ2W0XQANOG6AQMAGCESpEIAAJtQaIETIh2AbQkAIAAIAAGGsp6wzx5AAgAIAAABTZrC1Qc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":4,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820569,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARCI0KCAABrfx5AdF0DZYAhjqZAAMAaiESpEIAAJtQaIETIh2AbQlAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":4,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820569,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABVAABAROYqt\/HkBCggAAQ2W0XQANNKXAQMAGCESpEIAAJtQaIETIh2AbQkAIAAIAAGU1Z6wzx5AAgAIAAABTZrC1gc=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432820569427,"flow_last_seen":1432820569427,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"179.60.192.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820569,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvB0KCAABszzAMNF0DZYAhkLTAAMAaiESpEIAALo2Lkt1PTwMswhAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0543{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1432820569427,"flow_last_seen":1432820569427,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"179.60.192.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0443{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820569,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABZAABAR7RmzPMAwCggAAQ2W0XQANM1bAQMAGCESpEIAALo2Lkt1PTwMswgAIAAIAAGhQp6wzx5AAgAIAAABTZrC1xA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820569,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvB0KCAABszzAMNF0DZYAhkLTAAMAaiESpEIAALo2Lkt1PTwMswhAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":5,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820570,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABdAABAR7RizPMAwCggAAQ2W0XQANLmCAQMAGCESpEIAALo2Lkt1PTwMswgAIAAIAAGz+p6wzx5AAgAIAAABTZrC2DE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820570006,"flow_last_seen":1432820570006,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.79.192","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820570,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARwL0KCAABHw1PwNF0DZYAhsORAAMAaiESpEIAAFk9lyNgFikbVyNAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1432820570006,"flow_last_seen":1432820570006,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.79.192","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0445{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820570,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABhAABAR8bcfDU\/ACggAAQ2W0XQANGvgAQMAGCESpEIAAFk9lyNgFikbVyMAIAAIAAGA\/J6wzx5AAgAIAAABTZrC2ZA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":6,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820570,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARwL0KCAABHw1PwNF0DZYAhsORAAMAaiESpEIAAFk9lyNgFikbVyNAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0444{"flow_id":6,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820570,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABlAABAR8bYfDU\/ACggAAQ2W0XQANGAYAQMAGCESpEIAAFk9lyNgFikbVyMAIAAIAAGLCJ6wzx5AAgAIAAABTZrC20w=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432820570876,"flow_last_seen":1432820570876,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.93.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0556{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820570,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARs00KCAABHw1dMNF0DZYAhn\/sAAMAaiESpEIAABBswYmYde0br2NAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1432820570876,"flow_last_seen":1432820570876,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.93.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0443{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABpAABAR5EUfDV0wCggAAQ2W0XQANAkRAQMAGCESpEIAABBswYmYde0br2MAIAAIAAGc8p6wzx5AAgAIAAABTZrC3MQ=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0556{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARs00KCAABHw1dMNF0DZYAhn\/sAAMAaiESpEIAABBswYmYde0br2NAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABtAABAR5EQfDV0wCggAAQ2W0XQANLfgAQMAGCESpEIAABBswYmYde0br2MAIAAIAAHs556wzx5AAgAIAAABTZrC3f8=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432820571488,"flow_last_seen":1432820571488,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.73.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0555{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta5AAMAaiESpEIAAOlKSWdSWOu7U1dAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0541{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":54,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1432820571488,"flow_last_seen":1432820571488,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.73.48","src_port":53620,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.WhatsAppCall","category":"VoIP"}}
+0443{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIABxAABAR+EMfDUkwCggAAQ2W0XQANGvUAQMAGCESpEIAAOlKSWdSWOu7U1cAIAAIAAGOsJ6wzx5AAgAIAAABTZrC3xA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":8,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta5AAMAaiESpEIAAOlKSWdSWOu7U1dAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":8,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIAB1AABAR+EIfDUkwCggAAQ2W0XQANFhcAQMAGCESpEIAAOlKSWdSWOu7U1cAIAAIAAGhVZ6wzx5AAgAIAAABTZrC3+M=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":8,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820571,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta4AAMAaiESpEIAAOlKSWdSWOu7U1hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":8,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820572,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIACNAABAR+DwfDUkwCggAAQ2W0XQANAYmAQMAGCESpEIAAOlKSWdSWOu7U1gAIAAIAAHyn56wzx5AAgAIAAABTZrC4M4=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":8,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820572,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhta4AAMAaiESpEIAAOlKSWdSWOu7U1hAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0443{"flow_id":8,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820572,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIACRAABAR+DsfDUkwCggAAQ2W0XQANP21AQMAGCESpEIAAOlKSWdSWOu7U1gAIAAIAAH6TJ6wzx5AAgAIAAABTZrC4ZE=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1432820624900,"flow_last_seen":1432820624900,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.42","src_port":44819,"dst_port":5222,"l4_proto":"tcp"}
+0428{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820624,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA85gNAAEAGcjAKCAABnlU6Kq8TFGbeopMoAAAAAKACOQiB\/gAAAgQFtAQCCAoABHUrAAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":9,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":84,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoACpAABAGiB6eVToqCggAARRmrxMhXWzX3qKTKVAS\/\/8J0AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":85,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo5gRAAEAGckMKCAABnlU6Kq8TFGbeopMpIV1s2FAQOQjQyAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0636{"flow_id":9,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820625,"pkt_len":228,"pkt":"ABoRAAACABoRAAABCABFAADW5gVAAEAGcZQKCAABnlU6Kq8TFGbeopMpIV1s2FAYOQiM9AAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAcfgGDLX\/h1UhmCkBUQ9Wv\/xgh6a0qORalzv9K+A3Px6hUhb6jwXc6Ej7FBOMCTdPUuUjBhSU7s5Tq1T61hSt9KYay7IXEXGf+AS1mrCQKce9PRHosCQ7C40kcUox4ydcJfjBmcr5Nu0FofGiYRkgGyui","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":9,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820625,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoACtAABAGiB2eVToqCggAARRmrxMhXWzY3qKT11AQ\/\/8JIwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820625,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvE0KCAABHw1UMNF0DZYAhkYnCAAAaiESpEIAANFg4Ox4XqyZam1AAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820626,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARxk0KCAABHw1KMNF0DZYAhkHCCAAAaiESpEIAABwXmwtuMPN7N0lAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":3,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820627,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEAR0E0KCAABHw1AMNF0DZYAhjStCAAAaiESpEIAAKkWq28lYULzqlJAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":4,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820628,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARCI0KCAABrfx5AdF0DZYAhjKbCAAAaiESpEIAAJtQaIETIh2AbQpAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+1719{"flow_id":9,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820629,"pkt_len":1022,"pkt":"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","pkt_caplen":1022,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":5,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820629,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARvB0KCAABszzAMNF0DZYAhjrVCAAAaiESpEIAALo2Lkt1PTwMswlAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":6,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820630,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARwL0KCAABHw1PwNF0DZYAhruTCAAAaiESpEIAAFk9lyNgFikbVyRAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820631,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARs00KCAABHw1dMNF0DZYAhnfuCAAAaiESpEIAABBswYmYde0br2RAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0555{"flow_id":8,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820632,"pkt_len":168,"pkt":"ABoRAAACABoRAAABCABFwACaAABAAEARx00KCAABHw1JMNF0DZYAhs66CAAAaiESpEIAAOlKSWdSWOu7U1lAAABmAQCy86Qxc0\/TrfZVVa\/eTEZDohPoeRLoRZc1aFVhrGc1f8RW2vMjT5P8rAsiwZ+p9NloXItIT0xPBspixBWhh83rOo673FqXfKhsmqCbgcYysEXxS1G0BQlmTNaw3EzKh7wFRa3N","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0399{"flow_id":9,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAo5gZAAEAGckEKCAABnlU6Kq8TFGbeopPXIV1woFAQQEjFEgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":9,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG5gdAAEAGciIKCAABnlU6Kq8TFGbeopPXIV1woFAYQEg1\/gAAgAAb78l1yKPmE48GOiEZVqFHKYQhqE8rljRx6FSX","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":9,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAC1AABAGiBueVToqCggAARRmrxMhXXCg3qKT9VAQ\/\/8FPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1127{"flow_id":9,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":590,"pkt":"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","pkt_caplen":590,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":9,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAC5AABAGiBqeVToqCggAARRmrxMhXXCg3qKWDVAQ\/\/8DJQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":9,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAC9AABAGiBmeVToqCggAARRmrxMhXXCg3qKWDVAY\/\/8DHQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":9,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG5glAAEAGciAKCAABnlU6Kq8TFGbeopPXIV1woFAYQEg1\/gAAgAAb78l1yKPmE48GOiEZVqFHKYQhqE8rljRx6FSX","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":9,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoADBAABAGiBieVToqCggAARRmrxMhXXCg3qKT9VAQ\/\/8FPQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":9,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABG5gpAAEAGch8KCAABnlU6Kq8TFGbeopPXIV1woFAYQEg1\/gAAgAAb78l1yKPmE48GOiEZVqFHKYQhqE8rljRx6FSX","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1432820633802,"flow_last_seen":1432820633802,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.192.222.189","src_port":42241,"dst_port":5222,"l4_proto":"tcp"}
+0430{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8gDdAAEAGI\/4KCAABrcDevaUBFGYwrPiRAAAAAKACOQgdJAAAAgQFtAQCCAoABHimAAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":122,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoADlAABAG1BCtwN69CggAARRmpQHPUwduMKz4klAS\/\/9f4wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":10,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":123,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAogDhAAEAGJBEKCAABrcDevaUBFGYwrPiSz1MHb1AQOQgm3AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":10,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":228,"pkt":"ABoRAAACABoRAAABCABFAADWgDlAAEAGI2IKCAABrcDevaUBFGYwrPiSz1MHb1AYOQjDIAAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAcfgGDLX\/h1UhmCkBUQ9Wv\/xgv\/cBb6PCMfus\/zhD0eT+usy6\/BeIXw2xlcKysb3p9h+QZQNJEd8yX6HOPcw7NNRwREBLy9yJIzAoZ3yOHXGasbfEaANFmizfTd1qV0oA4\/dxJHAgYWWiS9471\/x4Lhi9","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":10,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820633,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoADpAABAG1A+twN69CggAARRmpQHPUwdvMKz5QFAQ\/\/9fNgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":10,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":132,"pkt":"ABoRAAACABoRAAABCABFAAB2ADtAABAG08CtwN69CggAARRmpQHPUwdvMKz5QFAY\/\/\/gawAAAAAF+AMBOpEAAAP4AZyAAD1YKPUnKP7ewjDxf+AaeAaL1SFnTLAs+0mNaxPiMe4Q5H63YnNJgyszS5hF1LLC4wLD4SHg\/9cf7blU6507","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":10,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":127,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAogDpAAEAGJA8KCAABrcDevaUBFGYwrPlAz1MHvVAQOQgl4AAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1087{"flow_id":10,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":128,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":559,"pkt":"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","pkt_caplen":559,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":10,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":129,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABGgDtAAEAGI\/AKCAABrcDevaUBFGYwrPlAz1MHvVAYOQgw4gAAgAAbo6qihUzhzFG8cbi1MqCoDgLn0esUUvC02kV0","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAD1AABAG1AytwN69CggAARRmpQHPUwe9MKz5XlAQ\/\/9eygAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":131,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAD5AABAG1AutwN69CggAARRmpQHPUwe9MKz5XlAY\/\/9ewgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":10,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/gDxAAEAGI\/YKCAABrcDevaUBFGYwrPlez1MJtlAYPLiRCAAAgAAUiQxeskEbCC0s9G1S12\/i\/95PjO0=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":10,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAD9AABAG1AqtwN69CggAARRmpQHPUwm2MKz5dVAQ\/\/9cugAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":10,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAogD1AAEAGJAwKCAABrcDevaUBFGYwrPl1z1MJtlAQPLggAgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":10,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820634,"pkt_len":79,"pkt":"ABoRAAACABoRAAABCABFAABBgD5AAEAGI\/IKCAABrcDevaUBFGYwrPl1z1MJtlAYPLj9EwAAgAAWfrtGzjhqLBHndb7yqzoImh+lmb+O5Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":0,"flow_packet_id":46,"flow_first_seen":1432820558921,"flow_last_seen":1432820572412,"flow_tot_l4_data_len":3426,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"184.173.179.46","src_port":35480,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":153,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":0,"flow_packet_id":46,"flow_first_seen":1432820558921,"flow_last_seen":1432820572412,"flow_tot_l4_data_len":3426,"flow_min_l4_data_len":20,"flow_max_l4_data_len":556,"flow_avg_l4_data_len":74,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"184.173.179.46","src_port":35480,"dst_port":443,"l4_proto":"tcp"}
+0480{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1432820681899,"flow_last_seen":1432820681899,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.109","src_port":49721,"dst_port":5222,"l4_proto":"tcp"}
+0429{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820681,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8YBFAAEAG998KCAABnlU6bcI5FGZRO+t+AAAAAKACOQiNYgAAAgQFtAQCCAoABItvAAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820681,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAFlAABAGh6yeVTptCggAARRmwjmuxBSBUTvrf1AS\/\/\/2ZgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820681,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYBJAAEAG9\/IKCAABnlU6bcI5FGZRO+t\/rsQUglAQOQi9XwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820681,"pkt_len":228,"pkt":"ABoRAAACABoRAAABCABFAADWYBNAAEAG90MKCAABnlU6bcI5FGZRO+t\/rsQUglAYOQgNQgAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAcfgGDLX\/h1UhmCkBUQ9Wv\/xgWhG0DxW4mxA+kPRAh28xxQPqLWhI1\/Ckx+qSY+pCM6m86Gqj0AM22FiWFjewyaGNsUXCIrA\/5ahZWEyQqqyZZ1iEWq9fWPxoNFJ2YvosK4KxW\/MeiL1J8EvY33+xTqli","pkt_caplen":228,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820681,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAFpAABAGh6ueVTptCggAARRmwjmuxBSCUTvsLVAQ\/\/\/1uQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0510{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":132,"pkt":"ABoRAAACABoRAAABCABFAAB2AFtAABAGh1yeVTptCggAARRmwjmuxBSCUTvsLVAY\/\/+f3gAAAAAF+AMBOpEAAAP4AZyAAD0AS5BPOqJRpAG6j1WOZ0ViBjRDjKJ+ofBN7wf54tpDdElmqSKmLnCD3MJ5dME62Q\/gWi+aZrbrJeKn2PbD","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":11,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoYBRAAEAG9\/AKCAABnlU6bcI5FGZRO+wtrsQU0FAQOQi8YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0752{"flow_id":11,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":308,"pkt":"ABoRAAACABoRAAABCABFAAEmAFxAABAGhqueVTptCggAARRmwjmuxBTQUTvsLVAY\/\/\/LqAAAgAApprFj26+zH57O3t\/5t0Hf4v4UqdLLIuILLclEAGkzBB0vbwazOCdiCFWAACtvm7RbeG72hHn0Mw02ganDBUutZWKzZuAKZwJbgt\/NMR413haTu1RhxLt\/gACMXeY4bo4iaACHd5LgGrrd8ECIxb9Yhtljc+YgdDAcWZMlqw5ETmL\/fYKpvtZBSMAFAk7N0UT+RfEcH0b9cfvV2FByyZbvF73eBGJ1i3ORXYtW+XrVcBVUQG+kW3Spm8MLPSBVJRsgaR8zFHUFYSOglrBHLGjioyjJDSacc1jopbN7o63Qb\/Ix2dpokASAABJ7WdjK2ONjSkt\/fnYUVcNnLWI=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0441{"flow_id":11,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABGYBVAAEAG99EKCAABnlU6bcI5FGZRO+wtrsQU0FAYOQhpkwAAgAAbS1CGS06FRgyApVYMKAgisit0sSgmWs7cgEnQ","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":11,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAF1AABAGh6ieVTptCggAARRmwjmuxBTQUTvsS1AQ\/\/\/1TQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":11,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/YBZAAEAG99cKCAABnlU6bcI5FGZRO+xLrsQVzlAYPLjNawAAgAAUbxH64jjqAsVs7k0S2OAZsQKqt3U=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":11,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAF5AABAGh6eeVTptCggAARRmwjmuxBXOUTvsYlAQ\/\/\/0OAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0438{"flow_id":11,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":79,"pkt":"ABoRAAACABoRAAABCABFAABBYBdAAEAG99QKCAABnlU6bcI5FGZRO+xirsQVzlAYPLjr7QAAgAAWDsoDGEZyEgGknOA4O3HZ3a6LvDYB+Q==","pkt_caplen":79,"pkt_type":2048,"pkt_ipoffset":14}
+0405{"flow_id":11,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAF9AABAGh6aeVTptCggAARRmwjmuxBXOUTvse1AQ\/\/\/0HwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":11,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820682,"pkt_len":76,"pkt":"ABoRAAACABoRAAABCABFAAA+AGBAABAGh4+eVTptCggAARRmwjmuxBXOUTvse1AY\/\/8M8AAAgAATlZD9+caNblEbGPqjRjXIs+FEQw==","pkt_caplen":76,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1432820693796,"flow_last_seen":1432820693796,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.5.199","src_port":51570,"dst_port":443,"l4_proto":"tcp"}
+0430{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":235,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820693,"pkt_len":74,"pkt":"ABoRAAACABoRAAABCABFAAA8Y3lAAEAGKR4KCAABnlUFx8lyAbsu9\/NsAAAAAKACOQjjKgAAAgQFtAQCCAoABJAVAAAAAAEDAwQ=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":236,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAHNAABAGvDieVQXHCggAAQG7yXLRCAyTLvfzbVAS\/\/82fwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":237,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820693,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY3pAAEAGKTEKCAABnlUFx8lyAbsu9\/Nt0QgMlFAQOQj9dwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0645{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":238,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":231,"pkt":"ABoRAAACABoRAAABCABFAADZY3tAAEAGKH8KCAABnlUFx8lyAbsu9\/Nt0QgMlFAYOQiMoQAAV0EBBQAAF\/gFAaWRifwPQW5kcm9pZC0yLjEyLjg0AAAZ+AKc+AT4AfwHcHJpdmFjefgBgPgBQPgBeAAAdPgIDLX\/h1UhmCkBUQ\/sTqZWv\/xgcSlU0euSYo6NCHOEAZVChlwW\/jbtv1wYaWm4Al+So9OdQ9pFARIthkK9WNvgjPwuyFrtlujpff4VkW+FcRldgQSQomlyhtjUFJYUGTWlqe8TPqD8TvnYC+arf3qsTvid","pkt_caplen":231,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":239,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAHRAABAGvDeeVQXHCggAAQG7yXLRCAyULvf0HlAQ\/\/81zwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":240,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":132,"pkt":"ABoRAAACABoRAAABCABFAAB2AHVAABAGu+ieVQXHCggAAQG7yXLRCAyULvf0HlAY\/\/\/HagAAAAAF+AMBOpEAAAP4AZyAAD3R2SJUFL+WmONY2jnAR6iFbnzo1F04Mk9aQ7pMB3jFpE\/2QLImTv75ry8So55cU5C0ZcvZ8UqUnVVZP8pc","pkt_caplen":132,"pkt_type":2048,"pkt_ipoffset":14}
+0402{"flow_id":12,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":241,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoY3xAAEAGKS8KCAABnlUFx8lyAbsu9\/Qe0QgM4lAQOQj8eAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0442{"flow_id":12,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":242,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":84,"pkt":"ABoRAAACABoRAAABCABFAABGY31AAEAGKRAKCAABnlUFx8lyAbsu9\/Qe0QgM4lAYOQhpbAAAgAAbuM5NpFPW5E+nhA3j2KB5ISZsee1J96QCB+EK","pkt_caplen":84,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":12,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":243,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAHZAABAGvDWeVQXHCggAAQG7yXLRCAziLvf0PFAQ\/\/81YwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0436{"flow_id":12,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":244,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":77,"pkt":"ABoRAAACABoRAAABCABFAAA\/Y35AAEAGKRYKCAABnlUFx8lyAbsu9\/Q80QgM4lAYOQhf9QAAgAAULrTVRfclocxvAEDKkmpWAUPDzSE=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":12,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":245,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAHdAABAGvDSeVQXHCggAAQG7yXLRCAziLvf0U1AQ\/\/81TAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":12,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":246,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":86,"pkt":"ABoRAAACABoRAAABCABFAABIY39AAEAGKQwKCAABnlUFx8lyAbsu9\/RT0QgM4lAYOQheQgAAgAAd48cbhiG5dSWqSoTRnaV\/xNRiXY9iz\/jY6IWzLM0=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":12,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":247,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAHhAABAGvDOeVQXHCggAAQG7yXLRCAziLvf0c1AQ\/\/81LAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":12,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":248,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":80,"pkt":"ABoRAAACABoRAAABCABFAABCY4BAAEAGKREKCAABnlUFx8lyAbsu9\/Rz0QgM4lAYOQgVDQAAgAAXtvdkyKnboCess\/qki09xS72kRAR872w=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":12,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":249,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","pkt_oversize":false,"pkt_ts":1432820694,"pkt_len":54,"pkt":"ABoRAAACABoRAAABCABFAAAoAHlAABAGvDKeVQXHCggAAQG7yXLRCAziLvf0jVAQ\/\/81EgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0537{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":12,"flow_packet_id":27,"flow_first_seen":1432820693796,"flow_last_seen":1432820695137,"flow_tot_l4_data_len":1302,"flow_min_l4_data_len":20,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.5.199","src_port":51570,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsApp","category":"Chat"}}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":12,"flow_packet_id":27,"flow_first_seen":1432820693796,"flow_last_seen":1432820695137,"flow_tot_l4_data_len":1302,"flow_min_l4_data_len":20,"flow_max_l4_data_len":252,"flow_avg_l4_data_len":48,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.5.199","src_port":51570,"dst_port":443,"l4_proto":"tcp"}
+0534{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":9,"flow_packet_id":30,"flow_first_seen":1432820624900,"flow_last_seen":1432820633508,"flow_tot_l4_data_len":3689,"flow_min_l4_data_len":20,"flow_max_l4_data_len":988,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.42","src_port":44819,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","category":"Chat"}}
+0483{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":9,"flow_packet_id":30,"flow_first_seen":1432820624900,"flow_last_seen":1432820633508,"flow_tot_l4_data_len":3689,"flow_min_l4_data_len":20,"flow_max_l4_data_len":988,"flow_avg_l4_data_len":122,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.42","src_port":44819,"dst_port":5222,"l4_proto":"tcp"}
+0537{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":10,"flow_packet_id":62,"flow_first_seen":1432820633802,"flow_last_seen":1432820681629,"flow_tot_l4_data_len":3501,"flow_min_l4_data_len":20,"flow_max_l4_data_len":525,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.192.222.189","src_port":42241,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","category":"Chat"}}
+0486{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":10,"flow_packet_id":62,"flow_first_seen":1432820633802,"flow_last_seen":1432820681629,"flow_tot_l4_data_len":3501,"flow_min_l4_data_len":20,"flow_max_l4_data_len":525,"flow_avg_l4_data_len":56,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.192.222.189","src_port":42241,"dst_port":5222,"l4_proto":"tcp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":4,"flow_packet_id":5,"flow_first_seen":1432820568947,"flow_last_seen":1432820628171,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"173.252.121.1","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0483{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":5,"flow_packet_id":5,"flow_first_seen":1432820569427,"flow_last_seen":1432820629171,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"179.60.192.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":7,"flow_packet_id":5,"flow_first_seen":1432820570876,"flow_last_seen":1432820631171,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.93.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0482{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":6,"flow_packet_id":5,"flow_first_seen":1432820570006,"flow_last_seen":1432820630172,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.79.192","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0480{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":8,"flow_packet_id":9,"flow_first_seen":1432820571488,"flow_last_seen":1432820632171,"flow_tot_l4_data_len":878,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.73.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":3,"flow_packet_id":5,"flow_first_seen":1432820568346,"flow_last_seen":1432820627171,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.64.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":2,"flow_packet_id":5,"flow_first_seen":1432820567917,"flow_last_seen":1432820626171,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.74.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":1,"flow_packet_id":5,"flow_first_seen":1432820567259,"flow_last_seen":1432820625171,"flow_tot_l4_data_len":506,"flow_min_l4_data_len":52,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"31.13.84.48","src_port":53620,"dst_port":3478,"l4_proto":"udp"}
+0535{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":11,"flow_packet_id":52,"flow_first_seen":1432820681899,"flow_last_seen":1432820691973,"flow_tot_l4_data_len":2843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":274,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.109","src_port":49721,"dst_port":5222,"l4_proto":"tcp","ndpi": {"proto":"WhatsApp","category":"Chat"}}
+0484{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap","flow_id":11,"flow_packet_id":52,"flow_first_seen":1432820681899,"flow_last_seen":1432820691973,"flow_tot_l4_data_len":2843,"flow_min_l4_data_len":20,"flow_max_l4_data_len":274,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"10.8.0.1","dst_ip":"158.85.58.109","src_port":49721,"dst_port":5222,"l4_proto":"tcp"}
+0164{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":261,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsapp_voice_and_message.pcap"}
diff --git a/tests/result/nDPId_whatsappfiles.pcap.txt b/tests/result/nDPId_whatsappfiles.pcap.txt
new file mode 100644
index 000000000..107cb958a
--- /dev/null
+++ b/tests/result/nDPId_whatsappfiles.pcap.txt
@@ -0,0 +1,42 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1519924083411,"flow_last_seen":1519924083411,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp"}
+0419{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":78,"pkt":"XEl5dU5qkLkxKPrKCABFAABAAABAAEAG5oDAqAIduTzYNcIKAbs8JoRvAAAAALDC\/\/8eywAAAgQFtAEDAwYBAQgKKOUV+QAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":74,"pkt":"kLkxKPrKXEl5dU5qCABFAAA8AABAAFUG0YS5PNg1wKgCHQG7wgonNGFZPCaEcKASbTj4zgAAAgQFggQCCAoJITj5KOUV+QEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoRwJzRhWoAQCAWMQgAAAQEICijlFlQJITj5","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":309,"pkt":"XEl5dU5qkLkxKPrKCABFAAEnAABAAEAG5ZnAqAIduTzYNcIKAbs8JoRwJzRhWoAYCAVSawAAAQEICijlFlYJITj5FgMBAO4BAADqAwPdYI75M\/7Hk5QfaVF+3jFJrn8JCAyxqJHjkbfYArYsNAAAKMAswCvAJMAjwArACcypwDDAL8AowCfAFMATzKgAnQCcAD0APAA1AC8BAACZ\/wEAAQAAAAAZABcAABRtbWctZm5hLndoYXRzYXBwLm5ldAAXAAAAIwAAAA0AFAASBAMIBAQBBQMIBQUBCAYGAQIBAAUABQEAAAAAM3QAAAASAAAAEAAwAC4CaDIFaDItMTYFaDItMTUFaDItMTQIc3BkeS8zLjEGc3BkeS8zCGh0dHAvMS4xAAsAAgEAAAoACAAGAB0AFwAY","pkt_caplen":309,"pkt_type":2048,"pkt_ipoffset":14}
+0804{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1519924083411,"flow_last_seen":1519924083506,"flow_tot_l4_data_len":391,"flow_min_l4_data_len":32,"flow_max_l4_data_len":275,"flow_avg_l4_data_len":97,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0401{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":66,"pkt":"kLkxKPrKXEl5dU5qCABFAAA0WA5AAFUGeX65PNg1wKgCHQG7wgonNGFaPCaFY4AQAHKSgAAAAQEICgkhOVko5RZW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2280{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":1464,"pkt":"kLkxKPrKXEl5dU5qCABFAAWqWA9AAFUGdAe5PNg1wKgCHQG7wgonNGFaPCaFY4AQAHIKKQAAAQEICgkhOVoo5RZWFgMDAEoCAABGAwN2JuCvNTP6QWM9pzKD\/cxL\/UByXEXf445CpKr2ya+mhwDAKwAAHgAAAAD\/AQABAAALAAQDAAECACMAAAAQAAUAAwJoMhYDAwuSCwALjgALiwAG0DCCBswwggW0oAMCAQICEA+Bv5rm7v\/kFf2eyPNQljcwDQYJKoZIhvcNAQELBQAwcDELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3VyYW5jZSBTZXJ2ZXIgQ0EwHhcNMTcwNDI2MDAwMDAwWhcNMTgwNTAxMTIwMDAwWjBpMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKTWVubG8gUGFyazEXMBUGA1UEChMORmFjZWJvb2ssIEluYy4xFzAVBgNVBAMMDioud2hhdHNhcHAubmV0MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKdrV937kE6LLAefsbs3VWviuzemY3ZfxQN3xRakSsoaliv7Y5GrVsw7Zpf8qD64tpv1zZyu1q8d5QYPVFraNGKOCBDIwggQuMB8GA1UdIwQYMBaAFFFo\/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBTOvtmcE\/Hpdw9nVhDPrrMPWW+2kzBtBgNVHREEZjBkghIqLmNkbi53aGF0c2FwcC5uZXSCEiouc25yLndoYXRzYXBwLm5ldIIOKi53aGF0c2FwcC5jb22CDioud2hhdHNhcHAubmV0ggx3aGF0c2FwcC5jb22CDHdoYXRzYXBwLm5ldDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNS5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIB8wYKKwYBBAHWeQIEAgSCAeMEggHfAd0AdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVur6AdGAAAEAwBGMEQCIAdhL0JGHAwVstkFDxx5uR5tWMrXEnCfvfOAkhPvsX+vAiAtiNAjFenr8IsHyIUYNUyZMjKigiFM4zIicOvIQ5DBwQB1AFYUBpov18Ls0\/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABW6voCCYAAAQDAEYwRAIgDQwj0NpInNvmDAEDQ4iF6KcoHweDkWsnI4\/CZYl\/IasCIBnZc3Yh+lXUzgGhpKoW8UP5rkmTDNTqZacPZHfvsQ9AAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo\/csAAAFbq+gIGQAABAMARzBFAiA\/diVHEHyPEjw4Z8WjzlhKwA8CQfgK","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":0,"flow_packet_id":6,"flow_first_seen":1519924083411,"flow_last_seen":1519924083598,"flow_tot_l4_data_len":1853,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":308,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+2283{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":1464,"pkt":"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","pkt_caplen":1464,"pkt_type":2048,"pkt_ipoffset":14}
+0963{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":478,"pkt":"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","pkt_caplen":478,"pkt_type":2048,"pkt_ipoffset":14}
+1232{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":0,"flow_packet_id":8,"flow_first_seen":1519924083411,"flow_last_seen":1519924083599,"flow_tot_l4_data_len":3727,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":465,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","server_names":"*.cdn.whatsapp.net,*.snr.whatsapp.net,*.whatsapp.com,*.whatsapp.net,whatsapp.com,whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=Menlo Park, O=Facebook, Inc., CN=*.whatsapp.net","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"10:54:EB:4A:A2:2A:42:2F:A6:1C:E7:9C:F4:84:10:7E:30:2E:56:BB"}}
+0402{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoVjJzRsRoAQB9l\/zgAAAQEICijlFrQJITla","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoVjJzRt4oAQB9N+OAAAAQEICijlFrQJITla","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoVjJzRt4oAQCAB9vgAAAQEICijlFwEJITla","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0576{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924083,"pkt_len":192,"pkt":"XEl5dU5qkLkxKPrKCABFAACyAABAAEAG5g7AqAIduTzYNcIKAbs8JoVjJzRt4oAYCADbUgAAAQEICijlGAAJITlaFgMDAEYQAABCQQRdV6wGCcOfzmkBM6UT7MLQweQglYbbBMmWC\/bTbVTeFNmERFNv6vjMpLPWUwkAgMMJDY92ziv5lE0LjXnahqCmFAMDAAEBFgMDACgAAAAAAAAAANRe9BeWafmHBmc3i\/AP4m88nQY\/ws+ghWGksOMTGrPc","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0750{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924084,"pkt_len":324,"pkt":"kLkxKPrKXEl5dU5qCABFAAE2WBJAAFUGeHi5PNg1wKgCHQG7wgonNG3iPCaF4YAYAHI66gAAAQEICgkhOyQo5RgAFgMDAMoEAADGAAKjAADATITY1B9Ak7wZ6olRUGgkVPl3S5mgCrJekYUw0HX45Z9tQzv4rlsGmb+6NLUZ6w9Mxl3yixNtYRmbID+cqeo69nu8y0vFs1hO9HivALzzf9j40b0NikCxYoeQ0P+1UtRmYMXRNXrLprDl2bzvHQg0Zf8sEzS+f3lYmmex798boU7Lzz1Y9FphkwTwXdjo7fuWBUxelYpJv78DqNaEWn2BVLBww17aeRy+4RvBG25pGCQLky+W3IBA89xIJF673Xs6FAMDAAEBFgMDACjSpG+dn47MCFMdsvSuj5FxFTRYX6QESM80NxiP\/OYG0hUxje0vAoli","pkt_caplen":324,"pkt_type":2048,"pkt_ipoffset":14}
+0514{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924084,"pkt_len":147,"pkt":"kLkxKPrKXEl5dU5qCABFAACFWBNAAFUGeSi5PNg1wKgCHQG7wgonNG7kPCaF4YAYAHKq7AAAAQEICgkhOyQo5RgAFwMDAEzSpG+dn47MCdcjbp4IzLg5l0yxO7j7YS34Peee5iNn2m7z9rMVpOz\/mVJ21Y6Ls0iC1tnnuAStIDHvozNy+E7SSWzXzb7BjEE8WbmQ","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924084,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIKAbs8JoXhJzRu5IAQB\/t5AAAAAQEICijlGHoJITsk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1230{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":255,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":0,"flow_packet_id":255,"flow_first_seen":1519924083411,"flow_last_seen":1519924119156,"flow_tot_l4_data_len":174156,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":682,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","server_names":"*.cdn.whatsapp.net,*.snr.whatsapp.net,*.whatsapp.com,*.whatsapp.net,whatsapp.com,whatsapp.net","ja3":"107144b88827da5da9ed42d8776ccdc5","ja3s":"2d1eb5817ece335c24904f516ad5da12","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA","issuerDN":"C=US, ST=California, L=Menlo Park, O=Facebook, Inc., CN=*.whatsapp.net","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1","fingerprint":"10:54:EB:4A:A2:2A:42:2F:A6:1C:E7:9C:F4:84:10:7E:30:2E:56:BB"}}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1519924240121,"flow_last_seen":1519924240121,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp"}
+0421{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":311,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":78,"pkt":"XEl5dU5qkLkxKPrKCABFAABAAABAAEAG5oDAqAIduTzYNcIiAbuCj0EnAAAAALDC\/\/+6MAAAAgQFtAEDAwYBAQgKKOd3WAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":312,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":74,"pkt":"kLkxKPrKXEl5dU5qCABFAAA8AABAAFUG0YS5PNg1wKgCHQG7wiLPr2ypgo9BKKASbTgw1AAAAgQFggQCCAq3hjooKOd3WAEDAwg=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":313,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIiAbuCj0Eoz69sqoAQCAXEZQAAAQEICijnd5W3hjoo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1105{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":583,"pkt":"XEl5dU5qkLkxKPrKCABFAAI5AABAAEAG5IfAqAIduTzYNcIiAbuCj0Eoz69sqoAYCAWCiQAAAQEICijnd5a3hjooFgMBAgABAAH8AwNLVHn\/qWaqe3EcBfpck7lkGf95e1gm1h4KmRyfvYLGZSCx8n8z8XDJ+pVmShGZO5o0rp2h9+q5RbYekK14EkkJrwAowCzAK8AkwCPACsAJzKnAMMAvwCjAJ8AUwBPMqACdAJwAPQA8ADUALwEAAYv\/AQABAAAAABkAFwAAFG1tZy1mbmEud2hhdHNhcHAubmV0ABcAAAAjAMBMhNjUH0CTvBnqiVFQaCRU+XdLmaAKsl6RhTDQdfjln21DO\/iuWwaZv7o0tRnrD0zGXfKLE21hGZsgP5yp6jr2e7zLS8WzWE70eK8AvPN\/2PjRvQ2KQLFih5DQ\/7VS1GZgxdE1esumsOXZvO8dCDRl\/ywTNL5\/eViaZ7Hv3xuhTsvPPVj0WmGTBPBd2Ojt+5YFTF6Vikm\/vwOo1oRafYFUsHDDXtp5HL7hG8EbbmkYJAuTL5bcgEDz3EgkXrvdezoADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAIAAYAHQAXABgAFQAuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0807{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":314,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1519924240121,"flow_last_seen":1519924240183,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"4e1a414c4f4c99097edd2a9a98e336c8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0403{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":315,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":66,"pkt":"kLkxKPrKXEl5dU5qCABFAAA0Vs5AAFUGer65PNg1wKgCHQG7wiLPr2yqgo9DLYAQAHLJsAAAAQEICreGOmoo53eW","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0604{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":212,"pkt":"kLkxKPrKXEl5dU5qCABFAADGVs9AAFUGeiu5PNg1wKgCHQG7wiLPr2yqgo9DLYAYAHK+xQAAAQEICreGOmoo53eWFgMDAFoCAABWAwMLRBt1h0+Ajb66OiYB8NNd0wKhDeQemNCYHWdmUob\/sCCx8n8z8XDJ+pVmShGZO5o0rp2h9+q5RbYekK14EkkJr8ArAAAO\/wEAAQAAEAAFAAMCaDIUAwMAAQEWAwMAKCefUt2iPQKuNPxVIK+TBqcb15iKo36mH+uDwU\/pzNiwUl4kJCwY2Lg=","pkt_caplen":212,"pkt_type":2048,"pkt_ipoffset":14}
+0863{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":316,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1519924240121,"flow_last_seen":1519924240244,"flow_tot_l4_data_len":875,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.WhatsAppFiles","category":"Download-FileTransfer-FileSharing"},"tls": {"version":"TLSv1.2","client_requested_server_name":"mmg-fna.whatsapp.net","ja3":"4e1a414c4f4c99097edd2a9a98e336c8","ja3s":"96681175a9547081bf3d417f1a572091","unsafe_cipher":0,"cipher":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0403{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":317,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIiAbuCj0Mtz69tPIAQCAPBTQAAAQEICijnd9a3hjpq","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":318,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":117,"pkt":"XEl5dU5qkLkxKPrKCABFAABnAABAAEAG5lnAqAIduTzYNcIiAbuCj0Mtz69tPIAYCAN6CAAAAQEICijnd9a3hjpqFAMDAAEBFgMDACgAAAAAAAAAANdfhyIP4+1Mi6+0AJlnmtiOXBq8OASkMp6UrXYXlEpc","pkt_caplen":117,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":319,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":119,"pkt":"XEl5dU5qkLkxKPrKCABFAABpAABAAEAG5lfAqAIduTzYNcIiAbuCj0Ngz69tPIAYCAO+EgAAAQEICijnd9u3hjpqFwMDADAAAAAAAAAAAauzMkgQ0N+NwIi4B1AH6wgdJgK7X8Q7cVpebPo9K0xiVYBRpILWCsU=","pkt_caplen":119,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":320,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":116,"pkt":"XEl5dU5qkLkxKPrKCABFAABmAABAAEAG5lrAqAIduTzYNcIiAbuCj0OVz69tPIAYCAPQRgAAAQEICijnd9u3hjpqFwMDAC0AAAAAAAAAAmFnpgjORwk8oq90nd2tyh8VTc2tO6n\/Z0sD6qO57Ry5JLQTilw=","pkt_caplen":116,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":321,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":108,"pkt":"XEl5dU5qkLkxKPrKCABFAABeAABAAEAG5mLAqAIduTzYNcIiAbuCj0PHz69tPIAYCAO49gAAAQEICijnd9y3hjpqFwMDACUAAAAAAAAAAw4lY\/RXECpBhLX1bSNKQwoQHaB7U0UdeY8FT4Wu","pkt_caplen":108,"pkt_type":2048,"pkt_ipoffset":14}
+0709{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":322,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":290,"pkt":"XEl5dU5qkLkxKPrKCABFAAEUAABAAEAG5azAqAIduTzYNcIiAbuCj0Pxz69tPIAYCAMluwAAAQEICijnd9y3hjpqFwMDANsAAAAAAAAABAnxCfWOecoK+43GJ7tLm2RmkIHeG7mEMaMvmJFJuz\/IDQiz6GYF89+O\/CAwOu+htaIl5YNKFiAGjA9S1YIScC0U6tbele0v9p+wygdy0uLaSvPi3WjJmc6fg66MyBQsdeyz9Y7A07CFaLIdfuObF25SX0h6YOBzH3cB6yBiSIq8uRa7czogf8n8\/heQxioQwfZda6QxWf8jXKUMC0ZtHFwBL2MUd8T25BFAhhvhbL8+CJJLntdrM6QoG8dkJ3Pn8xtSaxdoMqnCHda1Ha495l++vYo=","pkt_caplen":290,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":323,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":147,"pkt":"kLkxKPrKXEl5dU5qCABFAACFVtBAAFUGemu5PNg1wKgCHQG7wiLPr208go9DYIAYAHJd7gAAAQEICreGOqco53fWFwMDAEwnn1Ldoj0Cr5\/Im58b20pVNsEUdlvAxt5j+2mE6973guqJvkeaSOw7r5BrbRlq9NgfbBt7cCvCjOmKkI3k1Bgn5\/BcHUaq6GBshCdh","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":324,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":66,"pkt":"XEl5dU5qkLkxKPrKCABFAAA0AABAAEAG5ozAqAIduTzYNcIiAbuCj0TRz69tjYAQCAG+5AAAAQEICijneA+3hjqn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":325,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","pkt_oversize":false,"pkt_ts":1519924240,"pkt_len":104,"pkt":"XEl5dU5qkLkxKPrKCABFAABaAABAAEAG5mbAqAIduTzYNcIiAbuCj0TRz69tjYAYCAGn0QAAAQEICijneA+3hjqnFwMDACEAAAAAAAAABZSoQs4Gsxi2Tj\/BQp5xrm7kfCitYcqpn3Y=","pkt_caplen":104,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":0,"flow_packet_id":310,"flow_first_seen":1519924083411,"flow_last_seen":1519924193429,"flow_tot_l4_data_len":194364,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":626,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49674,"dst_port":443,"l4_proto":"tcp"}
+0479{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap","flow_id":1,"flow_packet_id":310,"flow_first_seen":1519924240121,"flow_last_seen":1519924247388,"flow_tot_l4_data_len":236771,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1430,"flow_avg_l4_data_len":763,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.29","dst_ip":"185.60.216.53","src_port":49698,"dst_port":443,"l4_proto":"tcp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":620,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/whatsappfiles.pcap"}
diff --git a/tests/result/nDPId_wireguard.pcap.txt b/tests/result/nDPId_wireguard.pcap.txt
new file mode 100644
index 000000000..8f44e781a
--- /dev/null
+++ b/tests/result/nDPId_wireguard.pcap.txt
@@ -0,0 +1,20 @@
+0361{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0471{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1563973554628,"flow_last_seen":1563973554628,"flow_tot_l4_data_len":808,"flow_min_l4_data_len":808,"flow_max_l4_data_len":808,"flow_avg_l4_data_len":808,"midstream":0,"l3_proto":"ip4","src_ip":"139.162.192.157","dst_ip":"192.168.0.14","src_port":51820,"dst_port":36116,"l4_proto":"udp"}
+1459{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":842,"pkt":"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","pkt_caplen":842,"pkt_type":2048,"pkt_ipoffset":14}
+0560{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":186,"pkt":"OCxKuzMdABAY3q0FCABFAACsFXoAADURYtGLosCdwKgADspsjRQAmIUlBAAAAL5AaY1sAAAAAAAAAApaAsrtXpH1hJEWMIaMon2Jp07DYKtFnos9KJ2dxNXsnPOlMw8teGIqqtQyAhfCvZKfSoj8FKmPC1PCtu8qqniK567s\/wF6cALr5IJXHXdFnmr1I94kKjzDU62XCT24xGedWrUZRek84+e2Fsx1lJJ6NR9cFgw9VnO9J77GX8hL","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":138,"pkt":"ABAY3q0FOCxKuzMdCABFAAB8LYcAAEARP\/TAqAAOi6LAnY0UymwAaNyeBAAAAG2mYV5wAAAAAAAAAAo35XrmOHswcilnP2QelKUcrUyMt+9zQAFDeYSUJyyw9BNkc7uq5jhjxm51P1MBuT08PEWRrzriFSk+BrqayZkHU3Oi+bUZJb76bMmarQhF","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0737{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":314,"pkt":"ABAY3q0FOCxKuzMdCABFAAEsLY4AAEARPz3AqAAOi6LAnY0UymwBGEmaBAAAAG2mYV5xAAAAAAAAAN5Ok0twWoOc3RX\/pBAmM5A4ttcyiSnr6WlIZ3rw0bHvyhJ8D0gFIaNhxkibunbxRgGXjlWZ99hJmuC6tQZVIrGyeoMJlogcU2ClZA6z15\/EtpzcXY3I+CEXh+Z9iqr2KZVCGuC0MXTHXbARADST6kVD8xHIEc4v0mzYC7k51yygUmbpSItW\/AA444wfSuDNmUbiY4K6LA3k\/CPu2j6keZRenRNezN\/II1ww58lLjPExI9BPRB1+PF7znwM0R3fflSkyQ5tURRe9xKq9gD77tIEtmEPJinN8ZwbFdxDLT4hg5tE5HwK3DHMsaD5svhmlGUYurJQySzz\/oUE7ajjVW1A=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0524{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1563973554628,"flow_last_seen":1563973554642,"flow_tot_l4_data_len":1344,"flow_min_l4_data_len":104,"flow_max_l4_data_len":808,"flow_avg_l4_data_len":336,"midstream":0,"l3_proto":"ip4","src_ip":"139.162.192.157","dst_ip":"192.168.0.14","src_port":51820,"dst_port":36116,"l4_proto":"udp","ndpi": {"proto":"WireGuard","category":"VPN"}}
+0497{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":138,"pkt":"OCxKuzMdABAY3q0FCABFAAB8FcIAADURYrmLosCdwKgADspsjRQAaAbHBAAAAL5AaY1tAAAAAAAAAPpGK9K5H5VHV22UlCuzckhifHXG0mCPbNY7tJ3Ehp5q9DbTenVPM\/dETy5WTx4iR6yiQjK\/qZpSgBD1KbJ+XOoBt2B9Juw3RjALxSawFkyQ","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0757{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":330,"pkt":"OCxKuzMdABAY3q0FCABFAAE8FcgAADURYfOLosCdwKgADspsjRQBKLKwBAAAAL5AaY1uAAAAAAAAAA7P3gsnfqyHSkxVvk7ZUFfTs5uId8MR1z\/P++3DU89F58u2KSBC89E+TMwoo5vdIMJsT+b7A709MaciSbaelRStCwO5ZHba2yhLzuruktuPjiNIsswqDnfibWXsnF+j4ERJh\/qJKXlzotU8KGVfs3A\/MVxVeJz4RCiD9OutpTiyTZH5LA9aw3ADvoaPd3eDEzJlPLuKOab0J9G0siyGPuaN2cX4sA5O942yloPoD+JsBf\/I39eYbc2nNxpH8g9awDhFPsYLC2g8MqV3gZYHPKs8UajcENjPNY+h3kSsFkuQY4BIfZQ+mgr+5rf4E0AshweBq\/HM2Ka\/WmNJdKPdtd4HzfWy+F5vIZKbjE+7T2oM","pkt_caplen":330,"pkt_type":2048,"pkt_ipoffset":14}
+0565{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":186,"pkt":"OCxKuzMdABAY3q0FCABFAACsFckAADURYoKLosCdwKgADspsjRQAmPsQBAAAAL5AaY1vAAAAAAAAAITu3wDVXS368ItNAaVwMwjjRLVcNvVyuKrBBn063\/VBY12\/vwBEErru4spuPmrGypdGz\/UMiwcGWV5Om9YZ\/aZEE3ZsgtATf9elbHoOLv6ksVHc3uwicicZMqOiUnBjSs\/7\/X3asoaOF+ayxeJFWuVfsTeKcXNeAn+nepd3ymgm","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":138,"pkt":"ABAY3q0FOCxKuzMdCABFAAB8LaUAAEARP9bAqAAOi6LAnY0UymwAaFWNBAAAAG2mYV5yAAAAAAAAAPMJxgmF97YKIv3RJCYIHeMPJgeM\/RZWWn6eBSJEI9wIHK1OKYt7mfYz5CHShOmaVJQYH8+pKP0QEewtefvNyURiItsDkM8xReRe8OfW4rWl","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":298,"pkt":"ABAY3q0FOCxKuzMdCABFAAEcLaYAAEARPzXAqAAOi6LAnY0UymwBCIMOBAAAAG2mYV5zAAAAAAAAAHhCo8yDazWnyAT+lNmjxtq+IimMkzliqNoDK6v2f3Ihl8yVBvvgtrVnShoX0Y6jm2lXBqZ+fkyJDBln24epcVpvqLIrWsiQb2t0LBlhrBR5KLPvRipaU7HMslv45q6u++LAPOzeE+jew8nPfnXoo1Ir9r3ogm9ZHpzifq2YdPpGvZLGWePcY9u8o5hN+2RGPtY9ObYebSzu0\/QQ2z+odOzeHyDpCE+01xS0KNEFocG6mM2xKxmZ6rVtsLnEGFXjinzYH\/T2y1gb0pSsUjSe07JjD0tXme6v01Sle1GPsq8eZE9Qx4IISPU+VnvqCJAN7w==","pkt_caplen":298,"pkt_type":2048,"pkt_ipoffset":14}
+0499{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":138,"pkt":"OCxKuzMdABAY3q0FCABFAAB8FjAAADURYkuLosCdwKgADspsjRQAaMDSBAAAAL5AaY1wAAAAAAAAAG1G7u5yBxZg2JUKp0+aYXNkdBKRCXTxTs2Qz0iIhRpWj4KCCIHEc1W9G3wlK9ux\/bfjkALMxG3HGKiCsaaIFP1Hjd6PXopXAsXn\/cKTp+mS","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+1210{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":666,"pkt":"OCxKuzMdABAY3q0FCABFAAKMFqQAADURX8eLosCdwKgADspsjRQCeIrJBAAAAL5AaY1xAAAAAAAAADO1d7qpNTHdcy7vBr61XyrTj1rcjH9q1NoCUkZfktZR0EW6wfGCY1wQaucTHbXxrQPWkRhsGU778kxJdh3cW+Y1zf\/pnc0xQYqL+0qPEnolHIGhjHeoRWmcs1JHuvahR8VulSDVZq7Po5dW1ifgBpXaHhhZagCaLf2EO\/QCh4Gj2uUkExsCOvVZCl3VFejg+bku6oo2aoU7GN0pgoWrcYoY1nLyepl4A5xZ8IKkBmghRxwwLLW0Yv1uaNhIZTOcMFSgSCmvjcn6cl59gF6krbMhAWhk6zWdVpbRvxCB23YpjSYLdBgx7+1AguNrVNPNd1NnUeVZqDAEs+LHXhRgaRsIW6G0VXsP04dvicymvTNKf+xOoplPx82ZBw+qyrs2Jz7TErIrB0JBZwncsKK2KEAQEShsIFo6J4QcF0sHO02P3Zdt4ysX2ZXpZNCDxJtlXvzYYUVvBY9n+C+VszRzaoJ\/PZxy+pphFlO5gn2VGqQaJyKMejIXz4MsTKSL+FxAjwVS\/Nuj4HPCClP1gO0gyJZa3+YnbPjnDQGkAdqrBkmGZg0h2bkNJrnD9VarQCXM6eTotvAiTugbbHDUe7Uzwdr\/1t6Pzk5c\/1me2RY9Lmt7hBFzEjpRFko3xEZTe5+lJ2CpMnzqs+ZduxXY7u4Ccy2XP3RYwvMuHEzjCw58CAcYIu0iLn\/VZehTzGXlcTh4s8MjynPHL55vC\/9f7cw8nubPcMkje5xxtjbL0iuNszV7pDHms\/GpNJbxLiHDqSYqo3e676lWzduMXlesKcBhdDHehFKCx45T++x0D4gzFIv1","pkt_caplen":666,"pkt_type":2048,"pkt_ipoffset":14}
+0564{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":186,"pkt":"OCxKuzMdABAY3q0FCABFAACsFqUAADURYaaLosCdwKgADspsjRQAmP2RBAAAAL5AaY1yAAAAAAAAANapKXCwC90mjFmPDaVmRo5cyhieGmyS28OW9p3OU02M0MQnXGriCnr7W+oZrfnIYuNL3BLZwxUMwv9URBU7L0bjcgXxdplFO6\/V9iWI3JOAQDjq3+wA\/B2cxPnnQMmMwzRv+YZ\/DSnYZYqB3O7lDkLWKukUjOT1YDaqyD6MQDcZ","pkt_caplen":186,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":138,"pkt":"ABAY3q0FOCxKuzMdCABFAAB8LiUAAEARP1bAqAAOi6LAnY0UymwAaB+LBAAAAG2mYV50AAAAAAAAAI9tfKVIx7UlVy1HDhAUrAMjKdLduP+OEpWHLBE394laW3jJ0Lqa7HURy6krpFGEtykTq3N\/a3bbxUi+nKzrcQPN9N7PTqi9qMcJcRZfRaJH","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0738{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973554,"pkt_len":314,"pkt":"ABAY3q0FOCxKuzMdCABFAAEsLioAAEARPqHAqAAOi6LAnY0UymwBGACZBAAAAG2mYV51AAAAAAAAALRQvj6tw6QAY\/1JXhRu0\/kpg0ZD7SEgnZpAC+s8jGXziAhKpCTCH\/pk3rDPYn19TKsTuLxc1zmaU017AkbnBsHquJngTkFZUSs4A7OonKFDYfNR8NBpor3e08bbX9kpBvg5hvCfcFuilN1p\/T6Gbi7F27c\/VedFYEwOOSWRAgT933bHaR8+BsGfnNRPXDEqf0GZB2Q3fwNPouZkPRRQL29PIh6Y3f7QwNYfVcFC3cp5UvgzmnSvBJcnCk94OHMYhEzEjIXqW1oc8SvvU7RtsYPY8EWQO0s5T6PvYCWeNPCyv0ncQfWZ3DrNXptDDBcOK8yNpQjgCWPIQcRiWgbLKzw=","pkt_caplen":314,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","pkt_oversize":false,"pkt_ts":1563973555,"pkt_len":138,"pkt":"OCxKuzMdABAY3q0FCABFAAB8FrAAADURYcuLosCdwKgADspsjRQAaH8xBAAAAL5AaY1zAAAAAAAAAKsmGYGKi6UV\/ABoO1rTU3erm9HJ6ajuCHhNTr+BNzOxxDMpzZpoj4pN4xXAtWKi+3K8fQ4EuV95kwtHAB1+WdN92q42fF3e2HUsuFze7Je7","pkt_caplen":138,"pkt_type":2048,"pkt_ipoffset":14}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":2399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap","flow_id":0,"flow_packet_id":2399,"flow_first_seen":1563973554628,"flow_last_seen":1563973935842,"flow_tot_l4_data_len":652616,"flow_min_l4_data_len":40,"flow_max_l4_data_len":1370,"flow_avg_l4_data_len":272,"midstream":0,"l3_proto":"ip4","src_ip":"139.162.192.157","dst_ip":"192.168.0.14","src_port":51820,"dst_port":36116,"l4_proto":"udp"}
+0148{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":2399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/wireguard.pcap"}
diff --git a/tests/result/nDPId_youtube_quic.pcap.txt b/tests/result/nDPId_youtube_quic.pcap.txt
new file mode 100644
index 000000000..fa0ef68ff
--- /dev/null
+++ b/tests/result/nDPId_youtube_quic.pcap.txt
@@ -0,0 +1,54 @@
+0364{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0473{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1489363823466,"flow_last_seen":1489363823466,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":54997,"dst_port":443,"l4_proto":"udp"}
+2184{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1489363823466,"flow_last_seen":1489363823466,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":54997,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"pagead2.googlesyndication.com"}}
+0895{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":427,"pkt":"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","pkt_caplen":427,"pkt_type":2048,"pkt_ipoffset":14}
+2198{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"xCwDBkn+gCqojWksCABFAAViAABAADcR117YOs1CwKgBBwG71tUFTuocBCh3B7XiTuKXN4LFlWznTXqPOMTIP1YB45lXi+l5CF8JASyEKKaDONFN5YR3rA\/p9CKVXhUMWNxz3dKUg1yQftOAuLAuCFZHEo433jmLn2X4f\/Owuck2m9UesvdXoxzwq4xDpUXHvNH9PzNMS1XtEZ0KDZ904pHEN+ZkjUiA2jK\/AWrBBVjEsqHcAMngSVXjIyTLuIfTfT50KGoQr9mSm5SWUDtU4w+2DwTLde4slXrVb5tsrZJ9hx6FXeBCOwNcjEoeHA7do276\/9KH1k58X3zu+PQcEwnHQBIs5Nvjxz0m7lZ\/e4WfsWAx90HOH6likwa4aRKygVjLaiXObj1BRuaQFXdbITUHeb\/v1Bb0ex9qIwx0kcogAUVq6KGcRlImR2VCET7Q2UPfBF1HkA3bAqvJ6t1BP07HS8IKIEm70QgionKkRzGiFzdUhT09R6zdeXllUpiA63fBrBRfZD4ih6nX4zo\/yc\/lz+z\/tYWWCPtitjIx3R+MsYy6evVwKHmKh4xLbNgtf6Bu5FREacax96iyQP2\/vuAdKPy+I6gMbTz04jy4zg2nTKOKHNa3aAGNL9B3Uh5t6mqJXuzsLfLLTPDw3wrJPan+M\/0XoefuuxvaucM7CeSe1bcynXGH+VeCKK3X6BEjxAIAyaIH3WN4GasKfIjmi2abIP71bMldE4Rrc0QpuysWWFnpQQt9pN2sP40R1CWaJEjWn2UIOe0P10GgnLa0xDEY45T4mm1G5cRaybTY1lDhwEfyXyWZ9AZfiHELWMCRxQrjRsfwPjDlL6jHi\/zHIUWOI\/T4jgDqU2KclKtGJHvbzyipTcTSry1Z9gmEkVPVvz\/8EjMnwGHjnltQ6Dn6FOkOgVFgA2iD5qiIgNLtjkUfH1GBvC5KbT9MfqpK2j2k4rSt9zbnBWSsgHnKyvlhVlk4OSMFjMkESHpv2MoP7kPpHn9hYZR+DGSK3WZiE2JTywLeaTFpsQZ3daTQq1Vr04zxtlC9vRWSZgVtzp+73FUoayEpGTdeO3UERRAep7Gz6OHwglh0vTs4C4cI3glPhuREbf69JIx21MPWU3j5sPCPzg7nPp1rI9ewTvRn38IUIjcvV1KuUH4IRVmz5W6wsHwHFtnkwFNuxtYxLxpK0EDIngGp5d6ht7210ydmiQr6O0ON8qJtc3t5+jXn6ntXD+RhEqv4GCaMWHbVrUNZALDxj9JvSEzyroxEuoApEO8TL\/ZdVC\/slwR1pM3JdbAsWN2rxIFLM5krFwOakRgi754xhdBEry7MgvTwiHsgDJ3Rg3jSdB9jubcVT3HICTRmj1vR\/GLDAyPIFAzuuaVmpolrsQwDxFuyNGOcjHVBUbeP6bnCaCs1JfK35oan09836\/37ZWojhkKHAUoDUCP0eOYnRmUhbwOggCe7+p8hW83\/lILFNK1NDMAm7qAsqoccxqNT61ke0qmot69NhPXpwpGUt\/gK3nyvFne4lsK7S7r1eMvI29rlDBY0L\/e2MX+l+NFFonVbYbxqlVZxk5h57Py0nXsSE5q43RZq\/Ab5Ljnrfv\/qOWasfLkVsR95Ih7otWzubnTYoOB5dgkPlalnkY+ZT0ynhrpD6iNCVYd4popCzZS+uE59ZqtbLuU6i6Oh3yTkUuBN6l4rJS\/6y1YL+YBtywlzVVi2gqoBTO6RyHcXMeDc6anBpSJn+Y11FC9lfnd1ZBuVxPW\/4cBKWMy9IKMGLXE8iIH1zC\/mEqW8ZtRWLvviks2j2E9BFu9ovslgURdyPBgw2o0Whiqb07OoUWWMBoSXHynCDs+gbza+6qUl","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":73,"pkt":"xCwDBkn+gCqojWksCABFAAA7AABAADcR3IXYOs1CwKgBBwG71tUAJ1gdAAJToMXcTxyWQBEndSjIH+c74XrspwzymN45kSe5Xg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0424{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":83,"pkt":"gCqojWksxCwDBkn+CABFAABFmZwAAEARAADAqAEH2DrNQtbVAbsAMWdvDJNw4V58RG0IA4pBZ++jAYkOLlkHlCitPHPsL9hXYhophG9IU8XMssI=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":80,"pkt":"gCqojWksxCwDBkn+CABFAABCp7QAAEARAADAqAEH2DrNQtbVAbsALmdsDJNw4V58RG0IBIojOiGZrOwd3wfnBAolFa+MDigGMhT3toZWnz0=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":72,"pkt":"xCwDBkn+gCqojWksCABFAAA6AABAADcR3IbYOs1CwKgBBwG71tUAJv+uAAOC+OqMti7vUNeHXXvIg19FQ1+L2evOUq31Rk1l","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0905{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":433,"pkt":"xCwDBkn+gCqojWksCABFAAGjAABAADcR2x3YOs1CwKgBBwG71tUBjw9oAARmJ4LvsthB9p\/yGE2IpdREVbvQB5yLGv+xhIENchsqq0OAcgBXXugbSZQv9UDV08TJ21bW0CMrNN5FOKxa8kaWfhCd0oi7pvAo1J1YBsS+zJtDtCHoc3dhY\/z7br+UKIYnQVmZX\/dNIw6OX6o9JOVUMQ\/HBKu9ZlHaNzbn33uoCixjLaxEJkuRIFtM6EO5X0wSARoU+xDMSxCnU4\/5QOwM0NInP+lRJiT4ClqcyhQXwEatH0o0SZyopM0jf2MzyRm9VUL\/zKjAmeU6BwtVH+i\/glYMRekX1sA19sOp6VT1Pg1FNaNiE1a3dRreB4eNaOJeT39TJh+RXwZDhmQYpKs+flO06WBG9dWF\/zTR431+m35gjktGv\/MLrbDC8\/jJtYFwvkMSAH2lV3wMpUKg5V6cFZ4GOcnUoSj44Umiifvz7txLJ+g8IKsj3B\/y6bXvOHU90wkwb5amjHEl+Sz464pkSR9FPoSthmpyK9W+tPMpL3OIgNom8XDBe+yCAcH1H8RCPL1Z+Q==","pkt_caplen":433,"pkt_type":2048,"pkt_ipoffset":14}
+0420{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":80,"pkt":"gCqojWksxCwDBkn+CABFAABC7SkAAEARAADAqAEH2DrNQtbVAbsALmdsDJNw4V58RG0IBYRk4ypWzacyrTjIXN7Nm7tVc3knueVltKEdHvM=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":72,"pkt":"xCwDBkn+gCqojWksCABFAAA6AABAADcR3IbYOs1CwKgBBwG71tUAJvqQAAXuC7HOMD\/wTv9IPtVUJ1QkvplqoQN\/CNICm+ZU","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0474{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1489363823738,"flow_last_seen":1489363823738,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.198.33","src_port":56074,"dst_port":443,"l4_proto":"udp"}
+2175{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0568{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1489363823738,"flow_last_seen":1489363823738,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.198.33","src_port":56074,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTube","category":"Media"},"quic": {"hostname":"yt3.ggpht.com"}}
+2189{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"xCwDBkn+gCqojWksCABFAAViAABAADUR4H\/YOsYhwKgBBwG72woFTqYeCGI\/o1o3gkQjAfrje9Hje5P995YFE4ABUkVKAAgAAABTVEsAPAAAAFNOTwB0AAAAUFJPRroAAABTQ0ZHWQEAAFJSRUpdAQAAU1RUTGUBAABDU0NUVwIAAENSVP\/\/BQAA+LXECKXyXyaGkNvk1LnkKe2HcwZSdJKMjSZdwRtRvlgkC7wrIojsxa12VSbQ+UqytsSw5ZWrAguctbN84e+itVKKdDan60SbCn6HO8EhAZXhZCoi6zTXVPfruFP+xbK0jobs4P1ETvvj7642AaRXoyX3AiUwRAIga0VZvCZ3TBiWNQTgv6KY8y2d9RkggowYQwi1RHlUtm4CIDUxV08RC49VVgJORrtGSNh+UsyMA8+5V0kTzoS1\/6EyU0NGRwgAAABBRUFECAAAAFNDSUQYAAAAUERNRBwAAABUQktQIAAAAFBVQlNDAAAAS0VYU0cAAABPQklUTwAAAEVYUFlXAAAAQUVTR0NDMjBrdmP1GwKyBEvvwtZJjj6PQ0hJRFRCMTAgAAC7MI00KZ1MP25xAs8ApFxY\/QSpEMcZP7AIDZmbDnFGD0MyNTUwMDAwMDAwMEDbx1gAAAAADAAAAND3AQAAAAAAAPAAdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVplaZe7AAAEAwBGMEQCIFrxuSR6yQfoERjhpyCo\/HC4DbnJyy5PDUNSQYvoLd7WAiA1du1k\/DfC+hSnbCFZ+CiZL\/WBsCA2tHRh+V5os9e8wAB3AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWmVpmAsAAAQDAEgwRgIhAK1Z+StuHvhEQzbhrizA0oP28zksTi\/aWkPYynKMWI7wAiEAoZsd0Sdt7uEo3XB3wMmgRGZNny2cfedCYnG3zpLag4YBA37tgIaiFYKRAgAAAAMB6IFgkpIa6AAAAAAAKgcAAHi7gTUtv1NjZwCWXOxKBk1sXJA2HIf55ae2MzL3PkFvyFGxkQUqDMwNjIyMgPkFmJfA7TkDUyC2MDUHdaIKsVrFwcPlDEw3aflFeZmJsATJzsPrm1+aVwJKXWGZqeVwd\/EguwvUlgC5i0dcCximIGFgJilKBqbG1Dxw1BtEGgizsQO9e84W2BLhADOYGdmZnRhYMt6FvD+wnV996Zw\/hsoKnDX1AkfE3LjmrmD0Xbj\/45IfeVee\/OywebVOPSnedOpTyamR\/2zN7jmfePP5sO3s0PyvawoWN7GsN2hiWU2oLGtizgMpEGRpYk4FchKbcLm1SUZLL7GgoBiHrApEtiAfzNUrBqaYxPRUqGJgYi4Gq+LT0kvKyU+HKWsSBPILUIWUtEBUbn4eMKcm4jBGE6QGbLcuVIVuSn55Xk5+Ygq6UnVMpaUF2BQqYChEVwEMgJT80qSc1OSczORs9ADgBoZbekEG3F8QzSnAIioVLAQP1+LKvBRo5QWWEIFJlKcm5WSmQ02Q19IrTkxLzSstwBHgYAV5KUn5FTgUKGrpEQoceYQS7IEioYUrJhFa9YpTgUFSgq6AByVW+dGjWYFgJEvhCWxORFDzowe0KPbgEMISyNrFJcB4SNYrSMwDOiE3Mx9f2hXDIS6LPxz4S\/PSMnOA5VFqil5eankxUtuLvcEgA6kEjwGWQdpIZbM8tLgsyM6EGgoukd09Hd2NwIWvNlJxD1MMDC6gj4sNkXWAqgCk9qDW3+B7S2xzw150iDxJLJ4oWT2f5yFamwi5WMfaiVKENDKAtRxaz4WDjS29kQdYohsYQFpFmgbqBqoLlBco","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2184{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2180{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0943{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":459,"pkt":"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","pkt_caplen":459,"pkt_type":2048,"pkt_ipoffset":14}
+0559{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":177,"pkt":"gCqojWksxCwDBkn+CABFAACj4aAAAEARAADAqAEH2DrGIdsKAbsAj2CsDGI\/o1o3gkQjBFEyAZr70zUW\/e\/NC\/bkK6\/CS+XQYJcL5sO2iXIoer0ovsyyj2qgv0vQyViCEdyNjMtHHJwJQSug+EQ\/tNLJsdhNBRFTh4X\/FJFfq0X9w\/QfaQwCgd5hAmTS5Fdz4omguU2YZCNiDgunmwceRYCoMfKmfBewU0S+UsAICnJF","pkt_caplen":177,"pkt_type":2048,"pkt_ipoffset":14}
+0561{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":178,"pkt":"gCqojWksxCwDBkn+CABFAACkbXwAAEARAADAqAEH2DrGIdsKAbsAkGCtDGI\/o1o3gkQjBcJV4mQNQtYkuJeLkyFEkSTxwqLgbKiFCViCZ3k41Af\/a9jTvoNz7z1ngr0tpr0JpN\/2P0p+XmEzqVF4gz64Lyk84V75kka1nBDIOPfG49he+pgGLeN6Yrhwg+s3kz9taEDhoeYdQaXq2yTxYA\/VBF\/G20\/P+JzLntAJEUMvMg==","pkt_caplen":178,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":77,"pkt":"xCwDBkn+gCqojWksCABFAAA\/AABAADUR5aLYOsYhwKgBBwG72woAK2k\/CGI\/o1o3gkQjA9bl7e9gG\/OjSGLnbEABhyQBAQBx\/\/\/\/BgI=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+2206{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":73,"pkt":"xCwDBkn+gCqojWksCABFAAA7AABAADUR5abYOsYhwKgBBwG72woAJyCbAAXfSLQ2pIpISGECLi9nb6jEsAG45\/+3zy90rPX34A==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0427{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":83,"pkt":"gCqojWksxCwDBkn+CABFAABFolIAAEARAADAqAEH2DrGIdsKAbsAMWBODGI\/o1o3gkQjBs95XY2jNugcg2fObf3ElgzmH1YVDPfRmktaWUUcMZU=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":83,"pkt":"gCqojWksxCwDBkn+CABFAABFFj4AAEARAADAqAEH2DrGIdsKAbsAMWBODGI\/o1o3gkQjB+HpbKDoTTO\/1zEdIUY8Ql3L7WXnXeb1Ms+k+OD75iY=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+2202{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2196{"flow_id":1,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":1,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":80,"pkt":"gCqojWksxCwDBkn+CABFAABCCcIAAEARAADAqAEH2DrGIdsKAbsALmBLDGI\/o1o3gkQjCNNQ08y87uHkHzhrLcEngIT3w8iKIy6akaUZgUE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0550{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":130,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":170,"pkt":"gCqojWksxCwDBkn+CABFAACc1kwAAEARAADAqAEH2DrNQtbVAbsAiGfGDJNw4V58RG0IBnD21Au\/fh+6EE2J+0mxHSbWMJSo9q9E3tWhswQuso6EsBdjCsEZAk+V7AOz\/XLkpqlSoYc\/kIXPWCpBAB1tLubLPKoh\/x8PfNMXSJsWK8ggDDs0XhcdaOqS\/DfTggTVRDrk94eKDIkQTBjUep2bLsJRdWBVT9E=","pkt_caplen":170,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":132,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363823,"pkt_len":125,"pkt":"xCwDBkn+gCqojWksCABFAABvAABAADcR3FHYOs1CwKgBBwG71tUAW3wLAAaCckWqmAz7w9Os5EwDIkl5Nie3TGMXqV58DwE6Ko7B7BH\/QcO1LbyesVT13OIEqL+7XhTiNO7hX0UYVgOsYXqKZix0lQLr1jXLi3OezpqndHY=","pkt_caplen":125,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":133,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":80,"pkt":"gCqojWksxCwDBkn+CABFAABC+DUAAEARAADAqAEH2DrNQtbVAbsALmdsDJNw4V58RG0IB026tPOV01wVhUhlyfsy0Aem5ygQQRlQ2Txy4nw=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0475{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1489363824401,"flow_last_seen":1489363824401,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":53859,"dst_port":443,"l4_proto":"udp"}
+2183{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0580{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":134,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1489363824401,"flow_last_seen":1489363824401,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":53859,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.Google","category":"Web"},"quic": {"hostname":"googleads.g.doubleclick.net"}}
+2198{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":135,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0799{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":136,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":356,"pkt":"gCqojWksxCwDBkn+CABFAAFWgV8AAEARAADAqAEH2DrNQtJjAbsBQmiADXhX73QJ\/9nIUTAzNQNN4EYmtc8pzVIIOlw5wUUTViVod6Y0+1HgA3vBxmFBB9XdzPolT4EuSqVTYDWG+BQf0+uutBG1cIb1StnXne22+Sa3VBkmnkxHzdhhHTq5RFHE1DzOC1OWyujit50aD9fovXbwARSedQlPJ7gjdJSVfTm6O3nF2k42pradZvrpU1ech4qBDDCfAnmOfCXqI5NXsD3jyb4bcNfoTf5ko+c96L+Kv0ngIjlmGgFFf6vJ8QwUVroovQmrUV9bPxW9NYlbZzDQO3\/aocbUP2HxCiVbIwPbD2Jd4G+p\/+kRB\/3zN\/cBW\/zgsZhwNASU8TEuM0gATTjCn+DvX6KA+8RurPRChvD1WnZ\/ZRI9q2M84tMzgiUjvDAoLSC7i0dr41HUDnzmJH+mr0XOTEoxFNo=","pkt_caplen":356,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":138,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":73,"pkt":"xCwDBkn+gCqojWksCABFAAA7AABAADcR3IXYOs1CwKgBBwG70mMAJzNsAAIobyWxe\/6rNDcbPEwcnfO47zuloqgMb27L0Euq1A==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0411{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":139,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":72,"pkt":"xCwDBkn+gCqojWksCABFAAA6AABAADcR3IbYOs1CwKgBBwG70mMAJlg+AANnlBBkbqXvKjkv2HpRth8TKItj0Phs+1uaP\/l0","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":140,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":83,"pkt":"gCqojWksxCwDBkn+CABFAABF3dAAAEARAADAqAEH2DrNQtJjAbsAMWdvDHhX73QJ\/9nIBI+H3Jy+TYo4yB6Wmzw02\/Yr317iioqMHpg07SJhS+U=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":141,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":80,"pkt":"gCqojWksxCwDBkn+CABFAABCtYEAAEARAADAqAEH2DrNQtJjAbsALmdsDHhX73QJ\/9nIBUK2+bo2PappbqonsNX51k4wLrObpHDFhhhr84Q=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":142,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":69,"pkt":"xCwDBkn+gCqojWksCABFAAA3AABAADcR3InYOs1CwKgBBwG70mMAI9AvAASuJaNGZJtIJ\/+dG1tehDyuHnsrL2UUAg+P","pkt_caplen":69,"pkt_type":2048,"pkt_ipoffset":14}
+0841{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":143,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":385,"pkt":"gCqojWksxCwDBkn+CABFAAFzfIEAAEARAADAqAEH2DrNQtJjAbsBX2idDHhX73QJ\/9nIBs4rj1KJtILWGeiHxS+GrNzAZuMEXMT8DB4OsZBikg3NJKI+oovj6SdqvL3Z62eQKduSYTDWVN5dgKIv5d8nAVgupTBfzW93\/9TRbwI457Y1UBHGQ\/3MfWCvkdS2jRyjcXmp9aXFnGkHwbG+hE4Y8uhfh6Ngr010zItOsliaTuUiifB6jrQyDy1ubGh9UwZTihKMWGZdmnfDI1wcopBwfgD5YcyxIIE0iKf83zJlGySdVS\/Cu1VFH4d2jGHgy9QU3p1nOcz3PmS2gycjIhC+YXNENxM0srNiO2WL\/U9qOBc1e8tuv7l6CF5ABNTgAaot2\/5WzFZ5TLtzE7vmedCeUfu45iqFX4Gev+eFr0brI9Z\/iGNQZthe+HhwpDHElc8DhlmXdz1E7I8rqqnqRr99UhfSpyRF+dIL\/zT62LI675EBlEohMNBOvwPZqoiFGg==","pkt_caplen":385,"pkt_type":2048,"pkt_ipoffset":14}
+2203{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":144,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+1502{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":876,"pkt":"xCwDBkn+gCqojWksCABFAANeAABAADcR2WLYOs1CwKgBBwG70mMDSuxyAAampVwYTyixdOWOr9MEDLE6k4dL58Cw7pkBCGmT2xl\/QYDQEsMtuXo\/45NMD0jdNETYVe5lfzn8TPH9r+geIRmdlUEbV\/BFZMP8bKbuBjNfVj4yIu17plHd8UGzR+HsC6QT9i5koyOsKcdDcli\/QpY7TuAOWLM+ZCnIlOpBlsq2jl\/7OFuD69mmPdf96ROXDVCarKtAEJJqh+XNJZ1qt1R7cPODhjDJ4yJA4kmumoQGWFLiFXbCm9LdxuCC+F5knHK8uvJTIxU71q+6YmYRSJOlMjhOhkW5sypA32kyETRrIWrXOL5HogVmqdtJqsLTt90oa5wPw1Jt95dlGXmgC\/CQAjg6zQGA+1ZN5dOtvGmaqSvCwxY\/TJtHwxnZypI7MkuK\/kWCmd6dG0bg7ICXlc9XZlOvobf0kBlXGCquo2VxxfWoYYHzH1N0H5MiHYGIejtsyFwdyQoimxvlq+E9E031vaaou6gQcL4gxfpaa5x5GH2z7AgP5w6AfN11WOL2HsmwVcvIHv1QDw3pkAWXvNKKqeix3SWA2ofTS6blPdzLpU\/\/bcZOcgqZzlwrw0tJS7eUqSc68nMdjycqKod0x0DCZgBW+j5HlSTM54dje\/xyps1FL6Q+qH8t5Fms3iRH5EKmCPxKOelfY0i2te7\/eWLElUTM8hyB2dzS1yfafUskj45mAJbiKbha5\/NASvt67LChrrbH6g\/YJ75JF0Nu+iABoDvgyn0pI4Y9PpAKsCuPHCLqOVHHfuSDVrrMmyOMXd5FaQN+MW2JCKx+3ztgHSGHdyPXsA87Jad4UZ4CvU7nuV0qm2vDehlGiIWFG1ZioFQ8lATTRYKfBw0djMlq7rFMT844ft8YZYeZica57ZMDqoknG+lqATV0jaMVnyTfo2WrWMzwM9I+BAXCCOkJe88ZTVtS53RADM7bGzqTqZtlnRBbqyW0CmbwxLiNOu2tFh440mMNTJX1BNyZgjGFfIpQP4AQTPX1W6yk0cNCe1wr265GJOHhZ\/6AA+0ikcs3fMMFB8YDJg2YTWM2k\/U0uJiPx5NDwn8rYJYtEAGxb4OMHNAqcAZm0x1QbYNivL2l45lVPYiORIdnP1QqGA\/X8uxe","pkt_caplen":876,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":146,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":80,"pkt":"gCqojWksxCwDBkn+CABFAABCri0AAEARAADAqAEH2DrNQtJjAbsALmdsDHhX73QJ\/9nIB1LOOHmObBjHygjU4gg8ut\/ZA4C6iNTIFTt388k=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0415{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":147,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":75,"pkt":"xCwDBkn+gCqojWksCABFAAA9AABAADcR3IPYOs1CwKgBBwG70mMAKSH+AAf+nADu3vIaZ6KuZBEpmBE1my9pcSDsXentJrwW7yRM","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+1284{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":148,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","pkt_oversize":false,"pkt_ts":1489363824,"pkt_len":712,"pkt":"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","pkt_caplen":712,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":1,"flow_packet_id":258,"flow_first_seen":1489363823738,"flow_last_seen":1489363826862,"flow_tot_l4_data_len":169723,"flow_min_l4_data_len":39,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":657,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.198.33","src_port":56074,"dst_port":443,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":0,"flow_packet_id":13,"flow_first_seen":1489363823466,"flow_last_seen":1489363824024,"flow_tot_l4_data_len":4037,"flow_min_l4_data_len":38,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":310,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":54997,"dst_port":443,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap","flow_id":2,"flow_packet_id":18,"flow_first_seen":1489363824401,"flow_last_seen":1489363824840,"flow_tot_l4_data_len":8053,"flow_min_l4_data_len":35,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":447,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.7","dst_ip":"216.58.205.66","src_port":53859,"dst_port":443,"l4_proto":"udp"}
+0150{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtube_quic.pcap"}
diff --git a/tests/result/nDPId_youtubeupload.pcap.txt b/tests/result/nDPId_youtubeupload.pcap.txt
new file mode 100644
index 000000000..dfb640be1
--- /dev/null
+++ b/tests/result/nDPId_youtubeupload.pcap.txt
@@ -0,0 +1,56 @@
+0365{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0476{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1511102576794,"flow_last_seen":1511102576794,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":51925,"dst_port":443,"l4_proto":"udp"}
+2176{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0581{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1511102576794,"flow_last_seen":1511102576794,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":51925,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTubeUpload","category":"Media"},"quic": {"hostname":"upload.youtube.com"}}
+0468{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1511102576835,"flow_last_seen":1511102576835,"flow_tot_l4_data_len":32,"flow_min_l4_data_len":32,"flow_max_l4_data_len":32,"flow_avg_l4_data_len":32,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp"}
+0401{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":66,"pkt":"XEl5dU5q2MuK4S0uCABFAAA0AURAAIAGcnTAqAIbrNkXb+BsAbtWAw9KAAAAAIAC+vClngAAAgQFtAEDAwgBAQQC","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2188{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1392,"pkt":"2MuK4S0uXEl5dU5qCABFAAViAABAADkRtX+s2RdvwKgCGwG7ytUFTpL9CJHSvk7nMdgaAY7UOy2eqBjwqYbdQEABH3gBAQD\/\/\/\/6BgCAAVJFSgAIAAAAU1RLADgAAABTTk8AbAAAAFBST0a0AAAAU0NGR1MBAABSUkVKVwEAAFNUVExfAQAAQ1NDVFECAABDUlT\/XwkAAEbxGDSLTF1Q0EvnndIQSTAo6qDgodwKRUkl\/wgXSXZEn9QM2BlHJ5TGchczmqfpPPkVE8tMlsFMfVeayelDb2fy4YzLDv2N+n2kP+GPU+AvJ+LZZRk0N6KyGXGuCIybXc0DgBajeTEN+eTXljBGAiEAu2XBBVnB4JB\/pAM2aIMKtRsM68whkJeFp\/sUQ4KWuigCIQClJ1nIthgBruSaqgIGHfDqWyoEY6pcU10gsmGqIhMu0lNDRkcIAAAAQUVBRAgAAABTQ0lEGAAAAFBETUQcAAAAVEJLUCAAAABQVUJTQwAAAEtFWFNHAAAAT0JJVE8AAABFWFBZVwAAAEFFU0dDQzIw9lqyAICUa+kwugeWBsbKvkNISURUQjEwIAAAhphHmLi5BO0Bd0EZ92vmXccblzalgzbYj90Qfoq9ozBDMjU1MDAwMDAwMDBAFRRaAAAAAAwAAADPfAIAAAAAAADwAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFfeBYhgQAABAMARjBEAiBdvW4RdrxYmmjeJbc+3jgs5l6RJLipl3aPIQhj9TtUVgIgA9hjkGDtPgI+WyeFtwtRP0uw9dCVeIWw5SDGQbdmUYsAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAV94FiCrAAAEAwBIMEYCIQCUIhZCh2zhmqj0uNpoeUCnAI4TO75j9mv1oMYRKX9EbwIhAIVqH7drJ4DDuKcAhaeeCXOoj8EoQkKnHGLbzkyKPDlhAQEDAeiBYJKSGugAAAAAALsLAAB4u4FGwB+tWGtQE1cUJpBXY6I8VdDyFNEgYZOQAr7wiYpWBawlaIsJ2cBCSCJJwEgVWK3A4KNOsVAVxfdjqlClUhXRURAFClYRHasEpKBgRdBILVjtzS6ETSYz9oczmdmc777Onnvu9527WTQrwFy0TRBKTcQLKrp9dm9xz+ylJ4l0NALQ0SJTNhpMGAZIGIUiTgYb8pXrDXnhuTHeCAI35bB6mBzcF\/AwMggEG8\/l8gN4AQK8oOLyArh8PlZQSS0uRWcy5oK8kSqS5YhoKCFpTNbnCo1cbciulQicavSLSfTLCXLA\/GIy2SCmBhjbXCGAaeAd62cA1adjf2xINJs5VuSOLXMcnO6g0xtjxu1zfIrK71z\/\/lBHSmjev8J8r4IzjW36x8zZNOc0+uStj3j5jQFTCvdXObyJDvLf4usWsNFD234IpYyDUMoYbF1AYEyIMUxgprRFy4BQm1YDYkdGbe4DoxE1cRNlsTkiuSRZgUgwczQwlUpYHofIYWI3ezYnVqbQSIiYI5sjEQfx+cECvhGWo1QwPWhGR4JnLMjJFDVvaGa8k59ILpJp1UisCsNHDLsjIhoybIah1TiI3NROUJramkR0FPHFOKJkc0BjBojNewCvTYGkdWaA2nxIipzgswQmGLCKYEiTCUa8hmAgaoIhlxEMpYmhNmwBbogkgDbw4BmdwRG5YU9wALQmwaAKwbrZDaEpiARWYJAhC1RqQKaxhmEsggUaGWzDvnEJ\/3lDO54Eq5NBL2JvMBWod+IRjNRQW4MlI+YJ2HmtQqPWiGE\/uSJWoUhEjKk3iJt1gyUaXPYxnAZwNUeMxRakTVIchroY","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2204{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":80,"pkt":"XEl5dU5q2MuK4S0uCABFAABCAUVAAIARclrAqAIbrNkXb8rVAbsALk5kDJHSvk7nMdgaAuq0FyvZcuyVaKLM2kACBckCAgEAAOOTAANpBgA=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+2178{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0892{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":424,"pkt":"XEl5dU5q2MuK4S0uCABFAAGaAUdAAIARcQDAqAIbrNkXb8rVAbsBhl8rDJHSvk7nMdgaBOVSrxfaI4LYYRjRG0Udj3++1TSgI9am8mJjBkRF0Im++uEM8aVO3pPxpF+Gegt\/zyR95j78PNzjPlZ1S9J4SyEG2fWDlqIOZ3T3p2CXQpF4VH5Crck\/8\/pEnY9Z63T\/UgHqDGAiVDTXOzLxIcoNNCVQ1m5r6dM81sTBFm46pY9XK+0dyu+JWsITiYNWamVv2VAKKssgs1rzDmT4UFkjg\/Y+TgA924VOtF5YoRb62sl+05yRIR\/RBfFRxD57jDBmQMgQqeqbE42zpgj30hOrFXTb6BgoVQSDW1qtp1p0K2vEwIQiIrC2cUB9MmVVeeeQirDQTMZYNXRo41JU2vrSgIWzToMMDiF3mQrl\/Kf9qUyFykzHDUpL3rQabMhJjjiK2jIwNkzQDf8qXdaDrU\/4DGsOGN+Bgui2jNMYxghRQzsZmLMQEmDWzKRYhHqVBLdCBuvxTL0xQOI8haU3\/L41iKpe34a5uA49jur3tslgysfPqZiSHA==","pkt_caplen":424,"pkt_type":2048,"pkt_ipoffset":14}
+0401{"flow_id":1,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":66,"pkt":"2MuK4S0uXEl5dU5qCABFAAA0ZyEAADkGk5es2RdvwKgCGwG74GxxouM+VgMPS4ASpxyk0AAAAgQFZAEBBAIBAwMI","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0393{"flow_id":1,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":60,"pkt":"XEl5dU5q2MuK4S0uCABFAAAoAUhAAIAGcnzAqAIbrNkXb+BsAbtWAw9LcaLjP1AQAQKLbgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0660{"flow_id":1,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":256,"pkt":"XEl5dU5q2MuK4S0uCABFAADyAUlAAIAGcbHAqAIbrNkXb+BsAbtWAw9LcaLjP1AYAQIOQAAAFgMBAMUBAADBAwNzaV7n51zb2vS21tc4seF5SjI58V9vWFLJqkFFqW5W8AAAHHp6wCvAL8AswDDMqcyowBPAFACcAJ0ALwA1AAoBAAB8WloAAP8BAAEAAAAAFwAVAAASdXBsb2FkLnlvdXR1YmUuY29tABcAAAAjAAAADQAUABIEAwgEBAEFAwgFBQEIBgYBAgEABQAFAQAAAAAAEgAAABAADgAMAmgyCGh0dHAvMS4xAAsAAgEAAAoACgAIamoAHQAXABjq6gABAA==","pkt_caplen":256,"pkt_type":2048,"pkt_ipoffset":14}
+0740{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":1,"flow_packet_id":4,"flow_first_seen":1511102576835,"flow_last_seen":1511102576864,"flow_tot_l4_data_len":306,"flow_min_l4_data_len":20,"flow_max_l4_data_len":222,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTubeUpload","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"upload.youtube.com","ja3":"bc6c386f480ee97b9d9e52d472b772d8","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,http\/1.1"}}
+0387{"flow_id":1,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":54,"pkt":"2MuK4S0uXEl5dU5qCABFAAAoZzQAADkGk5Cs2RdvwKgCGwG74GxxouM\/VgMQFVAQAKyK+gAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":73,"pkt":"2MuK4S0uXEl5dU5qCABFAAA7AABAADkRuqas2RdvwKgCGwG7ytUAJ5IuAAQ8ECdTRpVnV9+oSWYGy3mYRCs3B2+0FDByItPUGg==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":83,"pkt":"XEl5dU5q2MuK4S0uCABFAABFAU9AAIARck3AqAIbrNkXb8rVAbsAMUaUDJHSvk7nMdgaBWx1h8W4rU+rWysUoGyyfaXYefGQ3Q6rcjgOMLALRM4=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":80,"pkt":"XEl5dU5q2MuK4S0uCABFAABCAVBAAIARck\/AqAIbrNkXb8rVAbsALjxiDJHSvk7nMdgaBvefk5BFCfTm8yizXS+ACd9jsfKP\/jdHW7vO+NM=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+2308{"flow_id":1,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1484,"pkt":"2MuK4S0uXEl5dU5qCABFAAW+Zz0AADkGjfGs2RdvwKgCGwG74GxxouM\/VgMQFVAQAKxmrwAAFgMDAUACAAE8AwNaEZhwQMvGRia17iQ85cfpWbIlyCEK78TiiV+80WkH5ADALwABFP8BAAEAABcAAAAjAAAAEgD0APIAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAV94FwAmAAAEAwBIMEYCIQCOcpHP8eLkntxXQ1Tjrgkfq4a8wWjfm33hC1SHIQ0zHwIhAOLCA4CBB1GjG48ln\/xLUqYo9bxAHzpi9\/wC7nxlADUGAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFfeBb\/SgAABAMASDBGAiEAl\/lB3YySaQBKpLdTWGCB3bhmYqAySFOE4dze3W8NKA8CIQDAs3VT1pBZoPf6aMJOV84XGdv4AMLdR1a5823Z8ZfkcwAQAAUAAwJoMgALAAIBABYDAw1UCwANUAANTQAFlzCCBZMwggR7oAMCAQICCAIhoPm+N6ZAMA0GCSqGSIb3DQEBCwUAMEkxCzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpHb29nbGUgSW5jMSUwIwYDVQQDExxHb29nbGUgSW50ZXJuZXQgQXV0aG9yaXR5IEcyMB4XDTE3MTEwMTEzNTAxNVoXDTE4MDEyNDEzMzEwMFowcTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEzARBgNVBAoMCkdvb2dsZSBJbmMxIDAeBgNVBAMMF3VwbG9hZC52aWRlby5nb29nbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ryVbbUxWBaKji+NxntNSt6Z+GPWIqfQH7GwVQ6iLXU61szXi38czpU6Yf7tUQoczH1uvL6sUOvrhWuxOqd3HTJYcXcyT+R1+jw96SSAHcnzl0p9kyuq4szOvkQKx6QRbH75b+TIL0JGRwxTefyONvSbYxYEOE\/03C3ticqPSv\/ZcGmujaJZWgsnUfSCIhyOmWT\/toMf4vNwHx8BGEcjjW8D+gqCZVbk+VbTTFZnbiakh\/bBYs1XbxEr+glbKjtZKnywHTuWenHPV89IJod6TiKT4cfCb0ze+Os5uBTnNHaKVxA0y4zXVOZK3wzupA7aHlE6lFuB\/k8kGzRNbjgGtwIDAQABo4ICVTCCAlEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwggErBgNVHREEggEiMIIBHoIXdXBsb2FkLnZpZGVvLmdvb2dsZS5jb22CFCouY2xpZW50cy5nb29nbGUuY29tghEqLmRvY3MuZ29vZ2xlLmNvbYISKi5kcml2ZS5nb29nbGUuY29tghMqLmdkYXRhLnlvdXR1YmUuY29tghAqLmdvb2dsZWFwaXMuY29tghMqLnBob3Rvcy5nb29nbGUuY29tghMqLnVwbG9hZC5nb29nbGUuY29tghQqLnVwbG9hZC55b3V0dWJlLmNvbYIXKi55b3V0dWJlLTNyZC1wYXJ0eS5jb22CEXVwbG9hZC5nb29nbGUuY29tghJ1cGxvYWQueW91dHViZS5jb22CH3VwbG9hZHMuc3RhZ2UuZ2RhdGEueW91dHViZS5jb20waAYIKwYBBQUHAQEEXDBaMCsGCCsGAQUFBzAChh9odHRwOi8vcGtpLmdvb2dsZS5jb20vR0lBRzIuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vY2xpZW50czEuZ29vZ2xlLmNvbS9vY3NwMB0GA1UdDgQWBBQ9pagvXHbYn+X52hgMckhuKOTnajAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFErdBhYbvPZotXb1gba7Yhq6WoEvMCEGA1UdIAQaMBgwDAYKKwYBBAE=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":1,"flow_packet_id":6,"flow_first_seen":1511102576835,"flow_last_seen":1511102576919,"flow_tot_l4_data_len":1776,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":296,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTubeUpload","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"upload.youtube.com","ja3":"bc6c386f480ee97b9d9e52d472b772d8","ja3s":"b26c652e0a402a24b5ca2a660e84f9d5","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"h2,http\/1.1"}}
+2319{"flow_id":1,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1484,"pkt":"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","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+2004{"flow_id":1,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":1250,"pkt":"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","pkt_caplen":1250,"pkt_type":2048,"pkt_ipoffset":14}
+1320{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":1,"flow_packet_id":8,"flow_first_seen":1511102576835,"flow_last_seen":1511102576921,"flow_tot_l4_data_len":4442,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":555,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.YouTubeUpload","category":"Media"},"tls": {"version":"TLSv1.2","client_requested_server_name":"upload.youtube.com","server_names":"upload.video.google.com,*.clients.google.com,*.docs.google.com,*.drive.google.com,*.gdata.youtube.com,*.googleapis.com,*.photos.google.com,*.upload.google.com,*.upload.youtube.com,*.youtube-3rd-party.com,upload.google.com,upload.youtube.com,uploads.stage.gdata.youtube.com","ja3":"bc6c386f480ee97b9d9e52d472b772d8","ja3s":"b26c652e0a402a24b5ca2a660e84f9d5","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, O=Google Inc, CN=Google Internet Authority G2","issuerDN":"C=US, ST=California, L=Mountain View, O=Google Inc, CN=upload.video.google.com","alpn":"h2,http\/1.1","fingerprint":"EE:3E:32:FB:B1:2E:82:EE:DF:FF:C0:1B:27:CD:BF:D8:8A:CB:BD:63"}}
+0395{"flow_id":1,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":60,"pkt":"XEl5dU5q2MuK4S0uCABFAAAoAVFAAIAGcnPAqAIbrNkXb+BsAbtWAxAVcaLua1AQAQJ\/eAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_id":1,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":147,"pkt":"XEl5dU5q2MuK4S0uCABFAACFAVNAAIAGchTAqAIbrNkXb+BsAbtWAxAVcaLzF1AYAP7AMQAAFgMDACUQAAAhINBmFC9CVCRDMShWiVmltZYHlkKdx6r\/BQu\/gzM2mj1BFAMDAAEBFgMDACgAAAAAAAAAAPv3b8T97N\/vTXDJOkDRmE+V6iJVyBIxDuPqwaENi5Qu","pkt_caplen":147,"pkt_type":2048,"pkt_ipoffset":14}
+0413{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":72,"pkt":"2MuK4S0uXEl5dU5qCABFAAA6AABAADoRuaes2RdvwKgCGwG7ytUAJpjzAAVHa4mi6b+KhN5\/rli\/WzsoX566BxQnJMdg2JLx","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0773{"flow_id":1,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":338,"pkt":"2MuK4S0uXEl5dU5qCABFAAFEZ2AAADkGkkis2RdvwKgCGwG74GxxovMXVgMQclAYAKxMKwAAFgMDAOQEAADgAAGJwADaALdM1L7HluEEK71GqJG1ZtEWWULF6MyXazJFM8cofZemdiW7tual5+wR4k1tQTE\/eZdcf02HjBAAJL9fkA5ZLxDd8m0XWby4l+edaeyuOQ9I7r1KMDOJMV570ChEVAZPUOHvaQqlUOSvjnNCqxVA+PU2xI01WulazfQZqh7gsCfmG2\/1hhcsB1sL3siTFJiDhVqQmzFn9G57\/59tGH3J1x3V2SWFwC8YkFG6Z4b1Hc\/6eELsc10YJHD7CwKwiV2S7W0aowMSFU69o4orIlI1apRA7dWtbrwCBgkUAwMAAQEWAwMAKAAAAAAAAAAAyJespYl5Vmf2i6r6pKYGutPjCBjw884UNR0qxjT2vFY=","pkt_caplen":338,"pkt_type":2048,"pkt_ipoffset":14}
+0483{"flow_id":1,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":123,"pkt":"2MuK4S0uXEl5dU5qCABFAABtZ2EAADkGkx6s2RdvwKgCGwG74GxxovQzVgMQclAYAKzQyAAAFwMDAEAAAAAAAAAAATlWj5CVGXFPji5Z\/ZCAYI4n9adhGiIDyTFwIynjx5LMaNU6V2Oo55AIlKo52qziUTQFLJOQi9\/8","pkt_caplen":123,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":1,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102576,"pkt_len":60,"pkt":"XEl5dU5q2MuK4S0uCABFAAAoAVdAAIAGcm3AqAIbrNkXb+BsAbtWAxBycaL0eFAQAQJ5DgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":58,"pkt":"2MuK4S0uXEl5dU5qCABFAAAsAABAADoRubWs2RdvwKgCGwG7ytUAGMf1AAfkXV7SBsEETb27C9zMTg==","pkt_caplen":58,"pkt_type":2048,"pkt_ipoffset":14}
+1141{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":611,"pkt":"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","pkt_caplen":611,"pkt_type":2048,"pkt_ipoffset":14}
+0428{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":83,"pkt":"XEl5dU5q2MuK4S0uCABFAABFAVxAAIARckDAqAIbrNkXb8rVAbsAMY0aDJHSvk7nMdgaBzVHIy1XPsH4zhAaJ9HBVxd\/TWKAAK3H+Hr1uFclQR8=","pkt_caplen":83,"pkt_type":2048,"pkt_ipoffset":14}
+0421{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":77,"pkt":"XEl5dU5q2MuK4S0uCABFAAA\/AV1AAIARckXAqAIbrNkXb8rVAbsAK5ySDJHSvk7nMdgaCE+YWSRRWbgSjZxuiZCo+CD\/9NTDNB6hYbQ=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1511102578051,"flow_last_seen":1511102578051,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":62232,"dst_port":443,"l4_proto":"udp"}
+2175{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0582{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1511102578051,"flow_last_seen":1511102578051,"flow_tot_l4_data_len":1358,"flow_min_l4_data_len":1358,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1358,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":62232,"dst_port":443,"l4_proto":"udp","ndpi": {"proto":"QUIC.YouTubeUpload","category":"Media"},"quic": {"hostname":"upload.youtube.com"}}
+2189{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2204{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"2MuK4S0uXEl5dU5qCABFAAViAABAADgRtn+s2RdvwKgCGwG78xgFTrFpCAjRAddSQpCnArwHRDvEv6bzYWaHzaQBBSEEhrNWhsBytYq44AhiRo+TwCmwTKGEk42JPpys442NKgutZCyRqQAAtRXqaDF9GcRDYiH0Y\/Fi0MLsDELQGJhY4OvQsShgL0wMj6PF4FCw0EDxBIlYDUjOl0D+boN8rExECEHyX7Bo9gIexu6+BD0Z6jwYVS5xhEFjCAVnb9OEZ+1zI6xu60jhXe7FYiEjXGJWdBF1I+wRdfS48r74X1JeZ567KHa5EJ3pD3ngVQyQUTCSgZUFTVprCgmiU6lxmUwgGRCEl12TIR\/Iu8iryOND7yMz0xaswN6jCztbGOmK9M1HAtnb0p6qNH6hov6O7rqWzJfC2lmeHtZeU6WbjsS8u3ntcJQzOr2oWOwTXcLWes24V6eOPFWo8+TNul2fEFLQ78eM1PXs2XQnqjfDqk3auk2v6+r9pEcxm7ylpmzrihbHoOb9i7fucvoKaS0tCfOsbMqMP3nB9ezFL69FLLtTF+p+dsZl1fPc\/DBpqVvY0e9eHrAZ+VA9+k3JGb\/9upojFbdLGEEHzpW4tGy79WmG8IZ+5InTV7teNKN9mWsYUcLOpqcV59uW1kr1OramoTHz1vv11JzRr2tDd4S\/WkfbF2P7ZGza6rI\/j9Us8WXle5QG\/b6jzfNgyphjqo6oKWSDFJMnAQGwxaXYlmTl4Z1d0i88lvqCkib10ZlL8sf48IBpMSTg8YAY8\/iBmBZzeXzwEwQLgqM\/pux\/6Oa0l01OXX1\/+c6p1ENoy\/3lC8tzQnqdlS7ZoRtbdlT15tR7dEe\/E7HKePNyitQjIpd9cbgeFe\/qfiaMud5KybCv\/DovpHzVwiB95N8TOgZ2djpVNugjWfqwt\/tXNG+oKEpUZF25tdxtEmQz6wFdFS5Lfz91+rFA6vZLi+3IzzZMaO745y137UDe3TWvOGHFc27XdlUmuJypi3zktDjX7YazyO23wuMzY303CxB48w3nqlDPN5G7Ktoywmyvs\/+6kO9uVx38oy25qEe0fpf31qURmsfnntNrHN\/WeyacXdoQapOfb7Pxys\/NacXz+Q0XZq4ta9Z7e19lCXIKCwdG2mlzXAOrircnI\/g3DpRkByLCMjmYFj9jDB9zi+fW\/KMGh8A\/npA75EqgFPvB8xrHUWmTYjFShuyNNEGHqOBhDa5jAvygcyBwwyoCN6wtE0wGiocL7zg1ftXFTvv\/oJAPXPQs8EXNovaf7kkkqasq1vY36F29qncjsStini1pcp7kJZFuH1+dlSGJIedOLC7QMZTl5c4zutP4J9Iv6SmNyouUidqu3dUF52nOcEDd9M6QKlK\/grnxj\/XK1Uve+Vn11FT4bS89njFAcsiu3RvSfjG1ZmrcZ6\/q7\/pYJ88tuiS37l1AWTuTJOy02+fyavOojKMH1wn8z1UfTB\/zTWvuytPdcdnhPtCaI+KIa4F3p3V9yyYFZR1sUJ46vP5m5ZOaqgflXryX78ZeTWvRTfNvvGXb8cOSgXllHhLWeas8yH5iVlRBMCVoVB26EFSw0u7LpTGV75XHW9Nztb6\/wrxD58u4nYzXfW68h\/8B+TYP2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2179{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"XEl5dU5q2MuK4S0uCABFAAViAV9AAIARbSDAqAIbrNkXb\/MYAbsFTgWcDAjRAddSQpCnAsbNRhPFJhDd2f0pyEACFIECAgEAAOY2AAOIBgCkAQUUBABDSExPHQAAAFBBRADfAAAAU05JAPEAAABTVEsAKQEAAFNOTwBdAQAAVkVSAGEBAABDQ1MAcQEAAE5PTkORAQAATVNQQ5UBAABBRUFEmQEAAFVBSUTIAQAAU0NJRNgBAABUQ0lE3AEAAFBETUTgAQAAU01ITOQBAABJQ1NM6AEAAENUSU3wAQAATk9OUBACAABQVUJTMAIAAE1JRFM0AgAAU0NMUzgCAABLRVhTPAIAAFhMQ1REAgAAQ1NDVEQCAABDT1BUSAIAAENDUlRgAgAASVJUVGQCAABDRVRWCAMAAENGQ1cMAwAAU0ZDVxADAAAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tdXBsb2FkLnlvdXR1YmUuY29t51304JowmNkcS5BKcGF4TFeKPL0vzLFwvGKNQZSC3tV5AuZccITR1IKNPBS7gM5cGXDQdMbrYK1m27ZrpG7Vf6wfUgDYUmoNGkZUDkwfIwpzu8q0llRbLpar8W8kfc33hmKtdhIF96r1CjwBUTAzOQHogWCSkhrofu2AhqIVgpFaEZh1MDAwMDAwMDBZwphmdL7Yts0y+qUR1kfRSDFXSWQAAABBRVNHQ2hyb21lLzYyLjAuMzIwMi45NCBXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjT2WrIAgJRr6TC6B5YGxsq+AAAAAFg1MDkBAAAAHgAAAHWYEVoAAAAAY86fJYRsWvt+n8SMuRjDn5CDfPNuMMHuyZztFKKwgWq63bH0pGsbpiKJlwdORVq++wXvbyC+Jog1Q4kiEaUUI2QAAAABAAAAQzI1NZwUB\/4nw78HNVJUT5wUB\/4nw78HmpHtbxwAgQ5AC3uQqa5565jAAAAE39g8QbpBjsXpZJ0k2Opa1yiXuoap6rNlFyRG3VaiUwwUTIXHR7HUE8tH+qMCGSkVfFDe9ZwBj5iFLt6nb9dICVRJNIeq99y3gDocOmnE3lMaHWOMgX5wcE5URr2JRfmKpGOgc7tXbRVfGIzEEC8Zcrx\/h1b4mHL5eogupc3r3xXMzTaDPU27bKw026+kjZ5+CM9l3v8W6hXwvRN\/+i6loGkEhQAA8AAAAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2199{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0414{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":73,"pkt":"2MuK4S0uXEl5dU5qCABFAAA7AABAADgRu6as2RdvwKgCGwG78xgAJ9y4AARpVzDsoBmfZ+XhVgpTv9rep8bCCWrl5chuh0ut7g==","pkt_caplen":73,"pkt_type":2048,"pkt_ipoffset":14}
+0425{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":81,"pkt":"XEl5dU5q2MuK4S0uCABFAABDAWBAAIARcj7AqAIbrNkXb\/MYAbsAL\/RWDAjRAddSQpCnA9SE7lmYzFwTwI8q0+O7q92vq\/vTiMHZkPojCLeu","pkt_caplen":81,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":80,"pkt":"XEl5dU5q2MuK4S0uCABFAABCAWFAAIARcj7AqAIbrNkXb\/MYAbsALiIYDAjRAddSQpCnBJd2kKliEDeULd8uM7yC1ufttdYXe42GUh7dLdw=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+1822{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1113,"pkt":"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","pkt_caplen":1113,"pkt_type":2048,"pkt_ipoffset":14}
+2208{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2198{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"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","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+2210{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":1392,"pkt":"XEl5dU5q2MuK4S0uCABFAAViAWVAAIARbRrAqAIbrNkXb\/MYAbsFToX+DAjRAddSQpCnCODeSAN4v9ihMFFWk+129jYaWR4IKJdCdRACUoYlUpfRJEnkxtcGi3AE4WEdV04rKXAIXWf+7vYbbFjJi2nmVR8Ipw2HICxZCI3ywr1A3fashg0\/1YiQU2b4qOGOIONV6R1ADzILq1zQN2uPNBi43oKWRZplupcqY+87zEPtbjymaV6FJJnnP+9dYBmMqsh5tqolcFupv6JdPs1kNuNAzTY722\/kvUqIDhXl8Z\/YFXYtHEIebnpygcsIByqKkUVK+Zk6KzvQGdEX17NX2X\/FF\/alT6\/BXy3aaWXKoABKW6Dnv\/7jQ9AH7rFEfwwjJpdQqlNc+3i6SFc9TxVUvsCaIBooMDcq4IPfTzJFt1S9obNyLLJevNtMY69c1APcVHRmqxhtIUp0TtqtdCLRO0x32wHbCotahOIZrX2K2YPlzRgbZI84Wxrfj0hajyGw2Pem+kYwyCOH1ooUYinPLDe9Gatrk9QgkZW5som\/1HD6X5qObDvVE\/7ThRSOR2RUX8ZAA\/c0NgEweCHTWtjrVaAJ86m9J1t2f2RyxS5Gp\/b+jigRCHcxOWLWAHhOXQncbCxuFcy4cFZ3q+DYfiye2vBBKUugFlNVWcs\/XfecaDPJuHZLAn7gMPd5ga0h0Ey4gbeD8jRorXliuAlHMT81qNG40nvMbcTlXXbozqisHuraeekATZ+46BjX2BkwteLwOdfYcZgx\/b33ANIFU5e3oE0p3JIEsLSk1TFE4GVbMl1cukaCjtXCjuqU\/\/E3\/QtKvqonPUNAjwpcVCJUz4q713uIipq4pCELebygDc1gmgicMdEOQOwFGyo24y57lVdzH\/DPiuQH5d24VVraOhlnZ30e6XVJ73u72LlDZMf1yh\/6XARS8YVKwARfUP80zHDOOqinAU7I\/t1cS5AB1gvrWN\/mBM04Jhct+JsWxRHltii7T3UkEEpazvcwTV7kkBWZaYJCrw8fF+D3oyo5rnMpK6zXyAJOmGfe9g1gEnMgZtwoNksGpqK+cXggSlW+XoQfUyy02K\/CLvBmbftWICK0nUgMfAYZ2GbdX8yQxNx7JNM1U1THjSGThlm67evs3PCz9VqjjUR52qIFfFNxYIyhuDL9r5EMlQo\/PX8ULz1RhWwLMQI\/4lhn\/57VqviMEi83plnWzMK35moHadFaXLDI7jMPDveUROwtpw8LKCkODSRCzRaMJqWXPTBvcuHlPJH7BXUXW0CpmYhywKxSQPc3ptc9sPCiDTiRxqaLV00bqz7Pmw7Hwm7wZaAHji9cs02ifzGpqYRtcg6q37+6Hazp14eYiF\/NXbdL65IRCouhFKdOETcBJKAhTWHk25hsz2QJii6CEW2lN\/9\/vB7RqTRUH7wvFj\/R9lwejAs3dollZUUUsqyhvpWxB0\/h08kq1ygaxV2mCsjcwds+g9v652E00BOg5GgIpStiejiG9bYLgztpy55k\/FpkjP+B6MSNdrJtJF1Uh6jX1IwFbDK+rIn7d+fhGNHkYNsQ6EAkVjBZPh402iAXnCTlAy6Ir6bIojTEE8nj+DL62x1xajUt6Hw3nD0ETabl5+gGt20H7Zn0DTrIRfnyMlHT6Dz\/jvXmV5+WBwzfbIzbOnWS8F\/zP4Gcr78+o1sXNzmUxPUJ7FlgFzqxuuQUID+w+xMw+i2JC4MX6npPx87CRSFoGj48sTVaZ0nnwnNJfsQf7VgZpKji7dNO1WuE320BpTeDKRTFuOqjXq18mubVsr\/fmo4UtTBJ1XYf6D\/3WxzlVrHvHZsV5SQhNZyxE+TR5sEc2B+e+SFz","pkt_caplen":1392,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":103,"pkt":"XEl5dU5q2MuK4S0uCABFAABZAWZAAIARciLAqAIbrNkXb\/MYAbsARTzLDAjRAddSQpCnCUIU6saaeRlWNypXMbLqJjFDzm3BL\/QJZQshKHLAuTmSKkuYJgIbLSd6aEzQPz6Vuf3yvA==","pkt_caplen":103,"pkt_type":2048,"pkt_ipoffset":14}
+0417{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":75,"pkt":"2MuK4S0uXEl5dU5qCABFAAA9AABAADkRuqSs2RdvwKgCGwG78xgAKQv\/AAW6kYrY6Rl4Spd2erSFzl\/hFEcXrPb6gVIFYoj0G3eL","pkt_caplen":75,"pkt_type":2048,"pkt_ipoffset":14}
+0412{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","pkt_oversize":false,"pkt_ts":1511102578,"pkt_len":72,"pkt":"2MuK4S0uXEl5dU5qCABFAAA6AABAADkRuqes2RdvwKgCGwG78xgAJjDlAAbriko+\/ZfW2aYS1AzZ5OusG0WkuzV30Av+okTE","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0477{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":1,"flow_packet_id":13,"flow_first_seen":1511102576835,"flow_last_seen":1511102576954,"flow_tot_l4_data_len":4988,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":383,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":57452,"dst_port":443,"l4_proto":"tcp"}
+0481{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":0,"flow_packet_id":100,"flow_first_seen":1511102576794,"flow_last_seen":1511102580286,"flow_tot_l4_data_len":103076,"flow_min_l4_data_len":24,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":1030,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":51925,"dst_port":443,"l4_proto":"udp"}
+0478{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap","flow_id":2,"flow_packet_id":24,"flow_first_seen":1511102578051,"flow_last_seen":1511102594936,"flow_tot_l4_data_len":14298,"flow_min_l4_data_len":26,"flow_max_l4_data_len":1358,"flow_avg_l4_data_len":595,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.27","dst_ip":"172.217.23.111","src_port":62232,"dst_port":443,"l4_proto":"udp"}
+0151{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":137,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/youtubeupload.pcap"}
diff --git a/tests/result/nDPId_zabbix.pcap.txt b/tests/result/nDPId_zabbix.pcap.txt
new file mode 100644
index 000000000..c70ddc40a
--- /dev/null
+++ b/tests/result/nDPId_zabbix.pcap.txt
@@ -0,0 +1,15 @@
+0358{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1572254070608,"flow_last_seen":1572254070608,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp"}
+0406{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":74,"pkt":"RoQclwmZOjUSPEK7CABFAAA85AdAAEAGTujAqENiwKhDGd9KJ0JwAdHUAAAAAKACchAH+wAAAgQFtAQCCAorwjXTAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0406{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":74,"pkt":"OjUSPEK7RoQclwmZCABFAAA8AABAAEAGMvDAqEMZwKhDYidC30pw8XhkcAHR1aAScSDKPwAAAgQFtAQCCAorfUX3K8I10wEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":66,"pkt":"RoQclwmZOjUSPEK7CABFAAA05AhAAEAGTu\/AqENiwKhDGd9KJ0JwAdHVcPF4ZYAQAOUH8wAAAQEICivCNdQrfUX3","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0426{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":89,"pkt":"RoQclwmZOjUSPEK7CABFAABL5AlAAEAGTtfAqENiwKhDGd9KJ0JwAdHVcPF4ZYAYAOUICgAAAQEICivCNdQrfUX3WkJYRAEKAAAAAAAAAHByb2MubnVtW10=","pkt_caplen":89,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1572254070608,"flow_last_seen":1572254070608,"flow_tot_l4_data_len":167,"flow_min_l4_data_len":32,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":41,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp","ndpi": {"proto":"Zabbix","category":"Network"}}
+0394{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":66,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4ZAAEAGe3HAqEMZwKhDYidC30pw8XhlcAHR7IAQAONpMQAAAQEICit9RfcrwjXU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0419{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":82,"pkt":"OjUSPEK7RoQclwmZCABFAABEt4dAAEAGe2DAqEMZwKhDYidC30pw8XhlcAHR7IAYAON\/JgAAAQEICit9RfsrwjXUWkJYRAEDAAAAAAAAADI2Mw==","pkt_caplen":82,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":66,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4hAAEAGe2\/AqEMZwKhDYidC30pw8Xh1cAHR7IARAONpHAAAAQEICit9RfsrwjXU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":66,"pkt":"RoQclwmZOjUSPEK7CABFAAA05ApAAEAGTu3AqENiwKhDGd9KJ0JwAdHscPF4dYAQAOUH8wAAAQEICivCNdUrfUX7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":66,"pkt":"RoQclwmZOjUSPEK7CABFAAA05AtAAEAGTuzAqENiwKhDGd9KJ0JwAdHscPF4doARAOUH8wAAAQEICivCNdUrfUX7","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","pkt_oversize":false,"pkt_ts":1572254070,"pkt_len":66,"pkt":"OjUSPEK7RoQclwmZCABFAAA0t4lAAEAGe27AqEMZwKhDYidC30pw8Xh2cAHR7YAQAONpGAAAAQEICit9Rf0rwjXV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0466{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap","flow_id":0,"flow_packet_id":10,"flow_first_seen":1572254070608,"flow_last_seen":1572254070614,"flow_tot_l4_data_len":375,"flow_min_l4_data_len":32,"flow_max_l4_data_len":55,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.67.98","dst_ip":"192.168.67.25","src_port":57162,"dst_port":10050,"l4_proto":"tcp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zabbix.pcap"}
diff --git a/tests/result/nDPId_zcash.pcap.txt b/tests/result/nDPId_zcash.pcap.txt
new file mode 100644
index 000000000..a950cc6a0
--- /dev/null
+++ b/tests/result/nDPId_zcash.pcap.txt
@@ -0,0 +1,20 @@
+0357{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1514196094240,"flow_last_seen":1514196094240,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":40,"flow_max_l4_data_len":40,"flow_avg_l4_data_len":40,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.92","dst_ip":"178.32.196.217","src_port":55190,"dst_port":9050,"l4_proto":"tcp"}
+0406{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":74,"pkt":"fmgbW\/gUcIXCQA64CABFAAA8ux1AAEAGRaDAqAJcsiDE2deWI1qAnf85AAAAAKACchAV6gAAAgQFtAQCCApPjruwAAAAAAEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0408{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":74,"pkt":"cIXCQA64fmgbW\/gUCABFAAA8AABAADMGDb6yIMTZwKgCXCNa15Yj5r0mgJ3\/OqAScSDZNwAAAgQFtAQCCArshW\/8T467sAEDAwk=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0ux5AAEAGRafAqAJcsiDE2deWI1qAnf86I+a9J4AQAOV4LAAAAQEICk+Ou8XshW\/8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0745{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":326,"pkt":"fmgbW\/gUcIXCQA64CABFAAE4ux9AAEAGRKLAqAJcsiDE2deWI1qAnf86I+a9J4AYAOWIhgAAAQEICk+Ou8XshW\/8eyJtZXRob2QiOiJsb2dpbiIsInBhcmFtcyI6eyJsb2dpbiI6IjRCQ2VFUGhvZGdQTWJQV0ZOMWRQd2hXWGRSWDhxNG1oaGRaZEExZHRTTUxUTENFWXZBajlRWGpYQWZGN0N1Z0VibWZCaGdrcUhiZGdLOWIyd0tBNm5xUlpRQ2d2Q0RtLmNiMmI3MzQxNWM0ZmFmMjE0MDM1YTczYjlkOTQ3YzIwMjM0MmYzYmYzYmRmNjMyMTMyYmQ2ZDdhZjk4Y2IyNTcucnl6ZW4iLCJwYXNzIjoieCIsImFnZW50IjoieG1yLXN0YWstY3B1LzEuMy4wLTEuNS4wIn0sImlkIjoxfQo=","pkt_caplen":326,"pkt_type":2048,"pkt_ipoffset":14}
+0554{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1514196094240,"flow_last_seen":1514196094322,"flow_tot_l4_data_len":404,"flow_min_l4_data_len":32,"flow_max_l4_data_len":292,"flow_avg_l4_data_len":101,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.92","dst_ip":"178.32.196.217","src_port":55190,"dst_port":9050,"l4_proto":"tcp","ndpi": {"flow_risk": {"22":"Unsafe Protocol"},"proto":"Mining","category":"Mining"}}
+0394{"flow_id":0,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":66,"pkt":"cIXCQA64fmgbW\/gUCABFAAA0zTZAADMGQI+yIMTZwKgCXCNa15Yj5r0ngJ4APoAQADl3vwAAAQEICuyFcBFPjrvF","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0800{"flow_id":0,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":369,"pkt":"cIXCQA64fmgbW\/gUCABFAAFjzTdAADMGP1+yIMTZwKgCXCNa15Yj5r0ngJ4APoAYADnxwAAAAQEICuyFcBFPjrvFeyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2IiOnsiYmxvYiI6IjA2MDZlODk4ODNkMjA1YTY1ZDhlZTc4OTkxODM4YTFjZjNlYzJlYmJjNWZiMWZhNDNkZWM1ZmExY2QyYmVlNDA2OTIxMmE1NDljZDczMTAwMDAwMDAwNWE4ODIzNTY1MzA5N2FhM2U5N2VmMmNlZWY0YWVlNjEwNzUxYTgyOGY5YmUxYTA3NThhNzgzNjVmYjBhNGM4YzA1Iiwiam9iX2lkIjoiNzIyMTM0MTc0MTI3MTMxIiwidGFyZ2V0IjoiZGM0NjAzMDAifSwic3RhdHVzIjoiT0sifX0K","pkt_caplen":369,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":0,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196094,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0uyBAAEAGRaXAqAJcsiDE2deWI1qAngA+I+a+VoAQAO11xwAAAQEICk+Ou9rshXAR","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0640{"flow_id":0,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196106,"pkt_len":249,"pkt":"fmgbW\/gUcIXCQA64CABFAADruyFAAEAGRO3AqAJcsiDE2deWI1qAngA+I+a+VoAYAO27KwAAAQEICk+Ox7jshXAReyJtZXRob2QiOiJzdWJtaXQiLCJwYXJhbXMiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2JfaWQiOiI3MjIxMzQxNzQxMjcxMzEiLCJub25jZSI6Ijk4MDI0MDAxIiwicmVzdWx0IjoiYzliZTkzODFhNjhkNTMzYzA1OWQ2MTRkOTYxZTA1MzRkN2Q4Nzg1ZGQ1YzMzOWMyZjk1OTZlYjk1ZjMyMDEwMCJ9LCJpZCI6MX0K","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0480{"flow_id":0,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196106,"pkt_len":129,"pkt":"cIXCQA64fmgbW\/gUCABFAABzzThAADMGQE6yIMTZwKgCXCNa15Yj5r5WgJ4A9YAYADmdhwAAAQEICuyFfApPjse4eyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsic3RhdHVzIjoiT0sifX0K","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":0,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196106,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0uyJAAEAGRaPAqAJcsiDE2deWI1qAngD1I+a+lYAQAO1c3gAAAQEICk+Ox9TshXwK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":0,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196109,"pkt_len":249,"pkt":"fmgbW\/gUcIXCQA64CABFAADruyNAAEAGROvAqAJcsiDE2deWI1qAngD1I+a+lYAYAO0qZAAAAQEICk+OymLshXwKeyJtZXRob2QiOiJzdWJtaXQiLCJwYXJhbXMiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2JfaWQiOiI3MjIxMzQxNzQxMjcxMzEiLCJub25jZSI6ImIxMDM4MDAxIiwicmVzdWx0IjoiZjg0NTk2YTQ4ZTU3NjgzZjZiNTYwOGNjNWQzNGY0ZWExZjY0ZGJmYTJiYTM5N2I5MTQyNjI2YjlkOWI5MDEwMCJ9LCJpZCI6MX0K","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":0,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196109,"pkt_len":129,"pkt":"cIXCQA64fmgbW\/gUCABFAABzzTlAADMGQE2yIMTZwKgCXCNa15Yj5r6VgJ4BrIAYADmXOwAAAQEICuyFfrZPjspieyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsic3RhdHVzIjoiT0sifX0K","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":0,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196109,"pkt_len":66,"pkt":"fmgbW\/gUcIXCQA64CABFAAA0uyRAAEAGRaHAqAJcsiDE2deWI1qAngGsI+a+1IAQAO1WkQAAAQEICk+Oyn\/shX62","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":0,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196116,"pkt_len":249,"pkt":"fmgbW\/gUcIXCQA64CABFAADruyVAAEAGROnAqAJcsiDE2deWI1qAngGsI+a+1IAYAO2rlwAAAQEICk+O0UPshX62eyJtZXRob2QiOiJzdWJtaXQiLCJwYXJhbXMiOnsiaWQiOiI0NzkwNTk1NDY4ODMyMTgiLCJqb2JfaWQiOiI3MjIxMzQxNzQxMjcxMzEiLCJub25jZSI6IjYzMDU4MDAwIiwicmVzdWx0IjoiYzgxMTEzMWE2Yjk3N2M3MmYwYjBmOWNkYzg0ODk3M2NlNGJlOGZiZDI4NmYzNTgzZmRlMGVhZWZhOGY3MDAwMCJ9LCJpZCI6MX0K","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0482{"flow_id":0,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","pkt_oversize":false,"pkt_ts":1514196116,"pkt_len":129,"pkt":"cIXCQA64fmgbW\/gUCABFAABzzTpAADMGQEyyIMTZwKgCXCNa15Yj5r7UgJ4CY4AYADmIgwAAAQEICuyFhZdPjtFDeyJpZCI6MSwianNvbnJwYyI6IjIuMCIsImVycm9yIjpudWxsLCJyZXN1bHQiOnsic3RhdHVzIjoiT0sifX0K","pkt_caplen":129,"pkt_type":2048,"pkt_ipoffset":14}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap","flow_id":0,"flow_packet_id":145,"flow_first_seen":1514196094240,"flow_last_seen":1514197248783,"flow_tot_l4_data_len":15714,"flow_min_l4_data_len":32,"flow_max_l4_data_len":335,"flow_avg_l4_data_len":108,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.2.92","dst_ip":"178.32.196.217","src_port":55190,"dst_port":9050,"l4_proto":"tcp"}
+0143{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":145,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zcash.pcap"}
diff --git a/tests/result/nDPId_zoom.pcap.txt b/tests/result/nDPId_zoom.pcap.txt
new file mode 100644
index 000000000..0398b5e8f
--- /dev/null
+++ b/tests/result/nDPId_zoom.pcap.txt
@@ -0,0 +1,364 @@
+0356{"daemon_event_id":1,"daemon_event_name":"init","thread_id":0,"packet_id":0,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","max-flows-per-thread":2048,"max-idle-flows-per-thread":256,"tick-resolution":1000,"reader-thread-count":1,"idle-scan-period":10000,"max-idle-time":600000,"max-post-end-flow-time":60000,"max-packets-per-flow-to-send":15}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569520466080,"flow_last_seen":1569520466080,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"172.217.21.72","src_port":54854,"dst_port":443,"l4_proto":"tcp"}
+0665{"flow_id":0,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":265,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjbcQAAAQEICiWcznNwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0813{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":1,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":0,"flow_packet_id":1,"flow_first_seen":1569520466080,"flow_last_seen":1569520466080,"flow_tot_l4_data_len":231,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"172.217.21.72","src_port":54854,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"7":"Obsolete TLS version (< 1.1)"},"proto":"TLS.Google","category":"Web"},"tls": {"version":"TLSv1","client_requested_server_name":"www.googletagmanager.com","ja3":"d78489b860c8bf7838a6ff0b4d131541","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"h2,h2-16,h2-15,h2-14,spdy\/3.1,spdy\/3,http\/1.1"}}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569520466209,"flow_last_seen":1569520466209,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0420{"flow_id":1,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":87,"pkt":"AQBeAAD7KDc3AG3ICABFAABJ4i8AAAERNFzAqAF14AAA+xTpFOkANQtaAAAAAAABAAAAAAAAEF9zcG90aWZ5LWNvbm5lY3QEX3RjcAVsb2NhbAAADAAB","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0557{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":2,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569520466209,"flow_last_seen":1569520466209,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp","ndpi": {"proto":"MDNS","category":"Network"},"mdns": {"answer":"_spotify-connect._tcp.local"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":2,"flow_packet_id":1,"flow_first_seen":1569520466316,"flow_last_seen":1569520466316,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp"}
+0410{"flow_id":2,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":3,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAG+ZLAqAF1p2PXpNZPEVI+PYNCAAAAALAC\/\/9XugAAAgQFtAEDAwUBAQgKJZzPXwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0404{"flow_id":2,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":4,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADUGBJenY9ekwKgBdRFS1k9+iDZRPj2DQ6AScSDtKQAAAgQFrAQCCArh63OkJZzPXwEDAwc=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0392{"flow_id":2,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":5,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYNDfog2UoAQECx8vAAAAQEICiWcz4Xh63Ok","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1090{"flow_id":2,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":583,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI5AABAAEAG95nAqAF1p2PXpNZPEVI+PYNDfog2UoAYECxTkgAAAQEICiWcz4Xh63OkFgMBAgABAAH8AwMNN3rZQIy1W6cxVq6XcSeMK0WraD3DhdYuuqU1GeYt1CAlA\/kunOkhTd5wsEiS6\/3fwP4i6nJuxBCdQo4WkiQHSgCgwDDALMAowCTAFMAKAKUAowChAJ8AawBqAGkAaAA5ADgANwA2AIgAhwCGAIXAMsAuwCrAJsAPwAUAnQA9ADUAhACNwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAJoAmQCYAJcARQBEAEMAQsAxwC3AKcAlwA7ABACcADwALwCWAEEABwCMwBHAB8AMwAIABQAEAIoA\/wEAARMAAAASABAAAA1kYXRpLm50b3Aub3JnAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgAjAAAADQAgAB4GAQYCBgMFAQUCBQMEAQQCBAMDAQMCAwMCAQICAgMADwABAQAVAKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0797{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":6,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":2,"flow_packet_id":4,"flow_first_seen":1569520466316,"flow_last_seen":1569520466355,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"a795593605a13211941d44505b4d1e39","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0393{"flow_id":2,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":7,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05\/ZAADUGHKinY9ekwKgBdRFS1k9+iDZSPj2FSIAQAOuJ0gAAAQEICuHrc8olnM+F","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0590{"flow_id":2,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":208,"pkt":"KDc3AG3IEBMx8Tl2CABFAADC5\/dAADUGHBmnY9ekwKgBdRFS1k9+iDZSPj2FSIAYAOtSjQAAAQEICuHrc8slnM+FFgMDAFYCAABSAwNWVv3wdcE91bUYtcDqJrP1CjoibzTPRJf5EGTNFWH8ayAlA\/kunOkhTd5wsEiS6\/3fwP4i6nJuxBCdQo4WkiQHSsAwAAAK\/wEAAQAADwABARQDAwABARYDAwAo3atftrGe7Gikn4sNlGTYJoWExi90kXBz3r0qa+R1ykzjhP+iZMqKbg==","pkt_caplen":208,"pkt_type":2048,"pkt_ipoffset":14}
+0851{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":8,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":2,"flow_packet_id":6,"flow_first_seen":1569520466316,"flow_last_seen":1569520466392,"flow_tot_l4_data_len":871,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":145,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp","ndpi": {"flow_risk": {"5":"Known protocol on non standard port","15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.ntop","category":"Network"},"tls": {"version":"TLSv1.2","client_requested_server_name":"dati.ntop.org","ja3":"a795593605a13211941d44505b4d1e39","ja3s":"dd4b012f7a008e741554bd0a4ed12920","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}}
+0392{"flow_id":2,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":9,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYVIfog24IAQECd54gAAAQEICiWcz6rh63PL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1566{"flow_id":2,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":10,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":932,"pkt":"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","pkt_caplen":932,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":2,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":11,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05\/hAADUGHKanY9ekwKgBdRFS1k9+iDbgPj2IqoAQAPmFXAAAAQEICuHrdBwlnM+r","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0591{"flow_id":2,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":12,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":209,"pkt":"EBMx8Tl2KDc3AG3ICABFAADDAABAAEAG+Q\/AqAF1p2PXpNZPEVI+PYiqfog24IAYECebuQAAAQEICiWcz\/rh63QcFwMDAIrt0t+5+syfbyANtWzvWcmWiTnqD9vuOC2XdgD\/kgDM99konQLCT1TeFy4e4C6mdfknOcajekLFZVyUeva4SiL97S0TKTHoK08fvguKr1gcalzvU4Lv84Zcbx2x+M7j9G+fFCeZRAD4kulEbSCVJBNSBDTreqFLWC8ju9GzTVJrJAcuQWgqzxmbR9w=","pkt_caplen":209,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":2,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":13,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA05\/lAADUGHKWnY9ekwKgBdRFS1k9+iDbgPj2JOYAQAQaETAAAAQEICuHrdEElnM\/6","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2056{"flow_id":2,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":14,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":1292,"pkt":"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","pkt_caplen":1292,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":2,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":15,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520466,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYk5fog7qoAQEAFwOgAAAQEICiWc0DPh63RV","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520467,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":16,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","type":34969}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":3,"flow_packet_id":1,"flow_first_seen":1569520467811,"flow_last_seen":1569520467811,"flow_tot_l4_data_len":79,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"62.149.152.153","src_port":54341,"dst_port":993,"l4_proto":"tcp"}
+0463{"flow_id":3,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":17,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520467,"pkt_len":113,"pkt":"EBMx8Tl2KDc3AG3ICABFAABjAABAAEAGoUnAqAF1PpWYmdRFA+E5lpAkp\/QQcoAYEABEHgAAAQEICiWc1TCZh0dJFwMDACpAXTQxH2s8yyXvpDmREm16+\/VcNt\/x\/vlsIce1k7D8R+clMelpc+AJPCA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0666{"flow_id":0,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":18,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":265,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjTKAAAAQEICiWc1rxwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569520468207,"flow_last_seen":1569520468207,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"239.255.255.250","src_port":57025,"dst_port":1900,"l4_proto":"udp"}
+0536{"flow_id":4,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":168,"pkt":"AQBef\/\/6KDc3AG3ICABFAACaDxkAAAER+CLAqAF17\/\/\/+t7BB2wAhjkTTS1TRUFSQ0ggKiBIVFRQLzEuMQ0KSE9TVDogMjM5LjI1NS4yNTUuMjUwOjE5MDANCk1BTjogInNzZHA6ZGlzY292ZXIiDQpNWDogMQ0KU1Q6IHVybjpkaWFsLW11bHRpc2NyZWVuLW9yZzpzZXJ2aWNlOmRpYWw6MQ0KDQoA","pkt_caplen":168,"pkt_type":2048,"pkt_ipoffset":14}
+0517{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":19,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569520468207,"flow_last_seen":1569520468207,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"239.255.255.250","src_port":57025,"dst_port":1900,"l4_proto":"udp","ndpi": {"proto":"SSDP","category":"System"}}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569520468399,"flow_last_seen":1569520468399,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0464{"flow_id":5,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABgjegAAEARZ+DAqAF1wKgB\/wCJAIkATBmVRZdAEAABAAAAAAABIEZIRVBGQ0VMRUhGQ0VQRkZGQUNBQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEAAAOEAAbgAMCoAXU=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0511{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":20,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":5,"flow_packet_id":1,"flow_first_seen":1569520468399,"flow_last_seen":1569520468399,"flow_tot_l4_data_len":76,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp","ndpi": {"proto":"NetBIOS","category":"System"}}
+0464{"flow_id":5,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":21,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABgqi0AAEARS5vAqAF1wKgB\/wCJAIkATJqXRZhAEAABAAAAAAABIEVNRkZFREVCRkRDTkVKRU5FQkVEQ0FDQUNBQ0FDQUFBAAAgAAHADAAgAAEAAAOEAAZgAMCoAXU=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":5,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":22,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":110,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABgHVYAAEAR2HLAqAF1wKgB\/wCJAIkATJqURZlAEAABAAAAAAABIEVNRkZFREVCRkRDTkVKRU5FQkVEQ0FDQUNBQ0FDQUNBAAAgAAHADAAgAAEAAAOEAAZgAMCoAXU=","pkt_caplen":110,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569520468922,"flow_last_seen":1569520468922,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp"}
+0401{"flow_id":6,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":71,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA59vgAAP8RQPTAqAF1wKgBAftgADUAJTi0e18BAAABAAAAAAAAA2xvZwR6b29tAnVzAAABAAE=","pkt_caplen":71,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":23,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":6,"flow_packet_id":1,"flow_first_seen":1569520468922,"flow_last_seen":1569520468922,"flow_tot_l4_data_len":37,"flow_min_l4_data_len":37,"flow_max_l4_data_len":37,"flow_avg_l4_data_len":37,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"log.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0422{"flow_id":6,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":87,"pkt":"KDc3AG3IEBMx8Tl2CABFAABJ++kAADcRA\/TAqAEBwKgBdQA1+2AANbDee1+BgAABAAEAAAAAA2xvZwR6b29tAnVzAAABAAHADAABAAEAAAA8AAQ0yj7u","pkt_caplen":87,"pkt_type":2048,"pkt_ipoffset":14}
+0651{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":24,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1569520468922,"flow_last_seen":1569520468958,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":37,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"log.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.202.62.238"}}
+0460{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":7,"flow_packet_id":1,"flow_first_seen":1569520468959,"flow_last_seen":1569520468959,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp"}
+0411{"flow_id":7,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":25,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520468,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGBOPAqAF1NMo+7tZQAbuf1vAbAAAAALAC\/\/+Z4QAAAgQFtAEDAwUBAQgKJZzZqwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0457{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569520469036,"flow_last_seen":1569520469036,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp"}
+0393{"flow_id":8,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":65,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAzKPoAAP8RDvnAqAF1wKgBAf9yADUAH9x7wYgBAAABAAAAAAAABWxvY2FsAAAGAAE=","pkt_caplen":65,"pkt_type":2048,"pkt_ipoffset":14}
+0628{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":26,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":8,"flow_packet_id":1,"flow_first_seen":1569520469036,"flow_last_seen":1569520469036,"flow_tot_l4_data_len":31,"flow_min_l4_data_len":31,"flow_max_l4_data_len":31,"flow_avg_l4_data_len":31,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"local","num_queries":0,"num_answers":0,"reply_code":0,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0393{"flow_id":7,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":27,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAAO4GVu40yj7uwKgBdQG71lCVbT6Un9bwHIASaQOUKgAAAgQFrAEBBAIBAwMM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":7,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":28,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vAclW0+lVAQIAAd\/QAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0496{"flow_id":8,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":140,"pkt":"KDc3AG3IEBMx8Tl2CABFAAB+D5oAADcR8A7AqAEBwKgBdQA1\/3IAaoTewYiBgwABAAAAAQAABWxvY2FsAAAGAAEAAAYAAQAACY8AQAFhDHJvb3Qtc2VydmVycwNuZXQABW5zdGxkDHZlcmlzaWduLWdycwNjb20AeFjoeAAABwgAAAOEAAk6gAABUYA=","pkt_caplen":140,"pkt_type":2048,"pkt_ipoffset":14}
+0638{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":29,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1569520469036,"flow_last_seen":1569520469072,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":31,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS","category":"Network"},"dns": {"query":"local","num_queries":1,"num_answers":1,"reply_code":3,"query_type":6,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0427{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569520469072,"flow_last_seen":1569520469072,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","l4_proto":"icmp"}
+0402{"flow_id":9,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4d+0AAEABfxHAqAF1wKgBAQMD\/OoAAAAARQAAfg+aAAA3EfAOwKgBAcCoAXUANf9yAGoAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0478{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":30,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569520469072,"flow_last_seen":1569520469072,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","l4_proto":"icmp","ndpi": {"proto":"ICMP","category":"Network"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":10,"flow_packet_id":1,"flow_first_seen":1569520469081,"flow_last_seen":1569520469081,"flow_tot_l4_data_len":20,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"13.225.84.182","src_port":54798,"dst_port":443,"l4_proto":"tcp"}
+0379{"flow_id":10,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":31,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAog\/0AAEAG0h7AqAF1DeFUttYOAbuSOQajVAdu1VAQECZHdwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1071{"flow_id":7,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":571,"pkt":"EBMx8Tl2KDc3AG3ICABFAAItAABAAEAGAvbAqAF1NMo+7tZQAbuf1vAclW0+lVAYIABOFwAAFgMBAgABAAH8AwOmdJtxNFfMjcfLUUPitDEoY1B0Di2UTNnlfk3BbUb8gQAAoMAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFAJ0APQA1AITAL8ArwCfAI8ATwAkApACiAKAAngBnAEAAPwA+ADMAMgAxADAAmgCZAJgAlwBFAEQAQwBCwDHALcApwCXADsAEAJwAPAAvAJYAQQAHwBLACAAWABMAEAANwA3AAwAKAP8BAAEzAAAAEAAOAAALbG9nLnpvb20udXMACwAEAwABAgAKABwAGgAXABkAHAAbABgAGgAWAA4ADQALAAwACQAKAA0AIAAeBgEGAgYDBQEFAgUDBAEEAgQDAwEDAgMDAgECAgIDAA8AAQEzdAAAABAACwAJCGh0dHAvMS4xABUAtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0713{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":32,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":7,"flow_packet_id":4,"flow_first_seen":1569520468959,"flow_last_seen":1569520469090,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"log.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0387{"flow_id":10,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":33,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoaEVAAO8G\/tUN4VS2wKgBdQG71g5UB27VAAAAAFAEAADwhQAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":11,"flow_packet_id":1,"flow_first_seen":1569520469189,"flow_last_seen":1569520469189,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.37.14","src_port":23903,"dst_port":3478,"l4_proto":"udp"}
+0422{"flow_id":11,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":34,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABICu4AAEAR5YzAqAF1ov8lDl1fDZYANPtTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0385{"flow_id":7,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":35,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAomZxAAO4GvV00yj7uwKgBdQG71lCVbT6Vn9byIVAQAAc78QAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":11,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":36,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABISukAAEARpZHAqAF1ov8lDl1fDZYANPtTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+2333{"flow_id":7,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0769{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":37,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":7,"flow_packet_id":6,"flow_first_seen":1569520468959,"flow_last_seen":1569520469200,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"log.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2331{"flow_id":7,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":38,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUmZ5AAO4Gt680yj7uwKgBdQG71lCVbURBn9byIVAQAAcz9QAAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAWm2XMe5AAAEAwBHMEUCICZBrYK+GGtVSdHk3b8VHsrDm6ajQ58z1O7BdEqHCXy2AiEAn6AYWb8PmQ7IhYNbHgI4gCM37GT4YnU97JyydhHs6SgwDQYJKoZIhvcNAQELBQADggEBALm3XxvmAxG3IkUdHT+Kg3Gdme1zrqEBmMm7KerxSo04mAO+wqNE7BtmMlulaHZ9Z4syCloedM1x96JrQ3t0boruQAhnOlvnmvFBfuohu9oncLnbTmv+52y6PnzVcU36zE+9\/mBRQN8g25Xi29P9pwEzguCY+ecBRzTK6h0Sl4TFrkhzrUqGeILBakJ5CWRPYRg+OU6qgFVG7kNWeqzV1lmJl0epG3dO3baTSwN2+1BadUhLIZWqpLM\/GrxissNVMDfzR5peJgNvGg7VI37Xda5xV4mPfc+vCRUICOcuM\/U9dzPYTXUnypGEFSXOhiu1g4jB4DBHpmqaaQxhC2IlsOwABNQwggTQMIIDuKADAgECAgEHMA0GCSqGSIb3DQEBCwUAMIGDMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMTAvBgNVBAMTKEdvIERhZGR5IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTEwNTAzMDcwMDAwWhcNMzEwNTAzMDcwMDAwWjCBtDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALngyxDUr3a91JNi6zBkuIEIbMME2WIXji\/\/PmXPj85i5jxSHNoWRUtVq3hrY4NikM4PaWyZyBoUi0zMRTPqiNyeo68r\/oBhnXlXxM8u9D8wPF1H\/JoWvMM3lkFRjhFLVPgovtCMvvAwOB7zsCb4Zkdjbd5xJkePOEdT0UYdtOPcAOpFrL28cdmqbwDb280wOnlPX0xH+B3vW8LEnWA7sbJDkdikM07qs9YnT60liqXG9NXQpq50BWRXiLVEVdQtKjo++Li96TIKApRkxBY6UPFKrud5M68MIAd\/6N8EOcJpAmxjUvp3wRvIdIfIuZMYUFQ1S2lOvDvTSS4f3MHSUvsCAwEAAaOCARowggEWMA8GA1UdEwEB\/wQFMAMBAf8wDgYDVR0PAQH\/BAQDAgEGMB0GA1UdDgQWBBRAwr0njsw0gzCiM9f7bLPwtCyAzjAfBgNVHSMEGDAWgBQ6moUHEGcotu\/2vQVBbiDBlNoP3jA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkcm9vdC1nMi5jcmwwRgYDVR0gBD8wPTA7BgRVHSAAMDMwMQYIKwYBBQUHAgEWJWh0dHBzOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAh+bJMQyDi4lqmQS\/+hX08E72w+nIgGyVCPpnP3VzEbvrzkL9v4utNb4LTn5nliDgyi12pjczG19ahIpDsILaJdkNe0fCVPEVYwxLZEnXssneVe5u8M","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0377{"flow_id":7,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":39,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vIhlW1J7VAQH6UQ+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":7,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":40,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUmZ9AAO4Gt640yj7uwKgBdQG71lCVbUntn9byIVAQAAeiOwAAYaq\/5Cob7oSeuIN9wUPORKcTcA2RH\/TIE62DYNnYcqhzJB61rCIOyheJYlhEG6uJJQEAD83EG2LbUbTTD1Eqm\/S8c\/x2zjakzdnYLOqum\/UqspDRTXUYij+KQZAjfVtL\/qQDWJtGssNgYIP4fVBBzsKhkMO77wIv0hVU7kQV2Qqup4oz7bEtdjYm3ATrn\/dhHxXch2\/uRpYoraEmfQoJpy4Eo428+LwEMAEABIEwggR9MIIDZaADAgECAgMb5xUwDQYJKoZIhvcNAQELBQAwYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xNDAxMDEwNzAwMDBaFw0zMTA1MzAwNzAwMDBaMIGDMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMTAvBgNVBAMTKEdvIERhZGR5IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC\/cWII8fpZNPcbyRij94BJWOkigxOmxSBDATuE8eaFSZ8n6vaEG06gtNtwmMcyAbEFPgdO7vT6Ty9ZMCLnqxlWa+KAB\/zzFnWAOVF75fk1tnROqY2CE+S2P6kDg\/qivooVan\/eC8O2GRQFyurDqASUO0Z8Mg3zAGYiyI1pbTaMERi307IcYLQ4+gKMztPdRgfeCj7rXXzIfPuwK1OkkmJpUSUFYRpEgYwsqUOWI9+sOoGaDinFHKnpXR62np4wCjnO8YiA+0tdzDLshWJDJTQCVicBkbQ7cCo\/brHonIgBfZ\/U+dtTbWCdvyznWKu4X0b8zsQbAzwJ60kxXGlGs+BHAgMBAAGjggEXMIIBEzAPBgNVHRMBAf8EBTADAQH\/MA4GA1UdDwEB\/wQEAwIBBjAdBgNVHQ4EFgQUOpqFBxBnKLbv9r0FQW4gwZTaD94wHwYDVR0jBBgwFoAU0sSw0pHUTBFxs2HLPaH+3ahq1OMwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZHJvb3QuY3JsMEYGA1UdIAQ\/MD0wOwYEVR0gADAzMDEGCCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBZC1O9koYRpyR77Vsxzx0fbHDFuG6+Trv2vpdQ4TB\/uihcYpTC434z9\/tCdoXblRyMIlh1CQyIZWc5ChYJxaA4l6TFI5M\/tBimAQZEkeOnaSe0WiV\/Orcyzd2E\/yo4KTOk3Weyhf6hiCAcUInI3Cr2QgM3TOaI39WvJPKxw9\/MtezgmV63SVQgPJQYDMccUhhJpG3hs1gLydjs2a4cMo4ocA3i\/qYXnoQPvVdws1rpH6CGU7vvfP9pC+BIw7eTC8gKVMSsXRRnN2zKpS8xCDeqbm+MvJviV10kga+Xl5yErWysN0xm82GRESDkvjCfeqQpCbDhNF9kdxhAUd+MMKavAAQEMIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24g","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2071{"flow_id":7,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":41,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":7,"flow_packet_id":10,"flow_first_seen":1569520468959,"flow_last_seen":1569520469201,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"log.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","alpn":"http\/1.1","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0378{"flow_id":7,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":42,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vIhlW1UfVAQH1AGwAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":7,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":43,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vIhlW1UfVAQH\/UGGwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":11,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":44,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIjkkAAEARYjHAqAF1ov8lDl1fDZYANPtTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0637{"flow_id":7,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":45,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":245,"pkt":"EBMx8Tl2KDc3AG3ICABFAADnAABAAEAGBDzAqAF1NMo+7tZQAbuf1vIhlW1UfVAYIACAegAAFgMDAEYQAABCQQQjGEBOObJ+DhlTuJpBuERf8kVIYtG2ojzXUr+Qc\/qFuzlhGoH8jfBDSm0BNio42JODYjFyPt3i9jdU3gJlOG5EFAMDAAEBFgMDADzioxr48wHmsP3inQeKwolQJP6cUPekSozeWjPdbu+65VEbzFhq+O0LamqzrEPZJWGEBZkJoHT5jM+ODroWAwMAKOKjGvjzAeaxSy0LryEIH34ipy1+DSUIvLInQLqarGRThGZWEx+gSog=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":12,"flow_packet_id":1,"flow_first_seen":1569520469221,"flow_last_seen":1569520469221,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3478,"l4_proto":"udp"}
+0422{"flow_id":12,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":46,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABI9l0AAEAR+RzAqAF1ov8mDl1fDZYANPpTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":12,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":47,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIQ9kAAEARq6HAqAF1ov8mDl1fDZYANPpTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":12,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":48,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIKAsAAEARx2\/AqAF1ov8mDl1fDZYANPpTAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":13,"flow_packet_id":1,"flow_first_seen":1569520469253,"flow_last_seen":1569520469253,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3479,"l4_proto":"udp"}
+0422{"flow_id":13,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":49,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABI+hMAAEAR9WbAqAF1ov8mDl1fDZcANPpSAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":13,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":50,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIADMAAEAR70fAqAF1ov8mDl1fDZcANPpSAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0422{"flow_id":13,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":51,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":86,"pkt":"EBMx8Tl2KDc3AG3ICABFAABIzF0AAEARIx3AqAF1ov8mDl1fDZcANPpSAAEAGMFdrmNYXRQ5LlgsJgQDvzABAQAUMTIzNDU2Nzg5MDEyMzQ1Njc4OQA=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0448{"flow_id":7,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":52,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":105,"pkt":"KDc3AG3IEBMx8Tl2CABFAABbmaFAAO4GvSU0yj7uwKgBdQG71lCVbVR9n9by4FAYAAiMbQAAFAMDAAEBFgMDACig9wZEEh9PXnWzP7UPzglBn2X1WWBPivEs8lK+xK+RUEz6C7r01B7U","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":7,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":53,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBPvAqAF1NMo+7tZQAbuf1vLglW1UsFAQH\/4FIAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":14,"flow_packet_id":1,"flow_first_seen":1569520469340,"flow_last_seen":1569520469340,"flow_tot_l4_data_len":295,"flow_min_l4_data_len":295,"flow_max_l4_data_len":295,"flow_avg_l4_data_len":295,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"104.199.65.42","src_port":53867,"dst_port":80,"l4_proto":"tcp"}
+0755{"flow_id":14,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":55,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":329,"pkt":"EBMx8Tl2KDc3AG3ICABFAAE7AABAAEAGza7AqAF1aMdBKtJrAFCnuOoZVolcQYAYEADYHwAAAQEICiWc2yOz1c0BjkVSpFLY1xT06OSrjoriJgcfK\/\/jFeJ0MBFnTs\/gjSBBTilLonupmCKu9pPH3O3kr0WdmS15RGnoT780kKdV0pI3Sc4BmoL3SDuD+4AKh61lYz9\/Fy+NoN7yg5wYBt1EyrpPMLbLqHBNHL\/bSEl7ELs0VVSBp\/yK5KmmCJ9NxlFB5OhyVsIKKMN16tHZjCMzvfXD8zzASLDMp2Jgo7P\/WwPcHOM+42RSXjbuLZ5ok2AmF+hLRIKzRuPPREeQ7vQwmpDzjOHW9Sf++k9YwzgVZySXAtDkgpGRg+YDLvXpKGuHNj5xgws4SOHXAFvt3QGUXS4yo6IYy8o0BGkEyJuTk1MEHV6JN74=","pkt_caplen":329,"pkt_type":2048,"pkt_ipoffset":14}
+0469{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":15,"flow_packet_id":1,"flow_first_seen":1569520469341,"flow_last_seen":1569520469341,"flow_tot_l4_data_len":1400,"flow_min_l4_data_len":1400,"flow_max_l4_data_len":1400,"flow_avg_l4_data_len":1400,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"35.186.224.53","src_port":53872,"dst_port":443,"l4_proto":"tcp"}
+2252{"flow_id":15,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":56,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1434,"pkt":"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","pkt_caplen":1434,"pkt_type":2048,"pkt_ipoffset":14}
+0498{"flow_id":15,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":57,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":141,"pkt":"EBMx8Tl2KDc3AG3ICABFAAB\/AABAAEAGdGzAqAF1I7rgNdJwAbu\/4YPj2uaJRIAYEACuSgAAAQEICiWc2ySFp5bjD8rJVgENkhz7SGo+3tsT+62YMYedQzLcJKiig4pAH+hO24ZoiQ1LNK0ZidRBnPFEPrr+zH4y+BGqQ1wCDA9XJFEjegtqGmZzuBXv","pkt_caplen":141,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":15,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":58,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA07H8AAHcGkTcjuuA1wKgBdQG70nDa5olEv+GD44AQA\/fBegAAAQEICoWn6LklnNsk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":15,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":59,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA07IAAAHcGkTYjuuA1wKgBdQG70nDa5olEv+GELoAQA\/fBLwAAAQEICoWn6LklnNsk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":11,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":60,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8r3lAADEREA2i\/yUOwKgBdQ2WXV8AKOI\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":11,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":61,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8r4BAADEREAai\/yUOwKgBdQ2WXV8AKOI\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0473{"flow_id":14,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":62,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":121,"pkt":"KDc3AG3IEBMx8Tl2CABFAABrxSVAADUGFFlox0EqwKgBdQBQ0mtWiVxBp7jrIIAYACoMGQAAAQEICrPWHtMlnNsjzR67t55lmahUyt3+F7wIZY40kmp5z0B6VTx\/VJbCVWp7syOQaUpp1Ik5I7MknMnzBR1VLfTDBg==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":14,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":63,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGzrXAqAF1aMdBKtJrAFCnuOsgVolceIAQD\/4OlAAAAQEICiWc2z+z1h7T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0409{"flow_id":11,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":64,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8r4JAADEREASi\/yUOwKgBdQ2WXV8AKOI\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":12,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":65,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wX9AAC8R\/wai\/yYOwKgBdQ2WXV8AKOE\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":12,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":66,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wYNAAC8R\/wKi\/yYOwKgBdQ2WXV8AKOE\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":12,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":67,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wYdAAC8R\/v6i\/yYOwKgBdQ2WXV8AKOE\/AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0506{"flow_id":15,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":68,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":145,"pkt":"KDc3AG3IEBMx8Tl2CABFAACD7JkAAHcGkM4juuA1wKgBdQG70nDa5olEv+GELoAYA\/fVZAAAAQEICoWn6OclnNskFwMDAEoAAAAAAAAB6MN7wp9u4akJwLqZdThmaA8fFcFV3\/4PlaF6SVkQyeIW7I3opea1y20mFjm7ELOMOFjmLa+aboZQkIA5Eyn2k2lH4w==","pkt_caplen":145,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":69,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaJk4AQD\/20dQAAAQEICiWc21uFp+jn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2317{"flow_id":15,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":70,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1484,"pkt":"KDc3AG3IEBMx8Tl2CABFAAW+7JoAAHcGi5IjuuA1wKgBdQG70nDa5omTv+GELoAYA\/dP5wAAAQEICoWn6OclnNskFwMDBYUAAAAAAAAB6XoohBMnVPPRrLUhxn3cQsLtv0nNvI15xkPqGbS6GjelwrBBTOObbKXRhh9PieadtOakPTCHka4tFkkxhzmjkF1DBWAvtyJNas7+k3hA6edtbGfkyL75jIPqBvGgzckZuXjxVvQ0wH0fjnWMOfdHfDb087fLJty5UodpfAtZoHtWWSHj6fE0h6TfmhqsSlZOQ8gMTTiJyVbo9dsKUJvXuRnWa4zr0d\/JSviOZq0HmhvRo9aKbc62kp8JLz2ECOnuh2F3cjY9JhHIG0sypuxQ\/J7USHNFomwPJRiY60Cwa0YCixGN0Sf5mYXHWw1EYw4Oh\/HL0Gr4ZW5t\/pkitoyPjJmVQCWMMFZ7DhT2a7wdhRPScIHiIMT5NoRbgIdC+BUj7MVIZCsxpWCqlm\/1f0Jjk+8psofpZkQ+Ag6OAKDNHuDLJZ246gI3zIgaBnOm3c57XvBl9KGuRhawa9oodIObGiWLeX2sGb3wCX08bR84YFsRsscFXQ7Z+zROA9hqdf+Gn7K\/hTIVHxtt5YRNe3p8ZvXIzQKw+GAoukVJZbR\/DbOyi0i8KoUGSy9yOBfidlmR5+jGWIL34WIYG5v5rW5jMyHkBPiELbEoV44XOk75VT\/cyIVG1F4YwlI3USev1VehQ4BRhBGAiTvna6EEus+3HenpdoOe+O0jwZED4xEUYrddlekqzDag3qScp0uAGlkEFsitnQID2vXr7iWEoad\/YZegFFUbigLCRD1yH3BDy0If7FqgWI\/0rCLrkGXHgQqG9TL7op4VhbFqUNWN6rHzI8rnCWIXoWC7wuorqdrs6\/kCrzrcwA0Qk1kmHDRmw5J5XYqVARGpueB+XyP28Ai5+LfSaFjCDKpx1zZ934RZQB+rIZnd94vz9R1T43CGaKflaAX5gdCTxzwpyp3PGrHyV2+PA9ArGJZnj7Pubagp8muM2Q+6tQeRYZWOFS1ODVmEAsh+m9vIIcmuBodLXqIZtgNZdOsrfNiY0SwO1vvCiOUqDgK\/LlBPR+OIwAfMDDtKyF4numYNuUAyBhKcbatOcRueWDEamrB7oyRFY8diI4nrpJntPn9jQ5BuDkVS5mY8MeqRYXS0a16DPl5AEoBk3EWO9F44lPrJergWE1U2+P7NT\/5xmUPJ8YKSFl44QwbtOx5wfdD3hRpRF5dVPD+f9E9\/2s8qjidFs+HG38m+5UF+QlCJJ3HwsIuNzDt+0UbzDDjumCXMIUnzv9xVUuHlH3Hfph0cCYPxUEYkTh25X\/KA2vKKWoQ46A6mHH4\/sRWb+oWVITIWAMqVig21IDz4j69cqw9blh31h9FDoldhd3mBfcFRbga2TrIGivwOoeumQyZ+xHjGbhDDruTwJK1Envx0SM6py5pypZVhkoxAaDYYi\/Nuh9sNRz\/XQqZ6VabhOsqN0wXtDXV\/8f+WRegglJwCb40vOIu0vmrawHyb8wmu68JzgrR3z8UJGwoPILu6NgU0mvP7bcICaQTEVK8euQ7dOSjS+krgUWak1ScPAc4TiCaoQjUlMfgW6356HouGTQCNicjOvxgeTqhCNMfbOcYUt7j0vjjAJgQDSab4\/XruObjoDxy0yyxb8NCUxnmtiNFx44v08v49CgRFkyyKg7H6DWQnhkyqsF+LhFdMuCLy5rXVxGks2G3gflpwNOuSRsVTkBEPaFCXY4HOB9qPjX0QF3kgRfGyMp6lh\/wzioBktCoVOOp+qp\/YJt1yNFoojMBXF07uiOkMhnKZIXBYzxmfiI0H\/7eDu8Ek3M4zlHcxW46Vb\/WhDjrRPDYkoIsbmnzVkRX+GkMxah+Ir8b8nM7r\/o4B9av74m4LUeLpz565\/cuzYkz5roOobwiLaSBN4Ikga6AlqjL9dFl78BI=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":15,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":71,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaPHYAQD9OvFQAAAQEICiWc21uFp+jn","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2315{"flow_id":15,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":72,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":1484,"pkt":"KDc3AG3IEBMx8Tl2CABFAAW+7JsAAHcGi5EjuuA1wKgBdQG70nDa5o8dv+GELoAQA\/fs2wAAAQEICoWn6OglnNskFwMDBYUAAAAAAAAB6lPwTnfoGn7L+UcT56pzeyulFyQzg5aBjQu6ZUY9YNoevqq+Fkg7BLOcjmRfi2eHVjHCpkU5pJ3h1XUZeM4zwc5pn943PIPOY3ojswROBgJbHDN1oCxxjj49fMX0Yjeg4wIeigb2h6XgtTMSjov8fg7tL9QKJaV2yt\/5V5y1ftmo6i0cT6nKshy18Q2+pJg7IJpWh4g9Zrp6yC4UuBT54msk7xAMbDFwLPr\/+N0zV5i91np8gMn7ZJutIA37BaG\/r0Rl0+2D\/\/d\/M9mrmFjECBxLaHmMPJV326lQlrC83ov2Fn5ZntvkwmCCoSiTrH8Riz9uca7BCHJz\/C+A5TLfUvodb90l03swYAxdEHHdACqpEIn+cIafkPIS3f+h+rPd30snNgmS9dHShIvHN7Oc5qfgwvN+xTTsrTJL2Jf4HDaEelBTmx9m3dbfys2BRKfcJczcmoaqSvIRQ1v5mxxLapBqO\/1eUtSwHkLtpLU7ALY8dZ+bjuavp+ouU3o3Pn1gjNUNP8xj19y1aVk32RiWWxg0n6xRQJdn70V22hSgKtvygm07G\/KTNEWE6A+S0jE7UEGlB6m6ujdKlxFHcRDG38uUdOuKNWp9dcj3f3CWokmlW1MGzoj\/cM44Uk\/S1mmHz34oBHMKWnkYt\/RlQFrSE8Su+BbuJv17i9oT\/4lJqX708ogr7CKiBaZHhrsIEGPq+I1fg\/C6HfCxGBruf2UrW6sVshcsESGPg4i2ZFY0f0\/xKuXBYHbpi9ZFDL0C1yH7\/zMv73XkoDunxAl9nEYpHIVKkRmRXRKuw8UXv02OWDAnewjjTDU0F27Lt7qHyErazCIi8EKu\/RmddOtUWgN1Ev8E6gUZ8kMqHkWcNosBr\/NqmM9cZh6DuAJnK\/aH5+on\/b2hbJ7CB7FoLg5qczTSAlxRpyvIgm\/uplgksr9xFTFOjzEBFmhPFTyW3+z9HAW1G7O63FIQnsP6Gu92mCb3dFFwLCKsMqEfZ6hIRma1VAf7S2e1EGApwTm1Pc8s9DEQXKd4OGn8fPndcanv0qcBJAmB16wpiQjHq+jaZrsyCZ6v9Bwl3GBOUMHfGTaWaUCFG3qoynfPgDXjkjcUJ77c8yEeAF7H41zWXtgkkqiuh0+CM3Gz3XCMgYmnx\/xOI9q4fSwYCEJier4iJxc6cagRaINXvTKnCSLrUuiMG4ljH4Xw7YeGye0TvEwzZlC6O53GSfLTlv0HwClfhYgYO1H0PXaCZCyYOhcnKI8t7JnD3ykzDt1okOfIqbiSDQ0KI+ObBFxlE5suJj+kmV5FCbYj7tdlSCTKpD9SM8rnOJs3uvKQ8bzaOto37OZQK4pnVsk2ugqXmVK9M\/3+\/3K0lgVNNYqw9fAYCU9PH5mhtLvcvt5LAdPkMoaAFs6fvUoEsWcqKwtQeUAOOKYqjgjYyz1HNt6vh5jZvashB+YgOjyK1XNkxwO8XDSNBDyBNUy+R+6wk+sCuWMHnrrqTlw4TkADm2nMzNShkgCZp0g4+ojNsLO8yscauWxd09s4EMJ+8R+ozJR+6NHsBLeh7if+wQ6q+0HHJ3X1knt4QOEABJbfCIkSUfDefhzdw3o8RDssCHFnA3AFPKIHV37OMGlhHPyBvxCOSMx4ZAjYdNRcxfylal7tzvLV7MBJxDnrVj1dNouFG1NOkv3fSoIqdOsM3ubqYQAwQ8hOxCMPMDDnJuhcQWmDanqr+0OmlzpboaRmKdsDe7EAs6NTT9d18aejklV3Xni3ydKVTgVt1O1H9qzoyp0Z4ayVmey3JBUW5UiEYtrR791NOcRmZzVqWWbVP7yP3ZoTWablvrS5IEVkUa2dMUeCvo+pYUbvaMiYi55k7JFlr4ZtFkFDiw0jDppJFL0=","pkt_caplen":1484,"pkt_type":2048,"pkt_ipoffset":14}
+1585{"flow_id":15,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":73,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":940,"pkt":"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","pkt_caplen":940,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":74,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaYEYAQD7imOgAAAQEICiWc21yFp+jo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1082{"flow_id":15,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":75,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":76,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaaCoAQD6ikUQAAAQEICiWc21yFp+jo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":15,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":77,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGdLfAqAF1I7rgNdJwAbu\/4YQu2uaaCoAQEACj+QAAAQEICiWc21yFp+jo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0462{"flow_id":15,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":78,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":112,"pkt":"EBMx8Tl2KDc3AG3ICABFAABiAABAAEAGdInAqAF1I7rgNdJwAbu\/4YQu2uaaCoAYEAClwQAAAQEICiWc21yFp+joFwMDACkAAAAAAAAAk5oLCHKdwWaLIwDIo61mvuuNp5wp+z9zmEm+HF49DUmTeg==","pkt_caplen":112,"pkt_type":2048,"pkt_ipoffset":14}
+0642{"flow_id":14,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":79,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":249,"pkt":"EBMx8Tl2KDc3AG3ICABFAADrAABAAEAGzf7AqAF1aMdBKtJrAFCnuOsgVolceIAYEABiqgAAAQEICiWc216z1h7TDAUgKNBIETxUNcO6tAhUG0tEBvhguZ\/gS5HAVC5bbKTKTHCX3JVor4rN14O0LZh10Z+zk7f4TWqlCuSmuA7RDKBRDmsROEWg4Yxz4VW5inO17XbKkjS1wFJOL7YPze7st8oK8KA8i0J8VZgNqEmV75ZTR1EEnlmdOv1Wnbi8ZfiynTO8dMeAr6fWMVpy0UvHACezcN2obt7rM\/c8n0cBiXHeOHdHYxI8H+0Yp7F+Z7pofaIYdg+M","pkt_caplen":249,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":13,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":81,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wY9AAC4R\/\/ai\/yYOwKgBdQ2XXV8AKOE+AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0410{"flow_id":13,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":82,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wZVAAC4R\/\/Ci\/yYOwKgBdQ2XXV8AKOE+AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0430{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569520469423,"flow_last_seen":1569520469423,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","l4_proto":"icmp"}
+0403{"flow_id":16,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4WycAAEABlHPAqAF1ov8mDgMDkd4AAAAARQAAPMGVQAAuEf\/wov8mDsCoAXUNl11fACgAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0486{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":83,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":16,"flow_packet_id":1,"flow_first_seen":1569520469423,"flow_last_seen":1569520469423,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","l4_proto":"icmp","ndpi": {"proto":"ICMP.Zoom","category":"Network"}}
+0409{"flow_id":13,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":86,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8wZlAAC4R\/+yi\/yYOwKgBdQ2XXV8AKOE+AAIADMFdrmNYXRQ5LlgsJgQDvzABAwAIAAH\/dVC03O8=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0403{"flow_id":16,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":87,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":70,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA4ZPoAAEABiqDAqAF1ov8mDgMDkd4AAAAARQAAPMGZQAAuEf\/sov8mDsCoAXUNl11fACgAAA==","pkt_caplen":70,"pkt_type":2048,"pkt_ipoffset":14}
+0472{"flow_id":14,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":88,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":121,"pkt":"KDc3AG3IEBMx8Tl2CABFAABrxSZAADUGFFhox0EqwKgBdQBQ0mtWiVx4p7jr14AYACoQ6AAAAQEICrPWHxMlnNteHG23tdrG8DG+h7r8Zxtz7MQCNVJFwwvVnv58rFQctE3+7OM+9UUQVY5R6JQAaaN6AcizUZjVWQ==","pkt_caplen":121,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":14,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":89,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGzrXAqAF1aMdBKtJrAFCnuOvXVolcr4AQD\/4NKAAAAQEICiWc232z1h8T","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0341{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0172{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":90,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","type":34969}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569520469797,"flow_last_seen":1569520469797,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0750{"flow_id":17,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":321,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWrCABFAAEzBkxAAEARcsXAqAAB\/\/\/\/\/wBEAEMBHwAAAQEGABIog9sAAIAAAAAAAAAAAAAAAAAAAAAAANgNF9ZVqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjglNjNQEBNwIBAwwJVEwtU0cxMTZFPAlUTC1TRzExNkU9BwHYDRfWVav\/","pkt_caplen":321,"pkt_type":2048,"pkt_ipoffset":14}
+0542{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":91,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569520469797,"flow_last_seen":1569520469797,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp","ndpi": {"proto":"DHCP","category":"Network"},"dhcp": {"fingerprint":"1,3"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":18,"flow_packet_id":1,"flow_first_seen":1569520469950,"flow_last_seen":1569520469950,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":18,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":92,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGBQ3AqAF1NMo+xNZRAbvXiDKIAAAAALAC\/\/8cGAAAAgQFtAEDAwUBAQgKJZzdfwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569520469984,"flow_last_seen":1569520469984,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp"}
+0402{"flow_id":19,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520469,"pkt_len":72,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA6vIgAAP8Re2PAqAF1wKgBAfYMADUAJtTToX0BAAABAAAAAAAABHd3dzMEem9vbQJ1cwAAAQAB","pkt_caplen":72,"pkt_type":2048,"pkt_ipoffset":14}
+0639{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":93,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":19,"flow_packet_id":1,"flow_first_seen":1569520469984,"flow_last_seen":1569520469984,"flow_tot_l4_data_len":38,"flow_min_l4_data_len":38,"flow_max_l4_data_len":38,"flow_avg_l4_data_len":38,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"www3.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0426{"flow_id":19,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":88,"pkt":"KDc3AG3IEBMx8Tl2CABFAABKWCQAADcRp7jAqAEBwKgBdQA19gwANiAtoX2BgAABAAEAAAAABHd3dzMEem9vbQJ1cwAAAQABwAwAAQABAAAAPAAENMo+7A==","pkt_caplen":88,"pkt_type":2048,"pkt_ipoffset":14}
+0653{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":94,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1569520469984,"flow_last_seen":1569520470021,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"www3.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"52.202.62.236"}}
+0461{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":20,"flow_packet_id":1,"flow_first_seen":1569520470022,"flow_last_seen":1569520470022,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp"}
+0412{"flow_id":20,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":95,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGBOXAqAF1NMo+7NZSAbv67hZtAAAAALAC\/\/8UXQAAAgQFtAEDAwUBAQgKJZzdxgAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0394{"flow_id":18,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":96,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAAO8GVhg0yj7EwKgBdQG71lFyHvWD14gyiYASaQOGlAAAAgQFrAEBBAIBAwMM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0378{"flow_id":18,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":97,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDKJch71hFAQIAAQZwAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1072{"flow_id":18,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":571,"pkt":"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","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0710{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":98,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":18,"flow_packet_id":4,"flow_first_seen":1569520469950,"flow_last_seen":1569520470086,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0394{"flow_id":20,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":99,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0AABAAO4GVvA0yj7swKgBdQG71lK89vcv+u4WboASaQMynAAAAgQFrAEBBAIBAwMM","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":20,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":100,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hZuvPb3MFAQIAC8bgAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+1073{"flow_id":20,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":571,"pkt":"EBMx8Tl2KDc3AG3ICABFAAItAABAAEAGAvjAqAF1NMo+7NZSAbv67hZuvPb3MFAYIADjOQAAFgMBAgABAAH8AwObHTBBjptn8M2MO45Zv5ljKTP+98xeE3APrXXUMhcUnQAAoMAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwDLALsAqwCbAD8AFAJ0APQA1AITAL8ArwCfAI8ATwAkApACiAKAAngBnAEAAPwA+ADMAMgAxADAAmgCZAJgAlwBFAEQAQwBCwDHALcApwCXADsAEAJwAPAAvAJYAQQAHwBLACAAWABMAEAANwA3AAwAKAP8BAAEzAAAAEQAPAAAMd3d3My56b29tLnVzAAsABAMAAQIACgAcABoAFwAZABwAGwAYABoAFgAOAA0ACwAMAAkACgANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEBM3QAAAAQAAsACQhodHRwLzEuMQAVALYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":571,"pkt_type":2048,"pkt_ipoffset":14}
+0716{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":101,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":20,"flow_packet_id":4,"flow_first_seen":1569520470022,"flow_last_seen":1569520470165,"flow_tot_l4_data_len":633,"flow_min_l4_data_len":20,"flow_max_l4_data_len":537,"flow_avg_l4_data_len":158,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www3.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL","alpn":"http\/1.1"}}
+0387{"flow_id":18,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":102,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAoYcxAAO8G9Fc0yj7EwKgBdQG71lFyHvWE14g0jlAQAAcuWwAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":18,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUYc1AAO8G7qo0yj7EwKgBdQG71lFyHvWE14g0jlAQAAcwHQAAFgMDAG8CAABrAwN\/6j22HXGSubrmqSO5eEZGtmRF\/gAED4p\/s85NhzNhjyD2n0A4x+hU1uYzPL\/x4lPrEELI8CgWvB2cjFsB6Gbu0MAvAAAjAAAAAP8BAAEAAAsABAMAAQIADwABATN0AAkIaHR0cC8xLjEWAwMUFAsAFBAAFA0ABqgwggakMIIFjKADAgECAgkAuAr5aaJJsgcwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTkwMzI1MTkzODQyWhcNMjEwMzI1MTkzODQyWjA3MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxEjAQBgNVBAMMCSouem9vbS51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALaxfGmkVOyU0AkAAY7kCiG99jBGIh+VdDOgabIxgZ7wT8ILDqU2MftFgTalkBtnlix1nB\/A23lZT3vWYLmdiArSXVZkjjpjHARBVVYAUir7OAher\/0qd4RZHsRK0bdRd40NdKuLb6he5TPeCPCo8mDuK41gZM9CkQPeJav\/RaowvfOtYiwp3Pt5JvpmmLCPkYu++RhH8LKfsuAhqv9m2xv6wau3C0G\/6Ce0z3s3aPbA6HK2Vctbrn12ZNiektUI25iSiJW21\/fYcY723x0hBp7tRPZNdMSHZ3e4QkzjXfUGyEK\/6tGaySEj+yvSYd5DUN0izEz+KBtCx95g0jp0b9MCAwEAAaOCAzMwggMvMAwGA1UdEwEB\/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB\/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTAxMS5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAdBgNVHREEFjAUggkqLnpvb20udXOCB3pvb20udXMwHQYDVR0OBBYEFK\/\/A+eqHnVNBj7T3SSRE7i2ztfYMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWm2XMJ0AAAEAwBHMEUCIGBxi3tQD8E7\/i5SW3PuSOWOtMDrbmlOuAQU+VSegUXXAiEAt51T+DldjWi8Ekq43+cZhUTmCceC5bgqC3HWUayeaD4AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWm2XMTxAAAEAwBHMEUCICiEIvES2m58Hqrdk1z6D\/VDBAWPZ6\/7XLmd4JXWkmvGAiEArZspf5lv\/3TS1cYqMEKKiFMPCaUjl39XIpCCbPMANBQAdgBElGUusO7Or8RA","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0767{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":103,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":18,"flow_packet_id":6,"flow_first_seen":1569520469950,"flow_last_seen":1569520470199,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2333{"flow_id":18,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":104,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":18,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":105,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDSOch8A3FAQH9IDOAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":18,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":106,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":18,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1306,"pkt":"KDc3AG3IEBMx8Tl2CABFAAUMYdBAAO8G7280yj7EwKgBdQG71lFyHwaI14g0jlAYAAfvGgAAQXV0aG9yaXR5MB4XDTA0MDYyOTE3MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRoZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3MgMiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggENADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d\/+TvZxz0ZWizV3GgXne77ZtJ6XCAPVYYYwhv2vLM0D9\/AlQiVBDYsoHUwHU9S3\/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6wwdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i\/ojgC95\/5Y0V4evLOtXiEqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMYavx4A6lNf4DD+qta\/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+YihfukEHU1jPEX44dMX4\/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLEsNKR1EwRcbNhyz2h\/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h\/t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNyOO7MHAGjHZQopDH2esRU1\/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7PTMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQHmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0\/ZM\/iZx4mERdEr\/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5CufReYNnyicsbkqWletNw+vHX\/bvZ8WAwMBTQwAAUkDABdBBIC\/jS3y0GVc9uyFnKJnh98xMRry3Y2jZt9K5DfzCJdocip5Hae58h0cXO394L09DPtE4Ad1j\/f0AWP2PDuhGowGAQEAnfUbw86Vci5ZUFmNcPwJUQEknSDSTjiOvGgcY0r9+uwG1Sqt0joQ6pLU83RyIkfJxr5ufDnpfN6YVUsvvWSB+uQ0BxDOWUIsdJypsVrUbDfJjXrM\/MqspC5YtcHHGKEj4YRaTb9t4ljTQQB2XftQrg4HjcU4Tq0xDoj09dIFIGtrzhmWL\/3qqGwYfndiZfAQ\/BtLSYZUuRXp\/46v3qODtca+9kzoMykZC0e14nBHj6s6DZ4lOWieyiztPCcNQzzzMljzEguTHM5LQ5ScFQS1HLTtrBwQpu9POqUIy\/QNhACPmG30WSB4MEgieOHhBfgOJgKBKbR19eKH359ZAF0NmhYDAwAEDgAAAA==","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1091{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":107,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":18,"flow_packet_id":10,"flow_first_seen":1569520469950,"flow_last_seen":1569520470199,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","alpn":"http\/1.1","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0380{"flow_id":18,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":108,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDSOch8LbFAQH374+wAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":109,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDSOch8LbFAQH\/X4hAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0643{"flow_id":18,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":110,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":245,"pkt":"EBMx8Tl2KDc3AG3ICABFAADnAABAAEAGBGbAqAF1NMo+xNZRAbvXiDSOch8LbFAYIAD6EgAAFgMDAEYQAABCQQTpOMM5QkmEulPNC3K8ihRwyrHJnCxGvg8O6cGBMp39q8DZiwpAsdhYVkoldB7bInht9zwfTEwgmxaZn8tEVX2wFAMDAAEBFgMDADxcJLSf\/u3t29d2a2bLMf7jxifHjIqnP9WRuyvcx\/ynMn5Cym98\/PyLb1\/SyN7U9gqFVGSZ34SJxyUQnXgWAwMAKFwktJ\/+7e3ceyqKWFLYrHs3WY6UIKd8BEMHaZVggMy2Z545fEF9ZbQ=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":20,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":111,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAAo8dBAAO4GZSs0yj7swKgBdQG71lK89vcw+u4Yc1AQAAfaYgAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+2334{"flow_id":20,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0772{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":112,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":20,"flow_packet_id":6,"flow_first_seen":1569520470022,"flow_last_seen":1569520470280,"flow_tot_l4_data_len":2125,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":354,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www3.zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","alpn":"http\/1.1"}}
+2333{"flow_id":20,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":113,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2343{"flow_id":20,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":114,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0379{"flow_id":20,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":115,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hhzvPcCiFAQH6WvbAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+2077{"flow_id":20,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1306,"pkt":"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","pkt_caplen":1306,"pkt_type":2048,"pkt_ipoffset":14}
+1096{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":116,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":20,"flow_packet_id":10,"flow_first_seen":1569520470022,"flow_last_seen":1569520470280,"flow_tot_l4_data_len":6361,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":636,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"www3.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"535aca3d99fc247509cd50933cd71d37","ja3s":"3c30f2c064a3aed8cd95de8d68c726a6","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","alpn":"http\/1.1","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0380{"flow_id":20,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":117,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hhzvPcNGFAQH1ClMQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":20,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":118,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hhzvPcNGFAQH\/WkjAAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0647{"flow_id":20,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":119,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":245,"pkt":"EBMx8Tl2KDc3AG3ICABFAADnAABAAEAGBD7AqAF1NMo+7NZSAbv67hhzvPcNGFAYIADNpgAAFgMDAEYQAABCQQRJrQH3\/ivayF\/jX0S4lhpGUz3uP2e6JKViw8mVmhI3KjqWdn2Q1I5Y\/HaiLQrul\/sfR17FIvar1sDr3ZRhp5nNFAMDAAEBFgMDADwVcnevx9HS27yVAT\/6chvYlVQRV5MPGZ9NFlXJ8sgETDlF0i6xPN3w\/6os+dCCCW\/rURf3QcDlVLW6hCQWAwMAKBVyd6\/H0dLch3S+Mcpor9M9AMlgie1dfmvFVQLx+fo9\/e5lx3nkwTA=","pkt_caplen":245,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":18,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":120,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":105,"pkt":"KDc3AG3IEBMx8Tl2CABFAABbYdFAAO8G9B80yj7EwKgBdQG71lFyHwts14g1TVAYAAhFwAAAFAMDAAEBFgMDACiJgi3o1KIQ4DqlEuPTSBzvXsBKiamckvvzF2PbamXhFaGx4+rlJeK3","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":18,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":121,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBSXAqAF1NMo+xNZRAbvXiDVNch8Ln1AQH\/73iQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_id":0,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":124,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":265,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjK4AAAAQEICiWc3wRwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0450{"flow_id":20,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":125,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":105,"pkt":"KDc3AG3IEBMx8Tl2CABFAABb8dVAAO4GZPM0yj7swKgBdQG71lK89w0Y+u4ZMlAYAAgUCQAAFAMDAAEBFgMDAChbGEiUwAOCZ9FRgX4kqKFYn7b3x1MjrqCat73Y2+zu5RvVWRWd06EJ","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0381{"flow_id":20,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":126,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":54,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAoAABAAEAGBP3AqAF1NMo+7NZSAbv67hkyvPcNS1AQH\/6jkQAA","pkt_caplen":54,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569520470666,"flow_last_seen":1569520470666,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0432{"flow_id":21,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":86,"pkt":"\/\/\/\/\/\/\/\/KDc3AG3ICABFAABI4PAAAEARFPDAqAF1wKgB\/+EV4RUANLyaU3BvdFVkcDAJFTOWktM6lAABAARIlcIDDi3QR5gZLZgtSkZtNr91y8rdz4k=","pkt_caplen":86,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":158,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569520470666,"flow_last_seen":1569520470666,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp","ndpi": {"proto":"Spotify","category":"Music"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569520470741,"flow_last_seen":1569520470741,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp"}
+0412{"flow_id":22,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAOwQAAP8R\/OHAqAF1wKgBAfRjADUALIWIr1EBAAABAAAAAAAACnpvb21mcjg1emMEem9vbQJ1cwAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":159,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":22,"flow_packet_id":1,"flow_first_seen":1569520470741,"flow_last_seen":1569520470741,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"zoomfr85zc.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569520470742,"flow_last_seen":1569520470742,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp"}
+0411{"flow_id":23,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABALr4AAP8RCSjAqAF1wKgBAeLPADUALAFaRhQBAAABAAAAAAAACnpvb21mcjg0emMEem9vbQJ1cwAAAQAB","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0646{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":160,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":23,"flow_packet_id":1,"flow_first_seen":1569520470742,"flow_last_seen":1569520470742,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"zoomfr84zc.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":24,"flow_packet_id":1,"flow_first_seen":1569520470742,"flow_last_seen":1569520470742,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":24,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":161,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGEx7AqAF11ROQadZTAbug3l1NAAAAALAC\/\/8zBgAAAgQFtAEDAwUBAQgKJZzghQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":25,"flow_packet_id":1,"flow_first_seen":1569520470755,"flow_last_seen":1569520470755,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp"}
+0414{"flow_id":25,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":162,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGEx\/AqAF11ROQaNZUAbsLvInbAAAAALAC\/\/+bjgAAAgQFtAEDAwUBAQgKJZzgkQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0435{"flow_id":22,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":94,"pkt":"KDc3AG3IEBMx8Tl2CABFAABQFgoAADcR6czAqAEBwKgBdQA19GMAPOFdr1GBgAABAAEAAAAACnpvb21mcjg1emMEem9vbQJ1cwAAAQABwAwAAQABAAABLAAE1fSMVQ==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":163,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1569520470741,"flow_last_seen":1569520470768,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":44,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"zoomfr85zc.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"213.244.140.85"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":26,"flow_packet_id":1,"flow_first_seen":1569520470769,"flow_last_seen":1569520470769,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":26,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":164,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFlHAqAF11fSMVdZVAbvq+zZHAAAAALAC\/\/8TBgAAAgQFtAEDAwUBAQgKJZzgnwAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":24,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":165,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGIyLVE5BpwKgBdQG71lPrn+6AoN5dTqASqbAo0wAAAgQFrAQCCAp4fR7ZJZzghQEDAww=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":24,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":166,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l1O65\/ugYAQECzxAQAAAQEICiWc4KR4fR7Z","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":24,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":167,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":24,"flow_packet_id":4,"flow_first_seen":1569520470742,"flow_last_seen":1569520470775,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam105zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0435{"flow_id":23,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":94,"pkt":"KDc3AG3IEBMx8Tl2CABFAABQ61QAADcRFILAqAEBwKgBdQA14s8APF0wRhSBgAABAAEAAAAACnpvb21mcjg0emMEem9vbQJ1cwAAAQABwAwAAQABAAABLAAE1fSMVA==","pkt_caplen":94,"pkt_type":2048,"pkt_ipoffset":14}
+0662{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":168,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1569520470742,"flow_last_seen":1569520470776,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":44,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"zoomfr84zc.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"213.244.140.84"}}
+0463{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":27,"flow_packet_id":1,"flow_first_seen":1569520470776,"flow_last_seen":1569520470776,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":27,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":169,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGFlLAqAF11fSMVNZWAbv57BLmAAAAALAC\/\/8ncAAAAgQFtAEDAwUBAQgKJZzgpQAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":25,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":170,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADAGIyPVE5BowKgBdQG71lTDwlhoC7yJ3KASqbBbBgAAAgQFrAQCCAp7WhBHJZzgkQEDAww=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":25,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":171,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIncw8JYaYAQECwjNgAAAQEICiWc4K97WhBH","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1092{"flow_id":25,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":172,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":25,"flow_packet_id":4,"flow_first_seen":1569520470755,"flow_last_seen":1569520470787,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam104zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0407{"flow_id":26,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":173,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGI1XV9IxVwKgBdQG71lXIKlM86vs2SKASqbDi9AAAAgQFrAQCCAp4gwNrJZzgnwEDAww=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":26,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":174,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zZIyCpTPYAQECyrLwAAAQEICiWc4LJ4gwNr","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":26,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":175,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":26,"flow_packet_id":4,"flow_first_seen":1569520470769,"flow_last_seen":1569520470790,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr85zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0407{"flow_id":27,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":176,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGI1bV9IxUwKgBdQG71lYtiv8U+ewS56ASqbDdrgAAAgQFrAQCCAp8tQexJZzgpQEDAww=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":177,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BLnLYr\/FYAQECyl5QAAAQEICiWc4Lx8tQex","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1094{"flow_id":27,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":583,"pkt":"EBMx8Tl2KDc3AG3ICABFAAI5AABAAEAGFFnAqAF11fSMVNZWAbv57BLnLYr\/FYAYECz3EQAAAQEICiWc4Lx8tQexFgMBAgABAAH8AwOnhWFSZkMidqzMf2GAlFCBDInFtmdcn\/lf0Xn0vzHFbgAAusAwwCzAKMAkwBTACgClAKMAoQCfAGsAagBpAGgAOQA4ADcANgCIAIcAhgCFwBkApwBtADoAicAywC7AKsAmwA\/ABQCdAD0ANQCEwC\/AK8AnwCPAE8AJAKQAogCgAJ4AZwBAAD8APgAzADIAMQAwAJoAmQCYAJcARQBEAEMAQsAYAKYAbAA0AJsARsAxwC3AKcAlwA7ABACcADwALwCWAEEAB8ASwAgAFgATABAADcAXABvADcADAAoA\/wEAARkAAAAXABUAABJ6b29tZnI4NHpjLnpvb20udXMACwAEAwABAgAKABwAGgAXABkAHAAbABgAGgAWAA4ADQALAAwACQAKACMAAAANACAAHgYBBgIGAwUBBQIFAwQBBAIEAwMBAwIDAwIBAgICAwAPAAEBABUApQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0760{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":178,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":27,"flow_packet_id":4,"flow_first_seen":1569520470776,"flow_last_seen":1569520470801,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr84zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0396{"flow_id":24,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":179,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA08HhAADAGMrHVE5BpwKgBdQG71lPrn+6BoN5fU4AQAAv+\/AAAAQEICnh9HvolnOCk","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2336{"flow_id":24,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":180,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":24,"flow_packet_id":6,"flow_first_seen":1569520470742,"flow_last_seen":1569520470810,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam105zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2334{"flow_id":24,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":181,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXU8HpAADAGLQ\/VE5BpwKgBdQG71lPrn\/QhoN5fU4AQAAtFnAAAAQEICnh9HvolnOCkAwBHMEUCICZBrYK+GGtVSdHk3b8VHsrDm6ajQ58z1O7BdEqHCXy2AiEAn6AYWb8PmQ7IhYNbHgI4gCM37GT4YnU97JyydhHs6SgwDQYJKoZIhvcNAQELBQADggEBALm3XxvmAxG3IkUdHT+Kg3Gdme1zrqEBmMm7KerxSo04mAO+wqNE7BtmMlulaHZ9Z4syCloedM1x96JrQ3t0boruQAhnOlvnmvFBfuohu9oncLnbTmv+52y6PnzVcU36zE+9\/mBRQN8g25Xi29P9pwEzguCY+ecBRzTK6h0Sl4TFrkhzrUqGeILBakJ5CWRPYRg+OU6qgFVG7kNWeqzV1lmJl0epG3dO3baTSwN2+1BadUhLIZWqpLM\/GrxissNVMDfzR5peJgNvGg7VI37Xda5xV4mPfc+vCRUICOcuM\/U9dzPYTXUnypGEFSXOhiu1g4jB4DBHpmqaaQxhC2IlsOwABNQwggTQMIIDuKADAgECAgEHMA0GCSqGSIb3DQEBCwUAMIGDMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xMTAvBgNVBAMTKEdvIERhZGR5IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTEwNTAzMDcwMDAwWhcNMzEwNTAzMDcwMDAwWjCBtDELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALngyxDUr3a91JNi6zBkuIEIbMME2WIXji\/\/PmXPj85i5jxSHNoWRUtVq3hrY4NikM4PaWyZyBoUi0zMRTPqiNyeo68r\/oBhnXlXxM8u9D8wPF1H\/JoWvMM3lkFRjhFLVPgovtCMvvAwOB7zsCb4Zkdjbd5xJkePOEdT0UYdtOPcAOpFrL28cdmqbwDb280wOnlPX0xH+B3vW8LEnWA7sbJDkdikM07qs9YnT60liqXG9NXQpq50BWRXiLVEVdQtKjo++Li96TIKApRkxBY6UPFKrud5M68MIAd\/6N8EOcJpAmxjUvp3wRvIdIfIuZMYUFQ1S2lOvDvTSS4f3MHSUvsCAwEAAaOCARowggEWMA8GA1UdEwEB\/wQFMAMBAf8wDgYDVR0PAQH\/BAQDAgEGMB0GA1UdDgQWBBRAwr0njsw0gzCiM9f7bLPwtCyAzjAfBgNVHSMEGDAWgBQ6moUHEGcotu\/2vQVBbiDBlNoP3jA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkcm9vdC1nMi5jcmwwRgYDVR0gBD8wPTA7BgRVHSAAMDMwMQYIKwYBBQUHAgEWJWh0dHBzOi8vY2VydHMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAh+bJMQyDi4lqmQS\/+hX08E72w+nIgGyVCPpnP3VzEbvrzkL9v4utNb4LTn5nliDgyi12pjczG19ahIpDsILaJdkNe0fCVPEVYwxLZEnXssneVe5u8MYaq\/5Cob7oSeuIN9wUPORKcTcA2R","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":24,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":182,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l9T65\/5wYAQD9Pj1AAAAQEICiWc4MR4fR76","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2047{"flow_id":24,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":183,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":24,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":184,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l9T65\/+gYAQD9rfDQAAAQEICiWc4MR4fR76","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":26,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":185,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0UEJAADMG0xrV9IxVwKgBdQG71lXIKlM96vs4TYAQAAu5NgAAAQEICniDA4AlnOCy","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":26,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":186,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":26,"flow_packet_id":6,"flow_first_seen":1569520470769,"flow_last_seen":1569520470814,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr85zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2333{"flow_id":26,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":187,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":26,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":188,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zhNyCpefYAQD9KeGAAAAQEICiWc4Mh4gwOB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2046{"flow_id":26,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":189,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":26,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":190,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zhNyCpjPYAQD9qZUAAAAQEICiWc4Mh4gwOB","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":25,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":191,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0SA5AADAG2xzVE5BowKgBdQG71lTDwlhpC7yL4YAQAAsxMQAAAQEICntaEGglnOCv","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":24,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":192,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":24,"flow_packet_id":11,"flow_first_seen":1569520470742,"flow_last_seen":1569520470820,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam105zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0432{"flow_id":24,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":193,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":93,"pkt":"KDc3AG3IEBMx8Tl2CABFAABP8H1AADAGMpHVE5BpwKgBdQG71lProAQhoN5fU4AYAAvQwgAAAQEICnh9HwYlnOCkCOcV4LXryBg7ECQkKFJbyns9FgMDAAQOAAAA","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":24,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":194,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyrAqAF11ROQadZTAbug3l9T66AEPIAQD9LZRAAAAQEICiWc4M54fR8G","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":25,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":195,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":25,"flow_packet_id":6,"flow_first_seen":1569520470755,"flow_last_seen":1569520470822,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam104zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2332{"flow_id":25,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":196,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":25,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":197,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JjqYAQD9IWCgAAAQEICiWc4M97WhBo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2046{"flow_id":25,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":198,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":25,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":199,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JoaYAQD6wRcAAAAQEICiWc4M97WhBo","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":26,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUUEZAADMGzXbV9IxVwKgBdQG71lXIKmM96vs4TYAQAAvWbAAAAQEICniDA4olnOCyhA+9V3CzWukfoIZTu+98\/2kL4EjDt5MLyApUxKxdFGc3bMqlLzEIN6pub4y8m+JXXSSBr5eXnIStbKw3TGbzYZERIOS+MJ96pCkJsOE0X2R3GEBR34wwpq8ABAQwggQAMIIC6KADAgECAgEAMA0GCSqGSIb3DQEBBQUAMGMxCzAJBgNVBAYTAlVTMSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdvIERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwNjI5MTcwNjIwWhcNMzQwNjI5MTcwNjIwWjBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEA3p3X6lcYSaFb69dfSIbqvt3\/5O9nHPRlaLNXcaBed7vtm0npcIA9VhhjCG\/a8szQP38CVCJUENiygdTAdT1Lf8d3wz54qxoDtSBrL2orscWIfsS7HrDB2EUnb6o3WPeHJtfYLfapF7cfcjZOphc\/ZZiS2ypuXaL+iOAL3n\/ljRXh68s61eISohMt2I6vXxI9oAgFCLZcpWU4BEWZHqNgYHTFQaVyYhtixR9vXxpCvgJRZaiuIxhq\/HgDqU1\/gMP6q1r8oUCkyhkW\/rLI715zDe53vZr2eZi8sQdnohUN3aBYxkR7Cj5iKF+6QQdTWM8Rfjh0xfj\/tWmQj4R06pcbrwIBA6OBwDCBvTAdBgNVHQ4EFgQU0sSw0pHUTBFxs2HLPaH+3ahq1OMwgY0GA1UdIwSBhTCBgoAU0sSw0pHUTBFxs2HLPaH+3ahq1OOhZ6RlMGMxCzAJBgNVBAYTAlVTMSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdvIERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCAQAwDAYDVR0TBAUwAwEB\/zANBgkqhkiG9w0BAQUFAAOCAQEAMkvzsso+kfwSxqEHjI53oDMGFFyQHhj3CKY9Chn5h4ARbmnklhcw\/zSRY3I47swcAaMdlCikMfZ6xFTX9uUxWAOizM5i25RFc7W\/RckktdWCAq0jeWmNuLZNzs9MyjMj6ByIqp2LQW4WySDliZ7NO9pw936ZJiAUVCWrbnOF5pshnQpsgg6o+MIM+hAebJbvhw3ED2GLre6DK5X4jpKEcjnrIOqD7YPNl24IvOtOJrZzK+TT9kz+JnHiYRF0Sv9XGocPdUguz1FpF6ACEmGV1dFAshBM7sSsEEOmpZ4K1ZVimg3PiILFMgzkK59F5g2fKJyxuSpaV603D68df9u9nxYDAwFNDAABSQMAF0EEssQWqaKUCLZtBO06gLRpO81eoXzv046cvGa\/AEOknXhgdhB6KQ43TFEHxzvaNMUJxHfj1819WT4ZuulUCc917gYBAQCU5IOxfp9zgODP7nVlPQ89ZtndcWd7O\/q+m4sw7LjYdI5U9FW5Uy\/bi8JfjLoFzl3cauw3JSn+KUOFKpRLlsFAN4egm3WfxDHfAa2IhQ2EpjaSD\/izQIo6pZFYzprveYSkRGVKh2Yr3\/z3fe5gkhvI4pNN9VplmJFzJqLxySsBlqr47N9YTNTO60cv9bVxAlbR2sPiQs8SwjP1gwcjMUblGdqI374OrYnqicsiTeqpVOds6hUrFV3tb8PnVms1Al5uMMyCzKvPp3GV+QAIMFRUjXSRr+mOAVb2tm3W4wni1cEioxDo+62VbbdPP4\/b","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":200,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":26,"flow_packet_id":11,"flow_first_seen":1569520470769,"flow_last_seen":1569520470822,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr85zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0432{"flow_id":26,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":201,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":93,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPUEdAADMG0vrV9IxVwKgBdQG71lXIKmjd6vs4TYAYAAvT3AAAAQEICniDA4olnOCy2n6APecxq67HquzeAJkvreAOFgMDAAQOAAAA","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":26,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":202,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl3AqAF11fSMVdZVAbvq+zhNyCpo+IAQD9KTjQAAAQEICiWc4M94gwOK","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":27,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":203,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0+NxAADMGKoHV9IxUwKgBdQG71lYtiv8V+ewU7IAQAAuz6AAAAQEICny1B8olnOC8","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":27,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0816{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":204,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":27,"flow_packet_id":6,"flow_first_seen":1569520470776,"flow_last_seen":1569520470828,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr84zc.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2333{"flow_id":27,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":205,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":27,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":206,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsKVYAQD9KYyAAAAQEICiWc4NR8tQfL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2046{"flow_id":27,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":207,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":208,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsPFYAQD6yULgAAAQEICiWc4NR8tQfL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2341{"flow_id":25,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":209,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":25,"flow_packet_id":11,"flow_first_seen":1569520470755,"flow_last_seen":1569520470829,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomam104zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0432{"flow_id":25,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":210,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":93,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPSBNAADAG2vzVE5BowKgBdQG71lTDwm4JC7yL4YAYAAs9VwAAAQEICntaEHElnOCvncahV8EAPshmfgMSZSfWkdzLFgMDAAQOAAAA","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":25,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":211,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JuJIAQD34L1AAAAQEICiWc4NV7WhBx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2337{"flow_id":27,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1140{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":212,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":27,"flow_packet_id":11,"flow_first_seen":1569520470776,"flow_last_seen":1569520470837,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfr84zc.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0434{"flow_id":27,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":213,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":93,"pkt":"KDc3AG3IEBMx8Tl2CABFAABP+OFAADMGKmHV9IxUwKgBdQG71lYtixS1+ewU7IAYAAuc\/QAAAQEICny1B9QlnOC8CtdULUh+e0X55Wul2j7\/doIDFgMDAAQOAAAA","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":27,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":214,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsU0IAQD36OkAAAAQEICiWc4Nx8tQfU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":24,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":215,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGEqzAqAF11ROQadZTAbug3l9T66AEPIAYEADXOQAAAQEICiWc4R14fR8GFgMDAEYQAABCQQQjFTtfeXfZ+xlKLBfs9\/\/kFVjml5SlVDGXd34XCK2yeoWhqRwshK5Y5yfL1y+ka87m\/rD3I5aKBQr3P4H2FlBzFAMDAAEBFgMDACi6ncZnXwNZcYigwDSNW14JtYIvvzJ37vA0nhow4iznzC1E4rHsKIVM","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":25,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":216,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGEyvAqAF11ROQaNZUAbsLvIvhw8JuJIAQD\/ULFQAAAQEICiWc4R17WhBx","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_id":24,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":217,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":308,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEm8H5AADAGMbnVE5BpwKgBdQG71lProAQ8oN5f0YAYAAs3EAAAAQEICnh9H3wlnOEdFgMDALoEAAC2AAABLACw1eD0CE4LJGrd+NqxB07T5Oka1nt5kmX9TTAeRjxRIEpFeIkRDNHIlgAsOqI9CAcRe+MwHbZmHCcpKpzrgz9QKcbxJrcxXrlTkN4GOB2saNcJ29UTw0tdLL1hJCid5cjGEiH9\/gQ0YGtMdodz\/xVaEfZQEF5mSsMxRDi0gcSY8vS16dIiiTuounKQltG5aopyiMX7zWesqWfVHciiZ3WlivL+gMBfRjEvxOZPhYcRh80UAwMAAQEWAwMAKGMRmQ0o81+8h\/4RLoNR7V2NPYY+EfLjPgVZUWfslEoc3T6m1vMdS70=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0570{"flow_id":25,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":219,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520470,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGEq3AqAF11ROQaNZUAbsLvIvhw8JuJIAYEABGlQAAAQEICiWc4Vd7WhBxFgMDAEYQAABCQQRHXoc6ZwOc2tFEEQ2Bcz5YEzm2XDTa7hp\/\/rZS\/ABcMV7Nhj0sC9ttqmu16VX1dgAOkvs\/FGjAA2JYfw35u3dXFAMDAAEBFgMDACi4MuNcA3n7e+61YjqZQjE3UQWTtoD30hCTHeqa+vPQoqEFKVx5qHLB","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0571{"flow_id":26,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":222,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGFd\/AqAF11fSMVdZVAbvq+zhNyCpo+IAYEAA3twAAAQEICiWc4ZF4gwOKFgMDAEYQAABCQQRVun8uJBzyDsPb\/X4u6k\/uQy9u3wF\/AO4vo05f8vjaBg2FFtZcxtNyTZ\/He1Tlde5PGHUpXteiE1GDCss4M1TcFAMDAAEBFgMDACiR0zlQOsVHgVAUJx+EIxl5sI1kMeQdSAy4IHcJex2h5ywIbfwItEiZ","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0397{"flow_id":27,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":223,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGFl7AqAF11fSMVNZWAbv57BTsLYsU0IAQD\/WNZAAAAQEICiWc4ZF8tQfU","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0725{"flow_id":26,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":224,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":308,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEmUEhAADMG0iLV9IxVwKgBdQG71lXIKmj46vs4y4AYAAuoEQAAAQEICniDBGslnOGRFgMDALoEAAC2AAABLACwIQWRyQj7cbwjkmUGLjQJrOY3GiisfRojjJK+mUbGLElkoMIbxJcXDVf2BC2tJkJf8L7+y2uMWVdoJxXE4bVnX56RLftNs7D2e3USIQt1Iu55piOgmOX6rUMQ\/Jn0MoPD1nw3Z17k390STDlScrHWzg6l+6NAPdhLI693QAVAnUaL17qCU7YjY8Ry4WtMuzQ3IxH2tFP7EAdQuYalfbKc8rP3NDI3mv+9z0ZYiCBAjycUAwMAAQEWAwMAKDPqSSLa4ONWdQa17BbVeYje8qpHk1\/G\/pQuf3ZBgtfrfIG9CC0q5ZU=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0567{"flow_id":27,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":226,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGFeDAqAF11fSMVNZWAbv57BTsLYsU0IAYEABOhAAAAQEICiWc4ct8tQfUFgMDAEYQAABCQQSzzEWHScT0+dStfBhaz6gsEBo4pbGRd+yl5EU1zWGDTKevZgJkyfuF6XRpt2LgG7QGvGv0qRuMCQlwC8Hxst3MFAMDAAEBFgMDAChfiaRfvLq8Qvu5te\/Q4JeCgrlTIoFRRpUNP5p25B5qXve70ZGG4fNI","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0459{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1569520471147,"flow_last_seen":1569520471147,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp"}
+0415{"flow_id":28,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":80,"pkt":"EBMx8Tl2KDc3AG3ICABFAABCtGEAAP8Rg4LAqAF1wKgBAcfxADUALsLBHCQBAAABAAAAAAAADHpvb21mcm45OW1tcgR6b29tAnVzAAABAAE=","pkt_caplen":80,"pkt_type":2048,"pkt_ipoffset":14}
+0648{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":257,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":28,"flow_packet_id":1,"flow_first_seen":1569520471147,"flow_last_seen":1569520471147,"flow_tot_l4_data_len":46,"flow_min_l4_data_len":46,"flow_max_l4_data_len":46,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"zoomfrn99mmr.zoom.us","num_queries":0,"num_answers":0,"reply_code":0,"query_type":1,"rsp_type":0,"rsp_addr":"0.0.0.0"}}
+0436{"flow_id":28,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":96,"pkt":"KDc3AG3IEBMx8Tl2CABFAABSclkAADcRjXvAqAEBwKgBdQA1x\/EAPsuKHCSBgAABAAEAAAAADHpvb21mcm45OW1tcgR6b29tAnVzAAABAAHADAABAAEAAKjAAARtXqBj","pkt_caplen":96,"pkt_type":2048,"pkt_ipoffset":14}
+0663{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":280,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1569520471147,"flow_last_seen":1569520471188,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":46,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp","ndpi": {"proto":"DNS.Zoom","category":"Video"},"dns": {"query":"zoomfrn99mmr.zoom.us","num_queries":1,"num_answers":1,"reply_code":0,"query_type":1,"rsp_type":1,"rsp_addr":"109.94.160.99"}}
+0462{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":29,"flow_packet_id":1,"flow_first_seen":1569520471189,"flow_last_seen":1569520471189,"flow_tot_l4_data_len":44,"flow_min_l4_data_len":44,"flow_max_l4_data_len":44,"flow_avg_l4_data_len":44,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp"}
+0413{"flow_id":29,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":281,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":78,"pkt":"EBMx8Tl2KDc3AG3ICABFAABAAABAAEAGatnAqAF1bV6gY9ZXAbsw+fmWAAAAALAC\/\/9csgAAAgQFtAEDAwUBAQgKJZziLAAAAAAEAgAA","pkt_caplen":78,"pkt_type":2048,"pkt_ipoffset":14}
+0407{"flow_id":29,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":282,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":74,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA8AABAADMGd91tXqBjwKgBdQG71leHhddzMPn5l6ASqbBjhwAAAgQFrAQCCAp2KotLJZziLAEDAww=","pkt_caplen":74,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":29,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":283,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fmXh4XXdIAQECwrtgAAAQEICiWc4kt2KotL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+1093{"flow_id":29,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":583,"pkt":"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","pkt_caplen":583,"pkt_type":2048,"pkt_ipoffset":14}
+0761{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":284,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":29,"flow_packet_id":4,"flow_first_seen":1569520471189,"flow_last_seen":1569520471221,"flow_tot_l4_data_len":665,"flow_min_l4_data_len":32,"flow_max_l4_data_len":549,"flow_avg_l4_data_len":166,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfrn99mmr.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"","unsafe_cipher":0,"cipher":"TLS_NULL_WITH_NULL_NULL"}}
+0395{"flow_id":29,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":285,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA0XB9AADMGG8ZtXqBjwKgBdQG71leHhdd0MPn7nIAQAAs5sQAAAQEICnYqi2wlnOJL","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2335{"flow_id":29,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1506,"pkt":"KDc3AG3IEBMx8Tl2CABFAAXUXCBAADMGFiVtXqBjwKgBdQG71leHhdd0MPn7nIAQAAuBEAAAAQEICnYqi2wlnOJLFgMDAEICAAA+AwMFa6ivl1HZr2MajwKuXXOxKEOmYN9JsHYRK2dz0KRtRgDALwAAFv8BAAEAAAsABAMAAQIAIwAAAA8AAQEWAwMUFAsAFBAAFA0ABqgwggakMIIFjKADAgECAgkAuAr5aaJJsgcwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTkwMzI1MTkzODQyWhcNMjEwMzI1MTkzODQyWjA3MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxEjAQBgNVBAMMCSouem9vbS51czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALaxfGmkVOyU0AkAAY7kCiG99jBGIh+VdDOgabIxgZ7wT8ILDqU2MftFgTalkBtnlix1nB\/A23lZT3vWYLmdiArSXVZkjjpjHARBVVYAUir7OAher\/0qd4RZHsRK0bdRd40NdKuLb6he5TPeCPCo8mDuK41gZM9CkQPeJav\/RaowvfOtYiwp3Pt5JvpmmLCPkYu++RhH8LKfsuAhqv9m2xv6wau3C0G\/6Ce0z3s3aPbA6HK2Vctbrn12ZNiektUI25iSiJW21\/fYcY723x0hBp7tRPZNdMSHZ3e4QkzjXfUGyEK\/6tGaySEj+yvSYd5DUN0izEz+KBtCx95g0jp0b9MCAwEAAaOCAzMwggMvMAwGA1UdEwEB\/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB\/wQEAwIFoDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtMTAxMS5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjAdBgNVHREEFjAUggkqLnpvb20udXOCB3pvb20udXMwHQYDVR0OBBYEFK\/\/A+eqHnVNBj7T3SSRE7i2ztfYMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWm2XMJ0AAAEAwBHMEUCIGBxi3tQD8E7\/i5SW3PuSOWOtMDrbmlOuAQU+VSegUXXAiEAt51T+DldjWi8Ekq43+cZhUTmCceC5bgqC3HWUayeaD4AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWm2XMTxAAAEAwBHMEUCICiEIvES2m58Hqrdk1z6D\/VDBAWPZ6\/7XLmd4JXWkmvGAiEArZspf5lv\/3TS1cYqMEKKiFMPCaUjl39XIpCCbPMANBQAdgBElGUusO7Or8RAB9io\/ijA2uaCvtjLMbU\/0zOWtbaBqAAAAWm2XMe5AAAE","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+0817{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":286,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":29,"flow_packet_id":6,"flow_first_seen":1569520471189,"flow_last_seen":1569520471255,"flow_tot_l4_data_len":2169,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":361,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfrn99mmr.zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}}
+2332{"flow_id":29,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":287,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+2046{"flow_id":29,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":288,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1282,"pkt":"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","pkt_caplen":1282,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":29,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":289,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fuch4XitIAQD9IeiQAAAQEICiWc4mx2Kots","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":29,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":290,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fuch4XndIAQD6wZ7wAAAQEICiWc4mx2Kots","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+2338{"flow_id":29,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1506,"pkt":"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","pkt_caplen":1506,"pkt_type":2048,"pkt_ipoffset":14}
+1141{"flow_event_id":6,"flow_event_name":"detection-update","thread_id":0,"packet_id":291,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":29,"flow_packet_id":11,"flow_first_seen":1569520471189,"flow_last_seen":1569520471266,"flow_tot_l4_data_len":6425,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":584,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp","ndpi": {"flow_risk": {"15":"TLS (probably) not carrying HTTPS"},"proto":"TLS.Zoom","category":"Video"},"tls": {"version":"TLSv1.2","client_requested_server_name":"zoomfrn99mmr.zoom.us","server_names":"*.zoom.us,zoom.us","ja3":"c51de225944b7d58d48c0f99f86ba8e6","ja3s":"ada793d0f02b028a6c840504edccb652","unsafe_cipher":0,"cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","issuerDN":"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2","issuerDN":"OU=Domain Control Validated, CN=*.zoom.us","fingerprint":"F7:5A:83:A8:77:24:55:D7:6D:2E:93:F6:6E:9C:C9:7E:AD:9B:3B:E8"}}
+0433{"flow_id":29,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":292,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":93,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPXCRAADMGG6ZtXqBjwKgBdQG71leHhe0UMPn7nIAYAAtG1QAAAQEICnYqi3glnOJLaASPvDkBGJNXRyrXQW4fGpP\/FgMDAAQOAAAA","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0396{"flow_id":29,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":293,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAGauXAqAF1bV6gY9ZXAbsw+fuch4XtL4AQD9IT+AAAAQEICiWc4nZ2Kot4","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0569{"flow_id":29,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":294,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":192,"pkt":"EBMx8Tl2KDc3AG3ICABFAACyAABAAEAGamfAqAF1bV6gY9ZXAbsw+fuch4XtL4AYEACCygAAAQEICiWc4rF2Kot4FgMDAEYQAABCQQRtav\/youPvgbMOlTZbWhUadWdUc+khBzAxAYSh3\/4dLY8RzQm5gkl6qO1dhX1BgVTSfaxSQ0BKOCoY0mCnuio3FAMDAAEBFgMDACjfvjFi5KkllBvI+7Cp0Qv2O3oblZ+\/LJqwiPwy2zDRLfDFXQYDFeAn","pkt_caplen":192,"pkt_type":2048,"pkt_ipoffset":14}
+0729{"flow_id":29,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":295,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":308,"pkt":"KDc3AG3IEBMx8Tl2CABFAAEmXCVAADMGGs5tXqBjwKgBdQG71leHhe0vMPn8GoAYAAsyOAAAAQEICnYqi9clnOKxFgMDALoEAAC2AAABLACwxplF9Sei6R2h3tTFeKOp7c9tdQl7nXXCwIHwrGo\/y0oteE8idUPXzo9bsy4vEsH\/m4TyihiEe3qDYDX9XfPP\/ZZJbAnGIAUGmhmYYdnLA+YthN\/o5KBly1\/1Oqs25vUZuW0ylT\/bkX5tsjJKq0WHOCdtlxsHIoT2SJ\/e8cb3I4W9Xu0U2j3+YRXeHoucHIkOHH2lloauWWiPB6EvelDyZvQQjxWNd4Ytj+kLg5ODA9wUAwMAAQEWAwMAKD+2VqxYlb5tVmjWIfcJNJolo2XDt5QIiPLNdypN0P5OJQBRp7xBjVE=","pkt_caplen":308,"pkt_type":2048,"pkt_ipoffset":14}
+0464{"flow_id":3,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":302,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":113,"pkt":"EBMx8Tl2KDc3AG3ICABFAABjAABAAEAGoUnAqAF1PpWYmdRFA+E5lpAkp\/QQcoAYEAA2VgAAAQEICiWc4viZh0dJFwMDACpAXTQxH2s8yyXvpDmREm16+\/VcNt\/x\/vlsIce1k7D8R+clMelpc+AJPCA=","pkt_caplen":113,"pkt_type":2048,"pkt_ipoffset":14}
+0440{"flow_id":2,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":306,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":97,"pkt":"KDc3AG3IEBMx8Tl2CABFAABT5\/tAADUGHISnY9ekwKgBdRFS1k9+iDuqPj2JOYAYAQYOmQAAAQEICuHrh+ElnNAzFQMDABrdq1+2sZ7sanRDYUrN1AonZ6sa5xFE+MfQlg==","pkt_caplen":97,"pkt_type":2048,"pkt_ipoffset":14}
+0395{"flow_id":2,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":307,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":66,"pkt":"EBMx8Tl2KDc3AG3ICABFAAA0AABAAEAG+Z7AqAF1p2PXpNZPEVI+PYk5fog7yYAQEABJRQAAAQEICiWc437h64fh","pkt_caplen":66,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569520471748,"flow_last_seen":1569520471748,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":58327,"dst_port":8801,"l4_proto":"udp"}
+0512{"flow_id":30,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":149,"pkt":"EBMx8Tl2KDc3AG3ICABFAACHYY4AAEARSPnAqAF1bV6gY+PXImEAcwEfAQACfUZNNf\/9ojRJXQ1tO1HolgAAAAAAAAACAHoAKgB6ACoAAABADhc935YCXvuVxCQMI1O\/y\/Bgvpncu9jEece5cy1sdfpDYvCDXrg+TanGp+bzCbMeQN8Pa7V1aoQPcx2bwfanLQAAAAA=","pkt_caplen":149,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":386,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":30,"flow_packet_id":1,"flow_first_seen":1569520471748,"flow_last_seen":1569520471748,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":58327,"dst_port":8801,"l4_proto":"udp","ndpi": {"proto":"Zoom","category":"Video"}}
+0413{"flow_id":30,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":395,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":77,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/ukJAADURu4xtXqBjwKgBdSJh49cAK4mJAgABfUZNNf\/9ojRJXQ1tO1HolgBaDj4AegAqAAAAAAAAAAA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":30,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":396,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApukNAADURu6FtXqBjwKgBdSJh49cAFe6ZAwAAAAF2Ko10AFoOPgAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0383{"flow_id":30,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":397,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":55,"pkt":"EBMx8Tl2KDc3AG3ICABFAAApkdQAAEARGRHAqAF1bV6gY+PXImEAFe2ZBAAAAAF2Ko10AFoOPg==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0342{"packet_event_id":1,"packet_event_name":"packet","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":60,"pkt":"\/\/\/\/\/\/\/\/2A0X1lWriJklgAAA2A0X1lWrAACAAADYDRfWVauACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":34969,"pkt_ipoffset":14}
+0173{"basic_event_id":5,"basic_event_name":"Unknown Ethernet packet type","thread_id":0,"packet_id":398,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","type":34969}
+0449{"flow_id":30,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":399,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":105,"pkt":"EBMx8Tl2KDc3AG3ICABFAABbLTIAAEARfYHAqAF1bV6gY+PXImEAR1KdBQwBIY6cOSjESy+pAnBygi5W9gEABAEDAAAAAAAAAAEAAAAWZGF0YV9iaW5kX3JlcGxhY2VfZmxhZwIAAAAB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":30,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":400,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":85,"pkt":"KDc3AG3IEBMx8Tl2CABFAABHulhAADURu25tXqBjwKgBdSJh49cAM1xgBQ0BIY6cOSjESy+pAnBygi5W9gEABAEDAAAAAAEAAAADcmlkAwAAAAAAAA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+1739{"flow_id":30,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":404,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhumVAADURt4dtXqBjwKgBdSJh49cEDfjbBRUBAAAAAAAAADMBDf8AAHYqjaYAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1739{"flow_id":30,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":405,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhum9AADURt31tXqBjwKgBdSJh49cEDfjQBRUBAAAAAAAAADMBDf8AAXYqjbAAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1739{"flow_id":30,"flow_packet_id":9,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":406,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhunhAADURt3RtXqBjwKgBdSJh49cEDfjFBRUBAAAAAAAAADMBDf8AAnYqjboAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1740{"flow_id":30,"flow_packet_id":10,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":407,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuntAADURt3FtXqBjwKgBdSJh49cEDfi6BRUBAAAAAAAAADMBDf8AA3YqjcQAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1740{"flow_id":30,"flow_packet_id":11,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":408,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhunxAADURt3BtXqBjwKgBdSJh49cEDQLEBRUBAAAAAAAAADMBDf8ABHYqjcQAAAAD6AAAAAACAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1740{"flow_id":30,"flow_packet_id":12,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":409,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuoBAADURt2xtXqBjwKgBdSJh49cEDfiuBRUBAAAAAAAAADMBDf8ABXYqjc4AAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1740{"flow_id":30,"flow_packet_id":13,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":410,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuodAADURt2VtXqBjwKgBdSJh49cEDfijBRUBAAAAAAAAADMBDf8ABnYqjdgAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1740{"flow_id":30,"flow_packet_id":14,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":412,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhuoxAADURt2BtXqBjwKgBdSJh49cEDfiYBRUBAAAAAAAAADMBDf8AB3YqjeIAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+1740{"flow_id":30,"flow_packet_id":15,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":415,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":1071,"pkt":"KDc3AG3IEBMx8Tl2CABFAAQhupNAADURt1ltXqBjwKgBdSJh49cEDfiNBRUBAAAAAAAAADMBDf8ACHYqjewAAAAD6AAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB","pkt_caplen":1071,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569520471915,"flow_last_seen":1569520471915,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":60620,"dst_port":8801,"l4_proto":"udp"}
+0510{"flow_id":31,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":149,"pkt":"EBMx8Tl2KDc3AG3ICABFAACHOsEAAEARb8bAqAF1bV6gY+zMImEAcx+TAQACgEJ0mpHOZDa3wq7Yfnt8kAAAAAAAAAACAHoA0QB6ANEAAABAz+pIvn76v2yDYA2gAvW2g1TH36+BBcgmmBwGC4A2voI37csLDeuB1cbZ5dS3SDby7ZAjUH7\/6+f4krtKebNFkQAAAAA=","pkt_caplen":149,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":425,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":31,"flow_packet_id":1,"flow_first_seen":1569520471915,"flow_last_seen":1569520471915,"flow_tot_l4_data_len":115,"flow_min_l4_data_len":115,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":115,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":60620,"dst_port":8801,"l4_proto":"udp","ndpi": {"proto":"Zoom","category":"Video"}}
+0412{"flow_id":31,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":442,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":77,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/uqdAADURuydtXqBjwKgBdSJh7MwAK7AuAgABgEJ0mpHOZDa3wq7Yfnt8kABaDj8AegDRAAAAAAAAAAA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":31,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":443,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApuqhAADURuzxtXqBjwKgBdSJh7MwAFUSkAwAAAAF2Ko4UAFoOPwAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":31,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":444,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":55,"pkt":"EBMx8Tl2KDc3AG3ICABFAAAp\/q0AAEARrDfAqAF1bV6gY+zMImEAFUOkBAAAAAF2Ko4UAFoOPw==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0449{"flow_id":31,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":449,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":105,"pkt":"EBMx8Tl2KDc3AG3ICABFAABbUt8AAEARV9TAqAF1bV6gY+zMImEAR0iqBQwBIY6cOSjESy+pAnBygi5W9gEABAIBAAAAAAAAAAEAAAAWZGF0YV9iaW5kX3JlcGxhY2VfZmxhZwIAAAAB","pkt_caplen":105,"pkt_type":2048,"pkt_ipoffset":14}
+0423{"flow_id":31,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":459,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520471,"pkt_len":85,"pkt":"KDc3AG3IEBMx8Tl2CABFAABHusVAADURuwFtXqBjwKgBdSJh7MwAM1JtBQ0BIY6cOSjESy+pAnBygi5W9gEABAIBAAAAAAEAAAADcmlkAwAAAAAAAA==","pkt_caplen":85,"pkt_type":2048,"pkt_ipoffset":14}
+0667{"flow_id":0,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":539,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520472,"pkt_len":265,"pkt":"EBMx8Tl2KDc3AG3ICABFAAD7AABAAEAGtb7AqAF1rNkVSNZGAbt9MLg2pduNV4AYEAjCmAAAAQEICiWc50xwmChtFgMBAMIBAAC+AwE5BEH329R9hgOe6JDNh5Do5\/IyBg\/qLeMPj9mOGNz+swAAEgAvADMANQA5wAnACsATwBRWAAEAAIP\/AQABAAAAAB0AGwAAGHd3dy5nb29nbGV0YWdtYW5hZ2VyLmNvbQAXAAAABQAFAQAAAAAzdAAAABIAAAAQADAALgJoMgVoMi0xNgVoMi0xNQVoMi0xNAhzcGR5LzMuMQZzcGR5LzMIaHR0cC8xLjEACwACAQAACgAKAAgAHQAXABgAGQ==","pkt_caplen":265,"pkt_type":2048,"pkt_ipoffset":14}
+0467{"flow_event_id":1,"flow_event_name":"new","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569520473084,"flow_last_seen":1569520473084,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":61731,"dst_port":8801,"l4_proto":"udp"}
+0520{"flow_id":32,"flow_packet_id":1,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":151,"pkt":"EBMx8Tl2KDc3AG3ICABFAACJ4\/YAAEARxo7AqAF1bV6gY\/EjImEAde5DAQACOkSxT2rBSy0CI5EJ7ghSoQAAAAAAAAACAHoFYgB6BWIAAABAyr1YPP8KZ34wUqB9PR5Zle\/sBvgfAfGBqNzDFPjrnryOYaOvAtAdhsk5Sd978V5OWjrnwByNSAVBXX+sDOwgiv\/\/\/\/8KAA==","pkt_caplen":151,"pkt_type":2048,"pkt_ipoffset":14}
+0516{"flow_event_id":5,"flow_event_name":"detected","thread_id":0,"packet_id":651,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":32,"flow_packet_id":1,"flow_first_seen":1569520473084,"flow_last_seen":1569520473084,"flow_tot_l4_data_len":117,"flow_min_l4_data_len":117,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":117,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":61731,"dst_port":8801,"l4_proto":"udp","ndpi": {"proto":"Zoom","category":"Video"}}
+0412{"flow_id":32,"flow_packet_id":2,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":670,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":77,"pkt":"KDc3AG3IEBMx8Tl2CABFAAA\/vWBAADURuG5tXqBjwKgBdSJh8SMAK0WqAgABOkSxT2rBSy0CI5EJ7ghSoQBaDkQAegViAAAAAAAAAAA=","pkt_caplen":77,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":32,"flow_packet_id":3,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":671,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAApvWFAADURuINtXqBjwKgBdSJh8SMAFalIAwAAAAF2KpKmAFoORAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":32,"flow_packet_id":4,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":672,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":55,"pkt":"EBMx8Tl2KDc3AG3ICABFAAApU1gAAEARV43AqAF1bV6gY\/EjImEAFahIBAAAAAF2KpKmAFoORA==","pkt_caplen":55,"pkt_type":2048,"pkt_ipoffset":14}
+0458{"flow_id":32,"flow_packet_id":5,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":677,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":109,"pkt":"EBMx8Tl2KDc3AG3ICABFAABfDmwAAEARnEPAqAF1bV6gY\/EjImEAS0M9BQ0AAAAMASGOnDkoxEsvqQJwcoIuVvYBAAQDAgAAAAAAAAABAAAAFmRhdGFfYmluZF9yZXBsYWNlX2ZsYWcCAAAAAQ==","pkt_caplen":109,"pkt_type":2048,"pkt_ipoffset":14}
+0431{"flow_id":32,"flow_packet_id":6,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":686,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":93,"pkt":"KDc3AG3IEBMx8Tl2CABFAABPvXlAADURuEVtXqBjwKgBdSJh8SMAO0r4BQ0AAAIAAAAADQEhjpw5KMRLL6kCcHKCLlb2AQAEAwIAAAAAAQAAAANyaWQDAAAAAAAA","pkt_caplen":93,"pkt_type":2048,"pkt_ipoffset":14}
+0439{"flow_id":31,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":689,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":99,"pkt":"EBMx8Tl2KDc3AG3ICABFAABV25wAAEARzxzAqAF1bV6gY+zMImEAQdYuBSIBAPuQCRAAAAAAAAAAAACAyAAGAQAEAuE3edfn7BLaAAAJEAAAAAUAAAC1gcoAAgEABAIBAAAA","pkt_caplen":99,"pkt_type":2048,"pkt_ipoffset":14}
+0384{"flow_id":32,"flow_packet_id":7,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":693,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":57,"pkt":"EBMx8Tl2KDc3AG3ICABFAAArmBYAAEAREs3AqAF1bV6gY\/EjImEAFxFSBQoGAAAAAAAAAAAAAAAA","pkt_caplen":57,"pkt_type":2048,"pkt_ipoffset":14}
+0387{"flow_id":32,"flow_packet_id":8,"max_packets":15,"packet_event_id":2,"packet_event_name":"packet-flow","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","pkt_oversize":false,"pkt_ts":1569520473,"pkt_len":60,"pkt":"KDc3AG3IEBMx8Tl2CABFAAArvZdAADURuEttXqBjwKgBdSJh8SMAFxFSBQoGAAAAAAAAAAAAAAAAAAAA","pkt_caplen":60,"pkt_type":2048,"pkt_ipoffset":14}
+0432{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":16,"flow_packet_id":2,"flow_first_seen":1569520469423,"flow_last_seen":1569520469433,"flow_tot_l4_data_len":72,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","l4_proto":"icmp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":8,"flow_packet_id":2,"flow_first_seen":1569520469036,"flow_last_seen":1569520469072,"flow_tot_l4_data_len":137,"flow_min_l4_data_len":31,"flow_max_l4_data_len":106,"flow_avg_l4_data_len":68,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":65394,"dst_port":53,"l4_proto":"udp"}
+0463{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":17,"flow_packet_id":1,"flow_first_seen":1569520469797,"flow_last_seen":1569520469797,"flow_tot_l4_data_len":287,"flow_min_l4_data_len":287,"flow_max_l4_data_len":287,"flow_avg_l4_data_len":287,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.0.1","dst_ip":"255.255.255.255","src_port":68,"dst_port":67,"l4_proto":"udp"}
+0429{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":9,"flow_packet_id":1,"flow_first_seen":1569520469072,"flow_last_seen":1569520469072,"flow_tot_l4_data_len":36,"flow_min_l4_data_len":36,"flow_max_l4_data_len":36,"flow_avg_l4_data_len":36,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","l4_proto":"icmp"}
+0507{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1569520469081,"flow_last_seen":1569520469116,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"13.225.84.182","src_port":54798,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS","category":"Web"}}
+0462{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":10,"flow_packet_id":2,"flow_first_seen":1569520469081,"flow_last_seen":1569520469116,"flow_tot_l4_data_len":40,"flow_min_l4_data_len":20,"flow_max_l4_data_len":20,"flow_avg_l4_data_len":20,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"13.225.84.182","src_port":54798,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":28,"flow_packet_id":2,"flow_first_seen":1569520471147,"flow_last_seen":1569520471188,"flow_tot_l4_data_len":108,"flow_min_l4_data_len":46,"flow_max_l4_data_len":62,"flow_avg_l4_data_len":54,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":51185,"dst_port":53,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":0,"flow_packet_id":4,"flow_first_seen":1569520466080,"flow_last_seen":1569520472536,"flow_tot_l4_data_len":924,"flow_min_l4_data_len":231,"flow_max_l4_data_len":231,"flow_avg_l4_data_len":231,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"172.217.21.72","src_port":54854,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":5,"flow_packet_id":3,"flow_first_seen":1569520468399,"flow_last_seen":1569520468399,"flow_tot_l4_data_len":228,"flow_min_l4_data_len":76,"flow_max_l4_data_len":76,"flow_avg_l4_data_len":76,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":137,"dst_port":137,"l4_proto":"udp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":32,"flow_packet_id":8,"flow_first_seen":1569520473084,"flow_last_seen":1569520473198,"flow_tot_l4_data_len":382,"flow_min_l4_data_len":21,"flow_max_l4_data_len":117,"flow_avg_l4_data_len":47,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":61731,"dst_port":8801,"l4_proto":"udp"}
+0528{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1569520469340,"flow_last_seen":1569520469435,"flow_tot_l4_data_len":748,"flow_min_l4_data_len":32,"flow_max_l4_data_len":295,"flow_avg_l4_data_len":124,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"104.199.65.42","src_port":53867,"dst_port":80,"l4_proto":"tcp","ndpi": {"proto":"HTTP.Google","category":"Web"},"http": {}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":14,"flow_packet_id":6,"flow_first_seen":1569520469340,"flow_last_seen":1569520469435,"flow_tot_l4_data_len":748,"flow_min_l4_data_len":32,"flow_max_l4_data_len":295,"flow_avg_l4_data_len":124,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"104.199.65.42","src_port":53867,"dst_port":80,"l4_proto":"tcp"}
+0468{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":7,"flow_packet_id":18,"flow_first_seen":1569520468959,"flow_last_seen":1569520469430,"flow_tot_l4_data_len":7695,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":427,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.238","src_port":54864,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":18,"flow_packet_id":30,"flow_first_seen":1569520469950,"flow_last_seen":1569520470454,"flow_tot_l4_data_len":17921,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":597,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.196","src_port":54865,"dst_port":443,"l4_proto":"tcp"}
+0470{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":20,"flow_packet_id":33,"flow_first_seen":1569520470022,"flow_last_seen":1569520470628,"flow_tot_l4_data_len":20585,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":623,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"52.202.62.236","src_port":54866,"dst_port":443,"l4_proto":"tcp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1569520469221,"flow_last_seen":1569520469399,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":40,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Zoom","category":"Video"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":12,"flow_packet_id":6,"flow_first_seen":1569520469221,"flow_last_seen":1569520469399,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":40,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3478,"l4_proto":"udp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1569520469189,"flow_last_seen":1569520469375,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":40,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.37.14","src_port":23903,"dst_port":3478,"l4_proto":"udp","ndpi": {"proto":"STUN.Zoom","category":"Video"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":11,"flow_packet_id":6,"flow_first_seen":1569520469189,"flow_last_seen":1569520469375,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":40,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.37.14","src_port":23903,"dst_port":3478,"l4_proto":"udp"}
+0517{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1569520469253,"flow_last_seen":1569520469433,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":40,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3479,"l4_proto":"udp","ndpi": {"proto":"STUN.Zoom","category":"Video"}}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":13,"flow_packet_id":6,"flow_first_seen":1569520469253,"flow_last_seen":1569520469433,"flow_tot_l4_data_len":276,"flow_min_l4_data_len":40,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"162.255.38.14","src_port":23903,"dst_port":3479,"l4_proto":"udp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":1,"flow_packet_id":1,"flow_first_seen":1569520466209,"flow_last_seen":1569520466209,"flow_tot_l4_data_len":53,"flow_min_l4_data_len":53,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":53,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"224.0.0.251","src_port":5353,"dst_port":5353,"l4_proto":"udp"}
+0465{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":21,"flow_packet_id":1,"flow_first_seen":1569520470666,"flow_last_seen":1569520470666,"flow_tot_l4_data_len":52,"flow_min_l4_data_len":52,"flow_max_l4_data_len":52,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.255","src_port":57621,"dst_port":57621,"l4_proto":"udp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":2,"flow_packet_id":20,"flow_first_seen":1569520466316,"flow_last_seen":1569520471572,"flow_tot_l4_data_len":3585,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1258,"flow_avg_l4_data_len":179,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"167.99.215.164","src_port":54863,"dst_port":4434,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":23,"flow_packet_id":2,"flow_first_seen":1569520470742,"flow_last_seen":1569520470776,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":44,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":58063,"dst_port":53,"l4_proto":"udp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":24,"flow_packet_id":29,"flow_first_seen":1569520470742,"flow_last_seen":1569520471166,"flow_tot_l4_data_len":8664,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.105","src_port":54867,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":25,"flow_packet_id":30,"flow_first_seen":1569520470755,"flow_last_seen":1569520471166,"flow_tot_l4_data_len":8688,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":289,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.19.144.104","src_port":54868,"dst_port":443,"l4_proto":"tcp"}
+0459{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":6,"flow_packet_id":2,"flow_first_seen":1569520468922,"flow_last_seen":1569520468958,"flow_tot_l4_data_len":90,"flow_min_l4_data_len":37,"flow_max_l4_data_len":53,"flow_avg_l4_data_len":45,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":64352,"dst_port":53,"l4_proto":"udp"}
+0474{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":30,"flow_packet_id":185,"flow_first_seen":1569520471748,"flow_last_seen":1569520473190,"flow_tot_l4_data_len":185945,"flow_min_l4_data_len":21,"flow_max_l4_data_len":1037,"flow_avg_l4_data_len":1005,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":58327,"dst_port":8801,"l4_proto":"udp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":26,"flow_packet_id":29,"flow_first_seen":1569520470769,"flow_last_seen":1569520471156,"flow_tot_l4_data_len":8670,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":298,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.85","src_port":54869,"dst_port":443,"l4_proto":"tcp"}
+0469{"flow_event_id":2,"flow_event_name":"end","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":27,"flow_packet_id":28,"flow_first_seen":1569520470776,"flow_last_seen":1569520471159,"flow_tot_l4_data_len":7582,"flow_min_l4_data_len":20,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":270,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"213.244.140.84","src_port":54870,"dst_port":443,"l4_proto":"tcp"}
+0461{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":22,"flow_packet_id":2,"flow_first_seen":1569520470741,"flow_last_seen":1569520470768,"flow_tot_l4_data_len":104,"flow_min_l4_data_len":44,"flow_max_l4_data_len":60,"flow_avg_l4_data_len":52,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62563,"dst_port":53,"l4_proto":"udp"}
+0512{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1569520467811,"flow_last_seen":1569520471399,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"62.149.152.153","src_port":54341,"dst_port":993,"l4_proto":"tcp","ndpi": {"proto":"IMAPS","category":"Email"}}
+0464{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":3,"flow_packet_id":2,"flow_first_seen":1569520467811,"flow_last_seen":1569520471399,"flow_tot_l4_data_len":158,"flow_min_l4_data_len":79,"flow_max_l4_data_len":79,"flow_avg_l4_data_len":79,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"62.149.152.153","src_port":54341,"dst_port":993,"l4_proto":"tcp"}
+0466{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":31,"flow_packet_id":7,"flow_first_seen":1569520471915,"flow_last_seen":1569520473157,"flow_tot_l4_data_len":387,"flow_min_l4_data_len":21,"flow_max_l4_data_len":115,"flow_avg_l4_data_len":55,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":60620,"dst_port":8801,"l4_proto":"udp"}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":4,"flow_packet_id":1,"flow_first_seen":1569520468207,"flow_last_seen":1569520468207,"flow_tot_l4_data_len":134,"flow_min_l4_data_len":134,"flow_max_l4_data_len":134,"flow_avg_l4_data_len":134,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"239.255.255.250","src_port":57025,"dst_port":1900,"l4_proto":"udp"}
+0520{"flow_event_id":4,"flow_event_name":"guessed","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":15,"flow_packet_id":16,"flow_first_seen":1569520469341,"flow_last_seen":1569520469413,"flow_tot_l4_data_len":6295,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":393,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"35.186.224.53","src_port":53872,"dst_port":443,"l4_proto":"tcp","ndpi": {"proto":"TLS.Google","category":"Web"}}
+0469{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":15,"flow_packet_id":16,"flow_first_seen":1569520469341,"flow_last_seen":1569520469413,"flow_tot_l4_data_len":6295,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1450,"flow_avg_l4_data_len":393,"midstream":1,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"35.186.224.53","src_port":53872,"dst_port":443,"l4_proto":"tcp"}
+0471{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":29,"flow_packet_id":210,"flow_first_seen":1569520471189,"flow_last_seen":1569520473190,"flow_tot_l4_data_len":64504,"flow_min_l4_data_len":32,"flow_max_l4_data_len":1472,"flow_avg_l4_data_len":307,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"109.94.160.99","src_port":54871,"dst_port":443,"l4_proto":"tcp"}
+0460{"flow_event_id":3,"flow_event_name":"idle","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap","flow_id":19,"flow_packet_id":2,"flow_first_seen":1569520469984,"flow_last_seen":1569520470021,"flow_tot_l4_data_len":92,"flow_min_l4_data_len":38,"flow_max_l4_data_len":54,"flow_avg_l4_data_len":46,"midstream":0,"l3_proto":"ip4","src_ip":"192.168.1.117","dst_ip":"192.168.1.1","src_port":62988,"dst_port":53,"l4_proto":"udp"}
+0142{"daemon_event_id":3,"daemon_event_name":"shutdown","thread_id":0,"packet_id":700,"source":"\/home\/toni\/git\/nDPI\/tests\/pcap\/zoom.pcap"}
-- 
cgit v1.2.3